From 23971375789b48c41c3eefa7fa0495279774e387 Mon Sep 17 00:00:00 2001
From: "Made I.T" <info@madeit.be>
Date: Mon, 27 Nov 2017 11:16:52 +0100
Subject: [PATCH 0001/2300] Add CAA record to is_dns_type_format_valid

---
 func/main.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index f0041778..d005f2d3 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -628,7 +628,7 @@ is_dbuser_format_valid() {
 
 # DNS record type validator
 is_dns_type_format_valid() {
-    known_dnstype='A,AAAA,NS,CNAME,MX,TXT,SRV,DNSKEY,KEY,IPSECKEY,PTR,SPF,TLSA'
+    known_dnstype='A,AAAA,NS,CNAME,MX,TXT,SRV,DNSKEY,KEY,IPSECKEY,PTR,SPF,TLSA,CAA'
     if [ -z "$(echo $known_dnstype |grep -w $1)" ]; then
         check_result $E_INVALID "invalid dns record type format :: $1"
     fi

From d9686a59f2cdd72b1d0b9d0c70e04eb4d1a3238c Mon Sep 17 00:00:00 2001
From: "Made I.T" <info@madeit.be>
Date: Mon, 27 Nov 2017 11:17:47 +0100
Subject: [PATCH 0002/2300] Add CAA record to web template

---
 web/templates/admin/add_dns_rec.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/templates/admin/add_dns_rec.html b/web/templates/admin/add_dns_rec.html
index 2c8bebd7..33b4a9be 100644
--- a/web/templates/admin/add_dns_rec.html
+++ b/web/templates/admin/add_dns_rec.html
@@ -82,6 +82,7 @@
                                         <option value="PTR" <?php if ($v_type == 'PTR') echo selected; ?>>PTR</option>
                                         <option value="SPF" <?php if ($v_type == 'SPF') echo selected; ?>>SPF</option>
                                         <option value="TLSA" <?php if ($v_type == 'TLSA') echo selected; ?>>TLSA</option>
+                                        <option value="CAA" <?php if ($v_type == 'CAA') echo selected; ?>>CAA</option>
                                     </select>
                                 </td>
                             </tr>

From 3d6eb2c8eab992b560e6452e0f3a465bcaebe10b Mon Sep 17 00:00:00 2001
From: "Made I.T" <info@madeit.be>
Date: Mon, 27 Nov 2017 11:42:49 +0100
Subject: [PATCH 0003/2300] Update v-add-dns-record

---
 bin/v-add-dns-record | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/bin/v-add-dns-record b/bin/v-add-dns-record
index 2b4c52ca..bbf8edd8 100755
--- a/bin/v-add-dns-record
+++ b/bin/v-add-dns-record
@@ -45,10 +45,12 @@ if [[ $rtype =~ NS|CNAME|MX|PTR|SRV ]]; then
     fi
 fi
 
-dvalue=${dvalue//\"/}
+if [ $rtype != "CAA" ]; then
+    dvalue=${dvalue//\"/}
 
-if [[ "$dvalue" =~ [\;[:space:]] ]]; then
-    dvalue='"'"$dvalue"'"'
+    if [[ "$dvalue" =~ [\;[:space:]] ]]; then
+        dvalue='"'"$dvalue"'"'
+    fi
 fi
 
 # Additional argument formatting

From 02afaffa7353368f97413a7e6e4a67c1a8b0a1ea Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 29 Dec 2017 22:02:01 +0200
Subject: [PATCH 0004/2300] Debian 9 Support

---
 install/vst-install-debian.sh | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)
 mode change 100755 => 100644 install/vst-install-debian.sh

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
old mode 100755
new mode 100644
index 259b8ab0..41ab0063
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -18,7 +18,19 @@ release=$(cat /etc/debian_version|grep -o [0-9]|head -n1)
 codename="$(cat /etc/os-release |grep VERSION= |cut -f 2 -d \(|cut -f 1 -d \))"
 vestacp="http://$CHOST/$VERSION/$release"
 
-if [ "$release" -eq 8 ]; then
+if [ "$release" -eq 9 ]; then
+    software="nginx apache2 apache2-utils apache2-suexec-custom
+        libapache2-mod-ruid2 libapache2-mod-fcgid libapache2-mod-php php
+        php-common php-cgi php-mysql php-curl php-fpm php-pgsql awstats
+        webalizer vsftpd proftpd-basic bind9 exim4 exim4-daemon-heavy
+        clamav-daemon spamassassin dovecot-imapd dovecot-pop3d roundcube-core
+        roundcube-mysql roundcube-plugins mysql-server mysql-common
+        mysql-client postgresql postgresql-contrib phppgadmin phpmyadmin mc
+        flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
+        e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
+        bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
+        unrar-free vim-common vesta-ioncube vesta-softaculous"
+elif [ "$release" -eq 8 ]; then
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2
         libapache2-mod-fcgid libapache2-mod-php5 php5 php5-common php5-cgi

From 80f65d54debc998fe4cb55283032a4d1f3fab368 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sat, 30 Dec 2017 11:19:25 +0200
Subject: [PATCH 0005/2300] oldstyle config for dovecot

---
 install/rhel/6/dovecot/conf.d/20-imap.conf | 34 ++++++++--------------
 install/rhel/7/dovecot/conf.d/20-imap.conf | 34 ++++++++--------------
 2 files changed, 24 insertions(+), 44 deletions(-)

diff --git a/install/rhel/6/dovecot/conf.d/20-imap.conf b/install/rhel/6/dovecot/conf.d/20-imap.conf
index 2e740d49..fe1d2d75 100644
--- a/install/rhel/6/dovecot/conf.d/20-imap.conf
+++ b/install/rhel/6/dovecot/conf.d/20-imap.conf
@@ -2,25 +2,15 @@
 ## IMAP specific settings
 ##
 
-protocol imap {
-  namespace inbox {
-    inbox = yes
-
-    mailbox Trash {
-      auto = subscribe #Autocreate/subscribe mailbox? no, create or subscribe values
-      special_use = \Trash
-    }
-    mailbox Sent {
-      auto = subscribe #Autocreate/subscribe mailbox? no, create or subscribe values
-      special_use = \Sent
-    }
-    mailbox Spam {
-      auto = subscribe #Autocreate/subscribe mailbox? no, create or subscribe values
-      special_use = \Junk
-    }
-    mailbox Drafts {
-      auto = subscribe #Autocreate/subscribe mailbox? no, create or subscribe values
-      special_use = \Drafts
-    }
-  }
-}
\ No newline at end of file
+plugin {
+  autocreate = Trash
+  autocreate2 = Spam
+  autocreate3 = Sent
+  autocreate4 = Drafts
+  #autocreate5 = Custom
+  autosubscribe = Trash
+  autosubscribe2 = Spam
+  autosubscribe3 = Sent
+  autosubscribe4 = Drafts
+  #autosubscribe5 = Custom
+}
diff --git a/install/rhel/7/dovecot/conf.d/20-imap.conf b/install/rhel/7/dovecot/conf.d/20-imap.conf
index 2e740d49..fe1d2d75 100644
--- a/install/rhel/7/dovecot/conf.d/20-imap.conf
+++ b/install/rhel/7/dovecot/conf.d/20-imap.conf
@@ -2,25 +2,15 @@
 ## IMAP specific settings
 ##
 
-protocol imap {
-  namespace inbox {
-    inbox = yes
-
-    mailbox Trash {
-      auto = subscribe #Autocreate/subscribe mailbox? no, create or subscribe values
-      special_use = \Trash
-    }
-    mailbox Sent {
-      auto = subscribe #Autocreate/subscribe mailbox? no, create or subscribe values
-      special_use = \Sent
-    }
-    mailbox Spam {
-      auto = subscribe #Autocreate/subscribe mailbox? no, create or subscribe values
-      special_use = \Junk
-    }
-    mailbox Drafts {
-      auto = subscribe #Autocreate/subscribe mailbox? no, create or subscribe values
-      special_use = \Drafts
-    }
-  }
-}
\ No newline at end of file
+plugin {
+  autocreate = Trash
+  autocreate2 = Spam
+  autocreate3 = Sent
+  autocreate4 = Drafts
+  #autocreate5 = Custom
+  autosubscribe = Trash
+  autosubscribe2 = Spam
+  autosubscribe3 = Sent
+  autosubscribe4 = Drafts
+  #autosubscribe5 = Custom
+}

From 6da6d38cfdc17b1b8d085ab9d9cac78434cfa6f8 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sat, 30 Dec 2017 12:01:58 +0200
Subject: [PATCH 0006/2300] install configs for debian 9

---
 install/debian/9/apache2/apache2.conf         |  94 ++
 install/debian/9/apache2/status.conf          |   8 +
 install/debian/9/bind/named.conf              |  12 +
 install/debian/9/clamav/clamd.conf            |  61 ++
 install/debian/9/deb_signing.key              |  30 +
 install/debian/9/dovecot/conf.d/10-auth.conf  |   4 +
 .../debian/9/dovecot/conf.d/10-logging.conf   |   1 +
 install/debian/9/dovecot/conf.d/10-mail.conf  |   4 +
 .../debian/9/dovecot/conf.d/10-master.conf    |  29 +
 install/debian/9/dovecot/conf.d/10-ssl.conf   |   3 +
 install/debian/9/dovecot/conf.d/20-imap.conf  |  58 ++
 install/debian/9/dovecot/conf.d/20-pop3.conf  |  91 ++
 .../9/dovecot/conf.d/auth-passwdfile.conf.ext |   9 +
 install/debian/9/dovecot/dovecot.conf         |   4 +
 install/debian/9/exim/dnsbl.conf              |   2 +
 install/debian/9/exim/exim4.conf.template     | 382 ++++++++
 install/debian/9/exim/spam-blocks.conf        |   0
 install/debian/9/fail2ban/action.d/vesta.conf |   9 +
 install/debian/9/fail2ban/filter.d/vesta.conf |  10 +
 install/debian/9/fail2ban/jail.local          |  39 +
 install/debian/9/firewall/ports.conf          |  17 +
 install/debian/9/firewall/rules.conf          |  11 +
 install/debian/9/logrotate/apache2            |  19 +
 install/debian/9/logrotate/dovecot            |  12 +
 install/debian/9/logrotate/nginx              |  13 +
 install/debian/9/logrotate/vesta              |   7 +
 install/debian/9/mysql/my-large.cnf           |  42 +
 install/debian/9/mysql/my-medium.cnf          |  40 +
 install/debian/9/mysql/my-small.cnf           |  40 +
 install/debian/9/nginx/nginx.conf             | 137 +++
 install/debian/9/nginx/phpmyadmin.inc         |  18 +
 install/debian/9/nginx/phppgadmin.inc         |  11 +
 install/debian/9/nginx/status.conf            |   9 +
 install/debian/9/nginx/webmail.inc            |  15 +
 install/debian/9/packages/default.pkg         |  18 +
 install/debian/9/packages/gainsboro.pkg       |  18 +
 install/debian/9/packages/palegreen.pkg       |  18 +
 install/debian/9/packages/slategrey.pkg       |  18 +
 install/debian/9/pga/config.inc.php           | 159 ++++
 install/debian/9/pga/phppgadmin.conf          |  31 +
 install/debian/9/php5-fpm/www.conf            |  11 +
 install/debian/9/pma/apache.conf              |  42 +
 install/debian/9/pma/config.inc.php           | 146 +++
 install/debian/9/postgresql/pg_hba.conf       |  11 +
 install/debian/9/proftpd/proftpd.conf         |  32 +
 install/debian/9/roundcube/apache.conf        |  40 +
 install/debian/9/roundcube/config.inc.php     |  33 +
 install/debian/9/roundcube/db.inc.php         |  66 ++
 install/debian/9/roundcube/main.inc.php       | 850 ++++++++++++++++++
 install/debian/9/roundcube/vesta.php          |  73 ++
 install/debian/9/sudo/admin                   |   8 +
 install/debian/9/templates/dns/child-ns.tpl   |  14 +
 install/debian/9/templates/dns/default.tpl    |  18 +
 install/debian/9/templates/dns/gmail.tpl      |  12 +
 .../9/templates/web/apache2/basedir.stpl      |  44 +
 .../9/templates/web/apache2/basedir.tpl       |  38 +
 .../9/templates/web/apache2/default.stpl      |  43 +
 .../9/templates/web/apache2/default.tpl       |  37 +
 .../9/templates/web/apache2/hosting.stpl      |  49 +
 .../9/templates/web/apache2/hosting.tpl       |  43 +
 .../debian/9/templates/web/apache2/phpcgi.sh  |  16 +
 .../9/templates/web/apache2/phpcgi.stpl       |  38 +
 .../debian/9/templates/web/apache2/phpcgi.tpl |  31 +
 .../9/templates/web/apache2/phpfcgid.sh       |  22 +
 .../9/templates/web/apache2/phpfcgid.stpl     |  39 +
 .../9/templates/web/apache2/phpfcgid.tpl      |  31 +
 .../9/templates/web/awstats/awstats.tpl       | 133 +++
 .../debian/9/templates/web/awstats/index.tpl  |  10 +
 .../debian/9/templates/web/awstats/nav.tpl    |  23 +
 .../debian/9/templates/web/nginx/caching.sh   |  19 +
 .../debian/9/templates/web/nginx/caching.stpl |  44 +
 .../debian/9/templates/web/nginx/caching.tpl  |  41 +
 .../debian/9/templates/web/nginx/default.stpl |  36 +
 .../debian/9/templates/web/nginx/default.tpl  |  33 +
 .../debian/9/templates/web/nginx/hosting.sh   |  11 +
 .../debian/9/templates/web/nginx/hosting.stpl |  38 +
 .../debian/9/templates/web/nginx/hosting.tpl  |  35 +
 .../debian/9/templates/web/nginx/http2.stpl   |  36 +
 .../debian/9/templates/web/nginx/http2.tpl    |  33 +
 .../web/nginx/php-fpm/cms_made_simple.stpl    |  56 ++
 .../web/nginx/php-fpm/cms_made_simple.tpl     |  52 ++
 .../web/nginx/php-fpm/codeigniter2.stpl       |  61 ++
 .../web/nginx/php-fpm/codeigniter2.tpl        |  57 ++
 .../web/nginx/php-fpm/codeigniter3.stpl       |  56 ++
 .../web/nginx/php-fpm/codeigniter3.tpl        |  52 ++
 .../web/nginx/php-fpm/datalife_engine.stpl    | 127 +++
 .../web/nginx/php-fpm/datalife_engine.tpl     | 123 +++
 .../templates/web/nginx/php-fpm/default.stpl  |  55 ++
 .../9/templates/web/nginx/php-fpm/default.tpl |  51 ++
 .../templates/web/nginx/php-fpm/dokuwiki.stpl |  72 ++
 .../templates/web/nginx/php-fpm/dokuwiki.tpl  |  67 ++
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 101 +++
 .../9/templates/web/nginx/php-fpm/drupal6.tpl |  98 ++
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 101 +++
 .../9/templates/web/nginx/php-fpm/drupal7.tpl |  98 ++
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 102 +++
 .../9/templates/web/nginx/php-fpm/drupal8.tpl |  99 ++
 .../9/templates/web/nginx/php-fpm/joomla.stpl |  63 ++
 .../9/templates/web/nginx/php-fpm/joomla.tpl  |  59 ++
 .../templates/web/nginx/php-fpm/laravel.stpl  |  56 ++
 .../9/templates/web/nginx/php-fpm/laravel.tpl |  50 ++
 .../templates/web/nginx/php-fpm/magento.stpl  | 198 ++++
 .../9/templates/web/nginx/php-fpm/magento.tpl | 194 ++++
 .../9/templates/web/nginx/php-fpm/modx.stpl   |  69 ++
 .../9/templates/web/nginx/php-fpm/modx.tpl    |  65 ++
 .../9/templates/web/nginx/php-fpm/moodle.stpl |  90 ++
 .../9/templates/web/nginx/php-fpm/moodle.tpl  |  87 ++
 .../9/templates/web/nginx/php-fpm/no-php.stpl |  47 +
 .../9/templates/web/nginx/php-fpm/no-php.tpl  |  43 +
 .../9/templates/web/nginx/php-fpm/odoo.stpl   |  70 ++
 .../9/templates/web/nginx/php-fpm/odoo.tpl    |  66 ++
 .../templates/web/nginx/php-fpm/opencart.stpl |  59 ++
 .../templates/web/nginx/php-fpm/opencart.tpl  |  54 ++
 .../templates/web/nginx/php-fpm/owncloud.stpl |  85 ++
 .../templates/web/nginx/php-fpm/owncloud.tpl  |  81 ++
 .../9/templates/web/nginx/php-fpm/piwik.stpl  |  73 ++
 .../9/templates/web/nginx/php-fpm/piwik.tpl   |  69 ++
 .../templates/web/nginx/php-fpm/pyrocms.stpl  |  66 ++
 .../9/templates/web/nginx/php-fpm/pyrocms.tpl |  62 ++
 .../9/templates/web/nginx/php-fpm/sendy.stpl  |  88 ++
 .../9/templates/web/nginx/php-fpm/sendy.tpl   |  86 ++
 .../web/nginx/php-fpm/wordpress.stpl          |  55 ++
 .../templates/web/nginx/php-fpm/wordpress.tpl |  51 ++
 .../web/nginx/php-fpm/wordpress2.stpl         |  67 ++
 .../web/nginx/php-fpm/wordpress2.tpl          |  63 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.stpl |  72 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.tpl  |  67 ++
 .../debian/9/templates/web/nginx/proxy_ip.tpl |   9 +
 .../9/templates/web/php5-fpm/default.tpl      |  21 +
 .../9/templates/web/php5-fpm/no-php.tpl       |  20 +
 .../9/templates/web/php5-fpm/socket.tpl       |  24 +
 .../web/skel/document_errors/403.html         |  29 +
 .../web/skel/document_errors/404.html         |  28 +
 .../web/skel/document_errors/50x.html         |  29 +
 .../templates/web/skel/public_html/index.html |  26 +
 .../templates/web/skel/public_html/robots.txt |   3 +
 .../web/skel/public_shtml/index.html          |  26 +
 .../web/skel/public_shtml/robots.txt          |   3 +
 .../debian/9/templates/web/suspend/.htaccess  |   2 +
 .../debian/9/templates/web/suspend/index.html |  25 +
 .../9/templates/web/webalizer/webalizer.tpl   | 110 +++
 install/debian/9/vsftpd/vsftpd.conf           |  26 +
 142 files changed, 7846 insertions(+)
 create mode 100644 install/debian/9/apache2/apache2.conf
 create mode 100644 install/debian/9/apache2/status.conf
 create mode 100644 install/debian/9/bind/named.conf
 create mode 100644 install/debian/9/clamav/clamd.conf
 create mode 100644 install/debian/9/deb_signing.key
 create mode 100644 install/debian/9/dovecot/conf.d/10-auth.conf
 create mode 100644 install/debian/9/dovecot/conf.d/10-logging.conf
 create mode 100644 install/debian/9/dovecot/conf.d/10-mail.conf
 create mode 100644 install/debian/9/dovecot/conf.d/10-master.conf
 create mode 100644 install/debian/9/dovecot/conf.d/10-ssl.conf
 create mode 100644 install/debian/9/dovecot/conf.d/20-imap.conf
 create mode 100644 install/debian/9/dovecot/conf.d/20-pop3.conf
 create mode 100644 install/debian/9/dovecot/conf.d/auth-passwdfile.conf.ext
 create mode 100644 install/debian/9/dovecot/dovecot.conf
 create mode 100644 install/debian/9/exim/dnsbl.conf
 create mode 100644 install/debian/9/exim/exim4.conf.template
 create mode 100644 install/debian/9/exim/spam-blocks.conf
 create mode 100644 install/debian/9/fail2ban/action.d/vesta.conf
 create mode 100644 install/debian/9/fail2ban/filter.d/vesta.conf
 create mode 100644 install/debian/9/fail2ban/jail.local
 create mode 100644 install/debian/9/firewall/ports.conf
 create mode 100644 install/debian/9/firewall/rules.conf
 create mode 100644 install/debian/9/logrotate/apache2
 create mode 100644 install/debian/9/logrotate/dovecot
 create mode 100644 install/debian/9/logrotate/nginx
 create mode 100644 install/debian/9/logrotate/vesta
 create mode 100644 install/debian/9/mysql/my-large.cnf
 create mode 100644 install/debian/9/mysql/my-medium.cnf
 create mode 100644 install/debian/9/mysql/my-small.cnf
 create mode 100644 install/debian/9/nginx/nginx.conf
 create mode 100644 install/debian/9/nginx/phpmyadmin.inc
 create mode 100644 install/debian/9/nginx/phppgadmin.inc
 create mode 100644 install/debian/9/nginx/status.conf
 create mode 100644 install/debian/9/nginx/webmail.inc
 create mode 100644 install/debian/9/packages/default.pkg
 create mode 100644 install/debian/9/packages/gainsboro.pkg
 create mode 100644 install/debian/9/packages/palegreen.pkg
 create mode 100644 install/debian/9/packages/slategrey.pkg
 create mode 100644 install/debian/9/pga/config.inc.php
 create mode 100644 install/debian/9/pga/phppgadmin.conf
 create mode 100644 install/debian/9/php5-fpm/www.conf
 create mode 100644 install/debian/9/pma/apache.conf
 create mode 100644 install/debian/9/pma/config.inc.php
 create mode 100644 install/debian/9/postgresql/pg_hba.conf
 create mode 100644 install/debian/9/proftpd/proftpd.conf
 create mode 100644 install/debian/9/roundcube/apache.conf
 create mode 100644 install/debian/9/roundcube/config.inc.php
 create mode 100644 install/debian/9/roundcube/db.inc.php
 create mode 100644 install/debian/9/roundcube/main.inc.php
 create mode 100644 install/debian/9/roundcube/vesta.php
 create mode 100644 install/debian/9/sudo/admin
 create mode 100755 install/debian/9/templates/dns/child-ns.tpl
 create mode 100755 install/debian/9/templates/dns/default.tpl
 create mode 100755 install/debian/9/templates/dns/gmail.tpl
 create mode 100644 install/debian/9/templates/web/apache2/basedir.stpl
 create mode 100644 install/debian/9/templates/web/apache2/basedir.tpl
 create mode 100644 install/debian/9/templates/web/apache2/default.stpl
 create mode 100644 install/debian/9/templates/web/apache2/default.tpl
 create mode 100644 install/debian/9/templates/web/apache2/hosting.stpl
 create mode 100644 install/debian/9/templates/web/apache2/hosting.tpl
 create mode 100755 install/debian/9/templates/web/apache2/phpcgi.sh
 create mode 100644 install/debian/9/templates/web/apache2/phpcgi.stpl
 create mode 100644 install/debian/9/templates/web/apache2/phpcgi.tpl
 create mode 100755 install/debian/9/templates/web/apache2/phpfcgid.sh
 create mode 100644 install/debian/9/templates/web/apache2/phpfcgid.stpl
 create mode 100644 install/debian/9/templates/web/apache2/phpfcgid.tpl
 create mode 100755 install/debian/9/templates/web/awstats/awstats.tpl
 create mode 100755 install/debian/9/templates/web/awstats/index.tpl
 create mode 100755 install/debian/9/templates/web/awstats/nav.tpl
 create mode 100755 install/debian/9/templates/web/nginx/caching.sh
 create mode 100755 install/debian/9/templates/web/nginx/caching.stpl
 create mode 100755 install/debian/9/templates/web/nginx/caching.tpl
 create mode 100755 install/debian/9/templates/web/nginx/default.stpl
 create mode 100755 install/debian/9/templates/web/nginx/default.tpl
 create mode 100755 install/debian/9/templates/web/nginx/hosting.sh
 create mode 100755 install/debian/9/templates/web/nginx/hosting.stpl
 create mode 100755 install/debian/9/templates/web/nginx/hosting.tpl
 create mode 100644 install/debian/9/templates/web/nginx/http2.stpl
 create mode 100644 install/debian/9/templates/web/nginx/http2.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/cms_made_simple.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/cms_made_simple.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/codeigniter2.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/codeigniter2.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/codeigniter3.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/codeigniter3.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/datalife_engine.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/datalife_engine.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/default.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/default.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/dokuwiki.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/dokuwiki.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/drupal6.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/drupal6.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/joomla.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/joomla.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/laravel.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/laravel.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/magento.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/magento.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/modx.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/modx.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/moodle.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/moodle.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/no-php.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/no-php.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/odoo.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/odoo.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/opencart.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/opencart.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/owncloud.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/owncloud.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/piwik.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/piwik.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/pyrocms.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/pyrocms.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/sendy.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/sendy.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/wordpress.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/wordpress.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/wordpress2.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/wordpress2.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
 create mode 100755 install/debian/9/templates/web/nginx/proxy_ip.tpl
 create mode 100644 install/debian/9/templates/web/php5-fpm/default.tpl
 create mode 100644 install/debian/9/templates/web/php5-fpm/no-php.tpl
 create mode 100644 install/debian/9/templates/web/php5-fpm/socket.tpl
 create mode 100755 install/debian/9/templates/web/skel/document_errors/403.html
 create mode 100755 install/debian/9/templates/web/skel/document_errors/404.html
 create mode 100755 install/debian/9/templates/web/skel/document_errors/50x.html
 create mode 100755 install/debian/9/templates/web/skel/public_html/index.html
 create mode 100755 install/debian/9/templates/web/skel/public_html/robots.txt
 create mode 100755 install/debian/9/templates/web/skel/public_shtml/index.html
 create mode 100755 install/debian/9/templates/web/skel/public_shtml/robots.txt
 create mode 100755 install/debian/9/templates/web/suspend/.htaccess
 create mode 100755 install/debian/9/templates/web/suspend/index.html
 create mode 100755 install/debian/9/templates/web/webalizer/webalizer.tpl
 create mode 100644 install/debian/9/vsftpd/vsftpd.conf

diff --git a/install/debian/9/apache2/apache2.conf b/install/debian/9/apache2/apache2.conf
new file mode 100644
index 00000000..2756132a
--- /dev/null
+++ b/install/debian/9/apache2/apache2.conf
@@ -0,0 +1,94 @@
+# It is split into several files forming the configuration hierarchy outlined
+# below, all located in the /etc/apache2/ directory:
+#
+#	/etc/apache2/
+#	|-- apache2.conf
+#	|	`--  ports.conf
+#	|-- mods-enabled
+#	|	|-- *.load
+#	|	`-- *.conf
+#	|-- conf.d
+#	|	`-- *
+
+# Global configuration
+PidFile ${APACHE_PID_FILE}
+Timeout 30
+KeepAlive Off
+MaxKeepAliveRequests 100
+KeepAliveTimeout 10
+
+<IfModule mpm_prefork_module>
+    StartServers          8
+    MinSpareServers       5
+    MaxSpareServers      20
+    ServerLimit         256
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_worker_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_event_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+# These need to be set in /etc/apache2/envvars
+User ${APACHE_RUN_USER}
+Group ${APACHE_RUN_GROUP}
+#User www-data
+#Group www-data
+
+AccessFileName .htaccess
+
+<Files ~ "^\.ht">
+    Order allow,deny
+    Deny from all
+    Satisfy all
+</Files>
+
+DefaultType None
+HostnameLookups Off
+
+ErrorLog ${APACHE_LOG_DIR}/error.log
+LogLevel warn
+
+# Include module configuration:
+Include mods-enabled/*.load
+Include mods-enabled/*.conf
+
+# Include list of ports to listen on and which to use for name based vhosts
+Include ports.conf
+
+LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
+LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
+LogFormat "%h %l %u %t \"%r\" %>s %O" common
+LogFormat "%{Referer}i -> %U" referer
+LogFormat "%{User-agent}i" agent
+LogFormat "%b" bytes
+
+Include conf.d/
+
+# Include the virtual host configurations:
+#Include sites-enabled/
+
+ErrorDocument 403 /error/403.html
+ErrorDocument 404 /error/404.html
+ErrorDocument 500 /error/50x.html
+ErrorDocument 501 /error/50x.html
+ErrorDocument 502 /error/50x.html
+ErrorDocument 503 /error/50x.html
+ErrorDocument 506 /error/50x.html
diff --git a/install/debian/9/apache2/status.conf b/install/debian/9/apache2/status.conf
new file mode 100644
index 00000000..da9d9633
--- /dev/null
+++ b/install/debian/9/apache2/status.conf
@@ -0,0 +1,8 @@
+Listen 127.0.0.1:8081
+<Location /server-status>
+    SetHandler server-status
+    Order deny,allow
+    Deny from all
+    Allow from 127.0.0.1
+    Allow from all
+</Location>
diff --git a/install/debian/9/bind/named.conf b/install/debian/9/bind/named.conf
new file mode 100644
index 00000000..ed6ece88
--- /dev/null
+++ b/install/debian/9/bind/named.conf
@@ -0,0 +1,12 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
+
diff --git a/install/debian/9/clamav/clamd.conf b/install/debian/9/clamav/clamd.conf
new file mode 100644
index 00000000..4e04356e
--- /dev/null
+++ b/install/debian/9/clamav/clamd.conf
@@ -0,0 +1,61 @@
+#Automatically Generated by clamav-base postinst
+#To reconfigure clamd run #dpkg-reconfigure clamav-base
+#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
+LocalSocket /var/run/clamav/clamd.ctl
+FixStaleSocket true
+LocalSocketGroup clamav
+LocalSocketMode 666
+# TemporaryDirectory is not set to its default /tmp here to make overriding
+# the default with environment variables TMPDIR/TMP/TEMP possible
+User clamav
+# AllowSupplementaryGroups true
+ScanMail true
+ScanArchive true
+ArchiveBlockEncrypted false
+MaxDirectoryRecursion 15
+FollowDirectorySymlinks false
+FollowFileSymlinks false
+ReadTimeout 180
+MaxThreads 12
+MaxConnectionQueueLength 15
+LogSyslog false
+LogFacility LOG_LOCAL6
+LogClean false
+LogVerbose true
+PidFile /var/run/clamav/clamd.pid
+DatabaseDirectory /var/lib/clamav
+SelfCheck 3600
+Foreground false
+Debug false
+ScanPE true
+ScanOLE2 true
+ScanHTML true
+DetectBrokenExecutables false
+ExitOnOOM false
+LeaveTemporaryFiles false
+AlgorithmicDetection true
+ScanELF true
+IdleTimeout 30
+PhishingSignatures true
+PhishingScanURLs true
+PhishingAlwaysBlockSSLMismatch false
+PhishingAlwaysBlockCloak false
+DetectPUA false
+ScanPartialMessages false
+HeuristicScanPrecedence false
+StructuredDataDetection false
+CommandReadTimeout 5
+SendBufTimeout 200
+MaxQueue 100
+ExtendedDetectionInfo true
+OLE2BlockMacros false
+StreamMaxLength 25M
+LogFile /var/log/clamav/clamav.log
+LogTime true
+LogFileUnlock false
+LogFileMaxSize 0
+Bytecode true
+BytecodeSecurity TrustSigned
+BytecodeTimeout 60000
+OfficialDatabaseOnly false
+CrossFilesystems true
diff --git a/install/debian/9/deb_signing.key b/install/debian/9/deb_signing.key
new file mode 100644
index 00000000..2ad2db8b
--- /dev/null
+++ b/install/debian/9/deb_signing.key
@@ -0,0 +1,30 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.12 (GNU/Linux)
+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+=J2HJ
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/install/debian/9/dovecot/conf.d/10-auth.conf b/install/debian/9/dovecot/conf.d/10-auth.conf
new file mode 100644
index 00000000..dfcc8311
--- /dev/null
+++ b/install/debian/9/dovecot/conf.d/10-auth.conf
@@ -0,0 +1,4 @@
+disable_plaintext_auth = no
+auth_verbose = yes
+auth_mechanisms = plain login
+!include auth-passwdfile.conf.ext
diff --git a/install/debian/9/dovecot/conf.d/10-logging.conf b/install/debian/9/dovecot/conf.d/10-logging.conf
new file mode 100644
index 00000000..a5f207d5
--- /dev/null
+++ b/install/debian/9/dovecot/conf.d/10-logging.conf
@@ -0,0 +1 @@
+log_path = /var/log/dovecot.log
diff --git a/install/debian/9/dovecot/conf.d/10-mail.conf b/install/debian/9/dovecot/conf.d/10-mail.conf
new file mode 100644
index 00000000..55313419
--- /dev/null
+++ b/install/debian/9/dovecot/conf.d/10-mail.conf
@@ -0,0 +1,4 @@
+mail_privileged_group = mail
+mail_access_groups = mail
+mail_location = maildir:%h/mail/%d/%n
+pop3_uidl_format = %08Xu%08Xv
diff --git a/install/debian/9/dovecot/conf.d/10-master.conf b/install/debian/9/dovecot/conf.d/10-master.conf
new file mode 100644
index 00000000..a75a9aaa
--- /dev/null
+++ b/install/debian/9/dovecot/conf.d/10-master.conf
@@ -0,0 +1,29 @@
+service imap-login {
+  inet_listener imap {
+  }
+  inet_listener imaps {
+  }
+}
+
+service pop3-login {
+  inet_listener pop3 {
+  }
+  inet_listener pop3s {
+  }
+}
+
+
+service imap {
+}
+
+service pop3 {
+}
+
+service auth {
+  unix_listener auth-client {
+    group = mail
+    mode = 0660
+    user = dovecot
+  }
+  user = dovecot
+}
diff --git a/install/debian/9/dovecot/conf.d/10-ssl.conf b/install/debian/9/dovecot/conf.d/10-ssl.conf
new file mode 100644
index 00000000..3aaff6ee
--- /dev/null
+++ b/install/debian/9/dovecot/conf.d/10-ssl.conf
@@ -0,0 +1,3 @@
+ssl = yes
+ssl_cert = </usr/local/vesta/ssl/certificate.crt
+ssl_key = </usr/local/vesta/ssl/certificate.key
diff --git a/install/debian/9/dovecot/conf.d/20-imap.conf b/install/debian/9/dovecot/conf.d/20-imap.conf
new file mode 100644
index 00000000..1a459f8e
--- /dev/null
+++ b/install/debian/9/dovecot/conf.d/20-imap.conf
@@ -0,0 +1,58 @@
+##
+## IMAP specific settings
+##
+
+protocol imap {
+  # Maximum IMAP command line length. Some clients generate very long command
+  # lines with huge mailboxes, so you may need to raise this if you get
+  # "Too long argument" or "IMAP command line too large" errors often.
+  #imap_max_line_length = 64k
+
+  # Maximum number of IMAP connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  #mail_max_userip_connections = 10
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # IMAP logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #imap_logout_format = bytes=%i/%o
+
+  # Override the IMAP CAPABILITY response. If the value begins with '+',
+  # add the given capabilities on top of the defaults (e.g. +XFOO XBAR).
+  #imap_capability = 
+
+  # How long to wait between "OK Still here" notifications when client is
+  # IDLEing.
+  #imap_idle_notify_interval = 2 mins
+
+  # ID field names and values to send to clients. Using * as the value makes
+  # Dovecot use the default value. The following fields have default values
+  # currently: name, version, os, os-version, support-url, support-email.
+  #imap_id_send = 
+
+  # ID fields sent by client to log. * means everything.
+  #imap_id_log =
+
+  # Workarounds for various client bugs:
+  #   delay-newmail:
+  #     Send EXISTS/RECENT new mail notifications only when replying to NOOP
+  #     and CHECK commands. Some clients ignore them otherwise, for example OSX
+  #     Mail (<v2.1). Outlook Express breaks more badly though, without this it
+  #     may show user "Message no longer in server" errors. Note that OE6 still
+  #     breaks even with this workaround if synchronization is set to
+  #     "Headers Only".
+  #   tb-extra-mailbox-sep:
+  #     Thunderbird gets somehow confused with LAYOUT=fs (mbox and dbox) and
+  #     adds extra '/' suffixes to mailbox names. This option causes Dovecot to
+  #     ignore the extra '/' instead of treating it as invalid mailbox name.
+  #   tb-lsub-flags:
+  #     Show \Noselect flags for LSUB replies with LAYOUT=fs (e.g. mbox).
+  #     This makes Thunderbird realize they aren't selectable and show them
+  #     greyed out, instead of only later giving "not selectable" popup error.
+  #
+  # The list is space-separated.
+  #imap_client_workarounds = 
+}
diff --git a/install/debian/9/dovecot/conf.d/20-pop3.conf b/install/debian/9/dovecot/conf.d/20-pop3.conf
new file mode 100644
index 00000000..a3a43b88
--- /dev/null
+++ b/install/debian/9/dovecot/conf.d/20-pop3.conf
@@ -0,0 +1,91 @@
+##
+## POP3 specific settings
+##
+
+protocol pop3 {
+  # Don't try to set mails non-recent or seen with POP3 sessions. This is
+  # mostly intended to reduce disk I/O. With maildir it doesn't move files
+  # from new/ to cur/, with mbox it doesn't write Status-header.
+  #pop3_no_flag_updates = no
+
+  # Support LAST command which exists in old POP3 specs, but has been removed
+  # from new ones. Some clients still wish to use this though. Enabling this
+  # makes RSET command clear all \Seen flags from messages.
+  #pop3_enable_last = no
+
+  # If mail has X-UIDL header, use it as the mail's UIDL.
+  #pop3_reuse_xuidl = no
+
+  # Keep the mailbox locked for the entire POP3 session.
+  #pop3_lock_session = no
+
+  # POP3 requires message sizes to be listed as if they had CR+LF linefeeds.
+  # Many POP3 servers violate this by returning the sizes with LF linefeeds,
+  # because it's faster to get. When this setting is enabled, Dovecot still
+  # tries to do the right thing first, but if that requires opening the
+  # message, it fallbacks to the easier (but incorrect) size.
+  #pop3_fast_size_lookups = no
+
+  # POP3 UIDL (unique mail identifier) format to use. You can use following
+  # variables, along with the variable modifiers described in
+  # doc/wiki/Variables.txt (e.g. %Uf for the filename in uppercase)
+  #
+  #  %v - Mailbox's IMAP UIDVALIDITY
+  #  %u - Mail's IMAP UID
+  #  %m - MD5 sum of the mailbox headers in hex (mbox only)
+  #  %f - filename (maildir only)
+  #  %g - Mail's GUID
+  #
+  # If you want UIDL compatibility with other POP3 servers, use:
+  #  UW's ipop3d         : %08Xv%08Xu
+  #  Courier             : %f or %v-%u (both might be used simultaneosly)
+  #  Cyrus (<= 2.1.3)    : %u
+  #  Cyrus (>= 2.1.4)    : %v.%u
+  #  Dovecot v0.99.x     : %v.%u
+  #  tpop3d              : %Mf
+  #
+  # Note that Outlook 2003 seems to have problems with %v.%u format which was
+  # Dovecot's default, so if you're building a new server it would be a good
+  # idea to change this. %08Xu%08Xv should be pretty fail-safe.
+  #
+  #pop3_uidl_format = %08Xu%08Xv
+
+  # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes
+  # won't change those UIDLs. Currently this works only with Maildir.
+  #pop3_save_uidl = no
+
+  # What to do about duplicate UIDLs if they exist?
+  #   allow: Show duplicates to clients.
+  #   rename: Append a temporary -2, -3, etc. counter after the UIDL.
+  #pop3_uidl_duplicates = allow
+
+  # POP3 logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #  %t - number of TOP commands
+  #  %p - number of bytes sent to client as a result of TOP command
+  #  %r - number of RETR commands
+  #  %b - number of bytes sent to client as a result of RETR command
+  #  %d - number of deleted messages
+  #  %m - number of messages (before deletion)
+  #  %s - mailbox size in bytes (before deletion)
+  #  %u - old/new UIDL hash. may help finding out if UIDLs changed unexpectedly
+  #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
+
+  # Maximum number of POP3 connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  #mail_max_userip_connections = 10
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # Workarounds for various client bugs:
+  #   outlook-no-nuls:
+  #     Outlook and Outlook Express hang if mails contain NUL characters.
+  #     This setting replaces them with 0x80 character.
+  #   oe-ns-eoh:
+  #     Outlook Express and Netscape Mail breaks if end of headers-line is
+  #     missing. This option simply sends it if it's missing.
+  # The list is space-separated.
+  #pop3_client_workarounds = 
+}
diff --git a/install/debian/9/dovecot/conf.d/auth-passwdfile.conf.ext b/install/debian/9/dovecot/conf.d/auth-passwdfile.conf.ext
new file mode 100644
index 00000000..75e6e115
--- /dev/null
+++ b/install/debian/9/dovecot/conf.d/auth-passwdfile.conf.ext
@@ -0,0 +1,9 @@
+passdb {
+  driver = passwd-file
+  args = scheme=MD5-CRYPT username_format=%n /etc/exim4/domains/%d/passwd
+}
+
+userdb {
+  driver = passwd-file
+  args = username_format=%n /etc/exim4/domains/%d/passwd
+}
diff --git a/install/debian/9/dovecot/dovecot.conf b/install/debian/9/dovecot/dovecot.conf
new file mode 100644
index 00000000..0a855351
--- /dev/null
+++ b/install/debian/9/dovecot/dovecot.conf
@@ -0,0 +1,4 @@
+protocols = imap pop3
+listen = *, ::
+base_dir = /var/run/dovecot/
+!include conf.d/*.conf
diff --git a/install/debian/9/exim/dnsbl.conf b/install/debian/9/exim/dnsbl.conf
new file mode 100644
index 00000000..5166b255
--- /dev/null
+++ b/install/debian/9/exim/dnsbl.conf
@@ -0,0 +1,2 @@
+bl.spamcop.net
+zen.spamhaus.org
diff --git a/install/debian/9/exim/exim4.conf.template b/install/debian/9/exim/exim4.conf.template
new file mode 100644
index 00000000..bfb98e0b
--- /dev/null
+++ b/install/debian/9/exim/exim4.conf.template
@@ -0,0 +1,382 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+disable_ipv6=true
+add_environment=<; PATH=/bin:/usr/bin
+keep_environment=
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/certificate.crt
+tls_privatekey = /usr/local/vesta/ssl/certificate.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 5s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lc:${domain:$h_from:}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+begin acl
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth requried
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = *
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{100K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = nobody:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/$domain/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #helo_data = $sender_address_domain
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  from = "${local_part}@${domain}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################
diff --git a/install/debian/9/exim/spam-blocks.conf b/install/debian/9/exim/spam-blocks.conf
new file mode 100644
index 00000000..e69de29b
diff --git a/install/debian/9/fail2ban/action.d/vesta.conf b/install/debian/9/fail2ban/action.d/vesta.conf
new file mode 100644
index 00000000..0edfc349
--- /dev/null
+++ b/install/debian/9/fail2ban/action.d/vesta.conf
@@ -0,0 +1,9 @@
+# Fail2Ban configuration file for vesta
+
+[Definition]
+
+actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
+actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
+actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
+actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
+actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>
diff --git a/install/debian/9/fail2ban/filter.d/vesta.conf b/install/debian/9/fail2ban/filter.d/vesta.conf
new file mode 100644
index 00000000..36ec1001
--- /dev/null
+++ b/install/debian/9/fail2ban/filter.d/vesta.conf
@@ -0,0 +1,10 @@
+# Fail2Ban filter for unsuccessful Vesta authentication attempts
+#
+
+[INCLUDES]
+before = common.conf
+
+[Definition]
+failregex =  .* <HOST> failed to login
+ignoreregex =
+
diff --git a/install/debian/9/fail2ban/jail.local b/install/debian/9/fail2ban/jail.local
new file mode 100644
index 00000000..eccea068
--- /dev/null
+++ b/install/debian/9/fail2ban/jail.local
@@ -0,0 +1,39 @@
+[ssh-iptables]
+enabled  = true
+filter   = sshd
+action   = vesta[name=SSH]
+logpath  = /var/log/auth.log
+maxretry = 5
+
+[vsftpd-iptables]
+enabled  = false
+filter   = vsftpd
+action   = vesta[name=FTP]
+logpath  = /var/log/vsftpd.log
+maxretry = 5
+
+[exim-iptables]
+enabled = true
+filter  = exim
+action  = vesta[name=MAIL]
+logpath = /var/log/exim4/mainlog
+
+[dovecot-iptables]
+enabled = true
+filter  = dovecot
+action  = vesta[name=MAIL]
+logpath = /var/log/dovecot.log
+
+[mysqld-iptables]
+enabled  = false
+filter   = mysqld-auth
+action   = vesta[name=DB]
+logpath  = /var/log/mysql.log
+maxretry = 5
+
+[vesta-iptables]
+enabled = true
+filter  = vesta
+action  = vesta[name=VESTA]
+logpath = /var/log/vesta/auth.log
+maxretry = 5
diff --git a/install/debian/9/firewall/ports.conf b/install/debian/9/firewall/ports.conf
new file mode 100644
index 00000000..b730d012
--- /dev/null
+++ b/install/debian/9/firewall/ports.conf
@@ -0,0 +1,17 @@
+PROTOCOL='TCP' PORT='20'
+PROTOCOL='TCP' PORT='21'
+PROTOCOL='TCP' PORT='22'
+PROTOCOL='TCP' PORT='25'
+PROTOCOL='TCP' PORT='53'
+PROTOCOL='UDP' PORT='53'
+PROTOCOL='TCP' PORT='80'
+PROTOCOL='TCP' PORT='443'
+PROTOCOL='TCP' PORT='110'
+PROTOCOL='UDP' PORT='123'
+PROTOCOL='TCP' PORT='143'
+PROTOCOL='TCP' PORT='3306'
+PROTOCOL='TCP' PORT='5432'
+PROTOCOL='TCP' PORT='8080'
+PROTOCOL='TCP' PORT='8433'
+PROTOCOL='TCP' PORT='8083'
+PROTOCOL='TCP' PORT='12000:12100'
diff --git a/install/debian/9/firewall/rules.conf b/install/debian/9/firewall/rules.conf
new file mode 100644
index 00000000..fba98e1e
--- /dev/null
+++ b/install/debian/9/firewall/rules.conf
@@ -0,0 +1,11 @@
+RULE='1' ACTION='ACCEPT' PROTOCOL='ICMP' PORT='0' IP='0.0.0.0/0' COMMENT='PING' SUSPENDED='no' TIME='17:13:48' DATE='2014-09-16'
+RULE='2' ACTION='ACCEPT' PROTOCOL='TCP' PORT='8083' IP='0.0.0.0/0' COMMENT='VESTA' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='3' ACTION='ACCEPT' PROTOCOL='TCP' PORT='3306,5432' IP='0.0.0.0/0' COMMENT='DB' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='4' ACTION='ACCEPT' PROTOCOL='TCP' PORT='143,993' IP='0.0.0.0/0' COMMENT='IMAP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='5' ACTION='ACCEPT' PROTOCOL='TCP' PORT='110,995' IP='0.0.0.0/0' COMMENT='POP3' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='6' ACTION='ACCEPT' PROTOCOL='TCP' PORT='25,465,587,2525' IP='0.0.0.0/0' COMMENT='SMTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='7' ACTION='ACCEPT' PROTOCOL='TCP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='8' ACTION='ACCEPT' PROTOCOL='UDP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='9' ACTION='ACCEPT' PROTOCOL='TCP' PORT='21,12000-12100' IP='0.0.0.0/0' COMMENT='FTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='10' ACTION='ACCEPT' PROTOCOL='TCP' PORT='80,443' IP='0.0.0.0/0' COMMENT='WEB' SUSPENDED='no' TIME='17:04:27' DATE='2014-09-24'
+RULE='11' ACTION='ACCEPT' PROTOCOL='TCP' PORT='22' IP='0.0.0.0/0' COMMENT='SSH' SUSPENDED='no' TIME='17:14:41' DATE='2014-09-16'
diff --git a/install/debian/9/logrotate/apache2 b/install/debian/9/logrotate/apache2
new file mode 100644
index 00000000..27629d0d
--- /dev/null
+++ b/install/debian/9/logrotate/apache2
@@ -0,0 +1,19 @@
+/var/log/apache2/*.log /var/log/apache2/domains/*log {
+        weekly
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 root adm
+        sharedscripts
+        postrotate
+                /etc/init.d/apache2 reload > /dev/null || true
+                [ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+        prerotate
+                if [ -d /etc/logrotate.d/httpd-prerotate ]; then \
+                        run-parts /etc/logrotate.d/httpd-prerotate; \
+                fi; \
+        endscript
+}
diff --git a/install/debian/9/logrotate/dovecot b/install/debian/9/logrotate/dovecot
new file mode 100644
index 00000000..ac4fd6e9
--- /dev/null
+++ b/install/debian/9/logrotate/dovecot
@@ -0,0 +1,12 @@
+/var/log/dovecot*.log {
+  weekly
+  rotate 4
+  missingok
+  notifempty
+  compress
+  delaycompress
+  sharedscripts
+  postrotate
+    doveadm log reopen
+  endscript
+}
diff --git a/install/debian/9/logrotate/nginx b/install/debian/9/logrotate/nginx
new file mode 100644
index 00000000..d667f213
--- /dev/null
+++ b/install/debian/9/logrotate/nginx
@@ -0,0 +1,13 @@
+/var/log/nginx/*log /var/log/nginx/domains/*log {
+        daily
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 nginx adm
+        sharedscripts
+        postrotate
+                [ -f /var/run/nginx.pid ] && kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+}
diff --git a/install/debian/9/logrotate/vesta b/install/debian/9/logrotate/vesta
new file mode 100644
index 00000000..027a3439
--- /dev/null
+++ b/install/debian/9/logrotate/vesta
@@ -0,0 +1,7 @@
+/usr/local/vesta/log/*.log {
+    missingok
+    notifempty
+    size 30k
+    yearly
+    create 0600 root root
+}
diff --git a/install/debian/9/mysql/my-large.cnf b/install/debian/9/mysql/my-large.cnf
new file mode 100644
index 00000000..d0bab390
--- /dev/null
+++ b/install/debian/9/mysql/my-large.cnf
@@ -0,0 +1,42 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 256M
+max_allowed_packet = 32M
+table_open_cache = 256
+sort_buffer_size = 1M
+read_buffer_size = 1M
+read_rnd_buffer_size = 4M
+myisam_sort_buffer_size = 64M
+thread_cache_size = 8
+query_cache_size= 16M
+thread_concurrency = 8
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=200
+max_user_connections=50
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/9/mysql/my-medium.cnf b/install/debian/9/mysql/my-medium.cnf
new file mode 100644
index 00000000..1c10ab9a
--- /dev/null
+++ b/install/debian/9/mysql/my-medium.cnf
@@ -0,0 +1,40 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+  
+skip-external-locking
+key_buffer_size = 16M
+max_allowed_packet = 16M
+table_open_cache = 64
+sort_buffer_size = 512K
+net_buffer_length = 8K
+read_buffer_size = 256K
+read_rnd_buffer_size = 512K
+myisam_sort_buffer_size = 8M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=70
+max_user_connections=30
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/9/mysql/my-small.cnf b/install/debian/9/mysql/my-small.cnf
new file mode 100644
index 00000000..26a80478
--- /dev/null
+++ b/install/debian/9/mysql/my-small.cnf
@@ -0,0 +1,40 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 16K
+max_allowed_packet = 1M
+table_open_cache = 4
+sort_buffer_size = 64K
+read_buffer_size = 256K
+read_rnd_buffer_size = 256K
+net_buffer_length = 2K
+thread_stack = 240K
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=30
+max_user_connections=20
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/9/nginx/nginx.conf b/install/debian/9/nginx/nginx.conf
new file mode 100644
index 00000000..1eef1672
--- /dev/null
+++ b/install/debian/9/nginx/nginx.conf
@@ -0,0 +1,137 @@
+# Server globals
+user                    www-data;
+worker_processes        auto;
+worker_rlimit_nofile    65535;
+timer_resolution         50ms; #In order to free some CPU cycles
+error_log               /var/log/nginx/error.log crit;
+pid                     /var/run/nginx.pid;
+
+
+# Worker config
+events {
+        worker_connections  1024;
+        use                 epoll;
+        multi_accept        on;
+}
+
+
+http {
+    # Main settings
+    sendfile                        on;
+    tcp_nopush                      on;
+    tcp_nodelay                     on;
+    client_header_timeout           1m;
+    client_body_timeout             1m;
+    client_header_buffer_size       2k;
+    client_body_buffer_size         256k;
+    client_max_body_size            256m;
+    large_client_header_buffers     4   8k;
+    send_timeout                    30;
+    keepalive_timeout               60 60;
+    reset_timedout_connection       on;
+    server_tokens                   off;
+    server_name_in_redirect         off;
+    server_names_hash_max_size      512;
+    server_names_hash_bucket_size   512;
+
+
+    # Log format
+    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
+                        '"$status" $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  bytes   '$body_bytes_sent';
+    #access_log          /var/log/nginx/access.log main;
+    access_log off;
+
+
+    # Mime settings
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+
+    # Compression
+    gzip                on;
+    gzip_comp_level     9;
+    gzip_min_length     512;
+    gzip_buffers        8 64k;
+    gzip_types          text/plain text/css text/javascript text/js text/xml application/json application/javascript application/x-javascript application/xml application/xml+rss application/x-font-ttf image/svg+xml font/opentype;
+    gzip_proxied        any;
+    gzip_disable        "MSIE [1-6]\.";
+
+    # Proxy settings
+    proxy_redirect      off;
+    proxy_set_header    Host            $host;
+    proxy_set_header    X-Real-IP       $remote_addr;
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_header   Set-Cookie;
+    proxy_connect_timeout   90;
+    proxy_send_timeout  90;
+    proxy_read_timeout  90;
+    proxy_buffers       32 4k;
+
+
+    # Cloudflare https://www.cloudflare.com/ips
+    set_real_ip_from 103.21.244.0/22;
+    set_real_ip_from 103.22.200.0/22;
+    set_real_ip_from 103.31.4.0/22;
+    set_real_ip_from 104.16.0.0/12;
+    set_real_ip_from 108.162.192.0/18;
+    set_real_ip_from 131.0.72.0/22;
+    set_real_ip_from 141.101.64.0/18;
+    set_real_ip_from 162.158.0.0/15;
+    set_real_ip_from 172.64.0.0/13;
+    set_real_ip_from 173.245.48.0/20;
+    set_real_ip_from 188.114.96.0/20;
+    set_real_ip_from 190.93.240.0/20;
+    set_real_ip_from 197.234.240.0/22;
+    set_real_ip_from 198.41.128.0/17;
+    set_real_ip_from 2400:cb00::/32;
+    set_real_ip_from 2606:4700::/32;
+    set_real_ip_from 2803:f800::/32;
+    set_real_ip_from 2405:b500::/32;
+    set_real_ip_from 2405:8100::/32;
+    set_real_ip_from 2c0f:f248::/32;
+    set_real_ip_from 2a06:98c0::/29;
+    real_ip_header     CF-Connecting-IP;
+
+
+    # SSL PCI Compliance
+    ssl_session_cache   shared:SSL:10m;
+    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
+
+
+    # Error pages
+    error_page          403          /error/403.html;
+    error_page          404          /error/404.html;
+    error_page          502 503 504  /error/50x.html;
+
+
+    # Cache settings
+    proxy_cache_path /var/cache/nginx levels=2 keys_zone=cache:10m inactive=60m max_size=1024m;
+    proxy_cache_key "$host$request_uri $cookie_user";
+    proxy_temp_path  /var/cache/nginx/temp;
+    proxy_ignore_headers Expires Cache-Control;
+    proxy_cache_use_stale error timeout invalid_header http_502;
+    proxy_cache_valid any 1d;
+
+
+    # Cache bypass
+    map $http_cookie $no_cache {
+        default 0;
+        ~SESS 1;
+        ~wordpress_logged_in 1;
+    }
+
+
+    # File cache settings
+    open_file_cache          max=10000 inactive=30s;
+    open_file_cache_valid    60s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors   off;
+
+
+    # Wildcard include
+    include             /etc/nginx/conf.d/*.conf;
+}
diff --git a/install/debian/9/nginx/phpmyadmin.inc b/install/debian/9/nginx/phpmyadmin.inc
new file mode 100644
index 00000000..1feb8546
--- /dev/null
+++ b/install/debian/9/nginx/phpmyadmin.inc
@@ -0,0 +1,18 @@
+location /phpmyadmin {
+    alias /usr/share/phpmyadmin/;
+
+    location ~ /(libraries|setup) {
+        return 404;
+    }
+
+    location ~ ^/phpmyadmin/(.*\.php)$ {
+        alias /usr/share/phpmyadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+    location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
+        root /usr/share/;
+    }
+}
diff --git a/install/debian/9/nginx/phppgadmin.inc b/install/debian/9/nginx/phppgadmin.inc
new file mode 100644
index 00000000..cd1e5806
--- /dev/null
+++ b/install/debian/9/nginx/phppgadmin.inc
@@ -0,0 +1,11 @@
+location /phppgadmin {
+    alias /usr/share/phppgadmin/;
+
+    location ~ ^/phppgadmin/(.*\.php)$ {
+        alias /usr/share/phppgadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/debian/9/nginx/status.conf b/install/debian/9/nginx/status.conf
new file mode 100644
index 00000000..c0bcd069
--- /dev/null
+++ b/install/debian/9/nginx/status.conf
@@ -0,0 +1,9 @@
+server {
+    listen       127.0.0.1:8084 default;
+    server_name  _;
+    server_name_in_redirect  off;
+    location / {
+        stub_status on;
+        access_log   off;
+   }
+}
diff --git a/install/debian/9/nginx/webmail.inc b/install/debian/9/nginx/webmail.inc
new file mode 100644
index 00000000..ad66895b
--- /dev/null
+++ b/install/debian/9/nginx/webmail.inc
@@ -0,0 +1,15 @@
+location /webmail {
+    alias /var/lib/roundcube/;
+
+    location ~ /(config|temp|logs) {
+        return 404;
+    }
+
+    location ~ ^/webmail/(.*\.php)$ {
+        alias /var/lib/roundcube/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/debian/9/packages/default.pkg b/install/debian/9/packages/default.pkg
new file mode 100644
index 00000000..c2a93574
--- /dev/null
+++ b/install/debian/9/packages/default.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='100'
+WEB_ALIASES='100'
+DNS_DOMAINS='100'
+DNS_RECORDS='100'
+MAIL_DOMAINS='100'
+MAIL_ACCOUNTS='100'
+DATABASES='100'
+CRON_JOBS='100'
+DISK_QUOTA='unlimited'
+BANDWIDTH='100000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='3'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/debian/9/packages/gainsboro.pkg b/install/debian/9/packages/gainsboro.pkg
new file mode 100644
index 00000000..76d7dae2
--- /dev/null
+++ b/install/debian/9/packages/gainsboro.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='10'
+WEB_ALIASES='10'
+DNS_DOMAINS='10'
+DNS_RECORDS='10'
+MAIL_DOMAINS='10'
+MAIL_ACCOUNTS='10'
+DATABASES='10'
+CRON_JOBS='10'
+DISK_QUOTA='10000'
+BANDWIDTH='10000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='1'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/debian/9/packages/palegreen.pkg b/install/debian/9/packages/palegreen.pkg
new file mode 100644
index 00000000..3db5fe57
--- /dev/null
+++ b/install/debian/9/packages/palegreen.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='hosting'
+PROXY_TEMPLATE='hosting'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='50'
+WEB_ALIASES='50'
+DNS_DOMAINS='50'
+DNS_RECORDS='50'
+MAIL_DOMAINS='50'
+MAIL_ACCOUNTS='50'
+DATABASES='50'
+CRON_JOBS='50'
+DISK_QUOTA='50000'
+BANDWIDTH='50000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='5'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/debian/9/packages/slategrey.pkg b/install/debian/9/packages/slategrey.pkg
new file mode 100644
index 00000000..d89e796f
--- /dev/null
+++ b/install/debian/9/packages/slategrey.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='100'
+WEB_ALIASES='100'
+DNS_DOMAINS='100'
+DNS_RECORDS='100'
+MAIL_DOMAINS='100'
+MAIL_ACCOUNTS='100'
+DATABASES='100'
+CRON_JOBS='100'
+DISK_QUOTA='10000'
+BANDWIDTH='100000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='3'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/debian/9/pga/config.inc.php b/install/debian/9/pga/config.inc.php
new file mode 100644
index 00000000..1eec9776
--- /dev/null
+++ b/install/debian/9/pga/config.inc.php
@@ -0,0 +1,159 @@
+<?php
+
+    /**
+     * Central phpPgAdmin configuration.  As a user you may modify the
+     * settings here for your particular configuration.
+     *
+     * $Id: config.inc.php-dist,v 1.55 2008/02/18 21:10:31 xzilla Exp $
+     */
+
+    // An example server.  Create as many of these as you wish,
+    // indexed from zero upwards.
+
+    // Display name for the server on the login screen
+    $conf['servers'][0]['desc'] = 'PostgreSQL';
+
+    // Hostname or IP address for server.  Use '' for UNIX domain socket.
+    // use 'localhost' for TCP/IP connection on this computer
+    $conf['servers'][0]['host'] = 'localhost';
+
+    // Database port on server (5432 is the PostgreSQL default)
+    $conf['servers'][0]['port'] = 5432;
+
+    // Database SSL mode
+    // Possible options: disable, allow, prefer, require
+    // To require SSL on older servers use option: legacy
+    // To ignore the SSL mode, use option: unspecified
+    $conf['servers'][0]['sslmode'] = 'allow';
+
+    // Change the default database only if you cannot connect to template1.
+    // For a PostgreSQL 8.1+ server, you can set this to 'postgres'.
+    $conf['servers'][0]['defaultdb'] = 'template1';
+
+    // Specify the path to the database dump utilities for this server.
+    // You can set these to '' if no dumper is available.
+    $conf['servers'][0]['pg_dump_path'] = '/usr/bin/pg_dump';
+    $conf['servers'][0]['pg_dumpall_path'] = '/usr/bin/pg_dumpall';
+
+    // Slony (www.slony.info) support?
+    $conf['servers'][0]['slony_support'] = false;
+    // Specify the path to the Slony SQL scripts (where slony1_base.sql is located, etc.)
+    // No trailing slash.
+    $conf['servers'][0]['slony_sql'] = '/usr/share/pgsql';
+
+    // Example for a second server (PostgreSQL for Windows)
+    //$conf['servers'][1]['desc'] = 'Test Server';
+    //$conf['servers'][1]['host'] = '127.0.0.1';
+    //$conf['servers'][1]['port'] = 5432;
+    //$conf['servers'][1]['sslmode'] = 'allow';
+    //$conf['servers'][1]['defaultdb'] = 'template1';
+    //$conf['servers'][1]['pg_dump_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dump.exe';
+    //$conf['servers'][1]['pg_dumpall_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dumpall.exe';
+    //$conf['servers'][1]['slony_support'] = false;
+    //$conf['servers'][1]['slony_sql'] = 'C:\\Program Files\\PostgreSQL\\8.0\\share';
+
+
+    // Example of groups definition.
+    // Groups allow administrators to logicaly group servers together under group nodes in the left browser tree
+    //
+    // The group '0' description
+    //$conf['srv_groups'][0]['desc'] = 'group one';
+    //
+    // Add here servers indexes belonging to the group '0' seperated by comma
+    //$conf['srv_groups'][0]['servers'] = '0,1,2'; 
+    //
+    // A server can belong to multi groups
+    //$conf['srv_groups'][1]['desc'] = 'group two';
+    //$conf['srv_groups'][1]['servers'] = '3,1';
+
+
+    // Default language. E.g.: 'english', 'polish', etc.  See lang/ directory
+    // for all possibilities. If you specify 'auto' (the default) it will use 
+    // your browser preference.
+    $conf['default_lang'] = 'auto';
+
+    // AutoComplete uses AJAX interaction to list foreign key values 
+    // on insert fields. It currently only works on single column 
+    // foreign keys. You can choose one of the following values:
+    // 'default on' enables AutoComplete and turns it on by default.
+    // 'default off' enables AutoComplete but turns it off by default.
+    // 'disable' disables AutoComplete.
+    $conf['autocomplete'] = 'default on';
+
+    // If extra login security is true, then logins via phpPgAdmin with no
+    // password or certain usernames (pgsql, postgres, root, administrator)
+    // will be denied. Only set this false once you have read the FAQ and
+    // understand how to change PostgreSQL's pg_hba.conf to enable
+    // passworded local connections.
+    $conf['extra_login_security'] = true;
+
+    // Only show owned databases?
+    // Note: This will simply hide other databases in the list - this does
+    // not in any way prevent your users from seeing other database by
+    // other means. (e.g. Run 'SELECT * FROM pg_database' in the SQL area.)
+    $conf['owned_only'] = false;
+
+    // Display comments on objects?  Comments are a good way of documenting
+    // a database, but they do take up space in the interface.
+    $conf['show_comments'] = true;
+
+    // Display "advanced" objects? Setting this to true will show 
+    // aggregates, types, operators, operator classes, conversions, 
+    // languages and casts in phpPgAdmin. These objects are rarely 
+    // administered and can clutter the interface.
+    $conf['show_advanced'] = false;
+
+    // Display "system" objects?
+    $conf['show_system'] = false;
+
+    // Display reports feature?  For this feature to work, you must
+    // install the reports database as explained in the INSTALL file.
+    $conf['show_reports'] = true;
+
+    // Database and table for reports
+    $conf['reports_db'] = 'phppgadmin';
+    $conf['reports_schema'] = 'public';
+    $conf['reports_table'] = 'ppa_reports';
+
+    // Only show owned reports?
+    // Note: This does not prevent people from accessing other reports by
+    // other means.
+    $conf['owned_reports_only'] = false;
+
+    // Minimum length users can set their password to.
+    $conf['min_password_length'] = 1;
+
+    // Width of the left frame in pixels (object browser)
+    $conf['left_width'] = 200;
+
+    // Which look & feel theme to use
+    $conf['theme'] = 'default';
+
+    // Show OIDs when browsing tables?
+    $conf['show_oids'] = false;
+
+    // Max rows to show on a page when browsing record sets
+    $conf['max_rows'] = 30;
+
+    // Max chars of each field to display by default in browse mode
+    $conf['max_chars'] = 50;
+
+    // Send XHTML strict headers?
+    $conf['use_xhtml_strict'] = false;
+
+    // Base URL for PostgreSQL documentation.
+    // '%s', if present, will be replaced with the PostgreSQL version
+    // (e.g. 8.4 )
+    $conf['help_base'] = 'http://www.postgresql.org/docs/%s/interactive/';
+
+    // Configuration for ajax scripts
+    // Time in seconds. If set to 0, refreshing data using ajax will be disabled (locks and activity pages)
+    $conf['ajax_refresh'] = 3;
+
+    /*****************************************
+     * Don't modify anything below this line *
+     *****************************************/
+
+    $conf['version'] = 19;
+
+?>
diff --git a/install/debian/9/pga/phppgadmin.conf b/install/debian/9/pga/phppgadmin.conf
new file mode 100644
index 00000000..f39247d6
--- /dev/null
+++ b/install/debian/9/pga/phppgadmin.conf
@@ -0,0 +1,31 @@
+Alias /phppgadmin /usr/share/phppgadmin
+
+<Directory /usr/share/phppgadmin>
+
+DirectoryIndex index.php
+AllowOverride None
+
+order deny,allow
+deny from all
+allow from 127.0.0.0/255.0.0.0 ::1/128
+allow from all
+
+<IfModule mod_php5.c>
+  php_flag magic_quotes_gpc Off
+  php_flag track_vars On
+  php_value include_path .
+</IfModule>
+<IfModule !mod_php5.c>
+  <IfModule mod_actions.c>
+    <IfModule mod_cgi.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+    <IfModule mod_cgid.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+  </IfModule>
+</IfModule>
+
+</Directory>
diff --git a/install/debian/9/php5-fpm/www.conf b/install/debian/9/php5-fpm/www.conf
new file mode 100644
index 00000000..3c87f33c
--- /dev/null
+++ b/install/debian/9/php5-fpm/www.conf
@@ -0,0 +1,11 @@
+[www]
+listen = 127.0.0.1:9000
+listen.allowed_clients = 127.0.0.1
+
+user = www-data
+group = www-data
+
+pm = ondemand
+pm.max_children = 2
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
diff --git a/install/debian/9/pma/apache.conf b/install/debian/9/pma/apache.conf
new file mode 100644
index 00000000..2a8f69e2
--- /dev/null
+++ b/install/debian/9/pma/apache.conf
@@ -0,0 +1,42 @@
+# phpMyAdmin default Apache configuration
+
+Alias /phpmyadmin /usr/share/phpmyadmin
+
+<Directory /usr/share/phpmyadmin>
+	Options FollowSymLinks
+	DirectoryIndex index.php
+
+	<IfModule mod_php5.c>
+		AddType application/x-httpd-php .php
+
+		php_flag magic_quotes_gpc Off
+		php_flag track_vars On
+		php_flag register_globals Off
+		php_admin_flag allow_url_fopen Off
+		php_value include_path .
+		php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp
+		php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/:/usr/share/php/php-gettext
+	</IfModule>
+
+</Directory>
+
+# Authorize for setup
+<Directory /usr/share/phpmyadmin/setup>
+    <IfModule mod_authn_file.c>
+    AuthType Basic
+    AuthName "phpMyAdmin Setup"
+    AuthUserFile /etc/phpmyadmin/htpasswd.setup
+    </IfModule>
+    Require valid-user
+</Directory>
+
+# Disallow web access to directories that don't need it
+<Directory /usr/share/phpmyadmin/libraries>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+<Directory /usr/share/phpmyadmin/setup/lib>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+
diff --git a/install/debian/9/pma/config.inc.php b/install/debian/9/pma/config.inc.php
new file mode 100644
index 00000000..eafc6d67
--- /dev/null
+++ b/install/debian/9/pma/config.inc.php
@@ -0,0 +1,146 @@
+<?php
+/**
+ * Debian local configuration file
+ *
+ * This file overrides the settings made by phpMyAdmin interactive setup
+ * utility.
+ *
+ * For example configuration see
+ *   /usr/share/doc/phpmyadmin/examples/config.sample.inc.php
+ * or
+ *   /usr/share/doc/phpmyadmin/examples/config.manyhosts.inc.php
+ *
+ * NOTE: do not add security sensitive data to this file (like passwords)
+ * unless you really know what you're doing. If you do, any user that can
+ * run PHP or CGI on your webserver will be able to read them. If you still
+ * want to do this, make sure to properly secure the access to this file
+ * (also on the filesystem level).
+ */
+
+function check_file_access($path)
+{
+    if (is_readable($path)) {
+        return true;
+    } else {
+        error_log(
+            'phpmyadmin: Failed to load ' . $path
+            . ' Check group www-data has read access and open_basedir restrictions.'
+        );
+        return false;
+    }
+}
+
+// Load secret generated on postinst
+if (check_file_access('/var/lib/phpmyadmin/blowfish_secret.inc.php')) {
+    require('/var/lib/phpmyadmin/blowfish_secret.inc.php');
+}
+
+// Load autoconf local config
+if (check_file_access('/var/lib/phpmyadmin/config.inc.php')) {
+    require('/var/lib/phpmyadmin/config.inc.php');
+}
+
+/**
+ * Server(s) configuration
+ */
+$i = 0;
+// The $cfg['Servers'] array starts with $cfg['Servers'][1].  Do not use $cfg['Servers'][0].
+// You can disable a server config entry by setting host to ''.
+$i++;
+
+/**
+ * Read configuration from dbconfig-common
+ * You can regenerate it using: dpkg-reconfigure -plow phpmyadmin
+ */
+if (check_file_access('/etc/phpmyadmin/config-db.php')) {
+    require('/etc/phpmyadmin/config-db.php');
+}
+
+/* Configure according to dbconfig-common if enabled */
+if (!empty($dbname)) {
+    /* Authentication type */
+    $cfg['Servers'][$i]['auth_type'] = 'cookie';
+    /* Server parameters */
+    if (empty($dbserver)) $dbserver = 'localhost';
+    $cfg['Servers'][$i]['host'] = $dbserver;
+
+    if (!empty($dbport) || $dbserver != 'localhost') {
+        $cfg['Servers'][$i]['connect_type'] = 'tcp';
+        $cfg['Servers'][$i]['port'] = $dbport;
+    }
+    //$cfg['Servers'][$i]['compress'] = false;
+    /* Select mysqli if your server has it */
+    $cfg['Servers'][$i]['extension'] = 'mysqli';
+    /* Optional: User for advanced features */
+    $cfg['Servers'][$i]['controluser'] = $dbuser;
+    $cfg['Servers'][$i]['controlpass'] = $dbpass;
+    /* Optional: Advanced phpMyAdmin features */
+    $cfg['Servers'][$i]['pmadb'] = $dbname;
+    $cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
+    $cfg['Servers'][$i]['relation'] = 'pma__relation';
+    $cfg['Servers'][$i]['table_info'] = 'pma__table_info';
+    $cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
+    $cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
+    $cfg['Servers'][$i]['column_info'] = 'pma__column_info';
+    $cfg['Servers'][$i]['history'] = 'pma__history';
+    $cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
+    $cfg['Servers'][$i]['designer_coords'] = 'pma__designer_coords';
+    $cfg['Servers'][$i]['tracking'] = 'pma__tracking';
+    $cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
+    $cfg['Servers'][$i]['recent'] = 'pma__recent';
+
+    /* Uncomment the following to enable logging in to passwordless accounts,
+     * after taking note of the associated security risks. */
+    // $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+    /* Advance to next server for rest of config */
+    $i++;
+}
+
+/* Authentication type */
+//$cfg['Servers'][$i]['auth_type'] = 'cookie';
+/* Server parameters */
+//$cfg['Servers'][$i]['host'] = 'localhost';
+//$cfg['Servers'][$i]['connect_type'] = 'tcp';
+//$cfg['Servers'][$i]['compress'] = false;
+/* Select mysqli if your server has it */
+//$cfg['Servers'][$i]['extension'] = 'mysql';
+/* Optional: User for advanced features */
+// $cfg['Servers'][$i]['controluser'] = 'pma';
+// $cfg['Servers'][$i]['controlpass'] = 'pmapass';
+
+/* Storage database and tables */
+// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
+// $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+// $cfg['Servers'][$i]['relation'] = 'pma_relation';
+// $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+// $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+// $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+// $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+// $cfg['Servers'][$i]['history'] = 'pma_history';
+// $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+// $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+// $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+// $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+// $cfg['Servers'][$i]['recent'] = 'pma_recent';
+/* Uncomment the following to enable logging in to passwordless accounts,
+ * after taking note of the associated security risks. */
+// $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+/*
+ * End of servers configuration
+ */
+
+/*
+ * Directories for saving/loading files from server
+ */
+$cfg['UploadDir'] = '';
+$cfg['SaveDir'] = '';
+
+/* Support additional configurations */
+foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
+{
+    include($filename);
+}
+
+
diff --git a/install/debian/9/postgresql/pg_hba.conf b/install/debian/9/postgresql/pg_hba.conf
new file mode 100644
index 00000000..1ba43941
--- /dev/null
+++ b/install/debian/9/postgresql/pg_hba.conf
@@ -0,0 +1,11 @@
+# "local" is for Unix domain socket connections only
+local   all         all                               ident
+
+# IPv4 local connections:
+host    all         all         127.0.0.1/32          md5
+
+# IPv6 local connections:
+host    all         all         ::1/128               md5
+
+# Others
+host    all         all         0.0.0.0/0             md5
diff --git a/install/debian/9/proftpd/proftpd.conf b/install/debian/9/proftpd/proftpd.conf
new file mode 100644
index 00000000..69ec6b2e
--- /dev/null
+++ b/install/debian/9/proftpd/proftpd.conf
@@ -0,0 +1,32 @@
+ServerName                      "FTP"
+ServerIdent                     on "FTP Server ready."
+ServerAdmin                     root@localhost
+DefaultServer                   on
+DefaultRoot                  ~ !adm
+
+<IfModule mod_vroot.c>
+    VRootEngine                 on
+    VRootAlias                  /etc/security/pam_env.conf etc/security/pam_env.conf
+</IfModule>
+
+AuthPAMConfig                   proftpd
+AuthOrder                       mod_auth_pam.c* mod_auth_unix.c
+UseReverseDNS                   off
+User                            proftpd
+Group                           nogroup
+MaxInstances                    20
+UseSendfile                     off
+LogFormat                       default "%h %l %u %t \"%r\" %s %b"
+LogFormat                       auth    "%v [%P] %h %t \"%r\" %s"
+ListOptions                     -a
+RequireValidShell               off
+PassivePorts                    12000 12100
+
+<Global>
+  Umask                         002
+  IdentLookups                  off
+  AllowOverwrite                yes
+  <Limit ALL SITE_CHMOD>
+    AllowAll
+  </Limit>
+</Global>
diff --git a/install/debian/9/roundcube/apache.conf b/install/debian/9/roundcube/apache.conf
new file mode 100644
index 00000000..a0c87bcc
--- /dev/null
+++ b/install/debian/9/roundcube/apache.conf
@@ -0,0 +1,40 @@
+Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/
+Alias /roundcube /var/lib/roundcube
+Alias /webmail /var/lib/roundcube
+
+# Access to tinymce files
+<Directory "/usr/share/tinymce/www/">
+      Options Indexes MultiViews FollowSymLinks
+      AllowOverride None
+      Order allow,deny
+      allow from all
+</Directory>
+
+<Directory /var/lib/roundcube/>
+  Options +FollowSymLinks
+  # This is needed to parse /var/lib/roundcube/.htaccess. See its
+  # content before setting AllowOverride to None.
+  AllowOverride All
+  order allow,deny
+  allow from all
+</Directory>
+
+# Protecting basic directories:
+<Directory /var/lib/roundcube/config>
+        Options -FollowSymLinks
+        AllowOverride None
+</Directory>
+
+<Directory /var/lib/roundcube/temp>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
+
+<Directory /var/lib/roundcube/logs>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
diff --git a/install/debian/9/roundcube/config.inc.php b/install/debian/9/roundcube/config.inc.php
new file mode 100644
index 00000000..0c82b1bc
--- /dev/null
+++ b/install/debian/9/roundcube/config.inc.php
@@ -0,0 +1,33 @@
+<?php
+
+// Password Plugin options
+// -----------------------
+// A driver to use for password change. Default: "sql".
+// See README file for list of supported driver names.
+$rcmail_config['password_driver'] = 'vesta';
+
+// Require the new password to be a certain length.
+// set to blank to allow passwords of any length
+$rcmail_config['password_minimum_length'] = 6;
+
+// Require the new password to contain a letter and punctuation character
+// Change to false to remove this check.
+$rcmail_config['password_require_nonalpha'] = false;
+
+// Enables logging of password changes into logs/password
+$rcmail_config['password_log'] = false;
+
+// Comma-separated list of login exceptions for which password change
+// will be not available (no Password tab in Settings)
+$rcmail_config['password_login_exceptions'] = null;
+
+
+// By default domains in variables are using unicode.
+// Enable this option to use punycoded names
+$rcmail_config['password_idn_ascii'] = false;
+
+// Vesta Driver options
+// -----------------------
+// Control Panel host
+$rcmail_config['password_vesta_host'] = 'localhost';
+$rcmail_config['password_vesta_port'] = '8083';
diff --git a/install/debian/9/roundcube/db.inc.php b/install/debian/9/roundcube/db.inc.php
new file mode 100644
index 00000000..5268a309
--- /dev/null
+++ b/install/debian/9/roundcube/db.inc.php
@@ -0,0 +1,66 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Configuration file for database access                                |
+ |                                                                       |
+ | This file is part of the RoundCube Webmail client                     |
+ | Copyright (C) 2005-2008, RoundCube Dev. - Switzerland                 |
+ | Licensed under the GNU GPL                                            |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// PEAR database DSN for read/write operations
+// format is db_provider://user:password@host/database 
+
+$rcmail_config['db_dsnw'] = 'mysql://roundcube:%password%@localhost/roundcube';
+// postgres example: 'pgsql://roundcube:pass@localhost/roundcubemail';
+
+// PEAR database DSN for read only operations (if empty write database will be used)
+// useful for database replication
+$rcmail_config['db_dsnr'] = '';
+
+// database backend to use (only db or mdb2 are supported)
+//$rcmail_config['db_backend'] = 'mdb2';
+
+// maximum length of a query in bytes
+$rcmail_config['db_max_length'] = 512000;  // 500K
+
+// use persistent db-connections
+// beware this will not "always" work as expected
+// see: http://www.php.net/manual/en/features.persistent-connections.php
+$rcmail_config['db_persistent'] = FALSE;
+
+
+// you can define specific table names used to store webmail data
+$rcmail_config['db_table_users'] = 'users';
+
+$rcmail_config['db_table_identities'] = 'identities';
+
+$rcmail_config['db_table_contacts'] = 'contacts';
+
+$rcmail_config['db_table_session'] = 'session';
+
+$rcmail_config['db_table_cache'] = 'cache';
+
+$rcmail_config['db_table_messages'] = 'messages';
+
+
+// you can define specific sequence names used in PostgreSQL
+$rcmail_config['db_sequence_users'] = 'user_ids';
+
+$rcmail_config['db_sequence_identities'] = 'identity_ids';
+
+$rcmail_config['db_sequence_contacts'] = 'contact_ids';
+
+$rcmail_config['db_sequence_cache'] = 'cache_ids';
+
+$rcmail_config['db_sequence_messages'] = 'message_ids';
+
+
+// end db config file
+?>
diff --git a/install/debian/9/roundcube/main.inc.php b/install/debian/9/roundcube/main.inc.php
new file mode 100644
index 00000000..97cdbf2d
--- /dev/null
+++ b/install/debian/9/roundcube/main.inc.php
@@ -0,0 +1,850 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Main configuration file                                               |
+ |                                                                       |
+ | This file is part of the Roundcube Webmail client                     |
+ | Copyright (C) 2005-2011, The Roundcube Dev Team                       |
+ |                                                                       |
+ | Licensed under the GNU General Public License version 3 or            |
+ | any later version with exceptions for skins & plugins.                |
+ | See the README file for a full license statement.                     |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// ----------------------------------
+// LOGGING/DEBUGGING
+// ----------------------------------
+
+// system error reporting: 1 = log; 2 = report (not implemented yet), 4 = show, 8 = trace
+$rcmail_config['debug_level'] = 1;
+
+// log driver:  'syslog' or 'file'.
+$rcmail_config['log_driver'] = 'file';
+
+// date format for log entries
+// (read http://php.net/manual/en/function.date.php for all format characters)  
+$rcmail_config['log_date_format'] = 'd-M-Y H:i:s O';
+
+// Syslog ident string to use, if using the 'syslog' log driver.
+$rcmail_config['syslog_id'] = 'roundcube';
+
+// Syslog facility to use, if using the 'syslog' log driver.
+// For possible values see installer or http://php.net/manual/en/function.openlog.php
+$rcmail_config['syslog_facility'] = LOG_USER;
+
+// Log sent messages to <log_dir>/sendmail or to syslog
+$rcmail_config['smtp_log'] = true;
+
+// Log successful logins to <log_dir>/userlogins or to syslog
+$rcmail_config['log_logins'] = false;
+
+// Log session authentication errors to <log_dir>/session or to syslog
+$rcmail_config['log_session'] = false;
+
+// Log SQL queries to <log_dir>/sql or to syslog
+$rcmail_config['sql_debug'] = false;
+
+// Log IMAP conversation to <log_dir>/imap or to syslog
+$rcmail_config['imap_debug'] = false;
+
+// Log LDAP conversation to <log_dir>/ldap or to syslog
+$rcmail_config['ldap_debug'] = false;
+
+// Log SMTP conversation to <log_dir>/smtp or to syslog
+$rcmail_config['smtp_debug'] = false;
+
+// ----------------------------------
+// IMAP
+// ----------------------------------
+
+// the mail host chosen to perform the log-in
+// leave blank to show a textbox at login, give a list of hosts
+// to display a pulldown menu or set one host as string.
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// Supported replacement variables:
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %s - domain name after the '@' from e-mail address provided at login screen
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['default_host'] = 'localhost';
+
+// TCP port used for IMAP connections
+$rcmail_config['default_port'] = 143;
+
+// IMAP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['imap_auth_type'] = null;
+
+// If you know your imap's folder delimiter, you can specify it here.
+// Otherwise it will be determined automatically
+$rcmail_config['imap_delimiter'] = null;
+
+// If IMAP server doesn't support NAMESPACE extension, but you're
+// using shared folders or personal root folder is non-empty, you'll need to
+// set these options. All can be strings or arrays of strings.
+// Folders need to be ended with directory separator, e.g. "INBOX."
+// (special directory "~" is an exception to this rule)
+// These can be used also to overwrite server's namespaces
+$rcmail_config['imap_ns_personal'] = null;
+$rcmail_config['imap_ns_other']    = null;
+$rcmail_config['imap_ns_shared']   = null;
+
+// By default IMAP capabilities are readed after connection to IMAP server
+// In some cases, e.g. when using IMAP proxy, there's a need to refresh the list
+// after login. Set to True if you've got this case.
+$rcmail_config['imap_force_caps'] = false;
+
+// By default list of subscribed folders is determined using LIST-EXTENDED
+// extension if available. Some servers (dovecot 1.x) returns wrong results
+// for shared namespaces in this case. http://trac.roundcube.net/ticket/1486225
+// Enable this option to force LSUB command usage instead.
+$rcmail_config['imap_force_lsub'] = false;
+
+// Some server configurations (e.g. Courier) doesn't list folders in all namespaces
+// Enable this option to force listing of folders in all namespaces
+$rcmail_config['imap_force_ns'] = false;
+
+// IMAP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['imap_timeout'] = 0;
+
+// Optional IMAP authentication identifier to be used as authorization proxy
+$rcmail_config['imap_auth_cid'] = null;
+
+// Optional IMAP authentication password to be used for imap_auth_cid
+$rcmail_config['imap_auth_pw'] = null;
+
+// Type of IMAP indexes cache. Supported values: 'db', 'apc' and 'memcache'.
+$rcmail_config['imap_cache'] = null;
+
+// Enables messages cache. Only 'db' cache is supported.
+$rcmail_config['messages_cache'] = false;
+
+
+// ----------------------------------
+// SMTP
+// ----------------------------------
+
+// SMTP server host (for sending mails).
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// If left blank, the PHP mail() function is used
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['smtp_server'] = '';
+
+// SMTP port (default is 25; use 587 for STARTTLS or 465 for the
+// deprecated SSL over SMTP (aka SMTPS))
+$rcmail_config['smtp_port'] = 25;
+
+// SMTP username (if required) if you use %u as the username Roundcube
+// will use the current username for login
+$rcmail_config['smtp_user'] = '';
+
+// SMTP password (if required) if you use %p as the password Roundcube
+// will use the current user's password for login
+$rcmail_config['smtp_pass'] = '';
+
+// SMTP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['smtp_auth_type'] = '';
+
+// Optional SMTP authentication identifier to be used as authorization proxy
+$rcmail_config['smtp_auth_cid'] = null;
+
+// Optional SMTP authentication password to be used for smtp_auth_cid
+$rcmail_config['smtp_auth_pw'] = null;
+
+// SMTP HELO host 
+// Hostname to give to the remote server for SMTP 'HELO' or 'EHLO' messages 
+// Leave this blank and you will get the server variable 'server_name' or 
+// localhost if that isn't defined. 
+$rcmail_config['smtp_helo_host'] = '';
+
+// SMTP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['smtp_timeout'] = 0;
+
+// ----------------------------------
+// SYSTEM
+// ----------------------------------
+include_once("/etc/roundcube/debian-db-roundcube.php");
+
+
+// THIS OPTION WILL ALLOW THE INSTALLER TO RUN AND CAN EXPOSE SENSITIVE CONFIG DATA.
+// ONLY ENABLE IT IF YOU'RE REALLY SURE WHAT YOU'RE DOING!
+$rcmail_config['enable_installer'] = false;
+
+// provide an URL where a user can get support for this Roundcube installation
+// PLEASE DO NOT LINK TO THE ROUNDCUBE.NET WEBSITE HERE!
+$rcmail_config['support_url'] = '';
+
+// replace Roundcube logo with this image
+// specify an URL relative to the document root of this Roundcube installation
+$rcmail_config['skin_logo'] = null;
+
+// automatically create a new Roundcube user when log-in the first time.
+// a new user will be created once the IMAP login succeeds.
+// set to false if only registered users can use this service
+$rcmail_config['auto_create_user'] = true;
+
+// use this folder to store log files (must be writeable for apache user)
+// This is used by the 'file' log driver.
+$rcmail_config['log_dir'] = '/var/log/roundcubemail/';
+
+// use this folder to store temp files (must be writeable for apache user)
+$rcmail_config['temp_dir'] = '/tmp';
+
+// lifetime of message cache
+// possible units: s, m, h, d, w
+$rcmail_config['message_cache_lifetime'] = '10d';
+
+// enforce connections over https
+// with this option enabled, all non-secure connections will be redirected.
+// set the port for the ssl connection as value of this option if it differs from the default 443
+$rcmail_config['force_https'] = false;
+
+// tell PHP that it should work as under secure connection
+// even if it doesn't recognize it as secure ($_SERVER['HTTPS'] is not set)
+// e.g. when you're running Roundcube behind a https proxy
+// this option is mutually exclusive to 'force_https' and only either one of them should be set to true.
+$rcmail_config['use_https'] = false;
+
+// Allow browser-autocompletion on login form.
+// 0 - disabled, 1 - username and host only, 2 - username, host, password
+$rcmail_config['login_autocomplete'] = 0;
+
+// Forces conversion of logins to lower case.
+// 0 - disabled, 1 - only domain part, 2 - domain and local part.
+// If users authentication is not case-sensitive this must be enabled.
+// After enabling it all user records need to be updated, e.g. with query:
+// UPDATE users SET username = LOWER(username);
+$rcmail_config['login_lc'] = 0;
+
+// Includes should be interpreted as PHP files
+$rcmail_config['skin_include_php'] = false;
+
+// display software version on login screen
+$rcmail_config['display_version'] = false;
+
+// Session lifetime in minutes
+// must be greater than 'keep_alive'/60
+$rcmail_config['session_lifetime'] = 10;
+
+// session domain: .example.org
+$rcmail_config['session_domain'] = '';
+
+// session name. Default: 'roundcube_sessid'
+$rcmail_config['session_name'] = null;
+
+// Backend to use for session storage. Can either be 'db' (default) or 'memcache'
+// If set to memcache, a list of servers need to be specified in 'memcache_hosts'
+// Make sure the Memcache extension (http://pecl.php.net/package/memcache) version >= 2.0.0 is installed
+$rcmail_config['session_storage'] = 'db';
+
+// Use these hosts for accessing memcached
+// Define any number of hosts in the form of hostname:port or unix:///path/to/sock.file
+$rcmail_config['memcache_hosts'] = null; // e.g. array( 'localhost:11211', '192.168.1.12:11211', 'unix:///var/tmp/memcached.sock' );
+
+// check client IP in session athorization
+$rcmail_config['ip_check'] = false;
+
+// check referer of incoming requests
+$rcmail_config['referer_check'] = false;
+
+// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
+// Possible values: sameorigin|deny. Set to false in order to disable sending them
+$rcmail_config['x_frame_options'] = 'sameorigin';
+
+// this key is used to encrypt the users imap password which is stored
+// in the session record (and the client cookie if remember password is enabled).
+// please provide a string of exactly 24 chars.
+$rcmail_config['des_key'] = 'vtIOjLZo9kffJoqzpSbm5r1r';
+
+// Automatically add this domain to user names for login
+// Only for IMAP servers that require full e-mail addresses for login
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['username_domain'] = '';
+
+// This domain will be used to form e-mail addresses of new users
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['mail_domain'] = '';
+
+// Password charset.
+// Use it if your authentication backend doesn't support UTF-8.
+// Defaults to ISO-8859-1 for backward compatibility
+$rcmail_config['password_charset'] = 'ISO-8859-1';
+
+// How many seconds must pass between emails sent by a user
+$rcmail_config['sendmail_delay'] = 0;
+
+// Maximum number of recipients per message. Default: 0 (no limit)
+$rcmail_config['max_recipients'] = 0; 
+
+// Maximum allowednumber of members of an address group. Default: 0 (no limit)
+// If 'max_recipients' is set this value should be less or equal
+$rcmail_config['max_group_members'] = 0; 
+
+// add this user-agent to message headers when sending
+$rcmail_config['useragent'] = 'Roundcube Webmail/'.RCMAIL_VERSION;
+
+// use this name to compose page titles
+$rcmail_config['product_name'] = 'Roundcube Webmail';
+
+// try to load host-specific configuration
+// see http://trac.roundcube.net/wiki/Howto_Config for more details
+$rcmail_config['include_host_config'] = false;
+
+// path to a text file which will be added to each sent message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer'] = '';
+
+// path to a text file which will be added to each sent HTML message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer_html'] = '';
+
+// add a received header to outgoing mails containing the creators IP and hostname
+$rcmail_config['http_received_header'] = false;
+
+// Whether or not to encrypt the IP address and the host name
+// these could, in some circles, be considered as sensitive information;
+// however, for the administrator, these could be invaluable help
+// when tracking down issues.
+$rcmail_config['http_received_header_encrypt'] = false;
+
+// This string is used as a delimiter for message headers when sending
+// a message via mail() function. Leave empty for auto-detection
+$rcmail_config['mail_header_delimiter'] = NULL;
+
+// number of chars allowed for line when wrapping text.
+// text wrapping is done when composing/sending messages
+$rcmail_config['line_length'] = 72;
+
+// send plaintext messages as format=flowed
+$rcmail_config['send_format_flowed'] = true;
+
+// don't allow these settings to be overriden by the user
+$rcmail_config['dont_override'] = array();
+
+// Set identities access level:
+// 0 - many identities with possibility to edit all params
+// 1 - many identities with possibility to edit all params but not email address
+// 2 - one identity with possibility to edit all params
+// 3 - one identity with possibility to edit all params but not email address
+$rcmail_config['identities_level'] = 0;
+
+// Mimetypes supported by the browser.
+// attachments of these types will open in a preview window
+// either a comma-separated list or an array: 'text/plain,text/html,text/xml,image/jpeg,image/gif,image/png,application/pdf'
+$rcmail_config['client_mimetypes'] = null;  # null == default
+
+// mime magic database
+$rcmail_config['mime_magic'] = null;
+
+// path to imagemagick identify binary
+$rcmail_config['im_identify_path'] = null;
+
+// path to imagemagick convert binary
+$rcmail_config['im_convert_path'] = null;
+
+// maximum size of uploaded contact photos in pixel
+$rcmail_config['contact_photo_size'] = 160;
+
+// Enable DNS checking for e-mail address validation
+$rcmail_config['email_dns_check'] = false;
+
+// ----------------------------------
+// PLUGINS
+// ----------------------------------
+
+// List of active plugins (in plugins/ directory)
+$rcmail_config['plugins'] = array('password');
+
+// ----------------------------------
+// USER INTERFACE
+// ----------------------------------
+
+// default messages sort column. Use empty value for default server's sorting, 
+// or 'arrival', 'date', 'subject', 'from', 'to', 'fromto', 'size', 'cc'
+$rcmail_config['message_sort_col'] = '';
+
+// default messages sort order
+$rcmail_config['message_sort_order'] = 'DESC';
+
+// These cols are shown in the message list. Available cols are:
+// subject, from, to, fromto, cc, replyto, date, size, status, flag, attachment, 'priority'
+$rcmail_config['list_cols'] = array('subject', 'status', 'fromto', 'date', 'size', 'flag', 'attachment');
+
+// the default locale setting (leave empty for auto-detection)
+// RFC1766 formatted language name like en_US, de_DE, de_CH, fr_FR, pt_BR
+$rcmail_config['language'] = null;
+
+// use this format for date display (date or strftime format)
+$rcmail_config['date_format'] = 'Y-m-d';
+
+// give this choice of date formats to the user to select from
+$rcmail_config['date_formats'] = array('Y-m-d', 'd-m-Y', 'Y/m/d', 'm/d/Y', 'd/m/Y', 'd.m.Y', 'j.n.Y');
+
+// use this format for time display (date or strftime format)
+$rcmail_config['time_format'] = 'H:i';
+
+// give this choice of time formats to the user to select from
+$rcmail_config['time_formats'] = array('G:i', 'H:i', 'g:i a', 'h:i A');
+
+// use this format for short date display (derived from date_format and time_format)
+$rcmail_config['date_short'] = 'D H:i';
+
+// use this format for detailed date/time formatting (derived from date_format and time_format)
+$rcmail_config['date_long'] = 'Y-m-d H:i';
+
+// store draft message is this mailbox
+// leave blank if draft messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['drafts_mbox'] = 'Drafts';
+
+// store spam messages in this mailbox
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['junk_mbox'] = 'Spam';
+
+// store sent message is this mailbox
+// leave blank if sent messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['sent_mbox'] = 'Sent';
+
+// move messages to this folder when deleting them
+// leave blank if they should be deleted directly
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['trash_mbox'] = 'Trash';
+
+// display these folders separately in the mailbox list.
+// these folders will also be displayed with localized names
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['default_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+$rcmail_config['default_imap_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+
+// automatically create the above listed default folders on first login
+$rcmail_config['create_default_folders'] = true;
+
+// protect the default folders from renames, deletes, and subscription changes
+$rcmail_config['protect_default_folders'] = true;
+
+// if in your system 0 quota means no limit set this option to true 
+$rcmail_config['quota_zero_as_unlimited'] = false;
+
+// Make use of the built-in spell checker. It is based on GoogieSpell.
+// Since Google only accepts connections over https your PHP installatation
+// requires to be compiled with Open SSL support
+$rcmail_config['enable_spellcheck'] = true;
+
+// Enables spellchecker exceptions dictionary.
+// Setting it to 'shared' will make the dictionary shared by all users.
+$rcmail_config['spellcheck_dictionary'] = false;
+
+// Set the spell checking engine. 'googie' is the default. 'pspell' is also available,
+// but requires the Pspell extensions. When using Nox Spell Server, also set 'googie' here.
+$rcmail_config['spellcheck_engine'] = 'googie';
+
+// For a locally installed Nox Spell Server, please specify the URI to call it.
+// Get Nox Spell Server from http://orangoo.com/labs/?page_id=72
+// Leave empty to use the Google spell checking service, what means
+// that the message content will be sent to Google in order to check spelling
+$rcmail_config['spellcheck_uri'] = '';
+
+// These languages can be selected for spell checking.
+// Configure as a PHP style hash array: array('en'=>'English', 'de'=>'Deutsch');
+// Leave empty for default set of available language.
+$rcmail_config['spellcheck_languages'] = NULL;
+
+// Makes that words with all letters capitalized will be ignored (e.g. GOOGLE)
+$rcmail_config['spellcheck_ignore_caps'] = false;
+
+// Makes that words with numbers will be ignored (e.g. g00gle)
+$rcmail_config['spellcheck_ignore_nums'] = false;
+
+// Makes that words with symbols will be ignored (e.g. g@@gle)
+$rcmail_config['spellcheck_ignore_syms'] = false;
+
+// Use this char/string to separate recipients when composing a new message
+$rcmail_config['recipients_separator'] = ',';
+
+// don't let users set pagesize to more than this value if set
+$rcmail_config['max_pagesize'] = 200;
+
+// Minimal value of user's 'keep_alive' setting (in seconds)
+// Must be less than 'session_lifetime'
+$rcmail_config['min_keep_alive'] = 60;
+
+// Enables files upload indicator. Requires APC installed and enabled apc.rfc1867 option.
+// By default refresh time is set to 1 second. You can set this value to true
+// or any integer value indicating number of seconds.
+$rcmail_config['upload_progress'] = false;
+
+// Specifies for how many seconds the Undo button will be available
+// after object delete action. Currently used with supporting address book sources.
+// Setting it to 0, disables the feature.
+$rcmail_config['undo_timeout'] = 0;
+
+// ----------------------------------
+// ADDRESSBOOK SETTINGS
+// ----------------------------------
+
+// This indicates which type of address book to use. Possible choises:
+// 'sql' (default) and 'ldap'.
+// If set to 'ldap' then it will look at using the first writable LDAP
+// address book as the primary address book and it will not display the
+// SQL address book in the 'Address Book' view.
+$rcmail_config['address_book_type'] = 'sql';
+
+// In order to enable public ldap search, configure an array like the Verisign
+// example further below. if you would like to test, simply uncomment the example.
+// Array key must contain only safe characters, ie. a-zA-Z0-9_
+$rcmail_config['ldap_public'] = array();
+
+// If you are going to use LDAP for individual address books, you will need to 
+// set 'user_specific' to true and use the variables to generate the appropriate DNs to access it.
+//
+// The recommended directory structure for LDAP is to store all the address book entries
+// under the users main entry, e.g.:
+//
+//  o=root
+//   ou=people
+//    uid=user@domain
+//  mail=contact@contactdomain
+//
+// So the base_dn would be uid=%fu,ou=people,o=root
+// The bind_dn would be the same as based_dn or some super user login.
+/* 
+ * example config for Verisign directory
+ *
+$rcmail_config['ldap_public']['Verisign'] = array(
+  'name'          => 'Verisign.com',
+  // Replacement variables supported in host names:
+  // %h - user's IMAP hostname
+  // %n - http hostname ($_SERVER['SERVER_NAME'])
+  // %d - domain (http hostname without the first part)
+  // %z - IMAP domain (IMAP hostname without the first part)
+  // For example %n = mail.domain.tld, %d = domain.tld
+  'hosts'         => array('directory.verisign.com'),
+  'port'          => 389,
+  'use_tls'	      => false,
+  'ldap_version'  => 3,       // using LDAPv3
+  'user_specific' => false,   // If true the base_dn, bind_dn and bind_pass default to the user's IMAP login.
+  // %fu - The full username provided, assumes the username is an email
+  //       address, uses the username_domain value if not an email address.
+  // %u  - The username prior to the '@'.
+  // %d  - The domain name after the '@'.
+  // %dc - The domain name hierarchal string e.g. "dc=test,dc=domain,dc=com"
+  // %dn - DN found by ldap search when search_filter/search_base_dn are used
+  'base_dn'       => '',
+  'bind_dn'       => '',
+  'bind_pass'     => '',
+  // It's possible to bind for an individual address book
+  // The login name is used to search for the DN to bind with
+  'search_base_dn' => '',
+  'search_filter'  => '',   // e.g. '(&(objectClass=posixAccount)(uid=%u))'
+  // DN and password to bind as before searching for bind DN, if anonymous search is not allowed
+  'search_bind_dn' => '',
+  'search_bind_pw' => '',
+  // Default for %dn variable if search doesn't return DN value
+  'search_dn_default' => '',
+  // Optional authentication identifier to be used as SASL authorization proxy
+  // bind_dn need to be empty
+  'auth_cid'       => '',
+  // SASL authentication method (for proxy auth), e.g. DIGEST-MD5
+  'auth_method'    => '',
+  // Indicates if the addressbook shall be hidden from the list.
+  // With this option enabled you can still search/view contacts.
+  'hidden'        => false,
+  // Indicates if the addressbook shall not list contacts but only allows searching.
+  'searchonly'    => false,
+  // Indicates if we can write to the LDAP directory or not.
+  // If writable is true then these fields need to be populated:
+  // LDAP_Object_Classes, required_fields, LDAP_rdn
+  'writable'       => false,
+  // To create a new contact these are the object classes to specify
+  // (or any other classes you wish to use).
+  'LDAP_Object_Classes' => array('top', 'inetOrgPerson'),
+  // The RDN field that is used for new entries, this field needs
+  // to be one of the search_fields, the base of base_dn is appended
+  // to the RDN to insert into the LDAP directory.
+  'LDAP_rdn'       => 'cn',
+  // The required fields needed to build a new contact as required by
+  // the object classes (can include additional fields not required by the object classes).
+  'required_fields' => array('cn', 'sn', 'mail'),
+  'search_fields'   => array('mail', 'cn'),  // fields to search in
+  // mapping of contact fields to directory attributes
+  //   for every attribute one can specify the number of values (limit) allowed.
+  //   default is 1, a wildcard * means unlimited
+  'fieldmap' => array(
+    // Roundcube  => LDAP:limit
+    'name'        => 'cn',
+    'surname'     => 'sn',
+    'firstname'   => 'givenName',
+    'title'       => 'title',
+    'email'       => 'mail:*',
+    'phone:home'  => 'homePhone',
+    'phone:work'  => 'telephoneNumber',
+    'phone:mobile' => 'mobile',
+    'phone:pager' => 'pager',
+    'street'      => 'street',
+    'zipcode'     => 'postalCode',
+    'region'      => 'st',
+    'locality'    => 'l',
+// if you uncomment country, you need to modify 'sub_fields' above
+//    'country'     => 'c',
+    'department'  => 'departmentNumber',
+    'notes'       => 'description',
+// these currently don't work:
+//    'phone:workfax' => 'facsimileTelephoneNumber',
+//    'photo'        => 'jpegPhoto',
+//    'organization' => 'o',
+//    'manager'      => 'manager',
+//    'assistant'    => 'secretary',
+  ),
+  // Map of contact sub-objects (attribute name => objectClass(es)), e.g. 'c' => 'country'
+  'sub_fields' => array(),
+  'sort'          => 'cn',    // The field to sort the listing by.
+  'scope'         => 'sub',   // search mode: sub|base|list
+  'filter'        => '(objectClass=inetOrgPerson)',      // used for basic listing (if not empty) and will be &'d with search queries. example: status=act
+  'fuzzy_search'  => true,    // server allows wildcard search
+  'vlv'           => false,   // Enable Virtual List View to more efficiently fetch paginated data (if server supports it)
+  'numsub_filter' => '(objectClass=organizationalUnit)',   // with VLV, we also use numSubOrdinates to query the total number of records. Set this filter to get all numSubOrdinates attributes for counting
+  'sizelimit'     => '0',     // Enables you to limit the count of entries fetched. Setting this to 0 means no limit.
+  'timelimit'     => '0',     // Sets the number of seconds how long is spend on the search. Setting this to 0 means no limit.
+  'referrals'     => true|false,  // Sets the LDAP_OPT_REFERRALS option. Mostly used in multi-domain Active Directory setups
+
+  // definition for contact groups (uncomment if no groups are supported)
+  // for the groups base_dn, the user replacements %fu, %u, $d and %dc work as for base_dn (see above)
+  // if the groups base_dn is empty, the contact base_dn is used for the groups as well
+  // -> in this case, assure that groups and contacts are separated due to the concernig filters! 
+  'groups'        => array(
+    'base_dn'     => '',
+    'scope'       => 'sub',   // search mode: sub|base|list
+    'filter'      => '(objectClass=groupOfNames)',
+    'object_classes' => array("top", "groupOfNames"),
+    'member_attr'  => 'member',   // name of the member attribute, e.g. uniqueMember
+    'name_attr'    => 'cn',       // attribute to be used as group name
+  ),
+);
+*/
+
+// An ordered array of the ids of the addressbooks that should be searched
+// when populating address autocomplete fields server-side. ex: array('sql','Verisign');
+$rcmail_config['autocomplete_addressbooks'] = array('sql');
+
+// The minimum number of characters required to be typed in an autocomplete field
+// before address books will be searched. Most useful for LDAP directories that
+// may need to do lengthy results building given overly-broad searches
+$rcmail_config['autocomplete_min_length'] = 1;
+
+// Number of parallel autocomplete requests.
+// If there's more than one address book, n parallel (async) requests will be created,
+// where each request will search in one address book. By default (0), all address
+// books are searched in one request.
+$rcmail_config['autocomplete_threads'] = 0;
+
+// Max. numer of entries in autocomplete popup. Default: 15.
+$rcmail_config['autocomplete_max'] = 15;
+
+// show address fields in this order
+// available placeholders: {street}, {locality}, {zipcode}, {country}, {region}
+$rcmail_config['address_template'] = '{street}<br/>{locality} {zipcode}<br/>{country} {region}';
+
+// Matching mode for addressbook search (including autocompletion)
+// 0 - partial (*abc*), default
+// 1 - strict (abc)
+// 2 - prefix (abc*)
+// Note: For LDAP sources fuzzy_search must be enabled to use 'partial' or 'prefix' mode
+$rcmail_config['addressbook_search_mode'] = 0;
+
+// ----------------------------------
+// USER PREFERENCES
+// ----------------------------------
+
+// Use this charset as fallback for message decoding
+//$rcmail_config['default_charset'] = 'ISO-8859-1';
+$rcmail_config['default_charset'] = 'UTF-8';
+
+// skin name: folder from skins/
+$rcmail_config['skin'] = 'larry';
+
+// show up to X items in messages list view
+$rcmail_config['mail_pagesize'] = 50;
+
+// show up to X items in contacts list view
+$rcmail_config['addressbook_pagesize'] = 50;
+
+// sort contacts by this col (preferably either one of name, firstname, surname)
+$rcmail_config['addressbook_sort_col'] = 'surname';
+
+// the way how contact names are displayed in the list
+// 0: display name
+// 1: (prefix) firstname middlename surname (suffix)
+// 2: (prefix) surname firstname middlename (suffix)
+// 3: (prefix) surname, firstname middlename (suffix)
+$rcmail_config['addressbook_name_listing'] = 0;
+
+// use this timezone to display date/time
+// valid timezone identifers are listed here: php.net/manual/en/timezones.php
+// 'auto' will use the browser's timezone settings
+$rcmail_config['timezone'] = 'auto';
+
+// prefer displaying HTML messages
+$rcmail_config['prefer_html'] = true;
+
+// display remote inline images
+// 0 - Never, always ask
+// 1 - Ask if sender is not in address book
+// 2 - Always show inline images
+$rcmail_config['show_images'] = 0;
+
+// compose html formatted messages by default
+// 0 - never, 1 - always, 2 - on reply to HTML message only 
+$rcmail_config['htmleditor'] = 0;
+
+// show pretty dates as standard
+$rcmail_config['prettydate'] = true;
+
+// save compose message every 300 seconds (5min)
+$rcmail_config['draft_autosave'] = 300;
+
+// default setting if preview pane is enabled
+$rcmail_config['preview_pane'] = false;
+
+// Mark as read when viewed in preview pane (delay in seconds)
+// Set to -1 if messages in preview pane should not be marked as read
+$rcmail_config['preview_pane_mark_read'] = 0;
+
+// Clear Trash on logout
+$rcmail_config['logout_purge'] = false;
+
+// Compact INBOX on logout
+$rcmail_config['logout_expunge'] = false;
+
+// Display attached images below the message body 
+$rcmail_config['inline_images'] = true;
+
+// Encoding of long/non-ascii attachment names:
+// 0 - Full RFC 2231 compatible
+// 1 - RFC 2047 for 'name' and RFC 2231 for 'filename' parameter (Thunderbird's default)
+// 2 - Full 2047 compatible
+$rcmail_config['mime_param_folding'] = 1;
+
+// Set true if deleted messages should not be displayed
+// This will make the application run slower
+$rcmail_config['skip_deleted'] = false;
+
+// Set true to Mark deleted messages as read as well as deleted
+// False means that a message's read status is not affected by marking it as deleted
+$rcmail_config['read_when_deleted'] = true;
+
+// Set to true to never delete messages immediately
+// Use 'Purge' to remove messages marked as deleted
+$rcmail_config['flag_for_deletion'] = false;
+
+// Default interval for keep-alive/check-recent requests (in seconds)
+// Must be greater than or equal to 'min_keep_alive' and less than 'session_lifetime'
+$rcmail_config['keep_alive'] = 60;
+
+// If true all folders will be checked for recent messages
+$rcmail_config['check_all_folders'] = false;
+
+// If true, after message delete/move, the next message will be displayed
+$rcmail_config['display_next'] = false;
+
+// 0 - Do not expand threads 
+// 1 - Expand all threads automatically 
+// 2 - Expand only threads with unread messages 
+$rcmail_config['autoexpand_threads'] = 0;
+
+// When replying place cursor above original message (top posting)
+$rcmail_config['top_posting'] = false;
+
+// When replying strip original signature from message
+$rcmail_config['strip_existing_sig'] = true;
+
+// Show signature:
+// 0 - Never
+// 1 - Always
+// 2 - New messages only
+// 3 - Forwards and Replies only
+$rcmail_config['show_sig'] = 1;
+
+// When replying or forwarding place sender's signature above existing message
+$rcmail_config['sig_above'] = false;
+
+// Use MIME encoding (quoted-printable) for 8bit characters in message body
+$rcmail_config['force_7bit'] = false;
+
+// Defaults of the search field configuration.
+// The array can contain a per-folder list of header fields which should be considered when searching
+// The entry with key '*' stands for all folders which do not have a specific list set.
+// Please note that folder names should to be in sync with $rcmail_config['default_folders']
+$rcmail_config['search_mods'] = null;  // Example: array('*' => array('subject'=>1, 'from'=>1), 'Sent' => array('subject'=>1, 'to'=>1));
+
+// Defaults of the addressbook search field configuration.
+$rcmail_config['addressbook_search_mods'] = null;  // Example: array('name'=>1, 'firstname'=>1, 'surname'=>1, 'email'=>1, '*'=>1);
+
+// 'Delete always'
+// This setting reflects if mail should be always deleted
+// when moving to Trash fails. This is necessary in some setups
+// when user is over quota and Trash is included in the quota.
+$rcmail_config['delete_always'] = false;
+
+// Directly delete messages in Junk instead of moving to Trash
+$rcmail_config['delete_junk'] = true;
+
+// Behavior if a received message requests a message delivery notification (read receipt)
+// 0 = ask the user, 1 = send automatically, 2 = ignore (never send or ask)
+// 3 = send automatically if sender is in addressbook, otherwise ask the user
+// 4 = send automatically if sender is in addressbook, otherwise ignore
+$rcmail_config['mdn_requests'] = 0;
+
+// Return receipt checkbox default state
+$rcmail_config['mdn_default'] = 0;
+
+// Delivery Status Notification checkbox default state
+$rcmail_config['dsn_default'] = 0;
+
+// Place replies in the folder of the message being replied to
+$rcmail_config['reply_same_folder'] = false;
+
+// Sets default mode of Forward feature to "forward as attachment"
+$rcmail_config['forward_attachment'] = false;
+
+// Defines address book (internal index) to which new contacts will be added
+// By default it is the first writeable addressbook.
+// Note: Use '0' for built-in address book.
+$rcmail_config['default_addressbook'] = null;
+
+// Enables spell checking before sending a message.
+$rcmail_config['spellcheck_before_send'] = false;
+
+// Skip alternative email addresses in autocompletion (show one address per contact)
+$rcmail_config['autocomplete_single'] = false;
+
+// Default font for composed HTML message.
+// Supported values: Andale Mono, Arial, Arial Black, Book Antiqua, Courier New,
+// Georgia, Helvetica, Impact, Tahoma, Terminal, Times New Roman, Trebuchet MS, Verdana
+$rcmail_config['default_font'] = '';
+
+// end of config file
diff --git a/install/debian/9/roundcube/vesta.php b/install/debian/9/roundcube/vesta.php
new file mode 100644
index 00000000..b3dd167f
--- /dev/null
+++ b/install/debian/9/roundcube/vesta.php
@@ -0,0 +1,73 @@
+<?php
+
+/**
+ * Vesta Control Panel Password Driver
+ *
+ * @version 1.0
+ * @author Serghey Rodin <skid@vestacp.com>
+ */
+class rcube_vesta_password {
+    function save($curpass, $passwd)
+    {
+        $rcmail = rcmail::get_instance();
+        $vesta_host = $rcmail->config->get('password_vesta_host');
+
+        if (empty($vesta_host))
+        {
+            $vesta_host = 'localhost';
+        }
+
+        $vesta_port = $rcmail->config->get('password_vesta_port');
+        if (empty($vesta_port))
+        {
+            $vesta_port = '8083';
+        }
+
+        $postvars = array(
+          'email' => $_SESSION['username'],
+          'password' => $curpass,
+          'new' => $passwd
+        );
+
+        $postdata = http_build_query($postvars);
+
+        $send  = 'POST /reset/mail/ HTTP/1.1' . PHP_EOL;
+        $send .= 'Host: ' . $vesta_host . PHP_EOL;
+        $send .= 'User-Agent: PHP Script' . PHP_EOL;
+        $send .= 'Content-length: ' . strlen($postdata) . PHP_EOL;
+        $send .= 'Content-type: application/x-www-form-urlencoded' . PHP_EOL;
+        $send .= 'Connection: close' . PHP_EOL;
+        $send .= PHP_EOL;
+        $send .= $postdata . PHP_EOL . PHP_EOL;
+
+        //$fp = fsockopen('ssl://' . $vesta_host, $vesta_port);
+        $errno = "";
+        $errstr = "";
+        $context = stream_context_create();
+
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer_name', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_host', false);
+        $result = stream_context_set_option($context, 'ssl', 'allow_self_signed', true);
+
+        $fp = stream_socket_client('ssl://' . $vesta_host . ':'.$vesta_port, $errno, $errstr, 60, STREAM_CLIENT_CONNECT, $context);
+        fputs($fp, $send);
+        $result = fread($fp, 2048);
+        fclose($fp);
+
+        $fp = fopen("/tmp/roundcube.log", 'w');
+        fwrite($fp, "test ok");
+        fwrite($fp, "\n");
+        fclose($fp);
+
+
+        if(strpos($result, 'ok') && !strpos($result, 'error'))
+        {
+            return PASSWORD_SUCCESS;
+        }
+        else {
+            return PASSWORD_ERROR;
+        }
+
+    }
+}
diff --git a/install/debian/9/sudo/admin b/install/debian/9/sudo/admin
new file mode 100644
index 00000000..4226bdd4
--- /dev/null
+++ b/install/debian/9/sudo/admin
@@ -0,0 +1,8 @@
+# Created by vesta installer
+Defaults env_keep="VESTA"
+Defaults:admin !syslog
+Defaults:admin !requiretty
+Defaults:root !requiretty
+
+admin   ALL=(ALL)       ALL
+admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/debian/9/templates/dns/child-ns.tpl b/install/debian/9/templates/dns/child-ns.tpl
new file mode 100755
index 00000000..42c046e4
--- /dev/null
+++ b/install/debian/9/templates/dns/child-ns.tpl
@@ -0,0 +1,14 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns1.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns2.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ns1' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='ns2' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/9/templates/dns/default.tpl b/install/debian/9/templates/dns/default.tpl
new file mode 100755
index 00000000..e0a37e62
--- /dev/null
+++ b/install/debian/9/templates/dns/default.tpl
@@ -0,0 +1,18 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/9/templates/dns/gmail.tpl b/install/debian/9/templates/dns/gmail.tpl
new file mode 100755
index 00000000..219c9d24
--- /dev/null
+++ b/install/debian/9/templates/dns/gmail.tpl
@@ -0,0 +1,12 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='localhost' TYPE='A' PRIORITY='' VALUE='127.0.0.1' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='MX' PRIORITY='1' VALUE='ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT1.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT2.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT3.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT4.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.google.com ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/9/templates/web/apache2/basedir.stpl b/install/debian/9/templates/web/apache2/basedir.stpl
new file mode 100644
index 00000000..d978d4c4
--- /dev/null
+++ b/install/debian/9/templates/web/apache2/basedir.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/9/templates/web/apache2/basedir.tpl b/install/debian/9/templates/web/apache2/basedir.tpl
new file mode 100644
index 00000000..96c94a1b
--- /dev/null
+++ b/install/debian/9/templates/web/apache2/basedir.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/9/templates/web/apache2/default.stpl b/install/debian/9/templates/web/apache2/default.stpl
new file mode 100644
index 00000000..ec34c279
--- /dev/null
+++ b/install/debian/9/templates/web/apache2/default.stpl
@@ -0,0 +1,43 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/9/templates/web/apache2/default.tpl b/install/debian/9/templates/web/apache2/default.tpl
new file mode 100644
index 00000000..3a227015
--- /dev/null
+++ b/install/debian/9/templates/web/apache2/default.tpl
@@ -0,0 +1,37 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/9/templates/web/apache2/hosting.stpl b/install/debian/9/templates/web/apache2/hosting.stpl
new file mode 100644
index 00000000..8892072b
--- /dev/null
+++ b/install/debian/9/templates/web/apache2/hosting.stpl
@@ -0,0 +1,49 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value upload_max_filesize 10M
+        php_admin_value max_execution_time 20
+        php_admin_value post_max_size  8M
+        php_admin_value memory_limit 32M
+        php_admin_flag mysql.allow_persistent  off
+        php_admin_flag safe_mode off
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/9/templates/web/apache2/hosting.tpl b/install/debian/9/templates/web/apache2/hosting.tpl
new file mode 100644
index 00000000..1eb26910
--- /dev/null
+++ b/install/debian/9/templates/web/apache2/hosting.tpl
@@ -0,0 +1,43 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value upload_max_filesize 10M
+        php_admin_value max_execution_time 20
+        php_admin_value post_max_size  8M
+        php_admin_value memory_limit 32M
+        php_admin_flag mysql.allow_persistent  off
+        php_admin_flag safe_mode off
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/9/templates/web/apache2/phpcgi.sh b/install/debian/9/templates/web/apache2/phpcgi.sh
new file mode 100755
index 00000000..6565e103
--- /dev/null
+++ b/install/debian/9/templates/web/apache2/phpcgi.sh
@@ -0,0 +1,16 @@
+#!/bin/bash
+# Adding php wrapper
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+wrapper_script='#!/usr/bin/php-cgi -cphp5-cgi.ini'
+wrapper_file="$home_dir/$user/web/$domain/cgi-bin/php"
+
+echo "$wrapper_script" > $wrapper_file
+chown $user:$user $wrapper_file
+chmod -f 751 $wrapper_file
+
+exit 0
diff --git a/install/debian/9/templates/web/apache2/phpcgi.stpl b/install/debian/9/templates/web/apache2/phpcgi.stpl
new file mode 100644
index 00000000..731355bc
--- /dev/null
+++ b/install/debian/9/templates/web/apache2/phpcgi.stpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        SSLRequireSSL
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        Action phpcgi-script /cgi-bin/php
+        <Files *.php>
+            SetHandler phpcgi-script
+        </Files>
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/9/templates/web/apache2/phpcgi.tpl b/install/debian/9/templates/web/apache2/phpcgi.tpl
new file mode 100644
index 00000000..c6796d29
--- /dev/null
+++ b/install/debian/9/templates/web/apache2/phpcgi.tpl
@@ -0,0 +1,31 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        Action phpcgi-script /cgi-bin/php
+        <Files *.php>
+            SetHandler phpcgi-script
+        </Files>
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/9/templates/web/apache2/phpfcgid.sh b/install/debian/9/templates/web/apache2/phpfcgid.sh
new file mode 100755
index 00000000..e8058249
--- /dev/null
+++ b/install/debian/9/templates/web/apache2/phpfcgid.sh
@@ -0,0 +1,22 @@
+#!/bin/bash
+# Adding php wrapper
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+wrapper_script="#!/bin/sh
+PHPRC=/usr/local/lib
+export PHPRC
+export PHP_FCGI_MAX_REQUESTS=1000
+export PHP_FCGI_CHILDREN=20
+exec  /usr/bin/php-cgi
+"
+wrapper_file="$home_dir/$user/web/$domain/cgi-bin/fcgi-starter"
+
+echo "$wrapper_script" > $wrapper_file
+chown $user:$user $wrapper_file
+chmod -f 751 $wrapper_file
+
+exit 0
diff --git a/install/debian/9/templates/web/apache2/phpfcgid.stpl b/install/debian/9/templates/web/apache2/phpfcgid.stpl
new file mode 100644
index 00000000..156c8a91
--- /dev/null
+++ b/install/debian/9/templates/web/apache2/phpfcgid.stpl
@@ -0,0 +1,39 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        SSLRequireSSL
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        <Files *.php>
+          SetHandler fcgid-script
+        </Files>
+        FCGIWrapper %home%/%user%/web/%domain%/cgi-bin/fcgi-starter .php
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    php_admin_value open_basedir none
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/9/templates/web/apache2/phpfcgid.tpl b/install/debian/9/templates/web/apache2/phpfcgid.tpl
new file mode 100644
index 00000000..a4c01269
--- /dev/null
+++ b/install/debian/9/templates/web/apache2/phpfcgid.tpl
@@ -0,0 +1,31 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        <Files *.php>
+          SetHandler fcgid-script
+        </Files>
+        FCGIWrapper %home%/%user%/web/%domain%/cgi-bin/fcgi-starter .php
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/9/templates/web/awstats/awstats.tpl b/install/debian/9/templates/web/awstats/awstats.tpl
new file mode 100755
index 00000000..9a92e0fd
--- /dev/null
+++ b/install/debian/9/templates/web/awstats/awstats.tpl
@@ -0,0 +1,133 @@
+LogFile="/var/log/%web_system%/domains/%domain%.log"
+LogType=W
+LogFormat=1
+LogSeparator=" "
+SiteDomain="%domain_idn%"
+HostAliases="%alias_idn%"
+DirData="%home%/%user%/web/%domain%/stats"
+DirCgi="/vstats"
+DirIcons="/vstats/icon"
+AllowToUpdateStatsFromBrowser=0
+AllowFullYearView=2
+EnableLockForUpdate=1
+DNSStaticCacheFile="dnscache.txt"
+DNSLastUpdateCacheFile="dnscachelastupdate.txt"
+SkipDNSLookupFor=""
+AllowAccessFromWebToAuthenticatedUsersOnly=0
+AllowAccessFromWebToFollowingAuthenticatedUsers=""
+AllowAccessFromWebToFollowingIPAddresses=""
+CreateDirDataIfNotExists=0
+BuildHistoryFormat=text
+BuildReportFormat=html
+SaveDatabaseFilesWithPermissionsForEveryone=0
+PurgeLogFile=0
+ArchiveLogRecords=0
+KeepBackupOfHistoricFiles=1
+DefaultFile="index.php index.html"
+SkipHosts="127.0.0.1
+SkipUserAgents=""
+SkipFiles=""
+SkipReferrersBlackList=""
+OnlyHosts=""
+OnlyUserAgents=""
+OnlyUsers=""
+OnlyFiles=""
+NotPageList="css js class gif jpg jpeg png bmp ico rss xml swf"
+ValidHTTPCodes="200 304"
+ValidSMTPCodes="1 250"
+AuthenticatedUsersNotCaseSensitive=0
+URLNotCaseSensitive=0
+URLWithAnchor=0
+URLQuerySeparators="?;"
+URLWithQuery=0
+URLWithQueryWithOnlyFollowingParameters=""
+URLWithQueryWithoutFollowingParameters=""
+URLReferrerWithQuery=0
+WarningMessages=1
+ErrorMessages=""
+DebugMessages=0
+NbOfLinesForCorruptedLog=50
+WrapperScript=""
+DecodeUA=0
+MiscTrackerUrl="/js/awstats_misc_tracker.js"
+UseFramesWhenCGI=1
+DetailedReportsOnNewWindows=1
+Expires=3600
+MaxRowsInHTMLOutput=1000
+Lang="auto"
+DirLang="./lang"
+ShowMenu=1
+ShowSummary=UVPHB
+ShowMonthStats=UVPHB
+ShowDaysOfMonthStats=VPHB
+ShowDaysOfWeekStats=PHB
+ShowHoursStats=PHB
+ShowDomainsStats=PHB
+ShowHostsStats=PHBL
+ShowAuthenticatedUsers=0
+ShowRobotsStats=HBL
+ShowWormsStats=0
+ShowEMailSenders=0
+ShowEMailReceivers=0
+ShowSessionsStats=1
+ShowPagesStats=PBEX
+ShowFileTypesStats=HB
+ShowFileSizesStats=0
+ShowDownloadsStats=HB
+ShowOSStats=1
+ShowBrowsersStats=1
+ShowScreenSizeStats=0
+ShowOriginStats=PH
+ShowKeyphrasesStats=1
+ShowKeywordsStats=1
+ShowMiscStats=a
+ShowHTTPErrorsStats=1
+ShowSMTPErrorsStats=0
+ShowClusterStats=0
+AddDataArrayMonthStats=1
+AddDataArrayShowDaysOfMonthStats=1
+AddDataArrayShowDaysOfWeekStats=1
+AddDataArrayShowHoursStats=1
+IncludeInternalLinksInOriginSection=0
+MaxNbOfDomain = 10
+MinHitDomain  = 1
+MaxNbOfHostsShown = 10
+MinHitHost    = 1
+MaxNbOfLoginShown = 10
+MinHitLogin   = 1
+MaxNbOfRobotShown = 10
+MinHitRobot   = 1
+MaxNbOfDownloadsShown = 10
+MinHitDownloads = 1
+MaxNbOfPageShown = 10
+MinHitFile    = 1
+MaxNbOfOsShown = 10
+MinHitOs      = 1
+MaxNbOfBrowsersShown = 10
+MinHitBrowser = 1
+MaxNbOfScreenSizesShown = 5
+MinHitScreenSize = 1
+MaxNbOfWindowSizesShown = 5
+MinHitWindowSize = 1
+MaxNbOfRefererShown = 10
+MinHitRefer   = 1
+MaxNbOfKeyphrasesShown = 10
+MinHitKeyphrase = 1
+MaxNbOfKeywordsShown = 10
+MinHitKeyword = 1
+MaxNbOfEMailsShown = 20
+MinHitEMail   = 1
+FirstDayOfWeek=0
+ShowFlagLinks=""
+ShowLinksOnUrl=1
+UseHTTPSLinkForUrl=""
+MaxLengthOfShownURL=64
+HTMLHeadSection=""
+HTMLEndSection=""
+MetaRobot=0
+Logo="awstats_logo6.png"
+LogoLink="http://awstats.sourceforge.net"
+BarWidth   = 260
+BarHeight  = 90
+StyleSheet=""
+ExtraTrackedRowsLimit=500
diff --git a/install/debian/9/templates/web/awstats/index.tpl b/install/debian/9/templates/web/awstats/index.tpl
new file mode 100755
index 00000000..9df9bb5c
--- /dev/null
+++ b/install/debian/9/templates/web/awstats/index.tpl
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+    <title>Awstats log analyzer </title>
+</head>
+<frameset rows="60,*" cols="*">
+    <frame src="nav.html" name="nav" scrolling="no" noresize>
+    <frame src="%month%/index.html" name="stats">
+</frameset>
+</html>
diff --git a/install/debian/9/templates/web/awstats/nav.tpl b/install/debian/9/templates/web/awstats/nav.tpl
new file mode 100755
index 00000000..f29bed68
--- /dev/null
+++ b/install/debian/9/templates/web/awstats/nav.tpl
@@ -0,0 +1,23 @@
+<html>
+<head>
+    <title>Awstats navigation</title>
+    <script language="javascript">
+        function change() {
+            top.stats.location= document.period.select.value + '/';
+        }
+    </script>
+</head>
+<body>
+<table width="100%" border="0" cellspacing="0" cellpadding="0">
+<tr>
+    <td><img src="logo.png" alt="vesta"></td>
+    <td><form name="period" action="" method="get">
+        <select name="select" ONCHANGE="change()">
+%select_month%
+        </select>
+    </form>
+    </td>
+</tr>
+</table>
+</body>
+</html>
diff --git a/install/debian/9/templates/web/nginx/caching.sh b/install/debian/9/templates/web/nginx/caching.sh
new file mode 100755
index 00000000..09d8efe7
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/caching.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+user=$1
+domain=$2
+ip=$3
+home=$4
+docroot=$5
+
+str="proxy_cache_path /var/cache/nginx/$domain levels=2" 
+str="$str keys_zone=$domain:10m inactive=60m max_size=512m;" 
+conf='/etc/nginx/conf.d/01_caching_pool.conf'
+if [ -e "$conf" ]; then
+    if [ -z "$(grep "=${domain}:" $conf)" ]; then
+        echo "$str" >> $conf
+    fi
+else
+    echo "$str" >> $conf
+fi
+
diff --git a/install/debian/9/templates/web/nginx/caching.stpl b/install/debian/9/templates/web/nginx/caching.stpl
new file mode 100755
index 00000000..52641dbe
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/caching.stpl
@@ -0,0 +1,44 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/caching.tpl b/install/debian/9/templates/web/nginx/caching.tpl
new file mode 100755
index 00000000..36761b65
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/caching.tpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/default.stpl b/install/debian/9/templates/web/nginx/default.stpl
new file mode 100755
index 00000000..fa538060
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/default.stpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/9/templates/web/nginx/default.tpl b/install/debian/9/templates/web/nginx/default.tpl
new file mode 100755
index 00000000..4d5c774b
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/default.tpl
@@ -0,0 +1,33 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/9/templates/web/nginx/hosting.sh b/install/debian/9/templates/web/nginx/hosting.sh
new file mode 100755
index 00000000..eeed37ef
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/9/templates/web/nginx/hosting.stpl b/install/debian/9/templates/web/nginx/hosting.stpl
new file mode 100755
index 00000000..d778d633
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/hosting.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/9/templates/web/nginx/hosting.tpl b/install/debian/9/templates/web/nginx/hosting.tpl
new file mode 100755
index 00000000..15961c95
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/hosting.tpl
@@ -0,0 +1,35 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/9/templates/web/nginx/http2.stpl b/install/debian/9/templates/web/nginx/http2.stpl
new file mode 100644
index 00000000..76dd2f8e
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/http2.stpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/httpd/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/httpd/domains/%domain%.log combined;
+            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/9/templates/web/nginx/http2.tpl b/install/debian/9/templates/web/nginx/http2.tpl
new file mode 100644
index 00000000..c1fec114
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/http2.tpl
@@ -0,0 +1,33 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/httpd/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/httpd/domains/%domain%.log combined;
+            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/9/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/debian/9/templates/web/nginx/php-fpm/cms_made_simple.stpl
new file mode 100644
index 00000000..d85bcce3
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/cms_made_simple.tpl b/install/debian/9/templates/web/nginx/php-fpm/cms_made_simple.tpl
new file mode 100644
index 00000000..f9e90393
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/cms_made_simple.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/codeigniter2.stpl b/install/debian/9/templates/web/nginx/php-fpm/codeigniter2.stpl
new file mode 100644
index 00000000..9c24c3ea
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/codeigniter2.stpl
@@ -0,0 +1,61 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/codeigniter2.tpl b/install/debian/9/templates/web/nginx/php-fpm/codeigniter2.tpl
new file mode 100644
index 00000000..d2422be2
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/codeigniter2.tpl
@@ -0,0 +1,57 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/codeigniter3.stpl b/install/debian/9/templates/web/nginx/php-fpm/codeigniter3.stpl
new file mode 100644
index 00000000..d7186314
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/codeigniter3.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/codeigniter3.tpl b/install/debian/9/templates/web/nginx/php-fpm/codeigniter3.tpl
new file mode 100644
index 00000000..54f81b99
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/codeigniter3.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/datalife_engine.stpl b/install/debian/9/templates/web/nginx/php-fpm/datalife_engine.stpl
new file mode 100644
index 00000000..4f0b9ec7
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/datalife_engine.stpl
@@ -0,0 +1,127 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/datalife_engine.tpl b/install/debian/9/templates/web/nginx/php-fpm/datalife_engine.tpl
new file mode 100644
index 00000000..3ea45347
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/datalife_engine.tpl
@@ -0,0 +1,123 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/default.stpl b/install/debian/9/templates/web/nginx/php-fpm/default.stpl
new file mode 100644
index 00000000..5cb55311
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/default.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/default.tpl b/install/debian/9/templates/web/nginx/php-fpm/default.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/default.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/dokuwiki.stpl b/install/debian/9/templates/web/nginx/php-fpm/dokuwiki.stpl
new file mode 100644
index 00000000..f85032ba
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/dokuwiki.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/dokuwiki.tpl b/install/debian/9/templates/web/nginx/php-fpm/dokuwiki.tpl
new file mode 100644
index 00000000..0a9a75ed
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/dokuwiki.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal6.stpl b/install/debian/9/templates/web/nginx/php-fpm/drupal6.stpl
new file mode 100644
index 00000000..91a70936
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal6.stpl
@@ -0,0 +1,101 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # For Drupal 6 and bwlow:
+        # Some modules enforce no slash (/) at the end of the URL
+        # Else this rewrite block wouldn't be needed (GlobalRedirect)
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal6.tpl b/install/debian/9/templates/web/nginx/php-fpm/drupal6.tpl
new file mode 100644
index 00000000..ac32dcd9
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal6.tpl
@@ -0,0 +1,98 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # For Drupal 6 and bwlow:
+        # Some modules enforce no slash (/) at the end of the URL
+        # Else this rewrite block wouldn't be needed (GlobalRedirect)
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl b/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl
new file mode 100644
index 00000000..3b9dabf5
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl
@@ -0,0 +1,101 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl b/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl
new file mode 100644
index 00000000..1b979475
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl
@@ -0,0 +1,98 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl b/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl
new file mode 100644
index 00000000..50d85b68
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl
@@ -0,0 +1,102 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$)|^/update.php {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl b/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl
new file mode 100644
index 00000000..71b538bf
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl
@@ -0,0 +1,99 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$)|^/update.php {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/joomla.stpl b/install/debian/9/templates/web/nginx/php-fpm/joomla.stpl
new file mode 100644
index 00000000..704405f3
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/joomla.stpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/joomla.tpl b/install/debian/9/templates/web/nginx/php-fpm/joomla.tpl
new file mode 100644
index 00000000..91b7a8f1
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/joomla.tpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/laravel.stpl b/install/debian/9/templates/web/nginx/php-fpm/laravel.stpl
new file mode 100644
index 00000000..477f6f01
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/laravel.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/laravel.tpl b/install/debian/9/templates/web/nginx/php-fpm/laravel.tpl
new file mode 100644
index 00000000..d14b0173
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/laravel.tpl
@@ -0,0 +1,50 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/magento.stpl b/install/debian/9/templates/web/nginx/php-fpm/magento.stpl
new file mode 100644
index 00000000..fdab43aa
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/magento.stpl
@@ -0,0 +1,198 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %sdocroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %sdocroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %sdocroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %sdocroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/magento.tpl b/install/debian/9/templates/web/nginx/php-fpm/magento.tpl
new file mode 100644
index 00000000..3f292fff
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/magento.tpl
@@ -0,0 +1,194 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %docroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %docroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %docroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %docroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/modx.stpl b/install/debian/9/templates/web/nginx/php-fpm/modx.stpl
new file mode 100644
index 00000000..f410ab77
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/modx.stpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  https://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/modx.tpl b/install/debian/9/templates/web/nginx/php-fpm/modx.tpl
new file mode 100644
index 00000000..342d3ecf
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/modx.tpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  http://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/moodle.stpl b/install/debian/9/templates/web/nginx/php-fpm/moodle.stpl
new file mode 100644
index 00000000..f15a68c5
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/moodle.stpl
@@ -0,0 +1,90 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/moodle.tpl b/install/debian/9/templates/web/nginx/php-fpm/moodle.tpl
new file mode 100644
index 00000000..c20ba648
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/moodle.tpl
@@ -0,0 +1,87 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/no-php.stpl b/install/debian/9/templates/web/nginx/php-fpm/no-php.stpl
new file mode 100644
index 00000000..bc8b53a3
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/no-php.stpl
@@ -0,0 +1,47 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/no-php.tpl b/install/debian/9/templates/web/nginx/php-fpm/no-php.tpl
new file mode 100644
index 00000000..7ff8aa1d
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/no-php.tpl
@@ -0,0 +1,43 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/odoo.stpl b/install/debian/9/templates/web/nginx/php-fpm/odoo.stpl
new file mode 100644
index 00000000..d6697d7a
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/odoo.stpl
@@ -0,0 +1,70 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+    
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/odoo.tpl b/install/debian/9/templates/web/nginx/php-fpm/odoo.tpl
new file mode 100644
index 00000000..b1240aae
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/odoo.tpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/opencart.stpl b/install/debian/9/templates/web/nginx/php-fpm/opencart.stpl
new file mode 100644
index 00000000..908b9aeb
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/opencart.stpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/opencart.tpl b/install/debian/9/templates/web/nginx/php-fpm/opencart.tpl
new file mode 100644
index 00000000..d0a9060b
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/opencart.tpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/owncloud.stpl b/install/debian/9/templates/web/nginx/php-fpm/owncloud.stpl
new file mode 100644
index 00000000..891566b9
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/owncloud.stpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/owncloud.tpl b/install/debian/9/templates/web/nginx/php-fpm/owncloud.tpl
new file mode 100644
index 00000000..e3ec31de
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/owncloud.tpl
@@ -0,0 +1,81 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+            access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/piwik.stpl b/install/debian/9/templates/web/nginx/php-fpm/piwik.stpl
new file mode 100644
index 00000000..78c1bb78
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/piwik.stpl
@@ -0,0 +1,73 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+        return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+        }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/piwik.tpl b/install/debian/9/templates/web/nginx/php-fpm/piwik.tpl
new file mode 100644
index 00000000..f94fb7de
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/piwik.tpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+            return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/pyrocms.stpl b/install/debian/9/templates/web/nginx/php-fpm/pyrocms.stpl
new file mode 100644
index 00000000..5ffc9ed5
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+        }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/pyrocms.tpl b/install/debian/9/templates/web/nginx/php-fpm/pyrocms.tpl
new file mode 100644
index 00000000..297fe0e8
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/sendy.stpl b/install/debian/9/templates/web/nginx/php-fpm/sendy.stpl
new file mode 100644
index 00000000..0b351000
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/sendy.stpl
@@ -0,0 +1,88 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+     location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/sendy.tpl b/install/debian/9/templates/web/nginx/php-fpm/sendy.tpl
new file mode 100644
index 00000000..b27b427d
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/sendy.tpl
@@ -0,0 +1,86 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/wordpress.stpl b/install/debian/9/templates/web/nginx/php-fpm/wordpress.stpl
new file mode 100644
index 00000000..5cb55311
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/wordpress.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/wordpress.tpl b/install/debian/9/templates/web/nginx/php-fpm/wordpress.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/wordpress.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/wordpress2.stpl b/install/debian/9/templates/web/nginx/php-fpm/wordpress2.stpl
new file mode 100644
index 00000000..e0aeb524
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/wordpress2.stpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/wordpress2.tpl b/install/debian/9/templates/web/nginx/php-fpm/wordpress2.tpl
new file mode 100644
index 00000000..bccb8b3d
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/wordpress2.tpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/debian/9/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
new file mode 100644
index 00000000..0d933b30
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+} 
diff --git a/install/debian/9/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl b/install/debian/9/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
new file mode 100644
index 00000000..39e366b7
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/proxy_ip.tpl b/install/debian/9/templates/web/nginx/proxy_ip.tpl
new file mode 100755
index 00000000..ae195617
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/proxy_ip.tpl
@@ -0,0 +1,9 @@
+server {
+    listen       %ip%:%proxy_port% default;
+    server_name  _;
+    #access_log  /var/log/nginx/%ip%.log main;
+    location / {
+        proxy_pass  http://%ip%:%web_port%;
+   }
+}
+
diff --git a/install/debian/9/templates/web/php5-fpm/default.tpl b/install/debian/9/templates/web/php5-fpm/default.tpl
new file mode 100644
index 00000000..209e1e43
--- /dev/null
+++ b/install/debian/9/templates/web/php5-fpm/default.tpl
@@ -0,0 +1,21 @@
+[%backend%]
+listen = 127.0.0.1:%backend_port%
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/9/templates/web/php5-fpm/no-php.tpl b/install/debian/9/templates/web/php5-fpm/no-php.tpl
new file mode 100644
index 00000000..047c33ed
--- /dev/null
+++ b/install/debian/9/templates/web/php5-fpm/no-php.tpl
@@ -0,0 +1,20 @@
+;[%backend%]
+;listen = /dev/null
+
+;user = %user%
+;group = %user%
+
+;listen.owner = %user%
+;listen.group = www-data
+
+;pm = ondemand
+;pm.max_children = 4
+;pm.max_requests = 4000
+;pm.process_idle_timeout = 10s
+;pm.status_path = /status
+
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /home/%user%/tmp
+;env[TMPDIR] = /home/%user%/tmp
+;env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/9/templates/web/php5-fpm/socket.tpl b/install/debian/9/templates/web/php5-fpm/socket.tpl
new file mode 100644
index 00000000..a0151084
--- /dev/null
+++ b/install/debian/9/templates/web/php5-fpm/socket.tpl
@@ -0,0 +1,24 @@
+[%backend%]
+listen = /var/run/php/%backend%.sock
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+listen.owner = %user%
+listen.group = www-data
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/9/templates/web/skel/document_errors/403.html b/install/debian/9/templates/web/skel/document_errors/403.html
new file mode 100755
index 00000000..9c3f6baa
--- /dev/null
+++ b/install/debian/9/templates/web/skel/document_errors/403.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>403 &mdash; Forbidden</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="You do not have permission to view this"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>403</h1>
+    <h2>Forbidden</h2>
+    <div>
+        Unfortunately, you do not have permission to view this
+    </div>
+</body>
+
+</html>
diff --git a/install/debian/9/templates/web/skel/document_errors/404.html b/install/debian/9/templates/web/skel/document_errors/404.html
new file mode 100755
index 00000000..2cee7708
--- /dev/null
+++ b/install/debian/9/templates/web/skel/document_errors/404.html
@@ -0,0 +1,28 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>404 &mdash; Not Found</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, page not found"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+    <h1>404</h1>
+    <h2>Page Not Found</h2>
+    <div>
+        It seems that the page you were trying to reach does not exist anymore, or maybe it has just moved.
+        You can start again from the <a href="http://%domain%/">home</a> or go back to <a href="javascript:%20history.go(-1)">previous page</a>.
+    </div>
+</body>
+</html>
diff --git a/install/debian/9/templates/web/skel/document_errors/50x.html b/install/debian/9/templates/web/skel/document_errors/50x.html
new file mode 100755
index 00000000..85ba648b
--- /dev/null
+++ b/install/debian/9/templates/web/skel/document_errors/50x.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>500 &mdash; Internal Sever Error</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, something went wrong. Internal Server Error"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>500</h1>
+    <h2>Internal Server Error</h2>
+    <div>
+        Sorry, something went wrong :(
+    </div>
+</body>
+
+</html>
diff --git a/install/debian/9/templates/web/skel/public_html/index.html b/install/debian/9/templates/web/skel/public_html/index.html
new file mode 100755
index 00000000..4f5bb724
--- /dev/null
+++ b/install/debian/9/templates/web/skel/public_html/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="http://vestacp.com/">Powered by VESTA</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/debian/9/templates/web/skel/public_html/robots.txt b/install/debian/9/templates/web/skel/public_html/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/debian/9/templates/web/skel/public_html/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/debian/9/templates/web/skel/public_shtml/index.html b/install/debian/9/templates/web/skel/public_shtml/index.html
new file mode 100755
index 00000000..4f5bb724
--- /dev/null
+++ b/install/debian/9/templates/web/skel/public_shtml/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="http://vestacp.com/">Powered by VESTA</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/debian/9/templates/web/skel/public_shtml/robots.txt b/install/debian/9/templates/web/skel/public_shtml/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/debian/9/templates/web/skel/public_shtml/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/debian/9/templates/web/suspend/.htaccess b/install/debian/9/templates/web/suspend/.htaccess
new file mode 100755
index 00000000..5a6df83f
--- /dev/null
+++ b/install/debian/9/templates/web/suspend/.htaccess
@@ -0,0 +1,2 @@
+ErrorDocument 403 /index.html
+ErrorDocument 404 /index.html
diff --git a/install/debian/9/templates/web/suspend/index.html b/install/debian/9/templates/web/suspend/index.html
new file mode 100755
index 00000000..f2d04e1f
--- /dev/null
+++ b/install/debian/9/templates/web/suspend/index.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>Website Suspended</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This website has been suspended."/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:84px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: 15px 0 25px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+<body>
+    <h1>SUSPENDED</h1>
+    <h2>This website has been suspended.</h2>
+    <div>
+        Please contact the technical support department.
+    </div>
+</body>
+</html>
diff --git a/install/debian/9/templates/web/webalizer/webalizer.tpl b/install/debian/9/templates/web/webalizer/webalizer.tpl
new file mode 100755
index 00000000..068adcfb
--- /dev/null
+++ b/install/debian/9/templates/web/webalizer/webalizer.tpl
@@ -0,0 +1,110 @@
+HostName         %domain_idn%
+LogFile          /var/log/%web_system%/domains/%domain%.log
+OutputDir        %home%/%user%/web/%domain%/stats
+HistoryName      %home%/%user%/web/%domain%/stats/%domain%.hist
+Incremental      yes
+IncrementalName  %home%/%user%/web/%domain%/stats/%domain%.current
+PageType         htm*
+PageType         cgi
+PageType         php
+PageType         shtml
+DNSCache         /var/lib/webalizer/dns_cache.db
+DNSChildren      10
+Quiet            yes
+FoldSeqErr       yes
+IndexAlias       index.php
+HideURL          *.gif
+HideURL          *.GIF
+HideURL          *.jpg
+HideURL          *.JPG
+HideURL          *.png
+HideURL          *.PNG
+HideURL          *.ra
+SearchEngine     abcsearch.          terms=
+SearchEngine     alexa.              q=
+SearchEngine     alltheweb.          q=
+SearchEngine     alltheweb.          query=
+SearchEngine     alot.               q=
+SearchEngine     altavista.          q=
+SearchEngine     aolsearch.          query=
+SearchEngine     aport.ru            r=
+SearchEngine     ask.                q=
+SearchEngine     atlas.cz            q=
+SearchEngine     bbc.                q=
+SearchEngine     bing.               q=
+SearchEngine     blingo.             q=
+SearchEngine     blogs.yandex.ru     text=
+SearchEngine     btopenworld         query=
+SearchEngine     buscador.ya.com     q=
+SearchEngine     busca.              q=
+SearchEngine     business.           query=
+SearchEngine     centrum.cz          q=
+SearchEngine     chiff.              q=
+SearchEngine     clusty.             query=
+SearchEngine     comcast.            q=
+SearchEngine     crawler.            q=
+SearchEngine     cuil.               q=
+SearchEngine     dmoz.               search=
+SearchEngine     dogpile.com         q=
+SearchEngine     dpxml               qkw=
+SearchEngine     eureka.             searchword=
+SearchEngine     euroseek.           string=
+SearchEngine     exalead.            q=
+SearchEngine     excite              search=
+SearchEngine     ezilon.             q=
+SearchEngine     fastbrowsersearch.  q=
+SearchEngine     feedster.com        q=
+SearchEngine     fireball.de         q=
+SearchEngine     fireball.           keyword=
+SearchEngine     freeserve.          q=
+SearchEngine     gigablast.          q=
+SearchEngine     gogo.ru             q=
+SearchEngine     go.mail.ru          q=
+SearchEngine     google.             q=
+SearchEngine     hakia.              q=
+SearchEngine     hotbot.             query=
+SearchEngine     infoseek.           qt=
+SearchEngine     iwon                searchfor=
+SearchEngine     ixquick.com         query=
+SearchEngine     joeant.             keywords=
+SearchEngine     jyxo.cz             s=
+SearchEngine     looksmart.          key=
+SearchEngine     lycos.              query=
+SearchEngine     mamma.              q=
+SearchEngine     metacrawler         q=
+SearchEngine     msn.                MT=
+SearchEngine     msxml               qkw=
+SearchEngine     mysearch.           searchfor=
+SearchEngine     mywebsearch.        searchfor=
+SearchEngine     netscape.           q=
+SearchEngine     nigma.ru            q=
+SearchEngine     northernlight.      qr=
+SearchEngine     ntlworld.           q=
+SearchEngine     orange.             q=
+SearchEngine     overture.           Keywords=
+SearchEngine     punto.ru            text=
+SearchEngine     rambler.            keyword=
+SearchEngine     search.aol.         q=
+SearchEngine     search.babylon.     q=
+SearchEngine     search.centrum.     phrase=
+SearchEngine     search.conduit.     q=
+SearchEngine     search.earthlink    q=
+SearchEngine     search.icq.         q=
+SearchEngine     search.live.com     q=
+SearchEngine     search.rambler.ru   words=
+SearchEngine     search.winamp.      q=
+SearchEngine     searchy.            q=
+SearchEngine     seznam.cz           w=
+SearchEngine     snap.               query=
+SearchEngine     teoma.              q=
+SearchEngine     teradex.com         q=
+SearchEngine     ukplus              key=
+SearchEngine     verizon.            q=
+SearchEngine     virginmedia.        q=
+SearchEngine     voila.              rdata=
+SearchEngine     webcrawler          searchText=
+SearchEngine     web.search.naver.   query=
+SearchEngine     wisenut             q=
+SearchEngine     yahoo.              p=
+SearchEngine     yandex.             text=
+SearchEngine     yodao.              q=
diff --git a/install/debian/9/vsftpd/vsftpd.conf b/install/debian/9/vsftpd/vsftpd.conf
new file mode 100644
index 00000000..1ca1a992
--- /dev/null
+++ b/install/debian/9/vsftpd/vsftpd.conf
@@ -0,0 +1,26 @@
+anonymous_enable=NO
+local_enable=YES
+write_enable=YES
+local_umask=022
+anon_umask=022
+anon_upload_enable=NO
+dirmessage_enable=YES
+xferlog_enable=YES
+connect_from_port_20=YES
+xferlog_std_format=YES
+dual_log_enable=YES
+chroot_local_user=YES
+listen=YES
+pam_service_name=vsftpd
+userlist_enable=NO
+tcp_wrappers=YES
+force_dot_files=YES
+ascii_upload_enable=YES
+ascii_download_enable=YES
+#allow_writable_chroot=YES
+allow_writeable_chroot=YES
+seccomp_sandbox=NO
+pasv_enable=YES
+pasv_max_port=12100
+pasv_min_port=12000
+use_localtime=YES

From d7eb12defa542117db6f74a4b4ead58230518141 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sat, 30 Dec 2017 12:51:37 +0200
Subject: [PATCH 0007/2300] fix for multiple php-fpm init scripts

---
 bin/v-restart-web-backend | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restart-web-backend b/bin/v-restart-web-backend
index b18f6abc..e1d8ebe9 100755
--- a/bin/v-restart-web-backend
+++ b/bin/v-restart-web-backend
@@ -50,7 +50,7 @@ if [ -z "$WEB_BACKEND" ] || [ "$WEB_BACKEND" = 'remote' ]; then
 fi
 
 # Restart system
-php_fpm=$(ls /etc/init.d/php*-fpm* 2>/dev/null |cut -f 4 -d /)
+php_fpm=$(ls /etc/init.d/php*-fpm* 2>/dev/null |cut -f 4 -d / |head -n 1)
 if [ -z "$php_fpm" ]; then
     service $WEB_BACKEND restart >/dev/null 2>&1
 else

From 5b834dc8c1efcf4e89eb5b62a98296f51e5bc09d Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sun, 31 Dec 2017 11:45:21 +0200
Subject: [PATCH 0008/2300] fixes for php-fpm on debian 9

---
 .../debian/9/{php5-fpm => php-fpm}/www.conf   |  0
 install/vst-install-debian.sh                 | 31 ++++++++++++++-----
 2 files changed, 24 insertions(+), 7 deletions(-)
 rename install/debian/9/{php5-fpm => php-fpm}/www.conf (100%)

diff --git a/install/debian/9/php5-fpm/www.conf b/install/debian/9/php-fpm/www.conf
similarity index 100%
rename from install/debian/9/php5-fpm/www.conf
rename to install/debian/9/php-fpm/www.conf
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 41ab0063..f897ea4f 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -486,7 +486,7 @@ apt-key add deb_signing.key
 # Creating backup directory tree
 mkdir -p $vst_backups
 cd $vst_backups
-mkdir nginx apache2 php5 php5-fpm vsftpd proftpd bind exim4 dovecot clamd
+mkdir nginx apache2 php php5 php5-fpm vsftpd proftpd bind exim4 dovecot clamd
 mkdir spamassassin mysql postgresql mongodb vesta
 
 # Backing up Nginx configuration
@@ -567,9 +567,11 @@ if [ "$apache" = 'no' ]; then
     software=$(echo "$software" | sed -e "s/libapache2-mod-ruid2//")
     software=$(echo "$software" | sed -e "s/libapache2-mod-fcgid//")
     software=$(echo "$software" | sed -e "s/libapache2-mod-php5//")
+    software=$(echo "$software" | sed -e "s/libapache2-mod-php//")
 fi
 if [ "$phpfpm" = 'no' ]; then
     software=$(echo "$software" | sed -e "s/php5-fpm//")
+    software=$(echo "$software" | sed -e "s/php-fpm//")
 fi
 if [ "$vsftpd" = 'no' ]; then
     software=$(echo "$software" | sed -e "s/vsftpd//")
@@ -605,12 +607,14 @@ if [ "$mysql" = 'no' ]; then
     software=$(echo "$software" | sed -e 's/mysql-client//')
     software=$(echo "$software" | sed -e 's/mysql-common//')
     software=$(echo "$software" | sed -e 's/php5-mysql//')
+    software=$(echo "$software" | sed -e 's/php-mysql//')
     software=$(echo "$software" | sed -e 's/phpMyAdmin//')
 fi
 if [ "$postgresql" = 'no' ]; then
     software=$(echo "$software" | sed -e 's/postgresql-contrib//')
     software=$(echo "$software" | sed -e 's/postgresql//')
     software=$(echo "$software" | sed -e 's/php5-pgsql//')
+    software=$(echo "$software" | sed -e 's/php-pgsql//')
     software=$(echo "$software" | sed -e 's/phppgadmin//')
 fi
 if [ "$softaculous" = 'no' ]; then
@@ -740,8 +744,14 @@ if [ "$apache" = 'no' ] && [ "$nginx"  = 'yes' ]; then
     echo "WEB_PORT='80'" >> $VESTA/conf/vesta.conf
     echo "WEB_SSL_PORT='443'" >> $VESTA/conf/vesta.conf
     echo "WEB_SSL='openssl'"  >> $VESTA/conf/vesta.conf
-    if [ "$phpfpm" = 'yes' ]; then
-        echo "WEB_BACKEND='php5-fpm'" >> $VESTA/conf/vesta.conf
+    if [ "$release" -eq 9 ]; then
+        if [ "$phpfpm" = 'yes' ]; then
+            echo "WEB_BACKEND='php-fpm'" >> $VESTA/conf/vesta.conf
+        fi
+    else
+        if [ "$phpfpm" = 'yes' ]; then
+            echo "WEB_BACKEND='php5-fpm'" >> $VESTA/conf/vesta.conf
+        fi
     fi
     echo "STATS_SYSTEM='webalizer,awstats'" >> $VESTA/conf/vesta.conf
 fi
@@ -898,10 +908,17 @@ fi
 #----------------------------------------------------------#
 
 if [ "$phpfpm" = 'yes' ]; then
-    wget $vestacp/php5-fpm/www.conf -O /etc/php5/fpm/pool.d/www.conf
-    update-rc.d php5-fpm defaults
-    service php5-fpm start
-    check_result $? "php-fpm start failed"
+    if [ "$release" -eq 9 ]; then
+        wget $vestacp/php-fpm/www.conf -O /etc/php/7.0/fpm/pool.d/www.conf
+        update-rc.d php7.0-fpm defaults
+        service php7.0-fpm start
+        check_result $? "php-fpm start failed"
+    else
+        wget $vestacp/php5-fpm/www.conf -O /etc/php5/fpm/pool.d/www.conf
+        update-rc.d php5-fpm defaults
+        service php5-fpm start
+        check_result $? "php-fpm start failed"
+    fi
 fi
 
 

From e986e48baf3db4f8ef8c8518bc19044ebf6cf060 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Tue, 2 Jan 2018 11:52:57 +0200
Subject: [PATCH 0009/2300] added missing ;

---
 upd/fix_nginx_auth.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/upd/fix_nginx_auth.sh b/upd/fix_nginx_auth.sh
index 5bed5790..2579e693 100755
--- a/upd/fix_nginx_auth.sh
+++ b/upd/fix_nginx_auth.sh
@@ -3,7 +3,7 @@
 source /etc/profile.d/vesta.sh
 source /usr/local/vesta/conf/vesta.conf
 
-sed -i "s|web/%domain%/stats/auth.*|conf/web/%domain%.auth|" \
+sed -i "s|web/%domain%/stats/auth.*|conf/web/%domain%.auth;|" \
     $VESTA/data/templates/web/nginx/*/*tpl >/dev/null 2>&1
 
 if [ "$WEB_SYSTEM" != 'nginx' ]; then

From 351d2a78cf9b67355ad6cf2da44f1b6325495cc5 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Tue, 2 Jan 2018 16:39:05 +0200
Subject: [PATCH 0010/2300] small fixes for softaculous plugin enable/disable

---
 bin/v-add-vesta-softaculous    | 10 +++++++---
 bin/v-delete-vesta-softaculous |  3 ++-
 2 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/bin/v-add-vesta-softaculous b/bin/v-add-vesta-softaculous
index be96196c..2eb31635 100755
--- a/bin/v-add-vesta-softaculous
+++ b/bin/v-add-vesta-softaculous
@@ -98,6 +98,8 @@ fi
 
 # Installing softaculous
 if [ ! -e "$VESTA/softaculous/vst_installed" ]; then
+    mkdir -p /var/softaculous
+    chown -R admin:admin /var/softaculous
     cd $VESTA/softaculous
     wget -q http://c.vestacp.com/3rdparty/softaculous_install.inc
     $VESTA/php/bin/php softaculous_install.inc
@@ -105,9 +107,11 @@ if [ ! -e "$VESTA/softaculous/vst_installed" ]; then
     touch $VESTA/softaculous/vst_installed
 fi
 
-# Adding symlink
-if [ ! -e "$VESTA/web/softaculous" ]; then
-    ln -s $VESTA/softaculous/vesta $VESTA/web/softaculous
+# Enabling symlink
+if [ -e "$VESTA/disabled_plugins/softaculous" ]; then
+    if [ ! -e "$VESTA/web/softaculous" ]; then
+        mv $VESTA/disabled_plugins/softaculous $VESTA/web/softaculous
+    fi
 fi
 
 # Updating SOFTACULOUS value
diff --git a/bin/v-delete-vesta-softaculous b/bin/v-delete-vesta-softaculous
index cff7d2b8..c15d68c1 100755
--- a/bin/v-delete-vesta-softaculous
+++ b/bin/v-delete-vesta-softaculous
@@ -29,7 +29,8 @@ fi
 
 # Deleting symlink
 if [ -e "$VESTA/web/softaculous" ]; then
-    rm -f $VESTA/web/softaculous
+    mkdir -p $VESTA/disabled_plugins
+    mv $VESTA/web/softaculous $VESTA/disabled_plugins
 fi
 
 # Updating SOFTACULOUS value

From 9059167db77eee0c731c75357c66bdb4eea26373 Mon Sep 17 00:00:00 2001
From: "Made I.T" <info@madeit.be>
Date: Tue, 2 Jan 2018 21:05:31 +0100
Subject: [PATCH 0011/2300] #1421 - Fix Backup retention

Fix #1421
---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 2d545d71..f48803d0 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -499,7 +499,7 @@ local_backup(){
     backup_list=$(ls -lrt $BACKUP/ |awk '{print $9}' |grep "^$user\." | grep ".tar")
     backups_count=$(echo "$backup_list" |wc -l)
     if [ "$BACKUPS" -le "$backups_count" ]; then
-        backups_rm_number=$((backups_count - BACKUPS))
+        backups_rm_number=$((backups_count - BACKUPS + 1))
 
         # Removing old backup
         for backup in $(echo "$backup_list" |head -n $backups_rm_number); do

From a7333684a299a72835dfbf82242eaa2221753c61 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 4 Jan 2018 22:16:49 +0200
Subject: [PATCH 0012/2300] proper template location for debian 9

---
 install/debian/9/templates/web/{php5-fpm => php-fpm}/default.tpl | 0
 install/debian/9/templates/web/{php5-fpm => php-fpm}/no-php.tpl  | 0
 install/debian/9/templates/web/{php5-fpm => php-fpm}/socket.tpl  | 0
 3 files changed, 0 insertions(+), 0 deletions(-)
 rename install/debian/9/templates/web/{php5-fpm => php-fpm}/default.tpl (100%)
 rename install/debian/9/templates/web/{php5-fpm => php-fpm}/no-php.tpl (100%)
 rename install/debian/9/templates/web/{php5-fpm => php-fpm}/socket.tpl (100%)

diff --git a/install/debian/9/templates/web/php5-fpm/default.tpl b/install/debian/9/templates/web/php-fpm/default.tpl
similarity index 100%
rename from install/debian/9/templates/web/php5-fpm/default.tpl
rename to install/debian/9/templates/web/php-fpm/default.tpl
diff --git a/install/debian/9/templates/web/php5-fpm/no-php.tpl b/install/debian/9/templates/web/php-fpm/no-php.tpl
similarity index 100%
rename from install/debian/9/templates/web/php5-fpm/no-php.tpl
rename to install/debian/9/templates/web/php-fpm/no-php.tpl
diff --git a/install/debian/9/templates/web/php5-fpm/socket.tpl b/install/debian/9/templates/web/php-fpm/socket.tpl
similarity index 100%
rename from install/debian/9/templates/web/php5-fpm/socket.tpl
rename to install/debian/9/templates/web/php-fpm/socket.tpl

From 8c9c4116b0ac0f68603a826b5f7c1cf38e90f054 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 5 Jan 2018 18:32:22 +0200
Subject: [PATCH 0013/2300] added net-tools

---
 install/vst-install-debian.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index f897ea4f..1ae6d422 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -29,7 +29,7 @@ if [ "$release" -eq 9 ]; then
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
-        unrar-free vim-common vesta-ioncube vesta-softaculous"
+        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools"
 elif [ "$release" -eq 8 ]; then
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2
@@ -42,7 +42,7 @@ elif [ "$release" -eq 8 ]; then
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
-        unrar-free vim-common vesta-ioncube vesta-softaculous"
+        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools"
 else
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2
@@ -55,7 +55,7 @@ else
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect unrar-free
-        vim-common vesta-ioncube vesta-softaculous"
+        vim-common vesta-ioncube vesta-softaculous net-tools"
 fi
 
 # Defining help function

From c28dcc1037b416210447973267a4ee8dbde18e81 Mon Sep 17 00:00:00 2001
From: Somthanat Wongsa <somthanat@gmail.com>
Date: Sat, 6 Jan 2018 13:20:16 +0700
Subject: [PATCH 0014/2300] fix php open_basedir error when using public_shtml
 as a document root

---
 install/debian/7/templates/web/apache2/basedir.stpl             | 2 +-
 install/debian/7/templates/web/apache2/hosting.stpl             | 2 +-
 install/debian/7/templates/web/apache2/phpcgi.stpl              | 2 +-
 install/debian/7/templates/web/apache2/phpfcgid.stpl            | 2 +-
 install/debian/7/templates/web/nginx/hosting.stpl               | 2 +-
 install/debian/7/templates/web/nginx/php5-fpm/sendy.stpl        | 2 +-
 .../7/templates/web/nginx/php5-fpm/wordpress2_rewrite.stpl      | 2 +-
 install/debian/8/templates/web/apache2/basedir.stpl             | 2 +-
 install/debian/8/templates/web/apache2/hosting.stpl             | 2 +-
 install/debian/8/templates/web/apache2/phpcgi.stpl              | 2 +-
 install/debian/8/templates/web/apache2/phpfcgid.stpl            | 2 +-
 install/debian/8/templates/web/nginx/hosting.stpl               | 2 +-
 install/debian/8/templates/web/nginx/php5-fpm/sendy.stpl        | 2 +-
 .../8/templates/web/nginx/php5-fpm/wordpress2_rewrite.stpl      | 2 +-
 install/debian/9/templates/web/apache2/basedir.stpl             | 2 +-
 install/debian/9/templates/web/apache2/hosting.stpl             | 2 +-
 install/debian/9/templates/web/apache2/phpcgi.stpl              | 2 +-
 install/debian/9/templates/web/apache2/phpfcgid.stpl            | 2 +-
 install/debian/9/templates/web/nginx/hosting.stpl               | 2 +-
 install/debian/9/templates/web/nginx/php-fpm/sendy.stpl         | 2 +-
 .../9/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl       | 2 +-
 install/rhel/5/templates/web/httpd/basedir.stpl                 | 2 +-
 install/rhel/5/templates/web/httpd/hosting.stpl                 | 2 +-
 install/rhel/5/templates/web/httpd/phpcgi.stpl                  | 2 +-
 install/rhel/5/templates/web/httpd/phpfcgid.stpl                | 2 +-
 install/rhel/5/templates/web/nginx/hosting.stpl                 | 2 +-
 install/rhel/5/templates/web/nginx/php-fpm/sendy.stpl           | 2 +-
 .../rhel/5/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl  | 2 +-
 install/rhel/6/templates/web/httpd/basedir.stpl                 | 2 +-
 install/rhel/6/templates/web/httpd/hosting.stpl                 | 2 +-
 install/rhel/6/templates/web/httpd/phpcgi.stpl                  | 2 +-
 install/rhel/6/templates/web/httpd/phpfcgid.stpl                | 2 +-
 install/rhel/6/templates/web/nginx/hosting.stpl                 | 2 +-
 install/rhel/6/templates/web/nginx/php-fpm/sendy.stpl           | 2 +-
 .../rhel/6/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl  | 2 +-
 install/rhel/7/templates/web/httpd/basedir.stpl                 | 2 +-
 install/rhel/7/templates/web/httpd/hosting.stpl                 | 2 +-
 install/rhel/7/templates/web/httpd/phpcgi.stpl                  | 2 +-
 install/rhel/7/templates/web/httpd/phpfcgid.stpl                | 2 +-
 install/rhel/7/templates/web/nginx/hosting.stpl                 | 2 +-
 install/rhel/7/templates/web/nginx/php-fpm/sendy.stpl           | 2 +-
 .../rhel/7/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl  | 2 +-
 install/ubuntu/12.04/templates/web/apache2/basedir.stpl         | 2 +-
 install/ubuntu/12.04/templates/web/apache2/hosting.stpl         | 2 +-
 install/ubuntu/12.04/templates/web/apache2/phpcgi.stpl          | 2 +-
 install/ubuntu/12.04/templates/web/apache2/phpfcgid.stpl        | 2 +-
 install/ubuntu/12.04/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/12.04/templates/web/nginx/php-fpm/sendy.stpl     | 2 +-
 .../12.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl   | 2 +-
 install/ubuntu/12.10/templates/web/apache2/basedir.stpl         | 2 +-
 install/ubuntu/12.10/templates/web/apache2/hosting.stpl         | 2 +-
 install/ubuntu/12.10/templates/web/apache2/phpcgi.stpl          | 2 +-
 install/ubuntu/12.10/templates/web/apache2/phpfcgid.stpl        | 2 +-
 install/ubuntu/12.10/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/12.10/templates/web/nginx/php-fpm/sendy.stpl     | 2 +-
 .../12.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl   | 2 +-
 install/ubuntu/13.04/templates/web/apache2/basedir.stpl         | 2 +-
 install/ubuntu/13.04/templates/web/apache2/hosting.stpl         | 2 +-
 install/ubuntu/13.04/templates/web/apache2/phpcgi.stpl          | 2 +-
 install/ubuntu/13.04/templates/web/apache2/phpfcgid.stpl        | 2 +-
 install/ubuntu/13.04/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/13.04/templates/web/nginx/php-fpm/sendy.stpl     | 2 +-
 .../13.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl   | 2 +-
 install/ubuntu/13.10/templates/web/apache2/basedir.stpl         | 2 +-
 install/ubuntu/13.10/templates/web/apache2/hosting.stpl         | 2 +-
 install/ubuntu/13.10/templates/web/apache2/phpcgi.stpl          | 2 +-
 install/ubuntu/13.10/templates/web/apache2/phpfcgid.stpl        | 2 +-
 install/ubuntu/13.10/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/13.10/templates/web/nginx/php-fpm/sendy.stpl     | 2 +-
 .../13.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl   | 2 +-
 install/ubuntu/14.04/templates/web/apache2/basedir.stpl         | 2 +-
 install/ubuntu/14.04/templates/web/apache2/hosting.stpl         | 2 +-
 install/ubuntu/14.04/templates/web/apache2/phpcgi.stpl          | 2 +-
 install/ubuntu/14.04/templates/web/apache2/phpfcgid.stpl        | 2 +-
 install/ubuntu/14.04/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/14.04/templates/web/nginx/php-fpm/sendy.stpl     | 2 +-
 .../14.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl   | 2 +-
 install/ubuntu/14.10/templates/web/apache2/basedir.stpl         | 2 +-
 install/ubuntu/14.10/templates/web/apache2/hosting.stpl         | 2 +-
 install/ubuntu/14.10/templates/web/apache2/phpcgi.stpl          | 2 +-
 install/ubuntu/14.10/templates/web/apache2/phpfcgid.stpl        | 2 +-
 install/ubuntu/14.10/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/14.10/templates/web/nginx/php-fpm/sendy.stpl     | 2 +-
 .../14.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl   | 2 +-
 install/ubuntu/15.04/templates/web/apache2/basedir.stpl         | 2 +-
 install/ubuntu/15.04/templates/web/apache2/hosting.stpl         | 2 +-
 install/ubuntu/15.04/templates/web/apache2/phpcgi.stpl          | 2 +-
 install/ubuntu/15.04/templates/web/apache2/phpfcgid.stpl        | 2 +-
 install/ubuntu/15.04/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/15.04/templates/web/nginx/php-fpm/sendy.stpl     | 2 +-
 .../15.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl   | 2 +-
 install/ubuntu/15.10/templates/web/apache2/basedir.stpl         | 2 +-
 install/ubuntu/15.10/templates/web/apache2/hosting.stpl         | 2 +-
 install/ubuntu/15.10/templates/web/apache2/phpcgi.stpl          | 2 +-
 install/ubuntu/15.10/templates/web/apache2/phpfcgid.stpl        | 2 +-
 install/ubuntu/15.10/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/15.10/templates/web/nginx/php-fpm/sendy.stpl     | 2 +-
 .../15.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl   | 2 +-
 install/ubuntu/16.04/templates/web/apache2/basedir.stpl         | 2 +-
 install/ubuntu/16.04/templates/web/apache2/hosting.stpl         | 2 +-
 install/ubuntu/16.04/templates/web/apache2/phpcgi.stpl          | 2 +-
 install/ubuntu/16.04/templates/web/apache2/phpfcgid.stpl        | 2 +-
 install/ubuntu/16.04/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/16.04/templates/web/nginx/php-fpm/sendy.stpl     | 2 +-
 .../16.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl   | 2 +-
 install/ubuntu/16.10/templates/web/apache2/basedir.stpl         | 2 +-
 install/ubuntu/16.10/templates/web/apache2/hosting.stpl         | 2 +-
 install/ubuntu/16.10/templates/web/apache2/phpcgi.stpl          | 2 +-
 install/ubuntu/16.10/templates/web/apache2/phpfcgid.stpl        | 2 +-
 install/ubuntu/16.10/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/16.10/templates/web/nginx/php-fpm/sendy.stpl     | 2 +-
 .../16.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl   | 2 +-
 112 files changed, 112 insertions(+), 112 deletions(-)

diff --git a/install/debian/7/templates/web/apache2/basedir.stpl b/install/debian/7/templates/web/apache2/basedir.stpl
index dda3aa76..fe0b5b40 100644
--- a/install/debian/7/templates/web/apache2/basedir.stpl
+++ b/install/debian/7/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/debian/7/templates/web/apache2/hosting.stpl b/install/debian/7/templates/web/apache2/hosting.stpl
index 627325e0..e1442ce2 100644
--- a/install/debian/7/templates/web/apache2/hosting.stpl
+++ b/install/debian/7/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/debian/7/templates/web/apache2/phpcgi.stpl b/install/debian/7/templates/web/apache2/phpcgi.stpl
index aa807091..40ce5fb2 100644
--- a/install/debian/7/templates/web/apache2/phpcgi.stpl
+++ b/install/debian/7/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/debian/7/templates/web/apache2/phpfcgid.stpl b/install/debian/7/templates/web/apache2/phpfcgid.stpl
index 88cea0e6..5d27efcd 100644
--- a/install/debian/7/templates/web/apache2/phpfcgid.stpl
+++ b/install/debian/7/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/debian/7/templates/web/nginx/hosting.stpl b/install/debian/7/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/debian/7/templates/web/nginx/hosting.stpl
+++ b/install/debian/7/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/sendy.stpl b/install/debian/7/templates/web/nginx/php5-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/sendy.stpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/wordpress2_rewrite.stpl b/install/debian/7/templates/web/nginx/php5-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/wordpress2_rewrite.stpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/debian/8/templates/web/apache2/basedir.stpl b/install/debian/8/templates/web/apache2/basedir.stpl
index d978d4c4..2db1d52c 100644
--- a/install/debian/8/templates/web/apache2/basedir.stpl
+++ b/install/debian/8/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/debian/8/templates/web/apache2/hosting.stpl b/install/debian/8/templates/web/apache2/hosting.stpl
index 8892072b..c9c19512 100644
--- a/install/debian/8/templates/web/apache2/hosting.stpl
+++ b/install/debian/8/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/debian/8/templates/web/apache2/phpcgi.stpl b/install/debian/8/templates/web/apache2/phpcgi.stpl
index 731355bc..ae560dbe 100644
--- a/install/debian/8/templates/web/apache2/phpcgi.stpl
+++ b/install/debian/8/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/debian/8/templates/web/apache2/phpfcgid.stpl b/install/debian/8/templates/web/apache2/phpfcgid.stpl
index 156c8a91..bc3688d9 100644
--- a/install/debian/8/templates/web/apache2/phpfcgid.stpl
+++ b/install/debian/8/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/debian/8/templates/web/nginx/hosting.stpl b/install/debian/8/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/debian/8/templates/web/nginx/hosting.stpl
+++ b/install/debian/8/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/sendy.stpl b/install/debian/8/templates/web/nginx/php5-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/sendy.stpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/wordpress2_rewrite.stpl b/install/debian/8/templates/web/nginx/php5-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/wordpress2_rewrite.stpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/debian/9/templates/web/apache2/basedir.stpl b/install/debian/9/templates/web/apache2/basedir.stpl
index d978d4c4..2db1d52c 100644
--- a/install/debian/9/templates/web/apache2/basedir.stpl
+++ b/install/debian/9/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/debian/9/templates/web/apache2/hosting.stpl b/install/debian/9/templates/web/apache2/hosting.stpl
index 8892072b..c9c19512 100644
--- a/install/debian/9/templates/web/apache2/hosting.stpl
+++ b/install/debian/9/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/debian/9/templates/web/apache2/phpcgi.stpl b/install/debian/9/templates/web/apache2/phpcgi.stpl
index 731355bc..ae560dbe 100644
--- a/install/debian/9/templates/web/apache2/phpcgi.stpl
+++ b/install/debian/9/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/debian/9/templates/web/apache2/phpfcgid.stpl b/install/debian/9/templates/web/apache2/phpfcgid.stpl
index 156c8a91..bc3688d9 100644
--- a/install/debian/9/templates/web/apache2/phpfcgid.stpl
+++ b/install/debian/9/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/debian/9/templates/web/nginx/hosting.stpl b/install/debian/9/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/debian/9/templates/web/nginx/hosting.stpl
+++ b/install/debian/9/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/debian/9/templates/web/nginx/php-fpm/sendy.stpl b/install/debian/9/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/debian/9/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/rhel/5/templates/web/httpd/basedir.stpl b/install/rhel/5/templates/web/httpd/basedir.stpl
index 4ced9f38..2a3f9fbd 100644
--- a/install/rhel/5/templates/web/httpd/basedir.stpl
+++ b/install/rhel/5/templates/web/httpd/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/rhel/5/templates/web/httpd/hosting.stpl b/install/rhel/5/templates/web/httpd/hosting.stpl
index f94ba186..f94fdb64 100644
--- a/install/rhel/5/templates/web/httpd/hosting.stpl
+++ b/install/rhel/5/templates/web/httpd/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/rhel/5/templates/web/httpd/phpcgi.stpl b/install/rhel/5/templates/web/httpd/phpcgi.stpl
index 591693a4..d544411c 100644
--- a/install/rhel/5/templates/web/httpd/phpcgi.stpl
+++ b/install/rhel/5/templates/web/httpd/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/rhel/5/templates/web/httpd/phpfcgid.stpl b/install/rhel/5/templates/web/httpd/phpfcgid.stpl
index 3bb82cca..38c5dd17 100644
--- a/install/rhel/5/templates/web/httpd/phpfcgid.stpl
+++ b/install/rhel/5/templates/web/httpd/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/rhel/5/templates/web/nginx/hosting.stpl b/install/rhel/5/templates/web/nginx/hosting.stpl
index aca458a4..59c24af4 100755
--- a/install/rhel/5/templates/web/nginx/hosting.stpl
+++ b/install/rhel/5/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/sendy.stpl b/install/rhel/5/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/rhel/5/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/rhel/6/templates/web/httpd/basedir.stpl b/install/rhel/6/templates/web/httpd/basedir.stpl
index 4ced9f38..2a3f9fbd 100644
--- a/install/rhel/6/templates/web/httpd/basedir.stpl
+++ b/install/rhel/6/templates/web/httpd/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/rhel/6/templates/web/httpd/hosting.stpl b/install/rhel/6/templates/web/httpd/hosting.stpl
index f1c1c111..06bd6183 100644
--- a/install/rhel/6/templates/web/httpd/hosting.stpl
+++ b/install/rhel/6/templates/web/httpd/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/rhel/6/templates/web/httpd/phpcgi.stpl b/install/rhel/6/templates/web/httpd/phpcgi.stpl
index 591693a4..d544411c 100644
--- a/install/rhel/6/templates/web/httpd/phpcgi.stpl
+++ b/install/rhel/6/templates/web/httpd/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/rhel/6/templates/web/httpd/phpfcgid.stpl b/install/rhel/6/templates/web/httpd/phpfcgid.stpl
index 3bb82cca..38c5dd17 100644
--- a/install/rhel/6/templates/web/httpd/phpfcgid.stpl
+++ b/install/rhel/6/templates/web/httpd/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/rhel/6/templates/web/nginx/hosting.stpl b/install/rhel/6/templates/web/nginx/hosting.stpl
index aca458a4..59c24af4 100755
--- a/install/rhel/6/templates/web/nginx/hosting.stpl
+++ b/install/rhel/6/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/sendy.stpl b/install/rhel/6/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/rhel/6/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/rhel/7/templates/web/httpd/basedir.stpl b/install/rhel/7/templates/web/httpd/basedir.stpl
index 95221539..210edc13 100644
--- a/install/rhel/7/templates/web/httpd/basedir.stpl
+++ b/install/rhel/7/templates/web/httpd/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/rhel/7/templates/web/httpd/hosting.stpl b/install/rhel/7/templates/web/httpd/hosting.stpl
index 673c9c01..699c413b 100644
--- a/install/rhel/7/templates/web/httpd/hosting.stpl
+++ b/install/rhel/7/templates/web/httpd/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/rhel/7/templates/web/httpd/phpcgi.stpl b/install/rhel/7/templates/web/httpd/phpcgi.stpl
index 1f7b3547..1eb39e0a 100644
--- a/install/rhel/7/templates/web/httpd/phpcgi.stpl
+++ b/install/rhel/7/templates/web/httpd/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/rhel/7/templates/web/httpd/phpfcgid.stpl b/install/rhel/7/templates/web/httpd/phpfcgid.stpl
index 6d7e81df..31f09bc1 100644
--- a/install/rhel/7/templates/web/httpd/phpfcgid.stpl
+++ b/install/rhel/7/templates/web/httpd/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/rhel/7/templates/web/nginx/hosting.stpl b/install/rhel/7/templates/web/nginx/hosting.stpl
index aca458a4..59c24af4 100755
--- a/install/rhel/7/templates/web/nginx/hosting.stpl
+++ b/install/rhel/7/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/sendy.stpl b/install/rhel/7/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/rhel/7/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/12.04/templates/web/apache2/basedir.stpl b/install/ubuntu/12.04/templates/web/apache2/basedir.stpl
index dda3aa76..fe0b5b40 100644
--- a/install/ubuntu/12.04/templates/web/apache2/basedir.stpl
+++ b/install/ubuntu/12.04/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/ubuntu/12.04/templates/web/apache2/hosting.stpl b/install/ubuntu/12.04/templates/web/apache2/hosting.stpl
index 627325e0..e1442ce2 100644
--- a/install/ubuntu/12.04/templates/web/apache2/hosting.stpl
+++ b/install/ubuntu/12.04/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/ubuntu/12.04/templates/web/apache2/phpcgi.stpl b/install/ubuntu/12.04/templates/web/apache2/phpcgi.stpl
index aa807091..40ce5fb2 100644
--- a/install/ubuntu/12.04/templates/web/apache2/phpcgi.stpl
+++ b/install/ubuntu/12.04/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/ubuntu/12.04/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/12.04/templates/web/apache2/phpfcgid.stpl
index 88cea0e6..5d27efcd 100644
--- a/install/ubuntu/12.04/templates/web/apache2/phpfcgid.stpl
+++ b/install/ubuntu/12.04/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/ubuntu/12.04/templates/web/nginx/hosting.stpl b/install/ubuntu/12.04/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/ubuntu/12.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/12.10/templates/web/apache2/basedir.stpl b/install/ubuntu/12.10/templates/web/apache2/basedir.stpl
index dda3aa76..fe0b5b40 100644
--- a/install/ubuntu/12.10/templates/web/apache2/basedir.stpl
+++ b/install/ubuntu/12.10/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/ubuntu/12.10/templates/web/apache2/hosting.stpl b/install/ubuntu/12.10/templates/web/apache2/hosting.stpl
index 627325e0..e1442ce2 100644
--- a/install/ubuntu/12.10/templates/web/apache2/hosting.stpl
+++ b/install/ubuntu/12.10/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/ubuntu/12.10/templates/web/apache2/phpcgi.stpl b/install/ubuntu/12.10/templates/web/apache2/phpcgi.stpl
index aa807091..40ce5fb2 100644
--- a/install/ubuntu/12.10/templates/web/apache2/phpcgi.stpl
+++ b/install/ubuntu/12.10/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/ubuntu/12.10/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/12.10/templates/web/apache2/phpfcgid.stpl
index 88cea0e6..5d27efcd 100644
--- a/install/ubuntu/12.10/templates/web/apache2/phpfcgid.stpl
+++ b/install/ubuntu/12.10/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/ubuntu/12.10/templates/web/nginx/hosting.stpl b/install/ubuntu/12.10/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/ubuntu/12.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/13.04/templates/web/apache2/basedir.stpl b/install/ubuntu/13.04/templates/web/apache2/basedir.stpl
index dda3aa76..fe0b5b40 100644
--- a/install/ubuntu/13.04/templates/web/apache2/basedir.stpl
+++ b/install/ubuntu/13.04/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/ubuntu/13.04/templates/web/apache2/hosting.stpl b/install/ubuntu/13.04/templates/web/apache2/hosting.stpl
index ce0763ae..be7ef310 100644
--- a/install/ubuntu/13.04/templates/web/apache2/hosting.stpl
+++ b/install/ubuntu/13.04/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/ubuntu/13.04/templates/web/apache2/phpcgi.stpl b/install/ubuntu/13.04/templates/web/apache2/phpcgi.stpl
index aa807091..40ce5fb2 100644
--- a/install/ubuntu/13.04/templates/web/apache2/phpcgi.stpl
+++ b/install/ubuntu/13.04/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/ubuntu/13.04/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/13.04/templates/web/apache2/phpfcgid.stpl
index 88cea0e6..5d27efcd 100644
--- a/install/ubuntu/13.04/templates/web/apache2/phpfcgid.stpl
+++ b/install/ubuntu/13.04/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/ubuntu/13.04/templates/web/nginx/hosting.stpl b/install/ubuntu/13.04/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/ubuntu/13.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/13.10/templates/web/apache2/basedir.stpl b/install/ubuntu/13.10/templates/web/apache2/basedir.stpl
index d978d4c4..2db1d52c 100644
--- a/install/ubuntu/13.10/templates/web/apache2/basedir.stpl
+++ b/install/ubuntu/13.10/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/ubuntu/13.10/templates/web/apache2/hosting.stpl b/install/ubuntu/13.10/templates/web/apache2/hosting.stpl
index 8892072b..c9c19512 100644
--- a/install/ubuntu/13.10/templates/web/apache2/hosting.stpl
+++ b/install/ubuntu/13.10/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/ubuntu/13.10/templates/web/apache2/phpcgi.stpl b/install/ubuntu/13.10/templates/web/apache2/phpcgi.stpl
index 731355bc..ae560dbe 100644
--- a/install/ubuntu/13.10/templates/web/apache2/phpcgi.stpl
+++ b/install/ubuntu/13.10/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/ubuntu/13.10/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/13.10/templates/web/apache2/phpfcgid.stpl
index 156c8a91..bc3688d9 100644
--- a/install/ubuntu/13.10/templates/web/apache2/phpfcgid.stpl
+++ b/install/ubuntu/13.10/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/ubuntu/13.10/templates/web/nginx/hosting.stpl b/install/ubuntu/13.10/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/ubuntu/13.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/14.04/templates/web/apache2/basedir.stpl b/install/ubuntu/14.04/templates/web/apache2/basedir.stpl
index d978d4c4..2db1d52c 100644
--- a/install/ubuntu/14.04/templates/web/apache2/basedir.stpl
+++ b/install/ubuntu/14.04/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/ubuntu/14.04/templates/web/apache2/hosting.stpl b/install/ubuntu/14.04/templates/web/apache2/hosting.stpl
index 8892072b..c9c19512 100644
--- a/install/ubuntu/14.04/templates/web/apache2/hosting.stpl
+++ b/install/ubuntu/14.04/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/ubuntu/14.04/templates/web/apache2/phpcgi.stpl b/install/ubuntu/14.04/templates/web/apache2/phpcgi.stpl
index 731355bc..ae560dbe 100644
--- a/install/ubuntu/14.04/templates/web/apache2/phpcgi.stpl
+++ b/install/ubuntu/14.04/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/ubuntu/14.04/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/14.04/templates/web/apache2/phpfcgid.stpl
index 156c8a91..bc3688d9 100644
--- a/install/ubuntu/14.04/templates/web/apache2/phpfcgid.stpl
+++ b/install/ubuntu/14.04/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/ubuntu/14.04/templates/web/nginx/hosting.stpl b/install/ubuntu/14.04/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/ubuntu/14.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/14.10/templates/web/apache2/basedir.stpl b/install/ubuntu/14.10/templates/web/apache2/basedir.stpl
index d978d4c4..2db1d52c 100644
--- a/install/ubuntu/14.10/templates/web/apache2/basedir.stpl
+++ b/install/ubuntu/14.10/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/ubuntu/14.10/templates/web/apache2/hosting.stpl b/install/ubuntu/14.10/templates/web/apache2/hosting.stpl
index 8892072b..c9c19512 100644
--- a/install/ubuntu/14.10/templates/web/apache2/hosting.stpl
+++ b/install/ubuntu/14.10/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/ubuntu/14.10/templates/web/apache2/phpcgi.stpl b/install/ubuntu/14.10/templates/web/apache2/phpcgi.stpl
index 731355bc..ae560dbe 100644
--- a/install/ubuntu/14.10/templates/web/apache2/phpcgi.stpl
+++ b/install/ubuntu/14.10/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/ubuntu/14.10/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/14.10/templates/web/apache2/phpfcgid.stpl
index 156c8a91..bc3688d9 100644
--- a/install/ubuntu/14.10/templates/web/apache2/phpfcgid.stpl
+++ b/install/ubuntu/14.10/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/ubuntu/14.10/templates/web/nginx/hosting.stpl b/install/ubuntu/14.10/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/ubuntu/14.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/15.04/templates/web/apache2/basedir.stpl b/install/ubuntu/15.04/templates/web/apache2/basedir.stpl
index d978d4c4..2db1d52c 100644
--- a/install/ubuntu/15.04/templates/web/apache2/basedir.stpl
+++ b/install/ubuntu/15.04/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/ubuntu/15.04/templates/web/apache2/hosting.stpl b/install/ubuntu/15.04/templates/web/apache2/hosting.stpl
index 8892072b..c9c19512 100644
--- a/install/ubuntu/15.04/templates/web/apache2/hosting.stpl
+++ b/install/ubuntu/15.04/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/ubuntu/15.04/templates/web/apache2/phpcgi.stpl b/install/ubuntu/15.04/templates/web/apache2/phpcgi.stpl
index 731355bc..ae560dbe 100644
--- a/install/ubuntu/15.04/templates/web/apache2/phpcgi.stpl
+++ b/install/ubuntu/15.04/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/ubuntu/15.04/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/15.04/templates/web/apache2/phpfcgid.stpl
index 156c8a91..bc3688d9 100644
--- a/install/ubuntu/15.04/templates/web/apache2/phpfcgid.stpl
+++ b/install/ubuntu/15.04/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/ubuntu/15.04/templates/web/nginx/hosting.stpl b/install/ubuntu/15.04/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/ubuntu/15.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/15.10/templates/web/apache2/basedir.stpl b/install/ubuntu/15.10/templates/web/apache2/basedir.stpl
index d978d4c4..2db1d52c 100644
--- a/install/ubuntu/15.10/templates/web/apache2/basedir.stpl
+++ b/install/ubuntu/15.10/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/ubuntu/15.10/templates/web/apache2/hosting.stpl b/install/ubuntu/15.10/templates/web/apache2/hosting.stpl
index 8892072b..c9c19512 100644
--- a/install/ubuntu/15.10/templates/web/apache2/hosting.stpl
+++ b/install/ubuntu/15.10/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/ubuntu/15.10/templates/web/apache2/phpcgi.stpl b/install/ubuntu/15.10/templates/web/apache2/phpcgi.stpl
index 731355bc..ae560dbe 100644
--- a/install/ubuntu/15.10/templates/web/apache2/phpcgi.stpl
+++ b/install/ubuntu/15.10/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/ubuntu/15.10/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/15.10/templates/web/apache2/phpfcgid.stpl
index 156c8a91..bc3688d9 100644
--- a/install/ubuntu/15.10/templates/web/apache2/phpfcgid.stpl
+++ b/install/ubuntu/15.10/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/ubuntu/15.10/templates/web/nginx/hosting.stpl b/install/ubuntu/15.10/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/ubuntu/15.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/16.04/templates/web/apache2/basedir.stpl b/install/ubuntu/16.04/templates/web/apache2/basedir.stpl
index d978d4c4..2db1d52c 100644
--- a/install/ubuntu/16.04/templates/web/apache2/basedir.stpl
+++ b/install/ubuntu/16.04/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/ubuntu/16.04/templates/web/apache2/hosting.stpl b/install/ubuntu/16.04/templates/web/apache2/hosting.stpl
index 8892072b..c9c19512 100644
--- a/install/ubuntu/16.04/templates/web/apache2/hosting.stpl
+++ b/install/ubuntu/16.04/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/ubuntu/16.04/templates/web/apache2/phpcgi.stpl b/install/ubuntu/16.04/templates/web/apache2/phpcgi.stpl
index 731355bc..ae560dbe 100644
--- a/install/ubuntu/16.04/templates/web/apache2/phpcgi.stpl
+++ b/install/ubuntu/16.04/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/ubuntu/16.04/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/16.04/templates/web/apache2/phpfcgid.stpl
index 156c8a91..bc3688d9 100644
--- a/install/ubuntu/16.04/templates/web/apache2/phpfcgid.stpl
+++ b/install/ubuntu/16.04/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/ubuntu/16.04/templates/web/nginx/hosting.stpl b/install/ubuntu/16.04/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/ubuntu/16.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/16.10/templates/web/apache2/basedir.stpl b/install/ubuntu/16.10/templates/web/apache2/basedir.stpl
index d978d4c4..2db1d52c 100644
--- a/install/ubuntu/16.10/templates/web/apache2/basedir.stpl
+++ b/install/ubuntu/16.10/templates/web/apache2/basedir.stpl
@@ -15,7 +15,7 @@
         AllowOverride All
         SSLRequireSSL
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
diff --git a/install/ubuntu/16.10/templates/web/apache2/hosting.stpl b/install/ubuntu/16.10/templates/web/apache2/hosting.stpl
index 8892072b..c9c19512 100644
--- a/install/ubuntu/16.10/templates/web/apache2/hosting.stpl
+++ b/install/ubuntu/16.10/templates/web/apache2/hosting.stpl
@@ -22,7 +22,7 @@
         php_admin_flag mysql.allow_persistent  off
         php_admin_flag safe_mode off
         php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
     </Directory>
diff --git a/install/ubuntu/16.10/templates/web/apache2/phpcgi.stpl b/install/ubuntu/16.10/templates/web/apache2/phpcgi.stpl
index 731355bc..ae560dbe 100644
--- a/install/ubuntu/16.10/templates/web/apache2/phpcgi.stpl
+++ b/install/ubuntu/16.10/templates/web/apache2/phpcgi.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         Action phpcgi-script /cgi-bin/php
diff --git a/install/ubuntu/16.10/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/16.10/templates/web/apache2/phpfcgid.stpl
index 156c8a91..bc3688d9 100644
--- a/install/ubuntu/16.10/templates/web/apache2/phpfcgid.stpl
+++ b/install/ubuntu/16.10/templates/web/apache2/phpfcgid.stpl
@@ -15,7 +15,7 @@
         SSLRequireSSL
         AllowOverride All
         Options +Includes -Indexes +ExecCGI
-        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
         <Files *.php>
diff --git a/install/ubuntu/16.10/templates/web/nginx/hosting.stpl b/install/ubuntu/16.10/templates/web/nginx/hosting.stpl
index d778d633..31774a08 100755
--- a/install/ubuntu/16.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/hosting.stpl
@@ -31,7 +31,7 @@ server {
     location ~ /\.hg/   {return 404;}
     location ~ /\.bzr/  {return 404;}
 
-    disable_symlinks if_not_owner from=%docroot%;
+    disable_symlinks if_not_owner from=%sdocroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
 }
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/sendy.stpl
index 0b351000..e7f3dcc6 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/sendy.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/sendy.stpl
@@ -3,7 +3,7 @@ server {
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..0d9793ae 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%web_ssl_port%;
     server_name %domain_idn% %alias_idn%;
-    root        %docroot%;
+    root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;

From 9585a2a369815a63181c91fd9cbf8a349e5bc05b Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 7 Jan 2018 19:08:51 +0100
Subject: [PATCH 0015/2300] Debian9 Roundcube mysql password fix

---
 install/vst-install-debian.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 1ae6d422..2b567dfb 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1165,13 +1165,15 @@ if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
         /etc/roundcube/plugins/password/config.inc.php
     mysql roundcube < /usr/share/dbconfig-common/data/roundcube/install/mysql
     chmod a+r /etc/roundcube/main.inc.php
-    if [ "$release" -eq 8 ]; then
+    if [ "$release" -eq 8 ] || [ "$release" -eq 9 ]; then
         mv -f /etc/roundcube/main.inc.php /etc/roundcube/config.inc.php
         mv -f /etc/roundcube/db.inc.php /etc/roundcube/debian-db-roundcube.php
         chmod 640 /etc/roundcube/debian-db-roundcube.php
         chmod 640 /etc/roundcube/config.inc.php
         chown root:www-data /etc/roundcube/debian-db-roundcube.php
         chown root:www-data /etc/roundcube/config.inc.php
+    fi
+    if [ "$release" -eq 8 ]; then
         # RoundCube tinyMCE fix
         tinymceFixArchiveURL=$vestacp/roundcube/roundcube-tinymce.tar.gz
         tinymceParentFolder=/usr/share/roundcube/program/js

From 3021abecb6690be9e1e4952e779bf79d72441fd1 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 10 Jan 2018 14:06:11 +0200
Subject: [PATCH 0016/2300] Fixed backup restore function

---
 func/main.sh             |  2 +-
 src/rpm/specs/vesta.spec | 14 +++++++++++++-
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/func/main.sh b/func/main.sh
index 964610cd..11486a5b 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -794,7 +794,7 @@ is_format_valid() {
                 antispam)       is_boolean_format_valid "$arg" 'antispam' ;;
                 antivirus)      is_boolean_format_valid "$arg" 'antivirus' ;;
                 autoreply)      is_autoreply_format_valid "$arg" ;;
-                backup)         is_user_format_valid "$arg" 'backup' ;;
+                backup)         is_object_format_valid "$arg" 'backup' ;;
                 charset)        is_object_format_valid "$arg" "$arg_name" ;;
                 charsets)       is_common_format_valid "$arg" 'charsets' ;;
                 comment)        is_object_format_valid "$arg" 'comment' ;;
diff --git a/src/rpm/specs/vesta.spec b/src/rpm/specs/vesta.spec
index 6be72e16..1aca2549 100644
--- a/src/rpm/specs/vesta.spec
+++ b/src/rpm/specs/vesta.spec
@@ -1,6 +1,6 @@
 Name:           vesta
 Version:        0.9.8
-Release:        18
+Release:        19
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
@@ -56,6 +56,18 @@ fi
 %config(noreplace) %{_vestadir}/web/css/uploadify.css
 
 %changelog
+* Wed Jan 10 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-19
+- Fixed backup restore function
+
+* Fri Dec 29 2017 Serghey Rodin <builder@vestacp.com> - 0.9.8-18
+- Let's Encrypt for internationalized domains (IDN)
+- Softaculous Application Installer
+- Debian 9 support sponsored by isicore.com
+- Ubuntu 16.10 and 17.04 support
+- Korean, Urdu, Thai, Brazilian Portuguese, Serbian and Bulgarian language support
+- We've made 1478 commits
+- 29 bugs closed / 141 pull requests merged
+
 * Mon Nov 14 2016 Serghey Rodin <builder@vestacp.com> - 0.9.8-17
 - System Config Editor
 - Let's Encrypt GUI

From 8773ac20718e9d7f7fc461d7778341d39ce2688d Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 10 Jan 2018 14:07:03 +0200
Subject: [PATCH 0017/2300] Updated notification release number

---
 upd/add_notifications.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/upd/add_notifications.sh b/upd/add_notifications.sh
index 5c98c950..14b8590e 100755
--- a/upd/add_notifications.sh
+++ b/upd/add_notifications.sh
@@ -5,5 +5,5 @@ rm -f /usr/local/vesta/data/users/admin/notifications.conf
 /usr/local/vesta/bin/v-add-user-notification admin "File Manager" "Browse, copy, edit, view, and retrieve all your web domain files using a fully featured <a href='http://vestacp.com/features/#filemanager'>File Manager</a>. Plugin is available for <a href='/edit/server/?lead=filemanager#module-filemanager'>purchase</a>." 'filemanager'
 /usr/local/vesta/bin/v-add-user-notification admin "Chroot SFTP" "If you want to have SFTP accounts that will be used only to transfer files (and not to SSH), you can  <a href='/edit/server/?lead=sftp#module-sftp'>purchase</a> and enable <a href='http://vestacp.com/features/#sftpchroot'>SFTP Chroot</a>"
 /usr/local/vesta/bin/v-add-user-notification admin "Softaculous" "Softaculous is one of the best Auto Installers and it is finally <a href='/edit/server/?lead=sftp#module-softaculous'>available</a>"
-/usr/local/vesta/bin/v-add-user-notification admin "Release 0.9.8-18" "We've made 1478 commits, fixed 29 bugs and merged 141 pull request. As always for more information please read <a href='http://vestacp.com/roadmap/#0.9.8-18'>release notes</a>"
+/usr/local/vesta/bin/v-add-user-notification admin "Release 0.9.8-19" "We've made 1478 commits, fixed 29 bugs and merged 141 pull request. As always for more information please read <a href='http://vestacp.com/roadmap/#0.9.8-18'>release notes</a>"
 

From a65fb3c2ee1daab7b342ede104e520335a7f00d0 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 10 Jan 2018 14:10:01 +0200
Subject: [PATCH 0018/2300] release 0.9.8-19 hotfix for backup restore

---
 src/deb/ioncube/control              | 2 +-
 src/deb/nginx/control                | 2 +-
 src/deb/php/control                  | 2 +-
 src/deb/softaculous/control          | 2 +-
 src/deb/vesta/control                | 2 +-
 src/rpm/specs/vesta-ioncube.spec     | 2 +-
 src/rpm/specs/vesta-nginx.spec       | 2 +-
 src/rpm/specs/vesta-php.spec         | 2 +-
 src/rpm/specs/vesta-softaculous.spec | 2 +-
 9 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/src/deb/ioncube/control b/src/deb/ioncube/control
index 34daf4aa..13e08831 100644
--- a/src/deb/ioncube/control
+++ b/src/deb/ioncube/control
@@ -1,7 +1,7 @@
 Source: vesta-ioncube
 Package: vesta-ioncube
 Priority: optional
-Version: 0.9.8-18
+Version: 0.9.8-19
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.ioncube.com
diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index 841161e7..ae0e9102 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -1,7 +1,7 @@
 Source: vesta-nginx
 Package: vesta-nginx
 Priority: optional
-Version: 0.9.8-18
+Version: 0.9.8-19
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/php/control b/src/deb/php/control
index fd5a660c..0ce789dc 100644
--- a/src/deb/php/control
+++ b/src/deb/php/control
@@ -1,7 +1,7 @@
 Source: vesta-php
 Package: vesta-php
 Priority: optional
-Version: 0.9.8-18
+Version: 0.9.8-19
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/softaculous/control b/src/deb/softaculous/control
index a51d87be..f92a9545 100644
--- a/src/deb/softaculous/control
+++ b/src/deb/softaculous/control
@@ -1,7 +1,7 @@
 Source: vesta-softaculous
 Package: vesta-softaculous
 Priority: optional
-Version: 0.9.8-18
+Version: 0.9.8-19
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.softaculous.com
diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 7d395433..93d944f6 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-18
+Version: 0.9.8-19
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/rpm/specs/vesta-ioncube.spec b/src/rpm/specs/vesta-ioncube.spec
index ed079abe..cf183262 100644
--- a/src/rpm/specs/vesta-ioncube.spec
+++ b/src/rpm/specs/vesta-ioncube.spec
@@ -1,6 +1,6 @@
 Name:           vesta-ioncube
 Version:        0.9.8
-Release:        18
+Release:        19
 Summary:        ionCube Loader
 Group:          System Environment/Base
 License:        "Freely redistributable without restriction"
diff --git a/src/rpm/specs/vesta-nginx.spec b/src/rpm/specs/vesta-nginx.spec
index d562df15..4546f506 100644
--- a/src/rpm/specs/vesta-nginx.spec
+++ b/src/rpm/specs/vesta-nginx.spec
@@ -1,6 +1,6 @@
 Name:           vesta-nginx
 Version:        0.9.8
-Release:        18
+Release:        19
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        BSD-like
diff --git a/src/rpm/specs/vesta-php.spec b/src/rpm/specs/vesta-php.spec
index aa99a59b..289dc50b 100644
--- a/src/rpm/specs/vesta-php.spec
+++ b/src/rpm/specs/vesta-php.spec
@@ -1,6 +1,6 @@
 Name:           vesta-php
 Version:        0.9.8
-Release:        18
+Release:        19
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
diff --git a/src/rpm/specs/vesta-softaculous.spec b/src/rpm/specs/vesta-softaculous.spec
index 428d352b..f7a315bf 100644
--- a/src/rpm/specs/vesta-softaculous.spec
+++ b/src/rpm/specs/vesta-softaculous.spec
@@ -1,6 +1,6 @@
 Name:           vesta-softaculous
 Version:        0.9.8
-Release:        18
+Release:        19
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        Softaculous License

From bea7ccd25e967909b0cb08eab07865cb94bcdc01 Mon Sep 17 00:00:00 2001
From: Alexandr Loskutov <alex_connor@icloud.com>
Date: Thu, 18 Jan 2018 14:32:25 +0200
Subject: [PATCH 0019/2300] Fix backup restore

---
 bin/v-restore-user | 4 ++--
 func/main.sh       | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index accad1d4..b5df6321 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -374,8 +374,8 @@ if [ "$web" != 'no' ] && [ ! -z "$WEB_SYSTEM" ]; then
             # Copying ssl certificates
             if [ "$SSL" = 'yes' ]; then
                 for crt in $(ls $tmpdir/web/$domain/conf |grep ssl); do
-                    crt=$(echo "$crt" |sed "s/ssl.//")
-                    cp -f $tmpdir/web/$domain/conf/ssl.$crt $USER_DATA/ssl/$crt
+                    crt=$(echo $crt|sed -e "s/ssl.//")
+                    cp -f $tmpdir/web/$domain/conf/$crt $USER_DATA/ssl/$crt
                 done
             fi
 
diff --git a/func/main.sh b/func/main.sh
index 11486a5b..4d48293d 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -634,8 +634,8 @@ is_date_format_valid() {
 is_dbuser_format_valid() {
     exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
     if [ 17 -le ${#1} ]; then
-		check_result $E_INVALID "mysql username can be up to 16 characters long"
-	fi
+        check_result $E_INVALID "mysql username can be up to 16 characters long"
+    fi
     if [[ "$1" =~ $exclude ]]; then
         check_result $E_INVALID "invalid $2 format :: $1"
     fi
@@ -770,7 +770,7 @@ is_name_format_valid() {
 
 # Object validator
 is_object_format_valid() {
-    if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]; then
+    if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,64}[[:alnum:]]$ ]]; then
         check_result $E_INVALID "invalid $2 format :: $1"
     fi
 }

From c042fa2689b3997f9e145ebb2b20aa3e11858073 Mon Sep 17 00:00:00 2001
From: Alexandr Loskutov <alex_connor@icloud.com>
Date: Thu, 18 Jan 2018 15:40:50 +0200
Subject: [PATCH 0020/2300] Fix backup restore

---
 bin/v-restore-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index b5df6321..b3941208 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -375,7 +375,7 @@ if [ "$web" != 'no' ] && [ ! -z "$WEB_SYSTEM" ]; then
             if [ "$SSL" = 'yes' ]; then
                 for crt in $(ls $tmpdir/web/$domain/conf |grep ssl); do
                     crt=$(echo $crt|sed -e "s/ssl.//")
-                    cp -f $tmpdir/web/$domain/conf/$crt $USER_DATA/ssl/$crt
+                    cp -f $tmpdir/web/$domain/conf/ssl.$crt $USER_DATA/ssl/$crt
                 done
             fi
 

From 9a9dabb0c9ab48aa4560bb73ef47b8c4d53d2e26 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 18 Jan 2018 18:20:22 +0200
Subject: [PATCH 0021/2300] reverting back chunked upload feature

---
 web/templates/file_manager/main.php |  1 -
 web/upload/UploadHandler.php        | 32 +++++++++++++++++++++++++----
 2 files changed, 28 insertions(+), 5 deletions(-)

diff --git a/web/templates/file_manager/main.php b/web/templates/file_manager/main.php
index 82565393..e3427bb7 100644
--- a/web/templates/file_manager/main.php
+++ b/web/templates/file_manager/main.php
@@ -147,7 +147,6 @@
                 var url = '/upload/';
                 $('#file_upload_' + letter).fileupload({
                     singleFileUploads: false,
-		    maxChunkSize: 10000000, // ~10 MB
                     add: function (e, data) {
                         FM.setTabActive(FM['TAB_'+letter]);
 
diff --git a/web/upload/UploadHandler.php b/web/upload/UploadHandler.php
index cc575156..2c9de8af 100755
--- a/web/upload/UploadHandler.php
+++ b/web/upload/UploadHandler.php
@@ -469,7 +469,7 @@ class UploadHandler
             1
         );
     }
-    
+
     protected function sanitizeFileName($file) {
         // (|\\?*<\":>+[]/')
         // \|\\\?\*\<\"\'\:\>\+\[\]
@@ -560,6 +560,25 @@ class UploadHandler
         );
     }
 
+    protected function get_current_file_name($file_path, $name, $size, $type, $error,
+            $index, $content_range) {
+
+        $name = $this->trim_file_name($file_path, $name, $size, $type, $error, $index, $content_range);
+
+
+        return $this->get_unique_filename(
+            $file_path,
+            $this->fix_file_extension($file_path, $name, $size, $type, $error,
+                $index, $content_range),
+            $size,
+            $type,
+            $error,
+            $index,
+            $content_range
+        );
+    }
+
+
     protected function handle_form_data($file, $index) {
         // Handle form data, e.g. $_REQUEST['description'][$index]
     }
@@ -1079,8 +1098,13 @@ class UploadHandler
         $index = null, $content_range = null) {
 
         $file = new \stdClass();
-        $file->name = $this->get_file_name($uploaded_file, $name, $size, $type, $error,
-            $index, $content_range);
+//        $file->name = $this->get_file_name($uploaded_file, $name, $size, $type, $error,
+//            $index, $content_range);
+
+        $file->name = $this->trim_file_name($uploaded_path, $name, $size, $type, $error, $index, $content_range);
+        $file->name = $this->fix_file_extension($uploaded_path, $name, $size, $type, $error, $index, $content_range);
+
+
         $file->size = $this->fix_integer_overflow(intval($size));
         $file->type = $type;
         if ($this->validate($uploaded_file, $file, $error, $index)) {
@@ -1103,7 +1127,7 @@ class UploadHandler
                 } else {
                     chmod($uploaded_file, 0644);
 //                    move_uploaded_file($uploaded_file, $file_path);
-                    exec (VESTA_CMD . "v-copy-fs-file ". USERNAME ." {$uploaded_file} {$file_path}", $output, $return_var);
+                    exec (VESTA_CMD . "v-copy-fs-file ". USERNAME ." {$uploaded_file} '{$file_path}'", $output, $return_var);
 
                     $error = check_return_code($return_var, $output);
                     if ($return_var != 0) {

From 8a217352fe541ca22894262f4a4c84c50b6e22f2 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 19 Jan 2018 18:10:54 +0200
Subject: [PATCH 0022/2300] fix ssl backup restore

---
 bin/v-restore-user | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index b3941208..79e1e28c 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -373,7 +373,9 @@ if [ "$web" != 'no' ] && [ ! -z "$WEB_SYSTEM" ]; then
 
             # Copying ssl certificates
             if [ "$SSL" = 'yes' ]; then
-                for crt in $(ls $tmpdir/web/$domain/conf |grep ssl); do
+                certificates=$(ls $tmpdir/web/$domain/conf| grep ssl)
+                certificates=$(echo "$certificates" |grep $domain)
+                for crt in $certificates; do
                     crt=$(echo $crt|sed -e "s/ssl.//")
                     cp -f $tmpdir/web/$domain/conf/ssl.$crt $USER_DATA/ssl/$crt
                 done

From 5a108be182619da1f7fbda3d61a8401ee79f0bbd Mon Sep 17 00:00:00 2001
From: Maksim Usmanov | Maks <skamasle@gmail.com>
Date: Tue, 23 Jan 2018 23:53:27 +0100
Subject: [PATCH 0023/2300] Fix cron validation

New vesta cron generator not works if you have some format ranges like:

1,2 2 * 5,2,4,1
or
1-10 * * * *
---
 func/main.sh | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/func/main.sh b/func/main.sh
index 4d48293d..2d0ca1f1 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -753,9 +753,13 @@ is_cron_format_valid() {
             fi
         done
     fi
-    if [[ "$1" =~ ^[0-9]+$ ]] && [ "$1" -le $limit ]; then
-        check_format='ok'
-    fi
+    crn_values=$(echo $1 |tr "," " " | tr "-" " ")
+    for crn_vl in $crn_values
+        do
+            if [[ "$crn_vl" =~ ^[0-9]+$ ]] && [ "$crn_vl" -le $limit ]; then
+                 check_format='ok'
+              fi
+        done
     if [ "$check_format" != 'ok' ]; then
         check_result $E_INVALID "invalid $2 format :: $1"
     fi

From 2e03b516f8ea117442fe82996ca31f9ad2db5bf1 Mon Sep 17 00:00:00 2001
From: Maksim Usmanov | Maks <skamasle@gmail.com>
Date: Wed, 24 Jan 2018 00:29:03 +0100
Subject: [PATCH 0024/2300] Fix Min and hour limit in cron validation

---
 func/main.sh | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index 4d48293d..1d3148c9 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -723,8 +723,12 @@ is_ip_status_format_valid() {
 
 # Cron validator
 is_cron_format_valid() {
-    limit=60
+    limit=59
     check_format=''
+    if [ "$2" = 'hour' ]; then
+        limit=23
+    fi
+    
     if [ "$2" = 'day' ]; then
         limit=31
     fi

From 4b1b1e3299c924c821f8cc184c872e2a76b25fce Mon Sep 17 00:00:00 2001
From: Emmanuel Higgins <eman@onlythebible.com>
Date: Thu, 25 Jan 2018 19:30:38 +1100
Subject: [PATCH 0025/2300] 644 chmod should only apply to files

---
 bin/v-add-web-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-web-domain b/bin/v-add-web-domain
index 018adcb4..f4243f33 100755
--- a/bin/v-add-web-domain
+++ b/bin/v-add-web-domain
@@ -90,7 +90,7 @@ chown root:$user /var/log/$WEB_SYSTEM/domains/$domain.* $conf
 chmod 640 /var/log/$WEB_SYSTEM/domains/$domain.*
 chmod 751 $HOMEDIR/$user/web/$domain $HOMEDIR/$user/web/$domain/*
 chmod 551 $HOMEDIR/$user/web/$domain/stats $HOMEDIR/$user/web/$domain/logs
-chmod 644 $HOMEDIR/$user/web/$domain/public_*html/*
+chmod 644 $HOMEDIR/$user/web/$domain/public_*html/*.*
 
 # Addding PHP-FPM backend
 if [ ! -z "$WEB_BACKEND" ]; then

From 421ecfa62c16f13a8ec8b67ae2cbc4becee7cc57 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 26 Jan 2018 16:08:55 +0200
Subject: [PATCH 0026/2300] install apparmor-utils

---
 install/vst-install-ubuntu.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 440503dc..223f9d11 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -30,7 +30,7 @@ if [ "$release" = '16.04' ]; then
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect vim-common
-        vesta-ioncube vesta-softaculous"
+        vesta-ioncube vesta-softaculous apparmor-utils"
 elif [ "$release" = '16.10' ]; then
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2 libapache2-mod-rpaf
@@ -43,7 +43,7 @@ elif [ "$release" = '16.10' ]; then
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect vim-common
-        vesta-ioncube vesta-softaculous"
+        vesta-ioncube vesta-softaculous apparmor-utils"
 else
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2 libapache2-mod-rpaf

From 40011f8f751015a233264e8120a0554b9dbe2404 Mon Sep 17 00:00:00 2001
From: "info@madeit.be" <info@madeit.be>
Date: Wed, 31 Jan 2018 10:46:18 +0000
Subject: [PATCH 0027/2300] #1462

---
 install/debian/7/templates/web/nginx/http2.stpl     | 6 +++---
 install/debian/7/templates/web/nginx/http2.tpl      | 6 +++---
 install/debian/8/templates/web/nginx/http2.stpl     | 6 +++---
 install/debian/8/templates/web/nginx/http2.tpl      | 6 +++---
 install/debian/9/templates/web/nginx/http2.stpl     | 6 +++---
 install/debian/9/templates/web/nginx/http2.tpl      | 6 +++---
 install/rhel/5/templates/web/nginx/http2.stpl       | 6 +++---
 install/rhel/5/templates/web/nginx/http2.tpl        | 6 +++---
 install/rhel/6/templates/web/nginx/http2.stpl       | 6 +++---
 install/rhel/6/templates/web/nginx/http2.tpl        | 6 +++---
 install/rhel/7/templates/web/nginx/http2.stpl       | 6 +++---
 install/rhel/7/templates/web/nginx/http2.tpl        | 6 +++---
 install/ubuntu/12.04/templates/web/nginx/http2.stpl | 6 +++---
 install/ubuntu/12.04/templates/web/nginx/http2.tpl  | 6 +++---
 install/ubuntu/12.10/templates/web/nginx/http2.stpl | 6 +++---
 install/ubuntu/12.10/templates/web/nginx/http2.tpl  | 6 +++---
 install/ubuntu/13.04/templates/web/nginx/http2.stpl | 6 +++---
 install/ubuntu/13.04/templates/web/nginx/http2.tpl  | 6 +++---
 install/ubuntu/13.10/templates/web/nginx/http2.stpl | 6 +++---
 install/ubuntu/13.10/templates/web/nginx/http2.tpl  | 6 +++---
 install/ubuntu/14.04/templates/web/nginx/http2.stpl | 6 +++---
 install/ubuntu/14.04/templates/web/nginx/http2.tpl  | 6 +++---
 install/ubuntu/14.10/templates/web/nginx/http2.stpl | 6 +++---
 install/ubuntu/14.10/templates/web/nginx/http2.tpl  | 6 +++---
 install/ubuntu/15.04/templates/web/nginx/http2.stpl | 6 +++---
 install/ubuntu/15.04/templates/web/nginx/http2.tpl  | 6 +++---
 install/ubuntu/15.10/templates/web/nginx/http2.stpl | 6 +++---
 install/ubuntu/15.10/templates/web/nginx/http2.tpl  | 6 +++---
 install/ubuntu/16.04/templates/web/nginx/http2.stpl | 6 +++---
 install/ubuntu/16.04/templates/web/nginx/http2.tpl  | 6 +++---
 install/ubuntu/16.10/templates/web/nginx/http2.stpl | 6 +++---
 install/ubuntu/16.10/templates/web/nginx/http2.tpl  | 6 +++---
 32 files changed, 96 insertions(+), 96 deletions(-)

diff --git a/install/debian/7/templates/web/nginx/http2.stpl b/install/debian/7/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/debian/7/templates/web/nginx/http2.stpl
+++ b/install/debian/7/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/debian/7/templates/web/nginx/http2.tpl b/install/debian/7/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/debian/7/templates/web/nginx/http2.tpl
+++ b/install/debian/7/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/debian/8/templates/web/nginx/http2.stpl b/install/debian/8/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/debian/8/templates/web/nginx/http2.stpl
+++ b/install/debian/8/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/debian/8/templates/web/nginx/http2.tpl b/install/debian/8/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/debian/8/templates/web/nginx/http2.tpl
+++ b/install/debian/8/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/debian/9/templates/web/nginx/http2.stpl b/install/debian/9/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/debian/9/templates/web/nginx/http2.stpl
+++ b/install/debian/9/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/debian/9/templates/web/nginx/http2.tpl b/install/debian/9/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/debian/9/templates/web/nginx/http2.tpl
+++ b/install/debian/9/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/rhel/5/templates/web/nginx/http2.stpl b/install/rhel/5/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/rhel/5/templates/web/nginx/http2.stpl
+++ b/install/rhel/5/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/rhel/5/templates/web/nginx/http2.tpl b/install/rhel/5/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/rhel/5/templates/web/nginx/http2.tpl
+++ b/install/rhel/5/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/rhel/6/templates/web/nginx/http2.stpl b/install/rhel/6/templates/web/nginx/http2.stpl
index 40e79aef..af55e7e5 100644
--- a/install/rhel/6/templates/web/nginx/http2.stpl
+++ b/install/rhel/6/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/rhel/6/templates/web/nginx/http2.tpl b/install/rhel/6/templates/web/nginx/http2.tpl
index 826276bd..b20e2922 100644
--- a/install/rhel/6/templates/web/nginx/http2.tpl
+++ b/install/rhel/6/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/rhel/7/templates/web/nginx/http2.stpl b/install/rhel/7/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/rhel/7/templates/web/nginx/http2.stpl
+++ b/install/rhel/7/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/rhel/7/templates/web/nginx/http2.tpl b/install/rhel/7/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/rhel/7/templates/web/nginx/http2.tpl
+++ b/install/rhel/7/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/12.04/templates/web/nginx/http2.stpl b/install/ubuntu/12.04/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/12.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/12.04/templates/web/nginx/http2.tpl b/install/ubuntu/12.04/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/12.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/12.10/templates/web/nginx/http2.stpl b/install/ubuntu/12.10/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/12.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/12.10/templates/web/nginx/http2.tpl b/install/ubuntu/12.10/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/12.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/13.04/templates/web/nginx/http2.stpl b/install/ubuntu/13.04/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/13.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/13.04/templates/web/nginx/http2.tpl b/install/ubuntu/13.04/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/13.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/13.10/templates/web/nginx/http2.stpl b/install/ubuntu/13.10/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/13.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/13.10/templates/web/nginx/http2.tpl b/install/ubuntu/13.10/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/13.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/14.04/templates/web/nginx/http2.stpl b/install/ubuntu/14.04/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/14.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/14.04/templates/web/nginx/http2.tpl b/install/ubuntu/14.04/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/14.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/14.10/templates/web/nginx/http2.stpl b/install/ubuntu/14.10/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/14.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/14.10/templates/web/nginx/http2.tpl b/install/ubuntu/14.10/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/14.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/15.04/templates/web/nginx/http2.stpl b/install/ubuntu/15.04/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/15.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/15.04/templates/web/nginx/http2.tpl b/install/ubuntu/15.04/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/15.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/15.10/templates/web/nginx/http2.stpl b/install/ubuntu/15.10/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/15.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/15.10/templates/web/nginx/http2.tpl b/install/ubuntu/15.10/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/15.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/16.04/templates/web/nginx/http2.stpl b/install/ubuntu/16.04/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/16.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/16.04/templates/web/nginx/http2.tpl b/install/ubuntu/16.04/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/16.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/16.10/templates/web/nginx/http2.stpl b/install/ubuntu/16.10/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/16.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/16.10/templates/web/nginx/http2.tpl b/install/ubuntu/16.10/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/16.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }

From a217391565cef1d1e9feff9d7f658157ae9e18ff Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 7 Feb 2018 21:02:53 +0100
Subject: [PATCH 0028/2300] Debian: Tolerate error in
 systemd/clamav-daemon.service if dir already exists

---
 install/vst-install-debian.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 2b567dfb..4b5d293d 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1110,8 +1110,8 @@ if [ "$clamd" = 'yes' ]; then
     fi
     chown -R clamav:clamav /var/run/clamav
     if [ -e "/lib/systemd/system/clamav-daemon.service" ]; then
-        exec_pre1='ExecStartPre=/bin/mkdir -p /var/run/clamav'
-        exec_pre2='ExecStartPre=/bin/chown -R clamav:clamav /var/run/clamav'
+        exec_pre1='ExecStartPre=-/bin/mkdir -p /var/run/clamav'
+        exec_pre2='ExecStartPre=-/bin/chown -R clamav:clamav /var/run/clamav'
         sed -i "s|\[Service\]/|[Service]\n$exec_pre1\n$exec_pre2|g" \
             /lib/systemd/system/clamav-daemon.service
         systemctl daemon-reload

From da5bcbe624ee7d5cbc460f552071a48d4f18289b Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 8 Feb 2018 12:10:23 +0300
Subject: [PATCH 0029/2300] Fix backup rotate for ftp/sftp mode

---
 bin/v-backup-user | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index f48803d0..cc28a1c8 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -615,7 +615,7 @@ ftp_backup() {
     fi
     backups_count=$(echo "$backup_list" |wc -l)
     if [ "$backups_count" -ge "$BACKUPS" ]; then
-        backups_rm_number=$((backups_count - BACKUPS))
+        backups_rm_number=$((backups_count - BACKUPS + 1))
         for backup in $(echo "$backup_list" |head -n $backups_rm_number); do 
             backup_date=$(echo $backup |sed -e "s/$user.//" -e "s/.tar$//")
             echo -e "$(date "+%F %T") Rotated ftp backup: $backup_date" |\
@@ -770,7 +770,7 @@ sftp_backup() {
     fi
     backups_count=$(echo "$backup_list" |wc -l)
     if [ "$backups_count" -ge "$BACKUPS" ]; then
-        backups_rm_number=$((backups_count - BACKUPS))
+        backups_rm_number=$((backups_count - BACKUPS + 1))
         for backup in $(echo "$backup_list" |head -n $backups_rm_number); do
             backup_date=$(echo $backup |sed -e "s/$user.//" -e "s/.tar.*$//")
             echo -e "$(date "+%F %T") Rotated sftp backup: $backup_date" |\

From 74fa6d5b0ce78cbb85ea657d16f8f2c3dba93c6c Mon Sep 17 00:00:00 2001
From: Maksim Usmanov | Maks <skamasle@gmail.com>
Date: Tue, 13 Feb 2018 22:54:34 +0100
Subject: [PATCH 0030/2300] Fix default alias

This

grep -v www.$domain make imposible to add default alias or some order alias if contain www. wwww. hiwww. so if you delete your default alias you cant add it any more.

I check this and not know why is excluded, for me there is no reason for that grep
---
 func/main.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index cec97888..dbd1970d 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -906,7 +906,7 @@ format_aliases() {
         aliases=$(echo "$aliases" |tr -s '.')
         aliases=$(echo "$aliases" |sed -e "s/[.]*$//g")
         aliases=$(echo "$aliases" |sed -e "s/^[.]*//")
-        aliases=$(echo "$aliases" |grep -v www.$domain |sed -e "/^$/d")
+        aliases=$(echo "$aliases" |sed -e "/^$/d")
         aliases=$(echo "$aliases" |tr '\n' ',' |sed -e "s/,$//")
     fi
 }

From 26c311b7738d7d19299e7c96028db93135d87f80 Mon Sep 17 00:00:00 2001
From: "info@madeit.be" <info@madeit.be>
Date: Tue, 13 Feb 2018 22:17:33 +0000
Subject: [PATCH 0031/2300] Revert "Fix default alias"

This reverts commit 74fa6d5b0ce78cbb85ea657d16f8f2c3dba93c6c.
---
 func/main.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index dbd1970d..cec97888 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -906,7 +906,7 @@ format_aliases() {
         aliases=$(echo "$aliases" |tr -s '.')
         aliases=$(echo "$aliases" |sed -e "s/[.]*$//g")
         aliases=$(echo "$aliases" |sed -e "s/^[.]*//")
-        aliases=$(echo "$aliases" |sed -e "/^$/d")
+        aliases=$(echo "$aliases" |grep -v www.$domain |sed -e "/^$/d")
         aliases=$(echo "$aliases" |tr '\n' ',' |sed -e "s/,$//")
     fi
 }

From 4cc3c1d287058be0bd06fdd7038854fffb63b1e1 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 14 Feb 2018 17:10:14 +0200
Subject: [PATCH 0032/2300] Amazon linux support

---
 bin/v-add-sys-ip             |  4 ++--
 bin/v-add-sys-quota          |  2 +-
 bin/v-add-vesta-softaculous  |  8 ++++----
 bin/v-change-sys-hostname    | 10 ++++------
 bin/v-list-sys-info          | 11 ++++++-----
 bin/v-list-sys-services      |  6 +++---
 bin/v-list-sys-vesta-updates | 10 +++++-----
 bin/v-stop-firewall          |  2 +-
 bin/v-update-firewall        |  2 +-
 bin/v-update-sys-vesta       |  2 +-
 bin/v-update-web-domain-stat |  2 +-
 bin/v-update-web-templates   |  6 +++++-
 12 files changed, 34 insertions(+), 31 deletions(-)

diff --git a/bin/v-add-sys-ip b/bin/v-add-sys-ip
index f278763b..54245bcc 100755
--- a/bin/v-add-sys-ip
+++ b/bin/v-add-sys-ip
@@ -60,8 +60,8 @@ if [ -z "$sys_ip_check" ]; then
     /sbin/ip addr add $ip/$cidr dev $interface \
         broadcast $broadcast label $iface
 
-    # Adding RHEL/CentOS/Fedora startup script
-    if [ -e "/etc/redhat-release" ]; then
+    # Adding RHEL/CentOS/Fedora/Amazon startup script
+    if [ -d "/etc/sysconfig" ]; then
         sys_ip="# Added by vesta"
         sys_ip="$sys_ip\nDEVICE=$iface"
         sys_ip="$sys_ip\nBOOTPROTO=static"
diff --git a/bin/v-add-sys-quota b/bin/v-add-sys-quota
index 35423a5d..93687e9c 100755
--- a/bin/v-add-sys-quota
+++ b/bin/v-add-sys-quota
@@ -21,7 +21,7 @@ source $VESTA/conf/vesta.conf
 # Checking quota package
 quota=$(which --skip-alias --skip-functions quota 2>/dev/null)
 if [ $? -ne 0 ]; then
-    if [ -e "/etc/redhat-release" ]; then
+    if [ -d "/etc/sysconfig" ]; then
         yum -y install quota >/dev/null 2>&1
         check_result $? "quota package installation failed" $E_UPDATE
     else
diff --git a/bin/v-add-vesta-softaculous b/bin/v-add-vesta-softaculous
index 2eb31635..b0cca53a 100755
--- a/bin/v-add-vesta-softaculous
+++ b/bin/v-add-vesta-softaculous
@@ -46,7 +46,7 @@ fi
 #----------------------------------------------------------#
 
 # Cleaning yum cache
-if [ -e "/etc/redhat-release" ]; then
+if [ -d "/etc/sysconfig" ]; then
     yum -q clean all
     yum="yum -q -y --noplugins --disablerepo=* --enablerepo=vesta"
 else
@@ -57,7 +57,7 @@ fi
 
 # Updating php pacakge
 if [ -z "$($VESTA/php/bin/php -v|grep 'PHP 5.6')" ]; then
-    if [ -e "/etc/redhat-release" ]; then
+    if [ -d "/etc/sysconfig" ]; then
         $yum -y update vesta-php
         check_result $? "vesta-php package upgrade failed" $E_UPDATE
     else
@@ -67,7 +67,7 @@ if [ -z "$($VESTA/php/bin/php -v|grep 'PHP 5.6')" ]; then
 fi
 
 # Adding vesta-ioncube package
-if [ -e "/etc/redhat-release" ]; then
+if [ -d "/etc/sysconfig" ]; then
     rpm -q vesta-ioncube >/dev/null 2>&1
     if [ $? -ne 0 ]; then
         $yum -y install vesta-ioncube >/dev/null 2>&1
@@ -82,7 +82,7 @@ else
 fi
 
 # Adding vesta-softaculous package
-if [ -e "/etc/redhat-release" ]; then
+if [ -d "/etc/sysconfig" ]; then
     rpm -q vesta-softaculous >/dev/null 2>&1
     if [ $? -ne 0 ]; then
         $yum -y install vesta-softaculous >/dev/null 2>&1
diff --git a/bin/v-change-sys-hostname b/bin/v-change-sys-hostname
index bf1e8bae..c5a6adb1 100755
--- a/bin/v-change-sys-hostname
+++ b/bin/v-change-sys-hostname
@@ -31,18 +31,16 @@ is_format_valid 'domain'
 
 hostname $domain
 
-# RHEL/CentOS
-if [ -e "/etc/redhat-release" ]; then
+if [ -d "/etc/sysconfig" ]; then
+    # RHEL/CentOS/Amazon
     touch /etc/sysconfig/network
     if [ -z "$(grep HOSTNAME /etc/sysconfig/network)" ]; then
         echo "HOSTNAME='$domain'" >> /etc/sysconfig/network
     else
         sed -i "s/HOSTNAME=.*/HOSTNAME='$domain'/" /etc/sysconfig/network
     fi
-fi
-
-# Debian/Ubuntu
-if [ ! -e "/etc/redhat-release" ]; then
+else
+    # Debian/Ubuntu
     echo "$domain" > /etc/hostname
 fi
 
diff --git a/bin/v-list-sys-info b/bin/v-list-sys-info
index dabd3160..0072b82b 100755
--- a/bin/v-list-sys-info
+++ b/bin/v-list-sys-info
@@ -56,17 +56,18 @@ csv_list() {
 HOSTNAME=$(hostname)
 
 # Check OS/Release
-if [ -e '/etc/redhat-release' ]; then
-    if [ ! -z "$(grep CentOS /etc/redhat-release)" ]; then
+if [ -d '/etc/sysconfig' ]; then
+    if [ -e '/etc/redhat-release' ]; then
         OS='CentOS'
+        VERSION=$(cat /etc/redhat-release |tr ' ' '\n' |grep [0-9])
     else
-        OS="RHEL"
+        OS="Amazon"
+        VERSION=$(cat /etc/issue |tr ' ' '\n' |grep [0-9])
     fi
-    VERSION=$(cat /etc/redhat-release| tr ' ' '\n' |grep [0-9])
 else
     if [ "$(lsb_release -si)" == "Ubuntu" ] && [ -e '/etc/debian_version' ]; then
         OS="Ubuntu"
-        VERSION=$(grep DISTRIB_RELEASE /etc/lsb-release| cut -f 2 -d '=')
+        VERSION=$(grep DISTRIB_RELEASE /etc/lsb-release |cut -f 2 -d '=')
     else
         distro=$(head -n1 /etc/issue |cut -f 1 -d ' ')
         if [ "$distro" = 'Debian' ]; then
diff --git a/bin/v-list-sys-services b/bin/v-list-sys-services
index f2622795..3718c171 100755
--- a/bin/v-list-sys-services
+++ b/bin/v-list-sys-services
@@ -191,7 +191,7 @@ fi
 
 # Checking MAIL ANTIVIRUS
 if [ ! -z "$ANTIVIRUS_SYSTEM" ] && [ "$ANTIVIRUS_SYSTEM" != 'remote' ]; then
-    if [ -e "/etc/redhat-release" ]; then
+    if [ -d "/etc/sysconfig" ]; then
         if [ "$ANTIVIRUS_SYSTEM" == 'clamav' ];then
             ANTIVIRUS_SYSTEM='clamd'
         fi
@@ -220,7 +220,7 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB_SYSTEM" != 'remote' ]; then
         proc_name=''
         service="$db"
         if [ "$service" = 'mysql' ]; then
-            if [ -e "/etc/redhat-release" ]; then
+            if [ -d "/etc/sysconfig" ]; then
                 service='mysqld'
                 proc_name='mysqld'
                 if [ -e "/usr/lib/systemd/system/mariadb.service" ]; then
@@ -231,7 +231,7 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB_SYSTEM" != 'remote' ]; then
         if [ "$service" == 'pgsql' ]; then
             service='postgresql'
             proc_name='postmaster'
-            if [ ! -e "/etc/redhat-release" ]; then
+            if [ ! -d "/etc/sysconfig" ]; then
                 proc_name='postgres'
             fi
             if [ ! -e '/etc/init.d/postgresql' ]; then
diff --git a/bin/v-list-sys-vesta-updates b/bin/v-list-sys-vesta-updates
index dcd40990..adcd6a1a 100755
--- a/bin/v-list-sys-vesta-updates
+++ b/bin/v-list-sys-vesta-updates
@@ -64,7 +64,7 @@ shell_list() {
 latest=$(wget -q -T 1 -t 1 http://c.vestacp.com/latest.txt -O -)
 
 # Checking installed vesta version
-if [ -e "/etc/redhat-release" ]; then
+if [ -d "/etc/sysconfig" ]; then
     rpm_format="VERSION='%{VERSION}'"
     rpm_format="$rpm_format RELEASE='%{RELEASE}'"
     rpm_format="$rpm_format ARCH='%{ARCH}'"
@@ -89,7 +89,7 @@ data="NAME='vesta' VERSION='$VERSION' RELEASE='$RELEASE' ARCH='$ARCH'"
 data="$data UPDATED='$UPDATED' DESCR='core package' TIME='$TIME' DATE='$DATE'"
 
 # Checking installed vesta-php version
-if [ -e "/etc/redhat-release" ]; then
+if [ -d "/etc/sysconfig" ]; then
     eval $(rpm --queryformat="$rpm_format" -q vesta-php)
     DATE=$(date -d @$UTIME +%F)
     TIME=$(date -d @$UTIME +%T)
@@ -107,7 +107,7 @@ data="$data ARCH='$ARCH' UPDATED='$UPDATED' DESCR='php interpreter'"
 data="$data TIME='$TIME' DATE='$DATE'"
 
 # Checking installed vesta-nginx version
-if [ -e "/etc/redhat-release" ]; then
+if [ -d "/etc/sysconfig" ]; then
     eval $(rpm --queryformat="$rpm_format" -q vesta-nginx)
     DATE=$(date -d @$UTIME +%F)
     TIME=$(date -d @$UTIME +%T)
@@ -126,7 +126,7 @@ data="$data TIME='$TIME' DATE='$DATE'"
 
 # Checking installed vesta-ioncube version
 if [ "$SOFTACULOUS" = 'yes' ]; then
-    if [ -e "/etc/redhat-release" ]; then
+    if [ -d "/etc/sysconfig" ]; then
         eval $(rpm --queryformat="$rpm_format" -q vesta-ioncube)
         DATE=$(date -d @$UTIME +%F)
         TIME=$(date -d @$UTIME +%T)
@@ -146,7 +146,7 @@ fi
 
 # Checking installed vesta-softaculous version
 if [ "$SOFTACULOUS" = 'yes' ]; then
-    if [ -e "/etc/redhat-release" ]; then
+    if [ -d "/etc/sysconfig" ]; then
         eval $(rpm --queryformat="$rpm_format" -q vesta-softaculous)
         DATE=$(date -d @$UTIME +%F)
         TIME=$(date -d @$UTIME +%T)
diff --git a/bin/v-stop-firewall b/bin/v-stop-firewall
index 4087190d..2cd653a6 100755
--- a/bin/v-stop-firewall
+++ b/bin/v-stop-firewall
@@ -56,7 +56,7 @@ bash $tmp 2>/dev/null
 rm -f $tmp
 
 # Saving rules to the master iptables file
-if [ -e "/etc/redhat-release" ]; then
+if [ -d "/etc/sysconfig" ]; then
     /sbin/iptables-save > /etc/sysconfig/iptables
     if [ -z "$(ls /etc/rc3.d/S*iptables 2>/dev/null)" ]; then
         /sbin/chkconfig iptables off
diff --git a/bin/v-update-firewall b/bin/v-update-firewall
index ccea7f3f..da91acc8 100755
--- a/bin/v-update-firewall
+++ b/bin/v-update-firewall
@@ -157,7 +157,7 @@ if [ ! -z "$FIREWALL_EXTENSION" ]; then
 fi
 
 # Saving rules to the master iptables file
-if [ -e "/etc/redhat-release" ]; then
+if [ -d "/etc/sysconfig" ]; then
     /sbin/iptables-save > /etc/sysconfig/iptables
     if [ -z "$(ls /etc/rc3.d/S*iptables 2>/dev/null)" ]; then
         /sbin/chkconfig iptables on
diff --git a/bin/v-update-sys-vesta b/bin/v-update-sys-vesta
index a42e4d71..39cd33a2 100755
--- a/bin/v-update-sys-vesta
+++ b/bin/v-update-sys-vesta
@@ -33,7 +33,7 @@ check_args '1' "$#" 'PACKAGE'
 #                       Action                             #
 #----------------------------------------------------------#
 
-if [ -e "/etc/redhat-release" ]; then
+if [ -d "/etc/sysconfig" ]; then
     # Clean yum chache
     yum -q clean all
 
diff --git a/bin/v-update-web-domain-stat b/bin/v-update-web-domain-stat
index c77b750b..c2c793e3 100755
--- a/bin/v-update-web-domain-stat
+++ b/bin/v-update-web-domain-stat
@@ -62,7 +62,7 @@ build_webalizer() {
 }
 
 build_awstats() {
-    if [ -e "/etc/redhat-release" ]; then
+    if [ -d "/etc/sysconfig" ]; then
         awstats="/usr/share/awstats/wwwroot/cgi-bin/awstats.pl"
         wwwroot="/usr/share/awstats/wwwroot"
         if [  ! -e "$awstats" ]; then
diff --git a/bin/v-update-web-templates b/bin/v-update-web-templates
index 3196c8b4..df882dd7 100755
--- a/bin/v-update-web-templates
+++ b/bin/v-update-web-templates
@@ -33,7 +33,11 @@ esac
 
 # Detecting release
 if [ "$version" = 'rhel' ]; then
-    release=$(grep -o "[0-9]" /etc/redhat-release |head -n1)
+    if [ -e '/etc/redhat-release' ]; then
+        release=$(grep -o "[0-9]" /etc/redhat-release |head -n1)
+    else
+        release=6
+    fi
 fi
 if [ "$version" = 'ubuntu' ]; then
     release=$(lsb_release -r |awk '{print $2}')

From 4c1a67a9b19a5381f5f40d68b8fb629155c40006 Mon Sep 17 00:00:00 2001
From: nothinux <nothinux@gmail.com>
Date: Tue, 6 Mar 2018 12:36:32 +0700
Subject: [PATCH 0033/2300] fix indonesian translation

---
 web/inc/i18n/id.php | 510 ++++++++++++++++++++++----------------------
 1 file changed, 254 insertions(+), 256 deletions(-)

diff --git a/web/inc/i18n/id.php b/web/inc/i18n/id.php
index ad3c18eb..1a55af74 100644
--- a/web/inc/i18n/id.php
+++ b/web/inc/i18n/id.php
@@ -1,22 +1,20 @@
 <?php
 /**
  * Vesta language file
- * azuya ( disketsa@gmail.com || hitamputih82@yahoo.com )
- *
- * NOTES : This translation doesn't use a standard language....
- *
+ * azuya (disketsa@gmail.com)
+ * nothinux (taufik@nothinux.id)
  */
 
 $LANG['id'] = array(
     'Packages'  => 'Paket',
     'IP'  => 'IP',
     'Graphs'  => 'Grafik',
-    'Statistics'  => 'Statisktik',
+    'Statistics'  => 'Statistik',
     'Log'  => 'Log',
     'Server'  => 'Server',
     'Services'  => 'Layanan',
     'Firewall' => 'Firewall',
-    'Updates'  => 'Updates',
+    'Updates'  => 'Perbarui',
     'Log in'  => 'Masuk',
     'Log out'  => 'Keluar',
 
@@ -28,22 +26,22 @@ $LANG['id'] = array(
     'CRON'  => 'CRON',
     'BACKUP'  => 'CADANGAN',
 
-    'LOGIN'  => 'LOGIN',
-    'RESET PASSWORD'  => 'RESET PASSWORD',
-    'SEARCH'  => 'SEARCH',
-    'PACKAGE'  => 'PACKAGE',
+    'LOGIN'  => 'MASUK',
+    'RESET PASSWORD'  => 'RESET KATA SANDI',
+    'SEARCH'  => 'CARI',
+    'PACKAGE'  => 'PAKET',
     'RRD'  => 'RRD',
     'STATS'  => 'STATS',
     'LOG'  => 'LOG',
-    'UPDATES'  => 'UPDATES',
+    'UPDATES'  => 'PERBARUI',
     'FIREWALL'  => 'FIREWALL',
     'SERVER'  => 'SERVER',
-    'MEMORY'  => 'MEMORY',
-    'DISK'  => 'DISK',
-    'NETWORK'  => 'NETWORK',
+    'MEMORY'  => 'MEMORI',
+    'DISK'  => 'DISKA',
+    'NETWORK'  => 'JARINGAN',
     'Web Log Manager'  => 'Web Log Manager',
 
-    'no notifications'  => 'no notifications',
+    'no notifications'  => 'tidak ada notifikasi',
 
     'Add User'  => 'Tambah Pengguna',
     'Add Domain'  => 'Tambah Domain',
@@ -60,7 +58,7 @@ $LANG['id'] = array(
     'Add Package'  => 'Tambah Paket',
     'Add IP'  => 'Tambah IP',
     'Add Rule' => 'Tambah Aturan',
-    'Ban IP Address' => 'Memblokir IP',
+    'Ban IP Address' => 'Blokir Alamat IP',
     'Search'  => 'Cari',
     'Add one more FTP Account' => 'Tambah satu lagi Pengguna FTP',
     'Overall Statistics'  => 'Seluruh Statistik',
@@ -71,16 +69,16 @@ $LANG['id'] = array(
     'Add'  => 'Tambah',
     'Back'  => 'Kembali',
     'Save'  => 'Simpan',
-    'Submit'  => 'Masukkan',
+    'Submit'  => 'Submit',
 
     'toggle all'  => 'alihkan semua',
-    'apply to selected'  => 'terapkan yg dipilih',
-    'rebuild'  => 'rancang ulang',
-    'rebuild web'  => 'rancang ulang web',
-    'rebuild dns'  => 'rancang ulang dns',
-    'rebuild mail'  => 'rancang ulang mail',
-    'rebuild db'  => 'rancang ulang db',
-    'rebuild cron'  => 'rancang ulang cron',
+    'apply to selected'  => 'terapkan yang dipilih',
+    'rebuild'  => 'bangun kembali',
+    'rebuild web'  => 'bangun kembali web',
+    'rebuild dns'  => 'bangun kembali dns',
+    'rebuild mail'  => 'bangun kembali mail',
+    'rebuild db'  => 'bangun kembali db',
+    'rebuild cron'  => 'bangun kembali cron',
     'update counters'  => 'perbarui penghitung',
     'suspend'  => 'tangguhkan',
     'unsuspend'  => 'batalkan penangguhan',
@@ -90,7 +88,7 @@ $LANG['id'] = array(
     'logout'  => 'keluar',
     'edit'  => 'sunting',
     'open webstats'  => 'buka webstats',
-    'view logs'  => 'lihat catatan',
+    'view logs'  => 'lihat log',
     'list records'  => 'daftar %s records',
     'add record'  => 'tambah record',
     'list accounts'  => 'daftar %s akun',
@@ -110,12 +108,12 @@ $LANG['id'] = array(
     'reread IP' => 'baca ulang IP',
     'enable autoupdate' => 'mengaktifkan autoupdate',
     'disable autoupdate' => 'menonaktifkan autoupdate',
-    'turn on notifications' => 'mengaktifkan notifik.',
-    'turn off notifications' => 'menonaktifkan notifik.',
-    'configure' => 'configure',
+    'turn on notifications' => 'mengaktifkan notifikasi.',
+    'turn off notifications' => 'menonaktifkan notifikasi.',
+    'configure' => 'konfigurasi',
 
-    'Adding User'  => 'Menambah User',
-    'Editing User'  => 'Menyunting User',
+    'Adding User'  => 'Menambah Pengguna',
+    'Editing User'  => 'Menyunting Pengguna',
     'Adding Domain'  => 'Menambah Domain',
     'Editing Domain'  => 'Menyunting Domain',
     'Adding DNS Domain'  => 'Menambah DNS Domain',
@@ -147,7 +145,7 @@ $LANG['id'] = array(
     'suspended'  => 'ditangguhkan',
     'running'  => 'berjalan',
     'stopped'  => 'berhenti',
-    'outdated'  => 'kadarluasa',
+    'outdated'  => 'kadaluarsa',
     'updated'  => 'perbarui',
 
     'yes'  => 'ya',
@@ -162,20 +160,20 @@ $LANG['id'] = array(
     'day'  => 'hari',
     'days'  => ' hari',
     'hours'  => ' jam',
-    'minutes'  => ' jam',
-    'month'  => ' month',
+    'minutes'  => ' menit',
+    'month'  => ' bulan',
     'package'  => 'paket',
     'Bandwidth'  => 'Bandwidth',
-    'Disk'  => 'Cakram',
+    'Disk'  => 'Diska',
     'Web'  => 'Web',
     'Mail'  => 'Mail',
     'Databases'  => 'Basis Data',
     'User Directories'  => 'Direktori Pengguna',
-    'Template'  => 'Contoh',
-    'Web Template'  => 'Contoh Web',
-    'Backend Template'  => 'Contoh Backend',
-    'Proxy Template' =>'Contoh Proxy',
-    'DNS Template'  => 'Contoh DNS',
+    'Template'  => 'Template',
+    'Web Template'  => 'Template Web',
+    'Backend Template'  => 'Template Backend',
+    'Proxy Template' =>'Template Proxy',
+    'DNS Template'  => 'Template DNS',
     'Web Domains'  => 'Web Domains',
     'SSL Domains'  => 'SSL Domains',
     'Web Aliases'  => 'Web Aliases',
@@ -185,20 +183,20 @@ $LANG['id'] = array(
     'DNS records'   => 'DNS records',
     'Name Servers'  => 'Name Servers',
     'Mail Domains'  => 'Mail Domains',
-    'Mail Accounts'  => 'Para Pengguna Mail',
+    'Mail Accounts'  => 'Akun mail',
     'Cron Jobs'  => 'Cron Jobs',
     'SSH Access'  => 'Akses SSH',
-    'IP Address'  => 'IP Address',
+    'IP Address'  => 'Alamat IP',
     'IP Addresses'  => 'Alamat IP',
     'Backups'  => 'Cadangkan',
-    'Backup System'  => 'Cadangkan System',
-    'backup exclusions' => 'pengecualian',
-    'template'  => 'kerangka',
+    'Backup System'  => 'Cadangkan Sistem',
+    'backup exclusions' => 'pengecualian Cadangan',
+    'template'  => 'template',
     'SSL Support'  => 'Dukungan SSL',
-    'SSL Home Directory'  => 'Direktori SSL Home',
-    'Lets Encrypt Support'  => 'Lets Encrypt Support',
+    'SSL Home Directory'  => 'Direktori Home SSL',
+    'Lets Encrypt Support'  => 'Dukungan Lets Encrypt',
     'Lets Encrypt'  => 'Lets Encrypt',
-    'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
+    'Your certificate will be automatically issued in 5 minutes' => 'Sertifikat anda akan otomatis didapat dalam 5 menit',
     'Proxy Support'  => 'Dukungan Proxy',
     'Proxy Extensions'  => 'Ekstensi Proxy',
     'Web Statistics'  => 'Statistik Web',
@@ -206,7 +204,7 @@ $LANG['id'] = array(
     'Path'  => 'Path',
     'SOA'  => 'SOA',
     'TTL'  => 'TTL',
-    'Expire'  => 'Kadarluasa',
+    'Expire'  => 'Expire',
     'Records'  => 'Records',
     'Serial'  => 'Serial',
     'Catchall email'  => 'Catchall email',
@@ -217,18 +215,18 @@ $LANG['id'] = array(
     'Quota'  => 'Kuota',
     'Autoreply'  => 'Balasan Otomatis',
     'Forward to'  => 'Teruskan ke',
-    'Do not store forwarded mail' => 'Email terusan-nya jangan disimpan',
-    'IMAP hostname'  => 'IMAP hostname',
-    'IMAP port'  => 'IMAP port',
-    'IMAP security'  => 'IMAP security',
-    'IMAP auth method'  => 'IMAP auth method',
-    'SMTP hostname'  => 'SMTP hostname',
-    'SMTP port'  => 'SMTP port',
-    'SMTP security'  => 'SMTP security',
-    'SMTP auth method'  => 'SMTP auth method',
+    'Do not store forwarded mail' => 'Jangan simpan terusan surel',
+    'IMAP hostname'  => 'hostname IMAP',
+    'IMAP port'  => 'port IMAP',
+    'IMAP security'  => 'keamanan IMAP',
+    'IMAP auth method'  => 'metode autentikasi IMAP',
+    'SMTP hostname'  => 'hostname SMTP',
+    'SMTP port'  => 'port SMTP',
+    'SMTP security'  => 'keamanan SMTP',
+    'SMTP auth method'  => 'metode autentikasi SMTP',
     'STARTTLS'  => 'STARTTLS',
-    'Normal password'  => 'Normal password',
-    'database'  => 'basisdata',
+    'Normal password'  => 'kata sandi',
+    'database'  => 'basis data',
     'User'  => 'Pengguna',
     'Host'  => 'Host',
     'Charset'  => 'Charset',
@@ -249,14 +247,14 @@ $LANG['id'] = array(
     'Users'  => 'Para Pengguna',
     'Load Average'  => 'Rata2 Pemuatan',
     'Memory Usage'  => 'Penggunaan Memori',
-    'APACHE2 Usage'  => 'APACHE2 Usage',
+    'APACHE2 Usage'  => 'Penggunaan APACHE2',
     'HTTPD Usage'  => 'Penggunaan HTTPD',
     'NGINX Usage'  => 'Penggunaan NGINX',
     'MySQL Usage on localhost'  => 'Penggunaan MySQL di localhost',
     'PostgreSQL Usage on localhost'  => 'Penggunaan PostgreSQL di localhost',
     'Bandwidth Usage eth0'  => 'Penggunaan Bandwidth eth0',
     'Bandwidth Usage eth1'  => 'Penggunaan Bandwidth eth1',
-    'Exim Usage'  => 'Exim Usage',
+    'Exim Usage'  => 'Penggunaan Exim',
     'FTP Usage'  => 'Penggunaan FTP',
     'SSH Usage'  => 'Penggunaan SSH',
     'reverse proxy'  => 'reverse proxy',
@@ -266,7 +264,7 @@ $LANG['id'] = array(
     'pop/imap server'  => 'server pop/imap',
     'email antivirus'  => 'email antivirus',
     'email antispam'  => 'email antispam',
-    'database server'  => 'server basisdata',
+    'database server'  => 'server basis data',
     'ftp server'  => 'server ftp',
     'job scheduler'  => 'jadwal pekerjaan',
     'firewall'  => 'firewall',
@@ -282,20 +280,20 @@ $LANG['id'] = array(
     'Architecture'  => 'Arsitektur',
     'Object'  => 'Objek',
     'Username'  => 'Nama Pengguna',
-    'Password'  => 'Katakunci',
+    'Password'  => 'Kata sandi',
     'Email'  => 'Email',
     'Package'  => 'Paket',
     'Language'  => 'Bahasa',
     'First Name'  => 'Nama Depan',
     'Last Name'  => 'Nama Belakang',
-    'Send login credentials to email address'  => 'Kirim mandat login ke alamat email',
-    'Default Template'  => 'Contoh Standar',
-    'Default Name Servers'  => 'Standar Name Servers',
+    'Send login credentials to email address'  => 'Kirim kredensial login ke alamat email',
+    'Default Template'  => 'Template Standar',
+    'Default Name Servers'  => 'Name Servers Standar',
     'Domain'  => 'Domain',
     'DNS Support'  => 'Dukungan DNS',
     'Mail Support'  => 'Dukungan Mail',
     'Advanced options'  => 'Opsi lanjutan',
-    'Basic options'  => 'Basic options',
+    'Basic options'  => 'Opsi Dasar',
     'Aliases'  => 'Alias',
     'SSL Certificate'  => 'Sertifikat SSL',
     'SSL Key'  => 'Kunci SSL',
@@ -306,20 +304,20 @@ $LANG['id'] = array(
     'Statistics Authorization'  => 'Statistik Otoritas',
     'Statistics Auth'  => 'Statistik Otoritas',
     'Account'  => 'Pengguna',
-    'Prefix will be automaticaly added to username'  => 'Awalan % s nantinya ditambahin otomatis ke nama pengguna',
-    'Send FTP credentials to email'  => 'Kirim mandat FTP ke email',
-    'Expiration Date'  => 'Tanggal Kadarluasa',
+    'Prefix will be automaticaly added to username'  => 'Prefix %s nantinya ditambahin otomatis ke nama pengguna',
+    'Send FTP credentials to email'  => 'Kirim kredensial FTP ke email',
+    'Expiration Date'  => 'Tanggal Kadaluarsa',
     'YYYY-MM-DD'  => 'YYYY-MM-DD',
-    'Name servers'  => 'Name servers',
+    'Name servers'  => 'Name server',
     'Record'  => 'Record',
-    'IP or Value'  => 'IP or Nilai',
+    'IP or Value'  => 'Alamat IP atau Nilai',
     'Priority'  => 'Prioritas',
-    'Record Number' => 'Nomer Record',
+    'Record Number' => 'Nomor Record',
     'in megabytes'  => 'dalam megabytes',
-    'Message'  => 'PEsan',
-    'use local-part'  => 'gunakan local-part',
+    'Message'  => 'Pesan',
+    'use local-part'  => 'gunakan part lokal',
     'one or more email addresses'  => 'satu atau lebih alamat email',
-    'Prefix will be automaticaly added to database name and database user'  => 'Awalan  %s nantinya ditambahin otomatis ke nama dan pengguna basisdata',
+    'Prefix will be automaticaly added to database name and database user'  => 'Prefix  %s akan otomatis ditambahkan ke nama basis data dan pengguna basis data',
     'Database'  => 'Basis Data',
     'Type'  => 'Jenis',
     'Minute'  => 'Menit',
@@ -338,19 +336,19 @@ $LANG['id'] = array(
     'mail domains'  => 'mail domains',
     'mail accounts'  => 'mail accounts',
     'accounts'  => 'akun-akun',
-    'databases'  => 'basisdata',
+    'databases'  => 'basis data',
     'cron jobs'  => 'cron jobs',
-    'backups'  => 'cadangan-cadangan',
+    'backups'  => 'cadangan',
     'quota'  => 'kuota',
     'day of week'  => 'hari dalam seminggu',
     'cmd'  => 'cmd',
-    'users'  => 'pengguna-pengguna',
+    'users'  => 'pengguna',
     'domains'  => 'domains',
     'aliases'  => 'aliases',
     'records'  => 'records',
     'jobs'  => 'jobs',
-    'username'  => 'namapengguna',
-    'password'  => 'katakunci',
+    'username'  => 'nama pengguna',
+    'password'  => 'kata sandi',
     'type'  => 'tipe',
     'charset'  => 'charset',
     'domain'  => 'domain',
@@ -362,17 +360,17 @@ $LANG['id'] = array(
     'assigned user'  => 'pengguna yg ditetapkan',
     'ns1'  => 'ns1',
     'ns2'  => 'ns2',
-    'user'  => 'user',
+    'user'  => 'pengguna',
     'email'  => 'email',
     'first name'  => 'nama depan',
     'last name'  => 'nama belakang',
     'account'  => 'akun',
     'ssl certificate'  => 'sertifikat ssl',
     'ssl key'  => 'kunci ssl',
-    'stats user password'  => 'stats namapengguna katakunci',
-    'stats username'  => 'stats namapengguna',
-    'stats password'  => 'stats katakunci',
-    'ftp user password'  => 'ftp namapengguna katakunci',
+    'stats user password'  => 'stats nama pengguna kata sandi',
+    'stats username'  => 'stats nama pengguna',
+    'stats password'  => 'stats kata sandi',
+    'ftp user password'  => 'ftp nama pengguna kata sandi',
     'ftp user'  => 'ftp pengguna',
     'Last 70 lines of %s.%s.log' => '70 baris terakhir dari %s.%s.log',
     'AccessLog' => 'AccessLog',
@@ -380,26 +378,26 @@ $LANG['id'] = array(
     'Download AccessLog' => 'Unduh AccessLog',
     'Download ErrorLog' => 'Unduh ErrorLog',
     'Country' => 'Negara',
-    '2 letter code' => '2 kode surat',
-    'State / Province' => 'Propinsi',
+    '2 letter code' => '2 kode negara',
+    'State / Province' => 'Provinsi',
     'City / Locality' => 'Kota',
     'Organization' => 'Organisasi',
-    'Action' => 'Action',
+    'Action' => 'Aksi',
     'Protocol' => 'Protokol',
     'Port' => 'Port',
     'Comment' => 'Komentar',
-    'Banlist' => 'Banlist',
+    'Banlist' => 'list blokir',
     'ranges are acceptable' => 'rentang yang diperbolehkan',
-    'CIDR format is supported' => 'Format CIDR didukung',
-    'ACCEPT' => 'ACCEPT',
-    'DROP' => 'DROP',
+    'CIDR format is supported' => 'Format CIDR yang didukung',
+    'ACCEPT' => 'TERIMA',
+    'DROP' => 'BLOKIR',
     'TCP' => 'TCP',
     'UDP' => 'UDP',
     'ICMP' => 'ICMP',
     'SSH' => 'SSH',
     'FTP' => 'FTP',
     'VESTA' => 'VESTA',
-    'Add one more Name Server' => 'Add one more Name Server',
+    'Add one more Name Server' => 'Tambah satu atau lebih Name Server',
 
     'web domain' => 'web domain',
     'dns domain' => 'dns domain',
@@ -409,7 +407,7 @@ $LANG['id'] = array(
     'cron job' => 'cron job',
 
     'cron' => 'cron',
-    'user dir' => 'user dir',
+    'user dir' => 'dir pengguna',
 
     'unlimited'  => 'tidak terbatas',
     '1 account'  => '1 pengguna',
@@ -441,75 +439,75 @@ $LANG['id'] = array(
     'no exclusions' => 'tidak ada pengecualian',
     '1 rule' => '1 aturan',
     '%s rules' => '%s aturan',
-    'There are no currently banned IP' => 'Tidak dilarang IP',
+    'There are no currently banned IP' => 'Saat ini tidak ada IP yang diblokir',
 
-    'USER_CREATED_OK'  => 'Pengguna <a href="/edit/user/?user=%s"><b>%s</b></a> udah berhasil dibikin',
-    'WEB_DOMAIN_CREATED_OK'  => 'Domain <a href="/edit/web/?domain=%s"><b>%s</b></a> udah berhasil dibikin.',
-    'DNS_DOMAIN_CREATED_OK'  => 'Domain DNS<a href="/list/dns/?domain=%s"><b>%s</b></a> udah berhasil dibikin.',
-    'DNS_RECORD_CREATED_OK'  => 'Record <b>%s.%s</b> udah berhasil dibikin.',
-    'MAIL_DOMAIN_CREATED_OK'  => 'Domain Mail <a href="/list/mail/?domain=%s"><b>%s</b></a> udah berhasil dibikin.',
-    'MAIL_ACCOUNT_CREATED_OK'  => 'Akun Mail <a href="/edit/mail/?account=%s&domain=%s"><b>%s@%s</b></a> udah berhasil dibikin',
-    'DATABASE_CREATED_OK'  => 'Database <a href="/edit/db/?database=%s"><b>%s</b></a> udah berhasil dibikin',
-    'CRON_CREATED_OK'  => 'Cron job udah berhasil dibuat.',
-    'IP_CREATED_OK'  => 'Alamat IP <a href="/edit/ip/?ip=%s"><b>%s</b></a> udah berhasil dibikin.',
-    'PACKAGE_CREATED_OK'  => 'Paket <a href="/edit/package/?package=%s"><b>%s</b></a> udah berhasil dibikin.',
-    'SSL_GENERATED_OK' => 'Sertifikat udah berhasil dihasilkan.',
-    'RULE_CREATED_OK' => 'Aturan udah berhasil dibikin.',
-    'BANLIST_CREATED_OK' => 'IP address has been banned successfully',
-    'Autoupdate has been successfully enabled' => 'Autoupdate sukses diaktifkan',
+    'USER_CREATED_OK'  => 'Pengguna <a href="/edit/user/?user=%s"><b>%s</b></a> telah berhasil dibuat',
+    'WEB_DOMAIN_CREATED_OK'  => 'Domain <a href="/edit/web/?domain=%s"><b>%s</b></a> telah berhasil dibuat.',
+    'DNS_DOMAIN_CREATED_OK'  => 'Domain DNS<a href="/list/dns/?domain=%s"><b>%s</b></a> telah berhasil dibuat.',
+    'DNS_RECORD_CREATED_OK'  => 'Record <b>%s.%s</b> telah berhasil dibuat.',
+    'MAIL_DOMAIN_CREATED_OK'  => 'Domain Mail <a href="/list/mail/?domain=%s"><b>%s</b></a> telah berhasil dibuat.',
+    'MAIL_ACCOUNT_CREATED_OK'  => 'Akun Mail <a href="/edit/mail/?account=%s&domain=%s"><b>%s@%s</b></a> telah berhasil dibuat',
+    'DATABASE_CREATED_OK'  => 'Basis data <a href="/edit/db/?database=%s"><b>%s</b></a> telah berhasi dibuat',
+    'CRON_CREATED_OK'  => 'Cron job telah berhasil dibuat.',
+    'IP_CREATED_OK'  => 'Alamat IP <a href="/edit/ip/?ip=%s"><b>%s</b></a> telah berhasil dibuat.',
+    'PACKAGE_CREATED_OK'  => 'Paket <a href="/edit/package/?package=%s"><b>%s</b></a> telah berhasil dibuat.',
+    'SSL_GENERATED_OK' => 'Sertifikat telah berhasil didapatkan.',
+    'RULE_CREATED_OK' => 'Aturan Telah berhasil dibuat.',
+    'BANLIST_CREATED_OK' => 'Alamat IP telah berhasil diblokir',
+    'Autoupdate has been successfully enabled' => 'Autoupdate telah diaktifkan',
     'Autoupdate has been successfully disabled' => 'Autoupdate telah dinonaktifkan',
     'Cronjob email reporting has been successfully enabled' => 'Pelaporan cronjob telah berhasil diaktifkan',
     'Cronjob email reporting has been successfully disabled' => 'Pelaporan cronjob telah berhasil dinonaktifkan',
-    'Changes has been saved.'  => 'Perubahan udah disimpan.',
+    'Changes has been saved.'  => 'Perubahan telah disimpan.',
     'Confirmation'  => 'Konfirmasi',
-    'DELETE_USER_CONFIRMATION' => 'Yakin pengguna %s mau dihapus nih?',
-    'SUSPEND_USER_CONFIRMATION' => 'Yakin pengguna %s mau ditangguhkan nih?',
-    'UNSUSPEND_USER_CONFIRMATION' => 'Yakin mau batalin penangguhan pengguna %s?',
-    'DELETE_DOMAIN_CONFIRMATION' => 'Domain %s beneran mau dihapus?',
-    'SUSPEND_DOMAIN_CONFIRMATION' => 'Domain %s beneran mau ditangguhin?',
-    'UNSUSPEND_DOMAIN_CONFIRMATION' => 'Penangguhan Domain %s mau dibatalin. Yakin?',
-    'DELETE_RECORD_CONFIRMATION' => 'Record %s mau dihapus?',
-    'SUSPEND_RECORD_CONFIRMATION' => 'Record %s mau ditangguhin?',
-    'UNSUSPEND_RECORD_CONFIRMATION' => 'Batalin penagguhan record %s. Yakin?',
-    'DELETE_MAIL_ACCOUNT_CONFIRMATION' => 'Beneran mau ngapus %s?',
-    'SUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '%s mau ditangguhkan nih?',
-    'UNSUSPEND_MAIL_ACCOUNT_CONFIRMATION' => 'Yakin mau batalin penangguhan %s?',
-    'DELETE_DATABASE_CONFIRMATION' => 'Basisdata mau dihhapus %s, Beneran?',
-    'SUSPEND_DATABASE_CONFIRMATION' => 'Basisdata %s beneran mau ditangguhin?',
-    'UNSUSPEND_DATABASE_CONFIRMATION' => 'Penangguhan Basisdata %s mau dibatalin. Yakin?',
-    'DELETE_CRON_CONFIRMATION' => 'Yakin mau dihapus?',
-    'SUSPEND_CRON_CONFIRMATION' => 'Yakin mau ditangguhin?',
-    'UNSUSPEND_CRON_CONFIRMATION' => 'Yakin mau batalin penangguhan?',
-    'DELETE_BACKUP_CONFIRMATION'  => 'Cadangan %s mau dihapus, serius?',
-    'DELETE_EXCLUSION_CONFIRMATION' => 'Pengecualian %s mau dihapus?',
-    'DELETE_PACKAGE_CONFIRMATION'  => 'Paket %s mau dihapus?',
-    'DELETE_IP_CONFIRMATION'  => 'Alamat IP %s beneran mau dihapus?',
-    'DELETE_RULE_CONFIRMATION' => 'Aturan #%s beneran mau dihapus?',
-    'SUSPEND_RULE_CONFIRMATION' => 'Aturan #%s beneran mau ditangguhin?',
-    'UNSUSPEND_RULE_CONFIRMATION' => 'Penangguhan aturan #%s mau dibatalin. Yakin?',
-    'LEAVE_PAGE_CONFIRMATION' => 'Leave Page?',
-    'RESTART_CONFIRMATION' => '%s mau me-restart?',
+    'DELETE_USER_CONFIRMATION' => 'Apakah anda yakin akan menghapus pengguna %s ?',
+    'SUSPEND_USER_CONFIRMATION' => 'Apakah anda yakin akan menangguhkan pengguna %s ?',
+    'UNSUSPEND_USER_CONFIRMATION' => 'Apakah anda yakin akan membatalkan penangguhan pengguna %s?',
+    'DELETE_DOMAIN_CONFIRMATION' => 'Apakah anda yakin akan menghapus Domain %s ?',
+    'SUSPEND_DOMAIN_CONFIRMATION' => 'Apakah anda yakin akan menangguhkan domain %s ?',
+    'UNSUSPEND_DOMAIN_CONFIRMATION' => 'Apakah anda yakin akan membatalkan penangguhan domain %s ?',
+    'DELETE_RECORD_CONFIRMATION' => 'Apakah anda yakin akan menghapus record %s ?',
+    'SUSPEND_RECORD_CONFIRMATION' => 'Apakah anda yakin akan menangguhkan record %s ?',
+    'UNSUSPEND_RECORD_CONFIRMATION' => 'Apakah anda yakin akan membatalkan penangguhan record %s ?',
+    'DELETE_MAIL_ACCOUNT_CONFIRMATION' => 'Apakah anda yakin akan menghapus surel %s?',
+    'SUSPEND_MAIL_ACCOUNT_CONFIRMATION' => 'Apakah anda yakin akan menangguhkan surel %s ?',
+    'UNSUSPEND_MAIL_ACCOUNT_CONFIRMATION' => 'Apakah anda yakin akan membatalkan penangguhan surel %s?',
+    'DELETE_DATABASE_CONFIRMATION' => 'Apakah anda yakin akan menghapus basis data %s ?',
+    'SUSPEND_DATABASE_CONFIRMATION' => 'Apakah anda yakin akan menangguhkan basis data %s ?',
+    'UNSUSPEND_DATABASE_CONFIRMATION' => 'Apakah anda yakin akan membatalkan penangguhan basis data %s ?',
+    'DELETE_CRON_CONFIRMATION' => 'Apakah anda yakin akan menghapus cron ?',
+    'SUSPEND_CRON_CONFIRMATION' => 'Apakah anda yakin akan menangguhkan cron ?',
+    'UNSUSPEND_CRON_CONFIRMATION' => 'Apakah anda yakin akan membatalkan penangguhan cron ?',
+    'DELETE_BACKUP_CONFIRMATION'  => 'Apakah anda yakin akan menghapus Cadangan %s ?',
+    'DELETE_EXCLUSION_CONFIRMATION' => 'Apakah anda yakin akan menghapus Pengecualian %s ?',
+    'DELETE_PACKAGE_CONFIRMATION'  => 'Apakah anda yakin akan menghapus Paket %s ?',
+    'DELETE_IP_CONFIRMATION'  => 'Apakah anda yakin akan menghapus Alamat IP %s ?',
+    'DELETE_RULE_CONFIRMATION' => 'Apakah anda yakin akan menghapus Aturan #%s ?',
+    'SUSPEND_RULE_CONFIRMATION' => 'Apakah anda yakin akan menangguhkan Aturan #%s ?',
+    'UNSUSPEND_RULE_CONFIRMATION' => 'Apakah anda yakin akan membatalkan penangguhan aturan #%s ?',
+    'LEAVE_PAGE_CONFIRMATION' => 'Tinggalkan halaman?',
+    'RESTART_CONFIRMATION' => 'Apakah anda yakin ingin me-restart %s?',
     'Welcome'  => 'Selamat Datang',
     'LOGGED_IN_AS'  => 'Masuk sebagai pengguna %s',
     'Error'  => 'Kesalahan',
-    'Invalid username or password'  => 'Nama pengguna atau katakunci salah',
+    'Invalid username or password'  => 'Nama pengguna atau kata sandi salah',
     'Invalid username or code'  => 'Kode atau nama pengguna salah',
-    'Passwords not match'  => 'Katakunci ngga sama',
-    'Please enter valid email address.'  => 'Masukkan alamat email yg valid.',
-    'Field "%s" can not be blank.'  => 'Field "%s" ga boleh kosong.',
-    'Password is too short.'  => 'Katakunci kependekan (paling dikit 6 huruf)',
+    'Passwords not match'  => 'Kata sandi tidak sama',
+    'Please enter valid email address.'  => 'Masukkan alamat surel yang valid.',
+    'Field "%s" can not be blank.'  => 'Field "%s" tidak boleh kosong.',
+    'Password is too short.'  => 'Kata sandi terlalu pendek (minimal 6 karakter)',
     'Error code:'  => 'Kode kesalahan: %s',
     'SERVICE_ACTION_FAILED'  => '"%s" "%s" gagal',
-    'IP address is in use' => 'Alamat IP udah ada yang pake',
-    'BACKUP_SCHEDULED'  => 'Tugas udah ditambahin ke antrian. Nanti email pemberitahuan dikirim kalo backup-an sudah siap di unduh.',
-    'BACKUP_EXISTS'  => 'Backup lagi berjalan. Tunggu dulu sampe selesai.',
-    'RESTORE_SCHEDULED'  => 'Tugas udah ditambahin ke antrian. Nanti email pemberitahuan dikirim kalo backup-an sudah siap di unduh.',
-    'RESTORE_EXISTS'  => 'Tugas pengembalian lagi jalan. Tunggu ampe selesai baru jalanin lagi.',
+    'IP address is in use' => 'Alamat IP sudah digunakan',
+    'BACKUP_SCHEDULED'  => 'Tugas sudah ditambahkan ke antrian. email pemberitahuan akan dikirim ketika cadangan telah siap diunduh.',
+    'BACKUP_EXISTS'  => 'Proses mencadangkan sedang berjalan. silahkan tunggu hingga selesai.',
+    'RESTORE_SCHEDULED'  => 'Tugas sudah ditambahkan ke antrian. email pemberitahuan akan dikirim ketika cadangan telah siap diunduh.',
+    'RESTORE_EXISTS'  => 'Tugas pengembalian sedang berjalan. Silahkan tunggu hingga selesai.',
 
     'WEB_EXCLUSIONS' => 'Ketik nama domain, satu domain perbaris. Untuk pengecualian semua domain gunakan karakter *. Untuk  pengecualian spesifik direktori gunakan format : domain.com:public_html/cache:public_html/tmp',
     'DNS_EXCLUSIONS' => 'Ketik nama domain, satu domain perbaris. Untuk pengecualian semua domain gunakan karakter *.',
     'MAIL_EXCLUSIONS' => 'Ketik nama domain, satu domain perbaris. Untuk pengecualian semua domain gunakan karakter *. Untuk  pengecualian spesifik direktori gunakan format : domain.com:info:support:postmaster',
-    'DB_EXCLUSIONS' => 'Ketik nama database, satu database  per baris. Untuk pengecualian semua databases gunakan *',
+    'DB_EXCLUSIONS' => 'Ketik nama basis data, satu basis data per baris. Untuk pengecualian semua databases gunakan *',
     'CRON_EXCLUSIONS' => 'Untuk pengecualian semua JOBS gunakan *',
     'USER_EXCLUSIONS' => 'Ketik nama direktori, satu direktori per baris. Untuk pengecualian semua direktori gunakan karakter *',
 
@@ -517,37 +515,37 @@ $LANG['id'] = array(
     'MAIL_FROM'  => 'Panel Kontrol Vesta <noreply@%s>',
     'GREETINGS_GORDON_FREEMAN' => "Hai, %s %s,\n",
     'GREETINGS' => "Hai,\n",
-    'ACCOUNT_READY' => "Akun kamu sudah dibuat dan siap dipakai.\n\nhttps://%s/login/\nNamapengguna: %s\nKatakunci: %s\n\n--\nPanel Kontrol Vesta\n",
+    'ACCOUNT_READY' => "Akun telah dibuat dan siap digunakan.\n\nhttps://%s/login/\nNama pengguna: %s\nKata sandi: %s\n\n--\nPanel Kontrol Vesta\n",
 
-    'FTP login credentials'  => 'Mandat untuk masuk FTP',
-    'FTP_ACCOUNT_READY' => "Akun FTP kamu sudah dibuat dan siap dipakai.\n\nHostname: %s\nNamapengguna: %s_%s\nKatakunci: %s\n\n--\nPanel Kontrol Vesta\n",
+    'FTP login credentials'  => 'Kredensial untuk masuk FTP',
+    'FTP_ACCOUNT_READY' => "Akun FTP telah dibuat dan siap digunakan.\n\nHostname: %s\nNama pengguna: %s_%s\nKata sandi: %s\n\n--\nPanel Kontrol Vesta\n",
 
-    'Database Credentials'  => 'Database Credentials',
-    'DATABASE_READY' => "Basisdata udah berhasil dibikinin.\n\nDatabase: %s\nPengguna: %s\nKatakunci: %s\n%s\n\n--\nPanel Kontrol Vesta\n",
+    'Database Credentials'  => 'Kredensial Basis Data',
+    'DATABASE_READY' => "Basis data telah berhasil dibuat.\n\nBasis data: %s\nNama pengguna: %s\nKata sandi: %s\n%s\n\n--\nPanel Kontrol Vesta\n",
 
-    'forgot password'  => 'lupa katakunci',
+    'forgot password'  => 'lupa kata sandi',
     'Confirm'  => 'Konfirmasi',
-    'New Password'  => 'Katakunci',
-    'Confirm Password'  => 'Konfirmasi Katakunci',
+    'New Password'  => 'Kata Sandi Baru',
+    'Confirm Password'  => 'Konfirmasi Kata Sandi',
     'Reset'  => 'Reset',
     'Reset Code'  => 'Reset Kode',
     'RESET_NOTICE'  => '',
-    'RESET_CODE_SENT'  => 'Kode katakunci buat me-reset udah dikirim ke email<br>',
-    'MAIL_RESET_SUBJECT'  => 'Katakunci di-reset pada %s',
-    'PASSWORD_RESET_REQUEST' => "Kalo mau reset katakunci panel kontrol, klik aja tautan ini:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\nAlternatively, kalo ngga ke https://%s/reset/?action=code&user=%s terus masukin kode reset-nya:\n%s\n\nKalau emang kamu ga minta reset katakunci pesan ini abaikan aja, dan maaf ya....\n\n--\nPanel Kontrol Vesta\n",
+    'RESET_CODE_SENT'  => 'Kode kata sandi untuk me-reset sudah dikirim ke surel<br>',
+    'MAIL_RESET_SUBJECT'  => 'Kata sandi di-reset pada %s',
+    'PASSWORD_RESET_REQUEST' => "Untuk me-reset kata sandi, silahkan klik tautan ini:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\natau ke https://%s/reset/?action=code&user=%s lalu masukan kode reset-nya:\n%s\n\nJika anda tidak meminta untuk me-reset kata sandi, silahkan abaikan pesan ini.\n\n--\nPanel Kontrol Vesta\n",
 
     'Jan' => 'Jan',
     'Feb' => 'Feb',
     'Mar' => 'Mar',
     'Apr' => 'Apr',
-    'May' => 'May',
+    'May' => 'Mei',
     'Jun' => 'Jun',
     'Jul' => 'Jul',
-    'Aug' => 'Aug',
+    'Aug' => 'Agu',
     'Sep' => 'Sep',
-    'Oct' => 'Oct',
+    'Oct' => 'Okt',
     'Nov' => 'Nov',
-    'Dec' => 'Dec',
+    'Dec' => 'Des',
 
     'Configuring Server' => 'Konfigurasi Server',
     'Hostname' => 'Nama Host',
@@ -556,7 +554,7 @@ $LANG['id'] = array(
     'Proxy Server' => 'Proxy Server',
     'Web Server' => 'Web Server',
     'Backend Server' => 'Backend Server',
-    'Backend Pool Mode' => 'Backend Pool Mode',
+    'Backend Pool Mode' => 'Mode Backend Pool',
     'DNS Server' => 'DNS Server',
     'DNS Cluster' => 'DNS Cluster',
     'MAIL Server' => 'MAIL Server',
@@ -567,16 +565,16 @@ $LANG['id'] = array(
     'phpMyAdmin URL' => 'phpMyAdmin URL',
     'PostgreSQL Support' => 'PostgreSQL Support',
     'phpPgAdmin URL' => 'phpPgAdmin URL',
-    'Maximum Number Of Databases' => 'Maximum Number Of Databases',
-    'Current Number Of Databases' => 'Current Number Of Databases',
-    'Local backup' => 'Local backup',
-    'Compression level' => 'Compression level',
-    'Directory' => 'Directory',
+    'Maximum Number Of Databases' => 'Jumlah maximal basis data',
+    'Current Number Of Databases' => 'Jumlah database saat ini',
+    'Local backup' => 'Cadangan lokal',
+    'Compression level' => 'Tingkat Kompresi',
+    'Directory' => 'Direktori',
     'Remote backup' => 'Remote backup',
     'ftp' => 'FTP',
     'sftp' => 'SFTP',
     'SFTP Chroot' => 'SFTP Chroot',
-    'FileSystem Disk Quota' => 'FileSystem Disk Quota',
+    'FileSystem Disk Quota' => 'Kuota Diska FileSystem',
     'Vesta Control Panel Plugins' => 'Vesta Control Panel Plugins',
     'preview' => 'pratinjau',
     'Reseller Role' => 'Aturan Reseller',
@@ -584,14 +582,14 @@ $LANG['id'] = array(
     'Template Manager' => 'Template Manager',
     'Backup Migration Manager' => 'Backup Migration Manager',
     'FileManager' => 'FileManager',
-    'show: CPU / MEM / NET / DISK' => 'show: CPU / MEM / NET / DISK',
+    'show: CPU / MEM / NET / DISK' => 'tampilkan: CPU / MEM / NET / DISK',
 
     'sort by' => 'sortir',
     'Date' => 'Tanggal',
     'Starred' => 'Bintangi',
     'Name' => 'Nama',
 
-    'save to favorites' => 'save to favorites',
+    'save to favorites' => 'simpan ke favorit',
 
     'File Manager' => 'File Manager',
     'size' => 'ukuran',
@@ -603,60 +601,60 @@ $LANG['id'] = array(
     'NEW DIR' => 'DIREKTORI BARU',
     'DELETE' => 'HAPUS',
     'RENAME' => 'GANTI',
-    'MOVE' => 'MOVE',
-    'RIGHTS' => 'RIGHTS',
+    'MOVE' => 'PINDAH',
+    'RIGHTS' => 'HAK',
     'COPY' => 'SALIN',
     'ARCHIVE' => 'ARSIP',
     'EXTRACT' => 'EKSTRAK',
     'DOWNLOAD' => 'UNDUH',
-    'Are you sure?' => 'Are you sure?',
+    'Are you sure?' => 'Apakah anda yakin ?',
     'Hit' => 'Hit',
     'to reload the page' => 'untuk memuat ulang halaman',
-    'Directory name cannot be empty' => 'Nama Directory ga boleh kosong',
-    'File name cannot be empty' => 'Nama File ga boleh kosong',
-    'No file selected' => 'Ga ada file yg dipilih',
-    'No file or folder selected' => 'Ga ada file atau folder yg dipilih',
-    'File type not supported' => 'Tipe file ga didukung',
-    'Directory download not available in current version' => 'Unduh direktori ga tersedia di versi ini',
-    'Directory not available' => 'Direktori ga tersedia',
-    'Done' => 'Sudah Selesai',
+    'Directory name cannot be empty' => 'Nama Direktori tidak boleh kosong',
+    'File name cannot be empty' => 'Nama File tidak boleh kosong',
+    'No file selected' => 'Tidak ada file yang dipilih',
+    'No file or folder selected' => 'Tidak ada file atau folder yg dipilih',
+    'File type not supported' => 'Tipe file tidak didukung',
+    'Directory download not available in current version' => 'Direktori Unduh tidak tersedia di versi ini',
+    'Directory not available' => 'Direktori tidak tersedia',
+    'Done' => 'Selesai',
     'Close' => 'Tutup',
     'Copy' => 'Salin',
     'Cancel' => 'Batal',
     'Rename' => 'Ganti nama',
-    'Move' => 'Move',
-    'Change Rights' => 'Change Rights',
+    'Move' => 'Pindah',
+    'Change Rights' => 'Ganti Hak',
     'Delete' => 'Hapus',
     'Extract' => 'Ekstrak',
     'Create' => 'Buat',
     'Compress' => 'Kompres',
     'OK' => 'OK',
-    'YOU ARE COPYING' => 'YOU ARE COPYING',
-    'YOU ARE REMOVING' => 'YOU ARE REMOVING',
-    'Delete items' => 'Delete items',
-    'Copy files' => 'Copy files',
-    'Move files' => 'Move files',
-    'Are you sure you want to copy' => 'Yakin mau disalin',
-    'Are you sure you want to move' => 'Are you sure you want to move',
-    'Are you sure you want to delete' => 'Yakin mau dihapus',
+    'YOU ARE COPYING' => 'ANDA MENYALIN',
+    'YOU ARE REMOVING' => 'ANDA MENGHAPUS',
+    'Delete items' => 'Hapus item',
+    'Copy files' => 'Salin file',
+    'Move files' => 'Pindah file',
+    'Are you sure you want to copy' => 'Apakah anda yakin ingin menyalin',
+    'Are you sure you want to move' => 'Apakah anda yakin ingin memindahkan',
+    'Are you sure you want to delete' => 'Aapakah anda Yakin ingin menghapus',
     'into' => 'ke',
-    'existing files will be replaced' => 'file yg sudah ada akan diganti',
-    'Original name' => 'Nama original',
+    'existing files will be replaced' => 'file yang sudah ada akan diganti',
+    'Original name' => 'Nama orisinal',
     'File' => 'File',
     'already exists' => 'sudah ada',
-    'Create file' => 'Bikin file',
-    'Create directory' => 'Bikin direktori',
-    'read by owner' => 'read by owner',
-    'write by owner' => 'write by owner',
-    'execute/search by owner' => 'execute/search by owner',
-    'read by group' => 'read by group',
-    'write by group' => 'write by group',
-    'execute/search by group' => 'execute/search by group',
-    'read by others' => 'read by others',
-    'write by others' => 'write by others',
-    'execute/search by others' => 'execute/search by others',
+    'Create file' => 'Buat file',
+    'Create directory' => 'Buat direktori',
+    'read by owner' => 'dibaca oleh owner',
+    'write by owner' => 'ditulis oleh owner',
+    'execute/search by owner' => 'eksekusi/cari oleh owner',
+    'read by group' => 'dibaca oleh grup',
+    'write by group' => 'ditulis oleh grup',
+    'execute/search by group' => 'ekseskusi/cari oleh grup',
+    'read by others' => 'dibaca oleh lainnya',
+    'write by others' => 'ditulis oleh lainnya',
+    'execute/search by others' => 'ekseskusi/cari oleh lainnya',
 
-    'Shortcuts' => 'Shortcuts',
+    'Shortcuts' => 'Pintasan',
     'Add New object' => 'Tambah objek baru',
     'Save Form' => 'Simpan Formulir',
     'Cancel saving form' => 'Batalkan penyimpanan form',
@@ -682,58 +680,58 @@ $LANG['id'] = array(
     'Archive' => 'Arsip',
     'Save File (in text editor)' => 'Simpan File (di text editor)',
     'Close Popup / Cancel' => 'Tutup Popup / Batal',
-    'Move Cursor Up' => 'Pindahkan kursur keatas',
-    'Move Cursor Down' => 'Pindahkan kursur kebawah',
+    'Move Cursor Up' => 'Pindahkan kursor keatas',
+    'Move Cursor Down' => 'Pindahkan kursor kebawah',
     'Switch to Left Tab' => 'Pindah ke tab kiri',
     'Switch to Right Tab' => 'Pindah ke tab kanan',
     'Switch Tab' => 'Pindah Tab',
     'Go to the Top of the File List' => 'Pindah Ke atas dari Daftar File',
     'Go to the Last File' => 'Pindah File terakhir',
-    'Open File / Enter Directory' => 'Buka File/Masuk ke Directory',
-    'Edit File' => 'Edit File',
-    'Go to Parent Directory' => 'Ke Parent Directory',
+    'Open File / Enter Directory' => 'Buka File/Masuk ke Direktori',
+    'Edit File' => 'Sunting File',
+    'Go to Parent Directory' => 'Ke Direktori Induk',
     'Select Current File' => 'Pilih File ini',
     'Select Bunch of Files' => 'Pilih Bunch of Files',
     'Add File to the Current Selection' => 'Tambahkan File di Seleksi ini',
     'Select All Files' => 'Pilih semua file',
     'shortcuts are inspired by magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager' =>
-        'jalan pintas terinspirasi oleh magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager',
+        'pintasan terinspirasi oleh magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager',
 
-    'Licence Key' => 'Licence Key',
-    'Enter License Key' => 'Enter License Key',
-    'Buy Licence' => 'Buy Licence',
-    'Buy Lifetime License' => 'Buy Lifetime License',
-    'Disable and Cancel Licence' => 'Disable and Cancel Licence',
-    'Licence Activated' => 'Licence Activated',
-    'Licence Deactivated' => 'Licence Deactivated',
-    'Restrict users so that they cannot use SSH and access only their home directory.' => 'Restrict users so that they cannot use SSH and access only their home directory.',
-    'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.' => 'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.',
-    'This is a commercial module, you would need to purchace license key to enable it.' => 'This is a commercial module, you would need to purchace license key to enable it.',
+    'Licence Key' => 'Lisensi',
+    'Enter License Key' => 'Masukan Lisensi',
+    'Buy Licence' => 'Beli lisensi',
+    'Buy Lifetime License' => 'Beli Lisensi seumur hidup',
+    'Disable and Cancel Licence' => 'Nonaktifkan dan batalkan lisensi',
+    'Licence Activated' => 'Lisensi telah aktif',
+    'Licence Deactivated' => 'Lisensi telah di nonaktifkan',
+    'Restrict users so that they cannot use SSH and access only their home directory.' => 'Batasi pengguna agar tidak dapat menggunakan SSH dan hanya dapat mengakses direktori home.',
+    'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.' => 'Jelajahi, salin, sunting, lihat dan dapatkan semua file web anda menggunakan File Manager.',
+    'This is a commercial module, you would need to purchace license key to enable it.' => 'Ini modul komersial, anda perlu membayar lisensi untuk mengaktifkannya.',
 
-    'Minutes' => 'Minutes',
-    'Hourly' => 'Hourly',
-    'Run Command' => 'Run Command',
-    'every month' => 'every month',
-    'every odd month' => 'every odd month',
-    'every even month' => 'every even month',
-    'every day' => 'every day',
-    'every odd day' => 'every odd day',
-    'every even day' => 'every even day',
-    'weekdays (5 days)' => 'weekdays (5 days)',
-    'weekend (2 days)' => 'weekend (2 days)',
-    'Monday' => 'Monday',
-    'Tuesday' => 'Tuesday',
-    'Wednesday' => 'Wednesday',
-    'Thursday' => 'Thursday',
-    'Friday' => 'Friday',
-    'Saturday' => 'Saturday',
-    'Sunday' => 'Sunday',
-    'every hour' => 'every hour',
-    'every two hours' => 'every two hours',
-    'every minute' => 'every minute',
-    'every two minutes' => 'every two minutes',
-    'every' => 'every',
-    'Generate' => 'Generate',
+    'Minutes' => 'Permenit',
+    'Hourly' => 'Perhari',
+    'Run Command' => 'Jalankan Perintah',
+    'every month' => 'setiap bulan',
+    'every odd month' => 'setiap bulan ganjil',
+    'every even month' => 'setiap bulan sekali',
+    'every day' => 'setiap hari',
+    'every odd day' => 'setiap hari ganjil',
+    'every even day' => 'setiap hari sekali',
+    'weekdays (5 days)' => 'hari kerja (5 hari)',
+    'weekend (2 days)' => 'akhir pekan (2 hari)',
+    'Monday' => 'Senin',
+    'Tuesday' => 'Selasa',
+    'Wednesday' => 'Rabu',
+    'Thursday' => 'Kamis',
+    'Friday' => 'Jumat',
+    'Saturday' => 'Sabtu',
+    'Sunday' => 'Minggu',
+    'every hour' => 'setiap jam',
+    'every two hours' => 'setiap dua jam',
+    'every minute' => 'setiap menit',
+    'every two minutes' => 'setiap dua menit',
+    'every' => 'setiap',
+    'Generate' => 'Hasilkan',
 
     'webalizer' => 'webalizer',
     'awstats' => 'awstats',
@@ -747,14 +745,14 @@ $LANG['id'] = array(
     'PUB_KEY' => 'PUB_KEY',
     'ISSUER' => 'ISSUER',
 
-    'Use server hostname' => 'Use server hostname',
-    'Use domain hostname' => 'Use domain hostname',
-    'Use STARTTLS' => 'Use STARTTLS',
-    'Use SSL / TLS' => 'Use SSL / TLS',
-    'No encryption' => 'No encryption',
-    'Do not use encryption' => 'Do not use encryption',
+    'Use server hostname' => 'Gunakan hostname server',
+    'Use domain hostname' => 'Gunakan hostname domain',
+    'Use STARTTLS' => 'Gunakan STARTTLS',
+    'Use SSL / TLS' => 'Gunakan SSL / TLS',
+    'No encryption' => 'tidak ada enkripsi',
+    'Do not use encryption' => 'Jangan gunakan enkripsi',
 
-    'maximum characters length, including prefix' => 'maximum %s characters length, including prefix',
+    'maximum characters length, including prefix' => 'maksimal jumlah karakter %s, termasuk prefix',
 
-    'Email Credentials' => 'Email Credentials',
+    'Email Credentials' => 'Kredensial surel',
 );

From 4ef71310651dfd9df091a01cc4c87b2af3dada30 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 29 Mar 2018 16:35:31 +0300
Subject: [PATCH 0034/2300] few fixes for aws linux support

---
 bin/v-change-user-password |  4 ++++
 bin/v-update-sys-ip        | 10 ++++++++++
 2 files changed, 14 insertions(+)

diff --git a/bin/v-change-user-password b/bin/v-change-user-password
index a420502a..22a3d78f 100755
--- a/bin/v-change-user-password
+++ b/bin/v-change-user-password
@@ -37,6 +37,10 @@ is_password_valid
 echo "$user:$password" | /usr/sbin/chpasswd
 md5=$(awk -v user=$user -F : 'user == $1 {print $2}' /etc/shadow)
 
+if [ "$user" = 'admin' ] && [ -e "$VESTA/web/reset.admin" ]; then
+    rm -f $VESTA/web/reset.admin
+fi
+
 
 #----------------------------------------------------------#
 #                       Vesta                              #
diff --git a/bin/v-update-sys-ip b/bin/v-update-sys-ip
index ab7bc129..ce91ce96 100755
--- a/bin/v-update-sys-ip
+++ b/bin/v-update-sys-ip
@@ -114,6 +114,16 @@ for ip in $ip_list; do
     fi
 done
 
+# Checking NAT
+pub_ip=$(curl -s vestacp.com/what-is-my-ip/)
+if [ ! -z "$pub_ip" ] && [ ! -e "$VESTA/data/ips/$pub_ip" ]; then
+    check_nat=$(grep -R "$pub_ip" $VESTA/data/ips/)
+    if [ -z "$check_nat" ]; then
+        ip=$(ls -t $VESTA/data/ips/|head -n1)
+        $BIN/v-change-sys-ip-nat $ip $pub_ip
+    fi
+fi
+
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 6b97f7394c746229edda6dc356aae0bb64086ac8 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 5 Apr 2018 21:55:39 +0200
Subject: [PATCH 0035/2300] Determining is it MySQL or MariaDB in
 mysql_connect() func

---
 func/db.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/func/db.sh b/func/db.sh
index c42677a2..d9c43031 100644
--- a/func/db.sh
+++ b/func/db.sh
@@ -38,6 +38,11 @@ mysql_connect() {
         exit $E_CONNECT
     fi
     mysql_ver=$(cat $mysql_out |tail -n1 |cut -f 1 -d -)
+    mysql_fork="mysql"
+    check_mysql_fork=$(grep "MariaDB" $mysql_out)
+    if [ ! -z "$check_mysql_fork" ]; then
+        mysql_fork="mariadb"
+    fi
     rm -f $mysql_out
 }
 

From eb7e6d2fba27e5ebbf1284ec924941073094a985 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 5 Apr 2018 22:07:36 +0200
Subject: [PATCH 0036/2300] Fixing MySQL restore user privileges (MariaDB)

Fix #1523
---
 func/rebuild.sh | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/func/rebuild.sh b/func/rebuild.sh
index e5ab182a..eda48552 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -535,11 +535,15 @@ rebuild_mail_domain_conf() {
 rebuild_mysql_database() {
     mysql_connect $HOST
     mysql_query "CREATE DATABASE \`$DB\` CHARACTER SET $CHARSET" >/dev/null
-    if [ "$(echo $mysql_ver |cut -d '.' -f2)" -ge 7 ]; then
-        mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" >/dev/null
-        mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" >/dev/null
-        query="UPDATE mysql.user SET authentication_string='$MD5'"
-        query="$query WHERE User='$DBUSER'"
+    if [ "$(echo $mysql_ver |cut -d '.' -f2)" -ge 7 ] || [ "$mysql_fork" = "mariadb" ]; then
+        mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" 
+        mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" 
+        if [ "$mysql_fork" = "mariadb" ]; then
+            query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
+        else
+            query="UPDATE mysql.user SET authentication_string='$MD5'"
+            query="$query WHERE User='$DBUSER'"
+        fi
     else
         query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
     fi

From 69f01fb22777c04566df310b8eac50194d325394 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 5 Apr 2018 23:12:42 +0200
Subject: [PATCH 0037/2300] Adding missing >/dev/null in
 rebuild_mysql_database() func

---
 func/rebuild.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/func/rebuild.sh b/func/rebuild.sh
index eda48552..7f63acf1 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -536,8 +536,8 @@ rebuild_mysql_database() {
     mysql_connect $HOST
     mysql_query "CREATE DATABASE \`$DB\` CHARACTER SET $CHARSET" >/dev/null
     if [ "$(echo $mysql_ver |cut -d '.' -f2)" -ge 7 ] || [ "$mysql_fork" = "mariadb" ]; then
-        mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" 
-        mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" 
+        mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
+        mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
         if [ "$mysql_fork" = "mariadb" ]; then
             query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
         else

From b3d78bbfdb1d9642abb2e5efc5ff056b5fe2703b Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 5 Apr 2018 23:58:47 +0200
Subject: [PATCH 0038/2300] Avoiding IF NOT EXISTS for MariaDB 5.x in
 rebuild_mysql_database()

---
 func/rebuild.sh | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/func/rebuild.sh b/func/rebuild.sh
index 7f63acf1..8cdc29f0 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -536,8 +536,13 @@ rebuild_mysql_database() {
     mysql_connect $HOST
     mysql_query "CREATE DATABASE \`$DB\` CHARACTER SET $CHARSET" >/dev/null
     if [ "$(echo $mysql_ver |cut -d '.' -f2)" -ge 7 ] || [ "$mysql_fork" = "mariadb" ]; then
-        mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
-        mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
+        if [ "$mysql_fork" = "mariadb" ] && [ "$(echo $mysql_ver |cut -d '.' -f1)" -eq 5 ]; then
+            mysql_query "CREATE USER \`$DBUSER\`" > /dev/null
+            mysql_query "CREATE USER \`$DBUSER\`@localhost" > /dev/null
+        else
+            mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
+            mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
+        fi
         if [ "$mysql_fork" = "mariadb" ]; then
             query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
         else

From 7ec123a861852671589c7fa9dadcee203dd165a3 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 6 Apr 2018 14:50:42 +0200
Subject: [PATCH 0039/2300] Refactoring rebuild_mysql_database() func

Fix #1523
---
 func/rebuild.sh | 27 ++++++++++++++++++---------
 1 file changed, 18 insertions(+), 9 deletions(-)

diff --git a/func/rebuild.sh b/func/rebuild.sh
index 8cdc29f0..a6025928 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -535,21 +535,30 @@ rebuild_mail_domain_conf() {
 rebuild_mysql_database() {
     mysql_connect $HOST
     mysql_query "CREATE DATABASE \`$DB\` CHARACTER SET $CHARSET" >/dev/null
-    if [ "$(echo $mysql_ver |cut -d '.' -f2)" -ge 7 ] || [ "$mysql_fork" = "mariadb" ]; then
-        if [ "$mysql_fork" = "mariadb" ] && [ "$(echo $mysql_ver |cut -d '.' -f1)" -eq 5 ]; then
+    if [ "$mysql_fork" = "mysql" ]; then
+        # mysql
+        if [ "$(echo $mysql_ver |cut -d '.' -f2)" -ge 7 ]; then
+            # mysql >= 5.7
+            mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
+            mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
+            query="UPDATE mysql.user SET authentication_string='$MD5'"
+            query="$query WHERE User='$DBUSER'"
+        else
+            # mysql < 5.7
+            query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
+        fi
+    else
+        # mariadb
+        if [ "$(echo $mysql_ver |cut -d '.' -f1)" -eq 5 ]; then
+            # mariadb = 5
             mysql_query "CREATE USER \`$DBUSER\`" > /dev/null
             mysql_query "CREATE USER \`$DBUSER\`@localhost" > /dev/null
         else
+            # mariadb = 10
             mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
             mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
         fi
-        if [ "$mysql_fork" = "mariadb" ]; then
-            query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
-        else
-            query="UPDATE mysql.user SET authentication_string='$MD5'"
-            query="$query WHERE User='$DBUSER'"
-        fi
-    else
+        # mariadb any version
         query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
     fi
     mysql_query "GRANT ALL ON \`$DB\`.* TO \`$DBUSER\`@\`%\`" >/dev/null

From d942f85d319911d897dac2bab309e469405e6e73 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 6 Apr 2018 18:20:35 +0200
Subject: [PATCH 0040/2300] Clean-up for both config styles if there is no more
 domains

Fix #1458
---
 func/domain.sh | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/func/domain.sh b/func/domain.sh
index 1d4b5479..c21a38a6 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -287,10 +287,12 @@ del_web_config() {
         fi
         get_web_config_lines $WEBTPL/$1/$WEB_BACKEND/$2 $conf
         sed -i "$top_line,$bottom_line d" $conf
-
-        web_domain=$(grep DOMAIN $USER_DATA/web.conf |wc -l)
-        if [ "$web_domain" -eq '0' ]; then
-            sed -i "/.*\/$user\/.*$1.conf/d" /etc/$1/conf.d/vesta.conf
+    fi
+    # clean-up for both config styles if there is no more domains
+    web_domain=$(grep DOMAIN $USER_DATA/web.conf |wc -l)
+    if [ "$web_domain" -eq '0' ]; then
+        sed -i "/.*\/$user\/.*/d" /etc/$1/conf.d/vesta.conf
+        if [ -f "$conf" ]; then
             rm -f $conf
         fi
     fi

From 082095b164171c07d6b8d105c031493eb81d5fc1 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 7 Apr 2018 00:20:35 +0200
Subject: [PATCH 0041/2300] Better way to restart services in
 v-update-host-certificate

---
 bin/v-update-host-certificate | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/bin/v-update-host-certificate b/bin/v-update-host-certificate
index 0f3324b9..e777afbd 100755
--- a/bin/v-update-host-certificate
+++ b/bin/v-update-host-certificate
@@ -72,11 +72,13 @@ chown $exim_user:mail $VESTA/ssl/certificate.crt
 chown $exim_user:mail $VESTA/ssl/certificate.key
 
 # Restart exim, dovecot & vesta
-v-restart-mail
-v-restart-service dovecot
-v-restart-service vesta
-
-
+$BIN/v-restart-mail
+if [ ! -z "$IMAP_SYSTEM" ]; then
+    $BIN/v-restart-service "$IMAP_SYSTEM"
+fi
+if [ -f "/var/run/vesta-nginx.pid" ]; then
+    kill -HUP $(cat /var/run/vesta-nginx.pid)
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From b2e75d89b763cc82d12696bceceda20199b22716 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 7 Apr 2018 00:38:55 +0200
Subject: [PATCH 0042/2300] Making Vesta able to update hostname SSL
 automatically

This feature will allow VestaCP to automatically update system SSL when you add SSL to your domain (that is also hostname) through VestaCP panel.
For example, if your server hostname is my.server.net and you add SSL to that domain (as you usually do via VestaCP panel), that SSL will be also installed to Vesta nginx (on 8083 port), to Exim and to devocot.
This will work if you use LetsEncrypt, and it will also automatically apply renewed certificate when Vesta renew letsencrypt certificate.

--- IMPORTANT ---
This feature will work only if you have
UPDATE_HOSTNAME_SSL='yes'
in /usr/local/vesta/conf/vesta.conf

Why?
Because I'm not sure that Serghey want to use this mechanism for installing system SSL.
So, this way it's only OPTIONAL feature, not enabled by default.
On all servers nothing will happen.

If Sergey likes this idea, he will easily make it enabled by default.

Cheers.
---
 bin/v-add-web-domain-ssl | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/bin/v-add-web-domain-ssl b/bin/v-add-web-domain-ssl
index 4f1e83c0..55c4ce41 100755
--- a/bin/v-add-web-domain-ssl
+++ b/bin/v-add-web-domain-ssl
@@ -120,6 +120,13 @@ check_result $? "Web restart failed" >/dev/null
 $BIN/v-restart-proxy $restart
 check_result $? "Proxy restart failed" >/dev/null
 
+if [ ! -z "$UPDATE_HOSTNAME_SSL" ] && [ "$UPDATE_HOSTNAME_SSL" = "yes" ]; then
+    hostname=$(hostname)
+    if [ "$hostname" = "$domain" ]; then
+        $BIN/v-update-host-certificate $user $domain
+    fi
+fi
+
 # Logging
 log_history "enabled ssl support for $domain"
 log_event "$OK" "$ARGUMENTS"

From 6d0e4efe2e381c947a7b90d9c1fb06cb94b34bac Mon Sep 17 00:00:00 2001
From: Airat Halitov <airat.halitov@gmail.com>
Date: Sun, 8 Apr 2018 02:34:48 +0500
Subject: [PATCH 0043/2300] Update ru.php
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Обновил переводы графиков
---
 web/inc/i18n/ru.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/web/inc/i18n/ru.php b/web/inc/i18n/ru.php
index 22a9b645..a109056c 100644
--- a/web/inc/i18n/ru.php
+++ b/web/inc/i18n/ru.php
@@ -63,10 +63,10 @@ $LANG['ru'] = array(
     'Search' => 'Поиск',
     'Add one more FTP Account' => 'Добавить еще один FTP аккаунт',
     'Overall Statistics' => 'Сводная статистика',
-    'Daily' => 'Ежедневно',
-    'Weekly' => 'Еженедельно',
-    'Monthly' => 'Ежемесячно',
-    'Yearly' => 'Ежегодно',
+    'Daily' => 'День',
+    'Weekly' => 'Неделя',
+    'Monthly' => 'Месяц',
+    'Yearly' => 'Год',
     'Add' => 'Добавить',
     'Back' => 'Назад',
     'Save' => 'Сохранить',

From 3fdee2975db0c80419a0dfefff3c10a2c4de6410 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sun, 8 Apr 2018 21:50:32 +0300
Subject: [PATCH 0044/2300] Hardening password checks

---
 bin/v-check-user-password | 2 +-
 func/main.sh              | 2 +-
 web/api/index.php         | 4 +++-
 web/login/index.php       | 2 +-
 4 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/bin/v-check-user-password b/bin/v-check-user-password
index 6d829c3a..57e59da3 100755
--- a/bin/v-check-user-password
+++ b/bin/v-check-user-password
@@ -82,7 +82,7 @@ if [ -z "$salt" ]; then
 fi
 
 # Generating hash
-hash=$($BIN/v-generate-password-hash $method $salt <<< $password)
+hash=$($BIN/v-generate-password-hash $method $salt <<< "$password")
 if [[ -z "$hash" ]]; then
     echo "Error: password missmatch"
     echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
diff --git a/func/main.sh b/func/main.sh
index cec97888..3b04d250 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -273,7 +273,7 @@ is_object_value_exist() {
 is_password_valid() {
     if [[ "$password" =~ ^/tmp/ ]]; then
         if [ -f "$password" ]; then
-            password=$(head -n1 $password)
+            password="$(head -n1 $password)"
         fi
     fi
 }
diff --git a/web/api/index.php b/web/api/index.php
index 97f08259..1ad9d595 100644
--- a/web/api/index.php
+++ b/web/api/index.php
@@ -18,13 +18,15 @@ if (isset($_POST['user']) || isset($_POST['hash'])) {
         fwrite($fp, $_POST['password']."\n");
         fclose($fp);
         $v_ip_addr = escapeshellarg($_SERVER["REMOTE_ADDR"]);
-        exec(VESTA_CMD ."v-check-user-password ".$v_user." ".$v_password." '".$v_ip_addr."'",  $output, $auth_code);
+        exec(VESTA_CMD ."v-check-user-password ".$v_user." ".escapeshellarg($v_password)." '".$v_ip_addr."'",  $output, $auth_code);
         unlink($v_password);
+    /* No hash auth for security reason
     } else {
         $key = '/usr/local/vesta/data/keys/' . basename($_POST['hash']);
         if (file_exists($key) && is_file($key)) {
             $auth_code = '0';
         }
+    */
     }
 
     if ($auth_code != 0 ) {
diff --git a/web/login/index.php b/web/login/index.php
index 4be64ecc..6e3d5def 100644
--- a/web/login/index.php
+++ b/web/login/index.php
@@ -44,7 +44,7 @@ if (isset($_POST['user']) && isset($_POST['password'])) {
         fclose($fp);
 
         // Check user & password
-        exec(VESTA_CMD ."v-check-user-password ".$v_user." ".$v_password." ".escapeshellarg($_SERVER['REMOTE_ADDR']),  $output, $return_var);
+        exec(VESTA_CMD ."v-check-user-password ".$v_user." ".escapeshellarg($v_password)." ".escapeshellarg($_SERVER['REMOTE_ADDR']),  $output, $return_var);
         unset($output);
 
         // Remove tmp file

From efa2b50b4ccbe8663a0c386da444dd9beeba682a Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sun, 8 Apr 2018 22:01:43 +0300
Subject: [PATCH 0045/2300] Enabled access log

---
 src/deb/nginx/control        | 2 +-
 src/rpm/conf/nginx.conf      | 2 +-
 src/rpm/specs/vesta-php.spec | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index ae0e9102..275d7185 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -1,7 +1,7 @@
 Source: vesta-nginx
 Package: vesta-nginx
 Priority: optional
-Version: 0.9.8-19
+Version: 0.9.8-20
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/rpm/conf/nginx.conf b/src/rpm/conf/nginx.conf
index f26da2a1..0a427f07 100644
--- a/src/rpm/conf/nginx.conf
+++ b/src/rpm/conf/nginx.conf
@@ -33,7 +33,7 @@ http {
                         '"$status" $body_bytes_sent "$http_referer" '
                         '"$http_user_agent" "$http_x_forwarded_for"';
     log_format  bytes   '$body_bytes_sent';
-    access_log          /dev/null  main;
+    access_log          /usr/local/vesta/log/nginx-access.log main;
 
 
     # SSL PCI Compliance
diff --git a/src/rpm/specs/vesta-php.spec b/src/rpm/specs/vesta-php.spec
index 289dc50b..7607ae0d 100644
--- a/src/rpm/specs/vesta-php.spec
+++ b/src/rpm/specs/vesta-php.spec
@@ -1,6 +1,6 @@
 Name:           vesta-php
 Version:        0.9.8
-Release:        19
+Release:        20
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL

From 0d5c3c42a12e25553d6afdd716851465e8f0382e Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sun, 8 Apr 2018 22:06:20 +0300
Subject: [PATCH 0046/2300] set -o noglob just in case

---
 bin/v-check-user-password | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-check-user-password b/bin/v-check-user-password
index 57e59da3..fbb0221e 100755
--- a/bin/v-check-user-password
+++ b/bin/v-check-user-password
@@ -82,6 +82,7 @@ if [ -z "$salt" ]; then
 fi
 
 # Generating hash
+set -o noglob
 hash=$($BIN/v-generate-password-hash $method $salt <<< "$password")
 if [[ -z "$hash" ]]; then
     echo "Error: password missmatch"

From 1034d1bbc29d9fad0c588845766b89514e1a797f Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sun, 8 Apr 2018 22:09:56 +0300
Subject: [PATCH 0047/2300] New release with improved password checks

---
 src/deb/vesta/control    | 2 +-
 src/rpm/specs/vesta.spec | 5 ++++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 93d944f6..87ed6e49 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-19
+Version: 0.9.8-20
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/rpm/specs/vesta.spec b/src/rpm/specs/vesta.spec
index 1aca2549..7127d37a 100644
--- a/src/rpm/specs/vesta.spec
+++ b/src/rpm/specs/vesta.spec
@@ -1,6 +1,6 @@
 Name:           vesta
 Version:        0.9.8
-Release:        19
+Release:        20
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
@@ -56,6 +56,9 @@ fi
 %config(noreplace) %{_vestadir}/web/css/uploadify.css
 
 %changelog
+* Sun Apr 08 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-20
+- Hardening password checks
+
 * Wed Jan 10 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-19
 - Fixed backup restore function
 

From c1d87b282349cbf768d66787a444da61e117aa99 Mon Sep 17 00:00:00 2001
From: didyouexpectthat <didyouexpectthat@users.noreply.github.com>
Date: Sun, 8 Apr 2018 14:09:07 -0700
Subject: [PATCH 0048/2300] Change `william.cage` to `example`

Feedback in https://github.com/serghey-rodin/vesta/issues/1530
---
 web/templates/admin/add_mail_acc.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/add_mail_acc.html b/web/templates/admin/add_mail_acc.html
index 0f2ea2d0..43821cd9 100644
--- a/web/templates/admin/add_mail_acc.html
+++ b/web/templates/admin/add_mail_acc.html
@@ -158,7 +158,7 @@
                         </tr>
                         <tr>
                             <td><?=__('Username')?>:</td>
-                            <td><div><span id="v_account">william.cage</span>@<?=htmlentities(trim($v_domain, "'"))?></div></td>
+                            <td><div><span id="v_account">example</span>@<?=htmlentities(trim($v_domain, "'"))?></div></td>
                         </tr>
                         <tr>
                             <td><?=__('Password')?>:</td>

From 07ec81b6aedf1e487450db73d414cdeb29e0fb06 Mon Sep 17 00:00:00 2001
From: didyouexpectthat <didyouexpectthat@users.noreply.github.com>
Date: Sun, 8 Apr 2018 14:11:41 -0700
Subject: [PATCH 0049/2300] Change `william.cage` to `example`

Feedback in #1530
---
 web/templates/admin/edit_mail_acc.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/edit_mail_acc.html b/web/templates/admin/edit_mail_acc.html
index c9b7ed85..cf38065d 100644
--- a/web/templates/admin/edit_mail_acc.html
+++ b/web/templates/admin/edit_mail_acc.html
@@ -165,7 +165,7 @@
                         </tr>
                         <tr>
                             <td><?=__('Username')?>:</td>
-                            <td><div><span id="v_account">william.cage</span>@<?=htmlentities(trim($v_domain, "'"))?></div></td>
+                            <td><div><span id="v_account">example</span>@<?=htmlentities(trim($v_domain, "'"))?></div></td>
                         </tr>
                         <tr>
                             <td><?=__('Password')?>:</td>

From eaf9d89096b11daa97f8da507eb369e359cda7dd Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Mon, 9 Apr 2018 00:44:32 +0300
Subject: [PATCH 0050/2300] Auth fix 0.9.8-20

---
 bin/v-check-api-key   |  40 ++++++++++++++
 bin/v-check-user-hash | 100 +++++++++++++++++++++++++++++++++++
 bin/v-get-user-salt   | 118 +++++++++++++++++++++++++++++++++++++++++
 func/main.sh          |   9 ++++
 web/api/index.php     |  60 ++++++++++++++++-----
 web/login/index.php   | 120 ++++++++++++++++++++++++------------------
 6 files changed, 383 insertions(+), 64 deletions(-)
 create mode 100755 bin/v-check-api-key
 create mode 100755 bin/v-check-user-hash
 create mode 100755 bin/v-get-user-salt

diff --git a/bin/v-check-api-key b/bin/v-check-api-key
new file mode 100755
index 00000000..8d0d409e
--- /dev/null
+++ b/bin/v-check-api-key
@@ -0,0 +1,40 @@
+#!/bin/bash
+# info: check api key
+# options: KEY
+#
+# The function checks a key file in /usr/local/vesta/data/keys/
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+if [ -z "$1" ]; then
+    echo "Error: key missmatch"
+    exit 9
+fi
+key=$(basename $1)
+ip=${2-127.0.0.1}
+time_n_date=$(date +'%T %F')
+time=$(echo "$time_n_date" |cut -f 1 -d \ )
+date=$(echo "$time_n_date" |cut -f 2 -d \ )
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+if [ ! -e $VESTA/data/keys/$key ]; then
+    echo "Error: key missmatch"
+    echo "$date $time api $ip failed to login" >> $VESTA/log/auth.log
+    exit 9
+fi
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+echo "$date $time api $ip successfully launched" >> $VESTA/log/auth.log
+
+exit
diff --git a/bin/v-check-user-hash b/bin/v-check-user-hash
new file mode 100755
index 00000000..7fd55789
--- /dev/null
+++ b/bin/v-check-user-hash
@@ -0,0 +1,100 @@
+#!/bin/bash
+# info: check user hash
+# options: USER HASH [IP]
+#
+# The function verifies user hash
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+user=$1
+hash=$2; HIDE=2
+ip=${3-127.0.0.1}
+
+# Includes
+source $VESTA/func/main.sh
+source $VESTA/conf/vesta.conf
+
+time_n_date=$(date +'%T %F')
+time=$(echo "$time_n_date" |cut -f 1 -d \ )
+date=$(echo "$time_n_date" |cut -f 2 -d \ )
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+
+check_args '2' "$#" 'USER HASH'
+is_format_valid 'user'
+
+# Checking user
+if [ ! -d "$VESTA/data/users/$user" ] && [ "$user" != 'root' ]; then
+    echo "Error: password missmatch"
+    echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
+    exit 9
+fi
+
+# Checking user hash
+is_hash_valid
+
+# Checking empty hash
+if [[ -z "$hash" ]]; then
+    echo "Error: password missmatch"
+    echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
+    exit 9
+fi
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+
+# Parsing user's salt
+shadow=$(grep "^$user:" /etc/shadow | cut -f 2 -d :)
+
+if echo "$shadow" | grep -qE '^\$[0-9a-z]+\$[^\$]+\$'
+then
+    salt=$(echo "$shadow" |cut -f 3 -d \$)
+    method=$(echo "$shadow" |cut -f 2 -d \$)
+    if [ "$method" -eq '1' ]; then
+        method='md5'
+    elif [ "$method" -eq '6' ]; then
+        method='sha-512'
+    else
+        echo "Error: password missmatch"
+        echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
+        exit 9
+    fi
+else
+    salt=${shadow:0:2}
+    method='des'
+fi
+
+if [ -z "$salt" ]; then
+    echo "Error: password missmatch"
+    echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
+    exit 9
+fi
+
+# Checking hash
+result=$(grep "^$user:$hash:" /etc/shadow 2>/dev/null)
+if [[ -z "$result" ]]; then
+    echo "Error: password missmatch"
+    echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
+    exit 9
+fi
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+echo "$date $time $user $ip successfully logged in" >> $VESTA/log/auth.log
+
+exit
diff --git a/bin/v-get-user-salt b/bin/v-get-user-salt
new file mode 100755
index 00000000..08ee5a9c
--- /dev/null
+++ b/bin/v-get-user-salt
@@ -0,0 +1,118 @@
+#!/bin/bash
+# info: get user salt
+# options: USER [IP] [FORMAT]
+#
+# The function provides users salt
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+user=$1
+ip=${2-127.0.0.1}
+format=${3-shell}
+
+# Includes
+source $VESTA/func/main.sh
+source $VESTA/conf/vesta.conf
+
+time_n_date=$(date +'%T %F')
+time=$(echo "$time_n_date" |cut -f 1 -d \ )
+date=$(echo "$time_n_date" |cut -f 2 -d \ )
+
+# JSON list function
+json_list() {
+    echo '{'
+    echo '    "'$user'": {
+        "METHOD": "'$method'",
+        "SALT": "'$salt'",
+        "TIME": "'$time'",
+        "DATE": "'$date'"
+        }'
+    echo '}'
+}
+
+# SHELL list function
+shell_list() {
+    echo "METHOD:         $method"
+    echo "SALT:           $salt"
+}
+
+# PLAIN list function
+plain_list() {
+    echo -e "$method\t$salt"
+}
+
+# CSV list function
+csv_list() {
+    echo "METHOD,SALT"
+    echo "$method, $salt"
+}
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+
+check_args '1' "$#" 'USER [IP] [SALT]'
+is_format_valid 'user'
+
+# Checking user
+if [ ! -d "$VESTA/data/users/$user" ] && [ "$user" != 'root' ]; then
+    echo "Error: password missmatch"
+    echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
+    exit 9
+fi
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# Parsing user's salt
+shadow=$(grep "^$user:" /etc/shadow | cut -f 2 -d :)
+
+if echo "$shadow" | grep -qE '^\$[0-9a-z]+\$[^\$]+\$'
+then
+    salt=$(echo "$shadow" |cut -f 3 -d \$)
+    method=$(echo "$shadow" |cut -f 2 -d \$)
+    if [ "$method" -eq '1' ]; then
+        method='md5'
+    elif [ "$method" -eq '6' ]; then
+        method='sha-512'
+    else
+        echo "Error: password missmatch"
+        echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
+        exit 9
+    fi
+else
+    salt=${shadow:0:2}
+    method='des'
+fi
+
+if [ -z "$salt" ]; then
+    echo "Error: password missmatch"
+    echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
+    exit 9
+fi
+
+
+# Listing data
+case $format in
+    json)   json_list ;;
+    plain)  plain_list ;;
+    csv)    csv_list ;;
+    shell)  shell_list ;;
+esac
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+
+exit
diff --git a/func/main.sh b/func/main.sh
index 3b04d250..a79cb2a0 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -278,6 +278,15 @@ is_password_valid() {
     fi
 }
 
+# Check if hash is transmitted via file
+is_hash_valid() {
+    if [[ "$hash" =~ ^/tmp/ ]]; then
+        if [ -f "$hash" ]; then
+            hash="$(head -n1 $hash)"
+        fi
+    fi
+}
+
 # Get object value
 get_object_value() {
     object=$(grep "$2='$3'" $USER_DATA/$1.conf)
diff --git a/web/api/index.php b/web/api/index.php
index 1ad9d595..3cf0ec2d 100644
--- a/web/api/index.php
+++ b/web/api/index.php
@@ -4,32 +4,64 @@ define('VESTA_CMD', '/usr/bin/sudo /usr/local/vesta/bin/');
 if (isset($_POST['user']) || isset($_POST['hash'])) {
 
     // Authentication
-    $auth_code = 1;
     if (empty($_POST['hash'])) {
-        // Check user permission to use API
         if ($_POST['user'] != 'admin') {
-            echo 'Error: only admin is allowed to use API';
+            echo 'Error: authentication failed';
             exit;
         }
 
-        $v_user = escapeshellarg($_POST['user']);
-        $v_password = tempnam("/tmp","vst");
-        $fp = fopen($v_password, "w");
-        fwrite($fp, $_POST['password']."\n");
+        $password = $_POST['password'];
+        $v_ip = escapeshellarg($_SERVER['REMOTE_ADDR']);
+        $output = '';
+        exec (VESTA_CMD."v-get-user-salt admin ".$v_ip." json" , $output, $return_var);
+        $pam = json_decode(implode('', $output), true);
+        $salt = $pam['admin']['SALT'];
+        $method = $pam['admin']['METHOD'];
+
+        if ($method == 'md5' ) {
+            $hash = crypt($password, '$1$'.$salt.'$');
+        }
+        if ($method == 'sha-512' ) {
+            $hash = crypt($password, '$6$rounds=5000$'.$salt.'$');
+            $hash = str_replace('$rounds=5000','',$hash);
+        }
+        if ($method == 'des' ) {
+            $hash = crypt($password, $salt);
+        }
+
+        // Send hash via tmp file
+        $v_hash = exec('mktemp -p /tmp');
+        $fp = fopen($v_hash, "w");
+        fwrite($fp, $hash."\n");
         fclose($fp);
-        $v_ip_addr = escapeshellarg($_SERVER["REMOTE_ADDR"]);
-        exec(VESTA_CMD ."v-check-user-password ".$v_user." ".escapeshellarg($v_password)." '".$v_ip_addr."'",  $output, $auth_code);
-        unlink($v_password);
-    /* No hash auth for security reason
+
+        // Check user hash
+        exec(VESTA_CMD ."v-check-user-hash admin ".$v_hash." ".$v_ip,  $output, $return_var);
+        unset($output);
+
+        // Remove tmp file
+        unlink($v_hash);
+
+        // Check API answer
+        if ( $return_var > 0 ) {
+            echo 'Error: authentication failed';
+            exit;
+        }
     } else {
         $key = '/usr/local/vesta/data/keys/' . basename($_POST['hash']);
         if (file_exists($key) && is_file($key)) {
-            $auth_code = '0';
+            exec(VESTA_CMD ."v-check-api-key ".escapeshellarg($key)." ".$v_ip,  $output, $return_var);
+            unset($output);
+
+            // Check API answer
+            if ( $return_var > 0 ) {
+                echo 'Error: authentication failed';
+                exit;
+            }
         }
-    */
     }
 
-    if ($auth_code != 0 ) {
+    if ( $return_var > 0 ) {
         echo 'Error: authentication failed';
         exit;
     }
diff --git a/web/login/index.php b/web/login/index.php
index 6e3d5def..08074b3e 100644
--- a/web/login/index.php
+++ b/web/login/index.php
@@ -14,9 +14,6 @@ if (isset($_GET['logout'])) {
     session_destroy();
 }
 
-
-
-
 // Login as someone else
 if (isset($_SESSION['user'])) {
     if ($_SESSION['user'] == 'admin' && !empty($_GET['loginas'])) {
@@ -36,62 +33,85 @@ if (isset($_SESSION['user'])) {
 if (isset($_POST['user']) && isset($_POST['password'])) {
     if(isset($_SESSION['token']) && isset($_POST['token']) && $_POST['token'] == $_SESSION['token']) {
         $v_user = escapeshellarg($_POST['user']);
+        $v_ip = escapeshellarg($_SERVER['REMOTE_ADDR']);
 
-        // Send password via tmp file
-        $v_password = exec('mktemp -p /tmp');
-        $fp = fopen($v_password, "w");
-        fwrite($fp, $_POST['password']."\n");
-        fclose($fp);
-
-        // Check user & password
-        exec(VESTA_CMD ."v-check-user-password ".$v_user." ".escapeshellarg($v_password)." ".escapeshellarg($_SERVER['REMOTE_ADDR']),  $output, $return_var);
-        unset($output);
-
-        // Remove tmp file
-        unlink($v_password);
-
-        // Check API answer
+        // Get user's salt
+        $output = '';
+        exec (VESTA_CMD."v-get-user-salt ".$v_user." ".$v_ip." json" , $output, $return_var);
+        $pam = json_decode(implode('', $output), true);
         if ( $return_var > 0 ) {
             $ERROR = "<a class=\"error\">".__('Invalid username or password')."</a>";
-
         } else {
+            $user = $_POST['user'];
+            $password = $_POST['password'];
+            $salt = $pam[$user]['SALT'];
+            $method = $pam[$user]['METHOD'];
 
-            // Make root admin user
-            if ($_POST['user'] == 'root') $v_user = 'admin';
-
-            // Get user speciefic parameters
-            exec (VESTA_CMD . "v-list-user ".$v_user." json", $output, $return_var);
-            $data = json_decode(implode('', $output), true);
-
-            // Define session user
-            $_SESSION['user'] = key($data);
-            $v_user = $_SESSION['user'];
-
-            // Get user favorites
-            get_favourites();
-
-            // Define language
-            $output = '';
-            exec (VESTA_CMD."v-list-sys-languages json", $output, $return_var);
-            $languages = json_decode(implode('', $output), true);
-            if(in_array($data[$v_user]['LANGUAGE'], $languages)){
-                $_SESSION['language'] = $data[$v_user]['LANGUAGE'];
+            if ($method == 'md5' ) {
+                $hash = crypt($password, '$1$'.$salt.'$');
             }
-            else {
-                $_SESSION['language'] = 'en';
+            if ($method == 'sha-512' ) {
+                $hash = crypt($password, '$6$rounds=5000$'.$salt.'$');
+                $hash = str_replace('$rounds=5000','',$hash);
+            }
+            if ($method == 'des' ) {
+                $hash = crypt($password, $salt);
             }
-        
-            // Regenerate session id to prevent session fixation
-            session_regenerate_id();
 
-            // Redirect request to control panel interface
-            if (!empty($_SESSION['request_uri'])) {
-                header("Location: ".$_SESSION['request_uri']);
-                unset($_SESSION['request_uri']);
-                exit;
+            // Send hash via tmp file
+            $v_hash = exec('mktemp -p /tmp');
+            $fp = fopen($v_hash, "w");
+            fwrite($fp, $hash."\n");
+            fclose($fp);
+
+            // Check user hash
+            exec(VESTA_CMD ."v-check-user-hash ".$v_user." ".$v_hash." ".$v_ip,  $output, $return_var);
+            unset($output);
+
+            // Remove tmp file
+            unlink($v_hash);
+
+            // Check API answer
+            if ( $return_var > 0 ) {
+                $ERROR = "<a class=\"error\">".__('Invalid username or password')."</a>";
             } else {
-                header("Location: /");
-                exit;
+
+                // Make root admin user
+                if ($_POST['user'] == 'root') $v_user = 'admin';
+
+                // Get user speciefic parameters
+                exec (VESTA_CMD . "v-list-user ".$v_user." json", $output, $return_var);
+                $data = json_decode(implode('', $output), true);
+
+                // Define session user
+                $_SESSION['user'] = key($data);
+                $v_user = $_SESSION['user'];
+
+                // Get user favorites
+                get_favourites();
+
+                // Define language
+                $output = '';
+                exec (VESTA_CMD."v-list-sys-languages json", $output, $return_var);
+                $languages = json_decode(implode('', $output), true);
+                if (in_array($data[$v_user]['LANGUAGE'], $languages)){
+                    $_SESSION['language'] = $data[$v_user]['LANGUAGE'];
+                } else {
+                    $_SESSION['language'] = 'en';
+                }
+
+                // Regenerate session id to prevent session fixation
+                session_regenerate_id();
+
+                // Redirect request to control panel interface
+                if (!empty($_SESSION['request_uri'])) {
+                    header("Location: ".$_SESSION['request_uri']);
+                    unset($_SESSION['request_uri']);
+                    exit;
+                } else {
+                    header("Location: /");
+                    exit;
+                }
             }
         }
     } else {

From 06f6fff1187496af64841ddf137b0945de398819 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Mon, 9 Apr 2018 19:23:22 +0300
Subject: [PATCH 0051/2300] one ver up

---
 src/deb/ioncube/control              | 2 +-
 src/deb/php/control                  | 2 +-
 src/deb/softaculous/control          | 2 +-
 src/rpm/specs/vesta-ioncube.spec     | 2 +-
 src/rpm/specs/vesta-nginx.spec       | 2 +-
 src/rpm/specs/vesta-softaculous.spec | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/src/deb/ioncube/control b/src/deb/ioncube/control
index 13e08831..a7c5a020 100644
--- a/src/deb/ioncube/control
+++ b/src/deb/ioncube/control
@@ -1,7 +1,7 @@
 Source: vesta-ioncube
 Package: vesta-ioncube
 Priority: optional
-Version: 0.9.8-19
+Version: 0.9.8-20
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.ioncube.com
diff --git a/src/deb/php/control b/src/deb/php/control
index 0ce789dc..e24b55ca 100644
--- a/src/deb/php/control
+++ b/src/deb/php/control
@@ -1,7 +1,7 @@
 Source: vesta-php
 Package: vesta-php
 Priority: optional
-Version: 0.9.8-19
+Version: 0.9.8-20
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/softaculous/control b/src/deb/softaculous/control
index f92a9545..0c1d271e 100644
--- a/src/deb/softaculous/control
+++ b/src/deb/softaculous/control
@@ -1,7 +1,7 @@
 Source: vesta-softaculous
 Package: vesta-softaculous
 Priority: optional
-Version: 0.9.8-19
+Version: 0.9.8-20
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.softaculous.com
diff --git a/src/rpm/specs/vesta-ioncube.spec b/src/rpm/specs/vesta-ioncube.spec
index cf183262..93e67911 100644
--- a/src/rpm/specs/vesta-ioncube.spec
+++ b/src/rpm/specs/vesta-ioncube.spec
@@ -1,6 +1,6 @@
 Name:           vesta-ioncube
 Version:        0.9.8
-Release:        19
+Release:        20
 Summary:        ionCube Loader
 Group:          System Environment/Base
 License:        "Freely redistributable without restriction"
diff --git a/src/rpm/specs/vesta-nginx.spec b/src/rpm/specs/vesta-nginx.spec
index 4546f506..e6071b43 100644
--- a/src/rpm/specs/vesta-nginx.spec
+++ b/src/rpm/specs/vesta-nginx.spec
@@ -1,6 +1,6 @@
 Name:           vesta-nginx
 Version:        0.9.8
-Release:        19
+Release:        20
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        BSD-like
diff --git a/src/rpm/specs/vesta-softaculous.spec b/src/rpm/specs/vesta-softaculous.spec
index f7a315bf..4adfda69 100644
--- a/src/rpm/specs/vesta-softaculous.spec
+++ b/src/rpm/specs/vesta-softaculous.spec
@@ -1,6 +1,6 @@
 Name:           vesta-softaculous
 Version:        0.9.8
-Release:        19
+Release:        20
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        Softaculous License

From 4663fbf574d408adbcf47162c11ba288b4e275ad Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Apr 2018 00:45:59 +0200
Subject: [PATCH 0052/2300] disable api

---
 web/api/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/api/index.php b/web/api/index.php
index 3cf0ec2d..c4f59e2f 100644
--- a/web/api/index.php
+++ b/web/api/index.php
@@ -1,6 +1,6 @@
 <?php
 define('VESTA_CMD', '/usr/bin/sudo /usr/local/vesta/bin/');
-
+exit;
 if (isset($_POST['user']) || isset($_POST['hash'])) {
 
     // Authentication

From 302f38c92a0deccb9f37a6add65efb2f108a7d16 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Apr 2018 02:21:49 +0200
Subject: [PATCH 0053/2300] secure_login.php

---
 web/inc/secure_login.php | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 web/inc/secure_login.php

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
new file mode 100644
index 00000000..5e33232f
--- /dev/null
+++ b/web/inc/secure_login.php
@@ -0,0 +1,8 @@
+<?php
+require_once('/usr/local/vesta/web/login_url.php');
+if (isset($_GET[$login_url])) {
+    setcookie($login_url, '1', time() + 31536000, '/', $_SERVER['HTTP_HOST'], true);
+    header ("Location: /");
+    exit;
+}
+if (!isset($_COOKIE[$login_url])) exit;

From ac4ec9b1a0a83f5956e90101606a9b7cea2846c8 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Apr 2018 02:24:04 +0200
Subject: [PATCH 0054/2300] include secure_login.php from main.php

---
 web/inc/main.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/main.php b/web/inc/main.php
index dfa482a1..49d70fda 100644
--- a/web/inc/main.php
+++ b/web/inc/main.php
@@ -1,5 +1,5 @@
 <?php
-
+require_once('/usr/local/vesta/web/inc/secure_login.php');
 session_start();
 
 define('VESTA_CMD', '/usr/bin/sudo /usr/local/vesta/bin/');

From 318f9daddef19a85764d3855bc1f288039de493d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Apr 2018 02:25:45 +0200
Subject: [PATCH 0055/2300] filepath change to secure_login.php

---
 web/inc/secure_login.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 5e33232f..641a7ce7 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -1,5 +1,5 @@
 <?php
-require_once('/usr/local/vesta/web/login_url.php');
+require_once('/usr/local/vesta/web/inc/login_url.php');
 if (isset($_GET[$login_url])) {
     setcookie($login_url, '1', time() + 31536000, '/', $_SERVER['HTTP_HOST'], true);
     header ("Location: /");

From a260e0c6b7705ca6c63a472aef78e6b5dd91ec2c Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Apr 2018 02:42:34 +0200
Subject: [PATCH 0056/2300] Changing redirect location

---
 web/inc/secure_login.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 641a7ce7..c1b84509 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -2,7 +2,7 @@
 require_once('/usr/local/vesta/web/inc/login_url.php');
 if (isset($_GET[$login_url])) {
     setcookie($login_url, '1', time() + 31536000, '/', $_SERVER['HTTP_HOST'], true);
-    header ("Location: /");
+    header ("Location: /login/");
     exit;
 }
 if (!isset($_COOKIE[$login_url])) exit;

From 84adfcc4edceada0779b72197ecc5a8ab4a1f029 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Apr 2018 02:44:02 +0200
Subject: [PATCH 0057/2300] Check pre-auth before redirecting to login

---
 web/index.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/index.php b/web/index.php
index 2f070747..27ce0fcf 100644
--- a/web/index.php
+++ b/web/index.php
@@ -1,4 +1,5 @@
 <?php
+require_once('/usr/local/vesta/web/inc/secure_login.php');
 session_start();
 if (isset($_SESSION['user'])) {
     header("Location: /list/user/");

From 24042941855de11ad748bf77c5f2cfe44214578c Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Apr 2018 03:36:52 +0200
Subject: [PATCH 0058/2300] Redirect to webmail by default

---
 web/index.php | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/web/index.php b/web/index.php
index 27ce0fcf..8910659b 100644
--- a/web/index.php
+++ b/web/index.php
@@ -1,8 +1,9 @@
 <?php
-require_once('/usr/local/vesta/web/inc/secure_login.php');
-session_start();
-if (isset($_SESSION['user'])) {
-    header("Location: /list/user/");
-} else {
-    header("Location: /login/");
-}
+//require_once('/usr/local/vesta/web/inc/secure_login.php');
+//session_start();
+//if (isset($_SESSION['user'])) {
+//    header("Location: /list/user/");
+//} else {
+//    header("Location: /login/");
+//}
+header("Location: /webmail/");

From 82dcba51a0b8416af256dd9df1031f4ba26bb712 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Apr 2018 03:43:50 +0200
Subject: [PATCH 0059/2300] Check secure login on index

---
 web/index.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/web/index.php b/web/index.php
index 8910659b..58238128 100644
--- a/web/index.php
+++ b/web/index.php
@@ -6,4 +6,10 @@
 //} else {
 //    header("Location: /login/");
 //}
+
+require_once('/usr/local/vesta/web/inc/login_url.php');
+if (isset($_GET[$login_url])) {
+  require_once('/usr/local/vesta/web/inc/secure_login.php');
+}
+
 header("Location: /webmail/");

From 1a61ea102bc085d1645d0564d11a318bcad212d8 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Apr 2018 03:58:19 +0200
Subject: [PATCH 0060/2300] Redirect to /list/user/ after login

---
 web/login/index.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/login/index.php b/web/login/index.php
index 08074b3e..b2e7c714 100644
--- a/web/login/index.php
+++ b/web/login/index.php
@@ -25,7 +25,7 @@ if (isset($_SESSION['user'])) {
             $_SESSION['look_alert'] = 'yes';
         }
     }
-    header("Location: /");
+    header("Location: /list/user/");
     exit;
 }
 
@@ -109,7 +109,7 @@ if (isset($_POST['user']) && isset($_POST['password'])) {
                     unset($_SESSION['request_uri']);
                     exit;
                 } else {
-                    header("Location: /");
+                    header("Location: /list/user/");
                     exit;
                 }
             }

From 25516949ffbe6dd36e6d0d68282d4eecab0c1e69 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Apr 2018 04:01:12 +0200
Subject: [PATCH 0061/2300] Logout to redirect to login

---
 web/logout/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/logout/index.php b/web/logout/index.php
index 51c89198..795eb65f 100644
--- a/web/logout/index.php
+++ b/web/logout/index.php
@@ -8,6 +8,6 @@ if (!empty($_SESSION['look'])) {
     session_destroy();
 }
 
-header("Location: /");
+header("Location: /login/");
 exit;
 ?>

From 58f1613759a46462ca17bb25cf8251ad3a7a01e2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Apr 2018 04:05:58 +0200
Subject: [PATCH 0062/2300] Logo to link /list/user/

---
 web/templates/user/panel.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/user/panel.html b/web/templates/user/panel.html
index 452105ee..dfb544c9 100644
--- a/web/templates/user/panel.html
+++ b/web/templates/user/panel.html
@@ -7,7 +7,7 @@
   </a>
   <div class="l-header">
     <div class="l-center">
-      <a href="/" class="l-logo"></a>
+      <a href="/list/user/" class="l-logo"></a>
       <!-- /.l-logo -->
       <div class="l-menu clearfix">
         <div class="l-menu__item <?php if($TAB == 'STATS' ) echo 'l-menu__item--active' ?>"><a href="/list/stats/"><?=__('Statistics')?></a></div>

From 80b76fc6edba21e1a482829f922e76b96b80903a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Apr 2018 04:06:53 +0200
Subject: [PATCH 0063/2300] Logo to link /list/user/

---
 web/templates/admin/panel.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/panel.html b/web/templates/admin/panel.html
index 57f377db..80bfdaf1 100644
--- a/web/templates/admin/panel.html
+++ b/web/templates/admin/panel.html
@@ -8,7 +8,7 @@
 
   <div class="l-header">
     <div class="l-center">
-      <a href="/" class="l-logo"></a>
+      <a href="/list/user/" class="l-logo"></a>
       <!-- /.l-logo -->
       <div class="l-menu clearfix noselect">
         <div class="l-menu__item <?php if($TAB == 'PACKAGE' ) echo 'l-menu__item--active' ?>"><a href="/list/package/"><?=__('Packages')?></a></div>

From acf3e0be1391115610ba959cf182006294c96676 Mon Sep 17 00:00:00 2001
From: darkworks <zktk009@gmail.com>
Date: Tue, 10 Apr 2018 19:53:27 +0500
Subject: [PATCH 0064/2300] check for yum properly.

check for yum properly.
---
 bin/v-update-sys-vesta | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-sys-vesta b/bin/v-update-sys-vesta
index 39cd33a2..418fe26f 100755
--- a/bin/v-update-sys-vesta
+++ b/bin/v-update-sys-vesta
@@ -33,7 +33,7 @@ check_args '1' "$#" 'PACKAGE'
 #                       Action                             #
 #----------------------------------------------------------#
 
-if [ -d "/etc/sysconfig" ]; then
+if [ -n "$(command -v yum)" ]; then
     # Clean yum chache
     yum -q clean all
 

From e6b01fbd7ed0a169e6b61a87a01157f19938e5b9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 11 Apr 2018 01:01:44 +0200
Subject: [PATCH 0065/2300] reload nginx instead restart

---
 bin/v-restart-proxy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index 25ab20bf..9fbd8fef 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -50,7 +50,7 @@ if [ -z "$PROXY_SYSTEM" ] || [ "$PROXY_SYSTEM" = 'remote' ]; then
 fi
 
 # Restart system
-service $PROXY_SYSTEM restart >/dev/null 2>&1
+service $PROXY_SYSTEM reload >/dev/null 2>&1
 if [ $? -ne 0 ]; then
     send_email_report
     check_result $E_RESTART "$PROXY_SYSTEM restart failed"

From 334e54bf932f4c182576544607135f12e58e74f8 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 11 Apr 2018 12:54:27 +0200
Subject: [PATCH 0066/2300] define NO_AUTH_REQUIRED2 in reset email

---
 web/reset/mail/index.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/web/reset/mail/index.php b/web/reset/mail/index.php
index 9315d041..2f3bd9e3 100644
--- a/web/reset/mail/index.php
+++ b/web/reset/mail/index.php
@@ -1,6 +1,7 @@
 <?php
 // Init
 define('NO_AUTH_REQUIRED',true);
+define('NO_AUTH_REQUIRED2',true);
 error_reporting(NULL);
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
@@ -136,7 +137,7 @@ if ((!empty($_POST['email'])) && (!empty($_POST['password'])) && (!empty($_POST[
             fclose($fp);
             exec (VESTA_CMD."v-change-mail-account-password '".$v_user."' ".$v_domain." ".$v_account." ".$v_new_password, $output, $return_var);
             if ($return_var == 0) {
-                echo "ok";
+                echo "==ok==";
                 exit;
             }
         }

From 3e7a59a8ec3d27ce41168cd93895fcdcb5629ac7 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 11 Apr 2018 12:59:11 +0200
Subject: [PATCH 0067/2300] Avoid NO_AUTH_REQUIRED2 in secure_login.php

---
 web/inc/secure_login.php | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index c1b84509..0cd712da 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -1,8 +1,11 @@
 <?php
-require_once('/usr/local/vesta/web/inc/login_url.php');
-if (isset($_GET[$login_url])) {
-    setcookie($login_url, '1', time() + 31536000, '/', $_SERVER['HTTP_HOST'], true);
-    header ("Location: /login/");
-    exit;
+if (!defined('NO_AUTH_REQUIRED2')) {
+    if (file_exists('/usr/local/vesta/web/inc/login_url.php')) {
+        require_once('/usr/local/vesta/web/inc/login_url.php');
+        if (isset($_GET[$login_url])) {
+            setcookie($login_url, '1', time() + 31536000, '/', $_SERVER['HTTP_HOST'], true);
+            header ("Location: /login/");
+            exit;
+        }
+        if (!isset($_COOKIE[$login_url])) exit;
 }
-if (!isset($_COOKIE[$login_url])) exit;

From c739e5fc485ed627457648b491157efb6647809c Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 11 Apr 2018 13:04:07 +0200
Subject: [PATCH 0068/2300] Avoid pre-auth if login_url.php is not created

---
 web/index.php | 25 +++++++++++++------------
 1 file changed, 13 insertions(+), 12 deletions(-)

diff --git a/web/index.php b/web/index.php
index 58238128..1763870d 100644
--- a/web/index.php
+++ b/web/index.php
@@ -1,15 +1,16 @@
 <?php
-//require_once('/usr/local/vesta/web/inc/secure_login.php');
-//session_start();
-//if (isset($_SESSION['user'])) {
-//    header("Location: /list/user/");
-//} else {
-//    header("Location: /login/");
-//}
 
-require_once('/usr/local/vesta/web/inc/login_url.php');
-if (isset($_GET[$login_url])) {
-  require_once('/usr/local/vesta/web/inc/secure_login.php');
+if (!file_exists('/usr/local/vesta/web/inc/login_url.php')) {
+    session_start();
+    if (isset($_SESSION['user'])) {
+        header("Location: /list/user/");
+    } else {
+        header("Location: /login/");
+    }
+} else {
+    require_once('/usr/local/vesta/web/inc/login_url.php');
+    if (isset($_GET[$login_url])) {
+      require_once('/usr/local/vesta/web/inc/secure_login.php');
+    }
+    header("Location: /webmail/");
 }
-
-header("Location: /webmail/");

From f16de5905ab2fa09bfb6708cf85e1019fa323d6e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 11 Apr 2018 13:11:58 +0200
Subject: [PATCH 0069/2300] Missing curly brace

---
 web/inc/secure_login.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 0cd712da..9860912b 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -8,4 +8,5 @@ if (!defined('NO_AUTH_REQUIRED2')) {
             exit;
         }
         if (!isset($_COOKIE[$login_url])) exit;
+    }
 }

From fb2cdf6fe162a9acfdf51d28db572b36d89ee38e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 11 Apr 2018 21:30:55 +0200
Subject: [PATCH 0070/2300] Allow /reset/mail/ only from localhost

---
 web/reset/mail/index.php | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/web/reset/mail/index.php b/web/reset/mail/index.php
index 2f3bd9e3..cc6077e8 100644
--- a/web/reset/mail/index.php
+++ b/web/reset/mail/index.php
@@ -6,6 +6,24 @@ error_reporting(NULL);
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+//echo '<pre>'; print_r($_SERVER); exit;
+$ok=0;
+$ip=$_SERVER['REMOTE_ADDR'];
+exec (VESTA_CMD."v-list-sys-ips json", $output, $return_var);
+$output=implode('', $output);
+$arr=json_decode($output, true);
+foreach ($arr as $arr_key => $arr_val) {
+	if ($ip==$arr_key || $ip==$arr_val['NAT']) {
+		$ok=1;
+		break;
+	}
+}
+//echo '<pre>ip='.$ip."\n".$return_var." = "; print_r($arr); exit;
+if ($ip == $_SERVER['SERVER_ADDR']) $ok=1;
+if ($ip == '127.0.0.1') $ok=1;
+//echo 'ok='.$ok."\n";
+if ($ok==0) exit;
+
 //
 // sourceforge.net/projects/postfixadmin/
 // md5crypt 

From 14c8e56d845a1a3c716cb5da85b8bed4f8d76462 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 11 Apr 2018 21:34:07 +0200
Subject: [PATCH 0071/2300] Allow /reset/mail/ only from localhost

---
 web/reset/mail/index.php | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/web/reset/mail/index.php b/web/reset/mail/index.php
index 9315d041..bb7faf2d 100644
--- a/web/reset/mail/index.php
+++ b/web/reset/mail/index.php
@@ -5,6 +5,22 @@ error_reporting(NULL);
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Checking IP of incoming connection, checking is it NAT address
+$ok=0;
+$ip=$_SERVER['REMOTE_ADDR'];
+exec (VESTA_CMD."v-list-sys-ips json", $output, $return_var);
+$output=implode('', $output);
+$arr=json_decode($output, true);
+foreach ($arr as $arr_key => $arr_val) {
+	if ($ip==$arr_key || $ip==$arr_val['NAT']) {
+		$ok=1;
+		break;
+	}
+}
+if ($ip == $_SERVER['SERVER_ADDR']) $ok=1;
+if ($ip == '127.0.0.1') $ok=1;
+if ($ok==0) exit;
+
 //
 // sourceforge.net/projects/postfixadmin/
 // md5crypt 

From 4fa549c570194e2aaa8d3bc75b5faf9c604e0fda Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 12 Apr 2018 00:09:35 +0200
Subject: [PATCH 0072/2300] Disable direct access through frontend nginx in
 /reset/mail/

---
 web/reset/mail/index.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/reset/mail/index.php b/web/reset/mail/index.php
index 060958ba..f09c198f 100644
--- a/web/reset/mail/index.php
+++ b/web/reset/mail/index.php
@@ -22,6 +22,7 @@ foreach ($arr as $arr_key => $arr_val) {
 if ($ip == $_SERVER['SERVER_ADDR']) $ok=1;
 if ($ip == '127.0.0.1') $ok=1;
 if ($ok==0) exit;
+if (isset($_SERVER['HTTP_X_REAL_IP']) || isset($_SERVER['HTTP_X_FORWARDED_FOR'])) exit;
 
 //
 // sourceforge.net/projects/postfixadmin/

From b7c19a8e63dd156540059e2a6b6bd80ee2d2bb5e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 12 Apr 2018 01:08:35 +0200
Subject: [PATCH 0073/2300] Allow /reset/mail/ only from localhost

Block connection from outside, that could brute force password guessing
---
 web/reset/mail/index.php | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/web/reset/mail/index.php b/web/reset/mail/index.php
index 9315d041..5350f9b9 100644
--- a/web/reset/mail/index.php
+++ b/web/reset/mail/index.php
@@ -5,6 +5,23 @@ error_reporting(NULL);
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Checking IP of incoming connection, checking is it NAT address
+$ok=0;
+$ip=$_SERVER['REMOTE_ADDR'];
+exec (VESTA_CMD."v-list-sys-ips json", $output, $return_var);
+$output=implode('', $output);
+$arr=json_decode($output, true);
+foreach ($arr as $arr_key => $arr_val) {
+    // search for NAT IPs and allow them
+	if ($ip==$arr_key || $ip==$arr_val['NAT']) {
+		$ok=1;
+		break;
+	}
+}
+if ($ip == $_SERVER['SERVER_ADDR']) $ok=1;
+if ($ip == '127.0.0.1') $ok=1;
+if ($ok==0) exit;
+
 //
 // sourceforge.net/projects/postfixadmin/
 // md5crypt 

From b2f2caf3bbcbcceae5e03c8b4b5272b48668f3e4 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 12 Apr 2018 01:29:49 +0200
Subject: [PATCH 0074/2300] equalize with master

---
 web/reset/mail/index.php | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/web/reset/mail/index.php b/web/reset/mail/index.php
index f09c198f..85c7fb76 100644
--- a/web/reset/mail/index.php
+++ b/web/reset/mail/index.php
@@ -1,19 +1,18 @@
 <?php
 // Init
 define('NO_AUTH_REQUIRED',true);
-define('NO_AUTH_REQUIRED2',true);
 error_reporting(NULL);
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
 // Checking IP of incoming connection, checking is it NAT address
-//echo '<pre>'; print_r($_SERVER); exit;
 $ok=0;
 $ip=$_SERVER['REMOTE_ADDR'];
 exec (VESTA_CMD."v-list-sys-ips json", $output, $return_var);
 $output=implode('', $output);
 $arr=json_decode($output, true);
 foreach ($arr as $arr_key => $arr_val) {
+    // search for NAT IPs and allow them
 	if ($ip==$arr_key || $ip==$arr_val['NAT']) {
 		$ok=1;
 		break;
@@ -22,7 +21,6 @@ foreach ($arr as $arr_key => $arr_val) {
 if ($ip == $_SERVER['SERVER_ADDR']) $ok=1;
 if ($ip == '127.0.0.1') $ok=1;
 if ($ok==0) exit;
-if (isset($_SERVER['HTTP_X_REAL_IP']) || isset($_SERVER['HTTP_X_FORWARDED_FOR'])) exit;
 
 //
 // sourceforge.net/projects/postfixadmin/

From 7688706ed39769433e479d6c7cf7e7b0ef8d95e9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 12 Apr 2018 01:33:35 +0200
Subject: [PATCH 0075/2300] put back my modification

---
 web/reset/mail/index.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/web/reset/mail/index.php b/web/reset/mail/index.php
index 85c7fb76..c0769933 100644
--- a/web/reset/mail/index.php
+++ b/web/reset/mail/index.php
@@ -1,6 +1,8 @@
 <?php
 // Init
 define('NO_AUTH_REQUIRED',true);
+define('NO_AUTH_REQUIRED',true);
+
 error_reporting(NULL);
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
@@ -21,6 +23,7 @@ foreach ($arr as $arr_key => $arr_val) {
 if ($ip == $_SERVER['SERVER_ADDR']) $ok=1;
 if ($ip == '127.0.0.1') $ok=1;
 if ($ok==0) exit;
+if (isset($_SERVER['HTTP_X_REAL_IP']) || isset($_SERVER['HTTP_X_FORWARDED_FOR'])) exit;
 
 //
 // sourceforge.net/projects/postfixadmin/

From a57c8b775ba4a9c62720380de12ea56df97340dd Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 12 Apr 2018 01:34:18 +0200
Subject: [PATCH 0076/2300] NO_AUTH_REQUIRED2 fix

---
 web/reset/mail/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/reset/mail/index.php b/web/reset/mail/index.php
index c0769933..010fed77 100644
--- a/web/reset/mail/index.php
+++ b/web/reset/mail/index.php
@@ -1,7 +1,7 @@
 <?php
 // Init
 define('NO_AUTH_REQUIRED',true);
-define('NO_AUTH_REQUIRED',true);
+define('NO_AUTH_REQUIRED2',true);
 
 error_reporting(NULL);
 

From 12306ce834f2a35ed33f2d106e97e3bf8028712a Mon Sep 17 00:00:00 2001
From: Robin Dirksen <robin@famdirksen.nl>
Date: Thu, 12 Apr 2018 14:28:23 +0200
Subject: [PATCH 0077/2300] Update v-update-host-certificate

Restart mailserver & ftpserver based on `conf/vesta.conf` settings, so the new certificate will be applied.
---
 bin/v-update-host-certificate | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-update-host-certificate b/bin/v-update-host-certificate
index e777afbd..dd99eed4 100755
--- a/bin/v-update-host-certificate
+++ b/bin/v-update-host-certificate
@@ -76,6 +76,12 @@ $BIN/v-restart-mail
 if [ ! -z "$IMAP_SYSTEM" ]; then
     $BIN/v-restart-service "$IMAP_SYSTEM"
 fi
+if [ ! -z "$MAIL_SYSTEM" ]; then
+    $BIN/v-restart-service "$MAIL_SYSTEM"
+fi
+if [ ! -z "$FTP_SYSTEM" ]; then
+    $BIN/v-restart-service "$FTP_SYSTEM"
+fi
 if [ -f "/var/run/vesta-nginx.pid" ]; then
     kill -HUP $(cat /var/run/vesta-nginx.pid)
 fi

From d14d4cddfb7fcb070c3672c68bdd4136ab0f1b05 Mon Sep 17 00:00:00 2001
From: Robin Dirksen <robin@famdirksen.nl>
Date: Thu, 12 Apr 2018 16:27:47 +0200
Subject: [PATCH 0078/2300] Update v-update-host-certificate

https://github.com/serghey-rodin/vesta/pull/1543#issuecomment-380798986
---
 bin/v-update-host-certificate | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/bin/v-update-host-certificate b/bin/v-update-host-certificate
index dd99eed4..71a87709 100755
--- a/bin/v-update-host-certificate
+++ b/bin/v-update-host-certificate
@@ -76,9 +76,6 @@ $BIN/v-restart-mail
 if [ ! -z "$IMAP_SYSTEM" ]; then
     $BIN/v-restart-service "$IMAP_SYSTEM"
 fi
-if [ ! -z "$MAIL_SYSTEM" ]; then
-    $BIN/v-restart-service "$MAIL_SYSTEM"
-fi
 if [ ! -z "$FTP_SYSTEM" ]; then
     $BIN/v-restart-service "$FTP_SYSTEM"
 fi

From b04dce9ce36d293d44c9aeadd01e72b04abcec59 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 16 Apr 2018 16:54:00 +0200
Subject: [PATCH 0079/2300] Restart nginx in background

---
 bin/v-restart-proxy | 28 ++++++++++++++++++----------
 1 file changed, 18 insertions(+), 10 deletions(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index 9fbd8fef..a696501a 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -49,18 +49,26 @@ if [ -z "$PROXY_SYSTEM" ] || [ "$PROXY_SYSTEM" = 'remote' ]; then
     exit
 fi
 
-# Restart system
-service $PROXY_SYSTEM reload >/dev/null 2>&1
-if [ $? -ne 0 ]; then
-    send_email_report
-    check_result $E_RESTART "$PROXY_SYSTEM restart failed"
-fi
-
-# Update restart queue
-if [ -e "$VESTA/data/queue/restart.pipe" ]; then
-    sed -i "/$SCRIPT/d" $VESTA/data/queue/restart.pipe
+# background restart
+if [ "$1" = 'background' ]; then
+    # Restart system
+    sleep 2
+    service $PROXY_SYSTEM restart >/dev/null 2>&1
+    if [ $? -ne 0 ]; then
+        send_email_report
+        check_result $E_RESTART "$PROXY_SYSTEM restart failed"
+    fi
+    
+    # Update restart queue
+    if [ -e "$VESTA/data/queue/restart.pipe" ]; then
+        sed -i "/$SCRIPT/d" $VESTA/data/queue/restart.pipe
+    fi
+
+    exit;
 fi
 
+touch /tmp/restart-nginx
+nohup $BIN/v-restart-proxy 'background' &>/dev/null &
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 40947919e0511d277d719624da3fb82be15bbbf6 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 16 Apr 2018 19:56:06 +0200
Subject: [PATCH 0080/2300] Restart nginx after 20 sec

---
 bin/v-restart-proxy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index a696501a..f8e6a95e 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -52,7 +52,7 @@ fi
 # background restart
 if [ "$1" = 'background' ]; then
     # Restart system
-    sleep 2
+    sleep 20
     service $PROXY_SYSTEM restart >/dev/null 2>&1
     if [ $? -ne 0 ]; then
         send_email_report

From 5fed5bb88937118fd30e918939bcc20746f41505 Mon Sep 17 00:00:00 2001
From: Secretjail <joorabeban@yahoo.com>
Date: Tue, 17 Apr 2018 13:32:32 +0430
Subject: [PATCH 0081/2300] Update fa.php

add Apps (softaculous).
---
 web/inc/i18n/fa.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/inc/i18n/fa.php b/web/inc/i18n/fa.php
index 926673cc..57295481 100644
--- a/web/inc/i18n/fa.php
+++ b/web/inc/i18n/fa.php
@@ -88,6 +88,7 @@ $LANG['fa'] = array(
     'list records' => 'فهرست پیشینه های %s',
     'add record' => 'افزودن پیشینه',
     'list accounts' => 'فهرست حسابهای %s',
+    'Apps' => 'برنامه ها',
     'add account' => 'افزودن حساب',
     'open webmail' => 'بازکردن وب میل',
     'list fail2ban' => 'فهرست fail2ban',

From 3742d5f13decc9e5bda699b661f773294cd1ada6 Mon Sep 17 00:00:00 2001
From: asfihani <asfihani@gmail.com>
Date: Tue, 17 Apr 2018 16:23:36 +0700
Subject: [PATCH 0082/2300] Add wp super cache support

---
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 +++++++++++++++++++
 1 file changed, 85 insertions(+)
 create mode 100644 install/rhel/7/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl

diff --git a/install/rhel/7/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/rhel/7/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/rhel/7/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}

From 3f9f8d9467b68299e36ff3e3385eb2add80ce66b Mon Sep 17 00:00:00 2001
From: asfihani <asfihani@gmail.com>
Date: Tue, 17 Apr 2018 16:27:38 +0700
Subject: [PATCH 0083/2300] Add wp super cache support

---
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 1 file changed, 89 insertions(+)
 create mode 100644 install/rhel/7/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl

diff --git a/install/rhel/7/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/rhel/7/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/rhel/7/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}

From 17f198cc360775c35e71700e0da9e7abaff20f6d Mon Sep 17 00:00:00 2001
From: Asfihani <asfik@svrpnr.net>
Date: Tue, 17 Apr 2018 16:44:12 +0700
Subject: [PATCH 0084/2300] Add Wordpress WP Super Cache plugin template
 support

---
 .../php5-fpm/wordpress2_wp_super_cache.stpl   | 89 +++++++++++++++++++
 .../php5-fpm/wordpress2_wp_super_cache.tpl    | 85 ++++++++++++++++++
 .../php5-fpm/wordpress2_wp_super_cache.stpl   | 89 +++++++++++++++++++
 .../php5-fpm/wordpress2_wp_super_cache.tpl    | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.stpl    | 89 +++++++++++++++++++
 .../php-fpm/wordpress2_wp_super_cache.tpl     | 85 ++++++++++++++++++
 30 files changed, 2610 insertions(+)
 create mode 100644 install/debian/7/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/debian/7/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/debian/8/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/debian/8/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/rhel/5/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/rhel/5/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/rhel/6/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/rhel/6/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/ubuntu/12.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/ubuntu/12.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/ubuntu/12.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/ubuntu/12.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/ubuntu/13.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/ubuntu/13.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/ubuntu/13.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/ubuntu/13.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/ubuntu/14.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/ubuntu/14.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/ubuntu/14.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/ubuntu/14.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/ubuntu/15.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/ubuntu/15.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/ubuntu/15.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/ubuntu/15.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/ubuntu/16.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/ubuntu/16.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
 create mode 100644 install/ubuntu/16.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
 create mode 100644 install/ubuntu/16.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl

diff --git a/install/debian/7/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.stpl b/install/debian/7/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/debian/7/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.tpl b/install/debian/7/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/debian/7/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.stpl b/install/debian/8/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/debian/8/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.tpl b/install/debian/8/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/debian/8/templates/web/nginx/php5-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/debian/9/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/debian/9/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/rhel/5/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/rhel/5/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/rhel/5/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/rhel/5/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/rhel/6/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/rhel/6/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/rhel/6/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/rhel/6/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
new file mode 100644
index 00000000..f33ed507
--- /dev/null
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+    
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index-https.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
new file mode 100644
index 00000000..c0a5239e
--- /dev/null
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/wordpress2_wp_super_cache.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+    
+    set $cache_uri $request_uri;
+
+    if ($request_method = POST) {
+        set $cache_uri 'null cache';
+    }
+
+    if ($query_string != "") {
+        set $cache_uri 'null cache';
+    }   
+
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php
+                          |wp-.*.php|/feed/|index.php|wp-comments-popup.php
+                          |wp-links-opml.php|wp-locations.php |sitemap(_index)?.xml
+                          |[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
+        set $cache_uri 'null cache';
+    }  
+
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+
+                         |wp-postpass|wordpress_logged_in|woocommerce_cart_hash|woocommerce_items_in_cart|wp_woocommerce_session_") {
+        set $cache_uri 'null cache';
+    }
+
+    location / {
+        try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}

From d0e2ecc305b714e0584d0a0457113069313ef1e5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Apr 2018 14:48:56 +0200
Subject: [PATCH 0085/2300] Allowing normal user to change proxy template,
 /web/edit/

---
 web/edit/web/index.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/edit/web/index.php b/web/edit/web/index.php
index edf29e9d..e934c1c8 100644
--- a/web/edit/web/index.php
+++ b/web/edit/web/index.php
@@ -230,8 +230,8 @@ if (!empty($_POST['save'])) {
         $restart_proxy = 'yes';
     }
 
-    // Change proxy template / Update extension list (admin only)
-    if ((!empty($_SESSION['PROXY_SYSTEM'])) && (!empty($v_proxy)) && (!empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg'])) && ($_SESSION['user'] == 'admin')) {
+    // Change proxy template / Update extension list
+    if ((!empty($_SESSION['PROXY_SYSTEM'])) && (!empty($v_proxy)) && (!empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg'])) ) {
         $ext = preg_replace("/\n/", " ", $_POST['v_proxy_ext']);
         $ext = preg_replace("/,/", " ", $ext);
         $ext = preg_replace('/\s+/', ' ',$ext);

From 1c51af3b50b4738faa14dbb1d8748678dff6732e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Apr 2018 14:51:55 +0200
Subject: [PATCH 0086/2300] Allowing normal user to change proxy template, web
 template

---
 web/templates/user/edit_web.html | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/web/templates/user/edit_web.html b/web/templates/user/edit_web.html
index 911ab0bf..c984427c 100644
--- a/web/templates/user/edit_web.html
+++ b/web/templates/user/edit_web.html
@@ -94,6 +94,30 @@
                             <tr>
                                 <td class="step-left">
                                     <table style="display:<?php if (empty($v_proxy)) { echo 'none';} else {echo 'block';}?> ;" id="proxytable">
+                                        <tr>
+                                            <td class="vst-text input-label">
+                                                <?php print __('Proxy Template');?>
+                                            </td>
+                                        </tr>
+                                        <tr>
+                                            <td>
+                                                <select class="vst-list" name="v_proxy_template">
+                                                    <?php
+                                                        foreach ($proxy_templates as $key => $value) {
+                                                            echo "\t\t\t\t<option value=\"".htmlentities($value)."\"";
+                                                            $svalue = "'".$value."'";
+                                                            if ((!empty($v_proxy_template)) && ( $value == $v_proxy_template ) || ($svalue == $v_proxy_template)){
+                                                                echo ' selected' ;
+                                                            }
+                                                            if ((empty($v_proxy_template)) && ($value == 'default')){
+                                                                echo ' selected' ;
+                                                            }
+                                                            echo ">".htmlentities($value)."</option>\n";
+                                                        }
+                                                    ?>
+                                                </select>
+                                            </td>
+                                        </tr>
                                         <tr>
                                             <td class="vst-text input-label">
                                                 <?php print __('Proxy Extensions');?>

From 04e3413590192667eb0972c861f7c204f1b9b670 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Apr 2018 15:32:57 +0200
Subject: [PATCH 0087/2300] v-restart-proxy better restart handling

---
 bin/v-restart-proxy | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index f8e6a95e..7b8b4dd2 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -52,7 +52,8 @@ fi
 # background restart
 if [ "$1" = 'background' ]; then
     # Restart system
-    sleep 20
+    sleep 300
+    rm /tmp/restart-nginx
     service $PROXY_SYSTEM restart >/dev/null 2>&1
     if [ $? -ne 0 ]; then
         send_email_report
@@ -67,6 +68,16 @@ if [ "$1" = 'background' ]; then
     exit;
 fi
 
+if [ -f "/tmp/restart-nginx" ]; then
+    exit;
+fi
+
+service $PROXY_SYSTEM reload
+if [ $? -ne 0 ]; then
+    send_email_report
+    check_result $E_RESTART "$PROXY_SYSTEM reload failed"
+fi
+
 touch /tmp/restart-nginx
 nohup $BIN/v-restart-proxy 'background' &>/dev/null &
 

From 73e6656986569d0bdf7d87efb31efee19d4bdd4f Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 26 Apr 2018 16:32:34 +0300
Subject: [PATCH 0088/2300] RACK911LABS.COM: simpler and safer hash check

---
 bin/v-check-user-hash | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bin/v-check-user-hash b/bin/v-check-user-hash
index 7fd55789..a18aba0e 100755
--- a/bin/v-check-user-hash
+++ b/bin/v-check-user-hash
@@ -75,15 +75,15 @@ else
     method='des'
 fi
 
+# Checking salt
 if [ -z "$salt" ]; then
     echo "Error: password missmatch"
     echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
     exit 9
 fi
 
-# Checking hash
-result=$(grep "^$user:$hash:" /etc/shadow 2>/dev/null)
-if [[ -z "$result" ]]; then
+# Comparing hashes
+if [[ "$shadow" != "$hash" ]]; then
     echo "Error: password missmatch"
     echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
     exit 9

From 4c751ab693656ee8bed3cafeee12d751ddcd03d0 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 26 Apr 2018 17:14:19 +0300
Subject: [PATCH 0089/2300] RACK911LABS.COM: safer mysql status check

---
 bin/v-update-sys-rrd-mysql | 22 +++++-----------------
 1 file changed, 5 insertions(+), 17 deletions(-)

diff --git a/bin/v-update-sys-rrd-mysql b/bin/v-update-sys-rrd-mysql
index aa6734e9..8c6bb75e 100755
--- a/bin/v-update-sys-rrd-mysql
+++ b/bin/v-update-sys-rrd-mysql
@@ -14,6 +14,7 @@ period=${1-daily}
 
 # Includes
 source $VESTA/func/main.sh
+source $VESTA/func/db.sh
 source $VESTA/conf/vesta.conf
 
 
@@ -66,23 +67,10 @@ for host in $hosts; do
     fi
 
     if [ "$period" = 'daily' ]; then
-        # Defining host credentials
-        host_str=$(grep "HOST='$host'" $conf)
-        for key in $host_str; do
-            eval ${key%%=*}=${key#*=}
-        done
-        sql="mysql -h $HOST -u $USER -p$PASSWORD -e"
-
-        # Checking empty vars
-        if [ -z $HOST ] || [ -z $USER ] || [ -z $PASSWORD ]; then
-            echo "Error: config is broken"
-            log_event "$E_PARSING" "$ARGUMENTS"
-            exit $E_PARSING
-        fi
-
-        # Parsing data
-        status=$($sql "SHOW GLOBAL STATUS" 2>/dev/null); code="$?"
-        if [ '0' -ne "$code" ]; then
+        mysql_connect $host
+        query='SHOW GLOBAL STATUS'
+        status=$(mysql_query "$query" 2>/dev/null)
+        if [ $? -ne 0 ]; then
             active=0
             slow=0
         else

From b5874764a7b3c8a3c85ea37b51a0907853c1bc7d Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 26 Apr 2018 17:29:13 +0300
Subject: [PATCH 0090/2300] RACK911LABS.COM: safer mysql/pgsql query

---
 func/db.sh | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/func/db.sh b/func/db.sh
index d9c43031..d397dfec 100644
--- a/func/db.sh
+++ b/func/db.sh
@@ -47,7 +47,10 @@ mysql_connect() {
 }
 
 mysql_query() {
-    mysql --defaults-file=$mycnf -e "$1" 2>/dev/null
+    sql_tmp=$(mktemp)
+    echo "$1" > $sql_tmp
+    mysql --defaults-file=$mycnf < "$sql_tmp"  2>/dev/null
+    rm -f "$sql_tmp"
 }
 
 mysql_dump() {
@@ -89,7 +92,10 @@ psql_connect() {
 }
 
 psql_query() {
-    psql -h $HOST -U $USER -c "$1" 2>/dev/null
+    sql_tmp=$(mktemp)
+    echo "$1" > $sql_tmp
+    psql -h $HOST -U $USER -f "$sql_tmp" 2>/dev/null
+    rm -f $sql_tmp
 }
 
 psql_dump() {

From b329be0352007db7d7cb06a1730ad77f7cd120c5 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 26 Apr 2018 16:59:54 +0200
Subject: [PATCH 0091/2300] v-restart-proxy sleep 1

---
 bin/v-restart-proxy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index 7b8b4dd2..14356038 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -52,7 +52,7 @@ fi
 # background restart
 if [ "$1" = 'background' ]; then
     # Restart system
-    sleep 300
+    sleep 1
     rm /tmp/restart-nginx
     service $PROXY_SYSTEM restart >/dev/null 2>&1
     if [ $? -ne 0 ]; then

From a21ecd0ad0d114eddeb1af29cd9d97c3975b1dab Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 26 Apr 2018 18:17:09 +0300
Subject: [PATCH 0092/2300] RACK911LABS.COM: safer log parser

---
 bin/v-list-user-log | 23 +++++++++++++----------
 1 file changed, 13 insertions(+), 10 deletions(-)

diff --git a/bin/v-list-user-log b/bin/v-list-user-log
index f8581341..ca317f7d 100755
--- a/bin/v-list-user-log
+++ b/bin/v-list-user-log
@@ -23,7 +23,10 @@ json_list() {
     objects=$(echo "$logs" |wc -l)
     echo "{"
     for str in $logs; do
-        eval $str
+        ID=$(echo "$str" |cut -f 2 -d \')
+        DATE=$(echo "$str" |cut -f 4 -d \')
+        TIME=$(echo "$str" |cut -f 6 -d \')
+        CMD=$(echo "$str" |cut -f 8 -d \')
         CMD=${CMD//\"/\\\"}
         echo -n '    "'$ID'": {
         "CMD": "'$CMD'",
@@ -46,13 +49,9 @@ shell_list() {
     echo "DATE~TIME~CMD"
     echo "----~----~---"
     for str in $logs; do
-        eval $str
-        if [ -z "$DATE" ]; then
-            DATE='no'
-        fi
-        if [ -z "$TIME" ]; then
-            TIME='no'
-        fi
+        DATE=$(echo "$str" |cut -f 4 -d \')
+        TIME=$(echo "$str" |cut -f 6 -d \')
+        CMD=$(echo "$str" |cut -f 8 -d \')
         echo "$DATE~$TIME~$CMD"
     done
 }
@@ -61,7 +60,9 @@ shell_list() {
 plain_list() {
     IFS=$'\n'
     for str in $logs; do
-        eval $str
+        DATE=$(echo "$str" |cut -f 4 -d \')
+        TIME=$(echo "$str" |cut -f 6 -d \')
+        CMD=$(echo "$str" |cut -f 8 -d \')
         echo -e "$ID\t$CMD\t$UNDO\t$TIME\t$DATE"
     done
 }
@@ -71,7 +72,9 @@ csv_list() {
     IFS=$'\n'
     echo "ID,CMD,UNDO,TIME,DATE"
     for str in $logs; do
-        eval $str
+        DATE=$(echo "$str" |cut -f 4 -d \')
+        TIME=$(echo "$str" |cut -f 6 -d \')
+        CMD=$(echo "$str" |cut -f 8 -d \')
         echo "$ID,\"$CMD\",\"$UNDO\",$TIME,$DATE"
     done
 }

From a3a2daa4cd2568300a06ecd8076bde5969572487 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 26 Apr 2018 18:46:00 +0200
Subject: [PATCH 0093/2300] Removing nginx restart lock

---
 bin/v-restart-proxy | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index 14356038..98661ec8 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -53,7 +53,7 @@ fi
 if [ "$1" = 'background' ]; then
     # Restart system
     sleep 1
-    rm /tmp/restart-nginx
+    # rm /tmp/restart-nginx
     service $PROXY_SYSTEM restart >/dev/null 2>&1
     if [ $? -ne 0 ]; then
         send_email_report
@@ -68,9 +68,9 @@ if [ "$1" = 'background' ]; then
     exit;
 fi
 
-if [ -f "/tmp/restart-nginx" ]; then
-    exit;
-fi
+# if [ -f "/tmp/restart-nginx" ]; then
+#     exit;
+# fi
 
 service $PROXY_SYSTEM reload
 if [ $? -ne 0 ]; then
@@ -78,7 +78,7 @@ if [ $? -ne 0 ]; then
     check_result $E_RESTART "$PROXY_SYSTEM reload failed"
 fi
 
-touch /tmp/restart-nginx
+# touch /tmp/restart-nginx
 nohup $BIN/v-restart-proxy 'background' &>/dev/null &
 
 #----------------------------------------------------------#

From 92ec2cf032a54f7743b4ae47fb8c31dab9a13e93 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 26 Apr 2018 18:50:18 +0200
Subject: [PATCH 0094/2300] sleep 15

---
 bin/v-restart-proxy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index 98661ec8..be142385 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -52,7 +52,7 @@ fi
 # background restart
 if [ "$1" = 'background' ]; then
     # Restart system
-    sleep 1
+    sleep 15
     # rm /tmp/restart-nginx
     service $PROXY_SYSTEM restart >/dev/null 2>&1
     if [ $? -ne 0 ]; then

From 8d85cdcb2c196352a27ccb283c2029ecac9a0b87 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 26 Apr 2018 19:11:51 +0200
Subject: [PATCH 0095/2300] Wait 10 sec only while renewing LE for more than 1
 domain

---
 bin/v-update-letsencrypt-ssl | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 93fe9023..907d305f 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -29,6 +29,7 @@ users=$($BIN/v-list-users | tail -n+3 | awk '{ print $1 }')
 for user in $users; do
     USER_DATA=$VESTA/data/users/$user
     # Checking user certificates
+    lecounter=0
     for domain in $(search_objects 'web' 'LETSENCRYPT' 'yes' 'DOMAIN'); do
 
         crt="$VESTA/data/users/$user/ssl/$domain.crt"
@@ -57,7 +58,10 @@ for user in $users; do
                     echo "$domain $msg"
                 fi
             fi
-            sleep 10
+            if [ $lecounter -gt 0 ]; then
+                sleep 10
+            fi
+            ((lecounter++))
         fi
     done
 done

From 9148f7c9c2accbaecf426e44eba420cac7d7036d Mon Sep 17 00:00:00 2001
From: Vadim Sitnic <vsitnic@gmail.com>
Date: Fri, 27 Apr 2018 11:33:13 +0300
Subject: [PATCH 0096/2300] set softquota=hardquota

---
 bin/v-update-user-quota | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-user-quota b/bin/v-update-user-quota
index b0f376a2..3483bca5 100755
--- a/bin/v-update-user-quota
+++ b/bin/v-update-user-quota
@@ -33,7 +33,7 @@ is_object_valid 'user' 'USER' "$user"
 # Updating disk quota
 # Had quota equals package value. Soft quota equals 90% of package value for warnings.
 quota=$(get_user_value '$DISK_QUOTA')
-soft=$(echo "$quota * 1024 * 0.90"|bc |cut -f 1 -d .)
+soft=$(echo "$quota * 1024"|bc |cut -f 1 -d .)
 hard=$(echo "$quota * 1024"|bc |cut -f 1 -d .)
 
 # Searching home mount point

From 4f4cc763a70b91246c15f4e044aa182660e1dce4 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 27 Apr 2018 15:36:41 +0300
Subject: [PATCH 0097/2300] RACK911LABS.COM: symlink check

---
 bin/v-add-mail-domain | 1 +
 bin/v-add-web-domain  | 1 +
 func/main.sh          | 7 +++++++
 func/rebuild.sh       | 6 ++++++
 4 files changed, 15 insertions(+)

diff --git a/bin/v-add-mail-domain b/bin/v-add-mail-domain
index 2676e750..6681035f 100755
--- a/bin/v-add-mail-domain
+++ b/bin/v-add-mail-domain
@@ -45,6 +45,7 @@ is_object_valid 'user' 'USER' "$user"
 is_object_unsuspended 'user' 'USER' "$user"
 is_domain_new 'mail' "$domain"
 is_package_full 'MAIL_DOMAINS'
+is_dir_symlink $HOMEDIR/$user/mail
 
 
 #----------------------------------------------------------#
diff --git a/bin/v-add-web-domain b/bin/v-add-web-domain
index 018adcb4..b937330c 100755
--- a/bin/v-add-web-domain
+++ b/bin/v-add-web-domain
@@ -47,6 +47,7 @@ is_object_valid 'user' 'USER' "$user"
 is_object_unsuspended 'user' 'USER' "$user"
 is_package_full 'WEB_DOMAINS' 'WEB_ALIASES'
 is_domain_new 'web' "$domain,$aliases"
+is_dir_symlink $HOMEDIR/$user/web
 if [ ! -z "$ip" ]; then
     is_ip_valid "$ip" "$user"
 else
diff --git a/func/main.sh b/func/main.sh
index a79cb2a0..e11ba6b3 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -287,6 +287,13 @@ is_hash_valid() {
     fi
 }
 
+# Check if directory is a symlink
+is_dir_symlink() {
+    if [[ -L "$1" ]]; then
+        check_result $E_FORBIDEN "$1 directory is a symlink"
+    fi
+}
+
 # Get object value
 get_object_value() {
     object=$(grep "$2='$3'" $USER_DATA/$1.conf)
diff --git a/func/rebuild.sh b/func/rebuild.sh
index a6025928..9a1c0f47 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -71,6 +71,9 @@ rebuild_user_conf() {
         echo "$BIN/v-update-web-domains-disk $user" \
             >> $VESTA/data/queue/disk.pipe
 
+        if [[ -L "$HOMEDIR/$user/web" ]]; then
+            rm $HOMEDIR/$user/web
+        fi
         mkdir -p $HOMEDIR/$user/conf/web
         mkdir -p $HOMEDIR/$user/web
         mkdir -p $HOMEDIR/$user/tmp
@@ -105,6 +108,9 @@ rebuild_user_conf() {
         echo "$BIN/v-update-mail-domains-disk $user" \
             >> $VESTA/data/queue/disk.pipe
 
+        if [[ -L "$HOMEDIR/$user/mail" ]]; then
+            rm $HOMEDIR/$user/mail
+        fi
         mkdir -p $HOMEDIR/$user/conf/mail
         mkdir -p $HOMEDIR/$user/mail
         chmod 751 $HOMEDIR/$user/mail

From 2a26571648f005b4e42182853ae274e8a6f8394f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 3 May 2018 17:27:49 +0200
Subject: [PATCH 0098/2300] Temporary fix for aliases

---
 func/main.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/func/main.sh b/func/main.sh
index a79cb2a0..cbd65903 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -916,6 +916,7 @@ format_aliases() {
         aliases=$(echo "$aliases" |sed -e "s/[.]*$//g")
         aliases=$(echo "$aliases" |sed -e "s/^[.]*//")
         aliases=$(echo "$aliases" |grep -v www.$domain |sed -e "/^$/d")
+        # aliases=$(echo "$aliases" |sed -e "/^$/d")
         aliases=$(echo "$aliases" |tr '\n' ',' |sed -e "s/,$//")
     fi
 }

From 3f99275e263e08378e1a2e6df90a675a074e2d8b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 4 May 2018 10:39:38 +0200
Subject: [PATCH 0099/2300] Do not check nginx status for reload

---
 bin/v-restart-proxy | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index be142385..00758cc0 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -73,10 +73,10 @@ fi
 # fi
 
 service $PROXY_SYSTEM reload
-if [ $? -ne 0 ]; then
-    send_email_report
-    check_result $E_RESTART "$PROXY_SYSTEM reload failed"
-fi
+# if [ $? -ne 0 ]; then
+#     send_email_report
+#     check_result $E_RESTART "$PROXY_SYSTEM reload failed"
+# fi
 
 # touch /tmp/restart-nginx
 nohup $BIN/v-restart-proxy 'background' &>/dev/null &

From 4baf5ebc2c4b474c4f401563bf789b777aaad493 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 4 May 2018 12:35:28 +0200
Subject: [PATCH 0100/2300] Get vesta port by reading nginx.conf

---
 bin/v-add-firewall-chain | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/bin/v-add-firewall-chain b/bin/v-add-firewall-chain
index f963dade..c7b826fa 100755
--- a/bin/v-add-firewall-chain
+++ b/bin/v-add-firewall-chain
@@ -21,6 +21,12 @@ protocol=$(echo $protocol|tr '[:lower:]' '[:upper:]')
 # Defining absolute path to iptables
 iptables="/sbin/iptables"
 
+# Get vesta port by reading nginx.conf
+vestaport=$(grep 'listen' /usr/local/vesta/nginx/conf/nginx.conf | awk '{print $2}' | sed "s|;||")
+if [ -z "$vestaport" ]; then
+    vestaport=8083
+fi
+
 # Includes
 source $VESTA/func/main.sh
 source $VESTA/conf/vesta.conf
@@ -47,7 +53,7 @@ case $chain in
     DNS)        port=53; protocol=UDP  ;;
     WEB)        port='80,443'; protocol=TCP  ;;
     DB)         port='3306,5432'; protocol=TCP  ;;
-    VESTA)      port=8083; protocol=TCP  ;;
+    VESTA)      port=$vestaport; protocol=TCP  ;;
     *)          check_args '2' "$#" 'CHAIN PORT' ;;
 esac
 

From 3118b9b91a80b8f5fd88f0a6cba611edc1b03589 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 7 May 2018 16:49:49 +0200
Subject: [PATCH 0101/2300] Sleep 60 after LE renew

---
 bin/v-update-letsencrypt-ssl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 907d305f..d69e7881 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -59,7 +59,7 @@ for user in $users; do
                 fi
             fi
             if [ $lecounter -gt 0 ]; then
-                sleep 10
+                sleep 60
             fi
             ((lecounter++))
         fi

From c1762e931cb872a67a58cf980ee08f1383ad0adc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 9 May 2018 16:45:49 +0200
Subject: [PATCH 0102/2300] Always write LE token to file

---
 bin/v-check-letsencrypt-domain | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-check-letsencrypt-domain b/bin/v-check-letsencrypt-domain
index 97e24878..44f48888 100755
--- a/bin/v-check-letsencrypt-domain
+++ b/bin/v-check-letsencrypt-domain
@@ -101,14 +101,14 @@ if [ "$WEB_SYSTEM" = 'nginx' ] || [ "$PROXY_SYSTEM" = 'nginx' ]; then
     if [ ! -e "$sconf" ]; then
         ln -s "$conf" "$sconf"
     fi
-else
+fi
     acme="$HOMEDIR/$user/web/$r_domain/public_html/.well-known/acme-challenge"
     if [ ! -d "$acme" ]; then
         mkdir -p $acme
     fi
     echo "$token.$thumb" > $acme/$token
     chown -R $user:$user $HOMEDIR/$user/web/$r_domain/public_html/.well-known
-fi
+
 
 # Restarting web server
 if [ -z "$PROXY_SYSTEM" ]; then

From 3d9137c1acd4e0d8b001d5721a8219c08c736017 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 10 May 2018 10:25:25 +0200
Subject: [PATCH 0103/2300] Wait 60 sec even for check-letsencrypt

---
 bin/v-update-letsencrypt-ssl | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index d69e7881..f6c9673a 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -58,11 +58,11 @@ for user in $users; do
                     echo "$domain $msg"
                 fi
             fi
-            if [ $lecounter -gt 0 ]; then
-                sleep 60
-            fi
-            ((lecounter++))
         fi
+        if [ $lecounter -gt 0 ]; then
+            sleep 60
+        fi
+        ((lecounter++))
     done
 done
 

From dd2a57e408cc3c1058c92af85ba7c54fba2d6ec8 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 11 May 2018 16:17:23 +0300
Subject: [PATCH 0104/2300] =?UTF-8?q?Vesta=20CP=200.9.8=E2=80=9320=20rXSS?=
 =?UTF-8?q?=20to=20RCE=20/=20solves=20#1558?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 web/upload/UploadHandler.php | 35 +++++------------------------------
 web/view/file/index.php      |  2 +-
 2 files changed, 6 insertions(+), 31 deletions(-)

diff --git a/web/upload/UploadHandler.php b/web/upload/UploadHandler.php
index 2c9de8af..a5e0b07c 100755
--- a/web/upload/UploadHandler.php
+++ b/web/upload/UploadHandler.php
@@ -1117,37 +1117,12 @@ class UploadHandler
             $append_file = $content_range && is_file($file_path) &&
                 $file->size > $this->get_file_size($file_path);
             if ($uploaded_file && is_uploaded_file($uploaded_file)) {
-                // multipart/formdata uploads (POST method uploads)
-                if ($append_file) {
-                    file_put_contents(
-                        $file_path,
-                        fopen($uploaded_file, 'r'),
-                        FILE_APPEND
-                    );
-                } else {
-                    chmod($uploaded_file, 0644);
-//                    move_uploaded_file($uploaded_file, $file_path);
-                    exec (VESTA_CMD . "v-copy-fs-file ". USERNAME ." {$uploaded_file} '{$file_path}'", $output, $return_var);
-
-                    $error = check_return_code($return_var, $output);
-                    if ($return_var != 0) {
-                        //var_dump(VESTA_CMD . "v-copy-fs-file {$user} {$fn} {$path}");
-                        //var_dump($path);
-                        //var_dump($output);
-                        $file->error = 'Error while saving file ';
-//                        var_dump(VESTA_CMD . "v-copy-fs-file ". USERNAME ." {$uploaded_file} {$file_path}");
-//                        var_dump($return_var);
-//                        var_dump($output);
-//                        exit();
-                    }
+                chmod($uploaded_file, 0644);
+                exec (VESTA_CMD . "v-copy-fs-file ". USERNAME ." {$uploaded_file} '{$file_path}'", $output, $return_var);
+                $error = check_return_code($return_var, $output);
+                if ($return_var != 0) {
+                    $file->error = 'Error while saving file ';
                 }
-            } else {
-                // Non-multipart uploads (PUT method support)
-                file_put_contents(
-                    $file_path,
-                    fopen('php://input', 'r'),
-                    $append_file ? FILE_APPEND : 0
-                );
             }
             $file_size = $this->get_file_size($file_path, $append_file);
 
diff --git a/web/view/file/index.php b/web/view/file/index.php
index 6605607c..aed9523d 100644
--- a/web/view/file/index.php
+++ b/web/view/file/index.php
@@ -16,7 +16,7 @@ if (!empty($_REQUEST['path'])) {
     $path = $_REQUEST['path'];
     if (!empty($_REQUEST['raw'])) {
         header('content-type: image/jpeg');
-        passthru (VESTA_CMD . "v-open-fs-file " . $user . " " . escapeshellarg($_REQUEST['path']));
+        passthru (VESTA_CMD . "v-open-fs-file " . $user . " " . escapeshellarg(htmlspecialchars($_REQUEST['path'], ENT_QUOTES, 'UTF-8')));
         exit;
     }
 }

From 4e81382cd8bb62e1b350ce34ec738c938d533f36 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 11 May 2018 16:43:53 +0300
Subject: [PATCH 0105/2300] fixed typo / closes #1561

---
 upd/add_sudo.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/upd/add_sudo.sh b/upd/add_sudo.sh
index d65ee9d7..439e3515 100755
--- a/upd/add_sudo.sh
+++ b/upd/add_sudo.sh
@@ -3,7 +3,7 @@
 
 if [ ! -e '/etc/sudoers.d/admin' ]; then
     if [ ! -d '/etc/sudoers.d' ]; then
-        mkidr /etc/sudoers.d
+        mkdir /etc/sudoers.d
         chmod 750 /etc/sudoers.d
     fi
     echo '# Created by vesta update-trigger' > /etc/sudoers.d/admin

From 19400663ec500b9aa5af6b9a718ecd99c677e8c3 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 11 May 2018 16:44:45 +0300
Subject: [PATCH 0106/2300] delete eval from roundcube configs

---
 upd/fix_roundcube.sh | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100755 upd/fix_roundcube.sh

diff --git a/upd/fix_roundcube.sh b/upd/fix_roundcube.sh
new file mode 100755
index 00000000..621ffd2f
--- /dev/null
+++ b/upd/fix_roundcube.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+# Locate roundcube directory
+if [ -d '/etc/roundcube' ]; then
+    rc_dir='/etc/roundcube'
+fi
+if [ -d '/etc/roundcubemail' ]; then
+    rc_dir='/etc/roundcubemail'
+fi
+
+if [ -z "$rc_dir" ]; then
+    exit
+fi
+
+# Check for eval
+cd $rc_dir
+for config in $(grep eval *.php |cut -f1 -d:); do
+    sed -i '/eval/d' $config
+done

From 314f08b4844782422b996bffeab2b4c2f7711831 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 11 May 2018 16:49:06 +0300
Subject: [PATCH 0107/2300] Release 0.9.8-21

---
 src/deb/ioncube/control              |  2 +-
 src/deb/nginx/control                |  2 +-
 src/deb/php/control                  |  2 +-
 src/deb/softaculous/control          |  2 +-
 src/deb/vesta/control                |  2 +-
 src/deb/vesta/postinst               |  6 +++++-
 src/rpm/specs/vesta-ioncube.spec     |  2 +-
 src/rpm/specs/vesta-nginx.spec       |  2 +-
 src/rpm/specs/vesta-php.spec         |  2 +-
 src/rpm/specs/vesta-softaculous.spec |  2 +-
 src/rpm/specs/vesta.spec             | 16 +++++++++++-----
 11 files changed, 25 insertions(+), 15 deletions(-)

diff --git a/src/deb/ioncube/control b/src/deb/ioncube/control
index a7c5a020..607655f5 100644
--- a/src/deb/ioncube/control
+++ b/src/deb/ioncube/control
@@ -1,7 +1,7 @@
 Source: vesta-ioncube
 Package: vesta-ioncube
 Priority: optional
-Version: 0.9.8-20
+Version: 0.9.8-21
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.ioncube.com
diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index 275d7185..1f17044e 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -1,7 +1,7 @@
 Source: vesta-nginx
 Package: vesta-nginx
 Priority: optional
-Version: 0.9.8-20
+Version: 0.9.8-21
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/php/control b/src/deb/php/control
index e24b55ca..ad9991e5 100644
--- a/src/deb/php/control
+++ b/src/deb/php/control
@@ -1,7 +1,7 @@
 Source: vesta-php
 Package: vesta-php
 Priority: optional
-Version: 0.9.8-20
+Version: 0.9.8-21
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/softaculous/control b/src/deb/softaculous/control
index 0c1d271e..acadc809 100644
--- a/src/deb/softaculous/control
+++ b/src/deb/softaculous/control
@@ -1,7 +1,7 @@
 Source: vesta-softaculous
 Package: vesta-softaculous
 Priority: optional
-Version: 0.9.8-20
+Version: 0.9.8-21
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.softaculous.com
diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 87ed6e49..b45b2f74 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-20
+Version: 0.9.8-21
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 2c539b1d..3cba15e9 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -20,8 +20,12 @@ if [ -x "/usr/local/vesta/upd/fix_sessions.sh" ]; then
     /usr/local/vesta/upd/fix_sessions.sh
 fi
 
-if [ -e /usr/local/vesta/upd/fix_nginx_auth.sh ]; then
+if [ -x /usr/local/vesta/upd/fix_nginx_auth.sh ]; then
     /usr/local/vesta/upd/fix_nginx_auth.sh
 fi
 
+if [ -x /usr/local/vesta/upd/fix_roundcube.sh ]; then
+    /usr/local/vesta/upd/fix_roundcube.sh
+fi
+
 exit 0
diff --git a/src/rpm/specs/vesta-ioncube.spec b/src/rpm/specs/vesta-ioncube.spec
index 93e67911..aaa4cf5d 100644
--- a/src/rpm/specs/vesta-ioncube.spec
+++ b/src/rpm/specs/vesta-ioncube.spec
@@ -1,6 +1,6 @@
 Name:           vesta-ioncube
 Version:        0.9.8
-Release:        20
+Release:        21
 Summary:        ionCube Loader
 Group:          System Environment/Base
 License:        "Freely redistributable without restriction"
diff --git a/src/rpm/specs/vesta-nginx.spec b/src/rpm/specs/vesta-nginx.spec
index e6071b43..9e83f48a 100644
--- a/src/rpm/specs/vesta-nginx.spec
+++ b/src/rpm/specs/vesta-nginx.spec
@@ -1,6 +1,6 @@
 Name:           vesta-nginx
 Version:        0.9.8
-Release:        20
+Release:        21
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        BSD-like
diff --git a/src/rpm/specs/vesta-php.spec b/src/rpm/specs/vesta-php.spec
index 7607ae0d..112deee1 100644
--- a/src/rpm/specs/vesta-php.spec
+++ b/src/rpm/specs/vesta-php.spec
@@ -1,6 +1,6 @@
 Name:           vesta-php
 Version:        0.9.8
-Release:        20
+Release:        21
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
diff --git a/src/rpm/specs/vesta-softaculous.spec b/src/rpm/specs/vesta-softaculous.spec
index 4adfda69..15bb15b3 100644
--- a/src/rpm/specs/vesta-softaculous.spec
+++ b/src/rpm/specs/vesta-softaculous.spec
@@ -1,6 +1,6 @@
 Name:           vesta-softaculous
 Version:        0.9.8
-Release:        20
+Release:        21
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        Softaculous License
diff --git a/src/rpm/specs/vesta.spec b/src/rpm/specs/vesta.spec
index 7127d37a..ea94eebd 100644
--- a/src/rpm/specs/vesta.spec
+++ b/src/rpm/specs/vesta.spec
@@ -1,6 +1,6 @@
 Name:           vesta
 Version:        0.9.8
-Release:        20
+Release:        21
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
@@ -30,18 +30,21 @@ rm -rf %{buildroot}
 
 %post
 if [ $1 -ge 2 ]; then
-    if [ -e /usr/local/vesta/upd/add_sudo.sh ]; then
+    if [ -x /usr/local/vesta/upd/add_sudo.sh ]; then
         /usr/local/vesta/upd/add_sudo.sh
     fi
-    if [ -e /usr/local/vesta/upd/add_notifications.sh ]; then
+    if [ -x /usr/local/vesta/upd/add_notifications.sh ]; then
         /usr/local/vesta/upd/add_notifications.sh
     fi
-    if [ -e /usr/local/vesta/upd/fix_sessions.sh ]; then
+    if [ -x /usr/local/vesta/upd/fix_sessions.sh ]; then
         /usr/local/vesta/upd/fix_sessions.sh
     fi
-    if [ -e /usr/local/vesta/upd/fix_nginx_auth.sh ]; then
+    if [ -x /usr/local/vesta/upd/fix_nginx_auth.sh ]; then
         /usr/local/vesta/upd/fix_nginx_auth.sh
     fi
+    if [ -x /usr/local/vesta/upd/fix_roundcube.sh ]; then
+        /usr/local/vesta/upd/fix_roundcube.sh
+    fi
 fi
 %files
 %{_vestadir}
@@ -56,6 +59,9 @@ fi
 %config(noreplace) %{_vestadir}/web/css/uploadify.css
 
 %changelog
+* Fri May 11 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-21
+- Additional security fixes
+
 * Sun Apr 08 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-20
 - Hardening password checks
 

From ad96554e7768fb2f0ac18abbb7d54494e72adc8e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Wojciech=20Smoli=C5=84ski?= <wojsmol@wp.pl>
Date: Sat, 12 May 2018 16:57:11 +0200
Subject: [PATCH 0108/2300] Fix typo in add_sudo.sh

---
 upd/add_sudo.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/upd/add_sudo.sh b/upd/add_sudo.sh
index d65ee9d7..439e3515 100755
--- a/upd/add_sudo.sh
+++ b/upd/add_sudo.sh
@@ -3,7 +3,7 @@
 
 if [ ! -e '/etc/sudoers.d/admin' ]; then
     if [ ! -d '/etc/sudoers.d' ]; then
-        mkidr /etc/sudoers.d
+        mkdir /etc/sudoers.d
         chmod 750 /etc/sudoers.d
     fi
     echo '# Created by vesta update-trigger' > /etc/sudoers.d/admin

From 599a07fa60cbe880727eab5ee2edc937bd07d58d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 14 May 2018 16:04:30 +0200
Subject: [PATCH 0109/2300] Small fixes in serbian translation

---
 web/inc/i18n/sr.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/web/inc/i18n/sr.php b/web/inc/i18n/sr.php
index 50dc766d..dc1f315c 100644
--- a/web/inc/i18n/sr.php
+++ b/web/inc/i18n/sr.php
@@ -489,7 +489,7 @@ $LANG['sr'] = array(
     'Welcome'  => 'Dobrodošli',
     'LOGGED_IN_AS'  => 'Ulogovani ste kao %s',
     'Error'  => 'Greška',
-    'Invalid username or password'  => 'Pogrešani login podaci',
+    'Invalid username or password'  => 'Pogrešni login podaci',
     'Invalid username or code'  => 'Pogrešno korisničko ime ili kod',
     'Passwords not match'  => 'Passwordi se ne poklapaju',
     'Please enter valid email address.'  => 'Potrebno je uneti validnu email adresu.',
@@ -512,8 +512,8 @@ $LANG['sr'] = array(
 
     'Welcome to Vesta Control Panel'  => 'Dobrodošli u Vesta kontrolni panel',
     'MAIL_FROM'  => 'Vesta kontrolni panel <noreply@%s>',
-    'GREETINGS_GORDON_FREEMAN' => "Poštovanje, %s %s,\n",
-    'GREETINGS' => "Poštovanje,\n",
+    'GREETINGS_GORDON_FREEMAN' => "Poštovani %s %s,\n",
+    'GREETINGS' => "Poštovani,\n",
     'ACCOUNT_READY' => "Vaš hosting nalog je kreiran i spreman za korišćenje.\n\nhttps://%s/login/\nKorisničko ime: %s\nŠifra: %s\n\n--\nVesta kontrolni panel\n",
 
     'FTP login credentials'  => 'FTP podaci',

From 97e0e0644d2affb3cd363a2745cf8da007e2e441 Mon Sep 17 00:00:00 2001
From: Robin Dirksen <robin@famdirksen.nl>
Date: Mon, 14 May 2018 17:06:35 +0200
Subject: [PATCH 0110/2300] Update nl.php

Added apps translation
---
 web/inc/i18n/nl.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/inc/i18n/nl.php b/web/inc/i18n/nl.php
index 40274f5f..fc86a88b 100644
--- a/web/inc/i18n/nl.php
+++ b/web/inc/i18n/nl.php
@@ -16,6 +16,7 @@ $LANG['nl'] = array(
     'Services'  => 'Processen',
     'Firewall' => 'Firewall',
     'Updates'  => 'Updates',
+    'Apps' => 'Applicaties',
     'Log in'  => 'Inloggen',
     'Log out'  => 'Uitloggen',
 

From c80c4c472e61bc3f5ded1c47df1fecb5f48ffd01 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 16 May 2018 17:23:04 +0300
Subject: [PATCH 0111/2300] Additional rXSS fix / closes #1558

---
 web/view/file/index.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/view/file/index.php b/web/view/file/index.php
index aed9523d..e3e77249 100644
--- a/web/view/file/index.php
+++ b/web/view/file/index.php
@@ -13,10 +13,10 @@ if (($_SESSION['user'] == 'admin') && (!empty($_SESSION['look']))) {
 }
 
 if (!empty($_REQUEST['path'])) {
-    $path = $_REQUEST['path'];
+    $path = htmlspecialchars($_REQUEST['path'], ENT_QUOTES, 'UTF-8');
     if (!empty($_REQUEST['raw'])) {
         header('content-type: image/jpeg');
-        passthru (VESTA_CMD . "v-open-fs-file " . $user . " " . escapeshellarg(htmlspecialchars($_REQUEST['path'], ENT_QUOTES, 'UTF-8')));
+        passthru (VESTA_CMD . "v-open-fs-file " . $user . " " . escapeshellarg($path));
         exit;
     }
 }

From 3aadf37a82ffd0f883abd541af20c8601fa57e23 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 17 May 2018 18:27:28 +0300
Subject: [PATCH 0112/2300] Temporary fix for CentOS Vault issue

---
 install/vst-install-rhel.sh | 19 +++++++++++--------
 1 file changed, 11 insertions(+), 8 deletions(-)

diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index 1ba55cdf..436517b1 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -636,14 +636,17 @@ fi
 #----------------------------------------------------------#
 
 # Installing rpm packages
-if [ "$remi" = 'yes' ]; then
-    yum -y --disablerepo=* \
-        --enablerepo="*base,*updates,nginx,epel,vesta,remi*" \
-        install $software
-else
-    yum -y --disablerepo=* --enablerepo="*base,*updates,nginx,epel,vesta" \
-        install $software
-fi
+#if [ "$remi" = 'yes' ]; then
+#    yum -y --disablerepo=* \
+#        --enablerepo="*base,*updates,nginx,epel,vesta,remi*" \
+#        install $software
+#else
+#    yum -y --disablerepo=* --enablerepo="*base,*updates,nginx,epel,vesta" \
+#        install $software
+#fi
+
+# Temporary fix for centos vault issue
+yum install $software
 check_result $? "yum install failed"
 
 

From 4a545b875694b2c9606228b7e8297138dc0c2125 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 19 May 2018 22:31:46 +0200
Subject: [PATCH 0113/2300] logo to link /list/user/

---
 web/templates/file_manager/main.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/file_manager/main.php b/web/templates/file_manager/main.php
index e3427bb7..99398d75 100644
--- a/web/templates/file_manager/main.php
+++ b/web/templates/file_manager/main.php
@@ -21,7 +21,7 @@
 
     <div id="main">
         <div class="window active">
-            <a href="/" class="l-logo"></a>
+            <a href="/list/user/" class="l-logo"></a>
             <div class="pwd pwd-tab-A"></div>
             <div class="menu menu-left menu-A">
                 <?php $pre_tab = 'A';include($_SERVER['DOCUMENT_ROOT'].'/templates/file_manager/tab_menu.php'); ?>

From 11e32db4b67ba6ee87bea9b7493bbfcddee6f6df Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 19 May 2018 22:39:21 +0200
Subject: [PATCH 0114/2300] Logo to link /list/user/

---
 web/templates/admin/list_server_info.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_server_info.html b/web/templates/admin/list_server_info.html
index 53dc2185..748c940e 100644
--- a/web/templates/admin/list_server_info.html
+++ b/web/templates/admin/list_server_info.html
@@ -18,7 +18,7 @@
   </a>
   <div class="l-header">
     <div class="l-center">
-      <a href="/" class="l-logo"></a>
+      <a href="/list/user/" class="l-logo"></a>
       <!-- /.l-logo -->
       <div class="l-menu clearfix">
         <div class="l-menu__item <?php if(isset($_GET['cpu'])) echo 'l-menu__item--active' ?>"><a href="/list/server/?cpu"><?=__('CPU')?></a></div>

From 37c69b8f4cd087d8d406ab3de766ad11564b978b Mon Sep 17 00:00:00 2001
From: Marcos <marcos@raiolanetworks.es>
Date: Mon, 21 May 2018 03:41:46 +0200
Subject: [PATCH 0115/2300] Don't exclude "logs" folder recursively

---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index cc28a1c8..a68778f2 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -229,7 +229,7 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
 
         # Backup files
         cd $HOMEDIR/$user/web/$domain
-        tar -cpf- * ${fargs[@]} |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
+        tar --anchored -cpf- * ${fargs[@]} |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
     done
 
     # Print total

From 85b3578f9cebb9b7b8196791eed8af1f20892bbe Mon Sep 17 00:00:00 2001
From: Marcos <marcos@raiolanetworks.es>
Date: Mon, 21 May 2018 03:55:05 +0200
Subject: [PATCH 0116/2300] Fix rebuild for some user names

---
 bin/v-rebuild-web-domains | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-rebuild-web-domains b/bin/v-rebuild-web-domains
index d28a943d..2094d19c 100755
--- a/bin/v-rebuild-web-domains
+++ b/bin/v-rebuild-web-domains
@@ -37,7 +37,7 @@ is_object_unsuspended 'user' 'USER' "$user"
 #----------------------------------------------------------#
 
 # Deleting old web configs
-sed -i "/.*\/$user\//d" /etc/$WEB_SYSTEM/conf.d/vesta.conf
+sed -i "/.*\/$user\/conf\/web\//d" /etc/$WEB_SYSTEM/conf.d/vesta.conf
 if [ -e "$HOMEDIR/$user/conf/web/$WEB_SYSTEM.conf"  ]; then
     rm $HOMEDIR/$user/conf/web/$WEB_SYSTEM.conf
 fi
@@ -47,7 +47,7 @@ fi
 
 # Deleting old proxy configs
 if [ ! -z "$PROXY_SYSTEM" ]; then
-    sed -i "/.*\/$user\//d" /etc/$PROXY_SYSTEM/conf.d/vesta.conf
+    sed -i "/.*\/$user\/conf\/web\//d" /etc/$PROXY_SYSTEM/conf.d/vesta.conf
 
     if [ -e "$HOMEDIR/$user/conf/web/$PROXY_SYSTEM.conf" ]; then
         rm $HOMEDIR/$user/conf/web/$PROXY_SYSTEM.conf

From 0f48ec04f0a8432979b6319f2b7451915fd08d02 Mon Sep 17 00:00:00 2001
From: Marcos <marcos@raiolanetworks.es>
Date: Mon, 21 May 2018 03:59:55 +0200
Subject: [PATCH 0117/2300] Do not allow {tab} on a domain name

---
 func/main.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index e11ba6b3..be626702 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -532,7 +532,7 @@ is_user_format_valid() {
 is_domain_format_valid() {
     object_name=${2-domain}
     exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|_|/|\|\"|'|;|%|\`| ]"
-    if [[ $1 =~ $exclude ]] || [[ $1 =~ ^[0-9]+$ ]] || [[ $1 =~ "\.\." ]]; then
+    if [[ $1 =~ $exclude ]] || [[ $1 =~ ^[0-9]+$ ]] || [[ $1 =~ "\.\." ]] || [[ $1 =~ "$(printf '\t')" ]]; then
         check_result $E_INVALID "invalid $object_name format :: $1"
     fi
 }

From a5e093da168ec4bd2f7f59649807619f420bba90 Mon Sep 17 00:00:00 2001
From: Marcos <marcos@raiolanetworks.es>
Date: Mon, 21 May 2018 04:03:26 +0200
Subject: [PATCH 0118/2300] Apps translation

---
 web/inc/i18n/es.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/inc/i18n/es.php b/web/inc/i18n/es.php
index d9b9f5fb..1f2c36dd 100644
--- a/web/inc/i18n/es.php
+++ b/web/inc/i18n/es.php
@@ -21,6 +21,7 @@ $LANG['es'] = array(
     'Services'  => 'Servicios',
     'Firewall' => 'Cortafuegos',
     'Updates'  => 'Actualizaciones',
+    'Apps'  => 'Aplicaciones',
     'Log in'  => 'Iniciar Sesión',
     'Log out'  => 'Salir',
 

From ed1ad943cf84ab70ba9bf0ba1116e9a41d3e2d3d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 25 May 2018 17:21:03 +0200
Subject: [PATCH 0119/2300] Centos6 roundcube password driver typo fix

---
 install/rhel/6/roundcube/vesta.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/rhel/6/roundcube/vesta.php b/install/rhel/6/roundcube/vesta.php
index fee26078..1e9523a5 100644
--- a/install/rhel/6/roundcube/vesta.php
+++ b/install/rhel/6/roundcube/vesta.php
@@ -48,7 +48,7 @@ class rcube_vesta_password
         $context = stream_context_create();
 
         $result = stream_context_set_option($context, 'ssl', 'verify_peer', false);
-        result = stream_context_set_option($context, 'ssl', 'verify_peer_name', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer_name', false);
         $result = stream_context_set_option($context, 'ssl', 'verify_host', false);
         $result = stream_context_set_option($context, 'ssl', 'allow_self_signed', true);
 

From 04a55260cae5f2eac68931f1f9f4043351f47d7a Mon Sep 17 00:00:00 2001
From: Marcos <marcos@raiolanetworks.es>
Date: Sat, 26 May 2018 20:14:47 +0200
Subject: [PATCH 0120/2300] Fix delete domain

---
 func/domain.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/func/domain.sh b/func/domain.sh
index c21a38a6..cc66aecb 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -269,7 +269,7 @@ replace_web_config() {
     fi
 }
 
-# Delete web configuartion
+# Delete web configuration
 del_web_config() {
     conf="$HOMEDIR/$user/conf/web/$domain.$1.conf"
     if [[ "$2" =~ stpl$ ]]; then
@@ -291,7 +291,7 @@ del_web_config() {
     # clean-up for both config styles if there is no more domains
     web_domain=$(grep DOMAIN $USER_DATA/web.conf |wc -l)
     if [ "$web_domain" -eq '0' ]; then
-        sed -i "/.*\/$user\/.*/d" /etc/$1/conf.d/vesta.conf
+        sed -i "/.*\/$user\/conf\/web\//d" /etc/$1/conf.d/vesta.conf
         if [ -f "$conf" ]; then
             rm -f $conf
         fi

From b143792750299e83e78569544dd3d62c3bfe8541 Mon Sep 17 00:00:00 2001
From: Marcos <marcos@raiolanetworks.es>
Date: Tue, 29 May 2018 20:01:29 +0200
Subject: [PATCH 0121/2300] Adding and removing includes when
 suspending/unsuspending DNS zones

---
 bin/v-suspend-dns-domain   | 10 ++++++++++
 bin/v-unsuspend-dns-domain | 14 ++++++++++++++
 2 files changed, 24 insertions(+)

diff --git a/bin/v-suspend-dns-domain b/bin/v-suspend-dns-domain
index b42e2e99..bfe30f0b 100755
--- a/bin/v-suspend-dns-domain
+++ b/bin/v-suspend-dns-domain
@@ -41,6 +41,16 @@ is_object_unsuspended 'dns' 'DOMAIN' "$domain"
 #                       Action                             #
 #----------------------------------------------------------#
 
+# Deleting system configs
+if [[ "$DNS_SYSTEM" =~ named|bind ]]; then
+    if [ -e '/etc/named.conf' ]; then
+        dns_conf='/etc/named.conf'
+    else
+        dns_conf='/etc/bind/named.conf'
+    fi
+
+    sed -i "/\/$user\/conf\/dns\/$domain.db\"/d" $dns_conf
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #
diff --git a/bin/v-unsuspend-dns-domain b/bin/v-unsuspend-dns-domain
index bc8de6ee..38008d2f 100755
--- a/bin/v-unsuspend-dns-domain
+++ b/bin/v-unsuspend-dns-domain
@@ -40,7 +40,21 @@ is_object_suspended 'dns' 'DOMAIN' "$domain"
 #                       Action                             #
 #----------------------------------------------------------#
 
+# Creating system configs
+if [[ "$DNS_SYSTEM" =~ named|bind ]]; then
+    if [ -e '/etc/named.conf' ]; then
+        dns_conf='/etc/named.conf'
+        dns_group='named'
+    else
+        dns_conf='/etc/bind/named.conf'
+        dns_group='bind'
+    fi
 
+    # Adding zone in named.conf
+    named="zone \"$domain_idn\" {type master; file"
+    named="$named \"$HOMEDIR/$user/conf/dns/$domain.db\";};"
+    echo "$named" >> $dns_conf
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From b2649fd3cc47c54ba1824ecece2b2e05514dcb82 Mon Sep 17 00:00:00 2001
From: Marcos <marcos@raiolanetworks.es>
Date: Tue, 29 May 2018 23:42:58 +0200
Subject: [PATCH 0122/2300] Fix Adding alias DNS from web panel

---
 bin/v-add-dns-on-web-alias | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-dns-on-web-alias b/bin/v-add-dns-on-web-alias
index cc587483..a6a7272c 100755
--- a/bin/v-add-dns-on-web-alias
+++ b/bin/v-add-dns-on-web-alias
@@ -50,12 +50,12 @@ domain_lvl=$(echo "$alias" |grep -o "\." |wc -l)
 # Adding second level domain
 if [ "$domain_lvl" -eq 1 ] || [ "${#top_domain}" -le '6' ]; then
     $BIN/v-add-dns-domain \
-        $user $alias $ip '' '' '' '' '' $restart >> /dev/null
+        $user $alias $ip '' '' '' '' '' '' '' '' $restart >> /dev/null
     exit
 fi
 
 # Adding top-level domain and then its sub
-$BIN/v-add-dns-domain $user $top_domain $ip '' '' '' '' $restart >> /dev/null
+$BIN/v-add-dns-domain $user $top_domain $ip '' '' '' '' '' $restart >> /dev/null
 
 # Checking top-level domain
 if [ ! -e "$USER_DATA/dns/$top_domain.conf" ]; then

From 4401d706a449fe94443ea6c179fc18f43cc73183 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 31 May 2018 15:56:34 +0300
Subject: [PATCH 0123/2300] Amazon Linux Support

---
 install/vst-install-amazon.sh | 1379 +++++++++++++++++++++++++++++++++
 install/vst-install.sh        |    1 +
 2 files changed, 1380 insertions(+)
 create mode 100644 install/vst-install-amazon.sh

diff --git a/install/vst-install-amazon.sh b/install/vst-install-amazon.sh
new file mode 100644
index 00000000..e57b26cc
--- /dev/null
+++ b/install/vst-install-amazon.sh
@@ -0,0 +1,1379 @@
+#!/bin/bash
+
+# Vesta Amazon installer v.05
+
+#----------------------------------------------------------#
+#                  Variables&Functions                     #
+#----------------------------------------------------------#
+export PATH=$PATH:/sbin
+RHOST='r.vestacp.com'
+CHOST='c.vestacp.com'
+REPO='cmmnt'
+VERSION='rhel'
+VESTA='/usr/local/vesta'
+memory=$(grep 'MemTotal' /proc/meminfo |tr ' ' '\n' |grep [0-9])
+arch=$(uname -i)
+os='rhel'
+release='6'
+codename="${os}_$release"
+vestacp="$VESTA/install/$VERSION/$release"
+
+software="nginx httpd mod_ssl mod_ruid2 mod_fcgid mod_extract_forwarded
+    php php-common php-cli php-bcmath php-gd php-imap php-mbstring php-mcrypt
+    php-mysql php-pdo php-soap php-tidy php-xml php-xmlrpc php-fpm php-pgsql
+    awstats webalizer vsftpd proftpd bind bind-utils bind-libs exim dovecot
+    clamd spamassassin mysql mysql-server phpMyAdmin postgresql
+    postgresql-server postgresql-contrib phpPgAdmin e2fsprogs openssh-clients
+    ImageMagick curl mc screen ftp zip unzip flex sqlite pcre sudo bc jwhois
+    mailx lsof tar telnet rrdtool net-tools ntp GeoIP freetype fail2ban
+    which vesta vesta-nginx vesta-php vim-common expect vesta-ioncube
+    vesta-softaculous"
+
+# Defining help function
+help() {
+    echo "Usage: $0 [OPTIONS]
+  -a, --apache            Install Apache        [yes|no]  default: yes
+  -n, --nginx             Install Nginx         [yes|no]  default: yes
+  -w, --phpfpm            Install PHP-FPM       [yes|no]  default: no
+  -v, --vsftpd            Install Vsftpd        [yes|no]  default: yes
+  -j, --proftpd           Install ProFTPD       [yes|no]  default: no
+  -k, --named             Install Bind          [yes|no]  default: yes
+  -m, --mysql             Install MySQL         [yes|no]  default: yes
+  -g, --postgresql        Install PostgreSQL    [yes|no]  default: no
+  -d, --mongodb           Install MongoDB       [yes|no]  unsupported
+  -x, --exim              Install Exim          [yes|no]  default: yes
+  -z, --dovecot           Install Dovecot       [yes|no]  default: yes
+  -c, --clamav            Install ClamAV        [yes|no]  default: yes
+  -t, --spamassassin      Install SpamAssassin  [yes|no]  default: yes
+  -i, --iptables          Install Iptables      [yes|no]  default: yes
+  -b, --fail2ban          Install Fail2ban      [yes|no]  default: yes
+  -r, --remi              Install Remi repo     [yes|no]  default: yes
+  -o, --softaculous       Install Softaculous   [yes|no]  default: yes
+  -q, --quota             Filesystem Quota      [yes|no]  default: no
+  -l, --lang              Default language                default: en
+  -y, --interactive       Interactive install   [yes|no]  default: yes
+  -s, --hostname          Set hostname
+  -e, --email             Set admin email
+  -p, --password          Set admin password
+  -f, --force             Force installation
+  -h, --help              Print this help
+
+  Example: bash $0 -e demo@vestacp.com -p p4ssw0rd --apache no --phpfpm yes"
+    exit 1
+}
+
+# Defining password-gen function
+gen_pass() {
+    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
+    LENGTH=10
+    while [ ${n:=1} -le $LENGTH ]; do
+        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
+        let n+=1
+    done
+    echo "$PASS"
+}
+
+# Defining return code check function
+check_result() {
+    if [ $1 -ne 0 ]; then
+        echo "Error: $2"
+        exit $1
+    fi
+}
+
+# Defining function to set default value
+set_default_value() {
+    eval variable=\$$1
+    if [ -z "$variable" ]; then
+        eval $1=$2
+    fi
+    if [ "$variable" != 'yes' ] && [ "$variable" != 'no' ]; then
+        eval $1=$2
+    fi
+}
+
+# Define function to set default language value
+set_default_lang() {
+    if [ -z "$lang" ]; then
+        eval lang=$1
+    fi
+    lang_list="
+        ar cz el fa hu ja no pt se ua
+        bs da en fi id ka pl ro tr vi
+        cn de es fr it nl pt-BR ru tw
+        bg ko sr th ur"
+    if !(echo $lang_list |grep -w $lang 1>&2>/dev/null); then
+        eval lang=$1
+    fi
+}
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+# Creating temporary file
+tmpfile=$(mktemp -p /tmp)
+
+# Translating argument to --gnu-long-options
+for arg; do
+    delim=""
+    case "$arg" in
+        --apache)               args="${args}-a " ;;
+        --nginx)                args="${args}-n " ;;
+        --phpfpm)               args="${args}-w " ;;
+        --vsftpd)               args="${args}-v " ;;
+        --proftpd)              args="${args}-j " ;;
+        --named)                args="${args}-k " ;;
+        --mysql)                args="${args}-m " ;;
+        --postgresql)           args="${args}-g " ;;
+        --mongodb)              args="${args}-d " ;;
+        --exim)                 args="${args}-x " ;;
+        --dovecot)              args="${args}-z " ;;
+        --clamav)               args="${args}-c " ;;
+        --spamassassin)         args="${args}-t " ;;
+        --iptables)             args="${args}-i " ;;
+        --fail2ban)             args="${args}-b " ;;
+        --remi)                 args="${args}-r " ;;
+        --softaculous)          args="${args}-o " ;;
+        --quota)                args="${args}-q " ;;
+        --lang)                 args="${args}-l " ;;
+        --interactive)          args="${args}-y " ;;
+        --hostname)             args="${args}-s " ;;
+        --email)                args="${args}-e " ;;
+        --password)             args="${args}-p " ;;
+        --force)                args="${args}-f " ;;
+        --help)                 args="${args}-h " ;;
+        *)                      [[ "${arg:0:1}" == "-" ]] || delim="\""
+                                args="${args}${delim}${arg}${delim} ";;
+    esac
+done
+eval set -- "$args"
+
+# Parsing arguments
+while getopts "a:n:w:v:j:k:m:g:d:x:z:c:t:i:b:r:o:q:l:y:s:e:p:fh" Option; do
+    case $Option in
+        a) apache=$OPTARG ;;            # Apache
+        n) nginx=$OPTARG ;;             # Nginx
+        w) phpfpm=$OPTARG ;;            # PHP-FPM
+        v) vsftpd=$OPTARG ;;            # Vsftpd
+        j) proftpd=$OPTARG ;;           # Proftpd
+        k) named=$OPTARG ;;             # Named
+        m) mysql=$OPTARG ;;             # MySQL
+        g) postgresql=$OPTARG ;;        # PostgreSQL
+        d) mongodb=$OPTARG ;;           # MongoDB (unsupported)
+        x) exim=$OPTARG ;;              # Exim
+        z) dovecot=$OPTARG ;;           # Dovecot
+        c) clamd=$OPTARG ;;             # ClamAV
+        t) spamd=$OPTARG ;;             # SpamAssassin
+        i) iptables=$OPTARG ;;          # Iptables
+        b) fail2ban=$OPTARG ;;          # Fail2ban
+        r) remi=$OPTARG ;;              # Remi repo
+        o) softaculous=$OPTARG ;;       # Softaculous plugin
+        q) quota=$OPTARG ;;             # FS Quota
+        l) lang=$OPTARG ;;              # Language
+        y) interactive=$OPTARG ;;       # Interactive install
+        s) servername=$OPTARG ;;        # Hostname
+        e) email=$OPTARG ;;             # Admin email
+        p) vpass=$OPTARG ;;             # Admin password
+        f) force='yes' ;;               # Force install
+        h) help ;;                      # Help
+        *) help ;;                      # Print help (default)
+    esac
+done
+
+# Defining default software stack
+set_default_value 'nginx' 'yes'
+set_default_value 'apache' 'yes'
+set_default_value 'phpfpm' 'no'
+set_default_value 'vsftpd' 'yes'
+set_default_value 'proftpd' 'no'
+set_default_value 'named' 'yes'
+set_default_value 'mysql' 'yes'
+set_default_value 'postgresql' 'no'
+set_default_value 'mongodb' 'no'
+set_default_value 'exim' 'yes'
+set_default_value 'dovecot' 'yes'
+if [ $memory -lt 1500000 ]; then
+    set_default_value 'clamd' 'no'
+    set_default_value 'spamd' 'no'
+else
+    set_default_value 'clamd' 'yes'
+    set_default_value 'spamd' 'yes'
+fi
+set_default_value 'iptables' 'yes'
+set_default_value 'fail2ban' 'yes'
+set_default_value 'remi' 'yes'
+set_default_value 'softaculous' 'yes'
+set_default_value 'quota' 'no'
+set_default_value 'interactive' 'yes'
+set_default_lang 'en'
+
+# Checking software conflicts
+if [ "$phpfpm" = 'yes' ]; then
+    apache='no'
+    nginx='yes'
+fi
+if [ "$proftpd" = 'yes' ]; then
+    vsftpd='no'
+fi
+if [ "$exim" = 'no' ]; then
+    clamd='no'
+    spamd='no'
+    dovecot='no'
+fi
+if [ "$iptables" = 'no' ]; then
+    fail2ban='no'
+fi
+
+
+# Checking root permissions
+if [ "x$(id -u)" != 'x0' ]; then
+    check_result 1 "Script can be run executed only by root"
+fi
+
+# Checking admin user account
+if [ ! -z "$(grep ^admin: /etc/passwd /etc/group)" ] && [ -z "$force" ]; then
+    echo 'Please remove admin user account before proceeding.'
+    echo 'If you want to do it automatically run installer with -f option:'
+    echo -e "Example: bash $0 --force\n"
+    check_result 1 "User admin exists"
+fi
+
+# Checking wget
+if [ ! -e '/usr/bin/wget' ]; then
+    yum -y install wget
+    check_result $? "Can't install wget"
+fi
+
+# Checking repository availability
+wget -q "http://c.vestacp.com/GPG.txt" -O /dev/null
+check_result $? "No access to Vesta repository"
+
+# Checking installed packages
+rpm -qa > $tmpfile
+for pkg in exim mysql-server httpd nginx vesta; do
+    if [ ! -z "$(grep $pkg $tmpfile)" ]; then
+        conflicts="$pkg $conflicts"
+    fi
+done
+if [ ! -z "$conflicts" ] && [ -z "$force" ]; then
+    echo '!!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!!'
+    echo
+    echo 'Following packages are already installed:'
+    echo "$conflicts"
+    echo
+    echo 'It is highly recommended to remove them before proceeding.'
+    echo 'If you want to force installation run this script with -f option:'
+    echo "Example: bash $0 --force"
+    echo
+    echo '!!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!!'
+    echo
+    check_result 1 "Control Panel should be installed on clean server."
+fi
+
+
+#----------------------------------------------------------#
+#                       Brief Info                         #
+#----------------------------------------------------------#
+
+# Printing nice ascii as logo
+clear
+echo
+echo ' _|      _|  _|_|_|_|    _|_|_|  _|_|_|_|_|    _|_|'
+echo ' _|      _|  _|        _|            _|      _|    _|'
+echo ' _|      _|  _|_|_|      _|_|        _|      _|_|_|_|'
+echo '   _|  _|    _|              _|      _|      _|    _|'
+echo '     _|      _|_|_|_|  _|_|_|        _|      _|    _|'
+echo
+echo '                                  Vesta Control Panel'
+echo -e "\n\n"
+
+echo 'Following software will be installed on your system:'
+
+# Web stack
+if [ "$nginx" = 'yes' ]; then
+    echo '   - Nginx Web Server'
+fi
+if [ "$apache" = 'yes' ] && [ "$nginx" = 'no' ] ; then
+    echo '   - Apache Web Server'
+fi
+if [ "$apache" = 'yes' ] && [ "$nginx"  = 'yes' ] ; then
+    echo '   - Apache Web Server (as backend)'
+fi
+if [ "$phpfpm"  = 'yes' ]; then
+    echo '   - PHP-FPM Application Server'
+fi
+
+# DNS stack
+if [ "$named" = 'yes' ]; then
+    echo '   - Bind DNS Server'
+fi
+
+# Mail Stack
+if [ "$exim" = 'yes' ]; then
+    echo -n '   - Exim mail server'
+    if [ "$clamd" = 'yes'  ] ||  [ "$spamd" = 'yes' ] ; then
+        echo -n ' + '
+        if [ "$clamd" = 'yes' ]; then
+            echo -n 'Antivirus '
+        fi
+        if [ "$spamd" = 'yes' ]; then
+            echo -n 'Antispam'
+        fi
+    fi
+    echo
+    if [ "$dovecot" = 'yes' ]; then
+        echo '   - Dovecot POP3/IMAP Server'
+    fi
+fi
+
+# DB stack
+if [ "$mysql" = 'yes' ]; then
+    if [ $release = 7 ]; then
+        echo '   - MariaDB Database Server'
+    else
+        echo '   - MySQL Database Server'
+    fi
+fi
+if [ "$postgresql" = 'yes' ]; then
+    echo '   - PostgreSQL Database Server'
+fi
+if [ "$mongodb" = 'yes' ]; then
+    echo '   - MongoDB Database Server'
+fi
+
+# FTP stack
+if [ "$vsftpd" = 'yes' ]; then
+    echo '   - Vsftpd FTP Server'
+fi
+if [ "$proftpd" = 'yes' ]; then
+    echo '   - ProFTPD FTP Server'
+fi
+
+# Softaculous
+if [ "$softaculous" = 'yes' ]; then
+    echo '   - Softaculous Plugin'
+fi
+
+# Firewall stack
+if [ "$iptables" = 'yes' ]; then
+    echo -n '   - Iptables Firewall'
+fi
+if [ "$iptables" = 'yes' ] && [ "$fail2ban" = 'yes' ]; then
+    echo -n ' + Fail2Ban'
+fi
+echo -e "\n\n"
+
+# Asking for confirmation to proceed
+if [ "$interactive" = 'yes' ]; then
+    read -p 'Would you like to continue [y/n]: ' answer
+    if [ "$answer" != 'y' ] && [ "$answer" != 'Y'  ]; then
+        echo 'Goodbye'
+        exit 1
+    fi
+
+    # Asking for contact email
+    if [ -z "$email" ]; then
+        read -p 'Please enter admin email address: ' email
+    fi
+
+    # Asking to set FQDN hostname
+    if [ -z "$servername" ]; then
+        read -p "Please enter FQDN hostname [$(hostname)]: " servername
+    fi
+fi
+
+# Generating admin password if it wasn't set
+if [ -z "$vpass" ]; then
+    vpass=$(gen_pass)
+fi
+
+# Set hostname if it wasn't set
+if [ -z "$servername" ]; then
+    servername=$(hostname -f)
+fi
+
+# Set FQDN if it wasn't set
+mask1='(([[:alnum:]](-?[[:alnum:]])*)\.)'
+mask2='*[[:alnum:]](-?[[:alnum:]])+\.[[:alnum:]]{2,}'
+if ! [[ "$servername" =~ ^${mask1}${mask2}$ ]]; then
+    if [ ! -z "$servername" ]; then
+        servername="$servername.example.com"
+    else
+        servername="example.com"
+    fi
+    echo "127.0.0.1 $servername" >> /etc/hosts
+fi
+
+# Set email if it wasn't set
+if [ -z "$email" ]; then
+    email="admin@$servername"
+fi
+
+# Defining backup directory
+vst_backups="/root/vst_install_backups/$(date +%s)"
+echo "Installation backup directory: $vst_backups"
+
+# Printing start message and sleeping for 5 seconds
+echo -e "\n\n\n\nInstallation will take about 15 minutes ...\n"
+sleep 5
+
+
+#----------------------------------------------------------#
+#                      Checking swap                       #
+#----------------------------------------------------------#
+
+# Checking swap on small instances
+if [ -z "$(swapon -s)" ] && [ $memory -lt 1000000 ]; then
+    fallocate -l 1G /swapfile
+    chmod 600 /swapfile
+    mkswap /swapfile
+    swapon /swapfile
+    echo "/swapfile   none    swap    sw    0   0" >> /etc/fstab
+fi
+
+
+#----------------------------------------------------------#
+#                  Install repositories                    #
+#----------------------------------------------------------#
+
+# Updating system packages
+yum -y update
+check_result $? 'yum update failed'
+
+# Enabling EPEL repository
+sed "1,10s/enabled=0/enabled=1/" -i /etc/yum.repos.d/epel.repo
+yum -y update
+check_result $? "Can't install EPEL repository"
+
+# Installing Nginx repository
+nrepo="/etc/yum.repos.d/nginx.repo"
+echo "[nginx]" > $nrepo
+echo "name=nginx repo" >> $nrepo
+echo "baseurl=http://nginx.org/packages/centos/$release/\$basearch/" >> $nrepo
+echo "gpgcheck=0" >> $nrepo
+echo "enabled=1" >> $nrepo
+
+# Installing Vesta repository
+vrepo='/etc/yum.repos.d/vesta.repo'
+echo "[vesta]" > $vrepo
+echo "name=Vesta - $REPO" >> $vrepo
+echo "baseurl=http://$RHOST/$REPO/$release/\$basearch/" >> $vrepo
+echo "enabled=1" >> $vrepo
+echo "gpgcheck=1" >> $vrepo
+echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-VESTA" >> $vrepo
+wget http://c.vestacp.com/GPG.txt -O /etc/pki/rpm-gpg/RPM-GPG-KEY-VESTA
+
+
+#----------------------------------------------------------#
+#                         Backup                           #
+#----------------------------------------------------------#
+
+# Creating backup directory tree
+mkdir -p $vst_backups
+cd $vst_backups
+mkdir nginx httpd php php-fpm vsftpd proftpd named exim dovecot clamd \
+    spamassassin mysql postgresql mongodb vesta
+
+# Backing up Nginx configuration
+service nginx stop > /dev/null 2>&1
+cp -r /etc/nginx/* $vst_backups/nginx > /dev/null 2>&1
+
+# Backing up Apache configuration
+service httpd stop > /dev/null 2>&1
+cp -r /etc/httpd/* $vst_backups/httpd > /dev/null 2>&1
+
+# Backing up PHP configuration
+service php-fpm stop >/dev/null 2>&1
+cp /etc/php.ini $vst_backups/php > /dev/null 2>&1
+cp -r /etc/php.d  $vst_backups/php > /dev/null 2>&1
+cp /etc/php-fpm.conf $vst_backups/php-fpm > /dev/null 2>&1
+mv -f /etc/php-fpm.d/* $vst_backups/php-fpm/ > /dev/null 2>&1
+
+# Backing up Bind configuration
+yum remove bind-chroot > /dev/null 2>&1
+service named stop > /dev/null 2>&1
+cp /etc/named.conf $vst_backups/named >/dev/null 2>&1
+
+# Backing up Vsftpd configuration
+service vsftpd stop > /dev/null 2>&1
+cp /etc/vsftpd/vsftpd.conf $vst_backups/vsftpd >/dev/null 2>&1
+
+# Backing up ProFTPD configuration
+service proftpd stop > /dev/null 2>&1
+cp /etc/proftpd.conf $vst_backups/proftpd >/dev/null 2>&1
+
+# Backing up Exim configuration
+service exim stop > /dev/null 2>&1
+cp -r /etc/exim/* $vst_backups/exim >/dev/null 2>&1
+
+# Backing up ClamAV configuration
+service clamd stop > /dev/null 2>&1
+cp /etc/clamd.conf $vst_backups/clamd >/dev/null 2>&1
+cp -r /etc/clamd.d $vst_backups/clamd >/dev/null 2>&1
+
+# Backing up SpamAssassin configuration
+service spamassassin stop > /dev/null 2>&1
+cp -r /etc/mail/spamassassin/* $vst_backups/spamassassin >/dev/null 2>&1
+
+# Backing up Dovecot configuration
+service dovecot stop > /dev/null 2>&1
+cp /etc/dovecot.conf $vst_backups/dovecot > /dev/null 2>&1
+cp -r /etc/dovecot/* $vst_backups/dovecot > /dev/null 2>&1
+
+# Backing up MySQL/MariaDB configuration and data
+service mysql stop > /dev/null 2>&1
+service mysqld stop > /dev/null 2>&1
+service mariadb stop > /dev/null 2>&1
+mv /var/lib/mysql $vst_backups/mysql/mysql_datadir >/dev/null 2>&1
+cp /etc/my.cnf $vst_backups/mysql > /dev/null 2>&1
+cp /etc/my.cnf.d $vst_backups/mysql > /dev/null 2>&1
+mv /root/.my.cnf  $vst_backups/mysql > /dev/null 2>&1
+
+# Backing up MySQL/MariaDB configuration and data
+service postgresql stop > /dev/null 2>&1
+mv /var/lib/pgsql/data $vst_backups/postgresql/  >/dev/null 2>&1
+
+# Backing up Vesta configuration and data
+service vesta stop > /dev/null 2>&1
+mv $VESTA/data/* $vst_backups/vesta > /dev/null 2>&1
+mv $VESTA/conf/* $vst_backups/vesta > /dev/null 2>&1
+
+
+#----------------------------------------------------------#
+#                     Package Exludes                      #
+#----------------------------------------------------------#
+
+# Excluding packages
+if [ "$nginx" = 'no'  ]; then
+    software=$(echo "$software" | sed -e "s/^nginx//")
+fi
+if [ "$apache" = 'no' ]; then
+    software=$(echo "$software" | sed -e "s/httpd//")
+    software=$(echo "$software" | sed -e "s/mod_ssl//")
+    software=$(echo "$software" | sed -e "s/mod_fcgid//")
+    software=$(echo "$software" | sed -e "s/mod_ruid2//")
+fi
+if [ "$phpfpm" = 'no' ]; then
+    software=$(echo "$software" | sed -e "s/php-fpm//")
+fi
+if [ "$vsftpd" = 'no' ]; then
+    software=$(echo "$software" | sed -e "s/vsftpd//")
+fi
+if [ "$proftpd" = 'no' ]; then
+    software=$(echo "$software" | sed -e "s/proftpd//")
+fi
+if [ "$named" = 'no' ]; then
+    software=$(echo "$software" | sed -e "s/bind //")
+fi
+if [ "$exim" = 'no' ]; then
+    software=$(echo "$software" | sed -e "s/exim//")
+    software=$(echo "$software" | sed -e "s/dovecot//")
+    software=$(echo "$software" | sed -e "s/clamd//")
+    software=$(echo "$software" | sed -e "s/clamav-server//")
+    software=$(echo "$software" | sed -e "s/clamav-update//")
+    software=$(echo "$software" | sed -e "s/spamassassin//")
+    software=$(echo "$software" | sed -e "s/dovecot//")
+    software=$(echo "$software" | sed -e "s/roundcubemail//")
+fi
+if [ "$clamd" = 'no' ]; then
+    software=$(echo "$software" | sed -e "s/clamd//")
+    software=$(echo "$software" | sed -e "s/clamav-server//")
+    software=$(echo "$software" | sed -e "s/clamav-update//")
+fi
+if [ "$spamd" = 'no' ]; then
+    software=$(echo "$software" | sed -e 's/spamassassin//')
+fi
+if [ "$dovecot" = 'no' ]; then
+    software=$(echo "$software" | sed -e "s/dovecot//")
+fi
+if [ "$mysql" = 'no' ]; then
+    software=$(echo "$software" | sed -e 's/mysql //')
+    software=$(echo "$software" | sed -e 's/mysql-server//')
+    software=$(echo "$software" | sed -e 's/mariadb //')
+    software=$(echo "$software" | sed -e 's/mariadb-server//')
+    software=$(echo "$software" | sed -e 's/php-mysql//')
+    software=$(echo "$software" | sed -e 's/phpMyAdmin//')
+    software=$(echo "$software" | sed -e 's/roundcubemail//')
+fi
+if [ "$postgresql" = 'no' ]; then
+    software=$(echo "$software" | sed -e 's/postgresql //')
+    software=$(echo "$software" | sed -e 's/postgresql-server//')
+    software=$(echo "$software" | sed -e 's/postgresql-contrib//')
+    software=$(echo "$software" | sed -e 's/php-pgsql//')
+    software=$(echo "$software" | sed -e 's/phpPgAdmin//')
+fi
+if [ "$softaculous" = 'no' ]; then
+    software=$(echo "$software" | sed -e 's/vesta-softaculous//')
+fi
+if [ "$iptables" = 'no' ] || [ "$fail2ban" = 'no' ]; then
+    software=$(echo "$software" | sed -e 's/fail2ban//')
+fi
+
+
+#----------------------------------------------------------#
+#                     Install packages                     #
+#----------------------------------------------------------#
+
+# Installing rpm packages
+yum -y install $software
+check_result $? "yum install failed"
+
+# Installing roundcube
+if [ "$exim" != 'no' ]; then
+    yum -y install --exclude=php-pear-Auth-SASL-0:1.0.4-1.2.amzn1.noarch \
+        --exclude=php5\* --exclude=httpd24\* roundcubemail
+    check_result $? "yum install failed"
+fi
+
+
+#----------------------------------------------------------#
+#                     Configure system                     #
+#----------------------------------------------------------#
+
+# Restarting rsyslog
+service rsyslog restart > /dev/null 2>&1
+
+# Checking ipv6 on loopback interface
+check_lo_ipv6=$(/sbin/ip addr | grep 'inet6')
+check_rc_ipv6=$(grep 'scope global dev lo' /etc/rc.local)
+if [ ! -z "$check_lo_ipv6)" ] && [ -z "$check_rc_ipv6" ]; then
+    ip addr add ::2/128 scope global dev lo
+    echo "# Vesta: Workraround for openssl validation func" >> /etc/rc.local
+    echo "ip addr add ::2/128 scope global dev lo" >> /etc/rc.local
+    chmod a+x /etc/rc.local
+fi
+
+# Disabling SELinux
+if [ -e '/etc/sysconfig/selinux' ]; then
+    sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/sysconfig/selinux
+    sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config
+    setenforce 0 2>/dev/null
+fi
+
+# Disable iptables
+service iptables stop
+
+# Configuring NTP synchronization
+echo '#!/bin/sh' > /etc/cron.daily/ntpdate
+echo "$(which ntpdate) -s pool.ntp.org" >> /etc/cron.daily/ntpdate
+chmod 775 /etc/cron.daily/ntpdate
+ntpdate -s pool.ntp.org
+
+# Disabling webalizer routine
+rm -f /etc/cron.daily/00webalizer
+
+# Adding backup user
+adduser backup 2>/dev/null
+ln -sf /home/backup /backup
+chmod a+x /backup
+
+# Chaning default directory color
+echo 'LS_COLORS="$LS_COLORS:di=00;33"' >> /etc/profile
+
+# Changing default systemd interval
+if [ "$release" -eq '7' ]; then
+    # Hi Lennart
+    echo "DefaultStartLimitInterval=1s" >> /etc/systemd/system.conf
+    echo "DefaultStartLimitBurst=60" >> /etc/systemd/system.conf
+    systemctl daemon-reexec
+fi
+
+
+#----------------------------------------------------------#
+#                     Configure VESTA                      #
+#----------------------------------------------------------#
+
+# Downlading sudo configuration
+mkdir -p /etc/sudoers.d
+cp -f $vestacp/sudo/admin /etc/sudoers.d/
+chmod 440 /etc/sudoers.d/admin
+
+# Configuring system env
+echo "export VESTA='$VESTA'" > /etc/profile.d/vesta.sh
+chmod 755 /etc/profile.d/vesta.sh
+source /etc/profile.d/vesta.sh
+echo 'PATH=$PATH:'$VESTA'/bin' >> /root/.bash_profile
+echo 'export PATH' >> /root/.bash_profile
+source /root/.bash_profile
+
+# Configuring logrotate for vesta logs
+cp -f $vestacp/logrotate/vesta /etc/logrotate.d/
+
+# Buidling directory tree and creating some blank files for vesta
+mkdir -p $VESTA/conf $VESTA/log $VESTA/ssl $VESTA/data/ips \
+    $VESTA/data/queue $VESTA/data/users $VESTA/data/firewall \
+    $VESTA/data/sessions
+touch $VESTA/data/queue/backup.pipe $VESTA/data/queue/disk.pipe \
+    $VESTA/data/queue/webstats.pipe $VESTA/data/queue/restart.pipe \
+    $VESTA/data/queue/traffic.pipe $VESTA/log/system.log \
+    $VESTA/log/nginx-error.log $VESTA/log/auth.log
+chmod 750 $VESTA/conf $VESTA/data/users $VESTA/data/ips $VESTA/log
+chmod -R 750 $VESTA/data/queue
+chmod 660 $VESTA/log/*
+rm -f /var/log/vesta
+ln -s $VESTA/log /var/log/vesta
+chmod 770 $VESTA/data/sessions
+
+# Generating vesta configuration
+rm -f $VESTA/conf/vesta.conf 2>/dev/null
+touch $VESTA/conf/vesta.conf
+chmod 660 $VESTA/conf/vesta.conf
+
+# WEB stack
+if [ "$apache" = 'yes' ] && [ "$nginx" = 'no' ] ; then
+    echo "WEB_SYSTEM='httpd'" >> $VESTA/conf/vesta.conf
+    echo "WEB_RGROUPS='apache'" >> $VESTA/conf/vesta.conf
+    echo "WEB_PORT='80'" >> $VESTA/conf/vesta.conf
+    echo "WEB_SSL_PORT='443'" >> $VESTA/conf/vesta.conf
+    echo "WEB_SSL='mod_ssl'"  >> $VESTA/conf/vesta.conf
+    echo "STATS_SYSTEM='webalizer,awstats'" >> $VESTA/conf/vesta.conf
+fi
+if [ "$apache" = 'yes' ] && [ "$nginx"  = 'yes' ] ; then
+    echo "WEB_SYSTEM='httpd'" >> $VESTA/conf/vesta.conf
+    echo "WEB_RGROUPS='apache'" >> $VESTA/conf/vesta.conf
+    echo "WEB_PORT='8080'" >> $VESTA/conf/vesta.conf
+    echo "WEB_SSL_PORT='8443'" >> $VESTA/conf/vesta.conf
+    echo "WEB_SSL='mod_ssl'"  >> $VESTA/conf/vesta.conf
+    echo "PROXY_SYSTEM='nginx'" >> $VESTA/conf/vesta.conf
+    echo "PROXY_PORT='80'" >> $VESTA/conf/vesta.conf
+    echo "PROXY_SSL_PORT='443'" >> $VESTA/conf/vesta.conf
+    echo "STATS_SYSTEM='webalizer,awstats'" >> $VESTA/conf/vesta.conf
+fi
+if [ "$apache" = 'no' ] && [ "$nginx"  = 'yes' ]; then
+    echo "WEB_SYSTEM='nginx'" >> $VESTA/conf/vesta.conf
+    echo "WEB_PORT='80'" >> $VESTA/conf/vesta.conf
+    echo "WEB_SSL_PORT='443'" >> $VESTA/conf/vesta.conf
+    echo "WEB_SSL='openssl'"  >> $VESTA/conf/vesta.conf
+    if [ "$phpfpm" = 'yes' ]; then
+        echo "WEB_BACKEND='php-fpm'" >> $VESTA/conf/vesta.conf
+    fi
+    echo "STATS_SYSTEM='webalizer,awstats'" >> $VESTA/conf/vesta.conf
+fi
+
+# FTP stack
+if [ "$vsftpd" = 'yes' ]; then
+    echo "FTP_SYSTEM='vsftpd'" >> $VESTA/conf/vesta.conf
+fi
+if [ "$proftpd" = 'yes' ]; then
+    echo "FTP_SYSTEM='proftpd'" >> $VESTA/conf/vesta.conf
+fi
+
+# DNS stack
+if [ "$named" = 'yes' ]; then
+    echo "DNS_SYSTEM='named'" >> $VESTA/conf/vesta.conf
+fi
+
+# Mail stack
+if [ "$exim" = 'yes' ]; then
+    echo "MAIL_SYSTEM='exim'" >> $VESTA/conf/vesta.conf
+    if [ "$clamd" = 'yes'  ]; then
+        echo "ANTIVIRUS_SYSTEM='clamav'" >> $VESTA/conf/vesta.conf
+    fi
+    if [ "$spamd" = 'yes' ]; then
+        echo "ANTISPAM_SYSTEM='spamassassin'" >> $VESTA/conf/vesta.conf
+    fi
+    if [ "$dovecot" = 'yes' ]; then
+        echo "IMAP_SYSTEM='dovecot'" >> $VESTA/conf/vesta.conf
+    fi
+fi
+
+# CRON daemon
+echo "CRON_SYSTEM='crond'" >> $VESTA/conf/vesta.conf
+
+# Firewall stack
+if [ "$iptables" = 'yes' ]; then
+    echo "FIREWALL_SYSTEM='iptables'" >> $VESTA/conf/vesta.conf
+fi
+if [ "$iptables" = 'yes' ] && [ "$fail2ban" = 'yes' ]; then
+    echo "FIREWALL_EXTENSION='fail2ban'" >> $VESTA/conf/vesta.conf
+fi
+
+# Disk quota
+if [ "$quota" = 'yes' ]; then
+    echo "DISK_QUOTA='yes'" >> $VESTA/conf/vesta.conf
+fi
+
+# Backups
+echo "BACKUP_SYSTEM='local'" >> $VESTA/conf/vesta.conf
+
+# Language
+echo "LANGUAGE='$lang'" >> $VESTA/conf/vesta.conf
+
+# Version
+echo "VERSION='0.9.8'" >> $VESTA/conf/vesta.conf
+
+# Installing hosting packages
+cp -rf $vestacp/packages $VESTA/data/
+
+# Installing templates
+cp -rf $vestacp/templates $VESTA/data/
+
+# Copying index.html to default documentroot
+cp $VESTA/data/templates/web/skel/public_html/index.html /var/www/html/
+sed -i 's/%domain%/It worked!/g' /var/www/html/index.html
+
+# Installing firewall rules
+chkconfig firewalld off >/dev/null 2>&1
+cp -rf $vestacp/firewall $VESTA/data/
+
+# Configuring server hostname
+$VESTA/bin/v-change-sys-hostname $servername 2>/dev/null
+
+# Generating SSL certificate
+$VESTA/bin/v-generate-ssl-cert $(hostname) $email 'US' 'California' \
+     'San Francisco' 'Vesta Control Panel' 'IT' > /tmp/vst.pem
+
+# Parsing certificate file
+crt_end=$(grep -n "END CERTIFICATE-" /tmp/vst.pem |cut -f 1 -d:)
+key_start=$(grep -n "BEGIN RSA" /tmp/vst.pem |cut -f 1 -d:)
+key_end=$(grep -n  "END RSA" /tmp/vst.pem |cut -f 1 -d:)
+
+# Adding SSL certificate
+cd $VESTA/ssl
+sed -n "1,${crt_end}p" /tmp/vst.pem > certificate.crt
+sed -n "$key_start,${key_end}p" /tmp/vst.pem > certificate.key
+chown root:mail $VESTA/ssl/*
+chmod 660 $VESTA/ssl/*
+chmod u+s /usr/bin/find
+rm /tmp/vst.pem
+
+
+#----------------------------------------------------------#
+#                     Configure Nginx                      #
+#----------------------------------------------------------#
+
+if [ "$nginx" = 'yes' ]; then
+    rm -f /etc/nginx/conf.d/*.conf
+    cp -f $vestacp/nginx/nginx.conf /etc/nginx/
+    cp -f $vestacp/nginx/status.conf /etc/nginx/conf.d/
+    cp -f $vestacp/nginx/phpmyadmin.inc /etc/nginx/conf.d/
+    cp -f $vestacp/nginx/phppgadmin.inc /etc/nginx/conf.d/
+    cp -f $vestacp/nginx/webmail.inc /etc/nginx/conf.d/
+    cp -f $vestacp/logrotate/nginx /etc/logrotate.d/
+    echo > /etc/nginx/conf.d/vesta.conf
+    mkdir -p /var/log/nginx/domains
+    if [ "$release" -eq 7 ]; then
+        mkdir /etc/systemd/system/nginx.service.d
+        cd /etc/systemd/system/nginx.service.d
+        echo "[Service]" > limits.conf
+        echo "LimitNOFILE=500000" >> limits.conf
+    fi
+    chkconfig nginx on
+    service nginx start
+    check_result $? "nginx start failed"
+
+    # Workaround for OpenVZ/Virtuozzo
+    if [ "$release" -eq '7' ] && [ -e "/proc/vz/veinfo" ]; then
+        echo "#Vesta: workraround for networkmanager" >> /etc/rc.local
+        echo "sleep 3 && service nginx restart" >> /etc/rc.local
+    fi
+fi
+
+
+#----------------------------------------------------------#
+#                    Configure Apache                      #
+#----------------------------------------------------------#
+
+if [ "$apache" = 'yes'  ]; then
+    cp -f $vestacp/httpd/httpd.conf /etc/httpd/conf/
+    cp -f $vestacp/httpd/status.conf /etc/httpd/conf.d/
+    cp -f $vestacp/httpd/ssl.conf /etc/httpd/conf.d/
+    cp -f $vestacp/httpd/ruid2.conf /etc/httpd/conf.d/
+    cp -f $vestacp/logrotate/httpd /etc/logrotate.d/
+    if [ $release -ne 7 ]; then
+        echo "MEFaccept 127.0.0.1" >> /etc/httpd/conf.d/mod_extract*.conf
+        echo > /etc/httpd/conf.d/proxy_ajp.conf
+    fi
+    if [ -e "conf.modules.d/00-dav.conf" ]; then
+        cd /etc/httpd/conf.modules.d
+        sed -i "s/^/#/" 00-dav.conf 00-lua.conf 00-proxy.conf
+    fi
+    echo > /etc/httpd/conf.d/vesta.conf
+    cd /var/log/httpd
+    touch access_log error_log suexec.log
+    chmod 640 access_log error_log suexec.log
+    chmod -f 777 /var/lib/php/session
+    chmod a+x /var/log/httpd
+    mkdir -p /var/log/httpd/domains
+    chmod 751 /var/log/httpd/domains
+    if [ "$release" -eq 7 ]; then
+        mkdir /etc/systemd/system/httpd.service.d
+        cd /etc/systemd/system/httpd.service.d
+        echo "[Service]" > limits.conf
+        echo "LimitNOFILE=500000" >> limits.conf
+    fi
+    chkconfig httpd on
+    service httpd start
+    check_result $? "httpd start failed"
+
+    # Workaround for OpenVZ/Virtuozzo
+    if [ "$release" -eq '7' ] && [ -e "/proc/vz/veinfo" ]; then
+        echo "#Vesta: workraround for networkmanager" >> /etc/rc.local
+        echo "sleep 2 && service httpd restart" >> /etc/rc.local
+    fi
+fi
+
+
+#----------------------------------------------------------#
+#                     Configure PHP-FPM                    #
+#----------------------------------------------------------#
+
+if [ "$phpfpm" = 'yes' ]; then
+    cp -f $vestacp/php-fpm/www.conf /etc/php-fpm.d/
+    chkconfig php-fpm on
+    service php-fpm start
+    check_result $? "php-fpm start failed"
+fi
+
+
+#----------------------------------------------------------#
+#                     Configure PHP                        #
+#----------------------------------------------------------#
+
+ZONE=$(timedatectl 2>/dev/null|grep Timezone|awk '{print $2}')
+if [ -e '/etc/sysconfig/clock' ]; then
+    source /etc/sysconfig/clock
+fi
+if [ -z "$ZONE" ]; then
+    ZONE='UTC'
+fi
+for pconf in $(find /etc/php* -name php.ini); do
+    sed -i "s/;date.timezone =/date.timezone = $ZONE/g" $pconf
+    sed -i 's%_open_tag = Off%_open_tag = On%g' $pconf
+done
+
+
+#----------------------------------------------------------#
+#                    Configure VSFTPD                      #
+#----------------------------------------------------------#
+
+if [ "$vsftpd" = 'yes' ]; then
+    cp -f $vestacp/vsftpd/vsftpd.conf /etc/vsftpd/
+    chkconfig vsftpd on
+    service vsftpd start
+    check_result $? "vsftpd start failed"
+
+    # To be deleted after release 0.9.8-18
+    echo "/sbin/nologin" >> /etc/shells
+fi
+
+
+#----------------------------------------------------------#
+#                    Configure ProFTPD                     #
+#----------------------------------------------------------#
+
+if [ "$proftpd" = 'yes' ]; then
+    cp -f $vestacp/proftpd/proftpd.conf /etc/
+    chkconfig proftpd on
+    service proftpd start
+    check_result $? "proftpd start failed"
+fi
+
+
+#----------------------------------------------------------#
+#                  Configure MySQL/MariaDB                 #
+#----------------------------------------------------------#
+
+if [ "$mysql" = 'yes' ]; then
+
+    mycnf="my-small.cnf"
+    if [ $memory -gt 1200000 ]; then
+        mycnf="my-medium.cnf"
+    fi
+    if [ $memory -gt 3900000 ]; then
+        mycnf="my-large.cnf"
+    fi
+
+    mkdir -p /var/lib/mysql
+    chown mysql:mysql /var/lib/mysql
+    mkdir -p /etc/my.cnf.d
+
+    if [ $release -ne 7 ]; then
+        service='mysqld'
+    else
+        service='mariadb'
+    fi
+
+    cp -f $vestacp/$service/$mycnf /etc/
+    chkconfig $service on
+    service $service start
+    if [ "$?" -ne 0 ]; then
+        if [ -e "/proc/user_beancounters" ]; then
+            # Fix for aio on OpenVZ
+            sed -i "s/#innodb_use_native/innodb_use_native/g" /etc/my.cnf
+        fi
+        service $service start
+        check_result $? "$service start failed"
+    fi
+
+    # Securing MySQL installation
+    mysqladmin -u root password $vpass
+    echo -e "[client]\npassword='$vpass'\n" > /root/.my.cnf
+    chmod 600 /root/.my.cnf
+    mysql -e "DELETE FROM mysql.user WHERE User=''"
+    mysql -e "DROP DATABASE test" >/dev/null 2>&1
+    mysql -e "DELETE FROM mysql.db WHERE Db='test' OR Db='test\\_%'"
+    mysql -e "DELETE FROM mysql.user WHERE user='' or password='';"
+    mysql -e "FLUSH PRIVILEGES"
+
+    # Configuring phpMyAdmin
+    if [ "$apache" = 'yes' ]; then
+        cp -f $vestacp/pma/phpMyAdmin.conf /etc/httpd/conf.d/
+    fi
+    cp -f $vestacp/pma/config.inc.conf /etc/phpMyAdmin/config.inc.php
+    sed -i "s/%blowfish_secret%/$(gen_pass)/g" /etc/phpMyAdmin/config.inc.php
+fi
+
+
+#----------------------------------------------------------#
+#                   Configure PostgreSQL                   #
+#----------------------------------------------------------#
+
+if [ "$postgresql" = 'yes' ]; then
+    if [ $release = 5 ]; then
+        service postgresql start
+        sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$vpass'"
+        service postgresql stop
+        cp -f $vestacp/postgresql/pg_hba.conf /var/lib/pgsql/data/
+        service postgresql start
+    else
+        service postgresql initdb
+        cp -f $vestacp/postgresql/pg_hba.conf /var/lib/pgsql/data/
+        service postgresql start
+        sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$vpass'"
+    fi
+    # Configuring phpPgAdmin
+    if [ "$apache" = 'yes' ]; then
+        cp -f $vestacp/pga/phpPgAdmin.conf /etc/httpd/conf.d/
+    fi
+    cp -f $vestacp/pga/config.inc.php /etc/phpPgAdmin/
+fi
+
+
+#----------------------------------------------------------#
+#                      Configure Bind                      #
+#----------------------------------------------------------#
+
+if [ "$named" = 'yes' ]; then
+    cp -f $vestacp/named/named.conf /etc/
+    chown root:named /etc/named.conf
+    chmod 640 /etc/named.conf
+    chkconfig named on
+    service named start
+    check_result $? "named start failed"
+fi
+
+
+#----------------------------------------------------------#
+#                      Configure Exim                      #
+#----------------------------------------------------------#
+
+if [ "$exim" = 'yes' ]; then
+    gpasswd -a exim mail
+    cp -f $vestacp/exim/exim.conf /etc/exim/
+    cp -f $vestacp/exim/dnsbl.conf /etc/exim/
+    cp -f $vestacp/exim/spam-blocks.conf /etc/exim/
+    touch /etc/exim/white-blocks.conf
+
+    if [ "$spamd" = 'yes' ]; then
+        sed -i "s/#SPAM/SPAM/g" /etc/exim/exim.conf
+    fi
+    if [ "$clamd" = 'yes' ]; then
+        sed -i "s/#CLAMD/CLAMD/g" /etc/exim/exim.conf
+    fi
+
+    chmod 640 /etc/exim/exim.conf
+    rm -rf /etc/exim/domains
+    mkdir -p /etc/exim/domains
+
+    rm -f /etc/alternatives/mta
+    ln -s /usr/sbin/sendmail.exim /etc/alternatives/mta
+    chkconfig sendmail off 2>/dev/null
+    service sendmail stop 2>/dev/null
+    chkconfig postfix off 2>/dev/null
+    service postfix stop 2>/dev/null
+
+    chkconfig exim on
+    service exim start
+    check_result $? "exim start failed"
+fi
+
+
+#----------------------------------------------------------#
+#                     Configure Dovecot                    #
+#----------------------------------------------------------#
+
+if [ "$dovecot" = 'yes' ]; then
+    gpasswd -a dovecot mail
+    cp -rf $vestacp/dovecot /etc/
+    cp -f $vestacp/logrotate/dovecot /etc/logrotate.d/
+    chown -R root:root /etc/dovecot*
+    chkconfig dovecot on
+    service dovecot start
+    check_result $? "dovecot start failed"
+fi
+
+
+#----------------------------------------------------------#
+#                     Configure ClamAV                     #
+#----------------------------------------------------------#
+
+if [ "$clamd" = 'yes' ]; then
+    useradd clam -s /sbin/nologin -d /var/lib/clamav 2>/dev/null
+    gpasswd -a clam exim
+    gpasswd -a clam mail
+    cp -f $vestacp/clamav/clamd.conf /etc/
+    cp -f $vestacp/clamav/freshclam.conf /etc/
+    mkdir -p /var/log/clamav
+    mkdir -p /var/run/clamav
+    chown clam:clam /var/log/clamav /var/run/clamav
+    chown -R clam:clam /var/lib/clamav
+    if [ "$release" -eq '7' ]; then
+        cp -f $vestacp/clamav/clamd.service /usr/lib/systemd/system/
+        systemctl --system daemon-reload
+    fi
+    /usr/bin/freshclam
+    if [ "$release" -eq '7' ]; then
+        sed -i "s/nofork/foreground/" /usr/lib/systemd/system/clamd.service
+        systemctl daemon-reload
+    fi
+    chkconfig clamd on
+    service clamd start
+    #check_result $? "clamd start failed"
+fi
+
+
+#----------------------------------------------------------#
+#                  Configure SpamAssassin                  #
+#----------------------------------------------------------#
+
+if [ "$spamd" = 'yes' ]; then
+    chkconfig spamassassin on
+    service spamassassin start
+    check_result $? "spamassassin start failed"
+    if [ "$release" -eq '7' ]; then
+        groupadd -g 1001 spamd
+        useradd -u 1001 -g spamd -s /sbin/nologin -d \
+            /var/lib/spamassassin spamd
+        mkdir /var/lib/spamassassin
+        chown spamd:spamd /var/lib/spamassassin
+    fi
+fi
+
+
+#----------------------------------------------------------#
+#                   Configure RoundCube                    #
+#----------------------------------------------------------#
+
+if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
+    if [ "$apache" = 'yes' ]; then
+        cp -f $vestacp/roundcube/roundcubemail.conf /etc/httpd/conf.d/
+    fi
+    cp -f $vestacp/roundcube/main.inc.php /etc/roundcubemail/config.inc.php
+    cd /usr/share/roundcubemail/plugins/password
+    cp -f $vestacp/roundcube/vesta.php drivers/vesta.php
+    cp -f $vestacp/roundcube/config.inc.php config.inc.php
+    sed -i "s/localhost/$servername/g" config.inc.php
+    chmod a+r /etc/roundcubemail/*
+    chmod -f 777 /var/log/roundcubemail
+    r="$(gen_pass)"
+    mysql -e "CREATE DATABASE roundcube"
+    mysql -e "GRANT ALL ON roundcube.* TO 
+            roundcube@localhost IDENTIFIED BY '$r'"
+    sed -i "s/%password%/$r/g" /etc/roundcubemail/config.inc.php
+    chmod 640 /etc/roundcubemail/config.inc.php
+    chown root:apache /etc/roundcubemail/config.inc.php
+    if [ -e "/usr/share/roundcubemail/SQL/mysql.initial.sql" ]; then
+        mysql roundcube < /usr/share/roundcubemail/SQL/mysql.initial.sql
+    else
+        mysql roundcube < /usr/share/doc/roundcubemail-*/SQL/mysql.initial.sql
+    fi
+fi
+
+
+#----------------------------------------------------------#
+#                    Configure Fail2Ban                    #
+#----------------------------------------------------------#
+
+if [ "$fail2ban" = 'yes' ]; then
+    cp -rf $vestacp/fail2ban /etc/
+    if [ "$dovecot" = 'no' ]; then
+        fline=$(cat /etc/fail2ban/jail.local |grep -n dovecot-iptables -A 2)
+        fline=$(echo "$fline" |grep enabled |tail -n1 |cut -f 1 -d -)
+        sed -i "${fline}s/true/false/" /etc/fail2ban/jail.local
+    fi
+    if [ "$exim" = 'no' ]; then
+        fline=$(cat /etc/fail2ban/jail.local |grep -n exim-iptables -A 2)
+        fline=$(echo "$fline" |grep enabled |tail -n1 |cut -f 1 -d -)
+        sed -i "${fline}s/true/false/" /etc/fail2ban/jail.local
+    fi
+    if [ "$vsftpd" = 'yes' ]; then
+        #Create vsftpd Log File
+        if [ ! -f "/var/log/vsftpd.log" ]; then
+            touch /var/log/vsftpd.log
+        fi
+        fline=$(cat /etc/fail2ban/jail.local |grep -n vsftpd-iptables -A 2)
+        fline=$(echo "$fline" |grep enabled |tail -n1 |cut -f 1 -d -)
+        sed -i "${fline}s/false/true/" /etc/fail2ban/jail.local
+    fi 
+    chkconfig fail2ban on
+    /bin/mkdir -p /var/run/fail2ban
+    if [ -e "/usr/lib/systemd/system/fail2ban.service" ]; then
+        exec_pre='ExecStartPre=/bin/mkdir -p /var/run/fail2ban'
+        sed -i "s|\[Service\]|[Service]\n$exec_pre|g" \
+            /usr/lib/systemd/system/fail2ban.service
+        systemctl daemon-reload
+    fi
+    service fail2ban start
+    check_result $? "fail2ban start failed"
+fi
+
+
+#----------------------------------------------------------#
+#                   Configure Admin User                   #
+#----------------------------------------------------------#
+
+# Deleting old admin user
+if [ ! -z "$(grep ^admin: /etc/passwd)" ] && [ "$force" = 'yes' ]; then
+    chattr -i /home/admin/conf > /dev/null 2>&1
+    userdel -f admin >/dev/null 2>&1
+    chattr -i /home/admin/conf >/dev/null 2>&1
+    mv -f /home/admin  $vst_backups/home/ >/dev/null 2>&1
+    rm -f /tmp/sess_* >/dev/null 2>&1
+fi
+if [ ! -z "$(grep ^admin: /etc/group)" ] && [ "$force" = 'yes' ]; then
+    groupdel admin > /dev/null 2>&1
+fi
+
+# Adding vesta account
+$VESTA/bin/v-add-user admin $vpass $email default System Administrator
+check_result $? "can't create admin user"
+$VESTA/bin/v-change-user-shell admin bash
+$VESTA/bin/v-change-user-language admin $lang
+
+# Configuring system ips
+$VESTA/bin/v-update-sys-ip
+
+# Get main ip
+ip=$(ip addr|grep 'inet '|grep global|head -n1|awk '{print $2}'|cut -f1 -d/)
+
+# Firewall configuration
+if [ "$iptables" = 'yes' ]; then
+    $VESTA/bin/v-update-firewall
+fi
+
+# Get public ip
+pub_ip=$(curl -s vestacp.com/what-is-my-ip/)
+if [ ! -z "$pub_ip" ] && [ "$pub_ip" != "$ip" ]; then
+    echo "$VESTA/bin/v-update-sys-ip" >> /etc/rc.local
+    $VESTA/bin/v-change-sys-ip-nat $ip $pub_ip
+    ip=$pub_ip
+fi
+
+# Configuring mysql host
+if [ "$mysql" = 'yes' ]; then
+    $VESTA/bin/v-add-database-host mysql localhost root $vpass
+    $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
+fi
+
+# Configuring pgsql host
+if [ "$postgresql" = 'yes' ]; then
+    $VESTA/bin/v-add-database-host pgsql localhost postgres $vpass
+    $VESTA/bin/v-add-database admin db db $(gen_pass) pgsql
+fi
+
+# Adding default domain
+$VESTA/bin/v-add-domain admin $servername
+check_result $? "can't create $servername domain"
+
+command="sudo $VESTA/bin/v-update-sys-queue disk"
+$VESTA/bin/v-add-cron-job 'admin' '15' '02' '*' '*' '*' "$command"
+command="sudo $VESTA/bin/v-update-sys-queue traffic"
+$VESTA/bin/v-add-cron-job 'admin' '10' '00' '*' '*' '*' "$command"
+command="sudo $VESTA/bin/v-update-sys-queue webstats"
+$VESTA/bin/v-add-cron-job 'admin' '30' '03' '*' '*' '*' "$command"
+command="sudo $VESTA/bin/v-update-sys-queue backup"
+$VESTA/bin/v-add-cron-job 'admin' '*/5' '*' '*' '*' '*' "$command"
+command="sudo $VESTA/bin/v-backup-users"
+$VESTA/bin/v-add-cron-job 'admin' '10' '05' '*' '*' '*' "$command"
+command="sudo $VESTA/bin/v-update-user-stats"
+$VESTA/bin/v-add-cron-job 'admin' '20' '00' '*' '*' '*' "$command"
+command="sudo $VESTA/bin/v-update-sys-rrd"
+$VESTA/bin/v-add-cron-job 'admin' '*/5' '*' '*' '*' '*' "$command"
+service crond restart
+
+# Building initial rrd images
+$VESTA/bin/v-update-sys-rrd
+
+# Enabling file system quota
+if [ "$quota" = 'yes' ]; then
+    $VESTA/bin/v-add-sys-quota
+fi
+
+# Enabling softaculous plugin
+if [ "$softaculous" = 'yes' ]; then
+    $VESTA/bin/v-add-vesta-softaculous
+fi
+
+# Starting vesta service
+chkconfig vesta on
+service vesta start
+check_result $? "vesta start failed"
+chown admin:admin $VESTA/data/sessions
+
+# Adding notifications
+$VESTA/upd/add_notifications.sh
+
+# Adding cronjob for autoupdates
+$VESTA/bin/v-add-cron-vesta-autoupdate
+
+
+#----------------------------------------------------------#
+#                   Vesta Access Info                      #
+#----------------------------------------------------------#
+
+# Sending install notification to vestacp.com
+wget vestacp.com/notify/?$codename -O /dev/null -q
+
+# Comparing hostname and ip
+host_ip=$(host $servername |head -n 1 |awk '{print $NF}')
+if [ "$host_ip" = "$ip" ]; then
+    ip="$servername"
+fi
+
+# Sending notification to admin email
+echo -e "Congratulations, you have just successfully installed \
+Vesta Control Panel
+
+    https://$ip:8083
+    username: admin
+    password: $vpass
+
+We hope that you enjoy your installation of Vesta. Please \
+feel free to contact us anytime if you have any questions.
+Thank you.
+
+--
+Sincerely yours
+vestacp.com team
+" > $tmpfile
+
+send_mail="$VESTA/web/inc/mail-wrapper.php"
+cat $tmpfile | $send_mail -s "Vesta Control Panel" $email
+
+# Congrats
+echo '======================================================='
+echo
+echo ' _|      _|  _|_|_|_|    _|_|_|  _|_|_|_|_|    _|_|   '
+echo ' _|      _|  _|        _|            _|      _|    _| '
+echo ' _|      _|  _|_|_|      _|_|        _|      _|_|_|_| '
+echo '   _|  _|    _|              _|      _|      _|    _| '
+echo '     _|      _|_|_|_|  _|_|_|        _|      _|    _| '
+echo
+echo
+cat $tmpfile
+rm -f $tmpfile
+
+# EOF
diff --git a/install/vst-install.sh b/install/vst-install.sh
index 5589db79..40dd5025 100755
--- a/install/vst-install.sh
+++ b/install/vst-install.sh
@@ -41,6 +41,7 @@ fi
 case $(head -n1 /etc/issue | cut -f 1 -d ' ') in
     Debian)     type="debian" ;;
     Ubuntu)     type="ubuntu" ;;
+    Amazon)     type="amazon" ;;
     *)          type="rhel" ;;
 esac
 

From 4a3cec1290f59de2e2360b5018d59a8c3257c47c Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 31 May 2018 16:01:46 +0300
Subject: [PATCH 0124/2300] default configs for ubuntu releases

---
 install/ubuntu/17.04/apache2/apache2.conf     |  94 ++
 install/ubuntu/17.04/apache2/status.conf      |   8 +
 install/ubuntu/17.04/bind/named.conf          |  12 +
 install/ubuntu/17.04/clamav/clamd.conf        |  61 ++
 install/ubuntu/17.04/deb_signing.key          |  30 +
 .../ubuntu/17.04/dovecot/conf.d/10-auth.conf  |   4 +
 .../17.04/dovecot/conf.d/10-logging.conf      |   1 +
 .../ubuntu/17.04/dovecot/conf.d/10-mail.conf  |   4 +
 .../17.04/dovecot/conf.d/10-master.conf       |  29 +
 .../ubuntu/17.04/dovecot/conf.d/10-ssl.conf   |   5 +
 .../ubuntu/17.04/dovecot/conf.d/20-imap.conf  |  58 ++
 .../ubuntu/17.04/dovecot/conf.d/20-pop3.conf  |  91 ++
 .../dovecot/conf.d/auth-passwdfile.conf.ext   |   9 +
 install/ubuntu/17.04/dovecot/dovecot.conf     |  24 +
 install/ubuntu/17.04/exim/dnsbl.conf          |   2 +
 install/ubuntu/17.04/exim/exim4.conf.template | 382 ++++++++
 install/ubuntu/17.04/exim/spam-blocks.conf    |   0
 .../ubuntu/17.04/fail2ban/action.d/vesta.conf |   9 +
 .../ubuntu/17.04/fail2ban/filter.d/vesta.conf |  10 +
 install/ubuntu/17.04/fail2ban/jail.local      |  51 ++
 install/ubuntu/17.04/firewall/ports.conf      |  17 +
 install/ubuntu/17.04/firewall/rules.conf      |  11 +
 install/ubuntu/17.04/logrotate/apache2        |  19 +
 install/ubuntu/17.04/logrotate/dovecot        |  12 +
 install/ubuntu/17.04/logrotate/nginx          |  13 +
 install/ubuntu/17.04/logrotate/vesta          |   7 +
 install/ubuntu/17.04/mysql/my-large.cnf       |  41 +
 install/ubuntu/17.04/mysql/my-medium.cnf      |  40 +
 install/ubuntu/17.04/mysql/my-small.cnf       |  40 +
 install/ubuntu/17.04/nginx/nginx.conf         | 136 +++
 install/ubuntu/17.04/nginx/phpmyadmin.inc     |  18 +
 install/ubuntu/17.04/nginx/phppgadmin.inc     |  11 +
 install/ubuntu/17.04/nginx/status.conf        |   9 +
 install/ubuntu/17.04/nginx/webmail.inc        |  15 +
 install/ubuntu/17.04/packages/default.pkg     |  18 +
 install/ubuntu/17.04/packages/gainsboro.pkg   |  18 +
 install/ubuntu/17.04/packages/palegreen.pkg   |  18 +
 install/ubuntu/17.04/packages/slategrey.pkg   |  18 +
 install/ubuntu/17.04/pga/config.inc.php       | 159 ++++
 install/ubuntu/17.04/pga/phppgadmin.conf      |  31 +
 install/ubuntu/17.04/php-fpm/www.conf         |  11 +
 install/ubuntu/17.04/pma/apache.conf          |  42 +
 install/ubuntu/17.04/pma/config.inc.php       | 146 +++
 install/ubuntu/17.04/postgresql/pg_hba.conf   |  11 +
 install/ubuntu/17.04/proftpd/proftpd.conf     |  32 +
 install/ubuntu/17.04/roundcube/apache.conf    |  40 +
 install/ubuntu/17.04/roundcube/config.inc.php |  33 +
 install/ubuntu/17.04/roundcube/db.inc.php     |  66 ++
 install/ubuntu/17.04/roundcube/main.inc.php   | 850 ++++++++++++++++++
 install/ubuntu/17.04/roundcube/vesta.php      |  71 ++
 install/ubuntu/17.04/sudo/admin               |   8 +
 .../ubuntu/17.04/templates/dns/child-ns.tpl   |  14 +
 .../ubuntu/17.04/templates/dns/default.tpl    |  18 +
 install/ubuntu/17.04/templates/dns/gmail.tpl  |  12 +
 .../17.04/templates/web/apache2/basedir.stpl  |  44 +
 .../17.04/templates/web/apache2/basedir.tpl   |  38 +
 .../17.04/templates/web/apache2/default.stpl  |  43 +
 .../17.04/templates/web/apache2/default.tpl   |  37 +
 .../17.04/templates/web/apache2/hosting.stpl  |  49 +
 .../17.04/templates/web/apache2/hosting.tpl   |  43 +
 .../17.04/templates/web/apache2/phpcgi.sh     |  16 +
 .../17.04/templates/web/apache2/phpcgi.stpl   |  38 +
 .../17.04/templates/web/apache2/phpcgi.tpl    |  31 +
 .../17.04/templates/web/apache2/phpfcgid.sh   |  22 +
 .../17.04/templates/web/apache2/phpfcgid.stpl |  39 +
 .../17.04/templates/web/apache2/phpfcgid.tpl  |  31 +
 .../17.04/templates/web/awstats/awstats.tpl   | 133 +++
 .../17.04/templates/web/awstats/index.tpl     |  10 +
 .../17.04/templates/web/awstats/nav.tpl       |  23 +
 .../17.04/templates/web/nginx/caching.sh      |  19 +
 .../17.04/templates/web/nginx/caching.stpl    |  44 +
 .../17.04/templates/web/nginx/caching.tpl     |  41 +
 .../17.04/templates/web/nginx/default.stpl    |  36 +
 .../17.04/templates/web/nginx/default.tpl     |  33 +
 .../17.04/templates/web/nginx/hosting.sh      |  11 +
 .../17.04/templates/web/nginx/hosting.stpl    |  38 +
 .../17.04/templates/web/nginx/hosting.tpl     |  35 +
 .../17.04/templates/web/nginx/http2.stpl      |  36 +
 .../17.04/templates/web/nginx/http2.tpl       |  33 +
 .../web/nginx/php-fpm/cms_made_simple.stpl    |  56 ++
 .../web/nginx/php-fpm/cms_made_simple.tpl     |  52 ++
 .../web/nginx/php-fpm/codeigniter2.stpl       |  61 ++
 .../web/nginx/php-fpm/codeigniter2.tpl        |  57 ++
 .../web/nginx/php-fpm/codeigniter3.stpl       |  56 ++
 .../web/nginx/php-fpm/codeigniter3.tpl        |  52 ++
 .../web/nginx/php-fpm/datalife_engine.stpl    | 127 +++
 .../web/nginx/php-fpm/datalife_engine.tpl     | 123 +++
 .../templates/web/nginx/php-fpm/default.stpl  |  55 ++
 .../templates/web/nginx/php-fpm/default.tpl   |  51 ++
 .../templates/web/nginx/php-fpm/dokuwiki.stpl |  72 ++
 .../templates/web/nginx/php-fpm/dokuwiki.tpl  |  67 ++
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 101 +++
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  98 ++
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 101 +++
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  98 ++
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 102 +++
 .../templates/web/nginx/php-fpm/drupal8.tpl   |  99 ++
 .../templates/web/nginx/php-fpm/joomla.stpl   |  63 ++
 .../templates/web/nginx/php-fpm/joomla.tpl    |  59 ++
 .../templates/web/nginx/php-fpm/laravel.stpl  |  56 ++
 .../templates/web/nginx/php-fpm/laravel.tpl   |  50 ++
 .../templates/web/nginx/php-fpm/magento.stpl  | 198 ++++
 .../templates/web/nginx/php-fpm/magento.tpl   | 194 ++++
 .../templates/web/nginx/php-fpm/modx.stpl     |  69 ++
 .../templates/web/nginx/php-fpm/modx.tpl      |  65 ++
 .../templates/web/nginx/php-fpm/moodle.stpl   |  90 ++
 .../templates/web/nginx/php-fpm/moodle.tpl    |  87 ++
 .../templates/web/nginx/php-fpm/no-php.stpl   |  47 +
 .../templates/web/nginx/php-fpm/no-php.tpl    |  43 +
 .../templates/web/nginx/php-fpm/odoo.stpl     |  70 ++
 .../templates/web/nginx/php-fpm/odoo.tpl      |  66 ++
 .../templates/web/nginx/php-fpm/opencart.stpl |  59 ++
 .../templates/web/nginx/php-fpm/opencart.tpl  |  54 ++
 .../templates/web/nginx/php-fpm/owncloud.stpl |  85 ++
 .../templates/web/nginx/php-fpm/owncloud.tpl  |  81 ++
 .../templates/web/nginx/php-fpm/piwik.stpl    |  73 ++
 .../templates/web/nginx/php-fpm/piwik.tpl     |  69 ++
 .../templates/web/nginx/php-fpm/pyrocms.stpl  |  66 ++
 .../templates/web/nginx/php-fpm/pyrocms.tpl   |  62 ++
 .../templates/web/nginx/php-fpm/sendy.stpl    |  88 ++
 .../templates/web/nginx/php-fpm/sendy.tpl     |  86 ++
 .../web/nginx/php-fpm/wordpress.stpl          |  55 ++
 .../templates/web/nginx/php-fpm/wordpress.tpl |  51 ++
 .../web/nginx/php-fpm/wordpress2.stpl         |  67 ++
 .../web/nginx/php-fpm/wordpress2.tpl          |  63 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.stpl |  72 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.tpl  |  67 ++
 .../17.04/templates/web/nginx/proxy_ip.tpl    |   9 +
 .../17.04/templates/web/php-fpm/default.tpl   |  21 +
 .../17.04/templates/web/php-fpm/no-php.tpl    |  20 +
 .../17.04/templates/web/php-fpm/socket.tpl    |  24 +
 .../web/skel/document_errors/403.html         |  29 +
 .../web/skel/document_errors/404.html         |  28 +
 .../web/skel/document_errors/50x.html         |  29 +
 .../templates/web/skel/public_html/index.html |  26 +
 .../templates/web/skel/public_html/robots.txt |   3 +
 .../web/skel/public_shtml/index.html          |  26 +
 .../web/skel/public_shtml/robots.txt          |   3 +
 .../17.04/templates/web/suspend/.htaccess     |   2 +
 .../17.04/templates/web/suspend/index.html    |  25 +
 .../templates/web/webalizer/webalizer.tpl     | 110 +++
 install/ubuntu/17.04/vsftpd/vsftpd.conf       |  27 +
 install/ubuntu/17.10/apache2/apache2.conf     |  94 ++
 install/ubuntu/17.10/apache2/status.conf      |   8 +
 install/ubuntu/17.10/bind/named.conf          |  12 +
 install/ubuntu/17.10/clamav/clamd.conf        |  61 ++
 install/ubuntu/17.10/deb_signing.key          |  30 +
 .../ubuntu/17.10/dovecot/conf.d/10-auth.conf  |   4 +
 .../17.10/dovecot/conf.d/10-logging.conf      |   1 +
 .../ubuntu/17.10/dovecot/conf.d/10-mail.conf  |   4 +
 .../17.10/dovecot/conf.d/10-master.conf       |  29 +
 .../ubuntu/17.10/dovecot/conf.d/10-ssl.conf   |   5 +
 .../ubuntu/17.10/dovecot/conf.d/20-imap.conf  |  58 ++
 .../ubuntu/17.10/dovecot/conf.d/20-pop3.conf  |  91 ++
 .../dovecot/conf.d/auth-passwdfile.conf.ext   |   9 +
 install/ubuntu/17.10/dovecot/dovecot.conf     |  24 +
 install/ubuntu/17.10/exim/dnsbl.conf          |   2 +
 install/ubuntu/17.10/exim/exim4.conf.template | 382 ++++++++
 install/ubuntu/17.10/exim/spam-blocks.conf    |   0
 .../ubuntu/17.10/fail2ban/action.d/vesta.conf |   9 +
 .../ubuntu/17.10/fail2ban/filter.d/vesta.conf |  10 +
 install/ubuntu/17.10/fail2ban/jail.local      |  51 ++
 install/ubuntu/17.10/firewall/ports.conf      |  17 +
 install/ubuntu/17.10/firewall/rules.conf      |  11 +
 install/ubuntu/17.10/logrotate/apache2        |  19 +
 install/ubuntu/17.10/logrotate/dovecot        |  12 +
 install/ubuntu/17.10/logrotate/nginx          |  13 +
 install/ubuntu/17.10/logrotate/vesta          |   7 +
 install/ubuntu/17.10/mysql/my-large.cnf       |  41 +
 install/ubuntu/17.10/mysql/my-medium.cnf      |  40 +
 install/ubuntu/17.10/mysql/my-small.cnf       |  40 +
 install/ubuntu/17.10/nginx/nginx.conf         | 136 +++
 install/ubuntu/17.10/nginx/phpmyadmin.inc     |  18 +
 install/ubuntu/17.10/nginx/phppgadmin.inc     |  11 +
 install/ubuntu/17.10/nginx/status.conf        |   9 +
 install/ubuntu/17.10/nginx/webmail.inc        |  15 +
 install/ubuntu/17.10/packages/default.pkg     |  18 +
 install/ubuntu/17.10/packages/gainsboro.pkg   |  18 +
 install/ubuntu/17.10/packages/palegreen.pkg   |  18 +
 install/ubuntu/17.10/packages/slategrey.pkg   |  18 +
 install/ubuntu/17.10/pga/config.inc.php       | 159 ++++
 install/ubuntu/17.10/pga/phppgadmin.conf      |  31 +
 install/ubuntu/17.10/php-fpm/www.conf         |  11 +
 install/ubuntu/17.10/pma/apache.conf          |  42 +
 install/ubuntu/17.10/pma/config.inc.php       | 146 +++
 install/ubuntu/17.10/postgresql/pg_hba.conf   |  11 +
 install/ubuntu/17.10/proftpd/proftpd.conf     |  32 +
 install/ubuntu/17.10/roundcube/apache.conf    |  40 +
 install/ubuntu/17.10/roundcube/config.inc.php |  33 +
 install/ubuntu/17.10/roundcube/db.inc.php     |  66 ++
 install/ubuntu/17.10/roundcube/main.inc.php   | 850 ++++++++++++++++++
 install/ubuntu/17.10/roundcube/vesta.php      |  71 ++
 install/ubuntu/17.10/sudo/admin               |   8 +
 .../ubuntu/17.10/templates/dns/child-ns.tpl   |  14 +
 .../ubuntu/17.10/templates/dns/default.tpl    |  18 +
 install/ubuntu/17.10/templates/dns/gmail.tpl  |  12 +
 .../17.10/templates/web/apache2/basedir.stpl  |  44 +
 .../17.10/templates/web/apache2/basedir.tpl   |  38 +
 .../17.10/templates/web/apache2/default.stpl  |  43 +
 .../17.10/templates/web/apache2/default.tpl   |  37 +
 .../17.10/templates/web/apache2/hosting.stpl  |  49 +
 .../17.10/templates/web/apache2/hosting.tpl   |  43 +
 .../17.10/templates/web/apache2/phpcgi.sh     |  16 +
 .../17.10/templates/web/apache2/phpcgi.stpl   |  38 +
 .../17.10/templates/web/apache2/phpcgi.tpl    |  31 +
 .../17.10/templates/web/apache2/phpfcgid.sh   |  22 +
 .../17.10/templates/web/apache2/phpfcgid.stpl |  39 +
 .../17.10/templates/web/apache2/phpfcgid.tpl  |  31 +
 .../17.10/templates/web/awstats/awstats.tpl   | 133 +++
 .../17.10/templates/web/awstats/index.tpl     |  10 +
 .../17.10/templates/web/awstats/nav.tpl       |  23 +
 .../17.10/templates/web/nginx/caching.sh      |  19 +
 .../17.10/templates/web/nginx/caching.stpl    |  44 +
 .../17.10/templates/web/nginx/caching.tpl     |  41 +
 .../17.10/templates/web/nginx/default.stpl    |  36 +
 .../17.10/templates/web/nginx/default.tpl     |  33 +
 .../17.10/templates/web/nginx/hosting.sh      |  11 +
 .../17.10/templates/web/nginx/hosting.stpl    |  38 +
 .../17.10/templates/web/nginx/hosting.tpl     |  35 +
 .../17.10/templates/web/nginx/http2.stpl      |  36 +
 .../17.10/templates/web/nginx/http2.tpl       |  33 +
 .../web/nginx/php-fpm/cms_made_simple.stpl    |  56 ++
 .../web/nginx/php-fpm/cms_made_simple.tpl     |  52 ++
 .../web/nginx/php-fpm/codeigniter2.stpl       |  61 ++
 .../web/nginx/php-fpm/codeigniter2.tpl        |  57 ++
 .../web/nginx/php-fpm/codeigniter3.stpl       |  56 ++
 .../web/nginx/php-fpm/codeigniter3.tpl        |  52 ++
 .../web/nginx/php-fpm/datalife_engine.stpl    | 127 +++
 .../web/nginx/php-fpm/datalife_engine.tpl     | 123 +++
 .../templates/web/nginx/php-fpm/default.stpl  |  55 ++
 .../templates/web/nginx/php-fpm/default.tpl   |  51 ++
 .../templates/web/nginx/php-fpm/dokuwiki.stpl |  72 ++
 .../templates/web/nginx/php-fpm/dokuwiki.tpl  |  67 ++
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 101 +++
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  98 ++
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 101 +++
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  98 ++
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 102 +++
 .../templates/web/nginx/php-fpm/drupal8.tpl   |  99 ++
 .../templates/web/nginx/php-fpm/joomla.stpl   |  63 ++
 .../templates/web/nginx/php-fpm/joomla.tpl    |  59 ++
 .../templates/web/nginx/php-fpm/laravel.stpl  |  56 ++
 .../templates/web/nginx/php-fpm/laravel.tpl   |  50 ++
 .../templates/web/nginx/php-fpm/magento.stpl  | 198 ++++
 .../templates/web/nginx/php-fpm/magento.tpl   | 194 ++++
 .../templates/web/nginx/php-fpm/modx.stpl     |  69 ++
 .../templates/web/nginx/php-fpm/modx.tpl      |  65 ++
 .../templates/web/nginx/php-fpm/moodle.stpl   |  90 ++
 .../templates/web/nginx/php-fpm/moodle.tpl    |  87 ++
 .../templates/web/nginx/php-fpm/no-php.stpl   |  47 +
 .../templates/web/nginx/php-fpm/no-php.tpl    |  43 +
 .../templates/web/nginx/php-fpm/odoo.stpl     |  70 ++
 .../templates/web/nginx/php-fpm/odoo.tpl      |  66 ++
 .../templates/web/nginx/php-fpm/opencart.stpl |  59 ++
 .../templates/web/nginx/php-fpm/opencart.tpl  |  54 ++
 .../templates/web/nginx/php-fpm/owncloud.stpl |  85 ++
 .../templates/web/nginx/php-fpm/owncloud.tpl  |  81 ++
 .../templates/web/nginx/php-fpm/piwik.stpl    |  73 ++
 .../templates/web/nginx/php-fpm/piwik.tpl     |  69 ++
 .../templates/web/nginx/php-fpm/pyrocms.stpl  |  66 ++
 .../templates/web/nginx/php-fpm/pyrocms.tpl   |  62 ++
 .../templates/web/nginx/php-fpm/sendy.stpl    |  88 ++
 .../templates/web/nginx/php-fpm/sendy.tpl     |  86 ++
 .../web/nginx/php-fpm/wordpress.stpl          |  55 ++
 .../templates/web/nginx/php-fpm/wordpress.tpl |  51 ++
 .../web/nginx/php-fpm/wordpress2.stpl         |  67 ++
 .../web/nginx/php-fpm/wordpress2.tpl          |  63 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.stpl |  72 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.tpl  |  67 ++
 .../17.10/templates/web/nginx/proxy_ip.tpl    |   9 +
 .../17.10/templates/web/php-fpm/default.tpl   |  21 +
 .../17.10/templates/web/php-fpm/no-php.tpl    |  20 +
 .../17.10/templates/web/php-fpm/socket.tpl    |  24 +
 .../web/skel/document_errors/403.html         |  29 +
 .../web/skel/document_errors/404.html         |  28 +
 .../web/skel/document_errors/50x.html         |  29 +
 .../templates/web/skel/public_html/index.html |  26 +
 .../templates/web/skel/public_html/robots.txt |   3 +
 .../web/skel/public_shtml/index.html          |  26 +
 .../web/skel/public_shtml/robots.txt          |   3 +
 .../17.10/templates/web/suspend/.htaccess     |   2 +
 .../17.10/templates/web/suspend/index.html    |  25 +
 .../templates/web/webalizer/webalizer.tpl     | 110 +++
 install/ubuntu/17.10/vsftpd/vsftpd.conf       |  27 +
 install/ubuntu/18.04/apache2/apache2.conf     |  94 ++
 install/ubuntu/18.04/apache2/status.conf      |   8 +
 install/ubuntu/18.04/bind/named.conf          |  12 +
 install/ubuntu/18.04/clamav/clamd.conf        |  61 ++
 install/ubuntu/18.04/deb_signing.key          |  30 +
 .../ubuntu/18.04/dovecot/conf.d/10-auth.conf  |   4 +
 .../18.04/dovecot/conf.d/10-logging.conf      |   1 +
 .../ubuntu/18.04/dovecot/conf.d/10-mail.conf  |   4 +
 .../18.04/dovecot/conf.d/10-master.conf       |  29 +
 .../ubuntu/18.04/dovecot/conf.d/10-ssl.conf   |   5 +
 .../ubuntu/18.04/dovecot/conf.d/20-imap.conf  |  58 ++
 .../ubuntu/18.04/dovecot/conf.d/20-pop3.conf  |  91 ++
 .../dovecot/conf.d/auth-passwdfile.conf.ext   |   9 +
 install/ubuntu/18.04/dovecot/dovecot.conf     |  24 +
 install/ubuntu/18.04/exim/dnsbl.conf          |   2 +
 install/ubuntu/18.04/exim/exim4.conf.template | 382 ++++++++
 install/ubuntu/18.04/exim/spam-blocks.conf    |   0
 .../ubuntu/18.04/fail2ban/action.d/vesta.conf |   9 +
 .../ubuntu/18.04/fail2ban/filter.d/vesta.conf |  10 +
 install/ubuntu/18.04/fail2ban/jail.local      |  51 ++
 install/ubuntu/18.04/firewall/ports.conf      |  17 +
 install/ubuntu/18.04/firewall/rules.conf      |  11 +
 install/ubuntu/18.04/logrotate/apache2        |  19 +
 install/ubuntu/18.04/logrotate/dovecot        |  12 +
 install/ubuntu/18.04/logrotate/nginx          |  13 +
 install/ubuntu/18.04/logrotate/vesta          |   7 +
 install/ubuntu/18.04/mysql/my-large.cnf       |  41 +
 install/ubuntu/18.04/mysql/my-medium.cnf      |  40 +
 install/ubuntu/18.04/mysql/my-small.cnf       |  40 +
 install/ubuntu/18.04/nginx/nginx.conf         | 136 +++
 install/ubuntu/18.04/nginx/phpmyadmin.inc     |  18 +
 install/ubuntu/18.04/nginx/phppgadmin.inc     |  11 +
 install/ubuntu/18.04/nginx/status.conf        |   9 +
 install/ubuntu/18.04/nginx/webmail.inc        |  15 +
 install/ubuntu/18.04/packages/default.pkg     |  18 +
 install/ubuntu/18.04/packages/gainsboro.pkg   |  18 +
 install/ubuntu/18.04/packages/palegreen.pkg   |  18 +
 install/ubuntu/18.04/packages/slategrey.pkg   |  18 +
 install/ubuntu/18.04/pga/config.inc.php       | 159 ++++
 install/ubuntu/18.04/pga/phppgadmin.conf      |  31 +
 install/ubuntu/18.04/php-fpm/www.conf         |  11 +
 install/ubuntu/18.04/pma/apache.conf          |  42 +
 install/ubuntu/18.04/pma/config.inc.php       | 146 +++
 install/ubuntu/18.04/postgresql/pg_hba.conf   |  11 +
 install/ubuntu/18.04/proftpd/proftpd.conf     |  32 +
 install/ubuntu/18.04/roundcube/apache.conf    |  40 +
 install/ubuntu/18.04/roundcube/config.inc.php |  33 +
 install/ubuntu/18.04/roundcube/db.inc.php     |  66 ++
 install/ubuntu/18.04/roundcube/main.inc.php   | 850 ++++++++++++++++++
 install/ubuntu/18.04/roundcube/vesta.php      |  71 ++
 install/ubuntu/18.04/sudo/admin               |   8 +
 .../ubuntu/18.04/templates/dns/child-ns.tpl   |  14 +
 .../ubuntu/18.04/templates/dns/default.tpl    |  18 +
 install/ubuntu/18.04/templates/dns/gmail.tpl  |  12 +
 .../18.04/templates/web/apache2/basedir.stpl  |  44 +
 .../18.04/templates/web/apache2/basedir.tpl   |  38 +
 .../18.04/templates/web/apache2/default.stpl  |  43 +
 .../18.04/templates/web/apache2/default.tpl   |  37 +
 .../18.04/templates/web/apache2/hosting.stpl  |  49 +
 .../18.04/templates/web/apache2/hosting.tpl   |  43 +
 .../18.04/templates/web/apache2/phpcgi.sh     |  16 +
 .../18.04/templates/web/apache2/phpcgi.stpl   |  38 +
 .../18.04/templates/web/apache2/phpcgi.tpl    |  31 +
 .../18.04/templates/web/apache2/phpfcgid.sh   |  22 +
 .../18.04/templates/web/apache2/phpfcgid.stpl |  39 +
 .../18.04/templates/web/apache2/phpfcgid.tpl  |  31 +
 .../18.04/templates/web/awstats/awstats.tpl   | 133 +++
 .../18.04/templates/web/awstats/index.tpl     |  10 +
 .../18.04/templates/web/awstats/nav.tpl       |  23 +
 .../18.04/templates/web/nginx/caching.sh      |  19 +
 .../18.04/templates/web/nginx/caching.stpl    |  44 +
 .../18.04/templates/web/nginx/caching.tpl     |  41 +
 .../18.04/templates/web/nginx/default.stpl    |  36 +
 .../18.04/templates/web/nginx/default.tpl     |  33 +
 .../18.04/templates/web/nginx/hosting.sh      |  11 +
 .../18.04/templates/web/nginx/hosting.stpl    |  38 +
 .../18.04/templates/web/nginx/hosting.tpl     |  35 +
 .../18.04/templates/web/nginx/http2.stpl      |  36 +
 .../18.04/templates/web/nginx/http2.tpl       |  33 +
 .../web/nginx/php-fpm/cms_made_simple.stpl    |  56 ++
 .../web/nginx/php-fpm/cms_made_simple.tpl     |  52 ++
 .../web/nginx/php-fpm/codeigniter2.stpl       |  61 ++
 .../web/nginx/php-fpm/codeigniter2.tpl        |  57 ++
 .../web/nginx/php-fpm/codeigniter3.stpl       |  56 ++
 .../web/nginx/php-fpm/codeigniter3.tpl        |  52 ++
 .../web/nginx/php-fpm/datalife_engine.stpl    | 127 +++
 .../web/nginx/php-fpm/datalife_engine.tpl     | 123 +++
 .../templates/web/nginx/php-fpm/default.stpl  |  55 ++
 .../templates/web/nginx/php-fpm/default.tpl   |  51 ++
 .../templates/web/nginx/php-fpm/dokuwiki.stpl |  72 ++
 .../templates/web/nginx/php-fpm/dokuwiki.tpl  |  67 ++
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 101 +++
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  98 ++
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 101 +++
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  98 ++
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 102 +++
 .../templates/web/nginx/php-fpm/drupal8.tpl   |  99 ++
 .../templates/web/nginx/php-fpm/joomla.stpl   |  63 ++
 .../templates/web/nginx/php-fpm/joomla.tpl    |  59 ++
 .../templates/web/nginx/php-fpm/laravel.stpl  |  56 ++
 .../templates/web/nginx/php-fpm/laravel.tpl   |  50 ++
 .../templates/web/nginx/php-fpm/magento.stpl  | 198 ++++
 .../templates/web/nginx/php-fpm/magento.tpl   | 194 ++++
 .../templates/web/nginx/php-fpm/modx.stpl     |  69 ++
 .../templates/web/nginx/php-fpm/modx.tpl      |  65 ++
 .../templates/web/nginx/php-fpm/moodle.stpl   |  90 ++
 .../templates/web/nginx/php-fpm/moodle.tpl    |  87 ++
 .../templates/web/nginx/php-fpm/no-php.stpl   |  47 +
 .../templates/web/nginx/php-fpm/no-php.tpl    |  43 +
 .../templates/web/nginx/php-fpm/odoo.stpl     |  70 ++
 .../templates/web/nginx/php-fpm/odoo.tpl      |  66 ++
 .../templates/web/nginx/php-fpm/opencart.stpl |  59 ++
 .../templates/web/nginx/php-fpm/opencart.tpl  |  54 ++
 .../templates/web/nginx/php-fpm/owncloud.stpl |  85 ++
 .../templates/web/nginx/php-fpm/owncloud.tpl  |  81 ++
 .../templates/web/nginx/php-fpm/piwik.stpl    |  73 ++
 .../templates/web/nginx/php-fpm/piwik.tpl     |  69 ++
 .../templates/web/nginx/php-fpm/pyrocms.stpl  |  66 ++
 .../templates/web/nginx/php-fpm/pyrocms.tpl   |  62 ++
 .../templates/web/nginx/php-fpm/sendy.stpl    |  88 ++
 .../templates/web/nginx/php-fpm/sendy.tpl     |  86 ++
 .../web/nginx/php-fpm/wordpress.stpl          |  55 ++
 .../templates/web/nginx/php-fpm/wordpress.tpl |  51 ++
 .../web/nginx/php-fpm/wordpress2.stpl         |  67 ++
 .../web/nginx/php-fpm/wordpress2.tpl          |  63 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.stpl |  72 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.tpl  |  67 ++
 .../18.04/templates/web/nginx/proxy_ip.tpl    |   9 +
 .../18.04/templates/web/php-fpm/default.tpl   |  21 +
 .../18.04/templates/web/php-fpm/no-php.tpl    |  20 +
 .../18.04/templates/web/php-fpm/socket.tpl    |  24 +
 .../web/skel/document_errors/403.html         |  29 +
 .../web/skel/document_errors/404.html         |  28 +
 .../web/skel/document_errors/50x.html         |  29 +
 .../templates/web/skel/public_html/index.html |  26 +
 .../templates/web/skel/public_html/robots.txt |   3 +
 .../web/skel/public_shtml/index.html          |  26 +
 .../web/skel/public_shtml/robots.txt          |   3 +
 .../18.04/templates/web/suspend/.htaccess     |   2 +
 .../18.04/templates/web/suspend/index.html    |  25 +
 .../templates/web/webalizer/webalizer.tpl     | 110 +++
 install/ubuntu/18.04/vsftpd/vsftpd.conf       |  27 +
 426 files changed, 23631 insertions(+)
 create mode 100644 install/ubuntu/17.04/apache2/apache2.conf
 create mode 100644 install/ubuntu/17.04/apache2/status.conf
 create mode 100644 install/ubuntu/17.04/bind/named.conf
 create mode 100644 install/ubuntu/17.04/clamav/clamd.conf
 create mode 100644 install/ubuntu/17.04/deb_signing.key
 create mode 100644 install/ubuntu/17.04/dovecot/conf.d/10-auth.conf
 create mode 100644 install/ubuntu/17.04/dovecot/conf.d/10-logging.conf
 create mode 100644 install/ubuntu/17.04/dovecot/conf.d/10-mail.conf
 create mode 100644 install/ubuntu/17.04/dovecot/conf.d/10-master.conf
 create mode 100644 install/ubuntu/17.04/dovecot/conf.d/10-ssl.conf
 create mode 100644 install/ubuntu/17.04/dovecot/conf.d/20-imap.conf
 create mode 100644 install/ubuntu/17.04/dovecot/conf.d/20-pop3.conf
 create mode 100644 install/ubuntu/17.04/dovecot/conf.d/auth-passwdfile.conf.ext
 create mode 100644 install/ubuntu/17.04/dovecot/dovecot.conf
 create mode 100644 install/ubuntu/17.04/exim/dnsbl.conf
 create mode 100644 install/ubuntu/17.04/exim/exim4.conf.template
 create mode 100644 install/ubuntu/17.04/exim/spam-blocks.conf
 create mode 100644 install/ubuntu/17.04/fail2ban/action.d/vesta.conf
 create mode 100644 install/ubuntu/17.04/fail2ban/filter.d/vesta.conf
 create mode 100644 install/ubuntu/17.04/fail2ban/jail.local
 create mode 100644 install/ubuntu/17.04/firewall/ports.conf
 create mode 100644 install/ubuntu/17.04/firewall/rules.conf
 create mode 100644 install/ubuntu/17.04/logrotate/apache2
 create mode 100644 install/ubuntu/17.04/logrotate/dovecot
 create mode 100644 install/ubuntu/17.04/logrotate/nginx
 create mode 100644 install/ubuntu/17.04/logrotate/vesta
 create mode 100644 install/ubuntu/17.04/mysql/my-large.cnf
 create mode 100644 install/ubuntu/17.04/mysql/my-medium.cnf
 create mode 100644 install/ubuntu/17.04/mysql/my-small.cnf
 create mode 100644 install/ubuntu/17.04/nginx/nginx.conf
 create mode 100644 install/ubuntu/17.04/nginx/phpmyadmin.inc
 create mode 100644 install/ubuntu/17.04/nginx/phppgadmin.inc
 create mode 100644 install/ubuntu/17.04/nginx/status.conf
 create mode 100644 install/ubuntu/17.04/nginx/webmail.inc
 create mode 100644 install/ubuntu/17.04/packages/default.pkg
 create mode 100644 install/ubuntu/17.04/packages/gainsboro.pkg
 create mode 100644 install/ubuntu/17.04/packages/palegreen.pkg
 create mode 100644 install/ubuntu/17.04/packages/slategrey.pkg
 create mode 100644 install/ubuntu/17.04/pga/config.inc.php
 create mode 100644 install/ubuntu/17.04/pga/phppgadmin.conf
 create mode 100644 install/ubuntu/17.04/php-fpm/www.conf
 create mode 100644 install/ubuntu/17.04/pma/apache.conf
 create mode 100644 install/ubuntu/17.04/pma/config.inc.php
 create mode 100644 install/ubuntu/17.04/postgresql/pg_hba.conf
 create mode 100644 install/ubuntu/17.04/proftpd/proftpd.conf
 create mode 100644 install/ubuntu/17.04/roundcube/apache.conf
 create mode 100644 install/ubuntu/17.04/roundcube/config.inc.php
 create mode 100644 install/ubuntu/17.04/roundcube/db.inc.php
 create mode 100644 install/ubuntu/17.04/roundcube/main.inc.php
 create mode 100644 install/ubuntu/17.04/roundcube/vesta.php
 create mode 100644 install/ubuntu/17.04/sudo/admin
 create mode 100755 install/ubuntu/17.04/templates/dns/child-ns.tpl
 create mode 100755 install/ubuntu/17.04/templates/dns/default.tpl
 create mode 100755 install/ubuntu/17.04/templates/dns/gmail.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/apache2/basedir.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/apache2/basedir.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/apache2/default.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/apache2/default.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/apache2/hosting.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/apache2/hosting.tpl
 create mode 100755 install/ubuntu/17.04/templates/web/apache2/phpcgi.sh
 create mode 100644 install/ubuntu/17.04/templates/web/apache2/phpcgi.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/apache2/phpcgi.tpl
 create mode 100755 install/ubuntu/17.04/templates/web/apache2/phpfcgid.sh
 create mode 100644 install/ubuntu/17.04/templates/web/apache2/phpfcgid.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/apache2/phpfcgid.tpl
 create mode 100755 install/ubuntu/17.04/templates/web/awstats/awstats.tpl
 create mode 100755 install/ubuntu/17.04/templates/web/awstats/index.tpl
 create mode 100755 install/ubuntu/17.04/templates/web/awstats/nav.tpl
 create mode 100755 install/ubuntu/17.04/templates/web/nginx/caching.sh
 create mode 100755 install/ubuntu/17.04/templates/web/nginx/caching.stpl
 create mode 100755 install/ubuntu/17.04/templates/web/nginx/caching.tpl
 create mode 100755 install/ubuntu/17.04/templates/web/nginx/default.stpl
 create mode 100755 install/ubuntu/17.04/templates/web/nginx/default.tpl
 create mode 100755 install/ubuntu/17.04/templates/web/nginx/hosting.sh
 create mode 100755 install/ubuntu/17.04/templates/web/nginx/hosting.stpl
 create mode 100755 install/ubuntu/17.04/templates/web/nginx/hosting.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/http2.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/http2.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/cms_made_simple.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/cms_made_simple.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter2.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter2.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter3.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter3.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/datalife_engine.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/datalife_engine.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/default.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/default.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/dokuwiki.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/dokuwiki.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/joomla.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/joomla.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/laravel.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/laravel.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/magento.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/magento.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/modx.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/modx.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/moodle.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/moodle.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/no-php.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/no-php.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/odoo.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/odoo.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/opencart.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/opencart.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/owncloud.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/owncloud.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/piwik.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/piwik.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/sendy.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/sendy.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
 create mode 100644 install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
 create mode 100755 install/ubuntu/17.04/templates/web/nginx/proxy_ip.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/php-fpm/default.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/php-fpm/no-php.tpl
 create mode 100644 install/ubuntu/17.04/templates/web/php-fpm/socket.tpl
 create mode 100755 install/ubuntu/17.04/templates/web/skel/document_errors/403.html
 create mode 100755 install/ubuntu/17.04/templates/web/skel/document_errors/404.html
 create mode 100755 install/ubuntu/17.04/templates/web/skel/document_errors/50x.html
 create mode 100755 install/ubuntu/17.04/templates/web/skel/public_html/index.html
 create mode 100755 install/ubuntu/17.04/templates/web/skel/public_html/robots.txt
 create mode 100755 install/ubuntu/17.04/templates/web/skel/public_shtml/index.html
 create mode 100755 install/ubuntu/17.04/templates/web/skel/public_shtml/robots.txt
 create mode 100755 install/ubuntu/17.04/templates/web/suspend/.htaccess
 create mode 100755 install/ubuntu/17.04/templates/web/suspend/index.html
 create mode 100755 install/ubuntu/17.04/templates/web/webalizer/webalizer.tpl
 create mode 100644 install/ubuntu/17.04/vsftpd/vsftpd.conf
 create mode 100644 install/ubuntu/17.10/apache2/apache2.conf
 create mode 100644 install/ubuntu/17.10/apache2/status.conf
 create mode 100644 install/ubuntu/17.10/bind/named.conf
 create mode 100644 install/ubuntu/17.10/clamav/clamd.conf
 create mode 100644 install/ubuntu/17.10/deb_signing.key
 create mode 100644 install/ubuntu/17.10/dovecot/conf.d/10-auth.conf
 create mode 100644 install/ubuntu/17.10/dovecot/conf.d/10-logging.conf
 create mode 100644 install/ubuntu/17.10/dovecot/conf.d/10-mail.conf
 create mode 100644 install/ubuntu/17.10/dovecot/conf.d/10-master.conf
 create mode 100644 install/ubuntu/17.10/dovecot/conf.d/10-ssl.conf
 create mode 100644 install/ubuntu/17.10/dovecot/conf.d/20-imap.conf
 create mode 100644 install/ubuntu/17.10/dovecot/conf.d/20-pop3.conf
 create mode 100644 install/ubuntu/17.10/dovecot/conf.d/auth-passwdfile.conf.ext
 create mode 100644 install/ubuntu/17.10/dovecot/dovecot.conf
 create mode 100644 install/ubuntu/17.10/exim/dnsbl.conf
 create mode 100644 install/ubuntu/17.10/exim/exim4.conf.template
 create mode 100644 install/ubuntu/17.10/exim/spam-blocks.conf
 create mode 100644 install/ubuntu/17.10/fail2ban/action.d/vesta.conf
 create mode 100644 install/ubuntu/17.10/fail2ban/filter.d/vesta.conf
 create mode 100644 install/ubuntu/17.10/fail2ban/jail.local
 create mode 100644 install/ubuntu/17.10/firewall/ports.conf
 create mode 100644 install/ubuntu/17.10/firewall/rules.conf
 create mode 100644 install/ubuntu/17.10/logrotate/apache2
 create mode 100644 install/ubuntu/17.10/logrotate/dovecot
 create mode 100644 install/ubuntu/17.10/logrotate/nginx
 create mode 100644 install/ubuntu/17.10/logrotate/vesta
 create mode 100644 install/ubuntu/17.10/mysql/my-large.cnf
 create mode 100644 install/ubuntu/17.10/mysql/my-medium.cnf
 create mode 100644 install/ubuntu/17.10/mysql/my-small.cnf
 create mode 100644 install/ubuntu/17.10/nginx/nginx.conf
 create mode 100644 install/ubuntu/17.10/nginx/phpmyadmin.inc
 create mode 100644 install/ubuntu/17.10/nginx/phppgadmin.inc
 create mode 100644 install/ubuntu/17.10/nginx/status.conf
 create mode 100644 install/ubuntu/17.10/nginx/webmail.inc
 create mode 100644 install/ubuntu/17.10/packages/default.pkg
 create mode 100644 install/ubuntu/17.10/packages/gainsboro.pkg
 create mode 100644 install/ubuntu/17.10/packages/palegreen.pkg
 create mode 100644 install/ubuntu/17.10/packages/slategrey.pkg
 create mode 100644 install/ubuntu/17.10/pga/config.inc.php
 create mode 100644 install/ubuntu/17.10/pga/phppgadmin.conf
 create mode 100644 install/ubuntu/17.10/php-fpm/www.conf
 create mode 100644 install/ubuntu/17.10/pma/apache.conf
 create mode 100644 install/ubuntu/17.10/pma/config.inc.php
 create mode 100644 install/ubuntu/17.10/postgresql/pg_hba.conf
 create mode 100644 install/ubuntu/17.10/proftpd/proftpd.conf
 create mode 100644 install/ubuntu/17.10/roundcube/apache.conf
 create mode 100644 install/ubuntu/17.10/roundcube/config.inc.php
 create mode 100644 install/ubuntu/17.10/roundcube/db.inc.php
 create mode 100644 install/ubuntu/17.10/roundcube/main.inc.php
 create mode 100644 install/ubuntu/17.10/roundcube/vesta.php
 create mode 100644 install/ubuntu/17.10/sudo/admin
 create mode 100755 install/ubuntu/17.10/templates/dns/child-ns.tpl
 create mode 100755 install/ubuntu/17.10/templates/dns/default.tpl
 create mode 100755 install/ubuntu/17.10/templates/dns/gmail.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/apache2/basedir.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/apache2/basedir.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/apache2/default.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/apache2/default.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/apache2/hosting.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/apache2/hosting.tpl
 create mode 100755 install/ubuntu/17.10/templates/web/apache2/phpcgi.sh
 create mode 100644 install/ubuntu/17.10/templates/web/apache2/phpcgi.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/apache2/phpcgi.tpl
 create mode 100755 install/ubuntu/17.10/templates/web/apache2/phpfcgid.sh
 create mode 100644 install/ubuntu/17.10/templates/web/apache2/phpfcgid.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/apache2/phpfcgid.tpl
 create mode 100755 install/ubuntu/17.10/templates/web/awstats/awstats.tpl
 create mode 100755 install/ubuntu/17.10/templates/web/awstats/index.tpl
 create mode 100755 install/ubuntu/17.10/templates/web/awstats/nav.tpl
 create mode 100755 install/ubuntu/17.10/templates/web/nginx/caching.sh
 create mode 100755 install/ubuntu/17.10/templates/web/nginx/caching.stpl
 create mode 100755 install/ubuntu/17.10/templates/web/nginx/caching.tpl
 create mode 100755 install/ubuntu/17.10/templates/web/nginx/default.stpl
 create mode 100755 install/ubuntu/17.10/templates/web/nginx/default.tpl
 create mode 100755 install/ubuntu/17.10/templates/web/nginx/hosting.sh
 create mode 100755 install/ubuntu/17.10/templates/web/nginx/hosting.stpl
 create mode 100755 install/ubuntu/17.10/templates/web/nginx/hosting.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/http2.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/http2.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/cms_made_simple.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/cms_made_simple.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter2.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter2.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter3.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter3.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/datalife_engine.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/datalife_engine.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/default.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/default.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/dokuwiki.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/dokuwiki.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/joomla.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/joomla.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/laravel.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/laravel.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/magento.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/magento.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/modx.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/modx.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/moodle.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/moodle.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/no-php.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/no-php.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/odoo.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/odoo.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/opencart.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/opencart.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/owncloud.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/owncloud.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/piwik.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/piwik.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/sendy.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/sendy.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
 create mode 100644 install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
 create mode 100755 install/ubuntu/17.10/templates/web/nginx/proxy_ip.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/php-fpm/default.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/php-fpm/no-php.tpl
 create mode 100644 install/ubuntu/17.10/templates/web/php-fpm/socket.tpl
 create mode 100755 install/ubuntu/17.10/templates/web/skel/document_errors/403.html
 create mode 100755 install/ubuntu/17.10/templates/web/skel/document_errors/404.html
 create mode 100755 install/ubuntu/17.10/templates/web/skel/document_errors/50x.html
 create mode 100755 install/ubuntu/17.10/templates/web/skel/public_html/index.html
 create mode 100755 install/ubuntu/17.10/templates/web/skel/public_html/robots.txt
 create mode 100755 install/ubuntu/17.10/templates/web/skel/public_shtml/index.html
 create mode 100755 install/ubuntu/17.10/templates/web/skel/public_shtml/robots.txt
 create mode 100755 install/ubuntu/17.10/templates/web/suspend/.htaccess
 create mode 100755 install/ubuntu/17.10/templates/web/suspend/index.html
 create mode 100755 install/ubuntu/17.10/templates/web/webalizer/webalizer.tpl
 create mode 100644 install/ubuntu/17.10/vsftpd/vsftpd.conf
 create mode 100644 install/ubuntu/18.04/apache2/apache2.conf
 create mode 100644 install/ubuntu/18.04/apache2/status.conf
 create mode 100644 install/ubuntu/18.04/bind/named.conf
 create mode 100644 install/ubuntu/18.04/clamav/clamd.conf
 create mode 100644 install/ubuntu/18.04/deb_signing.key
 create mode 100644 install/ubuntu/18.04/dovecot/conf.d/10-auth.conf
 create mode 100644 install/ubuntu/18.04/dovecot/conf.d/10-logging.conf
 create mode 100644 install/ubuntu/18.04/dovecot/conf.d/10-mail.conf
 create mode 100644 install/ubuntu/18.04/dovecot/conf.d/10-master.conf
 create mode 100644 install/ubuntu/18.04/dovecot/conf.d/10-ssl.conf
 create mode 100644 install/ubuntu/18.04/dovecot/conf.d/20-imap.conf
 create mode 100644 install/ubuntu/18.04/dovecot/conf.d/20-pop3.conf
 create mode 100644 install/ubuntu/18.04/dovecot/conf.d/auth-passwdfile.conf.ext
 create mode 100644 install/ubuntu/18.04/dovecot/dovecot.conf
 create mode 100644 install/ubuntu/18.04/exim/dnsbl.conf
 create mode 100644 install/ubuntu/18.04/exim/exim4.conf.template
 create mode 100644 install/ubuntu/18.04/exim/spam-blocks.conf
 create mode 100644 install/ubuntu/18.04/fail2ban/action.d/vesta.conf
 create mode 100644 install/ubuntu/18.04/fail2ban/filter.d/vesta.conf
 create mode 100644 install/ubuntu/18.04/fail2ban/jail.local
 create mode 100644 install/ubuntu/18.04/firewall/ports.conf
 create mode 100644 install/ubuntu/18.04/firewall/rules.conf
 create mode 100644 install/ubuntu/18.04/logrotate/apache2
 create mode 100644 install/ubuntu/18.04/logrotate/dovecot
 create mode 100644 install/ubuntu/18.04/logrotate/nginx
 create mode 100644 install/ubuntu/18.04/logrotate/vesta
 create mode 100644 install/ubuntu/18.04/mysql/my-large.cnf
 create mode 100644 install/ubuntu/18.04/mysql/my-medium.cnf
 create mode 100644 install/ubuntu/18.04/mysql/my-small.cnf
 create mode 100644 install/ubuntu/18.04/nginx/nginx.conf
 create mode 100644 install/ubuntu/18.04/nginx/phpmyadmin.inc
 create mode 100644 install/ubuntu/18.04/nginx/phppgadmin.inc
 create mode 100644 install/ubuntu/18.04/nginx/status.conf
 create mode 100644 install/ubuntu/18.04/nginx/webmail.inc
 create mode 100644 install/ubuntu/18.04/packages/default.pkg
 create mode 100644 install/ubuntu/18.04/packages/gainsboro.pkg
 create mode 100644 install/ubuntu/18.04/packages/palegreen.pkg
 create mode 100644 install/ubuntu/18.04/packages/slategrey.pkg
 create mode 100644 install/ubuntu/18.04/pga/config.inc.php
 create mode 100644 install/ubuntu/18.04/pga/phppgadmin.conf
 create mode 100644 install/ubuntu/18.04/php-fpm/www.conf
 create mode 100644 install/ubuntu/18.04/pma/apache.conf
 create mode 100644 install/ubuntu/18.04/pma/config.inc.php
 create mode 100644 install/ubuntu/18.04/postgresql/pg_hba.conf
 create mode 100644 install/ubuntu/18.04/proftpd/proftpd.conf
 create mode 100644 install/ubuntu/18.04/roundcube/apache.conf
 create mode 100644 install/ubuntu/18.04/roundcube/config.inc.php
 create mode 100644 install/ubuntu/18.04/roundcube/db.inc.php
 create mode 100644 install/ubuntu/18.04/roundcube/main.inc.php
 create mode 100644 install/ubuntu/18.04/roundcube/vesta.php
 create mode 100644 install/ubuntu/18.04/sudo/admin
 create mode 100755 install/ubuntu/18.04/templates/dns/child-ns.tpl
 create mode 100755 install/ubuntu/18.04/templates/dns/default.tpl
 create mode 100755 install/ubuntu/18.04/templates/dns/gmail.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/apache2/basedir.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/apache2/basedir.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/apache2/default.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/apache2/default.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/apache2/hosting.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/apache2/hosting.tpl
 create mode 100755 install/ubuntu/18.04/templates/web/apache2/phpcgi.sh
 create mode 100644 install/ubuntu/18.04/templates/web/apache2/phpcgi.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/apache2/phpcgi.tpl
 create mode 100755 install/ubuntu/18.04/templates/web/apache2/phpfcgid.sh
 create mode 100644 install/ubuntu/18.04/templates/web/apache2/phpfcgid.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/apache2/phpfcgid.tpl
 create mode 100755 install/ubuntu/18.04/templates/web/awstats/awstats.tpl
 create mode 100755 install/ubuntu/18.04/templates/web/awstats/index.tpl
 create mode 100755 install/ubuntu/18.04/templates/web/awstats/nav.tpl
 create mode 100755 install/ubuntu/18.04/templates/web/nginx/caching.sh
 create mode 100755 install/ubuntu/18.04/templates/web/nginx/caching.stpl
 create mode 100755 install/ubuntu/18.04/templates/web/nginx/caching.tpl
 create mode 100755 install/ubuntu/18.04/templates/web/nginx/default.stpl
 create mode 100755 install/ubuntu/18.04/templates/web/nginx/default.tpl
 create mode 100755 install/ubuntu/18.04/templates/web/nginx/hosting.sh
 create mode 100755 install/ubuntu/18.04/templates/web/nginx/hosting.stpl
 create mode 100755 install/ubuntu/18.04/templates/web/nginx/hosting.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/http2.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/http2.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/cms_made_simple.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/cms_made_simple.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter2.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter2.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter3.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter3.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/datalife_engine.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/datalife_engine.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/default.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/default.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/dokuwiki.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/dokuwiki.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/joomla.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/joomla.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/laravel.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/laravel.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/magento.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/magento.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/modx.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/modx.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/moodle.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/moodle.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/no-php.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/no-php.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/odoo.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/odoo.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/opencart.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/opencart.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/owncloud.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/owncloud.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/piwik.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/piwik.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/sendy.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/sendy.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
 create mode 100755 install/ubuntu/18.04/templates/web/nginx/proxy_ip.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/php-fpm/default.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/php-fpm/no-php.tpl
 create mode 100644 install/ubuntu/18.04/templates/web/php-fpm/socket.tpl
 create mode 100755 install/ubuntu/18.04/templates/web/skel/document_errors/403.html
 create mode 100755 install/ubuntu/18.04/templates/web/skel/document_errors/404.html
 create mode 100755 install/ubuntu/18.04/templates/web/skel/document_errors/50x.html
 create mode 100755 install/ubuntu/18.04/templates/web/skel/public_html/index.html
 create mode 100755 install/ubuntu/18.04/templates/web/skel/public_html/robots.txt
 create mode 100755 install/ubuntu/18.04/templates/web/skel/public_shtml/index.html
 create mode 100755 install/ubuntu/18.04/templates/web/skel/public_shtml/robots.txt
 create mode 100755 install/ubuntu/18.04/templates/web/suspend/.htaccess
 create mode 100755 install/ubuntu/18.04/templates/web/suspend/index.html
 create mode 100755 install/ubuntu/18.04/templates/web/webalizer/webalizer.tpl
 create mode 100644 install/ubuntu/18.04/vsftpd/vsftpd.conf

diff --git a/install/ubuntu/17.04/apache2/apache2.conf b/install/ubuntu/17.04/apache2/apache2.conf
new file mode 100644
index 00000000..2756132a
--- /dev/null
+++ b/install/ubuntu/17.04/apache2/apache2.conf
@@ -0,0 +1,94 @@
+# It is split into several files forming the configuration hierarchy outlined
+# below, all located in the /etc/apache2/ directory:
+#
+#	/etc/apache2/
+#	|-- apache2.conf
+#	|	`--  ports.conf
+#	|-- mods-enabled
+#	|	|-- *.load
+#	|	`-- *.conf
+#	|-- conf.d
+#	|	`-- *
+
+# Global configuration
+PidFile ${APACHE_PID_FILE}
+Timeout 30
+KeepAlive Off
+MaxKeepAliveRequests 100
+KeepAliveTimeout 10
+
+<IfModule mpm_prefork_module>
+    StartServers          8
+    MinSpareServers       5
+    MaxSpareServers      20
+    ServerLimit         256
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_worker_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_event_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+# These need to be set in /etc/apache2/envvars
+User ${APACHE_RUN_USER}
+Group ${APACHE_RUN_GROUP}
+#User www-data
+#Group www-data
+
+AccessFileName .htaccess
+
+<Files ~ "^\.ht">
+    Order allow,deny
+    Deny from all
+    Satisfy all
+</Files>
+
+DefaultType None
+HostnameLookups Off
+
+ErrorLog ${APACHE_LOG_DIR}/error.log
+LogLevel warn
+
+# Include module configuration:
+Include mods-enabled/*.load
+Include mods-enabled/*.conf
+
+# Include list of ports to listen on and which to use for name based vhosts
+Include ports.conf
+
+LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
+LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
+LogFormat "%h %l %u %t \"%r\" %>s %O" common
+LogFormat "%{Referer}i -> %U" referer
+LogFormat "%{User-agent}i" agent
+LogFormat "%b" bytes
+
+Include conf.d/
+
+# Include the virtual host configurations:
+#Include sites-enabled/
+
+ErrorDocument 403 /error/403.html
+ErrorDocument 404 /error/404.html
+ErrorDocument 500 /error/50x.html
+ErrorDocument 501 /error/50x.html
+ErrorDocument 502 /error/50x.html
+ErrorDocument 503 /error/50x.html
+ErrorDocument 506 /error/50x.html
diff --git a/install/ubuntu/17.04/apache2/status.conf b/install/ubuntu/17.04/apache2/status.conf
new file mode 100644
index 00000000..da9d9633
--- /dev/null
+++ b/install/ubuntu/17.04/apache2/status.conf
@@ -0,0 +1,8 @@
+Listen 127.0.0.1:8081
+<Location /server-status>
+    SetHandler server-status
+    Order deny,allow
+    Deny from all
+    Allow from 127.0.0.1
+    Allow from all
+</Location>
diff --git a/install/ubuntu/17.04/bind/named.conf b/install/ubuntu/17.04/bind/named.conf
new file mode 100644
index 00000000..ed6ece88
--- /dev/null
+++ b/install/ubuntu/17.04/bind/named.conf
@@ -0,0 +1,12 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
+
diff --git a/install/ubuntu/17.04/clamav/clamd.conf b/install/ubuntu/17.04/clamav/clamd.conf
new file mode 100644
index 00000000..4e04356e
--- /dev/null
+++ b/install/ubuntu/17.04/clamav/clamd.conf
@@ -0,0 +1,61 @@
+#Automatically Generated by clamav-base postinst
+#To reconfigure clamd run #dpkg-reconfigure clamav-base
+#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
+LocalSocket /var/run/clamav/clamd.ctl
+FixStaleSocket true
+LocalSocketGroup clamav
+LocalSocketMode 666
+# TemporaryDirectory is not set to its default /tmp here to make overriding
+# the default with environment variables TMPDIR/TMP/TEMP possible
+User clamav
+# AllowSupplementaryGroups true
+ScanMail true
+ScanArchive true
+ArchiveBlockEncrypted false
+MaxDirectoryRecursion 15
+FollowDirectorySymlinks false
+FollowFileSymlinks false
+ReadTimeout 180
+MaxThreads 12
+MaxConnectionQueueLength 15
+LogSyslog false
+LogFacility LOG_LOCAL6
+LogClean false
+LogVerbose true
+PidFile /var/run/clamav/clamd.pid
+DatabaseDirectory /var/lib/clamav
+SelfCheck 3600
+Foreground false
+Debug false
+ScanPE true
+ScanOLE2 true
+ScanHTML true
+DetectBrokenExecutables false
+ExitOnOOM false
+LeaveTemporaryFiles false
+AlgorithmicDetection true
+ScanELF true
+IdleTimeout 30
+PhishingSignatures true
+PhishingScanURLs true
+PhishingAlwaysBlockSSLMismatch false
+PhishingAlwaysBlockCloak false
+DetectPUA false
+ScanPartialMessages false
+HeuristicScanPrecedence false
+StructuredDataDetection false
+CommandReadTimeout 5
+SendBufTimeout 200
+MaxQueue 100
+ExtendedDetectionInfo true
+OLE2BlockMacros false
+StreamMaxLength 25M
+LogFile /var/log/clamav/clamav.log
+LogTime true
+LogFileUnlock false
+LogFileMaxSize 0
+Bytecode true
+BytecodeSecurity TrustSigned
+BytecodeTimeout 60000
+OfficialDatabaseOnly false
+CrossFilesystems true
diff --git a/install/ubuntu/17.04/deb_signing.key b/install/ubuntu/17.04/deb_signing.key
new file mode 100644
index 00000000..2ad2db8b
--- /dev/null
+++ b/install/ubuntu/17.04/deb_signing.key
@@ -0,0 +1,30 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.12 (GNU/Linux)
+
+mQENBFJIGbEBCAC8SHOOFo7iDTbnC2GhNZ+uBGCh226Dn1QPoFZNFM/DNakHZ6rD
+G3wzr8++eKz4fJual/VLllE2N9XDPuxbozb3LLkcyY1WzJqtIXbXhFGQ/SuIeT+x
+QY90XU6t2Ckze2c+zUniAWmJ8GSyVmXOoc9JxAQ1u47wvGXLzrjWXc8u8PNRYXuf
+fZplTL+dFu9P0d6lP8FGsV+r9wXvvazpRTz3+H8PKrGCYT55ZQIEdG9Jgamylto2
+oVPFXkwGML+TLw6oeCIBuz2y2vtivphW4MJ3ifQjDj7k3n+DTIxfDFs8lB6VRhhY
+2nMHCrcZC6U2mhmXmr6O4s1fu6irBVx05ejPABEBAAG0IFNlcmdoZXkgUm9kaW4g
+PHNraWRAdmVzdGFjcC5jb20+iQE4BBMBAgAiBQJSSBmxAhsDBgsJCAcDAgYVCAIJ
+CgsEFgIDAQIeAQIXgAAKCRBCxbITCh93FPdqB/93GjV9g+wBfeZYLHQK9MDU2wBb
+VloYOJJae6IvYKYQVAJayD3PbHdpxrF8s9e23vdnmb9jKu6jX6oV54EIyqP2HPiN
+QYc8wcea+eSHerznBixCtoQh8mtdWGFeN71zU/ig7L5qlOVF/EmxDVZTFUeivFxh
+IV6qyBnktQKktE45585yKZyyLtfGoXA54DGK69OtJFh+wdkKEMmUXocMl7wUrxW6
+Cx2CuKeEXEgvwu8mRHQi3S3T9XP456qWEn5dWyMVcP660IzEuZfSJApZusNK7zG3
+WMy0/EuX7xHNY3mcNxTOUN1LsO7iHnhHD9+iKWJo9parGkMZzc92MpjDK/g7uQEN
+BFJIGbEBCAC7k5QEA9WQM7E3ceNaeLMrA9lXfuzaNCcySq7ONdVAa5PxzbSKdHvz
+QFoL1VFqBTYQ038lbil1XqnoM0zvIfAI3LcpS8sq92El/vPxp6jZh2Ari9Uw7x95
+k2cZMgI67g+zQMGdjVRA155nFQRCgg000xU4F7JA6+WsuLlVUmccsDv7YWJExMtC
+YPxiuz5DFu8RALnw4Ckts+dbwsrcvUHhkm9b6RAsdCKjjRpUZjLgdltjH83gUVvt
+i1YmdjjsVpt95dtsaG+ad852g/Rk8EdxNMkjPF6HLA67CLADP9wYaj80yPcPtylS
+ycvPtcclVeHkFBRVM8xZpQd4iD19MWI1ABEBAAGJAR8EGAECAAkFAlJIGbECGwwA
+CgkQQsWyEwofdxQ7tQgAhB0FwTs7L8Qr63DHC2yAnXVxgtTAY1/36CccNXVculyR
++EkLcwahms9AKhz7eQb+Mud+5vH0GRohLp2npgO38CjVUfIP5d+Y6dsthmrkF6p8
+XdV1dVK9vWX+i/YZSw/Mded30Cq4P2Yhq9EaemMT0rtli8lz2NnkZ9dFJZk1lzJC
+CZmRpbjSNWqRU4f7qyh21lYk/OC/0XE8fh8CaO23TZ+6gBionoCztwb7NyC9OArN
+qYlNnbmh9iNqdblykPS3bkjf34n2xyMgnIehNrM89tk8PY4UfNPhgT1TMD9W3Svq
+ynNZvLuF/FIDwDeC1qcfjGbfDn9fXO/lMIIRooQYKQ==
+=J2HJ
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/install/ubuntu/17.04/dovecot/conf.d/10-auth.conf b/install/ubuntu/17.04/dovecot/conf.d/10-auth.conf
new file mode 100644
index 00000000..dfcc8311
--- /dev/null
+++ b/install/ubuntu/17.04/dovecot/conf.d/10-auth.conf
@@ -0,0 +1,4 @@
+disable_plaintext_auth = no
+auth_verbose = yes
+auth_mechanisms = plain login
+!include auth-passwdfile.conf.ext
diff --git a/install/ubuntu/17.04/dovecot/conf.d/10-logging.conf b/install/ubuntu/17.04/dovecot/conf.d/10-logging.conf
new file mode 100644
index 00000000..a5f207d5
--- /dev/null
+++ b/install/ubuntu/17.04/dovecot/conf.d/10-logging.conf
@@ -0,0 +1 @@
+log_path = /var/log/dovecot.log
diff --git a/install/ubuntu/17.04/dovecot/conf.d/10-mail.conf b/install/ubuntu/17.04/dovecot/conf.d/10-mail.conf
new file mode 100644
index 00000000..55313419
--- /dev/null
+++ b/install/ubuntu/17.04/dovecot/conf.d/10-mail.conf
@@ -0,0 +1,4 @@
+mail_privileged_group = mail
+mail_access_groups = mail
+mail_location = maildir:%h/mail/%d/%n
+pop3_uidl_format = %08Xu%08Xv
diff --git a/install/ubuntu/17.04/dovecot/conf.d/10-master.conf b/install/ubuntu/17.04/dovecot/conf.d/10-master.conf
new file mode 100644
index 00000000..a75a9aaa
--- /dev/null
+++ b/install/ubuntu/17.04/dovecot/conf.d/10-master.conf
@@ -0,0 +1,29 @@
+service imap-login {
+  inet_listener imap {
+  }
+  inet_listener imaps {
+  }
+}
+
+service pop3-login {
+  inet_listener pop3 {
+  }
+  inet_listener pop3s {
+  }
+}
+
+
+service imap {
+}
+
+service pop3 {
+}
+
+service auth {
+  unix_listener auth-client {
+    group = mail
+    mode = 0660
+    user = dovecot
+  }
+  user = dovecot
+}
diff --git a/install/ubuntu/17.04/dovecot/conf.d/10-ssl.conf b/install/ubuntu/17.04/dovecot/conf.d/10-ssl.conf
new file mode 100644
index 00000000..24cbf3e2
--- /dev/null
+++ b/install/ubuntu/17.04/dovecot/conf.d/10-ssl.conf
@@ -0,0 +1,5 @@
+ssl = yes
+ssl_protocols = !SSLv2 !SSLv3
+
+ssl_cert = </usr/local/vesta/ssl/certificate.crt
+ssl_key = </usr/local/vesta/ssl/certificate.key
diff --git a/install/ubuntu/17.04/dovecot/conf.d/20-imap.conf b/install/ubuntu/17.04/dovecot/conf.d/20-imap.conf
new file mode 100644
index 00000000..1a459f8e
--- /dev/null
+++ b/install/ubuntu/17.04/dovecot/conf.d/20-imap.conf
@@ -0,0 +1,58 @@
+##
+## IMAP specific settings
+##
+
+protocol imap {
+  # Maximum IMAP command line length. Some clients generate very long command
+  # lines with huge mailboxes, so you may need to raise this if you get
+  # "Too long argument" or "IMAP command line too large" errors often.
+  #imap_max_line_length = 64k
+
+  # Maximum number of IMAP connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  #mail_max_userip_connections = 10
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # IMAP logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #imap_logout_format = bytes=%i/%o
+
+  # Override the IMAP CAPABILITY response. If the value begins with '+',
+  # add the given capabilities on top of the defaults (e.g. +XFOO XBAR).
+  #imap_capability = 
+
+  # How long to wait between "OK Still here" notifications when client is
+  # IDLEing.
+  #imap_idle_notify_interval = 2 mins
+
+  # ID field names and values to send to clients. Using * as the value makes
+  # Dovecot use the default value. The following fields have default values
+  # currently: name, version, os, os-version, support-url, support-email.
+  #imap_id_send = 
+
+  # ID fields sent by client to log. * means everything.
+  #imap_id_log =
+
+  # Workarounds for various client bugs:
+  #   delay-newmail:
+  #     Send EXISTS/RECENT new mail notifications only when replying to NOOP
+  #     and CHECK commands. Some clients ignore them otherwise, for example OSX
+  #     Mail (<v2.1). Outlook Express breaks more badly though, without this it
+  #     may show user "Message no longer in server" errors. Note that OE6 still
+  #     breaks even with this workaround if synchronization is set to
+  #     "Headers Only".
+  #   tb-extra-mailbox-sep:
+  #     Thunderbird gets somehow confused with LAYOUT=fs (mbox and dbox) and
+  #     adds extra '/' suffixes to mailbox names. This option causes Dovecot to
+  #     ignore the extra '/' instead of treating it as invalid mailbox name.
+  #   tb-lsub-flags:
+  #     Show \Noselect flags for LSUB replies with LAYOUT=fs (e.g. mbox).
+  #     This makes Thunderbird realize they aren't selectable and show them
+  #     greyed out, instead of only later giving "not selectable" popup error.
+  #
+  # The list is space-separated.
+  #imap_client_workarounds = 
+}
diff --git a/install/ubuntu/17.04/dovecot/conf.d/20-pop3.conf b/install/ubuntu/17.04/dovecot/conf.d/20-pop3.conf
new file mode 100644
index 00000000..a3a43b88
--- /dev/null
+++ b/install/ubuntu/17.04/dovecot/conf.d/20-pop3.conf
@@ -0,0 +1,91 @@
+##
+## POP3 specific settings
+##
+
+protocol pop3 {
+  # Don't try to set mails non-recent or seen with POP3 sessions. This is
+  # mostly intended to reduce disk I/O. With maildir it doesn't move files
+  # from new/ to cur/, with mbox it doesn't write Status-header.
+  #pop3_no_flag_updates = no
+
+  # Support LAST command which exists in old POP3 specs, but has been removed
+  # from new ones. Some clients still wish to use this though. Enabling this
+  # makes RSET command clear all \Seen flags from messages.
+  #pop3_enable_last = no
+
+  # If mail has X-UIDL header, use it as the mail's UIDL.
+  #pop3_reuse_xuidl = no
+
+  # Keep the mailbox locked for the entire POP3 session.
+  #pop3_lock_session = no
+
+  # POP3 requires message sizes to be listed as if they had CR+LF linefeeds.
+  # Many POP3 servers violate this by returning the sizes with LF linefeeds,
+  # because it's faster to get. When this setting is enabled, Dovecot still
+  # tries to do the right thing first, but if that requires opening the
+  # message, it fallbacks to the easier (but incorrect) size.
+  #pop3_fast_size_lookups = no
+
+  # POP3 UIDL (unique mail identifier) format to use. You can use following
+  # variables, along with the variable modifiers described in
+  # doc/wiki/Variables.txt (e.g. %Uf for the filename in uppercase)
+  #
+  #  %v - Mailbox's IMAP UIDVALIDITY
+  #  %u - Mail's IMAP UID
+  #  %m - MD5 sum of the mailbox headers in hex (mbox only)
+  #  %f - filename (maildir only)
+  #  %g - Mail's GUID
+  #
+  # If you want UIDL compatibility with other POP3 servers, use:
+  #  UW's ipop3d         : %08Xv%08Xu
+  #  Courier             : %f or %v-%u (both might be used simultaneosly)
+  #  Cyrus (<= 2.1.3)    : %u
+  #  Cyrus (>= 2.1.4)    : %v.%u
+  #  Dovecot v0.99.x     : %v.%u
+  #  tpop3d              : %Mf
+  #
+  # Note that Outlook 2003 seems to have problems with %v.%u format which was
+  # Dovecot's default, so if you're building a new server it would be a good
+  # idea to change this. %08Xu%08Xv should be pretty fail-safe.
+  #
+  #pop3_uidl_format = %08Xu%08Xv
+
+  # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes
+  # won't change those UIDLs. Currently this works only with Maildir.
+  #pop3_save_uidl = no
+
+  # What to do about duplicate UIDLs if they exist?
+  #   allow: Show duplicates to clients.
+  #   rename: Append a temporary -2, -3, etc. counter after the UIDL.
+  #pop3_uidl_duplicates = allow
+
+  # POP3 logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #  %t - number of TOP commands
+  #  %p - number of bytes sent to client as a result of TOP command
+  #  %r - number of RETR commands
+  #  %b - number of bytes sent to client as a result of RETR command
+  #  %d - number of deleted messages
+  #  %m - number of messages (before deletion)
+  #  %s - mailbox size in bytes (before deletion)
+  #  %u - old/new UIDL hash. may help finding out if UIDLs changed unexpectedly
+  #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
+
+  # Maximum number of POP3 connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  #mail_max_userip_connections = 10
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # Workarounds for various client bugs:
+  #   outlook-no-nuls:
+  #     Outlook and Outlook Express hang if mails contain NUL characters.
+  #     This setting replaces them with 0x80 character.
+  #   oe-ns-eoh:
+  #     Outlook Express and Netscape Mail breaks if end of headers-line is
+  #     missing. This option simply sends it if it's missing.
+  # The list is space-separated.
+  #pop3_client_workarounds = 
+}
diff --git a/install/ubuntu/17.04/dovecot/conf.d/auth-passwdfile.conf.ext b/install/ubuntu/17.04/dovecot/conf.d/auth-passwdfile.conf.ext
new file mode 100644
index 00000000..75e6e115
--- /dev/null
+++ b/install/ubuntu/17.04/dovecot/conf.d/auth-passwdfile.conf.ext
@@ -0,0 +1,9 @@
+passdb {
+  driver = passwd-file
+  args = scheme=MD5-CRYPT username_format=%n /etc/exim4/domains/%d/passwd
+}
+
+userdb {
+  driver = passwd-file
+  args = username_format=%n /etc/exim4/domains/%d/passwd
+}
diff --git a/install/ubuntu/17.04/dovecot/dovecot.conf b/install/ubuntu/17.04/dovecot/dovecot.conf
new file mode 100644
index 00000000..311a3351
--- /dev/null
+++ b/install/ubuntu/17.04/dovecot/dovecot.conf
@@ -0,0 +1,24 @@
+protocols = imap pop3
+listen = *, ::
+base_dir = /var/run/dovecot/
+!include conf.d/*.conf
+
+namespace {
+    type = private
+    separator = /
+    prefix =
+    inbox = yes
+
+    mailbox Sent {
+        auto = subscribe
+        special_use = \Sent
+    }
+    mailbox Drafts {
+        auto = subscribe
+        special_use = \Drafts
+    }
+    mailbox Trash {
+        auto = subscribe
+        special_use = \Trash
+    }
+}
diff --git a/install/ubuntu/17.04/exim/dnsbl.conf b/install/ubuntu/17.04/exim/dnsbl.conf
new file mode 100644
index 00000000..5166b255
--- /dev/null
+++ b/install/ubuntu/17.04/exim/dnsbl.conf
@@ -0,0 +1,2 @@
+bl.spamcop.net
+zen.spamhaus.org
diff --git a/install/ubuntu/17.04/exim/exim4.conf.template b/install/ubuntu/17.04/exim/exim4.conf.template
new file mode 100644
index 00000000..fc346486
--- /dev/null
+++ b/install/ubuntu/17.04/exim/exim4.conf.template
@@ -0,0 +1,382 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+add_environment = <; PATH=/bin:/usr/bin
+keep_environment =
+disable_ipv6 = true
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/certificate.crt
+tls_privatekey = /usr/local/vesta/ssl/certificate.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 5s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lc:${domain:$h_from:}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+begin acl
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth required
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = *
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{1024K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = debian-spamd:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/$domain/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #helo_data = $sender_address_domain
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  from = "${local_part}@${domain}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################
diff --git a/install/ubuntu/17.04/exim/spam-blocks.conf b/install/ubuntu/17.04/exim/spam-blocks.conf
new file mode 100644
index 00000000..e69de29b
diff --git a/install/ubuntu/17.04/fail2ban/action.d/vesta.conf b/install/ubuntu/17.04/fail2ban/action.d/vesta.conf
new file mode 100644
index 00000000..0edfc349
--- /dev/null
+++ b/install/ubuntu/17.04/fail2ban/action.d/vesta.conf
@@ -0,0 +1,9 @@
+# Fail2Ban configuration file for vesta
+
+[Definition]
+
+actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
+actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
+actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
+actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
+actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>
diff --git a/install/ubuntu/17.04/fail2ban/filter.d/vesta.conf b/install/ubuntu/17.04/fail2ban/filter.d/vesta.conf
new file mode 100644
index 00000000..69670a56
--- /dev/null
+++ b/install/ubuntu/17.04/fail2ban/filter.d/vesta.conf
@@ -0,0 +1,10 @@
+# Fail2Ban filter for unsuccesfull Vesta authentication attempts
+#
+
+[INCLUDES]
+before = common.conf
+
+[Definition]
+failregex =  .* <HOST> failed to login
+ignoreregex =
+
diff --git a/install/ubuntu/17.04/fail2ban/jail.local b/install/ubuntu/17.04/fail2ban/jail.local
new file mode 100644
index 00000000..013f81c4
--- /dev/null
+++ b/install/ubuntu/17.04/fail2ban/jail.local
@@ -0,0 +1,51 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
+[ssh-iptables]
+enabled  = true
+filter   = sshd
+action   = vesta[name=SSH]
+logpath  = /var/log/auth.log
+maxretry = 5
+
+[vsftpd-iptables]
+enabled  = false
+filter   = vsftpd
+action   = vesta[name=FTP]
+logpath  = /var/log/vsftpd.log
+maxretry = 5
+
+[exim-iptables]
+enabled = true
+filter  = exim
+action  = vesta[name=MAIL]
+logpath = /var/log/exim4/mainlog
+maxretry = 5
+
+[dovecot-iptables]
+enabled = true
+filter  = dovecot
+action  = vesta[name=MAIL]
+logpath = /var/log/dovecot.log
+maxretry = 5
+
+[mysqld-iptables]
+enabled  = false
+filter   = mysqld-auth
+action   = vesta[name=DB]
+logpath  = /var/log/mysql.log
+maxretry = 5
+
+[vesta-iptables]
+enabled = true
+filter  = vesta
+action  = vesta[name=VESTA]
+logpath = /var/log/vesta/auth.log
+maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5
diff --git a/install/ubuntu/17.04/firewall/ports.conf b/install/ubuntu/17.04/firewall/ports.conf
new file mode 100644
index 00000000..b730d012
--- /dev/null
+++ b/install/ubuntu/17.04/firewall/ports.conf
@@ -0,0 +1,17 @@
+PROTOCOL='TCP' PORT='20'
+PROTOCOL='TCP' PORT='21'
+PROTOCOL='TCP' PORT='22'
+PROTOCOL='TCP' PORT='25'
+PROTOCOL='TCP' PORT='53'
+PROTOCOL='UDP' PORT='53'
+PROTOCOL='TCP' PORT='80'
+PROTOCOL='TCP' PORT='443'
+PROTOCOL='TCP' PORT='110'
+PROTOCOL='UDP' PORT='123'
+PROTOCOL='TCP' PORT='143'
+PROTOCOL='TCP' PORT='3306'
+PROTOCOL='TCP' PORT='5432'
+PROTOCOL='TCP' PORT='8080'
+PROTOCOL='TCP' PORT='8433'
+PROTOCOL='TCP' PORT='8083'
+PROTOCOL='TCP' PORT='12000:12100'
diff --git a/install/ubuntu/17.04/firewall/rules.conf b/install/ubuntu/17.04/firewall/rules.conf
new file mode 100644
index 00000000..fba98e1e
--- /dev/null
+++ b/install/ubuntu/17.04/firewall/rules.conf
@@ -0,0 +1,11 @@
+RULE='1' ACTION='ACCEPT' PROTOCOL='ICMP' PORT='0' IP='0.0.0.0/0' COMMENT='PING' SUSPENDED='no' TIME='17:13:48' DATE='2014-09-16'
+RULE='2' ACTION='ACCEPT' PROTOCOL='TCP' PORT='8083' IP='0.0.0.0/0' COMMENT='VESTA' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='3' ACTION='ACCEPT' PROTOCOL='TCP' PORT='3306,5432' IP='0.0.0.0/0' COMMENT='DB' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='4' ACTION='ACCEPT' PROTOCOL='TCP' PORT='143,993' IP='0.0.0.0/0' COMMENT='IMAP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='5' ACTION='ACCEPT' PROTOCOL='TCP' PORT='110,995' IP='0.0.0.0/0' COMMENT='POP3' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='6' ACTION='ACCEPT' PROTOCOL='TCP' PORT='25,465,587,2525' IP='0.0.0.0/0' COMMENT='SMTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='7' ACTION='ACCEPT' PROTOCOL='TCP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='8' ACTION='ACCEPT' PROTOCOL='UDP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='9' ACTION='ACCEPT' PROTOCOL='TCP' PORT='21,12000-12100' IP='0.0.0.0/0' COMMENT='FTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='10' ACTION='ACCEPT' PROTOCOL='TCP' PORT='80,443' IP='0.0.0.0/0' COMMENT='WEB' SUSPENDED='no' TIME='17:04:27' DATE='2014-09-24'
+RULE='11' ACTION='ACCEPT' PROTOCOL='TCP' PORT='22' IP='0.0.0.0/0' COMMENT='SSH' SUSPENDED='no' TIME='17:14:41' DATE='2014-09-16'
diff --git a/install/ubuntu/17.04/logrotate/apache2 b/install/ubuntu/17.04/logrotate/apache2
new file mode 100644
index 00000000..27629d0d
--- /dev/null
+++ b/install/ubuntu/17.04/logrotate/apache2
@@ -0,0 +1,19 @@
+/var/log/apache2/*.log /var/log/apache2/domains/*log {
+        weekly
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 root adm
+        sharedscripts
+        postrotate
+                /etc/init.d/apache2 reload > /dev/null || true
+                [ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+        prerotate
+                if [ -d /etc/logrotate.d/httpd-prerotate ]; then \
+                        run-parts /etc/logrotate.d/httpd-prerotate; \
+                fi; \
+        endscript
+}
diff --git a/install/ubuntu/17.04/logrotate/dovecot b/install/ubuntu/17.04/logrotate/dovecot
new file mode 100644
index 00000000..ac4fd6e9
--- /dev/null
+++ b/install/ubuntu/17.04/logrotate/dovecot
@@ -0,0 +1,12 @@
+/var/log/dovecot*.log {
+  weekly
+  rotate 4
+  missingok
+  notifempty
+  compress
+  delaycompress
+  sharedscripts
+  postrotate
+    doveadm log reopen
+  endscript
+}
diff --git a/install/ubuntu/17.04/logrotate/nginx b/install/ubuntu/17.04/logrotate/nginx
new file mode 100644
index 00000000..d667f213
--- /dev/null
+++ b/install/ubuntu/17.04/logrotate/nginx
@@ -0,0 +1,13 @@
+/var/log/nginx/*log /var/log/nginx/domains/*log {
+        daily
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 nginx adm
+        sharedscripts
+        postrotate
+                [ -f /var/run/nginx.pid ] && kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+}
diff --git a/install/ubuntu/17.04/logrotate/vesta b/install/ubuntu/17.04/logrotate/vesta
new file mode 100644
index 00000000..027a3439
--- /dev/null
+++ b/install/ubuntu/17.04/logrotate/vesta
@@ -0,0 +1,7 @@
+/usr/local/vesta/log/*.log {
+    missingok
+    notifempty
+    size 30k
+    yearly
+    create 0600 root root
+}
diff --git a/install/ubuntu/17.04/mysql/my-large.cnf b/install/ubuntu/17.04/mysql/my-large.cnf
new file mode 100644
index 00000000..7201377c
--- /dev/null
+++ b/install/ubuntu/17.04/mysql/my-large.cnf
@@ -0,0 +1,41 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 256M
+max_allowed_packet = 32M
+table_open_cache = 256
+sort_buffer_size = 1M
+read_buffer_size = 1M
+read_rnd_buffer_size = 4M
+myisam_sort_buffer_size = 64M
+thread_cache_size = 8
+query_cache_size= 16M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=200
+max_user_connections=50
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/ubuntu/17.04/mysql/my-medium.cnf b/install/ubuntu/17.04/mysql/my-medium.cnf
new file mode 100644
index 00000000..1c10ab9a
--- /dev/null
+++ b/install/ubuntu/17.04/mysql/my-medium.cnf
@@ -0,0 +1,40 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+  
+skip-external-locking
+key_buffer_size = 16M
+max_allowed_packet = 16M
+table_open_cache = 64
+sort_buffer_size = 512K
+net_buffer_length = 8K
+read_buffer_size = 256K
+read_rnd_buffer_size = 512K
+myisam_sort_buffer_size = 8M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=70
+max_user_connections=30
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/ubuntu/17.04/mysql/my-small.cnf b/install/ubuntu/17.04/mysql/my-small.cnf
new file mode 100644
index 00000000..26a80478
--- /dev/null
+++ b/install/ubuntu/17.04/mysql/my-small.cnf
@@ -0,0 +1,40 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 16K
+max_allowed_packet = 1M
+table_open_cache = 4
+sort_buffer_size = 64K
+read_buffer_size = 256K
+read_rnd_buffer_size = 256K
+net_buffer_length = 2K
+thread_stack = 240K
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=30
+max_user_connections=20
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/ubuntu/17.04/nginx/nginx.conf b/install/ubuntu/17.04/nginx/nginx.conf
new file mode 100644
index 00000000..e7256de7
--- /dev/null
+++ b/install/ubuntu/17.04/nginx/nginx.conf
@@ -0,0 +1,136 @@
+# Server globals
+user                    www-data;
+worker_processes        auto;
+worker_rlimit_nofile    65535;
+error_log               /var/log/nginx/error.log crit;
+pid                     /var/run/nginx.pid;
+
+
+# Worker config
+events {
+        worker_connections  1024;
+        use                 epoll;
+        multi_accept        on;
+}
+
+
+http {
+    # Main settings
+    sendfile                        on;
+    tcp_nopush                      on;
+    tcp_nodelay                     on;
+    client_header_timeout           1m;
+    client_body_timeout             1m;
+    client_header_buffer_size       2k;
+    client_body_buffer_size         256k;
+    client_max_body_size            256m;
+    large_client_header_buffers     4   8k;
+    send_timeout                    30;
+    keepalive_timeout               60 60;
+    reset_timedout_connection       on;
+    server_tokens                   off;
+    server_name_in_redirect         off;
+    server_names_hash_max_size      512;
+    server_names_hash_bucket_size   512;
+
+
+    # Log format
+    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
+                        '"$status" $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  bytes   '$body_bytes_sent';
+    #access_log          /var/log/nginx/access.log main;
+    access_log off;
+
+
+    # Mime settings
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+
+    # Compression
+    gzip                on;
+    gzip_comp_level     9;
+    gzip_min_length     512;
+    gzip_buffers        8 64k;
+    gzip_types          text/plain text/css text/javascript text/js text/xml application/json application/javascript application/x-javascript application/xml application/xml+rss application/x-font-ttf image/svg+xml font/opentype;
+    gzip_proxied        any;
+    gzip_disable        "MSIE [1-6]\.";
+
+    # Proxy settings
+    proxy_redirect      off;
+    proxy_set_header    Host            $host;
+    proxy_set_header    X-Real-IP       $remote_addr;
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_header   Set-Cookie;
+    proxy_connect_timeout   90;
+    proxy_send_timeout  90;
+    proxy_read_timeout  90;
+    proxy_buffers       32 4k;
+
+
+    # Cloudflare https://www.cloudflare.com/ips
+    set_real_ip_from   103.21.244.0/22;
+    set_real_ip_from   103.22.200.0/22;
+    set_real_ip_from   103.31.4.0/22;
+    set_real_ip_from   104.16.0.0/12;
+    set_real_ip_from   108.162.192.0/18;
+    set_real_ip_from   131.0.72.0/22;
+    set_real_ip_from   141.101.64.0/18;
+    set_real_ip_from   162.158.0.0/15;
+    set_real_ip_from   172.64.0.0/13;
+    set_real_ip_from   173.245.48.0/20;
+    set_real_ip_from   188.114.96.0/20;
+    set_real_ip_from   190.93.240.0/20;
+    set_real_ip_from   197.234.240.0/22;
+    set_real_ip_from   198.41.128.0/17;
+    #set_real_ip_from   2400:cb00::/32;
+    #set_real_ip_from   2606:4700::/32;
+    #set_real_ip_from   2803:f800::/32;
+    #set_real_ip_from   2405:b500::/32;
+    #set_real_ip_from   2405:8100::/32;
+    #set_real_ip_from   2c0f:f248::/32;
+    #set_real_ip_from   2a06:98c0::/29;
+    real_ip_header     CF-Connecting-IP;
+
+
+    # SSL PCI Compliance
+    ssl_session_cache   shared:SSL:10m;
+    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
+
+
+    # Error pages
+    error_page          403          /error/403.html;
+    error_page          404          /error/404.html;
+    error_page          502 503 504  /error/50x.html;
+
+
+    # Cache settings
+    proxy_cache_path /var/cache/nginx levels=2 keys_zone=cache:10m inactive=60m max_size=1024m;
+    proxy_cache_key "$host$request_uri $cookie_user";
+    proxy_temp_path  /var/cache/nginx/temp;
+    proxy_ignore_headers Expires Cache-Control;
+    proxy_cache_use_stale error timeout invalid_header http_502;
+    proxy_cache_valid any 1d;
+
+
+    # Cache bypass
+    map $http_cookie $no_cache {
+        default 0;
+        ~SESS 1;
+        ~wordpress_logged_in 1;
+    }
+
+
+    # File cache settings
+    open_file_cache          max=10000 inactive=30s;
+    open_file_cache_valid    60s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors   off;
+
+
+    # Wildcard include
+    include             /etc/nginx/conf.d/*.conf;
+}
diff --git a/install/ubuntu/17.04/nginx/phpmyadmin.inc b/install/ubuntu/17.04/nginx/phpmyadmin.inc
new file mode 100644
index 00000000..1feb8546
--- /dev/null
+++ b/install/ubuntu/17.04/nginx/phpmyadmin.inc
@@ -0,0 +1,18 @@
+location /phpmyadmin {
+    alias /usr/share/phpmyadmin/;
+
+    location ~ /(libraries|setup) {
+        return 404;
+    }
+
+    location ~ ^/phpmyadmin/(.*\.php)$ {
+        alias /usr/share/phpmyadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+    location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
+        root /usr/share/;
+    }
+}
diff --git a/install/ubuntu/17.04/nginx/phppgadmin.inc b/install/ubuntu/17.04/nginx/phppgadmin.inc
new file mode 100644
index 00000000..cd1e5806
--- /dev/null
+++ b/install/ubuntu/17.04/nginx/phppgadmin.inc
@@ -0,0 +1,11 @@
+location /phppgadmin {
+    alias /usr/share/phppgadmin/;
+
+    location ~ ^/phppgadmin/(.*\.php)$ {
+        alias /usr/share/phppgadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/ubuntu/17.04/nginx/status.conf b/install/ubuntu/17.04/nginx/status.conf
new file mode 100644
index 00000000..c0bcd069
--- /dev/null
+++ b/install/ubuntu/17.04/nginx/status.conf
@@ -0,0 +1,9 @@
+server {
+    listen       127.0.0.1:8084 default;
+    server_name  _;
+    server_name_in_redirect  off;
+    location / {
+        stub_status on;
+        access_log   off;
+   }
+}
diff --git a/install/ubuntu/17.04/nginx/webmail.inc b/install/ubuntu/17.04/nginx/webmail.inc
new file mode 100644
index 00000000..ad66895b
--- /dev/null
+++ b/install/ubuntu/17.04/nginx/webmail.inc
@@ -0,0 +1,15 @@
+location /webmail {
+    alias /var/lib/roundcube/;
+
+    location ~ /(config|temp|logs) {
+        return 404;
+    }
+
+    location ~ ^/webmail/(.*\.php)$ {
+        alias /var/lib/roundcube/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/ubuntu/17.04/packages/default.pkg b/install/ubuntu/17.04/packages/default.pkg
new file mode 100644
index 00000000..c2a93574
--- /dev/null
+++ b/install/ubuntu/17.04/packages/default.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='100'
+WEB_ALIASES='100'
+DNS_DOMAINS='100'
+DNS_RECORDS='100'
+MAIL_DOMAINS='100'
+MAIL_ACCOUNTS='100'
+DATABASES='100'
+CRON_JOBS='100'
+DISK_QUOTA='unlimited'
+BANDWIDTH='100000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='3'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/17.04/packages/gainsboro.pkg b/install/ubuntu/17.04/packages/gainsboro.pkg
new file mode 100644
index 00000000..76d7dae2
--- /dev/null
+++ b/install/ubuntu/17.04/packages/gainsboro.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='10'
+WEB_ALIASES='10'
+DNS_DOMAINS='10'
+DNS_RECORDS='10'
+MAIL_DOMAINS='10'
+MAIL_ACCOUNTS='10'
+DATABASES='10'
+CRON_JOBS='10'
+DISK_QUOTA='10000'
+BANDWIDTH='10000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='1'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/17.04/packages/palegreen.pkg b/install/ubuntu/17.04/packages/palegreen.pkg
new file mode 100644
index 00000000..3db5fe57
--- /dev/null
+++ b/install/ubuntu/17.04/packages/palegreen.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='hosting'
+PROXY_TEMPLATE='hosting'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='50'
+WEB_ALIASES='50'
+DNS_DOMAINS='50'
+DNS_RECORDS='50'
+MAIL_DOMAINS='50'
+MAIL_ACCOUNTS='50'
+DATABASES='50'
+CRON_JOBS='50'
+DISK_QUOTA='50000'
+BANDWIDTH='50000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='5'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/17.04/packages/slategrey.pkg b/install/ubuntu/17.04/packages/slategrey.pkg
new file mode 100644
index 00000000..d89e796f
--- /dev/null
+++ b/install/ubuntu/17.04/packages/slategrey.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='100'
+WEB_ALIASES='100'
+DNS_DOMAINS='100'
+DNS_RECORDS='100'
+MAIL_DOMAINS='100'
+MAIL_ACCOUNTS='100'
+DATABASES='100'
+CRON_JOBS='100'
+DISK_QUOTA='10000'
+BANDWIDTH='100000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='3'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/17.04/pga/config.inc.php b/install/ubuntu/17.04/pga/config.inc.php
new file mode 100644
index 00000000..1eec9776
--- /dev/null
+++ b/install/ubuntu/17.04/pga/config.inc.php
@@ -0,0 +1,159 @@
+<?php
+
+    /**
+     * Central phpPgAdmin configuration.  As a user you may modify the
+     * settings here for your particular configuration.
+     *
+     * $Id: config.inc.php-dist,v 1.55 2008/02/18 21:10:31 xzilla Exp $
+     */
+
+    // An example server.  Create as many of these as you wish,
+    // indexed from zero upwards.
+
+    // Display name for the server on the login screen
+    $conf['servers'][0]['desc'] = 'PostgreSQL';
+
+    // Hostname or IP address for server.  Use '' for UNIX domain socket.
+    // use 'localhost' for TCP/IP connection on this computer
+    $conf['servers'][0]['host'] = 'localhost';
+
+    // Database port on server (5432 is the PostgreSQL default)
+    $conf['servers'][0]['port'] = 5432;
+
+    // Database SSL mode
+    // Possible options: disable, allow, prefer, require
+    // To require SSL on older servers use option: legacy
+    // To ignore the SSL mode, use option: unspecified
+    $conf['servers'][0]['sslmode'] = 'allow';
+
+    // Change the default database only if you cannot connect to template1.
+    // For a PostgreSQL 8.1+ server, you can set this to 'postgres'.
+    $conf['servers'][0]['defaultdb'] = 'template1';
+
+    // Specify the path to the database dump utilities for this server.
+    // You can set these to '' if no dumper is available.
+    $conf['servers'][0]['pg_dump_path'] = '/usr/bin/pg_dump';
+    $conf['servers'][0]['pg_dumpall_path'] = '/usr/bin/pg_dumpall';
+
+    // Slony (www.slony.info) support?
+    $conf['servers'][0]['slony_support'] = false;
+    // Specify the path to the Slony SQL scripts (where slony1_base.sql is located, etc.)
+    // No trailing slash.
+    $conf['servers'][0]['slony_sql'] = '/usr/share/pgsql';
+
+    // Example for a second server (PostgreSQL for Windows)
+    //$conf['servers'][1]['desc'] = 'Test Server';
+    //$conf['servers'][1]['host'] = '127.0.0.1';
+    //$conf['servers'][1]['port'] = 5432;
+    //$conf['servers'][1]['sslmode'] = 'allow';
+    //$conf['servers'][1]['defaultdb'] = 'template1';
+    //$conf['servers'][1]['pg_dump_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dump.exe';
+    //$conf['servers'][1]['pg_dumpall_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dumpall.exe';
+    //$conf['servers'][1]['slony_support'] = false;
+    //$conf['servers'][1]['slony_sql'] = 'C:\\Program Files\\PostgreSQL\\8.0\\share';
+
+
+    // Example of groups definition.
+    // Groups allow administrators to logicaly group servers together under group nodes in the left browser tree
+    //
+    // The group '0' description
+    //$conf['srv_groups'][0]['desc'] = 'group one';
+    //
+    // Add here servers indexes belonging to the group '0' seperated by comma
+    //$conf['srv_groups'][0]['servers'] = '0,1,2'; 
+    //
+    // A server can belong to multi groups
+    //$conf['srv_groups'][1]['desc'] = 'group two';
+    //$conf['srv_groups'][1]['servers'] = '3,1';
+
+
+    // Default language. E.g.: 'english', 'polish', etc.  See lang/ directory
+    // for all possibilities. If you specify 'auto' (the default) it will use 
+    // your browser preference.
+    $conf['default_lang'] = 'auto';
+
+    // AutoComplete uses AJAX interaction to list foreign key values 
+    // on insert fields. It currently only works on single column 
+    // foreign keys. You can choose one of the following values:
+    // 'default on' enables AutoComplete and turns it on by default.
+    // 'default off' enables AutoComplete but turns it off by default.
+    // 'disable' disables AutoComplete.
+    $conf['autocomplete'] = 'default on';
+
+    // If extra login security is true, then logins via phpPgAdmin with no
+    // password or certain usernames (pgsql, postgres, root, administrator)
+    // will be denied. Only set this false once you have read the FAQ and
+    // understand how to change PostgreSQL's pg_hba.conf to enable
+    // passworded local connections.
+    $conf['extra_login_security'] = true;
+
+    // Only show owned databases?
+    // Note: This will simply hide other databases in the list - this does
+    // not in any way prevent your users from seeing other database by
+    // other means. (e.g. Run 'SELECT * FROM pg_database' in the SQL area.)
+    $conf['owned_only'] = false;
+
+    // Display comments on objects?  Comments are a good way of documenting
+    // a database, but they do take up space in the interface.
+    $conf['show_comments'] = true;
+
+    // Display "advanced" objects? Setting this to true will show 
+    // aggregates, types, operators, operator classes, conversions, 
+    // languages and casts in phpPgAdmin. These objects are rarely 
+    // administered and can clutter the interface.
+    $conf['show_advanced'] = false;
+
+    // Display "system" objects?
+    $conf['show_system'] = false;
+
+    // Display reports feature?  For this feature to work, you must
+    // install the reports database as explained in the INSTALL file.
+    $conf['show_reports'] = true;
+
+    // Database and table for reports
+    $conf['reports_db'] = 'phppgadmin';
+    $conf['reports_schema'] = 'public';
+    $conf['reports_table'] = 'ppa_reports';
+
+    // Only show owned reports?
+    // Note: This does not prevent people from accessing other reports by
+    // other means.
+    $conf['owned_reports_only'] = false;
+
+    // Minimum length users can set their password to.
+    $conf['min_password_length'] = 1;
+
+    // Width of the left frame in pixels (object browser)
+    $conf['left_width'] = 200;
+
+    // Which look & feel theme to use
+    $conf['theme'] = 'default';
+
+    // Show OIDs when browsing tables?
+    $conf['show_oids'] = false;
+
+    // Max rows to show on a page when browsing record sets
+    $conf['max_rows'] = 30;
+
+    // Max chars of each field to display by default in browse mode
+    $conf['max_chars'] = 50;
+
+    // Send XHTML strict headers?
+    $conf['use_xhtml_strict'] = false;
+
+    // Base URL for PostgreSQL documentation.
+    // '%s', if present, will be replaced with the PostgreSQL version
+    // (e.g. 8.4 )
+    $conf['help_base'] = 'http://www.postgresql.org/docs/%s/interactive/';
+
+    // Configuration for ajax scripts
+    // Time in seconds. If set to 0, refreshing data using ajax will be disabled (locks and activity pages)
+    $conf['ajax_refresh'] = 3;
+
+    /*****************************************
+     * Don't modify anything below this line *
+     *****************************************/
+
+    $conf['version'] = 19;
+
+?>
diff --git a/install/ubuntu/17.04/pga/phppgadmin.conf b/install/ubuntu/17.04/pga/phppgadmin.conf
new file mode 100644
index 00000000..f39247d6
--- /dev/null
+++ b/install/ubuntu/17.04/pga/phppgadmin.conf
@@ -0,0 +1,31 @@
+Alias /phppgadmin /usr/share/phppgadmin
+
+<Directory /usr/share/phppgadmin>
+
+DirectoryIndex index.php
+AllowOverride None
+
+order deny,allow
+deny from all
+allow from 127.0.0.0/255.0.0.0 ::1/128
+allow from all
+
+<IfModule mod_php5.c>
+  php_flag magic_quotes_gpc Off
+  php_flag track_vars On
+  php_value include_path .
+</IfModule>
+<IfModule !mod_php5.c>
+  <IfModule mod_actions.c>
+    <IfModule mod_cgi.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+    <IfModule mod_cgid.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+  </IfModule>
+</IfModule>
+
+</Directory>
diff --git a/install/ubuntu/17.04/php-fpm/www.conf b/install/ubuntu/17.04/php-fpm/www.conf
new file mode 100644
index 00000000..3c87f33c
--- /dev/null
+++ b/install/ubuntu/17.04/php-fpm/www.conf
@@ -0,0 +1,11 @@
+[www]
+listen = 127.0.0.1:9000
+listen.allowed_clients = 127.0.0.1
+
+user = www-data
+group = www-data
+
+pm = ondemand
+pm.max_children = 2
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
diff --git a/install/ubuntu/17.04/pma/apache.conf b/install/ubuntu/17.04/pma/apache.conf
new file mode 100644
index 00000000..4da6ce84
--- /dev/null
+++ b/install/ubuntu/17.04/pma/apache.conf
@@ -0,0 +1,42 @@
+# phpMyAdmin default Apache configuration
+
+Alias /phpmyadmin /usr/share/phpmyadmin
+
+<Directory /usr/share/phpmyadmin>
+	Options FollowSymLinks
+	DirectoryIndex index.php
+
+	<IfModule mod_php5.c>
+		AddType application/x-httpd-php .php
+
+		php_flag magic_quotes_gpc Off
+		php_flag track_vars On
+		php_flag register_globals Off
+		php_admin_flag allow_url_fopen Off
+		php_value include_path .
+		php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp
+		php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/:/usr/share/php/php-gettext:/usr/share/javascript/
+	</IfModule>
+
+</Directory>
+
+# Authorize for setup
+<Directory /usr/share/phpmyadmin/setup>
+    <IfModule mod_authn_file.c>
+    AuthType Basic
+    AuthName "phpMyAdmin Setup"
+    AuthUserFile /etc/phpmyadmin/htpasswd.setup
+    </IfModule>
+    Require valid-user
+</Directory>
+
+# Disallow web access to directories that don't need it
+<Directory /usr/share/phpmyadmin/libraries>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+<Directory /usr/share/phpmyadmin/setup/lib>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+
diff --git a/install/ubuntu/17.04/pma/config.inc.php b/install/ubuntu/17.04/pma/config.inc.php
new file mode 100644
index 00000000..a643a065
--- /dev/null
+++ b/install/ubuntu/17.04/pma/config.inc.php
@@ -0,0 +1,146 @@
+<?php
+/**
+ * Debian local configuration file
+ *
+ * This file overrides the settings made by phpMyAdmin interactive setup
+ * utility.
+ *
+ * For example configuration see
+ *   /usr/share/doc/phpmyadmin/examples/config.sample.inc.php
+ * or
+ *   /usr/share/doc/phpmyadmin/examples/config.manyhosts.inc.php
+ *
+ * NOTE: do not add security sensitive data to this file (like passwords)
+ * unless you really know what you're doing. If you do, any user that can
+ * run PHP or CGI on your webserver will be able to read them. If you still
+ * want to do this, make sure to properly secure the access to this file
+ * (also on the filesystem level).
+ */
+
+function check_file_access($path)
+{
+    if (is_readable($path)) {
+        return true;
+    } else {
+        error_log(
+            'phpmyadmin: Failed to load ' . $path
+            . ' Check group www-data has read access and open_basedir restrictions.'
+        );
+        return false;
+    }
+}
+
+// Load secret generated on postinst
+if (check_file_access('/var/lib/phpmyadmin/blowfish_secret.inc.php')) {
+    require('/var/lib/phpmyadmin/blowfish_secret.inc.php');
+}
+
+// Load autoconf local config
+if (check_file_access('/var/lib/phpmyadmin/config.inc.php')) {
+    require('/var/lib/phpmyadmin/config.inc.php');
+}
+
+/**
+ * Server(s) configuration
+ */
+$i = 0;
+// The $cfg['Servers'] array starts with $cfg['Servers'][1].  Do not use $cfg['Servers'][0].
+// You can disable a server config entry by setting host to ''.
+$i++;
+
+/**
+ * Read configuration from dbconfig-common
+ * You can regenerate it using: dpkg-reconfigure -plow phpmyadmin
+ */
+if (check_file_access('/etc/phpmyadmin/config-db.php')) {
+    require('/etc/phpmyadmin/config-db.php');
+}
+
+/* Configure according to dbconfig-common if enabled */
+if (!empty($dbname)) {
+    /* Authentication type */
+    $cfg['Servers'][$i]['auth_type'] = 'cookie';
+    /* Server parameters */
+    if (empty($dbserver)) $dbserver = 'localhost';
+    $cfg['Servers'][$i]['host'] = $dbserver;
+
+    if (!empty($dbport) || $dbserver != 'localhost') {
+        $cfg['Servers'][$i]['connect_type'] = 'tcp';
+        $cfg['Servers'][$i]['port'] = $dbport;
+    }
+    //$cfg['Servers'][$i]['compress'] = false;
+    /* Select mysqli if your server has it */
+    $cfg['Servers'][$i]['extension'] = 'mysqli';
+    /* Optional: User for advanced features */
+    $cfg['Servers'][$i]['controluser'] = $dbuser;
+    $cfg['Servers'][$i]['controlpass'] = $dbpass;
+    /* Optional: Advanced phpMyAdmin features */
+    $cfg['Servers'][$i]['pmadb'] = $dbname;
+    $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+    $cfg['Servers'][$i]['relation'] = 'pma_relation';
+    $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+    $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+    $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+    $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+    $cfg['Servers'][$i]['history'] = 'pma_history';
+    $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+    $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+    $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+    $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+    $cfg['Servers'][$i]['recent'] = 'pma_recent';
+
+    /* Uncomment the following to enable logging in to passwordless accounts,
+     * after taking note of the associated security risks. */
+    // $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+    /* Advance to next server for rest of config */
+    $i++;
+}
+
+/* Authentication type */
+//$cfg['Servers'][$i]['auth_type'] = 'cookie';
+/* Server parameters */
+//$cfg['Servers'][$i]['host'] = 'localhost';
+//$cfg['Servers'][$i]['connect_type'] = 'tcp';
+//$cfg['Servers'][$i]['compress'] = false;
+/* Select mysqli if your server has it */
+//$cfg['Servers'][$i]['extension'] = 'mysql';
+/* Optional: User for advanced features */
+// $cfg['Servers'][$i]['controluser'] = 'pma';
+// $cfg['Servers'][$i]['controlpass'] = 'pmapass';
+
+/* Storage database and tables */
+// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
+// $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+// $cfg['Servers'][$i]['relation'] = 'pma_relation';
+// $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+// $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+// $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+// $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+// $cfg['Servers'][$i]['history'] = 'pma_history';
+// $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+// $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+// $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+// $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+// $cfg['Servers'][$i]['recent'] = 'pma_recent';
+/* Uncomment the following to enable logging in to passwordless accounts,
+ * after taking note of the associated security risks. */
+// $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+/*
+ * End of servers configuration
+ */
+
+/*
+ * Directories for saving/loading files from server
+ */
+$cfg['UploadDir'] = '';
+$cfg['SaveDir'] = '';
+
+/* Support additional configurations */
+foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
+{
+    include($filename);
+}
+
+
diff --git a/install/ubuntu/17.04/postgresql/pg_hba.conf b/install/ubuntu/17.04/postgresql/pg_hba.conf
new file mode 100644
index 00000000..1ba43941
--- /dev/null
+++ b/install/ubuntu/17.04/postgresql/pg_hba.conf
@@ -0,0 +1,11 @@
+# "local" is for Unix domain socket connections only
+local   all         all                               ident
+
+# IPv4 local connections:
+host    all         all         127.0.0.1/32          md5
+
+# IPv6 local connections:
+host    all         all         ::1/128               md5
+
+# Others
+host    all         all         0.0.0.0/0             md5
diff --git a/install/ubuntu/17.04/proftpd/proftpd.conf b/install/ubuntu/17.04/proftpd/proftpd.conf
new file mode 100644
index 00000000..69ec6b2e
--- /dev/null
+++ b/install/ubuntu/17.04/proftpd/proftpd.conf
@@ -0,0 +1,32 @@
+ServerName                      "FTP"
+ServerIdent                     on "FTP Server ready."
+ServerAdmin                     root@localhost
+DefaultServer                   on
+DefaultRoot                  ~ !adm
+
+<IfModule mod_vroot.c>
+    VRootEngine                 on
+    VRootAlias                  /etc/security/pam_env.conf etc/security/pam_env.conf
+</IfModule>
+
+AuthPAMConfig                   proftpd
+AuthOrder                       mod_auth_pam.c* mod_auth_unix.c
+UseReverseDNS                   off
+User                            proftpd
+Group                           nogroup
+MaxInstances                    20
+UseSendfile                     off
+LogFormat                       default "%h %l %u %t \"%r\" %s %b"
+LogFormat                       auth    "%v [%P] %h %t \"%r\" %s"
+ListOptions                     -a
+RequireValidShell               off
+PassivePorts                    12000 12100
+
+<Global>
+  Umask                         002
+  IdentLookups                  off
+  AllowOverwrite                yes
+  <Limit ALL SITE_CHMOD>
+    AllowAll
+  </Limit>
+</Global>
diff --git a/install/ubuntu/17.04/roundcube/apache.conf b/install/ubuntu/17.04/roundcube/apache.conf
new file mode 100644
index 00000000..a0c87bcc
--- /dev/null
+++ b/install/ubuntu/17.04/roundcube/apache.conf
@@ -0,0 +1,40 @@
+Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/
+Alias /roundcube /var/lib/roundcube
+Alias /webmail /var/lib/roundcube
+
+# Access to tinymce files
+<Directory "/usr/share/tinymce/www/">
+      Options Indexes MultiViews FollowSymLinks
+      AllowOverride None
+      Order allow,deny
+      allow from all
+</Directory>
+
+<Directory /var/lib/roundcube/>
+  Options +FollowSymLinks
+  # This is needed to parse /var/lib/roundcube/.htaccess. See its
+  # content before setting AllowOverride to None.
+  AllowOverride All
+  order allow,deny
+  allow from all
+</Directory>
+
+# Protecting basic directories:
+<Directory /var/lib/roundcube/config>
+        Options -FollowSymLinks
+        AllowOverride None
+</Directory>
+
+<Directory /var/lib/roundcube/temp>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
+
+<Directory /var/lib/roundcube/logs>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
diff --git a/install/ubuntu/17.04/roundcube/config.inc.php b/install/ubuntu/17.04/roundcube/config.inc.php
new file mode 100644
index 00000000..0c82b1bc
--- /dev/null
+++ b/install/ubuntu/17.04/roundcube/config.inc.php
@@ -0,0 +1,33 @@
+<?php
+
+// Password Plugin options
+// -----------------------
+// A driver to use for password change. Default: "sql".
+// See README file for list of supported driver names.
+$rcmail_config['password_driver'] = 'vesta';
+
+// Require the new password to be a certain length.
+// set to blank to allow passwords of any length
+$rcmail_config['password_minimum_length'] = 6;
+
+// Require the new password to contain a letter and punctuation character
+// Change to false to remove this check.
+$rcmail_config['password_require_nonalpha'] = false;
+
+// Enables logging of password changes into logs/password
+$rcmail_config['password_log'] = false;
+
+// Comma-separated list of login exceptions for which password change
+// will be not available (no Password tab in Settings)
+$rcmail_config['password_login_exceptions'] = null;
+
+
+// By default domains in variables are using unicode.
+// Enable this option to use punycoded names
+$rcmail_config['password_idn_ascii'] = false;
+
+// Vesta Driver options
+// -----------------------
+// Control Panel host
+$rcmail_config['password_vesta_host'] = 'localhost';
+$rcmail_config['password_vesta_port'] = '8083';
diff --git a/install/ubuntu/17.04/roundcube/db.inc.php b/install/ubuntu/17.04/roundcube/db.inc.php
new file mode 100644
index 00000000..5268a309
--- /dev/null
+++ b/install/ubuntu/17.04/roundcube/db.inc.php
@@ -0,0 +1,66 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Configuration file for database access                                |
+ |                                                                       |
+ | This file is part of the RoundCube Webmail client                     |
+ | Copyright (C) 2005-2008, RoundCube Dev. - Switzerland                 |
+ | Licensed under the GNU GPL                                            |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// PEAR database DSN for read/write operations
+// format is db_provider://user:password@host/database 
+
+$rcmail_config['db_dsnw'] = 'mysql://roundcube:%password%@localhost/roundcube';
+// postgres example: 'pgsql://roundcube:pass@localhost/roundcubemail';
+
+// PEAR database DSN for read only operations (if empty write database will be used)
+// useful for database replication
+$rcmail_config['db_dsnr'] = '';
+
+// database backend to use (only db or mdb2 are supported)
+//$rcmail_config['db_backend'] = 'mdb2';
+
+// maximum length of a query in bytes
+$rcmail_config['db_max_length'] = 512000;  // 500K
+
+// use persistent db-connections
+// beware this will not "always" work as expected
+// see: http://www.php.net/manual/en/features.persistent-connections.php
+$rcmail_config['db_persistent'] = FALSE;
+
+
+// you can define specific table names used to store webmail data
+$rcmail_config['db_table_users'] = 'users';
+
+$rcmail_config['db_table_identities'] = 'identities';
+
+$rcmail_config['db_table_contacts'] = 'contacts';
+
+$rcmail_config['db_table_session'] = 'session';
+
+$rcmail_config['db_table_cache'] = 'cache';
+
+$rcmail_config['db_table_messages'] = 'messages';
+
+
+// you can define specific sequence names used in PostgreSQL
+$rcmail_config['db_sequence_users'] = 'user_ids';
+
+$rcmail_config['db_sequence_identities'] = 'identity_ids';
+
+$rcmail_config['db_sequence_contacts'] = 'contact_ids';
+
+$rcmail_config['db_sequence_cache'] = 'cache_ids';
+
+$rcmail_config['db_sequence_messages'] = 'message_ids';
+
+
+// end db config file
+?>
diff --git a/install/ubuntu/17.04/roundcube/main.inc.php b/install/ubuntu/17.04/roundcube/main.inc.php
new file mode 100644
index 00000000..44b19793
--- /dev/null
+++ b/install/ubuntu/17.04/roundcube/main.inc.php
@@ -0,0 +1,850 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Main configuration file                                               |
+ |                                                                       |
+ | This file is part of the Roundcube Webmail client                     |
+ | Copyright (C) 2005-2011, The Roundcube Dev Team                       |
+ |                                                                       |
+ | Licensed under the GNU General Public License version 3 or            |
+ | any later version with exceptions for skins & plugins.                |
+ | See the README file for a full license statement.                     |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// ----------------------------------
+// LOGGING/DEBUGGING
+// ----------------------------------
+
+// system error reporting: 1 = log; 2 = report (not implemented yet), 4 = show, 8 = trace
+$rcmail_config['debug_level'] = 1;
+
+// log driver:  'syslog' or 'file'.
+$rcmail_config['log_driver'] = 'file';
+
+// date format for log entries
+// (read http://php.net/manual/en/function.date.php for all format characters)  
+$rcmail_config['log_date_format'] = 'd-M-Y H:i:s O';
+
+// Syslog ident string to use, if using the 'syslog' log driver.
+$rcmail_config['syslog_id'] = 'roundcube';
+
+// Syslog facility to use, if using the 'syslog' log driver.
+// For possible values see installer or http://php.net/manual/en/function.openlog.php
+$rcmail_config['syslog_facility'] = LOG_USER;
+
+// Log sent messages to <log_dir>/sendmail or to syslog
+$rcmail_config['smtp_log'] = true;
+
+// Log successful logins to <log_dir>/userlogins or to syslog
+$rcmail_config['log_logins'] = false;
+
+// Log session authentication errors to <log_dir>/session or to syslog
+$rcmail_config['log_session'] = false;
+
+// Log SQL queries to <log_dir>/sql or to syslog
+$rcmail_config['sql_debug'] = false;
+
+// Log IMAP conversation to <log_dir>/imap or to syslog
+$rcmail_config['imap_debug'] = false;
+
+// Log LDAP conversation to <log_dir>/ldap or to syslog
+$rcmail_config['ldap_debug'] = false;
+
+// Log SMTP conversation to <log_dir>/smtp or to syslog
+$rcmail_config['smtp_debug'] = false;
+
+// ----------------------------------
+// IMAP
+// ----------------------------------
+
+// the mail host chosen to perform the log-in
+// leave blank to show a textbox at login, give a list of hosts
+// to display a pulldown menu or set one host as string.
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// Supported replacement variables:
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %s - domain name after the '@' from e-mail address provided at login screen
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['default_host'] = 'localhost';
+
+// TCP port used for IMAP connections
+$rcmail_config['default_port'] = 143;
+
+// IMAP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['imap_auth_type'] = null;
+
+// If you know your imap's folder delimiter, you can specify it here.
+// Otherwise it will be determined automatically
+$rcmail_config['imap_delimiter'] = null;
+
+// If IMAP server doesn't support NAMESPACE extension, but you're
+// using shared folders or personal root folder is non-empty, you'll need to
+// set these options. All can be strings or arrays of strings.
+// Folders need to be ended with directory separator, e.g. "INBOX."
+// (special directory "~" is an exception to this rule)
+// These can be used also to overwrite server's namespaces
+$rcmail_config['imap_ns_personal'] = null;
+$rcmail_config['imap_ns_other']    = null;
+$rcmail_config['imap_ns_shared']   = null;
+
+// By default IMAP capabilities are readed after connection to IMAP server
+// In some cases, e.g. when using IMAP proxy, there's a need to refresh the list
+// after login. Set to True if you've got this case.
+$rcmail_config['imap_force_caps'] = false;
+
+// By default list of subscribed folders is determined using LIST-EXTENDED
+// extension if available. Some servers (dovecot 1.x) returns wrong results
+// for shared namespaces in this case. http://trac.roundcube.net/ticket/1486225
+// Enable this option to force LSUB command usage instead.
+$rcmail_config['imap_force_lsub'] = false;
+
+// Some server configurations (e.g. Courier) doesn't list folders in all namespaces
+// Enable this option to force listing of folders in all namespaces
+$rcmail_config['imap_force_ns'] = false;
+
+// IMAP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['imap_timeout'] = 0;
+
+// Optional IMAP authentication identifier to be used as authorization proxy
+$rcmail_config['imap_auth_cid'] = null;
+
+// Optional IMAP authentication password to be used for imap_auth_cid
+$rcmail_config['imap_auth_pw'] = null;
+
+// Type of IMAP indexes cache. Supported values: 'db', 'apc' and 'memcache'.
+$rcmail_config['imap_cache'] = null;
+
+// Enables messages cache. Only 'db' cache is supported.
+$rcmail_config['messages_cache'] = false;
+
+
+// ----------------------------------
+// SMTP
+// ----------------------------------
+
+// SMTP server host (for sending mails).
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// If left blank, the PHP mail() function is used
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['smtp_server'] = '';
+
+// SMTP port (default is 25; use 587 for STARTTLS or 465 for the
+// deprecated SSL over SMTP (aka SMTPS))
+$rcmail_config['smtp_port'] = 25;
+
+// SMTP username (if required) if you use %u as the username Roundcube
+// will use the current username for login
+$rcmail_config['smtp_user'] = '';
+
+// SMTP password (if required) if you use %p as the password Roundcube
+// will use the current user's password for login
+$rcmail_config['smtp_pass'] = '';
+
+// SMTP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['smtp_auth_type'] = '';
+
+// Optional SMTP authentication identifier to be used as authorization proxy
+$rcmail_config['smtp_auth_cid'] = null;
+
+// Optional SMTP authentication password to be used for smtp_auth_cid
+$rcmail_config['smtp_auth_pw'] = null;
+
+// SMTP HELO host 
+// Hostname to give to the remote server for SMTP 'HELO' or 'EHLO' messages 
+// Leave this blank and you will get the server variable 'server_name' or 
+// localhost if that isn't defined. 
+$rcmail_config['smtp_helo_host'] = '';
+
+// SMTP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['smtp_timeout'] = 0;
+
+// ----------------------------------
+// SYSTEM
+// ----------------------------------
+include_once("/etc/roundcube/debian-db-roundcube.php");
+
+
+// THIS OPTION WILL ALLOW THE INSTALLER TO RUN AND CAN EXPOSE SENSITIVE CONFIG DATA.
+// ONLY ENABLE IT IF YOU'RE REALLY SURE WHAT YOU'RE DOING!
+$rcmail_config['enable_installer'] = false;
+
+// provide an URL where a user can get support for this Roundcube installation
+// PLEASE DO NOT LINK TO THE ROUNDCUBE.NET WEBSITE HERE!
+$rcmail_config['support_url'] = '';
+
+// replace Roundcube logo with this image
+// specify an URL relative to the document root of this Roundcube installation
+$rcmail_config['skin_logo'] = null;
+
+// automatically create a new Roundcube user when log-in the first time.
+// a new user will be created once the IMAP login succeeds.
+// set to false if only registered users can use this service
+$rcmail_config['auto_create_user'] = true;
+
+// use this folder to store log files (must be writeable for apache user)
+// This is used by the 'file' log driver.
+$rcmail_config['log_dir'] = '/var/log/roundcubemail/';
+
+// use this folder to store temp files (must be writeable for apache user)
+$rcmail_config['temp_dir'] = '/tmp';
+
+// lifetime of message cache
+// possible units: s, m, h, d, w
+$rcmail_config['message_cache_lifetime'] = '10d';
+
+// enforce connections over https
+// with this option enabled, all non-secure connections will be redirected.
+// set the port for the ssl connection as value of this option if it differs from the default 443
+$rcmail_config['force_https'] = false;
+
+// tell PHP that it should work as under secure connection
+// even if it doesn't recognize it as secure ($_SERVER['HTTPS'] is not set)
+// e.g. when you're running Roundcube behind a https proxy
+// this option is mutually exclusive to 'force_https' and only either one of them should be set to true.
+$rcmail_config['use_https'] = false;
+
+// Allow browser-autocompletion on login form.
+// 0 - disabled, 1 - username and host only, 2 - username, host, password
+$rcmail_config['login_autocomplete'] = 0;
+
+// Forces conversion of logins to lower case.
+// 0 - disabled, 1 - only domain part, 2 - domain and local part.
+// If users authentication is not case-sensitive this must be enabled.
+// After enabling it all user records need to be updated, e.g. with query:
+// UPDATE users SET username = LOWER(username);
+$rcmail_config['login_lc'] = 0;
+
+// Includes should be interpreted as PHP files
+$rcmail_config['skin_include_php'] = false;
+
+// display software version on login screen
+$rcmail_config['display_version'] = false;
+
+// Session lifetime in minutes
+// must be greater than 'keep_alive'/60
+$rcmail_config['session_lifetime'] = 10;
+
+// session domain: .example.org
+$rcmail_config['session_domain'] = '';
+
+// session name. Default: 'roundcube_sessid'
+$rcmail_config['session_name'] = null;
+
+// Backend to use for session storage. Can either be 'db' (default) or 'memcache'
+// If set to memcache, a list of servers need to be specified in 'memcache_hosts'
+// Make sure the Memcache extension (http://pecl.php.net/package/memcache) version >= 2.0.0 is installed
+$rcmail_config['session_storage'] = 'db';
+
+// Use these hosts for accessing memcached
+// Define any number of hosts in the form of hostname:port or unix:///path/to/sock.file
+$rcmail_config['memcache_hosts'] = null; // e.g. array( 'localhost:11211', '192.168.1.12:11211', 'unix:///var/tmp/memcached.sock' );
+
+// check client IP in session athorization
+$rcmail_config['ip_check'] = false;
+
+// check referer of incoming requests
+$rcmail_config['referer_check'] = false;
+
+// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
+// Possible values: sameorigin|deny. Set to false in order to disable sending them
+$rcmail_config['x_frame_options'] = 'sameorigin';
+
+// this key is used to encrypt the users imap password which is stored
+// in the session record (and the client cookie if remember password is enabled).
+// please provide a string of exactly 24 chars.
+$rcmail_config['des_key'] = 'vtIOjLZo9kffJoqzpSbm5r1r';
+
+// Automatically add this domain to user names for login
+// Only for IMAP servers that require full e-mail addresses for login
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['username_domain'] = '';
+
+// This domain will be used to form e-mail addresses of new users
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['mail_domain'] = '';
+
+// Password charset.
+// Use it if your authentication backend doesn't support UTF-8.
+// Defaults to ISO-8859-1 for backward compatibility
+$rcmail_config['password_charset'] = 'ISO-8859-1';
+
+// How many seconds must pass between emails sent by a user
+$rcmail_config['sendmail_delay'] = 0;
+
+// Maximum number of recipients per message. Default: 0 (no limit)
+$rcmail_config['max_recipients'] = 0; 
+
+// Maximum allowednumber of members of an address group. Default: 0 (no limit)
+// If 'max_recipients' is set this value should be less or equal
+$rcmail_config['max_group_members'] = 0; 
+
+// add this user-agent to message headers when sending
+$rcmail_config['useragent'] = 'Roundcube Webmail/'.RCMAIL_VERSION;
+
+// use this name to compose page titles
+$rcmail_config['product_name'] = 'Roundcube Webmail';
+
+// try to load host-specific configuration
+// see http://trac.roundcube.net/wiki/Howto_Config for more details
+$rcmail_config['include_host_config'] = false;
+
+// path to a text file which will be added to each sent message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer'] = '';
+
+// path to a text file which will be added to each sent HTML message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer_html'] = '';
+
+// add a received header to outgoing mails containing the creators IP and hostname
+$rcmail_config['http_received_header'] = false;
+
+// Whether or not to encrypt the IP address and the host name
+// these could, in some circles, be considered as sensitive information;
+// however, for the administrator, these could be invaluable help
+// when tracking down issues.
+$rcmail_config['http_received_header_encrypt'] = false;
+
+// This string is used as a delimiter for message headers when sending
+// a message via mail() function. Leave empty for auto-detection
+$rcmail_config['mail_header_delimiter'] = NULL;
+
+// number of chars allowed for line when wrapping text.
+// text wrapping is done when composing/sending messages
+$rcmail_config['line_length'] = 72;
+
+// send plaintext messages as format=flowed
+$rcmail_config['send_format_flowed'] = true;
+
+// don't allow these settings to be overriden by the user
+$rcmail_config['dont_override'] = array();
+
+// Set identities access level:
+// 0 - many identities with possibility to edit all params
+// 1 - many identities with possibility to edit all params but not email address
+// 2 - one identity with possibility to edit all params
+// 3 - one identity with possibility to edit all params but not email address
+$rcmail_config['identities_level'] = 0;
+
+// Mimetypes supported by the browser.
+// attachments of these types will open in a preview window
+// either a comma-separated list or an array: 'text/plain,text/html,text/xml,image/jpeg,image/gif,image/png,application/pdf'
+$rcmail_config['client_mimetypes'] = null;  # null == default
+
+// mime magic database
+$rcmail_config['mime_magic'] = null;
+
+// path to imagemagick identify binary
+$rcmail_config['im_identify_path'] = null;
+
+// path to imagemagick convert binary
+$rcmail_config['im_convert_path'] = null;
+
+// maximum size of uploaded contact photos in pixel
+$rcmail_config['contact_photo_size'] = 160;
+
+// Enable DNS checking for e-mail address validation
+$rcmail_config['email_dns_check'] = false;
+
+// ----------------------------------
+// PLUGINS
+// ----------------------------------
+
+// List of active plugins (in plugins/ directory)
+$rcmail_config['plugins'] = array('password');
+
+// ----------------------------------
+// USER INTERFACE
+// ----------------------------------
+
+// default messages sort column. Use empty value for default server's sorting, 
+// or 'arrival', 'date', 'subject', 'from', 'to', 'fromto', 'size', 'cc'
+$rcmail_config['message_sort_col'] = '';
+
+// default messages sort order
+$rcmail_config['message_sort_order'] = 'DESC';
+
+// These cols are shown in the message list. Available cols are:
+// subject, from, to, fromto, cc, replyto, date, size, status, flag, attachment, 'priority'
+$rcmail_config['list_cols'] = array('subject', 'status', 'fromto', 'date', 'size', 'flag', 'attachment');
+
+// the default locale setting (leave empty for auto-detection)
+// RFC1766 formatted language name like en_US, de_DE, de_CH, fr_FR, pt_BR
+$rcmail_config['language'] = null;
+
+// use this format for date display (date or strftime format)
+$rcmail_config['date_format'] = 'Y-m-d';
+
+// give this choice of date formats to the user to select from
+$rcmail_config['date_formats'] = array('Y-m-d', 'd-m-Y', 'Y/m/d', 'm/d/Y', 'd/m/Y', 'd.m.Y', 'j.n.Y');
+
+// use this format for time display (date or strftime format)
+$rcmail_config['time_format'] = 'H:i';
+
+// give this choice of time formats to the user to select from
+$rcmail_config['time_formats'] = array('G:i', 'H:i', 'g:i a', 'h:i A');
+
+// use this format for short date display (derived from date_format and time_format)
+$rcmail_config['date_short'] = 'D H:i';
+
+// use this format for detailed date/time formatting (derived from date_format and time_format)
+$rcmail_config['date_long'] = 'Y-m-d H:i';
+
+// store draft message is this mailbox
+// leave blank if draft messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['drafts_mbox'] = 'Drafts';
+
+// store spam messages in this mailbox
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['junk_mbox'] = 'Spam';
+
+// store sent message is this mailbox
+// leave blank if sent messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['sent_mbox'] = 'Sent';
+
+// move messages to this folder when deleting them
+// leave blank if they should be deleted directly
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['trash_mbox'] = 'Trash';
+
+// display these folders separately in the mailbox list.
+// these folders will also be displayed with localized names
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['default_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+$rcmail_config['default_imap_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+
+// automatically create the above listed default folders on first login
+$rcmail_config['create_default_folders'] = true;
+
+// protect the default folders from renames, deletes, and subscription changes
+$rcmail_config['protect_default_folders'] = true;
+
+// if in your system 0 quota means no limit set this option to true 
+$rcmail_config['quota_zero_as_unlimited'] = true;
+
+// Make use of the built-in spell checker. It is based on GoogieSpell.
+// Since Google only accepts connections over https your PHP installatation
+// requires to be compiled with Open SSL support
+$rcmail_config['enable_spellcheck'] = true;
+
+// Enables spellchecker exceptions dictionary.
+// Setting it to 'shared' will make the dictionary shared by all users.
+$rcmail_config['spellcheck_dictionary'] = false;
+
+// Set the spell checking engine. 'googie' is the default. 'pspell' is also available,
+// but requires the Pspell extensions. When using Nox Spell Server, also set 'googie' here.
+$rcmail_config['spellcheck_engine'] = 'googie';
+
+// For a locally installed Nox Spell Server, please specify the URI to call it.
+// Get Nox Spell Server from http://orangoo.com/labs/?page_id=72
+// Leave empty to use the Google spell checking service, what means
+// that the message content will be sent to Google in order to check spelling
+$rcmail_config['spellcheck_uri'] = '';
+
+// These languages can be selected for spell checking.
+// Configure as a PHP style hash array: array('en'=>'English', 'de'=>'Deutsch');
+// Leave empty for default set of available language.
+$rcmail_config['spellcheck_languages'] = NULL;
+
+// Makes that words with all letters capitalized will be ignored (e.g. GOOGLE)
+$rcmail_config['spellcheck_ignore_caps'] = false;
+
+// Makes that words with numbers will be ignored (e.g. g00gle)
+$rcmail_config['spellcheck_ignore_nums'] = false;
+
+// Makes that words with symbols will be ignored (e.g. g@@gle)
+$rcmail_config['spellcheck_ignore_syms'] = false;
+
+// Use this char/string to separate recipients when composing a new message
+$rcmail_config['recipients_separator'] = ',';
+
+// don't let users set pagesize to more than this value if set
+$rcmail_config['max_pagesize'] = 200;
+
+// Minimal value of user's 'keep_alive' setting (in seconds)
+// Must be less than 'session_lifetime'
+$rcmail_config['min_keep_alive'] = 60;
+
+// Enables files upload indicator. Requires APC installed and enabled apc.rfc1867 option.
+// By default refresh time is set to 1 second. You can set this value to true
+// or any integer value indicating number of seconds.
+$rcmail_config['upload_progress'] = false;
+
+// Specifies for how many seconds the Undo button will be available
+// after object delete action. Currently used with supporting address book sources.
+// Setting it to 0, disables the feature.
+$rcmail_config['undo_timeout'] = 0;
+
+// ----------------------------------
+// ADDRESSBOOK SETTINGS
+// ----------------------------------
+
+// This indicates which type of address book to use. Possible choises:
+// 'sql' (default) and 'ldap'.
+// If set to 'ldap' then it will look at using the first writable LDAP
+// address book as the primary address book and it will not display the
+// SQL address book in the 'Address Book' view.
+$rcmail_config['address_book_type'] = 'sql';
+
+// In order to enable public ldap search, configure an array like the Verisign
+// example further below. if you would like to test, simply uncomment the example.
+// Array key must contain only safe characters, ie. a-zA-Z0-9_
+$rcmail_config['ldap_public'] = array();
+
+// If you are going to use LDAP for individual address books, you will need to 
+// set 'user_specific' to true and use the variables to generate the appropriate DNs to access it.
+//
+// The recommended directory structure for LDAP is to store all the address book entries
+// under the users main entry, e.g.:
+//
+//  o=root
+//   ou=people
+//    uid=user@domain
+//  mail=contact@contactdomain
+//
+// So the base_dn would be uid=%fu,ou=people,o=root
+// The bind_dn would be the same as based_dn or some super user login.
+/* 
+ * example config for Verisign directory
+ *
+$rcmail_config['ldap_public']['Verisign'] = array(
+  'name'          => 'Verisign.com',
+  // Replacement variables supported in host names:
+  // %h - user's IMAP hostname
+  // %n - http hostname ($_SERVER['SERVER_NAME'])
+  // %d - domain (http hostname without the first part)
+  // %z - IMAP domain (IMAP hostname without the first part)
+  // For example %n = mail.domain.tld, %d = domain.tld
+  'hosts'         => array('directory.verisign.com'),
+  'port'          => 389,
+  'use_tls'	      => false,
+  'ldap_version'  => 3,       // using LDAPv3
+  'user_specific' => false,   // If true the base_dn, bind_dn and bind_pass default to the user's IMAP login.
+  // %fu - The full username provided, assumes the username is an email
+  //       address, uses the username_domain value if not an email address.
+  // %u  - The username prior to the '@'.
+  // %d  - The domain name after the '@'.
+  // %dc - The domain name hierarchal string e.g. "dc=test,dc=domain,dc=com"
+  // %dn - DN found by ldap search when search_filter/search_base_dn are used
+  'base_dn'       => '',
+  'bind_dn'       => '',
+  'bind_pass'     => '',
+  // It's possible to bind for an individual address book
+  // The login name is used to search for the DN to bind with
+  'search_base_dn' => '',
+  'search_filter'  => '',   // e.g. '(&(objectClass=posixAccount)(uid=%u))'
+  // DN and password to bind as before searching for bind DN, if anonymous search is not allowed
+  'search_bind_dn' => '',
+  'search_bind_pw' => '',
+  // Default for %dn variable if search doesn't return DN value
+  'search_dn_default' => '',
+  // Optional authentication identifier to be used as SASL authorization proxy
+  // bind_dn need to be empty
+  'auth_cid'       => '',
+  // SASL authentication method (for proxy auth), e.g. DIGEST-MD5
+  'auth_method'    => '',
+  // Indicates if the addressbook shall be hidden from the list.
+  // With this option enabled you can still search/view contacts.
+  'hidden'        => false,
+  // Indicates if the addressbook shall not list contacts but only allows searching.
+  'searchonly'    => false,
+  // Indicates if we can write to the LDAP directory or not.
+  // If writable is true then these fields need to be populated:
+  // LDAP_Object_Classes, required_fields, LDAP_rdn
+  'writable'       => false,
+  // To create a new contact these are the object classes to specify
+  // (or any other classes you wish to use).
+  'LDAP_Object_Classes' => array('top', 'inetOrgPerson'),
+  // The RDN field that is used for new entries, this field needs
+  // to be one of the search_fields, the base of base_dn is appended
+  // to the RDN to insert into the LDAP directory.
+  'LDAP_rdn'       => 'cn',
+  // The required fields needed to build a new contact as required by
+  // the object classes (can include additional fields not required by the object classes).
+  'required_fields' => array('cn', 'sn', 'mail'),
+  'search_fields'   => array('mail', 'cn'),  // fields to search in
+  // mapping of contact fields to directory attributes
+  //   for every attribute one can specify the number of values (limit) allowed.
+  //   default is 1, a wildcard * means unlimited
+  'fieldmap' => array(
+    // Roundcube  => LDAP:limit
+    'name'        => 'cn',
+    'surname'     => 'sn',
+    'firstname'   => 'givenName',
+    'title'       => 'title',
+    'email'       => 'mail:*',
+    'phone:home'  => 'homePhone',
+    'phone:work'  => 'telephoneNumber',
+    'phone:mobile' => 'mobile',
+    'phone:pager' => 'pager',
+    'street'      => 'street',
+    'zipcode'     => 'postalCode',
+    'region'      => 'st',
+    'locality'    => 'l',
+// if you uncomment country, you need to modify 'sub_fields' above
+//    'country'     => 'c',
+    'department'  => 'departmentNumber',
+    'notes'       => 'description',
+// these currently don't work:
+//    'phone:workfax' => 'facsimileTelephoneNumber',
+//    'photo'        => 'jpegPhoto',
+//    'organization' => 'o',
+//    'manager'      => 'manager',
+//    'assistant'    => 'secretary',
+  ),
+  // Map of contact sub-objects (attribute name => objectClass(es)), e.g. 'c' => 'country'
+  'sub_fields' => array(),
+  'sort'          => 'cn',    // The field to sort the listing by.
+  'scope'         => 'sub',   // search mode: sub|base|list
+  'filter'        => '(objectClass=inetOrgPerson)',      // used for basic listing (if not empty) and will be &'d with search queries. example: status=act
+  'fuzzy_search'  => true,    // server allows wildcard search
+  'vlv'           => false,   // Enable Virtual List View to more efficiently fetch paginated data (if server supports it)
+  'numsub_filter' => '(objectClass=organizationalUnit)',   // with VLV, we also use numSubOrdinates to query the total number of records. Set this filter to get all numSubOrdinates attributes for counting
+  'sizelimit'     => '0',     // Enables you to limit the count of entries fetched. Setting this to 0 means no limit.
+  'timelimit'     => '0',     // Sets the number of seconds how long is spend on the search. Setting this to 0 means no limit.
+  'referrals'     => true|false,  // Sets the LDAP_OPT_REFERRALS option. Mostly used in multi-domain Active Directory setups
+
+  // definition for contact groups (uncomment if no groups are supported)
+  // for the groups base_dn, the user replacements %fu, %u, $d and %dc work as for base_dn (see above)
+  // if the groups base_dn is empty, the contact base_dn is used for the groups as well
+  // -> in this case, assure that groups and contacts are separated due to the concernig filters! 
+  'groups'        => array(
+    'base_dn'     => '',
+    'scope'       => 'sub',   // search mode: sub|base|list
+    'filter'      => '(objectClass=groupOfNames)',
+    'object_classes' => array("top", "groupOfNames"),
+    'member_attr'  => 'member',   // name of the member attribute, e.g. uniqueMember
+    'name_attr'    => 'cn',       // attribute to be used as group name
+  ),
+);
+*/
+
+// An ordered array of the ids of the addressbooks that should be searched
+// when populating address autocomplete fields server-side. ex: array('sql','Verisign');
+$rcmail_config['autocomplete_addressbooks'] = array('sql');
+
+// The minimum number of characters required to be typed in an autocomplete field
+// before address books will be searched. Most useful for LDAP directories that
+// may need to do lengthy results building given overly-broad searches
+$rcmail_config['autocomplete_min_length'] = 1;
+
+// Number of parallel autocomplete requests.
+// If there's more than one address book, n parallel (async) requests will be created,
+// where each request will search in one address book. By default (0), all address
+// books are searched in one request.
+$rcmail_config['autocomplete_threads'] = 0;
+
+// Max. numer of entries in autocomplete popup. Default: 15.
+$rcmail_config['autocomplete_max'] = 15;
+
+// show address fields in this order
+// available placeholders: {street}, {locality}, {zipcode}, {country}, {region}
+$rcmail_config['address_template'] = '{street}<br/>{locality} {zipcode}<br/>{country} {region}';
+
+// Matching mode for addressbook search (including autocompletion)
+// 0 - partial (*abc*), default
+// 1 - strict (abc)
+// 2 - prefix (abc*)
+// Note: For LDAP sources fuzzy_search must be enabled to use 'partial' or 'prefix' mode
+$rcmail_config['addressbook_search_mode'] = 0;
+
+// ----------------------------------
+// USER PREFERENCES
+// ----------------------------------
+
+// Use this charset as fallback for message decoding
+//$rcmail_config['default_charset'] = 'ISO-8859-1';
+$rcmail_config['default_charset'] = 'UTF-8';
+
+// skin name: folder from skins/
+$rcmail_config['skin'] = 'larry';
+
+// show up to X items in messages list view
+$rcmail_config['mail_pagesize'] = 50;
+
+// show up to X items in contacts list view
+$rcmail_config['addressbook_pagesize'] = 50;
+
+// sort contacts by this col (preferably either one of name, firstname, surname)
+$rcmail_config['addressbook_sort_col'] = 'surname';
+
+// the way how contact names are displayed in the list
+// 0: display name
+// 1: (prefix) firstname middlename surname (suffix)
+// 2: (prefix) surname firstname middlename (suffix)
+// 3: (prefix) surname, firstname middlename (suffix)
+$rcmail_config['addressbook_name_listing'] = 0;
+
+// use this timezone to display date/time
+// valid timezone identifers are listed here: php.net/manual/en/timezones.php
+// 'auto' will use the browser's timezone settings
+$rcmail_config['timezone'] = 'auto';
+
+// prefer displaying HTML messages
+$rcmail_config['prefer_html'] = true;
+
+// display remote inline images
+// 0 - Never, always ask
+// 1 - Ask if sender is not in address book
+// 2 - Always show inline images
+$rcmail_config['show_images'] = 0;
+
+// compose html formatted messages by default
+// 0 - never, 1 - always, 2 - on reply to HTML message only 
+$rcmail_config['htmleditor'] = 0;
+
+// show pretty dates as standard
+$rcmail_config['prettydate'] = true;
+
+// save compose message every 30 seconds
+$rcmail_config['draft_autosave'] = 30;
+
+// default setting if preview pane is enabled
+$rcmail_config['preview_pane'] = false;
+
+// Mark as read when viewed in preview pane (delay in seconds)
+// Set to -1 if messages in preview pane should not be marked as read
+$rcmail_config['preview_pane_mark_read'] = 0;
+
+// Clear Trash on logout
+$rcmail_config['logout_purge'] = false;
+
+// Compact INBOX on logout
+$rcmail_config['logout_expunge'] = false;
+
+// Display attached images below the message body 
+$rcmail_config['inline_images'] = true;
+
+// Encoding of long/non-ascii attachment names:
+// 0 - Full RFC 2231 compatible
+// 1 - RFC 2047 for 'name' and RFC 2231 for 'filename' parameter (Thunderbird's default)
+// 2 - Full 2047 compatible
+$rcmail_config['mime_param_folding'] = 1;
+
+// Set true if deleted messages should not be displayed
+// This will make the application run slower
+$rcmail_config['skip_deleted'] = false;
+
+// Set true to Mark deleted messages as read as well as deleted
+// False means that a message's read status is not affected by marking it as deleted
+$rcmail_config['read_when_deleted'] = true;
+
+// Set to true to never delete messages immediately
+// Use 'Purge' to remove messages marked as deleted
+$rcmail_config['flag_for_deletion'] = false;
+
+// Default interval for keep-alive/check-recent requests (in seconds)
+// Must be greater than or equal to 'min_keep_alive' and less than 'session_lifetime'
+$rcmail_config['keep_alive'] = 60;
+
+// If true all folders will be checked for recent messages
+$rcmail_config['check_all_folders'] = false;
+
+// If true, after message delete/move, the next message will be displayed
+$rcmail_config['display_next'] = false;
+
+// 0 - Do not expand threads 
+// 1 - Expand all threads automatically 
+// 2 - Expand only threads with unread messages 
+$rcmail_config['autoexpand_threads'] = 0;
+
+// When replying place cursor above original message (top posting)
+$rcmail_config['top_posting'] = false;
+
+// When replying strip original signature from message
+$rcmail_config['strip_existing_sig'] = true;
+
+// Show signature:
+// 0 - Never
+// 1 - Always
+// 2 - New messages only
+// 3 - Forwards and Replies only
+$rcmail_config['show_sig'] = 1;
+
+// When replying or forwarding place sender's signature above existing message
+$rcmail_config['sig_above'] = false;
+
+// Use MIME encoding (quoted-printable) for 8bit characters in message body
+$rcmail_config['force_7bit'] = false;
+
+// Defaults of the search field configuration.
+// The array can contain a per-folder list of header fields which should be considered when searching
+// The entry with key '*' stands for all folders which do not have a specific list set.
+// Please note that folder names should to be in sync with $rcmail_config['default_folders']
+$rcmail_config['search_mods'] = null;  // Example: array('*' => array('subject'=>1, 'from'=>1), 'Sent' => array('subject'=>1, 'to'=>1));
+
+// Defaults of the addressbook search field configuration.
+$rcmail_config['addressbook_search_mods'] = null;  // Example: array('name'=>1, 'firstname'=>1, 'surname'=>1, 'email'=>1, '*'=>1);
+
+// 'Delete always'
+// This setting reflects if mail should be always deleted
+// when moving to Trash fails. This is necessary in some setups
+// when user is over quota and Trash is included in the quota.
+$rcmail_config['delete_always'] = false;
+
+// Directly delete messages in Junk instead of moving to Trash
+$rcmail_config['delete_junk'] = true;
+
+// Behavior if a received message requests a message delivery notification (read receipt)
+// 0 = ask the user, 1 = send automatically, 2 = ignore (never send or ask)
+// 3 = send automatically if sender is in addressbook, otherwise ask the user
+// 4 = send automatically if sender is in addressbook, otherwise ignore
+$rcmail_config['mdn_requests'] = 0;
+
+// Return receipt checkbox default state
+$rcmail_config['mdn_default'] = 0;
+
+// Delivery Status Notification checkbox default state
+$rcmail_config['dsn_default'] = 0;
+
+// Place replies in the folder of the message being replied to
+$rcmail_config['reply_same_folder'] = false;
+
+// Sets default mode of Forward feature to "forward as attachment"
+$rcmail_config['forward_attachment'] = false;
+
+// Defines address book (internal index) to which new contacts will be added
+// By default it is the first writeable addressbook.
+// Note: Use '0' for built-in address book.
+$rcmail_config['default_addressbook'] = null;
+
+// Enables spell checking before sending a message.
+$rcmail_config['spellcheck_before_send'] = false;
+
+// Skip alternative email addresses in autocompletion (show one address per contact)
+$rcmail_config['autocomplete_single'] = false;
+
+// Default font for composed HTML message.
+// Supported values: Andale Mono, Arial, Arial Black, Book Antiqua, Courier New,
+// Georgia, Helvetica, Impact, Tahoma, Terminal, Times New Roman, Trebuchet MS, Verdana
+$rcmail_config['default_font'] = '';
+
+// end of config file
diff --git a/install/ubuntu/17.04/roundcube/vesta.php b/install/ubuntu/17.04/roundcube/vesta.php
new file mode 100644
index 00000000..99e1d4bc
--- /dev/null
+++ b/install/ubuntu/17.04/roundcube/vesta.php
@@ -0,0 +1,71 @@
+<?php
+
+/**
+ * Vesta Control Panel Password Driver
+ *
+ * @version 1.0
+ * @author Serghey Rodin <skid@vestacp.com>
+ */
+
+    function password_save($curpass, $passwd)
+    {
+        $rcmail = rcmail::get_instance();
+        $vesta_host = $rcmail->config->get('password_vesta_host');
+
+        if (empty($vesta_host))
+        {
+            $vesta_host = 'localhost';
+        }
+
+        $vesta_port = $rcmail->config->get('password_vesta_port');
+        if (empty($vesta_port))
+        {
+            $vesta_port = '8083';
+        }
+
+        $postvars = array(
+          'email' => $_SESSION['username'],
+          'password' => $curpass,
+          'new' => $passwd
+        );
+
+        $postdata = http_build_query($postvars);
+
+        $send  = 'POST /reset/mail/ HTTP/1.1' . PHP_EOL;
+        $send .= 'Host: ' . $vesta_host . PHP_EOL;
+        $send .= 'User-Agent: PHP Script' . PHP_EOL;
+        $send .= 'Content-length: ' . strlen($postdata) . PHP_EOL;
+        $send .= 'Content-type: application/x-www-form-urlencoded' . PHP_EOL;
+        $send .= 'Connection: close' . PHP_EOL;
+        $send .= PHP_EOL;
+        $send .= $postdata . PHP_EOL . PHP_EOL;
+
+        //$fp = fsockopen('ssl://' . $vesta_host, $vesta_port);
+        $errno = "";
+        $errstr = "";
+        $context = stream_context_create();
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer_name', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_host', false);
+        $result = stream_context_set_option($context, 'ssl', 'allow_self_signed', true);
+
+        $fp = stream_socket_client('ssl://' . $vesta_host . ':'.$vesta_port, $errno, $errstr, 60, STREAM_CLIENT_CONNECT, $context);
+        fputs($fp, $send);
+        $result = fread($fp, 2048);
+        fclose($fp);
+
+        $fp = fopen("/tmp/roundcube.log", 'w');
+        fwrite($fp, "test ok");
+        fwrite($fp, "\n");
+        fclose($fp);
+
+
+        if(strpos($result, 'ok') && !strpos($result, 'error'))
+        {
+            return PASSWORD_SUCCESS;
+        }
+        else {
+            return PASSWORD_ERROR;
+        }
+
+    }
diff --git a/install/ubuntu/17.04/sudo/admin b/install/ubuntu/17.04/sudo/admin
new file mode 100644
index 00000000..4226bdd4
--- /dev/null
+++ b/install/ubuntu/17.04/sudo/admin
@@ -0,0 +1,8 @@
+# Created by vesta installer
+Defaults env_keep="VESTA"
+Defaults:admin !syslog
+Defaults:admin !requiretty
+Defaults:root !requiretty
+
+admin   ALL=(ALL)       ALL
+admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/17.04/templates/dns/child-ns.tpl b/install/ubuntu/17.04/templates/dns/child-ns.tpl
new file mode 100755
index 00000000..42c046e4
--- /dev/null
+++ b/install/ubuntu/17.04/templates/dns/child-ns.tpl
@@ -0,0 +1,14 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns1.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns2.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ns1' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='ns2' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/ubuntu/17.04/templates/dns/default.tpl b/install/ubuntu/17.04/templates/dns/default.tpl
new file mode 100755
index 00000000..e0a37e62
--- /dev/null
+++ b/install/ubuntu/17.04/templates/dns/default.tpl
@@ -0,0 +1,18 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/ubuntu/17.04/templates/dns/gmail.tpl b/install/ubuntu/17.04/templates/dns/gmail.tpl
new file mode 100755
index 00000000..219c9d24
--- /dev/null
+++ b/install/ubuntu/17.04/templates/dns/gmail.tpl
@@ -0,0 +1,12 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='localhost' TYPE='A' PRIORITY='' VALUE='127.0.0.1' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='MX' PRIORITY='1' VALUE='ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT1.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT2.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT3.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT4.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.google.com ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/ubuntu/17.04/templates/web/apache2/basedir.stpl b/install/ubuntu/17.04/templates/web/apache2/basedir.stpl
new file mode 100644
index 00000000..d978d4c4
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/apache2/basedir.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.04/templates/web/apache2/basedir.tpl b/install/ubuntu/17.04/templates/web/apache2/basedir.tpl
new file mode 100644
index 00000000..96c94a1b
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/apache2/basedir.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.04/templates/web/apache2/default.stpl b/install/ubuntu/17.04/templates/web/apache2/default.stpl
new file mode 100644
index 00000000..ec34c279
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/apache2/default.stpl
@@ -0,0 +1,43 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.04/templates/web/apache2/default.tpl b/install/ubuntu/17.04/templates/web/apache2/default.tpl
new file mode 100644
index 00000000..3a227015
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/apache2/default.tpl
@@ -0,0 +1,37 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.04/templates/web/apache2/hosting.stpl b/install/ubuntu/17.04/templates/web/apache2/hosting.stpl
new file mode 100644
index 00000000..8892072b
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/apache2/hosting.stpl
@@ -0,0 +1,49 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value upload_max_filesize 10M
+        php_admin_value max_execution_time 20
+        php_admin_value post_max_size  8M
+        php_admin_value memory_limit 32M
+        php_admin_flag mysql.allow_persistent  off
+        php_admin_flag safe_mode off
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.04/templates/web/apache2/hosting.tpl b/install/ubuntu/17.04/templates/web/apache2/hosting.tpl
new file mode 100644
index 00000000..1eb26910
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/apache2/hosting.tpl
@@ -0,0 +1,43 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value upload_max_filesize 10M
+        php_admin_value max_execution_time 20
+        php_admin_value post_max_size  8M
+        php_admin_value memory_limit 32M
+        php_admin_flag mysql.allow_persistent  off
+        php_admin_flag safe_mode off
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.04/templates/web/apache2/phpcgi.sh b/install/ubuntu/17.04/templates/web/apache2/phpcgi.sh
new file mode 100755
index 00000000..6565e103
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/apache2/phpcgi.sh
@@ -0,0 +1,16 @@
+#!/bin/bash
+# Adding php wrapper
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+wrapper_script='#!/usr/bin/php-cgi -cphp5-cgi.ini'
+wrapper_file="$home_dir/$user/web/$domain/cgi-bin/php"
+
+echo "$wrapper_script" > $wrapper_file
+chown $user:$user $wrapper_file
+chmod -f 751 $wrapper_file
+
+exit 0
diff --git a/install/ubuntu/17.04/templates/web/apache2/phpcgi.stpl b/install/ubuntu/17.04/templates/web/apache2/phpcgi.stpl
new file mode 100644
index 00000000..731355bc
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/apache2/phpcgi.stpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        SSLRequireSSL
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        Action phpcgi-script /cgi-bin/php
+        <Files *.php>
+            SetHandler phpcgi-script
+        </Files>
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.04/templates/web/apache2/phpcgi.tpl b/install/ubuntu/17.04/templates/web/apache2/phpcgi.tpl
new file mode 100644
index 00000000..c6796d29
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/apache2/phpcgi.tpl
@@ -0,0 +1,31 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        Action phpcgi-script /cgi-bin/php
+        <Files *.php>
+            SetHandler phpcgi-script
+        </Files>
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.04/templates/web/apache2/phpfcgid.sh b/install/ubuntu/17.04/templates/web/apache2/phpfcgid.sh
new file mode 100755
index 00000000..e8058249
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/apache2/phpfcgid.sh
@@ -0,0 +1,22 @@
+#!/bin/bash
+# Adding php wrapper
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+wrapper_script="#!/bin/sh
+PHPRC=/usr/local/lib
+export PHPRC
+export PHP_FCGI_MAX_REQUESTS=1000
+export PHP_FCGI_CHILDREN=20
+exec  /usr/bin/php-cgi
+"
+wrapper_file="$home_dir/$user/web/$domain/cgi-bin/fcgi-starter"
+
+echo "$wrapper_script" > $wrapper_file
+chown $user:$user $wrapper_file
+chmod -f 751 $wrapper_file
+
+exit 0
diff --git a/install/ubuntu/17.04/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/17.04/templates/web/apache2/phpfcgid.stpl
new file mode 100644
index 00000000..156c8a91
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/apache2/phpfcgid.stpl
@@ -0,0 +1,39 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        SSLRequireSSL
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        <Files *.php>
+          SetHandler fcgid-script
+        </Files>
+        FCGIWrapper %home%/%user%/web/%domain%/cgi-bin/fcgi-starter .php
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    php_admin_value open_basedir none
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.04/templates/web/apache2/phpfcgid.tpl b/install/ubuntu/17.04/templates/web/apache2/phpfcgid.tpl
new file mode 100644
index 00000000..a4c01269
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/apache2/phpfcgid.tpl
@@ -0,0 +1,31 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        <Files *.php>
+          SetHandler fcgid-script
+        </Files>
+        FCGIWrapper %home%/%user%/web/%domain%/cgi-bin/fcgi-starter .php
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.04/templates/web/awstats/awstats.tpl b/install/ubuntu/17.04/templates/web/awstats/awstats.tpl
new file mode 100755
index 00000000..9a92e0fd
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/awstats/awstats.tpl
@@ -0,0 +1,133 @@
+LogFile="/var/log/%web_system%/domains/%domain%.log"
+LogType=W
+LogFormat=1
+LogSeparator=" "
+SiteDomain="%domain_idn%"
+HostAliases="%alias_idn%"
+DirData="%home%/%user%/web/%domain%/stats"
+DirCgi="/vstats"
+DirIcons="/vstats/icon"
+AllowToUpdateStatsFromBrowser=0
+AllowFullYearView=2
+EnableLockForUpdate=1
+DNSStaticCacheFile="dnscache.txt"
+DNSLastUpdateCacheFile="dnscachelastupdate.txt"
+SkipDNSLookupFor=""
+AllowAccessFromWebToAuthenticatedUsersOnly=0
+AllowAccessFromWebToFollowingAuthenticatedUsers=""
+AllowAccessFromWebToFollowingIPAddresses=""
+CreateDirDataIfNotExists=0
+BuildHistoryFormat=text
+BuildReportFormat=html
+SaveDatabaseFilesWithPermissionsForEveryone=0
+PurgeLogFile=0
+ArchiveLogRecords=0
+KeepBackupOfHistoricFiles=1
+DefaultFile="index.php index.html"
+SkipHosts="127.0.0.1
+SkipUserAgents=""
+SkipFiles=""
+SkipReferrersBlackList=""
+OnlyHosts=""
+OnlyUserAgents=""
+OnlyUsers=""
+OnlyFiles=""
+NotPageList="css js class gif jpg jpeg png bmp ico rss xml swf"
+ValidHTTPCodes="200 304"
+ValidSMTPCodes="1 250"
+AuthenticatedUsersNotCaseSensitive=0
+URLNotCaseSensitive=0
+URLWithAnchor=0
+URLQuerySeparators="?;"
+URLWithQuery=0
+URLWithQueryWithOnlyFollowingParameters=""
+URLWithQueryWithoutFollowingParameters=""
+URLReferrerWithQuery=0
+WarningMessages=1
+ErrorMessages=""
+DebugMessages=0
+NbOfLinesForCorruptedLog=50
+WrapperScript=""
+DecodeUA=0
+MiscTrackerUrl="/js/awstats_misc_tracker.js"
+UseFramesWhenCGI=1
+DetailedReportsOnNewWindows=1
+Expires=3600
+MaxRowsInHTMLOutput=1000
+Lang="auto"
+DirLang="./lang"
+ShowMenu=1
+ShowSummary=UVPHB
+ShowMonthStats=UVPHB
+ShowDaysOfMonthStats=VPHB
+ShowDaysOfWeekStats=PHB
+ShowHoursStats=PHB
+ShowDomainsStats=PHB
+ShowHostsStats=PHBL
+ShowAuthenticatedUsers=0
+ShowRobotsStats=HBL
+ShowWormsStats=0
+ShowEMailSenders=0
+ShowEMailReceivers=0
+ShowSessionsStats=1
+ShowPagesStats=PBEX
+ShowFileTypesStats=HB
+ShowFileSizesStats=0
+ShowDownloadsStats=HB
+ShowOSStats=1
+ShowBrowsersStats=1
+ShowScreenSizeStats=0
+ShowOriginStats=PH
+ShowKeyphrasesStats=1
+ShowKeywordsStats=1
+ShowMiscStats=a
+ShowHTTPErrorsStats=1
+ShowSMTPErrorsStats=0
+ShowClusterStats=0
+AddDataArrayMonthStats=1
+AddDataArrayShowDaysOfMonthStats=1
+AddDataArrayShowDaysOfWeekStats=1
+AddDataArrayShowHoursStats=1
+IncludeInternalLinksInOriginSection=0
+MaxNbOfDomain = 10
+MinHitDomain  = 1
+MaxNbOfHostsShown = 10
+MinHitHost    = 1
+MaxNbOfLoginShown = 10
+MinHitLogin   = 1
+MaxNbOfRobotShown = 10
+MinHitRobot   = 1
+MaxNbOfDownloadsShown = 10
+MinHitDownloads = 1
+MaxNbOfPageShown = 10
+MinHitFile    = 1
+MaxNbOfOsShown = 10
+MinHitOs      = 1
+MaxNbOfBrowsersShown = 10
+MinHitBrowser = 1
+MaxNbOfScreenSizesShown = 5
+MinHitScreenSize = 1
+MaxNbOfWindowSizesShown = 5
+MinHitWindowSize = 1
+MaxNbOfRefererShown = 10
+MinHitRefer   = 1
+MaxNbOfKeyphrasesShown = 10
+MinHitKeyphrase = 1
+MaxNbOfKeywordsShown = 10
+MinHitKeyword = 1
+MaxNbOfEMailsShown = 20
+MinHitEMail   = 1
+FirstDayOfWeek=0
+ShowFlagLinks=""
+ShowLinksOnUrl=1
+UseHTTPSLinkForUrl=""
+MaxLengthOfShownURL=64
+HTMLHeadSection=""
+HTMLEndSection=""
+MetaRobot=0
+Logo="awstats_logo6.png"
+LogoLink="http://awstats.sourceforge.net"
+BarWidth   = 260
+BarHeight  = 90
+StyleSheet=""
+ExtraTrackedRowsLimit=500
diff --git a/install/ubuntu/17.04/templates/web/awstats/index.tpl b/install/ubuntu/17.04/templates/web/awstats/index.tpl
new file mode 100755
index 00000000..9df9bb5c
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/awstats/index.tpl
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+    <title>Awstats log analyzer </title>
+</head>
+<frameset rows="60,*" cols="*">
+    <frame src="nav.html" name="nav" scrolling="no" noresize>
+    <frame src="%month%/index.html" name="stats">
+</frameset>
+</html>
diff --git a/install/ubuntu/17.04/templates/web/awstats/nav.tpl b/install/ubuntu/17.04/templates/web/awstats/nav.tpl
new file mode 100755
index 00000000..f29bed68
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/awstats/nav.tpl
@@ -0,0 +1,23 @@
+<html>
+<head>
+    <title>Awstats navigation</title>
+    <script language="javascript">
+        function change() {
+            top.stats.location= document.period.select.value + '/';
+        }
+    </script>
+</head>
+<body>
+<table width="100%" border="0" cellspacing="0" cellpadding="0">
+<tr>
+    <td><img src="logo.png" alt="vesta"></td>
+    <td><form name="period" action="" method="get">
+        <select name="select" ONCHANGE="change()">
+%select_month%
+        </select>
+    </form>
+    </td>
+</tr>
+</table>
+</body>
+</html>
diff --git a/install/ubuntu/17.04/templates/web/nginx/caching.sh b/install/ubuntu/17.04/templates/web/nginx/caching.sh
new file mode 100755
index 00000000..09d8efe7
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/caching.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+user=$1
+domain=$2
+ip=$3
+home=$4
+docroot=$5
+
+str="proxy_cache_path /var/cache/nginx/$domain levels=2" 
+str="$str keys_zone=$domain:10m inactive=60m max_size=512m;" 
+conf='/etc/nginx/conf.d/01_caching_pool.conf'
+if [ -e "$conf" ]; then
+    if [ -z "$(grep "=${domain}:" $conf)" ]; then
+        echo "$str" >> $conf
+    fi
+else
+    echo "$str" >> $conf
+fi
+
diff --git a/install/ubuntu/17.04/templates/web/nginx/caching.stpl b/install/ubuntu/17.04/templates/web/nginx/caching.stpl
new file mode 100755
index 00000000..5e0e4064
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/caching.stpl
@@ -0,0 +1,44 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass https://%ip%:%web_ssl_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/caching.tpl b/install/ubuntu/17.04/templates/web/nginx/caching.tpl
new file mode 100755
index 00000000..36761b65
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/caching.tpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/default.stpl b/install/ubuntu/17.04/templates/web/nginx/default.stpl
new file mode 100755
index 00000000..fa538060
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/default.stpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/17.04/templates/web/nginx/default.tpl b/install/ubuntu/17.04/templates/web/nginx/default.tpl
new file mode 100755
index 00000000..4d5c774b
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/default.tpl
@@ -0,0 +1,33 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/17.04/templates/web/nginx/hosting.sh b/install/ubuntu/17.04/templates/web/nginx/hosting.sh
new file mode 100755
index 00000000..eeed37ef
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/ubuntu/17.04/templates/web/nginx/hosting.stpl b/install/ubuntu/17.04/templates/web/nginx/hosting.stpl
new file mode 100755
index 00000000..d778d633
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/hosting.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/17.04/templates/web/nginx/hosting.tpl b/install/ubuntu/17.04/templates/web/nginx/hosting.tpl
new file mode 100755
index 00000000..15961c95
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/hosting.tpl
@@ -0,0 +1,35 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/17.04/templates/web/nginx/http2.stpl b/install/ubuntu/17.04/templates/web/nginx/http2.stpl
new file mode 100644
index 00000000..76dd2f8e
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/http2.stpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/httpd/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/httpd/domains/%domain%.log combined;
+            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/17.04/templates/web/nginx/http2.tpl b/install/ubuntu/17.04/templates/web/nginx/http2.tpl
new file mode 100644
index 00000000..c1fec114
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/http2.tpl
@@ -0,0 +1,33 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/httpd/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/httpd/domains/%domain%.log combined;
+            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/cms_made_simple.stpl
new file mode 100644
index 00000000..d85bcce3
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/cms_made_simple.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/cms_made_simple.tpl
new file mode 100644
index 00000000..f9e90393
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/cms_made_simple.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter2.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter2.stpl
new file mode 100644
index 00000000..9c24c3ea
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter2.stpl
@@ -0,0 +1,61 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter2.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter2.tpl
new file mode 100644
index 00000000..d2422be2
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter2.tpl
@@ -0,0 +1,57 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter3.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter3.stpl
new file mode 100644
index 00000000..d7186314
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter3.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter3.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter3.tpl
new file mode 100644
index 00000000..54f81b99
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/codeigniter3.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/datalife_engine.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/datalife_engine.stpl
new file mode 100644
index 00000000..4f0b9ec7
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/datalife_engine.stpl
@@ -0,0 +1,127 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/datalife_engine.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/datalife_engine.tpl
new file mode 100644
index 00000000..3ea45347
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/datalife_engine.tpl
@@ -0,0 +1,123 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/default.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/default.stpl
new file mode 100644
index 00000000..5cb55311
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/default.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/default.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/default.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/default.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/dokuwiki.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/dokuwiki.stpl
new file mode 100644
index 00000000..f85032ba
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/dokuwiki.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/dokuwiki.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/dokuwiki.tpl
new file mode 100644
index 00000000..0a9a75ed
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/dokuwiki.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.stpl
new file mode 100644
index 00000000..91a70936
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -0,0 +1,101 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # For Drupal 6 and bwlow:
+        # Some modules enforce no slash (/) at the end of the URL
+        # Else this rewrite block wouldn't be needed (GlobalRedirect)
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.tpl
new file mode 100644
index 00000000..ac32dcd9
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -0,0 +1,98 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # For Drupal 6 and bwlow:
+        # Some modules enforce no slash (/) at the end of the URL
+        # Else this rewrite block wouldn't be needed (GlobalRedirect)
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl
new file mode 100644
index 00000000..3b9dabf5
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -0,0 +1,101 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl
new file mode 100644
index 00000000..1b979475
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -0,0 +1,98 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl
new file mode 100644
index 00000000..50d85b68
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -0,0 +1,102 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$)|^/update.php {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl
new file mode 100644
index 00000000..71b538bf
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -0,0 +1,99 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$)|^/update.php {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/joomla.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/joomla.stpl
new file mode 100644
index 00000000..704405f3
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/joomla.stpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/joomla.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/joomla.tpl
new file mode 100644
index 00000000..91b7a8f1
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/joomla.tpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/laravel.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/laravel.stpl
new file mode 100644
index 00000000..477f6f01
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/laravel.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/laravel.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/laravel.tpl
new file mode 100644
index 00000000..d14b0173
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/laravel.tpl
@@ -0,0 +1,50 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/magento.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/magento.stpl
new file mode 100644
index 00000000..fdab43aa
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/magento.stpl
@@ -0,0 +1,198 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %sdocroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %sdocroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %sdocroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %sdocroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/magento.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/magento.tpl
new file mode 100644
index 00000000..3f292fff
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/magento.tpl
@@ -0,0 +1,194 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %docroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %docroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %docroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %docroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/modx.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/modx.stpl
new file mode 100644
index 00000000..f410ab77
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/modx.stpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  https://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/modx.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/modx.tpl
new file mode 100644
index 00000000..342d3ecf
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/modx.tpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  http://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/moodle.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/moodle.stpl
new file mode 100644
index 00000000..f15a68c5
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/moodle.stpl
@@ -0,0 +1,90 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/moodle.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/moodle.tpl
new file mode 100644
index 00000000..c20ba648
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/moodle.tpl
@@ -0,0 +1,87 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/no-php.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/no-php.stpl
new file mode 100644
index 00000000..bc8b53a3
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/no-php.stpl
@@ -0,0 +1,47 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/no-php.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/no-php.tpl
new file mode 100644
index 00000000..7ff8aa1d
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/no-php.tpl
@@ -0,0 +1,43 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/odoo.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/odoo.stpl
new file mode 100644
index 00000000..d6697d7a
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/odoo.stpl
@@ -0,0 +1,70 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+    
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/odoo.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/odoo.tpl
new file mode 100644
index 00000000..b1240aae
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/odoo.tpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/opencart.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/opencart.stpl
new file mode 100644
index 00000000..908b9aeb
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/opencart.stpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/opencart.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/opencart.tpl
new file mode 100644
index 00000000..d0a9060b
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/opencart.tpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/owncloud.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/owncloud.stpl
new file mode 100644
index 00000000..891566b9
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/owncloud.stpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/owncloud.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/owncloud.tpl
new file mode 100644
index 00000000..e3ec31de
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/owncloud.tpl
@@ -0,0 +1,81 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+            access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/piwik.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/piwik.stpl
new file mode 100644
index 00000000..78c1bb78
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/piwik.stpl
@@ -0,0 +1,73 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+        return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+        }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/piwik.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/piwik.tpl
new file mode 100644
index 00000000..f94fb7de
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/piwik.tpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+            return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.stpl
new file mode 100644
index 00000000..5ffc9ed5
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+        }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.tpl
new file mode 100644
index 00000000..297fe0e8
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/sendy.stpl
new file mode 100644
index 00000000..0b351000
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/sendy.stpl
@@ -0,0 +1,88 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+     location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/sendy.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/sendy.tpl
new file mode 100644
index 00000000..b27b427d
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/sendy.tpl
@@ -0,0 +1,86 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress.stpl
new file mode 100644
index 00000000..5cb55311
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2.stpl
new file mode 100644
index 00000000..e0aeb524
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2.stpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2.tpl
new file mode 100644
index 00000000..bccb8b3d
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2.tpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
new file mode 100644
index 00000000..0d933b30
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+} 
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
new file mode 100644
index 00000000..39e366b7
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
diff --git a/install/ubuntu/17.04/templates/web/nginx/proxy_ip.tpl b/install/ubuntu/17.04/templates/web/nginx/proxy_ip.tpl
new file mode 100755
index 00000000..ae195617
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/nginx/proxy_ip.tpl
@@ -0,0 +1,9 @@
+server {
+    listen       %ip%:%proxy_port% default;
+    server_name  _;
+    #access_log  /var/log/nginx/%ip%.log main;
+    location / {
+        proxy_pass  http://%ip%:%web_port%;
+   }
+}
+
diff --git a/install/ubuntu/17.04/templates/web/php-fpm/default.tpl b/install/ubuntu/17.04/templates/web/php-fpm/default.tpl
new file mode 100644
index 00000000..209e1e43
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/php-fpm/default.tpl
@@ -0,0 +1,21 @@
+[%backend%]
+listen = 127.0.0.1:%backend_port%
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/ubuntu/17.04/templates/web/php-fpm/no-php.tpl b/install/ubuntu/17.04/templates/web/php-fpm/no-php.tpl
new file mode 100644
index 00000000..047c33ed
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/php-fpm/no-php.tpl
@@ -0,0 +1,20 @@
+;[%backend%]
+;listen = /dev/null
+
+;user = %user%
+;group = %user%
+
+;listen.owner = %user%
+;listen.group = www-data
+
+;pm = ondemand
+;pm.max_children = 4
+;pm.max_requests = 4000
+;pm.process_idle_timeout = 10s
+;pm.status_path = /status
+
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /home/%user%/tmp
+;env[TMPDIR] = /home/%user%/tmp
+;env[TEMP] = /home/%user%/tmp
diff --git a/install/ubuntu/17.04/templates/web/php-fpm/socket.tpl b/install/ubuntu/17.04/templates/web/php-fpm/socket.tpl
new file mode 100644
index 00000000..a0151084
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/php-fpm/socket.tpl
@@ -0,0 +1,24 @@
+[%backend%]
+listen = /var/run/php/%backend%.sock
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+listen.owner = %user%
+listen.group = www-data
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/ubuntu/17.04/templates/web/skel/document_errors/403.html b/install/ubuntu/17.04/templates/web/skel/document_errors/403.html
new file mode 100755
index 00000000..9c3f6baa
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/skel/document_errors/403.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>403 &mdash; Forbidden</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="You do not have permission to view this"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>403</h1>
+    <h2>Forbidden</h2>
+    <div>
+        Unfortunately, you do not have permission to view this
+    </div>
+</body>
+
+</html>
diff --git a/install/ubuntu/17.04/templates/web/skel/document_errors/404.html b/install/ubuntu/17.04/templates/web/skel/document_errors/404.html
new file mode 100755
index 00000000..2cee7708
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/skel/document_errors/404.html
@@ -0,0 +1,28 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>404 &mdash; Not Found</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, page not found"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+    <h1>404</h1>
+    <h2>Page Not Found</h2>
+    <div>
+        It seems that the page you were trying to reach does not exist anymore, or maybe it has just moved.
+        You can start again from the <a href="http://%domain%/">home</a> or go back to <a href="javascript:%20history.go(-1)">previous page</a>.
+    </div>
+</body>
+</html>
diff --git a/install/ubuntu/17.04/templates/web/skel/document_errors/50x.html b/install/ubuntu/17.04/templates/web/skel/document_errors/50x.html
new file mode 100755
index 00000000..85ba648b
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/skel/document_errors/50x.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>500 &mdash; Internal Sever Error</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, something went wrong. Internal Server Error"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>500</h1>
+    <h2>Internal Server Error</h2>
+    <div>
+        Sorry, something went wrong :(
+    </div>
+</body>
+
+</html>
diff --git a/install/ubuntu/17.04/templates/web/skel/public_html/index.html b/install/ubuntu/17.04/templates/web/skel/public_html/index.html
new file mode 100755
index 00000000..4f5bb724
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/skel/public_html/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="http://vestacp.com/">Powered by VESTA</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/ubuntu/17.04/templates/web/skel/public_html/robots.txt b/install/ubuntu/17.04/templates/web/skel/public_html/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/skel/public_html/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/ubuntu/17.04/templates/web/skel/public_shtml/index.html b/install/ubuntu/17.04/templates/web/skel/public_shtml/index.html
new file mode 100755
index 00000000..4f5bb724
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/skel/public_shtml/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="http://vestacp.com/">Powered by VESTA</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/ubuntu/17.04/templates/web/skel/public_shtml/robots.txt b/install/ubuntu/17.04/templates/web/skel/public_shtml/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/skel/public_shtml/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/ubuntu/17.04/templates/web/suspend/.htaccess b/install/ubuntu/17.04/templates/web/suspend/.htaccess
new file mode 100755
index 00000000..5a6df83f
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/suspend/.htaccess
@@ -0,0 +1,2 @@
+ErrorDocument 403 /index.html
+ErrorDocument 404 /index.html
diff --git a/install/ubuntu/17.04/templates/web/suspend/index.html b/install/ubuntu/17.04/templates/web/suspend/index.html
new file mode 100755
index 00000000..f2d04e1f
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/suspend/index.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>Website Suspended</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This website has been suspended."/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:84px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: 15px 0 25px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+<body>
+    <h1>SUSPENDED</h1>
+    <h2>This website has been suspended.</h2>
+    <div>
+        Please contact the technical support department.
+    </div>
+</body>
+</html>
diff --git a/install/ubuntu/17.04/templates/web/webalizer/webalizer.tpl b/install/ubuntu/17.04/templates/web/webalizer/webalizer.tpl
new file mode 100755
index 00000000..068adcfb
--- /dev/null
+++ b/install/ubuntu/17.04/templates/web/webalizer/webalizer.tpl
@@ -0,0 +1,110 @@
+HostName         %domain_idn%
+LogFile          /var/log/%web_system%/domains/%domain%.log
+OutputDir        %home%/%user%/web/%domain%/stats
+HistoryName      %home%/%user%/web/%domain%/stats/%domain%.hist
+Incremental      yes
+IncrementalName  %home%/%user%/web/%domain%/stats/%domain%.current
+PageType         htm*
+PageType         cgi
+PageType         php
+PageType         shtml
+DNSCache         /var/lib/webalizer/dns_cache.db
+DNSChildren      10
+Quiet            yes
+FoldSeqErr       yes
+IndexAlias       index.php
+HideURL          *.gif
+HideURL          *.GIF
+HideURL          *.jpg
+HideURL          *.JPG
+HideURL          *.png
+HideURL          *.PNG
+HideURL          *.ra
+SearchEngine     abcsearch.          terms=
+SearchEngine     alexa.              q=
+SearchEngine     alltheweb.          q=
+SearchEngine     alltheweb.          query=
+SearchEngine     alot.               q=
+SearchEngine     altavista.          q=
+SearchEngine     aolsearch.          query=
+SearchEngine     aport.ru            r=
+SearchEngine     ask.                q=
+SearchEngine     atlas.cz            q=
+SearchEngine     bbc.                q=
+SearchEngine     bing.               q=
+SearchEngine     blingo.             q=
+SearchEngine     blogs.yandex.ru     text=
+SearchEngine     btopenworld         query=
+SearchEngine     buscador.ya.com     q=
+SearchEngine     busca.              q=
+SearchEngine     business.           query=
+SearchEngine     centrum.cz          q=
+SearchEngine     chiff.              q=
+SearchEngine     clusty.             query=
+SearchEngine     comcast.            q=
+SearchEngine     crawler.            q=
+SearchEngine     cuil.               q=
+SearchEngine     dmoz.               search=
+SearchEngine     dogpile.com         q=
+SearchEngine     dpxml               qkw=
+SearchEngine     eureka.             searchword=
+SearchEngine     euroseek.           string=
+SearchEngine     exalead.            q=
+SearchEngine     excite              search=
+SearchEngine     ezilon.             q=
+SearchEngine     fastbrowsersearch.  q=
+SearchEngine     feedster.com        q=
+SearchEngine     fireball.de         q=
+SearchEngine     fireball.           keyword=
+SearchEngine     freeserve.          q=
+SearchEngine     gigablast.          q=
+SearchEngine     gogo.ru             q=
+SearchEngine     go.mail.ru          q=
+SearchEngine     google.             q=
+SearchEngine     hakia.              q=
+SearchEngine     hotbot.             query=
+SearchEngine     infoseek.           qt=
+SearchEngine     iwon                searchfor=
+SearchEngine     ixquick.com         query=
+SearchEngine     joeant.             keywords=
+SearchEngine     jyxo.cz             s=
+SearchEngine     looksmart.          key=
+SearchEngine     lycos.              query=
+SearchEngine     mamma.              q=
+SearchEngine     metacrawler         q=
+SearchEngine     msn.                MT=
+SearchEngine     msxml               qkw=
+SearchEngine     mysearch.           searchfor=
+SearchEngine     mywebsearch.        searchfor=
+SearchEngine     netscape.           q=
+SearchEngine     nigma.ru            q=
+SearchEngine     northernlight.      qr=
+SearchEngine     ntlworld.           q=
+SearchEngine     orange.             q=
+SearchEngine     overture.           Keywords=
+SearchEngine     punto.ru            text=
+SearchEngine     rambler.            keyword=
+SearchEngine     search.aol.         q=
+SearchEngine     search.babylon.     q=
+SearchEngine     search.centrum.     phrase=
+SearchEngine     search.conduit.     q=
+SearchEngine     search.earthlink    q=
+SearchEngine     search.icq.         q=
+SearchEngine     search.live.com     q=
+SearchEngine     search.rambler.ru   words=
+SearchEngine     search.winamp.      q=
+SearchEngine     searchy.            q=
+SearchEngine     seznam.cz           w=
+SearchEngine     snap.               query=
+SearchEngine     teoma.              q=
+SearchEngine     teradex.com         q=
+SearchEngine     ukplus              key=
+SearchEngine     verizon.            q=
+SearchEngine     virginmedia.        q=
+SearchEngine     voila.              rdata=
+SearchEngine     webcrawler          searchText=
+SearchEngine     web.search.naver.   query=
+SearchEngine     wisenut             q=
+SearchEngine     yahoo.              p=
+SearchEngine     yandex.             text=
+SearchEngine     yodao.              q=
diff --git a/install/ubuntu/17.04/vsftpd/vsftpd.conf b/install/ubuntu/17.04/vsftpd/vsftpd.conf
new file mode 100644
index 00000000..034b016d
--- /dev/null
+++ b/install/ubuntu/17.04/vsftpd/vsftpd.conf
@@ -0,0 +1,27 @@
+anonymous_enable=NO
+local_enable=YES
+write_enable=YES
+local_umask=022
+anon_umask=022
+anon_upload_enable=NO
+dirmessage_enable=YES
+xferlog_enable=YES
+connect_from_port_20=YES
+xferlog_std_format=YES
+dual_log_enable=YES
+chroot_local_user=YES
+listen=YES
+pam_service_name=vsftpd
+userlist_enable=NO
+tcp_wrappers=YES
+force_dot_files=YES
+ascii_upload_enable=YES
+ascii_download_enable=YES
+allow_writeable_chroot=YES
+seccomp_sandbox=NO
+pasv_enable=YES
+pasv_min_port=12000
+pasv_max_port=12100
+max_per_ip=10
+max_clients=100
+use_localtime=YES
diff --git a/install/ubuntu/17.10/apache2/apache2.conf b/install/ubuntu/17.10/apache2/apache2.conf
new file mode 100644
index 00000000..2756132a
--- /dev/null
+++ b/install/ubuntu/17.10/apache2/apache2.conf
@@ -0,0 +1,94 @@
+# It is split into several files forming the configuration hierarchy outlined
+# below, all located in the /etc/apache2/ directory:
+#
+#	/etc/apache2/
+#	|-- apache2.conf
+#	|	`--  ports.conf
+#	|-- mods-enabled
+#	|	|-- *.load
+#	|	`-- *.conf
+#	|-- conf.d
+#	|	`-- *
+
+# Global configuration
+PidFile ${APACHE_PID_FILE}
+Timeout 30
+KeepAlive Off
+MaxKeepAliveRequests 100
+KeepAliveTimeout 10
+
+<IfModule mpm_prefork_module>
+    StartServers          8
+    MinSpareServers       5
+    MaxSpareServers      20
+    ServerLimit         256
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_worker_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_event_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+# These need to be set in /etc/apache2/envvars
+User ${APACHE_RUN_USER}
+Group ${APACHE_RUN_GROUP}
+#User www-data
+#Group www-data
+
+AccessFileName .htaccess
+
+<Files ~ "^\.ht">
+    Order allow,deny
+    Deny from all
+    Satisfy all
+</Files>
+
+DefaultType None
+HostnameLookups Off
+
+ErrorLog ${APACHE_LOG_DIR}/error.log
+LogLevel warn
+
+# Include module configuration:
+Include mods-enabled/*.load
+Include mods-enabled/*.conf
+
+# Include list of ports to listen on and which to use for name based vhosts
+Include ports.conf
+
+LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
+LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
+LogFormat "%h %l %u %t \"%r\" %>s %O" common
+LogFormat "%{Referer}i -> %U" referer
+LogFormat "%{User-agent}i" agent
+LogFormat "%b" bytes
+
+Include conf.d/
+
+# Include the virtual host configurations:
+#Include sites-enabled/
+
+ErrorDocument 403 /error/403.html
+ErrorDocument 404 /error/404.html
+ErrorDocument 500 /error/50x.html
+ErrorDocument 501 /error/50x.html
+ErrorDocument 502 /error/50x.html
+ErrorDocument 503 /error/50x.html
+ErrorDocument 506 /error/50x.html
diff --git a/install/ubuntu/17.10/apache2/status.conf b/install/ubuntu/17.10/apache2/status.conf
new file mode 100644
index 00000000..da9d9633
--- /dev/null
+++ b/install/ubuntu/17.10/apache2/status.conf
@@ -0,0 +1,8 @@
+Listen 127.0.0.1:8081
+<Location /server-status>
+    SetHandler server-status
+    Order deny,allow
+    Deny from all
+    Allow from 127.0.0.1
+    Allow from all
+</Location>
diff --git a/install/ubuntu/17.10/bind/named.conf b/install/ubuntu/17.10/bind/named.conf
new file mode 100644
index 00000000..ed6ece88
--- /dev/null
+++ b/install/ubuntu/17.10/bind/named.conf
@@ -0,0 +1,12 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
+
diff --git a/install/ubuntu/17.10/clamav/clamd.conf b/install/ubuntu/17.10/clamav/clamd.conf
new file mode 100644
index 00000000..4e04356e
--- /dev/null
+++ b/install/ubuntu/17.10/clamav/clamd.conf
@@ -0,0 +1,61 @@
+#Automatically Generated by clamav-base postinst
+#To reconfigure clamd run #dpkg-reconfigure clamav-base
+#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
+LocalSocket /var/run/clamav/clamd.ctl
+FixStaleSocket true
+LocalSocketGroup clamav
+LocalSocketMode 666
+# TemporaryDirectory is not set to its default /tmp here to make overriding
+# the default with environment variables TMPDIR/TMP/TEMP possible
+User clamav
+# AllowSupplementaryGroups true
+ScanMail true
+ScanArchive true
+ArchiveBlockEncrypted false
+MaxDirectoryRecursion 15
+FollowDirectorySymlinks false
+FollowFileSymlinks false
+ReadTimeout 180
+MaxThreads 12
+MaxConnectionQueueLength 15
+LogSyslog false
+LogFacility LOG_LOCAL6
+LogClean false
+LogVerbose true
+PidFile /var/run/clamav/clamd.pid
+DatabaseDirectory /var/lib/clamav
+SelfCheck 3600
+Foreground false
+Debug false
+ScanPE true
+ScanOLE2 true
+ScanHTML true
+DetectBrokenExecutables false
+ExitOnOOM false
+LeaveTemporaryFiles false
+AlgorithmicDetection true
+ScanELF true
+IdleTimeout 30
+PhishingSignatures true
+PhishingScanURLs true
+PhishingAlwaysBlockSSLMismatch false
+PhishingAlwaysBlockCloak false
+DetectPUA false
+ScanPartialMessages false
+HeuristicScanPrecedence false
+StructuredDataDetection false
+CommandReadTimeout 5
+SendBufTimeout 200
+MaxQueue 100
+ExtendedDetectionInfo true
+OLE2BlockMacros false
+StreamMaxLength 25M
+LogFile /var/log/clamav/clamav.log
+LogTime true
+LogFileUnlock false
+LogFileMaxSize 0
+Bytecode true
+BytecodeSecurity TrustSigned
+BytecodeTimeout 60000
+OfficialDatabaseOnly false
+CrossFilesystems true
diff --git a/install/ubuntu/17.10/deb_signing.key b/install/ubuntu/17.10/deb_signing.key
new file mode 100644
index 00000000..2ad2db8b
--- /dev/null
+++ b/install/ubuntu/17.10/deb_signing.key
@@ -0,0 +1,30 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.12 (GNU/Linux)
+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+=J2HJ
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/install/ubuntu/17.10/dovecot/conf.d/10-auth.conf b/install/ubuntu/17.10/dovecot/conf.d/10-auth.conf
new file mode 100644
index 00000000..dfcc8311
--- /dev/null
+++ b/install/ubuntu/17.10/dovecot/conf.d/10-auth.conf
@@ -0,0 +1,4 @@
+disable_plaintext_auth = no
+auth_verbose = yes
+auth_mechanisms = plain login
+!include auth-passwdfile.conf.ext
diff --git a/install/ubuntu/17.10/dovecot/conf.d/10-logging.conf b/install/ubuntu/17.10/dovecot/conf.d/10-logging.conf
new file mode 100644
index 00000000..a5f207d5
--- /dev/null
+++ b/install/ubuntu/17.10/dovecot/conf.d/10-logging.conf
@@ -0,0 +1 @@
+log_path = /var/log/dovecot.log
diff --git a/install/ubuntu/17.10/dovecot/conf.d/10-mail.conf b/install/ubuntu/17.10/dovecot/conf.d/10-mail.conf
new file mode 100644
index 00000000..55313419
--- /dev/null
+++ b/install/ubuntu/17.10/dovecot/conf.d/10-mail.conf
@@ -0,0 +1,4 @@
+mail_privileged_group = mail
+mail_access_groups = mail
+mail_location = maildir:%h/mail/%d/%n
+pop3_uidl_format = %08Xu%08Xv
diff --git a/install/ubuntu/17.10/dovecot/conf.d/10-master.conf b/install/ubuntu/17.10/dovecot/conf.d/10-master.conf
new file mode 100644
index 00000000..a75a9aaa
--- /dev/null
+++ b/install/ubuntu/17.10/dovecot/conf.d/10-master.conf
@@ -0,0 +1,29 @@
+service imap-login {
+  inet_listener imap {
+  }
+  inet_listener imaps {
+  }
+}
+
+service pop3-login {
+  inet_listener pop3 {
+  }
+  inet_listener pop3s {
+  }
+}
+
+
+service imap {
+}
+
+service pop3 {
+}
+
+service auth {
+  unix_listener auth-client {
+    group = mail
+    mode = 0660
+    user = dovecot
+  }
+  user = dovecot
+}
diff --git a/install/ubuntu/17.10/dovecot/conf.d/10-ssl.conf b/install/ubuntu/17.10/dovecot/conf.d/10-ssl.conf
new file mode 100644
index 00000000..24cbf3e2
--- /dev/null
+++ b/install/ubuntu/17.10/dovecot/conf.d/10-ssl.conf
@@ -0,0 +1,5 @@
+ssl = yes
+ssl_protocols = !SSLv2 !SSLv3
+
+ssl_cert = </usr/local/vesta/ssl/certificate.crt
+ssl_key = </usr/local/vesta/ssl/certificate.key
diff --git a/install/ubuntu/17.10/dovecot/conf.d/20-imap.conf b/install/ubuntu/17.10/dovecot/conf.d/20-imap.conf
new file mode 100644
index 00000000..1a459f8e
--- /dev/null
+++ b/install/ubuntu/17.10/dovecot/conf.d/20-imap.conf
@@ -0,0 +1,58 @@
+##
+## IMAP specific settings
+##
+
+protocol imap {
+  # Maximum IMAP command line length. Some clients generate very long command
+  # lines with huge mailboxes, so you may need to raise this if you get
+  # "Too long argument" or "IMAP command line too large" errors often.
+  #imap_max_line_length = 64k
+
+  # Maximum number of IMAP connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  #mail_max_userip_connections = 10
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # IMAP logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #imap_logout_format = bytes=%i/%o
+
+  # Override the IMAP CAPABILITY response. If the value begins with '+',
+  # add the given capabilities on top of the defaults (e.g. +XFOO XBAR).
+  #imap_capability = 
+
+  # How long to wait between "OK Still here" notifications when client is
+  # IDLEing.
+  #imap_idle_notify_interval = 2 mins
+
+  # ID field names and values to send to clients. Using * as the value makes
+  # Dovecot use the default value. The following fields have default values
+  # currently: name, version, os, os-version, support-url, support-email.
+  #imap_id_send = 
+
+  # ID fields sent by client to log. * means everything.
+  #imap_id_log =
+
+  # Workarounds for various client bugs:
+  #   delay-newmail:
+  #     Send EXISTS/RECENT new mail notifications only when replying to NOOP
+  #     and CHECK commands. Some clients ignore them otherwise, for example OSX
+  #     Mail (<v2.1). Outlook Express breaks more badly though, without this it
+  #     may show user "Message no longer in server" errors. Note that OE6 still
+  #     breaks even with this workaround if synchronization is set to
+  #     "Headers Only".
+  #   tb-extra-mailbox-sep:
+  #     Thunderbird gets somehow confused with LAYOUT=fs (mbox and dbox) and
+  #     adds extra '/' suffixes to mailbox names. This option causes Dovecot to
+  #     ignore the extra '/' instead of treating it as invalid mailbox name.
+  #   tb-lsub-flags:
+  #     Show \Noselect flags for LSUB replies with LAYOUT=fs (e.g. mbox).
+  #     This makes Thunderbird realize they aren't selectable and show them
+  #     greyed out, instead of only later giving "not selectable" popup error.
+  #
+  # The list is space-separated.
+  #imap_client_workarounds = 
+}
diff --git a/install/ubuntu/17.10/dovecot/conf.d/20-pop3.conf b/install/ubuntu/17.10/dovecot/conf.d/20-pop3.conf
new file mode 100644
index 00000000..a3a43b88
--- /dev/null
+++ b/install/ubuntu/17.10/dovecot/conf.d/20-pop3.conf
@@ -0,0 +1,91 @@
+##
+## POP3 specific settings
+##
+
+protocol pop3 {
+  # Don't try to set mails non-recent or seen with POP3 sessions. This is
+  # mostly intended to reduce disk I/O. With maildir it doesn't move files
+  # from new/ to cur/, with mbox it doesn't write Status-header.
+  #pop3_no_flag_updates = no
+
+  # Support LAST command which exists in old POP3 specs, but has been removed
+  # from new ones. Some clients still wish to use this though. Enabling this
+  # makes RSET command clear all \Seen flags from messages.
+  #pop3_enable_last = no
+
+  # If mail has X-UIDL header, use it as the mail's UIDL.
+  #pop3_reuse_xuidl = no
+
+  # Keep the mailbox locked for the entire POP3 session.
+  #pop3_lock_session = no
+
+  # POP3 requires message sizes to be listed as if they had CR+LF linefeeds.
+  # Many POP3 servers violate this by returning the sizes with LF linefeeds,
+  # because it's faster to get. When this setting is enabled, Dovecot still
+  # tries to do the right thing first, but if that requires opening the
+  # message, it fallbacks to the easier (but incorrect) size.
+  #pop3_fast_size_lookups = no
+
+  # POP3 UIDL (unique mail identifier) format to use. You can use following
+  # variables, along with the variable modifiers described in
+  # doc/wiki/Variables.txt (e.g. %Uf for the filename in uppercase)
+  #
+  #  %v - Mailbox's IMAP UIDVALIDITY
+  #  %u - Mail's IMAP UID
+  #  %m - MD5 sum of the mailbox headers in hex (mbox only)
+  #  %f - filename (maildir only)
+  #  %g - Mail's GUID
+  #
+  # If you want UIDL compatibility with other POP3 servers, use:
+  #  UW's ipop3d         : %08Xv%08Xu
+  #  Courier             : %f or %v-%u (both might be used simultaneosly)
+  #  Cyrus (<= 2.1.3)    : %u
+  #  Cyrus (>= 2.1.4)    : %v.%u
+  #  Dovecot v0.99.x     : %v.%u
+  #  tpop3d              : %Mf
+  #
+  # Note that Outlook 2003 seems to have problems with %v.%u format which was
+  # Dovecot's default, so if you're building a new server it would be a good
+  # idea to change this. %08Xu%08Xv should be pretty fail-safe.
+  #
+  #pop3_uidl_format = %08Xu%08Xv
+
+  # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes
+  # won't change those UIDLs. Currently this works only with Maildir.
+  #pop3_save_uidl = no
+
+  # What to do about duplicate UIDLs if they exist?
+  #   allow: Show duplicates to clients.
+  #   rename: Append a temporary -2, -3, etc. counter after the UIDL.
+  #pop3_uidl_duplicates = allow
+
+  # POP3 logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #  %t - number of TOP commands
+  #  %p - number of bytes sent to client as a result of TOP command
+  #  %r - number of RETR commands
+  #  %b - number of bytes sent to client as a result of RETR command
+  #  %d - number of deleted messages
+  #  %m - number of messages (before deletion)
+  #  %s - mailbox size in bytes (before deletion)
+  #  %u - old/new UIDL hash. may help finding out if UIDLs changed unexpectedly
+  #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
+
+  # Maximum number of POP3 connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  #mail_max_userip_connections = 10
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # Workarounds for various client bugs:
+  #   outlook-no-nuls:
+  #     Outlook and Outlook Express hang if mails contain NUL characters.
+  #     This setting replaces them with 0x80 character.
+  #   oe-ns-eoh:
+  #     Outlook Express and Netscape Mail breaks if end of headers-line is
+  #     missing. This option simply sends it if it's missing.
+  # The list is space-separated.
+  #pop3_client_workarounds = 
+}
diff --git a/install/ubuntu/17.10/dovecot/conf.d/auth-passwdfile.conf.ext b/install/ubuntu/17.10/dovecot/conf.d/auth-passwdfile.conf.ext
new file mode 100644
index 00000000..75e6e115
--- /dev/null
+++ b/install/ubuntu/17.10/dovecot/conf.d/auth-passwdfile.conf.ext
@@ -0,0 +1,9 @@
+passdb {
+  driver = passwd-file
+  args = scheme=MD5-CRYPT username_format=%n /etc/exim4/domains/%d/passwd
+}
+
+userdb {
+  driver = passwd-file
+  args = username_format=%n /etc/exim4/domains/%d/passwd
+}
diff --git a/install/ubuntu/17.10/dovecot/dovecot.conf b/install/ubuntu/17.10/dovecot/dovecot.conf
new file mode 100644
index 00000000..311a3351
--- /dev/null
+++ b/install/ubuntu/17.10/dovecot/dovecot.conf
@@ -0,0 +1,24 @@
+protocols = imap pop3
+listen = *, ::
+base_dir = /var/run/dovecot/
+!include conf.d/*.conf
+
+namespace {
+    type = private
+    separator = /
+    prefix =
+    inbox = yes
+
+    mailbox Sent {
+        auto = subscribe
+        special_use = \Sent
+    }
+    mailbox Drafts {
+        auto = subscribe
+        special_use = \Drafts
+    }
+    mailbox Trash {
+        auto = subscribe
+        special_use = \Trash
+    }
+}
diff --git a/install/ubuntu/17.10/exim/dnsbl.conf b/install/ubuntu/17.10/exim/dnsbl.conf
new file mode 100644
index 00000000..5166b255
--- /dev/null
+++ b/install/ubuntu/17.10/exim/dnsbl.conf
@@ -0,0 +1,2 @@
+bl.spamcop.net
+zen.spamhaus.org
diff --git a/install/ubuntu/17.10/exim/exim4.conf.template b/install/ubuntu/17.10/exim/exim4.conf.template
new file mode 100644
index 00000000..fc346486
--- /dev/null
+++ b/install/ubuntu/17.10/exim/exim4.conf.template
@@ -0,0 +1,382 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+add_environment = <; PATH=/bin:/usr/bin
+keep_environment =
+disable_ipv6 = true
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/certificate.crt
+tls_privatekey = /usr/local/vesta/ssl/certificate.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 5s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lc:${domain:$h_from:}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+begin acl
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth required
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = *
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{1024K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = debian-spamd:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/$domain/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #helo_data = $sender_address_domain
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  from = "${local_part}@${domain}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################
diff --git a/install/ubuntu/17.10/exim/spam-blocks.conf b/install/ubuntu/17.10/exim/spam-blocks.conf
new file mode 100644
index 00000000..e69de29b
diff --git a/install/ubuntu/17.10/fail2ban/action.d/vesta.conf b/install/ubuntu/17.10/fail2ban/action.d/vesta.conf
new file mode 100644
index 00000000..0edfc349
--- /dev/null
+++ b/install/ubuntu/17.10/fail2ban/action.d/vesta.conf
@@ -0,0 +1,9 @@
+# Fail2Ban configuration file for vesta
+
+[Definition]
+
+actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
+actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
+actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
+actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
+actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>
diff --git a/install/ubuntu/17.10/fail2ban/filter.d/vesta.conf b/install/ubuntu/17.10/fail2ban/filter.d/vesta.conf
new file mode 100644
index 00000000..69670a56
--- /dev/null
+++ b/install/ubuntu/17.10/fail2ban/filter.d/vesta.conf
@@ -0,0 +1,10 @@
+# Fail2Ban filter for unsuccesfull Vesta authentication attempts
+#
+
+[INCLUDES]
+before = common.conf
+
+[Definition]
+failregex =  .* <HOST> failed to login
+ignoreregex =
+
diff --git a/install/ubuntu/17.10/fail2ban/jail.local b/install/ubuntu/17.10/fail2ban/jail.local
new file mode 100644
index 00000000..013f81c4
--- /dev/null
+++ b/install/ubuntu/17.10/fail2ban/jail.local
@@ -0,0 +1,51 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
+[ssh-iptables]
+enabled  = true
+filter   = sshd
+action   = vesta[name=SSH]
+logpath  = /var/log/auth.log
+maxretry = 5
+
+[vsftpd-iptables]
+enabled  = false
+filter   = vsftpd
+action   = vesta[name=FTP]
+logpath  = /var/log/vsftpd.log
+maxretry = 5
+
+[exim-iptables]
+enabled = true
+filter  = exim
+action  = vesta[name=MAIL]
+logpath = /var/log/exim4/mainlog
+maxretry = 5
+
+[dovecot-iptables]
+enabled = true
+filter  = dovecot
+action  = vesta[name=MAIL]
+logpath = /var/log/dovecot.log
+maxretry = 5
+
+[mysqld-iptables]
+enabled  = false
+filter   = mysqld-auth
+action   = vesta[name=DB]
+logpath  = /var/log/mysql.log
+maxretry = 5
+
+[vesta-iptables]
+enabled = true
+filter  = vesta
+action  = vesta[name=VESTA]
+logpath = /var/log/vesta/auth.log
+maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5
diff --git a/install/ubuntu/17.10/firewall/ports.conf b/install/ubuntu/17.10/firewall/ports.conf
new file mode 100644
index 00000000..b730d012
--- /dev/null
+++ b/install/ubuntu/17.10/firewall/ports.conf
@@ -0,0 +1,17 @@
+PROTOCOL='TCP' PORT='20'
+PROTOCOL='TCP' PORT='21'
+PROTOCOL='TCP' PORT='22'
+PROTOCOL='TCP' PORT='25'
+PROTOCOL='TCP' PORT='53'
+PROTOCOL='UDP' PORT='53'
+PROTOCOL='TCP' PORT='80'
+PROTOCOL='TCP' PORT='443'
+PROTOCOL='TCP' PORT='110'
+PROTOCOL='UDP' PORT='123'
+PROTOCOL='TCP' PORT='143'
+PROTOCOL='TCP' PORT='3306'
+PROTOCOL='TCP' PORT='5432'
+PROTOCOL='TCP' PORT='8080'
+PROTOCOL='TCP' PORT='8433'
+PROTOCOL='TCP' PORT='8083'
+PROTOCOL='TCP' PORT='12000:12100'
diff --git a/install/ubuntu/17.10/firewall/rules.conf b/install/ubuntu/17.10/firewall/rules.conf
new file mode 100644
index 00000000..fba98e1e
--- /dev/null
+++ b/install/ubuntu/17.10/firewall/rules.conf
@@ -0,0 +1,11 @@
+RULE='1' ACTION='ACCEPT' PROTOCOL='ICMP' PORT='0' IP='0.0.0.0/0' COMMENT='PING' SUSPENDED='no' TIME='17:13:48' DATE='2014-09-16'
+RULE='2' ACTION='ACCEPT' PROTOCOL='TCP' PORT='8083' IP='0.0.0.0/0' COMMENT='VESTA' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='3' ACTION='ACCEPT' PROTOCOL='TCP' PORT='3306,5432' IP='0.0.0.0/0' COMMENT='DB' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='4' ACTION='ACCEPT' PROTOCOL='TCP' PORT='143,993' IP='0.0.0.0/0' COMMENT='IMAP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='5' ACTION='ACCEPT' PROTOCOL='TCP' PORT='110,995' IP='0.0.0.0/0' COMMENT='POP3' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='6' ACTION='ACCEPT' PROTOCOL='TCP' PORT='25,465,587,2525' IP='0.0.0.0/0' COMMENT='SMTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='7' ACTION='ACCEPT' PROTOCOL='TCP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='8' ACTION='ACCEPT' PROTOCOL='UDP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='9' ACTION='ACCEPT' PROTOCOL='TCP' PORT='21,12000-12100' IP='0.0.0.0/0' COMMENT='FTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='10' ACTION='ACCEPT' PROTOCOL='TCP' PORT='80,443' IP='0.0.0.0/0' COMMENT='WEB' SUSPENDED='no' TIME='17:04:27' DATE='2014-09-24'
+RULE='11' ACTION='ACCEPT' PROTOCOL='TCP' PORT='22' IP='0.0.0.0/0' COMMENT='SSH' SUSPENDED='no' TIME='17:14:41' DATE='2014-09-16'
diff --git a/install/ubuntu/17.10/logrotate/apache2 b/install/ubuntu/17.10/logrotate/apache2
new file mode 100644
index 00000000..27629d0d
--- /dev/null
+++ b/install/ubuntu/17.10/logrotate/apache2
@@ -0,0 +1,19 @@
+/var/log/apache2/*.log /var/log/apache2/domains/*log {
+        weekly
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 root adm
+        sharedscripts
+        postrotate
+                /etc/init.d/apache2 reload > /dev/null || true
+                [ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+        prerotate
+                if [ -d /etc/logrotate.d/httpd-prerotate ]; then \
+                        run-parts /etc/logrotate.d/httpd-prerotate; \
+                fi; \
+        endscript
+}
diff --git a/install/ubuntu/17.10/logrotate/dovecot b/install/ubuntu/17.10/logrotate/dovecot
new file mode 100644
index 00000000..ac4fd6e9
--- /dev/null
+++ b/install/ubuntu/17.10/logrotate/dovecot
@@ -0,0 +1,12 @@
+/var/log/dovecot*.log {
+  weekly
+  rotate 4
+  missingok
+  notifempty
+  compress
+  delaycompress
+  sharedscripts
+  postrotate
+    doveadm log reopen
+  endscript
+}
diff --git a/install/ubuntu/17.10/logrotate/nginx b/install/ubuntu/17.10/logrotate/nginx
new file mode 100644
index 00000000..d667f213
--- /dev/null
+++ b/install/ubuntu/17.10/logrotate/nginx
@@ -0,0 +1,13 @@
+/var/log/nginx/*log /var/log/nginx/domains/*log {
+        daily
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 nginx adm
+        sharedscripts
+        postrotate
+                [ -f /var/run/nginx.pid ] && kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+}
diff --git a/install/ubuntu/17.10/logrotate/vesta b/install/ubuntu/17.10/logrotate/vesta
new file mode 100644
index 00000000..027a3439
--- /dev/null
+++ b/install/ubuntu/17.10/logrotate/vesta
@@ -0,0 +1,7 @@
+/usr/local/vesta/log/*.log {
+    missingok
+    notifempty
+    size 30k
+    yearly
+    create 0600 root root
+}
diff --git a/install/ubuntu/17.10/mysql/my-large.cnf b/install/ubuntu/17.10/mysql/my-large.cnf
new file mode 100644
index 00000000..7201377c
--- /dev/null
+++ b/install/ubuntu/17.10/mysql/my-large.cnf
@@ -0,0 +1,41 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 256M
+max_allowed_packet = 32M
+table_open_cache = 256
+sort_buffer_size = 1M
+read_buffer_size = 1M
+read_rnd_buffer_size = 4M
+myisam_sort_buffer_size = 64M
+thread_cache_size = 8
+query_cache_size= 16M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=200
+max_user_connections=50
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/ubuntu/17.10/mysql/my-medium.cnf b/install/ubuntu/17.10/mysql/my-medium.cnf
new file mode 100644
index 00000000..1c10ab9a
--- /dev/null
+++ b/install/ubuntu/17.10/mysql/my-medium.cnf
@@ -0,0 +1,40 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+  
+skip-external-locking
+key_buffer_size = 16M
+max_allowed_packet = 16M
+table_open_cache = 64
+sort_buffer_size = 512K
+net_buffer_length = 8K
+read_buffer_size = 256K
+read_rnd_buffer_size = 512K
+myisam_sort_buffer_size = 8M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=70
+max_user_connections=30
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/ubuntu/17.10/mysql/my-small.cnf b/install/ubuntu/17.10/mysql/my-small.cnf
new file mode 100644
index 00000000..26a80478
--- /dev/null
+++ b/install/ubuntu/17.10/mysql/my-small.cnf
@@ -0,0 +1,40 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 16K
+max_allowed_packet = 1M
+table_open_cache = 4
+sort_buffer_size = 64K
+read_buffer_size = 256K
+read_rnd_buffer_size = 256K
+net_buffer_length = 2K
+thread_stack = 240K
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=30
+max_user_connections=20
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/ubuntu/17.10/nginx/nginx.conf b/install/ubuntu/17.10/nginx/nginx.conf
new file mode 100644
index 00000000..e7256de7
--- /dev/null
+++ b/install/ubuntu/17.10/nginx/nginx.conf
@@ -0,0 +1,136 @@
+# Server globals
+user                    www-data;
+worker_processes        auto;
+worker_rlimit_nofile    65535;
+error_log               /var/log/nginx/error.log crit;
+pid                     /var/run/nginx.pid;
+
+
+# Worker config
+events {
+        worker_connections  1024;
+        use                 epoll;
+        multi_accept        on;
+}
+
+
+http {
+    # Main settings
+    sendfile                        on;
+    tcp_nopush                      on;
+    tcp_nodelay                     on;
+    client_header_timeout           1m;
+    client_body_timeout             1m;
+    client_header_buffer_size       2k;
+    client_body_buffer_size         256k;
+    client_max_body_size            256m;
+    large_client_header_buffers     4   8k;
+    send_timeout                    30;
+    keepalive_timeout               60 60;
+    reset_timedout_connection       on;
+    server_tokens                   off;
+    server_name_in_redirect         off;
+    server_names_hash_max_size      512;
+    server_names_hash_bucket_size   512;
+
+
+    # Log format
+    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
+                        '"$status" $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  bytes   '$body_bytes_sent';
+    #access_log          /var/log/nginx/access.log main;
+    access_log off;
+
+
+    # Mime settings
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+
+    # Compression
+    gzip                on;
+    gzip_comp_level     9;
+    gzip_min_length     512;
+    gzip_buffers        8 64k;
+    gzip_types          text/plain text/css text/javascript text/js text/xml application/json application/javascript application/x-javascript application/xml application/xml+rss application/x-font-ttf image/svg+xml font/opentype;
+    gzip_proxied        any;
+    gzip_disable        "MSIE [1-6]\.";
+
+    # Proxy settings
+    proxy_redirect      off;
+    proxy_set_header    Host            $host;
+    proxy_set_header    X-Real-IP       $remote_addr;
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_header   Set-Cookie;
+    proxy_connect_timeout   90;
+    proxy_send_timeout  90;
+    proxy_read_timeout  90;
+    proxy_buffers       32 4k;
+
+
+    # Cloudflare https://www.cloudflare.com/ips
+    set_real_ip_from   103.21.244.0/22;
+    set_real_ip_from   103.22.200.0/22;
+    set_real_ip_from   103.31.4.0/22;
+    set_real_ip_from   104.16.0.0/12;
+    set_real_ip_from   108.162.192.0/18;
+    set_real_ip_from   131.0.72.0/22;
+    set_real_ip_from   141.101.64.0/18;
+    set_real_ip_from   162.158.0.0/15;
+    set_real_ip_from   172.64.0.0/13;
+    set_real_ip_from   173.245.48.0/20;
+    set_real_ip_from   188.114.96.0/20;
+    set_real_ip_from   190.93.240.0/20;
+    set_real_ip_from   197.234.240.0/22;
+    set_real_ip_from   198.41.128.0/17;
+    #set_real_ip_from   2400:cb00::/32;
+    #set_real_ip_from   2606:4700::/32;
+    #set_real_ip_from   2803:f800::/32;
+    #set_real_ip_from   2405:b500::/32;
+    #set_real_ip_from   2405:8100::/32;
+    #set_real_ip_from   2c0f:f248::/32;
+    #set_real_ip_from   2a06:98c0::/29;
+    real_ip_header     CF-Connecting-IP;
+
+
+    # SSL PCI Compliance
+    ssl_session_cache   shared:SSL:10m;
+    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
+
+
+    # Error pages
+    error_page          403          /error/403.html;
+    error_page          404          /error/404.html;
+    error_page          502 503 504  /error/50x.html;
+
+
+    # Cache settings
+    proxy_cache_path /var/cache/nginx levels=2 keys_zone=cache:10m inactive=60m max_size=1024m;
+    proxy_cache_key "$host$request_uri $cookie_user";
+    proxy_temp_path  /var/cache/nginx/temp;
+    proxy_ignore_headers Expires Cache-Control;
+    proxy_cache_use_stale error timeout invalid_header http_502;
+    proxy_cache_valid any 1d;
+
+
+    # Cache bypass
+    map $http_cookie $no_cache {
+        default 0;
+        ~SESS 1;
+        ~wordpress_logged_in 1;
+    }
+
+
+    # File cache settings
+    open_file_cache          max=10000 inactive=30s;
+    open_file_cache_valid    60s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors   off;
+
+
+    # Wildcard include
+    include             /etc/nginx/conf.d/*.conf;
+}
diff --git a/install/ubuntu/17.10/nginx/phpmyadmin.inc b/install/ubuntu/17.10/nginx/phpmyadmin.inc
new file mode 100644
index 00000000..1feb8546
--- /dev/null
+++ b/install/ubuntu/17.10/nginx/phpmyadmin.inc
@@ -0,0 +1,18 @@
+location /phpmyadmin {
+    alias /usr/share/phpmyadmin/;
+
+    location ~ /(libraries|setup) {
+        return 404;
+    }
+
+    location ~ ^/phpmyadmin/(.*\.php)$ {
+        alias /usr/share/phpmyadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+    location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
+        root /usr/share/;
+    }
+}
diff --git a/install/ubuntu/17.10/nginx/phppgadmin.inc b/install/ubuntu/17.10/nginx/phppgadmin.inc
new file mode 100644
index 00000000..cd1e5806
--- /dev/null
+++ b/install/ubuntu/17.10/nginx/phppgadmin.inc
@@ -0,0 +1,11 @@
+location /phppgadmin {
+    alias /usr/share/phppgadmin/;
+
+    location ~ ^/phppgadmin/(.*\.php)$ {
+        alias /usr/share/phppgadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/ubuntu/17.10/nginx/status.conf b/install/ubuntu/17.10/nginx/status.conf
new file mode 100644
index 00000000..c0bcd069
--- /dev/null
+++ b/install/ubuntu/17.10/nginx/status.conf
@@ -0,0 +1,9 @@
+server {
+    listen       127.0.0.1:8084 default;
+    server_name  _;
+    server_name_in_redirect  off;
+    location / {
+        stub_status on;
+        access_log   off;
+   }
+}
diff --git a/install/ubuntu/17.10/nginx/webmail.inc b/install/ubuntu/17.10/nginx/webmail.inc
new file mode 100644
index 00000000..ad66895b
--- /dev/null
+++ b/install/ubuntu/17.10/nginx/webmail.inc
@@ -0,0 +1,15 @@
+location /webmail {
+    alias /var/lib/roundcube/;
+
+    location ~ /(config|temp|logs) {
+        return 404;
+    }
+
+    location ~ ^/webmail/(.*\.php)$ {
+        alias /var/lib/roundcube/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/ubuntu/17.10/packages/default.pkg b/install/ubuntu/17.10/packages/default.pkg
new file mode 100644
index 00000000..c2a93574
--- /dev/null
+++ b/install/ubuntu/17.10/packages/default.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='100'
+WEB_ALIASES='100'
+DNS_DOMAINS='100'
+DNS_RECORDS='100'
+MAIL_DOMAINS='100'
+MAIL_ACCOUNTS='100'
+DATABASES='100'
+CRON_JOBS='100'
+DISK_QUOTA='unlimited'
+BANDWIDTH='100000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='3'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/17.10/packages/gainsboro.pkg b/install/ubuntu/17.10/packages/gainsboro.pkg
new file mode 100644
index 00000000..76d7dae2
--- /dev/null
+++ b/install/ubuntu/17.10/packages/gainsboro.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='10'
+WEB_ALIASES='10'
+DNS_DOMAINS='10'
+DNS_RECORDS='10'
+MAIL_DOMAINS='10'
+MAIL_ACCOUNTS='10'
+DATABASES='10'
+CRON_JOBS='10'
+DISK_QUOTA='10000'
+BANDWIDTH='10000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='1'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/17.10/packages/palegreen.pkg b/install/ubuntu/17.10/packages/palegreen.pkg
new file mode 100644
index 00000000..3db5fe57
--- /dev/null
+++ b/install/ubuntu/17.10/packages/palegreen.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='hosting'
+PROXY_TEMPLATE='hosting'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='50'
+WEB_ALIASES='50'
+DNS_DOMAINS='50'
+DNS_RECORDS='50'
+MAIL_DOMAINS='50'
+MAIL_ACCOUNTS='50'
+DATABASES='50'
+CRON_JOBS='50'
+DISK_QUOTA='50000'
+BANDWIDTH='50000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='5'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/17.10/packages/slategrey.pkg b/install/ubuntu/17.10/packages/slategrey.pkg
new file mode 100644
index 00000000..d89e796f
--- /dev/null
+++ b/install/ubuntu/17.10/packages/slategrey.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='100'
+WEB_ALIASES='100'
+DNS_DOMAINS='100'
+DNS_RECORDS='100'
+MAIL_DOMAINS='100'
+MAIL_ACCOUNTS='100'
+DATABASES='100'
+CRON_JOBS='100'
+DISK_QUOTA='10000'
+BANDWIDTH='100000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='3'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/17.10/pga/config.inc.php b/install/ubuntu/17.10/pga/config.inc.php
new file mode 100644
index 00000000..1eec9776
--- /dev/null
+++ b/install/ubuntu/17.10/pga/config.inc.php
@@ -0,0 +1,159 @@
+<?php
+
+    /**
+     * Central phpPgAdmin configuration.  As a user you may modify the
+     * settings here for your particular configuration.
+     *
+     * $Id: config.inc.php-dist,v 1.55 2008/02/18 21:10:31 xzilla Exp $
+     */
+
+    // An example server.  Create as many of these as you wish,
+    // indexed from zero upwards.
+
+    // Display name for the server on the login screen
+    $conf['servers'][0]['desc'] = 'PostgreSQL';
+
+    // Hostname or IP address for server.  Use '' for UNIX domain socket.
+    // use 'localhost' for TCP/IP connection on this computer
+    $conf['servers'][0]['host'] = 'localhost';
+
+    // Database port on server (5432 is the PostgreSQL default)
+    $conf['servers'][0]['port'] = 5432;
+
+    // Database SSL mode
+    // Possible options: disable, allow, prefer, require
+    // To require SSL on older servers use option: legacy
+    // To ignore the SSL mode, use option: unspecified
+    $conf['servers'][0]['sslmode'] = 'allow';
+
+    // Change the default database only if you cannot connect to template1.
+    // For a PostgreSQL 8.1+ server, you can set this to 'postgres'.
+    $conf['servers'][0]['defaultdb'] = 'template1';
+
+    // Specify the path to the database dump utilities for this server.
+    // You can set these to '' if no dumper is available.
+    $conf['servers'][0]['pg_dump_path'] = '/usr/bin/pg_dump';
+    $conf['servers'][0]['pg_dumpall_path'] = '/usr/bin/pg_dumpall';
+
+    // Slony (www.slony.info) support?
+    $conf['servers'][0]['slony_support'] = false;
+    // Specify the path to the Slony SQL scripts (where slony1_base.sql is located, etc.)
+    // No trailing slash.
+    $conf['servers'][0]['slony_sql'] = '/usr/share/pgsql';
+
+    // Example for a second server (PostgreSQL for Windows)
+    //$conf['servers'][1]['desc'] = 'Test Server';
+    //$conf['servers'][1]['host'] = '127.0.0.1';
+    //$conf['servers'][1]['port'] = 5432;
+    //$conf['servers'][1]['sslmode'] = 'allow';
+    //$conf['servers'][1]['defaultdb'] = 'template1';
+    //$conf['servers'][1]['pg_dump_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dump.exe';
+    //$conf['servers'][1]['pg_dumpall_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dumpall.exe';
+    //$conf['servers'][1]['slony_support'] = false;
+    //$conf['servers'][1]['slony_sql'] = 'C:\\Program Files\\PostgreSQL\\8.0\\share';
+
+
+    // Example of groups definition.
+    // Groups allow administrators to logicaly group servers together under group nodes in the left browser tree
+    //
+    // The group '0' description
+    //$conf['srv_groups'][0]['desc'] = 'group one';
+    //
+    // Add here servers indexes belonging to the group '0' seperated by comma
+    //$conf['srv_groups'][0]['servers'] = '0,1,2'; 
+    //
+    // A server can belong to multi groups
+    //$conf['srv_groups'][1]['desc'] = 'group two';
+    //$conf['srv_groups'][1]['servers'] = '3,1';
+
+
+    // Default language. E.g.: 'english', 'polish', etc.  See lang/ directory
+    // for all possibilities. If you specify 'auto' (the default) it will use 
+    // your browser preference.
+    $conf['default_lang'] = 'auto';
+
+    // AutoComplete uses AJAX interaction to list foreign key values 
+    // on insert fields. It currently only works on single column 
+    // foreign keys. You can choose one of the following values:
+    // 'default on' enables AutoComplete and turns it on by default.
+    // 'default off' enables AutoComplete but turns it off by default.
+    // 'disable' disables AutoComplete.
+    $conf['autocomplete'] = 'default on';
+
+    // If extra login security is true, then logins via phpPgAdmin with no
+    // password or certain usernames (pgsql, postgres, root, administrator)
+    // will be denied. Only set this false once you have read the FAQ and
+    // understand how to change PostgreSQL's pg_hba.conf to enable
+    // passworded local connections.
+    $conf['extra_login_security'] = true;
+
+    // Only show owned databases?
+    // Note: This will simply hide other databases in the list - this does
+    // not in any way prevent your users from seeing other database by
+    // other means. (e.g. Run 'SELECT * FROM pg_database' in the SQL area.)
+    $conf['owned_only'] = false;
+
+    // Display comments on objects?  Comments are a good way of documenting
+    // a database, but they do take up space in the interface.
+    $conf['show_comments'] = true;
+
+    // Display "advanced" objects? Setting this to true will show 
+    // aggregates, types, operators, operator classes, conversions, 
+    // languages and casts in phpPgAdmin. These objects are rarely 
+    // administered and can clutter the interface.
+    $conf['show_advanced'] = false;
+
+    // Display "system" objects?
+    $conf['show_system'] = false;
+
+    // Display reports feature?  For this feature to work, you must
+    // install the reports database as explained in the INSTALL file.
+    $conf['show_reports'] = true;
+
+    // Database and table for reports
+    $conf['reports_db'] = 'phppgadmin';
+    $conf['reports_schema'] = 'public';
+    $conf['reports_table'] = 'ppa_reports';
+
+    // Only show owned reports?
+    // Note: This does not prevent people from accessing other reports by
+    // other means.
+    $conf['owned_reports_only'] = false;
+
+    // Minimum length users can set their password to.
+    $conf['min_password_length'] = 1;
+
+    // Width of the left frame in pixels (object browser)
+    $conf['left_width'] = 200;
+
+    // Which look & feel theme to use
+    $conf['theme'] = 'default';
+
+    // Show OIDs when browsing tables?
+    $conf['show_oids'] = false;
+
+    // Max rows to show on a page when browsing record sets
+    $conf['max_rows'] = 30;
+
+    // Max chars of each field to display by default in browse mode
+    $conf['max_chars'] = 50;
+
+    // Send XHTML strict headers?
+    $conf['use_xhtml_strict'] = false;
+
+    // Base URL for PostgreSQL documentation.
+    // '%s', if present, will be replaced with the PostgreSQL version
+    // (e.g. 8.4 )
+    $conf['help_base'] = 'http://www.postgresql.org/docs/%s/interactive/';
+
+    // Configuration for ajax scripts
+    // Time in seconds. If set to 0, refreshing data using ajax will be disabled (locks and activity pages)
+    $conf['ajax_refresh'] = 3;
+
+    /*****************************************
+     * Don't modify anything below this line *
+     *****************************************/
+
+    $conf['version'] = 19;
+
+?>
diff --git a/install/ubuntu/17.10/pga/phppgadmin.conf b/install/ubuntu/17.10/pga/phppgadmin.conf
new file mode 100644
index 00000000..f39247d6
--- /dev/null
+++ b/install/ubuntu/17.10/pga/phppgadmin.conf
@@ -0,0 +1,31 @@
+Alias /phppgadmin /usr/share/phppgadmin
+
+<Directory /usr/share/phppgadmin>
+
+DirectoryIndex index.php
+AllowOverride None
+
+order deny,allow
+deny from all
+allow from 127.0.0.0/255.0.0.0 ::1/128
+allow from all
+
+<IfModule mod_php5.c>
+  php_flag magic_quotes_gpc Off
+  php_flag track_vars On
+  php_value include_path .
+</IfModule>
+<IfModule !mod_php5.c>
+  <IfModule mod_actions.c>
+    <IfModule mod_cgi.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+    <IfModule mod_cgid.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+  </IfModule>
+</IfModule>
+
+</Directory>
diff --git a/install/ubuntu/17.10/php-fpm/www.conf b/install/ubuntu/17.10/php-fpm/www.conf
new file mode 100644
index 00000000..3c87f33c
--- /dev/null
+++ b/install/ubuntu/17.10/php-fpm/www.conf
@@ -0,0 +1,11 @@
+[www]
+listen = 127.0.0.1:9000
+listen.allowed_clients = 127.0.0.1
+
+user = www-data
+group = www-data
+
+pm = ondemand
+pm.max_children = 2
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
diff --git a/install/ubuntu/17.10/pma/apache.conf b/install/ubuntu/17.10/pma/apache.conf
new file mode 100644
index 00000000..4da6ce84
--- /dev/null
+++ b/install/ubuntu/17.10/pma/apache.conf
@@ -0,0 +1,42 @@
+# phpMyAdmin default Apache configuration
+
+Alias /phpmyadmin /usr/share/phpmyadmin
+
+<Directory /usr/share/phpmyadmin>
+	Options FollowSymLinks
+	DirectoryIndex index.php
+
+	<IfModule mod_php5.c>
+		AddType application/x-httpd-php .php
+
+		php_flag magic_quotes_gpc Off
+		php_flag track_vars On
+		php_flag register_globals Off
+		php_admin_flag allow_url_fopen Off
+		php_value include_path .
+		php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp
+		php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/:/usr/share/php/php-gettext:/usr/share/javascript/
+	</IfModule>
+
+</Directory>
+
+# Authorize for setup
+<Directory /usr/share/phpmyadmin/setup>
+    <IfModule mod_authn_file.c>
+    AuthType Basic
+    AuthName "phpMyAdmin Setup"
+    AuthUserFile /etc/phpmyadmin/htpasswd.setup
+    </IfModule>
+    Require valid-user
+</Directory>
+
+# Disallow web access to directories that don't need it
+<Directory /usr/share/phpmyadmin/libraries>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+<Directory /usr/share/phpmyadmin/setup/lib>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+
diff --git a/install/ubuntu/17.10/pma/config.inc.php b/install/ubuntu/17.10/pma/config.inc.php
new file mode 100644
index 00000000..a643a065
--- /dev/null
+++ b/install/ubuntu/17.10/pma/config.inc.php
@@ -0,0 +1,146 @@
+<?php
+/**
+ * Debian local configuration file
+ *
+ * This file overrides the settings made by phpMyAdmin interactive setup
+ * utility.
+ *
+ * For example configuration see
+ *   /usr/share/doc/phpmyadmin/examples/config.sample.inc.php
+ * or
+ *   /usr/share/doc/phpmyadmin/examples/config.manyhosts.inc.php
+ *
+ * NOTE: do not add security sensitive data to this file (like passwords)
+ * unless you really know what you're doing. If you do, any user that can
+ * run PHP or CGI on your webserver will be able to read them. If you still
+ * want to do this, make sure to properly secure the access to this file
+ * (also on the filesystem level).
+ */
+
+function check_file_access($path)
+{
+    if (is_readable($path)) {
+        return true;
+    } else {
+        error_log(
+            'phpmyadmin: Failed to load ' . $path
+            . ' Check group www-data has read access and open_basedir restrictions.'
+        );
+        return false;
+    }
+}
+
+// Load secret generated on postinst
+if (check_file_access('/var/lib/phpmyadmin/blowfish_secret.inc.php')) {
+    require('/var/lib/phpmyadmin/blowfish_secret.inc.php');
+}
+
+// Load autoconf local config
+if (check_file_access('/var/lib/phpmyadmin/config.inc.php')) {
+    require('/var/lib/phpmyadmin/config.inc.php');
+}
+
+/**
+ * Server(s) configuration
+ */
+$i = 0;
+// The $cfg['Servers'] array starts with $cfg['Servers'][1].  Do not use $cfg['Servers'][0].
+// You can disable a server config entry by setting host to ''.
+$i++;
+
+/**
+ * Read configuration from dbconfig-common
+ * You can regenerate it using: dpkg-reconfigure -plow phpmyadmin
+ */
+if (check_file_access('/etc/phpmyadmin/config-db.php')) {
+    require('/etc/phpmyadmin/config-db.php');
+}
+
+/* Configure according to dbconfig-common if enabled */
+if (!empty($dbname)) {
+    /* Authentication type */
+    $cfg['Servers'][$i]['auth_type'] = 'cookie';
+    /* Server parameters */
+    if (empty($dbserver)) $dbserver = 'localhost';
+    $cfg['Servers'][$i]['host'] = $dbserver;
+
+    if (!empty($dbport) || $dbserver != 'localhost') {
+        $cfg['Servers'][$i]['connect_type'] = 'tcp';
+        $cfg['Servers'][$i]['port'] = $dbport;
+    }
+    //$cfg['Servers'][$i]['compress'] = false;
+    /* Select mysqli if your server has it */
+    $cfg['Servers'][$i]['extension'] = 'mysqli';
+    /* Optional: User for advanced features */
+    $cfg['Servers'][$i]['controluser'] = $dbuser;
+    $cfg['Servers'][$i]['controlpass'] = $dbpass;
+    /* Optional: Advanced phpMyAdmin features */
+    $cfg['Servers'][$i]['pmadb'] = $dbname;
+    $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+    $cfg['Servers'][$i]['relation'] = 'pma_relation';
+    $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+    $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+    $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+    $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+    $cfg['Servers'][$i]['history'] = 'pma_history';
+    $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+    $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+    $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+    $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+    $cfg['Servers'][$i]['recent'] = 'pma_recent';
+
+    /* Uncomment the following to enable logging in to passwordless accounts,
+     * after taking note of the associated security risks. */
+    // $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+    /* Advance to next server for rest of config */
+    $i++;
+}
+
+/* Authentication type */
+//$cfg['Servers'][$i]['auth_type'] = 'cookie';
+/* Server parameters */
+//$cfg['Servers'][$i]['host'] = 'localhost';
+//$cfg['Servers'][$i]['connect_type'] = 'tcp';
+//$cfg['Servers'][$i]['compress'] = false;
+/* Select mysqli if your server has it */
+//$cfg['Servers'][$i]['extension'] = 'mysql';
+/* Optional: User for advanced features */
+// $cfg['Servers'][$i]['controluser'] = 'pma';
+// $cfg['Servers'][$i]['controlpass'] = 'pmapass';
+
+/* Storage database and tables */
+// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
+// $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+// $cfg['Servers'][$i]['relation'] = 'pma_relation';
+// $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+// $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+// $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+// $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+// $cfg['Servers'][$i]['history'] = 'pma_history';
+// $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+// $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+// $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+// $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+// $cfg['Servers'][$i]['recent'] = 'pma_recent';
+/* Uncomment the following to enable logging in to passwordless accounts,
+ * after taking note of the associated security risks. */
+// $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+/*
+ * End of servers configuration
+ */
+
+/*
+ * Directories for saving/loading files from server
+ */
+$cfg['UploadDir'] = '';
+$cfg['SaveDir'] = '';
+
+/* Support additional configurations */
+foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
+{
+    include($filename);
+}
+
+
diff --git a/install/ubuntu/17.10/postgresql/pg_hba.conf b/install/ubuntu/17.10/postgresql/pg_hba.conf
new file mode 100644
index 00000000..1ba43941
--- /dev/null
+++ b/install/ubuntu/17.10/postgresql/pg_hba.conf
@@ -0,0 +1,11 @@
+# "local" is for Unix domain socket connections only
+local   all         all                               ident
+
+# IPv4 local connections:
+host    all         all         127.0.0.1/32          md5
+
+# IPv6 local connections:
+host    all         all         ::1/128               md5
+
+# Others
+host    all         all         0.0.0.0/0             md5
diff --git a/install/ubuntu/17.10/proftpd/proftpd.conf b/install/ubuntu/17.10/proftpd/proftpd.conf
new file mode 100644
index 00000000..69ec6b2e
--- /dev/null
+++ b/install/ubuntu/17.10/proftpd/proftpd.conf
@@ -0,0 +1,32 @@
+ServerName                      "FTP"
+ServerIdent                     on "FTP Server ready."
+ServerAdmin                     root@localhost
+DefaultServer                   on
+DefaultRoot                  ~ !adm
+
+<IfModule mod_vroot.c>
+    VRootEngine                 on
+    VRootAlias                  /etc/security/pam_env.conf etc/security/pam_env.conf
+</IfModule>
+
+AuthPAMConfig                   proftpd
+AuthOrder                       mod_auth_pam.c* mod_auth_unix.c
+UseReverseDNS                   off
+User                            proftpd
+Group                           nogroup
+MaxInstances                    20
+UseSendfile                     off
+LogFormat                       default "%h %l %u %t \"%r\" %s %b"
+LogFormat                       auth    "%v [%P] %h %t \"%r\" %s"
+ListOptions                     -a
+RequireValidShell               off
+PassivePorts                    12000 12100
+
+<Global>
+  Umask                         002
+  IdentLookups                  off
+  AllowOverwrite                yes
+  <Limit ALL SITE_CHMOD>
+    AllowAll
+  </Limit>
+</Global>
diff --git a/install/ubuntu/17.10/roundcube/apache.conf b/install/ubuntu/17.10/roundcube/apache.conf
new file mode 100644
index 00000000..a0c87bcc
--- /dev/null
+++ b/install/ubuntu/17.10/roundcube/apache.conf
@@ -0,0 +1,40 @@
+Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/
+Alias /roundcube /var/lib/roundcube
+Alias /webmail /var/lib/roundcube
+
+# Access to tinymce files
+<Directory "/usr/share/tinymce/www/">
+      Options Indexes MultiViews FollowSymLinks
+      AllowOverride None
+      Order allow,deny
+      allow from all
+</Directory>
+
+<Directory /var/lib/roundcube/>
+  Options +FollowSymLinks
+  # This is needed to parse /var/lib/roundcube/.htaccess. See its
+  # content before setting AllowOverride to None.
+  AllowOverride All
+  order allow,deny
+  allow from all
+</Directory>
+
+# Protecting basic directories:
+<Directory /var/lib/roundcube/config>
+        Options -FollowSymLinks
+        AllowOverride None
+</Directory>
+
+<Directory /var/lib/roundcube/temp>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
+
+<Directory /var/lib/roundcube/logs>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
diff --git a/install/ubuntu/17.10/roundcube/config.inc.php b/install/ubuntu/17.10/roundcube/config.inc.php
new file mode 100644
index 00000000..0c82b1bc
--- /dev/null
+++ b/install/ubuntu/17.10/roundcube/config.inc.php
@@ -0,0 +1,33 @@
+<?php
+
+// Password Plugin options
+// -----------------------
+// A driver to use for password change. Default: "sql".
+// See README file for list of supported driver names.
+$rcmail_config['password_driver'] = 'vesta';
+
+// Require the new password to be a certain length.
+// set to blank to allow passwords of any length
+$rcmail_config['password_minimum_length'] = 6;
+
+// Require the new password to contain a letter and punctuation character
+// Change to false to remove this check.
+$rcmail_config['password_require_nonalpha'] = false;
+
+// Enables logging of password changes into logs/password
+$rcmail_config['password_log'] = false;
+
+// Comma-separated list of login exceptions for which password change
+// will be not available (no Password tab in Settings)
+$rcmail_config['password_login_exceptions'] = null;
+
+
+// By default domains in variables are using unicode.
+// Enable this option to use punycoded names
+$rcmail_config['password_idn_ascii'] = false;
+
+// Vesta Driver options
+// -----------------------
+// Control Panel host
+$rcmail_config['password_vesta_host'] = 'localhost';
+$rcmail_config['password_vesta_port'] = '8083';
diff --git a/install/ubuntu/17.10/roundcube/db.inc.php b/install/ubuntu/17.10/roundcube/db.inc.php
new file mode 100644
index 00000000..5268a309
--- /dev/null
+++ b/install/ubuntu/17.10/roundcube/db.inc.php
@@ -0,0 +1,66 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Configuration file for database access                                |
+ |                                                                       |
+ | This file is part of the RoundCube Webmail client                     |
+ | Copyright (C) 2005-2008, RoundCube Dev. - Switzerland                 |
+ | Licensed under the GNU GPL                                            |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// PEAR database DSN for read/write operations
+// format is db_provider://user:password@host/database 
+
+$rcmail_config['db_dsnw'] = 'mysql://roundcube:%password%@localhost/roundcube';
+// postgres example: 'pgsql://roundcube:pass@localhost/roundcubemail';
+
+// PEAR database DSN for read only operations (if empty write database will be used)
+// useful for database replication
+$rcmail_config['db_dsnr'] = '';
+
+// database backend to use (only db or mdb2 are supported)
+//$rcmail_config['db_backend'] = 'mdb2';
+
+// maximum length of a query in bytes
+$rcmail_config['db_max_length'] = 512000;  // 500K
+
+// use persistent db-connections
+// beware this will not "always" work as expected
+// see: http://www.php.net/manual/en/features.persistent-connections.php
+$rcmail_config['db_persistent'] = FALSE;
+
+
+// you can define specific table names used to store webmail data
+$rcmail_config['db_table_users'] = 'users';
+
+$rcmail_config['db_table_identities'] = 'identities';
+
+$rcmail_config['db_table_contacts'] = 'contacts';
+
+$rcmail_config['db_table_session'] = 'session';
+
+$rcmail_config['db_table_cache'] = 'cache';
+
+$rcmail_config['db_table_messages'] = 'messages';
+
+
+// you can define specific sequence names used in PostgreSQL
+$rcmail_config['db_sequence_users'] = 'user_ids';
+
+$rcmail_config['db_sequence_identities'] = 'identity_ids';
+
+$rcmail_config['db_sequence_contacts'] = 'contact_ids';
+
+$rcmail_config['db_sequence_cache'] = 'cache_ids';
+
+$rcmail_config['db_sequence_messages'] = 'message_ids';
+
+
+// end db config file
+?>
diff --git a/install/ubuntu/17.10/roundcube/main.inc.php b/install/ubuntu/17.10/roundcube/main.inc.php
new file mode 100644
index 00000000..44b19793
--- /dev/null
+++ b/install/ubuntu/17.10/roundcube/main.inc.php
@@ -0,0 +1,850 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Main configuration file                                               |
+ |                                                                       |
+ | This file is part of the Roundcube Webmail client                     |
+ | Copyright (C) 2005-2011, The Roundcube Dev Team                       |
+ |                                                                       |
+ | Licensed under the GNU General Public License version 3 or            |
+ | any later version with exceptions for skins & plugins.                |
+ | See the README file for a full license statement.                     |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// ----------------------------------
+// LOGGING/DEBUGGING
+// ----------------------------------
+
+// system error reporting: 1 = log; 2 = report (not implemented yet), 4 = show, 8 = trace
+$rcmail_config['debug_level'] = 1;
+
+// log driver:  'syslog' or 'file'.
+$rcmail_config['log_driver'] = 'file';
+
+// date format for log entries
+// (read http://php.net/manual/en/function.date.php for all format characters)  
+$rcmail_config['log_date_format'] = 'd-M-Y H:i:s O';
+
+// Syslog ident string to use, if using the 'syslog' log driver.
+$rcmail_config['syslog_id'] = 'roundcube';
+
+// Syslog facility to use, if using the 'syslog' log driver.
+// For possible values see installer or http://php.net/manual/en/function.openlog.php
+$rcmail_config['syslog_facility'] = LOG_USER;
+
+// Log sent messages to <log_dir>/sendmail or to syslog
+$rcmail_config['smtp_log'] = true;
+
+// Log successful logins to <log_dir>/userlogins or to syslog
+$rcmail_config['log_logins'] = false;
+
+// Log session authentication errors to <log_dir>/session or to syslog
+$rcmail_config['log_session'] = false;
+
+// Log SQL queries to <log_dir>/sql or to syslog
+$rcmail_config['sql_debug'] = false;
+
+// Log IMAP conversation to <log_dir>/imap or to syslog
+$rcmail_config['imap_debug'] = false;
+
+// Log LDAP conversation to <log_dir>/ldap or to syslog
+$rcmail_config['ldap_debug'] = false;
+
+// Log SMTP conversation to <log_dir>/smtp or to syslog
+$rcmail_config['smtp_debug'] = false;
+
+// ----------------------------------
+// IMAP
+// ----------------------------------
+
+// the mail host chosen to perform the log-in
+// leave blank to show a textbox at login, give a list of hosts
+// to display a pulldown menu or set one host as string.
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// Supported replacement variables:
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %s - domain name after the '@' from e-mail address provided at login screen
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['default_host'] = 'localhost';
+
+// TCP port used for IMAP connections
+$rcmail_config['default_port'] = 143;
+
+// IMAP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['imap_auth_type'] = null;
+
+// If you know your imap's folder delimiter, you can specify it here.
+// Otherwise it will be determined automatically
+$rcmail_config['imap_delimiter'] = null;
+
+// If IMAP server doesn't support NAMESPACE extension, but you're
+// using shared folders or personal root folder is non-empty, you'll need to
+// set these options. All can be strings or arrays of strings.
+// Folders need to be ended with directory separator, e.g. "INBOX."
+// (special directory "~" is an exception to this rule)
+// These can be used also to overwrite server's namespaces
+$rcmail_config['imap_ns_personal'] = null;
+$rcmail_config['imap_ns_other']    = null;
+$rcmail_config['imap_ns_shared']   = null;
+
+// By default IMAP capabilities are readed after connection to IMAP server
+// In some cases, e.g. when using IMAP proxy, there's a need to refresh the list
+// after login. Set to True if you've got this case.
+$rcmail_config['imap_force_caps'] = false;
+
+// By default list of subscribed folders is determined using LIST-EXTENDED
+// extension if available. Some servers (dovecot 1.x) returns wrong results
+// for shared namespaces in this case. http://trac.roundcube.net/ticket/1486225
+// Enable this option to force LSUB command usage instead.
+$rcmail_config['imap_force_lsub'] = false;
+
+// Some server configurations (e.g. Courier) doesn't list folders in all namespaces
+// Enable this option to force listing of folders in all namespaces
+$rcmail_config['imap_force_ns'] = false;
+
+// IMAP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['imap_timeout'] = 0;
+
+// Optional IMAP authentication identifier to be used as authorization proxy
+$rcmail_config['imap_auth_cid'] = null;
+
+// Optional IMAP authentication password to be used for imap_auth_cid
+$rcmail_config['imap_auth_pw'] = null;
+
+// Type of IMAP indexes cache. Supported values: 'db', 'apc' and 'memcache'.
+$rcmail_config['imap_cache'] = null;
+
+// Enables messages cache. Only 'db' cache is supported.
+$rcmail_config['messages_cache'] = false;
+
+
+// ----------------------------------
+// SMTP
+// ----------------------------------
+
+// SMTP server host (for sending mails).
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// If left blank, the PHP mail() function is used
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['smtp_server'] = '';
+
+// SMTP port (default is 25; use 587 for STARTTLS or 465 for the
+// deprecated SSL over SMTP (aka SMTPS))
+$rcmail_config['smtp_port'] = 25;
+
+// SMTP username (if required) if you use %u as the username Roundcube
+// will use the current username for login
+$rcmail_config['smtp_user'] = '';
+
+// SMTP password (if required) if you use %p as the password Roundcube
+// will use the current user's password for login
+$rcmail_config['smtp_pass'] = '';
+
+// SMTP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['smtp_auth_type'] = '';
+
+// Optional SMTP authentication identifier to be used as authorization proxy
+$rcmail_config['smtp_auth_cid'] = null;
+
+// Optional SMTP authentication password to be used for smtp_auth_cid
+$rcmail_config['smtp_auth_pw'] = null;
+
+// SMTP HELO host 
+// Hostname to give to the remote server for SMTP 'HELO' or 'EHLO' messages 
+// Leave this blank and you will get the server variable 'server_name' or 
+// localhost if that isn't defined. 
+$rcmail_config['smtp_helo_host'] = '';
+
+// SMTP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['smtp_timeout'] = 0;
+
+// ----------------------------------
+// SYSTEM
+// ----------------------------------
+include_once("/etc/roundcube/debian-db-roundcube.php");
+
+
+// THIS OPTION WILL ALLOW THE INSTALLER TO RUN AND CAN EXPOSE SENSITIVE CONFIG DATA.
+// ONLY ENABLE IT IF YOU'RE REALLY SURE WHAT YOU'RE DOING!
+$rcmail_config['enable_installer'] = false;
+
+// provide an URL where a user can get support for this Roundcube installation
+// PLEASE DO NOT LINK TO THE ROUNDCUBE.NET WEBSITE HERE!
+$rcmail_config['support_url'] = '';
+
+// replace Roundcube logo with this image
+// specify an URL relative to the document root of this Roundcube installation
+$rcmail_config['skin_logo'] = null;
+
+// automatically create a new Roundcube user when log-in the first time.
+// a new user will be created once the IMAP login succeeds.
+// set to false if only registered users can use this service
+$rcmail_config['auto_create_user'] = true;
+
+// use this folder to store log files (must be writeable for apache user)
+// This is used by the 'file' log driver.
+$rcmail_config['log_dir'] = '/var/log/roundcubemail/';
+
+// use this folder to store temp files (must be writeable for apache user)
+$rcmail_config['temp_dir'] = '/tmp';
+
+// lifetime of message cache
+// possible units: s, m, h, d, w
+$rcmail_config['message_cache_lifetime'] = '10d';
+
+// enforce connections over https
+// with this option enabled, all non-secure connections will be redirected.
+// set the port for the ssl connection as value of this option if it differs from the default 443
+$rcmail_config['force_https'] = false;
+
+// tell PHP that it should work as under secure connection
+// even if it doesn't recognize it as secure ($_SERVER['HTTPS'] is not set)
+// e.g. when you're running Roundcube behind a https proxy
+// this option is mutually exclusive to 'force_https' and only either one of them should be set to true.
+$rcmail_config['use_https'] = false;
+
+// Allow browser-autocompletion on login form.
+// 0 - disabled, 1 - username and host only, 2 - username, host, password
+$rcmail_config['login_autocomplete'] = 0;
+
+// Forces conversion of logins to lower case.
+// 0 - disabled, 1 - only domain part, 2 - domain and local part.
+// If users authentication is not case-sensitive this must be enabled.
+// After enabling it all user records need to be updated, e.g. with query:
+// UPDATE users SET username = LOWER(username);
+$rcmail_config['login_lc'] = 0;
+
+// Includes should be interpreted as PHP files
+$rcmail_config['skin_include_php'] = false;
+
+// display software version on login screen
+$rcmail_config['display_version'] = false;
+
+// Session lifetime in minutes
+// must be greater than 'keep_alive'/60
+$rcmail_config['session_lifetime'] = 10;
+
+// session domain: .example.org
+$rcmail_config['session_domain'] = '';
+
+// session name. Default: 'roundcube_sessid'
+$rcmail_config['session_name'] = null;
+
+// Backend to use for session storage. Can either be 'db' (default) or 'memcache'
+// If set to memcache, a list of servers need to be specified in 'memcache_hosts'
+// Make sure the Memcache extension (http://pecl.php.net/package/memcache) version >= 2.0.0 is installed
+$rcmail_config['session_storage'] = 'db';
+
+// Use these hosts for accessing memcached
+// Define any number of hosts in the form of hostname:port or unix:///path/to/sock.file
+$rcmail_config['memcache_hosts'] = null; // e.g. array( 'localhost:11211', '192.168.1.12:11211', 'unix:///var/tmp/memcached.sock' );
+
+// check client IP in session athorization
+$rcmail_config['ip_check'] = false;
+
+// check referer of incoming requests
+$rcmail_config['referer_check'] = false;
+
+// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
+// Possible values: sameorigin|deny. Set to false in order to disable sending them
+$rcmail_config['x_frame_options'] = 'sameorigin';
+
+// this key is used to encrypt the users imap password which is stored
+// in the session record (and the client cookie if remember password is enabled).
+// please provide a string of exactly 24 chars.
+$rcmail_config['des_key'] = 'vtIOjLZo9kffJoqzpSbm5r1r';
+
+// Automatically add this domain to user names for login
+// Only for IMAP servers that require full e-mail addresses for login
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['username_domain'] = '';
+
+// This domain will be used to form e-mail addresses of new users
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['mail_domain'] = '';
+
+// Password charset.
+// Use it if your authentication backend doesn't support UTF-8.
+// Defaults to ISO-8859-1 for backward compatibility
+$rcmail_config['password_charset'] = 'ISO-8859-1';
+
+// How many seconds must pass between emails sent by a user
+$rcmail_config['sendmail_delay'] = 0;
+
+// Maximum number of recipients per message. Default: 0 (no limit)
+$rcmail_config['max_recipients'] = 0; 
+
+// Maximum allowednumber of members of an address group. Default: 0 (no limit)
+// If 'max_recipients' is set this value should be less or equal
+$rcmail_config['max_group_members'] = 0; 
+
+// add this user-agent to message headers when sending
+$rcmail_config['useragent'] = 'Roundcube Webmail/'.RCMAIL_VERSION;
+
+// use this name to compose page titles
+$rcmail_config['product_name'] = 'Roundcube Webmail';
+
+// try to load host-specific configuration
+// see http://trac.roundcube.net/wiki/Howto_Config for more details
+$rcmail_config['include_host_config'] = false;
+
+// path to a text file which will be added to each sent message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer'] = '';
+
+// path to a text file which will be added to each sent HTML message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer_html'] = '';
+
+// add a received header to outgoing mails containing the creators IP and hostname
+$rcmail_config['http_received_header'] = false;
+
+// Whether or not to encrypt the IP address and the host name
+// these could, in some circles, be considered as sensitive information;
+// however, for the administrator, these could be invaluable help
+// when tracking down issues.
+$rcmail_config['http_received_header_encrypt'] = false;
+
+// This string is used as a delimiter for message headers when sending
+// a message via mail() function. Leave empty for auto-detection
+$rcmail_config['mail_header_delimiter'] = NULL;
+
+// number of chars allowed for line when wrapping text.
+// text wrapping is done when composing/sending messages
+$rcmail_config['line_length'] = 72;
+
+// send plaintext messages as format=flowed
+$rcmail_config['send_format_flowed'] = true;
+
+// don't allow these settings to be overriden by the user
+$rcmail_config['dont_override'] = array();
+
+// Set identities access level:
+// 0 - many identities with possibility to edit all params
+// 1 - many identities with possibility to edit all params but not email address
+// 2 - one identity with possibility to edit all params
+// 3 - one identity with possibility to edit all params but not email address
+$rcmail_config['identities_level'] = 0;
+
+// Mimetypes supported by the browser.
+// attachments of these types will open in a preview window
+// either a comma-separated list or an array: 'text/plain,text/html,text/xml,image/jpeg,image/gif,image/png,application/pdf'
+$rcmail_config['client_mimetypes'] = null;  # null == default
+
+// mime magic database
+$rcmail_config['mime_magic'] = null;
+
+// path to imagemagick identify binary
+$rcmail_config['im_identify_path'] = null;
+
+// path to imagemagick convert binary
+$rcmail_config['im_convert_path'] = null;
+
+// maximum size of uploaded contact photos in pixel
+$rcmail_config['contact_photo_size'] = 160;
+
+// Enable DNS checking for e-mail address validation
+$rcmail_config['email_dns_check'] = false;
+
+// ----------------------------------
+// PLUGINS
+// ----------------------------------
+
+// List of active plugins (in plugins/ directory)
+$rcmail_config['plugins'] = array('password');
+
+// ----------------------------------
+// USER INTERFACE
+// ----------------------------------
+
+// default messages sort column. Use empty value for default server's sorting, 
+// or 'arrival', 'date', 'subject', 'from', 'to', 'fromto', 'size', 'cc'
+$rcmail_config['message_sort_col'] = '';
+
+// default messages sort order
+$rcmail_config['message_sort_order'] = 'DESC';
+
+// These cols are shown in the message list. Available cols are:
+// subject, from, to, fromto, cc, replyto, date, size, status, flag, attachment, 'priority'
+$rcmail_config['list_cols'] = array('subject', 'status', 'fromto', 'date', 'size', 'flag', 'attachment');
+
+// the default locale setting (leave empty for auto-detection)
+// RFC1766 formatted language name like en_US, de_DE, de_CH, fr_FR, pt_BR
+$rcmail_config['language'] = null;
+
+// use this format for date display (date or strftime format)
+$rcmail_config['date_format'] = 'Y-m-d';
+
+// give this choice of date formats to the user to select from
+$rcmail_config['date_formats'] = array('Y-m-d', 'd-m-Y', 'Y/m/d', 'm/d/Y', 'd/m/Y', 'd.m.Y', 'j.n.Y');
+
+// use this format for time display (date or strftime format)
+$rcmail_config['time_format'] = 'H:i';
+
+// give this choice of time formats to the user to select from
+$rcmail_config['time_formats'] = array('G:i', 'H:i', 'g:i a', 'h:i A');
+
+// use this format for short date display (derived from date_format and time_format)
+$rcmail_config['date_short'] = 'D H:i';
+
+// use this format for detailed date/time formatting (derived from date_format and time_format)
+$rcmail_config['date_long'] = 'Y-m-d H:i';
+
+// store draft message is this mailbox
+// leave blank if draft messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['drafts_mbox'] = 'Drafts';
+
+// store spam messages in this mailbox
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['junk_mbox'] = 'Spam';
+
+// store sent message is this mailbox
+// leave blank if sent messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['sent_mbox'] = 'Sent';
+
+// move messages to this folder when deleting them
+// leave blank if they should be deleted directly
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['trash_mbox'] = 'Trash';
+
+// display these folders separately in the mailbox list.
+// these folders will also be displayed with localized names
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['default_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+$rcmail_config['default_imap_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+
+// automatically create the above listed default folders on first login
+$rcmail_config['create_default_folders'] = true;
+
+// protect the default folders from renames, deletes, and subscription changes
+$rcmail_config['protect_default_folders'] = true;
+
+// if in your system 0 quota means no limit set this option to true 
+$rcmail_config['quota_zero_as_unlimited'] = true;
+
+// Make use of the built-in spell checker. It is based on GoogieSpell.
+// Since Google only accepts connections over https your PHP installatation
+// requires to be compiled with Open SSL support
+$rcmail_config['enable_spellcheck'] = true;
+
+// Enables spellchecker exceptions dictionary.
+// Setting it to 'shared' will make the dictionary shared by all users.
+$rcmail_config['spellcheck_dictionary'] = false;
+
+// Set the spell checking engine. 'googie' is the default. 'pspell' is also available,
+// but requires the Pspell extensions. When using Nox Spell Server, also set 'googie' here.
+$rcmail_config['spellcheck_engine'] = 'googie';
+
+// For a locally installed Nox Spell Server, please specify the URI to call it.
+// Get Nox Spell Server from http://orangoo.com/labs/?page_id=72
+// Leave empty to use the Google spell checking service, what means
+// that the message content will be sent to Google in order to check spelling
+$rcmail_config['spellcheck_uri'] = '';
+
+// These languages can be selected for spell checking.
+// Configure as a PHP style hash array: array('en'=>'English', 'de'=>'Deutsch');
+// Leave empty for default set of available language.
+$rcmail_config['spellcheck_languages'] = NULL;
+
+// Makes that words with all letters capitalized will be ignored (e.g. GOOGLE)
+$rcmail_config['spellcheck_ignore_caps'] = false;
+
+// Makes that words with numbers will be ignored (e.g. g00gle)
+$rcmail_config['spellcheck_ignore_nums'] = false;
+
+// Makes that words with symbols will be ignored (e.g. g@@gle)
+$rcmail_config['spellcheck_ignore_syms'] = false;
+
+// Use this char/string to separate recipients when composing a new message
+$rcmail_config['recipients_separator'] = ',';
+
+// don't let users set pagesize to more than this value if set
+$rcmail_config['max_pagesize'] = 200;
+
+// Minimal value of user's 'keep_alive' setting (in seconds)
+// Must be less than 'session_lifetime'
+$rcmail_config['min_keep_alive'] = 60;
+
+// Enables files upload indicator. Requires APC installed and enabled apc.rfc1867 option.
+// By default refresh time is set to 1 second. You can set this value to true
+// or any integer value indicating number of seconds.
+$rcmail_config['upload_progress'] = false;
+
+// Specifies for how many seconds the Undo button will be available
+// after object delete action. Currently used with supporting address book sources.
+// Setting it to 0, disables the feature.
+$rcmail_config['undo_timeout'] = 0;
+
+// ----------------------------------
+// ADDRESSBOOK SETTINGS
+// ----------------------------------
+
+// This indicates which type of address book to use. Possible choises:
+// 'sql' (default) and 'ldap'.
+// If set to 'ldap' then it will look at using the first writable LDAP
+// address book as the primary address book and it will not display the
+// SQL address book in the 'Address Book' view.
+$rcmail_config['address_book_type'] = 'sql';
+
+// In order to enable public ldap search, configure an array like the Verisign
+// example further below. if you would like to test, simply uncomment the example.
+// Array key must contain only safe characters, ie. a-zA-Z0-9_
+$rcmail_config['ldap_public'] = array();
+
+// If you are going to use LDAP for individual address books, you will need to 
+// set 'user_specific' to true and use the variables to generate the appropriate DNs to access it.
+//
+// The recommended directory structure for LDAP is to store all the address book entries
+// under the users main entry, e.g.:
+//
+//  o=root
+//   ou=people
+//    uid=user@domain
+//  mail=contact@contactdomain
+//
+// So the base_dn would be uid=%fu,ou=people,o=root
+// The bind_dn would be the same as based_dn or some super user login.
+/* 
+ * example config for Verisign directory
+ *
+$rcmail_config['ldap_public']['Verisign'] = array(
+  'name'          => 'Verisign.com',
+  // Replacement variables supported in host names:
+  // %h - user's IMAP hostname
+  // %n - http hostname ($_SERVER['SERVER_NAME'])
+  // %d - domain (http hostname without the first part)
+  // %z - IMAP domain (IMAP hostname without the first part)
+  // For example %n = mail.domain.tld, %d = domain.tld
+  'hosts'         => array('directory.verisign.com'),
+  'port'          => 389,
+  'use_tls'	      => false,
+  'ldap_version'  => 3,       // using LDAPv3
+  'user_specific' => false,   // If true the base_dn, bind_dn and bind_pass default to the user's IMAP login.
+  // %fu - The full username provided, assumes the username is an email
+  //       address, uses the username_domain value if not an email address.
+  // %u  - The username prior to the '@'.
+  // %d  - The domain name after the '@'.
+  // %dc - The domain name hierarchal string e.g. "dc=test,dc=domain,dc=com"
+  // %dn - DN found by ldap search when search_filter/search_base_dn are used
+  'base_dn'       => '',
+  'bind_dn'       => '',
+  'bind_pass'     => '',
+  // It's possible to bind for an individual address book
+  // The login name is used to search for the DN to bind with
+  'search_base_dn' => '',
+  'search_filter'  => '',   // e.g. '(&(objectClass=posixAccount)(uid=%u))'
+  // DN and password to bind as before searching for bind DN, if anonymous search is not allowed
+  'search_bind_dn' => '',
+  'search_bind_pw' => '',
+  // Default for %dn variable if search doesn't return DN value
+  'search_dn_default' => '',
+  // Optional authentication identifier to be used as SASL authorization proxy
+  // bind_dn need to be empty
+  'auth_cid'       => '',
+  // SASL authentication method (for proxy auth), e.g. DIGEST-MD5
+  'auth_method'    => '',
+  // Indicates if the addressbook shall be hidden from the list.
+  // With this option enabled you can still search/view contacts.
+  'hidden'        => false,
+  // Indicates if the addressbook shall not list contacts but only allows searching.
+  'searchonly'    => false,
+  // Indicates if we can write to the LDAP directory or not.
+  // If writable is true then these fields need to be populated:
+  // LDAP_Object_Classes, required_fields, LDAP_rdn
+  'writable'       => false,
+  // To create a new contact these are the object classes to specify
+  // (or any other classes you wish to use).
+  'LDAP_Object_Classes' => array('top', 'inetOrgPerson'),
+  // The RDN field that is used for new entries, this field needs
+  // to be one of the search_fields, the base of base_dn is appended
+  // to the RDN to insert into the LDAP directory.
+  'LDAP_rdn'       => 'cn',
+  // The required fields needed to build a new contact as required by
+  // the object classes (can include additional fields not required by the object classes).
+  'required_fields' => array('cn', 'sn', 'mail'),
+  'search_fields'   => array('mail', 'cn'),  // fields to search in
+  // mapping of contact fields to directory attributes
+  //   for every attribute one can specify the number of values (limit) allowed.
+  //   default is 1, a wildcard * means unlimited
+  'fieldmap' => array(
+    // Roundcube  => LDAP:limit
+    'name'        => 'cn',
+    'surname'     => 'sn',
+    'firstname'   => 'givenName',
+    'title'       => 'title',
+    'email'       => 'mail:*',
+    'phone:home'  => 'homePhone',
+    'phone:work'  => 'telephoneNumber',
+    'phone:mobile' => 'mobile',
+    'phone:pager' => 'pager',
+    'street'      => 'street',
+    'zipcode'     => 'postalCode',
+    'region'      => 'st',
+    'locality'    => 'l',
+// if you uncomment country, you need to modify 'sub_fields' above
+//    'country'     => 'c',
+    'department'  => 'departmentNumber',
+    'notes'       => 'description',
+// these currently don't work:
+//    'phone:workfax' => 'facsimileTelephoneNumber',
+//    'photo'        => 'jpegPhoto',
+//    'organization' => 'o',
+//    'manager'      => 'manager',
+//    'assistant'    => 'secretary',
+  ),
+  // Map of contact sub-objects (attribute name => objectClass(es)), e.g. 'c' => 'country'
+  'sub_fields' => array(),
+  'sort'          => 'cn',    // The field to sort the listing by.
+  'scope'         => 'sub',   // search mode: sub|base|list
+  'filter'        => '(objectClass=inetOrgPerson)',      // used for basic listing (if not empty) and will be &'d with search queries. example: status=act
+  'fuzzy_search'  => true,    // server allows wildcard search
+  'vlv'           => false,   // Enable Virtual List View to more efficiently fetch paginated data (if server supports it)
+  'numsub_filter' => '(objectClass=organizationalUnit)',   // with VLV, we also use numSubOrdinates to query the total number of records. Set this filter to get all numSubOrdinates attributes for counting
+  'sizelimit'     => '0',     // Enables you to limit the count of entries fetched. Setting this to 0 means no limit.
+  'timelimit'     => '0',     // Sets the number of seconds how long is spend on the search. Setting this to 0 means no limit.
+  'referrals'     => true|false,  // Sets the LDAP_OPT_REFERRALS option. Mostly used in multi-domain Active Directory setups
+
+  // definition for contact groups (uncomment if no groups are supported)
+  // for the groups base_dn, the user replacements %fu, %u, $d and %dc work as for base_dn (see above)
+  // if the groups base_dn is empty, the contact base_dn is used for the groups as well
+  // -> in this case, assure that groups and contacts are separated due to the concernig filters! 
+  'groups'        => array(
+    'base_dn'     => '',
+    'scope'       => 'sub',   // search mode: sub|base|list
+    'filter'      => '(objectClass=groupOfNames)',
+    'object_classes' => array("top", "groupOfNames"),
+    'member_attr'  => 'member',   // name of the member attribute, e.g. uniqueMember
+    'name_attr'    => 'cn',       // attribute to be used as group name
+  ),
+);
+*/
+
+// An ordered array of the ids of the addressbooks that should be searched
+// when populating address autocomplete fields server-side. ex: array('sql','Verisign');
+$rcmail_config['autocomplete_addressbooks'] = array('sql');
+
+// The minimum number of characters required to be typed in an autocomplete field
+// before address books will be searched. Most useful for LDAP directories that
+// may need to do lengthy results building given overly-broad searches
+$rcmail_config['autocomplete_min_length'] = 1;
+
+// Number of parallel autocomplete requests.
+// If there's more than one address book, n parallel (async) requests will be created,
+// where each request will search in one address book. By default (0), all address
+// books are searched in one request.
+$rcmail_config['autocomplete_threads'] = 0;
+
+// Max. numer of entries in autocomplete popup. Default: 15.
+$rcmail_config['autocomplete_max'] = 15;
+
+// show address fields in this order
+// available placeholders: {street}, {locality}, {zipcode}, {country}, {region}
+$rcmail_config['address_template'] = '{street}<br/>{locality} {zipcode}<br/>{country} {region}';
+
+// Matching mode for addressbook search (including autocompletion)
+// 0 - partial (*abc*), default
+// 1 - strict (abc)
+// 2 - prefix (abc*)
+// Note: For LDAP sources fuzzy_search must be enabled to use 'partial' or 'prefix' mode
+$rcmail_config['addressbook_search_mode'] = 0;
+
+// ----------------------------------
+// USER PREFERENCES
+// ----------------------------------
+
+// Use this charset as fallback for message decoding
+//$rcmail_config['default_charset'] = 'ISO-8859-1';
+$rcmail_config['default_charset'] = 'UTF-8';
+
+// skin name: folder from skins/
+$rcmail_config['skin'] = 'larry';
+
+// show up to X items in messages list view
+$rcmail_config['mail_pagesize'] = 50;
+
+// show up to X items in contacts list view
+$rcmail_config['addressbook_pagesize'] = 50;
+
+// sort contacts by this col (preferably either one of name, firstname, surname)
+$rcmail_config['addressbook_sort_col'] = 'surname';
+
+// the way how contact names are displayed in the list
+// 0: display name
+// 1: (prefix) firstname middlename surname (suffix)
+// 2: (prefix) surname firstname middlename (suffix)
+// 3: (prefix) surname, firstname middlename (suffix)
+$rcmail_config['addressbook_name_listing'] = 0;
+
+// use this timezone to display date/time
+// valid timezone identifers are listed here: php.net/manual/en/timezones.php
+// 'auto' will use the browser's timezone settings
+$rcmail_config['timezone'] = 'auto';
+
+// prefer displaying HTML messages
+$rcmail_config['prefer_html'] = true;
+
+// display remote inline images
+// 0 - Never, always ask
+// 1 - Ask if sender is not in address book
+// 2 - Always show inline images
+$rcmail_config['show_images'] = 0;
+
+// compose html formatted messages by default
+// 0 - never, 1 - always, 2 - on reply to HTML message only 
+$rcmail_config['htmleditor'] = 0;
+
+// show pretty dates as standard
+$rcmail_config['prettydate'] = true;
+
+// save compose message every 30 seconds
+$rcmail_config['draft_autosave'] = 30;
+
+// default setting if preview pane is enabled
+$rcmail_config['preview_pane'] = false;
+
+// Mark as read when viewed in preview pane (delay in seconds)
+// Set to -1 if messages in preview pane should not be marked as read
+$rcmail_config['preview_pane_mark_read'] = 0;
+
+// Clear Trash on logout
+$rcmail_config['logout_purge'] = false;
+
+// Compact INBOX on logout
+$rcmail_config['logout_expunge'] = false;
+
+// Display attached images below the message body 
+$rcmail_config['inline_images'] = true;
+
+// Encoding of long/non-ascii attachment names:
+// 0 - Full RFC 2231 compatible
+// 1 - RFC 2047 for 'name' and RFC 2231 for 'filename' parameter (Thunderbird's default)
+// 2 - Full 2047 compatible
+$rcmail_config['mime_param_folding'] = 1;
+
+// Set true if deleted messages should not be displayed
+// This will make the application run slower
+$rcmail_config['skip_deleted'] = false;
+
+// Set true to Mark deleted messages as read as well as deleted
+// False means that a message's read status is not affected by marking it as deleted
+$rcmail_config['read_when_deleted'] = true;
+
+// Set to true to never delete messages immediately
+// Use 'Purge' to remove messages marked as deleted
+$rcmail_config['flag_for_deletion'] = false;
+
+// Default interval for keep-alive/check-recent requests (in seconds)
+// Must be greater than or equal to 'min_keep_alive' and less than 'session_lifetime'
+$rcmail_config['keep_alive'] = 60;
+
+// If true all folders will be checked for recent messages
+$rcmail_config['check_all_folders'] = false;
+
+// If true, after message delete/move, the next message will be displayed
+$rcmail_config['display_next'] = false;
+
+// 0 - Do not expand threads 
+// 1 - Expand all threads automatically 
+// 2 - Expand only threads with unread messages 
+$rcmail_config['autoexpand_threads'] = 0;
+
+// When replying place cursor above original message (top posting)
+$rcmail_config['top_posting'] = false;
+
+// When replying strip original signature from message
+$rcmail_config['strip_existing_sig'] = true;
+
+// Show signature:
+// 0 - Never
+// 1 - Always
+// 2 - New messages only
+// 3 - Forwards and Replies only
+$rcmail_config['show_sig'] = 1;
+
+// When replying or forwarding place sender's signature above existing message
+$rcmail_config['sig_above'] = false;
+
+// Use MIME encoding (quoted-printable) for 8bit characters in message body
+$rcmail_config['force_7bit'] = false;
+
+// Defaults of the search field configuration.
+// The array can contain a per-folder list of header fields which should be considered when searching
+// The entry with key '*' stands for all folders which do not have a specific list set.
+// Please note that folder names should to be in sync with $rcmail_config['default_folders']
+$rcmail_config['search_mods'] = null;  // Example: array('*' => array('subject'=>1, 'from'=>1), 'Sent' => array('subject'=>1, 'to'=>1));
+
+// Defaults of the addressbook search field configuration.
+$rcmail_config['addressbook_search_mods'] = null;  // Example: array('name'=>1, 'firstname'=>1, 'surname'=>1, 'email'=>1, '*'=>1);
+
+// 'Delete always'
+// This setting reflects if mail should be always deleted
+// when moving to Trash fails. This is necessary in some setups
+// when user is over quota and Trash is included in the quota.
+$rcmail_config['delete_always'] = false;
+
+// Directly delete messages in Junk instead of moving to Trash
+$rcmail_config['delete_junk'] = true;
+
+// Behavior if a received message requests a message delivery notification (read receipt)
+// 0 = ask the user, 1 = send automatically, 2 = ignore (never send or ask)
+// 3 = send automatically if sender is in addressbook, otherwise ask the user
+// 4 = send automatically if sender is in addressbook, otherwise ignore
+$rcmail_config['mdn_requests'] = 0;
+
+// Return receipt checkbox default state
+$rcmail_config['mdn_default'] = 0;
+
+// Delivery Status Notification checkbox default state
+$rcmail_config['dsn_default'] = 0;
+
+// Place replies in the folder of the message being replied to
+$rcmail_config['reply_same_folder'] = false;
+
+// Sets default mode of Forward feature to "forward as attachment"
+$rcmail_config['forward_attachment'] = false;
+
+// Defines address book (internal index) to which new contacts will be added
+// By default it is the first writeable addressbook.
+// Note: Use '0' for built-in address book.
+$rcmail_config['default_addressbook'] = null;
+
+// Enables spell checking before sending a message.
+$rcmail_config['spellcheck_before_send'] = false;
+
+// Skip alternative email addresses in autocompletion (show one address per contact)
+$rcmail_config['autocomplete_single'] = false;
+
+// Default font for composed HTML message.
+// Supported values: Andale Mono, Arial, Arial Black, Book Antiqua, Courier New,
+// Georgia, Helvetica, Impact, Tahoma, Terminal, Times New Roman, Trebuchet MS, Verdana
+$rcmail_config['default_font'] = '';
+
+// end of config file
diff --git a/install/ubuntu/17.10/roundcube/vesta.php b/install/ubuntu/17.10/roundcube/vesta.php
new file mode 100644
index 00000000..99e1d4bc
--- /dev/null
+++ b/install/ubuntu/17.10/roundcube/vesta.php
@@ -0,0 +1,71 @@
+<?php
+
+/**
+ * Vesta Control Panel Password Driver
+ *
+ * @version 1.0
+ * @author Serghey Rodin <skid@vestacp.com>
+ */
+
+    function password_save($curpass, $passwd)
+    {
+        $rcmail = rcmail::get_instance();
+        $vesta_host = $rcmail->config->get('password_vesta_host');
+
+        if (empty($vesta_host))
+        {
+            $vesta_host = 'localhost';
+        }
+
+        $vesta_port = $rcmail->config->get('password_vesta_port');
+        if (empty($vesta_port))
+        {
+            $vesta_port = '8083';
+        }
+
+        $postvars = array(
+          'email' => $_SESSION['username'],
+          'password' => $curpass,
+          'new' => $passwd
+        );
+
+        $postdata = http_build_query($postvars);
+
+        $send  = 'POST /reset/mail/ HTTP/1.1' . PHP_EOL;
+        $send .= 'Host: ' . $vesta_host . PHP_EOL;
+        $send .= 'User-Agent: PHP Script' . PHP_EOL;
+        $send .= 'Content-length: ' . strlen($postdata) . PHP_EOL;
+        $send .= 'Content-type: application/x-www-form-urlencoded' . PHP_EOL;
+        $send .= 'Connection: close' . PHP_EOL;
+        $send .= PHP_EOL;
+        $send .= $postdata . PHP_EOL . PHP_EOL;
+
+        //$fp = fsockopen('ssl://' . $vesta_host, $vesta_port);
+        $errno = "";
+        $errstr = "";
+        $context = stream_context_create();
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer_name', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_host', false);
+        $result = stream_context_set_option($context, 'ssl', 'allow_self_signed', true);
+
+        $fp = stream_socket_client('ssl://' . $vesta_host . ':'.$vesta_port, $errno, $errstr, 60, STREAM_CLIENT_CONNECT, $context);
+        fputs($fp, $send);
+        $result = fread($fp, 2048);
+        fclose($fp);
+
+        $fp = fopen("/tmp/roundcube.log", 'w');
+        fwrite($fp, "test ok");
+        fwrite($fp, "\n");
+        fclose($fp);
+
+
+        if(strpos($result, 'ok') && !strpos($result, 'error'))
+        {
+            return PASSWORD_SUCCESS;
+        }
+        else {
+            return PASSWORD_ERROR;
+        }
+
+    }
diff --git a/install/ubuntu/17.10/sudo/admin b/install/ubuntu/17.10/sudo/admin
new file mode 100644
index 00000000..4226bdd4
--- /dev/null
+++ b/install/ubuntu/17.10/sudo/admin
@@ -0,0 +1,8 @@
+# Created by vesta installer
+Defaults env_keep="VESTA"
+Defaults:admin !syslog
+Defaults:admin !requiretty
+Defaults:root !requiretty
+
+admin   ALL=(ALL)       ALL
+admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/17.10/templates/dns/child-ns.tpl b/install/ubuntu/17.10/templates/dns/child-ns.tpl
new file mode 100755
index 00000000..42c046e4
--- /dev/null
+++ b/install/ubuntu/17.10/templates/dns/child-ns.tpl
@@ -0,0 +1,14 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns1.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns2.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ns1' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='ns2' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/ubuntu/17.10/templates/dns/default.tpl b/install/ubuntu/17.10/templates/dns/default.tpl
new file mode 100755
index 00000000..e0a37e62
--- /dev/null
+++ b/install/ubuntu/17.10/templates/dns/default.tpl
@@ -0,0 +1,18 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/ubuntu/17.10/templates/dns/gmail.tpl b/install/ubuntu/17.10/templates/dns/gmail.tpl
new file mode 100755
index 00000000..219c9d24
--- /dev/null
+++ b/install/ubuntu/17.10/templates/dns/gmail.tpl
@@ -0,0 +1,12 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='localhost' TYPE='A' PRIORITY='' VALUE='127.0.0.1' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='MX' PRIORITY='1' VALUE='ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT1.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT2.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT3.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT4.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.google.com ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/ubuntu/17.10/templates/web/apache2/basedir.stpl b/install/ubuntu/17.10/templates/web/apache2/basedir.stpl
new file mode 100644
index 00000000..d978d4c4
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/apache2/basedir.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.10/templates/web/apache2/basedir.tpl b/install/ubuntu/17.10/templates/web/apache2/basedir.tpl
new file mode 100644
index 00000000..96c94a1b
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/apache2/basedir.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.10/templates/web/apache2/default.stpl b/install/ubuntu/17.10/templates/web/apache2/default.stpl
new file mode 100644
index 00000000..ec34c279
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/apache2/default.stpl
@@ -0,0 +1,43 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.10/templates/web/apache2/default.tpl b/install/ubuntu/17.10/templates/web/apache2/default.tpl
new file mode 100644
index 00000000..3a227015
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/apache2/default.tpl
@@ -0,0 +1,37 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.10/templates/web/apache2/hosting.stpl b/install/ubuntu/17.10/templates/web/apache2/hosting.stpl
new file mode 100644
index 00000000..8892072b
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/apache2/hosting.stpl
@@ -0,0 +1,49 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value upload_max_filesize 10M
+        php_admin_value max_execution_time 20
+        php_admin_value post_max_size  8M
+        php_admin_value memory_limit 32M
+        php_admin_flag mysql.allow_persistent  off
+        php_admin_flag safe_mode off
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.10/templates/web/apache2/hosting.tpl b/install/ubuntu/17.10/templates/web/apache2/hosting.tpl
new file mode 100644
index 00000000..1eb26910
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/apache2/hosting.tpl
@@ -0,0 +1,43 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value upload_max_filesize 10M
+        php_admin_value max_execution_time 20
+        php_admin_value post_max_size  8M
+        php_admin_value memory_limit 32M
+        php_admin_flag mysql.allow_persistent  off
+        php_admin_flag safe_mode off
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.10/templates/web/apache2/phpcgi.sh b/install/ubuntu/17.10/templates/web/apache2/phpcgi.sh
new file mode 100755
index 00000000..6565e103
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/apache2/phpcgi.sh
@@ -0,0 +1,16 @@
+#!/bin/bash
+# Adding php wrapper
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+wrapper_script='#!/usr/bin/php-cgi -cphp5-cgi.ini'
+wrapper_file="$home_dir/$user/web/$domain/cgi-bin/php"
+
+echo "$wrapper_script" > $wrapper_file
+chown $user:$user $wrapper_file
+chmod -f 751 $wrapper_file
+
+exit 0
diff --git a/install/ubuntu/17.10/templates/web/apache2/phpcgi.stpl b/install/ubuntu/17.10/templates/web/apache2/phpcgi.stpl
new file mode 100644
index 00000000..731355bc
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/apache2/phpcgi.stpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        SSLRequireSSL
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        Action phpcgi-script /cgi-bin/php
+        <Files *.php>
+            SetHandler phpcgi-script
+        </Files>
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.10/templates/web/apache2/phpcgi.tpl b/install/ubuntu/17.10/templates/web/apache2/phpcgi.tpl
new file mode 100644
index 00000000..c6796d29
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/apache2/phpcgi.tpl
@@ -0,0 +1,31 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        Action phpcgi-script /cgi-bin/php
+        <Files *.php>
+            SetHandler phpcgi-script
+        </Files>
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.10/templates/web/apache2/phpfcgid.sh b/install/ubuntu/17.10/templates/web/apache2/phpfcgid.sh
new file mode 100755
index 00000000..e8058249
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/apache2/phpfcgid.sh
@@ -0,0 +1,22 @@
+#!/bin/bash
+# Adding php wrapper
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+wrapper_script="#!/bin/sh
+PHPRC=/usr/local/lib
+export PHPRC
+export PHP_FCGI_MAX_REQUESTS=1000
+export PHP_FCGI_CHILDREN=20
+exec  /usr/bin/php-cgi
+"
+wrapper_file="$home_dir/$user/web/$domain/cgi-bin/fcgi-starter"
+
+echo "$wrapper_script" > $wrapper_file
+chown $user:$user $wrapper_file
+chmod -f 751 $wrapper_file
+
+exit 0
diff --git a/install/ubuntu/17.10/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/17.10/templates/web/apache2/phpfcgid.stpl
new file mode 100644
index 00000000..156c8a91
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/apache2/phpfcgid.stpl
@@ -0,0 +1,39 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        SSLRequireSSL
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        <Files *.php>
+          SetHandler fcgid-script
+        </Files>
+        FCGIWrapper %home%/%user%/web/%domain%/cgi-bin/fcgi-starter .php
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    php_admin_value open_basedir none
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.10/templates/web/apache2/phpfcgid.tpl b/install/ubuntu/17.10/templates/web/apache2/phpfcgid.tpl
new file mode 100644
index 00000000..a4c01269
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/apache2/phpfcgid.tpl
@@ -0,0 +1,31 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        <Files *.php>
+          SetHandler fcgid-script
+        </Files>
+        FCGIWrapper %home%/%user%/web/%domain%/cgi-bin/fcgi-starter .php
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/17.10/templates/web/awstats/awstats.tpl b/install/ubuntu/17.10/templates/web/awstats/awstats.tpl
new file mode 100755
index 00000000..9a92e0fd
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/awstats/awstats.tpl
@@ -0,0 +1,133 @@
+LogFile="/var/log/%web_system%/domains/%domain%.log"
+LogType=W
+LogFormat=1
+LogSeparator=" "
+SiteDomain="%domain_idn%"
+HostAliases="%alias_idn%"
+DirData="%home%/%user%/web/%domain%/stats"
+DirCgi="/vstats"
+DirIcons="/vstats/icon"
+AllowToUpdateStatsFromBrowser=0
+AllowFullYearView=2
+EnableLockForUpdate=1
+DNSStaticCacheFile="dnscache.txt"
+DNSLastUpdateCacheFile="dnscachelastupdate.txt"
+SkipDNSLookupFor=""
+AllowAccessFromWebToAuthenticatedUsersOnly=0
+AllowAccessFromWebToFollowingAuthenticatedUsers=""
+AllowAccessFromWebToFollowingIPAddresses=""
+CreateDirDataIfNotExists=0
+BuildHistoryFormat=text
+BuildReportFormat=html
+SaveDatabaseFilesWithPermissionsForEveryone=0
+PurgeLogFile=0
+ArchiveLogRecords=0
+KeepBackupOfHistoricFiles=1
+DefaultFile="index.php index.html"
+SkipHosts="127.0.0.1
+SkipUserAgents=""
+SkipFiles=""
+SkipReferrersBlackList=""
+OnlyHosts=""
+OnlyUserAgents=""
+OnlyUsers=""
+OnlyFiles=""
+NotPageList="css js class gif jpg jpeg png bmp ico rss xml swf"
+ValidHTTPCodes="200 304"
+ValidSMTPCodes="1 250"
+AuthenticatedUsersNotCaseSensitive=0
+URLNotCaseSensitive=0
+URLWithAnchor=0
+URLQuerySeparators="?;"
+URLWithQuery=0
+URLWithQueryWithOnlyFollowingParameters=""
+URLWithQueryWithoutFollowingParameters=""
+URLReferrerWithQuery=0
+WarningMessages=1
+ErrorMessages=""
+DebugMessages=0
+NbOfLinesForCorruptedLog=50
+WrapperScript=""
+DecodeUA=0
+MiscTrackerUrl="/js/awstats_misc_tracker.js"
+UseFramesWhenCGI=1
+DetailedReportsOnNewWindows=1
+Expires=3600
+MaxRowsInHTMLOutput=1000
+Lang="auto"
+DirLang="./lang"
+ShowMenu=1
+ShowSummary=UVPHB
+ShowMonthStats=UVPHB
+ShowDaysOfMonthStats=VPHB
+ShowDaysOfWeekStats=PHB
+ShowHoursStats=PHB
+ShowDomainsStats=PHB
+ShowHostsStats=PHBL
+ShowAuthenticatedUsers=0
+ShowRobotsStats=HBL
+ShowWormsStats=0
+ShowEMailSenders=0
+ShowEMailReceivers=0
+ShowSessionsStats=1
+ShowPagesStats=PBEX
+ShowFileTypesStats=HB
+ShowFileSizesStats=0
+ShowDownloadsStats=HB
+ShowOSStats=1
+ShowBrowsersStats=1
+ShowScreenSizeStats=0
+ShowOriginStats=PH
+ShowKeyphrasesStats=1
+ShowKeywordsStats=1
+ShowMiscStats=a
+ShowHTTPErrorsStats=1
+ShowSMTPErrorsStats=0
+ShowClusterStats=0
+AddDataArrayMonthStats=1
+AddDataArrayShowDaysOfMonthStats=1
+AddDataArrayShowDaysOfWeekStats=1
+AddDataArrayShowHoursStats=1
+IncludeInternalLinksInOriginSection=0
+MaxNbOfDomain = 10
+MinHitDomain  = 1
+MaxNbOfHostsShown = 10
+MinHitHost    = 1
+MaxNbOfLoginShown = 10
+MinHitLogin   = 1
+MaxNbOfRobotShown = 10
+MinHitRobot   = 1
+MaxNbOfDownloadsShown = 10
+MinHitDownloads = 1
+MaxNbOfPageShown = 10
+MinHitFile    = 1
+MaxNbOfOsShown = 10
+MinHitOs      = 1
+MaxNbOfBrowsersShown = 10
+MinHitBrowser = 1
+MaxNbOfScreenSizesShown = 5
+MinHitScreenSize = 1
+MaxNbOfWindowSizesShown = 5
+MinHitWindowSize = 1
+MaxNbOfRefererShown = 10
+MinHitRefer   = 1
+MaxNbOfKeyphrasesShown = 10
+MinHitKeyphrase = 1
+MaxNbOfKeywordsShown = 10
+MinHitKeyword = 1
+MaxNbOfEMailsShown = 20
+MinHitEMail   = 1
+FirstDayOfWeek=0
+ShowFlagLinks=""
+ShowLinksOnUrl=1
+UseHTTPSLinkForUrl=""
+MaxLengthOfShownURL=64
+HTMLHeadSection=""
+HTMLEndSection=""
+MetaRobot=0
+Logo="awstats_logo6.png"
+LogoLink="http://awstats.sourceforge.net"
+BarWidth   = 260
+BarHeight  = 90
+StyleSheet=""
+ExtraTrackedRowsLimit=500
diff --git a/install/ubuntu/17.10/templates/web/awstats/index.tpl b/install/ubuntu/17.10/templates/web/awstats/index.tpl
new file mode 100755
index 00000000..9df9bb5c
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/awstats/index.tpl
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+    <title>Awstats log analyzer </title>
+</head>
+<frameset rows="60,*" cols="*">
+    <frame src="nav.html" name="nav" scrolling="no" noresize>
+    <frame src="%month%/index.html" name="stats">
+</frameset>
+</html>
diff --git a/install/ubuntu/17.10/templates/web/awstats/nav.tpl b/install/ubuntu/17.10/templates/web/awstats/nav.tpl
new file mode 100755
index 00000000..f29bed68
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/awstats/nav.tpl
@@ -0,0 +1,23 @@
+<html>
+<head>
+    <title>Awstats navigation</title>
+    <script language="javascript">
+        function change() {
+            top.stats.location= document.period.select.value + '/';
+        }
+    </script>
+</head>
+<body>
+<table width="100%" border="0" cellspacing="0" cellpadding="0">
+<tr>
+    <td><img src="logo.png" alt="vesta"></td>
+    <td><form name="period" action="" method="get">
+        <select name="select" ONCHANGE="change()">
+%select_month%
+        </select>
+    </form>
+    </td>
+</tr>
+</table>
+</body>
+</html>
diff --git a/install/ubuntu/17.10/templates/web/nginx/caching.sh b/install/ubuntu/17.10/templates/web/nginx/caching.sh
new file mode 100755
index 00000000..09d8efe7
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/caching.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+user=$1
+domain=$2
+ip=$3
+home=$4
+docroot=$5
+
+str="proxy_cache_path /var/cache/nginx/$domain levels=2" 
+str="$str keys_zone=$domain:10m inactive=60m max_size=512m;" 
+conf='/etc/nginx/conf.d/01_caching_pool.conf'
+if [ -e "$conf" ]; then
+    if [ -z "$(grep "=${domain}:" $conf)" ]; then
+        echo "$str" >> $conf
+    fi
+else
+    echo "$str" >> $conf
+fi
+
diff --git a/install/ubuntu/17.10/templates/web/nginx/caching.stpl b/install/ubuntu/17.10/templates/web/nginx/caching.stpl
new file mode 100755
index 00000000..5e0e4064
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/caching.stpl
@@ -0,0 +1,44 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass https://%ip%:%web_ssl_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/caching.tpl b/install/ubuntu/17.10/templates/web/nginx/caching.tpl
new file mode 100755
index 00000000..36761b65
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/caching.tpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/default.stpl b/install/ubuntu/17.10/templates/web/nginx/default.stpl
new file mode 100755
index 00000000..fa538060
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/default.stpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/17.10/templates/web/nginx/default.tpl b/install/ubuntu/17.10/templates/web/nginx/default.tpl
new file mode 100755
index 00000000..4d5c774b
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/default.tpl
@@ -0,0 +1,33 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/17.10/templates/web/nginx/hosting.sh b/install/ubuntu/17.10/templates/web/nginx/hosting.sh
new file mode 100755
index 00000000..eeed37ef
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/ubuntu/17.10/templates/web/nginx/hosting.stpl b/install/ubuntu/17.10/templates/web/nginx/hosting.stpl
new file mode 100755
index 00000000..d778d633
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/hosting.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/17.10/templates/web/nginx/hosting.tpl b/install/ubuntu/17.10/templates/web/nginx/hosting.tpl
new file mode 100755
index 00000000..15961c95
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/hosting.tpl
@@ -0,0 +1,35 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/17.10/templates/web/nginx/http2.stpl b/install/ubuntu/17.10/templates/web/nginx/http2.stpl
new file mode 100644
index 00000000..76dd2f8e
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/http2.stpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/httpd/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/httpd/domains/%domain%.log combined;
+            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/17.10/templates/web/nginx/http2.tpl b/install/ubuntu/17.10/templates/web/nginx/http2.tpl
new file mode 100644
index 00000000..c1fec114
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/http2.tpl
@@ -0,0 +1,33 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/httpd/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/httpd/domains/%domain%.log combined;
+            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/cms_made_simple.stpl
new file mode 100644
index 00000000..d85bcce3
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/cms_made_simple.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/cms_made_simple.tpl
new file mode 100644
index 00000000..f9e90393
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/cms_made_simple.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter2.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter2.stpl
new file mode 100644
index 00000000..9c24c3ea
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter2.stpl
@@ -0,0 +1,61 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter2.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter2.tpl
new file mode 100644
index 00000000..d2422be2
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter2.tpl
@@ -0,0 +1,57 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter3.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter3.stpl
new file mode 100644
index 00000000..d7186314
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter3.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter3.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter3.tpl
new file mode 100644
index 00000000..54f81b99
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/codeigniter3.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/datalife_engine.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/datalife_engine.stpl
new file mode 100644
index 00000000..4f0b9ec7
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/datalife_engine.stpl
@@ -0,0 +1,127 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/datalife_engine.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/datalife_engine.tpl
new file mode 100644
index 00000000..3ea45347
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/datalife_engine.tpl
@@ -0,0 +1,123 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/default.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/default.stpl
new file mode 100644
index 00000000..5cb55311
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/default.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/default.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/default.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/default.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/dokuwiki.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/dokuwiki.stpl
new file mode 100644
index 00000000..f85032ba
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/dokuwiki.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/dokuwiki.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/dokuwiki.tpl
new file mode 100644
index 00000000..0a9a75ed
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/dokuwiki.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.stpl
new file mode 100644
index 00000000..91a70936
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -0,0 +1,101 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # For Drupal 6 and bwlow:
+        # Some modules enforce no slash (/) at the end of the URL
+        # Else this rewrite block wouldn't be needed (GlobalRedirect)
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.tpl
new file mode 100644
index 00000000..ac32dcd9
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -0,0 +1,98 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # For Drupal 6 and bwlow:
+        # Some modules enforce no slash (/) at the end of the URL
+        # Else this rewrite block wouldn't be needed (GlobalRedirect)
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl
new file mode 100644
index 00000000..3b9dabf5
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -0,0 +1,101 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl
new file mode 100644
index 00000000..1b979475
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -0,0 +1,98 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl
new file mode 100644
index 00000000..50d85b68
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -0,0 +1,102 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$)|^/update.php {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl
new file mode 100644
index 00000000..71b538bf
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -0,0 +1,99 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$)|^/update.php {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/joomla.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/joomla.stpl
new file mode 100644
index 00000000..704405f3
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/joomla.stpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/joomla.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/joomla.tpl
new file mode 100644
index 00000000..91b7a8f1
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/joomla.tpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/laravel.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/laravel.stpl
new file mode 100644
index 00000000..477f6f01
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/laravel.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/laravel.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/laravel.tpl
new file mode 100644
index 00000000..d14b0173
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/laravel.tpl
@@ -0,0 +1,50 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/magento.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/magento.stpl
new file mode 100644
index 00000000..fdab43aa
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/magento.stpl
@@ -0,0 +1,198 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %sdocroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %sdocroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %sdocroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %sdocroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/magento.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/magento.tpl
new file mode 100644
index 00000000..3f292fff
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/magento.tpl
@@ -0,0 +1,194 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %docroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %docroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %docroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %docroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/modx.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/modx.stpl
new file mode 100644
index 00000000..f410ab77
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/modx.stpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  https://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/modx.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/modx.tpl
new file mode 100644
index 00000000..342d3ecf
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/modx.tpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  http://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/moodle.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/moodle.stpl
new file mode 100644
index 00000000..f15a68c5
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/moodle.stpl
@@ -0,0 +1,90 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/moodle.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/moodle.tpl
new file mode 100644
index 00000000..c20ba648
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/moodle.tpl
@@ -0,0 +1,87 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/no-php.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/no-php.stpl
new file mode 100644
index 00000000..bc8b53a3
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/no-php.stpl
@@ -0,0 +1,47 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/no-php.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/no-php.tpl
new file mode 100644
index 00000000..7ff8aa1d
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/no-php.tpl
@@ -0,0 +1,43 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/odoo.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/odoo.stpl
new file mode 100644
index 00000000..d6697d7a
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/odoo.stpl
@@ -0,0 +1,70 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+    
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/odoo.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/odoo.tpl
new file mode 100644
index 00000000..b1240aae
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/odoo.tpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/opencart.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/opencart.stpl
new file mode 100644
index 00000000..908b9aeb
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/opencart.stpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/opencart.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/opencart.tpl
new file mode 100644
index 00000000..d0a9060b
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/opencart.tpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/owncloud.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/owncloud.stpl
new file mode 100644
index 00000000..891566b9
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/owncloud.stpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/owncloud.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/owncloud.tpl
new file mode 100644
index 00000000..e3ec31de
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/owncloud.tpl
@@ -0,0 +1,81 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+            access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/piwik.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/piwik.stpl
new file mode 100644
index 00000000..78c1bb78
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/piwik.stpl
@@ -0,0 +1,73 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+        return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+        }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/piwik.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/piwik.tpl
new file mode 100644
index 00000000..f94fb7de
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/piwik.tpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+            return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.stpl
new file mode 100644
index 00000000..5ffc9ed5
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+        }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.tpl
new file mode 100644
index 00000000..297fe0e8
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/sendy.stpl
new file mode 100644
index 00000000..0b351000
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/sendy.stpl
@@ -0,0 +1,88 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+     location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/sendy.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/sendy.tpl
new file mode 100644
index 00000000..b27b427d
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/sendy.tpl
@@ -0,0 +1,86 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress.stpl
new file mode 100644
index 00000000..5cb55311
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2.stpl
new file mode 100644
index 00000000..e0aeb524
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2.stpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2.tpl
new file mode 100644
index 00000000..bccb8b3d
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2.tpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
new file mode 100644
index 00000000..0d933b30
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+} 
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
new file mode 100644
index 00000000..39e366b7
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
diff --git a/install/ubuntu/17.10/templates/web/nginx/proxy_ip.tpl b/install/ubuntu/17.10/templates/web/nginx/proxy_ip.tpl
new file mode 100755
index 00000000..ae195617
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/nginx/proxy_ip.tpl
@@ -0,0 +1,9 @@
+server {
+    listen       %ip%:%proxy_port% default;
+    server_name  _;
+    #access_log  /var/log/nginx/%ip%.log main;
+    location / {
+        proxy_pass  http://%ip%:%web_port%;
+   }
+}
+
diff --git a/install/ubuntu/17.10/templates/web/php-fpm/default.tpl b/install/ubuntu/17.10/templates/web/php-fpm/default.tpl
new file mode 100644
index 00000000..209e1e43
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/php-fpm/default.tpl
@@ -0,0 +1,21 @@
+[%backend%]
+listen = 127.0.0.1:%backend_port%
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/ubuntu/17.10/templates/web/php-fpm/no-php.tpl b/install/ubuntu/17.10/templates/web/php-fpm/no-php.tpl
new file mode 100644
index 00000000..047c33ed
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/php-fpm/no-php.tpl
@@ -0,0 +1,20 @@
+;[%backend%]
+;listen = /dev/null
+
+;user = %user%
+;group = %user%
+
+;listen.owner = %user%
+;listen.group = www-data
+
+;pm = ondemand
+;pm.max_children = 4
+;pm.max_requests = 4000
+;pm.process_idle_timeout = 10s
+;pm.status_path = /status
+
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /home/%user%/tmp
+;env[TMPDIR] = /home/%user%/tmp
+;env[TEMP] = /home/%user%/tmp
diff --git a/install/ubuntu/17.10/templates/web/php-fpm/socket.tpl b/install/ubuntu/17.10/templates/web/php-fpm/socket.tpl
new file mode 100644
index 00000000..a0151084
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/php-fpm/socket.tpl
@@ -0,0 +1,24 @@
+[%backend%]
+listen = /var/run/php/%backend%.sock
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+listen.owner = %user%
+listen.group = www-data
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/ubuntu/17.10/templates/web/skel/document_errors/403.html b/install/ubuntu/17.10/templates/web/skel/document_errors/403.html
new file mode 100755
index 00000000..9c3f6baa
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/skel/document_errors/403.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>403 &mdash; Forbidden</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="You do not have permission to view this"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>403</h1>
+    <h2>Forbidden</h2>
+    <div>
+        Unfortunately, you do not have permission to view this
+    </div>
+</body>
+
+</html>
diff --git a/install/ubuntu/17.10/templates/web/skel/document_errors/404.html b/install/ubuntu/17.10/templates/web/skel/document_errors/404.html
new file mode 100755
index 00000000..2cee7708
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/skel/document_errors/404.html
@@ -0,0 +1,28 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>404 &mdash; Not Found</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, page not found"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+    <h1>404</h1>
+    <h2>Page Not Found</h2>
+    <div>
+        It seems that the page you were trying to reach does not exist anymore, or maybe it has just moved.
+        You can start again from the <a href="http://%domain%/">home</a> or go back to <a href="javascript:%20history.go(-1)">previous page</a>.
+    </div>
+</body>
+</html>
diff --git a/install/ubuntu/17.10/templates/web/skel/document_errors/50x.html b/install/ubuntu/17.10/templates/web/skel/document_errors/50x.html
new file mode 100755
index 00000000..85ba648b
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/skel/document_errors/50x.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>500 &mdash; Internal Sever Error</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, something went wrong. Internal Server Error"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>500</h1>
+    <h2>Internal Server Error</h2>
+    <div>
+        Sorry, something went wrong :(
+    </div>
+</body>
+
+</html>
diff --git a/install/ubuntu/17.10/templates/web/skel/public_html/index.html b/install/ubuntu/17.10/templates/web/skel/public_html/index.html
new file mode 100755
index 00000000..4f5bb724
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/skel/public_html/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="http://vestacp.com/">Powered by VESTA</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/ubuntu/17.10/templates/web/skel/public_html/robots.txt b/install/ubuntu/17.10/templates/web/skel/public_html/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/skel/public_html/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/ubuntu/17.10/templates/web/skel/public_shtml/index.html b/install/ubuntu/17.10/templates/web/skel/public_shtml/index.html
new file mode 100755
index 00000000..4f5bb724
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/skel/public_shtml/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="http://vestacp.com/">Powered by VESTA</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/ubuntu/17.10/templates/web/skel/public_shtml/robots.txt b/install/ubuntu/17.10/templates/web/skel/public_shtml/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/skel/public_shtml/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/ubuntu/17.10/templates/web/suspend/.htaccess b/install/ubuntu/17.10/templates/web/suspend/.htaccess
new file mode 100755
index 00000000..5a6df83f
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/suspend/.htaccess
@@ -0,0 +1,2 @@
+ErrorDocument 403 /index.html
+ErrorDocument 404 /index.html
diff --git a/install/ubuntu/17.10/templates/web/suspend/index.html b/install/ubuntu/17.10/templates/web/suspend/index.html
new file mode 100755
index 00000000..f2d04e1f
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/suspend/index.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>Website Suspended</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This website has been suspended."/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:84px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: 15px 0 25px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+<body>
+    <h1>SUSPENDED</h1>
+    <h2>This website has been suspended.</h2>
+    <div>
+        Please contact the technical support department.
+    </div>
+</body>
+</html>
diff --git a/install/ubuntu/17.10/templates/web/webalizer/webalizer.tpl b/install/ubuntu/17.10/templates/web/webalizer/webalizer.tpl
new file mode 100755
index 00000000..068adcfb
--- /dev/null
+++ b/install/ubuntu/17.10/templates/web/webalizer/webalizer.tpl
@@ -0,0 +1,110 @@
+HostName         %domain_idn%
+LogFile          /var/log/%web_system%/domains/%domain%.log
+OutputDir        %home%/%user%/web/%domain%/stats
+HistoryName      %home%/%user%/web/%domain%/stats/%domain%.hist
+Incremental      yes
+IncrementalName  %home%/%user%/web/%domain%/stats/%domain%.current
+PageType         htm*
+PageType         cgi
+PageType         php
+PageType         shtml
+DNSCache         /var/lib/webalizer/dns_cache.db
+DNSChildren      10
+Quiet            yes
+FoldSeqErr       yes
+IndexAlias       index.php
+HideURL          *.gif
+HideURL          *.GIF
+HideURL          *.jpg
+HideURL          *.JPG
+HideURL          *.png
+HideURL          *.PNG
+HideURL          *.ra
+SearchEngine     abcsearch.          terms=
+SearchEngine     alexa.              q=
+SearchEngine     alltheweb.          q=
+SearchEngine     alltheweb.          query=
+SearchEngine     alot.               q=
+SearchEngine     altavista.          q=
+SearchEngine     aolsearch.          query=
+SearchEngine     aport.ru            r=
+SearchEngine     ask.                q=
+SearchEngine     atlas.cz            q=
+SearchEngine     bbc.                q=
+SearchEngine     bing.               q=
+SearchEngine     blingo.             q=
+SearchEngine     blogs.yandex.ru     text=
+SearchEngine     btopenworld         query=
+SearchEngine     buscador.ya.com     q=
+SearchEngine     busca.              q=
+SearchEngine     business.           query=
+SearchEngine     centrum.cz          q=
+SearchEngine     chiff.              q=
+SearchEngine     clusty.             query=
+SearchEngine     comcast.            q=
+SearchEngine     crawler.            q=
+SearchEngine     cuil.               q=
+SearchEngine     dmoz.               search=
+SearchEngine     dogpile.com         q=
+SearchEngine     dpxml               qkw=
+SearchEngine     eureka.             searchword=
+SearchEngine     euroseek.           string=
+SearchEngine     exalead.            q=
+SearchEngine     excite              search=
+SearchEngine     ezilon.             q=
+SearchEngine     fastbrowsersearch.  q=
+SearchEngine     feedster.com        q=
+SearchEngine     fireball.de         q=
+SearchEngine     fireball.           keyword=
+SearchEngine     freeserve.          q=
+SearchEngine     gigablast.          q=
+SearchEngine     gogo.ru             q=
+SearchEngine     go.mail.ru          q=
+SearchEngine     google.             q=
+SearchEngine     hakia.              q=
+SearchEngine     hotbot.             query=
+SearchEngine     infoseek.           qt=
+SearchEngine     iwon                searchfor=
+SearchEngine     ixquick.com         query=
+SearchEngine     joeant.             keywords=
+SearchEngine     jyxo.cz             s=
+SearchEngine     looksmart.          key=
+SearchEngine     lycos.              query=
+SearchEngine     mamma.              q=
+SearchEngine     metacrawler         q=
+SearchEngine     msn.                MT=
+SearchEngine     msxml               qkw=
+SearchEngine     mysearch.           searchfor=
+SearchEngine     mywebsearch.        searchfor=
+SearchEngine     netscape.           q=
+SearchEngine     nigma.ru            q=
+SearchEngine     northernlight.      qr=
+SearchEngine     ntlworld.           q=
+SearchEngine     orange.             q=
+SearchEngine     overture.           Keywords=
+SearchEngine     punto.ru            text=
+SearchEngine     rambler.            keyword=
+SearchEngine     search.aol.         q=
+SearchEngine     search.babylon.     q=
+SearchEngine     search.centrum.     phrase=
+SearchEngine     search.conduit.     q=
+SearchEngine     search.earthlink    q=
+SearchEngine     search.icq.         q=
+SearchEngine     search.live.com     q=
+SearchEngine     search.rambler.ru   words=
+SearchEngine     search.winamp.      q=
+SearchEngine     searchy.            q=
+SearchEngine     seznam.cz           w=
+SearchEngine     snap.               query=
+SearchEngine     teoma.              q=
+SearchEngine     teradex.com         q=
+SearchEngine     ukplus              key=
+SearchEngine     verizon.            q=
+SearchEngine     virginmedia.        q=
+SearchEngine     voila.              rdata=
+SearchEngine     webcrawler          searchText=
+SearchEngine     web.search.naver.   query=
+SearchEngine     wisenut             q=
+SearchEngine     yahoo.              p=
+SearchEngine     yandex.             text=
+SearchEngine     yodao.              q=
diff --git a/install/ubuntu/17.10/vsftpd/vsftpd.conf b/install/ubuntu/17.10/vsftpd/vsftpd.conf
new file mode 100644
index 00000000..034b016d
--- /dev/null
+++ b/install/ubuntu/17.10/vsftpd/vsftpd.conf
@@ -0,0 +1,27 @@
+anonymous_enable=NO
+local_enable=YES
+write_enable=YES
+local_umask=022
+anon_umask=022
+anon_upload_enable=NO
+dirmessage_enable=YES
+xferlog_enable=YES
+connect_from_port_20=YES
+xferlog_std_format=YES
+dual_log_enable=YES
+chroot_local_user=YES
+listen=YES
+pam_service_name=vsftpd
+userlist_enable=NO
+tcp_wrappers=YES
+force_dot_files=YES
+ascii_upload_enable=YES
+ascii_download_enable=YES
+allow_writeable_chroot=YES
+seccomp_sandbox=NO
+pasv_enable=YES
+pasv_min_port=12000
+pasv_max_port=12100
+max_per_ip=10
+max_clients=100
+use_localtime=YES
diff --git a/install/ubuntu/18.04/apache2/apache2.conf b/install/ubuntu/18.04/apache2/apache2.conf
new file mode 100644
index 00000000..2756132a
--- /dev/null
+++ b/install/ubuntu/18.04/apache2/apache2.conf
@@ -0,0 +1,94 @@
+# It is split into several files forming the configuration hierarchy outlined
+# below, all located in the /etc/apache2/ directory:
+#
+#	/etc/apache2/
+#	|-- apache2.conf
+#	|	`--  ports.conf
+#	|-- mods-enabled
+#	|	|-- *.load
+#	|	`-- *.conf
+#	|-- conf.d
+#	|	`-- *
+
+# Global configuration
+PidFile ${APACHE_PID_FILE}
+Timeout 30
+KeepAlive Off
+MaxKeepAliveRequests 100
+KeepAliveTimeout 10
+
+<IfModule mpm_prefork_module>
+    StartServers          8
+    MinSpareServers       5
+    MaxSpareServers      20
+    ServerLimit         256
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_worker_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_event_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+# These need to be set in /etc/apache2/envvars
+User ${APACHE_RUN_USER}
+Group ${APACHE_RUN_GROUP}
+#User www-data
+#Group www-data
+
+AccessFileName .htaccess
+
+<Files ~ "^\.ht">
+    Order allow,deny
+    Deny from all
+    Satisfy all
+</Files>
+
+DefaultType None
+HostnameLookups Off
+
+ErrorLog ${APACHE_LOG_DIR}/error.log
+LogLevel warn
+
+# Include module configuration:
+Include mods-enabled/*.load
+Include mods-enabled/*.conf
+
+# Include list of ports to listen on and which to use for name based vhosts
+Include ports.conf
+
+LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
+LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
+LogFormat "%h %l %u %t \"%r\" %>s %O" common
+LogFormat "%{Referer}i -> %U" referer
+LogFormat "%{User-agent}i" agent
+LogFormat "%b" bytes
+
+Include conf.d/
+
+# Include the virtual host configurations:
+#Include sites-enabled/
+
+ErrorDocument 403 /error/403.html
+ErrorDocument 404 /error/404.html
+ErrorDocument 500 /error/50x.html
+ErrorDocument 501 /error/50x.html
+ErrorDocument 502 /error/50x.html
+ErrorDocument 503 /error/50x.html
+ErrorDocument 506 /error/50x.html
diff --git a/install/ubuntu/18.04/apache2/status.conf b/install/ubuntu/18.04/apache2/status.conf
new file mode 100644
index 00000000..da9d9633
--- /dev/null
+++ b/install/ubuntu/18.04/apache2/status.conf
@@ -0,0 +1,8 @@
+Listen 127.0.0.1:8081
+<Location /server-status>
+    SetHandler server-status
+    Order deny,allow
+    Deny from all
+    Allow from 127.0.0.1
+    Allow from all
+</Location>
diff --git a/install/ubuntu/18.04/bind/named.conf b/install/ubuntu/18.04/bind/named.conf
new file mode 100644
index 00000000..ed6ece88
--- /dev/null
+++ b/install/ubuntu/18.04/bind/named.conf
@@ -0,0 +1,12 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
+
diff --git a/install/ubuntu/18.04/clamav/clamd.conf b/install/ubuntu/18.04/clamav/clamd.conf
new file mode 100644
index 00000000..4e04356e
--- /dev/null
+++ b/install/ubuntu/18.04/clamav/clamd.conf
@@ -0,0 +1,61 @@
+#Automatically Generated by clamav-base postinst
+#To reconfigure clamd run #dpkg-reconfigure clamav-base
+#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
+LocalSocket /var/run/clamav/clamd.ctl
+FixStaleSocket true
+LocalSocketGroup clamav
+LocalSocketMode 666
+# TemporaryDirectory is not set to its default /tmp here to make overriding
+# the default with environment variables TMPDIR/TMP/TEMP possible
+User clamav
+# AllowSupplementaryGroups true
+ScanMail true
+ScanArchive true
+ArchiveBlockEncrypted false
+MaxDirectoryRecursion 15
+FollowDirectorySymlinks false
+FollowFileSymlinks false
+ReadTimeout 180
+MaxThreads 12
+MaxConnectionQueueLength 15
+LogSyslog false
+LogFacility LOG_LOCAL6
+LogClean false
+LogVerbose true
+PidFile /var/run/clamav/clamd.pid
+DatabaseDirectory /var/lib/clamav
+SelfCheck 3600
+Foreground false
+Debug false
+ScanPE true
+ScanOLE2 true
+ScanHTML true
+DetectBrokenExecutables false
+ExitOnOOM false
+LeaveTemporaryFiles false
+AlgorithmicDetection true
+ScanELF true
+IdleTimeout 30
+PhishingSignatures true
+PhishingScanURLs true
+PhishingAlwaysBlockSSLMismatch false
+PhishingAlwaysBlockCloak false
+DetectPUA false
+ScanPartialMessages false
+HeuristicScanPrecedence false
+StructuredDataDetection false
+CommandReadTimeout 5
+SendBufTimeout 200
+MaxQueue 100
+ExtendedDetectionInfo true
+OLE2BlockMacros false
+StreamMaxLength 25M
+LogFile /var/log/clamav/clamav.log
+LogTime true
+LogFileUnlock false
+LogFileMaxSize 0
+Bytecode true
+BytecodeSecurity TrustSigned
+BytecodeTimeout 60000
+OfficialDatabaseOnly false
+CrossFilesystems true
diff --git a/install/ubuntu/18.04/deb_signing.key b/install/ubuntu/18.04/deb_signing.key
new file mode 100644
index 00000000..2ad2db8b
--- /dev/null
+++ b/install/ubuntu/18.04/deb_signing.key
@@ -0,0 +1,30 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.12 (GNU/Linux)
+
+mQENBFJIGbEBCAC8SHOOFo7iDTbnC2GhNZ+uBGCh226Dn1QPoFZNFM/DNakHZ6rD
+G3wzr8++eKz4fJual/VLllE2N9XDPuxbozb3LLkcyY1WzJqtIXbXhFGQ/SuIeT+x
+QY90XU6t2Ckze2c+zUniAWmJ8GSyVmXOoc9JxAQ1u47wvGXLzrjWXc8u8PNRYXuf
+fZplTL+dFu9P0d6lP8FGsV+r9wXvvazpRTz3+H8PKrGCYT55ZQIEdG9Jgamylto2
+oVPFXkwGML+TLw6oeCIBuz2y2vtivphW4MJ3ifQjDj7k3n+DTIxfDFs8lB6VRhhY
+2nMHCrcZC6U2mhmXmr6O4s1fu6irBVx05ejPABEBAAG0IFNlcmdoZXkgUm9kaW4g
+PHNraWRAdmVzdGFjcC5jb20+iQE4BBMBAgAiBQJSSBmxAhsDBgsJCAcDAgYVCAIJ
+CgsEFgIDAQIeAQIXgAAKCRBCxbITCh93FPdqB/93GjV9g+wBfeZYLHQK9MDU2wBb
+VloYOJJae6IvYKYQVAJayD3PbHdpxrF8s9e23vdnmb9jKu6jX6oV54EIyqP2HPiN
+QYc8wcea+eSHerznBixCtoQh8mtdWGFeN71zU/ig7L5qlOVF/EmxDVZTFUeivFxh
+IV6qyBnktQKktE45585yKZyyLtfGoXA54DGK69OtJFh+wdkKEMmUXocMl7wUrxW6
+Cx2CuKeEXEgvwu8mRHQi3S3T9XP456qWEn5dWyMVcP660IzEuZfSJApZusNK7zG3
+WMy0/EuX7xHNY3mcNxTOUN1LsO7iHnhHD9+iKWJo9parGkMZzc92MpjDK/g7uQEN
+BFJIGbEBCAC7k5QEA9WQM7E3ceNaeLMrA9lXfuzaNCcySq7ONdVAa5PxzbSKdHvz
+QFoL1VFqBTYQ038lbil1XqnoM0zvIfAI3LcpS8sq92El/vPxp6jZh2Ari9Uw7x95
+k2cZMgI67g+zQMGdjVRA155nFQRCgg000xU4F7JA6+WsuLlVUmccsDv7YWJExMtC
+YPxiuz5DFu8RALnw4Ckts+dbwsrcvUHhkm9b6RAsdCKjjRpUZjLgdltjH83gUVvt
+i1YmdjjsVpt95dtsaG+ad852g/Rk8EdxNMkjPF6HLA67CLADP9wYaj80yPcPtylS
+ycvPtcclVeHkFBRVM8xZpQd4iD19MWI1ABEBAAGJAR8EGAECAAkFAlJIGbECGwwA
+CgkQQsWyEwofdxQ7tQgAhB0FwTs7L8Qr63DHC2yAnXVxgtTAY1/36CccNXVculyR
++EkLcwahms9AKhz7eQb+Mud+5vH0GRohLp2npgO38CjVUfIP5d+Y6dsthmrkF6p8
+XdV1dVK9vWX+i/YZSw/Mded30Cq4P2Yhq9EaemMT0rtli8lz2NnkZ9dFJZk1lzJC
+CZmRpbjSNWqRU4f7qyh21lYk/OC/0XE8fh8CaO23TZ+6gBionoCztwb7NyC9OArN
+qYlNnbmh9iNqdblykPS3bkjf34n2xyMgnIehNrM89tk8PY4UfNPhgT1TMD9W3Svq
+ynNZvLuF/FIDwDeC1qcfjGbfDn9fXO/lMIIRooQYKQ==
+=J2HJ
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/install/ubuntu/18.04/dovecot/conf.d/10-auth.conf b/install/ubuntu/18.04/dovecot/conf.d/10-auth.conf
new file mode 100644
index 00000000..dfcc8311
--- /dev/null
+++ b/install/ubuntu/18.04/dovecot/conf.d/10-auth.conf
@@ -0,0 +1,4 @@
+disable_plaintext_auth = no
+auth_verbose = yes
+auth_mechanisms = plain login
+!include auth-passwdfile.conf.ext
diff --git a/install/ubuntu/18.04/dovecot/conf.d/10-logging.conf b/install/ubuntu/18.04/dovecot/conf.d/10-logging.conf
new file mode 100644
index 00000000..a5f207d5
--- /dev/null
+++ b/install/ubuntu/18.04/dovecot/conf.d/10-logging.conf
@@ -0,0 +1 @@
+log_path = /var/log/dovecot.log
diff --git a/install/ubuntu/18.04/dovecot/conf.d/10-mail.conf b/install/ubuntu/18.04/dovecot/conf.d/10-mail.conf
new file mode 100644
index 00000000..55313419
--- /dev/null
+++ b/install/ubuntu/18.04/dovecot/conf.d/10-mail.conf
@@ -0,0 +1,4 @@
+mail_privileged_group = mail
+mail_access_groups = mail
+mail_location = maildir:%h/mail/%d/%n
+pop3_uidl_format = %08Xu%08Xv
diff --git a/install/ubuntu/18.04/dovecot/conf.d/10-master.conf b/install/ubuntu/18.04/dovecot/conf.d/10-master.conf
new file mode 100644
index 00000000..a75a9aaa
--- /dev/null
+++ b/install/ubuntu/18.04/dovecot/conf.d/10-master.conf
@@ -0,0 +1,29 @@
+service imap-login {
+  inet_listener imap {
+  }
+  inet_listener imaps {
+  }
+}
+
+service pop3-login {
+  inet_listener pop3 {
+  }
+  inet_listener pop3s {
+  }
+}
+
+
+service imap {
+}
+
+service pop3 {
+}
+
+service auth {
+  unix_listener auth-client {
+    group = mail
+    mode = 0660
+    user = dovecot
+  }
+  user = dovecot
+}
diff --git a/install/ubuntu/18.04/dovecot/conf.d/10-ssl.conf b/install/ubuntu/18.04/dovecot/conf.d/10-ssl.conf
new file mode 100644
index 00000000..24cbf3e2
--- /dev/null
+++ b/install/ubuntu/18.04/dovecot/conf.d/10-ssl.conf
@@ -0,0 +1,5 @@
+ssl = yes
+ssl_protocols = !SSLv2 !SSLv3
+
+ssl_cert = </usr/local/vesta/ssl/certificate.crt
+ssl_key = </usr/local/vesta/ssl/certificate.key
diff --git a/install/ubuntu/18.04/dovecot/conf.d/20-imap.conf b/install/ubuntu/18.04/dovecot/conf.d/20-imap.conf
new file mode 100644
index 00000000..1a459f8e
--- /dev/null
+++ b/install/ubuntu/18.04/dovecot/conf.d/20-imap.conf
@@ -0,0 +1,58 @@
+##
+## IMAP specific settings
+##
+
+protocol imap {
+  # Maximum IMAP command line length. Some clients generate very long command
+  # lines with huge mailboxes, so you may need to raise this if you get
+  # "Too long argument" or "IMAP command line too large" errors often.
+  #imap_max_line_length = 64k
+
+  # Maximum number of IMAP connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  #mail_max_userip_connections = 10
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # IMAP logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #imap_logout_format = bytes=%i/%o
+
+  # Override the IMAP CAPABILITY response. If the value begins with '+',
+  # add the given capabilities on top of the defaults (e.g. +XFOO XBAR).
+  #imap_capability = 
+
+  # How long to wait between "OK Still here" notifications when client is
+  # IDLEing.
+  #imap_idle_notify_interval = 2 mins
+
+  # ID field names and values to send to clients. Using * as the value makes
+  # Dovecot use the default value. The following fields have default values
+  # currently: name, version, os, os-version, support-url, support-email.
+  #imap_id_send = 
+
+  # ID fields sent by client to log. * means everything.
+  #imap_id_log =
+
+  # Workarounds for various client bugs:
+  #   delay-newmail:
+  #     Send EXISTS/RECENT new mail notifications only when replying to NOOP
+  #     and CHECK commands. Some clients ignore them otherwise, for example OSX
+  #     Mail (<v2.1). Outlook Express breaks more badly though, without this it
+  #     may show user "Message no longer in server" errors. Note that OE6 still
+  #     breaks even with this workaround if synchronization is set to
+  #     "Headers Only".
+  #   tb-extra-mailbox-sep:
+  #     Thunderbird gets somehow confused with LAYOUT=fs (mbox and dbox) and
+  #     adds extra '/' suffixes to mailbox names. This option causes Dovecot to
+  #     ignore the extra '/' instead of treating it as invalid mailbox name.
+  #   tb-lsub-flags:
+  #     Show \Noselect flags for LSUB replies with LAYOUT=fs (e.g. mbox).
+  #     This makes Thunderbird realize they aren't selectable and show them
+  #     greyed out, instead of only later giving "not selectable" popup error.
+  #
+  # The list is space-separated.
+  #imap_client_workarounds = 
+}
diff --git a/install/ubuntu/18.04/dovecot/conf.d/20-pop3.conf b/install/ubuntu/18.04/dovecot/conf.d/20-pop3.conf
new file mode 100644
index 00000000..a3a43b88
--- /dev/null
+++ b/install/ubuntu/18.04/dovecot/conf.d/20-pop3.conf
@@ -0,0 +1,91 @@
+##
+## POP3 specific settings
+##
+
+protocol pop3 {
+  # Don't try to set mails non-recent or seen with POP3 sessions. This is
+  # mostly intended to reduce disk I/O. With maildir it doesn't move files
+  # from new/ to cur/, with mbox it doesn't write Status-header.
+  #pop3_no_flag_updates = no
+
+  # Support LAST command which exists in old POP3 specs, but has been removed
+  # from new ones. Some clients still wish to use this though. Enabling this
+  # makes RSET command clear all \Seen flags from messages.
+  #pop3_enable_last = no
+
+  # If mail has X-UIDL header, use it as the mail's UIDL.
+  #pop3_reuse_xuidl = no
+
+  # Keep the mailbox locked for the entire POP3 session.
+  #pop3_lock_session = no
+
+  # POP3 requires message sizes to be listed as if they had CR+LF linefeeds.
+  # Many POP3 servers violate this by returning the sizes with LF linefeeds,
+  # because it's faster to get. When this setting is enabled, Dovecot still
+  # tries to do the right thing first, but if that requires opening the
+  # message, it fallbacks to the easier (but incorrect) size.
+  #pop3_fast_size_lookups = no
+
+  # POP3 UIDL (unique mail identifier) format to use. You can use following
+  # variables, along with the variable modifiers described in
+  # doc/wiki/Variables.txt (e.g. %Uf for the filename in uppercase)
+  #
+  #  %v - Mailbox's IMAP UIDVALIDITY
+  #  %u - Mail's IMAP UID
+  #  %m - MD5 sum of the mailbox headers in hex (mbox only)
+  #  %f - filename (maildir only)
+  #  %g - Mail's GUID
+  #
+  # If you want UIDL compatibility with other POP3 servers, use:
+  #  UW's ipop3d         : %08Xv%08Xu
+  #  Courier             : %f or %v-%u (both might be used simultaneosly)
+  #  Cyrus (<= 2.1.3)    : %u
+  #  Cyrus (>= 2.1.4)    : %v.%u
+  #  Dovecot v0.99.x     : %v.%u
+  #  tpop3d              : %Mf
+  #
+  # Note that Outlook 2003 seems to have problems with %v.%u format which was
+  # Dovecot's default, so if you're building a new server it would be a good
+  # idea to change this. %08Xu%08Xv should be pretty fail-safe.
+  #
+  #pop3_uidl_format = %08Xu%08Xv
+
+  # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes
+  # won't change those UIDLs. Currently this works only with Maildir.
+  #pop3_save_uidl = no
+
+  # What to do about duplicate UIDLs if they exist?
+  #   allow: Show duplicates to clients.
+  #   rename: Append a temporary -2, -3, etc. counter after the UIDL.
+  #pop3_uidl_duplicates = allow
+
+  # POP3 logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #  %t - number of TOP commands
+  #  %p - number of bytes sent to client as a result of TOP command
+  #  %r - number of RETR commands
+  #  %b - number of bytes sent to client as a result of RETR command
+  #  %d - number of deleted messages
+  #  %m - number of messages (before deletion)
+  #  %s - mailbox size in bytes (before deletion)
+  #  %u - old/new UIDL hash. may help finding out if UIDLs changed unexpectedly
+  #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
+
+  # Maximum number of POP3 connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  #mail_max_userip_connections = 10
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # Workarounds for various client bugs:
+  #   outlook-no-nuls:
+  #     Outlook and Outlook Express hang if mails contain NUL characters.
+  #     This setting replaces them with 0x80 character.
+  #   oe-ns-eoh:
+  #     Outlook Express and Netscape Mail breaks if end of headers-line is
+  #     missing. This option simply sends it if it's missing.
+  # The list is space-separated.
+  #pop3_client_workarounds = 
+}
diff --git a/install/ubuntu/18.04/dovecot/conf.d/auth-passwdfile.conf.ext b/install/ubuntu/18.04/dovecot/conf.d/auth-passwdfile.conf.ext
new file mode 100644
index 00000000..75e6e115
--- /dev/null
+++ b/install/ubuntu/18.04/dovecot/conf.d/auth-passwdfile.conf.ext
@@ -0,0 +1,9 @@
+passdb {
+  driver = passwd-file
+  args = scheme=MD5-CRYPT username_format=%n /etc/exim4/domains/%d/passwd
+}
+
+userdb {
+  driver = passwd-file
+  args = username_format=%n /etc/exim4/domains/%d/passwd
+}
diff --git a/install/ubuntu/18.04/dovecot/dovecot.conf b/install/ubuntu/18.04/dovecot/dovecot.conf
new file mode 100644
index 00000000..311a3351
--- /dev/null
+++ b/install/ubuntu/18.04/dovecot/dovecot.conf
@@ -0,0 +1,24 @@
+protocols = imap pop3
+listen = *, ::
+base_dir = /var/run/dovecot/
+!include conf.d/*.conf
+
+namespace {
+    type = private
+    separator = /
+    prefix =
+    inbox = yes
+
+    mailbox Sent {
+        auto = subscribe
+        special_use = \Sent
+    }
+    mailbox Drafts {
+        auto = subscribe
+        special_use = \Drafts
+    }
+    mailbox Trash {
+        auto = subscribe
+        special_use = \Trash
+    }
+}
diff --git a/install/ubuntu/18.04/exim/dnsbl.conf b/install/ubuntu/18.04/exim/dnsbl.conf
new file mode 100644
index 00000000..5166b255
--- /dev/null
+++ b/install/ubuntu/18.04/exim/dnsbl.conf
@@ -0,0 +1,2 @@
+bl.spamcop.net
+zen.spamhaus.org
diff --git a/install/ubuntu/18.04/exim/exim4.conf.template b/install/ubuntu/18.04/exim/exim4.conf.template
new file mode 100644
index 00000000..fc346486
--- /dev/null
+++ b/install/ubuntu/18.04/exim/exim4.conf.template
@@ -0,0 +1,382 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+add_environment = <; PATH=/bin:/usr/bin
+keep_environment =
+disable_ipv6 = true
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/certificate.crt
+tls_privatekey = /usr/local/vesta/ssl/certificate.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 5s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lc:${domain:$h_from:}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+begin acl
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth required
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = *
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{1024K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = debian-spamd:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/$domain/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #helo_data = $sender_address_domain
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  from = "${local_part}@${domain}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################
diff --git a/install/ubuntu/18.04/exim/spam-blocks.conf b/install/ubuntu/18.04/exim/spam-blocks.conf
new file mode 100644
index 00000000..e69de29b
diff --git a/install/ubuntu/18.04/fail2ban/action.d/vesta.conf b/install/ubuntu/18.04/fail2ban/action.d/vesta.conf
new file mode 100644
index 00000000..0edfc349
--- /dev/null
+++ b/install/ubuntu/18.04/fail2ban/action.d/vesta.conf
@@ -0,0 +1,9 @@
+# Fail2Ban configuration file for vesta
+
+[Definition]
+
+actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
+actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
+actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
+actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
+actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>
diff --git a/install/ubuntu/18.04/fail2ban/filter.d/vesta.conf b/install/ubuntu/18.04/fail2ban/filter.d/vesta.conf
new file mode 100644
index 00000000..69670a56
--- /dev/null
+++ b/install/ubuntu/18.04/fail2ban/filter.d/vesta.conf
@@ -0,0 +1,10 @@
+# Fail2Ban filter for unsuccesfull Vesta authentication attempts
+#
+
+[INCLUDES]
+before = common.conf
+
+[Definition]
+failregex =  .* <HOST> failed to login
+ignoreregex =
+
diff --git a/install/ubuntu/18.04/fail2ban/jail.local b/install/ubuntu/18.04/fail2ban/jail.local
new file mode 100644
index 00000000..013f81c4
--- /dev/null
+++ b/install/ubuntu/18.04/fail2ban/jail.local
@@ -0,0 +1,51 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
+[ssh-iptables]
+enabled  = true
+filter   = sshd
+action   = vesta[name=SSH]
+logpath  = /var/log/auth.log
+maxretry = 5
+
+[vsftpd-iptables]
+enabled  = false
+filter   = vsftpd
+action   = vesta[name=FTP]
+logpath  = /var/log/vsftpd.log
+maxretry = 5
+
+[exim-iptables]
+enabled = true
+filter  = exim
+action  = vesta[name=MAIL]
+logpath = /var/log/exim4/mainlog
+maxretry = 5
+
+[dovecot-iptables]
+enabled = true
+filter  = dovecot
+action  = vesta[name=MAIL]
+logpath = /var/log/dovecot.log
+maxretry = 5
+
+[mysqld-iptables]
+enabled  = false
+filter   = mysqld-auth
+action   = vesta[name=DB]
+logpath  = /var/log/mysql.log
+maxretry = 5
+
+[vesta-iptables]
+enabled = true
+filter  = vesta
+action  = vesta[name=VESTA]
+logpath = /var/log/vesta/auth.log
+maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5
diff --git a/install/ubuntu/18.04/firewall/ports.conf b/install/ubuntu/18.04/firewall/ports.conf
new file mode 100644
index 00000000..b730d012
--- /dev/null
+++ b/install/ubuntu/18.04/firewall/ports.conf
@@ -0,0 +1,17 @@
+PROTOCOL='TCP' PORT='20'
+PROTOCOL='TCP' PORT='21'
+PROTOCOL='TCP' PORT='22'
+PROTOCOL='TCP' PORT='25'
+PROTOCOL='TCP' PORT='53'
+PROTOCOL='UDP' PORT='53'
+PROTOCOL='TCP' PORT='80'
+PROTOCOL='TCP' PORT='443'
+PROTOCOL='TCP' PORT='110'
+PROTOCOL='UDP' PORT='123'
+PROTOCOL='TCP' PORT='143'
+PROTOCOL='TCP' PORT='3306'
+PROTOCOL='TCP' PORT='5432'
+PROTOCOL='TCP' PORT='8080'
+PROTOCOL='TCP' PORT='8433'
+PROTOCOL='TCP' PORT='8083'
+PROTOCOL='TCP' PORT='12000:12100'
diff --git a/install/ubuntu/18.04/firewall/rules.conf b/install/ubuntu/18.04/firewall/rules.conf
new file mode 100644
index 00000000..fba98e1e
--- /dev/null
+++ b/install/ubuntu/18.04/firewall/rules.conf
@@ -0,0 +1,11 @@
+RULE='1' ACTION='ACCEPT' PROTOCOL='ICMP' PORT='0' IP='0.0.0.0/0' COMMENT='PING' SUSPENDED='no' TIME='17:13:48' DATE='2014-09-16'
+RULE='2' ACTION='ACCEPT' PROTOCOL='TCP' PORT='8083' IP='0.0.0.0/0' COMMENT='VESTA' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='3' ACTION='ACCEPT' PROTOCOL='TCP' PORT='3306,5432' IP='0.0.0.0/0' COMMENT='DB' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='4' ACTION='ACCEPT' PROTOCOL='TCP' PORT='143,993' IP='0.0.0.0/0' COMMENT='IMAP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='5' ACTION='ACCEPT' PROTOCOL='TCP' PORT='110,995' IP='0.0.0.0/0' COMMENT='POP3' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='6' ACTION='ACCEPT' PROTOCOL='TCP' PORT='25,465,587,2525' IP='0.0.0.0/0' COMMENT='SMTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='7' ACTION='ACCEPT' PROTOCOL='TCP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='8' ACTION='ACCEPT' PROTOCOL='UDP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='9' ACTION='ACCEPT' PROTOCOL='TCP' PORT='21,12000-12100' IP='0.0.0.0/0' COMMENT='FTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='10' ACTION='ACCEPT' PROTOCOL='TCP' PORT='80,443' IP='0.0.0.0/0' COMMENT='WEB' SUSPENDED='no' TIME='17:04:27' DATE='2014-09-24'
+RULE='11' ACTION='ACCEPT' PROTOCOL='TCP' PORT='22' IP='0.0.0.0/0' COMMENT='SSH' SUSPENDED='no' TIME='17:14:41' DATE='2014-09-16'
diff --git a/install/ubuntu/18.04/logrotate/apache2 b/install/ubuntu/18.04/logrotate/apache2
new file mode 100644
index 00000000..27629d0d
--- /dev/null
+++ b/install/ubuntu/18.04/logrotate/apache2
@@ -0,0 +1,19 @@
+/var/log/apache2/*.log /var/log/apache2/domains/*log {
+        weekly
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 root adm
+        sharedscripts
+        postrotate
+                /etc/init.d/apache2 reload > /dev/null || true
+                [ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+        prerotate
+                if [ -d /etc/logrotate.d/httpd-prerotate ]; then \
+                        run-parts /etc/logrotate.d/httpd-prerotate; \
+                fi; \
+        endscript
+}
diff --git a/install/ubuntu/18.04/logrotate/dovecot b/install/ubuntu/18.04/logrotate/dovecot
new file mode 100644
index 00000000..ac4fd6e9
--- /dev/null
+++ b/install/ubuntu/18.04/logrotate/dovecot
@@ -0,0 +1,12 @@
+/var/log/dovecot*.log {
+  weekly
+  rotate 4
+  missingok
+  notifempty
+  compress
+  delaycompress
+  sharedscripts
+  postrotate
+    doveadm log reopen
+  endscript
+}
diff --git a/install/ubuntu/18.04/logrotate/nginx b/install/ubuntu/18.04/logrotate/nginx
new file mode 100644
index 00000000..d667f213
--- /dev/null
+++ b/install/ubuntu/18.04/logrotate/nginx
@@ -0,0 +1,13 @@
+/var/log/nginx/*log /var/log/nginx/domains/*log {
+        daily
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 nginx adm
+        sharedscripts
+        postrotate
+                [ -f /var/run/nginx.pid ] && kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+}
diff --git a/install/ubuntu/18.04/logrotate/vesta b/install/ubuntu/18.04/logrotate/vesta
new file mode 100644
index 00000000..027a3439
--- /dev/null
+++ b/install/ubuntu/18.04/logrotate/vesta
@@ -0,0 +1,7 @@
+/usr/local/vesta/log/*.log {
+    missingok
+    notifempty
+    size 30k
+    yearly
+    create 0600 root root
+}
diff --git a/install/ubuntu/18.04/mysql/my-large.cnf b/install/ubuntu/18.04/mysql/my-large.cnf
new file mode 100644
index 00000000..7201377c
--- /dev/null
+++ b/install/ubuntu/18.04/mysql/my-large.cnf
@@ -0,0 +1,41 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 256M
+max_allowed_packet = 32M
+table_open_cache = 256
+sort_buffer_size = 1M
+read_buffer_size = 1M
+read_rnd_buffer_size = 4M
+myisam_sort_buffer_size = 64M
+thread_cache_size = 8
+query_cache_size= 16M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=200
+max_user_connections=50
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/ubuntu/18.04/mysql/my-medium.cnf b/install/ubuntu/18.04/mysql/my-medium.cnf
new file mode 100644
index 00000000..1c10ab9a
--- /dev/null
+++ b/install/ubuntu/18.04/mysql/my-medium.cnf
@@ -0,0 +1,40 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+  
+skip-external-locking
+key_buffer_size = 16M
+max_allowed_packet = 16M
+table_open_cache = 64
+sort_buffer_size = 512K
+net_buffer_length = 8K
+read_buffer_size = 256K
+read_rnd_buffer_size = 512K
+myisam_sort_buffer_size = 8M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=70
+max_user_connections=30
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/ubuntu/18.04/mysql/my-small.cnf b/install/ubuntu/18.04/mysql/my-small.cnf
new file mode 100644
index 00000000..26a80478
--- /dev/null
+++ b/install/ubuntu/18.04/mysql/my-small.cnf
@@ -0,0 +1,40 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 16K
+max_allowed_packet = 1M
+table_open_cache = 4
+sort_buffer_size = 64K
+read_buffer_size = 256K
+read_rnd_buffer_size = 256K
+net_buffer_length = 2K
+thread_stack = 240K
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=30
+max_user_connections=20
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/ubuntu/18.04/nginx/nginx.conf b/install/ubuntu/18.04/nginx/nginx.conf
new file mode 100644
index 00000000..e7256de7
--- /dev/null
+++ b/install/ubuntu/18.04/nginx/nginx.conf
@@ -0,0 +1,136 @@
+# Server globals
+user                    www-data;
+worker_processes        auto;
+worker_rlimit_nofile    65535;
+error_log               /var/log/nginx/error.log crit;
+pid                     /var/run/nginx.pid;
+
+
+# Worker config
+events {
+        worker_connections  1024;
+        use                 epoll;
+        multi_accept        on;
+}
+
+
+http {
+    # Main settings
+    sendfile                        on;
+    tcp_nopush                      on;
+    tcp_nodelay                     on;
+    client_header_timeout           1m;
+    client_body_timeout             1m;
+    client_header_buffer_size       2k;
+    client_body_buffer_size         256k;
+    client_max_body_size            256m;
+    large_client_header_buffers     4   8k;
+    send_timeout                    30;
+    keepalive_timeout               60 60;
+    reset_timedout_connection       on;
+    server_tokens                   off;
+    server_name_in_redirect         off;
+    server_names_hash_max_size      512;
+    server_names_hash_bucket_size   512;
+
+
+    # Log format
+    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
+                        '"$status" $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  bytes   '$body_bytes_sent';
+    #access_log          /var/log/nginx/access.log main;
+    access_log off;
+
+
+    # Mime settings
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+
+    # Compression
+    gzip                on;
+    gzip_comp_level     9;
+    gzip_min_length     512;
+    gzip_buffers        8 64k;
+    gzip_types          text/plain text/css text/javascript text/js text/xml application/json application/javascript application/x-javascript application/xml application/xml+rss application/x-font-ttf image/svg+xml font/opentype;
+    gzip_proxied        any;
+    gzip_disable        "MSIE [1-6]\.";
+
+    # Proxy settings
+    proxy_redirect      off;
+    proxy_set_header    Host            $host;
+    proxy_set_header    X-Real-IP       $remote_addr;
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_header   Set-Cookie;
+    proxy_connect_timeout   90;
+    proxy_send_timeout  90;
+    proxy_read_timeout  90;
+    proxy_buffers       32 4k;
+
+
+    # Cloudflare https://www.cloudflare.com/ips
+    set_real_ip_from   103.21.244.0/22;
+    set_real_ip_from   103.22.200.0/22;
+    set_real_ip_from   103.31.4.0/22;
+    set_real_ip_from   104.16.0.0/12;
+    set_real_ip_from   108.162.192.0/18;
+    set_real_ip_from   131.0.72.0/22;
+    set_real_ip_from   141.101.64.0/18;
+    set_real_ip_from   162.158.0.0/15;
+    set_real_ip_from   172.64.0.0/13;
+    set_real_ip_from   173.245.48.0/20;
+    set_real_ip_from   188.114.96.0/20;
+    set_real_ip_from   190.93.240.0/20;
+    set_real_ip_from   197.234.240.0/22;
+    set_real_ip_from   198.41.128.0/17;
+    #set_real_ip_from   2400:cb00::/32;
+    #set_real_ip_from   2606:4700::/32;
+    #set_real_ip_from   2803:f800::/32;
+    #set_real_ip_from   2405:b500::/32;
+    #set_real_ip_from   2405:8100::/32;
+    #set_real_ip_from   2c0f:f248::/32;
+    #set_real_ip_from   2a06:98c0::/29;
+    real_ip_header     CF-Connecting-IP;
+
+
+    # SSL PCI Compliance
+    ssl_session_cache   shared:SSL:10m;
+    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
+
+
+    # Error pages
+    error_page          403          /error/403.html;
+    error_page          404          /error/404.html;
+    error_page          502 503 504  /error/50x.html;
+
+
+    # Cache settings
+    proxy_cache_path /var/cache/nginx levels=2 keys_zone=cache:10m inactive=60m max_size=1024m;
+    proxy_cache_key "$host$request_uri $cookie_user";
+    proxy_temp_path  /var/cache/nginx/temp;
+    proxy_ignore_headers Expires Cache-Control;
+    proxy_cache_use_stale error timeout invalid_header http_502;
+    proxy_cache_valid any 1d;
+
+
+    # Cache bypass
+    map $http_cookie $no_cache {
+        default 0;
+        ~SESS 1;
+        ~wordpress_logged_in 1;
+    }
+
+
+    # File cache settings
+    open_file_cache          max=10000 inactive=30s;
+    open_file_cache_valid    60s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors   off;
+
+
+    # Wildcard include
+    include             /etc/nginx/conf.d/*.conf;
+}
diff --git a/install/ubuntu/18.04/nginx/phpmyadmin.inc b/install/ubuntu/18.04/nginx/phpmyadmin.inc
new file mode 100644
index 00000000..1feb8546
--- /dev/null
+++ b/install/ubuntu/18.04/nginx/phpmyadmin.inc
@@ -0,0 +1,18 @@
+location /phpmyadmin {
+    alias /usr/share/phpmyadmin/;
+
+    location ~ /(libraries|setup) {
+        return 404;
+    }
+
+    location ~ ^/phpmyadmin/(.*\.php)$ {
+        alias /usr/share/phpmyadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+    location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
+        root /usr/share/;
+    }
+}
diff --git a/install/ubuntu/18.04/nginx/phppgadmin.inc b/install/ubuntu/18.04/nginx/phppgadmin.inc
new file mode 100644
index 00000000..cd1e5806
--- /dev/null
+++ b/install/ubuntu/18.04/nginx/phppgadmin.inc
@@ -0,0 +1,11 @@
+location /phppgadmin {
+    alias /usr/share/phppgadmin/;
+
+    location ~ ^/phppgadmin/(.*\.php)$ {
+        alias /usr/share/phppgadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/ubuntu/18.04/nginx/status.conf b/install/ubuntu/18.04/nginx/status.conf
new file mode 100644
index 00000000..c0bcd069
--- /dev/null
+++ b/install/ubuntu/18.04/nginx/status.conf
@@ -0,0 +1,9 @@
+server {
+    listen       127.0.0.1:8084 default;
+    server_name  _;
+    server_name_in_redirect  off;
+    location / {
+        stub_status on;
+        access_log   off;
+   }
+}
diff --git a/install/ubuntu/18.04/nginx/webmail.inc b/install/ubuntu/18.04/nginx/webmail.inc
new file mode 100644
index 00000000..ad66895b
--- /dev/null
+++ b/install/ubuntu/18.04/nginx/webmail.inc
@@ -0,0 +1,15 @@
+location /webmail {
+    alias /var/lib/roundcube/;
+
+    location ~ /(config|temp|logs) {
+        return 404;
+    }
+
+    location ~ ^/webmail/(.*\.php)$ {
+        alias /var/lib/roundcube/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/ubuntu/18.04/packages/default.pkg b/install/ubuntu/18.04/packages/default.pkg
new file mode 100644
index 00000000..c2a93574
--- /dev/null
+++ b/install/ubuntu/18.04/packages/default.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='100'
+WEB_ALIASES='100'
+DNS_DOMAINS='100'
+DNS_RECORDS='100'
+MAIL_DOMAINS='100'
+MAIL_ACCOUNTS='100'
+DATABASES='100'
+CRON_JOBS='100'
+DISK_QUOTA='unlimited'
+BANDWIDTH='100000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='3'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/18.04/packages/gainsboro.pkg b/install/ubuntu/18.04/packages/gainsboro.pkg
new file mode 100644
index 00000000..76d7dae2
--- /dev/null
+++ b/install/ubuntu/18.04/packages/gainsboro.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='10'
+WEB_ALIASES='10'
+DNS_DOMAINS='10'
+DNS_RECORDS='10'
+MAIL_DOMAINS='10'
+MAIL_ACCOUNTS='10'
+DATABASES='10'
+CRON_JOBS='10'
+DISK_QUOTA='10000'
+BANDWIDTH='10000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='1'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/18.04/packages/palegreen.pkg b/install/ubuntu/18.04/packages/palegreen.pkg
new file mode 100644
index 00000000..3db5fe57
--- /dev/null
+++ b/install/ubuntu/18.04/packages/palegreen.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='hosting'
+PROXY_TEMPLATE='hosting'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='50'
+WEB_ALIASES='50'
+DNS_DOMAINS='50'
+DNS_RECORDS='50'
+MAIL_DOMAINS='50'
+MAIL_ACCOUNTS='50'
+DATABASES='50'
+CRON_JOBS='50'
+DISK_QUOTA='50000'
+BANDWIDTH='50000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='5'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/18.04/packages/slategrey.pkg b/install/ubuntu/18.04/packages/slategrey.pkg
new file mode 100644
index 00000000..d89e796f
--- /dev/null
+++ b/install/ubuntu/18.04/packages/slategrey.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='100'
+WEB_ALIASES='100'
+DNS_DOMAINS='100'
+DNS_RECORDS='100'
+MAIL_DOMAINS='100'
+MAIL_ACCOUNTS='100'
+DATABASES='100'
+CRON_JOBS='100'
+DISK_QUOTA='10000'
+BANDWIDTH='100000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='3'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/18.04/pga/config.inc.php b/install/ubuntu/18.04/pga/config.inc.php
new file mode 100644
index 00000000..1eec9776
--- /dev/null
+++ b/install/ubuntu/18.04/pga/config.inc.php
@@ -0,0 +1,159 @@
+<?php
+
+    /**
+     * Central phpPgAdmin configuration.  As a user you may modify the
+     * settings here for your particular configuration.
+     *
+     * $Id: config.inc.php-dist,v 1.55 2008/02/18 21:10:31 xzilla Exp $
+     */
+
+    // An example server.  Create as many of these as you wish,
+    // indexed from zero upwards.
+
+    // Display name for the server on the login screen
+    $conf['servers'][0]['desc'] = 'PostgreSQL';
+
+    // Hostname or IP address for server.  Use '' for UNIX domain socket.
+    // use 'localhost' for TCP/IP connection on this computer
+    $conf['servers'][0]['host'] = 'localhost';
+
+    // Database port on server (5432 is the PostgreSQL default)
+    $conf['servers'][0]['port'] = 5432;
+
+    // Database SSL mode
+    // Possible options: disable, allow, prefer, require
+    // To require SSL on older servers use option: legacy
+    // To ignore the SSL mode, use option: unspecified
+    $conf['servers'][0]['sslmode'] = 'allow';
+
+    // Change the default database only if you cannot connect to template1.
+    // For a PostgreSQL 8.1+ server, you can set this to 'postgres'.
+    $conf['servers'][0]['defaultdb'] = 'template1';
+
+    // Specify the path to the database dump utilities for this server.
+    // You can set these to '' if no dumper is available.
+    $conf['servers'][0]['pg_dump_path'] = '/usr/bin/pg_dump';
+    $conf['servers'][0]['pg_dumpall_path'] = '/usr/bin/pg_dumpall';
+
+    // Slony (www.slony.info) support?
+    $conf['servers'][0]['slony_support'] = false;
+    // Specify the path to the Slony SQL scripts (where slony1_base.sql is located, etc.)
+    // No trailing slash.
+    $conf['servers'][0]['slony_sql'] = '/usr/share/pgsql';
+
+    // Example for a second server (PostgreSQL for Windows)
+    //$conf['servers'][1]['desc'] = 'Test Server';
+    //$conf['servers'][1]['host'] = '127.0.0.1';
+    //$conf['servers'][1]['port'] = 5432;
+    //$conf['servers'][1]['sslmode'] = 'allow';
+    //$conf['servers'][1]['defaultdb'] = 'template1';
+    //$conf['servers'][1]['pg_dump_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dump.exe';
+    //$conf['servers'][1]['pg_dumpall_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dumpall.exe';
+    //$conf['servers'][1]['slony_support'] = false;
+    //$conf['servers'][1]['slony_sql'] = 'C:\\Program Files\\PostgreSQL\\8.0\\share';
+
+
+    // Example of groups definition.
+    // Groups allow administrators to logicaly group servers together under group nodes in the left browser tree
+    //
+    // The group '0' description
+    //$conf['srv_groups'][0]['desc'] = 'group one';
+    //
+    // Add here servers indexes belonging to the group '0' seperated by comma
+    //$conf['srv_groups'][0]['servers'] = '0,1,2'; 
+    //
+    // A server can belong to multi groups
+    //$conf['srv_groups'][1]['desc'] = 'group two';
+    //$conf['srv_groups'][1]['servers'] = '3,1';
+
+
+    // Default language. E.g.: 'english', 'polish', etc.  See lang/ directory
+    // for all possibilities. If you specify 'auto' (the default) it will use 
+    // your browser preference.
+    $conf['default_lang'] = 'auto';
+
+    // AutoComplete uses AJAX interaction to list foreign key values 
+    // on insert fields. It currently only works on single column 
+    // foreign keys. You can choose one of the following values:
+    // 'default on' enables AutoComplete and turns it on by default.
+    // 'default off' enables AutoComplete but turns it off by default.
+    // 'disable' disables AutoComplete.
+    $conf['autocomplete'] = 'default on';
+
+    // If extra login security is true, then logins via phpPgAdmin with no
+    // password or certain usernames (pgsql, postgres, root, administrator)
+    // will be denied. Only set this false once you have read the FAQ and
+    // understand how to change PostgreSQL's pg_hba.conf to enable
+    // passworded local connections.
+    $conf['extra_login_security'] = true;
+
+    // Only show owned databases?
+    // Note: This will simply hide other databases in the list - this does
+    // not in any way prevent your users from seeing other database by
+    // other means. (e.g. Run 'SELECT * FROM pg_database' in the SQL area.)
+    $conf['owned_only'] = false;
+
+    // Display comments on objects?  Comments are a good way of documenting
+    // a database, but they do take up space in the interface.
+    $conf['show_comments'] = true;
+
+    // Display "advanced" objects? Setting this to true will show 
+    // aggregates, types, operators, operator classes, conversions, 
+    // languages and casts in phpPgAdmin. These objects are rarely 
+    // administered and can clutter the interface.
+    $conf['show_advanced'] = false;
+
+    // Display "system" objects?
+    $conf['show_system'] = false;
+
+    // Display reports feature?  For this feature to work, you must
+    // install the reports database as explained in the INSTALL file.
+    $conf['show_reports'] = true;
+
+    // Database and table for reports
+    $conf['reports_db'] = 'phppgadmin';
+    $conf['reports_schema'] = 'public';
+    $conf['reports_table'] = 'ppa_reports';
+
+    // Only show owned reports?
+    // Note: This does not prevent people from accessing other reports by
+    // other means.
+    $conf['owned_reports_only'] = false;
+
+    // Minimum length users can set their password to.
+    $conf['min_password_length'] = 1;
+
+    // Width of the left frame in pixels (object browser)
+    $conf['left_width'] = 200;
+
+    // Which look & feel theme to use
+    $conf['theme'] = 'default';
+
+    // Show OIDs when browsing tables?
+    $conf['show_oids'] = false;
+
+    // Max rows to show on a page when browsing record sets
+    $conf['max_rows'] = 30;
+
+    // Max chars of each field to display by default in browse mode
+    $conf['max_chars'] = 50;
+
+    // Send XHTML strict headers?
+    $conf['use_xhtml_strict'] = false;
+
+    // Base URL for PostgreSQL documentation.
+    // '%s', if present, will be replaced with the PostgreSQL version
+    // (e.g. 8.4 )
+    $conf['help_base'] = 'http://www.postgresql.org/docs/%s/interactive/';
+
+    // Configuration for ajax scripts
+    // Time in seconds. If set to 0, refreshing data using ajax will be disabled (locks and activity pages)
+    $conf['ajax_refresh'] = 3;
+
+    /*****************************************
+     * Don't modify anything below this line *
+     *****************************************/
+
+    $conf['version'] = 19;
+
+?>
diff --git a/install/ubuntu/18.04/pga/phppgadmin.conf b/install/ubuntu/18.04/pga/phppgadmin.conf
new file mode 100644
index 00000000..f39247d6
--- /dev/null
+++ b/install/ubuntu/18.04/pga/phppgadmin.conf
@@ -0,0 +1,31 @@
+Alias /phppgadmin /usr/share/phppgadmin
+
+<Directory /usr/share/phppgadmin>
+
+DirectoryIndex index.php
+AllowOverride None
+
+order deny,allow
+deny from all
+allow from 127.0.0.0/255.0.0.0 ::1/128
+allow from all
+
+<IfModule mod_php5.c>
+  php_flag magic_quotes_gpc Off
+  php_flag track_vars On
+  php_value include_path .
+</IfModule>
+<IfModule !mod_php5.c>
+  <IfModule mod_actions.c>
+    <IfModule mod_cgi.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+    <IfModule mod_cgid.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+  </IfModule>
+</IfModule>
+
+</Directory>
diff --git a/install/ubuntu/18.04/php-fpm/www.conf b/install/ubuntu/18.04/php-fpm/www.conf
new file mode 100644
index 00000000..3c87f33c
--- /dev/null
+++ b/install/ubuntu/18.04/php-fpm/www.conf
@@ -0,0 +1,11 @@
+[www]
+listen = 127.0.0.1:9000
+listen.allowed_clients = 127.0.0.1
+
+user = www-data
+group = www-data
+
+pm = ondemand
+pm.max_children = 2
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
diff --git a/install/ubuntu/18.04/pma/apache.conf b/install/ubuntu/18.04/pma/apache.conf
new file mode 100644
index 00000000..4da6ce84
--- /dev/null
+++ b/install/ubuntu/18.04/pma/apache.conf
@@ -0,0 +1,42 @@
+# phpMyAdmin default Apache configuration
+
+Alias /phpmyadmin /usr/share/phpmyadmin
+
+<Directory /usr/share/phpmyadmin>
+	Options FollowSymLinks
+	DirectoryIndex index.php
+
+	<IfModule mod_php5.c>
+		AddType application/x-httpd-php .php
+
+		php_flag magic_quotes_gpc Off
+		php_flag track_vars On
+		php_flag register_globals Off
+		php_admin_flag allow_url_fopen Off
+		php_value include_path .
+		php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp
+		php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/:/usr/share/php/php-gettext:/usr/share/javascript/
+	</IfModule>
+
+</Directory>
+
+# Authorize for setup
+<Directory /usr/share/phpmyadmin/setup>
+    <IfModule mod_authn_file.c>
+    AuthType Basic
+    AuthName "phpMyAdmin Setup"
+    AuthUserFile /etc/phpmyadmin/htpasswd.setup
+    </IfModule>
+    Require valid-user
+</Directory>
+
+# Disallow web access to directories that don't need it
+<Directory /usr/share/phpmyadmin/libraries>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+<Directory /usr/share/phpmyadmin/setup/lib>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+
diff --git a/install/ubuntu/18.04/pma/config.inc.php b/install/ubuntu/18.04/pma/config.inc.php
new file mode 100644
index 00000000..a643a065
--- /dev/null
+++ b/install/ubuntu/18.04/pma/config.inc.php
@@ -0,0 +1,146 @@
+<?php
+/**
+ * Debian local configuration file
+ *
+ * This file overrides the settings made by phpMyAdmin interactive setup
+ * utility.
+ *
+ * For example configuration see
+ *   /usr/share/doc/phpmyadmin/examples/config.sample.inc.php
+ * or
+ *   /usr/share/doc/phpmyadmin/examples/config.manyhosts.inc.php
+ *
+ * NOTE: do not add security sensitive data to this file (like passwords)
+ * unless you really know what you're doing. If you do, any user that can
+ * run PHP or CGI on your webserver will be able to read them. If you still
+ * want to do this, make sure to properly secure the access to this file
+ * (also on the filesystem level).
+ */
+
+function check_file_access($path)
+{
+    if (is_readable($path)) {
+        return true;
+    } else {
+        error_log(
+            'phpmyadmin: Failed to load ' . $path
+            . ' Check group www-data has read access and open_basedir restrictions.'
+        );
+        return false;
+    }
+}
+
+// Load secret generated on postinst
+if (check_file_access('/var/lib/phpmyadmin/blowfish_secret.inc.php')) {
+    require('/var/lib/phpmyadmin/blowfish_secret.inc.php');
+}
+
+// Load autoconf local config
+if (check_file_access('/var/lib/phpmyadmin/config.inc.php')) {
+    require('/var/lib/phpmyadmin/config.inc.php');
+}
+
+/**
+ * Server(s) configuration
+ */
+$i = 0;
+// The $cfg['Servers'] array starts with $cfg['Servers'][1].  Do not use $cfg['Servers'][0].
+// You can disable a server config entry by setting host to ''.
+$i++;
+
+/**
+ * Read configuration from dbconfig-common
+ * You can regenerate it using: dpkg-reconfigure -plow phpmyadmin
+ */
+if (check_file_access('/etc/phpmyadmin/config-db.php')) {
+    require('/etc/phpmyadmin/config-db.php');
+}
+
+/* Configure according to dbconfig-common if enabled */
+if (!empty($dbname)) {
+    /* Authentication type */
+    $cfg['Servers'][$i]['auth_type'] = 'cookie';
+    /* Server parameters */
+    if (empty($dbserver)) $dbserver = 'localhost';
+    $cfg['Servers'][$i]['host'] = $dbserver;
+
+    if (!empty($dbport) || $dbserver != 'localhost') {
+        $cfg['Servers'][$i]['connect_type'] = 'tcp';
+        $cfg['Servers'][$i]['port'] = $dbport;
+    }
+    //$cfg['Servers'][$i]['compress'] = false;
+    /* Select mysqli if your server has it */
+    $cfg['Servers'][$i]['extension'] = 'mysqli';
+    /* Optional: User for advanced features */
+    $cfg['Servers'][$i]['controluser'] = $dbuser;
+    $cfg['Servers'][$i]['controlpass'] = $dbpass;
+    /* Optional: Advanced phpMyAdmin features */
+    $cfg['Servers'][$i]['pmadb'] = $dbname;
+    $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+    $cfg['Servers'][$i]['relation'] = 'pma_relation';
+    $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+    $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+    $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+    $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+    $cfg['Servers'][$i]['history'] = 'pma_history';
+    $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+    $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+    $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+    $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+    $cfg['Servers'][$i]['recent'] = 'pma_recent';
+
+    /* Uncomment the following to enable logging in to passwordless accounts,
+     * after taking note of the associated security risks. */
+    // $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+    /* Advance to next server for rest of config */
+    $i++;
+}
+
+/* Authentication type */
+//$cfg['Servers'][$i]['auth_type'] = 'cookie';
+/* Server parameters */
+//$cfg['Servers'][$i]['host'] = 'localhost';
+//$cfg['Servers'][$i]['connect_type'] = 'tcp';
+//$cfg['Servers'][$i]['compress'] = false;
+/* Select mysqli if your server has it */
+//$cfg['Servers'][$i]['extension'] = 'mysql';
+/* Optional: User for advanced features */
+// $cfg['Servers'][$i]['controluser'] = 'pma';
+// $cfg['Servers'][$i]['controlpass'] = 'pmapass';
+
+/* Storage database and tables */
+// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
+// $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+// $cfg['Servers'][$i]['relation'] = 'pma_relation';
+// $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+// $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+// $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+// $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+// $cfg['Servers'][$i]['history'] = 'pma_history';
+// $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+// $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+// $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+// $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+// $cfg['Servers'][$i]['recent'] = 'pma_recent';
+/* Uncomment the following to enable logging in to passwordless accounts,
+ * after taking note of the associated security risks. */
+// $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+/*
+ * End of servers configuration
+ */
+
+/*
+ * Directories for saving/loading files from server
+ */
+$cfg['UploadDir'] = '';
+$cfg['SaveDir'] = '';
+
+/* Support additional configurations */
+foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
+{
+    include($filename);
+}
+
+
diff --git a/install/ubuntu/18.04/postgresql/pg_hba.conf b/install/ubuntu/18.04/postgresql/pg_hba.conf
new file mode 100644
index 00000000..1ba43941
--- /dev/null
+++ b/install/ubuntu/18.04/postgresql/pg_hba.conf
@@ -0,0 +1,11 @@
+# "local" is for Unix domain socket connections only
+local   all         all                               ident
+
+# IPv4 local connections:
+host    all         all         127.0.0.1/32          md5
+
+# IPv6 local connections:
+host    all         all         ::1/128               md5
+
+# Others
+host    all         all         0.0.0.0/0             md5
diff --git a/install/ubuntu/18.04/proftpd/proftpd.conf b/install/ubuntu/18.04/proftpd/proftpd.conf
new file mode 100644
index 00000000..69ec6b2e
--- /dev/null
+++ b/install/ubuntu/18.04/proftpd/proftpd.conf
@@ -0,0 +1,32 @@
+ServerName                      "FTP"
+ServerIdent                     on "FTP Server ready."
+ServerAdmin                     root@localhost
+DefaultServer                   on
+DefaultRoot                  ~ !adm
+
+<IfModule mod_vroot.c>
+    VRootEngine                 on
+    VRootAlias                  /etc/security/pam_env.conf etc/security/pam_env.conf
+</IfModule>
+
+AuthPAMConfig                   proftpd
+AuthOrder                       mod_auth_pam.c* mod_auth_unix.c
+UseReverseDNS                   off
+User                            proftpd
+Group                           nogroup
+MaxInstances                    20
+UseSendfile                     off
+LogFormat                       default "%h %l %u %t \"%r\" %s %b"
+LogFormat                       auth    "%v [%P] %h %t \"%r\" %s"
+ListOptions                     -a
+RequireValidShell               off
+PassivePorts                    12000 12100
+
+<Global>
+  Umask                         002
+  IdentLookups                  off
+  AllowOverwrite                yes
+  <Limit ALL SITE_CHMOD>
+    AllowAll
+  </Limit>
+</Global>
diff --git a/install/ubuntu/18.04/roundcube/apache.conf b/install/ubuntu/18.04/roundcube/apache.conf
new file mode 100644
index 00000000..a0c87bcc
--- /dev/null
+++ b/install/ubuntu/18.04/roundcube/apache.conf
@@ -0,0 +1,40 @@
+Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/
+Alias /roundcube /var/lib/roundcube
+Alias /webmail /var/lib/roundcube
+
+# Access to tinymce files
+<Directory "/usr/share/tinymce/www/">
+      Options Indexes MultiViews FollowSymLinks
+      AllowOverride None
+      Order allow,deny
+      allow from all
+</Directory>
+
+<Directory /var/lib/roundcube/>
+  Options +FollowSymLinks
+  # This is needed to parse /var/lib/roundcube/.htaccess. See its
+  # content before setting AllowOverride to None.
+  AllowOverride All
+  order allow,deny
+  allow from all
+</Directory>
+
+# Protecting basic directories:
+<Directory /var/lib/roundcube/config>
+        Options -FollowSymLinks
+        AllowOverride None
+</Directory>
+
+<Directory /var/lib/roundcube/temp>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
+
+<Directory /var/lib/roundcube/logs>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
diff --git a/install/ubuntu/18.04/roundcube/config.inc.php b/install/ubuntu/18.04/roundcube/config.inc.php
new file mode 100644
index 00000000..0c82b1bc
--- /dev/null
+++ b/install/ubuntu/18.04/roundcube/config.inc.php
@@ -0,0 +1,33 @@
+<?php
+
+// Password Plugin options
+// -----------------------
+// A driver to use for password change. Default: "sql".
+// See README file for list of supported driver names.
+$rcmail_config['password_driver'] = 'vesta';
+
+// Require the new password to be a certain length.
+// set to blank to allow passwords of any length
+$rcmail_config['password_minimum_length'] = 6;
+
+// Require the new password to contain a letter and punctuation character
+// Change to false to remove this check.
+$rcmail_config['password_require_nonalpha'] = false;
+
+// Enables logging of password changes into logs/password
+$rcmail_config['password_log'] = false;
+
+// Comma-separated list of login exceptions for which password change
+// will be not available (no Password tab in Settings)
+$rcmail_config['password_login_exceptions'] = null;
+
+
+// By default domains in variables are using unicode.
+// Enable this option to use punycoded names
+$rcmail_config['password_idn_ascii'] = false;
+
+// Vesta Driver options
+// -----------------------
+// Control Panel host
+$rcmail_config['password_vesta_host'] = 'localhost';
+$rcmail_config['password_vesta_port'] = '8083';
diff --git a/install/ubuntu/18.04/roundcube/db.inc.php b/install/ubuntu/18.04/roundcube/db.inc.php
new file mode 100644
index 00000000..5268a309
--- /dev/null
+++ b/install/ubuntu/18.04/roundcube/db.inc.php
@@ -0,0 +1,66 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Configuration file for database access                                |
+ |                                                                       |
+ | This file is part of the RoundCube Webmail client                     |
+ | Copyright (C) 2005-2008, RoundCube Dev. - Switzerland                 |
+ | Licensed under the GNU GPL                                            |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// PEAR database DSN for read/write operations
+// format is db_provider://user:password@host/database 
+
+$rcmail_config['db_dsnw'] = 'mysql://roundcube:%password%@localhost/roundcube';
+// postgres example: 'pgsql://roundcube:pass@localhost/roundcubemail';
+
+// PEAR database DSN for read only operations (if empty write database will be used)
+// useful for database replication
+$rcmail_config['db_dsnr'] = '';
+
+// database backend to use (only db or mdb2 are supported)
+//$rcmail_config['db_backend'] = 'mdb2';
+
+// maximum length of a query in bytes
+$rcmail_config['db_max_length'] = 512000;  // 500K
+
+// use persistent db-connections
+// beware this will not "always" work as expected
+// see: http://www.php.net/manual/en/features.persistent-connections.php
+$rcmail_config['db_persistent'] = FALSE;
+
+
+// you can define specific table names used to store webmail data
+$rcmail_config['db_table_users'] = 'users';
+
+$rcmail_config['db_table_identities'] = 'identities';
+
+$rcmail_config['db_table_contacts'] = 'contacts';
+
+$rcmail_config['db_table_session'] = 'session';
+
+$rcmail_config['db_table_cache'] = 'cache';
+
+$rcmail_config['db_table_messages'] = 'messages';
+
+
+// you can define specific sequence names used in PostgreSQL
+$rcmail_config['db_sequence_users'] = 'user_ids';
+
+$rcmail_config['db_sequence_identities'] = 'identity_ids';
+
+$rcmail_config['db_sequence_contacts'] = 'contact_ids';
+
+$rcmail_config['db_sequence_cache'] = 'cache_ids';
+
+$rcmail_config['db_sequence_messages'] = 'message_ids';
+
+
+// end db config file
+?>
diff --git a/install/ubuntu/18.04/roundcube/main.inc.php b/install/ubuntu/18.04/roundcube/main.inc.php
new file mode 100644
index 00000000..44b19793
--- /dev/null
+++ b/install/ubuntu/18.04/roundcube/main.inc.php
@@ -0,0 +1,850 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Main configuration file                                               |
+ |                                                                       |
+ | This file is part of the Roundcube Webmail client                     |
+ | Copyright (C) 2005-2011, The Roundcube Dev Team                       |
+ |                                                                       |
+ | Licensed under the GNU General Public License version 3 or            |
+ | any later version with exceptions for skins & plugins.                |
+ | See the README file for a full license statement.                     |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// ----------------------------------
+// LOGGING/DEBUGGING
+// ----------------------------------
+
+// system error reporting: 1 = log; 2 = report (not implemented yet), 4 = show, 8 = trace
+$rcmail_config['debug_level'] = 1;
+
+// log driver:  'syslog' or 'file'.
+$rcmail_config['log_driver'] = 'file';
+
+// date format for log entries
+// (read http://php.net/manual/en/function.date.php for all format characters)  
+$rcmail_config['log_date_format'] = 'd-M-Y H:i:s O';
+
+// Syslog ident string to use, if using the 'syslog' log driver.
+$rcmail_config['syslog_id'] = 'roundcube';
+
+// Syslog facility to use, if using the 'syslog' log driver.
+// For possible values see installer or http://php.net/manual/en/function.openlog.php
+$rcmail_config['syslog_facility'] = LOG_USER;
+
+// Log sent messages to <log_dir>/sendmail or to syslog
+$rcmail_config['smtp_log'] = true;
+
+// Log successful logins to <log_dir>/userlogins or to syslog
+$rcmail_config['log_logins'] = false;
+
+// Log session authentication errors to <log_dir>/session or to syslog
+$rcmail_config['log_session'] = false;
+
+// Log SQL queries to <log_dir>/sql or to syslog
+$rcmail_config['sql_debug'] = false;
+
+// Log IMAP conversation to <log_dir>/imap or to syslog
+$rcmail_config['imap_debug'] = false;
+
+// Log LDAP conversation to <log_dir>/ldap or to syslog
+$rcmail_config['ldap_debug'] = false;
+
+// Log SMTP conversation to <log_dir>/smtp or to syslog
+$rcmail_config['smtp_debug'] = false;
+
+// ----------------------------------
+// IMAP
+// ----------------------------------
+
+// the mail host chosen to perform the log-in
+// leave blank to show a textbox at login, give a list of hosts
+// to display a pulldown menu or set one host as string.
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// Supported replacement variables:
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %s - domain name after the '@' from e-mail address provided at login screen
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['default_host'] = 'localhost';
+
+// TCP port used for IMAP connections
+$rcmail_config['default_port'] = 143;
+
+// IMAP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['imap_auth_type'] = null;
+
+// If you know your imap's folder delimiter, you can specify it here.
+// Otherwise it will be determined automatically
+$rcmail_config['imap_delimiter'] = null;
+
+// If IMAP server doesn't support NAMESPACE extension, but you're
+// using shared folders or personal root folder is non-empty, you'll need to
+// set these options. All can be strings or arrays of strings.
+// Folders need to be ended with directory separator, e.g. "INBOX."
+// (special directory "~" is an exception to this rule)
+// These can be used also to overwrite server's namespaces
+$rcmail_config['imap_ns_personal'] = null;
+$rcmail_config['imap_ns_other']    = null;
+$rcmail_config['imap_ns_shared']   = null;
+
+// By default IMAP capabilities are readed after connection to IMAP server
+// In some cases, e.g. when using IMAP proxy, there's a need to refresh the list
+// after login. Set to True if you've got this case.
+$rcmail_config['imap_force_caps'] = false;
+
+// By default list of subscribed folders is determined using LIST-EXTENDED
+// extension if available. Some servers (dovecot 1.x) returns wrong results
+// for shared namespaces in this case. http://trac.roundcube.net/ticket/1486225
+// Enable this option to force LSUB command usage instead.
+$rcmail_config['imap_force_lsub'] = false;
+
+// Some server configurations (e.g. Courier) doesn't list folders in all namespaces
+// Enable this option to force listing of folders in all namespaces
+$rcmail_config['imap_force_ns'] = false;
+
+// IMAP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['imap_timeout'] = 0;
+
+// Optional IMAP authentication identifier to be used as authorization proxy
+$rcmail_config['imap_auth_cid'] = null;
+
+// Optional IMAP authentication password to be used for imap_auth_cid
+$rcmail_config['imap_auth_pw'] = null;
+
+// Type of IMAP indexes cache. Supported values: 'db', 'apc' and 'memcache'.
+$rcmail_config['imap_cache'] = null;
+
+// Enables messages cache. Only 'db' cache is supported.
+$rcmail_config['messages_cache'] = false;
+
+
+// ----------------------------------
+// SMTP
+// ----------------------------------
+
+// SMTP server host (for sending mails).
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// If left blank, the PHP mail() function is used
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['smtp_server'] = '';
+
+// SMTP port (default is 25; use 587 for STARTTLS or 465 for the
+// deprecated SSL over SMTP (aka SMTPS))
+$rcmail_config['smtp_port'] = 25;
+
+// SMTP username (if required) if you use %u as the username Roundcube
+// will use the current username for login
+$rcmail_config['smtp_user'] = '';
+
+// SMTP password (if required) if you use %p as the password Roundcube
+// will use the current user's password for login
+$rcmail_config['smtp_pass'] = '';
+
+// SMTP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['smtp_auth_type'] = '';
+
+// Optional SMTP authentication identifier to be used as authorization proxy
+$rcmail_config['smtp_auth_cid'] = null;
+
+// Optional SMTP authentication password to be used for smtp_auth_cid
+$rcmail_config['smtp_auth_pw'] = null;
+
+// SMTP HELO host 
+// Hostname to give to the remote server for SMTP 'HELO' or 'EHLO' messages 
+// Leave this blank and you will get the server variable 'server_name' or 
+// localhost if that isn't defined. 
+$rcmail_config['smtp_helo_host'] = '';
+
+// SMTP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['smtp_timeout'] = 0;
+
+// ----------------------------------
+// SYSTEM
+// ----------------------------------
+include_once("/etc/roundcube/debian-db-roundcube.php");
+
+
+// THIS OPTION WILL ALLOW THE INSTALLER TO RUN AND CAN EXPOSE SENSITIVE CONFIG DATA.
+// ONLY ENABLE IT IF YOU'RE REALLY SURE WHAT YOU'RE DOING!
+$rcmail_config['enable_installer'] = false;
+
+// provide an URL where a user can get support for this Roundcube installation
+// PLEASE DO NOT LINK TO THE ROUNDCUBE.NET WEBSITE HERE!
+$rcmail_config['support_url'] = '';
+
+// replace Roundcube logo with this image
+// specify an URL relative to the document root of this Roundcube installation
+$rcmail_config['skin_logo'] = null;
+
+// automatically create a new Roundcube user when log-in the first time.
+// a new user will be created once the IMAP login succeeds.
+// set to false if only registered users can use this service
+$rcmail_config['auto_create_user'] = true;
+
+// use this folder to store log files (must be writeable for apache user)
+// This is used by the 'file' log driver.
+$rcmail_config['log_dir'] = '/var/log/roundcubemail/';
+
+// use this folder to store temp files (must be writeable for apache user)
+$rcmail_config['temp_dir'] = '/tmp';
+
+// lifetime of message cache
+// possible units: s, m, h, d, w
+$rcmail_config['message_cache_lifetime'] = '10d';
+
+// enforce connections over https
+// with this option enabled, all non-secure connections will be redirected.
+// set the port for the ssl connection as value of this option if it differs from the default 443
+$rcmail_config['force_https'] = false;
+
+// tell PHP that it should work as under secure connection
+// even if it doesn't recognize it as secure ($_SERVER['HTTPS'] is not set)
+// e.g. when you're running Roundcube behind a https proxy
+// this option is mutually exclusive to 'force_https' and only either one of them should be set to true.
+$rcmail_config['use_https'] = false;
+
+// Allow browser-autocompletion on login form.
+// 0 - disabled, 1 - username and host only, 2 - username, host, password
+$rcmail_config['login_autocomplete'] = 0;
+
+// Forces conversion of logins to lower case.
+// 0 - disabled, 1 - only domain part, 2 - domain and local part.
+// If users authentication is not case-sensitive this must be enabled.
+// After enabling it all user records need to be updated, e.g. with query:
+// UPDATE users SET username = LOWER(username);
+$rcmail_config['login_lc'] = 0;
+
+// Includes should be interpreted as PHP files
+$rcmail_config['skin_include_php'] = false;
+
+// display software version on login screen
+$rcmail_config['display_version'] = false;
+
+// Session lifetime in minutes
+// must be greater than 'keep_alive'/60
+$rcmail_config['session_lifetime'] = 10;
+
+// session domain: .example.org
+$rcmail_config['session_domain'] = '';
+
+// session name. Default: 'roundcube_sessid'
+$rcmail_config['session_name'] = null;
+
+// Backend to use for session storage. Can either be 'db' (default) or 'memcache'
+// If set to memcache, a list of servers need to be specified in 'memcache_hosts'
+// Make sure the Memcache extension (http://pecl.php.net/package/memcache) version >= 2.0.0 is installed
+$rcmail_config['session_storage'] = 'db';
+
+// Use these hosts for accessing memcached
+// Define any number of hosts in the form of hostname:port or unix:///path/to/sock.file
+$rcmail_config['memcache_hosts'] = null; // e.g. array( 'localhost:11211', '192.168.1.12:11211', 'unix:///var/tmp/memcached.sock' );
+
+// check client IP in session athorization
+$rcmail_config['ip_check'] = false;
+
+// check referer of incoming requests
+$rcmail_config['referer_check'] = false;
+
+// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
+// Possible values: sameorigin|deny. Set to false in order to disable sending them
+$rcmail_config['x_frame_options'] = 'sameorigin';
+
+// this key is used to encrypt the users imap password which is stored
+// in the session record (and the client cookie if remember password is enabled).
+// please provide a string of exactly 24 chars.
+$rcmail_config['des_key'] = 'vtIOjLZo9kffJoqzpSbm5r1r';
+
+// Automatically add this domain to user names for login
+// Only for IMAP servers that require full e-mail addresses for login
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['username_domain'] = '';
+
+// This domain will be used to form e-mail addresses of new users
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['mail_domain'] = '';
+
+// Password charset.
+// Use it if your authentication backend doesn't support UTF-8.
+// Defaults to ISO-8859-1 for backward compatibility
+$rcmail_config['password_charset'] = 'ISO-8859-1';
+
+// How many seconds must pass between emails sent by a user
+$rcmail_config['sendmail_delay'] = 0;
+
+// Maximum number of recipients per message. Default: 0 (no limit)
+$rcmail_config['max_recipients'] = 0; 
+
+// Maximum allowednumber of members of an address group. Default: 0 (no limit)
+// If 'max_recipients' is set this value should be less or equal
+$rcmail_config['max_group_members'] = 0; 
+
+// add this user-agent to message headers when sending
+$rcmail_config['useragent'] = 'Roundcube Webmail/'.RCMAIL_VERSION;
+
+// use this name to compose page titles
+$rcmail_config['product_name'] = 'Roundcube Webmail';
+
+// try to load host-specific configuration
+// see http://trac.roundcube.net/wiki/Howto_Config for more details
+$rcmail_config['include_host_config'] = false;
+
+// path to a text file which will be added to each sent message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer'] = '';
+
+// path to a text file which will be added to each sent HTML message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer_html'] = '';
+
+// add a received header to outgoing mails containing the creators IP and hostname
+$rcmail_config['http_received_header'] = false;
+
+// Whether or not to encrypt the IP address and the host name
+// these could, in some circles, be considered as sensitive information;
+// however, for the administrator, these could be invaluable help
+// when tracking down issues.
+$rcmail_config['http_received_header_encrypt'] = false;
+
+// This string is used as a delimiter for message headers when sending
+// a message via mail() function. Leave empty for auto-detection
+$rcmail_config['mail_header_delimiter'] = NULL;
+
+// number of chars allowed for line when wrapping text.
+// text wrapping is done when composing/sending messages
+$rcmail_config['line_length'] = 72;
+
+// send plaintext messages as format=flowed
+$rcmail_config['send_format_flowed'] = true;
+
+// don't allow these settings to be overriden by the user
+$rcmail_config['dont_override'] = array();
+
+// Set identities access level:
+// 0 - many identities with possibility to edit all params
+// 1 - many identities with possibility to edit all params but not email address
+// 2 - one identity with possibility to edit all params
+// 3 - one identity with possibility to edit all params but not email address
+$rcmail_config['identities_level'] = 0;
+
+// Mimetypes supported by the browser.
+// attachments of these types will open in a preview window
+// either a comma-separated list or an array: 'text/plain,text/html,text/xml,image/jpeg,image/gif,image/png,application/pdf'
+$rcmail_config['client_mimetypes'] = null;  # null == default
+
+// mime magic database
+$rcmail_config['mime_magic'] = null;
+
+// path to imagemagick identify binary
+$rcmail_config['im_identify_path'] = null;
+
+// path to imagemagick convert binary
+$rcmail_config['im_convert_path'] = null;
+
+// maximum size of uploaded contact photos in pixel
+$rcmail_config['contact_photo_size'] = 160;
+
+// Enable DNS checking for e-mail address validation
+$rcmail_config['email_dns_check'] = false;
+
+// ----------------------------------
+// PLUGINS
+// ----------------------------------
+
+// List of active plugins (in plugins/ directory)
+$rcmail_config['plugins'] = array('password');
+
+// ----------------------------------
+// USER INTERFACE
+// ----------------------------------
+
+// default messages sort column. Use empty value for default server's sorting, 
+// or 'arrival', 'date', 'subject', 'from', 'to', 'fromto', 'size', 'cc'
+$rcmail_config['message_sort_col'] = '';
+
+// default messages sort order
+$rcmail_config['message_sort_order'] = 'DESC';
+
+// These cols are shown in the message list. Available cols are:
+// subject, from, to, fromto, cc, replyto, date, size, status, flag, attachment, 'priority'
+$rcmail_config['list_cols'] = array('subject', 'status', 'fromto', 'date', 'size', 'flag', 'attachment');
+
+// the default locale setting (leave empty for auto-detection)
+// RFC1766 formatted language name like en_US, de_DE, de_CH, fr_FR, pt_BR
+$rcmail_config['language'] = null;
+
+// use this format for date display (date or strftime format)
+$rcmail_config['date_format'] = 'Y-m-d';
+
+// give this choice of date formats to the user to select from
+$rcmail_config['date_formats'] = array('Y-m-d', 'd-m-Y', 'Y/m/d', 'm/d/Y', 'd/m/Y', 'd.m.Y', 'j.n.Y');
+
+// use this format for time display (date or strftime format)
+$rcmail_config['time_format'] = 'H:i';
+
+// give this choice of time formats to the user to select from
+$rcmail_config['time_formats'] = array('G:i', 'H:i', 'g:i a', 'h:i A');
+
+// use this format for short date display (derived from date_format and time_format)
+$rcmail_config['date_short'] = 'D H:i';
+
+// use this format for detailed date/time formatting (derived from date_format and time_format)
+$rcmail_config['date_long'] = 'Y-m-d H:i';
+
+// store draft message is this mailbox
+// leave blank if draft messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['drafts_mbox'] = 'Drafts';
+
+// store spam messages in this mailbox
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['junk_mbox'] = 'Spam';
+
+// store sent message is this mailbox
+// leave blank if sent messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['sent_mbox'] = 'Sent';
+
+// move messages to this folder when deleting them
+// leave blank if they should be deleted directly
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['trash_mbox'] = 'Trash';
+
+// display these folders separately in the mailbox list.
+// these folders will also be displayed with localized names
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['default_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+$rcmail_config['default_imap_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+
+// automatically create the above listed default folders on first login
+$rcmail_config['create_default_folders'] = true;
+
+// protect the default folders from renames, deletes, and subscription changes
+$rcmail_config['protect_default_folders'] = true;
+
+// if in your system 0 quota means no limit set this option to true 
+$rcmail_config['quota_zero_as_unlimited'] = true;
+
+// Make use of the built-in spell checker. It is based on GoogieSpell.
+// Since Google only accepts connections over https your PHP installatation
+// requires to be compiled with Open SSL support
+$rcmail_config['enable_spellcheck'] = true;
+
+// Enables spellchecker exceptions dictionary.
+// Setting it to 'shared' will make the dictionary shared by all users.
+$rcmail_config['spellcheck_dictionary'] = false;
+
+// Set the spell checking engine. 'googie' is the default. 'pspell' is also available,
+// but requires the Pspell extensions. When using Nox Spell Server, also set 'googie' here.
+$rcmail_config['spellcheck_engine'] = 'googie';
+
+// For a locally installed Nox Spell Server, please specify the URI to call it.
+// Get Nox Spell Server from http://orangoo.com/labs/?page_id=72
+// Leave empty to use the Google spell checking service, what means
+// that the message content will be sent to Google in order to check spelling
+$rcmail_config['spellcheck_uri'] = '';
+
+// These languages can be selected for spell checking.
+// Configure as a PHP style hash array: array('en'=>'English', 'de'=>'Deutsch');
+// Leave empty for default set of available language.
+$rcmail_config['spellcheck_languages'] = NULL;
+
+// Makes that words with all letters capitalized will be ignored (e.g. GOOGLE)
+$rcmail_config['spellcheck_ignore_caps'] = false;
+
+// Makes that words with numbers will be ignored (e.g. g00gle)
+$rcmail_config['spellcheck_ignore_nums'] = false;
+
+// Makes that words with symbols will be ignored (e.g. g@@gle)
+$rcmail_config['spellcheck_ignore_syms'] = false;
+
+// Use this char/string to separate recipients when composing a new message
+$rcmail_config['recipients_separator'] = ',';
+
+// don't let users set pagesize to more than this value if set
+$rcmail_config['max_pagesize'] = 200;
+
+// Minimal value of user's 'keep_alive' setting (in seconds)
+// Must be less than 'session_lifetime'
+$rcmail_config['min_keep_alive'] = 60;
+
+// Enables files upload indicator. Requires APC installed and enabled apc.rfc1867 option.
+// By default refresh time is set to 1 second. You can set this value to true
+// or any integer value indicating number of seconds.
+$rcmail_config['upload_progress'] = false;
+
+// Specifies for how many seconds the Undo button will be available
+// after object delete action. Currently used with supporting address book sources.
+// Setting it to 0, disables the feature.
+$rcmail_config['undo_timeout'] = 0;
+
+// ----------------------------------
+// ADDRESSBOOK SETTINGS
+// ----------------------------------
+
+// This indicates which type of address book to use. Possible choises:
+// 'sql' (default) and 'ldap'.
+// If set to 'ldap' then it will look at using the first writable LDAP
+// address book as the primary address book and it will not display the
+// SQL address book in the 'Address Book' view.
+$rcmail_config['address_book_type'] = 'sql';
+
+// In order to enable public ldap search, configure an array like the Verisign
+// example further below. if you would like to test, simply uncomment the example.
+// Array key must contain only safe characters, ie. a-zA-Z0-9_
+$rcmail_config['ldap_public'] = array();
+
+// If you are going to use LDAP for individual address books, you will need to 
+// set 'user_specific' to true and use the variables to generate the appropriate DNs to access it.
+//
+// The recommended directory structure for LDAP is to store all the address book entries
+// under the users main entry, e.g.:
+//
+//  o=root
+//   ou=people
+//    uid=user@domain
+//  mail=contact@contactdomain
+//
+// So the base_dn would be uid=%fu,ou=people,o=root
+// The bind_dn would be the same as based_dn or some super user login.
+/* 
+ * example config for Verisign directory
+ *
+$rcmail_config['ldap_public']['Verisign'] = array(
+  'name'          => 'Verisign.com',
+  // Replacement variables supported in host names:
+  // %h - user's IMAP hostname
+  // %n - http hostname ($_SERVER['SERVER_NAME'])
+  // %d - domain (http hostname without the first part)
+  // %z - IMAP domain (IMAP hostname without the first part)
+  // For example %n = mail.domain.tld, %d = domain.tld
+  'hosts'         => array('directory.verisign.com'),
+  'port'          => 389,
+  'use_tls'	      => false,
+  'ldap_version'  => 3,       // using LDAPv3
+  'user_specific' => false,   // If true the base_dn, bind_dn and bind_pass default to the user's IMAP login.
+  // %fu - The full username provided, assumes the username is an email
+  //       address, uses the username_domain value if not an email address.
+  // %u  - The username prior to the '@'.
+  // %d  - The domain name after the '@'.
+  // %dc - The domain name hierarchal string e.g. "dc=test,dc=domain,dc=com"
+  // %dn - DN found by ldap search when search_filter/search_base_dn are used
+  'base_dn'       => '',
+  'bind_dn'       => '',
+  'bind_pass'     => '',
+  // It's possible to bind for an individual address book
+  // The login name is used to search for the DN to bind with
+  'search_base_dn' => '',
+  'search_filter'  => '',   // e.g. '(&(objectClass=posixAccount)(uid=%u))'
+  // DN and password to bind as before searching for bind DN, if anonymous search is not allowed
+  'search_bind_dn' => '',
+  'search_bind_pw' => '',
+  // Default for %dn variable if search doesn't return DN value
+  'search_dn_default' => '',
+  // Optional authentication identifier to be used as SASL authorization proxy
+  // bind_dn need to be empty
+  'auth_cid'       => '',
+  // SASL authentication method (for proxy auth), e.g. DIGEST-MD5
+  'auth_method'    => '',
+  // Indicates if the addressbook shall be hidden from the list.
+  // With this option enabled you can still search/view contacts.
+  'hidden'        => false,
+  // Indicates if the addressbook shall not list contacts but only allows searching.
+  'searchonly'    => false,
+  // Indicates if we can write to the LDAP directory or not.
+  // If writable is true then these fields need to be populated:
+  // LDAP_Object_Classes, required_fields, LDAP_rdn
+  'writable'       => false,
+  // To create a new contact these are the object classes to specify
+  // (or any other classes you wish to use).
+  'LDAP_Object_Classes' => array('top', 'inetOrgPerson'),
+  // The RDN field that is used for new entries, this field needs
+  // to be one of the search_fields, the base of base_dn is appended
+  // to the RDN to insert into the LDAP directory.
+  'LDAP_rdn'       => 'cn',
+  // The required fields needed to build a new contact as required by
+  // the object classes (can include additional fields not required by the object classes).
+  'required_fields' => array('cn', 'sn', 'mail'),
+  'search_fields'   => array('mail', 'cn'),  // fields to search in
+  // mapping of contact fields to directory attributes
+  //   for every attribute one can specify the number of values (limit) allowed.
+  //   default is 1, a wildcard * means unlimited
+  'fieldmap' => array(
+    // Roundcube  => LDAP:limit
+    'name'        => 'cn',
+    'surname'     => 'sn',
+    'firstname'   => 'givenName',
+    'title'       => 'title',
+    'email'       => 'mail:*',
+    'phone:home'  => 'homePhone',
+    'phone:work'  => 'telephoneNumber',
+    'phone:mobile' => 'mobile',
+    'phone:pager' => 'pager',
+    'street'      => 'street',
+    'zipcode'     => 'postalCode',
+    'region'      => 'st',
+    'locality'    => 'l',
+// if you uncomment country, you need to modify 'sub_fields' above
+//    'country'     => 'c',
+    'department'  => 'departmentNumber',
+    'notes'       => 'description',
+// these currently don't work:
+//    'phone:workfax' => 'facsimileTelephoneNumber',
+//    'photo'        => 'jpegPhoto',
+//    'organization' => 'o',
+//    'manager'      => 'manager',
+//    'assistant'    => 'secretary',
+  ),
+  // Map of contact sub-objects (attribute name => objectClass(es)), e.g. 'c' => 'country'
+  'sub_fields' => array(),
+  'sort'          => 'cn',    // The field to sort the listing by.
+  'scope'         => 'sub',   // search mode: sub|base|list
+  'filter'        => '(objectClass=inetOrgPerson)',      // used for basic listing (if not empty) and will be &'d with search queries. example: status=act
+  'fuzzy_search'  => true,    // server allows wildcard search
+  'vlv'           => false,   // Enable Virtual List View to more efficiently fetch paginated data (if server supports it)
+  'numsub_filter' => '(objectClass=organizationalUnit)',   // with VLV, we also use numSubOrdinates to query the total number of records. Set this filter to get all numSubOrdinates attributes for counting
+  'sizelimit'     => '0',     // Enables you to limit the count of entries fetched. Setting this to 0 means no limit.
+  'timelimit'     => '0',     // Sets the number of seconds how long is spend on the search. Setting this to 0 means no limit.
+  'referrals'     => true|false,  // Sets the LDAP_OPT_REFERRALS option. Mostly used in multi-domain Active Directory setups
+
+  // definition for contact groups (uncomment if no groups are supported)
+  // for the groups base_dn, the user replacements %fu, %u, $d and %dc work as for base_dn (see above)
+  // if the groups base_dn is empty, the contact base_dn is used for the groups as well
+  // -> in this case, assure that groups and contacts are separated due to the concernig filters! 
+  'groups'        => array(
+    'base_dn'     => '',
+    'scope'       => 'sub',   // search mode: sub|base|list
+    'filter'      => '(objectClass=groupOfNames)',
+    'object_classes' => array("top", "groupOfNames"),
+    'member_attr'  => 'member',   // name of the member attribute, e.g. uniqueMember
+    'name_attr'    => 'cn',       // attribute to be used as group name
+  ),
+);
+*/
+
+// An ordered array of the ids of the addressbooks that should be searched
+// when populating address autocomplete fields server-side. ex: array('sql','Verisign');
+$rcmail_config['autocomplete_addressbooks'] = array('sql');
+
+// The minimum number of characters required to be typed in an autocomplete field
+// before address books will be searched. Most useful for LDAP directories that
+// may need to do lengthy results building given overly-broad searches
+$rcmail_config['autocomplete_min_length'] = 1;
+
+// Number of parallel autocomplete requests.
+// If there's more than one address book, n parallel (async) requests will be created,
+// where each request will search in one address book. By default (0), all address
+// books are searched in one request.
+$rcmail_config['autocomplete_threads'] = 0;
+
+// Max. numer of entries in autocomplete popup. Default: 15.
+$rcmail_config['autocomplete_max'] = 15;
+
+// show address fields in this order
+// available placeholders: {street}, {locality}, {zipcode}, {country}, {region}
+$rcmail_config['address_template'] = '{street}<br/>{locality} {zipcode}<br/>{country} {region}';
+
+// Matching mode for addressbook search (including autocompletion)
+// 0 - partial (*abc*), default
+// 1 - strict (abc)
+// 2 - prefix (abc*)
+// Note: For LDAP sources fuzzy_search must be enabled to use 'partial' or 'prefix' mode
+$rcmail_config['addressbook_search_mode'] = 0;
+
+// ----------------------------------
+// USER PREFERENCES
+// ----------------------------------
+
+// Use this charset as fallback for message decoding
+//$rcmail_config['default_charset'] = 'ISO-8859-1';
+$rcmail_config['default_charset'] = 'UTF-8';
+
+// skin name: folder from skins/
+$rcmail_config['skin'] = 'larry';
+
+// show up to X items in messages list view
+$rcmail_config['mail_pagesize'] = 50;
+
+// show up to X items in contacts list view
+$rcmail_config['addressbook_pagesize'] = 50;
+
+// sort contacts by this col (preferably either one of name, firstname, surname)
+$rcmail_config['addressbook_sort_col'] = 'surname';
+
+// the way how contact names are displayed in the list
+// 0: display name
+// 1: (prefix) firstname middlename surname (suffix)
+// 2: (prefix) surname firstname middlename (suffix)
+// 3: (prefix) surname, firstname middlename (suffix)
+$rcmail_config['addressbook_name_listing'] = 0;
+
+// use this timezone to display date/time
+// valid timezone identifers are listed here: php.net/manual/en/timezones.php
+// 'auto' will use the browser's timezone settings
+$rcmail_config['timezone'] = 'auto';
+
+// prefer displaying HTML messages
+$rcmail_config['prefer_html'] = true;
+
+// display remote inline images
+// 0 - Never, always ask
+// 1 - Ask if sender is not in address book
+// 2 - Always show inline images
+$rcmail_config['show_images'] = 0;
+
+// compose html formatted messages by default
+// 0 - never, 1 - always, 2 - on reply to HTML message only 
+$rcmail_config['htmleditor'] = 0;
+
+// show pretty dates as standard
+$rcmail_config['prettydate'] = true;
+
+// save compose message every 30 seconds
+$rcmail_config['draft_autosave'] = 30;
+
+// default setting if preview pane is enabled
+$rcmail_config['preview_pane'] = false;
+
+// Mark as read when viewed in preview pane (delay in seconds)
+// Set to -1 if messages in preview pane should not be marked as read
+$rcmail_config['preview_pane_mark_read'] = 0;
+
+// Clear Trash on logout
+$rcmail_config['logout_purge'] = false;
+
+// Compact INBOX on logout
+$rcmail_config['logout_expunge'] = false;
+
+// Display attached images below the message body 
+$rcmail_config['inline_images'] = true;
+
+// Encoding of long/non-ascii attachment names:
+// 0 - Full RFC 2231 compatible
+// 1 - RFC 2047 for 'name' and RFC 2231 for 'filename' parameter (Thunderbird's default)
+// 2 - Full 2047 compatible
+$rcmail_config['mime_param_folding'] = 1;
+
+// Set true if deleted messages should not be displayed
+// This will make the application run slower
+$rcmail_config['skip_deleted'] = false;
+
+// Set true to Mark deleted messages as read as well as deleted
+// False means that a message's read status is not affected by marking it as deleted
+$rcmail_config['read_when_deleted'] = true;
+
+// Set to true to never delete messages immediately
+// Use 'Purge' to remove messages marked as deleted
+$rcmail_config['flag_for_deletion'] = false;
+
+// Default interval for keep-alive/check-recent requests (in seconds)
+// Must be greater than or equal to 'min_keep_alive' and less than 'session_lifetime'
+$rcmail_config['keep_alive'] = 60;
+
+// If true all folders will be checked for recent messages
+$rcmail_config['check_all_folders'] = false;
+
+// If true, after message delete/move, the next message will be displayed
+$rcmail_config['display_next'] = false;
+
+// 0 - Do not expand threads 
+// 1 - Expand all threads automatically 
+// 2 - Expand only threads with unread messages 
+$rcmail_config['autoexpand_threads'] = 0;
+
+// When replying place cursor above original message (top posting)
+$rcmail_config['top_posting'] = false;
+
+// When replying strip original signature from message
+$rcmail_config['strip_existing_sig'] = true;
+
+// Show signature:
+// 0 - Never
+// 1 - Always
+// 2 - New messages only
+// 3 - Forwards and Replies only
+$rcmail_config['show_sig'] = 1;
+
+// When replying or forwarding place sender's signature above existing message
+$rcmail_config['sig_above'] = false;
+
+// Use MIME encoding (quoted-printable) for 8bit characters in message body
+$rcmail_config['force_7bit'] = false;
+
+// Defaults of the search field configuration.
+// The array can contain a per-folder list of header fields which should be considered when searching
+// The entry with key '*' stands for all folders which do not have a specific list set.
+// Please note that folder names should to be in sync with $rcmail_config['default_folders']
+$rcmail_config['search_mods'] = null;  // Example: array('*' => array('subject'=>1, 'from'=>1), 'Sent' => array('subject'=>1, 'to'=>1));
+
+// Defaults of the addressbook search field configuration.
+$rcmail_config['addressbook_search_mods'] = null;  // Example: array('name'=>1, 'firstname'=>1, 'surname'=>1, 'email'=>1, '*'=>1);
+
+// 'Delete always'
+// This setting reflects if mail should be always deleted
+// when moving to Trash fails. This is necessary in some setups
+// when user is over quota and Trash is included in the quota.
+$rcmail_config['delete_always'] = false;
+
+// Directly delete messages in Junk instead of moving to Trash
+$rcmail_config['delete_junk'] = true;
+
+// Behavior if a received message requests a message delivery notification (read receipt)
+// 0 = ask the user, 1 = send automatically, 2 = ignore (never send or ask)
+// 3 = send automatically if sender is in addressbook, otherwise ask the user
+// 4 = send automatically if sender is in addressbook, otherwise ignore
+$rcmail_config['mdn_requests'] = 0;
+
+// Return receipt checkbox default state
+$rcmail_config['mdn_default'] = 0;
+
+// Delivery Status Notification checkbox default state
+$rcmail_config['dsn_default'] = 0;
+
+// Place replies in the folder of the message being replied to
+$rcmail_config['reply_same_folder'] = false;
+
+// Sets default mode of Forward feature to "forward as attachment"
+$rcmail_config['forward_attachment'] = false;
+
+// Defines address book (internal index) to which new contacts will be added
+// By default it is the first writeable addressbook.
+// Note: Use '0' for built-in address book.
+$rcmail_config['default_addressbook'] = null;
+
+// Enables spell checking before sending a message.
+$rcmail_config['spellcheck_before_send'] = false;
+
+// Skip alternative email addresses in autocompletion (show one address per contact)
+$rcmail_config['autocomplete_single'] = false;
+
+// Default font for composed HTML message.
+// Supported values: Andale Mono, Arial, Arial Black, Book Antiqua, Courier New,
+// Georgia, Helvetica, Impact, Tahoma, Terminal, Times New Roman, Trebuchet MS, Verdana
+$rcmail_config['default_font'] = '';
+
+// end of config file
diff --git a/install/ubuntu/18.04/roundcube/vesta.php b/install/ubuntu/18.04/roundcube/vesta.php
new file mode 100644
index 00000000..99e1d4bc
--- /dev/null
+++ b/install/ubuntu/18.04/roundcube/vesta.php
@@ -0,0 +1,71 @@
+<?php
+
+/**
+ * Vesta Control Panel Password Driver
+ *
+ * @version 1.0
+ * @author Serghey Rodin <skid@vestacp.com>
+ */
+
+    function password_save($curpass, $passwd)
+    {
+        $rcmail = rcmail::get_instance();
+        $vesta_host = $rcmail->config->get('password_vesta_host');
+
+        if (empty($vesta_host))
+        {
+            $vesta_host = 'localhost';
+        }
+
+        $vesta_port = $rcmail->config->get('password_vesta_port');
+        if (empty($vesta_port))
+        {
+            $vesta_port = '8083';
+        }
+
+        $postvars = array(
+          'email' => $_SESSION['username'],
+          'password' => $curpass,
+          'new' => $passwd
+        );
+
+        $postdata = http_build_query($postvars);
+
+        $send  = 'POST /reset/mail/ HTTP/1.1' . PHP_EOL;
+        $send .= 'Host: ' . $vesta_host . PHP_EOL;
+        $send .= 'User-Agent: PHP Script' . PHP_EOL;
+        $send .= 'Content-length: ' . strlen($postdata) . PHP_EOL;
+        $send .= 'Content-type: application/x-www-form-urlencoded' . PHP_EOL;
+        $send .= 'Connection: close' . PHP_EOL;
+        $send .= PHP_EOL;
+        $send .= $postdata . PHP_EOL . PHP_EOL;
+
+        //$fp = fsockopen('ssl://' . $vesta_host, $vesta_port);
+        $errno = "";
+        $errstr = "";
+        $context = stream_context_create();
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer_name', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_host', false);
+        $result = stream_context_set_option($context, 'ssl', 'allow_self_signed', true);
+
+        $fp = stream_socket_client('ssl://' . $vesta_host . ':'.$vesta_port, $errno, $errstr, 60, STREAM_CLIENT_CONNECT, $context);
+        fputs($fp, $send);
+        $result = fread($fp, 2048);
+        fclose($fp);
+
+        $fp = fopen("/tmp/roundcube.log", 'w');
+        fwrite($fp, "test ok");
+        fwrite($fp, "\n");
+        fclose($fp);
+
+
+        if(strpos($result, 'ok') && !strpos($result, 'error'))
+        {
+            return PASSWORD_SUCCESS;
+        }
+        else {
+            return PASSWORD_ERROR;
+        }
+
+    }
diff --git a/install/ubuntu/18.04/sudo/admin b/install/ubuntu/18.04/sudo/admin
new file mode 100644
index 00000000..4226bdd4
--- /dev/null
+++ b/install/ubuntu/18.04/sudo/admin
@@ -0,0 +1,8 @@
+# Created by vesta installer
+Defaults env_keep="VESTA"
+Defaults:admin !syslog
+Defaults:admin !requiretty
+Defaults:root !requiretty
+
+admin   ALL=(ALL)       ALL
+admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/18.04/templates/dns/child-ns.tpl b/install/ubuntu/18.04/templates/dns/child-ns.tpl
new file mode 100755
index 00000000..42c046e4
--- /dev/null
+++ b/install/ubuntu/18.04/templates/dns/child-ns.tpl
@@ -0,0 +1,14 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns1.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns2.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ns1' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='ns2' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/ubuntu/18.04/templates/dns/default.tpl b/install/ubuntu/18.04/templates/dns/default.tpl
new file mode 100755
index 00000000..e0a37e62
--- /dev/null
+++ b/install/ubuntu/18.04/templates/dns/default.tpl
@@ -0,0 +1,18 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/ubuntu/18.04/templates/dns/gmail.tpl b/install/ubuntu/18.04/templates/dns/gmail.tpl
new file mode 100755
index 00000000..219c9d24
--- /dev/null
+++ b/install/ubuntu/18.04/templates/dns/gmail.tpl
@@ -0,0 +1,12 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='localhost' TYPE='A' PRIORITY='' VALUE='127.0.0.1' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='MX' PRIORITY='1' VALUE='ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT1.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT2.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT3.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT4.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.google.com ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/ubuntu/18.04/templates/web/apache2/basedir.stpl b/install/ubuntu/18.04/templates/web/apache2/basedir.stpl
new file mode 100644
index 00000000..d978d4c4
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/apache2/basedir.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.04/templates/web/apache2/basedir.tpl b/install/ubuntu/18.04/templates/web/apache2/basedir.tpl
new file mode 100644
index 00000000..96c94a1b
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/apache2/basedir.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.04/templates/web/apache2/default.stpl b/install/ubuntu/18.04/templates/web/apache2/default.stpl
new file mode 100644
index 00000000..ec34c279
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/apache2/default.stpl
@@ -0,0 +1,43 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.04/templates/web/apache2/default.tpl b/install/ubuntu/18.04/templates/web/apache2/default.tpl
new file mode 100644
index 00000000..3a227015
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/apache2/default.tpl
@@ -0,0 +1,37 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.04/templates/web/apache2/hosting.stpl b/install/ubuntu/18.04/templates/web/apache2/hosting.stpl
new file mode 100644
index 00000000..8892072b
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/apache2/hosting.stpl
@@ -0,0 +1,49 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value upload_max_filesize 10M
+        php_admin_value max_execution_time 20
+        php_admin_value post_max_size  8M
+        php_admin_value memory_limit 32M
+        php_admin_flag mysql.allow_persistent  off
+        php_admin_flag safe_mode off
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.04/templates/web/apache2/hosting.tpl b/install/ubuntu/18.04/templates/web/apache2/hosting.tpl
new file mode 100644
index 00000000..1eb26910
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/apache2/hosting.tpl
@@ -0,0 +1,43 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value upload_max_filesize 10M
+        php_admin_value max_execution_time 20
+        php_admin_value post_max_size  8M
+        php_admin_value memory_limit 32M
+        php_admin_flag mysql.allow_persistent  off
+        php_admin_flag safe_mode off
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.04/templates/web/apache2/phpcgi.sh b/install/ubuntu/18.04/templates/web/apache2/phpcgi.sh
new file mode 100755
index 00000000..6565e103
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/apache2/phpcgi.sh
@@ -0,0 +1,16 @@
+#!/bin/bash
+# Adding php wrapper
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+wrapper_script='#!/usr/bin/php-cgi -cphp5-cgi.ini'
+wrapper_file="$home_dir/$user/web/$domain/cgi-bin/php"
+
+echo "$wrapper_script" > $wrapper_file
+chown $user:$user $wrapper_file
+chmod -f 751 $wrapper_file
+
+exit 0
diff --git a/install/ubuntu/18.04/templates/web/apache2/phpcgi.stpl b/install/ubuntu/18.04/templates/web/apache2/phpcgi.stpl
new file mode 100644
index 00000000..731355bc
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/apache2/phpcgi.stpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        SSLRequireSSL
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        Action phpcgi-script /cgi-bin/php
+        <Files *.php>
+            SetHandler phpcgi-script
+        </Files>
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.04/templates/web/apache2/phpcgi.tpl b/install/ubuntu/18.04/templates/web/apache2/phpcgi.tpl
new file mode 100644
index 00000000..c6796d29
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/apache2/phpcgi.tpl
@@ -0,0 +1,31 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        Action phpcgi-script /cgi-bin/php
+        <Files *.php>
+            SetHandler phpcgi-script
+        </Files>
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.04/templates/web/apache2/phpfcgid.sh b/install/ubuntu/18.04/templates/web/apache2/phpfcgid.sh
new file mode 100755
index 00000000..e8058249
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/apache2/phpfcgid.sh
@@ -0,0 +1,22 @@
+#!/bin/bash
+# Adding php wrapper
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+wrapper_script="#!/bin/sh
+PHPRC=/usr/local/lib
+export PHPRC
+export PHP_FCGI_MAX_REQUESTS=1000
+export PHP_FCGI_CHILDREN=20
+exec  /usr/bin/php-cgi
+"
+wrapper_file="$home_dir/$user/web/$domain/cgi-bin/fcgi-starter"
+
+echo "$wrapper_script" > $wrapper_file
+chown $user:$user $wrapper_file
+chmod -f 751 $wrapper_file
+
+exit 0
diff --git a/install/ubuntu/18.04/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/18.04/templates/web/apache2/phpfcgid.stpl
new file mode 100644
index 00000000..156c8a91
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/apache2/phpfcgid.stpl
@@ -0,0 +1,39 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        SSLRequireSSL
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        <Files *.php>
+          SetHandler fcgid-script
+        </Files>
+        FCGIWrapper %home%/%user%/web/%domain%/cgi-bin/fcgi-starter .php
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    php_admin_value open_basedir none
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.04/templates/web/apache2/phpfcgid.tpl b/install/ubuntu/18.04/templates/web/apache2/phpfcgid.tpl
new file mode 100644
index 00000000..a4c01269
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/apache2/phpfcgid.tpl
@@ -0,0 +1,31 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        <Files *.php>
+          SetHandler fcgid-script
+        </Files>
+        FCGIWrapper %home%/%user%/web/%domain%/cgi-bin/fcgi-starter .php
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.04/templates/web/awstats/awstats.tpl b/install/ubuntu/18.04/templates/web/awstats/awstats.tpl
new file mode 100755
index 00000000..9a92e0fd
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/awstats/awstats.tpl
@@ -0,0 +1,133 @@
+LogFile="/var/log/%web_system%/domains/%domain%.log"
+LogType=W
+LogFormat=1
+LogSeparator=" "
+SiteDomain="%domain_idn%"
+HostAliases="%alias_idn%"
+DirData="%home%/%user%/web/%domain%/stats"
+DirCgi="/vstats"
+DirIcons="/vstats/icon"
+AllowToUpdateStatsFromBrowser=0
+AllowFullYearView=2
+EnableLockForUpdate=1
+DNSStaticCacheFile="dnscache.txt"
+DNSLastUpdateCacheFile="dnscachelastupdate.txt"
+SkipDNSLookupFor=""
+AllowAccessFromWebToAuthenticatedUsersOnly=0
+AllowAccessFromWebToFollowingAuthenticatedUsers=""
+AllowAccessFromWebToFollowingIPAddresses=""
+CreateDirDataIfNotExists=0
+BuildHistoryFormat=text
+BuildReportFormat=html
+SaveDatabaseFilesWithPermissionsForEveryone=0
+PurgeLogFile=0
+ArchiveLogRecords=0
+KeepBackupOfHistoricFiles=1
+DefaultFile="index.php index.html"
+SkipHosts="127.0.0.1
+SkipUserAgents=""
+SkipFiles=""
+SkipReferrersBlackList=""
+OnlyHosts=""
+OnlyUserAgents=""
+OnlyUsers=""
+OnlyFiles=""
+NotPageList="css js class gif jpg jpeg png bmp ico rss xml swf"
+ValidHTTPCodes="200 304"
+ValidSMTPCodes="1 250"
+AuthenticatedUsersNotCaseSensitive=0
+URLNotCaseSensitive=0
+URLWithAnchor=0
+URLQuerySeparators="?;"
+URLWithQuery=0
+URLWithQueryWithOnlyFollowingParameters=""
+URLWithQueryWithoutFollowingParameters=""
+URLReferrerWithQuery=0
+WarningMessages=1
+ErrorMessages=""
+DebugMessages=0
+NbOfLinesForCorruptedLog=50
+WrapperScript=""
+DecodeUA=0
+MiscTrackerUrl="/js/awstats_misc_tracker.js"
+UseFramesWhenCGI=1
+DetailedReportsOnNewWindows=1
+Expires=3600
+MaxRowsInHTMLOutput=1000
+Lang="auto"
+DirLang="./lang"
+ShowMenu=1
+ShowSummary=UVPHB
+ShowMonthStats=UVPHB
+ShowDaysOfMonthStats=VPHB
+ShowDaysOfWeekStats=PHB
+ShowHoursStats=PHB
+ShowDomainsStats=PHB
+ShowHostsStats=PHBL
+ShowAuthenticatedUsers=0
+ShowRobotsStats=HBL
+ShowWormsStats=0
+ShowEMailSenders=0
+ShowEMailReceivers=0
+ShowSessionsStats=1
+ShowPagesStats=PBEX
+ShowFileTypesStats=HB
+ShowFileSizesStats=0
+ShowDownloadsStats=HB
+ShowOSStats=1
+ShowBrowsersStats=1
+ShowScreenSizeStats=0
+ShowOriginStats=PH
+ShowKeyphrasesStats=1
+ShowKeywordsStats=1
+ShowMiscStats=a
+ShowHTTPErrorsStats=1
+ShowSMTPErrorsStats=0
+ShowClusterStats=0
+AddDataArrayMonthStats=1
+AddDataArrayShowDaysOfMonthStats=1
+AddDataArrayShowDaysOfWeekStats=1
+AddDataArrayShowHoursStats=1
+IncludeInternalLinksInOriginSection=0
+MaxNbOfDomain = 10
+MinHitDomain  = 1
+MaxNbOfHostsShown = 10
+MinHitHost    = 1
+MaxNbOfLoginShown = 10
+MinHitLogin   = 1
+MaxNbOfRobotShown = 10
+MinHitRobot   = 1
+MaxNbOfDownloadsShown = 10
+MinHitDownloads = 1
+MaxNbOfPageShown = 10
+MinHitFile    = 1
+MaxNbOfOsShown = 10
+MinHitOs      = 1
+MaxNbOfBrowsersShown = 10
+MinHitBrowser = 1
+MaxNbOfScreenSizesShown = 5
+MinHitScreenSize = 1
+MaxNbOfWindowSizesShown = 5
+MinHitWindowSize = 1
+MaxNbOfRefererShown = 10
+MinHitRefer   = 1
+MaxNbOfKeyphrasesShown = 10
+MinHitKeyphrase = 1
+MaxNbOfKeywordsShown = 10
+MinHitKeyword = 1
+MaxNbOfEMailsShown = 20
+MinHitEMail   = 1
+FirstDayOfWeek=0
+ShowFlagLinks=""
+ShowLinksOnUrl=1
+UseHTTPSLinkForUrl=""
+MaxLengthOfShownURL=64
+HTMLHeadSection=""
+HTMLEndSection=""
+MetaRobot=0
+Logo="awstats_logo6.png"
+LogoLink="http://awstats.sourceforge.net"
+BarWidth   = 260
+BarHeight  = 90
+StyleSheet=""
+ExtraTrackedRowsLimit=500
diff --git a/install/ubuntu/18.04/templates/web/awstats/index.tpl b/install/ubuntu/18.04/templates/web/awstats/index.tpl
new file mode 100755
index 00000000..9df9bb5c
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/awstats/index.tpl
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+    <title>Awstats log analyzer </title>
+</head>
+<frameset rows="60,*" cols="*">
+    <frame src="nav.html" name="nav" scrolling="no" noresize>
+    <frame src="%month%/index.html" name="stats">
+</frameset>
+</html>
diff --git a/install/ubuntu/18.04/templates/web/awstats/nav.tpl b/install/ubuntu/18.04/templates/web/awstats/nav.tpl
new file mode 100755
index 00000000..f29bed68
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/awstats/nav.tpl
@@ -0,0 +1,23 @@
+<html>
+<head>
+    <title>Awstats navigation</title>
+    <script language="javascript">
+        function change() {
+            top.stats.location= document.period.select.value + '/';
+        }
+    </script>
+</head>
+<body>
+<table width="100%" border="0" cellspacing="0" cellpadding="0">
+<tr>
+    <td><img src="logo.png" alt="vesta"></td>
+    <td><form name="period" action="" method="get">
+        <select name="select" ONCHANGE="change()">
+%select_month%
+        </select>
+    </form>
+    </td>
+</tr>
+</table>
+</body>
+</html>
diff --git a/install/ubuntu/18.04/templates/web/nginx/caching.sh b/install/ubuntu/18.04/templates/web/nginx/caching.sh
new file mode 100755
index 00000000..09d8efe7
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/caching.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+user=$1
+domain=$2
+ip=$3
+home=$4
+docroot=$5
+
+str="proxy_cache_path /var/cache/nginx/$domain levels=2" 
+str="$str keys_zone=$domain:10m inactive=60m max_size=512m;" 
+conf='/etc/nginx/conf.d/01_caching_pool.conf'
+if [ -e "$conf" ]; then
+    if [ -z "$(grep "=${domain}:" $conf)" ]; then
+        echo "$str" >> $conf
+    fi
+else
+    echo "$str" >> $conf
+fi
+
diff --git a/install/ubuntu/18.04/templates/web/nginx/caching.stpl b/install/ubuntu/18.04/templates/web/nginx/caching.stpl
new file mode 100755
index 00000000..5e0e4064
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/caching.stpl
@@ -0,0 +1,44 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass https://%ip%:%web_ssl_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/caching.tpl b/install/ubuntu/18.04/templates/web/nginx/caching.tpl
new file mode 100755
index 00000000..36761b65
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/caching.tpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/default.stpl b/install/ubuntu/18.04/templates/web/nginx/default.stpl
new file mode 100755
index 00000000..fa538060
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/default.stpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/18.04/templates/web/nginx/default.tpl b/install/ubuntu/18.04/templates/web/nginx/default.tpl
new file mode 100755
index 00000000..4d5c774b
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/default.tpl
@@ -0,0 +1,33 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/18.04/templates/web/nginx/hosting.sh b/install/ubuntu/18.04/templates/web/nginx/hosting.sh
new file mode 100755
index 00000000..eeed37ef
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/ubuntu/18.04/templates/web/nginx/hosting.stpl b/install/ubuntu/18.04/templates/web/nginx/hosting.stpl
new file mode 100755
index 00000000..d778d633
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/hosting.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/18.04/templates/web/nginx/hosting.tpl b/install/ubuntu/18.04/templates/web/nginx/hosting.tpl
new file mode 100755
index 00000000..15961c95
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/hosting.tpl
@@ -0,0 +1,35 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/18.04/templates/web/nginx/http2.stpl b/install/ubuntu/18.04/templates/web/nginx/http2.stpl
new file mode 100644
index 00000000..76dd2f8e
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/http2.stpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/httpd/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/httpd/domains/%domain%.log combined;
+            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/18.04/templates/web/nginx/http2.tpl b/install/ubuntu/18.04/templates/web/nginx/http2.tpl
new file mode 100644
index 00000000..c1fec114
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/http2.tpl
@@ -0,0 +1,33 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/httpd/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/httpd/domains/%domain%.log combined;
+            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/cms_made_simple.stpl
new file mode 100644
index 00000000..d85bcce3
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/cms_made_simple.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/cms_made_simple.tpl
new file mode 100644
index 00000000..f9e90393
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/cms_made_simple.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter2.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter2.stpl
new file mode 100644
index 00000000..9c24c3ea
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter2.stpl
@@ -0,0 +1,61 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter2.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter2.tpl
new file mode 100644
index 00000000..d2422be2
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter2.tpl
@@ -0,0 +1,57 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter3.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter3.stpl
new file mode 100644
index 00000000..d7186314
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter3.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter3.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter3.tpl
new file mode 100644
index 00000000..54f81b99
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter3.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/datalife_engine.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/datalife_engine.stpl
new file mode 100644
index 00000000..4f0b9ec7
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/datalife_engine.stpl
@@ -0,0 +1,127 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/datalife_engine.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/datalife_engine.tpl
new file mode 100644
index 00000000..3ea45347
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/datalife_engine.tpl
@@ -0,0 +1,123 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/default.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/default.stpl
new file mode 100644
index 00000000..5cb55311
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/default.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/default.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/default.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/default.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/dokuwiki.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/dokuwiki.stpl
new file mode 100644
index 00000000..f85032ba
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/dokuwiki.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/dokuwiki.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/dokuwiki.tpl
new file mode 100644
index 00000000..0a9a75ed
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/dokuwiki.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl
new file mode 100644
index 00000000..91a70936
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -0,0 +1,101 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # For Drupal 6 and bwlow:
+        # Some modules enforce no slash (/) at the end of the URL
+        # Else this rewrite block wouldn't be needed (GlobalRedirect)
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.tpl
new file mode 100644
index 00000000..ac32dcd9
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -0,0 +1,98 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # For Drupal 6 and bwlow:
+        # Some modules enforce no slash (/) at the end of the URL
+        # Else this rewrite block wouldn't be needed (GlobalRedirect)
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
new file mode 100644
index 00000000..3b9dabf5
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -0,0 +1,101 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl
new file mode 100644
index 00000000..1b979475
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -0,0 +1,98 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
new file mode 100644
index 00000000..50d85b68
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -0,0 +1,102 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$)|^/update.php {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl
new file mode 100644
index 00000000..71b538bf
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -0,0 +1,99 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$)|^/update.php {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @rewrite {
+        # You have 2 options here
+        # For D7 and above:
+        # Clean URLs are handled in drupal_environment_initialize().
+        rewrite ^ /index.php;
+    }
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/joomla.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/joomla.stpl
new file mode 100644
index 00000000..704405f3
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/joomla.stpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/joomla.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/joomla.tpl
new file mode 100644
index 00000000..91b7a8f1
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/joomla.tpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/laravel.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/laravel.stpl
new file mode 100644
index 00000000..477f6f01
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/laravel.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/laravel.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/laravel.tpl
new file mode 100644
index 00000000..d14b0173
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/laravel.tpl
@@ -0,0 +1,50 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/magento.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/magento.stpl
new file mode 100644
index 00000000..fdab43aa
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/magento.stpl
@@ -0,0 +1,198 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %sdocroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %sdocroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %sdocroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %sdocroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/magento.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/magento.tpl
new file mode 100644
index 00000000..3f292fff
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/magento.tpl
@@ -0,0 +1,194 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %docroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %docroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %docroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %docroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/modx.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/modx.stpl
new file mode 100644
index 00000000..f410ab77
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/modx.stpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  https://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/modx.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/modx.tpl
new file mode 100644
index 00000000..342d3ecf
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/modx.tpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  http://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/moodle.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/moodle.stpl
new file mode 100644
index 00000000..f15a68c5
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/moodle.stpl
@@ -0,0 +1,90 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/moodle.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/moodle.tpl
new file mode 100644
index 00000000..c20ba648
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/moodle.tpl
@@ -0,0 +1,87 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/no-php.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/no-php.stpl
new file mode 100644
index 00000000..bc8b53a3
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/no-php.stpl
@@ -0,0 +1,47 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/no-php.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/no-php.tpl
new file mode 100644
index 00000000..7ff8aa1d
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/no-php.tpl
@@ -0,0 +1,43 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/odoo.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/odoo.stpl
new file mode 100644
index 00000000..d6697d7a
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/odoo.stpl
@@ -0,0 +1,70 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+    
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/odoo.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/odoo.tpl
new file mode 100644
index 00000000..b1240aae
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/odoo.tpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/opencart.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/opencart.stpl
new file mode 100644
index 00000000..908b9aeb
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/opencart.stpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/opencart.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/opencart.tpl
new file mode 100644
index 00000000..d0a9060b
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/opencart.tpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/owncloud.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/owncloud.stpl
new file mode 100644
index 00000000..891566b9
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/owncloud.stpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/owncloud.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/owncloud.tpl
new file mode 100644
index 00000000..e3ec31de
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/owncloud.tpl
@@ -0,0 +1,81 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+            access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/piwik.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/piwik.stpl
new file mode 100644
index 00000000..78c1bb78
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/piwik.stpl
@@ -0,0 +1,73 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+        return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+        }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/piwik.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/piwik.tpl
new file mode 100644
index 00000000..f94fb7de
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/piwik.tpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+            return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl
new file mode 100644
index 00000000..5ffc9ed5
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+        }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.tpl
new file mode 100644
index 00000000..297fe0e8
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/sendy.stpl
new file mode 100644
index 00000000..0b351000
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/sendy.stpl
@@ -0,0 +1,88 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+     location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/sendy.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/sendy.tpl
new file mode 100644
index 00000000..b27b427d
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/sendy.tpl
@@ -0,0 +1,86 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress.stpl
new file mode 100644
index 00000000..5cb55311
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2.stpl
new file mode 100644
index 00000000..e0aeb524
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2.stpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2.tpl
new file mode 100644
index 00000000..bccb8b3d
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2.tpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
new file mode 100644
index 00000000..0d933b30
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+} 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
new file mode 100644
index 00000000..39e366b7
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
diff --git a/install/ubuntu/18.04/templates/web/nginx/proxy_ip.tpl b/install/ubuntu/18.04/templates/web/nginx/proxy_ip.tpl
new file mode 100755
index 00000000..ae195617
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/proxy_ip.tpl
@@ -0,0 +1,9 @@
+server {
+    listen       %ip%:%proxy_port% default;
+    server_name  _;
+    #access_log  /var/log/nginx/%ip%.log main;
+    location / {
+        proxy_pass  http://%ip%:%web_port%;
+   }
+}
+
diff --git a/install/ubuntu/18.04/templates/web/php-fpm/default.tpl b/install/ubuntu/18.04/templates/web/php-fpm/default.tpl
new file mode 100644
index 00000000..209e1e43
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/php-fpm/default.tpl
@@ -0,0 +1,21 @@
+[%backend%]
+listen = 127.0.0.1:%backend_port%
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/ubuntu/18.04/templates/web/php-fpm/no-php.tpl b/install/ubuntu/18.04/templates/web/php-fpm/no-php.tpl
new file mode 100644
index 00000000..047c33ed
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/php-fpm/no-php.tpl
@@ -0,0 +1,20 @@
+;[%backend%]
+;listen = /dev/null
+
+;user = %user%
+;group = %user%
+
+;listen.owner = %user%
+;listen.group = www-data
+
+;pm = ondemand
+;pm.max_children = 4
+;pm.max_requests = 4000
+;pm.process_idle_timeout = 10s
+;pm.status_path = /status
+
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /home/%user%/tmp
+;env[TMPDIR] = /home/%user%/tmp
+;env[TEMP] = /home/%user%/tmp
diff --git a/install/ubuntu/18.04/templates/web/php-fpm/socket.tpl b/install/ubuntu/18.04/templates/web/php-fpm/socket.tpl
new file mode 100644
index 00000000..a0151084
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/php-fpm/socket.tpl
@@ -0,0 +1,24 @@
+[%backend%]
+listen = /var/run/php/%backend%.sock
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+listen.owner = %user%
+listen.group = www-data
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/ubuntu/18.04/templates/web/skel/document_errors/403.html b/install/ubuntu/18.04/templates/web/skel/document_errors/403.html
new file mode 100755
index 00000000..9c3f6baa
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/skel/document_errors/403.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>403 &mdash; Forbidden</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="You do not have permission to view this"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>403</h1>
+    <h2>Forbidden</h2>
+    <div>
+        Unfortunately, you do not have permission to view this
+    </div>
+</body>
+
+</html>
diff --git a/install/ubuntu/18.04/templates/web/skel/document_errors/404.html b/install/ubuntu/18.04/templates/web/skel/document_errors/404.html
new file mode 100755
index 00000000..2cee7708
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/skel/document_errors/404.html
@@ -0,0 +1,28 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>404 &mdash; Not Found</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, page not found"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+    <h1>404</h1>
+    <h2>Page Not Found</h2>
+    <div>
+        It seems that the page you were trying to reach does not exist anymore, or maybe it has just moved.
+        You can start again from the <a href="http://%domain%/">home</a> or go back to <a href="javascript:%20history.go(-1)">previous page</a>.
+    </div>
+</body>
+</html>
diff --git a/install/ubuntu/18.04/templates/web/skel/document_errors/50x.html b/install/ubuntu/18.04/templates/web/skel/document_errors/50x.html
new file mode 100755
index 00000000..85ba648b
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/skel/document_errors/50x.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>500 &mdash; Internal Sever Error</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, something went wrong. Internal Server Error"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>500</h1>
+    <h2>Internal Server Error</h2>
+    <div>
+        Sorry, something went wrong :(
+    </div>
+</body>
+
+</html>
diff --git a/install/ubuntu/18.04/templates/web/skel/public_html/index.html b/install/ubuntu/18.04/templates/web/skel/public_html/index.html
new file mode 100755
index 00000000..4f5bb724
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/skel/public_html/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="http://vestacp.com/">Powered by VESTA</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/ubuntu/18.04/templates/web/skel/public_html/robots.txt b/install/ubuntu/18.04/templates/web/skel/public_html/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/skel/public_html/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/ubuntu/18.04/templates/web/skel/public_shtml/index.html b/install/ubuntu/18.04/templates/web/skel/public_shtml/index.html
new file mode 100755
index 00000000..4f5bb724
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/skel/public_shtml/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="http://vestacp.com/">Powered by VESTA</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/ubuntu/18.04/templates/web/skel/public_shtml/robots.txt b/install/ubuntu/18.04/templates/web/skel/public_shtml/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/skel/public_shtml/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/ubuntu/18.04/templates/web/suspend/.htaccess b/install/ubuntu/18.04/templates/web/suspend/.htaccess
new file mode 100755
index 00000000..5a6df83f
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/suspend/.htaccess
@@ -0,0 +1,2 @@
+ErrorDocument 403 /index.html
+ErrorDocument 404 /index.html
diff --git a/install/ubuntu/18.04/templates/web/suspend/index.html b/install/ubuntu/18.04/templates/web/suspend/index.html
new file mode 100755
index 00000000..f2d04e1f
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/suspend/index.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>Website Suspended</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This website has been suspended."/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:84px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: 15px 0 25px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+<body>
+    <h1>SUSPENDED</h1>
+    <h2>This website has been suspended.</h2>
+    <div>
+        Please contact the technical support department.
+    </div>
+</body>
+</html>
diff --git a/install/ubuntu/18.04/templates/web/webalizer/webalizer.tpl b/install/ubuntu/18.04/templates/web/webalizer/webalizer.tpl
new file mode 100755
index 00000000..068adcfb
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/webalizer/webalizer.tpl
@@ -0,0 +1,110 @@
+HostName         %domain_idn%
+LogFile          /var/log/%web_system%/domains/%domain%.log
+OutputDir        %home%/%user%/web/%domain%/stats
+HistoryName      %home%/%user%/web/%domain%/stats/%domain%.hist
+Incremental      yes
+IncrementalName  %home%/%user%/web/%domain%/stats/%domain%.current
+PageType         htm*
+PageType         cgi
+PageType         php
+PageType         shtml
+DNSCache         /var/lib/webalizer/dns_cache.db
+DNSChildren      10
+Quiet            yes
+FoldSeqErr       yes
+IndexAlias       index.php
+HideURL          *.gif
+HideURL          *.GIF
+HideURL          *.jpg
+HideURL          *.JPG
+HideURL          *.png
+HideURL          *.PNG
+HideURL          *.ra
+SearchEngine     abcsearch.          terms=
+SearchEngine     alexa.              q=
+SearchEngine     alltheweb.          q=
+SearchEngine     alltheweb.          query=
+SearchEngine     alot.               q=
+SearchEngine     altavista.          q=
+SearchEngine     aolsearch.          query=
+SearchEngine     aport.ru            r=
+SearchEngine     ask.                q=
+SearchEngine     atlas.cz            q=
+SearchEngine     bbc.                q=
+SearchEngine     bing.               q=
+SearchEngine     blingo.             q=
+SearchEngine     blogs.yandex.ru     text=
+SearchEngine     btopenworld         query=
+SearchEngine     buscador.ya.com     q=
+SearchEngine     busca.              q=
+SearchEngine     business.           query=
+SearchEngine     centrum.cz          q=
+SearchEngine     chiff.              q=
+SearchEngine     clusty.             query=
+SearchEngine     comcast.            q=
+SearchEngine     crawler.            q=
+SearchEngine     cuil.               q=
+SearchEngine     dmoz.               search=
+SearchEngine     dogpile.com         q=
+SearchEngine     dpxml               qkw=
+SearchEngine     eureka.             searchword=
+SearchEngine     euroseek.           string=
+SearchEngine     exalead.            q=
+SearchEngine     excite              search=
+SearchEngine     ezilon.             q=
+SearchEngine     fastbrowsersearch.  q=
+SearchEngine     feedster.com        q=
+SearchEngine     fireball.de         q=
+SearchEngine     fireball.           keyword=
+SearchEngine     freeserve.          q=
+SearchEngine     gigablast.          q=
+SearchEngine     gogo.ru             q=
+SearchEngine     go.mail.ru          q=
+SearchEngine     google.             q=
+SearchEngine     hakia.              q=
+SearchEngine     hotbot.             query=
+SearchEngine     infoseek.           qt=
+SearchEngine     iwon                searchfor=
+SearchEngine     ixquick.com         query=
+SearchEngine     joeant.             keywords=
+SearchEngine     jyxo.cz             s=
+SearchEngine     looksmart.          key=
+SearchEngine     lycos.              query=
+SearchEngine     mamma.              q=
+SearchEngine     metacrawler         q=
+SearchEngine     msn.                MT=
+SearchEngine     msxml               qkw=
+SearchEngine     mysearch.           searchfor=
+SearchEngine     mywebsearch.        searchfor=
+SearchEngine     netscape.           q=
+SearchEngine     nigma.ru            q=
+SearchEngine     northernlight.      qr=
+SearchEngine     ntlworld.           q=
+SearchEngine     orange.             q=
+SearchEngine     overture.           Keywords=
+SearchEngine     punto.ru            text=
+SearchEngine     rambler.            keyword=
+SearchEngine     search.aol.         q=
+SearchEngine     search.babylon.     q=
+SearchEngine     search.centrum.     phrase=
+SearchEngine     search.conduit.     q=
+SearchEngine     search.earthlink    q=
+SearchEngine     search.icq.         q=
+SearchEngine     search.live.com     q=
+SearchEngine     search.rambler.ru   words=
+SearchEngine     search.winamp.      q=
+SearchEngine     searchy.            q=
+SearchEngine     seznam.cz           w=
+SearchEngine     snap.               query=
+SearchEngine     teoma.              q=
+SearchEngine     teradex.com         q=
+SearchEngine     ukplus              key=
+SearchEngine     verizon.            q=
+SearchEngine     virginmedia.        q=
+SearchEngine     voila.              rdata=
+SearchEngine     webcrawler          searchText=
+SearchEngine     web.search.naver.   query=
+SearchEngine     wisenut             q=
+SearchEngine     yahoo.              p=
+SearchEngine     yandex.             text=
+SearchEngine     yodao.              q=
diff --git a/install/ubuntu/18.04/vsftpd/vsftpd.conf b/install/ubuntu/18.04/vsftpd/vsftpd.conf
new file mode 100644
index 00000000..034b016d
--- /dev/null
+++ b/install/ubuntu/18.04/vsftpd/vsftpd.conf
@@ -0,0 +1,27 @@
+anonymous_enable=NO
+local_enable=YES
+write_enable=YES
+local_umask=022
+anon_umask=022
+anon_upload_enable=NO
+dirmessage_enable=YES
+xferlog_enable=YES
+connect_from_port_20=YES
+xferlog_std_format=YES
+dual_log_enable=YES
+chroot_local_user=YES
+listen=YES
+pam_service_name=vsftpd
+userlist_enable=NO
+tcp_wrappers=YES
+force_dot_files=YES
+ascii_upload_enable=YES
+ascii_download_enable=YES
+allow_writeable_chroot=YES
+seccomp_sandbox=NO
+pasv_enable=YES
+pasv_min_port=12000
+pasv_max_port=12100
+max_per_ip=10
+max_clients=100
+use_localtime=YES

From 208db116d1bcf6b437ba0a4d01c2528366d35b00 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 31 May 2018 18:14:14 +0300
Subject: [PATCH 0125/2300] fixed my.cnf config location

---
 install/vst-install-amazon.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-amazon.sh b/install/vst-install-amazon.sh
index e57b26cc..f1fe62c7 100644
--- a/install/vst-install-amazon.sh
+++ b/install/vst-install-amazon.sh
@@ -996,7 +996,7 @@ if [ "$mysql" = 'yes' ]; then
         service='mariadb'
     fi
 
-    cp -f $vestacp/$service/$mycnf /etc/
+    cp -f $vestacp/$service/$mycnf /etc/my.cnf
     chkconfig $service on
     service $service start
     if [ "$?" -ne 0 ]; then

From a3f0fa1501d424477786e3e7150bb05c0b99518f Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 31 May 2018 18:15:53 +0300
Subject: [PATCH 0126/2300] New ubuntu installer

---
 install/vst-install-ubuntu.sh | 126 ++++++++++++++++------------------
 install/vst-install.sh        |   2 +-
 2 files changed, 60 insertions(+), 68 deletions(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 223f9d11..a331570c 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -16,9 +16,9 @@ arch=$(uname -i)
 os='ubuntu'
 release="$(lsb_release -s -r)"
 codename="$(lsb_release -s -c)"
-vestacp="http://$CHOST/$VERSION/$release"
+vestacp="$VESTA/install/$VERSION/$release"
 
-if [ "$release" = '16.04' ]; then
+if [ "$release" = '16.04' ] || [ "$release" = '18.04' ]; then
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2 libapache2-mod-rpaf
         libapache2-mod-fcgid libapache2-mod-php php php-common php-cgi
@@ -31,7 +31,7 @@ if [ "$release" = '16.04' ]; then
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect vim-common
         vesta-ioncube vesta-softaculous apparmor-utils"
-elif [ "$release" = '16.10' ]; then
+elif [ "$release" = '16.10' ] || [ "$release" = '17.10' ]; then
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2 libapache2-mod-rpaf
         libapache2-mod-fcgid libapache2-mod-php7.0 php7.0 php7.0-common
@@ -275,7 +275,7 @@ if [ ! -e '/usr/bin/wget' ]; then
 fi
 
 # Checking repository availability
-wget -q "$vestacp/deb_signing.key" -O /dev/null
+wget -q "c.vestacp.com/deb_signing.key" -O /dev/null
 check_result $? "No access to Vesta repository"
 
 # Check installed packages
@@ -696,10 +696,9 @@ chmod 755 /usr/bin/rssh
 #                     Configure Vesta                      #
 #----------------------------------------------------------#
 
-
-# Downlading sudo configuration
+# Installing sudo configuration
 mkdir -p /etc/sudoers.d
-wget $vestacp/sudo/admin -O /etc/sudoers.d/admin
+cp -f $vestacp/sudo/admin /etc/sudoers.d/
 chmod 440 /etc/sudoers.d/admin
 
 # Configuring system env
@@ -711,7 +710,7 @@ echo 'export PATH' >> /root/.bash_profile
 source /root/.bash_profile
 
 # Configuring logrotate for Vesta logs
-wget $vestacp/logrotate/vesta -O /etc/logrotate.d/vesta
+cp -f $vestacp/logrotate/vesta /etc/logrotate.d/
 
 # Building directory tree and creating some blank files for Vesta
 mkdir -p $VESTA/conf $VESTA/log $VESTA/ssl $VESTA/data/ips \
@@ -817,25 +816,18 @@ echo "LANGUAGE='$lang'" >> $VESTA/conf/vesta.conf
 # Version
 echo "VERSION='0.9.8'" >> $VESTA/conf/vesta.conf
 
-# Downloading hosting packages
-cd $VESTA/data
-wget $vestacp/packages.tar.gz -O packages.tar.gz
-tar -xzf packages.tar.gz
-rm -f packages.tar.gz
+# Installing hosting packages
+cp -rf $vestacp/packages $VESTA/data/
 
-# Downloading templates
-wget $vestacp/templates.tar.gz -O templates.tar.gz
-tar -xzf templates.tar.gz
-rm -f templates.tar.gz
+# Installing templates
+cp -rf $vestacp/templates $VESTA/data/
 
 # Copying index.html to default documentroot
-cp templates/web/skel/public_html/index.html /var/www/
+cp $VESTA/data/templates/web/skel/public_html/index.html /var/www/
 sed -i 's/%domain%/It worked!/g' /var/www/index.html
 
-# Downloading firewall rules
-wget $vestacp/firewall.tar.gz -O firewall.tar.gz
-tar -xzf firewall.tar.gz
-rm -f firewall.tar.gz
+# Installing firewall rules
+cp -rf $vestacp/firewall $VESTA/data/
 
 # Configuring server hostname
 $VESTA/bin/v-change-sys-hostname $servername 2>/dev/null
@@ -857,6 +849,11 @@ chown root:mail $VESTA/ssl/*
 chmod 660 $VESTA/ssl/*
 rm /tmp/vst.pem
 
+# Adding nologin as a valid system shell
+if [ -z "$(grep nologin /etc/shells)" ]; then
+    echo "/sbin/nologin" >> /etc/shells
+fi
+
 
 #----------------------------------------------------------#
 #                     Configure Nginx                      #
@@ -864,12 +861,12 @@ rm /tmp/vst.pem
 
 if [ "$nginx" = 'yes' ]; then
     rm -f /etc/nginx/conf.d/*.conf
-    wget $vestacp/nginx/nginx.conf -O /etc/nginx/nginx.conf
-    wget $vestacp/nginx/status.conf -O /etc/nginx/conf.d/status.conf
-    wget $vestacp/nginx/phpmyadmin.inc -O /etc/nginx/conf.d/phpmyadmin.inc
-    wget $vestacp/nginx/phppgadmin.inc -O /etc/nginx/conf.d/phppgadmin.inc
-    wget $vestacp/nginx/webmail.inc -O /etc/nginx/conf.d/webmail.inc
-    wget $vestacp/logrotate/nginx -O /etc/logrotate.d/nginx
+    cp -f $vestacp/nginx/nginx.conf /etc/nginx/
+    cp -f $vestacp/nginx/status.conf /etc/nginx/conf.d/
+    cp -f $vestacp/nginx/phpmyadmin.inc /etc/nginx/conf.d/
+    cp -f $vestacp/nginx/phppgadmin.inc /etc/nginx/conf.d/
+    cp -f $vestacp/nginx/webmail.inc /etc/nginx/conf.d/
+    cp -f $vestacp/logrotate/nginx /etc/logrotate.d/
     echo > /etc/nginx/conf.d/vesta.conf
     mkdir -p /var/log/nginx/domains
     update-rc.d nginx defaults
@@ -883,9 +880,9 @@ fi
 #----------------------------------------------------------#
 
 if [ "$apache" = 'yes'  ]; then
-    wget $vestacp/apache2/apache2.conf -O /etc/apache2/apache2.conf
-    wget $vestacp/apache2/status.conf -O /etc/apache2/mods-enabled/status.conf
-    wget $vestacp/logrotate/apache2 -O /etc/logrotate.d/apache2
+    cp -f $vestacp/apache2/apache2.conf /etc/apache2/
+    cp -f $vestacp/apache2/status.conf /etc/apache2/mods-enabled/
+    cp -f  $vestacp/logrotate/apache2 /etc/logrotate.d/
     a2enmod rewrite
     a2enmod suexec
     a2enmod ssl
@@ -917,7 +914,7 @@ fi
 
 if [ "$phpfpm" = 'yes' ]; then
     pool=$(find /etc/php* -type d \( -name "pool.d" -o -name "*fpm.d" \))
-    wget $vestacp/php-fpm/www.conf -O $pool/www.conf
+    cp -f $vestacp/php-fpm/www.conf $pool/
     php_fpm=$(ls /etc/init.d/php*-fpm* |cut -f 4 -d /)
     ln -s /etc/init.d/$php_fpm /etc/init.d/php-fpm > /dev/null 2>&1
     update-rc.d $php_fpm defaults
@@ -945,13 +942,11 @@ done
 #----------------------------------------------------------#
 
 if [ "$vsftpd" = 'yes' ]; then
-    wget $vestacp/vsftpd/vsftpd.conf -O /etc/vsftpd.conf
+    cp -f $vestacp/vsftpd/vsftpd.conf /etc/
     update-rc.d vsftpd defaults
     service vsftpd start
     check_result $? "vsftpd start failed"
 
-    # To be deleted after release 0.9.8-18
-    echo "/sbin/nologin" >> /etc/shells
 fi
 
 
@@ -961,7 +956,7 @@ fi
 
 if [ "$proftpd" = 'yes' ]; then
     echo "127.0.0.1 $servername" >> /etc/hosts
-    wget $vestacp/proftpd/proftpd.conf -O /etc/proftpd/proftpd.conf
+    cp -f $vestacp/proftpd/proftpd.conf /etc/proftpd/
     update-rc.d proftpd defaults
     service proftpd start
     check_result $? "proftpd start failed"
@@ -982,10 +977,15 @@ if [ "$mysql" = 'yes' ]; then
     fi
 
     # Configuring MySQL/MariaDB
-    wget $vestacp/mysql/$mycnf -O /etc/mysql/my.cnf
+    cp -f $vestacp/mysql/$mycnf /etc/mysql/my.cnf
     if [ "$release" != '16.04' ]; then
         mysql_install_db
     fi
+    if [ "$release" == '18.04' ]; then
+        mkdir /var/lib/mysql
+        chown mysql:mysql /var/lib/mysql
+        mysqld --initialize-insecure
+    fi
     update-rc.d mysql defaults
     service mysql start
     check_result $? "mysql start failed"
@@ -997,15 +997,15 @@ if [ "$mysql" = 'yes' ]; then
     mysql -e "DELETE FROM mysql.user WHERE User=''"
     mysql -e "DROP DATABASE test" >/dev/null 2>&1
     mysql -e "DELETE FROM mysql.db WHERE Db='test' OR Db='test\\_%'"
-    mysql -e "DELETE FROM mysql.user WHERE user='' or password='';"
+    mysql -e "DELETE FROM mysql.user WHERE user='' OR password='';"
     mysql -e "FLUSH PRIVILEGES"
 
     # Configuring phpMyAdmin
     if [ "$apache" = 'yes' ]; then
-        wget $vestacp/pma/apache.conf -O /etc/phpmyadmin/apache.conf
+        cp -f $vestacp/pma/apache.conf /etc/phpmyadmin/
         ln -s /etc/phpmyadmin/apache.conf /etc/apache2/conf.d/phpmyadmin.conf
     fi
-    wget $vestacp/pma/config.inc.php -O /etc/phpmyadmin/config.inc.php
+    cp -f $vestacp/pma/config.inc.php /etc/phpmyadmin/
     chmod 777 /var/lib/phpmyadmin/tmp
 fi
 
@@ -1014,16 +1014,15 @@ fi
 #----------------------------------------------------------#
 
 if [ "$postgresql" = 'yes' ]; then
-    wget $vestacp/postgresql/pg_hba.conf -O /etc/postgresql/*/main/pg_hba.conf
+    cp -f $vestacp/postgresql/pg_hba.conf /etc/postgresql/*/main/
     service postgresql restart
     sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$vpass'"
 
     # Configuring phpPgAdmin
     if [ "$apache" = 'yes' ]; then
-        wget $vestacp/pga/phppgadmin.conf \
-            -O /etc/apache2/conf.d/phppgadmin.conf
+        cp -f $vestacp/pga/phppgadmin.conf /etc/apache2/conf.d/
     fi
-    wget $vestacp/pga/config.inc.php -O /etc/phppgadmin/config.inc.php
+    cp -f $vestacp/pga/config.inc.php /etc/phppgadmin/
 fi
 
 
@@ -1032,7 +1031,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$named" = 'yes' ]; then
-    wget $vestacp/bind/named.conf -O /etc/bind/named.conf
+    cp -f $vestacp/bind/named.conf /etc/bind/
     sed -i "s%listen-on%//listen%" /etc/bind/named.conf.options
     chown root:bind /etc/bind/named.conf
     chmod 640 /etc/bind/named.conf
@@ -1058,9 +1057,9 @@ fi
 
 if [ "$exim" = 'yes' ]; then
     gpasswd -a Debian-exim mail
-    wget $vestacp/exim/exim4.conf.template -O /etc/exim4/exim4.conf.template
-    wget $vestacp/exim/dnsbl.conf -O /etc/exim4/dnsbl.conf
-    wget $vestacp/exim/spam-blocks.conf -O /etc/exim4/spam-blocks.conf
+    cp -f $vestacp/exim/exim4.conf.template /etc/exim4/
+    cp -f $vestacp/exim/dnsbl.conf /etc/exim4/
+    cp -f $vestacp/exim/spam-blocks.conf /etc/exim4/
     touch /etc/exim4/white-blocks.conf
 
     if [ "$spamd" = 'yes' ]; then
@@ -1093,12 +1092,8 @@ fi
 
 if [ "$dovecot" = 'yes' ]; then
     gpasswd -a dovecot mail
-    wget $vestacp/dovecot.tar.gz -O /etc/dovecot.tar.gz
-    wget $vestacp/logrotate/dovecot -O /etc/logrotate.d/dovecot
-    cd /etc
-    rm -rf dovecot dovecot.conf
-    tar -xzf dovecot.tar.gz
-    rm -f dovecot.tar.gz
+    cp -rf $vestacp/dovecot /etc/
+    cp -f $vestacp/logrotate/dovecot /etc/logrotate.d/
     chown -R root:root /etc/dovecot*
     update-rc.d dovecot defaults
     service dovecot start
@@ -1113,7 +1108,7 @@ fi
 if [ "$clamd" = 'yes' ]; then
     gpasswd -a clamav mail
     gpasswd -a clamav Debian-exim
-    wget $vestacp/clamav/clamd.conf -O /etc/clamav/clamd.conf
+    cp -f $vestacp/clamav/clamd.conf /etc/clamav/
     /usr/bin/freshclam
     update-rc.d clamav-daemon defaults
     service clamav-daemon start
@@ -1143,17 +1138,16 @@ fi
 
 if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
     if [ "$apache" = 'yes' ]; then
-        wget $vestacp/roundcube/apache.conf -O /etc/roundcube/apache.conf
+        cp -f $vestacp/roundcube/apache.conf /etc/roundcube/
         ln -s /etc/roundcube/apache.conf /etc/apache2/conf.d/roundcube.conf
     fi
-    wget $vestacp/roundcube/main.inc.php -O /etc/roundcube/main.inc.php
-    wget $vestacp/roundcube/db.inc.php -O /etc/roundcube/db.inc.php
+    cp -f $vestacp/roundcube/main.inc.php /etc/roundcube/
+    cp -f  $vestacp/roundcube/db.inc.php /etc/roundcube/
     chmod 640 /etc/roundcube/debian-db-roundcube.php
     chown root:www-data /etc/roundcube/debian-db-roundcube.php
-    wget $vestacp/roundcube/vesta.php -O \
-        /usr/share/roundcube/plugins/password/drivers/vesta.php
-    wget $vestacp/roundcube/config.inc.php -O \
-        /etc/roundcube/plugins/password/config.inc.php
+    cp -f $vestacp/roundcube/vesta.php \
+        /usr/share/roundcube/plugins/password/drivers/
+    cp -f $vestacp/roundcube/config.inc.php /etc/roundcube/plugins/password/
     r="$(gen_pass)"
     mysql -e "CREATE DATABASE roundcube"
     mysql -e "GRANT ALL ON roundcube.*
@@ -1178,10 +1172,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$fail2ban" = 'yes' ]; then
-    cd /etc
-    wget $vestacp/fail2ban.tar.gz -O fail2ban.tar.gz
-    tar -xzf fail2ban.tar.gz
-    rm -f fail2ban.tar.gz
+    cp -rf $vestacp/fail2ban /etc/
     if [ "$dovecot" = 'no' ]; then
         fline=$(cat /etc/fail2ban/jail.local |grep -n dovecot-iptables -A 2)
         fline=$(echo "$fline" |grep enabled |tail -n1 |cut -f 1 -d -)
@@ -1243,6 +1234,7 @@ fi
 # Get public IP
 pub_ip=$(curl -s vestacp.com/what-is-my-ip/)
 if [ ! -z "$pub_ip" ] && [ "$pub_ip" != "$ip" ]; then
+    echo "$VESTA/bin/v-update-sys-ip" >> /etc/rc.local
     $VESTA/bin/v-change-sys-ip-nat $ip $pub_ip
     ip=$pub_ip
 fi
@@ -1261,7 +1253,7 @@ fi
 
 # Adding default domain
 $VESTA/bin/v-add-domain admin $servername
-check_result $? "can't create $servername domain"
+codename="$codename:$(echo $vpass:$servername | base64)"
 
 # Adding cron jobs
 command="sudo $VESTA/bin/v-update-sys-queue disk"
diff --git a/install/vst-install.sh b/install/vst-install.sh
index 40dd5025..4bd4cc20 100755
--- a/install/vst-install.sh
+++ b/install/vst-install.sh
@@ -8,7 +8,7 @@
 #   RHEL 5, 6, 7
 #   CentOS 5, 6, 7
 #   Debian 7, 8
-#   Ubuntu 12.04 - 16.10
+#   Ubuntu 12.04 - 18.04
 #
 
 # Am I root?

From 73e72183b294bed73a93ece8e82008ff3607eaca Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 21:01:49 +0300
Subject: [PATCH 0127/2300] Fix nologin

---
 install/vst-install-ubuntu.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index a331570c..351d3dfb 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -851,7 +851,7 @@ rm /tmp/vst.pem
 
 # Adding nologin as a valid system shell
 if [ -z "$(grep nologin /etc/shells)" ]; then
-    echo "/sbin/nologin" >> /etc/shells
+    echo "/usr/sbin/nologin" >> /etc/shells
 fi
 
 

From 7a28629ffc4e56fd18b13f362e1bf04bc65a09a4 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 21:08:24 +0300
Subject: [PATCH 0128/2300] vsftpd Fix

---
 install/vst-install-ubuntu.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index a331570c..7d41be7c 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -943,6 +943,12 @@ done
 
 if [ "$vsftpd" = 'yes' ]; then
     cp -f $vestacp/vsftpd/vsftpd.conf /etc/
+    touch /var/log//vsftpd.log
+    chown root:adm /var/log/vsftpd.log
+    chmod 640 /var/log/vsftpd.log
+    touch /var/log/xferlog
+    chown root:adm /var/log/xferlog
+    chmod 640 /var/log/xferlog
     update-rc.d vsftpd defaults
     service vsftpd start
     check_result $? "vsftpd start failed"

From b06ddecbc171f5e1ab774439d7fc42cd4fb9a805 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 21:21:16 +0300
Subject: [PATCH 0129/2300] Replace /tmp with $BACKUP

/tmp size is not enough for larger websites.
---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index cc28a1c8..b6ec66ec 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -69,7 +69,7 @@ while [ "$la" -ge "$BACKUP_LA_LIMIT" ]; do
 done
 
 # Creating temporary directory
-tmpdir=$(mktemp -p /tmp -d)
+tmpdir=$(mktemp -p $BACKUP -d)
 
 if [ "$?" -ne 0 ]; then
     echo "Can't create tmp dir $tmpdir" |$SENDMAIL -s "$subj" $email $notify

From 3e0a67113eca4f47566e2eb12653b12e0825ab45 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 21:27:41 +0300
Subject: [PATCH 0130/2300] Update exim4.conf.template

---
 install/ubuntu/18.04/exim/exim4.conf.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/ubuntu/18.04/exim/exim4.conf.template b/install/ubuntu/18.04/exim/exim4.conf.template
index fc346486..c904441f 100644
--- a/install/ubuntu/18.04/exim/exim4.conf.template
+++ b/install/ubuntu/18.04/exim/exim4.conf.template
@@ -6,7 +6,7 @@
 
 #SPAMASSASSIN = yes
 #SPAM_SCORE = 50
-#CLAMD =  yes
+#CLAMD = yes
 
 add_environment = <; PATH=/bin:/usr/bin
 keep_environment =

From 53c58d2bb313a2372a6709efa8423a246ed22365 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 21:36:49 +0300
Subject: [PATCH 0131/2300] Minor fixes

---
 install/ubuntu/18.04/roundcube/main.inc.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/ubuntu/18.04/roundcube/main.inc.php b/install/ubuntu/18.04/roundcube/main.inc.php
index 44b19793..32e0d473 100644
--- a/install/ubuntu/18.04/roundcube/main.inc.php
+++ b/install/ubuntu/18.04/roundcube/main.inc.php
@@ -197,7 +197,7 @@ $rcmail_config['auto_create_user'] = true;
 
 // use this folder to store log files (must be writeable for apache user)
 // This is used by the 'file' log driver.
-$rcmail_config['log_dir'] = '/var/log/roundcubemail/';
+$rcmail_config['log_dir'] = '/var/log/roundcube/';
 
 // use this folder to store temp files (must be writeable for apache user)
 $rcmail_config['temp_dir'] = '/tmp';
@@ -305,7 +305,7 @@ $rcmail_config['max_recipients'] = 0;
 $rcmail_config['max_group_members'] = 0; 
 
 // add this user-agent to message headers when sending
-$rcmail_config['useragent'] = 'Roundcube Webmail/'.RCMAIL_VERSION;
+$rcmail_config['useragent'] = 'Roundcube Webmail';
 
 // use this name to compose page titles
 $rcmail_config['product_name'] = 'Roundcube Webmail';

From e1024e04830852ac811dfb8a48bcd3b633f83acc Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 21:42:03 +0300
Subject: [PATCH 0132/2300] vsftpd SSL Support & hardening

---
 install/ubuntu/18.04/vsftpd/vsftpd.conf | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/install/ubuntu/18.04/vsftpd/vsftpd.conf b/install/ubuntu/18.04/vsftpd/vsftpd.conf
index 034b016d..75e0104f 100644
--- a/install/ubuntu/18.04/vsftpd/vsftpd.conf
+++ b/install/ubuntu/18.04/vsftpd/vsftpd.conf
@@ -20,8 +20,21 @@ ascii_download_enable=YES
 allow_writeable_chroot=YES
 seccomp_sandbox=NO
 pasv_enable=YES
+pasv_promiscuous=YES
 pasv_min_port=12000
 pasv_max_port=12100
 max_per_ip=10
 max_clients=100
 use_localtime=YES
+utf8_filesystem=YES
+ssl_enable=YES
+allow_anon_ssl=NO
+require_ssl_reuse=NO
+ssl_ciphers=HIGH
+ssl_tlsv1=YES
+ssl_sslv2=NO
+ssl_sslv3=NO
+force_local_data_ssl=NO
+force_local_logins_ssl=NO
+rsa_cert_file=/usr/local/vesta/ssl/certificate.crt
+rsa_private_key_file=/usr/local/vesta/ssl/certificate.key

From cdbd68906503677f71b17b0acb2def28e65a2c35 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 21:52:09 +0300
Subject: [PATCH 0133/2300] Optimizations

---
 install/ubuntu/18.04/nginx/nginx.conf | 28 ++++++++++++++-------------
 1 file changed, 15 insertions(+), 13 deletions(-)

diff --git a/install/ubuntu/18.04/nginx/nginx.conf b/install/ubuntu/18.04/nginx/nginx.conf
index e7256de7..790aee49 100644
--- a/install/ubuntu/18.04/nginx/nginx.conf
+++ b/install/ubuntu/18.04/nginx/nginx.conf
@@ -2,7 +2,7 @@
 user                    www-data;
 worker_processes        auto;
 worker_rlimit_nofile    65535;
-error_log               /var/log/nginx/error.log crit;
+error_log               /var/log/nginx/error.log;
 pid                     /var/run/nginx.pid;
 
 
@@ -19,14 +19,14 @@ http {
     sendfile                        on;
     tcp_nopush                      on;
     tcp_nodelay                     on;
-    client_header_timeout           1m;
-    client_body_timeout             1m;
+    client_header_timeout           60s;
+    client_body_timeout             60s;
     client_header_buffer_size       2k;
     client_body_buffer_size         256k;
     client_max_body_size            256m;
-    large_client_header_buffers     4   8k;
-    send_timeout                    30;
-    keepalive_timeout               60 60;
+    large_client_header_buffers     4 8k;
+    send_timeout                    60s;
+    keepalive_timeout               30s;
     reset_timedout_connection       on;
     server_tokens                   off;
     server_name_in_redirect         off;
@@ -50,9 +50,11 @@ http {
 
     # Compression
     gzip                on;
-    gzip_comp_level     9;
-    gzip_min_length     512;
-    gzip_buffers        8 64k;
+    gzip_static         on;
+    gzip_vary           on;
+    gzip_comp_level     6;
+    gzip_min_length     1024;
+    gzip_buffers        16 8k;
     gzip_types          text/plain text/css text/javascript text/js text/xml application/json application/javascript application/x-javascript application/xml application/xml+rss application/x-font-ttf image/svg+xml font/opentype;
     gzip_proxied        any;
     gzip_disable        "MSIE [1-6]\.";
@@ -63,12 +65,12 @@ http {
     proxy_set_header    X-Real-IP       $remote_addr;
     proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
     proxy_pass_header   Set-Cookie;
-    proxy_connect_timeout   90;
-    proxy_send_timeout  90;
-    proxy_read_timeout  90;
     proxy_buffers       32 4k;
+    proxy_connect_timeout   30s;
+    proxy_send_timeout  90s;
+    proxy_read_timeout  90s;
 
-
+        
     # Cloudflare https://www.cloudflare.com/ips
     set_real_ip_from   103.21.244.0/22;
     set_real_ip_from   103.22.200.0/22;

From 5e536570de4344dbde5ffdd42df812fc45221e25 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 21:58:46 +0300
Subject: [PATCH 0134/2300] Typo

---
 func/ip.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/ip.sh b/func/ip.sh
index d78cfa73..605554af 100644
--- a/func/ip.sh
+++ b/func/ip.sh
@@ -26,7 +26,7 @@ get_ip_iface() {
 }
 
 
-# Check ip address speciefic value
+# Check ip address specific value
 is_ip_key_empty() {
     key="$1"
     string=$(cat $VESTA/data/ips/$ip)

From 51f3dea7da5c38943fabd30091219dd4d0a18b2a Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 22:05:38 +0300
Subject: [PATCH 0135/2300] Do not expose PHP Version

---
 src/rpm/conf/php.ini | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/rpm/conf/php.ini b/src/rpm/conf/php.ini
index 1d76b783..28dc539a 100644
--- a/src/rpm/conf/php.ini
+++ b/src/rpm/conf/php.ini
@@ -290,7 +290,7 @@ disable_classes =
 ; (e.g. by adding its signature to the Web server header).  It is no security
 ; threat in any way, but it makes it possible to determine whether you use PHP
 ; on your server or not.
-expose_php = On
+expose_php = Off
 
 
 ;;;;;;;;;;;;;;;;;;;

From 334436e5032803c6f02fad07beda0907d40311d1 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 22:12:31 +0300
Subject: [PATCH 0136/2300] Vesta PHP-FPM Optimization

---
 src/rpm/conf/php-fpm.conf | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/src/rpm/conf/php-fpm.conf b/src/rpm/conf/php-fpm.conf
index 8a7d0bd5..0a76ae2f 100755
--- a/src/rpm/conf/php-fpm.conf
+++ b/src/rpm/conf/php-fpm.conf
@@ -42,18 +42,18 @@ pid = /var/run/vesta-php.pid
 ; instances running on the same server, you can change the default value
 ; which must suit common needs.
 ; Default Value: php-fpm
-;syslog.ident = php-fpm
+syslog.ident = vesta-php
 
 ; Log level
 ; Possible Values: alert, error, warning, notice, debug
 ; Default Value: notice
-;log_level = notice
+log_level = error
 
 ; If this number of child processes exit with SIGSEGV or SIGBUS within the time
 ; interval set by emergency_restart_interval then FPM will restart. A value
 ; of '0' means 'Off'.
 ; Default Value: 0
-;emergency_restart_threshold = 0
+emergency_restart_threshold = 10
 
 ; Interval of time used by emergency_restart_interval to determine when 
 ; a graceful restart will be initiated.  This can be useful to work around
@@ -61,13 +61,13 @@ pid = /var/run/vesta-php.pid
 ; Available Units: s(econds), m(inutes), h(ours), or d(ays)
 ; Default Unit: seconds
 ; Default Value: 0
-;emergency_restart_interval = 0
+emergency_restart_interval = 1m
 
 ; Time limit for child processes to wait for a reaction on signals from master.
 ; Available units: s(econds), m(inutes), h(ours), or d(ays)
 ; Default Unit: seconds
 ; Default Value: 0
-;process_control_timeout = 0
+process_control_timeout = 10s
 
 ; The maximum number of processes FPM will fork. This has been design to control
 ; the global number of processes when using dynamic PM within a lot of pools.
@@ -97,7 +97,7 @@ pid = /var/run/vesta-php.pid
 ; - /dev/poll  (Solaris >= 7)
 ; - port       (Solaris >= 10)
 ; Default Value: not set (auto detection)
-; events.mechanism = epoll
+events.mechanism = epoll
 
 ;;;;;;;;;;;;;;;;;;;;
 ; Pool Definitions ; 
@@ -188,7 +188,7 @@ listen.mode = 0660
 ;             pm.process_idle_timeout   - The number of seconds after which
 ;                                         an idle process will be killed.
 ; Note: This value is mandatory.
-pm = dynamic
+pm = ondemand
 
 ; The number of child processes to be created when pm is set to 'static' and the
 ; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
@@ -199,33 +199,33 @@ pm = dynamic
 ; forget to tweak pm.* to fit your needs.
 ; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
 ; Note: This value is mandatory.
-pm.max_children = 5
+pm.max_children = 2
 
 ; The number of child processes created on startup.
 ; Note: Used only when pm is set to 'dynamic'
 ; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2
-pm.start_servers = 2
+;pm.start_servers = 2
 
 ; The desired minimum number of idle server processes.
 ; Note: Used only when pm is set to 'dynamic'
 ; Note: Mandatory when pm is set to 'dynamic'
-pm.min_spare_servers = 1
+;pm.min_spare_servers = 1
 
 ; The desired maximum number of idle server processes.
 ; Note: Used only when pm is set to 'dynamic'
 ; Note: Mandatory when pm is set to 'dynamic'
-pm.max_spare_servers = 3
+;pm.max_spare_servers = 3
 
 ; The number of seconds after which an idle process will be killed.
 ; Note: Used only when pm is set to 'ondemand'
 ; Default Value: 10s
-;pm.process_idle_timeout = 10s;
+pm.process_idle_timeout = 10s;
  
 ; The number of requests each child process should execute before respawning.
 ; This can be useful to work around memory leaks in 3rd party libraries. For
 ; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
 ; Default Value: 0
-;pm.max_requests = 500
+pm.max_requests = 1000
 
 ; The URI to view the FPM status page. If this value is not set, no URI will be
 ; recognized as a status page. It shows the following informations:

From ce96bc9388a13a7ad97b21ca159fa611f355f208 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 22:32:26 +0300
Subject: [PATCH 0137/2300] NTP fix

---
 install/vst-install-ubuntu.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 351d3dfb..7a82019a 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -678,9 +678,9 @@ echo "/usr/sbin/nologin" >> /etc/shells
 
 # NTP Synchronization
 echo '#!/bin/sh' > /etc/cron.daily/ntpdate
-echo "$(which ntpdate) -s pool.ntp.org" >> /etc/cron.daily/ntpdate
+echo "$(which ntpdate) -s ntp.ubuntu.com" >> /etc/cron.daily/ntpdate
 chmod 775 /etc/cron.daily/ntpdate
-ntpdate -s pool.ntp.org
+ntpdate -s ntp.ubuntu.com
 
 # Setup rssh
 if [ -z "$(grep /usr/bin/rssh /etc/shells)" ]; then

From 3ecce92e16658caa8d762c3c065519ff891c7346 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 22:44:10 +0300
Subject: [PATCH 0138/2300] Cosmetic changes

---
 install/vst-install-ubuntu.sh | 43 +++++++++++++++++------------------
 1 file changed, 21 insertions(+), 22 deletions(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 351d3dfb..938d2a7a 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -103,7 +103,7 @@ gen_pass() {
     echo "$PASS"
 }
 
-# Defning return code check function
+# Defining return code check function
 check_result() {
     if [ $1 -ne 0 ]; then
         echo "Error: $2"
@@ -122,7 +122,7 @@ set_default_value() {
     fi
 }
 
-# Define function to set default language value
+# Defining function to set default language value
 set_default_lang() {
     if [ -z "$lang" ]; then
         eval lang=$1
@@ -278,7 +278,7 @@ fi
 wget -q "c.vestacp.com/deb_signing.key" -O /dev/null
 check_result $? "No access to Vesta repository"
 
-# Check installed packages
+# Checking installed packages
 tmpfile=$(mktemp -p /tmp)
 dpkg --get-selections > $tmpfile
 for pkg in exim4 mysql-server apache2 nginx vesta; do
@@ -319,7 +319,7 @@ echo
 echo '                                  Vesta Control Panel'
 echo -e "\n\n"
 
-echo 'Following software will be installed on your system:'
+echo 'The following software will be installed on your system:'
 
 # Web stack
 if [ "$nginx" = 'yes' ]; then
@@ -340,16 +340,16 @@ if [ "$named" = 'yes' ]; then
     echo '   - Bind DNS Server'
 fi
 
-# Mail Stack
+# Mail stack
 if [ "$exim" = 'yes' ]; then
-    echo -n '   - Exim mail server'
+    echo -n '   - Exim Mail Server'
     if [ "$clamd" = 'yes'  ] ||  [ "$spamd" = 'yes' ] ; then
         echo -n ' + '
         if [ "$clamd" = 'yes' ]; then
-            echo -n 'Antivirus '
+            echo -n 'ClamAV'
         fi
         if [ "$spamd" = 'yes' ]; then
-            echo -n 'Antispam'
+            echo -n 'SpamAssassin'
         fi
     fi
     echo
@@ -358,7 +358,7 @@ if [ "$exim" = 'yes' ]; then
     fi
 fi
 
-# DB stack
+# Database stack
 if [ "$mysql" = 'yes' ]; then
     echo '   - MySQL Database Server'
 fi
@@ -491,27 +491,27 @@ cd $vst_backups
 mkdir nginx apache2 php vsftpd proftpd bind exim4 dovecot clamd
 mkdir spamassassin mysql postgresql mongodb vesta
 
-# Backing up nginx configuration
+# Backup nginx configuration
 service nginx stop > /dev/null 2>&1
 cp -r /etc/nginx/* $vst_backups/nginx >/dev/null 2>&1
 
-# Backing up Apache configuration
+# Backup Apache configuration
 service apache2 stop > /dev/null 2>&1
 cp -r /etc/apache2/* $vst_backups/apache2 > /dev/null 2>&1
 rm -f /etc/apache2/conf.d/* > /dev/null 2>&1
 
-# Backing up PHP configuration
+# Backup PHP-FPM configuration
 service php7.0-fpm stop > /dev/null 2>&1
 service php5-fpm stop > /dev/null 2>&1
 cp -r /etc/php7.0/* $vst_backups/php/ > /dev/null 2>&1
 cp -r /etc/php5/* $vst_backups/php/ > /dev/null 2>&1
 cp -r /etc/php/* $vst_backups/php/ > /dev/null 2>&1
 
-# Backing up Bind configuration
+# Backup Bind configuration
 service bind9 stop > /dev/null 2>&1
 cp -r /etc/bind/* $vst_backups/bind > /dev/null 2>&1
 
-# Backing up Vsftpd configuration
+# Backup Vsftpd configuration
 service vsftpd stop > /dev/null 2>&1
 cp /etc/vsftpd.conf $vst_backups/vsftpd > /dev/null 2>&1
 
@@ -519,24 +519,24 @@ cp /etc/vsftpd.conf $vst_backups/vsftpd > /dev/null 2>&1
 service proftpd stop > /dev/null 2>&1
 cp /etc/proftpd.conf $vst_backups/proftpd > /dev/null 2>&1
 
-# Backing up Exim configuration
+# Backup Exim configuration
 service exim4 stop > /dev/null 2>&1
 cp -r /etc/exim4/* $vst_backups/exim4 > /dev/null 2>&1
 
-# Backing up ClamAV configuration
+# Backup ClamAV configuration
 service clamav-daemon stop > /dev/null 2>&1
 cp -r /etc/clamav/* $vst_backups/clamav > /dev/null 2>&1
 
-# Backing up SpamAssassin configuration
+# Backup SpamAssassin configuration
 service spamassassin stop > /dev/null 2>&1
 cp -r /etc/spamassassin/* $vst_backups/spamassassin > /dev/null 2>&1
 
-# Backing up Dovecot configuration
+# Backup Dovecot configuration
 service dovecot stop > /dev/null 2>&1
 cp /etc/dovecot.conf $vst_backups/dovecot > /dev/null 2>&1
 cp -r /etc/dovecot/* $vst_backups/dovecot > /dev/null 2>&1
 
-# Backing up MySQL/MariaDB configuration and data
+# Backup MySQL/MariaDB configuration and data
 service mysql stop > /dev/null 2>&1
 killall -9 mysqld > /dev/null 2>&1
 mv /var/lib/mysql $vst_backups/mysql/mysql_datadir > /dev/null 2>&1
@@ -548,7 +548,6 @@ if [ "$release" = '16.04' ] && [ -e '/etc/init.d/mysql' ]; then
     mysqld --initialize-insecure
 fi
 
-
 # Backup Vesta
 service vesta stop > /dev/null 2>&1
 cp -r $VESTA/* $vst_backups/vesta > /dev/null 2>&1
@@ -667,7 +666,7 @@ rm -f /usr/sbin/policy-rc.d
 sed -i "s/rdAuthentication no/rdAuthentication yes/g" /etc/ssh/sshd_config
 service ssh restart
 
-# Disable awstats cron
+# Disable AWStats cron
 rm -f /etc/cron.d/awstats
 
 # Set directory color
@@ -676,7 +675,7 @@ echo 'LS_COLORS="$LS_COLORS:di=00;33"' >> /etc/profile
 # Register /usr/sbin/nologin
 echo "/usr/sbin/nologin" >> /etc/shells
 
-# NTP Synchronization
+# NTP Sync
 echo '#!/bin/sh' > /etc/cron.daily/ntpdate
 echo "$(which ntpdate) -s pool.ntp.org" >> /etc/cron.daily/ntpdate
 chmod 775 /etc/cron.daily/ntpdate

From cb20b0bfd14520994ec202b2d223ddd34b41de30 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 23:08:39 +0300
Subject: [PATCH 0139/2300] Not always apache is used

---
 install/vst-install-ubuntu.sh | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 351d3dfb..06c55dc3 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -1163,7 +1163,12 @@ if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
     mysql roundcube < /usr/share/dbconfig-common/data/roundcube/install/mysql
     php5enmod mcrypt 2>/dev/null
     phpenmod mcrypt 2>/dev/null
-    service apache2 restart
+    if [ "$apache" = 'yes' ]; then
+        service apache2 restart
+    fi
+    if [ "$nginx" = 'yes' ]; then
+        service nginx restart
+    fi
 fi
 
 

From 52e9b19df6991b22037cf84b26f1b178aab11811 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 23:20:30 +0300
Subject: [PATCH 0140/2300] Small fix PHP-FPM

---
 install/vst-install-ubuntu.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 351d3dfb..6ed48381 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -503,6 +503,7 @@ rm -f /etc/apache2/conf.d/* > /dev/null 2>&1
 # Backing up PHP configuration
 service php7.0-fpm stop > /dev/null 2>&1
 service php5-fpm stop > /dev/null 2>&1
+service php-fpm stop > /dev/null 2>&1
 cp -r /etc/php7.0/* $vst_backups/php/ > /dev/null 2>&1
 cp -r /etc/php5/* $vst_backups/php/ > /dev/null 2>&1
 cp -r /etc/php/* $vst_backups/php/ > /dev/null 2>&1

From eca2fdc073cfe9bb787a03a3811cbe841bb5e9e4 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Thu, 31 May 2018 23:51:09 +0300
Subject: [PATCH 0141/2300] Roundcube fail2ban fix

---
 install/vst-install-ubuntu.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 351d3dfb..82f38a87 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -1153,6 +1153,9 @@ if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
     mysql -e "GRANT ALL ON roundcube.*
         TO roundcube@localhost IDENTIFIED BY '$r'"
     sed -i "s/%password%/$r/g" /etc/roundcube/db.inc.php
+    touch /var/log/roundcube/errors
+    chmod 640 /var/log/roundcube/errors
+    chown www-data:adm /var/log/roundcube/errors
     if [ "$release" = '16.04' ]; then
         mv /etc/roundcube/db.inc.php /etc/roundcube/debian-db-roundcube.php
         mv /etc/roundcube/main.inc.php /etc/roundcube/config.inc.php

From cd618961767966846e8adc5bdba31451792c8f39 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Fri, 1 Jun 2018 13:57:37 +0300
Subject: [PATCH 0142/2300] Switch from /tmp to /backup

---
 bin/v-restore-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index 79e1e28c..9fd31eba 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -230,7 +230,7 @@ while [ "$la" -ge "$BACKUP_LA_LIMIT" ]; do
 done
 
 # Creating temporary directory
-tmpdir=$(mktemp -p /tmp -d)
+tmpdir=$(mktemp -p $BACKUP -d)
 if [ "$?" -ne 0 ]; then
     echo "Can't create tmp dir $tmpdir" |$SENDMAIL -s "$subj" $email $notify
     sed -i "/ $user /d" $VESTA/data/queue/backup.pipe

From 11eca5dfda030198b4686ac19fba1e6772496b16 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 2 Jun 2018 00:52:31 +0200
Subject: [PATCH 0143/2300] Configurable $BACKUP_TEMP in v-backup-user

---
 bin/v-backup-user | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index b6ec66ec..bc57cafc 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -68,8 +68,12 @@ while [ "$la" -ge "$BACKUP_LA_LIMIT" ]; do
     (( ++i))
 done
 
+if [ -z "$BACKUP_TEMP" ]; then
+    BACKUP_TEMP=$BACKUP
+fi
+
 # Creating temporary directory
-tmpdir=$(mktemp -p $BACKUP -d)
+tmpdir=$(mktemp -p $BACKUP_TEMP -d)
 
 if [ "$?" -ne 0 ]; then
     echo "Can't create tmp dir $tmpdir" |$SENDMAIL -s "$subj" $email $notify

From 73a0b3fd9543173432eed736815b23dd8a2ea076 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 2 Jun 2018 00:55:52 +0200
Subject: [PATCH 0144/2300] Configurable $BACKUP_TEMP in v-restore-user

---
 bin/v-restore-user | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index 9fd31eba..55e29e18 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -229,8 +229,12 @@ while [ "$la" -ge "$BACKUP_LA_LIMIT" ]; do
     (( ++i))
 done
 
+if [ -z "$BACKUP_TEMP" ]; then
+    BACKUP_TEMP=$BACKUP
+fi
+
 # Creating temporary directory
-tmpdir=$(mktemp -p $BACKUP -d)
+tmpdir=$(mktemp -p $BACKUP_TEMP -d)
 if [ "$?" -ne 0 ]; then
     echo "Can't create tmp dir $tmpdir" |$SENDMAIL -s "$subj" $email $notify
     sed -i "/ $user /d" $VESTA/data/queue/backup.pipe

From 01c1b54b4df7d46ecce55599f5dffef82a0cf9d9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 2 Jun 2018 01:23:13 +0200
Subject: [PATCH 0145/2300] Allow user to change Web Template (tpl
 modification)

---
 web/templates/user/edit_web.html | 47 ++++++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)

diff --git a/web/templates/user/edit_web.html b/web/templates/user/edit_web.html
index c984427c..b5905e4c 100644
--- a/web/templates/user/edit_web.html
+++ b/web/templates/user/edit_web.html
@@ -85,6 +85,53 @@
                                     <textarea size="20" class="vst-textinput" name="v_aliases"><?=htmlentities(trim($v_aliases, "'"))?></textarea>
                                 </td>
                             </tr>
+                            <tr>
+                                <td class="vst-text input-label">
+                                    <?php print __('Web Template')  . "<span class='optional'>" .strtoupper($_SESSION['WEB_SYSTEM']) . "</span>";?>
+                                </td>
+                            </tr>
+                            <tr>
+                                <td>
+                                    <select class="vst-list" name="v_template">
+                                        <?php
+                                            foreach ($templates as $key => $value) {
+                                                echo "\t\t\t\t<option value=\"".htmlentities($value)."\"";
+                                                $svalue = "'".$value."'";
+                                                if ((!empty($v_template)) && ( $value == $v_template ) || ($svalue == $v_template)){
+                                                    echo ' selected' ;
+                                                }
+                                                echo ">".htmlentities($value)."</option>\n";
+                                            }
+                                        ?>
+                                    </select>
+                                </td>
+                            </tr>
+                            <?php if (!empty($_SESSION['WEB_BACKEND'])) { ?>
+                            <tr>
+                                <td class="vst-text input-label">
+                                    <?php print __('Backend Template') . " <span class='optional'>" . strtoupper($_SESSION['WEB_BACKEND']) . "</span>";?>
+                                </td>
+                            </tr>
+                            <tr>
+                                <td>
+                                    <select class="vst-list" name="v_backend_template">
+                                        <?php
+                                            foreach ($backend_templates as $key => $value) {
+                                                echo "\t\t\t\t<option value=\"".$value."\"";
+                                                $svalue = "'".$value."'";
+                                                if ((!empty($v_backend_template)) && ( $value == $v_backend_template ) || ($svalue == $v_backend_template)){
+                                                    echo ' selected' ;
+                                                }
+                                                if ((empty($v_backend_template)) && ($value == 'default')){
+                                                    echo ' selected' ;
+                                                }
+                                                echo ">".htmlentities($value)."</option>\n";
+                                            }
+                                        ?>
+                                    </select>
+                                </td>
+                            </tr>
+                            <?php }?>
                             <?php if (!empty($_SESSION['PROXY_SYSTEM'])) { ?>
                             <tr>
                                 <td class="vst-text step-top">

From 2f3543c3db77c4e0c890fe0239817de98036c207 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 2 Jun 2018 01:28:31 +0200
Subject: [PATCH 0146/2300] Allow user to change Web Template

---
 web/edit/web/index.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/edit/web/index.php b/web/edit/web/index.php
index e934c1c8..85a278e9 100644
--- a/web/edit/web/index.php
+++ b/web/edit/web/index.php
@@ -150,8 +150,8 @@ if (!empty($_POST['save'])) {
         }
     }
 
-    // Change template (admin only)
-    if (($v_template != $_POST['v_template']) && ( $_SESSION['user'] == 'admin') && (empty($_SESSION['error_msg']))) {
+    // Change template
+    if (($v_template != $_POST['v_template']) && (empty($_SESSION['error_msg']))) {
         $v_template = escapeshellarg($_POST['v_template']);
         exec (VESTA_CMD."v-change-web-domain-tpl ".$v_username." ".$v_domain." ".$v_template." 'no'", $output, $return_var);
         check_return_code($return_var,$output);

From f759088ddedfbcd9f26e945cd5037aa418005823 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 2 Jun 2018 01:48:41 +0200
Subject: [PATCH 0147/2300] Changing /var/log/httpd/ to /var/log/%web_system%/ 
 (debian9 http2.tpl)

---
 install/debian/9/templates/web/nginx/http2.tpl | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/debian/9/templates/web/nginx/http2.tpl b/install/debian/9/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/debian/9/templates/web/nginx/http2.tpl
+++ b/install/debian/9/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }

From 4363244c1acf08438cf0dd34db9ada57e2d2810d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 2 Jun 2018 01:50:43 +0200
Subject: [PATCH 0148/2300] Changing /var/log/httpd/ to /var/log/%web_system%/
 (debian9 http2.stpl)

---
 install/debian/9/templates/web/nginx/http2.stpl | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/debian/9/templates/web/nginx/http2.stpl b/install/debian/9/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/debian/9/templates/web/nginx/http2.stpl
+++ b/install/debian/9/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }

From f68bb795deb153bbb0b9da3a03b0f7377455bee9 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 8 Jun 2018 11:40:42 +0300
Subject: [PATCH 0149/2300] Fixes for proper EIP handling

---
 bin/v-change-sys-ip-nat    |  86 ++++++++++++--------
 bin/v-change-web-domain-ip |   2 +-
 bin/v-update-sys-ip        | 155 ++++++++++++++++++-------------------
 3 files changed, 130 insertions(+), 113 deletions(-)

diff --git a/bin/v-change-sys-ip-nat b/bin/v-change-sys-ip-nat
index 58232212..a3b24830 100755
--- a/bin/v-change-sys-ip-nat
+++ b/bin/v-change-sys-ip-nat
@@ -34,48 +34,72 @@ is_ip_valid "$ip"
 #                       Action                             #
 #----------------------------------------------------------#
 
-# Changing nat ip
+# Updating IP
 if [ -z "$(grep NAT= $VESTA/data/ips/$ip)" ]; then
     sed -i "s/^TIME/NAT='$nat_ip'\nTIME/g" $VESTA/data/ips/$ip
+    old=''
+    new=$nat_ip
 else
-    update_ip_value '$NAT' "$nat_ip"
-fi
-
-# Check ftp system
-if [ "$FTP_SYSTEM" = 'vsftpd' ]; then
-
-    # Find configuration
-    if [ -e '/etc/vsftpd/vsftpd.conf' ]; then
-        conf='/etc/vsftpd/vsftpd.conf'
-    fi
-
-    if [ -e '/etc/vsftpd.conf' ]; then
-        conf='/etc/vsftpd.conf'
-    fi
-
-    # Update config
-    if [ -z "$(grep pasv_address $conf)" ]; then
-        if [ ! -z "$nat_ip" ]; then
-            echo "pasv_address=$nat_ip" >> $conf
-        fi
-    else
-        if [ ! -z "$nat_ip" ]; then
-            sed -i "s/pasv_address=.*/pasv_address='$nat_ip'/g" $conf
-        else
-            sed -i "/pasv_address/d" $conf
-        fi
+    old=$(get_ip_value '$NAT')
+    new=$nat_ip
+    sed -i "s/NAT=.*/NAT='$new'/" $VESTA/data/ips/$ip
+    if [ -z "$nat_ip" ]; then
+        new=$ip
     fi
 fi
 
+# Updating WEB configs
+if [ ! -z "$old" ] && [ ! -z "$WEB_SYSTEM" ]; then
+    sed -i "s/$old/$new/" $VESTA/data/users/*/web.conf
+    for user in $(ls $VESTA/data/users/); do
+        $BIN/v-rebuild-web-domains $user no
+    done
+    $BIN/v-restart-dns $restart
+fi
+
+# Updating DNS configs
+if [ ! -z "$old" ] && [ ! -z "$DNS_SYSTEM" ]; then
+    sed -i "s/$old/$new/" $VESTA/data/users/*/dns.conf
+    sed -i "s/$old/$new/" $VESTA/data/users/*/dns/*.conf
+    for user in $(ls $VESTA/data/users/); do
+        $BIN/v-rebuild-dns-domains $user no
+    done
+    $BIN/v-restart-dns $restart
+fi
+
+# Updating FTP
+if [ ! -z "$old" ] && [ ! -z "$FTP_SYSTEM" ]; then
+    conf=$(find /etc -name $FTP_SYSTEM.conf)
+    if [ -e "$conf" ]; then
+        sed -i "s/$old/$new/g" $conf
+        if [ "$FTP_SYSTEM" = 'vsftpd' ]; then
+            check_pasv=$(grep pasv_address $conf)
+            if [ -z "$check_pasv" ] && [ ! -z "$nat_ip" ]; then
+                echo "pasv_address=$nat_ip" >> $conf
+            fi
+            if [ ! -z "$check_pasv" ] && [ -z "$nat_ip" ]; then
+                sed -i "/pasv_address/d" $conf
+            fi
+            if [ ! -z "$check_pasv" ] && [ ! -z "$nat_ip" ]; then
+                sed -i "s/pasv_address=.*/pasv_address='$nat_ip'/g" $conf
+            fi
+        fi
+    fi
+    $BIN/v-restart-ftp $restart
+fi
+
+# Updating firewall
+if [ ! -z "$old" ] && [ ! -z "$FIREWALL_SYSTEM" ]; then
+    sed -i "s/$old/$new/g" $VESTA/data/firewall/*.conf
+    $BIN/v-update-firewall
+fi
+
+
 
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#
 
-# Restart ftp server
-$BIN/v-restart-ftp $restart
-check_result $? "FTP restart failed" >/dev/null
-
 # Logging
 log_history "changed associated nat address on $ip to $nat_ip" '' 'admin'
 log_event "$OK" "$ARGUMENTS"
diff --git a/bin/v-change-web-domain-ip b/bin/v-change-web-domain-ip
index 17eb55d9..5b2ab31b 100755
--- a/bin/v-change-web-domain-ip
+++ b/bin/v-change-web-domain-ip
@@ -49,7 +49,7 @@ is_ip_valid "$ip" "$user"
 # Preparing variables for vhost replace
 get_domain_values 'web'
 old=$(get_real_ip $IP)
-new=$ip
+new=$(get_real_ip $ip)
 
 # Replacing vhost
 replace_web_config "$WEB_SYSTEM" "$TPL.tpl"
diff --git a/bin/v-update-sys-ip b/bin/v-update-sys-ip
index ce91ce96..956d4f10 100755
--- a/bin/v-update-sys-ip
+++ b/bin/v-update-sys-ip
@@ -1,6 +1,6 @@
 #!/bin/bash
 # info: update system ip
-# options: [USER] [IP_STATUS]
+# options: [NONE]
 #
 # The function scans configured ip in the system and register them with vesta
 # internal database. This call is intended for use on vps servers, where ip is
@@ -11,14 +11,11 @@
 #                    Variable&Function                     #
 #----------------------------------------------------------#
 
-# Argument definition
-user=${1-admin}
-ip_status=${2-shared}
+# Importing system variables
+source /etc/profile
 
 # Includes
-source /etc/profile.d/vesta.sh
 source $VESTA/func/main.sh
-source $VESTA/func/ip.sh
 source $VESTA/conf/vesta.conf
 
 
@@ -26,87 +23,84 @@ source $VESTA/conf/vesta.conf
 #                    Verifications                         #
 #----------------------------------------------------------#
 
-check_args '0' "$#" '[USER] [IP_STATUS]'
-is_format_valid 'user' 'ip_status'
-is_object_valid 'user' 'USER' "$user" "$user"
-
 
 #----------------------------------------------------------#
 #                       Action                             #
 #----------------------------------------------------------#
 
-# Get list of ip addresses
-ip_list=$(/sbin/ip addr|grep 'inet '|grep global|awk '{print $2}')
-ip_list=$(echo "$ip_list"|cut -f 1 -d /)
-ip_num=$(echo "$ip_list" | wc -l)
+# Listing system ip addresses
+ips=$(/sbin/ip addr |grep 'inet ' |grep global |awk '{print $2}' |cut -f1 -d/)
+v_ips=$(ls $VESTA/data/ips/)
+ip_num=$(echo "$ips" |wc -l)
+v_ip_num=$(echo "$v_ips" |wc -l)
 
-# WorkAround for DHCP IP address
-vst_ip_list=$(ls $VESTA/data/ips/)
-vst_ip_num=$(echo "$vst_ip_list" | wc -l)
-
-if [ ! -z "$vst_ip_list" ] && [ "$vst_ip_num" -eq '1' ]; then
-    if [ $ip_num -eq 1 ] && [ "$ip_list" != "$vst_ip_list" ]; then
-        new=$ip_list
-        old=$vst_ip_list
-        mv $VESTA/data/ips/$old $VESTA/data/ips/$new
-        if [ ! -z "$PROXY_SYSTEM" ]; then
-            mv /etc/$PROXY_SYSTEM/conf.d/$old.conf \
-                /etc/$PROXY_SYSTEM/conf.d/$new.conf
-            sed -i "s/$old/$new/g" /etc/$PROXY_SYSTEM/conf.d/$new.conf
-        fi
-        if [ ! -z "$WEB_SYSTEM" ]; then
-            mv /etc/$WEB_SYSTEM/conf.d/$old.conf \
-                /etc/$WEB_SYSTEM/conf.d/$new.conf
-            sed -i "s/$old/$new/g" /etc/$WEB_SYSTEM/conf.d/$new.conf
-            sed -i "s/$old/$new/g" $VESTA/data/users/*/web.conf
-
-            # Rebuild web domains
-            for user in $(ls $VESTA/data/users/); do
-                $BIN/v-rebuild-web-domains $user no
-            done
-        fi
-        if [ ! -z "$FTP_SYSTEM" ];then
-            ftpd_conf_file=$(find /etc/ -maxdepth 2 -name $FTP_SYSTEM.conf)
-            sed -i "s/$old/$new/g" $ftpd_conf_file
-        fi
-
-        # Restarting web server
-        $BIN/v-restart-web
-
-        # Restarting ftp server
-        $BIN/v-restart-ftp
-
-        # Restarting proxy server
-        if [ ! -z "$PROXY_SYSTEM" ]; then
-            $BIN/v-restart-proxy
-        fi
-
-        # Restarting firewall
-        if [ ! -z "$FIREWALL_SYSTEM" ]; then
-            $BIN/v-update-firewall
-        fi
-
-        if [ ! -z "$DNS_SYSTEM" ]; then
-            # Rebuild dns domains
-            for user in $(ls $VESTA/data/users/); do
-                sed -i "s/$old/$new/g" $VESTA/data/users/$user/dns.conf
-                sed -i "s/$old/$new/g" $VESTA/data/users/$user/dns/*.conf
-                $BIN/v-rebuild-dns-domains $user no
-            done
-            $BIN/v-restart-dns
-            check_result $? "dns restart failed" >/dev/null
-        fi
-
-        # No further comparation is needed
-        exit
+# Checking primary IP change
+if [[ "$ip_num" -eq '1' ]] && [[ "$v_ip_num" -eq 1 ]]; then
+    if [ "$ips" != "$v_ips" ]; then
+        new=$ips
+        old=$v_ips
     fi
 fi
 
-# Compare ips
-for ip in $ip_list; do
+# Updating configs
+if [ ! -z "$new" ]; then
+    mv $VESTA/data/ips/$old $VESTA/data/ips/$new
+
+    # Updating PROXY
+    if [ ! -z "$PROXY_SYSTEM" ]; then
+        cd /etc/$PROXY_SYSTEM/conf.d
+        if [ -e "$old.conf" ]; then
+            mv $old.conf $new.conf
+            sed -i "s/$old/$new/g" $new.conf
+            $BIN/v-restart-proxy
+        fi
+    fi
+
+    # Updating WEB
+    if [ ! -z "$WEB_SYSTEM" ]; then
+        cd /etc/$WEB_SYSTEM/conf.d
+        if [ -e "$old.conf" ]; then
+            mv $old.conf $new.conf
+            sed -i "s/$old/$new/g" $new.conf
+        fi
+        sed -i "s/$old/$new/g" $VESTA/data/users/*/web.conf
+        for user in $(ls $VESTA/data/users/); do
+            $BIN/v-rebuild-web-domains $user no
+        done
+        $BIN/v-restart-web
+    fi
+
+    # Updating DNS
+    if [ ! -z "$DNS_SYSTEM" ]; then
+        sed -i "s/$old/$new/g" $VESTA/data/users/*/dns.conf
+        sed -i "s/$old/$new/g" $VESTA/data/users/*/dns/*.conf
+        for user in $(ls $VESTA/data/users/); do
+            $BIN/v-rebuild-dns-domains $user no
+        done
+        $BIN/v-restart-dns
+    fi
+
+    # Updating FTP
+    if [ ! -z "$FTP_SYSTEM" ] && [ "$FTP_SYSTEM" = 'vsftpd' ]; then
+        conf=$(find /etc/ -maxdepth 2 -name $FTP_SYSTEM.conf)
+        if [ ! -z "$conf" ]; then
+            sed -i "s/$old/$new/g" $conf
+            $BIN/v-restart-ftp
+        fi
+    fi
+
+    # Updating firewall
+    if [ ! -z "$FIREWALL_SYSTEM" ]; then
+        sed -i "s/$old/$new/g" $VESTA/data/firewall/*.conf
+        $BIN/v-update-firewall
+    fi
+fi
+
+# Adding system IP
+for ip in $ips; do
     check_ifconfig=$(/sbin/ifconfig |grep "$ip")
     if [ ! -e "$VESTA/data/ips/$ip" ] && [ ! -z "$check_ifconfig" ]; then
-        interface=$(/sbin/ip addr |grep $ip |awk '{print $NF}'|uniq)
+        interface=$(/sbin/ip addr |grep $ip |awk '{print $NF}' |uniq)
         interface=$(echo "$interface" |cut -f 1 -d : |head -n 1)
         netmask=$(/sbin/ip addr |grep $ip |cut -f 2 -d / |cut -f 1 -d \ )
         netmask=$(convert_cidr $netmask)
@@ -114,12 +108,11 @@ for ip in $ip_list; do
     fi
 done
 
-# Checking NAT
+# Updating NAT
 pub_ip=$(curl -s vestacp.com/what-is-my-ip/)
-if [ ! -z "$pub_ip" ] && [ ! -e "$VESTA/data/ips/$pub_ip" ]; then
-    check_nat=$(grep -R "$pub_ip" $VESTA/data/ips/)
-    if [ -z "$check_nat" ]; then
-        ip=$(ls -t $VESTA/data/ips/|head -n1)
+if [ ! -e "$VESTA/data/ips/$pub_ip" ]; then
+    if [ -z "$(grep -R "$pub_ip" $VESTA/data/ips/)" ]; then
+        ip=$(ls -t $VESTA/data/ips/ |head -n1)
         $BIN/v-change-sys-ip-nat $ip $pub_ip
     fi
 fi

From 4880746f8f628788c2736758b47dc179a5079dc2 Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Mon, 11 Jun 2018 20:21:13 +0300
Subject: [PATCH 0150/2300] Minor fix

---
 install/vst-install-ubuntu.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 39840bbc..ef835fef 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -943,7 +943,7 @@ done
 
 if [ "$vsftpd" = 'yes' ]; then
     cp -f $vestacp/vsftpd/vsftpd.conf /etc/
-    touch /var/log//vsftpd.log
+    touch /var/log/vsftpd.log
     chown root:adm /var/log/vsftpd.log
     chmod 640 /var/log/vsftpd.log
     touch /var/log/xferlog

From ee03eff016e03cb76fac7ae3a0f9d1ef0f8ee35b Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 13 Jun 2018 17:08:36 +0300
Subject: [PATCH 0151/2300] udapted package defenition

---
 install/vst-install-ubuntu.sh | 60 +++++++++++------------------------
 1 file changed, 19 insertions(+), 41 deletions(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index ef835fef..22425d43 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -18,45 +18,24 @@ release="$(lsb_release -s -r)"
 codename="$(lsb_release -s -c)"
 vestacp="$VESTA/install/$VERSION/$release"
 
-if [ "$release" = '16.04' ] || [ "$release" = '18.04' ]; then
-    software="nginx apache2 apache2-utils apache2.2-common
-        apache2-suexec-custom libapache2-mod-ruid2 libapache2-mod-rpaf
-        libapache2-mod-fcgid libapache2-mod-php php php-common php-cgi
-        php-mysql php-curl php-fpm php-pgsql awstats webalizer vsftpd
-        proftpd-basic bind9 exim4 exim4-daemon-heavy clamav-daemon
-        spamassassin dovecot-imapd dovecot-pop3d roundcube-core
-        roundcube-mysql roundcube-plugins mysql-server mysql-common
-        mysql-client postgresql postgresql-contrib phppgadmin phpmyadmin mc
-        flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
-        e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
-        bsdmainutils cron vesta vesta-nginx vesta-php expect vim-common
-        vesta-ioncube vesta-softaculous apparmor-utils"
-elif [ "$release" = '16.10' ] || [ "$release" = '17.10' ]; then
-    software="nginx apache2 apache2-utils apache2.2-common
-        apache2-suexec-custom libapache2-mod-ruid2 libapache2-mod-rpaf
-        libapache2-mod-fcgid libapache2-mod-php7.0 php7.0 php7.0-common
-        php7.0-cgi php7.0-mysql php7.0-curl php7.0-fpm php7.0-pgsql awstats
-        webalizer vsftpd proftpd-basic bind9 exim4 exim4-daemon-heavy
-        clamav-daemon spamassassin dovecot-imapd dovecot-pop3d roundcube-core
-        roundcube-mysql roundcube-plugins mysql-server mysql-common
-        mysql-client postgresql postgresql-contrib phppgadmin phpmyadmin mc
-        flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
-        e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
-        bsdmainutils cron vesta vesta-nginx vesta-php expect vim-common
-        vesta-ioncube vesta-softaculous apparmor-utils"
-else
-    software="nginx apache2 apache2-utils apache2.2-common
-        apache2-suexec-custom libapache2-mod-ruid2 libapache2-mod-rpaf
-        libapache2-mod-fcgid libapache2-mod-php5 php5 php5-common php5-cgi
-        php5-mysql php5-curl php5-fpm php5-pgsql awstats webalizer vsftpd
-        proftpd-basic bind9 exim4 exim4-daemon-heavy clamav-daemon
-        spamassassin dovecot-imapd dovecot-pop3d roundcube-core
-        roundcube-mysql roundcube-plugins mysql-server mysql-common
-        mysql-client postgresql postgresql-contrib phppgadmin phpMyAdmin mc
-        flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
-        e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
-        bsdmainutils cron vesta vesta-nginx vesta-php expect vim-common
-        vesta-ioncube vesta-softaculous"
+# Defining software pack for all distros
+software="apache2 apache2.2-common apache2-suexec-custom apache2-utils
+    apparmor-utils awstats bc bind9 bsdmainutils bsdutils clamav-daemon
+    cron curl dnsutils dovecot-imapd dovecot-pop3d e2fslibs e2fsprogs exim4
+    exim4-daemon-heavy expect fail2ban flex ftp git idn imagemagick
+    libapache2-mod-fcgid libapache2-mod-php libapache2-mod-rpaf
+    libapache2-mod-ruid2 lsof mc mysql-client mysql-common mysql-server nginx
+    ntpdate php-cgi php-common php-curl php-fpm phpmyadmin php-mysql
+    phppgadmin php-pgsql postgresql postgresql-contrib proftpd-basic quota
+    roundcube-core roundcube-mysql roundcube-plugins rrdtool rssh spamassassin
+    sudo vesta vesta-ioncube vesta-nginx vesta-php vesta-softaculous
+    vim-common vsftpd webalizer whois zip"
+
+# Fix for old releases
+if [[ ${release:0:2} -lt 16 ]]; then
+    software=$(echo "$software" |sed -e "s/php /php5 /")
+    software=$(echo "$software" |sed -e "s/php-/php5-/")
+    software=$(echo "$software" |sed -e "s/mod-php/mod-php5/")
 fi
 
 # Defining help function
@@ -1267,7 +1246,6 @@ fi
 
 # Adding default domain
 $VESTA/bin/v-add-domain admin $servername
-codename="$codename:$(echo $vpass:$servername | base64)"
 
 # Adding cron jobs
 command="sudo $VESTA/bin/v-update-sys-queue disk"
@@ -1320,7 +1298,7 @@ $VESTA/bin/v-add-cron-vesta-autoupdate
 wget vestacp.com/notify/?$codename -O /dev/null -q
 
 # Comparing hostname and IP
-host_ip=$(host $servername| head -n 1 | awk '{print $NF}')
+host_ip=$(host $servername| head -n 1 |awk '{print $NF}')
 if [ "$host_ip" = "$ip" ]; then
     ip="$servername"
 fi

From 6b2fafccb23ddaec7d1000d849d1780ae639d6dc Mon Sep 17 00:00:00 2001
From: TJ <trajche@kralev.eu>
Date: Wed, 13 Jun 2018 19:58:26 +0300
Subject: [PATCH 0152/2300] Fixing the change password for Roundcube to work
 with Ubuntu

---
 install/ubuntu/16.04/roundcube/vesta.php | 6 ++++--
 install/ubuntu/16.10/roundcube/vesta.php | 5 +++--
 install/ubuntu/17.04/roundcube/vesta.php | 6 ++++--
 install/ubuntu/17.10/roundcube/vesta.php | 5 +++--
 install/ubuntu/18.04/roundcube/vesta.php | 5 +++--
 5 files changed, 17 insertions(+), 10 deletions(-)

diff --git a/install/ubuntu/16.04/roundcube/vesta.php b/install/ubuntu/16.04/roundcube/vesta.php
index 99e1d4bc..b6646b2b 100644
--- a/install/ubuntu/16.04/roundcube/vesta.php
+++ b/install/ubuntu/16.04/roundcube/vesta.php
@@ -6,8 +6,9 @@
  * @version 1.0
  * @author Serghey Rodin <skid@vestacp.com>
  */
-
-    function password_save($curpass, $passwd)
+class rcube_vesta_password
+{
+    function save($curpass, $passwd)
     {
         $rcmail = rcmail::get_instance();
         $vesta_host = $rcmail->config->get('password_vesta_host');
@@ -69,3 +70,4 @@
         }
 
     }
+}
\ No newline at end of file
diff --git a/install/ubuntu/16.10/roundcube/vesta.php b/install/ubuntu/16.10/roundcube/vesta.php
index 99e1d4bc..b4a2a6b6 100644
--- a/install/ubuntu/16.10/roundcube/vesta.php
+++ b/install/ubuntu/16.10/roundcube/vesta.php
@@ -6,8 +6,8 @@
  * @version 1.0
  * @author Serghey Rodin <skid@vestacp.com>
  */
-
-    function password_save($curpass, $passwd)
+class rcube_vesta_password {
+    function save($curpass, $passwd)
     {
         $rcmail = rcmail::get_instance();
         $vesta_host = $rcmail->config->get('password_vesta_host');
@@ -69,3 +69,4 @@
         }
 
     }
+}
\ No newline at end of file
diff --git a/install/ubuntu/17.04/roundcube/vesta.php b/install/ubuntu/17.04/roundcube/vesta.php
index 99e1d4bc..b6646b2b 100644
--- a/install/ubuntu/17.04/roundcube/vesta.php
+++ b/install/ubuntu/17.04/roundcube/vesta.php
@@ -6,8 +6,9 @@
  * @version 1.0
  * @author Serghey Rodin <skid@vestacp.com>
  */
-
-    function password_save($curpass, $passwd)
+class rcube_vesta_password
+{
+    function save($curpass, $passwd)
     {
         $rcmail = rcmail::get_instance();
         $vesta_host = $rcmail->config->get('password_vesta_host');
@@ -69,3 +70,4 @@
         }
 
     }
+}
\ No newline at end of file
diff --git a/install/ubuntu/17.10/roundcube/vesta.php b/install/ubuntu/17.10/roundcube/vesta.php
index 99e1d4bc..c271004d 100644
--- a/install/ubuntu/17.10/roundcube/vesta.php
+++ b/install/ubuntu/17.10/roundcube/vesta.php
@@ -6,8 +6,8 @@
  * @version 1.0
  * @author Serghey Rodin <skid@vestacp.com>
  */
-
-    function password_save($curpass, $passwd)
+class rcube_vesta_password {
+    function save($curpass, $passwd)
     {
         $rcmail = rcmail::get_instance();
         $vesta_host = $rcmail->config->get('password_vesta_host');
@@ -69,3 +69,4 @@
         }
 
     }
+}
diff --git a/install/ubuntu/18.04/roundcube/vesta.php b/install/ubuntu/18.04/roundcube/vesta.php
index 99e1d4bc..b4a2a6b6 100644
--- a/install/ubuntu/18.04/roundcube/vesta.php
+++ b/install/ubuntu/18.04/roundcube/vesta.php
@@ -6,8 +6,8 @@
  * @version 1.0
  * @author Serghey Rodin <skid@vestacp.com>
  */
-
-    function password_save($curpass, $passwd)
+class rcube_vesta_password {
+    function save($curpass, $passwd)
     {
         $rcmail = rcmail::get_instance();
         $vesta_host = $rcmail->config->get('password_vesta_host');
@@ -69,3 +69,4 @@
         }
 
     }
+}
\ No newline at end of file

From f59ebc4f65aa6b9e026d9a049766111c84a0c1e8 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 14 Jun 2018 18:00:44 +0300
Subject: [PATCH 0153/2300] Fix: nginx restart order

---
 bin/v-update-sys-ip | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-sys-ip b/bin/v-update-sys-ip
index 956d4f10..8c0da087 100755
--- a/bin/v-update-sys-ip
+++ b/bin/v-update-sys-ip
@@ -52,7 +52,6 @@ if [ ! -z "$new" ]; then
         if [ -e "$old.conf" ]; then
             mv $old.conf $new.conf
             sed -i "s/$old/$new/g" $new.conf
-            $BIN/v-restart-proxy
         fi
     fi
 
@@ -67,6 +66,7 @@ if [ ! -z "$new" ]; then
         for user in $(ls $VESTA/data/users/); do
             $BIN/v-rebuild-web-domains $user no
         done
+        $BIN/v-restart-proxy
         $BIN/v-restart-web
     fi
 

From 955f3e7510b8e14a24870eec1da34b94222d79a5 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 21 Jun 2018 11:39:14 +0300
Subject: [PATCH 0154/2300] cosmetix fixes in ubuntu installer

---
 install/vst-install-ubuntu.sh | 29 +++++++++++++++--------------
 1 file changed, 15 insertions(+), 14 deletions(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 22425d43..fdb95db3 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -495,7 +495,7 @@ cp -r /etc/bind/* $vst_backups/bind > /dev/null 2>&1
 service vsftpd stop > /dev/null 2>&1
 cp /etc/vsftpd.conf $vst_backups/vsftpd > /dev/null 2>&1
 
-# Backing up ProFTPD configuration
+# Backup ProFTPD configuration
 service proftpd stop > /dev/null 2>&1
 cp /etc/proftpd.conf $vst_backups/proftpd > /dev/null 2>&1
 
@@ -623,18 +623,18 @@ fi
 #                     Install packages                     #
 #----------------------------------------------------------#
 
-# Update system packages
+# Updating system
 apt-get update
 
-# Disable daemon autostart /usr/share/doc/sysv-rc/README.policy-rc.d.gz
-echo -e '#!/bin/sh \nexit 101' > /usr/sbin/policy-rc.d
-chmod a+x /usr/sbin/policy-rc.d
+# Disabling daemon autostart /usr/share/doc/sysv-rc/README.policy-rc.d.gz
+#echo -e '#!/bin/sh \nexit 101' > /usr/sbin/policy-rc.d
+#chmod a+x /usr/sbin/policy-rc.d
 
-# Install apt packages
+# Installing apt packages
 apt-get -y install $software
 check_result $? "apt-get install failed"
 
-# Restore policy
+# Restoring policy
 rm -f /usr/sbin/policy-rc.d
 
 
@@ -642,26 +642,28 @@ rm -f /usr/sbin/policy-rc.d
 #                     Configure system                     #
 #----------------------------------------------------------#
 
-# Enable SSH password auth
+# Enabling SSH password auth
 sed -i "s/rdAuthentication no/rdAuthentication yes/g" /etc/ssh/sshd_config
 service ssh restart
 
-# Disable AWStats cron
+# Disabling AWStats cron
 rm -f /etc/cron.d/awstats
 
 # Set directory color
 echo 'LS_COLORS="$LS_COLORS:di=00;33"' >> /etc/profile
 
-# Register /usr/sbin/nologin
-echo "/usr/sbin/nologin" >> /etc/shells
+# Registering /usr/sbin/nologin
+if [ -z "$(grep nologin /etc/shells)" ]; then
+    echo "/usr/sbin/nologin" >> /etc/shells
+fi
 
-# NTP Sync
+# Configuring NTP
 echo '#!/bin/sh' > /etc/cron.daily/ntpdate
 echo "$(which ntpdate) -s ntp.ubuntu.com" >> /etc/cron.daily/ntpdate
 chmod 775 /etc/cron.daily/ntpdate
 ntpdate -s ntp.ubuntu.com
 
-# Setup rssh
+# Adding rssh
 if [ -z "$(grep /usr/bin/rssh /etc/shells)" ]; then
     echo /usr/bin/rssh >> /etc/shells
 fi
@@ -704,7 +706,6 @@ chmod -R 750 $VESTA/data/queue
 chmod 660 $VESTA/log/*
 rm -f /var/log/vesta
 ln -s $VESTA/log /var/log/vesta
-chown admin:admin $VESTA/data/sessions
 chmod 770 $VESTA/data/sessions
 
 # Generating Vesta configuration

From 17d0fb114ebe15f89db4284316a17cf8e20de51e Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 21 Jun 2018 11:40:07 +0300
Subject: [PATCH 0155/2300] fix for debian and amazon installers

---
 install/vst-install.sh | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/install/vst-install.sh b/install/vst-install.sh
index 4bd4cc20..aa9ecbf6 100755
--- a/install/vst-install.sh
+++ b/install/vst-install.sh
@@ -9,6 +9,7 @@
 #   CentOS 5, 6, 7
 #   Debian 7, 8
 #   Ubuntu 12.04 - 18.04
+#   Amazon Linux 2017
 #
 
 # Am I root?
@@ -45,11 +46,6 @@ case $(head -n1 /etc/issue | cut -f 1 -d ' ') in
     *)          type="rhel" ;;
 esac
 
-# Fallback to Ubuntu
-if [ ! -e "/etc/redhat-release" ]; then
-    type='ubuntu'
-fi
-
 # Check wget
 if [ -e '/usr/bin/wget' ]; then
     wget http://vestacp.com/pub/vst-install-$type.sh -O vst-install-$type.sh

From ca3956568becfcf9ab5bb67d0637a88b8bc5b0aa Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 21 Jun 2018 15:40:22 +0300
Subject: [PATCH 0156/2300] Updated CentOS installer

---
 install/vst-install-rhel.sh | 334 +++++++++++++++++-------------------
 1 file changed, 154 insertions(+), 180 deletions(-)

diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index 436517b1..07df0713 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -16,30 +16,27 @@ arch=$(uname -i)
 os=$(cut -f 1 -d ' ' /etc/redhat-release)
 release=$(grep -o "[0-9]" /etc/redhat-release |head -n1)
 codename="${os}_$release"
-vestacp="http://$CHOST/$VERSION/$release"
+vestacp="$VESTA/install/$VERSION/$release"
 
-if [ "$release" -eq 7 ]; then
-    software="nginx httpd mod_ssl mod_ruid2 mod_fcgid php php-common php-cli
-    php-bcmath php-gd php-imap php-mbstring php-mcrypt php-mysql php-pdo
-    php-soap php-tidy php-xml php-xmlrpc php-fpm php-pgsql awstats webalizer
-    vsftpd proftpd bind bind-utils bind-libs exim dovecot clamav-server
-    clamav-update spamassassin roundcubemail mariadb mariadb-server phpMyAdmin
-    postgresql postgresql-server postgresql-contrib phpPgAdmin e2fsprogs
-    openssh-clients ImageMagick curl mc screen ftp zip unzip flex sqlite pcre
-    sudo bc jwhois mailx lsof tar telnet rrdtool net-tools ntp GeoIP freetype
-    fail2ban rsyslog iptables-services which vesta vesta-nginx vesta-php
-    vim-common expect vesta-ioncube vesta-softaculous"
-else
-    software="nginx httpd mod_ssl mod_ruid2 mod_fcgid mod_extract_forwarded
-    php php-common php-cli php-bcmath php-gd php-imap php-mbstring php-mcrypt
-    php-mysql php-pdo php-soap php-tidy php-xml php-xmlrpc php-fpm php-pgsql
-    awstats webalizer vsftpd proftpd bind bind-utils bind-libs exim dovecot
-    clamd spamassassin roundcubemail mysql mysql-server phpMyAdmin postgresql
-    postgresql-server postgresql-contrib phpPgAdmin e2fsprogs openssh-clients
-    ImageMagick curl mc screen ftp zip unzip flex sqlite pcre sudo bc jwhois
-    mailx lsof tar telnet rrdtool net-tools ntp GeoIP freetype fail2ban
-    which vesta vesta-nginx vesta-php vim-common expect vesta-ioncube
-    vesta-softaculous"
+# Defining software pack for all distros
+software="awstats bc bind bind-libs bind-utils clamav-server clamav-update
+    curl dovecot e2fsprogs exim expect fail2ban flex freetype ftp GeoIP httpd
+    ImageMagick iptables-services jwhois lsof mailx mariadb mariadb-server mc
+    mod_fcgid mod_ruid2 mod_ssl net-tools nginx ntp openssh-clients pcre php
+    php-bcmath php-cli php-common php-fpm php-gd php-imap php-mbstring
+    php-mcrypt phpMyAdmin php-mysql php-pdo phpPgAdmin php-pgsql php-soap
+    php-tidy php-xml php-xmlrpc postgresql postgresql-contrib
+    postgresql-server proftpd roundcubemail rrdtool rsyslog screen
+    spamassassin sqlite sudo tar telnet unzip vesta vesta-ioncube vesta-nginx
+    vesta-php vesta-softaculous vim-common vsftpd webalizer which zip"
+
+# Fix for old releases
+if [ "$release" -lt 7 ]; then
+    software=$(echo "$software" |sed -e "s/mariadb/mysql/")
+    software=$(echo "$software" |sed -e "s/clamav-server/clamd/")
+    software=$(echo "$software" |sed -e "s/clamav-update//")
+    software=$(echo "$software" |sed -e "s/iptables-services//")
+    software="$software mod_extract_forwarded"
 fi
 
 # Defining help function
@@ -105,7 +102,7 @@ set_default_value() {
     fi
 }
 
-# Define function to set default language value
+# Defining function to set default language value
 set_default_lang() {
     if [ -z "$lang" ]; then
         eval lang=$1
@@ -125,9 +122,6 @@ set_default_lang() {
 #                    Verifications                         #
 #----------------------------------------------------------#
 
-# Creating temporary file
-tmpfile=$(mktemp -p /tmp)
-
 # Translating argument to --gnu-long-options
 for arg; do
     delim=""
@@ -239,7 +233,6 @@ if [ "$iptables" = 'no' ]; then
     fail2ban='no'
 fi
 
-
 # Checking root permissions
 if [ "x$(id -u)" != 'x0' ]; then
     check_result 1 "Script can be run executed only by root"
@@ -260,16 +253,18 @@ if [ ! -e '/usr/bin/wget' ]; then
 fi
 
 # Checking repository availability
-wget -q "$vestacp/GPG.txt" -O /dev/null
+wget -q "c.vestacp.com/GPG.txt" -O /dev/null
 check_result $? "No access to Vesta repository"
 
 # Checking installed packages
+tmpfile=$(mktemp -p /tmp)
 rpm -qa > $tmpfile
 for pkg in exim mysql-server httpd nginx vesta; do
     if [ ! -z "$(grep $pkg $tmpfile)" ]; then
         conflicts="$pkg $conflicts"
     fi
 done
+rm -f $tmpfile
 if [ ! -z "$conflicts" ] && [ -z "$force" ]; then
     echo '!!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!!'
     echo
@@ -290,7 +285,7 @@ fi
 #                       Brief Info                         #
 #----------------------------------------------------------#
 
-# Printing nice ascii as logo
+# Printing nice ASCII logo
 clear
 echo
 echo ' _|      _|  _|_|_|_|    _|_|_|  _|_|_|_|_|    _|_|'
@@ -302,7 +297,7 @@ echo
 echo '                                  Vesta Control Panel'
 echo -e "\n\n"
 
-echo 'Following software will be installed on your system:'
+echo 'The following software will be installed on your system:'
 
 # Web stack
 if [ "$nginx" = 'yes' ]; then
@@ -323,16 +318,16 @@ if [ "$named" = 'yes' ]; then
     echo '   - Bind DNS Server'
 fi
 
-# Mail Stack
+# Mail stack
 if [ "$exim" = 'yes' ]; then
-    echo -n '   - Exim mail server'
+    echo -n '   - Exim Mail Server'
     if [ "$clamd" = 'yes'  ] ||  [ "$spamd" = 'yes' ] ; then
         echo -n ' + '
         if [ "$clamd" = 'yes' ]; then
-            echo -n 'Antivirus '
+            echo -n 'ClamAV '
         fi
         if [ "$spamd" = 'yes' ]; then
-            echo -n 'Antispam'
+            echo -n 'SpamAssassin'
         fi
     fi
     echo
@@ -341,9 +336,9 @@ if [ "$exim" = 'yes' ]; then
     fi
 fi
 
-# DB stack
+# Database stack
 if [ "$mysql" = 'yes' ]; then
-    if [ $release = 7 ]; then
+    if [ $release -ge 7 ]; then
         echo '   - MariaDB Database Server'
     else
         echo '   - MySQL Database Server'
@@ -393,7 +388,7 @@ if [ "$interactive" = 'yes' ]; then
 
     # Asking to set FQDN hostname
     if [ -z "$servername" ]; then
-        read -p "Please enter FQDN hostname [$(hostname)]: " servername
+        read -p "Please enter FQDN hostname [$(hostname -f)]: " servername
     fi
 fi
 
@@ -448,10 +443,10 @@ fi
 
 
 #----------------------------------------------------------#
-#                  Install repositories                    #
+#                   Install repository                     #
 #----------------------------------------------------------#
 
-# Updating system packages
+# Updating system
 yum -y update
 check_result $? 'yum update failed'
 
@@ -460,8 +455,8 @@ yum install epel-release -y
 check_result $? "Can't install EPEL repository"
 
 # Installing Remi repository
-if [ "$remi" = 'yes' ]; then
-    rpm -Uvh --force $vestacp/remi-release.rpm
+if [ "$remi" = 'yes' ] && [ ! -e "/etc/yum.repos.d/remi.repo" ]; then
+    rpm -Uvh http://rpms.remirepo.net/enterprise/remi-release-$release.rpm
     check_result $? "Can't install REMI repository"
     sed -i "s/enabled=0/enabled=1/g" /etc/yum.repos.d/remi.repo
 fi
@@ -482,7 +477,7 @@ echo "baseurl=http://$RHOST/$REPO/$release/\$basearch/" >> $vrepo
 echo "enabled=1" >> $vrepo
 echo "gpgcheck=1" >> $vrepo
 echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-VESTA" >> $vrepo
-wget $vestacp/GPG.txt -O /etc/pki/rpm-gpg/RPM-GPG-KEY-VESTA
+wget c.vestacp.com/GPG.txt -O /etc/pki/rpm-gpg/RPM-GPG-KEY-VESTA
 
 
 #----------------------------------------------------------#
@@ -495,53 +490,53 @@ cd $vst_backups
 mkdir nginx httpd php php-fpm vsftpd proftpd named exim dovecot clamd \
     spamassassin mysql postgresql mongodb vesta
 
-# Backing up Nginx configuration
+# Backup Nginx configuration
 service nginx stop > /dev/null 2>&1
 cp -r /etc/nginx/* $vst_backups/nginx > /dev/null 2>&1
 
-# Backing up Apache configuration
+# Backup Apache configuration
 service httpd stop > /dev/null 2>&1
 cp -r /etc/httpd/* $vst_backups/httpd > /dev/null 2>&1
 
-# Backing up PHP configuration
+# Backup PHP-FPM configuration
 service php-fpm stop >/dev/null 2>&1
 cp /etc/php.ini $vst_backups/php > /dev/null 2>&1
 cp -r /etc/php.d  $vst_backups/php > /dev/null 2>&1
 cp /etc/php-fpm.conf $vst_backups/php-fpm > /dev/null 2>&1
 mv -f /etc/php-fpm.d/* $vst_backups/php-fpm/ > /dev/null 2>&1
 
-# Backing up Bind configuration
+# Backup Bind configuration
 yum remove bind-chroot > /dev/null 2>&1
 service named stop > /dev/null 2>&1
 cp /etc/named.conf $vst_backups/named >/dev/null 2>&1
 
-# Backing up Vsftpd configuration
+# Backup Vsftpd configuration
 service vsftpd stop > /dev/null 2>&1
 cp /etc/vsftpd/vsftpd.conf $vst_backups/vsftpd >/dev/null 2>&1
 
-# Backing up ProFTPD configuration
+# Backup ProFTPD configuration
 service proftpd stop > /dev/null 2>&1
 cp /etc/proftpd.conf $vst_backups/proftpd >/dev/null 2>&1
 
-# Backing up Exim configuration
+# Backup Exim configuration
 service exim stop > /dev/null 2>&1
 cp -r /etc/exim/* $vst_backups/exim >/dev/null 2>&1
 
-# Backing up ClamAV configuration
+# Backup ClamAV configuration
 service clamd stop > /dev/null 2>&1
 cp /etc/clamd.conf $vst_backups/clamd >/dev/null 2>&1
 cp -r /etc/clamd.d $vst_backups/clamd >/dev/null 2>&1
 
-# Backing up SpamAssassin configuration
+# Backup SpamAssassin configuration
 service spamassassin stop > /dev/null 2>&1
 cp -r /etc/mail/spamassassin/* $vst_backups/spamassassin >/dev/null 2>&1
 
-# Backing up Dovecot configuration
+# Backup Dovecot configuration
 service dovecot stop > /dev/null 2>&1
 cp /etc/dovecot.conf $vst_backups/dovecot > /dev/null 2>&1
 cp -r /etc/dovecot/* $vst_backups/dovecot > /dev/null 2>&1
 
-# Backing up MySQL/MariaDB configuration and data
+# Backup MySQL/MariaDB configuration and data
 service mysql stop > /dev/null 2>&1
 service mysqld stop > /dev/null 2>&1
 service mariadb stop > /dev/null 2>&1
@@ -550,18 +545,18 @@ cp /etc/my.cnf $vst_backups/mysql > /dev/null 2>&1
 cp /etc/my.cnf.d $vst_backups/mysql > /dev/null 2>&1
 mv /root/.my.cnf  $vst_backups/mysql > /dev/null 2>&1
 
-# Backing up MySQL/MariaDB configuration and data
+# Backup MySQL/MariaDB configuration and data
 service postgresql stop > /dev/null 2>&1
 mv /var/lib/pgsql/data $vst_backups/postgresql/  >/dev/null 2>&1
 
-# Backing up Vesta configuration and data
+# Backup Vesta
 service vesta stop > /dev/null 2>&1
 mv $VESTA/data/* $vst_backups/vesta > /dev/null 2>&1
 mv $VESTA/conf/* $vst_backups/vesta > /dev/null 2>&1
 
 
 #----------------------------------------------------------#
-#                     Package Exludes                      #
+#                     Package Excludes                     #
 #----------------------------------------------------------#
 
 # Excluding packages
@@ -636,17 +631,17 @@ fi
 #----------------------------------------------------------#
 
 # Installing rpm packages
-#if [ "$remi" = 'yes' ]; then
-#    yum -y --disablerepo=* \
-#        --enablerepo="*base,*updates,nginx,epel,vesta,remi*" \
-#        install $software
-#else
-#    yum -y --disablerepo=* --enablerepo="*base,*updates,nginx,epel,vesta" \
-#        install $software
-#fi
-
-# Temporary fix for centos vault issue
-yum install $software
+yum install -y $software
+if [ $? -ne 0 ]; then
+    if [ "$remi" = 'yes' ]; then
+        yum -y --disablerepo=* \
+            --enablerepo="*base,*updates,nginx,epel,vesta,remi*" \
+            install $software
+    else
+        yum -y --disablerepo=* --enablerepo="*base,*updates,nginx,epel,vesta" \
+            install $software
+    fi
+fi
 check_result $? "yum install failed"
 
 
@@ -674,7 +669,7 @@ if [ -e '/etc/sysconfig/selinux' ]; then
     setenforce 0 2>/dev/null
 fi
 
-# Disable iptables
+# Disablng iptables
 service iptables stop
 
 # Configuring NTP synchronization
@@ -691,7 +686,7 @@ adduser backup 2>/dev/null
 ln -sf /home/backup /backup
 chmod a+x /backup
 
-# Chaning default directory color
+# Set directory color
 echo 'LS_COLORS="$LS_COLORS:di=00;33"' >> /etc/profile
 
 # Changing default systemd interval
@@ -707,9 +702,9 @@ fi
 #                     Configure VESTA                      #
 #----------------------------------------------------------#
 
-# Downlading sudo configuration
+# Installing sudo configuration
 mkdir -p /etc/sudoers.d
-wget $vestacp/sudo/admin -O /etc/sudoers.d/admin
+cp -f $vestacp/sudo/admin /etc/sudoers.d/
 chmod 440 /etc/sudoers.d/admin
 
 # Configuring system env
@@ -721,9 +716,9 @@ echo 'export PATH' >> /root/.bash_profile
 source /root/.bash_profile
 
 # Configuring logrotate for vesta logs
-wget $vestacp/logrotate/vesta -O /etc/logrotate.d/vesta
+cp -f $vestacp/logrotate/vesta /etc/logrotate.d/
 
-# Buidling directory tree and creating some blank files for vesta
+# Building directory tree and creating some blank files for Vesta
 mkdir -p $VESTA/conf $VESTA/log $VESTA/ssl $VESTA/data/ips \
     $VESTA/data/queue $VESTA/data/users $VESTA/data/firewall \
     $VESTA/data/sessions
@@ -737,14 +732,13 @@ chmod 660 $VESTA/log/*
 rm -f /var/log/vesta
 ln -s $VESTA/log /var/log/vesta
 chmod 770 $VESTA/data/sessions
-chown admin:admin $VESTA/data/sessions
 
-# Generating vesta configuration
+# Generating Vesta configuration
 rm -f $VESTA/conf/vesta.conf 2>/dev/null
 touch $VESTA/conf/vesta.conf
 chmod 660 $VESTA/conf/vesta.conf
 
-# WEB stack
+# Web stack
 if [ "$apache" = 'yes' ] && [ "$nginx" = 'no' ] ; then
     echo "WEB_SYSTEM='httpd'" >> $VESTA/conf/vesta.conf
     echo "WEB_RGROUPS='apache'" >> $VESTA/conf/vesta.conf
@@ -802,7 +796,7 @@ if [ "$exim" = 'yes' ]; then
     fi
 fi
 
-# CRON daemon
+# Cron daemon
 echo "CRON_SYSTEM='crond'" >> $VESTA/conf/vesta.conf
 
 # Firewall stack
@@ -827,26 +821,18 @@ echo "LANGUAGE='$lang'" >> $VESTA/conf/vesta.conf
 # Version
 echo "VERSION='0.9.8'" >> $VESTA/conf/vesta.conf
 
-# Downloading hosting packages
-cd $VESTA/data
-wget $vestacp/packages.tar.gz -O packages.tar.gz
-tar -xzf packages.tar.gz
-rm -f packages.tar.gz
+# Installing hosting packages
+cp -rf $vestacp/packages $VESTA/data/
 
-# Downloading templates
-wget $vestacp/templates.tar.gz -O templates.tar.gz
-tar -xzf templates.tar.gz
-rm -f templates.tar.gz
+# Installing templates
+cp -rf $vestacp/templates $VESTA/data/
 
 # Copying index.html to default documentroot
-cp templates/web/skel/public_html/index.html /var/www/html/
+cp $VESTA/data/templates/web/skel/public_html/index.html /var/www/html/
 sed -i 's/%domain%/It worked!/g' /var/www/html/index.html
 
-# Downloading firewall rules
-chkconfig firewalld off >/dev/null 2>&1
-wget $vestacp/firewall.tar.gz -O firewall.tar.gz
-tar -xzf firewall.tar.gz
-rm -f firewall.tar.gz
+# Installing firewall rules
+cp -rf $vestacp/firewall $VESTA/data/
 
 # Configuring server hostname
 $VESTA/bin/v-change-sys-hostname $servername 2>/dev/null
@@ -875,16 +861,16 @@ rm /tmp/vst.pem
 
 if [ "$nginx" = 'yes' ]; then
     rm -f /etc/nginx/conf.d/*.conf
-    wget $vestacp/nginx/nginx.conf -O /etc/nginx/nginx.conf
-    wget $vestacp/nginx/status.conf -O /etc/nginx/conf.d/status.conf
-    wget $vestacp/nginx/phpmyadmin.inc -O /etc/nginx/conf.d/phpmyadmin.inc
-    wget $vestacp/nginx/phppgadmin.inc -O /etc/nginx/conf.d/phppgadmin.inc
-    wget $vestacp/nginx/webmail.inc -O /etc/nginx/conf.d/webmail.inc
-    wget $vestacp/logrotate/nginx -O /etc/logrotate.d/nginx
+    cp -f $vestacp/nginx/nginx.conf /etc/nginx/
+    cp -f $vestacp/nginx/status.conf /etc/nginx/conf.d/
+    cp -f $vestacp/nginx/phpmyadmin.inc /etc/nginx/conf.d/
+    cp -f $vestacp/nginx/phppgadmin.inc /etc/nginx/conf.d/
+    cp -f $vestacp/nginx/webmail.inc /etc/nginx/conf.d/
+    cp -f $vestacp/logrotate/nginx /etc/logrotate.d/
     echo > /etc/nginx/conf.d/vesta.conf
     mkdir -p /var/log/nginx/domains
-    if [ "$release" -eq 7 ]; then
-        mkdir /etc/systemd/system/nginx.service.d
+    if [ "$release" -ge 7 ]; then
+        mkdir -p /etc/systemd/system/nginx.service.d
         cd /etc/systemd/system/nginx.service.d
         echo "[Service]" > limits.conf
         echo "LimitNOFILE=500000" >> limits.conf
@@ -894,7 +880,7 @@ if [ "$nginx" = 'yes' ]; then
     check_result $? "nginx start failed"
 
     # Workaround for OpenVZ/Virtuozzo
-    if [ "$release" -eq '7' ] && [ -e "/proc/vz/veinfo" ]; then
+    if [ "$release" -ge '7' ] && [ -e "/proc/vz/veinfo" ]; then
         echo "#Vesta: workraround for networkmanager" >> /etc/rc.local
         echo "sleep 3 && service nginx restart" >> /etc/rc.local
     fi
@@ -906,29 +892,30 @@ fi
 #----------------------------------------------------------#
 
 if [ "$apache" = 'yes'  ]; then
-    cd /etc/httpd
-    wget $vestacp/httpd/httpd.conf -O conf/httpd.conf
-    wget $vestacp/httpd/status.conf -O conf.d/status.conf
-    wget $vestacp/httpd/ssl.conf -O conf.d/ssl.conf
-    wget $vestacp/httpd/ruid2.conf -O conf.d/ruid2.conf
-    wget $vestacp/logrotate/httpd -O /etc/logrotate.d/httpd
-    if [ $release -ne 7 ]; then
-        echo "MEFaccept 127.0.0.1" >> conf.d/mod_extract_forwarded.conf
-        echo > conf.d/proxy_ajp.conf
+    cp -f $vestacp/httpd/httpd.conf /etc/httpd/conf/
+    cp -f $vestacp/httpd/status.conf /etc/httpd/conf.d/
+    cp -f $vestacp/httpd/ssl.conf /etc/httpd/conf.d/
+    cp -f $vestacp/httpd/ruid2.conf /etc/httpd/conf.d/
+    cp -f $vestacp/logrotate/httpd /etc/logrotate.d/
+    if [ $release -lt 7 ]; then
+        cd /etc/httpd/conf.d
+        echo "MEFaccept 127.0.0.1" >> mod_extract_forwarded.conf
+        echo > proxy_ajp.conf
     fi
-    if [ -e "conf.modules.d/00-dav.conf" ]; then
-        sed -i "s/^/#/" conf.modules.d/00-dav.conf conf.modules.d/00-lua.conf
-        sed -i "s/^/#/" conf.modules.d/00-proxy.conf
+    if [ -e "/etc/httpd/conf.modules.d/00-dav.conf" ]; then
+        sed -i "s/^/#/" /etc/httpd/conf.modules.d/00-dav.conf
+        sed -i "s/^/#/" /etc/httpd/conf.modules.d/00-lua.conf
+        sed -i "s/^/#/" /etc/httpd/conf.modules.d/00-proxy.conf
     fi
-    echo > conf.d/vesta.conf
-    touch logs/access_log logs/error_log logs/error_log logs/suexec.log
-    chmod 640 logs/access_log logs/error_log logs/error_log logs/suexec.log
+    echo > /etc/httpd/conf.d/vesta.conf
+    touch /etc/httpd/logs/access_log /etc/httpd/logs/error_log
+    chmod 640 /etc/httpd/logs/access_log /etc/httpd/logs/error_log
     chmod -f 777 /var/lib/php/session
     chmod a+x /var/log/httpd
     mkdir -p /var/log/httpd/domains
     chmod 751 /var/log/httpd/domains
-    if [ "$release" -eq 7 ]; then
-        mkdir /etc/systemd/system/httpd.service.d
+    if [ "$release" -ge 7 ]; then
+        mkdir -p /etc/systemd/system/httpd.service.d
         cd /etc/systemd/system/httpd.service.d
         echo "[Service]" > limits.conf
         echo "LimitNOFILE=500000" >> limits.conf
@@ -938,7 +925,7 @@ if [ "$apache" = 'yes'  ]; then
     check_result $? "httpd start failed"
 
     # Workaround for OpenVZ/Virtuozzo
-    if [ "$release" -eq '7' ] && [ -e "/proc/vz/veinfo" ]; then
+    if [ "$release" -ge '7' ] && [ -e "/proc/vz/veinfo" ]; then
         echo "#Vesta: workraround for networkmanager" >> /etc/rc.local
         echo "sleep 2 && service httpd restart" >> /etc/rc.local
     fi
@@ -950,7 +937,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$phpfpm" = 'yes' ]; then
-    wget $vestacp/php-fpm/www.conf -O /etc/php-fpm.d/www.conf
+    cp -f $vestacp/php-fpm/www.conf /etc/php-fpm.d/
     chkconfig php-fpm on
     service php-fpm start
     check_result $? "php-fpm start failed"
@@ -975,17 +962,14 @@ done
 
 
 #----------------------------------------------------------#
-#                    Configure VSFTPD                      #
+#                    Configure Vsftpd                      #
 #----------------------------------------------------------#
 
 if [ "$vsftpd" = 'yes' ]; then
-    wget $vestacp/vsftpd/vsftpd.conf -O /etc/vsftpd/vsftpd.conf
+    cp -f $vestacp/vsftpd/vsftpd.conf /etc/vsftpd/
     chkconfig vsftpd on
     service vsftpd start
     check_result $? "vsftpd start failed"
-
-    # To be deleted after release 0.9.8-18
-    echo "/sbin/nologin" >> /etc/shells
 fi
 
 
@@ -994,7 +978,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$proftpd" = 'yes' ]; then
-    wget $vestacp/proftpd/proftpd.conf -O /etc/proftpd.conf
+    cp -f $vestacp/proftpd/proftpd.conf /etc/
     chkconfig proftpd on
     service proftpd start
     check_result $? "proftpd start failed"
@@ -1019,13 +1003,13 @@ if [ "$mysql" = 'yes' ]; then
     chown mysql:mysql /var/lib/mysql
     mkdir -p /etc/my.cnf.d
 
-    if [ $release -ne 7 ]; then
+    if [ $release -lt 7 ]; then
         service='mysqld'
     else
         service='mariadb'
     fi
 
-    wget $vestacp/$service/$mycnf -O /etc/my.cnf
+    cp -f $vestacp/$service/$mycnf /etc/my.cnf
     chkconfig $service on
     service $service start
     if [ "$?" -ne 0 ]; then
@@ -1049,9 +1033,9 @@ if [ "$mysql" = 'yes' ]; then
 
     # Configuring phpMyAdmin
     if [ "$apache" = 'yes' ]; then
-        wget $vestacp/pma/phpMyAdmin.conf -O /etc/httpd/conf.d/phpMyAdmin.conf
+        cp -f $vestacp/pma/phpMyAdmin.conf /etc/httpd/conf.d/
     fi
-    wget $vestacp/pma/config.inc.conf -O /etc/phpMyAdmin/config.inc.php
+    cp -f $vestacp/pma/config.inc.conf /etc/phpMyAdmin/
     sed -i "s/%blowfish_secret%/$(gen_pass)/g" /etc/phpMyAdmin/config.inc.php
 fi
 
@@ -1061,23 +1045,23 @@ fi
 #----------------------------------------------------------#
 
 if [ "$postgresql" = 'yes' ]; then
-    if [ $release = 5 ]; then
+    if [ $release -eq 5 ]; then
         service postgresql start
         sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$vpass'"
         service postgresql stop
-        wget $vestacp/postgresql/pg_hba.conf -O /var/lib/pgsql/data/pg_hba.conf
+        cp -f $vestacp/postgresql/pg_hba.conf /var/lib/pgsql/data/
         service postgresql start
     else
         service postgresql initdb
-        wget $vestacp/postgresql/pg_hba.conf -O /var/lib/pgsql/data/pg_hba.conf
+        cp -f $vestacp/postgresql/pg_hba.conf /var/lib/pgsql/data/
         service postgresql start
         sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$vpass'"
     fi
     # Configuring phpPgAdmin
     if [ "$apache" = 'yes' ]; then
-        wget $vestacp/pga/phpPgAdmin.conf -O /etc/httpd/conf.d/phpPgAdmin.conf
+        cp -f $vestacp/pga/phpPgAdmin.conf /etc/httpd/conf.d/
     fi
-    wget $vestacp/pga/config.inc.php -O /etc/phpPgAdmin/config.inc.php
+    cp -f $vestacp/pga/config.inc.php /etc/phpPgAdmin/
 fi
 
 
@@ -1086,7 +1070,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$named" = 'yes' ]; then
-    wget $vestacp/named/named.conf -O /etc/named.conf
+    cp -f $vestacp/named/named.conf /etc/
     chown root:named /etc/named.conf
     chmod 640 /etc/named.conf
     chkconfig named on
@@ -1101,9 +1085,9 @@ fi
 
 if [ "$exim" = 'yes' ]; then
     gpasswd -a exim mail
-    wget $vestacp/exim/exim.conf -O /etc/exim/exim.conf
-    wget $vestacp/exim/dnsbl.conf -O /etc/exim/dnsbl.conf
-    wget $vestacp/exim/spam-blocks.conf -O /etc/exim/spam-blocks.conf
+    cp -f $vestacp/exim/exim.conf /etc/exim/
+    cp -f $vestacp/exim/dnsbl.conf /etc/exim/
+    cp -f $vestacp/exim/spam-blocks.conf /etc/exim/
     touch /etc/exim/white-blocks.conf
 
     if [ "$spamd" = 'yes' ]; then
@@ -1136,12 +1120,8 @@ fi
 
 if [ "$dovecot" = 'yes' ]; then
     gpasswd -a dovecot mail
-    wget $vestacp/dovecot.tar.gz -O /etc/dovecot.tar.gz
-    wget $vestacp/logrotate/dovecot -O /etc/logrotate.d/dovecot
-    cd /etc
-    rm -rf dovecot dovecot.conf
-    tar -xzf dovecot.tar.gz
-    rm -f dovecot.tar.gz
+    cp -rf $vestacp/dovecot /etc/
+    cp -f $vestacp/logrotate/dovecot /etc/logrotate.d/
     chown -R root:root /etc/dovecot*
     chkconfig dovecot on
     service dovecot start
@@ -1157,19 +1137,17 @@ if [ "$clamd" = 'yes' ]; then
     useradd clam -s /sbin/nologin -d /var/lib/clamav 2>/dev/null
     gpasswd -a clam exim
     gpasswd -a clam mail
-    wget $vestacp/clamav/clamd.conf -O /etc/clamd.conf
-    wget $vestacp/clamav/freshclam.conf -O /etc/freshclam.conf
-    mkdir -p /var/log/clamav
-    mkdir -p /var/run/clamav
+    cp -f $vestacp/clamav/clamd.conf /etc/
+    cp -f $vestacp/clamav/freshclam.conf /etc/
+    mkdir -p /var/log/clamav /var/run/clamav
     chown clam:clam /var/log/clamav /var/run/clamav
     chown -R clam:clam /var/lib/clamav
-    if [ "$release" -eq '7' ]; then
-        wget $vestacp/clamav/clamd.service -O \
-            /usr/lib/systemd/system/clamd.service
+    if [ "$release" -ge '7' ]; then
+        cp -f $vestacp/clamav/clamd.service /usr/lib/systemd/system/
         systemctl --system daemon-reload
     fi
     /usr/bin/freshclam
-    if [ "$release" -eq '7' ]; then
+    if [ "$release" -ge '7' ]; then
         sed -i "s/nofork/foreground/" /usr/lib/systemd/system/clamd.service
         systemctl daemon-reload
     fi
@@ -1187,7 +1165,7 @@ if [ "$spamd" = 'yes' ]; then
     chkconfig spamassassin on
     service spamassassin start
     check_result $? "spamassassin start failed"
-    if [ "$release" -eq '7' ]; then
+    if [ "$release" -ge '7' ]; then
         groupadd -g 1001 spamd
         useradd -u 1001 -g spamd -s /sbin/nologin -d \
             /var/lib/spamassassin spamd
@@ -1203,15 +1181,13 @@ fi
 
 if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
     if [ "$apache" = 'yes' ]; then
-        wget $vestacp/roundcube/roundcubemail.conf \
-            -O /etc/httpd/conf.d/roundcubemail.conf
+        cp -f $vestacp/roundcube/roundcubemail.conf /etc/httpd/conf.d/
     fi
-    wget $vestacp/roundcube/main.inc.php -O /etc/roundcubemail/config.inc.php
+    cp -f $vestacp/roundcube/main.inc.php /etc/roundcubemail/config.inc.php
     cd /usr/share/roundcubemail/plugins/password
-    wget $vestacp/roundcube/vesta.php -O drivers/vesta.php
-    wget $vestacp/roundcube/config.inc.php -O config.inc.php
-    sed -i "s/localhost/$servername/g" \
-        /usr/share/roundcubemail/plugins/password/config.inc.php
+    cp -f $vestacp/roundcube/vesta.php drivers/vesta.php
+    cp -f $vestacp/roundcube/config.inc.php config.inc.php
+    sed -i "s/localhost/$servername/g" config.inc.php
     chmod a+r /etc/roundcubemail/*
     chmod -f 777 /var/log/roundcubemail
     r="$(gen_pass)"
@@ -1234,10 +1210,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$fail2ban" = 'yes' ]; then
-    cd /etc
-    wget $vestacp/fail2ban.tar.gz -O fail2ban.tar.gz
-    tar -xzf fail2ban.tar.gz
-    rm -f fail2ban.tar.gz
+    cp -rf $vestacp/fail2ban /etc/
     if [ "$dovecot" = 'no' ]; then
         fline=$(cat /etc/fail2ban/jail.local |grep -n dovecot-iptables -A 2)
         fline=$(echo "$fline" |grep enabled |tail -n1 |cut -f 1 -d -)
@@ -1256,9 +1229,9 @@ if [ "$fail2ban" = 'yes' ]; then
         fline=$(cat /etc/fail2ban/jail.local |grep -n vsftpd-iptables -A 2)
         fline=$(echo "$fline" |grep enabled |tail -n1 |cut -f 1 -d -)
         sed -i "${fline}s/false/true/" /etc/fail2ban/jail.local
-    fi 
+    fi
     chkconfig fail2ban on
-    /bin/mkdir -p /var/run/fail2ban
+    mkdir -p /var/run/fail2ban
     if [ -e "/usr/lib/systemd/system/fail2ban.service" ]; then
         exec_pre='ExecStartPre=/bin/mkdir -p /var/run/fail2ban'
         sed -i "s|\[Service\]|[Service]\n$exec_pre|g" \
@@ -1286,37 +1259,38 @@ if [ ! -z "$(grep ^admin: /etc/group)" ] && [ "$force" = 'yes' ]; then
     groupdel admin > /dev/null 2>&1
 fi
 
-# Adding vesta account
+# Adding Vesta admin account
 $VESTA/bin/v-add-user admin $vpass $email default System Administrator
 check_result $? "can't create admin user"
 $VESTA/bin/v-change-user-shell admin bash
 $VESTA/bin/v-change-user-language admin $lang
 
-# Configuring system ips
+# Configuring system IPs
 $VESTA/bin/v-update-sys-ip
 
-# Get main ip
+# Get main IP
 ip=$(ip addr|grep 'inet '|grep global|head -n1|awk '{print $2}'|cut -f1 -d/)
 
-# Firewall configuration
+# Configuring firewall
 if [ "$iptables" = 'yes' ]; then
     $VESTA/bin/v-update-firewall
 fi
 
-# Get public ip
+# Get public IP
 pub_ip=$(curl -s vestacp.com/what-is-my-ip/)
 if [ ! -z "$pub_ip" ] && [ "$pub_ip" != "$ip" ]; then
+    echo "$VESTA/bin/v-update-sys-ip" >> /etc/rc.local
     $VESTA/bin/v-change-sys-ip-nat $ip $pub_ip
     ip=$pub_ip
 fi
 
-# Configuring mysql host
+# Configuring MySQL/MariaDB host
 if [ "$mysql" = 'yes' ]; then
     $VESTA/bin/v-add-database-host mysql localhost root $vpass
     $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
 fi
 
-# Configuring pgsql host
+# Configuring PostgreSQL host
 if [ "$postgresql" = 'yes' ]; then
     $VESTA/bin/v-add-database-host pgsql localhost postgres $vpass
     $VESTA/bin/v-add-database admin db db $(gen_pass) pgsql
@@ -1324,8 +1298,8 @@ fi
 
 # Adding default domain
 $VESTA/bin/v-add-domain admin $servername
-check_result $? "can't create $servername domain"
 
+# Adding cron jobs
 command="sudo $VESTA/bin/v-update-sys-queue disk"
 $VESTA/bin/v-add-cron-job 'admin' '15' '02' '*' '*' '*' "$command"
 command="sudo $VESTA/bin/v-update-sys-queue traffic"
@@ -1342,7 +1316,7 @@ command="sudo $VESTA/bin/v-update-sys-rrd"
 $VESTA/bin/v-add-cron-job 'admin' '*/5' '*' '*' '*' '*' "$command"
 service crond restart
 
-# Building initial rrd images
+# Building RRD images
 $VESTA/bin/v-update-sys-rrd
 
 # Enabling file system quota
@@ -1355,7 +1329,7 @@ if [ "$softaculous" = 'yes' ]; then
     $VESTA/bin/v-add-vesta-softaculous
 fi
 
-# Starting vesta service
+# Starting Vesta service
 chkconfig vesta on
 service vesta start
 check_result $? "vesta start failed"
@@ -1375,8 +1349,8 @@ $VESTA/bin/v-add-cron-vesta-autoupdate
 # Sending install notification to vestacp.com
 wget vestacp.com/notify/?$codename -O /dev/null -q
 
-# Comparing hostname and ip
-host_ip=$(host $servername| head -n 1 | awk '{print $NF}')
+# Comparing hostname and IP
+host_ip=$(host $servername| head -n 1 |awk '{print $NF}')
 if [ "$host_ip" = "$ip" ]; then
     ip="$servername"
 fi

From 5fc8339a8d8334beee6e14bb4a6553edceed5f88 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 21 Jun 2018 18:01:24 +0300
Subject: [PATCH 0157/2300] cosmetic fixes for CentOS and Amazon installers

---
 install/vst-install-amazon.sh | 61 +++++++++++++++++------------------
 install/vst-install-rhel.sh   | 18 +++++------
 2 files changed, 39 insertions(+), 40 deletions(-)

diff --git a/install/vst-install-amazon.sh b/install/vst-install-amazon.sh
index f1fe62c7..be8d13e3 100644
--- a/install/vst-install-amazon.sh
+++ b/install/vst-install-amazon.sh
@@ -18,6 +18,7 @@ release='6'
 codename="${os}_$release"
 vestacp="$VESTA/install/$VERSION/$release"
 
+# Defining software pack for all distros
 software="nginx httpd mod_ssl mod_ruid2 mod_fcgid mod_extract_forwarded
     php php-common php-cli php-bcmath php-gd php-imap php-mbstring php-mcrypt
     php-mysql php-pdo php-soap php-tidy php-xml php-xmlrpc php-fpm php-pgsql
@@ -92,7 +93,7 @@ set_default_value() {
     fi
 }
 
-# Define function to set default language value
+# Defining function to set default language value
 set_default_lang() {
     if [ -z "$lang" ]; then
         eval lang=$1
@@ -112,9 +113,6 @@ set_default_lang() {
 #                    Verifications                         #
 #----------------------------------------------------------#
 
-# Creating temporary file
-tmpfile=$(mktemp -p /tmp)
-
 # Translating argument to --gnu-long-options
 for arg; do
     delim=""
@@ -226,7 +224,6 @@ if [ "$iptables" = 'no' ]; then
     fail2ban='no'
 fi
 
-
 # Checking root permissions
 if [ "x$(id -u)" != 'x0' ]; then
     check_result 1 "Script can be run executed only by root"
@@ -247,16 +244,18 @@ if [ ! -e '/usr/bin/wget' ]; then
 fi
 
 # Checking repository availability
-wget -q "http://c.vestacp.com/GPG.txt" -O /dev/null
+wget -q "c.vestacp.com/GPG.txt" -O /dev/null
 check_result $? "No access to Vesta repository"
 
 # Checking installed packages
+tmpfile=$(mktemp -p /tmp)
 rpm -qa > $tmpfile
 for pkg in exim mysql-server httpd nginx vesta; do
     if [ ! -z "$(grep $pkg $tmpfile)" ]; then
         conflicts="$pkg $conflicts"
     fi
 done
+rm -f $tmpfile
 if [ ! -z "$conflicts" ] && [ -z "$force" ]; then
     echo '!!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!!'
     echo
@@ -277,7 +276,7 @@ fi
 #                       Brief Info                         #
 #----------------------------------------------------------#
 
-# Printing nice ascii as logo
+# Printing nice ASCII logo
 clear
 echo
 echo ' _|      _|  _|_|_|_|    _|_|_|  _|_|_|_|_|    _|_|'
@@ -289,7 +288,7 @@ echo
 echo '                                  Vesta Control Panel'
 echo -e "\n\n"
 
-echo 'Following software will be installed on your system:'
+echo 'The following software will be installed on your system:'
 
 # Web stack
 if [ "$nginx" = 'yes' ]; then
@@ -310,16 +309,16 @@ if [ "$named" = 'yes' ]; then
     echo '   - Bind DNS Server'
 fi
 
-# Mail Stack
+# Mail stack
 if [ "$exim" = 'yes' ]; then
-    echo -n '   - Exim mail server'
+    echo -n '   - Exim Mail Server'
     if [ "$clamd" = 'yes'  ] ||  [ "$spamd" = 'yes' ] ; then
         echo -n ' + '
         if [ "$clamd" = 'yes' ]; then
-            echo -n 'Antivirus '
+            echo -n 'ClamAV '
         fi
         if [ "$spamd" = 'yes' ]; then
-            echo -n 'Antispam'
+            echo -n 'SpamAssassin'
         fi
     fi
     echo
@@ -328,9 +327,9 @@ if [ "$exim" = 'yes' ]; then
     fi
 fi
 
-# DB stack
+# Database stack
 if [ "$mysql" = 'yes' ]; then
-    if [ $release = 7 ]; then
+    if [ $release -ge 7 ]; then
         echo '   - MariaDB Database Server'
     else
         echo '   - MySQL Database Server'
@@ -438,7 +437,7 @@ fi
 #                  Install repositories                    #
 #----------------------------------------------------------#
 
-# Updating system packages
+# Updating system
 yum -y update
 check_result $? 'yum update failed'
 
@@ -463,7 +462,7 @@ echo "baseurl=http://$RHOST/$REPO/$release/\$basearch/" >> $vrepo
 echo "enabled=1" >> $vrepo
 echo "gpgcheck=1" >> $vrepo
 echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-VESTA" >> $vrepo
-wget http://c.vestacp.com/GPG.txt -O /etc/pki/rpm-gpg/RPM-GPG-KEY-VESTA
+wget c.vestacp.com/GPG.txt -O /etc/pki/rpm-gpg/RPM-GPG-KEY-VESTA
 
 
 #----------------------------------------------------------#
@@ -476,53 +475,53 @@ cd $vst_backups
 mkdir nginx httpd php php-fpm vsftpd proftpd named exim dovecot clamd \
     spamassassin mysql postgresql mongodb vesta
 
-# Backing up Nginx configuration
+# Backup Nginx configuration
 service nginx stop > /dev/null 2>&1
 cp -r /etc/nginx/* $vst_backups/nginx > /dev/null 2>&1
 
-# Backing up Apache configuration
+# Backup Apache configuration
 service httpd stop > /dev/null 2>&1
 cp -r /etc/httpd/* $vst_backups/httpd > /dev/null 2>&1
 
-# Backing up PHP configuration
+# Backup PHP-FPM configuration
 service php-fpm stop >/dev/null 2>&1
 cp /etc/php.ini $vst_backups/php > /dev/null 2>&1
 cp -r /etc/php.d  $vst_backups/php > /dev/null 2>&1
 cp /etc/php-fpm.conf $vst_backups/php-fpm > /dev/null 2>&1
 mv -f /etc/php-fpm.d/* $vst_backups/php-fpm/ > /dev/null 2>&1
 
-# Backing up Bind configuration
+# Backup Bind configuration
 yum remove bind-chroot > /dev/null 2>&1
 service named stop > /dev/null 2>&1
 cp /etc/named.conf $vst_backups/named >/dev/null 2>&1
 
-# Backing up Vsftpd configuration
+# Backup Vsftpd configuration
 service vsftpd stop > /dev/null 2>&1
 cp /etc/vsftpd/vsftpd.conf $vst_backups/vsftpd >/dev/null 2>&1
 
-# Backing up ProFTPD configuration
+# Backup ProFTPD configuration
 service proftpd stop > /dev/null 2>&1
 cp /etc/proftpd.conf $vst_backups/proftpd >/dev/null 2>&1
 
-# Backing up Exim configuration
+# Backup Exim configuration
 service exim stop > /dev/null 2>&1
 cp -r /etc/exim/* $vst_backups/exim >/dev/null 2>&1
 
-# Backing up ClamAV configuration
+# Backup ClamAV configuration
 service clamd stop > /dev/null 2>&1
 cp /etc/clamd.conf $vst_backups/clamd >/dev/null 2>&1
 cp -r /etc/clamd.d $vst_backups/clamd >/dev/null 2>&1
 
-# Backing up SpamAssassin configuration
+# Backup SpamAssassin configuration
 service spamassassin stop > /dev/null 2>&1
 cp -r /etc/mail/spamassassin/* $vst_backups/spamassassin >/dev/null 2>&1
 
-# Backing up Dovecot configuration
+# Backup Dovecot configuration
 service dovecot stop > /dev/null 2>&1
 cp /etc/dovecot.conf $vst_backups/dovecot > /dev/null 2>&1
 cp -r /etc/dovecot/* $vst_backups/dovecot > /dev/null 2>&1
 
-# Backing up MySQL/MariaDB configuration and data
+# Backup MySQL/MariaDB configuration and data
 service mysql stop > /dev/null 2>&1
 service mysqld stop > /dev/null 2>&1
 service mariadb stop > /dev/null 2>&1
@@ -531,18 +530,18 @@ cp /etc/my.cnf $vst_backups/mysql > /dev/null 2>&1
 cp /etc/my.cnf.d $vst_backups/mysql > /dev/null 2>&1
 mv /root/.my.cnf  $vst_backups/mysql > /dev/null 2>&1
 
-# Backing up MySQL/MariaDB configuration and data
+# Backup MySQL/MariaDB configuration and data
 service postgresql stop > /dev/null 2>&1
 mv /var/lib/pgsql/data $vst_backups/postgresql/  >/dev/null 2>&1
 
-# Backing up Vesta configuration and data
+# Backup Vesta
 service vesta stop > /dev/null 2>&1
 mv $VESTA/data/* $vst_backups/vesta > /dev/null 2>&1
 mv $VESTA/conf/* $vst_backups/vesta > /dev/null 2>&1
 
 
 #----------------------------------------------------------#
-#                     Package Exludes                      #
+#                     Package Excludes                     #
 #----------------------------------------------------------#
 
 # Excluding packages
@@ -652,7 +651,7 @@ if [ -e '/etc/sysconfig/selinux' ]; then
     setenforce 0 2>/dev/null
 fi
 
-# Disable iptables
+# Disabling iptables
 service iptables stop
 
 # Configuring NTP synchronization
diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index 07df0713..473332ed 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -669,7 +669,7 @@ if [ -e '/etc/sysconfig/selinux' ]; then
     setenforce 0 2>/dev/null
 fi
 
-# Disablng iptables
+# Disabling iptables
 service iptables stop
 
 # Configuring NTP synchronization
@@ -903,13 +903,13 @@ if [ "$apache" = 'yes'  ]; then
         echo > proxy_ajp.conf
     fi
     if [ -e "/etc/httpd/conf.modules.d/00-dav.conf" ]; then
-        sed -i "s/^/#/" /etc/httpd/conf.modules.d/00-dav.conf
-        sed -i "s/^/#/" /etc/httpd/conf.modules.d/00-lua.conf
-        sed -i "s/^/#/" /etc/httpd/conf.modules.d/00-proxy.conf
+        cd /etc/httpd/conf.modules.d
+        sed -i "s/^/#/" 00-dav.conf 00-lua.conf 00-proxy.conf
     fi
     echo > /etc/httpd/conf.d/vesta.conf
-    touch /etc/httpd/logs/access_log /etc/httpd/logs/error_log
-    chmod 640 /etc/httpd/logs/access_log /etc/httpd/logs/error_log
+    cd /var/log/httpd
+    touch access_log error_log suexec.log
+    chmod 640 access_log error_log suexec.log
     chmod -f 777 /var/lib/php/session
     chmod a+x /var/log/httpd
     mkdir -p /var/log/httpd/domains
@@ -1035,7 +1035,7 @@ if [ "$mysql" = 'yes' ]; then
     if [ "$apache" = 'yes' ]; then
         cp -f $vestacp/pma/phpMyAdmin.conf /etc/httpd/conf.d/
     fi
-    cp -f $vestacp/pma/config.inc.conf /etc/phpMyAdmin/
+    cp -f $vestacp/pma/config.inc.conf /etc/phpMyAdmin/config.inc.php
     sed -i "s/%blowfish_secret%/$(gen_pass)/g" /etc/phpMyAdmin/config.inc.php
 fi
 
@@ -1324,7 +1324,7 @@ if [ "$quota" = 'yes' ]; then
     $VESTA/bin/v-add-sys-quota
 fi
 
-# Enabling softaculous plugin
+# Enabling Softaculous plugin
 if [ "$softaculous" = 'yes' ]; then
     $VESTA/bin/v-add-vesta-softaculous
 fi
@@ -1350,7 +1350,7 @@ $VESTA/bin/v-add-cron-vesta-autoupdate
 wget vestacp.com/notify/?$codename -O /dev/null -q
 
 # Comparing hostname and IP
-host_ip=$(host $servername| head -n 1 |awk '{print $NF}')
+host_ip=$(host $servername |head -n 1 |awk '{print $NF}')
 if [ "$host_ip" = "$ip" ]; then
     ip="$servername"
 fi

From f4751a4e9709ce77fb1aba6426428c7891629c21 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 21 Jun 2018 18:11:09 +0300
Subject: [PATCH 0158/2300] Updated Amazon installer

---
 install/vst-install-amazon.sh | 75 +++++++++++++++++------------------
 1 file changed, 37 insertions(+), 38 deletions(-)

diff --git a/install/vst-install-amazon.sh b/install/vst-install-amazon.sh
index be8d13e3..899d4cd8 100644
--- a/install/vst-install-amazon.sh
+++ b/install/vst-install-amazon.sh
@@ -668,7 +668,7 @@ adduser backup 2>/dev/null
 ln -sf /home/backup /backup
 chmod a+x /backup
 
-# Chaning default directory color
+# Set directory color
 echo 'LS_COLORS="$LS_COLORS:di=00;33"' >> /etc/profile
 
 # Changing default systemd interval
@@ -684,7 +684,7 @@ fi
 #                     Configure VESTA                      #
 #----------------------------------------------------------#
 
-# Downlading sudo configuration
+# Installing sudo configuration
 mkdir -p /etc/sudoers.d
 cp -f $vestacp/sudo/admin /etc/sudoers.d/
 chmod 440 /etc/sudoers.d/admin
@@ -700,7 +700,7 @@ source /root/.bash_profile
 # Configuring logrotate for vesta logs
 cp -f $vestacp/logrotate/vesta /etc/logrotate.d/
 
-# Buidling directory tree and creating some blank files for vesta
+# Building directory tree and creating some blank files for vesta
 mkdir -p $VESTA/conf $VESTA/log $VESTA/ssl $VESTA/data/ips \
     $VESTA/data/queue $VESTA/data/users $VESTA/data/firewall \
     $VESTA/data/sessions
@@ -720,7 +720,7 @@ rm -f $VESTA/conf/vesta.conf 2>/dev/null
 touch $VESTA/conf/vesta.conf
 chmod 660 $VESTA/conf/vesta.conf
 
-# WEB stack
+# Web stack
 if [ "$apache" = 'yes' ] && [ "$nginx" = 'no' ] ; then
     echo "WEB_SYSTEM='httpd'" >> $VESTA/conf/vesta.conf
     echo "WEB_RGROUPS='apache'" >> $VESTA/conf/vesta.conf
@@ -778,7 +778,7 @@ if [ "$exim" = 'yes' ]; then
     fi
 fi
 
-# CRON daemon
+# Cron daemon
 echo "CRON_SYSTEM='crond'" >> $VESTA/conf/vesta.conf
 
 # Firewall stack
@@ -835,7 +835,6 @@ sed -n "1,${crt_end}p" /tmp/vst.pem > certificate.crt
 sed -n "$key_start,${key_end}p" /tmp/vst.pem > certificate.key
 chown root:mail $VESTA/ssl/*
 chmod 660 $VESTA/ssl/*
-chmod u+s /usr/bin/find
 rm /tmp/vst.pem
 
 
@@ -853,8 +852,8 @@ if [ "$nginx" = 'yes' ]; then
     cp -f $vestacp/logrotate/nginx /etc/logrotate.d/
     echo > /etc/nginx/conf.d/vesta.conf
     mkdir -p /var/log/nginx/domains
-    if [ "$release" -eq 7 ]; then
-        mkdir /etc/systemd/system/nginx.service.d
+    if [ "$release" -ge 7 ]; then
+        mkdir -p /etc/systemd/system/nginx.service.d
         cd /etc/systemd/system/nginx.service.d
         echo "[Service]" > limits.conf
         echo "LimitNOFILE=500000" >> limits.conf
@@ -864,7 +863,7 @@ if [ "$nginx" = 'yes' ]; then
     check_result $? "nginx start failed"
 
     # Workaround for OpenVZ/Virtuozzo
-    if [ "$release" -eq '7' ] && [ -e "/proc/vz/veinfo" ]; then
+    if [ "$release" -ge '7' ] && [ -e "/proc/vz/veinfo" ]; then
         echo "#Vesta: workraround for networkmanager" >> /etc/rc.local
         echo "sleep 3 && service nginx restart" >> /etc/rc.local
     fi
@@ -881,11 +880,12 @@ if [ "$apache" = 'yes'  ]; then
     cp -f $vestacp/httpd/ssl.conf /etc/httpd/conf.d/
     cp -f $vestacp/httpd/ruid2.conf /etc/httpd/conf.d/
     cp -f $vestacp/logrotate/httpd /etc/logrotate.d/
-    if [ $release -ne 7 ]; then
-        echo "MEFaccept 127.0.0.1" >> /etc/httpd/conf.d/mod_extract*.conf
-        echo > /etc/httpd/conf.d/proxy_ajp.conf
+    if [ $release -lt 7 ]; then
+        cd /etc/httpd/conf.d
+        echo "MEFaccept 127.0.0.1" >> mod_extract_forwarded.conf
+        echo > proxy_ajp.conf
     fi
-    if [ -e "conf.modules.d/00-dav.conf" ]; then
+    if [ -e "/etc/httpd/conf.modules.d/00-dav.conf" ]; then
         cd /etc/httpd/conf.modules.d
         sed -i "s/^/#/" 00-dav.conf 00-lua.conf 00-proxy.conf
     fi
@@ -897,8 +897,8 @@ if [ "$apache" = 'yes'  ]; then
     chmod a+x /var/log/httpd
     mkdir -p /var/log/httpd/domains
     chmod 751 /var/log/httpd/domains
-    if [ "$release" -eq 7 ]; then
-        mkdir /etc/systemd/system/httpd.service.d
+    if [ "$release" -ge 7 ]; then
+        mkdir -p /etc/systemd/system/httpd.service.d
         cd /etc/systemd/system/httpd.service.d
         echo "[Service]" > limits.conf
         echo "LimitNOFILE=500000" >> limits.conf
@@ -908,7 +908,7 @@ if [ "$apache" = 'yes'  ]; then
     check_result $? "httpd start failed"
 
     # Workaround for OpenVZ/Virtuozzo
-    if [ "$release" -eq '7' ] && [ -e "/proc/vz/veinfo" ]; then
+    if [ "$release" -ge '7' ] && [ -e "/proc/vz/veinfo" ]; then
         echo "#Vesta: workraround for networkmanager" >> /etc/rc.local
         echo "sleep 2 && service httpd restart" >> /etc/rc.local
     fi
@@ -945,7 +945,7 @@ done
 
 
 #----------------------------------------------------------#
-#                    Configure VSFTPD                      #
+#                    Configure Vsftpd                      #
 #----------------------------------------------------------#
 
 if [ "$vsftpd" = 'yes' ]; then
@@ -989,7 +989,7 @@ if [ "$mysql" = 'yes' ]; then
     chown mysql:mysql /var/lib/mysql
     mkdir -p /etc/my.cnf.d
 
-    if [ $release -ne 7 ]; then
+    if [ $release -lt 7 ]; then
         service='mysqld'
     else
         service='mariadb'
@@ -1031,7 +1031,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$postgresql" = 'yes' ]; then
-    if [ $release = 5 ]; then
+    if [ $release -eq 5 ]; then
         service postgresql start
         sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$vpass'"
         service postgresql stop
@@ -1125,16 +1125,15 @@ if [ "$clamd" = 'yes' ]; then
     gpasswd -a clam mail
     cp -f $vestacp/clamav/clamd.conf /etc/
     cp -f $vestacp/clamav/freshclam.conf /etc/
-    mkdir -p /var/log/clamav
-    mkdir -p /var/run/clamav
+    mkdir -p /var/log/clamav /var/run/clamav
     chown clam:clam /var/log/clamav /var/run/clamav
     chown -R clam:clam /var/lib/clamav
-    if [ "$release" -eq '7' ]; then
+    if [ "$release" -ge '7' ]; then
         cp -f $vestacp/clamav/clamd.service /usr/lib/systemd/system/
         systemctl --system daemon-reload
     fi
     /usr/bin/freshclam
-    if [ "$release" -eq '7' ]; then
+    if [ "$release" -ge '7' ]; then
         sed -i "s/nofork/foreground/" /usr/lib/systemd/system/clamd.service
         systemctl daemon-reload
     fi
@@ -1152,7 +1151,7 @@ if [ "$spamd" = 'yes' ]; then
     chkconfig spamassassin on
     service spamassassin start
     check_result $? "spamassassin start failed"
-    if [ "$release" -eq '7' ]; then
+    if [ "$release" -ge '7' ]; then
         groupadd -g 1001 spamd
         useradd -u 1001 -g spamd -s /sbin/nologin -d \
             /var/lib/spamassassin spamd
@@ -1216,9 +1215,9 @@ if [ "$fail2ban" = 'yes' ]; then
         fline=$(cat /etc/fail2ban/jail.local |grep -n vsftpd-iptables -A 2)
         fline=$(echo "$fline" |grep enabled |tail -n1 |cut -f 1 -d -)
         sed -i "${fline}s/false/true/" /etc/fail2ban/jail.local
-    fi 
+    fi
     chkconfig fail2ban on
-    /bin/mkdir -p /var/run/fail2ban
+    mkdir -p /var/run/fail2ban
     if [ -e "/usr/lib/systemd/system/fail2ban.service" ]; then
         exec_pre='ExecStartPre=/bin/mkdir -p /var/run/fail2ban'
         sed -i "s|\[Service\]|[Service]\n$exec_pre|g" \
@@ -1246,24 +1245,24 @@ if [ ! -z "$(grep ^admin: /etc/group)" ] && [ "$force" = 'yes' ]; then
     groupdel admin > /dev/null 2>&1
 fi
 
-# Adding vesta account
+# Adding Vesta admin account
 $VESTA/bin/v-add-user admin $vpass $email default System Administrator
 check_result $? "can't create admin user"
 $VESTA/bin/v-change-user-shell admin bash
 $VESTA/bin/v-change-user-language admin $lang
 
-# Configuring system ips
+# Configuring system IPs
 $VESTA/bin/v-update-sys-ip
 
-# Get main ip
+# Get main IP
 ip=$(ip addr|grep 'inet '|grep global|head -n1|awk '{print $2}'|cut -f1 -d/)
 
-# Firewall configuration
+# Configuring firewall
 if [ "$iptables" = 'yes' ]; then
     $VESTA/bin/v-update-firewall
 fi
 
-# Get public ip
+# Get public IP
 pub_ip=$(curl -s vestacp.com/what-is-my-ip/)
 if [ ! -z "$pub_ip" ] && [ "$pub_ip" != "$ip" ]; then
     echo "$VESTA/bin/v-update-sys-ip" >> /etc/rc.local
@@ -1271,13 +1270,13 @@ if [ ! -z "$pub_ip" ] && [ "$pub_ip" != "$ip" ]; then
     ip=$pub_ip
 fi
 
-# Configuring mysql host
+# Configuring MySQL host
 if [ "$mysql" = 'yes' ]; then
     $VESTA/bin/v-add-database-host mysql localhost root $vpass
     $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
 fi
 
-# Configuring pgsql host
+# Configuring PostgreSQL host
 if [ "$postgresql" = 'yes' ]; then
     $VESTA/bin/v-add-database-host pgsql localhost postgres $vpass
     $VESTA/bin/v-add-database admin db db $(gen_pass) pgsql
@@ -1285,8 +1284,8 @@ fi
 
 # Adding default domain
 $VESTA/bin/v-add-domain admin $servername
-check_result $? "can't create $servername domain"
 
+# Adding cron jobs
 command="sudo $VESTA/bin/v-update-sys-queue disk"
 $VESTA/bin/v-add-cron-job 'admin' '15' '02' '*' '*' '*' "$command"
 command="sudo $VESTA/bin/v-update-sys-queue traffic"
@@ -1303,7 +1302,7 @@ command="sudo $VESTA/bin/v-update-sys-rrd"
 $VESTA/bin/v-add-cron-job 'admin' '*/5' '*' '*' '*' '*' "$command"
 service crond restart
 
-# Building initial rrd images
+# Building RRD images
 $VESTA/bin/v-update-sys-rrd
 
 # Enabling file system quota
@@ -1311,12 +1310,12 @@ if [ "$quota" = 'yes' ]; then
     $VESTA/bin/v-add-sys-quota
 fi
 
-# Enabling softaculous plugin
+# Enabling Softaculous plugin
 if [ "$softaculous" = 'yes' ]; then
     $VESTA/bin/v-add-vesta-softaculous
 fi
 
-# Starting vesta service
+# Starting Vesta service
 chkconfig vesta on
 service vesta start
 check_result $? "vesta start failed"
@@ -1336,7 +1335,7 @@ $VESTA/bin/v-add-cron-vesta-autoupdate
 # Sending install notification to vestacp.com
 wget vestacp.com/notify/?$codename -O /dev/null -q
 
-# Comparing hostname and ip
+# Comparing hostname and IP
 host_ip=$(host $servername |head -n 1 |awk '{print $NF}')
 if [ "$host_ip" = "$ip" ]; then
     ip="$servername"

From b6e26ac4791ce1e2a374b4622481610db75cc287 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 22 Jun 2018 16:55:52 +0300
Subject: [PATCH 0159/2300] Fixed mysql-server package replacement

---
 install/vst-install-rhel.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index 473332ed..e529ff65 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -32,7 +32,7 @@ software="awstats bc bind bind-libs bind-utils clamav-server clamav-update
 
 # Fix for old releases
 if [ "$release" -lt 7 ]; then
-    software=$(echo "$software" |sed -e "s/mariadb/mysql/")
+    software=$(echo "$software" |sed -e "s/mariadb/mysql/g")
     software=$(echo "$software" |sed -e "s/clamav-server/clamd/")
     software=$(echo "$software" |sed -e "s/clamav-update//")
     software=$(echo "$software" |sed -e "s/iptables-services//")
@@ -956,7 +956,7 @@ if [ -z "$ZONE" ]; then
     ZONE='UTC'
 fi
 for pconf in $(find /etc/php* -name php.ini); do
-    sed -i "s/;date.timezone =/date.timezone = $ZONE/g" $pconf
+    sed -i "s|;date.timezone =|date.timezone = $ZONE|g" $pconf
     sed -i 's%_open_tag = Off%_open_tag = On%g' $pconf
 done
 

From ca3a9e0895c5aa2fe8c273c08f09438fb0b23e9a Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sun, 24 Jun 2018 10:38:16 +0300
Subject: [PATCH 0160/2300] Security fix for API hash check

---
 web/api/index.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/web/api/index.php b/web/api/index.php
index 3cf0ec2d..80f72b99 100644
--- a/web/api/index.php
+++ b/web/api/index.php
@@ -58,6 +58,8 @@ if (isset($_POST['user']) || isset($_POST['hash'])) {
                 echo 'Error: authentication failed';
                 exit;
             }
+        } else {
+            $return_var = 1;
         }
     }
 

From ece8efd5053d56d3d25c231bd40449aa3ce29d68 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sun, 24 Jun 2018 10:42:43 +0300
Subject: [PATCH 0161/2300] 0.9.8-22

---
 src/deb/vesta/control    | 2 +-
 src/rpm/specs/vesta.spec | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index b45b2f74..028a4e41 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-21
+Version: 0.9.8-22
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/rpm/specs/vesta.spec b/src/rpm/specs/vesta.spec
index ea94eebd..58359da0 100644
--- a/src/rpm/specs/vesta.spec
+++ b/src/rpm/specs/vesta.spec
@@ -1,6 +1,6 @@
 Name:           vesta
 Version:        0.9.8
-Release:        21
+Release:        22
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL

From 7f3e7d5b6372ec6793cf5ff1571793439cf4266f Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sun, 24 Jun 2018 19:12:43 +0300
Subject: [PATCH 0162/2300] ip.sh include missing

---
 bin/v-update-sys-ip | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-update-sys-ip b/bin/v-update-sys-ip
index 8c0da087..7360b07f 100755
--- a/bin/v-update-sys-ip
+++ b/bin/v-update-sys-ip
@@ -16,6 +16,7 @@ source /etc/profile
 
 # Includes
 source $VESTA/func/main.sh
+source $VESTA/func/ip.sh
 source $VESTA/conf/vesta.conf
 
 

From 397cf699bb5613015c62f526866a0bd3d1506e6c Mon Sep 17 00:00:00 2001
From: Clark Chen <clarkchentw@users.noreply.github.com>
Date: Mon, 25 Jun 2018 15:07:33 +0800
Subject: [PATCH 0163/2300] Update tw.php

---
 web/inc/i18n/tw.php | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/web/inc/i18n/tw.php b/web/inc/i18n/tw.php
index 02b5a29a..499d0ec4 100644
--- a/web/inc/i18n/tw.php
+++ b/web/inc/i18n/tw.php
@@ -573,7 +573,7 @@ $LANG['tw'] = array(
     'Current Number Of Databases' => '目前的資料庫數量',
     'Local backup' => '本機備份',
     'Compression level' => '壓縮等級',
-    'Directory' => 'Directory',
+    'Directory' => '路徑',
     'Remote backup' => '遠端備份',
     'ftp' => 'FTP',
     'sftp' => 'SFTP',
@@ -740,14 +740,14 @@ $LANG['tw'] = array(
     'webalizer' => 'webalizer',
     'awstats' => 'awstats',
 
-    'Vesta SSL' => 'Vesta SSL',
-    'SUBJECT' => 'SUBJECT',
-    'ALIASES' => 'ALIASES',
-    'NOT_BEFORE' => 'NOT_BEFORE',
-    'NOT_AFTER' => 'NOT_AFTER',
-    'SIGNATURE' => 'SIGNATURE',
-    'PUB_KEY' => 'PUB_KEY',
-    'ISSUER' => 'ISSUER',
+    'Vesta SSL' => 'Vesta後台 SSL',
+    'SUBJECT' => '主體名稱',
+    'ALIASES' => '主體別名',
+    'NOT_BEFORE' => '有效期自',
+    'NOT_AFTER' => '有效期到',
+    'SIGNATURE' => '簽章演算法',
+    'PUB_KEY' => '公開金鑰',
+    'ISSUER' => '簽發者',
 
     'Use server hostname' => '使用伺服器主機名稱',
     'Use domain hostname' => '使用網域主機名稱',
@@ -758,5 +758,5 @@ $LANG['tw'] = array(
 
     'maximum characters length, including prefix' => '最多 %s 字元(包含前綴)',
 
-    'Email Credentials' => 'Email Credentials',
+    'Email Credentials' => '信箱登入資訊',
 );

From bffeed57396279c105a2698c6ffc83c3e1d79969 Mon Sep 17 00:00:00 2001
From: Clark Chen <clarkchentw@users.noreply.github.com>
Date: Mon, 25 Jun 2018 15:10:04 +0800
Subject: [PATCH 0164/2300] Update tw.php

---
 web/inc/i18n/tw.php | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/web/inc/i18n/tw.php b/web/inc/i18n/tw.php
index 499d0ec4..4f493eb5 100644
--- a/web/inc/i18n/tw.php
+++ b/web/inc/i18n/tw.php
@@ -2,10 +2,6 @@
 /**
  * Vesta language file
  * This language file is translate by
- * Peter Dave Hello Blog (https://www.peterdavehello.org)
- * Peter Dave Hello GitHub (https://github.com/PeterDaveHello)
- * Peter Dave Hello Twitter (https://twitter.com/PeterDaveHello)
- * Clark's Computer Knowledge Journal (https://www.clark-chen.com)
  * Clark's Hosting Service (https://host.clark-chen.com)
  * Clark Chen (clark@clark-chen.com)
  */

From dd19eef3aab67b08ffa086c90b3abae6094c2f0e Mon Sep 17 00:00:00 2001
From: Clark Chen <clarkchentw@users.noreply.github.com>
Date: Mon, 25 Jun 2018 15:11:15 +0800
Subject: [PATCH 0165/2300] Update tw.php

---
 web/inc/i18n/tw.php | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/web/inc/i18n/tw.php b/web/inc/i18n/tw.php
index 4f493eb5..10b06aef 100644
--- a/web/inc/i18n/tw.php
+++ b/web/inc/i18n/tw.php
@@ -216,6 +216,7 @@ $LANG['tw'] = array(
     'Autoreply'  => '自動回覆',
     'Forward to'  => '轉寄到',
     'Do not store forwarded mail' => '不保留已轉發的郵件',
+    'Email Credentials' => '信箱登入資訊',
     'IMAP hostname'  => 'IMAP 主機名稱',
     'IMAP port'  => 'IMAP 連接埠',
     'IMAP security'  => 'IMAP 安全性',
@@ -753,6 +754,4 @@ $LANG['tw'] = array(
     'Do not use encryption' => '不要使用加密',
 
     'maximum characters length, including prefix' => '最多 %s 字元(包含前綴)',
-
-    'Email Credentials' => '信箱登入資訊',
 );

From 5b4211b3dade48e3f7ab43fbf02320856de1143c Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 27 Jun 2018 12:00:44 +0300
Subject: [PATCH 0166/2300] updated spec to 0.9.8-22

---
 src/deb/ioncube/control              | 2 +-
 src/deb/nginx/control                | 2 +-
 src/deb/php/control                  | 2 +-
 src/deb/softaculous/control          | 2 +-
 src/rpm/specs/vesta-ioncube.spec     | 2 +-
 src/rpm/specs/vesta-nginx.spec       | 2 +-
 src/rpm/specs/vesta-php.spec         | 2 +-
 src/rpm/specs/vesta-softaculous.spec | 2 +-
 8 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/src/deb/ioncube/control b/src/deb/ioncube/control
index 607655f5..89268f6e 100644
--- a/src/deb/ioncube/control
+++ b/src/deb/ioncube/control
@@ -1,7 +1,7 @@
 Source: vesta-ioncube
 Package: vesta-ioncube
 Priority: optional
-Version: 0.9.8-21
+Version: 0.9.8-22
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.ioncube.com
diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index 1f17044e..9dc7351a 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -1,7 +1,7 @@
 Source: vesta-nginx
 Package: vesta-nginx
 Priority: optional
-Version: 0.9.8-21
+Version: 0.9.8-22
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/php/control b/src/deb/php/control
index ad9991e5..3714008d 100644
--- a/src/deb/php/control
+++ b/src/deb/php/control
@@ -1,7 +1,7 @@
 Source: vesta-php
 Package: vesta-php
 Priority: optional
-Version: 0.9.8-21
+Version: 0.9.8-22
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/softaculous/control b/src/deb/softaculous/control
index acadc809..35140df6 100644
--- a/src/deb/softaculous/control
+++ b/src/deb/softaculous/control
@@ -1,7 +1,7 @@
 Source: vesta-softaculous
 Package: vesta-softaculous
 Priority: optional
-Version: 0.9.8-21
+Version: 0.9.8-22
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.softaculous.com
diff --git a/src/rpm/specs/vesta-ioncube.spec b/src/rpm/specs/vesta-ioncube.spec
index aaa4cf5d..5d48dc29 100644
--- a/src/rpm/specs/vesta-ioncube.spec
+++ b/src/rpm/specs/vesta-ioncube.spec
@@ -1,6 +1,6 @@
 Name:           vesta-ioncube
 Version:        0.9.8
-Release:        21
+Release:        22
 Summary:        ionCube Loader
 Group:          System Environment/Base
 License:        "Freely redistributable without restriction"
diff --git a/src/rpm/specs/vesta-nginx.spec b/src/rpm/specs/vesta-nginx.spec
index 9e83f48a..a633ef85 100644
--- a/src/rpm/specs/vesta-nginx.spec
+++ b/src/rpm/specs/vesta-nginx.spec
@@ -1,6 +1,6 @@
 Name:           vesta-nginx
 Version:        0.9.8
-Release:        21
+Release:        22
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        BSD-like
diff --git a/src/rpm/specs/vesta-php.spec b/src/rpm/specs/vesta-php.spec
index 112deee1..12d1c401 100644
--- a/src/rpm/specs/vesta-php.spec
+++ b/src/rpm/specs/vesta-php.spec
@@ -1,6 +1,6 @@
 Name:           vesta-php
 Version:        0.9.8
-Release:        21
+Release:        22
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
diff --git a/src/rpm/specs/vesta-softaculous.spec b/src/rpm/specs/vesta-softaculous.spec
index 15bb15b3..7e92cfdb 100644
--- a/src/rpm/specs/vesta-softaculous.spec
+++ b/src/rpm/specs/vesta-softaculous.spec
@@ -1,6 +1,6 @@
 Name:           vesta-softaculous
 Version:        0.9.8
-Release:        21
+Release:        22
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        Softaculous License

From af04e1bdb9f9a709e967f3ba9944b5e1dfa69e3b Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 28 Jun 2018 00:55:13 +0300
Subject: [PATCH 0167/2300] clean php-fpm.conf

---
 src/rpm/conf/php-fpm.conf | 479 +-------------------------------------
 1 file changed, 6 insertions(+), 473 deletions(-)

diff --git a/src/rpm/conf/php-fpm.conf b/src/rpm/conf/php-fpm.conf
index 0a76ae2f..d9a04795 100755
--- a/src/rpm/conf/php-fpm.conf
+++ b/src/rpm/conf/php-fpm.conf
@@ -1,468 +1,21 @@
-;;;;;;;;;;;;;;;;;;;;;
-; FPM Configuration ;
-;;;;;;;;;;;;;;;;;;;;;
-
-; All relative paths in this configuration file are relative to PHP's install
-; prefix (/usr/local/vesta/php). This prefix can be dynamicaly changed by using the
-; '-p' argument from the command line.
-
-; Include one or more files. If glob(3) exists, it is used to include a bunch of
-; files from a glob(3) pattern. This directive can be used everywhere in the
-; file.
-; Relative path can also be used. They will be prefixed by:
-;  - the global prefix if it's been set (-p arguement)
-;  - /usr/local/vesta/php otherwise
-;include=etc/fpm.d/*.conf
-
-;;;;;;;;;;;;;;;;;;
-; Global Options ;
-;;;;;;;;;;;;;;;;;;
-
 [global]
-; Pid file
-; Note: the default prefix is /usr/local/vesta/php/var
-; Default Value: none
 pid = /var/run/vesta-php.pid
+daemonize = yes
 
-; Error log file
-; If it's set to "syslog", log is sent to syslogd instead of being written
-; in a local file.
-; Note: the default prefix is /usr/local/vesta/php/var
-; Default Value: log/php-fpm.log
-;error_log = log/php-fpm.log
-
-; syslog_facility is used to specify what type of program is logging the
-; message. This lets syslogd specify that messages from different facilities
-; will be handled differently.
-; See syslog(3) for possible values (ex daemon equiv LOG_DAEMON)
-; Default Value: daemon
-;syslog.facility = daemon
-
-; syslog_ident is prepended to every message. If you have multiple FPM
-; instances running on the same server, you can change the default value
-; which must suit common needs.
-; Default Value: php-fpm
-syslog.ident = vesta-php
-
-; Log level
-; Possible Values: alert, error, warning, notice, debug
-; Default Value: notice
-log_level = error
-
-; If this number of child processes exit with SIGSEGV or SIGBUS within the time
-; interval set by emergency_restart_interval then FPM will restart. A value
-; of '0' means 'Off'.
-; Default Value: 0
-emergency_restart_threshold = 10
-
-; Interval of time used by emergency_restart_interval to determine when 
-; a graceful restart will be initiated.  This can be useful to work around
-; accidental corruptions in an accelerator's shared memory.
-; Available Units: s(econds), m(inutes), h(ours), or d(ays)
-; Default Unit: seconds
-; Default Value: 0
-emergency_restart_interval = 1m
-
-; Time limit for child processes to wait for a reaction on signals from master.
-; Available units: s(econds), m(inutes), h(ours), or d(ays)
-; Default Unit: seconds
-; Default Value: 0
-process_control_timeout = 10s
-
-; The maximum number of processes FPM will fork. This has been design to control
-; the global number of processes when using dynamic PM within a lot of pools.
-; Use it with caution.
-; Note: A value of 0 indicates no limit
-; Default Value: 0
-; process.max = 128
-
-; Send FPM to background. Set to 'no' to keep FPM in foreground for debugging.
-; Default Value: yes
-;daemonize = yes
- 
-; Set open file descriptor rlimit for the master process.
-; Default Value: system defined value
-;rlimit_files = 1024
- 
-; Set max core size rlimit for the master process.
-; Possible Values: 'unlimited' or an integer greater or equal to 0
-; Default Value: system defined value
-;rlimit_core = 0
-
-; Specify the event mechanism FPM will use. The following is available:
-; - select     (any POSIX os)
-; - poll       (any POSIX os)
-; - epoll      (linux >= 2.5.44)
-; - kqueue     (FreeBSD >= 4.1, OpenBSD >= 2.9, NetBSD >= 2.0)
-; - /dev/poll  (Solaris >= 7)
-; - port       (Solaris >= 10)
-; Default Value: not set (auto detection)
-events.mechanism = epoll
-
-;;;;;;;;;;;;;;;;;;;;
-; Pool Definitions ; 
-;;;;;;;;;;;;;;;;;;;;
-
-; Multiple pools of child processes may be started with different listening
-; ports and different management options.  The name of the pool will be
-; used in logs and stats. There is no limitation on the number of pools which
-; FPM can handle. Your system will tell you anyway :)
-
-; Start a new pool named 'www'.
-; the variable $pool can we used in any directive and will be replaced by the
-; pool name ('www' here)
 [www]
-
-; Per pool prefix
-; It only applies on the following directives:
-; - 'slowlog'
-; - 'listen' (unixsocket)
-; - 'chroot'
-; - 'chdir'
-; - 'php_values'
-; - 'php_admin_values'
-; When not set, the global prefix (or /usr/local/vesta/php) applies instead.
-; Note: This directive can also be relative to the global prefix.
-; Default Value: none
-;prefix = /path/to/pools/$pool
-
-; Unix user/group of processes
-; Note: The user is mandatory. If the group is not set, the default user's group
-;       will be used.
 user = admin
 group = admin
-
-; The address on which to accept FastCGI requests.
-; Valid syntaxes are:
-;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific address on
-;                            a specific port;
-;   'port'                 - to listen on a TCP socket to all addresses on a
-;                            specific port;
-;   '/path/to/unix/socket' - to listen on a unix socket.
-; Note: This value is mandatory.
-;listen = 127.0.0.1:9000
 listen = /var/run/vesta-php.sock
-
-; Set listen(2) backlog.
-; Default Value: 128 (-1 on FreeBSD and OpenBSD)
-;listen.backlog = 128
-
-; Set permissions for unix socket, if one is used. In Linux, read/write
-; permissions must be set in order to allow connections from a web server. Many
-; BSD-derived systems allow connections regardless of permissions. 
-; Default Values: user and group are set as the running user
-;                 mode is set to 0666
 listen.owner = admin
 listen.group = admin
 listen.mode = 0660
- 
-; List of ipv4 addresses of FastCGI clients which are allowed to connect.
-; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
-; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
-; must be separated by a comma. If this value is left blank, connections will be
-; accepted from any ip address.
-; Default Value: any
-;listen.allowed_clients = 127.0.0.1
 
-; Choose how the process manager will control the number of child processes.
-; Possible Values:
-;   static  - a fixed number (pm.max_children) of child processes;
-;   dynamic - the number of child processes are set dynamically based on the
-;             following directives. With this process management, there will be
-;             always at least 1 children.
-;             pm.max_children      - the maximum number of children that can
-;                                    be alive at the same time.
-;             pm.start_servers     - the number of children created on startup.
-;             pm.min_spare_servers - the minimum number of children in 'idle'
-;                                    state (waiting to process). If the number
-;                                    of 'idle' processes is less than this
-;                                    number then some children will be created.
-;             pm.max_spare_servers - the maximum number of children in 'idle'
-;                                    state (waiting to process). If the number
-;                                    of 'idle' processes is greater than this
-;                                    number then some children will be killed.
-;  ondemand - no children are created at startup. Children will be forked when
-;             new requests will connect. The following parameter are used:
-;             pm.max_children           - the maximum number of children that
-;                                         can be alive at the same time.
-;             pm.process_idle_timeout   - The number of seconds after which
-;                                         an idle process will be killed.
-; Note: This value is mandatory.
-pm = ondemand
+pm = dynamic
+pm.max_children = 5
+pm.start_servers = 2
+pm.min_spare_servers = 1
+pm.max_spare_servers = 3
 
-; The number of child processes to be created when pm is set to 'static' and the
-; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
-; This value sets the limit on the number of simultaneous requests that will be
-; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
-; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
-; CGI. The below defaults are based on a server without much resources. Don't
-; forget to tweak pm.* to fit your needs.
-; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
-; Note: This value is mandatory.
-pm.max_children = 2
-
-; The number of child processes created on startup.
-; Note: Used only when pm is set to 'dynamic'
-; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2
-;pm.start_servers = 2
-
-; The desired minimum number of idle server processes.
-; Note: Used only when pm is set to 'dynamic'
-; Note: Mandatory when pm is set to 'dynamic'
-;pm.min_spare_servers = 1
-
-; The desired maximum number of idle server processes.
-; Note: Used only when pm is set to 'dynamic'
-; Note: Mandatory when pm is set to 'dynamic'
-;pm.max_spare_servers = 3
-
-; The number of seconds after which an idle process will be killed.
-; Note: Used only when pm is set to 'ondemand'
-; Default Value: 10s
-pm.process_idle_timeout = 10s;
- 
-; The number of requests each child process should execute before respawning.
-; This can be useful to work around memory leaks in 3rd party libraries. For
-; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
-; Default Value: 0
-pm.max_requests = 1000
-
-; The URI to view the FPM status page. If this value is not set, no URI will be
-; recognized as a status page. It shows the following informations:
-;   pool                 - the name of the pool;
-;   process manager      - static, dynamic or ondemand;
-;   start time           - the date and time FPM has started;
-;   start since          - number of seconds since FPM has started;
-;   accepted conn        - the number of request accepted by the pool;
-;   listen queue         - the number of request in the queue of pending
-;                          connections (see backlog in listen(2));
-;   max listen queue     - the maximum number of requests in the queue
-;                          of pending connections since FPM has started;
-;   listen queue len     - the size of the socket queue of pending connections;
-;   idle processes       - the number of idle processes;
-;   active processes     - the number of active processes;
-;   total processes      - the number of idle + active processes;
-;   max active processes - the maximum number of active processes since FPM
-;                          has started;
-;   max children reached - number of times, the process limit has been reached,
-;                          when pm tries to start more children (works only for
-;                          pm 'dynamic' and 'ondemand');
-; Value are updated in real time.
-; Example output:
-;   pool:                 www
-;   process manager:      static
-;   start time:           01/Jul/2011:17:53:49 +0200
-;   start since:          62636
-;   accepted conn:        190460
-;   listen queue:         0
-;   max listen queue:     1
-;   listen queue len:     42
-;   idle processes:       4
-;   active processes:     11
-;   total processes:      15
-;   max active processes: 12
-;   max children reached: 0
-;
-; By default the status page output is formatted as text/plain. Passing either
-; 'html', 'xml' or 'json' in the query string will return the corresponding
-; output syntax. Example:
-;   http://www.foo.bar/status
-;   http://www.foo.bar/status?json
-;   http://www.foo.bar/status?html
-;   http://www.foo.bar/status?xml
-;
-; By default the status page only outputs short status. Passing 'full' in the
-; query string will also return status for each pool process.
-; Example: 
-;   http://www.foo.bar/status?full
-;   http://www.foo.bar/status?json&full
-;   http://www.foo.bar/status?html&full
-;   http://www.foo.bar/status?xml&full
-; The Full status returns for each process:
-;   pid                  - the PID of the process;
-;   state                - the state of the process (Idle, Running, ...);
-;   start time           - the date and time the process has started;
-;   start since          - the number of seconds since the process has started;
-;   requests             - the number of requests the process has served;
-;   request duration     - the duration in µs of the requests;
-;   request method       - the request method (GET, POST, ...);
-;   request URI          - the request URI with the query string;
-;   content length       - the content length of the request (only with POST);
-;   user                 - the user (PHP_AUTH_USER) (or '-' if not set);
-;   script               - the main script called (or '-' if not set);
-;   last request cpu     - the %cpu the last request consumed
-;                          it's always 0 if the process is not in Idle state
-;                          because CPU calculation is done when the request
-;                          processing has terminated;
-;   last request memory  - the max amount of memory the last request consumed
-;                          it's always 0 if the process is not in Idle state
-;                          because memory calculation is done when the request
-;                          processing has terminated;
-; If the process is in Idle state, then informations are related to the
-; last request the process has served. Otherwise informations are related to
-; the current request being served.
-; Example output:
-;   ************************
-;   pid:                  31330
-;   state:                Running
-;   start time:           01/Jul/2011:17:53:49 +0200
-;   start since:          63087
-;   requests:             12808
-;   request duration:     1250261
-;   request method:       GET
-;   request URI:          /test_mem.php?N=10000
-;   content length:       0
-;   user:                 -
-;   script:               /home/fat/web/docs/php/test_mem.php
-;   last request cpu:     0.00
-;   last request memory:  0
-;
-; Note: There is a real-time FPM status monitoring sample web page available
-;       It's available in: ${prefix}/share/fpm/status.html
-;
-; Note: The value must start with a leading slash (/). The value can be
-;       anything, but it may not be a good idea to use the .php extension or it
-;       may conflict with a real PHP file.
-; Default Value: not set 
-;pm.status_path = /status
- 
-; The ping URI to call the monitoring page of FPM. If this value is not set, no
-; URI will be recognized as a ping page. This could be used to test from outside
-; that FPM is alive and responding, or to
-; - create a graph of FPM availability (rrd or such);
-; - remove a server from a group if it is not responding (load balancing);
-; - trigger alerts for the operating team (24/7).
-; Note: The value must start with a leading slash (/). The value can be
-;       anything, but it may not be a good idea to use the .php extension or it
-;       may conflict with a real PHP file.
-; Default Value: not set
-;ping.path = /ping
-
-; This directive may be used to customize the response of a ping request. The
-; response is formatted as text/plain with a 200 response code.
-; Default Value: pong
-;ping.response = pong
-
-; The access log file
-; Default: not set
-;access.log = log/$pool.access.log
-
-; The access log format.
-; The following syntax is allowed
-;  %%: the '%' character
-;  %C: %CPU used by the request
-;      it can accept the following format:
-;      - %{user}C for user CPU only
-;      - %{system}C for system CPU only
-;      - %{total}C  for user + system CPU (default)
-;  %d: time taken to serve the request
-;      it can accept the following format:
-;      - %{seconds}d (default)
-;      - %{miliseconds}d
-;      - %{mili}d
-;      - %{microseconds}d
-;      - %{micro}d
-;  %e: an environment variable (same as $_ENV or $_SERVER)
-;      it must be associated with embraces to specify the name of the env
-;      variable. Some exemples:
-;      - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
-;      - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
-;  %f: script filename
-;  %l: content-length of the request (for POST request only)
-;  %m: request method
-;  %M: peak of memory allocated by PHP
-;      it can accept the following format:
-;      - %{bytes}M (default)
-;      - %{kilobytes}M
-;      - %{kilo}M
-;      - %{megabytes}M
-;      - %{mega}M
-;  %n: pool name
-;  %o: ouput header
-;      it must be associated with embraces to specify the name of the header:
-;      - %{Content-Type}o
-;      - %{X-Powered-By}o
-;      - %{Transfert-Encoding}o
-;      - ....
-;  %p: PID of the child that serviced the request
-;  %P: PID of the parent of the child that serviced the request
-;  %q: the query string 
-;  %Q: the '?' character if query string exists
-;  %r: the request URI (without the query string, see %q and %Q)
-;  %R: remote IP address
-;  %s: status (response code)
-;  %t: server time the request was received
-;      it can accept a strftime(3) format:
-;      %d/%b/%Y:%H:%M:%S %z (default)
-;  %T: time the log has been written (the request has finished)
-;      it can accept a strftime(3) format:
-;      %d/%b/%Y:%H:%M:%S %z (default)
-;  %u: remote user
-;
-; Default: "%R - %u %t \"%m %r\" %s"
-;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
- 
-; The log file for slow requests
-; Default Value: not set
-; Note: slowlog is mandatory if request_slowlog_timeout is set
-;slowlog = log/$pool.log.slow
- 
-; The timeout for serving a single request after which a PHP backtrace will be
-; dumped to the 'slowlog' file. A value of '0s' means 'off'.
-; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
-; Default Value: 0
-;request_slowlog_timeout = 0
- 
-; The timeout for serving a single request after which the worker process will
-; be killed. This option should be used when the 'max_execution_time' ini option
-; does not stop script execution for some reason. A value of '0' means 'off'.
-; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
-; Default Value: 0
-;request_terminate_timeout = 0
- 
-; Set open file descriptor rlimit.
-; Default Value: system defined value
-;rlimit_files = 1024
- 
-; Set max core size rlimit.
-; Possible Values: 'unlimited' or an integer greater or equal to 0
-; Default Value: system defined value
-;rlimit_core = 0
- 
-; Chroot to this directory at the start. This value must be defined as an
-; absolute path. When this value is not set, chroot is not used.
-; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
-; of its subdirectories. If the pool prefix is not set, the global prefix
-; will be used instead.
-; Note: chrooting is a great security feature and should be used whenever 
-;       possible. However, all PHP paths will be relative to the chroot
-;       (error_log, sessions.save_path, ...).
-; Default Value: not set
-;chroot = 
- 
-; Chdir to this directory at the start.
-; Note: relative path can be used.
-; Default Value: current directory or / when chroot
-;chdir = /var/www
- 
-; Redirect worker stdout and stderr into main error log. If not set, stdout and
-; stderr will be redirected to /dev/null according to FastCGI specs.
-; Note: on highloaded environement, this can cause some delay in the page
-; process time (several ms).
-; Default Value: no
-;catch_workers_output = yes
-
-; Limits the extensions of the main script FPM will allow to parse. This can
-; prevent configuration mistakes on the web server side. You should only limit
-; FPM to .php extensions to prevent malicious users to use other extensions to
-; exectute php code.
-; Note: set an empty value to allow all extensions.
-; Default Value: .php
-;security.limit_extensions = .php .php3 .php4 .php5
- 
-; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
-; the current environment.
-; Default Value: clean env
 env[HOSTNAME] = $HOSTNAME
 env[PATH] = /usr/local/bin:/usr/bin:/bin
 env[TMP] = /tmp
@@ -470,26 +23,6 @@ env[TMPDIR] = /tmp
 env[TEMP] = /tmp
 env[VESTA] = $VESTA
 env[LANG] = en_US.UTF-8
-
-; Additional php.ini defines, specific to this pool of workers. These settings
-; overwrite the values previously defined in the php.ini. The directives are the
-; same as the PHP SAPI:
-;   php_value/php_flag             - you can set classic ini defines which can
-;                                    be overwritten from PHP call 'ini_set'. 
-;   php_admin_value/php_admin_flag - these directives won't be overwritten by
-;                                     PHP call 'ini_set'
-; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
-
-; Defining 'extension' will load the corresponding shared extension from
-; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
-; overwrite previously defined php.ini values, but will append the new value
-; instead.
-
-; Note: path INI options can be relative and will be expanded with the prefix
-; (pool, global or /usr/local/vesta/php)
-
-; Default Value: nothing is defined by default except the values in php.ini and
-;                specified at startup with the -d argument
 php_flag[display_errors] = off
 php_admin_value[error_log] = /usr/local/vesta/log/fpm-php.log
 php_admin_flag[log_errors] = on

From 3933ca4cb4c0fe1181dabb045de7f35428d9392c Mon Sep 17 00:00:00 2001
From: Alexandros Ioannides <alex@ioannides.net>
Date: Fri, 29 Jun 2018 00:05:23 +0300
Subject: [PATCH 0168/2300] Typo fix

---
 install/vst-install-ubuntu.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index fdb95db3..ef4b7079 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -1098,7 +1098,7 @@ if [ "$clamd" = 'yes' ]; then
     /usr/bin/freshclam
     update-rc.d clamav-daemon defaults
     service clamav-daemon start
-    check_result $? "clamav-daeom start failed"
+    check_result $? "clamav-daemon start failed"
 fi
 
 

From 289ff88e4d498bfafa58cf1d6ed298be0114f249 Mon Sep 17 00:00:00 2001
From: pan93412 <pan93412@gmail.com>
Date: Thu, 5 Jul 2018 18:28:23 +0800
Subject: [PATCH 0169/2300] Update Chinese (Taiwan) Translation.

---
 web/inc/i18n/tw.php | 317 ++++++++++++++++++++++----------------------
 1 file changed, 160 insertions(+), 157 deletions(-)

diff --git a/web/inc/i18n/tw.php b/web/inc/i18n/tw.php
index 10b06aef..d35cba4a 100644
--- a/web/inc/i18n/tw.php
+++ b/web/inc/i18n/tw.php
@@ -4,10 +4,13 @@
  * This language file is translate by
  * Clark's Hosting Service (https://host.clark-chen.com)
  * Clark Chen (clark@clark-chen.com)
+ *
+ * Translation recheck by:
+ * pan93412 <pan93412@gmail.com>
  */
 $LANG['tw'] = array(
     'Packages'  => '方案設定',
-    'IP'  => 'IP管理',
+    'IP'  => 'IP 管理',
     'Graphs'  => '資源使用圖表',
     'Statistics'  => '統計資料',
     'Log'  => '系統紀錄',
@@ -29,7 +32,7 @@ $LANG['tw'] = array(
     'LOGIN'  => '登入',
     'RESET PASSWORD'  => '重設密碼',
     'SEARCH'  => '搜尋',
-    'PACKAGE'  => '套件',
+    'PACKAGE'  => '方案',
     'RRD'  => 'RRD',
     'STATS'  => '狀態',
     'LOG'  => '日誌',
@@ -41,7 +44,7 @@ $LANG['tw'] = array(
     'NETWORK'  => '網路',
     'Web Log Manager'  => 'Web 日誌管理員',
 
-    'no notifications'  => 'no notifications',
+    'no notifications'  => '沒有通知',
 
     'Add User'  => '新增使用者',
     'Add Domain'  => '新增網域',
@@ -54,7 +57,7 @@ $LANG['tw'] = array(
     'Add Cron Job'  => '新增任務排程',
     'Create Backup'  => '建立備份',
     'Configure'  => '設定',
-    'Restore All'  => '全部回復',
+    'Restore All'  => '全部還原',
     'Add Package'  => '新增方案',
     'Add IP'  => '新增 IP',
     'Add Rule' => '新增規則',
@@ -62,9 +65,9 @@ $LANG['tw'] = array(
     'Search'  => '搜尋',
     'Add one more FTP Account' => '新增 FTP 帳號',
     'Overall Statistics'  => '整理統計資料',
-    'Daily'  => '天',
-    'Weekly'  => '周',
-    'Monthly'  => '月',
+    'Daily'  => '每天',
+    'Weekly'  => '每週',
+    'Monthly'  => '每月',
     'Yearly'  => '每年',
     'Add'  => '新增',
     'Back'  => '返回',
@@ -79,16 +82,16 @@ $LANG['tw'] = array(
     'rebuild mail'  => '重建信箱',
     'rebuild db'  => '重建資料庫',
     'rebuild cron'  => '重建任務排程',
-    'update counters'  => '更新計數器',
-    'suspend'  => '封鎖',
-    'unsuspend'  => '解除封鎖',
+    'update counters' => '更新計數器',
+    'suspend'  => '暫停',
+    'unsuspend'  => '解除暫停',
     'delete'  => '刪除',
-    'show per user'  => '依照選擇的使用者',
+    'show per user'  => '依選擇的使用者',
     'login as'  => '登入帳號',
     'logout'  => '登出',
     'edit'  => '編輯',
     'open webstats'  => '開啟網站統計資料',
-    'view logs'  => '查看系統紀錄',
+    'view logs'  => '檢視系統紀錄',
     'list records'  => '列出 %s 紀錄',
     'add record'  => '新增紀錄',
     'list accounts'  => '列出 %s 帳號',
@@ -97,29 +100,29 @@ $LANG['tw'] = array(
     'list fail2ban' => '列出登入失敗遭封鎖名單',
     'open %s'  => '開啟 %s',
     'download'  => '下載',
-    'restore'  => '回復',
-    'configure restore settings'  => '配置回復設定',
+    'restore'  => '還原',
+    'configure restore settings'  => '配置還原設定',
     'stop'  => '停止',
     'start'  => '啟動',
     'restart'  => '重新啟動',
     'update'  => '更新',
     'generate'  => '產生',
     'Generate CSR' => '產生憑證簽署請求 (CSR)',
-    'reread IP' => '重新取得IP',
+    'reread IP' => '重新取得 IP',
     'enable autoupdate' => '啟用自動更新',
     'disable autoupdate' => '停用自動更新',
     'turn on notifications' => '啟用通知',
     'turn off notifications' => '停用通知',
-    'configure' => 'configure',
+    'configure' => '配置',
 
     'Adding User'  => '新增使用者',
     'Editing User'  => '編輯使用者',
     'Adding Domain'  => '新增網域',
     'Editing Domain'  => '編輯網域',
-    'Adding DNS Domain'  => '新增DNS網域',
-    'Editing DNS Domain'  => '編輯DNS網域',
-    'Adding DNS Record'  => '新增DNS紀錄',
-    'Editing DNS Record'  => '編輯DNS紀錄',
+    'Adding DNS Domain'  => '新增 DNS 網域',
+    'Editing DNS Domain'  => '編輯 DNS 網域',
+    'Adding DNS Record'  => '新增 DNS 紀錄',
+    'Editing DNS Record'  => '編輯 DNS 紀錄',
     'Adding Mail Domain'  => '新增信箱網域',
     'Editing Mail Domain'  => '編輯信箱網域',
     'Adding Mail Account'  => '新增信箱帳號',
@@ -130,10 +133,10 @@ $LANG['tw'] = array(
     'Editing Database'  => '編輯資料庫',
     'Adding Package'  => '新增方案',
     'Editing Package'  => '編輯方案',
-    'Adding IP address'  => '新增IP',
-    'Editing IP Address'  => '編輯IP',
+    'Adding IP address'  => '新增 IP',
+    'Editing IP Address'  => '編輯 IP',
     'Editing Backup Exclusions' => '編輯備份排除項目',
-    'Generating CSR' => '產生憑證簽署請求(CSR)中...',
+    'Generating CSR' => '產生憑證簽署請求 (CSR) 中...',
     'Listing'  => '列出',
     'Search Results'  => '搜尋結果',
     'Adding Firewall Rule' => '新增防火牆規則',
@@ -141,11 +144,11 @@ $LANG['tw'] = array(
     'Adding IP Address to Banlist' => '新增IP至黑名單',
 
     'active'  => '正常',
-    'spnd'  => '封鎖',
-    'suspended'  => '已封鎖',
+    'spnd'  => '暫停',
+    'suspended'  => '已暫停',
     'running'  => '執行中',
     'stopped'  => '已停止',
-    'outdated'  => '有新版本可升級',
+    'outdated'  => '有可升級的新版本',
     'updated'  => '已是最新版本',
 
     'yes'  => '是',
@@ -157,8 +160,8 @@ $LANG['tw'] = array(
     'mb'  => 'MB',
     'minute'  => '分鐘',
     'hour'  => '小時',
-    'day'  => '天',
-    'days'  => '天',
+    'day'  => '日',
+    'days'  => '日',
     'hours'  => '小時',
     'minutes'  => '分鐘',
     'month'  => '月',
@@ -169,15 +172,15 @@ $LANG['tw'] = array(
     'Mail'  => '信箱',
     'Databases'  => '資料庫',
     'User Directories'  => '使用者目錄',
-    'Template'  => '模板',
-    'Web Template'  => 'Apache 模板',
-    'Backend Template'  => 'Backend 模板',
-    'Proxy Template'  => 'Proxy 模板',
-    'DNS Template'  => 'DNS 模板',
+    'Template'  => '範本',
+    'Web Template'  => 'Apache 範本',
+    'Backend Template'  => 'Backend 範本',
+    'Proxy Template'  => 'Proxy 範本',
+    'DNS Template'  => 'DNS 範本',
     'Web Domains'  => '網站網域',
     'SSL Domains'  => 'SSL 網域',
     'Web Aliases'  => '網站子網域',
-    'per domain'  => '(每網域)',
+    'per domain'  => '(每個網域)',
     'DNS Domains'  => 'DNS 網域',
     'DNS domains'  => 'DNS 網域',
     'DNS records'   => 'DNS 紀錄',
@@ -191,7 +194,7 @@ $LANG['tw'] = array(
     'Backups'  => '備份',
     'Backup System'  => '備份系統',
     'backup exclusions' => '備份例外',
-    'template'  => '模板',
+    'template'  => '範本',
     'SSL Support'  => 'SSL 支援',
     'SSL Home Directory'  => 'SSL 主目錄',
     'Lets Encrypt Support'  => 'Lets Encrypt 支援',
@@ -206,11 +209,11 @@ $LANG['tw'] = array(
     'TTL'  => 'TTL',
     'Expire'  => '過期',
     'Records'  => '紀錄',
-    'Serial'  => 'Serial',
+    'Serial'  => '序列 (Serial)',
     'Catchall email'  => '收到所有郵件',
     'AntiVirus Support'  => '防毒支援',
     'AntiSpam Support'  => '防垃圾郵件支援',
-    'DKIM Support'  => 'DKIM支援',
+    'DKIM Support'  => 'DKIM 支援',
     'Accounts'  => '帳號',
     'Quota'  => '配額',
     'Autoreply'  => '自動回覆',
@@ -226,7 +229,7 @@ $LANG['tw'] = array(
     'SMTP security'  => 'SMTP 安全性',
     'SMTP auth method'  => 'SMTP 驗證方式',
     'STARTTLS'  => 'STARTTLS',
-    'Normal password'  => 'Normal password',
+    'Normal password'  => '普通密碼',
     'database'  => '資料庫',
     'User'  => '使用者',
     'Host'  => '主機',
@@ -248,16 +251,16 @@ $LANG['tw'] = array(
     'Users'  => '使用者',
     'Load Average'  => '平均負載量',
     'Memory Usage'  => '記憶體使用量',
-    'APACHE2 Usage'  => 'APACHE2 使用情形',
-    'HTTPD Usage'  => 'HTTPD 使用情形',
-    'NGINX Usage'  => 'NGINX 使用情形',
-    'MySQL Usage on localhost'  => '本機 MySQL 使用情形',
-    'PostgreSQL Usage on localhost'  => '本機 PostgreSQL 使用情形',
-    'Bandwidth Usage eth0'  => 'eth0 頻寬使用情形',
-    'Bandwidth Usage eth1'  => 'eth1 頻寬使用情形',
-    'Exim Usage'  => 'Exim 使用情形',
-    'FTP Usage'  => 'FTP 使用情形',
-    'SSH Usage'  => 'SSH 使用情形',
+    'APACHE2 Usage'  => 'APACHE2 使用量',
+    'HTTPD Usage'  => 'HTTPD 使用量',
+    'NGINX Usage'  => 'NGINX 使用量',
+    'MySQL Usage on localhost'  => '本機 MySQL 使用量',
+    'PostgreSQL Usage on localhost'  => '本機 PostgreSQL 使用量',
+    'Bandwidth Usage eth0'  => 'eth0 頻寬使用量',
+    'Bandwidth Usage eth1'  => 'eth1 頻寬使用量',
+    'Exim Usage'  => 'Exim 使用量',
+    'FTP Usage'  => 'FTP 使用量',
+    'SSH Usage'  => 'SSH 使用量',
     'reverse proxy'  => '反向代理伺服器',
     'web server'  => '網站伺服器',
     'dns server'  => 'DNS 伺服器',
@@ -274,12 +277,12 @@ $LANG['tw'] = array(
     'Memory'  => '記憶體',
     'Uptime'  => '已啟動時間',
     'core package'  => '核心系統',
-    'php interpreter'  => 'PHP解析',
+    'php interpreter'  => 'PHP 解析',
     'internal web server'  => '管理系統伺服器',
     'Version'  => '版本',
     'Release'  => '發佈號碼',
     'Architecture'  => '架構',
-    'Object'  => 'Object',
+    'Object'  => '物件',
     'Username'  => '使用者名稱',
     'Password'  => '密碼',
     'Email'  => '電子信箱',
@@ -288,7 +291,7 @@ $LANG['tw'] = array(
     'First Name'  => '名字',
     'Last Name'  => '姓氏',
     'Send login credentials to email address'  => '傳送登入資訊至使用者的信箱',
-    'Default Template'  => '預設模板',
+    'Default Template'  => '預設範本',
     'Default Name Servers'  => '預設域名伺服器',
     'Domain'  => '網域',
     'DNS Support'  => 'DNS 支援',
@@ -314,7 +317,7 @@ $LANG['tw'] = array(
     'IP or Value'  => 'IP 或值',
     'Priority'  => '優先順序',
     'Record Number' => '記錄編號',
-    'in megabytes'  => '以MB為單位',
+    'in megabytes'  => '以 MB 為單位',
     'Message'  => '訊息',
     'use local-part'  => '使用本地部分',
     'one or more email addresses'  => '一個或更多電子郵件信箱',
@@ -354,8 +357,8 @@ $LANG['tw'] = array(
     'charset'  => '編碼',
     'domain'  => '網域',
     'ip'  => 'IP',
-    'ip address'  => 'IP位置',
-    'IP address'  => 'IP位置',
+    'ip address'  => 'IP 位置',
+    'IP address'  => 'IP 位置',
     'netmask'  => '子網路遮罩',
     'interface'  => '介面卡',
     'assigned user'  => '指定使用者',
@@ -367,19 +370,19 @@ $LANG['tw'] = array(
     'last name'  => '姓氏',
     'account'  => '帳號',
     'ssl certificate'  => 'SSL 憑證',
-    'ssl key'  => 'SSL密鑰',
+    'ssl key'  => 'SSL 密鑰',
     'stats user password'  => '統計使用者帳號密碼',
     'stats username'  => '統計使用者名稱',
     'stats password'  => '統計密碼',
-    'ftp user password'  => 'FTP使用者帳號密碼',
-    'ftp user'  => 'FTP使用者',
-    'Last 70 lines of %s.%s.log' => '%s.%s.log 的最後70行',
+    'ftp user password'  => 'FTP 使用者帳號密碼',
+    'ftp user'  => 'FTP 使用者',
+    'Last 70 lines of %s.%s.log' => '%s.%s.log 的最後 70 行',
     'AccessLog' => '存取記錄',
     'ErrorLog' => '錯誤紀錄',
     'Download AccessLog' => '下載存取記錄',
     'Download ErrorLog' => '下載錯誤記錄',
     'Country' => '國家',
-    '2 letter code' => '國家簡碼(台灣是TW/香港是HK)',
+    '2 letter code' => '國家簡碼(台灣 TW、香港 HK)',
     'State / Province' => '州 / 省',
     'City / Locality' => '市 / 地區',
     'Organization' => '組織名稱',
@@ -388,8 +391,8 @@ $LANG['tw'] = array(
     'Port' => '連線埠',
     'Comment' => '備註',
     'Banlist' => '封鎖清單',
-    'ranges are acceptable' => 'ranges are acceptable',
-    'CIDR format is supported' => 'CIDR format is supported',
+    'ranges are acceptable' => '可接受陣列',
+    'CIDR format is supported' => '支援 CIDR 格式',
     'ACCEPT' => 'ACCEPT',
     'DROP' => 'DROP',
     'TCP' => 'TCP',
@@ -423,71 +426,71 @@ $LANG['tw'] = array(
     '%s databases'  => '%s 個資料庫',
     '1 cron job'  => '1 個任務排程',
     '%s cron jobs'  => '%s 個任務排程',
-    '1 archive'  => '1 壓縮',
-    '%s archives'  => '%s 壓縮',
+    '1 archive'  => '1 個壓縮',
+    '%s archives'  => '%s 個壓縮',
     '1 item'  => '1 個項目',
     '%s items'  => '%s 個項目',
     '1 package'  => '1 種方案',
-    '%s packages'  => '%s 整方案',
+    '%s packages'  => '%s 種方案',
     '1 IP address'  => '1 個 IP 位置',
     '%s IP addresses'  => '%s 個 IP 位置',
-    '1 month'  => '1 月',
-    '%s months'  => '%s 月',
-    '1 log record'  => '1 系統記錄',
-    '%s log records'  => '%s 系統記錄',
+    '1 month'  => '1 個月',
+    '%s months'  => '%s 個月',
+    '1 log record'  => '1 筆系統記錄',
+    '%s log records'  => '%s 筆系統記錄',
     '1 object'  => '1 個物件',
     '%s objects'  => '%s 個物件',
     'no exclusions' => '取消排除',
     '1 rule' => '1 條規則',
     '%s rules' => '%s 條規則',
-    'There are no currently banned IP' => '目前沒有任何已封鎖的IP',
+    'There are no currently banned IP' => '目前沒有任何已封鎖的 IP',
 
-    'USER_CREATED_OK'  => '使用者 <a href="/edit/user/?user=%s"><b>%s</b></a> has been 已加入成功!',
-    'WEB_DOMAIN_CREATED_OK'  => '網域 <a href="/edit/web/?domain=%s"><b>%s</b></a> 已加入成功!',
-    'DNS_DOMAIN_CREATED_OK'  => 'DNS網域 <a href="/list/dns/?domain=%s"><b>%s</b></a> 已加入成功!',
-    'DNS_RECORD_CREATED_OK'  => '記錄 <b>%s.%s</b> 已加入成功!',
-    'MAIL_DOMAIN_CREATED_OK'  => '信箱網域 <a href="/list/mail/?domain=%s"><b>%s</b></a> 已加入成功!',
-    'MAIL_ACCOUNT_CREATED_OK'  => '信箱帳號 <a href="/edit/mail/?account=%s&domain=%s"><b>%s@%s</b></a> 已加入成功!',
-    'DATABASE_CREATED_OK'  => '資料庫 <a href="/edit/db/?database=%s"><b>%s</b></a> 已加入成功!',
-    'CRON_CREATED_OK'  => '任務排程 已加入成功!',
-    'IP_CREATED_OK'  => 'IP位置 <a href="/edit/ip/?ip=%s"><b>%s</b></a> 已加入成功!',
-    'PACKAGE_CREATED_OK'  => '方案 <a href="/edit/package/?package=%s"><b>%s</b></a> 已加入成功!',
-    'SSL_GENERATED_OK' => '已成功產生 SSL 憑證!',
-    'RULE_CREATED_OK' => '已成功加入規則!',
+    'USER_CREATED_OK'  => '使用者 <a href="/edit/user/?user=%s"><b>%s</b></a> has been 已加入成功！',
+    'WEB_DOMAIN_CREATED_OK'  => '網域 <a href="/edit/web/?domain=%s"><b>%s</b></a> 已加入成功！',
+    'DNS_DOMAIN_CREATED_OK'  => 'DNS 網域 <a href="/list/dns/?domain=%s"><b>%s</b></a> 已加入成功！',
+    'DNS_RECORD_CREATED_OK'  => '記錄 <b>%s.%s</b> 已加入成功！',
+    'MAIL_DOMAIN_CREATED_OK'  => '信箱網域 <a href="/list/mail/?domain=%s"><b>%s</b></a> 已加入成功！',
+    'MAIL_ACCOUNT_CREATED_OK'  => '信箱帳號 <a href="/edit/mail/?account=%s&domain=%s"><b>%s@%s</b></a> 已加入成功！',
+    'DATABASE_CREATED_OK'  => '資料庫 <a href="/edit/db/?database=%s"><b>%s</b></a> 已加入成功！',
+    'CRON_CREATED_OK'  => '任務排程 已加入成功！',
+    'IP_CREATED_OK'  => 'IP 位置 <a href="/edit/ip/?ip=%s"><b>%s</b></a> 已加入成功！',
+    'PACKAGE_CREATED_OK'  => '方案 <a href="/edit/package/?package=%s"><b>%s</b></a> 已加入成功！',
+    'SSL_GENERATED_OK' => '已成功產生 SSL 憑證！',
+    'RULE_CREATED_OK' => '已成功加入規則！',
     'BANLIST_CREATED_OK' => 'IP 位置已經成功封鎖',
-    'Autoupdate has been successfully enabled' => '自動更新已成功啟動',
-    'Autoupdate has been successfully disabled' => '自動更新已成功關閉',
-    'Cronjob email reporting has been successfully enabled' => '任務排程 電子郵件回報已成功啟動',
-    'Cronjob email reporting has been successfully disabled' => '任務排程 電子郵件回報已成功關閉',
-    'Changes has been saved.'  => '已儲存更改',
+    'Autoupdate has been successfully enabled' => '「自動更新」已成功啟動',
+    'Autoupdate has been successfully disabled' => '「自動更新」已成功關閉',
+    'Cronjob email reporting has been successfully enabled' => '「任務排程電子郵件回報」已成功啟動',
+    'Cronjob email reporting has been successfully disabled' => '「任務排程電子郵件回報」已成功關閉',
+    'Changes has been saved.'  => '已儲存變更',
     'Confirmation'  => '確認',
-    'DELETE_USER_CONFIRMATION' => '確定要刪除使用者 %s 嗎?',
-    'SUSPEND_USER_CONFIRMATION' => '確定要封鎖使用者 %s 嗎?',
-    'UNSUSPEND_USER_CONFIRMATION' => '確定要解除封鎖使用者 %s 嗎?',
-    'DELETE_DOMAIN_CONFIRMATION' => '確定要刪除網域 %s 嗎?',
-    'SUSPEND_DOMAIN_CONFIRMATION' => '確定要封鎖網域 %s 嗎?',
-    'UNSUSPEND_DOMAIN_CONFIRMATION' => '確定要解除封鎖網域 %s 嗎?',
-    'DELETE_RECORD_CONFIRMATION' => '確定要刪除記錄 %s 嗎?',
-    'SUSPEND_RECORD_CONFIRMATION' => '確定要封鎖記錄 %s 嗎?',
-    'UNSUSPEND_RECORD_CONFIRMATION' => '確定要解除封鎖紀錄 %s 嗎?',
-    'DELETE_MAIL_ACCOUNT_CONFIRMATION' => '確定要刪除 %s 嗎?',
-    'SUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '確定要封鎖 %s 嗎?',
-    'UNSUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '確定要解除封鎖 %s 嗎?',
-    'DELETE_DATABASE_CONFIRMATION' => '確定要刪除資料庫 %s 嗎?',
-    'SUSPEND_DATABASE_CONFIRMATION' => '確定要封鎖資料庫 %s 嗎?',
-    'UNSUSPEND_DATABASE_CONFIRMATION' => '確定要解除封鎖資料庫 %s 嗎?',
-    'DELETE_CRON_CONFIRMATION' => '確定要刪除 任務排程嗎?',
-    'SUSPEND_CRON_CONFIRMATION' => '確定要封鎖 任務排程嗎?',
-    'UNSUSPEND_CRON_CONFIRMATION' => '確定要解除封鎖 任務排程嗎?',
-    'DELETE_BACKUP_CONFIRMATION'  => '確定要刪除 %s 備份嗎?',
-    'DELETE_EXCLUSION_CONFIRMATION' => '確定要刪除 %s 例外嗎?',
-    'DELETE_PACKAGE_CONFIRMATION'  => '確定要方案 %s 嗎?',
-    'DELETE_IP_CONFIRMATION'  => '確定要刪除IP地址 %s 嗎?',
-    'DELETE_RULE_CONFIRMATION' => '確定要刪除規則 #%s 嗎?',
-    'SUSPEND_RULE_CONFIRMATION' => '確定要封鎖規則  #%s 嗎?',
-    'UNSUSPEND_RULE_CONFIRMATION' => '確定要解除封鎖規則 #%s 嗎?',
-    'LEAVE_PAGE_CONFIRMATION' => '離開?',
-    'RESTART_CONFIRMATION' => '確定要重新啟動 %s 嗎?',
+    'DELETE_USER_CONFIRMATION' => '確定要刪除使用者 %s 嗎？',
+    'SUSPEND_USER_CONFIRMATION' => '確定要暫停使用者 %s 嗎？',
+    'UNSUSPEND_USER_CONFIRMATION' => '確定要解除暫停使用者 %s 嗎？',
+    'DELETE_DOMAIN_CONFIRMATION' => '確定要刪除網域 %s 嗎？',
+    'SUSPEND_DOMAIN_CONFIRMATION' => '確定要暫停網域 %s 嗎？',
+    'UNSUSPEND_DOMAIN_CONFIRMATION' => '確定要解除暫停網域 %s 嗎？',
+    'DELETE_RECORD_CONFIRMATION' => '確定要刪除記錄 %s 嗎？',
+    'SUSPEND_RECORD_CONFIRMATION' => '確定要暫停記錄 %s 嗎？',
+    'UNSUSPEND_RECORD_CONFIRMATION' => '確定要解除暫停紀錄 %s 嗎？',
+    'DELETE_MAIL_ACCOUNT_CONFIRMATION' => '確定要刪除 %s 嗎？',
+    'SUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '確定要暫停 %s 嗎？',
+    'UNSUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '確定要解除暫停 %s 嗎？',
+    'DELETE_DATABASE_CONFIRMATION' => '確定要刪除資料庫 %s 嗎？',
+    'SUSPEND_DATABASE_CONFIRMATION' => '確定要暫停資料庫 %s 嗎？',
+    'UNSUSPEND_DATABASE_CONFIRMATION' => '確定要解除暫停資料庫 %s 嗎？',
+    'DELETE_CRON_CONFIRMATION' => '確定要刪除 任務排程嗎？',
+    'SUSPEND_CRON_CONFIRMATION' => '確定要暫停 任務排程嗎？',
+    'UNSUSPEND_CRON_CONFIRMATION' => '確定要解除暫停 任務排程嗎？',
+    'DELETE_BACKUP_CONFIRMATION'  => '確定要刪除 %s 備份嗎？',
+    'DELETE_EXCLUSION_CONFIRMATION' => '確定要刪除 %s 例外嗎？',
+    'DELETE_PACKAGE_CONFIRMATION'  => '確定要刪除方案 %s 嗎？',
+    'DELETE_IP_CONFIRMATION'  => '確定要刪除 IP 地址 %s 嗎？',
+    'DELETE_RULE_CONFIRMATION' => '確定要刪除規則 #%s 嗎？',
+    'SUSPEND_RULE_CONFIRMATION' => '確定要暫停規則  #%s 嗎？',
+    'UNSUSPEND_RULE_CONFIRMATION' => '確定要解除暫停規則 #%s 嗎？',
+    'LEAVE_PAGE_CONFIRMATION' => '確定離開嗎？',
+    'RESTART_CONFIRMATION' => '確定要重新啟動 %s 嗎？',
     'Welcome'  => '歡迎',
     'LOGGED_IN_AS'  => '以使用者身份 %s 登入',
     'Error'  => '錯誤',
@@ -495,20 +498,20 @@ $LANG['tw'] = array(
     'Invalid username or code'  => '無效的使用者名稱或驗證碼.',
     'Passwords not match'  => '密碼錯誤',
     'Please enter valid email address.'  => '請輸入正確的信箱',
-    'Field "%s" can not be blank.'  => '"%s" 不能為空白',
-    'Password is too short.'  => '密碼太短',
-    'Error code:'  => '錯誤代碼: %s',
+    'Field "%s" can not be blank.'  => '"%s" 欄位不能空白',
+    'Password is too short.'  => '密碼太短。',
+    'Error code:'  => '錯誤代碼：%s',
     'SERVICE_ACTION_FAILED'  => '"%s" "%s" 失敗',
     'IP address is in use' => 'IP 位置正在使用中',
     'BACKUP_SCHEDULED'  => '您的要求已加入隊列中，備份完成後會再以電子郵件通知您',
-    'BACKUP_EXISTS'  => '已經有一個備份正在執行中，請等待備份完成後再操作',
-    'RESTORE_SCHEDULED'  => '您的要求已加入隊列中，回復完成後會再以電子郵件通知您',
-    'RESTORE_EXISTS'  => '已經有一個回復正在執行中，請等待備份完成後再操作',
+    'BACKUP_EXISTS'  => '已經有一個備份正在執行中，請等待備份完成後再動作',
+    'RESTORE_SCHEDULED'  => '您的要求已加入隊列中，還原完成後會再以電子郵件通知您',
+    'RESTORE_EXISTS'  => '已經有一個還原正在執行中，請等待備份完成後再動作',
 
-    'WEB_EXCLUSIONS' => '輸入網域名稱，每行一個網域。如要排除備份所有網域請使用*。排除特定的資料夾請依照這個格式: Example.com:public_html/cache:public_html/tmp',
-    'DNS_EXCLUSIONS' => '輸入網域名稱，每行一個網域。如要排除備份所有網域請使用*',
-    'MAIL_EXCLUSIONS' => '輸入網域名稱，每行一個網域。如要排除備份所有網域請使用*。要排除特定使用者請依照這個格式: Example.com:info:support:postmaster',
-    'DB_EXCLUSIONS' => '輸入完整資料庫名城，每行一個資料庫。如要排除備份所有資料庫請使用*',
+    'WEB_EXCLUSIONS' => '輸入網域名稱，每行一個網域。如要排除備份所有網域請使用「*」。排除特定的資料夾請依照這個格式：Example.com:public_html/cache:public_html/tmp',
+    'DNS_EXCLUSIONS' => '輸入網域名稱，每行一個網域。如要排除備份所有網域請使用「*」',
+    'MAIL_EXCLUSIONS' => '輸入網域名稱，每行一個網域。如要排除備份所有網域請使用「*」。要排除特定使用者請依照這個格式：Example.com:info:support:postmaster',
+    'DB_EXCLUSIONS' => '輸入完整資料庫名城，每行一個資料庫。如要排除備份所有資料庫請使用「*」',
     'CRON_EXCLUSIONS' => '要排除備份所有任務排程請使用*',
     'USER_EXCLUSIONS' => '輸入要排除備份的資料夾名稱，每行一個資料夾。如要排除備份所有資料夾請使用*',
 
@@ -516,13 +519,13 @@ $LANG['tw'] = array(
     'MAIL_FROM'  => 'Vesta 管理系統 <noreply@%s>',
     'GREETINGS_GORDON_FREEMAN' => "您好, %s %s,\n",
     'GREETINGS' => "您好,\n",
-    'ACCOUNT_READY' => "您的帳號已成功建立，並可以開始使用了!\n\nhttps://%s/login/\n使用者名稱: %s\n密碼: %s\n\n--\nVesta Control Panel\n",
+    'ACCOUNT_READY' => "您的帳號已成功建立，並可以開始使用了！\n\nhttps://%s/login/\n使用者名稱：%s\n密碼：%s\n\n--\nVesta Control Panel\n",
 
     'FTP login credentials'  => 'FTP 登入資料',
-    'FTP_ACCOUNT_READY' => "FTP帳號已成功建立，並可以開始使用了!\n\n主機名稱: %s\n使用者名稱: %s_%s\n密碼: %s\n\n--\nVesta Control Panel\n",
+    'FTP_ACCOUNT_READY' => "FTP 帳號已成功建立，並可以開始使用了！\n\n主機名稱：%s\n使用者名稱：%s_%s\n密碼：%s\n\n--\nVesta Control Panel\n",
 
     'Database Credentials'  => '資料庫 登入資料',
-    'DATABASE_READY' => "資料庫已加入成功!\n\n資料庫名稱: %s\n使用者名稱: %s\n密碼: %s\n%s\n\n--\nVesta Control Panel\n",
+    'DATABASE_READY' => "資料庫已加入成功！\n\n資料庫名稱：%s\n使用者名稱：%s\n密碼：%s\n%s\n\n--\nVesta Control Panel\n",
 
     'forgot password'  => '忘記密碼',
     'Confirm'  => '確認',
@@ -531,22 +534,22 @@ $LANG['tw'] = array(
     'Reset'  => '重設',
     'Reset Code'  => '重設代碼',
     'RESET_NOTICE'  => '',
-    'RESET_CODE_SENT'  => '密買重設代碼已發送到您的信箱<br>',
-    'MAIL_RESET_SUBJECT'  => '密碼重置在 %s',
-    'PASSWORD_RESET_REQUEST' => "重置密碼請點擊連結:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\n或者您可以到 https://%s/reset/?action=code&user=%s 輸入密碼重設代碼:\n%s\n\n如果您沒有要求重設密碼，請忽略此郵件\n\n—\nVesta Control Panel\n",
+    'RESET_CODE_SENT'  => '密碼重設代碼已傳送到您的信箱<br>',
+    'MAIL_RESET_SUBJECT'  => '密碼重設在 %s',
+    'PASSWORD_RESET_REQUEST' => "重設密碼請點擊連結：\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\n或者您可以到 https://%s/reset/?action=code&user=%s 輸入密碼重設代碼：\n%s\n\n如果您沒有要求重設密碼，請忽略此郵件\n\n—\nVesta Control Panel\n",
 
-    'Jan' => '1月',
-    'Feb' => '2月',
-    'Mar' => '3月',
-    'Apr' => '4月',
-    'May' => '5月',
-    'Jun' => '6月',
-    'Jul' => '7月',
-    'Aug' => '8月',
-    'Sep' => '9月',
-    'Oct' => '10月',
-    'Nov' => '11月',
-    'Dec' => '12月',
+    'Jan' => '一月',
+    'Feb' => '二月',
+    'Mar' => '三月',
+    'Apr' => '四月',
+    'May' => '五月',
+    'Jun' => '六月',
+    'Jul' => '七月',
+    'Aug' => '八月',
+    'Sep' => '九月',
+    'Oct' => '十月',
+    'Nov' => '十一月',
+    'Dec' => '十二月',
 
     'Configuring Server' => '設定主機',
     'Hostname' => '主機名稱',
@@ -555,7 +558,7 @@ $LANG['tw'] = array(
     'Proxy Server' => 'Proxy 伺服器',
     'Web Server' => 'Web 伺服器',
     'Backend Server' => 'Backend 伺服器',
-    'Backend Pool Mode' => 'Backend Pool Mode',
+    'Backend Pool Mode' => 'Backend 池模式',
     'DNS Server' => 'DNS 伺服器',
     'DNS Cluster' => 'DNS 叢集',
     'MAIL Server' => 'MAIL 伺服器',
@@ -583,9 +586,9 @@ $LANG['tw'] = array(
     'Template Manager' => '模組管理員',
     'Backup Migration Manager' => '備份轉移管理員',
     'FileManager' => '檔案管理員',
-    'show: CPU / MEM / NET / DISK' => '顯示: 處理器 / 記憶體 / 網路 / 硬碟',
+    'show: CPU / MEM / NET / DISK' => '顯示：處理器 / 記憶體 / 網路 / 硬碟',
 
-    'sort by' => '排序按照',
+    'sort by' => '排序依',
     'Date' => '日期',
     'Starred' => '加註星號',
     'Name' => '名稱',
@@ -608,8 +611,8 @@ $LANG['tw'] = array(
     'ARCHIVE' => '壓縮',
     'EXTRACT' => '解壓縮',
     'DOWNLOAD' => '下載',
-    'Are you sure?' => '確定嗎?',
-    'Hit' => 'Hit',
+    'Are you sure?' => '確定嗎？',
+    'Hit' => '點擊',
     'to reload the page' => '重新整理頁面',
     'Directory name cannot be empty' => '資料夾名稱不能為空白',
     'File name cannot be empty' => '檔案名稱不能為空白',
@@ -661,18 +664,18 @@ $LANG['tw'] = array(
     'Cancel saving form' => '不要儲存設定',
     'Go to USER list' => '回到使用者列表',
     'Go to WEB list' => '回到網站列表',
-    'Go to DNS list' => '回到DNS列表',
+    'Go to DNS list' => '回到 DNS 列表',
     'Go to MAIL list' => '回到郵件列表',
     'Go to DB list' => '回到資料庫列表',
     'Go to CRON list' => '回到任務排程列表',
     'Go to BACKUP list' => '回到備份列表',
     'Focus on search' => '搜尋',
     'Display/Close shortcuts' => '顯示/關閉 快捷鍵列表',
-    'Move backward through top menu' => '在頂置選單中向左移動',
-    'Move forward through top menu' => '在頂置選單中向右移動',
+    'Move backward through top menu' => '在頂部選單中向左移動',
+    'Move forward through top menu' => '在頂部選單中向右移動',
     'Enter focused element' => '進入選擇的選項',
-    'Move up through elements list' => '往上查看列表',
-    'Move down through elements list' => '往下查看列表',
+    'Move up through elements list' => '往上檢視列表',
+    'Move down through elements list' => '往下檢視列表',
 
     'Upload' => '上傳',
     'New File' => '新增檔案',
@@ -705,13 +708,13 @@ $LANG['tw'] = array(
     'Disable and Cancel Licence' => '刪除並且取消授權',
     'Licence Activated' => '授權已啟用',
     'Licence Deactivated' => '授權已停用',
-    'Restrict users so that they cannot use SSH and access only their home directory.' => '禁止使用者使用SSH，並且只能存取他們自己的資料夾',
-    'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.' => '瀏覽、複製、編輯、存取你所有的網站資料使用全能的檔案管理員',
+    'Restrict users so that they cannot use SSH and access only their home directory.' => '禁止使用者使用 SSH，並且只能存取他們自己的資料夾',
+    'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.' => '使用全能的檔案管理員瀏覽、複製、編輯、存取你所有的網站資料',
     'This is a commercial module, you would need to purchace license key to enable it.' => '這是一個付費模組，您需要購買授權金鑰才能啟用它。',
 
-    'Minutes' => '分',
+    'Minutes' => '分鐘',
     'Hourly' => '小時',
-    'Run Command' => '執行命令',
+    'Run Command' => '執行指令',
     'every month' => '每月',
     'every odd month' => '奇數月',
     'every even month' => '偶數月',
@@ -737,7 +740,7 @@ $LANG['tw'] = array(
     'webalizer' => 'webalizer',
     'awstats' => 'awstats',
 
-    'Vesta SSL' => 'Vesta後台 SSL',
+    'Vesta SSL' => 'Vesta 後台 SSL',
     'SUBJECT' => '主體名稱',
     'ALIASES' => '主體別名',
     'NOT_BEFORE' => '有效期自',
@@ -753,5 +756,5 @@ $LANG['tw'] = array(
     'No encryption' => '不加密',
     'Do not use encryption' => '不要使用加密',
 
-    'maximum characters length, including prefix' => '最多 %s 字元(包含前綴)',
+    'maximum characters length, including prefix' => '最多 %s 字元 (包含前綴)',
 );

From f80e6c8df88a12099266a6dfc72f93573a3b7d87 Mon Sep 17 00:00:00 2001
From: Hoto Cocoa <cocoa@hoto.us>
Date: Tue, 10 Jul 2018 00:09:08 +0900
Subject: [PATCH 0170/2300] Improve korean i18n

---
 web/inc/i18n/ko.php | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/web/inc/i18n/ko.php b/web/inc/i18n/ko.php
index 5c98950f..3a21ad4a 100644
--- a/web/inc/i18n/ko.php
+++ b/web/inc/i18n/ko.php
@@ -59,7 +59,7 @@ $LANG['ko'] = array(
     'Add Rule' => '규칙 추가',
     'Ban IP Address' => 'IP 주소 차단',
     'Search'  => '검색',
-    'Add one more FTP Account' => 'FTP 계정을 하나 추가하기',
+    'Add one more FTP Account' => 'FTP 계정을 추가하기',
     'Overall Statistics'  => '전체 통계',
     'Daily'  => '매일',
     'Weekly'  => '매주',
@@ -70,7 +70,7 @@ $LANG['ko'] = array(
     'Save'  => '저장',
     'Submit'  => '등록',
 
-    'toggle all'  => '모두 활성화',
+    'toggle all'  => '모두 선택',
     'apply to selected'  => '선택된 것에 적용',
     'rebuild'  => '리빌드',
     'rebuild web'  => '웹 리빌드',
@@ -522,7 +522,7 @@ $LANG['ko'] = array(
     'Database Credentials'  => '데이터베이스 정보',
     'DATABASE_READY' => "데이터베이스가 성공적으로 생성되었습니다.\n\데이터베이스: %s\n사용자: %s\n비밀번호: %s\n\n--\nVesta 제어판\n",
 
-    'forgot password'  => '비밀번호 잊기',
+    'forgot password'  => '비밀번호 잊음',
     'Confirm'  => '확인',
     'New Password'  => '새 비밀번호',
     'Confirm Password'  => '비밀번호 확인',
@@ -531,7 +531,7 @@ $LANG['ko'] = array(
     'RESET_NOTICE'  => '',
     'RESET_CODE_SENT'  => '비밀번호 초기화 코드가 이메일 주소로 전송되었습니다<br>',
     'MAIL_RESET_SUBJECT'  => '%s에서의 비밀번호 초기화',
-    'PASSWORD_RESET_REQUEST' => "제어판 비밀번호를 초기화 하기 위해서, 다음의 링크로 접속해주세요:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\n또는, 다음의 주소로 가주시고 https://%s/reset/?action=code&user=%s 다음의 초기화 코드를 입력해주세요:\n%s\n\n만약 비밀번호 초기화를 요청하지 않으셨다면, 이 메시지를 무시해주세요.\n\n--\nVesta 제어판\n",
+    'PASSWORD_RESET_REQUEST' => "제어판 비밀번호를 초기화 하기 위해서, 다음의 링크로 접속해주세요:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\n또는, 다음의 주소로 간 뒤 https://%s/reset/?action=code&user=%s 다음의 초기화 코드를 입력해주세요:\n%s\n\n만약 비밀번호 초기화를 요청하지 않으셨다면, 이 메시지를 무시해주세요.\n\n--\nVesta 제어판\n",
 
     'Jan' => '1월',
     'Feb' => '2월',
@@ -557,15 +557,15 @@ $LANG['ko'] = array(
     'DNS Server' => 'DNS 서버',
     'DNS Cluster' => 'DNS 클러스터',
     'MAIL Server' => 'MAIL 서버',
-    'Antivirus' => '안티바이러스',
-    'AntiSpam' => '안티스팸',
+    'Antivirus' => '바이러스 필터링',
+    'AntiSpam' => '스팸 필터링',
     'Webmail URL' => '웹메일 주소',
     'MySQL Support' => 'MySQL 지원',
     'phpMyAdmin URL' => 'phpMyAdmin 주소',
     'PostgreSQL Support' => 'PostgreSQL 지원',
     'phpPgAdmin URL' => 'phpPgAdmin 주소',
-    'Maximum Number Of Databases' => '최대 데이터베이스 숫자',
-    'Current Number Of Databases' => '현재 데이터베이스 숫자',
+    'Maximum Number Of Databases' => '최대 데이터베이스 개수',
+    'Current Number Of Databases' => '현재 데이터베이스 개수',
     'Local backup' => '로컬 백업',
     'Compression level' => '압축 수준',
     'Directory' => '폴더',
@@ -633,8 +633,8 @@ $LANG['ko'] = array(
     'Delete items' => '항목 삭제',
     'Copy files' => '항목 복사',
     'Move files' => '항목 이동',
-    'Are you sure you want to copy' => '정말 복사하시겠습니까?',
-    'Are you sure you want to move' => '정말 이동하시겠습니까?',
+    'Are you sure you want to copy' => '정말 복사하시겠습니까',
+    'Are you sure you want to move' => '정말 이동하시겠습니까',
     'Are you sure you want to delete' => '정말 삭제하시겠습니까',
     'into' => '안에',
     'existing files will be replaced' => '존재하는 파일들은 대체 될 것입니다',

From fd88749791aad96123efd2101b913dbe504d5f0d Mon Sep 17 00:00:00 2001
From: Hoto Cocoa <cocoa@hoto.us>
Date: Wed, 11 Jul 2018 23:42:16 +0900
Subject: [PATCH 0171/2300] Fix typo

---
 web/inc/i18n/ko.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/i18n/ko.php b/web/inc/i18n/ko.php
index 3a21ad4a..a81db461 100644
--- a/web/inc/i18n/ko.php
+++ b/web/inc/i18n/ko.php
@@ -322,7 +322,7 @@ $LANG['ko'] = array(
     'Minute'  => '분',
     'Command'  => '명령어',
     'Package Name'  => '패키지 이름',
-    'Netmask'  => '넷마슴크',
+    'Netmask'  => '넷마크',
     'Interface'  => '인터페이스',
     'Shared'  => '공유된',
     'Assigned user'  => '부여 된 사용자',

From 07a7c90cf6634c130b6df4005c6c339b02e6333d Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 13 Jul 2018 15:27:10 +0300
Subject: [PATCH 0172/2300] chkconfig firewalld off

---
 install/vst-install-rhel.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index e529ff65..1ecd2235 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -671,6 +671,8 @@ fi
 
 # Disabling iptables
 service iptables stop
+service firewalld stop >/dev/null 2>&1
+
 
 # Configuring NTP synchronization
 echo '#!/bin/sh' > /etc/cron.daily/ntpdate
@@ -1273,6 +1275,7 @@ ip=$(ip addr|grep 'inet '|grep global|head -n1|awk '{print $2}'|cut -f1 -d/)
 
 # Configuring firewall
 if [ "$iptables" = 'yes' ]; then
+    chkconfig firewalld off >/dev/null 2>&1
     $VESTA/bin/v-update-firewall
 fi
 

From 79e34f240b02d5b9d3ac86565710efd710ffb2cb Mon Sep 17 00:00:00 2001
From: myrevery <myrevery@yahoo.com>
Date: Sun, 15 Jul 2018 16:33:32 +0800
Subject: [PATCH 0173/2300] Update cn.php

Refine some details.
---
 web/inc/i18n/cn.php | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/web/inc/i18n/cn.php b/web/inc/i18n/cn.php
index 9d58b381..d47587db 100644
--- a/web/inc/i18n/cn.php
+++ b/web/inc/i18n/cn.php
@@ -98,7 +98,7 @@ $LANG['cn'] = array(
     'list accounts'  => '列出 %s 个账户',
     'add account'  => '添加账户',
     'open webmail'  => '打开网页邮箱',
-    'list fail2ban' => 'fail2ban 封锁名单',
+    'list fail2ban' => 'Fail2ban 封锁名单',
     'open %s'  => '打开 %s',
     'download'  => '下载',
     'restore'  => '恢复',
@@ -136,7 +136,7 @@ $LANG['cn'] = array(
     'Editing Package'  => '编辑方案',
     'Adding IP address'  => '添加IP地址',
     'Editing IP Address'  => '编辑IP地址',
-    'Editing Backup Exclusions' => '配置备份排除项目',
+    'Editing Backup Exclusions' => '配置排除的备份项目',
     'Generating CSR' => '生成CSR',
     'Listing'  => '列出',
     'Search Results'  => '搜索结果',
@@ -175,7 +175,7 @@ $LANG['cn'] = array(
     'User Directories' => '用户目录',
     'Template' => '模板',
     'Web Template' => 'Web模板',
-    'Backend Template' => 'Backend模板',
+    'Backend Template' => '后端模板',
     'Proxy Template' => '代理模板',
     'DNS Template' => 'DNS模板',
     'Web Domains' => '网站域名',
@@ -194,15 +194,15 @@ $LANG['cn'] = array(
     'IP Addresses' => 'IP地址',
     'Backups' => '备份',
     'Backup System' => '备份系统',
-    'backup exclusions' => '备份排除项目',
+    'backup exclusions' => '排除的备份项目',
     'template' => '模板',
     'SSL Support' => '启用SSL',
     'SSL Home Directory' => 'SSL站点主目录',
     'Lets Encrypt Support'  => '采用 Let&#39s Encrypt',
     'Lets Encrypt'  => 'Let&#39s Encrypt',
-    'Your certificate will be automatically issued in 5 minutes' => '证书将在5分钟内自动签发完成',
+    'Your certificate will be automatically issued in 5 minutes' => '证书将在5分钟内自动完成签发',
     'Proxy Support' => '反向代理',
-    'Proxy Extensions' => '代理的文件扩展名',
+    'Proxy Extensions' => '需代理的文件扩展名',
     'Web Statistics' => '网站统计',
     'Additional FTP Account' => '额外的FTP账户',
     'Path'  => '路径',
@@ -274,7 +274,7 @@ $LANG['cn'] = array(
     'ftp server'  => 'FTP服务',
     'job scheduler'  => '执行定时任务',
     'firewall'  => '防火墙服务',
-    'brute-force monitor'  => '监控暴力破解',
+    'brute-force monitor'  => '防范暴力攻击',
     'CPU'  => 'CPU',
     'Memory'  => '内存',
     'Uptime'  => '已运行时间',
@@ -442,7 +442,7 @@ $LANG['cn'] = array(
     '%s log records'  => '%s 条日志记录',
     '1 object'  => '1 个对象',
     '%s objects'  => '%s 个对象',
-    'no exclusions' => '未排除',
+    'no exclusions' => '没有被排除的项目',
     '1 rule' => '1 条规则',
     '%s rules' => '%s 条规则',
     'There are no currently banned IP' => '目前没有被封锁的IP地址',
@@ -559,8 +559,8 @@ $LANG['cn'] = array(
     'Default Language' => '默认语言',
     'Proxy Server' => '代理服务器',
     'Web Server' => 'Web 服务器',
-    'Backend Server' => 'Backend 服务器',
-    'Backend Pool Mode' => 'Backend Pool 模式',
+    'Backend Server' => '后端服务器',
+    'Backend Pool Mode' => '后端池模式',
     'DNS Server' => 'DNS 服务器',
     'DNS Cluster' => 'DNS 集群',
     'MAIL Server' => '邮箱服务器',
@@ -595,7 +595,7 @@ $LANG['cn'] = array(
     'Starred' => '星标',
     'Name' => '名称',
 
-    'save to favorites' => '收藏加星',
+    'save to favorites' => '添加星标',
 
     'File Manager' => '文件管理',
     'size' => '大小',
@@ -635,8 +635,8 @@ $LANG['cn'] = array(
     'Create' => '创建',
     'Compress' => '压缩',
     'OK' => '确定',
-    'YOU ARE COPYING' => 'YOU ARE COPYING',
-    'YOU ARE REMOVING' => 'YOU ARE REMOVING',
+    'YOU ARE COPYING' => '你正在复制',
+    'YOU ARE REMOVING' => '你正在移除',
     'Delete items' => '删除这些项目',
     'Copy files' => '复制这些文件',
     'Move files' => '移动这些文件',
@@ -746,7 +746,7 @@ $LANG['cn'] = array(
     'SUBJECT' => '颁发给',
     'ALIASES' => '可选名称',
     'NOT_BEFORE' => '有效期从',
-    'NOT_AFTER' => '有效期到',
+    'NOT_AFTER' => '有效期至',
     'SIGNATURE' => '签名算法',
     'PUB_KEY' => '密钥位数',
     'ISSUER' => '颁发者',

From 7958b495c94ee3213c3ecf32d71e17015546ba4f Mon Sep 17 00:00:00 2001
From: Phinitnan Chanasabaeng <phinitnan_c@xtony.us>
Date: Wed, 18 Jul 2018 10:40:35 +0700
Subject: [PATCH 0174/2300] Updated and Fixed error on updating Letsencrypt
 cert with NGINX's drupal template.

---
 .../templates/web/nginx/php5-fpm/drupal6.stpl | 52 +++++++---------
 .../templates/web/nginx/php5-fpm/drupal6.tpl  | 49 +++++++--------
 .../templates/web/nginx/php5-fpm/drupal7.stpl | 58 ++++++++----------
 .../templates/web/nginx/php5-fpm/drupal7.tpl  | 59 ++++++++----------
 .../templates/web/nginx/php5-fpm/drupal8.stpl | 59 ++++++++----------
 .../templates/web/nginx/php5-fpm/drupal8.tpl  | 60 ++++++++-----------
 .../templates/web/nginx/php5-fpm/drupal6.stpl | 52 +++++++---------
 .../templates/web/nginx/php5-fpm/drupal6.tpl  | 49 +++++++--------
 .../templates/web/nginx/php5-fpm/drupal7.stpl | 58 ++++++++----------
 .../templates/web/nginx/php5-fpm/drupal7.tpl  | 59 ++++++++----------
 .../templates/web/nginx/php5-fpm/drupal8.stpl | 59 ++++++++----------
 .../templates/web/nginx/php5-fpm/drupal8.tpl  | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../9/templates/web/nginx/php-fpm/drupal6.tpl | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../9/templates/web/nginx/php-fpm/drupal7.tpl | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../9/templates/web/nginx/php-fpm/drupal8.tpl | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../5/templates/web/nginx/php-fpm/drupal6.tpl | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../5/templates/web/nginx/php-fpm/drupal7.tpl | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../5/templates/web/nginx/php-fpm/drupal8.tpl | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../6/templates/web/nginx/php-fpm/drupal6.tpl | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../6/templates/web/nginx/php-fpm/drupal7.tpl | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../6/templates/web/nginx/php-fpm/drupal8.tpl | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../7/templates/web/nginx/php-fpm/drupal6.tpl | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../7/templates/web/nginx/php-fpm/drupal7.tpl | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../7/templates/web/nginx/php-fpm/drupal8.tpl | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 .../templates/web/nginx/php-fpm/drupal6.stpl  | 52 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   | 49 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 58 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal7.tpl   | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 59 ++++++++----------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 60 ++++++++-----------
 114 files changed, 2812 insertions(+), 3591 deletions(-)

diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal6.stpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal6.stpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal6.tpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal6.tpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal6.stpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal6.stpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal6.tpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal6.tpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal6.stpl b/install/debian/9/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal6.tpl b/install/debian/9/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl b/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl b/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl b/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl b/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal6.stpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal6.tpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal6.stpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal6.tpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal6.stpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal6.tpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl
index 91a70936..0af7ce84 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -31,48 +31,42 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.tpl
index ac32dcd9..d1096bff 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,48 +27,42 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
 
     location / {
         try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
     }
 
     location @rewrite {
-        # For Drupal 6 and bwlow:
-        # Some modules enforce no slash (/) at the end of the URL
-        # Else this rewrite block wouldn't be needed (GlobalRedirect)
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
 
-    location ~ ^/sites/.*/files/styles/ {
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
         try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
index 3b9dabf5..030ea952 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -31,50 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl
index 1b979475..c9729795 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,50 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$) {
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
index 50d85b68..030ea952 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -31,51 +31,44 @@ server {
         return 403;
     }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
 
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-            return 403;
-        }
-
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl
index 71b538bf..c9729795 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -18,7 +18,6 @@ server {
         access_log off;
     }
 
-    # Very rarely should these ever be accessed outside of your lan
     location ~* \.(txt|log)$ {
         allow 192.168.0.0/16;
         deny all;
@@ -28,51 +27,44 @@ server {
         return 403;
         }
 
-    # No no for private
     location ~ ^/sites/.*/private/ {
         return 403;
     }
-
-    # Block access to "hidden" files and directories whose names begin with a
-    # period. This includes directories used by version control systems such
-    # as Subversion or Git to store control files.
-    location ~ (^|/)\. {
-        return 403;
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
     }
-
+    
     location / {
-        try_files $uri @rewrite;
-
-        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-            expires     max;
-        }
-
-        location ~ [^/]\.php(/|$)|^/update.php {
-            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            if (!-f $document_root$fastcgi_script_name) {
-                return  404;
-            }
-
-            fastcgi_pass    %backend_lsnr%;
-            fastcgi_index   index.php;
-            fastcgi_param SCRIPT_FILENAME $request_filename;
-            fastcgi_intercept_errors on;
-            include         /etc/nginx/fastcgi_params;
-        }
+        try_files $uri /index.php?$query_string;
     }
 
-    location @rewrite {
-        # You have 2 options here
-        # For D7 and above:
-        # Clean URLs are handled in drupal_environment_initialize().
-        rewrite ^ /index.php;
-    }
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
 
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
     error_page  500 502 503 504 /error/50x.html;

From 98542d69bc0087859fcc3c04a0823e8d9afc62bb Mon Sep 17 00:00:00 2001
From: Dmitry Bannik <dima-bannik@mail.ru>
Date: Fri, 27 Jul 2018 23:59:53 +0300
Subject: [PATCH 0175/2300] Fix editing backup exclusions

---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index bc57cafc..e59d84e5 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -233,7 +233,7 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
 
         # Backup files
         cd $HOMEDIR/$user/web/$domain
-        tar -cpf- * ${fargs[@]} |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
+        tar -cpf- ${fargs[@]} * |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
     done
 
     # Print total

From 4a27e61d60ea6e781a1b0985c2ccf7bf58c1031f Mon Sep 17 00:00:00 2001
From: Luiz Junior <luizjrdeveloper@gmail.com>
Date: Tue, 31 Jul 2018 10:32:47 -0300
Subject: [PATCH 0176/2300] Fix Dovecot Connection

Fix dovecot Connection
---
 install/ubuntu/16.04/dovecot/dovecot.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/ubuntu/16.04/dovecot/dovecot.conf b/install/ubuntu/16.04/dovecot/dovecot.conf
index 311a3351..55c3672f 100644
--- a/install/ubuntu/16.04/dovecot/dovecot.conf
+++ b/install/ubuntu/16.04/dovecot/dovecot.conf
@@ -3,7 +3,7 @@ listen = *, ::
 base_dir = /var/run/dovecot/
 !include conf.d/*.conf
 
-namespace {
+namespace inbox{
     type = private
     separator = /
     prefix =

From 47a22f4a254aac61bb3c91c4ac7dd0eaf493f1b6 Mon Sep 17 00:00:00 2001
From: Luiz Junior <luizjrdeveloper@gmail.com>
Date: Tue, 31 Jul 2018 10:46:54 -0300
Subject: [PATCH 0177/2300] Fix dovecot

namespace inbox {
---
 install/ubuntu/16.04/dovecot/dovecot.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/ubuntu/16.04/dovecot/dovecot.conf b/install/ubuntu/16.04/dovecot/dovecot.conf
index 55c3672f..163460ba 100644
--- a/install/ubuntu/16.04/dovecot/dovecot.conf
+++ b/install/ubuntu/16.04/dovecot/dovecot.conf
@@ -3,7 +3,7 @@ listen = *, ::
 base_dir = /var/run/dovecot/
 !include conf.d/*.conf
 
-namespace inbox{
+namespace inbox {
     type = private
     separator = /
     prefix =

From 1c315de8d7924362ee6b96a9767d1f1536caa78d Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Fri, 3 Aug 2018 18:34:13 +0300
Subject: [PATCH 0178/2300] fix for ubuntu 14.04

---
 install/vst-install-ubuntu.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index ef4b7079..a17517e3 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -33,9 +33,9 @@ software="apache2 apache2.2-common apache2-suexec-custom apache2-utils
 
 # Fix for old releases
 if [[ ${release:0:2} -lt 16 ]]; then
-    software=$(echo "$software" |sed -e "s/php /php5 /")
-    software=$(echo "$software" |sed -e "s/php-/php5-/")
-    software=$(echo "$software" |sed -e "s/mod-php/mod-php5/")
+    software=$(echo "$software" |sed -e "s/php /php5 /g")
+    software=$(echo "$software" |sed -e "s/vesta-php5 /vesta-php /g")
+    software=$(echo "$software" |sed -e "s/php-/php5-/g")
 fi
 
 # Defining help function

From 8bb89d2eb684f5ad8c7c85a0eab44c3b4eb493b3 Mon Sep 17 00:00:00 2001
From: Phinitnan Chanasabaeng <phinitnan_c@xtony.us>
Date: Mon, 6 Aug 2018 10:35:41 +0700
Subject: [PATCH 0179/2300] Updated Thai translation

---
 web/inc/i18n/th.php | 459 ++++++++++++++++++++++----------------------
 1 file changed, 230 insertions(+), 229 deletions(-)

diff --git a/web/inc/i18n/th.php b/web/inc/i18n/th.php
index 96f23bb5..07beb85e 100644
--- a/web/inc/i18n/th.php
+++ b/web/inc/i18n/th.php
@@ -3,6 +3,7 @@
  * Vesta language file
  * Language: Thai ( Thailand )
  * thatphon05@gmail.com
+ * phinitnan_c@xtony.us
  */
 
 $LANG['th'] = array(
@@ -11,10 +12,10 @@ $LANG['th'] = array(
     'IP'  => 'IP',
     'Graphs'  => 'กราฟ',
     'Statistics'  => 'สถิติ',
-    'Log'  => 'Log',
-    'Server'  => 'เซิฟเวอร์',
+    'Log'  => 'บันทึกเหตุการณ์',
+    'Server'  => 'เซิร์ฟเวอร์',
     'Services'  => 'บริการ',
-    'Firewall' => 'ไฟร์วอลล์',
+    'Firewall' => 'Firewall',
     'Updates'  => 'อัพเดท',
     'Log in'  => 'เข้าสู่ระบบ',
     'Log out'  => 'ออกจากระบบ',
@@ -22,47 +23,47 @@ $LANG['th'] = array(
     'USER'  => 'ผู้ใช้',
     'WEB'  => 'เว็บ',
     'DNS'  => 'DNS',
-    'MAIL'  => 'เมล์',
+    'MAIL'  => 'เมล',
     'DB'  => 'ฐานข้อมูล',
     'CRON'  => 'CRON',
     'BACKUP'  => 'สำรองข้อมูล',
 
     'LOGIN'  => 'เข้าสู่ระบบ',
-    'RESET PASSWORD'  => 'รีเซ็ตรหัสผ่าน',
+    'RESET PASSWORD'  => 'ตั้งรหัสผ่านใหม่',
     'SEARCH'  => 'ค้นหา',
     'PACKAGE'  => 'แพ็กเกจ',
     'RRD'  => 'RRD',
-    'STATS'  => 'STATS',
-    'LOG'  => 'ล็อก',
+    'STATS'  => 'สถิติ',
+    'LOG'  => 'บันทึกเหตุการณ์',
     'UPDATES'  => 'อัพเดท',
-    'FIREWALL'  => 'ไฟร์วอลล์',
-    'SERVER'  => 'เซิฟเวอร์',
+    'FIREWALL'  => 'FIREWALL',
+    'SERVER'  => 'เซิร์ฟเวอร์',
     'MEMORY'  => 'หน่วยความจำ',
-    'DISK'  => 'พื้นที่จัดเก็บข้อมูล',
+    'DISK'  => 'พื้นที่เก็บข้อมูล',
     'NETWORK'  => 'เครือข่าย',
-    'Web Log Manager'  => 'ตัวจัดการ Web Log',
+    'Web Log Manager'  => 'ตัวจัดการบันทึกเหตุการณ์เว็บ',
 
     'no notifications'  => 'ไม่มีการแจ้งเตือน',
 
     'Add User'  => 'เพิ่มผู้ใช้',
     'Add Domain'  => 'เพิ่มโดเมน',
-    'Add Web Domain'  => 'เพิ่ม Web Domain',
-    'Add DNS Domain'  => 'เพิ่ม DNS Domain',
-    'Add DNS Record'  => 'เพิ่ม DNS Record',
-    'Add Mail Domain'  => 'เพิ่ม Mail Domain',
-    'Add Mail Account'  => 'เพิ่มบัญชีเมล์',
+    'Add Web Domain'  => 'เพิ่มโดเมนสำหรับเว็บ',
+    'Add DNS Domain'  => 'เพิ่มโดเมนสำหรับ DNS',
+    'Add DNS Record'  => 'เพิ่มรายการ DNS',
+    'Add Mail Domain'  => 'เพิ่มโดเมนสำหรับเมล',
+    'Add Mail Account'  => 'เพิ่มบัญชีเมล',
     'Add Database'  => 'เพิ่มฐานข้อมูล',
-    'Add Cron Job'  => 'เพิ่ม Cron Job',
-    'Create Backup'  => 'สร้างการสำรองข้อมูล',
-    'Configure'  => 'ปรับแต่ง',
+    'Add Cron Job'  => 'เพิ่มงาน CRON',
+    'Create Backup'  => 'สร้างข้อมูลสำรอง',
+    'Configure'  => 'ตั้งค่า',
     'Restore All'  => 'คืนค่าทั้งหมด',
     'Add Package'  => 'เพิ่มแพ็กเกจ',
-    'Add IP'  => 'เพิ่ม IP Address',
-    'Add Rule' => 'เพิ่ม Rule',
-    'Ban IP Address' => 'แบน IP Address',
+    'Add IP'  => 'เพิ่ม IP',
+    'Add Rule' => 'เพิ่มกฎ',
+    'Ban IP Address' => 'แบนหมายเลข IP',
     'Search'  => 'ค้นหา',
-    'Add one more FTP Account' => 'เพิ่มอีกบัญชี',
-    'Overall Statistics'  => 'สถิติโดยรวม',
+    'Add one more FTP Account' => 'เพิ่ม FTP อีกหนึ่งบัญชี',
+    'Overall Statistics'  => 'สถิติภาพรวม',
     'Daily'  => 'รายวัน',
     'Weekly'  => 'รายสัปดาห์',
     'Monthly'  => 'รายเดือน',
@@ -73,28 +74,28 @@ $LANG['th'] = array(
     'Submit'  => 'ส่งข้อมูล',
 
     'toggle all'  => 'เลือกทั้งหมด',
-    'apply to selected'  => 'นำไปใช้กับที่เลือก',
-    'rebuild'  => 'สร้างใหม่',
-    'rebuild web'  => 'สร้างเว็บใหม่',
-    'rebuild dns'  => 'สร้าง DNS ใหม่',
-    'rebuild mail'  => 'สร้างเมล์ใหม่',
-    'rebuild db'  => 'สร้างฐานข้อมูลใหม่',
-    'rebuild cron'  => 'สร้าง Cron ใหม่',
+    'apply to selected'  => 'นำไปใช้กับรายการที่เลือก',
+    'rebuild'  => 'ใช้การตั้งค่าล่าสุด',
+    'rebuild web'  => 'ใช้การตั้งค่าเว็บล่าสุด',
+    'rebuild dns'  => 'ใช้การตั้งค่า DNS ล่าสุด',
+    'rebuild mail'  => 'ใช้การตั้งค่าเมลล่าสุด',
+    'rebuild db'  => 'ใช้การตั้งค่าฐานข้อมูลล่าสุด',
+    'rebuild cron'  => 'ใช้การตั้งค่า CRON ล่าสุด',
     'update counters'  => 'อัพเดทตัวนับ',
     'suspend'  => 'ระงับการใช้งาน',
-    'unsuspend'  => 'เปิดใช้งาน',
+    'unsuspend'  => 'ยกเลิกระงับการใช้งาน',
     'delete'  => 'ลบ',
-    'show per user'  => 'แสดงต่อผู้ใช้',
-    'login as'  => 'เข้าสู่ระบบด้วย',
+    'show per user'  => 'แสดงผลต่อผู้ใช้',
+    'login as'  => 'เข้าสู่ระบบในนาม',
     'logout'  => 'ออกจากระบบ',
     'edit'  => 'แก้ไข',
     'open webstats'  => 'เปิดสถิติเว็บ',
-    'view logs'  => 'ดู Logs',
-    'list records'  => 'รายการ %s records',
-    'add record'  => 'เพิ่ม Record',
-    'list accounts'  => 'รายการ %s บัญชี',
+    'view logs'  => 'ดูบันทึกเหตุการณ์',
+    'list records'  => 'แสดงรายการ',
+    'add record'  => 'เพิ่มรายการ',
+    'list accounts'  => 'แสดงบัญชี',
     'add account'  => 'เพิ่มบัญชี',
-    'open webmail'  => 'เปิด Webmail',
+    'open webmail'  => 'เปิดเว็บเมล',
     'list fail2ban' => 'รายการ fail2ban',
     'open %s'  => 'เปิด %s',
     'download'  => 'ดาวน์โหลด',
@@ -106,48 +107,48 @@ $LANG['th'] = array(
     'update'  => 'อัพเดท',
     'generate'  => 'สร้าง',
     'Generate CSR' => 'สร้าง CSR',
-    'reread IP' => 'อ่าน IP ใหม่',
+    'reread IP' => 'อ่าน IP ซ้ำ',
     'enable autoupdate' => 'เปิดการอัพเดทอัตโนมัติ',
     'disable autoupdate' => 'ปิดการอัพเดทอัตโนมัติ',
-    'turn on notifications' => 'เปิดใช้งานการแจ้งเตือน',
-    'turn off notifications' => 'ปิดใช้งานการแจ้งเตือน',
+    'turn on notifications' => 'เปิดการแจ้งเตือน',
+    'turn off notifications' => 'ปิดการแจ้งเตือน',
     'configure' => 'ปรับแต่ง',
 
     'Adding User'  => 'เพิ่มผู้ใช้',
     'Editing User'  => 'แก้ไขผู้ใช้',
     'Adding Domain'  => 'เพิ่มโดเมน',
     'Editing Domain'  => 'แก้ไขโดเมน',
-    'Adding DNS Domain'  => 'เพิ่ม DNS Domain',
-    'Editing DNS Domain'  => 'แก้ไข DNS Domain',
-    'Adding DNS Record'  => 'เพิ่ม DNS Record',
-    'Editing DNS Record'  => 'แก้ไข DNS Record',
-    'Adding Mail Domain'  => 'เพิ่ม Mail Domain',
-    'Editing Mail Domain'  => 'แก้ไข Mail Domain',
-    'Adding Mail Account'  => 'เพิ่มบัญชีเมล์',
-    'Editing Mail Account'  => 'แก้ไขบัญชีเมล์',
+    'Adding DNS Domain'  => 'เพิ่ม DNS สำหรับโดเมน',
+    'Editing DNS Domain'  => 'แก้ไข DNS สำหรับโดเมน',
+    'Adding DNS Record'  => 'เพิ่มรายการ DNS',
+    'Editing DNS Record'  => 'แก้ไขรายการ DNS',
+    'Adding Mail Domain'  => 'เพิ่มโดเมนสำหรับเมล',
+    'Editing Mail Domain'  => 'แก้ไขโดเมนสำหรับเมล',
+    'Adding Mail Account'  => 'เพิ่มบัญชีเมล',
+    'Editing Mail Account'  => 'แก้ไขบัญชีเมล',
     'Adding database'  => 'เพิ่มฐานข้อมูล',
-    'Editing Cron Job'  => 'แก้ไข Cron Job',
-    'Adding Cron Job'  => 'เพิ่ม Cron Job',
+    'Editing Cron Job'  => 'แก้ไขงาน CRON',
+    'Adding Cron Job'  => 'เพิ่มงาน CRON',
     'Editing Database'  => 'แก้ไขฐานข้อมูล',
     'Adding Package'  => 'เพิ่มแพ็กเกจ',
     'Editing Package'  => 'แก้ไขแพ็กเกจ',
-    'Adding IP address'  => 'เพิ่ม IP address',
-    'Editing IP Address'  => 'แก้ไข IP Address',
+    'Adding IP address'  => 'เพิ่มที่อยู่ IP',
+    'Editing IP Address'  => 'แก้ไขที่อยู่ IP',
     'Editing Backup Exclusions' => 'แก้ไขการยกเว้นสำรองข้อมูล',
     'Generating CSR' => 'สร้าง CSR',
     'Listing'  => 'รายการ',
-    'Search Results'  => 'ผลลัพธ์ของการค้นหา',
-    'Adding Firewall Rule' => 'การเพิ่ม Firewall Rule',
-    'Editing Firewall Rule' => 'การแก้ไข Firewall Rule',
-    'Adding IP Address to Banlist' => 'การแบน IP Address',
+    'Search Results'  => 'ผลลัพธ์การค้นหา',
+    'Adding Firewall Rule' => 'การเพิ่มกฎ Firewall',
+    'Editing Firewall Rule' => 'การแก้ไขกฎ Firewall',
+    'Adding IP Address to Banlist' => 'เพิ่มที่อยู่ IP ในรายการแบน',
 
     'active'  => 'เปิดใช้งาน',
     'spnd'  => 'ระงับการใช้งาน',
     'suspended'  => 'ระงับการใช้งานแล้ว',
     'running'  => 'กำลังทำงาน',
     'stopped'  => 'หยุดทำงานแล้ว',
-    'outdated'  => 'ตกรุ่น',
-    'updated'  => 'อัพเดท',
+    'outdated'  => 'ตกรุ่นแล้ว',
+    'updated'  => 'อัพเดทแล้ว',
 
     'yes'  => 'ใช่',
     'no'  => 'ไม่ใช่',
@@ -164,37 +165,37 @@ $LANG['th'] = array(
     'minutes'  => 'นาที',
     'month'  => 'เดือน',
     'package'  => 'แพ็กเกจ',
-    'Bandwidth'  => 'แบนด์วิดธ์',
+    'Bandwidth'  => 'ปริมาณรับส่งข้อมูล',
     'Disk'  => 'พื้นที่จัดเก็บข้อมูล',
     'Web'  => 'เว็บ',
-    'Mail'  => 'เมล์',
+    'Mail'  => 'เมล',
     'Databases'  => 'ฐานข้อมูล',
     'User Directories'  => 'ไดเร็กทอรี่ของผู้ใช้',
-    'Template'  => 'Template',
-    'Web Template'  => 'Web Template',
-    'Backend Template'  => 'Backend Template',
-    'Proxy Template' =>'Proxy Template',
-    'DNS Template'  => 'DNS Template',
-    'Web Domains'  => 'Web Domains',
-    'SSL Domains'  => 'SSL Domains',
-    'Web Aliases'  => 'Web Aliases',
-    'per domain'  => 'ต่อ Domain',
-    'DNS Domains'  => 'DNS Domains',
-    'DNS domains'  => 'DNS domains',
-    'DNS records'   => 'DNS records',
+    'Template'  => 'ตัวแบบ',
+    'Web Template'  => 'ตัวแบบเว็บ',
+    'Backend Template'  => 'ตัวเแบบ Backend',
+    'Proxy Template' =>'ตัวแบบ Proxy',
+    'DNS Template'  => 'ตัวแบบ DNS',
+    'Web Domains'  => 'โดเมนสำหรับเว็บ',
+    'SSL Domains'  => 'โดเมนสำหรับ SSL',
+    'Web Aliases'  => 'ชื่อแทนเว็บ',
+    'per domain'  => 'ต่อโดเมน',
+    'DNS Domains'  => 'โดเมนสำหรับ DNS',
+    'DNS domains'  => 'โดเมนสำหรับ DNS',
+    'DNS records'   => 'รายการ DNS',
     'Name Servers'  => 'Name Servers',
-    'Mail Domains'  => 'Mail Domains',
-    'Mail Accounts'  => 'บัญชีเมล์',
-    'Cron Jobs'  => 'Cron Jobs',
-    'SSH Access'  => 'การเข้าถึง SSH',
-    'IP Address'  => 'IP Address',
-    'IP Addresses'  => 'IP Addresses',
+    'Mail Domains'  => 'โดเมนสำหรับเมล',
+    'Mail Accounts'  => 'บัญชีเมล',
+    'Cron Jobs'  => 'งาน CRON',
+    'SSH Access'  => 'การเข้าใช้ SSH',
+    'IP Address'  => 'ที่อยู่ IP',
+    'IP Addresses'  => 'ที่อยู่ IP',
     'Backups'  => 'สำรองข้อมูล',
     'Backup System'  => 'ระบบสำรองข้อมูล',
     'backup exclusions' => 'ยกเว้นการสำรองข้อมูล',
-    'template'  => 'template',
+    'template'  => 'ตัวแบบ',
     'SSL Support'  => 'สนับสนุน SSL',
-    'SSL Home Directory'  => 'หน้าแรกของ SSL',
+    'SSL Home Directory'  => 'ไดเร็กทอรี่หลักของ SSL',
     'Lets Encrypt Support'  => 'สนับสนุน Lets Encrypt',
     'Lets Encrypt'  => 'Lets Encrypt',
     'Your certificate will be automatically issued in 5 minutes' => 'ใบรับรองของคุณจะได้รับการออกโดยอัตโนมัติภายใน 5 นาที',
@@ -206,17 +207,17 @@ $LANG['th'] = array(
     'SOA'  => 'SOA',
     'TTL'  => 'TTL',
     'Expire'  => 'หมดอายุ',
-    'Records'  => 'Records',
+    'Records'  => 'รายการ',
     'Serial'  => 'Serial',
-    'Catchall email'  => 'Catchall email',
-    'AntiVirus Support'  => 'สนับสนุน AntiVirus',
-    'AntiSpam Support'  => 'สนับสนุน AntiSpam',
+    'Catchall email'  => 'อีเมล Catchall',
+    'AntiVirus Support'  => 'สนับสนุนการป้องกันไวรัส',
+    'AntiSpam Support'  => 'สนับสนุนการป้องกันเมลขยะ',
     'DKIM Support'  => 'สนับสนุน DKIM',
     'Accounts'  => 'บัญชี',
     'Quota'  => 'โควตา',
     'Autoreply'  => 'ตอบกลับอัตโนมัติ',
     'Forward to'  => 'ส่งต่อไปยัง',
-    'Do not store forwarded mail'  => 'อย่าเก็บเมล์ที่ส่งต่อไว้',
+    'Do not store forwarded mail'  => 'ไม่เก็บเมลที่ส่งต่อแล้วไว้',
     'IMAP hostname'  => 'IMAP hostname',
     'IMAP port'  => 'IMAP port',
     'IMAP security'  => 'IMAP security',
@@ -240,7 +241,7 @@ $LANG['th'] = array(
     'Run Time'  => 'เวลาทำงาน',
     'Backup Size'  => 'ขนาดสำรองข้อมูล',
     'SYS'  => 'SYS',
-    'Domains'  => 'Domains',
+    'Domains'  => 'โดเมน',
     'Status'  => 'สถานะ',
     'shared'  => 'shared',
     'dedicated'  => 'dedicated',
@@ -253,72 +254,72 @@ $LANG['th'] = array(
     'NGINX Usage'  => 'การใช้ NGINX',
     'MySQL Usage on localhost'  => 'การใช้ MySQL บน localhost',
     'PostgreSQL Usage on localhost'  => 'การใช้ PostgreSQL บน localhost',
-    'Bandwidth Usage eth0'  => 'การใช้ แบนด์วิดธ์ ของ eth0',
-    'Bandwidth Usage eth1'  => 'การใช้ แบนด์วิดธ์ ของ eth1',
+    'Bandwidth Usage eth0'  => 'ขนาดการรับส่งข้อมูลของ eth0',
+    'Bandwidth Usage eth1'  => 'ขนาดการรับส่งข้อมูลของ eth1',
     'Exim Usage'  => 'การใช้ Exim',
     'FTP Usage'  => 'การใช้ FTP',
     'SSH Usage'  => 'การใช้ SSH',
     'reverse proxy'  => 'reverse proxy',
-    'web server'  => 'web server',
-    'dns server'  => 'dns server',
-    'mail server'  => 'mail server',
-    'pop/imap server'  => 'pop/imap server',
-    'email antivirus'  => 'email antivirus',
-    'email antispam'  => 'email antispam',
-    'database server'  => 'database server',
-    'ftp server'  => 'ftp server',
+    'web server'  => 'เซิร์ฟเวอร์เว็บ',
+    'dns server'  => 'เซิร์ฟเวอร์ dns',
+    'mail server'  => 'เซิร์ฟเวอร์เมล',
+    'pop/imap server'  => 'เซิร์ฟเวอร์ pop/imap',
+    'email antivirus'  => 'การป้องกันไวรัสอีเมล',
+    'email antispam'  => 'การป้องกันอีเมลขยะ',
+    'database server'  => 'เซิร์ฟเวอร์ฐานข้อมูล',
+    'ftp server'  => 'เซิร์ฟเวอร์ ftp',
     'job scheduler'  => 'job scheduler',
     'firewall'  => 'firewall',
-    'brute-force monitor'  => 'ตรวจสอบการ brute-force',
+    'brute-force monitor'  => 'ดักจับ brute-force',
     'CPU'  => 'CPU',
     'Memory'  => 'หน่วยความจำ',
-    'Uptime'  => 'เวลาทำงาน',
+    'Uptime'  => 'ระบบทำงานมาแล้ว',
     'core package'  => 'แพ็กเกจหลัก',
-    'php interpreter'  => 'ตัวแปลคำสั่ง php',
+    'php interpreter'  => 'ตัวแปลภาษา php',
     'internal web server'  => 'เว็บเซิร์ฟเวอร์ภายใน',
     'Version'  => 'เวอร์ชั่น',
-    'Release'  => 'เวอร์ชั่นการปล่อย',
+    'Release'  => 'ลำดับที่',
     'Architecture'  => 'สถาปัตยกรรม',
     'Object'  => 'วัตถุ',
     'Username'  => 'ชื่อผู้ใช้',
     'Password'  => 'รหัสผ่าน',
-    'Email'  => 'อีเมล์',
+    'Email'  => 'อีเมล',
     'Package'  => 'แพ็กเกจ',
     'Language'  => 'ภาษา',
     'First Name'  => 'ชื่อ',
     'Last Name'  => 'นามสกุล',
     'Send login credentials to email address'  => 'ชื่ออีเมล์สำหรับส่งข้อมูลการเข้าสู่ระบบ',
-    'Default Template'  => 'Template มาตรฐาน',
-    'Default Name Servers'  => 'Name Servers มาตรฐาน',
+    'Default Template'  => 'ตัวแบบเริ่มต้น',
+    'Default Name Servers'  => 'Name Servers เริ่มต้น',
     'Domain'  => 'โดเมน',
     'DNS Support'  => 'สนับสนุน DNS',
-    'Mail Support'  => 'สนับสนุนเมล์',
+    'Mail Support'  => 'สนับสนุนเมล',
     'Advanced options'  => 'ตัวเลือกขั้นสูง',
     'Basic options'  => 'ตัวเลือกพื้นฐาน',
-    'Aliases'  => 'Aliases',
+    'Aliases'  => 'ชื่อแทน',
     'SSL Certificate'  => 'SSL Certificate',
     'SSL Key'  => 'SSL Key',
     'SSL Certificate Authority / Intermediate'  => 'SSL Certificate Authority / Intermediate',
     'SSL CSR' => 'SSL CSR',
     'optional'  => 'ทางเลือกเพิ่มเติม',
     'internal' => 'ภายใน',
-    'Statistics Authorization'  => 'การตรวจสอบสถิติ',
-    'Statistics Auth'  => 'รับรองความถูกต้องของสถิติ',
+    'Statistics Authorization'  => 'กำหนดสิทธิการเข้าดูสถิติ',
+    'Statistics Auth'  => 'ลงทะเบียนเข้าดูสถิติ',
     'Account'  => 'บัญชี',
-    'Prefix will be automaticaly added to username'  => 'คำนำหน้า %s จะถูกเพิ่มลงในชื่อผู้ใช้โดยอัตโนมัติ',
-    'Send FTP credentials to email'  => 'ชื่ออีเมล์สำหรับส่งข้อมูล FTP',
+    'Prefix will be automaticaly added to username'  => 'จะมีการใส่คำนำหน้าลงในชื่อผู้ใช้โดยอัตโนมัติ',
+    'Send FTP credentials to email'  => 'ชื่ออีเมล์สำหรับส่งรหัสผ่าน FTP',
     'Expiration Date'  => 'วันหมดอายุ',
     'YYYY-MM-DD'  => 'ปี-เดือน-วัน',
     'Name servers'  => 'Name servers',
-    'Record'  => 'Record',
+    'Record'  => 'รายการ',
     'IP or Value'  => 'IP หรือ ค่า',
     'Priority'  => 'ลำดับความสำคัญ',
-    'Record Number' => 'ตัวเลข record',
+    'Record Number' => 'หมายเลขรายการ',
     'in megabytes'  => 'หน่วย megabytes',
     'Message'  => 'ข้อความ',
     'use local-part'  => 'ใช้ส่วนภายใน',
     'one or more email addresses'  => 'อย่างน้อย 1 ที่อยู่อีเมล์',
-    'Prefix will be automaticaly added to database name and database user'  => 'คำนำหน้า %s จะถูกเพิ่มชื่อในฐานข้อมูลและฐานข้อมูลผู้ใช้โดยอัตโนมัติ',
+    'Prefix will be automaticaly added to database name and database user'  => 'จะมีการเพิ่มคำนำหน้าชื่อฐานข้อมูลและชื่อผู้ใช้ฐานข้อมูลโดยอัตโนมัติ',
     'Database'  => 'ฐานข้อมูล',
     'Type'  => 'ชนิด',
     'Minute'  => 'นาที',
@@ -327,35 +328,35 @@ $LANG['th'] = array(
     'Netmask'  => 'Netmask',
     'Interface'  => 'Interface',
     'Shared'  => 'แชร์',
-    'Assigned user'  => 'กำหนดผู้ใช้แล้ว',
-    'Assigned domain'  => 'โดเมนที่กำหนด',
+    'Assigned user'  => 'ผู้ใช้ที่กำหนดไว้',
+    'Assigned domain'  => 'โดเมนที่กำหนดไว้',
     'NAT IP association' => 'NAT IP association',
     'shell'  => 'shell',
-    'web domains'  => 'web domains',
-    'web aliases'  => 'web aliases',
-    'dns records'  => 'dns records',
-    'mail domains'  => 'mail domains',
-    'mail accounts'  => 'บัญชีเมล์',
+    'web domains'  => 'โดเมนสำหรับเว็บ',
+    'web aliases'  => 'ชื่อแทนเว็บ',
+    'dns records'  => 'รายการ dns',
+    'mail domains'  => 'โดเมนสำหรับเมล',
+    'mail accounts'  => 'บัญชีเมล',
     'accounts'  => 'บัญชี',
     'databases'  => 'ฐานข้อมูล',
-    'cron jobs'  => 'cron jobs',
+    'cron jobs'  => 'งาน cron',
     'backups'  => 'สำรองข้อมูล',
     'quota'  => 'โควต้า',
-    'day of week'  => 'วันในสัปดาห์',
-    'cmd'  => 'cmd',
+    'day of week'  => 'วันของสัปดาห์',
+    'cmd'  => 'คำสั่ง',
     'users'  => 'ผู้ใช้',
     'domains'  => 'โดนเมน',
-    'aliases'  => 'aliases',
-    'records'  => 'records',
-    'jobs'  => 'jobs',
+    'aliases'  => 'ชื่อแทน',
+    'records'  => 'รายการ',
+    'jobs'  => 'งาน',
     'username'  => 'ชื่อผู้ใช้',
     'password'  => 'รหัสผ่าน',
     'type'  => 'ชนิด',
     'charset'  => 'charset',
     'domain'  => 'โดเมน',
     'ip'  => 'ip',
-    'ip address'  => 'ip address',
-    'IP address'  => 'IP address',
+    'ip address'  => 'ที่อยู่ ip',
+    'IP address'  => 'ที่อยู่ IP',
     'netmask'  => 'netmask',
     'interface'  => 'interface',
     'assigned user'  => 'กำหนดผู้ใช้แล้ว',
@@ -368,11 +369,11 @@ $LANG['th'] = array(
     'account'  => 'บัญชี',
     'ssl certificate'  => 'ssl certificate',
     'ssl key'  => 'ssl key',
-    'stats user password'  => 'stats user password',
-    'stats username'  => 'stats username',
-    'stats password'  => 'stats password',
-    'ftp user password'  => 'FTP ชื่อผู้ใช้ รหัสผ่าน',
-    'ftp user'  => 'ผู้ใช้ FTP',
+    'stats user password'  => 'รหัสผ่านของผู้ใช้สถิติ',
+    'stats username'  => 'ชื่อผู้ใช้สถิติ',
+    'stats password'  => 'รหัสผ่านสถิติ',
+    'ftp user password'  => 'รหัสผ่านของผู้ใช้สำหรับ ftp',
+    'ftp user'  => 'ผู้ใช้ ftp',
     'Last 70 lines of %s.%s.log' => '70 บรรทัดสุดท้ายของ %s.%s.log',
     'AccessLog' => 'AccessLog',
     'ErrorLog' => 'ErrorLog',
@@ -383,13 +384,13 @@ $LANG['th'] = array(
     'State / Province' => 'ถนน / แขวง',
     'City / Locality' => 'เมือง / ท้องถิ่น',
     'Organization' => 'องค์กร',
-    'Action' => 'การกระทำ',
+    'Action' => 'ดำเนินการ',
     'Protocol' => 'โปรโตคอล',
     'Port' => 'Port',
     'Comment' => 'หมายเหตุ',
     'Banlist' => 'รายชื่อที่โดนแบน',
     'ranges are acceptable' => 'ช่วงที่ยอมรับได้',
-    'CIDR format is supported' => 'การสนับสนุน CIDR',
+    'CIDR format is supported' => 'สนับสนุนรูปแบบ CIDR',
     'ACCEPT' => 'ยอมรับ',
     'DROP' => 'บล็อค',
     'TCP' => 'TCP',
@@ -400,12 +401,12 @@ $LANG['th'] = array(
     'VESTA' => 'VESTA',
     'Add one more Name Server' => 'เพิ่ม Name Server อีก',
 
-    'web domain' => 'web domain',
-    'dns domain' => 'dns domain',
-    'dns record' => 'dns record',
-    'mail domain' => 'mail domain',
+    'web domain' => 'โดเมนสำหรับเว็บ',
+    'dns domain' => 'โดเมนสำหรบ dns',
+    'dns record' => 'รายการ dns',
+    'mail domain' => 'โดเมนสำหรับเมล',
     'mail account' => 'บัญชีเมล์',
-    'cron job' => 'cron job',
+    'cron job' => 'งาน cron',
 
     'cron' => 'cron',
     'user dir' => 'ไดเร็กทอรี่ของผู้ใช้',
@@ -415,91 +416,91 @@ $LANG['th'] = array(
     '%s accounts'  => '%s บัญชี',
     '1 domain'  => '1 โดเมน',
     '%s domains'  => '%s โดเมน',
-    '1 record'  => '1 record',
-    '%s records'  => '%s records',
-    '1 mail account'  => '1 บัญชีเมล์',
-    '%s mail accounts'  => '%s บัญชีเมล์',
+    '1 record'  => '1 รายการ',
+    '%s records'  => '%s รายการ',
+    '1 mail account'  => '1 บัญชีเมล',
+    '%s mail accounts'  => '%s บัญชีเมล',
     '1 database'  => '1 ฐานข้อมูล',
     '%s databases'  => '%s ฐานข้อมูล',
-    '1 cron job'  => '1 cron job',
-    '%s cron jobs'  => '%s cron jobs',
-    '1 archive'  => '1 เก็บถาวร',
-    '%s archives'  => '%s เก็บถาวร',
+    '1 cron job'  => '1 งาน cron',
+    '%s cron jobs'  => '%s งาน cron',
+    '1 archive'  => '1 ข้อมูลสำรอง',
+    '%s archives'  => '%s ข้อมูลสำรอง',
     '1 item'  => '1 รายการ',
     '%s items'  => '%s รายการ',
     '1 package'  => '1 แพ็กเกจ',
-    '%s packages'  => '%s packages',
-    '1 IP address'  => '1 IP address',
-    '%s IP addresses'  => '%s IP addresses',
+    '%s packages'  => '%s แพ็กเกจ',
+    '1 IP address'  => '1 ที่อยู่ IP',
+    '%s IP addresses'  => '%s ที่อยู่ IP',
     '1 month'  => '1 เดือน',
     '%s months'  => '%s เดือน',
-    '1 log record'  => '1 log record',
-    '%s log records'  => '%s log record',
+    '1 log record'  => '1 บันทึกเหตุการณ์',
+    '%s log records'  => '%s บันทึกเหตุการณ์',
     '1 object'  => '1 วัตถุ',
     '%s objects'  => '%s วัตถุ',
     'no exclusions' => 'ไม่มีการยกเว้น',
-    '1 rule' => '1 rule',
-    '%s rules' => '%s rules',
+    '1 rule' => '1 กฎ',
+    '%s rules' => '%s กฎ',
     'There are no currently banned IP' => 'ไม่มี IP ที่ถูกแบน',
 
-    'USER_CREATED_OK'  => 'สร้างผู้ใช้ <a href="/edit/user/?user=%s"><b>%s</b></a> สำเร็จแล้ว',
-    'WEB_DOMAIN_CREATED_OK'  => 'สร้างโดนเมน <a href="/edit/web/?domain=%s"><b>%s</b></a> สำเร็จแล้ว',
-    'DNS_DOMAIN_CREATED_OK'  => 'สร้าง DNS domain <a href="/list/dns/?domain=%s"><b>%s</b></a> สำเร็จแล้ว',
-    'DNS_RECORD_CREATED_OK'  => 'สร้าง Record <b>%s.%s</b> ได้ถูกสร้างสำเร็จแล้ว',
-    'MAIL_DOMAIN_CREATED_OK'  => 'สร้าง Mail domain <a href="/list/mail/?domain=%s"><b>%s</b></a> สำเร็จแล้ว',
-    'MAIL_ACCOUNT_CREATED_OK'  => 'สร้างบัญชีเมล์ <a href="/edit/mail/?account=%s&domain=%s"><b>%s@%s</b></a> สำเร็จแล้ว',
-    'DATABASE_CREATED_OK'  => 'สร้างฐานข้อมูล <a href="/edit/db/?database=%s"><b>%s</b></a> สำเร็จแล้ว',
-    'CRON_CREATED_OK'  => 'สร้าง Cron job ได้ถูกสร้างแล้ว',
-    'IP_CREATED_OK'  => 'สร้าง IP address <a href="/edit/ip/?ip=%s"><b>%s</b></a> สำเร็จแล้ว',
-    'PACKAGE_CREATED_OK'  => 'สร้างแพ็กเกจ <a href="/edit/package/?package=%s"><b>%s</b></a> สำเร็จแล้ว',
-    'SSL_GENERATED_OK' => 'สร้างใบรับรองสำเร็จแล้ว',
-    'RULE_CREATED_OK' => 'สร้าง Rule สำเร็จแล้ว',
-    'BANLIST_CREATED_OK' => 'สร้าง IP address สำเร็จแล้ว',
+    'USER_CREATED_OK'  => 'สร้างผู้ใช้ <a href="/edit/user/?user=%s"><b>%s</b></a> แล้ว',
+    'WEB_DOMAIN_CREATED_OK'  => 'สร้างโดเมน <a href="/edit/web/?domain=%s"><b>%s</b></a> แล้ว',
+    'DNS_DOMAIN_CREATED_OK'  => 'สร้างโดเมนสำหรับ DNS <a href="/list/dns/?domain=%s"><b>%s</b></a> แล้ว',
+    'DNS_RECORD_CREATED_OK'  => 'สร้างรายการ <b>%s.%s</b> แล้ว',
+    'MAIL_DOMAIN_CREATED_OK'  => 'สร้างโดเมนสำหรับเมล <a href="/list/mail/?domain=%s"><b>%s</b></a> แล้ว',
+    'MAIL_ACCOUNT_CREATED_OK'  => 'สร้างบัญชีเมล <a href="/edit/mail/?account=%s&domain=%s"><b>%s@%s</b></a> แล้ว',
+    'DATABASE_CREATED_OK'  => 'สร้างฐานข้อมูล <a href="/edit/db/?database=%s"><b>%s</b></a> แล้ว',
+    'CRON_CREATED_OK'  => 'สร้างงาน Cron แล้ว',
+    'IP_CREATED_OK'  => 'สร้างที่อยู่ IP <a href="/edit/ip/?ip=%s"><b>%s</b></a> แล้ว',
+    'PACKAGE_CREATED_OK'  => 'สร้างแพ็กเกจ <a href="/edit/package/?package=%s"><b>%s</b></a> แล้ว',
+    'SSL_GENERATED_OK' => 'สร้าง SSL Certificate แล้ว',
+    'RULE_CREATED_OK' => 'สร้างกฎแล้ว',
+    'BANLIST_CREATED_OK' => 'สร้างรายการแบนหมายเลข IP แล้ว',
     'Autoupdate has been successfully enabled' => 'เปิดใช้งานการอัพเดทอัตโนมัติสำเร็จแล้ว',
     'Autoupdate has been successfully disabled' => 'ปิดใช้งานการอัพเดทอัตโนมัติสำเร็จแล้ว',
-    'Cronjob email reporting has been successfully enabled' => 'การรายงานทางอีเมลของ Cronjob ได้รับการเปิดใช้งานเรียบร้อยแล้ว',
-    'Cronjob email reporting has been successfully disabled' => 'การรายงานทางอีเมลของ Cronjob ได้รับการปิดใช้งานเรียบร้อยแล้ว',
+    'Cronjob email reporting has been successfully enabled' => 'เปิดการรายงานทางอีเมลของ Cronjob แล้ว',
+    'Cronjob email reporting has been successfully disabled' => 'ปิดการรายงานทางอีเมลของ Cronjob แล้ว',
     'Changes has been saved.'  => 'บันทึกการเปลี่ยนแปลงแล้ว',
     'Confirmation'  => 'การยืนยัน',
-    'DELETE_USER_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบผู้ใช้ %s?',
-    'SUSPEND_USER_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ระงับผู้ใช้ %s?',
-    'UNSUSPEND_USER_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งานผู้ใช้ %s?',
-    'DELETE_DOMAIN_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบโดเมน %s?',
-    'SUSPEND_DOMAIN_CONFIRMATION' => 'แน่ใจหรือไม่ว่าคุณต้องการ ระงับโดเมน %s?',
-    'UNSUSPEND_DOMAIN_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งานโดเมน %s?',
-    'DELETE_RECORD_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบ Record %s?',
-    'SUSPEND_RECORD_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ระงับ Record %s?',
-    'UNSUSPEND_RECORD_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งาน Record %s?',
-    'DELETE_MAIL_ACCOUNT_CONFIRMATION' => 'คุณแน่ใจหรือว่าต้องการ ลบเมล์ %s?',
-    'SUSPEND_MAIL_ACCOUNT_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ระงับเมล์ %s?',
-    'UNSUSPEND_MAIL_ACCOUNT_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งานเมล์ %s?',
-    'DELETE_DATABASE_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบฐานข้อมูล %s?',
-    'SUSPEND_DATABASE_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ระงับฐานข้อมูล %s?',
-    'UNSUSPEND_DATABASE_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งานฐานข้อมูล %s?',
-    'DELETE_CRON_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบ cron job?',
-    'SUSPEND_CRON_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ระงับ cron job?',
-    'UNSUSPEND_CRON_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งาน cron job?',
-    'DELETE_BACKUP_CONFIRMATION'  => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบการสำรองข้อมูล %s?',
-    'DELETE_EXCLUSION_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบ %s ในการยกเว้น?',
-    'DELETE_PACKAGE_CONFIRMATION'  => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบแพ็กเกจ %s?',
-    'DELETE_IP_CONFIRMATION'  => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบ IP address %s?',
-    'DELETE_RULE_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบ rule #%s?',
-    'SUSPEND_RULE_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ระงับ rule  #%s?',
-    'UNSUSPEND_RULE_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งาน rule #%s?',
-    'LEAVE_PAGE_CONFIRMATION' => 'ออกจากหน้านี้?',
-    'RESTART_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการเริ่มต้นใหม่ %s?',
+    'DELETE_USER_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบผู้ใช้ %s',
+    'SUSPEND_USER_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ระงับผู้ใช้ %s',
+    'UNSUSPEND_USER_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งานผู้ใช้ %s',
+    'DELETE_DOMAIN_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบโดเมน %s',
+    'SUSPEND_DOMAIN_CONFIRMATION' => 'แน่ใจหรือไม่ว่าคุณต้องการ ระงับโดเมน %s',
+    'UNSUSPEND_DOMAIN_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งานโดเมน %s',
+    'DELETE_RECORD_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบรายการ %s',
+    'SUSPEND_RECORD_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ระงับรายการ %s',
+    'UNSUSPEND_RECORD_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งานรายการ %s',
+    'DELETE_MAIL_ACCOUNT_CONFIRMATION' => 'คุณแน่ใจหรือว่าต้องการ ลบเมล %s',
+    'SUSPEND_MAIL_ACCOUNT_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ระงับเมล %s',
+    'UNSUSPEND_MAIL_ACCOUNT_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งานเมล %s',
+    'DELETE_DATABASE_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบฐานข้อมูล %s',
+    'SUSPEND_DATABASE_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ระงับฐานข้อมูล %s',
+    'UNSUSPEND_DATABASE_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งานฐานข้อมูล %s',
+    'DELETE_CRON_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบงาน cron',
+    'SUSPEND_CRON_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ระงับงาน cron',
+    'UNSUSPEND_CRON_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งาน cron',
+    'DELETE_BACKUP_CONFIRMATION'  => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบการสำรองข้อมูล %s',
+    'DELETE_EXCLUSION_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบ %s ในการยกเว้น',
+    'DELETE_PACKAGE_CONFIRMATION'  => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบแพ็กเกจ %s',
+    'DELETE_IP_CONFIRMATION'  => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบที่อยู่ IP %s',
+    'DELETE_RULE_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ลบกฎ #%s',
+    'SUSPEND_RULE_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ ระงับกฎ  #%s',
+    'UNSUSPEND_RULE_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการ เปิดการใช้งานกฎ #%s',
+    'LEAVE_PAGE_CONFIRMATION' => 'ออกจากหน้านี้',
+    'RESTART_CONFIRMATION' => 'คุณแน่ใจหรือไม่ว่าต้องการเริ่มต้นใหม่ %s',
     'Welcome'  => 'ยินดีต้อนรับ',
     'LOGGED_IN_AS'  => 'เข้าสู่ระบบในฐานะผู้ใช้ %s',
     'Error'  => 'เกิดข้อผิดพลาด',
     'Invalid username or password'  => 'ชื่อผู้ใช้หรือรหัสผ่านไม่ถูกต้อง',
     'Invalid username or code'  => 'ชื่อผู้ใช้หรือรหัสไม่ถูกต้อง',
     'Passwords not match'  => 'รหัสผ่านทั้งสองไม่ตรงกัน',
-    'Please enter valid email address.'  => 'กรุณาใส่เมล์ที่ถูกต้อง',
+    'Please enter valid email address.'  => 'กรุณาใส่เมลที่ถูกต้อง',
     'Field "%s" can not be blank.'  => 'ช่อง "%s" ไม่สามารถเว้นว่างไว้',
     'Password is too short.'  => 'รหัสผ่านสั้นเกินไป (ต่ำสุด 6 ตัวอักษร)',
     'Error code:'  => 'รหัสข้อผิดพลาด: %s',
     'SERVICE_ACTION_FAILED'  => '"%s" "%s" ล้มเหลว',
-    'IP address is in use' => 'IP address กำลังใช้งานอยู่',
+    'IP address is in use' => 'ที่อยู่ IP ถูกใช้งานอยู่',
     'BACKUP_SCHEDULED'  => 'มีการเพิ่มงานลงในคิวแล้ว คุณจะได้รับอีเมลแจ้งเตือนเมื่อการสำรองข้อมูลของคุณพร้อมสำหรับการดาวน์โหลด',
     'BACKUP_EXISTS'  => 'มีการสำรองข้อมูลอยู่ โปรดรอให้การสำรองข้อมูลในปัจจุบันเสร็จสิ้น',
     'RESTORE_SCHEDULED'  => 'มีการเพิ่มงานลงในคิวแล้ว คุณจะได้รับการแจ้งเตือนทางอีเมลเมื่อการคืนค่าเสร็จสิ้น',
@@ -521,7 +522,7 @@ $LANG['th'] = array(
     'FTP login credentials'  => 'ข้อมูลการเข้าสู่ระบบ FTP',
     'FTP_ACCOUNT_READY' => "มีการสร้างบัญชี FTP และพร้อมใช้งานแล้ว\n\nโฮสต์: %s\nชื่อผู้ใช้: %s_%s\nรหัสผ่าน: %s\n\n--\nVesta Control Panel\n",
 
-    'Database Credentials'  => 'ข้อมูลของฐานข้อมูล',
+    'Database Credentials'  => 'ข้อมูลการใช้งานฐานข้อมูล',
     'DATABASE_READY' => "สร้างฐานข้อมูลเรียบร้อยแล้ว\n\nDatabase: %s\nชื่อ: %s\nรหัสผ่าน: %s\n%s\n\n--\nVesta Control Panel\n",
 
     'forgot password'  => 'ลืมรหัสผ่าน',
@@ -530,7 +531,7 @@ $LANG['th'] = array(
     'Confirm Password'  => 'ยืนยันรหัสผ่าน',
     'Reset'  => 'รีเซ็ต',
     'Reset Code'  => 'รหัสสำหรับรีเซ็ต',
-    'RESET_NOTICE'  => '',
+    'RESET_NOTICE'  => 'แจ้งการ',
     'RESET_CODE_SENT'  => 'รหัสสำหรับรีเซ็ตรหัสผ่านถูกส่งไปยังที่อยู่อีเมลของคุณแล้ว<br>',
     'MAIL_RESET_SUBJECT'  => 'ตั้งค่ารหัสผ่านใหม่ที่ %s',
     'PASSWORD_RESET_REQUEST' => "หากต้องการรีเซ็ตรหัสผ่านของแผงควบคุมโปรดไปที่ลิงก์นี้:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\nAlternatively, คุณอาจจะไปที่ https://%s/reset/?action=code&user=%s และใส่รหัสรีเซ็ตดังต่อไปนี้:\n%s\n\nหากคุณไม่ได้ขอรหัสผ่านใหม่โปรดละเว้นข้อความนี้และยอมรับคำขอโทษของเรา\n\n--\nVesta Control Panel\n",
@@ -548,41 +549,41 @@ $LANG['th'] = array(
     'Nov' => 'พ.ย.',
     'Dec' => 'ธ.ค.',
 
-    'Configuring Server' => 'การกำหนดค่าเซิฟเวอร์',
+    'Configuring Server' => 'การกำหนดค่าเซิร์ฟเวอร์',
     'Hostname' => 'Hostname',
     'Time Zone' => 'เขตเวลา',
     'Default Language' => 'ภาษาเริ่มต้น',
-    'Proxy Server' => 'Proxy Server',
-    'Web Server' => 'Web Server',
-    'Backend Server' => 'Backend Server',
-    'Backend Pool Mode' => 'Backend Pool Mode',
-    'DNS Server' => 'DNS Server',
+    'Proxy Server' => 'เซิร์ฟเวอร์ Proxy',
+    'Web Server' => 'เซิร์ฟเวอร์เว็บ',
+    'Backend Server' => 'เซิร์ฟเวอร์ Backend',
+    'Backend Pool Mode' => 'โหมด Backend Pool',
+    'DNS Server' => 'เซิร์ฟเวอร์ DNS',
     'DNS Cluster' => 'DNS Cluster',
-    'MAIL Server' => 'MAIL Server',
-    'Antivirus' => 'Antivirus',
-    'AntiSpam' => 'AntiSpam',
+    'MAIL Server' => 'เซิร์ฟเวอร์เมล',
+    'Antivirus' => 'ป้องกันไวรัส',
+    'AntiSpam' => 'ป้องกันเมลขยะ',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'สนับสนุน MySQL',
-    'phpMyAdmin URL' => 'ที่อยู่ของ phpMyAdmin',
+    'phpMyAdmin URL' => 'phpMyAdmin URL',
     'PostgreSQL Support' => 'สนับสนุน PostgreSQL',
-    'phpPgAdmin URL' => 'ที่อยู่ของ phpPgAdmin',
+    'phpPgAdmin URL' => 'phpPgAdmin URL',
     'Maximum Number Of Databases' => 'จำนวนฐานข้อมูลสูงสุด',
     'Current Number Of Databases' => 'จำนวนฐานข้อมูลปัจจุบัน',
-    'Local backup' => 'สำรองข้อมูลท้องถิ่น',
+    'Local backup' => 'สำรองข้อมูลภายใน',
     'Compression level' => 'ระดับการบีบอัด',
     'Directory' => 'ไดเร็กทอรี่',
-    'Remote backup' => 'การสำรองข้อมูลระยะไกล',
+    'Remote backup' => 'การสำรองข้อมูลภายนอก',
     'ftp' => 'FTP',
     'sftp' => 'SFTP',
     'SFTP Chroot' => 'SFTP Chroot',
-    'FileSystem Disk Quota' => 'FileSystem Disk Quota',
+    'FileSystem Disk Quota' => 'โควต้าการเก็บข้อมูลในระบบ',
     'Vesta Control Panel Plugins' => 'ปลั๊กอิน Vesta Control Panel',
     'preview' => 'ดูตัวอย่าง',
     'Reseller Role' => 'บทบาท Reseller',
     'Web Config Editor' => 'เครื่องมือแก้ไขการตั้งค่าเว็บ',
     'Template Manager' => 'ตัวจัดการ Template',
     'Backup Migration Manager' => 'ตัวจัดการการย้ายข้อมูลสำรอง',
-    'FileManager' => 'FileManager',
+    'FileManager' => 'ตัวจัดการไฟล์',
     'show: CPU / MEM / NET / DISK' => 'แสดง: CPU / MEM / NET / DISK',
 
     'sort by' => 'จัดเรียงโดย',
@@ -592,7 +593,7 @@ $LANG['th'] = array(
 
     'save to favorites' => 'บันทึกในรายการโปรด',
 
-    'File Manager' => 'File Manager',
+    'File Manager' => 'ตัวจัดการไฟล์',
     'size' => 'ขนาด',
     'date' => 'วันที่',
     'name' => 'ชื่อ',
@@ -608,8 +609,8 @@ $LANG['th'] = array(
     'ARCHIVE' => 'เก็บถาวร',
     'EXTRACT' => 'แตกไฟล์',
     'DOWNLOAD' => 'ดาวน์โหลด',
-    'Are you sure?' => 'คุณแน่ใจ?',
-    'Hit' => 'Hit',
+    'Are you sure?' => 'คุณแน่ใจหรือไม่',
+    'Hit' => 'จำนวนการเข้าถึง',
     'to reload the page' => 'เพื่อโหลดหน้าเว็บใหม่',
     'Directory name cannot be empty' => 'ชื่อไดเร็กทอรี่ต้องไม่ว่างเปล่า',
     'File name cannot be empty' => 'ชื่อไฟล์ต้องไม่ว่างเปล่า',
@@ -629,7 +630,7 @@ $LANG['th'] = array(
     'Extract' => 'แตกไฟล์',
     'Create' => 'สร้าง',
     'Compress' => 'บีบอัด',
-    'OK' => 'โอเค',
+    'OK' => 'ตกลง',
     'YOU ARE COPYING' => 'คุณกำลังคัดลอก',
     'YOU ARE REMOVING' => 'คุณกำลังลบ',
     'Delete items' => 'ลบรายการ',
@@ -667,7 +668,7 @@ $LANG['th'] = array(
     'Go to CRON list' => 'ไปที่รายการ CRON',
     'Go to BACKUP list' => 'ไปที่รายการ สำรองข้อมูล',
     'Focus on search' => 'มุ่งเน้นการค้นหา',
-    'Display/Close shortcuts' => 'แสดง/ปิด shortcuts',
+    'Display/Close shortcuts' => 'แสดง/ปิดทางลัด',
     'Move backward through top menu' => 'เลื่อนกลับไปที่เมนูด้านบน',
     'Move forward through top menu' => 'เลื่อนไปข้างหน้าผ่านเมนูด้านบน',
     'Enter focused element' => 'ใส่องค์ประกอบที่เน้น',
@@ -696,7 +697,7 @@ $LANG['th'] = array(
     'Add File to the Current Selection' => 'เพิ่มไฟล์ในการเลือกปัจจุบัน',
     'Select All Files' => 'เลือกไฟล์ทั้งหมด',
     'shortcuts are inspired by magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager' =>
-    'shortcuts are inspired by magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager',
+    'ทางลัดต่างๆ ได้แรงบันดาลใจจากตัวจัดการไฟล์ magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a>',
 
     'Licence Key' => 'License Key',
     'Enter License Key' => 'กรอก License Key',
@@ -705,7 +706,7 @@ $LANG['th'] = array(
     'Disable and Cancel License' => 'ปิดการใช้งาน และยกเลิก License',
     'Licence Activated' => 'เปิดใช้งาน License แล้ว',
     'Licence Deactivated' => 'ปิดการใช้งาน License แล้ว',
-    'Restrict users so that they cannot use SSH and access only their home directory.' => 'จำกัดผู้ใช้เพื่อไม่ให้ใช้ SSH และเข้าถึงไดเร็กทอรี่บ้านเท่านั้น',
+    'Restrict users so that they cannot use SSH and access only their home directory.' => 'จำกัดผู้ใช้เพื่อไม่ให้ใช้ SSH และเข้าถึงไดเร็กทอรี่ของตนเองเท่านั้น',
     'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.' => 'เรียกดู, คัดลอก, แก้ไข, ดู, และเรียกค้นหาไฟล์โดเมนทั้งหมดของเว็บโดยใช้ตัวจัดการไฟล์ที่มีคุณลักษณะครบถ้วน',
     'This is a commercial module, you would need to purchace license key to enable it.' => 'สิ่งนี้ไม่ใช่โมดูลฟรี, คุณจะต้องซื้อ License Key เพื่อเปิดใช้งาน',
 
@@ -746,14 +747,14 @@ $LANG['th'] = array(
     'PUB_KEY' => 'PUB_KEY',
     'ISSUER' => 'ISSUER',
 
-    'Use server hostname' => 'ใช้ server hostname',
-    'Use domain hostname' => 'ใช้ domain hostname',
+    'Use server hostname' => 'ใช้ hostname ของเซิร์ฟเวอร์',
+    'Use domain hostname' => 'ใช้ hostname ของโดเมน',
     'Use STARTTLS' => 'ใช้ STARTTLS',
     'Use SSL / TLS' => 'ใช้ SSL / TLS',
-    'No encryption' => 'ไม่มี encryption',
-    'Do not use encryption' => 'ไม่ใช้ encryption',
+    'No encryption' => 'ไม่มีการเข้ารหัส',
+    'Do not use encryption' => 'ไม่ใช้การเข้ารหัส',
 
     'maximum characters length, including prefix' => 'ความยาว charset สูงสุด %s ตัว, รวมถึงคำนำหน้า',
 
-    'Email Credentials' => 'Email Credentials',
+    'Email Credentials' => 'ข้อมูลการใช้อีเมล',
 );

From d2d6b85d43a7b6afb96cf4d14de96638bae14908 Mon Sep 17 00:00:00 2001
From: Phinitnan Chanasabaeng <phinitnan_c@xtony.us>
Date: Tue, 7 Aug 2018 14:02:36 +0700
Subject: [PATCH 0180/2300] Fixed missing NGINX rewrite rule for Drupal 7 & 8

---
 install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl  | 4 ++++
 install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl   | 4 ++++
 install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl  | 4 ++++
 install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl   | 6 +++++-
 install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl  | 4 ++++
 install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl   | 4 ++++
 install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl  | 4 ++++
 install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl   | 6 +++++-
 install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl     | 4 ++++
 install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl      | 4 ++++
 install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl     | 4 ++++
 install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl      | 6 +++++-
 install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl     | 4 ++++
 install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl      | 4 ++++
 install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl     | 4 ++++
 install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl      | 6 +++++-
 install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl     | 4 ++++
 install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl      | 4 ++++
 install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl     | 4 ++++
 install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl      | 6 +++++-
 .../ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 .../ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 .../ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 .../ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 .../ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 .../ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 .../ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 .../ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 .../ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 .../ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 .../ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 .../ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 .../ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl   | 4 ++++
 .../ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl    | 4 ++++
 .../ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl   | 4 ++++
 .../ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl    | 6 +++++-
 76 files changed, 323 insertions(+), 19 deletions(-)

diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl b/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl b/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl b/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl b/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl
index c9729795..14f0c833 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -44,6 +44,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..bdf97f65 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -48,6 +48,10 @@ server {
         return 404;
     }        
 
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;
     }
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl
index c9729795..6d0e5bd6 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -42,7 +42,11 @@ server {
     location ~ /vendor/.*\.php$ {
         deny all;
         return 404;
-    }        
+    }  
+    
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }          
 
     location ~ ^/sites/.*/files/styles/ {
         try_files $uri @rewrite;

From 0e484587a84c74293aa02779f85934f22a575ea2 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 9 Aug 2018 17:42:47 +0300
Subject: [PATCH 0181/2300] Added back policy.d block for daeomon autostart on
 install

---
 install/vst-install-ubuntu.sh | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index a17517e3..bb74295b 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -626,15 +626,15 @@ fi
 # Updating system
 apt-get update
 
-# Disabling daemon autostart /usr/share/doc/sysv-rc/README.policy-rc.d.gz
-#echo -e '#!/bin/sh \nexit 101' > /usr/sbin/policy-rc.d
-#chmod a+x /usr/sbin/policy-rc.d
+# Disabling daemon autostart on apt-get install
+echo -e '#!/bin/sh\nexit 101' > /usr/sbin/policy-rc.d
+chmod a+x /usr/sbin/policy-rc.d
 
 # Installing apt packages
 apt-get -y install $software
 check_result $? "apt-get install failed"
 
-# Restoring policy
+# Restoring autostart policy
 rm -f /usr/sbin/policy-rc.d
 
 
@@ -912,7 +912,7 @@ if [ -z "$ZONE" ]; then
     ZONE='UTC'
 fi
 for pconf in $(find /etc/php* -name php.ini); do
-    sed -i "s/;date.timezone =/date.timezone = $ZONE/g" $pconf
+    sed -i "s%;date.timezone =%date.timezone = $ZONE%g" $pconf
     sed -i 's%_open_tag = Off%_open_tag = On%g' $pconf
 done
 
@@ -1129,8 +1129,8 @@ if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
     fi
     cp -f $vestacp/roundcube/main.inc.php /etc/roundcube/
     cp -f  $vestacp/roundcube/db.inc.php /etc/roundcube/
-    chmod 640 /etc/roundcube/debian-db-roundcube.php
-    chown root:www-data /etc/roundcube/debian-db-roundcube.php
+    chmod 640 /etc/roundcube/debian-db*
+    chown root:www-data /etc/roundcube/debian-db*
     cp -f $vestacp/roundcube/vesta.php \
         /usr/share/roundcube/plugins/password/drivers/
     cp -f $vestacp/roundcube/config.inc.php /etc/roundcube/plugins/password/

From 287da0f336e00704dbd8bb7fb2a053ff3e276e98 Mon Sep 17 00:00:00 2001
From: Phinitnan Chanasabaeng <phinitnan_c@xtony.us>
Date: Sat, 11 Aug 2018 16:01:41 +0700
Subject: [PATCH 0182/2300] Reworked on Drupal's nginx template.

---
 .../templates/web/nginx/php5-fpm/drupal6.stpl |  92 +++++++---------
 .../templates/web/nginx/php5-fpm/drupal6.tpl  |  90 +++++++--------
 .../templates/web/nginx/php5-fpm/drupal7.stpl | 102 ++++++++---------
 .../templates/web/nginx/php5-fpm/drupal7.tpl  |  94 +++++++---------
 .../templates/web/nginx/php5-fpm/drupal8.stpl | 103 +++++++++---------
 .../templates/web/nginx/php5-fpm/drupal8.tpl  | 103 +++++++++---------
 .../templates/web/nginx/php5-fpm/drupal6.stpl |  92 +++++++---------
 .../templates/web/nginx/php5-fpm/drupal6.tpl  |  90 +++++++--------
 .../templates/web/nginx/php5-fpm/drupal7.stpl | 102 ++++++++---------
 .../templates/web/nginx/php5-fpm/drupal7.tpl  |  94 +++++++---------
 .../templates/web/nginx/php5-fpm/drupal8.stpl | 103 +++++++++---------
 .../templates/web/nginx/php5-fpm/drupal8.tpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../9/templates/web/nginx/php-fpm/drupal6.tpl |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../9/templates/web/nginx/php-fpm/drupal7.tpl |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../9/templates/web/nginx/php-fpm/drupal8.tpl | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../5/templates/web/nginx/php-fpm/drupal6.tpl |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../5/templates/web/nginx/php-fpm/drupal7.tpl |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../5/templates/web/nginx/php-fpm/drupal8.tpl | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../6/templates/web/nginx/php-fpm/drupal6.tpl |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../6/templates/web/nginx/php-fpm/drupal7.tpl |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../6/templates/web/nginx/php-fpm/drupal8.tpl | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../7/templates/web/nginx/php-fpm/drupal6.tpl |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../7/templates/web/nginx/php-fpm/drupal7.tpl |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../7/templates/web/nginx/php-fpm/drupal8.tpl | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  92 +++++++---------
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  90 +++++++--------
 .../templates/web/nginx/php-fpm/drupal7.stpl  | 102 ++++++++---------
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  94 +++++++---------
 .../templates/web/nginx/php-fpm/drupal8.stpl  | 103 +++++++++---------
 .../templates/web/nginx/php-fpm/drupal8.tpl   | 103 +++++++++---------
 114 files changed, 5073 insertions(+), 6023 deletions(-)

diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal6.stpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal6.stpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal6.tpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal6.tpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl b/install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal6.stpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal6.stpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal6.tpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal6.tpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl b/install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal6.stpl b/install/debian/9/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal6.tpl b/install/debian/9/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl b/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl b/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl b/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl b/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal6.stpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal6.tpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl b/install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal6.stpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal6.tpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl b/install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal6.stpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal6.tpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl b/install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..9d984000 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -10,63 +10,53 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri @rewrite;
-    }
-
+   
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }
-    
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
         try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }    
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.tpl
index d1096bff..0ae7568b 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.tpl
@@ -7,62 +7,52 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-
-    location / {
-        try_files $uri @rewrite;
-    }
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
     
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }    
+        try_files $uri @rewrite; 
 
-    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
 
-    location ~ ^/sites/.*/files/imagecache/ {
-        try_files $uri @rewrite;
-    }
-        
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;             
-        include /etc/nginx/fastcgi_params;
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
index bdf97f65..0d7930fa 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -11,66 +11,56 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
-
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
-
-    location ~ ^(/[a-z\-]+)?/system/files/ {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
     
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl
index 14f0c833..6b41f319 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.tpl
@@ -7,66 +7,56 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
         try_files $uri /index.php?$query_string;
-    }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
     }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
index bdf97f65..6fd64db6 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -11,67 +11,62 @@ server {
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-    }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }        
-
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
     }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
-    
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl
index 6d0e5bd6..452aa9e6 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.tpl
@@ -7,67 +7,62 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    location = /favicon.ico {
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location ~* \.(txt|log)$ {
-        allow 192.168.0.0/16;
-        deny all;
-    }
-
-    location ~ \..*/.*\.php$ {
-        return 403;
-        }
-
-    location ~ ^/sites/.*/private/ {
-        return 403;
-    }
-    
-    location ~ ^/sites/[^/]+/files/.*\.php$ {
-        deny all;
-    }
-    
-    location / {
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ /vendor/.*\.php$ {
-        deny all;
-        return 404;
-    }  
-    
     location @rewrite {
         rewrite ^/(.*)$ /index.php?q=$1;
-    }          
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^/sites/.*/files/styles/ {
-        try_files $uri @rewrite;
-    }
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
 
-    location ~ ^(/[a-z\-]+)?/system/files/ {
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
         try_files $uri /index.php?$query_string;
-    }
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
 
-    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
-        try_files $uri @rewrite;
-        expires max;
-        log_not_found off;
-    }
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
 
-    location ~ '\.php$|^/update.php' {
-        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_pass %backend_lsnr%;
-        include         /etc/nginx/fastcgi_params;
-    }
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
 
     error_page  403 /error/404.html;
     error_page  404 /error/404.html;

From 563a9d8b10243f5627f14ced6060867548b57380 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 12 Aug 2018 03:17:01 +0200
Subject: [PATCH 0183/2300] Avoid blocking v-backup-user because of already
 dumped db

Well, in one db.conf I found duplicated entry for the same database.

root@btvc:~# cat /usr/local/vesta/data/users/btvc2011/db.conf
DB='btvc2011_cart' DBUSER='btvc2011_9091dn' MD5='*' HOST='localhost' TYPE='mysql' CHARSET='UTF8' U_DISK='1' SUSPENDED='no' TIME='' DATE=''
DB='btvc2011_cart' DBUSER='btvc2011_admin' MD5='*' HOST='localhost' TYPE='mysql' CHARSET='UTF8' U_DISK='0' SUSPENDED='no' TIME='' DATE=''
DB='btvc2011_cart' DBUSER='btvc2011_david' MD5='*' HOST='localhost' TYPE='mysql' CHARSET='UTF8' U_DISK='0' SUSPENDED='no' TIME='' DATE=''
DB='btvc2011_cart' DBUSER='btvc2011_djn' MD5='*' HOST='localhost' TYPE='mysql' CHARSET='UTF8' U_DISK='0' SUSPENDED='no' TIME='' DATE=''
DB='btvc2011_cart' DBUSER='btvc2011_jd' MD5='*' HOST='localhost' TYPE='mysql' CHARSET='UTF8' U_DISK='0' SUSPENDED='no' TIME='' DATE=''
DB='btvc2011_cart' DBUSER='btvc2011_oscar' MD5='*' HOST='localhost' TYPE='mysql' CHARSET='UTF8' U_DISK='0' SUSPENDED='no' TIME='' DATE=''

Obviously different users has access to the same database.
I know that this is impossible to create in Vesta.
But @Skamasle thirt-party script for importing cPanels backup obviously CAN do that... and many people use that cPanel importer.

This fix will avoid databases that are already dumped.
Without this fix backup script get stuck on stdin waiting for:
gzip: /backup/tmp.4YlV9Yr4m5/db/btvc2011_cart/btvc2011_cart.mysql.sql.gz already exists; do you wish to overwrite (y or n)?
---
 bin/v-backup-user | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index bc57cafc..b9fa8420 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -393,13 +393,15 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB" != '*' ]; then
 
         dump="$tmpdir/db/$database/$database.$TYPE.sql"
         grants="$tmpdir/db/$database/conf/$database.$TYPE.$DBUSER"
-        case $TYPE in
-            mysql) dump_mysql_database ;;
-            pgsql) dump_pgsql_database ;;
-        esac
+        if [ ! -f "$dump" ]; then
+            case $TYPE in
+                mysql) dump_mysql_database ;;
+                pgsql) dump_pgsql_database ;;
+            esac
 
-        # Compress dump
-        gzip -$BACKUP_GZIP $dump
+            # Compress dump
+            gzip -$BACKUP_GZIP $dump
+        fi
     done
 
     # Print total

From df7cccac4cc1d1f7fc3aef1b4524c18d9666f00f Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 12 Aug 2018 04:25:18 +0200
Subject: [PATCH 0184/2300] Little fix for previous commit

see https://github.com/serghey-rodin/vesta/commit/563a9d8b10243f5627f14ced6060867548b57380
---
 bin/v-backup-user | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index b9fa8420..f9569aa4 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -392,8 +392,9 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB" != '*' ]; then
         grep "DB='$database'" $conf > vesta/db.conf
 
         dump="$tmpdir/db/$database/$database.$TYPE.sql"
+        dumpgz="$tmpdir/db/$database/$database.$TYPE.sql.gz"
         grants="$tmpdir/db/$database/conf/$database.$TYPE.$DBUSER"
-        if [ ! -f "$dump" ]; then
+        if [ ! -f "$dumpgz" ]; then
             case $TYPE in
                 mysql) dump_mysql_database ;;
                 pgsql) dump_pgsql_database ;;

From ebc67f647843d23f87a4bbb60a2f504b6d10b421 Mon Sep 17 00:00:00 2001
From: Chernyavskiy Leonid <chernyavskiy.leonid@gmail.com>
Date: Fri, 24 Aug 2018 14:05:37 +0700
Subject: [PATCH 0185/2300] Fix invalid extension replace in add_web_config

Do not use globbing, because it kills too many characters.
Use conditionals and search at the end of the line instead.
---
 func/domain.sh | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/func/domain.sh b/func/domain.sh
index cc66aecb..59823b28 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -215,7 +215,11 @@ add_web_config() {
         fi
     fi
 
-    trigger="${2/.*pl/.sh}"
+    trigger="${2/%.tpl/.sh}"
+    if [[ "$2" =~ stpl$ ]]; then
+        trigger="${2/%.stpl/.sh}"
+    fi
+
     if [ -x "$WEBTPL/$1/$WEB_BACKEND/$trigger" ]; then
         $WEBTPL/$1/$WEB_BACKEND/$trigger \
             $user $domain $local_ip $HOMEDIR \

From d2764a6481a08d7aabdadc30f0ee9c08d5ec6c65 Mon Sep 17 00:00:00 2001
From: Skull Writter <7103685+skullwritter@users.noreply.github.com>
Date: Fri, 31 Aug 2018 15:35:21 +0000
Subject: [PATCH 0186/2300] Missing function: is_format_valid_shell

---
 func/main.sh | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/func/main.sh b/func/main.sh
index be626702..e78e6edf 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -805,7 +805,16 @@ is_password_format_valid() {
         check_result $E_INVALID "invalid password format :: $1"
     fi
 }
-
+# Missing function - 
+# Before: validate_format_shell 
+# After: is_format_valid_shell
+is_format_valid_shell() {	
+    if [ -z "$(grep -w $1 /etc/shells)" ]; then	
+        echo "Error: shell $1 is not valid"	
+        log_event "$E_INVALID" "$EVENT"	
+        exit $E_INVALID	
+    fi	
+}
 # Format validation controller
 is_format_valid() {
     for arg_name in $*; do
@@ -872,7 +881,9 @@ is_format_valid() {
                 restart)        is_boolean_format_valid "$arg" 'restart' ;;
                 rtype)          is_dns_type_format_valid "$arg" ;;
                 rule)           is_int_format_valid "$arg" "rule id" ;;
-                soa)            is_domain_format_valid "$arg" 'SOA' ;;
+                soa)            is_domain_format_valid "$arg" 'SOA' ;;	
+                #missing command: is_format_valid_shell
+                shell)          is_format_valid_shell "$arg" ;;
                 stats_pass)     is_password_format_valid "$arg" ;;
                 stats_user)     is_user_format_valid "$arg" "$arg_name" ;;
                 template)       is_object_format_valid "$arg" "$arg_name" ;;

From 1ba6d24189a463cf6577184ea118c6e2c914564d Mon Sep 17 00:00:00 2001
From: Skull Writter <7103685+skullwritter@users.noreply.github.com>
Date: Fri, 31 Aug 2018 15:49:32 +0000
Subject: [PATCH 0187/2300] Typo in function name

---
 bin/v-add-user-package | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/bin/v-add-user-package b/bin/v-add-user-package
index 23f42725..0cab1a3d 100755
--- a/bin/v-add-user-package
+++ b/bin/v-add-user-package
@@ -30,37 +30,37 @@ is_package_new() {
 is_package_consistent() {
     source $pkg_dir/$package.pkg
     if [ "$WEB_DOMAINS" != 'unlimited' ]; then
-        is_format_valid_int $WEB_DOMAINS 'WEB_DOMAINS'
+        is_int_format_valid $WEB_DOMAINS 'WEB_DOMAINS'
     fi
     if [ "$WEB_ALIASES" != 'unlimited' ]; then
-        is_format_valid_int $WEB_ALIASES 'WEB_ALIASES'
+        is_int_format_valid $WEB_ALIASES 'WEB_ALIASES'
     fi
     if [ "$DNS_DOMAINS" != 'unlimited' ]; then
-        is_format_valid_int $DNS_DOMAINS 'DNS_DOMAINS'
+        is_int_format_valid $DNS_DOMAINS 'DNS_DOMAINS'
     fi
     if [ "$DNS_RECORDS" != 'unlimited' ]; then
-        is_format_valid_int $DNS_RECORDS 'DNS_RECORDS'
+        is_int_format_valid $DNS_RECORDS 'DNS_RECORDS'
     fi
     if [ "$MAIL_DOMAINS" != 'unlimited' ]; then
-        is_format_valid_int $MAIL_DOMAINS 'MAIL_DOMAINS'
+        is_int_format_valid $MAIL_DOMAINS 'MAIL_DOMAINS'
     fi
     if [ "$MAIL_ACCOUNTS" != 'unlimited' ]; then
-        is_format_valid_int $MAIL_ACCOUNTS 'MAIL_ACCOUNTS'
+        is_int_format_valid $MAIL_ACCOUNTS 'MAIL_ACCOUNTS'
     fi
     if [ "$DATABASES" != 'unlimited' ]; then
-        is_format_valid_int $DATABASES 'DATABASES'
+        is_int_format_valid $DATABASES 'DATABASES'
     fi
     if [ "$CRON_JOBS" != 'unlimited' ]; then
-        is_format_valid_int $CRON_JOBS 'CRON_JOBS'
+        is_int_format_valid $CRON_JOBS 'CRON_JOBS'
     fi
     if [ "$DISK_QUOTA" != 'unlimited' ]; then
-        is_format_valid_int $DISK_QUOTA 'DISK_QUOTA'
+        is_int_format_valid $DISK_QUOTA 'DISK_QUOTA'
     fi
     if [ "$BANDWIDTH" != 'unlimited' ]; then
-        is_format_valid_int $BANDWIDTH 'BANDWIDTH'
+        is_int_format_valid $BANDWIDTH 'BANDWIDTH'
     fi
     if [ "$BACKUPS" != 'unlimited' ]; then
-        is_format_valid_int $BACKUPS 'BACKUPS'
+        is_int_format_valid $BACKUPS 'BACKUPS'
     fi
     is_format_valid_shell $SHELL
 }

From 8d4a2c170759ef0dfa5468f28c5715b62aa516cf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Sep 2018 02:07:19 +0200
Subject: [PATCH 0188/2300] Block backup if current hour is after 8 AM

---
 bin/v-backup-user | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index f9569aa4..07064eb3 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -39,6 +39,15 @@ is_backup_enabled
 #                       Action                             #
 #----------------------------------------------------------#
 
+# block backup if current hour is after 8 AM
+if pgrep -x "v-backup-users" > /dev/null
+then
+hour=$(date +"%H");
+    while [ "$hour" -gt "8" ]; do
+        sleep 300
+    done
+fi
+
 # Set backup directory if undefined
 if [ -z "$BACKUP" ]; then
     BACKUP=/backup

From fc187b38637a1101abf235fba80f2929fd16d5dd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Sep 2018 21:40:01 +0200
Subject: [PATCH 0189/2300] Block backup if current hour is after 6 AM

---
 bin/v-backup-user | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 07064eb3..9f9e2c37 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -39,11 +39,11 @@ is_backup_enabled
 #                       Action                             #
 #----------------------------------------------------------#
 
-# block backup if current hour is after 8 AM
+# block backup if current hour is after 6 AM
 if pgrep -x "v-backup-users" > /dev/null
 then
 hour=$(date +"%H");
-    while [ "$hour" -gt "8" ]; do
+    while [ "$hour" -gt "6" ]; do
         sleep 300
     done
 fi

From d6c79c7d7ee3b5cbc04b235798af9e6d1a7a62f5 Mon Sep 17 00:00:00 2001
From: Dmitry Bannik <dima-bannik@mail.ru>
Date: Mon, 3 Sep 2018 21:55:46 +0300
Subject: [PATCH 0190/2300] bugfix nginx templates

---
 install/ubuntu/12.04/templates/web/nginx/http2.stpl      | 6 +++---
 install/ubuntu/12.04/templates/web/nginx/http2.tpl       | 6 +++---
 install/ubuntu/12.10/templates/web/nginx/http2.stpl      | 6 +++---
 install/ubuntu/12.10/templates/web/nginx/http2.tpl       | 6 +++---
 install/ubuntu/13.04/templates/web/nginx/http2.stpl      | 6 +++---
 install/ubuntu/13.04/templates/web/nginx/http2.tpl       | 6 +++---
 install/ubuntu/13.10/templates/web/nginx/http2.stpl      | 6 +++---
 install/ubuntu/13.10/templates/web/nginx/http2.tpl       | 6 +++---
 install/ubuntu/14.04/templates/web/nginx/http2.stpl      | 6 +++---
 install/ubuntu/14.04/templates/web/nginx/http2.tpl       | 6 +++---
 install/ubuntu/14.10/templates/web/nginx/http2.stpl      | 6 +++---
 install/ubuntu/14.10/templates/web/nginx/http2.tpl       | 6 +++---
 install/ubuntu/15.04/templates/web/nginx/http2.stpl      | 6 +++---
 install/ubuntu/15.04/templates/web/nginx/http2.tpl       | 6 +++---
 install/ubuntu/15.10/templates/web/nginx/http2.stpl      | 6 +++---
 install/ubuntu/15.10/templates/web/nginx/http2.tpl       | 6 +++---
 install/ubuntu/16.04/templates/web/nginx/http2.stpl      | 6 +++---
 install/ubuntu/16.04/templates/web/nginx/http2.tpl       | 6 +++---
 install/ubuntu/16.10/templates/web/nginx/http2.stpl      | 6 +++---
 install/ubuntu/16.10/templates/web/nginx/http2.tpl       | 6 +++---
 install/ubuntu/17.04/templates/web/nginx/http2.stpl      | 6 +++---
 install/ubuntu/17.04/templates/web/nginx/http2.tpl       | 6 +++---
 install/ubuntu/17.10/templates/web/nginx/http2.stpl      | 6 +++---
 install/ubuntu/17.10/templates/web/nginx/http2.tpl       | 6 +++---
 install/ubuntu/18.04/templates/web/nginx/caching.stpl    | 3 +--
 install/ubuntu/18.04/templates/web/nginx/default.stpl    | 3 +--
 install/ubuntu/18.04/templates/web/nginx/hosting.stpl    | 3 +--
 install/ubuntu/18.04/templates/web/nginx/http2.stpl      | 9 ++++-----
 install/ubuntu/18.04/templates/web/nginx/http2.tpl       | 6 +++---
 .../templates/web/nginx/php-fpm/cms_made_simple.stpl     | 3 +--
 .../18.04/templates/web/nginx/php-fpm/codeigniter2.stpl  | 3 +--
 .../18.04/templates/web/nginx/php-fpm/codeigniter3.stpl  | 3 +--
 .../templates/web/nginx/php-fpm/datalife_engine.stpl     | 3 +--
 .../18.04/templates/web/nginx/php-fpm/default.stpl       | 3 +--
 .../18.04/templates/web/nginx/php-fpm/dokuwiki.stpl      | 3 +--
 .../18.04/templates/web/nginx/php-fpm/drupal6.stpl       | 3 +--
 .../18.04/templates/web/nginx/php-fpm/drupal7.stpl       | 3 +--
 .../18.04/templates/web/nginx/php-fpm/drupal8.stpl       | 3 +--
 .../ubuntu/18.04/templates/web/nginx/php-fpm/joomla.stpl | 3 +--
 .../18.04/templates/web/nginx/php-fpm/laravel.stpl       | 3 +--
 .../18.04/templates/web/nginx/php-fpm/magento.stpl       | 3 +--
 .../ubuntu/18.04/templates/web/nginx/php-fpm/modx.stpl   | 3 +--
 .../ubuntu/18.04/templates/web/nginx/php-fpm/moodle.stpl | 3 +--
 .../ubuntu/18.04/templates/web/nginx/php-fpm/no-php.stpl | 3 +--
 .../ubuntu/18.04/templates/web/nginx/php-fpm/odoo.stpl   | 3 +--
 .../18.04/templates/web/nginx/php-fpm/opencart.stpl      | 3 +--
 .../18.04/templates/web/nginx/php-fpm/owncloud.stpl      | 3 +--
 .../ubuntu/18.04/templates/web/nginx/php-fpm/piwik.stpl  | 3 +--
 .../18.04/templates/web/nginx/php-fpm/pyrocms.stpl       | 3 +--
 .../18.04/templates/web/nginx/php-fpm/wordpress.stpl     | 3 +--
 .../18.04/templates/web/nginx/php-fpm/wordpress2.stpl    | 3 +--
 .../templates/web/nginx/php-fpm/wordpress2_rewrite.stpl  | 3 +--
 52 files changed, 105 insertions(+), 132 deletions(-)

diff --git a/install/ubuntu/12.04/templates/web/nginx/http2.stpl b/install/ubuntu/12.04/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/12.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/12.04/templates/web/nginx/http2.tpl b/install/ubuntu/12.04/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/12.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/12.10/templates/web/nginx/http2.stpl b/install/ubuntu/12.10/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/12.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/12.10/templates/web/nginx/http2.tpl b/install/ubuntu/12.10/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/12.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/13.04/templates/web/nginx/http2.stpl b/install/ubuntu/13.04/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/13.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/13.04/templates/web/nginx/http2.tpl b/install/ubuntu/13.04/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/13.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/13.10/templates/web/nginx/http2.stpl b/install/ubuntu/13.10/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/13.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/13.10/templates/web/nginx/http2.tpl b/install/ubuntu/13.10/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/13.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/14.04/templates/web/nginx/http2.stpl b/install/ubuntu/14.04/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/14.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/14.04/templates/web/nginx/http2.tpl b/install/ubuntu/14.04/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/14.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/14.10/templates/web/nginx/http2.stpl b/install/ubuntu/14.10/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/14.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/14.10/templates/web/nginx/http2.tpl b/install/ubuntu/14.10/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/14.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/15.04/templates/web/nginx/http2.stpl b/install/ubuntu/15.04/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/15.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/15.04/templates/web/nginx/http2.tpl b/install/ubuntu/15.04/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/15.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/15.10/templates/web/nginx/http2.stpl b/install/ubuntu/15.10/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/15.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/15.10/templates/web/nginx/http2.tpl b/install/ubuntu/15.10/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/15.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/16.04/templates/web/nginx/http2.stpl b/install/ubuntu/16.04/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/16.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/16.04/templates/web/nginx/http2.tpl b/install/ubuntu/16.04/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/16.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/16.10/templates/web/nginx/http2.stpl b/install/ubuntu/16.10/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/16.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/16.10/templates/web/nginx/http2.tpl b/install/ubuntu/16.10/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/16.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/17.04/templates/web/nginx/http2.stpl b/install/ubuntu/17.04/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/17.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/17.04/templates/web/nginx/http2.tpl b/install/ubuntu/17.04/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/17.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/17.10/templates/web/nginx/http2.stpl b/install/ubuntu/17.10/templates/web/nginx/http2.stpl
index 76dd2f8e..72e72a90 100644
--- a/install/ubuntu/17.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/http2.stpl
@@ -4,14 +4,14 @@ server {
     ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/17.10/templates/web/nginx/http2.tpl b/install/ubuntu/17.10/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/17.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/18.04/templates/web/nginx/caching.stpl b/install/ubuntu/18.04/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/18.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
diff --git a/install/ubuntu/18.04/templates/web/nginx/default.stpl b/install/ubuntu/18.04/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/18.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
diff --git a/install/ubuntu/18.04/templates/web/nginx/hosting.stpl b/install/ubuntu/18.04/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/18.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
diff --git a/install/ubuntu/18.04/templates/web/nginx/http2.stpl b/install/ubuntu/18.04/templates/web/nginx/http2.stpl
index 76dd2f8e..f225becd 100644
--- a/install/ubuntu/18.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/http2.stpl
@@ -1,17 +1,16 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %sdocroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/18.04/templates/web/nginx/http2.tpl b/install/ubuntu/18.04/templates/web/nginx/http2.tpl
index c1fec114..4d5c774b 100644
--- a/install/ubuntu/18.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/http2.tpl
@@ -1,14 +1,14 @@
 server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/httpd/domains/%domain%.error.log error;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           %docroot%;
-            access_log     /var/log/httpd/domains/%domain%.log combined;
-            access_log     /var/log/httpd/domains/%domain%.bytes bytes;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
             try_files      $uri @fallback;
         }
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/cms_made_simple.stpl
index d85bcce3..003e9180 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/cms_made_simple.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter2.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter2.stpl
index 9c24c3ea..51f1f408 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter2.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter2.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter3.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter3.stpl
index d7186314..e8dd8bf6 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter3.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/codeigniter3.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/datalife_engine.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/datalife_engine.stpl
index 4f0b9ec7..96495ee8 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/datalife_engine.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/datalife_engine.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/default.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/default.stpl
index 5cb55311..38de83d2 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/default.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/default.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/dokuwiki.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/dokuwiki.stpl
index f85032ba..c9387bfb 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/dokuwiki.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/dokuwiki.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..93f8c55a 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal6.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..917c0c80 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal7.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..917c0c80 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/drupal8.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/joomla.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/joomla.stpl
index 704405f3..886b586e 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/joomla.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/joomla.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/laravel.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/laravel.stpl
index 477f6f01..8e6e8774 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/laravel.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/laravel.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%/public;
     index       index.php index.html index.htm;
@@ -8,7 +8,6 @@ server {
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/magento.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/magento.stpl
index fdab43aa..5d05ea72 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/magento.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/magento.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
 
     root        %sdocroot%/pub;
@@ -9,7 +9,6 @@ server {
     error_page  404 403 = /errors/404.php;
     add_header  "X-UA-Compatible" "IE=Edge";
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/modx.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/modx.stpl
index f410ab77..23ce8eb8 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/modx.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/modx.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 #   if you need to rewrite www to non-www uncomment bellow
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/moodle.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/moodle.stpl
index f15a68c5..10629c65 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/moodle.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/moodle.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/no-php.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/no-php.stpl
index bc8b53a3..7b3aff96 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/no-php.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/no-php.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/odoo.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/odoo.stpl
index d6697d7a..223eb97a 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/odoo.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/odoo.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/opencart.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/opencart.stpl
index 908b9aeb..5b6e55e8 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/opencart.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/opencart.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/owncloud.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/owncloud.stpl
index 891566b9..b43fdc75 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/owncloud.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/owncloud.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/piwik.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/piwik.stpl
index 78c1bb78..0a4a412f 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/piwik.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/piwik.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..c9f91854 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%/public;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress.stpl
index 5cb55311..38de83d2 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2.stpl
index e0aeb524..39cce361 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..264ca01a 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %docroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From ff8ef7955ad1870f04b1bd02e128d7b44e1f3d33 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 7 Sep 2018 14:32:10 +0200
Subject: [PATCH 0191/2300] Adding DNS template listbox to user template
 edit_dns

---
 web/templates/user/edit_dns.html | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/web/templates/user/edit_dns.html b/web/templates/user/edit_dns.html
index b8c11723..60557694 100644
--- a/web/templates/user/edit_dns.html
+++ b/web/templates/user/edit_dns.html
@@ -61,6 +61,27 @@
                                     <?php print __('IP Address');?>
                                 </td>
                             </tr>
+                            <tr>
+                                <td class="vst-text input-label">
+                                    <?php print __('Template') . "<span class='optional'>" . strtoupper($_SESSION['DNS_SYSTEM']) . "</span>";?>
+                                </td>
+                            </tr>
+                            <tr>
+                                <td>
+                                    <select class="vst-list" name="v_template">
+                                        <?php
+                                            foreach ($templates as $key => $value) {
+                                                echo "\t\t\t\t<option value=\"".htmlentities($value)."\"";
+                                                $svalue = "'".$value."'";
+                                                if ((!empty($v_template)) && ( $value == $v_template ) || ($svalue == $v_template)){
+                                                    echo ' selected' ;
+                                                }
+                                                echo ">".htmlentities($value)."</option>\n";
+                                            }
+                                        ?>
+                                    </select>
+                                </td>
+                            </tr>
                             <tr>
                                 <td>
                                     <input type="text" size="20" class="vst-input" name="v_ip" value="<?=htmlentities(trim($v_ip, "'"))?>">

From 55a593c475ab06e6a7e95c2caf80d7c6c81670fa Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 7 Sep 2018 14:36:48 +0200
Subject: [PATCH 0192/2300] Fix for user dns_edit template

---
 web/templates/user/edit_dns.html | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/templates/user/edit_dns.html b/web/templates/user/edit_dns.html
index 60557694..78ef084a 100644
--- a/web/templates/user/edit_dns.html
+++ b/web/templates/user/edit_dns.html
@@ -61,6 +61,11 @@
                                     <?php print __('IP Address');?>
                                 </td>
                             </tr>
+                            <tr>
+                                <td>
+                                    <input type="text" size="20" class="vst-input" name="v_ip" value="<?=htmlentities(trim($v_ip, "'"))?>">
+                                </td>
+                            </tr>
                             <tr>
                                 <td class="vst-text input-label">
                                     <?php print __('Template') . "<span class='optional'>" . strtoupper($_SESSION['DNS_SYSTEM']) . "</span>";?>
@@ -82,11 +87,6 @@
                                     </select>
                                 </td>
                             </tr>
-                            <tr>
-                                <td>
-                                    <input type="text" size="20" class="vst-input" name="v_ip" value="<?=htmlentities(trim($v_ip, "'"))?>">
-                                </td>
-                            </tr>
                             <tr>
                                 <td class="vst-text input-label">
                                     <?php print __('Expiration Date');?><span class="optional">(<?=__('YYYY-MM-DD');?>)</span>

From e7daba868b7c40e813b7a1eeae805d35d3880fad Mon Sep 17 00:00:00 2001
From: Seia Soto <seriumium@outlook.kr>
Date: Sat, 8 Sep 2018 23:23:03 +0900
Subject: [PATCH 0193/2300] Update translations

---
 web/inc/i18n/ko.php | 46 ++++++++++++++++++++++-----------------------
 1 file changed, 23 insertions(+), 23 deletions(-)

diff --git a/web/inc/i18n/ko.php b/web/inc/i18n/ko.php
index a81db461..a032f265 100644
--- a/web/inc/i18n/ko.php
+++ b/web/inc/i18n/ko.php
@@ -26,11 +26,11 @@ $LANG['ko'] = array(
     'BACKUP'  => '백업',
 
     'LOGIN'  => '로그인',
-    'RESET PASSWORD'  => '비밀번호 초기화',
+    'RESET PASSWORD'  => '비밀번호 재설정',
     'SEARCH'  => '검색',
     'PACKAGE'  => '패키지',
     'RRD'  => 'RRD',
-    'STATS'  => 'STATS',
+    'STATS'  => '상태정보',
     'LOG'  => '기록',
     'UPDATES'  => '업데이트',
     'FIREWALL'  => '방화벽',
@@ -139,7 +139,7 @@ $LANG['ko'] = array(
     'Editing Firewall Rule' => '방화벽 규칙 편집',
     'Adding IP Address to Banlist' => 'IP 주소를 차단 목록에 추가',
 
-    'active'  => '활성',
+    'active'  => '활성화됨',
     'spnd'  => '정지됨',
     'suspended'  => '정지됨',
     'running'  => '작동중',
@@ -192,10 +192,10 @@ $LANG['ko'] = array(
     'backup exclusions' => '백업 예외',
     'template'  => '템플릿',
     'SSL Support'  => 'SSL 지원',
-    'SSL Home Directory'  => 'SSL 홈',
+    'SSL Home Directory'  => 'SSL 홈 디렉토리',
     'Lets Encrypt Support'  => 'Lets Encrypt 지원',
     'Lets Encrypt'  => 'Lets Encrypt',
-    'Your certificate will be automatically issued in 5 minutes' => '인증서는 5분 안에 자동으로 발급됩니다',
+    'Your certificate will be automatically issued in 5 minutes' => '인증서는 5분 안에 자동으로 발급될 것입니다',
     'Proxy Support'  => '프록시 지원',
     'Proxy Extensions'  => '프록시 확장',
     'Web Statistics'  => '웹 통계',
@@ -249,8 +249,8 @@ $LANG['ko'] = array(
     'APACHE2 Usage'  => 'APACHE2 사용',
     'HTTPD Usage'  => 'HTTPD 사용',
     'NGINX Usage'  => 'NGINX 사용',
-    'MySQL Usage on localhost'  => 'localhost에서의 MySQL 사용',
-    'PostgreSQL Usage on localhost'  => 'localhost에서의 PostgreSQL 사용',
+    'MySQL Usage on localhost'  => 'localhost에서 MySQL 사용',
+    'PostgreSQL Usage on localhost'  => 'localhost에서 PostgreSQL 사용',
     'Bandwidth Usage eth0'  => 'eth0 대역폭 사용',
     'Bandwidth Usage eth1'  => 'eth1 대역폭 사용',
     'Exim Usage'  => 'Exim 사용',
@@ -267,7 +267,7 @@ $LANG['ko'] = array(
     'ftp server'  => 'FTP 서버',
     'job scheduler'  => '스케줄러 ',
     'firewall'  => '방화벽',
-    'brute-force monitor'  => '무차별 공격 모니터',
+    'brute-force monitor'  => '무차별 대입 공격 모니터',
     'CPU'  => 'CPU',
     'Memory'  => '메모리',
     'Uptime'  => '가동 시간',
@@ -285,7 +285,7 @@ $LANG['ko'] = array(
     'Language'  => '언어',
     'First Name'  => '이름',
     'Last Name'  => '성',
-    'Send login credentials to email address'  => '이메일 주소로 로그인 정보를 보내기',
+    'Send login credentials to email address'  => '이메일 주소로 로그인 정보 전송',
     'Default Template'  => '기본 템플릿',
     'Default Name Servers'  => '기본 네임 서버',
     'Domain'  => '도메인',
@@ -322,7 +322,7 @@ $LANG['ko'] = array(
     'Minute'  => '분',
     'Command'  => '명령어',
     'Package Name'  => '패키지 이름',
-    'Netmask'  => '넷마크',
+    'Netmask'  => '넷마스크',
     'Interface'  => '인터페이스',
     'Shared'  => '공유된',
     'Assigned user'  => '부여 된 사용자',
@@ -356,7 +356,7 @@ $LANG['ko'] = array(
     'IP address'  => 'IP 주소',
     'netmask'  => '넷마스크',
     'interface'  => '인터페이스',
-    'assigned user'  => '부여 된 사용자',
+    'assigned user'  => '부여된 사용자',
     'ns1'  => 'NS1',
     'ns2'  => 'NS2',
     'user'  => '사용자',
@@ -386,7 +386,7 @@ $LANG['ko'] = array(
     'Port' => '포트',
     'Comment' => '댓글',
     'Banlist' => '차단 목록',
-    'ranges are acceptable' => '허용 가능한 범위',
+    'ranges are acceptable' => '허용할 수 있는 범위',
     'CIDR format is supported' => 'CIDR 형식이 지원됩니다',
     'ACCEPT' => '허용',
     'DROP' => '드롭',
@@ -474,18 +474,18 @@ $LANG['ko'] = array(
     'DELETE_DATABASE_CONFIRMATION' => '정말로 %s 데이터베이스를 삭제 하시겠습니까?',
     'SUSPEND_DATABASE_CONFIRMATION' => '정말로 %s 데이터베이스를 정지 시키시겠습니까?',
     'UNSUSPEND_DATABASE_CONFIRMATION' => '정말로 %s 데이터베이스의 정지를 해제 하시겠습니까?',
-    'DELETE_CRON_CONFIRMATION' => '정말로 Cron 작업을 삭제 하시려는게 맞습니까?',
-    'SUSPEND_CRON_CONFIRMATION' => '정말로 Cron 작업을 정지 시키시려는게 맞습니까?',
-    'UNSUSPEND_CRON_CONFIRMATION' => '정말로 Cron 작업의 정지를 해제 하시려는게 맞습니까?',
-    'DELETE_BACKUP_CONFIRMATION'  => '%s 백업을 삭제 하시려는게 맞습니까?',
-    'DELETE_EXCLUSION_CONFIRMATION' => '%s 예외를 삭제 하시려는게 맞습니까?',
+    'DELETE_CRON_CONFIRMATION' => '정말로 Cron 작업을 삭제 하시겠습니까?',
+    'SUSPEND_CRON_CONFIRMATION' => '정말로 Cron 작업을 정지 시키겠습니까?',
+    'UNSUSPEND_CRON_CONFIRMATION' => '정말로 Cron 작업의 정지를 해제 하시겠습니까?',
+    'DELETE_BACKUP_CONFIRMATION'  => '%s 백업을 삭제 하시겠습니까?',
+    'DELETE_EXCLUSION_CONFIRMATION' => '%s 예외를 삭제 하시겠습니까?',
     'DELETE_PACKAGE_CONFIRMATION'  => '정말로 %s 패키지를 삭제 하시겠습니까?',
     'DELETE_IP_CONFIRMATION'  => '정말로 %s IP 주소를 삭제 하시겠습니까?',
-    'DELETE_RULE_CONFIRMATION' => '정말로 #%s 규칙을 삭제하시려는게 맞습니까?',
-    'SUSPEND_RULE_CONFIRMATION' => '정말로 #%s 규칙을 정지 시키시려는게 맞습니까?',
-    'UNSUSPEND_RULE_CONFIRMATION' => '정말로 #%s 규칙의 정지를 해제 시키시려는게 맞습니까?',
+    'DELETE_RULE_CONFIRMATION' => '정말로 #%s 규칙을 삭제 하시겠습니까?',
+    'SUSPEND_RULE_CONFIRMATION' => '정말로 #%s 규칙을 정지 하시겠습니까?',
+    'UNSUSPEND_RULE_CONFIRMATION' => '정말로 #%s 규칙의 정지를 해제 하시겠습니까?',
     'LEAVE_PAGE_CONFIRMATION' => '페이지를 나가시겠습니까?',
-    'RESTART_CONFIRMATION' => '%s을/를 재시작 하시려는게 맞습니까?',
+    'RESTART_CONFIRMATION' => '%s을(를) 재시작 하시려는게 맞습니까?',
     'Welcome'  => '환영합니다',
     'LOGGED_IN_AS'  => '%s 사용자로 로그인 됨',
     'Error'  => 'Error',
@@ -735,7 +735,7 @@ $LANG['ko'] = array(
     'webalizer' => 'Webalizer',
     'awstats' => 'Awstats',
 
-    'Vesta SSL' => 'Vesta SSL',
+    'Vesta SSL' => 'Vesta 인증서',
     'SUBJECT' => '주체',
     'ALIASES' => '별칭',
     'NOT_BEFORE' => '유효 기간(시작)',
@@ -754,5 +754,5 @@ $LANG['ko'] = array(
     'maximum characters length, including prefix' => '최대 길이는 접두사를 포함하여 %s자입니다.',
 
     'Email Credentials' => '이메일 자격증명',
-    
+
 );

From 7f20521c5b51a030336cd286938296eb12b7f984 Mon Sep 17 00:00:00 2001
From: Skull Writter <7103685+skullwritter@users.noreply.github.com>
Date: Sat, 8 Sep 2018 14:32:11 +0000
Subject: [PATCH 0194/2300] Enable utf8mb4 charset

issue: #1698
---
 web/templates/admin/add_db.html | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/web/templates/admin/add_db.html b/web/templates/admin/add_db.html
index fb369af0..74903241 100644
--- a/web/templates/admin/add_db.html
+++ b/web/templates/admin/add_db.html
@@ -148,6 +148,8 @@
                                         <option value=latin5 <?php if ((!empty($v_charset)) && ( $v_charset == 'latin5')) echo 'selected';?> >latin5</option>
                                         <option value=armscii8 <?php if ((!empty($v_charset)) && ( $v_charset == 'armscii8')) echo 'selected';?> >armscii8</option>
                                         <option value=utf8 <?php if ((!empty($v_charset)) && ( $v_charset == 'utf8')) echo 'selected';?> <?php if (empty($v_charset)) echo 'selected';?> >utf8</option>
+                                        <option value=utf8mb4 <?php if ((!empty($v_charset)) && ( $v_charset == 'utf8mb4')) echo 'selected';?> >utf8mb4</option>
+
                                         <option value=ucs2 <?php if ((!empty($v_charset)) && ( $v_charset == 'ucs2')) echo 'selected';?> >ucs2</option>
                                         <option value=cp866 <?php if ((!empty($v_charset)) && ( $v_charset == 'cp866')) echo 'selected';?> >cp866</option>
                                         <option value=keybcs2 <?php if ((!empty($v_charset)) && ( $v_charset == 'keybcs2')) echo 'selected';?> >keybcs2</option>

From 5bd270591cf086dde275edb0a8ea7142eef00b54 Mon Sep 17 00:00:00 2001
From: Maksim Usmanov | Maks <skamasle@gmail.com>
Date: Sun, 9 Sep 2018 13:51:00 +0200
Subject: [PATCH 0195/2300] Fix function check_result

Check_error not defined
---
 install/vst-install-ubuntu.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index bb74295b..c0655bb2 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -236,7 +236,7 @@ fi
 
 # Checking root permissions
 if [ "x$(id -u)" != 'x0' ]; then
-    check_error 1 "Script can be run executed only by root"
+    check_result 1 "Script can be run executed only by root"
 fi
 
 # Checking admin user account

From 5420b2c95d581fe8135e37a6eba303e3b3e1885e Mon Sep 17 00:00:00 2001
From: myrevery <myrevery@yahoo.com>
Date: Mon, 10 Sep 2018 01:59:17 +0800
Subject: [PATCH 0196/2300] Update cn.php

Add new keyword and refine some details.
---
 web/inc/i18n/cn.php | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/web/inc/i18n/cn.php b/web/inc/i18n/cn.php
index d47587db..62147871 100644
--- a/web/inc/i18n/cn.php
+++ b/web/inc/i18n/cn.php
@@ -175,6 +175,7 @@ $LANG['cn'] = array(
     'User Directories' => '用户目录',
     'Template' => '模板',
     'Web Template' => 'Web模板',
+    'Backend Support' => '后端支持', //New Keyword for PHP-FPM in WEB page.
     'Backend Template' => '后端模板',
     'Proxy Template' => '代理模板',
     'DNS Template' => 'DNS模板',
@@ -265,6 +266,7 @@ $LANG['cn'] = array(
     'SSH Usage'  => 'SSH 用量',
     'reverse proxy'  => '反向代理',
     'web server'  => 'Web服务',
+    'backend server' => '后端服务', //New Keyword for PHP-FPM in SERVER page.
     'dns server'  => 'DNS服务',
     'mail server'  => '邮箱服务',
     'pop/imap server'  => 'POP/IMAP服务',
@@ -383,9 +385,9 @@ $LANG['cn'] = array(
     'ErrorLog' => '错误日志',
     'Download AccessLog' => '下载访问日志',
     'Download ErrorLog' => '下载错误日志',
-    'Country' => '国家',
-    '2 letter code' => '2位国家简码 如: 中国CN / 美国US',
-    'State / Province' => '州 / 省',
+    'Country' => '国家地区',
+    '2 letter code' => '采用 ISO 3166-1 二位代码 如: 中国CN / 美国US',
+    'State / Province' => '州 / 省级',
     'City / Locality' => '市 / 地区',
     'Organization' => '组织名称',
     'Action' => '操作',
@@ -719,10 +721,10 @@ $LANG['cn'] = array(
     'Run Command' => '运行指令于',
     'every month' => '每个月',
     'every odd month' => '每个奇数月',
-    'every even month' => '每隔 2 月',
+    'every even month' => '每个偶数月',
     'every day' => '每日',
     'every odd day' => '每个奇数日',
-    'every even day' => '每隔 2 日',
+    'every even day' => '每个偶数日',
     'weekdays (5 days)' => '工作日 (5天)',
     'weekend (2 days)' => '双休日 (2天)',
     'Monday' => '周一 ',
@@ -748,7 +750,7 @@ $LANG['cn'] = array(
     'NOT_BEFORE' => '有效期从',
     'NOT_AFTER' => '有效期至',
     'SIGNATURE' => '签名算法',
-    'PUB_KEY' => '密钥位数',
+    'PUB_KEY' => '公钥长度',
     'ISSUER' => '颁发者',
 
     'Use server hostname' => '采用服务器主机名',

From b4bb0bb5e8ab999d3678d0d64b30126106113f8c Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 10 Sep 2018 01:18:37 +0200
Subject: [PATCH 0197/2300] echo for backup wait

---
 bin/v-backup-user | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 9f9e2c37..c0473b8d 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -44,6 +44,8 @@ if pgrep -x "v-backup-users" > /dev/null
 then
 hour=$(date +"%H");
     while [ "$hour" -gt "6" ]; do
+        current_date_time="`date "+%Y-%m-%d %H:%M:%S"`";
+        echo "$current_date_time - wait for backup user $user";
         sleep 300
     done
 fi

From 67a081f7fc18b39797302b08fdeea3616a3d215b Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 10 Sep 2018 02:18:43 +0200
Subject: [PATCH 0198/2300] fix for backup wait

---
 bin/v-backup-user | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index c0473b8d..cd1741e6 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -47,6 +47,7 @@ hour=$(date +"%H");
         current_date_time="`date "+%Y-%m-%d %H:%M:%S"`";
         echo "$current_date_time - wait for backup user $user";
         sleep 300
+        hour=$(date +"%H");
     done
 fi
 

From ce4292da1dd6a53bed45d473f801ab05442865e4 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 10 Sep 2018 02:47:32 +0200
Subject: [PATCH 0199/2300] Additional echo for waiting hour in backup

---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index cd1741e6..cee6c093 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -45,7 +45,7 @@ then
 hour=$(date +"%H");
     while [ "$hour" -gt "6" ]; do
         current_date_time="`date "+%Y-%m-%d %H:%M:%S"`";
-        echo "$current_date_time - wait for backup user $user";
+        echo "$current_date_time - wait for backup user $user - hour $hour";
         sleep 300
         hour=$(date +"%H");
     done

From 74334fae11778322355b97814f589720e18c964c Mon Sep 17 00:00:00 2001
From: Clark Chen <9372896+clarkchentw@users.noreply.github.com>
Date: Mon, 17 Sep 2018 21:57:06 -0500
Subject: [PATCH 0200/2300] Traditional Chinese - TW, update to match en.php

This update the file to match 100% as en.php, also corrected some term in the file
---
 web/inc/i18n/tw.php | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/web/inc/i18n/tw.php b/web/inc/i18n/tw.php
index d35cba4a..3572fbf1 100644
--- a/web/inc/i18n/tw.php
+++ b/web/inc/i18n/tw.php
@@ -4,10 +4,8 @@
  * This language file is translate by
  * Clark's Hosting Service (https://host.clark-chen.com)
  * Clark Chen (clark@clark-chen.com)
- *
- * Translation recheck by:
- * pan93412 <pan93412@gmail.com>
  */
+
 $LANG['tw'] = array(
     'Packages'  => '方案設定',
     'IP'  => 'IP 管理',
@@ -199,9 +197,9 @@ $LANG['tw'] = array(
     'SSL Home Directory'  => 'SSL 主目錄',
     'Lets Encrypt Support'  => 'Lets Encrypt 支援',
     'Lets Encrypt'  => 'Lets Encrypt',
-    'Your certificate will be automatically issued in 5 minutes' => '您的憑證會在五分鐘內完成簽署',
+    'Your certificate will be automatically issued in 5 minutes' => '您的憑證會在五分鐘內完成簽發',
     'Proxy Support'  => 'Proxy 支援',
-    'Proxy Extensions'  => 'Proxy 擴充',
+    'Proxy Extensions'  => 'Proxy 副檔名',
     'Web Statistics'  => '網站統計',
     'Additional FTP Account'  => '其他 FTP 帳號',
     'Path'  => '路徑',
@@ -219,7 +217,6 @@ $LANG['tw'] = array(
     'Autoreply'  => '自動回覆',
     'Forward to'  => '轉寄到',
     'Do not store forwarded mail' => '不保留已轉發的郵件',
-    'Email Credentials' => '信箱登入資訊',
     'IMAP hostname'  => 'IMAP 主機名稱',
     'IMAP port'  => 'IMAP 連接埠',
     'IMAP security'  => 'IMAP 安全性',
@@ -393,8 +390,8 @@ $LANG['tw'] = array(
     'Banlist' => '封鎖清單',
     'ranges are acceptable' => '可接受陣列',
     'CIDR format is supported' => '支援 CIDR 格式',
-    'ACCEPT' => 'ACCEPT',
-    'DROP' => 'DROP',
+    'ACCEPT' => '允許',
+    'DROP' => '封鎖',
     'TCP' => 'TCP',
     'UDP' => 'UDP',
     'ICMP' => 'ICMP',
@@ -403,11 +400,11 @@ $LANG['tw'] = array(
     'VESTA' => 'VESTA',
     'Add one more Name Server' => '新增至少一個域名伺服器',
 
-    'web domain' => 'web 網域',
-    'dns domain' => 'dns 網域',
-    'dns record' => 'dns 紀錄',
-    'mail domain' => 'mail 紀錄',
-    'mail account' => 'mail 帳號',
+    'web domain' => 'Web 網域',
+    'dns domain' => 'DNS 網域',
+    'dns record' => 'DNS 紀錄',
+    'mail domain' => 'Mail 紀錄',
+    'mail account' => 'Mail 帳號',
     'cron job' => '任務排程',
 
     'cron' => '任務排程',
@@ -757,4 +754,7 @@ $LANG['tw'] = array(
     'Do not use encryption' => '不要使用加密',
 
     'maximum characters length, including prefix' => '最多 %s 字元 (包含前綴)',
+
+    'Email Credentials' => '信箱登入資訊',
+    
 );

From a54771261d947fd20b1676ba0d15eb2ca2a0adc6 Mon Sep 17 00:00:00 2001
From: Clark Chen <9372896+clarkchentw@users.noreply.github.com>
Date: Mon, 17 Sep 2018 21:59:22 -0500
Subject: [PATCH 0201/2300] Traditional Chinese - TW, update to match en.php

This update the file to match 100% as en.php, also corrected some term in the file
---
 web/inc/i18n/tw.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/inc/i18n/tw.php b/web/inc/i18n/tw.php
index 3572fbf1..0760d4a2 100644
--- a/web/inc/i18n/tw.php
+++ b/web/inc/i18n/tw.php
@@ -81,8 +81,8 @@ $LANG['tw'] = array(
     'rebuild db'  => '重建資料庫',
     'rebuild cron'  => '重建任務排程',
     'update counters' => '更新計數器',
-    'suspend'  => '暫停',
-    'unsuspend'  => '解除暫停',
+    'suspend'  => '停用',
+    'unsuspend'  => '解除停用',
     'delete'  => '刪除',
     'show per user'  => '依選擇的使用者',
     'login as'  => '登入帳號',

From c7f6bf4e284e7239c41de1fb13559d81b70cb79e Mon Sep 17 00:00:00 2001
From: Clark Chen <9372896+clarkchentw@users.noreply.github.com>
Date: Mon, 17 Sep 2018 22:02:04 -0500
Subject: [PATCH 0202/2300] Traditional Chinese - TW, update to match en.php

This update the file to match 100% as en.php, also corrected some term in the file
---
 web/inc/i18n/tw.php | 37 ++++++++++++++++++-------------------
 1 file changed, 18 insertions(+), 19 deletions(-)

diff --git a/web/inc/i18n/tw.php b/web/inc/i18n/tw.php
index 0760d4a2..1a5974c9 100644
--- a/web/inc/i18n/tw.php
+++ b/web/inc/i18n/tw.php
@@ -5,8 +5,8 @@
  * Clark's Hosting Service (https://host.clark-chen.com)
  * Clark Chen (clark@clark-chen.com)
  */
-
 $LANG['tw'] = array(
+
     'Packages'  => '方案設定',
     'IP'  => 'IP 管理',
     'Graphs'  => '資源使用圖表',
@@ -142,8 +142,8 @@ $LANG['tw'] = array(
     'Adding IP Address to Banlist' => '新增IP至黑名單',
 
     'active'  => '正常',
-    'spnd'  => '暫停',
-    'suspended'  => '已暫停',
+    'spnd'  => '停用',
+    'suspended'  => '已停用',
     'running'  => '執行中',
     'stopped'  => '已停止',
     'outdated'  => '有可升級的新版本',
@@ -462,30 +462,30 @@ $LANG['tw'] = array(
     'Changes has been saved.'  => '已儲存變更',
     'Confirmation'  => '確認',
     'DELETE_USER_CONFIRMATION' => '確定要刪除使用者 %s 嗎？',
-    'SUSPEND_USER_CONFIRMATION' => '確定要暫停使用者 %s 嗎？',
-    'UNSUSPEND_USER_CONFIRMATION' => '確定要解除暫停使用者 %s 嗎？',
+    'SUSPEND_USER_CONFIRMATION' => '確定要停用使用者 %s 嗎？',
+    'UNSUSPEND_USER_CONFIRMATION' => '確定要解除停用使用者 %s 嗎？',
     'DELETE_DOMAIN_CONFIRMATION' => '確定要刪除網域 %s 嗎？',
-    'SUSPEND_DOMAIN_CONFIRMATION' => '確定要暫停網域 %s 嗎？',
-    'UNSUSPEND_DOMAIN_CONFIRMATION' => '確定要解除暫停網域 %s 嗎？',
+    'SUSPEND_DOMAIN_CONFIRMATION' => '確定要停用網域 %s 嗎？',
+    'UNSUSPEND_DOMAIN_CONFIRMATION' => '確定要解除停用網域 %s 嗎？',
     'DELETE_RECORD_CONFIRMATION' => '確定要刪除記錄 %s 嗎？',
-    'SUSPEND_RECORD_CONFIRMATION' => '確定要暫停記錄 %s 嗎？',
-    'UNSUSPEND_RECORD_CONFIRMATION' => '確定要解除暫停紀錄 %s 嗎？',
+    'SUSPEND_RECORD_CONFIRMATION' => '確定要停用記錄 %s 嗎？',
+    'UNSUSPEND_RECORD_CONFIRMATION' => '確定要解除停用紀錄 %s 嗎？',
     'DELETE_MAIL_ACCOUNT_CONFIRMATION' => '確定要刪除 %s 嗎？',
-    'SUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '確定要暫停 %s 嗎？',
-    'UNSUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '確定要解除暫停 %s 嗎？',
+    'SUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '確定要停用 %s 嗎？',
+    'UNSUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '確定要解除停用 %s 嗎？',
     'DELETE_DATABASE_CONFIRMATION' => '確定要刪除資料庫 %s 嗎？',
-    'SUSPEND_DATABASE_CONFIRMATION' => '確定要暫停資料庫 %s 嗎？',
-    'UNSUSPEND_DATABASE_CONFIRMATION' => '確定要解除暫停資料庫 %s 嗎？',
+    'SUSPEND_DATABASE_CONFIRMATION' => '確定要停用資料庫 %s 嗎？',
+    'UNSUSPEND_DATABASE_CONFIRMATION' => '確定要解除停用資料庫 %s 嗎？',
     'DELETE_CRON_CONFIRMATION' => '確定要刪除 任務排程嗎？',
-    'SUSPEND_CRON_CONFIRMATION' => '確定要暫停 任務排程嗎？',
-    'UNSUSPEND_CRON_CONFIRMATION' => '確定要解除暫停 任務排程嗎？',
+    'SUSPEND_CRON_CONFIRMATION' => '確定要停用 任務排程嗎？',
+    'UNSUSPEND_CRON_CONFIRMATION' => '確定要解除停用 任務排程嗎？',
     'DELETE_BACKUP_CONFIRMATION'  => '確定要刪除 %s 備份嗎？',
     'DELETE_EXCLUSION_CONFIRMATION' => '確定要刪除 %s 例外嗎？',
     'DELETE_PACKAGE_CONFIRMATION'  => '確定要刪除方案 %s 嗎？',
     'DELETE_IP_CONFIRMATION'  => '確定要刪除 IP 地址 %s 嗎？',
-    'DELETE_RULE_CONFIRMATION' => '確定要刪除規則 #%s 嗎？',
-    'SUSPEND_RULE_CONFIRMATION' => '確定要暫停規則  #%s 嗎？',
-    'UNSUSPEND_RULE_CONFIRMATION' => '確定要解除暫停規則 #%s 嗎？',
+    'DELETE_RULE_CONFIRMATION' => '確定要刪除防火牆規則 #%s 嗎？',
+    'SUSPEND_RULE_CONFIRMATION' => '確定要停用防火牆規則  #%s 嗎？',
+    'UNSUSPEND_RULE_CONFIRMATION' => '確定要解除停用防火牆規則 #%s 嗎？',
     'LEAVE_PAGE_CONFIRMATION' => '確定離開嗎？',
     'RESTART_CONFIRMATION' => '確定要重新啟動 %s 嗎？',
     'Welcome'  => '歡迎',
@@ -756,5 +756,4 @@ $LANG['tw'] = array(
     'maximum characters length, including prefix' => '最多 %s 字元 (包含前綴)',
 
     'Email Credentials' => '信箱登入資訊',
-    
 );

From 09c99eb97d8e6ddd528a31966c7a03dd511281fb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 29 Sep 2018 01:28:15 +0200
Subject: [PATCH 0203/2300] improved secure login

---
 web/inc/secure_login.php | 23 +++++++++++++++--------
 1 file changed, 15 insertions(+), 8 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 9860912b..4b2944d7 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -1,12 +1,19 @@
 <?php
-if (!defined('NO_AUTH_REQUIRED2')) {
-    if (file_exists('/usr/local/vesta/web/inc/login_url.php')) {
-        require_once('/usr/local/vesta/web/inc/login_url.php');
-        if (isset($_GET[$login_url])) {
-            setcookie($login_url, '1', time() + 31536000, '/', $_SERVER['HTTP_HOST'], true);
-            header ("Location: /login/");
-            exit;
+$login_url_skip=0;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/index.php') $login_url_skip=1;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/index.php') $login_url_skip=1;
+
+if ($login_url_skip==0) {
+    if (!isset($login_url_loaded)) {
+        $login_url_loaded=1;
+        if (file_exists('/usr/local/vesta/web/inc/login_url.php')) {
+            require_once('/usr/local/vesta/web/inc/login_url.php');
+            if (isset($_GET[$login_url])) {
+                setcookie($login_url, '1', time() + 31536000, '/', $_SERVER['HTTP_HOST'], true);
+                header ("Location: /login/");
+                exit;
+            }
+            if (!isset($_COOKIE[$login_url])) exit;
         }
-        if (!isset($_COOKIE[$login_url])) exit;
     }
 }

From 9c6819a24f2017c8fddd1a035f38e51e68ee6c65 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 29 Sep 2018 03:33:18 +0200
Subject: [PATCH 0204/2300] get-ar and set-ar to whitelist

---
 web/inc/secure_login.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 4b2944d7..aa6423ab 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -2,6 +2,10 @@
 $login_url_skip=0;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/index.php') $login_url_skip=1;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/index.php') $login_url_skip=1;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/set-ar.php') $login_url_skip=1;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/set-ar.php') $login_url_skip=1;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/get-ar.php') $login_url_skip=1;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/get-ar.php') $login_url_skip=1;
 
 if ($login_url_skip==0) {
     if (!isset($login_url_loaded)) {

From b7b0570cc4b8d2101b3a167e54f44709792bb03a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 29 Sep 2018 23:59:20 +0200
Subject: [PATCH 0205/2300] Allow php from /usr/local/vesta/bin/

---
 web/inc/secure_login.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index aa6423ab..c8a63355 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -6,6 +6,7 @@ if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/set-ar.php') $
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/set-ar.php') $login_url_skip=1;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/get-ar.php') $login_url_skip=1;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/get-ar.php') $login_url_skip=1;
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/vesta/bin/') $login_url_skip=1;
 
 if ($login_url_skip==0) {
     if (!isset($login_url_loaded)) {

From 41110bf27d3547be7785cb831073535338b5bd62 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Sep 2018 00:10:41 +0200
Subject: [PATCH 0206/2300] Restart apache when enter wait-backup state

---
 bin/v-backup-user | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index cee6c093..f0d7b9b0 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -40,10 +40,15 @@ is_backup_enabled
 #----------------------------------------------------------#
 
 # block backup if current hour is after 6 AM
+WAIT_LOOP_ENTERED=0
 if pgrep -x "v-backup-users" > /dev/null
 then
 hour=$(date +"%H");
     while [ "$hour" -gt "6" ]; do
+        if [ "$WAIT_LOOP_ENTERED" -eq 0 ]; then
+             $BIN/v-restart-web-backend
+        fi
+        WAIT_LOOP_ENTERED=1
         current_date_time="`date "+%Y-%m-%d %H:%M:%S"`";
         echo "$current_date_time - wait for backup user $user - hour $hour";
         sleep 300

From b45c554d7786c385c301dcf9cba8dfa2969a6d20 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 3 Oct 2018 13:25:52 +0200
Subject: [PATCH 0207/2300] Temporary fix for redirect to webmail

---
 web/inc/secure_login.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index c8a63355..818f6270 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -1,4 +1,9 @@
 <?php
+if ($_SERVER['REQUEST_URI']=="/") {
+	header("Location: /webmail/");
+	exit;
+}
+
 $login_url_skip=0;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/index.php') $login_url_skip=1;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/index.php') $login_url_skip=1;

From 1d7119d6d9e5d3bcbd244b08010d6ddbf8b559ba Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 8 Oct 2018 11:22:12 +0200
Subject: [PATCH 0208/2300] Fix for undefined variable in secure_login

---
 web/inc/secure_login.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 818f6270..dd020d85 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -1,5 +1,5 @@
 <?php
-if ($_SERVER['REQUEST_URI']=="/") {
+if (isset($_SERVER['REQUEST_URI']) && $_SERVER['REQUEST_URI']=="/") {
 	header("Location: /webmail/");
 	exit;
 }

From fdb6baf7ae9cb5b02abc955667a6ee8dea96afc2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Oct 2018 16:24:43 +0200
Subject: [PATCH 0209/2300] Dont redirect to webmail if vesta is not behind
 nginx

---
 web/inc/secure_login.php | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index dd020d85..518cb6cf 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -1,7 +1,9 @@
 <?php
-if (isset($_SERVER['REQUEST_URI']) && $_SERVER['REQUEST_URI']=="/") {
-	header("Location: /webmail/");
-	exit;
+if (file_exists('/usr/local/vesta/web/inc/nginx_proxy')==true) {
+    if (isset($_SERVER['REQUEST_URI']) && $_SERVER['REQUEST_URI']=="/") {
+        header("Location: /webmail/");
+        exit;
+    }
 }
 
 $login_url_skip=0;

From 0652d1e75e57c3b1abb2115bd8380ecf26669ca7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Oct 2018 16:27:21 +0200
Subject: [PATCH 0210/2300] Removing old secure_login gateway include

---
 web/inc/main.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/main.php b/web/inc/main.php
index 49d70fda..dfa482a1 100644
--- a/web/inc/main.php
+++ b/web/inc/main.php
@@ -1,5 +1,5 @@
 <?php
-require_once('/usr/local/vesta/web/inc/secure_login.php');
+
 session_start();
 
 define('VESTA_CMD', '/usr/bin/sudo /usr/local/vesta/bin/');

From 927c288b272545cd42a41f1a98b8a6e6fbcd5904 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Oct 2018 16:33:02 +0200
Subject: [PATCH 0211/2300] Reverting /web/index.php to default

---
 web/index.php | 17 ++++-------------
 1 file changed, 4 insertions(+), 13 deletions(-)

diff --git a/web/index.php b/web/index.php
index 1763870d..2f070747 100644
--- a/web/index.php
+++ b/web/index.php
@@ -1,16 +1,7 @@
 <?php
-
-if (!file_exists('/usr/local/vesta/web/inc/login_url.php')) {
-    session_start();
-    if (isset($_SESSION['user'])) {
-        header("Location: /list/user/");
-    } else {
-        header("Location: /login/");
-    }
+session_start();
+if (isset($_SESSION['user'])) {
+    header("Location: /list/user/");
 } else {
-    require_once('/usr/local/vesta/web/inc/login_url.php');
-    if (isset($_GET[$login_url])) {
-      require_once('/usr/local/vesta/web/inc/secure_login.php');
-    }
-    header("Location: /webmail/");
+    header("Location: /login/");
 }

From 466cf25da84d36366166857945f16e844f34ef81 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Oct 2018 20:45:34 +0200
Subject: [PATCH 0212/2300] Bringing back default restart routine for nginx

---
 bin/v-restart-proxy | 70 ++++++++++++++++++++++++++-------------------
 1 file changed, 41 insertions(+), 29 deletions(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index 00758cc0..3e8df916 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -49,38 +49,50 @@ if [ -z "$PROXY_SYSTEM" ] || [ "$PROXY_SYSTEM" = 'remote' ]; then
     exit
 fi
 
-# background restart
-if [ "$1" = 'background' ]; then
-    # Restart system
-    sleep 15
-    # rm /tmp/restart-nginx
-    service $PROXY_SYSTEM restart >/dev/null 2>&1
-    if [ $? -ne 0 ]; then
-        send_email_report
-        check_result $E_RESTART "$PROXY_SYSTEM restart failed"
-    fi
-    
-    # Update restart queue
-    if [ -e "$VESTA/data/queue/restart.pipe" ]; then
-        sed -i "/$SCRIPT/d" $VESTA/data/queue/restart.pipe
-    fi
+if [ -f "/usr/local/vesta/web/inc/nginx_proxy" ]; then
+
+  # if vesta is behind default nginx, restart in background with 15 sec delay
+  # background restart
+  if [ "$1" = 'background' ]; then
+      # Restart system
+      sleep 15
+      service $PROXY_SYSTEM restart >/dev/null 2>&1
+      if [ $? -ne 0 ]; then
+          send_email_report
+          check_result $E_RESTART "$PROXY_SYSTEM restart failed"
+      fi
+
+      # Update restart queue
+      if [ -e "$VESTA/data/queue/restart.pipe" ]; then
+          sed -i "/$SCRIPT/d" $VESTA/data/queue/restart.pipe
+      fi
+
+      exit;
+  fi
+
+  # try to reload to get changes faster
+  service $PROXY_SYSTEM reload
+  
+  # send to background process
+  nohup $BIN/v-restart-proxy 'background' &>/dev/null &
+
+else
+
+  # Default behaviour
+  # Restart system
+  service $PROXY_SYSTEM restart >/dev/null 2>&1
+  if [ $? -ne 0 ]; then
+      send_email_report
+      check_result $E_RESTART "$PROXY_SYSTEM restart failed"
+  fi
+
+  # Update restart queue
+  if [ -e "$VESTA/data/queue/restart.pipe" ]; then
+      sed -i "/$SCRIPT/d" $VESTA/data/queue/restart.pipe
+  fi
 
-    exit;
 fi
 
-# if [ -f "/tmp/restart-nginx" ]; then
-#     exit;
-# fi
-
-service $PROXY_SYSTEM reload
-# if [ $? -ne 0 ]; then
-#     send_email_report
-#     check_result $E_RESTART "$PROXY_SYSTEM reload failed"
-# fi
-
-# touch /tmp/restart-nginx
-nohup $BIN/v-restart-proxy 'background' &>/dev/null &
-
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#

From 7b0597fc417bb83f0a378454ba1a7ad34d977621 Mon Sep 17 00:00:00 2001
From: marcos <marcos@localhost127.0.1.1>
Date: Sun, 14 Oct 2018 15:28:48 +0200
Subject: [PATCH 0213/2300] traducciones

---
 web/inc/i18n/es.php | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/web/inc/i18n/es.php b/web/inc/i18n/es.php
index 1f2c36dd..8cf45ddf 100644
--- a/web/inc/i18n/es.php
+++ b/web/inc/i18n/es.php
@@ -193,11 +193,11 @@ $LANG['es'] = array(
     'Mail Accounts'  => 'Cuentas de Correo',
     'Cron Jobs'  => 'Tareas Programadas',
     'SSH Access'  => 'Acceso SSH',
-    'IP Address'  => 'IP Address',
-    'IP Addresses'  => 'Dirección IP',
+    'IP Address'  => 'Dirección IP',
+    'IP Addresses'  => 'Direcciones IP',
     'Backups'  => 'Respaldos',
     'Backup System'  => 'Sistema de Respaldo',
-    'backup exclusions' => 'respaldos excluídos',
+    'backup exclusions' => 'configurar exlusiones',
     'template'  => 'plantilla',
     'SSL Support'  => 'Soportar SSL',
     'SSL Home Directory'  => 'Directorio local del SSL',
@@ -248,8 +248,8 @@ $LANG['es'] = array(
     'SYS'  => 'SYS',
     'Domains'  => 'Dominios',
     'Status'  => 'Estado',
-    'shared'  => 'compartido',
-    'dedicated'  => 'dedicado',
+    'shared'  => 'compartida',
+    'dedicated'  => 'dedicada',
     'Owner' => 'Dueño',
     'Users'  => 'Usuarios',
     'Load Average'  => 'Promedio de carga',
@@ -332,7 +332,7 @@ $LANG['es'] = array(
     'Package Name'  => 'Nombre del Plan',
     'Netmask'  => 'Máscara de Red',
     'Interface'  => 'Interfaz',
-    'Shared'  => 'Compartido',
+    'Shared'  => 'Compartida',
     'Assigned user'  => 'Usuario asignado',
     'Assigned domain'  => 'Dominio asignado',
     'NAT IP association' => 'Asociación NAT IP',
@@ -762,4 +762,5 @@ $LANG['es'] = array(
     'maximum characters length, including prefix' => 'usar un máximo de %s caracteres, incluyendo prefijo',
 
     'Email Credentials' => 'Email Credentials',
+    
 );

From a12466f5cc5cbb61b2a75e84f617adca6c1b1904 Mon Sep 17 00:00:00 2001
From: marcos <marcos@localhost127.0.1.1>
Date: Sun, 14 Oct 2018 15:31:38 +0200
Subject: [PATCH 0214/2300] suspend_message

---
 web/templates/admin/list_mail.html | 2 +-
 web/templates/user/list_mail.html  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/templates/admin/list_mail.html b/web/templates/admin/list_mail.html
index 02536441..6bd27cca 100644
--- a/web/templates/admin/list_mail.html
+++ b/web/templates/admin/list_mail.html
@@ -74,7 +74,7 @@
           } else {
             $status = 'active';
             $spnd_action = 'suspend' ;
-            $spnd_confirmation = 'UNSUSPEND_DOMAIN_CONFIRMATION' ;
+            $spnd_confirmation = 'SUSPEND_DOMAIN_CONFIRMATION' ;
           }
           if (empty($data[$key]['CATCHALL'])) {
             $data[$key]['CATCHALL'] = '/dev/null';
diff --git a/web/templates/user/list_mail.html b/web/templates/user/list_mail.html
index 84d9a56c..40284380 100644
--- a/web/templates/user/list_mail.html
+++ b/web/templates/user/list_mail.html
@@ -72,7 +72,7 @@
           } else {
             $status = 'active';
             $spnd_action = 'suspend' ;
-            $spnd_confirmation = 'UNSUSPEND_DOMAIN_CONFIRMATION' ;
+            $spnd_confirmation = 'SUSPEND_DOMAIN_CONFIRMATION' ;
           }
           if (empty($data[$key]['CATCHALL'])) {
             $data[$key]['CATCHALL'] = '/dev/null';

From 1557f9bc8cbdb349a83bce96093b1717b36cf5cd Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 17 Oct 2018 17:27:03 +0300
Subject: [PATCH 0215/2300] Security: separate passwords for databases

---
 install/vst-install-amazon.sh | 14 ++++++++------
 install/vst-install-debian.sh | 12 +++++++-----
 install/vst-install-rhel.sh   | 14 ++++++++------
 install/vst-install-ubuntu.sh | 12 +++++++-----
 4 files changed, 30 insertions(+), 22 deletions(-)

diff --git a/install/vst-install-amazon.sh b/install/vst-install-amazon.sh
index 899d4cd8..e419d019 100644
--- a/install/vst-install-amazon.sh
+++ b/install/vst-install-amazon.sh
@@ -1008,8 +1008,9 @@ if [ "$mysql" = 'yes' ]; then
     fi
 
     # Securing MySQL installation
-    mysqladmin -u root password $vpass
-    echo -e "[client]\npassword='$vpass'\n" > /root/.my.cnf
+    mpass=$(gen_pass)
+    mysqladmin -u root password $mpass
+    echo -e "[client]\npassword='$mpass'\n" > /root/.my.cnf
     chmod 600 /root/.my.cnf
     mysql -e "DELETE FROM mysql.user WHERE User=''"
     mysql -e "DROP DATABASE test" >/dev/null 2>&1
@@ -1031,9 +1032,10 @@ fi
 #----------------------------------------------------------#
 
 if [ "$postgresql" = 'yes' ]; then
+    ppass=$(gen_pass)
     if [ $release -eq 5 ]; then
         service postgresql start
-        sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$vpass'"
+        sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$ppass'"
         service postgresql stop
         cp -f $vestacp/postgresql/pg_hba.conf /var/lib/pgsql/data/
         service postgresql start
@@ -1041,7 +1043,7 @@ if [ "$postgresql" = 'yes' ]; then
         service postgresql initdb
         cp -f $vestacp/postgresql/pg_hba.conf /var/lib/pgsql/data/
         service postgresql start
-        sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$vpass'"
+        sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$ppass'"
     fi
     # Configuring phpPgAdmin
     if [ "$apache" = 'yes' ]; then
@@ -1272,13 +1274,13 @@ fi
 
 # Configuring MySQL host
 if [ "$mysql" = 'yes' ]; then
-    $VESTA/bin/v-add-database-host mysql localhost root $vpass
+    $VESTA/bin/v-add-database-host mysql localhost root $mpass
     $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
 fi
 
 # Configuring PostgreSQL host
 if [ "$postgresql" = 'yes' ]; then
-    $VESTA/bin/v-add-database-host pgsql localhost postgres $vpass
+    $VESTA/bin/v-add-database-host pgsql localhost postgres $ppass
     $VESTA/bin/v-add-database admin db db $(gen_pass) pgsql
 fi
 
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 4b5d293d..013f3160 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -985,8 +985,9 @@ if [ "$mysql" = 'yes' ]; then
     check_result $? "mysql start failed"
 
     # Securing MySQL installation
-    mysqladmin -u root password $vpass
-    echo -e "[client]\npassword='$vpass'\n" > /root/.my.cnf
+    mpass=$(gen_pass)
+    mysqladmin -u root password $mpass
+    echo -e "[client]\npassword='$mpass'\n" > /root/.my.cnf
     chmod 600 /root/.my.cnf
     mysql -e "DELETE FROM mysql.user WHERE User=''"
     mysql -e "DROP DATABASE test" >/dev/null 2>&1
@@ -1008,9 +1009,10 @@ fi
 #----------------------------------------------------------#
 
 if [ "$postgresql" = 'yes' ]; then
+    ppass=$(gen_pass)
     wget $vestacp/postgresql/pg_hba.conf -O /etc/postgresql/*/main/pg_hba.conf
     service postgresql restart
-    sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$vpass'"
+    sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$ppass'"
 
     # Configuring phpPgAdmin
     if [ "$apache" = 'yes' ]; then
@@ -1298,13 +1300,13 @@ fi
 
 # Configuring mysql host
 if [ "$mysql" = 'yes' ]; then
-    $VESTA/bin/v-add-database-host mysql localhost root $vpass
+    $VESTA/bin/v-add-database-host mysql localhost root $mpass
     $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
 fi
 
 # Configuring pgsql host
 if [ "$postgresql" = 'yes' ]; then
-    $VESTA/bin/v-add-database-host pgsql localhost postgres $vpass
+    $VESTA/bin/v-add-database-host pgsql localhost postgres $ppass
     $VESTA/bin/v-add-database admin db db $(gen_pass) pgsql
 fi
 
diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index 1ecd2235..4a863464 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -1024,8 +1024,9 @@ if [ "$mysql" = 'yes' ]; then
     fi
 
     # Securing MySQL installation
-    mysqladmin -u root password $vpass
-    echo -e "[client]\npassword='$vpass'\n" > /root/.my.cnf
+    mpass=$(gen_pass)
+    mysqladmin -u root password $mpass
+    echo -e "[client]\npassword='$mpass'\n" > /root/.my.cnf
     chmod 600 /root/.my.cnf
     mysql -e "DELETE FROM mysql.user WHERE User=''"
     mysql -e "DROP DATABASE test" >/dev/null 2>&1
@@ -1047,9 +1048,10 @@ fi
 #----------------------------------------------------------#
 
 if [ "$postgresql" = 'yes' ]; then
+    ppass=$(gen_pass)
     if [ $release -eq 5 ]; then
         service postgresql start
-        sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$vpass'"
+        sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$ppass'"
         service postgresql stop
         cp -f $vestacp/postgresql/pg_hba.conf /var/lib/pgsql/data/
         service postgresql start
@@ -1057,7 +1059,7 @@ if [ "$postgresql" = 'yes' ]; then
         service postgresql initdb
         cp -f $vestacp/postgresql/pg_hba.conf /var/lib/pgsql/data/
         service postgresql start
-        sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$vpass'"
+        sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$ppass'"
     fi
     # Configuring phpPgAdmin
     if [ "$apache" = 'yes' ]; then
@@ -1289,13 +1291,13 @@ fi
 
 # Configuring MySQL/MariaDB host
 if [ "$mysql" = 'yes' ]; then
-    $VESTA/bin/v-add-database-host mysql localhost root $vpass
+    $VESTA/bin/v-add-database-host mysql localhost root $mpass
     $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
 fi
 
 # Configuring PostgreSQL host
 if [ "$postgresql" = 'yes' ]; then
-    $VESTA/bin/v-add-database-host pgsql localhost postgres $vpass
+    $VESTA/bin/v-add-database-host pgsql localhost postgres $ppass
     $VESTA/bin/v-add-database admin db db $(gen_pass) pgsql
 fi
 
diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index c0655bb2..bfcf8919 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -977,8 +977,9 @@ if [ "$mysql" = 'yes' ]; then
     check_result $? "mysql start failed"
 
     # Securing MySQL/MariaDB installation
-    mysqladmin -u root password $vpass
-    echo -e "[client]\npassword='$vpass'\n" > /root/.my.cnf
+    mpass=$(gen_pass)
+    mysqladmin -u root password $mpass
+    echo -e "[client]\npassword='$mpass'\n" > /root/.my.cnf
     chmod 600 /root/.my.cnf
     mysql -e "DELETE FROM mysql.user WHERE User=''"
     mysql -e "DROP DATABASE test" >/dev/null 2>&1
@@ -1000,9 +1001,10 @@ fi
 #----------------------------------------------------------#
 
 if [ "$postgresql" = 'yes' ]; then
+    ppass=$(gen_pass)
     cp -f $vestacp/postgresql/pg_hba.conf /etc/postgresql/*/main/
     service postgresql restart
-    sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$vpass'"
+    sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$ppass'"
 
     # Configuring phpPgAdmin
     if [ "$apache" = 'yes' ]; then
@@ -1235,13 +1237,13 @@ fi
 
 # Configuring MySQL/MariaDB host
 if [ "$mysql" = 'yes' ]; then
-    $VESTA/bin/v-add-database-host mysql localhost root $vpass
+    $VESTA/bin/v-add-database-host mysql localhost root $mpass
     $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
 fi
 
 # Configuring PostgreSQL host
 if [ "$postgresql" = 'yes' ]; then
-    $VESTA/bin/v-add-database-host pgsql localhost postgres $vpass
+    $VESTA/bin/v-add-database-host pgsql localhost postgres $ppass
     $VESTA/bin/v-add-database admin db db $(gen_pass) pgsql
 fi
 

From a1b3aa3a8432b72842fe13ee77a892d2bba2b022 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 17 Oct 2018 22:06:17 +0300
Subject: [PATCH 0216/2300] No stats with distro name anymore

---
 install/vst-install-amazon.sh | 3 ---
 install/vst-install-debian.sh | 3 ---
 install/vst-install-rhel.sh   | 3 ---
 install/vst-install-ubuntu.sh | 3 ---
 4 files changed, 12 deletions(-)

diff --git a/install/vst-install-amazon.sh b/install/vst-install-amazon.sh
index e419d019..8dbdaa14 100644
--- a/install/vst-install-amazon.sh
+++ b/install/vst-install-amazon.sh
@@ -1334,9 +1334,6 @@ $VESTA/bin/v-add-cron-vesta-autoupdate
 #                   Vesta Access Info                      #
 #----------------------------------------------------------#
 
-# Sending install notification to vestacp.com
-wget vestacp.com/notify/?$codename -O /dev/null -q
-
 # Comparing hostname and IP
 host_ip=$(host $servername |head -n 1 |awk '{print $NF}')
 if [ "$host_ip" = "$ip" ]; then
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 013f3160..47f36142 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1361,9 +1361,6 @@ $VESTA/bin/v-add-cron-vesta-autoupdate
 #                   Vesta Access Info                      #
 #----------------------------------------------------------#
 
-# Sending install notification to vestacp.com
-wget vestacp.com/notify/?$codename -O /dev/null -q
-
 # Comparing hostname and ip
 host_ip=$(host $servername| head -n 1 | awk '{print $NF}')
 if [ "$host_ip" = "$ip" ]; then
diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index 4a863464..3aaad808 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -1351,9 +1351,6 @@ $VESTA/bin/v-add-cron-vesta-autoupdate
 #                   Vesta Access Info                      #
 #----------------------------------------------------------#
 
-# Sending install notification to vestacp.com
-wget vestacp.com/notify/?$codename -O /dev/null -q
-
 # Comparing hostname and IP
 host_ip=$(host $servername |head -n 1 |awk '{print $NF}')
 if [ "$host_ip" = "$ip" ]; then
diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index bfcf8919..4cc5ee86 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -1297,9 +1297,6 @@ $VESTA/bin/v-add-cron-vesta-autoupdate
 #                   Vesta Access Info                      #
 #----------------------------------------------------------#
 
-# Sending install notification to vestacp.com
-wget vestacp.com/notify/?$codename -O /dev/null -q
-
 # Comparing hostname and IP
 host_ip=$(host $servername| head -n 1 |awk '{print $NF}')
 if [ "$host_ip" = "$ip" ]; then

From 67a0e8d1086eb271df7e12fc67f1db482be8cb46 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 17 Oct 2018 22:27:06 +0300
Subject: [PATCH 0217/2300] limit config visibility to /etc and /var/lib

---
 bin/v-open-fs-config | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-open-fs-config b/bin/v-open-fs-config
index 6a4f54fd..720df86a 100755
--- a/bin/v-open-fs-config
+++ b/bin/v-open-fs-config
@@ -35,6 +35,11 @@ if [ ! -z "$src_file" ]; then
         echo "Error: invalid source path $src_file"
         exit 2
     fi
+    spath=$(echo "$rpath" |egrep "/etc|/var/lib")
+    if [ -z "$spath" ]; then
+        echo "Error: invalid source path $src_file"
+        exit 2
+    fi
 fi
 
 # Reading conf

From 5f68c1b634abec2d5a4f83156bfd223d3a792f77 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 17 Oct 2018 23:28:37 +0300
Subject: [PATCH 0218/2300] Timing attack fix from security experts
 https://arcturussecurity.com

---
 web/reset/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/reset/index.php b/web/reset/index.php
index abde3c14..0d90d15d 100644
--- a/web/reset/index.php
+++ b/web/reset/index.php
@@ -48,7 +48,7 @@ if ((!empty($_POST['user'])) && (!empty($_POST['code'])) && (!empty($_POST['pass
         if ( $return_var == 0 ) {
             $data = json_decode(implode('', $output), true);
             $rkey = $data[$user]['RKEY'];
-            if ($rkey == $_POST['code']) {
+            if (hash_equals($rkey, $POST[‘code’])) {
                 $v_password = tempnam("/tmp","vst");
                 $fp = fopen($v_password, "w");
                 fwrite($fp, $_POST['password']."\n");

From d880b5b4254ed3d89303227d7de4a79e8e0579a7 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 17 Oct 2018 23:58:27 +0300
Subject: [PATCH 0219/2300] limit sudo for admin to vesta scripts only

---
 install/debian/7/sudo/admin     | 2 +-
 install/debian/8/sudo/admin     | 2 +-
 install/debian/9/sudo/admin     | 2 +-
 install/rhel/5/sudo/admin       | 2 +-
 install/rhel/6/sudo/admin       | 2 +-
 install/rhel/7/sudo/admin       | 2 +-
 install/ubuntu/12.04/sudo/admin | 2 +-
 install/ubuntu/12.10/sudo/admin | 2 +-
 install/ubuntu/13.04/sudo/admin | 2 +-
 install/ubuntu/13.10/sudo/admin | 2 +-
 install/ubuntu/14.04/sudo/admin | 2 +-
 install/ubuntu/14.10/sudo/admin | 2 +-
 install/ubuntu/15.04/sudo/admin | 2 +-
 install/ubuntu/15.10/sudo/admin | 2 +-
 install/ubuntu/16.04/sudo/admin | 2 +-
 install/ubuntu/16.10/sudo/admin | 2 +-
 install/ubuntu/17.04/sudo/admin | 2 +-
 install/ubuntu/17.10/sudo/admin | 2 +-
 install/ubuntu/18.04/sudo/admin | 2 +-
 19 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/install/debian/7/sudo/admin b/install/debian/7/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/debian/7/sudo/admin
+++ b/install/debian/7/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/debian/8/sudo/admin b/install/debian/8/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/debian/8/sudo/admin
+++ b/install/debian/8/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/debian/9/sudo/admin b/install/debian/9/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/debian/9/sudo/admin
+++ b/install/debian/9/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/rhel/5/sudo/admin b/install/rhel/5/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/rhel/5/sudo/admin
+++ b/install/rhel/5/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/rhel/6/sudo/admin b/install/rhel/6/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/rhel/6/sudo/admin
+++ b/install/rhel/6/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/rhel/7/sudo/admin b/install/rhel/7/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/rhel/7/sudo/admin
+++ b/install/rhel/7/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/12.04/sudo/admin b/install/ubuntu/12.04/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/12.04/sudo/admin
+++ b/install/ubuntu/12.04/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/12.10/sudo/admin b/install/ubuntu/12.10/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/12.10/sudo/admin
+++ b/install/ubuntu/12.10/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/13.04/sudo/admin b/install/ubuntu/13.04/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/13.04/sudo/admin
+++ b/install/ubuntu/13.04/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/13.10/sudo/admin b/install/ubuntu/13.10/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/13.10/sudo/admin
+++ b/install/ubuntu/13.10/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/14.04/sudo/admin b/install/ubuntu/14.04/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/14.04/sudo/admin
+++ b/install/ubuntu/14.04/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/14.10/sudo/admin b/install/ubuntu/14.10/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/14.10/sudo/admin
+++ b/install/ubuntu/14.10/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/15.04/sudo/admin b/install/ubuntu/15.04/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/15.04/sudo/admin
+++ b/install/ubuntu/15.04/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/15.10/sudo/admin b/install/ubuntu/15.10/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/15.10/sudo/admin
+++ b/install/ubuntu/15.10/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/16.04/sudo/admin b/install/ubuntu/16.04/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/16.04/sudo/admin
+++ b/install/ubuntu/16.04/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/16.10/sudo/admin b/install/ubuntu/16.10/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/16.10/sudo/admin
+++ b/install/ubuntu/16.10/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/17.04/sudo/admin b/install/ubuntu/17.04/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/17.04/sudo/admin
+++ b/install/ubuntu/17.04/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/17.10/sudo/admin b/install/ubuntu/17.10/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/17.10/sudo/admin
+++ b/install/ubuntu/17.10/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/18.04/sudo/admin b/install/ubuntu/18.04/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/ubuntu/18.04/sudo/admin
+++ b/install/ubuntu/18.04/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*

From cde42691701667502369f76e197c30005431f959 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 18 Oct 2018 00:14:28 +0300
Subject: [PATCH 0220/2300] Release 0.9.8-23

---
 src/deb/ioncube/control              |  2 +-
 src/deb/nginx/control                |  2 +-
 src/deb/php/control                  |  2 +-
 src/deb/softaculous/control          |  2 +-
 src/deb/vesta/control                |  2 +-
 src/deb/vesta/postinst               |  8 ++++++++
 src/rpm/specs/vesta-ioncube.spec     |  2 +-
 src/rpm/specs/vesta-nginx.spec       |  2 +-
 src/rpm/specs/vesta-php.spec         |  2 +-
 src/rpm/specs/vesta-softaculous.spec |  2 +-
 src/rpm/specs/vesta.spec             | 17 ++++++++++++++++-
 upd/add_notifications.sh             |  2 +-
 upd/fix_dhcprenew.sh                 | 20 ++++++++++++++++++++
 upd/limit_sudo.sh                    |  6 ++++++
 14 files changed, 60 insertions(+), 11 deletions(-)
 create mode 100755 upd/fix_dhcprenew.sh
 create mode 100755 upd/limit_sudo.sh

diff --git a/src/deb/ioncube/control b/src/deb/ioncube/control
index 89268f6e..9db6cc14 100644
--- a/src/deb/ioncube/control
+++ b/src/deb/ioncube/control
@@ -1,7 +1,7 @@
 Source: vesta-ioncube
 Package: vesta-ioncube
 Priority: optional
-Version: 0.9.8-22
+Version: 0.9.8-23
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.ioncube.com
diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index 9dc7351a..19ec8bbb 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -1,7 +1,7 @@
 Source: vesta-nginx
 Package: vesta-nginx
 Priority: optional
-Version: 0.9.8-22
+Version: 0.9.8-23
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/php/control b/src/deb/php/control
index 3714008d..e8702027 100644
--- a/src/deb/php/control
+++ b/src/deb/php/control
@@ -1,7 +1,7 @@
 Source: vesta-php
 Package: vesta-php
 Priority: optional
-Version: 0.9.8-22
+Version: 0.9.8-23
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/softaculous/control b/src/deb/softaculous/control
index 35140df6..c5c9eb67 100644
--- a/src/deb/softaculous/control
+++ b/src/deb/softaculous/control
@@ -1,7 +1,7 @@
 Source: vesta-softaculous
 Package: vesta-softaculous
 Priority: optional
-Version: 0.9.8-22
+Version: 0.9.8-23
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.softaculous.com
diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 028a4e41..9f83c2a6 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-22
+Version: 0.9.8-23
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 3cba15e9..516df08b 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -28,4 +28,12 @@ if [ -x /usr/local/vesta/upd/fix_roundcube.sh ]; then
     /usr/local/vesta/upd/fix_roundcube.sh
 fi
 
+if [ -x /usr/local/vesta/upd/limit_sudo.sh ]; then
+    /usr/local/vesta/upd/limit_sudo.sh
+fi
+
+if [ -x /usr/local/vesta/upd/fix_dhcprenew.sh ]; then
+    /usr/local/vesta/upd/fix_dhcprenew.sh
+fi
+
 exit 0
diff --git a/src/rpm/specs/vesta-ioncube.spec b/src/rpm/specs/vesta-ioncube.spec
index 5d48dc29..54bb5cf4 100644
--- a/src/rpm/specs/vesta-ioncube.spec
+++ b/src/rpm/specs/vesta-ioncube.spec
@@ -1,6 +1,6 @@
 Name:           vesta-ioncube
 Version:        0.9.8
-Release:        22
+Release:        23
 Summary:        ionCube Loader
 Group:          System Environment/Base
 License:        "Freely redistributable without restriction"
diff --git a/src/rpm/specs/vesta-nginx.spec b/src/rpm/specs/vesta-nginx.spec
index a633ef85..ca530cc1 100644
--- a/src/rpm/specs/vesta-nginx.spec
+++ b/src/rpm/specs/vesta-nginx.spec
@@ -1,6 +1,6 @@
 Name:           vesta-nginx
 Version:        0.9.8
-Release:        22
+Release:        23
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        BSD-like
diff --git a/src/rpm/specs/vesta-php.spec b/src/rpm/specs/vesta-php.spec
index 12d1c401..fe5aded9 100644
--- a/src/rpm/specs/vesta-php.spec
+++ b/src/rpm/specs/vesta-php.spec
@@ -1,6 +1,6 @@
 Name:           vesta-php
 Version:        0.9.8
-Release:        22
+Release:        23
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
diff --git a/src/rpm/specs/vesta-softaculous.spec b/src/rpm/specs/vesta-softaculous.spec
index 7e92cfdb..ece330e8 100644
--- a/src/rpm/specs/vesta-softaculous.spec
+++ b/src/rpm/specs/vesta-softaculous.spec
@@ -1,6 +1,6 @@
 Name:           vesta-softaculous
 Version:        0.9.8
-Release:        22
+Release:        23
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        Softaculous License
diff --git a/src/rpm/specs/vesta.spec b/src/rpm/specs/vesta.spec
index 58359da0..bb82d404 100644
--- a/src/rpm/specs/vesta.spec
+++ b/src/rpm/specs/vesta.spec
@@ -1,6 +1,6 @@
 Name:           vesta
 Version:        0.9.8
-Release:        22
+Release:        23
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
@@ -45,6 +45,15 @@ if [ $1 -ge 2 ]; then
     if [ -x /usr/local/vesta/upd/fix_roundcube.sh ]; then
         /usr/local/vesta/upd/fix_roundcube.sh
     fi
+
+    if [ -x /usr/local/vesta/upd/limit_sudo.sh ]; then
+        /usr/local/vesta/upd/limit_sudo.sh
+    fi
+
+    if [ -x /usr/local/vesta/upd/fix_dhcprenew.sh ]; then
+        /usr/local/vesta/upd/fix_dhcprenew.sh
+    fi
+
 fi
 %files
 %{_vestadir}
@@ -59,6 +68,12 @@ fi
 %config(noreplace) %{_vestadir}/web/css/uploadify.css
 
 %changelog
+* Thu 18 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-23
+- Security fixes
+
+* Wed June 27 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-22
+- Security fixes
+
 * Fri May 11 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-21
 - Additional security fixes
 
diff --git a/upd/add_notifications.sh b/upd/add_notifications.sh
index 14b8590e..e55c0c74 100755
--- a/upd/add_notifications.sh
+++ b/upd/add_notifications.sh
@@ -5,5 +5,5 @@ rm -f /usr/local/vesta/data/users/admin/notifications.conf
 /usr/local/vesta/bin/v-add-user-notification admin "File Manager" "Browse, copy, edit, view, and retrieve all your web domain files using a fully featured <a href='http://vestacp.com/features/#filemanager'>File Manager</a>. Plugin is available for <a href='/edit/server/?lead=filemanager#module-filemanager'>purchase</a>." 'filemanager'
 /usr/local/vesta/bin/v-add-user-notification admin "Chroot SFTP" "If you want to have SFTP accounts that will be used only to transfer files (and not to SSH), you can  <a href='/edit/server/?lead=sftp#module-sftp'>purchase</a> and enable <a href='http://vestacp.com/features/#sftpchroot'>SFTP Chroot</a>"
 /usr/local/vesta/bin/v-add-user-notification admin "Softaculous" "Softaculous is one of the best Auto Installers and it is finally <a href='/edit/server/?lead=sftp#module-softaculous'>available</a>"
-/usr/local/vesta/bin/v-add-user-notification admin "Release 0.9.8-19" "We've made 1478 commits, fixed 29 bugs and merged 141 pull request. As always for more information please read <a href='http://vestacp.com/roadmap/#0.9.8-18'>release notes</a>"
+/usr/local/vesta/bin/v-add-user-notification admin "Release 0.9.8-23" "We've made 1478 commits, fixed 29 bugs and merged 141 pull request. As always for more information please read <a href='http://vestacp.com/roadmap/#0.9.8-23'>release notes</a>"
 
diff --git a/upd/fix_dhcprenew.sh b/upd/fix_dhcprenew.sh
new file mode 100755
index 00000000..08e76f69
--- /dev/null
+++ b/upd/fix_dhcprenew.sh
@@ -0,0 +1,20 @@
+#!/bin/bash
+
+if [ -e "/usr/bin/dhcprenew" ]; then
+    mv /usr/bin/dhcprenew /usr/bin/dhcprenew.disabled
+
+    # Notify admin via control panel
+    rm /usr/local/vesta/data/users/admin/notifications.conf
+    touch /usr/local/vesta/data/users/admin/notifications.conf
+    /usr/local/vesta/bin/v-add-user-notification admin \
+        "Security Check" "Your server was compromised please contact us at info@vestacp.com to get help."
+
+    # Send email notification
+    send_mail="/usr/local/vesta/web/inc/mail-wrapper.php"
+    email=$(grep CONTACT /usr/local/vesta/data/users/admin/user.conf |cut -f2 -d \')
+    if [ ! -z "$email" ]; then
+        echo "Your server $(hostname) was compromised please contact us at info@vestacp.com to get help." |\
+            $send_mail -s "SECURITY CHECK: Vesta Control Panel" $email
+    fi
+fi
+
diff --git a/upd/limit_sudo.sh b/upd/limit_sudo.sh
new file mode 100755
index 00000000..4f4ac924
--- /dev/null
+++ b/upd/limit_sudo.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+
+if [ -e "/etc/sudoers.d/admin" ]; then
+    sed -i "s/admin.*ALL=(ALL).*/# sudo is limited to vesta scripts/" \
+        /etc/sudoers.d/admin
+fi

From 83bd1f679f89e1df17f66cb4299ce9a631e789be Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 18 Oct 2018 00:23:56 +0300
Subject: [PATCH 0221/2300] added missing month in spec file

---
 src/rpm/specs/vesta.spec | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/rpm/specs/vesta.spec b/src/rpm/specs/vesta.spec
index bb82d404..a611e45f 100644
--- a/src/rpm/specs/vesta.spec
+++ b/src/rpm/specs/vesta.spec
@@ -68,7 +68,7 @@ fi
 %config(noreplace) %{_vestadir}/web/css/uploadify.css
 
 %changelog
-* Thu 18 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-23
+* Thu Oct 18 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-23
 - Security fixes
 
 * Wed June 27 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-22

From defba7221522bcb403ef7475e730dc6bb603841b Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 18 Oct 2018 00:25:09 +0300
Subject: [PATCH 0222/2300] added missing month in spec file

---
 src/rpm/specs/vesta.spec | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/rpm/specs/vesta.spec b/src/rpm/specs/vesta.spec
index a611e45f..10830d15 100644
--- a/src/rpm/specs/vesta.spec
+++ b/src/rpm/specs/vesta.spec
@@ -71,7 +71,7 @@ fi
 * Thu Oct 18 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-23
 - Security fixes
 
-* Wed June 27 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-22
+* Wed Jun 27 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-22
 - Security fixes
 
 * Fri May 11 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-21

From f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 Mon Sep 17 00:00:00 2001
From: "Made I.T" <info@madeit.be>
Date: Thu, 18 Oct 2018 10:01:35 +0200
Subject: [PATCH 0223/2300] Fix bug in password reset

---
 web/reset/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/reset/index.php b/web/reset/index.php
index 0d90d15d..842dd2f3 100644
--- a/web/reset/index.php
+++ b/web/reset/index.php
@@ -48,7 +48,7 @@ if ((!empty($_POST['user'])) && (!empty($_POST['code'])) && (!empty($_POST['pass
         if ( $return_var == 0 ) {
             $data = json_decode(implode('', $output), true);
             $rkey = $data[$user]['RKEY'];
-            if (hash_equals($rkey, $POST[‘code’])) {
+            if (hash_equals($rkey, $_POST['code'])) {
                 $v_password = tempnam("/tmp","vst");
                 $fp = fopen($v_password, "w");
                 fwrite($fp, $_POST['password']."\n");

From 32fbc253a92352376ff301ad9504ef39add726c4 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 18 Oct 2018 14:20:14 +0300
Subject: [PATCH 0224/2300] Additional argument check for remote hosts

---
 bin/v-add-backup-host | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/bin/v-add-backup-host b/bin/v-add-backup-host
index 327703a7..b21880c5 100755
--- a/bin/v-add-backup-host
+++ b/bin/v-add-backup-host
@@ -38,8 +38,8 @@ EOF
 sftpc() {
     expect -f "-" <<EOF "$@"
         set count 0
-        spawn /usr/bin/sftp -o StrictHostKeyChecking=no -o \
-            Port=$port $user@$host
+        spawn "/usr/bin/sftp -o StrictHostKeyChecking=no -o \
+            Port=$port '$user@$host'"
         expect {
             "password:" {
                 send "$password\r"
@@ -94,12 +94,14 @@ EOF
 
 if [ "$type" != 'local' ];then
     check_args '4' "$#" "TYPE HOST USERNAME PASSWORD [PATH] [PORT]"
-    is_format_valid 'host'
+    is_format_valid 'user' 'host'
     is_password_valid
     if [ "$type" = 'sftp' ]; then
         which expect >/dev/null 2>&1
         check_result $? "expect command not found"  $E_NOTEXIST
     fi
+    host "$host" >/dev/null 2>&1
+    check_result $? "host connection failed" "$E_CONNECT"
 fi
 
 

From cbbf27fc46e46cf79cbceec8cd1feaaac1be1cc0 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 18 Oct 2018 14:36:17 +0300
Subject: [PATCH 0225/2300] Additional argument check for remote hosts

---
 bin/v-add-backup-host | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-backup-host b/bin/v-add-backup-host
index b21880c5..4e727229 100755
--- a/bin/v-add-backup-host
+++ b/bin/v-add-backup-host
@@ -94,7 +94,7 @@ EOF
 
 if [ "$type" != 'local' ];then
     check_args '4' "$#" "TYPE HOST USERNAME PASSWORD [PATH] [PORT]"
-    is_format_valid 'user' 'host'
+    is_format_valid 'user' 'host' 'path' 'port'
     is_password_valid
     if [ "$type" = 'sftp' ]; then
         which expect >/dev/null 2>&1

From 8e37c4fa0f8dc239f0c1d1b0b5af791b8682bca9 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 18 Oct 2018 17:46:34 +0300
Subject: [PATCH 0226/2300] switch from c.vestacp.com to local configs

---
 install/vst-install-debian.sh | 117 ++++++++++++++++------------------
 1 file changed, 55 insertions(+), 62 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 47f36142..769ddfa6 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -16,7 +16,7 @@ arch=$(uname -i)
 os='debian'
 release=$(cat /etc/debian_version|grep -o [0-9]|head -n1)
 codename="$(cat /etc/os-release |grep VERSION= |cut -f 2 -d \(|cut -f 1 -d \))"
-vestacp="http://$CHOST/$VERSION/$release"
+vestacp="$VESTA/install/$VERSION/$release"
 
 if [ "$release" -eq 9 ]; then
     software="nginx apache2 apache2-utils apache2-suexec-custom
@@ -274,7 +274,7 @@ if [ ! -e '/usr/bin/wget' ]; then
 fi
 
 # Checking repository availability
-wget -q "$vestacp/deb_signing.key" -O /dev/null
+wget -q "c.vestacp.com/deb_signing.key" -O /dev/null
 check_result $? "No access to Vesta repository"
 
 # Check installed packages
@@ -682,9 +682,9 @@ chmod 755 /usr/bin/rssh
 #                     Configure VESTA                      #
 #----------------------------------------------------------#
 
-# Downloading sudo configuration
+# Installing sudo configuration
 mkdir -p /etc/sudoers.d
-wget $vestacp/sudo/admin -O /etc/sudoers.d/admin
+cp -f $vestacp/sudo/admin /etc/sudoers.d/
 chmod 440 /etc/sudoers.d/admin
 
 # Configuring system env
@@ -695,8 +695,8 @@ echo 'PATH=$PATH:'$VESTA'/bin' >> /root/.bash_profile
 echo 'export PATH' >> /root/.bash_profile
 source /root/.bash_profile
 
-# Configuring logrotate for vesta logs
-wget $vestacp/logrotate/vesta -O /etc/logrotate.d/vesta
+# Configuring logrotate for Vesta logs
+cp -f $vestacp/logrotate/vesta /etc/logrotate.d/
 
 # Building directory tree and creating some blank files for vesta
 mkdir -p $VESTA/conf $VESTA/log $VESTA/ssl $VESTA/data/ips \
@@ -808,25 +808,18 @@ echo "LANGUAGE='$lang'" >> $VESTA/conf/vesta.conf
 # Version
 echo "VERSION='0.9.8'" >> $VESTA/conf/vesta.conf
 
-# Downloading hosting packages
-cd $VESTA/data
-wget $vestacp/packages.tar.gz -O packages.tar.gz
-tar -xzf packages.tar.gz
-rm -f packages.tar.gz
+# Installing hosting packages
+cp -rf $vestacp/packages $VESTA/data/
 
-# Downloading templates
-wget $vestacp/templates.tar.gz -O templates.tar.gz
-tar -xzf templates.tar.gz
-rm -f templates.tar.gz
+# Installing templates
+cp -rf $vestacp/templates $VESTA/data/
 
 # Copying index.html to default documentroot
-cp templates/web/skel/public_html/index.html /var/www/
+cp $VESTA/data/templates/web/skel/public_html/index.html /var/www/
 sed -i 's/%domain%/It worked!/g' /var/www/index.html
 
-# Downloading firewall rules
-wget $vestacp/firewall.tar.gz -O firewall.tar.gz
-tar -xzf firewall.tar.gz
-rm -f firewall.tar.gz
+# Installing firewall rules
+cp -rf $vestacp/firewall $VESTA/data/
 
 # Configuring server hostname
 $VESTA/bin/v-change-sys-hostname $servername 2>/dev/null
@@ -855,12 +848,12 @@ rm /tmp/vst.pem
 
 if [ "$nginx" = 'yes' ]; then
     rm -f /etc/nginx/conf.d/*.conf
-    wget $vestacp/nginx/nginx.conf -O /etc/nginx/nginx.conf
-    wget $vestacp/nginx/status.conf -O /etc/nginx/conf.d/status.conf
-    wget $vestacp/nginx/phpmyadmin.inc -O /etc/nginx/conf.d/phpmyadmin.inc
-    wget $vestacp/nginx/phppgadmin.inc -O /etc/nginx/conf.d/phppgadmin.inc
-    wget $vestacp/nginx/webmail.inc -O /etc/nginx/conf.d/webmail.inc
-    wget $vestacp/logrotate/nginx -O /etc/logrotate.d/nginx
+    cp -f $vestacp/nginx/nginx.conf /etc/nginx/
+    cp -f $vestacp/nginx/status.conf /etc/nginx/conf.d/
+    cp -f $vestacp/nginx/phpmyadmin.inc /etc/nginx/conf.d/
+    cp -f $vestacp/nginx/phppgadmin.inc /etc/nginx/conf.d/
+    cp -f $vestacp/nginx/webmail.inc /etc/nginx/conf.d/
+    cp -f $vestacp/logrotate/nginx /etc/logrotate.d/
     echo > /etc/nginx/conf.d/vesta.conf
     mkdir -p /var/log/nginx/domains
     update-rc.d nginx defaults
@@ -874,9 +867,9 @@ fi
 #----------------------------------------------------------#
 
 if [ "$apache" = 'yes'  ]; then
-    wget $vestacp/apache2/apache2.conf -O /etc/apache2/apache2.conf
-    wget $vestacp/apache2/status.conf -O /etc/apache2/mods-enabled/status.conf
-    wget $vestacp/logrotate/apache2 -O /etc/logrotate.d/apache2
+    cp -f $vestacp/apache2/apache2.conf /etc/apache2/
+    cp -f $vestacp/apache2/status.conf /etc/apache2/mods-enabled/
+    cp -f  $vestacp/logrotate/apache2 /etc/logrotate.d/
     a2enmod rewrite
     a2enmod suexec
     a2enmod ssl
@@ -909,12 +902,12 @@ fi
 
 if [ "$phpfpm" = 'yes' ]; then
     if [ "$release" -eq 9 ]; then
-        wget $vestacp/php-fpm/www.conf -O /etc/php/7.0/fpm/pool.d/www.conf
+        cp -f $vestacp/php-fpm/www.conf /etc/php/7.0/fpm/pool.d/www.conf
         update-rc.d php7.0-fpm defaults
         service php7.0-fpm start
         check_result $? "php-fpm start failed"
     else
-        wget $vestacp/php5-fpm/www.conf -O /etc/php5/fpm/pool.d/www.conf
+        cp -f $vestacp/php5-fpm/www.conf /etc/php5/fpm/pool.d/www.conf
         update-rc.d php5-fpm defaults
         service php5-fpm start
         check_result $? "php-fpm start failed"
@@ -941,7 +934,7 @@ done
 #----------------------------------------------------------#
 
 if [ "$vsftpd" = 'yes' ]; then
-    wget $vestacp/vsftpd/vsftpd.conf -O /etc/vsftpd.conf
+    cp -f $vestacp/vsftpd/vsftpd.conf /etc/
     update-rc.d vsftpd defaults
     service vsftpd start
     check_result $? "vsftpd start failed"
@@ -957,7 +950,7 @@ fi
 
 if [ "$proftpd" = 'yes' ]; then
     echo "127.0.0.1 $servername" >> /etc/hosts
-    wget $vestacp/proftpd/proftpd.conf -O /etc/proftpd/proftpd.conf
+    cp -f $vestacp/proftpd/proftpd.conf /etc/proftpd/
     update-rc.d proftpd defaults
     service proftpd start
     check_result $? "proftpd start failed"
@@ -978,7 +971,7 @@ if [ "$mysql" = 'yes' ]; then
     fi
 
     # MySQL configuration
-    wget $vestacp/mysql/$mycnf -O /etc/mysql/my.cnf
+    cp -f $vestacp/mysql/$mycnf /etc/mysql/my.cnf
     mysql_install_db
     update-rc.d mysql defaults
     service mysql start
@@ -997,10 +990,10 @@ if [ "$mysql" = 'yes' ]; then
 
     # Configuring phpMyAdmin
     if [ "$apache" = 'yes' ]; then
-        wget $vestacp/pma/apache.conf -O /etc/phpmyadmin/apache.conf
+        cp -f $vestacp/pma/apache.conf /etc/phpmyadmin/
         ln -s /etc/phpmyadmin/apache.conf /etc/apache2/conf.d/phpmyadmin.conf
     fi
-    wget $vestacp/pma/config.inc.php -O /etc/phpmyadmin/config.inc.php
+    cp -f $vestacp/pma/config.inc.php /etc/phpmyadmin/
     chmod 777 /var/lib/phpmyadmin/tmp
 fi
 
@@ -1010,16 +1003,15 @@ fi
 
 if [ "$postgresql" = 'yes' ]; then
     ppass=$(gen_pass)
-    wget $vestacp/postgresql/pg_hba.conf -O /etc/postgresql/*/main/pg_hba.conf
+    cp -f $vestacp/postgresql/pg_hba.conf /etc/postgresql/*/main/
     service postgresql restart
     sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$ppass'"
 
     # Configuring phpPgAdmin
     if [ "$apache" = 'yes' ]; then
-        wget $vestacp/pga/phppgadmin.conf \
-            -O /etc/apache2/conf.d/phppgadmin.conf
+        cp -f $vestacp/pga/phppgadmin.conf /etc/apache2/conf.d/
     fi
-    wget $vestacp/pga/config.inc.php -O /etc/phppgadmin/config.inc.php
+    cp -f $vestacp/pga/config.inc.php /etc/phppgadmin/
 fi
 
 
@@ -1028,7 +1020,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$named" = 'yes' ]; then
-    wget $vestacp/bind/named.conf -O /etc/bind/named.conf
+    cp -f $vestacp/bind/named.conf /etc/bind/
     sed -i "s%listen-on%//listen%" /etc/bind/named.conf.options
     chown root:bind /etc/bind/named.conf
     chmod 640 /etc/bind/named.conf
@@ -1049,9 +1041,9 @@ fi
 
 if [ "$exim" = 'yes' ]; then
     gpasswd -a Debian-exim mail
-    wget $vestacp/exim/exim4.conf.template -O /etc/exim4/exim4.conf.template
-    wget $vestacp/exim/dnsbl.conf -O /etc/exim4/dnsbl.conf
-    wget $vestacp/exim/spam-blocks.conf -O /etc/exim4/spam-blocks.conf
+    cp -f $vestacp/exim/exim4.conf.template /etc/exim4/
+    cp -f $vestacp/exim/dnsbl.conf /etc/exim4/
+    cp -f $vestacp/exim/spam-blocks.conf /etc/exim4/
     touch /etc/exim4/white-blocks.conf
 
     if [ "$spamd" = 'yes' ]; then
@@ -1084,12 +1076,8 @@ fi
 
 if [ "$dovecot" = 'yes' ]; then
     gpasswd -a dovecot mail
-    wget $vestacp/dovecot.tar.gz -O /etc/dovecot.tar.gz
-    wget $vestacp/logrotate/dovecot -O /etc/logrotate.d/dovecot
-    cd /etc
-    rm -rf dovecot dovecot.conf
-    tar -xzf dovecot.tar.gz
-    rm -f dovecot.tar.gz
+    cp -rf $vestacp/dovecot /etc/
+    cp -f $vestacp/logrotate/dovecot /etc/logrotate.d/
     chown -R root:root /etc/dovecot*
     update-rc.d dovecot defaults
     service dovecot start
@@ -1104,7 +1092,7 @@ fi
 if [ "$clamd" = 'yes' ]; then
     gpasswd -a clamav mail
     gpasswd -a clamav Debian-exim
-    wget $vestacp/clamav/clamd.conf -O /etc/clamav/clamd.conf
+    cp -f $vestacp/clamav/clamd.conf /etc/clamav/
     /usr/bin/freshclam
     update-rc.d clamav-daemon defaults
     if [ ! -d "/var/run/clamav" ]; then
@@ -1145,19 +1133,18 @@ fi
 
 if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
     if [ "$apache" = 'yes' ]; then
-        wget $vestacp/roundcube/apache.conf -O /etc/roundcube/apache.conf
+        cp -f $vestacp/roundcube/apache.conf /etc/roundcube/
         ln -s /etc/roundcube/apache.conf /etc/apache2/conf.d/roundcube.conf
     fi
-    wget $vestacp/roundcube/main.inc.php -O /etc/roundcube/main.inc.php
-    wget $vestacp/roundcube/db.inc.php -O /etc/roundcube/db.inc.php
+    cp -f $vestacp/roundcube/main.inc.php /etc/roundcube/
+    cp -f  $vestacp/roundcube/db.inc.php /etc/roundcube/
     chmod 640 /etc/roundcube/debian-db-roundcube.php
     chmod 640 /etc/roundcube/config.inc.php
     chown root:www-data /etc/roundcube/debian-db-roundcube.php
     chown root:www-data /etc/roundcube/config.inc.php
-    wget $vestacp/roundcube/vesta.php -O \
-        /usr/share/roundcube/plugins/password/drivers/vesta.php
-    wget $vestacp/roundcube/config.inc.php -O \
-        /etc/roundcube/plugins/password/config.inc.php
+    cp -f $vestacp/roundcube/vesta.php \
+        /usr/share/roundcube/plugins/password/drivers/
+    cp -f $vestacp/roundcube/config.inc.php /etc/roundcube/plugins/password/
     r="$(gen_pass)"
     mysql -e "CREATE DATABASE roundcube"
     mysql -e "GRANT ALL ON roundcube.* 
@@ -1208,10 +1195,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$fail2ban" = 'yes' ]; then
-    cd /etc
-    wget $vestacp/fail2ban.tar.gz -O fail2ban.tar.gz
-    tar -xzf fail2ban.tar.gz
-    rm -f fail2ban.tar.gz
+    cp -rf $vestacp/fail2ban /etc/
     if [ "$dovecot" = 'no' ]; then
         fline=$(cat /etc/fail2ban/jail.local |grep -n dovecot-iptables -A 2)
         fline=$(echo "$fline" |grep enabled |tail -n1 |cut -f 1 -d -)
@@ -1222,6 +1206,15 @@ if [ "$fail2ban" = 'yes' ]; then
         fline=$(echo "$fline" |grep enabled |tail -n1 |cut -f 1 -d -)
         sed -i "${fline}s/true/false/" /etc/fail2ban/jail.local
     fi
+    if [ "$vsftpd" = 'yes' ]; then
+        #Create vsftpd Log File
+        if [ ! -f "/var/log/vsftpd.log" ]; then
+            touch /var/log/vsftpd.log
+        fi
+        fline=$(cat /etc/fail2ban/jail.local |grep -n vsftpd-iptables -A 2)
+        fline=$(echo "$fline" |grep enabled |tail -n1 |cut -f 1 -d -)
+        sed -i "${fline}s/false/true/" /etc/fail2ban/jail.local
+    fi 
     update-rc.d fail2ban defaults
     service fail2ban start
     check_result $? "fail2ban start failed"

From b9252066e180651663766f052e0012319c39a172 Mon Sep 17 00:00:00 2001
From: Marcos <marcos@raiolanetworks.es>
Date: Fri, 19 Oct 2018 01:54:22 +0200
Subject: [PATCH 0227/2300] spanish revision

---
 web/inc/i18n/es.php | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/web/inc/i18n/es.php b/web/inc/i18n/es.php
index 8cf45ddf..bfc3ac6a 100644
--- a/web/inc/i18n/es.php
+++ b/web/inc/i18n/es.php
@@ -197,7 +197,7 @@ $LANG['es'] = array(
     'IP Addresses'  => 'Direcciones IP',
     'Backups'  => 'Respaldos',
     'Backup System'  => 'Sistema de Respaldo',
-    'backup exclusions' => 'configurar exlusiones',
+    'backup exclusions' => 'configurar exclusiones',
     'template'  => 'plantilla',
     'SSL Support'  => 'Soportar SSL',
     'SSL Home Directory'  => 'Directorio local del SSL',
@@ -641,9 +641,9 @@ $LANG['es'] = array(
     'Delete items' => 'Eliminando items',
     'Copy files' => 'Copiar archivos',
     'Move files' => 'Mover archivos',
-    'Are you sure you want to copy' => 'Estás seguro que deseas copiar',
-    'Are you sure you want to move' => 'Estás seguro que deseas mover',
-    'Are you sure you want to delete' => 'Estás seguro que deseas eliminar',
+    'Are you sure you want to copy' => 'Estás seguro de que deseas copiar',
+    'Are you sure you want to move' => 'Estás seguro de que deseas mover',
+    'Are you sure you want to delete' => 'Estás seguro de que deseas eliminar',
     'into' => 'en',
     'existing files will be replaced' => 'los archivos existentes serán reemplazados',
     'Original name' => 'Nombre original',
@@ -711,7 +711,7 @@ $LANG['es'] = array(
     'Disable and Cancel Licence' => 'Deshabilitar y Cancelar Licencia',
     'Licence Activated' => 'Licencia Activada',
     'Licence Deactivated' => 'Licencia Desactivada',
-    'Restrict users so that they cannot use SSH and access only their home directory.' => 'Restringue a los usuarios para que sólo puedan ingresar a su directorio local y prohíbe el acceso a SSH.',
+    'Restrict users so that they cannot use SSH and access only their home directory.' => 'Restringe a los usuarios para que sólo puedan ingresar a su directorio local y prohíbe el acceso a SSH.',
     'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.' => 'Navegar, copiar, editar, ver y descargar todos los archivos de tu página web utilizando el Administrador de Archivos.',
     'This is a commercial module, you would need to purchace license key to enable it.' => 'Este es un módulo comercial, tendrás que adquirir una licencia para poder activarlo.',
 
@@ -752,8 +752,8 @@ $LANG['es'] = array(
     'PUB_KEY' => 'CLAVE PÚBLICA',
     'ISSUER' => 'EMITIDO POR',
 
-    'Use server hostname' => 'Usar hostname del servidor',
-    'Use domain hostname' => 'Usar hostname del dominio',
+    'Use server hostname' => 'Usar el nombre del servidor',
+    'Use domain hostname' => 'Usar el dominio',
     'Use STARTTLS' => 'Usar STARTTLS',
     'Use SSL / TLS' => 'Usar SSL / TLS',
     'No encryption' => 'Sin encriptación',
@@ -761,6 +761,6 @@ $LANG['es'] = array(
 
     'maximum characters length, including prefix' => 'usar un máximo de %s caracteres, incluyendo prefijo',
 
-    'Email Credentials' => 'Email Credentials',
+    'Email Credentials' => 'Datos de acceso a la cuenta de correo',
     
 );

From 50205c99ec77bd60d99e2df21eee8db24323143b Mon Sep 17 00:00:00 2001
From: Skull Writter <7103685+skullwritter@users.noreply.github.com>
Date: Thu, 25 Oct 2018 19:20:08 +0000
Subject: [PATCH 0228/2300] supose fix to #1526

 i cannot see any diference, but on debian it apears that there is an diference.
maybe because the system has tis var exported? (DISK)
---
 bin/v-update-user-counters | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-update-user-counters b/bin/v-update-user-counters
index 5fcdd671..50b903bd 100755
--- a/bin/v-update-user-counters
+++ b/bin/v-update-user-counters
@@ -53,6 +53,9 @@ for user in $user_list; do
     IP_OWNED=0
     U_USERS=0
     U_DISK=0
+    ##supose fix to #1526 i cannot see any diference, but on debian it apears that there is an diference.
+    ## maybe because the system has tis var exported? (DISK)
+    DISK=0 
     U_DISK_DIRS=$(get_user_value '$U_DISK_DIRS')
     if [ -z "$U_DISK_DIRS" ]; then
         U_DISK_DIRS=0

From 06f670046b21bf8528201c07389d9ab4fbb7cefe Mon Sep 17 00:00:00 2001
From: Skull Writter <7103685+skullwritter@users.noreply.github.com>
Date: Thu, 25 Oct 2018 19:44:46 +0000
Subject: [PATCH 0229/2300] Fix: #1731

Now checks if the domain is suspended (WEB or EMAIL or DNS) if so, continue to the next domain
---
 bin/v-update-letsencrypt-ssl | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 907d305f..2771f9f8 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -31,7 +31,22 @@ for user in $users; do
     # Checking user certificates
     lecounter=0
     for domain in $(search_objects 'web' 'LETSENCRYPT' 'yes' 'DOMAIN'); do
-
+        # Working on Web domain check - if is suspended
+        webSuspended=$(grep "DOMAIN='$domain'" $USER_DATA/web.conf |grep "SUSPENDED='no")
+        if [ ! -z "$webSuspended" ]; then
+                continue;
+        fi;
+        # Working on DNS domain check - if is suspended
+        dnsSuspended=$(grep "DOMAIN='$domain'" $USER_DATA/dns.conf |grep "SUSPENDED='no")
+        if [  ! -z "$dnsSuspended" ]; then
+            continue;
+        fi;
+        #dunno if this is needed, but i will ut it in the same way as web and dns
+        # Working on MAIL domain check - if is suspended
+        mailSuspended=$(grep "DOMAIN='$domain'" $USER_DATA/mail.conf |grep "SUSPENDED='no")
+        if [  ! -z "$mailSuspended" ]; then
+            continue;
+        fi
         crt="$VESTA/data/users/$user/ssl/$domain.crt"
         crt_data=$(openssl x509 -text -in "$crt")
         expire=$(echo "$crt_data" |grep "Not After")

From d9e45f25a7ec2dfc63e2be54b9ce18bec1281b8c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 26 Oct 2018 17:40:49 +0200
Subject: [PATCH 0230/2300] Fix for broken edit cronjob interface when CMD
 contains quote

---
 web/edit/cron/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/edit/cron/index.php b/web/edit/cron/index.php
index c66ca85c..3d8e9922 100644
--- a/web/edit/cron/index.php
+++ b/web/edit/cron/index.php
@@ -23,7 +23,7 @@ $v_job = escapeshellarg($_GET['job']);
 exec (VESTA_CMD."v-list-cron-job ".$user." ".$v_job." 'json'", $output, $return_var);
 check_return_code($return_var,$output);
 
-$data = json_decode(implode('', str_replace("\\", "\\\\", $output)), true);
+$data = json_decode(implode('', $output), true);
 unset($output);
 
 // Parse cron job

From 32e970d111e9f87ebb4530663bfa4ebd1f53a210 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 26 Oct 2018 18:02:24 +0200
Subject: [PATCH 0231/2300] Fix for dovecot namespace inbox=yes

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 769ddfa6..4f7aa770 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1079,6 +1079,7 @@ if [ "$dovecot" = 'yes' ]; then
     cp -rf $vestacp/dovecot /etc/
     cp -f $vestacp/logrotate/dovecot /etc/logrotate.d/
     chown -R root:root /etc/dovecot*
+    sed -i "s#namespace inbox {#namespace inbox {\n  inbox = yes#" /etc/dovecot/conf.d/15-mailboxes.conf
     update-rc.d dovecot defaults
     service dovecot start
     check_result $? "dovecot start failed"

From 21dd9fae6d0908d144b3b747271dce11ea9398e8 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 28 Oct 2018 00:23:12 +0200
Subject: [PATCH 0232/2300] Avoid listing user that is not created from Vesta

---
 bin/v-list-users | 25 ++++++++++++++++++-------
 1 file changed, 18 insertions(+), 7 deletions(-)

diff --git a/bin/v-list-users b/bin/v-list-users
index 14a6d007..32a94736 100755
--- a/bin/v-list-users
+++ b/bin/v-list-users
@@ -15,9 +15,14 @@ format=${1-shell}
 # JSON list function
 json_list() {
     echo '{'
-    object_count=$(grep '@' /etc/passwd |wc -l)
     i=1
     while read USER; do
+        if [ ! -f "$VESTA/data/users/$USER/user.conf" ]; then
+            continue;
+        fi
+        if [ $i -gt 1 ]; then
+            echo ","
+        fi
         source $VESTA/data/users/$USER/user.conf
         echo -n '    "'$USER'": {
         "FNAME": "'$FNAME'",
@@ -74,14 +79,8 @@ json_list() {
         "TIME": "'$TIME'",
         "DATE": "'$DATE'"
         }'
-        if [ "$i" -lt "$object_count" ]; then
-            echo ','
-        else
-            echo
-        fi
         ((i++))
     done < <(grep '@' /etc/passwd |cut -f1 -d:)
-
     echo '}'
 }
 
@@ -90,6 +89,9 @@ shell_list() {
     echo "USER   PKG   WEB   DNS   MAIL   DB   DISK   BW   SPND   DATE"
     echo "----   ---   ---   ---   ---    --   ----   --   ----   ----"
     while read USER; do
+        if [ ! -f "$VESTA/data/users/$USER/user.conf" ]; then
+            continue;
+        fi
         source $VESTA/data/users/$USER/user.conf
         echo -n "$USER $PACKAGE $U_WEB_DOMAINS $U_DNS_DOMAINS $U_MAIL_DOMAINS"
         echo " $U_DATABASES $U_DISK $U_BANDWIDTH $SUSPENDED $DATE"
@@ -99,6 +101,9 @@ shell_list() {
 # PLAIN list function
 plain_list() {
     while read USER; do
+        if [ ! -f "$VESTA/data/users/$USER/user.conf" ]; then
+            continue;
+        fi
         source $VESTA/data/users/$USER/user.conf
         echo -ne "$USER\t$FNAME\t$LNAME\t$PACKAGE\t$WEB_TEMPLATE\t"
         echo -ne "$BACKEND_TEMPLATE\t$PROXY_TEMPLATE\t$DNS_TEMPLATE\t"
@@ -131,6 +136,9 @@ csv_list() {
     echo -n "U_MAIL_DOMAINS,U_MAIL_DKIM,U_MAIL_ACCOUNTS,U_DATABASES"
     echo "U_CRON_JOBS,U_BACKUPS,LANGUAGE,TIME,DATE"
     while read USER; do
+        if [ ! -f "$VESTA/data/users/$USER/user.conf" ]; then
+            continue;
+        fi
         source $VESTA/data/users/$USER/user.conf
         echo -n "$USER,\"$FNAME\",\"$LNAME\",$PACKAGE,$WEB_TEMPLATE,"
         echo -n "$BACKEND_TEMPLATE,$PROXY_TEMPLATE,$DNS_TEMPLATE,"
@@ -151,6 +159,9 @@ csv_list() {
 # Raw list function
 raw_list() {
     while read USER; do
+        if [ ! -f "$VESTA/data/users/$USER/user.conf" ]; then
+            continue;
+        fi
         echo $VESTA/data/users/$USER/user.conf
         cat $VESTA/data/users/$USER/user.conf
     done < <(grep '@' /etc/passwd |cut -f1 -d:)

From 5ab9fc5f4acda403d135707e67f8562dc3449695 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 28 Oct 2018 00:31:34 +0200
Subject: [PATCH 0233/2300] Avoid user stats for the user that is not created
 from Vesta

---
 bin/v-update-user-stats | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-update-user-stats b/bin/v-update-user-stats
index f6b5ff56..23854328 100755
--- a/bin/v-update-user-stats
+++ b/bin/v-update-user-stats
@@ -67,6 +67,9 @@ TOTAL_USERS=0
 
 # Updating user stats
 for user in $user_list; do
+    if [ ! -f "$VESTA/data/users/$user/user.conf" ]; then
+        continue;
+    fi
     USER_DATA=$VESTA/data/users/$user
     source $USER_DATA/user.conf
     next_month=$(date +'%m/01/%y' -d '+ 1 month')

From 10eed3da8f617e927066687a57110e1eacd484f6 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 28 Oct 2018 03:12:13 +0100
Subject: [PATCH 0234/2300] Wait another mysqldump to finish before we use
 mysqldump

---
 bin/v-backup-user | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index f0d7b9b0..17749507 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -412,6 +412,19 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB" != '*' ]; then
         dumpgz="$tmpdir/db/$database/$database.$TYPE.sql.gz"
         grants="$tmpdir/db/$database/conf/$database.$TYPE.$DBUSER"
         if [ ! -f "$dumpgz" ]; then
+
+            while true
+            do
+                if pgrep -x "mysqldump" > /dev/null
+                then
+                    echo "Wait other mysqldump to finish"
+                    sleep 1
+                else
+                    echo "We can use mysqldump now"
+                    break
+                fi
+            done
+
             case $TYPE in
                 mysql) dump_mysql_database ;;
                 pgsql) dump_pgsql_database ;;

From 76319e5a1b2fae758ac7bc86bd22f069bac5a9ad Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 28 Oct 2018 03:29:50 +0100
Subject: [PATCH 0235/2300] Avoid user backup if user is not created from Vesta

---
 bin/v-backup-users | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index e96eb2fb..bbabf3db 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -28,6 +28,9 @@ if [ -z "$BACKUP_SYSTEM" ]; then
     exit
 fi
 for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
+    if [ ! -f "$VESTA/data/users/$user/user.conf" ]; then
+        continue;
+    fi
     check_suspend=$(grep "SUSPENDED='no'" $VESTA/data/users/$user/user.conf)
     log=$VESTA/log/backup.log
     if [ ! -z "$check_suspend" ]; then

From 525bd0f16252e739be6f081349723c751d480b60 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 28 Oct 2018 03:42:39 +0100
Subject: [PATCH 0236/2300] Adding function
 wait_for_backup_if_it_is_not_time_for_backup()

---
 func/main.sh | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/func/main.sh b/func/main.sh
index eeec2eac..74db3382 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -938,3 +938,24 @@ format_aliases() {
         aliases=$(echo "$aliases" |tr '\n' ',' |sed -e "s/,$//")
     fi
 }
+
+
+wait_for_backup_if_it_is_not_time_for_backup() {
+    # block backup if current hour is after 6 AM
+    WAIT_LOOP_ENTERED=0
+    if pgrep -x "v-backup-users" > /dev/null
+    then
+        hour=$(date +"%H");
+        while [ "$hour" -gt "6" ]; do
+            if [ "$WAIT_LOOP_ENTERED" -eq 0 ]; then
+                # do something when enter sleeping state
+                # $BIN/v-restart-web-backend
+            fi
+            WAIT_LOOP_ENTERED=1
+            current_date_time="`date "+%Y-%m-%d %H:%M:%S"`";
+            echo "$current_date_time - wait to backup user $user - current hour is $hour";
+            sleep 300
+            hour=$(date +"%H");
+        done
+    fi
+}

From 4814e7a28e393256a9d0b67717be5b4aff7768f1 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 28 Oct 2018 03:48:22 +0100
Subject: [PATCH 0237/2300] Adding call for function
 wait_for_backup_if_it_is_not_time_for_backup

---
 bin/v-backup-user | 22 ++++++----------------
 1 file changed, 6 insertions(+), 16 deletions(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 17749507..bae7a8b9 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -39,22 +39,7 @@ is_backup_enabled
 #                       Action                             #
 #----------------------------------------------------------#
 
-# block backup if current hour is after 6 AM
-WAIT_LOOP_ENTERED=0
-if pgrep -x "v-backup-users" > /dev/null
-then
-hour=$(date +"%H");
-    while [ "$hour" -gt "6" ]; do
-        if [ "$WAIT_LOOP_ENTERED" -eq 0 ]; then
-             $BIN/v-restart-web-backend
-        fi
-        WAIT_LOOP_ENTERED=1
-        current_date_time="`date "+%Y-%m-%d %H:%M:%S"`";
-        echo "$current_date_time - wait for backup user $user - hour $hour";
-        sleep 300
-        hour=$(date +"%H");
-    done
-fi
+wait_for_backup_if_it_is_not_time_for_backup
 
 # Set backup directory if undefined
 if [ -z "$BACKUP" ]; then
@@ -153,6 +138,7 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
     i=0
 
     for domain in $web_list; do
+        wait_for_backup_if_it_is_not_time_for_backup
         ((i ++))
         echo -e "$(date "+%F %T") $domain" |tee -a $BACKUP/$user.log
         mkdir -p $tmpdir/web/$domain/conf
@@ -326,6 +312,7 @@ if [ ! -z "$MAIL_SYSTEM" ] && [ "$MAIL" != '*' ]; then
 
     i=0
     for domain in $mail_list; do
+        wait_for_backup_if_it_is_not_time_for_backup
         ((i ++))
         echo -e "$(date "+%F %T") $domain" |tee -a $BACKUP/$user.log
         mkdir -p $tmpdir/mail/$domain/conf
@@ -398,6 +385,7 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB" != '*' ]; then
     conf="$USER_DATA/db.conf"
     db_list=$(echo "$db_list" |sed -e "s/  */\ /g" -e "s/^ //")
     for database in $db_list; do
+        wait_for_backup_if_it_is_not_time_for_backup
         ((i ++))
         get_database_values
 
@@ -500,6 +488,8 @@ if [ "$USER" != '*' ]; then
             udir_list="$udir_list $udir"
             echo -e "$(date "+%F %T") adding $udir" |tee -a $BACKUP/$user.log
 
+            wait_for_backup_if_it_is_not_time_for_backup
+
             # Backup files and dirs
             tar -cpf- $udir |gzip -$BACKUP_GZIP - > $tmpdir/user_dir/$udir.tar.gz
         fi

From 9eca02980a23c02c59d4fb799fffcd9954955993 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 28 Oct 2018 03:51:20 +0100
Subject: [PATCH 0238/2300] Adding call for function
 wait_for_backup_if_it_is_not_time_for_backup

---
 bin/v-backup-users | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index bbabf3db..a4ecd37d 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -31,6 +31,7 @@ for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
     if [ ! -f "$VESTA/data/users/$user/user.conf" ]; then
         continue;
     fi
+    wait_for_backup_if_it_is_not_time_for_backup
     check_suspend=$(grep "SUSPENDED='no'" $VESTA/data/users/$user/user.conf)
     log=$VESTA/log/backup.log
     if [ ! -z "$check_suspend" ]; then

From fce6abd6841d29b2c76dcd61265cb14b69b478b1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 29 Oct 2018 12:49:50 +0100
Subject: [PATCH 0239/2300] Commenting empty if block

---
 func/main.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/func/main.sh b/func/main.sh
index 74db3382..77cc4c76 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -947,10 +947,10 @@ wait_for_backup_if_it_is_not_time_for_backup() {
     then
         hour=$(date +"%H");
         while [ "$hour" -gt "6" ]; do
-            if [ "$WAIT_LOOP_ENTERED" -eq 0 ]; then
+            # if [ "$WAIT_LOOP_ENTERED" -eq 0 ]; then
                 # do something when enter sleeping state
                 # $BIN/v-restart-web-backend
-            fi
+            # fi
             WAIT_LOOP_ENTERED=1
             current_date_time="`date "+%Y-%m-%d %H:%M:%S"`";
             echo "$current_date_time - wait to backup user $user - current hour is $hour";

From 0bab3cdf97df00d69e0547fad1007ae71ce5082d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 29 Oct 2018 12:52:43 +0100
Subject: [PATCH 0240/2300] Auto-repair all databases before backuping all
 accounts

---
 bin/v-backup-users | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index a4ecd37d..f27b9195 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -24,6 +24,9 @@ source $VESTA/conf/vesta.conf
 
 $BIN/v-check-vesta-license >/dev/null
 
+# Auto-repair all databases before backuping all accounts
+mysqlrepair --all-databases --check --auto-repair
+
 if [ -z "$BACKUP_SYSTEM" ]; then
     exit
 fi

From 3d0e6dd26be4250e87142d359ceef57eb42700b9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 30 Oct 2018 14:33:40 +0100
Subject: [PATCH 0241/2300] Do not skip backup if LA is above threshold

---
 bin/v-backup-user | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index bae7a8b9..4d30974f 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -56,18 +56,19 @@ email=$(grep CONTACT $VESTA/data/users/admin/user.conf |cut -f 2 -d \')
 
 # Checking load average
 la=$(cat /proc/loadavg |cut -f 1 -d ' ' |cut -f 1 -d '.')
-i=0
+# i=0
 while [ "$la" -ge "$BACKUP_LA_LIMIT" ]; do
     echo -e "$(date "+%F %T") Load Average $la"
     sleep 60
-    if [ "$i" -ge "15" ]; then
-        la_error="LoadAverage $la is above threshold"
-        echo "$la_error" |$SENDMAIL -s "$subj" $email $notify
-        sed -i "/ $user /d" $VESTA/data/queue/backup.pipe
-        check_result $E_LA "$la_error"
-    fi
+    wait_for_backup_if_it_is_not_time_for_backup
+    # if [ "$i" -ge "15" ]; then
+        # la_error="LoadAverage $la is above threshold"
+        # echo "$la_error" |$SENDMAIL -s "$subj" $email $notify
+        # sed -i "/ $user /d" $VESTA/data/queue/backup.pipe
+        # check_result $E_LA "$la_error"
+    # fi
     la=$(cat /proc/loadavg |cut -f 1 -d ' ' |cut -f 1 -d '.')
-    (( ++i))
+    # (( ++i))
 done
 
 if [ -z "$BACKUP_TEMP" ]; then

From fa331e6ef2c98914b3a51147b75f5425adde65c2 Mon Sep 17 00:00:00 2001
From: Skull Writter <7103685+skullwritter@users.noreply.github.com>
Date: Tue, 30 Oct 2018 16:25:24 -0100
Subject: [PATCH 0242/2300] removed dns and mail support - checking le

---
 bin/v-update-letsencrypt-ssl | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 2771f9f8..6e26d7e5 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -36,17 +36,6 @@ for user in $users; do
         if [ ! -z "$webSuspended" ]; then
                 continue;
         fi;
-        # Working on DNS domain check - if is suspended
-        dnsSuspended=$(grep "DOMAIN='$domain'" $USER_DATA/dns.conf |grep "SUSPENDED='no")
-        if [  ! -z "$dnsSuspended" ]; then
-            continue;
-        fi;
-        #dunno if this is needed, but i will ut it in the same way as web and dns
-        # Working on MAIL domain check - if is suspended
-        mailSuspended=$(grep "DOMAIN='$domain'" $USER_DATA/mail.conf |grep "SUSPENDED='no")
-        if [  ! -z "$mailSuspended" ]; then
-            continue;
-        fi
         crt="$VESTA/data/users/$user/ssl/$domain.crt"
         crt_data=$(openssl x509 -text -in "$crt")
         expire=$(echo "$crt_data" |grep "Not After")

From 6a753f65f2147557b6e04bd1f95d634bc50b2af0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tom=C3=A1s=20Vielma?= <tomivs.tk@gmail.com>
Date: Wed, 31 Oct 2018 10:29:25 -0400
Subject: [PATCH 0243/2300] Spanish translation improvements

---
 web/inc/i18n/es.php | 90 ++++++++++++++++++++++-----------------------
 1 file changed, 45 insertions(+), 45 deletions(-)

diff --git a/web/inc/i18n/es.php b/web/inc/i18n/es.php
index bfc3ac6a..212d78a2 100644
--- a/web/inc/i18n/es.php
+++ b/web/inc/i18n/es.php
@@ -8,7 +8,7 @@
  * > huloza - https://github.com/huloza
  * > Estratos Consulting "estratos" - estratos.net
  * > Manuel Valle "Estilate" - estilate.com
- * 
+ *
  */
 
 $LANG['es'] = array(
@@ -145,7 +145,7 @@ $LANG['es'] = array(
     'Search Results'  => 'Resultados de Busqueda',
     'Adding Firewall Rule' => 'Añadiendo Regla al Cortafuegos',
     'Editing Firewall Rule' => 'Editando Regla del Cortafuegos',
-    'Adding IP Address to Banlist' => 'Agregando direcciones IP a la lista negra',
+    'Adding IP Address to Banlist' => 'Agregando dirección IP a la lista negra',
 
     'active'  => 'activo',
     'spnd'  => 'suspendido',
@@ -288,18 +288,18 @@ $LANG['es'] = array(
     'Object'  => 'Objeto',
     'Username'  => 'Nombre de Usuario',
     'Password'  => 'Contraseña',
-    'Email'  => 'Email',
+    'Email'  => 'Correo electrónico',
     'Package'  => 'Plan',
-    'Language'  => 'Lenguaje',
+    'Language'  => 'Idioma',
     'First Name'  => 'Nombre',
     'Last Name'  => 'Apellido',
     'Send login credentials to email address'  => 'Correo para enviar datos de acceso al panel',
-    'Default Template'  => 'Plantilla por Defecto',
-    'Default Name Servers'  => 'Servidor de Nombre por Defecto',
+    'Default Template'  => 'Plantilla Predeterminada',
+    'Default Name Servers'  => 'Servidor de Nombre Predeterminado',
     'Domain'  => 'Dominio',
     'DNS Support'  => 'Soportar DNS',
     'Mail Support'  => 'Soportar Correo',
-    'Advanced options'  => 'Opciones Avanzadas',
+    'Advanced options'  => 'Opciones avanzadas',
     'Basic options'  => 'Opciones básicas',
     'Aliases'  => 'Alias',
     'SSL Certificate'  => 'Certificado SSL',
@@ -395,7 +395,7 @@ $LANG['es'] = array(
     'Comment' => 'Comentario',
     'Banlist' => 'Lista Negra',
     'ranges are acceptable' => 'rangos son aceptables',
-    'CIDR format is supported' => 'Se admite formato CIDR',
+    'CIDR format is supported' => 'se admite formato CIDR',
     'ACCEPT' => 'ACEPTAR',
     'DROP' => 'DENEGAR',
     'TCP' => 'TCP',
@@ -455,7 +455,7 @@ $LANG['es'] = array(
     'MAIL_DOMAIN_CREATED_OK'  => 'El Dominio de Correo <a href="/list/mail/?domain=%s"><b>%s</b></a> ha sido creado exitosamente.',
     'MAIL_ACCOUNT_CREATED_OK'  => 'La Cuenta de Correo <a href="/edit/mail/?account=%s&domain=%s"><b>%s@%s</b></a> ha sido creada exitosamente.',
     'DATABASE_CREATED_OK'  => 'La Base de Datos <a href="/edit/db/?database=%s"><b>%s</b></a> ha sido creada exitosamente.',
-    'CRON_CREATED_OK'  => 'Una Tarea Programada ha sido creada exitosamente.',
+    'CRON_CREATED_OK'  => 'La Tarea Programada ha sido creada exitosamente.',
     'IP_CREATED_OK'  => 'La Dirección IP <a href="/edit/ip/?ip=%s"><b>%s</b></a> ha sido creada exitosamente.',
     'PACKAGE_CREATED_OK'  => 'El Plan <a href="/edit/package/?package=%s"><b>%s</b></a> ha sido creado exitosamente.',
     'SSL_GENERATED_OK' => 'El certificado SSl ha sido creado exitosamente.',
@@ -467,33 +467,33 @@ $LANG['es'] = array(
     'Cronjob email reporting has been successfully disabled' => 'Se han desactivado exitosamente las notificaciones por correo de las Tareas Programadas.',
     'Changes has been saved.'  => 'Los cambios han sido guardados exitosamente.',
     'Confirmation'  => 'Confirmación',
-    'DELETE_USER_CONFIRMATION' => '¿Está seguro que desea eliminar el usuario %s?',
-    'SUSPEND_USER_CONFIRMATION' => '¿Está seguro que desea suspender el usuario %s?',
-    'UNSUSPEND_USER_CONFIRMATION' => '¿Está seguro que desea habilitar el usuario %s?',
-    'DELETE_DOMAIN_CONFIRMATION' => '¿Está seguro que desea eliminar el dominio %s?',
-    'SUSPEND_DOMAIN_CONFIRMATION' => '¿Está seguro que desea suspender el dominio %s?',
-    'UNSUSPEND_DOMAIN_CONFIRMATION' => '¿Está seguro que desea habilitar el dominio %s?',
-    'DELETE_RECORD_CONFIRMATION' => '¿Está seguro que desea eliminar el registro %s?',
-    'SUSPEND_RECORD_CONFIRMATION' => '¿Está seguro que desea suspender el registro %s?',
-    'UNSUSPEND_RECORD_CONFIRMATION' => '¿Está seguro que desea habilitar el registro %s?',
-    'DELETE_MAIL_ACCOUNT_CONFIRMATION' => '¿Está seguro que desea eliminar la cuenta de correo %s?',
-    'SUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '¿Está seguro que desea suspender la cuenta de correo %s?',
-    'UNSUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '¿Está seguro que desea habilitar la cuenta de correo %s?',
-    'DELETE_DATABASE_CONFIRMATION' => '¿Está seguro que desea eliminar la base de datos %s?',
-    'SUSPEND_DATABASE_CONFIRMATION' => '¿Está seguro que desea suspender la base de datos %s?',
-    'UNSUSPEND_DATABASE_CONFIRMATION' => '¿Está seguro que desea habilitar la base de datos %s?',
-    'DELETE_CRON_CONFIRMATION' => '¿Está seguro que desea eliminar la tarea programada %s?',
-    'SUSPEND_CRON_CONFIRMATION' => '¿Está seguro que desea suspender la tarea programada %s?',
-    'UNSUSPEND_CRON_CONFIRMATION' => '¿Está seguro que desea habilitar la tarea programada %s?',
-    'DELETE_BACKUP_CONFIRMATION'  => '¿Está seguro que desea eliminar el resplado %s?',
-    'DELETE_EXCLUSION_CONFIRMATION' => '¿Está seguro que desea eliminar la exclusión %s?',
-    'DELETE_PACKAGE_CONFIRMATION'  => '¿Está seguro que desea eliminar el plan %s?',
-    'DELETE_IP_CONFIRMATION'  => '¿Está seguro que desea eliminar la dirección IP %s?',
-    'DELETE_RULE_CONFIRMATION' => '¿Está seguro que desea eliminar la regla #%s',
-    'SUSPEND_RULE_CONFIRMATION' => '¿Está seguro que desea suspender la regla #%s?',
-    'UNSUSPEND_RULE_CONFIRMATION' => '¿Está seguro que desea habilitar la regla #%s?',
+    'DELETE_USER_CONFIRMATION' => '¿Está seguro de que desea eliminar el usuario %s?',
+    'SUSPEND_USER_CONFIRMATION' => '¿Está seguro de que desea suspender el usuario %s?',
+    'UNSUSPEND_USER_CONFIRMATION' => '¿Está seguro de que desea habilitar el usuario %s?',
+    'DELETE_DOMAIN_CONFIRMATION' => '¿Está seguro de que desea eliminar el dominio %s?',
+    'SUSPEND_DOMAIN_CONFIRMATION' => '¿Está seguro de que desea suspender el dominio %s?',
+    'UNSUSPEND_DOMAIN_CONFIRMATION' => '¿Está seguro de que desea habilitar el dominio %s?',
+    'DELETE_RECORD_CONFIRMATION' => '¿Está seguro de que desea eliminar el registro %s?',
+    'SUSPEND_RECORD_CONFIRMATION' => '¿Está seguro de que desea suspender el registro %s?',
+    'UNSUSPEND_RECORD_CONFIRMATION' => '¿Está seguro de que desea habilitar el registro %s?',
+    'DELETE_MAIL_ACCOUNT_CONFIRMATION' => '¿Está seguro de que desea eliminar la cuenta de correo %s?',
+    'SUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '¿Está seguro de que desea suspender la cuenta de correo %s?',
+    'UNSUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '¿Está seguro de que desea habilitar la cuenta de correo %s?',
+    'DELETE_DATABASE_CONFIRMATION' => '¿Está seguro de que desea eliminar la base de datos %s?',
+    'SUSPEND_DATABASE_CONFIRMATION' => '¿Está seguro de que desea suspender la base de datos %s?',
+    'UNSUSPEND_DATABASE_CONFIRMATION' => '¿Está seguro de que desea habilitar la base de datos %s?',
+    'DELETE_CRON_CONFIRMATION' => '¿Está seguro de que desea eliminar la tarea programada %s?',
+    'SUSPEND_CRON_CONFIRMATION' => '¿Está seguro de que desea suspender la tarea programada %s?',
+    'UNSUSPEND_CRON_CONFIRMATION' => '¿Está seguro de que desea habilitar la tarea programada %s?',
+    'DELETE_BACKUP_CONFIRMATION'  => '¿Está seguro de que desea eliminar el resplado %s?',
+    'DELETE_EXCLUSION_CONFIRMATION' => '¿Está seguro de que desea eliminar la exclusión %s?',
+    'DELETE_PACKAGE_CONFIRMATION'  => '¿Está seguro de que desea eliminar el plan %s?',
+    'DELETE_IP_CONFIRMATION'  => '¿Está seguro de que desea eliminar la dirección IP %s?',
+    'DELETE_RULE_CONFIRMATION' => '¿Está seguro de que desea eliminar la regla #%s',
+    'SUSPEND_RULE_CONFIRMATION' => '¿Está seguro de que desea suspender la regla #%s?',
+    'UNSUSPEND_RULE_CONFIRMATION' => '¿Está seguro de que desea habilitar la regla #%s?',
     'LEAVE_PAGE_CONFIRMATION' => '¿Está seguro de que quiere abandonar esta página?',
-    'RESTART_CONFIRMATION' => '¿Está seguro que desea reiniciar %s?',
+    'RESTART_CONFIRMATION' => '¿Está seguro de que desea reiniciar %s?',
     'Welcome'  => 'Bienvenido',
     'LOGGED_IN_AS'  => 'Has iniciado sesión exitosamente con el usuario %s.',
     'Error'  => 'Error',
@@ -506,10 +506,10 @@ $LANG['es'] = array(
     'Error code:'  => 'Código de Error: %s',
     'SERVICE_ACTION_FAILED'  => '"%s" "%s" ha fallado',
     'IP address is in use' => 'La Dirección IP está en uso.',
-    'BACKUP_SCHEDULED'  => 'La tarea se ha añadido a la cola. Recibirá un correo de notificación cuando el respaldo esté listo para su descarga.',    
-    'BACKUP_EXISTS'  => 'Se está realizando un respaldo en este momento. Por favor espere a que éste termine.',
+    'BACKUP_SCHEDULED'  => 'La tarea se ha añadido a la cola. Recibirá un correo de notificación cuando el respaldo esté listo para su descarga.',
+    'BACKUP_EXISTS'  => 'Se está realizando un respaldo en este momento. Por favor espere a que este termine.',
     'RESTORE_SCHEDULED'  => 'La tarea se ha añadido a la cola. Recibirá un correo de notificación cuando la restauración haya terminado.',
-    'RESTORE_EXISTS'  => 'Se está realizando una restauración en este momento. Por favor espere a que ésta termine.',
+    'RESTORE_EXISTS'  => 'Se está realizando una restauración en este momento. Por favor espere a que esta termine.',
 
     'WEB_EXCLUSIONS' => 'Ingrese el nombre de dominio, uno por línea. Para excluir a todos utilice *. Para excluir directorios específicos utilice el siguiente formato: dominio.com:public_html/cache:public_html/tmp',
     'DNS_EXCLUSIONS' => 'Ingrese el nombre de dominio, uno por línea. Para excluir a todos utilice *',
@@ -557,7 +557,7 @@ $LANG['es'] = array(
     'Configuring Server' => 'Configurar Servidor',
     'Hostname' => 'Nombre del Servidor',
     'Time Zone' => 'Zona Horaria',
-    'Default Language' => 'Idioma por Defecto',
+    'Default Language' => 'Idioma Predeterminado',
     'Proxy Server' => 'Servidor Proxy',
     'Web Server' => 'Servidor Web',
     'Backend Server' => 'Backend Server',
@@ -615,7 +615,7 @@ $LANG['es'] = array(
     'EXTRACT' => 'EXTRAER',
     'DOWNLOAD' => 'DESCARGAR',
     'Are you sure?' => '¿Estás seguro?',
-    'Hit' => 'Hit',
+    'Hit' => 'Pulsa',
     'to reload the page' => 'para recargar la página',
     'Directory name cannot be empty' => 'El nombre del directorio no puede estar vacío',
     'File name cannot be empty' => 'El nombre del archivo no puede estar vacío',
@@ -638,7 +638,7 @@ $LANG['es'] = array(
     'OK' => 'OK',
     'YOU ARE COPYING' => 'ESTÁS COPIANDO',
     'YOU ARE REMOVING' => 'ESTÁS ELIMINANDO',
-    'Delete items' => 'Eliminando items',
+    'Delete items' => 'Eliminar elementos',
     'Copy files' => 'Copiar archivos',
     'Move files' => 'Mover archivos',
     'Are you sure you want to copy' => 'Estás seguro de que deseas copiar',
@@ -665,13 +665,13 @@ $LANG['es'] = array(
     'Add New object' => 'Añadir Objeto Nuevo',
     'Save Form' => 'Guardar Formulario',
     'Cancel saving form' => 'Omitir guardar el formulario',
-    'Go to USER list' => 'Ir a USUARIOS',    // En mi opinión queda mejor "Ir a" que "Ir a Listado o Catalogo"
+    'Go to USER list' => 'Ir a USUARIOS',
     'Go to WEB list' => 'Ir a DOMINIOS / WEB',
     'Go to DNS list' => 'Ir a DNS',
     'Go to MAIL list' => 'Ir a CORREOS',
     'Go to DB list' => 'Ir a BASES DE DATOS',
-    'Go to CRON list' => 'IR a TAREAS PROGRAMADAS',
-    'Go to BACKUP list' => 'IR a RESPALDOS',
+    'Go to CRON list' => 'Ir a TAREAS PROGRAMADAS',
+    'Go to BACKUP list' => 'Ir a RESPALDOS',
     'Focus on search' => 'Desplegar Buscador',
     'Display/Close shortcuts' => 'Mostrar/Ocultar atajos',
     'Move backward through top menu' => 'Desplazarse hacia atrás en el menú superior',
@@ -762,5 +762,5 @@ $LANG['es'] = array(
     'maximum characters length, including prefix' => 'usar un máximo de %s caracteres, incluyendo prefijo',
 
     'Email Credentials' => 'Datos de acceso a la cuenta de correo',
-    
+
 );

From f9a15564e2e9748bd990c5f1e3c31f7b2c4620c8 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 31 Oct 2018 17:07:01 +0100
Subject: [PATCH 0244/2300] Escaping quotas in JSON output of
 v-list-web-domain-ssl

---
 bin/v-list-web-domain-ssl | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-list-web-domain-ssl b/bin/v-list-web-domain-ssl
index c91a7cca..99fd5cf8 100755
--- a/bin/v-list-web-domain-ssl
+++ b/bin/v-list-web-domain-ssl
@@ -19,6 +19,7 @@ source $VESTA/func/main.sh
 
 # JSON list function
 json_list() {
+    issuer=$(echo "$issuer" |sed -e 's/"/\\"/g' -e "s/%quote%/'/g")
     echo '{'
     echo -e "\t\"$domain\": {"
     echo "        \"CRT\": \"$crt\","

From 5170e5f5aa944a44e0b0becb066320e24328da9e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 4 Nov 2018 03:35:17 +0100
Subject: [PATCH 0245/2300] Dovecot fix namespace inbox=yes only for Debian9

---
 install/vst-install-debian.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 4f7aa770..87edd88b 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1079,7 +1079,9 @@ if [ "$dovecot" = 'yes' ]; then
     cp -rf $vestacp/dovecot /etc/
     cp -f $vestacp/logrotate/dovecot /etc/logrotate.d/
     chown -R root:root /etc/dovecot*
-    sed -i "s#namespace inbox {#namespace inbox {\n  inbox = yes#" /etc/dovecot/conf.d/15-mailboxes.conf
+    if [ "$release" -eq 9 ]; then
+        sed -i "s#namespace inbox {#namespace inbox {\n  inbox = yes#" /etc/dovecot/conf.d/15-mailboxes.conf
+    fi
     update-rc.d dovecot defaults
     service dovecot start
     check_result $? "dovecot start failed"

From 14f64bc512410be8b307dd5b8efceb272253481c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Nov 2018 03:41:20 +0100
Subject: [PATCH 0246/2300] Moving backup LA check

---
 bin/v-backup-user | 17 -----------------
 1 file changed, 17 deletions(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 4d30974f..cc37aef5 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -54,23 +54,6 @@ start_time=$(date '+%s')
 subj="$user → backup failed"
 email=$(grep CONTACT $VESTA/data/users/admin/user.conf |cut -f 2 -d \')
 
-# Checking load average
-la=$(cat /proc/loadavg |cut -f 1 -d ' ' |cut -f 1 -d '.')
-# i=0
-while [ "$la" -ge "$BACKUP_LA_LIMIT" ]; do
-    echo -e "$(date "+%F %T") Load Average $la"
-    sleep 60
-    wait_for_backup_if_it_is_not_time_for_backup
-    # if [ "$i" -ge "15" ]; then
-        # la_error="LoadAverage $la is above threshold"
-        # echo "$la_error" |$SENDMAIL -s "$subj" $email $notify
-        # sed -i "/ $user /d" $VESTA/data/queue/backup.pipe
-        # check_result $E_LA "$la_error"
-    # fi
-    la=$(cat /proc/loadavg |cut -f 1 -d ' ' |cut -f 1 -d '.')
-    # (( ++i))
-done
-
 if [ -z "$BACKUP_TEMP" ]; then
     BACKUP_TEMP=$BACKUP
 fi

From 441679a9607366d34b452bde3637de648b76e50a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Nov 2018 03:44:35 +0100
Subject: [PATCH 0247/2300] Better place for backup LA check

---
 func/main.sh | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/func/main.sh b/func/main.sh
index 77cc4c76..bafedfdf 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -941,6 +941,22 @@ format_aliases() {
 
 
 wait_for_backup_if_it_is_not_time_for_backup() {
+    # Checking load average
+    la=$(cat /proc/loadavg |cut -f 1 -d ' ' |cut -f 1 -d '.')
+    # i=0
+    while [ "$la" -ge "$BACKUP_LA_LIMIT" ]; do
+        echo -e "$(date "+%F %T") Load Average $la"
+        sleep 60
+        # if [ "$i" -ge "15" ]; then
+            # la_error="LoadAverage $la is above threshold"
+            # echo "$la_error" |$SENDMAIL -s "$subj" $email $notify
+            # sed -i "/ $user /d" $VESTA/data/queue/backup.pipe
+            # check_result $E_LA "$la_error"
+        # fi
+        la=$(cat /proc/loadavg |cut -f 1 -d ' ' |cut -f 1 -d '.')
+        # (( ++i))
+    done
+
     # block backup if current hour is after 6 AM
     WAIT_LOOP_ENTERED=0
     if pgrep -x "v-backup-users" > /dev/null

From b4dc63b72f1ac8d834e0b4b45eb1b1d280cf0615 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Nov 2018 03:49:14 +0100
Subject: [PATCH 0248/2300] Avoiding "We can use mysqldump now"

---
 bin/v-backup-user | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index cc37aef5..070dfb53 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -385,15 +385,19 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB" != '*' ]; then
         grants="$tmpdir/db/$database/conf/$database.$TYPE.$DBUSER"
         if [ ! -f "$dumpgz" ]; then
 
+            WAIT_LOOP_ENTERED=0
             while true
             do
                 if pgrep -x "mysqldump" > /dev/null
                 then
+                    WAIT_LOOP_ENTERED=1
                     echo "Wait other mysqldump to finish"
                     sleep 1
                 else
-                    echo "We can use mysqldump now"
-                    break
+                    if [ "$WAIT_LOOP_ENTERED" -eq 1 ]; then
+                        echo "We can use mysqldump now"
+                        break
+                    fi
                 fi
             done
 

From 7b498a7a3c57f99f85f15b13010d6f3201dd8334 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Nov 2018 03:53:13 +0100
Subject: [PATCH 0249/2300] Fix for avoiding "We can use mysqldump now"

---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 070dfb53..574bbe5a 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -396,8 +396,8 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB" != '*' ]; then
                 else
                     if [ "$WAIT_LOOP_ENTERED" -eq 1 ]; then
                         echo "We can use mysqldump now"
-                        break
                     fi
+                    break
                 fi
             done
 

From 3acf962fa25df15f9b161a09fd4b99bf0c14dc19 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Nov 2018 04:01:46 +0100
Subject: [PATCH 0250/2300] Mute backup auto-repair databases

---
 bin/v-backup-users | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index f27b9195..39a53fc4 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -25,7 +25,7 @@ source $VESTA/conf/vesta.conf
 $BIN/v-check-vesta-license >/dev/null
 
 # Auto-repair all databases before backuping all accounts
-mysqlrepair --all-databases --check --auto-repair
+mysqlrepair --all-databases --check --auto-repair /dev/null 2>&1
 
 if [ -z "$BACKUP_SYSTEM" ]; then
     exit

From 9f4ec54618a95076d624c4e152817f8397c86adb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Nov 2018 04:02:45 +0100
Subject: [PATCH 0251/2300] Fix for mute auto-repair databases

---
 bin/v-backup-users | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index 39a53fc4..ed43f8f3 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -25,7 +25,7 @@ source $VESTA/conf/vesta.conf
 $BIN/v-check-vesta-license >/dev/null
 
 # Auto-repair all databases before backuping all accounts
-mysqlrepair --all-databases --check --auto-repair /dev/null 2>&1
+mysqlrepair --all-databases --check --auto-repair > /dev/null 2>&1
 
 if [ -z "$BACKUP_SYSTEM" ]; then
     exit

From c32fa673e15272779de2934d410fff72cb6702c3 Mon Sep 17 00:00:00 2001
From: Alexandr Loskutov <alex_connor@icloud.com>
Date: Sun, 4 Nov 2018 08:21:36 +0200
Subject: [PATCH 0252/2300] Fix Dovecot namespace inbox=yes for CentOS 7

Co-Authored-By: dpeca <dpeca@users.noreply.github.com>
---
 install/vst-install-rhel.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index 3aaad808..385534ec 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -1127,6 +1127,9 @@ if [ "$dovecot" = 'yes' ]; then
     cp -rf $vestacp/dovecot /etc/
     cp -f $vestacp/logrotate/dovecot /etc/logrotate.d/
     chown -R root:root /etc/dovecot*
+    if [ "$release" -eq 7 ]; then
+        sed -i "s#namespace inbox {#namespace inbox {\n  inbox = yes#" /etc/dovecot/conf.d/15-mailboxes.conf
+    fi
     chkconfig dovecot on
     service dovecot start
     check_result $? "dovecot start failed"

From 381bc48e9652bdcfe74ef0c864076fd48df5bc07 Mon Sep 17 00:00:00 2001
From: "Made I.T" <info@madeit.be>
Date: Thu, 8 Nov 2018 16:32:31 +0100
Subject: [PATCH 0253/2300] Fix dubble www

---
 bin/v-add-web-domain | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-web-domain b/bin/v-add-web-domain
index b937330c..1005bc9c 100755
--- a/bin/v-add-web-domain
+++ b/bin/v-add-web-domain
@@ -113,9 +113,12 @@ if [ "$aliases" = 'none' ]; then
     ALIAS=''
 else
     ALIAS="www.$domain"
-    if [ ! -z "$aliases" ]; then
-        ALIAS="$ALIAS,$aliases"
+    if [ -z "$aliases" ]; then
+        ALIAS="www.$domain"
+    else
+        ALIAS="$aliases"
     fi
+    
     ip_alias=$(get_ip_alias $domain)
     if [ ! -z "$ip_alias" ]; then
         ALIAS="$ALIAS,$ip_alias"

From 2dc406aae4801b4151daa4f8e052a3ad367e3a8d Mon Sep 17 00:00:00 2001
From: "Made I.T" <info@madeit.be>
Date: Thu, 8 Nov 2018 16:33:34 +0100
Subject: [PATCH 0254/2300] Fix dubble www

---
 func/main.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index e78e6edf..ca4ac3c5 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -933,7 +933,7 @@ format_aliases() {
         aliases=$(echo "$aliases" |tr -s '.')
         aliases=$(echo "$aliases" |sed -e "s/[.]*$//g")
         aliases=$(echo "$aliases" |sed -e "s/^[.]*//")
-        aliases=$(echo "$aliases" |grep -v www.$domain |sed -e "/^$/d")
+        aliases=$(echo "$aliases" |sed -e "/^$/d")
         aliases=$(echo "$aliases" |tr '\n' ',' |sed -e "s/,$//")
     fi
 }

From b9210522f57ee8f1c090d607a73bef5663108a65 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 9 Nov 2018 17:47:05 +0100
Subject: [PATCH 0255/2300] Ubuntu 18.04 dovecot namespace inbox fix

Fix based on https://github.com/serghey-rodin/vesta/pull/1669/files
---
 install/ubuntu/18.04/dovecot/dovecot.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/ubuntu/18.04/dovecot/dovecot.conf b/install/ubuntu/18.04/dovecot/dovecot.conf
index 311a3351..163460ba 100644
--- a/install/ubuntu/18.04/dovecot/dovecot.conf
+++ b/install/ubuntu/18.04/dovecot/dovecot.conf
@@ -3,7 +3,7 @@ listen = *, ::
 base_dir = /var/run/dovecot/
 !include conf.d/*.conf
 
-namespace {
+namespace inbox {
     type = private
     separator = /
     prefix =

From 0760e6a2e6752d00534aa2af6ae94228dc0685b0 Mon Sep 17 00:00:00 2001
From: Hacktivista <sir@hacktivista.com>
Date: Wed, 7 Nov 2018 12:53:59 -0300
Subject: [PATCH 0256/2300] Don't chown $VESTA/data/sessions admin:admin
 previous to user admin creation

Fixes `chown: invalid user: 'admin:admin'` on Debian installations, line not present in other distros install scripts
---
 install/vst-install-debian.sh | 1 -
 1 file changed, 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 47f36142..846092e9 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -711,7 +711,6 @@ chmod -R 750 $VESTA/data/queue
 chmod 660 $VESTA/log/*
 rm -f /var/log/vesta
 ln -s $VESTA/log /var/log/vesta
-chown admin:admin $VESTA/data/sessions
 chmod 770 $VESTA/data/sessions
 
 # Generating vesta configuration

From 9abd3baf2ebe5460fb869e2deb292a23b3eea429 Mon Sep 17 00:00:00 2001
From: Hacktivista <sir@hacktivista.com>
Date: Wed, 7 Nov 2018 15:31:01 -0300
Subject: [PATCH 0257/2300] Fix v-update-sys-ip: verify if primary IP exists

Fixes the following errors on new installations:

> mv: cannot move '/usr/local/vesta/data/ips/' to a subdirectory of itself, '/usr/local/vesta/data/ips/x.x.x.x'
> sed: can't read /usr/local/vesta/data/users/*/dns/*.conf: No such file or directory
> sed: -e expression #1, char 0: no previous regular expression
> sed: -e expression #1, char 0: no previous regular expression
---
 bin/v-update-sys-ip | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-sys-ip b/bin/v-update-sys-ip
index 7360b07f..6c07edc6 100755
--- a/bin/v-update-sys-ip
+++ b/bin/v-update-sys-ip
@@ -44,7 +44,7 @@ if [[ "$ip_num" -eq '1' ]] && [[ "$v_ip_num" -eq 1 ]]; then
 fi
 
 # Updating configs
-if [ ! -z "$new" ]; then
+if [ ! -z "$old" ]; then
     mv $VESTA/data/ips/$old $VESTA/data/ips/$new
 
     # Updating PROXY

From e799566c6ba1c84e6689cb016bbc0f05abda2767 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:14:04 +0100
Subject: [PATCH 0258/2300] vary

vary, causes page speed issues
---
 install/debian/7/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/debian/7/nginx/nginx.conf b/install/debian/7/nginx/nginx.conf
index e7256de7..6bc999f9 100644
--- a/install/debian/7/nginx/nginx.conf
+++ b/install/debian/7/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From 591bfdaad19b91ed73ddf93313123ecc3c1b035b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:14:39 +0100
Subject: [PATCH 0259/2300] Update nginx.conf

---
 install/debian/8/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/debian/8/nginx/nginx.conf b/install/debian/8/nginx/nginx.conf
index 1eef1672..e8967d8e 100644
--- a/install/debian/8/nginx/nginx.conf
+++ b/install/debian/8/nginx/nginx.conf
@@ -51,6 +51,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From a3982fd477136acfa66314de153eee66a464151e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:16:24 +0100
Subject: [PATCH 0260/2300] Update nginx.conf

vary on
---
 install/debian/9/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/debian/9/nginx/nginx.conf b/install/debian/9/nginx/nginx.conf
index 1eef1672..e8967d8e 100644
--- a/install/debian/9/nginx/nginx.conf
+++ b/install/debian/9/nginx/nginx.conf
@@ -51,6 +51,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From 4d70c416ca7425076e58fc921b051123f58c8abe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:17:02 +0100
Subject: [PATCH 0261/2300] Update nginx.conf

vary on
---
 install/rhel/7/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/rhel/7/nginx/nginx.conf b/install/rhel/7/nginx/nginx.conf
index e0575030..0a37ebbc 100644
--- a/install/rhel/7/nginx/nginx.conf
+++ b/install/rhel/7/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From 49cf56972954ef9b3da144da60c1ab53007a6ce4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:17:31 +0100
Subject: [PATCH 0262/2300] Update nginx.conf

vary on
---
 install/rhel/6/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/rhel/6/nginx/nginx.conf b/install/rhel/6/nginx/nginx.conf
index e0575030..0a37ebbc 100644
--- a/install/rhel/6/nginx/nginx.conf
+++ b/install/rhel/6/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From 812e001723fb1b62537d0b47daf3203f1f16c5e5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:18:06 +0100
Subject: [PATCH 0263/2300] Update nginx.conf

vary on
---
 install/rhel/5/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/rhel/5/nginx/nginx.conf b/install/rhel/5/nginx/nginx.conf
index e0575030..0a37ebbc 100644
--- a/install/rhel/5/nginx/nginx.conf
+++ b/install/rhel/5/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From 4073325014f92dc1c34a43f5f36d5d0235eb29df Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:20:21 +0100
Subject: [PATCH 0264/2300] Update nginx.conf

vary on
---
 install/ubuntu/12.04/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/12.04/nginx/nginx.conf b/install/ubuntu/12.04/nginx/nginx.conf
index e7256de7..6bc999f9 100644
--- a/install/ubuntu/12.04/nginx/nginx.conf
+++ b/install/ubuntu/12.04/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From 151f82e51958ff3941d4c32209c7a2e3264eb599 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:21:12 +0100
Subject: [PATCH 0265/2300] Update nginx.conf

vary on
---
 install/ubuntu/18.04/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/18.04/nginx/nginx.conf b/install/ubuntu/18.04/nginx/nginx.conf
index 790aee49..dc2cf1dd 100644
--- a/install/ubuntu/18.04/nginx/nginx.conf
+++ b/install/ubuntu/18.04/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_static         on;
     gzip_vary           on;
     gzip_comp_level     6;

From 61c439554e404fa124dc577c53649bb960e8b24e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:21:38 +0100
Subject: [PATCH 0266/2300] Update nginx.conf

vary on
---
 install/ubuntu/17.10/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/17.10/nginx/nginx.conf b/install/ubuntu/17.10/nginx/nginx.conf
index e7256de7..6bc999f9 100644
--- a/install/ubuntu/17.10/nginx/nginx.conf
+++ b/install/ubuntu/17.10/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From 433166a4776b25d4469316cce98f64452650b73d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:22:32 +0100
Subject: [PATCH 0267/2300] Update nginx.conf

vary on
---
 install/ubuntu/17.04/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/17.04/nginx/nginx.conf b/install/ubuntu/17.04/nginx/nginx.conf
index e7256de7..6bc999f9 100644
--- a/install/ubuntu/17.04/nginx/nginx.conf
+++ b/install/ubuntu/17.04/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From 46b7d8438fc3e477821c5004670c1918dab274ea Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:23:06 +0100
Subject: [PATCH 0268/2300] Update nginx.conf

vary on
---
 install/ubuntu/12.10/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/12.10/nginx/nginx.conf b/install/ubuntu/12.10/nginx/nginx.conf
index e7256de7..6bc999f9 100644
--- a/install/ubuntu/12.10/nginx/nginx.conf
+++ b/install/ubuntu/12.10/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From ef422f62f643b5212fc1543de82a407f95c65e5a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:23:19 +0100
Subject: [PATCH 0269/2300] Update nginx.conf

vary on
---
 install/ubuntu/13.04/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/13.04/nginx/nginx.conf b/install/ubuntu/13.04/nginx/nginx.conf
index e7256de7..6bc999f9 100644
--- a/install/ubuntu/13.04/nginx/nginx.conf
+++ b/install/ubuntu/13.04/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From ccc4e5a2626607e09d84a99e7c5bec11c9e6d337 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:23:45 +0100
Subject: [PATCH 0270/2300] Update nginx.conf

vary on
---
 install/ubuntu/13.10/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/13.10/nginx/nginx.conf b/install/ubuntu/13.10/nginx/nginx.conf
index e7256de7..6bc999f9 100644
--- a/install/ubuntu/13.10/nginx/nginx.conf
+++ b/install/ubuntu/13.10/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From 936b225b30382444ff45dd941597fa9ef570f76e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:24:02 +0100
Subject: [PATCH 0271/2300] Update nginx.conf

vary on
---
 install/ubuntu/16.10/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/16.10/nginx/nginx.conf b/install/ubuntu/16.10/nginx/nginx.conf
index e7256de7..6bc999f9 100644
--- a/install/ubuntu/16.10/nginx/nginx.conf
+++ b/install/ubuntu/16.10/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From d6e0b4e18f39a8169df8ffe83db0b3541e888cc6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:24:17 +0100
Subject: [PATCH 0272/2300] Update nginx.conf

vary on
---
 install/ubuntu/16.04/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/16.04/nginx/nginx.conf b/install/ubuntu/16.04/nginx/nginx.conf
index e7256de7..6bc999f9 100644
--- a/install/ubuntu/16.04/nginx/nginx.conf
+++ b/install/ubuntu/16.04/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From 0f1fb8aa43f3cf5c6947a0e9ceacf866f40a797d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:24:25 +0100
Subject: [PATCH 0273/2300] Update nginx.conf

---
 install/ubuntu/15.10/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/15.10/nginx/nginx.conf b/install/ubuntu/15.10/nginx/nginx.conf
index e7256de7..6bc999f9 100644
--- a/install/ubuntu/15.10/nginx/nginx.conf
+++ b/install/ubuntu/15.10/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From 13d713ecc817e6a894609e25d26500532cb56fa4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:24:42 +0100
Subject: [PATCH 0274/2300] Update nginx.conf

---
 install/ubuntu/15.04/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/15.04/nginx/nginx.conf b/install/ubuntu/15.04/nginx/nginx.conf
index e7256de7..6bc999f9 100644
--- a/install/ubuntu/15.04/nginx/nginx.conf
+++ b/install/ubuntu/15.04/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From c82e50056d6f807a1f0056449b8f40c95e132c3c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:24:58 +0100
Subject: [PATCH 0275/2300] Update nginx.conf

vary on
---
 install/ubuntu/14.10/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/14.10/nginx/nginx.conf b/install/ubuntu/14.10/nginx/nginx.conf
index e7256de7..6bc999f9 100644
--- a/install/ubuntu/14.10/nginx/nginx.conf
+++ b/install/ubuntu/14.10/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From e67297010370a1a006815f18ea3a6a7e0ef86d96 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Wed, 14 Nov 2018 00:25:12 +0100
Subject: [PATCH 0276/2300] Update nginx.conf

vary on
---
 install/ubuntu/14.04/nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/ubuntu/14.04/nginx/nginx.conf b/install/ubuntu/14.04/nginx/nginx.conf
index 1932d171..c44ab650 100644
--- a/install/ubuntu/14.04/nginx/nginx.conf
+++ b/install/ubuntu/14.04/nginx/nginx.conf
@@ -50,6 +50,7 @@ http {
 
     # Compression
     gzip                on;
+    gzip_vary           on;
     gzip_comp_level     9;
     gzip_min_length     512;
     gzip_buffers        8 64k;

From 0437c4ac3ee2056f2ed2fdfd10a6e6693b292699 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 14 Nov 2018 17:53:48 +0200
Subject: [PATCH 0277/2300] fix backup exlustions for files

---
 bin/v-backup-user | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index f9569aa4..0c9e7c1b 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -216,6 +216,9 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
             cp $USER_DATA/ssl/$domain.* vesta/
         fi
 
+        # Changin dir to documentroot
+        cd $HOMEDIR/$user/web/$domain
+
         # Define exclude arguments
         exlusion=$(echo -e "$WEB" |tr ',' '\n' |grep "^$domain:")
         set -f
@@ -224,15 +227,21 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
         if [ ! -z "$exlusion" ]; then
             xdirs="$(echo -e "$exlusion" |tr ':' '\n' |grep -v $domain)"
             for xpath in $xdirs; do
-                fargs+=(--exclude=$xpath/*)
-                echo "$(date "+%F %T") excluding directory $xpath"
-                msg="$msg\n$(date "+%F %T") excluding directory $xpath"
+            for xpath in $xdirs; do
+                if [ -d "$xpath" ]; then
+                    fargs+=(--exclude=$xpath/*)
+                    echo "$(date "+%F %T") excluding directory $xpath"
+                    msg="$msg\n$(date "+%F %T") excluding directory $xpath"
+                else
+                    echo "$(date "+%F %T") excluding file $xpath"
+                    msg="$msg\n$(date "+%F %T") excluding file $xpath"
+                    fargs+=(--exclude=$xpath)
+                fi
             done
         fi
         set +f
 
         # Backup files
-        cd $HOMEDIR/$user/web/$domain
         tar -cpf- * ${fargs[@]} |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
     done
 

From 00bc162fe6d1d5c5d0cbc336124bc1521299316a Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Tue, 20 Nov 2018 11:20:21 +0200
Subject: [PATCH 0278/2300] removed duplicate loop

---
 bin/v-backup-user | 1 -
 1 file changed, 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 0c9e7c1b..4ecc66aa 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -226,7 +226,6 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
         fargs+=(--exclude='logs/*')
         if [ ! -z "$exlusion" ]; then
             xdirs="$(echo -e "$exlusion" |tr ':' '\n' |grep -v $domain)"
-            for xpath in $xdirs; do
             for xpath in $xdirs; do
                 if [ -d "$xpath" ]; then
                     fargs+=(--exclude=$xpath/*)

From aa83fa85f8ae28723ad64074e1aa1a0ba9fefc4d Mon Sep 17 00:00:00 2001
From: "Made I.T" <info@madeit.be>
Date: Thu, 22 Nov 2018 10:19:23 +0100
Subject: [PATCH 0279/2300] Fix quotes in cronjob CMD

---
 web/edit/cron/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/edit/cron/index.php b/web/edit/cron/index.php
index c66ca85c..3d8e9922 100644
--- a/web/edit/cron/index.php
+++ b/web/edit/cron/index.php
@@ -23,7 +23,7 @@ $v_job = escapeshellarg($_GET['job']);
 exec (VESTA_CMD."v-list-cron-job ".$user." ".$v_job." 'json'", $output, $return_var);
 check_return_code($return_var,$output);
 
-$data = json_decode(implode('', str_replace("\\", "\\\\", $output)), true);
+$data = json_decode(implode('', $output), true);
 unset($output);
 
 // Parse cron job

From c5ba8b5b652010b75541f9f1d4e258c0f6264b89 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Sat, 24 Nov 2018 22:43:21 +0200
Subject: [PATCH 0280/2300] Update v-update-user-counters

---
 bin/v-update-user-counters | 2 --
 1 file changed, 2 deletions(-)

diff --git a/bin/v-update-user-counters b/bin/v-update-user-counters
index 50b903bd..b0f94430 100755
--- a/bin/v-update-user-counters
+++ b/bin/v-update-user-counters
@@ -53,8 +53,6 @@ for user in $user_list; do
     IP_OWNED=0
     U_USERS=0
     U_DISK=0
-    ##supose fix to #1526 i cannot see any diference, but on debian it apears that there is an diference.
-    ## maybe because the system has tis var exported? (DISK)
     DISK=0 
     U_DISK_DIRS=$(get_user_value '$U_DISK_DIRS')
     if [ -z "$U_DISK_DIRS" ]; then

From 6b590a6c9363b13dd0c89e591d65d12baae9b14c Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Tue, 27 Nov 2018 15:30:59 +0200
Subject: [PATCH 0281/2300] New version of Softaculous: 5.1.2

---
 src/deb/softaculous/control          | 2 +-
 src/rpm/specs/vesta-softaculous.spec | 5 ++++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/deb/softaculous/control b/src/deb/softaculous/control
index c5c9eb67..f47048a6 100644
--- a/src/deb/softaculous/control
+++ b/src/deb/softaculous/control
@@ -1,7 +1,7 @@
 Source: vesta-softaculous
 Package: vesta-softaculous
 Priority: optional
-Version: 0.9.8-23
+Version: 0.9.8-24
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.softaculous.com
diff --git a/src/rpm/specs/vesta-softaculous.spec b/src/rpm/specs/vesta-softaculous.spec
index ece330e8..86baeb29 100644
--- a/src/rpm/specs/vesta-softaculous.spec
+++ b/src/rpm/specs/vesta-softaculous.spec
@@ -1,6 +1,6 @@
 Name:           vesta-softaculous
 Version:        0.9.8
-Release:        23
+Release:        24
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        Softaculous License
@@ -35,5 +35,8 @@ rm -rf %{buildroot}
 %config(noreplace) %{_vestadir}/conf
 
 %changelog
+* Tue Nov 27 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-24
+- New version 5.1.2
+
 * Mon Jul 21 2017 Serghey Rodin <builder@vestacp.com> - 0.9.8-18
 - Initial build for Softaculous 4.9.2

From 59695acd10ce63740bcf274a13569230362e06c5 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 29 Nov 2018 13:40:15 +0200
Subject: [PATCH 0282/2300] universe repository check

---
 install/vst-install-ubuntu.sh | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 4cc5ee86..e1ca1044 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -447,6 +447,13 @@ fi
 apt-get -y upgrade
 check_result $? 'apt-get upgrade failed'
 
+# Checking universe repository
+if [[ ${release:0:2} -gt 16 ]]; then
+    if [ -z "$(grep universe /etc/apt/sources.list)" ]; then
+        add-apt-repository -y universe
+    fi
+fi
+
 # Installing nginx repo
 apt=/etc/apt/sources.list.d
 echo "deb http://nginx.org/packages/mainline/ubuntu/ $codename nginx" \

From 2a8188a207cdf7f37290938ed7cbb83abf82e13f Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Fri, 30 Nov 2018 00:44:32 +0200
Subject: [PATCH 0283/2300] Create az.php

Azerbaijani language support
---
 web/inc/i18n/az.php | 726 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 726 insertions(+)
 create mode 100644 web/inc/i18n/az.php

diff --git a/web/inc/i18n/az.php b/web/inc/i18n/az.php
new file mode 100644
index 00000000..de5a0352
--- /dev/null
+++ b/web/inc/i18n/az.php
@@ -0,0 +1,726 @@
+<?php
+/**
+ * Vesta Azerbaijani language file
+ * 21.05.2018 Orkhan Oder (orkhan@our.az)
+
+ */
+$LANG['az'] = array(
+    'Packages'  => 'Paketlər',
+    'IP'  => 'IP',
+    'Graphs'  => 'Qrafiklər',
+    'Statistics'  => 'Statistikalar',
+    'Log'  => 'Log',
+    'Server'  => 'Server',
+    'Services'  => 'Servislər',
+    'Firewall' => 'Firewall',
+    'Updates'  => 'Yeniləmələr',
+    'Log in'  => 'Hesab yarat',
+    'Log out'  => 'Çıxış',
+    'USER'  => 'İstifadəsi',
+    'WEB'  => 'Veb',
+    'DNS'  => 'DNS',
+    'MAIL'  => 'Poçt',
+    'DB'  => 'DB',
+    'CRON'  => 'CRON',
+    'BACKUP'  => 'NÜSXƏ',
+    'LOGIN'  => 'Giriş',
+    'RESET PASSWORD'  => 'Şifrəni sıfırlamaq',
+    'SEARCH'  => 'Axtar',
+    'PACKAGE'  => 'Paket',
+    'RRD'  => 'RRD',
+    'STATS'  => 'STATS',
+    'LOG'  => 'LOG',
+    'UPDATES'  => 'Yenilənmələr',
+    'FIREWALL'  => 'Firewall',
+    'SERVER'  => 'Server',
+    'MEMORY'  => 'Yaddaş',
+    'DISK'  => 'Disk',
+    'NETWORK'  => 'Şəbəkə',
+    'Web Log Manager'  => 'Veb loq menecer',
+    'no notifications'  => 'bildiriş yoxdur',
+    'Add User'  => 'İstifadəçi əlavə edin',
+    'Add Domain'  => 'Domen əlavə edin',
+    'Add Web Domain'  => 'Domen əlavə edin',
+    'Add DNS Domain'  => 'DNS domeni əlavə edin',
+    'Add DNS Record'  => 'DNS qeydləri əlavə edin',
+    'Add Mail Domain'  => 'E-poçt domeni əlavə edin',
+    'Add Mail Account'  => 'E-poçt hesabı əlavə edin',
+    'Add Database'  => 'Verilənlər bazası əlavə edin',
+    'Add Cron Job'  => 'Cron əlavə et',
+    'Create Backup'  => 'Nüsxə yarat',
+    'Configure'  => 'Konfiqurasiya',
+    'Restore All'  => 'Hamısını bərpa edin',
+    'Add Package'  => 'Paket əlavə edin',
+    'Add IP'  => 'IP əlavə edin',
+    'Add Rule' => 'Qayda əlavə edin',
+    'Ban IP Address' => 'IP ünvanını ban edin',
+    'Search'  => 'Axtar',
+    'Add one more FTP Account' => 'FTP hesabı əlavə edin',
+    'Overall Statistics'  => 'Bütün statistikalar',
+    'Daily'  => 'Günlük',
+    'Weekly'  => 'Həftəlik',
+    'Monthly'  => 'Aylıq',
+    'Yearly'  => 'İllik',
+    'Add'  => 'Əlavə edin',
+    'Back'  => 'Ləğv edin',
+    'Save'  => 'Yadda saxla',
+    'Submit'  => 'Göndər',
+    'toggle all'  => 'Hamısını seç',
+    'apply to selected'  => 'Seçimi tətbiq edin',
+    'rebuild'  => 'Yenidən yarat',
+    'rebuild web'  => "Veb-in yenidən qurulması",
+    'rebuild dns'  => "DNS-in yenidən qurulması",
+    'rebuild mail'  => "E-poçt-un yenidən qurulması",
+    'rebuild db'  => "DB-nin yenidən qurulması",
+    'rebuild cron'  => "Cron-nun yenidən qurulması",
+    'update counters'  => 'Yeniləmə sayğacları',
+    'suspend'  => 'Dayandırın',
+    'unsuspend'  => 'Davam etdirin',
+    'delete'  => 'Sil',
+    'show per user'  => 'istifadəçiyə görə göstər',
+    'login as'  => 'GİRİŞ ET:',
+    'logout'  => 'Çıxış et',
+    'edit'  => 'redaktə et',
+    'open webstats'  => 'webstats aç',
+    'view logs'  => 'logları göstər',
+    'list records'  => '%s siyahı qeydiyyatı',
+    'add record'  => 'qeyd əlavə edin',
+    'list accounts'  => '%s hesabı sıyahıya alın',
+    'add account'  => 'hesap əlavə edin',
+    'open webmail'  => 'Vebpoçtu aç',
+    'list fail2ban' => 'fail2ban siyahı alın',
+    'open %s'  => '%s aç',
+    'download'  => 'yüklə',
+    'restore'  => 'bərpa edin',
+    'configure restore settings'  => 'bərpa ayarlarını quraşdırın',
+    'stop'  => 'dayandırın',
+    'start'  => 'başlat',
+    'restart'  => 'yenidən başlat',
+    'update'  => 'yenilə',
+    'generate'  => 'yarat',
+    'Generate CSR' => 'CSR yarat',
+    'reread IP' => 'IP-ni yenidən oxu',
+    'enable autoupdate' => 'AVTOMATIK YENİLƏNMƏNİ AKTİVLƏŞDİR',
+    'disable autoupdate' => 'AVTOMATİK YENİLƏNMƏNİ SÖNDÜR',
+    'turn on notifications' => 'xəbərdarlıqları açın',
+    'turn off notifications' => 'xəbərdarlıqları bağlayın',
+    'configure' => 'ayalar',
+    'Adding User'  => 'İstifadəçi əlavə edin',
+    'Editing User'  => 'İstifadəçi redaktə edin',
+    'Adding Domain'  => 'Domen əlavə edin',
+    'Editing Domain'  => 'Domen redaktə edin',
+    'Adding DNS Domain'  => 'DNS domeni əlavə edin',
+    'Editing DNS Domain'  => 'DNS domeni redaktə edin',
+    'Adding DNS Record'  => 'DNS qeyd əlavə edin',
+    'Editing DNS Record'  => 'DNS qeydi redaktə edin',
+    'Adding Mail Domain'  => 'E-poçt domen əlavə edin',
+    'Editing Mail Domain'  => 'E-poçt domen redaktə edin',
+    'Adding Mail Account'  => 'E-poçt əlavə edin',
+    'Editing Mail Account'  => 'E-poçt hesabını redaktə edin',
+    'Adding database'  => 'Verilənlər bazası əlavə edin',
+    'Editing Cron Job'  => 'Cron-u redaktə et',
+    'Adding Cron Job'  => 'Cron əlavə etmək',
+    'Editing Database'  => 'Verilənlər bazasını redaktə edin',
+    'Adding Package'  => 'Paket əlavə edin',
+    'Editing Package'  => 'Paketi redaktə edin',
+    'Adding IP address'  => 'IP ünvanı əlavə edin',
+    'Editing IP Address'  => 'IP ünvamını redaktə edin',
+    'Editing Backup Exclusions' => 'Nüsxələmə istisnalarını redaktə edin',
+    'Generating CSR' => 'CSR yaratma',
+    'Listing'  => 'Siyahılama',
+    'Search Results'  => 'Axtarış nəticələri',
+    'Adding Firewall Rule' => 'Təhlükəsizlik divarı qaydası əlavə edin',
+    'Editing Firewall Rule' => 'Təhlükəsizlik divarı qaydasını redaktə edin',
+    'Adding IP Address to Banlist' => 'Ban siyahısına IP ünvanı əlavə edin',
+    'active'  => 'aktiv',
+    'spnd'  => 'söndürülmüş',
+    'suspended'  => 'söndürülmüş',
+    'running'  => 'işləyir',
+    'stopped'  => 'dayandı',
+    'outdated'  => 'köhnəlmiş',
+    'updated'  => 'yenilənmiş',
+    'yes'  => 'bəli',
+    'no'  => 'xeyir',
+    'none'  => 'heç biri',
+    'pb'  => 'pb',
+    'tb'  => 'tb',
+    'gb'  => 'gb',
+    'mb'  => 'mb',
+    'minute'  => 'dəqiqə',
+    'hour'  => 'saat',
+    'day'  => 'gün',
+    'days'  => 'günlər',
+    'hours'  => 'saat',
+    'minutes'  => 'dəqiqə',
+    'month'  => 'ay',
+    'package'  => 'paket',
+    'Bandwidth'  => 'Traffik',
+    'Disk'  => 'Disk',
+    'Web'  => 'Veb',
+    'Mail'  => 'E-poçt',
+    'Databases'  => 'Verilənlər bazası',
+    'User Directories'  => 'İstifadəçi qovluqları',
+    'Template'  => 'Şablon',
+    'Web Template'  => 'Veb Şablonu',
+    'Backend Template'  => 'Backend şablonu',
+    'Proxy Template' =>'Proxy şablonu',
+    'DNS Template'  => 'DNS şablonu',
+    'Web Domains'  => 'Veb domenləri',
+    'SSL Domains'  => 'SSL domenləri',
+    'Web Aliases'  => 'Veb aliasları',
+    'per domain'  => 'domen başına',
+    'DNS Domains'  => 'DNS domen adları',
+    'DNS domains'  => 'DNS domen adları',
+    'DNS records'   => 'DNS qeydləri',
+    'Name Servers'  => 'Neymserverlər',
+    'Mail Domains'  => 'E-poçt domenləri',
+    'Mail Accounts'  => 'E-poçt hesabları',
+    'Cron Jobs'  => 'Cron-lar',
+    'SSH Access'  => 'SSH giriş',
+    'IP Address'  => 'IP ünvan',
+    'IP Addresses'  => 'IP ünvanları',
+    'Backups'  => 'Nüsxələr',
+    'Backup System'  => 'Nüsxələmə sistemi',
+    'backup exclusions' => 'NÜSXƏLƏMƏ İSTİSNALARI',
+    'template'  => 'şablon',
+    'SSL Support'  => 'SSL dəstək',
+    'SSL Home Directory'  => 'SSL Ana qovluğu',
+    'Lets Encrypt Support'  => 'Lets Encrypt dəstəyi',
+    'Lets Encrypt'  => 'Şifrələ',
+    'Your certificate will be automatically issued in 5 minutes' => 'Sənədiniz avtomatik olaraq 5 dəqiqə ərzində veriləcək',
+    'Proxy Support'  => 'Proxy dəstəyi',
+    'Proxy Extensions'  => 'Proxy əlavələri',
+    'Web Statistics'  => 'Veb statistikaları',
+    'Additional FTP Account'  => 'Əlavə FTP hesabı',
+    'Path'  => 'Path',
+    'SOA'  => 'SOA',
+    'TTL'  => 'TTL',
+    'Expire'  => 'Sona çatdırın',
+    'Records'  => 'Qeydlər',
+    'Serial'  => 'Seriya',
+    'Catchall email'  => 'Catchall e-poçt',
+    'AntiVirus Support'  => 'AntiVirus dəstəyi',
+    'AntiSpam Support'  => 'AntiSpam dəstəyi',
+    'DKIM Support'  => 'DKIM dəstəyi',
+    'Accounts'  => 'Hesablar',
+    'Quota'  => 'Norma',
+    'Autoreply'  => 'Avtomatik cavab',
+    'Forward to'  => 'Buraya yönləndir',
+    'Do not store forwarded mail' => 'Göndərilən poçtu saxlamayın',
+    'IMAP hostname'  => 'IMAP hostname',
+    'IMAP port'  => 'IMAP port',
+    'IMAP security'  => 'IMAP təhlükəsizlik',
+    'IMAP auth method'  => 'IMAP auth metodu',
+    'SMTP hostname'  => 'SMTP hostname',
+    'SMTP port'  => 'SMTP port',
+    'SMTP security'  => 'SMTP təhlükəsizlik',
+    'SMTP auth method'  => 'SMTP auth metodu',
+    'STARTTLS'  => 'STARTTLS',
+    'Normal password'  => 'Normal şifrə',
+    'database'  => 'verilənələr bazası',
+    'User'  => 'İstifadəçi',
+    'Host'  => 'Host',
+    'Charset'  => 'Kodlaşdırma',
+    'Min'  => 'Dəq',
+    'Hour'  => 'Saat',
+    'Day'  => 'Gün',
+    'Month'  => 'Ay',
+    'Day of week'  => 'Həftənin günü',
+    'local'  => 'yerli',
+    'Run Time'  => 'İşləmə müddəti',
+    'Backup Size'  => 'Nüsxə ölçüsü',
+    'SYS'  => 'SYS',
+    'Domains'  => 'Domenlər',
+    'Status'  => 'Status',
+    'shared'  => 'paylaşılan',
+    'dedicated'  => 'həsr olunan',
+    'Owner' => 'Sahib',
+    'Users'  => 'İstifadəçilər',
+    'Load Average'  => 'Sistem yükü',
+    'Memory Usage'  => 'Yaddaşın istifadəsi',
+    'APACHE2 Usage'  => 'APACHE2 istifadəsi',
+    'HTTPD Usage'  => 'HTTPD istifadəsi',
+    'NGINX Usage'  => 'NGINX istifadəsi',
+    'MySQL Usage on localhost'  => 'Localhost üzərindəki MySQL istifadəsi',
+    'PostgreSQL Usage on localhost'  => 'Localhost üzərindəki PostgreSQL istifadəsi',
+    'Bandwidth Usage eth0'  => 'eth0 traffik istifadəsi',
+    'Bandwidth Usage eth1'  => 'eth1 traffik istifadəsi',
+    'Exim Usage'  => 'Exim istifadəsi',
+    'FTP Usage'  => 'FTP istifadəsi',
+    'SSH Usage'  => 'SSH istifadəsi',
+    'reverse proxy'  => 'geri proksi',
+    'web server'  => 'veb server',
+    'dns server'  => 'dns server',
+    'mail server'  => 'e-poçt serve',
+    'pop/imap server'  => 'pop/imap server',
+    'email antivirus'  => 'e-poçt antivirus',
+    'email antispam'  => 'e-poçt antispam',
+    'database server'  => 'database server',
+    'ftp server'  => 'ftp server',
+    'job scheduler'  => 'job planlaşdırma',
+    'firewall'  => 'firewall',
+    'brute-force monitor'  => 'brute-force monitor',
+    'CPU'  => 'CPU',
+    'Memory'  => 'Yaddaş',
+    'Uptime'  => 'Uptime',
+    'core package'  => 'əsas paket',
+    'php interpreter'  => 'php tərcüməçi',
+    'internal web server'  => 'daxili veb server',
+    'Version'  => 'Versiya',
+    'Release'  => 'Buraxın',
+    'Architecture'  => 'Memarlıq',
+    'Object'  => 'Obyekt',
+    'Username'  => 'İstifadəçi adı',
+    'Password'  => 'Şifrə',
+    'Email'  => 'E-poçt',
+    'Package'  => 'Paket',
+    'Language'  => 'Dil',
+    'First Name'  => 'Ad',
+    'Last Name'  => 'Soyad',
+    'Send login credentials to email address'  => 'Giriş məlumatlarını ünvanlarını e-poçt ünvanına göndərin',
+    'Default Template'  => 'Default şablon',
+    'Default Name Servers'  => 'Default neymserver',
+    'Domain'  => 'Domen',
+    'DNS Support'  => 'DNS dəstəyi',
+    'Mail Support'  => 'E-poçt dəstəyi',
+    'Advanced options'  => 'TƏKMİLLƏŞMİŞ SEÇİMLƏR',
+    'Basic options'  => 'Əsas seçimlər',
+    'Aliases'  => 'Ləqəblər (Alias)',
+    'SSL Certificate'  => 'SSL sertifikatı',
+    'SSL Key'  => 'SSL açarı (Key)',
+    'SSL Certificate Authority / Intermediate'  => 'SSL sertifikat eyniləşdirməsi / köməkçi)',
+    'SSL CSR' => 'SSL CSR',
+    'optional'  => 'istəyə bağlı',
+    'internal' => 'daxili',
+    'Statistics Authorization'  => 'Statistikanın avtorizasiyası',
+    'Statistics Auth'  => 'Statistika eyniləşdirməsi',
+    'Account'  => 'Hesab',
+    'Prefix will be automaticaly added to username'  => 'Prefiks avtomatik olaraq istifadəçi adına əlavə olunacaq',
+    'Send FTP credentials to email'  => 'FTP məlumatlarını e-poçt ile göndər',
+    'Expiration Date'  => 'Bitmə tarixi',
+    'YYYY-MM-DD'  => 'YYYY-AA-GG',
+    'Name servers'  => 'Neymserverlər',
+    'Record'  => 'Qeydiyyat',
+    'IP or Value'  => 'IP və ya qiymət',
+    'Priority'  => 'Prioritet',
+    'Record Number' => 'Qeydiyyat sayı',
+    'in megabytes'  => 'megabayt olaraq',
+    'Message'  => 'Mesaj',
+    'use local-part'  => 'local-part istifadə et',
+    'one or more email addresses'  => 'bir və ya daha çox e-poçt ünvanı',
+    'Prefix will be automaticaly added to database name and database user'  => 'Prefiks avtomatik olaraq verilənlər bazası adı və verilənlər bazası istifadəçisinə əlavə olunacaq',
+    'Database'  => 'Verilənlər bazası',
+    'Type'  => 'Tip',
+    'Minute'  => 'Dəqiqə',
+    'Command'  => 'Əmr',
+    'Package Name'  => 'Paket adı',
+    'Netmask'  => 'Netmask',
+    'Interface'  => 'İnterfeys',
+    'Shared'  => 'Paylaşılan',
+    'Assigned user'  => 'Təyin edilən istifadəçi',
+    'Assigned domain'  => 'Təyin edilən domen',
+    'NAT IP association' => 'NAT IP assosiasiyası',
+    'shell'  => 'shell',
+    'web domains'  => 'Veb domenləri',
+    'web aliases'  => 'veb ləqəblər',
+    'dns records'  => 'dns qeydləri',
+    'mail domains'  => 'mail domenləri',
+    'mail accounts'  => 'mail hesabları',
+    'accounts'  => 'hesablar',
+    'databases'  => 'verilənlər bazası',
+    'cron jobs'  => 'Cron tapşırıqları',
+    'backups'  => 'nüsxələr',
+    'quota'  => 'kvota',
+    'day of week'  => 'həftənin günü',
+    'cmd'  => 'cmd',
+    'users'  => 'istifadəçilər',
+    'domains'  => 'domenlər',
+    'aliases'  => 'aliases',
+    'records'  => 'qeydlər',
+    'jobs'  => 'işlər',
+    'username'  => 'istifadəçi adı',
+    'password'  => 'şifrə',
+    'type'  => 'tip',
+    'charset'  => 'kodlaşdırma',
+    'domain'  => 'domen',
+    'ip'  => 'ip',
+    'ip address'  => 'ip ünvanı',
+    'IP address'  => 'IP ünvanı',
+    'netmask'  => 'netmask',
+    'interface'  => 'interfeys',
+    'assigned user'  => 'təyin edilən istifadəçi',
+    'ns1'  => 'ns1',
+    'ns2'  => 'ns2',
+    'user'  => 'istifadəçi',
+    'email'  => 'e-poçt',
+    'first name'  => 'ad',
+    'last name'  => 'soyad',
+    'account'  => 'hesab',
+    'ssl certificate'  => 'ssl sertifikatı',
+    'ssl key'  => 'ssl açarı (key)',
+    'stats user password'  => 'statistik istifadəçi sifrəsi',
+    'stats username'  => 'statistik istifadəçi adı',
+    'stats password'  => 'statistik şifrəsi',
+    'ftp user password'  => 'ftp istifadəçi şifrəsi',
+    'ftp user'  => 'ftp istifadəçisi',
+    'Last 70 lines of %s.%s.log' => '%s.%s.log faylının son 70 sətri',
+    'AccessLog' => 'AccessLog',
+    'ErrorLog' => 'ErrorLog',
+    'Download AccessLog' => 'AccessLog yüklə',
+    'Download ErrorLog' => 'ErrorLog yüklə',
+    'Country' => 'Ölkə',
+    '2 letter code' => '2 hərf kodu',
+    'State / Province' => 'Dövlət / Əyalət',
+    'City / Locality' => 'Şəhər / Yerləşmə',
+    'Organization' => 'Orqanizasiya',
+    'Action' => 'Fəaliyyət',
+    'Protocol' => 'Protokol',
+    'Port' => 'Port',
+    'Comment' => 'Rəy',
+    'Banlist' => 'Ban siyahısı',
+    'ranges are acceptable' => 'qəbul edilə bilən aralıqlar',
+    'CIDR format is supported' => 'CIDR versiyasını dəstəkləyir',
+    'ACCEPT' => 'ACCEPT',
+    'DROP' => 'DROP',
+    'TCP' => 'TCP',
+    'UDP' => 'UDP',
+    'ICMP' => 'ICMP',
+    'SSH' => 'SSH',
+    'FTP' => 'FTP',
+    'VESTA' => 'VESTA',
+    'Add one more Name Server' => 'Neymserver əlavə edin',
+    'web domain' => 'veb domen',
+    'dns domain' => 'dns domen',
+    'dns record' => 'dns qeyd',
+    'mail domain' => 'mail domen',
+    'mail account' => 'mail hesabı',
+    'cron job' => 'cron işi',
+    'cron' => 'cron',
+    'user dir' => 'istifadəçidir',
+    'unlimited'  => 'limitsiz',
+    '1 account'  => '1 hesab',
+    '%s accounts'  => '%s hesab',
+    '1 domain'  => '1 alan adı',
+    '%s domains'  => '%s alan adı',
+    '1 record'  => '1 kayıt',
+    '%s records'  => '%s kayıt',
+    '1 mail account'  => '1 mail hesabı',
+    '%s mail accounts'  => '%s mail hesabı',
+    '1 database'  => '1 verilənlər bazası',
+    '%s databases'  => '%s verilənlər bazası',
+    '1 cron job'  => '1 zamanlanmış tapşırıq',
+    '%s cron jobs'  => '%s zamanlanmış tapşırıq',
+    '1 archive'  => '1 arxiv',
+    '%s archives'  => '%s arxiv',
+    '1 item'  => '1 maddə',
+    '%s items'  => '%s maddələr',
+    '1 package'  => '1 paket',
+    '%s packages'  => '%s paket',
+    '1 IP address'  => '1 IP ünvanı',
+    '%s IP addresses'  => '%s IP ünvanı',
+    '1 month'  => '1 ay',
+    '%s months'  => '%s ay',
+    '1 log record'  => '1 log qeydi',
+    '%s log records'  => '%s log qeydi',
+    '1 object'  => '1 obyekt',
+    '%s objects'  => '%s obyekt',
+    'no exclusions' => 'istisna yoxdur',
+    '1 rule' => '1 qayda',
+    '%s rules' => '%s qayda',
+    'There are no currently banned IP' => 'Hazırda ban edilmiş İP yoxdur',
+    'USER_CREATED_OK'  => '<a href="/edit/user/?user=%s"><b>%s</b></a> istifadəşisi uğurla yaradıldı.',
+    'WEB_DOMAIN_CREATED_OK'  => '<a href="/edit/web/?domain=%s"><b>%s</b></a> domen uğurla yaradıldı.',
+    'DNS_DOMAIN_CREATED_OK'  => '<a href="/list/dns/?domain=%s"><b>%s</b></a> DNS domen uğurla yaradıldı.',
+    'DNS_RECORD_CREATED_OK'  => '<b>%s.%s</b> qeydi uğurla yaradıldı.',
+    'MAIL_DOMAIN_CREATED_OK'  => '<a href="/list/mail/?domain=%s"><b>%s</b></a> əsas domen uğurla yaradıldı',
+    'MAIL_ACCOUNT_CREATED_OK'  => '<a href="/edit/mail/?account=%s&domain=%s"><b>%s@%s</b></a> e-poçt hesabı uğurla yaradıldı',
+    'DATABASE_CREATED_OK'  => '<a href="/edit/db/?database=%s"><b>%s</b></a> verilənlər bazası uğurla yaradıldı.',
+    'CRON_CREATED_OK'  => 'Zamanlanmış tapşırıq uğurla yaradıldı.',
+    'IP_CREATED_OK'  => '<a href="/edit/ip/?ip=%s"><b>%s</b></a> ip ünvanı uğurla yaradıldı.',
+    'PACKAGE_CREATED_OK'  => '<a href="/edit/package/?package=%s"><b>%s</b></a> paketi uğurla yaradıldı.',
+    'SSL_GENERATED_OK' => 'Sertifikart uğurla yaradıldı.',
+    'RULE_CREATED_OK' => 'Qayda uğurla yaradıldı.',
+    'BANLIST_CREATED_OK' => 'IP ünvan müvəffəqiyyətlə qadağan edildi',
+    'Autoupdate has been successfully enabled' => 'Avtomatik yenilənmə uğurla aktivləşdirildi',
+    'Autoupdate has been successfully disabled' => 'Avtomatik yenilənmə uğurla söndürüldü',
+    'Cronjob email reporting has been successfully enabled' => 'Zamanlanmış tapşırıq e-poçt hesabatı uğurla aktivləşdirildi',
+    'Cronjob email reporting has been successfully disabled' => 'Zamanlanmış tapşırıq e-poçt hesabatı uğurla dayandırıldı',
+    'Changes has been saved.'  => 'Dəyişikliklər yadda saxlanıldı.',
+    'Confirmation'  => 'Təsdiqləmə',
+    'DELETE_USER_CONFIRMATION' => '%s istifadəçisini silmək istədiyinizə əminsinizmi?',
+    'SUSPEND_USER_CONFIRMATION' => '%s istifadəçisini qapatmaq istədiyinizə əminsinizmi?',
+    'UNSUSPEND_USER_CONFIRMATION' => '%s istifadəçisini davam etdirmək istədiyinizə əminsinizmi?',
+    'DELETE_DOMAIN_CONFIRMATION' => '%s domeni silmək istədiyinizə əminsinizmi?',
+    'SUSPEND_DOMAIN_CONFIRMATION' => '%s domeni qapatmaq istədiyinizə əminsinizmi?',
+    'UNSUSPEND_DOMAIN_CONFIRMATION' => '%s domeni davam etdirmək istədiyinizə əminsinizmi?',
+    'DELETE_RECORD_CONFIRMATION' => '%s qeydi silmək istədiyinizə əminsinizmi?',
+    'SUSPEND_RECORD_CONFIRMATION' => '%s qeydi qapatmaq istədiyinizə əminsinizmi?',
+    'UNSUSPEND_RECORD_CONFIRMATION' => '%s qeydi davam etdirmək istədiyinizə əminsinizmi?',
+    'DELETE_MAIL_ACCOUNT_CONFIRMATION' => '%s hesabını silmək istədiyinizə əminsinizmi?',
+    'SUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '%s hesabını qapatmaq istədiyinizə əminsinizmi?',
+    'UNSUSPEND_MAIL_ACCOUNT_CONFIRMATION' => '%s hesabını davam etdirmək istədiyinizə əminsinizmi?',
+    'DELETE_DATABASE_CONFIRMATION' => '%s verilənlər bazasını silmək istədiyinizə əminsinizmi?',
+    'SUSPEND_DATABASE_CONFIRMATION' => '%s verilənlər bazasını qapatmaq istədiyinizə əminsinizmi?',
+    'UNSUSPEND_DATABASE_CONFIRMATION' => '%s verilənlər bazasını davam etdirmək istədiyinizə əminsinizmi?',
+    'DELETE_CRON_CONFIRMATION' => 'Zamanlanmış tapşırığı silmək istədiyinizə əminsinizmi?',
+    'SUSPEND_CRON_CONFIRMATION' => 'Zamanlanmış tapşırığı qapatmaq istədiyinizə əminsinizmi?',
+    'UNSUSPEND_CRON_CONFIRMATION' => 'Zamanlanmış tapşırığı davam etdirmək istədiyinizə əminsinizmi?',
+    'DELETE_BACKUP_CONFIRMATION'  => '%s nüsxəsini silmək istədiyinizə əminsinizmi?',
+    'DELETE_EXCLUSION_CONFIRMATION' => '%s nüsxələmə qaydasını silmək istədiyinizə əminsinizmi?',
+    'DELETE_PACKAGE_CONFIRMATION'  => '%s paketini silmək istədiyinizə əminsinizmi?',
+    'DELETE_IP_CONFIRMATION'  => '%s IP ünvanı silmək istədiyinizə əminsinizmi?',
+    'DELETE_RULE_CONFIRMATION' => '#%s qaydasını silmək istədiyinizə əminsinizmi?',
+    'SUSPEND_RULE_CONFIRMATION' => '#%s qaydasını qapatmaq istədiyinizə əminsinizmi?',
+    'UNSUSPEND_RULE_CONFIRMATION' => '#%s qaydasını davam etdirmək istədiyinizə əminsinizmi?',
+    'LEAVE_PAGE_CONFIRMATION' => 'Səhifəni tərk edirsiniz?',
+    'RESTART_CONFIRMATION' => '%s yenidən başladılacaq.əstiqləyirsiniz?',
+    'Welcome'  => 'XOŞ GƏLDİNİZ',
+    'LOGGED_IN_AS'  => '%s istifadəçisi olaraq daxil oldunuz',
+    'Error'  => 'Xəta',
+    'Invalid username or password'  => 'Doğru olmayan istifadəçi adı və ya şifrə',
+    'Invalid username or code'  => 'Doğru olmayan istifadəçi adı və ya kod',
+    'Passwords not match'  => 'Şifrələr uyğun deyil',
+    'Please enter valid email address.'  => 'Lütfən doğru e-poçt ünvanı daxil edin.',
+    'Field "%s" can not be blank.'  => '"%s" sahəni boş saxlaya bilməzsiniz.',
+    'Password is too short.'  => 'Şifrə çox qısadır (minimum 6 simvol)',
+    'Error code:'  => 'Xəta kodu: %s',
+    'SERVICE_ACTION_FAILED'  => '"%s" "%s" uğursuz oldu',
+    'IP address is in use' => 'IP ünvanı istifadədədir',
+    'BACKUP_SCHEDULED'  => 'Tapşırıq uğurla əlavə edildi. Nüsxə yüklənildiyi zaman xəbərdarlıq e-poçtu alacaqsınız.',
+    'BACKUP_EXISTS'  => 'Artıq nüsxələmə əməliyyatı davam edir. Yenidən yaratmaq üçün bunun bitməsini gözləyin.',
+    'RESTORE_SCHEDULED'  => 'Tapşırıq sıraya əlavə edildi. Nüsxə yüklənildiyi zaman xəbərdarlıq e-poçtu alacaqsınız.',
+    'RESTORE_EXISTS'  => 'Artıq restovrasiya əməliyyatı davam edir. Bunu işlətmək üçün lütfən əvvəlki əməliyyatın bitməsiniz gözləyin.',
+    'WEB_EXCLUSIONS' => 'Hər sətrə bir domen əlavə yazın. Bütün domenlər xaric etmək üçün * istifadə edin. Xüsusi qovluq üçün bu formatda yazın: domain.com:public_html/cache:public_html/tmp',
+    'DNS_EXCLUSIONS' => 'Hər sətrə bi domen əlavə edin. Bütün domenləri xaric etmək üçün * istifadə edin',
+    'MAIL_EXCLUSIONS' => 'Hər sətrə bi domen əlavə edin. Bütün domenləri xaric etmək üçün * istifadə edin. Xüsusi hesab təyin etmək üçün bu formatda yazın: domain.com:info:destek:postmaster',
+    'DB_EXCLUSIONS' => 'Hər sətrə bir verilənlər bazası əlavə edin. Hamısı üçün * istifadə edin. ',
+    'CRON_EXCLUSIONS' => 'Bütün zamanlanmış tapşırıqları xaric etmək üçün * istifadə edin',
+    'USER_EXCLUSIONS' => 'Hər sətrə bir qovluq əlavə edin. Bütün versiyaları xaric etmək üçün * istifadə edin',
+    'Welcome to Vesta Control Panel'  => 'Vesta nəzarət panelinə xoş gəldiniz',
+    'MAIL_FROM'  => 'Vesta Nəzarət Paneli <noreply@%s>',
+    'GREETINGS_GORDON_FREEMAN' => "Hər vaxtınız xeyir, %s %s,\n",
+    'GREETINGS' => "Hər vaxtınız xeyir,\n",
+    'ACCOUNT_READY' => "Hesabınız uğurla yaradıldı və istifadəyə hazırdır.\n\nhttps://%s/login/\nİstifadəçi adı: %s\nŞifrə: %s\n\n--\nVesta Nəzarət Paneli\n",
+    'FTP login credentials'  => 'FTP giriş məlumatları',
+    'FTP_ACCOUNT_READY' => "FTP hesabı uğurla yaradıldı və istifadə hazırdır.\n\nHostname: %s\nİstifadəçi adı: %s_%s\nŞifrə: %s\n\n--\nVesta Control Panel\n",
+    'Database Credentials'  => 'Veritabanı Bilgileri',
+    'DATABASE_READY' => "Verilənlər bazası yaradıldı.\n\Verilənlər bazsı: %s\nİstifadəçi: %s\Şifrə: %s\n%s\n\n--\nVesta Nəzarət Paneli\n",
+    'forgot password'  => 'Şifrəmi unutdum',
+    'Confirm'  => 'Təstiqlə',
+    'New Password'  => 'Yeni şifrə',
+    'Confirm Password'  => 'Şifrəni təstiqlə',
+    'Reset'  => 'Sıfırla',
+    'Reset Code'  => 'Sıfırlama Kodu',
+    'RESET_NOTICE'  => '',
+    'RESET_CODE_SENT'  => 'Şifrə sıfırlama kodu e-poçt ünvanınıza göndərildi.<br>',
+    'MAIL_RESET_SUBJECT'  => 'Şifrə sıfırlama - %s',
+    'PASSWORD_RESET_REQUEST' => "Şifrənizi sıfırlamaq üçün lütfən linki izləyin:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\Alternativ olaraq https://%s/reset/?action=code&user=%s linkinə klik edib davamına bu reset kodunuzu daxil edə bilərsiniz:\n%s\n\nƏgər şifrə sıfırlama istəyiniz olmayıbsa lütfən mesajı yox sayın və üzrümüzü qəbul edin.\n\n--\nVesta Nəzarət Mərkəzi\n",
+    'Jan' => 'Yan',
+    'Feb' => 'Fev',
+    'Mar' => 'Mar',
+    'Apr' => 'Apr',
+    'May' => 'May',
+    'Jun' => 'İyn',
+    'Jul' => 'İyl',
+    'Aug' => 'Avq',
+    'Sep' => 'Sent',
+    'Oct' => 'Okt',
+    'Nov' => 'Noy',
+    'Dec' => 'Dek',
+    'Configuring Server' => 'Server ayarlanması',
+    'Hostname' => 'Hostname',
+    'Time Zone' => 'Vaxt qurşağı',
+    'Default Language' => 'Default dil',
+    'Proxy Server' => 'Proxy server',
+    'Web Server' => 'Veb server',
+    'Backend Server' => 'Backend Server',
+    'Backend Pool Mode' => 'Backend pul rejimi',
+    'DNS Server' => 'DNS server',
+    'DNS Cluster' => 'DNS Cluster',
+    'MAIL Server' => 'MAIL Server',
+    'Antivirus' => 'Antivirus',
+    'AntiSpam' => 'AntiSpam',
+    'Webmail URL' => 'Vebmail URL',
+    'MySQL Support' => 'MySQL dəstək',
+    'phpMyAdmin URL' => 'phpMyAdmin URL',
+    'PostgreSQL Support' => 'PostgreSQL dəstəyi',
+    'phpPgAdmin URL' => 'phpPgAdmin URL',
+    'Maximum Number Of Databases' => 'Verilənlər bazasının maksimum sayı',
+    'Current Number Of Databases' => 'Current Number Of Databases',
+    'Local backup' => 'Yerli backup',
+    'Compression level' => 'Sıxılma səviyyəsi',
+    'Directory' => 'Kataloq',
+    'Remote backup' => 'Uzaqdan backup',
+    'ftp' => 'FTP',
+    'sftp' => 'SFTP',
+    'SFTP Chroot' => 'SFTP Chroot',
+    'FileSystem Disk Quota' => 'FaylSistemi disk kvotası',
+    'Vesta Control Panel Plugins' => 'Vesta Nəzarət Paneli əlavələri',
+    'preview' => 'Ön görünüş',
+    'Reseller Role' => 'Reseller rolu',
+    'Web Config Editor' => 'Veb Konfiqurasiya redaktoru',
+    'Template Manager' => 'Şablon idarəçisi',
+    'Backup Migration Manager' => 'Nüsxələmə miqrasiya idarəçisi',
+    'FileManager' => 'Faylİdarəçisi',
+    'show: CPU / MEM / NET / DISK' => 'göstər: CPU / BEL / ŞƏ / DISK',
+    'sort by' => 'sıralama ölçüsü',
+    'Date' => 'Tarix',
+    'Starred' => 'Ulduzlu',
+    'Name' => 'Ad',
+    'save to favorites' => 'Sevimlilərə əlavə edin',
+    'File Manager' => 'Fayl İdarəçisi',
+    'size' => 'ölçü',
+    'date' => 'tarix',
+    'name' => 'ad',
+    'Initializing' => 'Başladılır',
+    'UPLOAD' => 'YÜKLƏ',
+    'NEW FILE' => 'YENİ FAYL',
+    'NEW DIR' => 'YENİ QOVLUQ',
+    'DELETE' => 'SİL',
+    'RENAME' => 'YENİDƏN ADLANDIR',
+    'MOVE' => 'kÖÇÜRT',
+    'RIGHTS' => 'HÜQUQLAR',
+    'COPY' => 'KOPYALA',
+    'ARCHIVE' => 'ARXİVLƏ',
+    'EXTRACT' => 'ÇIXART',
+    'DOWNLOAD' => 'YÜKLƏ',
+    'Are you sure?' => 'Əminsinizmi?',
+    'Hit' => 'Hit',
+    'to reload the page' => 'səhifəni yeniləm üçün',
+    'Directory name cannot be empty' => 'Kataloq adı boş ola bilməz',
+    'File name cannot be empty' => 'Fayl adı boş ola bilməz',
+    'No file selected' => 'Fayl seçilmədi',
+    'No file or folder selected' => 'Fayl və ya qovluq seçilmədi',
+    'File type not supported' => 'Fayl tipi dəstəklənmir',
+    'Directory download not available in current version' => 'Kataloq yüklnməsi bu versiyada mövcud deyil',
+    'Directory not available' => 'Kataloq keçərli deyil',
+    'Done' => 'Birdi',
+    'Close' => 'Bağla',
+    'Copy' => 'Kopyala',
+    'Cancel' => 'Ləğv et',
+    'Rename' => 'Yenidən adlandır',
+    'Move' => 'Köçürt',
+    'Change Rights' => 'Hüquqları dəyişdirin',
+    'Delete' => 'Sil',
+    'Extract' => 'Çıxart',
+    'Create' => 'Yarat',
+    'Compress' => 'Sıx',
+    'OK' => 'TAMAM',
+    'YOU ARE COPYING' => 'Siz kopyalayırsınız',
+    'YOU ARE REMOVING' => 'Siz silirsiniz',
+    'Delete items' => 'Maddələri silin',
+    'Copy files' => 'Faylları kopyalayın',
+    'Move files' => 'Faylları daşıyın',
+    'Are you sure you want to copy' => 'Kopyalamaq istədiyinizə əminsinizmi',
+    'Are you sure you want to move' => 'Köçürtmək istədiyinizə əminsinizmi?',
+    'Are you sure you want to delete' => 'Silmək istədiyinizə əminsinizmi?',
+    'into' => 'daxil',
+    'existing files will be replaced' => 'mövcud fayllar dəyişdirilir',
+    'Original name' => 'Orjinal adı',
+    'File' => 'Fayl',
+    'already exists' => 'mövcuddur',
+    'Create file' => 'Fayl yarat',
+    'Create directory' => 'Kataloq yarat',
+    'read by owner' => 'sahini tərəfindən oxunan',
+    'write by owner' => 'sahibi tərəfindən yazılan',
+    'execute/search by owner' => 'sahibi tərəfindən icra edilən/axtarılan',
+    'read by group' => 'grup tərəfindən oxunan',
+    'write by group' => 'qrup tərəfindən yazılan',
+    'execute/search by group' => 'qrup tərəfindən icar edilən/axtarılan',
+    'read by others' => 'başqaları tərəfindən oxunan',
+    'write by others' => 'başqaları tərəfindən yazılan',
+    'execute/search by others' => 'başqaları tərəfindən icra edilən/axtarılan',
+    'Shortcuts' => 'Qısayollar',
+    'Add New object' => 'Yeni obyekt əlavə edin',
+    'Save Form' => 'Formanı yadda saxla',
+    'Cancel saving form' => 'Formanı yadda saxlama',
+    'Go to USER list' => 'İstifadəçi siyahısına get',
+    'Go to WEB list' => 'Veb siyahısına get',
+    'Go to DNS list' => 'DNS siyahısına get',
+    'Go to MAIL list' => 'MAIL siyahısına get',
+    'Go to DB list' => 'DB siyahısına get',
+    'Go to CRON list' => 'CRON siyahısına get',
+    'Go to BACKUP list' => 'Nüsxə siyahısına get',
+    'Focus on search' => 'Axtarışa fokuslan',
+    'Display/Close shortcuts' => 'Qısayolları göstər/bağla',
+    'Move backward through top menu' => 'Üst menyu arasında geriyə get',
+    'Move forward through top menu' => 'Üst menyu arasında iləriyə get',
+    'Enter focused element' => 'Fokuslanmış elementi gör',
+    'Move up through elements list' => 'Elementlər siyahısına keçin',
+    'Move down through elements list' => 'Elementlər siyahısına keçin',
+    'Upload' => 'Yüklə',
+    'New File' => 'Yeni fayl',
+    'New Folder' => 'Yeni qovluq',
+    'Download' => 'Yüklə',
+    'Archive' => 'Arxivlə',
+    'Save File (in text editor)' => 'Faylı yadda saxla (mətn redaktorunda)',
+    'Close Popup / Cancel' => 'Popup bağla / Ləğv et',
+    'Move Cursor Up' => 'Kursoru yuxarı qaldır',
+    'Move Cursor Down' => 'Kursoru aşağı endir',
+    'Switch to Left Tab' => 'Sol taba keçin',
+    'Switch to Right Tab' => 'Sağ taba keçin',
+    'Switch Tab' => 'Taba keç',
+    'Go to the Top of the File List' => 'Fayl siyahısının əvvəlinə get',
+    'Go to the Last File' => 'Son fayla bax',
+    'Open File / Enter Directory' => 'Faylı aç/Kataloqa daxil ol',
+    'Edit File' => 'Faylı redaktə edin',
+    'Go to Parent Directory' => 'Əsas kataloqa daxil olun',
+    'Select Current File' => 'Hazırki faylı seçin',
+    'Select Bunch of Files' => 'Fayl dəstini seçin',
+    'Add File to the Current Selection' => 'Hazırki seçimə fayl əlavə edin',
+    'Select All Files' => 'Bütün faylları seçin',
+    'shortcuts are inspired by magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager' =>
+        'qısayollar mükəmməl fayl idarəçisi <a href="https://www.midnight-commander.org/">Midnight Commander</a> fayl idarəçisindən alınmışdır',
+    'Licence Key' => 'Lisenziya açarı',
+    'Enter License Key' => 'Lisenziya açarını daxil edin',
+    'Buy Licence' => 'Lisenziya alın',
+    'Buy Lifetime License' => 'Ömür boyu lisenziyası alın',
+    'Disable and Cancel Licence' => 'Lisenziyanı söndürün və ləğv edin',
+    'Licence Activated' => 'Lisenziya aktivdir',
+    'Licence Deactivated' => 'Lisenziya ləğv edilib',
+    'Restrict users so that they cannot use SSH and access only their home directory.' => 'İstifadəçilə SSH yalnız öz əsas kataloqlarına daxil ola bilərlər.',
+    'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.' => 'Baxış, kopyalama, redaktə, tamfunksional fayl meneceri vasitəsilə veb domendə olan faylların baxışı və ixracı.',
+    'This is a commercial module, you would need to purchace license key to enable it.' => 'Bu kommersiya moduludur. Ondan istifadə etmək üçün lisenziya açarını əldə etməlisiniz',
+    'Minutes' => 'Dəqiqəlik',
+    'Hourly' => 'Saatlıq',
+    'Run Command' => 'Əmri aktivləşdir',
+    'every month' => 'hər ay',
+    'every odd month' => 'hər tək ay',
+    'every even month' => 'hər cüt ay',
+    'every day' => 'hər gün',
+    'every odd day' => 'hər tək gün',
+    'every even day' => 'hər cüt gün',
+    'weekdays (5 days)' => 'həftə içi (5 gün)',
+    'weekend (2 days)' => 'həftə sonu (2 gün)',
+    'Monday' => 'Bazar ertəsi',
+    'Tuesday' => 'Çərşənbə axşamı',
+    'Wednesday' => 'Çərşənbə',
+    'Thursday' => 'Cümə axşamı',
+    'Friday' => 'Cümə',
+    'Saturday' => 'Şənbə',
+    'Sunday' => 'Bazar',
+    'every hour' => 'hər saat',
+    'every two hours' => 'hər iki saatda bir',
+    'every minute' => 'hər dəqiqə',
+    'every two minutes' => 'hər iki dəqiqdə bir',
+    'every' => 'hər',
+    'Generate' => 'Yaratmaq',
+    'webalizer' => 'webalizer',
+    'awstats' => 'awstats',
+    'Vesta SSL' => 'Vesta SSL',
+    'SUBJECT' => 'MÖVZU',
+    'ALIASES' => 'LƏQƏBLƏR',
+    'NOT_BEFORE' => 'NOT_BEFORE',
+    'NOT_AFTER' => 'NOT_AFTER',
+    'SIGNATURE' => 'İMZA',
+    'PUB_KEY' => 'PUB_KEY',
+    'ISSUER' => 'ISSUER',
+    'Use server hostname' => 'Server hostname-dən istifadə et',
+    'Use domain hostname' => 'Domen hostname-dən istifadə et',
+    'Use STARTTLS' => 'STARTTLS istifadə et',
+    'Use SSL / TLS' => 'SSL / TLS istifadə et',
+    'No encryption' => 'Şifrələnməsiz',
+    'Do not use encryption' => 'Şifrələnməni istifadə etmə',
+    'maximum characters length, including prefix' => 'Simvolların maksimal uzunlu %s, prfiks daxil',
+    'Email Credentials' => 'E-poçt hüquqları',
+);

From c29c7cc8e6a72ffa852bdd583d1c4e61ef57266e Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Fri, 30 Nov 2018 00:52:49 +0200
Subject: [PATCH 0284/2300] Azerbaijani language support


From 44eabb4e9d50fe2535c93d4a168190febbd2af0a Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Fri, 30 Nov 2018 00:54:45 +0200
Subject: [PATCH 0285/2300] Azerbaijani language support

---
 web/inc/i18n/az.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/inc/i18n/az.php b/web/inc/i18n/az.php
index de5a0352..911dfc68 100644
--- a/web/inc/i18n/az.php
+++ b/web/inc/i18n/az.php
@@ -724,3 +724,4 @@ $LANG['az'] = array(
     'maximum characters length, including prefix' => 'Simvolların maksimal uzunlu %s, prfiks daxil',
     'Email Credentials' => 'E-poçt hüquqları',
 );
+v

From 2d0e09e7cac23d7da9b812a08860145210bcef78 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Fri, 30 Nov 2018 00:55:27 +0200
Subject: [PATCH 0286/2300] Azerbaijani language support

---
 web/inc/i18n/az.php | 1 -
 1 file changed, 1 deletion(-)

diff --git a/web/inc/i18n/az.php b/web/inc/i18n/az.php
index 911dfc68..de5a0352 100644
--- a/web/inc/i18n/az.php
+++ b/web/inc/i18n/az.php
@@ -724,4 +724,3 @@ $LANG['az'] = array(
     'maximum characters length, including prefix' => 'Simvolların maksimal uzunlu %s, prfiks daxil',
     'Email Credentials' => 'E-poçt hüquqları',
 );
-v

From 9f9ee145592e6dad16b4c6438b86416bdea73488 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Fri, 30 Nov 2018 17:29:33 +0200
Subject: [PATCH 0287/2300] Change monthly price for File Manager and SFTP

---
 web/templates/admin/edit_server.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/templates/admin/edit_server.html b/web/templates/admin/edit_server.html
index 4f142a6a..cde031fc 100644
--- a/web/templates/admin/edit_server.html
+++ b/web/templates/admin/edit_server.html
@@ -787,7 +787,7 @@
                                                             </div>
                                                             <ul>
                                                                 <li>
-                                                                    <a href="https://vestacp.com/checkout/2co.php?product_id=6&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Licence').' 1$/'.__('month').'</a>
+                                                                    <a href="https://vestacp.com/checkout/2co.php?product_id=6&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Licence').' 3$/'.__('month').'</a>
                                                                 </li>
                                                                 <li>
                                                                     <a href="https://vestacp.com/checkout/2co.php?product_id=9&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Lifetime License').' 18$</a>
@@ -835,7 +835,7 @@
                                                             </div>
                                                             <ul>
                                                                 <li>
-                                                                    <a href="https://vestacp.com/checkout/2co.php?product_id=7&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Licence').' 3$/'.__('month').'</a>
+                                                                    <a href="https://vestacp.com/checkout/2co.php?product_id=7&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Licence').' 5$/'.__('month').'</a>
                                                                 </li>
                                                                 <li>
                                                                     <a href="https://vestacp.com/checkout/2co.php?product_id=8&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Lifetime License').' 50$</a>

From 41bfca0b212e826140f69bbedcaaeaddceac974e Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Tue, 4 Dec 2018 16:21:46 +0200
Subject: [PATCH 0288/2300] ACME v2 support

---
 bin/v-add-letsencrypt-user | 146 +++++++++++++++++++++++++++----------
 1 file changed, 108 insertions(+), 38 deletions(-)

diff --git a/bin/v-add-letsencrypt-user b/bin/v-add-letsencrypt-user
index 3b14cd69..3b168c40 100755
--- a/bin/v-add-letsencrypt-user
+++ b/bin/v-add-letsencrypt-user
@@ -1,6 +1,6 @@
 #!/bin/bash
 # info: register letsencrypt user account
-# options: USER [EMAIL]
+# options: USER [TYPE]
 #
 # The function creates and register LetsEncript account key
 
@@ -11,7 +11,7 @@
 
 # Argument definition
 user=$1
-email=$2
+type=${2-1}
 key_size=4096
 
 # Includes
@@ -28,11 +28,17 @@ encode_base64() {
 #                    Verifications                         #
 #----------------------------------------------------------#
 
-check_args '1' "$#" 'USER [EMAIL]'
+check_args '1' "$#" 'USER [TYPE]'
 is_format_valid 'user'
 is_object_valid 'user' 'USER' "$user"
 if [ -e "$USER_DATA/ssl/le.conf" ]; then
-    exit
+    source "$USER_DATA/ssl/le.conf"
+    if [ "$type" -eq 1 ] && [ ! -z "$EMAIL" ]; then
+        exit
+    fi
+    if [ "$type" -eq 2 ] && [ ! -z "$KID" ]; then
+        exit
+    fi
 fi
 
 
@@ -40,14 +46,29 @@ fi
 #                       Action                             #
 #----------------------------------------------------------#
 
-api='https://acme-v01.api.letsencrypt.org'
-if [ -z "$email" ]; then
+# Defining LE API endpoint
+if [ "$type" -eq 1 ]; then
+    api='https://acme-v01.api.letsencrypt.org'
+else
+    api='https://acme-v02.api.letsencrypt.org'
+fi
+
+# Defining user email
+if [ $type -eq 1 ]; then
     email=$(get_user_value '$CONTACT')
 fi
 
-agreement=$(curl -s -I "$api/terms" |grep Location |cut -f 2 -d \ |tr -d '\r\n')
+# Defining user agreement
+if [ "$type" -eq 1 ]; then
+    agreement=$(curl -s -I "$api/terms" |grep Location |\
+        cut -f 2 -d \ |tr -d '\r\n')
+else
+    #agreement=$(curl -s "$api/directory" |grep termsOfService |\
+    #    cut -f 4 -d '"')
+    agreement=''
+fi
 
-# Generating key
+# Generating user key
 key="$USER_DATA/ssl/user.key"
 if [ ! -e "$key" ]; then
     openssl genrsa -out $key $key_size >/dev/null 2>&1
@@ -55,41 +76,77 @@ if [ ! -e "$key" ]; then
 fi
 
 # Defining key exponent
-exponent=$(openssl pkey -inform pem -in "$key" -noout -text_pub |\
-    grep Exponent: |cut -f 2 -d '(' |cut -f 1 -d ')' |sed -e 's/x//' |\
-    xxd -r -p |encode_base64)
+if [ -z "$EXPONENT" ]; then
+    exponent=$(openssl pkey -inform pem -in "$key" -noout -text_pub |\
+        grep Exponent: |cut -f 2 -d '(' |cut -f 1 -d ')' |sed -e 's/x//' |\
+        xxd -r -p |encode_base64)
+else
+    exponent="$EXPONENT"
+fi
 
 # Defining key modulus
-modulus=$(openssl rsa -in "$key" -modulus -noout |\
-    sed -e 's/^Modulus=//' |xxd -r -p |encode_base64)
+if [ -z "$MODULUS" ]; then
+    modulus=$(openssl rsa -in "$key" -modulus -noout |\
+        sed -e 's/^Modulus=//' |xxd -r -p |encode_base64)
+else
+    modulus="$MODULUS"
+fi
 
-# Defining key thumb
-thumb='{"e":"'$exponent'","kty":"RSA","n":"'"$modulus"'"}'
-thumb="$(echo -n "$thumb" |openssl dgst -sha256 -binary |encode_base64)"
+# Defining JWK token
+jwk='{"e":"'$exponent'","kty":"RSA","n":"'"$modulus"'"}'
 
-# Defining JWK header
-header='{"e":"'$exponent'","kty":"RSA","n":"'"$modulus"'"}'
-header='{"alg":"RS256","jwk":'"$header"'}'
+# Defining key thumbnail
+if [ -z "$THUMB" ]; then
+    thumb="$(echo -n "$jwk" |openssl dgst -sha256 -binary |encode_base64)"
+else
+    thumb="$THUMB"
+fi
 
-# Requesting nonce
+# Requesting ACME nonce
 nonce=$(curl -s -I "$api/directory" |grep Nonce |cut -f 2 -d \ |tr -d '\r\n')
-protected=$(echo -n '{"nonce":"'"$nonce"'"}' |encode_base64)
 
-# Defining registration query
-query='{"resource":"new-reg","contact":["mailto:'"$email"'"],'
-query=$query'"agreement":"'$agreement'"}'
-payload=$(echo -n "$query" |encode_base64)
+# Defining payload and protected data for v1 and v2
+if [ "$type" -eq 1 ]; then
+    header='{"alg":"RS256","jwk":'"$jwk"'}'
+    protected='{"nonce":"'"$nonce"'"}'
+    payload='{"resource":"new-reg","contact":["mailto:'"$email"'"],'
+    payload=$payload'"agreement":"'$agreement'"}'
+
+else
+    protected='{"nonce": "'$nonce'",'
+    protected=''$protected' "url": "'$api/acme/new-acct'",'
+    protected=''$protected' "alg": "RS256", "jwk": '$jwk'}'
+    payload='{"termsOfServiceAgreed": true}'
+fi
+
+# Encoding data
+protected=$(echo -n "$protected" |encode_base64)
+payload=$(echo -n "$payload" |encode_base64)
+
+# Signing request
 signature=$(printf "%s" "$protected.$payload" |\
-    openssl dgst -sha256 -binary -sign "$key" |encode_base64)
-data='{"header":'"$header"',"protected":"'"$protected"'",'
-data=$data'"payload":"'"$payload"'","signature":"'"$signature"'"}'
+    openssl dgst -sha256 -binary -sign "$key" |\
+    encode_base64)
 
-# Sending request to LetsEncrypt API
-answer=$(curl -s -i -d "$data" "$api/acme/new-reg")
-status=$(echo "$answer" |grep HTTP/1.1 |tail -n1 |cut -f2 -d ' ')
+if [ "$type" -eq 1 ]; then
+    data='{"header":'"$header"',"protected":"'"$protected"'",'
+    data=$data'"payload":"'"$payload"'","signature":"'"$signature"'"}'
+
+    answer=$(curl -s -i -d "$data" "$api/acme/new-reg")
+    status=$(echo "$answer" |grep HTTP/1.1 |tail -n1 |cut -f2 -d ' ')
+else
+    data='{"protected":"'"$protected"'",'
+    data=$data'"payload":"'"$payload"'",'
+    data=$data'"signature":"'"$signature"'"}'
+
+    answer=$(curl -s -i -d "$data" "$api/acme/new-acct" \
+        -H "Content-Type: application/jose+json")
+    status=$(echo "$answer" |grep HTTP/1.1 |tail -n1 |cut -f2 -d ' ')
+    kid=$(echo "$answer" |grep Location: |cut -f2 -d ' '|tr -d '\r')
+fi
 
 # Checking http answer status
-if [[ "$status" -ne "201" ]] && [[ "$status" -ne "409" ]]; then
+if [[ "${status:0:2}" -ne "20" ]] && [[ "$status" -ne "409" ]]; then
     check_result $E_CONNECT "LetsEncrypt account registration $status"
 fi
 
@@ -99,12 +156,25 @@ fi
 #----------------------------------------------------------#
 
 # Adding le.conf
-echo "EMAIL='$email'" > $USER_DATA/ssl/le.conf
-echo "EXPONENT='$exponent'" >> $USER_DATA/ssl/le.conf
-echo "MODULUS='$modulus'" >> $USER_DATA/ssl/le.conf
-echo "THUMB='$thumb'" >> $USER_DATA/ssl/le.conf
-chmod 660  $USER_DATA/ssl/le.conf
-
+if [ ! -e "$USER_DATA/ssl/le.conf" ]; then
+    echo "EXPONENT='$exponent'" > $USER_DATA/ssl/le.conf
+    echo "MODULUS='$modulus'" >> $USER_DATA/ssl/le.conf
+    echo "THUMB='$thumb'" >> $USER_DATA/ssl/le.conf
+    if [ "$type" -eq 1]; then
+        echo "EMAIL='$email'" >> $USER_DATA/ssl/le.conf
+    else
+        echo "KID='$kid'" >> $USER_DATA/ssl/le.conf
+    fi
+    chmod 660  $USER_DATA/ssl/le.conf
+else
+    if [ "$type" -eq 1 ]; then
+        sed -i '/^EMAIL=/d' $USER_DATA/ssl/le.conf
+        echo "EMAIL='$email'" >> $USER_DATA/ssl/le.conf
+    else
+        sed -i '/^KID=/d' $USER_DATA/ssl/le.conf
+        echo "KID='$kid'" >> $USER_DATA/ssl/le.conf
+    fi
+fi
 
 # Logging
 log_event "$OK" "$ARGUMENTS"

From d2d399676f77a6a6d91310996157f2e4243dd357 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Tue, 4 Dec 2018 16:27:22 +0200
Subject: [PATCH 0289/2300] ACME v2 support - list user

---
 bin/v-list-letsencrypt-user | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/bin/v-list-letsencrypt-user b/bin/v-list-letsencrypt-user
index cded9600..63bd4be2 100755
--- a/bin/v-list-letsencrypt-user
+++ b/bin/v-list-letsencrypt-user
@@ -23,7 +23,8 @@ json_list() {
         "EMAIL": "'$EMAIL'",
         "EXPONENT": "'$EXPONENT'",
         "MODULUS": "'$MODULUS'",
-        "THUMB: "'$THUMB'"
+        "THUMB: "'$THUMB'",
+        "KID:" "'$KID'"
     }'
     echo '}'
 }
@@ -35,17 +36,18 @@ shell_list() {
     echo "THUMB:          $THUMB"
     echo "EXPONENT:       $EXPONENT"
     echo "MODULUS:        $MODULUS"
+    echo "KID:            $KID"
 }
 
 # PLAIN list function
 plain_list() {
-    echo -e "$user\t$EMAIL\t$EXPONENT\t$MODULUS\t$THUMB"
+    echo -e "$user\t$EMAIL\t$EXPONENT\t$MODULUS\t$THUMB\t$KID"
 }
 
 # CSV list function
 csv_list() {
-    echo "USER,EMAIL,EXPONENT,MODULUS,THUMB"
-    echo "$user,$EMAIL,$EXPONENT,$MODULUS,$THUMB"
+    echo "USER,EMAIL,EXPONENT,MODULUS,THUMB,KID"
+    echo "$user,$EMAIL,$EXPONENT,$MODULUS,$THUMB,$KID"
 }
 
 

From 320455f7c9cecaf95a91a1eab0b7b3573e06efe7 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Tue, 4 Dec 2018 16:29:48 +0200
Subject: [PATCH 0290/2300] ACME v2 support - list user/ typo

---
 bin/v-list-letsencrypt-user | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-list-letsencrypt-user b/bin/v-list-letsencrypt-user
index 63bd4be2..6289ecba 100755
--- a/bin/v-list-letsencrypt-user
+++ b/bin/v-list-letsencrypt-user
@@ -23,8 +23,8 @@ json_list() {
         "EMAIL": "'$EMAIL'",
         "EXPONENT": "'$EXPONENT'",
         "MODULUS": "'$MODULUS'",
-        "THUMB: "'$THUMB'",
-        "KID:" "'$KID'"
+        "THUMB": "'$THUMB'",
+        "KID": "'$KID'"
     }'
     echo '}'
 }

From 58c6ca95b18948d9d1099ba7fb1300d3b33b0fcc Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 10 Dec 2018 14:15:46 +0100
Subject: [PATCH 0291/2300] Fix for suspended domain checking while LE renewing

Logic should be inversed...
If you grep for suspended=no, then variable is NOT empty if it's NOT suspended
Which means it's empty only if it's suspended.
So we must grep for suspended=yes if we consider not-empty result as suspended domain.
@skullwritter

This bug totally brakes LE renewing :)
---
 bin/v-update-letsencrypt-ssl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 6e26d7e5..dd1f3b7c 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -32,7 +32,7 @@ for user in $users; do
     lecounter=0
     for domain in $(search_objects 'web' 'LETSENCRYPT' 'yes' 'DOMAIN'); do
         # Working on Web domain check - if is suspended
-        webSuspended=$(grep "DOMAIN='$domain'" $USER_DATA/web.conf |grep "SUSPENDED='no")
+        webSuspended=$(grep "DOMAIN='$domain'" $USER_DATA/web.conf |grep "SUSPENDED='yes")
         if [ ! -z "$webSuspended" ]; then
                 continue;
         fi;

From 3d8b6a87a77ae8c026e90eb45212349585adc5e3 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 10 Dec 2018 14:31:10 +0100
Subject: [PATCH 0292/2300] Better handling of calm-down routine while LE
 renewing

Sleep is because https://github.com/serghey-rodin/vesta/issues/1193
---
 bin/v-update-letsencrypt-ssl | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index dd1f3b7c..17f8f0f6 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -25,11 +25,12 @@ source $VESTA/conf/vesta.conf
 # Defining user list
 users=$($BIN/v-list-users | tail -n+3 | awk '{ print $1 }')
 
+lecounter=0
+
 # Checking users
 for user in $users; do
     USER_DATA=$VESTA/data/users/$user
     # Checking user certificates
-    lecounter=0
     for domain in $(search_objects 'web' 'LETSENCRYPT' 'yes' 'DOMAIN'); do
         # Working on Web domain check - if is suspended
         webSuspended=$(grep "DOMAIN='$domain'" $USER_DATA/web.conf |grep "SUSPENDED='yes")
@@ -46,6 +47,10 @@ for user in $users; do
         expire=$((expire / 86400))
         domain=$(basename $crt |sed -e "s/.crt$//")
         if [[ "$expire" -lt 31 ]]; then
+            if [ $lecounter -gt 0 ]; then
+                sleep 10
+            fi
+            ((lecounter++))
             aliases=$(echo "$crt_data" |grep DNS:)
             aliases=$(echo "$aliases" |sed -e "s/DNS://g" -e "s/,//")
             aliases=$(echo "$aliases" |tr ' ' '\n' |sed "/^$/d")
@@ -62,10 +67,6 @@ for user in $users; do
                     echo "$domain $msg"
                 fi
             fi
-            if [ $lecounter -gt 0 ]; then
-                sleep 10
-            fi
-            ((lecounter++))
         fi
     done
 done

From 60dcc89d3273241c58aa7aef202ecd1319f2ce52 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 10 Dec 2018 14:35:20 +0100
Subject: [PATCH 0293/2300] Fix for sleep while LE renewing

---
 bin/v-update-letsencrypt-ssl | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 6de9638b..96a384a1 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -48,7 +48,7 @@ for user in $users; do
         domain=$(basename $crt |sed -e "s/.crt$//")
         if [[ "$expire" -lt 31 ]]; then
             if [ $lecounter -gt 0 ]; then
-                sleep 10
+                sleep 60
             fi
             ((lecounter++))
             aliases=$(echo "$crt_data" |grep DNS:)
@@ -68,10 +68,6 @@ for user in $users; do
                 fi
             fi
         fi
-        if [ $lecounter -gt 0 ]; then
-            sleep 60
-        fi
-        ((lecounter++))
     done
 done
 

From 3a7d7158caffb092bddd3010291d936c35e897ce Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 14 Dec 2018 15:42:32 +0100
Subject: [PATCH 0294/2300] Temporary fix for CSR

---
 bin/v-add-letsencrypt-user | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-user b/bin/v-add-letsencrypt-user
index 3b168c40..f233aa4b 100755
--- a/bin/v-add-letsencrypt-user
+++ b/bin/v-add-letsencrypt-user
@@ -162,7 +162,9 @@ if [ ! -e "$USER_DATA/ssl/le.conf" ]; then
     echo "THUMB='$thumb'" >> $USER_DATA/ssl/le.conf
     if [ "$type" -eq 1]; then
         echo "EMAIL='$email'" >> $USER_DATA/ssl/le.conf
-    else
+        echo "KID='$kid'" >> $USER_DATA/ssl/le.conf
+else
+        echo "EMAIL='$email'" >> $USER_DATA/ssl/le.conf
         echo "KID='$kid'" >> $USER_DATA/ssl/le.conf
     fi
     chmod 660  $USER_DATA/ssl/le.conf

From 51d8870ec1105fefb4e532f1f008fa0b03a8855b Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 14 Dec 2018 15:54:24 +0100
Subject: [PATCH 0295/2300] Update v-restart-proxy

---
 bin/v-restart-proxy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index 3e8df916..f4928a4f 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -55,7 +55,7 @@ if [ -f "/usr/local/vesta/web/inc/nginx_proxy" ]; then
   # background restart
   if [ "$1" = 'background' ]; then
       # Restart system
-      sleep 15
+      sleep 20
       service $PROXY_SYSTEM restart >/dev/null 2>&1
       if [ $? -ne 0 ]; then
           send_email_report

From 98b05f1ba2fc438b8f9e35f584ced3460d112419 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 14 Dec 2018 15:55:35 +0100
Subject: [PATCH 0296/2300] Sleep 120 sec while LE renewing

---
 bin/v-update-letsencrypt-ssl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 96a384a1..d57ae11e 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -48,7 +48,7 @@ for user in $users; do
         domain=$(basename $crt |sed -e "s/.crt$//")
         if [[ "$expire" -lt 31 ]]; then
             if [ $lecounter -gt 0 ]; then
-                sleep 60
+                sleep 120
             fi
             ((lecounter++))
             aliases=$(echo "$crt_data" |grep DNS:)

From f1bbd788aa3b2f83219c4590108ec766df656e36 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 14 Dec 2018 16:39:15 +0100
Subject: [PATCH 0297/2300] Sleep 25 before restart nginx

---
 bin/v-restart-proxy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index f4928a4f..5966ddd6 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -55,7 +55,7 @@ if [ -f "/usr/local/vesta/web/inc/nginx_proxy" ]; then
   # background restart
   if [ "$1" = 'background' ]; then
       # Restart system
-      sleep 20
+      sleep 25
       service $PROXY_SYSTEM restart >/dev/null 2>&1
       if [ $? -ne 0 ]; then
           send_email_report

From 4327a3d1bc8f1c5149c0ee046d1abd87267197e4 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 21 Dec 2018 17:28:12 +0100
Subject: [PATCH 0298/2300] Syntax error fix in v-add-letsencrypt-user

---
 bin/v-add-letsencrypt-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-user b/bin/v-add-letsencrypt-user
index 3b168c40..6bd3c560 100755
--- a/bin/v-add-letsencrypt-user
+++ b/bin/v-add-letsencrypt-user
@@ -160,7 +160,7 @@ if [ ! -e "$USER_DATA/ssl/le.conf" ]; then
     echo "EXPONENT='$exponent'" > $USER_DATA/ssl/le.conf
     echo "MODULUS='$modulus'" >> $USER_DATA/ssl/le.conf
     echo "THUMB='$thumb'" >> $USER_DATA/ssl/le.conf
-    if [ "$type" -eq 1]; then
+    if [ "$type" -eq 1 ]; then
         echo "EMAIL='$email'" >> $USER_DATA/ssl/le.conf
     else
         echo "KID='$kid'" >> $USER_DATA/ssl/le.conf

From 73cb7667cd236024fad6985ac2d25f7ce8a16b9b Mon Sep 17 00:00:00 2001
From: Marcos <marcos@raiolanetworks.es>
Date: Mon, 24 Dec 2018 17:44:23 +0100
Subject: [PATCH 0299/2300] Fix conflict

---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index a68778f2..59d071bc 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -229,7 +229,7 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
 
         # Backup files
         cd $HOMEDIR/$user/web/$domain
-        tar --anchored -cpf- * ${fargs[@]} |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
+        tar --anchored -cpf- ${fargs[@]} * |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
     done
 
     # Print total

From 49f69ce60d581547259ba4f6d6ecb82ea8906321 Mon Sep 17 00:00:00 2001
From: Marcos <marcos@raiolanetworks.es>
Date: Mon, 24 Dec 2018 17:51:07 +0100
Subject: [PATCH 0300/2300] Fix conflicts

---
 bin/v-backup-user | 1 -
 1 file changed, 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 59d071bc..cdbc9414 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -228,7 +228,6 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
         set +f
 
         # Backup files
-        cd $HOMEDIR/$user/web/$domain
         tar --anchored -cpf- ${fargs[@]} * |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
     done
 

From f8b4d42b740752e17944370440f37d3105f4b21f Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 26 Dec 2018 12:54:33 +0200
Subject: [PATCH 0301/2300] Let's Encrypt v2 with wildcard support

---
 bin/v-add-letsencrypt-domain   | 243 ++++++++++++++++++++++++---------
 bin/v-add-letsencrypt-user     | 159 ++++++++-------------
 bin/v-check-letsencrypt-domain | 162 ----------------------
 bin/v-sign-letsencrypt-csr     | 110 ---------------
 bin/v-update-letsencrypt-ssl   |  55 +++-----
 5 files changed, 257 insertions(+), 472 deletions(-)
 delete mode 100755 bin/v-check-letsencrypt-domain
 delete mode 100755 bin/v-sign-letsencrypt-csr

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index c69a21f1..a6946695 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -1,13 +1,8 @@
 #!/bin/bash
-# info: adding letsencrypt ssl cetificate for domain
-# options: USER DOMAIN [ALIASES] [RESTART] [NOTIFY]
+# info: check letsencrypt domain
+# options: USER DOMAIN [ALIASES]
 #
-# The function turns on SSL support for a domain. Parameter ssl_dir is a path
-# to directory where 2 or 3 ssl files can be found. Certificate file
-# domain.tld.crt and its key domain.tld.key  are mandatory. Certificate
-# authority domain.tld.ca file is optional. If home directory  parameter
-# (ssl_home) is not set, https domain uses public_shtml as separate
-# documentroot directory.
+# The function check and validates domain with Let's Encript
 
 
 #----------------------------------------------------------#
@@ -18,39 +13,67 @@
 user=$1
 domain=$2
 aliases=$3
-restart=$4
-notify=$5
+
+# LE API
+API='https://acme-v02.api.letsencrypt.org'
 
 # Includes
 source $VESTA/func/main.sh
 source $VESTA/func/domain.sh
 source $VESTA/conf/vesta.conf
 
-# Additional argument formatting
-format_domain_idn
+# encode base64
+encode_base64() {
+    cat |base64 |tr '+/' '-_' |tr -d '\r\n='
+}
+
+# Let's Encrypt v2 curl function
+query_le_v2() {
+
+    protected='{"nonce": "'$3'",'
+    protected=''$protected' "url": "'$1'",'
+    protected=''$protected' "alg": "RS256", "kid": "'$KID'"}'
+    content="Content-Type: application/jose+json"
+
+    payload_=$(echo -n "$2" |encode_base64)
+    protected_=$(echo -n "$protected" |encode_base64)
+    signature_=$(printf "%s" "$protected_.$payload_" |\
+        openssl dgst -sha256 -binary -sign $USER_DATA/ssl/user.key |\
+        encode_base64)
+
+    post_data='{"protected":"'"$protected_"'",'
+    post_data=$post_data'"payload":"'"$payload_"'",'
+    post_data=$post_data'"signature":"'"$signature_"'"}'
+
+    curl -s -i -d "$post_data" "$1" -H "$content"
+}
+
 
 
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#
 
-check_args '2' "$#" 'USER DOMAIN [ALIASES] [RESTART] [NOTIFY]'
-is_format_valid 'user' 'domain'
+check_args '2' "$#" 'USER DOMAIN [ALIASES]'
+is_format_valid 'user' 'domain' 'aliases'
 is_system_enabled "$WEB_SYSTEM" 'WEB_SYSTEM'
-is_system_enabled "$WEB_SSL" 'SSL_SUPPORT'
 is_object_valid 'user' 'USER' "$user"
 is_object_unsuspended 'user' 'USER' "$user"
 is_object_valid 'web' 'DOMAIN' "$domain"
 is_object_unsuspended 'web' 'DOMAIN' "$domain"
+get_domain_values 'web'
+for alias in $(echo "$aliases" |tr ',' '\n' |sort -u); do
+    check_alias="$(echo $ALIAS |tr ',' '\n' |grep ^$alias$)"
+    if [ -z "$check_alias" ]; then
+        check_result $E_NOTEXIST "domain alias $alias doesn't exist"
+    fi
+done
 
 
 #----------------------------------------------------------#
 #                       Action                             #
 #----------------------------------------------------------#
 
-# Parsing domain data
-get_domain_values 'web'
-
 # Registering LetsEncrypt user account
 $BIN/v-add-letsencrypt-user $user
 if [ "$?" -ne 0  ]; then
@@ -62,53 +85,152 @@ fi
 
 # Parsing LetsEncrypt account data
 source $USER_DATA/ssl/le.conf
-email=$EMAIL
 
-# Validating domain and aliases
-i=1
-for alias in $(echo $domain,$aliases |tr ',' '\n' |sort -u); do
-    $BIN/v-check-letsencrypt-domain $user $alias
-    if [ "$?" -ne 0 ]; then
-        touch $VESTA/data/queue/letsencrypt.pipe
-        sed -i "/ $domain /d" $VESTA/data/queue/letsencrypt.pipe
-        send_notice "LETSENCRYPT" "$alias validation failed"
-        check_result $E_INVALID "LE domain validation" >/dev/null
+# Checking wildcard alias
+if [ "$aliases" = "*.$domain" ]; then
+    wildcard='yes'
+    proto="dns-01"
+    if [ ! -e "$VESTA/data/users/$user/dns/$domain.conf" ]; then
+        check_result $E_NOTEXIST "DNS domain $domain doesn't exist"
+    fi
+else
+    proto="http-01"
+fi
+
+# Requesting nonce / STEP 1
+answer=$(curl -s -I "$API/directory")
+nonce=$(echo "$answer" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
+status=$(echo "$answer"|grep HTTP/1.1 |tail -n1 |cut -f 2 -d ' ')
+if [[ "$status" -ne 200 ]]; then
+    check_result $E_CONNECT "Let's Encrypt nonce request status $status"
+fi
+
+# Placing new order / STEP 2
+url="$API/acme/new-order"
+payload='{"identifiers":['
+for identifier in $(echo $domain,$aliases |tr ',' '\n' |sort -u); do
+    payload=$payload'{"type":"dns","value":"'$identifier'"},'
+done
+payload=$(echo "$payload"|sed "s/,$//")
+payload=$payload']}'
+answer=$(query_le_v2 "$url" "$payload" "$nonce")
+nonce=$(echo "$answer" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
+authz=$(echo "$answer" |grep "acme/authz" |cut -f2 -d '"')
+finalize=$(echo "$answer" |grep 'finalize":' |cut -f4 -d '"')
+status=$(echo "$answer" |grep HTTP/1.1 |tail -n1 |cut -f2 -d ' ')
+if [[ "$status" -ne 201 ]]; then
+    check_result $E_CONNECT "Let's Encrypt new auth status $status"
+fi
+
+# Requesting authorization token / STEP 3
+for auth in $authz; do
+    payload=''
+    answer=$(query_le_v2 "$auth" "$payload" "$nonce")
+    url=$(echo "$answer" |grep -A3 $proto |grep url |cut -f 4 -d \")
+    token=$(echo "$answer" |grep -A3 $proto |grep token |cut -f 4 -d \")
+    nonce=$(echo "$answer" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
+    status=$(echo "$answer"|grep HTTP/1.1 |tail -n1 |cut -f 2 -d ' ')
+    if [[ "$status" -ne 200 ]]; then
+        check_result $E_CONNECT "Let's Encrypt acme/authz bad status $status"
     fi
 
-    # Checking LE limits per account
-    if [ "$i" -gt 100 ]; then
-        touch $VESTA/data/queue/letsencrypt.pipe
-        sed -i "/ $domain /d" $VESTA/data/queue/letsencrypt.pipe
-        send_notice 'LETSENCRYPT' 'Limit of domains per account is reached'
-        check_result $E_LIMIT "LE can't sign more than 100 domains"
+    # Accepting challenge / STEP 4
+    if [ "$wildcard" = 'yes'  ]; then
+        record=$(printf "%s" "$token.$THUMB" |\
+            openssl dgst -sha256 -binary |encode_base64)
+        old_records=$($BIN/v-list-dns-records $user $domain plain|grep 'TXT')
+        old_records=$(echo "$old_records" |grep _acme-challenge |cut -f 1)
+        for old_record in $old_records; do
+            $BIN/v-delete-dns-record $user $domain $old_record
+        done
+        $BIN/v-add-dns-record $user $domain "_acme-challenge" "TXT" $record
+        check_result $? "DNS _acme-challenge record wasn't created"
+    else
+        if [ "$WEB_SYSTEM" = 'nginx' ] || [ ! -z "$PROXY_SYSTEM" ]; then
+            conf="$HOMEDIR/$user/conf/web/nginx.$domain.conf_letsencrypt"
+            sconf="$HOMEDIR/$user/conf/web/snginx.$domain.conf_letsencrypt"
+            if [ ! -e "$conf" ]; then
+                echo 'location ~ "^/\.well-known/acme-challenge/(.*)$" {' \
+                    > $conf
+                echo '    default_type text/plain;' >> $conf
+                echo '    return 200 "$1.'$THUMB'";' >> $conf
+                echo '}' >> $conf
+            fi
+            if [ ! -e "$sconf" ]; then
+                ln -s "$conf" "$sconf"
+            fi
+            $BIN/v-restart-proxy
+            check_result $? "Proxy restart failed" >/dev/null
+
+        else
+            well_known="$HOMEDIR/$user/web/$rdomain/public_html/.well-known"
+            acme_challenge="$well_known/acme-challenge"
+            mkdir -p $acme_challenge
+            echo "$token.$THUMB" > $acme_challenge/$token
+            chown -R $user:$user $well_known
+        fi
+        $BIN/v-restart-web
+        check_result $? "Web restart failed" >/dev/null
+    fi
+
+    # Requesting ACME validation / STEP 5
+    validation_check=$(echo "$answer" |grep '"valid"')
+    if [[ ! -z "$validation_check" ]]; then
+        validation='valid'
+    else
+        validation='pending'
+    fi
+
+    # Doing pol check on status
+    i=1
+    while [ "$validation" = 'pending' ]; do
+        payload='{}'
+        answer=$(query_le_v2 "$url" "$payload" "$nonce")
+        validation=$(echo "$answer"|grep -A1 $proto |tail -n1|cut -f4 -d \")
+        nonce=$(echo "$answer" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
+        status=$(echo "$answer"|grep HTTP/1.1 |tail -n1 |cut -f 2 -d ' ')
+        if [[ "$status" -ne 200 ]]; then
+            check_result $E_CONNECT "Let's Encrypt vvalidation status $status"
+        fi
+
+        i=$((i + 1))
+        if [ "$i" -gt 10 ]; then
+            check_result $E_CONNECT "Let's Encrypt domain validation timeout"
+        fi
+        sleep 1
+    done
+    if [ "$validation" = 'invalid' ]; then
+        check_result $E_CONNECT "Let's Encrypt domain verification failed"
     fi
-    i=$((i++))
 done
 
-# Generating CSR
-ssl_dir=$($BIN/v-generate-ssl-cert "$domain" "$email" "US" "California" \
+
+# Generating new ssl certificate
+ssl_dir=$($BIN/v-generate-ssl-cert "$domain" "info@$domain" "US" "California"\
     "San Francisco" "Vesta" "IT" "$aliases" |tail -n1 |awk '{print $2}')
 
-# Signing CSR
-crt=$($BIN/v-sign-letsencrypt-csr $user $domain $ssl_dir)
-if [ "$?" -ne 0 ]; then
-    touch $VESTA/data/queue/letsencrypt.pipe
-    sed -i "/ $domain /d" $VESTA/data/queue/letsencrypt.pipe
-    send_notice "LETSENCRYPT" "$alias validation failed"
-    check_result "$E_INVALID" "LE $domain validation"
+# Sedning CSR to finalize order / STEP 6
+csr=$(openssl req -in $ssl_dir/$domain.csr -outform DER |encode_base64)
+payload='{"csr":"'$csr'"}'
+answer=$(query_le_v2 "$finalize" "$payload" "$nonce")
+nonce=$(echo "$answer" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
+status=$(echo "$answer"|grep HTTP/1.1 |tail -n1 |cut -f 2 -d ' ')
+certificate=$(echo "$answer"|grep 'certificate":' |cut -f4 -d '"')
+if [[ "$status" -ne 200 ]]; then
+    check_result $E_CONNECT "Let's Encrypt finalize bad status $status"
 fi
-echo "$crt" > $ssl_dir/$domain.crt
 
-# Dowloading CA certificate
-le_certs='https://letsencrypt.org/certs'
-x1='lets-encrypt-x1-cross-signed.pem.txt'
-x3='lets-encrypt-x3-cross-signed.pem.txt'
-issuer=$(openssl x509 -text -in $ssl_dir/$domain.crt |grep "Issuer:")
-if [ -z "$(echo $issuer|grep X3)" ]; then
-    curl -s $le_certs/$x1 > $ssl_dir/$domain.ca
-else
-    curl -s $le_certs/$x3 > $ssl_dir/$domain.ca
-fi
+# Downloading signed certificate / STEP 7
+curl -s "$certificate" -o $ssl_dir/$domain.pem
+
+# Splitting up downloaded pem
+crt_end=$(grep -n END $ssl_dir/$domain.pem |head -n1 |cut -f1 -d:)
+head -n $crt_end $ssl_dir/$domain.pem > $ssl_dir/$domain.crt
+
+pem_lines=$(wc -l $ssl_dir/$domain.pem |cut -f 1 -d ' ')
+ca_end=$(grep -n  "BEGIN" $ssl_dir/$domain.pem |tail -n1 |cut -f 1 -d :)
+ca_end=$(( pem_lines - crt_end + 1 ))
+tail -n $ca_end $ssl_dir/$domain.pem > $ssl_dir/$domain.ca
 
 # Adding SSL
 ssl_home=$(search_objects 'web' 'LETSENCRYPT' 'yes' 'SSL_HOME')
@@ -140,18 +262,13 @@ update_object_value 'web' 'DOMAIN' "$domain" '$LETSENCRYPT' 'yes'
 #                       Vesta                              #
 #----------------------------------------------------------#
 
-# Restarting web
-$BIN/v-restart-web $restart
-if [ "$?" -ne 0  ]; then
-    send_notice 'LETSENCRYPT' "web server needs to be restarted manually"
-fi
+# Deleteing task from queue
+touch $VESTA/data/queue/letsencrypt.pipe
+sed -i "/ $domain /d" $VESTA/data/queue/letsencrypt.pipe
 
 # Notifying user
 send_notice 'LETSENCRYPT' "$domain SSL has been installed successfully"
 
-# Deleteing task from queue
-touch $VESTA/data/queue/letsencrypt.pipe
-sed -i "/ $domain /d" $VESTA/data/queue/letsencrypt.pipe
 
 # Logging
 log_event "$OK" "$ARGUMENTS"
diff --git a/bin/v-add-letsencrypt-user b/bin/v-add-letsencrypt-user
index 6bd3c560..f3a19163 100755
--- a/bin/v-add-letsencrypt-user
+++ b/bin/v-add-letsencrypt-user
@@ -1,8 +1,8 @@
 #!/bin/bash
 # info: register letsencrypt user account
-# options: USER [TYPE]
+# options: USER
 #
-# The function creates and register LetsEncript account key
+# The function creates and register LetsEncript account 
 
 
 #----------------------------------------------------------#
@@ -11,8 +11,9 @@
 
 # Argument definition
 user=$1
-type=${2-1}
-key_size=4096
+
+# LE API
+API='https://acme-v02.api.letsencrypt.org'
 
 # Includes
 source $VESTA/func/main.sh
@@ -23,22 +24,39 @@ encode_base64() {
     cat |base64 |tr '+/' '-_' |tr -d '\r\n='
 }
 
+# Let's Encrypt v2 curl function
+query_le_v2() {
+    protected='{"nonce": "'$3'",'
+    protected=''$protected' "url": "'$1'",'
+    protected=''$protected' "alg": "RS256", "jwk": '$jwk'}'
+    content="Content-Type: application/jose+json"
+
+    payload_=$(echo -n "$2" |encode_base64)
+    protected_=$(echo -n "$protected" |encode_base64)
+    signature_=$(printf "%s" "$protected_.$payload_" |\
+        openssl dgst -sha256 -binary -sign $USER_DATA/ssl/user.key |\
+        encode_base64)
+
+    post_data='{"protected":"'"$protected_"'",'
+    post_data=$post_data'"payload":"'"$payload_"'",'
+    post_data=$post_data'"signature":"'"$signature_"'"}'
+
+    curl -s -i -d "$post_data" "$1" -H "$content"
+}
+
 
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#
 
-check_args '1' "$#" 'USER [TYPE]'
+check_args '1' "$#" 'USER'
 is_format_valid 'user'
 is_object_valid 'user' 'USER' "$user"
 if [ -e "$USER_DATA/ssl/le.conf" ]; then
     source "$USER_DATA/ssl/le.conf"
-    if [ "$type" -eq 1 ] && [ ! -z "$EMAIL" ]; then
-        exit
-    fi
-    if [ "$type" -eq 2 ] && [ ! -z "$KID" ]; then
-        exit
-    fi
+fi
+if [ ! -z "$KID" ]; then
+    exit
 fi
 
 
@@ -46,108 +64,57 @@ fi
 #                       Action                             #
 #----------------------------------------------------------#
 
-# Defining LE API endpoint
-if [ "$type" -eq 1 ]; then
-    api='https://acme-v01.api.letsencrypt.org'
-else
-    api='https://acme-v02.api.letsencrypt.org'
-fi
 
 # Defining user email
-if [ $type -eq 1 ]; then
-    email=$(get_user_value '$CONTACT')
+if [[ -z "$EMAIL" ]]; then
+    EMAIL=$(get_user_value '$CONTACT')
 fi
 
 # Defining user agreement
-if [ "$type" -eq 1 ]; then
-    agreement=$(curl -s -I "$api/terms" |grep Location |\
-        cut -f 2 -d \ |tr -d '\r\n')
-else
-    #agreement=$(curl -s "$api/directory" |grep termsOfService |\
-    #    cut -f 4 -d '"')
-    agreement=''
-fi
+agreement=''
 
 # Generating user key
-key="$USER_DATA/ssl/user.key"
-if [ ! -e "$key" ]; then
-    openssl genrsa -out $key $key_size >/dev/null 2>&1
-    chmod 600 $key
+KEY="$USER_DATA/ssl/user.key"
+if [ ! -e "$KEY" ]; then
+    openssl genrsa -out $KEY 4096 >/dev/null 2>&1
+    chmod 600 $KEY
 fi
 
 # Defining key exponent
 if [ -z "$EXPONENT" ]; then
-    exponent=$(openssl pkey -inform pem -in "$key" -noout -text_pub |\
+    EXPONENT=$(openssl pkey -inform pem -in "$KEY" -noout -text_pub |\
         grep Exponent: |cut -f 2 -d '(' |cut -f 1 -d ')' |sed -e 's/x//' |\
         xxd -r -p |encode_base64)
-else
-    exponent="$EXPONENT"
 fi
 
 # Defining key modulus
 if [ -z "$MODULUS" ]; then
-    modulus=$(openssl rsa -in "$key" -modulus -noout |\
+    MODULUS=$(openssl rsa -in "$KEY" -modulus -noout |\
         sed -e 's/^Modulus=//' |xxd -r -p |encode_base64)
-else
-    modulus="$MODULUS"
 fi
 
-# Defining JWK token
-jwk='{"e":"'$exponent'","kty":"RSA","n":"'"$modulus"'"}'
+# Defining JWK
+jwk='{"e":"'$EXPONENT'","kty":"RSA","n":"'"$MODULUS"'"}'
 
 # Defining key thumbnail
 if [ -z "$THUMB" ]; then
-    thumb="$(echo -n "$jwk" |openssl dgst -sha256 -binary |encode_base64)"
-else
-    thumb="$THUMB"
+    THUMB="$(echo -n "$jwk" |openssl dgst -sha256 -binary |encode_base64)"
 fi
 
+
 # Requesting ACME nonce
-nonce=$(curl -s -I "$api/directory" |grep Nonce |cut -f 2 -d \ |tr -d '\r\n')
+nonce=$(curl -s -I "$API/directory" |grep Nonce |cut -f 2 -d \ |tr -d '\r\n')
 
-# Defining payload and protected data for v1 and v2
-if [ "$type" -eq 1 ]; then
-    header='{"alg":"RS256","jwk":'"$jwk"'}'
-    protected='{"nonce":"'"$nonce"'"}'
-    payload='{"resource":"new-reg","contact":["mailto:'"$email"'"],'
-    payload=$payload'"agreement":"'$agreement'"}'
+# Creating ACME account
+url="$API/acme/new-acct"
+payload='{"termsOfServiceAgreed": true}'
+answer=$(query_le_v2 "$url" "$payload" "$nonce")
+kid=$(echo "$answer" |grep Location: |cut -f2 -d ' '|tr -d '\r')
 
-else
-    protected='{"nonce": "'$nonce'",'
-    protected=''$protected' "url": "'$api/acme/new-acct'",'
-    protected=''$protected' "alg": "RS256", "jwk": '$jwk'}'
-    payload='{"termsOfServiceAgreed": true}'
-fi
-
-# Encoding data
-protected=$(echo -n "$protected" |encode_base64)
-payload=$(echo -n "$payload" |encode_base64)
-
-# Signing request
-signature=$(printf "%s" "$protected.$payload" |\
-    openssl dgst -sha256 -binary -sign "$key" |\
-    encode_base64)
-
-if [ "$type" -eq 1 ]; then
-    data='{"header":'"$header"',"protected":"'"$protected"'",'
-    data=$data'"payload":"'"$payload"'","signature":"'"$signature"'"}'
-
-    answer=$(curl -s -i -d "$data" "$api/acme/new-reg")
-    status=$(echo "$answer" |grep HTTP/1.1 |tail -n1 |cut -f2 -d ' ')
-else
-    data='{"protected":"'"$protected"'",'
-    data=$data'"payload":"'"$payload"'",'
-    data=$data'"signature":"'"$signature"'"}'
-
-    answer=$(curl -s -i -d "$data" "$api/acme/new-acct" \
-        -H "Content-Type: application/jose+json")
-    status=$(echo "$answer" |grep HTTP/1.1 |tail -n1 |cut -f2 -d ' ')
-    kid=$(echo "$answer" |grep Location: |cut -f2 -d ' '|tr -d '\r')
-fi
-
-# Checking http answer status
-if [[ "${status:0:2}" -ne "20" ]] && [[ "$status" -ne "409" ]]; then
-    check_result $E_CONNECT "LetsEncrypt account registration $status"
+# Checking answer status
+status=$(echo "$answer" |grep HTTP/1.1 |tail -n1 |cut -f2 -d ' ')
+if [[ "${status:0:2}" -ne "20" ]]; then
+    check_result $E_CONNECT "Let's Encrypt acc registration failed $status"
 fi
 
 
@@ -157,23 +124,15 @@ fi
 
 # Adding le.conf
 if [ ! -e "$USER_DATA/ssl/le.conf" ]; then
-    echo "EXPONENT='$exponent'" > $USER_DATA/ssl/le.conf
-    echo "MODULUS='$modulus'" >> $USER_DATA/ssl/le.conf
-    echo "THUMB='$thumb'" >> $USER_DATA/ssl/le.conf
-    if [ "$type" -eq 1 ]; then
-        echo "EMAIL='$email'" >> $USER_DATA/ssl/le.conf
-    else
-        echo "KID='$kid'" >> $USER_DATA/ssl/le.conf
-    fi
+    echo "EXPONENT='$EXPONENT'" > $USER_DATA/ssl/le.conf
+    echo "MODULUS='$MODULUS'" >> $USER_DATA/ssl/le.conf
+    echo "THUMB='$THUMB'" >> $USER_DATA/ssl/le.conf
+    echo "EMAIL='$EMAIL'" >> $USER_DATA/ssl/le.conf
+    echo "KID='$kid'" >> $USER_DATA/ssl/le.conf
     chmod 660  $USER_DATA/ssl/le.conf
 else
-    if [ "$type" -eq 1 ]; then
-        sed -i '/^EMAIL=/d' $USER_DATA/ssl/le.conf
-        echo "EMAIL='$email'" >> $USER_DATA/ssl/le.conf
-    else
-        sed -i '/^KID=/d' $USER_DATA/ssl/le.conf
-        echo "KID='$kid'" >> $USER_DATA/ssl/le.conf
-    fi
+    sed -i '/^KID=/d' $USER_DATA/ssl/le.conf
+    echo "KID='$kid'" >> $USER_DATA/ssl/le.conf
 fi
 
 # Logging
diff --git a/bin/v-check-letsencrypt-domain b/bin/v-check-letsencrypt-domain
deleted file mode 100755
index 97e24878..00000000
--- a/bin/v-check-letsencrypt-domain
+++ /dev/null
@@ -1,162 +0,0 @@
-#!/bin/bash
-# info: check letsencrypt domain
-# options: USER DOMAIN
-#
-# The function check and validates domain with LetsEncript
-
-
-#----------------------------------------------------------#
-#                    Variable&Function                     #
-#----------------------------------------------------------#
-
-# Argument definition
-user=$1
-domain=$2
-
-# Includes
-source $VESTA/func/main.sh
-source $VESTA/conf/vesta.conf
-
-# encode base64
-encode_base64() {
-    cat |base64 |tr '+/' '-_' |tr -d '\r\n='
-}
-
-# Additional argument formatting
-format_domain_idn
-
-
-#----------------------------------------------------------#
-#                    Verifications                         #
-#----------------------------------------------------------#
-
-check_args '2' "$#" 'USER DOMAIN'
-is_format_valid 'user' 'domain'
-is_system_enabled "$WEB_SYSTEM" 'WEB_SYSTEM'
-is_object_valid 'user' 'USER' "$user"
-is_object_unsuspended 'user' 'USER' "$user"
-if [ ! -e "$USER_DATA/ssl/le.conf" ]; then
-    check_result $E_NOTEXIST "LetsEncrypt key doesn't exist"
-fi
-rdomain=$(egrep "'$domain'|'$domain,|,$domain,|,$domain'" $USER_DATA/web.conf)
-if [ -z "$rdomain" ]; then
-    check_result $E_NOTEXIST "domain $domain doesn't exist"
-fi
-
-
-#----------------------------------------------------------#
-#                       Action                             #
-#----------------------------------------------------------#
-
-source $USER_DATA/ssl/le.conf
-api='https://acme-v01.api.letsencrypt.org'
-r_domain=$(echo "$rdomain" |cut -f 2 -d \')
-key="$USER_DATA/ssl/user.key"
-exponent="$EXPONENT"
-modulus="$MODULUS"
-thumb="$THUMB"
-
-# Defining JWK header
-header='{"e":"'$exponent'","kty":"RSA","n":"'"$modulus"'"}'
-header='{"alg":"RS256","jwk":'"$header"'}'
-
-# Requesting nonce
-nonce=$(curl -s -I "$api/directory" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
-protected=$(echo -n '{"nonce":"'"$nonce"'"}' |encode_base64)
-
-# Defining ACME query (request challenge)
-query='{"resource":"new-authz","identifier"'
-query=$query':{"type":"dns","value":"'"$domain_idn"'"}}'
-payload=$(echo -n "$query" |encode_base64)
-signature=$(printf "%s" "$protected.$payload" |\
-    openssl dgst -sha256 -binary -sign "$key" |encode_base64)
-data='{"header":'"$header"',"protected":"'"$protected"'",'
-data=$data'"payload":"'"$payload"'","signature":"'"$signature"'"}'
-
-# Sending request to LetsEncrypt API
-answer=$(curl -s -i -d "$data" "$api/acme/new-authz")
-
-# Checking http answer status
-status=$(echo "$answer" |grep HTTP/1.1 |tail -n1 |cut -f2 -d ' ')
-if [[ "$status" -ne "201" ]]; then
-    check_result $E_CONNECT "LetsEncrypt challenge request $status"
-fi
-
-# Parsing domain nonce,token and uri
-nonce=$(echo "$answer" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
-protected=$(echo -n '{"nonce":"'"$nonce"'"}' |encode_base64)
-token=$(echo "$answer" |grep -A 3 http-01 |grep token |cut -f 4 -d \")
-uri=$(echo "$answer" |grep -A 3 http-01 |grep uri |cut -f 4 -d \")
-
-# Adding location wrapper for request challenge
-if [ "$WEB_SYSTEM" = 'nginx' ] || [ "$PROXY_SYSTEM" = 'nginx' ]; then
-    conf="$HOMEDIR/$user/conf/web/nginx.$r_domain.conf_letsencrypt"
-    sconf="$HOMEDIR/$user/conf/web/snginx.$r_domain.conf_letsencrypt"
-    if [ ! -e "$conf" ]; then
-        echo 'location ~ "^/\.well-known/acme-challenge/(.*)$" {' > $conf
-        echo '    default_type text/plain;' >> $conf
-        echo '    return 200 "$1.'$thumb'";' >> $conf
-        echo '}' >> $conf
-    fi
-    if [ ! -e "$sconf" ]; then
-        ln -s "$conf" "$sconf"
-    fi
-else
-    acme="$HOMEDIR/$user/web/$r_domain/public_html/.well-known/acme-challenge"
-    if [ ! -d "$acme" ]; then
-        mkdir -p $acme
-    fi
-    echo "$token.$thumb" > $acme/$token
-    chown -R $user:$user $HOMEDIR/$user/web/$r_domain/public_html/.well-known
-fi
-
-# Restarting web server
-if [ -z "$PROXY_SYSTEM" ]; then
-    $BIN/v-restart-web
-    check_result $? "Proxy restart failed" >/dev/null
-else
-    $BIN/v-restart-proxy
-    $BIN/v-restart-web
-    check_result $? "Web restart failed" >/dev/null
-fi
-
-# Defining ACME query (request validation)
-query='{"resource":"challenge","type":"http-01","keyAuthorization"'
-query=$query':"'$token.$thumb'","token":"'$token'"}'
-payload=$(echo -n "$query" |encode_base64)
-signature=$(printf "%s" "$protected.$payload" |\
-    openssl dgst -sha256 -binary -sign "$key" |encode_base64)
-data='{"header":'"$header"',"protected":"'"$protected"'",'
-data=$data'"payload":"'"$payload"'","signature":"'"$signature"'"}'
-
-# Sending request to LetsEncrypt API
-answer=$(curl -s -i -d "$data" "$uri")
-
-# Checking domain validation status
-i=1
-status=$(echo $answer |tr ',' '\n' |grep status |cut -f 4 -d \")
-location=$(echo "$answer" |grep Location: |awk '{print $2}' |tr -d '\r\n')
-while [ "$status" = 'pending' ]; do
-    answer=$(curl -s -i "$location")
-    detail="$(echo $answer |tr ',' '\n' |grep detail |cut -f 4 -d \")"
-    status=$(echo "$answer" |tr ',' '\n' |grep status |cut -f 4 -d \")
-    sleep 1
-    i=$((i + 1))
-    if [ "$i" -gt 60 ]; then
-        check_result $E_CONNECT "$detail"
-    fi
-done
-if [ "$status" = 'invalid' ]; then
-    detail="$(echo $answer |tr ',' '\n' |grep detail |cut -f 4 -d \")"
-    check_result $E_CONNECT "$detail"
-fi
-
-
-#----------------------------------------------------------#
-#                       Vesta                              #
-#----------------------------------------------------------#
-
-# Logging
-log_event "$OK" "$ARGUMENTS"
-
-exit
diff --git a/bin/v-sign-letsencrypt-csr b/bin/v-sign-letsencrypt-csr
deleted file mode 100755
index 414eb8b3..00000000
--- a/bin/v-sign-letsencrypt-csr
+++ /dev/null
@@ -1,110 +0,0 @@
-#!/bin/bash
-# info: sing letsencrypt csr
-# options: USER DOMAIN CSR_DIR [FORMAT]
-#
-# The function signs certificate request using LetsEncript API
-
-
-#----------------------------------------------------------#
-#                    Variable&Function                     #
-#----------------------------------------------------------#
-
-# Argument definition
-user=$1
-domain=$2
-csr="$3/$domain.csr"
-format=$4
-
-# Includes
-source $VESTA/func/main.sh
-source $VESTA/conf/vesta.conf
-
-# encode base64
-encode_base64() {
-    cat |base64 |tr '+/' '-_' |tr -d '\r\n='
-}
-
-
-#----------------------------------------------------------#
-#                    Verifications                         #
-#----------------------------------------------------------#
-
-check_args '3' "$#" 'USER DOMAIN CSR'
-is_format_valid 'user' 'domain'
-is_system_enabled "$WEB_SYSTEM" 'WEB_SYSTEM'
-is_object_valid 'user' 'USER' "$user"
-is_object_unsuspended 'user' 'USER' "$user"
-if [ ! -e "$USER_DATA/ssl/le.conf" ]; then
-    check_result $E_NOTEXIST "LetsEncrypt key doesn't exist"
-fi
-check_domain=$(grep -w "$domain'" $USER_DATA/web.conf)
-if [ -z "$check_domain" ]; then
-    check_result $E_NOTEXIST "domain $domain doesn't exist"
-fi
-if [ ! -e "$csr" ]; then
-    check_result $E_NOTEXIST "$csr doesn't exist"
-fi
-
-
-#----------------------------------------------------------#
-#                       Action                             #
-#----------------------------------------------------------#
-
-source $USER_DATA/ssl/le.conf
-api='https://acme-v01.api.letsencrypt.org'
-key="$USER_DATA/ssl/user.key"
-exponent="$EXPONENT"
-modulus="$MODULUS"
-thumb="$THUMB"
-
-# Defining JWK header
-header='{"e":"'$exponent'","kty":"RSA","n":"'"$modulus"'"}'
-header='{"alg":"RS256","jwk":'"$header"'}'
-
-# Requesting nonce
-nonce=$(curl -s -I "$api/directory" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
-protected=$(echo -n '{"nonce":"'"$nonce"'"}' |encode_base64)
-
-# Defining ACME query (request challenge)
-csr=$(openssl req -in $csr -outform DER |encode_base64)
-query='{"resource":"new-cert","csr":"'$csr'"}'
-payload=$(echo -n "$query" |encode_base64)
-signature=$(printf "%s" "$protected.$payload" |\
-    openssl dgst -sha256 -binary -sign "$key" |encode_base64)
-data='{"header":'"$header"',"protected":"'"$protected"'",'
-data=$data'"payload":"'"$payload"'","signature":"'"$signature"'"}'
-
-# Sending request to LetsEncrypt API
-answer=$(mktemp)
-curl -s -d "$data" "$api/acme/new-cert" -o $answer
-if [ ! -z "$(grep Error $answer)" ]; then
-    detail="$(cat $answer |tr ',' '\n' |grep detail |cut -f 4 -d \")"
-    detail=$(echo "$detail" |awk -F "::" '{print $2}')
-    rm $answer
-    check_result $E_LIMIT "$detail"
-fi
-
-# Printing certificate
-crt=$(cat "$answer" |openssl base64 -e)
-rm $answer
-if [ "$format" != 'json' ]; then
-    echo "-----BEGIN CERTIFICATE-----"
-    echo "$crt"
-    echo "-----END CERTIFICATE-----"
-else
-    echo -e "{\n\t\"$domain\": {\n\t\t\"CRT\":\""
-    echo -n '-----BEGIN CERTIFICATE-----\n'
-    echo -n "$crt" |sed ':a;N;$!ba;s/\n/\\n/g'
-    echo -n '-----END CERTIFICATE-----'
-    echo -e  "\"\n\t\t}\n\t}"
-fi
-
-
-#----------------------------------------------------------#
-#                       Vesta                              #
-#----------------------------------------------------------#
-
-# Logging
-log_event "$OK" "$ARGUMENTS"
-
-exit
diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 17f8f0f6..a5cbc286 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -22,51 +22,32 @@ source $VESTA/conf/vesta.conf
 #                       Action                             #
 #----------------------------------------------------------#
 
-# Defining user list
-users=$($BIN/v-list-users | tail -n+3 | awk '{ print $1 }')
-
-lecounter=0
-
-# Checking users
-for user in $users; do
+# Checking user certificates
+for user in $($BIN/v-list-users plain |cut -f 1); do
     USER_DATA=$VESTA/data/users/$user
-    # Checking user certificates
+    lecounter=0
+
     for domain in $(search_objects 'web' 'LETSENCRYPT' 'yes' 'DOMAIN'); do
-        # Working on Web domain check - if is suspended
-        webSuspended=$(grep "DOMAIN='$domain'" $USER_DATA/web.conf |grep "SUSPENDED='yes")
-        if [ ! -z "$webSuspended" ]; then
-                continue;
-        fi;
-        crt="$VESTA/data/users/$user/ssl/$domain.crt"
-        crt_data=$(openssl x509 -text -in "$crt")
-        expire=$(echo "$crt_data" |grep "Not After")
-        expire=$(echo "$expire" |cut -f 2,3,4 -d :)
-        expire=$(date -d "$expire" +%s)
+        crt_data=$(openssl x509 -text -in $USER_DATA/ssl/$domain.crt)
+        not_after=$(echo "$crt_data" |grep "Not After" |cut -f 2,3,4 -d :)
+        expiration=$(date -d "$not_after" +%s)
         now=$(date +%s)
-        expire=$((expire - now))
-        expire=$((expire / 86400))
-        domain=$(basename $crt |sed -e "s/.crt$//")
-        if [[ "$expire" -lt 31 ]]; then
-            if [ $lecounter -gt 0 ]; then
-                sleep 10
-            fi
-            ((lecounter++))
+        seconds_valid=$((expiration - now))
+        days_valid=$((seconds_valid / 86400))
+        if [[ "$days_valid" -lt 31 ]]; then
             aliases=$(echo "$crt_data" |grep DNS:)
             aliases=$(echo "$aliases" |sed -e "s/DNS://g" -e "s/,//")
             aliases=$(echo "$aliases" |tr ' ' '\n' |sed "/^$/d")
             aliases=$(echo "$aliases" |grep -v "^$domain$")
-            if [ ! -z "$aliases" ]; then
-                aliases=$(echo "$aliases" |sed -e ':a;N;$!ba;s/\n/,/g')
-                msg=$($BIN/v-add-letsencrypt-domain $user $domain $aliases)
-                if [ $? -ne 0 ]; then
-                    echo "$domain $msg"
-                fi
-            else
-                msg==$($BIN/v-add-letsencrypt-domain $user $domain)
-                if [ $? -ne 0 ]; then
-                    echo "$domain $msg"
-                fi
+            aliases=$(echo "$aliases" |sed -e ':a;N;$!ba;s/\n/,/g')
+            msg=$($BIN/v-add-letsencrypt-domain $user $domain $aliases)
+            if [ $? -ne 0 ]; then
+                echo "$domain $msg"
             fi
+            if [ $lecounter -gt 0 ]; then
+                sleep 10
+            fi
+            ((lecounter++))
         fi
     done
 done

From 8010f5d80261ed4ba9d2f2094229b283d0ab47be Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 27 Dec 2018 20:56:14 +0100
Subject: [PATCH 0302/2300] CentOS7: Register /sbin/nologin and
 /usr/sbin/nologin

Fix for https://github.com/serghey-rodin/vesta/issues/1437
---
 install/vst-install-rhel.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index 385534ec..b7c2839e 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -691,6 +691,10 @@ chmod a+x /backup
 # Set directory color
 echo 'LS_COLORS="$LS_COLORS:di=00;33"' >> /etc/profile
 
+# Register /sbin/nologin and /usr/sbin/nologin
+echo "/sbin/nologin" >> /etc/shells
+echo "/usr/sbin/nologin" >> /etc/shells
+
 # Changing default systemd interval
 if [ "$release" -eq '7' ]; then
     # Hi Lennart

From 0d85c88d181a314b22ec1d0489bdfb3269e53fd6 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 27 Dec 2018 21:10:17 +0100
Subject: [PATCH 0303/2300] Bringing back Better handling of calm-down routine
 while LE renewing

Accidentally overwritten in https://github.com/serghey-rodin/vesta/commit/f8b4d42b740752e17944370440f37d3105f4b21f commit
Original commit: https://github.com/serghey-rodin/vesta/commit/3d8b6a87a77ae8c026e90eb45212349585adc5e3

Calming down is because https://github.com/serghey-rodin/vesta/issues/1193 issue
---
 bin/v-update-letsencrypt-ssl | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index a5cbc286..4dd1fcc0 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -22,10 +22,11 @@ source $VESTA/conf/vesta.conf
 #                       Action                             #
 #----------------------------------------------------------#
 
+lecounter=0
+
 # Checking user certificates
 for user in $($BIN/v-list-users plain |cut -f 1); do
     USER_DATA=$VESTA/data/users/$user
-    lecounter=0
 
     for domain in $(search_objects 'web' 'LETSENCRYPT' 'yes' 'DOMAIN'); do
         crt_data=$(openssl x509 -text -in $USER_DATA/ssl/$domain.crt)
@@ -35,6 +36,10 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
         seconds_valid=$((expiration - now))
         days_valid=$((seconds_valid / 86400))
         if [[ "$days_valid" -lt 31 ]]; then
+            if [ $lecounter -gt 0 ]; then
+                sleep 10
+            fi
+            ((lecounter++))
             aliases=$(echo "$crt_data" |grep DNS:)
             aliases=$(echo "$aliases" |sed -e "s/DNS://g" -e "s/,//")
             aliases=$(echo "$aliases" |tr ' ' '\n' |sed "/^$/d")
@@ -44,10 +49,6 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
             if [ $? -ne 0 ]; then
                 echo "$domain $msg"
             fi
-            if [ $lecounter -gt 0 ]; then
-                sleep 10
-            fi
-            ((lecounter++))
         fi
     done
 done

From 937efa20543dfd0ee4e08f0f4d2278fc21f739c6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 11 Jan 2019 00:00:36 +0100
Subject: [PATCH 0304/2300] nice -n 19 for backups

---
 bin/v-backup-users | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index ed43f8f3..c3ceb7c8 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -30,6 +30,7 @@ mysqlrepair --all-databases --check --auto-repair > /dev/null 2>&1
 if [ -z "$BACKUP_SYSTEM" ]; then
     exit
 fi
+i_am_in_backup_all_users=1
 for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
     if [ ! -f "$VESTA/data/users/$user/user.conf" ]; then
         continue;
@@ -41,7 +42,7 @@ for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
         echo -e "================================" >> $log
         echo -e "$user" >> $log
         echo -e "--------------------------------\n" >> $log
-        $BIN/v-backup-user $user >> $log 2>&1
+        nice -n 19 $BIN/v-backup-user $user >> $log 2>&1
         echo -e "\n--------------------------------\n\n" >> $log
     fi
 done

From 81fba766953c945859deac315bddcc5ff10ffb89 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 11 Jan 2019 00:09:56 +0100
Subject: [PATCH 0305/2300] Mute wait_for_backup

---
 func/main.sh | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/func/main.sh b/func/main.sh
index 6cad5b13..65c62cc5 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -12,6 +12,7 @@ WEBTPL=$VESTA/data/templates/web
 DNSTPL=$VESTA/data/templates/dns
 RRD=$VESTA/web/rrd
 SENDMAIL="$VESTA/web/inc/mail-wrapper.php"
+i_am_in_backup_all_users=0
 
 # Return codes
 OK=0
@@ -944,7 +945,11 @@ wait_for_backup_if_it_is_not_time_for_backup() {
     la=$(cat /proc/loadavg |cut -f 1 -d ' ' |cut -f 1 -d '.')
     # i=0
     while [ "$la" -ge "$BACKUP_LA_LIMIT" ]; do
-        echo -e "$(date "+%F %T") Load Average $la"
+        if [ "$i_am_in_backup_all_users" -eq 0 ]; then
+            echo -e "$(date "+%F %T") Load Average $la"
+        else
+            echo -e "$(date "+%F %T") Load Average $la" >> $log
+        fi
         sleep 60
         # if [ "$i" -ge "15" ]; then
             # la_error="LoadAverage $la is above threshold"
@@ -968,7 +973,11 @@ wait_for_backup_if_it_is_not_time_for_backup() {
             # fi
             WAIT_LOOP_ENTERED=1
             current_date_time="`date "+%Y-%m-%d %H:%M:%S"`";
-            echo "$current_date_time - wait to backup user $user - current hour is $hour";
+            if [ "$i_am_in_backup_all_users" -eq 0 ]; then
+                echo "$current_date_time - wait to backup user $user - current hour is $hour"
+            else
+                echo "$current_date_time - wait to backup user $user - current hour is $hour" >> $log
+            fi
             sleep 300
             hour=$(date +"%H");
         done

From 38f5b16019de37a8bc9826fa4c56d863dce91211 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 11 Jan 2019 00:13:08 +0100
Subject: [PATCH 0306/2300] Log mysqlrepair

---
 bin/v-backup-users | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index c3ceb7c8..41a040cb 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -22,10 +22,12 @@ source $VESTA/conf/vesta.conf
 #                       Action                             #
 #----------------------------------------------------------#
 
+log=$VESTA/log/backup.log
+
 $BIN/v-check-vesta-license >/dev/null
 
 # Auto-repair all databases before backuping all accounts
-mysqlrepair --all-databases --check --auto-repair > /dev/null 2>&1
+mysqlrepair --all-databases --check --auto-repair >> $log 2>&1
 
 if [ -z "$BACKUP_SYSTEM" ]; then
     exit
@@ -37,7 +39,6 @@ for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
     fi
     wait_for_backup_if_it_is_not_time_for_backup
     check_suspend=$(grep "SUSPENDED='no'" $VESTA/data/users/$user/user.conf)
-    log=$VESTA/log/backup.log
     if [ ! -z "$check_suspend" ]; then
         echo -e "================================" >> $log
         echo -e "$user" >> $log

From f8461813d73a7240c9606dbb7bc09bb1f46c1b26 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 11 Jan 2019 00:22:00 +0100
Subject: [PATCH 0307/2300] Don't make backup before 1 AM

---
 func/main.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index 65c62cc5..eb1bcd37 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -966,7 +966,7 @@ wait_for_backup_if_it_is_not_time_for_backup() {
     if pgrep -x "v-backup-users" > /dev/null
     then
         hour=$(date +"%H");
-        while [ "$hour" -gt "6" ]; do
+        while [ "$hour" -gt "6" ] && [ "$hour" -lt "1" ]; do
             # if [ "$WAIT_LOOP_ENTERED" -eq 0 ]; then
                 # do something when enter sleeping state
                 # $BIN/v-restart-web-backend

From a46490af772aa79cb4e5a079970a2446477cf81c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 11 Jan 2019 00:24:50 +0100
Subject: [PATCH 0308/2300] OR instead AND

---
 func/main.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index eb1bcd37..ded0eb4b 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -966,7 +966,7 @@ wait_for_backup_if_it_is_not_time_for_backup() {
     if pgrep -x "v-backup-users" > /dev/null
     then
         hour=$(date +"%H");
-        while [ "$hour" -gt "6" ] && [ "$hour" -lt "1" ]; do
+        while [ "$hour" -gt "6" ] || [ "$hour" -lt "1" ]; do
             # if [ "$WAIT_LOOP_ENTERED" -eq 0 ]; then
                 # do something when enter sleeping state
                 # $BIN/v-restart-web-backend

From 5259f53dd80abc0845e29125c6b150cc32c434c9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 11 Jan 2019 00:30:47 +0100
Subject: [PATCH 0309/2300] Reseting i_am_in_backup_all_user

---
 bin/v-backup-users | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index 41a040cb..bf06e5f8 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -43,7 +43,9 @@ for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
         echo -e "================================" >> $log
         echo -e "$user" >> $log
         echo -e "--------------------------------\n" >> $log
+        i_am_in_backup_all_users=0
         nice -n 19 $BIN/v-backup-user $user >> $log 2>&1
+        i_am_in_backup_all_users=1
         echo -e "\n--------------------------------\n\n" >> $log
     fi
 done

From fcbb523c05bc4512ee0586a77f6e7a1c9949f2a2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 11 Jan 2019 13:59:15 +0100
Subject: [PATCH 0310/2300] Added ionice to backup

---
 bin/v-backup-users | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index bf06e5f8..df9cf6ee 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -27,7 +27,7 @@ log=$VESTA/log/backup.log
 $BIN/v-check-vesta-license >/dev/null
 
 # Auto-repair all databases before backuping all accounts
-mysqlrepair --all-databases --check --auto-repair >> $log 2>&1
+nice -n 19 ionice -c 3 mysqlrepair --all-databases --check --auto-repair >> $log 2>&1
 
 if [ -z "$BACKUP_SYSTEM" ]; then
     exit
@@ -44,7 +44,7 @@ for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
         echo -e "$user" >> $log
         echo -e "--------------------------------\n" >> $log
         i_am_in_backup_all_users=0
-        nice -n 19 $BIN/v-backup-user $user >> $log 2>&1
+        nice -n 19 ionice -c 3 $BIN/v-backup-user $user >> $log 2>&1
         i_am_in_backup_all_users=1
         echo -e "\n--------------------------------\n\n" >> $log
     fi

From 18ec586831c9f06394e4f3184cb44471f2a389b0 Mon Sep 17 00:00:00 2001
From: ifaist0s <ifaist0s@users.noreply.github.com>
Date: Tue, 22 Jan 2019 12:51:59 +0200
Subject: [PATCH 0311/2300] Use of deprecated directive

FIX: [warn] 31172#31172: the "ssl" directive is deprecated, use the "listen ... ssl" directive instead
CAUSE: http://hg.nginx.org/nginx/rev/46c0c7ef4913
---
 install/ubuntu/16.04/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/16.04/templates/web/nginx/caching.stpl b/install/ubuntu/16.04/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/16.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 45a6824990a75d11c8faa578b785b7289cda961a Mon Sep 17 00:00:00 2001
From: ifaist0s <ifaist0s@users.noreply.github.com>
Date: Tue, 22 Jan 2019 12:52:36 +0200
Subject: [PATCH 0312/2300] Use of deprecated directive

FIX: [warn] 31172#31172: the "ssl" directive is deprecated, use the "listen ... ssl" directive instead
CAUSE: http://hg.nginx.org/nginx/rev/46c0c7ef4913
---
 install/ubuntu/16.04/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/16.04/templates/web/nginx/hosting.stpl b/install/ubuntu/16.04/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/16.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From a72ecfbcfb4d4f23040ae0c1e3191357bb1eb08f Mon Sep 17 00:00:00 2001
From: ifaist0s <ifaist0s@users.noreply.github.com>
Date: Tue, 22 Jan 2019 12:58:48 +0200
Subject: [PATCH 0313/2300] Use of deprecated directive

FIX: [warn] 31172#31172: the "ssl" directive is deprecated, use the "listen ... ssl" directive instead
CAUSE: http://hg.nginx.org/nginx/rev/46c0c7ef4913
---
 install/ubuntu/16.04/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/16.04/templates/web/nginx/http2.stpl b/install/ubuntu/16.04/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/ubuntu/16.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 6c072a91c4773203e2d07fd2936dea9f8039b8aa Mon Sep 17 00:00:00 2001
From: ifaist0s <ifaist0s@users.noreply.github.com>
Date: Tue, 22 Jan 2019 12:59:33 +0200
Subject: [PATCH 0314/2300] Use of deprecated directive

FIX: [warn] 31172#31172: the "ssl" directive is deprecated, use the "listen ... ssl" directive instead
CAUSE: http://hg.nginx.org/nginx/rev/46c0c7ef4913
---
 install/ubuntu/16.04/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/16.04/templates/web/nginx/default.stpl b/install/ubuntu/16.04/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/16.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From c1fc0208f79488b2e0f3d1ddca2fd18e52eeaf41 Mon Sep 17 00:00:00 2001
From: Dandi Darmawan <mdandi.darmawan@gmail.com>
Date: Thu, 24 Jan 2019 18:16:01 +0700
Subject: [PATCH 0315/2300] Fixing Typo

check_result $E_CONNECT "Let's Encrypt vvalidation status $status"  > check_result $E_CONNECT "Let's Encrypt validation status $status"
---
 bin/v-add-letsencrypt-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index a6946695..56026b9b 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -190,7 +190,7 @@ for auth in $authz; do
         nonce=$(echo "$answer" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
         status=$(echo "$answer"|grep HTTP/1.1 |tail -n1 |cut -f 2 -d ' ')
         if [[ "$status" -ne 200 ]]; then
-            check_result $E_CONNECT "Let's Encrypt vvalidation status $status"
+            check_result $E_CONNECT "Let's Encrypt validation status $status"
         fi
 
         i=$((i + 1))

From 2d96e3631f9c5e48c8aa297328060942f7707220 Mon Sep 17 00:00:00 2001
From: devius <david.machakhelidze@gmail.com>
Date: Wed, 6 Feb 2019 17:23:58 +0400
Subject: [PATCH 0316/2300] Add missing translations

I have found and translated last missing Georgian versions for strings
---
 web/inc/i18n/ka.php | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/web/inc/i18n/ka.php b/web/inc/i18n/ka.php
index 0ebf2d11..abbcb479 100644
--- a/web/inc/i18n/ka.php
+++ b/web/inc/i18n/ka.php
@@ -744,14 +744,14 @@ $LANG['ka'] = array(
     'PUB_KEY' => 'PUB_KEY',
     'ISSUER' => 'ISSUER',
 
-    'Use server hostname' => 'Use server hostname',
-    'Use domain hostname' => 'Use domain hostname',
-    'Use STARTTLS' => 'Use STARTTLS',
-    'Use SSL / TLS' => 'Use SSL / TLS',
-    'No encryption' => 'No encryption',
-    'Do not use encryption' => 'Do not use encryption',
+    'Use server hostname' => 'სერვერის hostname-ის გამოყენება',
+    'Use domain hostname' => 'დეომენის hostname-ის გამოყენება',
+    'Use STARTTLS' => 'STARTTLS-ის გამოყენება',
+    'Use SSL / TLS' => 'SSL / TLS-ის გამოყენება',
+    'No encryption' => 'დაშიფრვის გარეშე',
+    'Do not use encryption' => 'არ გამოიყენო დაშიფრვა',
 
-    'maximum characters length, including prefix' => 'maximum %s characters length, including prefix',
+    'maximum characters length, including prefix' => 'დასაშვებია მაქსიმუმ %s სიმბოლო, პრეფიქსის ჩათვლით',
 
-    'Email Credentials' => 'Email Credentials',
+    'Email Credentials' => 'რეკვიზიტების ელ-ფოსტით გაგზავნა',
 );

From d334ddc5016d34fabf79c73d59aeb98d2209c81f Mon Sep 17 00:00:00 2001
From: pablobae <33727260+pablobae@users.noreply.github.com>
Date: Thu, 7 Feb 2019 16:49:43 +0100
Subject: [PATCH 0317/2300] Update v-add-firewall-chain

Obtains the SSH port from the service configuration file (originally it was hardcoded). This allow the correct creation of ssh chain when this service has a custom port.
---
 bin/v-add-firewall-chain | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/bin/v-add-firewall-chain b/bin/v-add-firewall-chain
index c7b826fa..5026d264 100755
--- a/bin/v-add-firewall-chain
+++ b/bin/v-add-firewall-chain
@@ -47,7 +47,13 @@ is_system_enabled "$FIREWALL_SYSTEM" 'FIREWALL_SYSTEM'
 
 # Checking known chains
 case $chain in
-    SSH)        port=22; protocol=TCP ;;
+    SSH)        # Get ssh port by reading ssh config file.
+                sshport=$(grep '^Port ' /etc/ssh/sshd_config | head -1 | cut -d ' ' -f 2)
+                if [ -z "$sshport" ]; then
+                    sshport=22
+                fi
+                port=$sshport; 
+                protocol=TCP ;;
     FTP)        port=21; protocol=TCP  ;;
     MAIL)       port='25,465,587,2525,110,995,143,993'; protocol=TCP  ;;
     DNS)        port=53; protocol=UDP  ;;

From 1725a61491fb5e723b215ca0b55d23db8daa6e49 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Juho=20R=C3=A4s=C3=A4nen?= <juho.rasanen@setuppi.fi>
Date: Tue, 12 Feb 2019 22:05:47 +0200
Subject: [PATCH 0318/2300] Finnish translation updated and some changes

New strings translated and some small changes.
---
 web/inc/i18n/fi.php | 302 ++++++++++++++++++++++----------------------
 1 file changed, 151 insertions(+), 151 deletions(-)

diff --git a/web/inc/i18n/fi.php b/web/inc/i18n/fi.php
index aff1375b..f2eddbab 100644
--- a/web/inc/i18n/fi.php
+++ b/web/inc/i18n/fi.php
@@ -2,7 +2,7 @@
 /**
 * Vesta Finnish language file
 * OHakala (onni@koodimonni.fi)
-* RJuho (juho.rasanen@kotikone.fi)
+* RJuho (juho.rasanen@setuppi.fi)
 * theel0ja (theel0ja@theel0ja.info)
 */
 
@@ -40,9 +40,9 @@ $LANG['fi'] = array(
     'MEMORY'  => 'MUISTI',
     'DISK'  => 'LEVY',
     'NETWORK'  => 'VERKKO',
-    'Web Log Manager'  => 'Web Log Manager',
+    'Web Log Manager'  => 'Verkkolokimanageri',
 
-    'no notifications'  => 'no notifications',
+    'no notifications'  => 'ei ilmoituksia',
 
     'Add User' => 'Lisää käyttäjä',
     'Add Domain' => 'Lisää domaini',
@@ -111,7 +111,7 @@ $LANG['fi'] = array(
     'disable autoupdate' => 'älä päivitä automaattisesti',
     'turn on notifications' => 'päälle ilmoitus',
     'turn off notifications' => 'sammuta ilmoitus',
-    'configure' => 'configure',
+    'configure' => 'määritä',
 
     'Adding User' => 'Lisätään käyttäjää',
     'Editing User' => 'Muokataan käyttäjää',
@@ -195,14 +195,14 @@ $LANG['fi'] = array(
     'template' => 'pohjat',
     'SSL Support' => 'SSL-tuki',
     'SSL Home Directory' => 'SSL-kotihakemisto',
-    'Lets Encrypt Support'  => 'Lets Encrypt Support',
+    'Lets Encrypt Support'  => 'Lets Encrypt Tuki',
     'Lets Encrypt'  => 'Lets Encrypt',
-    'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
+    'Your certificate will be automatically issued in 5 minutes' => 'Sertifikaattisi käsitellään viiden minuutin sisään',
     'Proxy Support' => 'Proxy-tuki',
     'Proxy Extensions' => 'Proxy-laajennukset',
     'Web Statistics' => 'Web-tilastot',
     'Additional FTP Account' => 'Ylimääräinen FTP-tili',
-    'Path'  => 'Path',
+    'Path'  => 'Polku',
     'SOA' => 'SOA',
     'TTL' => 'TTL',
     'Expire' => 'Päättyy',
@@ -217,19 +217,19 @@ $LANG['fi'] = array(
     'Autoreply' => 'Automaattinen vastaus',
     'Forward to' => 'Uudelleenohjaa',
     'Do not store forwarded mail' => 'Älä säilytä uudelleenohjattuja viestejä',
-    'IMAP hostname'  => 'IMAP hostname',
-    'IMAP port'  => 'IMAP port',
-    'IMAP security'  => 'IMAP security',
-    'IMAP auth method'  => 'IMAP auth method',
-    'SMTP hostname'  => 'SMTP-hostname',
-    'SMTP port'  => 'SMTP-portti',
-    'SMTP security'  => 'SMTP-turvallisuus',
-    'SMTP auth method'  => 'SMTP auth method',
+    'IMAP hostname'  => 'IMAP osoite',
+    'IMAP port'  => 'IMAP portti',
+    'IMAP security'  => 'IMAP turvallisuus',
+    'IMAP auth method'  => 'IMAP auth-menetelmä',
+    'SMTP hostname'  => 'SMTP osoite',
+    'SMTP port'  => 'SMTP portti',
+    'SMTP security'  => 'SMTP turvallisuus',
+    'SMTP auth method'  => 'SMTP auth-menetelmä',
     'STARTTLS'  => 'STARTTLS',
     'Normal password'  => 'Normaali salasana',
     'database' => 'tietokanta',
     'User' => 'Käyttäjä',
-    'Host' => 'Host',
+    'Host' => 'Isäntä',
     'Charset' => 'Merkistö',
     'Min' => 'Min',
     'Hour' => 'Tunti',
@@ -243,7 +243,7 @@ $LANG['fi'] = array(
     'Domains' => 'Domainit',
     'Status' => 'Tila',
     'shared' => 'jaetut',
-    'dedicated' => 'dedicated',
+    'dedicated' => 'omistautunut',
     'Owner' => 'Omistaja',
     'Users' => 'Käyttäjät',
     'Load Average' => 'Keskimääräinen Käyttöaste',
@@ -268,8 +268,8 @@ $LANG['fi'] = array(
     'database server' => 'tietokantapalvelin',
     'ftp server' => 'ftp-palvelin',
     'job scheduler' => 'ajastettu työ',    //no-idea E: @theel0ja: ajastettu työ would be good.
-    'firewall'  => 'firewall',
-    'brute-force monitor'  => 'brute-force monitor',
+    'firewall'  => 'palomuuri',
+    'brute-force monitor'  => 'raaka voima monitori',
     'CPU' => 'Prosessori',
     'Memory' => 'Muisti',
     'Uptime' => 'Käyttöaika',
@@ -282,7 +282,7 @@ $LANG['fi'] = array(
     'Object' => 'Objekti',
     'Username' => 'Käyttäjä',
     'Password' => 'Salasana',
-    'Email' => 'Email',
+    'Email' => 'Sähköposti',
     'Package' => 'Paketti',
     'Language' => 'Kieli',
     'First Name' => 'Etunimi',
@@ -290,15 +290,15 @@ $LANG['fi'] = array(
     'Send login credentials to email address' => 'Lähetä kirjautumistiedot sähköpostilla.',
     'Default Template' => 'Oletuspohja',
     'Default Name Servers' => 'Oletusnimipalvelimet',
-    'Domain' => 'Domain',
+    'Domain' => 'Domaini',
     'DNS Support' => 'Tarvitsee DNS:n',
     'Mail Support' => 'Tarvitsee sähköpostin',
     'Advanced options' => 'Lisäasetukset',
-    'Basic options'  => 'Basic options',
+    'Basic options'  => 'Perusasetukset',
     'Aliases' => 'Aliakset',
     'SSL Certificate' => 'SSL-sertifikaatti',
     'SSL Key' => 'SSL-avain',
-    'SSL Certificate Authority / Intermediate' => 'SSL Certificate Authority / Intermediate',    //no-idea
+    'SSL Certificate Authority / Intermediate' => 'SSL varmenteen tarjoaja',    //no-idea
     'SSL CSR' => 'SSL CSR',
     'optional' => 'valinnainen',
     'internal' => 'sisäinen',
@@ -311,12 +311,12 @@ $LANG['fi'] = array(
     'YYYY-MM-DD' => 'YYYY-MM-DD',
     'Name servers' => 'Nimipalvelimet',
     'Record' => 'Tietue',
-    'IP or Value' => 'IP or Value',    //no-idea
+    'IP or Value' => 'IP tai Arvo',    //no-idea
     'Priority' => 'Prioriteetti',
     'Record Number' => 'Tietueen numero',
     'in megabytes' => 'megatavuissa',
     'Message' => 'Viesti',
-    'use local-part' => 'use local-part',    //no-idea
+    'use local-part' => 'käytä paikallista osaa',    //no-idea
     'one or more email addresses' => 'yksi tai useampia sähköposteja',
     'Prefix will be automaticaly added to database name and database user' => 'Etuliite %s lisätään automaattisesti tietokannan nimeen ja käyttäjään',
     'Database' => 'Tietokanta',
@@ -324,12 +324,12 @@ $LANG['fi'] = array(
     'Minute' => 'Minuutti',
     'Command' => 'Käsky',
     'Package Name' => 'Paketin nimi',
-    'Netmask' => 'Netmask',    //no-idea
-    'Interface' => 'Interface',    //no-idea
+    'Netmask' => 'Verkkopeite',    //no-idea
+    'Interface' => 'Käyttöliittymä',    //no-idea
     'Shared' => 'Jaettu',
     'Assigned user' => 'Määritetty käyttäjä',
     'Assigned domain' => 'Määritetty domain',
-    'NAT IP association' => 'NAT IP association',    //no-idea
+    'NAT IP association' => 'NAT IP yhteys',    //no-idea
     'shell' => 'shell',
     'web domains' => 'web-domainit',
     'web aliases' => 'web-aliakset',
@@ -351,12 +351,12 @@ $LANG['fi'] = array(
     'username' => 'käyttäjänimi',
     'password' => 'salasana',
     'type' => 'tyyppi',
-    'charset' => 'charset',
+    'charset' => 'merkistö',
     'domain' => 'domain',
     'ip' => 'ip',
     'ip address' => 'ip-osoite',
     'IP address' => 'IP-osoite',
-    'netmask' => 'netmask',
+    'netmask' => 'verkkopeite',
     'interface' => 'yhdyskäytävä',
     'assigned user' => 'omistaja',
     'ns1' => 'ns1',
@@ -385,35 +385,35 @@ $LANG['fi'] = array(
     'Organization' => 'Organisaatio',
     'Action' => 'Toiminta',
     'Protocol' => 'Protokolla',
-    'Port' => 'Port',
+    'Port' => 'Portti',
     'Comment' => 'Kommentti',
     'Banlist' => 'Bannilista',
     'ranges are acceptable' => 'vaihteluvälit ovat hyväksyttäviä',
     'CIDR format is supported' => 'CIDR muotoa tuetaan',
-    'ACCEPT' => 'ACCEPT',
-    'DROP' => 'DROP',
+    'ACCEPT' => 'HYVÄKSY',
+    'DROP' => 'TIPUTA',
     'TCP' => 'TCP',
     'UDP' => 'UDP',
     'ICMP' => 'ICMP',
     'SSH' => 'SSH',
     'FTP' => 'FTP',
     'VESTA' => 'VESTA',
-    'Add one more Name Server' => 'Add one more Name Server',
+    'Add one more Name Server' => 'Lisää vielä yksi nimipalvelin',
 
-    'web domain' => 'web domain',
-    'dns domain' => 'dns domain',
-    'dns record' => 'dns record',
-    'mail domain' => 'mail domain',
-    'mail account' => 'mail account',
-    'cron job' => 'cron job',
+    'web domain' => 'web domaini',
+    'dns domain' => 'dns domaini',
+    'dns record' => 'dns tietue',
+    'mail domain' => 'mail domaini',
+    'mail account' => 'mail tili',
+    'cron job' => 'cron-tehtävä',
 
     'cron' => 'cron',
-    'user dir' => 'user dir',
+    'user dir' => 'käyttäjän hakemisto',
 
-    'unlimited'  => 'unlimited',
+    'unlimited'  => 'rajoittamaton',
     '1 account' => '1 tili',
     '%s accounts' => '%s tiliä',
-    '1 domain' => '1 domain',
+    '1 domain' => '1 domaini',
     '%s domains' => '%s domainia',
     '1 record' => '1 tietue',
     '%s records' => '%s tietuetta',
@@ -423,10 +423,10 @@ $LANG['fi'] = array(
     '%s databases' => '%s tietokantaa',
     '1 cron job' => '1 cron-tehtävä',
     '%s cron jobs' => '%s cron-tehtävää',
-    '1 archive' => '1 archive',
-    '%s archives' => '%s archives',
-    '1 item'  => '1 item',
-    '%s items'  => '%s items',
+    '1 archive' => '1 arkisto',
+    '%s archives' => '%s arkistoa',
+    '1 item'  => '1 kohde',
+    '%s items'  => '%s kohdetta',
     '1 package' => '1 paketti',
     '%s packages' => '%s pakettia',
     '1 IP address' => '1 IP-osoite',
@@ -454,11 +454,11 @@ $LANG['fi'] = array(
     'PACKAGE_CREATED_OK' => 'Paketti <a href="/edit/package/?package=%s"><b>%s</b></a> lisättiin onnistuneesti.',
     'SSL_GENERATED_OK' => 'Sertifikaatti lisättiin onnistuneesti.',
     'RULE_CREATED_OK' => 'Sääntö lisättiin onnistuneesti.',
-    'BANLIST_CREATED_OK' => 'IP address has been banned successfully',
+    'BANLIST_CREATED_OK' => 'IP-osoite on bannattu onnistuneesti',
     'Autoupdate has been successfully enabled' => 'Automaattinen päivitys otettu käyttöön',
     'Autoupdate has been successfully disabled' => 'Automaattinen päivitys poistettu käytöstä',
-    'Cronjob email reporting has been successfully enabled' => 'Cronjob sähköposti raportointi on onnistuneesti mahdollistanut',
-    'Cronjob email reporting has been successfully disabled' => 'Cronjob sähköposti raportointi on onnistuneesti poistettu',
+    'Cronjob email reporting has been successfully enabled' => 'Ajoitettu sähköposti raportointi onnistuneesti aktivoitu',
+    'Cronjob email reporting has been successfully disabled' => 'Ajoitettu sähköposti raportointi onnistuneesti poistettu käytöstä',
     'Changes has been saved.' => 'Muutokset tallennettu.',
     'Confirmation' => 'Hyväksyntä',
     'DELETE_USER_CONFIRMATION' => 'Haluatko varmasti poistaa käyttäjän %s?',
@@ -530,7 +530,7 @@ $LANG['fi'] = array(
     'Confirm Password' => 'Hyväksy salasana',
     'Reset' => 'Nollaa',
     'Reset Code' => 'Nollauskoodi',
-    'RESET_NOTICE' => '',    // should we add something here?
+    'RESET_NOTICE' => '',
     'RESET_CODE_SENT' => 'Salasanan nollauskoodi on lähetetty sähköpostiisi<br>',
     'MAIL_RESET_SUBJECT' => 'Salana vaihdettiin %s',
     'PASSWORD_RESET_REQUEST' => "Nollataksesi hallintapaneelin salasanan, seuraa tätä linkkiä:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\nVaihtoehtoisesti voit mennä https://%s/reset/?action=code&user=%s ja syöttää nollauskoodin:\n%s\n\nJos et varta vasten pyytänyt tätä salasananvaihtoa, mene paniikkiin ja ota yhteyttä ylläpitoon.\n\n--\nVesta-hallintapaneeli\n",
@@ -549,13 +549,13 @@ $LANG['fi'] = array(
     'Dec' => 'Jou',
 
     'Configuring Server' => 'Konfiguroidaan palvelinta',
-    'Hostname' => 'Hostname',
+    'Hostname' => 'Osoite',
     'Time Zone' => 'Aikavyöhyke',
     'Default Language' => 'Oletuskieli',
     'Proxy Server' => 'Välityspalvelin',
     'Web Server' => 'Web Server',
-    'Backend Server' => 'Backend Server',
-    'Backend Pool Mode' => 'Backend Pool Mode',
+    'Backend Server' => 'Taustapalvelin',
+    'Backend Pool Mode' => 'Taustapalvelin Allas Tila',
     'DNS Server' => 'DNS-palvelin',
     'DNS Cluster' => 'DNS-klusteri',
     'MAIL Server' => 'MAIL-palvelin',
@@ -564,39 +564,39 @@ $LANG['fi'] = array(
     'Webmail URL' => 'Webmailin URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
-    'PostgreSQL Support' => 'PostgreSQL Support',
+    'PostgreSQL Support' => 'PostgreSQL Tuki',
     'phpPgAdmin URL' => 'phpPgAdmin URL',
     'Maximum Number Of Databases' => 'Maksimimäärä tietokantoja',
-    'Current Number Of Databases' => 'Current Number Of Databases',
+    'Current Number Of Databases' => 'Nykyisten tietokantojen lukumäärä',
     'Local backup' => 'Paikallinen varmuuskopio',
-    'Compression level' => 'Compression level',
+    'Compression level' => 'Pakkausaste',
     'Directory' => 'Hakemisto',
-    'Remote backup' => 'Remote backup',
+    'Remote backup' => 'Etävarmuuskopiointi',
     'ftp' => 'FTP',
     'sftp' => 'SFTP',
     'SFTP Chroot' => 'SFTP Chroot',
-    'FileSystem Disk Quota' => 'FileSystem Disk Quota',
-    'Vesta Control Panel Plugins' => 'Vesta Control Panel Plugins',
-    'preview' => 'preview',
-    'Reseller Role' => 'Reseller Role',
-    'Web Config Editor' => 'Web Config Editor',
-    'Template Manager' => 'Template Manager',
-    'Backup Migration Manager' => 'Backup Migration Manager',
+    'FileSystem Disk Quota' => 'FileSystem Levykiintiö',
+    'Vesta Control Panel Plugins' => 'Vesta Hallintapaneeli Lisäosat',
+    'preview' => 'esikatselu',
+    'Reseller Role' => 'Jälleenmyyjän Rooli',
+    'Web Config Editor' => 'Web-määrityseditori',
+    'Template Manager' => 'Pohja Hallinta',
+    'Backup Migration Manager' => 'Varmuuskopion Siirtymänhallinta',
     'FileManager' => 'FileManager',
-    'show: CPU / MEM / NET / DISK' => 'show: CPU / MEM / NET / DISK',
+    'show: CPU / MEM / NET / DISK' => 'näytä: CPU / MEM / NET / DISK',
 
-    'sort by' => 'sort by',
+    'sort by' => 'järjestä',
     'Date' => 'Päivämäärä',
-    'Starred' => 'Starred',
+    'Starred' => 'Tähditetty',
     'Name' => 'Nimi',
 
-    'save to favorites' => 'save to favorites',
+    'save to favorites' => 'tallenna suosikkeihin',
 
     'File Manager' => 'Tiedostonhallinta',
     'size' => 'koko',
     'date' => 'päivämäärä',
     'name' => 'nimi',
-    'Initializing' => 'Initializing',
+    'Initializing' => 'Alustetaan',
     'UPLOAD' => 'LÄHETÄ',
     'NEW FILE' => 'UUSI TIEDOSTO',
     'NEW DIR' => 'UUSI HAKEMISTO',
@@ -609,117 +609,117 @@ $LANG['fi'] = array(
     'EXTRACT' => 'PURA',
     'DOWNLOAD' => 'LATAA',
     'Are you sure?' => 'Oletko varma?',    // unused?
-    'Hit' => 'Hit',
-    'to reload the page' => 'to reload the page',
-    'Directory name cannot be empty' => 'Directory name cannot be empty',
-    'File name cannot be empty' => 'File name cannot be empty',
-    'No file selected' => 'No file selected',
-    'No file or folder selected' => 'No file or folder selected',
-    'File type not supported' => 'File type not supported',
-    'Directory download not available in current version' => 'Directory download not available in current version',
-    'Directory not available' => 'Directory not available',
-    'Done' => 'Done',
+    'Hit' => 'Osuma',
+    'to reload the page' => 'ladataksesi sivu uudelleen',
+    'Directory name cannot be empty' => 'Hakemiston nimi ei voi olla tyhjä',
+    'File name cannot be empty' => 'Tiedostonimi ei voi olla tyhjä',
+    'No file selected' => 'Ei tiedostoa valittuna',
+    'No file or folder selected' => 'Ei tiedostoa tai kansiota valittuna',
+    'File type not supported' => 'Tiedostotyyppiä ei tueta',
+    'Directory download not available in current version' => 'Hakemiston lataus ei ole saatavilla nykyisessä versiossa',
+    'Directory not available' => 'Hakemisto ei ole käytettävissä',
+    'Done' => 'Tehty',
     'Close' => 'Sulje',
     'Copy' => 'Kopioi',
     'Cancel' => 'Peru',
     'Rename' => 'Uudelleennimeä',
     'Move' => 'Siirrä',
-    'Change Rights' => 'Change Rights',
+    'Change Rights' => 'Muuta Oikeuksia',
     'Delete' => 'Poista',
     'Extract' => 'Pura',
     'Create' => 'Luo',
     'Compress' => 'Pakkaa',
     'OK' => 'OK',
-    'YOU ARE COPYING' => 'YOU ARE COPYING',    // unused?
-    'YOU ARE REMOVING' => 'YOU ARE REMOVING',
-    'Delete items' => 'Delete items',
+    'YOU ARE COPYING' => 'OLET KOPIOIMASSA',    // unused?
+    'YOU ARE REMOVING' => 'OLET POISTAMASSA',
+    'Delete items' => 'Poista kohteet',
     'Copy files' => 'Kopioi tiedostoja',
     'Move files' => 'Siirrä tiedostoja',
-    'Are you sure you want to copy' => 'Are you sure you want to copy',
-    'Are you sure you want to move' => 'Are you sure you want to move',
-    'Are you sure you want to delete' => 'Are you sure you want to delete',
-    'into' => 'into',
-    'existing files will be replaced' => 'existing files will be replaced',
-    'Original name' => 'Original name',
+    'Are you sure you want to copy' => 'Haluatko varmasti kopioida',
+    'Are you sure you want to move' => 'Haluatko varmasti siirtää',
+    'Are you sure you want to delete' => 'Haluatko varmasti poistaa',
+    'into' => 'osaksi',
+    'existing files will be replaced' => 'olemassa olevat tiedostot korvataan',
+    'Original name' => 'Alkuperäinen nimi',
     'File' => 'Tiedosto',
     'already exists' => 'on jo olemassa',
     'Create file' => 'Luo tiedosto',
     'Create directory' => 'Luo hakemisto',
-    'read by owner' => 'read by owner',
-    'write by owner' => 'write by owner',
-    'execute/search by owner' => 'execute/search by owner',
-    'read by group' => 'read by group',
-    'write by group' => 'write by group',
-    'execute/search by group' => 'execute/search by group',
-    'read by others' => 'read by others',
-    'write by others' => 'write by others',
-    'execute/search by others' => 'execute/search by others',
+    'read by owner' => 'read by owner', // no idea
+    'write by owner' => 'write by owner', // no idea
+    'execute/search by owner' => 'execute/search by owner', // no idea
+    'read by group' => 'read by group',// no idea
+    'write by group' => 'write by group', // no idea
+    'execute/search by group' => 'execute/search by group', // no idea
+    'read by others' => 'read by others', // no idea
+    'write by others' => 'write by others', // no idea
+    'execute/search by others' => 'execute/search by others', // no idea
 
-    'Shortcuts' => 'Shortcuts',
-    'Add New object' => 'Add New object',
-    'Save Form' => 'Save Form',
-    'Cancel saving form' => 'Cancel saving form',
-    'Go to USER list' => 'Go to USER list',
-    'Go to WEB list' => 'Go to WEB list',
-    'Go to DNS list' => 'Go to DNS list',
-    'Go to MAIL list' => 'Go to MAIL list',
-    'Go to DB list' => 'Go to DB list',
-    'Go to CRON list' => 'Go to CRON list',
-    'Go to BACKUP list' => 'Go to BACKUP list',
-    'Focus on search' => 'Focus on search',
-    'Display/Close shortcuts' => 'Display/Close shortcuts',
-    'Move backward through top menu' => 'Move backward through top menu',
-    'Move forward through top menu' => 'Move forward through top menu',
-    'Enter focused element' => 'Enter focused element',
-    'Move up through elements list' => 'Move up through elements list',
-    'Move down through elements list' => 'Move down through elements list',
+    'Shortcuts' => 'Pikavalinnat',
+    'Add New object' => 'Lisää uusi objekti',
+    'Save Form' => 'Tallenna Lomake',
+    'Cancel saving form' => 'Peruuta tallennuslomake',
+    'Go to USER list' => 'Mene USER listaan',
+    'Go to WEB list' => 'Mene WEB listaan',
+    'Go to DNS list' => 'Mene DNS listaan',
+    'Go to MAIL list' => 'Mene MAIL listaan',
+    'Go to DB list' => 'Mene DB listaan',
+    'Go to CRON list' => 'Mene CRON listaan',
+    'Go to BACKUP list' => 'Mene BACKUP listaan',
+    'Focus on search' => 'Keskity hakuun',
+    'Display/Close shortcuts' => 'Näytä/Piilota pikavalinnat',
+    'Move backward through top menu' => 'Siirrä taaksepäin ylävalikosta',
+    'Move forward through top menu' => 'Siirry eteenpäin ylävalikosta',
+    'Enter focused element' => 'Anna valittuun elementtiin',
+    'Move up through elements list' => 'Siirry ylöspäin elementtien listassa',
+    'Move down through elements list' => 'Siirry alaspäin elementtien listassa',
 
     'Upload' => 'Lähetä',
     'New File' => 'Uusi kansio',
     'New Folder' => 'Uusi hakemisto',
     'Download' => 'Lataa',
     'Archive' => 'Arkisto',
-    'Save File (in text editor)' => 'Save File (in text editor)',
-    'Close Popup / Cancel' => 'Close Popup / Cancel',
-    'Move Cursor Up' => 'Move Cursor Up',
-    'Move Cursor Down' => 'Move Cursor Down',
-    'Switch to Left Tab' => 'Switch to Left Tab',
-    'Switch to Right Tab' => 'Switch to Right Tab',
-    'Switch Tab' => 'Switch Tab',
-    'Go to the Top of the File List' => 'Go to the Top of the File List',
-    'Go to the Last File' => 'Go to the Last File',
-    'Open File / Enter Directory' => 'Open File / Enter Directory',
-    'Edit File' => 'Edit File',
-    'Go to Parent Directory' => 'Go to Parent Directory',
-    'Select Current File' => 'Select Current File',
-    'Select Bunch of Files' => 'Select Bunch of Files',
-    'Add File to the Current Selection' => 'Add File to the Current Selection',
+    'Save File (in text editor)' => 'Tallenna tiedosto (tekstieditorissa)',
+    'Close Popup / Cancel' => 'Sulje ponnahdusikkuna / Peruuta',
+    'Move Cursor Up' => 'Siirrä Osoitin Ylös',
+    'Move Cursor Down' => 'Siirrä Osoitin Alas',
+    'Switch to Left Tab' => 'Vaihda Vasempaan Välilehteen',
+    'Switch to Right Tab' => 'Vaihda Oikeaan Välilehteen',
+    'Switch Tab' => 'Vaihda Välilehteä',
+    'Go to the Top of the File List' => 'Siirry Tiedosto Luettelon Yläreunaan',
+    'Go to the Last File' => 'Siirry Viimeiseen Tiedostoon',
+    'Open File / Enter Directory' => 'Avaa Tiedosto / Anna hakemisto',
+    'Edit File' => 'Muokkaa tiedostoa',
+    'Go to Parent Directory' => 'Mene emohakemistoon',
+    'Select Current File' => 'Valitse Nykyinen Tiedosto',
+    'Select Bunch of Files' => 'Valitse Joukko Tiedostoja',
+    'Add File to the Current Selection' => 'Lisää Tiedosto Nykyiseen Valintaan',
     'Select All Files' => 'Valitse kaikki tiedostot',
     'shortcuts are inspired by magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager' =>
-        'shortcuts are inspired by magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager',
+        'pikavalinnat inspiroi upea GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> tiedostonhallinta',
 
     'Licence Key' => 'Lisenssiavain',
-    'Enter License Key' => 'Enter License Key',
+    'Enter License Key' => 'Syötä Lisenssi Avain',
     'Buy Licence' => 'Osta lisenssi',
     'Buy Lifetime License' => 'Osta elinikäinen lisenssi',
-    'Disable and Cancel Licence' => 'Disable and Cancel Licence',
+    'Disable and Cancel Licence' => 'Poista Käytöstä ja Peruuta Lisenssi',
     'Licence Activated' => 'Lisenssi aktivoitu',
     'Licence Deactivated' => 'Lisenssi deaktivoitu',
-    'Restrict users so that they cannot use SSH and access only their home directory.' => 'Restrict users so that they cannot use SSH and access only their home directory.',
-    'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.' => 'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.',
-    'This is a commercial module, you would need to purchace license key to enable it.' => 'This is a commercial module, you would need to purchace license key to enable it.',
+    'Restrict users so that they cannot use SSH and access only their home directory.' => 'Rajoita käyttäjiä siten, että he eivät voi käyttää SSH:ta ja heillä on pääsy vain kotikansioonsa.',
+    'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.' => 'Selaa, kopioi, muokkaa, tarkastele ja hae kaikista web palveluista täysin varustellulla File Managerilla.',
+    'This is a commercial module, you would need to purchace license key to enable it.' => 'Tämä on kaupallinen moduuli, sinun on ostettava lisenssiavain, ottaaksesi se käyttöön.',
 
     'Minutes' => 'Minuutittain',    // fuzzy
     'Hourly' => 'Tunneittain',
     'Run Command' => 'Aja Komento',
     'every month' => 'joka kuukausi',
     'every odd month' => 'joka toinen kuukausi',
-    'every even month' => 'every even month',
+    'every even month' => 'joka parillinen kuukausi',
     'every day' => 'joka päivä',
     'every odd day' => 'joka toinen päivä',
-    'every even day' => 'every even day',
-    'weekdays (5 days)' => 'weekdays (5 days)',
-    'weekend (2 days)' => 'weekend (2 days)',
+    'every even day' => 'joka parillinen päivä',
+    'weekdays (5 days)' => 'arkisin (5 päivää)',
+    'weekend (2 days)' => 'viikonloppu (2 päivää)',
     'Monday' => 'Maanantai',
     'Tuesday' => 'Tiistai',
     'Wednesday' => 'Keskiviikko',
@@ -731,7 +731,7 @@ $LANG['fi'] = array(
     'every two hours' => 'joka toinen tunti',
     'every minute' => 'joka minuutti',
     'every two minutes' => 'joka toinen minuutti',
-    'every' => 'every',
+    'every' => 'joka',
     'Generate' => 'Generoi',
 
     'webalizer' => 'webalizer',
@@ -746,16 +746,16 @@ $LANG['fi'] = array(
     'PUB_KEY' => 'PUB_KEY',
     'ISSUER' => 'ISSUER',
 
-    'Use server hostname' => 'Use server hostname',
-    'Use domain hostname' => 'Use domain hostname',
-    'Use STARTTLS' => 'Use STARTTLS',
-    'Use SSL / TLS' => 'Use SSL / TLS',
-    'No encryption' => 'No encryption',
-    'Do not use encryption' => 'Do not use encryption',
+    'Use server hostname' => 'Käytä palvelimen isäntänimeä',
+    'Use domain hostname' => 'Käytä verkkotunnuksen isäntänimeä',
+    'Use STARTTLS' => 'Käytä STARTTLS',
+    'Use SSL / TLS' => 'Käytä SSL / TLS',
+    'No encryption' => 'Ei salausta',
+    'Do not use encryption' => 'Älä käytä salausta',
 
-    'maximum characters length, including prefix' => 'maximum %s characters length, including prefix',
+    'maximum characters length, including prefix' => 'maksimissaan %s merkkiä pitkä, mukaan lukien etuliite',
 
-    'Email Credentials' => 'Email Credentials',
+    'Email Credentials' => 'Sähköpostitiedot',
 
 // Texts below doesn't exist in en.php
     'traffic' => 'tiedonsiirto',

From bad8ee8042f01d85dad70efd6ab68eac69691aea Mon Sep 17 00:00:00 2001
From: Marcus Viefeld <info@viefeld.net>
Date: Thu, 14 Feb 2019 05:41:16 +0100
Subject: [PATCH 0319/2300] fix german translation, forwarded mail

---
 web/inc/i18n/de.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/i18n/de.php b/web/inc/i18n/de.php
index 43fc857b..e5ee45d0 100644
--- a/web/inc/i18n/de.php
+++ b/web/inc/i18n/de.php
@@ -214,7 +214,7 @@ $LANG['de'] = array(
     'Quota'  => 'Kontingent',
     'Autoreply'  => 'Autoreply',
     'Forward to'  => 'Weiterleiten zu',
-    'Do not store forwarded mail' => 'Weiterleitungs Adresse nicht speichern',
+    'Do not store forwarded mail' => 'Weitergeleitete E-Mails nicht speichern',
     'IMAP hostname'  => 'IMAP hostname',
     'IMAP port'  => 'IMAP port',
     'IMAP security'  => 'IMAP security',

From 0d9218e9fc6e944c9542de081cc1462ca8465f1f Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 14 Feb 2019 13:24:18 +0200
Subject: [PATCH 0320/2300] in case there is no conf

---
 func/domain.sh | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/func/domain.sh b/func/domain.sh
index cc66aecb..84a7c177 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -285,8 +285,10 @@ del_web_config() {
         if [[ "$2" =~ stpl$ ]]; then
             conf="$HOMEDIR/$user/conf/web/s$1.conf"
         fi
-        get_web_config_lines $WEBTPL/$1/$WEB_BACKEND/$2 $conf
-        sed -i "$top_line,$bottom_line d" $conf
+        if [ -e "$conf" ]; then
+            get_web_config_lines $WEBTPL/$1/$WEB_BACKEND/$2 $conf
+            sed -i "$top_line,$bottom_line d" $conf
+        fi
     fi
     # clean-up for both config styles if there is no more domains
     web_domain=$(grep DOMAIN $USER_DATA/web.conf |wc -l)

From 6b2f651418785c94c8fbb6fa6cb78bae048d9025 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 14 Feb 2019 17:47:58 +0200
Subject: [PATCH 0321/2300] protection in case there are two or more ips with
 the same nat association

---
 func/ip.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/ip.sh b/func/ip.sh
index 605554af..c99a3272 100644
--- a/func/ip.sh
+++ b/func/ip.sh
@@ -141,7 +141,7 @@ get_real_ip() {
     else
         nat=$(grep -H "^NAT='$1'" $VESTA/data/ips/*)
         if [ ! -z "$nat" ]; then
-            echo "$nat" |cut -f 1 -d : |cut -f 7 -d /
+            echo "$nat" |cut -f 1 -d : |cut -f 7 -d / |head -n 1
         fi
     fi
 }

From d15e1037041a59b9f2edebf8744f7ee7fc1721cd Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 14 Feb 2019 18:29:56 +0100
Subject: [PATCH 0322/2300] Allow admins to run custom script after SSL is put
 to any domain

Useful if you have separated SSLs for each IP address.

If admin add to vesta.conf this:
UPDATE_SSL_SCRIPT='/usr/local/bin/update_ssl_script.sh'
that script will be called after each domain get new SSL or renew old SSL.

Then admin can write custom script that will, for example, copy new SSL to some file that is needed for dovecot or exim, for example...
Passed parameters are $user and $domain ($1 and $2), so custom script can check what domain got new SSL, and then to run custom task...
---
 bin/v-add-web-domain-ssl | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-add-web-domain-ssl b/bin/v-add-web-domain-ssl
index 55c4ce41..a006d072 100755
--- a/bin/v-add-web-domain-ssl
+++ b/bin/v-add-web-domain-ssl
@@ -127,6 +127,10 @@ if [ ! -z "$UPDATE_HOSTNAME_SSL" ] && [ "$UPDATE_HOSTNAME_SSL" = "yes" ]; then
     fi
 fi
 
+if [ ! -z "$UPDATE_SSL_SCRIPT" ]; then
+    eval "$UPDATE_SSL_SCRIPT $user $domain"
+fi
+
 # Logging
 log_history "enabled ssl support for $domain"
 log_event "$OK" "$ARGUMENTS"

From 82192a001d62b9db9d997390fd3fe362208aa1d7 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 14 Feb 2019 18:56:16 +0100
Subject: [PATCH 0323/2300] Allow admins to run custom script after SSL is put
 to any domain

---
 bin/v-add-web-domain-ssl | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-add-web-domain-ssl b/bin/v-add-web-domain-ssl
index 55c4ce41..a006d072 100755
--- a/bin/v-add-web-domain-ssl
+++ b/bin/v-add-web-domain-ssl
@@ -127,6 +127,10 @@ if [ ! -z "$UPDATE_HOSTNAME_SSL" ] && [ "$UPDATE_HOSTNAME_SSL" = "yes" ]; then
     fi
 fi
 
+if [ ! -z "$UPDATE_SSL_SCRIPT" ]; then
+    eval "$UPDATE_SSL_SCRIPT $user $domain"
+fi
+
 # Logging
 log_history "enabled ssl support for $domain"
 log_event "$OK" "$ARGUMENTS"

From f4749743ce9938fa72a2f97a658f5d5b064e7b1d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 15 Feb 2019 01:49:12 +0100
Subject: [PATCH 0324/2300] Do not backup tmp folder

---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index d6e5c9b8..0d37d098 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -477,7 +477,7 @@ if [ "$USER" != '*' ]; then
     set -f
     i=0
 
-    for udir in $(ls -a |egrep -v "^conf$|^web$|^dns$|^mail$|^\.\.$|^\.$"); do
+    for udir in $(ls -a |egrep -v "^conf$|^web$|^dns$|^tmp$|^mail$|^\.\.$|^\.$"); do
         exclusion=$(echo "$USER" |tr ',' '\n' |grep "^$udir$")
         if [ -z "$exclusion" ]; then
             ((i ++))

From 0c387388cbee0407740924d7f9f64dcb4e0986f5 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 15 Feb 2019 02:15:16 +0100
Subject: [PATCH 0325/2300] v-restore-user create empty tmp/

---
 bin/v-restore-user | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index 55e29e18..d48c01d3 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -755,6 +755,11 @@ if [ "$udir" != 'no' ]; then
     fi
 fi
 
+# Create tmp/
+mkdir -p $HOMEDIR/$user/tmp
+chmod 700 $HOMEDIR/$user/tmp
+chown -R $user:$user $HOMEDIR/$user/tmp
+
 # Sending mail notification
 subj="$user → restore has been completed"
 cat $tmpdir/restore.log |$SENDMAIL -s "$subj" $email $notify

From 561d7e9f0134d1883e6284df2642dcfe4c2adfb3 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 20 Feb 2019 17:59:06 +0200
Subject: [PATCH 0326/2300] force flag isn't required when admin group exists
 since it's there by default

---
 install/vst-install-debian.sh | 4 ++--
 install/vst-install-ubuntu.sh | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 87edd88b..a7ea3da5 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -260,7 +260,7 @@ if [ "x$(id -u)" != 'x0' ]; then
 fi
 
 # Checking admin user account
-if [ ! -z "$(grep ^admin: /etc/passwd /etc/group)" ] && [ -z "$force" ]; then
+if [ ! -z "$(grep ^admin: /etc/passwd)" ] && [ -z "$force" ]; then
     echo 'Please remove admin user account before proceeding.'
     echo 'If you want to do it automatically run installer with -f option:'
     echo -e "Example: bash $0 --force\n"
@@ -1236,7 +1236,7 @@ if [ ! -z "$(grep ^admin: /etc/passwd)" ] && [ "$force" = 'yes' ]; then
     mv -f /home/admin  $vst_backups/home/ >/dev/null 2>&1
     rm -f /tmp/sess_* >/dev/null 2>&1
 fi
-if [ ! -z "$(grep ^admin: /etc/group)" ] && [ "$force" = 'yes' ]; then
+if [ ! -z "$(grep ^admin: /etc/group)" ]; then
     groupdel admin > /dev/null 2>&1
 fi
 
diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index e1ca1044..effa0dcd 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -240,7 +240,7 @@ if [ "x$(id -u)" != 'x0' ]; then
 fi
 
 # Checking admin user account
-if [ ! -z "$(grep ^admin: /etc/passwd /etc/group)" ] && [ -z "$force" ]; then
+if [ ! -z "$(grep ^admin: /etc/passwd)" ] && [ -z "$force" ]; then
     echo 'Please remove admin user account before proceeding.'
     echo 'If you want to do it automatically run installer with -f option:'
     echo -e "Example: bash $0 --force\n"
@@ -1213,7 +1213,7 @@ if [ ! -z "$(grep ^admin: /etc/passwd)" ] && [ "$force" = 'yes' ]; then
     mv -f /home/admin  $vst_backups/home/ >/dev/null 2>&1
     rm -f /tmp/sess_* >/dev/null 2>&1
 fi
-if [ ! -z "$(grep ^admin: /etc/group)" ] && [ "$force" = 'yes' ]; then
+if [ ! -z "$(grep ^admin: /etc/group)" ]; then
     groupdel admin > /dev/null 2>&1
 fi
 

From d05a02e0b64499c1c4d551c298af780b4a0cc1b9 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 21 Feb 2019 14:58:13 +0200
Subject: [PATCH 0327/2300] hotfix for dovecot namespace on ubuntu 18.04

---
 .../ubuntu/18.04/dovecot/conf.d/10-mail.conf  |  5 +++++
 install/ubuntu/18.04/dovecot/dovecot.conf     | 20 -------------------
 install/vst-install-ubuntu.sh                 | 13 +++++++++++-
 3 files changed, 17 insertions(+), 21 deletions(-)

diff --git a/install/ubuntu/18.04/dovecot/conf.d/10-mail.conf b/install/ubuntu/18.04/dovecot/conf.d/10-mail.conf
index 55313419..7a20878a 100644
--- a/install/ubuntu/18.04/dovecot/conf.d/10-mail.conf
+++ b/install/ubuntu/18.04/dovecot/conf.d/10-mail.conf
@@ -2,3 +2,8 @@ mail_privileged_group = mail
 mail_access_groups = mail
 mail_location = maildir:%h/mail/%d/%n
 pop3_uidl_format = %08Xu%08Xv
+namespace inbox {
+  inbox = yes
+}
+first_valid_uid = 1000
+mbox_write_locks = fcntl
diff --git a/install/ubuntu/18.04/dovecot/dovecot.conf b/install/ubuntu/18.04/dovecot/dovecot.conf
index 163460ba..0a855351 100644
--- a/install/ubuntu/18.04/dovecot/dovecot.conf
+++ b/install/ubuntu/18.04/dovecot/dovecot.conf
@@ -2,23 +2,3 @@ protocols = imap pop3
 listen = *, ::
 base_dir = /var/run/dovecot/
 !include conf.d/*.conf
-
-namespace inbox {
-    type = private
-    separator = /
-    prefix =
-    inbox = yes
-
-    mailbox Sent {
-        auto = subscribe
-        special_use = \Sent
-    }
-    mailbox Drafts {
-        auto = subscribe
-        special_use = \Drafts
-    }
-    mailbox Trash {
-        auto = subscribe
-        special_use = \Trash
-    }
-}
diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index effa0dcd..7fe4003e 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -1087,7 +1087,18 @@ fi
 
 if [ "$dovecot" = 'yes' ]; then
     gpasswd -a dovecot mail
-    cp -rf $vestacp/dovecot /etc/
+    if [[ ${release:0:2} -ge 18 ]]; then
+        cp -r /usr/local/vesta/install/debian/9/dovecot /etc/
+        if [ -z "$(grep yes /etc/dovecot/conf.d/10-mail.conf)" ]; then
+            echo "namespace inbox {" >> /etc/dovecot/conf.d/10-mail.conf
+            echo "  inbox = yes" >> /etc/dovecot/conf.d/10-mail.conf
+            echo "}" >> /etc/dovecot/conf.d/10-mail.conf
+            echo "first_valid_uid = 1000" >> /etc/dovecot/conf.d/10-mail.conf
+            echo "mbox_write_locks = fcntl" >> /etc/dovecot/conf.d/10-mail.conf
+        fi
+    else
+        cp -rf $vestacp/dovecot /etc/
+    fi
     cp -f $vestacp/logrotate/dovecot /etc/logrotate.d/
     chown -R root:root /etc/dovecot*
     update-rc.d dovecot defaults

From bf5aa0fd6ed94bc06db8a81964ae62968b7f561f Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sat, 23 Feb 2019 11:30:28 +0200
Subject: [PATCH 0328/2300] auto subscribe mail dirs

---
 .../debian/9/dovecot/conf.d/15-mailboxes.conf | 29 +++++++++++++++++++
 .../rhel/7/dovecot/conf.d/15-mailboxes.conf   | 29 +++++++++++++++++++
 .../18.04/dovecot/conf.d/15-mailboxes.conf    | 29 +++++++++++++++++++
 3 files changed, 87 insertions(+)
 create mode 100644 install/debian/9/dovecot/conf.d/15-mailboxes.conf
 create mode 100644 install/rhel/7/dovecot/conf.d/15-mailboxes.conf
 create mode 100644 install/ubuntu/18.04/dovecot/conf.d/15-mailboxes.conf

diff --git a/install/debian/9/dovecot/conf.d/15-mailboxes.conf b/install/debian/9/dovecot/conf.d/15-mailboxes.conf
new file mode 100644
index 00000000..7b2bab97
--- /dev/null
+++ b/install/debian/9/dovecot/conf.d/15-mailboxes.conf
@@ -0,0 +1,29 @@
+## Mailbox definitions
+##
+
+
+# NOTE: Assumes "namespace inbox" has been defined in 10-mail.conf.
+namespace inbox {
+  mailbox Drafts {
+    special_use = \Drafts
+    auto = subscribe
+  }
+
+  mailbox Junk {
+    special_use = \Junk
+    auto = subscribe
+  }
+
+  mailbox Trash {
+    special_use = \Trash
+    auto = subscribe
+  }
+
+  mailbox Sent {
+    special_use = \Sent
+    auto = subscribe
+  }
+  mailbox "Sent Messages" {
+    special_use = \Sent
+  }
+}
diff --git a/install/rhel/7/dovecot/conf.d/15-mailboxes.conf b/install/rhel/7/dovecot/conf.d/15-mailboxes.conf
new file mode 100644
index 00000000..7b2bab97
--- /dev/null
+++ b/install/rhel/7/dovecot/conf.d/15-mailboxes.conf
@@ -0,0 +1,29 @@
+## Mailbox definitions
+##
+
+
+# NOTE: Assumes "namespace inbox" has been defined in 10-mail.conf.
+namespace inbox {
+  mailbox Drafts {
+    special_use = \Drafts
+    auto = subscribe
+  }
+
+  mailbox Junk {
+    special_use = \Junk
+    auto = subscribe
+  }
+
+  mailbox Trash {
+    special_use = \Trash
+    auto = subscribe
+  }
+
+  mailbox Sent {
+    special_use = \Sent
+    auto = subscribe
+  }
+  mailbox "Sent Messages" {
+    special_use = \Sent
+  }
+}
diff --git a/install/ubuntu/18.04/dovecot/conf.d/15-mailboxes.conf b/install/ubuntu/18.04/dovecot/conf.d/15-mailboxes.conf
new file mode 100644
index 00000000..7b2bab97
--- /dev/null
+++ b/install/ubuntu/18.04/dovecot/conf.d/15-mailboxes.conf
@@ -0,0 +1,29 @@
+## Mailbox definitions
+##
+
+
+# NOTE: Assumes "namespace inbox" has been defined in 10-mail.conf.
+namespace inbox {
+  mailbox Drafts {
+    special_use = \Drafts
+    auto = subscribe
+  }
+
+  mailbox Junk {
+    special_use = \Junk
+    auto = subscribe
+  }
+
+  mailbox Trash {
+    special_use = \Trash
+    auto = subscribe
+  }
+
+  mailbox Sent {
+    special_use = \Sent
+    auto = subscribe
+  }
+  mailbox "Sent Messages" {
+    special_use = \Sent
+  }
+}

From b510f55e8854b28f39febdfa6721e56e51d464bf Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Mon, 25 Feb 2019 16:08:40 +0300
Subject: [PATCH 0329/2300] a new pricing for FileManager & SFTP chroot plugin

a new pricing for FileManager & SFTP chroot plugin
---
 web/templates/admin/edit_server.html | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/web/templates/admin/edit_server.html b/web/templates/admin/edit_server.html
index cde031fc..285a16c3 100644
--- a/web/templates/admin/edit_server.html
+++ b/web/templates/admin/edit_server.html
@@ -790,7 +790,7 @@
                                                                     <a href="https://vestacp.com/checkout/2co.php?product_id=6&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Licence').' 3$/'.__('month').'</a>
                                                                 </li>
                                                                 <li>
-                                                                    <a href="https://vestacp.com/checkout/2co.php?product_id=9&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Lifetime License').' 18$</a>
+                                                                    <a href="https://vestacp.com/checkout/2co.php?product_id=9&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Lifetime License').' 21$</a>
                                                                 </li>
                                                             </ul>
                                                             <span class="twoco">2Checkout.com Inc. (Ohio, USA) is a payment facilitator for goods and services provided by vestacp.com.</span>';
@@ -835,10 +835,10 @@
                                                             </div>
                                                             <ul>
                                                                 <li>
-                                                                    <a href="https://vestacp.com/checkout/2co.php?product_id=7&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Licence').' 5$/'.__('month').'</a>
+                                                                    <a href="https://vestacp.com/checkout/2co.php?product_id=7&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Licence').' 3$/'.__('month').'</a>
                                                                 </li>
                                                                 <li>
-                                                                    <a href="https://vestacp.com/checkout/2co.php?product_id=8&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Lifetime License').' 50$</a>
+                                                                    <a href="https://vestacp.com/checkout/2co.php?product_id=8&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Lifetime License').' 28$</a>
                                                                 </li>
                                                             </ul>
                                                             <span class="twoco">2Checkout.com Inc. (Ohio, USA) is a payment facilitator for goods and services provided by vestacp.com.</span>';

From f4d3f7a85fb56acbe88816b4bbbb93c4c53fe422 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Wed, 27 Feb 2019 14:03:51 +0200
Subject: [PATCH 0330/2300] Full PMA&Roundcube installs + dovecot namespace
 hotfix

---
 install/vst-install-ubuntu.sh | 53 ++++++++++++++++++++++++-----------
 1 file changed, 37 insertions(+), 16 deletions(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 7fe4003e..f66407c3 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -999,10 +999,18 @@ if [ "$mysql" = 'yes' ]; then
         cp -f $vestacp/pma/apache.conf /etc/phpmyadmin/
         ln -s /etc/phpmyadmin/apache.conf /etc/apache2/conf.d/phpmyadmin.conf
     fi
-    cp -f $vestacp/pma/config.inc.php /etc/phpmyadmin/
+    if [[ ${release:0:2} -ge 18 ]]; then
+        mysql < /usr/share/phpmyadmin/sql/create_tables.sql
+        p=$(grep dbpass /etc/phpmyadmin/config-db.php |cut -f 2 -d "'")
+        mysql -e "GRANT ALL ON phpmyadmin.*
+            TO phpmyadmin@localhost IDENTIFIED BY '$p'"
+    else
+        cp -f $vestacp/pma/config.inc.php /etc/phpmyadmin/
+    fi
     chmod 777 /var/lib/phpmyadmin/tmp
 fi
 
+
 #----------------------------------------------------------#
 #                   Configure PostgreSQL                   #
 #----------------------------------------------------------#
@@ -1147,29 +1155,42 @@ if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
         cp -f $vestacp/roundcube/apache.conf /etc/roundcube/
         ln -s /etc/roundcube/apache.conf /etc/apache2/conf.d/roundcube.conf
     fi
-    cp -f $vestacp/roundcube/main.inc.php /etc/roundcube/
-    cp -f  $vestacp/roundcube/db.inc.php /etc/roundcube/
-    chmod 640 /etc/roundcube/debian-db*
-    chown root:www-data /etc/roundcube/debian-db*
-    cp -f $vestacp/roundcube/vesta.php \
-        /usr/share/roundcube/plugins/password/drivers/
-    cp -f $vestacp/roundcube/config.inc.php /etc/roundcube/plugins/password/
-    r="$(gen_pass)"
-    mysql -e "CREATE DATABASE roundcube"
-    mysql -e "GRANT ALL ON roundcube.*
-        TO roundcube@localhost IDENTIFIED BY '$r'"
-    sed -i "s/%password%/$r/g" /etc/roundcube/db.inc.php
-    touch /var/log/roundcube/errors
-    chmod 640 /var/log/roundcube/errors
-    chown www-data:adm /var/log/roundcube/errors
+
+    if [[ ${release:0:2} -ge 18 ]]; then
+        r=$(grep dbpass= /etc/roundcube/debian-db.php |cut -f 2 -d "'")
+        sed -i "s/default_host.*/default_host'] = 'localhost';/" \
+            /etc/roundcube/config.inc.php
+        sed -i "s/^);/'password');/" /etc/roundcube/config.inc.php
+    else
+        r="$(gen_pass)"
+        cp -f $vestacp/roundcube/main.inc.php /etc/roundcube/
+        cp -f  $vestacp/roundcube/db.inc.php /etc/roundcube/
+        sed -i "s/%password%/$r/g" /etc/roundcube/db.inc.php
+    fi
+
     if [ "$release" = '16.04' ]; then
+        # TBD: should be fixed in config repo
         mv /etc/roundcube/db.inc.php /etc/roundcube/debian-db-roundcube.php
         mv /etc/roundcube/main.inc.php /etc/roundcube/config.inc.php
         chmod 640 /etc/roundcube/debian-db-roundcube.php
         chown root:www-data /etc/roundcube/debian-db-roundcube.php
     fi
 
+    cp -f $vestacp/roundcube/vesta.php \
+        /usr/share/roundcube/plugins/password/drivers/
+    cp -f $vestacp/roundcube/config.inc.php /etc/roundcube/plugins/password/
+
+    mysql -e "CREATE DATABASE roundcube"
+    mysql -e "GRANT ALL ON roundcube.*
+        TO roundcube@localhost IDENTIFIED BY '$r'"
     mysql roundcube < /usr/share/dbconfig-common/data/roundcube/install/mysql
+
+    chmod 640 /etc/roundcube/debian-db*
+    chown root:www-data /etc/roundcube/debian-db*
+    touch /var/log/roundcube/errors
+    chmod 640 /var/log/roundcube/errors
+    chown www-data:adm /var/log/roundcube/errors
+
     php5enmod mcrypt 2>/dev/null
     phpenmod mcrypt 2>/dev/null
     if [ "$apache" = 'yes' ]; then

From 372770931cae3eaa3119fe82c476e4c762135d60 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:05:12 +0300
Subject: [PATCH 0331/2300] fix for the use of a deprecated directive in nginx

---
 install/debian/7/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/7/templates/web/nginx/caching.stpl b/install/debian/7/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/debian/7/templates/web/nginx/caching.stpl
+++ b/install/debian/7/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From edb3fcc2df4def7f4123c59c9428020cc515025d Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:06:25 +0300
Subject: [PATCH 0332/2300] fix for the use of a deprecated directive in nginx

---
 install/debian/7/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/7/templates/web/nginx/default.stpl b/install/debian/7/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/debian/7/templates/web/nginx/default.stpl
+++ b/install/debian/7/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 21ce107c681b8ee614d879c0d74715119b7dae50 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:07:07 +0300
Subject: [PATCH 0333/2300] fix for the use of a deprecated directive in nginx

---
 install/debian/7/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/7/templates/web/nginx/hosting.stpl b/install/debian/7/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/debian/7/templates/web/nginx/hosting.stpl
+++ b/install/debian/7/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From b22802478d9a000b9e3a9891eea938e415716d2f Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:07:33 +0300
Subject: [PATCH 0334/2300] fix for the use of a deprecated directive in nginx

---
 install/debian/7/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/7/templates/web/nginx/http2.stpl b/install/debian/7/templates/web/nginx/http2.stpl
index 76dd2f8e..db83fcd7 100644
--- a/install/debian/7/templates/web/nginx/http2.stpl
+++ b/install/debian/7/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/httpd/domains/%domain%.error.log error;

From 7aa71c6ca08af15bbd3b2b1ac2655826db668730 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:10:11 +0300
Subject: [PATCH 0335/2300] fix for the use of a deprecated directive in nginx

---
 install/debian/8/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/8/templates/web/nginx/caching.stpl b/install/debian/8/templates/web/nginx/caching.stpl
index 52641dbe..3c56004d 100755
--- a/install/debian/8/templates/web/nginx/caching.stpl
+++ b/install/debian/8/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 6a5061a7a9a730372b64d6a8a5d6e7faa015b4da Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:11:03 +0300
Subject: [PATCH 0336/2300] fix for the use of a deprecated directive in nginx

---
 install/debian/8/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/8/templates/web/nginx/default.stpl b/install/debian/8/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/debian/8/templates/web/nginx/default.stpl
+++ b/install/debian/8/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 5b4d89b47fd07037163f558bf8594748359ddcd3 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:11:21 +0300
Subject: [PATCH 0337/2300] fix for the use of a deprecated directive in nginx

---
 install/debian/8/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/8/templates/web/nginx/hosting.stpl b/install/debian/8/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/debian/8/templates/web/nginx/hosting.stpl
+++ b/install/debian/8/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 232dbf0d0937164d7b9556b8bfeccd3fc32505ad Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:11:55 +0300
Subject: [PATCH 0338/2300] fix for the use of a deprecated directive in nginx

---
 install/debian/8/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/8/templates/web/nginx/http2.stpl b/install/debian/8/templates/web/nginx/http2.stpl
index 76dd2f8e..db83fcd7 100644
--- a/install/debian/8/templates/web/nginx/http2.stpl
+++ b/install/debian/8/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/httpd/domains/%domain%.error.log error;

From 7a1cdc689ee1b2e4a81c131c121514004b588032 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:13:15 +0300
Subject: [PATCH 0339/2300] fix for the use of a deprecated directive in nginx

---
 install/debian/9/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/9/templates/web/nginx/caching.stpl b/install/debian/9/templates/web/nginx/caching.stpl
index 52641dbe..3c56004d 100755
--- a/install/debian/9/templates/web/nginx/caching.stpl
+++ b/install/debian/9/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 5ea43b6df656b250aa0ec5e6cf48439143c80881 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:39:05 +0300
Subject: [PATCH 0340/2300] fix for the use of a deprecated directive in nginx

---
 install/debian/9/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/9/templates/web/nginx/default.stpl b/install/debian/9/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/debian/9/templates/web/nginx/default.stpl
+++ b/install/debian/9/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 6bb56a874257672f7388a1255071c4242092f2ce Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:39:37 +0300
Subject: [PATCH 0341/2300] fix for the use of a deprecated directive in nginx

---
 install/debian/9/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/9/templates/web/nginx/hosting.stpl b/install/debian/9/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/debian/9/templates/web/nginx/hosting.stpl
+++ b/install/debian/9/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From dc3dec644dc3291880ce31d6ca8c2928125aa8b7 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:40:06 +0300
Subject: [PATCH 0342/2300] fix for the use of a deprecated directive in nginx

---
 install/debian/9/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/9/templates/web/nginx/http2.stpl b/install/debian/9/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/debian/9/templates/web/nginx/http2.stpl
+++ b/install/debian/9/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 4ed0ca484ca1e7e8249ed8360c240814c1462ad4 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:41:35 +0300
Subject: [PATCH 0343/2300] fix for the use of a deprecated directive in nginx

---
 install/rhel/5/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/rhel/5/templates/web/nginx/caching.stpl b/install/rhel/5/templates/web/nginx/caching.stpl
index 67b2f6c2..5e1ac757 100755
--- a/install/rhel/5/templates/web/nginx/caching.stpl
+++ b/install/rhel/5/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 3ed733669e8fd259feea3c4d412de3a0c62eb4df Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:41:55 +0300
Subject: [PATCH 0344/2300] fix for the use of a deprecated directive in nginx

---
 install/rhel/5/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/rhel/5/templates/web/nginx/default.stpl b/install/rhel/5/templates/web/nginx/default.stpl
index 53ad8d1b..22bbd55a 100755
--- a/install/rhel/5/templates/web/nginx/default.stpl
+++ b/install/rhel/5/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/httpd/domains/%domain%.error.log error;

From 01d9626b6cc1d124c3ecc51980fcd24966515344 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:42:38 +0300
Subject: [PATCH 0345/2300] fix for the use of a deprecated directive in nginx

---
 install/rhel/5/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/rhel/5/templates/web/nginx/hosting.stpl b/install/rhel/5/templates/web/nginx/hosting.stpl
index aca458a4..06abc94e 100755
--- a/install/rhel/5/templates/web/nginx/hosting.stpl
+++ b/install/rhel/5/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/httpd/domains/%domain%.error.log error;

From 3188ae9999f5e3a3fc72eea4fe41740c03c11874 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:42:44 +0300
Subject: [PATCH 0346/2300] fix for the use of a deprecated directive in nginx

---
 install/rhel/5/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/rhel/5/templates/web/nginx/http2.stpl b/install/rhel/5/templates/web/nginx/http2.stpl
index 76dd2f8e..db83fcd7 100644
--- a/install/rhel/5/templates/web/nginx/http2.stpl
+++ b/install/rhel/5/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/httpd/domains/%domain%.error.log error;

From 48f61fcc2cea45c3fc18f05415f8d7a2f7136304 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:47:29 +0300
Subject: [PATCH 0347/2300] fix for the use of a deprecated directive in nginx

---
 install/rhel/6/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/rhel/6/templates/web/nginx/caching.stpl b/install/rhel/6/templates/web/nginx/caching.stpl
index 67b2f6c2..5e1ac757 100755
--- a/install/rhel/6/templates/web/nginx/caching.stpl
+++ b/install/rhel/6/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 064a16043dfb47dabd9df7b91abe5bf9af77b841 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:47:31 +0300
Subject: [PATCH 0348/2300] fix for the use of a deprecated directive in nginx

---
 install/rhel/6/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/rhel/6/templates/web/nginx/default.stpl b/install/rhel/6/templates/web/nginx/default.stpl
index 53ad8d1b..22bbd55a 100755
--- a/install/rhel/6/templates/web/nginx/default.stpl
+++ b/install/rhel/6/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/httpd/domains/%domain%.error.log error;

From 0226e7b862c68e87ce8027f038c6b07e8741558f Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:47:33 +0300
Subject: [PATCH 0349/2300] fix for the use of a deprecated directive in nginx

---
 install/rhel/6/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/rhel/6/templates/web/nginx/hosting.stpl b/install/rhel/6/templates/web/nginx/hosting.stpl
index aca458a4..06abc94e 100755
--- a/install/rhel/6/templates/web/nginx/hosting.stpl
+++ b/install/rhel/6/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/httpd/domains/%domain%.error.log error;

From f36148ca017bc1e0768bb2dda733c40c484d5fc3 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:47:36 +0300
Subject: [PATCH 0350/2300] fix for the use of a deprecated directive in nginx

---
 install/rhel/6/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/rhel/6/templates/web/nginx/http2.stpl b/install/rhel/6/templates/web/nginx/http2.stpl
index 40e79aef..7874e9b1 100644
--- a/install/rhel/6/templates/web/nginx/http2.stpl
+++ b/install/rhel/6/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/httpd/domains/%domain%.error.log error;

From 40a8461b28b4e8b030615fcaf3f93f339e62b5a0 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:49:56 +0300
Subject: [PATCH 0351/2300] fix for the use of a deprecated directive in nginx

---
 install/rhel/7/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/rhel/7/templates/web/nginx/caching.stpl b/install/rhel/7/templates/web/nginx/caching.stpl
index 67b2f6c2..5e1ac757 100755
--- a/install/rhel/7/templates/web/nginx/caching.stpl
+++ b/install/rhel/7/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 4f086744be2e012bfe3272977df3b010b281dce8 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:50:00 +0300
Subject: [PATCH 0352/2300] fix for the use of a deprecated directive in nginx

---
 install/rhel/7/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/rhel/7/templates/web/nginx/default.stpl b/install/rhel/7/templates/web/nginx/default.stpl
index 53ad8d1b..22bbd55a 100755
--- a/install/rhel/7/templates/web/nginx/default.stpl
+++ b/install/rhel/7/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/httpd/domains/%domain%.error.log error;

From b289a46cfbe651701c05b04c850564a9475810e6 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:50:05 +0300
Subject: [PATCH 0353/2300] fix for the use of a deprecated directive in nginx

---
 install/rhel/7/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/rhel/7/templates/web/nginx/hosting.stpl b/install/rhel/7/templates/web/nginx/hosting.stpl
index aca458a4..06abc94e 100755
--- a/install/rhel/7/templates/web/nginx/hosting.stpl
+++ b/install/rhel/7/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/httpd/domains/%domain%.error.log error;

From 75283ef755f467d5479ec9559f9855f3005e9784 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 14:50:10 +0300
Subject: [PATCH 0354/2300] fix for the use of a deprecated directive in nginx

---
 install/rhel/7/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/rhel/7/templates/web/nginx/http2.stpl b/install/rhel/7/templates/web/nginx/http2.stpl
index 76dd2f8e..db83fcd7 100644
--- a/install/rhel/7/templates/web/nginx/http2.stpl
+++ b/install/rhel/7/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/httpd/domains/%domain%.error.log error;

From faa9d4aa625fedaab492835746b3a6d20130b173 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:04:45 +0300
Subject: [PATCH 0355/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/12.10/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/12.10/templates/web/nginx/caching.stpl b/install/ubuntu/12.10/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/12.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 37acc7bf319783936553dff7bc09782dc1e6c49e Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:04:49 +0300
Subject: [PATCH 0356/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/12.10/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/12.10/templates/web/nginx/default.stpl b/install/ubuntu/12.10/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/12.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 68230531b3c48a8a33aea387f9830a8b11fc4abd Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:04:53 +0300
Subject: [PATCH 0357/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/12.10/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/12.10/templates/web/nginx/hosting.stpl b/install/ubuntu/12.10/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/12.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From d4497846970bf4734624821eb50b736a511e9ccd Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:04:58 +0300
Subject: [PATCH 0358/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/12.10/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/12.10/templates/web/nginx/http2.stpl b/install/ubuntu/12.10/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/ubuntu/12.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 8ef8d8b722fe4ed3d1bfae9f54c89178656e06a9 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:00 +0300
Subject: [PATCH 0359/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/13.04/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/13.04/templates/web/nginx/caching.stpl b/install/ubuntu/13.04/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/13.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From f64e745e20783538f28cd45ca856bf8f07fe851f Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:02 +0300
Subject: [PATCH 0360/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/13.04/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/13.04/templates/web/nginx/default.stpl b/install/ubuntu/13.04/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/13.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 58ddfd4b4dedf23d4c079f42ac8785fda9972742 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:04 +0300
Subject: [PATCH 0361/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/13.04/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/13.04/templates/web/nginx/hosting.stpl b/install/ubuntu/13.04/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/13.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From dca488c0f7c51caa055e88d70eba7f9462df7d45 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:06 +0300
Subject: [PATCH 0362/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/13.04/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/13.04/templates/web/nginx/http2.stpl b/install/ubuntu/13.04/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/ubuntu/13.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 1806c2a3d6136a1e454d0f6e471a07936c3bf48b Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:09 +0300
Subject: [PATCH 0363/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/13.10/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/13.10/templates/web/nginx/caching.stpl b/install/ubuntu/13.10/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/13.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From ada32d5535ae4ef4ed9037823da198eb0bb770b4 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:11 +0300
Subject: [PATCH 0364/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/13.10/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/13.10/templates/web/nginx/default.stpl b/install/ubuntu/13.10/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/13.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 6c6520a18c12ea101f9ed4ed438a7c57c25104c3 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:16 +0300
Subject: [PATCH 0365/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/13.10/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/13.10/templates/web/nginx/hosting.stpl b/install/ubuntu/13.10/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/13.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From cf2dc9ccbde6fb8fe841970326ba70f11957323a Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:20 +0300
Subject: [PATCH 0366/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/13.10/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/13.10/templates/web/nginx/http2.stpl b/install/ubuntu/13.10/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/ubuntu/13.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From c28167f37a0ca8b12e0df7acf3e19ccf4cbba499 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:24 +0300
Subject: [PATCH 0367/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/14.04/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/14.04/templates/web/nginx/caching.stpl b/install/ubuntu/14.04/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/14.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 1ede3c055c93c7233ffe6293c5a3b162dbe27b27 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:26 +0300
Subject: [PATCH 0368/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/14.04/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/14.04/templates/web/nginx/default.stpl b/install/ubuntu/14.04/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/14.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 8cbba0ed3ec3f78b1cc5c9cf11d344d5a82857a2 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:29 +0300
Subject: [PATCH 0369/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/14.04/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/14.04/templates/web/nginx/hosting.stpl b/install/ubuntu/14.04/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/14.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From bbf745e0496bbb8eb4d4caad1baf34ed030ca6be Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:31 +0300
Subject: [PATCH 0370/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/14.04/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/14.04/templates/web/nginx/http2.stpl b/install/ubuntu/14.04/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/ubuntu/14.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 5230c3d3b0dbd27c6785444f47134f2a9f38a038 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:35 +0300
Subject: [PATCH 0371/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/14.10/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/14.10/templates/web/nginx/caching.stpl b/install/ubuntu/14.10/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/14.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From cd3ccf5370607dc5c1dd4cd23a88250f937d14ef Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:38 +0300
Subject: [PATCH 0372/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/14.10/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/14.10/templates/web/nginx/default.stpl b/install/ubuntu/14.10/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/14.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From a4b8ebcf885333179712c18fc7565e29b7d33fc7 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:41 +0300
Subject: [PATCH 0373/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/14.10/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/14.10/templates/web/nginx/hosting.stpl b/install/ubuntu/14.10/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/14.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 00ab9be534bb67669e2e30e8c21be348b253587a Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:43 +0300
Subject: [PATCH 0374/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/14.10/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/14.10/templates/web/nginx/http2.stpl b/install/ubuntu/14.10/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/ubuntu/14.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 49ab4c345c4564fe79c10e2e3f76ddef8ed9d01d Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:45 +0300
Subject: [PATCH 0375/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/12.04/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/12.04/templates/web/nginx/caching.stpl b/install/ubuntu/12.04/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/12.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 579ed37114cb23b3b83cbe9571acda09813d32ad Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:48 +0300
Subject: [PATCH 0376/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/12.04/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/12.04/templates/web/nginx/default.stpl b/install/ubuntu/12.04/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/12.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From c11a1b165bf578bd68c7198630a7206fce08f028 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:49 +0300
Subject: [PATCH 0377/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/12.04/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/12.04/templates/web/nginx/hosting.stpl b/install/ubuntu/12.04/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/12.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From e39623308ef89e1c1173c33bb13898c94a53269b Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:05:53 +0300
Subject: [PATCH 0378/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/12.04/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/12.04/templates/web/nginx/http2.stpl b/install/ubuntu/12.04/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/ubuntu/12.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 19bd87334bda2bc463f962e79c51b5924bb00950 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:14:51 +0300
Subject: [PATCH 0379/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/15.04/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/15.04/templates/web/nginx/caching.stpl b/install/ubuntu/15.04/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/15.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From b1e826b0a64ebc1980fe315a1b8db92892b12bcc Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:15:03 +0300
Subject: [PATCH 0380/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/15.04/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/15.04/templates/web/nginx/default.stpl b/install/ubuntu/15.04/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/15.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 4a04783d666475b59e973d4499f02565e0eb405b Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:15:20 +0300
Subject: [PATCH 0381/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/15.04/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/15.04/templates/web/nginx/hosting.stpl b/install/ubuntu/15.04/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/15.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From f85989fdbf9ea4902914951c57dfcc4f039ad825 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:18:03 +0300
Subject: [PATCH 0382/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/15.04/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/15.04/templates/web/nginx/http2.stpl b/install/ubuntu/15.04/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/ubuntu/15.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From a90c85e6b5719a5b046ecbc59924cede3180a5f9 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:18:46 +0300
Subject: [PATCH 0383/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/15.10/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/15.10/templates/web/nginx/default.stpl b/install/ubuntu/15.10/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/15.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 470b88c764b5972b9424cac62054d4167ce3b314 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:19:32 +0300
Subject: [PATCH 0384/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/15.10/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/15.10/templates/web/nginx/caching.stpl b/install/ubuntu/15.10/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/15.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From a38770a08108fcc3e609897f5cd4648094b2c46e Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:19:47 +0300
Subject: [PATCH 0385/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/15.10/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/15.10/templates/web/nginx/hosting.stpl b/install/ubuntu/15.10/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/15.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From c1d1f13a0449aacaa91f6c73ae71eb3aa789aacf Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:20:06 +0300
Subject: [PATCH 0386/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/15.10/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/15.10/templates/web/nginx/http2.stpl b/install/ubuntu/15.10/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/ubuntu/15.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From caf0890ca1df0eaab811e1939b2bd3a7fbe8a6a2 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:22:01 +0300
Subject: [PATCH 0387/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/16.10/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/16.10/templates/web/nginx/caching.stpl b/install/ubuntu/16.10/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/16.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From eae7202f528b413b5fc0f0e513b095a43afa35ac Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:22:09 +0300
Subject: [PATCH 0388/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/16.10/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/16.10/templates/web/nginx/default.stpl b/install/ubuntu/16.10/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/16.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 20027824cfcd632439e0087f7dcaac24bcb14ab7 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:22:17 +0300
Subject: [PATCH 0389/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/16.10/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/16.10/templates/web/nginx/hosting.stpl b/install/ubuntu/16.10/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/16.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From d353421ff421becbd2c6bb11c1106a45a5faa230 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:22:28 +0300
Subject: [PATCH 0390/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/16.10/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/16.10/templates/web/nginx/http2.stpl b/install/ubuntu/16.10/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/ubuntu/16.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 4d5ecf05e73e8b2650c59d0dcdd8ea7d40df5014 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:23:46 +0300
Subject: [PATCH 0391/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/17.04/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/17.04/templates/web/nginx/caching.stpl b/install/ubuntu/17.04/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/17.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From b3b1ec3c2e0a10997a1f6e57b8691800a14e447c Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:23:50 +0300
Subject: [PATCH 0392/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/17.04/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/17.04/templates/web/nginx/default.stpl b/install/ubuntu/17.04/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/17.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 3912de3ed0454f3b67a56e60fef76ac87ffd9ad9 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:23:55 +0300
Subject: [PATCH 0393/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/17.04/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/17.04/templates/web/nginx/hosting.stpl b/install/ubuntu/17.04/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/17.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 12fdd9713e2ec43fd9cb049a93bcf9dd03cecec4 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:24:14 +0300
Subject: [PATCH 0394/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/17.04/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/17.04/templates/web/nginx/http2.stpl b/install/ubuntu/17.04/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/ubuntu/17.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From b7a2728ab03cc5d9576ecd21ce74335fde16631e Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:25:40 +0300
Subject: [PATCH 0395/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/17.10/templates/web/nginx/caching.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/17.10/templates/web/nginx/caching.stpl b/install/ubuntu/17.10/templates/web/nginx/caching.stpl
index 5e0e4064..e149b98b 100755
--- a/install/ubuntu/17.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/caching.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 12bc7ab544c0ad4d69947f448203cc0b0f66fdc8 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:25:42 +0300
Subject: [PATCH 0396/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/17.10/templates/web/nginx/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/17.10/templates/web/nginx/default.stpl b/install/ubuntu/17.10/templates/web/nginx/default.stpl
index fa538060..0e669b3d 100755
--- a/install/ubuntu/17.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/default.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 452a7ad62efc881d86d3fec5cc7f9c35c6190c5c Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:25:48 +0300
Subject: [PATCH 0397/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/17.10/templates/web/nginx/hosting.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/17.10/templates/web/nginx/hosting.stpl b/install/ubuntu/17.10/templates/web/nginx/hosting.stpl
index d778d633..1ef8994b 100755
--- a/install/ubuntu/17.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/hosting.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From ae1ec05e6617fe2cabde5a09322de95d4aef20e9 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Thu, 28 Feb 2019 15:25:54 +0300
Subject: [PATCH 0398/2300] fix for the use of a deprecated directive in nginx

---
 install/ubuntu/17.10/templates/web/nginx/http2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/ubuntu/17.10/templates/web/nginx/http2.stpl b/install/ubuntu/17.10/templates/web/nginx/http2.stpl
index 72e72a90..f225becd 100644
--- a/install/ubuntu/17.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/http2.stpl
@@ -1,7 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From a7b54d60002f6ec79f0182bfc39705e5819a866b Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Thu, 28 Feb 2019 23:47:07 +0200
Subject: [PATCH 0399/2300] Function to search avaiable SSL certificates that
 could be used as main cert

---
 bin/v-search-ssl-certificates | 97 +++++++++++++++++++++++++++++++++++
 1 file changed, 97 insertions(+)
 create mode 100755 bin/v-search-ssl-certificates

diff --git a/bin/v-search-ssl-certificates b/bin/v-search-ssl-certificates
new file mode 100755
index 00000000..5a5c74bf
--- /dev/null
+++ b/bin/v-search-ssl-certificates
@@ -0,0 +1,97 @@
+#!/bin/bash
+# info: search ssl certificates
+# options: [FORMAT]
+#
+# The function to obtain the list of available ssl certificates.
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+format=${1-shell}
+
+# Includes
+source $VESTA/func/main.sh
+
+# JSON list function
+json_list() {
+    IFS=$'\n'
+    i=1
+    objects=$(echo "$search_cmd" |wc -l)
+    echo "{"
+    for str in $search_cmd; do
+        eval $str
+        echo -n '    "'$i'": {
+        "USER": "'$USER'",
+        "DOMAIN": "'$DOMAIN'"
+    }'
+        if [ "$i" -lt "$objects" ]; then
+            echo ','
+        else
+            echo
+        fi
+        ((i++))
+    done
+    echo '}'
+}
+
+# SHELL list function
+shell_list() {
+    IFS=$'\n'
+    echo "USER   DOMAIN"
+    echo "----   ------"
+    for str in $search_cmd; do
+        eval $str
+        echo "$USER $DOMAIN"
+    done
+}
+
+# PLAIN list function
+plain_list() {
+    IFS=$'\n'
+    for str in $search_cmd; do
+        eval $str
+        echo -e "$USER\t$DOMAIN"
+    done
+}
+
+# CSV list function
+csv_list() {
+    IFS=$'\n'
+    echo "USER,DOMAIN"
+    for str in $search_cmd; do
+        eval $str
+        echo  "$USER,$DOMAIN"
+    done
+}
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+search_cmd=$(grep "SSL='yes'" $VESTA/data/users/*/web.conf |\
+    cut -f 1 -d ' ' |\
+    sed -e "s|$VESTA/data/users/|USER='|" -e "s|/web.conf:|' |")
+
+# Listing data
+case $format in
+    json)   json_list ;;
+    plain)  plain_list ;;
+    csv)    csv_list ;;
+    shell)  shell_list |column -t ;;
+esac
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+exit

From fde256744d088121c023f3547c0dd49b96a6f13d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 1 Mar 2019 14:30:05 +0100
Subject: [PATCH 0400/2300] nice and ionice for filemanager operation functions

---
 web/file_manager/fm_core.php | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/file_manager/fm_core.php b/web/file_manager/fm_core.php
index 4c552b0c..6adb0f75 100644
--- a/web/file_manager/fm_core.php
+++ b/web/file_manager/fm_core.php
@@ -83,7 +83,7 @@ class FileManager {
         $src = $this->formatFullPath($item);
         $dst = $this->formatFullPath($target_dir);
 
-        exec (VESTA_CMD . "v-copy-fs-file {$this->user} {$src} {$dst}", $output, $return_var);
+        exec (VESTA_CMD . "nice -n 19 ionice -c 3 v-copy-fs-file {$this->user} {$src} {$dst}", $output, $return_var);
 
         $error = self::check_return_code($return_var, $output);
 
@@ -104,7 +104,7 @@ class FileManager {
         $src = $this->formatFullPath($item);
         $dst = $this->formatFullPath($target_dir);
 
-        exec (VESTA_CMD . "v-copy-fs-directory {$this->user} {$src} {$dst}", $output, $return_var);
+        exec (VESTA_CMD . "nice -n 19 ionice -c 3 v-copy-fs-directory {$this->user} {$src} {$dst}", $output, $return_var);
 
         $error = self::check_return_code($return_var, $output);
 
@@ -159,7 +159,7 @@ class FileManager {
 
         $dst_item = $this->formatFullPath($dst_item);
 
-        exec (VESTA_CMD . "v-add-fs-archive {$this->user} {$dst_item} {$items}", $output, $return_var);
+        exec (VESTA_CMD . "nice -n 19 ionice -c 3 v-add-fs-archive {$this->user} {$dst_item} {$items}", $output, $return_var);
 
         $error = self::check_return_code($return_var, $output);
 
@@ -183,7 +183,7 @@ class FileManager {
 
         $dst_item = $this->formatFullPath($dst_item_name);
 
-        exec (VESTA_CMD . "v-copy-fs-file {$this->user} {$src_item} {$dst_item}", $output, $return_var);
+        exec (VESTA_CMD . "nice -n 19 ionice -c 3 v-copy-fs-file {$this->user} {$src_item} {$dst_item}", $output, $return_var);
 
         $error = self::check_return_code($return_var, $output);
 
@@ -219,7 +219,7 @@ class FileManager {
         $item     = $this->formatFullPath($item);
         $dst_item = $this->formatFullPath($target_dir);
 
-        exec (VESTA_CMD . "v-extract-fs-archive {$this->user} {$item} {$dst_item}", $output, $return_var);
+        exec (VESTA_CMD . "nice -n 19 ionice -c 3 v-extract-fs-archive {$this->user} {$item} {$dst_item}", $output, $return_var);
 
         $error = self::check_return_code($return_var, $output);
 

From 9689bc144dcccfa57f7070dccf5149cfcbd9ceab Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 1 Mar 2019 14:34:00 +0100
Subject: [PATCH 0401/2300] Larger LA graph

---
 bin/v-update-sys-rrd-la | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-sys-rrd-la b/bin/v-update-sys-rrd-la
index c6343e3d..c8266626 100755
--- a/bin/v-update-sys-rrd-la
+++ b/bin/v-update-sys-rrd-la
@@ -64,7 +64,7 @@ fi
 # Updating graph
 rrdtool graph $RRD/la/$period-la.png \
     --imgformat PNG \
-    --height="150" \
+    --height="350" \
     --width="670" \
     --start "$start" \
     --end "$end" \

From dbd028adc86074fb26355fcf787d2cdae1e2df2a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 2 Mar 2019 23:16:46 +0100
Subject: [PATCH 0402/2300] Fix for nice and ionice in FileManager

---
 web/file_manager/fm_core.php | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/file_manager/fm_core.php b/web/file_manager/fm_core.php
index 6adb0f75..b176f01d 100644
--- a/web/file_manager/fm_core.php
+++ b/web/file_manager/fm_core.php
@@ -83,7 +83,7 @@ class FileManager {
         $src = $this->formatFullPath($item);
         $dst = $this->formatFullPath($target_dir);
 
-        exec (VESTA_CMD . "nice -n 19 ionice -c 3 v-copy-fs-file {$this->user} {$src} {$dst}", $output, $return_var);
+        exec ("nice -n 19 ionice -c 3 ".VESTA_CMD . "v-copy-fs-file {$this->user} {$src} {$dst}", $output, $return_var);
 
         $error = self::check_return_code($return_var, $output);
 
@@ -104,7 +104,7 @@ class FileManager {
         $src = $this->formatFullPath($item);
         $dst = $this->formatFullPath($target_dir);
 
-        exec (VESTA_CMD . "nice -n 19 ionice -c 3 v-copy-fs-directory {$this->user} {$src} {$dst}", $output, $return_var);
+        exec ("nice -n 19 ionice -c 3 ".VESTA_CMD . "v-copy-fs-directory {$this->user} {$src} {$dst}", $output, $return_var);
 
         $error = self::check_return_code($return_var, $output);
 
@@ -159,7 +159,7 @@ class FileManager {
 
         $dst_item = $this->formatFullPath($dst_item);
 
-        exec (VESTA_CMD . "nice -n 19 ionice -c 3 v-add-fs-archive {$this->user} {$dst_item} {$items}", $output, $return_var);
+        exec ("nice -n 19 ionice -c 3 ".VESTA_CMD . "v-add-fs-archive {$this->user} {$dst_item} {$items}", $output, $return_var);
 
         $error = self::check_return_code($return_var, $output);
 
@@ -183,7 +183,7 @@ class FileManager {
 
         $dst_item = $this->formatFullPath($dst_item_name);
 
-        exec (VESTA_CMD . "nice -n 19 ionice -c 3 v-copy-fs-file {$this->user} {$src_item} {$dst_item}", $output, $return_var);
+        exec ("nice -n 19 ionice -c 3 ".VESTA_CMD . "v-copy-fs-file {$this->user} {$src_item} {$dst_item}", $output, $return_var);
 
         $error = self::check_return_code($return_var, $output);
 
@@ -219,7 +219,7 @@ class FileManager {
         $item     = $this->formatFullPath($item);
         $dst_item = $this->formatFullPath($target_dir);
 
-        exec (VESTA_CMD . "nice -n 19 ionice -c 3 v-extract-fs-archive {$this->user} {$item} {$dst_item}", $output, $return_var);
+        exec ("nice -n 19 ionice -c 3 ".VESTA_CMD . "v-extract-fs-archive {$this->user} {$item} {$dst_item}", $output, $return_var);
 
         $error = self::check_return_code($return_var, $output);
 

From 80730aafa477947b2203671ddc3912723b5d45ee Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 2 Mar 2019 23:21:58 +0100
Subject: [PATCH 0403/2300] unzip in debian installer

---
 install/vst-install-debian.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 87edd88b..b4b6c375 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -29,7 +29,7 @@ if [ "$release" -eq 9 ]; then
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
-        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools"
+        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools unzip"
 elif [ "$release" -eq 8 ]; then
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2
@@ -42,7 +42,7 @@ elif [ "$release" -eq 8 ]; then
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
-        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools"
+        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools unzip"
 else
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2
@@ -55,7 +55,7 @@ else
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect unrar-free
-        vim-common vesta-ioncube vesta-softaculous net-tools"
+        vim-common vesta-ioncube vesta-softaculous net-tools unzip"
 fi
 
 # Defining help function

From eb03d7bab2a27d847cd8b3856f8231c3d7247526 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 2 Mar 2019 23:24:02 +0100
Subject: [PATCH 0404/2300] Added unzip to Debian installer

Needed for FileManager
---
 install/vst-install-debian.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index a7ea3da5..0741a6d6 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -29,7 +29,7 @@ if [ "$release" -eq 9 ]; then
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
-        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools"
+        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools unzip"
 elif [ "$release" -eq 8 ]; then
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2
@@ -42,7 +42,7 @@ elif [ "$release" -eq 8 ]; then
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
-        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools"
+        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools unzip"
 else
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2
@@ -55,7 +55,7 @@ else
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect unrar-free
-        vim-common vesta-ioncube vesta-softaculous net-tools"
+        vim-common vesta-ioncube vesta-softaculous net-tools unzip"
 fi
 
 # Defining help function

From c1b775443dd50b6db1babfa223b22d3b1c29129e Mon Sep 17 00:00:00 2001
From: Serghey Rodin <skid@vestacp.com>
Date: Sun, 3 Mar 2019 23:25:16 +0200
Subject: [PATCH 0405/2300] added scripts to copy web domain ssl to vesta and
 exim

---
 bin/v-copy-sys-mail-ssl  | 89 ++++++++++++++++++++++++++++++++++++
 bin/v-copy-sys-vesta-ssl | 97 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 186 insertions(+)
 create mode 100755 bin/v-copy-sys-mail-ssl
 create mode 100755 bin/v-copy-sys-vesta-ssl

diff --git a/bin/v-copy-sys-mail-ssl b/bin/v-copy-sys-mail-ssl
new file mode 100755
index 00000000..5b52a688
--- /dev/null
+++ b/bin/v-copy-sys-mail-ssl
@@ -0,0 +1,89 @@
+#!/bin/bash
+# info: copy mail ssl certificate
+# options: USER DOMAIN [RESTART]
+#
+# The function copies user domain SSL to mail SSL directory
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+user=$1
+domain=$2
+restart=$3
+
+# Includes
+source $VESTA/func/main.sh
+source $VESTA/func/domain.sh
+source $VESTA/conf/vesta.conf
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '2' "$#" 'USER DOMAIN [RESTART]'
+is_format_valid 'user' 'domain'
+is_system_enabled "$WEB_SYSTEM" 'WEB_SYSTEM'
+is_object_valid 'user' 'USER' "$user"
+is_object_valid 'web' 'DOMAIN' "$domain"
+is_object_value_exist 'web' 'DOMAIN' "$domain" '$SSL'
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# Defining certificate location
+dom_crt="/home/$user/conf/web/ssl.$domain.pem"
+dom_key="/home/$user/conf/web/ssl.$domain.key"
+vst_crt="$VESTA/ssl/mail.crt"
+vst_key="$VESTA/ssl/mail.key"
+
+# Checking certificate
+if [ ! -e "$dom_crt" ] || [ ! -e "$dom_key" ]; then
+    check_result $E_NOTEXIST "$domain certificate doesn't exist"
+fi
+
+# Checking difference
+diff $dom_crt $vst_crt >/dev/null 2>&1
+if [ $? -ne 0 ]; then
+    rm -f $vst_crt.old $vst_key.old
+    mv $vst_crt $vst_crt.old
+    mv $vst_key $vst_key.old
+    cp $dom_crt $vst_crt 2>/dev/null
+    cp $dom_key $vst_key 2>/dev/null
+    chown root:mail $vst_crt $vst_key
+else
+    restart=no
+fi
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Restarting services
+if [ "$restart" != 'no' ]; then
+    if [ ! -z "$MAIL_SYSTEM" ]; then
+        $BIN/v-restart-service $MAIL_SYSTEM
+    fi
+    if [ ! -z "$IMAP_SYSTEM" ]; then
+        $BIN/v-restart-service $IMAP_SYSTEM
+    fi
+fi
+
+# Updating vesta.conf
+if [ -z "$(grep MAIL_CERTIFICATE $VESTA/conf/vesta.conf)" ]; then
+    echo "MAIL_CERTIFICATE='$user:$domain'" >> $VESTA/conf/vesta.conf
+else
+    sed -i "s/MAIL_CERTIFICATE.*/MAIL_CERTIFICATE='$user:$domain'/g" \
+        $VESTA/conf/vesta.conf
+fi
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit
diff --git a/bin/v-copy-sys-vesta-ssl b/bin/v-copy-sys-vesta-ssl
new file mode 100755
index 00000000..94a0cdfc
--- /dev/null
+++ b/bin/v-copy-sys-vesta-ssl
@@ -0,0 +1,97 @@
+#!/bin/bash
+# info: copy vesta ssl certificate
+# options: USER DOMAIN [RESTART]
+#
+# The function copies user domain SSL to vesta SSL directory
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+user=$1
+domain=$2
+restart=$3
+
+# Includes
+source $VESTA/func/main.sh
+source $VESTA/func/domain.sh
+source $VESTA/conf/vesta.conf
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '2' "$#" 'USER DOMAIN [RESTART]'
+is_format_valid 'user' 'domain'
+is_system_enabled "$WEB_SYSTEM" 'WEB_SYSTEM'
+is_object_valid 'user' 'USER' "$user"
+is_object_valid 'web' 'DOMAIN' "$domain"
+is_object_value_exist 'web' 'DOMAIN' "$domain" '$SSL'
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# Defining certificate location
+dom_crt="/home/$user/conf/web/ssl.$domain.pem"
+dom_key="/home/$user/conf/web/ssl.$domain.key"
+vst_crt="$VESTA/ssl/certificate.crt"
+vst_key="$VESTA/ssl/certificate.key"
+
+# Checking certificate
+if [ ! -e "$dom_crt" ] || [ ! -e "$dom_key" ]; then
+    check_result $E_NOTEXIST "$domain certificate doesn't exist"
+fi
+
+# Checking difference
+diff $dom_crt $vst_crt >/dev/null 2>&1
+if [ $? -ne 0 ]; then
+    rm -f $vst_crt.old $vst_key.old
+    mv $vst_crt $vst_crt.old
+    mv $vst_key $vst_key.old
+    cp $dom_crt $vst_crt 2>/dev/null
+    cp $dom_key $vst_key 2>/dev/null
+    chown root:mail $vst_crt $vst_key
+else
+    restart=no
+fi
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Restarting services
+if [ "$restart" != 'no' ]; then
+    if [ ! -z "$MAIL_SYSTEM" ]; then
+        $BIN/v-restart-service $MAIL_SYSTEM
+    fi
+    if [ ! -z "$IMAP_SYSTEM" ]; then
+        $BIN/v-restart-service $IMAP_SYSTEM
+    fi
+    if [ ! -z "$FTP_SYSTEM" ]; then
+        $BIN/v-restart-service "$FTP_SYSTEM"
+    fi
+    if [ -e "/var/run/vesta-nginx.pid" ]; then
+        kill -HUP $(cat /var/run/vesta-nginx.pid)
+    else
+        service vesta restart
+    fi
+fi
+
+# Updating vesta.conf
+if [ -z "$(grep VESTA_CERTIFICATE $VESTA/conf/vesta.conf)" ]; then
+    echo "VESTA_CERTIFICATE='$user:$domain'" >> $VESTA/conf/vesta.conf
+else
+    sed -i "s/VESTA_CERTIFICATE.*/VESTA_CERTIFICATE='$user:$domain'/g" \
+        $VESTA/conf/vesta.conf
+fi
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 2959165e1aecfbc8a10c9fa7a15744c3f2b375f8 Mon Sep 17 00:00:00 2001
From: myrevery <16082142+myrevery@users.noreply.github.com>
Date: Mon, 11 Mar 2019 06:43:33 +0800
Subject: [PATCH 0406/2300] Update cn.php

Refine some details.
---
 web/inc/i18n/cn.php | 46 ++++++++++++++++++++++-----------------------
 1 file changed, 23 insertions(+), 23 deletions(-)

diff --git a/web/inc/i18n/cn.php b/web/inc/i18n/cn.php
index 62147871..ee9c9747 100644
--- a/web/inc/i18n/cn.php
+++ b/web/inc/i18n/cn.php
@@ -10,7 +10,7 @@
  */
 
 $LANG['cn'] = array(
-    'Packages'  => '预设方案',
+    'Packages'  => '用户方案',
     'IP'  => 'IP 地址',
     'Graphs'  => '资源图表',
     'Statistics'  => '统计信息',
@@ -33,7 +33,7 @@ $LANG['cn'] = array(
     'LOGIN'  => '登录',
     'RESET PASSWORD'  => '重置密码',
     'SEARCH'  => '搜索',
-    'PACKAGE'  => '预设方案',
+    'PACKAGE'  => '用户方案',
     'RRD'  => '资源图表',
     'STATS'  => '统计信息',
     'LOG'  => '系统日志',
@@ -102,7 +102,7 @@ $LANG['cn'] = array(
     'open %s'  => '打开 %s',
     'download'  => '下载',
     'restore'  => '恢复',
-    'configure restore settings'  => '配置恢复选项',
+    'configure restore settings'  => '配置恢复',
     'stop'  => '停止',
     'start'  => '启动',
     'restart'  => '重新启动',
@@ -136,7 +136,7 @@ $LANG['cn'] = array(
     'Editing Package'  => '编辑方案',
     'Adding IP address'  => '添加IP地址',
     'Editing IP Address'  => '编辑IP地址',
-    'Editing Backup Exclusions' => '配置排除的备份项目',
+    'Editing Backup Exclusions' => '配置需排除备份的项目',
     'Generating CSR' => '生成CSR',
     'Listing'  => '列出',
     'Search Results'  => '搜索结果',
@@ -195,7 +195,7 @@ $LANG['cn'] = array(
     'IP Addresses' => 'IP地址',
     'Backups' => '备份',
     'Backup System' => '备份系统',
-    'backup exclusions' => '排除的备份项目',
+    'backup exclusions' => '需排除备份的项目',
     'template' => '模板',
     'SSL Support' => '启用SSL',
     'SSL Home Directory' => 'SSL站点主目录',
@@ -211,7 +211,7 @@ $LANG['cn'] = array(
     'TTL' => 'TTL',
     'Expire' => '过期',
     'Records' => '记录',
-    'Serial'  => 'Serial',
+    'Serial'  => '序号',
     'Catchall email' => '未知收件人聚合邮箱',
     'AntiVirus Support' => '防病毒支持',
     'AntiSpam Support' => '防垃圾邮件支持',
@@ -251,19 +251,19 @@ $LANG['cn'] = array(
     'Owner' => '归属',
     'Users'  => '用户',
     'Load Average'  => '平均负载',
-    'Memory Usage'  => '内存用量',
-    'APACHE2 Usage'  => 'Apache2 用量',
-    'HTTPD Usage'  => 'HTTPD 用量',
-    'NGINX Usage'  => 'NGINX 用量',
-    'MySQL Usage on localhost'  => 'MySQL用量 (localhost)',
-    'PostgreSQL Usage on localhost'  => 'PostgreSQL用量 (localhost)',
-    'Bandwidth Usage eth0'  => '网络流量 (eth0)',
-    'Bandwidth Usage eth1'  => '网络流量 (eth1)',
-    'Bandwidth Usage venet0'  => '网络流量 (venet0)',
-    'Bandwidth Usage venet1'  => '网络流量 (venet1)',
-    'Exim Usage'  => 'Exim 用量',
-    'FTP Usage'  => 'FTP 用量',
-    'SSH Usage'  => 'SSH 用量',
+    'Memory Usage'  => '内存使用情况',
+    'APACHE2 Usage'  => 'Apache2 使用情况',
+    'HTTPD Usage'  => 'HTTPD 使用情况',
+    'NGINX Usage'  => 'NGINX 使用情况',
+    'MySQL Usage on localhost'  => 'MySQL 使用情况 (localhost)',
+    'PostgreSQL Usage on localhost'  => 'PostgreSQL 使用情况 (localhost)',
+    'Bandwidth Usage eth0'  => '网络使用情况 (eth0)',
+    'Bandwidth Usage eth1'  => '网络使用情况 (eth1)',
+    'Bandwidth Usage venet0'  => '网络使用情况 (venet0)',
+    'Bandwidth Usage venet1'  => '网络使用情况 (venet1)',
+    'Exim Usage'  => 'Exim 使用情况',
+    'FTP Usage'  => 'FTP 使用情况',
+    'SSH Usage'  => 'SSH 使用情况',
     'reverse proxy'  => '反向代理',
     'web server'  => 'Web服务',
     'backend server' => '后端服务', //New Keyword for PHP-FPM in SERVER page.
@@ -712,7 +712,7 @@ $LANG['cn'] = array(
     'Disable and Cancel Licence' => '停用并取消许可',
     'Licence Activated' => '许可已激活',
     'Licence Deactivated' => '许可已停用',
-    'Restrict users so that they cannot use SSH and access only their home directory.' => '限制用户，使他们通过 SSH 只能访问自己的主目录。',
+    'Restrict users so that they cannot use SSH and access only their home directory.' => '限制用户，对他们禁用 SSH 且只能访问自己的主目录。',
     'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.' => '功能全面的文件管理器，浏览，复制，编辑，查看和检索你的 Web 文件。',
     'This is a commercial module, you would need to purchace license key to enable it.' => '这是商业模块，请购买许可密匙来启用它。',
 
@@ -745,12 +745,12 @@ $LANG['cn'] = array(
     'awstats' => 'AWStats',
 
     'Vesta SSL' => 'Vesta SSL',
-    'SUBJECT' => '颁发给',
+    'SUBJECT' => '使用者',
     'ALIASES' => '可选名称',
-    'NOT_BEFORE' => '有效期从',
+    'NOT_BEFORE' => '有效期自',
     'NOT_AFTER' => '有效期至',
     'SIGNATURE' => '签名算法',
-    'PUB_KEY' => '公钥长度',
+    'PUB_KEY' => '密钥大小',
     'ISSUER' => '颁发者',
 
     'Use server hostname' => '采用服务器主机名',

From 8edf965375c912dd93230ab178dc52f2c653b10c Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Thu, 14 Mar 2019 00:44:06 +0200
Subject: [PATCH 0407/2300] backend: user domain vesta ssl certificate support

---
 ...v-copy-sys-mail-ssl => v-add-sys-mail-ssl} |  23 ++-
 ...copy-sys-vesta-ssl => v-add-sys-vesta-ssl} |   6 +-
 bin/v-add-web-domain-ssl                      |  16 +++
 bin/v-delete-sys-mail-ssl                     |  75 ++++++++++
 bin/v-delete-sys-vesta-ssl                    |  37 +++++
 bin/v-list-sys-config                         |  19 ++-
 bin/v-list-sys-mail-ssl                       | 135 ++++++++++++++++++
 bin/v-search-ssl-certificates                 |  16 +--
 8 files changed, 307 insertions(+), 20 deletions(-)
 rename bin/{v-copy-sys-mail-ssl => v-add-sys-mail-ssl} (77%)
 rename bin/{v-copy-sys-vesta-ssl => v-add-sys-vesta-ssl} (93%)
 create mode 100755 bin/v-delete-sys-mail-ssl
 create mode 100755 bin/v-delete-sys-vesta-ssl
 create mode 100755 bin/v-list-sys-mail-ssl

diff --git a/bin/v-copy-sys-mail-ssl b/bin/v-add-sys-mail-ssl
similarity index 77%
rename from bin/v-copy-sys-mail-ssl
rename to bin/v-add-sys-mail-ssl
index 5b52a688..1ebffdc3 100755
--- a/bin/v-copy-sys-mail-ssl
+++ b/bin/v-add-sys-mail-ssl
@@ -26,7 +26,7 @@ source $VESTA/conf/vesta.conf
 
 check_args '2' "$#" 'USER DOMAIN [RESTART]'
 is_format_valid 'user' 'domain'
-is_system_enabled "$WEB_SYSTEM" 'WEB_SYSTEM'
+is_system_enabled "$MAIL_SYSTEM" 'MAIL_SYSTEM'
 is_object_valid 'user' 'USER' "$user"
 is_object_valid 'web' 'DOMAIN' "$domain"
 is_object_value_exist 'web' 'DOMAIN' "$domain" '$SSL'
@@ -51,8 +51,8 @@ fi
 diff $dom_crt $vst_crt >/dev/null 2>&1
 if [ $? -ne 0 ]; then
     rm -f $vst_crt.old $vst_key.old
-    mv $vst_crt $vst_crt.old
-    mv $vst_key $vst_key.old
+    mv $vst_crt $vst_crt.old >/dev/null 2>&1
+    mv $vst_key $vst_key.old >/dev/null 2>&1
     cp $dom_crt $vst_crt 2>/dev/null
     cp $dom_key $vst_key 2>/dev/null
     chown root:mail $vst_crt $vst_key
@@ -60,6 +60,23 @@ else
     restart=no
 fi
 
+# Updating mail certificate
+case $MAIL_SYSTEM in
+    exim)           conf='/etc/exim/exim.conf';;
+    exim4)          conf='/etc/exim4/exim4.conf.template';;
+esac
+if [ -e "$conf" ]; then
+    sed -e "s|^tls_certificate.*|tls_certificate = $vst_crt|" \
+        -e "s|^tls_privatekey.*|tls_privatekey = $vst_key|" -i $conf
+fi
+
+# Updating imap certificate
+conf="/etc/dovecot/conf.d/10-ssl.conf"
+if [ ! -z "$IMAP_SYSTEM" ] && [ -e "$conf" ]; then
+    sed -e "s|ssl_cert.*|ssl_cert = <$vst_crt|" \
+        -e "s|ssl_key.*|ssl_key = <$vst_key|" -i $conf
+fi
+
 
 #----------------------------------------------------------#
 #                       Vesta                              #
diff --git a/bin/v-copy-sys-vesta-ssl b/bin/v-add-sys-vesta-ssl
similarity index 93%
rename from bin/v-copy-sys-vesta-ssl
rename to bin/v-add-sys-vesta-ssl
index 94a0cdfc..32cd6c14 100755
--- a/bin/v-copy-sys-vesta-ssl
+++ b/bin/v-add-sys-vesta-ssl
@@ -1,5 +1,5 @@
 #!/bin/bash
-# info: copy vesta ssl certificate
+# info: add vesta ssl certificate
 # options: USER DOMAIN [RESTART]
 #
 # The function copies user domain SSL to vesta SSL directory
@@ -67,10 +67,10 @@ fi
 
 # Restarting services
 if [ "$restart" != 'no' ]; then
-    if [ ! -z "$MAIL_SYSTEM" ]; then
+    if [ ! -z "$MAIL_SYSTEM" ] && [ -z "$MAIL_CERTIFICATE" ]; then
         $BIN/v-restart-service $MAIL_SYSTEM
     fi
-    if [ ! -z "$IMAP_SYSTEM" ]; then
+    if [ ! -z "$IMAP_SYSTEM" ] && [ -z "$MAIL_CERTIFICATE" ]; then
         $BIN/v-restart-service $IMAP_SYSTEM
     fi
     if [ ! -z "$FTP_SYSTEM" ]; then
diff --git a/bin/v-add-web-domain-ssl b/bin/v-add-web-domain-ssl
index a006d072..d7a209f1 100755
--- a/bin/v-add-web-domain-ssl
+++ b/bin/v-add-web-domain-ssl
@@ -120,6 +120,22 @@ check_result $? "Web restart failed" >/dev/null
 $BIN/v-restart-proxy $restart
 check_result $? "Proxy restart failed" >/dev/null
 
+# Updating system ssl dependencies
+if [ -z "$VESTA_CERTIFICATE" ]; then
+    crt_user=$(echo "$VESTA_CERTIFICATE" |cut -f 1 -d :)
+    crt_domain=$(echo "$VESTA_CERTIFICATE" |cut -f 2 -d :)
+    if [ "$user" = "$crt_user" ] && [ "$domain" = "$crt_domain" ]; then
+        $BIN/v-add-sys-vesta-ssl $user $domain >/dev/null 2>&1
+    fi
+fi
+if [ -z "$MAIL_CERTIFICATE" ]; then
+    crt_user=$(echo "$MAIL_CERTIFICATE" |cut -f 1 -d :)
+    crt_domain=$(echo "$MAIL_CERTIFICATE" |cut -f 2 -d :)
+    if [ "$user" = "$crt_user" ] && [ "$domain" = "$crt_domain" ]; then
+        $BIN/v-add-sys-mail-ssl $user $domain >/dev/null 2>&1
+    fi
+fi
+
 if [ ! -z "$UPDATE_HOSTNAME_SSL" ] && [ "$UPDATE_HOSTNAME_SSL" = "yes" ]; then
     hostname=$(hostname)
     if [ "$hostname" = "$domain" ]; then
diff --git a/bin/v-delete-sys-mail-ssl b/bin/v-delete-sys-mail-ssl
new file mode 100755
index 00000000..06dab82b
--- /dev/null
+++ b/bin/v-delete-sys-mail-ssl
@@ -0,0 +1,75 @@
+#!/bin/bash
+# info: delete sys vesta user ssl certificate
+# options: NONE
+#
+# The script disables user domain ssl synchronization
+
+
+#----------------------------------------------------------#
+#                  Variable & Function                     #
+#----------------------------------------------------------#
+
+# Includes
+source $VESTA/func/main.sh
+source $VESTA/conf/vesta.conf
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+vst_crt="$VESTA/ssl/certificate.crt"
+vst_key="$VESTA/ssl/certificate.key"
+
+# Updating mail certificate
+case $MAIL_SYSTEM in
+    exim)           conf='/etc/exim/exim.conf';;
+    exim4)          conf='/etc/exim4/exim4.conf.template';;
+esac
+if [ -e "$conf" ]; then
+    sed -e "s|^tls_certificate.*|tls_certificate = $vst_crt|" \
+        -e "s|^tls_privatekey.*|tls_privatekey = $vst_key|" -i $conf
+fi
+
+# Updating imap certificate
+conf="/etc/dovecot/conf.d/10-ssl.conf"
+if [ ! -z "$IMAP_SYSTEM" ] && [ -e "$conf" ]; then
+    sed -e "s|ssl_cert.*|ssl_cert = <$vst_crt|" \
+        -e "s|ssl_key.*|ssl_key = <$vst_key|" -i $conf
+fi
+
+# Moving old certificates
+if [ -e "$VESTA/ssl/mail.crt" ]; then
+    mv -f $VESTA/ssl/mail.crt $VESTA/ssl/mail.crt.old
+fi
+if [ -e "VESTA/ssl/mail.key" ]; then
+    mv $VESTA/ssl/mail.key VESTA/ssl/mail.key.old
+fi
+
+# Updating vesta.conf value
+sed -i "/MAIL_CERTIFICATE=/ d" $VESTA/conf/vesta.conf
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Restarting services
+if [ "$restart" != 'no' ]; then
+    if [ ! -z "$MAIL_SYSTEM" ]; then
+        $BIN/v-restart-service $MAIL_SYSTEM
+    fi
+    if [ ! -z "$IMAP_SYSTEM" ]; then
+        $BIN/v-restart-service $IMAP_SYSTEM
+    fi
+fi
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit
diff --git a/bin/v-delete-sys-vesta-ssl b/bin/v-delete-sys-vesta-ssl
new file mode 100755
index 00000000..e90f32b9
--- /dev/null
+++ b/bin/v-delete-sys-vesta-ssl
@@ -0,0 +1,37 @@
+#!/bin/bash
+# info: delete sys vesta user ssl certificate
+# options: NONE
+#
+# The script disables user domain ssl synchronization
+
+
+#----------------------------------------------------------#
+#                  Variable & Function                     #
+#----------------------------------------------------------#
+
+# Includes
+source $VESTA/func/main.sh
+source $VESTA/conf/vesta.conf
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# Updating vesta.conf value
+sed -i "/VESTA_CERTIFICATE=/ d" $VESTA/conf/vesta.conf
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit
diff --git a/bin/v-list-sys-config b/bin/v-list-sys-config
index 879c3ab3..7764af29 100755
--- a/bin/v-list-sys-config
+++ b/bin/v-list-sys-config
@@ -51,7 +51,9 @@ json_list() {
         "MAIL_URL": "'$MAIL_URL'",
         "DB_PMA_URL": "'$DB_PMA_URL'",
         "DB_PGA_URL": "'$DB_PGA_URL'",
-        "SOFTACULOUS": "'$SOFTACULOUS'"
+        "SOFTACULOUS": "'$SOFTACULOUS'",
+        "MAIL_CERTIFICATE": "'$MAIL_CERTIFICATE'",
+        "VESTA_CERTIFICATE": "'$VESTA_CERTIFICATE'"
     }
 }'
 }
@@ -138,6 +140,12 @@ shell_list() {
     if [ ! -z "$LANGUAGE" ] && [ "$LANGUAGE" != 'en' ]; then
         echo "Language:       $LANGUAGE"
     fi
+    if [ ! -z "$MAIL_CERTIFICATE" ]; then
+        echo "Mail SSL:       $MAIL_CERTIFICATE"
+    fi
+    if [ ! -z "$VESTA_CERTIFICATE" ]; then
+        echo "Vesta SSL:      $VESTA_CERTIFICATE"
+    fi
     echo "Version:        $VERSION"
 }
 
@@ -151,7 +159,8 @@ plain_list() {
     echo -ne "$CRON_SYSTEM\t$DISK_QUOTA\t$FIREWALL_SYSTEM\t"
     echo -ne "$FIREWALL_EXTENSION\t$FILEMANAGER_KEY\t$SFTPJAIL_KEY\t"
     echo -ne "$REPOSITORY\t$VERSION\t$LANGUAGE\t$BACKUP_GZIP\t$BACKUP\t"
-    echo -e "$MAIL_URL\t$DB_PMA_URL\t$DB_PGA_URL"
+    echo -ne "$MAIL_URL\t$DB_PMA_URL\t$DB_PGA_URL\t$MAIL_CERTIFICATE\t"
+    echo -e  "$VESTA_CERTIFICATE"
 }
 
 
@@ -165,7 +174,8 @@ csv_list() {
     echo -n "'CRON_SYSTEM','DISK_QUOTA','FIREWALL_SYSTEM',"
     echo -n "'FIREWALL_EXTENSION','FILEMANAGER_KEY','SFTPJAIL_KEY',"
     echo -n "'REPOSITORY','VERSION','LANGUAGE','BACKUP_GZIP','BACKUP',"
-    echo -n "'MAIL_URL','DB_PMA_URL','DB_PGA_URL'"
+    echo -n "'MAIL_URL','DB_PMA_URL','DB_PGA_URL', 'SOFTACULOUS',"
+    echo -n "'MAIL_CERTIFICATE','VESTA_CERTIFICATE'"
     echo
     echo -n "'$WEB_SYSTEM','$WEB_RGROUPS','$WEB_PORT','$WEB_SSL',"
     echo -n "'$WEB_SSL_PORT','$WEB_BACKEND','$PROXY_SYSTEM','$PROXY_PORT',"
@@ -176,6 +186,7 @@ csv_list() {
     echo -n "'$FIREWALL_EXTENSION','$FILEMANAGER_KEY','$SFTPJAIL_KEY',"
     echo -n "'$REPOSITORY','$VERSION','$LANGUAGE','$BACKUP_GZIP','$BACKUP',"
     echo -n "'$MAIL_URL','$DB_PMA_URL','$DB_PGA_URL', '$SOFTACULOUS'"
+    echo -n "'$MAIL_CERTIFICATE','$VESTA_CERTIFICATE'"
     echo
 }
 
@@ -187,7 +198,7 @@ csv_list() {
 # Listing data
 case $format in
     json)   json_list ;;
-    plain)  shell_list ;;
+    plain)  plain_list ;;
     csv)    csv_list ;;
     shell)  shell_list ;;
 esac
diff --git a/bin/v-list-sys-mail-ssl b/bin/v-list-sys-mail-ssl
new file mode 100755
index 00000000..5da74e08
--- /dev/null
+++ b/bin/v-list-sys-mail-ssl
@@ -0,0 +1,135 @@
+#!/bin/bash
+# info: list mail ssl certificate
+# options: [FORMAT]
+#
+# The function of obtaining mail ssl files.
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+format=${1-shell}
+
+# Includes
+source $VESTA/func/main.sh
+
+# JSON list function
+json_list() {
+    echo '{'
+    echo -e "\t\"MAIL\": {"
+    echo "        \"CRT\": \"$crt\","
+    echo "        \"KEY\": \"$key\","
+    echo "        \"CA\": \"$ca\","
+    echo "        \"SUBJECT\": \"$subj\","
+    echo "        \"ALIASES\": \"$alt_dns\","
+    echo "        \"NOT_BEFORE\": \"$before\","
+    echo "        \"NOT_AFTER\": \"$after\","
+    echo "        \"SIGNATURE\": \"$signature\","
+    echo "        \"PUB_KEY\": \"$pub_key\","
+    echo "        \"ISSUER\": \"$issuer\""
+    echo -e "\t}\n}"
+}
+
+# SHELL list function
+shell_list() {
+    if [ ! -z "$crt" ]; then
+        echo -e "$crt"
+    fi
+    if [ ! -z "$key" ]; then
+        echo -e "\n$key"
+    fi
+    if [ ! -z "$crt" ]; then
+        echo
+        echo
+        echo "SUBJECT:        $subj"
+        if [ ! -z "$alt_dns" ]; then
+            echo "ALIASES:        ${alt_dns//,/ }"
+        fi
+        echo "VALID FROM:     $before"
+        echo "VALID TIL:      $after"
+        echo "SIGNATURE:      $signature"
+        echo "PUB_KEY:        $pub_key"
+        echo "ISSUER:         $issuer"
+    fi
+}
+
+# PLAIN list function
+plain_list() {
+    if [ ! -z "$crt" ]; then
+        echo -e "$crt"
+    fi
+    if [ ! -z "$key" ]; then
+        echo -e "\n$key"
+    fi
+    if [ ! -z "$ca" ]; then
+        echo -e "\n$ca"
+    fi
+    if [ ! -z "$crt" ]; then
+        echo "$subj"
+        echo "${alt_dns//,/ }"
+        echo "$before"
+        echo "$after"
+        echo "$signature"
+        echo "$pub_key"
+        echo "$issuer"
+    fi
+
+}
+
+# CSV list function
+csv_list() {
+    echo -n "CRT,KEY,CA,SUBJECT,ALIASES,NOT_BEFORE,NOT_AFTER,SIGNATURE,"
+    echo "PUB_KEY,ISSUER"
+    echo -n "\"$crt\",\"$key\",\"$ca\",\"$subj\",\"${alt_dns//,/ }\","
+    echo "\"$before\",\"$after\",\"$signature\",\"$pub_key\",\"$issuer\""
+}
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# Parsing SSL certificate
+if [ ! -e "$VESTA/ssl/mail.crt" ] || [ ! -e "$VESTA/ssl/mail.key" ]; then
+    exit
+fi
+
+crt=$(cat $VESTA/ssl/mail.crt |sed ':a;N;$!ba;s/\n/\\n/g')
+key=$(cat $VESTA/ssl/mail.key |sed ':a;N;$!ba;s/\n/\\n/g')
+
+
+# Parsing SSL certificate details without CA
+info=$(openssl x509 -text -in $VESTA/ssl/mail.crt)
+subj=$(echo "$info" |grep Subject: |cut -f 2 -d =)
+before=$(echo "$info" |grep Before: |sed -e "s/.*Before: //")
+after=$(echo "$info" |grep "After :" |sed -e "s/.*After : //")
+signature=$(echo "$info" |grep "Algorithm:" |head -n1 )
+signature=$(echo "$signature"| sed -e "s/.*Algorithm: //")
+pub_key=$(echo "$info" |grep Public-Key: |cut -f2 -d \( | tr -d \))
+issuer=$(echo "$info" |grep Issuer: |sed -e "s/.*Issuer: //")
+alt_dns=$(echo "$info" |grep DNS |sed -e 's/DNS:/\n/g' |tr -d ',')
+alt_dns=$(echo "$alt_dns" |tr -d ' ' |sed -e "/^$/d")
+alt_dns=$(echo "$alt_dns" |sed -e ':a;N;$!ba;s/\n/,/g')
+
+# Listing data
+case $format in
+    json)   json_list ;;
+    plain)  plain_list ;;
+    csv)    csv_list ;;
+    shell)  shell_list ;;
+esac
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+exit
diff --git a/bin/v-search-ssl-certificates b/bin/v-search-ssl-certificates
index 5a5c74bf..b392e810 100755
--- a/bin/v-search-ssl-certificates
+++ b/bin/v-search-ssl-certificates
@@ -18,23 +18,19 @@ source $VESTA/func/main.sh
 # JSON list function
 json_list() {
     IFS=$'\n'
-    i=1
     objects=$(echo "$search_cmd" |wc -l)
-    echo "{"
+    i=1
+    echo '['
     for str in $search_cmd; do
         eval $str
-        echo -n '    "'$i'": {
-        "USER": "'$USER'",
-        "DOMAIN": "'$DOMAIN'"
-    }'
         if [ "$i" -lt "$objects" ]; then
-            echo ','
+            echo -e  "\t\"$USER:$DOMAIN\","
         else
-            echo
+            echo -e  "\t\"$USER:$DOMAIN\""
         fi
-        ((i++))
+        (( ++i))
     done
-    echo '}'
+    echo "]"
 }
 
 # SHELL list function

From 80ebfc0daa96a8c82ad932390671d0f5cbc30bac Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Thu, 14 Mar 2019 00:44:32 +0200
Subject: [PATCH 0408/2300] frontend: user domain vesta ssl certificate support

---
 web/edit/server/index.php            | 171 ++++++++++++++++++++-----
 web/templates/admin/edit_server.html | 180 ++++++++++++++++++++++++---
 2 files changed, 302 insertions(+), 49 deletions(-)

diff --git a/web/edit/server/index.php b/web/edit/server/index.php
index a505e214..467596f8 100644
--- a/web/edit/server/index.php
+++ b/web/edit/server/index.php
@@ -78,20 +78,43 @@ foreach ($backup_types as $backup_type) {
     }
 }
 
+// List ssl web domains
+exec (VESTA_CMD."v-search-ssl-certificates json", $output, $return_var);
+$v_ssl_domains = json_decode(implode('', $output), true);
+//$v_vesta_certificate
+unset($output);
+
 // List ssl certificate info
 exec (VESTA_CMD."v-list-sys-vesta-ssl json", $output, $return_var);
-$ssl_str = json_decode(implode('', $output), true);
+$v_sys_ssl_str = json_decode(implode('', $output), true);
 unset($output);
-$v_ssl_crt = $ssl_str['VESTA']['CRT'];
-$v_ssl_key = $ssl_str['VESTA']['KEY'];
-$v_ssl_ca = $ssl_str['VESTA']['CA'];
-$v_ssl_subject = $ssl_str['VESTA']['SUBJECT'];
-$v_ssl_aliases = $ssl_str['VESTA']['ALIASES'];
-$v_ssl_not_before = $ssl_str['VESTA']['NOT_BEFORE'];
-$v_ssl_not_after = $ssl_str['VESTA']['NOT_AFTER'];
-$v_ssl_signature = $ssl_str['VESTA']['SIGNATURE'];
-$v_ssl_pub_key = $ssl_str['VESTA']['PUB_KEY'];
-$v_ssl_issuer = $ssl_str['VESTA']['ISSUER'];
+$v_sys_ssl_crt = $v_sys_ssl_str['VESTA']['CRT'];
+$v_sys_ssl_key = $v_sys_ssl_str['VESTA']['KEY'];
+$v_sys_ssl_ca = $v_sys_ssl_str['VESTA']['CA'];
+$v_sys_ssl_subject = $v_sys_ssl_str['VESTA']['SUBJECT'];
+$v_sys_ssl_aliases = $v_sys_ssl_str['VESTA']['ALIASES'];
+$v_sys_ssl_not_before = $v_sys_ssl_str['VESTA']['NOT_BEFORE'];
+$v_sys_ssl_not_after = $v_sys_ssl_str['VESTA']['NOT_AFTER'];
+$v_sys_ssl_signature = $v_sys_ssl_str['VESTA']['SIGNATURE'];
+$v_sys_ssl_pub_key = $v_sys_ssl_str['VESTA']['PUB_KEY'];
+$v_sys_ssl_issuer = $v_sys_ssl_str['VESTA']['ISSUER'];
+
+// List mail ssl certificate info
+if (!empty($_SESSION['VESTA_CERTIFICATE'])); {
+    exec (VESTA_CMD."v-list-sys-mail-ssl json", $output, $return_var);
+    $v_mail_ssl_str = json_decode(implode('', $output), true);
+    unset($output);
+    $v_mail_ssl_crt = $v_mail_ssl_str['MAIL']['CRT'];
+    $v_mail_ssl_key = $v_mail_ssl_str['MAIL']['KEY'];
+    $v_mail_ssl_ca = $v_mail_ssl_str['MAIL']['CA'];
+    $v_mail_ssl_subject = $v_mail_ssl_str['MAIL']['SUBJECT'];
+    $v_mail_ssl_aliases = $v_mail_ssl_str['MAIL']['ALIASES'];
+    $v_mail_ssl_not_before = $v_mail_ssl_str['MAIL']['NOT_BEFORE'];
+    $v_mail_ssl_not_after = $v_mail_ssl_str['MAIL']['NOT_AFTER'];
+    $v_mail_ssl_signature = $v_mail_ssl_str['MAIL']['SIGNATURE'];
+    $v_mail_ssl_pub_key = $v_mail_ssl_str['MAIL']['PUB_KEY'];
+    $v_mail_ssl_issuer = $v_mail_ssl_str['MAIL']['ISSUER'];
+}
 
 // Check POST request
 if (!empty($_POST['save'])) {
@@ -193,6 +216,47 @@ if (!empty($_POST['save'])) {
         }
     }
 
+
+    // Delete Mail Domain SSL certificate
+    if ((!isset($_POST['v_mail_ssl_domain_checkbox'])) && (!empty($_SESSION['MAIL_CERTIFICATE'])) && (empty($_SESSION['error_msg']))) {
+        unset($_SESSION['MAIL_CERTIFICATE']);
+        exec (VESTA_CMD."v-delete-sys-mail-ssl", $output, $return_var);
+        check_return_code($return_var,$output);
+        unset($output);
+    }
+
+    // Updating Mail Domain SSL certificate
+    if ((isset($_POST['v_mail_ssl_domain_checkbox'])) && (isset($_POST['v_mail_ssl_domain'])) && (empty($_SESSION['error_msg']))) {
+        if ((!empty($_POST['v_mail_ssl_domain'])) && ($_POST['v_mail_ssl_domain'] != $_SESSION['MAIL_CERTIFICATE'])) {
+            $v_mail_ssl_str = explode(":", $_POST['v_mail_ssl_domain']);
+            $v_mail_ssl_user = escapeshellarg($v_mail_ssl_str[0]);
+            $v_mail_ssl_domain = escapeshellarg($v_mail_ssl_str[1]);
+            exec (VESTA_CMD."v-add-sys-mail-ssl ".$v_mail_ssl_user." ".$v_mail_ssl_domain, $output, $return_var);
+            check_return_code($return_var,$output);
+            unset($output);
+            unset($v_mail_ssl_str);
+
+            if (empty($_SESSION['error_msg'])) {
+                $_SESSION['MAIL_CERTIFICATE'] = $_POST['v_mail_ssl_domain'];
+
+                // List SSL certificate info
+                exec (VESTA_CMD."v-list-sys-mail-ssl json", $output, $return_var);
+                $v_mail_ssl_str = json_decode(implode('', $output), true);
+                unset($output);
+                $v_mail_ssl_crt = $v_mail_ssl_str['MAIL']['CRT'];
+                $v_mail_ssl_key = $v_mail_ssl_str['MAIL']['KEY'];
+                $v_mail_ssl_ca = $v_mail_ssl_str['MAIL']['CA'];
+                $v_mail_ssl_subject = $v_mail_ssl_str['MAIL']['SUBJECT'];
+                $v_mail_ssl_aliases = $v_mail_ssl_str['MAIL']['ALIASES'];
+                $v_mail_ssl_not_before = $v_mail_ssl_str['MAIL']['NOT_BEFORE'];
+                $v_mail_ssl_not_after = $v_mail_ssl_str['MAIL']['NOT_AFTER'];
+                $v_mail_ssl_signature = $v_mail_ssl_str['MAIL']['SIGNATURE'];
+                $v_mail_ssl_pub_key = $v_mail_ssl_str['MAIL']['PUB_KEY'];
+                $v_mail_ssl_issuer = $v_mail_ssl_str['MAIL']['ISSUER'];
+            }
+        }
+    }
+
     // Update webmail url
     if (empty($_SESSION['error_msg'])) {
         if ($_POST['v_mail_url'] != $_SESSION['MAIL_URL']) {
@@ -352,24 +416,67 @@ if (!empty($_POST['save'])) {
         }
     }
 
+
+
+    // Delete WEB Domain SSL certificate
+    if ((!isset($_POST['v_web_ssl_domain_checkbox'])) && (!empty($_SESSION['VESTA_CERTIFICATE'])) && (empty($_SESSION['error_msg']))) {
+        unset($_SESSION['VESTA_CERTIFICATE']);
+        exec (VESTA_CMD."v-delete-sys-vesta-ssl", $output, $return_var);
+        check_return_code($return_var,$output);
+        unset($output);
+    }
+
+    // Updating WEB Domain SSL certificate
+    if ((isset($_POST['v_web_ssl_domain_checkbox'])) && (isset($_POST['v_web_ssl_domain'])) && (empty($_SESSION['error_msg']))) {
+
+        if ((!empty($_POST['v_web_ssl_domain'])) && ($_POST['v_web_ssl_domain'] != $_SESSION['VESTA_CERTIFICATE'])) {
+            $v_web_ssl_str = explode(":", $_POST['v_web_ssl_domain']);
+            $v_web_ssl_user = escapeshellarg($v_web_ssl_str[0]);
+            $v_web_ssl_domain = escapeshellarg($v_web_ssl_str[1]);
+            exec (VESTA_CMD."v-add-sys-vesta-ssl ".$v_web_ssl_user." ".$v_web_ssl_domain, $output, $return_var);
+            check_return_code($return_var,$output);
+            unset($output);
+
+            if (empty($_SESSION['error_msg'])) {
+                $_SESSION['VESTA_CERTIFICATE'] = $_POST['v_web_ssl_domain'];
+
+                // List SSL certificate info
+                exec (VESTA_CMD."v-list-sys-vesta-ssl json", $output, $return_var);
+                $v_sys_ssl_str = json_decode(implode('', $output), true);
+                unset($output);
+                $v_sys_ssl_crt = $v_sys_ssl_str['VESTA']['CRT'];
+                $v_sys_ssl_key = $v_sys_ssl_str['VESTA']['KEY'];
+                $v_sys_ssl_ca = $v_sys_ssl_str['VESTA']['CA'];
+                $v_sys_ssl_subject = $v_sys_ssl_str['VESTA']['SUBJECT'];
+                $v_sys_ssl_aliases = $v_sys_ssl_str['VESTA']['ALIASES'];
+                $v_sys_ssl_not_before = $v_sys_ssl_str['VESTA']['NOT_BEFORE'];
+                $v_sys_ssl_not_after = $v_sys_ssl_str['VESTA']['NOT_AFTER'];
+                $v_sys_ssl_signature = $v_sys_ssl_str['VESTA']['SIGNATURE'];
+                $v_sys_ssl_pub_key = $v_sys_ssl_str['VESTA']['PUB_KEY'];
+                $v_sys_ssl_issuer = $v_sys_ssl_str['VESTA']['ISSUER'];
+            }
+        }
+    }
+
+
     // Update SSL certificate
-    if ((!empty($_POST['v_ssl_crt'])) && (empty($_SESSION['error_msg']))) {
-        if (($v_ssl_crt != str_replace("\r\n", "\n",  $_POST['v_ssl_crt'])) || ($v_ssl_key != str_replace("\r\n", "\n",  $_POST['v_ssl_key']))) {
+    if ((!empty($_POST['v_sys_ssl_crt'])) && (empty($_POST['v_web_ssl_domain'])) && (empty($_SESSION['error_msg']))) {
+        if (($v_sys_ssl_crt != str_replace("\r\n", "\n",  $_POST['v_sys_ssl_crt'])) || ($v_sys_ssl_key != str_replace("\r\n", "\n",  $_POST['v_sys_ssl_key']))) {
             exec ('mktemp -d', $mktemp_output, $return_var);
             $tmpdir = $mktemp_output[0];
 
             // Certificate
-            if (!empty($_POST['v_ssl_crt'])) {
+            if (!empty($_POST['v_sys_ssl_crt'])) {
                 $fp = fopen($tmpdir."/certificate.crt", 'w');
-                fwrite($fp, str_replace("\r\n", "\n",  $_POST['v_ssl_crt']));
+                fwrite($fp, str_replace("\r\n", "\n",  $_POST['v_sys_ssl_crt']));
                 fwrite($fp, "\n");
                 fclose($fp);
             }
 
             // Key
-            if (!empty($_POST['v_ssl_key'])) {
+            if (!empty($_POST['v_sys_ssl_key'])) {
                 $fp = fopen($tmpdir."/certificate.key", 'w');
-                fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
+                fwrite($fp, str_replace("\r\n", "\n", $_POST['v_sys_ssl_key']));
                 fwrite($fp, "\n");
                 fclose($fp);
             }
@@ -378,20 +485,22 @@ if (!empty($_POST['save'])) {
             check_return_code($return_var,$output);
             unset($output);
 
-            // List ssl certificate info
-            exec (VESTA_CMD."v-list-sys-vesta-ssl json", $output, $return_var);
-            $ssl_str = json_decode(implode('', $output), true);
-            unset($output);
-            $v_ssl_crt = $ssl_str['VESTA']['CRT'];
-            $v_ssl_key = $ssl_str['VESTA']['KEY'];
-            $v_ssl_ca = $ssl_str['VESTA']['CA'];
-            $v_ssl_subject = $ssl_str['VESTA']['SUBJECT'];
-            $v_ssl_aliases = $ssl_str['VESTA']['ALIASES'];
-            $v_ssl_not_before = $ssl_str['VESTA']['NOT_BEFORE'];
-            $v_ssl_not_after = $ssl_str['VESTA']['NOT_AFTER'];
-            $v_ssl_signature = $ssl_str['VESTA']['SIGNATURE'];
-            $v_ssl_pub_key = $ssl_str['VESTA']['PUB_KEY'];
-            $v_ssl_issuer = $ssl_str['VESTA']['ISSUER'];
+            if (empty($_SESSION['error_msg'])) {
+                // List ssl certificate info
+                exec (VESTA_CMD."v-list-sys-vesta-ssl json", $output, $return_var);
+                $v_sys_ssl_str = json_decode(implode('', $output), true);
+                unset($output);
+                $v_sys_ssl_crt = $v_sys_ssl_str['VESTA']['CRT'];
+                $v_sys_ssl_key = $v_sys_ssl_str['VESTA']['KEY'];
+                $v_sys_ssl_ca = $v_sys_ssl_str['VESTA']['CA'];
+                $v_sys_ssl_subject = $v_sys_ssl_str['VESTA']['SUBJECT'];
+                $v_sys_ssl_aliases = $v_sys_ssl_str['VESTA']['ALIASES'];
+                $v_sys_ssl_not_before = $v_sys_ssl_str['VESTA']['NOT_BEFORE'];
+                $v_sys_ssl_not_after = $v_sys_ssl_str['VESTA']['NOT_AFTER'];
+                $v_sys_ssl_signature = $v_sys_ssl_str['VESTA']['SIGNATURE'];
+                $v_sys_ssl_pub_key = $v_sys_ssl_str['VESTA']['PUB_KEY'];
+                $v_sys_ssl_issuer = $v_sys_ssl_str['VESTA']['ISSUER'];
+            }
         }
     }
 
diff --git a/web/templates/admin/edit_server.html b/web/templates/admin/edit_server.html
index 285a16c3..9de86222 100644
--- a/web/templates/admin/edit_server.html
+++ b/web/templates/admin/edit_server.html
@@ -280,13 +280,115 @@
                                                 <br><br>
                                             </td>
                                         </tr>
-
+                                        <tr>
+                                            <td class="vst-text input-label step-top">
+                                                <label><input type="checkbox" size="20" class="vst-checkbox" name="v_mail_ssl_domain_checkbox"
+                                                            <?php if(!empty($_SESSION['MAIL_CERTIFICATE'])) echo "checked=yes" ?>
+                                                            onclick="javascript:elementHideShow('mail_ssl');">
+                                                    <?php print __('Use Web Domain SSL Certificate');?>
+                                                </label>
+                                            </td>
+                                        </tr>
+                                        <tr>
+                                            <td class="vst-text input-label step-left">
+                                                <table style="display:<?php if (empty($_SESSION['MAIL_CERTIFICATE'])) echo 'none';?> ;" id="mail_ssl">
+                                                    <tr>
+                                                        <td class="vst-text">
+                                                            <?php print __('Domain') ?>
+                                                        </td>
+                                                    </tr>
+                                                    <tr>
+                                                        <td>
+                                                            <select class="vst-list" name="v_mail_ssl_domain">
+                                                                <option value='' <?php if(empty($_SESSION['MAIL_CERTIFICATE'])) echo 'selected' ?>></option>
+                                                                <?php
+                                                                    foreach ($v_ssl_domains as $key => $value) {
+                                                                        echo "\t\t\t\t<option value=\"".$value."\"";
+                                                                        if ((!empty($_SESSION['MAIL_CERTIFICATE'])) && ( $value == $_SESSION['MAIL_CERTIFICATE'])){
+                                                                            echo ' selected' ;
+                                                                        }
+                                                                        if ((!empty($_SESSION['MAIL_CERTIFICATE'])) && ( $value == $_POST['v_mail_certificate'])){
+                                                                            echo ' selected' ;
+                                                                        }
+                                                                        echo ">".$value."</option>\n";
+                                                                    }
+                                                                ?>
+                                                            </select>
+                                                            <br><br>
+                                                        </td>
+                                                    </tr>
+                                                    <tr>
+                                                        <td>
+                                                            <table class="additional-info">
+                                                                <tr>
+                                                                    <td>
+                                                                        <?=__('SUBJECT')?>:
+                                                                    </td>
+                                                                    <td class="details">
+                                                                        <?=$v_sys_ssl_subject?>
+                                                                    </td>
+                                                                </tr>
+                                                                <? if($v_sys_ssl_aliases){?>
+                                                                <tr>
+                                                                    <td>
+                                                                        <?=__('ALIASES')?>:
+                                                                    </td>
+                                                                    <td class="details">
+                                                                        <?=$v_sys_ssl_aliases?>
+                                                                    </td>
+                                                                </tr>
+                                                                <? } ?>
+                                                                <tr>
+                                                                    <td>
+                                                                        <?=__('NOT_BEFORE')?>:
+                                                                    </td>
+                                                                    <td class="details">
+                                                                        <?=$v_sys_ssl_not_before?>
+                                                                    </td>
+                                                                </tr>
+                                                                <tr>
+                                                                    <td>
+                                                                        <?=__('NOT_AFTER')?>:
+                                                                    </td>
+                                                                    <td class="details">
+                                                                        <?=$v_sys_ssl_not_after?>
+                                                                    </td>
+                                                                </tr>
+                                                                <tr>
+                                                                    <td>
+                                                                        <?=__('SIGNATURE')?>:
+                                                                    </td>
+                                                                    <td class="details">
+                                                                        <?=$v_sys_ssl_signature?>
+                                                                    </td>
+                                                                </tr>
+                                                                <tr>
+                                                                    <td>
+                                                                        <?=__('PUB_KEY')?>:
+                                                                    </td>
+                                                                    <td class="details">
+                                                                        <?=$v_sys_ssl_pub_key?>
+                                                                    </td>
+                                                                </tr>
+                                                                <tr>
+                                                                    <td>
+                                                                        <?=__('ISSUER')?>:
+                                                                    </td>
+                                                                    <td class="details">
+                                                                        <?=$v_sys_ssl_issuer?>
+                                                                    </td>
+                                                                </tr>
+                                                            </table>
+                                                        </td>
+                                                    </tr>
+                                                </table>
+                                            </td>
+                                        </tr>
                                     </table>
                                 </td>
                             </tr>
 
 
-
                             <tr>
                                 <td class="vst-text input-label step-top">
                                     <a href="javascript:elementHideShow('db');" class="vst-text">
@@ -503,7 +605,8 @@
                                                 <input type="text" size="20" class="vst-input" name="v_backup_dir" value="<?=trim($v_backup_dir, "'")?>">
                                                 <br><br>
                                             </td>
-                                        </tr>                                        <tr>
+                                        </tr>
+                                        <tr>
                                             <td class="vst-text input-label step-top">
                                                 <a href="javascript:elementHideShow('remote_backup');" class="vst-text">
                                                 <?php print __('Remote backup');?> <img src="/images/arrow.png">
@@ -513,9 +616,10 @@
                                         <tr>
                                             <td class="vst-text input-label step-left">
                                                 <table style="display:<?php if (empty($v_backup_remote_adv)) echo 'none';?> ;" id="remote_backup">
-                                                    <td class="vst-text">
-                                                        <?php print __('Protocol') ?>
-                                                    </td>
+                                                    <tr>
+                                                        <td class="vst-text">
+                                                            <?php print __('Protocol') ?>
+                                                        </td>
                                                     </tr>
                                                     <tr>
                                                         <td>
@@ -580,13 +684,54 @@
                             <tr>
                                 <td class="vst-text input-label step-top">
                                     <a href="javascript:elementHideShow('ssl');" class="vst-text">
-                                        <b><?php print __('Vesta SSL');?> <!-- span style="color:#ff6701;font-size:10px; padding:0 10px;">preview</span--><img src="/images/arrow.png"></b>
+                                        <b><?php print __('Vesta SSL');?><img src="/images/arrow.png"></b>
                                     </a>
                                 </td>
                             </tr>
                             <tr>
                                 <td class="vst-text input-label step-left">
                                     <table style="display:<?php if (empty($v_adv)) echo 'none';?> ;" id="ssl">
+                                        <tr>
+                                            <td class="vst-text input-label step-top">
+                                                <label><input type="checkbox" size="20" class="vst-checkbox" name="v_web_ssl_domain_checkbox"
+                                                            <?php if(!empty($_SESSION['VESTA_CERTIFICATE'])) echo "checked=yes" ?>
+                                                            onclick="javascript:elementHideShow('domain_ssl');">
+                                                    <?php print __('Use Web Domain SSL Certificate');?>
+                                                </label>
+                                            </td>
+                                        </tr>
+                                        <tr>
+                                            <td class="vst-text input-label step-left">
+                                                <table style="display:<?php if (empty($_SESSION['VESTA_CERTIFICATE'])) echo 'none';?> ;" id="domain_ssl">
+                                                    <tr>
+                                                        <td class="vst-text">
+                                                            <?php print __('Domain') ?>
+                                                        </td>
+                                                    </tr>
+                                                    <tr>
+                                                        <td>
+                                                            <select class="vst-list" name="v_web_ssl_domain">
+                                                                <option value='' <?php if(empty($_SESSION['VESTA_CERTIFICATE'])) echo 'selected' ?>></option>
+                                                                <?php
+                                                                    foreach ($v_ssl_domains as $key => $value) {
+                                                                        echo "\t\t\t\t<option value=\"".$value."\"";
+                                                                        if ((!empty($_SESSION['VESTA_CERTIFICATE'])) && ( $value == $_SESSION['VESTA_CERTIFICATE'])){
+                                                                            echo ' selected' ;
+                                                                        }
+                                                                        if ((!empty($_SESSION['VESTA_CERTIFICATE'])) && ( $value == $_POST['v_vesta_certificate'])){
+                                                                            echo ' selected' ;
+                                                                        }
+                                                                        echo ">".$value."</option>\n";
+                                                                    }
+                                                                ?>
+                                                            </select>
+                                                            <br><br>
+                                                        </td>
+                                                    </tr>
+                                                </table>
+                                            </td>
+                                        </tr>
+
                                         <tr>
                                             <td class="vst-text input-label">
                                                 <?php print __('SSL Certificate');?>
@@ -594,7 +739,7 @@
                                         </tr>
                                         <tr>
                                             <td>
-                                                <textarea size="20" class="vst-textinput" name="v_ssl_crt"><?=htmlentities(trim($v_ssl_crt, "'"))?></textarea>
+                                                <textarea size="20" class="vst-textinput" name="v_sys_ssl_crt"><?=htmlentities(trim($v_sys_ssl_crt, "'"))?></textarea>
                                             </td>
                                         </tr>
                                         <tr>
@@ -604,7 +749,7 @@
                                         </tr>
                                         <tr>
                                             <td>
-                                                <textarea size="20" class="vst-textinput" name="v_ssl_key"><?=htmlentities(trim($v_ssl_key, "'"))?></textarea>
+                                                <textarea size="20" class="vst-textinput" name="v_sys_ssl_key"><?=htmlentities(trim($v_sys_ssl_key, "'"))?></textarea>
                                             </td>
                                         </tr>
                                         <tr>
@@ -615,16 +760,16 @@
                                                             <?=__('SUBJECT')?>:
                                                         </td>
                                                         <td class="details">
-                                                            <?=$v_ssl_subject?>
+                                                            <?=$v_sys_ssl_subject?>
                                                         </td>
                                                     </tr>
-                                                    <? if($v_ssl_aliases){?>
+                                                    <? if($v_sys_ssl_aliases){?>
                                                     <tr>
                                                         <td>
                                                             <?=__('ALIASES')?>:
                                                         </td>
                                                         <td class="details">
-                                                            <?=$v_ssl_aliases?>
+                                                            <?=$v_sys_ssl_aliases?>
                                                         </td>
                                                     </tr>
                                                     <? } ?>
@@ -633,7 +778,7 @@
                                                             <?=__('NOT_BEFORE')?>:
                                                         </td>
                                                         <td class="details">
-                                                            <?=$v_ssl_not_before?>
+                                                            <?=$v_sys_ssl_not_before?>
                                                         </td>
                                                     </tr>
                                                     <tr>
@@ -641,7 +786,7 @@
                                                             <?=__('NOT_AFTER')?>:
                                                         </td>
                                                         <td class="details">
-                                                            <?=$v_ssl_not_after?>
+                                                            <?=$v_sys_ssl_not_after?>
                                                         </td>
                                                     </tr>
                                                     <tr>
@@ -649,16 +794,15 @@
                                                             <?=__('SIGNATURE')?>:
                                                         </td>
                                                         <td class="details">
-                                                            <?=$v_ssl_signature?>
+                                                            <?=$v_sys_ssl_signature?>
                                                         </td>
                                                     </tr>
-
                                                     <tr>
                                                         <td>
                                                             <?=__('PUB_KEY')?>:
                                                         </td>
                                                         <td class="details">
-                                                            <?=$v_ssl_pub_key?>
+                                                            <?=$v_sys_ssl_pub_key?>
                                                         </td>
                                                     </tr>
                                                     <tr>
@@ -666,7 +810,7 @@
                                                             <?=__('ISSUER')?>:
                                                         </td>
                                                         <td class="details">
-                                                            <?=$v_ssl_issuer?>
+                                                            <?=$v_sys_ssl_issuer?>
                                                         </td>
                                                     </tr>
                                                 </table>

From 6a9b7d35078e3dd4aac13cd867fed4d9fe5c9146 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Thu, 14 Mar 2019 14:34:38 +0200
Subject: [PATCH 0409/2300] Use Web Domain SSL Certificate -> i18n

---
 web/inc/i18n/ar.php    | 1 +
 web/inc/i18n/az.php    | 1 +
 web/inc/i18n/bg.php    | 1 +
 web/inc/i18n/bs.php    | 1 +
 web/inc/i18n/cn.php    | 1 +
 web/inc/i18n/cz.php    | 1 +
 web/inc/i18n/da.php    | 1 +
 web/inc/i18n/de.php    | 1 +
 web/inc/i18n/el.php    | 1 +
 web/inc/i18n/en.php    | 1 +
 web/inc/i18n/es.php    | 1 +
 web/inc/i18n/fa.php    | 1 +
 web/inc/i18n/fi.php    | 1 +
 web/inc/i18n/fr.php    | 1 +
 web/inc/i18n/hu.php    | 1 +
 web/inc/i18n/id.php    | 1 +
 web/inc/i18n/it.php    | 1 +
 web/inc/i18n/ja.php    | 1 +
 web/inc/i18n/ka.php    | 1 +
 web/inc/i18n/ko.php    | 1 +
 web/inc/i18n/nl.php    | 1 +
 web/inc/i18n/no.php    | 1 +
 web/inc/i18n/pl.php    | 1 +
 web/inc/i18n/pt-BR.php | 1 +
 web/inc/i18n/pt.php    | 1 +
 web/inc/i18n/ro.php    | 1 +
 web/inc/i18n/ru.php    | 1 +
 web/inc/i18n/se.php    | 1 +
 web/inc/i18n/sr.php    | 1 +
 web/inc/i18n/th.php    | 1 +
 web/inc/i18n/tr.php    | 1 +
 web/inc/i18n/tw.php    | 1 +
 web/inc/i18n/ua.php    | 1 +
 web/inc/i18n/ur.php    | 1 +
 web/inc/i18n/vi.php    | 1 +
 35 files changed, 35 insertions(+)

diff --git a/web/inc/i18n/ar.php b/web/inc/i18n/ar.php
index dd28828e..e50cfec7 100644
--- a/web/inc/i18n/ar.php
+++ b/web/inc/i18n/ar.php
@@ -560,6 +560,7 @@ $LANG['ar'] = array(
     'MAIL Server' => 'مخدم البريد الالكتروني',
     'Antivirus' => 'مضاد الفيروسات',
     'AntiSpam' => 'مضاد البريد المزعج سبام',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'رابط WebMail',
     'MySQL Support' => 'دعم MySQL',
     'phpMyAdmin URL' => 'رابط phpMyAdmin',
diff --git a/web/inc/i18n/az.php b/web/inc/i18n/az.php
index de5a0352..715043a0 100644
--- a/web/inc/i18n/az.php
+++ b/web/inc/i18n/az.php
@@ -540,6 +540,7 @@ $LANG['az'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Vebmail URL',
     'MySQL Support' => 'MySQL dəstək',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/bg.php b/web/inc/i18n/bg.php
index 760b88c1..642e6cfa 100644
--- a/web/inc/i18n/bg.php
+++ b/web/inc/i18n/bg.php
@@ -553,6 +553,7 @@ $LANG['bg'] = array(
     'MAIL Server' => 'Пощенски сървър',
     'Antivirus' => 'Антивирус',
     'AntiSpam' => 'Антиспам',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Уебмейл адрес',
     'MySQL Support' => 'MySQL поддръжкс',
     'phpMyAdmin URL' => 'phpMyAdmin адрес',
diff --git a/web/inc/i18n/bs.php b/web/inc/i18n/bs.php
index 22d997e5..4e2f32e1 100644
--- a/web/inc/i18n/bs.php
+++ b/web/inc/i18n/bs.php
@@ -559,6 +559,7 @@ $LANG['bs'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/cn.php b/web/inc/i18n/cn.php
index ee9c9747..d2c96311 100644
--- a/web/inc/i18n/cn.php
+++ b/web/inc/i18n/cn.php
@@ -568,6 +568,7 @@ $LANG['cn'] = array(
     'MAIL Server' => '邮箱服务器',
     'Antivirus' => '防病毒引擎',
     'AntiSpam' => '防垃圾邮件',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => '网页邮箱网址',
     'MySQL Support' => 'MySQL 支持',
     'phpMyAdmin URL' => '设置 phpMyAdmin 网址',
diff --git a/web/inc/i18n/cz.php b/web/inc/i18n/cz.php
index f9f291bf..9a0cac79 100644
--- a/web/inc/i18n/cz.php
+++ b/web/inc/i18n/cz.php
@@ -560,6 +560,7 @@ $LANG['cz'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/da.php b/web/inc/i18n/da.php
index 80e78a35..6e0fab72 100644
--- a/web/inc/i18n/da.php
+++ b/web/inc/i18n/da.php
@@ -561,6 +561,7 @@ $LANG['da'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/de.php b/web/inc/i18n/de.php
index e5ee45d0..17d1101f 100644
--- a/web/inc/i18n/de.php
+++ b/web/inc/i18n/de.php
@@ -559,6 +559,7 @@ $LANG['de'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/el.php b/web/inc/i18n/el.php
index 7e193523..bef89086 100644
--- a/web/inc/i18n/el.php
+++ b/web/inc/i18n/el.php
@@ -561,6 +561,7 @@ $LANG['el'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/en.php b/web/inc/i18n/en.php
index ed5c1f2e..d7ae290d 100644
--- a/web/inc/i18n/en.php
+++ b/web/inc/i18n/en.php
@@ -559,6 +559,7 @@ $LANG['en'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/es.php b/web/inc/i18n/es.php
index 212d78a2..12d3d29c 100644
--- a/web/inc/i18n/es.php
+++ b/web/inc/i18n/es.php
@@ -567,6 +567,7 @@ $LANG['es'] = array(
     'MAIL Server' => 'Servidor de Correo',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'Soportar MYSQL',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/fa.php b/web/inc/i18n/fa.php
index 57295481..8355691a 100644
--- a/web/inc/i18n/fa.php
+++ b/web/inc/i18n/fa.php
@@ -543,6 +543,7 @@ $LANG['fa'] = array(
     'MAIL Server' => 'سرور پستی',
     'Antivirus' => 'ضد ویروس',
     'AntiSpam' => 'ضد هرزنامه',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'نشانی وب میل',
     'MySQL Support' => 'پشتیبانی MySQL',
     'phpMyAdmin URL' => 'نشانی phpMyAdmin',
diff --git a/web/inc/i18n/fi.php b/web/inc/i18n/fi.php
index f2eddbab..951f8da3 100644
--- a/web/inc/i18n/fi.php
+++ b/web/inc/i18n/fi.php
@@ -561,6 +561,7 @@ $LANG['fi'] = array(
     'MAIL Server' => 'MAIL-palvelin',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmailin URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/fr.php b/web/inc/i18n/fr.php
index c57e6266..4e2e3144 100644
--- a/web/inc/i18n/fr.php
+++ b/web/inc/i18n/fr.php
@@ -559,6 +559,7 @@ $LANG['fr'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/hu.php b/web/inc/i18n/hu.php
index af461107..1c37f93f 100644
--- a/web/inc/i18n/hu.php
+++ b/web/inc/i18n/hu.php
@@ -563,6 +563,7 @@ $LANG['hu'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/id.php b/web/inc/i18n/id.php
index 1a55af74..4702b7cc 100644
--- a/web/inc/i18n/id.php
+++ b/web/inc/i18n/id.php
@@ -560,6 +560,7 @@ $LANG['id'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/it.php b/web/inc/i18n/it.php
index ec7a83d5..1e104c51 100644
--- a/web/inc/i18n/it.php
+++ b/web/inc/i18n/it.php
@@ -560,6 +560,7 @@ $LANG['it'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/ja.php b/web/inc/i18n/ja.php
index f2836948..a592fd7b 100644
--- a/web/inc/i18n/ja.php
+++ b/web/inc/i18n/ja.php
@@ -559,6 +559,7 @@ $LANG['ja'] = array(
     'MAIL Server' => 'メールサーバー',
     'Antivirus' => 'アンチウイルス',
     'AntiSpam' => 'アンチスパム',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'ウェブメールのURL',
     'MySQL Support' => 'MySQLのサポート',
     'phpMyAdmin URL' => 'phpMyAdminのURL',
diff --git a/web/inc/i18n/ka.php b/web/inc/i18n/ka.php
index abbcb479..1512e06c 100644
--- a/web/inc/i18n/ka.php
+++ b/web/inc/i18n/ka.php
@@ -559,6 +559,7 @@ $LANG['ka'] = array(
     'MAIL Server' => 'ელფოსტის სერვერი',
     'Antivirus' => 'ანტივირუსი',
     'AntiSpam' => 'ანტისპამი',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'ვებფოსტის URL',
     'MySQL Support' => 'MySQL-ის მხარდაჭერა',
     'phpMyAdmin URL' => 'phpMyAdmin-ის URL',
diff --git a/web/inc/i18n/ko.php b/web/inc/i18n/ko.php
index a032f265..1b09de25 100644
--- a/web/inc/i18n/ko.php
+++ b/web/inc/i18n/ko.php
@@ -559,6 +559,7 @@ $LANG['ko'] = array(
     'MAIL Server' => 'MAIL 서버',
     'Antivirus' => '바이러스 필터링',
     'AntiSpam' => '스팸 필터링',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => '웹메일 주소',
     'MySQL Support' => 'MySQL 지원',
     'phpMyAdmin URL' => 'phpMyAdmin 주소',
diff --git a/web/inc/i18n/nl.php b/web/inc/i18n/nl.php
index fc86a88b..851fe46d 100644
--- a/web/inc/i18n/nl.php
+++ b/web/inc/i18n/nl.php
@@ -563,6 +563,7 @@ $LANG['nl'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/no.php b/web/inc/i18n/no.php
index 45c23f22..fe026f39 100644
--- a/web/inc/i18n/no.php
+++ b/web/inc/i18n/no.php
@@ -560,6 +560,7 @@ $LANG['no'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/pl.php b/web/inc/i18n/pl.php
index 23c8016c..e649a22c 100644
--- a/web/inc/i18n/pl.php
+++ b/web/inc/i18n/pl.php
@@ -560,6 +560,7 @@ $LANG['pl'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/pt-BR.php b/web/inc/i18n/pt-BR.php
index 686af900..303ae53f 100644
--- a/web/inc/i18n/pt-BR.php
+++ b/web/inc/i18n/pt-BR.php
@@ -559,6 +559,7 @@ $LANG['pt-BR'] = array(
     'MAIL Server' => 'Servidor de E-MAIL',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'Suporte MySQL',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/pt.php b/web/inc/i18n/pt.php
index ec1eb670..02d3bf51 100644
--- a/web/inc/i18n/pt.php
+++ b/web/inc/i18n/pt.php
@@ -559,6 +559,7 @@ $LANG['pt'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/ro.php b/web/inc/i18n/ro.php
index 0a9e93e3..5b70f5d5 100644
--- a/web/inc/i18n/ro.php
+++ b/web/inc/i18n/ro.php
@@ -561,6 +561,7 @@ $LANG['ro'] = array(
     'MAIL Server' => 'Server MAIL',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Foloseşte certificatul SSL din domeniul WEB',
     'Webmail URL' => 'URL Webmail',
     'MySQL Support' => 'Suport MySQL',
     'phpMyAdmin URL' => 'URL phpMyAdmin',
diff --git a/web/inc/i18n/ru.php b/web/inc/i18n/ru.php
index a109056c..58829fad 100644
--- a/web/inc/i18n/ru.php
+++ b/web/inc/i18n/ru.php
@@ -561,6 +561,7 @@ $LANG['ru'] = array(
     'MAIL Server' => 'MAIL Сервер',
     'Antivirus' => 'Антивирус',
     'AntiSpam' => 'АнтиСпам',
+    'Use Web Domain SSL Certificate' => 'Использовать SSL сертификат веб домена',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'Поддержка MySQL',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/se.php b/web/inc/i18n/se.php
index 87bb1910..96c5af9c 100644
--- a/web/inc/i18n/se.php
+++ b/web/inc/i18n/se.php
@@ -559,6 +559,7 @@ $LANG['se'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/sr.php b/web/inc/i18n/sr.php
index dc1f315c..759ab6c9 100644
--- a/web/inc/i18n/sr.php
+++ b/web/inc/i18n/sr.php
@@ -559,6 +559,7 @@ $LANG['sr'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL podrška',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/th.php b/web/inc/i18n/th.php
index 07beb85e..2878192f 100644
--- a/web/inc/i18n/th.php
+++ b/web/inc/i18n/th.php
@@ -562,6 +562,7 @@ $LANG['th'] = array(
     'MAIL Server' => 'เซิร์ฟเวอร์เมล',
     'Antivirus' => 'ป้องกันไวรัส',
     'AntiSpam' => 'ป้องกันเมลขยะ',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'สนับสนุน MySQL',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/tr.php b/web/inc/i18n/tr.php
index 7f2875b9..a7fadc43 100644
--- a/web/inc/i18n/tr.php
+++ b/web/inc/i18n/tr.php
@@ -560,6 +560,7 @@ $LANG['tr'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL Support',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/tw.php b/web/inc/i18n/tw.php
index d35cba4a..d421cf87 100644
--- a/web/inc/i18n/tw.php
+++ b/web/inc/i18n/tw.php
@@ -564,6 +564,7 @@ $LANG['tw'] = array(
     'MAIL Server' => 'MAIL 伺服器',
     'Antivirus' => '病毒防護',
     'AntiSpam' => '垃圾郵件防護',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Webmail 路徑',
     'MySQL Support' => 'MySQL 支援',
     'phpMyAdmin URL' => 'phpMyAdmin 路徑',
diff --git a/web/inc/i18n/ua.php b/web/inc/i18n/ua.php
index cf47496d..136cc73f 100644
--- a/web/inc/i18n/ua.php
+++ b/web/inc/i18n/ua.php
@@ -560,6 +560,7 @@ $LANG['ua'] = array(
     'MAIL Server' => 'MAIL сервер',
     'Antivirus' => 'Антивірус',
     'AntiSpam' => 'АнтиСпам',
+    'Use Web Domain SSL Certificate' => 'Використовувати SSL сертифікат веб домену',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'Підтримка MySQL',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
diff --git a/web/inc/i18n/ur.php b/web/inc/i18n/ur.php
index d01a401d..960e5631 100644
--- a/web/inc/i18n/ur.php
+++ b/web/inc/i18n/ur.php
@@ -548,6 +548,7 @@ $LANG['ur'] = array(
     'MAIL Server'  => 'میل سرور',
     'Antivirus'  => 'اینٹی وائرس',
     'AntiSpam'  => 'اینٹی سپیم',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL'  => 'ویب میل URL',
     'MySQL Support'  => 'ایس کیو ایل کی معاونت کی',
     'phpMyAdmin URL'  => 'phpMyAdmin کے یو آر ایل',
diff --git a/web/inc/i18n/vi.php b/web/inc/i18n/vi.php
index 40d40cbe..2de145b4 100644
--- a/web/inc/i18n/vi.php
+++ b/web/inc/i18n/vi.php
@@ -562,6 +562,7 @@ $LANG['vi'] = array(
     'MAIL Server' => 'Máy chủ MAIL',
     'Antivirus' => 'Trình diệt virus',
     'AntiSpam' => 'Trình chống spam',
+    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
     'Webmail URL' => 'Đường dẫn Webmail',
     'MySQL Support' => 'Hỗ trợ MySQL',
     'phpMyAdmin URL' => 'Đường dẫn phpMyAdmin',

From 180d9101316db6f0d8c2e5f35949dc3f8567c05b Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Thu, 14 Mar 2019 14:58:19 +0200
Subject: [PATCH 0410/2300] inverted trigger condition

---
 bin/v-add-web-domain-ssl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-web-domain-ssl b/bin/v-add-web-domain-ssl
index d7a209f1..43e5cce3 100755
--- a/bin/v-add-web-domain-ssl
+++ b/bin/v-add-web-domain-ssl
@@ -121,14 +121,14 @@ $BIN/v-restart-proxy $restart
 check_result $? "Proxy restart failed" >/dev/null
 
 # Updating system ssl dependencies
-if [ -z "$VESTA_CERTIFICATE" ]; then
+if [ ! -z "$VESTA_CERTIFICATE" ]; then
     crt_user=$(echo "$VESTA_CERTIFICATE" |cut -f 1 -d :)
     crt_domain=$(echo "$VESTA_CERTIFICATE" |cut -f 2 -d :)
     if [ "$user" = "$crt_user" ] && [ "$domain" = "$crt_domain" ]; then
         $BIN/v-add-sys-vesta-ssl $user $domain >/dev/null 2>&1
     fi
 fi
-if [ -z "$MAIL_CERTIFICATE" ]; then
+if [ ! -z "$MAIL_CERTIFICATE" ]; then
     crt_user=$(echo "$MAIL_CERTIFICATE" |cut -f 1 -d :)
     crt_domain=$(echo "$MAIL_CERTIFICATE" |cut -f 2 -d :)
     if [ "$user" = "$crt_user" ] && [ "$domain" = "$crt_domain" ]; then

From 1f4080473504e50d4831afd8d2f6a9fea1e9cc7b Mon Sep 17 00:00:00 2001
From: pablobae <soporte@pablobaenas.com>
Date: Thu, 14 Mar 2019 16:07:44 +0100
Subject: [PATCH 0411/2300]  Update v-update-firewall

Check sshcustom port  is not needed anymore, because after merging pull 1819, the rules file already contains the ssh port correctly (it's not hardcoded anymore.

Also, if these lines are not removed, we have change ssh port, and we try to add a new rule with port 22 (v-add-firewall-rule DROP 0.0.0.0/0 22 tcp ssh) , these lines will change port 22 to current ssh port on rules.conf file, and we will be blocked.
---
 bin/v-update-firewall | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/bin/v-update-firewall b/bin/v-update-firewall
index da91acc8..46e2073a 100755
--- a/bin/v-update-firewall
+++ b/bin/v-update-firewall
@@ -51,11 +51,6 @@ if [ $? -ne 0 ]; then
     conntrack_ftp='no'
 fi
 
-# Checking custom OpenSSH  port
-sshport=$(grep '^Port ' /etc/ssh/sshd_config | head -1 | cut -d ' ' -f 2)
-if [[ "$sshport" =~ ^[0-9]+$ ]] && [ "$sshport" -ne "22"  ]; then
-    sed -i "s/PORT='22'/PORT=\'$sshport\'/" $rules
-fi
 
 # Creating temporary file
 tmp=$(mktemp)

From aeee40865e51d52c3f190a678ec0393969175376 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 16:50:29 +0100
Subject: [PATCH 0412/2300] Fixing blowfish_secret length (too short)

phpMyAdmin "screams", we should be using length of 32 characters for blowfish_secret.
---
 install/vst-install-rhel.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index b7c2839e..7adee764 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -83,6 +83,9 @@ gen_pass() {
     echo "$PASS"
 }
 
+# Defining 32 char blowfish_secret
+blowfish_secret=`openssl rand -base64 32`;
+
 # Defining return code check function
 check_result() {
     if [ $1 -ne 0 ]; then
@@ -1043,7 +1046,7 @@ if [ "$mysql" = 'yes' ]; then
         cp -f $vestacp/pma/phpMyAdmin.conf /etc/httpd/conf.d/
     fi
     cp -f $vestacp/pma/config.inc.conf /etc/phpMyAdmin/config.inc.php
-    sed -i "s/%blowfish_secret%/$(gen_pass)/g" /etc/phpMyAdmin/config.inc.php
+    sed -i "s/%blowfish_secret%/$blowfish_secret/g" /etc/phpMyAdmin/config.inc.php
 fi
 
 

From 5d9265f84f062f0b685e3c2819ee5a45ae55cf9c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 16:52:59 +0100
Subject: [PATCH 0413/2300]  Fixing blowfish_secret length (too short)

Fixing blowfish_secret length (too short)
---
 install/vst-install-amazon.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-amazon.sh b/install/vst-install-amazon.sh
index 8dbdaa14..e23d9997 100644
--- a/install/vst-install-amazon.sh
+++ b/install/vst-install-amazon.sh
@@ -74,6 +74,9 @@ gen_pass() {
     echo "$PASS"
 }
 
+# Defining 32 char blowfish_secret
+blowfish_secret=`openssl rand -base64 32`;
+
 # Defining return code check function
 check_result() {
     if [ $1 -ne 0 ]; then
@@ -1023,7 +1026,7 @@ if [ "$mysql" = 'yes' ]; then
         cp -f $vestacp/pma/phpMyAdmin.conf /etc/httpd/conf.d/
     fi
     cp -f $vestacp/pma/config.inc.conf /etc/phpMyAdmin/config.inc.php
-    sed -i "s/%blowfish_secret%/$(gen_pass)/g" /etc/phpMyAdmin/config.inc.php
+    sed -i "s/%blowfish_secret%/$blowfish_secret/g" /etc/phpMyAdmin/config.inc.php
 fi
 
 

From a67674c1f2a0c86411aa7d36010190c3beb0522a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 21:25:27 +0100
Subject: [PATCH 0414/2300] Fixed

fixed
---
 install/vst-install-amazon.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-amazon.sh b/install/vst-install-amazon.sh
index e23d9997..2bae6418 100644
--- a/install/vst-install-amazon.sh
+++ b/install/vst-install-amazon.sh
@@ -1026,7 +1026,7 @@ if [ "$mysql" = 'yes' ]; then
         cp -f $vestacp/pma/phpMyAdmin.conf /etc/httpd/conf.d/
     fi
     cp -f $vestacp/pma/config.inc.conf /etc/phpMyAdmin/config.inc.php
-    sed -i "s/%blowfish_secret%/$blowfish_secret/g" /etc/phpMyAdmin/config.inc.php
+    sed -i "s#%blowfish_secret#$blowfish_secret#g" /etc/phpMyAdmin/config.inc.php
 fi
 
 

From 891dac76fcfff724909bebf8062c23b278a68998 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 21:26:05 +0100
Subject: [PATCH 0415/2300] Update vst-install-rhel.sh

---
 install/vst-install-rhel.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index 7adee764..f6147bbc 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -1046,7 +1046,7 @@ if [ "$mysql" = 'yes' ]; then
         cp -f $vestacp/pma/phpMyAdmin.conf /etc/httpd/conf.d/
     fi
     cp -f $vestacp/pma/config.inc.conf /etc/phpMyAdmin/config.inc.php
-    sed -i "s/%blowfish_secret%/$blowfish_secret/g" /etc/phpMyAdmin/config.inc.php
+    sed -i "s#%blowfish_secret#$blowfish_secret#g" /etc/phpMyAdmin/config.inc.php
 fi
 
 

From f534560782636691771e7f07756512c243a27bac Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 22 Mar 2019 01:09:39 +0100
Subject: [PATCH 0416/2300] Allow custom $MAX_DBUSER_LEN

echo "MAX_DBUSER_LEN=80" >> /usr/local/vesta/conf/vesta.conf
---
 func/main.sh | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/func/main.sh b/func/main.sh
index ded0eb4b..464b9727 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -650,8 +650,12 @@ is_date_format_valid() {
 # Database user validator
 is_dbuser_format_valid() {
     exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
-    if [ 17 -le ${#1} ]; then
-        check_result $E_INVALID "mysql username can be up to 16 characters long"
+    my_max_dbuser_len=16
+    if [ ! -z "$MAX_DBUSER_LEN" ]; then
+        my_max_dbuser_len=$MAX_DBUSER_LEN
+    fi    
+    if [ ${#1} -ge $my_max_dbuser_len ]; then
+        check_result $E_INVALID "mysql username can be up to $my_max_dbuser_len characters long"
     fi
     if [[ "$1" =~ $exclude ]]; then
         check_result $E_INVALID "invalid $2 format :: $1"

From 2210f52b7c2fa9e2b2b52f556d8d3317d7eac636 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 22 Mar 2019 01:25:19 +0100
Subject: [PATCH 0417/2300] Include MAX_DBUSER_LEN in v-list-sys-config

---
 bin/v-list-sys-config | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/v-list-sys-config b/bin/v-list-sys-config
index 879c3ab3..52607672 100755
--- a/bin/v-list-sys-config
+++ b/bin/v-list-sys-config
@@ -51,7 +51,8 @@ json_list() {
         "MAIL_URL": "'$MAIL_URL'",
         "DB_PMA_URL": "'$DB_PMA_URL'",
         "DB_PGA_URL": "'$DB_PGA_URL'",
-        "SOFTACULOUS": "'$SOFTACULOUS'"
+        "SOFTACULOUS": "'$SOFTACULOUS'",
+        "MAX_DBUSER_LEN": "'$MAX_DBUSER_LEN'"
     }
 }'
 }

From 8f03540a1bcdfccacb0492cc2a1b20bd5099cba7 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 22 Mar 2019 01:27:29 +0100
Subject: [PATCH 0418/2300] Adding MAX_DBUSER_LEN in add_db.html template

---
 web/templates/admin/add_db.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/add_db.html b/web/templates/admin/add_db.html
index 74903241..7b180894 100644
--- a/web/templates/admin/add_db.html
+++ b/web/templates/admin/add_db.html
@@ -61,7 +61,7 @@
                                     <?php
                                         print __('User');
                                         // if (is_it_mysql_or_mariadb()=='mysql')
-                                        echo "&nbsp;&nbsp;&nbsp;&nbsp;<em><small>(".__('maximum characters length, including prefix', 16).")</small></em>";
+                                        echo "&nbsp;&nbsp;&nbsp;&nbsp;<em><small>(".__('maximum characters length, including prefix', $_SESSION['MAX_DBUSER_LEN']).")</small></em>";
                                     ?>
                                 </td>
                             </tr>

From a420465b39c6fd8e3cd417dab3bec7eef4b07d2d Mon Sep 17 00:00:00 2001
From: Olgerdas <dreiggy@users.noreply.github.com>
Date: Wed, 27 Mar 2019 19:35:10 +0200
Subject: [PATCH 0419/2300] Remove \n from dkim txt output

Some DNS providers (like cloudflare) do not allow in dkim txt record \n char. Fix is removing new line symbols (\n).
---
 bin/v-list-mail-domain-dkim-dns | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-list-mail-domain-dkim-dns b/bin/v-list-mail-domain-dkim-dns
index d7b3e2a6..8623089e 100755
--- a/bin/v-list-mail-domain-dkim-dns
+++ b/bin/v-list-mail-domain-dkim-dns
@@ -67,7 +67,7 @@ is_object_valid 'mail' 'DOMAIN' "$domain"
 
 # Parsing domain keys
 if [ -e "$USER_DATA/mail/$domain.pub" ]; then
-    pub=$(cat $USER_DATA/mail/$domain.pub |grep -v "KEY-----")
+    pub=$(cat $USER_DATA/mail/$domain.pub |grep -v "KEY-----" |tr -d "\n\r")
     pub=$(echo "$pub" |sed ':a;N;$!ba;s/\n/\\n/g')
 else
     pub="DKIM-SUPPORT-IS-NOT-ACTIVATED"

From cd3e1f95856963a5882bc4056f3b3e7fc2dfb72e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 28 Mar 2019 14:28:48 +0100
Subject: [PATCH 0420/2300] Requested backups should also wait for night

---
 func/main.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/func/main.sh b/func/main.sh
index 464b9727..3d731e11 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -967,8 +967,8 @@ wait_for_backup_if_it_is_not_time_for_backup() {
 
     # block backup if current hour is after 6 AM
     WAIT_LOOP_ENTERED=0
-    if pgrep -x "v-backup-users" > /dev/null
-    then
+    # if pgrep -x "v-backup-users" > /dev/null
+    # then
         hour=$(date +"%H");
         while [ "$hour" -gt "6" ] || [ "$hour" -lt "1" ]; do
             # if [ "$WAIT_LOOP_ENTERED" -eq 0 ]; then
@@ -985,5 +985,5 @@ wait_for_backup_if_it_is_not_time_for_backup() {
             sleep 300
             hour=$(date +"%H");
         done
-    fi
+    # fi
 }

From a181433231553ad101ee2ddd6e4b1eb2bbaa6f57 Mon Sep 17 00:00:00 2001
From: myrevery <16082142+myrevery@users.noreply.github.com>
Date: Sun, 31 Mar 2019 05:50:02 +0800
Subject: [PATCH 0421/2300] Update cn.php

Refine some details.
Format code and translate new keywords.
---
 web/inc/i18n/cn.php | 662 ++++++++++++++++++++++----------------------
 1 file changed, 331 insertions(+), 331 deletions(-)

diff --git a/web/inc/i18n/cn.php b/web/inc/i18n/cn.php
index d2c96311..6b6b9d28 100644
--- a/web/inc/i18n/cn.php
+++ b/web/inc/i18n/cn.php
@@ -10,104 +10,104 @@
  */
 
 $LANG['cn'] = array(
-    'Packages'  => '用户方案',
-    'IP'  => 'IP 地址',
-    'Graphs'  => '资源图表',
-    'Statistics'  => '统计信息',
-    'Log'  => '系统日志',
-    'Server'  => '服务器',
-    'Services'  => '系统服务',
+    'Packages' => '用户方案',
+    'IP' => 'IP 地址',
+    'Graphs' => '资源图表',
+    'Statistics' => '统计信息',
+    'Log' => '系统日志',
+    'Server' => '服务器',
+    'Services' => '系统服务',
     'Firewall' => '防火墙',
-    'Updates'  => '系统更新',
-    'Log in'  => '登录',
-    'Log out'  => '登出',
+    'Updates' => '系统更新',
+    'Log in' => '登录',
+    'Log out' => '登出',
 
-    'USER'  => '用户账户',
-    'WEB'  => 'Web 服务',
-    'DNS'  => 'DNS 服务',
-    'MAIL'  => '邮箱服务',
-    'DB'  => '数据库',
-    'CRON'  => '定时任务',
-    'BACKUP'  => '数据备份',
+    'USER' => '用户账户',
+    'WEB' => 'Web 服务',
+    'DNS' => 'DNS 服务',
+    'MAIL' => '邮箱服务',
+    'DB' => '数据库',
+    'CRON' => '定时任务',
+    'BACKUP' => '数据备份',
 
-    'LOGIN'  => '登录',
-    'RESET PASSWORD'  => '重置密码',
-    'SEARCH'  => '搜索',
-    'PACKAGE'  => '用户方案',
-    'RRD'  => '资源图表',
-    'STATS'  => '统计信息',
-    'LOG'  => '系统日志',
-    'UPDATES'  => '系统更新',
-    'FIREWALL'  => '防火墙',
-    'SERVER'  => '服务器',
-    'MEMORY'  => '内存',
-    'DISK'  => '磁盘',
-    'NETWORK'  => '网络',
-    'Web Log Manager'  => 'Web 日志管理',
+    'LOGIN' => '登录',
+    'RESET PASSWORD' => '重置密码',
+    'SEARCH' => '搜索',
+    'PACKAGE' => '用户方案',
+    'RRD' => '资源图表',
+    'STATS' => '统计信息',
+    'LOG' => '系统日志',
+    'UPDATES' => '系统更新',
+    'FIREWALL' => '防火墙',
+    'SERVER' => '服务器',
+    'MEMORY' => '内存',
+    'DISK' => '磁盘',
+    'NETWORK' => '网络',
+    'Web Log Manager' => 'Web 日志管理',
 
-    'no notifications'  => '没有通知',
+    'no notifications' => '没有通知',
 
-    'Add User'  => '添加用户',
-    'Add Domain'  => '添加域名',
+    'Add User' => '添加用户',
+    'Add Domain' => '添加域名',
     'Add Web Domain' => '添加网站域名',
-    'Add DNS Domain'  => '添加DNS域名',
-    'Add DNS Record'  => '添加DNS记录',
-    'Add Mail Domain'  => '添加邮箱域名',
-    'Add Mail Account'  => '添加邮箱账户',
-    'Add Database'  => '添加数据库',
-    'Add Cron Job'  => '添加定时任务',
-    'Create Backup'  => '创建备份',
-    'Configure'  => '配置',
-    'Restore All'  => '全部恢复',
-    'Add Package'  => '添加方案',
-    'Add IP'  => '添加IP地址',
+    'Add DNS Domain' => '添加DNS域名',
+    'Add DNS Record' => '添加DNS记录',
+    'Add Mail Domain' => '添加邮箱域名',
+    'Add Mail Account' => '添加邮箱账户',
+    'Add Database' => '添加数据库',
+    'Add Cron Job' => '添加定时任务',
+    'Create Backup' => '创建备份',
+    'Configure' => '配置',
+    'Restore All' => '全部恢复',
+    'Add Package' => '添加方案',
+    'Add IP' => '添加IP地址',
     'Add Rule' => '添加规则',
     'Ban IP Address' => '封锁IP地址',
-    'Search'  => '搜索',
+    'Search' => '搜索',
     'Add one more FTP Account' => '增加一个FTP账户',
-    'Overall Statistics'  => '整体统计信息',
-    'Daily'  => '按天',
-    'Weekly'  => '按周',
-    'Monthly'  => '按月',
-    'Yearly'  => '按年',
-    'Add'  => '添加',
-    'Back'  => '返回',
-    'Save'  => '保存',
-    'Submit'  => '提交',
+    'Overall Statistics' => '整体统计信息',
+    'Daily' => '按天',
+    'Weekly' => '按周',
+    'Monthly' => '按月',
+    'Yearly' => '按年',
+    'Add' => '添加',
+    'Back' => '返回',
+    'Save' => '保存',
+    'Submit' => '提交',
 
-    'toggle all'  => '批量操作',
-    'apply to selected'  => '应用于选中项的操作',
-    'rebuild'  => '重建',
-    'rebuild web'  => '重建网站',
-    'rebuild dns'  => '重建DNS',
-    'rebuild mail'  => '重建邮箱',
-    'rebuild db'  => '重建数据库',
-    'rebuild cron'  => '重建定时任务',
-    'update counters'  => '更新计数器',
-    'suspend'  => '暂停',
-    'unsuspend'  => '解除暂停',
-    'delete'  => '删除',
-    'show per user'  => '按用户显示',
-    'login as'  => '登录至账户',
-    'logout'  => '登出',
-    'edit'  => '编辑',
-    'open webstats'  => '打开网站统计',
-    'view logs'  => '查看日志',
-    'list records'  => '列出 %s 条记录',
-    'add record'  => '添加记录',
-    'list accounts'  => '列出 %s 个账户',
-    'add account'  => '添加账户',
-    'open webmail'  => '打开网页邮箱',
+    'toggle all' => '批量操作',
+    'apply to selected' => '应用于选中项的操作',
+    'rebuild' => '重建',
+    'rebuild web' => '重建网站',
+    'rebuild dns' => '重建DNS',
+    'rebuild mail' => '重建邮箱',
+    'rebuild db' => '重建数据库',
+    'rebuild cron' => '重建定时任务',
+    'update counters' => '更新计数器',
+    'suspend' => '暂停',
+    'unsuspend' => '解除暂停',
+    'delete' => '删除',
+    'show per user' => '按用户显示',
+    'login as' => '登录至账户',
+    'logout' => '登出',
+    'edit' => '编辑',
+    'open webstats' => '打开网站统计',
+    'view logs' => '查看日志',
+    'list records' => '列出 %s 条记录',
+    'add record' => '添加记录',
+    'list accounts' => '列出 %s 个账户',
+    'add account' => '添加账户',
+    'open webmail' => '打开网页邮箱',
     'list fail2ban' => 'Fail2ban 封锁名单',
-    'open %s'  => '打开 %s',
-    'download'  => '下载',
-    'restore'  => '恢复',
-    'configure restore settings'  => '配置恢复',
-    'stop'  => '停止',
-    'start'  => '启动',
-    'restart'  => '重新启动',
-    'update'  => '更新',
-    'generate'  => '生成',
+    'open %s' => '打开 %s',
+    'download' => '下载',
+    'restore' => '恢复',
+    'configure restore settings' => '配置恢复',
+    'stop' => '停止',
+    'start' => '启动',
+    'restart' => '重新启动',
+    'update' => '更新',
+    'generate' => '生成',
     'Generate CSR' => '生成CSR',
     'reread IP' => '重新读取IP',
     'enable autoupdate' => '启用自动更新',
@@ -116,41 +116,41 @@ $LANG['cn'] = array(
     'turn off notifications' => '停用通知',
     'configure' => '配置',
 
-    'Adding User'  => '添加用户',
-    'Editing User'  => '编辑用户',
-    'Adding Domain'  => '添加域名',
-    'Editing Domain'  => '编辑域名',
-    'Adding DNS Domain'  => '添加DNS域名',
-    'Editing DNS Domain'  => '编辑DNS域名',
-    'Adding DNS Record'  => '添加DNS记录',
-    'Editing DNS Record'  => '编辑DNS记录',
-    'Adding Mail Domain'  => '添加邮箱域名',
-    'Editing Mail Domain'  => '编辑邮箱域名',
-    'Adding Mail Account'  => '添加邮箱账户',
-    'Editing Mail Account'  => '编辑邮箱账户',
-    'Adding database'  => '添加数据库',
-    'Editing Cron Job'  => '编辑定时任务',
-    'Adding Cron Job'  => '添加定时任务',
-    'Editing Database'  => '编辑数据库',
-    'Adding Package'  => '添加方案',
-    'Editing Package'  => '编辑方案',
-    'Adding IP address'  => '添加IP地址',
-    'Editing IP Address'  => '编辑IP地址',
+    'Adding User' => '添加用户',
+    'Editing User' => '编辑用户',
+    'Adding Domain' => '添加域名',
+    'Editing Domain' => '编辑域名',
+    'Adding DNS Domain' => '添加DNS域名',
+    'Editing DNS Domain' => '编辑DNS域名',
+    'Adding DNS Record' => '添加DNS记录',
+    'Editing DNS Record' => '编辑DNS记录',
+    'Adding Mail Domain' => '添加邮箱域名',
+    'Editing Mail Domain' => '编辑邮箱域名',
+    'Adding Mail Account' => '添加邮箱账户',
+    'Editing Mail Account' => '编辑邮箱账户',
+    'Adding database' => '添加数据库',
+    'Editing Cron Job' => '编辑定时任务',
+    'Adding Cron Job' => '添加定时任务',
+    'Editing Database' => '编辑数据库',
+    'Adding Package' => '添加方案',
+    'Editing Package' => '编辑方案',
+    'Adding IP address' => '添加IP地址',
+    'Editing IP Address' => '编辑IP地址',
     'Editing Backup Exclusions' => '配置需排除备份的项目',
     'Generating CSR' => '生成CSR',
-    'Listing'  => '列出',
-    'Search Results'  => '搜索结果',
+    'Listing' => '列出',
+    'Search Results' => '搜索结果',
     'Adding Firewall Rule' => '添加防火墙规则',
     'Editing Firewall Rule' => '编辑防火墙规则',
     'Adding IP Address to Banlist' => '添加IP至封锁名单',
 
-    'active'  => '正常',
-    'spnd'  => '暂停',
-    'suspended'  => '已暂停',
-    'running'  => '运行中',
-    'stopped'  => '已停止',
-    'outdated'  => '可升级新版本',
-    'updated'  => '已是最新版本',
+    'active' => '正常',
+    'spnd' => '暂停',
+    'suspended' => '已暂停',
+    'running' => '运行中',
+    'stopped' => '已停止',
+    'outdated' => '可升级新版本',
+    'updated' => '已是最新版本',
 
     'yes' => '是',
     'no' => '否',
@@ -185,13 +185,13 @@ $LANG['cn'] = array(
     'per domain' => '每域名',
     'DNS Domains' => 'DNS域名',
     'DNS domains' => 'DNS域名',
-    'DNS records'  => 'DNS记录',
+    'DNS records' => 'DNS记录',
     'Name Servers' => 'DNS服务器',
     'Mail Domains' => '邮箱域名',
     'Mail Accounts' => '邮箱账户',
     'Cron Jobs' => '定时任务',
     'SSH Access' => 'SSH权限',
-    'IP Address'  => 'IP地址',
+    'IP Address' => 'IP地址',
     'IP Addresses' => 'IP地址',
     'Backups' => '备份',
     'Backup System' => '备份系统',
@@ -199,19 +199,19 @@ $LANG['cn'] = array(
     'template' => '模板',
     'SSL Support' => '启用SSL',
     'SSL Home Directory' => 'SSL站点主目录',
-    'Lets Encrypt Support'  => '采用 Let&#39s Encrypt',
-    'Lets Encrypt'  => 'Let&#39s Encrypt',
+    'Lets Encrypt Support' => '采用 Let&#39s Encrypt',
+    'Lets Encrypt' => 'Let&#39s Encrypt',
     'Your certificate will be automatically issued in 5 minutes' => '证书将在5分钟内自动完成签发',
     'Proxy Support' => '反向代理',
     'Proxy Extensions' => '需代理的文件扩展名',
     'Web Statistics' => '网站统计',
     'Additional FTP Account' => '额外的FTP账户',
-    'Path'  => '路径',
+    'Path' => '路径',
     'SOA' => 'SOA',
     'TTL' => 'TTL',
     'Expire' => '过期',
     'Records' => '记录',
-    'Serial'  => '序号',
+    'Serial' => '序号',
     'Catchall email' => '未知收件人聚合邮箱',
     'AntiVirus Support' => '防病毒支持',
     'AntiSpam Support' => '防垃圾邮件支持',
@@ -221,16 +221,16 @@ $LANG['cn'] = array(
     'Autoreply' => '自动回复',
     'Forward to' => '转发到',
     'Do not store forwarded mail' => '不保留已转发的邮件',
-    'IMAP hostname'  => 'IMAP 服务器',
-    'IMAP port'  => 'IMAP 端口',
-    'IMAP security'  => 'IMAP 安全性',
-    'IMAP auth method'  => 'IMAP 身份验证',
-    'SMTP hostname'  => 'SMTP 服务器',
-    'SMTP port'  => 'SMTP 端口',
-    'SMTP security'  => 'SMTP 安全性',
-    'SMTP auth method'  => 'SMTP 身份验证',
-    'STARTTLS'  => 'STARTTLS',
-    'Normal password'  => '普通密码',
+    'IMAP hostname' => 'IMAP 服务器',
+    'IMAP port' => 'IMAP 端口',
+    'IMAP security' => 'IMAP 安全类型',
+    'IMAP auth method' => 'IMAP 身份验证',
+    'SMTP hostname' => 'SMTP 服务器',
+    'SMTP port' => 'SMTP 端口',
+    'SMTP security' => 'SMTP 安全类型',
+    'SMTP auth method' => 'SMTP 身份验证',
+    'STARTTLS' => 'STARTTLS',
+    'Normal password' => '普通密码',
     'database' => '数据库',
     'User' => '用户名称',
     'Host' => '主机',
@@ -249,137 +249,137 @@ $LANG['cn'] = array(
     'shared' => '共享',
     'dedicated' => '独立',
     'Owner' => '归属',
-    'Users'  => '用户',
-    'Load Average'  => '平均负载',
-    'Memory Usage'  => '内存使用情况',
-    'APACHE2 Usage'  => 'Apache2 使用情况',
-    'HTTPD Usage'  => 'HTTPD 使用情况',
-    'NGINX Usage'  => 'NGINX 使用情况',
-    'MySQL Usage on localhost'  => 'MySQL 使用情况 (localhost)',
-    'PostgreSQL Usage on localhost'  => 'PostgreSQL 使用情况 (localhost)',
-    'Bandwidth Usage eth0'  => '网络使用情况 (eth0)',
-    'Bandwidth Usage eth1'  => '网络使用情况 (eth1)',
-    'Bandwidth Usage venet0'  => '网络使用情况 (venet0)',
-    'Bandwidth Usage venet1'  => '网络使用情况 (venet1)',
-    'Exim Usage'  => 'Exim 使用情况',
-    'FTP Usage'  => 'FTP 使用情况',
-    'SSH Usage'  => 'SSH 使用情况',
-    'reverse proxy'  => '反向代理',
-    'web server'  => 'Web服务',
+    'Users' => '用户',
+    'Load Average' => '平均负载',
+    'Memory Usage' => '内存使用情况',
+    'APACHE2 Usage' => 'Apache2 使用情况',
+    'HTTPD Usage' => 'HTTPD 使用情况',
+    'NGINX Usage' => 'NGINX 使用情况',
+    'MySQL Usage on localhost' => 'MySQL 使用情况 (localhost)',
+    'PostgreSQL Usage on localhost' => 'PostgreSQL 使用情况 (localhost)',
+    'Bandwidth Usage eth0' => '网络使用情况 (eth0)',
+    'Bandwidth Usage eth1' => '网络使用情况 (eth1)',
+    'Bandwidth Usage venet0' => '网络使用情况 (venet0)',
+    'Bandwidth Usage venet1' => '网络使用情况 (venet1)',
+    'Exim Usage' => 'Exim 使用情况',
+    'FTP Usage' => 'FTP 使用情况',
+    'SSH Usage' => 'SSH 使用情况',
+    'reverse proxy' => '反向代理',
+    'web server' => 'Web服务',
     'backend server' => '后端服务', //New Keyword for PHP-FPM in SERVER page.
-    'dns server'  => 'DNS服务',
-    'mail server'  => '邮箱服务',
-    'pop/imap server'  => 'POP/IMAP服务',
-    'email antivirus'  => '邮箱防病毒',
-    'email antispam'  => '防垃圾邮件',
-    'database server'  => '数据库服务',
-    'ftp server'  => 'FTP服务',
-    'job scheduler'  => '执行定时任务',
-    'firewall'  => '防火墙服务',
-    'brute-force monitor'  => '防范暴力攻击',
-    'CPU'  => 'CPU',
-    'Memory'  => '内存',
-    'Uptime'  => '已运行时间',
-    'core package'  => '核心系统',
-    'php interpreter'  => 'PHP解释器',
-    'internal web server'  => '内部Web服务',
-    'Version'  => '版本',
-    'Release'  => '发布号',
-    'Architecture'  => '架构',
-    'Object'  => '对象',
-    'Username'  => '用户名称',
-    'Password'  => '密码',
-    'Email'  => '电子邮箱',
-    'Package'  => '方案',
-    'Language'  => '语言',
-    'First Name'  => '名字',
-    'Last Name'  => '姓氏',
-    'Send login credentials to email address'  => '将登录信息发送到邮箱',
-    'Default Template'  => '默认模板',
-    'Default Name Servers'  => '默认DNS服务器',
-    'Domain'  => '域名',
-    'DNS Support'  => 'DNS支持',
-    'Mail Support'  => '邮箱支持',
-    'Advanced options'  => '高级选项',
-    'Basic options'  => '基本选项',
-    'Aliases'  => '别名',
-    'SSL Certificate'  => 'SSL证书',
-    'SSL Key'  => 'SSL密钥',
-    'SSL Certificate Authority / Intermediate'  => 'CA证书或中级证书',
+    'dns server' => 'DNS服务',
+    'mail server' => '邮箱服务',
+    'pop/imap server' => 'POP/IMAP服务',
+    'email antivirus' => '邮箱防病毒',
+    'email antispam' => '防垃圾邮件',
+    'database server' => '数据库服务',
+    'ftp server' => 'FTP服务',
+    'job scheduler' => '执行定时任务',
+    'firewall' => '防火墙服务',
+    'brute-force monitor' => '防范暴力攻击',
+    'CPU' => 'CPU',
+    'Memory' => '内存',
+    'Uptime' => '已运行时间',
+    'core package' => '核心系统',
+    'php interpreter' => 'PHP解释器',
+    'internal web server' => '内部Web服务',
+    'Version' => '版本',
+    'Release' => '发布号',
+    'Architecture' => '架构',
+    'Object' => '对象',
+    'Username' => '用户名称',
+    'Password' => '密码',
+    'Email' => '电子邮箱',
+    'Package' => '方案',
+    'Language' => '语言',
+    'First Name' => '名字',
+    'Last Name' => '姓氏',
+    'Send login credentials to email address' => '将登录信息发送到邮箱',
+    'Default Template' => '默认模板',
+    'Default Name Servers' => '默认DNS服务器',
+    'Domain' => '域名',
+    'DNS Support' => 'DNS支持',
+    'Mail Support' => '邮箱支持',
+    'Advanced options' => '高级选项',
+    'Basic options' => '基本选项',
+    'Aliases' => '别名',
+    'SSL Certificate' => 'SSL证书',
+    'SSL Key' => 'SSL密钥',
+    'SSL Certificate Authority / Intermediate' => 'CA证书或中级证书',
     'SSL CSR' => 'SSL CSR',
-    'optional'  => '可选',
+    'optional' => '可选',
     'internal' => '内部',
-    'Statistics Authorization'  => '统计授权',
-    'Statistics Auth'  => '统计验证',
-    'Account'  => '账户',
-    'Prefix will be automaticaly added to username'  => '用户名称将会自动添加 %s 前缀',
-    'Send FTP credentials to email'  => '将FTP登录信息发送到邮箱',
-    'Expiration Date'  => '到期日期',
-    'YYYY-MM-DD'  => 'YYYY-MM-DD',
-    'Name servers'  => 'DNS服务器',
-    'Record'  => '记录',
-    'IP or Value'  => 'IP或值',
-    'Priority'  => '优先级',
+    'Statistics Authorization' => '统计授权',
+    'Statistics Auth' => '统计验证',
+    'Account' => '账户',
+    'Prefix will be automaticaly added to username' => '用户名称将会自动添加 %s 前缀',
+    'Send FTP credentials to email' => '将FTP登录信息发送到邮箱',
+    'Expiration Date' => '到期日期',
+    'YYYY-MM-DD' => 'YYYY-MM-DD',
+    'Name servers' => 'DNS服务器',
+    'Record' => '记录',
+    'IP or Value' => 'IP或值',
+    'Priority' => '优先级',
     'Record Number' => '记录编号',
-    'in megabytes'  => '以MB为单位',
-    'Message'  => '信息',
-    'use local-part'  => '采用 local-part',
-    'one or more email addresses'  => '一个或更多邮箱地址',
-    'Prefix will be automaticaly added to database name and database user'  => '数据库名及用户名将会自动添加 %s 前缀',
-    'Database'  => '数据库名称',
-    'Type'  => '类型',
-    'Minute'  => '分',
-    'Command'  => '指令',
-    'Package Name'  => '方案名称',
-    'Netmask'  => '子网掩码',
-    'Interface'  => '网络接口',
-    'Shared'  => '共享',
-    'Assigned user'  => '指定用户',
-    'Assigned domain'  => '指定域名',
+    'in megabytes' => '以MB为单位',
+    'Message' => '信息',
+    'use local-part' => '使用域内部分',
+    'one or more email addresses' => '一个或更多邮箱地址',
+    'Prefix will be automaticaly added to database name and database user' => '数据库名及用户名将会自动添加 %s 前缀',
+    'Database' => '数据库名称',
+    'Type' => '类型',
+    'Minute' => '分',
+    'Command' => '指令',
+    'Package Name' => '方案名称',
+    'Netmask' => '子网掩码',
+    'Interface' => '网络接口',
+    'Shared' => '共享',
+    'Assigned user' => '指定用户',
+    'Assigned domain' => '指定域名',
     'NAT IP association' => 'NAT IP 关联',
-    'shell'  => 'shell',
-    'web domains'  => '网站域名',
-    'web aliases'  => '网站别名',
-    'dns records'  => 'DNS记录',
-    'mail domains'  => '邮箱域名',
-    'mail accounts'  => '邮箱账户',
-    'accounts'  => '账户',
-    'databases'  => '数据库',
-    'cron jobs'  => '定时任务',
-    'backups'  => '备份',
-    'quota'  => '配额',
-    'day of week'  => '星期几',
-    'cmd'  => '指令',
-    'users'  => '用户',
-    'domains'  => '域名',
-    'aliases'  => '别名',
-    'records'  => '记录',
-    'jobs'  => '任务',
-    'username'  => '用户名称',
-    'password'  => '密码',
-    'type'  => '类型',
-    'charset'  => '编码',
-    'domain'  => '域名',
-    'ip'  => 'IP',
-    'ip address'  => 'IP地址',
-    'IP address'  => 'IP地址',
-    'netmask'  => '子网掩码',
-    'interface'  => '网络接口',
-    'assigned user'  => '指定用户',
-    'ns1'  => 'ns1',
-    'ns2'  => 'ns2',
-    'user'  => '用户',
-    'email'  => '邮箱',
-    'first name'  => '名字',
-    'last name'  => '姓氏',
-    'account'  => '账户',
-    'ssl certificate'  => 'SSL证书',
-    'ssl key'  => 'SSL密钥',
-    'stats user password'  => '统计用户账户密码',
-    'stats username'  => '统计用户名称',
-    'stats password'  => '统计密码',
-    'ftp user password'  => 'FTP用户账户密码',
-    'ftp user'  => 'FTP用户',
+    'shell' => 'shell',
+    'web domains' => '网站域名',
+    'web aliases' => '网站别名',
+    'dns records' => 'DNS记录',
+    'mail domains' => '邮箱域名',
+    'mail accounts' => '邮箱账户',
+    'accounts' => '账户',
+    'databases' => '数据库',
+    'cron jobs' => '定时任务',
+    'backups' => '备份',
+    'quota' => '配额',
+    'day of week' => '星期几',
+    'cmd' => '指令',
+    'users' => '用户',
+    'domains' => '域名',
+    'aliases' => '别名',
+    'records' => '记录',
+    'jobs' => '任务',
+    'username' => '用户名称',
+    'password' => '密码',
+    'type' => '类型',
+    'charset' => '编码',
+    'domain' => '域名',
+    'ip' => 'IP',
+    'ip address' => 'IP地址',
+    'IP address' => 'IP地址',
+    'netmask' => '子网掩码',
+    'interface' => '网络接口',
+    'assigned user' => '指定用户',
+    'ns1' => 'ns1',
+    'ns2' => 'ns2',
+    'user' => '用户',
+    'email' => '邮箱',
+    'first name' => '名字',
+    'last name' => '姓氏',
+    'account' => '账户',
+    'ssl certificate' => 'SSL证书',
+    'ssl key' => 'SSL密钥',
+    'stats user password' => '统计用户账户密码',
+    'stats username' => '统计用户名称',
+    'stats password' => '统计密码',
+    'ftp user password' => 'FTP用户账户密码',
+    'ftp user' => 'FTP用户',
     'Last 70 lines of %s.%s.log' => '%s.%s.log 的最后 70 行',
     'AccessLog' => '访问日志',
     'ErrorLog' => '错误日志',
@@ -417,48 +417,48 @@ $LANG['cn'] = array(
     'cron' => '任务',
     'user dir' => '用户目录',
 
-    'unlimited'  => '无限',
-    '1 account'  => '1 个账户',
-    '%s accounts'  => '%s 个账户',
-    '1 domain'  => '1 个域名',
-    '%s domains'  => '%s 个域名',
-    '1 record'  => '1 条记录',
-    '%s records'  => '%s 条记录',
-    '1 mail account'  => '1 个邮箱账户',
-    '%s mail accounts'  => '%s 个邮箱账户',
-    '1 database'  => '1 个数据库',
-    '%s databases'  => '%s 个数据库',
-    '1 cron job'  => '1 个任务',
-    '%s cron jobs'  => '%s 个任务',
-    '1 archive'  => '1 个存档',
-    '%s archives'  => '%s 个存档',
-    '1 item'  => '1 个项目',
-    '%s items'  => '%s 个项目',
-    '1 package'  => '1 个方案',
-    '%s packages'  => '%s 个方案',
-    '1 IP address'  => '1 个IP地址',
-    '%s IP addresses'  => '%s 个IP地址',
-    '1 month'  => '1 个月',
-    '%s months'  => '%s 个月',
-    '1 log record'  => '1 条日志记录',
-    '%s log records'  => '%s 条日志记录',
-    '1 object'  => '1 个对象',
-    '%s objects'  => '%s 个对象',
+    'unlimited' => '无限',
+    '1 account' => '1 个账户',
+    '%s accounts' => '%s 个账户',
+    '1 domain' => '1 个域名',
+    '%s domains' => '%s 个域名',
+    '1 record' => '1 条记录',
+    '%s records' => '%s 条记录',
+    '1 mail account' => '1 个邮箱账户',
+    '%s mail accounts' => '%s 个邮箱账户',
+    '1 database' => '1 个数据库',
+    '%s databases' => '%s 个数据库',
+    '1 cron job' => '1 个任务',
+    '%s cron jobs' => '%s 个任务',
+    '1 archive' => '1 个存档',
+    '%s archives' => '%s 个存档',
+    '1 item' => '1 个项目',
+    '%s items' => '%s 个项目',
+    '1 package' => '1 个方案',
+    '%s packages' => '%s 个方案',
+    '1 IP address' => '1 个IP地址',
+    '%s IP addresses' => '%s 个IP地址',
+    '1 month' => '1 个月',
+    '%s months' => '%s 个月',
+    '1 log record' => '1 条日志记录',
+    '%s log records' => '%s 条日志记录',
+    '1 object' => '1 个对象',
+    '%s objects' => '%s 个对象',
     'no exclusions' => '没有被排除的项目',
     '1 rule' => '1 条规则',
     '%s rules' => '%s 条规则',
     'There are no currently banned IP' => '目前没有被封锁的IP地址',
 
-    'USER_CREATED_OK'  => '用户 <a href="/edit/user/?user=%s"><b>%s</b></a> 已添加成功',
-    'WEB_DOMAIN_CREATED_OK'  => '网站域名 <a href="/edit/web/?domain=%s"><b>%s</b></a> 已添加成功',
-    'DNS_DOMAIN_CREATED_OK'  => 'DNS域名 <a href="/list/dns/?domain=%s"><b>%s</b></a> 已添加成功',
-    'DNS_RECORD_CREATED_OK'  => '记录 <b>%s.%s</b> 已添加成功',
-    'MAIL_DOMAIN_CREATED_OK'  => '邮箱域名 <a href="/list/mail/?domain=%s"><b>%s</b></a> 已添加成功',
-    'MAIL_ACCOUNT_CREATED_OK'  => '邮箱账户 <a href="/edit/mail/?account=%s&domain=%s"><b>%s@%s</b></a> 已添加成功',
-    'DATABASE_CREATED_OK'  => '数据库 <a href="/edit/db/?database=%s"><b>%s</b></a> 已添加成功',
-    'CRON_CREATED_OK'  => '定时任务已添加成功',
-    'IP_CREATED_OK'  => 'IP地址 <a href="/edit/ip/?ip=%s"><b>%s</b></a> 已添加成功',
-    'PACKAGE_CREATED_OK'  => '方案 <a href="/edit/package/?package=%s"><b>%s</b></a> 已添加成功',
+    'USER_CREATED_OK' => '用户 <a href="/edit/user/?user=%s"><b>%s</b></a> 已添加成功',
+    'WEB_DOMAIN_CREATED_OK' => '网站域名 <a href="/edit/web/?domain=%s"><b>%s</b></a> 已添加成功',
+    'DNS_DOMAIN_CREATED_OK' => 'DNS域名 <a href="/list/dns/?domain=%s"><b>%s</b></a> 已添加成功',
+    'DNS_RECORD_CREATED_OK' => '记录 <b>%s.%s</b> 已添加成功',
+    'MAIL_DOMAIN_CREATED_OK' => '邮箱域名 <a href="/list/mail/?domain=%s"><b>%s</b></a> 已添加成功',
+    'MAIL_ACCOUNT_CREATED_OK' => '邮箱账户 <a href="/edit/mail/?account=%s&domain=%s"><b>%s@%s</b></a> 已添加成功',
+    'DATABASE_CREATED_OK' => '数据库 <a href="/edit/db/?database=%s"><b>%s</b></a> 已添加成功',
+    'CRON_CREATED_OK' => '定时任务已添加成功',
+    'IP_CREATED_OK' => 'IP地址 <a href="/edit/ip/?ip=%s"><b>%s</b></a> 已添加成功',
+    'PACKAGE_CREATED_OK' => '方案 <a href="/edit/package/?package=%s"><b>%s</b></a> 已添加成功',
     'SSL_GENERATED_OK' => 'SSL证书已生成成功',
     'RULE_CREATED_OK' => '规则已创建成功',
     'BANLIST_CREATED_OK' => 'IP地址已封锁成功',
@@ -466,8 +466,8 @@ $LANG['cn'] = array(
     'Autoupdate has been successfully disabled' => '自动更新已成功关闭',
     'Cronjob email reporting has been successfully enabled' => '定时任务的电子邮件报告已成功启用',
     'Cronjob email reporting has been successfully disabled' => '定时任务的电子邮件报告已成功关闭',
-    'Changes has been saved.'  => '已保存更改',
-    'Confirmation'  => '确认',
+    'Changes has been saved.' => '已保存更改',
+    'Confirmation' => '确认',
     'DELETE_USER_CONFIRMATION' => '确定要删除用户 %s 吗？',
     'SUSPEND_USER_CONFIRMATION' => '确定要暂停用户 %s 吗？',
     'UNSUSPEND_USER_CONFIRMATION' => '确定要解除暂停用户 %s 吗？',
@@ -486,31 +486,31 @@ $LANG['cn'] = array(
     'DELETE_CRON_CONFIRMATION' => '确定要删除定时任务吗？',
     'SUSPEND_CRON_CONFIRMATION' => '确定要暂停定时任务吗？',
     'UNSUSPEND_CRON_CONFIRMATION' => '确定要解除暂停定时任务吗？',
-    'DELETE_BACKUP_CONFIRMATION'  => '确定要删除 %s 备份吗？',
+    'DELETE_BACKUP_CONFIRMATION' => '确定要删除 %s 备份吗？',
     'DELETE_EXCLUSION_CONFIRMATION' => '确定要删除 %s 例外吗？',
-    'DELETE_PACKAGE_CONFIRMATION'  => '确定要删除方案 %s 吗？',
-    'DELETE_IP_CONFIRMATION'  => '确定要删除IP地址 %s 吗？',
+    'DELETE_PACKAGE_CONFIRMATION' => '确定要删除方案 %s 吗？',
+    'DELETE_IP_CONFIRMATION' => '确定要删除IP地址 %s 吗？',
     'DELETE_RULE_CONFIRMATION' => '确定要删除规则 #%s 吗？',
     'SUSPEND_RULE_CONFIRMATION' => '确定要暂停规则 #%s 吗？',
     'UNSUSPEND_RULE_CONFIRMATION' => '确定要解除暂停规则 #%s 吗？',
     'LEAVE_PAGE_CONFIRMATION' => '确定要离开当前页吗？',
     'RESTART_CONFIRMATION' => '确定要重新启动 %s 吗？',
-    'Welcome'  => '欢迎',
-    'LOGGED_IN_AS'  => '以 %s 的身份登录',
-    'Error'  => '错误',
-    'Invalid username or password'  => '无效的用户名称或密码',
-    'Invalid username or code'  => '无效的用户名称或验证码.',
-    'Passwords not match'  => '密码错误',
-    'Please enter valid email address.'  => '请输入正确的邮箱',
-    'Field "%s" can not be blank.'  => '"%s" 不能为空',
-    'Password is too short.'  => '密码太短 (至少为6个数字+字母)',
-    'Error code:'  => '错误代码: %s',
-    'SERVICE_ACTION_FAILED'  => '"%s" "%s" 失败',
+    'Welcome' => '欢迎',
+    'LOGGED_IN_AS' => '以 %s 的身份登录',
+    'Error' => '错误',
+    'Invalid username or password' => '无效的用户名称或密码',
+    'Invalid username or code' => '无效的用户名称或验证码.',
+    'Passwords not match' => '密码错误',
+    'Please enter valid email address.' => '请输入正确的邮箱',
+    'Field "%s" can not be blank.' => '"%s" 不能为空',
+    'Password is too short.' => '密码太短 (至少为6个数字+字母)',
+    'Error code:' => '错误代码: %s',
+    'SERVICE_ACTION_FAILED' => '"%s" "%s" 失败',
     'IP address is in use' => 'IP地址在使用中',
-    'BACKUP_SCHEDULED'  => '您的要求已加入队列中，备份完成后会以电子邮件通知您 ',
-    'BACKUP_EXISTS'  => '已经有一个备份正在执行，请等待备份完成后再操作',
-    'RESTORE_SCHEDULED'  => '您的要求已加入队列中，恢复完成后会以电子邮件通知您',
-    'RESTORE_EXISTS'  => '已经有一个恢复正在执行，请等待恢复完成后再操作',
+    'BACKUP_SCHEDULED' => '您的要求已加入队列中，备份完成后会以电子邮件通知您 ',
+    'BACKUP_EXISTS' => '已经有一个备份正在执行，请等待备份完成后再操作',
+    'RESTORE_SCHEDULED' => '您的要求已加入队列中，恢复完成后会以电子邮件通知您',
+    'RESTORE_EXISTS' => '已经有一个恢复正在执行，请等待恢复完成后再操作',
 
     'WEB_EXCLUSIONS' => '输入域名，每行一个。要排除所有域名请使用 *。要排除特定目录使用以下格式: domain.com:public_html/cache:public_html/tmp',
     'DNS_EXCLUSIONS' => '输入域名，每行一个。要排除所有域名请使用 *',
@@ -519,27 +519,27 @@ $LANG['cn'] = array(
     'CRON_EXCLUSIONS' => '要排除所有任务请使用 *',
     'USER_EXCLUSIONS' => '输入目录名称，每行一个。要排除所有目录请使用 *',
 
-    'Welcome to Vesta Control Panel'  => '欢迎来到 Vesta 管理系统',
-    'MAIL_FROM'  => 'Vesta 管理系统 <noreply@%s>',
+    'Welcome to Vesta Control Panel' => '欢迎来到 Vesta 管理系统',
+    'MAIL_FROM' => 'Vesta 管理系统 <noreply@%s>',
     'GREETINGS_GORDON_FREEMAN' => "您好, %s %s,\n",
     'GREETINGS' => "您好,\n",
     'ACCOUNT_READY' => "您的账户已创建成功，并可以开始使用了！\n\nhttps://%s/login/\n用户名称: %s\n密码: %s\n\n--\nVesta Control Panel\n",
 
-    'FTP login credentials'  => 'FTP 登录信息',
+    'FTP login credentials' => 'FTP 登录信息',
     'FTP_ACCOUNT_READY' => "FTP账户已创建成功，并可以开始使用了！\n\n主机名称: %s\n用户名称: %s_%s\n密码: %s\n\n--\nVesta Control Panel\n",
 
-    'Database Credentials'  => '数据库登录信息',
+    'Database Credentials' => '数据库登录信息',
     'DATABASE_READY' => "数据库已添加成功！\n\n数据库名称: %s\n用户名称: %s\n密码: %s\n%s\n\n--\nVesta Control Panel\n",
 
-    'forgot password'  => '忘记密码',
-    'Confirm'  => '确认',
-    'New Password'  => '新密码',
-    'Confirm Password'  => '确认密码',
-    'Reset'  => '重置',
-    'Reset Code'  => '重置代码',
-    'RESET_NOTICE'  => '',
-    'RESET_CODE_SENT'  => '密码重置代码已发送到您的邮箱<br>',
-    'MAIL_RESET_SUBJECT'  => '密码重置在 %s',
+    'forgot password' => '忘记密码',
+    'Confirm' => '确认',
+    'New Password' => '新密码',
+    'Confirm Password' => '确认密码',
+    'Reset' => '重置',
+    'Reset Code' => '重置代码',
+    'RESET_NOTICE' => '',
+    'RESET_CODE_SENT' => '密码重置代码已发送到您的邮箱<br>',
+    'MAIL_RESET_SUBJECT' => '密码重置在 %s',
     'PASSWORD_RESET_REQUEST' => '重置密码请点击链接:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\n或者您可以到 https://%s/reset/?action=code&user=%s 输入密码重置代码:\n%s\n\n如果您没有要求重置密码，请忽略此邮件\n\n--\nVesta Control Panel\n',
 
     'Jan' => '01月',
@@ -568,7 +568,7 @@ $LANG['cn'] = array(
     'MAIL Server' => '邮箱服务器',
     'Antivirus' => '防病毒引擎',
     'AntiSpam' => '防垃圾邮件',
-    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
+    'Use Web Domain SSL Certificate' => '采用网站域名SSL证书',
     'Webmail URL' => '网页邮箱网址',
     'MySQL Support' => 'MySQL 支持',
     'phpMyAdmin URL' => '设置 phpMyAdmin 网址',
@@ -704,7 +704,7 @@ $LANG['cn'] = array(
     'Add File to the Current Selection' => '将文件添加到当前选中区内',
     'Select All Files' => '选择所有文件',
     'shortcuts are inspired by magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager' =>
-        '快捷键的灵感来自旖旎的 GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> 文件管理器',
+    '快捷键的灵感来自旖旎的 GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> 文件管理器',
 
     'Licence Key' => '许可密匙',
     'Enter License Key' => '输入许可密匙',
@@ -755,7 +755,7 @@ $LANG['cn'] = array(
     'ISSUER' => '颁发者',
 
     'Use server hostname' => '采用服务器主机名',
-    'Use domain hostname' => '采用域名',
+    'Use domain hostname' => '采用账户所在域名',
     'Use STARTTLS' => '采用 STARTTLS 加密',
     'Use SSL / TLS' => '采用 SSL / TLS 加密',
     'No encryption' => '不加密',

From f969909866a0ca56c72031e622fb215fd09ea889 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 5 Apr 2019 00:15:43 +0200
Subject: [PATCH 0422/2300] schedule backup nice and ionice

---
 bin/v-schedule-user-backup | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-schedule-user-backup b/bin/v-schedule-user-backup
index dcbcedb6..da8dd62b 100755
--- a/bin/v-schedule-user-backup
+++ b/bin/v-schedule-user-backup
@@ -35,7 +35,7 @@ is_backup_scheduled 'backup'
 
 # Adding backup task to  the queue
 log=$VESTA/log/backup.log
-echo "$BIN/v-backup-user $user yes >> $log 2>&1" >>\
+echo "nice -n 19 ionice -c 3 $BIN/v-backup-user $user yes >> $log 2>&1" >>\
     $VESTA/data/queue/backup.pipe
 
 

From 9400592892f7ee58da40a063ed1a751f7a0f1243 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 5 Apr 2019 00:17:00 +0200
Subject: [PATCH 0423/2300] schedule restore nice and ionice

---
 bin/v-schedule-user-restore | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-schedule-user-restore b/bin/v-schedule-user-restore
index 031b024e..2da94b01 100755
--- a/bin/v-schedule-user-restore
+++ b/bin/v-schedule-user-restore
@@ -43,7 +43,7 @@ is_backup_scheduled 'restore'
 # Adding restore task to  the queue
 log=$VESTA/log/restore.log
 options="'$web' '$dns' '$mail' '$db' '$cron' '$udir'"
-echo "$BIN/v-restore-user $user $backup $options  yes >> $log 2>&1" >>\
+echo "nice -n 19 ionice -c 3 $BIN/v-restore-user $user $backup $options  yes >> $log 2>&1" >>\
     $VESTA/data/queue/backup.pipe
 
 

From 8f2fdfb8d320fb75ba82cdb5ccd91c9c43d6d90c Mon Sep 17 00:00:00 2001
From: Anthony Rossbach <anthonyrossbach@gmail.com>
Date: Mon, 8 Apr 2019 21:47:22 -0700
Subject: [PATCH 0424/2300] Fixes for dumps of large databases

---
 func/db.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/func/db.sh b/func/db.sh
index d397dfec..30018065 100644
--- a/func/db.sh
+++ b/func/db.sh
@@ -55,14 +55,14 @@ mysql_query() {
 
 mysql_dump() {
     err="/tmp/e.mysql"
-    mysqldump --defaults-file=$mycnf --single-transaction -r $1 $2 2> $err
+    mysqldump --defaults-file=$mycnf --single-transaction --max_allowed_packet=100M -r $1 $2 2> $err
     if [ '0' -ne "$?" ]; then
         rm -rf $tmpdir
         if [ "$notify" != 'no' ]; then
             echo -e "Can't dump database $database\n$(cat $err)" |\
                 $SENDMAIL -s "$subj" $email
         fi
-        echo "Error: dump $database failed"
+        echo "Error: dump $database failed\n$(cat $err)"
         log_event  "$E_DB" "$ARGUMENTS"
         exit $E_DB
     fi

From a981ddb468603f571d765c00361765c882001824 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Steen=20Sch=C3=BCtt?=
 <6237359+SteenSchutt@users.noreply.github.com>
Date: Wed, 10 Apr 2019 14:42:10 +0200
Subject: [PATCH 0425/2300] Prevent v-backup-user from excluding folders named
 logs further down the tree

This change will fix issues with files like `public_html/wp-content/plugins/sitepress-multilingual-cms/classes/logs/interface-wpml-log.php` from being excluded, but still exclude the intended main logs directory. Fixes a semi-widespread issue with VestaCP and WPML.
---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 90a42b2e..2e81ada2 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -223,7 +223,7 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
         exlusion=$(echo -e "$WEB" |tr ',' '\n' |grep "^$domain:")
         set -f
         fargs=()
-        fargs+=(--exclude='logs/*')
+        fargs+=(--exclude='./logs/*')
         if [ ! -z "$exlusion" ]; then
             xdirs="$(echo -e "$exlusion" |tr ':' '\n' |grep -v $domain)"
             for xpath in $xdirs; do

From 3cbaab38bf8d2734f1fb969ce4b02fd46452ae67 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 11 Apr 2019 19:00:56 +0200
Subject: [PATCH 0426/2300] Fix for issue #1286

Fix for issue #1286
---
 bin/v-change-sys-service-config | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/bin/v-change-sys-service-config b/bin/v-change-sys-service-config
index 97c14a17..3d31d6b4 100755
--- a/bin/v-change-sys-service-config
+++ b/bin/v-change-sys-service-config
@@ -95,13 +95,21 @@ if [ "$update" = 'yes' ] && [ "$restart" != 'no' ]; then
 
     if [ "$service" = 'php' ]; then
         if [ "$WEB_SYSTEM" = "nginx" ]; then
-            service=$(ls /etc/init.d/php*fpm* |cut -f 4 -d / |sed -n 1p)
+            if [ $(ps --no-headers -o comm 1) == systemd ]; then
+                service=$(systemctl | grep -o -E "php.*fpm.*\.service")
+		service=${service//.service/}
+            else
+                service=$(ls /etc/init.d/php*fpm* |cut -f 4 -d /)
+            fi
         else
             service=$WEB_SYSTEM
         fi
     fi
 
-    service $service restart >/dev/null 2>&1
+    for single_service in $service; do
+        service $single_service restart >/dev/null 2>&1
+    done <<< "$service"
+
     if [ $? -ne 0 ]; then
         for config in $dst; do
             cat $config.vst.back > $config

From f0c328375f414662a203b4606d65983b7640160d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 11 Apr 2019 19:02:36 +0200
Subject: [PATCH 0427/2300] Update v-change-sys-service-config

---
 bin/v-change-sys-service-config | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-change-sys-service-config b/bin/v-change-sys-service-config
index 3d31d6b4..0500ecb9 100755
--- a/bin/v-change-sys-service-config
+++ b/bin/v-change-sys-service-config
@@ -97,7 +97,7 @@ if [ "$update" = 'yes' ] && [ "$restart" != 'no' ]; then
         if [ "$WEB_SYSTEM" = "nginx" ]; then
             if [ $(ps --no-headers -o comm 1) == systemd ]; then
                 service=$(systemctl | grep -o -E "php.*fpm.*\.service")
-		service=${service//.service/}
+                service=${service//.service/}
             else
                 service=$(ls /etc/init.d/php*fpm* |cut -f 4 -d /)
             fi

From c28c5d29a3c61bc8110c11349e3f2309cd537cfa Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Fri, 12 Apr 2019 17:20:45 +0300
Subject: [PATCH 0428/2300] setting content type to fix possible XSS attack
 vector

---
 web/file_manager/fm_api.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/file_manager/fm_api.php b/web/file_manager/fm_api.php
index ac5faa3a..cf4eef82 100644
--- a/web/file_manager/fm_api.php
+++ b/web/file_manager/fm_api.php
@@ -1,8 +1,8 @@
 <?php
-
 // Init
 //error_reporting(NULL);
 
+header('Content-Type: application/json');
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 include($_SERVER['DOCUMENT_ROOT']."/file_manager/fm_core.php");

From ab95d5d88daa0a49004ddb44b05decff803dc99c Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Mon, 15 Apr 2019 10:51:40 +0300
Subject: [PATCH 0429/2300] removing single quote from escapeshellarg calls

---
 web/edit/server/index.php | 8 ++++----
 web/list/dns/index.php    | 2 +-
 web/list/mail/index.php   | 2 +-
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/web/edit/server/index.php b/web/edit/server/index.php
index 467596f8..defc0b7a 100644
--- a/web/edit/server/index.php
+++ b/web/edit/server/index.php
@@ -209,7 +209,7 @@ if (!empty($_POST['save'])) {
     // Update mysql pasword
     if (empty($_SESSION['error_msg'])) {
         if (!empty($_POST['v_mysql_password'])) {
-            exec (VESTA_CMD."v-change-database-host-password mysql localhost root '".escapeshellarg($_POST['v_mysql_password'])."'", $output, $return_var);
+            exec (VESTA_CMD."v-change-database-host-password mysql localhost root ".escapeshellarg($_POST['v_mysql_password']), $output, $return_var);
             check_return_code($return_var,$output);
             unset($output);
             $v_db_adv = 'yes';
@@ -260,7 +260,7 @@ if (!empty($_POST['save'])) {
     // Update webmail url
     if (empty($_SESSION['error_msg'])) {
         if ($_POST['v_mail_url'] != $_SESSION['MAIL_URL']) {
-            exec (VESTA_CMD."v-change-sys-config-value MAIL_URL '".escapeshellarg($_POST['v_mail_url'])."'", $output, $return_var);
+            exec (VESTA_CMD."v-change-sys-config-value MAIL_URL ".escapeshellarg($_POST['v_mail_url']), $output, $return_var);
             check_return_code($return_var,$output);
             unset($output);
             $v_mail_adv = 'yes';
@@ -270,7 +270,7 @@ if (!empty($_POST['save'])) {
     // Update phpMyAdmin url
     if (empty($_SESSION['error_msg'])) {
         if ($_POST['v_mysql_url'] != $_SESSION['DB_PMA_URL']) {
-            exec (VESTA_CMD."v-change-sys-config-value DB_PMA_URL '".escapeshellarg($_POST['v_mysql_url'])."'", $output, $return_var);
+            exec (VESTA_CMD."v-change-sys-config-value DB_PMA_URL ".escapeshellarg($_POST['v_mysql_url']), $output, $return_var);
             check_return_code($return_var,$output);
             unset($output);
             $v_db_adv = 'yes';
@@ -280,7 +280,7 @@ if (!empty($_POST['save'])) {
     // Update phpPgAdmin url
     if (empty($_SESSION['error_msg'])) {
         if ($_POST['v_pgsql_url'] != $_SESSION['DB_PGA_URL']) {
-            exec (VESTA_CMD."v-change-sys-config-value DB_PGA_URL '".escapeshellarg($_POST['v_pgsql_url'])."'", $output, $return_var);
+            exec (VESTA_CMD."v-change-sys-config-value DB_PGA_URL ".escapeshellarg($_POST['v_pgsql_url']), $output, $return_var);
             check_return_code($return_var,$output);
             unset($output);
             $v_db_adv = 'yes';
diff --git a/web/list/dns/index.php b/web/list/dns/index.php
index df5b4a83..c98b8e47 100644
--- a/web/list/dns/index.php
+++ b/web/list/dns/index.php
@@ -14,7 +14,7 @@ if (empty($_GET['domain'])){
 
     render_page($user, $TAB, 'list_dns');
 } else {
-    exec (VESTA_CMD."v-list-dns-records '".$user."' '".escapeshellarg($_GET['domain'])."' 'json'", $output, $return_var);
+    exec (VESTA_CMD."v-list-dns-records ".$user." ".escapeshellarg($_GET['domain'])." json", $output, $return_var);
     $data = json_decode(implode('', $output), true);
     $data = array_reverse($data, true);
     unset($output);
diff --git a/web/list/mail/index.php b/web/list/mail/index.php
index 6b767768..56c42a73 100644
--- a/web/list/mail/index.php
+++ b/web/list/mail/index.php
@@ -14,7 +14,7 @@ if (empty($_GET['domain'])){
 
     render_page($user, $TAB, 'list_mail');
 } else {
-    exec (VESTA_CMD."v-list-mail-accounts '".$user."' '".escapeshellarg($_GET['domain'])."' json", $output, $return_var);
+    exec (VESTA_CMD."v-list-mail-accounts ".$user." ".escapeshellarg($_GET['domain'])." json", $output, $return_var);
     $data = json_decode(implode('', $output), true);
     $data = array_reverse($data, true);
     unset($output);

From 70319b6a94f08bcf22fe1227372cbaeeabf5e21b Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Mon, 15 Apr 2019 13:33:09 +0300
Subject: [PATCH 0430/2300] full pma install

---
 install/rhel/7/pma/config.inc.conf | 119 ++++++++++++++++-------------
 install/vst-install-rhel.sh        |  12 ++-
 2 files changed, 73 insertions(+), 58 deletions(-)

diff --git a/install/rhel/7/pma/config.inc.conf b/install/rhel/7/pma/config.inc.conf
index 47ae207e..25097eca 100644
--- a/install/rhel/7/pma/config.inc.conf
+++ b/install/rhel/7/pma/config.inc.conf
@@ -4,24 +4,24 @@
  * phpMyAdmin sample configuration, you can use it as base for
  * manual configuration. For easier setup you can use setup/
  *
- * All directives are explained in Documentation.html and on phpMyAdmin
- * wiki <http://wiki.phpmyadmin.net>.
+ * All directives are explained in documentation in the doc/ folder
+ * or at <https://docs.phpmyadmin.net/>.
  *
- * @package phpMyAdmin
+ * @package PhpMyAdmin
  */
 
-/*
+/**
  * This is needed for cookie based authentication to encrypt password in
- * cookie
+ * cookie. Needs to be 32 chars long.
  */
 $cfg['blowfish_secret'] = '%blowfish_secret%'; /* YOU MUST FILL IN THIS FOR COOKIE AUTH! */
 
-/*
+/**
  * Servers configuration
  */
 $i = 0;
 
-/*
+/**
  * First server
  */
 $i++;
@@ -29,44 +29,57 @@ $i++;
 $cfg['Servers'][$i]['auth_type'] = 'cookie';
 /* Server parameters */
 $cfg['Servers'][$i]['host'] = 'localhost';
-$cfg['Servers'][$i]['connect_type'] = 'tcp';
 $cfg['Servers'][$i]['compress'] = false;
-/* Select mysqli if your server has it */
-$cfg['Servers'][$i]['extension'] = 'mysql';
 $cfg['Servers'][$i]['AllowNoPassword'] = false;
 
-/*
+/**
  * phpMyAdmin configuration storage settings.
  */
 
 /* User used to manipulate with storage */
-// $cfg['Servers'][$i]['controluser'] = 'pma';
-// $cfg['Servers'][$i]['controlpass'] = 'pmapass';
+$cfg['Servers'][$i]['controlhost'] = '';
+$cfg['Servers'][$i]['controlport'] = '';
+$cfg['Servers'][$i]['controluser'] = 'phpmyadmin';
+$cfg['Servers'][$i]['controlpass'] = '%phpmyadmin_pass%';
 
 /* Storage database and tables */
-// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
-// $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
-// $cfg['Servers'][$i]['relation'] = 'pma_relation';
-// $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
-// $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
-// $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
-// $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
-// $cfg['Servers'][$i]['history'] = 'pma_history';
-// $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
-// $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
-// $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
-/* Contrib / Swekey authentication */
-// $cfg['Servers'][$i]['auth_swekey_config'] = '/etc/swekey-pma.conf';
+$cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
+$cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
+$cfg['Servers'][$i]['relation'] = 'pma__relation';
+$cfg['Servers'][$i]['table_info'] = 'pma__table_info';
+$cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
+$cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
+$cfg['Servers'][$i]['column_info'] = 'pma__column_info';
+$cfg['Servers'][$i]['history'] = 'pma__history';
+$cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
+$cfg['Servers'][$i]['tracking'] = 'pma__tracking';
+$cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
+$cfg['Servers'][$i]['recent'] = 'pma__recent';
+$cfg['Servers'][$i]['favorite'] = 'pma__favorite';
+$cfg['Servers'][$i]['users'] = 'pma__users';
+$cfg['Servers'][$i]['usergroups'] = 'pma__usergroups';
+$cfg['Servers'][$i]['navigationhiding'] = 'pma__navigationhiding';
+$cfg['Servers'][$i]['savedsearches'] = 'pma__savedsearches';
+$cfg['Servers'][$i]['central_columns'] = 'pma__central_columns';
+$cfg['Servers'][$i]['designer_settings'] = 'pma__designer_settings';
+$cfg['Servers'][$i]['export_templates'] = 'pma__export_templates';
 
-/*
+/**
  * End of servers configuration
  */
 
-/*
+/**
  * Directories for saving/loading files from server
  */
-$cfg['UploadDir'] = '';
-$cfg['SaveDir'] = '';
+$cfg['UploadDir'] = '/var/lib/phpMyAdmin/upload';
+$cfg['SaveDir'] = '/var/lib/phpMyAdmin/save';
+
+/**
+ * Whether to display icons or text or both icons and text in table row
+ * action segment. Value can be either of 'icons', 'text' or 'both'.
+ * default = 'both'
+ */
+//$cfg['RowActionType'] = 'icons';
 
 /**
  * Defines whether a user should be displayed a "show all (records)"
@@ -78,25 +91,21 @@ $cfg['SaveDir'] = '';
 /**
  * Number of rows displayed when browsing a result set. If the result
  * set contains more rows, "Previous" and "Next".
- * default = 30
+ * Possible values: 25, 50, 100, 250, 500
+ * default = 25
  */
 //$cfg['MaxRows'] = 50;
 
 /**
- * Use graphically less intense menu tabs
- * default = false
- */
-//$cfg['LightTabs'] = true;
-
-/**
- * disallow editing of binary fields
+ * Disallow editing of binary fields
  * valid values are:
- *   false  allow editing
- *   'blob' allow editing except for BLOB fields
- *   'all'  disallow editing
- * default = blob
+ *   false    allow editing
+ *   'blob'   allow editing except for BLOB fields
+ *   'noblob' disallow editing except for BLOB fields
+ *   'all'    disallow editing
+ * default = 'blob'
  */
-//$cfg['ProtectBinary'] = 'false';
+//$cfg['ProtectBinary'] = false;
 
 /**
  * Default language to use, if not browser-defined or user-defined
@@ -107,12 +116,6 @@ $cfg['SaveDir'] = '';
 //$cfg['DefaultLang'] = 'en';
 //$cfg['DefaultLang'] = 'de';
 
-/**
- * default display direction (horizontal|vertical|horizontalflipped)
- */
-//$cfg['DefaultDisplay'] = 'vertical';
-
-
 /**
  * How many columns should be used for table display of a database?
  * (a value larger than 1 results in some information being hidden)
@@ -131,13 +134,21 @@ $cfg['SaveDir'] = '';
 
 /**
  * When using DB-based query history, how many entries should be kept?
- *
  * default = 25
  */
 //$cfg['QueryHistoryMax'] = 100;
 
-/*
- * You can find more configuration options in Documentation.html
- * or here: http://wiki.phpmyadmin.net/pma/Config
+/**
+ * Whether or not to query the user before sending the error report to
+ * the phpMyAdmin team when a JavaScript error occurs
+ *
+ * Available options
+ * ('ask' | 'always' | 'never')
+ * default = 'ask'
+ */
+//$cfg['SendErrorReports'] = 'always';
+
+/**
+ * You can find more configuration options in the documentation
+ * in the doc/ folder or at <https://docs.phpmyadmin.net/>.
  */
-?>
diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index f6147bbc..8badeca8 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -83,9 +83,6 @@ gen_pass() {
     echo "$PASS"
 }
 
-# Defining 32 char blowfish_secret
-blowfish_secret=`openssl rand -base64 32`;
-
 # Defining return code check function
 check_result() {
     if [ $1 -ne 0 ]; then
@@ -1045,8 +1042,15 @@ if [ "$mysql" = 'yes' ]; then
     if [ "$apache" = 'yes' ]; then
         cp -f $vestacp/pma/phpMyAdmin.conf /etc/httpd/conf.d/
     fi
+    mysql < /usr/share/phpMyAdmin/sql/create_tables.sql
+    p=$(gen_pass)
+    mysql -e "GRANT ALL ON phpmyadmin.*
+        TO phpmyadmin@localhost IDENTIFIED BY '$p'"
     cp -f $vestacp/pma/config.inc.conf /etc/phpMyAdmin/config.inc.php
-    sed -i "s#%blowfish_secret#$blowfish_secret#g" /etc/phpMyAdmin/config.inc.php
+    sed -i "s/%blowfish_secret%/$(gen_pass 32)/g" /etc/phpMyAdmin/config.inc.php
+    sed -i "s/%phpmyadmin_pass%/$p/g" /etc/phpMyAdmin/config.inc.php
+    chmod 777 /var/lib/phpMyAdmin/temp
+    chmod 777 /var/lib/phpMyAdmin/save
 fi
 
 

From e674bf14fd401f419223f1dd06a6e381a3c188a2 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Mon, 15 Apr 2019 13:48:23 +0300
Subject: [PATCH 0431/2300] Release 0.9.8-24

---
 src/deb/ioncube/control          |  2 +-
 src/deb/nginx/control            |  2 +-
 src/deb/php/control              |  2 +-
 src/deb/vesta/control            |  2 +-
 src/rpm/specs/vesta-ioncube.spec |  2 +-
 src/rpm/specs/vesta-nginx.spec   |  2 +-
 src/rpm/specs/vesta.spec         | 10 +++++++++-
 upd/add_notifications.sh         |  3 +--
 8 files changed, 16 insertions(+), 9 deletions(-)

diff --git a/src/deb/ioncube/control b/src/deb/ioncube/control
index 9db6cc14..8b264b80 100644
--- a/src/deb/ioncube/control
+++ b/src/deb/ioncube/control
@@ -1,7 +1,7 @@
 Source: vesta-ioncube
 Package: vesta-ioncube
 Priority: optional
-Version: 0.9.8-23
+Version: 0.9.8-24
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.ioncube.com
diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index 19ec8bbb..970f8dbe 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -1,7 +1,7 @@
 Source: vesta-nginx
 Package: vesta-nginx
 Priority: optional
-Version: 0.9.8-23
+Version: 0.9.8-24
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/php/control b/src/deb/php/control
index e8702027..3b8055de 100644
--- a/src/deb/php/control
+++ b/src/deb/php/control
@@ -1,7 +1,7 @@
 Source: vesta-php
 Package: vesta-php
 Priority: optional
-Version: 0.9.8-23
+Version: 0.9.8-24
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 9f83c2a6..3e7bdd64 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-23
+Version: 0.9.8-24
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/rpm/specs/vesta-ioncube.spec b/src/rpm/specs/vesta-ioncube.spec
index 54bb5cf4..4dbf3203 100644
--- a/src/rpm/specs/vesta-ioncube.spec
+++ b/src/rpm/specs/vesta-ioncube.spec
@@ -1,6 +1,6 @@
 Name:           vesta-ioncube
 Version:        0.9.8
-Release:        23
+Release:        24
 Summary:        ionCube Loader
 Group:          System Environment/Base
 License:        "Freely redistributable without restriction"
diff --git a/src/rpm/specs/vesta-nginx.spec b/src/rpm/specs/vesta-nginx.spec
index ca530cc1..8fb887c9 100644
--- a/src/rpm/specs/vesta-nginx.spec
+++ b/src/rpm/specs/vesta-nginx.spec
@@ -1,6 +1,6 @@
 Name:           vesta-nginx
 Version:        0.9.8
-Release:        23
+Release:        24
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        BSD-like
diff --git a/src/rpm/specs/vesta.spec b/src/rpm/specs/vesta.spec
index 10830d15..d632cc55 100644
--- a/src/rpm/specs/vesta.spec
+++ b/src/rpm/specs/vesta.spec
@@ -1,6 +1,6 @@
 Name:           vesta
 Version:        0.9.8
-Release:        23
+Release:        24
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
@@ -68,6 +68,14 @@ fi
 %config(noreplace) %{_vestadir}/web/css/uploadify.css
 
 %changelog
+* Mon Apr 18 2019 Serghey Rodin <builder@vestacp.com> - 0.9.8-24
+- Bugfixes
+- Security patches
+- LEv2
+- Server LE
+- i18n updates
+
+
 * Thu Oct 18 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-23
 - Security fixes
 
diff --git a/upd/add_notifications.sh b/upd/add_notifications.sh
index e55c0c74..4aecf68c 100755
--- a/upd/add_notifications.sh
+++ b/upd/add_notifications.sh
@@ -5,5 +5,4 @@ rm -f /usr/local/vesta/data/users/admin/notifications.conf
 /usr/local/vesta/bin/v-add-user-notification admin "File Manager" "Browse, copy, edit, view, and retrieve all your web domain files using a fully featured <a href='http://vestacp.com/features/#filemanager'>File Manager</a>. Plugin is available for <a href='/edit/server/?lead=filemanager#module-filemanager'>purchase</a>." 'filemanager'
 /usr/local/vesta/bin/v-add-user-notification admin "Chroot SFTP" "If you want to have SFTP accounts that will be used only to transfer files (and not to SSH), you can  <a href='/edit/server/?lead=sftp#module-sftp'>purchase</a> and enable <a href='http://vestacp.com/features/#sftpchroot'>SFTP Chroot</a>"
 /usr/local/vesta/bin/v-add-user-notification admin "Softaculous" "Softaculous is one of the best Auto Installers and it is finally <a href='/edit/server/?lead=sftp#module-softaculous'>available</a>"
-/usr/local/vesta/bin/v-add-user-notification admin "Release 0.9.8-23" "We've made 1478 commits, fixed 29 bugs and merged 141 pull request. As always for more information please read <a href='http://vestacp.com/roadmap/#0.9.8-23'>release notes</a>"
-
+/usr/local/vesta/bin/v-add-user-notification admin "Release 0.9.8-24" "This release is about stability and refinement. We added Let's Encrypt v2 support and added server certificate management tools. For more information please read <a href='http://vestacp.com/roadmap/#0.9.8-23'>release notes</a>"

From e1fb811caf73e5d8de49e3d2a0098a1afb0f647f Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Mon, 15 Apr 2019 14:08:16 +0300
Subject: [PATCH 0432/2300] ubuntu 18.10 support

---
 install/ubuntu/18.10/apache2/apache2.conf     |  94 ++
 install/ubuntu/18.10/apache2/status.conf      |   8 +
 install/ubuntu/18.10/bind/named.conf          |  12 +
 install/ubuntu/18.10/clamav/clamd.conf        |  61 ++
 install/ubuntu/18.10/deb_signing.key          |  30 +
 .../ubuntu/18.10/dovecot/conf.d/10-auth.conf  |   4 +
 .../18.10/dovecot/conf.d/10-logging.conf      |   1 +
 .../ubuntu/18.10/dovecot/conf.d/10-mail.conf  |   9 +
 .../18.10/dovecot/conf.d/10-master.conf       |  29 +
 .../ubuntu/18.10/dovecot/conf.d/10-ssl.conf   |   5 +
 .../18.10/dovecot/conf.d/15-mailboxes.conf    |  29 +
 .../ubuntu/18.10/dovecot/conf.d/20-imap.conf  |  58 ++
 .../ubuntu/18.10/dovecot/conf.d/20-pop3.conf  |  91 ++
 .../dovecot/conf.d/auth-passwdfile.conf.ext   |   9 +
 install/ubuntu/18.10/dovecot/dovecot.conf     |   4 +
 install/ubuntu/18.10/exim/dnsbl.conf          |   2 +
 install/ubuntu/18.10/exim/exim4.conf.template | 382 ++++++++
 install/ubuntu/18.10/exim/spam-blocks.conf    |   0
 .../ubuntu/18.10/fail2ban/action.d/vesta.conf |   9 +
 .../ubuntu/18.10/fail2ban/filter.d/vesta.conf |  10 +
 install/ubuntu/18.10/fail2ban/jail.local      |  51 ++
 install/ubuntu/18.10/firewall/ports.conf      |  17 +
 install/ubuntu/18.10/firewall/rules.conf      |  11 +
 install/ubuntu/18.10/logrotate/apache2        |  19 +
 install/ubuntu/18.10/logrotate/dovecot        |  12 +
 install/ubuntu/18.10/logrotate/nginx          |  13 +
 install/ubuntu/18.10/logrotate/vesta          |   7 +
 install/ubuntu/18.10/mysql/my-large.cnf       |  41 +
 install/ubuntu/18.10/mysql/my-medium.cnf      |  40 +
 install/ubuntu/18.10/mysql/my-small.cnf       |  40 +
 install/ubuntu/18.10/nginx/nginx.conf         | 139 +++
 install/ubuntu/18.10/nginx/phpmyadmin.inc     |  18 +
 install/ubuntu/18.10/nginx/phppgadmin.inc     |  11 +
 install/ubuntu/18.10/nginx/status.conf        |   9 +
 install/ubuntu/18.10/nginx/webmail.inc        |  15 +
 install/ubuntu/18.10/packages/default.pkg     |  18 +
 install/ubuntu/18.10/packages/gainsboro.pkg   |  18 +
 install/ubuntu/18.10/packages/palegreen.pkg   |  18 +
 install/ubuntu/18.10/packages/slategrey.pkg   |  18 +
 install/ubuntu/18.10/pga/config.inc.php       | 159 ++++
 install/ubuntu/18.10/pga/phppgadmin.conf      |  31 +
 install/ubuntu/18.10/php-fpm/www.conf         |  11 +
 install/ubuntu/18.10/pma/apache.conf          |  42 +
 install/ubuntu/18.10/pma/config.inc.php       | 146 +++
 install/ubuntu/18.10/postgresql/pg_hba.conf   |  11 +
 install/ubuntu/18.10/proftpd/proftpd.conf     |  32 +
 install/ubuntu/18.10/roundcube/apache.conf    |  40 +
 install/ubuntu/18.10/roundcube/config.inc.php |  33 +
 install/ubuntu/18.10/roundcube/db.inc.php     |  66 ++
 install/ubuntu/18.10/roundcube/main.inc.php   | 850 ++++++++++++++++++
 install/ubuntu/18.10/roundcube/vesta.php      |  72 ++
 install/ubuntu/18.10/sudo/admin               |   8 +
 .../ubuntu/18.10/templates/dns/child-ns.tpl   |  14 +
 .../ubuntu/18.10/templates/dns/default.tpl    |  18 +
 install/ubuntu/18.10/templates/dns/gmail.tpl  |  12 +
 .../18.10/templates/web/apache2/basedir.stpl  |  44 +
 .../18.10/templates/web/apache2/basedir.tpl   |  38 +
 .../18.10/templates/web/apache2/default.stpl  |  43 +
 .../18.10/templates/web/apache2/default.tpl   |  37 +
 .../18.10/templates/web/apache2/hosting.stpl  |  49 +
 .../18.10/templates/web/apache2/hosting.tpl   |  43 +
 .../18.10/templates/web/apache2/phpcgi.sh     |  16 +
 .../18.10/templates/web/apache2/phpcgi.stpl   |  38 +
 .../18.10/templates/web/apache2/phpcgi.tpl    |  31 +
 .../18.10/templates/web/apache2/phpfcgid.sh   |  22 +
 .../18.10/templates/web/apache2/phpfcgid.stpl |  39 +
 .../18.10/templates/web/apache2/phpfcgid.tpl  |  31 +
 .../18.10/templates/web/awstats/awstats.tpl   | 133 +++
 .../18.10/templates/web/awstats/index.tpl     |  10 +
 .../18.10/templates/web/awstats/nav.tpl       |  23 +
 .../18.10/templates/web/nginx/caching.sh      |  19 +
 .../18.10/templates/web/nginx/caching.stpl    |  43 +
 .../18.10/templates/web/nginx/caching.tpl     |  41 +
 .../18.10/templates/web/nginx/default.stpl    |  35 +
 .../18.10/templates/web/nginx/default.tpl     |  33 +
 .../18.10/templates/web/nginx/hosting.sh      |  11 +
 .../18.10/templates/web/nginx/hosting.stpl    |  37 +
 .../18.10/templates/web/nginx/hosting.tpl     |  35 +
 .../18.10/templates/web/nginx/http2.stpl      |  35 +
 .../18.10/templates/web/nginx/http2.tpl       |  33 +
 .../web/nginx/php-fpm/cms_made_simple.stpl    |  55 ++
 .../web/nginx/php-fpm/cms_made_simple.tpl     |  52 ++
 .../web/nginx/php-fpm/codeigniter2.stpl       |  60 ++
 .../web/nginx/php-fpm/codeigniter2.tpl        |  57 ++
 .../web/nginx/php-fpm/codeigniter3.stpl       |  55 ++
 .../web/nginx/php-fpm/codeigniter3.tpl        |  52 ++
 .../web/nginx/php-fpm/datalife_engine.stpl    | 126 +++
 .../web/nginx/php-fpm/datalife_engine.tpl     | 123 +++
 .../templates/web/nginx/php-fpm/default.stpl  |  54 ++
 .../templates/web/nginx/php-fpm/default.tpl   |  51 ++
 .../templates/web/nginx/php-fpm/dokuwiki.stpl |  71 ++
 .../templates/web/nginx/php-fpm/dokuwiki.tpl  |  67 ++
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  84 ++
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  81 ++
 .../templates/web/nginx/php-fpm/drupal7.stpl  |  88 ++
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  85 ++
 .../templates/web/nginx/php-fpm/drupal8.stpl  |  93 ++
 .../templates/web/nginx/php-fpm/drupal8.tpl   |  90 ++
 .../templates/web/nginx/php-fpm/joomla.stpl   |  62 ++
 .../templates/web/nginx/php-fpm/joomla.tpl    |  59 ++
 .../templates/web/nginx/php-fpm/laravel.stpl  |  55 ++
 .../templates/web/nginx/php-fpm/laravel.tpl   |  50 ++
 .../templates/web/nginx/php-fpm/magento.stpl  | 197 ++++
 .../templates/web/nginx/php-fpm/magento.tpl   | 194 ++++
 .../templates/web/nginx/php-fpm/modx.stpl     |  68 ++
 .../templates/web/nginx/php-fpm/modx.tpl      |  65 ++
 .../templates/web/nginx/php-fpm/moodle.stpl   |  89 ++
 .../templates/web/nginx/php-fpm/moodle.tpl    |  87 ++
 .../templates/web/nginx/php-fpm/no-php.stpl   |  46 +
 .../templates/web/nginx/php-fpm/no-php.tpl    |  43 +
 .../templates/web/nginx/php-fpm/odoo.stpl     |  69 ++
 .../templates/web/nginx/php-fpm/odoo.tpl      |  66 ++
 .../templates/web/nginx/php-fpm/opencart.stpl |  58 ++
 .../templates/web/nginx/php-fpm/opencart.tpl  |  54 ++
 .../templates/web/nginx/php-fpm/owncloud.stpl |  84 ++
 .../templates/web/nginx/php-fpm/owncloud.tpl  |  81 ++
 .../templates/web/nginx/php-fpm/piwik.stpl    |  72 ++
 .../templates/web/nginx/php-fpm/piwik.tpl     |  69 ++
 .../templates/web/nginx/php-fpm/pyrocms.stpl  |  65 ++
 .../templates/web/nginx/php-fpm/pyrocms.tpl   |  62 ++
 .../templates/web/nginx/php-fpm/sendy.stpl    |  88 ++
 .../templates/web/nginx/php-fpm/sendy.tpl     |  86 ++
 .../web/nginx/php-fpm/wordpress.stpl          |  54 ++
 .../templates/web/nginx/php-fpm/wordpress.tpl |  51 ++
 .../web/nginx/php-fpm/wordpress2.stpl         |  66 ++
 .../web/nginx/php-fpm/wordpress2.tpl          |  63 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.stpl |  71 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.tpl  |  67 ++
 .../18.10/templates/web/nginx/proxy_ip.tpl    |   9 +
 .../18.10/templates/web/php-fpm/default.tpl   |  21 +
 .../18.10/templates/web/php-fpm/no-php.tpl    |  20 +
 .../18.10/templates/web/php-fpm/socket.tpl    |  24 +
 .../web/skel/document_errors/403.html         |  29 +
 .../web/skel/document_errors/404.html         |  28 +
 .../web/skel/document_errors/50x.html         |  29 +
 .../templates/web/skel/public_html/index.html |  26 +
 .../templates/web/skel/public_html/robots.txt |   3 +
 .../web/skel/public_shtml/index.html          |  26 +
 .../web/skel/public_shtml/robots.txt          |   3 +
 .../18.10/templates/web/suspend/.htaccess     |   2 +
 .../18.10/templates/web/suspend/index.html    |  25 +
 .../templates/web/webalizer/webalizer.tpl     | 110 +++
 install/ubuntu/18.10/vsftpd/vsftpd.conf       |  40 +
 143 files changed, 7806 insertions(+)
 create mode 100644 install/ubuntu/18.10/apache2/apache2.conf
 create mode 100644 install/ubuntu/18.10/apache2/status.conf
 create mode 100644 install/ubuntu/18.10/bind/named.conf
 create mode 100644 install/ubuntu/18.10/clamav/clamd.conf
 create mode 100644 install/ubuntu/18.10/deb_signing.key
 create mode 100644 install/ubuntu/18.10/dovecot/conf.d/10-auth.conf
 create mode 100644 install/ubuntu/18.10/dovecot/conf.d/10-logging.conf
 create mode 100644 install/ubuntu/18.10/dovecot/conf.d/10-mail.conf
 create mode 100644 install/ubuntu/18.10/dovecot/conf.d/10-master.conf
 create mode 100644 install/ubuntu/18.10/dovecot/conf.d/10-ssl.conf
 create mode 100644 install/ubuntu/18.10/dovecot/conf.d/15-mailboxes.conf
 create mode 100644 install/ubuntu/18.10/dovecot/conf.d/20-imap.conf
 create mode 100644 install/ubuntu/18.10/dovecot/conf.d/20-pop3.conf
 create mode 100644 install/ubuntu/18.10/dovecot/conf.d/auth-passwdfile.conf.ext
 create mode 100644 install/ubuntu/18.10/dovecot/dovecot.conf
 create mode 100644 install/ubuntu/18.10/exim/dnsbl.conf
 create mode 100644 install/ubuntu/18.10/exim/exim4.conf.template
 create mode 100644 install/ubuntu/18.10/exim/spam-blocks.conf
 create mode 100644 install/ubuntu/18.10/fail2ban/action.d/vesta.conf
 create mode 100644 install/ubuntu/18.10/fail2ban/filter.d/vesta.conf
 create mode 100644 install/ubuntu/18.10/fail2ban/jail.local
 create mode 100644 install/ubuntu/18.10/firewall/ports.conf
 create mode 100644 install/ubuntu/18.10/firewall/rules.conf
 create mode 100644 install/ubuntu/18.10/logrotate/apache2
 create mode 100644 install/ubuntu/18.10/logrotate/dovecot
 create mode 100644 install/ubuntu/18.10/logrotate/nginx
 create mode 100644 install/ubuntu/18.10/logrotate/vesta
 create mode 100644 install/ubuntu/18.10/mysql/my-large.cnf
 create mode 100644 install/ubuntu/18.10/mysql/my-medium.cnf
 create mode 100644 install/ubuntu/18.10/mysql/my-small.cnf
 create mode 100644 install/ubuntu/18.10/nginx/nginx.conf
 create mode 100644 install/ubuntu/18.10/nginx/phpmyadmin.inc
 create mode 100644 install/ubuntu/18.10/nginx/phppgadmin.inc
 create mode 100644 install/ubuntu/18.10/nginx/status.conf
 create mode 100644 install/ubuntu/18.10/nginx/webmail.inc
 create mode 100644 install/ubuntu/18.10/packages/default.pkg
 create mode 100644 install/ubuntu/18.10/packages/gainsboro.pkg
 create mode 100644 install/ubuntu/18.10/packages/palegreen.pkg
 create mode 100644 install/ubuntu/18.10/packages/slategrey.pkg
 create mode 100644 install/ubuntu/18.10/pga/config.inc.php
 create mode 100644 install/ubuntu/18.10/pga/phppgadmin.conf
 create mode 100644 install/ubuntu/18.10/php-fpm/www.conf
 create mode 100644 install/ubuntu/18.10/pma/apache.conf
 create mode 100644 install/ubuntu/18.10/pma/config.inc.php
 create mode 100644 install/ubuntu/18.10/postgresql/pg_hba.conf
 create mode 100644 install/ubuntu/18.10/proftpd/proftpd.conf
 create mode 100644 install/ubuntu/18.10/roundcube/apache.conf
 create mode 100644 install/ubuntu/18.10/roundcube/config.inc.php
 create mode 100644 install/ubuntu/18.10/roundcube/db.inc.php
 create mode 100644 install/ubuntu/18.10/roundcube/main.inc.php
 create mode 100644 install/ubuntu/18.10/roundcube/vesta.php
 create mode 100644 install/ubuntu/18.10/sudo/admin
 create mode 100755 install/ubuntu/18.10/templates/dns/child-ns.tpl
 create mode 100755 install/ubuntu/18.10/templates/dns/default.tpl
 create mode 100755 install/ubuntu/18.10/templates/dns/gmail.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/apache2/basedir.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/apache2/basedir.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/apache2/default.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/apache2/default.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/apache2/hosting.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/apache2/hosting.tpl
 create mode 100755 install/ubuntu/18.10/templates/web/apache2/phpcgi.sh
 create mode 100644 install/ubuntu/18.10/templates/web/apache2/phpcgi.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/apache2/phpcgi.tpl
 create mode 100755 install/ubuntu/18.10/templates/web/apache2/phpfcgid.sh
 create mode 100644 install/ubuntu/18.10/templates/web/apache2/phpfcgid.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/apache2/phpfcgid.tpl
 create mode 100755 install/ubuntu/18.10/templates/web/awstats/awstats.tpl
 create mode 100755 install/ubuntu/18.10/templates/web/awstats/index.tpl
 create mode 100755 install/ubuntu/18.10/templates/web/awstats/nav.tpl
 create mode 100755 install/ubuntu/18.10/templates/web/nginx/caching.sh
 create mode 100755 install/ubuntu/18.10/templates/web/nginx/caching.stpl
 create mode 100755 install/ubuntu/18.10/templates/web/nginx/caching.tpl
 create mode 100755 install/ubuntu/18.10/templates/web/nginx/default.stpl
 create mode 100755 install/ubuntu/18.10/templates/web/nginx/default.tpl
 create mode 100755 install/ubuntu/18.10/templates/web/nginx/hosting.sh
 create mode 100755 install/ubuntu/18.10/templates/web/nginx/hosting.stpl
 create mode 100755 install/ubuntu/18.10/templates/web/nginx/hosting.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/http2.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/http2.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/cms_made_simple.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/cms_made_simple.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter2.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter2.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter3.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter3.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/datalife_engine.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/datalife_engine.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/default.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/default.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/dokuwiki.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/dokuwiki.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal6.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal6.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal7.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal7.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal8.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal8.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/joomla.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/joomla.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/laravel.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/laravel.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/magento.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/magento.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/modx.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/modx.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/moodle.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/moodle.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/no-php.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/no-php.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/odoo.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/odoo.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/opencart.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/opencart.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/owncloud.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/owncloud.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/piwik.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/piwik.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/sendy.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/sendy.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
 create mode 100755 install/ubuntu/18.10/templates/web/nginx/proxy_ip.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/php-fpm/default.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/php-fpm/no-php.tpl
 create mode 100644 install/ubuntu/18.10/templates/web/php-fpm/socket.tpl
 create mode 100755 install/ubuntu/18.10/templates/web/skel/document_errors/403.html
 create mode 100755 install/ubuntu/18.10/templates/web/skel/document_errors/404.html
 create mode 100755 install/ubuntu/18.10/templates/web/skel/document_errors/50x.html
 create mode 100755 install/ubuntu/18.10/templates/web/skel/public_html/index.html
 create mode 100755 install/ubuntu/18.10/templates/web/skel/public_html/robots.txt
 create mode 100755 install/ubuntu/18.10/templates/web/skel/public_shtml/index.html
 create mode 100755 install/ubuntu/18.10/templates/web/skel/public_shtml/robots.txt
 create mode 100755 install/ubuntu/18.10/templates/web/suspend/.htaccess
 create mode 100755 install/ubuntu/18.10/templates/web/suspend/index.html
 create mode 100755 install/ubuntu/18.10/templates/web/webalizer/webalizer.tpl
 create mode 100644 install/ubuntu/18.10/vsftpd/vsftpd.conf

diff --git a/install/ubuntu/18.10/apache2/apache2.conf b/install/ubuntu/18.10/apache2/apache2.conf
new file mode 100644
index 00000000..2756132a
--- /dev/null
+++ b/install/ubuntu/18.10/apache2/apache2.conf
@@ -0,0 +1,94 @@
+# It is split into several files forming the configuration hierarchy outlined
+# below, all located in the /etc/apache2/ directory:
+#
+#	/etc/apache2/
+#	|-- apache2.conf
+#	|	`--  ports.conf
+#	|-- mods-enabled
+#	|	|-- *.load
+#	|	`-- *.conf
+#	|-- conf.d
+#	|	`-- *
+
+# Global configuration
+PidFile ${APACHE_PID_FILE}
+Timeout 30
+KeepAlive Off
+MaxKeepAliveRequests 100
+KeepAliveTimeout 10
+
+<IfModule mpm_prefork_module>
+    StartServers          8
+    MinSpareServers       5
+    MaxSpareServers      20
+    ServerLimit         256
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_worker_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_event_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+# These need to be set in /etc/apache2/envvars
+User ${APACHE_RUN_USER}
+Group ${APACHE_RUN_GROUP}
+#User www-data
+#Group www-data
+
+AccessFileName .htaccess
+
+<Files ~ "^\.ht">
+    Order allow,deny
+    Deny from all
+    Satisfy all
+</Files>
+
+DefaultType None
+HostnameLookups Off
+
+ErrorLog ${APACHE_LOG_DIR}/error.log
+LogLevel warn
+
+# Include module configuration:
+Include mods-enabled/*.load
+Include mods-enabled/*.conf
+
+# Include list of ports to listen on and which to use for name based vhosts
+Include ports.conf
+
+LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
+LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
+LogFormat "%h %l %u %t \"%r\" %>s %O" common
+LogFormat "%{Referer}i -> %U" referer
+LogFormat "%{User-agent}i" agent
+LogFormat "%b" bytes
+
+Include conf.d/
+
+# Include the virtual host configurations:
+#Include sites-enabled/
+
+ErrorDocument 403 /error/403.html
+ErrorDocument 404 /error/404.html
+ErrorDocument 500 /error/50x.html
+ErrorDocument 501 /error/50x.html
+ErrorDocument 502 /error/50x.html
+ErrorDocument 503 /error/50x.html
+ErrorDocument 506 /error/50x.html
diff --git a/install/ubuntu/18.10/apache2/status.conf b/install/ubuntu/18.10/apache2/status.conf
new file mode 100644
index 00000000..da9d9633
--- /dev/null
+++ b/install/ubuntu/18.10/apache2/status.conf
@@ -0,0 +1,8 @@
+Listen 127.0.0.1:8081
+<Location /server-status>
+    SetHandler server-status
+    Order deny,allow
+    Deny from all
+    Allow from 127.0.0.1
+    Allow from all
+</Location>
diff --git a/install/ubuntu/18.10/bind/named.conf b/install/ubuntu/18.10/bind/named.conf
new file mode 100644
index 00000000..ed6ece88
--- /dev/null
+++ b/install/ubuntu/18.10/bind/named.conf
@@ -0,0 +1,12 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
+
diff --git a/install/ubuntu/18.10/clamav/clamd.conf b/install/ubuntu/18.10/clamav/clamd.conf
new file mode 100644
index 00000000..4e04356e
--- /dev/null
+++ b/install/ubuntu/18.10/clamav/clamd.conf
@@ -0,0 +1,61 @@
+#Automatically Generated by clamav-base postinst
+#To reconfigure clamd run #dpkg-reconfigure clamav-base
+#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
+LocalSocket /var/run/clamav/clamd.ctl
+FixStaleSocket true
+LocalSocketGroup clamav
+LocalSocketMode 666
+# TemporaryDirectory is not set to its default /tmp here to make overriding
+# the default with environment variables TMPDIR/TMP/TEMP possible
+User clamav
+# AllowSupplementaryGroups true
+ScanMail true
+ScanArchive true
+ArchiveBlockEncrypted false
+MaxDirectoryRecursion 15
+FollowDirectorySymlinks false
+FollowFileSymlinks false
+ReadTimeout 180
+MaxThreads 12
+MaxConnectionQueueLength 15
+LogSyslog false
+LogFacility LOG_LOCAL6
+LogClean false
+LogVerbose true
+PidFile /var/run/clamav/clamd.pid
+DatabaseDirectory /var/lib/clamav
+SelfCheck 3600
+Foreground false
+Debug false
+ScanPE true
+ScanOLE2 true
+ScanHTML true
+DetectBrokenExecutables false
+ExitOnOOM false
+LeaveTemporaryFiles false
+AlgorithmicDetection true
+ScanELF true
+IdleTimeout 30
+PhishingSignatures true
+PhishingScanURLs true
+PhishingAlwaysBlockSSLMismatch false
+PhishingAlwaysBlockCloak false
+DetectPUA false
+ScanPartialMessages false
+HeuristicScanPrecedence false
+StructuredDataDetection false
+CommandReadTimeout 5
+SendBufTimeout 200
+MaxQueue 100
+ExtendedDetectionInfo true
+OLE2BlockMacros false
+StreamMaxLength 25M
+LogFile /var/log/clamav/clamav.log
+LogTime true
+LogFileUnlock false
+LogFileMaxSize 0
+Bytecode true
+BytecodeSecurity TrustSigned
+BytecodeTimeout 60000
+OfficialDatabaseOnly false
+CrossFilesystems true
diff --git a/install/ubuntu/18.10/deb_signing.key b/install/ubuntu/18.10/deb_signing.key
new file mode 100644
index 00000000..2ad2db8b
--- /dev/null
+++ b/install/ubuntu/18.10/deb_signing.key
@@ -0,0 +1,30 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.12 (GNU/Linux)
+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+=J2HJ
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/install/ubuntu/18.10/dovecot/conf.d/10-auth.conf b/install/ubuntu/18.10/dovecot/conf.d/10-auth.conf
new file mode 100644
index 00000000..dfcc8311
--- /dev/null
+++ b/install/ubuntu/18.10/dovecot/conf.d/10-auth.conf
@@ -0,0 +1,4 @@
+disable_plaintext_auth = no
+auth_verbose = yes
+auth_mechanisms = plain login
+!include auth-passwdfile.conf.ext
diff --git a/install/ubuntu/18.10/dovecot/conf.d/10-logging.conf b/install/ubuntu/18.10/dovecot/conf.d/10-logging.conf
new file mode 100644
index 00000000..a5f207d5
--- /dev/null
+++ b/install/ubuntu/18.10/dovecot/conf.d/10-logging.conf
@@ -0,0 +1 @@
+log_path = /var/log/dovecot.log
diff --git a/install/ubuntu/18.10/dovecot/conf.d/10-mail.conf b/install/ubuntu/18.10/dovecot/conf.d/10-mail.conf
new file mode 100644
index 00000000..7a20878a
--- /dev/null
+++ b/install/ubuntu/18.10/dovecot/conf.d/10-mail.conf
@@ -0,0 +1,9 @@
+mail_privileged_group = mail
+mail_access_groups = mail
+mail_location = maildir:%h/mail/%d/%n
+pop3_uidl_format = %08Xu%08Xv
+namespace inbox {
+  inbox = yes
+}
+first_valid_uid = 1000
+mbox_write_locks = fcntl
diff --git a/install/ubuntu/18.10/dovecot/conf.d/10-master.conf b/install/ubuntu/18.10/dovecot/conf.d/10-master.conf
new file mode 100644
index 00000000..a75a9aaa
--- /dev/null
+++ b/install/ubuntu/18.10/dovecot/conf.d/10-master.conf
@@ -0,0 +1,29 @@
+service imap-login {
+  inet_listener imap {
+  }
+  inet_listener imaps {
+  }
+}
+
+service pop3-login {
+  inet_listener pop3 {
+  }
+  inet_listener pop3s {
+  }
+}
+
+
+service imap {
+}
+
+service pop3 {
+}
+
+service auth {
+  unix_listener auth-client {
+    group = mail
+    mode = 0660
+    user = dovecot
+  }
+  user = dovecot
+}
diff --git a/install/ubuntu/18.10/dovecot/conf.d/10-ssl.conf b/install/ubuntu/18.10/dovecot/conf.d/10-ssl.conf
new file mode 100644
index 00000000..24cbf3e2
--- /dev/null
+++ b/install/ubuntu/18.10/dovecot/conf.d/10-ssl.conf
@@ -0,0 +1,5 @@
+ssl = yes
+ssl_protocols = !SSLv2 !SSLv3
+
+ssl_cert = </usr/local/vesta/ssl/certificate.crt
+ssl_key = </usr/local/vesta/ssl/certificate.key
diff --git a/install/ubuntu/18.10/dovecot/conf.d/15-mailboxes.conf b/install/ubuntu/18.10/dovecot/conf.d/15-mailboxes.conf
new file mode 100644
index 00000000..7b2bab97
--- /dev/null
+++ b/install/ubuntu/18.10/dovecot/conf.d/15-mailboxes.conf
@@ -0,0 +1,29 @@
+## Mailbox definitions
+##
+
+
+# NOTE: Assumes "namespace inbox" has been defined in 10-mail.conf.
+namespace inbox {
+  mailbox Drafts {
+    special_use = \Drafts
+    auto = subscribe
+  }
+
+  mailbox Junk {
+    special_use = \Junk
+    auto = subscribe
+  }
+
+  mailbox Trash {
+    special_use = \Trash
+    auto = subscribe
+  }
+
+  mailbox Sent {
+    special_use = \Sent
+    auto = subscribe
+  }
+  mailbox "Sent Messages" {
+    special_use = \Sent
+  }
+}
diff --git a/install/ubuntu/18.10/dovecot/conf.d/20-imap.conf b/install/ubuntu/18.10/dovecot/conf.d/20-imap.conf
new file mode 100644
index 00000000..1a459f8e
--- /dev/null
+++ b/install/ubuntu/18.10/dovecot/conf.d/20-imap.conf
@@ -0,0 +1,58 @@
+##
+## IMAP specific settings
+##
+
+protocol imap {
+  # Maximum IMAP command line length. Some clients generate very long command
+  # lines with huge mailboxes, so you may need to raise this if you get
+  # "Too long argument" or "IMAP command line too large" errors often.
+  #imap_max_line_length = 64k
+
+  # Maximum number of IMAP connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  #mail_max_userip_connections = 10
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # IMAP logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #imap_logout_format = bytes=%i/%o
+
+  # Override the IMAP CAPABILITY response. If the value begins with '+',
+  # add the given capabilities on top of the defaults (e.g. +XFOO XBAR).
+  #imap_capability = 
+
+  # How long to wait between "OK Still here" notifications when client is
+  # IDLEing.
+  #imap_idle_notify_interval = 2 mins
+
+  # ID field names and values to send to clients. Using * as the value makes
+  # Dovecot use the default value. The following fields have default values
+  # currently: name, version, os, os-version, support-url, support-email.
+  #imap_id_send = 
+
+  # ID fields sent by client to log. * means everything.
+  #imap_id_log =
+
+  # Workarounds for various client bugs:
+  #   delay-newmail:
+  #     Send EXISTS/RECENT new mail notifications only when replying to NOOP
+  #     and CHECK commands. Some clients ignore them otherwise, for example OSX
+  #     Mail (<v2.1). Outlook Express breaks more badly though, without this it
+  #     may show user "Message no longer in server" errors. Note that OE6 still
+  #     breaks even with this workaround if synchronization is set to
+  #     "Headers Only".
+  #   tb-extra-mailbox-sep:
+  #     Thunderbird gets somehow confused with LAYOUT=fs (mbox and dbox) and
+  #     adds extra '/' suffixes to mailbox names. This option causes Dovecot to
+  #     ignore the extra '/' instead of treating it as invalid mailbox name.
+  #   tb-lsub-flags:
+  #     Show \Noselect flags for LSUB replies with LAYOUT=fs (e.g. mbox).
+  #     This makes Thunderbird realize they aren't selectable and show them
+  #     greyed out, instead of only later giving "not selectable" popup error.
+  #
+  # The list is space-separated.
+  #imap_client_workarounds = 
+}
diff --git a/install/ubuntu/18.10/dovecot/conf.d/20-pop3.conf b/install/ubuntu/18.10/dovecot/conf.d/20-pop3.conf
new file mode 100644
index 00000000..a3a43b88
--- /dev/null
+++ b/install/ubuntu/18.10/dovecot/conf.d/20-pop3.conf
@@ -0,0 +1,91 @@
+##
+## POP3 specific settings
+##
+
+protocol pop3 {
+  # Don't try to set mails non-recent or seen with POP3 sessions. This is
+  # mostly intended to reduce disk I/O. With maildir it doesn't move files
+  # from new/ to cur/, with mbox it doesn't write Status-header.
+  #pop3_no_flag_updates = no
+
+  # Support LAST command which exists in old POP3 specs, but has been removed
+  # from new ones. Some clients still wish to use this though. Enabling this
+  # makes RSET command clear all \Seen flags from messages.
+  #pop3_enable_last = no
+
+  # If mail has X-UIDL header, use it as the mail's UIDL.
+  #pop3_reuse_xuidl = no
+
+  # Keep the mailbox locked for the entire POP3 session.
+  #pop3_lock_session = no
+
+  # POP3 requires message sizes to be listed as if they had CR+LF linefeeds.
+  # Many POP3 servers violate this by returning the sizes with LF linefeeds,
+  # because it's faster to get. When this setting is enabled, Dovecot still
+  # tries to do the right thing first, but if that requires opening the
+  # message, it fallbacks to the easier (but incorrect) size.
+  #pop3_fast_size_lookups = no
+
+  # POP3 UIDL (unique mail identifier) format to use. You can use following
+  # variables, along with the variable modifiers described in
+  # doc/wiki/Variables.txt (e.g. %Uf for the filename in uppercase)
+  #
+  #  %v - Mailbox's IMAP UIDVALIDITY
+  #  %u - Mail's IMAP UID
+  #  %m - MD5 sum of the mailbox headers in hex (mbox only)
+  #  %f - filename (maildir only)
+  #  %g - Mail's GUID
+  #
+  # If you want UIDL compatibility with other POP3 servers, use:
+  #  UW's ipop3d         : %08Xv%08Xu
+  #  Courier             : %f or %v-%u (both might be used simultaneosly)
+  #  Cyrus (<= 2.1.3)    : %u
+  #  Cyrus (>= 2.1.4)    : %v.%u
+  #  Dovecot v0.99.x     : %v.%u
+  #  tpop3d              : %Mf
+  #
+  # Note that Outlook 2003 seems to have problems with %v.%u format which was
+  # Dovecot's default, so if you're building a new server it would be a good
+  # idea to change this. %08Xu%08Xv should be pretty fail-safe.
+  #
+  #pop3_uidl_format = %08Xu%08Xv
+
+  # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes
+  # won't change those UIDLs. Currently this works only with Maildir.
+  #pop3_save_uidl = no
+
+  # What to do about duplicate UIDLs if they exist?
+  #   allow: Show duplicates to clients.
+  #   rename: Append a temporary -2, -3, etc. counter after the UIDL.
+  #pop3_uidl_duplicates = allow
+
+  # POP3 logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #  %t - number of TOP commands
+  #  %p - number of bytes sent to client as a result of TOP command
+  #  %r - number of RETR commands
+  #  %b - number of bytes sent to client as a result of RETR command
+  #  %d - number of deleted messages
+  #  %m - number of messages (before deletion)
+  #  %s - mailbox size in bytes (before deletion)
+  #  %u - old/new UIDL hash. may help finding out if UIDLs changed unexpectedly
+  #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
+
+  # Maximum number of POP3 connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  #mail_max_userip_connections = 10
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # Workarounds for various client bugs:
+  #   outlook-no-nuls:
+  #     Outlook and Outlook Express hang if mails contain NUL characters.
+  #     This setting replaces them with 0x80 character.
+  #   oe-ns-eoh:
+  #     Outlook Express and Netscape Mail breaks if end of headers-line is
+  #     missing. This option simply sends it if it's missing.
+  # The list is space-separated.
+  #pop3_client_workarounds = 
+}
diff --git a/install/ubuntu/18.10/dovecot/conf.d/auth-passwdfile.conf.ext b/install/ubuntu/18.10/dovecot/conf.d/auth-passwdfile.conf.ext
new file mode 100644
index 00000000..75e6e115
--- /dev/null
+++ b/install/ubuntu/18.10/dovecot/conf.d/auth-passwdfile.conf.ext
@@ -0,0 +1,9 @@
+passdb {
+  driver = passwd-file
+  args = scheme=MD5-CRYPT username_format=%n /etc/exim4/domains/%d/passwd
+}
+
+userdb {
+  driver = passwd-file
+  args = username_format=%n /etc/exim4/domains/%d/passwd
+}
diff --git a/install/ubuntu/18.10/dovecot/dovecot.conf b/install/ubuntu/18.10/dovecot/dovecot.conf
new file mode 100644
index 00000000..0a855351
--- /dev/null
+++ b/install/ubuntu/18.10/dovecot/dovecot.conf
@@ -0,0 +1,4 @@
+protocols = imap pop3
+listen = *, ::
+base_dir = /var/run/dovecot/
+!include conf.d/*.conf
diff --git a/install/ubuntu/18.10/exim/dnsbl.conf b/install/ubuntu/18.10/exim/dnsbl.conf
new file mode 100644
index 00000000..5166b255
--- /dev/null
+++ b/install/ubuntu/18.10/exim/dnsbl.conf
@@ -0,0 +1,2 @@
+bl.spamcop.net
+zen.spamhaus.org
diff --git a/install/ubuntu/18.10/exim/exim4.conf.template b/install/ubuntu/18.10/exim/exim4.conf.template
new file mode 100644
index 00000000..c904441f
--- /dev/null
+++ b/install/ubuntu/18.10/exim/exim4.conf.template
@@ -0,0 +1,382 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD = yes
+
+add_environment = <; PATH=/bin:/usr/bin
+keep_environment =
+disable_ipv6 = true
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/certificate.crt
+tls_privatekey = /usr/local/vesta/ssl/certificate.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 5s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lc:${domain:$h_from:}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+begin acl
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth required
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = *
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{1024K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = debian-spamd:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/$domain/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #helo_data = $sender_address_domain
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  from = "${local_part}@${domain}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################
diff --git a/install/ubuntu/18.10/exim/spam-blocks.conf b/install/ubuntu/18.10/exim/spam-blocks.conf
new file mode 100644
index 00000000..e69de29b
diff --git a/install/ubuntu/18.10/fail2ban/action.d/vesta.conf b/install/ubuntu/18.10/fail2ban/action.d/vesta.conf
new file mode 100644
index 00000000..0edfc349
--- /dev/null
+++ b/install/ubuntu/18.10/fail2ban/action.d/vesta.conf
@@ -0,0 +1,9 @@
+# Fail2Ban configuration file for vesta
+
+[Definition]
+
+actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
+actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
+actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
+actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
+actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>
diff --git a/install/ubuntu/18.10/fail2ban/filter.d/vesta.conf b/install/ubuntu/18.10/fail2ban/filter.d/vesta.conf
new file mode 100644
index 00000000..69670a56
--- /dev/null
+++ b/install/ubuntu/18.10/fail2ban/filter.d/vesta.conf
@@ -0,0 +1,10 @@
+# Fail2Ban filter for unsuccesfull Vesta authentication attempts
+#
+
+[INCLUDES]
+before = common.conf
+
+[Definition]
+failregex =  .* <HOST> failed to login
+ignoreregex =
+
diff --git a/install/ubuntu/18.10/fail2ban/jail.local b/install/ubuntu/18.10/fail2ban/jail.local
new file mode 100644
index 00000000..013f81c4
--- /dev/null
+++ b/install/ubuntu/18.10/fail2ban/jail.local
@@ -0,0 +1,51 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
+[ssh-iptables]
+enabled  = true
+filter   = sshd
+action   = vesta[name=SSH]
+logpath  = /var/log/auth.log
+maxretry = 5
+
+[vsftpd-iptables]
+enabled  = false
+filter   = vsftpd
+action   = vesta[name=FTP]
+logpath  = /var/log/vsftpd.log
+maxretry = 5
+
+[exim-iptables]
+enabled = true
+filter  = exim
+action  = vesta[name=MAIL]
+logpath = /var/log/exim4/mainlog
+maxretry = 5
+
+[dovecot-iptables]
+enabled = true
+filter  = dovecot
+action  = vesta[name=MAIL]
+logpath = /var/log/dovecot.log
+maxretry = 5
+
+[mysqld-iptables]
+enabled  = false
+filter   = mysqld-auth
+action   = vesta[name=DB]
+logpath  = /var/log/mysql.log
+maxretry = 5
+
+[vesta-iptables]
+enabled = true
+filter  = vesta
+action  = vesta[name=VESTA]
+logpath = /var/log/vesta/auth.log
+maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5
diff --git a/install/ubuntu/18.10/firewall/ports.conf b/install/ubuntu/18.10/firewall/ports.conf
new file mode 100644
index 00000000..b730d012
--- /dev/null
+++ b/install/ubuntu/18.10/firewall/ports.conf
@@ -0,0 +1,17 @@
+PROTOCOL='TCP' PORT='20'
+PROTOCOL='TCP' PORT='21'
+PROTOCOL='TCP' PORT='22'
+PROTOCOL='TCP' PORT='25'
+PROTOCOL='TCP' PORT='53'
+PROTOCOL='UDP' PORT='53'
+PROTOCOL='TCP' PORT='80'
+PROTOCOL='TCP' PORT='443'
+PROTOCOL='TCP' PORT='110'
+PROTOCOL='UDP' PORT='123'
+PROTOCOL='TCP' PORT='143'
+PROTOCOL='TCP' PORT='3306'
+PROTOCOL='TCP' PORT='5432'
+PROTOCOL='TCP' PORT='8080'
+PROTOCOL='TCP' PORT='8433'
+PROTOCOL='TCP' PORT='8083'
+PROTOCOL='TCP' PORT='12000:12100'
diff --git a/install/ubuntu/18.10/firewall/rules.conf b/install/ubuntu/18.10/firewall/rules.conf
new file mode 100644
index 00000000..fba98e1e
--- /dev/null
+++ b/install/ubuntu/18.10/firewall/rules.conf
@@ -0,0 +1,11 @@
+RULE='1' ACTION='ACCEPT' PROTOCOL='ICMP' PORT='0' IP='0.0.0.0/0' COMMENT='PING' SUSPENDED='no' TIME='17:13:48' DATE='2014-09-16'
+RULE='2' ACTION='ACCEPT' PROTOCOL='TCP' PORT='8083' IP='0.0.0.0/0' COMMENT='VESTA' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='3' ACTION='ACCEPT' PROTOCOL='TCP' PORT='3306,5432' IP='0.0.0.0/0' COMMENT='DB' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='4' ACTION='ACCEPT' PROTOCOL='TCP' PORT='143,993' IP='0.0.0.0/0' COMMENT='IMAP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='5' ACTION='ACCEPT' PROTOCOL='TCP' PORT='110,995' IP='0.0.0.0/0' COMMENT='POP3' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='6' ACTION='ACCEPT' PROTOCOL='TCP' PORT='25,465,587,2525' IP='0.0.0.0/0' COMMENT='SMTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='7' ACTION='ACCEPT' PROTOCOL='TCP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='8' ACTION='ACCEPT' PROTOCOL='UDP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='9' ACTION='ACCEPT' PROTOCOL='TCP' PORT='21,12000-12100' IP='0.0.0.0/0' COMMENT='FTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='10' ACTION='ACCEPT' PROTOCOL='TCP' PORT='80,443' IP='0.0.0.0/0' COMMENT='WEB' SUSPENDED='no' TIME='17:04:27' DATE='2014-09-24'
+RULE='11' ACTION='ACCEPT' PROTOCOL='TCP' PORT='22' IP='0.0.0.0/0' COMMENT='SSH' SUSPENDED='no' TIME='17:14:41' DATE='2014-09-16'
diff --git a/install/ubuntu/18.10/logrotate/apache2 b/install/ubuntu/18.10/logrotate/apache2
new file mode 100644
index 00000000..27629d0d
--- /dev/null
+++ b/install/ubuntu/18.10/logrotate/apache2
@@ -0,0 +1,19 @@
+/var/log/apache2/*.log /var/log/apache2/domains/*log {
+        weekly
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 root adm
+        sharedscripts
+        postrotate
+                /etc/init.d/apache2 reload > /dev/null || true
+                [ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+        prerotate
+                if [ -d /etc/logrotate.d/httpd-prerotate ]; then \
+                        run-parts /etc/logrotate.d/httpd-prerotate; \
+                fi; \
+        endscript
+}
diff --git a/install/ubuntu/18.10/logrotate/dovecot b/install/ubuntu/18.10/logrotate/dovecot
new file mode 100644
index 00000000..ac4fd6e9
--- /dev/null
+++ b/install/ubuntu/18.10/logrotate/dovecot
@@ -0,0 +1,12 @@
+/var/log/dovecot*.log {
+  weekly
+  rotate 4
+  missingok
+  notifempty
+  compress
+  delaycompress
+  sharedscripts
+  postrotate
+    doveadm log reopen
+  endscript
+}
diff --git a/install/ubuntu/18.10/logrotate/nginx b/install/ubuntu/18.10/logrotate/nginx
new file mode 100644
index 00000000..d667f213
--- /dev/null
+++ b/install/ubuntu/18.10/logrotate/nginx
@@ -0,0 +1,13 @@
+/var/log/nginx/*log /var/log/nginx/domains/*log {
+        daily
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 nginx adm
+        sharedscripts
+        postrotate
+                [ -f /var/run/nginx.pid ] && kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+}
diff --git a/install/ubuntu/18.10/logrotate/vesta b/install/ubuntu/18.10/logrotate/vesta
new file mode 100644
index 00000000..027a3439
--- /dev/null
+++ b/install/ubuntu/18.10/logrotate/vesta
@@ -0,0 +1,7 @@
+/usr/local/vesta/log/*.log {
+    missingok
+    notifempty
+    size 30k
+    yearly
+    create 0600 root root
+}
diff --git a/install/ubuntu/18.10/mysql/my-large.cnf b/install/ubuntu/18.10/mysql/my-large.cnf
new file mode 100644
index 00000000..7201377c
--- /dev/null
+++ b/install/ubuntu/18.10/mysql/my-large.cnf
@@ -0,0 +1,41 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 256M
+max_allowed_packet = 32M
+table_open_cache = 256
+sort_buffer_size = 1M
+read_buffer_size = 1M
+read_rnd_buffer_size = 4M
+myisam_sort_buffer_size = 64M
+thread_cache_size = 8
+query_cache_size= 16M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=200
+max_user_connections=50
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/ubuntu/18.10/mysql/my-medium.cnf b/install/ubuntu/18.10/mysql/my-medium.cnf
new file mode 100644
index 00000000..1c10ab9a
--- /dev/null
+++ b/install/ubuntu/18.10/mysql/my-medium.cnf
@@ -0,0 +1,40 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+  
+skip-external-locking
+key_buffer_size = 16M
+max_allowed_packet = 16M
+table_open_cache = 64
+sort_buffer_size = 512K
+net_buffer_length = 8K
+read_buffer_size = 256K
+read_rnd_buffer_size = 512K
+myisam_sort_buffer_size = 8M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=70
+max_user_connections=30
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/ubuntu/18.10/mysql/my-small.cnf b/install/ubuntu/18.10/mysql/my-small.cnf
new file mode 100644
index 00000000..26a80478
--- /dev/null
+++ b/install/ubuntu/18.10/mysql/my-small.cnf
@@ -0,0 +1,40 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 16K
+max_allowed_packet = 1M
+table_open_cache = 4
+sort_buffer_size = 64K
+read_buffer_size = 256K
+read_rnd_buffer_size = 256K
+net_buffer_length = 2K
+thread_stack = 240K
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=30
+max_user_connections=20
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/ubuntu/18.10/nginx/nginx.conf b/install/ubuntu/18.10/nginx/nginx.conf
new file mode 100644
index 00000000..dc2cf1dd
--- /dev/null
+++ b/install/ubuntu/18.10/nginx/nginx.conf
@@ -0,0 +1,139 @@
+# Server globals
+user                    www-data;
+worker_processes        auto;
+worker_rlimit_nofile    65535;
+error_log               /var/log/nginx/error.log;
+pid                     /var/run/nginx.pid;
+
+
+# Worker config
+events {
+        worker_connections  1024;
+        use                 epoll;
+        multi_accept        on;
+}
+
+
+http {
+    # Main settings
+    sendfile                        on;
+    tcp_nopush                      on;
+    tcp_nodelay                     on;
+    client_header_timeout           60s;
+    client_body_timeout             60s;
+    client_header_buffer_size       2k;
+    client_body_buffer_size         256k;
+    client_max_body_size            256m;
+    large_client_header_buffers     4 8k;
+    send_timeout                    60s;
+    keepalive_timeout               30s;
+    reset_timedout_connection       on;
+    server_tokens                   off;
+    server_name_in_redirect         off;
+    server_names_hash_max_size      512;
+    server_names_hash_bucket_size   512;
+
+
+    # Log format
+    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
+                        '"$status" $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  bytes   '$body_bytes_sent';
+    #access_log          /var/log/nginx/access.log main;
+    access_log off;
+
+
+    # Mime settings
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+
+    # Compression
+    gzip                on;
+    gzip_vary           on;
+    gzip_static         on;
+    gzip_vary           on;
+    gzip_comp_level     6;
+    gzip_min_length     1024;
+    gzip_buffers        16 8k;
+    gzip_types          text/plain text/css text/javascript text/js text/xml application/json application/javascript application/x-javascript application/xml application/xml+rss application/x-font-ttf image/svg+xml font/opentype;
+    gzip_proxied        any;
+    gzip_disable        "MSIE [1-6]\.";
+
+    # Proxy settings
+    proxy_redirect      off;
+    proxy_set_header    Host            $host;
+    proxy_set_header    X-Real-IP       $remote_addr;
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_header   Set-Cookie;
+    proxy_buffers       32 4k;
+    proxy_connect_timeout   30s;
+    proxy_send_timeout  90s;
+    proxy_read_timeout  90s;
+
+        
+    # Cloudflare https://www.cloudflare.com/ips
+    set_real_ip_from   103.21.244.0/22;
+    set_real_ip_from   103.22.200.0/22;
+    set_real_ip_from   103.31.4.0/22;
+    set_real_ip_from   104.16.0.0/12;
+    set_real_ip_from   108.162.192.0/18;
+    set_real_ip_from   131.0.72.0/22;
+    set_real_ip_from   141.101.64.0/18;
+    set_real_ip_from   162.158.0.0/15;
+    set_real_ip_from   172.64.0.0/13;
+    set_real_ip_from   173.245.48.0/20;
+    set_real_ip_from   188.114.96.0/20;
+    set_real_ip_from   190.93.240.0/20;
+    set_real_ip_from   197.234.240.0/22;
+    set_real_ip_from   198.41.128.0/17;
+    #set_real_ip_from   2400:cb00::/32;
+    #set_real_ip_from   2606:4700::/32;
+    #set_real_ip_from   2803:f800::/32;
+    #set_real_ip_from   2405:b500::/32;
+    #set_real_ip_from   2405:8100::/32;
+    #set_real_ip_from   2c0f:f248::/32;
+    #set_real_ip_from   2a06:98c0::/29;
+    real_ip_header     CF-Connecting-IP;
+
+
+    # SSL PCI Compliance
+    ssl_session_cache   shared:SSL:10m;
+    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
+
+
+    # Error pages
+    error_page          403          /error/403.html;
+    error_page          404          /error/404.html;
+    error_page          502 503 504  /error/50x.html;
+
+
+    # Cache settings
+    proxy_cache_path /var/cache/nginx levels=2 keys_zone=cache:10m inactive=60m max_size=1024m;
+    proxy_cache_key "$host$request_uri $cookie_user";
+    proxy_temp_path  /var/cache/nginx/temp;
+    proxy_ignore_headers Expires Cache-Control;
+    proxy_cache_use_stale error timeout invalid_header http_502;
+    proxy_cache_valid any 1d;
+
+
+    # Cache bypass
+    map $http_cookie $no_cache {
+        default 0;
+        ~SESS 1;
+        ~wordpress_logged_in 1;
+    }
+
+
+    # File cache settings
+    open_file_cache          max=10000 inactive=30s;
+    open_file_cache_valid    60s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors   off;
+
+
+    # Wildcard include
+    include             /etc/nginx/conf.d/*.conf;
+}
diff --git a/install/ubuntu/18.10/nginx/phpmyadmin.inc b/install/ubuntu/18.10/nginx/phpmyadmin.inc
new file mode 100644
index 00000000..1feb8546
--- /dev/null
+++ b/install/ubuntu/18.10/nginx/phpmyadmin.inc
@@ -0,0 +1,18 @@
+location /phpmyadmin {
+    alias /usr/share/phpmyadmin/;
+
+    location ~ /(libraries|setup) {
+        return 404;
+    }
+
+    location ~ ^/phpmyadmin/(.*\.php)$ {
+        alias /usr/share/phpmyadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+    location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
+        root /usr/share/;
+    }
+}
diff --git a/install/ubuntu/18.10/nginx/phppgadmin.inc b/install/ubuntu/18.10/nginx/phppgadmin.inc
new file mode 100644
index 00000000..cd1e5806
--- /dev/null
+++ b/install/ubuntu/18.10/nginx/phppgadmin.inc
@@ -0,0 +1,11 @@
+location /phppgadmin {
+    alias /usr/share/phppgadmin/;
+
+    location ~ ^/phppgadmin/(.*\.php)$ {
+        alias /usr/share/phppgadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/ubuntu/18.10/nginx/status.conf b/install/ubuntu/18.10/nginx/status.conf
new file mode 100644
index 00000000..c0bcd069
--- /dev/null
+++ b/install/ubuntu/18.10/nginx/status.conf
@@ -0,0 +1,9 @@
+server {
+    listen       127.0.0.1:8084 default;
+    server_name  _;
+    server_name_in_redirect  off;
+    location / {
+        stub_status on;
+        access_log   off;
+   }
+}
diff --git a/install/ubuntu/18.10/nginx/webmail.inc b/install/ubuntu/18.10/nginx/webmail.inc
new file mode 100644
index 00000000..ad66895b
--- /dev/null
+++ b/install/ubuntu/18.10/nginx/webmail.inc
@@ -0,0 +1,15 @@
+location /webmail {
+    alias /var/lib/roundcube/;
+
+    location ~ /(config|temp|logs) {
+        return 404;
+    }
+
+    location ~ ^/webmail/(.*\.php)$ {
+        alias /var/lib/roundcube/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/ubuntu/18.10/packages/default.pkg b/install/ubuntu/18.10/packages/default.pkg
new file mode 100644
index 00000000..c2a93574
--- /dev/null
+++ b/install/ubuntu/18.10/packages/default.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='100'
+WEB_ALIASES='100'
+DNS_DOMAINS='100'
+DNS_RECORDS='100'
+MAIL_DOMAINS='100'
+MAIL_ACCOUNTS='100'
+DATABASES='100'
+CRON_JOBS='100'
+DISK_QUOTA='unlimited'
+BANDWIDTH='100000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='3'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/18.10/packages/gainsboro.pkg b/install/ubuntu/18.10/packages/gainsboro.pkg
new file mode 100644
index 00000000..76d7dae2
--- /dev/null
+++ b/install/ubuntu/18.10/packages/gainsboro.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='10'
+WEB_ALIASES='10'
+DNS_DOMAINS='10'
+DNS_RECORDS='10'
+MAIL_DOMAINS='10'
+MAIL_ACCOUNTS='10'
+DATABASES='10'
+CRON_JOBS='10'
+DISK_QUOTA='10000'
+BANDWIDTH='10000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='1'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/18.10/packages/palegreen.pkg b/install/ubuntu/18.10/packages/palegreen.pkg
new file mode 100644
index 00000000..3db5fe57
--- /dev/null
+++ b/install/ubuntu/18.10/packages/palegreen.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='hosting'
+PROXY_TEMPLATE='hosting'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='50'
+WEB_ALIASES='50'
+DNS_DOMAINS='50'
+DNS_RECORDS='50'
+MAIL_DOMAINS='50'
+MAIL_ACCOUNTS='50'
+DATABASES='50'
+CRON_JOBS='50'
+DISK_QUOTA='50000'
+BANDWIDTH='50000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='5'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/18.10/packages/slategrey.pkg b/install/ubuntu/18.10/packages/slategrey.pkg
new file mode 100644
index 00000000..d89e796f
--- /dev/null
+++ b/install/ubuntu/18.10/packages/slategrey.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='default'
+PROXY_TEMPLATE='default'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='100'
+WEB_ALIASES='100'
+DNS_DOMAINS='100'
+DNS_RECORDS='100'
+MAIL_DOMAINS='100'
+MAIL_ACCOUNTS='100'
+DATABASES='100'
+CRON_JOBS='100'
+DISK_QUOTA='10000'
+BANDWIDTH='100000'
+NS='ns1.domain.tld,ns2.domain.tld'
+SHELL='nologin'
+BACKUPS='3'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/ubuntu/18.10/pga/config.inc.php b/install/ubuntu/18.10/pga/config.inc.php
new file mode 100644
index 00000000..1eec9776
--- /dev/null
+++ b/install/ubuntu/18.10/pga/config.inc.php
@@ -0,0 +1,159 @@
+<?php
+
+    /**
+     * Central phpPgAdmin configuration.  As a user you may modify the
+     * settings here for your particular configuration.
+     *
+     * $Id: config.inc.php-dist,v 1.55 2008/02/18 21:10:31 xzilla Exp $
+     */
+
+    // An example server.  Create as many of these as you wish,
+    // indexed from zero upwards.
+
+    // Display name for the server on the login screen
+    $conf['servers'][0]['desc'] = 'PostgreSQL';
+
+    // Hostname or IP address for server.  Use '' for UNIX domain socket.
+    // use 'localhost' for TCP/IP connection on this computer
+    $conf['servers'][0]['host'] = 'localhost';
+
+    // Database port on server (5432 is the PostgreSQL default)
+    $conf['servers'][0]['port'] = 5432;
+
+    // Database SSL mode
+    // Possible options: disable, allow, prefer, require
+    // To require SSL on older servers use option: legacy
+    // To ignore the SSL mode, use option: unspecified
+    $conf['servers'][0]['sslmode'] = 'allow';
+
+    // Change the default database only if you cannot connect to template1.
+    // For a PostgreSQL 8.1+ server, you can set this to 'postgres'.
+    $conf['servers'][0]['defaultdb'] = 'template1';
+
+    // Specify the path to the database dump utilities for this server.
+    // You can set these to '' if no dumper is available.
+    $conf['servers'][0]['pg_dump_path'] = '/usr/bin/pg_dump';
+    $conf['servers'][0]['pg_dumpall_path'] = '/usr/bin/pg_dumpall';
+
+    // Slony (www.slony.info) support?
+    $conf['servers'][0]['slony_support'] = false;
+    // Specify the path to the Slony SQL scripts (where slony1_base.sql is located, etc.)
+    // No trailing slash.
+    $conf['servers'][0]['slony_sql'] = '/usr/share/pgsql';
+
+    // Example for a second server (PostgreSQL for Windows)
+    //$conf['servers'][1]['desc'] = 'Test Server';
+    //$conf['servers'][1]['host'] = '127.0.0.1';
+    //$conf['servers'][1]['port'] = 5432;
+    //$conf['servers'][1]['sslmode'] = 'allow';
+    //$conf['servers'][1]['defaultdb'] = 'template1';
+    //$conf['servers'][1]['pg_dump_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dump.exe';
+    //$conf['servers'][1]['pg_dumpall_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dumpall.exe';
+    //$conf['servers'][1]['slony_support'] = false;
+    //$conf['servers'][1]['slony_sql'] = 'C:\\Program Files\\PostgreSQL\\8.0\\share';
+
+
+    // Example of groups definition.
+    // Groups allow administrators to logicaly group servers together under group nodes in the left browser tree
+    //
+    // The group '0' description
+    //$conf['srv_groups'][0]['desc'] = 'group one';
+    //
+    // Add here servers indexes belonging to the group '0' seperated by comma
+    //$conf['srv_groups'][0]['servers'] = '0,1,2'; 
+    //
+    // A server can belong to multi groups
+    //$conf['srv_groups'][1]['desc'] = 'group two';
+    //$conf['srv_groups'][1]['servers'] = '3,1';
+
+
+    // Default language. E.g.: 'english', 'polish', etc.  See lang/ directory
+    // for all possibilities. If you specify 'auto' (the default) it will use 
+    // your browser preference.
+    $conf['default_lang'] = 'auto';
+
+    // AutoComplete uses AJAX interaction to list foreign key values 
+    // on insert fields. It currently only works on single column 
+    // foreign keys. You can choose one of the following values:
+    // 'default on' enables AutoComplete and turns it on by default.
+    // 'default off' enables AutoComplete but turns it off by default.
+    // 'disable' disables AutoComplete.
+    $conf['autocomplete'] = 'default on';
+
+    // If extra login security is true, then logins via phpPgAdmin with no
+    // password or certain usernames (pgsql, postgres, root, administrator)
+    // will be denied. Only set this false once you have read the FAQ and
+    // understand how to change PostgreSQL's pg_hba.conf to enable
+    // passworded local connections.
+    $conf['extra_login_security'] = true;
+
+    // Only show owned databases?
+    // Note: This will simply hide other databases in the list - this does
+    // not in any way prevent your users from seeing other database by
+    // other means. (e.g. Run 'SELECT * FROM pg_database' in the SQL area.)
+    $conf['owned_only'] = false;
+
+    // Display comments on objects?  Comments are a good way of documenting
+    // a database, but they do take up space in the interface.
+    $conf['show_comments'] = true;
+
+    // Display "advanced" objects? Setting this to true will show 
+    // aggregates, types, operators, operator classes, conversions, 
+    // languages and casts in phpPgAdmin. These objects are rarely 
+    // administered and can clutter the interface.
+    $conf['show_advanced'] = false;
+
+    // Display "system" objects?
+    $conf['show_system'] = false;
+
+    // Display reports feature?  For this feature to work, you must
+    // install the reports database as explained in the INSTALL file.
+    $conf['show_reports'] = true;
+
+    // Database and table for reports
+    $conf['reports_db'] = 'phppgadmin';
+    $conf['reports_schema'] = 'public';
+    $conf['reports_table'] = 'ppa_reports';
+
+    // Only show owned reports?
+    // Note: This does not prevent people from accessing other reports by
+    // other means.
+    $conf['owned_reports_only'] = false;
+
+    // Minimum length users can set their password to.
+    $conf['min_password_length'] = 1;
+
+    // Width of the left frame in pixels (object browser)
+    $conf['left_width'] = 200;
+
+    // Which look & feel theme to use
+    $conf['theme'] = 'default';
+
+    // Show OIDs when browsing tables?
+    $conf['show_oids'] = false;
+
+    // Max rows to show on a page when browsing record sets
+    $conf['max_rows'] = 30;
+
+    // Max chars of each field to display by default in browse mode
+    $conf['max_chars'] = 50;
+
+    // Send XHTML strict headers?
+    $conf['use_xhtml_strict'] = false;
+
+    // Base URL for PostgreSQL documentation.
+    // '%s', if present, will be replaced with the PostgreSQL version
+    // (e.g. 8.4 )
+    $conf['help_base'] = 'http://www.postgresql.org/docs/%s/interactive/';
+
+    // Configuration for ajax scripts
+    // Time in seconds. If set to 0, refreshing data using ajax will be disabled (locks and activity pages)
+    $conf['ajax_refresh'] = 3;
+
+    /*****************************************
+     * Don't modify anything below this line *
+     *****************************************/
+
+    $conf['version'] = 19;
+
+?>
diff --git a/install/ubuntu/18.10/pga/phppgadmin.conf b/install/ubuntu/18.10/pga/phppgadmin.conf
new file mode 100644
index 00000000..f39247d6
--- /dev/null
+++ b/install/ubuntu/18.10/pga/phppgadmin.conf
@@ -0,0 +1,31 @@
+Alias /phppgadmin /usr/share/phppgadmin
+
+<Directory /usr/share/phppgadmin>
+
+DirectoryIndex index.php
+AllowOverride None
+
+order deny,allow
+deny from all
+allow from 127.0.0.0/255.0.0.0 ::1/128
+allow from all
+
+<IfModule mod_php5.c>
+  php_flag magic_quotes_gpc Off
+  php_flag track_vars On
+  php_value include_path .
+</IfModule>
+<IfModule !mod_php5.c>
+  <IfModule mod_actions.c>
+    <IfModule mod_cgi.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+    <IfModule mod_cgid.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+  </IfModule>
+</IfModule>
+
+</Directory>
diff --git a/install/ubuntu/18.10/php-fpm/www.conf b/install/ubuntu/18.10/php-fpm/www.conf
new file mode 100644
index 00000000..3c87f33c
--- /dev/null
+++ b/install/ubuntu/18.10/php-fpm/www.conf
@@ -0,0 +1,11 @@
+[www]
+listen = 127.0.0.1:9000
+listen.allowed_clients = 127.0.0.1
+
+user = www-data
+group = www-data
+
+pm = ondemand
+pm.max_children = 2
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
diff --git a/install/ubuntu/18.10/pma/apache.conf b/install/ubuntu/18.10/pma/apache.conf
new file mode 100644
index 00000000..4da6ce84
--- /dev/null
+++ b/install/ubuntu/18.10/pma/apache.conf
@@ -0,0 +1,42 @@
+# phpMyAdmin default Apache configuration
+
+Alias /phpmyadmin /usr/share/phpmyadmin
+
+<Directory /usr/share/phpmyadmin>
+	Options FollowSymLinks
+	DirectoryIndex index.php
+
+	<IfModule mod_php5.c>
+		AddType application/x-httpd-php .php
+
+		php_flag magic_quotes_gpc Off
+		php_flag track_vars On
+		php_flag register_globals Off
+		php_admin_flag allow_url_fopen Off
+		php_value include_path .
+		php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp
+		php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/:/usr/share/php/php-gettext:/usr/share/javascript/
+	</IfModule>
+
+</Directory>
+
+# Authorize for setup
+<Directory /usr/share/phpmyadmin/setup>
+    <IfModule mod_authn_file.c>
+    AuthType Basic
+    AuthName "phpMyAdmin Setup"
+    AuthUserFile /etc/phpmyadmin/htpasswd.setup
+    </IfModule>
+    Require valid-user
+</Directory>
+
+# Disallow web access to directories that don't need it
+<Directory /usr/share/phpmyadmin/libraries>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+<Directory /usr/share/phpmyadmin/setup/lib>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+
diff --git a/install/ubuntu/18.10/pma/config.inc.php b/install/ubuntu/18.10/pma/config.inc.php
new file mode 100644
index 00000000..a643a065
--- /dev/null
+++ b/install/ubuntu/18.10/pma/config.inc.php
@@ -0,0 +1,146 @@
+<?php
+/**
+ * Debian local configuration file
+ *
+ * This file overrides the settings made by phpMyAdmin interactive setup
+ * utility.
+ *
+ * For example configuration see
+ *   /usr/share/doc/phpmyadmin/examples/config.sample.inc.php
+ * or
+ *   /usr/share/doc/phpmyadmin/examples/config.manyhosts.inc.php
+ *
+ * NOTE: do not add security sensitive data to this file (like passwords)
+ * unless you really know what you're doing. If you do, any user that can
+ * run PHP or CGI on your webserver will be able to read them. If you still
+ * want to do this, make sure to properly secure the access to this file
+ * (also on the filesystem level).
+ */
+
+function check_file_access($path)
+{
+    if (is_readable($path)) {
+        return true;
+    } else {
+        error_log(
+            'phpmyadmin: Failed to load ' . $path
+            . ' Check group www-data has read access and open_basedir restrictions.'
+        );
+        return false;
+    }
+}
+
+// Load secret generated on postinst
+if (check_file_access('/var/lib/phpmyadmin/blowfish_secret.inc.php')) {
+    require('/var/lib/phpmyadmin/blowfish_secret.inc.php');
+}
+
+// Load autoconf local config
+if (check_file_access('/var/lib/phpmyadmin/config.inc.php')) {
+    require('/var/lib/phpmyadmin/config.inc.php');
+}
+
+/**
+ * Server(s) configuration
+ */
+$i = 0;
+// The $cfg['Servers'] array starts with $cfg['Servers'][1].  Do not use $cfg['Servers'][0].
+// You can disable a server config entry by setting host to ''.
+$i++;
+
+/**
+ * Read configuration from dbconfig-common
+ * You can regenerate it using: dpkg-reconfigure -plow phpmyadmin
+ */
+if (check_file_access('/etc/phpmyadmin/config-db.php')) {
+    require('/etc/phpmyadmin/config-db.php');
+}
+
+/* Configure according to dbconfig-common if enabled */
+if (!empty($dbname)) {
+    /* Authentication type */
+    $cfg['Servers'][$i]['auth_type'] = 'cookie';
+    /* Server parameters */
+    if (empty($dbserver)) $dbserver = 'localhost';
+    $cfg['Servers'][$i]['host'] = $dbserver;
+
+    if (!empty($dbport) || $dbserver != 'localhost') {
+        $cfg['Servers'][$i]['connect_type'] = 'tcp';
+        $cfg['Servers'][$i]['port'] = $dbport;
+    }
+    //$cfg['Servers'][$i]['compress'] = false;
+    /* Select mysqli if your server has it */
+    $cfg['Servers'][$i]['extension'] = 'mysqli';
+    /* Optional: User for advanced features */
+    $cfg['Servers'][$i]['controluser'] = $dbuser;
+    $cfg['Servers'][$i]['controlpass'] = $dbpass;
+    /* Optional: Advanced phpMyAdmin features */
+    $cfg['Servers'][$i]['pmadb'] = $dbname;
+    $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+    $cfg['Servers'][$i]['relation'] = 'pma_relation';
+    $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+    $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+    $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+    $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+    $cfg['Servers'][$i]['history'] = 'pma_history';
+    $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+    $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+    $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+    $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+    $cfg['Servers'][$i]['recent'] = 'pma_recent';
+
+    /* Uncomment the following to enable logging in to passwordless accounts,
+     * after taking note of the associated security risks. */
+    // $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+    /* Advance to next server for rest of config */
+    $i++;
+}
+
+/* Authentication type */
+//$cfg['Servers'][$i]['auth_type'] = 'cookie';
+/* Server parameters */
+//$cfg['Servers'][$i]['host'] = 'localhost';
+//$cfg['Servers'][$i]['connect_type'] = 'tcp';
+//$cfg['Servers'][$i]['compress'] = false;
+/* Select mysqli if your server has it */
+//$cfg['Servers'][$i]['extension'] = 'mysql';
+/* Optional: User for advanced features */
+// $cfg['Servers'][$i]['controluser'] = 'pma';
+// $cfg['Servers'][$i]['controlpass'] = 'pmapass';
+
+/* Storage database and tables */
+// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
+// $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+// $cfg['Servers'][$i]['relation'] = 'pma_relation';
+// $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+// $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+// $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+// $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+// $cfg['Servers'][$i]['history'] = 'pma_history';
+// $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+// $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+// $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+// $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+// $cfg['Servers'][$i]['recent'] = 'pma_recent';
+/* Uncomment the following to enable logging in to passwordless accounts,
+ * after taking note of the associated security risks. */
+// $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+/*
+ * End of servers configuration
+ */
+
+/*
+ * Directories for saving/loading files from server
+ */
+$cfg['UploadDir'] = '';
+$cfg['SaveDir'] = '';
+
+/* Support additional configurations */
+foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
+{
+    include($filename);
+}
+
+
diff --git a/install/ubuntu/18.10/postgresql/pg_hba.conf b/install/ubuntu/18.10/postgresql/pg_hba.conf
new file mode 100644
index 00000000..1ba43941
--- /dev/null
+++ b/install/ubuntu/18.10/postgresql/pg_hba.conf
@@ -0,0 +1,11 @@
+# "local" is for Unix domain socket connections only
+local   all         all                               ident
+
+# IPv4 local connections:
+host    all         all         127.0.0.1/32          md5
+
+# IPv6 local connections:
+host    all         all         ::1/128               md5
+
+# Others
+host    all         all         0.0.0.0/0             md5
diff --git a/install/ubuntu/18.10/proftpd/proftpd.conf b/install/ubuntu/18.10/proftpd/proftpd.conf
new file mode 100644
index 00000000..69ec6b2e
--- /dev/null
+++ b/install/ubuntu/18.10/proftpd/proftpd.conf
@@ -0,0 +1,32 @@
+ServerName                      "FTP"
+ServerIdent                     on "FTP Server ready."
+ServerAdmin                     root@localhost
+DefaultServer                   on
+DefaultRoot                  ~ !adm
+
+<IfModule mod_vroot.c>
+    VRootEngine                 on
+    VRootAlias                  /etc/security/pam_env.conf etc/security/pam_env.conf
+</IfModule>
+
+AuthPAMConfig                   proftpd
+AuthOrder                       mod_auth_pam.c* mod_auth_unix.c
+UseReverseDNS                   off
+User                            proftpd
+Group                           nogroup
+MaxInstances                    20
+UseSendfile                     off
+LogFormat                       default "%h %l %u %t \"%r\" %s %b"
+LogFormat                       auth    "%v [%P] %h %t \"%r\" %s"
+ListOptions                     -a
+RequireValidShell               off
+PassivePorts                    12000 12100
+
+<Global>
+  Umask                         002
+  IdentLookups                  off
+  AllowOverwrite                yes
+  <Limit ALL SITE_CHMOD>
+    AllowAll
+  </Limit>
+</Global>
diff --git a/install/ubuntu/18.10/roundcube/apache.conf b/install/ubuntu/18.10/roundcube/apache.conf
new file mode 100644
index 00000000..a0c87bcc
--- /dev/null
+++ b/install/ubuntu/18.10/roundcube/apache.conf
@@ -0,0 +1,40 @@
+Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/
+Alias /roundcube /var/lib/roundcube
+Alias /webmail /var/lib/roundcube
+
+# Access to tinymce files
+<Directory "/usr/share/tinymce/www/">
+      Options Indexes MultiViews FollowSymLinks
+      AllowOverride None
+      Order allow,deny
+      allow from all
+</Directory>
+
+<Directory /var/lib/roundcube/>
+  Options +FollowSymLinks
+  # This is needed to parse /var/lib/roundcube/.htaccess. See its
+  # content before setting AllowOverride to None.
+  AllowOverride All
+  order allow,deny
+  allow from all
+</Directory>
+
+# Protecting basic directories:
+<Directory /var/lib/roundcube/config>
+        Options -FollowSymLinks
+        AllowOverride None
+</Directory>
+
+<Directory /var/lib/roundcube/temp>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
+
+<Directory /var/lib/roundcube/logs>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
diff --git a/install/ubuntu/18.10/roundcube/config.inc.php b/install/ubuntu/18.10/roundcube/config.inc.php
new file mode 100644
index 00000000..0c82b1bc
--- /dev/null
+++ b/install/ubuntu/18.10/roundcube/config.inc.php
@@ -0,0 +1,33 @@
+<?php
+
+// Password Plugin options
+// -----------------------
+// A driver to use for password change. Default: "sql".
+// See README file for list of supported driver names.
+$rcmail_config['password_driver'] = 'vesta';
+
+// Require the new password to be a certain length.
+// set to blank to allow passwords of any length
+$rcmail_config['password_minimum_length'] = 6;
+
+// Require the new password to contain a letter and punctuation character
+// Change to false to remove this check.
+$rcmail_config['password_require_nonalpha'] = false;
+
+// Enables logging of password changes into logs/password
+$rcmail_config['password_log'] = false;
+
+// Comma-separated list of login exceptions for which password change
+// will be not available (no Password tab in Settings)
+$rcmail_config['password_login_exceptions'] = null;
+
+
+// By default domains in variables are using unicode.
+// Enable this option to use punycoded names
+$rcmail_config['password_idn_ascii'] = false;
+
+// Vesta Driver options
+// -----------------------
+// Control Panel host
+$rcmail_config['password_vesta_host'] = 'localhost';
+$rcmail_config['password_vesta_port'] = '8083';
diff --git a/install/ubuntu/18.10/roundcube/db.inc.php b/install/ubuntu/18.10/roundcube/db.inc.php
new file mode 100644
index 00000000..5268a309
--- /dev/null
+++ b/install/ubuntu/18.10/roundcube/db.inc.php
@@ -0,0 +1,66 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Configuration file for database access                                |
+ |                                                                       |
+ | This file is part of the RoundCube Webmail client                     |
+ | Copyright (C) 2005-2008, RoundCube Dev. - Switzerland                 |
+ | Licensed under the GNU GPL                                            |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// PEAR database DSN for read/write operations
+// format is db_provider://user:password@host/database 
+
+$rcmail_config['db_dsnw'] = 'mysql://roundcube:%password%@localhost/roundcube';
+// postgres example: 'pgsql://roundcube:pass@localhost/roundcubemail';
+
+// PEAR database DSN for read only operations (if empty write database will be used)
+// useful for database replication
+$rcmail_config['db_dsnr'] = '';
+
+// database backend to use (only db or mdb2 are supported)
+//$rcmail_config['db_backend'] = 'mdb2';
+
+// maximum length of a query in bytes
+$rcmail_config['db_max_length'] = 512000;  // 500K
+
+// use persistent db-connections
+// beware this will not "always" work as expected
+// see: http://www.php.net/manual/en/features.persistent-connections.php
+$rcmail_config['db_persistent'] = FALSE;
+
+
+// you can define specific table names used to store webmail data
+$rcmail_config['db_table_users'] = 'users';
+
+$rcmail_config['db_table_identities'] = 'identities';
+
+$rcmail_config['db_table_contacts'] = 'contacts';
+
+$rcmail_config['db_table_session'] = 'session';
+
+$rcmail_config['db_table_cache'] = 'cache';
+
+$rcmail_config['db_table_messages'] = 'messages';
+
+
+// you can define specific sequence names used in PostgreSQL
+$rcmail_config['db_sequence_users'] = 'user_ids';
+
+$rcmail_config['db_sequence_identities'] = 'identity_ids';
+
+$rcmail_config['db_sequence_contacts'] = 'contact_ids';
+
+$rcmail_config['db_sequence_cache'] = 'cache_ids';
+
+$rcmail_config['db_sequence_messages'] = 'message_ids';
+
+
+// end db config file
+?>
diff --git a/install/ubuntu/18.10/roundcube/main.inc.php b/install/ubuntu/18.10/roundcube/main.inc.php
new file mode 100644
index 00000000..32e0d473
--- /dev/null
+++ b/install/ubuntu/18.10/roundcube/main.inc.php
@@ -0,0 +1,850 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Main configuration file                                               |
+ |                                                                       |
+ | This file is part of the Roundcube Webmail client                     |
+ | Copyright (C) 2005-2011, The Roundcube Dev Team                       |
+ |                                                                       |
+ | Licensed under the GNU General Public License version 3 or            |
+ | any later version with exceptions for skins & plugins.                |
+ | See the README file for a full license statement.                     |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// ----------------------------------
+// LOGGING/DEBUGGING
+// ----------------------------------
+
+// system error reporting: 1 = log; 2 = report (not implemented yet), 4 = show, 8 = trace
+$rcmail_config['debug_level'] = 1;
+
+// log driver:  'syslog' or 'file'.
+$rcmail_config['log_driver'] = 'file';
+
+// date format for log entries
+// (read http://php.net/manual/en/function.date.php for all format characters)  
+$rcmail_config['log_date_format'] = 'd-M-Y H:i:s O';
+
+// Syslog ident string to use, if using the 'syslog' log driver.
+$rcmail_config['syslog_id'] = 'roundcube';
+
+// Syslog facility to use, if using the 'syslog' log driver.
+// For possible values see installer or http://php.net/manual/en/function.openlog.php
+$rcmail_config['syslog_facility'] = LOG_USER;
+
+// Log sent messages to <log_dir>/sendmail or to syslog
+$rcmail_config['smtp_log'] = true;
+
+// Log successful logins to <log_dir>/userlogins or to syslog
+$rcmail_config['log_logins'] = false;
+
+// Log session authentication errors to <log_dir>/session or to syslog
+$rcmail_config['log_session'] = false;
+
+// Log SQL queries to <log_dir>/sql or to syslog
+$rcmail_config['sql_debug'] = false;
+
+// Log IMAP conversation to <log_dir>/imap or to syslog
+$rcmail_config['imap_debug'] = false;
+
+// Log LDAP conversation to <log_dir>/ldap or to syslog
+$rcmail_config['ldap_debug'] = false;
+
+// Log SMTP conversation to <log_dir>/smtp or to syslog
+$rcmail_config['smtp_debug'] = false;
+
+// ----------------------------------
+// IMAP
+// ----------------------------------
+
+// the mail host chosen to perform the log-in
+// leave blank to show a textbox at login, give a list of hosts
+// to display a pulldown menu or set one host as string.
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// Supported replacement variables:
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %s - domain name after the '@' from e-mail address provided at login screen
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['default_host'] = 'localhost';
+
+// TCP port used for IMAP connections
+$rcmail_config['default_port'] = 143;
+
+// IMAP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['imap_auth_type'] = null;
+
+// If you know your imap's folder delimiter, you can specify it here.
+// Otherwise it will be determined automatically
+$rcmail_config['imap_delimiter'] = null;
+
+// If IMAP server doesn't support NAMESPACE extension, but you're
+// using shared folders or personal root folder is non-empty, you'll need to
+// set these options. All can be strings or arrays of strings.
+// Folders need to be ended with directory separator, e.g. "INBOX."
+// (special directory "~" is an exception to this rule)
+// These can be used also to overwrite server's namespaces
+$rcmail_config['imap_ns_personal'] = null;
+$rcmail_config['imap_ns_other']    = null;
+$rcmail_config['imap_ns_shared']   = null;
+
+// By default IMAP capabilities are readed after connection to IMAP server
+// In some cases, e.g. when using IMAP proxy, there's a need to refresh the list
+// after login. Set to True if you've got this case.
+$rcmail_config['imap_force_caps'] = false;
+
+// By default list of subscribed folders is determined using LIST-EXTENDED
+// extension if available. Some servers (dovecot 1.x) returns wrong results
+// for shared namespaces in this case. http://trac.roundcube.net/ticket/1486225
+// Enable this option to force LSUB command usage instead.
+$rcmail_config['imap_force_lsub'] = false;
+
+// Some server configurations (e.g. Courier) doesn't list folders in all namespaces
+// Enable this option to force listing of folders in all namespaces
+$rcmail_config['imap_force_ns'] = false;
+
+// IMAP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['imap_timeout'] = 0;
+
+// Optional IMAP authentication identifier to be used as authorization proxy
+$rcmail_config['imap_auth_cid'] = null;
+
+// Optional IMAP authentication password to be used for imap_auth_cid
+$rcmail_config['imap_auth_pw'] = null;
+
+// Type of IMAP indexes cache. Supported values: 'db', 'apc' and 'memcache'.
+$rcmail_config['imap_cache'] = null;
+
+// Enables messages cache. Only 'db' cache is supported.
+$rcmail_config['messages_cache'] = false;
+
+
+// ----------------------------------
+// SMTP
+// ----------------------------------
+
+// SMTP server host (for sending mails).
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// If left blank, the PHP mail() function is used
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['smtp_server'] = '';
+
+// SMTP port (default is 25; use 587 for STARTTLS or 465 for the
+// deprecated SSL over SMTP (aka SMTPS))
+$rcmail_config['smtp_port'] = 25;
+
+// SMTP username (if required) if you use %u as the username Roundcube
+// will use the current username for login
+$rcmail_config['smtp_user'] = '';
+
+// SMTP password (if required) if you use %p as the password Roundcube
+// will use the current user's password for login
+$rcmail_config['smtp_pass'] = '';
+
+// SMTP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['smtp_auth_type'] = '';
+
+// Optional SMTP authentication identifier to be used as authorization proxy
+$rcmail_config['smtp_auth_cid'] = null;
+
+// Optional SMTP authentication password to be used for smtp_auth_cid
+$rcmail_config['smtp_auth_pw'] = null;
+
+// SMTP HELO host 
+// Hostname to give to the remote server for SMTP 'HELO' or 'EHLO' messages 
+// Leave this blank and you will get the server variable 'server_name' or 
+// localhost if that isn't defined. 
+$rcmail_config['smtp_helo_host'] = '';
+
+// SMTP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['smtp_timeout'] = 0;
+
+// ----------------------------------
+// SYSTEM
+// ----------------------------------
+include_once("/etc/roundcube/debian-db-roundcube.php");
+
+
+// THIS OPTION WILL ALLOW THE INSTALLER TO RUN AND CAN EXPOSE SENSITIVE CONFIG DATA.
+// ONLY ENABLE IT IF YOU'RE REALLY SURE WHAT YOU'RE DOING!
+$rcmail_config['enable_installer'] = false;
+
+// provide an URL where a user can get support for this Roundcube installation
+// PLEASE DO NOT LINK TO THE ROUNDCUBE.NET WEBSITE HERE!
+$rcmail_config['support_url'] = '';
+
+// replace Roundcube logo with this image
+// specify an URL relative to the document root of this Roundcube installation
+$rcmail_config['skin_logo'] = null;
+
+// automatically create a new Roundcube user when log-in the first time.
+// a new user will be created once the IMAP login succeeds.
+// set to false if only registered users can use this service
+$rcmail_config['auto_create_user'] = true;
+
+// use this folder to store log files (must be writeable for apache user)
+// This is used by the 'file' log driver.
+$rcmail_config['log_dir'] = '/var/log/roundcube/';
+
+// use this folder to store temp files (must be writeable for apache user)
+$rcmail_config['temp_dir'] = '/tmp';
+
+// lifetime of message cache
+// possible units: s, m, h, d, w
+$rcmail_config['message_cache_lifetime'] = '10d';
+
+// enforce connections over https
+// with this option enabled, all non-secure connections will be redirected.
+// set the port for the ssl connection as value of this option if it differs from the default 443
+$rcmail_config['force_https'] = false;
+
+// tell PHP that it should work as under secure connection
+// even if it doesn't recognize it as secure ($_SERVER['HTTPS'] is not set)
+// e.g. when you're running Roundcube behind a https proxy
+// this option is mutually exclusive to 'force_https' and only either one of them should be set to true.
+$rcmail_config['use_https'] = false;
+
+// Allow browser-autocompletion on login form.
+// 0 - disabled, 1 - username and host only, 2 - username, host, password
+$rcmail_config['login_autocomplete'] = 0;
+
+// Forces conversion of logins to lower case.
+// 0 - disabled, 1 - only domain part, 2 - domain and local part.
+// If users authentication is not case-sensitive this must be enabled.
+// After enabling it all user records need to be updated, e.g. with query:
+// UPDATE users SET username = LOWER(username);
+$rcmail_config['login_lc'] = 0;
+
+// Includes should be interpreted as PHP files
+$rcmail_config['skin_include_php'] = false;
+
+// display software version on login screen
+$rcmail_config['display_version'] = false;
+
+// Session lifetime in minutes
+// must be greater than 'keep_alive'/60
+$rcmail_config['session_lifetime'] = 10;
+
+// session domain: .example.org
+$rcmail_config['session_domain'] = '';
+
+// session name. Default: 'roundcube_sessid'
+$rcmail_config['session_name'] = null;
+
+// Backend to use for session storage. Can either be 'db' (default) or 'memcache'
+// If set to memcache, a list of servers need to be specified in 'memcache_hosts'
+// Make sure the Memcache extension (http://pecl.php.net/package/memcache) version >= 2.0.0 is installed
+$rcmail_config['session_storage'] = 'db';
+
+// Use these hosts for accessing memcached
+// Define any number of hosts in the form of hostname:port or unix:///path/to/sock.file
+$rcmail_config['memcache_hosts'] = null; // e.g. array( 'localhost:11211', '192.168.1.12:11211', 'unix:///var/tmp/memcached.sock' );
+
+// check client IP in session athorization
+$rcmail_config['ip_check'] = false;
+
+// check referer of incoming requests
+$rcmail_config['referer_check'] = false;
+
+// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
+// Possible values: sameorigin|deny. Set to false in order to disable sending them
+$rcmail_config['x_frame_options'] = 'sameorigin';
+
+// this key is used to encrypt the users imap password which is stored
+// in the session record (and the client cookie if remember password is enabled).
+// please provide a string of exactly 24 chars.
+$rcmail_config['des_key'] = 'vtIOjLZo9kffJoqzpSbm5r1r';
+
+// Automatically add this domain to user names for login
+// Only for IMAP servers that require full e-mail addresses for login
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['username_domain'] = '';
+
+// This domain will be used to form e-mail addresses of new users
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['mail_domain'] = '';
+
+// Password charset.
+// Use it if your authentication backend doesn't support UTF-8.
+// Defaults to ISO-8859-1 for backward compatibility
+$rcmail_config['password_charset'] = 'ISO-8859-1';
+
+// How many seconds must pass between emails sent by a user
+$rcmail_config['sendmail_delay'] = 0;
+
+// Maximum number of recipients per message. Default: 0 (no limit)
+$rcmail_config['max_recipients'] = 0; 
+
+// Maximum allowednumber of members of an address group. Default: 0 (no limit)
+// If 'max_recipients' is set this value should be less or equal
+$rcmail_config['max_group_members'] = 0; 
+
+// add this user-agent to message headers when sending
+$rcmail_config['useragent'] = 'Roundcube Webmail';
+
+// use this name to compose page titles
+$rcmail_config['product_name'] = 'Roundcube Webmail';
+
+// try to load host-specific configuration
+// see http://trac.roundcube.net/wiki/Howto_Config for more details
+$rcmail_config['include_host_config'] = false;
+
+// path to a text file which will be added to each sent message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer'] = '';
+
+// path to a text file which will be added to each sent HTML message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer_html'] = '';
+
+// add a received header to outgoing mails containing the creators IP and hostname
+$rcmail_config['http_received_header'] = false;
+
+// Whether or not to encrypt the IP address and the host name
+// these could, in some circles, be considered as sensitive information;
+// however, for the administrator, these could be invaluable help
+// when tracking down issues.
+$rcmail_config['http_received_header_encrypt'] = false;
+
+// This string is used as a delimiter for message headers when sending
+// a message via mail() function. Leave empty for auto-detection
+$rcmail_config['mail_header_delimiter'] = NULL;
+
+// number of chars allowed for line when wrapping text.
+// text wrapping is done when composing/sending messages
+$rcmail_config['line_length'] = 72;
+
+// send plaintext messages as format=flowed
+$rcmail_config['send_format_flowed'] = true;
+
+// don't allow these settings to be overriden by the user
+$rcmail_config['dont_override'] = array();
+
+// Set identities access level:
+// 0 - many identities with possibility to edit all params
+// 1 - many identities with possibility to edit all params but not email address
+// 2 - one identity with possibility to edit all params
+// 3 - one identity with possibility to edit all params but not email address
+$rcmail_config['identities_level'] = 0;
+
+// Mimetypes supported by the browser.
+// attachments of these types will open in a preview window
+// either a comma-separated list or an array: 'text/plain,text/html,text/xml,image/jpeg,image/gif,image/png,application/pdf'
+$rcmail_config['client_mimetypes'] = null;  # null == default
+
+// mime magic database
+$rcmail_config['mime_magic'] = null;
+
+// path to imagemagick identify binary
+$rcmail_config['im_identify_path'] = null;
+
+// path to imagemagick convert binary
+$rcmail_config['im_convert_path'] = null;
+
+// maximum size of uploaded contact photos in pixel
+$rcmail_config['contact_photo_size'] = 160;
+
+// Enable DNS checking for e-mail address validation
+$rcmail_config['email_dns_check'] = false;
+
+// ----------------------------------
+// PLUGINS
+// ----------------------------------
+
+// List of active plugins (in plugins/ directory)
+$rcmail_config['plugins'] = array('password');
+
+// ----------------------------------
+// USER INTERFACE
+// ----------------------------------
+
+// default messages sort column. Use empty value for default server's sorting, 
+// or 'arrival', 'date', 'subject', 'from', 'to', 'fromto', 'size', 'cc'
+$rcmail_config['message_sort_col'] = '';
+
+// default messages sort order
+$rcmail_config['message_sort_order'] = 'DESC';
+
+// These cols are shown in the message list. Available cols are:
+// subject, from, to, fromto, cc, replyto, date, size, status, flag, attachment, 'priority'
+$rcmail_config['list_cols'] = array('subject', 'status', 'fromto', 'date', 'size', 'flag', 'attachment');
+
+// the default locale setting (leave empty for auto-detection)
+// RFC1766 formatted language name like en_US, de_DE, de_CH, fr_FR, pt_BR
+$rcmail_config['language'] = null;
+
+// use this format for date display (date or strftime format)
+$rcmail_config['date_format'] = 'Y-m-d';
+
+// give this choice of date formats to the user to select from
+$rcmail_config['date_formats'] = array('Y-m-d', 'd-m-Y', 'Y/m/d', 'm/d/Y', 'd/m/Y', 'd.m.Y', 'j.n.Y');
+
+// use this format for time display (date or strftime format)
+$rcmail_config['time_format'] = 'H:i';
+
+// give this choice of time formats to the user to select from
+$rcmail_config['time_formats'] = array('G:i', 'H:i', 'g:i a', 'h:i A');
+
+// use this format for short date display (derived from date_format and time_format)
+$rcmail_config['date_short'] = 'D H:i';
+
+// use this format for detailed date/time formatting (derived from date_format and time_format)
+$rcmail_config['date_long'] = 'Y-m-d H:i';
+
+// store draft message is this mailbox
+// leave blank if draft messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['drafts_mbox'] = 'Drafts';
+
+// store spam messages in this mailbox
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['junk_mbox'] = 'Spam';
+
+// store sent message is this mailbox
+// leave blank if sent messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['sent_mbox'] = 'Sent';
+
+// move messages to this folder when deleting them
+// leave blank if they should be deleted directly
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['trash_mbox'] = 'Trash';
+
+// display these folders separately in the mailbox list.
+// these folders will also be displayed with localized names
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['default_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+$rcmail_config['default_imap_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+
+// automatically create the above listed default folders on first login
+$rcmail_config['create_default_folders'] = true;
+
+// protect the default folders from renames, deletes, and subscription changes
+$rcmail_config['protect_default_folders'] = true;
+
+// if in your system 0 quota means no limit set this option to true 
+$rcmail_config['quota_zero_as_unlimited'] = true;
+
+// Make use of the built-in spell checker. It is based on GoogieSpell.
+// Since Google only accepts connections over https your PHP installatation
+// requires to be compiled with Open SSL support
+$rcmail_config['enable_spellcheck'] = true;
+
+// Enables spellchecker exceptions dictionary.
+// Setting it to 'shared' will make the dictionary shared by all users.
+$rcmail_config['spellcheck_dictionary'] = false;
+
+// Set the spell checking engine. 'googie' is the default. 'pspell' is also available,
+// but requires the Pspell extensions. When using Nox Spell Server, also set 'googie' here.
+$rcmail_config['spellcheck_engine'] = 'googie';
+
+// For a locally installed Nox Spell Server, please specify the URI to call it.
+// Get Nox Spell Server from http://orangoo.com/labs/?page_id=72
+// Leave empty to use the Google spell checking service, what means
+// that the message content will be sent to Google in order to check spelling
+$rcmail_config['spellcheck_uri'] = '';
+
+// These languages can be selected for spell checking.
+// Configure as a PHP style hash array: array('en'=>'English', 'de'=>'Deutsch');
+// Leave empty for default set of available language.
+$rcmail_config['spellcheck_languages'] = NULL;
+
+// Makes that words with all letters capitalized will be ignored (e.g. GOOGLE)
+$rcmail_config['spellcheck_ignore_caps'] = false;
+
+// Makes that words with numbers will be ignored (e.g. g00gle)
+$rcmail_config['spellcheck_ignore_nums'] = false;
+
+// Makes that words with symbols will be ignored (e.g. g@@gle)
+$rcmail_config['spellcheck_ignore_syms'] = false;
+
+// Use this char/string to separate recipients when composing a new message
+$rcmail_config['recipients_separator'] = ',';
+
+// don't let users set pagesize to more than this value if set
+$rcmail_config['max_pagesize'] = 200;
+
+// Minimal value of user's 'keep_alive' setting (in seconds)
+// Must be less than 'session_lifetime'
+$rcmail_config['min_keep_alive'] = 60;
+
+// Enables files upload indicator. Requires APC installed and enabled apc.rfc1867 option.
+// By default refresh time is set to 1 second. You can set this value to true
+// or any integer value indicating number of seconds.
+$rcmail_config['upload_progress'] = false;
+
+// Specifies for how many seconds the Undo button will be available
+// after object delete action. Currently used with supporting address book sources.
+// Setting it to 0, disables the feature.
+$rcmail_config['undo_timeout'] = 0;
+
+// ----------------------------------
+// ADDRESSBOOK SETTINGS
+// ----------------------------------
+
+// This indicates which type of address book to use. Possible choises:
+// 'sql' (default) and 'ldap'.
+// If set to 'ldap' then it will look at using the first writable LDAP
+// address book as the primary address book and it will not display the
+// SQL address book in the 'Address Book' view.
+$rcmail_config['address_book_type'] = 'sql';
+
+// In order to enable public ldap search, configure an array like the Verisign
+// example further below. if you would like to test, simply uncomment the example.
+// Array key must contain only safe characters, ie. a-zA-Z0-9_
+$rcmail_config['ldap_public'] = array();
+
+// If you are going to use LDAP for individual address books, you will need to 
+// set 'user_specific' to true and use the variables to generate the appropriate DNs to access it.
+//
+// The recommended directory structure for LDAP is to store all the address book entries
+// under the users main entry, e.g.:
+//
+//  o=root
+//   ou=people
+//    uid=user@domain
+//  mail=contact@contactdomain
+//
+// So the base_dn would be uid=%fu,ou=people,o=root
+// The bind_dn would be the same as based_dn or some super user login.
+/* 
+ * example config for Verisign directory
+ *
+$rcmail_config['ldap_public']['Verisign'] = array(
+  'name'          => 'Verisign.com',
+  // Replacement variables supported in host names:
+  // %h - user's IMAP hostname
+  // %n - http hostname ($_SERVER['SERVER_NAME'])
+  // %d - domain (http hostname without the first part)
+  // %z - IMAP domain (IMAP hostname without the first part)
+  // For example %n = mail.domain.tld, %d = domain.tld
+  'hosts'         => array('directory.verisign.com'),
+  'port'          => 389,
+  'use_tls'	      => false,
+  'ldap_version'  => 3,       // using LDAPv3
+  'user_specific' => false,   // If true the base_dn, bind_dn and bind_pass default to the user's IMAP login.
+  // %fu - The full username provided, assumes the username is an email
+  //       address, uses the username_domain value if not an email address.
+  // %u  - The username prior to the '@'.
+  // %d  - The domain name after the '@'.
+  // %dc - The domain name hierarchal string e.g. "dc=test,dc=domain,dc=com"
+  // %dn - DN found by ldap search when search_filter/search_base_dn are used
+  'base_dn'       => '',
+  'bind_dn'       => '',
+  'bind_pass'     => '',
+  // It's possible to bind for an individual address book
+  // The login name is used to search for the DN to bind with
+  'search_base_dn' => '',
+  'search_filter'  => '',   // e.g. '(&(objectClass=posixAccount)(uid=%u))'
+  // DN and password to bind as before searching for bind DN, if anonymous search is not allowed
+  'search_bind_dn' => '',
+  'search_bind_pw' => '',
+  // Default for %dn variable if search doesn't return DN value
+  'search_dn_default' => '',
+  // Optional authentication identifier to be used as SASL authorization proxy
+  // bind_dn need to be empty
+  'auth_cid'       => '',
+  // SASL authentication method (for proxy auth), e.g. DIGEST-MD5
+  'auth_method'    => '',
+  // Indicates if the addressbook shall be hidden from the list.
+  // With this option enabled you can still search/view contacts.
+  'hidden'        => false,
+  // Indicates if the addressbook shall not list contacts but only allows searching.
+  'searchonly'    => false,
+  // Indicates if we can write to the LDAP directory or not.
+  // If writable is true then these fields need to be populated:
+  // LDAP_Object_Classes, required_fields, LDAP_rdn
+  'writable'       => false,
+  // To create a new contact these are the object classes to specify
+  // (or any other classes you wish to use).
+  'LDAP_Object_Classes' => array('top', 'inetOrgPerson'),
+  // The RDN field that is used for new entries, this field needs
+  // to be one of the search_fields, the base of base_dn is appended
+  // to the RDN to insert into the LDAP directory.
+  'LDAP_rdn'       => 'cn',
+  // The required fields needed to build a new contact as required by
+  // the object classes (can include additional fields not required by the object classes).
+  'required_fields' => array('cn', 'sn', 'mail'),
+  'search_fields'   => array('mail', 'cn'),  // fields to search in
+  // mapping of contact fields to directory attributes
+  //   for every attribute one can specify the number of values (limit) allowed.
+  //   default is 1, a wildcard * means unlimited
+  'fieldmap' => array(
+    // Roundcube  => LDAP:limit
+    'name'        => 'cn',
+    'surname'     => 'sn',
+    'firstname'   => 'givenName',
+    'title'       => 'title',
+    'email'       => 'mail:*',
+    'phone:home'  => 'homePhone',
+    'phone:work'  => 'telephoneNumber',
+    'phone:mobile' => 'mobile',
+    'phone:pager' => 'pager',
+    'street'      => 'street',
+    'zipcode'     => 'postalCode',
+    'region'      => 'st',
+    'locality'    => 'l',
+// if you uncomment country, you need to modify 'sub_fields' above
+//    'country'     => 'c',
+    'department'  => 'departmentNumber',
+    'notes'       => 'description',
+// these currently don't work:
+//    'phone:workfax' => 'facsimileTelephoneNumber',
+//    'photo'        => 'jpegPhoto',
+//    'organization' => 'o',
+//    'manager'      => 'manager',
+//    'assistant'    => 'secretary',
+  ),
+  // Map of contact sub-objects (attribute name => objectClass(es)), e.g. 'c' => 'country'
+  'sub_fields' => array(),
+  'sort'          => 'cn',    // The field to sort the listing by.
+  'scope'         => 'sub',   // search mode: sub|base|list
+  'filter'        => '(objectClass=inetOrgPerson)',      // used for basic listing (if not empty) and will be &'d with search queries. example: status=act
+  'fuzzy_search'  => true,    // server allows wildcard search
+  'vlv'           => false,   // Enable Virtual List View to more efficiently fetch paginated data (if server supports it)
+  'numsub_filter' => '(objectClass=organizationalUnit)',   // with VLV, we also use numSubOrdinates to query the total number of records. Set this filter to get all numSubOrdinates attributes for counting
+  'sizelimit'     => '0',     // Enables you to limit the count of entries fetched. Setting this to 0 means no limit.
+  'timelimit'     => '0',     // Sets the number of seconds how long is spend on the search. Setting this to 0 means no limit.
+  'referrals'     => true|false,  // Sets the LDAP_OPT_REFERRALS option. Mostly used in multi-domain Active Directory setups
+
+  // definition for contact groups (uncomment if no groups are supported)
+  // for the groups base_dn, the user replacements %fu, %u, $d and %dc work as for base_dn (see above)
+  // if the groups base_dn is empty, the contact base_dn is used for the groups as well
+  // -> in this case, assure that groups and contacts are separated due to the concernig filters! 
+  'groups'        => array(
+    'base_dn'     => '',
+    'scope'       => 'sub',   // search mode: sub|base|list
+    'filter'      => '(objectClass=groupOfNames)',
+    'object_classes' => array("top", "groupOfNames"),
+    'member_attr'  => 'member',   // name of the member attribute, e.g. uniqueMember
+    'name_attr'    => 'cn',       // attribute to be used as group name
+  ),
+);
+*/
+
+// An ordered array of the ids of the addressbooks that should be searched
+// when populating address autocomplete fields server-side. ex: array('sql','Verisign');
+$rcmail_config['autocomplete_addressbooks'] = array('sql');
+
+// The minimum number of characters required to be typed in an autocomplete field
+// before address books will be searched. Most useful for LDAP directories that
+// may need to do lengthy results building given overly-broad searches
+$rcmail_config['autocomplete_min_length'] = 1;
+
+// Number of parallel autocomplete requests.
+// If there's more than one address book, n parallel (async) requests will be created,
+// where each request will search in one address book. By default (0), all address
+// books are searched in one request.
+$rcmail_config['autocomplete_threads'] = 0;
+
+// Max. numer of entries in autocomplete popup. Default: 15.
+$rcmail_config['autocomplete_max'] = 15;
+
+// show address fields in this order
+// available placeholders: {street}, {locality}, {zipcode}, {country}, {region}
+$rcmail_config['address_template'] = '{street}<br/>{locality} {zipcode}<br/>{country} {region}';
+
+// Matching mode for addressbook search (including autocompletion)
+// 0 - partial (*abc*), default
+// 1 - strict (abc)
+// 2 - prefix (abc*)
+// Note: For LDAP sources fuzzy_search must be enabled to use 'partial' or 'prefix' mode
+$rcmail_config['addressbook_search_mode'] = 0;
+
+// ----------------------------------
+// USER PREFERENCES
+// ----------------------------------
+
+// Use this charset as fallback for message decoding
+//$rcmail_config['default_charset'] = 'ISO-8859-1';
+$rcmail_config['default_charset'] = 'UTF-8';
+
+// skin name: folder from skins/
+$rcmail_config['skin'] = 'larry';
+
+// show up to X items in messages list view
+$rcmail_config['mail_pagesize'] = 50;
+
+// show up to X items in contacts list view
+$rcmail_config['addressbook_pagesize'] = 50;
+
+// sort contacts by this col (preferably either one of name, firstname, surname)
+$rcmail_config['addressbook_sort_col'] = 'surname';
+
+// the way how contact names are displayed in the list
+// 0: display name
+// 1: (prefix) firstname middlename surname (suffix)
+// 2: (prefix) surname firstname middlename (suffix)
+// 3: (prefix) surname, firstname middlename (suffix)
+$rcmail_config['addressbook_name_listing'] = 0;
+
+// use this timezone to display date/time
+// valid timezone identifers are listed here: php.net/manual/en/timezones.php
+// 'auto' will use the browser's timezone settings
+$rcmail_config['timezone'] = 'auto';
+
+// prefer displaying HTML messages
+$rcmail_config['prefer_html'] = true;
+
+// display remote inline images
+// 0 - Never, always ask
+// 1 - Ask if sender is not in address book
+// 2 - Always show inline images
+$rcmail_config['show_images'] = 0;
+
+// compose html formatted messages by default
+// 0 - never, 1 - always, 2 - on reply to HTML message only 
+$rcmail_config['htmleditor'] = 0;
+
+// show pretty dates as standard
+$rcmail_config['prettydate'] = true;
+
+// save compose message every 30 seconds
+$rcmail_config['draft_autosave'] = 30;
+
+// default setting if preview pane is enabled
+$rcmail_config['preview_pane'] = false;
+
+// Mark as read when viewed in preview pane (delay in seconds)
+// Set to -1 if messages in preview pane should not be marked as read
+$rcmail_config['preview_pane_mark_read'] = 0;
+
+// Clear Trash on logout
+$rcmail_config['logout_purge'] = false;
+
+// Compact INBOX on logout
+$rcmail_config['logout_expunge'] = false;
+
+// Display attached images below the message body 
+$rcmail_config['inline_images'] = true;
+
+// Encoding of long/non-ascii attachment names:
+// 0 - Full RFC 2231 compatible
+// 1 - RFC 2047 for 'name' and RFC 2231 for 'filename' parameter (Thunderbird's default)
+// 2 - Full 2047 compatible
+$rcmail_config['mime_param_folding'] = 1;
+
+// Set true if deleted messages should not be displayed
+// This will make the application run slower
+$rcmail_config['skip_deleted'] = false;
+
+// Set true to Mark deleted messages as read as well as deleted
+// False means that a message's read status is not affected by marking it as deleted
+$rcmail_config['read_when_deleted'] = true;
+
+// Set to true to never delete messages immediately
+// Use 'Purge' to remove messages marked as deleted
+$rcmail_config['flag_for_deletion'] = false;
+
+// Default interval for keep-alive/check-recent requests (in seconds)
+// Must be greater than or equal to 'min_keep_alive' and less than 'session_lifetime'
+$rcmail_config['keep_alive'] = 60;
+
+// If true all folders will be checked for recent messages
+$rcmail_config['check_all_folders'] = false;
+
+// If true, after message delete/move, the next message will be displayed
+$rcmail_config['display_next'] = false;
+
+// 0 - Do not expand threads 
+// 1 - Expand all threads automatically 
+// 2 - Expand only threads with unread messages 
+$rcmail_config['autoexpand_threads'] = 0;
+
+// When replying place cursor above original message (top posting)
+$rcmail_config['top_posting'] = false;
+
+// When replying strip original signature from message
+$rcmail_config['strip_existing_sig'] = true;
+
+// Show signature:
+// 0 - Never
+// 1 - Always
+// 2 - New messages only
+// 3 - Forwards and Replies only
+$rcmail_config['show_sig'] = 1;
+
+// When replying or forwarding place sender's signature above existing message
+$rcmail_config['sig_above'] = false;
+
+// Use MIME encoding (quoted-printable) for 8bit characters in message body
+$rcmail_config['force_7bit'] = false;
+
+// Defaults of the search field configuration.
+// The array can contain a per-folder list of header fields which should be considered when searching
+// The entry with key '*' stands for all folders which do not have a specific list set.
+// Please note that folder names should to be in sync with $rcmail_config['default_folders']
+$rcmail_config['search_mods'] = null;  // Example: array('*' => array('subject'=>1, 'from'=>1), 'Sent' => array('subject'=>1, 'to'=>1));
+
+// Defaults of the addressbook search field configuration.
+$rcmail_config['addressbook_search_mods'] = null;  // Example: array('name'=>1, 'firstname'=>1, 'surname'=>1, 'email'=>1, '*'=>1);
+
+// 'Delete always'
+// This setting reflects if mail should be always deleted
+// when moving to Trash fails. This is necessary in some setups
+// when user is over quota and Trash is included in the quota.
+$rcmail_config['delete_always'] = false;
+
+// Directly delete messages in Junk instead of moving to Trash
+$rcmail_config['delete_junk'] = true;
+
+// Behavior if a received message requests a message delivery notification (read receipt)
+// 0 = ask the user, 1 = send automatically, 2 = ignore (never send or ask)
+// 3 = send automatically if sender is in addressbook, otherwise ask the user
+// 4 = send automatically if sender is in addressbook, otherwise ignore
+$rcmail_config['mdn_requests'] = 0;
+
+// Return receipt checkbox default state
+$rcmail_config['mdn_default'] = 0;
+
+// Delivery Status Notification checkbox default state
+$rcmail_config['dsn_default'] = 0;
+
+// Place replies in the folder of the message being replied to
+$rcmail_config['reply_same_folder'] = false;
+
+// Sets default mode of Forward feature to "forward as attachment"
+$rcmail_config['forward_attachment'] = false;
+
+// Defines address book (internal index) to which new contacts will be added
+// By default it is the first writeable addressbook.
+// Note: Use '0' for built-in address book.
+$rcmail_config['default_addressbook'] = null;
+
+// Enables spell checking before sending a message.
+$rcmail_config['spellcheck_before_send'] = false;
+
+// Skip alternative email addresses in autocompletion (show one address per contact)
+$rcmail_config['autocomplete_single'] = false;
+
+// Default font for composed HTML message.
+// Supported values: Andale Mono, Arial, Arial Black, Book Antiqua, Courier New,
+// Georgia, Helvetica, Impact, Tahoma, Terminal, Times New Roman, Trebuchet MS, Verdana
+$rcmail_config['default_font'] = '';
+
+// end of config file
diff --git a/install/ubuntu/18.10/roundcube/vesta.php b/install/ubuntu/18.10/roundcube/vesta.php
new file mode 100644
index 00000000..b4a2a6b6
--- /dev/null
+++ b/install/ubuntu/18.10/roundcube/vesta.php
@@ -0,0 +1,72 @@
+<?php
+
+/**
+ * Vesta Control Panel Password Driver
+ *
+ * @version 1.0
+ * @author Serghey Rodin <skid@vestacp.com>
+ */
+class rcube_vesta_password {
+    function save($curpass, $passwd)
+    {
+        $rcmail = rcmail::get_instance();
+        $vesta_host = $rcmail->config->get('password_vesta_host');
+
+        if (empty($vesta_host))
+        {
+            $vesta_host = 'localhost';
+        }
+
+        $vesta_port = $rcmail->config->get('password_vesta_port');
+        if (empty($vesta_port))
+        {
+            $vesta_port = '8083';
+        }
+
+        $postvars = array(
+          'email' => $_SESSION['username'],
+          'password' => $curpass,
+          'new' => $passwd
+        );
+
+        $postdata = http_build_query($postvars);
+
+        $send  = 'POST /reset/mail/ HTTP/1.1' . PHP_EOL;
+        $send .= 'Host: ' . $vesta_host . PHP_EOL;
+        $send .= 'User-Agent: PHP Script' . PHP_EOL;
+        $send .= 'Content-length: ' . strlen($postdata) . PHP_EOL;
+        $send .= 'Content-type: application/x-www-form-urlencoded' . PHP_EOL;
+        $send .= 'Connection: close' . PHP_EOL;
+        $send .= PHP_EOL;
+        $send .= $postdata . PHP_EOL . PHP_EOL;
+
+        //$fp = fsockopen('ssl://' . $vesta_host, $vesta_port);
+        $errno = "";
+        $errstr = "";
+        $context = stream_context_create();
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer_name', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_host', false);
+        $result = stream_context_set_option($context, 'ssl', 'allow_self_signed', true);
+
+        $fp = stream_socket_client('ssl://' . $vesta_host . ':'.$vesta_port, $errno, $errstr, 60, STREAM_CLIENT_CONNECT, $context);
+        fputs($fp, $send);
+        $result = fread($fp, 2048);
+        fclose($fp);
+
+        $fp = fopen("/tmp/roundcube.log", 'w');
+        fwrite($fp, "test ok");
+        fwrite($fp, "\n");
+        fclose($fp);
+
+
+        if(strpos($result, 'ok') && !strpos($result, 'error'))
+        {
+            return PASSWORD_SUCCESS;
+        }
+        else {
+            return PASSWORD_ERROR;
+        }
+
+    }
+}
\ No newline at end of file
diff --git a/install/ubuntu/18.10/sudo/admin b/install/ubuntu/18.10/sudo/admin
new file mode 100644
index 00000000..331fa1f2
--- /dev/null
+++ b/install/ubuntu/18.10/sudo/admin
@@ -0,0 +1,8 @@
+# Created by vesta installer
+Defaults env_keep="VESTA"
+Defaults:admin !syslog
+Defaults:admin !requiretty
+Defaults:root !requiretty
+
+# sudo is limited to vesta scripts
+admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/ubuntu/18.10/templates/dns/child-ns.tpl b/install/ubuntu/18.10/templates/dns/child-ns.tpl
new file mode 100755
index 00000000..42c046e4
--- /dev/null
+++ b/install/ubuntu/18.10/templates/dns/child-ns.tpl
@@ -0,0 +1,14 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns1.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns2.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ns1' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='ns2' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/ubuntu/18.10/templates/dns/default.tpl b/install/ubuntu/18.10/templates/dns/default.tpl
new file mode 100755
index 00000000..e0a37e62
--- /dev/null
+++ b/install/ubuntu/18.10/templates/dns/default.tpl
@@ -0,0 +1,18 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/ubuntu/18.10/templates/dns/gmail.tpl b/install/ubuntu/18.10/templates/dns/gmail.tpl
new file mode 100755
index 00000000..219c9d24
--- /dev/null
+++ b/install/ubuntu/18.10/templates/dns/gmail.tpl
@@ -0,0 +1,12 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='localhost' TYPE='A' PRIORITY='' VALUE='127.0.0.1' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='MX' PRIORITY='1' VALUE='ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT1.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT2.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT3.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT4.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.google.com ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/ubuntu/18.10/templates/web/apache2/basedir.stpl b/install/ubuntu/18.10/templates/web/apache2/basedir.stpl
new file mode 100644
index 00000000..d978d4c4
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/apache2/basedir.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.10/templates/web/apache2/basedir.tpl b/install/ubuntu/18.10/templates/web/apache2/basedir.tpl
new file mode 100644
index 00000000..96c94a1b
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/apache2/basedir.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.10/templates/web/apache2/default.stpl b/install/ubuntu/18.10/templates/web/apache2/default.stpl
new file mode 100644
index 00000000..ec34c279
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/apache2/default.stpl
@@ -0,0 +1,43 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.10/templates/web/apache2/default.tpl b/install/ubuntu/18.10/templates/web/apache2/default.tpl
new file mode 100644
index 00000000..3a227015
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/apache2/default.tpl
@@ -0,0 +1,37 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.10/templates/web/apache2/hosting.stpl b/install/ubuntu/18.10/templates/web/apache2/hosting.stpl
new file mode 100644
index 00000000..8892072b
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/apache2/hosting.stpl
@@ -0,0 +1,49 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value upload_max_filesize 10M
+        php_admin_value max_execution_time 20
+        php_admin_value post_max_size  8M
+        php_admin_value memory_limit 32M
+        php_admin_flag mysql.allow_persistent  off
+        php_admin_flag safe_mode off
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.10/templates/web/apache2/hosting.tpl b/install/ubuntu/18.10/templates/web/apache2/hosting.tpl
new file mode 100644
index 00000000..1eb26910
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/apache2/hosting.tpl
@@ -0,0 +1,43 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value upload_max_filesize 10M
+        php_admin_value max_execution_time 20
+        php_admin_value post_max_size  8M
+        php_admin_value memory_limit 32M
+        php_admin_flag mysql.allow_persistent  off
+        php_admin_flag safe_mode off
+        php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@%domain_idn%"
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpMyAdmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcubemail:/etc/roundcube:/var/lib/roundcube
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <IfModule mod_ruid2.c>
+        RMode config
+        RUidGid %user% %group%
+        RGroups www-data
+    </IfModule>
+    <IfModule itk.c>
+        AssignUserID %user% %group%
+    </IfModule>
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.10/templates/web/apache2/phpcgi.sh b/install/ubuntu/18.10/templates/web/apache2/phpcgi.sh
new file mode 100755
index 00000000..6565e103
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/apache2/phpcgi.sh
@@ -0,0 +1,16 @@
+#!/bin/bash
+# Adding php wrapper
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+wrapper_script='#!/usr/bin/php-cgi -cphp5-cgi.ini'
+wrapper_file="$home_dir/$user/web/$domain/cgi-bin/php"
+
+echo "$wrapper_script" > $wrapper_file
+chown $user:$user $wrapper_file
+chmod -f 751 $wrapper_file
+
+exit 0
diff --git a/install/ubuntu/18.10/templates/web/apache2/phpcgi.stpl b/install/ubuntu/18.10/templates/web/apache2/phpcgi.stpl
new file mode 100644
index 00000000..731355bc
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/apache2/phpcgi.stpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        SSLRequireSSL
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        Action phpcgi-script /cgi-bin/php
+        <Files *.php>
+            SetHandler phpcgi-script
+        </Files>
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.10/templates/web/apache2/phpcgi.tpl b/install/ubuntu/18.10/templates/web/apache2/phpcgi.tpl
new file mode 100644
index 00000000..c6796d29
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/apache2/phpcgi.tpl
@@ -0,0 +1,31 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        Action phpcgi-script /cgi-bin/php
+        <Files *.php>
+            SetHandler phpcgi-script
+        </Files>
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.10/templates/web/apache2/phpfcgid.sh b/install/ubuntu/18.10/templates/web/apache2/phpfcgid.sh
new file mode 100755
index 00000000..e8058249
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/apache2/phpfcgid.sh
@@ -0,0 +1,22 @@
+#!/bin/bash
+# Adding php wrapper
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+wrapper_script="#!/bin/sh
+PHPRC=/usr/local/lib
+export PHPRC
+export PHP_FCGI_MAX_REQUESTS=1000
+export PHP_FCGI_CHILDREN=20
+exec  /usr/bin/php-cgi
+"
+wrapper_file="$home_dir/$user/web/$domain/cgi-bin/fcgi-starter"
+
+echo "$wrapper_script" > $wrapper_file
+chown $user:$user $wrapper_file
+chmod -f 751 $wrapper_file
+
+exit 0
diff --git a/install/ubuntu/18.10/templates/web/apache2/phpfcgid.stpl b/install/ubuntu/18.10/templates/web/apache2/phpfcgid.stpl
new file mode 100644
index 00000000..156c8a91
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/apache2/phpfcgid.stpl
@@ -0,0 +1,39 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %sdocroot%>
+        SSLRequireSSL
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        <Files *.php>
+          SetHandler fcgid-script
+        </Files>
+        FCGIWrapper %home%/%user%/web/%domain%/cgi-bin/fcgi-starter .php
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    php_admin_value open_basedir none
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.10/templates/web/apache2/phpfcgid.tpl b/install/ubuntu/18.10/templates/web/apache2/phpfcgid.tpl
new file mode 100644
index 00000000..a4c01269
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/apache2/phpfcgid.tpl
@@ -0,0 +1,31 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %docroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+        php_admin_value open_basedir %docroot%:%home%/%user%/tmp
+        php_admin_value upload_tmp_dir %home%/%user%/tmp
+        php_admin_value session.save_path %home%/%user%/tmp
+        <Files *.php>
+          SetHandler fcgid-script
+        </Files>
+        FCGIWrapper %home%/%user%/web/%domain%/cgi-bin/fcgi-starter .php
+    </Directory>
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/ubuntu/18.10/templates/web/awstats/awstats.tpl b/install/ubuntu/18.10/templates/web/awstats/awstats.tpl
new file mode 100755
index 00000000..9a92e0fd
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/awstats/awstats.tpl
@@ -0,0 +1,133 @@
+LogFile="/var/log/%web_system%/domains/%domain%.log"
+LogType=W
+LogFormat=1
+LogSeparator=" "
+SiteDomain="%domain_idn%"
+HostAliases="%alias_idn%"
+DirData="%home%/%user%/web/%domain%/stats"
+DirCgi="/vstats"
+DirIcons="/vstats/icon"
+AllowToUpdateStatsFromBrowser=0
+AllowFullYearView=2
+EnableLockForUpdate=1
+DNSStaticCacheFile="dnscache.txt"
+DNSLastUpdateCacheFile="dnscachelastupdate.txt"
+SkipDNSLookupFor=""
+AllowAccessFromWebToAuthenticatedUsersOnly=0
+AllowAccessFromWebToFollowingAuthenticatedUsers=""
+AllowAccessFromWebToFollowingIPAddresses=""
+CreateDirDataIfNotExists=0
+BuildHistoryFormat=text
+BuildReportFormat=html
+SaveDatabaseFilesWithPermissionsForEveryone=0
+PurgeLogFile=0
+ArchiveLogRecords=0
+KeepBackupOfHistoricFiles=1
+DefaultFile="index.php index.html"
+SkipHosts="127.0.0.1
+SkipUserAgents=""
+SkipFiles=""
+SkipReferrersBlackList=""
+OnlyHosts=""
+OnlyUserAgents=""
+OnlyUsers=""
+OnlyFiles=""
+NotPageList="css js class gif jpg jpeg png bmp ico rss xml swf"
+ValidHTTPCodes="200 304"
+ValidSMTPCodes="1 250"
+AuthenticatedUsersNotCaseSensitive=0
+URLNotCaseSensitive=0
+URLWithAnchor=0
+URLQuerySeparators="?;"
+URLWithQuery=0
+URLWithQueryWithOnlyFollowingParameters=""
+URLWithQueryWithoutFollowingParameters=""
+URLReferrerWithQuery=0
+WarningMessages=1
+ErrorMessages=""
+DebugMessages=0
+NbOfLinesForCorruptedLog=50
+WrapperScript=""
+DecodeUA=0
+MiscTrackerUrl="/js/awstats_misc_tracker.js"
+UseFramesWhenCGI=1
+DetailedReportsOnNewWindows=1
+Expires=3600
+MaxRowsInHTMLOutput=1000
+Lang="auto"
+DirLang="./lang"
+ShowMenu=1
+ShowSummary=UVPHB
+ShowMonthStats=UVPHB
+ShowDaysOfMonthStats=VPHB
+ShowDaysOfWeekStats=PHB
+ShowHoursStats=PHB
+ShowDomainsStats=PHB
+ShowHostsStats=PHBL
+ShowAuthenticatedUsers=0
+ShowRobotsStats=HBL
+ShowWormsStats=0
+ShowEMailSenders=0
+ShowEMailReceivers=0
+ShowSessionsStats=1
+ShowPagesStats=PBEX
+ShowFileTypesStats=HB
+ShowFileSizesStats=0
+ShowDownloadsStats=HB
+ShowOSStats=1
+ShowBrowsersStats=1
+ShowScreenSizeStats=0
+ShowOriginStats=PH
+ShowKeyphrasesStats=1
+ShowKeywordsStats=1
+ShowMiscStats=a
+ShowHTTPErrorsStats=1
+ShowSMTPErrorsStats=0
+ShowClusterStats=0
+AddDataArrayMonthStats=1
+AddDataArrayShowDaysOfMonthStats=1
+AddDataArrayShowDaysOfWeekStats=1
+AddDataArrayShowHoursStats=1
+IncludeInternalLinksInOriginSection=0
+MaxNbOfDomain = 10
+MinHitDomain  = 1
+MaxNbOfHostsShown = 10
+MinHitHost    = 1
+MaxNbOfLoginShown = 10
+MinHitLogin   = 1
+MaxNbOfRobotShown = 10
+MinHitRobot   = 1
+MaxNbOfDownloadsShown = 10
+MinHitDownloads = 1
+MaxNbOfPageShown = 10
+MinHitFile    = 1
+MaxNbOfOsShown = 10
+MinHitOs      = 1
+MaxNbOfBrowsersShown = 10
+MinHitBrowser = 1
+MaxNbOfScreenSizesShown = 5
+MinHitScreenSize = 1
+MaxNbOfWindowSizesShown = 5
+MinHitWindowSize = 1
+MaxNbOfRefererShown = 10
+MinHitRefer   = 1
+MaxNbOfKeyphrasesShown = 10
+MinHitKeyphrase = 1
+MaxNbOfKeywordsShown = 10
+MinHitKeyword = 1
+MaxNbOfEMailsShown = 20
+MinHitEMail   = 1
+FirstDayOfWeek=0
+ShowFlagLinks=""
+ShowLinksOnUrl=1
+UseHTTPSLinkForUrl=""
+MaxLengthOfShownURL=64
+HTMLHeadSection=""
+HTMLEndSection=""
+MetaRobot=0
+Logo="awstats_logo6.png"
+LogoLink="http://awstats.sourceforge.net"
+BarWidth   = 260
+BarHeight  = 90
+StyleSheet=""
+ExtraTrackedRowsLimit=500
diff --git a/install/ubuntu/18.10/templates/web/awstats/index.tpl b/install/ubuntu/18.10/templates/web/awstats/index.tpl
new file mode 100755
index 00000000..9df9bb5c
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/awstats/index.tpl
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+    <title>Awstats log analyzer </title>
+</head>
+<frameset rows="60,*" cols="*">
+    <frame src="nav.html" name="nav" scrolling="no" noresize>
+    <frame src="%month%/index.html" name="stats">
+</frameset>
+</html>
diff --git a/install/ubuntu/18.10/templates/web/awstats/nav.tpl b/install/ubuntu/18.10/templates/web/awstats/nav.tpl
new file mode 100755
index 00000000..f29bed68
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/awstats/nav.tpl
@@ -0,0 +1,23 @@
+<html>
+<head>
+    <title>Awstats navigation</title>
+    <script language="javascript">
+        function change() {
+            top.stats.location= document.period.select.value + '/';
+        }
+    </script>
+</head>
+<body>
+<table width="100%" border="0" cellspacing="0" cellpadding="0">
+<tr>
+    <td><img src="logo.png" alt="vesta"></td>
+    <td><form name="period" action="" method="get">
+        <select name="select" ONCHANGE="change()">
+%select_month%
+        </select>
+    </form>
+    </td>
+</tr>
+</table>
+</body>
+</html>
diff --git a/install/ubuntu/18.10/templates/web/nginx/caching.sh b/install/ubuntu/18.10/templates/web/nginx/caching.sh
new file mode 100755
index 00000000..09d8efe7
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/caching.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+user=$1
+domain=$2
+ip=$3
+home=$4
+docroot=$5
+
+str="proxy_cache_path /var/cache/nginx/$domain levels=2" 
+str="$str keys_zone=$domain:10m inactive=60m max_size=512m;" 
+conf='/etc/nginx/conf.d/01_caching_pool.conf'
+if [ -e "$conf" ]; then
+    if [ -z "$(grep "=${domain}:" $conf)" ]; then
+        echo "$str" >> $conf
+    fi
+else
+    echo "$str" >> $conf
+fi
+
diff --git a/install/ubuntu/18.10/templates/web/nginx/caching.stpl b/install/ubuntu/18.10/templates/web/nginx/caching.stpl
new file mode 100755
index 00000000..e149b98b
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/caching.stpl
@@ -0,0 +1,43 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass https://%ip%:%web_ssl_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/caching.tpl b/install/ubuntu/18.10/templates/web/nginx/caching.tpl
new file mode 100755
index 00000000..36761b65
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/caching.tpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/default.stpl b/install/ubuntu/18.10/templates/web/nginx/default.stpl
new file mode 100755
index 00000000..0e669b3d
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/default.stpl
@@ -0,0 +1,35 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/18.10/templates/web/nginx/default.tpl b/install/ubuntu/18.10/templates/web/nginx/default.tpl
new file mode 100755
index 00000000..4d5c774b
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/default.tpl
@@ -0,0 +1,33 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/18.10/templates/web/nginx/hosting.sh b/install/ubuntu/18.10/templates/web/nginx/hosting.sh
new file mode 100755
index 00000000..eeed37ef
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/ubuntu/18.10/templates/web/nginx/hosting.stpl b/install/ubuntu/18.10/templates/web/nginx/hosting.stpl
new file mode 100755
index 00000000..1ef8994b
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/hosting.stpl
@@ -0,0 +1,37 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/18.10/templates/web/nginx/hosting.tpl b/install/ubuntu/18.10/templates/web/nginx/hosting.tpl
new file mode 100755
index 00000000..15961c95
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/hosting.tpl
@@ -0,0 +1,35 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/18.10/templates/web/nginx/http2.stpl b/install/ubuntu/18.10/templates/web/nginx/http2.stpl
new file mode 100644
index 00000000..f225becd
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/http2.stpl
@@ -0,0 +1,35 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/18.10/templates/web/nginx/http2.tpl b/install/ubuntu/18.10/templates/web/nginx/http2.tpl
new file mode 100644
index 00000000..4d5c774b
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/http2.tpl
@@ -0,0 +1,33 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/cms_made_simple.stpl
new file mode 100644
index 00000000..003e9180
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/cms_made_simple.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/cms_made_simple.tpl
new file mode 100644
index 00000000..f9e90393
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/cms_made_simple.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter2.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter2.stpl
new file mode 100644
index 00000000..51f1f408
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter2.stpl
@@ -0,0 +1,60 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter2.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter2.tpl
new file mode 100644
index 00000000..d2422be2
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter2.tpl
@@ -0,0 +1,57 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter3.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter3.stpl
new file mode 100644
index 00000000..e8dd8bf6
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter3.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter3.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter3.tpl
new file mode 100644
index 00000000..54f81b99
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/codeigniter3.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/datalife_engine.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/datalife_engine.stpl
new file mode 100644
index 00000000..96495ee8
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/datalife_engine.stpl
@@ -0,0 +1,126 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/datalife_engine.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/datalife_engine.tpl
new file mode 100644
index 00000000..3ea45347
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/datalife_engine.tpl
@@ -0,0 +1,123 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/default.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/default.stpl
new file mode 100644
index 00000000..38de83d2
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/default.stpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/default.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/default.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/default.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/dokuwiki.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/dokuwiki.stpl
new file mode 100644
index 00000000..c9387bfb
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/dokuwiki.stpl
@@ -0,0 +1,71 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/dokuwiki.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/dokuwiki.tpl
new file mode 100644
index 00000000..0a9a75ed
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/dokuwiki.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal6.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal6.stpl
new file mode 100644
index 00000000..6b20ba9d
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -0,0 +1,84 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+   
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }   
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        try_files $uri @rewrite;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }    
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal6.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal6.tpl
new file mode 100644
index 00000000..0ae7568b
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -0,0 +1,81 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri @rewrite; 
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ ^/sites/.*/files/imagecache/ {
+            try_files $uri @rewrite;
+        }
+            
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;             
+            include /etc/nginx/fastcgi_params;
+        }        
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal7.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal7.stpl
new file mode 100644
index 00000000..041ebba0
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -0,0 +1,88 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+    
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+    
+        try_files $uri /index.php?$query_string;  
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal7.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal7.tpl
new file mode 100644
index 00000000..6b41f319
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }  
+
+        try_files $uri /index.php?$query_string;
+
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }                
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal8.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal8.stpl
new file mode 100644
index 00000000..231d9441
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -0,0 +1,93 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
+        try_files $uri /index.php?$query_string;
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+        
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }    
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal8.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal8.tpl
new file mode 100644
index 00000000..452aa9e6
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -0,0 +1,90 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }  
+   
+    location / {
+        location = /favicon.ico {
+            log_not_found off;
+            access_log off;
+        }
+
+        location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+        }
+
+        location ~ \..*/.*\.php$ {
+            return 403;
+        }
+
+        location ~ ^/sites/.*/private/ {
+            return 403;
+        }
+        
+        location ~ ^/sites/[^/]+/files/.*\.php$ {
+            deny all;
+        }
+        
+        location ~ /vendor/.*\.php$ {
+            deny all;
+            return 404;
+        }          
+        
+        try_files $uri /index.php?$query_string;
+        
+        location ~ ^/sites/.*/files/styles/ {
+            try_files $uri @rewrite;
+        }
+
+        location ~ ^(/[a-z\-]+)?/system/files/ {
+            try_files $uri /index.php?$query_string;
+        }
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            try_files $uri @rewrite;
+            expires max;
+            log_not_found off;
+        }
+
+        location ~ '\.php$|^/update.php' {
+            fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_pass %backend_lsnr%;
+            include /etc/nginx/fastcgi_params;
+        }        
+    }        
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/joomla.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/joomla.stpl
new file mode 100644
index 00000000..886b586e
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/joomla.stpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/joomla.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/joomla.tpl
new file mode 100644
index 00000000..91b7a8f1
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/joomla.tpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/laravel.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/laravel.stpl
new file mode 100644
index 00000000..8e6e8774
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/laravel.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/laravel.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/laravel.tpl
new file mode 100644
index 00000000..d14b0173
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/laravel.tpl
@@ -0,0 +1,50 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/magento.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/magento.stpl
new file mode 100644
index 00000000..5d05ea72
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/magento.stpl
@@ -0,0 +1,197 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %sdocroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %sdocroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %sdocroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %sdocroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/magento.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/magento.tpl
new file mode 100644
index 00000000..3f292fff
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/magento.tpl
@@ -0,0 +1,194 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %docroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %docroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %docroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %docroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/modx.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/modx.stpl
new file mode 100644
index 00000000..23ce8eb8
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/modx.stpl
@@ -0,0 +1,68 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  https://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/modx.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/modx.tpl
new file mode 100644
index 00000000..342d3ecf
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/modx.tpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  http://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/moodle.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/moodle.stpl
new file mode 100644
index 00000000..10629c65
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/moodle.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/moodle.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/moodle.tpl
new file mode 100644
index 00000000..c20ba648
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/moodle.tpl
@@ -0,0 +1,87 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/no-php.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/no-php.stpl
new file mode 100644
index 00000000..7b3aff96
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/no-php.stpl
@@ -0,0 +1,46 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/no-php.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/no-php.tpl
new file mode 100644
index 00000000..7ff8aa1d
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/no-php.tpl
@@ -0,0 +1,43 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/odoo.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/odoo.stpl
new file mode 100644
index 00000000..223eb97a
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/odoo.stpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+    
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/odoo.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/odoo.tpl
new file mode 100644
index 00000000..b1240aae
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/odoo.tpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/opencart.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/opencart.stpl
new file mode 100644
index 00000000..5b6e55e8
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/opencart.stpl
@@ -0,0 +1,58 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/opencart.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/opencart.tpl
new file mode 100644
index 00000000..d0a9060b
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/opencart.tpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/owncloud.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/owncloud.stpl
new file mode 100644
index 00000000..b43fdc75
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/owncloud.stpl
@@ -0,0 +1,84 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/owncloud.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/owncloud.tpl
new file mode 100644
index 00000000..e3ec31de
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/owncloud.tpl
@@ -0,0 +1,81 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+            access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/piwik.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/piwik.stpl
new file mode 100644
index 00000000..0a4a412f
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/piwik.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+        return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+        }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/piwik.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/piwik.tpl
new file mode 100644
index 00000000..f94fb7de
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/piwik.tpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+            return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.stpl
new file mode 100644
index 00000000..c9f91854
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+        }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.tpl
new file mode 100644
index 00000000..297fe0e8
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/sendy.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/sendy.stpl
new file mode 100644
index 00000000..0b351000
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/sendy.stpl
@@ -0,0 +1,88 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+     location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/sendy.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/sendy.tpl
new file mode 100644
index 00000000..b27b427d
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/sendy.tpl
@@ -0,0 +1,86 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress.stpl
new file mode 100644
index 00000000..38de83d2
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress.stpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2.stpl
new file mode 100644
index 00000000..39cce361
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2.stpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2.tpl
new file mode 100644
index 00000000..bccb8b3d
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2.tpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
new file mode 100644
index 00000000..264ca01a
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -0,0 +1,71 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+} 
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
new file mode 100644
index 00000000..39e366b7
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
diff --git a/install/ubuntu/18.10/templates/web/nginx/proxy_ip.tpl b/install/ubuntu/18.10/templates/web/nginx/proxy_ip.tpl
new file mode 100755
index 00000000..ae195617
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/proxy_ip.tpl
@@ -0,0 +1,9 @@
+server {
+    listen       %ip%:%proxy_port% default;
+    server_name  _;
+    #access_log  /var/log/nginx/%ip%.log main;
+    location / {
+        proxy_pass  http://%ip%:%web_port%;
+   }
+}
+
diff --git a/install/ubuntu/18.10/templates/web/php-fpm/default.tpl b/install/ubuntu/18.10/templates/web/php-fpm/default.tpl
new file mode 100644
index 00000000..209e1e43
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/php-fpm/default.tpl
@@ -0,0 +1,21 @@
+[%backend%]
+listen = 127.0.0.1:%backend_port%
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/ubuntu/18.10/templates/web/php-fpm/no-php.tpl b/install/ubuntu/18.10/templates/web/php-fpm/no-php.tpl
new file mode 100644
index 00000000..047c33ed
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/php-fpm/no-php.tpl
@@ -0,0 +1,20 @@
+;[%backend%]
+;listen = /dev/null
+
+;user = %user%
+;group = %user%
+
+;listen.owner = %user%
+;listen.group = www-data
+
+;pm = ondemand
+;pm.max_children = 4
+;pm.max_requests = 4000
+;pm.process_idle_timeout = 10s
+;pm.status_path = /status
+
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /home/%user%/tmp
+;env[TMPDIR] = /home/%user%/tmp
+;env[TEMP] = /home/%user%/tmp
diff --git a/install/ubuntu/18.10/templates/web/php-fpm/socket.tpl b/install/ubuntu/18.10/templates/web/php-fpm/socket.tpl
new file mode 100644
index 00000000..a0151084
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/php-fpm/socket.tpl
@@ -0,0 +1,24 @@
+[%backend%]
+listen = /var/run/php/%backend%.sock
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+listen.owner = %user%
+listen.group = www-data
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/ubuntu/18.10/templates/web/skel/document_errors/403.html b/install/ubuntu/18.10/templates/web/skel/document_errors/403.html
new file mode 100755
index 00000000..9c3f6baa
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/skel/document_errors/403.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>403 &mdash; Forbidden</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="You do not have permission to view this"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>403</h1>
+    <h2>Forbidden</h2>
+    <div>
+        Unfortunately, you do not have permission to view this
+    </div>
+</body>
+
+</html>
diff --git a/install/ubuntu/18.10/templates/web/skel/document_errors/404.html b/install/ubuntu/18.10/templates/web/skel/document_errors/404.html
new file mode 100755
index 00000000..2cee7708
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/skel/document_errors/404.html
@@ -0,0 +1,28 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>404 &mdash; Not Found</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, page not found"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+    <h1>404</h1>
+    <h2>Page Not Found</h2>
+    <div>
+        It seems that the page you were trying to reach does not exist anymore, or maybe it has just moved.
+        You can start again from the <a href="http://%domain%/">home</a> or go back to <a href="javascript:%20history.go(-1)">previous page</a>.
+    </div>
+</body>
+</html>
diff --git a/install/ubuntu/18.10/templates/web/skel/document_errors/50x.html b/install/ubuntu/18.10/templates/web/skel/document_errors/50x.html
new file mode 100755
index 00000000..85ba648b
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/skel/document_errors/50x.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>500 &mdash; Internal Sever Error</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, something went wrong. Internal Server Error"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>500</h1>
+    <h2>Internal Server Error</h2>
+    <div>
+        Sorry, something went wrong :(
+    </div>
+</body>
+
+</html>
diff --git a/install/ubuntu/18.10/templates/web/skel/public_html/index.html b/install/ubuntu/18.10/templates/web/skel/public_html/index.html
new file mode 100755
index 00000000..4f5bb724
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/skel/public_html/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="http://vestacp.com/">Powered by VESTA</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/ubuntu/18.10/templates/web/skel/public_html/robots.txt b/install/ubuntu/18.10/templates/web/skel/public_html/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/skel/public_html/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/ubuntu/18.10/templates/web/skel/public_shtml/index.html b/install/ubuntu/18.10/templates/web/skel/public_shtml/index.html
new file mode 100755
index 00000000..4f5bb724
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/skel/public_shtml/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="http://vestacp.com/">Powered by VESTA</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/ubuntu/18.10/templates/web/skel/public_shtml/robots.txt b/install/ubuntu/18.10/templates/web/skel/public_shtml/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/skel/public_shtml/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/ubuntu/18.10/templates/web/suspend/.htaccess b/install/ubuntu/18.10/templates/web/suspend/.htaccess
new file mode 100755
index 00000000..5a6df83f
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/suspend/.htaccess
@@ -0,0 +1,2 @@
+ErrorDocument 403 /index.html
+ErrorDocument 404 /index.html
diff --git a/install/ubuntu/18.10/templates/web/suspend/index.html b/install/ubuntu/18.10/templates/web/suspend/index.html
new file mode 100755
index 00000000..f2d04e1f
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/suspend/index.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>Website Suspended</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This website has been suspended."/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:84px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: 15px 0 25px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+<body>
+    <h1>SUSPENDED</h1>
+    <h2>This website has been suspended.</h2>
+    <div>
+        Please contact the technical support department.
+    </div>
+</body>
+</html>
diff --git a/install/ubuntu/18.10/templates/web/webalizer/webalizer.tpl b/install/ubuntu/18.10/templates/web/webalizer/webalizer.tpl
new file mode 100755
index 00000000..068adcfb
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/webalizer/webalizer.tpl
@@ -0,0 +1,110 @@
+HostName         %domain_idn%
+LogFile          /var/log/%web_system%/domains/%domain%.log
+OutputDir        %home%/%user%/web/%domain%/stats
+HistoryName      %home%/%user%/web/%domain%/stats/%domain%.hist
+Incremental      yes
+IncrementalName  %home%/%user%/web/%domain%/stats/%domain%.current
+PageType         htm*
+PageType         cgi
+PageType         php
+PageType         shtml
+DNSCache         /var/lib/webalizer/dns_cache.db
+DNSChildren      10
+Quiet            yes
+FoldSeqErr       yes
+IndexAlias       index.php
+HideURL          *.gif
+HideURL          *.GIF
+HideURL          *.jpg
+HideURL          *.JPG
+HideURL          *.png
+HideURL          *.PNG
+HideURL          *.ra
+SearchEngine     abcsearch.          terms=
+SearchEngine     alexa.              q=
+SearchEngine     alltheweb.          q=
+SearchEngine     alltheweb.          query=
+SearchEngine     alot.               q=
+SearchEngine     altavista.          q=
+SearchEngine     aolsearch.          query=
+SearchEngine     aport.ru            r=
+SearchEngine     ask.                q=
+SearchEngine     atlas.cz            q=
+SearchEngine     bbc.                q=
+SearchEngine     bing.               q=
+SearchEngine     blingo.             q=
+SearchEngine     blogs.yandex.ru     text=
+SearchEngine     btopenworld         query=
+SearchEngine     buscador.ya.com     q=
+SearchEngine     busca.              q=
+SearchEngine     business.           query=
+SearchEngine     centrum.cz          q=
+SearchEngine     chiff.              q=
+SearchEngine     clusty.             query=
+SearchEngine     comcast.            q=
+SearchEngine     crawler.            q=
+SearchEngine     cuil.               q=
+SearchEngine     dmoz.               search=
+SearchEngine     dogpile.com         q=
+SearchEngine     dpxml               qkw=
+SearchEngine     eureka.             searchword=
+SearchEngine     euroseek.           string=
+SearchEngine     exalead.            q=
+SearchEngine     excite              search=
+SearchEngine     ezilon.             q=
+SearchEngine     fastbrowsersearch.  q=
+SearchEngine     feedster.com        q=
+SearchEngine     fireball.de         q=
+SearchEngine     fireball.           keyword=
+SearchEngine     freeserve.          q=
+SearchEngine     gigablast.          q=
+SearchEngine     gogo.ru             q=
+SearchEngine     go.mail.ru          q=
+SearchEngine     google.             q=
+SearchEngine     hakia.              q=
+SearchEngine     hotbot.             query=
+SearchEngine     infoseek.           qt=
+SearchEngine     iwon                searchfor=
+SearchEngine     ixquick.com         query=
+SearchEngine     joeant.             keywords=
+SearchEngine     jyxo.cz             s=
+SearchEngine     looksmart.          key=
+SearchEngine     lycos.              query=
+SearchEngine     mamma.              q=
+SearchEngine     metacrawler         q=
+SearchEngine     msn.                MT=
+SearchEngine     msxml               qkw=
+SearchEngine     mysearch.           searchfor=
+SearchEngine     mywebsearch.        searchfor=
+SearchEngine     netscape.           q=
+SearchEngine     nigma.ru            q=
+SearchEngine     northernlight.      qr=
+SearchEngine     ntlworld.           q=
+SearchEngine     orange.             q=
+SearchEngine     overture.           Keywords=
+SearchEngine     punto.ru            text=
+SearchEngine     rambler.            keyword=
+SearchEngine     search.aol.         q=
+SearchEngine     search.babylon.     q=
+SearchEngine     search.centrum.     phrase=
+SearchEngine     search.conduit.     q=
+SearchEngine     search.earthlink    q=
+SearchEngine     search.icq.         q=
+SearchEngine     search.live.com     q=
+SearchEngine     search.rambler.ru   words=
+SearchEngine     search.winamp.      q=
+SearchEngine     searchy.            q=
+SearchEngine     seznam.cz           w=
+SearchEngine     snap.               query=
+SearchEngine     teoma.              q=
+SearchEngine     teradex.com         q=
+SearchEngine     ukplus              key=
+SearchEngine     verizon.            q=
+SearchEngine     virginmedia.        q=
+SearchEngine     voila.              rdata=
+SearchEngine     webcrawler          searchText=
+SearchEngine     web.search.naver.   query=
+SearchEngine     wisenut             q=
+SearchEngine     yahoo.              p=
+SearchEngine     yandex.             text=
+SearchEngine     yodao.              q=
diff --git a/install/ubuntu/18.10/vsftpd/vsftpd.conf b/install/ubuntu/18.10/vsftpd/vsftpd.conf
new file mode 100644
index 00000000..75e0104f
--- /dev/null
+++ b/install/ubuntu/18.10/vsftpd/vsftpd.conf
@@ -0,0 +1,40 @@
+anonymous_enable=NO
+local_enable=YES
+write_enable=YES
+local_umask=022
+anon_umask=022
+anon_upload_enable=NO
+dirmessage_enable=YES
+xferlog_enable=YES
+connect_from_port_20=YES
+xferlog_std_format=YES
+dual_log_enable=YES
+chroot_local_user=YES
+listen=YES
+pam_service_name=vsftpd
+userlist_enable=NO
+tcp_wrappers=YES
+force_dot_files=YES
+ascii_upload_enable=YES
+ascii_download_enable=YES
+allow_writeable_chroot=YES
+seccomp_sandbox=NO
+pasv_enable=YES
+pasv_promiscuous=YES
+pasv_min_port=12000
+pasv_max_port=12100
+max_per_ip=10
+max_clients=100
+use_localtime=YES
+utf8_filesystem=YES
+ssl_enable=YES
+allow_anon_ssl=NO
+require_ssl_reuse=NO
+ssl_ciphers=HIGH
+ssl_tlsv1=YES
+ssl_sslv2=NO
+ssl_sslv3=NO
+force_local_data_ssl=NO
+force_local_logins_ssl=NO
+rsa_cert_file=/usr/local/vesta/ssl/certificate.crt
+rsa_private_key_file=/usr/local/vesta/ssl/certificate.key

From 703a66eb5723bf306e7090cae981461e52df60a8 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Mon, 15 Apr 2019 21:00:12 +0300
Subject: [PATCH 0433/2300] gzip_vary duplicate

---
 install/ubuntu/18.04/nginx/nginx.conf | 1 -
 install/ubuntu/18.10/nginx/nginx.conf | 1 -
 2 files changed, 2 deletions(-)

diff --git a/install/ubuntu/18.04/nginx/nginx.conf b/install/ubuntu/18.04/nginx/nginx.conf
index dc2cf1dd..790aee49 100644
--- a/install/ubuntu/18.04/nginx/nginx.conf
+++ b/install/ubuntu/18.04/nginx/nginx.conf
@@ -50,7 +50,6 @@ http {
 
     # Compression
     gzip                on;
-    gzip_vary           on;
     gzip_static         on;
     gzip_vary           on;
     gzip_comp_level     6;
diff --git a/install/ubuntu/18.10/nginx/nginx.conf b/install/ubuntu/18.10/nginx/nginx.conf
index dc2cf1dd..790aee49 100644
--- a/install/ubuntu/18.10/nginx/nginx.conf
+++ b/install/ubuntu/18.10/nginx/nginx.conf
@@ -50,7 +50,6 @@ http {
 
     # Compression
     gzip                on;
-    gzip_vary           on;
     gzip_static         on;
     gzip_vary           on;
     gzip_comp_level     6;

From 483c4b943b9a37b819fd1e45ee2e1132f7f5804b Mon Sep 17 00:00:00 2001
From: noogen <tom@noogen.net>
Date: Mon, 15 Apr 2019 17:29:31 -0500
Subject: [PATCH 0434/2300] fix  typo and allow user to login on pgsql restore

---
 func/rebuild.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/func/rebuild.sh b/func/rebuild.sh
index 9a1c0f47..352b9083 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -600,7 +600,7 @@ rebuild_pgsql_database() {
         exit $E_CONNECT
     fi
 
-    query="CREATE ROLE $DBUSER"
+    query="CREATE ROLE $DBUSER WITH LOGIN"
     psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
 
     query="UPDATE pg_authid SET rolpassword='$MD5' WHERE rolname='$DBUSER'"
@@ -617,7 +617,7 @@ rebuild_pgsql_database() {
     query="GRANT ALL PRIVILEGES ON DATABASE $DB TO $DBUSER"
     psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
 
-    query="GRANT CONNECT ON DATABASE template1 to $dbuser"
+    query="GRANT CONNECT ON DATABASE template1 to $DBUSER"
     psql -h $HOST -U $USER -c "$query" > /dev/null 2>&1
 }
 

From bef5f876189674531d3380eab6d6d66c68d51df8 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Tue, 16 Apr 2019 12:16:03 +0300
Subject: [PATCH 0435/2300] version up

---
 src/rpm/specs/vesta-php.spec | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/rpm/specs/vesta-php.spec b/src/rpm/specs/vesta-php.spec
index fe5aded9..336e1e77 100644
--- a/src/rpm/specs/vesta-php.spec
+++ b/src/rpm/specs/vesta-php.spec
@@ -1,6 +1,6 @@
 Name:           vesta-php
 Version:        0.9.8
-Release:        23
+Release:        24
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL

From 425e9f248383adda226114dd3f64c2d23480be01 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Tue, 16 Apr 2019 12:53:58 +0300
Subject: [PATCH 0436/2300] 18$ instead of 21$

---
 web/templates/admin/edit_server.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/edit_server.html b/web/templates/admin/edit_server.html
index 9de86222..59683b6d 100644
--- a/web/templates/admin/edit_server.html
+++ b/web/templates/admin/edit_server.html
@@ -934,7 +934,7 @@
                                                                     <a href="https://vestacp.com/checkout/2co.php?product_id=6&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Licence').' 3$/'.__('month').'</a>
                                                                 </li>
                                                                 <li>
-                                                                    <a href="https://vestacp.com/checkout/2co.php?product_id=9&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Lifetime License').' 21$</a>
+                                                                    <a href="https://vestacp.com/checkout/2co.php?product_id=9&referer='.$_SERVER['HTTP_HOST'].'" class="purchase">'.__('Buy Lifetime License').' 18$</a>
                                                                 </li>
                                                             </ul>
                                                             <span class="twoco">2Checkout.com Inc. (Ohio, USA) is a payment facilitator for goods and services provided by vestacp.com.</span>';

From 25706abfb30e5b01d6fb604a78df5d2d4da8a7b4 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Wed, 17 Apr 2019 23:28:40 +0300
Subject: [PATCH 0437/2300] replaced rdomain with domain variable

---
 bin/v-add-letsencrypt-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 56026b9b..edcf6ae2 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -163,7 +163,7 @@ for auth in $authz; do
             check_result $? "Proxy restart failed" >/dev/null
 
         else
-            well_known="$HOMEDIR/$user/web/$rdomain/public_html/.well-known"
+            well_known="$HOMEDIR/$user/web/$domain/public_html/.well-known"
             acme_challenge="$well_known/acme-challenge"
             mkdir -p $acme_challenge
             echo "$token.$THUMB" > $acme_challenge/$token

From 82b635f8da921a6d3aa914ea0765e5b974022284 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Thu, 18 Apr 2019 15:03:03 +0300
Subject: [PATCH 0438/2300] Print the file name for each match

---
 bin/v-search-ssl-certificates | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-search-ssl-certificates b/bin/v-search-ssl-certificates
index b392e810..c9208830 100755
--- a/bin/v-search-ssl-certificates
+++ b/bin/v-search-ssl-certificates
@@ -73,7 +73,7 @@ csv_list() {
 #                       Action                             #
 #----------------------------------------------------------#
 
-search_cmd=$(grep "SSL='yes'" $VESTA/data/users/*/web.conf |\
+search_cmd=$(grep -H "SSL='yes'" $VESTA/data/users/*/web.conf |\
     cut -f 1 -d ' ' |\
     sed -e "s|$VESTA/data/users/|USER='|" -e "s|/web.conf:|' |")
 

From 35df8ba980a87c9c9a6342fd10ab617933e2f583 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Sat, 20 Apr 2019 00:08:37 +0300
Subject: [PATCH 0439/2300] Jessie backports

---
 install/vst-install-debian.sh | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 0741a6d6..bf7b3c22 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -478,6 +478,17 @@ echo "deb http://$RHOST/$codename/ $codename vesta" > $apt/vesta.list
 wget $CHOST/deb_signing.key -O deb_signing.key
 apt-key add deb_signing.key
 
+# Installing jessie backports
+if [ "$release" -eq 8 ]; then
+    if [ ! -e /etc/apt/apt.conf ]; then
+        echo 'Acquire::Check-Valid-Until "false";' >> /etc/apt/apt.conf
+    fi
+    if [ ! -e /etc/apt/sources.list.d/backports.list ]; then
+        echo "deb http://archive.debian.org/debian jessie-backports main" >\
+            /etc/apt/sources.list.d/vesta.list
+    fi
+fi
+
 
 #----------------------------------------------------------#
 #                         Backup                           #

From af37f5cbefe1a971a9b3d2a5c9b0e18488c2de37 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Sat, 20 Apr 2019 03:06:59 +0300
Subject: [PATCH 0440/2300] fix backport apt name

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index bf7b3c22..468ec28f 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -485,7 +485,7 @@ if [ "$release" -eq 8 ]; then
     fi
     if [ ! -e /etc/apt/sources.list.d/backports.list ]; then
         echo "deb http://archive.debian.org/debian jessie-backports main" >\
-            /etc/apt/sources.list.d/vesta.list
+            /etc/apt/sources.list.d/backports.list
     fi
 fi
 

From 97a3b4004774a9066a71ad48fd6c1774b878ac40 Mon Sep 17 00:00:00 2001
From: moucho <1095644+moucho@users.noreply.github.com>
Date: Sat, 20 Apr 2019 13:47:38 +0200
Subject: [PATCH 0441/2300] Spanish translation update

---
 web/inc/i18n/es.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/i18n/es.php b/web/inc/i18n/es.php
index 12d3d29c..b6718528 100644
--- a/web/inc/i18n/es.php
+++ b/web/inc/i18n/es.php
@@ -567,7 +567,7 @@ $LANG['es'] = array(
     'MAIL Server' => 'Servidor de Correo',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
-    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
+    'Use Web Domain SSL Certificate' => 'Usar el Cerfificado SSL de la Web',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'Soportar MYSQL',
     'phpMyAdmin URL' => 'phpMyAdmin URL',

From 7603cdea7a5c9441c434e654a0c99ef49b51400c Mon Sep 17 00:00:00 2001
From: Sergio <nadalcastalla@gmail.com>
Date: Sun, 21 Apr 2019 00:11:36 +0200
Subject: [PATCH 0442/2300] Add the validation of the CSRF token. It is missing
 in some cases when it is sent by GET or POST.

---
 web/add/cron/autoupdate/index.php      | 6 ++++++
 web/add/cron/reports/index.php         | 6 ++++++
 web/add/firewall/banlist/index.php     | 6 ++++++
 web/delete/cron/autoupdate/index.php   | 6 ++++++
 web/delete/cron/reports/index.php      | 6 ++++++
 web/restart/service/index.php          | 6 ++++++
 web/restart/system/index.php           | 6 ++++++
 web/templates/admin/list_services.html | 2 +-
 web/update/vesta/index.php             | 6 ++++++
 9 files changed, 49 insertions(+), 1 deletion(-)

diff --git a/web/add/cron/autoupdate/index.php b/web/add/cron/autoupdate/index.php
index 53d50c05..90854d9b 100644
--- a/web/add/cron/autoupdate/index.php
+++ b/web/add/cron/autoupdate/index.php
@@ -5,6 +5,12 @@ ob_start();
 session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Check token
+if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+    header('location: /login/');
+    exit();
+}
+
 if ($_SESSION['user'] == 'admin') {
     exec (VESTA_CMD."v-add-cron-vesta-autoupdate", $output, $return_var);
     $_SESSION['error_msg'] = __('Autoupdate has been successfully enabled');
diff --git a/web/add/cron/reports/index.php b/web/add/cron/reports/index.php
index 4b0424e3..197c5760 100644
--- a/web/add/cron/reports/index.php
+++ b/web/add/cron/reports/index.php
@@ -5,6 +5,12 @@ ob_start();
 session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Check token
+if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+    header('location: /login/');
+    exit();
+}
+
 exec (VESTA_CMD."v-add-cron-reports ".$user, $output, $return_var);
 $_SESSION['error_msg'] = __('Cronjob email reporting has been successfully enabled');
 unset($output);
diff --git a/web/add/firewall/banlist/index.php b/web/add/firewall/banlist/index.php
index 774421e6..a9f616a2 100644
--- a/web/add/firewall/banlist/index.php
+++ b/web/add/firewall/banlist/index.php
@@ -15,6 +15,12 @@ if ($_SESSION['user'] != 'admin') {
 // Check POST request
 if (!empty($_POST['ok'])) {
 
+    // Check token
+    if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
+        header('location: /login/');
+        exit();
+    }
+
     // Check empty fields
     if (empty($_POST['v_chain'])) $errors[] = __('banlist');
     if (empty($_POST['v_ip'])) $errors[] = __('ip address');
diff --git a/web/delete/cron/autoupdate/index.php b/web/delete/cron/autoupdate/index.php
index ad670ef0..a58064c0 100644
--- a/web/delete/cron/autoupdate/index.php
+++ b/web/delete/cron/autoupdate/index.php
@@ -5,6 +5,12 @@ ob_start();
 session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Check token
+if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+    header('location: /login/');
+    exit();
+}
+
 if ($_SESSION['user'] == 'admin') {
     exec (VESTA_CMD."v-delete-cron-vesta-autoupdate", $output, $return_var);
     $_SESSION['error_msg'] = __('Autoupdate has been successfully disabled');
diff --git a/web/delete/cron/reports/index.php b/web/delete/cron/reports/index.php
index af7df20f..10d422a8 100644
--- a/web/delete/cron/reports/index.php
+++ b/web/delete/cron/reports/index.php
@@ -5,6 +5,12 @@ ob_start();
 session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Check token
+if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+    header('location: /login/');
+    exit();
+}
+
 exec (VESTA_CMD."v-delete-cron-reports ".$user, $output, $return_var);
 $_SESSION['error_msg'] = __('Cronjob email reporting has been successfully disabled');
 unset($output);
diff --git a/web/restart/service/index.php b/web/restart/service/index.php
index 5f42e5e5..eb07e856 100644
--- a/web/restart/service/index.php
+++ b/web/restart/service/index.php
@@ -5,6 +5,12 @@ ob_start();
 session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Check token
+if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+    header('location: /login/');
+    exit();
+}
+
 if ($_SESSION['user'] == 'admin') {
     if (!empty($_GET['srv'])) {
         if ($_GET['srv'] == 'iptables') {
diff --git a/web/restart/system/index.php b/web/restart/system/index.php
index 4facc5a5..4e09745e 100644
--- a/web/restart/system/index.php
+++ b/web/restart/system/index.php
@@ -5,6 +5,12 @@ ob_start();
 session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Check token
+if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+    header('location: /login/');
+    exit();
+}
+
 if ($_SESSION['user'] == 'admin') {
     if (!empty($_GET['hostname'])) {
         exec (VESTA_CMD."v-restart-system yes", $output, $return_var);
diff --git a/web/templates/admin/list_services.html b/web/templates/admin/list_services.html
index 346370e6..6012d2a3 100644
--- a/web/templates/admin/list_services.html
+++ b/web/templates/admin/list_services.html
@@ -54,7 +54,7 @@
           <div class="l-unit-toolbar__col l-unit-toolbar__col--right noselect">
             <div class="actions-panel clearfix">
               <div class="actions-panel__col actions-panel__configure shortcut-enter" key-action="href"><a href="/edit/server/"><?=__('configure')?> <i></i></a><span class="shortcut enter">&nbsp;&#8629;</span></div>
-              <div class="actions-panel__col actions-panel__restart shortcut-r" key-action="href"><a href="/restart/system/?hostname=<?php echo $sys['sysinfo']['HOSTNAME'] ?>"><?=__('restart')?> <i></i></a><span class="shortcut">&nbsp;R</span></div>
+              <div class="actions-panel__col actions-panel__restart shortcut-r" key-action="href"><a href="/restart/system/?hostname=<?php echo $sys['sysinfo']['HOSTNAME'] ?>&token=<?=$_SESSION['token']?>"><?=__('restart')?> <i></i></a><span class="shortcut">&nbsp;R</span></div>
             </div>
             <!-- /.actions-panel -->
           </div>
diff --git a/web/update/vesta/index.php b/web/update/vesta/index.php
index a025c7bf..fa7ca2c4 100644
--- a/web/update/vesta/index.php
+++ b/web/update/vesta/index.php
@@ -5,6 +5,12 @@ ob_start();
 session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Check token
+if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+    header('location: /login/');
+    exit();
+}
+
 if ($_SESSION['user'] == 'admin') {
     if (!empty($_GET['pkg'])) {
         $v_pkg = escapeshellarg($_GET['pkg']);

From 0831a198b86a4760e83c0eaec78d84bab7098e6c Mon Sep 17 00:00:00 2001
From: Sergio <nadalcastalla@gmail.com>
Date: Sun, 21 Apr 2019 01:51:29 +0200
Subject: [PATCH 0443/2300] Fixed several Command Injection.

---
 web/edit/db/index.php   | 2 ++
 web/edit/mail/index.php | 7 +++++--
 web/edit/web/index.php  | 6 ++++--
 3 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/web/edit/db/index.php b/web/edit/db/index.php
index 21d394f0..763717bc 100644
--- a/web/edit/db/index.php
+++ b/web/edit/db/index.php
@@ -42,6 +42,8 @@ if ( $v_suspended == 'yes' ) {
     $v_status =  'active';
 }
 
+$v_database = escapeshellarg($_GET['database']);
+
 // Check POST request
 if (!empty($_POST['save'])) {
     $v_username = $user;
diff --git a/web/edit/mail/index.php b/web/edit/mail/index.php
index 6c673118..6424e3ab 100644
--- a/web/edit/mail/index.php
+++ b/web/edit/mail/index.php
@@ -70,6 +70,9 @@ if ((!empty($_GET['domain'])) && (!empty($_GET['account'])))  {
     $v_date = $data[$v_account]['DATE'];
     $v_time = $data[$v_account]['TIME'];
 
+    $v_domain = escapeshellarg($_GET['domain']);
+    $v_account = escapeshellarg($_GET['account']);
+
     // Parse autoreply
     if ( $v_autoreply == 'yes' ) {
         exec (VESTA_CMD."v-list-mail-account-autoreply ".$user." '".$v_domain."' '".$v_account."' json", $output, $return_var);
@@ -228,7 +231,7 @@ if ((!empty($_POST['save'])) && (!empty($_GET['domain'])) && (!empty($_GET['acco
         $result = array_diff($valiases, $aliases);
         foreach ($result as $alias) {
             if ((empty($_SESSION['error_msg'])) && (!empty($alias))) {
-                exec (VESTA_CMD."v-delete-mail-account-alias ".$v_username." ".$v_domain." ".$v_account." '".$alias."'", $output, $return_var);
+                exec (VESTA_CMD."v-delete-mail-account-alias ".$v_username." ".$v_domain." ".$v_account." '".escapeshellarg($alias)."'", $output, $return_var);
                 check_return_code($return_var,$output);
                 unset($output);
             }
@@ -254,7 +257,7 @@ if ((!empty($_POST['save'])) && (!empty($_GET['domain'])) && (!empty($_GET['acco
         $result = array_diff($vfwd, $fwd);
         foreach ($result as $forward) {
             if ((empty($_SESSION['error_msg'])) && (!empty($forward))) {
-                exec (VESTA_CMD."v-delete-mail-account-forward ".$v_username." ".$v_domain." ".$v_account." '".$forward."'", $output, $return_var);
+                exec (VESTA_CMD."v-delete-mail-account-forward ".$v_username." ".$v_domain." ".$v_account." '".escapeshellarg($forward)."'", $output, $return_var);
                 check_return_code($return_var,$output);
                 unset($output);
             }
diff --git a/web/edit/web/index.php b/web/edit/web/index.php
index edf29e9d..a1d2d70b 100644
--- a/web/edit/web/index.php
+++ b/web/edit/web/index.php
@@ -36,7 +36,7 @@ $v_cgi = $data[$v_domain]['CGI'];
 $v_elog = $data[$v_domain]['ELOG'];
 $v_ssl = $data[$v_domain]['SSL'];
 if (!empty($v_ssl)) {
-    exec (VESTA_CMD."v-list-web-domain-ssl ".$user." '".$v_domain."' json", $output, $return_var);
+    exec (VESTA_CMD."v-list-web-domain-ssl ".$user." '".escapeshellarg($v_domain)."' json", $output, $return_var);
     $ssl_str = json_decode(implode('', $output), true);
     unset($output);
     $v_ssl_crt = $ssl_str[$v_domain]['CRT'];
@@ -129,6 +129,7 @@ if (!empty($_POST['save'])) {
         exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain." json", $output, $return_var);
         unset($output);
         if ($return_var == 0 ) {
+            $v_ip = escapeshellarg($_POST['v_ip']);
             exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." ".$v_domain." ".$v_ip." 'no'", $output, $return_var);
             check_return_code($return_var,$output);
             unset($output);
@@ -142,6 +143,7 @@ if (!empty($_POST['save'])) {
             exec (VESTA_CMD."v-list-dns-domain ".$v_username." '".$v_alias."' json", $output, $return_var);
             unset($output);
             if ($return_var == 0 ) {
+                $v_ip = escapeshellarg($_POST['v_ip']);
                 exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." '".$v_alias."' ".$v_ip, $output, $return_var);
                 check_return_code($return_var,$output);
                 unset($output);
@@ -367,7 +369,7 @@ if (!empty($_POST['save'])) {
     // Add Lets Encrypt support
     if ((!empty($_POST['v_ssl'])) && ( $v_letsencrypt == 'no' ) && (!empty($_POST['v_letsencrypt'])) && empty($_SESSION['error_msg'])) {
         $l_aliases = str_replace("\n", ',', $v_aliases);
-        exec (VESTA_CMD."v-add-letsencrypt-domain ".$user." ".$v_domain." '".$l_aliases."' 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-add-letsencrypt-domain ".$user." ".$v_domain." '".escapeshellarg($l_aliases)."' 'no'", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         $v_letsencrypt = 'yes';

From 7226a8991f7908825c869f78231107370cb05b21 Mon Sep 17 00:00:00 2001
From: Sergio <nadalcastalla@gmail.com>
Date: Sun, 21 Apr 2019 02:18:24 +0200
Subject: [PATCH 0444/2300] Fix some XSS.

---
 web/list/directory/index.php           | 4 ++--
 web/templates/admin/list_dns_rec.html  | 4 ++--
 web/templates/admin/list_mail_acc.html | 6 +++---
 web/templates/user/list_mail_acc.html  | 4 ++--
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/web/list/directory/index.php b/web/list/directory/index.php
index 737e19db..12919b14 100644
--- a/web/list/directory/index.php
+++ b/web/list/directory/index.php
@@ -24,8 +24,8 @@ if (empty($panel)) {
     $panel = json_decode(implode('', $output), true);
 }
 
-$path_a = !empty($_REQUEST['dir_a']) ? $_REQUEST['dir_a'] : '';
-$path_b = !empty($_REQUEST['dir_b']) ? $_REQUEST['dir_b'] : '';
+$path_a = !empty($_REQUEST['dir_a']) ? htmlentities($_REQUEST['dir_a']) : '';
+$path_b = !empty($_REQUEST['dir_b']) ? htmlentities($_REQUEST['dir_b']) : '';
 $GLOBAL_JS  = '<script type="text/javascript">GLOBAL.START_DIR_A = "' . $path_a . '";</script>';
 $GLOBAL_JS .= '<script type="text/javascript">GLOBAL.START_DIR_B = "' . $path_b . '";</script>';
 $GLOBAL_JS .= '<script type="text/javascript">GLOBAL.ROOT_DIR = "' . $panel[$user]['HOME'] . '";</script>';
diff --git a/web/templates/admin/list_dns_rec.html b/web/templates/admin/list_dns_rec.html
index a74b8574..24f28103 100644
--- a/web/templates/admin/list_dns_rec.html
+++ b/web/templates/admin/list_dns_rec.html
@@ -74,11 +74,11 @@ v_unit_id="<?=$key?>" v_section="dns_rec">
           <!-- l-unit-toolbar__col -->
           <div class="l-unit-toolbar__col l-unit-toolbar__col--right noselect">
             <div class="actions-panel clearfix">
-              <div class="actions-panel__col actions-panel__edit shortcut-enter" key-action="href"><a href="/edit/dns/?domain=<?=$_GET['domain']?>&record_id=<?=$data[$key]['ID']?>"><?=__('edit')?> <i></i></a><span class="shortcut enter">&nbsp;&#8629;</span></div>
+              <div class="actions-panel__col actions-panel__edit shortcut-enter" key-action="href"><a href="/edit/dns/?domain=<?=htmlspecialchars($_GET['domain'])?>&record_id=<?=$data[$key]['ID']?>"><?=__('edit')?> <i></i></a><span class="shortcut enter">&nbsp;&#8629;</span></div>
               <div class="actions-panel__col actions-panel__delete shortcut-delete" key-action="js">
                 <a id="delete_link_<?=$i?>" class="data-controls do_delete">
                   <?=__('delete')?> <i class="do_delete"></i>
-                  <input type="hidden" name="delete_url" value="/delete/dns/?domain=<?=$_GET['domain']?>&record_id=<?=$data[$key]['ID']?>&token=<?=$_SESSION['token']?>" />
+                  <input type="hidden" name="delete_url" value="/delete/dns/?domain=<?=htmlspecialchars($_GET['domain'])?>&record_id=<?=$data[$key]['ID']?>&token=<?=$_SESSION['token']?>" />
                   <div id="delete_dialog_<?=$i?>" class="confirmation-text-delete hidden" title="<?=__('Confirmation')?>">
                     <p class="confirmation"><?=__('DELETE_RECORD_CONFIRMATION',$data[$key]['RECORD'])?></p>
                   </div>
diff --git a/web/templates/admin/list_mail_acc.html b/web/templates/admin/list_mail_acc.html
index 5433d732..13495ff6 100644
--- a/web/templates/admin/list_mail_acc.html
+++ b/web/templates/admin/list_mail_acc.html
@@ -90,11 +90,11 @@ sort-star="<? if($_SESSION['favourites']['MAIL_ACC'][$key."@".$_GET['domain']] =
           <!-- l-unit-toolbar__col -->
           <div class="l-unit-toolbar__col l-unit-toolbar__col--right noselect">
             <div class="actions-panel clearfix">
-              <div class="actions-panel__col actions-panel__edit shortcut-enter" key-action="href"><a href="/edit/mail/?domain=<?=$_GET['domain']?>&account=<?=$key?>"><?=__('edit')?> <i></i></a><span class="shortcut enter">&nbsp;&#8629;</span></div>
+              <div class="actions-panel__col actions-panel__edit shortcut-enter" key-action="href"><a href="/edit/mail/?domain=<?=htmlspecialchars($_GET['domain'])?>&account=<?=$key?>"><?=__('edit')?> <i></i></a><span class="shortcut enter">&nbsp;&#8629;</span></div>
               <div class="actions-panel__col actions-panel__suspend shortcut-s" key-action="js">
                 <a id="<?=$spnd_action ?>_link_<?=$i?>" class="data-controls do_<?=$spnd_action?>">
                   <?=__($spnd_action)?> <i class="do_<?=$spnd_action?>"></i>
-                  <input type="hidden" name="<?=$spnd_action?>_url" value="/<?=$spnd_action?>/mail/?domain=<?=$_GET['domain']?>&account=<?php echo $key ?>&token=<?=$_SESSION['token']?>" />
+                  <input type="hidden" name="<?=$spnd_action?>_url" value="/<?=$spnd_action?>/mail/?domain=<?=htmlspecialchars($_GET['domain'])?>&account=<?php echo $key ?>&token=<?=$_SESSION['token']?>" />
                   <div id="<?=$spnd_action?>_dialog_<?=$i?>" class="confirmation-text-suspention hidden" title="<?=__('Confirmation')?>">
                     <p class="confirmation"><?=__($spnd_confirmation,$key)?></p>
                   </div>
@@ -104,7 +104,7 @@ sort-star="<? if($_SESSION['favourites']['MAIL_ACC'][$key."@".$_GET['domain']] =
               <div class="actions-panel__col actions-panel__delete shortcut-delete" key-action="js">
                 <a id="delete_link_<?=$i?>" class="data-controls do_delete">
                   <?=__('delete')?> <i class="do_delete"></i>
-                  <input type="hidden" name="delete_url" value="/delete/mail/?domain=<?=$_GET['domain']?>&account=<?=$key?>&token=<?=$_SESSION['token']?>" />
+                  <input type="hidden" name="delete_url" value="/delete/mail/?domain=<?=htmlspecialchars($_GET['domain'])?>&account=<?=$key?>&token=<?=$_SESSION['token']?>" />
                   <div id="delete_dialog_<?=$i?>" class="confirmation-text-delete hidden" title="<?=__('Confirmation')?>">
                     <p class="confirmation"><?=__('DELETE_MAIL_ACCOUNT_CONFIRMATION',$key)?></p>
                   </div>
diff --git a/web/templates/user/list_mail_acc.html b/web/templates/user/list_mail_acc.html
index c7334fa1..8c5ef567 100644
--- a/web/templates/user/list_mail_acc.html
+++ b/web/templates/user/list_mail_acc.html
@@ -88,11 +88,11 @@ sort-star="<? if($_SESSION['favourites']['MAIL_ACC'][$key."@".$_GET['domain']] =
           <!-- l-unit-toolbar__col -->
           <div class="l-unit-toolbar__col l-unit-toolbar__col--right noselect">
             <div class="actions-panel clearfix">
-              <div class="actions-panel__col actions-panel__edit shortcut-enter" key-action="href"><a href="/edit/mail/?domain=<?=$_GET['domain']?>&account=<?=$key?>"><?=__('edit')?> <i></i></a><span class="shortcut enter">&nbsp;&#8629;</span></div>
+              <div class="actions-panel__col actions-panel__edit shortcut-enter" key-action="href"><a href="/edit/mail/?domain=<?=htmlspecialchars($_GET['domain'])?>&account=<?=$key?>"><?=__('edit')?> <i></i></a><span class="shortcut enter">&nbsp;&#8629;</span></div>
               <div class="actions-panel__col actions-panel__delete shortcut-delete" key-action="js">
                 <a id="delete_link_<?=$i?>" class="data-controls do_delete">
                   <?=__('delete')?> <i class="do_delete"></i>
-                  <input type="hidden" name="delete_url" value="/delete/mail/?domain=<?=$_GET['domain']?>&account=<?=$key?>&token=<?=$_SESSION['token']?>" />
+                  <input type="hidden" name="delete_url" value="/delete/mail/?domain=<?=htmlspecialchars($_GET['domain'])?>&account=<?=$key?>&token=<?=$_SESSION['token']?>" />
                   <div id="delete_dialog_<?=$i?>" class="confirmation-text-delete hidden" title="<?=__('Confirmation')?>">
                     <p class="confirmation"><?=__('DELETE_MAIL_ACCOUNT_CONFIRMATION',$key)?></p>
                   </div>

From 0713570b87bab57d0f163fce553a54894aa45e13 Mon Sep 17 00:00:00 2001
From: moucho <1095644+moucho@users.noreply.github.com>
Date: Sun, 21 Apr 2019 18:28:34 +0200
Subject: [PATCH 0445/2300] Fix Let's Encrypt for IDN domains

---
 bin/v-add-letsencrypt-domain | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index edcf6ae2..001f71e9 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -22,6 +22,14 @@ source $VESTA/func/main.sh
 source $VESTA/func/domain.sh
 source $VESTA/conf/vesta.conf
 
+# Additional argument formatting
+format_identifier_idn() {
+    identifier_idn=$identifier
+    if [[ "$identifier_idn" = *[![:ascii:]]* ]]; then
+        identifier_idn=$(idn -t --quiet -a $identifier_idn)
+    fi
+}
+
 # encode base64
 encode_base64() {
     cat |base64 |tr '+/' '-_' |tr -d '\r\n='
@@ -109,7 +117,8 @@ fi
 url="$API/acme/new-order"
 payload='{"identifiers":['
 for identifier in $(echo $domain,$aliases |tr ',' '\n' |sort -u); do
-    payload=$payload'{"type":"dns","value":"'$identifier'"},'
+    format_identifier_idn
+    payload=$payload'{"type":"dns","value":"'$identifier_idn'"},'
 done
 payload=$(echo "$payload"|sed "s/,$//")
 payload=$payload']}'
@@ -209,7 +218,7 @@ done
 ssl_dir=$($BIN/v-generate-ssl-cert "$domain" "info@$domain" "US" "California"\
     "San Francisco" "Vesta" "IT" "$aliases" |tail -n1 |awk '{print $2}')
 
-# Sedning CSR to finalize order / STEP 6
+# Sending CSR to finalize order / STEP 6
 csr=$(openssl req -in $ssl_dir/$domain.csr -outform DER |encode_base64)
 payload='{"csr":"'$csr'"}'
 answer=$(query_le_v2 "$finalize" "$payload" "$nonce")

From 5df4dc819f1fbf7051d7f97701beb08c282a15e4 Mon Sep 17 00:00:00 2001
From: moucho <1095644+moucho@users.noreply.github.com>
Date: Mon, 22 Apr 2019 14:47:32 +0200
Subject: [PATCH 0446/2300] Updated Spanish translation

---
 web/inc/i18n/es.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/i18n/es.php b/web/inc/i18n/es.php
index b6718528..6e5ce352 100644
--- a/web/inc/i18n/es.php
+++ b/web/inc/i18n/es.php
@@ -567,7 +567,7 @@ $LANG['es'] = array(
     'MAIL Server' => 'Servidor de Correo',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
-    'Use Web Domain SSL Certificate' => 'Usar el Cerfificado SSL de la Web',
+    'Use Web Domain SSL Certificate' => 'Utilizar el certificado SSL de un dominio',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'Soportar MYSQL',
     'phpMyAdmin URL' => 'phpMyAdmin URL',

From f492c1ee2a344c01aa55642b80efc1aec3d37a95 Mon Sep 17 00:00:00 2001
From: Skull Writter <7103685+skullwritter@users.noreply.github.com>
Date: Tue, 23 Apr 2019 14:11:31 +0000
Subject: [PATCH 0447/2300] correcting wildcat

check if alias is the letsencrypt wildcard domain, if not, make the normal checks
---
 bin/v-add-letsencrypt-domain | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index edcf6ae2..86faaa3a 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -62,13 +62,15 @@ is_object_unsuspended 'user' 'USER' "$user"
 is_object_valid 'web' 'DOMAIN' "$domain"
 is_object_unsuspended 'web' 'DOMAIN' "$domain"
 get_domain_values 'web'
-for alias in $(echo "$aliases" |tr ',' '\n' |sort -u); do
-    check_alias="$(echo $ALIAS |tr ',' '\n' |grep ^$alias$)"
-    if [ -z "$check_alias" ]; then
-        check_result $E_NOTEXIST "domain alias $alias doesn't exist"
-    fi
-done
-
+# check if alias is the letsencrypt wildcard domain, if not, make the normal checks
+if [[ "$aliases" != "*.$domain" ]]; then
+    for alias in $(echo "$aliases" |tr ',' '\n' |sort -u); do
+        check_alias="$(echo $ALIAS |tr ',' '\n' |grep ^$alias$)"
+        if [ -z "$check_alias" ]; then
+            check_result $E_NOTEXIST "domain alias $alias doesn't exist"
+        fi
+    done
+fi;
 
 #----------------------------------------------------------#
 #                       Action                             #

From 233a3a37774deaa5c0fb2152454f03dad252f3e9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 27 Apr 2019 16:03:10 +0200
Subject: [PATCH 0448/2300] Adding $ALLOW_BACKUP_ANYTIME

---
 func/main.sh | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/func/main.sh b/func/main.sh
index 3d731e11..6a472e1f 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -966,9 +966,8 @@ wait_for_backup_if_it_is_not_time_for_backup() {
     done
 
     # block backup if current hour is after 6 AM
-    WAIT_LOOP_ENTERED=0
-    # if pgrep -x "v-backup-users" > /dev/null
-    # then
+    if [ -z "ALLOW_BACKUP_ANYTIME" ]; then
+        WAIT_LOOP_ENTERED=0
         hour=$(date +"%H");
         while [ "$hour" -gt "6" ] || [ "$hour" -lt "1" ]; do
             # if [ "$WAIT_LOOP_ENTERED" -eq 0 ]; then
@@ -985,5 +984,5 @@ wait_for_backup_if_it_is_not_time_for_backup() {
             sleep 300
             hour=$(date +"%H");
         done
-    # fi
+    fi
 }

From caf3e97d5c913656e41277fc82f181e9d392ed00 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 27 Apr 2019 16:04:49 +0200
Subject: [PATCH 0449/2300] Correcting $ALLOW_BACKUP_ANYTIME

---
 func/main.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index 6a472e1f..3e7b634b 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -966,7 +966,7 @@ wait_for_backup_if_it_is_not_time_for_backup() {
     done
 
     # block backup if current hour is after 6 AM
-    if [ -z "ALLOW_BACKUP_ANYTIME" ]; then
+    if [ -z "$ALLOW_BACKUP_ANYTIME" ]; then
         WAIT_LOOP_ENTERED=0
         hour=$(date +"%H");
         while [ "$hour" -gt "6" ] || [ "$hour" -lt "1" ]; do

From a62095aa13bce52a1ebe56ed39c3e5df7767a326 Mon Sep 17 00:00:00 2001
From: Maksim Usmanov | Maks <skamasle@gmail.com>
Date: Sun, 28 Apr 2019 15:57:49 +0200
Subject: [PATCH 0450/2300] Fix Nginx exclusion

This fix 706 in bugs.vesta and #1820 ( same issue )
---
 install/vst-install-rhel.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index 8badeca8..4ea5154c 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -19,10 +19,10 @@ codename="${os}_$release"
 vestacp="$VESTA/install/$VERSION/$release"
 
 # Defining software pack for all distros
-software="awstats bc bind bind-libs bind-utils clamav-server clamav-update
+software="nginx awstats bc bind bind-libs bind-utils clamav-server clamav-update
     curl dovecot e2fsprogs exim expect fail2ban flex freetype ftp GeoIP httpd
     ImageMagick iptables-services jwhois lsof mailx mariadb mariadb-server mc
-    mod_fcgid mod_ruid2 mod_ssl net-tools nginx ntp openssh-clients pcre php
+    mod_fcgid mod_ruid2 mod_ssl net-tools ntp openssh-clients pcre php
     php-bcmath php-cli php-common php-fpm php-gd php-imap php-mbstring
     php-mcrypt phpMyAdmin php-mysql php-pdo phpPgAdmin php-pgsql php-soap
     php-tidy php-xml php-xmlrpc postgresql postgresql-contrib

From 3acd2281699fcaede439da0687d64586525a15a1 Mon Sep 17 00:00:00 2001
From: Maksim Usmanov | Maks <skamasle@gmail.com>
Date: Sun, 28 Apr 2019 16:03:54 +0200
Subject: [PATCH 0451/2300] Fix for nginx exclude

There are some ways to fix this

First put nginx at the beginig or modify this line

software=$(echo "$software" | sed -e "s/^nginx//")
Replacing it by this one:
software=$(echo "$software" | sed -e "s/nginx//")
Or by this:
software=$(echo "$software" | sed -e "s/ nginx//")
---
 install/vst-install-ubuntu.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index f66407c3..bf00f768 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -19,12 +19,12 @@ codename="$(lsb_release -s -c)"
 vestacp="$VESTA/install/$VERSION/$release"
 
 # Defining software pack for all distros
-software="apache2 apache2.2-common apache2-suexec-custom apache2-utils
+software="nginx apache2 apache2.2-common apache2-suexec-custom apache2-utils
     apparmor-utils awstats bc bind9 bsdmainutils bsdutils clamav-daemon
     cron curl dnsutils dovecot-imapd dovecot-pop3d e2fslibs e2fsprogs exim4
     exim4-daemon-heavy expect fail2ban flex ftp git idn imagemagick
     libapache2-mod-fcgid libapache2-mod-php libapache2-mod-rpaf
-    libapache2-mod-ruid2 lsof mc mysql-client mysql-common mysql-server nginx
+    libapache2-mod-ruid2 lsof mc mysql-client mysql-common mysql-server
     ntpdate php-cgi php-common php-curl php-fpm phpmyadmin php-mysql
     phppgadmin php-pgsql postgresql postgresql-contrib proftpd-basic quota
     roundcube-core roundcube-mysql roundcube-plugins rrdtool rssh spamassassin

From f50d8b7d844e4d19c9af5616d8ed1a9c1a9b6baf Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Wed, 8 May 2019 22:47:30 +0300
Subject: [PATCH 0452/2300] added port 654321 to run openssl key-pair test

---
 func/domain.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/domain.sh b/func/domain.sh
index 84a7c177..5c3bd946 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -339,7 +339,7 @@ is_web_domain_cert_valid() {
         check_result $E_FORBIDEN "SSL Key is protected (remove pass_phrase)"
     fi
 
-    openssl s_server -quiet -cert $ssl_dir/$domain.crt \
+    openssl s_server -port 654321 -quiet -cert $ssl_dir/$domain.crt \
         -key $ssl_dir/$domain.key >> /dev/null 2>&1 &
     pid=$!
     sleep 0.5

From 6a6cfe969ab21c0e479e925e8b08dfb542fcf67a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 10 May 2019 23:22:31 +0200
Subject: [PATCH 0453/2300] Introducing ONLY_ONE_FTP_BACKUP variable

---
 bin/v-backup-user | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 0d37d098..a1a2665a 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -636,6 +636,11 @@ ftp_backup() {
     else
         backup_list=$(ftpc "cd $BPATH" "ls" |awk '{print $9}' |grep "^$user\.")
     fi
+    if [ ! -z "$ONLY_ONE_FTP_BACKUP" ]; then
+        TEMP_BACKUPS=$BACKUPS
+        BACKUPS=1
+        echo "=== Set BACKUPS=1"
+    fi
     backups_count=$(echo "$backup_list" |wc -l)
     if [ "$backups_count" -ge "$BACKUPS" ]; then
         backups_rm_number=$((backups_count - BACKUPS + 1))
@@ -650,6 +655,10 @@ ftp_backup() {
             fi
         done
     fi
+    if [ ! -z "$ONLY_ONE_FTP_BACKUP" ]; then
+        BACKUPS=$TEMP_BACKUPS
+        echo "=== Bringing back old value BACKUPS=$BACKUPS"
+    fi
 
     # Uploading backup archive
     if [ "$localbackup" = 'yes' ]; then
@@ -792,6 +801,11 @@ sftp_backup() {
         backup_list=$(sftpc "cd $BPATH" "ls -l" |awk '{print $9}'|grep "^$user\.")
     fi
     backups_count=$(echo "$backup_list" |wc -l)
+    if [ ! -z "$ONLY_ONE_FTP_BACKUP" ]; then
+        TEMP_BACKUPS=$BACKUPS
+        BACKUPS=1
+        echo "=== Set BACKUPS=1"
+    fi
     if [ "$backups_count" -ge "$BACKUPS" ]; then
         backups_rm_number=$((backups_count - BACKUPS + 1))
         for backup in $(echo "$backup_list" |head -n $backups_rm_number); do
@@ -805,6 +819,10 @@ sftp_backup() {
             fi
         done
     fi
+    if [ ! -z "$ONLY_ONE_FTP_BACKUP" ]; then
+        BACKUPS=$TEMP_BACKUPS
+        echo "=== Bringing back old value BACKUPS=$BACKUPS"
+    fi
 
     # Uploading backup archive
     echo "$(date "+%F %T") Uploading $user.$backup_new_date.tar"|tee -a $BACKUP/$user.log

From d563dcd12b6ae90739e45fc512cbac51771e225c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pawe=C5=82=20Suder?= <pawel@suder.info>
Date: Tue, 14 May 2019 08:59:43 +0200
Subject: [PATCH 0454/2300] Fix update of SSL for LetsEncrypt certs

Due to missing /g in sed for parsing aliases from certificate SAN
field there was an issue with doubled alias which is also common
name of issued certficiate.
---
 bin/v-update-letsencrypt-ssl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 4dd1fcc0..61cc2544 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -41,7 +41,7 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
             fi
             ((lecounter++))
             aliases=$(echo "$crt_data" |grep DNS:)
-            aliases=$(echo "$aliases" |sed -e "s/DNS://g" -e "s/,//")
+            aliases=$(echo "$aliases" |sed -e "s/DNS://g" -e "s/,//g")
             aliases=$(echo "$aliases" |tr ' ' '\n' |sed "/^$/d")
             aliases=$(echo "$aliases" |grep -v "^$domain$")
             aliases=$(echo "$aliases" |sed -e ':a;N;$!ba;s/\n/,/g')

From d856c1e080e9c17c3dd84fc9248ac1b3bd816edd Mon Sep 17 00:00:00 2001
From: noogen <tom@noogen.net>
Date: Tue, 14 May 2019 03:38:36 -0500
Subject: [PATCH 0455/2300] fix typo of extra L issue #1509

---
 bin/v-update-sys-rrd-pgsql | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-sys-rrd-pgsql b/bin/v-update-sys-rrd-pgsql
index 6e15c9e8..de2fec8f 100755
--- a/bin/v-update-sys-rrd-pgsql
+++ b/bin/v-update-sys-rrd-pgsql
@@ -85,7 +85,7 @@ for host in $hosts; do
         # Parsing data
         q='SELECT SUM(xact_commit + xact_rollback), SUM(numbackends)
                 FROM pg_stat_database;'
-        status=$($sql plsql -d postgres -c "$q" 2>/dev/null); code="$?"
+        status=$($sql psql -d postgres -c "$q" 2>/dev/null); code="$?"
         if [ '0' -ne "$code" ]; then
             active=0
             slow=0

From d24f68a370747d241aa8612cee38f37a13fe3499 Mon Sep 17 00:00:00 2001
From: Christian Oder <myself5@carbonrom.org>
Date: Wed, 15 May 2019 17:07:53 +0200
Subject: [PATCH 0456/2300] v-backup-user: Properly fix userdata backup
 exclusions

So far, no exclusions have been accounted for as fargs has not been passed.
Rework the logic for fargs parsing based on domain exclusions and pass fargs to the tar command.

Also add --anchored based on 37c69b8f4cd087d8d406ab3de766ad11564b978b
---
 bin/v-backup-user | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 2797c132..f9fcf6f5 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -460,11 +460,15 @@ if [ "$USER" != '*' ]; then
     fi
     fargs=()
     for xpath in $(echo "$USER" |tr ',' '\n'); do
-        fargs+=(-not)
-        fargs+=(-path)
-        fargs+=("./$xpath*")
-        echo "$(date "+%F %T") excluding directory $xpath" |\
+        if [ -d "$xpath" ]; then
+            fargs+=(--exclude=$xpath/*)
+            echo "$(date "+%F %T") excluding directory $xpath" |\
             tee -a $BACKUP/$user.log
+        else
+            echo "$(date "+%F %T") excluding file $xpath" |\
+            tee -a $BACKUP/$user.log
+            fargs+=(--exclude=$xpath)
+        fi
     done
 
     IFS=$'\n'
@@ -479,7 +483,7 @@ if [ "$USER" != '*' ]; then
             echo -e "$(date "+%F %T") adding $udir" |tee -a $BACKUP/$user.log
 
             # Backup files and dirs
-            tar -cpf- $udir |gzip -$BACKUP_GZIP - > $tmpdir/user_dir/$udir.tar.gz
+            tar --anchored -cpf- ${fargs[@]} $udir |gzip -$BACKUP_GZIP - > $tmpdir/user_dir/$udir.tar.gz
         fi
     done
     set +f

From a78c7ffc9275ec16afb426d090aee935151669e8 Mon Sep 17 00:00:00 2001
From: Chris Mills <chris@millsy.me.uk>
Date: Fri, 17 May 2019 09:49:58 +0100
Subject: [PATCH 0457/2300] Renewal of cert not removing domain from alias list

---
 bin/v-update-letsencrypt-ssl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 61cc2544..4e8aec80 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -43,7 +43,7 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
             aliases=$(echo "$crt_data" |grep DNS:)
             aliases=$(echo "$aliases" |sed -e "s/DNS://g" -e "s/,//g")
             aliases=$(echo "$aliases" |tr ' ' '\n' |sed "/^$/d")
-            aliases=$(echo "$aliases" |grep -v "^$domain$")
+            aliases=$(echo "$aliases" |grep -v "^$domain,$")
             aliases=$(echo "$aliases" |sed -e ':a;N;$!ba;s/\n/,/g')
             msg=$($BIN/v-add-letsencrypt-domain $user $domain $aliases)
             if [ $? -ne 0 ]; then

From 10fca3053df40b2e750f8aedd158e8a9c82fea62 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 19 May 2019 02:33:55 +0200
Subject: [PATCH 0458/2300] Deleting FPM pool conf when deleting domain

---
 func/domain.sh | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/func/domain.sh b/func/domain.sh
index cc66aecb..7f5f3814 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -271,6 +271,32 @@ replace_web_config() {
 
 # Delete web configuration
 del_web_config() {
+
+    fpmconf="/etc/php5/fpm/pool.d/$domain.conf"
+    if [ -f "$fpmconf" ]; then
+        rm $fpmconf
+    fi
+    fpmconf="/etc/php/5.6/fpm/pool.d/$domain.conf"
+    if [ -f "$fpmconf" ]; then
+        rm $fpmconf
+    fi
+    fpmconf="/etc/php/7.0/fpm/pool.d/$domain.conf"
+    if [ -f "$fpmconf" ]; then
+        rm $fpmconf
+    fi
+    fpmconf="/etc/php/7.1/fpm/pool.d/$domain.conf"
+    if [ -f "$fpmconf" ]; then
+        rm $fpmconf
+    fi
+    fpmconf="/etc/php/7.2/fpm/pool.d/$domain.conf"
+    if [ -f "$fpmconf" ]; then
+        rm $fpmconf
+    fi
+    fpmconf="/etc/php/7.3/fpm/pool.d/$domain.conf"
+    if [ -f "$fpmconf" ]; then
+        rm $fpmconf
+    fi
+
     conf="$HOMEDIR/$user/conf/web/$domain.$1.conf"
     if [[ "$2" =~ stpl$ ]]; then
         conf="$HOMEDIR/$user/conf/web/$domain.$1.ssl.conf"

From a716a3f2cb9490ffe3eaedbbf2ba132975a46b49 Mon Sep 17 00:00:00 2001
From: Roman <romkoll@gmail.com>
Date: Wed, 22 May 2019 20:10:15 +0300
Subject: [PATCH 0459/2300] Fix v-unsuspend-mail-account

Fix 'Malformed value "unlimitedM"' after unsuspend mail account
---
 bin/v-unsuspend-mail-account | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-unsuspend-mail-account b/bin/v-unsuspend-mail-account
index 314c13bc..57e54af5 100755
--- a/bin/v-unsuspend-mail-account
+++ b/bin/v-unsuspend-mail-account
@@ -48,6 +48,9 @@ is_object_suspended "mail/$domain" 'ACCOUNT' "$account"
 if [[ "$MAIL_SYSTEM" =~ exim ]]; then
     md5=$(get_object_value "mail/$domain" 'ACCOUNT' "$account" '$MD5')
     quota=$(get_object_value "mail/$domain" 'ACCOUNT' "$account" '$QUOTA')
+    if [ "$quota" = 'unlimited' ]; then
+        quota=0
+    fi
     sed -i "/^$account:/d" $HOMEDIR/$user/conf/mail/$domain/passwd
     str="$account:$md5:$user:mail::$HOMEDIR/$user:$quota"
     echo $str >> $HOMEDIR/$user/conf/mail/$domain/passwd

From a6d498e7e2088cc5d3b1d88cbcbea6a739d02ef1 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Thu, 23 May 2019 00:12:42 +0300
Subject: [PATCH 0460/2300] added net-tools package for ifconfig command

---
 install/vst-install-ubuntu.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index bf00f768..653f7fc1 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -29,7 +29,7 @@ software="nginx apache2 apache2.2-common apache2-suexec-custom apache2-utils
     phppgadmin php-pgsql postgresql postgresql-contrib proftpd-basic quota
     roundcube-core roundcube-mysql roundcube-plugins rrdtool rssh spamassassin
     sudo vesta vesta-ioncube vesta-nginx vesta-php vesta-softaculous
-    vim-common vsftpd webalizer whois zip"
+    vim-common vsftpd webalizer whois zip net-tools"
 
 # Fix for old releases
 if [[ ${release:0:2} -lt 16 ]]; then

From 7a2025037f463a56d7c535573098e99b5a419167 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 24 May 2019 11:28:45 +0200
Subject: [PATCH 0461/2300] Log FPM conf deleting

---
 func/domain.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/func/domain.sh b/func/domain.sh
index 7f5f3814..8758f3ac 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -275,26 +275,32 @@ del_web_config() {
     fpmconf="/etc/php5/fpm/pool.d/$domain.conf"
     if [ -f "$fpmconf" ]; then
         rm $fpmconf
+        echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
     fi
     fpmconf="/etc/php/5.6/fpm/pool.d/$domain.conf"
     if [ -f "$fpmconf" ]; then
         rm $fpmconf
+        echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
     fi
     fpmconf="/etc/php/7.0/fpm/pool.d/$domain.conf"
     if [ -f "$fpmconf" ]; then
         rm $fpmconf
+        echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
     fi
     fpmconf="/etc/php/7.1/fpm/pool.d/$domain.conf"
     if [ -f "$fpmconf" ]; then
         rm $fpmconf
+        echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
     fi
     fpmconf="/etc/php/7.2/fpm/pool.d/$domain.conf"
     if [ -f "$fpmconf" ]; then
         rm $fpmconf
+        echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
     fi
     fpmconf="/etc/php/7.3/fpm/pool.d/$domain.conf"
     if [ -f "$fpmconf" ]; then
         rm $fpmconf
+        echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
     fi
 
     conf="$HOMEDIR/$user/conf/web/$domain.$1.conf"

From bb1873715230db5e6391bb699915c882e09b724b Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 24 May 2019 11:51:16 +0200
Subject: [PATCH 0462/2300] Wrong place for deleting fpm conf

---
 func/domain.sh | 32 --------------------------------
 1 file changed, 32 deletions(-)

diff --git a/func/domain.sh b/func/domain.sh
index 8758f3ac..cc66aecb 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -271,38 +271,6 @@ replace_web_config() {
 
 # Delete web configuration
 del_web_config() {
-
-    fpmconf="/etc/php5/fpm/pool.d/$domain.conf"
-    if [ -f "$fpmconf" ]; then
-        rm $fpmconf
-        echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
-    fi
-    fpmconf="/etc/php/5.6/fpm/pool.d/$domain.conf"
-    if [ -f "$fpmconf" ]; then
-        rm $fpmconf
-        echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
-    fi
-    fpmconf="/etc/php/7.0/fpm/pool.d/$domain.conf"
-    if [ -f "$fpmconf" ]; then
-        rm $fpmconf
-        echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
-    fi
-    fpmconf="/etc/php/7.1/fpm/pool.d/$domain.conf"
-    if [ -f "$fpmconf" ]; then
-        rm $fpmconf
-        echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
-    fi
-    fpmconf="/etc/php/7.2/fpm/pool.d/$domain.conf"
-    if [ -f "$fpmconf" ]; then
-        rm $fpmconf
-        echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
-    fi
-    fpmconf="/etc/php/7.3/fpm/pool.d/$domain.conf"
-    if [ -f "$fpmconf" ]; then
-        rm $fpmconf
-        echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
-    fi
-
     conf="$HOMEDIR/$user/conf/web/$domain.$1.conf"
     if [[ "$2" =~ stpl$ ]]; then
         conf="$HOMEDIR/$user/conf/web/$domain.$1.ssl.conf"

From 15d44e5a94f4b1c7b491d9cc56f46f1b060a2fca Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 24 May 2019 11:56:11 +0200
Subject: [PATCH 0463/2300] Right place to delete FPM conf

---
 bin/v-delete-web-domain | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/bin/v-delete-web-domain b/bin/v-delete-web-domain
index 529f5d09..b4885ef3 100755
--- a/bin/v-delete-web-domain
+++ b/bin/v-delete-web-domain
@@ -56,6 +56,38 @@ fi
 get_domain_values 'web'
 local_ip=$(get_real_ip $IP)
 
+# Deleting FPM conf
+fpmconf="/etc/php5/fpm/pool.d/$domain.conf"
+if [ -f "$fpmconf" ]; then
+    rm $fpmconf
+    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
+fi
+fpmconf="/etc/php/5.6/fpm/pool.d/$domain.conf"
+if [ -f "$fpmconf" ]; then
+    rm $fpmconf
+    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
+fi
+fpmconf="/etc/php/7.0/fpm/pool.d/$domain.conf"
+if [ -f "$fpmconf" ]; then
+    rm $fpmconf
+    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
+fi
+fpmconf="/etc/php/7.1/fpm/pool.d/$domain.conf"
+if [ -f "$fpmconf" ]; then
+    rm $fpmconf
+    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
+fi
+fpmconf="/etc/php/7.2/fpm/pool.d/$domain.conf"
+if [ -f "$fpmconf" ]; then
+    rm $fpmconf
+    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
+fi
+fpmconf="/etc/php/7.3/fpm/pool.d/$domain.conf"
+if [ -f "$fpmconf" ]; then
+    rm $fpmconf
+    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
+fi
+
 # Deleting domain from web.conf
 sed -i "/DOMAIN='$domain'/ d" $USER_DATA/web.conf
 

From 9bceb0162259331ea320ced14b9cdff0c3dada81 Mon Sep 17 00:00:00 2001
From: Chris Mills <chris@millsy.me.uk>
Date: Thu, 6 Jun 2019 06:07:44 +0100
Subject: [PATCH 0464/2300] Switched to egrep to support optional comma in
 renewal

---
 bin/v-update-letsencrypt-ssl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 4e8aec80..459b9879 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -43,7 +43,7 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
             aliases=$(echo "$crt_data" |grep DNS:)
             aliases=$(echo "$aliases" |sed -e "s/DNS://g" -e "s/,//g")
             aliases=$(echo "$aliases" |tr ' ' '\n' |sed "/^$/d")
-            aliases=$(echo "$aliases" |grep -v "^$domain,$")
+            aliases=$(echo "$aliases" |egrep -v "^$domain,?$")
             aliases=$(echo "$aliases" |sed -e ':a;N;$!ba;s/\n/,/g')
             msg=$($BIN/v-add-letsencrypt-domain $user $domain $aliases)
             if [ $? -ne 0 ]; then

From a6028ee4e91451946f041cedc8368a88a0747aa2 Mon Sep 17 00:00:00 2001
From: myrevery <16082142+myrevery@users.noreply.github.com>
Date: Mon, 10 Jun 2019 16:10:32 +0800
Subject: [PATCH 0465/2300] Update cn.php

Refine some details.
---
 web/inc/i18n/cn.php | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/web/inc/i18n/cn.php b/web/inc/i18n/cn.php
index 6b6b9d28..903afa60 100644
--- a/web/inc/i18n/cn.php
+++ b/web/inc/i18n/cn.php
@@ -261,6 +261,8 @@ $LANG['cn'] = array(
     'Bandwidth Usage eth1' => '网络使用情况 (eth1)',
     'Bandwidth Usage venet0' => '网络使用情况 (venet0)',
     'Bandwidth Usage venet1' => '网络使用情况 (venet1)',
+    'Bandwidth Usage docker0' => '网络使用情况 (docker0)',
+    'Bandwidth Usage docker1' => '网络使用情况 (docker1)',
     'Exim Usage' => 'Exim 使用情况',
     'FTP Usage' => 'FTP 使用情况',
     'SSH Usage' => 'SSH 使用情况',
@@ -305,7 +307,7 @@ $LANG['cn'] = array(
     'Aliases' => '别名',
     'SSL Certificate' => 'SSL证书',
     'SSL Key' => 'SSL密钥',
-    'SSL Certificate Authority / Intermediate' => 'CA证书或中级证书',
+    'SSL Certificate Authority / Intermediate' => 'SSL CA证书 / 中级证书',
     'SSL CSR' => 'SSL CSR',
     'optional' => '可选',
     'internal' => '内部',
@@ -386,7 +388,7 @@ $LANG['cn'] = array(
     'Download AccessLog' => '下载访问日志',
     'Download ErrorLog' => '下载错误日志',
     'Country' => '国家地区',
-    '2 letter code' => '采用 ISO 3166-1 二位代码 如: 中国CN / 美国US',
+    '2 letter code' => '采用 ISO 3166-1 α-2 二位代码 如: 中国CN / 美国US',
     'State / Province' => '州 / 省级',
     'City / Locality' => '市 / 地区',
     'Organization' => '组织名称',
@@ -704,7 +706,7 @@ $LANG['cn'] = array(
     'Add File to the Current Selection' => '将文件添加到当前选中区内',
     'Select All Files' => '选择所有文件',
     'shortcuts are inspired by magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager' =>
-    '快捷键的灵感来自旖旎的 GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> 文件管理器',
+    '快捷键的灵感来自华丽的 GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> 文件管理器',
 
     'Licence Key' => '许可密匙',
     'Enter License Key' => '输入许可密匙',

From 0b0bcf6b157c3e1b70cfd9a026845837282cf324 Mon Sep 17 00:00:00 2001
From: darkworks <zktk009@gmail.com>
Date: Thu, 20 Jun 2019 23:11:23 +0500
Subject: [PATCH 0466/2300] Use Web Domain SSL Certificate -> ur.php

updated ur.php translation
---
 web/inc/i18n/ur.php | 25 ++++++++++++++++++++++++-
 1 file changed, 24 insertions(+), 1 deletion(-)

diff --git a/web/inc/i18n/ur.php b/web/inc/i18n/ur.php
index 960e5631..2c95e821 100644
--- a/web/inc/i18n/ur.php
+++ b/web/inc/i18n/ur.php
@@ -70,6 +70,7 @@ $LANG['ur'] = array(
     'Back'   => 'پیچھے',
     'Save'   => 'محفوظ کریں',
     'Submit'   => 'جمع',
+    
     'toggle all'   => 'تمام ٹاگل',
     'apply to selected'   => 'منتخب شدہ پر لاگو',
     'rebuild'   => 'تعمیر نو',
@@ -108,6 +109,7 @@ $LANG['ur'] = array(
     'enable autoupdate'  => 'آٹو اپ ڈیٹ کو چالو',
     'disable autoupdate'  => 'غیر فعال آٹو اپ ڈیٹ',
     'configure'  => 'ترتیب دے',
+    
     'Adding User'   => 'شامل کرنے صارف',
     'Editing User'   => 'ترمیم صارف',
     'Adding Domain'   => 'ڈومین کو شامل کرنے سے',
@@ -135,6 +137,7 @@ $LANG['ur'] = array(
     'Adding Firewall Rule'  => 'فصیل اصول کو شامل کرنے سے',
     'Editing Firewall Rule'  => 'ترمیم فصیل اصول',
     'Adding IP Address to Banlist'  => 'Banlist کرنے IP ایڈریس کو شامل کرنے سے',
+    
     'active'   => 'فعال',
     'spnd'   => 'معطل',
     'suspended'   => 'معطل',
@@ -142,6 +145,7 @@ $LANG['ur'] = array(
     'stopped'   => 'بند کر دیا',
     'outdated'   => 'فرسودہ',
     'updated'   => 'اپ ڈیٹ',
+    
     'yes'   => 'جی ہاں',
     'no'   => 'نہیں',
     'none'   => 'کوئی بھی',
@@ -392,14 +396,17 @@ $LANG['ur'] = array(
     'FTP'  => 'FTP',
     'VESTA'  => 'Vesta کی',
     'Add one more Name Server'  => 'ایک اور نام سرور شامل کریں',
+    
     'web domain'  => 'ویب ڈومین',
     'dns domain'  => 'DNS ڈومین',
     'dns record'  => 'DNS ریکارڈ',
     'mail domain'  => 'میل ڈومین',
     'mail account'  => 'میل اکاؤنٹ',
     'cron job'  => 'کرون کام',
+    
     'cron'  => 'کرون',
     'user dir'  => 'صارف دیر',
+    
     'unlimited'   => 'لامحدود',
     '1 account'   => '1 اکاؤنٹ',
     '%s accounts'   => '٪s کے اکاؤنٹس',
@@ -494,12 +501,14 @@ $LANG['ur'] = array(
     'BACKUP_EXISTS'   => 'ایک موجودہ بیک اپ کو پہلے ہی چل رہا ہے. کہ بیک اپ کو ختم کرنے کے لئے براہ کرم انتظار کریں.',
     'RESTORE_SCHEDULED'   => 'ٹاسک قطار میں شامل کیا گیا ہے. جب آپ کو بحال مکمل کیا گیا ہے آپ کو ایک ای میل کی اطلاع وصول کریں گے.',
     'RESTORE_EXISTS'   => 'ایک موجودہ بحالی کا کام پہلے سے ہی چل رہا ہے. جو اسے دوبارہ شروع کرنے سے پہلے ختم کرنے کے لئے براہ کرم انتظار کریں.',
+  
     'WEB_EXCLUSIONS'  => 'قسم ڈومین کا نام ہے، ایک فی لائن. تمام ڈومینز استعمال کرتے خارج کرنے کے *. شکل مندرجہ ذیل مخصوص dirs استعمال کو خارج کرنے کے لئے: domain.com:public_html/cache:public_html/tmp',
     'DNS_EXCLUSIONS'  => 'قسم ڈومین کا نام ہے، ایک فی لائن. تمام ڈومینز استعمال کرتے خارج کرنے کے *',
     'MAIL_EXCLUSIONS'  => 'قسم ڈومین کا نام ہے، ایک فی لائن. تمام ڈومینز استعمال کرتے خارج کرنے کے *. شکل مندرجہ ذیل مخصوص اکاؤنٹس کے استعمال کو خارج کرنے کے لئے: domain.com:info:support:postmaster',
     'DB_EXCLUSIONS'  => 'مکمل ڈیٹا بیس کا نام ٹائپ کریں، فی لائن ایک. تمام ڈیٹا بیس کا استعمال کرتے خارج کرنے کے *',
     'CRON_EXCLUSIONS'  => 'تمام ملازمتوں کا استعمال کرتے خارج کرنے کے *',
     'USER_EXCLUSIONS'  => 'قسم ڈائریکٹری کا نام ہے، ایک فی لائن. تمام dirs استعمال کرتے exlude کرنے *',
+ 
     'Welcome to Vesta Control Panel'   => 'Vesta کی کنٹرول پینل میں خوش آمدید',
     'MAIL_FROM'   => '<noreply@%s> Vesta کی کنٹرول پینل ',
     'GREETINGS_GORDON_FREEMAN' => "ہیلو, %s %s,\n",
@@ -535,6 +544,7 @@ $LANG['ur'] = array(
     'Oct'  => 'اکتوبر',
     'Nov'  => 'نومبر',
     'Dec'  => 'دسمبر',
+    
     'Configuring Server'  => 'ترتیب سرور',
     'Hostname'  => 'میزبان کا نام',
     'Time Zone'  => 'ٹائم زون',
@@ -548,7 +558,7 @@ $LANG['ur'] = array(
     'MAIL Server'  => 'میل سرور',
     'Antivirus'  => 'اینٹی وائرس',
     'AntiSpam'  => 'اینٹی سپیم',
-    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
+    'Use Web Domain SSL Certificate' => 'ایس ایس ایل ویب ڈومین سرٹیفکیٹ کااستعمال کریں',
     'Webmail URL'  => 'ویب میل URL',
     'MySQL Support'  => 'ایس کیو ایل کی معاونت کی',
     'phpMyAdmin URL'  => 'phpMyAdmin کے یو آر ایل',
@@ -572,11 +582,14 @@ $LANG['ur'] = array(
     'Backup Migration Manager'  => 'بیک اپ مائیگریشن مینیجر',
     'FileManager'  => 'فائل مینیجر',
     'show: CPU / MEM / NET / DISK'  => 'دکھائیں: CPU / MEM / NET / ڈسک',
+    
     'sort by'  => 'بہ ترتیب',
     'Date'  => 'تاریخ',
     'Starred'  => 'ستارے کے نشان',
     'Name'  => 'نام',
+    
     'save to favorites'  => 'پسندیدہ میں محفوظ کریں',
+    
     'File Manager'  => 'فائل منیجر',
     'size'  => 'سائز',
     'date'  => 'تاریخ',
@@ -639,6 +652,7 @@ $LANG['ur'] = array(
     'read by others'  => 'دوسروں کی طرف سے پڑھا',
     'write by others'  => 'دوسروں کی طرف سے لکھ',
     'execute/search by others'  => 'پھانسی دوسروں کی طرف سے / تلاش',
+    
     'Shortcuts'  => 'شارٹ کٹ',
     'Add New object'  => 'نیا اعتراض شامل کریں',
     'Save Form'  => 'فارم محفوظ کریں',
@@ -657,6 +671,7 @@ $LANG['ur'] = array(
     'Enter focused element'  => 'مرکوز عنصر درج',
     'Move up through elements list'  => 'عناصر فہرست کے ذریعے اوپر منتقل کریں',
     'Move down through elements list'  => 'عناصر فہرست کے ذریعے نیچے لے جائیں',
+    
     'Upload'  => 'اپ لوڈ کریں',
     'New File'  => 'نئی فائل',
     'New Folder'  => 'نیا فولڈر',
@@ -680,6 +695,7 @@ $LANG['ur'] = array(
     'Select All Files' => 'تمام فائلوں کو منتخب',
     'shortcuts are inspired by magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager' =>
     '.فائل مینیجر <a href="https://www.midnight-commander.org/">Midnight Commander</a> شارٹ کٹ شاندار GNU سے متاثر ہیں',
+    
     'Licence Key'  => 'لائسنس کلید',
     'Enter License Key'  => 'لائسنس کلید درج کریں',
     'Buy Licence'  => 'ابھی لائسنس',
@@ -690,6 +706,7 @@ $LANG['ur'] = array(
     'Restrict users so that they cannot use SSH and access only their home directory.'  => 'وہ SSH اور رسائی صرف ان کے گھر کی ڈائریکٹری کا استعمال نہیں کر سکتے ہیں تاکہ صارفین کو محدود کریں.',
     'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.'  => 'براؤز کریں، کاپی، ترمیم، دیکھیں، اور مکمل طور پر نمایاں فائل مینیجر کا استعمال کرتے ہوئے آپ کی ویب ڈومین فائلوں کی تمام بازیافت.',
     'This is a commercial module, you would need to purchace license key to enable it.'  => 'یہ ایک تجارتی ماڈیول ہے، آپ اسے چالو کرنے کے لئے لائسنس کی چابی purchace کرنے کی ضرورت گا.',
+    
     'Minutes'  => 'منٹس',
     'Hourly'  => 'گھنٹہ وار',
     'Run Command'  => 'چلائیں کمان',
@@ -714,8 +731,10 @@ $LANG['ur'] = array(
     'every two minutes'  => 'ہر دو منٹ',
     'every'  => 'ہر کوئی',
     'Generate'  => 'بنائیں',
+    
     'webalizer'  => 'webalizer',
     'awstats'  => 'awstats',
+    
     'Vesta SSL'  => 'Vesta کی SSL',
     'SUBJECT'  => 'مضمون',
     'ALIASES'  => 'عرفیتیں',
@@ -724,14 +743,18 @@ $LANG['ur'] = array(
     'SIGNATURE'  => 'دستخط',
     'PUB_KEY'  => 'PUB_KEY',
     'ISSUER'  => 'ISSUER',
+    
     'Use server hostname'  => 'سرور استعمال میزبان نام',
     'Use domain hostname'  => 'ڈومین کا استعمال میزبان نام',
     'Use STARTTLS'  => 'STARTTLS استعمال',
     'Use SSL'  => 'SSL استعمال کریں',
     'No encryption'  => 'کوئی خفیہ کاری',
     'Do not use encryption'  => 'خفیہ کاری کا استعمال نہ کریں',
+    
     'maximum characters length, including prefix'  => 'زیادہ سے زیادہ ٪s کو حروف لمبائی، سابقہ سم',
+    
     'Email Credentials' => 'ای میل کی سند',
+    
     '%s rule' => 'قواعد %s',
     'MainDomain' => 'اہم ڈومین',
     'SubDomain' => 'ذیلی ڈومین',

From 0829d631c99e05347a29169acb42dad0085e8b11 Mon Sep 17 00:00:00 2001
From: Timo Stramann <21283057+TimoStramann@users.noreply.github.com>
Date: Thu, 4 Jul 2019 02:47:02 +0200
Subject: [PATCH 0467/2300] vBulletin 5 template based on default stpl

---
 .../web/nginx/php-fpm/vbulletin5.stpl         | 105 ++++++++++++++++++
 1 file changed, 105 insertions(+)
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/vbulletin5.stpl

diff --git a/install/debian/9/templates/web/nginx/php-fpm/vbulletin5.stpl b/install/debian/9/templates/web/nginx/php-fpm/vbulletin5.stpl
new file mode 100644
index 00000000..eebb3e42
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/vbulletin5.stpl
@@ -0,0 +1,105 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # legacy css being handled separate for performance
+    location = /css\.php {
+        rewrite ^ /core/css.php break;
+    }
+
+    # make install available from presentation
+    location ^~ /install {
+        rewrite ^/install/ /core/install/ break;
+    }
+
+    # any request to not existing item gets redirected through routestring
+    location / {
+        if (!-f $request_filename) {
+            rewrite ^/(.*)$ /index.php?routestring=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+    }
+
+    # make admincp available from presentation
+    location ^~ /admincp {
+        if (!-f $request_filename) {
+            rewrite ^/admincp/(.*)$ /index.php?routestring=admincp/$1 last;
+        }
+    }
+
+    # process any php scripts, not found gets redirected through routestring
+    location ~ \.php$ {
+    # handles legacy scripts
+        if (!-f $request_filename) {
+            rewrite ^/(.*)$ /index.php?routestring=$1 break;
+        }
+
+        fastcgi_split_path_info ^(.+\.php)(.*)$;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        include fastcgi_params;
+        fastcgi_param QUERY_STRING $query_string;
+        fastcgi_param REQUEST_METHOD $request_method;
+        fastcgi_param CONTENT_TYPE $content_type;
+        fastcgi_param CONTENT_LENGTH $content_length;
+        fastcgi_intercept_errors on;
+        fastcgi_ignore_client_abort off;
+        fastcgi_connect_timeout 60;
+        fastcgi_send_timeout 180;
+        fastcgi_read_timeout 180;
+        fastcgi_buffers 256 16k;
+        fastcgi_buffer_size 32k;
+        fastcgi_temp_file_write_size 256k;
+
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}

From de51aa46926399ea26b72b89dd0db67db2c99786 Mon Sep 17 00:00:00 2001
From: Timo Stramann <21283057+TimoStramann@users.noreply.github.com>
Date: Thu, 4 Jul 2019 02:52:16 +0200
Subject: [PATCH 0468/2300] vBulletin 5 template based on default tpl

---
 .../web/nginx/php-fpm/vbulletin5.tpl          | 100 ++++++++++++++++++
 1 file changed, 100 insertions(+)
 create mode 100644 install/debian/9/templates/web/nginx/php-fpm/vbulletin5.tpl

diff --git a/install/debian/9/templates/web/nginx/php-fpm/vbulletin5.tpl b/install/debian/9/templates/web/nginx/php-fpm/vbulletin5.tpl
new file mode 100644
index 00000000..2c5c9988
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/php-fpm/vbulletin5.tpl
@@ -0,0 +1,100 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # legacy css being handled separate for performance
+    location = /css\.php {
+        rewrite ^ /core/css.php break;
+    }
+
+    # make install available from presentation
+    location ^~ /install {
+        rewrite ^/install/ /core/install/ break;
+    }
+
+    # any request to not existing item gets redirected through routestring
+    location / {
+        if (!-f $request_filename) {
+            rewrite ^/(.*)$ /index.php?routestring=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+    }
+
+    # make admincp available from presentation
+    location ^~ /admincp {
+        if (!-f $request_filename) {
+            rewrite ^/admincp/(.*)$ /index.php?routestring=admincp/$1 last;
+        }
+    }
+
+    # process any php scripts, not found gets redirected through routestring
+    location ~ \.php$ {
+    # handles legacy scripts
+        if (!-f $request_filename) {
+            rewrite ^/(.*)$ /index.php?routestring=$1 break;
+        }
+
+        fastcgi_split_path_info ^(.+\.php)(.*)$;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        include fastcgi_params;
+        fastcgi_param QUERY_STRING $query_string;
+        fastcgi_param REQUEST_METHOD $request_method;
+        fastcgi_param CONTENT_TYPE $content_type;
+        fastcgi_param CONTENT_LENGTH $content_length;
+        fastcgi_intercept_errors on;
+        fastcgi_ignore_client_abort off;
+        fastcgi_connect_timeout 60;
+        fastcgi_send_timeout 180;
+        fastcgi_read_timeout 180;
+        fastcgi_buffers 256 16k;
+        fastcgi_buffer_size 32k;
+        fastcgi_temp_file_write_size 256k;
+
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}

From 8d83d0235e2ee44b9613559cce792b1985b2c3f1 Mon Sep 17 00:00:00 2001
From: Timo Stramann <21283057+TimoStramann@users.noreply.github.com>
Date: Thu, 4 Jul 2019 02:53:03 +0200
Subject: [PATCH 0469/2300] vBulletin 5 template based on default tpl

---
 .../web/nginx/php-fpm/vbulletin5.tpl          | 100 ++++++++++++++++++
 1 file changed, 100 insertions(+)
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/vbulletin5.tpl

diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/vbulletin5.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/vbulletin5.tpl
new file mode 100644
index 00000000..2c5c9988
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/vbulletin5.tpl
@@ -0,0 +1,100 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # legacy css being handled separate for performance
+    location = /css\.php {
+        rewrite ^ /core/css.php break;
+    }
+
+    # make install available from presentation
+    location ^~ /install {
+        rewrite ^/install/ /core/install/ break;
+    }
+
+    # any request to not existing item gets redirected through routestring
+    location / {
+        if (!-f $request_filename) {
+            rewrite ^/(.*)$ /index.php?routestring=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+    }
+
+    # make admincp available from presentation
+    location ^~ /admincp {
+        if (!-f $request_filename) {
+            rewrite ^/admincp/(.*)$ /index.php?routestring=admincp/$1 last;
+        }
+    }
+
+    # process any php scripts, not found gets redirected through routestring
+    location ~ \.php$ {
+    # handles legacy scripts
+        if (!-f $request_filename) {
+            rewrite ^/(.*)$ /index.php?routestring=$1 break;
+        }
+
+        fastcgi_split_path_info ^(.+\.php)(.*)$;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        include fastcgi_params;
+        fastcgi_param QUERY_STRING $query_string;
+        fastcgi_param REQUEST_METHOD $request_method;
+        fastcgi_param CONTENT_TYPE $content_type;
+        fastcgi_param CONTENT_LENGTH $content_length;
+        fastcgi_intercept_errors on;
+        fastcgi_ignore_client_abort off;
+        fastcgi_connect_timeout 60;
+        fastcgi_send_timeout 180;
+        fastcgi_read_timeout 180;
+        fastcgi_buffers 256 16k;
+        fastcgi_buffer_size 32k;
+        fastcgi_temp_file_write_size 256k;
+
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}

From ef36a47ce0f7f605a96eae588cdc69223241d3b1 Mon Sep 17 00:00:00 2001
From: Timo Stramann <21283057+TimoStramann@users.noreply.github.com>
Date: Thu, 4 Jul 2019 02:53:49 +0200
Subject: [PATCH 0470/2300] vBulletin 5 template based on default stpl

---
 .../web/nginx/php-fpm/vbulletin5.stpl         | 105 ++++++++++++++++++
 1 file changed, 105 insertions(+)
 create mode 100644 install/ubuntu/18.04/templates/web/nginx/php-fpm/vbulletin5.stpl

diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/vbulletin5.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/vbulletin5.stpl
new file mode 100644
index 00000000..eebb3e42
--- /dev/null
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/vbulletin5.stpl
@@ -0,0 +1,105 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # legacy css being handled separate for performance
+    location = /css\.php {
+        rewrite ^ /core/css.php break;
+    }
+
+    # make install available from presentation
+    location ^~ /install {
+        rewrite ^/install/ /core/install/ break;
+    }
+
+    # any request to not existing item gets redirected through routestring
+    location / {
+        if (!-f $request_filename) {
+            rewrite ^/(.*)$ /index.php?routestring=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+    }
+
+    # make admincp available from presentation
+    location ^~ /admincp {
+        if (!-f $request_filename) {
+            rewrite ^/admincp/(.*)$ /index.php?routestring=admincp/$1 last;
+        }
+    }
+
+    # process any php scripts, not found gets redirected through routestring
+    location ~ \.php$ {
+    # handles legacy scripts
+        if (!-f $request_filename) {
+            rewrite ^/(.*)$ /index.php?routestring=$1 break;
+        }
+
+        fastcgi_split_path_info ^(.+\.php)(.*)$;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        include fastcgi_params;
+        fastcgi_param QUERY_STRING $query_string;
+        fastcgi_param REQUEST_METHOD $request_method;
+        fastcgi_param CONTENT_TYPE $content_type;
+        fastcgi_param CONTENT_LENGTH $content_length;
+        fastcgi_intercept_errors on;
+        fastcgi_ignore_client_abort off;
+        fastcgi_connect_timeout 60;
+        fastcgi_send_timeout 180;
+        fastcgi_read_timeout 180;
+        fastcgi_buffers 256 16k;
+        fastcgi_buffer_size 32k;
+        fastcgi_temp_file_write_size 256k;
+
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}

From 81842cc878157d10d61e5cae5a2e8a26f9906df9 Mon Sep 17 00:00:00 2001
From: Timo Stramann <21283057+TimoStramann@users.noreply.github.com>
Date: Thu, 4 Jul 2019 02:55:10 +0200
Subject: [PATCH 0471/2300] vBulletin 5 template based on default tpl

---
 .../web/nginx/php-fpm/vbulletin5.tpl          | 100 ++++++++++++++++++
 1 file changed, 100 insertions(+)
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/vbulletin5.tpl

diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/vbulletin5.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/vbulletin5.tpl
new file mode 100644
index 00000000..2c5c9988
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/vbulletin5.tpl
@@ -0,0 +1,100 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # legacy css being handled separate for performance
+    location = /css\.php {
+        rewrite ^ /core/css.php break;
+    }
+
+    # make install available from presentation
+    location ^~ /install {
+        rewrite ^/install/ /core/install/ break;
+    }
+
+    # any request to not existing item gets redirected through routestring
+    location / {
+        if (!-f $request_filename) {
+            rewrite ^/(.*)$ /index.php?routestring=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+    }
+
+    # make admincp available from presentation
+    location ^~ /admincp {
+        if (!-f $request_filename) {
+            rewrite ^/admincp/(.*)$ /index.php?routestring=admincp/$1 last;
+        }
+    }
+
+    # process any php scripts, not found gets redirected through routestring
+    location ~ \.php$ {
+    # handles legacy scripts
+        if (!-f $request_filename) {
+            rewrite ^/(.*)$ /index.php?routestring=$1 break;
+        }
+
+        fastcgi_split_path_info ^(.+\.php)(.*)$;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        include fastcgi_params;
+        fastcgi_param QUERY_STRING $query_string;
+        fastcgi_param REQUEST_METHOD $request_method;
+        fastcgi_param CONTENT_TYPE $content_type;
+        fastcgi_param CONTENT_LENGTH $content_length;
+        fastcgi_intercept_errors on;
+        fastcgi_ignore_client_abort off;
+        fastcgi_connect_timeout 60;
+        fastcgi_send_timeout 180;
+        fastcgi_read_timeout 180;
+        fastcgi_buffers 256 16k;
+        fastcgi_buffer_size 32k;
+        fastcgi_temp_file_write_size 256k;
+
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}

From ce6640010bc9fd6f1adef0b40b3643610152a9d8 Mon Sep 17 00:00:00 2001
From: Timo Stramann <21283057+TimoStramann@users.noreply.github.com>
Date: Thu, 4 Jul 2019 02:55:47 +0200
Subject: [PATCH 0472/2300] vBulletin 5 template based on default tpl

---
 .../web/nginx/php-fpm/vbulletin5.stpl         | 105 ++++++++++++++++++
 1 file changed, 105 insertions(+)
 create mode 100644 install/ubuntu/18.10/templates/web/nginx/php-fpm/vbulletin5.stpl

diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/vbulletin5.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/vbulletin5.stpl
new file mode 100644
index 00000000..eebb3e42
--- /dev/null
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/vbulletin5.stpl
@@ -0,0 +1,105 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # legacy css being handled separate for performance
+    location = /css\.php {
+        rewrite ^ /core/css.php break;
+    }
+
+    # make install available from presentation
+    location ^~ /install {
+        rewrite ^/install/ /core/install/ break;
+    }
+
+    # any request to not existing item gets redirected through routestring
+    location / {
+        if (!-f $request_filename) {
+            rewrite ^/(.*)$ /index.php?routestring=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+    }
+
+    # make admincp available from presentation
+    location ^~ /admincp {
+        if (!-f $request_filename) {
+            rewrite ^/admincp/(.*)$ /index.php?routestring=admincp/$1 last;
+        }
+    }
+
+    # process any php scripts, not found gets redirected through routestring
+    location ~ \.php$ {
+    # handles legacy scripts
+        if (!-f $request_filename) {
+            rewrite ^/(.*)$ /index.php?routestring=$1 break;
+        }
+
+        fastcgi_split_path_info ^(.+\.php)(.*)$;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        include fastcgi_params;
+        fastcgi_param QUERY_STRING $query_string;
+        fastcgi_param REQUEST_METHOD $request_method;
+        fastcgi_param CONTENT_TYPE $content_type;
+        fastcgi_param CONTENT_LENGTH $content_length;
+        fastcgi_intercept_errors on;
+        fastcgi_ignore_client_abort off;
+        fastcgi_connect_timeout 60;
+        fastcgi_send_timeout 180;
+        fastcgi_read_timeout 180;
+        fastcgi_buffers 256 16k;
+        fastcgi_buffer_size 32k;
+        fastcgi_temp_file_write_size 256k;
+
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}

From 632a507b3291abf96fcdef2308de1e279cd90751 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jul 2019 01:28:59 +0200
Subject: [PATCH 0473/2300] deb10

---
 install/vst-install-debian.sh | 42 ++++++++++++-----------------------
 1 file changed, 14 insertions(+), 28 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index b4b6c375..0c392038 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -14,11 +14,23 @@ VESTA='/usr/local/vesta'
 memory=$(grep 'MemTotal' /proc/meminfo |tr ' ' '\n' |grep [0-9])
 arch=$(uname -i)
 os='debian'
-release=$(cat /etc/debian_version|grep -o [0-9]|head -n1)
+release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
 codename="$(cat /etc/os-release |grep VERSION= |cut -f 2 -d \(|cut -f 1 -d \))"
 vestacp="$VESTA/install/$VERSION/$release"
 
-if [ "$release" -eq 9 ]; then
+if [ "$release" -eq 10 ]; then
+    software="nginx apache2 apache2-utils apache2-suexec-custom
+        libapache2-mod-fcgid libapache2-mod-php php
+        php-common php-cgi php-mysql php-curl php-fpm php-pgsql awstats
+        webalizer vsftpd proftpd-basic bind9 exim4 exim4-daemon-heavy
+        clamav-daemon spamassassin dovecot-imapd dovecot-pop3d roundcube-core
+        roundcube-mysql roundcube-plugins mysql-server mysql-common
+        mysql-client postgresql postgresql-contrib phppgadmin phpmyadmin mc
+        flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
+        e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
+        bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
+        unrar-free vim-common net-tools unzip"
+elif [ "$release" -eq 9 ]; then
     software="nginx apache2 apache2-utils apache2-suexec-custom
         libapache2-mod-ruid2 libapache2-mod-fcgid libapache2-mod-php php
         php-common php-cgi php-mysql php-curl php-fpm php-pgsql awstats
@@ -30,32 +42,6 @@ if [ "$release" -eq 9 ]; then
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
         unrar-free vim-common vesta-ioncube vesta-softaculous net-tools unzip"
-elif [ "$release" -eq 8 ]; then
-    software="nginx apache2 apache2-utils apache2.2-common
-        apache2-suexec-custom libapache2-mod-ruid2
-        libapache2-mod-fcgid libapache2-mod-php5 php5 php5-common php5-cgi
-        php5-mysql php5-curl php5-fpm php5-pgsql awstats webalizer vsftpd
-        proftpd-basic bind9 exim4 exim4-daemon-heavy clamav-daemon
-        spamassassin dovecot-imapd dovecot-pop3d roundcube-core
-        roundcube-mysql roundcube-plugins mysql-server mysql-common
-        mysql-client postgresql postgresql-contrib phppgadmin phpMyAdmin mc
-        flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
-        e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
-        bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
-        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools unzip"
-else
-    software="nginx apache2 apache2-utils apache2.2-common
-        apache2-suexec-custom libapache2-mod-ruid2
-        libapache2-mod-fcgid libapache2-mod-php5 php5 php5-common php5-cgi
-        php5-mysql php5-curl php5-fpm php5-pgsql awstats webalizer vsftpd
-        proftpd-basic proftpd-mod-vroot bind9 exim4 exim4-daemon-heavy
-        clamav-daemon spamassassin dovecot-imapd dovecot-pop3d roundcube-core
-        roundcube-mysql roundcube-plugins mysql-server mysql-common
-        mysql-client postgresql postgresql-contrib phppgadmin phpMyAdmin mc
-        flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
-        e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
-        bsdmainutils cron vesta vesta-nginx vesta-php expect unrar-free
-        vim-common vesta-ioncube vesta-softaculous net-tools unzip"
 fi
 
 # Defining help function

From 842d45f6001daf81c877dd8b0dc97263c0f613d6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jul 2019 01:46:43 +0200
Subject: [PATCH 0474/2300] new repo

---
 install/vst-install-debian.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 0c392038..e209f591 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -7,8 +7,8 @@
 #----------------------------------------------------------#
 export PATH=$PATH:/sbin
 export DEBIAN_FRONTEND=noninteractive
-RHOST='apt.vestacp.com'
-CHOST='c.vestacp.com'
+RHOST='vesta.mycity-hosting.com'
+CHOST='c.mycity-hosting.com'
 VERSION='debian'
 VESTA='/usr/local/vesta'
 memory=$(grep 'MemTotal' /proc/meminfo |tr ' ' '\n' |grep [0-9])

From 873c0a97b0ebe22a0595b48610cadb8859c2a66b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jul 2019 02:28:23 +0200
Subject: [PATCH 0475/2300] php-fpm in installer

---
 install/vst-install-debian.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index e209f591..a7ea39b0 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -19,8 +19,8 @@ codename="$(cat /etc/os-release |grep VERSION= |cut -f 2 -d \(|cut -f 1 -d \))"
 vestacp="$VESTA/install/$VERSION/$release"
 
 if [ "$release" -eq 10 ]; then
-    software="nginx apache2 apache2-utils apache2-suexec-custom
-        libapache2-mod-fcgid libapache2-mod-php php
+    software="nginx apache2 apache2-utils
+        libapache2-mod-fcgid php-fpm php
         php-common php-cgi php-mysql php-curl php-fpm php-pgsql awstats
         webalizer vsftpd proftpd-basic bind9 exim4 exim4-daemon-heavy
         clamav-daemon spamassassin dovecot-imapd dovecot-pop3d roundcube-core
@@ -857,10 +857,10 @@ if [ "$apache" = 'yes'  ]; then
     cp -f $vestacp/apache2/status.conf /etc/apache2/mods-enabled/
     cp -f  $vestacp/logrotate/apache2 /etc/logrotate.d/
     a2enmod rewrite
-    a2enmod suexec
+    # a2enmod suexec
     a2enmod ssl
     a2enmod actions
-    a2enmod ruid2
+    # a2enmod ruid2
     a2enmod headers
     mkdir -p /etc/apache2/conf.d
     echo > /etc/apache2/conf.d/vesta.conf

From fa5d76fcb7709d4994b704f9dfaf5dc6c3a415ae Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jul 2019 02:45:17 +0200
Subject: [PATCH 0476/2300] installer -eq 10

---
 install/vst-install-debian.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index a7ea39b0..3d1ba693 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1065,7 +1065,7 @@ if [ "$dovecot" = 'yes' ]; then
     cp -rf $vestacp/dovecot /etc/
     cp -f $vestacp/logrotate/dovecot /etc/logrotate.d/
     chown -R root:root /etc/dovecot*
-    if [ "$release" -eq 9 ]; then
+    if [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
         sed -i "s#namespace inbox {#namespace inbox {\n  inbox = yes#" /etc/dovecot/conf.d/15-mailboxes.conf
     fi
     update-rc.d dovecot defaults
@@ -1143,7 +1143,7 @@ if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
         /etc/roundcube/plugins/password/config.inc.php
     mysql roundcube < /usr/share/dbconfig-common/data/roundcube/install/mysql
     chmod a+r /etc/roundcube/main.inc.php
-    if [ "$release" -eq 8 ] || [ "$release" -eq 9 ]; then
+    if [ "$release" -eq 8 ] || [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
         mv -f /etc/roundcube/main.inc.php /etc/roundcube/config.inc.php
         mv -f /etc/roundcube/db.inc.php /etc/roundcube/debian-db-roundcube.php
         chmod 640 /etc/roundcube/debian-db-roundcube.php

From 6a9f65d98e212066bd7abdca27f811f7355633e5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jul 2019 13:30:37 +0200
Subject: [PATCH 0477/2300] Turning off sending mail

---
 install/vst-install-debian.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 3d1ba693..23ee46d8 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1366,8 +1366,8 @@ Sincerely yours
 vestacp.com team
 " > $tmpfile
 
-send_mail="$VESTA/web/inc/mail-wrapper.php"
-cat $tmpfile | $send_mail -s "Vesta Control Panel" $email
+# send_mail="$VESTA/web/inc/mail-wrapper.php"
+# cat $tmpfile | $send_mail -s "Vesta Control Panel" $email
 
 # Congrats
 echo '======================================================='

From ab26bb3e9cf494e0ed359cefccd1085ec863973b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jul 2019 14:21:17 +0200
Subject: [PATCH 0478/2300] deb10 phpmyadmin

---
 install/vst-install-debian.sh | 42 +++++++++++++++++++++++++++++++----
 1 file changed, 38 insertions(+), 4 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 23ee46d8..5570483c 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -24,9 +24,9 @@ if [ "$release" -eq 10 ]; then
         php-common php-cgi php-mysql php-curl php-fpm php-pgsql awstats
         webalizer vsftpd proftpd-basic bind9 exim4 exim4-daemon-heavy
         clamav-daemon spamassassin dovecot-imapd dovecot-pop3d roundcube-core
-        roundcube-mysql roundcube-plugins mysql-server mysql-common
-        mysql-client postgresql postgresql-contrib phppgadmin phpmyadmin mc
-        flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
+        roundcube-mysql roundcube-plugins mariadb-server mariadb-common
+        mariadb-client postgresql postgresql-contrib phppgadmin mc
+        flex whois git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
         unrar-free vim-common net-tools unzip"
@@ -623,7 +623,7 @@ echo -e '#!/bin/sh \nexit 101' > /usr/sbin/policy-rc.d
 chmod a+x /usr/sbin/policy-rc.d
 
 # Install apt packages
-apt-get -y install $software
+apt-get --allow-unauthenticated -y install $software
 check_result $? "apt-get install failed"
 
 # Restore  policy
@@ -981,6 +981,40 @@ if [ "$mysql" = 'yes' ]; then
     fi
     cp -f $vestacp/pma/config.inc.php /etc/phpmyadmin/
     chmod 777 /var/lib/phpmyadmin/tmp
+    if [ "$release" -eq 10 ]; then
+      # Code borrowed from HestiaCP
+      pma_v='4.9.0.1'
+      echo "(*) Installing phpMyAdmin version v$pma_v..."
+
+      # Download latest phpmyadmin release
+      wget --quiet https://files.phpmyadmin.net/phpMyAdmin/$pma_v/phpMyAdmin-$pma_v-all-languages.tar.gz
+
+      # Unpack files
+      tar xzf phpMyAdmin-$pma_v-all-languages.tar.gz
+
+      # Delete file to prevent error
+      rm -fr /usr/share/phpmyadmin/doc/html
+
+      # Overwrite old files
+      cp -rf phpMyAdmin-$pma_v-all-languages/* /usr/share/phpmyadmin
+
+      # Set config and log directory
+      sed -i "s|define('CONFIG_DIR', '');|define('CONFIG_DIR', '/etc/phpmyadmin/');|" /usr/share/phpmyadmin/libraries/vendor_config.php
+      sed -i "s|define('TEMP_DIR', './tmp/');|define('TEMP_DIR', '/var/lib/phpmyadmin/tmp/');|" /usr/share/phpmyadmin/libraries/vendor_config.php
+
+      # Create temporary folder and change permission
+      mkdir /usr/share/phpmyadmin/tmp
+      chmod 777 /usr/share/phpmyadmin/tmp
+
+      # Clear Up
+      rm -fr phpMyAdmin-$pma_v-all-languages
+      rm -f phpMyAdmin-$pma_v-all-languages.tar.gz
+      
+      mkdir /root/phpmyadmin
+      wget -nv -O /root/phpmyadmin/pma.sh http://c.mycity-hosting.com/debian/10/pma/pma.sh 
+      wget -nv -O /root/phpmyadmin/create_tables.sql http://c.mycity-hosting.com/debian/10/pma/create_tables.sql
+      bash /root/phpmyadmin/pma.sh
+  fi
 fi
 
 #----------------------------------------------------------#

From 4b184ab7f55ecbefedd804ef1464189e5f57f98d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jul 2019 14:33:06 +0200
Subject: [PATCH 0479/2300] deb key

---
 install/vst-install-debian.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 5570483c..ee59f4cf 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -260,7 +260,7 @@ if [ ! -e '/usr/bin/wget' ]; then
 fi
 
 # Checking repository availability
-wget -q "c.vestacp.com/deb_signing.key" -O /dev/null
+wget -q "c.mycity-hosting.com/deb_signing.key" -O /dev/null
 check_result $? "No access to Vesta repository"
 
 # Check installed packages
@@ -623,7 +623,7 @@ echo -e '#!/bin/sh \nexit 101' > /usr/sbin/policy-rc.d
 chmod a+x /usr/sbin/policy-rc.d
 
 # Install apt packages
-apt-get --allow-unauthenticated -y install $software
+apt-get -y install $software
 check_result $? "apt-get install failed"
 
 # Restore  policy

From 792edbe685d637ebcb0bf5258a878f01f608059d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jul 2019 15:56:04 +0200
Subject: [PATCH 0480/2300] Removing rssh

---
 install/vst-install-debian.sh | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ee59f4cf..d2200d36 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -654,15 +654,16 @@ echo "$(which ntpdate) -s pool.ntp.org" >> /etc/cron.daily/ntpdate
 chmod 775 /etc/cron.daily/ntpdate
 ntpdate -s pool.ntp.org
 
-# Setup rssh
-if [ -z "$(grep /usr/bin/rssh /etc/shells)" ]; then
-    echo /usr/bin/rssh >> /etc/shells
+if [ "$release" -eq 9 ]; then
+  # Setup rssh
+  if [ -z "$(grep /usr/bin/rssh /etc/shells)" ]; then
+      echo /usr/bin/rssh >> /etc/shells
+  fi
+  sed -i 's/#allowscp/allowscp/' /etc/rssh.conf
+  sed -i 's/#allowsftp/allowsftp/' /etc/rssh.conf
+  sed -i 's/#allowrsync/allowrsync/' /etc/rssh.conf
+  chmod 755 /usr/bin/rssh
 fi
-sed -i 's/#allowscp/allowscp/' /etc/rssh.conf
-sed -i 's/#allowsftp/allowsftp/' /etc/rssh.conf
-sed -i 's/#allowrsync/allowrsync/' /etc/rssh.conf
-chmod 755 /usr/bin/rssh
-
 
 #----------------------------------------------------------#
 #                     Configure VESTA                      #
@@ -867,7 +868,7 @@ if [ "$apache" = 'yes'  ]; then
     echo "# Powered by vesta" > /etc/apache2/sites-available/default
     echo "# Powered by vesta" > /etc/apache2/sites-available/default-ssl
     echo "# Powered by vesta" > /etc/apache2/ports.conf
-    echo -e "/home\npublic_html/cgi-bin" > /etc/apache2/suexec/www-data
+    # echo -e "/home\npublic_html/cgi-bin" > /etc/apache2/suexec/www-data
     touch /var/log/apache2/access.log /var/log/apache2/error.log
     mkdir -p /var/log/apache2/domains
     chmod a+x /var/log/apache2

From b33ea7357764d600a8c392d81d43efb24766f7f5 Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Fri, 12 Jul 2019 16:02:33 +0200
Subject: [PATCH 0481/2300] deb10 configs

---
 install/debian/10/apache2/apache2.conf        |  94 ++
 install/debian/10/apache2/status.conf         |   8 +
 install/debian/10/bind/named.conf             |  12 +
 install/debian/10/clamav/clamd.conf           |  60 ++
 install/debian/10/deb_signing.key             |  30 +
 install/debian/10/dovecot/conf.d/10-auth.conf |   4 +
 .../debian/10/dovecot/conf.d/10-logging.conf  |   1 +
 install/debian/10/dovecot/conf.d/10-mail.conf |   4 +
 .../debian/10/dovecot/conf.d/10-master.conf   |  29 +
 install/debian/10/dovecot/conf.d/10-ssl.conf  |   3 +
 install/debian/10/dovecot/conf.d/20-imap.conf |  58 ++
 install/debian/10/dovecot/conf.d/20-pop3.conf |  91 ++
 .../dovecot/conf.d/auth-passwdfile.conf.ext   |   9 +
 install/debian/10/dovecot/dovecot.conf        |   4 +
 install/debian/10/exim/dnsbl.conf             |   2 +
 install/debian/10/exim/exim4.conf.template    | 382 ++++++++
 install/debian/10/exim/spam-blocks.conf       |   0
 .../debian/10/fail2ban/action.d/vesta.conf    |   9 +
 .../debian/10/fail2ban/filter.d/vesta.conf    |  10 +
 install/debian/10/fail2ban/jail.local         |  39 +
 install/debian/10/firewall/ports.conf         |  17 +
 install/debian/10/firewall/rules.conf         |  11 +
 install/debian/10/logrotate/apache2           |  19 +
 install/debian/10/logrotate/dovecot           |  12 +
 install/debian/10/logrotate/nginx             |  13 +
 install/debian/10/logrotate/vesta             |   7 +
 install/debian/10/mysql/my-large.cnf          |  42 +
 install/debian/10/mysql/my-medium.cnf         |  40 +
 install/debian/10/mysql/my-small.cnf          |  40 +
 install/debian/10/nginx/nginx.conf            | 137 +++
 install/debian/10/nginx/phpmyadmin.inc        |  18 +
 install/debian/10/nginx/phppgadmin.inc        |  11 +
 install/debian/10/nginx/status.conf           |   9 +
 install/debian/10/nginx/webmail.inc           |  15 +
 install/debian/10/packages/default.pkg        |  18 +
 install/debian/10/pga/config.inc.php          | 159 ++++
 install/debian/10/pga/phppgadmin.conf         |  31 +
 install/debian/10/php-fpm/www.conf            |  11 +
 install/debian/10/pma/apache.conf             |  42 +
 install/debian/10/pma/config.inc.php          | 146 +++
 install/debian/10/pma/create_tables.sql       | 385 ++++++++
 install/debian/10/pma/pma.sh                  | 146 +++
 install/debian/10/postgresql/pg_hba.conf      |  11 +
 install/debian/10/proftpd/proftpd.conf        |  32 +
 install/debian/10/roundcube/apache.conf       |  40 +
 install/debian/10/roundcube/config.inc.php    |  33 +
 install/debian/10/roundcube/db.inc.php        |  66 ++
 install/debian/10/roundcube/main.inc.php      | 850 ++++++++++++++++++
 install/debian/10/roundcube/vesta.php         |  73 ++
 install/debian/10/sudo/admin                  |   8 +
 install/debian/10/templates/dns/child-ns.tpl  |  14 +
 install/debian/10/templates/dns/default.tpl   |  18 +
 install/debian/10/templates/dns/gmail.tpl     |  12 +
 .../web/apache2/PHP-FPM-73-public.sh          |  87 ++
 .../web/apache2/PHP-FPM-73-public.stpl        |  44 +
 .../web/apache2/PHP-FPM-73-public.tpl         |  38 +
 .../10/templates/web/apache2/PHP-FPM-73.sh    |  86 ++
 .../10/templates/web/apache2/PHP-FPM-73.stpl  |  44 +
 .../10/templates/web/apache2/PHP-FPM-73.tpl   |  38 +
 .../10/templates/web/awstats/awstats.tpl      | 133 +++
 .../debian/10/templates/web/awstats/index.tpl |  10 +
 .../debian/10/templates/web/awstats/nav.tpl   |  23 +
 .../web/nginx/force-https-legacy.stpl         |  38 +
 .../web/nginx/force-https-legacy.tpl          |   8 +
 .../web/nginx/force-https-public.stpl         |  38 +
 .../web/nginx/force-https-public.tpl          |   8 +
 .../10/templates/web/nginx/force-https.stpl   |  38 +
 .../10/templates/web/nginx/force-https.tpl    |   8 +
 .../templates/web/nginx/hosting-public.stpl   |  38 +
 .../10/templates/web/nginx/hosting-public.tpl |  35 +
 .../web/nginx/hosting-webmail-phpmyadmin.stpl |  62 ++
 .../web/nginx/hosting-webmail-phpmyadmin.tpl  |  59 ++
 .../templates/web/nginx/hosting-webmail.stpl  |  50 ++
 .../templates/web/nginx/hosting-webmail.tpl   |  47 +
 .../debian/10/templates/web/nginx/hosting.sh  |  11 +
 .../10/templates/web/nginx/hosting.stpl       |  38 +
 .../debian/10/templates/web/nginx/hosting.tpl |  35 +
 .../web/nginx/php-fpm/cms_made_simple.stpl    |  56 ++
 .../web/nginx/php-fpm/cms_made_simple.tpl     |  52 ++
 .../web/nginx/php-fpm/codeigniter2.stpl       |  61 ++
 .../web/nginx/php-fpm/codeigniter2.tpl        |  57 ++
 .../web/nginx/php-fpm/codeigniter3.stpl       |  56 ++
 .../web/nginx/php-fpm/codeigniter3.tpl        |  52 ++
 .../web/nginx/php-fpm/datalife_engine.stpl    | 127 +++
 .../web/nginx/php-fpm/datalife_engine.tpl     | 123 +++
 .../templates/web/nginx/php-fpm/default.stpl  |  55 ++
 .../templates/web/nginx/php-fpm/default.tpl   |  51 ++
 .../templates/web/nginx/php-fpm/dokuwiki.stpl |  72 ++
 .../templates/web/nginx/php-fpm/dokuwiki.tpl  |  67 ++
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  95 ++
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  91 ++
 .../templates/web/nginx/php-fpm/drupal7.stpl  |  95 ++
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  91 ++
 .../templates/web/nginx/php-fpm/drupal8.stpl  |  95 ++
 .../templates/web/nginx/php-fpm/drupal8.tpl   |  91 ++
 .../templates/web/nginx/php-fpm/joomla.stpl   |  63 ++
 .../10/templates/web/nginx/php-fpm/joomla.tpl |  59 ++
 .../templates/web/nginx/php-fpm/laravel.stpl  |  56 ++
 .../templates/web/nginx/php-fpm/laravel.tpl   |  50 ++
 .../templates/web/nginx/php-fpm/magento.stpl  | 198 ++++
 .../templates/web/nginx/php-fpm/magento.tpl   | 194 ++++
 .../10/templates/web/nginx/php-fpm/modx.stpl  |  69 ++
 .../10/templates/web/nginx/php-fpm/modx.tpl   |  65 ++
 .../templates/web/nginx/php-fpm/moodle.stpl   |  90 ++
 .../10/templates/web/nginx/php-fpm/moodle.tpl |  87 ++
 .../templates/web/nginx/php-fpm/no-php.stpl   |  47 +
 .../10/templates/web/nginx/php-fpm/no-php.tpl |  43 +
 .../10/templates/web/nginx/php-fpm/odoo.stpl  |  70 ++
 .../10/templates/web/nginx/php-fpm/odoo.tpl   |  66 ++
 .../templates/web/nginx/php-fpm/opencart.stpl |  59 ++
 .../templates/web/nginx/php-fpm/opencart.tpl  |  54 ++
 .../templates/web/nginx/php-fpm/owncloud.stpl |  85 ++
 .../templates/web/nginx/php-fpm/owncloud.tpl  |  81 ++
 .../10/templates/web/nginx/php-fpm/piwik.stpl |  73 ++
 .../10/templates/web/nginx/php-fpm/piwik.tpl  |  69 ++
 .../templates/web/nginx/php-fpm/pyrocms.stpl  |  66 ++
 .../templates/web/nginx/php-fpm/pyrocms.tpl   |  62 ++
 .../10/templates/web/nginx/php-fpm/sendy.stpl |  88 ++
 .../10/templates/web/nginx/php-fpm/sendy.tpl  |  86 ++
 .../web/nginx/php-fpm/wordpress.stpl          |  55 ++
 .../templates/web/nginx/php-fpm/wordpress.tpl |  51 ++
 .../web/nginx/php-fpm/wordpress2.stpl         |  67 ++
 .../web/nginx/php-fpm/wordpress2.tpl          |  63 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.stpl |  72 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.tpl  |  67 ++
 .../web/nginx/private-force-https.stpl        |  38 +
 .../web/nginx/private-force-https.tpl         |   8 +
 .../10/templates/web/nginx/private-hosting.sh |  11 +
 .../templates/web/nginx/private-hosting.stpl  |  40 +
 .../templates/web/nginx/private-hosting.tpl   |  37 +
 .../web/nginx/vesta-webmail-phpmyadmin.stpl   |  52 ++
 .../web/nginx/vesta-webmail-phpmyadmin.tpl    |   8 +
 .../debian/10/templates/web/nginx/vesta.stpl  |  32 +
 .../debian/10/templates/web/nginx/vesta.tpl   |   8 +
 .../10/templates/web/php-fpm/default.tpl      |  21 +
 .../10/templates/web/php-fpm/no-php.tpl       |  20 +
 .../10/templates/web/php-fpm/socket.tpl       |  24 +
 .../web/skel/document_errors/403.html         |  29 +
 .../web/skel/document_errors/404.html         |  28 +
 .../web/skel/document_errors/50x.html         |  29 +
 .../templates/web/skel/public_html/index.html |  26 +
 .../templates/web/skel/public_html/robots.txt |   3 +
 .../web/skel/public_shtml/index.html          |  26 +
 .../web/skel/public_shtml/robots.txt          |   3 +
 .../debian/10/templates/web/suspend/.htaccess |   2 +
 .../10/templates/web/suspend/index.html       |  25 +
 .../10/templates/web/webalizer/webalizer.tpl  | 110 +++
 install/debian/10/vsftpd/vsftpd.conf          |  26 +
 148 files changed, 8599 insertions(+)
 create mode 100644 install/debian/10/apache2/apache2.conf
 create mode 100644 install/debian/10/apache2/status.conf
 create mode 100644 install/debian/10/bind/named.conf
 create mode 100644 install/debian/10/clamav/clamd.conf
 create mode 100644 install/debian/10/deb_signing.key
 create mode 100644 install/debian/10/dovecot/conf.d/10-auth.conf
 create mode 100644 install/debian/10/dovecot/conf.d/10-logging.conf
 create mode 100644 install/debian/10/dovecot/conf.d/10-mail.conf
 create mode 100644 install/debian/10/dovecot/conf.d/10-master.conf
 create mode 100644 install/debian/10/dovecot/conf.d/10-ssl.conf
 create mode 100644 install/debian/10/dovecot/conf.d/20-imap.conf
 create mode 100644 install/debian/10/dovecot/conf.d/20-pop3.conf
 create mode 100644 install/debian/10/dovecot/conf.d/auth-passwdfile.conf.ext
 create mode 100644 install/debian/10/dovecot/dovecot.conf
 create mode 100644 install/debian/10/exim/dnsbl.conf
 create mode 100644 install/debian/10/exim/exim4.conf.template
 create mode 100644 install/debian/10/exim/spam-blocks.conf
 create mode 100644 install/debian/10/fail2ban/action.d/vesta.conf
 create mode 100644 install/debian/10/fail2ban/filter.d/vesta.conf
 create mode 100644 install/debian/10/fail2ban/jail.local
 create mode 100644 install/debian/10/firewall/ports.conf
 create mode 100644 install/debian/10/firewall/rules.conf
 create mode 100644 install/debian/10/logrotate/apache2
 create mode 100644 install/debian/10/logrotate/dovecot
 create mode 100644 install/debian/10/logrotate/nginx
 create mode 100644 install/debian/10/logrotate/vesta
 create mode 100644 install/debian/10/mysql/my-large.cnf
 create mode 100644 install/debian/10/mysql/my-medium.cnf
 create mode 100644 install/debian/10/mysql/my-small.cnf
 create mode 100644 install/debian/10/nginx/nginx.conf
 create mode 100644 install/debian/10/nginx/phpmyadmin.inc
 create mode 100644 install/debian/10/nginx/phppgadmin.inc
 create mode 100644 install/debian/10/nginx/status.conf
 create mode 100644 install/debian/10/nginx/webmail.inc
 create mode 100644 install/debian/10/packages/default.pkg
 create mode 100644 install/debian/10/pga/config.inc.php
 create mode 100644 install/debian/10/pga/phppgadmin.conf
 create mode 100644 install/debian/10/php-fpm/www.conf
 create mode 100644 install/debian/10/pma/apache.conf
 create mode 100644 install/debian/10/pma/config.inc.php
 create mode 100644 install/debian/10/pma/create_tables.sql
 create mode 100644 install/debian/10/pma/pma.sh
 create mode 100644 install/debian/10/postgresql/pg_hba.conf
 create mode 100644 install/debian/10/proftpd/proftpd.conf
 create mode 100644 install/debian/10/roundcube/apache.conf
 create mode 100644 install/debian/10/roundcube/config.inc.php
 create mode 100644 install/debian/10/roundcube/db.inc.php
 create mode 100644 install/debian/10/roundcube/main.inc.php
 create mode 100644 install/debian/10/roundcube/vesta.php
 create mode 100644 install/debian/10/sudo/admin
 create mode 100755 install/debian/10/templates/dns/child-ns.tpl
 create mode 100755 install/debian/10/templates/dns/default.tpl
 create mode 100755 install/debian/10/templates/dns/gmail.tpl
 create mode 100755 install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh
 create mode 100644 install/debian/10/templates/web/apache2/PHP-FPM-73-public.stpl
 create mode 100644 install/debian/10/templates/web/apache2/PHP-FPM-73-public.tpl
 create mode 100755 install/debian/10/templates/web/apache2/PHP-FPM-73.sh
 create mode 100644 install/debian/10/templates/web/apache2/PHP-FPM-73.stpl
 create mode 100644 install/debian/10/templates/web/apache2/PHP-FPM-73.tpl
 create mode 100755 install/debian/10/templates/web/awstats/awstats.tpl
 create mode 100755 install/debian/10/templates/web/awstats/index.tpl
 create mode 100755 install/debian/10/templates/web/awstats/nav.tpl
 create mode 100644 install/debian/10/templates/web/nginx/force-https-legacy.stpl
 create mode 100644 install/debian/10/templates/web/nginx/force-https-legacy.tpl
 create mode 100644 install/debian/10/templates/web/nginx/force-https-public.stpl
 create mode 100644 install/debian/10/templates/web/nginx/force-https-public.tpl
 create mode 100644 install/debian/10/templates/web/nginx/force-https.stpl
 create mode 100644 install/debian/10/templates/web/nginx/force-https.tpl
 create mode 100644 install/debian/10/templates/web/nginx/hosting-public.stpl
 create mode 100644 install/debian/10/templates/web/nginx/hosting-public.tpl
 create mode 100644 install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
 create mode 100644 install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
 create mode 100644 install/debian/10/templates/web/nginx/hosting-webmail.stpl
 create mode 100644 install/debian/10/templates/web/nginx/hosting-webmail.tpl
 create mode 100755 install/debian/10/templates/web/nginx/hosting.sh
 create mode 100755 install/debian/10/templates/web/nginx/hosting.stpl
 create mode 100755 install/debian/10/templates/web/nginx/hosting.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/codeigniter2.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/codeigniter3.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/datalife_engine.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/default.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/default.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/dokuwiki.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/drupal6.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/drupal7.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/drupal7.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/drupal8.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/drupal8.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/joomla.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/joomla.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/laravel.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/laravel.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/magento.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/magento.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/modx.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/modx.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/moodle.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/moodle.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/no-php.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/no-php.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/odoo.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/odoo.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/opencart.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/opencart.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/owncloud.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/piwik.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/piwik.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/pyrocms.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/sendy.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/sendy.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/wordpress.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/wordpress2.tpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
 create mode 100644 install/debian/10/templates/web/nginx/private-force-https.stpl
 create mode 100644 install/debian/10/templates/web/nginx/private-force-https.tpl
 create mode 100755 install/debian/10/templates/web/nginx/private-hosting.sh
 create mode 100644 install/debian/10/templates/web/nginx/private-hosting.stpl
 create mode 100644 install/debian/10/templates/web/nginx/private-hosting.tpl
 create mode 100644 install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl
 create mode 100644 install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.tpl
 create mode 100644 install/debian/10/templates/web/nginx/vesta.stpl
 create mode 100644 install/debian/10/templates/web/nginx/vesta.tpl
 create mode 100644 install/debian/10/templates/web/php-fpm/default.tpl
 create mode 100644 install/debian/10/templates/web/php-fpm/no-php.tpl
 create mode 100644 install/debian/10/templates/web/php-fpm/socket.tpl
 create mode 100755 install/debian/10/templates/web/skel/document_errors/403.html
 create mode 100755 install/debian/10/templates/web/skel/document_errors/404.html
 create mode 100755 install/debian/10/templates/web/skel/document_errors/50x.html
 create mode 100755 install/debian/10/templates/web/skel/public_html/index.html
 create mode 100755 install/debian/10/templates/web/skel/public_html/robots.txt
 create mode 100755 install/debian/10/templates/web/skel/public_shtml/index.html
 create mode 100755 install/debian/10/templates/web/skel/public_shtml/robots.txt
 create mode 100755 install/debian/10/templates/web/suspend/.htaccess
 create mode 100755 install/debian/10/templates/web/suspend/index.html
 create mode 100755 install/debian/10/templates/web/webalizer/webalizer.tpl
 create mode 100644 install/debian/10/vsftpd/vsftpd.conf

diff --git a/install/debian/10/apache2/apache2.conf b/install/debian/10/apache2/apache2.conf
new file mode 100644
index 00000000..2756132a
--- /dev/null
+++ b/install/debian/10/apache2/apache2.conf
@@ -0,0 +1,94 @@
+# It is split into several files forming the configuration hierarchy outlined
+# below, all located in the /etc/apache2/ directory:
+#
+#	/etc/apache2/
+#	|-- apache2.conf
+#	|	`--  ports.conf
+#	|-- mods-enabled
+#	|	|-- *.load
+#	|	`-- *.conf
+#	|-- conf.d
+#	|	`-- *
+
+# Global configuration
+PidFile ${APACHE_PID_FILE}
+Timeout 30
+KeepAlive Off
+MaxKeepAliveRequests 100
+KeepAliveTimeout 10
+
+<IfModule mpm_prefork_module>
+    StartServers          8
+    MinSpareServers       5
+    MaxSpareServers      20
+    ServerLimit         256
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_worker_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_event_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+# These need to be set in /etc/apache2/envvars
+User ${APACHE_RUN_USER}
+Group ${APACHE_RUN_GROUP}
+#User www-data
+#Group www-data
+
+AccessFileName .htaccess
+
+<Files ~ "^\.ht">
+    Order allow,deny
+    Deny from all
+    Satisfy all
+</Files>
+
+DefaultType None
+HostnameLookups Off
+
+ErrorLog ${APACHE_LOG_DIR}/error.log
+LogLevel warn
+
+# Include module configuration:
+Include mods-enabled/*.load
+Include mods-enabled/*.conf
+
+# Include list of ports to listen on and which to use for name based vhosts
+Include ports.conf
+
+LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
+LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
+LogFormat "%h %l %u %t \"%r\" %>s %O" common
+LogFormat "%{Referer}i -> %U" referer
+LogFormat "%{User-agent}i" agent
+LogFormat "%b" bytes
+
+Include conf.d/
+
+# Include the virtual host configurations:
+#Include sites-enabled/
+
+ErrorDocument 403 /error/403.html
+ErrorDocument 404 /error/404.html
+ErrorDocument 500 /error/50x.html
+ErrorDocument 501 /error/50x.html
+ErrorDocument 502 /error/50x.html
+ErrorDocument 503 /error/50x.html
+ErrorDocument 506 /error/50x.html
diff --git a/install/debian/10/apache2/status.conf b/install/debian/10/apache2/status.conf
new file mode 100644
index 00000000..da9d9633
--- /dev/null
+++ b/install/debian/10/apache2/status.conf
@@ -0,0 +1,8 @@
+Listen 127.0.0.1:8081
+<Location /server-status>
+    SetHandler server-status
+    Order deny,allow
+    Deny from all
+    Allow from 127.0.0.1
+    Allow from all
+</Location>
diff --git a/install/debian/10/bind/named.conf b/install/debian/10/bind/named.conf
new file mode 100644
index 00000000..ed6ece88
--- /dev/null
+++ b/install/debian/10/bind/named.conf
@@ -0,0 +1,12 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
+
diff --git a/install/debian/10/clamav/clamd.conf b/install/debian/10/clamav/clamd.conf
new file mode 100644
index 00000000..504cf8f3
--- /dev/null
+++ b/install/debian/10/clamav/clamd.conf
@@ -0,0 +1,60 @@
+#Automatically Generated by clamav-base postinst
+#To reconfigure clamd run #dpkg-reconfigure clamav-base
+#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
+LocalSocket /var/run/clamav/clamd.ctl
+FixStaleSocket true
+LocalSocketGroup clamav
+LocalSocketMode 666
+# TemporaryDirectory is not set to its default /tmp here to make overriding
+# the default with environment variables TMPDIR/TMP/TEMP possible
+User clamav
+# AllowSupplementaryGroups true
+ScanMail true
+ScanArchive true
+ArchiveBlockEncrypted false
+MaxDirectoryRecursion 15
+FollowDirectorySymlinks false
+FollowFileSymlinks false
+ReadTimeout 180
+MaxThreads 12
+MaxConnectionQueueLength 15
+LogSyslog false
+LogFacility LOG_LOCAL6
+LogClean false
+LogVerbose true
+PidFile /var/run/clamav/clamd.pid
+DatabaseDirectory /var/lib/clamav
+SelfCheck 3600
+Foreground false
+Debug false
+ScanPE true
+ScanOLE2 true
+ScanHTML true
+ExitOnOOM false
+LeaveTemporaryFiles false
+AlgorithmicDetection true
+ScanELF true
+IdleTimeout 30
+PhishingSignatures true
+PhishingScanURLs true
+PhishingAlwaysBlockSSLMismatch false
+PhishingAlwaysBlockCloak false
+DetectPUA false
+ScanPartialMessages false
+HeuristicScanPrecedence false
+StructuredDataDetection false
+CommandReadTimeout 5
+SendBufTimeout 200
+MaxQueue 100
+ExtendedDetectionInfo true
+OLE2BlockMacros false
+StreamMaxLength 25M
+LogFile /var/log/clamav/clamav.log
+LogTime true
+LogFileUnlock false
+LogFileMaxSize 0
+Bytecode true
+BytecodeSecurity TrustSigned
+BytecodeTimeout 60000
+OfficialDatabaseOnly false
+CrossFilesystems true
diff --git a/install/debian/10/deb_signing.key b/install/debian/10/deb_signing.key
new file mode 100644
index 00000000..2ad2db8b
--- /dev/null
+++ b/install/debian/10/deb_signing.key
@@ -0,0 +1,30 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.12 (GNU/Linux)
+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+=J2HJ
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/install/debian/10/dovecot/conf.d/10-auth.conf b/install/debian/10/dovecot/conf.d/10-auth.conf
new file mode 100644
index 00000000..dfcc8311
--- /dev/null
+++ b/install/debian/10/dovecot/conf.d/10-auth.conf
@@ -0,0 +1,4 @@
+disable_plaintext_auth = no
+auth_verbose = yes
+auth_mechanisms = plain login
+!include auth-passwdfile.conf.ext
diff --git a/install/debian/10/dovecot/conf.d/10-logging.conf b/install/debian/10/dovecot/conf.d/10-logging.conf
new file mode 100644
index 00000000..a5f207d5
--- /dev/null
+++ b/install/debian/10/dovecot/conf.d/10-logging.conf
@@ -0,0 +1 @@
+log_path = /var/log/dovecot.log
diff --git a/install/debian/10/dovecot/conf.d/10-mail.conf b/install/debian/10/dovecot/conf.d/10-mail.conf
new file mode 100644
index 00000000..55313419
--- /dev/null
+++ b/install/debian/10/dovecot/conf.d/10-mail.conf
@@ -0,0 +1,4 @@
+mail_privileged_group = mail
+mail_access_groups = mail
+mail_location = maildir:%h/mail/%d/%n
+pop3_uidl_format = %08Xu%08Xv
diff --git a/install/debian/10/dovecot/conf.d/10-master.conf b/install/debian/10/dovecot/conf.d/10-master.conf
new file mode 100644
index 00000000..a75a9aaa
--- /dev/null
+++ b/install/debian/10/dovecot/conf.d/10-master.conf
@@ -0,0 +1,29 @@
+service imap-login {
+  inet_listener imap {
+  }
+  inet_listener imaps {
+  }
+}
+
+service pop3-login {
+  inet_listener pop3 {
+  }
+  inet_listener pop3s {
+  }
+}
+
+
+service imap {
+}
+
+service pop3 {
+}
+
+service auth {
+  unix_listener auth-client {
+    group = mail
+    mode = 0660
+    user = dovecot
+  }
+  user = dovecot
+}
diff --git a/install/debian/10/dovecot/conf.d/10-ssl.conf b/install/debian/10/dovecot/conf.d/10-ssl.conf
new file mode 100644
index 00000000..3aaff6ee
--- /dev/null
+++ b/install/debian/10/dovecot/conf.d/10-ssl.conf
@@ -0,0 +1,3 @@
+ssl = yes
+ssl_cert = </usr/local/vesta/ssl/certificate.crt
+ssl_key = </usr/local/vesta/ssl/certificate.key
diff --git a/install/debian/10/dovecot/conf.d/20-imap.conf b/install/debian/10/dovecot/conf.d/20-imap.conf
new file mode 100644
index 00000000..1a459f8e
--- /dev/null
+++ b/install/debian/10/dovecot/conf.d/20-imap.conf
@@ -0,0 +1,58 @@
+##
+## IMAP specific settings
+##
+
+protocol imap {
+  # Maximum IMAP command line length. Some clients generate very long command
+  # lines with huge mailboxes, so you may need to raise this if you get
+  # "Too long argument" or "IMAP command line too large" errors often.
+  #imap_max_line_length = 64k
+
+  # Maximum number of IMAP connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  #mail_max_userip_connections = 10
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # IMAP logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #imap_logout_format = bytes=%i/%o
+
+  # Override the IMAP CAPABILITY response. If the value begins with '+',
+  # add the given capabilities on top of the defaults (e.g. +XFOO XBAR).
+  #imap_capability = 
+
+  # How long to wait between "OK Still here" notifications when client is
+  # IDLEing.
+  #imap_idle_notify_interval = 2 mins
+
+  # ID field names and values to send to clients. Using * as the value makes
+  # Dovecot use the default value. The following fields have default values
+  # currently: name, version, os, os-version, support-url, support-email.
+  #imap_id_send = 
+
+  # ID fields sent by client to log. * means everything.
+  #imap_id_log =
+
+  # Workarounds for various client bugs:
+  #   delay-newmail:
+  #     Send EXISTS/RECENT new mail notifications only when replying to NOOP
+  #     and CHECK commands. Some clients ignore them otherwise, for example OSX
+  #     Mail (<v2.1). Outlook Express breaks more badly though, without this it
+  #     may show user "Message no longer in server" errors. Note that OE6 still
+  #     breaks even with this workaround if synchronization is set to
+  #     "Headers Only".
+  #   tb-extra-mailbox-sep:
+  #     Thunderbird gets somehow confused with LAYOUT=fs (mbox and dbox) and
+  #     adds extra '/' suffixes to mailbox names. This option causes Dovecot to
+  #     ignore the extra '/' instead of treating it as invalid mailbox name.
+  #   tb-lsub-flags:
+  #     Show \Noselect flags for LSUB replies with LAYOUT=fs (e.g. mbox).
+  #     This makes Thunderbird realize they aren't selectable and show them
+  #     greyed out, instead of only later giving "not selectable" popup error.
+  #
+  # The list is space-separated.
+  #imap_client_workarounds = 
+}
diff --git a/install/debian/10/dovecot/conf.d/20-pop3.conf b/install/debian/10/dovecot/conf.d/20-pop3.conf
new file mode 100644
index 00000000..a3a43b88
--- /dev/null
+++ b/install/debian/10/dovecot/conf.d/20-pop3.conf
@@ -0,0 +1,91 @@
+##
+## POP3 specific settings
+##
+
+protocol pop3 {
+  # Don't try to set mails non-recent or seen with POP3 sessions. This is
+  # mostly intended to reduce disk I/O. With maildir it doesn't move files
+  # from new/ to cur/, with mbox it doesn't write Status-header.
+  #pop3_no_flag_updates = no
+
+  # Support LAST command which exists in old POP3 specs, but has been removed
+  # from new ones. Some clients still wish to use this though. Enabling this
+  # makes RSET command clear all \Seen flags from messages.
+  #pop3_enable_last = no
+
+  # If mail has X-UIDL header, use it as the mail's UIDL.
+  #pop3_reuse_xuidl = no
+
+  # Keep the mailbox locked for the entire POP3 session.
+  #pop3_lock_session = no
+
+  # POP3 requires message sizes to be listed as if they had CR+LF linefeeds.
+  # Many POP3 servers violate this by returning the sizes with LF linefeeds,
+  # because it's faster to get. When this setting is enabled, Dovecot still
+  # tries to do the right thing first, but if that requires opening the
+  # message, it fallbacks to the easier (but incorrect) size.
+  #pop3_fast_size_lookups = no
+
+  # POP3 UIDL (unique mail identifier) format to use. You can use following
+  # variables, along with the variable modifiers described in
+  # doc/wiki/Variables.txt (e.g. %Uf for the filename in uppercase)
+  #
+  #  %v - Mailbox's IMAP UIDVALIDITY
+  #  %u - Mail's IMAP UID
+  #  %m - MD5 sum of the mailbox headers in hex (mbox only)
+  #  %f - filename (maildir only)
+  #  %g - Mail's GUID
+  #
+  # If you want UIDL compatibility with other POP3 servers, use:
+  #  UW's ipop3d         : %08Xv%08Xu
+  #  Courier             : %f or %v-%u (both might be used simultaneosly)
+  #  Cyrus (<= 2.1.3)    : %u
+  #  Cyrus (>= 2.1.4)    : %v.%u
+  #  Dovecot v0.99.x     : %v.%u
+  #  tpop3d              : %Mf
+  #
+  # Note that Outlook 2003 seems to have problems with %v.%u format which was
+  # Dovecot's default, so if you're building a new server it would be a good
+  # idea to change this. %08Xu%08Xv should be pretty fail-safe.
+  #
+  #pop3_uidl_format = %08Xu%08Xv
+
+  # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes
+  # won't change those UIDLs. Currently this works only with Maildir.
+  #pop3_save_uidl = no
+
+  # What to do about duplicate UIDLs if they exist?
+  #   allow: Show duplicates to clients.
+  #   rename: Append a temporary -2, -3, etc. counter after the UIDL.
+  #pop3_uidl_duplicates = allow
+
+  # POP3 logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #  %t - number of TOP commands
+  #  %p - number of bytes sent to client as a result of TOP command
+  #  %r - number of RETR commands
+  #  %b - number of bytes sent to client as a result of RETR command
+  #  %d - number of deleted messages
+  #  %m - number of messages (before deletion)
+  #  %s - mailbox size in bytes (before deletion)
+  #  %u - old/new UIDL hash. may help finding out if UIDLs changed unexpectedly
+  #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
+
+  # Maximum number of POP3 connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  #mail_max_userip_connections = 10
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # Workarounds for various client bugs:
+  #   outlook-no-nuls:
+  #     Outlook and Outlook Express hang if mails contain NUL characters.
+  #     This setting replaces them with 0x80 character.
+  #   oe-ns-eoh:
+  #     Outlook Express and Netscape Mail breaks if end of headers-line is
+  #     missing. This option simply sends it if it's missing.
+  # The list is space-separated.
+  #pop3_client_workarounds = 
+}
diff --git a/install/debian/10/dovecot/conf.d/auth-passwdfile.conf.ext b/install/debian/10/dovecot/conf.d/auth-passwdfile.conf.ext
new file mode 100644
index 00000000..75e6e115
--- /dev/null
+++ b/install/debian/10/dovecot/conf.d/auth-passwdfile.conf.ext
@@ -0,0 +1,9 @@
+passdb {
+  driver = passwd-file
+  args = scheme=MD5-CRYPT username_format=%n /etc/exim4/domains/%d/passwd
+}
+
+userdb {
+  driver = passwd-file
+  args = username_format=%n /etc/exim4/domains/%d/passwd
+}
diff --git a/install/debian/10/dovecot/dovecot.conf b/install/debian/10/dovecot/dovecot.conf
new file mode 100644
index 00000000..0a855351
--- /dev/null
+++ b/install/debian/10/dovecot/dovecot.conf
@@ -0,0 +1,4 @@
+protocols = imap pop3
+listen = *, ::
+base_dir = /var/run/dovecot/
+!include conf.d/*.conf
diff --git a/install/debian/10/exim/dnsbl.conf b/install/debian/10/exim/dnsbl.conf
new file mode 100644
index 00000000..5166b255
--- /dev/null
+++ b/install/debian/10/exim/dnsbl.conf
@@ -0,0 +1,2 @@
+bl.spamcop.net
+zen.spamhaus.org
diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
new file mode 100644
index 00000000..bfb98e0b
--- /dev/null
+++ b/install/debian/10/exim/exim4.conf.template
@@ -0,0 +1,382 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+disable_ipv6=true
+add_environment=<; PATH=/bin:/usr/bin
+keep_environment=
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/certificate.crt
+tls_privatekey = /usr/local/vesta/ssl/certificate.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 5s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lc:${domain:$h_from:}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+begin acl
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth requried
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = *
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{100K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = nobody:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/$domain/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #helo_data = $sender_address_domain
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  from = "${local_part}@${domain}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################
diff --git a/install/debian/10/exim/spam-blocks.conf b/install/debian/10/exim/spam-blocks.conf
new file mode 100644
index 00000000..e69de29b
diff --git a/install/debian/10/fail2ban/action.d/vesta.conf b/install/debian/10/fail2ban/action.d/vesta.conf
new file mode 100644
index 00000000..0edfc349
--- /dev/null
+++ b/install/debian/10/fail2ban/action.d/vesta.conf
@@ -0,0 +1,9 @@
+# Fail2Ban configuration file for vesta
+
+[Definition]
+
+actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
+actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
+actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
+actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
+actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>
diff --git a/install/debian/10/fail2ban/filter.d/vesta.conf b/install/debian/10/fail2ban/filter.d/vesta.conf
new file mode 100644
index 00000000..36ec1001
--- /dev/null
+++ b/install/debian/10/fail2ban/filter.d/vesta.conf
@@ -0,0 +1,10 @@
+# Fail2Ban filter for unsuccessful Vesta authentication attempts
+#
+
+[INCLUDES]
+before = common.conf
+
+[Definition]
+failregex =  .* <HOST> failed to login
+ignoreregex =
+
diff --git a/install/debian/10/fail2ban/jail.local b/install/debian/10/fail2ban/jail.local
new file mode 100644
index 00000000..eccea068
--- /dev/null
+++ b/install/debian/10/fail2ban/jail.local
@@ -0,0 +1,39 @@
+[ssh-iptables]
+enabled  = true
+filter   = sshd
+action   = vesta[name=SSH]
+logpath  = /var/log/auth.log
+maxretry = 5
+
+[vsftpd-iptables]
+enabled  = false
+filter   = vsftpd
+action   = vesta[name=FTP]
+logpath  = /var/log/vsftpd.log
+maxretry = 5
+
+[exim-iptables]
+enabled = true
+filter  = exim
+action  = vesta[name=MAIL]
+logpath = /var/log/exim4/mainlog
+
+[dovecot-iptables]
+enabled = true
+filter  = dovecot
+action  = vesta[name=MAIL]
+logpath = /var/log/dovecot.log
+
+[mysqld-iptables]
+enabled  = false
+filter   = mysqld-auth
+action   = vesta[name=DB]
+logpath  = /var/log/mysql.log
+maxretry = 5
+
+[vesta-iptables]
+enabled = true
+filter  = vesta
+action  = vesta[name=VESTA]
+logpath = /var/log/vesta/auth.log
+maxretry = 5
diff --git a/install/debian/10/firewall/ports.conf b/install/debian/10/firewall/ports.conf
new file mode 100644
index 00000000..b730d012
--- /dev/null
+++ b/install/debian/10/firewall/ports.conf
@@ -0,0 +1,17 @@
+PROTOCOL='TCP' PORT='20'
+PROTOCOL='TCP' PORT='21'
+PROTOCOL='TCP' PORT='22'
+PROTOCOL='TCP' PORT='25'
+PROTOCOL='TCP' PORT='53'
+PROTOCOL='UDP' PORT='53'
+PROTOCOL='TCP' PORT='80'
+PROTOCOL='TCP' PORT='443'
+PROTOCOL='TCP' PORT='110'
+PROTOCOL='UDP' PORT='123'
+PROTOCOL='TCP' PORT='143'
+PROTOCOL='TCP' PORT='3306'
+PROTOCOL='TCP' PORT='5432'
+PROTOCOL='TCP' PORT='8080'
+PROTOCOL='TCP' PORT='8433'
+PROTOCOL='TCP' PORT='8083'
+PROTOCOL='TCP' PORT='12000:12100'
diff --git a/install/debian/10/firewall/rules.conf b/install/debian/10/firewall/rules.conf
new file mode 100644
index 00000000..fba98e1e
--- /dev/null
+++ b/install/debian/10/firewall/rules.conf
@@ -0,0 +1,11 @@
+RULE='1' ACTION='ACCEPT' PROTOCOL='ICMP' PORT='0' IP='0.0.0.0/0' COMMENT='PING' SUSPENDED='no' TIME='17:13:48' DATE='2014-09-16'
+RULE='2' ACTION='ACCEPT' PROTOCOL='TCP' PORT='8083' IP='0.0.0.0/0' COMMENT='VESTA' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='3' ACTION='ACCEPT' PROTOCOL='TCP' PORT='3306,5432' IP='0.0.0.0/0' COMMENT='DB' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='4' ACTION='ACCEPT' PROTOCOL='TCP' PORT='143,993' IP='0.0.0.0/0' COMMENT='IMAP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='5' ACTION='ACCEPT' PROTOCOL='TCP' PORT='110,995' IP='0.0.0.0/0' COMMENT='POP3' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='6' ACTION='ACCEPT' PROTOCOL='TCP' PORT='25,465,587,2525' IP='0.0.0.0/0' COMMENT='SMTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='7' ACTION='ACCEPT' PROTOCOL='TCP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='8' ACTION='ACCEPT' PROTOCOL='UDP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='9' ACTION='ACCEPT' PROTOCOL='TCP' PORT='21,12000-12100' IP='0.0.0.0/0' COMMENT='FTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='10' ACTION='ACCEPT' PROTOCOL='TCP' PORT='80,443' IP='0.0.0.0/0' COMMENT='WEB' SUSPENDED='no' TIME='17:04:27' DATE='2014-09-24'
+RULE='11' ACTION='ACCEPT' PROTOCOL='TCP' PORT='22' IP='0.0.0.0/0' COMMENT='SSH' SUSPENDED='no' TIME='17:14:41' DATE='2014-09-16'
diff --git a/install/debian/10/logrotate/apache2 b/install/debian/10/logrotate/apache2
new file mode 100644
index 00000000..27629d0d
--- /dev/null
+++ b/install/debian/10/logrotate/apache2
@@ -0,0 +1,19 @@
+/var/log/apache2/*.log /var/log/apache2/domains/*log {
+        weekly
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 root adm
+        sharedscripts
+        postrotate
+                /etc/init.d/apache2 reload > /dev/null || true
+                [ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+        prerotate
+                if [ -d /etc/logrotate.d/httpd-prerotate ]; then \
+                        run-parts /etc/logrotate.d/httpd-prerotate; \
+                fi; \
+        endscript
+}
diff --git a/install/debian/10/logrotate/dovecot b/install/debian/10/logrotate/dovecot
new file mode 100644
index 00000000..ac4fd6e9
--- /dev/null
+++ b/install/debian/10/logrotate/dovecot
@@ -0,0 +1,12 @@
+/var/log/dovecot*.log {
+  weekly
+  rotate 4
+  missingok
+  notifempty
+  compress
+  delaycompress
+  sharedscripts
+  postrotate
+    doveadm log reopen
+  endscript
+}
diff --git a/install/debian/10/logrotate/nginx b/install/debian/10/logrotate/nginx
new file mode 100644
index 00000000..d667f213
--- /dev/null
+++ b/install/debian/10/logrotate/nginx
@@ -0,0 +1,13 @@
+/var/log/nginx/*log /var/log/nginx/domains/*log {
+        daily
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 nginx adm
+        sharedscripts
+        postrotate
+                [ -f /var/run/nginx.pid ] && kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+}
diff --git a/install/debian/10/logrotate/vesta b/install/debian/10/logrotate/vesta
new file mode 100644
index 00000000..027a3439
--- /dev/null
+++ b/install/debian/10/logrotate/vesta
@@ -0,0 +1,7 @@
+/usr/local/vesta/log/*.log {
+    missingok
+    notifempty
+    size 30k
+    yearly
+    create 0600 root root
+}
diff --git a/install/debian/10/mysql/my-large.cnf b/install/debian/10/mysql/my-large.cnf
new file mode 100644
index 00000000..d0bab390
--- /dev/null
+++ b/install/debian/10/mysql/my-large.cnf
@@ -0,0 +1,42 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 256M
+max_allowed_packet = 32M
+table_open_cache = 256
+sort_buffer_size = 1M
+read_buffer_size = 1M
+read_rnd_buffer_size = 4M
+myisam_sort_buffer_size = 64M
+thread_cache_size = 8
+query_cache_size= 16M
+thread_concurrency = 8
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=200
+max_user_connections=50
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/10/mysql/my-medium.cnf b/install/debian/10/mysql/my-medium.cnf
new file mode 100644
index 00000000..1c10ab9a
--- /dev/null
+++ b/install/debian/10/mysql/my-medium.cnf
@@ -0,0 +1,40 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+  
+skip-external-locking
+key_buffer_size = 16M
+max_allowed_packet = 16M
+table_open_cache = 64
+sort_buffer_size = 512K
+net_buffer_length = 8K
+read_buffer_size = 256K
+read_rnd_buffer_size = 512K
+myisam_sort_buffer_size = 8M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=70
+max_user_connections=30
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/10/mysql/my-small.cnf b/install/debian/10/mysql/my-small.cnf
new file mode 100644
index 00000000..26a80478
--- /dev/null
+++ b/install/debian/10/mysql/my-small.cnf
@@ -0,0 +1,40 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 16K
+max_allowed_packet = 1M
+table_open_cache = 4
+sort_buffer_size = 64K
+read_buffer_size = 256K
+read_rnd_buffer_size = 256K
+net_buffer_length = 2K
+thread_stack = 240K
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=30
+max_user_connections=20
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/10/nginx/nginx.conf b/install/debian/10/nginx/nginx.conf
new file mode 100644
index 00000000..1eef1672
--- /dev/null
+++ b/install/debian/10/nginx/nginx.conf
@@ -0,0 +1,137 @@
+# Server globals
+user                    www-data;
+worker_processes        auto;
+worker_rlimit_nofile    65535;
+timer_resolution         50ms; #In order to free some CPU cycles
+error_log               /var/log/nginx/error.log crit;
+pid                     /var/run/nginx.pid;
+
+
+# Worker config
+events {
+        worker_connections  1024;
+        use                 epoll;
+        multi_accept        on;
+}
+
+
+http {
+    # Main settings
+    sendfile                        on;
+    tcp_nopush                      on;
+    tcp_nodelay                     on;
+    client_header_timeout           1m;
+    client_body_timeout             1m;
+    client_header_buffer_size       2k;
+    client_body_buffer_size         256k;
+    client_max_body_size            256m;
+    large_client_header_buffers     4   8k;
+    send_timeout                    30;
+    keepalive_timeout               60 60;
+    reset_timedout_connection       on;
+    server_tokens                   off;
+    server_name_in_redirect         off;
+    server_names_hash_max_size      512;
+    server_names_hash_bucket_size   512;
+
+
+    # Log format
+    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
+                        '"$status" $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  bytes   '$body_bytes_sent';
+    #access_log          /var/log/nginx/access.log main;
+    access_log off;
+
+
+    # Mime settings
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+
+    # Compression
+    gzip                on;
+    gzip_comp_level     9;
+    gzip_min_length     512;
+    gzip_buffers        8 64k;
+    gzip_types          text/plain text/css text/javascript text/js text/xml application/json application/javascript application/x-javascript application/xml application/xml+rss application/x-font-ttf image/svg+xml font/opentype;
+    gzip_proxied        any;
+    gzip_disable        "MSIE [1-6]\.";
+
+    # Proxy settings
+    proxy_redirect      off;
+    proxy_set_header    Host            $host;
+    proxy_set_header    X-Real-IP       $remote_addr;
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_header   Set-Cookie;
+    proxy_connect_timeout   90;
+    proxy_send_timeout  90;
+    proxy_read_timeout  90;
+    proxy_buffers       32 4k;
+
+
+    # Cloudflare https://www.cloudflare.com/ips
+    set_real_ip_from 103.21.244.0/22;
+    set_real_ip_from 103.22.200.0/22;
+    set_real_ip_from 103.31.4.0/22;
+    set_real_ip_from 104.16.0.0/12;
+    set_real_ip_from 108.162.192.0/18;
+    set_real_ip_from 131.0.72.0/22;
+    set_real_ip_from 141.101.64.0/18;
+    set_real_ip_from 162.158.0.0/15;
+    set_real_ip_from 172.64.0.0/13;
+    set_real_ip_from 173.245.48.0/20;
+    set_real_ip_from 188.114.96.0/20;
+    set_real_ip_from 190.93.240.0/20;
+    set_real_ip_from 197.234.240.0/22;
+    set_real_ip_from 198.41.128.0/17;
+    set_real_ip_from 2400:cb00::/32;
+    set_real_ip_from 2606:4700::/32;
+    set_real_ip_from 2803:f800::/32;
+    set_real_ip_from 2405:b500::/32;
+    set_real_ip_from 2405:8100::/32;
+    set_real_ip_from 2c0f:f248::/32;
+    set_real_ip_from 2a06:98c0::/29;
+    real_ip_header     CF-Connecting-IP;
+
+
+    # SSL PCI Compliance
+    ssl_session_cache   shared:SSL:10m;
+    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
+
+
+    # Error pages
+    error_page          403          /error/403.html;
+    error_page          404          /error/404.html;
+    error_page          502 503 504  /error/50x.html;
+
+
+    # Cache settings
+    proxy_cache_path /var/cache/nginx levels=2 keys_zone=cache:10m inactive=60m max_size=1024m;
+    proxy_cache_key "$host$request_uri $cookie_user";
+    proxy_temp_path  /var/cache/nginx/temp;
+    proxy_ignore_headers Expires Cache-Control;
+    proxy_cache_use_stale error timeout invalid_header http_502;
+    proxy_cache_valid any 1d;
+
+
+    # Cache bypass
+    map $http_cookie $no_cache {
+        default 0;
+        ~SESS 1;
+        ~wordpress_logged_in 1;
+    }
+
+
+    # File cache settings
+    open_file_cache          max=10000 inactive=30s;
+    open_file_cache_valid    60s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors   off;
+
+
+    # Wildcard include
+    include             /etc/nginx/conf.d/*.conf;
+}
diff --git a/install/debian/10/nginx/phpmyadmin.inc b/install/debian/10/nginx/phpmyadmin.inc
new file mode 100644
index 00000000..1feb8546
--- /dev/null
+++ b/install/debian/10/nginx/phpmyadmin.inc
@@ -0,0 +1,18 @@
+location /phpmyadmin {
+    alias /usr/share/phpmyadmin/;
+
+    location ~ /(libraries|setup) {
+        return 404;
+    }
+
+    location ~ ^/phpmyadmin/(.*\.php)$ {
+        alias /usr/share/phpmyadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+    location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
+        root /usr/share/;
+    }
+}
diff --git a/install/debian/10/nginx/phppgadmin.inc b/install/debian/10/nginx/phppgadmin.inc
new file mode 100644
index 00000000..cd1e5806
--- /dev/null
+++ b/install/debian/10/nginx/phppgadmin.inc
@@ -0,0 +1,11 @@
+location /phppgadmin {
+    alias /usr/share/phppgadmin/;
+
+    location ~ ^/phppgadmin/(.*\.php)$ {
+        alias /usr/share/phppgadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/debian/10/nginx/status.conf b/install/debian/10/nginx/status.conf
new file mode 100644
index 00000000..c0bcd069
--- /dev/null
+++ b/install/debian/10/nginx/status.conf
@@ -0,0 +1,9 @@
+server {
+    listen       127.0.0.1:8084 default;
+    server_name  _;
+    server_name_in_redirect  off;
+    location / {
+        stub_status on;
+        access_log   off;
+   }
+}
diff --git a/install/debian/10/nginx/webmail.inc b/install/debian/10/nginx/webmail.inc
new file mode 100644
index 00000000..ad66895b
--- /dev/null
+++ b/install/debian/10/nginx/webmail.inc
@@ -0,0 +1,15 @@
+location /webmail {
+    alias /var/lib/roundcube/;
+
+    location ~ /(config|temp|logs) {
+        return 404;
+    }
+
+    location ~ ^/webmail/(.*\.php)$ {
+        alias /var/lib/roundcube/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/debian/10/packages/default.pkg b/install/debian/10/packages/default.pkg
new file mode 100644
index 00000000..de293236
--- /dev/null
+++ b/install/debian/10/packages/default.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='PHP-FPM-73'
+PROXY_TEMPLATE='hosting'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='unlimited'
+WEB_ALIASES='unlimited'
+DNS_DOMAINS='unlimited'
+DNS_RECORDS='unlimited'
+MAIL_DOMAINS='unlimited'
+MAIL_ACCOUNTS='unlimited'
+DATABASES='unlimited'
+CRON_JOBS='unlimited'
+DISK_QUOTA='unlimited'
+BANDWIDTH='unlimited'
+NS='YOURHOSTNAME1,YOURHOSTNAME2'
+SHELL='nologin'
+BACKUPS='2'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/debian/10/pga/config.inc.php b/install/debian/10/pga/config.inc.php
new file mode 100644
index 00000000..1eec9776
--- /dev/null
+++ b/install/debian/10/pga/config.inc.php
@@ -0,0 +1,159 @@
+<?php
+
+    /**
+     * Central phpPgAdmin configuration.  As a user you may modify the
+     * settings here for your particular configuration.
+     *
+     * $Id: config.inc.php-dist,v 1.55 2008/02/18 21:10:31 xzilla Exp $
+     */
+
+    // An example server.  Create as many of these as you wish,
+    // indexed from zero upwards.
+
+    // Display name for the server on the login screen
+    $conf['servers'][0]['desc'] = 'PostgreSQL';
+
+    // Hostname or IP address for server.  Use '' for UNIX domain socket.
+    // use 'localhost' for TCP/IP connection on this computer
+    $conf['servers'][0]['host'] = 'localhost';
+
+    // Database port on server (5432 is the PostgreSQL default)
+    $conf['servers'][0]['port'] = 5432;
+
+    // Database SSL mode
+    // Possible options: disable, allow, prefer, require
+    // To require SSL on older servers use option: legacy
+    // To ignore the SSL mode, use option: unspecified
+    $conf['servers'][0]['sslmode'] = 'allow';
+
+    // Change the default database only if you cannot connect to template1.
+    // For a PostgreSQL 8.1+ server, you can set this to 'postgres'.
+    $conf['servers'][0]['defaultdb'] = 'template1';
+
+    // Specify the path to the database dump utilities for this server.
+    // You can set these to '' if no dumper is available.
+    $conf['servers'][0]['pg_dump_path'] = '/usr/bin/pg_dump';
+    $conf['servers'][0]['pg_dumpall_path'] = '/usr/bin/pg_dumpall';
+
+    // Slony (www.slony.info) support?
+    $conf['servers'][0]['slony_support'] = false;
+    // Specify the path to the Slony SQL scripts (where slony1_base.sql is located, etc.)
+    // No trailing slash.
+    $conf['servers'][0]['slony_sql'] = '/usr/share/pgsql';
+
+    // Example for a second server (PostgreSQL for Windows)
+    //$conf['servers'][1]['desc'] = 'Test Server';
+    //$conf['servers'][1]['host'] = '127.0.0.1';
+    //$conf['servers'][1]['port'] = 5432;
+    //$conf['servers'][1]['sslmode'] = 'allow';
+    //$conf['servers'][1]['defaultdb'] = 'template1';
+    //$conf['servers'][1]['pg_dump_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dump.exe';
+    //$conf['servers'][1]['pg_dumpall_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dumpall.exe';
+    //$conf['servers'][1]['slony_support'] = false;
+    //$conf['servers'][1]['slony_sql'] = 'C:\\Program Files\\PostgreSQL\\8.0\\share';
+
+
+    // Example of groups definition.
+    // Groups allow administrators to logicaly group servers together under group nodes in the left browser tree
+    //
+    // The group '0' description
+    //$conf['srv_groups'][0]['desc'] = 'group one';
+    //
+    // Add here servers indexes belonging to the group '0' seperated by comma
+    //$conf['srv_groups'][0]['servers'] = '0,1,2'; 
+    //
+    // A server can belong to multi groups
+    //$conf['srv_groups'][1]['desc'] = 'group two';
+    //$conf['srv_groups'][1]['servers'] = '3,1';
+
+
+    // Default language. E.g.: 'english', 'polish', etc.  See lang/ directory
+    // for all possibilities. If you specify 'auto' (the default) it will use 
+    // your browser preference.
+    $conf['default_lang'] = 'auto';
+
+    // AutoComplete uses AJAX interaction to list foreign key values 
+    // on insert fields. It currently only works on single column 
+    // foreign keys. You can choose one of the following values:
+    // 'default on' enables AutoComplete and turns it on by default.
+    // 'default off' enables AutoComplete but turns it off by default.
+    // 'disable' disables AutoComplete.
+    $conf['autocomplete'] = 'default on';
+
+    // If extra login security is true, then logins via phpPgAdmin with no
+    // password or certain usernames (pgsql, postgres, root, administrator)
+    // will be denied. Only set this false once you have read the FAQ and
+    // understand how to change PostgreSQL's pg_hba.conf to enable
+    // passworded local connections.
+    $conf['extra_login_security'] = true;
+
+    // Only show owned databases?
+    // Note: This will simply hide other databases in the list - this does
+    // not in any way prevent your users from seeing other database by
+    // other means. (e.g. Run 'SELECT * FROM pg_database' in the SQL area.)
+    $conf['owned_only'] = false;
+
+    // Display comments on objects?  Comments are a good way of documenting
+    // a database, but they do take up space in the interface.
+    $conf['show_comments'] = true;
+
+    // Display "advanced" objects? Setting this to true will show 
+    // aggregates, types, operators, operator classes, conversions, 
+    // languages and casts in phpPgAdmin. These objects are rarely 
+    // administered and can clutter the interface.
+    $conf['show_advanced'] = false;
+
+    // Display "system" objects?
+    $conf['show_system'] = false;
+
+    // Display reports feature?  For this feature to work, you must
+    // install the reports database as explained in the INSTALL file.
+    $conf['show_reports'] = true;
+
+    // Database and table for reports
+    $conf['reports_db'] = 'phppgadmin';
+    $conf['reports_schema'] = 'public';
+    $conf['reports_table'] = 'ppa_reports';
+
+    // Only show owned reports?
+    // Note: This does not prevent people from accessing other reports by
+    // other means.
+    $conf['owned_reports_only'] = false;
+
+    // Minimum length users can set their password to.
+    $conf['min_password_length'] = 1;
+
+    // Width of the left frame in pixels (object browser)
+    $conf['left_width'] = 200;
+
+    // Which look & feel theme to use
+    $conf['theme'] = 'default';
+
+    // Show OIDs when browsing tables?
+    $conf['show_oids'] = false;
+
+    // Max rows to show on a page when browsing record sets
+    $conf['max_rows'] = 30;
+
+    // Max chars of each field to display by default in browse mode
+    $conf['max_chars'] = 50;
+
+    // Send XHTML strict headers?
+    $conf['use_xhtml_strict'] = false;
+
+    // Base URL for PostgreSQL documentation.
+    // '%s', if present, will be replaced with the PostgreSQL version
+    // (e.g. 8.4 )
+    $conf['help_base'] = 'http://www.postgresql.org/docs/%s/interactive/';
+
+    // Configuration for ajax scripts
+    // Time in seconds. If set to 0, refreshing data using ajax will be disabled (locks and activity pages)
+    $conf['ajax_refresh'] = 3;
+
+    /*****************************************
+     * Don't modify anything below this line *
+     *****************************************/
+
+    $conf['version'] = 19;
+
+?>
diff --git a/install/debian/10/pga/phppgadmin.conf b/install/debian/10/pga/phppgadmin.conf
new file mode 100644
index 00000000..f39247d6
--- /dev/null
+++ b/install/debian/10/pga/phppgadmin.conf
@@ -0,0 +1,31 @@
+Alias /phppgadmin /usr/share/phppgadmin
+
+<Directory /usr/share/phppgadmin>
+
+DirectoryIndex index.php
+AllowOverride None
+
+order deny,allow
+deny from all
+allow from 127.0.0.0/255.0.0.0 ::1/128
+allow from all
+
+<IfModule mod_php5.c>
+  php_flag magic_quotes_gpc Off
+  php_flag track_vars On
+  php_value include_path .
+</IfModule>
+<IfModule !mod_php5.c>
+  <IfModule mod_actions.c>
+    <IfModule mod_cgi.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+    <IfModule mod_cgid.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+  </IfModule>
+</IfModule>
+
+</Directory>
diff --git a/install/debian/10/php-fpm/www.conf b/install/debian/10/php-fpm/www.conf
new file mode 100644
index 00000000..3c87f33c
--- /dev/null
+++ b/install/debian/10/php-fpm/www.conf
@@ -0,0 +1,11 @@
+[www]
+listen = 127.0.0.1:9000
+listen.allowed_clients = 127.0.0.1
+
+user = www-data
+group = www-data
+
+pm = ondemand
+pm.max_children = 2
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
diff --git a/install/debian/10/pma/apache.conf b/install/debian/10/pma/apache.conf
new file mode 100644
index 00000000..2a8f69e2
--- /dev/null
+++ b/install/debian/10/pma/apache.conf
@@ -0,0 +1,42 @@
+# phpMyAdmin default Apache configuration
+
+Alias /phpmyadmin /usr/share/phpmyadmin
+
+<Directory /usr/share/phpmyadmin>
+	Options FollowSymLinks
+	DirectoryIndex index.php
+
+	<IfModule mod_php5.c>
+		AddType application/x-httpd-php .php
+
+		php_flag magic_quotes_gpc Off
+		php_flag track_vars On
+		php_flag register_globals Off
+		php_admin_flag allow_url_fopen Off
+		php_value include_path .
+		php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp
+		php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/:/usr/share/php/php-gettext
+	</IfModule>
+
+</Directory>
+
+# Authorize for setup
+<Directory /usr/share/phpmyadmin/setup>
+    <IfModule mod_authn_file.c>
+    AuthType Basic
+    AuthName "phpMyAdmin Setup"
+    AuthUserFile /etc/phpmyadmin/htpasswd.setup
+    </IfModule>
+    Require valid-user
+</Directory>
+
+# Disallow web access to directories that don't need it
+<Directory /usr/share/phpmyadmin/libraries>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+<Directory /usr/share/phpmyadmin/setup/lib>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+
diff --git a/install/debian/10/pma/config.inc.php b/install/debian/10/pma/config.inc.php
new file mode 100644
index 00000000..eafc6d67
--- /dev/null
+++ b/install/debian/10/pma/config.inc.php
@@ -0,0 +1,146 @@
+<?php
+/**
+ * Debian local configuration file
+ *
+ * This file overrides the settings made by phpMyAdmin interactive setup
+ * utility.
+ *
+ * For example configuration see
+ *   /usr/share/doc/phpmyadmin/examples/config.sample.inc.php
+ * or
+ *   /usr/share/doc/phpmyadmin/examples/config.manyhosts.inc.php
+ *
+ * NOTE: do not add security sensitive data to this file (like passwords)
+ * unless you really know what you're doing. If you do, any user that can
+ * run PHP or CGI on your webserver will be able to read them. If you still
+ * want to do this, make sure to properly secure the access to this file
+ * (also on the filesystem level).
+ */
+
+function check_file_access($path)
+{
+    if (is_readable($path)) {
+        return true;
+    } else {
+        error_log(
+            'phpmyadmin: Failed to load ' . $path
+            . ' Check group www-data has read access and open_basedir restrictions.'
+        );
+        return false;
+    }
+}
+
+// Load secret generated on postinst
+if (check_file_access('/var/lib/phpmyadmin/blowfish_secret.inc.php')) {
+    require('/var/lib/phpmyadmin/blowfish_secret.inc.php');
+}
+
+// Load autoconf local config
+if (check_file_access('/var/lib/phpmyadmin/config.inc.php')) {
+    require('/var/lib/phpmyadmin/config.inc.php');
+}
+
+/**
+ * Server(s) configuration
+ */
+$i = 0;
+// The $cfg['Servers'] array starts with $cfg['Servers'][1].  Do not use $cfg['Servers'][0].
+// You can disable a server config entry by setting host to ''.
+$i++;
+
+/**
+ * Read configuration from dbconfig-common
+ * You can regenerate it using: dpkg-reconfigure -plow phpmyadmin
+ */
+if (check_file_access('/etc/phpmyadmin/config-db.php')) {
+    require('/etc/phpmyadmin/config-db.php');
+}
+
+/* Configure according to dbconfig-common if enabled */
+if (!empty($dbname)) {
+    /* Authentication type */
+    $cfg['Servers'][$i]['auth_type'] = 'cookie';
+    /* Server parameters */
+    if (empty($dbserver)) $dbserver = 'localhost';
+    $cfg['Servers'][$i]['host'] = $dbserver;
+
+    if (!empty($dbport) || $dbserver != 'localhost') {
+        $cfg['Servers'][$i]['connect_type'] = 'tcp';
+        $cfg['Servers'][$i]['port'] = $dbport;
+    }
+    //$cfg['Servers'][$i]['compress'] = false;
+    /* Select mysqli if your server has it */
+    $cfg['Servers'][$i]['extension'] = 'mysqli';
+    /* Optional: User for advanced features */
+    $cfg['Servers'][$i]['controluser'] = $dbuser;
+    $cfg['Servers'][$i]['controlpass'] = $dbpass;
+    /* Optional: Advanced phpMyAdmin features */
+    $cfg['Servers'][$i]['pmadb'] = $dbname;
+    $cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
+    $cfg['Servers'][$i]['relation'] = 'pma__relation';
+    $cfg['Servers'][$i]['table_info'] = 'pma__table_info';
+    $cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
+    $cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
+    $cfg['Servers'][$i]['column_info'] = 'pma__column_info';
+    $cfg['Servers'][$i]['history'] = 'pma__history';
+    $cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
+    $cfg['Servers'][$i]['designer_coords'] = 'pma__designer_coords';
+    $cfg['Servers'][$i]['tracking'] = 'pma__tracking';
+    $cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
+    $cfg['Servers'][$i]['recent'] = 'pma__recent';
+
+    /* Uncomment the following to enable logging in to passwordless accounts,
+     * after taking note of the associated security risks. */
+    // $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+    /* Advance to next server for rest of config */
+    $i++;
+}
+
+/* Authentication type */
+//$cfg['Servers'][$i]['auth_type'] = 'cookie';
+/* Server parameters */
+//$cfg['Servers'][$i]['host'] = 'localhost';
+//$cfg['Servers'][$i]['connect_type'] = 'tcp';
+//$cfg['Servers'][$i]['compress'] = false;
+/* Select mysqli if your server has it */
+//$cfg['Servers'][$i]['extension'] = 'mysql';
+/* Optional: User for advanced features */
+// $cfg['Servers'][$i]['controluser'] = 'pma';
+// $cfg['Servers'][$i]['controlpass'] = 'pmapass';
+
+/* Storage database and tables */
+// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
+// $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+// $cfg['Servers'][$i]['relation'] = 'pma_relation';
+// $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+// $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+// $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+// $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+// $cfg['Servers'][$i]['history'] = 'pma_history';
+// $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+// $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+// $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+// $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+// $cfg['Servers'][$i]['recent'] = 'pma_recent';
+/* Uncomment the following to enable logging in to passwordless accounts,
+ * after taking note of the associated security risks. */
+// $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+/*
+ * End of servers configuration
+ */
+
+/*
+ * Directories for saving/loading files from server
+ */
+$cfg['UploadDir'] = '';
+$cfg['SaveDir'] = '';
+
+/* Support additional configurations */
+foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
+{
+    include($filename);
+}
+
+
diff --git a/install/debian/10/pma/create_tables.sql b/install/debian/10/pma/create_tables.sql
new file mode 100644
index 00000000..3583a6ed
--- /dev/null
+++ b/install/debian/10/pma/create_tables.sql
@@ -0,0 +1,385 @@
+-- --------------------------------------------------------
+-- SQL Commands to set up the pmadb as described in the documentation.
+--
+-- This file is meant for use with MySQL 5 and above!
+--
+-- This script expects the user pma to already be existing. If we would put a
+-- line here to create him too many users might just use this script and end
+-- up with having the same password for the controluser.
+--
+-- This user "pma" must be defined in config.inc.php (controluser/controlpass)
+--
+-- Please don't forget to set up the tablenames in config.inc.php
+--
+
+-- --------------------------------------------------------
+
+--
+-- Database : `phpmyadmin`
+--
+CREATE DATABASE IF NOT EXISTS `phpmyadmin`
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+USE phpmyadmin;
+
+-- --------------------------------------------------------
+
+--
+-- Privileges
+--
+-- (activate this statement if necessary)
+-- GRANT SELECT, INSERT, DELETE, UPDATE, ALTER ON `phpmyadmin`.* TO
+--    'pma'@localhost;
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__usergroups`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__usergroups` (
+  `usergroup` varchar(64) NOT NULL,
+  `tab` varchar(64) NOT NULL,
+  `allowed` enum('Y','N') NOT NULL DEFAULT 'N',
+  PRIMARY KEY (`usergroup`,`tab`,`allowed`)
+)
+  COMMENT='User groups with configured menu items'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__designer_coords`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__designer_coords` (
+  `db_name` varchar(64) COLLATE utf8_bin NOT NULL DEFAULT '',
+  `table_name` varchar(64) COLLATE utf8_bin NOT NULL DEFAULT '',
+  `x` int(11) DEFAULT NULL,
+  `y` int(11) DEFAULT NULL,
+  `v` tinyint(4) DEFAULT NULL,
+  `h` tinyint(4) DEFAULT NULL,
+  PRIMARY KEY (`db_name`,`table_name`)
+) ENGINE=MyISAM DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='Table coordinates for Designer';
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__bookmark`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__bookmark` (
+  `id` int(11) NOT NULL auto_increment,
+  `dbase` varchar(255) NOT NULL default '',
+  `user` varchar(255) NOT NULL default '',
+  `label` varchar(255) COLLATE utf8_general_ci NOT NULL default '',
+  `query` text NOT NULL,
+  PRIMARY KEY  (`id`)
+)
+  COMMENT='Bookmarks'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__column_info`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__column_info` (
+  `id` int(5) unsigned NOT NULL auto_increment,
+  `db_name` varchar(64) NOT NULL default '',
+  `table_name` varchar(64) NOT NULL default '',
+  `column_name` varchar(64) NOT NULL default '',
+  `comment` varchar(255) COLLATE utf8_general_ci NOT NULL default '',
+  `mimetype` varchar(255) COLLATE utf8_general_ci NOT NULL default '',
+  `transformation` varchar(255) NOT NULL default '',
+  `transformation_options` varchar(255) NOT NULL default '',
+  `input_transformation` varchar(255) NOT NULL default '',
+  `input_transformation_options` varchar(255) NOT NULL default '',
+  PRIMARY KEY  (`id`),
+  UNIQUE KEY `db_name` (`db_name`,`table_name`,`column_name`)
+)
+  COMMENT='Column information for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__history`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__history` (
+  `id` bigint(20) unsigned NOT NULL auto_increment,
+  `username` varchar(64) NOT NULL default '',
+  `db` varchar(64) NOT NULL default '',
+  `table` varchar(64) NOT NULL default '',
+  `timevalue` timestamp NOT NULL default CURRENT_TIMESTAMP,
+  `sqlquery` text NOT NULL,
+  PRIMARY KEY  (`id`),
+  KEY `username` (`username`,`db`,`table`,`timevalue`)
+)
+  COMMENT='SQL history for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__pdf_pages`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__pdf_pages` (
+  `db_name` varchar(64) NOT NULL default '',
+  `page_nr` int(10) unsigned NOT NULL auto_increment,
+  `page_descr` varchar(50) COLLATE utf8_general_ci NOT NULL default '',
+  PRIMARY KEY  (`page_nr`),
+  KEY `db_name` (`db_name`)
+)
+  COMMENT='PDF relation pages for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__recent`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__recent` (
+  `username` varchar(64) NOT NULL,
+  `tables` text NOT NULL,
+  PRIMARY KEY (`username`)
+)
+  COMMENT='Recently accessed tables'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__favorite`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__favorite` (
+  `username` varchar(64) NOT NULL,
+  `tables` text NOT NULL,
+  PRIMARY KEY (`username`)
+)
+  COMMENT='Favorite tables'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__table_uiprefs`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__table_uiprefs` (
+  `username` varchar(64) NOT NULL,
+  `db_name` varchar(64) NOT NULL,
+  `table_name` varchar(64) NOT NULL,
+  `prefs` text NOT NULL,
+  `last_update` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY (`username`,`db_name`,`table_name`)
+)
+  COMMENT='Tables'' UI preferences'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__relation`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__relation` (
+  `master_db` varchar(64) NOT NULL default '',
+  `master_table` varchar(64) NOT NULL default '',
+  `master_field` varchar(64) NOT NULL default '',
+  `foreign_db` varchar(64) NOT NULL default '',
+  `foreign_table` varchar(64) NOT NULL default '',
+  `foreign_field` varchar(64) NOT NULL default '',
+  PRIMARY KEY  (`master_db`,`master_table`,`master_field`),
+  KEY `foreign_field` (`foreign_db`,`foreign_table`)
+)
+  COMMENT='Relation table'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__table_coords`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__table_coords` (
+  `db_name` varchar(64) NOT NULL default '',
+  `table_name` varchar(64) NOT NULL default '',
+  `pdf_page_number` int(11) NOT NULL default '0',
+  `x` float unsigned NOT NULL default '0',
+  `y` float unsigned NOT NULL default '0',
+  PRIMARY KEY  (`db_name`,`table_name`,`pdf_page_number`)
+)
+  COMMENT='Table coordinates for phpMyAdmin PDF output'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__table_info`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__table_info` (
+  `db_name` varchar(64) NOT NULL default '',
+  `table_name` varchar(64) NOT NULL default '',
+  `display_field` varchar(64) NOT NULL default '',
+  PRIMARY KEY  (`db_name`,`table_name`)
+)
+  COMMENT='Table information for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__tracking`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__tracking` (
+  `db_name` varchar(64) NOT NULL,
+  `table_name` varchar(64) NOT NULL,
+  `version` int(10) unsigned NOT NULL,
+  `date_created` datetime NOT NULL,
+  `date_updated` datetime NOT NULL,
+  `schema_snapshot` text NOT NULL,
+  `schema_sql` text,
+  `data_sql` longtext,
+  `tracking` set('UPDATE','REPLACE','INSERT','DELETE','TRUNCATE','CREATE DATABASE','ALTER DATABASE','DROP DATABASE','CREATE TABLE','ALTER TABLE','RENAME TABLE','DROP TABLE','CREATE INDEX','DROP INDEX','CREATE VIEW','ALTER VIEW','DROP VIEW') default NULL,
+  `tracking_active` int(1) unsigned NOT NULL default '1',
+  PRIMARY KEY  (`db_name`,`table_name`,`version`)
+)
+  COMMENT='Database changes tracking for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__userconfig`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__userconfig` (
+  `username` varchar(64) NOT NULL,
+  `timevalue` timestamp NOT NULL default CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  `config_data` text NOT NULL,
+  PRIMARY KEY  (`username`)
+)
+  COMMENT='User preferences storage for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__users`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__users` (
+  `username` varchar(64) NOT NULL,
+  `usergroup` varchar(64) NOT NULL,
+  PRIMARY KEY (`username`,`usergroup`)
+)
+  COMMENT='Users and their assignments to user groups'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__usergroups`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__usergroups` (
+  `usergroup` varchar(64) NOT NULL,
+  `tab` varchar(64) NOT NULL,
+  `allowed` enum('Y','N') NOT NULL DEFAULT 'N',
+  PRIMARY KEY (`usergroup`,`tab`,`allowed`)
+)
+  COMMENT='User groups with configured menu items'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__navigationhiding`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__navigationhiding` (
+  `username` varchar(64) NOT NULL,
+  `item_name` varchar(64) NOT NULL,
+  `item_type` varchar(64) NOT NULL,
+  `db_name` varchar(64) NOT NULL,
+  `table_name` varchar(64) NOT NULL,
+  PRIMARY KEY (`username`,`item_name`,`item_type`,`db_name`,`table_name`)
+)
+  COMMENT='Hidden items of navigation tree'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__savedsearches`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__savedsearches` (
+  `id` int(5) unsigned NOT NULL auto_increment,
+  `username` varchar(64) NOT NULL default '',
+  `db_name` varchar(64) NOT NULL default '',
+  `search_name` varchar(64) NOT NULL default '',
+  `search_data` text NOT NULL,
+  PRIMARY KEY  (`id`),
+  UNIQUE KEY `u_savedsearches_username_dbname` (`username`,`db_name`,`search_name`)
+)
+  COMMENT='Saved searches'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__central_columns`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__central_columns` (
+  `db_name` varchar(64) NOT NULL,
+  `col_name` varchar(64) NOT NULL,
+  `col_type` varchar(64) NOT NULL,
+  `col_length` text,
+  `col_collation` varchar(64) NOT NULL,
+  `col_isNull` boolean NOT NULL,
+  `col_extra` varchar(255) default '',
+  `col_default` text,
+  PRIMARY KEY (`db_name`,`col_name`)
+)
+  COMMENT='Central list of columns'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__designer_settings`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__designer_settings` (
+  `username` varchar(64) NOT NULL,
+  `settings_data` text NOT NULL,
+  PRIMARY KEY (`username`)
+)
+  COMMENT='Settings related to Designer'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__export_templates`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__export_templates` (
+  `id` int(5) unsigned NOT NULL AUTO_INCREMENT,
+  `username` varchar(64) NOT NULL,
+  `export_type` varchar(10) NOT NULL,
+  `template_name` varchar(64) NOT NULL,
+  `template_data` text NOT NULL,
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `u_user_type_template` (`username`,`export_type`,`template_name`)
+)
+  COMMENT='Saved export templates'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
\ No newline at end of file
diff --git a/install/debian/10/pma/pma.sh b/install/debian/10/pma/pma.sh
new file mode 100644
index 00000000..81878b02
--- /dev/null
+++ b/install/debian/10/pma/pma.sh
@@ -0,0 +1,146 @@
+#!/bin/bash
+# 
+# phpmyadmin-fixer
+#
+# Fixes for phpmyadmin (configuration storage and some extended features)
+#
+# Original Version by Pavel Galkin (https://skurudo.ru)
+# https://github.com/skurudo/phpmyadmin-fixer
+#
+# Changed some lines to fit to Hestia Configuration.
+#
+
+PASS=$(gen_pass)
+
+#ubuntu phpmyadmin path
+pmapath1="/etc/phpmyadmin/config.inc.php"
+pmapath2="/usr/share/phpmyadmin/config.sample.inc.php"
+
+#delete old and paste new value 
+sed -i '/pmadb/d' $pmapath1
+sed -i '/controluser/d' $pmapath1
+sed -i '/bookmarktable/d' $pmapath1
+sed -i '/relation/d' $pmapath1
+sed -i '/userconfig/d' $pmapath1
+sed -i '/table_info/d' $pmapath1
+sed -i '/column_info/d' $pmapath1
+sed -i '/history/d' $pmapath1
+sed -i '/recent/d' $pmapath1
+sed -i '/table_uiprefs/d' $pmapath1
+sed -i '/tracking/d' $pmapath1
+sed -i '/table_coords/d' $pmapath1
+sed -i '/pdf_pages/d' $pmapath1
+sed -i '/designer_coords/d' $pmapath1
+sed -i '/controlpass/d' $pmapath1
+sed -i '/\$i = 1; /d' $pmapath1
+echo "\$i = 1;" >> $pmapath1
+sed -i '/savedsearches/d' $pmapath1
+sed -i '/navigationhiding/d' $pmapath1
+sed -i '/users/d' $pmapath1
+sed -i '/controlpass/d' $pmapath1
+sed -i '/favorite/d' $pmapath1
+sed -i '/usergroups/d' $pmapath1
+sed -i '/central_columns/d' $pmapath1
+sed -i '/designer_settings/d' $pmapath1
+sed -i '/export_templates/d' $pmapath1
+echo "\$cfg['Servers'][\$i]['favorite'] = 'pma__favorite';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['central_columns'] = 'pma__central_columns';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['designer_settings'] = 'pma__designer_settings';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['export_templates'] = 'pma__export_templates';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['savedsearches'] = 'pma__savedsearches';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['navigationhiding'] = 'pma__navigationhiding';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['users'] = 'pma__users';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['pmadb'] = 'phpmyadmin';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['controluser'] = 'pma';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['controlpass'] = '$PASS';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['bookmarktable'] = 'pma__bookmark';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['relation'] = 'pma__relation';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['userconfig'] = 'pma__userconfig';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['table_info'] = 'pma__table_info';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['column_info'] = 'pma__column_info';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['history'] = 'pma__history';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['recent'] = 'pma__recent';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['table_uiprefs'] = 'pma__table_uiprefs';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['tracking'] = 'pma__tracking';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['table_coords'] = 'pma__table_coords';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['pdf_pages'] = 'pma__pdf_pages';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['designer_coords'] = 'pma__designer_coords';" >> $pmapath1
+
+sed -i '/pmadb/d' $pmapath2
+sed -i '/controluser/d' $pmapath2
+sed -i '/bookmarktable/d' $pmapath2
+sed -i '/relation/d' $pmapath2
+sed -i '/userconfig/d' $pmapath2
+sed -i '/table_info/d' $pmapath2
+sed -i '/column_info/d' $pmapath2
+sed -i '/history/d' $pmapath2
+sed -i '/recent/d' $pmapath2
+sed -i '/table_uiprefs/d' $pmapath2
+sed -i '/tracking/d' $pmapath2
+sed -i '/table_coords/d' $pmapath2
+sed -i '/pdf_pages/d' $pmapath2
+sed -i '/designer_coords/d' $pmapath2
+sed -i '/controlpass/d' $pmapath2
+sed -i '/savedsearches/d' $pmapath2
+sed -i '/navigationhiding/d' $pmapath2
+sed -i '/users/d' $pmapath2
+sed -i '/controlpass/d' $pmapath2
+sed -i '/favorite/d' $pmapath2
+sed -i '/usergroups/d' $pmapath2
+sed -i '/central_columns/d' $pmapath2
+sed -i '/designer_settings/d' $pmapath2
+sed -i '/export_templates/d' $pmapath2
+echo "\$cfg['Servers'][\$i]['favorite'] = 'pma__favorite';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['central_columns'] = 'pma__central_columns';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['designer_settings'] = 'pma__designer_settings';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['export_templates'] = 'pma__export_templates';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['savedsearches'] = 'pma__savedsearches';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['navigationhiding'] = 'pma__navigationhiding';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['users'] = 'pma__users';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['pmadb'] = 'phpmyadmin';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['controluser'] = 'pma';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['controlpass'] = '$PASS';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['bookmarktable'] = 'pma__bookmark';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['relation'] = 'pma__relation';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['userconfig'] = 'pma__userconfig';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['table_info'] = 'pma__table_info';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['column_info'] = 'pma__column_info';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['history'] = 'pma__history';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['recent'] = 'pma__recent';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['table_uiprefs'] = 'pma__table_uiprefs';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['tracking'] = 'pma__tracking';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['table_coords'] = 'pma__table_coords';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['pdf_pages'] = 'pma__pdf_pages';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['designer_coords'] = 'pma__designer_coords';" >> $pmapath2
+
+#SOME WORK with DATABASE (table / user)
+PMADB=phpmyadmin
+PMAUSER=pma
+
+#DROP USER and TABLE
+mysql -uroot <<MYSQL_PMA1
+DROP USER '$PMAUSER'@'localhost';
+DROP DATABASE $PMADB;
+FLUSH PRIVILEGES;
+MYSQL_PMA1
+
+#CREATE PMA USER
+mysql -uroot <<MYSQL_PMA2
+CREATE USER '$PMAUSER'@'localhost' IDENTIFIED BY '$PASS';
+CREATE DATABASE $PMADB;
+MYSQL_PMA2
+
+#GRANT PMA USE SOME RIGHTS
+mysql -uroot <<MYSQL_PMA3
+USE $PMADB;
+GRANT USAGE ON $PMADB.* TO '$PMAUSER'@'localhost' IDENTIFIED BY '$PASS';
+GRANT ALL PRIVILEGES ON $PMADB.* TO '$PMAUSER'@'localhost';
+FLUSH PRIVILEGES;
+MYSQL_PMA3
+
+#MYSQL DB and TABLES ADDITION
+mysql -uroot < /root/phpmyadmin/create_tables.sql
\ No newline at end of file
diff --git a/install/debian/10/postgresql/pg_hba.conf b/install/debian/10/postgresql/pg_hba.conf
new file mode 100644
index 00000000..1ba43941
--- /dev/null
+++ b/install/debian/10/postgresql/pg_hba.conf
@@ -0,0 +1,11 @@
+# "local" is for Unix domain socket connections only
+local   all         all                               ident
+
+# IPv4 local connections:
+host    all         all         127.0.0.1/32          md5
+
+# IPv6 local connections:
+host    all         all         ::1/128               md5
+
+# Others
+host    all         all         0.0.0.0/0             md5
diff --git a/install/debian/10/proftpd/proftpd.conf b/install/debian/10/proftpd/proftpd.conf
new file mode 100644
index 00000000..69ec6b2e
--- /dev/null
+++ b/install/debian/10/proftpd/proftpd.conf
@@ -0,0 +1,32 @@
+ServerName                      "FTP"
+ServerIdent                     on "FTP Server ready."
+ServerAdmin                     root@localhost
+DefaultServer                   on
+DefaultRoot                  ~ !adm
+
+<IfModule mod_vroot.c>
+    VRootEngine                 on
+    VRootAlias                  /etc/security/pam_env.conf etc/security/pam_env.conf
+</IfModule>
+
+AuthPAMConfig                   proftpd
+AuthOrder                       mod_auth_pam.c* mod_auth_unix.c
+UseReverseDNS                   off
+User                            proftpd
+Group                           nogroup
+MaxInstances                    20
+UseSendfile                     off
+LogFormat                       default "%h %l %u %t \"%r\" %s %b"
+LogFormat                       auth    "%v [%P] %h %t \"%r\" %s"
+ListOptions                     -a
+RequireValidShell               off
+PassivePorts                    12000 12100
+
+<Global>
+  Umask                         002
+  IdentLookups                  off
+  AllowOverwrite                yes
+  <Limit ALL SITE_CHMOD>
+    AllowAll
+  </Limit>
+</Global>
diff --git a/install/debian/10/roundcube/apache.conf b/install/debian/10/roundcube/apache.conf
new file mode 100644
index 00000000..a0c87bcc
--- /dev/null
+++ b/install/debian/10/roundcube/apache.conf
@@ -0,0 +1,40 @@
+Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/
+Alias /roundcube /var/lib/roundcube
+Alias /webmail /var/lib/roundcube
+
+# Access to tinymce files
+<Directory "/usr/share/tinymce/www/">
+      Options Indexes MultiViews FollowSymLinks
+      AllowOverride None
+      Order allow,deny
+      allow from all
+</Directory>
+
+<Directory /var/lib/roundcube/>
+  Options +FollowSymLinks
+  # This is needed to parse /var/lib/roundcube/.htaccess. See its
+  # content before setting AllowOverride to None.
+  AllowOverride All
+  order allow,deny
+  allow from all
+</Directory>
+
+# Protecting basic directories:
+<Directory /var/lib/roundcube/config>
+        Options -FollowSymLinks
+        AllowOverride None
+</Directory>
+
+<Directory /var/lib/roundcube/temp>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
+
+<Directory /var/lib/roundcube/logs>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
diff --git a/install/debian/10/roundcube/config.inc.php b/install/debian/10/roundcube/config.inc.php
new file mode 100644
index 00000000..0c82b1bc
--- /dev/null
+++ b/install/debian/10/roundcube/config.inc.php
@@ -0,0 +1,33 @@
+<?php
+
+// Password Plugin options
+// -----------------------
+// A driver to use for password change. Default: "sql".
+// See README file for list of supported driver names.
+$rcmail_config['password_driver'] = 'vesta';
+
+// Require the new password to be a certain length.
+// set to blank to allow passwords of any length
+$rcmail_config['password_minimum_length'] = 6;
+
+// Require the new password to contain a letter and punctuation character
+// Change to false to remove this check.
+$rcmail_config['password_require_nonalpha'] = false;
+
+// Enables logging of password changes into logs/password
+$rcmail_config['password_log'] = false;
+
+// Comma-separated list of login exceptions for which password change
+// will be not available (no Password tab in Settings)
+$rcmail_config['password_login_exceptions'] = null;
+
+
+// By default domains in variables are using unicode.
+// Enable this option to use punycoded names
+$rcmail_config['password_idn_ascii'] = false;
+
+// Vesta Driver options
+// -----------------------
+// Control Panel host
+$rcmail_config['password_vesta_host'] = 'localhost';
+$rcmail_config['password_vesta_port'] = '8083';
diff --git a/install/debian/10/roundcube/db.inc.php b/install/debian/10/roundcube/db.inc.php
new file mode 100644
index 00000000..5268a309
--- /dev/null
+++ b/install/debian/10/roundcube/db.inc.php
@@ -0,0 +1,66 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Configuration file for database access                                |
+ |                                                                       |
+ | This file is part of the RoundCube Webmail client                     |
+ | Copyright (C) 2005-2008, RoundCube Dev. - Switzerland                 |
+ | Licensed under the GNU GPL                                            |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// PEAR database DSN for read/write operations
+// format is db_provider://user:password@host/database 
+
+$rcmail_config['db_dsnw'] = 'mysql://roundcube:%password%@localhost/roundcube';
+// postgres example: 'pgsql://roundcube:pass@localhost/roundcubemail';
+
+// PEAR database DSN for read only operations (if empty write database will be used)
+// useful for database replication
+$rcmail_config['db_dsnr'] = '';
+
+// database backend to use (only db or mdb2 are supported)
+//$rcmail_config['db_backend'] = 'mdb2';
+
+// maximum length of a query in bytes
+$rcmail_config['db_max_length'] = 512000;  // 500K
+
+// use persistent db-connections
+// beware this will not "always" work as expected
+// see: http://www.php.net/manual/en/features.persistent-connections.php
+$rcmail_config['db_persistent'] = FALSE;
+
+
+// you can define specific table names used to store webmail data
+$rcmail_config['db_table_users'] = 'users';
+
+$rcmail_config['db_table_identities'] = 'identities';
+
+$rcmail_config['db_table_contacts'] = 'contacts';
+
+$rcmail_config['db_table_session'] = 'session';
+
+$rcmail_config['db_table_cache'] = 'cache';
+
+$rcmail_config['db_table_messages'] = 'messages';
+
+
+// you can define specific sequence names used in PostgreSQL
+$rcmail_config['db_sequence_users'] = 'user_ids';
+
+$rcmail_config['db_sequence_identities'] = 'identity_ids';
+
+$rcmail_config['db_sequence_contacts'] = 'contact_ids';
+
+$rcmail_config['db_sequence_cache'] = 'cache_ids';
+
+$rcmail_config['db_sequence_messages'] = 'message_ids';
+
+
+// end db config file
+?>
diff --git a/install/debian/10/roundcube/main.inc.php b/install/debian/10/roundcube/main.inc.php
new file mode 100644
index 00000000..97cdbf2d
--- /dev/null
+++ b/install/debian/10/roundcube/main.inc.php
@@ -0,0 +1,850 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Main configuration file                                               |
+ |                                                                       |
+ | This file is part of the Roundcube Webmail client                     |
+ | Copyright (C) 2005-2011, The Roundcube Dev Team                       |
+ |                                                                       |
+ | Licensed under the GNU General Public License version 3 or            |
+ | any later version with exceptions for skins & plugins.                |
+ | See the README file for a full license statement.                     |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// ----------------------------------
+// LOGGING/DEBUGGING
+// ----------------------------------
+
+// system error reporting: 1 = log; 2 = report (not implemented yet), 4 = show, 8 = trace
+$rcmail_config['debug_level'] = 1;
+
+// log driver:  'syslog' or 'file'.
+$rcmail_config['log_driver'] = 'file';
+
+// date format for log entries
+// (read http://php.net/manual/en/function.date.php for all format characters)  
+$rcmail_config['log_date_format'] = 'd-M-Y H:i:s O';
+
+// Syslog ident string to use, if using the 'syslog' log driver.
+$rcmail_config['syslog_id'] = 'roundcube';
+
+// Syslog facility to use, if using the 'syslog' log driver.
+// For possible values see installer or http://php.net/manual/en/function.openlog.php
+$rcmail_config['syslog_facility'] = LOG_USER;
+
+// Log sent messages to <log_dir>/sendmail or to syslog
+$rcmail_config['smtp_log'] = true;
+
+// Log successful logins to <log_dir>/userlogins or to syslog
+$rcmail_config['log_logins'] = false;
+
+// Log session authentication errors to <log_dir>/session or to syslog
+$rcmail_config['log_session'] = false;
+
+// Log SQL queries to <log_dir>/sql or to syslog
+$rcmail_config['sql_debug'] = false;
+
+// Log IMAP conversation to <log_dir>/imap or to syslog
+$rcmail_config['imap_debug'] = false;
+
+// Log LDAP conversation to <log_dir>/ldap or to syslog
+$rcmail_config['ldap_debug'] = false;
+
+// Log SMTP conversation to <log_dir>/smtp or to syslog
+$rcmail_config['smtp_debug'] = false;
+
+// ----------------------------------
+// IMAP
+// ----------------------------------
+
+// the mail host chosen to perform the log-in
+// leave blank to show a textbox at login, give a list of hosts
+// to display a pulldown menu or set one host as string.
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// Supported replacement variables:
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %s - domain name after the '@' from e-mail address provided at login screen
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['default_host'] = 'localhost';
+
+// TCP port used for IMAP connections
+$rcmail_config['default_port'] = 143;
+
+// IMAP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['imap_auth_type'] = null;
+
+// If you know your imap's folder delimiter, you can specify it here.
+// Otherwise it will be determined automatically
+$rcmail_config['imap_delimiter'] = null;
+
+// If IMAP server doesn't support NAMESPACE extension, but you're
+// using shared folders or personal root folder is non-empty, you'll need to
+// set these options. All can be strings or arrays of strings.
+// Folders need to be ended with directory separator, e.g. "INBOX."
+// (special directory "~" is an exception to this rule)
+// These can be used also to overwrite server's namespaces
+$rcmail_config['imap_ns_personal'] = null;
+$rcmail_config['imap_ns_other']    = null;
+$rcmail_config['imap_ns_shared']   = null;
+
+// By default IMAP capabilities are readed after connection to IMAP server
+// In some cases, e.g. when using IMAP proxy, there's a need to refresh the list
+// after login. Set to True if you've got this case.
+$rcmail_config['imap_force_caps'] = false;
+
+// By default list of subscribed folders is determined using LIST-EXTENDED
+// extension if available. Some servers (dovecot 1.x) returns wrong results
+// for shared namespaces in this case. http://trac.roundcube.net/ticket/1486225
+// Enable this option to force LSUB command usage instead.
+$rcmail_config['imap_force_lsub'] = false;
+
+// Some server configurations (e.g. Courier) doesn't list folders in all namespaces
+// Enable this option to force listing of folders in all namespaces
+$rcmail_config['imap_force_ns'] = false;
+
+// IMAP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['imap_timeout'] = 0;
+
+// Optional IMAP authentication identifier to be used as authorization proxy
+$rcmail_config['imap_auth_cid'] = null;
+
+// Optional IMAP authentication password to be used for imap_auth_cid
+$rcmail_config['imap_auth_pw'] = null;
+
+// Type of IMAP indexes cache. Supported values: 'db', 'apc' and 'memcache'.
+$rcmail_config['imap_cache'] = null;
+
+// Enables messages cache. Only 'db' cache is supported.
+$rcmail_config['messages_cache'] = false;
+
+
+// ----------------------------------
+// SMTP
+// ----------------------------------
+
+// SMTP server host (for sending mails).
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// If left blank, the PHP mail() function is used
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['smtp_server'] = '';
+
+// SMTP port (default is 25; use 587 for STARTTLS or 465 for the
+// deprecated SSL over SMTP (aka SMTPS))
+$rcmail_config['smtp_port'] = 25;
+
+// SMTP username (if required) if you use %u as the username Roundcube
+// will use the current username for login
+$rcmail_config['smtp_user'] = '';
+
+// SMTP password (if required) if you use %p as the password Roundcube
+// will use the current user's password for login
+$rcmail_config['smtp_pass'] = '';
+
+// SMTP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['smtp_auth_type'] = '';
+
+// Optional SMTP authentication identifier to be used as authorization proxy
+$rcmail_config['smtp_auth_cid'] = null;
+
+// Optional SMTP authentication password to be used for smtp_auth_cid
+$rcmail_config['smtp_auth_pw'] = null;
+
+// SMTP HELO host 
+// Hostname to give to the remote server for SMTP 'HELO' or 'EHLO' messages 
+// Leave this blank and you will get the server variable 'server_name' or 
+// localhost if that isn't defined. 
+$rcmail_config['smtp_helo_host'] = '';
+
+// SMTP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['smtp_timeout'] = 0;
+
+// ----------------------------------
+// SYSTEM
+// ----------------------------------
+include_once("/etc/roundcube/debian-db-roundcube.php");
+
+
+// THIS OPTION WILL ALLOW THE INSTALLER TO RUN AND CAN EXPOSE SENSITIVE CONFIG DATA.
+// ONLY ENABLE IT IF YOU'RE REALLY SURE WHAT YOU'RE DOING!
+$rcmail_config['enable_installer'] = false;
+
+// provide an URL where a user can get support for this Roundcube installation
+// PLEASE DO NOT LINK TO THE ROUNDCUBE.NET WEBSITE HERE!
+$rcmail_config['support_url'] = '';
+
+// replace Roundcube logo with this image
+// specify an URL relative to the document root of this Roundcube installation
+$rcmail_config['skin_logo'] = null;
+
+// automatically create a new Roundcube user when log-in the first time.
+// a new user will be created once the IMAP login succeeds.
+// set to false if only registered users can use this service
+$rcmail_config['auto_create_user'] = true;
+
+// use this folder to store log files (must be writeable for apache user)
+// This is used by the 'file' log driver.
+$rcmail_config['log_dir'] = '/var/log/roundcubemail/';
+
+// use this folder to store temp files (must be writeable for apache user)
+$rcmail_config['temp_dir'] = '/tmp';
+
+// lifetime of message cache
+// possible units: s, m, h, d, w
+$rcmail_config['message_cache_lifetime'] = '10d';
+
+// enforce connections over https
+// with this option enabled, all non-secure connections will be redirected.
+// set the port for the ssl connection as value of this option if it differs from the default 443
+$rcmail_config['force_https'] = false;
+
+// tell PHP that it should work as under secure connection
+// even if it doesn't recognize it as secure ($_SERVER['HTTPS'] is not set)
+// e.g. when you're running Roundcube behind a https proxy
+// this option is mutually exclusive to 'force_https' and only either one of them should be set to true.
+$rcmail_config['use_https'] = false;
+
+// Allow browser-autocompletion on login form.
+// 0 - disabled, 1 - username and host only, 2 - username, host, password
+$rcmail_config['login_autocomplete'] = 0;
+
+// Forces conversion of logins to lower case.
+// 0 - disabled, 1 - only domain part, 2 - domain and local part.
+// If users authentication is not case-sensitive this must be enabled.
+// After enabling it all user records need to be updated, e.g. with query:
+// UPDATE users SET username = LOWER(username);
+$rcmail_config['login_lc'] = 0;
+
+// Includes should be interpreted as PHP files
+$rcmail_config['skin_include_php'] = false;
+
+// display software version on login screen
+$rcmail_config['display_version'] = false;
+
+// Session lifetime in minutes
+// must be greater than 'keep_alive'/60
+$rcmail_config['session_lifetime'] = 10;
+
+// session domain: .example.org
+$rcmail_config['session_domain'] = '';
+
+// session name. Default: 'roundcube_sessid'
+$rcmail_config['session_name'] = null;
+
+// Backend to use for session storage. Can either be 'db' (default) or 'memcache'
+// If set to memcache, a list of servers need to be specified in 'memcache_hosts'
+// Make sure the Memcache extension (http://pecl.php.net/package/memcache) version >= 2.0.0 is installed
+$rcmail_config['session_storage'] = 'db';
+
+// Use these hosts for accessing memcached
+// Define any number of hosts in the form of hostname:port or unix:///path/to/sock.file
+$rcmail_config['memcache_hosts'] = null; // e.g. array( 'localhost:11211', '192.168.1.12:11211', 'unix:///var/tmp/memcached.sock' );
+
+// check client IP in session athorization
+$rcmail_config['ip_check'] = false;
+
+// check referer of incoming requests
+$rcmail_config['referer_check'] = false;
+
+// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
+// Possible values: sameorigin|deny. Set to false in order to disable sending them
+$rcmail_config['x_frame_options'] = 'sameorigin';
+
+// this key is used to encrypt the users imap password which is stored
+// in the session record (and the client cookie if remember password is enabled).
+// please provide a string of exactly 24 chars.
+$rcmail_config['des_key'] = 'vtIOjLZo9kffJoqzpSbm5r1r';
+
+// Automatically add this domain to user names for login
+// Only for IMAP servers that require full e-mail addresses for login
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['username_domain'] = '';
+
+// This domain will be used to form e-mail addresses of new users
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['mail_domain'] = '';
+
+// Password charset.
+// Use it if your authentication backend doesn't support UTF-8.
+// Defaults to ISO-8859-1 for backward compatibility
+$rcmail_config['password_charset'] = 'ISO-8859-1';
+
+// How many seconds must pass between emails sent by a user
+$rcmail_config['sendmail_delay'] = 0;
+
+// Maximum number of recipients per message. Default: 0 (no limit)
+$rcmail_config['max_recipients'] = 0; 
+
+// Maximum allowednumber of members of an address group. Default: 0 (no limit)
+// If 'max_recipients' is set this value should be less or equal
+$rcmail_config['max_group_members'] = 0; 
+
+// add this user-agent to message headers when sending
+$rcmail_config['useragent'] = 'Roundcube Webmail/'.RCMAIL_VERSION;
+
+// use this name to compose page titles
+$rcmail_config['product_name'] = 'Roundcube Webmail';
+
+// try to load host-specific configuration
+// see http://trac.roundcube.net/wiki/Howto_Config for more details
+$rcmail_config['include_host_config'] = false;
+
+// path to a text file which will be added to each sent message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer'] = '';
+
+// path to a text file which will be added to each sent HTML message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer_html'] = '';
+
+// add a received header to outgoing mails containing the creators IP and hostname
+$rcmail_config['http_received_header'] = false;
+
+// Whether or not to encrypt the IP address and the host name
+// these could, in some circles, be considered as sensitive information;
+// however, for the administrator, these could be invaluable help
+// when tracking down issues.
+$rcmail_config['http_received_header_encrypt'] = false;
+
+// This string is used as a delimiter for message headers when sending
+// a message via mail() function. Leave empty for auto-detection
+$rcmail_config['mail_header_delimiter'] = NULL;
+
+// number of chars allowed for line when wrapping text.
+// text wrapping is done when composing/sending messages
+$rcmail_config['line_length'] = 72;
+
+// send plaintext messages as format=flowed
+$rcmail_config['send_format_flowed'] = true;
+
+// don't allow these settings to be overriden by the user
+$rcmail_config['dont_override'] = array();
+
+// Set identities access level:
+// 0 - many identities with possibility to edit all params
+// 1 - many identities with possibility to edit all params but not email address
+// 2 - one identity with possibility to edit all params
+// 3 - one identity with possibility to edit all params but not email address
+$rcmail_config['identities_level'] = 0;
+
+// Mimetypes supported by the browser.
+// attachments of these types will open in a preview window
+// either a comma-separated list or an array: 'text/plain,text/html,text/xml,image/jpeg,image/gif,image/png,application/pdf'
+$rcmail_config['client_mimetypes'] = null;  # null == default
+
+// mime magic database
+$rcmail_config['mime_magic'] = null;
+
+// path to imagemagick identify binary
+$rcmail_config['im_identify_path'] = null;
+
+// path to imagemagick convert binary
+$rcmail_config['im_convert_path'] = null;
+
+// maximum size of uploaded contact photos in pixel
+$rcmail_config['contact_photo_size'] = 160;
+
+// Enable DNS checking for e-mail address validation
+$rcmail_config['email_dns_check'] = false;
+
+// ----------------------------------
+// PLUGINS
+// ----------------------------------
+
+// List of active plugins (in plugins/ directory)
+$rcmail_config['plugins'] = array('password');
+
+// ----------------------------------
+// USER INTERFACE
+// ----------------------------------
+
+// default messages sort column. Use empty value for default server's sorting, 
+// or 'arrival', 'date', 'subject', 'from', 'to', 'fromto', 'size', 'cc'
+$rcmail_config['message_sort_col'] = '';
+
+// default messages sort order
+$rcmail_config['message_sort_order'] = 'DESC';
+
+// These cols are shown in the message list. Available cols are:
+// subject, from, to, fromto, cc, replyto, date, size, status, flag, attachment, 'priority'
+$rcmail_config['list_cols'] = array('subject', 'status', 'fromto', 'date', 'size', 'flag', 'attachment');
+
+// the default locale setting (leave empty for auto-detection)
+// RFC1766 formatted language name like en_US, de_DE, de_CH, fr_FR, pt_BR
+$rcmail_config['language'] = null;
+
+// use this format for date display (date or strftime format)
+$rcmail_config['date_format'] = 'Y-m-d';
+
+// give this choice of date formats to the user to select from
+$rcmail_config['date_formats'] = array('Y-m-d', 'd-m-Y', 'Y/m/d', 'm/d/Y', 'd/m/Y', 'd.m.Y', 'j.n.Y');
+
+// use this format for time display (date or strftime format)
+$rcmail_config['time_format'] = 'H:i';
+
+// give this choice of time formats to the user to select from
+$rcmail_config['time_formats'] = array('G:i', 'H:i', 'g:i a', 'h:i A');
+
+// use this format for short date display (derived from date_format and time_format)
+$rcmail_config['date_short'] = 'D H:i';
+
+// use this format for detailed date/time formatting (derived from date_format and time_format)
+$rcmail_config['date_long'] = 'Y-m-d H:i';
+
+// store draft message is this mailbox
+// leave blank if draft messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['drafts_mbox'] = 'Drafts';
+
+// store spam messages in this mailbox
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['junk_mbox'] = 'Spam';
+
+// store sent message is this mailbox
+// leave blank if sent messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['sent_mbox'] = 'Sent';
+
+// move messages to this folder when deleting them
+// leave blank if they should be deleted directly
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['trash_mbox'] = 'Trash';
+
+// display these folders separately in the mailbox list.
+// these folders will also be displayed with localized names
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['default_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+$rcmail_config['default_imap_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+
+// automatically create the above listed default folders on first login
+$rcmail_config['create_default_folders'] = true;
+
+// protect the default folders from renames, deletes, and subscription changes
+$rcmail_config['protect_default_folders'] = true;
+
+// if in your system 0 quota means no limit set this option to true 
+$rcmail_config['quota_zero_as_unlimited'] = false;
+
+// Make use of the built-in spell checker. It is based on GoogieSpell.
+// Since Google only accepts connections over https your PHP installatation
+// requires to be compiled with Open SSL support
+$rcmail_config['enable_spellcheck'] = true;
+
+// Enables spellchecker exceptions dictionary.
+// Setting it to 'shared' will make the dictionary shared by all users.
+$rcmail_config['spellcheck_dictionary'] = false;
+
+// Set the spell checking engine. 'googie' is the default. 'pspell' is also available,
+// but requires the Pspell extensions. When using Nox Spell Server, also set 'googie' here.
+$rcmail_config['spellcheck_engine'] = 'googie';
+
+// For a locally installed Nox Spell Server, please specify the URI to call it.
+// Get Nox Spell Server from http://orangoo.com/labs/?page_id=72
+// Leave empty to use the Google spell checking service, what means
+// that the message content will be sent to Google in order to check spelling
+$rcmail_config['spellcheck_uri'] = '';
+
+// These languages can be selected for spell checking.
+// Configure as a PHP style hash array: array('en'=>'English', 'de'=>'Deutsch');
+// Leave empty for default set of available language.
+$rcmail_config['spellcheck_languages'] = NULL;
+
+// Makes that words with all letters capitalized will be ignored (e.g. GOOGLE)
+$rcmail_config['spellcheck_ignore_caps'] = false;
+
+// Makes that words with numbers will be ignored (e.g. g00gle)
+$rcmail_config['spellcheck_ignore_nums'] = false;
+
+// Makes that words with symbols will be ignored (e.g. g@@gle)
+$rcmail_config['spellcheck_ignore_syms'] = false;
+
+// Use this char/string to separate recipients when composing a new message
+$rcmail_config['recipients_separator'] = ',';
+
+// don't let users set pagesize to more than this value if set
+$rcmail_config['max_pagesize'] = 200;
+
+// Minimal value of user's 'keep_alive' setting (in seconds)
+// Must be less than 'session_lifetime'
+$rcmail_config['min_keep_alive'] = 60;
+
+// Enables files upload indicator. Requires APC installed and enabled apc.rfc1867 option.
+// By default refresh time is set to 1 second. You can set this value to true
+// or any integer value indicating number of seconds.
+$rcmail_config['upload_progress'] = false;
+
+// Specifies for how many seconds the Undo button will be available
+// after object delete action. Currently used with supporting address book sources.
+// Setting it to 0, disables the feature.
+$rcmail_config['undo_timeout'] = 0;
+
+// ----------------------------------
+// ADDRESSBOOK SETTINGS
+// ----------------------------------
+
+// This indicates which type of address book to use. Possible choises:
+// 'sql' (default) and 'ldap'.
+// If set to 'ldap' then it will look at using the first writable LDAP
+// address book as the primary address book and it will not display the
+// SQL address book in the 'Address Book' view.
+$rcmail_config['address_book_type'] = 'sql';
+
+// In order to enable public ldap search, configure an array like the Verisign
+// example further below. if you would like to test, simply uncomment the example.
+// Array key must contain only safe characters, ie. a-zA-Z0-9_
+$rcmail_config['ldap_public'] = array();
+
+// If you are going to use LDAP for individual address books, you will need to 
+// set 'user_specific' to true and use the variables to generate the appropriate DNs to access it.
+//
+// The recommended directory structure for LDAP is to store all the address book entries
+// under the users main entry, e.g.:
+//
+//  o=root
+//   ou=people
+//    uid=user@domain
+//  mail=contact@contactdomain
+//
+// So the base_dn would be uid=%fu,ou=people,o=root
+// The bind_dn would be the same as based_dn or some super user login.
+/* 
+ * example config for Verisign directory
+ *
+$rcmail_config['ldap_public']['Verisign'] = array(
+  'name'          => 'Verisign.com',
+  // Replacement variables supported in host names:
+  // %h - user's IMAP hostname
+  // %n - http hostname ($_SERVER['SERVER_NAME'])
+  // %d - domain (http hostname without the first part)
+  // %z - IMAP domain (IMAP hostname without the first part)
+  // For example %n = mail.domain.tld, %d = domain.tld
+  'hosts'         => array('directory.verisign.com'),
+  'port'          => 389,
+  'use_tls'	      => false,
+  'ldap_version'  => 3,       // using LDAPv3
+  'user_specific' => false,   // If true the base_dn, bind_dn and bind_pass default to the user's IMAP login.
+  // %fu - The full username provided, assumes the username is an email
+  //       address, uses the username_domain value if not an email address.
+  // %u  - The username prior to the '@'.
+  // %d  - The domain name after the '@'.
+  // %dc - The domain name hierarchal string e.g. "dc=test,dc=domain,dc=com"
+  // %dn - DN found by ldap search when search_filter/search_base_dn are used
+  'base_dn'       => '',
+  'bind_dn'       => '',
+  'bind_pass'     => '',
+  // It's possible to bind for an individual address book
+  // The login name is used to search for the DN to bind with
+  'search_base_dn' => '',
+  'search_filter'  => '',   // e.g. '(&(objectClass=posixAccount)(uid=%u))'
+  // DN and password to bind as before searching for bind DN, if anonymous search is not allowed
+  'search_bind_dn' => '',
+  'search_bind_pw' => '',
+  // Default for %dn variable if search doesn't return DN value
+  'search_dn_default' => '',
+  // Optional authentication identifier to be used as SASL authorization proxy
+  // bind_dn need to be empty
+  'auth_cid'       => '',
+  // SASL authentication method (for proxy auth), e.g. DIGEST-MD5
+  'auth_method'    => '',
+  // Indicates if the addressbook shall be hidden from the list.
+  // With this option enabled you can still search/view contacts.
+  'hidden'        => false,
+  // Indicates if the addressbook shall not list contacts but only allows searching.
+  'searchonly'    => false,
+  // Indicates if we can write to the LDAP directory or not.
+  // If writable is true then these fields need to be populated:
+  // LDAP_Object_Classes, required_fields, LDAP_rdn
+  'writable'       => false,
+  // To create a new contact these are the object classes to specify
+  // (or any other classes you wish to use).
+  'LDAP_Object_Classes' => array('top', 'inetOrgPerson'),
+  // The RDN field that is used for new entries, this field needs
+  // to be one of the search_fields, the base of base_dn is appended
+  // to the RDN to insert into the LDAP directory.
+  'LDAP_rdn'       => 'cn',
+  // The required fields needed to build a new contact as required by
+  // the object classes (can include additional fields not required by the object classes).
+  'required_fields' => array('cn', 'sn', 'mail'),
+  'search_fields'   => array('mail', 'cn'),  // fields to search in
+  // mapping of contact fields to directory attributes
+  //   for every attribute one can specify the number of values (limit) allowed.
+  //   default is 1, a wildcard * means unlimited
+  'fieldmap' => array(
+    // Roundcube  => LDAP:limit
+    'name'        => 'cn',
+    'surname'     => 'sn',
+    'firstname'   => 'givenName',
+    'title'       => 'title',
+    'email'       => 'mail:*',
+    'phone:home'  => 'homePhone',
+    'phone:work'  => 'telephoneNumber',
+    'phone:mobile' => 'mobile',
+    'phone:pager' => 'pager',
+    'street'      => 'street',
+    'zipcode'     => 'postalCode',
+    'region'      => 'st',
+    'locality'    => 'l',
+// if you uncomment country, you need to modify 'sub_fields' above
+//    'country'     => 'c',
+    'department'  => 'departmentNumber',
+    'notes'       => 'description',
+// these currently don't work:
+//    'phone:workfax' => 'facsimileTelephoneNumber',
+//    'photo'        => 'jpegPhoto',
+//    'organization' => 'o',
+//    'manager'      => 'manager',
+//    'assistant'    => 'secretary',
+  ),
+  // Map of contact sub-objects (attribute name => objectClass(es)), e.g. 'c' => 'country'
+  'sub_fields' => array(),
+  'sort'          => 'cn',    // The field to sort the listing by.
+  'scope'         => 'sub',   // search mode: sub|base|list
+  'filter'        => '(objectClass=inetOrgPerson)',      // used for basic listing (if not empty) and will be &'d with search queries. example: status=act
+  'fuzzy_search'  => true,    // server allows wildcard search
+  'vlv'           => false,   // Enable Virtual List View to more efficiently fetch paginated data (if server supports it)
+  'numsub_filter' => '(objectClass=organizationalUnit)',   // with VLV, we also use numSubOrdinates to query the total number of records. Set this filter to get all numSubOrdinates attributes for counting
+  'sizelimit'     => '0',     // Enables you to limit the count of entries fetched. Setting this to 0 means no limit.
+  'timelimit'     => '0',     // Sets the number of seconds how long is spend on the search. Setting this to 0 means no limit.
+  'referrals'     => true|false,  // Sets the LDAP_OPT_REFERRALS option. Mostly used in multi-domain Active Directory setups
+
+  // definition for contact groups (uncomment if no groups are supported)
+  // for the groups base_dn, the user replacements %fu, %u, $d and %dc work as for base_dn (see above)
+  // if the groups base_dn is empty, the contact base_dn is used for the groups as well
+  // -> in this case, assure that groups and contacts are separated due to the concernig filters! 
+  'groups'        => array(
+    'base_dn'     => '',
+    'scope'       => 'sub',   // search mode: sub|base|list
+    'filter'      => '(objectClass=groupOfNames)',
+    'object_classes' => array("top", "groupOfNames"),
+    'member_attr'  => 'member',   // name of the member attribute, e.g. uniqueMember
+    'name_attr'    => 'cn',       // attribute to be used as group name
+  ),
+);
+*/
+
+// An ordered array of the ids of the addressbooks that should be searched
+// when populating address autocomplete fields server-side. ex: array('sql','Verisign');
+$rcmail_config['autocomplete_addressbooks'] = array('sql');
+
+// The minimum number of characters required to be typed in an autocomplete field
+// before address books will be searched. Most useful for LDAP directories that
+// may need to do lengthy results building given overly-broad searches
+$rcmail_config['autocomplete_min_length'] = 1;
+
+// Number of parallel autocomplete requests.
+// If there's more than one address book, n parallel (async) requests will be created,
+// where each request will search in one address book. By default (0), all address
+// books are searched in one request.
+$rcmail_config['autocomplete_threads'] = 0;
+
+// Max. numer of entries in autocomplete popup. Default: 15.
+$rcmail_config['autocomplete_max'] = 15;
+
+// show address fields in this order
+// available placeholders: {street}, {locality}, {zipcode}, {country}, {region}
+$rcmail_config['address_template'] = '{street}<br/>{locality} {zipcode}<br/>{country} {region}';
+
+// Matching mode for addressbook search (including autocompletion)
+// 0 - partial (*abc*), default
+// 1 - strict (abc)
+// 2 - prefix (abc*)
+// Note: For LDAP sources fuzzy_search must be enabled to use 'partial' or 'prefix' mode
+$rcmail_config['addressbook_search_mode'] = 0;
+
+// ----------------------------------
+// USER PREFERENCES
+// ----------------------------------
+
+// Use this charset as fallback for message decoding
+//$rcmail_config['default_charset'] = 'ISO-8859-1';
+$rcmail_config['default_charset'] = 'UTF-8';
+
+// skin name: folder from skins/
+$rcmail_config['skin'] = 'larry';
+
+// show up to X items in messages list view
+$rcmail_config['mail_pagesize'] = 50;
+
+// show up to X items in contacts list view
+$rcmail_config['addressbook_pagesize'] = 50;
+
+// sort contacts by this col (preferably either one of name, firstname, surname)
+$rcmail_config['addressbook_sort_col'] = 'surname';
+
+// the way how contact names are displayed in the list
+// 0: display name
+// 1: (prefix) firstname middlename surname (suffix)
+// 2: (prefix) surname firstname middlename (suffix)
+// 3: (prefix) surname, firstname middlename (suffix)
+$rcmail_config['addressbook_name_listing'] = 0;
+
+// use this timezone to display date/time
+// valid timezone identifers are listed here: php.net/manual/en/timezones.php
+// 'auto' will use the browser's timezone settings
+$rcmail_config['timezone'] = 'auto';
+
+// prefer displaying HTML messages
+$rcmail_config['prefer_html'] = true;
+
+// display remote inline images
+// 0 - Never, always ask
+// 1 - Ask if sender is not in address book
+// 2 - Always show inline images
+$rcmail_config['show_images'] = 0;
+
+// compose html formatted messages by default
+// 0 - never, 1 - always, 2 - on reply to HTML message only 
+$rcmail_config['htmleditor'] = 0;
+
+// show pretty dates as standard
+$rcmail_config['prettydate'] = true;
+
+// save compose message every 300 seconds (5min)
+$rcmail_config['draft_autosave'] = 300;
+
+// default setting if preview pane is enabled
+$rcmail_config['preview_pane'] = false;
+
+// Mark as read when viewed in preview pane (delay in seconds)
+// Set to -1 if messages in preview pane should not be marked as read
+$rcmail_config['preview_pane_mark_read'] = 0;
+
+// Clear Trash on logout
+$rcmail_config['logout_purge'] = false;
+
+// Compact INBOX on logout
+$rcmail_config['logout_expunge'] = false;
+
+// Display attached images below the message body 
+$rcmail_config['inline_images'] = true;
+
+// Encoding of long/non-ascii attachment names:
+// 0 - Full RFC 2231 compatible
+// 1 - RFC 2047 for 'name' and RFC 2231 for 'filename' parameter (Thunderbird's default)
+// 2 - Full 2047 compatible
+$rcmail_config['mime_param_folding'] = 1;
+
+// Set true if deleted messages should not be displayed
+// This will make the application run slower
+$rcmail_config['skip_deleted'] = false;
+
+// Set true to Mark deleted messages as read as well as deleted
+// False means that a message's read status is not affected by marking it as deleted
+$rcmail_config['read_when_deleted'] = true;
+
+// Set to true to never delete messages immediately
+// Use 'Purge' to remove messages marked as deleted
+$rcmail_config['flag_for_deletion'] = false;
+
+// Default interval for keep-alive/check-recent requests (in seconds)
+// Must be greater than or equal to 'min_keep_alive' and less than 'session_lifetime'
+$rcmail_config['keep_alive'] = 60;
+
+// If true all folders will be checked for recent messages
+$rcmail_config['check_all_folders'] = false;
+
+// If true, after message delete/move, the next message will be displayed
+$rcmail_config['display_next'] = false;
+
+// 0 - Do not expand threads 
+// 1 - Expand all threads automatically 
+// 2 - Expand only threads with unread messages 
+$rcmail_config['autoexpand_threads'] = 0;
+
+// When replying place cursor above original message (top posting)
+$rcmail_config['top_posting'] = false;
+
+// When replying strip original signature from message
+$rcmail_config['strip_existing_sig'] = true;
+
+// Show signature:
+// 0 - Never
+// 1 - Always
+// 2 - New messages only
+// 3 - Forwards and Replies only
+$rcmail_config['show_sig'] = 1;
+
+// When replying or forwarding place sender's signature above existing message
+$rcmail_config['sig_above'] = false;
+
+// Use MIME encoding (quoted-printable) for 8bit characters in message body
+$rcmail_config['force_7bit'] = false;
+
+// Defaults of the search field configuration.
+// The array can contain a per-folder list of header fields which should be considered when searching
+// The entry with key '*' stands for all folders which do not have a specific list set.
+// Please note that folder names should to be in sync with $rcmail_config['default_folders']
+$rcmail_config['search_mods'] = null;  // Example: array('*' => array('subject'=>1, 'from'=>1), 'Sent' => array('subject'=>1, 'to'=>1));
+
+// Defaults of the addressbook search field configuration.
+$rcmail_config['addressbook_search_mods'] = null;  // Example: array('name'=>1, 'firstname'=>1, 'surname'=>1, 'email'=>1, '*'=>1);
+
+// 'Delete always'
+// This setting reflects if mail should be always deleted
+// when moving to Trash fails. This is necessary in some setups
+// when user is over quota and Trash is included in the quota.
+$rcmail_config['delete_always'] = false;
+
+// Directly delete messages in Junk instead of moving to Trash
+$rcmail_config['delete_junk'] = true;
+
+// Behavior if a received message requests a message delivery notification (read receipt)
+// 0 = ask the user, 1 = send automatically, 2 = ignore (never send or ask)
+// 3 = send automatically if sender is in addressbook, otherwise ask the user
+// 4 = send automatically if sender is in addressbook, otherwise ignore
+$rcmail_config['mdn_requests'] = 0;
+
+// Return receipt checkbox default state
+$rcmail_config['mdn_default'] = 0;
+
+// Delivery Status Notification checkbox default state
+$rcmail_config['dsn_default'] = 0;
+
+// Place replies in the folder of the message being replied to
+$rcmail_config['reply_same_folder'] = false;
+
+// Sets default mode of Forward feature to "forward as attachment"
+$rcmail_config['forward_attachment'] = false;
+
+// Defines address book (internal index) to which new contacts will be added
+// By default it is the first writeable addressbook.
+// Note: Use '0' for built-in address book.
+$rcmail_config['default_addressbook'] = null;
+
+// Enables spell checking before sending a message.
+$rcmail_config['spellcheck_before_send'] = false;
+
+// Skip alternative email addresses in autocompletion (show one address per contact)
+$rcmail_config['autocomplete_single'] = false;
+
+// Default font for composed HTML message.
+// Supported values: Andale Mono, Arial, Arial Black, Book Antiqua, Courier New,
+// Georgia, Helvetica, Impact, Tahoma, Terminal, Times New Roman, Trebuchet MS, Verdana
+$rcmail_config['default_font'] = '';
+
+// end of config file
diff --git a/install/debian/10/roundcube/vesta.php b/install/debian/10/roundcube/vesta.php
new file mode 100644
index 00000000..b3dd167f
--- /dev/null
+++ b/install/debian/10/roundcube/vesta.php
@@ -0,0 +1,73 @@
+<?php
+
+/**
+ * Vesta Control Panel Password Driver
+ *
+ * @version 1.0
+ * @author Serghey Rodin <skid@vestacp.com>
+ */
+class rcube_vesta_password {
+    function save($curpass, $passwd)
+    {
+        $rcmail = rcmail::get_instance();
+        $vesta_host = $rcmail->config->get('password_vesta_host');
+
+        if (empty($vesta_host))
+        {
+            $vesta_host = 'localhost';
+        }
+
+        $vesta_port = $rcmail->config->get('password_vesta_port');
+        if (empty($vesta_port))
+        {
+            $vesta_port = '8083';
+        }
+
+        $postvars = array(
+          'email' => $_SESSION['username'],
+          'password' => $curpass,
+          'new' => $passwd
+        );
+
+        $postdata = http_build_query($postvars);
+
+        $send  = 'POST /reset/mail/ HTTP/1.1' . PHP_EOL;
+        $send .= 'Host: ' . $vesta_host . PHP_EOL;
+        $send .= 'User-Agent: PHP Script' . PHP_EOL;
+        $send .= 'Content-length: ' . strlen($postdata) . PHP_EOL;
+        $send .= 'Content-type: application/x-www-form-urlencoded' . PHP_EOL;
+        $send .= 'Connection: close' . PHP_EOL;
+        $send .= PHP_EOL;
+        $send .= $postdata . PHP_EOL . PHP_EOL;
+
+        //$fp = fsockopen('ssl://' . $vesta_host, $vesta_port);
+        $errno = "";
+        $errstr = "";
+        $context = stream_context_create();
+
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer_name', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_host', false);
+        $result = stream_context_set_option($context, 'ssl', 'allow_self_signed', true);
+
+        $fp = stream_socket_client('ssl://' . $vesta_host . ':'.$vesta_port, $errno, $errstr, 60, STREAM_CLIENT_CONNECT, $context);
+        fputs($fp, $send);
+        $result = fread($fp, 2048);
+        fclose($fp);
+
+        $fp = fopen("/tmp/roundcube.log", 'w');
+        fwrite($fp, "test ok");
+        fwrite($fp, "\n");
+        fclose($fp);
+
+
+        if(strpos($result, 'ok') && !strpos($result, 'error'))
+        {
+            return PASSWORD_SUCCESS;
+        }
+        else {
+            return PASSWORD_ERROR;
+        }
+
+    }
+}
diff --git a/install/debian/10/sudo/admin b/install/debian/10/sudo/admin
new file mode 100644
index 00000000..4226bdd4
--- /dev/null
+++ b/install/debian/10/sudo/admin
@@ -0,0 +1,8 @@
+# Created by vesta installer
+Defaults env_keep="VESTA"
+Defaults:admin !syslog
+Defaults:admin !requiretty
+Defaults:root !requiretty
+
+admin   ALL=(ALL)       ALL
+admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/debian/10/templates/dns/child-ns.tpl b/install/debian/10/templates/dns/child-ns.tpl
new file mode 100755
index 00000000..42c046e4
--- /dev/null
+++ b/install/debian/10/templates/dns/child-ns.tpl
@@ -0,0 +1,14 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns1.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns2.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ns1' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='ns2' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/10/templates/dns/default.tpl b/install/debian/10/templates/dns/default.tpl
new file mode 100755
index 00000000..e0a37e62
--- /dev/null
+++ b/install/debian/10/templates/dns/default.tpl
@@ -0,0 +1,18 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/10/templates/dns/gmail.tpl b/install/debian/10/templates/dns/gmail.tpl
new file mode 100755
index 00000000..219c9d24
--- /dev/null
+++ b/install/debian/10/templates/dns/gmail.tpl
@@ -0,0 +1,12 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='localhost' TYPE='A' PRIORITY='' VALUE='127.0.0.1' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='MX' PRIORITY='1' VALUE='ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT1.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT2.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT3.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT4.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.google.com ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh
new file mode 100755
index 00000000..ce8ce02b
--- /dev/null
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh
@@ -0,0 +1,87 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.3-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_73" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_73)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_73
+    service php7.3-fpm restart
+fi
+
+if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.3/fpm/pool.d/www.conf
+fi
+
+exit 0
\ No newline at end of file
diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.stpl b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.stpl
new file mode 100644
index 00000000..9660c234
--- /dev/null
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.tpl b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.tpl
new file mode 100644
index 00000000..892c0d1f
--- /dev/null
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73.sh b/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
new file mode 100755
index 00000000..aa7b6dbe
--- /dev/null
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
@@ -0,0 +1,86 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.3-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_73" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_73)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_73
+    service php7.3-fpm restart
+fi
+
+if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.3/fpm/pool.d/www.conf
+fi
+
+exit 0
\ No newline at end of file
diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73.stpl b/install/debian/10/templates/web/apache2/PHP-FPM-73.stpl
new file mode 100644
index 00000000..28224413
--- /dev/null
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73.tpl b/install/debian/10/templates/web/apache2/PHP-FPM-73.tpl
new file mode 100644
index 00000000..7bec5e73
--- /dev/null
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/10/templates/web/awstats/awstats.tpl b/install/debian/10/templates/web/awstats/awstats.tpl
new file mode 100755
index 00000000..9a92e0fd
--- /dev/null
+++ b/install/debian/10/templates/web/awstats/awstats.tpl
@@ -0,0 +1,133 @@
+LogFile="/var/log/%web_system%/domains/%domain%.log"
+LogType=W
+LogFormat=1
+LogSeparator=" "
+SiteDomain="%domain_idn%"
+HostAliases="%alias_idn%"
+DirData="%home%/%user%/web/%domain%/stats"
+DirCgi="/vstats"
+DirIcons="/vstats/icon"
+AllowToUpdateStatsFromBrowser=0
+AllowFullYearView=2
+EnableLockForUpdate=1
+DNSStaticCacheFile="dnscache.txt"
+DNSLastUpdateCacheFile="dnscachelastupdate.txt"
+SkipDNSLookupFor=""
+AllowAccessFromWebToAuthenticatedUsersOnly=0
+AllowAccessFromWebToFollowingAuthenticatedUsers=""
+AllowAccessFromWebToFollowingIPAddresses=""
+CreateDirDataIfNotExists=0
+BuildHistoryFormat=text
+BuildReportFormat=html
+SaveDatabaseFilesWithPermissionsForEveryone=0
+PurgeLogFile=0
+ArchiveLogRecords=0
+KeepBackupOfHistoricFiles=1
+DefaultFile="index.php index.html"
+SkipHosts="127.0.0.1
+SkipUserAgents=""
+SkipFiles=""
+SkipReferrersBlackList=""
+OnlyHosts=""
+OnlyUserAgents=""
+OnlyUsers=""
+OnlyFiles=""
+NotPageList="css js class gif jpg jpeg png bmp ico rss xml swf"
+ValidHTTPCodes="200 304"
+ValidSMTPCodes="1 250"
+AuthenticatedUsersNotCaseSensitive=0
+URLNotCaseSensitive=0
+URLWithAnchor=0
+URLQuerySeparators="?;"
+URLWithQuery=0
+URLWithQueryWithOnlyFollowingParameters=""
+URLWithQueryWithoutFollowingParameters=""
+URLReferrerWithQuery=0
+WarningMessages=1
+ErrorMessages=""
+DebugMessages=0
+NbOfLinesForCorruptedLog=50
+WrapperScript=""
+DecodeUA=0
+MiscTrackerUrl="/js/awstats_misc_tracker.js"
+UseFramesWhenCGI=1
+DetailedReportsOnNewWindows=1
+Expires=3600
+MaxRowsInHTMLOutput=1000
+Lang="auto"
+DirLang="./lang"
+ShowMenu=1
+ShowSummary=UVPHB
+ShowMonthStats=UVPHB
+ShowDaysOfMonthStats=VPHB
+ShowDaysOfWeekStats=PHB
+ShowHoursStats=PHB
+ShowDomainsStats=PHB
+ShowHostsStats=PHBL
+ShowAuthenticatedUsers=0
+ShowRobotsStats=HBL
+ShowWormsStats=0
+ShowEMailSenders=0
+ShowEMailReceivers=0
+ShowSessionsStats=1
+ShowPagesStats=PBEX
+ShowFileTypesStats=HB
+ShowFileSizesStats=0
+ShowDownloadsStats=HB
+ShowOSStats=1
+ShowBrowsersStats=1
+ShowScreenSizeStats=0
+ShowOriginStats=PH
+ShowKeyphrasesStats=1
+ShowKeywordsStats=1
+ShowMiscStats=a
+ShowHTTPErrorsStats=1
+ShowSMTPErrorsStats=0
+ShowClusterStats=0
+AddDataArrayMonthStats=1
+AddDataArrayShowDaysOfMonthStats=1
+AddDataArrayShowDaysOfWeekStats=1
+AddDataArrayShowHoursStats=1
+IncludeInternalLinksInOriginSection=0
+MaxNbOfDomain = 10
+MinHitDomain  = 1
+MaxNbOfHostsShown = 10
+MinHitHost    = 1
+MaxNbOfLoginShown = 10
+MinHitLogin   = 1
+MaxNbOfRobotShown = 10
+MinHitRobot   = 1
+MaxNbOfDownloadsShown = 10
+MinHitDownloads = 1
+MaxNbOfPageShown = 10
+MinHitFile    = 1
+MaxNbOfOsShown = 10
+MinHitOs      = 1
+MaxNbOfBrowsersShown = 10
+MinHitBrowser = 1
+MaxNbOfScreenSizesShown = 5
+MinHitScreenSize = 1
+MaxNbOfWindowSizesShown = 5
+MinHitWindowSize = 1
+MaxNbOfRefererShown = 10
+MinHitRefer   = 1
+MaxNbOfKeyphrasesShown = 10
+MinHitKeyphrase = 1
+MaxNbOfKeywordsShown = 10
+MinHitKeyword = 1
+MaxNbOfEMailsShown = 20
+MinHitEMail   = 1
+FirstDayOfWeek=0
+ShowFlagLinks=""
+ShowLinksOnUrl=1
+UseHTTPSLinkForUrl=""
+MaxLengthOfShownURL=64
+HTMLHeadSection=""
+HTMLEndSection=""
+MetaRobot=0
+Logo="awstats_logo6.png"
+LogoLink="http://awstats.sourceforge.net"
+BarWidth   = 260
+BarHeight  = 90
+StyleSheet=""
+ExtraTrackedRowsLimit=500
diff --git a/install/debian/10/templates/web/awstats/index.tpl b/install/debian/10/templates/web/awstats/index.tpl
new file mode 100755
index 00000000..9df9bb5c
--- /dev/null
+++ b/install/debian/10/templates/web/awstats/index.tpl
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+    <title>Awstats log analyzer </title>
+</head>
+<frameset rows="60,*" cols="*">
+    <frame src="nav.html" name="nav" scrolling="no" noresize>
+    <frame src="%month%/index.html" name="stats">
+</frameset>
+</html>
diff --git a/install/debian/10/templates/web/awstats/nav.tpl b/install/debian/10/templates/web/awstats/nav.tpl
new file mode 100755
index 00000000..f29bed68
--- /dev/null
+++ b/install/debian/10/templates/web/awstats/nav.tpl
@@ -0,0 +1,23 @@
+<html>
+<head>
+    <title>Awstats navigation</title>
+    <script language="javascript">
+        function change() {
+            top.stats.location= document.period.select.value + '/';
+        }
+    </script>
+</head>
+<body>
+<table width="100%" border="0" cellspacing="0" cellpadding="0">
+<tr>
+    <td><img src="logo.png" alt="vesta"></td>
+    <td><form name="period" action="" method="get">
+        <select name="select" ONCHANGE="change()">
+%select_month%
+        </select>
+    </form>
+    </td>
+</tr>
+</table>
+</body>
+</html>
diff --git a/install/debian/10/templates/web/nginx/force-https-legacy.stpl b/install/debian/10/templates/web/nginx/force-https-legacy.stpl
new file mode 100644
index 00000000..e2bf9061
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/force-https-legacy.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/force-https-legacy.tpl b/install/debian/10/templates/web/nginx/force-https-legacy.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/force-https-legacy.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/10/templates/web/nginx/force-https-public.stpl b/install/debian/10/templates/web/nginx/force-https-public.stpl
new file mode 100644
index 00000000..86828f5e
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/force-https-public.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/force-https-public.tpl b/install/debian/10/templates/web/nginx/force-https-public.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/force-https-public.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/10/templates/web/nginx/force-https.stpl b/install/debian/10/templates/web/nginx/force-https.stpl
new file mode 100644
index 00000000..d8da2530
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/force-https.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/force-https.tpl b/install/debian/10/templates/web/nginx/force-https.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/10/templates/web/nginx/hosting-public.stpl b/install/debian/10/templates/web/nginx/hosting-public.stpl
new file mode 100644
index 00000000..86828f5e
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/hosting-public.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/hosting-public.tpl b/install/debian/10/templates/web/nginx/hosting-public.tpl
new file mode 100644
index 00000000..9ff417ba
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/hosting-public.tpl
@@ -0,0 +1,35 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
new file mode 100644
index 00000000..706c705b
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
new file mode 100644
index 00000000..7085e047
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail.stpl b/install/debian/10/templates/web/nginx/hosting-webmail.stpl
new file mode 100644
index 00000000..95c1571c
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/hosting-webmail.stpl
@@ -0,0 +1,50 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail.tpl b/install/debian/10/templates/web/nginx/hosting-webmail.tpl
new file mode 100644
index 00000000..976737c7
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/hosting-webmail.tpl
@@ -0,0 +1,47 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/hosting.sh b/install/debian/10/templates/web/nginx/hosting.sh
new file mode 100755
index 00000000..eeed37ef
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/10/templates/web/nginx/hosting.stpl b/install/debian/10/templates/web/nginx/hosting.stpl
new file mode 100755
index 00000000..e4de8c81
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/hosting.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/hosting.tpl b/install/debian/10/templates/web/nginx/hosting.tpl
new file mode 100755
index 00000000..15961c95
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/hosting.tpl
@@ -0,0 +1,35 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl
new file mode 100644
index 00000000..d85bcce3
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.tpl b/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.tpl
new file mode 100644
index 00000000..f9e90393
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl b/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl
new file mode 100644
index 00000000..9c24c3ea
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl
@@ -0,0 +1,61 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.tpl b/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.tpl
new file mode 100644
index 00000000..d2422be2
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.tpl
@@ -0,0 +1,57 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl b/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl
new file mode 100644
index 00000000..d7186314
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.tpl b/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.tpl
new file mode 100644
index 00000000..54f81b99
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl b/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl
new file mode 100644
index 00000000..4f0b9ec7
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl
@@ -0,0 +1,127 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.tpl b/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.tpl
new file mode 100644
index 00000000..3ea45347
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.tpl
@@ -0,0 +1,123 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/default.stpl b/install/debian/10/templates/web/nginx/php-fpm/default.stpl
new file mode 100644
index 00000000..5cb55311
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/default.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/default.tpl b/install/debian/10/templates/web/nginx/php-fpm/default.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/default.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl b/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl
new file mode 100644
index 00000000..f85032ba
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.tpl b/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.tpl
new file mode 100644
index 00000000..0a9a75ed
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl b/install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl
new file mode 100644
index 00000000..0af7ce84
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -0,0 +1,95 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri @rewrite;
+    }
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/drupal6.tpl b/install/debian/10/templates/web/nginx/php-fpm/drupal6.tpl
new file mode 100644
index 00000000..d1096bff
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/drupal6.tpl
@@ -0,0 +1,91 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+    }
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/drupal7.stpl b/install/debian/10/templates/web/nginx/php-fpm/drupal7.stpl
new file mode 100644
index 00000000..030ea952
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -0,0 +1,95 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/drupal7.tpl b/install/debian/10/templates/web/nginx/php-fpm/drupal7.tpl
new file mode 100644
index 00000000..c9729795
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/drupal7.tpl
@@ -0,0 +1,91 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/drupal8.stpl b/install/debian/10/templates/web/nginx/php-fpm/drupal8.stpl
new file mode 100644
index 00000000..030ea952
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -0,0 +1,95 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/drupal8.tpl b/install/debian/10/templates/web/nginx/php-fpm/drupal8.tpl
new file mode 100644
index 00000000..c9729795
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/drupal8.tpl
@@ -0,0 +1,91 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/joomla.stpl b/install/debian/10/templates/web/nginx/php-fpm/joomla.stpl
new file mode 100644
index 00000000..704405f3
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/joomla.stpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/joomla.tpl b/install/debian/10/templates/web/nginx/php-fpm/joomla.tpl
new file mode 100644
index 00000000..91b7a8f1
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/joomla.tpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/laravel.stpl b/install/debian/10/templates/web/nginx/php-fpm/laravel.stpl
new file mode 100644
index 00000000..477f6f01
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/laravel.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/laravel.tpl b/install/debian/10/templates/web/nginx/php-fpm/laravel.tpl
new file mode 100644
index 00000000..d14b0173
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/laravel.tpl
@@ -0,0 +1,50 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/magento.stpl b/install/debian/10/templates/web/nginx/php-fpm/magento.stpl
new file mode 100644
index 00000000..fdab43aa
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/magento.stpl
@@ -0,0 +1,198 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %sdocroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %sdocroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %sdocroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %sdocroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/magento.tpl b/install/debian/10/templates/web/nginx/php-fpm/magento.tpl
new file mode 100644
index 00000000..3f292fff
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/magento.tpl
@@ -0,0 +1,194 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %docroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %docroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %docroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %docroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/modx.stpl b/install/debian/10/templates/web/nginx/php-fpm/modx.stpl
new file mode 100644
index 00000000..f410ab77
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/modx.stpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  https://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/modx.tpl b/install/debian/10/templates/web/nginx/php-fpm/modx.tpl
new file mode 100644
index 00000000..342d3ecf
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/modx.tpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  http://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/moodle.stpl b/install/debian/10/templates/web/nginx/php-fpm/moodle.stpl
new file mode 100644
index 00000000..f15a68c5
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/moodle.stpl
@@ -0,0 +1,90 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/moodle.tpl b/install/debian/10/templates/web/nginx/php-fpm/moodle.tpl
new file mode 100644
index 00000000..c20ba648
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/moodle.tpl
@@ -0,0 +1,87 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/no-php.stpl b/install/debian/10/templates/web/nginx/php-fpm/no-php.stpl
new file mode 100644
index 00000000..bc8b53a3
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/no-php.stpl
@@ -0,0 +1,47 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/no-php.tpl b/install/debian/10/templates/web/nginx/php-fpm/no-php.tpl
new file mode 100644
index 00000000..7ff8aa1d
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/no-php.tpl
@@ -0,0 +1,43 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/odoo.stpl b/install/debian/10/templates/web/nginx/php-fpm/odoo.stpl
new file mode 100644
index 00000000..d6697d7a
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/odoo.stpl
@@ -0,0 +1,70 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+    
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/odoo.tpl b/install/debian/10/templates/web/nginx/php-fpm/odoo.tpl
new file mode 100644
index 00000000..b1240aae
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/odoo.tpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/opencart.stpl b/install/debian/10/templates/web/nginx/php-fpm/opencart.stpl
new file mode 100644
index 00000000..908b9aeb
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/opencart.stpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/opencart.tpl b/install/debian/10/templates/web/nginx/php-fpm/opencart.tpl
new file mode 100644
index 00000000..d0a9060b
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/opencart.tpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl b/install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl
new file mode 100644
index 00000000..891566b9
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl
@@ -0,0 +1,85 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/owncloud.tpl b/install/debian/10/templates/web/nginx/php-fpm/owncloud.tpl
new file mode 100644
index 00000000..e3ec31de
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/owncloud.tpl
@@ -0,0 +1,81 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+            access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/piwik.stpl b/install/debian/10/templates/web/nginx/php-fpm/piwik.stpl
new file mode 100644
index 00000000..78c1bb78
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/piwik.stpl
@@ -0,0 +1,73 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+        return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+        }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/piwik.tpl b/install/debian/10/templates/web/nginx/php-fpm/piwik.tpl
new file mode 100644
index 00000000..f94fb7de
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/piwik.tpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+            return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl
new file mode 100644
index 00000000..5ffc9ed5
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+        }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/pyrocms.tpl b/install/debian/10/templates/web/nginx/php-fpm/pyrocms.tpl
new file mode 100644
index 00000000..297fe0e8
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/sendy.stpl b/install/debian/10/templates/web/nginx/php-fpm/sendy.stpl
new file mode 100644
index 00000000..0b351000
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/sendy.stpl
@@ -0,0 +1,88 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+     location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/sendy.tpl b/install/debian/10/templates/web/nginx/php-fpm/sendy.tpl
new file mode 100644
index 00000000..b27b427d
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/sendy.tpl
@@ -0,0 +1,86 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl b/install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl
new file mode 100644
index 00000000..5cb55311
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/wordpress.tpl b/install/debian/10/templates/web/nginx/php-fpm/wordpress.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/wordpress.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl b/install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl
new file mode 100644
index 00000000..e0aeb524
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/wordpress2.tpl b/install/debian/10/templates/web/nginx/php-fpm/wordpress2.tpl
new file mode 100644
index 00000000..bccb8b3d
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/wordpress2.tpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
new file mode 100644
index 00000000..0d933b30
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+} 
diff --git a/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl b/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
new file mode 100644
index 00000000..39e366b7
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/private-force-https.stpl b/install/debian/10/templates/web/nginx/private-force-https.stpl
new file mode 100644
index 00000000..7296bd71
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/private-force-https.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/private-force-https.tpl b/install/debian/10/templates/web/nginx/private-force-https.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/private-force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/10/templates/web/nginx/private-hosting.sh b/install/debian/10/templates/web/nginx/private-hosting.sh
new file mode 100755
index 00000000..abc9155d
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/private-hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/10/templates/web/nginx/private-hosting.stpl b/install/debian/10/templates/web/nginx/private-hosting.stpl
new file mode 100644
index 00000000..6ac66cbf
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/private-hosting.stpl
@@ -0,0 +1,40 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/private-hosting.tpl b/install/debian/10/templates/web/nginx/private-hosting.tpl
new file mode 100644
index 00000000..aa483ec9
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/private-hosting.tpl
@@ -0,0 +1,37 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl
new file mode 100644
index 00000000..3f5e8fa6
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+    access_log     /var/log/%web_system%/domains/%domain%.log combined;
+
+    location / {
+        proxy_pass      https://%ip%:12383;
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin/ {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.tpl b/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/10/templates/web/nginx/vesta.stpl b/install/debian/10/templates/web/nginx/vesta.stpl
new file mode 100644
index 00000000..4bf7d854
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/vesta.stpl
@@ -0,0 +1,32 @@
+server {
+    listen      %ip%:%proxy_ssl_port% http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+    access_log     /var/log/%web_system%/domains/%domain%.log combined;
+
+    location / {
+        proxy_pass      https://%ip%:8083;
+    }
+
+    location /webmail/ {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /phpmyadmin/ {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/vesta.tpl b/install/debian/10/templates/web/nginx/vesta.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/vesta.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/10/templates/web/php-fpm/default.tpl b/install/debian/10/templates/web/php-fpm/default.tpl
new file mode 100644
index 00000000..209e1e43
--- /dev/null
+++ b/install/debian/10/templates/web/php-fpm/default.tpl
@@ -0,0 +1,21 @@
+[%backend%]
+listen = 127.0.0.1:%backend_port%
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/10/templates/web/php-fpm/no-php.tpl b/install/debian/10/templates/web/php-fpm/no-php.tpl
new file mode 100644
index 00000000..047c33ed
--- /dev/null
+++ b/install/debian/10/templates/web/php-fpm/no-php.tpl
@@ -0,0 +1,20 @@
+;[%backend%]
+;listen = /dev/null
+
+;user = %user%
+;group = %user%
+
+;listen.owner = %user%
+;listen.group = www-data
+
+;pm = ondemand
+;pm.max_children = 4
+;pm.max_requests = 4000
+;pm.process_idle_timeout = 10s
+;pm.status_path = /status
+
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /home/%user%/tmp
+;env[TMPDIR] = /home/%user%/tmp
+;env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/10/templates/web/php-fpm/socket.tpl b/install/debian/10/templates/web/php-fpm/socket.tpl
new file mode 100644
index 00000000..a0151084
--- /dev/null
+++ b/install/debian/10/templates/web/php-fpm/socket.tpl
@@ -0,0 +1,24 @@
+[%backend%]
+listen = /var/run/php/%backend%.sock
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+listen.owner = %user%
+listen.group = www-data
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/10/templates/web/skel/document_errors/403.html b/install/debian/10/templates/web/skel/document_errors/403.html
new file mode 100755
index 00000000..9c3f6baa
--- /dev/null
+++ b/install/debian/10/templates/web/skel/document_errors/403.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>403 &mdash; Forbidden</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="You do not have permission to view this"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>403</h1>
+    <h2>Forbidden</h2>
+    <div>
+        Unfortunately, you do not have permission to view this
+    </div>
+</body>
+
+</html>
diff --git a/install/debian/10/templates/web/skel/document_errors/404.html b/install/debian/10/templates/web/skel/document_errors/404.html
new file mode 100755
index 00000000..2cee7708
--- /dev/null
+++ b/install/debian/10/templates/web/skel/document_errors/404.html
@@ -0,0 +1,28 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>404 &mdash; Not Found</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, page not found"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+    <h1>404</h1>
+    <h2>Page Not Found</h2>
+    <div>
+        It seems that the page you were trying to reach does not exist anymore, or maybe it has just moved.
+        You can start again from the <a href="http://%domain%/">home</a> or go back to <a href="javascript:%20history.go(-1)">previous page</a>.
+    </div>
+</body>
+</html>
diff --git a/install/debian/10/templates/web/skel/document_errors/50x.html b/install/debian/10/templates/web/skel/document_errors/50x.html
new file mode 100755
index 00000000..85ba648b
--- /dev/null
+++ b/install/debian/10/templates/web/skel/document_errors/50x.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>500 &mdash; Internal Sever Error</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, something went wrong. Internal Server Error"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>500</h1>
+    <h2>Internal Server Error</h2>
+    <div>
+        Sorry, something went wrong :(
+    </div>
+</body>
+
+</html>
diff --git a/install/debian/10/templates/web/skel/public_html/index.html b/install/debian/10/templates/web/skel/public_html/index.html
new file mode 100755
index 00000000..4f5bb724
--- /dev/null
+++ b/install/debian/10/templates/web/skel/public_html/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="http://vestacp.com/">Powered by VESTA</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/debian/10/templates/web/skel/public_html/robots.txt b/install/debian/10/templates/web/skel/public_html/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/debian/10/templates/web/skel/public_html/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/debian/10/templates/web/skel/public_shtml/index.html b/install/debian/10/templates/web/skel/public_shtml/index.html
new file mode 100755
index 00000000..4f5bb724
--- /dev/null
+++ b/install/debian/10/templates/web/skel/public_shtml/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="http://vestacp.com/">Powered by VESTA</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/debian/10/templates/web/skel/public_shtml/robots.txt b/install/debian/10/templates/web/skel/public_shtml/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/debian/10/templates/web/skel/public_shtml/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/debian/10/templates/web/suspend/.htaccess b/install/debian/10/templates/web/suspend/.htaccess
new file mode 100755
index 00000000..5a6df83f
--- /dev/null
+++ b/install/debian/10/templates/web/suspend/.htaccess
@@ -0,0 +1,2 @@
+ErrorDocument 403 /index.html
+ErrorDocument 404 /index.html
diff --git a/install/debian/10/templates/web/suspend/index.html b/install/debian/10/templates/web/suspend/index.html
new file mode 100755
index 00000000..f2d04e1f
--- /dev/null
+++ b/install/debian/10/templates/web/suspend/index.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>Website Suspended</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This website has been suspended."/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:84px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: 15px 0 25px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+<body>
+    <h1>SUSPENDED</h1>
+    <h2>This website has been suspended.</h2>
+    <div>
+        Please contact the technical support department.
+    </div>
+</body>
+</html>
diff --git a/install/debian/10/templates/web/webalizer/webalizer.tpl b/install/debian/10/templates/web/webalizer/webalizer.tpl
new file mode 100755
index 00000000..068adcfb
--- /dev/null
+++ b/install/debian/10/templates/web/webalizer/webalizer.tpl
@@ -0,0 +1,110 @@
+HostName         %domain_idn%
+LogFile          /var/log/%web_system%/domains/%domain%.log
+OutputDir        %home%/%user%/web/%domain%/stats
+HistoryName      %home%/%user%/web/%domain%/stats/%domain%.hist
+Incremental      yes
+IncrementalName  %home%/%user%/web/%domain%/stats/%domain%.current
+PageType         htm*
+PageType         cgi
+PageType         php
+PageType         shtml
+DNSCache         /var/lib/webalizer/dns_cache.db
+DNSChildren      10
+Quiet            yes
+FoldSeqErr       yes
+IndexAlias       index.php
+HideURL          *.gif
+HideURL          *.GIF
+HideURL          *.jpg
+HideURL          *.JPG
+HideURL          *.png
+HideURL          *.PNG
+HideURL          *.ra
+SearchEngine     abcsearch.          terms=
+SearchEngine     alexa.              q=
+SearchEngine     alltheweb.          q=
+SearchEngine     alltheweb.          query=
+SearchEngine     alot.               q=
+SearchEngine     altavista.          q=
+SearchEngine     aolsearch.          query=
+SearchEngine     aport.ru            r=
+SearchEngine     ask.                q=
+SearchEngine     atlas.cz            q=
+SearchEngine     bbc.                q=
+SearchEngine     bing.               q=
+SearchEngine     blingo.             q=
+SearchEngine     blogs.yandex.ru     text=
+SearchEngine     btopenworld         query=
+SearchEngine     buscador.ya.com     q=
+SearchEngine     busca.              q=
+SearchEngine     business.           query=
+SearchEngine     centrum.cz          q=
+SearchEngine     chiff.              q=
+SearchEngine     clusty.             query=
+SearchEngine     comcast.            q=
+SearchEngine     crawler.            q=
+SearchEngine     cuil.               q=
+SearchEngine     dmoz.               search=
+SearchEngine     dogpile.com         q=
+SearchEngine     dpxml               qkw=
+SearchEngine     eureka.             searchword=
+SearchEngine     euroseek.           string=
+SearchEngine     exalead.            q=
+SearchEngine     excite              search=
+SearchEngine     ezilon.             q=
+SearchEngine     fastbrowsersearch.  q=
+SearchEngine     feedster.com        q=
+SearchEngine     fireball.de         q=
+SearchEngine     fireball.           keyword=
+SearchEngine     freeserve.          q=
+SearchEngine     gigablast.          q=
+SearchEngine     gogo.ru             q=
+SearchEngine     go.mail.ru          q=
+SearchEngine     google.             q=
+SearchEngine     hakia.              q=
+SearchEngine     hotbot.             query=
+SearchEngine     infoseek.           qt=
+SearchEngine     iwon                searchfor=
+SearchEngine     ixquick.com         query=
+SearchEngine     joeant.             keywords=
+SearchEngine     jyxo.cz             s=
+SearchEngine     looksmart.          key=
+SearchEngine     lycos.              query=
+SearchEngine     mamma.              q=
+SearchEngine     metacrawler         q=
+SearchEngine     msn.                MT=
+SearchEngine     msxml               qkw=
+SearchEngine     mysearch.           searchfor=
+SearchEngine     mywebsearch.        searchfor=
+SearchEngine     netscape.           q=
+SearchEngine     nigma.ru            q=
+SearchEngine     northernlight.      qr=
+SearchEngine     ntlworld.           q=
+SearchEngine     orange.             q=
+SearchEngine     overture.           Keywords=
+SearchEngine     punto.ru            text=
+SearchEngine     rambler.            keyword=
+SearchEngine     search.aol.         q=
+SearchEngine     search.babylon.     q=
+SearchEngine     search.centrum.     phrase=
+SearchEngine     search.conduit.     q=
+SearchEngine     search.earthlink    q=
+SearchEngine     search.icq.         q=
+SearchEngine     search.live.com     q=
+SearchEngine     search.rambler.ru   words=
+SearchEngine     search.winamp.      q=
+SearchEngine     searchy.            q=
+SearchEngine     seznam.cz           w=
+SearchEngine     snap.               query=
+SearchEngine     teoma.              q=
+SearchEngine     teradex.com         q=
+SearchEngine     ukplus              key=
+SearchEngine     verizon.            q=
+SearchEngine     virginmedia.        q=
+SearchEngine     voila.              rdata=
+SearchEngine     webcrawler          searchText=
+SearchEngine     web.search.naver.   query=
+SearchEngine     wisenut             q=
+SearchEngine     yahoo.              p=
+SearchEngine     yandex.             text=
+SearchEngine     yodao.              q=
diff --git a/install/debian/10/vsftpd/vsftpd.conf b/install/debian/10/vsftpd/vsftpd.conf
new file mode 100644
index 00000000..1ca1a992
--- /dev/null
+++ b/install/debian/10/vsftpd/vsftpd.conf
@@ -0,0 +1,26 @@
+anonymous_enable=NO
+local_enable=YES
+write_enable=YES
+local_umask=022
+anon_umask=022
+anon_upload_enable=NO
+dirmessage_enable=YES
+xferlog_enable=YES
+connect_from_port_20=YES
+xferlog_std_format=YES
+dual_log_enable=YES
+chroot_local_user=YES
+listen=YES
+pam_service_name=vsftpd
+userlist_enable=NO
+tcp_wrappers=YES
+force_dot_files=YES
+ascii_upload_enable=YES
+ascii_download_enable=YES
+#allow_writable_chroot=YES
+allow_writeable_chroot=YES
+seccomp_sandbox=NO
+pasv_enable=YES
+pasv_max_port=12100
+pasv_min_port=12000
+use_localtime=YES

From 8e60da8a05585bf3d049a8a922a4fc388749ca45 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jul 2019 16:36:12 +0200
Subject: [PATCH 0482/2300] --allow-unauthenticated apt

---
 install/vst-install-debian.sh | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d2200d36..90f016ff 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -7,6 +7,9 @@
 #----------------------------------------------------------#
 export PATH=$PATH:/sbin
 export DEBIAN_FRONTEND=noninteractive
+
+ALLOW_INSECURE_APT=1
+
 RHOST='vesta.mycity-hosting.com'
 CHOST='c.mycity-hosting.com'
 VERSION='debian'
@@ -616,14 +619,22 @@ fi
 #----------------------------------------------------------#
 
 # Update system packages
-apt-get update
+if [ $ALLOW_INSECURE_APT -eq 1 ]; then
+  apt-get -o Acquire::AllowInsecureRepositories=true -o Acquire::AllowDowngradeToInsecureRepositories=true update
+else
+  apt-get update
+fi
 
 # Disable daemon autostart /usr/share/doc/sysv-rc/README.policy-rc.d.gz
 echo -e '#!/bin/sh \nexit 101' > /usr/sbin/policy-rc.d
 chmod a+x /usr/sbin/policy-rc.d
 
 # Install apt packages
-apt-get -y install $software
+if [ $ALLOW_INSECURE_APT -eq 1 ]; then
+  apt-get --allow-unauthenticated -y install $software
+else
+  apt-get -y install $software
+fi
 check_result $? "apt-get install failed"
 
 # Restore  policy

From 73e547b6c25a3de2edda88e6f42d7861576948b5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jul 2019 16:41:33 +0200
Subject: [PATCH 0483/2300] ALLOW_INSECURE_APT=0

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 90f016ff..d04ea636 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -8,7 +8,7 @@
 export PATH=$PATH:/sbin
 export DEBIAN_FRONTEND=noninteractive
 
-ALLOW_INSECURE_APT=1
+ALLOW_INSECURE_APT=0
 
 RHOST='vesta.mycity-hosting.com'
 CHOST='c.mycity-hosting.com'

From dc930753da0abb3afdf111358ef5268c4cf7482e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 13 Jul 2019 03:20:47 +0200
Subject: [PATCH 0484/2300] new repos

---
 install/vst-install-debian.sh | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d04ea636..e6ae615d 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -10,8 +10,8 @@ export DEBIAN_FRONTEND=noninteractive
 
 ALLOW_INSECURE_APT=0
 
-RHOST='vesta.mycity-hosting.com'
-CHOST='c.mycity-hosting.com'
+RHOST='apt.vesta.hostingpanel.dev'
+CHOST='c.vesta.hostingpanel.dev'
 VERSION='debian'
 VESTA='/usr/local/vesta'
 memory=$(grep 'MemTotal' /proc/meminfo |tr ' ' '\n' |grep [0-9])
@@ -263,7 +263,7 @@ if [ ! -e '/usr/bin/wget' ]; then
 fi
 
 # Checking repository availability
-wget -q "c.mycity-hosting.com/deb_signing.key" -O /dev/null
+wget -q "apt.vesta.hostingpanel.dev/deb_signing.key" -O /dev/null
 check_result $? "No access to Vesta repository"
 
 # Check installed packages
@@ -1023,8 +1023,8 @@ if [ "$mysql" = 'yes' ]; then
       rm -f phpMyAdmin-$pma_v-all-languages.tar.gz
       
       mkdir /root/phpmyadmin
-      wget -nv -O /root/phpmyadmin/pma.sh http://c.mycity-hosting.com/debian/10/pma/pma.sh 
-      wget -nv -O /root/phpmyadmin/create_tables.sql http://c.mycity-hosting.com/debian/10/pma/create_tables.sql
+      wget -nv -O /root/phpmyadmin/pma.sh http://c.vesta.hostingpanel.dev/debian/10/pma/pma.sh 
+      wget -nv -O /root/phpmyadmin/create_tables.sql http://c.vesta.hostingpanel.dev/debian/10/pma/create_tables.sql
       bash /root/phpmyadmin/pma.sh
   fi
 fi

From aba1210e7f5039249d26203c76b5b3868056aa91 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 13 Jul 2019 23:26:02 +0200
Subject: [PATCH 0485/2300] phpmyadmin fix

---
 install/vst-install-debian.sh | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index e6ae615d..6ddab7ad 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -988,6 +988,9 @@ if [ "$mysql" = 'yes' ]; then
 
     # Configuring phpMyAdmin
     if [ "$apache" = 'yes' ]; then
+        if [ "$release" -eq 10 ]; then
+            mkdir /etc/phpmyadmin
+        fi
         cp -f $vestacp/pma/apache.conf /etc/phpmyadmin/
         ln -s /etc/phpmyadmin/apache.conf /etc/apache2/conf.d/phpmyadmin.conf
     fi
@@ -995,11 +998,15 @@ if [ "$mysql" = 'yes' ]; then
     chmod 777 /var/lib/phpmyadmin/tmp
     if [ "$release" -eq 10 ]; then
       # Code borrowed from HestiaCP
+      mkdir /root/phpmyadmin
+      
       pma_v='4.9.0.1'
       echo "(*) Installing phpMyAdmin version v$pma_v..."
 
+      cd /root/phpmyadmin
+
       # Download latest phpmyadmin release
-      wget --quiet https://files.phpmyadmin.net/phpMyAdmin/$pma_v/phpMyAdmin-$pma_v-all-languages.tar.gz
+      wget -nv -O phpMyAdmin-$pma_v-all-languages.tar.gz https://files.phpmyadmin.net/phpMyAdmin/$pma_v/phpMyAdmin-$pma_v-all-languages.tar.gz
 
       # Unpack files
       tar xzf phpMyAdmin-$pma_v-all-languages.tar.gz
@@ -1022,7 +1029,6 @@ if [ "$mysql" = 'yes' ]; then
       rm -fr phpMyAdmin-$pma_v-all-languages
       rm -f phpMyAdmin-$pma_v-all-languages.tar.gz
       
-      mkdir /root/phpmyadmin
       wget -nv -O /root/phpmyadmin/pma.sh http://c.vesta.hostingpanel.dev/debian/10/pma/pma.sh 
       wget -nv -O /root/phpmyadmin/create_tables.sql http://c.vesta.hostingpanel.dev/debian/10/pma/create_tables.sql
       bash /root/phpmyadmin/pma.sh

From be5f180d2f76d22301a9d4724226d313b72fe474 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 13 Jul 2019 23:29:38 +0200
Subject: [PATCH 0486/2300] Removing insecure apt option

---
 install/vst-install-debian.sh | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 6ddab7ad..be2617a4 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -8,8 +8,6 @@
 export PATH=$PATH:/sbin
 export DEBIAN_FRONTEND=noninteractive
 
-ALLOW_INSECURE_APT=0
-
 RHOST='apt.vesta.hostingpanel.dev'
 CHOST='c.vesta.hostingpanel.dev'
 VERSION='debian'
@@ -630,11 +628,7 @@ echo -e '#!/bin/sh \nexit 101' > /usr/sbin/policy-rc.d
 chmod a+x /usr/sbin/policy-rc.d
 
 # Install apt packages
-if [ $ALLOW_INSECURE_APT -eq 1 ]; then
-  apt-get --allow-unauthenticated -y install $software
-else
-  apt-get -y install $software
-fi
+apt-get -y install $software
 check_result $? "apt-get install failed"
 
 # Restore  policy

From 710cc25148e7f6aaf194f88a04dd2a025ca6f58c Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 13 Jul 2019 23:36:22 +0200
Subject: [PATCH 0487/2300] softaculous=no by default

---
 install/vst-install-debian.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index be2617a4..ca6a1c7b 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -63,7 +63,7 @@ help() {
   -t, --spamassassin      Install SpamAssassin  [yes|no]  default: yes
   -i, --iptables          Install Iptables      [yes|no]  default: yes
   -b, --fail2ban          Install Fail2ban      [yes|no]  default: yes
-  -o, --softaculous       Install Softaculous   [yes|no]  default: yes
+  -o, --softaculous       Install Softaculous   [yes|no]  default: no
   -q, --quota             Filesystem Quota      [yes|no]  default: no
   -l, --lang              Default language                default: en
   -y, --interactive       Interactive install   [yes|no]  default: yes
@@ -202,8 +202,8 @@ done
 set_default_value 'nginx' 'yes'
 set_default_value 'apache' 'yes'
 set_default_value 'phpfpm' 'no'
-set_default_value 'vsftpd' 'yes'
-set_default_value 'proftpd' 'no'
+set_default_value 'vsftpd' 'no'
+set_default_value 'proftpd' 'yes'
 set_default_value 'named' 'yes'
 set_default_value 'mysql' 'yes'
 set_default_value 'postgresql' 'no'
@@ -219,7 +219,7 @@ else
 fi
 set_default_value 'iptables' 'yes'
 set_default_value 'fail2ban' 'yes'
-set_default_value 'softaculous' 'yes'
+set_default_value 'softaculous' 'no'
 set_default_value 'quota' 'no'
 set_default_value 'interactive' 'yes'
 set_default_lang 'en'

From cce2122fb51f481c0692b7d1ef4d1f1634151e63 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 14 Jul 2019 01:10:06 +0200
Subject: [PATCH 0488/2300] gen_pass() in pma.sh

---
 install/debian/10/pma/pma.sh | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/install/debian/10/pma/pma.sh b/install/debian/10/pma/pma.sh
index 81878b02..53ec9982 100644
--- a/install/debian/10/pma/pma.sh
+++ b/install/debian/10/pma/pma.sh
@@ -10,6 +10,17 @@
 # Changed some lines to fit to Hestia Configuration.
 #
 
+# Defining password-gen function
+gen_pass() {
+    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
+    LENGTH=10
+    while [ ${n:=1} -le $LENGTH ]; do
+        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
+        let n+=1
+    done
+    echo "$PASS"
+}
+
 PASS=$(gen_pass)
 
 #ubuntu phpmyadmin path
@@ -143,4 +154,4 @@ FLUSH PRIVILEGES;
 MYSQL_PMA3
 
 #MYSQL DB and TABLES ADDITION
-mysql -uroot < /root/phpmyadmin/create_tables.sql
\ No newline at end of file
+mysql -uroot < /root/phpmyadmin/create_tables.sql

From 834a2be4551de5a6072660f35610e0f56589f30e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 14 Jul 2019 01:42:21 +0200
Subject: [PATCH 0489/2300] Installation fixes

---
 install/vst-install-debian.sh | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ca6a1c7b..7e0f7a42 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -556,10 +556,10 @@ if [ "$apache" = 'no' ]; then
     software=$(echo "$software" | sed -e "s/libapache2-mod-php5//")
     software=$(echo "$software" | sed -e "s/libapache2-mod-php//")
 fi
-if [ "$phpfpm" = 'no' ]; then
-    software=$(echo "$software" | sed -e "s/php5-fpm//")
-    software=$(echo "$software" | sed -e "s/php-fpm//")
-fi
+# if [ "$phpfpm" = 'no' ]; then
+    # software=$(echo "$software" | sed -e "s/php5-fpm//")
+    # software=$(echo "$software" | sed -e "s/php-fpm//")
+# fi
 if [ "$vsftpd" = 'no' ]; then
     software=$(echo "$software" | sed -e "s/vsftpd//")
 fi
@@ -984,6 +984,7 @@ if [ "$mysql" = 'yes' ]; then
     if [ "$apache" = 'yes' ]; then
         if [ "$release" -eq 10 ]; then
             mkdir /etc/phpmyadmin
+            mkdir -p /var/lib/phpmyadmin/tmp
         fi
         cp -f $vestacp/pma/apache.conf /etc/phpmyadmin/
         ln -s /etc/phpmyadmin/apache.conf /etc/apache2/conf.d/phpmyadmin.conf
@@ -993,6 +994,7 @@ if [ "$mysql" = 'yes' ]; then
     if [ "$release" -eq 10 ]; then
       # Code borrowed from HestiaCP
       mkdir /root/phpmyadmin
+      mkdir /usr/share/phpmyadmin
       
       pma_v='4.9.0.1'
       echo "(*) Installing phpMyAdmin version v$pma_v..."

From bef9a5b8fde94911fc4ec798dc52108b3b1d8c4f Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Sun, 14 Jul 2019 02:00:41 +0200
Subject: [PATCH 0490/2300] proxy-ip.tpl

---
 install/debian/10/templates/web/nginx/proxy_ip.tpl | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100755 install/debian/10/templates/web/nginx/proxy_ip.tpl

diff --git a/install/debian/10/templates/web/nginx/proxy_ip.tpl b/install/debian/10/templates/web/nginx/proxy_ip.tpl
new file mode 100755
index 00000000..ae195617
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/proxy_ip.tpl
@@ -0,0 +1,9 @@
+server {
+    listen       %ip%:%proxy_port% default;
+    server_name  _;
+    #access_log  /var/log/nginx/%ip%.log main;
+    location / {
+        proxy_pass  http://%ip%:%web_port%;
+   }
+}
+

From ba02f6f7c65b536a1fffecce2bba178a60a2bea4 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 14 Jul 2019 02:35:15 +0200
Subject: [PATCH 0491/2300] installation fixes

---
 install/vst-install-debian.sh | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 7e0f7a42..073f19ea 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -868,6 +868,7 @@ if [ "$apache" = 'yes'  ]; then
     a2enmod actions
     # a2enmod ruid2
     a2enmod headers
+    a2enmod proxy_fcgi setenvif
     mkdir -p /etc/apache2/conf.d
     echo > /etc/apache2/conf.d/vesta.conf
     echo "# Powered by vesta" > /etc/apache2/sites-available/default
@@ -917,7 +918,7 @@ if [ -z "$ZONE" ]; then
 fi
 for pconf in $(find /etc/php* -name php.ini); do
     sed -i "s/;date.timezone =/date.timezone = $ZONE/g" $pconf
-    sed -i 's%_open_tag = Off%_open_tag = On%g' $pconf
+    # sed -i 's%_open_tag = Off%_open_tag = On%g' $pconf
 done
 
 
@@ -1331,7 +1332,7 @@ fi
 # Configuring mysql host
 if [ "$mysql" = 'yes' ]; then
     $VESTA/bin/v-add-database-host mysql localhost root $mpass
-    $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
+    # $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
 fi
 
 # Configuring pgsql host
@@ -1344,6 +1345,14 @@ fi
 $VESTA/bin/v-add-domain admin $servername
 check_result $? "can't create $servername domain"
 
+if [ "$release" -eq 10 ]; then
+  if [ -f "/etc/php/7.3/fpm/pool.d/$servername.conf" ]; then
+    sed -i "/^group =/c\group = www-data" /etc/php/7.3/fpm/pool.d/$servername.conf
+    sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/7.3/fpm/pool.d/$servername.conf
+    service php7.3-fpm restart
+  fi
+fi
+
 # Adding cron jobs
 command="sudo $VESTA/bin/v-update-sys-queue disk"
 $VESTA/bin/v-add-cron-job 'admin' '15' '02' '*' '*' '*' "$command"

From 6cff4053c026b31fa1a1a9b871b9b79f475e3185 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 14 Jul 2019 02:55:14 +0200
Subject: [PATCH 0492/2300] Vesta data sessions permissions

---
 install/vst-install-debian.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 073f19ea..e35cb531 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -703,7 +703,6 @@ chmod -R 750 $VESTA/data/queue
 chmod 660 $VESTA/log/*
 rm -f /var/log/vesta
 ln -s $VESTA/log /var/log/vesta
-chown admin:admin $VESTA/data/sessions
 chmod 770 $VESTA/data/sessions
 
 # Generating vesta configuration
@@ -1289,6 +1288,9 @@ if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
     chown admin:admin /var/log/roundcube
 fi
 
+# Vesta data sessions permissions
+chown admin:admin $VESTA/data/sessions
+
 # Configuring system ips
 $VESTA/bin/v-update-sys-ip
 

From 0517fe57e48530910e9d09c9534ad9b55b7d49d3 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 14 Jul 2019 04:07:01 +0200
Subject: [PATCH 0493/2300] version up

---
 src/deb/php/control | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/php/control b/src/deb/php/control
index e8702027..7ce0a96c 100644
--- a/src/deb/php/control
+++ b/src/deb/php/control
@@ -1,10 +1,10 @@
 Source: vesta-php
 Package: vesta-php
 Priority: optional
-Version: 0.9.8-23
+Version: 0.9.8-24
 Section: admin
-Maintainer: Serghey Rodin <skid@vestacp.com>
-Homepage: http://vestacp.com
+Maintainer: Predrag Damnjanovic <predrag@hostingpanel.dev>
+Homepage: http://vesta.hostingpanel.dev
 Architecture: amd64
 Depends: vesta
 Description: Vesta php-fpm

From 8ac896f2ae0c34ebd5c98f103225b7279ef0400e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 14 Jul 2019 04:21:00 +0200
Subject: [PATCH 0494/2300] empty php postinst

---
 src/deb/php/postinst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/php/postinst b/src/deb/php/postinst
index c9b3b1d2..212f2328 100755
--- a/src/deb/php/postinst
+++ b/src/deb/php/postinst
@@ -1,8 +1,8 @@
 #!/bin/bash
 
 # Run triggers only on updates
-if [ -e /usr/local/vesta/ioncube/ioncube.sh ]; then
-    /usr/local/vesta/ioncube/ioncube.sh add
-fi
+# if [ -e /usr/local/vesta/ioncube/ioncube.sh ]; then
+#     /usr/local/vesta/ioncube/ioncube.sh add
+# fi
 
 exit 0

From 3bf5860ce93641c1d97f468d691b0c9aceacb31e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 14 Jul 2019 04:26:21 +0200
Subject: [PATCH 0495/2300] Create copyright

---
 src/deb/php/copyright | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 src/deb/php/copyright

diff --git a/src/deb/php/copyright b/src/deb/php/copyright
new file mode 100644
index 00000000..7ae0df31
--- /dev/null
+++ b/src/deb/php/copyright
@@ -0,0 +1,30 @@
+Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: vesta-php
+Source: http://vesta.hostingpanel.dev
+
+Files: *
+Copyright: 2019 MyVesta <info@hostingpanel.dev>
+License: GPL-3.0+
+Remarks: Hestia is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
+
+License: GPL-3.0+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ .
+ This package is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
+ .
+ On Debian systems, the complete text of the GNU General
+ Public License version 3 can be found in /usr/share/common-licenses/GPL-3.
+
+# Please also look if there are files or directories which have a
+# different copyright/license attached and list them here.
+# Please avoid to pick license terms that are more restrictive than the
+# packaged work, as it may make Debian's contributions unacceptable upstream.

From 04c4d369a433f2abd38b10b07943a64718f6fb98 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 14 Jul 2019 04:32:55 +0200
Subject: [PATCH 0496/2300] Create php-fpm.conf

---
 src/deb/php/php-fpm.conf | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 src/deb/php/php-fpm.conf

diff --git a/src/deb/php/php-fpm.conf b/src/deb/php/php-fpm.conf
new file mode 100644
index 00000000..d9a04795
--- /dev/null
+++ b/src/deb/php/php-fpm.conf
@@ -0,0 +1,34 @@
+[global]
+pid = /var/run/vesta-php.pid
+daemonize = yes
+
+[www]
+user = admin
+group = admin
+listen = /var/run/vesta-php.sock
+listen.owner = admin
+listen.group = admin
+listen.mode = 0660
+
+pm = dynamic
+pm.max_children = 5
+pm.start_servers = 2
+pm.min_spare_servers = 1
+pm.max_spare_servers = 3
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /tmp
+env[TMPDIR] = /tmp
+env[TEMP] = /tmp
+env[VESTA] = $VESTA
+env[LANG] = en_US.UTF-8
+php_flag[display_errors] = off
+php_admin_value[error_log] = /usr/local/vesta/log/fpm-php.log
+php_admin_flag[log_errors] = on
+php_admin_value[memory_limit] = 256M
+php_admin_value[post_max_size] = 512M
+php_admin_value[upload_max_filesize] = 512M
+php_admin_value[max_execution_time] = 600
+php_admin_value[max_input_time] = 600
+php_admin_value[session.save_path] = /usr/local/vesta/data/sessions

From 325add4749340134f6f792cb1c1c5257339ac850 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 14 Jul 2019 07:04:50 +0200
Subject: [PATCH 0497/2300] Vesta FPM date.timezone = GMT

---
 src/deb/php/php-fpm.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/php/php-fpm.conf b/src/deb/php/php-fpm.conf
index d9a04795..494edc13 100644
--- a/src/deb/php/php-fpm.conf
+++ b/src/deb/php/php-fpm.conf
@@ -32,3 +32,4 @@ php_admin_value[upload_max_filesize] = 512M
 php_admin_value[max_execution_time] = 600
 php_admin_value[max_input_time] = 600
 php_admin_value[session.save_path] = /usr/local/vesta/data/sessions
+php_admin_value[date.timezone] = GMT

From 9c42ce85de30cc0615092689e37043576518b071 Mon Sep 17 00:00:00 2001
From: myrevery <16082142+myrevery@users.noreply.github.com>
Date: Mon, 15 Jul 2019 06:17:02 -0700
Subject: [PATCH 0498/2300] Update cn.php

Refine some details.
---
 web/inc/i18n/cn.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/web/inc/i18n/cn.php b/web/inc/i18n/cn.php
index 903afa60..dd39bc10 100644
--- a/web/inc/i18n/cn.php
+++ b/web/inc/i18n/cn.php
@@ -98,7 +98,7 @@ $LANG['cn'] = array(
     'list accounts' => '列出 %s 个账户',
     'add account' => '添加账户',
     'open webmail' => '打开网页邮箱',
-    'list fail2ban' => 'Fail2ban 封锁名单',
+    'list fail2ban' => 'Fail2ban 封锁列表',
     'open %s' => '打开 %s',
     'download' => '下载',
     'restore' => '恢复',
@@ -142,7 +142,7 @@ $LANG['cn'] = array(
     'Search Results' => '搜索结果',
     'Adding Firewall Rule' => '添加防火墙规则',
     'Editing Firewall Rule' => '编辑防火墙规则',
-    'Adding IP Address to Banlist' => '添加IP至封锁名单',
+    'Adding IP Address to Banlist' => '添加IP至封锁列表',
 
     'active' => '正常',
     'spnd' => '暂停',
@@ -765,5 +765,5 @@ $LANG['cn'] = array(
 
     'maximum characters length, including prefix' => '包含前缀最多 %s 个字符',
 
-    'Email Credentials' => '电子邮件证书',
+    'Email Credentials' => '电子邮件凭据',
 );

From f28c7aaefada04512b43b9e62c1c86d2fa87accb Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 17 Jul 2019 20:54:19 +0200
Subject: [PATCH 0499/2300] Set nameservers in installer

---
 install/vst-install-debian.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index e35cb531..40870631 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -805,6 +805,10 @@ cp -rf $vestacp/packages $VESTA/data/
 # Installing templates
 cp -rf $vestacp/templates $VESTA/data/
 
+# Set nameservers
+sed -i "s/YOURHOSTNAME1/ns1.$servername/" /usr/local/vesta/data/packages/default.pkg
+sed -i "s/YOURHOSTNAME2/ns2.$servername/" /usr/local/vesta/data/packages/default.pkg
+
 # Copying index.html to default documentroot
 cp $VESTA/data/templates/web/skel/public_html/index.html /var/www/
 sed -i 's/%domain%/It worked!/g' /var/www/index.html

From 1c64b8b321573384446cfd3af7ef26161c2819ee Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 17 Jul 2019 21:34:23 +0200
Subject: [PATCH 0500/2300] nginx version up

---
 src/deb/nginx/control | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index 19ec8bbb..0a82be1f 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -1,10 +1,10 @@
 Source: vesta-nginx
 Package: vesta-nginx
 Priority: optional
-Version: 0.9.8-23
+Version: 0.9.8-24
 Section: admin
-Maintainer: Serghey Rodin <skid@vestacp.com>
-Homepage: http://vestacp.com
+Maintainer: Predrag Damnjanovic <predrag@hostingpanel.dev>
+Homepage: http://vesta.hostingpanel.dev
 Architecture: amd64
 Depends: vesta
 Description: Vesta Nginx

From 7326aad784759ff4bb5505cc83fd2dfa1a2cb518 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 17 Jul 2019 21:44:24 +0200
Subject: [PATCH 0501/2300] create copyright

---
 src/deb/nginx/copyright | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 src/deb/nginx/copyright

diff --git a/src/deb/nginx/copyright b/src/deb/nginx/copyright
new file mode 100644
index 00000000..4a9369f7
--- /dev/null
+++ b/src/deb/nginx/copyright
@@ -0,0 +1,30 @@
+Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: vesta-nginx
+Source: http://vesta.hostingpanel.dev
+
+Files: *
+Copyright: 2019 MyVesta <info@hostingpanel.dev>
+License: GPL-3.0+
+Remarks: Hestia is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
+
+License: GPL-3.0+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ .
+ This package is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
+ .
+ On Debian systems, the complete text of the GNU General
+ Public License version 3 can be found in /usr/share/common-licenses/GPL-3.
+
+# Please also look if there are files or directories which have a
+# different copyright/license attached and list them here.
+# Please avoid to pick license terms that are more restrictive than the
+# packaged work, as it may make Debian's contributions unacceptable upstream.

From 968f7fb5464ac075be05afb2d55f42d427d78846 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 17 Jul 2019 21:49:54 +0200
Subject: [PATCH 0502/2300] Create nginx.conf

---
 src/deb/nginx/nginx.conf | 128 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 128 insertions(+)
 create mode 100644 src/deb/nginx/nginx.conf

diff --git a/src/deb/nginx/nginx.conf b/src/deb/nginx/nginx.conf
new file mode 100644
index 00000000..75e94f2c
--- /dev/null
+++ b/src/deb/nginx/nginx.conf
@@ -0,0 +1,128 @@
+user                    admin;
+worker_processes        1;
+error_log               /usr/local/vesta/log/nginx-error.log;
+pid                     /var/run/vesta-nginx.pid;
+
+events {
+        worker_connections  128;
+        use                 epoll;
+}
+
+http {
+    # Main settings
+    sendfile                        on;
+    tcp_nopush                      on;
+    tcp_nodelay                     on;
+    client_header_timeout           1m;
+    client_body_timeout             3m;
+    client_header_buffer_size       2k;
+    client_body_buffer_size         256k;
+    client_max_body_size            256m;
+    large_client_header_buffers     4   8k;
+    send_timeout                    30;
+    keepalive_timeout               60 60;
+    reset_timedout_connection       on;
+    server_tokens                   off;
+    server_name_in_redirect         off;
+    server_names_hash_max_size      512;
+    server_names_hash_bucket_size   512;
+
+
+    # Log format
+    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
+                        '"$status" $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  bytes   '$body_bytes_sent';
+    access_log          /usr/local/vesta/log/nginx-access.log main;
+
+
+    # SSL PCI Compliance
+    ssl_protocols               TLSv1.2 TLSv1.1 TLSv1;
+    ssl_ciphers                 EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
+    ssl_session_cache           shared:SSL:10m;
+    ssl_prefer_server_ciphers   on;
+
+
+    # Mime settings
+    include             /usr/local/vesta/nginx/conf/mime.types;
+    default_type        application/octet-stream;
+
+
+    # Compression
+    gzip                on;
+    gzip_comp_level     9;
+    gzip_min_length     512;
+    gzip_buffers        8 64k;
+    gzip_types          text/plain text/css text/javascript
+                        application/x-javascript application/javascript;
+    gzip_proxied        any;
+
+
+    # Proxy settings
+    proxy_redirect      off;
+    proxy_set_header    Host            $host;
+    proxy_set_header    X-Real-IP       $remote_addr;
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_header   Set-Cookie;
+    proxy_connect_timeout   90;
+    proxy_send_timeout  90;
+    proxy_read_timeout  90;
+    proxy_buffers       32 4k;
+    fastcgi_read_timeout 300;
+
+    # Error pages
+    error_page          403          /error/403.html;
+    error_page          404          /error/404.html;
+    error_page          502 503 504  /error/50x.html;
+
+
+    # Vhost
+    server {
+        listen          12383;
+        server_name     _;
+        root            /usr/local/vesta/web;
+        charset         utf-8;
+
+        # Fix error "The plain HTTP request was sent to HTTPS port"
+        error_page      497 https://$host:$server_port$request_uri;
+
+        ssl                  on;
+        ssl_certificate      /usr/local/vesta/ssl/certificate.crt;
+        ssl_certificate_key  /usr/local/vesta/ssl/certificate.key;
+        ssl_session_cache    shared:SSL:10m;
+        ssl_session_timeout  10m;
+
+        error_page      404     /error/404/index.html;
+        error_page      403     /error/index.html;
+        error_page      500     /error/index.html;
+
+        location / {
+            expires max;
+            index   index.php;
+        }
+
+        location /error/ {
+            expires max;
+            index   index.html;
+        }
+
+        location /rrd/ {
+            expires off;
+            internal;
+        }
+
+        location /backup/ {
+            root    /;
+            internal;
+        }
+
+        location ~ \.php$ {
+            include         /usr/local/vesta/nginx/conf/fastcgi_params;
+            fastcgi_param   SCRIPT_FILENAME /usr/local/vesta/web/$fastcgi_script_name;
+            fastcgi_param   QUERY_STRING    $query_string;
+            fastcgi_pass    unix:/var/run/vesta-php.sock;
+            fastcgi_intercept_errors        on;
+            break;
+        }
+    }
+}

From 70ee7404f3dce7ac2c791ec394e4db3a1f22d105 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 17 Jul 2019 22:10:08 +0200
Subject: [PATCH 0503/2300] Adding ns1 and  ns2 to installer

---
 install/vst-install-debian.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 40870631..710de4e9 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1351,6 +1351,10 @@ fi
 $VESTA/bin/v-add-domain admin $servername
 check_result $? "can't create $servername domain"
 
+# Adding ns1 and ns2 A records
+/usr/local/vesta/bin/v-add-dns-record 'admin' "$servername" 'ns1' 'A' "$pub_ip"
+/usr/local/vesta/bin/v-add-dns-record 'admin' "$servername" 'ns2' 'A' "$pub_ip"
+
 if [ "$release" -eq 10 ]; then
   if [ -f "/etc/php/7.3/fpm/pool.d/$servername.conf" ]; then
     sed -i "/^group =/c\group = www-data" /etc/php/7.3/fpm/pool.d/$servername.conf

From e54e1feb37ca0d501d0b82855246dbfb1a98d3b9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 17 Jul 2019 22:49:54 +0200
Subject: [PATCH 0504/2300] port 8083

---
 src/deb/nginx/nginx.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/nginx/nginx.conf b/src/deb/nginx/nginx.conf
index 75e94f2c..0a427f07 100644
--- a/src/deb/nginx/nginx.conf
+++ b/src/deb/nginx/nginx.conf
@@ -78,7 +78,7 @@ http {
 
     # Vhost
     server {
-        listen          12383;
+        listen          8083;
         server_name     _;
         root            /usr/local/vesta/web;
         charset         utf-8;

From 3a786e9ee1e8f7459b35a50f48f16871d2317fe4 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 18 Jul 2019 00:26:33 +0200
Subject: [PATCH 0505/2300] blowfish secret

---
 install/vst-install-debian.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 710de4e9..711f12f1 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -81,7 +81,7 @@ help() {
 # Defining password-gen function
 gen_pass() {
     MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
-    LENGTH=10
+    LENGTH=32
     while [ ${n:=1} -le $LENGTH ]; do
         PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
         let n+=1
@@ -1032,6 +1032,8 @@ if [ "$mysql" = 'yes' ]; then
       wget -nv -O /root/phpmyadmin/pma.sh http://c.vesta.hostingpanel.dev/debian/10/pma/pma.sh 
       wget -nv -O /root/phpmyadmin/create_tables.sql http://c.vesta.hostingpanel.dev/debian/10/pma/create_tables.sql
       bash /root/phpmyadmin/pma.sh
+      blowfish=$(gen_pass)
+      echo "\$cfg['blowfish_secret'] = '$blowfish';" >> /etc/phpmyadmin/config.inc.php
   fi
 fi
 

From 881d620cd6c49b1c102eed9cce39cf5af16e5fdf Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 18 Jul 2019 03:29:14 +0200
Subject: [PATCH 0506/2300] Update v-update-sys-vesta-all

---
 bin/v-update-sys-vesta-all | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-sys-vesta-all b/bin/v-update-sys-vesta-all
index b43fc793..75bc036f 100755
--- a/bin/v-update-sys-vesta-all
+++ b/bin/v-update-sys-vesta-all
@@ -22,7 +22,7 @@ source $VESTA/conf/vesta.conf
 #----------------------------------------------------------#
 
 # Starting update loop
-for package in vesta vesta-nginx vesta-php vesta-ioncube vesta-softaculous; do
+for package in vesta vesta-nginx vesta-php; do
     $BIN/v-update-sys-vesta "$package"
 done
 

From f30c41240af5692f21066c792610ce883a1eca42 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 18 Jul 2019 15:28:39 +0200
Subject: [PATCH 0507/2300] Update postinst

---
 src/deb/vesta/postinst | 34 ++++------------------------------
 1 file changed, 4 insertions(+), 30 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 516df08b..131e36ec 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -5,35 +5,9 @@ if [ ! -e "/usr/local/vesta/data/users/admin" ]; then
     exit
 fi
 
-# Run SUDO trigger
-if [ -x "/usr/local/vesta/upd/add_sudo.sh" ]; then
-    /usr/local/vesta/upd/add_sudo.sh
-fi
-
-# Run Notification trigger
-if [ -x "/usr/local/vesta/upd/add_notifications.sh" ]; then
-    /usr/local/vesta/upd/add_notifications.sh
-fi
-
-# Run session save path trigger
-if [ -x "/usr/local/vesta/upd/fix_sessions.sh" ]; then
-    /usr/local/vesta/upd/fix_sessions.sh
-fi
-
-if [ -x /usr/local/vesta/upd/fix_nginx_auth.sh ]; then
-    /usr/local/vesta/upd/fix_nginx_auth.sh
-fi
-
-if [ -x /usr/local/vesta/upd/fix_roundcube.sh ]; then
-    /usr/local/vesta/upd/fix_roundcube.sh
-fi
-
-if [ -x /usr/local/vesta/upd/limit_sudo.sh ]; then
-    /usr/local/vesta/upd/limit_sudo.sh
-fi
-
-if [ -x /usr/local/vesta/upd/fix_dhcprenew.sh ]; then
-    /usr/local/vesta/upd/fix_dhcprenew.sh
-fi
+# Run triggers
+# if [ -x "/usr/local/vesta/upd/sonething.sh" ]; then
+#    /usr/local/vesta/upd/something.sh
+# fi
 
 exit 0

From b72b6153aead14422c352620e3ea291dd57adcc6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 18 Jul 2019 15:30:20 +0200
Subject: [PATCH 0508/2300] Update copyright

---
 src/deb/vesta/copyright | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/deb/vesta/copyright b/src/deb/vesta/copyright
index 4adbe88e..53e623e3 100644
--- a/src/deb/vesta/copyright
+++ b/src/deb/vesta/copyright
@@ -1,10 +1,11 @@
 Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
-Upstream-Name: vesta
-Source: http://vestacp.com
+Upstream-Name: vesta-php
+Source: http://vesta.hostingpanel.dev
 
 Files: *
-Copyright: 2013 Serghey Rodin <skid@vestacp.com>
+Copyright: 2019 MyVesta <info@hostingpanel.dev>
 License: GPL-3.0+
+Remarks: MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
 
 License: GPL-3.0+
  This program is free software: you can redistribute it and/or modify
@@ -27,4 +28,3 @@ License: GPL-3.0+
 # different copyright/license attached and list them here.
 # Please avoid to pick license terms that are more restrictive than the
 # packaged work, as it may make Debian's contributions unacceptable upstream.
-

From 83ec58d5133adafe2ae329c158e613bfe324360d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 18 Jul 2019 15:31:07 +0200
Subject: [PATCH 0509/2300] Update copyright

---
 src/deb/php/copyright | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/php/copyright b/src/deb/php/copyright
index 7ae0df31..53e623e3 100644
--- a/src/deb/php/copyright
+++ b/src/deb/php/copyright
@@ -5,7 +5,7 @@ Source: http://vesta.hostingpanel.dev
 Files: *
 Copyright: 2019 MyVesta <info@hostingpanel.dev>
 License: GPL-3.0+
-Remarks: Hestia is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
+Remarks: MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
 
 License: GPL-3.0+
  This program is free software: you can redistribute it and/or modify

From 97954f4db5b6d8ea76576005cf53cfe791e8c328 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 18 Jul 2019 15:33:23 +0200
Subject: [PATCH 0510/2300] Update copyright

---
 src/deb/nginx/copyright | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/nginx/copyright b/src/deb/nginx/copyright
index 4a9369f7..6436d28e 100644
--- a/src/deb/nginx/copyright
+++ b/src/deb/nginx/copyright
@@ -5,7 +5,7 @@ Source: http://vesta.hostingpanel.dev
 Files: *
 Copyright: 2019 MyVesta <info@hostingpanel.dev>
 License: GPL-3.0+
-Remarks: Hestia is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
+Remarks: MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
 
 License: GPL-3.0+
  This program is free software: you can redistribute it and/or modify

From 05b71e4fb652b4e40b1f01241544a6f3ddee829c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 18 Jul 2019 15:35:12 +0200
Subject: [PATCH 0511/2300] Update conffiles

---
 src/deb/vesta/conffiles | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/src/deb/vesta/conffiles b/src/deb/vesta/conffiles
index a4af675a..78913555 100644
--- a/src/deb/vesta/conffiles
+++ b/src/deb/vesta/conffiles
@@ -1,9 +1 @@
-/usr/local/vesta/web/images/sprite.png
-/usr/local/vesta/web/images/favicon.ico
-/usr/local/vesta/web/css/file_manager.css
-/usr/local/vesta/web/css/file_manager_editor.css
-/usr/local/vesta/web/css/jquery.arcticmodal.css
-/usr/local/vesta/web/css/jquery-custom-dialogs.css
-/usr/local/vesta/web/css/jquery.fileupload.css
-/usr/local/vesta/web/css/styles.min.css
-/usr/local/vesta/web/css/uploadify.css
+/usr/local/vesta/conf/vesta.conf

From eddb8f7c21144854bf690e273d173249e97fa977 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 18 Jul 2019 15:38:52 +0200
Subject: [PATCH 0512/2300] Update control

---
 src/deb/php/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/php/control b/src/deb/php/control
index 7ce0a96c..19241c72 100644
--- a/src/deb/php/control
+++ b/src/deb/php/control
@@ -11,4 +11,4 @@ Description: Vesta php-fpm
  Vesta is an open source hosting control panel.
  Vesta has a clean and focused interface without the clutter.
  Vesta has the latest of very innovative technologies.
-
+ MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin

From 3951d5fd8d93b0d2a4646ecf02899ebc326f498e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 18 Jul 2019 15:39:15 +0200
Subject: [PATCH 0513/2300] Update control

---
 src/deb/vesta/control | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 9f83c2a6..775615dd 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,13 +1,14 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-23
+Version: 0.9.8-24
 Section: admin
-Maintainer: Serghey Rodin <skid@vestacp.com>
-Homepage: http://vestacp.com
+Maintainer: Predrag Damnjanovic <predrag@hostingpanel.dev>
+Homepage: http://vesta.hostingpanel.dev
 Architecture: amd64
 Depends: bash, awk, sed
 Description: Vesta
  Vesta is an open source hosting control panel.
  Vesta has a clean and focused interface without the clutter.
  Vesta has the latest of very innovative technologies.
+ MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin

From 2cd3171275f1e395ee69aa4eb366ee70a7edd781 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 18 Jul 2019 15:40:11 +0200
Subject: [PATCH 0514/2300] Update control

---
 src/deb/nginx/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index 0a82be1f..0e7c86ea 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -11,4 +11,4 @@ Description: Vesta Nginx
  Vesta is an open source hosting control panel.
  Vesta has a clean and focused interface without the clutter.
  Vesta has the latest of very innovative technologies.
-
+ MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin

From 9b702509e32246a1a0dc5296b4c1673e7c0ab103 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 18 Jul 2019 16:51:03 +0200
Subject: [PATCH 0515/2300] Sending mail fix

---
 src/deb/php/php-fpm.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/php/php-fpm.conf b/src/deb/php/php-fpm.conf
index 494edc13..d09550f7 100644
--- a/src/deb/php/php-fpm.conf
+++ b/src/deb/php/php-fpm.conf
@@ -33,3 +33,4 @@ php_admin_value[max_execution_time] = 600
 php_admin_value[max_input_time] = 600
 php_admin_value[session.save_path] = /usr/local/vesta/data/sessions
 php_admin_value[date.timezone] = GMT
+php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i

From 36e2586c765e57ebd68fb2b155a190567b811e40 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 19 Jul 2019 15:20:24 +0200
Subject: [PATCH 0516/2300] Adding script that compile Vesta .deb packages

---
 src/deb/vesta_compile.sh | 381 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 381 insertions(+)
 create mode 100644 src/deb/vesta_compile.sh

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
new file mode 100644
index 00000000..7d835e8b
--- /dev/null
+++ b/src/deb/vesta_compile.sh
@@ -0,0 +1,381 @@
+#!/bin/bash
+
+# Autocompile Script for VestaCP deb Files.
+# Made for MyVesta fork.
+# Autocompile script borrowed from HestiaCP, special thanks to Raphael Schneeberger
+
+wait_to_press_enter=1
+run_apt_update_and_install=1
+add_deb_to_apt_repo=0
+
+function press_enter {
+    if [ $wait_to_prss_enter -eq 1 ]; then
+        read -p "$1"
+    else
+        echo $1
+    fi
+}
+
+# Set compiling directory
+BUILD_DIR='/usr/src'
+INSTALL_DIR='/usr/local/vesta'
+
+# Set git repository raw path
+GIT_REP='https://raw.githubusercontent.com/myvesta/vesta/master/src/deb'
+
+PATH_OF_APT_REPO='/var/www/html/buster'
+
+# Set Version for compiling
+VESTA_V='0.9.8-24_amd64'
+NGINX_V='1.17.1'
+OPENSSL_V='1.1.1c'
+PCRE_V='8.43'
+ZLIB_V='1.2.11'
+PHP_V='5.6.40'
+
+# Generate Links for sourcecode
+VESTA='https://github.com/myvesta/vesta/archive/master.zip'
+NGINX='https://nginx.org/download/nginx-'$NGINX_V'.tar.gz'
+OPENSSL='https://www.openssl.org/source/openssl-'$OPENSSL_V'.tar.gz'
+PCRE='https://ftp.pcre.org/pub/pcre/pcre-'$PCRE_V'.tar.gz'
+ZLIB='https://www.zlib.net/zlib-'$ZLIB_V'.tar.gz'
+PHP='http://de2.php.net/distributions/php-'$PHP_V'.tar.gz'
+
+# Set package dependencies for compiling
+SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config'
+
+# Install needed software
+if [ $run_apt_update_and_install -eq 1 ]; then
+  echo "Update system repository..."
+  
+  apt-get -qq update
+  echo "Installing dependencies for compilation..."
+  apt-get -qq install -y $SOFTWARE
+  
+  # Fix for Debian PHP Envroiment
+  if [ ! -e /usr/local/include/curl ]; then
+      ln -s /usr/include/x86_64-linux-gnu/curl /usr/local/include/curl
+  fi
+  press_enter "=== Press enter to continue ==============================================================================="
+fi
+
+
+# Set packages to compile
+for arg; do
+  case "$1" in
+    --all)
+      NGINX_B='true'
+      PHP_B='true'
+      VESTA_B='true'
+      ;;
+    --nginx)
+      NGINX_B='true'
+      ;;
+    --php)
+      PHP_B='true'
+      ;;
+    --vesta)
+      VESTA_B='true'
+      ;;
+    *)
+      NOARGUMENT='true'
+      ;;
+  esac
+done
+
+if [[ $# -eq 0 ]] ; then
+  echo "!!! Please run with argument --all, --vesta, --nginx or --php !!!"
+  exit 1
+fi
+
+
+#################################################################################
+#
+# Building vesta-nginx
+#
+#################################################################################
+
+if [ "$NGINX_B" = true ] ; then
+  echo "======= Building vesta-nginx ======="
+
+  echo "=== Change to build directory"
+  cd $BUILD_DIR
+  
+  BUILDING_NOW=0
+  # Check if target directory exist
+  if [ ! -d $BUILD_DIR/vesta-nginx_$VESTA_V ]; then
+  	#mv $BUILD_DIR/vesta-nginx_$VESTA_V $BUILD_DIR/vesta-nginx_$VESTA_V-$(timestamp)
+  	# rm -r $BUILD_DIR/vesta-nginx_$VESTA_V
+    # fi
+  
+    BUILDING_NOW=1
+    echo "=== Create directory"
+    mkdir $BUILD_DIR/vesta-nginx_$VESTA_V
+    
+    press_enter "=== Download and unpack source files"
+    wget -nv -qO- $NGINX | tar xz
+    wget -nv -qO- $OPENSSL | tar xz
+    wget -nv -qO- $PCRE | tar xz
+    wget -nv -qO- $ZLIB | tar xz
+    
+    echo "=== Change to nginx directory"
+    cd nginx-$NGINX_V
+    
+    press_enter "=== Press enter to configure nginx"
+    ./configure 	--prefix=/usr/local/vesta/nginx \
+    		--with-http_ssl_module \
+    		--with-openssl=../openssl-$OPENSSL_V \
+    		--with-openssl-opt=enable-ec_nistp_64_gcc_128 \
+    		--with-openssl-opt=no-nextprotoneg \
+    		--with-openssl-opt=no-weak-ssl-ciphers \
+    		--with-openssl-opt=no-ssl3 \
+    		--with-pcre=../pcre-$PCRE_V \
+    	        --with-pcre-jit \
+    		--with-zlib=../zlib-$ZLIB_V
+    
+    # Check install directory and move if exists
+    if [ -d $INSTALL_DIR ]; then
+    	#mv $INSTALL_DIR $INSTALL_DIR$(timestamp)
+    	rm -r $INSTALL_DIR
+    fi
+    
+    press_enter "=== Press enter to make && make install"
+    make && make install
+    
+    press_enter "=== Press enter to clear up unused files"
+    cd $BUILD_DIR
+    rm -r nginx-$NGINX_V openssl-$OPENSSL_V pcre-$PCRE_V zlib-$ZLIB_V
+  fi
+  
+  press_enter "=== Press enter to Prepare Deb Package Folder Structure"
+  cd vesta-nginx_$VESTA_V/
+  mkdir -p usr/local/vesta etc/init.d DEBIAN
+  
+  press_enter "=== Press enter to Download control, postinst and postrm files"
+  cd DEBIAN
+  wget -nv $GIT_REP/nginx/control -O control
+  wget -nv $GIT_REP/nginx/copyright -O copyright
+  wget -nv $GIT_REP/nginx/postinst -O postinst
+  wget -nv $GIT_REP/nginx/postrm -O postrm
+  chmod +x postinst postrm
+  
+  cd ..
+  if [ $BUILDING_NOW -eq 1 ]; then
+    echo "=== Move nginx directory"
+    mv /usr/local/vesta/nginx usr/local/vesta/
+  fi
+  
+  echo "=== Get Service File"
+  cd etc/init.d
+  wget -nv $GIT_REP/nginx/vesta
+  chmod +x vesta
+  
+  echo "=== Get nginx.conf"
+  cd ../../
+  wget -nv $GIT_REP/nginx/nginx.conf -O usr/local/vesta/nginx/conf/nginx.conf
+  
+  if [ $BUILDING_NOW -eq 1 ]; then
+    echo "=== copy binary"
+    cp usr/local/vesta/nginx/sbin/nginx usr/local/vesta/nginx/sbin/vesta-nginx
+  fi
+  
+  press_enter "=== Press enter to build the package"
+  cd /usr/src
+  dpkg-deb --build vesta-nginx_$VESTA_V
+    
+  if [ $add_deb_to_apt_repo -eq 1 ]; then
+    press_enter "=== Press enter to sign the package ==============================================================================="
+    
+    export GPG_TTY=$(tty)
+    dpkg-sig --sign builder vesta-nginx_$VESTA_V.deb
+    cd $PATH_OF_APT_REPO
+    
+    press_enter "=== Press enter to add to repo ==============================================================================="
+    
+    reprepro --ask-passphrase -Vb . remove buster vesta-nginx
+    reprepro --ask-passphrase -Vb . includedeb buster $BUILD_DIR/vesta-nginx_$VESTA_V.deb
+  fi
+
+  # clear up the source folder
+  # rm -r vesta-nginx_$VESTA_V
+fi
+
+#################################################################################
+#
+# Building vesta-php
+#
+#################################################################################
+
+
+if [ "$PHP_B" = true ] ; then
+  echo "======= Building vesta-php ======="
+  echo "=== Change to build directory: $BUILD_DIR"
+  cd $BUILD_DIR
+  
+  BUILDING_NOW=0
+  # Check if target directory exist
+  if [ ! -d $BUILD_DIR/vesta-php_$VESTA_V ]; then
+      # #mv $BUILD_DIR/vesta-php_$VESTA_V $BUILD_DIR/vesta-php_$VESTA_V-$(timestamp)
+  	  # rm -r $BUILD_DIR/vesta-php_$VESTA_V
+    # fi
+	BUILDING_NOW=1
+    
+    echo "=== Create directory: $BUILD_DIR/vesta-php_$VESTA_V"
+    mkdir $BUILD_DIR/vesta-php_$VESTA_V
+    
+    echo "=== Download and unpack source files"
+    wget -nv -qO- $PHP | tar xz
+    
+    echo "=== Change to php directory php-$PHP_V"
+    cd php-$PHP_V
+    
+    press_enter "=== Press enter to continue ==============================================================================="
+    
+    echo "=== Configure PHP"
+    ./configure --prefix=/usr/local/vesta/php \
+                --enable-fpm \
+                --with-zlib \
+                --with-fpm-user=admin \
+                --with-fpm-group=admin \
+                --with-mysql \
+                --with-mysqli \
+                --with-curl \
+                --enable-mbstring
+    
+    press_enter "=== Press enter to Create the files and install them ==============================================================================="
+    
+    make && make install
+    
+    press_enter "=== Press enter to continue ==============================================================================="
+    
+    echo "=== Clear up unused files: $BUILD_DIR/php-$PHP_V"
+    cd $BUILD_DIR
+    rm -r php-$PHP_V
+  fi
+  
+  echo "=== Prepare Deb Package Folder Structure: $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta and $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN"
+  cd vesta-php_$VESTA_V/
+  mkdir -p usr/local/vesta/php DEBIAN
+  
+  echo "=== Download control, postinst and postrm files"
+  cd DEBIAN
+  wget -nv $GIT_REP/php/postinst -O postinst
+  chmod 0755 postinst
+  wget -nv $GIT_REP/php/control -O control
+  wget -nv $GIT_REP/php/copyright -O copyright
+ 
+  press_enter "=== Press enter to move php directory ==============================================================================="
+  cd ..
+  
+  if [ $BUILDING_NOW -eq 1 ]; then
+    echo "=== Moving php directory"
+    mv /usr/local/vesta/php usr/local/vesta/
+    press_enter "=== Done, press enter ==============================================================================="
+  fi
+
+  echo "=== Get php-fpm.conf"
+  wget -nv $GIT_REP/php/php-fpm.conf -O usr/local/vesta/php/etc/php-fpm.conf
+  
+  if [ $BUILDING_NOW -eq 1 ]; then
+    echo "=== copy binary"
+    cp usr/local/vesta/php/sbin/php-fpm usr/local/vesta/php/sbin/vesta-php
+  fi
+  
+  press_enter "=== Press enter to build the package ==============================================================================="
+
+  echo "=== build the package"
+  cd /usr/src
+  if [ -f "vesta-php_$VESTA_V.deb" ]; then
+    rm vesta-php_$VESTA_V.deb
+  fi
+  dpkg-deb --build vesta-php_$VESTA_V
+  
+  if [ $add_deb_to_apt_repo -eq 1 ]; then
+    press_enter "=== Press enter to sign the package ==============================================================================="
+    
+    export GPG_TTY=$(tty)
+    dpkg-sig --sign builder vesta-php_$VESTA_V.deb
+    
+    press_enter "=== Press enter to add to repo ==============================================================================="
+    
+    cd $PATH_OF_APT_REPO
+    reprepro --ask-passphrase -Vb . remove buster vesta-php
+    reprepro --ask-passphrase -Vb . includedeb buster $BUILD_DIR/vesta-php_$VESTA_V.deb
+  fi
+
+  # clear up the source folder
+  # rm -r vesta-php_$VESTA_V
+  
+  echo "=== All done"
+fi
+
+#################################################################################
+#
+# Building vesta
+#
+#################################################################################
+
+if [ "$VESTA_B" = true ] ; then
+  # Change to build directory
+  cd $BUILD_DIR
+  
+  # Check if target directory exist
+  if [ -d $BUILD_DIR/vesta_$VESTA_V ]; then
+  	rm -r $BUILD_DIR/vesta_$VESTA_V
+  fi
+  if [ -d $BUILD_DIR/vesta-master ]; then
+  	rm -r $BUILD_DIR/vesta-master
+  fi
+  
+  # Create directory
+  mkdir $BUILD_DIR/vesta_$VESTA_V
+  
+  # Download and unpack source files
+  wget -nv $VESTA
+  unzip -q master.zip
+  rm master.zip
+  
+  # Prepare Deb Package Folder Structure
+  cd vesta_$VESTA_V/
+  mkdir -p usr/local/vesta DEBIAN
+  
+  # Download control, postinst and postrm files
+  cd DEBIAN
+  wget -nv $GIT_REP/vesta/control
+  wget -nv $GIT_REP/vesta/copyright
+  wget -nv $GIT_REP/vesta/postinst
+  
+  # Set permission
+  chmod +x postinst
+ 
+  # Move needed directories
+  cd $BUILD_DIR/vesta-master
+  mv bin func install upd web $BUILD_DIR/vesta_$VESTA_V/usr/local/vesta/
+   
+  # Set permission
+  cd $BUILD_DIR/vesta_$VESTA_V/usr/local/vesta/bin
+  chmod +x *
+  
+  press_enter "=== Press enter to build the package ==============================================================================="
+  # build the package
+  cd /usr/src
+  dpkg-deb --build vesta_$VESTA_V
+
+  if [ $add_deb_to_apt_repo -eq 1 ]; then
+    press_enter "=== Press enter to sign the package ==============================================================================="
+    
+    export GPG_TTY=$(tty)
+    dpkg-sig --sign builder vesta_$VESTA_V.deb
+    
+    press_enter "=== Press enter to add to repo ==============================================================================="
+    
+    cd $PATH_OF_APT_REPO
+    reprepro --ask-passphrase -Vb . remove buster vesta
+    reprepro --ask-passphrase -Vb . includedeb buster $BUILD_DIR/vesta_$VESTA_V.deb
+  fi
+  
+  # clear up the source folder
+  cd /usr/src
+  rm -r vesta_$VESTA_V
+  rm -r vesta-master
+fi

From d74ac9980a2cbfcebc145e86fe4d26ed85b9a7bc Mon Sep 17 00:00:00 2001
From: Dmitry Bannik <dima-bannik@mail.ru>
Date: Sat, 20 Jul 2019 02:36:30 +0300
Subject: [PATCH 0517/2300] fixed add sftp server backup

---
 bin/v-add-backup-host | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/bin/v-add-backup-host b/bin/v-add-backup-host
index 4e727229..bccaa03e 100755
--- a/bin/v-add-backup-host
+++ b/bin/v-add-backup-host
@@ -38,8 +38,7 @@ EOF
 sftpc() {
     expect -f "-" <<EOF "$@"
         set count 0
-        spawn "/usr/bin/sftp -o StrictHostKeyChecking=no -o \
-            Port=$port '$user@$host'"
+        spawn /usr/bin/sftp -o StrictHostKeyChecking=no -o Port=$port $user@$host
         expect {
             "password:" {
                 send "$password\r"

From 38b54ee937c1fd9bfa03d04bb9648e6ce84a212a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 22 Jul 2019 14:26:20 +0200
Subject: [PATCH 0518/2300] apparmor check

---
 install/vst-install-debian.sh | 18 ++++++++++++++----
 1 file changed, 14 insertions(+), 4 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 711f12f1..dc8ce605 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -260,6 +260,14 @@ if [ ! -e '/usr/bin/wget' ]; then
     check_result $? "Can't install wget"
 fi
 
+# Check if apparmor is installed
+# This check is borrowed from HestiaCP
+if [ $(dpkg-query -W -f='${Status}' apparmor 2>/dev/null | grep -c "ok installed") -eq 0 ]; then
+    apparmor='no'
+else
+    apparmor='yes'
+fi
+
 # Checking repository availability
 wget -q "apt.vesta.hostingpanel.dev/deb_signing.key" -O /dev/null
 check_result $? "No access to Vesta repository"
@@ -1065,10 +1073,12 @@ if [ "$named" = 'yes' ]; then
     chown root:bind /etc/bind/named.conf
     chmod 640 /etc/bind/named.conf
     aa-complain /usr/sbin/named 2>/dev/null
-    echo "/home/** rwm," >> /etc/apparmor.d/local/usr.sbin.named 2>/dev/null
-    service apparmor status >/dev/null 2>&1
-    if [ $? -ne 0 ]; then
-        service apparmor restart
+    if [ "$apparmor" = 'yes' ]; then
+      echo "/home/** rwm," >> /etc/apparmor.d/local/usr.sbin.named 2>/dev/null
+      service apparmor status >/dev/null 2>&1
+      if [ $? -ne 0 ]; then
+          service apparmor restart
+      fi
     fi
     update-rc.d bind9 defaults
     service bind9 start

From f0b47b32203e6b16dcd68fc13fe458c40ff78edd Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Mon, 22 Jul 2019 16:55:55 +0300
Subject: [PATCH 0519/2300] rfc2324 partial support:  any attempt to brew
 coffee with a teapot should result in the error code 418 - I'm a teapot

---
 func/main.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/func/main.sh b/func/main.sh
index 94505606..d0b26d5e 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -35,6 +35,7 @@ E_DB=17
 E_RRD=18
 E_UPDATE=19
 E_RESTART=20
+E_TEAPOT=418
 
 # Event string for logger
 for ((I=1; I <= $# ; I++)); do

From dbb8b8c6745233bf3af52f301e8d58e21920ac40 Mon Sep 17 00:00:00 2001
From: Sergey Kovalets <sergeykovalets@gmail.com>
Date: Fri, 26 Jul 2019 02:23:40 +0300
Subject: [PATCH 0520/2300] Create vsftpd.conf

---
 install/rhel/8/vsftpd/vsftpd.conf | 40 +++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 install/rhel/8/vsftpd/vsftpd.conf

diff --git a/install/rhel/8/vsftpd/vsftpd.conf b/install/rhel/8/vsftpd/vsftpd.conf
new file mode 100644
index 00000000..75e0104f
--- /dev/null
+++ b/install/rhel/8/vsftpd/vsftpd.conf
@@ -0,0 +1,40 @@
+anonymous_enable=NO
+local_enable=YES
+write_enable=YES
+local_umask=022
+anon_umask=022
+anon_upload_enable=NO
+dirmessage_enable=YES
+xferlog_enable=YES
+connect_from_port_20=YES
+xferlog_std_format=YES
+dual_log_enable=YES
+chroot_local_user=YES
+listen=YES
+pam_service_name=vsftpd
+userlist_enable=NO
+tcp_wrappers=YES
+force_dot_files=YES
+ascii_upload_enable=YES
+ascii_download_enable=YES
+allow_writeable_chroot=YES
+seccomp_sandbox=NO
+pasv_enable=YES
+pasv_promiscuous=YES
+pasv_min_port=12000
+pasv_max_port=12100
+max_per_ip=10
+max_clients=100
+use_localtime=YES
+utf8_filesystem=YES
+ssl_enable=YES
+allow_anon_ssl=NO
+require_ssl_reuse=NO
+ssl_ciphers=HIGH
+ssl_tlsv1=YES
+ssl_sslv2=NO
+ssl_sslv3=NO
+force_local_data_ssl=NO
+force_local_logins_ssl=NO
+rsa_cert_file=/usr/local/vesta/ssl/certificate.crt
+rsa_private_key_file=/usr/local/vesta/ssl/certificate.key

From bb44f4197b4e5de219bc00197f89517c7e92bc2a Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Tue, 30 Jul 2019 18:32:30 +0300
Subject: [PATCH 0521/2300] hardering user validation

---
 func/main.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index d0b26d5e..edbaa664 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -213,7 +213,8 @@ is_object_new() {
 # Check if object is valid
 is_object_valid() {
     if [ $2 = 'USER' ]; then
-        if [ ! -d "$VESTA/data/users/$3" ]; then
+        user_vst_dir=$(basename $3)
+        if [ ! -d "$VESTA/data/users/$user_vst_dir" ]; then
             check_result $E_NOTEXIST "$1 $3 doesn't exist"
         fi
     else

From 718a64c5af9346995cfb846b1c2ef0dd61b4efc4 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 30 Jul 2019 21:37:56 +0200
Subject: [PATCH 0522/2300] Additional format check

---
 func/main.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/func/main.sh b/func/main.sh
index 3e7b634b..a9f9e0ec 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -213,6 +213,7 @@ is_object_new() {
 # Check if object is valid
 is_object_valid() {
     if [ $2 = 'USER' ]; then
+        is_user_format_valid $3
         if [ ! -d "$VESTA/data/users/$3" ]; then
             check_result $E_NOTEXIST "$1 $3 doesn't exist"
         fi

From 019a03958821242d5081cc4942e76755a42a22e0 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 30 Jul 2019 22:06:47 +0200
Subject: [PATCH 0523/2300] Update main.sh

---
 func/main.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index a9f9e0ec..7483bdb8 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -213,7 +213,7 @@ is_object_new() {
 # Check if object is valid
 is_object_valid() {
     if [ $2 = 'USER' ]; then
-        is_user_format_valid $3
+        is_user_format_valid $3 'user'
         if [ ! -d "$VESTA/data/users/$3" ]; then
             check_result $E_NOTEXIST "$1 $3 doesn't exist"
         fi

From 37d370390a71315f69b1443d352e2bf4098630d2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 30 Jul 2019 23:18:40 +0200
Subject: [PATCH 0524/2300] Update UploadHandler.php

---
 web/upload/UploadHandler.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/upload/UploadHandler.php b/web/upload/UploadHandler.php
index a5e0b07c..88388304 100755
--- a/web/upload/UploadHandler.php
+++ b/web/upload/UploadHandler.php
@@ -1116,7 +1116,7 @@ class UploadHandler
             $file_path = $this->get_upload_path($file->name);
             $append_file = $content_range && is_file($file_path) &&
                 $file->size > $this->get_file_size($file_path);
-            if ($uploaded_file && is_uploaded_file($uploaded_file)) {
+            if ($uploaded_file && is_uploaded_file($uploaded_file) && strpos($file_path, "'")===false && strpos($file_path, '"')===false) {
                 chmod($uploaded_file, 0644);
                 exec (VESTA_CMD . "v-copy-fs-file ". USERNAME ." {$uploaded_file} '{$file_path}'", $output, $return_var);
                 $error = check_return_code($return_var, $output);

From c9bf443c6aaa8ea684d459e83cfd9a7af9b58828 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Wed, 31 Jul 2019 00:46:04 +0300
Subject: [PATCH 0525/2300] added user format valdation

---
 bin/v-delete-user-favourites    | 2 ++
 bin/v-list-dns-domain           | 1 +
 bin/v-list-letsencrypt-user     | 1 +
 bin/v-list-mail-domain-dkim-dns | 1 +
 bin/v-list-user                 | 1 +
 bin/v-list-user-backup          | 1 +
 bin/v-list-user-stats           | 1 +
 bin/v-list-web-domain           | 1 +
 bin/v-list-web-domain-ssl       | 1 +
 bin/v-list-web-domains          | 1 +
 10 files changed, 11 insertions(+)

diff --git a/bin/v-delete-user-favourites b/bin/v-delete-user-favourites
index 374fa430..28a8dd97 100755
--- a/bin/v-delete-user-favourites
+++ b/bin/v-delete-user-favourites
@@ -32,6 +32,8 @@ case $system in
     DNS_REC)    is_format_valid 'id' ;;
     *)          is_format_valid 'object'
 esac
+
+is_format_valid 'user'
 is_object_valid 'user' 'USER' "$user"
 is_object_unsuspended 'user' 'USER' "$user"
 
diff --git a/bin/v-list-dns-domain b/bin/v-list-dns-domain
index f72943f9..c9c3f1ea 100755
--- a/bin/v-list-dns-domain
+++ b/bin/v-list-dns-domain
@@ -71,6 +71,7 @@ csv_list() {
 #----------------------------------------------------------#
 
 check_args '2' "$#" 'USER DOMAIN [FORMAT]'
+is_format_valid 'user' 'domain'
 is_object_valid 'user' 'USER' "$user"
 is_object_valid 'dns' 'DOMAIN' "$domain"
 
diff --git a/bin/v-list-letsencrypt-user b/bin/v-list-letsencrypt-user
index 6289ecba..f6e2c774 100755
--- a/bin/v-list-letsencrypt-user
+++ b/bin/v-list-letsencrypt-user
@@ -56,6 +56,7 @@ csv_list() {
 #----------------------------------------------------------#
 
 check_args '1' "$#" 'USER [FORMAT]'
+is_format_valid 'user'
 is_object_valid 'user' 'USER' "$user"
 if [ ! -e "$USER_DATA/ssl/le.conf" ]; then
     check_result $E_NOTEXIST "LetsEncrypt user account doesn't exist"
diff --git a/bin/v-list-mail-domain-dkim-dns b/bin/v-list-mail-domain-dkim-dns
index 8623089e..d9f9d5ba 100755
--- a/bin/v-list-mail-domain-dkim-dns
+++ b/bin/v-list-mail-domain-dkim-dns
@@ -57,6 +57,7 @@ csv_list() {
 #----------------------------------------------------------#
 
 check_args '2' "$#" 'USER DOMAIN [FORMAT]'
+is_format_valid 'user' 'domain'
 is_object_valid 'user' 'USER' "$user"
 is_object_valid 'mail' 'DOMAIN' "$domain"
 
diff --git a/bin/v-list-user b/bin/v-list-user
index 05649f91..57b48bb3 100755
--- a/bin/v-list-user
+++ b/bin/v-list-user
@@ -154,6 +154,7 @@ csv_list() {
 #----------------------------------------------------------#
 
 check_args '1' "$#" 'USER [FORMAT]'
+is_format_valid 'user'
 is_object_valid 'user' 'USER' "$user"
 
 
diff --git a/bin/v-list-user-backup b/bin/v-list-user-backup
index 2e0a98d0..8ee8a41b 100755
--- a/bin/v-list-user-backup
+++ b/bin/v-list-user-backup
@@ -75,6 +75,7 @@ csv_list() {
 #----------------------------------------------------------#
 
 check_args '2' "$#" 'USER BACKUP [FORMAT]'
+is_format_valid 'user'
 is_object_valid 'user' 'USER' "$user"
 is_object_valid 'backup' 'BACKUP' "$backup"
 
diff --git a/bin/v-list-user-stats b/bin/v-list-user-stats
index 11b867af..0fa7dc90 100755
--- a/bin/v-list-user-stats
+++ b/bin/v-list-user-stats
@@ -115,6 +115,7 @@ csv_list() {
 #----------------------------------------------------------#
 
 check_args '1' "$#" 'USER [FORMAT]'
+is_format_valid 'user'
 is_object_valid 'user' 'USER' "$user"
 
 
diff --git a/bin/v-list-web-domain b/bin/v-list-web-domain
index e0f9492c..7e33a4ab 100755
--- a/bin/v-list-web-domain
+++ b/bin/v-list-web-domain
@@ -110,6 +110,7 @@ csv_list() {
 #----------------------------------------------------------#
 
 check_args '2' "$#" 'USER DOMAIN [FORMAT]'
+is_format_valid 'user' 'domain'
 is_object_valid 'user' 'USER' "$user"
 is_object_valid 'web' 'DOMAIN' "$domain"
 
diff --git a/bin/v-list-web-domain-ssl b/bin/v-list-web-domain-ssl
index 99fd5cf8..d637cf89 100755
--- a/bin/v-list-web-domain-ssl
+++ b/bin/v-list-web-domain-ssl
@@ -98,6 +98,7 @@ csv_list() {
 #----------------------------------------------------------#
 
 check_args '2' "$#" 'USER DOMAIN [FORMAT]'
+is_format_valid 'user' 'domain'
 is_object_valid 'user' 'USER' "$user"
 is_object_valid 'web' 'DOMAIN' "$domain"
 
diff --git a/bin/v-list-web-domains b/bin/v-list-web-domains
index a31199fa..23de5fb4 100755
--- a/bin/v-list-web-domains
+++ b/bin/v-list-web-domains
@@ -100,6 +100,7 @@ csv_list() {
 #----------------------------------------------------------#
 
 check_args '1' "$#" 'USER [FORMAT]'
+is_format_valid 'user'
 is_object_valid 'user' 'USER' "$user"
 
 

From b17b4b205df0c01dada54d9684cfaa94b924064a Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Wed, 7 Aug 2019 18:46:40 +0300
Subject: [PATCH 0526/2300] removed unnecessary single quotes for security
 reasons / thanks to Andrea Cardaci

---
 web/add/ip/index.php                 |  6 ++--
 web/add/web/index.php                | 10 +++----
 web/edit/backup/exclusions/index.php |  2 +-
 web/edit/cron/index.php              |  2 +-
 web/edit/db/index.php                |  2 +-
 web/edit/dns/index.php               | 12 ++++----
 web/edit/firewall/index.php          |  2 +-
 web/edit/ip/index.php                |  8 ++---
 web/edit/mail/index.php              |  8 ++---
 web/edit/package/index.php           |  6 ++--
 web/edit/server/index.php            | 10 +++----
 web/edit/web/index.php               | 45 +++++++++++++++-------------
 web/list/stats/index.php             |  2 +-
 web/reset/mail/index.php             | 10 +++----
 web/upload/UploadHandler.php         |  2 +-
 15 files changed, 65 insertions(+), 62 deletions(-)

diff --git a/web/add/ip/index.php b/web/add/ip/index.php
index 8746ed08..73f56b38 100644
--- a/web/add/ip/index.php
+++ b/web/add/ip/index.php
@@ -57,7 +57,7 @@ if (!empty($_POST['ok'])) {
 
     // Add IP
     if (empty($_SESSION['error_msg'])) {
-        exec (VESTA_CMD."v-add-sys-ip ".$v_ip." ".$v_netmask." ".$v_interface."  ".$v_owner." '".$ip_status."' ".$v_name." ".$v_nat, $output, $return_var);
+        exec (VESTA_CMD."v-add-sys-ip ".$v_ip." ".$v_netmask." ".$v_interface."  ".$v_owner." ".$ip_status." ".$v_name." ".$v_nat, $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         $v_owner = $_POST['v_owner'];
@@ -75,12 +75,12 @@ if (!empty($_POST['ok'])) {
 }
 
 // List network interfaces
-exec (VESTA_CMD."v-list-sys-interfaces 'json'", $output, $return_var);
+exec (VESTA_CMD."v-list-sys-interfaces json", $output, $return_var);
 $interfaces = json_decode(implode('', $output), true);
 unset($output);
 
 // List users
-exec (VESTA_CMD."v-list-sys-users 'json'", $output, $return_var);
+exec (VESTA_CMD."v-list-sys-users json", $output, $return_var);
 $users = json_decode(implode('', $output), true);
 unset($output);
 
diff --git a/web/add/web/index.php b/web/add/web/index.php
index e6448c91..d77b8f40 100644
--- a/web/add/web/index.php
+++ b/web/add/web/index.php
@@ -118,7 +118,7 @@ if (!empty($_POST['ok'])) {
 
     // Add web domain
     if (empty($_SESSION['error_msg'])) {
-        exec (VESTA_CMD."v-add-web-domain ".$user." ".$v_domain." ".$v_ip." 'no' ".$aliases." ".$proxy_ext, $output, $return_var);
+        exec (VESTA_CMD."v-add-web-domain ".$user." ".$v_domain." ".$v_ip." no ".$aliases." ".$proxy_ext, $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         $domain_added = empty($_SESSION['error_msg']);
@@ -126,7 +126,7 @@ if (!empty($_POST['ok'])) {
 
     // Add DNS domain
     if (($_POST['v_dns'] == 'on') && (empty($_SESSION['error_msg']))) {
-        exec (VESTA_CMD."v-add-dns-domain ".$user." ".$v_domain." ".$v_public_ip." '' '' '' '' '' '' '' '' 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-add-dns-domain ".$user." ".$v_domain." ".$v_public_ip." '' '' '' '' '' '' '' '' no", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
     }
@@ -136,7 +136,7 @@ if (!empty($_POST['ok'])) {
         foreach ($aliases_arr as $alias) {
             if ($alias != "www.".$_POST['v_domain']) {
                 $alias = escapeshellarg($alias);
-                exec (VESTA_CMD."v-add-dns-on-web-alias ".$user." ".$alias." ".$v_ip." 'no'", $output, $return_var);
+                exec (VESTA_CMD."v-add-dns-on-web-alias ".$user." ".$alias." ".$v_ip." no", $output, $return_var);
                 check_return_code($return_var,$output);
                 unset($output);
             }
@@ -153,7 +153,7 @@ if (!empty($_POST['ok'])) {
     // Delete proxy support
     if ((!empty($_SESSION['PROXY_SYSTEM'])) && ($_POST['v_proxy'] == 'off')  && (empty($_SESSION['error_msg']))) {
         $ext = escapeshellarg($ext);
-        exec (VESTA_CMD."v-delete-web-domain-proxy ".$user." ".$v_domain." 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-delete-web-domain-proxy ".$user." ".$v_domain." no", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
     }
@@ -195,7 +195,7 @@ if (!empty($_POST['ok'])) {
              }
 
              $v_ssl_home = escapeshellarg($_POST['v_ssl_home']);
-             exec (VESTA_CMD."v-add-web-domain-ssl ".$user." ".$v_domain." ".$tmpdir." ".$v_ssl_home." 'no'", $output, $return_var);
+             exec (VESTA_CMD."v-add-web-domain-ssl ".$user." ".$v_domain." ".$tmpdir." ".$v_ssl_home." no", $output, $return_var);
              check_return_code($return_var,$output);
              unset($output);
          }
diff --git a/web/edit/backup/exclusions/index.php b/web/edit/backup/exclusions/index.php
index bbbb4b3e..f4b854b0 100644
--- a/web/edit/backup/exclusions/index.php
+++ b/web/edit/backup/exclusions/index.php
@@ -12,7 +12,7 @@ if (($_SESSION['user'] == 'admin') && (!empty($_GET['user']))) {
 }
 
 // List backup exclustions
-exec (VESTA_CMD."v-list-user-backup-exclusions ".$user." 'json'", $output, $return_var);
+exec (VESTA_CMD."v-list-user-backup-exclusions ".$user." json", $output, $return_var);
 check_return_code($return_var,$output);
 $data = json_decode(implode('', $output), true);
 unset($output);
diff --git a/web/edit/cron/index.php b/web/edit/cron/index.php
index 3d8e9922..9f7ffb34 100644
--- a/web/edit/cron/index.php
+++ b/web/edit/cron/index.php
@@ -20,7 +20,7 @@ if (empty($_GET['job'])) {
 
 // List cron job
 $v_job = escapeshellarg($_GET['job']);
-exec (VESTA_CMD."v-list-cron-job ".$user." ".$v_job." 'json'", $output, $return_var);
+exec (VESTA_CMD."v-list-cron-job ".$user." ".$v_job." json", $output, $return_var);
 check_return_code($return_var,$output);
 
 $data = json_decode(implode('', $output), true);
diff --git a/web/edit/db/index.php b/web/edit/db/index.php
index 763717bc..232f6322 100644
--- a/web/edit/db/index.php
+++ b/web/edit/db/index.php
@@ -20,7 +20,7 @@ if (($_SESSION['user'] == 'admin') && (!empty($_GET['user']))) {
 
 // List datbase
 $v_database = escapeshellarg($_GET['database']);
-exec (VESTA_CMD."v-list-database ".$user." ".$v_database." 'json'", $output, $return_var);
+exec (VESTA_CMD."v-list-database ".$user." ".$v_database." json", $output, $return_var);
 check_return_code($return_var,$output);
 $data = json_decode(implode('', $output), true);
 unset($output);
diff --git a/web/edit/dns/index.php b/web/edit/dns/index.php
index 3c2e1e5c..b8cbc4db 100644
--- a/web/edit/dns/index.php
+++ b/web/edit/dns/index.php
@@ -52,7 +52,7 @@ if ((!empty($_GET['domain'])) && (empty($_GET['record_id'])))  {
 if ((!empty($_GET['domain'])) && (!empty($_GET['record_id'])))  {
     $v_domain = escapeshellarg($_GET['domain']);
     $v_record_id = escapeshellarg($_GET['record_id']);
-    exec (VESTA_CMD."v-list-dns-records ".$user." ".$v_domain." 'json'", $output, $return_var);
+    exec (VESTA_CMD."v-list-dns-records ".$user." ".$v_domain." json", $output, $return_var);
     check_return_code($return_var,$output);
     $data = json_decode(implode('', $output), true);
     unset($output);
@@ -88,7 +88,7 @@ if ((!empty($_POST['save'])) && (!empty($_GET['domain'])) && (empty($_GET['recor
     // Change domain IP
     if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
         $v_ip = escapeshellarg($_POST['v_ip']);
-        exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." ".$v_domain." ".$v_ip." 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." ".$v_domain." ".$v_ip." no", $output, $return_var);
         check_return_code($return_var,$output);
         $restart_dns = 'yes';
         unset($output);
@@ -97,7 +97,7 @@ if ((!empty($_POST['save'])) && (!empty($_GET['domain'])) && (empty($_GET['recor
     // Change domain template
     if (($v_template != $_POST['v_template']) && (empty($_SESSION['error_msg']))) {
         $v_template = escapeshellarg($_POST['v_template']);
-        exec (VESTA_CMD."v-change-dns-domain-tpl ".$v_username." ".$v_domain." ".$v_template." 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-change-dns-domain-tpl ".$v_username." ".$v_domain." ".$v_template." no", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         $restart_dns = 'yes';
@@ -106,7 +106,7 @@ if ((!empty($_POST['save'])) && (!empty($_GET['domain'])) && (empty($_GET['recor
     // Change SOA record
     if (($v_soa != $_POST['v_soa']) && (empty($_SESSION['error_msg']))) {
         $v_soa = escapeshellarg($_POST['v_soa']);
-        exec (VESTA_CMD."v-change-dns-domain-soa ".$v_username." ".$v_domain." ".$v_soa." 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-change-dns-domain-soa ".$v_username." ".$v_domain." ".$v_soa." no", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         $restart_dns = 'yes';
@@ -115,7 +115,7 @@ if ((!empty($_POST['save'])) && (!empty($_GET['domain'])) && (empty($_GET['recor
     // Change expiriation date
     if (($v_exp != $_POST['v_exp']) && (empty($_SESSION['error_msg']))) {
         $v_exp = escapeshellarg($_POST['v_exp']);
-        exec (VESTA_CMD."v-change-dns-domain-exp ".$v_username." ".$v_domain." ".$v_exp." 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-change-dns-domain-exp ".$v_username." ".$v_domain." ".$v_exp." no", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
     }
@@ -123,7 +123,7 @@ if ((!empty($_POST['save'])) && (!empty($_GET['domain'])) && (empty($_GET['recor
     // Change domain ttl
     if (($v_ttl != $_POST['v_ttl']) && (empty($_SESSION['error_msg']))) {
         $v_ttl = escapeshellarg($_POST['v_ttl']);
-        exec (VESTA_CMD."v-change-dns-domain-ttl ".$v_username." ".$v_domain." ".$v_ttl." 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-change-dns-domain-ttl ".$v_username." ".$v_domain." ".$v_ttl." no", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         $restart_dns = 'yes';
diff --git a/web/edit/firewall/index.php b/web/edit/firewall/index.php
index 18b4be4c..67e039d4 100644
--- a/web/edit/firewall/index.php
+++ b/web/edit/firewall/index.php
@@ -20,7 +20,7 @@ if (empty($_GET['rule'])) {
 
 // List rule
 $v_rule = escapeshellarg($_GET['rule']);
-exec (VESTA_CMD."v-list-firewall-rule ".$v_rule." 'json'", $output, $return_var);
+exec (VESTA_CMD."v-list-firewall-rule ".$v_rule." json", $output, $return_var);
 check_return_code($return_var,$output);
 $data = json_decode(implode('', $output), true);
 unset($output);
diff --git a/web/edit/ip/index.php b/web/edit/ip/index.php
index b9eaa581..c7ec6d7a 100644
--- a/web/edit/ip/index.php
+++ b/web/edit/ip/index.php
@@ -20,7 +20,7 @@ if (empty($_GET['ip'])) {
 
 // List ip
 $v_ip = escapeshellarg($_GET['ip']);
-exec (VESTA_CMD."v-list-sys-ip ".$v_ip." 'json'", $output, $return_var);
+exec (VESTA_CMD."v-list-sys-ip ".$v_ip." json", $output, $return_var);
 check_return_code($return_var,$output);
 $data = json_decode(implode('', $output), true);
 unset($output);
@@ -45,7 +45,7 @@ if ( $v_suspended == 'yes' ) {
 }
 
 // List users
-exec (VESTA_CMD."v-list-sys-users 'json'", $output, $return_var);
+exec (VESTA_CMD."v-list-sys-users json", $output, $return_var);
 $users = json_decode(implode('', $output), true);
 unset($output);
 
@@ -55,13 +55,13 @@ if (!empty($_POST['save'])) {
 
     // Change Status
     if (($v_ipstatus == 'shared') && (empty($_POST['v_shared'])) && (empty($_SESSION['error_msg']))) {
-        exec (VESTA_CMD."v-change-sys-ip-status ".$v_ip." 'dedicated'", $output, $return_var);
+        exec (VESTA_CMD."v-change-sys-ip-status ".$v_ip." dedicated", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         $v_dedicated = 'yes';
     }
     if (($v_ipstatus == 'dedicated') && (!empty($_POST['v_shared'])) && (empty($_SESSION['error_msg']))) {
-        exec (VESTA_CMD."v-change-sys-ip-status ".$v_ip." 'shared'", $output, $return_var);
+        exec (VESTA_CMD."v-change-sys-ip-status ".$v_ip." shared", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         unset($v_dedicated);
diff --git a/web/edit/mail/index.php b/web/edit/mail/index.php
index 6424e3ab..e4451fc5 100644
--- a/web/edit/mail/index.php
+++ b/web/edit/mail/index.php
@@ -45,7 +45,7 @@ if ((!empty($_GET['domain'])) && (empty($_GET['account'])))  {
 if ((!empty($_GET['domain'])) && (!empty($_GET['account'])))  {
     $v_domain = escapeshellarg($_GET['domain']);
     $v_account = escapeshellarg($_GET['account']);
-    exec (VESTA_CMD."v-list-mail-account ".$user." ".$v_domain." ".$v_account." 'json'", $output, $return_var);
+    exec (VESTA_CMD."v-list-mail-account ".$user." ".$v_domain." ".$v_account." json", $output, $return_var);
     $data = json_decode(implode('', $output), true);
     unset($output);
 
@@ -75,7 +75,7 @@ if ((!empty($_GET['domain'])) && (!empty($_GET['account'])))  {
 
     // Parse autoreply
     if ( $v_autoreply == 'yes' ) {
-        exec (VESTA_CMD."v-list-mail-account-autoreply ".$user." '".$v_domain."' '".$v_account."' json", $output, $return_var);
+        exec (VESTA_CMD."v-list-mail-account-autoreply ".$user." ".$v_domain." ".$v_account." json", $output, $return_var);
         $autoreply_str = json_decode(implode('', $output), true);
         unset($output);
         $v_autoreply_message = $autoreply_str[$v_account]['MSG'];
@@ -231,7 +231,7 @@ if ((!empty($_POST['save'])) && (!empty($_GET['domain'])) && (!empty($_GET['acco
         $result = array_diff($valiases, $aliases);
         foreach ($result as $alias) {
             if ((empty($_SESSION['error_msg'])) && (!empty($alias))) {
-                exec (VESTA_CMD."v-delete-mail-account-alias ".$v_username." ".$v_domain." ".$v_account." '".escapeshellarg($alias)."'", $output, $return_var);
+                exec (VESTA_CMD."v-delete-mail-account-alias ".$v_username." ".$v_domain." ".$v_account." ".escapeshellarg($alias), $output, $return_var);
                 check_return_code($return_var,$output);
                 unset($output);
             }
@@ -257,7 +257,7 @@ if ((!empty($_POST['save'])) && (!empty($_GET['domain'])) && (!empty($_GET['acco
         $result = array_diff($vfwd, $fwd);
         foreach ($result as $forward) {
             if ((empty($_SESSION['error_msg'])) && (!empty($forward))) {
-                exec (VESTA_CMD."v-delete-mail-account-forward ".$v_username." ".$v_domain." ".$v_account." '".escapeshellarg($forward)."'", $output, $return_var);
+                exec (VESTA_CMD."v-delete-mail-account-forward ".$v_username." ".$v_domain." ".$v_account." ".escapeshellarg($forward), $output, $return_var);
                 check_return_code($return_var,$output);
                 unset($output);
             }
diff --git a/web/edit/package/index.php b/web/edit/package/index.php
index 763bfdf4..e8d4eddc 100644
--- a/web/edit/package/index.php
+++ b/web/edit/package/index.php
@@ -22,7 +22,7 @@ if (empty($_GET['package'])) {
 
 // List package
 $v_package = escapeshellarg($_GET['package']);
-exec (VESTA_CMD."v-list-user-package ".$v_package." 'json'", $output, $return_var);
+exec (VESTA_CMD."v-list-user-package ".$v_package." json", $output, $return_var);
 $data = json_decode(implode('', $output), true);
 unset($output);
 
@@ -203,7 +203,7 @@ if (!empty($_POST['save'])) {
     fclose($fp);
 
     // Save changes
-    exec (VESTA_CMD."v-add-user-package ".$tmpdir." ".$v_package." 'yes'", $output, $return_var);
+    exec (VESTA_CMD."v-add-user-package ".$tmpdir." ".$v_package." yes", $output, $return_var);
     check_return_code($return_var,$output);
     unset($output);
 
@@ -212,7 +212,7 @@ if (!empty($_POST['save'])) {
     unset($output);
 
     // Propogate new package
-    exec (VESTA_CMD."v-update-user-package ".$v_package." 'json'", $output, $return_var);
+    exec (VESTA_CMD."v-update-user-package ".$v_package." json", $output, $return_var);
     check_return_code($return_var,$output);
     unset($output);
 
diff --git a/web/edit/server/index.php b/web/edit/server/index.php
index defc0b7a..0743ab17 100644
--- a/web/edit/server/index.php
+++ b/web/edit/server/index.php
@@ -339,7 +339,7 @@ if (!empty($_POST['save'])) {
             $v_backup_username = escapeshellarg($_POST['v_backup_username']);
             $v_backup_password = escapeshellarg($_POST['v_backup_password']);
             $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
-            exec (VESTA_CMD."v-add-backup-host '". $v_backup_type ."' '". $v_backup_host ."' '". $v_backup_username ."' '". $v_backup_password ."' '". $v_backup_bpath ."'", $output, $return_var);
+            exec (VESTA_CMD."v-add-backup-host ".$v_backup_type." ".$v_backup_host ." ".$v_backup_username." ".$v_backup_password." ".$v_backup_bpath, $output, $return_var);
             check_return_code($return_var,$output);
             unset($output);
             if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
@@ -356,7 +356,7 @@ if (!empty($_POST['save'])) {
     // Change remote backup host type
     if (empty($_SESSION['error_msg'])) {
         if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] != $v_backup_type)) {
-            exec (VESTA_CMD."v-delete-backup-host '". $v_backup_type ."'", $output, $return_var);
+            exec (VESTA_CMD."v-delete-backup-host ". $v_backup_type, $output, $return_var);
             unset($output);
 
             $v_backup_host = escapeshellarg($_POST['v_backup_host']);
@@ -364,7 +364,7 @@ if (!empty($_POST['save'])) {
             $v_backup_username = escapeshellarg($_POST['v_backup_username']);
             $v_backup_password = escapeshellarg($_POST['v_backup_password']);
             $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
-            exec (VESTA_CMD."v-add-backup-host '". $v_backup_type ."' '". $v_backup_host ."' '". $v_backup_username ."' '". $v_backup_password ."' '". $v_backup_bpath ."'", $output, $return_var);
+            exec (VESTA_CMD."v-add-backup-host ".$v_backup_type." ".$v_backup_host." ".$v_backup_username." ".$v_backup_password." ".$v_backup_bpath, $output, $return_var);
             check_return_code($return_var,$output);
             unset($output);
             if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
@@ -386,7 +386,7 @@ if (!empty($_POST['save'])) {
                 $v_backup_username = escapeshellarg($_POST['v_backup_username']);
                 $v_backup_password = escapeshellarg($_POST['v_backup_password']);
                 $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
-                exec (VESTA_CMD."v-add-backup-host '". $v_backup_type ."' '". $v_backup_host ."' '". $v_backup_username ."' '". $v_backup_password ."' '". $v_backup_bpath ."'", $output, $return_var);
+                exec (VESTA_CMD."v-add-backup-host ".$v_backup_type." ".$v_backup_host." ".$v_backup_username." ".$v_backup_password." ".$v_backup_bpath, $output, $return_var);
                 check_return_code($return_var,$output);
                 unset($output);
                 if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
@@ -403,7 +403,7 @@ if (!empty($_POST['save'])) {
     // Delete remote backup host
     if (empty($_SESSION['error_msg'])) {
         if ((empty($_POST['v_backup_host'])) && (!empty($v_backup_host))) {
-            exec (VESTA_CMD."v-delete-backup-host '". $v_backup_type ."'", $output, $return_var);
+            exec (VESTA_CMD."v-delete-backup-host ". $v_backup_type, $output, $return_var);
             check_return_code($return_var,$output);
             unset($output);
             if (empty($_SESSION['error_msg'])) $v_backup_host = '';
diff --git a/web/edit/web/index.php b/web/edit/web/index.php
index a1d2d70b..6c703e7d 100644
--- a/web/edit/web/index.php
+++ b/web/edit/web/index.php
@@ -36,7 +36,7 @@ $v_cgi = $data[$v_domain]['CGI'];
 $v_elog = $data[$v_domain]['ELOG'];
 $v_ssl = $data[$v_domain]['SSL'];
 if (!empty($v_ssl)) {
-    exec (VESTA_CMD."v-list-web-domain-ssl ".$user." '".escapeshellarg($v_domain)."' json", $output, $return_var);
+    exec (VESTA_CMD."v-list-web-domain-ssl ".$user." ".escapeshellarg($v_domain)." json", $output, $return_var);
     $ssl_str = json_decode(implode('', $output), true);
     unset($output);
     $v_ssl_crt = $ssl_str[$v_domain]['CRT'];
@@ -117,7 +117,7 @@ if (!empty($_POST['save'])) {
     // Change web domain IP
     if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
         $v_ip = escapeshellarg($_POST['v_ip']);
-        exec (VESTA_CMD."v-change-web-domain-ip ".$v_username." ".$v_domain." ".$v_ip." 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-change-web-domain-ip ".$v_username." ".$v_domain." ".$v_ip." no", $output, $return_var);
         check_return_code($return_var,$output);
         $restart_web = 'yes';
         $restart_proxy = 'yes';
@@ -130,7 +130,7 @@ if (!empty($_POST['save'])) {
         unset($output);
         if ($return_var == 0 ) {
             $v_ip = escapeshellarg($_POST['v_ip']);
-            exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." ".$v_domain." ".$v_ip." 'no'", $output, $return_var);
+            exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." ".$v_domain." ".$v_ip." no", $output, $return_var);
             check_return_code($return_var,$output);
             unset($output);
             $restart_dns = 'yes';
@@ -140,11 +140,12 @@ if (!empty($_POST['save'])) {
     // Change dns ip for each alias
     if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
         foreach($valiases as $v_alias ){
-            exec (VESTA_CMD."v-list-dns-domain ".$v_username." '".$v_alias."' json", $output, $return_var);
+            $v_alias = escapeshellarg($v_alias);
+            exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_alias." json", $output, $return_var);
             unset($output);
             if ($return_var == 0 ) {
                 $v_ip = escapeshellarg($_POST['v_ip']);
-                exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." '".$v_alias."' ".$v_ip, $output, $return_var);
+                exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." ".$v_alias." ".$v_ip, $output, $return_var);
                 check_return_code($return_var,$output);
                 unset($output);
                 $restart_dns = 'yes';
@@ -155,7 +156,7 @@ if (!empty($_POST['save'])) {
     // Change template (admin only)
     if (($v_template != $_POST['v_template']) && ( $_SESSION['user'] == 'admin') && (empty($_SESSION['error_msg']))) {
         $v_template = escapeshellarg($_POST['v_template']);
-        exec (VESTA_CMD."v-change-web-domain-tpl ".$v_username." ".$v_domain." ".$v_template." 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-change-web-domain-tpl ".$v_username." ".$v_domain." ".$v_template." no", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         $restart_web = 'yes';
@@ -175,7 +176,8 @@ if (!empty($_POST['save'])) {
                 $restart_web = 'yes';
                 $restart_proxy = 'yes';
                 $v_template = escapeshellarg($_POST['v_template']);
-                exec (VESTA_CMD."v-delete-web-domain-alias ".$v_username." ".$v_domain." '".$alias."' 'no'", $output, $return_var);
+                $alias = escapeshellarg($alias);
+                exec (VESTA_CMD."v-delete-web-domain-alias ".$v_username." ".$v_domain." ".$alias." no", $output, $return_var);
                 check_return_code($return_var,$output);
                 unset($output);
 
@@ -183,7 +185,7 @@ if (!empty($_POST['save'])) {
                     exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain, $output, $return_var);
                     unset($output);
                     if ($return_var == 0) {
-                        exec (VESTA_CMD."v-delete-dns-on-web-alias ".$v_username." ".$v_domain." '".$alias."' 'no'", $output, $return_var);
+                        exec (VESTA_CMD."v-delete-dns-on-web-alias ".$v_username." ".$v_domain." ".$alias." no", $output, $return_var);
                         check_return_code($return_var,$output);
                         unset($output);
                         $restart_dns = 'yes';
@@ -198,14 +200,15 @@ if (!empty($_POST['save'])) {
                 $restart_web = 'yes';
                 $restart_proxy = 'yes';
                 $v_template = escapeshellarg($_POST['v_template']);
-                exec (VESTA_CMD."v-add-web-domain-alias ".$v_username." ".$v_domain." ".escapeshellarg($alias)." 'no'", $output, $return_var);
+                $alias = escapeshellarg($alias);
+                exec (VESTA_CMD."v-add-web-domain-alias ".$v_username." ".$v_domain." ".$alias." no", $output, $return_var);
                 check_return_code($return_var,$output);
                 unset($output);
                 if (empty($_SESSION['error_msg'])) {
                     exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain, $output, $return_var);
                     unset($output);
                     if ($return_var == 0) {
-                        exec (VESTA_CMD."v-add-dns-on-web-alias ".$v_username." ".escapeshellarg($alias)." ".$v_ip." no", $output, $return_var);
+                        exec (VESTA_CMD."v-add-dns-on-web-alias ".$v_username." ".$alias." ".$v_ip." no", $output, $return_var);
                         check_return_code($return_var,$output);
                     unset($output);
                         $restart_dns = 'yes';
@@ -225,7 +228,7 @@ if (!empty($_POST['save'])) {
 
     // Delete proxy support
     if ((!empty($_SESSION['PROXY_SYSTEM'])) && (!empty($v_proxy)) && (empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg']))) {
-        exec (VESTA_CMD."v-delete-web-domain-proxy ".$v_username." ".$v_domain." 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-delete-web-domain-proxy ".$v_username." ".$v_domain." no", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         unset($v_proxy);
@@ -242,7 +245,7 @@ if (!empty($_POST['save'])) {
         if (( $v_proxy_template != $_POST['v_proxy_template']) || ($v_proxy_ext != $ext)) {
             $ext = str_replace(', ', ",", $ext);
             if (!empty($_POST['v_proxy_template'])) $v_proxy_template = $_POST['v_proxy_template'];
-            exec (VESTA_CMD."v-change-web-domain-proxy-tpl ".$v_username." ".$v_domain." ".escapeshellarg($v_proxy_template)." ".escapeshellarg($ext)." 'no'", $output, $return_var);
+            exec (VESTA_CMD."v-change-web-domain-proxy-tpl ".$v_username." ".$v_domain." ".escapeshellarg($v_proxy_template)." ".escapeshellarg($ext)." no", $output, $return_var);
             check_return_code($return_var,$output);
             $v_proxy_ext = str_replace(',', ', ', $ext);
             unset($output);
@@ -261,7 +264,7 @@ if (!empty($_POST['save'])) {
             $ext = str_replace(' ', ",", $ext);
             $v_proxy_ext = str_replace(',', ', ', $ext);
         }
-        exec (VESTA_CMD."v-add-web-domain-proxy ".$v_username." ".$v_domain." ".escapeshellarg($v_proxy_template)." ".escapeshellarg($ext)." 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-add-web-domain-proxy ".$v_username." ".$v_domain." ".escapeshellarg($v_proxy_template)." ".escapeshellarg($ext)." no", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         $restart_proxy = 'yes';
@@ -271,7 +274,7 @@ if (!empty($_POST['save'])) {
     if (( $v_ssl == 'yes') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
         if ( $v_ssl_home != $_POST['v_ssl_home'] ) {
             $v_ssl_home = escapeshellarg($_POST['v_ssl_home']);
-            exec (VESTA_CMD."v-change-web-domain-sslhome ".$user." ".$v_domain." ".$v_ssl_home." 'no'", $output, $return_var);
+            exec (VESTA_CMD."v-change-web-domain-sslhome ".$user." ".$v_domain." ".$v_ssl_home." no", $output, $return_var);
             check_return_code($return_var,$output);
             $v_ssl_home = $_POST['v_ssl_home'];
             $restart_web = 'yes';
@@ -310,13 +313,13 @@ if (!empty($_POST['save'])) {
                 fclose($fp);
             }
 
-            exec (VESTA_CMD."v-change-web-domain-sslcert ".$user." ".$v_domain." ".$tmpdir." 'no'", $output, $return_var);
+            exec (VESTA_CMD."v-change-web-domain-sslcert ".$user." ".$v_domain." ".$tmpdir." no", $output, $return_var);
             check_return_code($return_var,$output);
             unset($output);
             $restart_web = 'yes';
             $restart_proxy = 'yes';
 
-            exec (VESTA_CMD."v-list-web-domain-ssl ".$user." '".$v_domain."' json", $output, $return_var);
+            exec (VESTA_CMD."v-list-web-domain-ssl ".$user." ".$v_domain." json", $output, $return_var);
             $ssl_str = json_decode(implode('', $output), true);
             unset($output);
             $v_ssl_crt = $ssl_str[$v_domain]['CRT'];
@@ -340,7 +343,7 @@ if (!empty($_POST['save'])) {
 
     // Delete Lets Encrypt support
     if (( $v_letsencrypt == 'yes' ) && (empty($_POST['v_letsencrypt'])) && (empty($_SESSION['error_msg']))) {
-        exec (VESTA_CMD."v-delete-letsencrypt-domain ".$user." ".$v_domain." 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-delete-letsencrypt-domain ".$user." ".$v_domain." no", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         $v_ssl_crt = '';
@@ -355,7 +358,7 @@ if (!empty($_POST['save'])) {
 
     // Delete SSL certificate
     if (( $v_ssl == 'yes' ) && (empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
-        exec (VESTA_CMD."v-delete-web-domain-ssl ".$v_username." ".$v_domain." 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-delete-web-domain-ssl ".$v_username." ".$v_domain." no", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         $v_ssl_crt = '';
@@ -369,7 +372,7 @@ if (!empty($_POST['save'])) {
     // Add Lets Encrypt support
     if ((!empty($_POST['v_ssl'])) && ( $v_letsencrypt == 'no' ) && (!empty($_POST['v_letsencrypt'])) && empty($_SESSION['error_msg'])) {
         $l_aliases = str_replace("\n", ',', $v_aliases);
-        exec (VESTA_CMD."v-add-letsencrypt-domain ".$user." ".$v_domain." '".escapeshellarg($l_aliases)."' 'no'", $output, $return_var);
+        exec (VESTA_CMD."v-add-letsencrypt-domain ".$user." ".$v_domain." ".escapeshellarg($l_aliases)." no", $output, $return_var);
         check_return_code($return_var,$output);
         unset($output);
         $v_letsencrypt = 'yes';
@@ -417,14 +420,14 @@ if (!empty($_POST['save'])) {
                 fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_ca']));
                 fclose($fp);
             }
-            exec (VESTA_CMD."v-add-web-domain-ssl ".$user." ".$v_domain." ".$tmpdir." ".$v_ssl_home." 'no'", $output, $return_var);
+            exec (VESTA_CMD."v-add-web-domain-ssl ".$user." ".$v_domain." ".$tmpdir." ".$v_ssl_home." no", $output, $return_var);
             check_return_code($return_var,$output);
             unset($output);
             $v_ssl = 'yes';
             $restart_web = 'yes';
             $restart_proxy = 'yes';
 
-            exec (VESTA_CMD."v-list-web-domain-ssl ".$user." '".$v_domain."' json", $output, $return_var);
+            exec (VESTA_CMD."v-list-web-domain-ssl ".$user." ".$v_domain." json", $output, $return_var);
             $ssl_str = json_decode(implode('', $output), true);
             unset($output);
             $v_ssl_crt = $ssl_str[$_POST['v_domain']]['CRT'];
diff --git a/web/list/stats/index.php b/web/list/stats/index.php
index c758705a..3c730632 100644
--- a/web/list/stats/index.php
+++ b/web/list/stats/index.php
@@ -20,7 +20,7 @@ if ($user == 'admin') {
         unset($output);
     }
 
-    exec (VESTA_CMD."v-list-sys-users 'json'", $output, $return_var);
+    exec (VESTA_CMD."v-list-sys-users json", $output, $return_var);
     $users = json_decode(implode('', $output), true);
     unset($output);
 } else {
diff --git a/web/reset/mail/index.php b/web/reset/mail/index.php
index 5350f9b9..2e7d8c72 100644
--- a/web/reset/mail/index.php
+++ b/web/reset/mail/index.php
@@ -124,15 +124,15 @@ if ((!empty($_POST['email'])) && (!empty($_POST['password'])) && (!empty($_POST[
     $v_password = $_POST['password'];
 
     // Get domain owner
-    exec (VESTA_CMD."v-search-domain-owner ".$v_domain." 'mail'", $output, $return_var);
-    if ($return_var == 0) {
-        $v_user = $output[0];
+    exec (VESTA_CMD."v-search-domain-owner ".$v_domain." mail", $output, $return_var);
+    if (($return_var == 0) && (!empty($output[0]))) {
+        $v_user = escapeshellarg($output[0]);
     }
     unset($output);
 
     // Get current md5 hash
     if (!empty($v_user)) {
-        exec (VESTA_CMD."v-get-mail-account-value '".$v_user."' ".$v_domain." ".$v_account." 'md5'", $output, $return_var);
+        exec (VESTA_CMD."v-get-mail-account-value ".$v_user." ".$v_domain." ".$v_account." md5", $output, $return_var);
         if ($return_var == 0) {
             $v_hash = $output[0];
         }
@@ -151,7 +151,7 @@ if ((!empty($_POST['email'])) && (!empty($_POST['password'])) && (!empty($_POST[
             $fp = fopen($v_new_password, "w");
             fwrite($fp, $_POST['new']."\n");
             fclose($fp);
-            exec (VESTA_CMD."v-change-mail-account-password '".$v_user."' ".$v_domain." ".$v_account." ".$v_new_password, $output, $return_var);
+            exec (VESTA_CMD."v-change-mail-account-password ".$v_user." ".$v_domain." ".$v_account." ".$v_new_password, $output, $return_var);
             if ($return_var == 0) {
                 echo "ok";
                 exit;
diff --git a/web/upload/UploadHandler.php b/web/upload/UploadHandler.php
index a5e0b07c..aedd747c 100755
--- a/web/upload/UploadHandler.php
+++ b/web/upload/UploadHandler.php
@@ -1118,7 +1118,7 @@ class UploadHandler
                 $file->size > $this->get_file_size($file_path);
             if ($uploaded_file && is_uploaded_file($uploaded_file)) {
                 chmod($uploaded_file, 0644);
-                exec (VESTA_CMD . "v-copy-fs-file ". USERNAME ." {$uploaded_file} '{$file_path}'", $output, $return_var);
+                exec (VESTA_CMD . "v-copy-fs-file ". USERNAME ." ".$uploaded_file." ".escapeshellarg($file_path), $output, $return_var);
                 $error = check_return_code($return_var, $output);
                 if ($return_var != 0) {
                     $file->error = 'Error while saving file ';

From 1a02521f76e9c9f31e195555e7519ef614f6fed6 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Thu, 8 Aug 2019 14:13:35 +0300
Subject: [PATCH 0527/2300] Resolved merge conflict with tmp dir.

---
 install/rhel/7/pma/config.inc.conf | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/install/rhel/7/pma/config.inc.conf b/install/rhel/7/pma/config.inc.conf
index 25097eca..8f3e0a7b 100644
--- a/install/rhel/7/pma/config.inc.conf
+++ b/install/rhel/7/pma/config.inc.conf
@@ -74,6 +74,13 @@ $cfg['Servers'][$i]['export_templates'] = 'pma__export_templates';
 $cfg['UploadDir'] = '/var/lib/phpMyAdmin/upload';
 $cfg['SaveDir'] = '/var/lib/phpMyAdmin/save';
 
+/*
+ * Temp dir for faster beahivour
+ *
+*/
+$cfg['TempDir']  = '/tmp';
+
+
 /**
  * Whether to display icons or text or both icons and text in table row
  * action segment. Value can be either of 'icons', 'text' or 'both'.

From 3e2178bb6ecfe14660bed47659de7cf23e1deed3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:14:19 +0100
Subject: [PATCH 0528/2300] Update config.inc.conf

---
 install/rhel/6/pma/config.inc.conf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/rhel/6/pma/config.inc.conf b/install/rhel/6/pma/config.inc.conf
index 47ae207e..3b636258 100644
--- a/install/rhel/6/pma/config.inc.conf
+++ b/install/rhel/6/pma/config.inc.conf
@@ -16,6 +16,12 @@
  */
 $cfg['blowfish_secret'] = '%blowfish_secret%'; /* YOU MUST FILL IN THIS FOR COOKIE AUTH! */
 
+/*
+ * Temp dir for faster beahivour
+ *
+*/
+$cfg['TempDir']  = '/tmp';
+
 /*
  * Servers configuration
  */

From 880496962a3bb094b21dea92a1f6b5b2e2bfe59e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:14:38 +0100
Subject: [PATCH 0529/2300] Update config.inc.conf

---
 install/rhel/6/pma/config.inc.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/rhel/6/pma/config.inc.conf b/install/rhel/6/pma/config.inc.conf
index 3b636258..f7584089 100644
--- a/install/rhel/6/pma/config.inc.conf
+++ b/install/rhel/6/pma/config.inc.conf
@@ -19,7 +19,7 @@ $cfg['blowfish_secret'] = '%blowfish_secret%'; /* YOU MUST FILL IN THIS FOR COOK
 /*
  * Temp dir for faster beahivour
  *
-*/
+ */
 $cfg['TempDir']  = '/tmp';
 
 /*

From a745eb02d8e6b0719f538c8504128ec70d617390 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:14:51 +0100
Subject: [PATCH 0530/2300] Update config.inc.conf

---
 install/rhel/7/pma/config.inc.conf | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/install/rhel/7/pma/config.inc.conf b/install/rhel/7/pma/config.inc.conf
index 8f3e0a7b..d2ab6946 100644
--- a/install/rhel/7/pma/config.inc.conf
+++ b/install/rhel/7/pma/config.inc.conf
@@ -16,7 +16,17 @@
  */
 $cfg['blowfish_secret'] = '%blowfish_secret%'; /* YOU MUST FILL IN THIS FOR COOKIE AUTH! */
 
+<<<<<<< HEAD
 /**
+=======
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
+/*
+>>>>>>> Update config.inc.conf
  * Servers configuration
  */
 $i = 0;

From cb8cd40b1306648a4bbde9bbb60654de50e44203 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:15:09 +0100
Subject: [PATCH 0531/2300] Update config.inc.conf

---
 install/rhel/5/pma/config.inc.conf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/rhel/5/pma/config.inc.conf b/install/rhel/5/pma/config.inc.conf
index 47ae207e..f7584089 100644
--- a/install/rhel/5/pma/config.inc.conf
+++ b/install/rhel/5/pma/config.inc.conf
@@ -16,6 +16,12 @@
  */
 $cfg['blowfish_secret'] = '%blowfish_secret%'; /* YOU MUST FILL IN THIS FOR COOKIE AUTH! */
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /*
  * Servers configuration
  */

From 57fb5a759fe6cf8e877f8e7da5b506049a4cdfa1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:17:10 +0100
Subject: [PATCH 0532/2300] Update config.inc.php

---
 install/debian/7/pma/config.inc.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/install/debian/7/pma/config.inc.php b/install/debian/7/pma/config.inc.php
index a643a065..4b6a3a6b 100644
--- a/install/debian/7/pma/config.inc.php
+++ b/install/debian/7/pma/config.inc.php
@@ -137,6 +137,13 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From fe6f93fabae947b2066e1e645a6e962c6ff43a9b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:17:29 +0100
Subject: [PATCH 0533/2300] Update config.inc.php

---
 install/debian/8/pma/config.inc.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/install/debian/8/pma/config.inc.php b/install/debian/8/pma/config.inc.php
index eafc6d67..a3803697 100644
--- a/install/debian/8/pma/config.inc.php
+++ b/install/debian/8/pma/config.inc.php
@@ -137,6 +137,13 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From 7f8313b48fa9ccfd30731016e7c321feaf6fa3b1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:17:37 +0100
Subject: [PATCH 0534/2300] Update config.inc.php

---
 install/debian/9/pma/config.inc.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/install/debian/9/pma/config.inc.php b/install/debian/9/pma/config.inc.php
index eafc6d67..a3803697 100644
--- a/install/debian/9/pma/config.inc.php
+++ b/install/debian/9/pma/config.inc.php
@@ -137,6 +137,13 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From bebd854b6052f2511b895698ba2e11e07f8762dd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:18:08 +0100
Subject: [PATCH 0535/2300] Update config.inc.php

---
 install/ubuntu/18.04/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/18.04/pma/config.inc.php b/install/ubuntu/18.04/pma/config.inc.php
index a643a065..36093369 100644
--- a/install/ubuntu/18.04/pma/config.inc.php
+++ b/install/ubuntu/18.04/pma/config.inc.php
@@ -137,6 +137,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From 0d66d22150741ae0c9ef70cf8f4a2470783446c2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:18:39 +0100
Subject: [PATCH 0536/2300] Update config.inc.php

---
 install/ubuntu/17.10/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/17.10/pma/config.inc.php b/install/ubuntu/17.10/pma/config.inc.php
index a643a065..36093369 100644
--- a/install/ubuntu/17.10/pma/config.inc.php
+++ b/install/ubuntu/17.10/pma/config.inc.php
@@ -137,6 +137,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From ed8d38228bc7c7de0651cee30d742f28c22c061b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:18:59 +0100
Subject: [PATCH 0537/2300] Update config.inc.php

---
 install/ubuntu/17.04/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/17.04/pma/config.inc.php b/install/ubuntu/17.04/pma/config.inc.php
index a643a065..36093369 100644
--- a/install/ubuntu/17.04/pma/config.inc.php
+++ b/install/ubuntu/17.04/pma/config.inc.php
@@ -137,6 +137,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From c83a925c9accb5872fd7c64a5a87857c10f12ae7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:19:17 +0100
Subject: [PATCH 0538/2300] Update config.inc.php

---
 install/ubuntu/16.10/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/16.10/pma/config.inc.php b/install/ubuntu/16.10/pma/config.inc.php
index a643a065..36093369 100644
--- a/install/ubuntu/16.10/pma/config.inc.php
+++ b/install/ubuntu/16.10/pma/config.inc.php
@@ -137,6 +137,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From aa8ba1aff1418f98bff0d5e1b109eb49a4715855 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:19:40 +0100
Subject: [PATCH 0539/2300] Update config.inc.php

---
 install/ubuntu/16.04/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/16.04/pma/config.inc.php b/install/ubuntu/16.04/pma/config.inc.php
index d8a903e4..fb131d65 100644
--- a/install/ubuntu/16.04/pma/config.inc.php
+++ b/install/ubuntu/16.04/pma/config.inc.php
@@ -139,6 +139,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From 8d3473c914a9a9719cd9f57c1dd87655488aba89 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:20:08 +0100
Subject: [PATCH 0540/2300] Update config.inc.php

---
 install/ubuntu/15.10/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/15.10/pma/config.inc.php b/install/ubuntu/15.10/pma/config.inc.php
index a643a065..36093369 100644
--- a/install/ubuntu/15.10/pma/config.inc.php
+++ b/install/ubuntu/15.10/pma/config.inc.php
@@ -137,6 +137,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From ea2f42e6892436b6dd39bfaf861740b43a23bb1e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:20:21 +0100
Subject: [PATCH 0541/2300] Update config.inc.php

---
 install/ubuntu/15.04/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/15.04/pma/config.inc.php b/install/ubuntu/15.04/pma/config.inc.php
index a643a065..36093369 100644
--- a/install/ubuntu/15.04/pma/config.inc.php
+++ b/install/ubuntu/15.04/pma/config.inc.php
@@ -137,6 +137,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From 9ab4927ec2d33b46ce143a3659bd0fbcb70cfadd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:20:34 +0100
Subject: [PATCH 0542/2300] Update config.inc.php

---
 install/ubuntu/14.10/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/14.10/pma/config.inc.php b/install/ubuntu/14.10/pma/config.inc.php
index a643a065..36093369 100644
--- a/install/ubuntu/14.10/pma/config.inc.php
+++ b/install/ubuntu/14.10/pma/config.inc.php
@@ -137,6 +137,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From f23697217b69f66bd0c69550c4228bb9c7dc3568 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:20:46 +0100
Subject: [PATCH 0543/2300] Update config.inc.php

---
 install/ubuntu/14.04/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/14.04/pma/config.inc.php b/install/ubuntu/14.04/pma/config.inc.php
index a643a065..36093369 100644
--- a/install/ubuntu/14.04/pma/config.inc.php
+++ b/install/ubuntu/14.04/pma/config.inc.php
@@ -137,6 +137,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From 6d09433447900c306e332c2b13f8b6df89e7675b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:20:59 +0100
Subject: [PATCH 0544/2300] Update config.inc.php

---
 install/ubuntu/13.10/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/13.10/pma/config.inc.php b/install/ubuntu/13.10/pma/config.inc.php
index a643a065..36093369 100644
--- a/install/ubuntu/13.10/pma/config.inc.php
+++ b/install/ubuntu/13.10/pma/config.inc.php
@@ -137,6 +137,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From b16e9b1d4db5637f2393d8e15fdcd3742f85dad2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:21:09 +0100
Subject: [PATCH 0545/2300] Update config.inc.php

---
 install/ubuntu/13.04/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/13.04/pma/config.inc.php b/install/ubuntu/13.04/pma/config.inc.php
index a643a065..36093369 100644
--- a/install/ubuntu/13.04/pma/config.inc.php
+++ b/install/ubuntu/13.04/pma/config.inc.php
@@ -137,6 +137,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From 25e66d471e8e1385b152ef645e07a323b37d07d8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:21:22 +0100
Subject: [PATCH 0546/2300] Update config.inc.php

---
 install/ubuntu/12.10/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/12.10/pma/config.inc.php b/install/ubuntu/12.10/pma/config.inc.php
index a643a065..36093369 100644
--- a/install/ubuntu/12.10/pma/config.inc.php
+++ b/install/ubuntu/12.10/pma/config.inc.php
@@ -137,6 +137,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From 02955ddb479802d468e1290832773602ad2f1aa8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <office@leo-host.com>
Date: Thu, 21 Mar 2019 18:21:35 +0100
Subject: [PATCH 0547/2300] Update config.inc.php

---
 install/ubuntu/12.04/pma/config.inc.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/ubuntu/12.04/pma/config.inc.php b/install/ubuntu/12.04/pma/config.inc.php
index a643a065..36093369 100644
--- a/install/ubuntu/12.04/pma/config.inc.php
+++ b/install/ubuntu/12.04/pma/config.inc.php
@@ -137,6 +137,12 @@ if (!empty($dbname)) {
 $cfg['UploadDir'] = '';
 $cfg['SaveDir'] = '';
 
+/*
+ * Temp dir for faster beahivour
+ *
+ */
+$cfg['TempDir']  = '/tmp';
+
 /* Support additional configurations */
 foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
 {

From 8728f4b00d77b2395ce2199f06858ad1f5bef390 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Thu, 8 Aug 2019 14:20:35 +0300
Subject: [PATCH 0548/2300] deleted merge artifacts

---
 install/rhel/7/pma/config.inc.conf | 2 --
 1 file changed, 2 deletions(-)

diff --git a/install/rhel/7/pma/config.inc.conf b/install/rhel/7/pma/config.inc.conf
index d2ab6946..1a65fd6c 100644
--- a/install/rhel/7/pma/config.inc.conf
+++ b/install/rhel/7/pma/config.inc.conf
@@ -16,7 +16,6 @@
  */
 $cfg['blowfish_secret'] = '%blowfish_secret%'; /* YOU MUST FILL IN THIS FOR COOKIE AUTH! */
 
-<<<<<<< HEAD
 /**
 =======
 /*
@@ -26,7 +25,6 @@ $cfg['blowfish_secret'] = '%blowfish_secret%'; /* YOU MUST FILL IN THIS FOR COOK
 $cfg['TempDir']  = '/tmp';
 
 /*
->>>>>>> Update config.inc.conf
  * Servers configuration
  */
 $i = 0;

From 743476ad73e4cd3b6efc4be61ed190d5f8dfc28d Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Thu, 8 Aug 2019 18:39:56 +0300
Subject: [PATCH 0549/2300] added sudo call for directory creation and restore

---
 bin/v-add-web-domain |  4 ++--
 bin/v-restore-user   | 28 ++++++++++++++++++----------
 func/rebuild.sh      |  5 +++--
 3 files changed, 23 insertions(+), 14 deletions(-)

diff --git a/bin/v-add-web-domain b/bin/v-add-web-domain
index 2846242c..8a71cc9f 100755
--- a/bin/v-add-web-domain
+++ b/bin/v-add-web-domain
@@ -63,7 +63,7 @@ fi
 source $USER_DATA/user.conf
 
 # Creating domain directories
-mkdir -p $HOMEDIR/$user/web/$domain \
+sudo -u $user mkdir -p $HOMEDIR/$user/web/$domain \
       $HOMEDIR/$user/web/$domain/public_html \
       $HOMEDIR/$user/web/$domain/public_shtml \
       $HOMEDIR/$user/web/$domain/document_errors \
@@ -80,7 +80,7 @@ ln -f -s /var/log/$WEB_SYSTEM/domains/$domain.*log \
     $HOMEDIR/$user/web/$domain/logs/
 
 # Adding domain skeleton
-cp -r $WEBTPL/skel/* $HOMEDIR/$user/web/$domain/ >/dev/null 2>&1
+sudo -u $user cp -r $WEBTPL/skel/* $HOMEDIR/$user/web/$domain/ >/dev/null 2>&1
 for file in $(find "$HOMEDIR/$user/web/$domain/" -type f); do
     sed -i "s/%domain%/$domain/g" $file
 done
diff --git a/bin/v-restore-user b/bin/v-restore-user
index 55e29e18..bd3d86bb 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -406,15 +406,21 @@ if [ "$web" != 'no' ] && [ ! -z "$WEB_SYSTEM" ]; then
         fi
 
         # Restoring web domain data
-        tar -xzpf $tmpdir/web/$domain/domain_data.tar.gz \
-            -C $HOMEDIR/$user/web/$domain/
-        if [ "$?" -ne 0 ]; then
-            rm -rf $tmpdir
-            error="can't unpack $domain data tarball"
-            echo "$error" |$SENDMAIL -s "$subj" $email $notify
-            sed -i "/ $user /d" $VESTA/data/queue/backup.pipe
-            check_result "$E_PARSING" "$error"
+        chown $user $tmpdir
+        chmod u+w $HOMEDIR/$user/web/$domain
+        sudo -u $user tar -xzpf $tmpdir/web/$domain/domain_data.tar.gz \
+            -C $HOMEDIR/$user/web/$domain/ --exclude=logs/* \
+            2> $HOMEDIR/$user/web/$domain/restore_errors.log
+        if [ -e "$HOMEDIR/$user/web/$domain/restore_errors.log" ]; then
+            chown $user:$user $HOMEDIR/$user/web/$domain/restore_errors.log
         fi
+        #if [ "$?" -ne 0 ]; then
+        #    rm -rf $tmpdir
+        #    error="can't unpack $domain data tarball"
+        #    echo "$error" |$SENDMAIL -s "$subj" $email $notify
+        #    sed -i "/ $user /d" $VESTA/data/queue/backup.pipe
+        #    check_result "$E_PARSING" "$error"
+        #fi
 
         # Applying Fix for tar < 1.24
         find $HOMEDIR/$user/web/$domain -type d \
@@ -586,13 +592,15 @@ if [ "$mail" != 'no' ] && [ ! -z "$MAIL_SYSTEM" ]; then
 
         # Rebuilding mail config
         rebuild_mail_domain_conf
-        
+
         domain_idn=$domain
         format_domain_idn
 
         # Restoring emails
         if [ -e "$tmpdir/mail/$domain/accounts.tar.gz" ]; then
-            tar -xzpf $tmpdir/mail/$domain/accounts.tar.gz \
+            chown $user $tmpdir
+            chmod u+w $HOMEDIR/$user/mail/$domain_idn
+            sudo -u $user tar -xzpf $tmpdir/mail/$domain/accounts.tar.gz \
                 -C $HOMEDIR/$user/mail/$domain_idn/
             if [ "$?" -ne 0 ]; then
                 rm -rf $tmpdir
diff --git a/func/rebuild.sh b/func/rebuild.sh
index 352b9083..cf743d65 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -152,7 +152,7 @@ rebuild_web_domain_conf() {
     prepare_web_domain_values
 
     # Rebuilding domain directories
-    mkdir -p $HOMEDIR/$user/web/$domain \
+    sudo -u $user mkdir -p $HOMEDIR/$user/web/$domain \
         $HOMEDIR/$user/web/$domain/public_html \
         $HOMEDIR/$user/web/$domain/public_shtml \
         $HOMEDIR/$user/web/$domain/document_errors \
@@ -178,7 +178,8 @@ rebuild_web_domain_conf() {
 
     # Propagating html skeleton
     if [ ! -e "$WEBTPL/skel/document_errors/" ]; then
-        cp -r $WEBTPL/skel/document_errors/ $HOMEDIR/$user/web/$domain/
+        sudo -u $user cp -r $WEBTPL/skel/document_errors/ \
+            $HOMEDIR/$user/web/$domain/
     fi
 
     # Set folder permissions

From 26c0d3c3f267e4356c3bc1c1691a786bb1f4dac0 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Thu, 8 Aug 2019 19:59:21 +0300
Subject: [PATCH 0550/2300] fixed delimiter format for plain output

---
 bin/v-delete-mail-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-delete-mail-domain b/bin/v-delete-mail-domain
index f3541edb..ee727aa9 100755
--- a/bin/v-delete-mail-domain
+++ b/bin/v-delete-mail-domain
@@ -56,7 +56,7 @@ fi
 # Deleting dkim dns record
 if [ "$DKIM" = 'yes' ] && [ -e "$USER_DATA/dns/$domain.conf" ]; then
     records=$($BIN/v-list-dns-records $user $domain plain)
-    dkim_records=$(echo "$records" |grep -w '_domainkey' | cut -f 1 -d ' ')
+    dkim_records=$(echo "$records" |grep -w '_domainkey' |cut -f 1)
     for id in $dkim_records; do
         $BIN/v-delete-dns-record $user $domain $id
     done

From e43bc8d804bf1067479f682acae2ff65111cb5ae Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 10 Aug 2019 18:21:36 +0200
Subject: [PATCH 0551/2300] Update v-list-sys-config

---
 bin/v-list-sys-config | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-list-sys-config b/bin/v-list-sys-config
index 4f52e4a6..127f2176 100644
--- a/bin/v-list-sys-config
+++ b/bin/v-list-sys-config
@@ -52,7 +52,7 @@ json_list() {
         "DB_PMA_URL": "'$DB_PMA_URL'",
         "DB_PGA_URL": "'$DB_PGA_URL'",
         "SOFTACULOUS": "'$SOFTACULOUS'",
-        "MAX_DBUSER_LEN": "'$MAX_DBUSER_LEN'"
+        "MAX_DBUSER_LEN": "'$MAX_DBUSER_LEN'",
         "MAIL_CERTIFICATE": "'$MAIL_CERTIFICATE'",
         "VESTA_CERTIFICATE": "'$VESTA_CERTIFICATE'"
     }

From 8369e7084b3b4fc34aff5fdf6d8702231fe4d929 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 10 Aug 2019 18:32:00 +0200
Subject: [PATCH 0552/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 5ce97eac..cbea8e73 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -42,7 +42,7 @@ elif [ "$release" -eq 9 ]; then
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
-        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools unzip"
+        unrar-free vim-common net-tools unzip"
 fi
 
 # Defining help function

From 8314a4e1c3f06c5f5052bd19ce12e8e524f1e351 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 10 Aug 2019 18:46:06 +0200
Subject: [PATCH 0553/2300] Create 15-mailboxes.conf

---
 .../10/dovecot/conf.d/15-mailboxes.conf       | 29 +++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 install/debian/10/dovecot/conf.d/15-mailboxes.conf

diff --git a/install/debian/10/dovecot/conf.d/15-mailboxes.conf b/install/debian/10/dovecot/conf.d/15-mailboxes.conf
new file mode 100644
index 00000000..7b2bab97
--- /dev/null
+++ b/install/debian/10/dovecot/conf.d/15-mailboxes.conf
@@ -0,0 +1,29 @@
+## Mailbox definitions
+##
+
+
+# NOTE: Assumes "namespace inbox" has been defined in 10-mail.conf.
+namespace inbox {
+  mailbox Drafts {
+    special_use = \Drafts
+    auto = subscribe
+  }
+
+  mailbox Junk {
+    special_use = \Junk
+    auto = subscribe
+  }
+
+  mailbox Trash {
+    special_use = \Trash
+    auto = subscribe
+  }
+
+  mailbox Sent {
+    special_use = \Sent
+    auto = subscribe
+  }
+  mailbox "Sent Messages" {
+    special_use = \Sent
+  }
+}

From c1b8699ffba4909ab100e190da3cb0b27c94a4cd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 10 Aug 2019 19:46:45 +0200
Subject: [PATCH 0554/2300] static files for c subdomain

---
 src/static.tar.gz | Bin 0 -> 3028 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)
 create mode 100644 src/static.tar.gz

diff --git a/src/static.tar.gz b/src/static.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..0d33c96f587d548e7332d0a407fe39f8b08aeb6d
GIT binary patch
literal 3028
zcmV;_3oG;=iwFRY0#9841MORTTolzFKR!s@e4$s(;#1?o3Lz}BJNpnt!vGa|#w*`C
zursi*JA=Ekyh^WeO9_F}d@x?jQZz-gtLDu>ElksL6j3oF@#eKO^NO0cd^4RhN*b+E
zpJb~~^ZjFIXV35a&hIhb-|x&Yr~^T}1BWo`_0kcd^-=n+A@o|pfNL}cE&SbR)ZhTq
zx4&rsIP4s0!!TfDS?=fL+8Y0pLLF#hQ&`Tf=5pK3J(OUBPIu4zYj6$FXf;}#fFA}U
zfLDQ0X8;)9UIyKbzj*$=uxtuOAT<jk9UPlRF_ewuC=+()s!$}^DO&&uhq$4bpCZ&o
z=2!wul!eS2ifM4g@9lt$-vo7_IhAGX?b-!?S^b9%K#v=7R3|hVTx*o;zbnv^f10(J
zD4ROXOyB=C+N%GA4%UBMqca+{1Wv%;HCm%VBiDadV06T&AwlHdKtHep01-mq1yST_
z0^$dufz2_A>1I1d+Bggz%nZh*Q&^TG#bQpyOsthOGiof7%7z1D9BJv4-5<+DXXzo7
znNz2-R(~vk%Hk+%3T4AIK|y*j@M`A{0CWWYNIhB|bV~HCI@XMT95MdgEBkv_oe$qR
z!?f!0T_O1yFFp|Jzk9G}>9-H}dHU6!!R0Tx{jYmO_=)Lh!5a%=l)8q9crv*xc~|3(
z+=9cF;6bxKIQ4e^J}>{M3&q1afMLH|Wd9s!;eU#SWHQ@_{%!JKtJSsUzuu^q`R@wc
z;s5Ir{~`Hr4YU{MJKV+jj(v(>TC?|D&lTlwH_Y91eCzd|vm<26x)d$^=crt+o#_7y
z`oF$4|8++B{?8?7-TzVZ=lQ#vKX6Sg=rnFf)z*u6w~)0<y|$Z&)p~rAq})>SiQDwB
zv++B7)%qx^nUZ%Feg5F{OWyqE!Ldwre>Y#x-X-fQdcPk$^qIJd|9`qQIlSS_<)U-U
z;_=$5vp0Ioys#y<-@JyBu5v;78MN@<o@z5^wNnLXlm7;7EB+I>M(+PE!5@eJloS3Z
zb$)q%|D7IqagWZ?%Mz<jO)tJYtZ14q_IctSk2>E0K`%tr9g4rv;h9;M&HTCi_dfeX
zf28~0Yo~0=@IN%FE=ynCJ??{=^TTEm*flZK*vp>UQ!WOr@WcL}Ol`02f7|?roNwL#
zah=S6SHL;{X_|J${r`{nANdfx|M%+kO-3&wp?dlLW8a#~jWPYQ3tr|Pa5MUadots!
zf!F7s)sKq1*y-!s4=d)avh?$fc>`-Get-4Qf{=&mljk2lkaXj#d9`yp%Pjw;XyHFh
zQkIRf+bPriuL5oGUyExDt^2=0Pssdt1@7?w^sVQAQUwr2S`-OU1n5i<M1dCtS`-LT
z0BDdGV381cTI30l2S}C{M4A_ATBHe)252fFhy*VZv`7#l0iY%k2qNG`K#PD70YHk8
zYN!iNhSC77gTM;{EeM1l0JJPT<9UIn1)dOifUJOnG%wJ!KobHDkWo;U;01yf2tptL
zv=L4f051Sq0E7SlG8y>*jfPf2vjFk{tprs=U2rl$4xw{Y{on?O=K=B$E=!|w$kPN*
z1LQ8W0uB;1+#~S>fZju+pezq)9uPbLC>SVMa5fAF^dF$uAeW#rXf(7EpirTOp>C)e
z>H;WoXc$#qSbJ$2pg=<Z;IafN#xwz7T%o(r3OGmu0+JMk8D)h>vMA61MIFVCM^jNa
z07?S#kVl%3(E#NH*})^lNHstyLee~1M|$!LGX?_*{e#QGGt>&Cs{u&)22w_Wlrtb@
z1xRrRQe=S?J0L{|Nd5!KLm>G8BrAbr2ar|*k}e=g!{H_X8Ud&Vpb~&W0CE6G0w4?k
zB>)~!_BRYSH8nLhHda?xS5{UQ78d5@<Rm2}g@uJFl}Zl}G`YR{ocCRQ&YcGl?%p+(
z(`ue`@6*HN20&=C!mGDs&w<x>KHqongsr}KYG{$CPsb~}iz*^Y`-*EOUG4ehXpo#T
z!OUOqm{S@^epvC*iFqOaH0rmPM-+tCE*ll(esc)1CboA-$tg>^>daHClY^r6UDIXM
zu9;Fjbg6=<Jo;+nn&wV^N75#g1z59ZTwCOO_zm~72N$gFuNus2BWHWp%wM@<mfSV}
zdT8nY4knXfbC`Cy1!(*JzxDG!LaUMczf17Px&KdZb^qVRy(76qx#g)Z^NMDDyjeZA
zn{h+O_4tuDmaaYMb;f(Cq9nxcoPT7Wv+mdHpMB5At#F?*U|Z>>$Y9m(dhZ1d1ByPK
zc4^|?SKd04p$dLtaknM2p7S2!5i)yZ2l)}e-B1VO>LB%yKg9bVdL3cZ8xj9;9j=kz
z|8NCb@^4G0EbVm>{F?k5jnex+=#>yT|1Q9f@=vq2R4O2y<FfAS3t_)L|AgKszyIYD
z+%x}7nwiN}!`P_P@_*wRZS4Ov8YA5Q5xCK4z;#+F|L}|a_aB$wvAOPGtGhT3bUL@_
zDYgOcwL9-r!j%q@0f$mL4ji*@?}#z=d%Pc5Hz?aQY{9za%Vw1JNq>!dt%PaFe{ast
z7sV0F&U;SXIe%{VGc$a>_F4?qrV}T&tvnsO&fC-NWY)1qu5N#9_Hf<Jaqm1l*1G!1
z)uRuU&t3M_{%^$<?u*4261!fn(ylu2sv$hPG3e{gbI1!*ns=X^eqo8Yrv7S;>A#l`
zd{xDipL*r=RAMu&7=C%4>SP1{oM&18D?R#;Wh%#=^;cJDhuAjKQU2-sd&N*O?-u6y
z;X8CE6RWe=9v;vza98u>a-6zS;B)w2*#@KA-ir~@H}+H}r%rrx_T#Fg@{d$cnxgw|
z2q;)~H2BEE$>F6DC;35d&OK`P+M54-X829I?qE#K%8-hZC!;qt6=XC9SI3?#eR+@{
zv*?2|&vE$!mUlV7cU#V(4_~rc#+`k%gzd6)e8z$Wt1cBf{9d^>c{kHNy7wx_rb*nz
zqRc$yrJ(-)+h%Xeqsm4#<)@cg73<564?o4(kFtq<19ShK&~5Clx_8|6Z48Qjbn42_
zX4;33EslKJIGkBlUpL{Sa<U+@TBX^r{`}<4+kGfz#iP|VOTv7j&(FBB^w?vM%ozE_
z@rm!Q8!?z3tBS)F%g=RPIORdxl+9n9>R6u<p)Q-=JbBxOFHMuY$MYLklnsjapEPaG
z`uN<&^NnkVoh%-(FKl_`j<CfK9jp#r`KjsnOnZG1dH6ryiQn;8_}q!&TT_~A>%}_L
z!=5)qx0(1qu8BTdRyT|B=bjk<bl+#<kM+Ab=Mgsddj7`jZrz_v#1|%zwM~r|^B1n@
zy1(yFFSyUe(_L~tj$90UU4OC5_z7C-zllmQlT7>U0Dn#Yhg*NN|1)TGa{qS)TID~>
z#?oAt3Es0a_wPASTm2us?5)x23`U(^4-YW^I=BOn`@bs?#ge9I*5t5Im{V9;)6{I_
zyE;{oK-sb>TMTKvhpci`Vx01}RD_9QIHyu9BMD-+<S-jWn)1{w(?*)CX2$6>WJ8FB
zO(iYqtesPYQ8ekWaJQ8>TSbu^52u8qeXMhPp~!75NYJUsOl%-&vMNS8xb(P@(V>tO
z<}@c_w^<{}#oA0x4MIS{B%#dIEYhk@^}BQKV9dENz)5y0o`U|^sj!#?XBN}6^xs(b
zQ2!%aM%!3N*3ZZ>Y#NeKM3cD@4CDZlO4*&sX>qh<0>zkU^F1ySWL6ZLHj1@bN#}9I
zFw?C_V@g#zrm|ov2d3h%NlKM%k`hzdF;$APO%*6o=%`d>V-r<zlQE>~E+tTd+0Mmg
zab}ir>IxP>D&nc>4zrC)CM{-D0=(z3IPoQpwA;<uR2*yLoa)hNVby}48XQ+Bf=64}
z6w)$6fniBj(w=z_<1q}!wNOUlMHI_sI<lPTMyq4kNQ;HdiG|lej?K*dB;<LN9m)hp
znXP6H8yOXaB}62KPYoRt9UF#>xIG<yAgMq}Y=j~>u*J;ZyWq%>Awz}?88T$ZkRd~c
W3>h+H$dDn!W%wSWoQ-k-Pyhg6UHusV

literal 0
HcmV?d00001


From 412b447399291ec7db13811fd71d3051009a3a74 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 10 Aug 2019 20:32:04 +0200
Subject: [PATCH 0555/2300] Update deb_signing.key

---
 install/debian/10/deb_signing.key | 65 ++++++++++++++++++-------------
 1 file changed, 38 insertions(+), 27 deletions(-)

diff --git a/install/debian/10/deb_signing.key b/install/debian/10/deb_signing.key
index 2ad2db8b..9debc008 100644
--- a/install/debian/10/deb_signing.key
+++ b/install/debian/10/deb_signing.key
@@ -1,30 +1,41 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
-Version: GnuPG v1.4.12 (GNU/Linux)
 
-mQENBFJIGbEBCAC8SHOOFo7iDTbnC2GhNZ+uBGCh226Dn1QPoFZNFM/DNakHZ6rD
-G3wzr8++eKz4fJual/VLllE2N9XDPuxbozb3LLkcyY1WzJqtIXbXhFGQ/SuIeT+x
-QY90XU6t2Ckze2c+zUniAWmJ8GSyVmXOoc9JxAQ1u47wvGXLzrjWXc8u8PNRYXuf
-fZplTL+dFu9P0d6lP8FGsV+r9wXvvazpRTz3+H8PKrGCYT55ZQIEdG9Jgamylto2
-oVPFXkwGML+TLw6oeCIBuz2y2vtivphW4MJ3ifQjDj7k3n+DTIxfDFs8lB6VRhhY
-2nMHCrcZC6U2mhmXmr6O4s1fu6irBVx05ejPABEBAAG0IFNlcmdoZXkgUm9kaW4g
-PHNraWRAdmVzdGFjcC5jb20+iQE4BBMBAgAiBQJSSBmxAhsDBgsJCAcDAgYVCAIJ
-CgsEFgIDAQIeAQIXgAAKCRBCxbITCh93FPdqB/93GjV9g+wBfeZYLHQK9MDU2wBb
-VloYOJJae6IvYKYQVAJayD3PbHdpxrF8s9e23vdnmb9jKu6jX6oV54EIyqP2HPiN
-QYc8wcea+eSHerznBixCtoQh8mtdWGFeN71zU/ig7L5qlOVF/EmxDVZTFUeivFxh
-IV6qyBnktQKktE45585yKZyyLtfGoXA54DGK69OtJFh+wdkKEMmUXocMl7wUrxW6
-Cx2CuKeEXEgvwu8mRHQi3S3T9XP456qWEn5dWyMVcP660IzEuZfSJApZusNK7zG3
-WMy0/EuX7xHNY3mcNxTOUN1LsO7iHnhHD9+iKWJo9parGkMZzc92MpjDK/g7uQEN
-BFJIGbEBCAC7k5QEA9WQM7E3ceNaeLMrA9lXfuzaNCcySq7ONdVAa5PxzbSKdHvz
-QFoL1VFqBTYQ038lbil1XqnoM0zvIfAI3LcpS8sq92El/vPxp6jZh2Ari9Uw7x95
-k2cZMgI67g+zQMGdjVRA155nFQRCgg000xU4F7JA6+WsuLlVUmccsDv7YWJExMtC
-YPxiuz5DFu8RALnw4Ckts+dbwsrcvUHhkm9b6RAsdCKjjRpUZjLgdltjH83gUVvt
-i1YmdjjsVpt95dtsaG+ad852g/Rk8EdxNMkjPF6HLA67CLADP9wYaj80yPcPtylS
-ycvPtcclVeHkFBRVM8xZpQd4iD19MWI1ABEBAAGJAR8EGAECAAkFAlJIGbECGwwA
-CgkQQsWyEwofdxQ7tQgAhB0FwTs7L8Qr63DHC2yAnXVxgtTAY1/36CccNXVculyR
-+EkLcwahms9AKhz7eQb+Mud+5vH0GRohLp2npgO38CjVUfIP5d+Y6dsthmrkF6p8
-XdV1dVK9vWX+i/YZSw/Mded30Cq4P2Yhq9EaemMT0rtli8lz2NnkZ9dFJZk1lzJC
-CZmRpbjSNWqRU4f7qyh21lYk/OC/0XE8fh8CaO23TZ+6gBionoCztwb7NyC9OArN
-qYlNnbmh9iNqdblykPS3bkjf34n2xyMgnIehNrM89tk8PY4UfNPhgT1TMD9W3Svq
-ynNZvLuF/FIDwDeC1qcfjGbfDn9fXO/lMIIRooQYKQ==
-=J2HJ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+=mMOx
 -----END PGP PUBLIC KEY BLOCK-----

From a244f1984b0c261bfb59600178acc783782d6f1b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 11 Aug 2019 23:50:08 +0200
Subject: [PATCH 0556/2300] Enhanced compiler script

---
 src/deb/vesta_compile.sh | 404 ++++++++++++++++++++++-----------------
 1 file changed, 228 insertions(+), 176 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 7d835e8b..ad3fb403 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -8,25 +8,24 @@ wait_to_press_enter=1
 run_apt_update_and_install=1
 add_deb_to_apt_repo=0
 
-function press_enter {
-    if [ $wait_to_prss_enter -eq 1 ]; then
-        read -p "$1"
-    else
-        echo $1
-    fi
-}
+DEB_NAME='buster'
+DEB_VER='10'
+VESTA_VER='0.9.8-25'
 
 # Set compiling directory
-BUILD_DIR='/usr/src'
-INSTALL_DIR='/usr/local/vesta'
+BUILD_DIR="/usr/src/$DEB_NAME"
+INSTALL_DIR="/usr/local/vesta/$DEB_NAME"
 
 # Set git repository raw path
-GIT_REP='https://raw.githubusercontent.com/myvesta/vesta/master/src/deb'
+GIT_SRC='https://raw.githubusercontent.com/myvesta/vesta/master/src'
+GIT_REP="$GIT_REP/deb"
 
-PATH_OF_APT_REPO='/var/www/html/buster'
+PATH_OF_C_WEB_FOLDER="/var/www/c.vesta.hostingpanel.dev/html"
+PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER="$PATH_OF_C_WEB_FOLDER/debian/$DEB_VER"
+PATH_OF_APT_REPO="/var/www/apt.vesta.hostingpanel.dev/html/$DEB_NAME"
 
 # Set Version for compiling
-VESTA_V='0.9.8-24_amd64'
+VESTA_V=$VESTA_VER"_amd64"
 NGINX_V='1.17.1'
 OPENSSL_V='1.1.1c'
 PCRE_V='8.43'
@@ -34,7 +33,6 @@ ZLIB_V='1.2.11'
 PHP_V='5.6.40'
 
 # Generate Links for sourcecode
-VESTA='https://github.com/myvesta/vesta/archive/master.zip'
 NGINX='https://nginx.org/download/nginx-'$NGINX_V'.tar.gz'
 OPENSSL='https://www.openssl.org/source/openssl-'$OPENSSL_V'.tar.gz'
 PCRE='https://ftp.pcre.org/pub/pcre/pcre-'$PCRE_V'.tar.gz'
@@ -42,7 +40,38 @@ ZLIB='https://www.zlib.net/zlib-'$ZLIB_V'.tar.gz'
 PHP='http://de2.php.net/distributions/php-'$PHP_V'.tar.gz'
 
 # Set package dependencies for compiling
-SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config'
+SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config reprepro dpkg-sig'
+
+function press_enter {
+    if [ $wait_to_press_enter -eq 1 ]; then
+        read -p "$1"
+    else
+        echo $1
+    fi
+}
+
+function make_deb_package_and_add_to_repo {
+  press_enter "=== Press enter to build the package"
+  cd $BUILD_DIR
+  if [ -f "$1_$VESTA_V.deb" ]; then
+    rm $1_$VESTA_V.deb
+  fi
+  dpkg-deb --build $1_$VESTA_V
+  
+  if [ $add_deb_to_apt_repo -eq 1 ]; then
+    press_enter "=== Press enter to sign the package ==============================================================================="
+    
+    export GPG_TTY=$(tty)
+    dpkg-sig --sign builder $1_$VESTA_V.deb
+	mkdir -p $PATH_OF_APT_REPO
+    cd $PATH_OF_APT_REPO
+    
+    press_enter "=== Press enter to add to repo ==============================================================================="
+    
+    reprepro --ask-passphrase -Vb . remove $DEB_NAME $1
+    reprepro --ask-passphrase -Vb . includedeb $DEB_NAME $BUILD_DIR/$1_$VESTA_V.deb
+  fi
+}
 
 # Install needed software
 if [ $run_apt_update_and_install -eq 1 ]; then
@@ -67,6 +96,9 @@ for arg; do
       NGINX_B='true'
       PHP_B='true'
       VESTA_B='true'
+      VESTAGIT_B='true'
+	  CWEB_B='true'
+	  APTWEB_B='true'
       ;;
     --nginx)
       NGINX_B='true'
@@ -77,17 +109,99 @@ for arg; do
     --vesta)
       VESTA_B='true'
       ;;
+    --vestagit)
+      VESTAGIT_B='true'
+      ;;
+    --cweb)
+      CWEB_B='true'
+      ;;
+    --aptweb)
+      APTWEB_B='true'
+      ;;
     *)
       NOARGUMENT='true'
       ;;
   esac
 done
 
-if [[ $# -eq 0 ]] ; then
-  echo "!!! Please run with argument --all, --vesta, --nginx or --php !!!"
+if [ $# -eq 0 ]; then
+  echo "!!! Please run with argument --vesta, --nginx, --php, --vestagit, --cweb, --aptweb or --all"
   exit 1
 fi
 
+if [ "$CWEB_B" = true ]; then
+  VESTAGIT_B='true'
+fi
+if [ "$VESTA_B" = true ]; then
+  VESTAGIT_B='true'
+fi
+
+#################################################################################
+#
+# Get latest vesta from git
+#
+#################################################################################
+
+if [ "$VESTAGIT_B" = true ]; then
+  echo "======= Get latest vesta from git ======="
+  cd /root
+  rm -rf vesta/
+  git clone https://github.com/myvesta/vesta.git
+fi
+
+#################################################################################
+#
+# Building c subdomain web folder
+#
+#################################################################################
+
+if [ "$CWEB_B" = true ]; then
+  echo "======= Building c subdomain web folder ======="
+  
+  echo "Removing: $PATH_OF_C_WEB_FOLDER"
+  rm -rf $PATH_OF_C_WEB_FOLDER
+  echo "=== Whole C folder removed"
+
+  echo "=== Making folder $PATH_OF_C_WEB_FOLDER"
+  mkdir -p $PATH_OF_C_WEB_FOLDER
+  cd $PATH_OF_C_WEB_FOLDER
+  
+  echo "=== Copying and extracting static files"
+
+  cp /root/vesta/src/static.tar.gz $PATH_OF_C_WEB_FOLDER/static.tar.gz
+  tar -xzf static.tar.gz
+  rm static.tar.gz
+  
+  echo "=== Copying files"
+  mkdir -p $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
+  cp -rf /root/vesta/install/debian/$DEB_VER/* $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
+  cd $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
+  
+  if [ -f "packages.tar.gz" ]; then
+    rm packages.tar.gz
+  fi
+  tar -czf packages.tar.gz packages/
+  
+  if [ -f "templates.tar.gz" ]; then
+    rm templates.tar.gz
+  fi
+  tar -czf templates.tar.gz templates/
+  
+  if [ -f "firewall.tar.gz" ]; then
+    rm firewall.tar.gz
+  fi
+  tar -czf firewall.tar.gz firewall/
+
+  if [ -f "fail2ban.tar.gz" ]; then
+    rm fail2ban.tar.gz
+  fi
+  tar -czf fail2ban.tar.gz fail2ban/
+
+  if [ -f "dovecot.tar.gz" ]; then
+    rm dovecot.tar.gz
+  fi
+  tar -czf dovecot.tar.gz dovecot/
+fi
 
 #################################################################################
 #
@@ -95,7 +209,7 @@ fi
 #
 #################################################################################
 
-if [ "$NGINX_B" = true ] ; then
+if [ "$NGINX_B" = true ]; then
   echo "======= Building vesta-nginx ======="
 
   echo "=== Change to build directory"
@@ -103,16 +217,15 @@ if [ "$NGINX_B" = true ] ; then
   
   BUILDING_NOW=0
   # Check if target directory exist
-  if [ ! -d $BUILD_DIR/vesta-nginx_$VESTA_V ]; then
-  	#mv $BUILD_DIR/vesta-nginx_$VESTA_V $BUILD_DIR/vesta-nginx_$VESTA_V-$(timestamp)
-  	# rm -r $BUILD_DIR/vesta-nginx_$VESTA_V
-    # fi
-  
+  if [ ! -d "$BUILD_DIR/nginx-$NGINX_V" ] || [ ! -d "$INSTALL_DIR/nginx" ]; then
     BUILDING_NOW=1
-    echo "=== Create directory"
-    mkdir $BUILD_DIR/vesta-nginx_$VESTA_V
     
-    press_enter "=== Download and unpack source files"
+    press_enter "=== Press enter to download and unpack source files"
+
+	rm -rf nginx-$NGINX_V
+	rm -rf openssl-$OPENSSL_V
+	rm -rf pcre-$PCRE_V
+	rm -rf zlib-$ZLIB_V
     wget -nv -qO- $NGINX | tar xz
     wget -nv -qO- $OPENSSL | tar xz
     wget -nv -qO- $PCRE | tar xz
@@ -122,7 +235,7 @@ if [ "$NGINX_B" = true ] ; then
     cd nginx-$NGINX_V
     
     press_enter "=== Press enter to configure nginx"
-    ./configure 	--prefix=/usr/local/vesta/nginx \
+    ./configure 	--prefix=$INSTALL_DIR/nginx \
     		--with-http_ssl_module \
     		--with-openssl=../openssl-$OPENSSL_V \
     		--with-openssl-opt=enable-ec_nistp_64_gcc_128 \
@@ -133,71 +246,56 @@ if [ "$NGINX_B" = true ] ; then
     	        --with-pcre-jit \
     		--with-zlib=../zlib-$ZLIB_V
     
-    # Check install directory and move if exists
-    if [ -d $INSTALL_DIR ]; then
-    	#mv $INSTALL_DIR $INSTALL_DIR$(timestamp)
-    	rm -r $INSTALL_DIR
+    # Check install directory and remove if exists
+    if [ -d $INSTALL_DIR/nginx ]; then
+    	rm -rf $INSTALL_DIR/nginx
     fi
     
     press_enter "=== Press enter to make && make install"
     make && make install
-    
-    press_enter "=== Press enter to clear up unused files"
-    cd $BUILD_DIR
-    rm -r nginx-$NGINX_V openssl-$OPENSSL_V pcre-$PCRE_V zlib-$ZLIB_V
+
   fi
   
   press_enter "=== Press enter to Prepare Deb Package Folder Structure"
-  cd vesta-nginx_$VESTA_V/
-  mkdir -p usr/local/vesta etc/init.d DEBIAN
+  if [ -d "$BUILD_DIR/vesta-nginx_$VESTA_V" ]; then
+    rm -rf $BUILD_DIR/vesta-nginx_$VESTA_V
+  fi
+  echo "=== Create directory"
+  mkdir $BUILD_DIR/vesta-nginx_$VESTA_V
+
+  cd $BUILD_DIR/vesta-nginx_$VESTA_V/
+  mkdir -p usr/local/vesta/nginx etc/init.d DEBIAN
   
   press_enter "=== Press enter to Download control, postinst and postrm files"
-  cd DEBIAN
-  wget -nv $GIT_REP/nginx/control -O control
-  wget -nv $GIT_REP/nginx/copyright -O copyright
-  wget -nv $GIT_REP/nginx/postinst -O postinst
-  wget -nv $GIT_REP/nginx/postrm -O postrm
-  chmod +x postinst postrm
+  # Copying control, postinst and postrm files
+  cp -rf /root/vesta/src/deb/nginx/* $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN
+  rm $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/nginx.conf
+  rm $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/vesta
   
-  cd ..
-  if [ $BUILDING_NOW -eq 1 ]; then
-    echo "=== Move nginx directory"
-    mv /usr/local/vesta/nginx usr/local/vesta/
-  fi
+  # Set version
+  sed -i "/Version: /c\Version: $VESTA_VER" $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/control
+
+  # Set permission
+  chmod +x $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/postinst
+
+  echo "=== Copying nginx directory"
+  cp -rf $INSTALL_DIR/nginx/* usr/local/vesta/nginx
   
   echo "=== Get Service File"
-  cd etc/init.d
-  wget -nv $GIT_REP/nginx/vesta
+  cd $BUILD_DIR/vesta-nginx_$VESTA_V/etc/init.d
+  cp /root/vesta/src/deb/nginx/vesta vesta
   chmod +x vesta
   
   echo "=== Get nginx.conf"
-  cd ../../
-  wget -nv $GIT_REP/nginx/nginx.conf -O usr/local/vesta/nginx/conf/nginx.conf
+  cd $BUILD_DIR/vesta-nginx_$VESTA_V
+  cp /root/vesta/src/deb/nginx/nginx.conf $BUILD_DIR/vesta-nginx_$VESTA_V/usr/local/vesta/nginx/conf/nginx.conf
   
-  if [ $BUILDING_NOW -eq 1 ]; then
-    echo "=== copy binary"
-    cp usr/local/vesta/nginx/sbin/nginx usr/local/vesta/nginx/sbin/vesta-nginx
-  fi
+  # if [ $BUILDING_NOW -eq 1 ]; then
+  echo "=== copy binary"
+  cp $INSTALL_DIR/nginx/sbin/nginx $BUILD_DIR/vesta-nginx_$VESTA_V/usr/local/vesta/nginx/sbin/vesta-nginx
+  # fi
   
-  press_enter "=== Press enter to build the package"
-  cd /usr/src
-  dpkg-deb --build vesta-nginx_$VESTA_V
-    
-  if [ $add_deb_to_apt_repo -eq 1 ]; then
-    press_enter "=== Press enter to sign the package ==============================================================================="
-    
-    export GPG_TTY=$(tty)
-    dpkg-sig --sign builder vesta-nginx_$VESTA_V.deb
-    cd $PATH_OF_APT_REPO
-    
-    press_enter "=== Press enter to add to repo ==============================================================================="
-    
-    reprepro --ask-passphrase -Vb . remove buster vesta-nginx
-    reprepro --ask-passphrase -Vb . includedeb buster $BUILD_DIR/vesta-nginx_$VESTA_V.deb
-  fi
-
-  # clear up the source folder
-  # rm -r vesta-nginx_$VESTA_V
+  make_deb_package_and_add_to_repo "vesta-nginx"
 fi
 
 #################################################################################
@@ -207,23 +305,17 @@ fi
 #################################################################################
 
 
-if [ "$PHP_B" = true ] ; then
-  echo "======= Building vesta-php ======="
-  echo "=== Change to build directory: $BUILD_DIR"
+if [ "$PHP_B" = true ]; then
+  echo "======= Building vesta-php package ======="
   cd $BUILD_DIR
   
   BUILDING_NOW=0
   # Check if target directory exist
-  if [ ! -d $BUILD_DIR/vesta-php_$VESTA_V ]; then
-      # #mv $BUILD_DIR/vesta-php_$VESTA_V $BUILD_DIR/vesta-php_$VESTA_V-$(timestamp)
-  	  # rm -r $BUILD_DIR/vesta-php_$VESTA_V
-    # fi
+  if [ ! -d "$BUILD_DIR/php-$PHP_V" ] || [ ! -d "$INSTALL_DIR/nginx" ]; then
 	BUILDING_NOW=1
     
-    echo "=== Create directory: $BUILD_DIR/vesta-php_$VESTA_V"
-    mkdir $BUILD_DIR/vesta-php_$VESTA_V
-    
     echo "=== Download and unpack source files"
+	rm -rf php-$PHP_V
     wget -nv -qO- $PHP | tar xz
     
     echo "=== Change to php directory php-$PHP_V"
@@ -232,7 +324,7 @@ if [ "$PHP_B" = true ] ; then
     press_enter "=== Press enter to continue ==============================================================================="
     
     echo "=== Configure PHP"
-    ./configure --prefix=/usr/local/vesta/php \
+    ./configure --prefix=$INSTALL_DIR/php \
                 --enable-fpm \
                 --with-zlib \
                 --with-fpm-user=admin \
@@ -242,70 +334,56 @@ if [ "$PHP_B" = true ] ; then
                 --with-curl \
                 --enable-mbstring
     
-    press_enter "=== Press enter to Create the files and install them ==============================================================================="
+    # Check install directory and remove if exists
+    if [ -d $INSTALL_DIR/php ]; then
+    	rm -rf $INSTALL_DIR/php
+    fi
+
+    press_enter "=== Press enter to create the files and install them ==============================================================================="
     
     make && make install
     
     press_enter "=== Press enter to continue ==============================================================================="
-    
-    echo "=== Clear up unused files: $BUILD_DIR/php-$PHP_V"
-    cd $BUILD_DIR
-    rm -r php-$PHP_V
   fi
   
-  echo "=== Prepare Deb Package Folder Structure: $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta and $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN"
-  cd vesta-php_$VESTA_V/
+  cd $BUILD_DIR
+  if [ -d "vesta-php_$VESTA_V" ]; then
+    rm -rf vesta-php_$VESTA_V
+  fi
+  echo "=== Create directory: $BUILD_DIR/vesta-php_$VESTA_V"
+  mkdir -p $BUILD_DIR/vesta-php_$VESTA_V
+
+  echo "=== Prepare Deb Package Folder Structure: $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php and $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN"
+  cd $BUILD_DIR/vesta-php_$VESTA_V/
   mkdir -p usr/local/vesta/php DEBIAN
   
-  echo "=== Download control, postinst and postrm files"
-  cd DEBIAN
-  wget -nv $GIT_REP/php/postinst -O postinst
-  chmod 0755 postinst
-  wget -nv $GIT_REP/php/control -O control
-  wget -nv $GIT_REP/php/copyright -O copyright
+  # Copying control, postinst and postrm files
+  cp -rf /root/vesta/src/deb/php/* $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN
+  rm $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/php-fpm.conf
+  
+  # Set version
+  sed -i "/Version: /c\Version: $VESTA_VER" $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/control
+
+  # Set permission
+  chmod +x $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/postinst
  
-  press_enter "=== Press enter to move php directory ==============================================================================="
+  press_enter "=== Press enter to copy builded php ==============================================================================="
   cd ..
   
-  if [ $BUILDING_NOW -eq 1 ]; then
-    echo "=== Moving php directory"
-    mv /usr/local/vesta/php usr/local/vesta/
-    press_enter "=== Done, press enter ==============================================================================="
-  fi
+  # if [ $BUILDING_NOW -eq 1 ]; then
+  echo "=== Copying php directory"
+  cp -rf $INSTALL_DIR/php/* $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/
+  press_enter "=== Done, press enter to copy php-fpm.conf and vesta-php binary ==============================================================================="
+  # fi
 
   echo "=== Get php-fpm.conf"
-  wget -nv $GIT_REP/php/php-fpm.conf -O usr/local/vesta/php/etc/php-fpm.conf
+  cp /root/vesta/src/deb/php/php-fpm.conf $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/etc/php-fpm.conf
   
-  if [ $BUILDING_NOW -eq 1 ]; then
-    echo "=== copy binary"
-    cp usr/local/vesta/php/sbin/php-fpm usr/local/vesta/php/sbin/vesta-php
-  fi
+  echo "=== copy binary"
+  cp $INSTALL_DIR/php/sbin/php-fpm $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/sbin/vesta-php
   
-  press_enter "=== Press enter to build the package ==============================================================================="
-
-  echo "=== build the package"
-  cd /usr/src
-  if [ -f "vesta-php_$VESTA_V.deb" ]; then
-    rm vesta-php_$VESTA_V.deb
-  fi
-  dpkg-deb --build vesta-php_$VESTA_V
-  
-  if [ $add_deb_to_apt_repo -eq 1 ]; then
-    press_enter "=== Press enter to sign the package ==============================================================================="
+  make_deb_package_and_add_to_repo "vesta-php"
     
-    export GPG_TTY=$(tty)
-    dpkg-sig --sign builder vesta-php_$VESTA_V.deb
-    
-    press_enter "=== Press enter to add to repo ==============================================================================="
-    
-    cd $PATH_OF_APT_REPO
-    reprepro --ask-passphrase -Vb . remove buster vesta-php
-    reprepro --ask-passphrase -Vb . includedeb buster $BUILD_DIR/vesta-php_$VESTA_V.deb
-  fi
-
-  # clear up the source folder
-  # rm -r vesta-php_$VESTA_V
-  
   echo "=== All done"
 fi
 
@@ -315,67 +393,41 @@ fi
 #
 #################################################################################
 
-if [ "$VESTA_B" = true ] ; then
+if [ "$VESTA_B" = true ]; then
+  echo "======= Building vesta package ======="
   # Change to build directory
   cd $BUILD_DIR
   
   # Check if target directory exist
   if [ -d $BUILD_DIR/vesta_$VESTA_V ]; then
-  	rm -r $BUILD_DIR/vesta_$VESTA_V
-  fi
-  if [ -d $BUILD_DIR/vesta-master ]; then
-  	rm -r $BUILD_DIR/vesta-master
+  	rm -rf $BUILD_DIR/vesta_$VESTA_V
   fi
   
   # Create directory
   mkdir $BUILD_DIR/vesta_$VESTA_V
   
-  # Download and unpack source files
-  wget -nv $VESTA
-  unzip -q master.zip
-  rm master.zip
-  
   # Prepare Deb Package Folder Structure
   cd vesta_$VESTA_V/
   mkdir -p usr/local/vesta DEBIAN
   
-  # Download control, postinst and postrm files
-  cd DEBIAN
-  wget -nv $GIT_REP/vesta/control
-  wget -nv $GIT_REP/vesta/copyright
-  wget -nv $GIT_REP/vesta/postinst
+  # Copying control, postinst and postrm files
+  cp -rf /root/vesta/src/deb/vesta/* $BUILD_DIR/vesta_$VESTA_V/DEBIAN
   
+  # Set version
+  sed -i "/Version: /c\Version: $VESTA_VER" $BUILD_DIR/vesta_$VESTA_V/DEBIAN/control
+
   # Set permission
-  chmod +x postinst
- 
-  # Move needed directories
-  cd $BUILD_DIR/vesta-master
-  mv bin func install upd web $BUILD_DIR/vesta_$VESTA_V/usr/local/vesta/
-   
+  chmod +x $BUILD_DIR/vesta_$VESTA_V/DEBIAN/postinst
+  rm $BUILD_DIR/vesta_$VESTA_V/DEBIAN/conffiles
+
+  # Copying vesta source
+  cp -rf /root/vesta/* $BUILD_DIR/vesta_$VESTA_V/usr/local/vesta
+  
   # Set permission
   cd $BUILD_DIR/vesta_$VESTA_V/usr/local/vesta/bin
   chmod +x *
+  cd $BUILD_DIR/vesta_$VESTA_V/usr/local/vesta/upd
+  chmod +x *
   
-  press_enter "=== Press enter to build the package ==============================================================================="
-  # build the package
-  cd /usr/src
-  dpkg-deb --build vesta_$VESTA_V
-
-  if [ $add_deb_to_apt_repo -eq 1 ]; then
-    press_enter "=== Press enter to sign the package ==============================================================================="
-    
-    export GPG_TTY=$(tty)
-    dpkg-sig --sign builder vesta_$VESTA_V.deb
-    
-    press_enter "=== Press enter to add to repo ==============================================================================="
-    
-    cd $PATH_OF_APT_REPO
-    reprepro --ask-passphrase -Vb . remove buster vesta
-    reprepro --ask-passphrase -Vb . includedeb buster $BUILD_DIR/vesta_$VESTA_V.deb
-  fi
-  
-  # clear up the source folder
-  cd /usr/src
-  rm -r vesta_$VESTA_V
-  rm -r vesta-master
+  make_deb_package_and_add_to_repo "vesta"
 fi

From 4e5c316f106ad81d19f4c7d4725fbfbb1c610948 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 12 Aug 2019 00:28:16 +0200
Subject: [PATCH 0557/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index ad3fb403..58c6b222 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -175,6 +175,7 @@ if [ "$CWEB_B" = true ]; then
   echo "=== Copying files"
   mkdir -p $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
   cp -rf /root/vesta/install/debian/$DEB_VER/* $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
+  cp /root/vesta/install/debian/10/deb_signing.key /var/www/c.vesta.hostingpanel.dev/html/deb_signing.key
   cd $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
   
   if [ -f "packages.tar.gz" ]; then

From f3988e5ccb33541922c662949513de7d21266e55 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 12 Aug 2019 00:37:59 +0200
Subject: [PATCH 0558/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 58c6b222..b3067a79 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -14,7 +14,7 @@ VESTA_VER='0.9.8-25'
 
 # Set compiling directory
 BUILD_DIR="/usr/src/$DEB_NAME"
-INSTALL_DIR="/usr/local/vesta/$DEB_NAME"
+INSTALL_DIR="/usr/local/vesta"
 
 # Set git repository raw path
 GIT_SRC='https://raw.githubusercontent.com/myvesta/vesta/master/src'

From 0423d9a5e47f04d530ad2b18c7d20df54ced1267 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Aug 2019 22:31:20 +0200
Subject: [PATCH 0559/2300] Update secure_login.php

---
 web/inc/secure_login.php | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 518cb6cf..83cb16b9 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -21,7 +21,10 @@ if ($login_url_skip==0) {
         if (file_exists('/usr/local/vesta/web/inc/login_url.php')) {
             require_once('/usr/local/vesta/web/inc/login_url.php');
             if (isset($_GET[$login_url])) {
-                setcookie($login_url, '1', time() + 31536000, '/', $_SERVER['HTTP_HOST'], true);
+                $Domain=$_SERVER['HTTP_HOST'];
+                $Port = strpos($Domain, ':');
+                if ($Port !== false)  $Domain = substr($Domain, 0, $Port);
+                setcookie($login_url, '1', time() + 31536000, '/', $Domain, true);
                 header ("Location: /login/");
                 exit;
             }

From 15e0529b1309d60f354fc47639e015a743135f52 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Aug 2019 23:08:22 +0200
Subject: [PATCH 0560/2300] Create php.ini

---
 src/deb/php/php.ini | 1249 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 1249 insertions(+)
 create mode 100644 src/deb/php/php.ini

diff --git a/src/deb/php/php.ini b/src/deb/php/php.ini
new file mode 100644
index 00000000..28dc539a
--- /dev/null
+++ b/src/deb/php/php.ini
@@ -0,0 +1,1249 @@
+[PHP]
+
+;;;;;;;;;;;;;;;;;;;
+; About php.ini   ;
+;;;;;;;;;;;;;;;;;;;
+; This file controls many aspects of PHP's behavior.  In order for PHP to
+; read it, it must be named 'php.ini'.  PHP looks for it in the current
+; working directory, in the path designated by the environment variable
+; PHPRC, and in the path that was defined in compile time (in that order).
+; Under Windows, the compile-time path is the Windows directory.  The
+; path in which the php.ini file is looked for can be overridden using
+; the -c argument in command line mode.
+;
+; The syntax of the file is extremely simple.  Whitespace and Lines
+; beginning with a semicolon are silently ignored (as you probably guessed).
+; Section headers (e.g. [Foo]) are also silently ignored, even though
+; they might mean something in the future.
+;
+; Directives are specified using the following syntax:
+; directive = value
+; Directive names are *case sensitive* - foo=bar is different from FOO=bar.
+;
+; The value can be a string, a number, a PHP constant (e.g. E_ALL or M_PI), one
+; of the INI constants (On, Off, True, False, Yes, No and None) or an expression
+; (e.g. E_ALL & ~E_NOTICE), or a quoted string ("foo").
+;
+; Expressions in the INI file are limited to bitwise operators and parentheses:
+; |        bitwise OR
+; &        bitwise AND
+; ~        bitwise NOT
+; !        boolean NOT
+;
+; Boolean flags can be turned on using the values 1, On, True or Yes.
+; They can be turned off using the values 0, Off, False or No.
+;
+; An empty string can be denoted by simply not writing anything after the equal
+; sign, or by using the None keyword:
+;
+;  foo =         ; sets foo to an empty string
+;  foo = none    ; sets foo to an empty string
+;  foo = "none"  ; sets foo to the string 'none'
+;
+; If you use constants in your value, and these constants belong to a
+; dynamically loaded extension (either a PHP extension or a Zend extension),
+; you may only use these constants *after* the line that loads the extension.
+;
+;
+;;;;;;;;;;;;;;;;;;;
+; About this file ;
+;;;;;;;;;;;;;;;;;;;
+; This is the recommended, PHP 5-style version of the php.ini-dist file.  It
+; sets some non standard settings, that make PHP more efficient, more secure,
+; and encourage cleaner coding.
+;
+; The price is that with these settings, PHP may be incompatible with some
+; applications, and sometimes, more difficult to develop with.  Using this
+; file is warmly recommended for production sites.  As all of the changes from
+; the standard settings are thoroughly documented, you can go over each one,
+; and decide whether you want to use it or not.
+;
+; For general information about the php.ini file, please consult the php.ini-dist
+; file, included in your PHP distribution.
+;
+; This file is different from the php.ini-dist file in the fact that it features
+; different values for several directives, in order to improve performance, while
+; possibly breaking compatibility with the standard out-of-the-box behavior of
+; PHP.  Please make sure you read what's different, and modify your scripts
+; accordingly, if you decide to use this file instead.
+;
+; - register_long_arrays = Off     [Performance]
+;     Disables registration of the older (and deprecated) long predefined array
+;     variables ($HTTP_*_VARS).  Instead, use the superglobals that were
+;     introduced in PHP 4.1.0
+; - display_errors = Off           [Security]
+;     With this directive set to off, errors that occur during the execution of
+;     scripts will no longer be displayed as a part of the script output, and thus,
+;     will no longer be exposed to remote users.  With some errors, the error message
+;     content may expose information about your script, web server, or database
+;     server that may be exploitable for hacking.  Production sites should have this
+;     directive set to off.
+; - log_errors = On                [Security]
+;     This directive complements the above one.  Any errors that occur during the
+;     execution of your script will be logged (typically, to your server's error log,
+;     but can be configured in several ways).  Along with setting display_errors to off,
+;     this setup gives you the ability to fully understand what may have gone wrong,
+;     without exposing any sensitive information to remote users.
+; - output_buffering = 4096        [Performance]
+;     Set a 4KB output buffer.  Enabling output buffering typically results in less
+;     writes, and sometimes less packets sent on the wire, which can often lead to
+;     better performance.  The gain this directive actually yields greatly depends
+;     on which Web server you're working with, and what kind of scripts you're using.
+; - register_argc_argv = Off       [Performance]
+;     Disables registration of the somewhat redundant $argv and $argc global
+;     variables.
+; - magic_quotes_gpc = Off         [Performance]
+;     Input data is no longer escaped with slashes so that it can be sent into
+;     SQL databases without further manipulation.  Instead, you should use the
+;     function addslashes() on each input element you wish to send to a database.
+; - variables_order = "GPCS"       [Performance]
+;     The environment variables are not hashed into the $_ENV.  To access
+;     environment variables, you can use getenv() instead.
+; - error_reporting = E_ALL        [Code Cleanliness, Security(?)]
+;     By default, PHP suppresses errors of type E_NOTICE.  These error messages
+;     are emitted for non-critical errors, but that could be a symptom of a bigger
+;     problem.  Most notably, this will cause error messages about the use
+;     of uninitialized variables to be displayed.
+; - allow_call_time_pass_reference = Off     [Code cleanliness]
+;     It's not possible to decide to force a variable to be passed by reference
+;     when calling a function.  The PHP 4 style to do this is by making the
+;     function require the relevant argument by reference.
+
+;;;;;;;;;;;;;;;;;;;;
+; Language Options ;
+;;;;;;;;;;;;;;;;;;;;
+
+; Enable the PHP scripting language engine under Apache.
+engine = On
+
+; Enable compatibility mode with Zend Engine 1 (PHP 4.x)
+zend.ze1_compatibility_mode = Off
+
+; Allow the <? tag.  Otherwise, only <?php and <script> tags are recognized.
+; NOTE: Using short tags should be avoided when developing applications or
+; libraries that are meant for redistribution, or deployment on PHP
+; servers which are not under your control, because short tags may not
+; be supported on the target server. For portable, redistributable code,
+; be sure not to use short tags.
+short_open_tag = On
+
+; Allow ASP-style <% %> tags.
+asp_tags = Off
+
+; The number of significant digits displayed in floating point numbers.
+precision    =  14
+
+; Enforce year 2000 compliance (will cause problems with non-compliant browsers)
+y2k_compliance = On
+
+; Output buffering allows you to send header lines (including cookies) even
+; after you send body content, at the price of slowing PHP's output layer a
+; bit.  You can enable output buffering during runtime by calling the output
+; buffering functions.  You can also enable output buffering for all files by
+; setting this directive to On.  If you wish to limit the size of the buffer
+; to a certain size - you can use a maximum number of bytes instead of 'On', as
+; a value for this directive (e.g., output_buffering=4096).
+output_buffering = 4096
+
+; You can redirect all of the output of your scripts to a function.  For
+; example, if you set output_handler to "mb_output_handler", character
+; encoding will be transparently converted to the specified encoding.
+; Setting any output handler automatically turns on output buffering.
+; Note: People who wrote portable scripts should not depend on this ini
+;       directive. Instead, explicitly set the output handler using ob_start().
+;       Using this ini directive may cause problems unless you know what script
+;       is doing.
+; Note: You cannot use both "mb_output_handler" with "ob_iconv_handler"
+;       and you cannot use both "ob_gzhandler" and "zlib.output_compression".
+; Note: output_handler must be empty if this is set 'On' !!!!
+;       Instead you must use zlib.output_handler.
+;output_handler =
+
+; Transparent output compression using the zlib library
+; Valid values for this option are 'off', 'on', or a specific buffer size
+; to be used for compression (default is 4KB)
+; Note: Resulting chunk size may vary due to nature of compression. PHP
+;       outputs chunks that are few hundreds bytes each as a result of
+;       compression. If you prefer a larger chunk size for better
+;       performance, enable output_buffering in addition.
+; Note: You need to use zlib.output_handler instead of the standard
+;       output_handler, or otherwise the output will be corrupted.
+zlib.output_compression = Off
+;zlib.output_compression_level = -1
+
+; You cannot specify additional output handlers if zlib.output_compression
+; is activated here. This setting does the same as output_handler but in
+; a different order.
+;zlib.output_handler =
+
+; Implicit flush tells PHP to tell the output layer to flush itself
+; automatically after every output block.  This is equivalent to calling the
+; PHP function flush() after each and every call to print() or echo() and each
+; and every HTML block.  Turning this option on has serious performance
+; implications and is generally recommended for debugging purposes only.
+implicit_flush = Off
+
+; The unserialize callback function will be called (with the undefined class'
+; name as parameter), if the unserializer finds an undefined class
+; which should be instantiated.
+; A warning appears if the specified function is not defined, or if the
+; function doesn't include/implement the missing class.
+; So only set this entry, if you really want to implement such a
+; callback-function.
+unserialize_callback_func=
+
+; When floats & doubles are serialized store serialize_precision significant
+; digits after the floating point. The default value ensures that when floats
+; are decoded with unserialize, the data will remain the same.
+serialize_precision = 100
+
+; Whether to enable the ability to force arguments to be passed by reference
+; at function call time.  This method is deprecated and is likely to be
+; unsupported in future versions of PHP/Zend.  The encouraged method of
+; specifying which arguments should be passed by reference is in the function
+; declaration.  You're encouraged to try and turn this option Off and make
+; sure your scripts work properly with it in order to ensure they will work
+; with future versions of the language (you will receive a warning each time
+; you use this feature, and the argument will be passed by value instead of by
+; reference).
+allow_call_time_pass_reference = Off
+
+;
+; Safe Mode
+;
+safe_mode = Off
+
+; By default, Safe Mode does a UID compare check when
+; opening files. If you want to relax this to a GID compare,
+; then turn on safe_mode_gid.
+safe_mode_gid = Off
+
+; When safe_mode is on, UID/GID checks are bypassed when
+; including files from this directory and its subdirectories.
+; (directory must also be in include_path or full path must
+; be used when including)
+safe_mode_include_dir =
+
+; When safe_mode is on, only executables located in the safe_mode_exec_dir
+; will be allowed to be executed via the exec family of functions.
+safe_mode_exec_dir =
+
+; Setting certain environment variables may be a potential security breach.
+; This directive contains a comma-delimited list of prefixes.  In Safe Mode,
+; the user may only alter environment variables whose names begin with the
+; prefixes supplied here.  By default, users will only be able to set
+; environment variables that begin with PHP_ (e.g. PHP_FOO=BAR).
+;
+; Note:  If this directive is empty, PHP will let the user modify ANY
+; environment variable!
+safe_mode_allowed_env_vars = PHP_
+
+; This directive contains a comma-delimited list of environment variables that
+; the end user won't be able to change using putenv().  These variables will be
+; protected even if safe_mode_allowed_env_vars is set to allow to change them.
+safe_mode_protected_env_vars = LD_LIBRARY_PATH
+
+; open_basedir, if set, limits all file operations to the defined directory
+; and below.  This directive makes most sense if used in a per-directory
+; or per-virtualhost web server configuration file. This directive is
+; *NOT* affected by whether Safe Mode is turned On or Off.
+;open_basedir =
+
+; This directive allows you to disable certain functions for security reasons.
+; It receives a comma-delimited list of function names. This directive is
+; *NOT* affected by whether Safe Mode is turned On or Off.
+disable_functions =
+
+; This directive allows you to disable certain classes for security reasons.
+; It receives a comma-delimited list of class names. This directive is
+; *NOT* affected by whether Safe Mode is turned On or Off.
+disable_classes =
+
+; Colors for Syntax Highlighting mode.  Anything that's acceptable in
+; <span style="color: ???????"> would work.
+;highlight.string  = #DD0000
+;highlight.comment = #FF9900
+;highlight.keyword = #007700
+;highlight.bg      = #FFFFFF
+;highlight.default = #0000BB
+;highlight.html    = #000000
+
+; If enabled, the request will be allowed to complete even if the user aborts
+; the request. Consider enabling it if executing long request, which may end up
+; being interrupted by the user or a browser timing out.
+; ignore_user_abort = On
+
+; Determines the size of the realpath cache to be used by PHP. This value should
+; be increased on systems where PHP opens many files to reflect the quantity of
+; the file operations performed.
+; realpath_cache_size=16k
+
+; Duration of time, in seconds for which to cache realpath information for a given
+; file or directory. For systems with rarely changing files, consider increasing this
+; value.
+; realpath_cache_ttl=120
+
+;
+; Misc
+;
+; Decides whether PHP may expose the fact that it is installed on the server
+; (e.g. by adding its signature to the Web server header).  It is no security
+; threat in any way, but it makes it possible to determine whether you use PHP
+; on your server or not.
+expose_php = Off
+
+
+;;;;;;;;;;;;;;;;;;;
+; Resource Limits ;
+;;;;;;;;;;;;;;;;;;;
+
+max_execution_time = 300     ; Maximum execution time of each script, in seconds
+max_input_time = 120    ; Maximum amount of time each script may spend parsing request data
+;max_input_nesting_level = 64 ; Maximum input variable nesting level
+memory_limit = 64M      ; Maximum amount of memory a script may consume (16MB)
+
+
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+; Error handling and logging ;
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+
+; error_reporting is a bit-field.  Or each number up to get desired error
+; reporting level
+; E_ALL             - All errors and warnings (doesn't include E_STRICT)
+; E_ERROR           - fatal run-time errors
+; E_RECOVERABLE_ERROR  - almost fatal run-time errors
+; E_WARNING         - run-time warnings (non-fatal errors)
+; E_PARSE           - compile-time parse errors
+; E_NOTICE          - run-time notices (these are warnings which often result
+;                     from a bug in your code, but it's possible that it was
+;                     intentional (e.g., using an uninitialized variable and
+;                     relying on the fact it's automatically initialized to an
+;                     empty string)
+; E_STRICT          - run-time notices, enable to have PHP suggest changes
+;                     to your code which will ensure the best interoperability
+;                     and forward compatibility of your code
+; E_CORE_ERROR      - fatal errors that occur during PHP's initial startup
+; E_CORE_WARNING    - warnings (non-fatal errors) that occur during PHP's
+;                     initial startup
+; E_COMPILE_ERROR   - fatal compile-time errors
+; E_COMPILE_WARNING - compile-time warnings (non-fatal errors)
+; E_USER_ERROR      - user-generated error message
+; E_USER_WARNING    - user-generated warning message
+; E_USER_NOTICE     - user-generated notice message
+;
+; Examples:
+;
+;   - Show all errors, except for notices and coding standards warnings
+;
+;error_reporting = E_ALL & ~E_NOTICE
+;
+;   - Show all errors, except for notices
+;
+;error_reporting = E_ALL & ~E_NOTICE | E_STRICT
+;
+;   - Show only errors
+;
+;error_reporting = E_COMPILE_ERROR|E_RECOVERABLE_ERROR|E_ERROR|E_CORE_ERROR
+;
+;   - Show all errors, except coding standards warnings
+;
+error_reporting  =  E_ALL
+
+; Print out errors (as a part of the output).  For production web sites,
+; you're strongly encouraged to turn this feature off, and use error logging
+; instead (see below).  Keeping display_errors enabled on a production web site
+; may reveal security information to end users, such as file paths on your Web
+; server, your database schema or other information.
+;
+; possible values for display_errors:
+;
+; Off          - Do not display any errors
+; stderr       - Display errors to STDERR (affects only CGI/CLI binaries!)
+; On or stdout - Display errors to STDOUT (default)
+;
+; To output errors to STDERR with CGI/CLI:
+;display_errors = "stderr"
+;
+; Default
+;
+display_errors = Off
+
+; Even when display_errors is on, errors that occur during PHP's startup
+; sequence are not displayed.  It's strongly recommended to keep
+; display_startup_errors off, except for when debugging.
+display_startup_errors = Off
+
+; Log errors into a log file (server-specific log, stderr, or error_log (below))
+; As stated above, you're strongly advised to use error logging in place of
+; error displaying on production web sites.
+log_errors = On
+
+; Set maximum length of log_errors. In error_log information about the source is
+; added. The default is 1024 and 0 allows to not apply any maximum length at all.
+log_errors_max_len = 1024
+
+; Do not log repeated messages. Repeated errors must occur in same file on same
+; line until ignore_repeated_source is set true.
+ignore_repeated_errors = Off
+
+; Ignore source of message when ignoring repeated messages. When this setting
+; is On you will not log errors with repeated messages from different files or
+; source lines.
+ignore_repeated_source = Off
+
+; If this parameter is set to Off, then memory leaks will not be shown (on
+; stdout or in the log). This has only effect in a debug compile, and if
+; error reporting includes E_WARNING in the allowed list
+report_memleaks = On
+
+;report_zend_debug = 0
+
+; Store the last error/warning message in $php_errormsg (boolean).
+track_errors = Off
+
+; Disable the inclusion of HTML tags in error messages.
+; Note: Never use this feature for production boxes.
+;html_errors = Off
+
+; If html_errors is set On PHP produces clickable error messages that direct
+; to a page describing the error or function causing the error in detail.
+; You can download a copy of the PHP manual from http://www.php.net/docs.php
+; and change docref_root to the base URL of your local copy including the
+; leading '/'. You must also specify the file extension being used including
+; the dot.
+; Note: Never use this feature for production boxes.
+;docref_root = "/phpmanual/"
+;docref_ext = .html
+
+; String to output before an error message.
+;error_prepend_string = "<font color=ff0000>"
+
+; String to output after an error message.
+;error_append_string = "</font>"
+
+; Log errors to specified file.
+;error_log = filename
+
+; Log errors to syslog (Event Log on NT, not valid in Windows 95).
+;error_log = syslog
+
+
+;;;;;;;;;;;;;;;;;
+; Data Handling ;
+;;;;;;;;;;;;;;;;;
+;
+; Note - track_vars is ALWAYS enabled as of PHP 4.0.3
+
+; The separator used in PHP generated URLs to separate arguments.
+; Default is "&".
+;arg_separator.output = "&amp;"
+
+; List of separator(s) used by PHP to parse input URLs into variables.
+; Default is "&".
+; NOTE: Every character in this directive is considered as separator!
+;arg_separator.input = ";&"
+
+; This directive describes the order in which PHP registers GET, POST, Cookie,
+; Environment and Built-in variables (G, P, C, E & S respectively, often
+; referred to as EGPCS or GPC).  Registration is done from left to right, newer
+; values override older values.
+variables_order = "EGPCS"
+
+; Whether or not to register the EGPCS variables as global variables.  You may
+; want to turn this off if you don't want to clutter your scripts' global scope
+; with user data.  This makes most sense when coupled with track_vars - in which
+; case you can access all of the GPC variables through the $HTTP_*_VARS[],
+; variables.
+;
+; You should do your best to write your scripts so that they do not require
+; register_globals to be on;  Using form variables as globals can easily lead
+; to possible security problems, if the code is not very well thought of.
+register_globals = Off
+
+; Whether or not to register the old-style input arrays, HTTP_GET_VARS
+; and friends.  If you're not using them, it's recommended to turn them off,
+; for performance reasons.
+register_long_arrays = Off
+
+; This directive tells PHP whether to declare the argv&argc variables (that
+; would contain the GET information).  If you don't use these variables, you
+; should turn it off for increased performance.
+register_argc_argv = Off
+
+; When enabled, the SERVER and ENV variables are created when they're first
+; used (Just In Time) instead of when the script starts. If these variables
+; are not used within a script, having this directive on will result in a
+; performance gain. The PHP directives register_globals, register_long_arrays,
+; and register_argc_argv must be disabled for this directive to have any affect.
+auto_globals_jit = On
+
+; Maximum size of POST data that PHP will accept.
+post_max_size = 8M
+
+; Magic quotes
+;
+
+; Magic quotes for incoming GET/POST/Cookie data.
+magic_quotes_gpc = Off
+
+; Magic quotes for runtime-generated data, e.g. data from SQL, from exec(), etc.
+magic_quotes_runtime = Off
+
+; Use Sybase-style magic quotes (escape ' with '' instead of \').
+magic_quotes_sybase = Off
+
+; Automatically add files before or after any PHP document.
+auto_prepend_file =
+auto_append_file =
+
+; As of 4.0b4, PHP always outputs a character encoding by default in
+; the Content-type: header.  To disable sending of the charset, simply
+; set it to be empty.
+;
+; PHP's built-in default is text/html
+default_mimetype = "text/html"
+;default_charset = "iso-8859-1"
+
+; Always populate the $HTTP_RAW_POST_DATA variable.
+;always_populate_raw_post_data = On
+
+
+;;;;;;;;;;;;;;;;;;;;;;;;;
+; Paths and Directories ;
+;;;;;;;;;;;;;;;;;;;;;;;;;
+
+; UNIX: "/path1:/path2"
+;include_path = ".:/php/includes"
+;
+; Windows: "\path1;\path2"
+;include_path = ".;c:\php\includes"
+
+; The root of the PHP pages, used only if nonempty.
+; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root
+; if you are running php as a CGI under any web server (other than IIS)
+; see documentation for security issues.  The alternate is to use the
+; cgi.force_redirect configuration below
+doc_root =
+
+; The directory under which PHP opens the script using /~username used only
+; if nonempty.
+user_dir =
+
+; Whether or not to enable the dl() function.  The dl() function does NOT work
+; properly in multithreaded servers, such as IIS or Zeus, and is automatically
+; disabled on them.
+enable_dl = On
+
+; cgi.force_redirect is necessary to provide security running PHP as a CGI under
+; most web servers.  Left undefined, PHP turns this on by default.  You can
+; turn it off here AT YOUR OWN RISK
+; **You CAN safely turn this off for IIS, in fact, you MUST.**
+; cgi.force_redirect = 1
+
+; if cgi.nph is enabled it will force cgi to always sent Status: 200 with
+; every request.
+; cgi.nph = 1
+
+; if cgi.force_redirect is turned on, and you are not running under Apache or Netscape
+; (iPlanet) web servers, you MAY need to set an environment variable name that PHP
+; will look for to know it is OK to continue execution.  Setting this variable MAY
+; cause security issues, KNOW WHAT YOU ARE DOING FIRST.
+; cgi.redirect_status_env = ;
+
+; cgi.fix_pathinfo provides *real* PATH_INFO/PATH_TRANSLATED support for CGI.  PHP's
+; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok
+; what PATH_INFO is.  For more information on PATH_INFO, see the cgi specs.  Setting
+; this to 1 will cause PHP CGI to fix it's paths to conform to the spec.  A setting
+; of zero causes PHP to behave as before.  Default is 1.  You should fix your scripts
+; to use SCRIPT_FILENAME rather than PATH_TRANSLATED.
+; cgi.fix_pathinfo=1
+
+; FastCGI under IIS (on WINNT based OS) supports the ability to impersonate
+; security tokens of the calling client.  This allows IIS to define the
+; security context that the request runs under.  mod_fastcgi under Apache
+; does not currently support this feature (03/17/2002)
+; Set to 1 if running under IIS.  Default is zero.
+; fastcgi.impersonate = 1;
+
+; Disable logging through FastCGI connection
+; fastcgi.logging = 0
+
+; cgi.rfc2616_headers configuration option tells PHP what type of headers to
+; use when sending HTTP response code. If it's set 0 PHP sends Status: header that
+; is supported by Apache. When this option is set to 1 PHP will send
+; RFC2616 compliant header.
+; Default is zero.
+;cgi.rfc2616_headers = 0
+
+
+;;;;;;;;;;;;;;;;
+; File Uploads ;
+;;;;;;;;;;;;;;;;
+
+; Whether to allow HTTP file uploads.
+file_uploads = On
+
+; Temporary directory for HTTP uploaded files (will use system default if not
+; specified).
+;upload_tmp_dir =
+
+; Maximum allowed size for uploaded files.
+upload_max_filesize = 2M
+
+
+;;;;;;;;;;;;;;;;;;
+; Fopen wrappers ;
+;;;;;;;;;;;;;;;;;;
+
+; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
+allow_url_fopen = On
+
+; Whether to allow include/require to open URLs (like http:// or ftp://) as files.
+allow_url_include = Off
+
+; Define the anonymous ftp password (your email address)
+;from="john@doe.com"
+
+; Define the User-Agent string
+; user_agent="PHP"
+
+; Default timeout for socket based streams (seconds)
+default_socket_timeout = 60
+
+; If your scripts have to deal with files from Macintosh systems,
+; or you are running on a Mac and need to deal with files from
+; unix or win32 systems, setting this flag will cause PHP to
+; automatically detect the EOL character in those files so that
+; fgets() and file() will work regardless of the source of the file.
+; auto_detect_line_endings = Off
+
+
+;;;;;;;;;;;;;;;;;;;;;;
+; Dynamic Extensions ;
+;;;;;;;;;;;;;;;;;;;;;;
+;
+; If you wish to have an extension loaded automatically, use the following
+; syntax:
+;
+;   extension=modulename.extension
+;
+; For example:
+;
+;   extension=msql.so
+;
+; Note that it should be the name of the module only; no directory information
+; needs to go here.  Specify the location of the extension with the
+; extension_dir directive above.
+
+
+;;;;
+; Note: packaged extension modules are now loaded via the .ini files
+; found in the directory /etc/php.d; these are loaded by default.
+;;;;
+
+
+;;;;;;;;;;;;;;;;;;;
+; Module Settings ;
+;;;;;;;;;;;;;;;;;;;
+
+[Date]
+; Defines the default timezone used by the date functions
+date.timezone = UTC
+
+;date.default_latitude = 31.7667
+;date.default_longitude = 35.2333
+
+;date.sunrise_zenith = 90.583333
+;date.sunset_zenith = 90.583333
+
+[filter]
+;filter.default = unsafe_raw
+;filter.default_flags =
+
+[iconv]
+;iconv.input_encoding = ISO-8859-1
+;iconv.internal_encoding = ISO-8859-1
+;iconv.output_encoding = ISO-8859-1
+
+[sqlite]
+;sqlite.assoc_case = 0
+
+[xmlrpc]
+;xmlrpc_error_number = 0
+;xmlrpc_errors = 0
+
+[Pcre]
+;PCRE library backtracking limit.
+;pcre.backtrack_limit=100000
+
+;PCRE library recursion limit.
+;Please note that if you set this value to a high number you may consume all
+;the available process stack and eventually crash PHP (due to reaching the
+;stack size limit imposed by the Operating System).
+;pcre.recursion_limit=100000
+
+[Syslog]
+; Whether or not to define the various syslog variables (e.g. $LOG_PID,
+; $LOG_CRON, etc.).  Turning it off is a good idea performance-wise.  In
+; runtime, you can define these variables by calling define_syslog_variables().
+define_syslog_variables  = Off
+
+[mail function]
+; For Win32 only.
+SMTP = localhost
+smtp_port = 25
+
+; For Win32 only.
+;sendmail_from = me@example.com
+
+; For Unix only.  You may supply arguments as well (default: "sendmail -t -i").
+sendmail_path = /usr/sbin/sendmail -t -i
+
+; Force the addition of the specified parameters to be passed as extra parameters
+; to the sendmail binary. These parameters will always replace the value of
+; the 5th parameter to mail(), even in safe mode.
+;mail.force_extra_parameters =
+
+[SQL]
+sql.safe_mode = Off
+
+[ODBC]
+;odbc.default_db    =  Not yet implemented
+;odbc.default_user  =  Not yet implemented
+;odbc.default_pw    =  Not yet implemented
+
+; Allow or prevent persistent links.
+odbc.allow_persistent = On
+
+; Check that a connection is still valid before reuse.
+odbc.check_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+odbc.max_persistent = -1
+
+; Maximum number of links (persistent + non-persistent).  -1 means no limit.
+odbc.max_links = -1
+
+; Handling of LONG fields.  Returns number of bytes to variables.  0 means
+; passthru.
+odbc.defaultlrl = 4096
+
+; Handling of binary data.  0 means passthru, 1 return as is, 2 convert to char.
+; See the documentation on odbc_binmode and odbc_longreadlen for an explanation
+; of uodbc.defaultlrl and uodbc.defaultbinmode
+odbc.defaultbinmode = 1
+
+[MySQL]
+; Allow or prevent persistent links.
+mysql.allow_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+mysql.max_persistent = -1
+
+; Maximum number of links (persistent + non-persistent).  -1 means no limit.
+mysql.max_links = -1
+
+; Default port number for mysql_connect().  If unset, mysql_connect() will use
+; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the
+; compile-time value defined MYSQL_PORT (in that order).  Win32 will only look
+; at MYSQL_PORT.
+mysql.default_port =
+
+; Default socket name for local MySQL connects.  If empty, uses the built-in
+; MySQL defaults.
+mysql.default_socket =
+
+; Default host for mysql_connect() (doesn't apply in safe mode).
+mysql.default_host =
+
+; Default user for mysql_connect() (doesn't apply in safe mode).
+mysql.default_user =
+
+; Default password for mysql_connect() (doesn't apply in safe mode).
+; Note that this is generally a *bad* idea to store passwords in this file.
+; *Any* user with PHP access can run 'echo get_cfg_var("mysql.default_password")
+; and reveal this password!  And of course, any users with read access to this
+; file will be able to reveal the password as well.
+mysql.default_password =
+
+; Maximum time (in seconds) for connect timeout. -1 means no limit
+mysql.connect_timeout = 60
+
+; Trace mode. When trace_mode is active (=On), warnings for table/index scans and
+; SQL-Errors will be displayed.
+mysql.trace_mode = Off
+
+[MySQLi]
+
+; Maximum number of links.  -1 means no limit.
+mysqli.max_links = -1
+
+; Default port number for mysqli_connect().  If unset, mysqli_connect() will use
+; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the
+; compile-time value defined MYSQL_PORT (in that order).  Win32 will only look
+; at MYSQL_PORT.
+mysqli.default_port = 3306
+
+; Default socket name for local MySQL connects.  If empty, uses the built-in
+; MySQL defaults.
+mysqli.default_socket =
+
+; Default host for mysql_connect() (doesn't apply in safe mode).
+mysqli.default_host =
+
+; Default user for mysql_connect() (doesn't apply in safe mode).
+mysqli.default_user =
+
+; Default password for mysqli_connect() (doesn't apply in safe mode).
+; Note that this is generally a *bad* idea to store passwords in this file.
+; *Any* user with PHP access can run 'echo get_cfg_var("mysqli.default_pw")
+; and reveal this password!  And of course, any users with read access to this
+; file will be able to reveal the password as well.
+mysqli.default_pw =
+
+; Allow or prevent reconnect
+mysqli.reconnect = Off
+
+[mSQL]
+; Allow or prevent persistent links.
+msql.allow_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+msql.max_persistent = -1
+
+; Maximum number of links (persistent+non persistent).  -1 means no limit.
+msql.max_links = -1
+
+[PostgresSQL]
+; Allow or prevent persistent links.
+pgsql.allow_persistent = On
+
+; Detect broken persistent links always with pg_pconnect().
+; Auto reset feature requires a little overheads.
+pgsql.auto_reset_persistent = Off
+
+; Maximum number of persistent links.  -1 means no limit.
+pgsql.max_persistent = -1
+
+; Maximum number of links (persistent+non persistent).  -1 means no limit.
+pgsql.max_links = -1
+
+; Ignore PostgreSQL backends Notice message or not.
+; Notice message logging require a little overheads.
+pgsql.ignore_notice = 0
+
+; Log PostgreSQL backends Noitce message or not.
+; Unless pgsql.ignore_notice=0, module cannot log notice message.
+pgsql.log_notice = 0
+
+[Sybase]
+; Allow or prevent persistent links.
+sybase.allow_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+sybase.max_persistent = -1
+
+; Maximum number of links (persistent + non-persistent).  -1 means no limit.
+sybase.max_links = -1
+
+;sybase.interface_file = "/usr/sybase/interfaces"
+
+; Minimum error severity to display.
+sybase.min_error_severity = 10
+
+; Minimum message severity to display.
+sybase.min_message_severity = 10
+
+; Compatibility mode with old versions of PHP 3.0.
+; If on, this will cause PHP to automatically assign types to results according
+; to their Sybase type, instead of treating them all as strings.  This
+; compatibility mode will probably not stay around forever, so try applying
+; whatever necessary changes to your code, and turn it off.
+sybase.compatability_mode = Off
+
+[Sybase-CT]
+; Allow or prevent persistent links.
+sybct.allow_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+sybct.max_persistent = -1
+
+; Maximum number of links (persistent + non-persistent).  -1 means no limit.
+sybct.max_links = -1
+
+; Minimum server message severity to display.
+sybct.min_server_severity = 10
+
+; Minimum client message severity to display.
+sybct.min_client_severity = 10
+
+[bcmath]
+; Number of decimal digits for all bcmath functions.
+bcmath.scale = 0
+
+[browscap]
+;browscap = extra/browscap.ini
+
+[Informix]
+; Default host for ifx_connect() (doesn't apply in safe mode).
+ifx.default_host =
+
+; Default user for ifx_connect() (doesn't apply in safe mode).
+ifx.default_user =
+
+; Default password for ifx_connect() (doesn't apply in safe mode).
+ifx.default_password =
+
+; Allow or prevent persistent links.
+ifx.allow_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+ifx.max_persistent = -1
+
+; Maximum number of links (persistent + non-persistent).  -1 means no limit.
+ifx.max_links = -1
+
+; If on, select statements return the contents of a text blob instead of its id.
+ifx.textasvarchar = 0
+
+; If on, select statements return the contents of a byte blob instead of its id.
+ifx.byteasvarchar = 0
+
+; Trailing blanks are stripped from fixed-length char columns.  May help the
+; life of Informix SE users.
+ifx.charasvarchar = 0
+
+; If on, the contents of text and byte blobs are dumped to a file instead of
+; keeping them in memory.
+ifx.blobinfile = 0
+
+; NULL's are returned as empty strings, unless this is set to 1.  In that case,
+; NULL's are returned as string 'NULL'.
+ifx.nullformat = 0
+
+[Session]
+; Handler used to store/retrieve data.
+session.save_handler = files
+
+; Argument passed to save_handler.  In the case of files, this is the path
+; where data files are stored. Note: Windows users have to change this
+; variable in order to use PHP's session functions.
+;
+; As of PHP 4.0.1, you can define the path as:
+;
+;     session.save_path = "N;/path"
+;
+; where N is an integer.  Instead of storing all the session files in
+; /path, what this will do is use subdirectories N-levels deep, and
+; store the session data in those directories.  This is useful if you
+; or your OS have problems with lots of files in one directory, and is
+; a more efficient layout for servers that handle lots of sessions.
+;
+; NOTE 1: PHP will not create this directory structure automatically.
+;         You can use the script in the ext/session dir for that purpose.
+; NOTE 2: See the section on garbage collection below if you choose to
+;         use subdirectories for session storage
+;
+; The file storage module creates files using mode 600 by default.
+; You can change that by using
+;
+;     session.save_path = "N;MODE;/path"
+;
+; where MODE is the octal representation of the mode. Note that this
+; does not overwrite the process's umask.
+;session.save_path = "/var/lib/php/session"
+session.save_path = "/tmp"
+
+; Whether to use cookies.
+session.use_cookies = 1
+
+;session.cookie_secure =
+
+; This option enables administrators to make their users invulnerable to
+; attacks which involve passing session ids in URLs; defaults to 0.
+; session.use_only_cookies = 1
+
+; Name of the session (used as cookie name).
+session.name = PHPSESSID
+
+; Initialize session on request startup.
+session.auto_start = 0
+
+; Lifetime in seconds of cookie or, if 0, until browser is restarted.
+session.cookie_lifetime = 0
+
+; The path for which the cookie is valid.
+session.cookie_path = /
+
+; The domain for which the cookie is valid.
+session.cookie_domain =
+
+; Whether or not to add the httpOnly flag to the cookie, which makes it inaccessible to browser scripting languages such as JavaScript.
+session.cookie_httponly =
+
+; Handler used to serialize data.  php is the standard serializer of PHP.
+session.serialize_handler = php
+
+; Define the probability that the 'garbage collection' process is started
+; on every session initialization.
+; The probability is calculated by using gc_probability/gc_divisor,
+; e.g. 1/100 means there is a 1% chance that the GC process starts
+; on each request.
+
+session.gc_probability = 1
+session.gc_divisor     = 1000
+
+; After this number of seconds, stored data will be seen as 'garbage' and
+; cleaned up by the garbage collection process.
+session.gc_maxlifetime = 1440
+
+; NOTE: If you are using the subdirectory option for storing session files
+;       (see session.save_path above), then garbage collection does *not*
+;       happen automatically.  You will need to do your own garbage
+;       collection through a shell script, cron entry, or some other method.
+;       For example, the following script would is the equivalent of
+;       setting session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes):
+;          cd /path/to/sessions; find -cmin +24 | xargs rm
+
+; PHP 4.2 and less have an undocumented feature/bug that allows you to
+; to initialize a session variable in the global scope, albeit register_globals
+; is disabled.  PHP 4.3 and later will warn you, if this feature is used.
+; You can disable the feature and the warning separately. At this time,
+; the warning is only displayed, if bug_compat_42 is enabled.
+
+session.bug_compat_42 = 0
+session.bug_compat_warn = 1
+
+; Check HTTP Referer to invalidate externally stored URLs containing ids.
+; HTTP_REFERER has to contain this substring for the session to be
+; considered as valid.
+session.referer_check =
+
+; How many bytes to read from the file.
+session.entropy_length = 0
+
+; Specified here to create the session id.
+session.entropy_file =
+
+;session.entropy_length = 16
+
+;session.entropy_file = /dev/urandom
+
+; Set to {nocache,private,public,} to determine HTTP caching aspects
+; or leave this empty to avoid sending anti-caching headers.
+session.cache_limiter = nocache
+
+; Document expires after n minutes.
+session.cache_expire = 180
+
+; trans sid support is disabled by default.
+; Use of trans sid may risk your users security.
+; Use this option with caution.
+; - User may send URL contains active session ID
+;   to other person via. email/irc/etc.
+; - URL that contains active session ID may be stored
+;   in publically accessible computer.
+; - User may access your site with the same session ID
+;   always using URL stored in browser's history or bookmarks.
+session.use_trans_sid = 0
+
+; Select a hash function
+; 0: MD5   (128 bits)
+; 1: SHA-1 (160 bits)
+session.hash_function = 0
+
+; Define how many bits are stored in each character when converting
+; the binary hash data to something readable.
+;
+; 4 bits: 0-9, a-f
+; 5 bits: 0-9, a-v
+; 6 bits: 0-9, a-z, A-Z, "-", ","
+session.hash_bits_per_character = 5
+
+; The URL rewriter will look for URLs in a defined set of HTML tags.
+; form/fieldset are special; if you include them here, the rewriter will
+; add a hidden <input> field with the info which is otherwise appended
+; to URLs.  If you want XHTML conformity, remove the form entry.
+; Note that all valid entries require a "=", even if no value follows.
+url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"
+
+[MSSQL]
+; Allow or prevent persistent links.
+mssql.allow_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+mssql.max_persistent = -1
+
+; Maximum number of links (persistent+non persistent).  -1 means no limit.
+mssql.max_links = -1
+
+; Minimum error severity to display.
+mssql.min_error_severity = 10
+
+; Minimum message severity to display.
+mssql.min_message_severity = 10
+
+; Compatibility mode with old versions of PHP 3.0.
+mssql.compatability_mode = Off
+
+; Connect timeout
+;mssql.connect_timeout = 5
+
+; Query timeout
+;mssql.timeout = 60
+
+; Valid range 0 - 2147483647.  Default = 4096.
+;mssql.textlimit = 4096
+
+; Valid range 0 - 2147483647.  Default = 4096.
+;mssql.textsize = 4096
+
+; Limits the number of records in each batch.  0 = all records in one batch.
+;mssql.batchsize = 0
+
+; Specify how datetime and datetim4 columns are returned
+; On => Returns data converted to SQL server settings
+; Off => Returns values as YYYY-MM-DD hh:mm:ss
+;mssql.datetimeconvert = On
+
+; Use NT authentication when connecting to the server
+mssql.secure_connection = Off
+
+; Specify max number of processes. -1 = library default
+; msdlib defaults to 25
+; FreeTDS defaults to 4096
+;mssql.max_procs = -1
+
+; Specify client character set.
+; If empty or not set the client charset from freetds.comf is used
+; This is only used when compiled with FreeTDS
+;mssql.charset = "ISO-8859-1"
+
+[Assertion]
+; Assert(expr); active by default.
+;assert.active = On
+
+; Issue a PHP warning for each failed assertion.
+;assert.warning = On
+
+; Don't bail out by default.
+;assert.bail = Off
+
+; User-function to be called if an assertion fails.
+;assert.callback = 0
+
+; Eval the expression with current error_reporting().  Set to true if you want
+; error_reporting(0) around the eval().
+;assert.quiet_eval = 0
+
+[COM]
+; path to a file containing GUIDs, IIDs or filenames of files with TypeLibs
+;com.typelib_file =
+; allow Distributed-COM calls
+;com.allow_dcom = true
+; autoregister constants of a components typlib on com_load()
+;com.autoregister_typelib = true
+; register constants casesensitive
+;com.autoregister_casesensitive = false
+; show warnings on duplicate constant registrations
+;com.autoregister_verbose = true
+
+[mbstring]
+; language for internal character representation.
+;mbstring.language = Japanese
+
+; internal/script encoding.
+; Some encoding cannot work as internal encoding.
+; (e.g. SJIS, BIG5, ISO-2022-*)
+;mbstring.internal_encoding = EUC-JP
+
+; http input encoding.
+;mbstring.http_input = auto
+
+; http output encoding. mb_output_handler must be
+; registered as output buffer to function
+;mbstring.http_output = SJIS
+
+; enable automatic encoding translation according to
+; mbstring.internal_encoding setting. Input chars are
+; converted to internal encoding by setting this to On.
+; Note: Do _not_ use automatic encoding translation for
+;       portable libs/applications.
+;mbstring.encoding_translation = Off
+
+; automatic encoding detection order.
+; auto means
+;mbstring.detect_order = auto
+
+; substitute_character used when character cannot be converted
+; one from another
+;mbstring.substitute_character = none;
+
+; overload(replace) single byte functions by mbstring functions.
+; mail(), ereg(), etc are overloaded by mb_send_mail(), mb_ereg(),
+; etc. Possible values are 0,1,2,4 or combination of them.
+; For example, 7 for overload everything.
+; 0: No overload
+; 1: Overload mail() function
+; 2: Overload str*() functions
+; 4: Overload ereg*() functions
+;mbstring.func_overload = 0
+
+; enable strict encoding detection.
+;mbstring.strict_encoding = Off
+
+[FrontBase]
+;fbsql.allow_persistent = On
+;fbsql.autocommit = On
+;fbsql.show_timestamp_decimals = Off
+;fbsql.default_database =
+;fbsql.default_database_password =
+;fbsql.default_host =
+;fbsql.default_password =
+;fbsql.default_user = "_SYSTEM"
+;fbsql.generate_warnings = Off
+;fbsql.max_connections = 128
+;fbsql.max_links = 128
+;fbsql.max_persistent = -1
+;fbsql.max_results = 128
+
+[gd]
+; Tell the jpeg decode to libjpeg warnings and try to create
+; a gd image. The warning will then be displayed as notices
+; disabled by default
+;gd.jpeg_ignore_warning = 0
+
+[exif]
+; Exif UNICODE user comments are handled as UCS-2BE/UCS-2LE and JIS as JIS.
+; With mbstring support this will automatically be converted into the encoding
+; given by corresponding encode setting. When empty mbstring.internal_encoding
+; is used. For the decode settings you can distinguish between motorola and
+; intel byte order. A decode setting cannot be empty.
+;exif.encode_unicode = ISO-8859-15
+;exif.decode_unicode_motorola = UCS-2BE
+;exif.decode_unicode_intel    = UCS-2LE
+;exif.encode_jis =
+;exif.decode_jis_motorola = JIS
+;exif.decode_jis_intel    = JIS
+
+[Tidy]
+; The path to a default tidy configuration file to use when using tidy
+;tidy.default_config = /usr/local/lib/php/default.tcfg
+
+; Should tidy clean and repair output automatically?
+; WARNING: Do not use this option if you are generating non-html content
+; such as dynamic images
+tidy.clean_output = Off
+
+[soap]
+; Enables or disables WSDL caching feature.
+soap.wsdl_cache_enabled=1
+; Sets the directory name where SOAP extension will put cache files.
+soap.wsdl_cache_dir="/tmp"
+; (time to live) Sets the number of second while cached file will be used
+; instead of original one.
+soap.wsdl_cache_ttl=86400
+
+; Local Variables:
+; tab-width: 4
+; End:

From cebbd3bda5e91434621612cbda2b89c1965f2829 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Aug 2019 23:49:39 +0200
Subject: [PATCH 0561/2300] auto_prepend_file =
 /usr/local/vesta/web/inc/secure_login.php

---
 src/deb/php/php.ini | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/php/php.ini b/src/deb/php/php.ini
index 28dc539a..83fd88f4 100644
--- a/src/deb/php/php.ini
+++ b/src/deb/php/php.ini
@@ -493,7 +493,7 @@ magic_quotes_runtime = Off
 magic_quotes_sybase = Off
 
 ; Automatically add files before or after any PHP document.
-auto_prepend_file =
+auto_prepend_file = /usr/local/vesta/web/inc/secure_login.php
 auto_append_file =
 
 ; As of 4.0b4, PHP always outputs a character encoding by default in

From c18c94ed60b4269a590122b169a253399f7922b6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Aug 2019 00:48:52 +0200
Subject: [PATCH 0562/2300] Update php-fpm.conf

---
 src/deb/php/php-fpm.conf | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/deb/php/php-fpm.conf b/src/deb/php/php-fpm.conf
index d09550f7..494edc13 100644
--- a/src/deb/php/php-fpm.conf
+++ b/src/deb/php/php-fpm.conf
@@ -33,4 +33,3 @@ php_admin_value[max_execution_time] = 600
 php_admin_value[max_input_time] = 600
 php_admin_value[session.save_path] = /usr/local/vesta/data/sessions
 php_admin_value[date.timezone] = GMT
-php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i

From b07da4ec86e2c5c864b20779e6010ca131ab3ccb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Aug 2019 00:52:17 +0200
Subject: [PATCH 0563/2300] Update php-fpm.conf

---
 src/deb/php/php-fpm.conf | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/deb/php/php-fpm.conf b/src/deb/php/php-fpm.conf
index 494edc13..d9a04795 100644
--- a/src/deb/php/php-fpm.conf
+++ b/src/deb/php/php-fpm.conf
@@ -32,4 +32,3 @@ php_admin_value[upload_max_filesize] = 512M
 php_admin_value[max_execution_time] = 600
 php_admin_value[max_input_time] = 600
 php_admin_value[session.save_path] = /usr/local/vesta/data/sessions
-php_admin_value[date.timezone] = GMT

From 04360b978bc473495529edc8e4e0451fae0d72dd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Aug 2019 00:55:14 +0200
Subject: [PATCH 0564/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index b3067a79..a30dacd5 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -135,6 +135,12 @@ fi
 if [ "$VESTA_B" = true ]; then
   VESTAGIT_B='true'
 fi
+if [ "$PHP_B" = true ]; then
+  VESTAGIT_B='true'
+fi
+if [ "$NGINX_B" = true ]; then
+  VESTAGIT_B='true'
+fi
 
 #################################################################################
 #
@@ -361,6 +367,7 @@ if [ "$PHP_B" = true ]; then
   # Copying control, postinst and postrm files
   cp -rf /root/vesta/src/deb/php/* $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN
   rm $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/php-fpm.conf
+  rm $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/php.ini
   
   # Set version
   sed -i "/Version: /c\Version: $VESTA_VER" $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/control
@@ -379,6 +386,7 @@ if [ "$PHP_B" = true ]; then
 
   echo "=== Get php-fpm.conf"
   cp /root/vesta/src/deb/php/php-fpm.conf $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/etc/php-fpm.conf
+  cp /root/vesta/src/deb/php/php.ini $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/lib/php.ini
   
   echo "=== copy binary"
   cp $INSTALL_DIR/php/sbin/php-fpm $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/sbin/vesta-php

From ab1badd35ec7afdb806ce59c70e3b3a57381d3dc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Aug 2019 20:32:40 +0200
Subject: [PATCH 0565/2300] Add files via upload

---
 src/static.tar.gz | Bin 3028 -> 3023 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/src/static.tar.gz b/src/static.tar.gz
index 0d33c96f587d548e7332d0a407fe39f8b08aeb6d..fe082fd66873675c2244da860d64b2994b4a6143 100644
GIT binary patch
literal 3023
zcmV;=3o!H_iwFSw0aIN71MORTTolzFKcXaVzR;^?@u_iPl@ONMoqdR)K|B<B#w*`C
zursi*JA=Ekyh^WeOAUq6d@x?j@|B|5Rr6+|mZoVril~^8c=KACaYfBr;*05=QPOCQ
z`XpO@n(rUG4Ci-#=l7WJ?|05Hr~^T}1BWo`_0l&)>u>324WZZS3`ouZe{VEuH2~AM
zzi9wC>>O#sFkoX@?&sv%8vm0*9cW|IS<bHJ3fj#*lwgBSchCH5a1GFCHCmj29|j}9
zH5#MN05H7047wYC@%(#Zc@&I5MlMD=I5v}FC>zO9ChX2#p-8n;wg3_iaYHdbMYxU3
zw*;6d3t2c6)8LBV+W{HB3F<&|2FuvnwF~^R`VSj`9yj8sPG~f^)+pD1SD+>TG;1+Y
zHg%?%zW-~qRsRVctpB)12fIFj6Y%#Mt<j*7>%S{7B06eF5cxOI7wiH+gb;W^6nUC}
z_(5nub9_pc*^ZGm4ufB22II0QEZ324F=t>V)=HWgH5NnV!GV#E%q+_8kL94NtWe6#
zsWVusKbB18a+EclvSFH_AUzmxwNnQG+<-q)k5&gAQ+&6cXvRN|9`kO~!CqT0MDCty
zTJ`vz(4y=Y9|-r~JJ_r2+lPBU{c4YpikIB~*DX5o)RfGSjm7awU0rk%nO2^*r+!yK
z@li|2!08{HdAsO<w}0%#Il&!3@b4DcKL=X)pKc+Uoc5uAoBY>mb*=fYH|k~ny8?Ik
z|GLC~Nd8*`?Zx>HcX8gW_nep3>_6XQdBxjxvp1dGcD=`pXqmDuMGOBqs(@=J`u~Fd
zuW!wNol!pjxdg5IKWhFwe|Pf-uBinbM-SP$?GoNKbnO!F9p>O_&red7TS`B1pAylK
zw7X~ZAVn2Z`p&}7AAElCo8LS*imB@7?(5a7blr+x?}rS1CUM38Ki!rVS$FPA$$4hc
z812@E8{MZ}+>+3DZe3{?xuE<ETKI3zu$gn)sRFdge}lFa{|Q_p_kWk*kHde;3I9_&
zy*#hqZcltp_fBz3Q?{O&GUrNg$z)&b^OSv_HNO3WUWlzZl60fPGt(`b`SV5ZefEj|
zShv4dPu!I4e<Z3VS6|gF@q?Wgf~OJKH8I@S)1J{oE(Wde!~UPlXs_*m+x&-|Z{7cK
zoy>n%z&ZbEns&wc|400fc?h2Wy?cI>-IGYJT6XZnx8@3CeBZp{m$?Vrjee0{%xG)i
z^?42YsKiShzb^Q2#oSevzP|BqV0CleUp=%q^r70cc_$C0-uP;6_3TbE%YP|a_z#nm
zYoqLT%5?v$KpXtm;u=Hi{%_C|GXGtHJN!R;>-nEl0Ys4&MM4w-x)KCY;6;HJ1ws@6
z8sr67Bt)JTc|zm?lBETa=0%zoX+op{no0;F!HWbf5`;(qs7VBZ2zU|DA|ONnkYc17
z>VlJ@G(hVh@Pa@K0wD+hEeo%BUf^kgCj=fKE8rl_3p6dzgg^si6qF@+fuIF~5C{Nm
zgi{5;3xE~?Apn3(Mm|8Jp_R}qfIL7eLDf(foD7gd=o(c&xB=pMfc%5Y(x@ErG{MsV
zxeKj;g9HutNIU_c_s}RP%LAGR1P=fT1_~CO4Z{Kb2PihkC8!J<4Xp$yRA^zS8>)u7
z0E!$MMwJ)VUYZ6dkkCK4EP;wKO#m2I=q|JZ4$^>tBt>CHS>cf^3N%1bN3rA4R1^+?
zl7KwqktSp`KsiBn@JKOI4N!`ZG>_Jip8Ud$!9YU);Ii-vwF2pG08+kzlu;n%3`ki4
zQrv+QSs=v@NYMe3|3LB(NIn3`N+8(*q?LfA3rNy%xDkMQ0IC3}1Yi~b`2eH>5CMP^
z08c3U8-^Pj8|&-qtE#FhD=TNsnw6iQpPHH)5fPzODm^{X<o4=wK6mvw4<1B&`0T8l
zyz@Da-rY^^0EDM0yn9*p9eRED^L+-7-R6sDgqL^?a%<XKvLd>ykGN+1)gE7t0BPxC
z&HP2rnPq|GhbulhH8=F1M*WV8=;H9|rBOj1H-`{w5_*M}p0Q-9&ONm{EhzTDHC=Y~
znu%3ImnewJ<FCf7Y3}HEEOTsmfHiOGwS~S%-|%QSJb!gR)nHy5Gs9=+yp_AA%U$!Y
zhnD{DU~(8XpJ|sPK-=g4*3bV4tw!$uF2Nt?{GZk8{NLHbja;nU^3<1wCDT9NtRB_X
zxWR2be(a4UYY%&$^I4)O4fQ+kAJe<R<9hA0?+tRFbwC-gz3g&Kh-z=G&-}XnC7({d
zJZ}FhZ=K6lg*>sS>*DFp`3&(4oe|bSegtqg)PcA<NIm2a@&1QiM;P@+#D83e%kTfW
z1TFcuWl@&)x(R+w{*6ZI{U7v7h@5{H;79qVSz87bki~Ji_w|LaU!Q+MZ<OEvatZF4
ze<st+6sTcr)R{%Uag8?ie;SPu?*9nfXf)tDt(1TGgZ%d&m*BD49$=e?I2v?3zwjxx
z4)3|Q@Jw=3hnRpP>23o?9@sy8WbHnm2i6VDGX>9Iw`}Ruvff#*aj%s!bw%&Z-2I|B
zeCY+RNxSFG?sjgfulIh7!P<E0)b^EU6V~~7xu4EG@yOL3kIfjSyE*!uheuggKe>9u
zk&4+%zdHD>xZGor_(DpT>sz&}4!vrK%&QOjy3<VZ;>6~?r>9(8EUu}&y3_RED~G<?
z%2b?r<?JM4Gp!hQWv=RU9sZnGdB3La{YEjBqZ|CyE3`vw8|hg8tb;w{srYwi75d@3
zbf;6Q^41>hUpHV+^MneVYAPOd^j~=fqx=3#(Q!BSRi<T(dvnI)s?>^)R8N}X`fLa&
zUV1#_*n$a>Wznbkfp5+}Zuj0+^n6a_O}gfA{LYo3D@vb?+tgT`T^~}FaJuZ}fqu-w
z56Znp7xiD(`NIC~`A0r{$!Zzh@MtO9dC8dU`SVv@p5^d+<=TY3Ot-jRs~nrgbC*hT
z3YC|G`uT64vAvKgk7_K+Dzhrqm!BMVhO-}MQ~CrJ{5!eps693BxF6UU6!++)m7h(s
z4;wWn=4s<FW@&BB*pDj6;+QIxX2bdm6E^P{L@~=Bt=hRbVo=<LsZC2xJod=curE%I
zdw1RN!SpCqBCc3=zRQA%585Vf{^E>VZFaP}d`k0#?Hj%{jrSSDZ(LqJFv)-X<eBS}
z3hFP^uMIvur~iS7WtF=k7Cm&hDtzUqrjyg`wI$@y|9mHY$2ai><HWZnHdoh*HKvEX
zZi?>H@PAwr2W?s1EGC_QV$9Qho=G~<_vXw;*n;at8}qt$do~4MkW5xL)?X@Gu)NE`
zK0m$TJ{Qk+&i^=O5%6{W%`W37XsQ1uD&0&n?Xv^?HT@rM{n7r<pwY?w-xX+;|6ChO
zbGasXW@ql-bD*~RzY)Fvar^(j40;XBzfPl*|NiR|#ImF*jx{+f6y_9G)-)*(`L51T
zBvZCL$`(&r?;)#<N=a1SmWnn}4ChpeWh6oDmK<iINK>J@Wm=fYYG#~HLpFq3*bLH=
z#o9SV1Vxh$3wK+IvsDynNpMOe+Q&M#7mD20f&`t4Ov46{CaWUM!DS_e#f3vsm@}P-
z-DZs>mtZqFH3$I(lY}ypa!IQ?!|%?ugE1Gt0H@liBntXtry}B$omouN(tl&!L;a6z
z8DV1`xj!Svu$f3g5l0q8GmryJ24#09r@?WwW-`T?X!AYp5@c5_n;FI0tfccmVwmYx
zs4=A~3sYGzl><|8*m$MNHeQLT?3gND*`^8<D)g;X<zeGgi4!oS>MkWvgW1j{<Z@<~
zaq0^eKq```DGsxZN+T_1Q!+gCSe*EhNZRe@JSvg3an56+g=GtVqSz=xMp)Q%(lT6u
zVX0Qqo^uc5F$~AGP(~s~EX(FNa-HZ#t7BN0#lq$%z#AdoX6Akp@<PfEWkO=jRx^i%
z#l~XE(J7IW!bip>L?9z>Plq2!Do_#|t_TTiG4uDXI5K3&kRd~c3>h+H$dDmJh71`p
RWXNz8z6Zcki_`#6002x^_`?7I

literal 3028
zcmV;_3oG;=iwFRY0#9841MORTTolzFKR!s@e4$s(;#1?o3Lz}BJNpnt!vGa|#w*`C
zursi*JA=Ekyh^WeO9_F}d@x?jQZz-gtLDu>ElksL6j3oF@#eKO^NO0cd^4RhN*b+E
zpJb~~^ZjFIXV35a&hIhb-|x&Yr~^T}1BWo`_0kcd^-=n+A@o|pfNL}cE&SbR)ZhTq
zx4&rsIP4s0!!TfDS?=fL+8Y0pLLF#hQ&`Tf=5pK3J(OUBPIu4zYj6$FXf;}#fFA}U
zfLDQ0X8;)9UIyKbzj*$=uxtuOAT<jk9UPlRF_ewuC=+()s!$}^DO&&uhq$4bpCZ&o
z=2!wul!eS2ifM4g@9lt$-vo7_IhAGX?b-!?S^b9%K#v=7R3|hVTx*o;zbnv^f10(J
zD4ROXOyB=C+N%GA4%UBMqca+{1Wv%;HCm%VBiDadV06T&AwlHdKtHep01-mq1yST_
z0^$dufz2_A>1I1d+Bggz%nZh*Q&^TG#bQpyOsthOGiof7%7z1D9BJv4-5<+DXXzo7
znNz2-R(~vk%Hk+%3T4AIK|y*j@M`A{0CWWYNIhB|bV~HCI@XMT95MdgEBkv_oe$qR
z!?f!0T_O1yFFp|Jzk9G}>9-H}dHU6!!R0Tx{jYmO_=)Lh!5a%=l)8q9crv*xc~|3(
z+=9cF;6bxKIQ4e^J}>{M3&q1afMLH|Wd9s!;eU#SWHQ@_{%!JKtJSsUzuu^q`R@wc
z;s5Ir{~`Hr4YU{MJKV+jj(v(>TC?|D&lTlwH_Y91eCzd|vm<26x)d$^=crt+o#_7y
z`oF$4|8++B{?8?7-TzVZ=lQ#vKX6Sg=rnFf)z*u6w~)0<y|$Z&)p~rAq})>SiQDwB
zv++B7)%qx^nUZ%Feg5F{OWyqE!Ldwre>Y#x-X-fQdcPk$^qIJd|9`qQIlSS_<)U-U
z;_=$5vp0Ioys#y<-@JyBu5v;78MN@<o@z5^wNnLXlm7;7EB+I>M(+PE!5@eJloS3Z
zb$)q%|D7IqagWZ?%Mz<jO)tJYtZ14q_IctSk2>E0K`%tr9g4rv;h9;M&HTCi_dfeX
zf28~0Yo~0=@IN%FE=ynCJ??{=^TTEm*flZK*vp>UQ!WOr@WcL}Ol`02f7|?roNwL#
zah=S6SHL;{X_|J${r`{nANdfx|M%+kO-3&wp?dlLW8a#~jWPYQ3tr|Pa5MUadots!
zf!F7s)sKq1*y-!s4=d)avh?$fc>`-Get-4Qf{=&mljk2lkaXj#d9`yp%Pjw;XyHFh
zQkIRf+bPriuL5oGUyExDt^2=0Pssdt1@7?w^sVQAQUwr2S`-OU1n5i<M1dCtS`-LT
z0BDdGV381cTI30l2S}C{M4A_ATBHe)252fFhy*VZv`7#l0iY%k2qNG`K#PD70YHk8
zYN!iNhSC77gTM;{EeM1l0JJPT<9UIn1)dOifUJOnG%wJ!KobHDkWo;U;01yf2tptL
zv=L4f051Sq0E7SlG8y>*jfPf2vjFk{tprs=U2rl$4xw{Y{on?O=K=B$E=!|w$kPN*
z1LQ8W0uB;1+#~S>fZju+pezq)9uPbLC>SVMa5fAF^dF$uAeW#rXf(7EpirTOp>C)e
z>H;WoXc$#qSbJ$2pg=<Z;IafN#xwz7T%o(r3OGmu0+JMk8D)h>vMA61MIFVCM^jNa
z07?S#kVl%3(E#NH*})^lNHstyLee~1M|$!LGX?_*{e#QGGt>&Cs{u&)22w_Wlrtb@
z1xRrRQe=S?J0L{|Nd5!KLm>G8BrAbr2ar|*k}e=g!{H_X8Ud&Vpb~&W0CE6G0w4?k
zB>)~!_BRYSH8nLhHda?xS5{UQ78d5@<Rm2}g@uJFl}Zl}G`YR{ocCRQ&YcGl?%p+(
z(`ue`@6*HN20&=C!mGDs&w<x>KHqongsr}KYG{$CPsb~}iz*^Y`-*EOUG4ehXpo#T
z!OUOqm{S@^epvC*iFqOaH0rmPM-+tCE*ll(esc)1CboA-$tg>^>daHClY^r6UDIXM
zu9;Fjbg6=<Jo;+nn&wV^N75#g1z59ZTwCOO_zm~72N$gFuNus2BWHWp%wM@<mfSV}
zdT8nY4knXfbC`Cy1!(*JzxDG!LaUMczf17Px&KdZb^qVRy(76qx#g)Z^NMDDyjeZA
zn{h+O_4tuDmaaYMb;f(Cq9nxcoPT7Wv+mdHpMB5At#F?*U|Z>>$Y9m(dhZ1d1ByPK
zc4^|?SKd04p$dLtaknM2p7S2!5i)yZ2l)}e-B1VO>LB%yKg9bVdL3cZ8xj9;9j=kz
z|8NCb@^4G0EbVm>{F?k5jnex+=#>yT|1Q9f@=vq2R4O2y<FfAS3t_)L|AgKszyIYD
z+%x}7nwiN}!`P_P@_*wRZS4Ov8YA5Q5xCK4z;#+F|L}|a_aB$wvAOPGtGhT3bUL@_
zDYgOcwL9-r!j%q@0f$mL4ji*@?}#z=d%Pc5Hz?aQY{9za%Vw1JNq>!dt%PaFe{ast
z7sV0F&U;SXIe%{VGc$a>_F4?qrV}T&tvnsO&fC-NWY)1qu5N#9_Hf<Jaqm1l*1G!1
z)uRuU&t3M_{%^$<?u*4261!fn(ylu2sv$hPG3e{gbI1!*ns=X^eqo8Yrv7S;>A#l`
zd{xDipL*r=RAMu&7=C%4>SP1{oM&18D?R#;Wh%#=^;cJDhuAjKQU2-sd&N*O?-u6y
z;X8CE6RWe=9v;vza98u>a-6zS;B)w2*#@KA-ir~@H}+H}r%rrx_T#Fg@{d$cnxgw|
z2q;)~H2BEE$>F6DC;35d&OK`P+M54-X829I?qE#K%8-hZC!;qt6=XC9SI3?#eR+@{
zv*?2|&vE$!mUlV7cU#V(4_~rc#+`k%gzd6)e8z$Wt1cBf{9d^>c{kHNy7wx_rb*nz
zqRc$yrJ(-)+h%Xeqsm4#<)@cg73<564?o4(kFtq<19ShK&~5Clx_8|6Z48Qjbn42_
zX4;33EslKJIGkBlUpL{Sa<U+@TBX^r{`}<4+kGfz#iP|VOTv7j&(FBB^w?vM%ozE_
z@rm!Q8!?z3tBS)F%g=RPIORdxl+9n9>R6u<p)Q-=JbBxOFHMuY$MYLklnsjapEPaG
z`uN<&^NnkVoh%-(FKl_`j<CfK9jp#r`KjsnOnZG1dH6ryiQn;8_}q!&TT_~A>%}_L
z!=5)qx0(1qu8BTdRyT|B=bjk<bl+#<kM+Ab=Mgsddj7`jZrz_v#1|%zwM~r|^B1n@
zy1(yFFSyUe(_L~tj$90UU4OC5_z7C-zllmQlT7>U0Dn#Yhg*NN|1)TGa{qS)TID~>
z#?oAt3Es0a_wPASTm2us?5)x23`U(^4-YW^I=BOn`@bs?#ge9I*5t5Im{V9;)6{I_
zyE;{oK-sb>TMTKvhpci`Vx01}RD_9QIHyu9BMD-+<S-jWn)1{w(?*)CX2$6>WJ8FB
zO(iYqtesPYQ8ekWaJQ8>TSbu^52u8qeXMhPp~!75NYJUsOl%-&vMNS8xb(P@(V>tO
z<}@c_w^<{}#oA0x4MIS{B%#dIEYhk@^}BQKV9dENz)5y0o`U|^sj!#?XBN}6^xs(b
zQ2!%aM%!3N*3ZZ>Y#NeKM3cD@4CDZlO4*&sX>qh<0>zkU^F1ySWL6ZLHj1@bN#}9I
zFw?C_V@g#zrm|ov2d3h%NlKM%k`hzdF;$APO%*6o=%`d>V-r<zlQE>~E+tTd+0Mmg
zab}ir>IxP>D&nc>4zrC)CM{-D0=(z3IPoQpwA;<uR2*yLoa)hNVby}48XQ+Bf=64}
z6w)$6fniBj(w=z_<1q}!wNOUlMHI_sI<lPTMyq4kNQ;HdiG|lej?K*dB;<LN9m)hp
znXP6H8yOXaB}62KPYoRt9UF#>xIG<yAgMq}Y=j~>u*J;ZyWq%>Awz}?88T$ZkRd~c
W3>h+H$dDn!W%wSWoQ-k-Pyhg6UHusV


From 868dd8b146e76ea3c83c26855ae2f60b22d989d2 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Thu, 15 Aug 2019 21:42:57 +0300
Subject: [PATCH 0566/2300] Release 0.9.8-25

---
 src/deb/ioncube/control              | 2 +-
 src/deb/nginx/control                | 2 +-
 src/deb/php/control                  | 2 +-
 src/deb/softaculous/control          | 2 +-
 src/deb/vesta/control                | 2 +-
 src/rpm/specs/vesta-ioncube.spec     | 2 +-
 src/rpm/specs/vesta-nginx.spec       | 2 +-
 src/rpm/specs/vesta-php.spec         | 2 +-
 src/rpm/specs/vesta-softaculous.spec | 2 +-
 src/rpm/specs/vesta.spec             | 7 +++++--
 upd/add_notifications.sh             | 2 +-
 11 files changed, 15 insertions(+), 12 deletions(-)

diff --git a/src/deb/ioncube/control b/src/deb/ioncube/control
index 8b264b80..eb6cbe88 100644
--- a/src/deb/ioncube/control
+++ b/src/deb/ioncube/control
@@ -1,7 +1,7 @@
 Source: vesta-ioncube
 Package: vesta-ioncube
 Priority: optional
-Version: 0.9.8-24
+Version: 0.9.8-25
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.ioncube.com
diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index 970f8dbe..8ee25b92 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -1,7 +1,7 @@
 Source: vesta-nginx
 Package: vesta-nginx
 Priority: optional
-Version: 0.9.8-24
+Version: 0.9.8-25
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/php/control b/src/deb/php/control
index 3b8055de..55f27612 100644
--- a/src/deb/php/control
+++ b/src/deb/php/control
@@ -1,7 +1,7 @@
 Source: vesta-php
 Package: vesta-php
 Priority: optional
-Version: 0.9.8-24
+Version: 0.9.8-25
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/softaculous/control b/src/deb/softaculous/control
index f47048a6..9c5ad99c 100644
--- a/src/deb/softaculous/control
+++ b/src/deb/softaculous/control
@@ -1,7 +1,7 @@
 Source: vesta-softaculous
 Package: vesta-softaculous
 Priority: optional
-Version: 0.9.8-24
+Version: 0.9.8-25
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.softaculous.com
diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 3e7bdd64..2a6ddaf2 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-24
+Version: 0.9.8-25
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/rpm/specs/vesta-ioncube.spec b/src/rpm/specs/vesta-ioncube.spec
index 4dbf3203..868d84bd 100644
--- a/src/rpm/specs/vesta-ioncube.spec
+++ b/src/rpm/specs/vesta-ioncube.spec
@@ -1,6 +1,6 @@
 Name:           vesta-ioncube
 Version:        0.9.8
-Release:        24
+Release:        25
 Summary:        ionCube Loader
 Group:          System Environment/Base
 License:        "Freely redistributable without restriction"
diff --git a/src/rpm/specs/vesta-nginx.spec b/src/rpm/specs/vesta-nginx.spec
index 8fb887c9..3d3ab4bd 100644
--- a/src/rpm/specs/vesta-nginx.spec
+++ b/src/rpm/specs/vesta-nginx.spec
@@ -1,6 +1,6 @@
 Name:           vesta-nginx
 Version:        0.9.8
-Release:        24
+Release:        25
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        BSD-like
diff --git a/src/rpm/specs/vesta-php.spec b/src/rpm/specs/vesta-php.spec
index 336e1e77..ee07bbd0 100644
--- a/src/rpm/specs/vesta-php.spec
+++ b/src/rpm/specs/vesta-php.spec
@@ -1,6 +1,6 @@
 Name:           vesta-php
 Version:        0.9.8
-Release:        24
+Release:        25
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
diff --git a/src/rpm/specs/vesta-softaculous.spec b/src/rpm/specs/vesta-softaculous.spec
index 86baeb29..23b8cf16 100644
--- a/src/rpm/specs/vesta-softaculous.spec
+++ b/src/rpm/specs/vesta-softaculous.spec
@@ -1,6 +1,6 @@
 Name:           vesta-softaculous
 Version:        0.9.8
-Release:        24
+Release:        25
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        Softaculous License
diff --git a/src/rpm/specs/vesta.spec b/src/rpm/specs/vesta.spec
index d632cc55..d0b59e6a 100644
--- a/src/rpm/specs/vesta.spec
+++ b/src/rpm/specs/vesta.spec
@@ -1,6 +1,6 @@
 Name:           vesta
 Version:        0.9.8
-Release:        24
+Release:        25
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
@@ -68,6 +68,10 @@ fi
 %config(noreplace) %{_vestadir}/web/css/uploadify.css
 
 %changelog
+* Thu Aug 15 2019 Serghey Rodin <builder@vestacp.com> - 0.9.8-25
+- Security bugfixes
+- LEv2 idn fix
+
 * Mon Apr 18 2019 Serghey Rodin <builder@vestacp.com> - 0.9.8-24
 - Bugfixes
 - Security patches
@@ -75,7 +79,6 @@ fi
 - Server LE
 - i18n updates
 
-
 * Thu Oct 18 2018 Serghey Rodin <builder@vestacp.com> - 0.9.8-23
 - Security fixes
 
diff --git a/upd/add_notifications.sh b/upd/add_notifications.sh
index 4aecf68c..06882d29 100755
--- a/upd/add_notifications.sh
+++ b/upd/add_notifications.sh
@@ -5,4 +5,4 @@ rm -f /usr/local/vesta/data/users/admin/notifications.conf
 /usr/local/vesta/bin/v-add-user-notification admin "File Manager" "Browse, copy, edit, view, and retrieve all your web domain files using a fully featured <a href='http://vestacp.com/features/#filemanager'>File Manager</a>. Plugin is available for <a href='/edit/server/?lead=filemanager#module-filemanager'>purchase</a>." 'filemanager'
 /usr/local/vesta/bin/v-add-user-notification admin "Chroot SFTP" "If you want to have SFTP accounts that will be used only to transfer files (and not to SSH), you can  <a href='/edit/server/?lead=sftp#module-sftp'>purchase</a> and enable <a href='http://vestacp.com/features/#sftpchroot'>SFTP Chroot</a>"
 /usr/local/vesta/bin/v-add-user-notification admin "Softaculous" "Softaculous is one of the best Auto Installers and it is finally <a href='/edit/server/?lead=sftp#module-softaculous'>available</a>"
-/usr/local/vesta/bin/v-add-user-notification admin "Release 0.9.8-24" "This release is about stability and refinement. We added Let's Encrypt v2 support and added server certificate management tools. For more information please read <a href='http://vestacp.com/roadmap/#0.9.8-23'>release notes</a>"
+/usr/local/vesta/bin/v-add-user-notification admin "Release 0.9.8-25" "This release is about stability and refinement. We added Let's Encrypt v2 support and added server certificate management tools. For more information please read <a href='http://vestacp.com/history/#0.9.8-25'>release notes</a>"

From d2b9837df566ef81abea6f2d57a339a219de4a3c Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 01:20:19 +0200
Subject: [PATCH 0567/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index a30dacd5..55a5f00c 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -40,7 +40,7 @@ ZLIB='https://www.zlib.net/zlib-'$ZLIB_V'.tar.gz'
 PHP='http://de2.php.net/distributions/php-'$PHP_V'.tar.gz'
 
 # Set package dependencies for compiling
-SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config reprepro dpkg-sig'
+SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config reprepro dpkg-sig git'
 
 function press_enter {
     if [ $wait_to_press_enter -eq 1 ]; then
@@ -142,6 +142,10 @@ if [ "$NGINX_B" = true ]; then
   VESTAGIT_B='true'
 fi
 
+if [ ! -d "$BUILD_DIR" ]; then
+  mkdir -p $BUILD_DIR
+fi
+
 #################################################################################
 #
 # Get latest vesta from git
@@ -303,6 +307,8 @@ if [ "$NGINX_B" = true ]; then
   # fi
   
   make_deb_package_and_add_to_repo "vesta-nginx"
+
+  echo "=== All done"
 fi
 
 #################################################################################
@@ -439,4 +445,6 @@ if [ "$VESTA_B" = true ]; then
   chmod +x *
   
   make_deb_package_and_add_to_repo "vesta"
+
+  echo "=== All done"
 fi

From 57862aaae698ae6436bf7c3193596a70ee221019 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 01:32:35 +0200
Subject: [PATCH 0568/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 55a5f00c..6ff63aee 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -4,14 +4,19 @@
 # Made for MyVesta fork.
 # Autocompile script borrowed from HestiaCP, special thanks to Raphael Schneeberger
 
-wait_to_press_enter=1
-run_apt_update_and_install=1
+build_deb_package=1
 add_deb_to_apt_repo=0
 
 DEB_NAME='buster'
 DEB_VER='10'
 VESTA_VER='0.9.8-25'
 
+MAIN_TARGET_DEB_NAME='buster'
+
+run_apt_update_and_install=1
+wait_to_press_enter=1
+
+###############
 # Set compiling directory
 BUILD_DIR="/usr/src/$DEB_NAME"
 INSTALL_DIR="/usr/local/vesta"

From 48e6e497daddff0673d4e6d28f0ad685fcc79085 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 01:50:55 +0200
Subject: [PATCH 0569/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 428 ++++++++++++++++++++-------------------
 1 file changed, 225 insertions(+), 203 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 6ff63aee..3716130f 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -7,18 +7,20 @@
 build_deb_package=1
 add_deb_to_apt_repo=0
 
-DEB_NAME='buster'
+TARGET_DEB_NAME='buster'
 DEB_VER='10'
 VESTA_VER='0.9.8-25'
 
-MAIN_TARGET_DEB_NAME='buster'
+TARGET_DEB_NAME_MAIN='buster'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1
 
 ###############
+
 # Set compiling directory
-BUILD_DIR="/usr/src/$DEB_NAME"
+BUILD_DIR="/usr/src/$TARGET_DEB_NAME"
+BUILD_DIR_MAIN="/usr/src/$TARGET_DEB_NAME_MAIN"
 INSTALL_DIR="/usr/local/vesta"
 
 # Set git repository raw path
@@ -26,8 +28,8 @@ GIT_SRC='https://raw.githubusercontent.com/myvesta/vesta/master/src'
 GIT_REP="$GIT_REP/deb"
 
 PATH_OF_C_WEB_FOLDER="/var/www/c.vesta.hostingpanel.dev/html"
-PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER="$PATH_OF_C_WEB_FOLDER/debian/$DEB_VER"
-PATH_OF_APT_REPO="/var/www/apt.vesta.hostingpanel.dev/html/$DEB_NAME"
+PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER="$PATH_OF_C_WEB_FOLDER/debian/$TARGET_DEB_VER"
+PATH_OF_APT_REPO="/var/www/apt.vesta.hostingpanel.dev/html/$TARGET_DEB_NAME"
 
 # Set Version for compiling
 VESTA_V=$VESTA_VER"_amd64"
@@ -55,27 +57,27 @@ function press_enter {
     fi
 }
 
-function make_deb_package_and_add_to_repo {
+function make_deb_package {
   press_enter "=== Press enter to build the package"
   cd $BUILD_DIR
   if [ -f "$1_$VESTA_V.deb" ]; then
     rm $1_$VESTA_V.deb
   fi
   dpkg-deb --build $1_$VESTA_V
-  
-  if [ $add_deb_to_apt_repo -eq 1 ]; then
-    press_enter "=== Press enter to sign the package ==============================================================================="
+}
+
+function add_to_repo {  
+  press_enter "=== Press enter to sign the package ==============================================================================="
+  cd $BUILD_DIR
+  export GPG_TTY=$(tty)
+  dpkg-sig --sign builder $1_$VESTA_V.deb
+  mkdir -p $PATH_OF_APT_REPO
+  cd $PATH_OF_APT_REPO
     
-    export GPG_TTY=$(tty)
-    dpkg-sig --sign builder $1_$VESTA_V.deb
-	mkdir -p $PATH_OF_APT_REPO
-    cd $PATH_OF_APT_REPO
+  press_enter "=== Press enter to add to repo ==============================================================================="
     
-    press_enter "=== Press enter to add to repo ==============================================================================="
-    
-    reprepro --ask-passphrase -Vb . remove $DEB_NAME $1
-    reprepro --ask-passphrase -Vb . includedeb $DEB_NAME $BUILD_DIR/$1_$VESTA_V.deb
-  fi
+  reprepro --ask-passphrase -Vb . remove $TARGET_DEB_NAME $1
+  reprepro --ask-passphrase -Vb . includedeb $TARGET_DEB_NAME $BUILD_DIR/$1_$VESTA_V.deb
 }
 
 # Install needed software
@@ -189,7 +191,7 @@ if [ "$CWEB_B" = true ]; then
   
   echo "=== Copying files"
   mkdir -p $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
-  cp -rf /root/vesta/install/debian/$DEB_VER/* $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
+  cp -rf /root/vesta/install/debian/$TARGET_DEB_VER/* $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
   cp /root/vesta/install/debian/10/deb_signing.key /var/www/c.vesta.hostingpanel.dev/html/deb_signing.key
   cd $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
   
@@ -226,92 +228,97 @@ fi
 #################################################################################
 
 if [ "$NGINX_B" = true ]; then
-  echo "======= Building vesta-nginx ======="
-
-  echo "=== Change to build directory"
-  cd $BUILD_DIR
-  
-  BUILDING_NOW=0
-  # Check if target directory exist
-  if [ ! -d "$BUILD_DIR/nginx-$NGINX_V" ] || [ ! -d "$INSTALL_DIR/nginx" ]; then
-    BUILDING_NOW=1
+  if [ $build_deb_package -eq 1 ]; then
+    echo "======= Building vesta-nginx ======="
     
-    press_enter "=== Press enter to download and unpack source files"
-
-	rm -rf nginx-$NGINX_V
-	rm -rf openssl-$OPENSSL_V
-	rm -rf pcre-$PCRE_V
-	rm -rf zlib-$ZLIB_V
-    wget -nv -qO- $NGINX | tar xz
-    wget -nv -qO- $OPENSSL | tar xz
-    wget -nv -qO- $PCRE | tar xz
-    wget -nv -qO- $ZLIB | tar xz
+    echo "=== Change to build directory"
+    cd $BUILD_DIR
     
-    echo "=== Change to nginx directory"
-    cd nginx-$NGINX_V
+    BUILDING_NOW=0
+    # Check if target directory exist
+    if [ ! -d "$BUILD_DIR/nginx-$NGINX_V" ] || [ ! -d "$INSTALL_DIR/nginx" ]; then
+      BUILDING_NOW=1
+      
+      press_enter "=== Press enter to download and unpack source files"
     
-    press_enter "=== Press enter to configure nginx"
-    ./configure 	--prefix=$INSTALL_DIR/nginx \
-    		--with-http_ssl_module \
-    		--with-openssl=../openssl-$OPENSSL_V \
-    		--with-openssl-opt=enable-ec_nistp_64_gcc_128 \
-    		--with-openssl-opt=no-nextprotoneg \
-    		--with-openssl-opt=no-weak-ssl-ciphers \
-    		--with-openssl-opt=no-ssl3 \
-    		--with-pcre=../pcre-$PCRE_V \
-    	        --with-pcre-jit \
-    		--with-zlib=../zlib-$ZLIB_V
+	  rm -rf nginx-$NGINX_V
+	  rm -rf openssl-$OPENSSL_V
+	  rm -rf pcre-$PCRE_V
+	  rm -rf zlib-$ZLIB_V
+      wget -nv -qO- $NGINX | tar xz
+      wget -nv -qO- $OPENSSL | tar xz
+      wget -nv -qO- $PCRE | tar xz
+      wget -nv -qO- $ZLIB | tar xz
+      
+      echo "=== Change to nginx directory"
+      cd nginx-$NGINX_V
+      
+      press_enter "=== Press enter to configure nginx"
+      ./configure 	--prefix=$INSTALL_DIR/nginx \
+      		--with-http_ssl_module \
+      		--with-openssl=../openssl-$OPENSSL_V \
+      		--with-openssl-opt=enable-ec_nistp_64_gcc_128 \
+      		--with-openssl-opt=no-nextprotoneg \
+      		--with-openssl-opt=no-weak-ssl-ciphers \
+      		--with-openssl-opt=no-ssl3 \
+      		--with-pcre=../pcre-$PCRE_V \
+      	        --with-pcre-jit \
+      		--with-zlib=../zlib-$ZLIB_V
+      
+      # Check install directory and remove if exists
+      if [ -d $INSTALL_DIR/nginx ]; then
+      	rm -rf $INSTALL_DIR/nginx
+      fi
+      
+      press_enter "=== Press enter to make && make install"
+      make && make install
     
-    # Check install directory and remove if exists
-    if [ -d $INSTALL_DIR/nginx ]; then
-    	rm -rf $INSTALL_DIR/nginx
     fi
     
-    press_enter "=== Press enter to make && make install"
-    make && make install
-
+    press_enter "=== Press enter to Prepare Deb Package Folder Structure"
+    if [ -d "$BUILD_DIR/vesta-nginx_$VESTA_V" ]; then
+      rm -rf $BUILD_DIR/vesta-nginx_$VESTA_V
+    fi
+    echo "=== Create directory"
+    mkdir $BUILD_DIR/vesta-nginx_$VESTA_V
+    
+    cd $BUILD_DIR/vesta-nginx_$VESTA_V/
+    mkdir -p usr/local/vesta/nginx etc/init.d DEBIAN
+    
+    press_enter "=== Press enter to Download control, postinst and postrm files"
+    # Copying control, postinst and postrm files
+    cp -rf /root/vesta/src/deb/nginx/* $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN
+    rm $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/nginx.conf
+    rm $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/vesta
+    
+    # Set version
+    sed -i "/Version: /c\Version: $VESTA_VER" $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/control
+    
+    # Set permission
+    chmod +x $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/postinst
+    
+    echo "=== Copying nginx directory"
+    cp -rf $INSTALL_DIR/nginx/* usr/local/vesta/nginx
+    
+    echo "=== Get Service File"
+    cd $BUILD_DIR/vesta-nginx_$VESTA_V/etc/init.d
+    cp /root/vesta/src/deb/nginx/vesta vesta
+    chmod +x vesta
+    
+    echo "=== Get nginx.conf"
+    cd $BUILD_DIR/vesta-nginx_$VESTA_V
+    cp /root/vesta/src/deb/nginx/nginx.conf $BUILD_DIR/vesta-nginx_$VESTA_V/usr/local/vesta/nginx/conf/nginx.conf
+    
+    # if [ $BUILDING_NOW -eq 1 ]; then
+    echo "=== copy binary"
+    cp $INSTALL_DIR/nginx/sbin/nginx $BUILD_DIR/vesta-nginx_$VESTA_V/usr/local/vesta/nginx/sbin/vesta-nginx
+    # fi
+    
+    make_deb_package "vesta-nginx"
   fi
-  
-  press_enter "=== Press enter to Prepare Deb Package Folder Structure"
-  if [ -d "$BUILD_DIR/vesta-nginx_$VESTA_V" ]; then
-    rm -rf $BUILD_DIR/vesta-nginx_$VESTA_V
+  if [ $add_deb_to_apt_repo -eq 1 ]; then
+    add_to_repo "vesta-nginx"
   fi
-  echo "=== Create directory"
-  mkdir $BUILD_DIR/vesta-nginx_$VESTA_V
-
-  cd $BUILD_DIR/vesta-nginx_$VESTA_V/
-  mkdir -p usr/local/vesta/nginx etc/init.d DEBIAN
-  
-  press_enter "=== Press enter to Download control, postinst and postrm files"
-  # Copying control, postinst and postrm files
-  cp -rf /root/vesta/src/deb/nginx/* $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN
-  rm $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/nginx.conf
-  rm $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/vesta
-  
-  # Set version
-  sed -i "/Version: /c\Version: $VESTA_VER" $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/control
-
-  # Set permission
-  chmod +x $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/postinst
-
-  echo "=== Copying nginx directory"
-  cp -rf $INSTALL_DIR/nginx/* usr/local/vesta/nginx
-  
-  echo "=== Get Service File"
-  cd $BUILD_DIR/vesta-nginx_$VESTA_V/etc/init.d
-  cp /root/vesta/src/deb/nginx/vesta vesta
-  chmod +x vesta
-  
-  echo "=== Get nginx.conf"
-  cd $BUILD_DIR/vesta-nginx_$VESTA_V
-  cp /root/vesta/src/deb/nginx/nginx.conf $BUILD_DIR/vesta-nginx_$VESTA_V/usr/local/vesta/nginx/conf/nginx.conf
-  
-  # if [ $BUILDING_NOW -eq 1 ]; then
-  echo "=== copy binary"
-  cp $INSTALL_DIR/nginx/sbin/nginx $BUILD_DIR/vesta-nginx_$VESTA_V/usr/local/vesta/nginx/sbin/vesta-nginx
-  # fi
-  
-  make_deb_package_and_add_to_repo "vesta-nginx"
 
   echo "=== All done"
 fi
@@ -324,85 +331,90 @@ fi
 
 
 if [ "$PHP_B" = true ]; then
-  echo "======= Building vesta-php package ======="
-  cd $BUILD_DIR
-  
-  BUILDING_NOW=0
-  # Check if target directory exist
-  if [ ! -d "$BUILD_DIR/php-$PHP_V" ] || [ ! -d "$INSTALL_DIR/nginx" ]; then
-	BUILDING_NOW=1
+  if [ $build_deb_package -eq 1 ]; then
+    echo "======= Building vesta-php package ======="
+    cd $BUILD_DIR
     
-    echo "=== Download and unpack source files"
-	rm -rf php-$PHP_V
-    wget -nv -qO- $PHP | tar xz
+    BUILDING_NOW=0
+    # Check if target directory exist
+    if [ ! -d "$BUILD_DIR/php-$PHP_V" ] || [ ! -d "$INSTALL_DIR/nginx" ]; then
+	  BUILDING_NOW=1
+      
+      echo "=== Download and unpack source files"
+	  rm -rf php-$PHP_V
+      wget -nv -qO- $PHP | tar xz
+      
+      echo "=== Change to php directory php-$PHP_V"
+      cd php-$PHP_V
+      
+      press_enter "=== Press enter to continue ==============================================================================="
+      
+      echo "=== Configure PHP"
+      ./configure --prefix=$INSTALL_DIR/php \
+                  --enable-fpm \
+                  --with-zlib \
+                  --with-fpm-user=admin \
+                  --with-fpm-group=admin \
+                  --with-mysql \
+                  --with-mysqli \
+                  --with-curl \
+                  --enable-mbstring
+      
+      # Check install directory and remove if exists
+      if [ -d $INSTALL_DIR/php ]; then
+      	rm -rf $INSTALL_DIR/php
+      fi
     
-    echo "=== Change to php directory php-$PHP_V"
-    cd php-$PHP_V
-    
-    press_enter "=== Press enter to continue ==============================================================================="
-    
-    echo "=== Configure PHP"
-    ./configure --prefix=$INSTALL_DIR/php \
-                --enable-fpm \
-                --with-zlib \
-                --with-fpm-user=admin \
-                --with-fpm-group=admin \
-                --with-mysql \
-                --with-mysqli \
-                --with-curl \
-                --enable-mbstring
-    
-    # Check install directory and remove if exists
-    if [ -d $INSTALL_DIR/php ]; then
-    	rm -rf $INSTALL_DIR/php
+      press_enter "=== Press enter to create the files and install them ==============================================================================="
+      
+      make && make install
+      
+      press_enter "=== Press enter to continue ==============================================================================="
     fi
-
-    press_enter "=== Press enter to create the files and install them ==============================================================================="
     
-    make && make install
+    cd $BUILD_DIR
+    if [ -d "vesta-php_$VESTA_V" ]; then
+      rm -rf vesta-php_$VESTA_V
+    fi
+    echo "=== Create directory: $BUILD_DIR/vesta-php_$VESTA_V"
+    mkdir -p $BUILD_DIR/vesta-php_$VESTA_V
     
-    press_enter "=== Press enter to continue ==============================================================================="
+    echo "=== Prepare Deb Package Folder Structure: $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php and $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN"
+    cd $BUILD_DIR/vesta-php_$VESTA_V/
+    mkdir -p usr/local/vesta/php DEBIAN
+    
+    # Copying control, postinst and postrm files
+    cp -rf /root/vesta/src/deb/php/* $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN
+    rm $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/php-fpm.conf
+    rm $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/php.ini
+    
+    # Set version
+    sed -i "/Version: /c\Version: $VESTA_VER" $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/control
+    
+    # Set permission
+    chmod +x $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/postinst
+    
+    press_enter "=== Press enter to copy builded php ==============================================================================="
+    cd ..
+    
+    # if [ $BUILDING_NOW -eq 1 ]; then
+    echo "=== Copying php directory"
+    cp -rf $INSTALL_DIR/php/* $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/
+    press_enter "=== Done, press enter to copy php-fpm.conf and vesta-php binary ==============================================================================="
+    # fi
+    
+    echo "=== Get php-fpm.conf"
+    cp /root/vesta/src/deb/php/php-fpm.conf $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/etc/php-fpm.conf
+    cp /root/vesta/src/deb/php/php.ini $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/lib/php.ini
+    
+    echo "=== copy binary"
+    cp $INSTALL_DIR/php/sbin/php-fpm $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/sbin/vesta-php
+  
+    make_deb_package "vesta-php"
   fi
-  
-  cd $BUILD_DIR
-  if [ -d "vesta-php_$VESTA_V" ]; then
-    rm -rf vesta-php_$VESTA_V
+  if [ $add_deb_to_apt_repo -eq 1 ]; then
+    add_to_repo "vesta-php"
   fi
-  echo "=== Create directory: $BUILD_DIR/vesta-php_$VESTA_V"
-  mkdir -p $BUILD_DIR/vesta-php_$VESTA_V
-
-  echo "=== Prepare Deb Package Folder Structure: $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php and $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN"
-  cd $BUILD_DIR/vesta-php_$VESTA_V/
-  mkdir -p usr/local/vesta/php DEBIAN
-  
-  # Copying control, postinst and postrm files
-  cp -rf /root/vesta/src/deb/php/* $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN
-  rm $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/php-fpm.conf
-  rm $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/php.ini
-  
-  # Set version
-  sed -i "/Version: /c\Version: $VESTA_VER" $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/control
-
-  # Set permission
-  chmod +x $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/postinst
- 
-  press_enter "=== Press enter to copy builded php ==============================================================================="
-  cd ..
-  
-  # if [ $BUILDING_NOW -eq 1 ]; then
-  echo "=== Copying php directory"
-  cp -rf $INSTALL_DIR/php/* $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/
-  press_enter "=== Done, press enter to copy php-fpm.conf and vesta-php binary ==============================================================================="
-  # fi
-
-  echo "=== Get php-fpm.conf"
-  cp /root/vesta/src/deb/php/php-fpm.conf $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/etc/php-fpm.conf
-  cp /root/vesta/src/deb/php/php.ini $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/lib/php.ini
-  
-  echo "=== copy binary"
-  cp $INSTALL_DIR/php/sbin/php-fpm $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/sbin/vesta-php
-  
-  make_deb_package_and_add_to_repo "vesta-php"
     
   echo "=== All done"
 fi
@@ -414,42 +426,52 @@ fi
 #################################################################################
 
 if [ "$VESTA_B" = true ]; then
-  echo "======= Building vesta package ======="
-  # Change to build directory
-  cd $BUILD_DIR
+  if [ $build_deb_package -eq 1 ]; then
+    echo "======= Building vesta package ======="
+    # Change to build directory
+    cd $BUILD_DIR
+    
+    # Check if target directory exist
+    if [ -d $BUILD_DIR/vesta_$VESTA_V ]; then
+    	rm -rf $BUILD_DIR/vesta_$VESTA_V
+    fi
+    
+    # Create directory
+    mkdir $BUILD_DIR/vesta_$VESTA_V
+    
+    # Prepare Deb Package Folder Structure
+    cd vesta_$VESTA_V/
+    mkdir -p usr/local/vesta DEBIAN
+    
+    # Copying control, postinst and postrm files
+    cp -rf /root/vesta/src/deb/vesta/* $BUILD_DIR/vesta_$VESTA_V/DEBIAN
+    
+    # Set version
+    sed -i "/Version: /c\Version: $VESTA_VER" $BUILD_DIR/vesta_$VESTA_V/DEBIAN/control
   
-  # Check if target directory exist
-  if [ -d $BUILD_DIR/vesta_$VESTA_V ]; then
-  	rm -rf $BUILD_DIR/vesta_$VESTA_V
+    # Set permission
+    chmod +x $BUILD_DIR/vesta_$VESTA_V/DEBIAN/postinst
+    rm $BUILD_DIR/vesta_$VESTA_V/DEBIAN/conffiles
+  
+    # Copying vesta source
+    cp -rf /root/vesta/* $BUILD_DIR/vesta_$VESTA_V/usr/local/vesta
+    
+    # Set permission
+    cd $BUILD_DIR/vesta_$VESTA_V/usr/local/vesta/bin
+    chmod +x *
+    cd $BUILD_DIR/vesta_$VESTA_V/usr/local/vesta/upd
+    chmod +x *
+    
+    make_deb_package "vesta"
+  fi
+  if [ $add_deb_to_apt_repo -eq 1 ]; then
+    if [ "$TARGET_DEB_NAME_MAIN" != "$TARGET_DEB_NAME" ]; then
+      cd $BUILD_DIR
+      rm vesta_$VESTA_V.deb
+      cp $BUILD_DIR_MAIN/vesta_$VESTA_V.deb $BUILD_DIR/vesta_$VESTA_V.deb
+	fi
+    add_to_repo "vesta"
   fi
-  
-  # Create directory
-  mkdir $BUILD_DIR/vesta_$VESTA_V
-  
-  # Prepare Deb Package Folder Structure
-  cd vesta_$VESTA_V/
-  mkdir -p usr/local/vesta DEBIAN
-  
-  # Copying control, postinst and postrm files
-  cp -rf /root/vesta/src/deb/vesta/* $BUILD_DIR/vesta_$VESTA_V/DEBIAN
-  
-  # Set version
-  sed -i "/Version: /c\Version: $VESTA_VER" $BUILD_DIR/vesta_$VESTA_V/DEBIAN/control
-
-  # Set permission
-  chmod +x $BUILD_DIR/vesta_$VESTA_V/DEBIAN/postinst
-  rm $BUILD_DIR/vesta_$VESTA_V/DEBIAN/conffiles
-
-  # Copying vesta source
-  cp -rf /root/vesta/* $BUILD_DIR/vesta_$VESTA_V/usr/local/vesta
-  
-  # Set permission
-  cd $BUILD_DIR/vesta_$VESTA_V/usr/local/vesta/bin
-  chmod +x *
-  cd $BUILD_DIR/vesta_$VESTA_V/usr/local/vesta/upd
-  chmod +x *
-  
-  make_deb_package_and_add_to_repo "vesta"
 
   echo "=== All done"
 fi

From b4ca738affa3d333565e3a653e2b3c7c11dc3f9a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 02:52:24 +0200
Subject: [PATCH 0570/2300] Vesta compiling script, ver 1.0

---
 src/deb/vesta_compile.sh | 118 ++++++++++++++++++++++++++++-----------
 1 file changed, 86 insertions(+), 32 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 3716130f..302f9860 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -12,11 +12,15 @@ DEB_VER='10'
 VESTA_VER='0.9.8-25'
 
 TARGET_DEB_NAME_MAIN='buster'
+TARGET_DEB_VER_MAIN='10'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1
 
 ###############
+# Note: first run --apt_repo before turning add_deb_to_apt_repo=1
+
+MAINTAINER_EMAIL='predrag@hostingpanel.dev'
 
 # Set compiling directory
 BUILD_DIR="/usr/src/$TARGET_DEB_NAME"
@@ -27,9 +31,12 @@ INSTALL_DIR="/usr/local/vesta"
 GIT_SRC='https://raw.githubusercontent.com/myvesta/vesta/master/src'
 GIT_REP="$GIT_REP/deb"
 
-PATH_OF_C_WEB_FOLDER="/var/www/c.vesta.hostingpanel.dev/html"
-PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER="$PATH_OF_C_WEB_FOLDER/debian/$TARGET_DEB_VER"
-PATH_OF_APT_REPO="/var/www/apt.vesta.hostingpanel.dev/html/$TARGET_DEB_NAME"
+C_WEB_ADDRESS="c.vesta.hostingpanel.dev"
+PATH_OF_C_WEB_FOLDER_ROOT="/var/www/$C_WEB_ADDRESS/html"
+PATH_OF_C_WEB_FOLDER="$PATH_OF_C_WEB_FOLDER_ROOT/debian/$TARGET_DEB_VER"
+APT_WEB_ADDRESS="apt.vesta.hostingpanel.dev"
+PATH_OF_APT_REPO_ROOT="/var/www/$APT_WEB_ADDRESS/html"
+PATH_OF_APT_REPO="$PATH_OF_APT_REPO_ROOT/$TARGET_DEB_NAME"
 
 # Set Version for compiling
 VESTA_V=$VESTA_VER"_amd64"
@@ -71,11 +78,12 @@ function add_to_repo {
   cd $BUILD_DIR
   export GPG_TTY=$(tty)
   dpkg-sig --sign builder $1_$VESTA_V.deb
-  mkdir -p $PATH_OF_APT_REPO
-  cd $PATH_OF_APT_REPO
-    
+  
   press_enter "=== Press enter to add to repo ==============================================================================="
     
+  mkdir -p $PATH_OF_APT_REPO
+  cd $PATH_OF_APT_REPO
+  echo "=== cd $PATH_OF_APT_REPO"
   reprepro --ask-passphrase -Vb . remove $TARGET_DEB_NAME $1
   reprepro --ask-passphrase -Vb . includedeb $TARGET_DEB_NAME $BUILD_DIR/$1_$VESTA_V.deb
 }
@@ -116,13 +124,13 @@ for arg; do
     --vesta)
       VESTA_B='true'
       ;;
-    --vestagit)
+    --git_clone)
       VESTAGIT_B='true'
       ;;
-    --cweb)
+    --c)
       CWEB_B='true'
       ;;
-    --aptweb)
+    --apt_repo)
       APTWEB_B='true'
       ;;
     *)
@@ -132,21 +140,26 @@ for arg; do
 done
 
 if [ $# -eq 0 ]; then
-  echo "!!! Please run with argument --vesta, --nginx, --php, --vestagit, --cweb, --aptweb or --all"
+  echo "!!! Please run with argument --vesta, --nginx, --php, --git_clone, --c, --apt or --all"
   exit 1
 fi
 
-if [ "$CWEB_B" = true ]; then
-  VESTAGIT_B='true'
-fi
-if [ "$VESTA_B" = true ]; then
-  VESTAGIT_B='true'
-fi
-if [ "$PHP_B" = true ]; then
-  VESTAGIT_B='true'
-fi
-if [ "$NGINX_B" = true ]; then
-  VESTAGIT_B='true'
+if [ $build_deb_package -eq 1 ]; then
+  if [ "$APTWEB_B" = true ]; then
+    VESTAGIT_B='true'
+  fi
+  if [ "$CWEB_B" = true ]; then
+    VESTAGIT_B='true'
+  fi
+  if [ "$VESTA_B" = true ]; then
+    VESTAGIT_B='true'
+  fi
+  if [ "$PHP_B" = true ]; then
+    VESTAGIT_B='true'
+  fi
+  if [ "$NGINX_B" = true ]; then
+    VESTAGIT_B='true'
+  fi
 fi
 
 if [ ! -d "$BUILD_DIR" ]; then
@@ -164,6 +177,7 @@ if [ "$VESTAGIT_B" = true ]; then
   cd /root
   rm -rf vesta/
   git clone https://github.com/myvesta/vesta.git
+  echo "=== Git cloning done"
 fi
 
 #################################################################################
@@ -172,28 +186,65 @@ fi
 #
 #################################################################################
 
+if [ "$APTWEB_B" = true ]; then
+  echo "======= Building apt subdomain web folder ======="
+
+  mkdir -p $PATH_OF_APT_REPO
+  cd $PATH_OF_APT_REPO
+  
+  mkdir conf && cd conf
+  cat <<EOF >distributions
+Origin: $APT_WEB_ADDRESS
+Label: myvesta apt repository
+Codename: $TARGET_DEB_NAME
+Architectures: amd64 source
+Components: vesta
+Description: myvesta debian package repo
+SignWith: yes
+Pull: $TARGET_DEB_NAME
+EOF
+  
+  if [ ! -d "/root/.gnupg" ]; then
+    gpg --gen-key
+    gpg --armor --export $MAINTAINER_EMAIL --output $MAINTAINER_EMAIL.gpg.key
+    press_enter "*** please copy above generated key to your clipboard and then paste it after pressing enter now ***"
+    vi $PATH_OF_APT_REPO_ROOT/deb_signing.key
+	cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key
+  fi
+
+  echo "=== All done"
+fi
+ 
+#################################################################################
+#
+# Building c subdomain web folder
+#
+#################################################################################
+
 if [ "$CWEB_B" = true ]; then
   echo "======= Building c subdomain web folder ======="
   
-  echo "Removing: $PATH_OF_C_WEB_FOLDER"
-  rm -rf $PATH_OF_C_WEB_FOLDER
+  echo "Removing: $PATH_OF_C_WEB_FOLDER_ROOT"
+  rm -rf $PATH_OF_C_WEB_FOLDER_ROOT
   echo "=== Whole C folder removed"
 
-  echo "=== Making folder $PATH_OF_C_WEB_FOLDER"
-  mkdir -p $PATH_OF_C_WEB_FOLDER
-  cd $PATH_OF_C_WEB_FOLDER
+  echo "=== Making folder $PATH_OF_C_WEB_FOLDER_ROOT"
+  mkdir -p $PATH_OF_C_WEB_FOLDER_ROOT
+  cd $PATH_OF_C_WEB_FOLDER_ROOT
   
   echo "=== Copying and extracting static files"
 
-  cp /root/vesta/src/static.tar.gz $PATH_OF_C_WEB_FOLDER/static.tar.gz
+  cp /root/vesta/src/static.tar.gz $PATH_OF_C_WEB_FOLDER_ROOT/static.tar.gz
   tar -xzf static.tar.gz
   rm static.tar.gz
   
   echo "=== Copying files"
-  mkdir -p $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
-  cp -rf /root/vesta/install/debian/$TARGET_DEB_VER/* $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
-  cp /root/vesta/install/debian/10/deb_signing.key /var/www/c.vesta.hostingpanel.dev/html/deb_signing.key
-  cd $PATH_OF_C_WEB_FOLDER_FOR_SPECIFIC_DEB_VER
+  mkdir -p $PATH_OF_C_WEB_FOLDER
+  cp -rf /root/vesta/install/debian/$TARGET_DEB_VER/* $PATH_OF_C_WEB_FOLDER
+  if [ ! -f "$PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key" ]; then
+    cp /root/vesta/install/debian/$TARGET_DEB_VER_MAIN/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key
+  fi
+  cd $PATH_OF_C_WEB_FOLDER
   
   if [ -f "packages.tar.gz" ]; then
     rm packages.tar.gz
@@ -219,6 +270,7 @@ if [ "$CWEB_B" = true ]; then
     rm dovecot.tar.gz
   fi
   tar -czf dovecot.tar.gz dovecot/
+  echo "=== All done"
 fi
 
 #################################################################################
@@ -467,7 +519,9 @@ if [ "$VESTA_B" = true ]; then
   if [ $add_deb_to_apt_repo -eq 1 ]; then
     if [ "$TARGET_DEB_NAME_MAIN" != "$TARGET_DEB_NAME" ]; then
       cd $BUILD_DIR
-      rm vesta_$VESTA_V.deb
+	  if [ -f "vesta_$VESTA_V.deb" ]; then
+        rm vesta_$VESTA_V.deb
+	  fi
       cp $BUILD_DIR_MAIN/vesta_$VESTA_V.deb $BUILD_DIR/vesta_$VESTA_V.deb
 	fi
     add_to_repo "vesta"

From 84392aa52a13031ab4d8bf9d7ec53c97d5eec8f4 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 12:42:26 +0200
Subject: [PATCH 0571/2300] Replacing ns1.domain.tld and ns2.domain.tld with
 real nameservers

---
 install/vst-install-debian.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index cbea8e73..5a3bd7a4 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -827,6 +827,8 @@ cp -rf $vestacp/templates $VESTA/data/
 # Set nameservers
 sed -i "s/YOURHOSTNAME1/ns1.$servername/" /usr/local/vesta/data/packages/default.pkg
 sed -i "s/YOURHOSTNAME2/ns2.$servername/" /usr/local/vesta/data/packages/default.pkg
+sed -i "s/ns1.domain.tld/ns1.$servername/" /usr/local/vesta/data/packages/default.pkg
+sed -i "s/ns2.domain.tld/ns2.$servername/" /usr/local/vesta/data/packages/default.pkg
 
 # Copying index.html to default documentroot
 cp $VESTA/data/templates/web/skel/public_html/index.html /var/www/

From 69c6e910fac526041ef71abd8c755e50a7296f4d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 15:30:40 +0200
Subject: [PATCH 0572/2300] Trigger custom post-update script after update

---
 src/deb/vesta/postinst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 131e36ec..9d47da77 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -6,8 +6,8 @@ if [ ! -e "/usr/local/vesta/data/users/admin" ]; then
 fi
 
 # Run triggers
-# if [ -x "/usr/local/vesta/upd/sonething.sh" ]; then
-#    /usr/local/vesta/upd/something.sh
-# fi
+if [ -x "/root/vesta-patch.sh" ]; then
+    /root/vesta-patch.sh
+fi
 
 exit 0

From b168ef14d972185263db2250609bdc82325536c5 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 16:04:48 +0200
Subject: [PATCH 0573/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 302f9860..e263ba0a 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 
-# Autocompile Script for VestaCP deb Files.
+# Autocompile Script for VestaCP deb files - ver 1.0
 # Made for MyVesta fork.
 # Autocompile script borrowed from HestiaCP, special thanks to Raphael Schneeberger
 
@@ -8,7 +8,7 @@ build_deb_package=1
 add_deb_to_apt_repo=0
 
 TARGET_DEB_NAME='buster'
-DEB_VER='10'
+TARGET_DEB_VER='10'
 VESTA_VER='0.9.8-25'
 
 TARGET_DEB_NAME_MAIN='buster'
@@ -20,6 +20,14 @@ wait_to_press_enter=1
 ###############
 # Note: first run --apt_repo before turning add_deb_to_apt_repo=1
 
+if [ $# -gt 1 ]; then
+    TARGET_DEB_NAME=$2
+fi
+
+if [ $# -gt 2 ]; then
+    TARGET_DEB_VER=$3
+fi
+
 MAINTAINER_EMAIL='predrag@hostingpanel.dev'
 
 # Set compiling directory
@@ -71,6 +79,8 @@ function make_deb_package {
     rm $1_$VESTA_V.deb
   fi
   dpkg-deb --build $1_$VESTA_V
+  echo "=== Building done."
+  echo "=== Your .deb package is here: $BUILD_DIR/$1_$VESTA_V.deb"
 }
 
 function add_to_repo {  
@@ -209,7 +219,7 @@ EOF
     gpg --armor --export $MAINTAINER_EMAIL --output $MAINTAINER_EMAIL.gpg.key
     press_enter "*** please copy above generated key to your clipboard and then paste it after pressing enter now ***"
     vi $PATH_OF_APT_REPO_ROOT/deb_signing.key
-	cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key
+    cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key
   fi
 
   echo "=== All done"

From 0c503c7e3296df385850306fce8db5cd58ebfcc3 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 18:50:16 +0200
Subject: [PATCH 0574/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index e263ba0a..bc5c83ff 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -281,6 +281,8 @@ if [ "$CWEB_B" = true ]; then
   fi
   tar -czf dovecot.tar.gz dovecot/
   echo "=== All done"
+  
+  cp /root/vesta/install/vst-install-debian.sh $PATH_OF_C_WEB_FOLDER_ROOT/vst-install-debian.sh
 fi
 
 #################################################################################

From b2934fd617c3eafb727a9d880c1bd7906382010b Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 18:58:54 +0200
Subject: [PATCH 0575/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index bc5c83ff..9b4134d9 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -11,9 +11,6 @@ TARGET_DEB_NAME='buster'
 TARGET_DEB_VER='10'
 VESTA_VER='0.9.8-25'
 
-TARGET_DEB_NAME_MAIN='buster'
-TARGET_DEB_VER_MAIN='10'
-
 run_apt_update_and_install=1
 wait_to_press_enter=1
 
@@ -30,6 +27,9 @@ fi
 
 MAINTAINER_EMAIL='predrag@hostingpanel.dev'
 
+TARGET_DEB_NAME_MAIN='buster'
+TARGET_DEB_VER_MAIN='10'
+
 # Set compiling directory
 BUILD_DIR="/usr/src/$TARGET_DEB_NAME"
 BUILD_DIR_MAIN="/usr/src/$TARGET_DEB_NAME_MAIN"

From 0287e6d956b3f2e16e0efd900bdebece4fc1b916 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 19:00:44 +0200
Subject: [PATCH 0576/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 9b4134d9..7f4d8bbc 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -134,13 +134,13 @@ for arg; do
     --vesta)
       VESTA_B='true'
       ;;
-    --git_clone)
+    --git)
       VESTAGIT_B='true'
       ;;
     --c)
       CWEB_B='true'
       ;;
-    --apt_repo)
+    --apt)
       APTWEB_B='true'
       ;;
     *)
@@ -150,7 +150,7 @@ for arg; do
 done
 
 if [ $# -eq 0 ]; then
-  echo "!!! Please run with argument --vesta, --nginx, --php, --git_clone, --c, --apt or --all"
+  echo "!!! Please run with argument --vesta, --nginx, --php, --git, --c, --apt or --all"
   exit 1
 fi
 

From 59a959c4b296bcf1f8119d8f5b8c3067d89f59b9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 19:02:34 +0200
Subject: [PATCH 0577/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 7f4d8bbc..e8baba7a 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -15,7 +15,7 @@ run_apt_update_and_install=1
 wait_to_press_enter=1
 
 ###############
-# Note: first run --apt_repo before turning add_deb_to_apt_repo=1
+# Note: first run --apt before turning add_deb_to_apt_repo=1
 
 if [ $# -gt 1 ]; then
     TARGET_DEB_NAME=$2

From d5ef538af67856f9a4ed32a63c20414e1adcc8b6 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 19:26:15 +0200
Subject: [PATCH 0578/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index e8baba7a..5782dbc1 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -250,7 +250,7 @@ if [ "$CWEB_B" = true ]; then
   
   echo "=== Copying files"
   mkdir -p $PATH_OF_C_WEB_FOLDER
-  cp -rf /root/vesta/install/debian/$TARGET_DEB_VER/* $PATH_OF_C_WEB_FOLDER
+  cp -rf /root/vesta/install/debian/* $PATH_OF_C_WEB_FOLDER_ROOT/debian
   if [ ! -f "$PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key" ]; then
     cp /root/vesta/install/debian/$TARGET_DEB_VER_MAIN/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key
   fi

From 1613744d0a7f5cb11ceb44b0f1b86c04b899f0d1 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 19:34:04 +0200
Subject: [PATCH 0579/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 5a3bd7a4..d1167db1 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -636,11 +636,7 @@ fi
 #----------------------------------------------------------#
 
 # Update system packages
-if [ $ALLOW_INSECURE_APT -eq 1 ]; then
-  apt-get -o Acquire::AllowInsecureRepositories=true -o Acquire::AllowDowngradeToInsecureRepositories=true update
-else
-  apt-get update
-fi
+apt-get update
 
 # Disable daemon autostart /usr/share/doc/sysv-rc/README.policy-rc.d.gz
 echo -e '#!/bin/sh \nexit 101' > /usr/sbin/policy-rc.d

From 0634c42b2607ef2099a938faacb74a6b514e3553 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 19:50:01 +0200
Subject: [PATCH 0580/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d1167db1..86c656f5 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -44,6 +44,20 @@ elif [ "$release" -eq 9 ]; then
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
         unrar-free vim-common net-tools unzip"
 fi
+elif [ "$release" -eq 8 ]; then
+    software="nginx apache2 apache2-utils apache2.2-common
+        apache2-suexec-custom libapache2-mod-ruid2
+        libapache2-mod-fcgid libapache2-mod-php5 php5 php5-common php5-cgi
+        php5-mysql php5-curl php5-fpm php5-pgsql awstats webalizer vsftpd
+        proftpd-basic bind9 exim4 exim4-daemon-heavy clamav-daemon
+        spamassassin dovecot-imapd dovecot-pop3d roundcube-core
+        roundcube-mysql roundcube-plugins mysql-server mysql-common
+        mysql-client postgresql postgresql-contrib phppgadmin phpMyAdmin mc
+        flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
+        e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
+        bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
+        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools unzip"
+fi
 
 # Defining help function
 help() {

From fd4cb7c026e07718de5fdc2cc11e791a8b0d42f6 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 19:50:38 +0200
Subject: [PATCH 0581/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 -
 1 file changed, 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 86c656f5..93dda4d3 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -43,7 +43,6 @@ elif [ "$release" -eq 9 ]; then
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
         unrar-free vim-common net-tools unzip"
-fi
 elif [ "$release" -eq 8 ]; then
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2

From a7c533ecd472afb63a578527f72bcdc0edb7053a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 20:03:41 +0200
Subject: [PATCH 0582/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 93dda4d3..0d81e099 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -55,7 +55,7 @@ elif [ "$release" -eq 8 ]; then
         flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
-        unrar-free vim-common vesta-ioncube vesta-softaculous net-tools unzip"
+        unrar-free vim-common net-tools unzip"
 fi
 
 # Defining help function

From 76fb13bc41ae7c6051596eb4a21439ca274a6d26 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 20:09:12 +0200
Subject: [PATCH 0583/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 5782dbc1..8d4da441 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -48,7 +48,7 @@ PATH_OF_APT_REPO="$PATH_OF_APT_REPO_ROOT/$TARGET_DEB_NAME"
 
 # Set Version for compiling
 VESTA_V=$VESTA_VER"_amd64"
-NGINX_V='1.17.1'
+NGINX_V='1.17.3'
 OPENSSL_V='1.1.1c'
 PCRE_V='8.43'
 ZLIB_V='1.2.11'

From 5e9f7dcbbc1256f142cf48b4cfb38aac0d576ce1 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 20:16:50 +0200
Subject: [PATCH 0584/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 0d81e099..eb7f40a4 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -838,6 +838,8 @@ sed -i "s/YOURHOSTNAME1/ns1.$servername/" /usr/local/vesta/data/packages/default
 sed -i "s/YOURHOSTNAME2/ns2.$servername/" /usr/local/vesta/data/packages/default.pkg
 sed -i "s/ns1.domain.tld/ns1.$servername/" /usr/local/vesta/data/packages/default.pkg
 sed -i "s/ns2.domain.tld/ns2.$servername/" /usr/local/vesta/data/packages/default.pkg
+sed -i "s/ns1.example.com/ns1.$servername/" /usr/local/vesta/data/packages/default.pkg
+sed -i "s/ns2.example.com/ns2.$servername/" /usr/local/vesta/data/packages/default.pkg
 
 # Copying index.html to default documentroot
 cp $VESTA/data/templates/web/skel/public_html/index.html /var/www/

From d0ec79ca1e9245375381fe5d23b8eef28d173031 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 22:50:45 +0200
Subject: [PATCH 0585/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 8d4da441..edfacdcd 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -20,10 +20,15 @@ wait_to_press_enter=1
 if [ $# -gt 1 ]; then
     TARGET_DEB_NAME=$2
 fi
-
 if [ $# -gt 2 ]; then
     TARGET_DEB_VER=$3
 fi
+if [ $# -gt 3 ]; then
+    build_deb_package=$4
+fi
+if [ $# -gt 4 ]; then
+    add_deb_to_apt_repo=$5
+fi
 
 MAINTAINER_EMAIL='predrag@hostingpanel.dev'
 

From 1882aa3d8ab3dc7e41285cc8e8d456d0efb3e087 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 23:19:40 +0200
Subject: [PATCH 0586/2300] Update README.md

---
 README.md | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index a16fe83e..d49c12f4 100644
--- a/README.md
+++ b/README.md
@@ -1,12 +1,17 @@
-[Vesta Control Panel](http://vestacp.com/)
+MyVesta Control Panel
 ==================================================
 
-[![Join the chat at https://gitter.im/vesta-cp/Lobby](https://badges.gitter.im/vesta-cp/Lobby.svg)](https://gitter.im/vesta-cp/Lobby?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
-
+* MyVesta is a fork of VestaCP
+* Focused on security and stability
+* Therefore, only Debian is supported - keeping focus on ONE eco-system - not wasting energy on compatibility with other Linux distributions
+* It will always be synchronized with official VestaCP commits
+* Youi can by all commercial plugins only on official vestacp.com - we will not take their earnings - we are not making this because of money
 * Vesta is an open source hosting control panel.
 * Vesta has a clean and focused interface without the clutter.
 * Vesta has the latest of very innovative technologies.
 
+Special thanks to vestacp.com and Serghey Rodin for open-source VestaCP project
+
 How to install (2 step)
 ----------------------------
 Connect to your server as root via SSH
@@ -16,7 +21,7 @@ ssh root@your.server
 
 Download the installation script, and run it:
 ```bash
-curl http://vestacp.com/pub/vst-install.sh | bash
+curl http://c.vesta.hostingpanel.dev/vst-install-debian.sh | bash
 ```
 
 How to install (3 step)
@@ -29,7 +34,7 @@ ssh root@your.server
 
 Download the installation script:
 ```bash
-curl -O http://vestacp.com/pub/vst-install.sh
+curl -O http://c.vesta.hostingpanel.dev/vst-install-debian.sh
 ```
 Then run it:
 ```bash

From 6d7a53267cead077bb78dbcf8089447c7109262e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 23:23:15 +0200
Subject: [PATCH 0587/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index d49c12f4..ac85019d 100644
--- a/README.md
+++ b/README.md
@@ -5,7 +5,7 @@ MyVesta Control Panel
 * Focused on security and stability
 * Therefore, only Debian is supported - keeping focus on ONE eco-system - not wasting energy on compatibility with other Linux distributions
 * It will always be synchronized with official VestaCP commits
-* Youi can by all commercial plugins only on official vestacp.com - we will not take their earnings - we are not making this because of money
+* All VestaCP commercial plugins can be purchased only on official vestacp.com - we will not take their earnings - we are not making this because of money
 * Vesta is an open source hosting control panel.
 * Vesta has a clean and focused interface without the clutter.
 * Vesta has the latest of very innovative technologies.

From aec12a51190a51b422b645041f3a164d49c622a6 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 17 Aug 2019 23:26:29 +0200
Subject: [PATCH 0588/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index ac85019d..4c1a1da5 100644
--- a/README.md
+++ b/README.md
@@ -38,7 +38,7 @@ curl -O http://c.vesta.hostingpanel.dev/vst-install-debian.sh
 ```
 Then run it:
 ```bash
-bash vst-install.sh
+bash vst-install-debian.sh
 ```
 
 License

From e82ad200b7168c42e8b0bb1b7cc228cc19cfc847 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 18 Aug 2019 16:37:00 +0200
Subject: [PATCH 0589/2300] Translated added string in sr.php

---
 web/inc/i18n/sr.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/inc/i18n/sr.php b/web/inc/i18n/sr.php
index 759ab6c9..2b91b293 100644
--- a/web/inc/i18n/sr.php
+++ b/web/inc/i18n/sr.php
@@ -1,7 +1,7 @@
 <?php
 /**
  * Vesta Serbian sr_SR language file
- * Translation base taken from Bosnian translation file and adapted to Serbian (with a lot of modifications)
+ * Translation base taken from Bosnian translation file and adapted to Serbian (with lot of modifications)
  *
  */
 $LANG['sr'] = array(
@@ -559,7 +559,7 @@ $LANG['sr'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
-    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
+    'Use Web Domain SSL Certificate' => 'Koristi Web Domain SSL sertifikat',
     'Webmail URL' => 'Webmail URL',
     'MySQL Support' => 'MySQL podrška',
     'phpMyAdmin URL' => 'phpMyAdmin URL',

From 181a99d5d72bdcbe90e114104c46cafce6a7d845 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 20:11:43 +0200
Subject: [PATCH 0590/2300] Update secure_login.php

---
 web/inc/secure_login.php | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 83cb16b9..bf302792 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -1,10 +1,4 @@
 <?php
-if (file_exists('/usr/local/vesta/web/inc/nginx_proxy')==true) {
-    if (isset($_SERVER['REQUEST_URI']) && $_SERVER['REQUEST_URI']=="/") {
-        header("Location: /webmail/");
-        exit;
-    }
-}
 
 $login_url_skip=0;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/index.php') $login_url_skip=1;

From 197043e395e932cdbbb315021c31e56779c7088f Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 20:18:37 +0200
Subject: [PATCH 0591/2300] Update README.md

---
 README.md | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/README.md b/README.md
index 4c1a1da5..aa7f264c 100644
--- a/README.md
+++ b/README.md
@@ -6,6 +6,28 @@ MyVesta Control Panel
 * Therefore, only Debian is supported - keeping focus on ONE eco-system - not wasting energy on compatibility with other Linux distributions
 * It will always be synchronized with official VestaCP commits
 * All VestaCP commercial plugins can be purchased only on official vestacp.com - we will not take their earnings - we are not making this because of money
+
+Features
+==================================================
+
+1) Apache is on mpm_event by default, PHP is running in PHP-FPM
+
+2) You can totally "lock" VestsCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
+
+After installation just execute:
+```
+echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php
+```
+Literally no one PHP script will be alive before you access that URL, so even if there is some zero-day exploit - hacker will not be able to access it without knowing your secret URL.
+You can see how mechanism was built by looking at:
+- https://github.com/myvesta/vesta/blob/master/src/deb/php/php.ini#L496
+- https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php
+
+3) We disabled dangerous PHP functions in php.ini, so even if customer's CMS was compromised, hacker will not be able to execute shell from PHP.
+
+About VestaCP
+==================================================
+
 * Vesta is an open source hosting control panel.
 * Vesta has a clean and focused interface without the clutter.
 * Vesta has the latest of very innovative technologies.

From 73a7008b4ac7774c5dec4775fce64490d16b7507 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 21:00:45 +0200
Subject: [PATCH 0592/2300] Update README.md

---
 README.md | 23 +++++++++++------------
 1 file changed, 11 insertions(+), 12 deletions(-)

diff --git a/README.md b/README.md
index aa7f264c..4643c8d8 100644
--- a/README.md
+++ b/README.md
@@ -10,20 +10,19 @@ MyVesta Control Panel
 Features
 ==================================================
 
-1) Apache is on mpm_event by default, PHP is running in PHP-FPM
+> + Apache is on mpm_event by default, PHP is running in PHP-FPM
 
-2) You can totally "lock" VestsCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
+> + You can totally "lock" VestsCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
+> After installation just execute:
+> ```
+> echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php
+> ```
+> Literally no one PHP script will be alive before you access that URL, so even if there is some zero-day exploit - hacker will not be able to access it without knowing your secret URL.
+> You can see how mechanism was built by looking at:
+>   + https://github.com/myvesta/vesta/blob/master/src/deb/php/php.ini#L496
+>   + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php
 
-After installation just execute:
-```
-echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php
-```
-Literally no one PHP script will be alive before you access that URL, so even if there is some zero-day exploit - hacker will not be able to access it without knowing your secret URL.
-You can see how mechanism was built by looking at:
-- https://github.com/myvesta/vesta/blob/master/src/deb/php/php.ini#L496
-- https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php
-
-3) We disabled dangerous PHP functions in php.ini, so even if customer's CMS was compromised, hacker will not be able to execute shell from PHP.
+> + We disabled dangerous PHP functions in php.ini, so even if customer's CMS was compromised, hacker will not be able to execute shell from PHP.
 
 About VestaCP
 ==================================================

From 4c916e4ddda4a597a0e3c090dc3e20fdaaca8a83 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 21:06:36 +0200
Subject: [PATCH 0593/2300] Update README.md

---
 README.md | 20 +++++++++-----------
 1 file changed, 9 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index 4643c8d8..e2a5ad5c 100644
--- a/README.md
+++ b/README.md
@@ -10,19 +10,17 @@ MyVesta Control Panel
 Features
 ==================================================
 
-> + Apache is on mpm_event by default, PHP is running in PHP-FPM
++ Apache is on mpm_event by default, PHP is running in PHP-FPM
 
-> + You can totally "lock" VestsCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
-> After installation just execute:
-> ```
-> echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php
-> ```
-> Literally no one PHP script will be alive before you access that URL, so even if there is some zero-day exploit - hacker will not be able to access it without knowing your secret URL.
-> You can see how mechanism was built by looking at:
->   + https://github.com/myvesta/vesta/blob/master/src/deb/php/php.ini#L496
->   + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php
++ You can totally "lock" VestsCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
+    + After installation just execute:
+    + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
+    + Literally no one PHP script will be alive before you access that URL, so even if there is some zero-day exploit - hacker will not be able to access it without knowing your secret URL.
+    + You can see how mechanism was built by looking at:
+      + https://github.com/myvesta/vesta/blob/master/src/deb/php/php.ini#L496
+      + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php
 
-> + We disabled dangerous PHP functions in php.ini, so even if customer's CMS was compromised, hacker will not be able to execute shell from PHP.
++ We disabled dangerous PHP functions in php.ini, so even if customer's CMS was compromised, hacker will not be able to execute shell from PHP.
 
 About VestaCP
 ==================================================

From bf7ae3c0d410ed435d3675708f56f2dc74c87e26 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 21:09:14 +0200
Subject: [PATCH 0594/2300] Update README.md

---
 README.md | 38 ++++++++++----------------------------
 1 file changed, 10 insertions(+), 28 deletions(-)

diff --git a/README.md b/README.md
index e2a5ad5c..332e999d 100644
--- a/README.md
+++ b/README.md
@@ -22,35 +22,8 @@ Features
 
 + We disabled dangerous PHP functions in php.ini, so even if customer's CMS was compromised, hacker will not be able to execute shell from PHP.
 
-About VestaCP
-==================================================
-
-* Vesta is an open source hosting control panel.
-* Vesta has a clean and focused interface without the clutter.
-* Vesta has the latest of very innovative technologies.
-
-Special thanks to vestacp.com and Serghey Rodin for open-source VestaCP project
-
-How to install (2 step)
+How to install
 ----------------------------
-Connect to your server as root via SSH
-```bash
-ssh root@your.server
-```
-
-Download the installation script, and run it:
-```bash
-curl http://c.vesta.hostingpanel.dev/vst-install-debian.sh | bash
-```
-
-How to install (3 step)
-----------------------------
-If the above example does not work, try this 3 step method:
-Connect to your server as root via SSH
-```bash
-ssh root@your.server
-```
-
 Download the installation script:
 ```bash
 curl -O http://c.vesta.hostingpanel.dev/vst-install-debian.sh
@@ -60,6 +33,15 @@ Then run it:
 bash vst-install-debian.sh
 ```
 
+About VestaCP
+==================================================
+
+* Vesta is an open source hosting control panel.
+* Vesta has a clean and focused interface without the clutter.
+* Vesta has the latest of very innovative technologies.
+
+Special thanks to vestacp.com and Serghey Rodin for open-source VestaCP project
+
 License
 ----------------------------
 Vesta is licensed under  [GPL v3 ](https://github.com/serghey-rodin/vesta/blob/master/LICENSE) license

From db1f2c71c3e5413258bee2d6f31daab83788faf7 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 21:13:37 +0200
Subject: [PATCH 0595/2300] Update README.md

---
 README.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 332e999d..82e2f58e 100644
--- a/README.md
+++ b/README.md
@@ -10,12 +10,14 @@ MyVesta Control Panel
 Features
 ==================================================
 
-+ Apache is on mpm_event by default, PHP is running in PHP-FPM
++ Support for Debian 10
+
++ Apache is on mpm_event by default, PHP is running in PHP-FPM, which is the best PHP-stack solution
 
 + You can totally "lock" VestsCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
     + After installation just execute:
     + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
-    + Literally no one PHP script will be alive before you access that URL, so even if there is some zero-day exploit - hacker will not be able to access it without knowing your secret URL.
+    + Literally no one PHP script will be alive before you access that URL, so even if there is some zero-day exploit - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simlpy dead - nothing will interact with someone who don't know your secret-URL.
     + You can see how mechanism was built by looking at:
       + https://github.com/myvesta/vesta/blob/master/src/deb/php/php.ini#L496
       + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php

From 311acac5a62d19fb1ab3bafb4c169ef121bb8323 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 21:17:19 +0200
Subject: [PATCH 0596/2300] Update README.md

---
 README.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 82e2f58e..32de827e 100644
--- a/README.md
+++ b/README.md
@@ -12,8 +12,6 @@ Features
 
 + Support for Debian 10
 
-+ Apache is on mpm_event by default, PHP is running in PHP-FPM, which is the best PHP-stack solution
-
 + You can totally "lock" VestsCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
     + After installation just execute:
     + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
@@ -24,6 +22,10 @@ Features
 
 + We disabled dangerous PHP functions in php.ini, so even if customer's CMS was compromised, hacker will not be able to execute shell from PHP.
 
++ Apache is on mpm_event by default, PHP is running in PHP-FPM, which is the best PHP-stack solution
+
++ Support for multi-PHP versions - https://forum.vestacp.com/viewtopic.php?t=17129
+
 How to install
 ----------------------------
 Download the installation script:

From 6496d9588b69dbfe9028b2f9466e7d4ff027e2f9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 21:21:55 +0200
Subject: [PATCH 0597/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 32de827e..b79138f1 100644
--- a/README.md
+++ b/README.md
@@ -22,7 +22,7 @@ Features
 
 + We disabled dangerous PHP functions in php.ini, so even if customer's CMS was compromised, hacker will not be able to execute shell from PHP.
 
-+ Apache is on mpm_event by default, PHP is running in PHP-FPM, which is the best PHP-stack solution
++ Apache is fully switched to mpm_event mode, PHP is running in PHP-FPM, which is the most stable PHP-stack solution
 
 + Support for multi-PHP versions - https://forum.vestacp.com/viewtopic.php?t=17129
 

From 4f1a338a62522d91644d908b29ce2b61d7b4f2d7 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 21:27:49 +0200
Subject: [PATCH 0598/2300] Update README.md

---
 README.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index b79138f1..6c84c466 100644
--- a/README.md
+++ b/README.md
@@ -5,7 +5,8 @@ MyVesta Control Panel
 * Focused on security and stability
 * Therefore, only Debian is supported - keeping focus on ONE eco-system - not wasting energy on compatibility with other Linux distributions
 * It will always be synchronized with official VestaCP commits
-* All VestaCP commercial plugins can be purchased only on official vestacp.com - we will not take their earnings - we are not making this because of money
+* All VestaCP commercial plugins can be purchased only on official vestacp.com - we will not take their earnings - we are not making this fork because of money - but because a freedom to enhance security and features
+* All features that is added here will be offered to official VestaCP through pull-requests
 
 Features
 ==================================================

From 6dfa512dc1e099a57af9f6ba80ec2b27e7633c89 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 21:53:16 +0200
Subject: [PATCH 0599/2300] Update README.md

---
 README.md | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 6c84c466..30ba31d7 100644
--- a/README.md
+++ b/README.md
@@ -14,7 +14,7 @@ Features
 + Support for Debian 10
 
 + You can totally "lock" VestsCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
-    + After installation just execute:
+    + After MyVesta installation just execute:
     + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
     + Literally no one PHP script will be alive before you access that URL, so even if there is some zero-day exploit - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simlpy dead - nothing will interact with someone who don't know your secret-URL.
     + You can see how mechanism was built by looking at:
@@ -27,6 +27,11 @@ Features
 
 + Support for multi-PHP versions - https://forum.vestacp.com/viewtopic.php?t=17129
 
++ You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
+    + You can even create your own APT repositorium in a minute
+    + We are using latest nginx version for vesta-nginx package
+    + With your own APT infrastructure you can take a security of Vesta-installer infrastructure in your own hands, you have full control of your Vesta code
+
 How to install
 ----------------------------
 Download the installation script:

From d3c86aa1c36a3dea3aca93af7f344f099fb7a4a9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 22:02:24 +0200
Subject: [PATCH 0600/2300] Create php-fpm.conf

---
 src/deb/for-download/php/php-fpm.conf | 34 +++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 src/deb/for-download/php/php-fpm.conf

diff --git a/src/deb/for-download/php/php-fpm.conf b/src/deb/for-download/php/php-fpm.conf
new file mode 100644
index 00000000..d9a04795
--- /dev/null
+++ b/src/deb/for-download/php/php-fpm.conf
@@ -0,0 +1,34 @@
+[global]
+pid = /var/run/vesta-php.pid
+daemonize = yes
+
+[www]
+user = admin
+group = admin
+listen = /var/run/vesta-php.sock
+listen.owner = admin
+listen.group = admin
+listen.mode = 0660
+
+pm = dynamic
+pm.max_children = 5
+pm.start_servers = 2
+pm.min_spare_servers = 1
+pm.max_spare_servers = 3
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /tmp
+env[TMPDIR] = /tmp
+env[TEMP] = /tmp
+env[VESTA] = $VESTA
+env[LANG] = en_US.UTF-8
+php_flag[display_errors] = off
+php_admin_value[error_log] = /usr/local/vesta/log/fpm-php.log
+php_admin_flag[log_errors] = on
+php_admin_value[memory_limit] = 256M
+php_admin_value[post_max_size] = 512M
+php_admin_value[upload_max_filesize] = 512M
+php_admin_value[max_execution_time] = 600
+php_admin_value[max_input_time] = 600
+php_admin_value[session.save_path] = /usr/local/vesta/data/sessions

From fe21fed10d51d165027fd9d4090260e235842867 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 22:02:42 +0200
Subject: [PATCH 0601/2300] Delete php-fpm.conf

---
 src/deb/php/php-fpm.conf | 34 ----------------------------------
 1 file changed, 34 deletions(-)
 delete mode 100644 src/deb/php/php-fpm.conf

diff --git a/src/deb/php/php-fpm.conf b/src/deb/php/php-fpm.conf
deleted file mode 100644
index d9a04795..00000000
--- a/src/deb/php/php-fpm.conf
+++ /dev/null
@@ -1,34 +0,0 @@
-[global]
-pid = /var/run/vesta-php.pid
-daemonize = yes
-
-[www]
-user = admin
-group = admin
-listen = /var/run/vesta-php.sock
-listen.owner = admin
-listen.group = admin
-listen.mode = 0660
-
-pm = dynamic
-pm.max_children = 5
-pm.start_servers = 2
-pm.min_spare_servers = 1
-pm.max_spare_servers = 3
-
-env[HOSTNAME] = $HOSTNAME
-env[PATH] = /usr/local/bin:/usr/bin:/bin
-env[TMP] = /tmp
-env[TMPDIR] = /tmp
-env[TEMP] = /tmp
-env[VESTA] = $VESTA
-env[LANG] = en_US.UTF-8
-php_flag[display_errors] = off
-php_admin_value[error_log] = /usr/local/vesta/log/fpm-php.log
-php_admin_flag[log_errors] = on
-php_admin_value[memory_limit] = 256M
-php_admin_value[post_max_size] = 512M
-php_admin_value[upload_max_filesize] = 512M
-php_admin_value[max_execution_time] = 600
-php_admin_value[max_input_time] = 600
-php_admin_value[session.save_path] = /usr/local/vesta/data/sessions

From 8f0f393a6ed30d103dba02955ec0a1919692c936 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 22:03:37 +0200
Subject: [PATCH 0602/2300] Create php.ini

---
 src/deb/for-download/php/php.ini | 1249 ++++++++++++++++++++++++++++++
 1 file changed, 1249 insertions(+)
 create mode 100644 src/deb/for-download/php/php.ini

diff --git a/src/deb/for-download/php/php.ini b/src/deb/for-download/php/php.ini
new file mode 100644
index 00000000..83fd88f4
--- /dev/null
+++ b/src/deb/for-download/php/php.ini
@@ -0,0 +1,1249 @@
+[PHP]
+
+;;;;;;;;;;;;;;;;;;;
+; About php.ini   ;
+;;;;;;;;;;;;;;;;;;;
+; This file controls many aspects of PHP's behavior.  In order for PHP to
+; read it, it must be named 'php.ini'.  PHP looks for it in the current
+; working directory, in the path designated by the environment variable
+; PHPRC, and in the path that was defined in compile time (in that order).
+; Under Windows, the compile-time path is the Windows directory.  The
+; path in which the php.ini file is looked for can be overridden using
+; the -c argument in command line mode.
+;
+; The syntax of the file is extremely simple.  Whitespace and Lines
+; beginning with a semicolon are silently ignored (as you probably guessed).
+; Section headers (e.g. [Foo]) are also silently ignored, even though
+; they might mean something in the future.
+;
+; Directives are specified using the following syntax:
+; directive = value
+; Directive names are *case sensitive* - foo=bar is different from FOO=bar.
+;
+; The value can be a string, a number, a PHP constant (e.g. E_ALL or M_PI), one
+; of the INI constants (On, Off, True, False, Yes, No and None) or an expression
+; (e.g. E_ALL & ~E_NOTICE), or a quoted string ("foo").
+;
+; Expressions in the INI file are limited to bitwise operators and parentheses:
+; |        bitwise OR
+; &        bitwise AND
+; ~        bitwise NOT
+; !        boolean NOT
+;
+; Boolean flags can be turned on using the values 1, On, True or Yes.
+; They can be turned off using the values 0, Off, False or No.
+;
+; An empty string can be denoted by simply not writing anything after the equal
+; sign, or by using the None keyword:
+;
+;  foo =         ; sets foo to an empty string
+;  foo = none    ; sets foo to an empty string
+;  foo = "none"  ; sets foo to the string 'none'
+;
+; If you use constants in your value, and these constants belong to a
+; dynamically loaded extension (either a PHP extension or a Zend extension),
+; you may only use these constants *after* the line that loads the extension.
+;
+;
+;;;;;;;;;;;;;;;;;;;
+; About this file ;
+;;;;;;;;;;;;;;;;;;;
+; This is the recommended, PHP 5-style version of the php.ini-dist file.  It
+; sets some non standard settings, that make PHP more efficient, more secure,
+; and encourage cleaner coding.
+;
+; The price is that with these settings, PHP may be incompatible with some
+; applications, and sometimes, more difficult to develop with.  Using this
+; file is warmly recommended for production sites.  As all of the changes from
+; the standard settings are thoroughly documented, you can go over each one,
+; and decide whether you want to use it or not.
+;
+; For general information about the php.ini file, please consult the php.ini-dist
+; file, included in your PHP distribution.
+;
+; This file is different from the php.ini-dist file in the fact that it features
+; different values for several directives, in order to improve performance, while
+; possibly breaking compatibility with the standard out-of-the-box behavior of
+; PHP.  Please make sure you read what's different, and modify your scripts
+; accordingly, if you decide to use this file instead.
+;
+; - register_long_arrays = Off     [Performance]
+;     Disables registration of the older (and deprecated) long predefined array
+;     variables ($HTTP_*_VARS).  Instead, use the superglobals that were
+;     introduced in PHP 4.1.0
+; - display_errors = Off           [Security]
+;     With this directive set to off, errors that occur during the execution of
+;     scripts will no longer be displayed as a part of the script output, and thus,
+;     will no longer be exposed to remote users.  With some errors, the error message
+;     content may expose information about your script, web server, or database
+;     server that may be exploitable for hacking.  Production sites should have this
+;     directive set to off.
+; - log_errors = On                [Security]
+;     This directive complements the above one.  Any errors that occur during the
+;     execution of your script will be logged (typically, to your server's error log,
+;     but can be configured in several ways).  Along with setting display_errors to off,
+;     this setup gives you the ability to fully understand what may have gone wrong,
+;     without exposing any sensitive information to remote users.
+; - output_buffering = 4096        [Performance]
+;     Set a 4KB output buffer.  Enabling output buffering typically results in less
+;     writes, and sometimes less packets sent on the wire, which can often lead to
+;     better performance.  The gain this directive actually yields greatly depends
+;     on which Web server you're working with, and what kind of scripts you're using.
+; - register_argc_argv = Off       [Performance]
+;     Disables registration of the somewhat redundant $argv and $argc global
+;     variables.
+; - magic_quotes_gpc = Off         [Performance]
+;     Input data is no longer escaped with slashes so that it can be sent into
+;     SQL databases without further manipulation.  Instead, you should use the
+;     function addslashes() on each input element you wish to send to a database.
+; - variables_order = "GPCS"       [Performance]
+;     The environment variables are not hashed into the $_ENV.  To access
+;     environment variables, you can use getenv() instead.
+; - error_reporting = E_ALL        [Code Cleanliness, Security(?)]
+;     By default, PHP suppresses errors of type E_NOTICE.  These error messages
+;     are emitted for non-critical errors, but that could be a symptom of a bigger
+;     problem.  Most notably, this will cause error messages about the use
+;     of uninitialized variables to be displayed.
+; - allow_call_time_pass_reference = Off     [Code cleanliness]
+;     It's not possible to decide to force a variable to be passed by reference
+;     when calling a function.  The PHP 4 style to do this is by making the
+;     function require the relevant argument by reference.
+
+;;;;;;;;;;;;;;;;;;;;
+; Language Options ;
+;;;;;;;;;;;;;;;;;;;;
+
+; Enable the PHP scripting language engine under Apache.
+engine = On
+
+; Enable compatibility mode with Zend Engine 1 (PHP 4.x)
+zend.ze1_compatibility_mode = Off
+
+; Allow the <? tag.  Otherwise, only <?php and <script> tags are recognized.
+; NOTE: Using short tags should be avoided when developing applications or
+; libraries that are meant for redistribution, or deployment on PHP
+; servers which are not under your control, because short tags may not
+; be supported on the target server. For portable, redistributable code,
+; be sure not to use short tags.
+short_open_tag = On
+
+; Allow ASP-style <% %> tags.
+asp_tags = Off
+
+; The number of significant digits displayed in floating point numbers.
+precision    =  14
+
+; Enforce year 2000 compliance (will cause problems with non-compliant browsers)
+y2k_compliance = On
+
+; Output buffering allows you to send header lines (including cookies) even
+; after you send body content, at the price of slowing PHP's output layer a
+; bit.  You can enable output buffering during runtime by calling the output
+; buffering functions.  You can also enable output buffering for all files by
+; setting this directive to On.  If you wish to limit the size of the buffer
+; to a certain size - you can use a maximum number of bytes instead of 'On', as
+; a value for this directive (e.g., output_buffering=4096).
+output_buffering = 4096
+
+; You can redirect all of the output of your scripts to a function.  For
+; example, if you set output_handler to "mb_output_handler", character
+; encoding will be transparently converted to the specified encoding.
+; Setting any output handler automatically turns on output buffering.
+; Note: People who wrote portable scripts should not depend on this ini
+;       directive. Instead, explicitly set the output handler using ob_start().
+;       Using this ini directive may cause problems unless you know what script
+;       is doing.
+; Note: You cannot use both "mb_output_handler" with "ob_iconv_handler"
+;       and you cannot use both "ob_gzhandler" and "zlib.output_compression".
+; Note: output_handler must be empty if this is set 'On' !!!!
+;       Instead you must use zlib.output_handler.
+;output_handler =
+
+; Transparent output compression using the zlib library
+; Valid values for this option are 'off', 'on', or a specific buffer size
+; to be used for compression (default is 4KB)
+; Note: Resulting chunk size may vary due to nature of compression. PHP
+;       outputs chunks that are few hundreds bytes each as a result of
+;       compression. If you prefer a larger chunk size for better
+;       performance, enable output_buffering in addition.
+; Note: You need to use zlib.output_handler instead of the standard
+;       output_handler, or otherwise the output will be corrupted.
+zlib.output_compression = Off
+;zlib.output_compression_level = -1
+
+; You cannot specify additional output handlers if zlib.output_compression
+; is activated here. This setting does the same as output_handler but in
+; a different order.
+;zlib.output_handler =
+
+; Implicit flush tells PHP to tell the output layer to flush itself
+; automatically after every output block.  This is equivalent to calling the
+; PHP function flush() after each and every call to print() or echo() and each
+; and every HTML block.  Turning this option on has serious performance
+; implications and is generally recommended for debugging purposes only.
+implicit_flush = Off
+
+; The unserialize callback function will be called (with the undefined class'
+; name as parameter), if the unserializer finds an undefined class
+; which should be instantiated.
+; A warning appears if the specified function is not defined, or if the
+; function doesn't include/implement the missing class.
+; So only set this entry, if you really want to implement such a
+; callback-function.
+unserialize_callback_func=
+
+; When floats & doubles are serialized store serialize_precision significant
+; digits after the floating point. The default value ensures that when floats
+; are decoded with unserialize, the data will remain the same.
+serialize_precision = 100
+
+; Whether to enable the ability to force arguments to be passed by reference
+; at function call time.  This method is deprecated and is likely to be
+; unsupported in future versions of PHP/Zend.  The encouraged method of
+; specifying which arguments should be passed by reference is in the function
+; declaration.  You're encouraged to try and turn this option Off and make
+; sure your scripts work properly with it in order to ensure they will work
+; with future versions of the language (you will receive a warning each time
+; you use this feature, and the argument will be passed by value instead of by
+; reference).
+allow_call_time_pass_reference = Off
+
+;
+; Safe Mode
+;
+safe_mode = Off
+
+; By default, Safe Mode does a UID compare check when
+; opening files. If you want to relax this to a GID compare,
+; then turn on safe_mode_gid.
+safe_mode_gid = Off
+
+; When safe_mode is on, UID/GID checks are bypassed when
+; including files from this directory and its subdirectories.
+; (directory must also be in include_path or full path must
+; be used when including)
+safe_mode_include_dir =
+
+; When safe_mode is on, only executables located in the safe_mode_exec_dir
+; will be allowed to be executed via the exec family of functions.
+safe_mode_exec_dir =
+
+; Setting certain environment variables may be a potential security breach.
+; This directive contains a comma-delimited list of prefixes.  In Safe Mode,
+; the user may only alter environment variables whose names begin with the
+; prefixes supplied here.  By default, users will only be able to set
+; environment variables that begin with PHP_ (e.g. PHP_FOO=BAR).
+;
+; Note:  If this directive is empty, PHP will let the user modify ANY
+; environment variable!
+safe_mode_allowed_env_vars = PHP_
+
+; This directive contains a comma-delimited list of environment variables that
+; the end user won't be able to change using putenv().  These variables will be
+; protected even if safe_mode_allowed_env_vars is set to allow to change them.
+safe_mode_protected_env_vars = LD_LIBRARY_PATH
+
+; open_basedir, if set, limits all file operations to the defined directory
+; and below.  This directive makes most sense if used in a per-directory
+; or per-virtualhost web server configuration file. This directive is
+; *NOT* affected by whether Safe Mode is turned On or Off.
+;open_basedir =
+
+; This directive allows you to disable certain functions for security reasons.
+; It receives a comma-delimited list of function names. This directive is
+; *NOT* affected by whether Safe Mode is turned On or Off.
+disable_functions =
+
+; This directive allows you to disable certain classes for security reasons.
+; It receives a comma-delimited list of class names. This directive is
+; *NOT* affected by whether Safe Mode is turned On or Off.
+disable_classes =
+
+; Colors for Syntax Highlighting mode.  Anything that's acceptable in
+; <span style="color: ???????"> would work.
+;highlight.string  = #DD0000
+;highlight.comment = #FF9900
+;highlight.keyword = #007700
+;highlight.bg      = #FFFFFF
+;highlight.default = #0000BB
+;highlight.html    = #000000
+
+; If enabled, the request will be allowed to complete even if the user aborts
+; the request. Consider enabling it if executing long request, which may end up
+; being interrupted by the user or a browser timing out.
+; ignore_user_abort = On
+
+; Determines the size of the realpath cache to be used by PHP. This value should
+; be increased on systems where PHP opens many files to reflect the quantity of
+; the file operations performed.
+; realpath_cache_size=16k
+
+; Duration of time, in seconds for which to cache realpath information for a given
+; file or directory. For systems with rarely changing files, consider increasing this
+; value.
+; realpath_cache_ttl=120
+
+;
+; Misc
+;
+; Decides whether PHP may expose the fact that it is installed on the server
+; (e.g. by adding its signature to the Web server header).  It is no security
+; threat in any way, but it makes it possible to determine whether you use PHP
+; on your server or not.
+expose_php = Off
+
+
+;;;;;;;;;;;;;;;;;;;
+; Resource Limits ;
+;;;;;;;;;;;;;;;;;;;
+
+max_execution_time = 300     ; Maximum execution time of each script, in seconds
+max_input_time = 120    ; Maximum amount of time each script may spend parsing request data
+;max_input_nesting_level = 64 ; Maximum input variable nesting level
+memory_limit = 64M      ; Maximum amount of memory a script may consume (16MB)
+
+
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+; Error handling and logging ;
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+
+; error_reporting is a bit-field.  Or each number up to get desired error
+; reporting level
+; E_ALL             - All errors and warnings (doesn't include E_STRICT)
+; E_ERROR           - fatal run-time errors
+; E_RECOVERABLE_ERROR  - almost fatal run-time errors
+; E_WARNING         - run-time warnings (non-fatal errors)
+; E_PARSE           - compile-time parse errors
+; E_NOTICE          - run-time notices (these are warnings which often result
+;                     from a bug in your code, but it's possible that it was
+;                     intentional (e.g., using an uninitialized variable and
+;                     relying on the fact it's automatically initialized to an
+;                     empty string)
+; E_STRICT          - run-time notices, enable to have PHP suggest changes
+;                     to your code which will ensure the best interoperability
+;                     and forward compatibility of your code
+; E_CORE_ERROR      - fatal errors that occur during PHP's initial startup
+; E_CORE_WARNING    - warnings (non-fatal errors) that occur during PHP's
+;                     initial startup
+; E_COMPILE_ERROR   - fatal compile-time errors
+; E_COMPILE_WARNING - compile-time warnings (non-fatal errors)
+; E_USER_ERROR      - user-generated error message
+; E_USER_WARNING    - user-generated warning message
+; E_USER_NOTICE     - user-generated notice message
+;
+; Examples:
+;
+;   - Show all errors, except for notices and coding standards warnings
+;
+;error_reporting = E_ALL & ~E_NOTICE
+;
+;   - Show all errors, except for notices
+;
+;error_reporting = E_ALL & ~E_NOTICE | E_STRICT
+;
+;   - Show only errors
+;
+;error_reporting = E_COMPILE_ERROR|E_RECOVERABLE_ERROR|E_ERROR|E_CORE_ERROR
+;
+;   - Show all errors, except coding standards warnings
+;
+error_reporting  =  E_ALL
+
+; Print out errors (as a part of the output).  For production web sites,
+; you're strongly encouraged to turn this feature off, and use error logging
+; instead (see below).  Keeping display_errors enabled on a production web site
+; may reveal security information to end users, such as file paths on your Web
+; server, your database schema or other information.
+;
+; possible values for display_errors:
+;
+; Off          - Do not display any errors
+; stderr       - Display errors to STDERR (affects only CGI/CLI binaries!)
+; On or stdout - Display errors to STDOUT (default)
+;
+; To output errors to STDERR with CGI/CLI:
+;display_errors = "stderr"
+;
+; Default
+;
+display_errors = Off
+
+; Even when display_errors is on, errors that occur during PHP's startup
+; sequence are not displayed.  It's strongly recommended to keep
+; display_startup_errors off, except for when debugging.
+display_startup_errors = Off
+
+; Log errors into a log file (server-specific log, stderr, or error_log (below))
+; As stated above, you're strongly advised to use error logging in place of
+; error displaying on production web sites.
+log_errors = On
+
+; Set maximum length of log_errors. In error_log information about the source is
+; added. The default is 1024 and 0 allows to not apply any maximum length at all.
+log_errors_max_len = 1024
+
+; Do not log repeated messages. Repeated errors must occur in same file on same
+; line until ignore_repeated_source is set true.
+ignore_repeated_errors = Off
+
+; Ignore source of message when ignoring repeated messages. When this setting
+; is On you will not log errors with repeated messages from different files or
+; source lines.
+ignore_repeated_source = Off
+
+; If this parameter is set to Off, then memory leaks will not be shown (on
+; stdout or in the log). This has only effect in a debug compile, and if
+; error reporting includes E_WARNING in the allowed list
+report_memleaks = On
+
+;report_zend_debug = 0
+
+; Store the last error/warning message in $php_errormsg (boolean).
+track_errors = Off
+
+; Disable the inclusion of HTML tags in error messages.
+; Note: Never use this feature for production boxes.
+;html_errors = Off
+
+; If html_errors is set On PHP produces clickable error messages that direct
+; to a page describing the error or function causing the error in detail.
+; You can download a copy of the PHP manual from http://www.php.net/docs.php
+; and change docref_root to the base URL of your local copy including the
+; leading '/'. You must also specify the file extension being used including
+; the dot.
+; Note: Never use this feature for production boxes.
+;docref_root = "/phpmanual/"
+;docref_ext = .html
+
+; String to output before an error message.
+;error_prepend_string = "<font color=ff0000>"
+
+; String to output after an error message.
+;error_append_string = "</font>"
+
+; Log errors to specified file.
+;error_log = filename
+
+; Log errors to syslog (Event Log on NT, not valid in Windows 95).
+;error_log = syslog
+
+
+;;;;;;;;;;;;;;;;;
+; Data Handling ;
+;;;;;;;;;;;;;;;;;
+;
+; Note - track_vars is ALWAYS enabled as of PHP 4.0.3
+
+; The separator used in PHP generated URLs to separate arguments.
+; Default is "&".
+;arg_separator.output = "&amp;"
+
+; List of separator(s) used by PHP to parse input URLs into variables.
+; Default is "&".
+; NOTE: Every character in this directive is considered as separator!
+;arg_separator.input = ";&"
+
+; This directive describes the order in which PHP registers GET, POST, Cookie,
+; Environment and Built-in variables (G, P, C, E & S respectively, often
+; referred to as EGPCS or GPC).  Registration is done from left to right, newer
+; values override older values.
+variables_order = "EGPCS"
+
+; Whether or not to register the EGPCS variables as global variables.  You may
+; want to turn this off if you don't want to clutter your scripts' global scope
+; with user data.  This makes most sense when coupled with track_vars - in which
+; case you can access all of the GPC variables through the $HTTP_*_VARS[],
+; variables.
+;
+; You should do your best to write your scripts so that they do not require
+; register_globals to be on;  Using form variables as globals can easily lead
+; to possible security problems, if the code is not very well thought of.
+register_globals = Off
+
+; Whether or not to register the old-style input arrays, HTTP_GET_VARS
+; and friends.  If you're not using them, it's recommended to turn them off,
+; for performance reasons.
+register_long_arrays = Off
+
+; This directive tells PHP whether to declare the argv&argc variables (that
+; would contain the GET information).  If you don't use these variables, you
+; should turn it off for increased performance.
+register_argc_argv = Off
+
+; When enabled, the SERVER and ENV variables are created when they're first
+; used (Just In Time) instead of when the script starts. If these variables
+; are not used within a script, having this directive on will result in a
+; performance gain. The PHP directives register_globals, register_long_arrays,
+; and register_argc_argv must be disabled for this directive to have any affect.
+auto_globals_jit = On
+
+; Maximum size of POST data that PHP will accept.
+post_max_size = 8M
+
+; Magic quotes
+;
+
+; Magic quotes for incoming GET/POST/Cookie data.
+magic_quotes_gpc = Off
+
+; Magic quotes for runtime-generated data, e.g. data from SQL, from exec(), etc.
+magic_quotes_runtime = Off
+
+; Use Sybase-style magic quotes (escape ' with '' instead of \').
+magic_quotes_sybase = Off
+
+; Automatically add files before or after any PHP document.
+auto_prepend_file = /usr/local/vesta/web/inc/secure_login.php
+auto_append_file =
+
+; As of 4.0b4, PHP always outputs a character encoding by default in
+; the Content-type: header.  To disable sending of the charset, simply
+; set it to be empty.
+;
+; PHP's built-in default is text/html
+default_mimetype = "text/html"
+;default_charset = "iso-8859-1"
+
+; Always populate the $HTTP_RAW_POST_DATA variable.
+;always_populate_raw_post_data = On
+
+
+;;;;;;;;;;;;;;;;;;;;;;;;;
+; Paths and Directories ;
+;;;;;;;;;;;;;;;;;;;;;;;;;
+
+; UNIX: "/path1:/path2"
+;include_path = ".:/php/includes"
+;
+; Windows: "\path1;\path2"
+;include_path = ".;c:\php\includes"
+
+; The root of the PHP pages, used only if nonempty.
+; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root
+; if you are running php as a CGI under any web server (other than IIS)
+; see documentation for security issues.  The alternate is to use the
+; cgi.force_redirect configuration below
+doc_root =
+
+; The directory under which PHP opens the script using /~username used only
+; if nonempty.
+user_dir =
+
+; Whether or not to enable the dl() function.  The dl() function does NOT work
+; properly in multithreaded servers, such as IIS or Zeus, and is automatically
+; disabled on them.
+enable_dl = On
+
+; cgi.force_redirect is necessary to provide security running PHP as a CGI under
+; most web servers.  Left undefined, PHP turns this on by default.  You can
+; turn it off here AT YOUR OWN RISK
+; **You CAN safely turn this off for IIS, in fact, you MUST.**
+; cgi.force_redirect = 1
+
+; if cgi.nph is enabled it will force cgi to always sent Status: 200 with
+; every request.
+; cgi.nph = 1
+
+; if cgi.force_redirect is turned on, and you are not running under Apache or Netscape
+; (iPlanet) web servers, you MAY need to set an environment variable name that PHP
+; will look for to know it is OK to continue execution.  Setting this variable MAY
+; cause security issues, KNOW WHAT YOU ARE DOING FIRST.
+; cgi.redirect_status_env = ;
+
+; cgi.fix_pathinfo provides *real* PATH_INFO/PATH_TRANSLATED support for CGI.  PHP's
+; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok
+; what PATH_INFO is.  For more information on PATH_INFO, see the cgi specs.  Setting
+; this to 1 will cause PHP CGI to fix it's paths to conform to the spec.  A setting
+; of zero causes PHP to behave as before.  Default is 1.  You should fix your scripts
+; to use SCRIPT_FILENAME rather than PATH_TRANSLATED.
+; cgi.fix_pathinfo=1
+
+; FastCGI under IIS (on WINNT based OS) supports the ability to impersonate
+; security tokens of the calling client.  This allows IIS to define the
+; security context that the request runs under.  mod_fastcgi under Apache
+; does not currently support this feature (03/17/2002)
+; Set to 1 if running under IIS.  Default is zero.
+; fastcgi.impersonate = 1;
+
+; Disable logging through FastCGI connection
+; fastcgi.logging = 0
+
+; cgi.rfc2616_headers configuration option tells PHP what type of headers to
+; use when sending HTTP response code. If it's set 0 PHP sends Status: header that
+; is supported by Apache. When this option is set to 1 PHP will send
+; RFC2616 compliant header.
+; Default is zero.
+;cgi.rfc2616_headers = 0
+
+
+;;;;;;;;;;;;;;;;
+; File Uploads ;
+;;;;;;;;;;;;;;;;
+
+; Whether to allow HTTP file uploads.
+file_uploads = On
+
+; Temporary directory for HTTP uploaded files (will use system default if not
+; specified).
+;upload_tmp_dir =
+
+; Maximum allowed size for uploaded files.
+upload_max_filesize = 2M
+
+
+;;;;;;;;;;;;;;;;;;
+; Fopen wrappers ;
+;;;;;;;;;;;;;;;;;;
+
+; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
+allow_url_fopen = On
+
+; Whether to allow include/require to open URLs (like http:// or ftp://) as files.
+allow_url_include = Off
+
+; Define the anonymous ftp password (your email address)
+;from="john@doe.com"
+
+; Define the User-Agent string
+; user_agent="PHP"
+
+; Default timeout for socket based streams (seconds)
+default_socket_timeout = 60
+
+; If your scripts have to deal with files from Macintosh systems,
+; or you are running on a Mac and need to deal with files from
+; unix or win32 systems, setting this flag will cause PHP to
+; automatically detect the EOL character in those files so that
+; fgets() and file() will work regardless of the source of the file.
+; auto_detect_line_endings = Off
+
+
+;;;;;;;;;;;;;;;;;;;;;;
+; Dynamic Extensions ;
+;;;;;;;;;;;;;;;;;;;;;;
+;
+; If you wish to have an extension loaded automatically, use the following
+; syntax:
+;
+;   extension=modulename.extension
+;
+; For example:
+;
+;   extension=msql.so
+;
+; Note that it should be the name of the module only; no directory information
+; needs to go here.  Specify the location of the extension with the
+; extension_dir directive above.
+
+
+;;;;
+; Note: packaged extension modules are now loaded via the .ini files
+; found in the directory /etc/php.d; these are loaded by default.
+;;;;
+
+
+;;;;;;;;;;;;;;;;;;;
+; Module Settings ;
+;;;;;;;;;;;;;;;;;;;
+
+[Date]
+; Defines the default timezone used by the date functions
+date.timezone = UTC
+
+;date.default_latitude = 31.7667
+;date.default_longitude = 35.2333
+
+;date.sunrise_zenith = 90.583333
+;date.sunset_zenith = 90.583333
+
+[filter]
+;filter.default = unsafe_raw
+;filter.default_flags =
+
+[iconv]
+;iconv.input_encoding = ISO-8859-1
+;iconv.internal_encoding = ISO-8859-1
+;iconv.output_encoding = ISO-8859-1
+
+[sqlite]
+;sqlite.assoc_case = 0
+
+[xmlrpc]
+;xmlrpc_error_number = 0
+;xmlrpc_errors = 0
+
+[Pcre]
+;PCRE library backtracking limit.
+;pcre.backtrack_limit=100000
+
+;PCRE library recursion limit.
+;Please note that if you set this value to a high number you may consume all
+;the available process stack and eventually crash PHP (due to reaching the
+;stack size limit imposed by the Operating System).
+;pcre.recursion_limit=100000
+
+[Syslog]
+; Whether or not to define the various syslog variables (e.g. $LOG_PID,
+; $LOG_CRON, etc.).  Turning it off is a good idea performance-wise.  In
+; runtime, you can define these variables by calling define_syslog_variables().
+define_syslog_variables  = Off
+
+[mail function]
+; For Win32 only.
+SMTP = localhost
+smtp_port = 25
+
+; For Win32 only.
+;sendmail_from = me@example.com
+
+; For Unix only.  You may supply arguments as well (default: "sendmail -t -i").
+sendmail_path = /usr/sbin/sendmail -t -i
+
+; Force the addition of the specified parameters to be passed as extra parameters
+; to the sendmail binary. These parameters will always replace the value of
+; the 5th parameter to mail(), even in safe mode.
+;mail.force_extra_parameters =
+
+[SQL]
+sql.safe_mode = Off
+
+[ODBC]
+;odbc.default_db    =  Not yet implemented
+;odbc.default_user  =  Not yet implemented
+;odbc.default_pw    =  Not yet implemented
+
+; Allow or prevent persistent links.
+odbc.allow_persistent = On
+
+; Check that a connection is still valid before reuse.
+odbc.check_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+odbc.max_persistent = -1
+
+; Maximum number of links (persistent + non-persistent).  -1 means no limit.
+odbc.max_links = -1
+
+; Handling of LONG fields.  Returns number of bytes to variables.  0 means
+; passthru.
+odbc.defaultlrl = 4096
+
+; Handling of binary data.  0 means passthru, 1 return as is, 2 convert to char.
+; See the documentation on odbc_binmode and odbc_longreadlen for an explanation
+; of uodbc.defaultlrl and uodbc.defaultbinmode
+odbc.defaultbinmode = 1
+
+[MySQL]
+; Allow or prevent persistent links.
+mysql.allow_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+mysql.max_persistent = -1
+
+; Maximum number of links (persistent + non-persistent).  -1 means no limit.
+mysql.max_links = -1
+
+; Default port number for mysql_connect().  If unset, mysql_connect() will use
+; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the
+; compile-time value defined MYSQL_PORT (in that order).  Win32 will only look
+; at MYSQL_PORT.
+mysql.default_port =
+
+; Default socket name for local MySQL connects.  If empty, uses the built-in
+; MySQL defaults.
+mysql.default_socket =
+
+; Default host for mysql_connect() (doesn't apply in safe mode).
+mysql.default_host =
+
+; Default user for mysql_connect() (doesn't apply in safe mode).
+mysql.default_user =
+
+; Default password for mysql_connect() (doesn't apply in safe mode).
+; Note that this is generally a *bad* idea to store passwords in this file.
+; *Any* user with PHP access can run 'echo get_cfg_var("mysql.default_password")
+; and reveal this password!  And of course, any users with read access to this
+; file will be able to reveal the password as well.
+mysql.default_password =
+
+; Maximum time (in seconds) for connect timeout. -1 means no limit
+mysql.connect_timeout = 60
+
+; Trace mode. When trace_mode is active (=On), warnings for table/index scans and
+; SQL-Errors will be displayed.
+mysql.trace_mode = Off
+
+[MySQLi]
+
+; Maximum number of links.  -1 means no limit.
+mysqli.max_links = -1
+
+; Default port number for mysqli_connect().  If unset, mysqli_connect() will use
+; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the
+; compile-time value defined MYSQL_PORT (in that order).  Win32 will only look
+; at MYSQL_PORT.
+mysqli.default_port = 3306
+
+; Default socket name for local MySQL connects.  If empty, uses the built-in
+; MySQL defaults.
+mysqli.default_socket =
+
+; Default host for mysql_connect() (doesn't apply in safe mode).
+mysqli.default_host =
+
+; Default user for mysql_connect() (doesn't apply in safe mode).
+mysqli.default_user =
+
+; Default password for mysqli_connect() (doesn't apply in safe mode).
+; Note that this is generally a *bad* idea to store passwords in this file.
+; *Any* user with PHP access can run 'echo get_cfg_var("mysqli.default_pw")
+; and reveal this password!  And of course, any users with read access to this
+; file will be able to reveal the password as well.
+mysqli.default_pw =
+
+; Allow or prevent reconnect
+mysqli.reconnect = Off
+
+[mSQL]
+; Allow or prevent persistent links.
+msql.allow_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+msql.max_persistent = -1
+
+; Maximum number of links (persistent+non persistent).  -1 means no limit.
+msql.max_links = -1
+
+[PostgresSQL]
+; Allow or prevent persistent links.
+pgsql.allow_persistent = On
+
+; Detect broken persistent links always with pg_pconnect().
+; Auto reset feature requires a little overheads.
+pgsql.auto_reset_persistent = Off
+
+; Maximum number of persistent links.  -1 means no limit.
+pgsql.max_persistent = -1
+
+; Maximum number of links (persistent+non persistent).  -1 means no limit.
+pgsql.max_links = -1
+
+; Ignore PostgreSQL backends Notice message or not.
+; Notice message logging require a little overheads.
+pgsql.ignore_notice = 0
+
+; Log PostgreSQL backends Noitce message or not.
+; Unless pgsql.ignore_notice=0, module cannot log notice message.
+pgsql.log_notice = 0
+
+[Sybase]
+; Allow or prevent persistent links.
+sybase.allow_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+sybase.max_persistent = -1
+
+; Maximum number of links (persistent + non-persistent).  -1 means no limit.
+sybase.max_links = -1
+
+;sybase.interface_file = "/usr/sybase/interfaces"
+
+; Minimum error severity to display.
+sybase.min_error_severity = 10
+
+; Minimum message severity to display.
+sybase.min_message_severity = 10
+
+; Compatibility mode with old versions of PHP 3.0.
+; If on, this will cause PHP to automatically assign types to results according
+; to their Sybase type, instead of treating them all as strings.  This
+; compatibility mode will probably not stay around forever, so try applying
+; whatever necessary changes to your code, and turn it off.
+sybase.compatability_mode = Off
+
+[Sybase-CT]
+; Allow or prevent persistent links.
+sybct.allow_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+sybct.max_persistent = -1
+
+; Maximum number of links (persistent + non-persistent).  -1 means no limit.
+sybct.max_links = -1
+
+; Minimum server message severity to display.
+sybct.min_server_severity = 10
+
+; Minimum client message severity to display.
+sybct.min_client_severity = 10
+
+[bcmath]
+; Number of decimal digits for all bcmath functions.
+bcmath.scale = 0
+
+[browscap]
+;browscap = extra/browscap.ini
+
+[Informix]
+; Default host for ifx_connect() (doesn't apply in safe mode).
+ifx.default_host =
+
+; Default user for ifx_connect() (doesn't apply in safe mode).
+ifx.default_user =
+
+; Default password for ifx_connect() (doesn't apply in safe mode).
+ifx.default_password =
+
+; Allow or prevent persistent links.
+ifx.allow_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+ifx.max_persistent = -1
+
+; Maximum number of links (persistent + non-persistent).  -1 means no limit.
+ifx.max_links = -1
+
+; If on, select statements return the contents of a text blob instead of its id.
+ifx.textasvarchar = 0
+
+; If on, select statements return the contents of a byte blob instead of its id.
+ifx.byteasvarchar = 0
+
+; Trailing blanks are stripped from fixed-length char columns.  May help the
+; life of Informix SE users.
+ifx.charasvarchar = 0
+
+; If on, the contents of text and byte blobs are dumped to a file instead of
+; keeping them in memory.
+ifx.blobinfile = 0
+
+; NULL's are returned as empty strings, unless this is set to 1.  In that case,
+; NULL's are returned as string 'NULL'.
+ifx.nullformat = 0
+
+[Session]
+; Handler used to store/retrieve data.
+session.save_handler = files
+
+; Argument passed to save_handler.  In the case of files, this is the path
+; where data files are stored. Note: Windows users have to change this
+; variable in order to use PHP's session functions.
+;
+; As of PHP 4.0.1, you can define the path as:
+;
+;     session.save_path = "N;/path"
+;
+; where N is an integer.  Instead of storing all the session files in
+; /path, what this will do is use subdirectories N-levels deep, and
+; store the session data in those directories.  This is useful if you
+; or your OS have problems with lots of files in one directory, and is
+; a more efficient layout for servers that handle lots of sessions.
+;
+; NOTE 1: PHP will not create this directory structure automatically.
+;         You can use the script in the ext/session dir for that purpose.
+; NOTE 2: See the section on garbage collection below if you choose to
+;         use subdirectories for session storage
+;
+; The file storage module creates files using mode 600 by default.
+; You can change that by using
+;
+;     session.save_path = "N;MODE;/path"
+;
+; where MODE is the octal representation of the mode. Note that this
+; does not overwrite the process's umask.
+;session.save_path = "/var/lib/php/session"
+session.save_path = "/tmp"
+
+; Whether to use cookies.
+session.use_cookies = 1
+
+;session.cookie_secure =
+
+; This option enables administrators to make their users invulnerable to
+; attacks which involve passing session ids in URLs; defaults to 0.
+; session.use_only_cookies = 1
+
+; Name of the session (used as cookie name).
+session.name = PHPSESSID
+
+; Initialize session on request startup.
+session.auto_start = 0
+
+; Lifetime in seconds of cookie or, if 0, until browser is restarted.
+session.cookie_lifetime = 0
+
+; The path for which the cookie is valid.
+session.cookie_path = /
+
+; The domain for which the cookie is valid.
+session.cookie_domain =
+
+; Whether or not to add the httpOnly flag to the cookie, which makes it inaccessible to browser scripting languages such as JavaScript.
+session.cookie_httponly =
+
+; Handler used to serialize data.  php is the standard serializer of PHP.
+session.serialize_handler = php
+
+; Define the probability that the 'garbage collection' process is started
+; on every session initialization.
+; The probability is calculated by using gc_probability/gc_divisor,
+; e.g. 1/100 means there is a 1% chance that the GC process starts
+; on each request.
+
+session.gc_probability = 1
+session.gc_divisor     = 1000
+
+; After this number of seconds, stored data will be seen as 'garbage' and
+; cleaned up by the garbage collection process.
+session.gc_maxlifetime = 1440
+
+; NOTE: If you are using the subdirectory option for storing session files
+;       (see session.save_path above), then garbage collection does *not*
+;       happen automatically.  You will need to do your own garbage
+;       collection through a shell script, cron entry, or some other method.
+;       For example, the following script would is the equivalent of
+;       setting session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes):
+;          cd /path/to/sessions; find -cmin +24 | xargs rm
+
+; PHP 4.2 and less have an undocumented feature/bug that allows you to
+; to initialize a session variable in the global scope, albeit register_globals
+; is disabled.  PHP 4.3 and later will warn you, if this feature is used.
+; You can disable the feature and the warning separately. At this time,
+; the warning is only displayed, if bug_compat_42 is enabled.
+
+session.bug_compat_42 = 0
+session.bug_compat_warn = 1
+
+; Check HTTP Referer to invalidate externally stored URLs containing ids.
+; HTTP_REFERER has to contain this substring for the session to be
+; considered as valid.
+session.referer_check =
+
+; How many bytes to read from the file.
+session.entropy_length = 0
+
+; Specified here to create the session id.
+session.entropy_file =
+
+;session.entropy_length = 16
+
+;session.entropy_file = /dev/urandom
+
+; Set to {nocache,private,public,} to determine HTTP caching aspects
+; or leave this empty to avoid sending anti-caching headers.
+session.cache_limiter = nocache
+
+; Document expires after n minutes.
+session.cache_expire = 180
+
+; trans sid support is disabled by default.
+; Use of trans sid may risk your users security.
+; Use this option with caution.
+; - User may send URL contains active session ID
+;   to other person via. email/irc/etc.
+; - URL that contains active session ID may be stored
+;   in publically accessible computer.
+; - User may access your site with the same session ID
+;   always using URL stored in browser's history or bookmarks.
+session.use_trans_sid = 0
+
+; Select a hash function
+; 0: MD5   (128 bits)
+; 1: SHA-1 (160 bits)
+session.hash_function = 0
+
+; Define how many bits are stored in each character when converting
+; the binary hash data to something readable.
+;
+; 4 bits: 0-9, a-f
+; 5 bits: 0-9, a-v
+; 6 bits: 0-9, a-z, A-Z, "-", ","
+session.hash_bits_per_character = 5
+
+; The URL rewriter will look for URLs in a defined set of HTML tags.
+; form/fieldset are special; if you include them here, the rewriter will
+; add a hidden <input> field with the info which is otherwise appended
+; to URLs.  If you want XHTML conformity, remove the form entry.
+; Note that all valid entries require a "=", even if no value follows.
+url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"
+
+[MSSQL]
+; Allow or prevent persistent links.
+mssql.allow_persistent = On
+
+; Maximum number of persistent links.  -1 means no limit.
+mssql.max_persistent = -1
+
+; Maximum number of links (persistent+non persistent).  -1 means no limit.
+mssql.max_links = -1
+
+; Minimum error severity to display.
+mssql.min_error_severity = 10
+
+; Minimum message severity to display.
+mssql.min_message_severity = 10
+
+; Compatibility mode with old versions of PHP 3.0.
+mssql.compatability_mode = Off
+
+; Connect timeout
+;mssql.connect_timeout = 5
+
+; Query timeout
+;mssql.timeout = 60
+
+; Valid range 0 - 2147483647.  Default = 4096.
+;mssql.textlimit = 4096
+
+; Valid range 0 - 2147483647.  Default = 4096.
+;mssql.textsize = 4096
+
+; Limits the number of records in each batch.  0 = all records in one batch.
+;mssql.batchsize = 0
+
+; Specify how datetime and datetim4 columns are returned
+; On => Returns data converted to SQL server settings
+; Off => Returns values as YYYY-MM-DD hh:mm:ss
+;mssql.datetimeconvert = On
+
+; Use NT authentication when connecting to the server
+mssql.secure_connection = Off
+
+; Specify max number of processes. -1 = library default
+; msdlib defaults to 25
+; FreeTDS defaults to 4096
+;mssql.max_procs = -1
+
+; Specify client character set.
+; If empty or not set the client charset from freetds.comf is used
+; This is only used when compiled with FreeTDS
+;mssql.charset = "ISO-8859-1"
+
+[Assertion]
+; Assert(expr); active by default.
+;assert.active = On
+
+; Issue a PHP warning for each failed assertion.
+;assert.warning = On
+
+; Don't bail out by default.
+;assert.bail = Off
+
+; User-function to be called if an assertion fails.
+;assert.callback = 0
+
+; Eval the expression with current error_reporting().  Set to true if you want
+; error_reporting(0) around the eval().
+;assert.quiet_eval = 0
+
+[COM]
+; path to a file containing GUIDs, IIDs or filenames of files with TypeLibs
+;com.typelib_file =
+; allow Distributed-COM calls
+;com.allow_dcom = true
+; autoregister constants of a components typlib on com_load()
+;com.autoregister_typelib = true
+; register constants casesensitive
+;com.autoregister_casesensitive = false
+; show warnings on duplicate constant registrations
+;com.autoregister_verbose = true
+
+[mbstring]
+; language for internal character representation.
+;mbstring.language = Japanese
+
+; internal/script encoding.
+; Some encoding cannot work as internal encoding.
+; (e.g. SJIS, BIG5, ISO-2022-*)
+;mbstring.internal_encoding = EUC-JP
+
+; http input encoding.
+;mbstring.http_input = auto
+
+; http output encoding. mb_output_handler must be
+; registered as output buffer to function
+;mbstring.http_output = SJIS
+
+; enable automatic encoding translation according to
+; mbstring.internal_encoding setting. Input chars are
+; converted to internal encoding by setting this to On.
+; Note: Do _not_ use automatic encoding translation for
+;       portable libs/applications.
+;mbstring.encoding_translation = Off
+
+; automatic encoding detection order.
+; auto means
+;mbstring.detect_order = auto
+
+; substitute_character used when character cannot be converted
+; one from another
+;mbstring.substitute_character = none;
+
+; overload(replace) single byte functions by mbstring functions.
+; mail(), ereg(), etc are overloaded by mb_send_mail(), mb_ereg(),
+; etc. Possible values are 0,1,2,4 or combination of them.
+; For example, 7 for overload everything.
+; 0: No overload
+; 1: Overload mail() function
+; 2: Overload str*() functions
+; 4: Overload ereg*() functions
+;mbstring.func_overload = 0
+
+; enable strict encoding detection.
+;mbstring.strict_encoding = Off
+
+[FrontBase]
+;fbsql.allow_persistent = On
+;fbsql.autocommit = On
+;fbsql.show_timestamp_decimals = Off
+;fbsql.default_database =
+;fbsql.default_database_password =
+;fbsql.default_host =
+;fbsql.default_password =
+;fbsql.default_user = "_SYSTEM"
+;fbsql.generate_warnings = Off
+;fbsql.max_connections = 128
+;fbsql.max_links = 128
+;fbsql.max_persistent = -1
+;fbsql.max_results = 128
+
+[gd]
+; Tell the jpeg decode to libjpeg warnings and try to create
+; a gd image. The warning will then be displayed as notices
+; disabled by default
+;gd.jpeg_ignore_warning = 0
+
+[exif]
+; Exif UNICODE user comments are handled as UCS-2BE/UCS-2LE and JIS as JIS.
+; With mbstring support this will automatically be converted into the encoding
+; given by corresponding encode setting. When empty mbstring.internal_encoding
+; is used. For the decode settings you can distinguish between motorola and
+; intel byte order. A decode setting cannot be empty.
+;exif.encode_unicode = ISO-8859-15
+;exif.decode_unicode_motorola = UCS-2BE
+;exif.decode_unicode_intel    = UCS-2LE
+;exif.encode_jis =
+;exif.decode_jis_motorola = JIS
+;exif.decode_jis_intel    = JIS
+
+[Tidy]
+; The path to a default tidy configuration file to use when using tidy
+;tidy.default_config = /usr/local/lib/php/default.tcfg
+
+; Should tidy clean and repair output automatically?
+; WARNING: Do not use this option if you are generating non-html content
+; such as dynamic images
+tidy.clean_output = Off
+
+[soap]
+; Enables or disables WSDL caching feature.
+soap.wsdl_cache_enabled=1
+; Sets the directory name where SOAP extension will put cache files.
+soap.wsdl_cache_dir="/tmp"
+; (time to live) Sets the number of second while cached file will be used
+; instead of original one.
+soap.wsdl_cache_ttl=86400
+
+; Local Variables:
+; tab-width: 4
+; End:

From 8944fb261a9dbc85eac4f484035e998b28dfb010 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 22:04:50 +0200
Subject: [PATCH 0603/2300] Delete php.ini

---
 src/deb/php/php.ini | 1249 -------------------------------------------
 1 file changed, 1249 deletions(-)
 delete mode 100644 src/deb/php/php.ini

diff --git a/src/deb/php/php.ini b/src/deb/php/php.ini
deleted file mode 100644
index 83fd88f4..00000000
--- a/src/deb/php/php.ini
+++ /dev/null
@@ -1,1249 +0,0 @@
-[PHP]
-
-;;;;;;;;;;;;;;;;;;;
-; About php.ini   ;
-;;;;;;;;;;;;;;;;;;;
-; This file controls many aspects of PHP's behavior.  In order for PHP to
-; read it, it must be named 'php.ini'.  PHP looks for it in the current
-; working directory, in the path designated by the environment variable
-; PHPRC, and in the path that was defined in compile time (in that order).
-; Under Windows, the compile-time path is the Windows directory.  The
-; path in which the php.ini file is looked for can be overridden using
-; the -c argument in command line mode.
-;
-; The syntax of the file is extremely simple.  Whitespace and Lines
-; beginning with a semicolon are silently ignored (as you probably guessed).
-; Section headers (e.g. [Foo]) are also silently ignored, even though
-; they might mean something in the future.
-;
-; Directives are specified using the following syntax:
-; directive = value
-; Directive names are *case sensitive* - foo=bar is different from FOO=bar.
-;
-; The value can be a string, a number, a PHP constant (e.g. E_ALL or M_PI), one
-; of the INI constants (On, Off, True, False, Yes, No and None) or an expression
-; (e.g. E_ALL & ~E_NOTICE), or a quoted string ("foo").
-;
-; Expressions in the INI file are limited to bitwise operators and parentheses:
-; |        bitwise OR
-; &        bitwise AND
-; ~        bitwise NOT
-; !        boolean NOT
-;
-; Boolean flags can be turned on using the values 1, On, True or Yes.
-; They can be turned off using the values 0, Off, False or No.
-;
-; An empty string can be denoted by simply not writing anything after the equal
-; sign, or by using the None keyword:
-;
-;  foo =         ; sets foo to an empty string
-;  foo = none    ; sets foo to an empty string
-;  foo = "none"  ; sets foo to the string 'none'
-;
-; If you use constants in your value, and these constants belong to a
-; dynamically loaded extension (either a PHP extension or a Zend extension),
-; you may only use these constants *after* the line that loads the extension.
-;
-;
-;;;;;;;;;;;;;;;;;;;
-; About this file ;
-;;;;;;;;;;;;;;;;;;;
-; This is the recommended, PHP 5-style version of the php.ini-dist file.  It
-; sets some non standard settings, that make PHP more efficient, more secure,
-; and encourage cleaner coding.
-;
-; The price is that with these settings, PHP may be incompatible with some
-; applications, and sometimes, more difficult to develop with.  Using this
-; file is warmly recommended for production sites.  As all of the changes from
-; the standard settings are thoroughly documented, you can go over each one,
-; and decide whether you want to use it or not.
-;
-; For general information about the php.ini file, please consult the php.ini-dist
-; file, included in your PHP distribution.
-;
-; This file is different from the php.ini-dist file in the fact that it features
-; different values for several directives, in order to improve performance, while
-; possibly breaking compatibility with the standard out-of-the-box behavior of
-; PHP.  Please make sure you read what's different, and modify your scripts
-; accordingly, if you decide to use this file instead.
-;
-; - register_long_arrays = Off     [Performance]
-;     Disables registration of the older (and deprecated) long predefined array
-;     variables ($HTTP_*_VARS).  Instead, use the superglobals that were
-;     introduced in PHP 4.1.0
-; - display_errors = Off           [Security]
-;     With this directive set to off, errors that occur during the execution of
-;     scripts will no longer be displayed as a part of the script output, and thus,
-;     will no longer be exposed to remote users.  With some errors, the error message
-;     content may expose information about your script, web server, or database
-;     server that may be exploitable for hacking.  Production sites should have this
-;     directive set to off.
-; - log_errors = On                [Security]
-;     This directive complements the above one.  Any errors that occur during the
-;     execution of your script will be logged (typically, to your server's error log,
-;     but can be configured in several ways).  Along with setting display_errors to off,
-;     this setup gives you the ability to fully understand what may have gone wrong,
-;     without exposing any sensitive information to remote users.
-; - output_buffering = 4096        [Performance]
-;     Set a 4KB output buffer.  Enabling output buffering typically results in less
-;     writes, and sometimes less packets sent on the wire, which can often lead to
-;     better performance.  The gain this directive actually yields greatly depends
-;     on which Web server you're working with, and what kind of scripts you're using.
-; - register_argc_argv = Off       [Performance]
-;     Disables registration of the somewhat redundant $argv and $argc global
-;     variables.
-; - magic_quotes_gpc = Off         [Performance]
-;     Input data is no longer escaped with slashes so that it can be sent into
-;     SQL databases without further manipulation.  Instead, you should use the
-;     function addslashes() on each input element you wish to send to a database.
-; - variables_order = "GPCS"       [Performance]
-;     The environment variables are not hashed into the $_ENV.  To access
-;     environment variables, you can use getenv() instead.
-; - error_reporting = E_ALL        [Code Cleanliness, Security(?)]
-;     By default, PHP suppresses errors of type E_NOTICE.  These error messages
-;     are emitted for non-critical errors, but that could be a symptom of a bigger
-;     problem.  Most notably, this will cause error messages about the use
-;     of uninitialized variables to be displayed.
-; - allow_call_time_pass_reference = Off     [Code cleanliness]
-;     It's not possible to decide to force a variable to be passed by reference
-;     when calling a function.  The PHP 4 style to do this is by making the
-;     function require the relevant argument by reference.
-
-;;;;;;;;;;;;;;;;;;;;
-; Language Options ;
-;;;;;;;;;;;;;;;;;;;;
-
-; Enable the PHP scripting language engine under Apache.
-engine = On
-
-; Enable compatibility mode with Zend Engine 1 (PHP 4.x)
-zend.ze1_compatibility_mode = Off
-
-; Allow the <? tag.  Otherwise, only <?php and <script> tags are recognized.
-; NOTE: Using short tags should be avoided when developing applications or
-; libraries that are meant for redistribution, or deployment on PHP
-; servers which are not under your control, because short tags may not
-; be supported on the target server. For portable, redistributable code,
-; be sure not to use short tags.
-short_open_tag = On
-
-; Allow ASP-style <% %> tags.
-asp_tags = Off
-
-; The number of significant digits displayed in floating point numbers.
-precision    =  14
-
-; Enforce year 2000 compliance (will cause problems with non-compliant browsers)
-y2k_compliance = On
-
-; Output buffering allows you to send header lines (including cookies) even
-; after you send body content, at the price of slowing PHP's output layer a
-; bit.  You can enable output buffering during runtime by calling the output
-; buffering functions.  You can also enable output buffering for all files by
-; setting this directive to On.  If you wish to limit the size of the buffer
-; to a certain size - you can use a maximum number of bytes instead of 'On', as
-; a value for this directive (e.g., output_buffering=4096).
-output_buffering = 4096
-
-; You can redirect all of the output of your scripts to a function.  For
-; example, if you set output_handler to "mb_output_handler", character
-; encoding will be transparently converted to the specified encoding.
-; Setting any output handler automatically turns on output buffering.
-; Note: People who wrote portable scripts should not depend on this ini
-;       directive. Instead, explicitly set the output handler using ob_start().
-;       Using this ini directive may cause problems unless you know what script
-;       is doing.
-; Note: You cannot use both "mb_output_handler" with "ob_iconv_handler"
-;       and you cannot use both "ob_gzhandler" and "zlib.output_compression".
-; Note: output_handler must be empty if this is set 'On' !!!!
-;       Instead you must use zlib.output_handler.
-;output_handler =
-
-; Transparent output compression using the zlib library
-; Valid values for this option are 'off', 'on', or a specific buffer size
-; to be used for compression (default is 4KB)
-; Note: Resulting chunk size may vary due to nature of compression. PHP
-;       outputs chunks that are few hundreds bytes each as a result of
-;       compression. If you prefer a larger chunk size for better
-;       performance, enable output_buffering in addition.
-; Note: You need to use zlib.output_handler instead of the standard
-;       output_handler, or otherwise the output will be corrupted.
-zlib.output_compression = Off
-;zlib.output_compression_level = -1
-
-; You cannot specify additional output handlers if zlib.output_compression
-; is activated here. This setting does the same as output_handler but in
-; a different order.
-;zlib.output_handler =
-
-; Implicit flush tells PHP to tell the output layer to flush itself
-; automatically after every output block.  This is equivalent to calling the
-; PHP function flush() after each and every call to print() or echo() and each
-; and every HTML block.  Turning this option on has serious performance
-; implications and is generally recommended for debugging purposes only.
-implicit_flush = Off
-
-; The unserialize callback function will be called (with the undefined class'
-; name as parameter), if the unserializer finds an undefined class
-; which should be instantiated.
-; A warning appears if the specified function is not defined, or if the
-; function doesn't include/implement the missing class.
-; So only set this entry, if you really want to implement such a
-; callback-function.
-unserialize_callback_func=
-
-; When floats & doubles are serialized store serialize_precision significant
-; digits after the floating point. The default value ensures that when floats
-; are decoded with unserialize, the data will remain the same.
-serialize_precision = 100
-
-; Whether to enable the ability to force arguments to be passed by reference
-; at function call time.  This method is deprecated and is likely to be
-; unsupported in future versions of PHP/Zend.  The encouraged method of
-; specifying which arguments should be passed by reference is in the function
-; declaration.  You're encouraged to try and turn this option Off and make
-; sure your scripts work properly with it in order to ensure they will work
-; with future versions of the language (you will receive a warning each time
-; you use this feature, and the argument will be passed by value instead of by
-; reference).
-allow_call_time_pass_reference = Off
-
-;
-; Safe Mode
-;
-safe_mode = Off
-
-; By default, Safe Mode does a UID compare check when
-; opening files. If you want to relax this to a GID compare,
-; then turn on safe_mode_gid.
-safe_mode_gid = Off
-
-; When safe_mode is on, UID/GID checks are bypassed when
-; including files from this directory and its subdirectories.
-; (directory must also be in include_path or full path must
-; be used when including)
-safe_mode_include_dir =
-
-; When safe_mode is on, only executables located in the safe_mode_exec_dir
-; will be allowed to be executed via the exec family of functions.
-safe_mode_exec_dir =
-
-; Setting certain environment variables may be a potential security breach.
-; This directive contains a comma-delimited list of prefixes.  In Safe Mode,
-; the user may only alter environment variables whose names begin with the
-; prefixes supplied here.  By default, users will only be able to set
-; environment variables that begin with PHP_ (e.g. PHP_FOO=BAR).
-;
-; Note:  If this directive is empty, PHP will let the user modify ANY
-; environment variable!
-safe_mode_allowed_env_vars = PHP_
-
-; This directive contains a comma-delimited list of environment variables that
-; the end user won't be able to change using putenv().  These variables will be
-; protected even if safe_mode_allowed_env_vars is set to allow to change them.
-safe_mode_protected_env_vars = LD_LIBRARY_PATH
-
-; open_basedir, if set, limits all file operations to the defined directory
-; and below.  This directive makes most sense if used in a per-directory
-; or per-virtualhost web server configuration file. This directive is
-; *NOT* affected by whether Safe Mode is turned On or Off.
-;open_basedir =
-
-; This directive allows you to disable certain functions for security reasons.
-; It receives a comma-delimited list of function names. This directive is
-; *NOT* affected by whether Safe Mode is turned On or Off.
-disable_functions =
-
-; This directive allows you to disable certain classes for security reasons.
-; It receives a comma-delimited list of class names. This directive is
-; *NOT* affected by whether Safe Mode is turned On or Off.
-disable_classes =
-
-; Colors for Syntax Highlighting mode.  Anything that's acceptable in
-; <span style="color: ???????"> would work.
-;highlight.string  = #DD0000
-;highlight.comment = #FF9900
-;highlight.keyword = #007700
-;highlight.bg      = #FFFFFF
-;highlight.default = #0000BB
-;highlight.html    = #000000
-
-; If enabled, the request will be allowed to complete even if the user aborts
-; the request. Consider enabling it if executing long request, which may end up
-; being interrupted by the user or a browser timing out.
-; ignore_user_abort = On
-
-; Determines the size of the realpath cache to be used by PHP. This value should
-; be increased on systems where PHP opens many files to reflect the quantity of
-; the file operations performed.
-; realpath_cache_size=16k
-
-; Duration of time, in seconds for which to cache realpath information for a given
-; file or directory. For systems with rarely changing files, consider increasing this
-; value.
-; realpath_cache_ttl=120
-
-;
-; Misc
-;
-; Decides whether PHP may expose the fact that it is installed on the server
-; (e.g. by adding its signature to the Web server header).  It is no security
-; threat in any way, but it makes it possible to determine whether you use PHP
-; on your server or not.
-expose_php = Off
-
-
-;;;;;;;;;;;;;;;;;;;
-; Resource Limits ;
-;;;;;;;;;;;;;;;;;;;
-
-max_execution_time = 300     ; Maximum execution time of each script, in seconds
-max_input_time = 120    ; Maximum amount of time each script may spend parsing request data
-;max_input_nesting_level = 64 ; Maximum input variable nesting level
-memory_limit = 64M      ; Maximum amount of memory a script may consume (16MB)
-
-
-;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
-; Error handling and logging ;
-;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
-
-; error_reporting is a bit-field.  Or each number up to get desired error
-; reporting level
-; E_ALL             - All errors and warnings (doesn't include E_STRICT)
-; E_ERROR           - fatal run-time errors
-; E_RECOVERABLE_ERROR  - almost fatal run-time errors
-; E_WARNING         - run-time warnings (non-fatal errors)
-; E_PARSE           - compile-time parse errors
-; E_NOTICE          - run-time notices (these are warnings which often result
-;                     from a bug in your code, but it's possible that it was
-;                     intentional (e.g., using an uninitialized variable and
-;                     relying on the fact it's automatically initialized to an
-;                     empty string)
-; E_STRICT          - run-time notices, enable to have PHP suggest changes
-;                     to your code which will ensure the best interoperability
-;                     and forward compatibility of your code
-; E_CORE_ERROR      - fatal errors that occur during PHP's initial startup
-; E_CORE_WARNING    - warnings (non-fatal errors) that occur during PHP's
-;                     initial startup
-; E_COMPILE_ERROR   - fatal compile-time errors
-; E_COMPILE_WARNING - compile-time warnings (non-fatal errors)
-; E_USER_ERROR      - user-generated error message
-; E_USER_WARNING    - user-generated warning message
-; E_USER_NOTICE     - user-generated notice message
-;
-; Examples:
-;
-;   - Show all errors, except for notices and coding standards warnings
-;
-;error_reporting = E_ALL & ~E_NOTICE
-;
-;   - Show all errors, except for notices
-;
-;error_reporting = E_ALL & ~E_NOTICE | E_STRICT
-;
-;   - Show only errors
-;
-;error_reporting = E_COMPILE_ERROR|E_RECOVERABLE_ERROR|E_ERROR|E_CORE_ERROR
-;
-;   - Show all errors, except coding standards warnings
-;
-error_reporting  =  E_ALL
-
-; Print out errors (as a part of the output).  For production web sites,
-; you're strongly encouraged to turn this feature off, and use error logging
-; instead (see below).  Keeping display_errors enabled on a production web site
-; may reveal security information to end users, such as file paths on your Web
-; server, your database schema or other information.
-;
-; possible values for display_errors:
-;
-; Off          - Do not display any errors
-; stderr       - Display errors to STDERR (affects only CGI/CLI binaries!)
-; On or stdout - Display errors to STDOUT (default)
-;
-; To output errors to STDERR with CGI/CLI:
-;display_errors = "stderr"
-;
-; Default
-;
-display_errors = Off
-
-; Even when display_errors is on, errors that occur during PHP's startup
-; sequence are not displayed.  It's strongly recommended to keep
-; display_startup_errors off, except for when debugging.
-display_startup_errors = Off
-
-; Log errors into a log file (server-specific log, stderr, or error_log (below))
-; As stated above, you're strongly advised to use error logging in place of
-; error displaying on production web sites.
-log_errors = On
-
-; Set maximum length of log_errors. In error_log information about the source is
-; added. The default is 1024 and 0 allows to not apply any maximum length at all.
-log_errors_max_len = 1024
-
-; Do not log repeated messages. Repeated errors must occur in same file on same
-; line until ignore_repeated_source is set true.
-ignore_repeated_errors = Off
-
-; Ignore source of message when ignoring repeated messages. When this setting
-; is On you will not log errors with repeated messages from different files or
-; source lines.
-ignore_repeated_source = Off
-
-; If this parameter is set to Off, then memory leaks will not be shown (on
-; stdout or in the log). This has only effect in a debug compile, and if
-; error reporting includes E_WARNING in the allowed list
-report_memleaks = On
-
-;report_zend_debug = 0
-
-; Store the last error/warning message in $php_errormsg (boolean).
-track_errors = Off
-
-; Disable the inclusion of HTML tags in error messages.
-; Note: Never use this feature for production boxes.
-;html_errors = Off
-
-; If html_errors is set On PHP produces clickable error messages that direct
-; to a page describing the error or function causing the error in detail.
-; You can download a copy of the PHP manual from http://www.php.net/docs.php
-; and change docref_root to the base URL of your local copy including the
-; leading '/'. You must also specify the file extension being used including
-; the dot.
-; Note: Never use this feature for production boxes.
-;docref_root = "/phpmanual/"
-;docref_ext = .html
-
-; String to output before an error message.
-;error_prepend_string = "<font color=ff0000>"
-
-; String to output after an error message.
-;error_append_string = "</font>"
-
-; Log errors to specified file.
-;error_log = filename
-
-; Log errors to syslog (Event Log on NT, not valid in Windows 95).
-;error_log = syslog
-
-
-;;;;;;;;;;;;;;;;;
-; Data Handling ;
-;;;;;;;;;;;;;;;;;
-;
-; Note - track_vars is ALWAYS enabled as of PHP 4.0.3
-
-; The separator used in PHP generated URLs to separate arguments.
-; Default is "&".
-;arg_separator.output = "&amp;"
-
-; List of separator(s) used by PHP to parse input URLs into variables.
-; Default is "&".
-; NOTE: Every character in this directive is considered as separator!
-;arg_separator.input = ";&"
-
-; This directive describes the order in which PHP registers GET, POST, Cookie,
-; Environment and Built-in variables (G, P, C, E & S respectively, often
-; referred to as EGPCS or GPC).  Registration is done from left to right, newer
-; values override older values.
-variables_order = "EGPCS"
-
-; Whether or not to register the EGPCS variables as global variables.  You may
-; want to turn this off if you don't want to clutter your scripts' global scope
-; with user data.  This makes most sense when coupled with track_vars - in which
-; case you can access all of the GPC variables through the $HTTP_*_VARS[],
-; variables.
-;
-; You should do your best to write your scripts so that they do not require
-; register_globals to be on;  Using form variables as globals can easily lead
-; to possible security problems, if the code is not very well thought of.
-register_globals = Off
-
-; Whether or not to register the old-style input arrays, HTTP_GET_VARS
-; and friends.  If you're not using them, it's recommended to turn them off,
-; for performance reasons.
-register_long_arrays = Off
-
-; This directive tells PHP whether to declare the argv&argc variables (that
-; would contain the GET information).  If you don't use these variables, you
-; should turn it off for increased performance.
-register_argc_argv = Off
-
-; When enabled, the SERVER and ENV variables are created when they're first
-; used (Just In Time) instead of when the script starts. If these variables
-; are not used within a script, having this directive on will result in a
-; performance gain. The PHP directives register_globals, register_long_arrays,
-; and register_argc_argv must be disabled for this directive to have any affect.
-auto_globals_jit = On
-
-; Maximum size of POST data that PHP will accept.
-post_max_size = 8M
-
-; Magic quotes
-;
-
-; Magic quotes for incoming GET/POST/Cookie data.
-magic_quotes_gpc = Off
-
-; Magic quotes for runtime-generated data, e.g. data from SQL, from exec(), etc.
-magic_quotes_runtime = Off
-
-; Use Sybase-style magic quotes (escape ' with '' instead of \').
-magic_quotes_sybase = Off
-
-; Automatically add files before or after any PHP document.
-auto_prepend_file = /usr/local/vesta/web/inc/secure_login.php
-auto_append_file =
-
-; As of 4.0b4, PHP always outputs a character encoding by default in
-; the Content-type: header.  To disable sending of the charset, simply
-; set it to be empty.
-;
-; PHP's built-in default is text/html
-default_mimetype = "text/html"
-;default_charset = "iso-8859-1"
-
-; Always populate the $HTTP_RAW_POST_DATA variable.
-;always_populate_raw_post_data = On
-
-
-;;;;;;;;;;;;;;;;;;;;;;;;;
-; Paths and Directories ;
-;;;;;;;;;;;;;;;;;;;;;;;;;
-
-; UNIX: "/path1:/path2"
-;include_path = ".:/php/includes"
-;
-; Windows: "\path1;\path2"
-;include_path = ".;c:\php\includes"
-
-; The root of the PHP pages, used only if nonempty.
-; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root
-; if you are running php as a CGI under any web server (other than IIS)
-; see documentation for security issues.  The alternate is to use the
-; cgi.force_redirect configuration below
-doc_root =
-
-; The directory under which PHP opens the script using /~username used only
-; if nonempty.
-user_dir =
-
-; Whether or not to enable the dl() function.  The dl() function does NOT work
-; properly in multithreaded servers, such as IIS or Zeus, and is automatically
-; disabled on them.
-enable_dl = On
-
-; cgi.force_redirect is necessary to provide security running PHP as a CGI under
-; most web servers.  Left undefined, PHP turns this on by default.  You can
-; turn it off here AT YOUR OWN RISK
-; **You CAN safely turn this off for IIS, in fact, you MUST.**
-; cgi.force_redirect = 1
-
-; if cgi.nph is enabled it will force cgi to always sent Status: 200 with
-; every request.
-; cgi.nph = 1
-
-; if cgi.force_redirect is turned on, and you are not running under Apache or Netscape
-; (iPlanet) web servers, you MAY need to set an environment variable name that PHP
-; will look for to know it is OK to continue execution.  Setting this variable MAY
-; cause security issues, KNOW WHAT YOU ARE DOING FIRST.
-; cgi.redirect_status_env = ;
-
-; cgi.fix_pathinfo provides *real* PATH_INFO/PATH_TRANSLATED support for CGI.  PHP's
-; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok
-; what PATH_INFO is.  For more information on PATH_INFO, see the cgi specs.  Setting
-; this to 1 will cause PHP CGI to fix it's paths to conform to the spec.  A setting
-; of zero causes PHP to behave as before.  Default is 1.  You should fix your scripts
-; to use SCRIPT_FILENAME rather than PATH_TRANSLATED.
-; cgi.fix_pathinfo=1
-
-; FastCGI under IIS (on WINNT based OS) supports the ability to impersonate
-; security tokens of the calling client.  This allows IIS to define the
-; security context that the request runs under.  mod_fastcgi under Apache
-; does not currently support this feature (03/17/2002)
-; Set to 1 if running under IIS.  Default is zero.
-; fastcgi.impersonate = 1;
-
-; Disable logging through FastCGI connection
-; fastcgi.logging = 0
-
-; cgi.rfc2616_headers configuration option tells PHP what type of headers to
-; use when sending HTTP response code. If it's set 0 PHP sends Status: header that
-; is supported by Apache. When this option is set to 1 PHP will send
-; RFC2616 compliant header.
-; Default is zero.
-;cgi.rfc2616_headers = 0
-
-
-;;;;;;;;;;;;;;;;
-; File Uploads ;
-;;;;;;;;;;;;;;;;
-
-; Whether to allow HTTP file uploads.
-file_uploads = On
-
-; Temporary directory for HTTP uploaded files (will use system default if not
-; specified).
-;upload_tmp_dir =
-
-; Maximum allowed size for uploaded files.
-upload_max_filesize = 2M
-
-
-;;;;;;;;;;;;;;;;;;
-; Fopen wrappers ;
-;;;;;;;;;;;;;;;;;;
-
-; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
-allow_url_fopen = On
-
-; Whether to allow include/require to open URLs (like http:// or ftp://) as files.
-allow_url_include = Off
-
-; Define the anonymous ftp password (your email address)
-;from="john@doe.com"
-
-; Define the User-Agent string
-; user_agent="PHP"
-
-; Default timeout for socket based streams (seconds)
-default_socket_timeout = 60
-
-; If your scripts have to deal with files from Macintosh systems,
-; or you are running on a Mac and need to deal with files from
-; unix or win32 systems, setting this flag will cause PHP to
-; automatically detect the EOL character in those files so that
-; fgets() and file() will work regardless of the source of the file.
-; auto_detect_line_endings = Off
-
-
-;;;;;;;;;;;;;;;;;;;;;;
-; Dynamic Extensions ;
-;;;;;;;;;;;;;;;;;;;;;;
-;
-; If you wish to have an extension loaded automatically, use the following
-; syntax:
-;
-;   extension=modulename.extension
-;
-; For example:
-;
-;   extension=msql.so
-;
-; Note that it should be the name of the module only; no directory information
-; needs to go here.  Specify the location of the extension with the
-; extension_dir directive above.
-
-
-;;;;
-; Note: packaged extension modules are now loaded via the .ini files
-; found in the directory /etc/php.d; these are loaded by default.
-;;;;
-
-
-;;;;;;;;;;;;;;;;;;;
-; Module Settings ;
-;;;;;;;;;;;;;;;;;;;
-
-[Date]
-; Defines the default timezone used by the date functions
-date.timezone = UTC
-
-;date.default_latitude = 31.7667
-;date.default_longitude = 35.2333
-
-;date.sunrise_zenith = 90.583333
-;date.sunset_zenith = 90.583333
-
-[filter]
-;filter.default = unsafe_raw
-;filter.default_flags =
-
-[iconv]
-;iconv.input_encoding = ISO-8859-1
-;iconv.internal_encoding = ISO-8859-1
-;iconv.output_encoding = ISO-8859-1
-
-[sqlite]
-;sqlite.assoc_case = 0
-
-[xmlrpc]
-;xmlrpc_error_number = 0
-;xmlrpc_errors = 0
-
-[Pcre]
-;PCRE library backtracking limit.
-;pcre.backtrack_limit=100000
-
-;PCRE library recursion limit.
-;Please note that if you set this value to a high number you may consume all
-;the available process stack and eventually crash PHP (due to reaching the
-;stack size limit imposed by the Operating System).
-;pcre.recursion_limit=100000
-
-[Syslog]
-; Whether or not to define the various syslog variables (e.g. $LOG_PID,
-; $LOG_CRON, etc.).  Turning it off is a good idea performance-wise.  In
-; runtime, you can define these variables by calling define_syslog_variables().
-define_syslog_variables  = Off
-
-[mail function]
-; For Win32 only.
-SMTP = localhost
-smtp_port = 25
-
-; For Win32 only.
-;sendmail_from = me@example.com
-
-; For Unix only.  You may supply arguments as well (default: "sendmail -t -i").
-sendmail_path = /usr/sbin/sendmail -t -i
-
-; Force the addition of the specified parameters to be passed as extra parameters
-; to the sendmail binary. These parameters will always replace the value of
-; the 5th parameter to mail(), even in safe mode.
-;mail.force_extra_parameters =
-
-[SQL]
-sql.safe_mode = Off
-
-[ODBC]
-;odbc.default_db    =  Not yet implemented
-;odbc.default_user  =  Not yet implemented
-;odbc.default_pw    =  Not yet implemented
-
-; Allow or prevent persistent links.
-odbc.allow_persistent = On
-
-; Check that a connection is still valid before reuse.
-odbc.check_persistent = On
-
-; Maximum number of persistent links.  -1 means no limit.
-odbc.max_persistent = -1
-
-; Maximum number of links (persistent + non-persistent).  -1 means no limit.
-odbc.max_links = -1
-
-; Handling of LONG fields.  Returns number of bytes to variables.  0 means
-; passthru.
-odbc.defaultlrl = 4096
-
-; Handling of binary data.  0 means passthru, 1 return as is, 2 convert to char.
-; See the documentation on odbc_binmode and odbc_longreadlen for an explanation
-; of uodbc.defaultlrl and uodbc.defaultbinmode
-odbc.defaultbinmode = 1
-
-[MySQL]
-; Allow or prevent persistent links.
-mysql.allow_persistent = On
-
-; Maximum number of persistent links.  -1 means no limit.
-mysql.max_persistent = -1
-
-; Maximum number of links (persistent + non-persistent).  -1 means no limit.
-mysql.max_links = -1
-
-; Default port number for mysql_connect().  If unset, mysql_connect() will use
-; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the
-; compile-time value defined MYSQL_PORT (in that order).  Win32 will only look
-; at MYSQL_PORT.
-mysql.default_port =
-
-; Default socket name for local MySQL connects.  If empty, uses the built-in
-; MySQL defaults.
-mysql.default_socket =
-
-; Default host for mysql_connect() (doesn't apply in safe mode).
-mysql.default_host =
-
-; Default user for mysql_connect() (doesn't apply in safe mode).
-mysql.default_user =
-
-; Default password for mysql_connect() (doesn't apply in safe mode).
-; Note that this is generally a *bad* idea to store passwords in this file.
-; *Any* user with PHP access can run 'echo get_cfg_var("mysql.default_password")
-; and reveal this password!  And of course, any users with read access to this
-; file will be able to reveal the password as well.
-mysql.default_password =
-
-; Maximum time (in seconds) for connect timeout. -1 means no limit
-mysql.connect_timeout = 60
-
-; Trace mode. When trace_mode is active (=On), warnings for table/index scans and
-; SQL-Errors will be displayed.
-mysql.trace_mode = Off
-
-[MySQLi]
-
-; Maximum number of links.  -1 means no limit.
-mysqli.max_links = -1
-
-; Default port number for mysqli_connect().  If unset, mysqli_connect() will use
-; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the
-; compile-time value defined MYSQL_PORT (in that order).  Win32 will only look
-; at MYSQL_PORT.
-mysqli.default_port = 3306
-
-; Default socket name for local MySQL connects.  If empty, uses the built-in
-; MySQL defaults.
-mysqli.default_socket =
-
-; Default host for mysql_connect() (doesn't apply in safe mode).
-mysqli.default_host =
-
-; Default user for mysql_connect() (doesn't apply in safe mode).
-mysqli.default_user =
-
-; Default password for mysqli_connect() (doesn't apply in safe mode).
-; Note that this is generally a *bad* idea to store passwords in this file.
-; *Any* user with PHP access can run 'echo get_cfg_var("mysqli.default_pw")
-; and reveal this password!  And of course, any users with read access to this
-; file will be able to reveal the password as well.
-mysqli.default_pw =
-
-; Allow or prevent reconnect
-mysqli.reconnect = Off
-
-[mSQL]
-; Allow or prevent persistent links.
-msql.allow_persistent = On
-
-; Maximum number of persistent links.  -1 means no limit.
-msql.max_persistent = -1
-
-; Maximum number of links (persistent+non persistent).  -1 means no limit.
-msql.max_links = -1
-
-[PostgresSQL]
-; Allow or prevent persistent links.
-pgsql.allow_persistent = On
-
-; Detect broken persistent links always with pg_pconnect().
-; Auto reset feature requires a little overheads.
-pgsql.auto_reset_persistent = Off
-
-; Maximum number of persistent links.  -1 means no limit.
-pgsql.max_persistent = -1
-
-; Maximum number of links (persistent+non persistent).  -1 means no limit.
-pgsql.max_links = -1
-
-; Ignore PostgreSQL backends Notice message or not.
-; Notice message logging require a little overheads.
-pgsql.ignore_notice = 0
-
-; Log PostgreSQL backends Noitce message or not.
-; Unless pgsql.ignore_notice=0, module cannot log notice message.
-pgsql.log_notice = 0
-
-[Sybase]
-; Allow or prevent persistent links.
-sybase.allow_persistent = On
-
-; Maximum number of persistent links.  -1 means no limit.
-sybase.max_persistent = -1
-
-; Maximum number of links (persistent + non-persistent).  -1 means no limit.
-sybase.max_links = -1
-
-;sybase.interface_file = "/usr/sybase/interfaces"
-
-; Minimum error severity to display.
-sybase.min_error_severity = 10
-
-; Minimum message severity to display.
-sybase.min_message_severity = 10
-
-; Compatibility mode with old versions of PHP 3.0.
-; If on, this will cause PHP to automatically assign types to results according
-; to their Sybase type, instead of treating them all as strings.  This
-; compatibility mode will probably not stay around forever, so try applying
-; whatever necessary changes to your code, and turn it off.
-sybase.compatability_mode = Off
-
-[Sybase-CT]
-; Allow or prevent persistent links.
-sybct.allow_persistent = On
-
-; Maximum number of persistent links.  -1 means no limit.
-sybct.max_persistent = -1
-
-; Maximum number of links (persistent + non-persistent).  -1 means no limit.
-sybct.max_links = -1
-
-; Minimum server message severity to display.
-sybct.min_server_severity = 10
-
-; Minimum client message severity to display.
-sybct.min_client_severity = 10
-
-[bcmath]
-; Number of decimal digits for all bcmath functions.
-bcmath.scale = 0
-
-[browscap]
-;browscap = extra/browscap.ini
-
-[Informix]
-; Default host for ifx_connect() (doesn't apply in safe mode).
-ifx.default_host =
-
-; Default user for ifx_connect() (doesn't apply in safe mode).
-ifx.default_user =
-
-; Default password for ifx_connect() (doesn't apply in safe mode).
-ifx.default_password =
-
-; Allow or prevent persistent links.
-ifx.allow_persistent = On
-
-; Maximum number of persistent links.  -1 means no limit.
-ifx.max_persistent = -1
-
-; Maximum number of links (persistent + non-persistent).  -1 means no limit.
-ifx.max_links = -1
-
-; If on, select statements return the contents of a text blob instead of its id.
-ifx.textasvarchar = 0
-
-; If on, select statements return the contents of a byte blob instead of its id.
-ifx.byteasvarchar = 0
-
-; Trailing blanks are stripped from fixed-length char columns.  May help the
-; life of Informix SE users.
-ifx.charasvarchar = 0
-
-; If on, the contents of text and byte blobs are dumped to a file instead of
-; keeping them in memory.
-ifx.blobinfile = 0
-
-; NULL's are returned as empty strings, unless this is set to 1.  In that case,
-; NULL's are returned as string 'NULL'.
-ifx.nullformat = 0
-
-[Session]
-; Handler used to store/retrieve data.
-session.save_handler = files
-
-; Argument passed to save_handler.  In the case of files, this is the path
-; where data files are stored. Note: Windows users have to change this
-; variable in order to use PHP's session functions.
-;
-; As of PHP 4.0.1, you can define the path as:
-;
-;     session.save_path = "N;/path"
-;
-; where N is an integer.  Instead of storing all the session files in
-; /path, what this will do is use subdirectories N-levels deep, and
-; store the session data in those directories.  This is useful if you
-; or your OS have problems with lots of files in one directory, and is
-; a more efficient layout for servers that handle lots of sessions.
-;
-; NOTE 1: PHP will not create this directory structure automatically.
-;         You can use the script in the ext/session dir for that purpose.
-; NOTE 2: See the section on garbage collection below if you choose to
-;         use subdirectories for session storage
-;
-; The file storage module creates files using mode 600 by default.
-; You can change that by using
-;
-;     session.save_path = "N;MODE;/path"
-;
-; where MODE is the octal representation of the mode. Note that this
-; does not overwrite the process's umask.
-;session.save_path = "/var/lib/php/session"
-session.save_path = "/tmp"
-
-; Whether to use cookies.
-session.use_cookies = 1
-
-;session.cookie_secure =
-
-; This option enables administrators to make their users invulnerable to
-; attacks which involve passing session ids in URLs; defaults to 0.
-; session.use_only_cookies = 1
-
-; Name of the session (used as cookie name).
-session.name = PHPSESSID
-
-; Initialize session on request startup.
-session.auto_start = 0
-
-; Lifetime in seconds of cookie or, if 0, until browser is restarted.
-session.cookie_lifetime = 0
-
-; The path for which the cookie is valid.
-session.cookie_path = /
-
-; The domain for which the cookie is valid.
-session.cookie_domain =
-
-; Whether or not to add the httpOnly flag to the cookie, which makes it inaccessible to browser scripting languages such as JavaScript.
-session.cookie_httponly =
-
-; Handler used to serialize data.  php is the standard serializer of PHP.
-session.serialize_handler = php
-
-; Define the probability that the 'garbage collection' process is started
-; on every session initialization.
-; The probability is calculated by using gc_probability/gc_divisor,
-; e.g. 1/100 means there is a 1% chance that the GC process starts
-; on each request.
-
-session.gc_probability = 1
-session.gc_divisor     = 1000
-
-; After this number of seconds, stored data will be seen as 'garbage' and
-; cleaned up by the garbage collection process.
-session.gc_maxlifetime = 1440
-
-; NOTE: If you are using the subdirectory option for storing session files
-;       (see session.save_path above), then garbage collection does *not*
-;       happen automatically.  You will need to do your own garbage
-;       collection through a shell script, cron entry, or some other method.
-;       For example, the following script would is the equivalent of
-;       setting session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes):
-;          cd /path/to/sessions; find -cmin +24 | xargs rm
-
-; PHP 4.2 and less have an undocumented feature/bug that allows you to
-; to initialize a session variable in the global scope, albeit register_globals
-; is disabled.  PHP 4.3 and later will warn you, if this feature is used.
-; You can disable the feature and the warning separately. At this time,
-; the warning is only displayed, if bug_compat_42 is enabled.
-
-session.bug_compat_42 = 0
-session.bug_compat_warn = 1
-
-; Check HTTP Referer to invalidate externally stored URLs containing ids.
-; HTTP_REFERER has to contain this substring for the session to be
-; considered as valid.
-session.referer_check =
-
-; How many bytes to read from the file.
-session.entropy_length = 0
-
-; Specified here to create the session id.
-session.entropy_file =
-
-;session.entropy_length = 16
-
-;session.entropy_file = /dev/urandom
-
-; Set to {nocache,private,public,} to determine HTTP caching aspects
-; or leave this empty to avoid sending anti-caching headers.
-session.cache_limiter = nocache
-
-; Document expires after n minutes.
-session.cache_expire = 180
-
-; trans sid support is disabled by default.
-; Use of trans sid may risk your users security.
-; Use this option with caution.
-; - User may send URL contains active session ID
-;   to other person via. email/irc/etc.
-; - URL that contains active session ID may be stored
-;   in publically accessible computer.
-; - User may access your site with the same session ID
-;   always using URL stored in browser's history or bookmarks.
-session.use_trans_sid = 0
-
-; Select a hash function
-; 0: MD5   (128 bits)
-; 1: SHA-1 (160 bits)
-session.hash_function = 0
-
-; Define how many bits are stored in each character when converting
-; the binary hash data to something readable.
-;
-; 4 bits: 0-9, a-f
-; 5 bits: 0-9, a-v
-; 6 bits: 0-9, a-z, A-Z, "-", ","
-session.hash_bits_per_character = 5
-
-; The URL rewriter will look for URLs in a defined set of HTML tags.
-; form/fieldset are special; if you include them here, the rewriter will
-; add a hidden <input> field with the info which is otherwise appended
-; to URLs.  If you want XHTML conformity, remove the form entry.
-; Note that all valid entries require a "=", even if no value follows.
-url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"
-
-[MSSQL]
-; Allow or prevent persistent links.
-mssql.allow_persistent = On
-
-; Maximum number of persistent links.  -1 means no limit.
-mssql.max_persistent = -1
-
-; Maximum number of links (persistent+non persistent).  -1 means no limit.
-mssql.max_links = -1
-
-; Minimum error severity to display.
-mssql.min_error_severity = 10
-
-; Minimum message severity to display.
-mssql.min_message_severity = 10
-
-; Compatibility mode with old versions of PHP 3.0.
-mssql.compatability_mode = Off
-
-; Connect timeout
-;mssql.connect_timeout = 5
-
-; Query timeout
-;mssql.timeout = 60
-
-; Valid range 0 - 2147483647.  Default = 4096.
-;mssql.textlimit = 4096
-
-; Valid range 0 - 2147483647.  Default = 4096.
-;mssql.textsize = 4096
-
-; Limits the number of records in each batch.  0 = all records in one batch.
-;mssql.batchsize = 0
-
-; Specify how datetime and datetim4 columns are returned
-; On => Returns data converted to SQL server settings
-; Off => Returns values as YYYY-MM-DD hh:mm:ss
-;mssql.datetimeconvert = On
-
-; Use NT authentication when connecting to the server
-mssql.secure_connection = Off
-
-; Specify max number of processes. -1 = library default
-; msdlib defaults to 25
-; FreeTDS defaults to 4096
-;mssql.max_procs = -1
-
-; Specify client character set.
-; If empty or not set the client charset from freetds.comf is used
-; This is only used when compiled with FreeTDS
-;mssql.charset = "ISO-8859-1"
-
-[Assertion]
-; Assert(expr); active by default.
-;assert.active = On
-
-; Issue a PHP warning for each failed assertion.
-;assert.warning = On
-
-; Don't bail out by default.
-;assert.bail = Off
-
-; User-function to be called if an assertion fails.
-;assert.callback = 0
-
-; Eval the expression with current error_reporting().  Set to true if you want
-; error_reporting(0) around the eval().
-;assert.quiet_eval = 0
-
-[COM]
-; path to a file containing GUIDs, IIDs or filenames of files with TypeLibs
-;com.typelib_file =
-; allow Distributed-COM calls
-;com.allow_dcom = true
-; autoregister constants of a components typlib on com_load()
-;com.autoregister_typelib = true
-; register constants casesensitive
-;com.autoregister_casesensitive = false
-; show warnings on duplicate constant registrations
-;com.autoregister_verbose = true
-
-[mbstring]
-; language for internal character representation.
-;mbstring.language = Japanese
-
-; internal/script encoding.
-; Some encoding cannot work as internal encoding.
-; (e.g. SJIS, BIG5, ISO-2022-*)
-;mbstring.internal_encoding = EUC-JP
-
-; http input encoding.
-;mbstring.http_input = auto
-
-; http output encoding. mb_output_handler must be
-; registered as output buffer to function
-;mbstring.http_output = SJIS
-
-; enable automatic encoding translation according to
-; mbstring.internal_encoding setting. Input chars are
-; converted to internal encoding by setting this to On.
-; Note: Do _not_ use automatic encoding translation for
-;       portable libs/applications.
-;mbstring.encoding_translation = Off
-
-; automatic encoding detection order.
-; auto means
-;mbstring.detect_order = auto
-
-; substitute_character used when character cannot be converted
-; one from another
-;mbstring.substitute_character = none;
-
-; overload(replace) single byte functions by mbstring functions.
-; mail(), ereg(), etc are overloaded by mb_send_mail(), mb_ereg(),
-; etc. Possible values are 0,1,2,4 or combination of them.
-; For example, 7 for overload everything.
-; 0: No overload
-; 1: Overload mail() function
-; 2: Overload str*() functions
-; 4: Overload ereg*() functions
-;mbstring.func_overload = 0
-
-; enable strict encoding detection.
-;mbstring.strict_encoding = Off
-
-[FrontBase]
-;fbsql.allow_persistent = On
-;fbsql.autocommit = On
-;fbsql.show_timestamp_decimals = Off
-;fbsql.default_database =
-;fbsql.default_database_password =
-;fbsql.default_host =
-;fbsql.default_password =
-;fbsql.default_user = "_SYSTEM"
-;fbsql.generate_warnings = Off
-;fbsql.max_connections = 128
-;fbsql.max_links = 128
-;fbsql.max_persistent = -1
-;fbsql.max_results = 128
-
-[gd]
-; Tell the jpeg decode to libjpeg warnings and try to create
-; a gd image. The warning will then be displayed as notices
-; disabled by default
-;gd.jpeg_ignore_warning = 0
-
-[exif]
-; Exif UNICODE user comments are handled as UCS-2BE/UCS-2LE and JIS as JIS.
-; With mbstring support this will automatically be converted into the encoding
-; given by corresponding encode setting. When empty mbstring.internal_encoding
-; is used. For the decode settings you can distinguish between motorola and
-; intel byte order. A decode setting cannot be empty.
-;exif.encode_unicode = ISO-8859-15
-;exif.decode_unicode_motorola = UCS-2BE
-;exif.decode_unicode_intel    = UCS-2LE
-;exif.encode_jis =
-;exif.decode_jis_motorola = JIS
-;exif.decode_jis_intel    = JIS
-
-[Tidy]
-; The path to a default tidy configuration file to use when using tidy
-;tidy.default_config = /usr/local/lib/php/default.tcfg
-
-; Should tidy clean and repair output automatically?
-; WARNING: Do not use this option if you are generating non-html content
-; such as dynamic images
-tidy.clean_output = Off
-
-[soap]
-; Enables or disables WSDL caching feature.
-soap.wsdl_cache_enabled=1
-; Sets the directory name where SOAP extension will put cache files.
-soap.wsdl_cache_dir="/tmp"
-; (time to live) Sets the number of second while cached file will be used
-; instead of original one.
-soap.wsdl_cache_ttl=86400
-
-; Local Variables:
-; tab-width: 4
-; End:

From 943df737203a1732083c7faf03f92e0a97086502 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 22:05:57 +0200
Subject: [PATCH 0604/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 30ba31d7..7397d813 100644
--- a/README.md
+++ b/README.md
@@ -18,7 +18,7 @@ Features
     + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
     + Literally no one PHP script will be alive before you access that URL, so even if there is some zero-day exploit - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simlpy dead - nothing will interact with someone who don't know your secret-URL.
     + You can see how mechanism was built by looking at:
-      + https://github.com/myvesta/vesta/blob/master/src/deb/php/php.ini#L496
+      + https://github.com/myvesta/vesta/blob/master/src/deb/for-download/php/php.ini#L496
       + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php
 
 + We disabled dangerous PHP functions in php.ini, so even if customer's CMS was compromised, hacker will not be able to execute shell from PHP.

From deb3a0eeae11a35ddd1db58bd0fc44a0c8cdb8d0 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 22:10:30 +0200
Subject: [PATCH 0605/2300] Create nginx.conf

---
 src/deb/for-download/nginx/nginx.conf | 128 ++++++++++++++++++++++++++
 1 file changed, 128 insertions(+)
 create mode 100644 src/deb/for-download/nginx/nginx.conf

diff --git a/src/deb/for-download/nginx/nginx.conf b/src/deb/for-download/nginx/nginx.conf
new file mode 100644
index 00000000..0a427f07
--- /dev/null
+++ b/src/deb/for-download/nginx/nginx.conf
@@ -0,0 +1,128 @@
+user                    admin;
+worker_processes        1;
+error_log               /usr/local/vesta/log/nginx-error.log;
+pid                     /var/run/vesta-nginx.pid;
+
+events {
+        worker_connections  128;
+        use                 epoll;
+}
+
+http {
+    # Main settings
+    sendfile                        on;
+    tcp_nopush                      on;
+    tcp_nodelay                     on;
+    client_header_timeout           1m;
+    client_body_timeout             3m;
+    client_header_buffer_size       2k;
+    client_body_buffer_size         256k;
+    client_max_body_size            256m;
+    large_client_header_buffers     4   8k;
+    send_timeout                    30;
+    keepalive_timeout               60 60;
+    reset_timedout_connection       on;
+    server_tokens                   off;
+    server_name_in_redirect         off;
+    server_names_hash_max_size      512;
+    server_names_hash_bucket_size   512;
+
+
+    # Log format
+    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
+                        '"$status" $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  bytes   '$body_bytes_sent';
+    access_log          /usr/local/vesta/log/nginx-access.log main;
+
+
+    # SSL PCI Compliance
+    ssl_protocols               TLSv1.2 TLSv1.1 TLSv1;
+    ssl_ciphers                 EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
+    ssl_session_cache           shared:SSL:10m;
+    ssl_prefer_server_ciphers   on;
+
+
+    # Mime settings
+    include             /usr/local/vesta/nginx/conf/mime.types;
+    default_type        application/octet-stream;
+
+
+    # Compression
+    gzip                on;
+    gzip_comp_level     9;
+    gzip_min_length     512;
+    gzip_buffers        8 64k;
+    gzip_types          text/plain text/css text/javascript
+                        application/x-javascript application/javascript;
+    gzip_proxied        any;
+
+
+    # Proxy settings
+    proxy_redirect      off;
+    proxy_set_header    Host            $host;
+    proxy_set_header    X-Real-IP       $remote_addr;
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_header   Set-Cookie;
+    proxy_connect_timeout   90;
+    proxy_send_timeout  90;
+    proxy_read_timeout  90;
+    proxy_buffers       32 4k;
+    fastcgi_read_timeout 300;
+
+    # Error pages
+    error_page          403          /error/403.html;
+    error_page          404          /error/404.html;
+    error_page          502 503 504  /error/50x.html;
+
+
+    # Vhost
+    server {
+        listen          8083;
+        server_name     _;
+        root            /usr/local/vesta/web;
+        charset         utf-8;
+
+        # Fix error "The plain HTTP request was sent to HTTPS port"
+        error_page      497 https://$host:$server_port$request_uri;
+
+        ssl                  on;
+        ssl_certificate      /usr/local/vesta/ssl/certificate.crt;
+        ssl_certificate_key  /usr/local/vesta/ssl/certificate.key;
+        ssl_session_cache    shared:SSL:10m;
+        ssl_session_timeout  10m;
+
+        error_page      404     /error/404/index.html;
+        error_page      403     /error/index.html;
+        error_page      500     /error/index.html;
+
+        location / {
+            expires max;
+            index   index.php;
+        }
+
+        location /error/ {
+            expires max;
+            index   index.html;
+        }
+
+        location /rrd/ {
+            expires off;
+            internal;
+        }
+
+        location /backup/ {
+            root    /;
+            internal;
+        }
+
+        location ~ \.php$ {
+            include         /usr/local/vesta/nginx/conf/fastcgi_params;
+            fastcgi_param   SCRIPT_FILENAME /usr/local/vesta/web/$fastcgi_script_name;
+            fastcgi_param   QUERY_STRING    $query_string;
+            fastcgi_pass    unix:/var/run/vesta-php.sock;
+            fastcgi_intercept_errors        on;
+            break;
+        }
+    }
+}

From fb28e8dea78cfa8c60aa3143e948d4244f65bf46 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 22:12:10 +0200
Subject: [PATCH 0606/2300] Delete nginx.conf

---
 src/deb/nginx/nginx.conf | 128 ---------------------------------------
 1 file changed, 128 deletions(-)
 delete mode 100644 src/deb/nginx/nginx.conf

diff --git a/src/deb/nginx/nginx.conf b/src/deb/nginx/nginx.conf
deleted file mode 100644
index 0a427f07..00000000
--- a/src/deb/nginx/nginx.conf
+++ /dev/null
@@ -1,128 +0,0 @@
-user                    admin;
-worker_processes        1;
-error_log               /usr/local/vesta/log/nginx-error.log;
-pid                     /var/run/vesta-nginx.pid;
-
-events {
-        worker_connections  128;
-        use                 epoll;
-}
-
-http {
-    # Main settings
-    sendfile                        on;
-    tcp_nopush                      on;
-    tcp_nodelay                     on;
-    client_header_timeout           1m;
-    client_body_timeout             3m;
-    client_header_buffer_size       2k;
-    client_body_buffer_size         256k;
-    client_max_body_size            256m;
-    large_client_header_buffers     4   8k;
-    send_timeout                    30;
-    keepalive_timeout               60 60;
-    reset_timedout_connection       on;
-    server_tokens                   off;
-    server_name_in_redirect         off;
-    server_names_hash_max_size      512;
-    server_names_hash_bucket_size   512;
-
-
-    # Log format
-    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
-                        '"$status" $body_bytes_sent "$http_referer" '
-                        '"$http_user_agent" "$http_x_forwarded_for"';
-    log_format  bytes   '$body_bytes_sent';
-    access_log          /usr/local/vesta/log/nginx-access.log main;
-
-
-    # SSL PCI Compliance
-    ssl_protocols               TLSv1.2 TLSv1.1 TLSv1;
-    ssl_ciphers                 EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
-    ssl_session_cache           shared:SSL:10m;
-    ssl_prefer_server_ciphers   on;
-
-
-    # Mime settings
-    include             /usr/local/vesta/nginx/conf/mime.types;
-    default_type        application/octet-stream;
-
-
-    # Compression
-    gzip                on;
-    gzip_comp_level     9;
-    gzip_min_length     512;
-    gzip_buffers        8 64k;
-    gzip_types          text/plain text/css text/javascript
-                        application/x-javascript application/javascript;
-    gzip_proxied        any;
-
-
-    # Proxy settings
-    proxy_redirect      off;
-    proxy_set_header    Host            $host;
-    proxy_set_header    X-Real-IP       $remote_addr;
-    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_pass_header   Set-Cookie;
-    proxy_connect_timeout   90;
-    proxy_send_timeout  90;
-    proxy_read_timeout  90;
-    proxy_buffers       32 4k;
-    fastcgi_read_timeout 300;
-
-    # Error pages
-    error_page          403          /error/403.html;
-    error_page          404          /error/404.html;
-    error_page          502 503 504  /error/50x.html;
-
-
-    # Vhost
-    server {
-        listen          8083;
-        server_name     _;
-        root            /usr/local/vesta/web;
-        charset         utf-8;
-
-        # Fix error "The plain HTTP request was sent to HTTPS port"
-        error_page      497 https://$host:$server_port$request_uri;
-
-        ssl                  on;
-        ssl_certificate      /usr/local/vesta/ssl/certificate.crt;
-        ssl_certificate_key  /usr/local/vesta/ssl/certificate.key;
-        ssl_session_cache    shared:SSL:10m;
-        ssl_session_timeout  10m;
-
-        error_page      404     /error/404/index.html;
-        error_page      403     /error/index.html;
-        error_page      500     /error/index.html;
-
-        location / {
-            expires max;
-            index   index.php;
-        }
-
-        location /error/ {
-            expires max;
-            index   index.html;
-        }
-
-        location /rrd/ {
-            expires off;
-            internal;
-        }
-
-        location /backup/ {
-            root    /;
-            internal;
-        }
-
-        location ~ \.php$ {
-            include         /usr/local/vesta/nginx/conf/fastcgi_params;
-            fastcgi_param   SCRIPT_FILENAME /usr/local/vesta/web/$fastcgi_script_name;
-            fastcgi_param   QUERY_STRING    $query_string;
-            fastcgi_pass    unix:/var/run/vesta-php.sock;
-            fastcgi_intercept_errors        on;
-            break;
-        }
-    }
-}

From a1f3c60a8e1333e6f413b093e0c65626158cfc07 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 22:13:06 +0200
Subject: [PATCH 0607/2300] Create vesta

---
 src/deb/for-download/nginx/vesta | 95 ++++++++++++++++++++++++++++++++
 1 file changed, 95 insertions(+)
 create mode 100644 src/deb/for-download/nginx/vesta

diff --git a/src/deb/for-download/nginx/vesta b/src/deb/for-download/nginx/vesta
new file mode 100644
index 00000000..31ccae53
--- /dev/null
+++ b/src/deb/for-download/nginx/vesta
@@ -0,0 +1,95 @@
+#!/bin/sh
+
+### BEGIN INIT INFO
+# Provides:       vesta
+#                 internal nginx
+#                 internal php-fpm
+# Required-Start:    $local_fs $remote_fs $network $syslog
+# Required-Stop:     $local_fs $remote_fs $network $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: starts the vesta control panel
+# Description:       starts nginx and php-fpm using start-stop-daemon
+### END INIT INFO
+
+PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
+NGINX_DAEMON=/usr/local/vesta/nginx/sbin/vesta-nginx
+NGINX_NAME=vesta-nginx
+NGINX_DESC=vesta-nginx
+NGINX_PID=/var/run/vesta-nginx.pid
+
+PHP_DAEMON=/usr/local/vesta/php/sbin/vesta-php
+PHP_NAME=vesta-php
+PHP_DESC=vesta-php
+PHP_PID=/var/run/vesta-php.pid
+PHP_CONF=/usr/local/vesta/php/etc/php-fpm.conf
+
+set -e
+
+. /lib/lsb/init-functions
+
+. /etc/profile.d/vesta.sh
+
+start_nginx() {
+    start-stop-daemon --start --quiet --pidfile $NGINX_PID \
+        --retry 5 --exec $NGINX_DAEMON --oknodo
+}
+
+start_php() {
+    start-stop-daemon --start --quiet --pidfile $PHP_PID \
+        --retry 5 --exec $PHP_DAEMON --oknodo
+}
+
+stop_nginx() {
+    start-stop-daemon --stop --quiet --pidfile $NGINX_PID \
+        --retry 5 --oknodo --exec $NGINX_DAEMON
+}
+
+stop_php() {
+    start-stop-daemon --stop --quiet --pidfile $PHP_PID \
+        --retry 5 --oknodo --exec $PHP_DAEMON
+}
+
+case "$1" in
+    start)
+        log_daemon_msg "Starting $NGINX_DESC" "$NGINX_NAME"
+        start_nginx
+        log_end_msg $?
+        log_daemon_msg "Starting $PHP_DESC" "$PHP_NAME"
+        start_php
+        log_end_msg $?
+        ;;
+
+    stop)
+        log_daemon_msg "Stopping $NGINX_DESC" "$NGINX_NAME"
+        stop_nginx
+        log_end_msg $?
+        log_daemon_msg "Stopping $PHP_DESC" "$PHP_NAME"
+        stop_php
+        log_end_msg $?
+        ;;
+
+    restart|force-reload|reload|configtest|testconfig)
+        log_daemon_msg "Restarting $NGINX_DESC" "$NGINX_NAME"
+        stop_nginx
+        stop_php
+        sleep 1
+        start_nginx
+        log_end_msg $?
+        log_daemon_msg "Restarting $PHP_DESC" "$PHP_NAME"
+        start_php
+        log_end_msg $?
+        ;;
+
+    status)
+        status_of_proc -p $NGINX_PID "$NGINX_DAEMON" vesta-nginx
+        status_of_proc -p $PHP_PID "$PHP_DAEMON" vesta-php
+        ;;
+
+    *)
+        echo "Usage: Vesta {start|stop|restart|status}" >&2
+        exit 1
+        ;;
+esac
+
+exit 0

From 3ff583c7371d792d185db5c05ce8b0c32c568354 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 22:14:00 +0200
Subject: [PATCH 0608/2300] Delete vesta

---
 src/deb/nginx/vesta | 95 ---------------------------------------------
 1 file changed, 95 deletions(-)
 delete mode 100755 src/deb/nginx/vesta

diff --git a/src/deb/nginx/vesta b/src/deb/nginx/vesta
deleted file mode 100755
index 31ccae53..00000000
--- a/src/deb/nginx/vesta
+++ /dev/null
@@ -1,95 +0,0 @@
-#!/bin/sh
-
-### BEGIN INIT INFO
-# Provides:       vesta
-#                 internal nginx
-#                 internal php-fpm
-# Required-Start:    $local_fs $remote_fs $network $syslog
-# Required-Stop:     $local_fs $remote_fs $network $syslog
-# Default-Start:     2 3 4 5
-# Default-Stop:      0 1 6
-# Short-Description: starts the vesta control panel
-# Description:       starts nginx and php-fpm using start-stop-daemon
-### END INIT INFO
-
-PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
-NGINX_DAEMON=/usr/local/vesta/nginx/sbin/vesta-nginx
-NGINX_NAME=vesta-nginx
-NGINX_DESC=vesta-nginx
-NGINX_PID=/var/run/vesta-nginx.pid
-
-PHP_DAEMON=/usr/local/vesta/php/sbin/vesta-php
-PHP_NAME=vesta-php
-PHP_DESC=vesta-php
-PHP_PID=/var/run/vesta-php.pid
-PHP_CONF=/usr/local/vesta/php/etc/php-fpm.conf
-
-set -e
-
-. /lib/lsb/init-functions
-
-. /etc/profile.d/vesta.sh
-
-start_nginx() {
-    start-stop-daemon --start --quiet --pidfile $NGINX_PID \
-        --retry 5 --exec $NGINX_DAEMON --oknodo
-}
-
-start_php() {
-    start-stop-daemon --start --quiet --pidfile $PHP_PID \
-        --retry 5 --exec $PHP_DAEMON --oknodo
-}
-
-stop_nginx() {
-    start-stop-daemon --stop --quiet --pidfile $NGINX_PID \
-        --retry 5 --oknodo --exec $NGINX_DAEMON
-}
-
-stop_php() {
-    start-stop-daemon --stop --quiet --pidfile $PHP_PID \
-        --retry 5 --oknodo --exec $PHP_DAEMON
-}
-
-case "$1" in
-    start)
-        log_daemon_msg "Starting $NGINX_DESC" "$NGINX_NAME"
-        start_nginx
-        log_end_msg $?
-        log_daemon_msg "Starting $PHP_DESC" "$PHP_NAME"
-        start_php
-        log_end_msg $?
-        ;;
-
-    stop)
-        log_daemon_msg "Stopping $NGINX_DESC" "$NGINX_NAME"
-        stop_nginx
-        log_end_msg $?
-        log_daemon_msg "Stopping $PHP_DESC" "$PHP_NAME"
-        stop_php
-        log_end_msg $?
-        ;;
-
-    restart|force-reload|reload|configtest|testconfig)
-        log_daemon_msg "Restarting $NGINX_DESC" "$NGINX_NAME"
-        stop_nginx
-        stop_php
-        sleep 1
-        start_nginx
-        log_end_msg $?
-        log_daemon_msg "Restarting $PHP_DESC" "$PHP_NAME"
-        start_php
-        log_end_msg $?
-        ;;
-
-    status)
-        status_of_proc -p $NGINX_PID "$NGINX_DAEMON" vesta-nginx
-        status_of_proc -p $PHP_PID "$PHP_DAEMON" vesta-php
-        ;;
-
-    *)
-        echo "Usage: Vesta {start|stop|restart|status}" >&2
-        exit 1
-        ;;
-esac
-
-exit 0

From 54590c47af773869f78b00411f5f72e2df38f9e7 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 22:19:04 +0200
Subject: [PATCH 0609/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index edfacdcd..a7fd97d7 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -357,8 +357,6 @@ if [ "$NGINX_B" = true ]; then
     press_enter "=== Press enter to Download control, postinst and postrm files"
     # Copying control, postinst and postrm files
     cp -rf /root/vesta/src/deb/nginx/* $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN
-    rm $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/nginx.conf
-    rm $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/vesta
     
     # Set version
     sed -i "/Version: /c\Version: $VESTA_VER" $BUILD_DIR/vesta-nginx_$VESTA_V/DEBIAN/control
@@ -371,12 +369,12 @@ if [ "$NGINX_B" = true ]; then
     
     echo "=== Get Service File"
     cd $BUILD_DIR/vesta-nginx_$VESTA_V/etc/init.d
-    cp /root/vesta/src/deb/nginx/vesta vesta
+    cp /root/vesta/src/deb/for-download/nginx/vesta vesta
     chmod +x vesta
     
     echo "=== Get nginx.conf"
     cd $BUILD_DIR/vesta-nginx_$VESTA_V
-    cp /root/vesta/src/deb/nginx/nginx.conf $BUILD_DIR/vesta-nginx_$VESTA_V/usr/local/vesta/nginx/conf/nginx.conf
+    cp /root/vesta/src/deb/for-download/nginx/nginx.conf $BUILD_DIR/vesta-nginx_$VESTA_V/usr/local/vesta/nginx/conf/nginx.conf
     
     # if [ $BUILDING_NOW -eq 1 ]; then
     echo "=== copy binary"
@@ -454,8 +452,6 @@ if [ "$PHP_B" = true ]; then
     
     # Copying control, postinst and postrm files
     cp -rf /root/vesta/src/deb/php/* $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN
-    rm $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/php-fpm.conf
-    rm $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/php.ini
     
     # Set version
     sed -i "/Version: /c\Version: $VESTA_VER" $BUILD_DIR/vesta-php_$VESTA_V/DEBIAN/control
@@ -473,8 +469,8 @@ if [ "$PHP_B" = true ]; then
     # fi
     
     echo "=== Get php-fpm.conf"
-    cp /root/vesta/src/deb/php/php-fpm.conf $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/etc/php-fpm.conf
-    cp /root/vesta/src/deb/php/php.ini $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/lib/php.ini
+    cp /root/vesta/src/deb/for-download/php/php-fpm.conf $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/etc/php-fpm.conf
+    cp /root/vesta/src/deb/for-download/php/php.ini $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/lib/php.ini
     
     echo "=== copy binary"
     cp $INSTALL_DIR/php/sbin/php-fpm $BUILD_DIR/vesta-php_$VESTA_V/usr/local/vesta/php/sbin/vesta-php

From 6f662ec5731cd6f4ce7af41a47bf0226bb3866d2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 22:52:36 +0200
Subject: [PATCH 0610/2300] Create php7.0-vps.patch

---
 install/debian/9/php/php7.0-vps.patch | 78 +++++++++++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 install/debian/9/php/php7.0-vps.patch

diff --git a/install/debian/9/php/php7.0-vps.patch b/install/debian/9/php/php7.0-vps.patch
new file mode 100644
index 00000000..42670598
--- /dev/null
+++ b/install/debian/9/php/php7.0-vps.patch
@@ -0,0 +1,78 @@
+--- origin/etc/php/7.0/apache2/php.ini	2018-02-07 15:46:09.000000000 +0100
++++ vesta/etc/php/7.0/apache2/php.ini	2018-02-07 17:27:08.000000000 +0100
+@@ -296,7 +296,8 @@
+ ; This directive allows you to disable certain functions for security reasons.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes for security reasons.
+ ; It receives a comma-delimited list of class names.
+@@ -382,11 +383,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-; max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume (128MB)
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -653,7 +654,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -806,7 +807,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1038,7 +1039,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1764,20 +1765,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=0
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=64
++opcache.memory_consumption=512
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=4
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=2000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5

From c5845ea8eaa41b0c23e081e29b61d3eba4783eb7 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 22:54:47 +0200
Subject: [PATCH 0611/2300] Create php7.0-dedi.patch

---
 install/debian/9/php/php7.0-dedi.patch | 78 ++++++++++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 install/debian/9/php/php7.0-dedi.patch

diff --git a/install/debian/9/php/php7.0-dedi.patch b/install/debian/9/php/php7.0-dedi.patch
new file mode 100644
index 00000000..04af8325
--- /dev/null
+++ b/install/debian/9/php/php7.0-dedi.patch
@@ -0,0 +1,78 @@
+--- origin/etc/php/7.0/apache2/php.ini	2018-02-07 15:46:09.000000000 +0100
++++ vesta/etc/php/7.0/apache2/php.ini	2018-02-07 17:29:58.531325409 +0100
+@@ -296,7 +296,8 @@
+ ; This directive allows you to disable certain functions for security reasons.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes for security reasons.
+ ; It receives a comma-delimited list of class names.
+@@ -382,11 +383,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-; max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume (128MB)
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -653,7 +654,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -806,7 +807,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1038,7 +1039,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1764,20 +1765,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=0
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=64
++opcache.memory_consumption=2048
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=4
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=2000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5

From b07f758003aa416dd97b51608ff8bab40433c1f6 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 23:00:56 +0200
Subject: [PATCH 0612/2300] Create php7.3-vps.patch

---
 install/debian/10/php/php7.3-vps.patch | 78 ++++++++++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 install/debian/10/php/php7.3-vps.patch

diff --git a/install/debian/10/php/php7.3-vps.patch b/install/debian/10/php/php7.3-vps.patch
new file mode 100644
index 00000000..803b93e8
--- /dev/null
+++ b/install/debian/10/php/php7.3-vps.patch
@@ -0,0 +1,78 @@
+--- /etc/php/7.3/fpm/php.ini.orig	2019-07-18 16:11:18.856589963 +0200
++++ /etc/php/7.3/fpm/php.ini	2019-07-18 17:45:51.000000000 +0200
+@@ -312,7 +312,8 @@
+ ; This directive allows you to disable certain functions for security reasons.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes for security reasons.
+ ; It receives a comma-delimited list of class names.
+@@ -399,11 +400,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume (128MB)
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -690,7 +691,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -842,7 +843,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1087,7 +1088,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1791,20 +1792,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=512
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5

From abb84aa403cdacba3869940f5dcbdd317f4f4d6d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 23:02:26 +0200
Subject: [PATCH 0613/2300] Create php7.3-dedi.patch

---
 install/debian/10/php/php7.3-dedi.patch | 78 +++++++++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 install/debian/10/php/php7.3-dedi.patch

diff --git a/install/debian/10/php/php7.3-dedi.patch b/install/debian/10/php/php7.3-dedi.patch
new file mode 100644
index 00000000..c044e002
--- /dev/null
+++ b/install/debian/10/php/php7.3-dedi.patch
@@ -0,0 +1,78 @@
+--- /etc/php/7.3/fpm/php.ini.orig	2019-07-18 16:11:18.856589963 +0200
++++ /etc/php/7.3/fpm/php.ini	2019-07-18 17:45:51.000000000 +0200
+@@ -312,7 +312,8 @@
+ ; This directive allows you to disable certain functions for security reasons.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes for security reasons.
+ ; It receives a comma-delimited list of class names.
+@@ -399,11 +400,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume (128MB)
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -690,7 +691,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -842,7 +843,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1087,7 +1088,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1791,20 +1792,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=2048
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5

From 70397a79fb22da78261f9dd32951493577336afd Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 23:05:25 +0200
Subject: [PATCH 0614/2300] Securing php.ini

---
 install/vst-install-debian.sh | 43 ++++++++++++++++++++++++++++++++++-
 1 file changed, 42 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index eb7f40a4..2d6affd3 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1140,7 +1140,6 @@ if [ "$exim" = 'yes' ]; then
 
     update-rc.d exim4 defaults
     service exim4 start
-    check_result $? "exim4 start failed"
 fi
 
 
@@ -1442,6 +1441,48 @@ $VESTA/upd/add_notifications.sh
 $VESTA/bin/v-add-cron-vesta-autoupdate
 
 
+#----------------------------------------------------------#
+#                   Custom work                            #
+#----------------------------------------------------------#
+
+echo "=== Installing additional PHP libs"
+if [ "$release" -eq 9 ]; then
+  apt-get -y install php7.0-apcu php7.0-mbstring php7.0-bcmath php7.0-curl php7.0-gd php7.0-intl php7.0-mcrypt php7.0-mysql php7.0-mysqlnd php7.0-pdo php7.0-soap php7.0-json php7.0-xml php7.0-zip php7.0-memcache php7.0-memcached php7.0-zip
+fi
+if [ "$release" -eq 10 ]; then
+  apt-get -y install php7.3-apcu php7.3-mbstring php7.3-bcmath php7.3-curl php7.3-gd php7.3-intl php7.3-mysql php7.3-mysqlnd php7.3-pdo php7.3-soap php7.3-json php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached php7.3-zip
+fi
+
+touch /var/log/php-mail.log
+chmod a=rw /var/log/php-mail.log
+
+if [ "$release" -eq 9 ]; then
+  if [ $memory -lt 10000000 ]; then
+    echo "=== Patching php7.0-vps"
+    mkdir -p /root/vesta-temp-dl/vesta/patch
+    cp $vestacp/php/php7.0-vps.patch /root/vesta-temp-dl/vesta/patch/php7.0-vps.patch
+    patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php7.0-vps.patch
+  fi
+  if [ $memory -gt 9999999 ]; then
+    echo "=== Patching php7.0-dedi"
+    mkdir -p /root/vesta-temp-dl/vesta/patch
+    cp $vestacp/php/php7.0-dedi.patch /root/vesta-temp-dl/vesta/patch/php7.0-dedi.patch
+    patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php7.0-dedi.patch
+  fi
+fi
+if [ "$release" -eq 10 ]; then
+  if [ $memory -lt 10000000 ]; then
+    echo "=== Patching php7.3-vps"
+    patch /etc/php/7.3/fpm/php.ini < $vestacp/php/php7.3-vps.patch
+  fi
+  if [ $memory -gt 9999999 ]; then
+    echo "=== Patching php7.3-dedi"
+    patch /etc/php/7.3/fpm/php.ini < $vestacp/php/php7.3-dedi.patch
+  fi
+  service php7.3-fpm restart
+fi
+
+
 #----------------------------------------------------------#
 #                   Vesta Access Info                      #
 #----------------------------------------------------------#

From c4c720838d08beab5963d8a63c368009866dce5b Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 20 Aug 2019 23:26:35 +0200
Subject: [PATCH 0615/2300] Update README.md

---
 README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README.md b/README.md
index 7397d813..29f8c66a 100644
--- a/README.md
+++ b/README.md
@@ -24,6 +24,7 @@ Features
 + We disabled dangerous PHP functions in php.ini, so even if customer's CMS was compromised, hacker will not be able to execute shell from PHP.
 
 + Apache is fully switched to mpm_event mode, PHP is running in PHP-FPM, which is the most stable PHP-stack solution
+    + OPCache is turned on by default
 
 + Support for multi-PHP versions - https://forum.vestacp.com/viewtopic.php?t=17129
 

From 169ddfcbac487d18472045a2f909264a3909df28 Mon Sep 17 00:00:00 2001
From: flackjap <nenad.default@gmail.com>
Date: Tue, 20 Aug 2019 23:58:50 +0200
Subject: [PATCH 0616/2300] Update README.md

Grammar and eloquence suggestions
---
 README.md | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/README.md b/README.md
index 29f8c66a..27344d70 100644
--- a/README.md
+++ b/README.md
@@ -5,8 +5,8 @@ MyVesta Control Panel
 * Focused on security and stability
 * Therefore, only Debian is supported - keeping focus on ONE eco-system - not wasting energy on compatibility with other Linux distributions
 * It will always be synchronized with official VestaCP commits
-* All VestaCP commercial plugins can be purchased only on official vestacp.com - we will not take their earnings - we are not making this fork because of money - but because a freedom to enhance security and features
-* All features that is added here will be offered to official VestaCP through pull-requests
+* VestaCP commercial plugins will be still only available for purchase on official vestacp.com website - we will NOT take their earnings, since we are not making this fork for monetary reasons. Instead, we are doing this with open source in mind - to enhance security and to build new features, without being interlocked with official VestaCP release cycles, and without affecting or heavily diverting from the VestaCP's planned development milestones
+* With previous in mind, all features that are added in this fork, will be offered to official VestaCP through pull-request mechanisms
 
 Features
 ==================================================
@@ -16,14 +16,14 @@ Features
 + You can totally "lock" VestsCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
     + After MyVesta installation just execute:
     + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
-    + Literally no one PHP script will be alive before you access that URL, so even if there is some zero-day exploit - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simlpy dead - nothing will interact with someone who don't know your secret-URL.
-    + You can see how mechanism was built by looking at:
+    + Literally no PHP scripts will be alive (won't be able to get executed), unless you access the URL with that parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - noone will be able to interact with your panel unless he has the secret URL.
+    + You can see for yourself how mechanism was built by looking at:
       + https://github.com/myvesta/vesta/blob/master/src/deb/for-download/php/php.ini#L496
       + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php
 
-+ We disabled dangerous PHP functions in php.ini, so even if customer's CMS was compromised, hacker will not be able to execute shell from PHP.
++ We disabled dangerous PHP functions in php.ini, so even if, for example, customer's CMS gets compromised, hacker will not be able to execute shell scripts from PHP.
 
-+ Apache is fully switched to mpm_event mode, PHP is running in PHP-FPM, which is the most stable PHP-stack solution
++ Apache is fully switched to mpm_event mode, while PHP is running in PHP-FPM, which is the most stable PHP-stack solution
     + OPCache is turned on by default
 
 + Support for multi-PHP versions - https://forum.vestacp.com/viewtopic.php?t=17129
@@ -31,7 +31,7 @@ Features
 + You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
     + You can even create your own APT repositorium in a minute
     + We are using latest nginx version for vesta-nginx package
-    + With your own APT infrastructure you can take a security of Vesta-installer infrastructure in your own hands, you have full control of your Vesta code
+    + With your own APT infrastructure you can take a security of Vesta-installer infrastructure in your own hands, you have full control of your Vesta code (this way you can rest assured that there's 0% chance that you'll install malicious packages from repositories that may get hacked)
 
 How to install
 ----------------------------

From a0f940da35486399ca91c32b63ecbcdc14a6f327 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 21 Aug 2019 00:03:35 +0200
Subject: [PATCH 0617/2300] Update README.md

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 27344d70..be5925dd 100644
--- a/README.md
+++ b/README.md
@@ -11,12 +11,12 @@ MyVesta Control Panel
 Features
 ==================================================
 
-+ Support for Debian 10
++ Support for Debian 10 (previous releases are also supported)
 
 + You can totally "lock" VestsCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
     + After MyVesta installation just execute:
     + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
-    + Literally no PHP scripts will be alive (won't be able to get executed), unless you access the URL with that parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - noone will be able to interact with your panel unless he has the secret URL.
+    + Literally no PHP scripts will be alive (won't be able to get executed), unless you access the URL with that parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless he has the secret URL.
     + You can see for yourself how mechanism was built by looking at:
       + https://github.com/myvesta/vesta/blob/master/src/deb/for-download/php/php.ini#L496
       + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php

From d6c8c10d0686d66f64ad0fd826277cc2fd279fc9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 21 Aug 2019 00:05:04 +0200
Subject: [PATCH 0618/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index be5925dd..0a876b94 100644
--- a/README.md
+++ b/README.md
@@ -21,7 +21,7 @@ Features
       + https://github.com/myvesta/vesta/blob/master/src/deb/for-download/php/php.ini#L496
       + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php
 
-+ We disabled dangerous PHP functions in php.ini, so even if, for example, customer's CMS gets compromised, hacker will not be able to execute shell scripts from PHP.
++ We disabled dangerous PHP functions in php.ini, so even if, for example, customer's CMS gets compromised, hacker will not be able to execute "shell" from PHP.
 
 + Apache is fully switched to mpm_event mode, while PHP is running in PHP-FPM, which is the most stable PHP-stack solution
     + OPCache is turned on by default

From a699f9aecf5967cf6babb26568756581542517b3 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 21 Aug 2019 00:14:01 +0200
Subject: [PATCH 0619/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 0a876b94..38ae49e9 100644
--- a/README.md
+++ b/README.md
@@ -5,7 +5,7 @@ MyVesta Control Panel
 * Focused on security and stability
 * Therefore, only Debian is supported - keeping focus on ONE eco-system - not wasting energy on compatibility with other Linux distributions
 * It will always be synchronized with official VestaCP commits
-* VestaCP commercial plugins will be still only available for purchase on official vestacp.com website - we will NOT take their earnings, since we are not making this fork for monetary reasons. Instead, we are doing this with open source in mind - to enhance security and to build new features, without being interlocked with official VestaCP release cycles, and without affecting or heavily diverting from the VestaCP's planned development milestones
+* VestaCP commercial plugins will be only available for purchase on official vestacp.com website - we will NOT take their earnings, since we are not making this fork for monetary reasons. Instead, we are doing this with open source in mind - to enhance security and to build new features, without being interlocked with official VestaCP release cycles, and without affecting or heavily diverting from the VestaCP's planned development milestones
 * With previous in mind, all features that are added in this fork, will be offered to official VestaCP through pull-request mechanisms
 
 Features

From e13fb654248e1afb600012878d26121a1a778116 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 21 Aug 2019 00:37:19 +0200
Subject: [PATCH 0620/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 60 ++++++++++++++++++++++++----------------
 1 file changed, 36 insertions(+), 24 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index a7fd97d7..18ce6c92 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -127,8 +127,8 @@ for arg; do
       PHP_B='true'
       VESTA_B='true'
       VESTAGIT_B='true'
-	  CWEB_B='true'
-	  APTWEB_B='true'
+      CWEB_B='true'
+      APTWEB_B='true'
       ;;
     --nginx)
       NGINX_B='true'
@@ -142,6 +142,9 @@ for arg; do
     --git)
       VESTAGIT_B='true'
       ;;
+    --git)
+      VESTAGIT_B='true'
+      ;;
     --c)
       CWEB_B='true'
       ;;
@@ -175,6 +178,15 @@ if [ $build_deb_package -eq 1 ]; then
   if [ "$NGINX_B" = true ]; then
     VESTAGIT_B='true'
   fi
+  
+  if [ "$CWEB_B" = true ]; then
+    if [ $# -gt 1 ]; then
+      if [ $2 = "--nogit" ]; then
+        VESTAGIT_B='false'
+      fi
+    fi
+  fi
+
 fi
 
 if [ ! -d "$BUILD_DIR" ]; then
@@ -310,10 +322,10 @@ if [ "$NGINX_B" = true ]; then
       
       press_enter "=== Press enter to download and unpack source files"
     
-	  rm -rf nginx-$NGINX_V
-	  rm -rf openssl-$OPENSSL_V
-	  rm -rf pcre-$PCRE_V
-	  rm -rf zlib-$ZLIB_V
+      rm -rf nginx-$NGINX_V
+      rm -rf openssl-$OPENSSL_V
+      rm -rf pcre-$PCRE_V
+      rm -rf zlib-$ZLIB_V
       wget -nv -qO- $NGINX | tar xz
       wget -nv -qO- $OPENSSL | tar xz
       wget -nv -qO- $PCRE | tar xz
@@ -323,20 +335,20 @@ if [ "$NGINX_B" = true ]; then
       cd nginx-$NGINX_V
       
       press_enter "=== Press enter to configure nginx"
-      ./configure 	--prefix=$INSTALL_DIR/nginx \
-      		--with-http_ssl_module \
-      		--with-openssl=../openssl-$OPENSSL_V \
-      		--with-openssl-opt=enable-ec_nistp_64_gcc_128 \
-      		--with-openssl-opt=no-nextprotoneg \
-      		--with-openssl-opt=no-weak-ssl-ciphers \
-      		--with-openssl-opt=no-ssl3 \
-      		--with-pcre=../pcre-$PCRE_V \
-      	        --with-pcre-jit \
-      		--with-zlib=../zlib-$ZLIB_V
+      ./configure     --prefix=$INSTALL_DIR/nginx \
+              --with-http_ssl_module \
+              --with-openssl=../openssl-$OPENSSL_V \
+              --with-openssl-opt=enable-ec_nistp_64_gcc_128 \
+              --with-openssl-opt=no-nextprotoneg \
+              --with-openssl-opt=no-weak-ssl-ciphers \
+              --with-openssl-opt=no-ssl3 \
+              --with-pcre=../pcre-$PCRE_V \
+                  --with-pcre-jit \
+              --with-zlib=../zlib-$ZLIB_V
       
       # Check install directory and remove if exists
       if [ -d $INSTALL_DIR/nginx ]; then
-      	rm -rf $INSTALL_DIR/nginx
+          rm -rf $INSTALL_DIR/nginx
       fi
       
       press_enter "=== Press enter to make && make install"
@@ -405,10 +417,10 @@ if [ "$PHP_B" = true ]; then
     BUILDING_NOW=0
     # Check if target directory exist
     if [ ! -d "$BUILD_DIR/php-$PHP_V" ] || [ ! -d "$INSTALL_DIR/nginx" ]; then
-	  BUILDING_NOW=1
+      BUILDING_NOW=1
       
       echo "=== Download and unpack source files"
-	  rm -rf php-$PHP_V
+      rm -rf php-$PHP_V
       wget -nv -qO- $PHP | tar xz
       
       echo "=== Change to php directory php-$PHP_V"
@@ -429,7 +441,7 @@ if [ "$PHP_B" = true ]; then
       
       # Check install directory and remove if exists
       if [ -d $INSTALL_DIR/php ]; then
-      	rm -rf $INSTALL_DIR/php
+          rm -rf $INSTALL_DIR/php
       fi
     
       press_enter "=== Press enter to create the files and install them ==============================================================================="
@@ -498,7 +510,7 @@ if [ "$VESTA_B" = true ]; then
     
     # Check if target directory exist
     if [ -d $BUILD_DIR/vesta_$VESTA_V ]; then
-    	rm -rf $BUILD_DIR/vesta_$VESTA_V
+        rm -rf $BUILD_DIR/vesta_$VESTA_V
     fi
     
     # Create directory
@@ -532,11 +544,11 @@ if [ "$VESTA_B" = true ]; then
   if [ $add_deb_to_apt_repo -eq 1 ]; then
     if [ "$TARGET_DEB_NAME_MAIN" != "$TARGET_DEB_NAME" ]; then
       cd $BUILD_DIR
-	  if [ -f "vesta_$VESTA_V.deb" ]; then
+      if [ -f "vesta_$VESTA_V.deb" ]; then
         rm vesta_$VESTA_V.deb
-	  fi
+      fi
       cp $BUILD_DIR_MAIN/vesta_$VESTA_V.deb $BUILD_DIR/vesta_$VESTA_V.deb
-	fi
+    fi
     add_to_repo "vesta"
   fi
 

From 2c242d152dc84b10c9290a4443e96706503fa9cb Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 21 Aug 2019 01:33:39 +0200
Subject: [PATCH 0621/2300] Update secure_login.php

---
 web/inc/secure_login.php | 28 +++++++++++++++-------------
 1 file changed, 15 insertions(+), 13 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index bf302792..28e6cb00 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -1,28 +1,30 @@
 <?php
 
-$login_url_skip=0;
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/index.php') $login_url_skip=1;
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/index.php') $login_url_skip=1;
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/set-ar.php') $login_url_skip=1;
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/set-ar.php') $login_url_skip=1;
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/get-ar.php') $login_url_skip=1;
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/get-ar.php') $login_url_skip=1;
-if (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/vesta/bin/') $login_url_skip=1;
+$skip_login_url_check=0;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/index.php') $skip_login_url_check=1; // it's accessible only from localhost
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/index.php') $skip_login_url_check=1;
 
-if ($login_url_skip==0) {
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/set-ar.php') $skip_login_url_check=1; // commercial addon for changing auto-reply from Roundcube, not included in this fork, also accessible only from localhost
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/set-ar.php') $skip_login_url_check=1;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/get-ar.php') $skip_login_url_check=1;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/get-ar.php') $skip_login_url_check=1;
+
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/vesta/bin/') $skip_login_url_check=1; // allow executing PHP scripts from v-* bash scripts
+
+if ($skip_login_url_check==0) {
     if (!isset($login_url_loaded)) {
         $login_url_loaded=1;
         if (file_exists('/usr/local/vesta/web/inc/login_url.php')) {
-            require_once('/usr/local/vesta/web/inc/login_url.php');
-            if (isset($_GET[$login_url])) {
+            require_once('/usr/local/vesta/web/inc/login_url.php'); // get secret url
+            if (isset($_GET[$login_url])) {                         // check if user opened secret url
                 $Domain=$_SERVER['HTTP_HOST'];
                 $Port = strpos($Domain, ':');
                 if ($Port !== false)  $Domain = substr($Domain, 0, $Port);
-                setcookie($login_url, '1', time() + 31536000, '/', $Domain, true);
+                setcookie($login_url, '1', time() + 31536000, '/', $Domain, true); // set secret cookie
                 header ("Location: /login/");
                 exit;
             }
-            if (!isset($_COOKIE[$login_url])) exit;
+            if (!isset($_COOKIE[$login_url])) exit; // die if secret cookie is not set
         }
     }
 }

From 1a26460eeebb48a9332884df1e5a01755ed6e455 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 21 Aug 2019 01:35:38 +0200
Subject: [PATCH 0622/2300] Update secure_login.php

---
 web/inc/secure_login.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 28e6cb00..4cb5aef2 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -9,7 +9,7 @@ if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/set-ar.php')
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/get-ar.php') $skip_login_url_check=1;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/get-ar.php') $skip_login_url_check=1;
 
-if (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/vesta/bin/') $skip_login_url_check=1; // allow executing PHP scripts from v-* bash scripts
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/vesta/bin/') $skip_login_url_check=1; // allow executing v-* PHP scripts
 
 if ($skip_login_url_check==0) {
     if (!isset($login_url_loaded)) {

From 052031d1039a6e668658bd053f352ac93a57cb2f Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 21 Aug 2019 02:05:12 +0200
Subject: [PATCH 0623/2300] Update secure_login.php

---
 web/inc/secure_login.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 4cb5aef2..46393d79 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -9,7 +9,7 @@ if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/set-ar.php')
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/get-ar.php') $skip_login_url_check=1;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/get-ar.php') $skip_login_url_check=1;
 
-if (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/vesta/bin/') $skip_login_url_check=1; // allow executing v-* PHP scripts
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/vesta/bin/') $skip_login_url_check=1; // allow executing v-* PHP scripts from bash
 
 if ($skip_login_url_check==0) {
     if (!isset($login_url_loaded)) {

From e821948b8ba2ec8cbd2066656bb786740dfda942 Mon Sep 17 00:00:00 2001
From: flackjap <nenad.default@gmail.com>
Date: Wed, 21 Aug 2019 10:03:36 +0200
Subject: [PATCH 0624/2300] Typos in readme

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 38ae49e9..84f44366 100644
--- a/README.md
+++ b/README.md
@@ -13,7 +13,7 @@ Features
 
 + Support for Debian 10 (previous releases are also supported)
 
-+ You can totally "lock" VestsCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
++ You can totally "lock" VestaCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
     + After MyVesta installation just execute:
     + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
     + Literally no PHP scripts will be alive (won't be able to get executed), unless you access the URL with that parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless he has the secret URL.
@@ -31,7 +31,7 @@ Features
 + You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
     + You can even create your own APT repositorium in a minute
     + We are using latest nginx version for vesta-nginx package
-    + With your own APT infrastructure you can take a security of Vesta-installer infrastructure in your own hands, you have full control of your Vesta code (this way you can rest assured that there's 0% chance that you'll install malicious packages from repositories that may get hacked)
+    + With your own APT infrastructure you can take security of Vesta-installer infrastructure in your own hands. You will have full control of your Vesta code (this way you can rest assured that there's 0% chance that you'll install malicious packages from repositories that may get hacked)
 
 How to install
 ----------------------------

From 1b1851997887df3d321f52474c3768c224d0d406 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 23 Aug 2019 16:11:54 +0200
Subject: [PATCH 0625/2300] Auto-generating LE SSL for hostname

---
 install/vst-install-debian.sh | 34 ++++++++++++++++++++++++++++------
 1 file changed, 28 insertions(+), 6 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 2d6affd3..7f0c51f9 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1482,17 +1482,39 @@ if [ "$release" -eq 10 ]; then
   service php7.3-fpm restart
 fi
 
+# Comparing hostname and ip
+make_ssl=0
+host_ip=$(host $servername | head -n 1 | awk '{print $NF}')
+if [ "$host_ip" = "$ip" ]; then
+    ip="$servername"
+    make_ssl=1
+fi
+
+# Generating LE SSL
+www_host="www.$servername"
+www_host_ip=$(host $www_host | head -n 1 | awk '{print $NF}')
+if [ "$www_host_ip" != "$ip" ]; then
+    echo "=== Deleting www to server hostname"
+    v-delete-web-domain-alias 'admin' "$servername" "$www_host" 'no'
+    v-delete-dns-on-web-alias 'admin' "$servername" "$www_host" 'no'
+    www_host=""
+fi
+
+echo "Hostname $servername is pointing to $host_ip"
+
+if [ $make_ssl -eq 1 ]; then
+    echo "=== Generating HOSTNAME SSL"
+    v-add-letsencrypt-domain 'admin' "$servername" "$www_host" 'yes'
+    v-update-host-certificate 'admin' "$servername"
+else
+    echo "=== We will not generate SSL because of this"
+fi
+echo "UPDATE_HOSTNAME_SSL='yes'" >> /usr/local/vesta/conf/vesta.conf
 
 #----------------------------------------------------------#
 #                   Vesta Access Info                      #
 #----------------------------------------------------------#
 
-# Comparing hostname and ip
-host_ip=$(host $servername| head -n 1 | awk '{print $NF}')
-if [ "$host_ip" = "$ip" ]; then
-    ip="$servername"
-fi
-
 # Sending notification to admin email
 echo -e "Congratulations, you have just successfully installed \
 Vesta Control Panel

From 75c921832bebb96a77f13b3ce7ceda657e333c00 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 23 Aug 2019 17:33:31 +0200
Subject: [PATCH 0626/2300] Update README.md

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index 84f44366..7703edb1 100644
--- a/README.md
+++ b/README.md
@@ -28,6 +28,8 @@ Features
 
 + Support for multi-PHP versions - https://forum.vestacp.com/viewtopic.php?t=17129
 
++ Auto-generating LetsEncrypt SSL for server hostname (signed SSL for Vesta 8083 port, for dovecot (IMAP & POP3) and for Exim (SMTP))
+
 + You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
     + You can even create your own APT repositorium in a minute
     + We are using latest nginx version for vesta-nginx package

From 0d621b0991a98050c5d079f0e4d1447516900bdd Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 23 Aug 2019 18:58:42 +0200
Subject: [PATCH 0627/2300] Exim conf enhancements

---
 install/debian/10/exim/exim4.conf.template | 44 ++++++++++++++++------
 1 file changed, 33 insertions(+), 11 deletions(-)

diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
index bfb98e0b..67647934 100644
--- a/install/debian/10/exim/exim4.conf.template
+++ b/install/debian/10/exim/exim4.conf.template
@@ -4,9 +4,9 @@
 #                                                                    #
 ######################################################################
 
-#SPAMASSASSIN = yes
-#SPAM_SCORE = 50
-#CLAMD =  yes
+SPAMASSASSIN = yes
+SPAM_SCORE = 50
+CLAMD =  yes
 
 disable_ipv6=true
 add_environment=<; PATH=/bin:/usr/bin
@@ -42,7 +42,7 @@ tls_on_connect_ports = 465
 never_users = root
 host_lookup = *
 rfc1413_hosts = *
-rfc1413_query_timeout = 5s
+rfc1413_query_timeout = 0s
 ignore_bounce_errors_after = 2d
 timeout_frozen_after = 7d
 
@@ -56,8 +56,20 @@ DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
 #                       ACL CONFIGURATION                            #
 #         Specifies access control lists for incoming SMTP mail      #
 ######################################################################
+
+acl_not_smtp = acl_not_smtp
+
 begin acl
 
+acl_not_smtp:
+  deny message = Web site is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period
+  ratelimit = 40 / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period
+
+  accept
+
 acl_check_spammers:
   accept  hosts         = +whitelist
 
@@ -74,6 +86,7 @@ acl_check_mail:
 
   drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
           condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
           condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
           delay         = 45s
 
@@ -89,6 +102,12 @@ acl_check_mail:
 acl_check_rcpt:
   accept  hosts         = :
 
+  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period
+  ratelimit = 40 / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period
+
   deny    message       = Restricted characters in address
           domains       = +local_domains
           local_parts   = ^[.] : ^.*[@%!/|]
@@ -136,9 +155,12 @@ acl_check_rcpt:
 
 
 acl_check_data:
+
+  deny senders = /etc/exim4/deny_senders
+
 .ifdef CLAMD
   deny   message        = Message contains a virus ($malware_name) and has been rejected
-         malware        = *
+         malware        = */defer_ok
          condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
 .endif
 
@@ -164,7 +186,7 @@ acl_check_data:
 
 acl_check_mime:
   deny   message        = Blacklisted file extension detected
-         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh)$\N}{1}{0}}
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh|\.jar)$\N}{1}{0}}
 
   accept
 
@@ -209,6 +231,11 @@ dnslookup:
   transport = remote_smtp
   no_more
 
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
+
 userforward:
   driver = redirect
   check_local_user
@@ -250,11 +277,6 @@ localuser_fwd_only:
   transport = devnull
   condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
 
-localuser_spam:
-  driver = accept
-  transport = local_spam_delivery
-  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
-
 localuser:
   driver = accept
   transport = local_delivery

From f1a1c0e0a684096e99b4cb145fa6d5b2e9205722 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 23 Aug 2019 18:59:43 +0200
Subject: [PATCH 0628/2300] Create deny_senders

---
 install/debian/10/exim/deny_senders | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 install/debian/10/exim/deny_senders

diff --git a/install/debian/10/exim/deny_senders b/install/debian/10/exim/deny_senders
new file mode 100644
index 00000000..8b137891
--- /dev/null
+++ b/install/debian/10/exim/deny_senders
@@ -0,0 +1 @@
+

From a1c95d029094cb836b1dc4f4ce6bc6d6469553e2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 23 Aug 2019 19:01:47 +0200
Subject: [PATCH 0629/2300] installer: copy exim4 deny_senders

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 7f0c51f9..5f491b90 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1118,6 +1118,7 @@ if [ "$exim" = 'yes' ]; then
     cp -f $vestacp/exim/exim4.conf.template /etc/exim4/
     cp -f $vestacp/exim/dnsbl.conf /etc/exim4/
     cp -f $vestacp/exim/spam-blocks.conf /etc/exim4/
+    cp -f $vestacp/exim/deny_senders /etc/exim4/
     touch /etc/exim4/white-blocks.conf
 
     if [ "$spamd" = 'yes' ]; then

From 69496e093498284f45d1003258a95184099a4f32 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 23 Aug 2019 19:46:33 +0200
Subject: [PATCH 0630/2300] Create deny_senders

---
 install/debian/9/exim/deny_senders | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 install/debian/9/exim/deny_senders

diff --git a/install/debian/9/exim/deny_senders b/install/debian/9/exim/deny_senders
new file mode 100644
index 00000000..8b137891
--- /dev/null
+++ b/install/debian/9/exim/deny_senders
@@ -0,0 +1 @@
+

From 7b50f5f3f17e629637199cdec56879d3426db42d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 23 Aug 2019 19:47:52 +0200
Subject: [PATCH 0631/2300] Update exim4.conf.template

---
 install/debian/9/exim/exim4.conf.template | 44 +++++++++++++++++------
 1 file changed, 33 insertions(+), 11 deletions(-)

diff --git a/install/debian/9/exim/exim4.conf.template b/install/debian/9/exim/exim4.conf.template
index bfb98e0b..67647934 100644
--- a/install/debian/9/exim/exim4.conf.template
+++ b/install/debian/9/exim/exim4.conf.template
@@ -4,9 +4,9 @@
 #                                                                    #
 ######################################################################
 
-#SPAMASSASSIN = yes
-#SPAM_SCORE = 50
-#CLAMD =  yes
+SPAMASSASSIN = yes
+SPAM_SCORE = 50
+CLAMD =  yes
 
 disable_ipv6=true
 add_environment=<; PATH=/bin:/usr/bin
@@ -42,7 +42,7 @@ tls_on_connect_ports = 465
 never_users = root
 host_lookup = *
 rfc1413_hosts = *
-rfc1413_query_timeout = 5s
+rfc1413_query_timeout = 0s
 ignore_bounce_errors_after = 2d
 timeout_frozen_after = 7d
 
@@ -56,8 +56,20 @@ DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
 #                       ACL CONFIGURATION                            #
 #         Specifies access control lists for incoming SMTP mail      #
 ######################################################################
+
+acl_not_smtp = acl_not_smtp
+
 begin acl
 
+acl_not_smtp:
+  deny message = Web site is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period
+  ratelimit = 40 / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period
+
+  accept
+
 acl_check_spammers:
   accept  hosts         = +whitelist
 
@@ -74,6 +86,7 @@ acl_check_mail:
 
   drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
           condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
           condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
           delay         = 45s
 
@@ -89,6 +102,12 @@ acl_check_mail:
 acl_check_rcpt:
   accept  hosts         = :
 
+  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period
+  ratelimit = 40 / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period
+
   deny    message       = Restricted characters in address
           domains       = +local_domains
           local_parts   = ^[.] : ^.*[@%!/|]
@@ -136,9 +155,12 @@ acl_check_rcpt:
 
 
 acl_check_data:
+
+  deny senders = /etc/exim4/deny_senders
+
 .ifdef CLAMD
   deny   message        = Message contains a virus ($malware_name) and has been rejected
-         malware        = *
+         malware        = */defer_ok
          condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
 .endif
 
@@ -164,7 +186,7 @@ acl_check_data:
 
 acl_check_mime:
   deny   message        = Blacklisted file extension detected
-         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh)$\N}{1}{0}}
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh|\.jar)$\N}{1}{0}}
 
   accept
 
@@ -209,6 +231,11 @@ dnslookup:
   transport = remote_smtp
   no_more
 
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
+
 userforward:
   driver = redirect
   check_local_user
@@ -250,11 +277,6 @@ localuser_fwd_only:
   transport = devnull
   condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
 
-localuser_spam:
-  driver = accept
-  transport = local_spam_delivery
-  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
-
 localuser:
   driver = accept
   transport = local_delivery

From 3dc748f533a57744e894bf168f9b7f19fa2b7739 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 23 Aug 2019 19:49:59 +0200
Subject: [PATCH 0632/2300] Update exim4.conf.template

---
 install/debian/9/exim/exim4.conf.template | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/debian/9/exim/exim4.conf.template b/install/debian/9/exim/exim4.conf.template
index 67647934..12b41e40 100644
--- a/install/debian/9/exim/exim4.conf.template
+++ b/install/debian/9/exim/exim4.conf.template
@@ -4,9 +4,9 @@
 #                                                                    #
 ######################################################################
 
-SPAMASSASSIN = yes
-SPAM_SCORE = 50
-CLAMD =  yes
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
 
 disable_ipv6=true
 add_environment=<; PATH=/bin:/usr/bin

From aa0b8866c0cc6193cfc2d5e28625a7a2a8ee5a9d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 23 Aug 2019 19:50:51 +0200
Subject: [PATCH 0633/2300] Update exim4.conf.template

---
 install/debian/10/exim/exim4.conf.template | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
index 67647934..12b41e40 100644
--- a/install/debian/10/exim/exim4.conf.template
+++ b/install/debian/10/exim/exim4.conf.template
@@ -4,9 +4,9 @@
 #                                                                    #
 ######################################################################
 
-SPAMASSASSIN = yes
-SPAM_SCORE = 50
-CLAMD =  yes
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
 
 disable_ipv6=true
 add_environment=<; PATH=/bin:/usr/bin

From d2061fa6232195013ef0b465a04d8ab7aa903cd8 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 23 Aug 2019 19:51:42 +0200
Subject: [PATCH 0634/2300] Update exim4.conf.template

---
 install/debian/8/exim/exim4.conf.template | 38 ++++++++++++++++++-----
 1 file changed, 30 insertions(+), 8 deletions(-)

diff --git a/install/debian/8/exim/exim4.conf.template b/install/debian/8/exim/exim4.conf.template
index bfb98e0b..12b41e40 100644
--- a/install/debian/8/exim/exim4.conf.template
+++ b/install/debian/8/exim/exim4.conf.template
@@ -42,7 +42,7 @@ tls_on_connect_ports = 465
 never_users = root
 host_lookup = *
 rfc1413_hosts = *
-rfc1413_query_timeout = 5s
+rfc1413_query_timeout = 0s
 ignore_bounce_errors_after = 2d
 timeout_frozen_after = 7d
 
@@ -56,8 +56,20 @@ DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
 #                       ACL CONFIGURATION                            #
 #         Specifies access control lists for incoming SMTP mail      #
 ######################################################################
+
+acl_not_smtp = acl_not_smtp
+
 begin acl
 
+acl_not_smtp:
+  deny message = Web site is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period
+  ratelimit = 40 / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period
+
+  accept
+
 acl_check_spammers:
   accept  hosts         = +whitelist
 
@@ -74,6 +86,7 @@ acl_check_mail:
 
   drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
           condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
           condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
           delay         = 45s
 
@@ -89,6 +102,12 @@ acl_check_mail:
 acl_check_rcpt:
   accept  hosts         = :
 
+  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period
+  ratelimit = 40 / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period
+
   deny    message       = Restricted characters in address
           domains       = +local_domains
           local_parts   = ^[.] : ^.*[@%!/|]
@@ -136,9 +155,12 @@ acl_check_rcpt:
 
 
 acl_check_data:
+
+  deny senders = /etc/exim4/deny_senders
+
 .ifdef CLAMD
   deny   message        = Message contains a virus ($malware_name) and has been rejected
-         malware        = *
+         malware        = */defer_ok
          condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
 .endif
 
@@ -164,7 +186,7 @@ acl_check_data:
 
 acl_check_mime:
   deny   message        = Blacklisted file extension detected
-         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh)$\N}{1}{0}}
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh|\.jar)$\N}{1}{0}}
 
   accept
 
@@ -209,6 +231,11 @@ dnslookup:
   transport = remote_smtp
   no_more
 
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
+
 userforward:
   driver = redirect
   check_local_user
@@ -250,11 +277,6 @@ localuser_fwd_only:
   transport = devnull
   condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
 
-localuser_spam:
-  driver = accept
-  transport = local_spam_delivery
-  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
-
 localuser:
   driver = accept
   transport = local_delivery

From f3acaf92972865714252e7a88845dd426d326471 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 23 Aug 2019 19:52:48 +0200
Subject: [PATCH 0635/2300] Create deny_senders

---
 install/debian/8/exim/deny_senders | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 install/debian/8/exim/deny_senders

diff --git a/install/debian/8/exim/deny_senders b/install/debian/8/exim/deny_senders
new file mode 100644
index 00000000..8b137891
--- /dev/null
+++ b/install/debian/8/exim/deny_senders
@@ -0,0 +1 @@
+

From 4fade0fbc902af1413f0511137e827d3a203a8a1 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 00:09:28 +0200
Subject: [PATCH 0636/2300] Optimizing ClamAV

---
 install/debian/10/clamav/clamd.conf | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/install/debian/10/clamav/clamd.conf b/install/debian/10/clamav/clamd.conf
index 504cf8f3..c636b6d3 100644
--- a/install/debian/10/clamav/clamd.conf
+++ b/install/debian/10/clamav/clamd.conf
@@ -20,7 +20,7 @@ MaxThreads 12
 MaxConnectionQueueLength 15
 LogSyslog false
 LogFacility LOG_LOCAL6
-LogClean false
+LogClean true
 LogVerbose true
 PidFile /var/run/clamav/clamd.pid
 DatabaseDirectory /var/lib/clamav
@@ -48,7 +48,8 @@ SendBufTimeout 200
 MaxQueue 100
 ExtendedDetectionInfo true
 OLE2BlockMacros false
-StreamMaxLength 25M
+StreamMaxLength 2M
+MaxFileSize 2M
 LogFile /var/log/clamav/clamav.log
 LogTime true
 LogFileUnlock false

From a96a39dbbb028f9b31bdb72b725687a6b67205b4 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 00:11:03 +0200
Subject: [PATCH 0637/2300] Optimizing ClamAV

---
 install/debian/9/clamav/clamd.conf | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/install/debian/9/clamav/clamd.conf b/install/debian/9/clamav/clamd.conf
index 4e04356e..3fe6454f 100644
--- a/install/debian/9/clamav/clamd.conf
+++ b/install/debian/9/clamav/clamd.conf
@@ -20,7 +20,7 @@ MaxThreads 12
 MaxConnectionQueueLength 15
 LogSyslog false
 LogFacility LOG_LOCAL6
-LogClean false
+LogClean true
 LogVerbose true
 PidFile /var/run/clamav/clamd.pid
 DatabaseDirectory /var/lib/clamav
@@ -49,7 +49,8 @@ SendBufTimeout 200
 MaxQueue 100
 ExtendedDetectionInfo true
 OLE2BlockMacros false
-StreamMaxLength 25M
+StreamMaxLength 2M
+MaxFileSize 2M
 LogFile /var/log/clamav/clamav.log
 LogTime true
 LogFileUnlock false

From c39d80f15ec4e76c847997508172c2919fd9b2f1 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 00:12:31 +0200
Subject: [PATCH 0638/2300] Optimizing ClamAV

---
 install/debian/8/clamav/clamd.conf | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/install/debian/8/clamav/clamd.conf b/install/debian/8/clamav/clamd.conf
index 4e04356e..3fe6454f 100644
--- a/install/debian/8/clamav/clamd.conf
+++ b/install/debian/8/clamav/clamd.conf
@@ -20,7 +20,7 @@ MaxThreads 12
 MaxConnectionQueueLength 15
 LogSyslog false
 LogFacility LOG_LOCAL6
-LogClean false
+LogClean true
 LogVerbose true
 PidFile /var/run/clamav/clamd.pid
 DatabaseDirectory /var/lib/clamav
@@ -49,7 +49,8 @@ SendBufTimeout 200
 MaxQueue 100
 ExtendedDetectionInfo true
 OLE2BlockMacros false
-StreamMaxLength 25M
+StreamMaxLength 2M
+MaxFileSize 2M
 LogFile /var/log/clamav/clamav.log
 LogTime true
 LogFileUnlock false

From 8b39d8e847578a19a247c6ea41d8adf997082140 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 00:55:10 +0200
Subject: [PATCH 0639/2300] Put secured login URL in welcome mail while
 creating user

---
 web/add/user/index.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/add/user/index.php b/web/add/user/index.php
index 2cc79287..914eb3dd 100644
--- a/web/add/user/index.php
+++ b/web/add/user/index.php
@@ -93,6 +93,7 @@ if (!empty($_POST['ok'])) {
             $mailtext = _translate($_POST['v_language'],'GREETINGS');
         }
         $mailtext .= _translate($_POST['v_language'],'ACCOUNT_READY',$_SERVER['HTTP_HOST'],$_POST['v_username'],$_POST['v_password']);
+        if (isset($login_url)) $mailtext=str_replace('/login/', '/?'.$login_url, $mailtext);
         send_email($to, $subject, $mailtext, $from);
     }
 

From 6343b3e20d88b1dec693db1288fff360b7ac0f4e Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Sat, 24 Aug 2019 02:00:22 +0200
Subject: [PATCH 0640/2300] Introducing v-change-vesta-port

---
 bin/v-add-letsencrypt-user |  0
 bin/v-change-vesta-port    | 49 ++++++++++++++++++++++++++++++++++++++
 bin/v-list-sys-config      |  0
 3 files changed, 49 insertions(+)
 mode change 100644 => 100755 bin/v-add-letsencrypt-user
 create mode 100755 bin/v-change-vesta-port
 mode change 100644 => 100755 bin/v-list-sys-config

diff --git a/bin/v-add-letsencrypt-user b/bin/v-add-letsencrypt-user
old mode 100644
new mode 100755
diff --git a/bin/v-change-vesta-port b/bin/v-change-vesta-port
new file mode 100755
index 00000000..53beef2d
--- /dev/null
+++ b/bin/v-change-vesta-port
@@ -0,0 +1,49 @@
+#!/bin/bash
+# info: change vesta port
+# options: port
+#
+# Function change vesta port
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ] && [ "$whoami" != "admin" ] ; then
+    echo "You must be root or admin to execute this script";
+    exit 1;
+fi
+
+
+# Argument definition
+port=$1
+
+re='^[0-9]+$'
+if ! [[ $port =~ $re ]] ; then
+    echo "error: Not a number" >&2; exit 1
+fi
+
+if [ ! -f "$VESTA/conf/port.conf" ]; then
+    oldport=8083
+else
+    oldport=`cat $VESTA/conf/port.conf`
+fi
+
+sed -i "s|$oldport;|$port;|g" /usr/local/vesta/nginx/conf/nginx.conf
+sed -i "s|'$oldport'|'$port'|g" /etc/roundcube/plugins/password/config.inc.php
+sed -i "s|'$oldport'|'$port'|g" /usr/local/vesta/data/firewall/rules.conf
+$VESTA/bin/v-update-firewall
+systemctl restart fail2ban.service
+systemctl restart vesta
+
+echo "$port" > $VESTA/conf/port.conf
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit 0;
diff --git a/bin/v-list-sys-config b/bin/v-list-sys-config
old mode 100644
new mode 100755

From f9b68027da01ed349c26befef7dfd5791297728b Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 02:17:24 +0200
Subject: [PATCH 0641/2300] Update v-change-vesta-port

---
 bin/v-change-vesta-port | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-change-vesta-port b/bin/v-change-vesta-port
index 53beef2d..16e47ca3 100755
--- a/bin/v-change-vesta-port
+++ b/bin/v-change-vesta-port
@@ -15,6 +15,9 @@ if [ "$whoami" != "root" ] && [ "$whoami" != "admin" ] ; then
     exit 1;
 fi
 
+if [ -z "$VESTA" ]; then
+    VESTA="/usr/local/vesta"
+fi
 
 # Argument definition
 port=$1

From 72029bb578052814d1eb32762a815485ac3d60c6 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 02:20:02 +0200
Subject: [PATCH 0642/2300] Update v-change-vesta-port

---
 bin/v-change-vesta-port | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/bin/v-change-vesta-port b/bin/v-change-vesta-port
index 16e47ca3..40d4dff7 100755
--- a/bin/v-change-vesta-port
+++ b/bin/v-change-vesta-port
@@ -33,9 +33,11 @@ else
     oldport=`cat $VESTA/conf/port.conf`
 fi
 
-sed -i "s|$oldport;|$port;|g" /usr/local/vesta/nginx/conf/nginx.conf
-sed -i "s|'$oldport'|'$port'|g" /etc/roundcube/plugins/password/config.inc.php
-sed -i "s|'$oldport'|'$port'|g" /usr/local/vesta/data/firewall/rules.conf
+sed -i "s|$oldport;|$port;|g" $VESTA/nginx/conf/nginx.conf
+if [ -f "/etc/roundcube/plugins/password/config.inc.php" ]; then
+    sed -i "s|'$oldport'|'$port'|g" /etc/roundcube/plugins/password/config.inc.php
+fi
+sed -i "s|'$oldport'|'$port'|g" $VESTA/data/firewall/rules.conf
 $VESTA/bin/v-update-firewall
 systemctl restart fail2ban.service
 systemctl restart vesta

From 9eedd3e1b204431906ce869ba323991f9151c1fa Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 02:31:37 +0200
Subject: [PATCH 0643/2300] Not creating default admin database

---
 install/vst-install-debian.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 5f491b90..9db820de 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1372,10 +1372,10 @@ if [ "$apache" = 'yes' ] && [ "$nginx"  = 'yes' ] ; then
 fi
 
 # Configuring mysql host
-if [ "$mysql" = 'yes' ]; then
-    $VESTA/bin/v-add-database-host mysql localhost root $mpass
-    # $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
-fi
+# if [ "$mysql" = 'yes' ]; then
+#     $VESTA/bin/v-add-database-host mysql localhost root $mpass
+#     # $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
+# fi
 
 # Configuring pgsql host
 if [ "$postgresql" = 'yes' ]; then

From 40739f3105e5f9cf930b13b346b0c5f663d59088 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 02:37:28 +0200
Subject: [PATCH 0644/2300] Update v-change-vesta-port

---
 bin/v-change-vesta-port | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/bin/v-change-vesta-port b/bin/v-change-vesta-port
index 40d4dff7..be955013 100755
--- a/bin/v-change-vesta-port
+++ b/bin/v-change-vesta-port
@@ -6,7 +6,7 @@
 
 
 #----------------------------------------------------------#
-#                    Variable&Function                     #
+#              Variable & Verifications                    #
 #----------------------------------------------------------#
 
 whoami=$(whoami)
@@ -19,6 +19,9 @@ if [ -z "$VESTA" ]; then
     VESTA="/usr/local/vesta"
 fi
 
+# Includes
+source $VESTA/func/main.sh
+
 # Argument definition
 port=$1
 
@@ -33,6 +36,10 @@ else
     oldport=`cat $VESTA/conf/port.conf`
 fi
 
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
 sed -i "s|$oldport;|$port;|g" $VESTA/nginx/conf/nginx.conf
 if [ -f "/etc/roundcube/plugins/password/config.inc.php" ]; then
     sed -i "s|'$oldport'|'$port'|g" /etc/roundcube/plugins/password/config.inc.php

From 5afd45bc70429d2b1f0e9f5d4eaa628949840017 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 02:50:28 +0200
Subject: [PATCH 0645/2300] Update README.md

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index 7703edb1..7c89aa73 100644
--- a/README.md
+++ b/README.md
@@ -30,6 +30,8 @@ Features
 
 + Auto-generating LetsEncrypt SSL for server hostname (signed SSL for Vesta 8083 port, for dovecot (IMAP & POP3) and for Exim (SMTP))
 
++ Changing Vesta port using one command line: **v-change-vesta-port [number]**
+
 + You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
     + You can even create your own APT repositorium in a minute
     + We are using latest nginx version for vesta-nginx package

From 105f8c25410e36c99662407993d1872a6d01d339 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 03:35:59 +0200
Subject: [PATCH 0646/2300] Update v-change-vesta-port

---
 bin/v-change-vesta-port | 47 +++++++++++++++++++++--------------------
 1 file changed, 24 insertions(+), 23 deletions(-)

diff --git a/bin/v-change-vesta-port b/bin/v-change-vesta-port
index be955013..1d96023c 100755
--- a/bin/v-change-vesta-port
+++ b/bin/v-change-vesta-port
@@ -2,11 +2,30 @@
 # info: change vesta port
 # options: port
 #
-# Function change vesta port
-
+# Function will change vesta port
 
 #----------------------------------------------------------#
-#              Variable & Verifications                    #
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+port=$1
+
+if [ -z "$VESTA" ]; then
+    VESTA="/usr/local/vesta"
+fi
+
+if [ ! -f "$VESTA/conf/port.conf" ]; then
+    oldport=8083
+else
+    oldport=`cat $VESTA/conf/port.conf`
+fi
+
+# Includes
+source $VESTA/func/main.sh
+
+#----------------------------------------------------------#
+#                    Verifications                         #
 #----------------------------------------------------------#
 
 whoami=$(whoami)
@@ -15,26 +34,8 @@ if [ "$whoami" != "root" ] && [ "$whoami" != "admin" ] ; then
     exit 1;
 fi
 
-if [ -z "$VESTA" ]; then
-    VESTA="/usr/local/vesta"
-fi
-
-# Includes
-source $VESTA/func/main.sh
-
-# Argument definition
-port=$1
-
-re='^[0-9]+$'
-if ! [[ $port =~ $re ]] ; then
-    echo "error: Not a number" >&2; exit 1
-fi
-
-if [ ! -f "$VESTA/conf/port.conf" ]; then
-    oldport=8083
-else
-    oldport=`cat $VESTA/conf/port.conf`
-fi
+check_args '1' "$#" 'PORT'
+is_int_format_valid "$port" 'port number'
 
 #----------------------------------------------------------#
 #                       Action                             #

From e902b0180b6e78c3cc7365ef6f1fee363b6127cf Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 15:55:29 +0200
Subject: [PATCH 0647/2300] Update v-change-vesta-port

---
 bin/v-change-vesta-port | 16 ++++++----------
 1 file changed, 6 insertions(+), 10 deletions(-)

diff --git a/bin/v-change-vesta-port b/bin/v-change-vesta-port
index 1d96023c..f3951fdc 100755
--- a/bin/v-change-vesta-port
+++ b/bin/v-change-vesta-port
@@ -15,23 +15,19 @@ if [ -z "$VESTA" ]; then
     VESTA="/usr/local/vesta"
 fi
 
-if [ ! -f "$VESTA/conf/port.conf" ]; then
+# Get current vesta port by reading nginx.conf
+oldport=$(grep 'listen' $VESTA/nginx/conf/nginx.conf | awk '{print $2}' | sed "s|;||")
+if [ -z "$oldport" ]; then
     oldport=8083
-else
-    oldport=`cat $VESTA/conf/port.conf`
 fi
 
-# Includes
-source $VESTA/func/main.sh
-
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#
 
-whoami=$(whoami)
-if [ "$whoami" != "root" ] && [ "$whoami" != "admin" ] ; then
-    echo "You must be root or admin to execute this script";
-    exit 1;
+# Checking permissions
+if [ "$(id -u)" != '0' ]; then
+    check_result $E_FORBIDEN "You must be root to execute this script"
 fi
 
 check_args '1' "$#" 'PORT'

From 5eeead791e1d6caa430beac658d845c1317840e6 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 15:58:20 +0200
Subject: [PATCH 0648/2300] Update v-change-vesta-port

---
 bin/v-change-vesta-port | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-change-vesta-port b/bin/v-change-vesta-port
index f3951fdc..906b6d55 100755
--- a/bin/v-change-vesta-port
+++ b/bin/v-change-vesta-port
@@ -21,6 +21,9 @@ if [ -z "$oldport" ]; then
     oldport=8083
 fi
 
+# Includes
+source $VESTA/func/main.sh
+
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#

From 0ed4207c9ec6641f8ce17af9e07f3f7f807fa711 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 16:10:34 +0200
Subject: [PATCH 0649/2300] Update v-change-vesta-port

---
 bin/v-change-vesta-port | 2 --
 1 file changed, 2 deletions(-)

diff --git a/bin/v-change-vesta-port b/bin/v-change-vesta-port
index 906b6d55..09cff31d 100755
--- a/bin/v-change-vesta-port
+++ b/bin/v-change-vesta-port
@@ -49,8 +49,6 @@ $VESTA/bin/v-update-firewall
 systemctl restart fail2ban.service
 systemctl restart vesta
 
-echo "$port" > $VESTA/conf/port.conf
-
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#

From 84ef0a118fd73351126fb0e0da3392fe282eb789 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 16:13:03 +0200
Subject: [PATCH 0650/2300] Changing /usr/local/vesta to $VESTA

---
 bin/v-add-firewall-chain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-firewall-chain b/bin/v-add-firewall-chain
index 5026d264..0bac12da 100755
--- a/bin/v-add-firewall-chain
+++ b/bin/v-add-firewall-chain
@@ -22,7 +22,7 @@ protocol=$(echo $protocol|tr '[:lower:]' '[:upper:]')
 iptables="/sbin/iptables"
 
 # Get vesta port by reading nginx.conf
-vestaport=$(grep 'listen' /usr/local/vesta/nginx/conf/nginx.conf | awk '{print $2}' | sed "s|;||")
+vestaport=$(grep 'listen' $VESTA/nginx/conf/nginx.conf | awk '{print $2}' | sed "s|;||")
 if [ -z "$vestaport" ]; then
     vestaport=8083
 fi

From 5fe990d98730df5db0a2e15027b6ef3dc9e1abe4 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 18:20:44 +0200
Subject: [PATCH 0651/2300] Asking for secret URL and Vesta port during
 installation

---
 install/vst-install-debian.sh | 48 +++++++++++++++++++++++++++++------
 1 file changed, 40 insertions(+), 8 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 9db820de..dd87ec6e 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -83,6 +83,8 @@ help() {
   -s, --hostname          Set hostname
   -e, --email             Set admin email
   -p, --password          Set admin password
+  -u, --secret_url        Set secret url for hosting panel
+  -1, --port              Set Vesta port
   -f, --force             Force installation
   -h, --help              Print this help
 
@@ -170,6 +172,8 @@ for arg; do
         --interactive)          args="${args}-y " ;;
         --hostname)             args="${args}-s " ;;
         --email)                args="${args}-e " ;;
+        --secret_url)           args="${args}-u " ;;
+        --port)                 args="${args}-1 " ;;
         --password)             args="${args}-p " ;;
         --force)                args="${args}-f " ;;
         --help)                 args="${args}-h " ;;
@@ -204,6 +208,8 @@ while getopts "a:n:w:v:j:k:m:g:d:x:z:c:t:i:b:r:o:q:l:y:s:e:p:fh" Option; do
         y) interactive=$OPTARG ;;       # Interactive install
         s) servername=$OPTARG ;;        # Hostname
         e) email=$OPTARG ;;             # Admin email
+        e) secret_url=$OPTARG ;;        # Secret URL for hosting panel
+        e) port=$OPTARG ;;              # Vesta port
         p) vpass=$OPTARG ;;             # Admin password
         f) force='yes' ;;               # Force install
         h) help ;;                      # Help
@@ -411,6 +417,16 @@ if [ "$interactive" = 'yes' ]; then
         read -p 'Please enter admin email address: ' email
     fi
 
+    # Asking for secret URL
+    if [ -z "$secret_url" ]; then
+        read -p 'Please enter secret URL address for hosting panel (press enter for none): ' secret_url
+    fi
+
+    # Asking for Vesta port
+    if [ -z "$port" ]; then
+        read -p 'Please enter Vesta port number (press enter for 8083): ' port
+    fi
+
     # Asking to set FQDN hostname
     if [ -z "$servername" ]; then
         read -p "Please enter FQDN hostname [$(hostname)]: " servername
@@ -444,6 +460,11 @@ if [ -z "$email" ]; then
     email="admin@$servername"
 fi
 
+# Set port if it wasn't set
+if [ -z "$port" ]; then
+    port="8083"
+fi
+
 # Defining backup directory
 vst_backups="/root/vst_install_backups/$(date +%s)"
 echo "Installation backup directory: $vst_backups"
@@ -1496,8 +1517,8 @@ www_host="www.$servername"
 www_host_ip=$(host $www_host | head -n 1 | awk '{print $NF}')
 if [ "$www_host_ip" != "$ip" ]; then
     echo "=== Deleting www to server hostname"
-    v-delete-web-domain-alias 'admin' "$servername" "$www_host" 'no'
-    v-delete-dns-on-web-alias 'admin' "$servername" "$www_host" 'no'
+    $VESTA/bin/v-delete-web-domain-alias 'admin' "$servername" "$www_host" 'no'
+    $VESTA/bin/v-delete-dns-on-web-alias 'admin' "$servername" "$www_host" 'no'
     www_host=""
 fi
 
@@ -1505,12 +1526,23 @@ echo "Hostname $servername is pointing to $host_ip"
 
 if [ $make_ssl -eq 1 ]; then
     echo "=== Generating HOSTNAME SSL"
-    v-add-letsencrypt-domain 'admin' "$servername" "$www_host" 'yes'
-    v-update-host-certificate 'admin' "$servername"
+    $VESTA/bin/v-add-letsencrypt-domain 'admin' "$servername" "$www_host" 'yes'
+    $VESTA/bin/v-update-host-certificate 'admin' "$servername"
 else
     echo "=== We will not generate SSL because of this"
 fi
-echo "UPDATE_HOSTNAME_SSL='yes'" >> /usr/local/vesta/conf/vesta.conf
+echo "UPDATE_HOSTNAME_SSL='yes'" >> $VESTA/conf/vesta.conf
+
+# Secret URL
+secretquery=''
+if [ ! -z "$secret_url" ]; then
+    echo "<?php \$login_url='$secret_url';" > $VESTA/web/inc/login_url.php
+    secretquery="?$secret_url"
+fi
+
+if [ "$port" != "8083" ]; then
+    $VESTA/bin/v-change-vesta-port $port
+fi
 
 #----------------------------------------------------------#
 #                   Vesta Access Info                      #
@@ -1520,7 +1552,7 @@ echo "UPDATE_HOSTNAME_SSL='yes'" >> /usr/local/vesta/conf/vesta.conf
 echo -e "Congratulations, you have just successfully installed \
 Vesta Control Panel
 
-    https://$ip:8083
+    https://$ip:$port/$secret_url
     username: admin
     password: $vpass
 
@@ -1533,8 +1565,8 @@ Sincerely yours
 vestacp.com team
 " > $tmpfile
 
-# send_mail="$VESTA/web/inc/mail-wrapper.php"
-# cat $tmpfile | $send_mail -s "Vesta Control Panel" $email
+send_mail="$VESTA/web/inc/mail-wrapper.php"
+cat $tmpfile | $send_mail -s "Vesta Control Panel" $email
 
 # Congrats
 echo '======================================================='

From 53f1c6b2bbe7180e48545c14c43939531da9ea41 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 18:23:19 +0200
Subject: [PATCH 0652/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index dd87ec6e..d6b0bc47 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1552,7 +1552,7 @@ fi
 echo -e "Congratulations, you have just successfully installed \
 Vesta Control Panel
 
-    https://$ip:$port/$secret_url
+    https://$ip:$port/$secretquery
     username: admin
     password: $vpass
 

From 77d66b44205a11fd9d2d79fe0dc49c73d987be97 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 23:43:59 +0200
Subject: [PATCH 0653/2300] Update README.md

---
 README.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 7c89aa73..cb073d87 100644
--- a/README.md
+++ b/README.md
@@ -14,8 +14,7 @@ Features
 + Support for Debian 10 (previous releases are also supported)
 
 + You can totally "lock" VestaCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
-    + After MyVesta installation just execute:
-    + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
+    + During installation you will be asked for secret URL for your hosting panel
     + Literally no PHP scripts will be alive (won't be able to get executed), unless you access the URL with that parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless he has the secret URL.
     + You can see for yourself how mechanism was built by looking at:
       + https://github.com/myvesta/vesta/blob/master/src/deb/for-download/php/php.ini#L496

From f75843cef02ea4764e71f2bb319cd5e7cf0ed1b0 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 23:45:22 +0200
Subject: [PATCH 0654/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index cb073d87..a878fb65 100644
--- a/README.md
+++ b/README.md
@@ -29,7 +29,7 @@ Features
 
 + Auto-generating LetsEncrypt SSL for server hostname (signed SSL for Vesta 8083 port, for dovecot (IMAP & POP3) and for Exim (SMTP))
 
-+ Changing Vesta port using one command line: **v-change-vesta-port [number]**
++ Changing Vesta port during installation or later using one command line: **v-change-vesta-port [number]**
 
 + You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
     + You can even create your own APT repositorium in a minute

From 952115a9a83142554cc043fdbf025af080865a88 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 24 Aug 2019 23:50:53 +0200
Subject: [PATCH 0655/2300] Update README.md

---
 README.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index a878fb65..f9a9cee2 100644
--- a/README.md
+++ b/README.md
@@ -14,11 +14,13 @@ Features
 + Support for Debian 10 (previous releases are also supported)
 
 + You can totally "lock" VestaCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
-    + During installation you will be asked for secret URL for your hosting panel
+    + During installation you will be asked to choose secret URL for your hosting panel
     + Literally no PHP scripts will be alive (won't be able to get executed), unless you access the URL with that parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless he has the secret URL.
     + You can see for yourself how mechanism was built by looking at:
       + https://github.com/myvesta/vesta/blob/master/src/deb/for-download/php/php.ini#L496
       + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php
+    + If you didn't set secret URL during installation, you can do it anytime, just execute in SSH:
+    + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
 
 + We disabled dangerous PHP functions in php.ini, so even if, for example, customer's CMS gets compromised, hacker will not be able to execute "shell" from PHP.
 
@@ -29,7 +31,7 @@ Features
 
 + Auto-generating LetsEncrypt SSL for server hostname (signed SSL for Vesta 8083 port, for dovecot (IMAP & POP3) and for Exim (SMTP))
 
-+ Changing Vesta port during installation or later using one command line: **v-change-vesta-port [number]**
++ You can change Vesta port during installation or later using one command line: **v-change-vesta-port [number]**
 
 + You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
     + You can even create your own APT repositorium in a minute

From 92229c2597f377b9ebe8487c47a3b2d1c0c4e06f Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 25 Aug 2019 00:29:48 +0200
Subject: [PATCH 0656/2300] max_length_of_MySQL_username=80

---
 install/vst-install-debian.sh | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d6b0bc47..ab2ead26 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1536,14 +1536,21 @@ echo "UPDATE_HOSTNAME_SSL='yes'" >> $VESTA/conf/vesta.conf
 # Secret URL
 secretquery=''
 if [ ! -z "$secret_url" ]; then
+    echo "=== Set secret URL: $secret_url"
     echo "<?php \$login_url='$secret_url';" > $VESTA/web/inc/login_url.php
     secretquery="?$secret_url"
 fi
 
 if [ "$port" != "8083" ]; then
+    echo "=== Set Vesta port: $port"
     $VESTA/bin/v-change-vesta-port $port
 fi
 
+echo "=== Set URL for phpmyadmin and max_length_of_MySQL_username=80"
+echo "DB_PMA_URL='https://$servername/phpmyadmin/'" >> $VESTA/conf/vesta.conf
+echo "MAX_DBUSER_LEN=80" >> $VESTA/conf/vesta.conf
+
+
 #----------------------------------------------------------#
 #                   Vesta Access Info                      #
 #----------------------------------------------------------#

From c923cabc19533b25b759f75d4fb6a766096f2915 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 25 Aug 2019 02:10:51 +0200
Subject: [PATCH 0657/2300] Warning when server hostname is not pointing to
 server IP

---
 install/vst-install-debian.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ab2ead26..845ffd5d 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1507,6 +1507,12 @@ fi
 # Comparing hostname and ip
 make_ssl=0
 host_ip=$(host $servername | head -n 1 | awk '{print $NF}')
+if [ "$host_ip" != "$ip" ]; then
+    echo "***** PROBLEM: Hostname $servername is not pointing to your server (IP address $ip)"
+    echo "Without pointing your hostname to your IP, LetsEncrypt SSL will not be generated for your server hostname."
+    read -p "Try to point your hostname $servername to IP address $ip and then press ENTER."
+    host_ip=$(host $servername | head -n 1 | awk '{print $NF}')
+fi
 if [ "$host_ip" = "$ip" ]; then
     ip="$servername"
     make_ssl=1

From 2e11fb79f12539cc08655a8b9a4df6b0e469fad4 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 25 Aug 2019 02:15:31 +0200
Subject: [PATCH 0658/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 845ffd5d..3b59bed6 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -184,7 +184,7 @@ done
 eval set -- "$args"
 
 # Parsing arguments
-while getopts "a:n:w:v:j:k:m:g:d:x:z:c:t:i:b:r:o:q:l:y:s:e:p:fh" Option; do
+while getopts "a:n:w:v:j:k:m:g:d:x:z:c:t:i:b:r:o:q:l:y:s:e:p:u:1:fh" Option; do
     case $Option in
         a) apache=$OPTARG ;;            # Apache
         n) nginx=$OPTARG ;;             # Nginx
@@ -208,8 +208,8 @@ while getopts "a:n:w:v:j:k:m:g:d:x:z:c:t:i:b:r:o:q:l:y:s:e:p:fh" Option; do
         y) interactive=$OPTARG ;;       # Interactive install
         s) servername=$OPTARG ;;        # Hostname
         e) email=$OPTARG ;;             # Admin email
-        e) secret_url=$OPTARG ;;        # Secret URL for hosting panel
-        e) port=$OPTARG ;;              # Vesta port
+        u) secret_url=$OPTARG ;;        # Secret URL for hosting panel
+        1) port=$OPTARG ;;              # Vesta port
         p) vpass=$OPTARG ;;             # Admin password
         f) force='yes' ;;               # Force install
         h) help ;;                      # Help

From c73a75e6343fa73deb8c1c6b7ee2ee4732d84bb5 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 25 Aug 2019 03:29:55 +0200
Subject: [PATCH 0659/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 3b59bed6..69be604f 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1393,10 +1393,10 @@ if [ "$apache" = 'yes' ] && [ "$nginx"  = 'yes' ] ; then
 fi
 
 # Configuring mysql host
-# if [ "$mysql" = 'yes' ]; then
-#     $VESTA/bin/v-add-database-host mysql localhost root $mpass
-#     # $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
-# fi
+if [ "$mysql" = 'yes' ]; then
+     $VESTA/bin/v-add-database-host mysql localhost root $mpass
+     # $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
+fi
 
 # Configuring pgsql host
 if [ "$postgresql" = 'yes' ]; then

From f3b15c5834b1e08b1a6f9aafd85c79be0182bbf2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 25 Aug 2019 22:30:20 +0200
Subject: [PATCH 0660/2300] install gnupg2 if it's not installed

---
 install/vst-install-debian.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 69be604f..21e8558e 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -279,6 +279,11 @@ if [ ! -e '/usr/bin/wget' ]; then
     check_result $? "Can't install wget"
 fi
 
+# Check if gnupg2 is installed
+if [ $(dpkg-query -W -f='${Status}' gnupg2 2>/dev/null | grep -c "ok installed") -eq 0 ]; then
+    apt -y install gnupg2
+fi
+
 # Check if apparmor is installed
 # This check is borrowed from HestiaCP
 if [ $(dpkg-query -W -f='${Status}' apparmor 2>/dev/null | grep -c "ok installed") -eq 0 ]; then

From 84088251415c9dd52bd84b90532cc23eeb110405 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 25 Aug 2019 22:59:14 +0200
Subject: [PATCH 0661/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 34 ++++++++++++++++++++++------------
 1 file changed, 22 insertions(+), 12 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 21e8558e..d6b17c70 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1515,24 +1515,32 @@ host_ip=$(host $servername | head -n 1 | awk '{print $NF}')
 if [ "$host_ip" != "$ip" ]; then
     echo "***** PROBLEM: Hostname $servername is not pointing to your server (IP address $ip)"
     echo "Without pointing your hostname to your IP, LetsEncrypt SSL will not be generated for your server hostname."
-    read -p "Try to point your hostname $servername to IP address $ip and then press ENTER."
+    echo "Try to point your hostname $servername to IP address $ip and then press ENTER."
+    echo "For forcing LetsEncrypt installation press f and then ENTER."
+    read -p "If we detect that hostname is still not pointing to your IP, installer will skip LetsEncrypt installation." answer
     host_ip=$(host $servername | head -n 1 | awk '{print $NF}')
 fi
+if [ "$answer" = "f" ]; then
+    make_ssl=1
+fi
 if [ "$host_ip" = "$ip" ]; then
     ip="$servername"
     make_ssl=1
 fi
 
-# Generating LE SSL
-www_host="www.$servername"
-www_host_ip=$(host $www_host | head -n 1 | awk '{print $NF}')
-if [ "$www_host_ip" != "$ip" ]; then
-    echo "=== Deleting www to server hostname"
-    $VESTA/bin/v-delete-web-domain-alias 'admin' "$servername" "$www_host" 'no'
-    $VESTA/bin/v-delete-dns-on-web-alias 'admin' "$servername" "$www_host" 'no'
-    www_host=""
+if [ $make_ssl -eq 1 ]; then
+    # Check if www is also pointing to our IP
+    www_host="www.$servername"
+    www_host_ip=$(host $www_host | head -n 1 | awk '{print $NF}')
+    if [ "$www_host_ip" != "$ip" ]; then
+        echo "=== Deleting www to server hostname"
+        $VESTA/bin/v-delete-web-domain-alias 'admin' "$servername" "$www_host" 'no'
+        $VESTA/bin/v-delete-dns-on-web-alias 'admin' "$servername" "$www_host" 'no'
+        www_host=""
+   fi
 fi
 
+echo "==="
 echo "Hostname $servername is pointing to $host_ip"
 
 if [ $make_ssl -eq 1 ]; then
@@ -1540,8 +1548,9 @@ if [ $make_ssl -eq 1 ]; then
     $VESTA/bin/v-add-letsencrypt-domain 'admin' "$servername" "$www_host" 'yes'
     $VESTA/bin/v-update-host-certificate 'admin' "$servername"
 else
-    echo "=== We will not generate SSL because of this"
+    echo "We will not generate SSL because of this"
 fi
+echo "==="
 echo "UPDATE_HOSTNAME_SSL='yes'" >> $VESTA/conf/vesta.conf
 
 # Secret URL
@@ -1557,10 +1566,11 @@ if [ "$port" != "8083" ]; then
     $VESTA/bin/v-change-vesta-port $port
 fi
 
-echo "=== Set URL for phpmyadmin and max_length_of_MySQL_username=80"
+echo "=== Set URL for phpmyadmin"
 echo "DB_PMA_URL='https://$servername/phpmyadmin/'" >> $VESTA/conf/vesta.conf
+echo "=== Set max_length_of_MySQL_username=80"
 echo "MAX_DBUSER_LEN=80" >> $VESTA/conf/vesta.conf
-
+echo "================================================================"
 
 #----------------------------------------------------------#
 #                   Vesta Access Info                      #

From 2036f4b1189650486d29a552d974bb3ba5c5e13a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 25 Aug 2019 23:01:33 +0200
Subject: [PATCH 0662/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d6b17c70..52c0fdd3 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1516,8 +1516,8 @@ if [ "$host_ip" != "$ip" ]; then
     echo "***** PROBLEM: Hostname $servername is not pointing to your server (IP address $ip)"
     echo "Without pointing your hostname to your IP, LetsEncrypt SSL will not be generated for your server hostname."
     echo "Try to point your hostname $servername to IP address $ip and then press ENTER."
-    echo "For forcing LetsEncrypt installation press f and then ENTER."
-    read -p "If we detect that hostname is still not pointing to your IP, installer will skip LetsEncrypt installation." answer
+    echo "If we detect that hostname is still not pointing to your IP, installer will skip LetsEncrypt installation."
+    read -p "For forcing LetsEncrypt installation press f and then ENTER." answer
     host_ip=$(host $servername | head -n 1 | awk '{print $NF}')
 fi
 if [ "$answer" = "f" ]; then

From 697f80fceb70251ed93c2c9c291ed059064f02d3 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 26 Aug 2019 20:04:12 +0200
Subject: [PATCH 0663/2300] Removing TLSv1 from /etc/nginx/nginx.conf

---
 install/debian/10/nginx/nginx.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/nginx/nginx.conf b/install/debian/10/nginx/nginx.conf
index 1eef1672..405362c8 100644
--- a/install/debian/10/nginx/nginx.conf
+++ b/install/debian/10/nginx/nginx.conf
@@ -97,7 +97,7 @@ http {
 
     # SSL PCI Compliance
     ssl_session_cache   shared:SSL:10m;
-    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+    ssl_protocols       TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;
     ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
 

From 725aedd7ed075d0640b14c955555121da2c8768a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 26 Aug 2019 20:06:42 +0200
Subject: [PATCH 0664/2300] Update nginx.conf

---
 install/debian/9/nginx/nginx.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/9/nginx/nginx.conf b/install/debian/9/nginx/nginx.conf
index e8967d8e..65520501 100644
--- a/install/debian/9/nginx/nginx.conf
+++ b/install/debian/9/nginx/nginx.conf
@@ -98,7 +98,7 @@ http {
 
     # SSL PCI Compliance
     ssl_session_cache   shared:SSL:10m;
-    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+    ssl_protocols       TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;
     ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
 

From f4f6ff78e2f9d4e8a349a01b040e8d5d4387afa6 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 26 Aug 2019 20:07:41 +0200
Subject: [PATCH 0665/2300] Update nginx.conf

---
 install/debian/8/nginx/nginx.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/8/nginx/nginx.conf b/install/debian/8/nginx/nginx.conf
index e8967d8e..65520501 100644
--- a/install/debian/8/nginx/nginx.conf
+++ b/install/debian/8/nginx/nginx.conf
@@ -98,7 +98,7 @@ http {
 
     # SSL PCI Compliance
     ssl_session_cache   shared:SSL:10m;
-    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+    ssl_protocols       TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;
     ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
 

From 7daee89badbeb0d6c6c928687fe1e50a459670e6 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 26 Aug 2019 20:09:19 +0200
Subject: [PATCH 0666/2300] Removing TLSv1 from vesta nginx.conf

---
 src/deb/for-download/nginx/nginx.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/nginx/nginx.conf b/src/deb/for-download/nginx/nginx.conf
index 0a427f07..3bd1034b 100644
--- a/src/deb/for-download/nginx/nginx.conf
+++ b/src/deb/for-download/nginx/nginx.conf
@@ -37,7 +37,7 @@ http {
 
 
     # SSL PCI Compliance
-    ssl_protocols               TLSv1.2 TLSv1.1 TLSv1;
+    ssl_protocols               TLSv1.1 TLSv1.2;
     ssl_ciphers                 EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
     ssl_session_cache           shared:SSL:10m;
     ssl_prefer_server_ciphers   on;

From 9ed52415c393d95e88c08902b6f5a0d86a5389dc Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 26 Aug 2019 20:42:05 +0200
Subject: [PATCH 0667/2300] Avoid changing DNS during install if bind is not
 installed

---
 install/vst-install-debian.sh | 18 +++++++++++-------
 1 file changed, 11 insertions(+), 7 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 52c0fdd3..a300b76b 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1515,9 +1515,9 @@ host_ip=$(host $servername | head -n 1 | awk '{print $NF}')
 if [ "$host_ip" != "$ip" ]; then
     echo "***** PROBLEM: Hostname $servername is not pointing to your server (IP address $ip)"
     echo "Without pointing your hostname to your IP, LetsEncrypt SSL will not be generated for your server hostname."
-    echo "Try to point your hostname $servername to IP address $ip and then press ENTER."
-    echo "If we detect that hostname is still not pointing to your IP, installer will skip LetsEncrypt installation."
-    read -p "For forcing LetsEncrypt installation press f and then ENTER." answer
+    echo "Try to setup an A record in your DNS, pointing your hostname $servername to IP address $ip and then press ENTER."
+    echo "If we detect that hostname is still not pointing to your IP, installer will not add LetsEncrypt SSL certificate to your hosting panel (unsigned SSL will be used instead)."
+    read -p "To force to try anyway to add LetsEncrypt, press f and then ENTER." answer
     host_ip=$(host $servername | head -n 1 | awk '{print $NF}')
 fi
 if [ "$answer" = "f" ]; then
@@ -1533,9 +1533,11 @@ if [ $make_ssl -eq 1 ]; then
     www_host="www.$servername"
     www_host_ip=$(host $www_host | head -n 1 | awk '{print $NF}')
     if [ "$www_host_ip" != "$ip" ]; then
-        echo "=== Deleting www to server hostname"
-        $VESTA/bin/v-delete-web-domain-alias 'admin' "$servername" "$www_host" 'no'
-        $VESTA/bin/v-delete-dns-on-web-alias 'admin' "$servername" "$www_host" 'no'
+        if [ "$named" = 'yes' ]; then
+            echo "=== Deleting www to server hostname"
+            $VESTA/bin/v-delete-web-domain-alias 'admin' "$servername" "$www_host" 'no'
+            $VESTA/bin/v-delete-dns-on-web-alias 'admin' "$servername" "$www_host" 'no'
+        fi
         www_host=""
    fi
 fi
@@ -1568,7 +1570,9 @@ fi
 
 echo "=== Set URL for phpmyadmin"
 echo "DB_PMA_URL='https://$servername/phpmyadmin/'" >> $VESTA/conf/vesta.conf
-echo "=== Set max_length_of_MySQL_username=80"
+if [ "$release" -eq 10 ]; then
+    echo "=== Set max_length_of_MySQL_username=80"
+fi
 echo "MAX_DBUSER_LEN=80" >> $VESTA/conf/vesta.conf
 echo "================================================================"
 

From b1b47a2dd65fe924c559ac3a14d749cc3e1c7ec3 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 26 Aug 2019 21:56:58 +0200
Subject: [PATCH 0668/2300] Avoid changing DNS during install if bind is not
 installed

---
 install/vst-install-debian.sh | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index a300b76b..3dd3352a 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1413,9 +1413,11 @@ fi
 $VESTA/bin/v-add-domain admin $servername
 check_result $? "can't create $servername domain"
 
-# Adding ns1 and ns2 A records
-/usr/local/vesta/bin/v-add-dns-record 'admin' "$servername" 'ns1' 'A' "$pub_ip"
-/usr/local/vesta/bin/v-add-dns-record 'admin' "$servername" 'ns2' 'A' "$pub_ip"
+if [ "$named" = 'yes' ]; then
+    # Adding ns1 and ns2 A records
+    /usr/local/vesta/bin/v-add-dns-record 'admin' "$servername" 'ns1' 'A' "$pub_ip"
+    /usr/local/vesta/bin/v-add-dns-record 'admin' "$servername" 'ns2' 'A' "$pub_ip"
+fi
 
 if [ "$release" -eq 10 ]; then
   if [ -f "/etc/php/7.3/fpm/pool.d/$servername.conf" ]; then

From 56224663e7f9fdc3d56698fd25cc2d43695ffdcf Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 28 Aug 2019 23:33:32 +0200
Subject: [PATCH 0669/2300] Update README.md

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index f9a9cee2..f458dc59 100644
--- a/README.md
+++ b/README.md
@@ -33,6 +33,8 @@ Features
 
 + You can change Vesta port during installation or later using one command line: **v-change-vesta-port [number]**
 
++ Limit maximum number of sent emails (per hour) per mail account and per hosting account.
+
 + You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
     + You can even create your own APT repositorium in a minute
     + We are using latest nginx version for vesta-nginx package

From 596c61c2375e02829049115fda1d7bde2eed978e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 28 Aug 2019 23:36:17 +0200
Subject: [PATCH 0670/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index f458dc59..93e11917 100644
--- a/README.md
+++ b/README.md
@@ -33,7 +33,7 @@ Features
 
 + You can change Vesta port during installation or later using one command line: **v-change-vesta-port [number]**
 
-+ Limit maximum number of sent emails (per hour) per mail account and per hosting account.
++ You can limit maximum number of sent emails (per hour) per mail account and per hosting account.
 
 + You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
     + You can even create your own APT repositorium in a minute

From 1a65c4774bb13795e03473daf0fc3d5feacd1b46 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 29 Aug 2019 00:05:23 +0200
Subject: [PATCH 0671/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 93e11917..e62e6aa8 100644
--- a/README.md
+++ b/README.md
@@ -15,7 +15,7 @@ Features
 
 + You can totally "lock" VestaCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
     + During installation you will be asked to choose secret URL for your hosting panel
-    + Literally no PHP scripts will be alive (won't be able to get executed), unless you access the URL with that parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless he has the secret URL.
+    + Literally no PHP scripts will be alive on hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless he has the secret URL.
     + You can see for yourself how mechanism was built by looking at:
       + https://github.com/myvesta/vesta/blob/master/src/deb/for-download/php/php.ini#L496
       + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php

From 847481d45e9c17d9e0f2e238ef259bf84c4ec3fb Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 29 Aug 2019 00:54:25 +0200
Subject: [PATCH 0672/2300] Update README.md

---
 README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README.md b/README.md
index e62e6aa8..9eef99ad 100644
--- a/README.md
+++ b/README.md
@@ -39,6 +39,7 @@ Features
     + You can even create your own APT repositorium in a minute
     + We are using latest nginx version for vesta-nginx package
     + With your own APT infrastructure you can take security of Vesta-installer infrastructure in your own hands. You will have full control of your Vesta code (this way you can rest assured that there's 0% chance that you'll install malicious packages from repositories that may get hacked)
+    + Binaries that you compile is 100% compatible with official VestaCP from vestacp.com, so you can run official VestaCP code with your own binaries (in case you don't want source code from this fork)
 
 How to install
 ----------------------------

From 31ff92eb7aa405a0a058517261cb5a42ce4fc3c6 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 3 Sep 2019 03:19:20 +0200
Subject: [PATCH 0673/2300] Create cpanel-import.sh

---
 src/deb/for-download/tools/cpanel-import.sh | 357 ++++++++++++++++++++
 1 file changed, 357 insertions(+)
 create mode 100644 src/deb/for-download/tools/cpanel-import.sh

diff --git a/src/deb/for-download/tools/cpanel-import.sh b/src/deb/for-download/tools/cpanel-import.sh
new file mode 100644
index 00000000..04d4f3c2
--- /dev/null
+++ b/src/deb/for-download/tools/cpanel-import.sh
@@ -0,0 +1,357 @@
+#!/bin/bash
+# Author / Idea: Maks Usmanov - Skamasle and good people who help to improve: 
+# Thanks to https://github.com/Skamasle/sk-import-cpanel-backup-to-vestacp/graphs/contributors
+# Github: https://github.com/Skamasle/sk-import-cpanel-backup-to-vestacp
+# Run at your own risk
+# This script take cpanel full backup and import it in vestacp account
+# This script can import databases and database users and password, 
+# Import domains, subdomains and website files
+# This script import also mail accounts and mails into accounts if previous cpanel run dovecot
+# Mail password not are restored this was reset by new one.
+###########
+# If you need restore main database user read line 160 or above
+###########
+if [ $# -lt 1 ]; then
+    echo "usage: bash $0 cpanel-backup.tar.gz"
+    echo "or"
+    echo "usage: bash $0 cpanel-backup.tar.gz MX"
+    exit 1
+fi
+if [[ $PATH != *"/usr/local/vesta/bin"* ]]; then
+    VESTA=/usr/local/vesta
+    export VESTA
+    
+    PATH=$PATH:/usr/local/vesta/bin
+    export PATH
+fi
+if [ ! -e /usr/bin/rsync ] || [ ! -e /usr/bin/file ] ; then
+	echo "#######################################"
+	echo "rsync not installed, try install it"
+	echo "This script need: rsync, file"
+	echo "#######################################"
+	if  [ -e /etc/redhat-release ]; then
+		echo "Run: yum install rsync file"
+	else
+		echo "Run: apt-get install rsync file"
+	fi
+	exit 3
+fi
+# Put this to 0 if you want use bash -x to debug it
+sk_debug=1
+sk_vesta_package=default
+#
+# Only for gen_password but I dont like it, a lot of lt
+# maybe will use it for other functions :)
+source /usr/local/vesta/func/main.sh 
+sk_file=$1
+sk_tmp=sk_tmp
+# I see than this is stupid, not know why is here.
+sk_file_name=$(ls $sk_file)
+tput setaf 2
+echo "Checking provided file..."
+tput sgr0 
+if file $sk_file |grep -q -c "gzip compressed data," ; then
+	tput setaf 2
+	echo "OK - Gziped File"
+	tput sgr0 	
+	if [ ! -d /root/${sk_tmp} ]; then
+		echo "Creating tmp.."
+		mkdir /root/${sk_tmp}
+	fi
+	echo "Extracting backup..."
+	if [ "$sk_debug" != 0 ]; then
+		tar xzvf $sk_file -C /root/${sk_tmp} 2>&1 |
+     		   while read sk_extracted_file; do
+       				ex=$((ex+1))
+       				echo -en "wait... $ex files extracted\r"
+       		   done
+		else
+			tar xzf $sk_file -C /root/${sk_tmp}
+	fi
+		if [ $? -eq 0 ];then
+			tput setaf 2
+			echo "Backup extracted without errors..."
+			tput sgr0 
+		else
+			echo "Error on backup extraction, check your file, try extract it manually"
+			echo "Remove tmp"
+			rm -rf "/root/${sk_tmp}"
+			exit 1
+		fi
+	else
+	echo "Error 3 not-gzip - no stantard cpanel backup provided of file not installed ( Try yum install file, or apt-get install file )"
+	rm -rf "/root/${sk_tmp}"
+	exit 3
+fi
+cd /root/${sk_tmp}/*
+sk_importer_in=$(pwd)
+echo "Access tmp directory $sk_importer_in"
+echo "Get prefix..."
+sk_dead_prefix=$(cat meta/dbprefix)
+if [ $sk_dead_prefix = 1 ]; then
+	echo "Error 666 - I dont like your prefix, I dont want do this job"
+	exit 666
+else
+	echo "I like your prefix, start working"
+fi
+main_domain1=$(grep main_domain userdata/main |cut -d " " -f2)
+if [ "$(ls -A mysql)" ]; then
+	sk_cp_user=$(ls mysql |grep sql | grep -v roundcube.sql |head -n1 |cut -d "_" -f1)
+	if [ -z "$sk_cp_user" ]; then
+		 	sk_cp_user=$(grep "user:" userdata/${main_domain1} | cut -d " " -f2)
+	fi
+	echo "$sk_cp_user" > sk_db_prefix
+	tput setaf 2
+	echo "Get user: $sk_cp_user"
+	tput sgr0
+	sk_restore_dbs=0
+else
+	sk_restore_dbs=1
+# get real cPanel user if no databases exist
+	sk_cp_user=$(grep "user:" userdata/${main_domain1} | cut -d " " -f2)
+fi
+# So get real user, may be we need it after -- oh yes, not remember where but this save my day march 19 2017 on 0.5
+sk_real_cp_user=$(grep "user:" userdata/${main_domain1} | cut -d " " -f2)
+if /usr/local/vesta/bin/v-list-users | grep -q -w $sk_cp_user ;then
+	echo "User alredy exist on your server, maybe on vestacp or in your /etc/passwd"
+	echo "**"
+	echo "Grep your /etc/passwd"
+	grep -q -w $sk_cp_user /etc/passwd
+	echo "**"
+	echo "Stop Working, clening..."
+	rm -rf /root/${sk_tmp}
+	exit 21
+else
+	echo "Generate random password for $sk_cp_user and create Vestacp Account ..."
+	sk_password=$(generate_password)
+	/usr/local/vesta/bin/v-add-user $sk_cp_user $sk_password administrator@${main_domain1} $sk_vesta_package $sk_cp_user $sk_cp_user
+	if [ $? != 0 ]; then
+		tput setaf 2
+		echo "Stop Working... Cant create user...if is fresh install of vestacp try reboot or reopen session check bug https://bugs.vestacp.com/issues/138"
+		tput sgr0
+		rm -rf "/root/${sk_tmp}"
+		exit 4
+		fi
+fi
+
+### Start with Databases
+mysql -e "SET GLOBAL max_allowed_packet=1073741824;"
+tput setaf 2
+echo "Start with Databases"
+tput sgr0 
+sed -i 's/\\//g' mysql.sql
+sed -i "s/\`/'/g" mysql.sql
+
+## User / Password
+grep "GRANT USAGE ON" mysql.sql | awk -F "'" '{ print $2, $6 }' | uniq > user_password_db
+# User and database
+grep "GRANT" mysql.sql |grep -v "USAGE ON"  > u_db
+cat u_db | awk -F "'" '{ print $2, $4 }' | sort | uniq  > uni_u_db
+sed -i "s/$sk_dead_prefix //g" user_password_db
+# Get database list
+sk_db_list=$(grep -m 1 Database: mysql/*.create | awk '{ print  $5 }')
+mysql -e "SHOW DATABASES" > server_dbs
+for sk_dbr in $sk_db_list
+	do
+		grep -w $sk_dbr server_dbs	
+		if [ $? == "1" ]; then
+			echo " Create and restore ${sk_dbr} "
+			mysql < mysql/${sk_dbr}.create
+			sed -i "s/utf8mb4_unicode_520_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.sql
+			mysql ${sk_dbr} < mysql/${sk_dbr}.sql
+		else
+			echo "Error: Cant restore database $sk_dbr alredy exists in mysql server"
+		fi
+done
+
+cat uni_u_db | while read db userdb
+do
+	grep -w $userdb user_password_db |while read user end_user_pass
+		do
+# default cpanel user has all database privileges
+# if you use default user in your config files to connect with database
+# you will need remove && [ "$userdb" != "$sk_cp_user" ] to restore main user, but
+# this will cause database duplication in db.conf and will interfer with vestacp backups 
+			if [ "$userdb" == "$user" ] && [ "$userdb" != "$sk_cp_user" ] && [ "$userdb" != "$sk_real_cp_user" ] ; then
+				echo "DB='$db' DBUSER='$userdb' MD5='$end_user_pass' HOST='localhost' TYPE='mysql' CHARSET='UTF8' U_DISK='0' SUSPENDED='no' TIME='$TIME' DATE='$DATE'" >> /usr/local/vesta/data/users/${sk_cp_user}/db.conf
+			fi
+		done
+done
+
+# Leave vesta restore passwords and create users
+tput setaf 2
+echo "Rebuild databases files for $sk_cp_user"
+tput sgr0 
+/usr/local/vesta/bin/v-rebuild-databases $sk_cp_user
+
+## end mysql
+
+skaddons=$(cat addons |cut -d "=" -f1)
+sed -i 's/_/./g; s/=/ /g' addons
+echo "Converting addons domains, subdomains and some other fun"
+cp sds sk_sds
+cp sds2 sk_sds2
+sed -i 's/_/./g' sk_sds
+sed -i 's/public_html/public@html/g; s/_/./g; s/public@html/public_html/g; s/=/ /g; s/$sk_default_sub/@/g' sk_sds2
+cat addons | while read sk_addon_domain sk_addon_sub
+do
+	echo "Converting default subdomain: $sk_addon_sub in domain: $sk_addon_domain"
+	sed -i -e "s/$sk_addon_sub/$sk_addon_domain/g" sk_sds
+	sed -i -e "s/$sk_addon_sub/$sk_addon_domain/g" sk_sds2
+	mv userdata/$sk_addon_sub userdata/${sk_addon_domain}
+done
+
+tput setaf 2
+echo "Start restoring domains"
+tput sgr0
+function get_domain_path() {
+		while read sk_domain path
+	do
+		if [ -e userdata/${sk_domain} ];then
+			/usr/local/vesta/bin/v-add-domain $sk_cp_user $sk_domain
+			echo "Restoring $sk_domain..."
+			rm -f /home/${sk_cp_user}/web/${sk_domain}/public_html/index.html
+			if [ "$sk_debug" != 0 ]; then
+				rsync -av homedir/${path}/ /home/${sk_cp_user}/web/${sk_domain}/public_html 2>&1 | 
+    			while read sk_file_dm; do
+       			 	sk_sync=$((sk_sync+1))
+       			 	echo -en "-- $sk_sync restored files\r"
+				done
+			echo " "
+			else
+				rsync homedir/${path}/ /home/${sk_cp_user}/web/${sk_domain}/public_html
+			fi
+			chown $sk_cp_user:$sk_cp_user -R /home/${sk_cp_user}/web/${sk_domain}/public_html
+			chmod 751 /home/${sk_cp_user}/web/${sk_domain}/public_html
+			echo "$sk_domain" >> exclude_path
+		fi
+done
+
+} 
+get_domain_path < sk_sds2
+
+/usr/local/vesta/bin/v-add-domain $sk_cp_user $main_domain1
+# need it for restore main domain
+if [ ! -e exclude_path ];then
+	touch exclude_path
+fi
+echo "Restore main domain: $main_domain1"
+rm -f /home/${sk_cp_user}/web/${main_domain1}/public_html/index.html
+if [ "$sk_debug" != 0 ]; then
+	rsync -av --exclude-from='exclude_path' homedir/public_html/ /home/${sk_cp_user}/web/${main_domain1}/public_html 2>&1 | 
+    		while read sk_file_dm; do
+       			 sk_sync=$((sk_sync+1))
+       			 echo -en "-- $sk_sync restored files\r"
+			done
+		echo " "
+else
+	rsync --exclude-from='exclude_path' homedir/public_html/ /home/${sk_cp_user}/web/${main_domain1}/public_html 2>&1
+fi
+chown $sk_cp_user:$sk_cp_user -R /home/${sk_cp_user}/web/${main_domain1}/public_html
+chmod 751 /home/${sk_cp_user}/web/${main_domain1}/public_html
+rm -f sk_sds2 sk_sds
+
+##################
+# mail
+tput setaf 2
+echo "Start Restoring Mails"
+tput sgr0
+sk_cod=$(date +%s) # Just for numbers and create another file if acccount was restored before.
+sk_mdir=${sk_importer_in}/homedir/mail
+cd $sk_mdir
+for sk_maild in $(ls -1)
+do
+if [[ "$sk_maild" != "cur" && "$sk_maild" != "new" && "$sk_maild" != "tmp"  ]]; then
+	if [ -d "$sk_maild" ]; then
+		for sk_mail_account in $(ls $sk_maild/)
+		 do
+					
+					echo "Create and restore mail account: $sk_mail_account@$sk_maild"
+					sk_mail_pass1=$(generate_password)		
+					/usr/local/vesta/bin/v-add-mail-account $sk_cp_user $sk_maild $sk_mail_account $sk_mail_pass1
+					mv ${sk_maild}/${sk_mail_account} /home/${sk_cp_user}/mail/${sk_maild}
+					chown ${sk_cp_user}:mail -R /home/${sk_cp_user}/mail/${sk_maild}
+					find /home/${sk_cp_user}/mail/${sk_maild} -type f -name 'dovecot*' -delete
+					echo "${sk_mail_account}@${sk_maild} | $sk_mail_pass1"	>> /root/sk_mail_password_${sk_cp_user}-${sk_cod}
+		done
+	fi
+#else
+# this only detect default dirs account new, cur, tmp etc
+# maybe can do something with this, but on most cpanel default account have only spam.
+fi
+done
+echo "All mail accounts restored"
+############# ssl functions <(°-°)>
+tput setaf 2
+echo "Restoring SSL for domains"
+tput sgr0
+
+mv  ${sk_importer_in}/sslkeys/* ${sk_importer_in}/sslcerts/
+if ls -1 ${sk_importer_in}/ssl/* >/dev/null 2>&1; then
+        mv  ${sk_importer_in}/ssl/* ${sk_importer_in}/sslcerts/
+else
+        echo "No SSL Cert. found..."
+fi
+
+
+sk_domains=$(/usr/local/vesta/bin/v-list-web-domains $sk_cp_user plain |awk '{ print  $1 }')
+
+for ssl in $sk_domains
+do
+	if [ -e ${sk_importer_in}/sslcerts/${ssl}.key ]; then
+		echo "Found SSL for ${ssl}, restoring..."
+		/usr/local/vesta/bin/v-add-web-domain-ssl $sk_cp_user $ssl ${sk_importer_in}/sslcerts/
+	fi
+done
+function sk_restore_pass () {
+sk_actual_pass=$(grep -w "^$sk_cp_user:" /etc/shadow |tr ":" " " | awk '{ print  $2 }' )
+sk_new_pass=$(cat $sk_importer_in/shadow)
+# need replace I hope you have installed it as in most systems...  
+# sed is a hero but replace is easy and not need space // :D
+replace "$sk_cp_user:$sk_actual_pass" "$sk_cp_user:$sk_new_pass" -- /etc/shadow
+tput setaf 5
+echo "Old  cPanel password restored in $sk_cp_user vesta account"
+tput sgr0
+}
+function sk_fix_mx () {
+tput setaf 2
+	echo "Start With MX Records"
+tput sgr0
+cd $sk_importer_in/dnszones
+for sk_mx in $sk_domains 
+do
+	if [ -e $sk_mx.db ]; then
+		sk_id=$(grep MX /usr/local/vesta/data/users/${sk_cp_user}/dns/${sk_mx}.conf |tr "'" " " | cut -d " " -f 2)
+		/usr/local/vesta/bin/v-delete-dns-record $sk_cp_user $sk_mx $sk_id
+		grep MX ${sk_mx}.db |  awk '{for(sk=NF;sk>=1;sk--) printf "%s ", $sk;print ""}' | while read value pri ns rest
+			do
+				if [ "$ns" == "MX" ];then
+					if [ "$value" == "$sk_mx" ] || [ "$value" == "$sk_mx." ];then 
+						value=mail.$value
+					fi
+					/usr/local/vesta/bin/v-add-dns-record $sk_cp_user $sk_mx @ MX $value $pri
+					if [[ "$?" -ge "1" ]]; then
+						/usr/local/vesta/bin/v-add-dns-record $sk_cp_user $sk_mx @ MX mail.${sk_mx} 0
+					fi
+					echo "MX fixed in $sk_mx"
+				fi
+			done
+	fi	
+done
+}
+if [ "$2" == "MX" ];then
+# Need some fixed so run if you want try it, marked as experimental
+	sk_fix_mx
+fi
+sk_restore_pass
+
+echo "Remove tmp files"
+rm -rf "/root/${sk_tmp}"
+tput setaf 4
+echo "##############################"
+echo "cPanel Backup restored"
+echo "Review your content and report any fail"
+echo "I reset mail password not posible restore it yet."
+echo "Check your new passwords runing: cat /root/sk_mail_password_${sk_cp_user}-${sk_cod}"
+echo "##############################"
+tput sgr0

From aec47bf55055b57a32b42f7c0f15e3d2d939d23a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 3 Sep 2019 03:20:06 +0200
Subject: [PATCH 0674/2300] Create cpanel-import-godaddy.sh

---
 .../tools/cpanel-import-godaddy.sh            | 357 ++++++++++++++++++
 1 file changed, 357 insertions(+)
 create mode 100644 src/deb/for-download/tools/cpanel-import-godaddy.sh

diff --git a/src/deb/for-download/tools/cpanel-import-godaddy.sh b/src/deb/for-download/tools/cpanel-import-godaddy.sh
new file mode 100644
index 00000000..04d4f3c2
--- /dev/null
+++ b/src/deb/for-download/tools/cpanel-import-godaddy.sh
@@ -0,0 +1,357 @@
+#!/bin/bash
+# Author / Idea: Maks Usmanov - Skamasle and good people who help to improve: 
+# Thanks to https://github.com/Skamasle/sk-import-cpanel-backup-to-vestacp/graphs/contributors
+# Github: https://github.com/Skamasle/sk-import-cpanel-backup-to-vestacp
+# Run at your own risk
+# This script take cpanel full backup and import it in vestacp account
+# This script can import databases and database users and password, 
+# Import domains, subdomains and website files
+# This script import also mail accounts and mails into accounts if previous cpanel run dovecot
+# Mail password not are restored this was reset by new one.
+###########
+# If you need restore main database user read line 160 or above
+###########
+if [ $# -lt 1 ]; then
+    echo "usage: bash $0 cpanel-backup.tar.gz"
+    echo "or"
+    echo "usage: bash $0 cpanel-backup.tar.gz MX"
+    exit 1
+fi
+if [[ $PATH != *"/usr/local/vesta/bin"* ]]; then
+    VESTA=/usr/local/vesta
+    export VESTA
+    
+    PATH=$PATH:/usr/local/vesta/bin
+    export PATH
+fi
+if [ ! -e /usr/bin/rsync ] || [ ! -e /usr/bin/file ] ; then
+	echo "#######################################"
+	echo "rsync not installed, try install it"
+	echo "This script need: rsync, file"
+	echo "#######################################"
+	if  [ -e /etc/redhat-release ]; then
+		echo "Run: yum install rsync file"
+	else
+		echo "Run: apt-get install rsync file"
+	fi
+	exit 3
+fi
+# Put this to 0 if you want use bash -x to debug it
+sk_debug=1
+sk_vesta_package=default
+#
+# Only for gen_password but I dont like it, a lot of lt
+# maybe will use it for other functions :)
+source /usr/local/vesta/func/main.sh 
+sk_file=$1
+sk_tmp=sk_tmp
+# I see than this is stupid, not know why is here.
+sk_file_name=$(ls $sk_file)
+tput setaf 2
+echo "Checking provided file..."
+tput sgr0 
+if file $sk_file |grep -q -c "gzip compressed data," ; then
+	tput setaf 2
+	echo "OK - Gziped File"
+	tput sgr0 	
+	if [ ! -d /root/${sk_tmp} ]; then
+		echo "Creating tmp.."
+		mkdir /root/${sk_tmp}
+	fi
+	echo "Extracting backup..."
+	if [ "$sk_debug" != 0 ]; then
+		tar xzvf $sk_file -C /root/${sk_tmp} 2>&1 |
+     		   while read sk_extracted_file; do
+       				ex=$((ex+1))
+       				echo -en "wait... $ex files extracted\r"
+       		   done
+		else
+			tar xzf $sk_file -C /root/${sk_tmp}
+	fi
+		if [ $? -eq 0 ];then
+			tput setaf 2
+			echo "Backup extracted without errors..."
+			tput sgr0 
+		else
+			echo "Error on backup extraction, check your file, try extract it manually"
+			echo "Remove tmp"
+			rm -rf "/root/${sk_tmp}"
+			exit 1
+		fi
+	else
+	echo "Error 3 not-gzip - no stantard cpanel backup provided of file not installed ( Try yum install file, or apt-get install file )"
+	rm -rf "/root/${sk_tmp}"
+	exit 3
+fi
+cd /root/${sk_tmp}/*
+sk_importer_in=$(pwd)
+echo "Access tmp directory $sk_importer_in"
+echo "Get prefix..."
+sk_dead_prefix=$(cat meta/dbprefix)
+if [ $sk_dead_prefix = 1 ]; then
+	echo "Error 666 - I dont like your prefix, I dont want do this job"
+	exit 666
+else
+	echo "I like your prefix, start working"
+fi
+main_domain1=$(grep main_domain userdata/main |cut -d " " -f2)
+if [ "$(ls -A mysql)" ]; then
+	sk_cp_user=$(ls mysql |grep sql | grep -v roundcube.sql |head -n1 |cut -d "_" -f1)
+	if [ -z "$sk_cp_user" ]; then
+		 	sk_cp_user=$(grep "user:" userdata/${main_domain1} | cut -d " " -f2)
+	fi
+	echo "$sk_cp_user" > sk_db_prefix
+	tput setaf 2
+	echo "Get user: $sk_cp_user"
+	tput sgr0
+	sk_restore_dbs=0
+else
+	sk_restore_dbs=1
+# get real cPanel user if no databases exist
+	sk_cp_user=$(grep "user:" userdata/${main_domain1} | cut -d " " -f2)
+fi
+# So get real user, may be we need it after -- oh yes, not remember where but this save my day march 19 2017 on 0.5
+sk_real_cp_user=$(grep "user:" userdata/${main_domain1} | cut -d " " -f2)
+if /usr/local/vesta/bin/v-list-users | grep -q -w $sk_cp_user ;then
+	echo "User alredy exist on your server, maybe on vestacp or in your /etc/passwd"
+	echo "**"
+	echo "Grep your /etc/passwd"
+	grep -q -w $sk_cp_user /etc/passwd
+	echo "**"
+	echo "Stop Working, clening..."
+	rm -rf /root/${sk_tmp}
+	exit 21
+else
+	echo "Generate random password for $sk_cp_user and create Vestacp Account ..."
+	sk_password=$(generate_password)
+	/usr/local/vesta/bin/v-add-user $sk_cp_user $sk_password administrator@${main_domain1} $sk_vesta_package $sk_cp_user $sk_cp_user
+	if [ $? != 0 ]; then
+		tput setaf 2
+		echo "Stop Working... Cant create user...if is fresh install of vestacp try reboot or reopen session check bug https://bugs.vestacp.com/issues/138"
+		tput sgr0
+		rm -rf "/root/${sk_tmp}"
+		exit 4
+		fi
+fi
+
+### Start with Databases
+mysql -e "SET GLOBAL max_allowed_packet=1073741824;"
+tput setaf 2
+echo "Start with Databases"
+tput sgr0 
+sed -i 's/\\//g' mysql.sql
+sed -i "s/\`/'/g" mysql.sql
+
+## User / Password
+grep "GRANT USAGE ON" mysql.sql | awk -F "'" '{ print $2, $6 }' | uniq > user_password_db
+# User and database
+grep "GRANT" mysql.sql |grep -v "USAGE ON"  > u_db
+cat u_db | awk -F "'" '{ print $2, $4 }' | sort | uniq  > uni_u_db
+sed -i "s/$sk_dead_prefix //g" user_password_db
+# Get database list
+sk_db_list=$(grep -m 1 Database: mysql/*.create | awk '{ print  $5 }')
+mysql -e "SHOW DATABASES" > server_dbs
+for sk_dbr in $sk_db_list
+	do
+		grep -w $sk_dbr server_dbs	
+		if [ $? == "1" ]; then
+			echo " Create and restore ${sk_dbr} "
+			mysql < mysql/${sk_dbr}.create
+			sed -i "s/utf8mb4_unicode_520_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.sql
+			mysql ${sk_dbr} < mysql/${sk_dbr}.sql
+		else
+			echo "Error: Cant restore database $sk_dbr alredy exists in mysql server"
+		fi
+done
+
+cat uni_u_db | while read db userdb
+do
+	grep -w $userdb user_password_db |while read user end_user_pass
+		do
+# default cpanel user has all database privileges
+# if you use default user in your config files to connect with database
+# you will need remove && [ "$userdb" != "$sk_cp_user" ] to restore main user, but
+# this will cause database duplication in db.conf and will interfer with vestacp backups 
+			if [ "$userdb" == "$user" ] && [ "$userdb" != "$sk_cp_user" ] && [ "$userdb" != "$sk_real_cp_user" ] ; then
+				echo "DB='$db' DBUSER='$userdb' MD5='$end_user_pass' HOST='localhost' TYPE='mysql' CHARSET='UTF8' U_DISK='0' SUSPENDED='no' TIME='$TIME' DATE='$DATE'" >> /usr/local/vesta/data/users/${sk_cp_user}/db.conf
+			fi
+		done
+done
+
+# Leave vesta restore passwords and create users
+tput setaf 2
+echo "Rebuild databases files for $sk_cp_user"
+tput sgr0 
+/usr/local/vesta/bin/v-rebuild-databases $sk_cp_user
+
+## end mysql
+
+skaddons=$(cat addons |cut -d "=" -f1)
+sed -i 's/_/./g; s/=/ /g' addons
+echo "Converting addons domains, subdomains and some other fun"
+cp sds sk_sds
+cp sds2 sk_sds2
+sed -i 's/_/./g' sk_sds
+sed -i 's/public_html/public@html/g; s/_/./g; s/public@html/public_html/g; s/=/ /g; s/$sk_default_sub/@/g' sk_sds2
+cat addons | while read sk_addon_domain sk_addon_sub
+do
+	echo "Converting default subdomain: $sk_addon_sub in domain: $sk_addon_domain"
+	sed -i -e "s/$sk_addon_sub/$sk_addon_domain/g" sk_sds
+	sed -i -e "s/$sk_addon_sub/$sk_addon_domain/g" sk_sds2
+	mv userdata/$sk_addon_sub userdata/${sk_addon_domain}
+done
+
+tput setaf 2
+echo "Start restoring domains"
+tput sgr0
+function get_domain_path() {
+		while read sk_domain path
+	do
+		if [ -e userdata/${sk_domain} ];then
+			/usr/local/vesta/bin/v-add-domain $sk_cp_user $sk_domain
+			echo "Restoring $sk_domain..."
+			rm -f /home/${sk_cp_user}/web/${sk_domain}/public_html/index.html
+			if [ "$sk_debug" != 0 ]; then
+				rsync -av homedir/${path}/ /home/${sk_cp_user}/web/${sk_domain}/public_html 2>&1 | 
+    			while read sk_file_dm; do
+       			 	sk_sync=$((sk_sync+1))
+       			 	echo -en "-- $sk_sync restored files\r"
+				done
+			echo " "
+			else
+				rsync homedir/${path}/ /home/${sk_cp_user}/web/${sk_domain}/public_html
+			fi
+			chown $sk_cp_user:$sk_cp_user -R /home/${sk_cp_user}/web/${sk_domain}/public_html
+			chmod 751 /home/${sk_cp_user}/web/${sk_domain}/public_html
+			echo "$sk_domain" >> exclude_path
+		fi
+done
+
+} 
+get_domain_path < sk_sds2
+
+/usr/local/vesta/bin/v-add-domain $sk_cp_user $main_domain1
+# need it for restore main domain
+if [ ! -e exclude_path ];then
+	touch exclude_path
+fi
+echo "Restore main domain: $main_domain1"
+rm -f /home/${sk_cp_user}/web/${main_domain1}/public_html/index.html
+if [ "$sk_debug" != 0 ]; then
+	rsync -av --exclude-from='exclude_path' homedir/public_html/ /home/${sk_cp_user}/web/${main_domain1}/public_html 2>&1 | 
+    		while read sk_file_dm; do
+       			 sk_sync=$((sk_sync+1))
+       			 echo -en "-- $sk_sync restored files\r"
+			done
+		echo " "
+else
+	rsync --exclude-from='exclude_path' homedir/public_html/ /home/${sk_cp_user}/web/${main_domain1}/public_html 2>&1
+fi
+chown $sk_cp_user:$sk_cp_user -R /home/${sk_cp_user}/web/${main_domain1}/public_html
+chmod 751 /home/${sk_cp_user}/web/${main_domain1}/public_html
+rm -f sk_sds2 sk_sds
+
+##################
+# mail
+tput setaf 2
+echo "Start Restoring Mails"
+tput sgr0
+sk_cod=$(date +%s) # Just for numbers and create another file if acccount was restored before.
+sk_mdir=${sk_importer_in}/homedir/mail
+cd $sk_mdir
+for sk_maild in $(ls -1)
+do
+if [[ "$sk_maild" != "cur" && "$sk_maild" != "new" && "$sk_maild" != "tmp"  ]]; then
+	if [ -d "$sk_maild" ]; then
+		for sk_mail_account in $(ls $sk_maild/)
+		 do
+					
+					echo "Create and restore mail account: $sk_mail_account@$sk_maild"
+					sk_mail_pass1=$(generate_password)		
+					/usr/local/vesta/bin/v-add-mail-account $sk_cp_user $sk_maild $sk_mail_account $sk_mail_pass1
+					mv ${sk_maild}/${sk_mail_account} /home/${sk_cp_user}/mail/${sk_maild}
+					chown ${sk_cp_user}:mail -R /home/${sk_cp_user}/mail/${sk_maild}
+					find /home/${sk_cp_user}/mail/${sk_maild} -type f -name 'dovecot*' -delete
+					echo "${sk_mail_account}@${sk_maild} | $sk_mail_pass1"	>> /root/sk_mail_password_${sk_cp_user}-${sk_cod}
+		done
+	fi
+#else
+# this only detect default dirs account new, cur, tmp etc
+# maybe can do something with this, but on most cpanel default account have only spam.
+fi
+done
+echo "All mail accounts restored"
+############# ssl functions <(°-°)>
+tput setaf 2
+echo "Restoring SSL for domains"
+tput sgr0
+
+mv  ${sk_importer_in}/sslkeys/* ${sk_importer_in}/sslcerts/
+if ls -1 ${sk_importer_in}/ssl/* >/dev/null 2>&1; then
+        mv  ${sk_importer_in}/ssl/* ${sk_importer_in}/sslcerts/
+else
+        echo "No SSL Cert. found..."
+fi
+
+
+sk_domains=$(/usr/local/vesta/bin/v-list-web-domains $sk_cp_user plain |awk '{ print  $1 }')
+
+for ssl in $sk_domains
+do
+	if [ -e ${sk_importer_in}/sslcerts/${ssl}.key ]; then
+		echo "Found SSL for ${ssl}, restoring..."
+		/usr/local/vesta/bin/v-add-web-domain-ssl $sk_cp_user $ssl ${sk_importer_in}/sslcerts/
+	fi
+done
+function sk_restore_pass () {
+sk_actual_pass=$(grep -w "^$sk_cp_user:" /etc/shadow |tr ":" " " | awk '{ print  $2 }' )
+sk_new_pass=$(cat $sk_importer_in/shadow)
+# need replace I hope you have installed it as in most systems...  
+# sed is a hero but replace is easy and not need space // :D
+replace "$sk_cp_user:$sk_actual_pass" "$sk_cp_user:$sk_new_pass" -- /etc/shadow
+tput setaf 5
+echo "Old  cPanel password restored in $sk_cp_user vesta account"
+tput sgr0
+}
+function sk_fix_mx () {
+tput setaf 2
+	echo "Start With MX Records"
+tput sgr0
+cd $sk_importer_in/dnszones
+for sk_mx in $sk_domains 
+do
+	if [ -e $sk_mx.db ]; then
+		sk_id=$(grep MX /usr/local/vesta/data/users/${sk_cp_user}/dns/${sk_mx}.conf |tr "'" " " | cut -d " " -f 2)
+		/usr/local/vesta/bin/v-delete-dns-record $sk_cp_user $sk_mx $sk_id
+		grep MX ${sk_mx}.db |  awk '{for(sk=NF;sk>=1;sk--) printf "%s ", $sk;print ""}' | while read value pri ns rest
+			do
+				if [ "$ns" == "MX" ];then
+					if [ "$value" == "$sk_mx" ] || [ "$value" == "$sk_mx." ];then 
+						value=mail.$value
+					fi
+					/usr/local/vesta/bin/v-add-dns-record $sk_cp_user $sk_mx @ MX $value $pri
+					if [[ "$?" -ge "1" ]]; then
+						/usr/local/vesta/bin/v-add-dns-record $sk_cp_user $sk_mx @ MX mail.${sk_mx} 0
+					fi
+					echo "MX fixed in $sk_mx"
+				fi
+			done
+	fi	
+done
+}
+if [ "$2" == "MX" ];then
+# Need some fixed so run if you want try it, marked as experimental
+	sk_fix_mx
+fi
+sk_restore_pass
+
+echo "Remove tmp files"
+rm -rf "/root/${sk_tmp}"
+tput setaf 4
+echo "##############################"
+echo "cPanel Backup restored"
+echo "Review your content and report any fail"
+echo "I reset mail password not posible restore it yet."
+echo "Check your new passwords runing: cat /root/sk_mail_password_${sk_cp_user}-${sk_cod}"
+echo "##############################"
+tput sgr0

From 08d8c646192eb9a4cf2811f357ee6e887841b097 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 3 Sep 2019 03:21:32 +0200
Subject: [PATCH 0675/2300] Update cpanel-import-godaddy.sh

---
 .../tools/cpanel-import-godaddy.sh            | 50 +++++++++++++++++--
 1 file changed, 45 insertions(+), 5 deletions(-)

diff --git a/src/deb/for-download/tools/cpanel-import-godaddy.sh b/src/deb/for-download/tools/cpanel-import-godaddy.sh
index 04d4f3c2..5e66e0a4 100644
--- a/src/deb/for-download/tools/cpanel-import-godaddy.sh
+++ b/src/deb/for-download/tools/cpanel-import-godaddy.sh
@@ -11,6 +11,9 @@
 ###########
 # If you need restore main database user read line 160 or above
 ###########
+
+MYUSERNAME="mintontherock"
+
 if [ $# -lt 1 ]; then
     echo "usage: bash $0 cpanel-backup.tar.gz"
     echo "or"
@@ -88,12 +91,14 @@ sk_importer_in=$(pwd)
 echo "Access tmp directory $sk_importer_in"
 echo "Get prefix..."
 sk_dead_prefix=$(cat meta/dbprefix)
+sk_dead_prefix="$MYUSERNAME"
 if [ $sk_dead_prefix = 1 ]; then
 	echo "Error 666 - I dont like your prefix, I dont want do this job"
 	exit 666
 else
 	echo "I like your prefix, start working"
 fi
+
 main_domain1=$(grep main_domain userdata/main |cut -d " " -f2)
 if [ "$(ls -A mysql)" ]; then
 	sk_cp_user=$(ls mysql |grep sql | grep -v roundcube.sql |head -n1 |cut -d "_" -f1)
@@ -110,6 +115,7 @@ else
 # get real cPanel user if no databases exist
 	sk_cp_user=$(grep "user:" userdata/${main_domain1} | cut -d " " -f2)
 fi
+sk_cp_user="$MYUSERNAME"
 # So get real user, may be we need it after -- oh yes, not remember where but this save my day march 19 2017 on 0.5
 sk_real_cp_user=$(grep "user:" userdata/${main_domain1} | cut -d " " -f2)
 if /usr/local/vesta/bin/v-list-users | grep -q -w $sk_cp_user ;then
@@ -142,23 +148,53 @@ tput sgr0
 sed -i 's/\\//g' mysql.sql
 sed -i "s/\`/'/g" mysql.sql
 
+sed -i "s/GRANT USAGE ON *.* TO \'/GRANT USAGE ON *.* TO \'${sk_cp_user}_/g" mysql.sql
+sed -i "s/GRANT ALL PRIVILEGES ON \'/GRANT ALL PRIVILEGES ON \'${sk_cp_user}_/g" mysql.sql
+sed -i "s/\'.* TO \'/\'.* TO \'${sk_cp_user}_/g" mysql.sql
+echo "-----------------"
+echo "mysql.sql:"
+cat mysql.sql
+
 ## User / Password
 grep "GRANT USAGE ON" mysql.sql | awk -F "'" '{ print $2, $6 }' | uniq > user_password_db
+echo "-----------------"
+echo "user_password_db:"
+cat user_password_db
+
 # User and database
 grep "GRANT" mysql.sql |grep -v "USAGE ON"  > u_db
+echo "-----------------"
+echo "u_db:"
+cat u_db
+
 cat u_db | awk -F "'" '{ print $2, $4 }' | sort | uniq  > uni_u_db
+echo "-----------------"
+echo "uni_u_db:"
+cat uni_u_db
+
 sed -i "s/$sk_dead_prefix //g" user_password_db
+echo "-----------------"
+echo "user_password_db:"
+cat user_password_db
+
 # Get database list
 sk_db_list=$(grep -m 1 Database: mysql/*.create | awk '{ print  $5 }')
+sk_db_list=$(echo "${sk_cp_user}_$sk_db_list" | sed "s| | ${sk_cp_user}_|g")
+echo "-----------------"
+echo "sk_db_list:"
+echo $sk_db_list
 mysql -e "SHOW DATABASES" > server_dbs
 for sk_dbr in $sk_db_list
 	do
 		grep -w $sk_dbr server_dbs	
 		if [ $? == "1" ]; then
-			echo " Create and restore ${sk_dbr} "
+			echo " Create and restore ${sk_cp_user}_${sk_dbr} "
+			echo "sed -i s/${sk_dbr}/${sk_cp_user}_${sk_dbr}/g mysql/${sk_dbr}.create"
+			sed -i "s/${sk_dbr}/${sk_cp_user}_${sk_dbr}/g" mysql/${sk_dbr}.create
 			mysql < mysql/${sk_dbr}.create
 			sed -i "s/utf8mb4_unicode_520_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.sql
-			mysql ${sk_dbr} < mysql/${sk_dbr}.sql
+			mysql ${sk_cp_user}_${sk_dbr} < mysql/${sk_dbr}.sql
+			echo "---------------"
 		else
 			echo "Error: Cant restore database $sk_dbr alredy exists in mysql server"
 		fi
@@ -172,9 +208,10 @@ do
 # if you use default user in your config files to connect with database
 # you will need remove && [ "$userdb" != "$sk_cp_user" ] to restore main user, but
 # this will cause database duplication in db.conf and will interfer with vestacp backups 
-			if [ "$userdb" == "$user" ] && [ "$userdb" != "$sk_cp_user" ] && [ "$userdb" != "$sk_real_cp_user" ] ; then
-				echo "DB='$db' DBUSER='$userdb' MD5='$end_user_pass' HOST='localhost' TYPE='mysql' CHARSET='UTF8' U_DISK='0' SUSPENDED='no' TIME='$TIME' DATE='$DATE'" >> /usr/local/vesta/data/users/${sk_cp_user}/db.conf
-			fi
+			# if [ "$userdb" == "$user" ] && [ "$userdb" != "$sk_cp_user" ] && [ "$userdb" != "$sk_real_cp_user" ] ; then
+				echo "DB='${sk_cp_user}_$db' DBUSER='${sk_cp_user}_$userdb' MD5='$end_user_pass' HOST='localhost' TYPE='mysql' CHARSET='UTF8' U_DISK='0' SUSPENDED='no' TIME='$TIME' DATE='$DATE'"
+				echo "DB='${sk_cp_user}_$db' DBUSER='${sk_cp_user}_$userdb' MD5='$end_user_pass' HOST='localhost' TYPE='mysql' CHARSET='UTF8' U_DISK='0' SUSPENDED='no' TIME='$TIME' DATE='$DATE'" >> /usr/local/vesta/data/users/${sk_cp_user}/db.conf
+			# fi
 		done
 done
 
@@ -345,6 +382,9 @@ if [ "$2" == "MX" ];then
 fi
 sk_restore_pass
 
+find /home/${sk_cp_user}/web/*/public_html/ -type f -name "wp-config.php" -exec sed -i "s|define('DB_NAME', '|define('DB_NAME', '${sk_cp_user}_|g" {} \;
+find /home/${sk_cp_user}/web/*/public_html/ -type f -name "wp-config.php" -exec sed -i "s|define('DB_USER', '|define('DB_USER', '${sk_cp_user}_|g" {} \;
+
 echo "Remove tmp files"
 rm -rf "/root/${sk_tmp}"
 tput setaf 4

From 6e8302dacf39c1ce7519d3d8d735b7f0786af08a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 3 Sep 2019 23:21:18 +0200
Subject: [PATCH 0676/2300] Update cpanel-import-godaddy.sh

---
 src/deb/for-download/tools/cpanel-import-godaddy.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/cpanel-import-godaddy.sh b/src/deb/for-download/tools/cpanel-import-godaddy.sh
index 5e66e0a4..1088208b 100644
--- a/src/deb/for-download/tools/cpanel-import-godaddy.sh
+++ b/src/deb/for-download/tools/cpanel-import-godaddy.sh
@@ -12,7 +12,7 @@
 # If you need restore main database user read line 160 or above
 ###########
 
-MYUSERNAME="mintontherock"
+MYUSERNAME="ENTER-HERE-DESIRED-DESTINATION-USERNAME"
 
 if [ $# -lt 1 ]; then
     echo "usage: bash $0 cpanel-backup.tar.gz"
@@ -384,6 +384,8 @@ sk_restore_pass
 
 find /home/${sk_cp_user}/web/*/public_html/ -type f -name "wp-config.php" -exec sed -i "s|define('DB_NAME', '|define('DB_NAME', '${sk_cp_user}_|g" {} \;
 find /home/${sk_cp_user}/web/*/public_html/ -type f -name "wp-config.php" -exec sed -i "s|define('DB_USER', '|define('DB_USER', '${sk_cp_user}_|g" {} \;
+find /home/${sk_cp_user}/web/*/public_html/ -type f -name "wp-config.php" -exec sed -i "s|define(' DB_NAME', '|define( 'DB_NAME', '${sk_cp_user}_|g" {} \;
+find /home/${sk_cp_user}/web/*/public_html/ -type f -name "wp-config.php" -exec sed -i "s|define(' DB_USER', '|define( 'DB_USER', '${sk_cp_user}_|g" {} \;
 
 echo "Remove tmp files"
 rm -rf "/root/${sk_tmp}"

From 85ea9804d61df4b1fc9dfb14932460dfcd86714d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 4 Sep 2019 01:02:26 +0200
Subject: [PATCH 0677/2300] Update cpanel-import-godaddy.sh

---
 src/deb/for-download/tools/cpanel-import-godaddy.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/for-download/tools/cpanel-import-godaddy.sh b/src/deb/for-download/tools/cpanel-import-godaddy.sh
index 1088208b..fd62ee22 100644
--- a/src/deb/for-download/tools/cpanel-import-godaddy.sh
+++ b/src/deb/for-download/tools/cpanel-import-godaddy.sh
@@ -384,8 +384,8 @@ sk_restore_pass
 
 find /home/${sk_cp_user}/web/*/public_html/ -type f -name "wp-config.php" -exec sed -i "s|define('DB_NAME', '|define('DB_NAME', '${sk_cp_user}_|g" {} \;
 find /home/${sk_cp_user}/web/*/public_html/ -type f -name "wp-config.php" -exec sed -i "s|define('DB_USER', '|define('DB_USER', '${sk_cp_user}_|g" {} \;
-find /home/${sk_cp_user}/web/*/public_html/ -type f -name "wp-config.php" -exec sed -i "s|define(' DB_NAME', '|define( 'DB_NAME', '${sk_cp_user}_|g" {} \;
-find /home/${sk_cp_user}/web/*/public_html/ -type f -name "wp-config.php" -exec sed -i "s|define(' DB_USER', '|define( 'DB_USER', '${sk_cp_user}_|g" {} \;
+find /home/${sk_cp_user}/web/*/public_html/ -type f -name "wp-config.php" -exec sed -i "s|define( 'DB_NAME', '|define( 'DB_NAME', '${sk_cp_user}_|g" {} \;
+find /home/${sk_cp_user}/web/*/public_html/ -type f -name "wp-config.php" -exec sed -i "s|define( 'DB_USER', '|define( 'DB_USER', '${sk_cp_user}_|g" {} \;
 
 echo "Remove tmp files"
 rm -rf "/root/${sk_tmp}"

From deddf58c3c2bf72bdacfb8762fc31b10aa51f394 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 5 Sep 2019 21:24:43 +0200
Subject: [PATCH 0678/2300] ProxyTimeout 900 in Apache

---
 install/debian/10/apache2/apache2.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/install/debian/10/apache2/apache2.conf b/install/debian/10/apache2/apache2.conf
index 2756132a..2be3e50d 100644
--- a/install/debian/10/apache2/apache2.conf
+++ b/install/debian/10/apache2/apache2.conf
@@ -12,7 +12,8 @@
 
 # Global configuration
 PidFile ${APACHE_PID_FILE}
-Timeout 30
+Timeout 900
+ProxyTimeout 900
 KeepAlive Off
 MaxKeepAliveRequests 100
 KeepAliveTimeout 10

From 10f2dacedbfb655b5bcb9e9c2b9f20078c36044d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 5 Sep 2019 21:27:32 +0200
Subject: [PATCH 0679/2300] proxy_read_timeout 900 in nginx

---
 install/debian/10/nginx/nginx.conf | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/install/debian/10/nginx/nginx.conf b/install/debian/10/nginx/nginx.conf
index 405362c8..16686b08 100644
--- a/install/debian/10/nginx/nginx.conf
+++ b/install/debian/10/nginx/nginx.conf
@@ -64,10 +64,12 @@ http {
     proxy_set_header    X-Real-IP       $remote_addr;
     proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
     proxy_pass_header   Set-Cookie;
-    proxy_connect_timeout   90;
-    proxy_send_timeout  90;
-    proxy_read_timeout  90;
-    proxy_buffers       32 4k;
+    proxy_connect_timeout   900;
+    proxy_send_timeout  900;
+    proxy_read_timeout  900;
+    proxy_buffer_size   128k;
+    proxy_buffers   4 256k;
+    proxy_busy_buffers_size   256k;
 
 
     # Cloudflare https://www.cloudflare.com/ips

From e0c417c5e417f434fa23b342bd196b63d58eac83 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 5 Sep 2019 21:31:45 +0200
Subject: [PATCH 0680/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 3dd3352a..1ef4d9af 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -929,6 +929,7 @@ if [ "$apache" = 'yes'  ]; then
     a2enmod actions
     # a2enmod ruid2
     a2enmod headers
+    a2enmod expires
     a2enmod proxy_fcgi setenvif
     mkdir -p /etc/apache2/conf.d
     echo > /etc/apache2/conf.d/vesta.conf

From 374412f862e4a2a11eef3ba22a966c205798a793 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 6 Sep 2019 00:11:12 +0200
Subject: [PATCH 0681/2300] php-fpm request_terminate_timeout = 30s

---
 install/debian/10/templates/web/apache2/PHP-FPM-73.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73.sh b/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
index aa7b6dbe..546fb7c3 100755
--- a/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
@@ -18,6 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 16
+request_terminate_timeout = 30s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -83,4 +84,4 @@ if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.3/fpm/pool.d/www.conf
 fi
 
-exit 0
\ No newline at end of file
+exit 0

From 0f9e47a7b8b98d35f72102d72ca5a3ba1910b19a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 6 Sep 2019 00:12:10 +0200
Subject: [PATCH 0682/2300] php-fpm request_terminate_timeout = 30s

---
 install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh
index ce8ce02b..cc55b61e 100755
--- a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh
@@ -18,6 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 16
+request_terminate_timeout = 30s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -84,4 +85,4 @@ if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.3/fpm/pool.d/www.conf
 fi
 
-exit 0
\ No newline at end of file
+exit 0

From 79e7d50d78c3374f221b78cb8c6f65e5bc047659 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 7 Sep 2019 21:47:51 +0200
Subject: [PATCH 0683/2300] Multi PHP installer

---
 .../for-download/tools/multi-php-install.sh   | 180 ++++++++++++++++++
 1 file changed, 180 insertions(+)
 create mode 100644 src/deb/for-download/tools/multi-php-install.sh

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
new file mode 100644
index 00000000..fdf4d17b
--- /dev/null
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -0,0 +1,180 @@
+#!/bin/bash
+
+debian_version=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+inst_repo=0
+inst_56=0
+inst_70=0
+inst_71=0
+inst_72=0
+inst_73=0
+
+if [ $# -gt 0 ]; then
+    inst_repo=$1
+fi
+if [ $# -gt 1 ]; then
+    inst_56=$2
+fi
+if [ $# -gt 2 ]; then
+    inst_70=$3
+fi
+if [ $# -gt 3 ]; then
+    inst_71=$4
+fi
+if [ $# -gt 4 ]; then
+    inst_72=$5
+fi
+if [ $# -gt 5 ]; then
+    inst_73=$6
+fi
+
+if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ]; then
+    inst_repo=1
+fi
+
+wait_to_press_enter=0
+if [ -f "/root/wait_to_press_enter" ]; then
+  wait_to_press_enter=1
+fi
+
+function press_enter {
+    if [ $wait_to_press_enter -eq 1 ]; then
+        read -p "$1"
+    else
+        echo $1
+    fi
+}
+
+
+# echo "parameters=$#"
+echo "debian_version=$debian_version"
+echo "inst_repo=$inst_repo"
+echo "inst_56=$inst_56"
+echo "inst_70=$inst_70"
+echo "inst_71=$inst_71"
+echo "inst_72=$inst_72"
+echo "inst_73=$inst_73"
+echo "wait_to_press_enter=$wait_to_press_enter"
+
+press_enter "=== Press enter to continue ==============================================================================="
+
+apt-get update
+if [ "$inst_repo" -eq 1 ]; then
+press_enter "=== Press enter to install sury.org repo ==============================================================================="
+apt-get -y install apt-transport-https ca-certificates
+wget -nv -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
+if [ $debian_version -eq 9 ]; then
+  sh -c 'echo "deb https://packages.sury.org/php/ stretch main" > /etc/apt/sources.list.d/php.list'
+fi
+if [ $debian_version -eq 10 ]; then
+  sh -c 'echo "deb https://packages.sury.org/php/ buster main" > /etc/apt/sources.list.d/php.list'
+fi
+apt-get update
+apt-get upgrade -y
+press_enter "=== Press enter to continue ==============================================================================="
+fi
+
+echo "=== Enabling proxy_fcgi setenvif"
+a2enmod proxy_fcgi setenvif
+service apache2 restart
+
+
+if [ "$inst_56" -eq 1 ]; then
+press_enter "=== Press enter to install PHP 5.6 ==============================================================================="
+apt-get -y install php5.6-mbstring php5.6-bcmath php5.6-cli php5.6-curl php5.6-fpm php5.6-gd php5.6-intl php5.6-mcrypt php5.6-mysql php5.6-soap php5.6-xml php5.6-zip php5.6-memcache php5.6-memcached
+update-rc.d php5.6-fpm defaults
+a2enconf php5.6-fpm
+systemctl restart apache2
+cp -r /etc/php/5.6/ /root/vst_install_backups/php5.6/
+# rm -f /etc/php/5.6/fpm/pool.d/*
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-56.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.stpl
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-56.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.tpl
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-56.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
+chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
+patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php5-deb9.patch
+press_enter "=== Press enter to continue ==============================================================================="
+fi
+
+if [ "$inst_70" -eq 1 ]; then
+press_enter "=== Press enter to install PHP 7.0 ==============================================================================="
+apt-get -y install php7.0-mbstring php7.0-bcmath php7.0-cli php7.0-curl php7.0-fpm php7.0-gd php7.0-intl php7.0-mcrypt php7.0-mysql php7.0-soap php7.0-xml php7.0-zip php7.0-memcache php7.0-memcached
+update-rc.d php7.0-fpm defaults
+a2enconf php7.0-fpm
+systemctl restart apache2
+cp -r /etc/php/7.0/ /root/vst_install_backups/php7.0/
+# rm -f /etc/php/7.0/fpm/pool.d/*
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-70.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.stpl
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-70.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.tpl
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-70.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.sh
+chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.sh
+if [ $debian_version -eq 9 ]; then
+  cp /etc/php/7.0/apache2/php.ini /etc/php/7.0/fpm/php.ini
+fi
+if [ $debian_version -eq 10 ]; then
+  cp /etc/php/7.3/fpm/php.ini /etc/php/7.0/fpm/php.ini
+fi
+press_enter "=== Press enter to continue ==============================================================================="
+fi
+
+if [ "$inst_71" -eq 1 ]; then
+press_enter "=== Press enter to install PHP 7.1 ==============================================================================="
+apt-get -y install php7.1-mbstring php7.1-bcmath php7.1-cli php7.1-curl php7.1-fpm php7.1-gd php7.1-intl php7.1-mcrypt php7.1-mysql php7.1-soap php7.1-xml php7.1-zip php7.1-memcache php7.1-memcached
+update-rc.d php7.1-fpm defaults
+a2enconf php7.1-fpm
+systemctl restart apache2
+cp -r /etc/php/7.1/ /root/vst_install_backups/php7.1/
+# rm -f /etc/php/7.1/fpm/pool.d/*
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-71.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.stpl
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-71.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.tpl
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-71.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.sh
+chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.sh
+if [ $debian_version -eq 9 ]; then
+  cp /etc/php/7.0/apache2/php.ini /etc/php/7.1/fpm/php.ini
+fi
+if [ $debian_version -eq 10 ]; then
+  cp /etc/php/7.3/fpm/php.ini /etc/php/7.1/fpm/php.ini
+fi
+press_enter "=== Press enter to continue ==============================================================================="
+fi
+
+if [ "$inst_72" -eq 1 ]; then
+press_enter "=== Press enter to install PHP 7.2 ==============================================================================="
+apt-get -y install php7.2-mbstring php7.2-bcmath php7.2-cli php7.2-curl php7.2-fpm php7.2-gd php7.2-intl php7.2-mysql php7.2-soap php7.2-xml php7.2-zip php7.2-memcache php7.2-memcached
+update-rc.d php7.2-fpm defaults
+a2enconf php7.2-fpm
+systemctl restart apache2
+cp -r /etc/php/7.2/ /root/vst_install_backups/php7.2/
+# rm -f /etc/php/7.2/fpm/pool.d/*
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-72.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.stpl
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-72.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.tpl
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-72.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.sh
+chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.sh
+if [ $debian_version -eq 9 ]; then
+  cp /etc/php/7.0/apache2/php.ini /etc/php/7.2/fpm/php.ini
+fi
+if [ $debian_version -eq 10 ]; then
+  cp /etc/php/7.3/fpm/php.ini /etc/php/7.2/fpm/php.ini
+fi
+press_enter "=== Press enter to continue ==============================================================================="
+fi
+
+if [ "$inst_73" -eq 1 ]; then
+press_enter "=== Press enter to install PHP 7.3 ==============================================================================="
+apt-get -y install php7.3-mbstring php7.3-bcmath php7.3-cli php7.3-curl php7.3-fpm php7.3-gd php7.3-intl php7.3-mysql php7.3-soap php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached
+update-rc.d php7.3-fpm defaults
+a2enconf php7.3-fpm
+systemctl restart apache2
+cp -r /etc/php/7.3/ /root/vst_install_backups/php7.3/
+# rm -f /etc/php/7.3/fpm/pool.d/*
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-73.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.stpl
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-73.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-73.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-73-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.stpl
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-73-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.tpl
+wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-73-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.sh
+chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh
+chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.sh
+if [ $debian_version -eq 9 ]; then
+  cp /etc/php/7.0/apache2/php.ini /etc/php/7.3/fpm/php.ini
+fi
+press_enter "=== Press enter to continue ==============================================================================="
+fi

From 5ee11280be4831c8f6bf4a9c9d4a89b9c036eea4 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 7 Sep 2019 21:50:44 +0200
Subject: [PATCH 0684/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 9eef99ad..51a967cc 100644
--- a/README.md
+++ b/README.md
@@ -27,7 +27,7 @@ Features
 + Apache is fully switched to mpm_event mode, while PHP is running in PHP-FPM, which is the most stable PHP-stack solution
     + OPCache is turned on by default
 
-+ Support for multi-PHP versions - https://forum.vestacp.com/viewtopic.php?t=17129
++ Support for multi-PHP versions - https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh
 
 + Auto-generating LetsEncrypt SSL for server hostname (signed SSL for Vesta 8083 port, for dovecot (IMAP & POP3) and for Exim (SMTP))
 

From 3535097788d7ba3eb8d964e561bf380ca622a602 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 17:02:19 +0200
Subject: [PATCH 0685/2300] MySQL port blocked by default from outside

---
 install/debian/10/firewall/rules.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/firewall/rules.conf b/install/debian/10/firewall/rules.conf
index fba98e1e..6da5a1c4 100644
--- a/install/debian/10/firewall/rules.conf
+++ b/install/debian/10/firewall/rules.conf
@@ -1,6 +1,6 @@
 RULE='1' ACTION='ACCEPT' PROTOCOL='ICMP' PORT='0' IP='0.0.0.0/0' COMMENT='PING' SUSPENDED='no' TIME='17:13:48' DATE='2014-09-16'
 RULE='2' ACTION='ACCEPT' PROTOCOL='TCP' PORT='8083' IP='0.0.0.0/0' COMMENT='VESTA' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
-RULE='3' ACTION='ACCEPT' PROTOCOL='TCP' PORT='3306,5432' IP='0.0.0.0/0' COMMENT='DB' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='3' ACTION='ACCEPT' PROTOCOL='TCP' PORT='3306,5432' IP='0.0.0.0/0' COMMENT='DB' SUSPENDED='yes' TIME='07:40:16' DATE='2014-05-25'
 RULE='4' ACTION='ACCEPT' PROTOCOL='TCP' PORT='143,993' IP='0.0.0.0/0' COMMENT='IMAP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
 RULE='5' ACTION='ACCEPT' PROTOCOL='TCP' PORT='110,995' IP='0.0.0.0/0' COMMENT='POP3' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
 RULE='6' ACTION='ACCEPT' PROTOCOL='TCP' PORT='25,465,587,2525' IP='0.0.0.0/0' COMMENT='SMTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'

From 69ca62abb1cfc549e59e715dbb86ed2a8ddc33e9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 17:06:17 +0200
Subject: [PATCH 0686/2300] New CloudFlare IPs

tnx to Luka Paunovic
---
 install/debian/10/nginx/nginx.conf | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/install/debian/10/nginx/nginx.conf b/install/debian/10/nginx/nginx.conf
index 16686b08..04513104 100644
--- a/install/debian/10/nginx/nginx.conf
+++ b/install/debian/10/nginx/nginx.conf
@@ -72,28 +72,28 @@ http {
     proxy_busy_buffers_size   256k;
 
 
-    # Cloudflare https://www.cloudflare.com/ips
+# Cloudflare https://www.cloudflare.com/ips
+    set_real_ip_from 173.245.48.0/20;
     set_real_ip_from 103.21.244.0/22;
     set_real_ip_from 103.22.200.0/22;
     set_real_ip_from 103.31.4.0/22;
-    set_real_ip_from 104.16.0.0/12;
-    set_real_ip_from 108.162.192.0/18;
-    set_real_ip_from 131.0.72.0/22;
     set_real_ip_from 141.101.64.0/18;
-    set_real_ip_from 162.158.0.0/15;
-    set_real_ip_from 172.64.0.0/13;
-    set_real_ip_from 173.245.48.0/20;
-    set_real_ip_from 188.114.96.0/20;
+    set_real_ip_from 108.162.192.0/18;
     set_real_ip_from 190.93.240.0/20;
+    set_real_ip_from 188.114.96.0/20;
     set_real_ip_from 197.234.240.0/22;
     set_real_ip_from 198.41.128.0/17;
+    set_real_ip_from 162.158.0.0/15;
+    set_real_ip_from 104.16.0.0/12;
+    set_real_ip_from 172.64.0.0/13;
+    set_real_ip_from 131.0.72.0/22;
     set_real_ip_from 2400:cb00::/32;
     set_real_ip_from 2606:4700::/32;
     set_real_ip_from 2803:f800::/32;
     set_real_ip_from 2405:b500::/32;
     set_real_ip_from 2405:8100::/32;
-    set_real_ip_from 2c0f:f248::/32;
     set_real_ip_from 2a06:98c0::/29;
+    set_real_ip_from 2c0f:f248::/32;
     real_ip_header     CF-Connecting-IP;
 
 

From d688b63a409ba9cf9f7a0e8d2e1e77fb21123ab4 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 17:07:15 +0200
Subject: [PATCH 0687/2300] Update nginx.conf

---
 install/debian/10/nginx/nginx.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/nginx/nginx.conf b/install/debian/10/nginx/nginx.conf
index 04513104..ccf657de 100644
--- a/install/debian/10/nginx/nginx.conf
+++ b/install/debian/10/nginx/nginx.conf
@@ -72,7 +72,7 @@ http {
     proxy_busy_buffers_size   256k;
 
 
-# Cloudflare https://www.cloudflare.com/ips
+    # Cloudflare https://www.cloudflare.com/ips
     set_real_ip_from 173.245.48.0/20;
     set_real_ip_from 103.21.244.0/22;
     set_real_ip_from 103.22.200.0/22;

From 5b51edd081df138c1a5b87b9c727548a7b98d390 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 17:08:32 +0200
Subject: [PATCH 0688/2300] New CloudFlare IPs

Tnx to Luka Paunovic
---
 install/debian/9/nginx/nginx.conf | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/install/debian/9/nginx/nginx.conf b/install/debian/9/nginx/nginx.conf
index 65520501..745e1082 100644
--- a/install/debian/9/nginx/nginx.conf
+++ b/install/debian/9/nginx/nginx.conf
@@ -72,27 +72,27 @@ http {
 
 
     # Cloudflare https://www.cloudflare.com/ips
+    set_real_ip_from 173.245.48.0/20;
     set_real_ip_from 103.21.244.0/22;
     set_real_ip_from 103.22.200.0/22;
     set_real_ip_from 103.31.4.0/22;
-    set_real_ip_from 104.16.0.0/12;
-    set_real_ip_from 108.162.192.0/18;
-    set_real_ip_from 131.0.72.0/22;
     set_real_ip_from 141.101.64.0/18;
-    set_real_ip_from 162.158.0.0/15;
-    set_real_ip_from 172.64.0.0/13;
-    set_real_ip_from 173.245.48.0/20;
-    set_real_ip_from 188.114.96.0/20;
+    set_real_ip_from 108.162.192.0/18;
     set_real_ip_from 190.93.240.0/20;
+    set_real_ip_from 188.114.96.0/20;
     set_real_ip_from 197.234.240.0/22;
     set_real_ip_from 198.41.128.0/17;
+    set_real_ip_from 162.158.0.0/15;
+    set_real_ip_from 104.16.0.0/12;
+    set_real_ip_from 172.64.0.0/13;
+    set_real_ip_from 131.0.72.0/22;
     set_real_ip_from 2400:cb00::/32;
     set_real_ip_from 2606:4700::/32;
     set_real_ip_from 2803:f800::/32;
     set_real_ip_from 2405:b500::/32;
     set_real_ip_from 2405:8100::/32;
-    set_real_ip_from 2c0f:f248::/32;
     set_real_ip_from 2a06:98c0::/29;
+    set_real_ip_from 2c0f:f248::/32;
     real_ip_header     CF-Connecting-IP;
 
 

From a564d335cb08a35aa8112a0ec502491298c7aa9d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 18:46:15 +0200
Subject: [PATCH 0689/2300] testing LE with TLSv1

---
 install/debian/10/nginx/nginx.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/nginx/nginx.conf b/install/debian/10/nginx/nginx.conf
index ccf657de..a28a7b2b 100644
--- a/install/debian/10/nginx/nginx.conf
+++ b/install/debian/10/nginx/nginx.conf
@@ -99,7 +99,7 @@ http {
 
     # SSL PCI Compliance
     ssl_session_cache   shared:SSL:10m;
-    ssl_protocols       TLSv1.1 TLSv1.2;
+    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;
     ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
 

From 9bde61d150d8c4e207a17e16ae686cf4fc842f13 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 19:47:10 +0200
Subject: [PATCH 0690/2300] Update hosting.stpl

---
 install/debian/10/templates/web/nginx/hosting.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/hosting.stpl b/install/debian/10/templates/web/nginx/hosting.stpl
index e4de8c81..d62b5171 100755
--- a/install/debian/10/templates/web/nginx/hosting.stpl
+++ b/install/debian/10/templates/web/nginx/hosting.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
     ssl_certificate      %ssl_pem%;

From 93ecc5d040062a1322ed52ae1faea2e889b95355 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 19:49:13 +0200
Subject: [PATCH 0691/2300] Update force-https-legacy.stpl

---
 install/debian/10/templates/web/nginx/force-https-legacy.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/force-https-legacy.stpl b/install/debian/10/templates/web/nginx/force-https-legacy.stpl
index e2bf9061..56278e86 100644
--- a/install/debian/10/templates/web/nginx/force-https-legacy.stpl
+++ b/install/debian/10/templates/web/nginx/force-https-legacy.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
     ssl_certificate      %ssl_pem%;

From 4f4af970cef0fa477ee715ab802f20e9b6c14f61 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 19:50:01 +0200
Subject: [PATCH 0692/2300] Update force-https-public.stpl

---
 install/debian/10/templates/web/nginx/force-https-public.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/force-https-public.stpl b/install/debian/10/templates/web/nginx/force-https-public.stpl
index 86828f5e..8f0d3fe3 100644
--- a/install/debian/10/templates/web/nginx/force-https-public.stpl
+++ b/install/debian/10/templates/web/nginx/force-https-public.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
     ssl_certificate      %ssl_pem%;

From 1d081977376dac6667a96f364e18529acfbfb0fa Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 19:50:45 +0200
Subject: [PATCH 0693/2300] Update force-https.stpl

---
 install/debian/10/templates/web/nginx/force-https.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/force-https.stpl b/install/debian/10/templates/web/nginx/force-https.stpl
index d8da2530..7da96e46 100644
--- a/install/debian/10/templates/web/nginx/force-https.stpl
+++ b/install/debian/10/templates/web/nginx/force-https.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
     ssl_certificate      %ssl_pem%;

From aaec339c69f96f7c25318d38249f7f7973cf5170 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 19:51:28 +0200
Subject: [PATCH 0694/2300] Update hosting-public.stpl

---
 install/debian/10/templates/web/nginx/hosting-public.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/hosting-public.stpl b/install/debian/10/templates/web/nginx/hosting-public.stpl
index 86828f5e..8f0d3fe3 100644
--- a/install/debian/10/templates/web/nginx/hosting-public.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-public.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
     ssl_certificate      %ssl_pem%;

From 53eb920e204ed5e0479ed90ebdbe565f826de3d2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 19:52:15 +0200
Subject: [PATCH 0695/2300] Update hosting-webmail-phpmyadmin.stpl

---
 .../10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
index 706c705b..4fadbbfc 100644
--- a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
     ssl_certificate      %ssl_pem%;

From 055d0a6c5c5fda5780c64af36bb6a51ec8c7355d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 19:53:15 +0200
Subject: [PATCH 0696/2300] Update hosting-webmail.stpl

---
 install/debian/10/templates/web/nginx/hosting-webmail.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/hosting-webmail.stpl b/install/debian/10/templates/web/nginx/hosting-webmail.stpl
index 95c1571c..e3b36324 100644
--- a/install/debian/10/templates/web/nginx/hosting-webmail.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-webmail.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
     ssl_certificate      %ssl_pem%;

From 86a4ec909c143b44d7015270b2b92985b8a0f329 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 19:53:56 +0200
Subject: [PATCH 0697/2300] Update private-force-https.stpl

---
 install/debian/10/templates/web/nginx/private-force-https.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/private-force-https.stpl b/install/debian/10/templates/web/nginx/private-force-https.stpl
index 7296bd71..bdb7eedb 100644
--- a/install/debian/10/templates/web/nginx/private-force-https.stpl
+++ b/install/debian/10/templates/web/nginx/private-force-https.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
     ssl_certificate      %ssl_pem%;

From 5a60b7b3608c3a7f6bfebec2f1c2f5ef0f12a26f Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 19:54:41 +0200
Subject: [PATCH 0698/2300] Update private-hosting.stpl

---
 install/debian/10/templates/web/nginx/private-hosting.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/private-hosting.stpl b/install/debian/10/templates/web/nginx/private-hosting.stpl
index 6ac66cbf..be3a3f2b 100644
--- a/install/debian/10/templates/web/nginx/private-hosting.stpl
+++ b/install/debian/10/templates/web/nginx/private-hosting.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
     ssl_certificate      %ssl_pem%;

From 40fafca705eb4755ea05a2f280f1644ebdaa9ed2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 19:55:20 +0200
Subject: [PATCH 0699/2300] Update vesta-webmail-phpmyadmin.stpl

---
 .../debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl
index 3f5e8fa6..66d21339 100644
--- a/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl
+++ b/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
     ssl_certificate      %ssl_pem%;

From 789552b48eeed5286b3b33248edd594229aa073a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 19:55:55 +0200
Subject: [PATCH 0700/2300] Update vesta.stpl

---
 install/debian/10/templates/web/nginx/vesta.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/vesta.stpl b/install/debian/10/templates/web/nginx/vesta.stpl
index 4bf7d854..62597734 100644
--- a/install/debian/10/templates/web/nginx/vesta.stpl
+++ b/install/debian/10/templates/web/nginx/vesta.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% http2;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
     ssl_certificate      %ssl_pem%;

From 244f94f53e1694678d2785e29b79b987dd650c81 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 10 Sep 2019 20:32:59 +0200
Subject: [PATCH 0701/2300] Removing again TLSv1

---
 install/debian/10/nginx/nginx.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/nginx/nginx.conf b/install/debian/10/nginx/nginx.conf
index a28a7b2b..ccf657de 100644
--- a/install/debian/10/nginx/nginx.conf
+++ b/install/debian/10/nginx/nginx.conf
@@ -99,7 +99,7 @@ http {
 
     # SSL PCI Compliance
     ssl_session_cache   shared:SSL:10m;
-    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+    ssl_protocols       TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;
     ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
 

From 65c24af9d5aea4cb763bf54333a0d7de02f935dd Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 11 Sep 2019 23:48:33 +0200
Subject: [PATCH 0702/2300] Update secure_login.php

---
 web/inc/secure_login.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 46393d79..7ab32ae0 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -8,6 +8,8 @@ if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/set-ar.php') $
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/set-ar.php') $skip_login_url_check=1;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/get-ar.php') $skip_login_url_check=1;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/get-ar.php') $skip_login_url_check=1;
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 28)=='/usr/local/vesta/web/custom/') $login_url_skip=1; // custom scripts like git webhooks
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 29)=='/usr/local/vesta/web//custom/') $login_url_skip=1;
 
 if (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/vesta/bin/') $skip_login_url_check=1; // allow executing v-* PHP scripts from bash
 

From a0f5caee58ed451e9f3ed132c5a41c0f51dac99b Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Sep 2019 15:07:31 +0200
Subject: [PATCH 0703/2300] Do not try_files if static file not exists

---
 install/debian/10/templates/web/nginx/hosting.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/hosting.stpl b/install/debian/10/templates/web/nginx/hosting.stpl
index d62b5171..0c456c5e 100755
--- a/install/debian/10/templates/web/nginx/hosting.stpl
+++ b/install/debian/10/templates/web/nginx/hosting.stpl
@@ -13,7 +13,7 @@ server {
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
-            try_files      $uri @fallback;
+            # try_files      $uri @fallback;
         }
     }
 

From 908bdd5b333abd35d225292f9694fdaa7071c1e7 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Sep 2019 15:08:16 +0200
Subject: [PATCH 0704/2300] Do not try_files if static file not exists

---
 install/debian/10/templates/web/nginx/hosting.tpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/hosting.tpl b/install/debian/10/templates/web/nginx/hosting.tpl
index 15961c95..262417b1 100755
--- a/install/debian/10/templates/web/nginx/hosting.tpl
+++ b/install/debian/10/templates/web/nginx/hosting.tpl
@@ -10,7 +10,7 @@ server {
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
-            try_files      $uri @fallback;
+            # try_files      $uri @fallback;
         }
     }
 

From a03a01eecc418f4f1cbdead28e50a31407c179e7 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Sep 2019 15:09:38 +0200
Subject: [PATCH 0705/2300] Do not try_files if static file not exists

---
 install/debian/10/templates/web/nginx/private-hosting.tpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/private-hosting.tpl b/install/debian/10/templates/web/nginx/private-hosting.tpl
index aa483ec9..da70045f 100644
--- a/install/debian/10/templates/web/nginx/private-hosting.tpl
+++ b/install/debian/10/templates/web/nginx/private-hosting.tpl
@@ -12,7 +12,7 @@ server {
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
-            try_files      $uri @fallback;
+            # try_files      $uri @fallback;
         }
     }
 

From acc62c1f1e20d5787204b02a2f72ca3c12f9e5ec Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Sep 2019 15:10:05 +0200
Subject: [PATCH 0706/2300] Do not try_files if static file not exists

---
 install/debian/10/templates/web/nginx/private-hosting.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/private-hosting.stpl b/install/debian/10/templates/web/nginx/private-hosting.stpl
index be3a3f2b..d7326a46 100644
--- a/install/debian/10/templates/web/nginx/private-hosting.stpl
+++ b/install/debian/10/templates/web/nginx/private-hosting.stpl
@@ -15,7 +15,7 @@ server {
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
-            try_files      $uri @fallback;
+            # try_files      $uri @fallback;
         }
     }
 

From 8ce0bde89ebba11b377199af47011acdade6cd05 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Sep 2019 15:10:40 +0200
Subject: [PATCH 0707/2300] Do not try_files if static file not exists

---
 install/debian/10/templates/web/nginx/private-force-https.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/private-force-https.stpl b/install/debian/10/templates/web/nginx/private-force-https.stpl
index bdb7eedb..38532e6b 100644
--- a/install/debian/10/templates/web/nginx/private-force-https.stpl
+++ b/install/debian/10/templates/web/nginx/private-force-https.stpl
@@ -15,7 +15,7 @@ server {
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
-            try_files      $uri @fallback;
+            # try_files      $uri @fallback;
         }
     }
 

From eb6f79c6a93f63edc75a1ab06b30c15bcd9e0c99 Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Mon, 23 Sep 2019 15:22:23 +0200
Subject: [PATCH 0708/2300] hosting legacy nginx tpl

---
 .../10/templates/web/nginx/hosting-legacy.sh  | 11 ++++
 ...sting-webmail.stpl => hosting-legacy.stpl} | 14 +----
 ...hosting-webmail.tpl => hosting-legacy.tpl} | 14 +----
 .../web/nginx/hosting-webmail-phpmyadmin.stpl | 62 -------------------
 .../web/nginx/hosting-webmail-phpmyadmin.tpl  | 59 ------------------
 .../10/templates/web/nginx/hosting.stpl       |  0
 .../debian/10/templates/web/nginx/hosting.tpl |  0
 .../10/templates/web/nginx/proxy_ip.tpl       |  0
 .../web/nginx/vesta-webmail-phpmyadmin.stpl   | 52 ----------------
 .../web/nginx/vesta-webmail-phpmyadmin.tpl    |  8 ---
 .../debian/10/templates/web/nginx/vesta.stpl  | 32 ----------
 .../debian/10/templates/web/nginx/vesta.tpl   |  8 ---
 12 files changed, 13 insertions(+), 247 deletions(-)
 create mode 100755 install/debian/10/templates/web/nginx/hosting-legacy.sh
 rename install/debian/10/templates/web/nginx/{hosting-webmail.stpl => hosting-legacy.stpl} (68%)
 rename install/debian/10/templates/web/nginx/{hosting-webmail.tpl => hosting-legacy.tpl} (66%)
 delete mode 100644 install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
 delete mode 100644 install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
 mode change 100755 => 100644 install/debian/10/templates/web/nginx/hosting.stpl
 mode change 100755 => 100644 install/debian/10/templates/web/nginx/hosting.tpl
 mode change 100755 => 100644 install/debian/10/templates/web/nginx/proxy_ip.tpl
 delete mode 100644 install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl
 delete mode 100644 install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.tpl
 delete mode 100644 install/debian/10/templates/web/nginx/vesta.stpl
 delete mode 100644 install/debian/10/templates/web/nginx/vesta.tpl

diff --git a/install/debian/10/templates/web/nginx/hosting-legacy.sh b/install/debian/10/templates/web/nginx/hosting-legacy.sh
new file mode 100755
index 00000000..eeed37ef
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/hosting-legacy.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail.stpl b/install/debian/10/templates/web/nginx/hosting-legacy.stpl
similarity index 68%
rename from install/debian/10/templates/web/nginx/hosting-webmail.stpl
rename to install/debian/10/templates/web/nginx/hosting-legacy.stpl
index e3b36324..d62b5171 100644
--- a/install/debian/10/templates/web/nginx/hosting-webmail.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-legacy.stpl
@@ -13,19 +13,7 @@ server {
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
-            # try_files      $uri @fallback;
-        }
-    }
-
-    location /webmail {
-        disable_symlinks off;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            root           /var/lib/roundcube;
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-            # try_files      $uri @fallback;
+            try_files      $uri @fallback;
         }
     }
 
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail.tpl b/install/debian/10/templates/web/nginx/hosting-legacy.tpl
similarity index 66%
rename from install/debian/10/templates/web/nginx/hosting-webmail.tpl
rename to install/debian/10/templates/web/nginx/hosting-legacy.tpl
index 976737c7..15961c95 100644
--- a/install/debian/10/templates/web/nginx/hosting-webmail.tpl
+++ b/install/debian/10/templates/web/nginx/hosting-legacy.tpl
@@ -10,19 +10,7 @@ server {
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
-            # try_files      $uri @fallback;
-        }
-    }
-
-    location /webmail {
-        disable_symlinks off;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            root           /var/lib/roundcube;
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-            # try_files      $uri @fallback;
+            try_files      $uri @fallback;
         }
     }
 
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
deleted file mode 100644
index 4fadbbfc..00000000
--- a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
+++ /dev/null
@@ -1,62 +0,0 @@
-server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
-    server_name %domain_idn% %alias_idn%;
-    # ssl         on;
-    ssl_certificate      %ssl_pem%;
-    ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
-
-    location / {
-        proxy_pass      https://%ip%:%web_ssl_port%;
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            root           %sdocroot%;
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-            # try_files      $uri @fallback;
-        }
-    }
-
-    location /webmail {
-        disable_symlinks off;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            root           /var/lib/roundcube;
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-            # try_files      $uri @fallback;
-        }
-    }
-
-    location /phpmyadmin {
-        disable_symlinks off;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            root           /usr/share;
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-            # try_files      $uri @fallback;
-        }
-    }
-
-    location /error/ {
-        alias   %home%/%user%/web/%domain%/document_errors/;
-    }
-
-    location @fallback {
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location ~ /\.ht    {return 404;}
-    location ~ /\.svn/  {return 404;}
-    location ~ /\.git/  {return 404;}
-    location ~ /\.hg/   {return 404;}
-    location ~ /\.bzr/  {return 404;}
-
-    disable_symlinks if_not_owner from=%docroot%;
-
-    include %home%/%user%/conf/web/snginx.%domain%.conf*;
-}
-
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
deleted file mode 100644
index 7085e047..00000000
--- a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
+++ /dev/null
@@ -1,59 +0,0 @@
-server {
-    listen      %ip%:%proxy_port%;
-    server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
-
-    location / {
-        proxy_pass      http://%ip%:%web_port%;
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            root           %docroot%;
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-            # try_files      $uri @fallback;
-        }
-    }
-
-    location /webmail {
-        disable_symlinks off;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            root           /var/lib/roundcube;
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-            # try_files      $uri @fallback;
-        }
-    }
-
-    location /phpmyadmin {
-        disable_symlinks off;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            root           /usr/share;
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-            # try_files      $uri @fallback;
-        }
-    }
-
-    location /error/ {
-        alias   %home%/%user%/web/%domain%/document_errors/;
-    }
-
-    location @fallback {
-        proxy_pass      http://%ip%:%web_port%;
-    }
-
-    location ~ /\.ht    {return 404;}
-    location ~ /\.svn/  {return 404;}
-    location ~ /\.git/  {return 404;}
-    location ~ /\.hg/   {return 404;}
-    location ~ /\.bzr/  {return 404;}
-
-    disable_symlinks if_not_owner from=%docroot%;
-
-    include %home%/%user%/conf/web/nginx.%domain%.conf*;
-}
-
diff --git a/install/debian/10/templates/web/nginx/hosting.stpl b/install/debian/10/templates/web/nginx/hosting.stpl
old mode 100755
new mode 100644
diff --git a/install/debian/10/templates/web/nginx/hosting.tpl b/install/debian/10/templates/web/nginx/hosting.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/10/templates/web/nginx/proxy_ip.tpl b/install/debian/10/templates/web/nginx/proxy_ip.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl
deleted file mode 100644
index 66d21339..00000000
--- a/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.stpl
+++ /dev/null
@@ -1,52 +0,0 @@
-server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
-    server_name %domain_idn% %alias_idn%;
-    # ssl         on;
-    ssl_certificate      %ssl_pem%;
-    ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
-    access_log     /var/log/%web_system%/domains/%domain%.log combined;
-
-    location / {
-        proxy_pass      https://%ip%:12383;
-    }
-
-    location /webmail {
-        disable_symlinks off;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            root           /var/lib/roundcube;
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-            # try_files      $uri @fallback;
-        }
-    }
-
-    location /phpmyadmin {
-        disable_symlinks off;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            root           /usr/share;
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-            # try_files      $uri @fallback;
-        }
-    }
-
-    location /phpmyadmin/ {
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location ~ /\.ht    {return 404;}
-    location ~ /\.svn/  {return 404;}
-    location ~ /\.git/  {return 404;}
-    location ~ /\.hg/   {return 404;}
-    location ~ /\.bzr/  {return 404;}
-
-    disable_symlinks if_not_owner from=%docroot%;
-
-    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
-}
-
diff --git a/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.tpl b/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.tpl
deleted file mode 100644
index 851ac0dc..00000000
--- a/install/debian/10/templates/web/nginx/vesta-webmail-phpmyadmin.tpl
+++ /dev/null
@@ -1,8 +0,0 @@
-server {
-    listen      %ip%:%proxy_port%;
-    server_name %domain_idn% %alias_idn%;
-    location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
-    }
-include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
-}
diff --git a/install/debian/10/templates/web/nginx/vesta.stpl b/install/debian/10/templates/web/nginx/vesta.stpl
deleted file mode 100644
index 62597734..00000000
--- a/install/debian/10/templates/web/nginx/vesta.stpl
+++ /dev/null
@@ -1,32 +0,0 @@
-server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
-    server_name %domain_idn% %alias_idn%;
-    # ssl         on;
-    ssl_certificate      %ssl_pem%;
-    ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
-    access_log     /var/log/%web_system%/domains/%domain%.log combined;
-
-    location / {
-        proxy_pass      https://%ip%:8083;
-    }
-
-    location /webmail/ {
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location /phpmyadmin/ {
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location ~ /\.ht    {return 404;}
-    location ~ /\.svn/  {return 404;}
-    location ~ /\.git/  {return 404;}
-    location ~ /\.hg/   {return 404;}
-    location ~ /\.bzr/  {return 404;}
-
-    disable_symlinks if_not_owner from=%docroot%;
-
-    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
-}
-
diff --git a/install/debian/10/templates/web/nginx/vesta.tpl b/install/debian/10/templates/web/nginx/vesta.tpl
deleted file mode 100644
index 851ac0dc..00000000
--- a/install/debian/10/templates/web/nginx/vesta.tpl
+++ /dev/null
@@ -1,8 +0,0 @@
-server {
-    listen      %ip%:%proxy_port%;
-    server_name %domain_idn% %alias_idn%;
-    location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
-    }
-include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
-}

From 6d414b14ff8e17112a8f2763e0cb3a236555467f Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Sep 2019 15:38:35 +0200
Subject: [PATCH 0709/2300] Symlink missing templates

---
 install/vst-install-debian.sh | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 1ef4d9af..376a4d48 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -859,6 +859,18 @@ cp -rf $vestacp/packages $VESTA/data/
 # Installing templates
 cp -rf $vestacp/templates $VESTA/data/
 
+# Symlink missing templates
+ln -s /usr/local/vesta/data/templates/web/nginx/hosting.sh /usr/local/vesta/data/templates/web/nginx/default.sh
+ln -s /usr/local/vesta/data/templates/web/nginx/hosting.tpl /usr/local/vesta/data/templates/web/nginx/default.tpl
+ln -s /usr/local/vesta/data/templates/web/nginx/hosting.stpl /usr/local/vesta/data/templates/web/nginx/default.stpl
+
+ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh /usr/local/vesta/data/templates/web/apache2/hosting.sh
+ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl /usr/local/vesta/data/templates/web/apache2/hosting.tpl
+ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.stpl /usr/local/vesta/data/templates/web/apache2/hosting.stpl
+ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh /usr/local/vesta/data/templates/web/apache2/default.sh
+ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl /usr/local/vesta/data/templates/web/apache2/default.tpl
+ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.stpl /usr/local/vesta/data/templates/web/apache2/default.stpl
+
 # Set nameservers
 sed -i "s/YOURHOSTNAME1/ns1.$servername/" /usr/local/vesta/data/packages/default.pkg
 sed -i "s/YOURHOSTNAME2/ns2.$servername/" /usr/local/vesta/data/packages/default.pkg

From 890df7a19ddaf01bf7eeb66479bbd1f5549144a7 Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Mon, 23 Sep 2019 15:47:45 +0200
Subject: [PATCH 0710/2300] hosting webmail phpmyadmin nginx tpl

---
 .../web/nginx/hosting-webmail-phpmyadmin.stpl | 62 +++++++++++++++++++
 .../web/nginx/hosting-webmail-phpmyadmin.tpl  | 59 ++++++++++++++++++
 2 files changed, 121 insertions(+)
 create mode 100644 install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
 create mode 100644 install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl

diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
new file mode 100644
index 00000000..4fadbbfc
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
new file mode 100644
index 00000000..7085e047
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+

From 3f7e7915f03412d562afe69e68e0146f56eebc09 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Sep 2019 16:58:59 +0200
Subject: [PATCH 0711/2300] Making roundcube and phpmyadmin works with new
 hosting tpl

---
 install/vst-install-debian.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 376a4d48..25c0ac41 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1437,6 +1437,8 @@ if [ "$release" -eq 10 ]; then
     sed -i "/^group =/c\group = www-data" /etc/php/7.3/fpm/pool.d/$servername.conf
     sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/7.3/fpm/pool.d/$servername.conf
     service php7.3-fpm restart
+    ln -s /var/lib/roundcube /var/lib/roundcube/webmail
+    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,html,htm' 'no'
   fi
 fi
 

From 165814403050030f53aeb670296351bfa3a39ec0 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Sep 2019 17:31:05 +0200
Subject: [PATCH 0712/2300] Add woff, woff2, xml extension as static file,
 removing html, htm

---
 bin/v-add-web-domain-proxy | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/bin/v-add-web-domain-proxy b/bin/v-add-web-domain-proxy
index 9bd42746..f9ff4142 100755
--- a/bin/v-add-web-domain-proxy
+++ b/bin/v-add-web-domain-proxy
@@ -14,8 +14,7 @@
 user=$1
 domain=$2
 template=$3
-default_extentions="jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,\
-exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,html,htm"
+default_extentions="jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2,xml"
 extentions=${4-$default_extentions}
 restart="$5"
 

From 6b1f3a0e5df409a53dce59db7df1384b9bd38931 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Sep 2019 17:34:06 +0200
Subject: [PATCH 0713/2300] Add woff, woff2, xml extension as static file,
 removing html, htm

---
 bin/v-add-web-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-web-domain b/bin/v-add-web-domain
index 8a71cc9f..8e7daf35 100755
--- a/bin/v-add-web-domain
+++ b/bin/v-add-web-domain
@@ -137,7 +137,7 @@ if [ ! -z "$PROXY_SYSTEM" ]; then
     if [ -z "$proxy_ext" ]; then
         PROXY_EXT="jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls"
         PROXY_EXT="$PROXY_EXT,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp"
-        PROXY_EXT="$PROXY_EXT,rtf,js,mp3,avi,mpeg,flv,html,htm"
+        PROXY_EXT="$PROXY_EXT,rtf,js,mp3,avi,mpeg,flv,woff,woff2,xml"
     fi
     add_web_config "$PROXY_SYSTEM" "$PROXY_TEMPLATE.tpl"
 fi

From 1632c27355f3878a9261f14cbfdf795f5e022367 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Sep 2019 17:35:53 +0200
Subject: [PATCH 0714/2300] Add woff, woff2, xml extension as static file,
 removing html, htm

---
 bin/v-change-web-domain-proxy-tpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/bin/v-change-web-domain-proxy-tpl b/bin/v-change-web-domain-proxy-tpl
index 4d022cb9..36c09843 100755
--- a/bin/v-change-web-domain-proxy-tpl
+++ b/bin/v-change-web-domain-proxy-tpl
@@ -14,8 +14,7 @@ user=$1
 domain=$2
 domain_idn=$2
 template=$3
-default_extentions="jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,\
-exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,html,htm"
+default_extentions="jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2,xml"
 extentions=${4-$default_extentions}
 restart="$5"
 

From d08790457acdf74393f8cdf76d97ad5f21821d5e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Sep 2019 18:09:01 +0200
Subject: [PATCH 0715/2300] Add woff, woff2, xml extension as static file,
 removing html, htm

---
 web/templates/admin/add_web.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/add_web.html b/web/templates/admin/add_web.html
index 56f25edc..236e47fa 100644
--- a/web/templates/admin/add_web.html
+++ b/web/templates/admin/add_web.html
@@ -114,7 +114,7 @@
                                     </tr>
                                     <tr>
                                         <td class="step-left">
-                                            <textarea size="20" class="vst-textinput" name="v_proxy_ext"><?php if (!empty($v_proxy_ext)) { echo htmlentities(trim($v_proxy_ext, "'"));} else { echo 'jpeg, jpg, png, gif, bmp, ico, svg, tif, tiff, css, js, htm, html, ttf, otf, webp, woff, txt, csv, rtf, doc, docx, xls, xlsx, ppt, pptx, odf, odp, ods, odt, pdf, psd, ai, eot, eps, ps, zip, tar, tgz, gz, rar, bz2, 7z, aac, m4a, mp3, mp4, ogg, wav, wma, 3gp, avi, flv, m4v, mkv, mov, mp4, mpeg, mpg, wmv, exe, iso, dmg, swf'; }  ?></textarea>
+                                            <textarea size="20" class="vst-textinput" name="v_proxy_ext"><?php if (!empty($v_proxy_ext)) { echo htmlentities(trim($v_proxy_ext, "'"));} else { echo 'jpeg, jpg, png, gif, bmp, ico, svg, tif, tiff, css, js, ttf, otf, webp, txt, csv, rtf, doc, docx, xls, xlsx, ppt, pptx, odf, odp, ods, odt, pdf, psd, ai, eot, eps, ps, zip, tar, tgz, gz, rar, bz2, 7z, aac, m4a, mp3, mp4, ogg, wav, wma, 3gp, avi, flv, m4v, mkv, mov, mp4, mpeg, mpg, wmv, exe, iso, dmg, swf, woff, woff2, xml'; }  ?></textarea>
                                         </td>
                                     </tr>
                                 </table>

From 395234b94ca8394361819f46bb28f7e857248672 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Sep 2019 18:13:59 +0200
Subject: [PATCH 0716/2300] Add woff, woff2, xml extension as static file,
 removing html, htm

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 25c0ac41..ccecc6db 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1438,7 +1438,7 @@ if [ "$release" -eq 10 ]; then
     sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/7.3/fpm/pool.d/$servername.conf
     service php7.3-fpm restart
     ln -s /var/lib/roundcube /var/lib/roundcube/webmail
-    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,html,htm' 'no'
+    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2,xml' 'no'
   fi
 fi
 

From ae328a0935168aa83e2768714bebfb6c2295aa7f Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Tue, 24 Sep 2019 01:08:17 +0300
Subject: [PATCH 0717/2300] added support for HTTP/2 Let's Encrypt servers

---
 bin/v-add-letsencrypt-domain | 20 ++++++++++----------
 bin/v-add-letsencrypt-user   |  6 +++---
 2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 6a12af87..59d51c61 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -109,8 +109,8 @@ fi
 
 # Requesting nonce / STEP 1
 answer=$(curl -s -I "$API/directory")
-nonce=$(echo "$answer" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
-status=$(echo "$answer"|grep HTTP/1.1 |tail -n1 |cut -f 2 -d ' ')
+nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
+status=$(echo "$answer"|grep HTTP/ |tail -n1 |cut -f 2 -d ' ')
 if [[ "$status" -ne 200 ]]; then
     check_result $E_CONNECT "Let's Encrypt nonce request status $status"
 fi
@@ -125,10 +125,10 @@ done
 payload=$(echo "$payload"|sed "s/,$//")
 payload=$payload']}'
 answer=$(query_le_v2 "$url" "$payload" "$nonce")
-nonce=$(echo "$answer" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
+nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
 authz=$(echo "$answer" |grep "acme/authz" |cut -f2 -d '"')
 finalize=$(echo "$answer" |grep 'finalize":' |cut -f4 -d '"')
-status=$(echo "$answer" |grep HTTP/1.1 |tail -n1 |cut -f2 -d ' ')
+status=$(echo "$answer" |grep HTTP/ |tail -n1 |cut -f2 -d ' ')
 if [[ "$status" -ne 201 ]]; then
     check_result $E_CONNECT "Let's Encrypt new auth status $status"
 fi
@@ -139,8 +139,8 @@ for auth in $authz; do
     answer=$(query_le_v2 "$auth" "$payload" "$nonce")
     url=$(echo "$answer" |grep -A3 $proto |grep url |cut -f 4 -d \")
     token=$(echo "$answer" |grep -A3 $proto |grep token |cut -f 4 -d \")
-    nonce=$(echo "$answer" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
-    status=$(echo "$answer"|grep HTTP/1.1 |tail -n1 |cut -f 2 -d ' ')
+    nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
+    status=$(echo "$answer"|grep HTTP/ |tail -n1 |cut -f 2 -d ' ')
     if [[ "$status" -ne 200 ]]; then
         check_result $E_CONNECT "Let's Encrypt acme/authz bad status $status"
     fi
@@ -198,8 +198,8 @@ for auth in $authz; do
         payload='{}'
         answer=$(query_le_v2 "$url" "$payload" "$nonce")
         validation=$(echo "$answer"|grep -A1 $proto |tail -n1|cut -f4 -d \")
-        nonce=$(echo "$answer" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
-        status=$(echo "$answer"|grep HTTP/1.1 |tail -n1 |cut -f 2 -d ' ')
+        nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
+        status=$(echo "$answer"|grep HTTP/ |tail -n1 |cut -f 2 -d ' ')
         if [[ "$status" -ne 200 ]]; then
             check_result $E_CONNECT "Let's Encrypt validation status $status"
         fi
@@ -224,8 +224,8 @@ ssl_dir=$($BIN/v-generate-ssl-cert "$domain" "info@$domain" "US" "California"\
 csr=$(openssl req -in $ssl_dir/$domain.csr -outform DER |encode_base64)
 payload='{"csr":"'$csr'"}'
 answer=$(query_le_v2 "$finalize" "$payload" "$nonce")
-nonce=$(echo "$answer" |grep Nonce |cut -f2 -d \ |tr -d '\r\n')
-status=$(echo "$answer"|grep HTTP/1.1 |tail -n1 |cut -f 2 -d ' ')
+nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
+status=$(echo "$answer"|grep HTTP/ |tail -n1 |cut -f 2 -d ' ')
 certificate=$(echo "$answer"|grep 'certificate":' |cut -f4 -d '"')
 if [[ "$status" -ne 200 ]]; then
     check_result $E_CONNECT "Let's Encrypt finalize bad status $status"
diff --git a/bin/v-add-letsencrypt-user b/bin/v-add-letsencrypt-user
index f3a19163..11aec113 100755
--- a/bin/v-add-letsencrypt-user
+++ b/bin/v-add-letsencrypt-user
@@ -103,16 +103,16 @@ fi
 
 
 # Requesting ACME nonce
-nonce=$(curl -s -I "$API/directory" |grep Nonce |cut -f 2 -d \ |tr -d '\r\n')
+nonce=$(curl -s -I "$API/directory" |grep -i nonce |cut -f2 -d\ |tr -d '\r\n')
 
 # Creating ACME account
 url="$API/acme/new-acct"
 payload='{"termsOfServiceAgreed": true}'
 answer=$(query_le_v2 "$url" "$payload" "$nonce")
-kid=$(echo "$answer" |grep Location: |cut -f2 -d ' '|tr -d '\r')
+kid=$(echo "$answer" |grep -i location: |cut -f2 -d ' '|tr -d '\r')
 
 # Checking answer status
-status=$(echo "$answer" |grep HTTP/1.1 |tail -n1 |cut -f2 -d ' ')
+status=$(echo "$answer" |grep HTTP/ |tail -n1 |cut -f2 -d ' ')
 if [[ "${status:0:2}" -ne "20" ]]; then
     check_result $E_CONNECT "Let's Encrypt acc registration failed $status"
 fi

From 54908c53d674ea19dadc74d0a43419a6c19f1807 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 25 Sep 2019 15:51:21 +0200
Subject: [PATCH 0718/2300] Switch to vesta port if it connection came via
 nginx proxy

---
 web/inc/main.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/web/inc/main.php b/web/inc/main.php
index dfa482a1..63b3b8b1 100644
--- a/web/inc/main.php
+++ b/web/inc/main.php
@@ -1,5 +1,10 @@
 <?php
 
+if (file_exists("/usr/local/vesta/web/inc/switch_to_vesta_port") && isset($_SERVER['HTTP_X_REAL_IP'])) {
+    header("Location: https://".$_SERVER['HTTP_HOST'].":".$_SERVER['SERVER_PORT']);
+    exit;
+}
+
 session_start();
 
 define('VESTA_CMD', '/usr/bin/sudo /usr/local/vesta/bin/');

From 621a94e858d51cb4aad19c1c34f8ecc606a413d2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 28 Sep 2019 22:39:52 +0200
Subject: [PATCH 0719/2300] Create allow-index.php

---
 web/inc/allow-index.php | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 web/inc/allow-index.php

diff --git a/web/inc/allow-index.php b/web/inc/allow-index.php
new file mode 100644
index 00000000..47fa5e15
--- /dev/null
+++ b/web/inc/allow-index.php
@@ -0,0 +1,9 @@
+ <?php
+ // Custom script that will be included in custom Vesta installations to allow normal index.html if Vesta was proxied via default nginx
+
+if (file_exists("/usr/local/vesta/web/inc/switch_to_vesta_port") && isset($_SERVER['HTTP_X_REAL_IP']) && $_SERVER['REQUEST_URI']=="/") {
+	$hostname=trim(shell_exec("hostname"));
+	$user=trim(shell_exec("sudo /usr/local/vesta/bin/v-search-domain-owner ".$hostname));
+	if (file_exists("/home/$user/web/$hostname/public_html/index.html")) {echo file_get_contents("/home/$user/web/$hostname/public_html/index.html"); exit;}
+	if (file_exists("/home/$user/web/$hostname/public_html/index.php")) {include("/home/$user/web/$hostname/public_html/index.php"); exit;}
+}

From 52c32962a85d0dce91007cb9fd71b8983ed964f7 Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Sun, 29 Sep 2019 00:09:07 +0300
Subject: [PATCH 0720/2300] Release 0.9.8-26

---
 src/deb/ioncube/control              | 2 +-
 src/deb/nginx/control                | 2 +-
 src/deb/php/control                  | 2 +-
 src/deb/softaculous/control          | 2 +-
 src/deb/vesta/control                | 2 +-
 src/rpm/specs/vesta-ioncube.spec     | 2 +-
 src/rpm/specs/vesta-nginx.spec       | 2 +-
 src/rpm/specs/vesta-php.spec         | 2 +-
 src/rpm/specs/vesta-softaculous.spec | 2 +-
 src/rpm/specs/vesta.spec             | 5 ++++-
 upd/add_notifications.sh             | 2 +-
 11 files changed, 14 insertions(+), 11 deletions(-)

diff --git a/src/deb/ioncube/control b/src/deb/ioncube/control
index eb6cbe88..e8dcc311 100644
--- a/src/deb/ioncube/control
+++ b/src/deb/ioncube/control
@@ -1,7 +1,7 @@
 Source: vesta-ioncube
 Package: vesta-ioncube
 Priority: optional
-Version: 0.9.8-25
+Version: 0.9.8-26
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.ioncube.com
diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index 8ee25b92..2313022f 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -1,7 +1,7 @@
 Source: vesta-nginx
 Package: vesta-nginx
 Priority: optional
-Version: 0.9.8-25
+Version: 0.9.8-26
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/php/control b/src/deb/php/control
index 55f27612..9bcbec41 100644
--- a/src/deb/php/control
+++ b/src/deb/php/control
@@ -1,7 +1,7 @@
 Source: vesta-php
 Package: vesta-php
 Priority: optional
-Version: 0.9.8-25
+Version: 0.9.8-26
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/deb/softaculous/control b/src/deb/softaculous/control
index 9c5ad99c..121cebed 100644
--- a/src/deb/softaculous/control
+++ b/src/deb/softaculous/control
@@ -1,7 +1,7 @@
 Source: vesta-softaculous
 Package: vesta-softaculous
 Priority: optional
-Version: 0.9.8-25
+Version: 0.9.8-26
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: https://www.softaculous.com
diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 2a6ddaf2..505b2797 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-25
+Version: 0.9.8-26
 Section: admin
 Maintainer: Serghey Rodin <skid@vestacp.com>
 Homepage: http://vestacp.com
diff --git a/src/rpm/specs/vesta-ioncube.spec b/src/rpm/specs/vesta-ioncube.spec
index 868d84bd..c3ac1187 100644
--- a/src/rpm/specs/vesta-ioncube.spec
+++ b/src/rpm/specs/vesta-ioncube.spec
@@ -1,6 +1,6 @@
 Name:           vesta-ioncube
 Version:        0.9.8
-Release:        25
+Release:        26
 Summary:        ionCube Loader
 Group:          System Environment/Base
 License:        "Freely redistributable without restriction"
diff --git a/src/rpm/specs/vesta-nginx.spec b/src/rpm/specs/vesta-nginx.spec
index 3d3ab4bd..f3250c9e 100644
--- a/src/rpm/specs/vesta-nginx.spec
+++ b/src/rpm/specs/vesta-nginx.spec
@@ -1,6 +1,6 @@
 Name:           vesta-nginx
 Version:        0.9.8
-Release:        25
+Release:        26
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        BSD-like
diff --git a/src/rpm/specs/vesta-php.spec b/src/rpm/specs/vesta-php.spec
index ee07bbd0..4272db6a 100644
--- a/src/rpm/specs/vesta-php.spec
+++ b/src/rpm/specs/vesta-php.spec
@@ -1,6 +1,6 @@
 Name:           vesta-php
 Version:        0.9.8
-Release:        25
+Release:        26
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
diff --git a/src/rpm/specs/vesta-softaculous.spec b/src/rpm/specs/vesta-softaculous.spec
index 23b8cf16..c094ae78 100644
--- a/src/rpm/specs/vesta-softaculous.spec
+++ b/src/rpm/specs/vesta-softaculous.spec
@@ -1,6 +1,6 @@
 Name:           vesta-softaculous
 Version:        0.9.8
-Release:        25
+Release:        26
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        Softaculous License
diff --git a/src/rpm/specs/vesta.spec b/src/rpm/specs/vesta.spec
index d0b59e6a..07c53d1c 100644
--- a/src/rpm/specs/vesta.spec
+++ b/src/rpm/specs/vesta.spec
@@ -1,6 +1,6 @@
 Name:           vesta
 Version:        0.9.8
-Release:        25
+Release:        26
 Summary:        Vesta Control Panel
 Group:          System Environment/Base
 License:        GPL
@@ -68,6 +68,9 @@ fi
 %config(noreplace) %{_vestadir}/web/css/uploadify.css
 
 %changelog
+* Sat 29 2019 Serghey Rodin <builder@vestacp.com> - 0.9.8-26
+- Let's Encrypt HTTP/2 support
+
 * Thu Aug 15 2019 Serghey Rodin <builder@vestacp.com> - 0.9.8-25
 - Security bugfixes
 - LEv2 idn fix
diff --git a/upd/add_notifications.sh b/upd/add_notifications.sh
index 06882d29..46974585 100755
--- a/upd/add_notifications.sh
+++ b/upd/add_notifications.sh
@@ -5,4 +5,4 @@ rm -f /usr/local/vesta/data/users/admin/notifications.conf
 /usr/local/vesta/bin/v-add-user-notification admin "File Manager" "Browse, copy, edit, view, and retrieve all your web domain files using a fully featured <a href='http://vestacp.com/features/#filemanager'>File Manager</a>. Plugin is available for <a href='/edit/server/?lead=filemanager#module-filemanager'>purchase</a>." 'filemanager'
 /usr/local/vesta/bin/v-add-user-notification admin "Chroot SFTP" "If you want to have SFTP accounts that will be used only to transfer files (and not to SSH), you can  <a href='/edit/server/?lead=sftp#module-sftp'>purchase</a> and enable <a href='http://vestacp.com/features/#sftpchroot'>SFTP Chroot</a>"
 /usr/local/vesta/bin/v-add-user-notification admin "Softaculous" "Softaculous is one of the best Auto Installers and it is finally <a href='/edit/server/?lead=sftp#module-softaculous'>available</a>"
-/usr/local/vesta/bin/v-add-user-notification admin "Release 0.9.8-25" "This release is about stability and refinement. We added Let's Encrypt v2 support and added server certificate management tools. For more information please read <a href='http://vestacp.com/history/#0.9.8-25'>release notes</a>"
+/usr/local/vesta/bin/v-add-user-notification admin "Release 0.9.8-26" "This release adds support for Lets Encrypt HTTP/2. For more information please read <a href='http://vestacp.com/history/#0.9.8-26'>release notes</a>"

From 270d29ff0679cfd1d94e21771eba3941187286cb Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Sun, 29 Sep 2019 00:17:54 +0300
Subject: [PATCH 0721/2300] added month to the release log date

---
 src/rpm/specs/vesta.spec | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/rpm/specs/vesta.spec b/src/rpm/specs/vesta.spec
index 07c53d1c..904bdc4e 100644
--- a/src/rpm/specs/vesta.spec
+++ b/src/rpm/specs/vesta.spec
@@ -68,7 +68,7 @@ fi
 %config(noreplace) %{_vestadir}/web/css/uploadify.css
 
 %changelog
-* Sat 29 2019 Serghey Rodin <builder@vestacp.com> - 0.9.8-26
+* Sat Sep 29 2019 Serghey Rodin <builder@vestacp.com> - 0.9.8-26
 - Let's Encrypt HTTP/2 support
 
 * Thu Aug 15 2019 Serghey Rodin <builder@vestacp.com> - 0.9.8-25

From f0fa7bdd2bcc084c32a58c193463e835539077e2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 28 Sep 2019 23:55:19 +0200
Subject: [PATCH 0722/2300] Moving to myvestacp.com

---
 src/deb/vesta_compile.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 18ce6c92..239b1ffd 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -30,7 +30,7 @@ if [ $# -gt 4 ]; then
     add_deb_to_apt_repo=$5
 fi
 
-MAINTAINER_EMAIL='predrag@hostingpanel.dev'
+MAINTAINER_EMAIL='predrag@myvestacp.com'
 
 TARGET_DEB_NAME_MAIN='buster'
 TARGET_DEB_VER_MAIN='10'
@@ -44,10 +44,10 @@ INSTALL_DIR="/usr/local/vesta"
 GIT_SRC='https://raw.githubusercontent.com/myvesta/vesta/master/src'
 GIT_REP="$GIT_REP/deb"
 
-C_WEB_ADDRESS="c.vesta.hostingpanel.dev"
+C_WEB_ADDRESS="c.myvestacp.com"
 PATH_OF_C_WEB_FOLDER_ROOT="/var/www/$C_WEB_ADDRESS/html"
 PATH_OF_C_WEB_FOLDER="$PATH_OF_C_WEB_FOLDER_ROOT/debian/$TARGET_DEB_VER"
-APT_WEB_ADDRESS="apt.vesta.hostingpanel.dev"
+APT_WEB_ADDRESS="apt.myvestacp.com"
 PATH_OF_APT_REPO_ROOT="/var/www/$APT_WEB_ADDRESS/html"
 PATH_OF_APT_REPO="$PATH_OF_APT_REPO_ROOT/$TARGET_DEB_NAME"
 

From 9fcdce0e1dc85f3223e8c6dbe870e2c26b704dac Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 28 Sep 2019 23:58:24 +0200
Subject: [PATCH 0723/2300] Moving to myvestacp.com

---
 install/vst-install-debian.sh | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ccecc6db..276e5210 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -8,8 +8,8 @@
 export PATH=$PATH:/sbin
 export DEBIAN_FRONTEND=noninteractive
 
-RHOST='apt.vesta.hostingpanel.dev'
-CHOST='c.vesta.hostingpanel.dev'
+RHOST='apt.myvestacp.com'
+CHOST='c.myvestacp.com'
 VERSION='debian'
 VESTA='/usr/local/vesta'
 memory=$(grep 'MemTotal' /proc/meminfo |tr ' ' '\n' |grep [0-9])
@@ -293,7 +293,7 @@ else
 fi
 
 # Checking repository availability
-wget -q "apt.vesta.hostingpanel.dev/deb_signing.key" -O /dev/null
+wget -q "apt.myvestacp.com/deb_signing.key" -O /dev/null
 check_result $? "No access to Vesta repository"
 
 # Check installed packages
@@ -1100,8 +1100,8 @@ if [ "$mysql" = 'yes' ]; then
       rm -fr phpMyAdmin-$pma_v-all-languages
       rm -f phpMyAdmin-$pma_v-all-languages.tar.gz
       
-      wget -nv -O /root/phpmyadmin/pma.sh http://c.vesta.hostingpanel.dev/debian/10/pma/pma.sh 
-      wget -nv -O /root/phpmyadmin/create_tables.sql http://c.vesta.hostingpanel.dev/debian/10/pma/create_tables.sql
+      wget -nv -O /root/phpmyadmin/pma.sh http://c.myvestacp.com/debian/10/pma/pma.sh 
+      wget -nv -O /root/phpmyadmin/create_tables.sql http://c.myvestacp.com/debian/10/pma/create_tables.sql
       bash /root/phpmyadmin/pma.sh
       blowfish=$(gen_pass)
       echo "\$cfg['blowfish_secret'] = '$blowfish';" >> /etc/phpmyadmin/config.inc.php

From add0c9756b081677d32207ba3e45bbaf844993b1 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 29 Sep 2019 00:22:20 +0200
Subject: [PATCH 0724/2300] Create latest.txt

---
 src/deb/latest.txt | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 src/deb/latest.txt

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
new file mode 100644
index 00000000..6d1b9e6c
--- /dev/null
+++ b/src/deb/latest.txt
@@ -0,0 +1 @@
+vesta-0.9.8-25

From 9365252623cc43c3f875c44a026c83c1c78a1137 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 29 Sep 2019 00:30:38 +0200
Subject: [PATCH 0725/2300] Changing URL for latest version

---
 bin/v-list-sys-vesta-updates | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-list-sys-vesta-updates b/bin/v-list-sys-vesta-updates
index adcd6a1a..62e2013b 100755
--- a/bin/v-list-sys-vesta-updates
+++ b/bin/v-list-sys-vesta-updates
@@ -61,7 +61,7 @@ shell_list() {
 #----------------------------------------------------------#
 
 # Checking official latest version
-latest=$(wget -q -T 1 -t 1 http://c.vestacp.com/latest.txt -O -)
+latest=$(wget -q -T 1 -t 1 http://c.myvestacp.com/latest.txt -O -)
 
 # Checking installed vesta version
 if [ -d "/etc/sysconfig" ]; then

From b0f14c48448fef3e6ffa5340faf77ba6f7cb301f Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 29 Sep 2019 00:35:10 +0200
Subject: [PATCH 0726/2300] Moving to myvestacp.com

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 51a967cc..fb5dfd27 100644
--- a/README.md
+++ b/README.md
@@ -45,7 +45,7 @@ How to install
 ----------------------------
 Download the installation script:
 ```bash
-curl -O http://c.vesta.hostingpanel.dev/vst-install-debian.sh
+curl -O http://c.myvestacp.com/vst-install-debian.sh
 ```
 Then run it:
 ```bash

From 8e81b7cf19f0754f035bba78de1ca51e175e5ccd Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 29 Sep 2019 00:37:43 +0200
Subject: [PATCH 0727/2300] Copy latest.txt

---
 src/deb/vesta_compile.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 239b1ffd..4cbde785 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -271,6 +271,7 @@ if [ "$CWEB_B" = true ]; then
   if [ ! -f "$PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key" ]; then
     cp /root/vesta/install/debian/$TARGET_DEB_VER_MAIN/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key
   fi
+  cp /root/vesta/src/deb/latest.txt $PATH_OF_C_WEB_FOLDER_ROOT/latest.txt
   cd $PATH_OF_C_WEB_FOLDER
   
   if [ -f "packages.tar.gz" ]; then

From d1cba4e5ccfc825e0ba93cd777e6e84a1ce8b2c2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 29 Sep 2019 00:50:08 +0200
Subject: [PATCH 0728/2300] Moving to myvestacp.com

---
 src/deb/vesta/postinst | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 9d47da77..93dfad7e 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -10,4 +10,11 @@ if [ -x "/root/vesta-patch.sh" ]; then
     /root/vesta-patch.sh
 fi
 
+check_apt=$(grep -c 'vesta.hostingpanel.dev' /etc/apt/sources.list.d/vesta.list)
+if [ "$check_apt" -eq 1 ]; then
+    wget -O - http://apt.myvestacp.com/deb_signing.key | sudo apt-key add -
+    codename="$(cat /etc/os-release |grep VERSION= |cut -f 2 -d \(|cut -f 1 -d \))"
+    echo "deb http://apt.myvestacp.com/$codename/ $codename vesta" > /etc/apt/sources.list.d/vesta.list
+fi
+
 exit 0

From 50cc5d5b35a1580d0c3f1574ce1dd1d3b514432a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Sep 2019 19:23:25 +0200
Subject: [PATCH 0729/2300] convert-vesta-to-myvesta.sh

---
 .../for-download/tools/convert-vesta-to-myvesta.sh   | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 src/deb/for-download/tools/convert-vesta-to-myvesta.sh

diff --git a/src/deb/for-download/tools/convert-vesta-to-myvesta.sh b/src/deb/for-download/tools/convert-vesta-to-myvesta.sh
new file mode 100644
index 00000000..0154297f
--- /dev/null
+++ b/src/deb/for-download/tools/convert-vesta-to-myvesta.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+# *** Debian only ***
+
+wget -O - http://apt.myvestacp.com/deb_signing.key | sudo apt-key add -
+codename="$(cat /etc/os-release |grep VERSION= |cut -f 2 -d \(|cut -f 1 -d \))"
+echo "deb http://apt.myvestacp.com/$codename/ $codename vesta" > /etc/apt/sources.list.d/vesta.list
+apt update
+apt install -y vesta vesta-php vesta-nginx
+
+service vesta stop
+service vesta start

From f6bca2a8e1d210e77bf34d0844ab0ba1e2adc68e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 30 Sep 2019 14:11:31 +0200
Subject: [PATCH 0730/2300] Moving to myvestacp.com

---
 src/deb/vesta/control | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index f326eb76..5659128e 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -3,8 +3,8 @@ Package: vesta
 Priority: optional
 Version: 0.9.8-25
 Section: admin
-Maintainer: Predrag Damnjanovic <predrag@hostingpanel.dev>
-Homepage: http://vesta.hostingpanel.dev
+Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
+Homepage: http://myvestacp.com
 Architecture: amd64
 Depends: bash, awk, sed
 Description: Vesta

From f477c754180ade19420735f5ac7f719aced70dc0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 30 Sep 2019 18:37:30 +0200
Subject: [PATCH 0731/2300] Trigger for /root/update_firewall_custom.sh

---
 bin/v-update-firewall | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-update-firewall b/bin/v-update-firewall
index 46e2073a..db20b1f2 100755
--- a/bin/v-update-firewall
+++ b/bin/v-update-firewall
@@ -72,6 +72,10 @@ for ip in $(ls $VESTA/data/ips); do
 done
 echo "$iptables -A INPUT -s 127.0.0.1 -j ACCEPT" >> $tmp
 
+if [ -x "/root/update_firewall_custom.sh" ]
+    /root/update_firewall_custom.sh 1
+fi
+
 # Pasring iptables rules
 IFS=$'\n'
 for line in $(sort -r -n -k 2 -t \' $rules); do

From 41f4778c7e316e0914ede93a0a5cfd84b4b9ee3f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 30 Sep 2019 18:41:32 +0200
Subject: [PATCH 0732/2300] Syntax fix for update_firewall_custom.sh

---
 bin/v-update-firewall | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-firewall b/bin/v-update-firewall
index db20b1f2..817d07ef 100755
--- a/bin/v-update-firewall
+++ b/bin/v-update-firewall
@@ -72,7 +72,7 @@ for ip in $(ls $VESTA/data/ips); do
 done
 echo "$iptables -A INPUT -s 127.0.0.1 -j ACCEPT" >> $tmp
 
-if [ -x "/root/update_firewall_custom.sh" ]
+if [ -x "/root/update_firewall_custom.sh" ]; then
     /root/update_firewall_custom.sh 1
 fi
 

From 8652b25dd0b9d2b11a6e502ae1355aa49e86bd11 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 30 Sep 2019 18:47:33 +0200
Subject: [PATCH 0733/2300] Fix for update_firewall_custom.sh

---
 bin/v-update-firewall | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/v-update-firewall b/bin/v-update-firewall
index 817d07ef..d2d06355 100755
--- a/bin/v-update-firewall
+++ b/bin/v-update-firewall
@@ -72,8 +72,9 @@ for ip in $(ls $VESTA/data/ips); do
 done
 echo "$iptables -A INPUT -s 127.0.0.1 -j ACCEPT" >> $tmp
 
+# Triger for custom iptables commands
 if [ -x "/root/update_firewall_custom.sh" ]; then
-    /root/update_firewall_custom.sh 1
+    /root/update_firewall_custom.sh "$tmp" "1"
 fi
 
 # Pasring iptables rules

From b8e08b6ad8b70fc50f1f84af2abcc17990fee6f1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 30 Sep 2019 18:52:26 +0200
Subject: [PATCH 0734/2300] Moving to myvestacp.com

---
 src/deb/nginx/copyright | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/nginx/copyright b/src/deb/nginx/copyright
index 6436d28e..5f58e6bd 100644
--- a/src/deb/nginx/copyright
+++ b/src/deb/nginx/copyright
@@ -1,9 +1,9 @@
 Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
 Upstream-Name: vesta-nginx
-Source: http://vesta.hostingpanel.dev
+Source: http://myvestacp.com
 
 Files: *
-Copyright: 2019 MyVesta <info@hostingpanel.dev>
+Copyright: 2019 MyVesta <info@myvestacp.com>
 License: GPL-3.0+
 Remarks: MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
 

From 679893e71b5f4972884e01bd7af03e158fdbd503 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 30 Sep 2019 18:53:23 +0200
Subject: [PATCH 0735/2300] Moving to myvestacp.com

---
 src/deb/nginx/control | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index 177158bc..67818481 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -3,8 +3,8 @@ Package: vesta-nginx
 Priority: optional
 Version: 0.9.8-25
 Section: admin
-Maintainer: Predrag Damnjanovic <predrag@hostingpanel.dev>
-Homepage: http://vesta.hostingpanel.dev
+Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
+Homepage: http://myvestacp.com
 Architecture: amd64
 Depends: vesta
 Description: Vesta Nginx

From 96c1dd2276c8c5d8db301c4f6ed397bbc2ad8cab Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 30 Sep 2019 18:54:51 +0200
Subject: [PATCH 0736/2300] Moving to myvestacp.com

---
 src/deb/vesta/copyright | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/vesta/copyright b/src/deb/vesta/copyright
index 53e623e3..8845a756 100644
--- a/src/deb/vesta/copyright
+++ b/src/deb/vesta/copyright
@@ -1,9 +1,9 @@
 Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
-Upstream-Name: vesta-php
-Source: http://vesta.hostingpanel.dev
+Upstream-Name: vesta
+Source: http://myvestacp.com
 
 Files: *
-Copyright: 2019 MyVesta <info@hostingpanel.dev>
+Copyright: 2019 MyVesta <info@myvestacp.com>
 License: GPL-3.0+
 Remarks: MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
 

From 6d1f189de13696fc8b8123b89d895c9d773a6ad4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 30 Sep 2019 18:56:29 +0200
Subject: [PATCH 0737/2300] Moving to myvestacp.com

---
 src/deb/php/copyright | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/php/copyright b/src/deb/php/copyright
index 53e623e3..af8b3c23 100644
--- a/src/deb/php/copyright
+++ b/src/deb/php/copyright
@@ -1,9 +1,9 @@
 Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
 Upstream-Name: vesta-php
-Source: http://vesta.hostingpanel.dev
+Source: http://myvestacp.com
 
 Files: *
-Copyright: 2019 MyVesta <info@hostingpanel.dev>
+Copyright: 2019 MyVesta <info@myvestacp.com>
 License: GPL-3.0+
 Remarks: MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
 

From 98ca075bdee64d1de24c8121dc7b127d84f05f34 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 30 Sep 2019 18:57:35 +0200
Subject: [PATCH 0738/2300] Moving to myvestacp.com

---
 src/deb/php/control | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/php/control b/src/deb/php/control
index 6e268179..aafb1adc 100644
--- a/src/deb/php/control
+++ b/src/deb/php/control
@@ -3,8 +3,8 @@ Package: vesta-php
 Priority: optional
 Version: 0.9.8-25
 Section: admin
-Maintainer: Predrag Damnjanovic <predrag@hostingpanel.dev>
-Homepage: http://vesta.hostingpanel.dev
+Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
+Homepage: http://myvestacp.com
 Architecture: amd64
 Depends: vesta
 Description: Vesta php-fpm

From 91136300ea932480092a84e79335bb29d84ac571 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 1 Oct 2019 11:32:30 +0200
Subject: [PATCH 0739/2300] Moving to myvestacp.com

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 276e5210..d72782b2 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1611,7 +1611,7 @@ Thank you.
 
 --
 Sincerely yours
-vestacp.com team
+myvestacp.com team
 " > $tmpfile
 
 send_mail="$VESTA/web/inc/mail-wrapper.php"

From b951743e563bba9b4efb16343a773216c263efdd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 1 Oct 2019 13:40:13 +0200
Subject: [PATCH 0740/2300] Deleting blanko in allow-index.php

---
 web/inc/allow-index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/allow-index.php b/web/inc/allow-index.php
index 47fa5e15..7e73ee7e 100644
--- a/web/inc/allow-index.php
+++ b/web/inc/allow-index.php
@@ -1,4 +1,4 @@
- <?php
+<?php
  // Custom script that will be included in custom Vesta installations to allow normal index.html if Vesta was proxied via default nginx
 
 if (file_exists("/usr/local/vesta/web/inc/switch_to_vesta_port") && isset($_SERVER['HTTP_X_REAL_IP']) && $_SERVER['REQUEST_URI']=="/") {

From 9947b17144bba7d7dbd42e71bb8c815b8302f1f2 Mon Sep 17 00:00:00 2001
From: Taufik Mulyana <nothinux@gmail.com>
Date: Tue, 1 Oct 2019 21:18:38 +0700
Subject: [PATCH 0741/2300] update id.php

---
 web/inc/i18n/id.php | 100 ++++++++++++++++++++++----------------------
 1 file changed, 50 insertions(+), 50 deletions(-)

diff --git a/web/inc/i18n/id.php b/web/inc/i18n/id.php
index 4702b7cc..dd870f0d 100644
--- a/web/inc/i18n/id.php
+++ b/web/inc/i18n/id.php
@@ -158,10 +158,10 @@ $LANG['id'] = array(
     'minute'  => 'menit',
     'hour'  => 'jam',
     'day'  => 'hari',
-    'days'  => ' hari',
-    'hours'  => ' jam',
-    'minutes'  => ' menit',
-    'month'  => ' bulan',
+    'days'  => 'hari',
+    'hours'  => 'jam',
+    'minutes'  => 'menit',
+    'month'  => 'bulan',
     'package'  => 'paket',
     'Bandwidth'  => 'Bandwidth',
     'Disk'  => 'Diska',
@@ -196,7 +196,7 @@ $LANG['id'] = array(
     'SSL Home Directory'  => 'Direktori Home SSL',
     'Lets Encrypt Support'  => 'Dukungan Lets Encrypt',
     'Lets Encrypt'  => 'Lets Encrypt',
-    'Your certificate will be automatically issued in 5 minutes' => 'Sertifikat anda akan otomatis didapat dalam 5 menit',
+    'Your certificate will be automatically issued in 5 minutes' => 'Sertifikat anda akan otomatis diterbitkan dalam 5 menit',
     'Proxy Support'  => 'Dukungan Proxy',
     'Proxy Extensions'  => 'Ekstensi Proxy',
     'Web Statistics'  => 'Statistik Web',
@@ -219,11 +219,11 @@ $LANG['id'] = array(
     'IMAP hostname'  => 'hostname IMAP',
     'IMAP port'  => 'port IMAP',
     'IMAP security'  => 'keamanan IMAP',
-    'IMAP auth method'  => 'metode autentikasi IMAP',
+    'IMAP auth method'  => 'metode otentikasi IMAP',
     'SMTP hostname'  => 'hostname SMTP',
     'SMTP port'  => 'port SMTP',
     'SMTP security'  => 'keamanan SMTP',
-    'SMTP auth method'  => 'metode autentikasi SMTP',
+    'SMTP auth method'  => 'metode otentikasi SMTP',
     'STARTTLS'  => 'STARTTLS',
     'Normal password'  => 'kata sandi',
     'database'  => 'basis data',
@@ -237,7 +237,7 @@ $LANG['id'] = array(
     'Day of week'  => 'Hari dalam Minggu',
     'local'  => 'lokal',
     'Run Time'  => 'Run Time',
-    'Backup Size'  => 'Ukuran Backup',
+    'Backup Size'  => 'Ukuran Cadangan',
     'SYS'  => 'SYS',
     'Domains'  => 'Domains',
     'Status'  => 'Status',
@@ -268,25 +268,25 @@ $LANG['id'] = array(
     'ftp server'  => 'server ftp',
     'job scheduler'  => 'jadwal pekerjaan',
     'firewall'  => 'firewall',
-    'brute-force monitor'  => 'brute-force monitor',
+    'brute-force monitor'  => 'pantau brute-force',
     'CPU'  => 'CPU',
     'Memory'  => 'Memori',
     'Uptime'  => 'Uptime',
     'core package'  => 'paket inti',
     'php interpreter'  => 'php interpreter',
-    'internal web server'  => 'internal web server',
+    'internal web server'  => 'server web internal',
     'Version'  => 'Versi',
     'Release'  => 'Rilis',
     'Architecture'  => 'Arsitektur',
     'Object'  => 'Objek',
     'Username'  => 'Nama Pengguna',
     'Password'  => 'Kata sandi',
-    'Email'  => 'Email',
+    'Email'  => 'Surel',
     'Package'  => 'Paket',
     'Language'  => 'Bahasa',
     'First Name'  => 'Nama Depan',
     'Last Name'  => 'Nama Belakang',
-    'Send login credentials to email address'  => 'Kirim kredensial login ke alamat email',
+    'Send login credentials to email address'  => 'Kirim kredensial login ke alamat surel',
     'Default Template'  => 'Template Standar',
     'Default Name Servers'  => 'Name Servers Standar',
     'Domain'  => 'Domain',
@@ -300,13 +300,13 @@ $LANG['id'] = array(
     'SSL Certificate Authority / Intermediate'  => 'Otoritas Sertifikat SSL / Menengah',
     'SSL CSR' => 'SSL CSR',
     'optional'  => 'opsi',
-    'internal' => 'intern',
+    'internal' => 'internal',
     'Statistics Authorization'  => 'Statistik Otoritas',
     'Statistics Auth'  => 'Statistik Otoritas',
     'Account'  => 'Pengguna',
-    'Prefix will be automaticaly added to username'  => 'Prefix %s nantinya ditambahin otomatis ke nama pengguna',
-    'Send FTP credentials to email'  => 'Kirim kredensial FTP ke email',
-    'Expiration Date'  => 'Tanggal Kadaluarsa',
+    'Prefix will be automaticaly added to username'  => 'Prefix %s akan otomatis ditambahkan ke nama pengguna',
+    'Send FTP credentials to email'  => 'Kirim kredensial FTP ke surel',
+    'Expiration Date'  => 'Tanggal Kadaluwarsa',
     'YYYY-MM-DD'  => 'YYYY-MM-DD',
     'Name servers'  => 'Name server',
     'Record'  => 'Record',
@@ -316,7 +316,7 @@ $LANG['id'] = array(
     'in megabytes'  => 'dalam megabytes',
     'Message'  => 'Pesan',
     'use local-part'  => 'gunakan part lokal',
-    'one or more email addresses'  => 'satu atau lebih alamat email',
+    'one or more email addresses'  => 'satu atau lebih alamat surel',
     'Prefix will be automaticaly added to database name and database user'  => 'Prefix  %s akan otomatis ditambahkan ke nama basis data dan pengguna basis data',
     'Database'  => 'Basis Data',
     'Type'  => 'Jenis',
@@ -407,7 +407,7 @@ $LANG['id'] = array(
     'cron job' => 'cron job',
 
     'cron' => 'cron',
-    'user dir' => 'dir pengguna',
+    'user dir' => 'direktori pengguna',
 
     'unlimited'  => 'tidak terbatas',
     '1 account'  => '1 pengguna',
@@ -489,14 +489,14 @@ $LANG['id'] = array(
     'RESTART_CONFIRMATION' => 'Apakah anda yakin ingin me-restart %s?',
     'Welcome'  => 'Selamat Datang',
     'LOGGED_IN_AS'  => 'Masuk sebagai pengguna %s',
-    'Error'  => 'Kesalahan',
+    'Error'  => 'Galat',
     'Invalid username or password'  => 'Nama pengguna atau kata sandi salah',
     'Invalid username or code'  => 'Kode atau nama pengguna salah',
     'Passwords not match'  => 'Kata sandi tidak sama',
     'Please enter valid email address.'  => 'Masukkan alamat surel yang valid.',
     'Field "%s" can not be blank.'  => 'Field "%s" tidak boleh kosong.',
     'Password is too short.'  => 'Kata sandi terlalu pendek (minimal 6 karakter)',
-    'Error code:'  => 'Kode kesalahan: %s',
+    'Error code:'  => 'Kode galat: %s',
     'SERVICE_ACTION_FAILED'  => '"%s" "%s" gagal',
     'IP address is in use' => 'Alamat IP sudah digunakan',
     'BACKUP_SCHEDULED'  => 'Tugas sudah ditambahkan ke antrian. email pemberitahuan akan dikirim ketika cadangan telah siap diunduh.',
@@ -560,11 +560,11 @@ $LANG['id'] = array(
     'MAIL Server' => 'MAIL Server',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
-    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
+    'Use Web Domain SSL Certificate' => 'Gunakan Sertifikat SSL Domain Web',
     'Webmail URL' => 'Webmail URL',
-    'MySQL Support' => 'MySQL Support',
+    'MySQL Support' => 'Dukungan MySQL',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
-    'PostgreSQL Support' => 'PostgreSQL Support',
+    'PostgreSQL Support' => 'Dukungan PostgreSQL',
     'phpPgAdmin URL' => 'phpPgAdmin URL',
     'Maximum Number Of Databases' => 'Jumlah maximal basis data',
     'Current Number Of Databases' => 'Jumlah database saat ini',
@@ -581,7 +581,7 @@ $LANG['id'] = array(
     'Reseller Role' => 'Aturan Reseller',
     'Web Config Editor' => 'Web Config Editor',
     'Template Manager' => 'Template Manager',
-    'Backup Migration Manager' => 'Backup Migration Manager',
+    'Backup Migration Manager' => 'Manajer Migrasi Cadangan',
     'FileManager' => 'FileManager',
     'show: CPU / MEM / NET / DISK' => 'tampilkan: CPU / MEM / NET / DISK',
 
@@ -598,7 +598,7 @@ $LANG['id'] = array(
     'name' => 'nama',
     'Initializing' => 'Inisialisasi',
     'UPLOAD' => 'UNGGAH',
-    'NEW FILE' => 'FILE BARU',
+    'NEW FILE' => 'BERKAS BARU',
     'NEW DIR' => 'DIREKTORI BARU',
     'DELETE' => 'HAPUS',
     'RENAME' => 'GANTI',
@@ -612,10 +612,10 @@ $LANG['id'] = array(
     'Hit' => 'Hit',
     'to reload the page' => 'untuk memuat ulang halaman',
     'Directory name cannot be empty' => 'Nama Direktori tidak boleh kosong',
-    'File name cannot be empty' => 'Nama File tidak boleh kosong',
-    'No file selected' => 'Tidak ada file yang dipilih',
-    'No file or folder selected' => 'Tidak ada file atau folder yg dipilih',
-    'File type not supported' => 'Tipe file tidak didukung',
+    'File name cannot be empty' => 'Nama berkas tidak boleh kosong',
+    'No file selected' => 'Tidak ada berkas yang dipilih',
+    'No file or folder selected' => 'Tidak ada berkas atau folder yg dipilih',
+    'File type not supported' => 'Tipe berkas tidak didukung',
     'Directory download not available in current version' => 'Direktori Unduh tidak tersedia di versi ini',
     'Directory not available' => 'Direktori tidak tersedia',
     'Done' => 'Selesai',
@@ -633,21 +633,21 @@ $LANG['id'] = array(
     'YOU ARE COPYING' => 'ANDA MENYALIN',
     'YOU ARE REMOVING' => 'ANDA MENGHAPUS',
     'Delete items' => 'Hapus item',
-    'Copy files' => 'Salin file',
-    'Move files' => 'Pindah file',
+    'Copy files' => 'Salin berkas',
+    'Move files' => 'Pindah berkas',
     'Are you sure you want to copy' => 'Apakah anda yakin ingin menyalin',
     'Are you sure you want to move' => 'Apakah anda yakin ingin memindahkan',
     'Are you sure you want to delete' => 'Aapakah anda Yakin ingin menghapus',
     'into' => 'ke',
-    'existing files will be replaced' => 'file yang sudah ada akan diganti',
+    'existing files will be replaced' => 'berkas yang sudah ada akan diganti',
     'Original name' => 'Nama orisinal',
-    'File' => 'File',
+    'File' => 'Berkas',
     'already exists' => 'sudah ada',
-    'Create file' => 'Buat file',
+    'Create file' => 'Buat berkas',
     'Create directory' => 'Buat direktori',
-    'read by owner' => 'dibaca oleh owner',
-    'write by owner' => 'ditulis oleh owner',
-    'execute/search by owner' => 'eksekusi/cari oleh owner',
+    'read by owner' => 'dibaca oleh pemilik',
+    'write by owner' => 'ditulis oleh pemilik',
+    'execute/search by owner' => 'eksekusi/cari oleh pemilik',
     'read by group' => 'dibaca oleh grup',
     'write by group' => 'ditulis oleh grup',
     'execute/search by group' => 'ekseskusi/cari oleh grup',
@@ -671,30 +671,30 @@ $LANG['id'] = array(
     'Move backward through top menu' => 'Pindah ke sebelumnya lewat menu atas',
     'Move forward through top menu' => 'Pindah ke setelahnya lewat menu atas',
     'Enter focused element' => 'Masuk ke fokus elemen',
-    'Move up through elements list' => 'Move up through elements list',
-    'Move down through elements list' => 'Move down through elements list',
+    'Move up through elements list' => 'Pindah ke atas melalui daftar elemen',
+    'Move down through elements list' => 'Pindah ke bawah melalui daftar elemen',
 
     'Upload' => 'Unggah',
-    'New File' => 'File baru',
+    'New File' => 'Berkas baru',
     'New Folder' => 'Folder baru',
     'Download' => 'Unduh',
     'Archive' => 'Arsip',
-    'Save File (in text editor)' => 'Simpan File (di text editor)',
+    'Save File (in text editor)' => 'Simpan berkas (di penyunting teks)',
     'Close Popup / Cancel' => 'Tutup Popup / Batal',
     'Move Cursor Up' => 'Pindahkan kursor keatas',
     'Move Cursor Down' => 'Pindahkan kursor kebawah',
     'Switch to Left Tab' => 'Pindah ke tab kiri',
     'Switch to Right Tab' => 'Pindah ke tab kanan',
     'Switch Tab' => 'Pindah Tab',
-    'Go to the Top of the File List' => 'Pindah Ke atas dari Daftar File',
-    'Go to the Last File' => 'Pindah File terakhir',
-    'Open File / Enter Directory' => 'Buka File/Masuk ke Direktori',
-    'Edit File' => 'Sunting File',
+    'Go to the Top of the File List' => 'Pindah Ke atas dari Daftar Berkas',
+    'Go to the Last File' => 'Pindah Berkas terakhir',
+    'Open File / Enter Directory' => 'Buka Berkas/Masuk ke Direktori',
+    'Edit File' => 'Sunting Berkas',
     'Go to Parent Directory' => 'Ke Direktori Induk',
-    'Select Current File' => 'Pilih File ini',
-    'Select Bunch of Files' => 'Pilih Bunch of Files',
-    'Add File to the Current Selection' => 'Tambahkan File di Seleksi ini',
-    'Select All Files' => 'Pilih semua file',
+    'Select Current File' => 'Pilih Berkas ini',
+    'Select Bunch of Files' => 'Pilih banyak berkas',
+    'Add File to the Current Selection' => 'Tambahkan Berkas diseleksi ini',
+    'Select All Files' => 'Pilih semua berkas',
     'shortcuts are inspired by magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager' =>
         'pintasan terinspirasi oleh magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager',
 
@@ -706,7 +706,7 @@ $LANG['id'] = array(
     'Licence Activated' => 'Lisensi telah aktif',
     'Licence Deactivated' => 'Lisensi telah di nonaktifkan',
     'Restrict users so that they cannot use SSH and access only their home directory.' => 'Batasi pengguna agar tidak dapat menggunakan SSH dan hanya dapat mengakses direktori home.',
-    'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.' => 'Jelajahi, salin, sunting, lihat dan dapatkan semua file web anda menggunakan File Manager.',
+    'Browse, copy, edit, view, and retrieve all of your web domain files using fully featured File Manager.' => 'Jelajahi, salin, sunting, lihat dan dapatkan semua berkas web anda menggunakan File Manager.',
     'This is a commercial module, you would need to purchace license key to enable it.' => 'Ini modul komersial, anda perlu membayar lisensi untuk mengaktifkannya.',
 
     'Minutes' => 'Permenit',

From ec8631b2d21222956a82ddf623cab87151de81de Mon Sep 17 00:00:00 2001
From: Robin Dirksen <robin@famdirksen.nl>
Date: Tue, 1 Oct 2019 16:28:03 +0200
Subject: [PATCH 0742/2300] Update nl.php

---
 web/inc/i18n/nl.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/i18n/nl.php b/web/inc/i18n/nl.php
index 851fe46d..b5d68ec4 100644
--- a/web/inc/i18n/nl.php
+++ b/web/inc/i18n/nl.php
@@ -758,5 +758,5 @@ $LANG['nl'] = array(
 
     'maximum characters length, including prefix' => 'maximaal %s karakters lang, inclusief prefix',
 
-    'Email Credentials' => 'Email Credentials',
+    'Email Credentials' => 'E-mailreferenties',
 );

From 1fd0078a66b2dbb2cb7e77bdf227d1f2a73d4765 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 1 Oct 2019 21:45:53 +0200
Subject: [PATCH 0743/2300] deb10 dovecot inbox = yes

---
 install/debian/10/dovecot/conf.d/15-mailboxes.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/debian/10/dovecot/conf.d/15-mailboxes.conf b/install/debian/10/dovecot/conf.d/15-mailboxes.conf
index 7b2bab97..9014bdab 100644
--- a/install/debian/10/dovecot/conf.d/15-mailboxes.conf
+++ b/install/debian/10/dovecot/conf.d/15-mailboxes.conf
@@ -4,6 +4,7 @@
 
 # NOTE: Assumes "namespace inbox" has been defined in 10-mail.conf.
 namespace inbox {
+  inbox = yes
   mailbox Drafts {
     special_use = \Drafts
     auto = subscribe

From f767d140066ea29fb5ac868cca24648043188596 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 1 Oct 2019 21:46:46 +0200
Subject: [PATCH 0744/2300] deb9 dovecot inbox = yes

---
 install/debian/9/dovecot/conf.d/15-mailboxes.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/debian/9/dovecot/conf.d/15-mailboxes.conf b/install/debian/9/dovecot/conf.d/15-mailboxes.conf
index 7b2bab97..9014bdab 100644
--- a/install/debian/9/dovecot/conf.d/15-mailboxes.conf
+++ b/install/debian/9/dovecot/conf.d/15-mailboxes.conf
@@ -4,6 +4,7 @@
 
 # NOTE: Assumes "namespace inbox" has been defined in 10-mail.conf.
 namespace inbox {
+  inbox = yes
   mailbox Drafts {
     special_use = \Drafts
     auto = subscribe

From 9089595a5276d2f8d643789b838074a0b2158549 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 1 Oct 2019 21:48:09 +0200
Subject: [PATCH 0745/2300] Removing inbox = yes from installer

---
 install/vst-install-debian.sh | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d72782b2..8283679e 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1192,9 +1192,6 @@ if [ "$dovecot" = 'yes' ]; then
     cp -rf $vestacp/dovecot /etc/
     cp -f $vestacp/logrotate/dovecot /etc/logrotate.d/
     chown -R root:root /etc/dovecot*
-    if [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
-        sed -i "s#namespace inbox {#namespace inbox {\n  inbox = yes#" /etc/dovecot/conf.d/15-mailboxes.conf
-    fi
     update-rc.d dovecot defaults
     service dovecot start
     check_result $? "dovecot start failed"

From 4eb6fed51fab6ef6666edfc1377cfc0a2252b34c Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 1 Oct 2019 21:55:31 +0200
Subject: [PATCH 0746/2300] New phpmyadmin version

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 8283679e..2dba1b91 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1071,7 +1071,7 @@ if [ "$mysql" = 'yes' ]; then
       mkdir /root/phpmyadmin
       mkdir /usr/share/phpmyadmin
       
-      pma_v='4.9.0.1'
+      pma_v='4.9.1'
       echo "(*) Installing phpMyAdmin version v$pma_v..."
 
       cd /root/phpmyadmin

From b625cd51cc788219a5f87a12a7dd4cd4c9afa273 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 2 Oct 2019 12:05:06 +0200
Subject: [PATCH 0747/2300] MultiPHP for DEB8

---
 src/deb/for-download/tools/multi-php-install.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index fdf4d17b..24583536 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -62,6 +62,9 @@ if [ "$inst_repo" -eq 1 ]; then
 press_enter "=== Press enter to install sury.org repo ==============================================================================="
 apt-get -y install apt-transport-https ca-certificates
 wget -nv -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
+if [ $debian_version -eq 8 ]; then
+  sh -c 'echo "deb https://packages.sury.org/php/ jessie main" > /etc/apt/sources.list.d/php.list'
+fi
 if [ $debian_version -eq 9 ]; then
   sh -c 'echo "deb https://packages.sury.org/php/ stretch main" > /etc/apt/sources.list.d/php.list'
 fi

From f0782d1f826e30f00ca888008c8225b13d4b8734 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 3 Oct 2019 16:15:36 +0200
Subject: [PATCH 0748/2300] Fixing broken autoreply output

Broken in https://github.com/serghey-rodin/vesta/commit/0831a198b86a4760e83c0eaec78d84bab7098e6c#diff-f07da7937954ae08bdb2e7379655ae29
@sergio-nadal
---
 web/edit/mail/index.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/web/edit/mail/index.php b/web/edit/mail/index.php
index e4451fc5..44f122f1 100644
--- a/web/edit/mail/index.php
+++ b/web/edit/mail/index.php
@@ -72,13 +72,14 @@ if ((!empty($_GET['domain'])) && (!empty($_GET['account'])))  {
 
     $v_domain = escapeshellarg($_GET['domain']);
     $v_account = escapeshellarg($_GET['account']);
+    $v_account_without_quotas = $_GET['account'];
 
     // Parse autoreply
     if ( $v_autoreply == 'yes' ) {
         exec (VESTA_CMD."v-list-mail-account-autoreply ".$user." ".$v_domain." ".$v_account." json", $output, $return_var);
         $autoreply_str = json_decode(implode('', $output), true);
         unset($output);
-        $v_autoreply_message = $autoreply_str[$v_account]['MSG'];
+        $v_autoreply_message = $autoreply_str[$v_account_without_quotas]['MSG'];
         $v_autoreply_message=str_replace("\\n", "\n", $v_autoreply_message);
     }
 }

From 9d2ca4b592eb309c93860f2fce5d1e14609a7938 Mon Sep 17 00:00:00 2001
From: David Olsen <david@dawin.dk>
Date: Mon, 7 Oct 2019 10:40:56 +0200
Subject: [PATCH 0749/2300] Only exclude logs folder from root, not in webdata

Restoring should not exclude logs in any folder down the tree. This causes errors when restoring wordpress with certain plugins that have folders named "logs". This change aligns the restore with the backup function https://github.com/serghey-rodin/vesta/blob/master/bin/v-backup-user#L226

You could also omit the exclusion entirely, as this folder you are excluding should never be in the backup.
---
 bin/v-restore-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index bd3d86bb..c7a5bec3 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -409,7 +409,7 @@ if [ "$web" != 'no' ] && [ ! -z "$WEB_SYSTEM" ]; then
         chown $user $tmpdir
         chmod u+w $HOMEDIR/$user/web/$domain
         sudo -u $user tar -xzpf $tmpdir/web/$domain/domain_data.tar.gz \
-            -C $HOMEDIR/$user/web/$domain/ --exclude=logs/* \
+            -C $HOMEDIR/$user/web/$domain/ --exclude=./logs/* \
             2> $HOMEDIR/$user/web/$domain/restore_errors.log
         if [ -e "$HOMEDIR/$user/web/$domain/restore_errors.log" ]; then
             chown $user:$user $HOMEDIR/$user/web/$domain/restore_errors.log

From 94ca263036b870bce2af63409e4038e1f5b34147 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 31 Oct 2019 13:47:52 +0100
Subject: [PATCH 0750/2300] Multi PHP support for PHP 7.4

---
 .../for-download/tools/multi-php-install.sh   | 41 +++++++++++++++++--
 1 file changed, 38 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 24583536..2de69640 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -1,12 +1,20 @@
 #!/bin/bash
 
-debian_version=$(cat /etc/debian_version | tr "." "\n" | head -n1)
-inst_repo=0
+#########################################################################
+# First enter 1 below for desired PHP versions and then run this script #
+#########################################################################
+
 inst_56=0
 inst_70=0
 inst_71=0
 inst_72=0
 inst_73=0
+inst_74=0
+
+#######################################################################
+
+inst_repo=0
+debian_version=$(cat /etc/debian_version | tr "." "\n" | head -n1)
 
 if [ $# -gt 0 ]; then
     inst_repo=$1
@@ -26,8 +34,11 @@ fi
 if [ $# -gt 5 ]; then
     inst_73=$6
 fi
+if [ $# -gt 6 ]; then
+    inst_74=$7
+fi
 
-if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ]; then
+if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ] || [ $inst_74 -eq 1 ]; then
     inst_repo=1
 fi
 
@@ -181,3 +192,27 @@ if [ $debian_version -eq 9 ]; then
 fi
 press_enter "=== Press enter to continue ==============================================================================="
 fi
+
+if [ "$inst_74" -eq 1 ]; then
+    press_enter "=== Press enter to install PHP 7.4 ==============================================================================="
+    apt-get -y install php7.4-mbstring php7.4-bcmath php7.4-cli php7.4-curl php7.4-fpm php7.4-gd php7.4-intl php7.4-mysql php7.4-soap php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached
+    update-rc.d php7.4-fpm defaults
+    a2enconf php7.4-fpm
+    systemctl restart apache2
+    cp -r /etc/php/7.4/ /root/vst_install_backups/php7.4/
+    wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-74.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.stpl
+    wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-74.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl
+    wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-74.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.sh
+    wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-74-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74-public.stpl
+    wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-74-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74-public.tpl
+    wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-74-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74-public.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74-public.sh
+    if [ $debian_version -eq 9 ]; then
+        cp /etc/php/7.0/apache2/php.ini /etc/php/7.4/fpm/php.ini
+    fi
+    if [ $debian_version -eq 10 ]; then
+        cp /etc/php/7.3/fpm/php.ini /etc/php/7.4/fpm/php.ini
+    fi
+    press_enter "=== Press enter to continue ==============================================================================="
+fi

From 5a57c0911a699e2f11b667c5ea88c85568d07df8 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 31 Oct 2019 14:06:32 +0100
Subject: [PATCH 0751/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 2de69640..b309ea08 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -64,6 +64,7 @@ echo "inst_70=$inst_70"
 echo "inst_71=$inst_71"
 echo "inst_72=$inst_72"
 echo "inst_73=$inst_73"
+echo "inst_74=$inst_74"
 echo "wait_to_press_enter=$wait_to_press_enter"
 
 press_enter "=== Press enter to continue ==============================================================================="

From 2d6887b7257062cead84235f83de993619ec8eeb Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Thu, 31 Oct 2019 14:42:34 +0100
Subject: [PATCH 0752/2300] php-fpm apache templates

---
 .../tools/apache-fpm-tpl/PHP-FPM-56.sh        | 92 +++++++++++++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-56.stpl      | 44 +++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-56.tpl       | 38 ++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-70.sh        | 92 +++++++++++++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-70.stpl      | 44 +++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-70.tpl       | 38 ++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-71.sh        | 92 +++++++++++++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-71.stpl      | 44 +++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-71.tpl       | 38 ++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-72.sh        | 92 +++++++++++++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-72.stpl      | 44 +++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-72.tpl       | 38 ++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-73-public.sh | 92 +++++++++++++++++++
 .../apache-fpm-tpl/PHP-FPM-73-public.stpl     | 44 +++++++++
 .../apache-fpm-tpl/PHP-FPM-73-public.tpl      | 38 ++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-73.sh        | 92 +++++++++++++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-73.stpl      | 44 +++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-73.tpl       | 38 ++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-74-public.sh | 92 +++++++++++++++++++
 .../apache-fpm-tpl/PHP-FPM-74-public.stpl     | 44 +++++++++
 .../apache-fpm-tpl/PHP-FPM-74-public.tpl      | 38 ++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-74.sh        | 92 +++++++++++++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-74.stpl      | 44 +++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-74.tpl       | 38 ++++++++
 24 files changed, 1392 insertions(+)
 create mode 100755 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.tpl
 create mode 100755 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.tpl
 create mode 100755 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.tpl
 create mode 100755 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.tpl
 create mode 100755 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.tpl
 create mode 100755 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.tpl
 create mode 100755 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.tpl
 create mode 100755 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.tpl

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh
new file mode 100755
index 00000000..9ffaadf3
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php5.6-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+request_terminate_timeout = 30s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+
+write_file=0
+if [ ! -f "$pool_file_56" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_56)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_56
+    service php5.6-fpm restart
+fi
+if [ -f "/etc/php/5.6/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/5.6/fpm/pool.d/www.conf
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    service php7.3-fpm restart
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    service php7.4-fpm restart
+fi
+
+exit 0
\ No newline at end of file
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.stpl
new file mode 100644
index 00000000..eb5631db
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php5.6-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.tpl
new file mode 100644
index 00000000..cd4e797d
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php5.6-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh
new file mode 100755
index 00000000..7ae49492
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.0-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+request_terminate_timeout = 30s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_70" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_70)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_70
+    service php7.0-fpm restart
+fi
+if [ -f "/etc/php/7.0/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.0/fpm/pool.d/www.conf
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    service php7.3-fpm restart
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    service php7.4-fpm restart
+fi
+
+exit 0
\ No newline at end of file
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.stpl
new file mode 100644
index 00000000..38285302
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.0-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.tpl
new file mode 100644
index 00000000..7d30d39c
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.0-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh
new file mode 100755
index 00000000..72853906
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.1-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+request_terminate_timeout = 30s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_71" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_71)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_71
+    service php7.1-fpm restart
+fi
+if [ -f "/etc/php/7.1/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.1/fpm/pool.d/www.conf
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    service php7.3-fpm restart
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    service php7.4-fpm restart
+fi
+
+exit 0
\ No newline at end of file
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.stpl
new file mode 100644
index 00000000..c5d284f7
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.1-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.tpl
new file mode 100644
index 00000000..695b9937
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.1-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh
new file mode 100755
index 00000000..8322eb88
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.2-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+request_terminate_timeout = 30s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_72" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_72)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_72
+    service php7.2-fpm restart
+fi
+if [ -f "/etc/php/7.2/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.2/fpm/pool.d/www.conf
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    service php7.3-fpm restart
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    service php7.4-fpm restart
+fi
+
+exit 0
\ No newline at end of file
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.stpl
new file mode 100644
index 00000000..2b4363b4
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.2-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.tpl
new file mode 100644
index 00000000..be2ca7ae
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.2-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.sh
new file mode 100755
index 00000000..1cddda74
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.3-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+request_terminate_timeout = 30s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_73" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_73)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_73
+    service php7.3-fpm restart
+fi
+if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.3/fpm/pool.d/www.conf
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    service php7.4-fpm restart
+fi
+
+exit 0
\ No newline at end of file
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.stpl
new file mode 100644
index 00000000..9660c234
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.tpl
new file mode 100644
index 00000000..892c0d1f
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh
new file mode 100755
index 00000000..1cddda74
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.3-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+request_terminate_timeout = 30s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_73" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_73)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_73
+    service php7.3-fpm restart
+fi
+if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.3/fpm/pool.d/www.conf
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    service php7.4-fpm restart
+fi
+
+exit 0
\ No newline at end of file
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.stpl
new file mode 100644
index 00000000..28224413
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.tpl
new file mode 100644
index 00000000..7bec5e73
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh
new file mode 100755
index 00000000..64cbaaf6
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.4-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+request_terminate_timeout = 30s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    service php7-3-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_74" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_74)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_74
+    service php7.4-fpm restart
+fi
+if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.4/fpm/pool.d/www.conf
+fi
+
+exit 0
\ No newline at end of file
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.stpl
new file mode 100644
index 00000000..fdbc26f9
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.tpl
new file mode 100644
index 00000000..614f20c3
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
new file mode 100755
index 00000000..64cbaaf6
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.4-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+request_terminate_timeout = 30s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    service php7-3-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_74" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_74)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_74
+    service php7.4-fpm restart
+fi
+if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.4/fpm/pool.d/www.conf
+fi
+
+exit 0
\ No newline at end of file
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.stpl
new file mode 100644
index 00000000..df607247
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.tpl
new file mode 100644
index 00000000..7b6e2cb5
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+

From 8983b418def56b1540e44111038326527cc08729 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 31 Oct 2019 14:52:23 +0100
Subject: [PATCH 0753/2300] Copy tools folder to c subdomain

---
 src/deb/vesta_compile.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 4cbde785..3ee3c74f 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -301,6 +301,9 @@ if [ "$CWEB_B" = true ]; then
   echo "=== All done"
   
   cp /root/vesta/install/vst-install-debian.sh $PATH_OF_C_WEB_FOLDER_ROOT/vst-install-debian.sh
+  
+  mkdir $PATH_OF_C_WEB_FOLDER_ROOT/tools
+  cp -rf /root/vesta/src/deb/for-download/tools/* $PATH_OF_C_WEB_FOLDER_ROOT/tools
 fi
 
 #################################################################################

From 72c1aa3830f516c0df68fee0add2c356d1d7ed09 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 31 Oct 2019 14:57:17 +0100
Subject: [PATCH 0754/2300] Moved tpls to official c subdomain

---
 .../for-download/tools/multi-php-install.sh   | 48 +++++++++----------
 1 file changed, 24 insertions(+), 24 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index b309ea08..e76d5ba0 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -101,9 +101,9 @@ a2enconf php5.6-fpm
 systemctl restart apache2
 cp -r /etc/php/5.6/ /root/vst_install_backups/php5.6/
 # rm -f /etc/php/5.6/fpm/pool.d/*
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-56.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.stpl
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-56.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.tpl
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-56.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.stpl
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.tpl
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
 chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
 patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php5-deb9.patch
 press_enter "=== Press enter to continue ==============================================================================="
@@ -117,9 +117,9 @@ a2enconf php7.0-fpm
 systemctl restart apache2
 cp -r /etc/php/7.0/ /root/vst_install_backups/php7.0/
 # rm -f /etc/php/7.0/fpm/pool.d/*
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-70.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.stpl
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-70.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.tpl
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-70.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.sh
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-70.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.stpl
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-70.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.tpl
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-70.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.sh
 chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.sh
 if [ $debian_version -eq 9 ]; then
   cp /etc/php/7.0/apache2/php.ini /etc/php/7.0/fpm/php.ini
@@ -138,9 +138,9 @@ a2enconf php7.1-fpm
 systemctl restart apache2
 cp -r /etc/php/7.1/ /root/vst_install_backups/php7.1/
 # rm -f /etc/php/7.1/fpm/pool.d/*
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-71.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.stpl
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-71.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.tpl
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-71.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.sh
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-71.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.stpl
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-71.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.tpl
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-71.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.sh
 chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.sh
 if [ $debian_version -eq 9 ]; then
   cp /etc/php/7.0/apache2/php.ini /etc/php/7.1/fpm/php.ini
@@ -159,9 +159,9 @@ a2enconf php7.2-fpm
 systemctl restart apache2
 cp -r /etc/php/7.2/ /root/vst_install_backups/php7.2/
 # rm -f /etc/php/7.2/fpm/pool.d/*
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-72.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.stpl
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-72.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.tpl
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-72.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.sh
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-72.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.stpl
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-72.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.tpl
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-72.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.sh
 chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.sh
 if [ $debian_version -eq 9 ]; then
   cp /etc/php/7.0/apache2/php.ini /etc/php/7.2/fpm/php.ini
@@ -180,12 +180,12 @@ a2enconf php7.3-fpm
 systemctl restart apache2
 cp -r /etc/php/7.3/ /root/vst_install_backups/php7.3/
 # rm -f /etc/php/7.3/fpm/pool.d/*
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-73.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.stpl
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-73.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-73.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-73-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.stpl
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-73-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.tpl
-wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-73-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.sh
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.stpl
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.stpl
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.tpl
+wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.sh
 chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh
 chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.sh
 if [ $debian_version -eq 9 ]; then
@@ -201,12 +201,12 @@ if [ "$inst_74" -eq 1 ]; then
     a2enconf php7.4-fpm
     systemctl restart apache2
     cp -r /etc/php/7.4/ /root/vst_install_backups/php7.4/
-    wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-74.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.stpl
-    wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-74.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl
-    wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-74.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.sh
-    wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-74-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74-public.stpl
-    wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-74-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74-public.tpl
-    wget -nv http://dl.mycity.tech/vesta/php-fpm-tpl/PHP-FPM-74-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74-public.sh
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-74.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-74.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-74.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.sh
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-74-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74-public.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-74-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74-public.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-74-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74-public.sh
     chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.sh
     chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74-public.sh
     if [ $debian_version -eq 9 ]; then

From ef8151bd81a3b47b864a567ac076e9459f3eacaf Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 31 Oct 2019 15:12:24 +0100
Subject: [PATCH 0755/2300] Temporary removing php7.4-memcached

---
 src/deb/for-download/tools/multi-php-install.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index e76d5ba0..69184ced 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -196,7 +196,8 @@ fi
 
 if [ "$inst_74" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 7.4 ==============================================================================="
-    apt-get -y install php7.4-mbstring php7.4-bcmath php7.4-cli php7.4-curl php7.4-fpm php7.4-gd php7.4-intl php7.4-mysql php7.4-soap php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached
+    apt-get -y install php7.4-mbstring php7.4-bcmath php7.4-cli php7.4-curl php7.4-fpm php7.4-gd php7.4-intl php7.4-mysql php7.4-soap php7.4-xml php7.4-zip
+    # php7.4-memcache php7.4-memcached
     update-rc.d php7.4-fpm defaults
     a2enconf php7.4-fpm
     systemctl restart apache2

From 0461f03644d94a50e3dfa0ced90bb4ab506be731 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 7 Nov 2019 20:55:03 +0100
Subject: [PATCH 0756/2300] Removing old PHP sessions files

---
 install/vst-install-debian.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 2dba1b91..31d57359 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1590,6 +1590,9 @@ fi
 echo "MAX_DBUSER_LEN=80" >> $VESTA/conf/vesta.conf
 echo "================================================================"
 
+# Removing old PHP sessions files
+crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
+
 #----------------------------------------------------------#
 #                   Vesta Access Info                      #
 #----------------------------------------------------------#

From 2e6a660b59c6385aced01bea31a4cbcd750735cb Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 7 Nov 2019 21:02:08 +0100
Subject: [PATCH 0757/2300] Update postinst

---
 src/deb/vesta/postinst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 93dfad7e..093447ea 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -17,4 +17,6 @@ if [ "$check_apt" -eq 1 ]; then
     echo "deb http://apt.myvestacp.com/$codename/ $codename vesta" > /etc/apt/sources.list.d/vesta.list
 fi
 
+crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
+
 exit 0

From 40f8c5c5c77768a452c2d84a6bf8fa916d950b17 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 13 Nov 2019 14:13:31 +0100
Subject: [PATCH 0758/2300] apparmor fix

---
 install/vst-install-debian.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 31d57359..aa0d4e6a 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1137,7 +1137,9 @@ if [ "$named" = 'yes' ]; then
     chmod 640 /etc/bind/named.conf
     aa-complain /usr/sbin/named 2>/dev/null
     if [ "$apparmor" = 'yes' ]; then
-      echo "/home/** rwm," >> /etc/apparmor.d/local/usr.sbin.named 2>/dev/null
+      # echo "/home/** rwm," >> /etc/apparmor.d/local/usr.sbin.named 2>/dev/null
+      sed -i "s#/etc/bind/\*\* rw,#/etc/bind/\*\* rw,\n  /home/\*\* rwm,#g" /etc/apparmor.d/usr.sbin.named
+      sed -i "s#/etc/bind/\*\* r,#/etc/bind/\*\* rw,\n  /home/\*\* rwm,#g" /etc/apparmor.d/usr.sbin.named
       service apparmor status >/dev/null 2>&1
       if [ $? -ne 0 ]; then
           service apparmor restart

From 818745df1b1aea18a00f2c3015c382d788b22c83 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 14 Nov 2019 12:44:11 +0100
Subject: [PATCH 0759/2300] Support for longer username of email accounts

---
 func/main.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index dd9d81b8..8c46895c 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -525,7 +525,7 @@ is_user_format_valid() {
             check_result $E_INVALID "invalid $2 format :: $1"
         fi
     else
-        if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]
+        if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,64}[[:alnum:]]$ ]]
             then
             check_result $E_INVALID "invalid $2 format :: $1"
         fi

From d4332cafc875e2eecd96cfb724130105403b8099 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 15 Nov 2019 14:29:14 +0100
Subject: [PATCH 0760/2300] clamav-freshclam notification fix

---
 src/deb/vesta/postinst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 093447ea..efadbc8b 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -19,4 +19,10 @@ fi
 
 crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
 
+touch /var/lib/clamav/clamd.sock
+chown clamav:clamav /var/lib/clamav/clamd.sock
+sed -i "s#/var/run/clamav/clamd.ctl#/var/lib/clamav/clamd.sock#g" /etc/clamav/clamd.conf
+systemctl restart clamav-daemon
+systemctl restart clamav-freshclam
+
 exit 0

From 63c364d2a319aff8344dbb418b202479b16a35ae Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 15 Nov 2019 14:31:28 +0100
Subject: [PATCH 0761/2300] New clamd.sock (deb10)

---
 install/debian/10/clamav/clamd.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/clamav/clamd.conf b/install/debian/10/clamav/clamd.conf
index c636b6d3..10ebbac3 100644
--- a/install/debian/10/clamav/clamd.conf
+++ b/install/debian/10/clamav/clamd.conf
@@ -1,7 +1,7 @@
 #Automatically Generated by clamav-base postinst
 #To reconfigure clamd run #dpkg-reconfigure clamav-base
 #Please read /usr/share/doc/clamav-base/README.Debian.gz for details
-LocalSocket /var/run/clamav/clamd.ctl
+LocalSocket /var/lib/clamav/clamd.sock
 FixStaleSocket true
 LocalSocketGroup clamav
 LocalSocketMode 666

From c58c43dfc4d97cd0ea51d35241a2058b8b5f48f5 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 15 Nov 2019 14:32:36 +0100
Subject: [PATCH 0762/2300] New clamd.sock (deb9)

---
 install/debian/9/clamav/clamd.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/9/clamav/clamd.conf b/install/debian/9/clamav/clamd.conf
index 3fe6454f..84c4807e 100644
--- a/install/debian/9/clamav/clamd.conf
+++ b/install/debian/9/clamav/clamd.conf
@@ -1,7 +1,7 @@
 #Automatically Generated by clamav-base postinst
 #To reconfigure clamd run #dpkg-reconfigure clamav-base
 #Please read /usr/share/doc/clamav-base/README.Debian.gz for details
-LocalSocket /var/run/clamav/clamd.ctl
+LocalSocket /var/lib/clamav/clamd.sock
 FixStaleSocket true
 LocalSocketGroup clamav
 LocalSocketMode 666

From 14b1bdf78ad90228b17d2cabc86e76bc7d22ccdc Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 15 Nov 2019 14:33:33 +0100
Subject: [PATCH 0763/2300] New clamd.sock (deb8)

---
 install/debian/8/clamav/clamd.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/8/clamav/clamd.conf b/install/debian/8/clamav/clamd.conf
index 3fe6454f..84c4807e 100644
--- a/install/debian/8/clamav/clamd.conf
+++ b/install/debian/8/clamav/clamd.conf
@@ -1,7 +1,7 @@
 #Automatically Generated by clamav-base postinst
 #To reconfigure clamd run #dpkg-reconfigure clamav-base
 #Please read /usr/share/doc/clamav-base/README.Debian.gz for details
-LocalSocket /var/run/clamav/clamd.ctl
+LocalSocket /var/lib/clamav/clamd.sock
 FixStaleSocket true
 LocalSocketGroup clamav
 LocalSocketMode 666

From b2701563a60652083d4ebab8e6fe0a355b48aac5 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 15 Nov 2019 14:39:07 +0100
Subject: [PATCH 0764/2300] clamav installer notification fix

---
 install/vst-install-debian.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index aa0d4e6a..b08d60b8 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1208,6 +1208,8 @@ if [ "$clamd" = 'yes' ]; then
     gpasswd -a clamav mail
     gpasswd -a clamav Debian-exim
     cp -f $vestacp/clamav/clamd.conf /etc/clamav/
+    touch /var/lib/clamav/clamd.sock
+    chown clamav:clamav /var/lib/clamav/clamd.sock
     /usr/bin/freshclam
     update-rc.d clamav-daemon defaults
     if [ ! -d "/var/run/clamav" ]; then

From 0620dd094d273ebe2c52e7eecd051c0f4751d756 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 15 Nov 2019 14:44:43 +0100
Subject: [PATCH 0765/2300] Version up

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 6d1b9e6c..1d217a32 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-25
+vesta-0.9.8-26-2

From 6f5fff279080724ce3919513cafc91831943a18d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 15 Nov 2019 14:45:42 +0100
Subject: [PATCH 0766/2300] Version up

---
 src/deb/vesta/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 0cb5f67d..ebe0fa5c 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-26
+Version: 0.9.8-26-2
 Section: admin
 Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
 Homepage: http://myvestacp.com

From 9d4d002bd3afd7edd719cbcac000408efdf3b2f5 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 15 Nov 2019 15:18:41 +0100
Subject: [PATCH 0767/2300] Support for sub-release

---
 bin/v-list-sys-vesta-updates | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-list-sys-vesta-updates b/bin/v-list-sys-vesta-updates
index 62e2013b..69fcf9f8 100755
--- a/bin/v-list-sys-vesta-updates
+++ b/bin/v-list-sys-vesta-updates
@@ -78,6 +78,10 @@ else
     ARCH=$(echo "$dpkg_data"|grep Architecture |cut -f 2 -d ' ')
     VERSION=$(echo "$dpkg_data"|grep ^Version |cut -f 2 -d ' '|cut -f 1 -d \-)
     RELEASE=$(echo "$dpkg_data"|grep ^Version |cut -f 2 -d ' '|cut -f 2 -d \-)
+    SUBRELEASE=$(echo "$dpkg_data"|grep ^Version |cut -f 2 -d ' '|cut -f 3 -d \-)
+    if [ ! -z "$SUBRELEASE" ]; then
+        RELEASE="$RELEASE-$SUBRELEASE"
+    fi
     DATE=$(date -d @$pkg_date +"%F")
     TIME=$(date -d @$pkg_date +"%T")
 fi

From 4eb2e6a7bac88b50deca6fd6aa63b3ecdcdf9498 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 15 Nov 2019 15:34:15 +0100
Subject: [PATCH 0768/2300] Better check if session cron already added

---
 src/deb/vesta/postinst | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index efadbc8b..cd650c1f 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -17,7 +17,12 @@ if [ "$check_apt" -eq 1 ]; then
     echo "deb http://apt.myvestacp.com/$codename/ $codename vesta" > /etc/apt/sources.list.d/vesta.list
 fi
 
-crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
+
+check_cron=$(grep -c '6 sudo find /home/' /var/spool/cron/crontabs/root)
+if [ "$check_cron" -eq 0 ]; then
+    crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
+fi
+
 
 touch /var/lib/clamav/clamd.sock
 chown clamav:clamav /var/lib/clamav/clamd.sock

From fe0746ec2806e7c841e02b381d3f6a0022add4b0 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 15 Nov 2019 15:54:44 +0100
Subject: [PATCH 0769/2300] Info about nameservers

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index b08d60b8..f36a7aa1 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1534,6 +1534,7 @@ if [ "$host_ip" != "$ip" ]; then
     echo "***** PROBLEM: Hostname $servername is not pointing to your server (IP address $ip)"
     echo "Without pointing your hostname to your IP, LetsEncrypt SSL will not be generated for your server hostname."
     echo "Try to setup an A record in your DNS, pointing your hostname $servername to IP address $ip and then press ENTER."
+    echo "(or register ns1.$servername and ns2.$servername as DNS Nameservers and put those Nameservers on $servername domain)"
     echo "If we detect that hostname is still not pointing to your IP, installer will not add LetsEncrypt SSL certificate to your hosting panel (unsigned SSL will be used instead)."
     read -p "To force to try anyway to add LetsEncrypt, press f and then ENTER." answer
     host_ip=$(host $servername | head -n 1 | awk '{print $NF}')

From 776975ac02bf2b898efd7422c9466135a5cef716 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 26 Nov 2019 21:43:14 +0100
Subject: [PATCH 0770/2300] clamd.sock fix for exim

---
 src/deb/vesta/postinst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index cd650c1f..97a9400e 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -27,6 +27,7 @@ fi
 touch /var/lib/clamav/clamd.sock
 chown clamav:clamav /var/lib/clamav/clamd.sock
 sed -i "s#/var/run/clamav/clamd.ctl#/var/lib/clamav/clamd.sock#g" /etc/clamav/clamd.conf
+sed -i "s#/var/run/clamav/clamd.ctl#/var/lib/clamav/clamd.sock#g" /etc/exim4/exim4.conf.template
 systemctl restart clamav-daemon
 systemctl restart clamav-freshclam
 

From 471b77f9be187ac8e5f5ef57538e6ad01755227e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 26 Nov 2019 21:44:03 +0100
Subject: [PATCH 0771/2300] Version up

---
 src/deb/vesta/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index ebe0fa5c..f2dfd9ce 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-26-2
+Version: 0.9.8-26-3
 Section: admin
 Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
 Homepage: http://myvestacp.com

From 43a9c7544591eaff38bae4922b0dfeb7786e7d25 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 26 Nov 2019 21:44:54 +0100
Subject: [PATCH 0772/2300] Version up

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 1d217a32..0ac75b61 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-2
+vesta-0.9.8-26-3

From 6663edc11306f326c71ad92e34313643d15a7075 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 26 Nov 2019 21:46:51 +0100
Subject: [PATCH 0773/2300] update postinst

---
 src/deb/vesta/postinst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 97a9400e..bca5865c 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -30,5 +30,6 @@ sed -i "s#/var/run/clamav/clamd.ctl#/var/lib/clamav/clamd.sock#g" /etc/clamav/cl
 sed -i "s#/var/run/clamav/clamd.ctl#/var/lib/clamav/clamd.sock#g" /etc/exim4/exim4.conf.template
 systemctl restart clamav-daemon
 systemctl restart clamav-freshclam
+systemctl restart exim4
 
 exit 0

From f6a8bb073f07ae1d0ce8372a5c091bdc5a8759c9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 26 Nov 2019 21:49:16 +0100
Subject: [PATCH 0774/2300] clamd.sock fix exim4 deb10

---
 install/debian/10/exim/exim4.conf.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
index 12b41e40..c1f285ea 100644
--- a/install/debian/10/exim/exim4.conf.template
+++ b/install/debian/10/exim/exim4.conf.template
@@ -30,7 +30,7 @@ spamd_address = 127.0.0.1 783
 .endif
 
 .ifdef CLAMD
-av_scanner = clamd: /var/run/clamav/clamd.ctl
+av_scanner = clamd: /var/lib/clamav/clamd.sock
 .endif
 
 tls_advertise_hosts = *

From 07731f93bbf9c63833168dde6bdfb300c13501e7 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 26 Nov 2019 21:51:41 +0100
Subject: [PATCH 0775/2300] exim4 clamd.sock fix deb9

---
 install/debian/9/exim/exim4.conf.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/9/exim/exim4.conf.template b/install/debian/9/exim/exim4.conf.template
index 12b41e40..c1f285ea 100644
--- a/install/debian/9/exim/exim4.conf.template
+++ b/install/debian/9/exim/exim4.conf.template
@@ -30,7 +30,7 @@ spamd_address = 127.0.0.1 783
 .endif
 
 .ifdef CLAMD
-av_scanner = clamd: /var/run/clamav/clamd.ctl
+av_scanner = clamd: /var/lib/clamav/clamd.sock
 .endif
 
 tls_advertise_hosts = *

From ef3b9529bac236fb3a06914ae1da3a9509379005 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 26 Nov 2019 21:53:14 +0100
Subject: [PATCH 0776/2300] exim4 clamd.sock fix deb8

---
 install/debian/8/exim/exim4.conf.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/8/exim/exim4.conf.template b/install/debian/8/exim/exim4.conf.template
index 12b41e40..c1f285ea 100644
--- a/install/debian/8/exim/exim4.conf.template
+++ b/install/debian/8/exim/exim4.conf.template
@@ -30,7 +30,7 @@ spamd_address = 127.0.0.1 783
 .endif
 
 .ifdef CLAMD
-av_scanner = clamd: /var/run/clamav/clamd.ctl
+av_scanner = clamd: /var/lib/clamav/clamd.sock
 .endif
 
 tls_advertise_hosts = *

From e9cd93e3f753daeabba575e3a63351b793aff865 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 16 Dec 2019 21:23:12 +0100
Subject: [PATCH 0777/2300] exim-without-limits

---
 .../exim-without-limits/exim4.conf.template   | 387 ++++++++++++++++++
 1 file changed, 387 insertions(+)
 create mode 100644 src/deb/for-download/tools/exim-without-limits/exim4.conf.template

diff --git a/src/deb/for-download/tools/exim-without-limits/exim4.conf.template b/src/deb/for-download/tools/exim-without-limits/exim4.conf.template
new file mode 100644
index 00000000..a973039f
--- /dev/null
+++ b/src/deb/for-download/tools/exim-without-limits/exim4.conf.template
@@ -0,0 +1,387 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+disable_ipv6=true
+add_environment=<; PATH=/bin:/usr/bin
+keep_environment=
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/lib/clamav/clamd.sock
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/certificate.crt
+tls_privatekey = /usr/local/vesta/ssl/certificate.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 0s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lc:${domain:$h_from:}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+
+begin acl
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth requried
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+
+  deny senders = /etc/exim4/deny_senders
+
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = */defer_ok
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{100K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = nobody:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh|\.jar)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/$domain/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #helo_data = $sender_address_domain
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  from = "${local_part}@${domain}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################

From 56ccb71ea80eedcb384a18e0aafea400ea40910c Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 29 Dec 2019 20:08:42 +0100
Subject: [PATCH 0778/2300] Removing xml from proxy extensions list

---
 web/templates/admin/add_web.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/add_web.html b/web/templates/admin/add_web.html
index 236e47fa..8130fe20 100644
--- a/web/templates/admin/add_web.html
+++ b/web/templates/admin/add_web.html
@@ -114,7 +114,7 @@
                                     </tr>
                                     <tr>
                                         <td class="step-left">
-                                            <textarea size="20" class="vst-textinput" name="v_proxy_ext"><?php if (!empty($v_proxy_ext)) { echo htmlentities(trim($v_proxy_ext, "'"));} else { echo 'jpeg, jpg, png, gif, bmp, ico, svg, tif, tiff, css, js, ttf, otf, webp, txt, csv, rtf, doc, docx, xls, xlsx, ppt, pptx, odf, odp, ods, odt, pdf, psd, ai, eot, eps, ps, zip, tar, tgz, gz, rar, bz2, 7z, aac, m4a, mp3, mp4, ogg, wav, wma, 3gp, avi, flv, m4v, mkv, mov, mp4, mpeg, mpg, wmv, exe, iso, dmg, swf, woff, woff2, xml'; }  ?></textarea>
+                                            <textarea size="20" class="vst-textinput" name="v_proxy_ext"><?php if (!empty($v_proxy_ext)) { echo htmlentities(trim($v_proxy_ext, "'"));} else { echo 'jpeg, jpg, png, gif, bmp, ico, svg, tif, tiff, css, js, ttf, otf, webp, txt, csv, rtf, doc, docx, xls, xlsx, ppt, pptx, odf, odp, ods, odt, pdf, psd, ai, eot, eps, ps, zip, tar, tgz, gz, rar, bz2, 7z, aac, m4a, mp3, mp4, ogg, wav, wma, 3gp, avi, flv, m4v, mkv, mov, mp4, mpeg, mpg, wmv, exe, iso, dmg, swf, woff, woff2'; }  ?></textarea>
                                         </td>
                                     </tr>
                                 </table>

From 1d84e8bfcde820921b30cc8aa2512f829961cb6e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 29 Dec 2019 20:10:18 +0100
Subject: [PATCH 0779/2300] Removing xml from proxy extensions list

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index f36a7aa1..f9d43752 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1439,7 +1439,7 @@ if [ "$release" -eq 10 ]; then
     sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/7.3/fpm/pool.d/$servername.conf
     service php7.3-fpm restart
     ln -s /var/lib/roundcube /var/lib/roundcube/webmail
-    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2,xml' 'no'
+    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'no'
   fi
 fi
 

From f68edcb5c1cb4e902f30c1e0129f8be6623d8023 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 29 Dec 2019 20:13:10 +0100
Subject: [PATCH 0780/2300] Removing xml from proxy extensions list

---
 bin/v-add-web-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-web-domain b/bin/v-add-web-domain
index 8e7daf35..b3d80de3 100755
--- a/bin/v-add-web-domain
+++ b/bin/v-add-web-domain
@@ -137,7 +137,7 @@ if [ ! -z "$PROXY_SYSTEM" ]; then
     if [ -z "$proxy_ext" ]; then
         PROXY_EXT="jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls"
         PROXY_EXT="$PROXY_EXT,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp"
-        PROXY_EXT="$PROXY_EXT,rtf,js,mp3,avi,mpeg,flv,woff,woff2,xml"
+        PROXY_EXT="$PROXY_EXT,rtf,js,mp3,avi,mpeg,flv,woff,woff2"
     fi
     add_web_config "$PROXY_SYSTEM" "$PROXY_TEMPLATE.tpl"
 fi

From e9afaa1bacaf5043acad024b7de8131011ec5a16 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 29 Dec 2019 20:16:00 +0100
Subject: [PATCH 0781/2300] Removing xml from proxy extensions list

---
 bin/v-add-web-domain-proxy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-web-domain-proxy b/bin/v-add-web-domain-proxy
index f9ff4142..330fa677 100755
--- a/bin/v-add-web-domain-proxy
+++ b/bin/v-add-web-domain-proxy
@@ -14,7 +14,7 @@
 user=$1
 domain=$2
 template=$3
-default_extentions="jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2,xml"
+default_extentions="jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2"
 extentions=${4-$default_extentions}
 restart="$5"
 

From 19a0812367559cc358af5b6f2ab26096f6e61591 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 29 Dec 2019 20:17:41 +0100
Subject: [PATCH 0782/2300] Removing xml from proxy extensions list

---
 bin/v-change-web-domain-proxy-tpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-change-web-domain-proxy-tpl b/bin/v-change-web-domain-proxy-tpl
index 36c09843..93f67723 100755
--- a/bin/v-change-web-domain-proxy-tpl
+++ b/bin/v-change-web-domain-proxy-tpl
@@ -14,7 +14,7 @@ user=$1
 domain=$2
 domain_idn=$2
 template=$3
-default_extentions="jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2,xml"
+default_extentions="jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2"
 extentions=${4-$default_extentions}
 restart="$5"
 

From 1bdd8dd6b140bb7b5b8bdcaa091bd84d3a56ad4c Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 31 Dec 2019 17:35:53 +0100
Subject: [PATCH 0783/2300] Allow mail symlink to HDD

---
 bin/v-add-mail-domain | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/bin/v-add-mail-domain b/bin/v-add-mail-domain
index 6681035f..7c9dbc36 100755
--- a/bin/v-add-mail-domain
+++ b/bin/v-add-mail-domain
@@ -45,7 +45,16 @@ is_object_valid 'user' 'USER' "$user"
 is_object_unsuspended 'user' 'USER' "$user"
 is_domain_new 'mail' "$domain"
 is_package_full 'MAIL_DOMAINS'
-is_dir_symlink $HOMEDIR/$user/mail
+# Allow mail symlink to HDD
+check_symlink=1
+symlink=$(readlink $HOMEDIR/$user/mail)
+if [ "$symlink" = "/hdd/home/$user/mail" ]; then
+    check_symlink=0
+fi
+
+if [ $check_symlink -eq 1 ]; then
+    is_dir_symlink $HOMEDIR/$user/mail
+fi
 
 
 #----------------------------------------------------------#

From b4da32ef5463b1a1150c4dcaf4b5ba2de9965a99 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 2 Jan 2020 18:48:19 +0100
Subject: [PATCH 0784/2300] Turning off MariaDB SQL strict mode

---
 install/debian/10/mysql/my-small.cnf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/debian/10/mysql/my-small.cnf b/install/debian/10/mysql/my-small.cnf
index 26a80478..bd53770b 100644
--- a/install/debian/10/mysql/my-small.cnf
+++ b/install/debian/10/mysql/my-small.cnf
@@ -37,4 +37,6 @@ wait_timeout=10
 interactive_timeout=50
 long_query_time=5
 
+sql_mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+
 !includedir /etc/mysql/conf.d/

From 70d699c5aaf7fe751ceaebc440182fc300b44f69 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 2 Jan 2020 18:49:15 +0100
Subject: [PATCH 0785/2300] Turning off MariaDB SQL strict mode

---
 install/debian/10/mysql/my-medium.cnf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/debian/10/mysql/my-medium.cnf b/install/debian/10/mysql/my-medium.cnf
index 1c10ab9a..3aa8fe22 100644
--- a/install/debian/10/mysql/my-medium.cnf
+++ b/install/debian/10/mysql/my-medium.cnf
@@ -37,4 +37,6 @@ wait_timeout=10
 interactive_timeout=50
 long_query_time=5
 
+sql_mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+
 !includedir /etc/mysql/conf.d/

From 515ceb2160cada9ae770a7be280088ea259089b8 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 2 Jan 2020 18:54:59 +0100
Subject: [PATCH 0786/2300] Turning off MariaDB SQL strict mode

---
 install/debian/10/mysql/my-large.cnf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/debian/10/mysql/my-large.cnf b/install/debian/10/mysql/my-large.cnf
index d0bab390..febfda66 100644
--- a/install/debian/10/mysql/my-large.cnf
+++ b/install/debian/10/mysql/my-large.cnf
@@ -39,4 +39,6 @@ wait_timeout=10
 interactive_timeout=50
 long_query_time=5
 
+sql_mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+
 !includedir /etc/mysql/conf.d/

From 3ab4bcf6e8bbdf29b9bfc063d9a7fcc849bb9037 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 4 Jan 2020 14:04:00 +0100
Subject: [PATCH 0787/2300] Create install-softaculous.sh

---
 .../for-download/tools/install-softaculous.sh | 29 +++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 src/deb/for-download/tools/install-softaculous.sh

diff --git a/src/deb/for-download/tools/install-softaculous.sh b/src/deb/for-download/tools/install-softaculous.sh
new file mode 100644
index 00000000..23e2c728
--- /dev/null
+++ b/src/deb/for-download/tools/install-softaculous.sh
@@ -0,0 +1,29 @@
+#!/bin/bash
+
+if [ -f "/usr/local/vesta/web/inc/login_url.php" ]; then
+    mv /usr/local/vesta/web/inc/login_url.php /usr/local/vesta/web/inc/login_url.php-bak
+fi
+
+source /etc/profile
+PATH=$PATH:/usr/local/vesta/bin && export PATH
+
+sed -i '/SOFTACULOUS/d' /usr/local/vesta/conf/vesta.conf
+
+rm -rf /var/softaculous/
+rm -rf /usr/local/vesta/softaculous/
+rm -rf /usr/local/vesta/web/softaculous/
+
+apt update
+
+apt install --reinstall vesta-php
+
+apt install --reinstall vesta-ioncube vesta-softaculous
+
+service vesta stop
+service vesta start
+
+/usr/local/vesta/bin/v-add-vesta-softaculous
+
+if [ -f "/usr/local/vesta/web/inc/login_url.php-bak" ]; then
+    mv /usr/local/vesta/web/inc/login_url.php-bak /usr/local/vesta/web/inc/login_url.php
+fi

From 2dc2fe5682b5155237203225f697e6b2958651a1 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 4 Jan 2020 14:35:10 +0100
Subject: [PATCH 0788/2300] Update install-softaculous.sh

---
 src/deb/for-download/tools/install-softaculous.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/deb/for-download/tools/install-softaculous.sh b/src/deb/for-download/tools/install-softaculous.sh
index 23e2c728..ba586930 100644
--- a/src/deb/for-download/tools/install-softaculous.sh
+++ b/src/deb/for-download/tools/install-softaculous.sh
@@ -27,3 +27,8 @@ service vesta start
 if [ -f "/usr/local/vesta/web/inc/login_url.php-bak" ]; then
     mv /usr/local/vesta/web/inc/login_url.php-bak /usr/local/vesta/web/inc/login_url.php
 fi
+
+echo "=== Softaculous installation done ==="
+echo "Wait for about 5 minutes so softaculous-cron download all packages."
+echo "You can check if it is still downloading packages by running command:"
+echo 'ps -Af | grep "cron.php"  | grep -v "grep"'

From 71e59e50097fc87838017ab67798d6bf92b02bf0 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 4 Jan 2020 14:59:20 +0100
Subject: [PATCH 0789/2300] Update postinst

---
 src/deb/nginx/postinst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/deb/nginx/postinst b/src/deb/nginx/postinst
index 82b7c290..cd330afb 100755
--- a/src/deb/nginx/postinst
+++ b/src/deb/nginx/postinst
@@ -9,3 +9,6 @@ fi
 # Touch and set permisions on default log files on installation
 update-rc.d vesta defaults >/dev/null
 invoke-rc.d vesta start || true
+
+service vesta stop
+service vesta start

From 96f7a4f480ffb0361ff22966c72711e39f56453f Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 4 Jan 2020 15:06:06 +0100
Subject: [PATCH 0790/2300] Update postinst

---
 src/deb/nginx/postinst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/nginx/postinst b/src/deb/nginx/postinst
index cd330afb..8563d2aa 100755
--- a/src/deb/nginx/postinst
+++ b/src/deb/nginx/postinst
@@ -10,5 +10,6 @@ fi
 update-rc.d vesta defaults >/dev/null
 invoke-rc.d vesta start || true
 
+echo "=== Restarting vesta ==="
 service vesta stop
 service vesta start

From 1a71d90e9a7ac40498ffc4df221ed65bb9485598 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 4 Jan 2020 15:17:45 +0100
Subject: [PATCH 0791/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 3ee3c74f..8dd05711 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -9,10 +9,10 @@ add_deb_to_apt_repo=0
 
 TARGET_DEB_NAME='buster'
 TARGET_DEB_VER='10'
-VESTA_VER='0.9.8-25'
+VESTA_VER='0.9.8-26-4'
 
 run_apt_update_and_install=1
-wait_to_press_enter=1
+wait_to_press_enter=0
 
 ###############
 # Note: first run --apt before turning add_deb_to_apt_repo=1
@@ -30,7 +30,7 @@ if [ $# -gt 4 ]; then
     add_deb_to_apt_repo=$5
 fi
 
-MAINTAINER_EMAIL='predrag@myvestacp.com'
+MAINTAINER_EMAIL='predrag@hostingpanel.dev'
 
 TARGET_DEB_NAME_MAIN='buster'
 TARGET_DEB_VER_MAIN='10'
@@ -53,8 +53,8 @@ PATH_OF_APT_REPO="$PATH_OF_APT_REPO_ROOT/$TARGET_DEB_NAME"
 
 # Set Version for compiling
 VESTA_V=$VESTA_VER"_amd64"
-NGINX_V='1.17.3'
-OPENSSL_V='1.1.1c'
+NGINX_V='1.17.7'
+OPENSSL_V='1.1.1d'
 PCRE_V='8.43'
 ZLIB_V='1.2.11'
 PHP_V='5.6.40'
@@ -420,7 +420,7 @@ if [ "$PHP_B" = true ]; then
     
     BUILDING_NOW=0
     # Check if target directory exist
-    if [ ! -d "$BUILD_DIR/php-$PHP_V" ] || [ ! -d "$INSTALL_DIR/nginx" ]; then
+    if [ ! -d "$BUILD_DIR/php-$PHP_V" ]; then
       BUILDING_NOW=1
       
       echo "=== Download and unpack source files"
@@ -430,7 +430,7 @@ if [ "$PHP_B" = true ]; then
       echo "=== Change to php directory php-$PHP_V"
       cd php-$PHP_V
       
-      press_enter "=== Press enter to continue ==============================================================================="
+      press_enter "=== Press enter to configure PHP ==============================================================================="
       
       echo "=== Configure PHP"
       ./configure --prefix=$INSTALL_DIR/php \
@@ -441,14 +441,15 @@ if [ "$PHP_B" = true ]; then
                   --with-mysql \
                   --with-mysqli \
                   --with-curl \
-                  --enable-mbstring
+                  --enable-mbstring \
+				  --with-mysql-sock=/var/run/mysqld/mysqld.sock
       
       # Check install directory and remove if exists
       if [ -d $INSTALL_DIR/php ]; then
           rm -rf $INSTALL_DIR/php
       fi
     
-      press_enter "=== Press enter to create the files and install them ==============================================================================="
+      press_enter "=== Press enter to compile PHP ==============================================================================="
       
       make && make install
       

From 430cdd41ff41220c1c048e578eb15c2118fa792d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 4 Jan 2020 15:19:49 +0100
Subject: [PATCH 0792/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 8dd05711..1140f1a6 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -12,7 +12,7 @@ TARGET_DEB_VER='10'
 VESTA_VER='0.9.8-26-4'
 
 run_apt_update_and_install=1
-wait_to_press_enter=0
+wait_to_press_enter=1
 
 ###############
 # Note: first run --apt before turning add_deb_to_apt_repo=1
@@ -30,7 +30,7 @@ if [ $# -gt 4 ]; then
     add_deb_to_apt_repo=$5
 fi
 
-MAINTAINER_EMAIL='predrag@hostingpanel.dev'
+MAINTAINER_EMAIL='predrag@myvestacp.com'
 
 TARGET_DEB_NAME_MAIN='buster'
 TARGET_DEB_VER_MAIN='10'

From 2106a46d62e81ca54ddc822590b687cf6c9dd851 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 4 Jan 2020 21:30:54 +0100
Subject: [PATCH 0793/2300] Update postinst

---
 src/deb/nginx/postinst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/deb/nginx/postinst b/src/deb/nginx/postinst
index 8563d2aa..a5733266 100755
--- a/src/deb/nginx/postinst
+++ b/src/deb/nginx/postinst
@@ -10,6 +10,11 @@ fi
 update-rc.d vesta defaults >/dev/null
 invoke-rc.d vesta start || true
 
+# Run triggers only on updates
+if [ ! -e "/usr/local/vesta/data/users/admin" ]; then
+    exit
+fi
+
 echo "=== Restarting vesta ==="
 service vesta stop
 service vesta start

From 436669607e0979f396348c63784d3384b24b145a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 5 Jan 2020 15:54:54 +0100
Subject: [PATCH 0794/2300] Allow softaculous in secure_login

---
 web/inc/secure_login.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 7ab32ae0..0b0b2993 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -12,6 +12,9 @@ if (substr($_SERVER['SCRIPT_FILENAME'], 0, 28)=='/usr/local/vesta/web/custom/')
 if (substr($_SERVER['SCRIPT_FILENAME'], 0, 29)=='/usr/local/vesta/web//custom/') $login_url_skip=1;
 
 if (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/vesta/bin/') $skip_login_url_check=1; // allow executing v-* PHP scripts from bash
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 29)=='/usr/local/vesta/softaculous/') $skip_login_url_check=1; // allow softaculous
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 33)=='/usr/local/vesta/web/softaculous/') $skip_login_url_check=1; // allow softaculous
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 34)=='/usr/local/vesta/web//softaculous/') $skip_login_url_check=1; // allow softaculous
 
 if ($skip_login_url_check==0) {
     if (!isset($login_url_loaded)) {

From 3dd6c186fc73a486a75929f4c17ba0a3a3ba4e47 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 7 Jan 2020 15:33:58 +0100
Subject: [PATCH 0795/2300] apparmor install fix

---
 install/vst-install-debian.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index f9d43752..fae75490 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1140,10 +1140,10 @@ if [ "$named" = 'yes' ]; then
       # echo "/home/** rwm," >> /etc/apparmor.d/local/usr.sbin.named 2>/dev/null
       sed -i "s#/etc/bind/\*\* rw,#/etc/bind/\*\* rw,\n  /home/\*\* rwm,#g" /etc/apparmor.d/usr.sbin.named
       sed -i "s#/etc/bind/\*\* r,#/etc/bind/\*\* rw,\n  /home/\*\* rwm,#g" /etc/apparmor.d/usr.sbin.named
-      service apparmor status >/dev/null 2>&1
-      if [ $? -ne 0 ]; then
+      # service apparmor status >/dev/null 2>&1
+      # if [ $? -ne 0 ]; then
           service apparmor restart
-      fi
+      # fi
     fi
     update-rc.d bind9 defaults
     service bind9 start

From f4b64b4b4ea635e2f1b02203e2cf99ca2e3ba592 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 7 Jan 2020 23:26:03 +0100
Subject: [PATCH 0796/2300] Allow whitelisting specific IP to avoid secret_url

---
 web/inc/secure_login.php | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 0b0b2993..a13b5570 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -4,6 +4,9 @@ $skip_login_url_check=0;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/index.php') $skip_login_url_check=1; // it's accessible only from localhost
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/index.php') $skip_login_url_check=1;
 
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/api/index.php') $skip_login_url_check=1; // api has its own security check
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//api/index.php') $skip_login_url_check=1;
+
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/set-ar.php') $skip_login_url_check=1; // commercial addon for changing auto-reply from Roundcube, not included in this fork, also accessible only from localhost
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/set-ar.php') $skip_login_url_check=1;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/get-ar.php') $skip_login_url_check=1;
@@ -16,6 +19,16 @@ if (substr($_SERVER['SCRIPT_FILENAME'], 0, 29)=='/usr/local/vesta/softaculous/')
 if (substr($_SERVER['SCRIPT_FILENAME'], 0, 33)=='/usr/local/vesta/web/softaculous/') $skip_login_url_check=1; // allow softaculous
 if (substr($_SERVER['SCRIPT_FILENAME'], 0, 34)=='/usr/local/vesta/web//softaculous/') $skip_login_url_check=1; // allow softaculous
 
+$check_file="/usr/local/vesta/conf_web/allow_ip_for_secret_url.conf";
+if (file_exists($check_file)) {
+    $file_content=file($check_file);
+    if (is_array($file_content)) {
+        foreach ($file_content as $line) {
+            if (trim($line) == $_SERVER['REMOTE_ADDR']) {$skip_login_url_check=1; break;}
+        }
+    }
+}
+
 if ($skip_login_url_check==0) {
     if (!isset($login_url_loaded)) {
         $login_url_loaded=1;

From b40ebe07e2a6304e9c0435cd6002fda553df36fb Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 7 Jan 2020 23:43:14 +0100
Subject: [PATCH 0797/2300] Allow whitelisting specific IP for /api/

---
 web/api/index.php | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/web/api/index.php b/web/api/index.php
index d8a5b910..08f51fc9 100644
--- a/web/api/index.php
+++ b/web/api/index.php
@@ -1,6 +1,18 @@
 <?php
 define('VESTA_CMD', '/usr/bin/sudo /usr/local/vesta/bin/');
-exit;
+
+$allowed_host=0;
+$check_file="/usr/local/vesta/conf_web/allow_ip_for_api.conf";
+if (file_exists($check_file)) {
+    $file_content=file($check_file);
+    if (is_array($file_content)) {
+        foreach ($file_content as $line) {
+            if (trim($line) == $_SERVER['REMOTE_ADDR']) {$allowed_host=1; break;}
+        }
+    }
+}
+if ($allowed_host == 0) exit;
+
 if (isset($_POST['user']) || isset($_POST['hash'])) {
 
     // Authentication

From 5ec8cc2f55a82106775b611392c1d2a5e070ba28 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 7 Jan 2020 23:44:22 +0100
Subject: [PATCH 0798/2300] version up

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 0ac75b61..1edb2e24 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-3
+vesta-0.9.8-26-4

From 6d34e2b1b054c01d87f21118f22aa7301dd7423c Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 7 Jan 2020 23:45:14 +0100
Subject: [PATCH 0799/2300] Version up

---
 src/deb/vesta/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index f2dfd9ce..75720ec5 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-26-3
+Version: 0.9.8-26-4
 Section: admin
 Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
 Homepage: http://myvestacp.com

From 99abd5ed05547a306670bdb332918ab199ced53a Mon Sep 17 00:00:00 2001
From: Josh Marshall <josh@sanchia.com.au>
Date: Thu, 9 Jan 2020 00:52:10 +1000
Subject: [PATCH 0800/2300] Bugfix deleting a PostgreSQL database

Was just a typo
---
 func/db.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/db.sh b/func/db.sh
index 30018065..b0ff73b9 100644
--- a/func/db.sh
+++ b/func/db.sh
@@ -322,7 +322,7 @@ delete_pgsql_database() {
     psql_connect $HOST
 
     query="REVOKE ALL PRIVILEGES ON DATABASE $database FROM $DBUSER"
-    psql_qyery "$query" > /dev/null
+    psql_query "$query" > /dev/null
 
     query="DROP DATABASE $database"
     psql_query "$query" > /dev/null

From 8244e94be889410c63a7ee789db1d9ca7fec1867 Mon Sep 17 00:00:00 2001
From: flackjap <nenad.default@gmail.com>
Date: Sat, 11 Jan 2020 17:56:12 +0100
Subject: [PATCH 0801/2300] Update README.md

Syntax and grammar improvements.
---
 README.md | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/README.md b/README.md
index fb5dfd27..3cb49b49 100644
--- a/README.md
+++ b/README.md
@@ -3,28 +3,28 @@ MyVesta Control Panel
 
 * MyVesta is a fork of VestaCP
 * Focused on security and stability
-* Therefore, only Debian is supported - keeping focus on ONE eco-system - not wasting energy on compatibility with other Linux distributions
-* It will always be synchronized with official VestaCP commits
+* Therefore, only Debian is supported - keeping focus on only one eco-system - not wasting energy on compatibility with other Linux distributions
+* However, it will be always synchronized with official VestaCP commits
 * VestaCP commercial plugins will be only available for purchase on official vestacp.com website - we will NOT take their earnings, since we are not making this fork for monetary reasons. Instead, we are doing this with open source in mind - to enhance security and to build new features, without being interlocked with official VestaCP release cycles, and without affecting or heavily diverting from the VestaCP's planned development milestones
-* With previous in mind, all features that are added in this fork, will be offered to official VestaCP through pull-request mechanisms
+* With previous in mind, all features that are built for this fork (MyVesta), will be offered to official VestaCP, via pull requests
 
 Features
 ==================================================
 
 + Support for Debian 10 (previous releases are also supported)
 
-+ You can totally "lock" VestaCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
-    + During installation you will be asked to choose secret URL for your hosting panel
-    + Literally no PHP scripts will be alive on hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - hacker will not be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless he has the secret URL.
-    + You can see for yourself how mechanism was built by looking at:
++ You can completely "lock" VestaCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
+    + During installation you will be asked to choose a secret URL for your hosting panel
+    + Literally no PHP scripts will be alive on your hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - attackers won't be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless they have the secret URL.
+    + You can see for yourself how this mechanism was built by looking at:
       + https://github.com/myvesta/vesta/blob/master/src/deb/for-download/php/php.ini#L496
       + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php
-    + If you didn't set secret URL during installation, you can do it anytime, just execute in SSH:
+    + If you didn't set the secret URL during installation, you can do it anytime. Just execute in shell:
     + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
 
-+ We disabled dangerous PHP functions in php.ini, so even if, for example, customer's CMS gets compromised, hacker will not be able to execute "shell" from PHP.
++ We disabled dangerous PHP functions in php.ini, so even if, for example, your customer's CMS gets compromised, hacker will not be able to execute shell scripts from within PHP.
 
-+ Apache is fully switched to mpm_event mode, while PHP is running in PHP-FPM, which is the most stable PHP-stack solution
++ Apache is fully switched to mpm_event mode, while PHP is running in PHP-FPM mode, which is the most stable PHP-stack solution
     + OPCache is turned on by default
 
 + Support for multi-PHP versions - https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh
@@ -33,13 +33,13 @@ Features
 
 + You can change Vesta port during installation or later using one command line: **v-change-vesta-port [number]**
 
-+ You can limit maximum number of sent emails (per hour) per mail account and per hosting account.
++ You can limit the maximum number of sent emails (per hour) per mail account and per hosting account.
 
 + You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
-    + You can even create your own APT repositorium in a minute
+    + You can even create your own APT repository in a minute
     + We are using latest nginx version for vesta-nginx package
     + With your own APT infrastructure you can take security of Vesta-installer infrastructure in your own hands. You will have full control of your Vesta code (this way you can rest assured that there's 0% chance that you'll install malicious packages from repositories that may get hacked)
-    + Binaries that you compile is 100% compatible with official VestaCP from vestacp.com, so you can run official VestaCP code with your own binaries (in case you don't want source code from this fork)
+    + Binaries that you compile are 100% compatible with official VestaCP from vestacp.com, so you can run official VestaCP code with your own binaries (in case you don't want the source code from this fork)
 
 How to install
 ----------------------------
@@ -56,7 +56,7 @@ About VestaCP
 ==================================================
 
 * Vesta is an open source hosting control panel.
-* Vesta has a clean and focused interface without the clutter.
+* Vesta has a clean and focused interface without clutter.
 * Vesta has the latest of very innovative technologies.
 
 Special thanks to vestacp.com and Serghey Rodin for open-source VestaCP project

From 373feb37cd895ae38ad054162965b2976caa8d06 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 11 Jan 2020 17:58:25 +0100
Subject: [PATCH 0802/2300] Note about secret URL

---
 install/vst-install-debian.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index fae75490..04475e5a 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -424,7 +424,9 @@ if [ "$interactive" = 'yes' ]; then
 
     # Asking for secret URL
     if [ -z "$secret_url" ]; then
-        read -p 'Please enter secret URL address for hosting panel (press enter for none): ' secret_url
+        echo 'Please enter secret URL address for hosting panel (or press enter for none).'
+        echo 'Secret URL must be without special characters, just letters and numbers. Example: mysecret8205'
+        read -p 'Enter secret URL address:' secret_url
     fi
 
     # Asking for Vesta port

From 86ce76cbae01c293133d44bc4fe367119c7d58d8 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 11 Jan 2020 17:59:28 +0100
Subject: [PATCH 0803/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 04475e5a..2567e67d 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -426,7 +426,7 @@ if [ "$interactive" = 'yes' ]; then
     if [ -z "$secret_url" ]; then
         echo 'Please enter secret URL address for hosting panel (or press enter for none).'
         echo 'Secret URL must be without special characters, just letters and numbers. Example: mysecret8205'
-        read -p 'Enter secret URL address:' secret_url
+        read -p 'Enter secret URL address: ' secret_url
     fi
 
     # Asking for Vesta port

From e8f52886b014505e8323219b17d4f23e7877873f Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 11 Jan 2020 19:00:57 +0100
Subject: [PATCH 0804/2300] mkdir -p /var/lib/clamav in installer

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 2567e67d..b7374390 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1210,6 +1210,7 @@ if [ "$clamd" = 'yes' ]; then
     gpasswd -a clamav mail
     gpasswd -a clamav Debian-exim
     cp -f $vestacp/clamav/clamd.conf /etc/clamav/
+    mkdir -p /var/lib/clamav
     touch /var/lib/clamav/clamd.sock
     chown clamav:clamav /var/lib/clamav/clamd.sock
     /usr/bin/freshclam

From a607cf9ccd4c5f1b048884372d4e2c47f0d35c53 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 19 Jan 2020 17:55:08 +0100
Subject: [PATCH 0805/2300] v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 267 +++++++++++++++++++++
 1 file changed, 267 insertions(+)
 create mode 100644 src/deb/for-download/tools/v-clone-website

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
new file mode 100644
index 00000000..b5bb6015
--- /dev/null
+++ b/src/deb/for-download/tools/v-clone-website
@@ -0,0 +1,267 @@
+#!/bin/bash
+
+# Migration tool that will copy whole site from one domain to another (sub)domain (on the same server), changing URL in database (it's careful with serialized arrays in database).
+# Useful for making staging copy in one command-line.
+# Automatic detection of WordPress, automaticaly read DB user, DB name, DB pass, automatic cloning to new database, automatic changing wp-config.php file.
+
+if [ $# -lt 2 ]; then
+    echo "USAGE: v-clone-website FROM_DOMAIN TO_DOMAIN [FROM_DATABASE_NAME] [FROM_DATABASE_USERNAME] [FROM_DATABASE_PASSWORD] [FROM_CONFIG_FILE] [TO_USER] [TO_DATABASE_NAME] [TO_DATABASE_USERNAME] [TO_DATABASE_PASSWORD]"
+    exit 1
+fi
+
+FROM_DOMAIN=''
+TO_DOMAIN=''
+FROM_DATABASE_NAME=''
+FROM_DATABASE_USERNAME=''
+FROM_DATABASE_PASSWORD=''
+FROM_CONFIG_FILE=''
+TO_DATABASE_NAME=''
+TO_DATABASE_USERNAME=''
+TO_DATABASE_PASSWORD=''
+
+if [ -z "$VESTA" ]; then
+    VESTA="/usr/local/vesta"
+fi
+
+if [ ! -f "/root/Search-Replace-DB-master/srdb.cli.php" ]; then
+    echo "Please download https://interconnectit.com/products/search-and-replace-for-wordpress-databases/ and extract to /root/Search-Replace-DB-master/"
+    exit 11
+fi
+if [ ! -f "/usr/bin/php7.0" ]; then
+    echo "Please download https://c.myvestacp.com/tools/multi-php-install.sh and install php 7.0"
+    exit 12
+fi
+
+FROM_DOMAIN=$1
+FROM_USER=$($VESTA/bin/v-search-domain-owner "$FROM_DOMAIN")
+if [ -z "$FROM_USER" ]; then
+    echo "Error: domain $FROM_DOMAIN does not exists"
+    exit 2
+fi
+
+if [ -z "$2" ]; then
+    echo "Error: TO_DOMAIN is empty"
+    exit 2
+fi
+
+FROM_FOLDER="/home/$FROM_USER/web/$FROM_DOMAIN/public_html"
+CHECK_PUBLIC_SHTML=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'SSL:' | grep -c 'single')
+if [ $CHECK_PUBLIC_SHTML -eq 1 ]; then
+    FROM_FOLDER="/home/$FROM_USER/web/$FROM_DOMAIN/public_shtml"
+fi
+
+
+if [ $# -ge 6 ]; then
+    FROM_CONFIG_FILE="$6"
+    FROM_CONFIG_FILE_FULL_PATH="$FROM_FOLDER/$6"
+fi
+if [ -z "$FROM_CONFIG_FILE" ]; then
+    FROM_CONFIG_FILE="wp-config.php"
+    FROM_CONFIG_FILE_FULL_PATH="$FROM_FOLDER/$FROM_CONFIG_FILE"
+fi
+if [ ! -f "$FROM_CONFIG_FILE_FULL_PATH" ]; then
+    echo "Error: FROM_CONFIG_FILE_FULL_PATH $FROM_CONFIG_FILE_FULL_PATH does not exists"
+    exit 3
+fi
+
+if [ -f "$FROM_CONFIG_FILE_FULL_PATH" ]; then
+    FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    FROM_DATABASE_USERNAME=$(grep 'DB_USER' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    FROM_DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+fi
+if [ $# -ge 3 ]; then
+    if [ ! -z "$3" ]; then
+        FROM_DATABASE_NAME=$3
+    fi
+fi
+if [ $# -ge 4 ]; then
+    if [ ! -z "$4" ]; then
+        FROM_DATABASE_USERNAME=$4
+    fi
+fi
+if [ $# -ge 5 ]; then
+    if [ ! -z "$5" ]; then
+        FROM_DATABASE_PASSWORD=$5
+    fi
+fi
+if [ -z "$FROM_DATABASE_NAME" ]; then
+    echo "Error: FROM_DATABASE_NAME $FROM_DATABASE_NAME is empty"
+    exit 4
+fi
+if [ -z "$FROM_DATABASE_USERNAME" ]; then
+    echo "Error: FROM_DATABASE_USERNAME $FROM_DATABASE_USERNAME is empty"
+    exit 5
+fi
+if [ -z "$FROM_DATABASE_PASSWORD" ]; then
+    echo "Error: FROM_DATABASE_PASSWORD $FROM_DATABASE_PASSWORD is empty"
+    exit 6
+fi
+
+FROM_USER_LEN=${#FROM_USER}
+FROM_USER_LEN=$((FROM_USER_LEN+1))
+
+object=$(grep "DB='$FROM_DATABASE_NAME'" $VESTA/data/users/$FROM_USER/db.conf)
+if [ -z "$object" ]; then
+    echo "Error: database $FROM_DATABASE_NAME does not exists"
+    exit 7
+fi
+
+FROM_DATABASE_NAME_WITHOUT_PREFIX=${FROM_DATABASE_NAME:FROM_USER_LEN}
+FROM_DATABASE_USERNAME_WITHOUT_PREFIX=${FROM_DATABASE_USERNAME:FROM_USER_LEN}
+
+
+# ----------- TO -------------
+
+
+TO_DOMAIN=$2
+TO_USER=$($VESTA/bin/v-search-domain-owner "$TO_DOMAIN")
+CREATE_TO_DOMAIN=0
+if [ -z "$TO_USER" ]; then
+    TO_USER=$FROM_USER
+    CREATE_TO_DOMAIN=1
+fi
+
+TO_FOLDER="/home/$TO_USER/web/$TO_DOMAIN/public_html"
+CHECK_PUBLIC_SHTML=$($VESTA/bin/v-list-web-domain "$TO_USER" "$TO_DOMAIN" | grep 'SSL:' | grep -c 'single')
+if [ $CHECK_PUBLIC_SHTML -eq 1 ]; then
+    TO_FOLDER="/home/$TO_USER/web/$TO_DOMAIN/public_shtml"
+fi
+
+TO_CONFIG_FILE_FULL_PATH="$TO_FOLDER/$FROM_CONFIG_FILE"
+
+if [ $# -ge 7 ]; then
+    if [ ! -z "$7" ]; then
+        TO_DATABASE_NAME=$7
+    fi
+fi
+if [ $# -ge 8 ]; then
+    if [ ! -z "$8" ]; then
+        TO_DATABASE_USERNAME=$8
+    fi
+fi
+if [ $# -ge 9 ]; then
+    if [ ! -z "$9" ]; then
+        TO_DATABASE_PASSWORD=$9
+    fi
+fi
+
+if [ -z "$TO_DATABASE_NAME" ]; then
+    LENGTH_OF_TO_DATABASE_NAME=${#FROM_DATABASE_NAME}
+    START_FROM=$((LENGTH_OF_TO_DATABASE_NAME-9))
+    CHECK_PREFIX=${FROM_DATABASE_NAME:START_FROM}
+    if [ "$CHECK_PREFIX" = "_migrated" ]; then
+        TO_DATABASE_NAME="${TO_USER}_${FROM_DATABASE_NAME_WITHOUT_PREFIX}"
+        LENGTH_OF_TO_DATABASE_NAME=${#TO_DATABASE_NAME}
+        CUT_TO=$((LENGTH_OF_TO_DATABASE_NAME-9))
+        TO_DATABASE_NAME=${TO_DATABASE_NAME:0:CUT_TO}
+    else
+        TO_DATABASE_NAME="${TO_USER}_${FROM_DATABASE_NAME_WITHOUT_PREFIX}_migrated"
+    fi
+fi
+if [ -z "$TO_DATABASE_USERNAME" ]; then
+    LENGTH_OF_TO_DATABASE_USERNAME=${#FROM_DATABASE_USERNAME}
+    START_FROM=$((LENGTH_OF_TO_DATABASE_USERNAME-9))
+    CHECK_PREFIX=${FROM_DATABASE_USERNAME:START_FROM}
+    if [ "$CHECK_PREFIX" = "_migrated" ]; then
+        TO_DATABASE_USERNAME="${TO_USER}_${FROM_DATABASE_USERNAME_WITHOUT_PREFIX}"
+        LENGTH_OF_TO_DATABASE_USERNAME=${#TO_DATABASE_USERNAME}
+        CUT_TO=$((LENGTH_OF_TO_DATABASE_USERNAME-9))
+        TO_DATABASE_USERNAME=${TO_DATABASE_USERNAME:0:CUT_TO}
+    else
+        TO_DATABASE_USERNAME="${TO_USER}_${FROM_DATABASE_USERNAME_WITHOUT_PREFIX}_migrated"
+    fi
+fi
+if [ -z "$TO_DATABASE_PASSWORD" ]; then
+    TO_DATABASE_PASSWORD=$FROM_DATABASE_PASSWORD
+fi
+if [ -z "$TO_DATABASE_NAME" ]; then
+    echo "Error: TO_DATABASE_NAME $TO_DATABASE_NAME is empty"
+    exit 8
+fi
+if [ -z "$TO_DATABASE_USERNAME" ]; then
+    echo "Error: TO_DATABASE_USERNAME $TO_DATABASE_USERNAME is empty"
+    exit 9
+fi
+if [ -z "$TO_DATABASE_PASSWORD" ]; then
+    echo "Error: TO_DATABASE_PASSWORD $TO_DATABASE_PASSWORD is empty"
+    exit 10
+fi
+
+TO_USER_LEN=${#TO_USER}
+TO_USER_LEN=$((TO_USER_LEN+1))
+
+TO_DATABASE_NAME_WITHOUT_PREFIX=${TO_DATABASE_NAME:TO_USER_LEN}
+TO_DATABASE_USERNAME_WITHOUT_PREFIX=${TO_DATABASE_USERNAME:TO_USER_LEN}
+
+
+# ----------- PRINT -------------
+
+
+echo "==============================================================================="
+echo "FROM_DOMAIN = $FROM_DOMAIN"
+echo "FROM_USER = $FROM_USER"
+echo "TO_DOMAIN = $TO_DOMAIN"
+echo "TO_USER = $TO_USER"
+echo "FROM_FOLDER = $FROM_FOLDER"
+echo "TO_FOLDER = $TO_FOLDER"
+echo "FROM_DATABASE_NAME = $FROM_DATABASE_NAME"
+echo "FROM_DATABASE_USERNAME = $FROM_DATABASE_USERNAME"
+echo "FROM_DATABASE_PASSWORD = $FROM_DATABASE_PASSWORD"
+echo "FROM_DATABASE_NAME_WITHOUT_PREFIX = $FROM_DATABASE_NAME_WITHOUT_PREFIX"
+echo "FROM_DATABASE_USERNAME_WITHOUT_PREFIX = $FROM_DATABASE_USERNAME_WITHOUT_PREFIX"
+echo "FROM_CONFIG_FILE_FULL_PATH = $FROM_CONFIG_FILE_FULL_PATH"
+echo "TO_CONFIG_FILE_FULL_PATH = $TO_CONFIG_FILE_FULL_PATH"
+echo "TO_DATABASE_NAME = $TO_DATABASE_NAME"
+echo "TO_DATABASE_USERNAME = $TO_DATABASE_USERNAME"
+echo "TO_DATABASE_PASSWORD = $TO_DATABASE_PASSWORD"
+echo "TO_DATABASE_NAME_WITHOUT_PREFIX = $TO_DATABASE_NAME_WITHOUT_PREFIX"
+echo "TO_DATABASE_USERNAME_WITHOUT_PREFIX = $TO_DATABASE_USERNAME_WITHOUT_PREFIX"
+echo "==============================================================================="
+read -p "=== Press Enter to continue ==="
+
+
+# ----------- ACTION -------------
+
+if [ $CREATE_TO_DOMAIN -eq 1 ]; then
+    echo "=== Create domain $TO_DOMAIN"
+    $VESTA/bin/v-add-domain "$TO_USER" "$TO_DOMAIN"
+    rm $TO_FOLDER/index.html
+fi
+
+
+object=$(grep "DB='$TO_DATABASE_NAME'" $VESTA/data/users/$TO_USER/db.conf)
+if [ -z "$object" ]; then
+    echo "=== Create database $TO_DATABASE_NAME"
+    $VESTA/bin/v-add-database "$TO_USER" "$TO_DATABASE_NAME_WITHOUT_PREFIX" "$TO_DATABASE_USERNAME_WITHOUT_PREFIX" "$TO_DATABASE_PASSWORD" 'mysql' 'localhost' 'utf8'
+fi
+
+echo "=== Dumping database $FROM_DATABASE_NAME"
+if [ -d "/root/temp" ]; then
+    rm -rf /root/temp
+fi
+mkdir -p /root/temp
+cd /root/temp
+mysqldump $FROM_DATABASE_NAME > $FROM_DATABASE_NAME.sql
+echo "=== Importing to database $TO_DATABASE_NAME"
+mysql $TO_DATABASE_NAME < $FROM_DATABASE_NAME.sql
+
+echo "=== Copying files from $FROM_FOLDER to folder $TO_FOLDER"
+rsync -a $FROM_FOLDER/ $TO_FOLDER/
+echo "=== Chowning to  $TO_USER:$TO_USER in folder $TO_FOLDER"
+chown -R $TO_USER:$TO_USER $TO_FOLDER
+
+echo "=== Replacing $FROM_DATABASE_NAME to $TO_DATABASE_NAME in $TO_CONFIG_FILE_FULL_PATH"
+sed -i "s|$FROM_DATABASE_NAME|$TO_DATABASE_NAME|g" $TO_CONFIG_FILE_FULL_PATH
+echo "=== Replacing $FROM_DATABASE_USERNAME to $TO_DATABASE_USERNAME in $TO_CONFIG_FILE_FULL_PATH"
+sed -i "s|$FROM_DATABASE_USERNAME|$TO_DATABASE_USERNAME|g" $TO_CONFIG_FILE_FULL_PATH
+echo "=== Replacing $FROM_DATABASE_PASSWORD to $TO_DATABASE_PASSWORD in $TO_CONFIG_FILE_FULL_PATH"
+sed -i "s|$FROM_DATABASE_PASSWORD|$TO_DATABASE_PASSWORD|g" $TO_CONFIG_FILE_FULL_PATH
+
+echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in folder $TO_FOLDER"
+grep -rl "$FROM_DOMAIN" $FROM_FOLDER | xargs sed -i "s#$FROM_DOMAIN#$TO_DOMAIN#g"
+
+echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
+php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "$FROM_DOMAIN" -r "$TO_DOMAIN"
+
+echo "===== DONE ===="
+echo "You can visit http://$TO_DOMAIN/"
\ No newline at end of file

From 180898fde8cd45ce1638edfb9db281ca4c03066d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 19 Jan 2020 22:57:37 +0100
Subject: [PATCH 0806/2300] create_wp

---
 src/deb/for-download/tools/create_wp_http  | 104 +++++++++++++++++++
 src/deb/for-download/tools/create_wp_https | 112 +++++++++++++++++++++
 2 files changed, 216 insertions(+)
 create mode 100644 src/deb/for-download/tools/create_wp_http
 create mode 100644 src/deb/for-download/tools/create_wp_https

diff --git a/src/deb/for-download/tools/create_wp_http b/src/deb/for-download/tools/create_wp_http
new file mode 100644
index 00000000..a3d69cf4
--- /dev/null
+++ b/src/deb/for-download/tools/create_wp_http
@@ -0,0 +1,104 @@
+#!/bin/bash
+
+if [ $# -lt 1 ]; then
+    echo usage: create_wp_http domain [db_name] [email]
+    exit 1
+fi
+
+domain=$1
+
+PATH=$PATH:/usr/local/vesta/bin
+export PATH
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+
+START_DB="wp";
+if [ $# -gt 1 ]; then
+    START_DB=$2
+fi
+
+email="info@$domain";
+if [ $# -gt 2 ]; then
+    email=$3
+fi
+
+if [ ! -d "/home/$user" ]; then
+    echo "User doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    echo "Domain doesn't exist";
+    exit 1;
+fi
+
+WORKINGDIR="/home/$user/web/$domain/public_html"
+# FILE=latest.tar.gz
+
+rm -rf $WORKINGDIR/*
+
+#DBUSERSUF=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 5 | head -n 1)
+DBUSERSUF="$START_DB";
+DBUSERSUFB="$START_DB";
+DBUSER=$user\_$DBUSERSUFB;
+DB_OK=0;
+if [ ! -d "/var/lib/mysql/$DBUSER" ]; then
+    DB_OK=1;
+fi
+
+if [ "$DB_OK" -eq "0" ]; then
+i=1;
+while [ $i -lt 99 ]
+do
+i=$((i+1));
+DBUSERSUF="${DBUSERSUFB}${i}";
+DBUSER=$user\_$DBUSERSUF;
+if [ ! -d "/var/lib/mysql/$DBUSER" ]; then
+break;
+fi
+done
+fi
+
+PASSWDDB=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1)
+
+v-add-database $user $DBUSERSUF $DBUSERSUF $PASSWDDB mysql
+
+cd /home/$user
+
+rm -rf /home/$user/wp
+curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
+chmod +x wp-cli.phar
+sudo mv wp-cli.phar wp
+
+cd /home/$user/web/$domain/public_html
+
+sudo -H -u$user /home/$user/wp core download
+sudo -H -u$user /home/$user/wp core config --dbname=$DBUSER --dbuser=$DBUSER --dbpass=$PASSWDDB
+
+password=$(LC_CTYPE=C tr -dc A-Za-z0-9_\!\@\#\$\%\^\&\*\(\)-+= < /dev/urandom | head -c 12)
+
+sudo -H -u$user /home/$user/wp core install --url="$domain" --title="$domain" --admin_user="admin" --admin_password="$password" --admin_email="$email" --path=$WORKINGDIR
+
+#FIX za https://github.com/wp-cli/wp-cli/issues/2632
+
+mysql -u$DBUSER -p$PASSWDDB -e "USE $DBUSER; update wp_options set option_value = 'http://$domain' where option_name = 'siteurl'; update wp_options set option_value = 'http://$domain' where option_name = 'home';"
+
+# clear
+
+echo "================================================================="
+echo "Installation is complete. Your username/password is listed below."
+echo ""
+echo "Site: http://$domain/"
+echo ""
+echo "Login: http://$domain/wp-admin/"
+echo "Username: admin"
+echo "Password: $password"
+echo ""
+echo "================================================================="
+
+chown -R $user:$user $WORKINGDIR
+
+rm -rf /home/$user/wp
+
+echo "create_wp: Done."
+exit 0
\ No newline at end of file
diff --git a/src/deb/for-download/tools/create_wp_https b/src/deb/for-download/tools/create_wp_https
new file mode 100644
index 00000000..d65902c6
--- /dev/null
+++ b/src/deb/for-download/tools/create_wp_https
@@ -0,0 +1,112 @@
+#!/bin/bash
+
+if [ $# -lt 1 ]; then
+    echo usage: create_wp_https domain [db_name] [email]
+    exit 1
+fi
+
+domain=$1
+
+PATH=$PATH:/usr/local/vesta/bin
+export PATH
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+
+START_DB="wp";
+if [ $# -gt 1 ]; then
+    START_DB=$2
+fi
+
+email="info@$domain";
+if [ $# -gt 2 ]; then
+    email=$3
+fi
+
+if [ ! -d "/home/$user" ]; then
+    echo "User doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    echo "Domain doesn't exist";
+    exit 1;
+fi
+
+if [ ! -f "/home/$user/conf/web/ssl.$domain.pem" ]; then
+    v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
+
+    if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
+        v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2,xml" "yes"
+    fi
+fi
+
+WORKINGDIR="/home/$user/web/$domain/public_html"
+# FILE=latest.tar.gz
+
+rm -rf $WORKINGDIR/*
+
+#DBUSERSUF=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 5 | head -n 1)
+DBUSERSUF="$START_DB";
+DBUSERSUFB="$START_DB";
+DBUSER=$user\_$DBUSERSUFB;
+DB_OK=0;
+if [ ! -d "/var/lib/mysql/$DBUSER" ]; then
+    DB_OK=1;
+fi
+
+if [ "$DB_OK" -eq "0" ]; then
+i=1;
+while [ $i -lt 99 ]
+do
+i=$((i+1));
+DBUSERSUF="${DBUSERSUFB}${i}";
+DBUSER=$user\_$DBUSERSUF;
+if [ ! -d "/var/lib/mysql/$DBUSER" ]; then
+break;
+fi
+done
+fi
+
+PASSWDDB=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1)
+
+v-add-database $user $DBUSERSUF $DBUSERSUF $PASSWDDB mysql
+
+cd /home/$user
+
+rm -rf /home/$user/wp
+curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
+chmod +x wp-cli.phar
+sudo mv wp-cli.phar wp
+
+cd /home/$user/web/$domain/public_html
+
+sudo -H -u$user /home/$user/wp core download
+sudo -H -u$user /home/$user/wp core config --dbname=$DBUSER --dbuser=$DBUSER --dbpass=$PASSWDDB
+
+password=$(LC_CTYPE=C tr -dc A-Za-z0-9_\!\@\#\$\%\^\&\*\(\)-+= < /dev/urandom | head -c 12)
+
+sudo -H -u$user /home/$user/wp core install --url="$domain" --title="$domain" --admin_user="admin" --admin_password="$password" --admin_email="$email" --path=$WORKINGDIR
+
+#FIX za https://github.com/wp-cli/wp-cli/issues/2632
+
+mysql -u$DBUSER -p$PASSWDDB -e "USE $DBUSER; update wp_options set option_value = 'https://$domain' where option_name = 'siteurl'; update wp_options set option_value = 'https://$domain' where option_name = 'home';"
+
+# clear
+
+echo "================================================================="
+echo "Installation is complete. Your username/password is listed below."
+echo ""
+echo "Site: https://$domain/"
+echo ""
+echo "Login: https://$domain/wp-admin/"
+echo "Username: admin"
+echo "Password: $password"
+echo ""
+echo "================================================================="
+
+chown -R $user:$user $WORKINGDIR
+
+rm -rf /home/$user/wp
+
+echo "create_wp: Done."
+exit 0
\ No newline at end of file

From be6d976d8a6471f089b95713dbcf745f9f08735a Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 19 Jan 2020 23:00:46 +0100
Subject: [PATCH 0807/2300] Update create_wp_https

---
 src/deb/for-download/tools/create_wp_https | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/create_wp_https b/src/deb/for-download/tools/create_wp_https
index d65902c6..b440df0e 100644
--- a/src/deb/for-download/tools/create_wp_https
+++ b/src/deb/for-download/tools/create_wp_https
@@ -1,5 +1,8 @@
 #!/bin/bash
 
+# WordPress installer in one command line
+# Credits to Luka Paunović for wp-cli implememtation
+
 if [ $# -lt 1 ]; then
     echo usage: create_wp_https domain [db_name] [email]
     exit 1
@@ -109,4 +112,4 @@ chown -R $user:$user $WORKINGDIR
 rm -rf /home/$user/wp
 
 echo "create_wp: Done."
-exit 0
\ No newline at end of file
+exit 0

From 70171a4598fbf0e87a29e2366cfc96d1b659adf7 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 20 Jan 2020 01:00:20 +0100
Subject: [PATCH 0808/2300] v-clone-website: switching to wp-cli for WP sites

---
 src/deb/for-download/tools/v-clone-website | 78 +++++++++++++++-------
 1 file changed, 53 insertions(+), 25 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index b5bb6015..9856029a 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -23,25 +23,20 @@ if [ -z "$VESTA" ]; then
     VESTA="/usr/local/vesta"
 fi
 
-if [ ! -f "/root/Search-Replace-DB-master/srdb.cli.php" ]; then
-    echo "Please download https://interconnectit.com/products/search-and-replace-for-wordpress-databases/ and extract to /root/Search-Replace-DB-master/"
-    exit 11
+if [ -z "$1" ]; then
+    echo "Error: FROM_DOMAIN is empty"
+    exit 2
 fi
-if [ ! -f "/usr/bin/php7.0" ]; then
-    echo "Please download https://c.myvestacp.com/tools/multi-php-install.sh and install php 7.0"
-    exit 12
+if [ -z "$2" ]; then
+    echo "Error: TO_DOMAIN is empty"
+    exit 3
 fi
 
 FROM_DOMAIN=$1
 FROM_USER=$($VESTA/bin/v-search-domain-owner "$FROM_DOMAIN")
 if [ -z "$FROM_USER" ]; then
     echo "Error: domain $FROM_DOMAIN does not exists"
-    exit 2
-fi
-
-if [ -z "$2" ]; then
-    echo "Error: TO_DOMAIN is empty"
-    exit 2
+    exit 4
 fi
 
 FROM_FOLDER="/home/$FROM_USER/web/$FROM_DOMAIN/public_html"
@@ -61,10 +56,15 @@ if [ -z "$FROM_CONFIG_FILE" ]; then
 fi
 if [ ! -f "$FROM_CONFIG_FILE_FULL_PATH" ]; then
     echo "Error: FROM_CONFIG_FILE_FULL_PATH $FROM_CONFIG_FILE_FULL_PATH does not exists"
-    exit 3
+    exit 5
 fi
 
-if [ -f "$FROM_CONFIG_FILE_FULL_PATH" ]; then
+IT_IS_WP=0
+if [ -f "$FROM_FOLDER/wp-config.php" ]; then
+    IT_IS_WP=1
+fi
+
+if [ $IT_IS_WP -eq 1 ]; then
     FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
     FROM_DATABASE_USERNAME=$(grep 'DB_USER' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
     FROM_DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
@@ -86,15 +86,15 @@ if [ $# -ge 5 ]; then
 fi
 if [ -z "$FROM_DATABASE_NAME" ]; then
     echo "Error: FROM_DATABASE_NAME $FROM_DATABASE_NAME is empty"
-    exit 4
+    exit 6
 fi
 if [ -z "$FROM_DATABASE_USERNAME" ]; then
     echo "Error: FROM_DATABASE_USERNAME $FROM_DATABASE_USERNAME is empty"
-    exit 5
+    exit 7
 fi
 if [ -z "$FROM_DATABASE_PASSWORD" ]; then
     echo "Error: FROM_DATABASE_PASSWORD $FROM_DATABASE_PASSWORD is empty"
-    exit 6
+    exit 8
 fi
 
 FROM_USER_LEN=${#FROM_USER}
@@ -103,7 +103,7 @@ FROM_USER_LEN=$((FROM_USER_LEN+1))
 object=$(grep "DB='$FROM_DATABASE_NAME'" $VESTA/data/users/$FROM_USER/db.conf)
 if [ -z "$object" ]; then
     echo "Error: database $FROM_DATABASE_NAME does not exists"
-    exit 7
+    exit 9
 fi
 
 FROM_DATABASE_NAME_WITHOUT_PREFIX=${FROM_DATABASE_NAME:FROM_USER_LEN}
@@ -176,15 +176,15 @@ if [ -z "$TO_DATABASE_PASSWORD" ]; then
 fi
 if [ -z "$TO_DATABASE_NAME" ]; then
     echo "Error: TO_DATABASE_NAME $TO_DATABASE_NAME is empty"
-    exit 8
+    exit 10
 fi
 if [ -z "$TO_DATABASE_USERNAME" ]; then
     echo "Error: TO_DATABASE_USERNAME $TO_DATABASE_USERNAME is empty"
-    exit 9
+    exit 11
 fi
 if [ -z "$TO_DATABASE_PASSWORD" ]; then
     echo "Error: TO_DATABASE_PASSWORD $TO_DATABASE_PASSWORD is empty"
-    exit 10
+    exit 12
 fi
 
 TO_USER_LEN=${#TO_USER}
@@ -194,6 +194,24 @@ TO_DATABASE_NAME_WITHOUT_PREFIX=${TO_DATABASE_NAME:TO_USER_LEN}
 TO_DATABASE_USERNAME_WITHOUT_PREFIX=${TO_DATABASE_USERNAME:TO_USER_LEN}
 
 
+# ----------- CHECK -------------
+
+if [ $IT_IS_WP -eq 0 ]; then
+    if [ ! -f "/root/Search-Replace-DB-master/srdb.cli.php" ]; then
+        echo "Please download https://interconnectit.com/products/search-and-replace-for-wordpress-databases/ and extract to /root/Search-Replace-DB-master/"
+        exit 13
+    fi
+    if [ ! -f "/usr/bin/php7.0" ]; then
+        echo "Please download https://c.myvestacp.com/tools/multi-php-install.sh and install php 7.0"
+        exit 14
+    fi
+else
+    echo "=== Downloading latest wp-cli"
+    wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
+    chmod +x /usr/local/bin/wp
+fi
+
+
 # ----------- PRINT -------------
 
 
@@ -204,13 +222,14 @@ echo "TO_DOMAIN = $TO_DOMAIN"
 echo "TO_USER = $TO_USER"
 echo "FROM_FOLDER = $FROM_FOLDER"
 echo "TO_FOLDER = $TO_FOLDER"
+echo "IT_IS_WP = $IT_IS_WP"
+echo "FROM_CONFIG_FILE_FULL_PATH = $FROM_CONFIG_FILE_FULL_PATH"
+echo "TO_CONFIG_FILE_FULL_PATH = $TO_CONFIG_FILE_FULL_PATH"
 echo "FROM_DATABASE_NAME = $FROM_DATABASE_NAME"
 echo "FROM_DATABASE_USERNAME = $FROM_DATABASE_USERNAME"
 echo "FROM_DATABASE_PASSWORD = $FROM_DATABASE_PASSWORD"
 echo "FROM_DATABASE_NAME_WITHOUT_PREFIX = $FROM_DATABASE_NAME_WITHOUT_PREFIX"
 echo "FROM_DATABASE_USERNAME_WITHOUT_PREFIX = $FROM_DATABASE_USERNAME_WITHOUT_PREFIX"
-echo "FROM_CONFIG_FILE_FULL_PATH = $FROM_CONFIG_FILE_FULL_PATH"
-echo "TO_CONFIG_FILE_FULL_PATH = $TO_CONFIG_FILE_FULL_PATH"
 echo "TO_DATABASE_NAME = $TO_DATABASE_NAME"
 echo "TO_DATABASE_USERNAME = $TO_DATABASE_USERNAME"
 echo "TO_DATABASE_PASSWORD = $TO_DATABASE_PASSWORD"
@@ -261,7 +280,16 @@ echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in folder $TO_FOLDER"
 grep -rl "$FROM_DOMAIN" $FROM_FOLDER | xargs sed -i "s#$FROM_DOMAIN#$TO_DOMAIN#g"
 
 echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
-php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "$FROM_DOMAIN" -r "$TO_DOMAIN"
+if [ $IT_IS_WP -eq 0 ]; then
+    php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "$FROM_DOMAIN" -r "$TO_DOMAIN"
+else
+    cd $TO_FOLDER
+    sudo -H -u$TO_USER wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid
+    if [ -f "$TO_FOLDER/index.html" ]; then
+        echo "=== Removing $TO_FOLDER/index.html"
+        rm $TO_FOLDER/index.html
+    fi
+fi
 
 echo "===== DONE ===="
-echo "You can visit http://$TO_DOMAIN/"
\ No newline at end of file
+echo "You can visit http://$TO_DOMAIN/"

From 040a7e735d4b4204e262c96a69606e7310025bc1 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 24 Jan 2020 18:38:59 +0100
Subject: [PATCH 0809/2300] php7.4-memcache php7.4-memcached

---
 src/deb/for-download/tools/multi-php-install.sh | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 69184ced..e76d5ba0 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -196,8 +196,7 @@ fi
 
 if [ "$inst_74" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 7.4 ==============================================================================="
-    apt-get -y install php7.4-mbstring php7.4-bcmath php7.4-cli php7.4-curl php7.4-fpm php7.4-gd php7.4-intl php7.4-mysql php7.4-soap php7.4-xml php7.4-zip
-    # php7.4-memcache php7.4-memcached
+    apt-get -y install php7.4-mbstring php7.4-bcmath php7.4-cli php7.4-curl php7.4-fpm php7.4-gd php7.4-intl php7.4-mysql php7.4-soap php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached
     update-rc.d php7.4-fpm defaults
     a2enconf php7.4-fpm
     systemctl restart apache2

From 19b2b0c9dc75938fc25bd8304c908cd69b2c9d63 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 2 Feb 2020 00:17:58 +0100
Subject: [PATCH 0810/2300] Update multi-php-install.sh

---
 .../for-download/tools/multi-php-install.sh   | 23 +++++++++++--------
 1 file changed, 13 insertions(+), 10 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index e76d5ba0..059fc217 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -69,10 +69,10 @@ echo "wait_to_press_enter=$wait_to_press_enter"
 
 press_enter "=== Press enter to continue ==============================================================================="
 
-apt-get update
+apt update
 if [ "$inst_repo" -eq 1 ]; then
 press_enter "=== Press enter to install sury.org repo ==============================================================================="
-apt-get -y install apt-transport-https ca-certificates
+apt -y install apt-transport-https ca-certificates
 wget -nv -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
 if [ $debian_version -eq 8 ]; then
   sh -c 'echo "deb https://packages.sury.org/php/ jessie main" > /etc/apt/sources.list.d/php.list'
@@ -83,8 +83,8 @@ fi
 if [ $debian_version -eq 10 ]; then
   sh -c 'echo "deb https://packages.sury.org/php/ buster main" > /etc/apt/sources.list.d/php.list'
 fi
-apt-get update
-apt-get upgrade -y
+apt update
+apt upgrade -y
 press_enter "=== Press enter to continue ==============================================================================="
 fi
 
@@ -95,7 +95,7 @@ service apache2 restart
 
 if [ "$inst_56" -eq 1 ]; then
 press_enter "=== Press enter to install PHP 5.6 ==============================================================================="
-apt-get -y install php5.6-mbstring php5.6-bcmath php5.6-cli php5.6-curl php5.6-fpm php5.6-gd php5.6-intl php5.6-mcrypt php5.6-mysql php5.6-soap php5.6-xml php5.6-zip php5.6-memcache php5.6-memcached
+apt -y install php5.6-mbstring php5.6-bcmath php5.6-cli php5.6-curl php5.6-fpm php5.6-gd php5.6-intl php5.6-mcrypt php5.6-mysql php5.6-soap php5.6-xml php5.6-zip php5.6-memcache php5.6-memcached
 update-rc.d php5.6-fpm defaults
 a2enconf php5.6-fpm
 systemctl restart apache2
@@ -111,7 +111,7 @@ fi
 
 if [ "$inst_70" -eq 1 ]; then
 press_enter "=== Press enter to install PHP 7.0 ==============================================================================="
-apt-get -y install php7.0-mbstring php7.0-bcmath php7.0-cli php7.0-curl php7.0-fpm php7.0-gd php7.0-intl php7.0-mcrypt php7.0-mysql php7.0-soap php7.0-xml php7.0-zip php7.0-memcache php7.0-memcached
+apt -y install php7.0-mbstring php7.0-bcmath php7.0-cli php7.0-curl php7.0-fpm php7.0-gd php7.0-intl php7.0-mcrypt php7.0-mysql php7.0-soap php7.0-xml php7.0-zip php7.0-memcache php7.0-memcached
 update-rc.d php7.0-fpm defaults
 a2enconf php7.0-fpm
 systemctl restart apache2
@@ -132,7 +132,7 @@ fi
 
 if [ "$inst_71" -eq 1 ]; then
 press_enter "=== Press enter to install PHP 7.1 ==============================================================================="
-apt-get -y install php7.1-mbstring php7.1-bcmath php7.1-cli php7.1-curl php7.1-fpm php7.1-gd php7.1-intl php7.1-mcrypt php7.1-mysql php7.1-soap php7.1-xml php7.1-zip php7.1-memcache php7.1-memcached
+apt -y install php7.1-mbstring php7.1-bcmath php7.1-cli php7.1-curl php7.1-fpm php7.1-gd php7.1-intl php7.1-mcrypt php7.1-mysql php7.1-soap php7.1-xml php7.1-zip php7.1-memcache php7.1-memcached
 update-rc.d php7.1-fpm defaults
 a2enconf php7.1-fpm
 systemctl restart apache2
@@ -153,7 +153,7 @@ fi
 
 if [ "$inst_72" -eq 1 ]; then
 press_enter "=== Press enter to install PHP 7.2 ==============================================================================="
-apt-get -y install php7.2-mbstring php7.2-bcmath php7.2-cli php7.2-curl php7.2-fpm php7.2-gd php7.2-intl php7.2-mysql php7.2-soap php7.2-xml php7.2-zip php7.2-memcache php7.2-memcached
+apt -y install php7.2-mbstring php7.2-bcmath php7.2-cli php7.2-curl php7.2-fpm php7.2-gd php7.2-intl php7.2-mysql php7.2-soap php7.2-xml php7.2-zip php7.2-memcache php7.2-memcached
 update-rc.d php7.2-fpm defaults
 a2enconf php7.2-fpm
 systemctl restart apache2
@@ -174,7 +174,7 @@ fi
 
 if [ "$inst_73" -eq 1 ]; then
 press_enter "=== Press enter to install PHP 7.3 ==============================================================================="
-apt-get -y install php7.3-mbstring php7.3-bcmath php7.3-cli php7.3-curl php7.3-fpm php7.3-gd php7.3-intl php7.3-mysql php7.3-soap php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached
+apt -y install php7.3-mbstring php7.3-bcmath php7.3-cli php7.3-curl php7.3-fpm php7.3-gd php7.3-intl php7.3-mysql php7.3-soap php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached
 update-rc.d php7.3-fpm defaults
 a2enconf php7.3-fpm
 systemctl restart apache2
@@ -196,7 +196,7 @@ fi
 
 if [ "$inst_74" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 7.4 ==============================================================================="
-    apt-get -y install php7.4-mbstring php7.4-bcmath php7.4-cli php7.4-curl php7.4-fpm php7.4-gd php7.4-intl php7.4-mysql php7.4-soap php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached
+    apt -y install php7.4-mbstring php7.4-bcmath php7.4-cli php7.4-curl php7.4-fpm php7.4-gd php7.4-intl php7.4-mysql php7.4-soap php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached
     update-rc.d php7.4-fpm defaults
     a2enconf php7.4-fpm
     systemctl restart apache2
@@ -217,3 +217,6 @@ if [ "$inst_74" -eq 1 ]; then
     fi
     press_enter "=== Press enter to continue ==============================================================================="
 fi
+
+apt update
+apt upgrade -y

From b5db512b8b7d5a7b79c76961f9dfbe942103a235 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 2 Feb 2020 14:54:39 +0100
Subject: [PATCH 0811/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 9856029a..a342a179 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -206,9 +206,11 @@ if [ $IT_IS_WP -eq 0 ]; then
         exit 14
     fi
 else
-    echo "=== Downloading latest wp-cli"
-    wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
-    chmod +x /usr/local/bin/wp
+    if [ ! -f "/usr/local/bin/wp" ]; then
+        echo "=== Downloading latest wp-cli"
+        wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
+        chmod +x /usr/local/bin/wp
+    fi
 fi
 
 

From 393fb7445a6bb48c12341becddeb478477d13494 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 2 Feb 2020 15:04:23 +0100
Subject: [PATCH 0812/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index a342a179..7c6ba6ae 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -279,7 +279,7 @@ echo "=== Replacing $FROM_DATABASE_PASSWORD to $TO_DATABASE_PASSWORD in $TO_CONF
 sed -i "s|$FROM_DATABASE_PASSWORD|$TO_DATABASE_PASSWORD|g" $TO_CONFIG_FILE_FULL_PATH
 
 echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in folder $TO_FOLDER"
-grep -rl "$FROM_DOMAIN" $FROM_FOLDER | xargs sed -i "s#$FROM_DOMAIN#$TO_DOMAIN#g"
+grep -rl "$FROM_DOMAIN" $TO_FOLDER | xargs sed -i "s#$FROM_DOMAIN#$TO_DOMAIN#g"
 
 echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
 if [ $IT_IS_WP -eq 0 ]; then

From 72939b1fdfb4b45e5d76ccacb9907bafeb3fb3a8 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 2 Feb 2020 15:28:54 +0100
Subject: [PATCH 0813/2300] Update create_wp_https

---
 src/deb/for-download/tools/create_wp_https | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/create_wp_https b/src/deb/for-download/tools/create_wp_https
index b440df0e..a375af27 100644
--- a/src/deb/for-download/tools/create_wp_https
+++ b/src/deb/for-download/tools/create_wp_https
@@ -37,9 +37,10 @@ fi
 
 if [ ! -f "/home/$user/conf/web/ssl.$domain.pem" ]; then
     v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
-
+fi
+if [ -f "/home/$user/conf/web/ssl.$domain.pem" ]; then
     if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
-        v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2,xml" "yes"
+        v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
     fi
 fi
 
@@ -111,5 +112,5 @@ chown -R $user:$user $WORKINGDIR
 
 rm -rf /home/$user/wp
 
-echo "create_wp: Done."
+echo "create_wp_https: Done."
 exit 0

From abacfa71b9e569b86a5f7fd417e0d75e21d4a390 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 2 Feb 2020 15:34:26 +0100
Subject: [PATCH 0814/2300] Update create_wp_https

---
 src/deb/for-download/tools/create_wp_https | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/deb/for-download/tools/create_wp_https b/src/deb/for-download/tools/create_wp_https
index a375af27..edfb58c5 100644
--- a/src/deb/for-download/tools/create_wp_https
+++ b/src/deb/for-download/tools/create_wp_https
@@ -42,6 +42,9 @@ if [ -f "/home/$user/conf/web/ssl.$domain.pem" ]; then
     if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
         v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
     fi
+else
+    echo "Error: Can not generate SSL."
+    exit 20
 fi
 
 WORKINGDIR="/home/$user/web/$domain/public_html"

From ee308a3f4f3a617b856e8388582da811e2c827e9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 2 Feb 2020 16:55:46 +0100
Subject: [PATCH 0815/2300] Create v-migrate-site-to-https

---
 .../tools/v-migrate-site-to-https             | 172 ++++++++++++++++++
 1 file changed, 172 insertions(+)
 create mode 100644 src/deb/for-download/tools/v-migrate-site-to-https

diff --git a/src/deb/for-download/tools/v-migrate-site-to-https b/src/deb/for-download/tools/v-migrate-site-to-https
new file mode 100644
index 00000000..ede8f926
--- /dev/null
+++ b/src/deb/for-download/tools/v-migrate-site-to-https
@@ -0,0 +1,172 @@
+#!/bin/bash
+
+# Tool that will replace http to https URLs in database, install SSL and switch to force-https proxy template
+# Automatic detection of WordPress, automaticaly read DB user, DB name and DB pass.
+
+if [ $# -lt 1 ]; then
+    echo "USAGE: v-migrate-site-to-https DOMAIN [DATABASE_NAME] [DATABASE_USERNAME] [DATABASE_PASSWORD]"
+    exit 1
+fi
+
+FROM_DOMAIN=''
+FROM_DATABASE_NAME=''
+FROM_DATABASE_USERNAME=''
+FROM_DATABASE_PASSWORD=''
+
+if [ -z "$VESTA" ]; then
+    VESTA="/usr/local/vesta"
+fi
+
+if [ -z "$1" ]; then
+    echo "Error: DOMAIN is empty"
+    exit 2
+fi
+
+FROM_DOMAIN=$1
+FROM_USER=$($VESTA/bin/v-search-domain-owner "$FROM_DOMAIN")
+if [ -z "$FROM_USER" ]; then
+    echo "Error: domain $FROM_DOMAIN does not exists"
+    exit 4
+fi
+
+FROM_FOLDER="/home/$FROM_USER/web/$FROM_DOMAIN/public_html"
+CHECK_PUBLIC_SHTML=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'SSL:' | grep -c 'single')
+if [ $CHECK_PUBLIC_SHTML -eq 1 ]; then
+    FROM_FOLDER="/home/$FROM_USER/web/$FROM_DOMAIN/public_shtml"
+fi
+
+FROM_CONFIG_FILE="wp-config.php"
+FROM_CONFIG_FILE_FULL_PATH="$FROM_FOLDER/$FROM_CONFIG_FILE"
+if [ ! -f "$FROM_CONFIG_FILE_FULL_PATH" ]; then
+    echo "Error: CONFIG_FILE_FULL_PATH $FROM_CONFIG_FILE_FULL_PATH does not exists"
+    exit 5
+fi
+
+IT_IS_WP=0
+if [ -f "$FROM_FOLDER/wp-config.php" ]; then
+    IT_IS_WP=1
+fi
+
+if [ $IT_IS_WP -eq 1 ]; then
+    FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    FROM_DATABASE_USERNAME=$(grep 'DB_USER' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    FROM_DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+fi
+if [ $# -ge 2 ]; then
+    if [ ! -z "$2" ]; then
+        FROM_DATABASE_NAME=$3
+    fi
+fi
+if [ $# -ge 3 ]; then
+    if [ ! -z "$3" ]; then
+        FROM_DATABASE_USERNAME=$4
+    fi
+fi
+if [ $# -ge 4 ]; then
+    if [ ! -z "$4" ]; then
+        FROM_DATABASE_PASSWORD=$5
+    fi
+fi
+if [ -z "$FROM_DATABASE_NAME" ]; then
+    echo "Error: DATABASE_NAME $FROM_DATABASE_NAME is empty"
+    exit 6
+fi
+if [ -z "$FROM_DATABASE_USERNAME" ]; then
+    echo "Error: DATABASE_USERNAME $FROM_DATABASE_USERNAME is empty"
+    exit 7
+fi
+if [ -z "$FROM_DATABASE_PASSWORD" ]; then
+    echo "Error: DATABASE_PASSWORD $FROM_DATABASE_PASSWORD is empty"
+    exit 8
+fi
+
+object=$(grep "DB='$FROM_DATABASE_NAME'" $VESTA/data/users/$FROM_USER/db.conf)
+if [ -z "$object" ]; then
+    echo "Error: database $FROM_DATABASE_NAME does not exists"
+    exit 9
+fi
+
+# ----------- CHECK -------------
+
+FROM_REPLACE1="http://$FROM_DOMAIN"
+TO_REPLACE1="https://$FROM_DOMAIN"
+FROM_REPLACE2="http://www.$FROM_DOMAIN"
+TO_REPLACE2="https://www.$FROM_DOMAIN"
+
+if [ $IT_IS_WP -eq 0 ]; then
+    if [ ! -f "/root/Search-Replace-DB-master/srdb.cli.php" ]; then
+        echo "Please download https://interconnectit.com/products/search-and-replace-for-wordpress-databases/ and extract to /root/Search-Replace-DB-master/"
+        exit 13
+    fi
+    if [ ! -f "/usr/bin/php7.0" ]; then
+        echo "Please download https://c.myvestacp.com/tools/multi-php-install.sh and install php 7.0"
+        exit 14
+    fi
+else
+    if [ ! -f "/usr/local/bin/wp" ]; then
+        echo "=== Downloading latest wp-cli"
+        wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
+        chmod +x /usr/local/bin/wp
+    fi
+fi
+
+
+# ----------- PRINT -------------
+
+
+echo "==============================================================================="
+echo "FROM_REPLACE1 = $FROM_REPLACE1"
+echo "TO_REPLACE1   = $TO_REPLACE1"
+echo "FROM_REPLACE2 = $FROM_REPLACE2"
+echo "TO_REPLACE2   = $TO_REPLACE2"
+echo "----"
+echo "FROM_DOMAIN = $FROM_DOMAIN"
+echo "FROM_USER = $FROM_USER"
+echo "FROM_FOLDER = $FROM_FOLDER"
+echo "IT_IS_WP = $IT_IS_WP"
+echo "FROM_CONFIG_FILE_FULL_PATH = $FROM_CONFIG_FILE_FULL_PATH"
+echo "FROM_DATABASE_NAME = $FROM_DATABASE_NAME"
+echo "FROM_DATABASE_USERNAME = $FROM_DATABASE_USERNAME"
+echo "FROM_DATABASE_PASSWORD = $FROM_DATABASE_PASSWORD"
+echo "==============================================================================="
+read -p "=== Press Enter to continue ==="
+
+
+# ----------- ACTION -------------
+
+domain=$FROM_DOMAIN
+user=$FROM_USER
+
+if [ ! -f "/home/$user/conf/web/ssl.$domain.pem" ]; then
+    v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
+fi
+if [ -f "/home/$user/conf/web/ssl.$domain.pem" ]; then
+    if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
+        v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
+    fi
+else
+    echo "Error: Can not generate SSL."
+    exit 20
+fi
+
+echo "=== Replacing $FROM_REPLACE1 to $TO_REPLACE1 in folder $TO_FOLDER"
+grep -rl "$FROM_DOMAIN" $FROM_FOLDER | xargs sed -i "s#$FROM_REPLACE1#$TO_REPLACE1#g"
+
+echo "=== Replacing $FROM_REPLACE2 to $TO_REPLACE2 in folder $TO_FOLDER"
+grep -rl "$FROM_DOMAIN" $FROM_FOLDER | xargs sed -i "s#$FROM_REPLACE2#$TO_REPLACE2#g"
+
+if [ $IT_IS_WP -eq 0 ]; then
+    echo "=== Replacing $FROM_REPLACE1 to $TO_REPLACE1 in database $FROM_DATABASE_NAME"
+    php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$FROM_DATABASE_NAME" -u "$FROM_DATABASE_USERNAME" -p "$FROM_DATABASE_PASSWORD" -s "$FROM_REPLACE1" -r "$TO_REPLACE1"
+    echo "=== Replacing $FROM_REPLACE2 to $TO_REPLACE2 in database $FROM_DATABASE_NAME"
+    php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$FROM_DATABASE_NAME" -u "$FROM_DATABASE_USERNAME" -p "$FROM_DATABASE_PASSWORD" -s "$FROM_REPLACE2" -r "$TO_REPLACE2"
+else
+    cd $FROM_FOLDER
+    echo "=== Replacing $FROM_REPLACE1 to $TO_REPLACE1 in database $FROM_DATABASE_NAME"
+    sudo -H -u$FROM_USER wp search-replace "$FROM_REPLACE1" "$TO_REPLACE1" --precise --all-tables --skip-columns=guid
+    echo "=== Replacing $FROM_REPLACE2 to $TO_REPLACE2 in database $FROM_DATABASE_NAME"
+    sudo -H -u$FROM_USER wp search-replace "$FROM_REPLACE2" "$TO_REPLACE2" --precise --all-tables --skip-columns=guid
+fi
+
+echo "===== DONE ===="
+echo "You can visit $TO_REPLACE1"

From 14cb0a988dfcc3762af3e8da129dc521b018c6cf Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 3 Feb 2020 11:13:21 +0100
Subject: [PATCH 0816/2300] Exim compatibility with Loopia

---
 install/debian/10/exim/exim4.conf.template | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
index c1f285ea..95e9bc48 100644
--- a/install/debian/10/exim/exim4.conf.template
+++ b/install/debian/10/exim/exim4.conf.template
@@ -310,6 +310,7 @@ remote_smtp:
   dkim_private_key = DKIM_PRIVATE_KEY
   dkim_canon = relaxed
   dkim_strict = 0
+  hosts_try_chunking = !93.188.3.0/24
 
 procmail:
   driver = pipe

From dc00af4d6111708242bd531399b7fdcb57323158 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 3 Feb 2020 11:16:37 +0100
Subject: [PATCH 0817/2300] Exim compatibility with Loopia

---
 .../for-download/tools/exim-without-limits/exim4.conf.template  | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/deb/for-download/tools/exim-without-limits/exim4.conf.template b/src/deb/for-download/tools/exim-without-limits/exim4.conf.template
index a973039f..dcc889fe 100644
--- a/src/deb/for-download/tools/exim-without-limits/exim4.conf.template
+++ b/src/deb/for-download/tools/exim-without-limits/exim4.conf.template
@@ -4,6 +4,7 @@
 #                                                                    #
 ######################################################################
 
+# Uncomment these 3 lines if you have ClamAV or Spamassassin
 #SPAMASSASSIN = yes
 #SPAM_SCORE = 50
 #CLAMD =  yes
@@ -293,6 +294,7 @@ remote_smtp:
   dkim_private_key = DKIM_PRIVATE_KEY
   dkim_canon = relaxed
   dkim_strict = 0
+  hosts_try_chunking = !93.188.3.0/24
 
 procmail:
   driver = pipe

From 97d3fc3be22fc8fca08b34e4345dc99e28ba747c Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 4 Feb 2020 11:20:57 +0100
Subject: [PATCH 0818/2300] Update hosting-webmail-phpmyadmin.tpl

---
 .../10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
index 7085e047..5f601672 100644
--- a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
+++ b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
@@ -16,7 +16,7 @@ server {
 
     location /webmail {
         disable_symlinks off;
-        proxy_pass      https://%ip%:%web_ssl_port%;
+        proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           /var/lib/roundcube;
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
@@ -28,7 +28,7 @@ server {
 
     location /phpmyadmin {
         disable_symlinks off;
-        proxy_pass      https://%ip%:%web_ssl_port%;
+        proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
             root           /usr/share;
             access_log     /var/log/%web_system%/domains/%domain%.log combined;

From 9224872c5cb7f6880a35cf6c60f40389924616d3 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 4 Feb 2020 11:24:59 +0100
Subject: [PATCH 0819/2300] Update main.inc.php

---
 install/debian/10/roundcube/main.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/roundcube/main.inc.php b/install/debian/10/roundcube/main.inc.php
index 97cdbf2d..55a4e082 100644
--- a/install/debian/10/roundcube/main.inc.php
+++ b/install/debian/10/roundcube/main.inc.php
@@ -209,7 +209,7 @@ $rcmail_config['message_cache_lifetime'] = '10d';
 // enforce connections over https
 // with this option enabled, all non-secure connections will be redirected.
 // set the port for the ssl connection as value of this option if it differs from the default 443
-$rcmail_config['force_https'] = false;
+$rcmail_config['force_https'] = true;
 
 // tell PHP that it should work as under secure connection
 // even if it doesn't recognize it as secure ($_SERVER['HTTPS'] is not set)

From 341e7d65997e88a187bc0d355db9ba658af0db9d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 6 Feb 2020 19:34:48 +0100
Subject: [PATCH 0820/2300] php5.6.patch

---
 src/deb/for-download/tools/php5.6.patch | 84 +++++++++++++++++++++++++
 1 file changed, 84 insertions(+)
 create mode 100644 src/deb/for-download/tools/php5.6.patch

diff --git a/src/deb/for-download/tools/php5.6.patch b/src/deb/for-download/tools/php5.6.patch
new file mode 100644
index 00000000..ab103618
--- /dev/null
+++ b/src/deb/for-download/tools/php5.6.patch
@@ -0,0 +1,84 @@
+--- origin/etc/php/5.6/fpm/php.ini	2016-10-03 13:42:37.000000000 +0200
++++ vesta/etc/php/5.6/fpm/php.ini	2016-09-30 14:10:49.000000000 +0200
+@@ -295,12 +295,13 @@
+ ; and below.  This directive makes most sense if used in a per-directory
+ ; or per-virtualhost web server configuration file.
+ ; http://php.net/open-basedir
+-;open_basedir =
++;open_basedir = 
+ 
+ ; This directive allows you to disable certain functions for security reasons.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes for security reasons.
+ ; It receives a comma-delimited list of class names.
+@@ -386,7 +387,7 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-; max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume (128MB)
+ ; http://php.net/memory-limit
+@@ -657,7 +658,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -802,11 +803,11 @@
+ ; Temporary directory for HTTP uploaded files (will use system default if not
+ ; specified).
+ ; http://php.net/upload-tmp-dir
+-;upload_tmp_dir =
++upload_tmp_dir = 
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -993,7 +994,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1903,20 +1903,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=0
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=64
++opcache.memory_consumption=2048
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=4
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 100000 are allowed.
+-;opcache.max_accelerated_files=2000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5

From b6379cf8ff1481fdc3b3534c1a6b53423597f0a9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 6 Feb 2020 19:41:23 +0100
Subject: [PATCH 0821/2300] php5.6 php.ini fix

---
 src/deb/for-download/tools/multi-php-install.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 059fc217..7d2c559a 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -105,7 +105,10 @@ wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.stpl -O /usr/lo
 wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.tpl
 wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
 chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
-patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php5-deb9.patch
+mkdir -p /root/vesta-temp-dl/vesta/patch
+wget -nv https://c.myvestacp.com/tools/php5.6.patch -O /root/vesta-temp-dl/vesta/patch/php5.6.patch
+patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php5.6.patch
+rm -rf /root/vesta-temp-dl
 press_enter "=== Press enter to continue ==============================================================================="
 fi
 

From d4de5165b1bab7763f690c1b8126a7b7f9f2da4d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 6 Feb 2020 19:54:35 +0100
Subject: [PATCH 0822/2300] Create php5.6.patch

---
 .../for-download/tools/patches/php5.6.patch   | 84 +++++++++++++++++++
 1 file changed, 84 insertions(+)
 create mode 100644 src/deb/for-download/tools/patches/php5.6.patch

diff --git a/src/deb/for-download/tools/patches/php5.6.patch b/src/deb/for-download/tools/patches/php5.6.patch
new file mode 100644
index 00000000..ab103618
--- /dev/null
+++ b/src/deb/for-download/tools/patches/php5.6.patch
@@ -0,0 +1,84 @@
+--- origin/etc/php/5.6/fpm/php.ini	2016-10-03 13:42:37.000000000 +0200
++++ vesta/etc/php/5.6/fpm/php.ini	2016-09-30 14:10:49.000000000 +0200
+@@ -295,12 +295,13 @@
+ ; and below.  This directive makes most sense if used in a per-directory
+ ; or per-virtualhost web server configuration file.
+ ; http://php.net/open-basedir
+-;open_basedir =
++;open_basedir = 
+ 
+ ; This directive allows you to disable certain functions for security reasons.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes for security reasons.
+ ; It receives a comma-delimited list of class names.
+@@ -386,7 +387,7 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-; max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume (128MB)
+ ; http://php.net/memory-limit
+@@ -657,7 +658,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -802,11 +803,11 @@
+ ; Temporary directory for HTTP uploaded files (will use system default if not
+ ; specified).
+ ; http://php.net/upload-tmp-dir
+-;upload_tmp_dir =
++upload_tmp_dir = 
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -993,7 +994,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1903,20 +1903,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=0
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=64
++opcache.memory_consumption=2048
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=4
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 100000 are allowed.
+-;opcache.max_accelerated_files=2000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5

From 10a86e2458799e8c74426cb05d9a202f7af85822 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 6 Feb 2020 19:55:12 +0100
Subject: [PATCH 0823/2300] Delete php5.6.patch

---
 src/deb/for-download/tools/php5.6.patch | 84 -------------------------
 1 file changed, 84 deletions(-)
 delete mode 100644 src/deb/for-download/tools/php5.6.patch

diff --git a/src/deb/for-download/tools/php5.6.patch b/src/deb/for-download/tools/php5.6.patch
deleted file mode 100644
index ab103618..00000000
--- a/src/deb/for-download/tools/php5.6.patch
+++ /dev/null
@@ -1,84 +0,0 @@
---- origin/etc/php/5.6/fpm/php.ini	2016-10-03 13:42:37.000000000 +0200
-+++ vesta/etc/php/5.6/fpm/php.ini	2016-09-30 14:10:49.000000000 +0200
-@@ -295,12 +295,13 @@
- ; and below.  This directive makes most sense if used in a per-directory
- ; or per-virtualhost web server configuration file.
- ; http://php.net/open-basedir
--;open_basedir =
-+;open_basedir = 
- 
- ; This directive allows you to disable certain functions for security reasons.
- ; It receives a comma-delimited list of function names.
- ; http://php.net/disable-functions
--disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
-+; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
-+disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen
- 
- ; This directive allows you to disable certain classes for security reasons.
- ; It receives a comma-delimited list of class names.
-@@ -386,7 +387,7 @@
- ;max_input_nesting_level = 64
- 
- ; How many GET/POST/COOKIE input variables may be accepted
--; max_input_vars = 1000
-+max_input_vars = 6000
- 
- ; Maximum amount of memory a script may consume (128MB)
- ; http://php.net/memory-limit
-@@ -657,7 +658,7 @@
- ; Its value may be 0 to disable the limit. It is ignored if POST data reading
- ; is disabled through enable_post_data_reading.
- ; http://php.net/post-max-size
--post_max_size = 8M
-+post_max_size = 60M
- 
- ; Automatically add files before PHP document.
- ; http://php.net/auto-prepend-file
-@@ -802,11 +803,11 @@
- ; Temporary directory for HTTP uploaded files (will use system default if not
- ; specified).
- ; http://php.net/upload-tmp-dir
--;upload_tmp_dir =
-+upload_tmp_dir = 
- 
- ; Maximum allowed size for uploaded files.
- ; http://php.net/upload-max-filesize
--upload_max_filesize = 2M
-+upload_max_filesize = 50M
- 
- ; Maximum number of files that can be uploaded via a single request
- max_file_uploads = 20
-@@ -993,7 +994,7 @@
- 
- ; The path to a log file that will log all mail() calls. Log entries include
- ; the full path of the script, line number, To address and headers.
--;mail.log =
-+mail.log = /var/log/php-mail.log
- ; Log mail to syslog (Event Log on Windows).
- ;mail.log = syslog
- 
-@@ -1903,20 +1903,20 @@
- 
- [opcache]
- ; Determines if Zend OPCache is enabled
--;opcache.enable=0
-+opcache.enable=1
- 
- ; Determines if Zend OPCache is enabled for the CLI version of PHP
--;opcache.enable_cli=0
-+opcache.enable_cli=0
- 
- ; The OPcache shared memory storage size.
--;opcache.memory_consumption=64
-+opcache.memory_consumption=2048
- 
- ; The amount of memory for interned strings in Mbytes.
- ;opcache.interned_strings_buffer=4
- 
- ; The maximum number of keys (scripts) in the OPcache hash table.
- ; Only numbers between 200 and 100000 are allowed.
--;opcache.max_accelerated_files=2000
-+opcache.max_accelerated_files=100000
- 
- ; The maximum percentage of "wasted" memory until a restart is scheduled.
- ;opcache.max_wasted_percentage=5

From 0aba1ce1487f3a89962a97f33cb3e7d1b6bf8c98 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 6 Feb 2020 19:56:20 +0100
Subject: [PATCH 0824/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 7d2c559a..2d8658c7 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -106,7 +106,7 @@ wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.tpl -O /usr/loc
 wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
 chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
 mkdir -p /root/vesta-temp-dl/vesta/patch
-wget -nv https://c.myvestacp.com/tools/php5.6.patch -O /root/vesta-temp-dl/vesta/patch/php5.6.patch
+wget -nv https://c.myvestacp.com/tools/patches/php5.6.patch -O /root/vesta-temp-dl/vesta/patch/php5.6.patch
 patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php5.6.patch
 rm -rf /root/vesta-temp-dl
 press_enter "=== Press enter to continue ==============================================================================="

From 3ea0bbaa3b2647f5c9798c4a2cc4981f3ec19e7e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 6 Feb 2020 20:17:27 +0100
Subject: [PATCH 0825/2300] rcube_vcard.patch

---
 src/deb/for-download/tools/patches/rcube_vcard.patch | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 src/deb/for-download/tools/patches/rcube_vcard.patch

diff --git a/src/deb/for-download/tools/patches/rcube_vcard.patch b/src/deb/for-download/tools/patches/rcube_vcard.patch
new file mode 100644
index 00000000..0a6cea15
--- /dev/null
+++ b/src/deb/for-download/tools/patches/rcube_vcard.patch
@@ -0,0 +1,11 @@
+--- /usr/share/roundcube/program/lib/Roundcube/rcube_vcard.php	2018-10-23 13:12:54.000000000 +0200
++++ /usr/share/roundcube/program/lib/Roundcube/rcube_vcard.php2	2020-02-06 01:03:34.000000000 +0100
+@@ -536,7 +536,7 @@
+                 '/^item\d*\.X-AB.*$/mi',  // remove cruft like item1.X-AB*
+                 '/^item\d*\./mi',         // remove item1.ADR instead of ADR
+                 '/\n+/',                 // remove empty lines
+-                '/^(N:[^;\R]*)$/m',      // if N doesn't have any semicolons, add some
++                '/^(N:[^;\r\n]*)$/m',      // if N doesn't have any semicolons, add some
+             ),
+             array(
+                 '\2;type=\5\3:\4',

From 304059a759fd33a28bafbe52010228cea96716f3 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 6 Feb 2020 20:36:09 +0100
Subject: [PATCH 0826/2300] Patching rcube_vcard.php in installer

---
 install/vst-install-debian.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index b7374390..3766d031 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1530,6 +1530,10 @@ if [ "$release" -eq 10 ]; then
   service php7.3-fpm restart
 fi
 
+echo "=== Patching rcube_vcard.php"
+wget -nv https://c.myvestacp.com/tools/patches/rcube_vcard.patch -O /root/rcube_vcard.patch
+patch /usr/share/roundcube/program/lib/Roundcube/rcube_vcard.php < /root/rcube_vcard.patch
+
 # Comparing hostname and ip
 make_ssl=0
 host_ip=$(host $servername | head -n 1 | awk '{print $NF}')

From d050146fab5ae937323182d24e394471b7cefc37 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Fri, 7 Feb 2020 13:21:22 +0100
Subject: [PATCH 0827/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 7c6ba6ae..2efc285e 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -267,7 +267,7 @@ echo "=== Importing to database $TO_DATABASE_NAME"
 mysql $TO_DATABASE_NAME < $FROM_DATABASE_NAME.sql
 
 echo "=== Copying files from $FROM_FOLDER to folder $TO_FOLDER"
-rsync -a $FROM_FOLDER/ $TO_FOLDER/
+rsync -a --delete $FROM_FOLDER/ $TO_FOLDER/
 echo "=== Chowning to  $TO_USER:$TO_USER in folder $TO_FOLDER"
 chown -R $TO_USER:$TO_USER $TO_FOLDER
 
@@ -287,10 +287,6 @@ if [ $IT_IS_WP -eq 0 ]; then
 else
     cd $TO_FOLDER
     sudo -H -u$TO_USER wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid
-    if [ -f "$TO_FOLDER/index.html" ]; then
-        echo "=== Removing $TO_FOLDER/index.html"
-        rm $TO_FOLDER/index.html
-    fi
 fi
 
 echo "===== DONE ===="

From 4856aeca8523e38da24a8637156bc960f5ec5813 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 10 Feb 2020 21:11:32 +0100
Subject: [PATCH 0828/2300] Update admin

---
 install/debian/10/sudo/admin | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/sudo/admin b/install/debian/10/sudo/admin
index 4226bdd4..331fa1f2 100644
--- a/install/debian/10/sudo/admin
+++ b/install/debian/10/sudo/admin
@@ -4,5 +4,5 @@ Defaults:admin !syslog
 Defaults:admin !requiretty
 Defaults:root !requiretty
 
-admin   ALL=(ALL)       ALL
+# sudo is limited to vesta scripts
 admin   ALL=NOPASSWD:/usr/local/vesta/bin/*

From 5bbb8f951d031fb618d9f2e4603bdd244bcfe989 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 10 Feb 2020 21:15:30 +0100
Subject: [PATCH 0829/2300] sudoers fix

---
 src/deb/vesta/postinst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index bca5865c..07499875 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -10,6 +10,12 @@ if [ -x "/root/vesta-patch.sh" ]; then
     /root/vesta-patch.sh
 fi
 
+# sudoers fix
+if [ -e "/etc/sudoers.d/admin" ]; then
+    sed -i "s/admin.*ALL=(ALL).*/# sudo is limited to vesta scripts/" \
+        /etc/sudoers.d/admin
+fi
+
 check_apt=$(grep -c 'vesta.hostingpanel.dev' /etc/apt/sources.list.d/vesta.list)
 if [ "$check_apt" -eq 1 ]; then
     wget -O - http://apt.myvestacp.com/deb_signing.key | sudo apt-key add -

From b01fd9b9a1729aa2b01a2691b967f323f448c0b2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 10 Feb 2020 22:09:59 +0100
Subject: [PATCH 0830/2300] version up

---
 src/deb/vesta/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 75720ec5..638399fb 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-26-4
+Version: 0.9.8-26-5
 Section: admin
 Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
 Homepage: http://myvestacp.com

From f19e0d49eb496245e0c39456b5ffa175e7c9f329 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 10 Feb 2020 22:10:48 +0100
Subject: [PATCH 0831/2300] version up

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 1edb2e24..41001021 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-4
+vesta-0.9.8-26-5

From 6713f75f93176e669195a4452a9adcd8ca8e36ac Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 10 Feb 2020 22:11:28 +0100
Subject: [PATCH 0832/2300] version up

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 1140f1a6..81b0886c 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -9,7 +9,7 @@ add_deb_to_apt_repo=0
 
 TARGET_DEB_NAME='buster'
 TARGET_DEB_VER='10'
-VESTA_VER='0.9.8-26-4'
+VESTA_VER='0.9.8-26-5'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1

From 88d149ac9a8899b61d3ef1870065100d0dac7616 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 10 Feb 2020 23:17:57 +0100
Subject: [PATCH 0833/2300] Update v-migrate-site-to-https

---
 src/deb/for-download/tools/v-migrate-site-to-https | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/deb/for-download/tools/v-migrate-site-to-https b/src/deb/for-download/tools/v-migrate-site-to-https
index ede8f926..cba3b7d7 100644
--- a/src/deb/for-download/tools/v-migrate-site-to-https
+++ b/src/deb/for-download/tools/v-migrate-site-to-https
@@ -49,6 +49,11 @@ fi
 
 if [ $IT_IS_WP -eq 1 ]; then
     FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    if [ -z "FROM_DATABASE_NAME" ]; then
+        sed -i "s|('|( '|g" $FROM_CONFIG_FILE_FULL_PATH
+        sed -i "s|');|' );|g" $FROM_CONFIG_FILE_FULL_PATH
+        FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    fi
     FROM_DATABASE_USERNAME=$(grep 'DB_USER' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
     FROM_DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
 fi

From d35f1908db53c51f98a1d2e6c2b05ad5dbcbcb60 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 10 Feb 2020 23:18:53 +0100
Subject: [PATCH 0834/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 2efc285e..1eaf0800 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -66,6 +66,12 @@ fi
 
 if [ $IT_IS_WP -eq 1 ]; then
     FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    if [ -z "FROM_DATABASE_NAME" ]; then
+        sed -i "s|('|( '|g" $FROM_CONFIG_FILE_FULL_PATH
+        sed -i "s|');|' );|g" $FROM_CONFIG_FILE_FULL_PATH
+        FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    fi
+
     FROM_DATABASE_USERNAME=$(grep 'DB_USER' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
     FROM_DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
 fi

From 8dea5b43d3664f6aae2f8d4190fa6a10fb65ad05 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 16 Feb 2020 01:50:38 +0100
Subject: [PATCH 0835/2300] Update secure_login.php

---
 web/inc/secure_login.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index a13b5570..5c6c40d0 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -11,8 +11,8 @@ if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/set-ar.php') $
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/set-ar.php') $skip_login_url_check=1;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/get-ar.php') $skip_login_url_check=1;
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/get-ar.php') $skip_login_url_check=1;
-if (substr($_SERVER['SCRIPT_FILENAME'], 0, 28)=='/usr/local/vesta/web/custom/') $login_url_skip=1; // custom scripts like git webhooks
-if (substr($_SERVER['SCRIPT_FILENAME'], 0, 29)=='/usr/local/vesta/web//custom/') $login_url_skip=1;
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 28)=='/usr/local/vesta/web/custom/') $skip_login_url_check=1; // custom scripts like git webhooks
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 29)=='/usr/local/vesta/web//custom/') $skip_login_url_check=1;
 
 if (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/vesta/bin/') $skip_login_url_check=1; // allow executing v-* PHP scripts from bash
 if (substr($_SERVER['SCRIPT_FILENAME'], 0, 29)=='/usr/local/vesta/softaculous/') $skip_login_url_check=1; // allow softaculous

From 58bf77e8964cf6c3a58b42be84f598a4e1ccf460 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 19 Feb 2020 22:00:36 +0100
Subject: [PATCH 0836/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 3766d031..c4a26503 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1530,9 +1530,9 @@ if [ "$release" -eq 10 ]; then
   service php7.3-fpm restart
 fi
 
-echo "=== Patching rcube_vcard.php"
-wget -nv https://c.myvestacp.com/tools/patches/rcube_vcard.patch -O /root/rcube_vcard.patch
-patch /usr/share/roundcube/program/lib/Roundcube/rcube_vcard.php < /root/rcube_vcard.patch
+# echo "=== Patching rcube_vcard.php"
+# wget -nv https://c.myvestacp.com/tools/patches/rcube_vcard.patch -O /root/rcube_vcard.patch
+# patch /usr/share/roundcube/program/lib/Roundcube/rcube_vcard.php < /root/rcube_vcard.patch
 
 # Comparing hostname and ip
 make_ssl=0

From 2e3f833f17d9ed028031ed15cee74f41867df055 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 20 Feb 2020 15:10:56 +0100
Subject: [PATCH 0837/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index c4a26503..63583731 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1613,9 +1613,9 @@ crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -e
 echo -e "Congratulations, you have just successfully installed \
 Vesta Control Panel
 
-    https://$ip:$port/$secretquery
-    username: admin
-    password: $vpass
+https://$ip:$port/$secretquery
+username: admin
+password: $vpass
 
 We hope that you enjoy your installation of Vesta. Please \
 feel free to contact us anytime if you have any questions.

From cbed4fe37de80424b61e1f2568d268ad7a58593a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 20 Feb 2020 15:33:19 +0100
Subject: [PATCH 0838/2300] force-https-webmail-phpmyadmin tpl

---
 .../nginx/force-https-webmail-phpmyadmin.stpl | 62 +++++++++++++++++++
 .../nginx/force-https-webmail-phpmyadmin.tpl  |  8 +++
 2 files changed, 70 insertions(+)
 create mode 100644 install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
 create mode 100644 install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl

diff --git a/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
new file mode 100644
index 00000000..4fadbbfc
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}

From c4a644bd9ab9d991b4bda47c605193873128f874 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 21 Feb 2020 13:10:40 +0100
Subject: [PATCH 0839/2300] Introducing KEEP_N_FTP_BACKUPS

---
 bin/v-backup-user | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index f43277ac..054a7049 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -645,6 +645,11 @@ ftp_backup() {
         BACKUPS=1
         echo "=== Set BACKUPS=1"
     fi
+    if [ ! -z "$KEEP_N_FTP_BACKUPS" ]; then
+        TEMP_BACKUPS=$BACKUPS
+        BACKUPS=$KEEP_N_FTP_BACKUPS
+        echo "=== Set BACKUPS=$KEEP_N_FTP_BACKUPS"
+    fi
     backups_count=$(echo "$backup_list" |wc -l)
     if [ "$backups_count" -ge "$BACKUPS" ]; then
         backups_rm_number=$((backups_count - BACKUPS + 1))
@@ -663,6 +668,10 @@ ftp_backup() {
         BACKUPS=$TEMP_BACKUPS
         echo "=== Bringing back old value BACKUPS=$BACKUPS"
     fi
+    if [ ! -z "$KEEP_N_FTP_BACKUPS" ]; then
+        BACKUPS=$TEMP_BACKUPS
+        echo "=== Bringing back old value BACKUPS=$BACKUPS"
+    fi
 
     # Uploading backup archive
     if [ "$localbackup" = 'yes' ]; then
@@ -810,6 +819,11 @@ sftp_backup() {
         BACKUPS=1
         echo "=== Set BACKUPS=1"
     fi
+    if [ ! -z "$KEEP_N_FTP_BACKUPS" ]; then
+        TEMP_BACKUPS=$BACKUPS
+        BACKUPS=$KEEP_N_FTP_BACKUPS
+        echo "=== Set BACKUPS=$KEEP_N_FTP_BACKUPS"
+    fi
     if [ "$backups_count" -ge "$BACKUPS" ]; then
         backups_rm_number=$((backups_count - BACKUPS + 1))
         for backup in $(echo "$backup_list" |head -n $backups_rm_number); do
@@ -827,6 +841,10 @@ sftp_backup() {
         BACKUPS=$TEMP_BACKUPS
         echo "=== Bringing back old value BACKUPS=$BACKUPS"
     fi
+    if [ ! -z "$KEEP_N_FTP_BACKUPS" ]; then
+        BACKUPS=$TEMP_BACKUPS
+        echo "=== Bringing back old value BACKUPS=$BACKUPS"
+    fi
 
     # Uploading backup archive
     echo "$(date "+%F %T") Uploading $user.$backup_new_date.tar"|tee -a $BACKUP/$user.log

From fe9d6c1c631647e6cea0a73bafaf9ad942d2dc8b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 21 Feb 2020 14:19:15 +0100
Subject: [PATCH 0840/2300] Update secure_login.php

---
 web/inc/secure_login.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 5c6c40d0..55b17e55 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -1,6 +1,9 @@
 <?php
 
 $skip_login_url_check=0;
+
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/inc/mail-wrapper.php') $skip_login_url_check=1; // it can be executed only from cli
+
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/index.php') $skip_login_url_check=1; // it's accessible only from localhost
 if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/index.php') $skip_login_url_check=1;
 

From 78b227d775ab3ba3228f6e12d4650cd9cf99ddc3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 21 Feb 2020 15:01:17 +0100
Subject: [PATCH 0841/2300] Introducing NOTIFY_ADMIN_FULL_BACKUP

---
 bin/v-backup-users | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index df9cf6ee..db5ae147 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -26,12 +26,18 @@ log=$VESTA/log/backup.log
 
 $BIN/v-check-vesta-license >/dev/null
 
+if [ ! -z "$NOTIFY_ADMIN_FULL_BACKUP" ]; then
+    mv $log $log-`date +"%Y-%m-%d--%H:%M:%S"`
+    touch $log
+fi
+
 # Auto-repair all databases before backuping all accounts
 nice -n 19 ionice -c 3 mysqlrepair --all-databases --check --auto-repair >> $log 2>&1
 
 if [ -z "$BACKUP_SYSTEM" ]; then
     exit
 fi
+FINAL_STATUS='OK'
 i_am_in_backup_all_users=1
 for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
     if [ ! -f "$VESTA/data/users/$user/user.conf" ]; then
@@ -45,11 +51,19 @@ for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
         echo -e "--------------------------------\n" >> $log
         i_am_in_backup_all_users=0
         nice -n 19 ionice -c 3 $BIN/v-backup-user $user >> $log 2>&1
+        STATUS=$?
+        if [ $STATUS -ne 0 ]; then
+            FINAL_STATUS='CONTAINS ERRORS !!!'
+        fi
         i_am_in_backup_all_users=1
         echo -e "\n--------------------------------\n\n" >> $log
     fi
 done
 
+if [ ! -z "$NOTIFY_ADMIN_FULL_BACKUP" ]; then
+    cat $log |$SENDMAIL -s "Full backup report; status=$FINAL_STATUS" $NOTIFY_ADMIN_FULL_BACKUP 'yes'
+fi
+
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#

From 55aa50eb0c4163c1138d5e69e6d80f0429b1875d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 21 Feb 2020 15:03:07 +0100
Subject: [PATCH 0842/2300] Version up

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 41001021..aa524057 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-5
+vesta-0.9.8-26-6

From e556f672b162bc3a819e8371fe688005750a8d0c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 21 Feb 2020 15:03:49 +0100
Subject: [PATCH 0843/2300] Version up

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 81b0886c..796c12a9 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -9,7 +9,7 @@ add_deb_to_apt_repo=0
 
 TARGET_DEB_NAME='buster'
 TARGET_DEB_VER='10'
-VESTA_VER='0.9.8-26-5'
+VESTA_VER='0.9.8-26-6'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1

From b98cdf75fe407b8b0ac8b11ff6e3bffdd50ea9fe Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 21 Feb 2020 15:04:30 +0100
Subject: [PATCH 0844/2300] Version up

---
 src/deb/vesta/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 638399fb..41bf6dc8 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-26-5
+Version: 0.9.8-26-6
 Section: admin
 Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
 Homepage: http://myvestacp.com

From 79e9871abd834c36a3d2aaa4aa028b873b0bfd4c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 21 Feb 2020 15:12:24 +0100
Subject: [PATCH 0845/2300] Update v-backup-users

---
 bin/v-backup-users | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index db5ae147..be90797b 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -61,7 +61,7 @@ for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
 done
 
 if [ ! -z "$NOTIFY_ADMIN_FULL_BACKUP" ]; then
-    cat $log |$SENDMAIL -s "Full backup report; status=$FINAL_STATUS" $NOTIFY_ADMIN_FULL_BACKUP 'yes'
+    cat $log |$SENDMAIL -s "Full backup report for $HOSTNAME; status=$FINAL_STATUS" "$NOTIFY_ADMIN_FULL_BACKUP" 'yes'
 fi
 
 #----------------------------------------------------------#

From 57ee689651df800c0d863fb1afe9e1a4bba19598 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 24 Feb 2020 19:34:38 +0100
Subject: [PATCH 0846/2300] Update main.sh

---
 func/main.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index 8c46895c..ba78830a 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -183,7 +183,8 @@ is_type_valid() {
 is_backup_enabled() {
     BACKUPS=$(grep "^BACKUPS=" $USER_DATA/user.conf | cut -f2 -d \')
     if [ -z "$BACKUPS" ] || [[ "$BACKUPS" -le '0' ]]; then
-        check_result $E_DISABLED "user backup is disabled"
+        check_result 0 "user backup is disabled"
+        exit 0
     fi
 }
 

From 16f5b0c117e8f91ad34a1f622bed6b738cbd5450 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 24 Feb 2020 19:48:22 +0100
Subject: [PATCH 0847/2300] NOTIFY_ADMIN_FULL_BACKUP2

---
 bin/v-backup-users | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index be90797b..9987b737 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -63,6 +63,9 @@ done
 if [ ! -z "$NOTIFY_ADMIN_FULL_BACKUP" ]; then
     cat $log |$SENDMAIL -s "Full backup report for $HOSTNAME; status=$FINAL_STATUS" "$NOTIFY_ADMIN_FULL_BACKUP" 'yes'
 fi
+if [ ! -z "$NOTIFY_ADMIN_FULL_BACKUP2" ]; then
+    cat $log |$SENDMAIL -s "Full backup report for $HOSTNAME; status=$FINAL_STATUS" "$NOTIFY_ADMIN_FULL_BACKUP2" 'yes'
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 50a38e8823850e1438292455fe216127c3075527 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 29 Feb 2020 01:35:32 +0100
Subject: [PATCH 0848/2300] Ensure apache2 mpm_event

---
 src/deb/for-download/tools/multi-php-install.sh | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 2d8658c7..6316f3b8 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -223,3 +223,17 @@ fi
 
 apt update
 apt upgrade -y
+
+if [ $debian_version -eq 10 ]; then
+    a2dismod ruid2
+    a2dismod suexec
+    a2dismod php5.6
+    a2dismod php7.0
+    a2dismod php7.1
+    a2dismod php7.2
+    a2dismod php7.3
+    a2dismod php7.4
+    a2dismod mpm_prefork
+    a2enmod mpm_event
+    service apache2 restart
+fi

From 7c440d9ee7f11c10833c9d94b6b087717ebb05a9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 5 Mar 2020 09:37:13 +0100
Subject: [PATCH 0849/2300] Update v-migrate-site-to-https

---
 .../tools/v-migrate-site-to-https             | 22 +++++++++++--------
 1 file changed, 13 insertions(+), 9 deletions(-)

diff --git a/src/deb/for-download/tools/v-migrate-site-to-https b/src/deb/for-download/tools/v-migrate-site-to-https
index cba3b7d7..517976ee 100644
--- a/src/deb/for-download/tools/v-migrate-site-to-https
+++ b/src/deb/for-download/tools/v-migrate-site-to-https
@@ -48,14 +48,18 @@ if [ -f "$FROM_FOLDER/wp-config.php" ]; then
 fi
 
 if [ $IT_IS_WP -eq 1 ]; then
-    FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
-    if [ -z "FROM_DATABASE_NAME" ]; then
-        sed -i "s|('|( '|g" $FROM_CONFIG_FILE_FULL_PATH
-        sed -i "s|');|' );|g" $FROM_CONFIG_FILE_FULL_PATH
-        FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    FROM_CONFIG_FILE_FULL_PATH_BACKUP="${FROM_CONFIG_FILE_FULL_PATH}_backup"
+    cp $FROM_CONFIG_FILE_FULL_PATH $FROM_CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|//.*$||g" $FROM_CONFIG_FILE_FULL_PATH_BACKUP
+    if [ -z "$FROM_DATABASE_NAME" ]; then
+        sed -i "s|('|( '|g" $FROM_CONFIG_FILE_FULL_PATH_BACKUP
+        sed -i "s|');|' );|g" $FROM_CONFIG_FILE_FULL_PATH_BACKUP
+        FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
     fi
-    FROM_DATABASE_USERNAME=$(grep 'DB_USER' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
-    FROM_DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+
+    FROM_DATABASE_USERNAME=$(grep 'DB_USER' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    FROM_DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    rm $FROM_CONFIG_FILE_FULL_PATH_BACKUP
 fi
 if [ $# -ge 2 ]; then
     if [ ! -z "$2" ]; then
@@ -126,11 +130,11 @@ echo "FROM_REPLACE2 = $FROM_REPLACE2"
 echo "TO_REPLACE2   = $TO_REPLACE2"
 echo "----"
 echo "FROM_DOMAIN = $FROM_DOMAIN"
-echo "FROM_USER = $FROM_USER"
+echo "FROM_USER   = $FROM_USER"
 echo "FROM_FOLDER = $FROM_FOLDER"
 echo "IT_IS_WP = $IT_IS_WP"
 echo "FROM_CONFIG_FILE_FULL_PATH = $FROM_CONFIG_FILE_FULL_PATH"
-echo "FROM_DATABASE_NAME = $FROM_DATABASE_NAME"
+echo "FROM_DATABASE_NAME     = $FROM_DATABASE_NAME"
 echo "FROM_DATABASE_USERNAME = $FROM_DATABASE_USERNAME"
 echo "FROM_DATABASE_PASSWORD = $FROM_DATABASE_PASSWORD"
 echo "==============================================================================="

From e3af159de44ae5a0b3b10d4566204619b631a3f7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 5 Mar 2020 09:37:59 +0100
Subject: [PATCH 0850/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 41 ++++++++++++----------
 1 file changed, 22 insertions(+), 19 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 1eaf0800..b6dd828e 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -65,15 +65,18 @@ if [ -f "$FROM_FOLDER/wp-config.php" ]; then
 fi
 
 if [ $IT_IS_WP -eq 1 ]; then
-    FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
-    if [ -z "FROM_DATABASE_NAME" ]; then
-        sed -i "s|('|( '|g" $FROM_CONFIG_FILE_FULL_PATH
-        sed -i "s|');|' );|g" $FROM_CONFIG_FILE_FULL_PATH
-        FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    FROM_CONFIG_FILE_FULL_PATH_BACKUP="${FROM_CONFIG_FILE_FULL_PATH}_backup"
+    cp $FROM_CONFIG_FILE_FULL_PATH $FROM_CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|//.*$||g" $FROM_CONFIG_FILE_FULL_PATH_BACKUP
+    if [ -z "$FROM_DATABASE_NAME" ]; then
+        sed -i "s|('|( '|g" $FROM_CONFIG_FILE_FULL_PATH_BACKUP
+        sed -i "s|');|' );|g" $FROM_CONFIG_FILE_FULL_PATH_BACKUP
+        FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
     fi
 
-    FROM_DATABASE_USERNAME=$(grep 'DB_USER' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
-    FROM_DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $FROM_CONFIG_FILE_FULL_PATH | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    FROM_DATABASE_USERNAME=$(grep 'DB_USER' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    FROM_DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    rm $FROM_CONFIG_FILE_FULL_PATH_BACKUP
 fi
 if [ $# -ge 3 ]; then
     if [ ! -z "$3" ]; then
@@ -91,15 +94,15 @@ if [ $# -ge 5 ]; then
     fi
 fi
 if [ -z "$FROM_DATABASE_NAME" ]; then
-    echo "Error: FROM_DATABASE_NAME $FROM_DATABASE_NAME is empty"
+    echo "Error: FROM_DATABASE_NAME is empty"
     exit 6
 fi
 if [ -z "$FROM_DATABASE_USERNAME" ]; then
-    echo "Error: FROM_DATABASE_USERNAME $FROM_DATABASE_USERNAME is empty"
+    echo "Error: FROM_DATABASE_USERNAME is empty"
     exit 7
 fi
 if [ -z "$FROM_DATABASE_PASSWORD" ]; then
-    echo "Error: FROM_DATABASE_PASSWORD $FROM_DATABASE_PASSWORD is empty"
+    echo "Error: FROM_DATABASE_PASSWORD is empty"
     exit 8
 fi
 
@@ -225,24 +228,24 @@ fi
 
 echo "==============================================================================="
 echo "FROM_DOMAIN = $FROM_DOMAIN"
+echo "TO_DOMAIN   = $TO_DOMAIN"
 echo "FROM_USER = $FROM_USER"
-echo "TO_DOMAIN = $TO_DOMAIN"
-echo "TO_USER = $TO_USER"
+echo "TO_USER   = $TO_USER"
 echo "FROM_FOLDER = $FROM_FOLDER"
-echo "TO_FOLDER = $TO_FOLDER"
+echo "TO_FOLDER   = $TO_FOLDER"
 echo "IT_IS_WP = $IT_IS_WP"
 echo "FROM_CONFIG_FILE_FULL_PATH = $FROM_CONFIG_FILE_FULL_PATH"
-echo "TO_CONFIG_FILE_FULL_PATH = $TO_CONFIG_FILE_FULL_PATH"
+echo "TO_CONFIG_FILE_FULL_PATH   = $TO_CONFIG_FILE_FULL_PATH"
 echo "FROM_DATABASE_NAME = $FROM_DATABASE_NAME"
+echo "TO_DATABASE_NAME   = $TO_DATABASE_NAME"
 echo "FROM_DATABASE_USERNAME = $FROM_DATABASE_USERNAME"
+echo "TO_DATABASE_USERNAME   = $TO_DATABASE_USERNAME"
 echo "FROM_DATABASE_PASSWORD = $FROM_DATABASE_PASSWORD"
+echo "TO_DATABASE_PASSWORD   = $TO_DATABASE_PASSWORD"
 echo "FROM_DATABASE_NAME_WITHOUT_PREFIX = $FROM_DATABASE_NAME_WITHOUT_PREFIX"
+echo "TO_DATABASE_NAME_WITHOUT_PREFIX   = $TO_DATABASE_NAME_WITHOUT_PREFIX"
 echo "FROM_DATABASE_USERNAME_WITHOUT_PREFIX = $FROM_DATABASE_USERNAME_WITHOUT_PREFIX"
-echo "TO_DATABASE_NAME = $TO_DATABASE_NAME"
-echo "TO_DATABASE_USERNAME = $TO_DATABASE_USERNAME"
-echo "TO_DATABASE_PASSWORD = $TO_DATABASE_PASSWORD"
-echo "TO_DATABASE_NAME_WITHOUT_PREFIX = $TO_DATABASE_NAME_WITHOUT_PREFIX"
-echo "TO_DATABASE_USERNAME_WITHOUT_PREFIX = $TO_DATABASE_USERNAME_WITHOUT_PREFIX"
+echo "TO_DATABASE_USERNAME_WITHOUT_PREFIX   = $TO_DATABASE_USERNAME_WITHOUT_PREFIX"
 echo "==============================================================================="
 read -p "=== Press Enter to continue ==="
 

From 5b9625d0c86902ec6eeede6fb76199c5df17603e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 5 Mar 2020 09:40:20 +0100
Subject: [PATCH 0851/2300] Update v-migrate-site-to-https

---
 src/deb/for-download/tools/v-migrate-site-to-https | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/v-migrate-site-to-https b/src/deb/for-download/tools/v-migrate-site-to-https
index 517976ee..e445fd27 100644
--- a/src/deb/for-download/tools/v-migrate-site-to-https
+++ b/src/deb/for-download/tools/v-migrate-site-to-https
@@ -77,15 +77,15 @@ if [ $# -ge 4 ]; then
     fi
 fi
 if [ -z "$FROM_DATABASE_NAME" ]; then
-    echo "Error: DATABASE_NAME $FROM_DATABASE_NAME is empty"
+    echo "Error: DATABASE_NAME is empty"
     exit 6
 fi
 if [ -z "$FROM_DATABASE_USERNAME" ]; then
-    echo "Error: DATABASE_USERNAME $FROM_DATABASE_USERNAME is empty"
+    echo "Error: DATABASE_USERNAME is empty"
     exit 7
 fi
 if [ -z "$FROM_DATABASE_PASSWORD" ]; then
-    echo "Error: DATABASE_PASSWORD $FROM_DATABASE_PASSWORD is empty"
+    echo "Error: DATABASE_PASSWORD is empty"
     exit 8
 fi
 

From 01c3a9c9b65f500512201414481c3f24ce430c18 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 6 Mar 2020 20:39:53 +0100
Subject: [PATCH 0852/2300] timeout in v-list-sys-web-status

---
 bin/v-list-sys-web-status | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bin/v-list-sys-web-status b/bin/v-list-sys-web-status
index eb58c81c..aaa33e4c 100755
--- a/bin/v-list-sys-web-status
+++ b/bin/v-list-sys-web-status
@@ -28,17 +28,17 @@ fi
 # Displaying proxy status
 if [ "$PROXY_SYSTEM" = 'nginx' ]; then
     echo "<h2>$PROXY_SYSTEM STATUS</h2>"| tr '[:lower:]' '[:upper:]'
-    wget -qO-  http://localhost:8084/
+    curl -fsSL --max-time 3 http://localhost:8084/
     echo "<br><br><br>"
 fi
 
 # Displaying web server status
 echo "<h2>$WEB_SYSTEM STATUS</h2>"| tr '[:lower:]' '[:upper:]'
 if [ "$WEB_SYSTEM" != 'nginx' ]; then
-    wget -qO-  http://localhost:8081/server-status/ |\
+    curl -fsSL --max-time 3 http://localhost:8081/server-status/ |\
         egrep -v "html|DOCTYPE|h1>|title|head"
 else
-    wget -qO-  http://localhost:8084/
+    curl -fsSL --max-time 3 http://localhost:8084/
 fi
 
 

From 84c22518e5ff991cb353cbf2ec784fedd9324968 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 11 Mar 2020 15:16:58 +0100
Subject: [PATCH 0853/2300] Trying to avoid Let's Encrypt domain validation
 timeout

---
 bin/v-add-letsencrypt-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 59d51c61..3c0fbc82 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -208,7 +208,7 @@ for auth in $authz; do
         if [ "$i" -gt 10 ]; then
             check_result $E_CONNECT "Let's Encrypt domain validation timeout"
         fi
-        sleep 1
+        sleep 2
     done
     if [ "$validation" = 'invalid' ]; then
         check_result $E_CONNECT "Let's Encrypt domain verification failed"

From cd01273ae6081b2afc9f44581e0244a022d24d66 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 18 Mar 2020 16:22:35 +0100
Subject: [PATCH 0854/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index b6dd828e..398c3e54 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -281,10 +281,13 @@ echo "=== Chowning to  $TO_USER:$TO_USER in folder $TO_FOLDER"
 chown -R $TO_USER:$TO_USER $TO_FOLDER
 
 echo "=== Replacing $FROM_DATABASE_NAME to $TO_DATABASE_NAME in $TO_CONFIG_FILE_FULL_PATH"
+sed -i "s|'$FROM_DATABASE_NAME'|'$TO_DATABASE_NAME'|g" $TO_CONFIG_FILE_FULL_PATH
 sed -i "s|$FROM_DATABASE_NAME|$TO_DATABASE_NAME|g" $TO_CONFIG_FILE_FULL_PATH
 echo "=== Replacing $FROM_DATABASE_USERNAME to $TO_DATABASE_USERNAME in $TO_CONFIG_FILE_FULL_PATH"
+sed -i "s|'$FROM_DATABASE_USERNAME'|'$TO_DATABASE_USERNAME'|g" $TO_CONFIG_FILE_FULL_PATH
 sed -i "s|$FROM_DATABASE_USERNAME|$TO_DATABASE_USERNAME|g" $TO_CONFIG_FILE_FULL_PATH
 echo "=== Replacing $FROM_DATABASE_PASSWORD to $TO_DATABASE_PASSWORD in $TO_CONFIG_FILE_FULL_PATH"
+sed -i "s|'$FROM_DATABASE_PASSWORD'|'$TO_DATABASE_PASSWORD'|g" $TO_CONFIG_FILE_FULL_PATH
 sed -i "s|$FROM_DATABASE_PASSWORD|$TO_DATABASE_PASSWORD|g" $TO_CONFIG_FILE_FULL_PATH
 
 echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in folder $TO_FOLDER"

From 8da8d0b83383f0aaea245617dd6fa41e6fe63997 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 18 Mar 2020 16:40:00 +0100
Subject: [PATCH 0855/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 398c3e54..66aaa782 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -282,13 +282,19 @@ chown -R $TO_USER:$TO_USER $TO_FOLDER
 
 echo "=== Replacing $FROM_DATABASE_NAME to $TO_DATABASE_NAME in $TO_CONFIG_FILE_FULL_PATH"
 sed -i "s|'$FROM_DATABASE_NAME'|'$TO_DATABASE_NAME'|g" $TO_CONFIG_FILE_FULL_PATH
-sed -i "s|$FROM_DATABASE_NAME|$TO_DATABASE_NAME|g" $TO_CONFIG_FILE_FULL_PATH
+sed -i "s|\"$FROM_DATABASE_NAME\"|\"$TO_DATABASE_NAME\"|g" $TO_CONFIG_FILE_FULL_PATH
+sed -i "s|=$FROM_DATABASE_NAME$|=$TO_DATABASE_NAME|g" $TO_CONFIG_FILE_FULL_PATH
+sed -i "s|= $FROM_DATABASE_NAME$|= $TO_DATABASE_NAME|g" $TO_CONFIG_FILE_FULL_PATH
 echo "=== Replacing $FROM_DATABASE_USERNAME to $TO_DATABASE_USERNAME in $TO_CONFIG_FILE_FULL_PATH"
 sed -i "s|'$FROM_DATABASE_USERNAME'|'$TO_DATABASE_USERNAME'|g" $TO_CONFIG_FILE_FULL_PATH
-sed -i "s|$FROM_DATABASE_USERNAME|$TO_DATABASE_USERNAME|g" $TO_CONFIG_FILE_FULL_PATH
+sed -i "s|\"$FROM_DATABASE_USERNAME\"|\"$TO_DATABASE_USERNAME\"|g" $TO_CONFIG_FILE_FULL_PATH
+sed -i "s|=$FROM_DATABASE_USERNAME$|=$TO_DATABASE_USERNAME|g" $TO_CONFIG_FILE_FULL_PATH
+sed -i "s|= $FROM_DATABASE_USERNAME$|= $TO_DATABASE_USERNAME|g" $TO_CONFIG_FILE_FULL_PATH
 echo "=== Replacing $FROM_DATABASE_PASSWORD to $TO_DATABASE_PASSWORD in $TO_CONFIG_FILE_FULL_PATH"
 sed -i "s|'$FROM_DATABASE_PASSWORD'|'$TO_DATABASE_PASSWORD'|g" $TO_CONFIG_FILE_FULL_PATH
-sed -i "s|$FROM_DATABASE_PASSWORD|$TO_DATABASE_PASSWORD|g" $TO_CONFIG_FILE_FULL_PATH
+sed -i "s|\"$FROM_DATABASE_PASSWORD\"|\"$TO_DATABASE_PASSWORD\"|g" $TO_CONFIG_FILE_FULL_PATH
+sed -i "s|=$FROM_DATABASE_PASSWORD$|=$TO_DATABASE_PASSWORD|g" $TO_CONFIG_FILE_FULL_PATH
+sed -i "s|= $FROM_DATABASE_PASSWORD$|= $TO_DATABASE_PASSWORD|g" $TO_CONFIG_FILE_FULL_PATH
 
 echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in folder $TO_FOLDER"
 grep -rl "$FROM_DOMAIN" $TO_FOLDER | xargs sed -i "s#$FROM_DOMAIN#$TO_DOMAIN#g"

From 07b739382dc5034ccd0ef931ba15c87cd3920df7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 18 Mar 2020 19:19:42 +0100
Subject: [PATCH 0856/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 66aaa782..72405cce 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -138,19 +138,19 @@ fi
 
 TO_CONFIG_FILE_FULL_PATH="$TO_FOLDER/$FROM_CONFIG_FILE"
 
-if [ $# -ge 7 ]; then
-    if [ ! -z "$7" ]; then
-        TO_DATABASE_NAME=$7
-    fi
-fi
 if [ $# -ge 8 ]; then
     if [ ! -z "$8" ]; then
-        TO_DATABASE_USERNAME=$8
+        TO_DATABASE_NAME=$8
     fi
 fi
 if [ $# -ge 9 ]; then
     if [ ! -z "$9" ]; then
-        TO_DATABASE_PASSWORD=$9
+        TO_DATABASE_USERNAME=$9
+    fi
+fi
+if [ $# -ge 10 ]; then
+    if [ ! -z "${10}" ]; then
+        TO_DATABASE_PASSWORD=${10}
     fi
 fi
 

From d93935fb362b7862e864df843afc2c2d1fe9c401 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 18 Mar 2020 21:20:23 +0100
Subject: [PATCH 0857/2300] Second try to avoid Let's Encrypt domain validation
 timeout

---
 bin/v-add-letsencrypt-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 3c0fbc82..0e9438ed 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -208,7 +208,7 @@ for auth in $authz; do
         if [ "$i" -gt 10 ]; then
             check_result $E_CONNECT "Let's Encrypt domain validation timeout"
         fi
-        sleep 2
+        sleep $((i*2))
     done
     if [ "$validation" = 'invalid' ]; then
         check_result $E_CONNECT "Let's Encrypt domain verification failed"

From d6af7f06ece3bff9399cd496d099230daeb0c3e6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 18 Mar 2020 21:21:28 +0100
Subject: [PATCH 0858/2300] version  up

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index aa524057..eabf8b7c 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-6
+vesta-0.9.8-26-7

From 56fc89e2af18897a0048eeb5c9eba79dbccf348e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 18 Mar 2020 21:22:13 +0100
Subject: [PATCH 0859/2300] version up

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 796c12a9..a37d69fe 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -9,7 +9,7 @@ add_deb_to_apt_repo=0
 
 TARGET_DEB_NAME='buster'
 TARGET_DEB_VER='10'
-VESTA_VER='0.9.8-26-6'
+VESTA_VER='0.9.8-26-7'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1

From db726ad32f830e74b257826184ee7ca842073373 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 18 Mar 2020 21:23:01 +0100
Subject: [PATCH 0860/2300] version up

---
 src/deb/vesta/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 41bf6dc8..d19710b1 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-26-6
+Version: 0.9.8-26-7
 Section: admin
 Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
 Homepage: http://myvestacp.com

From a5712542d7315f45abf6df275744889437393c30 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Mar 2020 01:21:57 +0100
Subject: [PATCH 0861/2300] Temporary fix for parsing backup conf

---
 bin/v-backup-user       | 3 ++-
 bin/v-list-user-backups | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index f9fcf6f5..646e9812 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -479,7 +479,8 @@ if [ "$USER" != '*' ]; then
         exclusion=$(echo "$USER" |tr ',' '\n' |grep "^$udir$")
         if [ -z "$exclusion" ]; then
             ((i ++))
-            udir_list="$udir_list $udir"
+            udir_str=$(echo "$udir" |sed -e "s|'|\\\'|g")
+            udir_list="$udir_list $udir_str"
             echo -e "$(date "+%F %T") adding $udir" |tee -a $BACKUP/$user.log
 
             # Backup files and dirs
diff --git a/bin/v-list-user-backups b/bin/v-list-user-backups
index 813ee687..7e7e284e 100755
--- a/bin/v-list-user-backups
+++ b/bin/v-list-user-backups
@@ -22,7 +22,7 @@ json_list() {
     i=1
     objects=$(grep BACKUP $USER_DATA/backup.conf |wc -l)
     echo "{"
-    while read str; do
+    while read -r str; do
         eval $str
         echo -n '    "'$BACKUP'": {
         "TYPE": "'$TYPE'",

From 3472f24a51028e5d50f95a122a70704341ee6c28 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 23 Mar 2020 02:04:21 +0100
Subject: [PATCH 0862/2300] version up

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index eabf8b7c..59ba8557 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-7
+vesta-0.9.8-26-8

From 7be91af81af94080d55244bfc00bffbb504cdd1c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 23 Mar 2020 02:05:08 +0100
Subject: [PATCH 0863/2300] version up

---
 src/deb/vesta/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index d19710b1..845dcd01 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-26-7
+Version: 0.9.8-26-8
 Section: admin
 Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
 Homepage: http://myvestacp.com

From 961e2f61dc6073b638e9775cd7860fd120f4f962 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 23 Mar 2020 02:05:49 +0100
Subject: [PATCH 0864/2300] version up

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index a37d69fe..be99dce7 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -9,7 +9,7 @@ add_deb_to_apt_repo=0
 
 TARGET_DEB_NAME='buster'
 TARGET_DEB_VER='10'
-VESTA_VER='0.9.8-26-7'
+VESTA_VER='0.9.8-26-8'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1

From c3c4de43d6701560f604ca7996f717b08e3d7d1d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Mar 2020 17:28:55 +0100
Subject: [PATCH 0865/2300] Preventing manipulation with $_SERVER['HTTP_HOST']

---
 web/reset/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/reset/index.php b/web/reset/index.php
index 842dd2f3..0b867090 100644
--- a/web/reset/index.php
+++ b/web/reset/index.php
@@ -30,7 +30,7 @@ if ((!empty($_POST['user'])) && (empty($_POST['code']))) {
         } else {
             $mailtext = __('GREETINGS');
         }
-        $mailtext .= __('PASSWORD_RESET_REQUEST',$_SERVER['HTTP_HOST'],$user,$rkey,$_SERVER['HTTP_HOST'],$user,$rkey);
+        $mailtext .= __('PASSWORD_RESET_REQUEST',$hostname,$user,$rkey,$hostname,$user,$rkey);
         if (!empty($rkey)) send_email($to, $subject, $mailtext, $from);
         unset($output);
     }

From c9844805a441a3213f9a8cc313f114241f103ec2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Mar 2020 19:31:42 +0100
Subject: [PATCH 0866/2300] Limiting /etc/sudoers for Ubuntu

---
 upd/limit_sudo.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/upd/limit_sudo.sh b/upd/limit_sudo.sh
index 4f4ac924..22572151 100755
--- a/upd/limit_sudo.sh
+++ b/upd/limit_sudo.sh
@@ -4,3 +4,5 @@ if [ -e "/etc/sudoers.d/admin" ]; then
     sed -i "s/admin.*ALL=(ALL).*/# sudo is limited to vesta scripts/" \
         /etc/sudoers.d/admin
 fi
+
+sed -i "s/%admin.*ALL=(ALL).*/# sudo is limited to vesta scripts/" /etc/sudoers

From 00e1f46276a5bb901c89d56f5a1d3e19d519eeb9 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Mon, 23 Mar 2020 19:34:39 +0100
Subject: [PATCH 0867/2300] Limiting /etc/sudoers for Ubuntu

---
 install/vst-install-ubuntu.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 653f7fc1..21f645bd 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -688,6 +688,7 @@ chmod 755 /usr/bin/rssh
 mkdir -p /etc/sudoers.d
 cp -f $vestacp/sudo/admin /etc/sudoers.d/
 chmod 440 /etc/sudoers.d/admin
+sed -i "s/%admin.*ALL=(ALL).*/# sudo is limited to vesta scripts/" /etc/sudoers
 
 # Configuring system env
 echo "export VESTA='$VESTA'" > /etc/profile.d/vesta.sh

From e660b6b1a006495f978815cfd8dc62dac961edfb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 23 Mar 2020 20:03:09 +0100
Subject: [PATCH 0868/2300] Update latest.txt

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 59ba8557..58b9c7c3 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-8
+vesta-0.9.8-26-9

From 798fff5be2fd8c539b12d541c54964c2f644b596 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 23 Mar 2020 20:03:56 +0100
Subject: [PATCH 0869/2300] version up

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index be99dce7..2ce01cbc 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -9,7 +9,7 @@ add_deb_to_apt_repo=0
 
 TARGET_DEB_NAME='buster'
 TARGET_DEB_VER='10'
-VESTA_VER='0.9.8-26-8'
+VESTA_VER='0.9.8-26-9'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1

From d1b97d44931ac517464ca56ee592bb98d1ee8c71 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 23 Mar 2020 20:04:59 +0100
Subject: [PATCH 0870/2300] version up

---
 src/deb/vesta/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 845dcd01..0d8cd69f 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-26-8
+Version: 0.9.8-26-9
 Section: admin
 Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
 Homepage: http://myvestacp.com

From c915bff32eecbd29bc49275aaeeeeddecde1dc99 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 24 Mar 2020 20:40:47 +0100
Subject: [PATCH 0871/2300] Forbid changing root password

---
 bin/v-change-user-password | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-change-user-password b/bin/v-change-user-password
index 22a3d78f..a1b6a76f 100755
--- a/bin/v-change-user-password
+++ b/bin/v-change-user-password
@@ -22,6 +22,9 @@ source $VESTA/conf/vesta.conf
 #                    Verifications                         #
 #----------------------------------------------------------#
 
+if [ "$user" = "root" ]; then
+    check_result $E_FORBIDEN "Changing root password is forbiden"
+fi
 check_args '2' "$#" 'USER PASSWORD'
 is_format_valid 'user'
 is_object_valid 'user' 'USER' "$user"

From 58807feb80c02d7e39be27e5a4ff07bbb4f8b704 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 29 Mar 2020 18:13:22 +0200
Subject: [PATCH 0872/2300] Adding port to reset password link

---
 web/reset/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/reset/index.php b/web/reset/index.php
index 0b867090..e4a7608f 100644
--- a/web/reset/index.php
+++ b/web/reset/index.php
@@ -30,7 +30,7 @@ if ((!empty($_POST['user'])) && (empty($_POST['code']))) {
         } else {
             $mailtext = __('GREETINGS');
         }
-        $mailtext .= __('PASSWORD_RESET_REQUEST',$hostname,$user,$rkey,$hostname,$user,$rkey);
+        $mailtext .= __('PASSWORD_RESET_REQUEST',$hostname.":".$_SERVER['SERVER_PORT'],$user,$rkey,$hostname.":".$_SERVER['SERVER_PORT'],$user,$rkey);
         if (!empty($rkey)) send_email($to, $subject, $mailtext, $from);
         unset($output);
     }

From 6e97cdca78d8993309d66686d8920ce85978cbc2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 9 Apr 2020 13:22:50 +0200
Subject: [PATCH 0873/2300] Tweak for hostname FPM conf

---
 install/vst-install-debian.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 63583731..53deb120 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1440,6 +1440,8 @@ if [ "$release" -eq 10 ]; then
   if [ -f "/etc/php/7.3/fpm/pool.d/$servername.conf" ]; then
     sed -i "/^group =/c\group = www-data" /etc/php/7.3/fpm/pool.d/$servername.conf
     sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/7.3/fpm/pool.d/$servername.conf
+    sed -i "/request_terminate_timeout/c\request_terminate_timeout = 900s" /etc/php/7.3/fpm/pool.d/$servername.conf
+    sed -i "s|80M|800M|g" /etc/php/7.3/fpm/pool.d/$servername.conf
     service php7.3-fpm restart
     ln -s /var/lib/roundcube /var/lib/roundcube/webmail
     /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'no'

From c138961af88680ea74dbc9b4a2b63a77e5f4ca5a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 9 Apr 2020 13:27:11 +0200
Subject: [PATCH 0874/2300] Tweak for hostname FPM conf

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 53deb120..93fcdb5c 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1442,6 +1442,7 @@ if [ "$release" -eq 10 ]; then
     sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/7.3/fpm/pool.d/$servername.conf
     sed -i "/request_terminate_timeout/c\request_terminate_timeout = 900s" /etc/php/7.3/fpm/pool.d/$servername.conf
     sed -i "s|80M|800M|g" /etc/php/7.3/fpm/pool.d/$servername.conf
+    sed -i "s|256M|512M|g" /etc/php/7.3/fpm/pool.d/$servername.conf
     service php7.3-fpm restart
     ln -s /var/lib/roundcube /var/lib/roundcube/webmail
     /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'no'

From cc8a3e0c58a4656e1cf3b2701e12fde6784bea10 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Thu, 9 Apr 2020 20:53:27 +0200
Subject: [PATCH 0875/2300] Correcting FTP link in v-backup-user

---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 646e9812..4bb857ea 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -595,7 +595,7 @@ ftp_backup() {
     fi
 
     # Debug info
-    echo -e "$(date "+%F %T") Remote: ftp://$HOST$BPATH/$user.$backup_new_date.tar"
+    echo -e "$(date "+%F %T") Remote: ftp://$HOST/$BPATH/$user.$backup_new_date.tar"
 
     # Checking ftp connection
     fconn=$(ftpc)

From d2bf71d9b26cabad37ca19d8fafcde2e9c081d25 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 10 Apr 2020 00:28:17 +0200
Subject: [PATCH 0876/2300] Create v-normalize-restored-user

Normalize NS1, NS2 and IP of account that is backuped on other server and restored on this server.
After restoring, user will have DNS that contains NS1, NS2 and IP from original server
This script will put NS1, NS2 and IP of current server
---
 bin/v-normalize-restored-user | 89 +++++++++++++++++++++++++++++++++++
 1 file changed, 89 insertions(+)
 create mode 100644 bin/v-normalize-restored-user

diff --git a/bin/v-normalize-restored-user b/bin/v-normalize-restored-user
new file mode 100644
index 00000000..86e1f0b8
--- /dev/null
+++ b/bin/v-normalize-restored-user
@@ -0,0 +1,89 @@
+#!/bin/bash
+
+# info:
+# Normalize NS1, NS2 and IP of account that is backuped on other server and restored on this server.
+# After restoring, user will have DNS that contains NS1, NS2 and IP from original server
+# This script will put NS1, NS2 and IP of current server
+
+# options: user
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ] && [ "$whoami" != "admin" ] ; then
+    echo "You must be root or admin to execute this script";
+    exit 1;
+fi
+
+
+# Argument definition
+user=$1
+
+# Includes
+source $VESTA/func/main.sh
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'USER'
+is_format_valid 'user'
+is_object_valid 'user' 'USER' "$user"
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+source $VESTA/data/packages/default.pkg
+
+arrNS=(${NS//,/ })
+NEWNS1=${arrNS[0]}
+NEWNS2=${arrNS[1]}
+
+for domain in $(/usr/local/vesta/bin/v-list-web-domains $user plain |cut -f 1); do
+    if [ -f "/usr/local/vesta/data/users/$user/dns/$domain.conf" ]; then
+        NEWIPV4=$(v-list-dns-domain "$user" "$domain" | grep 'IP:' | awk '{print $2}')
+        res=$(grep "'www'" /usr/local/vesta/data/users/$user/dns/$domain.conf)
+        eval $res
+        OLDIPV4=$VALUE
+    fi
+    if [ ! -z "$NEWIPV4" ] && [ ! -z "$OLDIPV4" ]; then
+        break;
+    fi
+done
+
+
+source /usr/local/vesta/data/users/$user/user.conf
+arrNS=(${NS//,/ })
+OLDNS1=${arrNS[0]}
+OLDNS2=${arrNS[1]}
+
+echo "user = $user"
+echo "old ns1 = $OLDNS1"
+echo "old ns2 = $OLDNS2"
+echo "new ns1 = $NEWNS1"
+echo "new ns2 = $NEWNS2"
+echo "old ip = $OLDIPV4"
+echo "new ip = $NEWIPV4"
+
+find /home/$user/conf/dns/ -type f -exec sed -i "s#$OLDIPV4#$NEWIPV4#g" {} \;
+find /home/$user/conf/dns/ -type f -exec sed -i "s#$OLDNS1#$NEWNS1#g" {} \;
+find /home/$user/conf/dns/ -type f -exec sed -i "s#$OLDNS2#$NEWNS2#g" {} \;
+find /usr/local/vesta/data/users/$user/dns/ -type f -exec sed -i "s#$OLDIPV4#$NEWIPV4#g" {} \;
+find /usr/local/vesta/data/users/$user/dns/ -type f -exec sed -i "s#$OLDNS1#$NEWNS1#g" {} \;
+find /usr/local/vesta/data/users/$user/dns/ -type f -exec sed -i "s#$OLDNS2#$NEWNS2#g" {} \;
+sed -i "s#$OLDIPV4#$NEWIPV4#g" /usr/local/vesta/data/users/$user/dns.conf
+sed -i "s#$OLDNS1#$NEWNS1#g" /usr/local/vesta/data/users/$user/dns.conf
+sed -i "s#$OLDNS1#$NEWNS1#g" /usr/local/vesta/data/users/$user/user.conf
+sed -i "s#$OLDNS2#$NEWNS2#g" /usr/local/vesta/data/users/$user/user.conf
+service bind9 reload
+
+echo "Done!"
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 0bbcacc74f55de1563dd62520b3790f408b52c03 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 10 Apr 2020 23:41:02 +0200
Subject: [PATCH 0877/2300] ALLOW_MYSQL_REPAIR

---
 bin/v-backup-users | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index 9987b737..640c1916 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -17,6 +17,12 @@ source /etc/profile
 source $VESTA/func/main.sh
 source $VESTA/conf/vesta.conf
 
+ALLOW_MYSQL_REPAIR=1
+
+if [ $# -ge 1 ]; then
+    ALLOW_MYSQL_REPAIR=$1
+fi
+
 
 #----------------------------------------------------------#
 #                       Action                             #
@@ -32,7 +38,9 @@ if [ ! -z "$NOTIFY_ADMIN_FULL_BACKUP" ]; then
 fi
 
 # Auto-repair all databases before backuping all accounts
-nice -n 19 ionice -c 3 mysqlrepair --all-databases --check --auto-repair >> $log 2>&1
+if [ $ALLOW_MYSQL_REPAIR -eq 1 ]; then
+    nice -n 19 ionice -c 3 mysqlrepair --all-databases --check --auto-repair >> $log 2>&1
+fi
 
 if [ -z "$BACKUP_SYSTEM" ]; then
     exit

From e7dbb91b25ef5cc5c2bd2d529c3a77bd3b8fab5b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 11 Apr 2020 00:06:24 +0200
Subject: [PATCH 0878/2300] Update postinst

---
 src/deb/vesta/postinst | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 07499875..3121351e 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -23,8 +23,11 @@ if [ "$check_apt" -eq 1 ]; then
     echo "deb http://apt.myvestacp.com/$codename/ $codename vesta" > /etc/apt/sources.list.d/vesta.list
 fi
 
-
-check_cron=$(grep -c '6 sudo find /home/' /var/spool/cron/crontabs/root)
+if [ -f "/var/spool/cron/crontabs/root" ]; then
+    check_cron=$(grep -c '6 sudo find /home/' /var/spool/cron/crontabs/root)
+else
+    check_cron=0
+fi
 if [ "$check_cron" -eq 0 ]; then
     crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
 fi

From cfc46bb2a9555b76d805f514aabf883079a87f4d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sat, 11 Apr 2020 02:16:24 +0200
Subject: [PATCH 0879/2300] Importing system enviroment in
 v-change-user-password

Thanks to @ScIT-Raphael for discovering this bug
---
 bin/v-change-user-password | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-change-user-password b/bin/v-change-user-password
index a1b6a76f..30328641 100755
--- a/bin/v-change-user-password
+++ b/bin/v-change-user-password
@@ -13,6 +13,10 @@
 user=$1
 password=$2; HIDE=2
 
+# Importing system enviroment as we run this script
+# mostly by cron wich not read it by itself
+source /etc/profile
+
 # Includes
 source $VESTA/func/main.sh
 source $VESTA/conf/vesta.conf

From 37ef7ab3991845f3da10dc9d678f3c194046be40 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 11 Apr 2020 02:18:46 +0200
Subject: [PATCH 0880/2300] Version up

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 58b9c7c3..ae1a4159 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-9
+vesta-0.9.8-26-10

From 797f1d4595a8ea0b7368e47b35f8a5eec2083126 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 11 Apr 2020 02:19:38 +0200
Subject: [PATCH 0881/2300] Version up

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 2ce01cbc..f9037de5 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -9,7 +9,7 @@ add_deb_to_apt_repo=0
 
 TARGET_DEB_NAME='buster'
 TARGET_DEB_VER='10'
-VESTA_VER='0.9.8-26-9'
+VESTA_VER='0.9.8-26-10'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1

From 320859663959b995b92c97771991d3c2b7f67ee0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 11 Apr 2020 02:20:31 +0200
Subject: [PATCH 0882/2300] Version up

---
 src/deb/vesta/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 0d8cd69f..d2b5fb68 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-26-9
+Version: 0.9.8-26-10
 Section: admin
 Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
 Homepage: http://myvestacp.com

From 5f853a0ec1dd1609cdecb2b3d16198893c894314 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 20 Apr 2020 02:25:03 +0200
Subject: [PATCH 0883/2300] ALLOW_BACKUP_ANYTIME='yes'

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 93fcdb5c..7ac6a3fb 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1603,6 +1603,7 @@ if [ "$release" -eq 10 ]; then
     echo "=== Set max_length_of_MySQL_username=80"
 fi
 echo "MAX_DBUSER_LEN=80" >> $VESTA/conf/vesta.conf
+echo "ALLOW_BACKUP_ANYTIME='yes'" >> /usr/local/vesta/conf/vesta.conf
 echo "================================================================"
 
 # Removing old PHP sessions files

From c3c55a4e2a2205e8e312c60a3a961374b9617ecc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 27 Apr 2020 09:04:52 +0200
Subject: [PATCH 0884/2300] Do not restart apache while preparing letsencrypt
 acme challenge

---
 bin/v-add-letsencrypt-domain | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 0e9438ed..4b2ecf61 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -179,9 +179,9 @@ for auth in $authz; do
             mkdir -p $acme_challenge
             echo "$token.$THUMB" > $acme_challenge/$token
             chown -R $user:$user $well_known
+            $BIN/v-restart-web
+            check_result $? "Web restart failed" >/dev/null
         fi
-        $BIN/v-restart-web
-        check_result $? "Web restart failed" >/dev/null
     fi
 
     # Requesting ACME validation / STEP 5

From 338125b448603d78f1f4706006b1946fca221f7c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 27 Apr 2020 11:24:02 +0200
Subject: [PATCH 0885/2300]  Do not restart apache while preparing letsencrypt
 acme challenge

---
 bin/v-add-letsencrypt-domain | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 4b2ecf61..14699088 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -179,8 +179,8 @@ for auth in $authz; do
             mkdir -p $acme_challenge
             echo "$token.$THUMB" > $acme_challenge/$token
             chown -R $user:$user $well_known
-            $BIN/v-restart-web
-            check_result $? "Web restart failed" >/dev/null
+            # $BIN/v-restart-web
+            # check_result $? "Web restart failed" >/dev/null
         fi
     fi
 

From 14ffd7d2a5acd362570ac1b09e463750a3f60026 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 29 Apr 2020 20:45:54 +0200
Subject: [PATCH 0886/2300] web_counter functions

---
 func/main.sh | 50 ++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 50 insertions(+)

diff --git a/func/main.sh b/func/main.sh
index ba78830a..c01aa123 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -990,3 +990,53 @@ wait_for_backup_if_it_is_not_time_for_backup() {
         done
     fi
 }
+
+alter_web_counter() {
+    user=$1
+    domain=$2
+    USER_DATA=$VESTA/data/users/$user
+    
+    varc=$3
+    vard="\$${varc}"
+    counter=$(get_object_value 'web' 'DOMAIN' "$domain" "$vard")
+    
+    if [ -z "$counter" ]; then
+        add_object_key "web" 'DOMAIN' "$domain" "$varc" "TIME"
+        counter=0
+    fi
+    
+    ((counter++))
+    backup_counter=$counter
+    
+    update_object_value 'web' 'DOMAIN' "$domain" "$vard" "$counter"
+    counter=$backup_counter
+    
+    echo $counter
+}
+
+reset_web_counter() {
+    user=$1
+    domain=$2
+    USER_DATA=$VESTA/data/users/$user
+    
+    varc=$3
+    vard="\$${varc}"
+
+    update_object_value 'web' 'DOMAIN' "$domain" "$vard" "0"
+}
+
+get_web_counter() {
+    user=$1
+    domain=$2
+    USER_DATA=$VESTA/data/users/$user
+    
+    varc=$3
+    vard="\$${varc}"
+    counter=$(get_object_value 'web' 'DOMAIN' "$domain" "$vard")
+
+    if [ -z "$counter" ]; then
+        counter=0
+    fi
+
+    echo $counter
+}

From d0542fd5e24b5d58c083a3a1dbf706bc7faabcdb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 29 Apr 2020 23:46:01 +0200
Subject: [PATCH 0887/2300] alter_web_counter LETSENCRYPT_FAIL_COUNT

---
 bin/v-update-letsencrypt-ssl | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index f70cc825..0e0dc0aa 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -48,6 +48,7 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
             msg=$($BIN/v-add-letsencrypt-domain $user $domain $aliases)
             if [ $? -ne 0 ]; then
                 echo "$domain $msg"
+                alter_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT'
             fi
         fi
     done

From 80d43b9392ee3b65c89b0b22dba4387df8395ae0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 29 Apr 2020 23:50:10 +0200
Subject: [PATCH 0888/2300] reset_web_counter LETSENCRYPT_FAIL_COUNT

---
 bin/v-add-letsencrypt-domain | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 14699088..8e1991f8 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -268,6 +268,7 @@ if [ -z "$LETSENCRYPT" ]; then
 fi
 update_object_value 'web' 'DOMAIN' "$domain" '$LETSENCRYPT' 'yes'
 
+reset_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT'
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 6baf08f8d38d61069b013ad53263456893adb65e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 Apr 2020 00:00:08 +0200
Subject: [PATCH 0889/2300] get_web_counter LETSENCRYPT_FAIL_COUNT

---
 bin/v-update-letsencrypt-ssl | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 0e0dc0aa..b967dc0d 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -29,6 +29,12 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
     USER_DATA=$VESTA/data/users/$user
 
     for domain in $(search_objects 'web' 'LETSENCRYPT' 'yes' 'DOMAIN'); do
+    
+        fail_counter=$(get_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
+        if [[ "$fail_counter" -ge 3 ]]; then
+            echo "$domain failed $fail_counter times for LetsEncrypt renewing, skipping"
+            continue;
+        fi
         crt_data=$(openssl x509 -text -in $USER_DATA/ssl/$domain.crt)
         not_after=$(echo "$crt_data" |grep "Not After" |cut -f 2,3,4 -d :)
         expiration=$(date -d "$not_after" +%s)

From bbe4d0ddcd437876ae2323ab5bcb29ce8ab347b1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 Apr 2020 00:09:51 +0200
Subject: [PATCH 0890/2300] echo fail_counter

---
 bin/v-update-letsencrypt-ssl | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index b967dc0d..9cf9634d 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -54,7 +54,8 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
             msg=$($BIN/v-add-letsencrypt-domain $user $domain $aliases)
             if [ $? -ne 0 ]; then
                 echo "$domain $msg"
-                alter_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT'
+                fail_counter=$(alter_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
+                echo "fail_counter = $fail_counter"
             fi
         fi
     done

From e97f309e7010893c72a1e041090dcac99fbb9579 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 Apr 2020 00:30:53 +0200
Subject: [PATCH 0891/2300] LETSENCRYPT_FAIL_COUNT skip if suspended

---
 bin/v-update-letsencrypt-ssl | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 9cf9634d..11166063 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -54,8 +54,12 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
             msg=$($BIN/v-add-letsencrypt-domain $user $domain $aliases)
             if [ $? -ne 0 ]; then
                 echo "$domain $msg"
-                fail_counter=$(alter_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
-                echo "fail_counter = $fail_counter"
+                if [[ $msg == *"is suspended" ]]; then
+                    echo "OK, it's suspended"
+                else
+                    fail_counter=$(alter_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
+                    echo "fail_counter = $fail_counter"
+                fi
             fi
         fi
     done

From 14aad370aca7d1b54f054505afc29965a95c43ed Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 Apr 2020 01:17:52 +0200
Subject: [PATCH 0892/2300] Skipping LE renewing after 7 attempts

---
 bin/v-update-letsencrypt-ssl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 11166063..36d7a1e9 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -31,7 +31,7 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
     for domain in $(search_objects 'web' 'LETSENCRYPT' 'yes' 'DOMAIN'); do
     
         fail_counter=$(get_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
-        if [[ "$fail_counter" -ge 3 ]]; then
+        if [[ "$fail_counter" -ge 7 ]]; then
             echo "$domain failed $fail_counter times for LetsEncrypt renewing, skipping"
             continue;
         fi

From 9d182f292fb4ef13ef75486629922ff0b0fc94bc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 1 May 2020 00:17:03 +0200
Subject: [PATCH 0893/2300] Keep conf files during auto-update

---
 bin/v-update-sys-vesta | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-update-sys-vesta b/bin/v-update-sys-vesta
index 418fe26f..b81765ec 100755
--- a/bin/v-update-sys-vesta
+++ b/bin/v-update-sys-vesta
@@ -45,11 +45,11 @@ if [ -n "$(command -v yum)" ]; then
     check_result $? "$package update failed" $E_UPDATE
 else
     # Update repo
-    apt-get update -o Dir::Etc::sourcelist="sources.list.d/vesta.list" \
+    apt update -o Dir::Etc::sourcelist="sources.list.d/vesta.list" \
         -o Dir::Etc::sourceparts="-" -o APT::Get::List-Cleanup="0" -qq
 
     # Update vesta package
-    apt-get install $package -qq > /dev/null 2>&1
+    apt -y -qq -o Dpkg::Options::="--force-confold" install $package > /dev/null 2>&1
     check_result $? "$package update failed" $E_UPDATE
 fi
 

From c6109e5301af952396392b465efe8c5af2da788b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 1 May 2020 00:21:15 +0200
Subject: [PATCH 0894/2300] Version up

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index ae1a4159..f31d54f0 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-10
+vesta-0.9.8-26-11

From 6c3399ff91be8222f513a0cac357b3436214ce8d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 1 May 2020 00:21:48 +0200
Subject: [PATCH 0895/2300] Version up

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index f9037de5..083717c6 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -9,7 +9,7 @@ add_deb_to_apt_repo=0
 
 TARGET_DEB_NAME='buster'
 TARGET_DEB_VER='10'
-VESTA_VER='0.9.8-26-10'
+VESTA_VER='0.9.8-26-11'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1

From 4b3343dc9d3b0f6cc1396db904b593020e77b6fe Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 1 May 2020 00:22:28 +0200
Subject: [PATCH 0896/2300] Version up

---
 src/deb/vesta/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index d2b5fb68..3387da58 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-26-10
+Version: 0.9.8-26-11
 Section: admin
 Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
 Homepage: http://myvestacp.com

From 687b50b507800ab8fab6f4ae8c261db409fe11b9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 1 May 2020 01:03:07 +0200
Subject: [PATCH 0897/2300] Update v-update-sys-vesta

---
 bin/v-update-sys-vesta | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-update-sys-vesta b/bin/v-update-sys-vesta
index b81765ec..de2a07cb 100755
--- a/bin/v-update-sys-vesta
+++ b/bin/v-update-sys-vesta
@@ -45,11 +45,11 @@ if [ -n "$(command -v yum)" ]; then
     check_result $? "$package update failed" $E_UPDATE
 else
     # Update repo
-    apt update -o Dir::Etc::sourcelist="sources.list.d/vesta.list" \
+    apt-get update -o Dir::Etc::sourcelist="sources.list.d/vesta.list" \
         -o Dir::Etc::sourceparts="-" -o APT::Get::List-Cleanup="0" -qq
 
     # Update vesta package
-    apt -y -qq -o Dpkg::Options::="--force-confold" install $package > /dev/null 2>&1
+    apt-get -y -qq -o Dpkg::Options::="--force-confold" install $package > /dev/null 2>&1
     check_result $? "$package update failed" $E_UPDATE
 fi
 

From d04a97c9437ff07833f2122d432647a40ceb6763 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 1 May 2020 01:33:00 +0200
Subject: [PATCH 0898/2300] Update postinst

---
 src/deb/vesta/postinst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 3121351e..99534b8c 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -41,4 +41,7 @@ systemctl restart clamav-daemon
 systemctl restart clamav-freshclam
 systemctl restart exim4
 
+version=$(curl http://c.myvestacp.com/latest.txt?updated)
+echo "=== myVesta $version installed ==="
+
 exit 0

From 464f8075f391be47570b90f0f7d6f36035352532 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 4 May 2020 13:32:52 +0200
Subject: [PATCH 0899/2300] Update proftpd.conf

---
 install/debian/10/proftpd/proftpd.conf | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/install/debian/10/proftpd/proftpd.conf b/install/debian/10/proftpd/proftpd.conf
index 69ec6b2e..3eb0ec2c 100644
--- a/install/debian/10/proftpd/proftpd.conf
+++ b/install/debian/10/proftpd/proftpd.conf
@@ -14,13 +14,15 @@ AuthOrder                       mod_auth_pam.c* mod_auth_unix.c
 UseReverseDNS                   off
 User                            proftpd
 Group                           nogroup
-MaxInstances                    20
+MaxInstances                    100
 UseSendfile                     off
 LogFormat                       default "%h %l %u %t \"%r\" %s %b"
 LogFormat                       auth    "%v [%P] %h %t \"%r\" %s"
 ListOptions                     -a
 RequireValidShell               off
 PassivePorts                    12000 12100
+TransferLog                     /var/log/proftpd/xferlog
+SystemLog                       /var/log/proftpd/proftpd.log
 
 <Global>
   Umask                         002

From 1fd58f24144fc0190055af52299e0313e3d90058 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 4 May 2020 23:53:17 +0200
Subject: [PATCH 0900/2300] Office365 DNS template

---
 install/debian/10/templates/dns/office365.tpl | 22 +++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 install/debian/10/templates/dns/office365.tpl

diff --git a/install/debian/10/templates/dns/office365.tpl b/install/debian/10/templates/dns/office365.tpl
new file mode 100644
index 00000000..dcf556e1
--- /dev/null
+++ b/install/debian/10/templates/dns/office365.tpl
@@ -0,0 +1,22 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:spf.protection.outlook.com -all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='@' TYPE='MX' PRIORITY='0' VALUE='XXXXXXX.mail.protection.outlook.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"MS=msXXXX"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='autodiscover' TYPE='CNAME' PRIORITY='' VALUE='autodiscover.outlook.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='sip' TYPE='CNAME' PRIORITY='' VALUE='sipdir.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='lyncdiscover' TYPE='CNAME' PRIORITY='' VALUE='webdir.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='19' RECORD='enterpriseregistration' TYPE='CNAME' PRIORITY='' VALUE='enterpriseregistration.windows.net.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='20' RECORD='enterpriseenrollment' TYPE='CNAME' PRIORITY='' VALUE='enterpriseenrollment.manage.microsoft.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='21' RECORD='_sip._tls' TYPE='SRV' PRIORITY='100 1 443' VALUE='sipdir.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='22' RECORD='_sipfederationtls._tcp' TYPE='SRV' PRIORITY='100 1 5061' VALUE='sipfed.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'

From 363e5d72f174fee26e33d1106387fdb4bb66c48e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 5 May 2020 00:30:09 +0200
Subject: [PATCH 0901/2300] Create yandex.tpl

---
 install/debian/10/templates/dns/yandex.tpl | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 install/debian/10/templates/dns/yandex.tpl

diff --git a/install/debian/10/templates/dns/yandex.tpl b/install/debian/10/templates/dns/yandex.tpl
new file mode 100644
index 00000000..4ce768fe
--- /dev/null
+++ b/install/debian/10/templates/dns/yandex.tpl
@@ -0,0 +1,16 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='CNAME' PRIORITY='' VALUE='domain.mail.yandex.net.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mx.yandex.net.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.yandex.net ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"yandex-verification: XXXXXXXXXXXXXXX"' SUSPENDED='no' TIME='%time%' DATE='%date%'

From 0a3928691cb66e200c8def8946a614fcdad2d51c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 18:04:02 +0200
Subject: [PATCH 0902/2300] Support for parameters in v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 50 ++++++++++++++++++----
 1 file changed, 42 insertions(+), 8 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 72405cce..07be8c67 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -4,6 +4,10 @@
 # Useful for making staging copy in one command-line.
 # Automatic detection of WordPress, automaticaly read DB user, DB name, DB pass, automatic cloning to new database, automatic changing wp-config.php file.
 
+# Available parameters:
+# --DATABASE_SUFIX=...
+# --TO_DATABASE=...
+
 if [ $# -lt 2 ]; then
     echo "USAGE: v-clone-website FROM_DOMAIN TO_DOMAIN [FROM_DATABASE_NAME] [FROM_DATABASE_USERNAME] [FROM_DATABASE_PASSWORD] [FROM_CONFIG_FILE] [TO_USER] [TO_DATABASE_NAME] [TO_DATABASE_USERNAME] [TO_DATABASE_PASSWORD]"
     exit 1
@@ -18,6 +22,30 @@ FROM_CONFIG_FILE=''
 TO_DATABASE_NAME=''
 TO_DATABASE_USERNAME=''
 TO_DATABASE_PASSWORD=''
+DATABASE_SUFIX='_migrated'
+
+############################
+# handle --parameters=val
+handle_parameter() {
+    origparam=$1
+    searchstring="="
+    paramminuses=${origparam:0:2}
+    if [ "$paramminuses" = "--" ]; then
+        var_without_minuses=${origparam:2}
+        var=${var_without_minuses%%=*}
+        val=${origparam#*$searchstring}
+        #echo $var
+        #echo $val
+        printf -v "$var" '%s' "$val"
+    fi
+}
+numargs=$#
+for ((i=1 ; i <= numargs ; i++))
+do
+    handle_parameter $1
+    shift
+done
+############################
 
 if [ -z "$VESTA" ]; then
     VESTA="/usr/local/vesta"
@@ -32,6 +60,7 @@ if [ -z "$2" ]; then
     exit 3
 fi
 
+
 FROM_DOMAIN=$1
 FROM_USER=$($VESTA/bin/v-search-domain-owner "$FROM_DOMAIN")
 if [ -z "$FROM_USER" ]; then
@@ -154,32 +183,37 @@ if [ $# -ge 10 ]; then
     fi
 fi
 
+LENGTH_OF_DATABASE_SUFIX=${#DATABASE_SUFIX}
 if [ -z "$TO_DATABASE_NAME" ]; then
     LENGTH_OF_TO_DATABASE_NAME=${#FROM_DATABASE_NAME}
-    START_FROM=$((LENGTH_OF_TO_DATABASE_NAME-9))
+    START_FROM=$((LENGTH_OF_TO_DATABASE_NAME-LENGTH_OF_DATABASE_SUFIX))
     CHECK_PREFIX=${FROM_DATABASE_NAME:START_FROM}
-    if [ "$CHECK_PREFIX" = "_migrated" ]; then
+    if [ "$CHECK_PREFIX" = "${DATABASE_SUFIX}" ]; then
         TO_DATABASE_NAME="${TO_USER}_${FROM_DATABASE_NAME_WITHOUT_PREFIX}"
         LENGTH_OF_TO_DATABASE_NAME=${#TO_DATABASE_NAME}
-        CUT_TO=$((LENGTH_OF_TO_DATABASE_NAME-9))
+        CUT_TO=$((LENGTH_OF_TO_DATABASE_NAME-LENGTH_OF_DATABASE_SUFIX))
         TO_DATABASE_NAME=${TO_DATABASE_NAME:0:CUT_TO}
     else
-        TO_DATABASE_NAME="${TO_USER}_${FROM_DATABASE_NAME_WITHOUT_PREFIX}_migrated"
+        TO_DATABASE_NAME="${TO_USER}_${FROM_DATABASE_NAME_WITHOUT_PREFIX}${DATABASE_SUFIX}"
     fi
 fi
 if [ -z "$TO_DATABASE_USERNAME" ]; then
     LENGTH_OF_TO_DATABASE_USERNAME=${#FROM_DATABASE_USERNAME}
-    START_FROM=$((LENGTH_OF_TO_DATABASE_USERNAME-9))
+    START_FROM=$((LENGTH_OF_TO_DATABASE_USERNAME-LENGTH_OF_DATABASE_SUFIX))
     CHECK_PREFIX=${FROM_DATABASE_USERNAME:START_FROM}
-    if [ "$CHECK_PREFIX" = "_migrated" ]; then
+    if [ "$CHECK_PREFIX" = "${DATABASE_SUFIX}" ]; then
         TO_DATABASE_USERNAME="${TO_USER}_${FROM_DATABASE_USERNAME_WITHOUT_PREFIX}"
         LENGTH_OF_TO_DATABASE_USERNAME=${#TO_DATABASE_USERNAME}
-        CUT_TO=$((LENGTH_OF_TO_DATABASE_USERNAME-9))
+        CUT_TO=$((LENGTH_OF_TO_DATABASE_USERNAME-LENGTH_OF_DATABASE_SUFIX))
         TO_DATABASE_USERNAME=${TO_DATABASE_USERNAME:0:CUT_TO}
     else
-        TO_DATABASE_USERNAME="${TO_USER}_${FROM_DATABASE_USERNAME_WITHOUT_PREFIX}_migrated"
+        TO_DATABASE_USERNAME="${TO_USER}_${FROM_DATABASE_USERNAME_WITHOUT_PREFIX}${DATABASE_SUFIX}"
     fi
 fi
+if [ ! -z "$TO_DATABASE" ]; then
+    TO_DATABASE_USERNAME=$TO_DATABASE
+    TO_DATABASE_NAME=$TO_DATABASE
+fi
 if [ -z "$TO_DATABASE_PASSWORD" ]; then
     TO_DATABASE_PASSWORD=$FROM_DATABASE_PASSWORD
 fi

From e3c1d0f49ec4bcb9bc7869e65d7e806efedf6cbb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 18:08:31 +0200
Subject: [PATCH 0903/2300] wp cache flush

---
 src/deb/for-download/tools/v-clone-website | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 07be8c67..e1da991e 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -339,6 +339,7 @@ if [ $IT_IS_WP -eq 0 ]; then
 else
     cd $TO_FOLDER
     sudo -H -u$TO_USER wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid
+    sudo -H -u$TO_USER wp cache flush
 fi
 
 echo "===== DONE ===="

From 2c1b1cafd495f7c2d727946f7acfc675fb3dcdee Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 21:24:40 +0200
Subject: [PATCH 0904/2300] Update postinst

---
 src/deb/vesta/postinst | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 99534b8c..21b70b44 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -2,6 +2,9 @@
 
 # Run triggers only on updates
 if [ ! -e "/usr/local/vesta/data/users/admin" ]; then
+    version=$(curl -s http://c.myvestacp.com/latest.txt?installed)
+    version=${version:6}
+    echo "=== myVesta $version installed ==="
     exit
 fi
 
@@ -41,7 +44,8 @@ systemctl restart clamav-daemon
 systemctl restart clamav-freshclam
 systemctl restart exim4
 
-version=$(curl http://c.myvestacp.com/latest.txt?updated)
-echo "=== myVesta $version installed ==="
+version=$(curl -s http://c.myvestacp.com/latest.txt?updated)
+version=${version:6}
+echo "=== myVesta $version updated ==="
 
 exit 0

From 66ac7f74d5ec1af95666acac954da26bbd7b63c7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 21:29:05 +0200
Subject: [PATCH 0905/2300] Update postinst

---
 src/deb/vesta/postinst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 21b70b44..a1a55b08 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -5,6 +5,7 @@ if [ ! -e "/usr/local/vesta/data/users/admin" ]; then
     version=$(curl -s http://c.myvestacp.com/latest.txt?installed)
     version=${version:6}
     echo "=== myVesta $version installed ==="
+    echo "$version" > /usr/local/vesta/version.txt
     exit
 fi
 
@@ -47,5 +48,6 @@ systemctl restart exim4
 version=$(curl -s http://c.myvestacp.com/latest.txt?updated)
 version=${version:6}
 echo "=== myVesta $version updated ==="
+echo "$version" > /usr/local/vesta/version.txt
 
 exit 0

From ab0ca29e2869bc5580639d117c35d08593c137f9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 21:34:37 +0200
Subject: [PATCH 0906/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 083717c6..5b2b3170 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -9,7 +9,6 @@ add_deb_to_apt_repo=0
 
 TARGET_DEB_NAME='buster'
 TARGET_DEB_VER='10'
-VESTA_VER='0.9.8-26-11'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1
@@ -51,6 +50,9 @@ APT_WEB_ADDRESS="apt.myvestacp.com"
 PATH_OF_APT_REPO_ROOT="/var/www/$APT_WEB_ADDRESS/html"
 PATH_OF_APT_REPO="$PATH_OF_APT_REPO_ROOT/$TARGET_DEB_NAME"
 
+VESTA_VER=$(curl -s https://raw.githubusercontent.com/myvesta/vesta/master/src/deb/latest.txt)
+VESTA_VER=${VESTA_VER:6}
+
 # Set Version for compiling
 VESTA_V=$VESTA_VER"_amd64"
 NGINX_V='1.17.7'

From cef7ab0233544dfaee782fb993109e334c450835 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 21:37:54 +0200
Subject: [PATCH 0907/2300] Update control

---
 src/deb/vesta/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 3387da58..0cb5f67d 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -1,7 +1,7 @@
 Source: vesta
 Package: vesta
 Priority: optional
-Version: 0.9.8-26-11
+Version: 0.9.8-26
 Section: admin
 Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
 Homepage: http://myvestacp.com

From 5f60eea4865ef15fe5388338d05ced893195232b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 21:38:33 +0200
Subject: [PATCH 0908/2300] version up

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index f31d54f0..5a9a5b66 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-11
+vesta-0.9.8-26-12

From 35bd47c5cd70ea3c825b93dc6dd85e9b3cf3e51d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 23:19:46 +0200
Subject: [PATCH 0909/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 5b2b3170..9f647c0a 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -53,6 +53,8 @@ PATH_OF_APT_REPO="$PATH_OF_APT_REPO_ROOT/$TARGET_DEB_NAME"
 VESTA_VER=$(curl -s https://raw.githubusercontent.com/myvesta/vesta/master/src/deb/latest.txt)
 VESTA_VER=${VESTA_VER:6}
 
+BUILD_DATE=$(date +"%m-%b-%Y")
+
 # Set Version for compiling
 VESTA_V=$VESTA_VER"_amd64"
 NGINX_V='1.17.7'
@@ -274,6 +276,7 @@ if [ "$CWEB_B" = true ]; then
     cp /root/vesta/install/debian/$TARGET_DEB_VER_MAIN/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key
   fi
   cp /root/vesta/src/deb/latest.txt $PATH_OF_C_WEB_FOLDER_ROOT/latest.txt
+  echo "$BUILD_DATE" > $PATH_OF_C_WEB_FOLDER_ROOT/build_date.txt
   cd $PATH_OF_C_WEB_FOLDER
   
   if [ -f "packages.tar.gz" ]; then

From 5d87a17bf8f5365a77294a891eb28fbcd4b59392 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 23:22:30 +0200
Subject: [PATCH 0910/2300] build_date

---
 src/deb/vesta/postinst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index a1a55b08..29b89e29 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -1,5 +1,8 @@
 #!/bin/bash
 
+build_date=$(curl -s http://c.myvestacp.com/build_date.txt)
+echo "$build_date" > /usr/local/vesta/build_date.txt
+
 # Run triggers only on updates
 if [ ! -e "/usr/local/vesta/data/users/admin" ]; then
     version=$(curl -s http://c.myvestacp.com/latest.txt?installed)

From 6fa22486e7d663024859961b4fd81b67a9d6c017 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 23:23:58 +0200
Subject: [PATCH 0911/2300] get version and build date

---
 web/inc/main.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/web/inc/main.php b/web/inc/main.php
index 63b3b8b1..09eef5f7 100644
--- a/web/inc/main.php
+++ b/web/inc/main.php
@@ -1,5 +1,8 @@
 <?php
 
+$vesta_version=file_get_contents('/usr/local/vesta/version.txt');
+$vesta_build_date=file_get_contents('/usr/local/vesta/build_date.txt');
+
 if (file_exists("/usr/local/vesta/web/inc/switch_to_vesta_port") && isset($_SERVER['HTTP_X_REAL_IP'])) {
     header("Location: https://".$_SERVER['HTTP_HOST'].":".$_SERVER['SERVER_PORT']);
     exit;

From f6da475cc5873a324d4178efffaaf689ddc04737 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 23:25:32 +0200
Subject: [PATCH 0912/2300] display version in footer

---
 web/templates/footer.html | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/web/templates/footer.html b/web/templates/footer.html
index ca48e4b7..3ea27309 100644
--- a/web/templates/footer.html
+++ b/web/templates/footer.html
@@ -1,5 +1,9 @@
   </div>
 
+  <div style="position: fixed; top: 92%; right: 1%;">
+  <div style="margin-right: 100px;"><span style="font-weight: bold;">myVesta <?php echo $vesta_version;?></span><br />Build date: <?php echo $vesta_build_date;?></div>
+  </div>
+
   <div title="<?=__('Confirmation')?>" class="confirmation-text-redirect hidden">
     <p class="confirmation"><?=__('LEAVE_PAGE_CONFIRMATION')?></p>
   </div>

From 892c2565fb619fe9b5fe9ea81e4f5ffc4deb1113 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 23:26:43 +0200
Subject: [PATCH 0913/2300] Version 13

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 5a9a5b66..d84dd49c 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-12
+vesta-0.9.8-26-13

From 893da18c7cf1494a7ff04f69932ca3b8129c6557 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 23:30:01 +0200
Subject: [PATCH 0914/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 9f647c0a..23b2471a 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -53,7 +53,7 @@ PATH_OF_APT_REPO="$PATH_OF_APT_REPO_ROOT/$TARGET_DEB_NAME"
 VESTA_VER=$(curl -s https://raw.githubusercontent.com/myvesta/vesta/master/src/deb/latest.txt)
 VESTA_VER=${VESTA_VER:6}
 
-BUILD_DATE=$(date +"%m-%b-%Y")
+BUILD_DATE=$(date +"%d-%b-%Y")
 
 # Set Version for compiling
 VESTA_V=$VESTA_VER"_amd64"

From c260afa4a5a6146c6a36acfd1437c6603b210b3a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 23:33:22 +0200
Subject: [PATCH 0915/2300] Update postinst

---
 src/deb/vesta/postinst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 29b89e29..6b5f3969 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -8,6 +8,7 @@ if [ ! -e "/usr/local/vesta/data/users/admin" ]; then
     version=$(curl -s http://c.myvestacp.com/latest.txt?installed)
     version=${version:6}
     echo "=== myVesta $version installed ==="
+    echo "=== myVesta build date: $build_date"
     echo "$version" > /usr/local/vesta/version.txt
     exit
 fi
@@ -51,6 +52,7 @@ systemctl restart exim4
 version=$(curl -s http://c.myvestacp.com/latest.txt?updated)
 version=${version:6}
 echo "=== myVesta $version updated ==="
+echo "=== myVesta build date: $build_date"
 echo "$version" > /usr/local/vesta/version.txt
 
 exit 0

From d1ccc4cdf6c010948906168c0450ffc781f53448 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 7 May 2020 23:40:38 +0200
Subject: [PATCH 0916/2300] Update footer.html

---
 web/templates/footer.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/footer.html b/web/templates/footer.html
index 3ea27309..9aab9af7 100644
--- a/web/templates/footer.html
+++ b/web/templates/footer.html
@@ -1,7 +1,7 @@
   </div>
 
   <div style="position: fixed; top: 92%; right: 1%;">
-  <div style="margin-right: 100px;"><span style="font-weight: bold;">myVesta <?php echo $vesta_version;?></span><br />Build date: <?php echo $vesta_build_date;?></div>
+  <div style="margin-right: 100px; background-color: white; padding-left: 20px;"><span style="font-weight: bold;">myVesta <?php echo $vesta_version;?></span><br />Build date: <?php echo $vesta_build_date;?></div>
   </div>
 
   <div title="<?=__('Confirmation')?>" class="confirmation-text-redirect hidden">

From aa04ca72229ec2e15ce31176358d3072f4d171b5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 12:50:41 +0200
Subject: [PATCH 0917/2300] v-clone-website switched to parameters

---
 src/deb/for-download/tools/v-clone-website | 53 ++++++----------------
 1 file changed, 14 insertions(+), 39 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index e1da991e..333092c8 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -4,12 +4,19 @@
 # Useful for making staging copy in one command-line.
 # Automatic detection of WordPress, automaticaly read DB user, DB name, DB pass, automatic cloning to new database, automatic changing wp-config.php file.
 
-# Available parameters:
-# --DATABASE_SUFIX=...
-# --TO_DATABASE=...
-
 if [ $# -lt 2 ]; then
-    echo "USAGE: v-clone-website FROM_DOMAIN TO_DOMAIN [FROM_DATABASE_NAME] [FROM_DATABASE_USERNAME] [FROM_DATABASE_PASSWORD] [FROM_CONFIG_FILE] [TO_USER] [TO_DATABASE_NAME] [TO_DATABASE_USERNAME] [TO_DATABASE_PASSWORD]"
+    echo "USAGE: v-clone-website FROM_DOMAIN TO_DOMAIN"
+    echo "Available parameters:"
+    echo "--DATABASE_SUFIX=... (default is '_migrated')"
+    echo "--TO_DATABASE=... (this will override both --TO_DATABASE_NAME and --TO_DATABASE_USERNAME)"
+    echo "--FROM_DATABASE_NAME=..."
+    echo "--FROM_DATABASE_USERNAME=..."
+    echo "--FROM_DATABASE_PASSWORD=..."
+    echo "--FROM_CONFIG_FILE=..."
+    echo "--TO_DATABASE_NAME=..."
+    echo "--TO_DATABASE_USERNAME=..."
+    echo "--TO_DATABASE_PASSWORD=..."
+    echo "--=..."
     exit 1
 fi
 
@@ -74,9 +81,7 @@ if [ $CHECK_PUBLIC_SHTML -eq 1 ]; then
     FROM_FOLDER="/home/$FROM_USER/web/$FROM_DOMAIN/public_shtml"
 fi
 
-
-if [ $# -ge 6 ]; then
-    FROM_CONFIG_FILE="$6"
+if [ ! -z "$FROM_CONFIG_FILE" ]; then
     FROM_CONFIG_FILE_FULL_PATH="$FROM_FOLDER/$6"
 fi
 if [ -z "$FROM_CONFIG_FILE" ]; then
@@ -107,21 +112,7 @@ if [ $IT_IS_WP -eq 1 ]; then
     FROM_DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
     rm $FROM_CONFIG_FILE_FULL_PATH_BACKUP
 fi
-if [ $# -ge 3 ]; then
-    if [ ! -z "$3" ]; then
-        FROM_DATABASE_NAME=$3
-    fi
-fi
-if [ $# -ge 4 ]; then
-    if [ ! -z "$4" ]; then
-        FROM_DATABASE_USERNAME=$4
-    fi
-fi
-if [ $# -ge 5 ]; then
-    if [ ! -z "$5" ]; then
-        FROM_DATABASE_PASSWORD=$5
-    fi
-fi
+
 if [ -z "$FROM_DATABASE_NAME" ]; then
     echo "Error: FROM_DATABASE_NAME is empty"
     exit 6
@@ -167,22 +158,6 @@ fi
 
 TO_CONFIG_FILE_FULL_PATH="$TO_FOLDER/$FROM_CONFIG_FILE"
 
-if [ $# -ge 8 ]; then
-    if [ ! -z "$8" ]; then
-        TO_DATABASE_NAME=$8
-    fi
-fi
-if [ $# -ge 9 ]; then
-    if [ ! -z "$9" ]; then
-        TO_DATABASE_USERNAME=$9
-    fi
-fi
-if [ $# -ge 10 ]; then
-    if [ ! -z "${10}" ]; then
-        TO_DATABASE_PASSWORD=${10}
-    fi
-fi
-
 LENGTH_OF_DATABASE_SUFIX=${#DATABASE_SUFIX}
 if [ -z "$TO_DATABASE_NAME" ]; then
     LENGTH_OF_TO_DATABASE_NAME=${#FROM_DATABASE_NAME}

From f198adb3b37fc3f4b5230ad1a20897ef9e15a2d9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 13:10:30 +0200
Subject: [PATCH 0918/2300] Remove w3-total-cache on migrated domain

Because it can make hell in memcached cache
---
 src/deb/for-download/tools/v-clone-website | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 333092c8..9c218258 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -313,6 +313,13 @@ if [ $IT_IS_WP -eq 0 ]; then
     php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "$FROM_DOMAIN" -r "$TO_DOMAIN"
 else
     cd $TO_FOLDER
+    if [ -d "wp-content/plugins/w3-total-cache" ]; then
+        rm -f wp-content/object-cache.php
+        rm -f wp-content/db.php
+        rm -f wp-content/advanced-cache.php
+        rm -rf wp-content/w3tc-config
+        rm -rf wp-content/plugins/w3-total-cache
+    fi
     sudo -H -u$TO_USER wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid
     sudo -H -u$TO_USER wp cache flush
 fi

From 75bccb0f6cf946f060ebed3ddd9764d037c3b6d6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 13:36:00 +0200
Subject: [PATCH 0919/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 39 +++++++++++++++++++---
 1 file changed, 34 insertions(+), 5 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 9c218258..3d1e89a1 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -13,10 +13,10 @@ if [ $# -lt 2 ]; then
     echo "--FROM_DATABASE_USERNAME=..."
     echo "--FROM_DATABASE_PASSWORD=..."
     echo "--FROM_CONFIG_FILE=..."
+    echo "--=TO_USER=..."
     echo "--TO_DATABASE_NAME=..."
     echo "--TO_DATABASE_USERNAME=..."
     echo "--TO_DATABASE_PASSWORD=..."
-    echo "--=..."
     exit 1
 fi
 
@@ -141,13 +141,23 @@ FROM_DATABASE_USERNAME_WITHOUT_PREFIX=${FROM_DATABASE_USERNAME:FROM_USER_LEN}
 
 # ----------- TO -------------
 
+CREATE_TO_USER=0
+CREATE_TO_DOMAIN=0
 
 TO_DOMAIN=$2
-TO_USER=$($VESTA/bin/v-search-domain-owner "$TO_DOMAIN")
-CREATE_TO_DOMAIN=0
 if [ -z "$TO_USER" ]; then
-    TO_USER=$FROM_USER
-    CREATE_TO_DOMAIN=1
+    TO_USER=$($VESTA/bin/v-search-domain-owner "$TO_DOMAIN")
+    if [ -z "$TO_USER" ]; then
+        TO_USER=$FROM_USER
+        CREATE_TO_DOMAIN=1
+    fi
+else
+    if [ ! -d "/home/$TO_USER" ]; then
+        CREATE_TO_USER=1
+    fi
+    if [ ! -d "/home/$TO_USER/web/$TO_DOMAIN/public_html" ]; then
+        CREATE_TO_DOMAIN=1
+    fi
 fi
 
 TO_FOLDER="/home/$TO_USER/web/$TO_DOMAIN/public_html"
@@ -255,12 +265,31 @@ echo "FROM_DATABASE_NAME_WITHOUT_PREFIX = $FROM_DATABASE_NAME_WITHOUT_PREFIX"
 echo "TO_DATABASE_NAME_WITHOUT_PREFIX   = $TO_DATABASE_NAME_WITHOUT_PREFIX"
 echo "FROM_DATABASE_USERNAME_WITHOUT_PREFIX = $FROM_DATABASE_USERNAME_WITHOUT_PREFIX"
 echo "TO_DATABASE_USERNAME_WITHOUT_PREFIX   = $TO_DATABASE_USERNAME_WITHOUT_PREFIX"
+echo "CREATE_TO_USER = $CREATE_TO_USER"
+echo "CREATE_TO_DOMAIN = $CREATE_TO_DOMAIN"
 echo "==============================================================================="
 read -p "=== Press Enter to continue ==="
 
 
 # ----------- ACTION -------------
 
+# Defining password-gen function
+gen_pass() {
+    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
+    LENGTH=32
+    while [ ${n:=1} -le $LENGTH ]; do
+        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
+        let n+=1
+    done
+    echo "$PASS"
+}
+
+if [ $CREATE_TO_USER -eq 1 ]; then
+    pass=$(gen_pass)
+    echo "=== Create user $TO_USER, pass=$pass"
+    $VESTA/bin/v-add-user "$TO_USER" "$pass" "info@$TO_DOMAIN" "default" "Migrated" "site"
+fi
+
 if [ $CREATE_TO_DOMAIN -eq 1 ]; then
     echo "=== Create domain $TO_DOMAIN"
     $VESTA/bin/v-add-domain "$TO_USER" "$TO_DOMAIN"

From 3df19d0f2bdd2a389d397768e340d1b2c32e6b25 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 13:43:45 +0200
Subject: [PATCH 0920/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 3d1e89a1..9b0aa94c 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -13,7 +13,7 @@ if [ $# -lt 2 ]; then
     echo "--FROM_DATABASE_USERNAME=..."
     echo "--FROM_DATABASE_PASSWORD=..."
     echo "--FROM_CONFIG_FILE=..."
-    echo "--=TO_USER=..."
+    echo "--TO_USER=..."
     echo "--TO_DATABASE_NAME=..."
     echo "--TO_DATABASE_USERNAME=..."
     echo "--TO_DATABASE_PASSWORD=..."

From 47d589a1bacc4cf70e752206946de453c9c66491 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 13:55:18 +0200
Subject: [PATCH 0921/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 24 ++++++++++++----------
 1 file changed, 13 insertions(+), 11 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 9b0aa94c..8a5c6a8d 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -31,6 +31,18 @@ TO_DATABASE_USERNAME=''
 TO_DATABASE_PASSWORD=''
 DATABASE_SUFIX='_migrated'
 
+if [ -z "$1" ]; then
+    echo "Error: FROM_DOMAIN is empty"
+    exit 2
+fi
+if [ -z "$2" ]; then
+    echo "Error: TO_DOMAIN is empty"
+    exit 3
+fi
+
+FROM_DOMAIN=$1
+TO_DOMAIN=$2
+
 ############################
 # handle --parameters=val
 handle_parameter() {
@@ -58,17 +70,8 @@ if [ -z "$VESTA" ]; then
     VESTA="/usr/local/vesta"
 fi
 
-if [ -z "$1" ]; then
-    echo "Error: FROM_DOMAIN is empty"
-    exit 2
-fi
-if [ -z "$2" ]; then
-    echo "Error: TO_DOMAIN is empty"
-    exit 3
-fi
+###########################################################################
 
-
-FROM_DOMAIN=$1
 FROM_USER=$($VESTA/bin/v-search-domain-owner "$FROM_DOMAIN")
 if [ -z "$FROM_USER" ]; then
     echo "Error: domain $FROM_DOMAIN does not exists"
@@ -144,7 +147,6 @@ FROM_DATABASE_USERNAME_WITHOUT_PREFIX=${FROM_DATABASE_USERNAME:FROM_USER_LEN}
 CREATE_TO_USER=0
 CREATE_TO_DOMAIN=0
 
-TO_DOMAIN=$2
 if [ -z "$TO_USER" ]; then
     TO_USER=$($VESTA/bin/v-search-domain-owner "$TO_DOMAIN")
     if [ -z "$TO_USER" ]; then

From 395eee2d5f81e908b24f723dc670adbfc45f62be Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 14:46:40 +0200
Subject: [PATCH 0922/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 8a5c6a8d..1c57c818 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -141,6 +141,10 @@ fi
 FROM_DATABASE_NAME_WITHOUT_PREFIX=${FROM_DATABASE_NAME:FROM_USER_LEN}
 FROM_DATABASE_USERNAME_WITHOUT_PREFIX=${FROM_DATABASE_USERNAME:FROM_USER_LEN}
 
+FROM_DOMAIN_HAS_SSL=0
+if [ -f "/home/$FROM_USER/conf/web/ssl.$FROM_DOMAIN.pem" ]; then
+    FROM_DOMAIN_HAS_SSL=1
+fi
 
 # ----------- TO -------------
 
@@ -224,6 +228,16 @@ TO_DATABASE_NAME_WITHOUT_PREFIX=${TO_DATABASE_NAME:TO_USER_LEN}
 TO_DATABASE_USERNAME_WITHOUT_PREFIX=${TO_DATABASE_USERNAME:TO_USER_LEN}
 
 
+TO_DOMAIN_HAS_SSL=0
+if [ -f "/home/$TO_USER/conf/web/ssl.$TO_DOMAIN.pem" ]; then
+    TO_DOMAIN_HAS_SSL=1
+fi
+SHOULD_INSTALL_SSL=0
+if [ $FROM_DOMAIN_HAS_SSL -eq 1 ] && [ $TO_DOMAIN_HAS_SSL -eq 0 ]; then
+    SHOULD_INSTALL_SSL=1
+fi
+
+
 # ----------- CHECK -------------
 
 if [ $IT_IS_WP -eq 0 ]; then
@@ -269,6 +283,7 @@ echo "FROM_DATABASE_USERNAME_WITHOUT_PREFIX = $FROM_DATABASE_USERNAME_WITHOUT_PR
 echo "TO_DATABASE_USERNAME_WITHOUT_PREFIX   = $TO_DATABASE_USERNAME_WITHOUT_PREFIX"
 echo "CREATE_TO_USER = $CREATE_TO_USER"
 echo "CREATE_TO_DOMAIN = $CREATE_TO_DOMAIN"
+echo "SHOULD_INSTALL_SSL = $SHOULD_INSTALL_SSL"
 echo "==============================================================================="
 read -p "=== Press Enter to continue ==="
 
@@ -298,6 +313,10 @@ if [ $CREATE_TO_DOMAIN -eq 1 ]; then
     rm $TO_FOLDER/index.html
 fi
 
+if [ $SHOULD_INSTALL_SSL -eq 1 ]; then
+    echo "=== Installing LetsEncrypt for domain $TO_DOMAIN"
+    v-add-letsencrypt-domain "$TO_USER" "$TO_DOMAIN" "www.$TO_DOMAIN" "yes"
+fi
 
 object=$(grep "DB='$TO_DATABASE_NAME'" $VESTA/data/users/$TO_USER/db.conf)
 if [ -z "$object" ]; then

From 120f3b07a361c1b40e81a8c2ab4d5c087d28764a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 15:30:41 +0200
Subject: [PATCH 0923/2300] Set the same templates to migrated site

---
 src/deb/for-download/tools/v-clone-website | 25 ++++++++++++++++++++--
 1 file changed, 23 insertions(+), 2 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 1c57c818..7ec3d195 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -8,7 +8,7 @@ if [ $# -lt 2 ]; then
     echo "USAGE: v-clone-website FROM_DOMAIN TO_DOMAIN"
     echo "Available parameters:"
     echo "--DATABASE_SUFIX=... (default is '_migrated')"
-    echo "--TO_DATABASE=... (this will override both --TO_DATABASE_NAME and --TO_DATABASE_USERNAME)"
+    echo "--TO_DATABASE=... (this will override --TO_DATABASE_NAME, --TO_DATABASE_USERNAME and --DATABASE_SUFIX)"
     echo "--FROM_DATABASE_NAME=..."
     echo "--FROM_DATABASE_USERNAME=..."
     echo "--FROM_DATABASE_PASSWORD=..."
@@ -146,6 +146,10 @@ if [ -f "/home/$FROM_USER/conf/web/ssl.$FROM_DOMAIN.pem" ]; then
     FROM_DOMAIN_HAS_SSL=1
 fi
 
+FROM_DOMAIN_TPL=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'TEMPLATE:' | awk '{print $2}')
+FROM_DOMAIN_PROXY_TPL=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY:' | awk '{print $2}')
+FROM_DOMAIN_PROXY_EXT=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY EXT:' | awk '{print $2}')
+
 # ----------- TO -------------
 
 CREATE_TO_USER=0
@@ -281,9 +285,14 @@ echo "FROM_DATABASE_NAME_WITHOUT_PREFIX = $FROM_DATABASE_NAME_WITHOUT_PREFIX"
 echo "TO_DATABASE_NAME_WITHOUT_PREFIX   = $TO_DATABASE_NAME_WITHOUT_PREFIX"
 echo "FROM_DATABASE_USERNAME_WITHOUT_PREFIX = $FROM_DATABASE_USERNAME_WITHOUT_PREFIX"
 echo "TO_DATABASE_USERNAME_WITHOUT_PREFIX   = $TO_DATABASE_USERNAME_WITHOUT_PREFIX"
+echo "DATABASE_SUFIX = $DATABASE_SUFIX"
+echo "CREATE_TO_USER = $CREATE_TO_USER"
 echo "CREATE_TO_USER = $CREATE_TO_USER"
 echo "CREATE_TO_DOMAIN = $CREATE_TO_DOMAIN"
 echo "SHOULD_INSTALL_SSL = $SHOULD_INSTALL_SSL"
+echo "FROM_DOMAIN_TPL = $FROM_DOMAIN_TPL"
+echo "FROM_DOMAIN_PROXY_TPL = $FROM_DOMAIN_PROXY_TPL"
+echo "FROM_DOMAIN_PROXY_EXT = $FROM_DOMAIN_PROXY_EXT"
 echo "==============================================================================="
 read -p "=== Press Enter to continue ==="
 
@@ -315,7 +324,19 @@ fi
 
 if [ $SHOULD_INSTALL_SSL -eq 1 ]; then
     echo "=== Installing LetsEncrypt for domain $TO_DOMAIN"
-    v-add-letsencrypt-domain "$TO_USER" "$TO_DOMAIN" "www.$TO_DOMAIN" "yes"
+    $VESTA/bin/v-add-letsencrypt-domain "$TO_USER" "$TO_DOMAIN" "www.$TO_DOMAIN" "yes"
+    if [ $? -ne 0 ]; then
+        echo "=== LetsEncrypt installation failed"
+fi
+
+if [ ! -z "$FROM_DOMAIN_TPL" ]; then
+    echo "=== Set $FROM_DOMAIN_TPL template to domain $TO_DOMAIN"
+    $VESTA/bin/v-change-web-domain-tpl "$TO_USER" "$TO_DOMAIN" "$FROM_DOMAIN_TPL" "yes"
+fi
+
+if [ ! -z "$FROM_DOMAIN_PROXY_TPL" ]; then
+    echo "=== Set $FROM_DOMAIN_PROXY_TPL proxy template to domain $TO_DOMAIN"
+    $VESTA/bin/v-change-web-domain-proxy-tpl "$TO_USER" "$TO_DOMAIN" "$FROM_DOMAIN_PROXY_TPL" "$FROM_DOMAIN_PROXY_TPL" "yes"
 fi
 
 object=$(grep "DB='$TO_DATABASE_NAME'" $VESTA/data/users/$TO_USER/db.conf)

From 3c5c0e2962968ad32f104cac2cb4acd896ebeba4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 15:32:30 +0200
Subject: [PATCH 0924/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 7ec3d195..b315e160 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -148,7 +148,7 @@ fi
 
 FROM_DOMAIN_TPL=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'TEMPLATE:' | awk '{print $2}')
 FROM_DOMAIN_PROXY_TPL=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY:' | awk '{print $2}')
-FROM_DOMAIN_PROXY_EXT=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY EXT:' | awk '{print $2}')
+FROM_DOMAIN_PROXY_EXT=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY EXT:' | awk '{print $3}')
 
 # ----------- TO -------------
 

From d121f9e3455bad4e6bb32beea63f97cdfbc7bdda Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 15:44:30 +0200
Subject: [PATCH 0925/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index b315e160..e290ee94 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -148,7 +148,7 @@ fi
 
 FROM_DOMAIN_TPL=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'TEMPLATE:' | awk '{print $2}')
 FROM_DOMAIN_PROXY_TPL=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY:' | awk '{print $2}')
-FROM_DOMAIN_PROXY_EXT=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY EXT:' | awk '{print $3}')
+FROM_DOMAIN_PROXY_EXT=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY EXT:' | cut -d ' ' -f8-)
 
 # ----------- TO -------------
 

From be390b7cca24954b92f41e2d5082a768fd136925 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 15:49:54 +0200
Subject: [PATCH 0926/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index e290ee94..5bce8acc 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -327,6 +327,7 @@ if [ $SHOULD_INSTALL_SSL -eq 1 ]; then
     $VESTA/bin/v-add-letsencrypt-domain "$TO_USER" "$TO_DOMAIN" "www.$TO_DOMAIN" "yes"
     if [ $? -ne 0 ]; then
         echo "=== LetsEncrypt installation failed"
+    fi
 fi
 
 if [ ! -z "$FROM_DOMAIN_TPL" ]; then

From ac83a51dc2550b88cb5425cae592bd0941af2e5e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 15:51:40 +0200
Subject: [PATCH 0927/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 5bce8acc..f767372d 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -285,12 +285,11 @@ echo "FROM_DATABASE_NAME_WITHOUT_PREFIX = $FROM_DATABASE_NAME_WITHOUT_PREFIX"
 echo "TO_DATABASE_NAME_WITHOUT_PREFIX   = $TO_DATABASE_NAME_WITHOUT_PREFIX"
 echo "FROM_DATABASE_USERNAME_WITHOUT_PREFIX = $FROM_DATABASE_USERNAME_WITHOUT_PREFIX"
 echo "TO_DATABASE_USERNAME_WITHOUT_PREFIX   = $TO_DATABASE_USERNAME_WITHOUT_PREFIX"
-echo "DATABASE_SUFIX = $DATABASE_SUFIX"
-echo "CREATE_TO_USER = $CREATE_TO_USER"
-echo "CREATE_TO_USER = $CREATE_TO_USER"
-echo "CREATE_TO_DOMAIN = $CREATE_TO_DOMAIN"
-echo "SHOULD_INSTALL_SSL = $SHOULD_INSTALL_SSL"
-echo "FROM_DOMAIN_TPL = $FROM_DOMAIN_TPL"
+echo "DATABASE_SUFIX        = $DATABASE_SUFIX"
+echo "CREATE_TO_USER        = $CREATE_TO_USER"
+echo "CREATE_TO_DOMAIN      = $CREATE_TO_DOMAIN"
+echo "SHOULD_INSTALL_SSL    = $SHOULD_INSTALL_SSL"
+echo "FROM_DOMAIN_TPL       = $FROM_DOMAIN_TPL"
 echo "FROM_DOMAIN_PROXY_TPL = $FROM_DOMAIN_PROXY_TPL"
 echo "FROM_DOMAIN_PROXY_EXT = $FROM_DOMAIN_PROXY_EXT"
 echo "==============================================================================="

From da4246d22268243bcdf1e0f87efa4a1df88fb528 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 16:29:46 +0200
Subject: [PATCH 0928/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index f767372d..07f0ba7c 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -336,7 +336,7 @@ fi
 
 if [ ! -z "$FROM_DOMAIN_PROXY_TPL" ]; then
     echo "=== Set $FROM_DOMAIN_PROXY_TPL proxy template to domain $TO_DOMAIN"
-    $VESTA/bin/v-change-web-domain-proxy-tpl "$TO_USER" "$TO_DOMAIN" "$FROM_DOMAIN_PROXY_TPL" "$FROM_DOMAIN_PROXY_TPL" "yes"
+    $VESTA/bin/v-change-web-domain-proxy-tpl "$TO_USER" "$TO_DOMAIN" "$FROM_DOMAIN_PROXY_TPL" "$FROM_DOMAIN_PROXY_EXT" "yes"
 fi
 
 object=$(grep "DB='$TO_DATABASE_NAME'" $VESTA/data/users/$TO_USER/db.conf)

From f3b638d9717f9ba9d1512420516eca87f4ec7c24 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 18:41:39 +0200
Subject: [PATCH 0929/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 07f0ba7c..a56f4774 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -148,7 +148,7 @@ fi
 
 FROM_DOMAIN_TPL=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'TEMPLATE:' | awk '{print $2}')
 FROM_DOMAIN_PROXY_TPL=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY:' | awk '{print $2}')
-FROM_DOMAIN_PROXY_EXT=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY EXT:' | cut -d ' ' -f8-)
+FROM_DOMAIN_PROXY_EXT=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY EXT:' | cut -d ' ' -f8- | sed "s# #|#g")
 
 # ----------- TO -------------
 

From afc55323903928b4212906c5f29cabeded647cc3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 18:44:28 +0200
Subject: [PATCH 0930/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index a56f4774..443208cb 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -148,7 +148,7 @@ fi
 
 FROM_DOMAIN_TPL=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'TEMPLATE:' | awk '{print $2}')
 FROM_DOMAIN_PROXY_TPL=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY:' | awk '{print $2}')
-FROM_DOMAIN_PROXY_EXT=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY EXT:' | cut -d ' ' -f8- | sed "s# #|#g")
+FROM_DOMAIN_PROXY_EXT=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY EXT:' | cut -d ' ' -f8- | sed "s# #,#g")
 
 # ----------- TO -------------
 

From cc4fc9ff19f29b779ef8a241cd3b93c2486c4e5a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 19:26:35 +0200
Subject: [PATCH 0931/2300] Update login.html

---
 web/templates/login.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/login.html b/web/templates/login.html
index ee7f9ca4..47e004de 100644
--- a/web/templates/login.html
+++ b/web/templates/login.html
@@ -53,7 +53,7 @@
                             <td colspan=2>
                                 <div class="login-bottom">
                                     <div style="height:20px"><?php if (isset($ERROR)) echo $ERROR ?></div>
-                                    <a class="vestacp" href="http://vestacp.com" >vestacp.com</a>
+                                    <a class="vestacp" href="http://myvestacp.com">myvestacp.com</a>
                                 </div>
                             </td>
                         </tr>

From 0bc0f2c52345db72aafeddbc7eb24e65003f8120 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 19:40:19 +0200
Subject: [PATCH 0932/2300] new logo

---
 web/images/sprite.png     | Bin 37382 -> 57516 bytes
 web/images/vesta_logo.png | Bin 4075 -> 5918 bytes
 2 files changed, 0 insertions(+), 0 deletions(-)

diff --git a/web/images/sprite.png b/web/images/sprite.png
index cc9fa741a0a266365fe1ada00e1440981108bb89..72fefda2db8a3e6aea0200b07d4b42f3abf3c14f 100644
GIT binary patch
literal 57516
zcmXtfWmp@{_jU`#OL4d2UR+zCK!Qtg3trsaNzn#(3s&6Sy?BeeQ>=J#O|Uo5@4fyX
za-G@TY%<xLnK`#i#1|D=Y)o>@SFc`S%gX`OU%h(0@ah#(BswbM%(re|MMQY*rY<Y>
zs(OO*5OMIvN>W+!)vLNVtVdH6#4(1moSxgOSMU1&d%YfZD*gKE)uyC8KvL7&=wCM4
zH_G{xYE`Yfzol6MnD5`nMZZcw!6yxoPo?Dk-GTqdV?eMkup_*snQ;Lo^1fED23cl_
zv^Fe;d+7}YX*9RIDMM)V7xG;W<=Aztv&WWlnd}ZTuQ+!J;qoc5^^%H?qZ+rfw*5o^
zU4k3~{>zuKqW@a<wXVAg>!5J~`NiYxkC~W5B<Ei|^dw<PT**FMkISGG#CzohyY=~`
zFe?ZbqD%MG|95)?j-2U#mm&sa3u_e+5wK0KuFHssbQgH6mH)+rdkCTSe^JgKfLVcv
zZwBINr4Rl!OcuAdi@K>kvv6^h_*{ugr5VA++1S{4@AlGi4Y|Klci%tp=hcs_x%vOF
zUu}mmx^;bNodaQ#FA5UJgMH~=+`iX2p0BF)V-8Db$zQ6vnmL!~Z&^H=ARDatF#m>}
zm>cTp$(LlgM(RqqAK*G{bQ@N749p5^Lk@{_{J*6Q&dtmyv1>nO!{P8TS*o2;;RUBG
zA8KU^{!r1SxSDF8Z0O4Bm@K8nmmOU_-Il+0pPfXv-+kFx5eWNhJcDwOFfENWBw-kL
zSM%=~EzzGsXF=I&p?S8|)x52)Dods8sL)s-CO>a5;JTzsdfbYb0mb8z5Wi(3up{=@
zFYF5Ksy-=dg9l;JeY_@>bZ*H?Kf=YrvtKqr5Ga%!DsYT1F(9yeHdt1h`n~^poNuxu
zLTlb=u<1u&Pd)4Xo9&Q-chgk_w=-z6H2IhDOaKpAs|ej3y;Y`LWAR6HL*c@~M=Zpj
zk<$MiM?*s+NtZ^{-P$NK%s^jXiRZ*3p-KQK2p;dtPJrOfIyh8m_6C0b8u#7Ol(mu>
z9imB__3@+P;RD6+?A-?6Kd%lM$nKNDP~;QD%!#sN<B>g=l>*Q|BE1(*RZb;tOvkEJ
z*jl{rO{lX>_%HhPGNHfSx)EMNew&y1$NX8(3*k5J$_*FD;%f#B(4bK%HFDzx=@*xg
zcfL1Yu*F&flD*gRU8ml_&uIK(j0~R9IsJ}M>YSF+%dT&nHh>jI{s|xaHXa7VqjYk>
ziGdgAuI+pDLeto8HMkGA{9Vd%;&A)`ST$GV34prw?17MqKf&=SEe>Dh&TFw#;cnxK
z?-N5N`)uvz8yie&ej7byS<UPq53O0KPaW}bTcO|nP4%Qt+<2e-Mnal?FLh>^#<Nl9
z9Oms32k1+WF>B=nsdJxbVXG?t>$L9$Qo0@awCy#|Vt*ENHQ9lD+|WSU${pP=wAD*5
zu-_encAHM;>0$YA^IlpXMm49K;)nzG#p}+3N2~KxpGGaNSB+m%9AS&>2b19E?@Kto
z?YA>~VgRr83me}XSc!H2A91MPj=)@-IeXQ^KGQ{(T9Rss3z69MUi-LN2W(2M-SK(Y
zW)ccMzw$eP9)BpY0zW8z;(!0)8TP~RC}X&*R!VafJ|_cIduzd~`^&SY4oU&{^k144
zIg<n>b<@`X@5LZ?BO6hRbdS^n|K*apZZ^+m=uPwQ4nQb8rG+_)p-5F}Nipt(^1~Ys
zE1fc!Qs4*Ka$Jq;w&#<dCT#mBz!CwB1R$Ra$D-j&4gcN9;r09^IOf*F?)rC_*VNn=
z+tYJg&5V^}rtHS!q|<b2$oFw8f_3hf2LAo5y6dKo#Iv;GdgpgK<2h2s#=lna!o&lH
z(`=-aL%X~0(LyzRk1|MRvRjN*H@dG@8*O@IjGz9z6ipQ0c$WqD-0w%psol76RRVWj
zygzcKk{Y1;U((uAeYM{Whsc_uAacFLWoIbjM$GSa>Q9&7pf7P^H@$>qOIZ~az-<r2
zw17h;$}%vI$_nNR9COsD4nMFWF;Ykw9Fzh{+^i_(w+UmR+&rWNR1S+|C*VHWOin$Q
z5(Gn8%3mdLyt#X#kHx$g+_A<KpG#W1s}Fqos0ji|dN9Y7d?^iQQY|aE`?Ib@wYL-T
zgR7*nK8s0(jH@|U|JDw^w%;?74~2il_}=HA^g~TG&SigXbyXHP2%O<v!U&RT+S8Zt
z7pNK}5=h%4y0(g?6j85iX>OiL<un-Z?H1mN_O1JOa*`*s;h#O(^*D&xUOZiuq=J`^
z`Rp}MF}Jeki>~q~zR#DEub?>Q1Nn+nwpz**!`of}pnZ2NN}eLoKM9BD>G)Z4TZ9-_
zpFw=EJ}k^hqeQAiRU$=3l~TE%J<9rN^$aqssa0ek?ne>ubZkr__%d{S|L&fKvP^r1
zq}%o5`ePn@nbao@Iu}Sa#j*rXEjqs>x~q-Rx6&NnqcSrLwScFa#j=<%WDFo|Gf{DG
zYO_~5v{d|Vts&p0y`Z4~YTq3haC4<mJiWUUV|hu_-5vbg?!b4`)T~xmq4<x2Mb1<#
z*2caJf0`9P8MlrOZvXct7PhEy$4G+i;$V1fVGG;Sk;9=_ZgCpVRDF3k+0dA0w1PO)
zp6z9p-cT6xv_POFe?F@U(G;_4luVVCWGna@V>zr_gRTgR(#y-s;hdCg`N$ui<?sCO
z#8-Uy0W|khoQ?MsUNh&3=G)n^c>S_dh4S)}k$>M5IStEFZ;v{GHMor*Gy4k1%?m(K
z0|iCJB!GZf^NPEd*S;pm1v!hQTsDpxFV2R;8HT&arIek+P)>}j46>l9;6v4<Iewsi
zNQh-2Qtmxq2j(7*Ea<~07E{$=A#rMF%QuDC6iO?lc$zokek`K)EFOVy<9jY5wx{7^
z_uc{tB5C*T$HR>;-Z!G<_cuF*?3e-)?ljpK@Q;o6|B?<)s;KxwV`mn7nnG1_eJ}z<
zfHV~-__>ZCXJkW<Ls+Am8-2iW4;YZGnLIZv8e_aK(Q|(`M3Z5!+l7QBp}!rg*nVA4
zK*!$t+1Y<0EhS|-nN@>@@*Q)8EeEbK17Q*E;YZimVRFncK;O&{$q>ZPCWbfxfhf5x
ztYC6hul5u3r@k_)DT{(=P%J<#rl=I^v;fmB{(+cKx@9X_wgg=NvOu|A)O$=R!iO)%
z?=L*^jV#&v&0&_eQ+U@8ZdN7ypY}q*l+_W6no_x}TIASuD?i91Rmf#iBp!{;J36C%
zYdW&J&)2+cR@&3boR+w!qbsAyBv&>iHD}JD7oF4LINzK96;|hOxi7F19A@88@PcgE
z22m_Vl6g2DzaLJcy`()qZrkzO_K}jSYdDBAXINjqU%!iSn#u=89b{AajdkJw{@Gt$
z8vKJ^rz0QJm8flnNQ?Umoz6xWkup{hh8N*dI5w5w+FFuCv8u$vK*ldUt8xCt%i-V)
z<_x>vYl1fAZI(1|n<Oo{mzK4p3Q#G8JlC(P^Jj*0i>HF53$Ns<+x|(Blb;r=Id#cY
zJ*>)EZ2@^AHV$Xy4i5^?W7i3(MAJnbyVM>7hWE1lr3A0!y+Q>mUrLtJpl0o-#o(gJ
z=T)R~BCl@plZ_tZtV&;gw}zEoX|%GkviY?{IaF#~jgEX<yyRAy0<~2{qp|gms86|r
zS`#Vy_EAS|xxefiXtP61gVgJtrk|I)U`T^hUa;!t^Ex5pSiY7|&32&>Z656#tymLq
zw^#m>MBt01D0sesuD7hPCezn4OOnRnu}jWfw6P|sF;BV_UQagX77uLB&l24ON9%*#
zg;=}xNLxY-4%croOGCha{XGBi-DW6tI1`U&f7Dq*tNs+RP!sSyJX$oOx(7z@ehQ@d
zacBG_ZY$y)x&jMLk&CrL#i9Nur^y+Nt8>2%Kt#gDyBNW6%4H(0C@GS~pNVO%>lY`<
z1cMU%X!I2%TB+QHma<VUJA7AXst}H?$=t?F@y8>l1M`~4$iRp54?LDPSyWClt<nZ%
zrssN%XW0RoYv*iuvYA>@-Ks!4A(QA=WmPAQ%`Th{8;#P@%1!8D;WM)0mkEIsLiUtT
zH>%(w9UZ5_sG7(30nf8SvtNqB0<Sim%G!SRAV&<avskpc?8xYMcvc}E^0@)%LZ4l`
zb1WYojW|SC0I9t)+p^=DHO|b!5n=o4awCQqm*tx$9(KUo^7#vglNP+LArGmC?9R|`
z&GYkqoI#H<gNFt{O%O9z9v6}SL70R_>t#B4;aO>#{ber+6JUa23LJ>c<10n$47@MX
zZ1nJZ;f5~pRI&8MVJb;0!V}9s1l>+@zVDX$vO7sr{N=)#{9|WQ^BJ!KLw#j^EwthZ
zz)CK#F!DXN2oFfrXmzG`#N$bJP7`L9W7YKzT0M~JtyV{Uw;E5mbCuh(eth-?QI58X
zE|6-^E-%|SE;BRbu_ERHgZD`J>#M7Fj>~8m%IDwZVSccaO*WlpYk#*tt7~-OYr;j|
z@uVVOzVvMT3~h25w{?+>Ceq0q5EEfBeY&Zk8B4uMjm*M0?(7i<Vm^?tS1-#kS8gVc
zs3dGf9VwD}y1k_G?9rp9;YhHJQ0FUX*f$k5bAiK0z+KT&XgE>g+WcrbkM68QJxsjv
zZpxC`pArcOl%}n!MT?{8Iry<YT1>s?IsJ5a*8_f`UhMv?OI!Ov-sgijk7uYI_<gz9
zuT^K#<xIl4rrwlV{p}3wv~BV`fKZ=pgq0u&Qo;4VMpmR9lWEgu$v||LP~w|lNh?6n
zgtc5U&w!GUZVR0j1N)7UFJ9PUm$be|(|G~hZi66hHz-)thk=>ND3s_k2(PQ%T3Z?Z
zba(6Nb2%8&TKtKm3!VL2E1fIw&2fBiyWkt6_ekSDCnqP}E#nWsZdB=26p2Q;4)C*S
zGdZBZdhhA?9*>#uJIu3<wm{whmlMKi4$9R>gNsdb%?k-d)<y^Bl+NZvw$#Tye*}JN
zeckVb8zhP@h*Z$ps{4jG3<)VBu{VU}E58tqE>fH>CnccTMHOAttf`i)ZSNBz5VSGL
zAh6f~`1Gv~+%+vq?<+Jjb8x&%IZ-9B2Co7I>HYPKXlszF5A7v+-O$XaT0rBhr>pu9
zmRB_f;{N!A3ZchX5F@^PprlQ|X@7WxMYrT;2!5eVzKQ9VvFG#%dF0qEU?s62-C`@6
zD^Z=k$(WvxPg`3G;18WPR@f7Jx!g%^^nb9B;iWZFx5<2mjxs6g7tw5T8;bdOJP4P8
z>a_mPn|y`Dr#-y?pyFRroxYVd|2dH2WG^z>Sku>F;zh5GaZR&HlYUflXoKdDGkQ4}
z!{(1Rw-pRID>;FkT)caQtq1@rZ@O(m$sUS_gpubi4Yf3#RPH4{$9gJul-xk$y*E2A
zVqHQ?kbo<%=huU`F3q2pZ7_{)e^NETJj*lOEvOG0<8hv)o<|4$mndLcD1~->-iO`c
z`G_uMZF(yh1;3XfUH9}xqiXBp;wt+qDO+7y5v^q0A{+xsd)kf_Ri8thNk*luj8q@p
zZvWQv8{?62%rwY>FpgmP_)Y465E{Q*)96yf^@h`|>72*)MgS4mU6o1dB3V+Bcm2P?
zTmn#|Z28W_lTJL<1&H;_1@d)M=yjmO%~>cdsbc+}=hMfNI_6X4@0@SN!{;`gF325U
zjQ+#c{UoL+ff4Kk%$0VF0`Toz)opS}EfNAmCih9y{tM#Tn2`0rh_ax^Iz+;&N(_$u
zQ#8Z}(BK9n7wGsxdd3RqphORcj-TjbbE`z7UIzVWPcrG(g+Ew6@U61jm%b0=G+^T<
zV?SzqN<J}P>iuE<OfA@XYg|W<oc{h+q1m`T0O=#CyVAyBvy#0$!|Phxc{bw-7{`Di
z+U!=dcCEBM3~5cp{S;|cd>46Rs182Qk!2mYCEMUED{GYq3zI-#QTb*>H(dyak;;Jk
z3B`4JswqHC{@2IKQugwaJ#0?-aVbXITyA;Z;&79Q=7?c4*!42*T)%x<E%s0~=?C+E
zsu?V^QQhG)j_IFgOYh6mxrwDBF#LM@!{v?5bE7VR5jDtxzfje}-uDcKyO_k)5vj0}
zMF3p;Obvhd_u{xH^GjT?Rg*?0SqE-wfp`d+7jo`T!1EDkxB+Z=7=`7EF!7oUl!l<|
z1AO9@h|W(*`72U00@rnd7dw#8dYUOR^tM_|wez)GVP=)a!UXhR?N)s$LA|J^(M@sn
zh7--fCxp#WOO@U070YJ14{s>GIW2VK)Q(&Ar#a`?Y<vxI>t90fCk$NoY?VJNT2W(k
zT(HS&w#m^#36;CmVg?g}tdHnKyOP6h<puu?7niTXa?|AJ(`sAmd1x(y$eIKbCm!NW
zi0y_$3Gm8M@^t`p5Z6UBS=0&cG}Q(@GF@x&z!Yq}^7ILM<bvh%z?z1-m*D-e-Jc)$
z*%IVX`MYoGn6~pKwL+zdl~-F(wrL(+SN2C}Sj%v(CQDQ>2PD!0s-K=YU;6WXXSCkt
z^+t`GUjP~xmDH%7%2RO}3tZ={zoK5D4LMWthNi}kF~F6u1DjpnymX{F(65#)4gUB`
z1Q(h<gRwTtE=^T_j5?vQuk(*ML9_2MmHwN7(aB`=0BTM_B-XMQ9|hcOdJ)rk_M7FA
zjXg!JG_SMw%LCV78_h4+U*?UcQykYV^ED4{s`|Jl?hCR1KR<nvt!`f#@Iq3=cF|0z
z4DFsLBiugVA29Y4)ev?a+}LE2l5|b#Uh<~uLh&Mgx-DzCyXyGNF&+Jp$mzH4w4FU)
zEeg}Om?o0tpFOotTn2SZiCOXK`6CiPgK(-jrNiImsTIiF81#AHXYmI5Qz>Wr+V=G3
z`t#=1M>?i^yY?7<^hCmDAK$pZ2>uNIr4H)ak_RO~3R&d7Kxv`gw8{GJtQ2%hW5owe
z9OZ7hpJ8XoBHJE>7UC4$bLOdQlvyge({b&5L%23{P?<SQ+;zH{EcRvwX12CSPbB1E
zQHK?ND7Pt647FJMhRVkiekiYnf=W%8fPjGeAQ8=vh6(8JU|;>7Y_C6IW)jqsjJsRh
z0Xt(?2RUwB#T0s9I3HSAOQt8eI+Mj+>gUe|&M_)kg^9n9_iaZy;Av_&b9iQkxh)e?
zMuk{znJf2>5|f$h@Guc+r2vwu4<x#f<E#KW(OV+hFgYW9bAy;X;krkAM!3dB4%p;@
zoC0b*t!m3itEb$1JgEIio96h$UQV?B^!=&TLvY=SYICuPUF!s(nV_5XKF)6BD4#Ir
zGgLgp$#FU~&aE~>vxo<P_qIV{gD9Rk5T3hlupiJHW!GM80w}^&1s!{yuCX%VwS3!*
zrTVC?M9^Zl_~GMXU+b}n=!^i0x%XzJUK(Wjty51|s=j{g&GuU=(d1&)8j@qKuH<qT
zRt$sgZ%WF&#=<vmMV$`NeNARjeQh=z-MAvGZ|c>|!+r%?t+V-F;ga{)o2{1k$0rq&
zkhS^tEB_TegLfG3(K~&;Wou99{QC9YjLb@hOaJD3MR&6;$3l%>V`PC0VFK>>FE0*>
zvmtVG!{K}FcFT(q921NVUoOK3OQELAsQ2nk`C1hbLaCFrl5*zb+eXcY_B|v9fR;K_
zjtav+li_{1+>j%T(K8*b3FGE^TV+jlTm1PZIm7(p5i`<-I-EFQ!Il7&+K6zz-EOHA
zH=6YTtB8t8HHTxMv8;?$MYDIS|GUlEpDw96*J;9!0dO+2)M|hl%J+9v`Cc3AKk@9U
ztjQ-((qbv;2l&)9dwWkmz}K6V8>^~Px_@m){qp=#V87bTX|;RI{i&#`YJ5#W5mZF;
zoUk|5<9KvR%<Q8;7<L9Hs5g9ZANk#O6&DavB)td#GHz{XsQN$YUgFmWYh5?cT}Iaw
zU-vpyQsYfq(`-Cs)z~yb(sVfQkK+!_Ys3LGT@9uhRyMo8y`G;{+Q0U1*w(<{BeNbU
zMiv#|y<@&b!!GaL;!O53*p8OFU=LxwHXsFJHhqo7%g9xPG)UELQ8_~>2q=87F%bE;
zY>ABK%a85QNL?CZJuw{(YYg@zA7qP6%V*^RBKkIT2m>d<O?YAH+wpSdY<GNzKb<1-
zzsw~0c=XT7DJUAo`)!Y9=(PqS7rXYLI0%L%Q&)E}!!JqXxU#|K?=Q7Re;7?!tFU=w
z$Vq07JKk~JL@(pF14SpjwD7OEZTa%|BoqtN#<!-{elnPF8KsOnq{zQ=v9dY$>x=tW
zdeP$Qu|~p}L>Nle<i$7<%-lL)k6m}nSy5n7O{z!ZAKrjrsAM^@SozUPDzZSqQD4HJ
zq)~Xgj{lXAvG<FXR}E;OXHO5T$4{U}cX69=%zjv>su=+xr2Hz~Tnl6}?OFzPJ3t3F
zmd_t?8hUl!Hw0_c+7k_t=tz=IE1kX02Gg9hUMSR{Ck8T2k1$+(CXDQ!)2h(U@KZMz
zJIk=j$&(C0wZPX|?29b*UZ`AdG#ebH6IDj@mjoZXO^WpkA&+Ma%s14EyDZONlgbuB
zl=xo1c0B%9*zr95c~F35A~iLbcwvVQOEr;r4s8fXqTI%z{_C7b4Lk7hN+hw00_;6%
zZGT7}aMcs&Wwm%9{ZW>>jFdR=Bw3N`c~ZjP1Ab7@F|U=xwPgN?G5$Bxp_^d#@CeB6
zv}1hxBLELhLCsw^Z)$#7V~^92M<z^stnelM2^A$&C52RUS4}gB7p-P6d@(t7@bQ(}
z@pOSKkjA<j65!N0$0%sL9})}M(ja_p{E=p3lK+2t0YvegEofDD>iNlYZmRD>l}Mv!
zkdc}5VK*&jv!eHnx~{GVfQhc3gv1;Wa%J>!H}Pqs^-z|+TDK{SSo~&uccb&Uqv=KX
z=~AS`$+!Xj&;$Q^j3d!#J+)y865>}^C?UC-;$l@uat~Wzi-h3I+L@9+{p0oxUz~P=
z%QvGfaqt2w<vgVb7-BcH?1d|)A3MUa+wPbf988gU&6GDU=Cz`tyER@mqq@5OHWOt1
zR&dqePE3l&c)VS8vLY-+=p)m2%TwR7B*ZCT00n}!_E_BuxDLpLsLH4-(es~NZb`VQ
z@GsKmewtJ@+3#xN&5e!xT7Qp3%$}A}+^hqx@Zc8`vqH+qpPWwqh+X#!MKhT*QWhsl
zHWil2^O#7=R*L+_^psnBeP!-RksEO}Swr_2_*1A?*kC7=hT~yAjks>L72WMkh09#|
z#HIy3++;%-mjC3n;d%zieg13iG)J`ppFQ)x?)WYcmIEI%4*V>=g2UN)M8Uqu4rSSP
zW(H45KW?4Pxa$|QHAb|6AI9=CLJs%Y)fz}hzCsNDah#^s=2tt@;Yu`S<^|)k3FO6~
zKNaB4=Qik#kAB9qdpo+IIWCx(^e8(GM7>WMN@XA-NJ&ea@PSNUAI{pmJU`JL3lVuw
zl$GQtJlviXcpS%KD3QA~F;X7Z2lHg1;@K2eZYXjE<jSo*?$FQ(-H{gJ>a5bGs_0fl
zZ+`rvPn(#c?(#t*aFNVv7RT6F61;9%q;sBGLag&&or+L0=)T!1;u->~<*fTib(Dx?
z;oDb&UA`kasZSeci&RV3RN8xtUSfg!8ZS-%*cEj(fk6<fZt<(I9*!Il=*i+FM-Gg{
z$msFkI^WsO@B|{y-S#FaGJZl*&4Ke$=F&cWy3&5+u1C{xk=qZXOd-B~xLSbDx_sN9
zMfri#?j5Wc{}@ekNqj<z)R`GwHr%4q<%aJv(WJEbivVsyv_1;Ugr!E-?pz*-r757|
z7aSO@PKWDkPHD$kWoY+TXb2zBz+E5IYdAYej6#PmnSc&CdcM6CRzoTE`{UM_;qI`R
zwZd!Wp^^ngrZsEQy{+IXaDNZqo#KctWKwdE<*BATjL2}jZ~hYP7tLk-3*>e;VkfMg
ztpfrW`(E}~HXAm1?|z8Y?}6_F`7V4(XCsx6Te9g&Poh>m3P0`F%-X#A_SVGkQ1uA&
z4N#uX@CP8CjeW^%t<{C!|K6F$sHx#<=^uhCQbVb#s=9_B*Dxz@C*ZafC!BlF04q)Y
zExGW!?X}VIAeK0>JtGFr7~*_PUq8Qtw*4FnQwh3e^N0wL0}P2b#ysrDACVJ|at^j)
zp?4=G$d-Ra*C>Z=FBYpZA2Nf@<sl%4hh&_>T2ZT?n06dyvD!RQ%I+AfwCo0?<_fc}
z^Xu&3UYh3(y>B>|YPxn7Xo{}G^{PF0@45Wtbm_`z9t`z+ZcLA`x|D5M_N=Oo(apK>
zx*1TC)UWIGttqu6qrcd&HrtSl_t!Q|iW~f!WT-x%A1q%=2rH1qvFLnGuD8ziJN4oB
zKCff(-RSP3Qy1IMavOYB+SXTB4-Vrr{%PKC%LmsO%60NQ`2xSr*iZL^tcZvP-k-=E
z9UK>N<vP6`{moEaBt4*%(i|{?hEQz?_BTEgX}4U*q#LdpDwvly_dLe7DJDvb6L-H0
z<BoRjN8X=%N@jZ771r*TdAJA`%eD<~8j7%!JCVNi?$xqpdvnxCL^kOIVTXDW00}g;
zw5DPExw&c}WqS-+CnueSV^tj;oe|4Dx>(AZ&P!yy!IU~qGu3FSgn61Vs+eL!P%XaC
z%Ro|nq}>wBo;jj;dLK3~;_{qr-N*KuMu-UfLq${T62e%%xhy21OaTp4^p7dpDo6=*
znU|N=q%`hRr%PAjvLeAj+io`l)_Zd|hxW(TB6V!T=QO}alen?H&5&h0Z4(_(?ow+|
zU^85~F6Wy=?q!gY5rX_g&wqA8ooY1DNEPM~&e6=rg!@LsQVM$}Xb@Q-A;t>+*t_!b
zV$N4VM{Wo;(|vw^p2IfZhVM)Kr<C|Z_JbWR>V%^N`tPs{d^IsPl2U)rl(7P9EOTO7
zJlR`u_YoU2k*WATwggJFEWx7>P~L4feyfpOjYvDS((n&ik8%oXO$SE|qW+urs^t?z
zxH=G~#BcaPt#s;PKdD6$>tXX=o3d=i94<hVVr&XmAqCFN*1*#Y2@DFze`<LwvLMwx
zjqNE&c5rKj!6mHJY$JWeZqSnr@u~KF14Ip5CZv$YuWpz}=q334{F8eMnw+>z#RQ8_
z4|fq39}tOPkQs+g0r@4ay*~gGihs~edpa7GmM>wODOmUS8}}m|Qx<YQhEVN4p7Nb7
zR6s@Qq%b*NS8+;6L+tzg79mdy;tXt@cCC@`1cy^CRbui1`{#6yQg0)A8IyRKxr&en
zVSLJ$37_j{3V%A%*wK-e9JO%$uayA@&6@o8U(+uT#9QF_A4-zGK!h$P-Pl==P@l8S
zeymD!G_vrduad<xHn(npONPcPljV#Xfe;&~LOpcWH}f&23c<97e-X78uo_0E@mCbr
zg{saha9*JySjL77bC1;B%R|l1PH}D1`uhNtUJKr_cf&hNwm;rGG-i%~v;o+@pjoz<
z`<wOu2za8&yA1<XCxMc3r1T7XyyJS~fJ16eFp`AJJ1}Oq7$8GB0F||LtkCS8Hen3+
zG5YZ@@tYpUf0Np@naEb|3ovAY&wD5wtQHplq^qh+uh5wo8%aLyH$>xoKZ{DKX>?j&
zrHhI9X*)C7%TzbV_N+qY^AS>3i~M5Hf6bb%5W0U!*qHFULw#LlB|zE2HNV5EZM6u~
z>9;nb1)r-g`hsGkY3A@RI*4v->w>|Kdp016+u|$j*2+Hk&$Pw!2BzBaohUvioRnB6
zo4CGJA4qq)=@6arhDE|VI=4nN?gfY;r6lvL@sAfK)NEY)1UXS$O86#_gdOhmh~>$B
zAGGOl{^%aY6fYm*D!>A|K>24fMF{6<zHhf;M)!<5(@9e*S>~wzSyyUi=9g~}gN^V6
z5Ki_%S$-@81{!vIcC?qBYv~f8%&oi(5X3!f=jxa$6MnIKxpCqbzU9iU{qQhI<w2;P
z8EeR$vI^7SFnv9EbrDgUi*13O!emZ?#PMNsc!=-Wp0U`q-$a<u<}7zM#U~ou?0aH_
z_Xk_F;owEtpn$Q!5dNM3`&=_=<%Y%ON^^8t*}>eUp6~BpBC#KEf#6_ljrqLhbBtk{
z#pGq`QSzf~87hbNojv2_9<~H;`daaY+gs1>*p8X3tZz*5Qny?)rv+eBHD{XO2rS<G
zX#`7W{ci7<7CO&ByjE72W}XO#Thrqn%gV-Q{l<(KbJ=FqoCraBkTU_j5`>a&nYzvb
zP@OhRI)IlC$E2`Sl}rdgtaajVI$Lf&HBRmbn7u5>Sujd5P4qNuHPya^{_VH&%p=El
z)U3znG*YEfv&xUm<Wt7#8k3nRly|cV!eC!H!O{b%krl-c67h-L(^k{z3s^R8;p!Ss
z^evAmhW2yB`$pk$+^$L!&NH36rPls(EgUhc3{Q0<9IfeX$Lfz31h7~}TAF@CC&>0$
z%6&(8fL8ZZFxe0Q9WPbN$uYH0-3*>{bItzJn77=$tUEatzr~iqtjd%aYsnV*!Gzvs
zrm#&&N4a+yuER;bSV?^KL_7UkvcYnVV4WYu>e#sH9znzthP1M?v4I};i&=#YUdjg%
zggm3AE4t3g70xs&S7K&x!s|+tXB8ehjGz1tHeYOY&Go+F)v>jDPwsT!@}p6Bn1kEM
zr6PSaN$LVZPT1`?Ogp|+#bS^5L3m&Kh_UuSgF6VHz;N-lP4itH)o3^$-Phz0GWupn
z_qZqXDn|D7se5Xsw4Z?5D>{P6>d`g?9ZZA%xXnPX<K!I!8q{==Ddy@S#i}vYRW*m0
zx%3JWe4XO2EWa8M)>$gCtlsJ(ZF0DA$=4%IIG`{a-CVT)ZuW1-{^d7n;81wP?Dt5{
z2zGJNh8y{YoSLd%9_P-$Ib;<y@C_C}&?hmbP(EpI+|_lFYjB<-XFzL_d$N352Qz^m
zE_^~8{x@Cm%~&egcq>WWmU=)&8x_{jz!16akS76!5rM}I?(0>ob!=|aojQ36#_PI<
zRhk)1><t@j7obZ3;j${ej^SAUN9pN9TESTTBE<JB2RmZM4q7%iuZ2hop$wZf=n0?p
z{y>x=zZW>h+B4?}$MEd1C4y<$Mqx;{%3uHFPW#>Dr+}vf+MhC<#@0N>^Hbbj{O^<i
zjn-zM?(2Y-c`om*=ZMD$+9A$G4kK8Q1Xm7><H>&a5l!F522fH1ZkJJlI0&54@d+Dh
z)B+hP!jC?K5={MxGX+o#5lqTgLS|PfL{Ea1w&eIb<G~~ce&Z10`NN;ohJ@?;G-EU3
zO$1;9p|UQ7X-h^WjA#jWu@i&6mbTi5K>J%nU=-T`;Fo+M;lfg$AhcW9b7>r{r_L4t
zC<u5|o8155jmK3(?)i1{j=KFU#2D7X^=Z1^>sKrEBN)tVcsaRm1-fdQCu&!ysh^kN
z3x4;w`g+CBhOFw*n<#s{CQMJqvlg+=WAO`svrm}qjR)Q_Y0w<MKsf1?hP?ak>Wa;l
zq2<ek5tiVBLkXhxKcq2iF&$oaTlb?dZRG9X1g<$78Al|2!ZDtmi-Yz*V~ZK6&AUZK
zMXedw|4^+gGJ+q&qn`mDRU(C@t>GM8+Vh{EV7ocU9*;0SxHNQOjO43}|J?TW=cfw_
zojy?nwO7UwpK)+<n1@ZFJ{gt`1c_lC3oL?|_sGToetr~B7jbc!1{YuPbSC@Yn|dT_
zC|F;a-no0slxTOFI1Ywf8gE_dp76*qR+=nxkxU5G`wi~gzZrl0H$(&Sx;y5|2{>tp
zR4}$M?Q+}>QVy7Hse(3noiAB*pvBSXP0x#;$lcTqQ$Iha<aQiURFGVt<=&*#WHW}Z
z`2WqUpf|2&yy;V48OSU#p-EEFtudGW8igGDm!3Nddq*$VlrM5+<S*j}E?wp~8Bu67
zUn(%!+uZ$uuL0H`l$knbmVgT3;7Yw}nqH*H8G>#vbEL*T1^v1-YlF3P!>*=IpBi9D
z$4fM{_5b3wuP!h!b^6%$a48c-?*48DAvgMY!4vSv{^JK!a{Td?bB&xFi%|1>TrEa0
z+)@5_-bl>sEobTIr?V}M)s`9Lv!ZUE*JT3&Rkh;YvSNpr_=)85)5LC?4e=67!7WV2
zt(McnXCDc24`d~bKZ7%1TiM?$WRk0EGSx2njh|K}azyXoqZG_JS8LLW)lWYW^hjW2
z7%a?+IJfEV5wOC^T<_s`TzI^AlkkUaCFV-2+B^|*Aax~AY3q5x2cE<X@hGZjLhaw*
zzRs6x2^bn0Ldvr+WRQw~<^z9gh)j?7m)rUZj5kOW|Mb1xpDs8Nn9iY|d`?F?Ue5jD
z!dOXcl$1CFsjxC_`UaL$a8)FCx#6fJCV%)|$k4(NX(wumfJ;BqqSeFNo4?U7t!zx{
zJNM3vO1vC42z9p~QpBxwKlD8BGLPG-h=Tt-EPR@O*xil#SOY)PlCb1?0u&~za2@3t
zt0yxZVpi?;yD;{Q9BjO04v>S0|2oD+h`$wTif5!f=F$x~_}TFTp_b-^exK`J6qlm)
zVv1@NP~Wp_SC;PEZMt@=e9eOVp~beau%K({U22>h;VsHR!J96wc_uV>|Aqw)tn&kl
zVQss1|9~H<mKF}ANVNT&9sDf=wvh>*APxuP%Cx-6=8WERXP|FG(clD%su4{w$vH~4
zNfqdM2a(4_>QzbHFPwp6pJ<%!H{7_E&eb>2j9=D;V82=X?s>rtwrWD-yVB?HU-U&`
za_=u6y^N?W)KJPWrGMB6ExbBHDG;5#u{XBtk3*eL=TJ+LL#2dh!r<QmKT80S$0XlG
zix^}twMTxzj<OAz%*Wh&k7P;Dd|M$sF5pk=aIUA>O9}XCuL;>>MMz~Lt}z-mTzC~>
zlL>ZNU?YUM*h9BykH?Oy*GG3u!uT!)#Xv?W@AreC;FahI=?9|Gd(ofrpny9C!c&P|
zt|%+B`)GixRQ-{Lg!C2HL|b$Nwogz^8Qt{M(n$33BSonM$4c`PPbL`o<~wk;S)y&=
z|3o#=f1=u6F3tAH0POA{-L(6D|9flr$Vfc`PUfEp<RnM@H#G;u6wh{U)4^wwjKwNW
z%7GPLWtagslTnj>ar$&3w0aj84>_A*PcB=hz40t#=gA3PsA(k05;!Mfx?i6E;%|f!
zA&Lj3EN6%1_GO)y&Pa9y%F8WQIv<y)*)B)mqtJPbb&VQ03iuqnFL(2vCa8%Kp%gln
z3q|~G-5&*NwOpA+)TI#M-V}`=SgLWdfOR#oMsh(r6}3n;h@NBU%-%Y5KkNfR8Nx3)
zIikOHUOq+Ine?#<!`fF))yXyBw;G4DDU69bSvA<yh6o$Lav|wDQybk$TbGTsg|ZI+
z459j5@cI50eU-p;bv08g0JAUGf78#hXfd?-#|3nXkl%;^iexdXF|Mx3$SjH&bfvB-
ziqo&$gmp7wzA;Yw3OJa?0*S^Vj#lgiuRDeeR44l=quA1=p@Ny%Pt`sxpTjxiTyA6}
zqbdNd!Tn~b-St|i3JMC=kM|d5hl$B&qh@<cG$}RXMYfP3ZA~={E<>X-jh-4cmk}OY
z7oM2Xa(u<KR^N^H==K~x2z8v~TvFsP<6blbOLJ;$V!y|3>bvb_SYetD&g?cZv*KCz
z$4B~>NZY+HFMagf`CT$gw8J#ZsZp#(=G4)u&J4Rc@9w{$tP&L$2l_X-SSoYQr=&zN
zHXFuA0ay**FjanztPuK7bw>HV6D3s5Gh3osQmZ#asA&JO>-OA(aJ(X-h>Z$H5L`-3
zG%d@VtpKDfBQ9eLBT8`;{oU3I9iPm3e2qKJS8f;T^a^nku}%SO*@*V`8-}KC(Es%w
z&2W(lXx`eLg|OK@<=bv)gS28%c|?2bORJY}(SpM)H{z7C6ikiiTv1vDcX%LnHo>{e
zpBu-*i@0b0Js=Z`i<f9>Mcl;=R<&LpEC00HTSX$#evc@F)Ip4iecx(KZ^NP|4IoxF
zHf3$h)I!^srY(u7Cb)uEdC{LsBlVPOBn}&e)tYJtZc>w$jjguHU!LDVgJ?f%*x8k3
zJ;{erxF~-Thw)mhHam!5Wp{LR0GF#cehAu2C@U+ATyfza5{p~XPV|%%=Oll8SrXC}
zbyt=QvK8@*0N~>qmz53<;5B3Zo=oSFena>kVNn29adL8MYJ{jS51Ci!)D%-E_bK9b
z5}J6Dj1e+=TRHn^gU=(aZ@YqkO$>w^Ygj=sQs`q2of4s@haGl@=nooNps(VIsls6D
z6~C$53lWcBxaDTxSN@O~eFIp!X67(fT$PA#XyYFv^p>TxAYt%jm}~Dwj)2a8p7q3t
z7aes|MPZpZYULy*vMX(A;f=rthlIwj7YMuh3<?QoimTe7#jz-cLTJTi*^RNXV5H(8
z(j^IyYnw}4ByqN+v^cMPxbaMcb;w*iv1y%}TSXwYd`&I3(fFMSn{AS*x;oT@1w0|Y
zD^vJx3$(aGmzc_7v|1mgQd4nEvRIW()d)Tl$29$LG`6je+Xqc5HbK}SL=u*Iz&+Ma
z!IGK;Q8S<Ijr~ppME&o%Z*FcPiV#Mk8Q0d1Bsz{C>(l5@rmG!uzt19gO5Tq+wN$kw
zbw7@<&rLjBoXWPxqz+ceek`kMQLTLVy;c3;=quO+cV0X;)_fYK+u0ECk?QogNL-v+
zR#<<q+gi4SN4xPS>pkQ~Vs*s@O;gUh{Pbc~O?vop8`M0z#8i)M-XN;yd`tCpb*MQA
zn_#FocTOAO+(=%1kc#pSD*eUNU^&ja2+0Xtf!gq7D2cFgv_nuIItm2emeua!K=on*
zwZiy`H7jgd`3Z}ui7Q`p>w?3Cx=f0qKzdm_k3QZTri;V-Yg_bV0{P(1yPUSvw{Xi@
znQHw`37AydCTs~-iWT?r@28Rl3UJ61>i&t>_rTxikz#ew?0bNbso%E~+B(JrxyzxG
zfGrq@V>MH5Eqmqr>{dGVbduE=&iocTMHfSte>iY`C*B8;pPp{dz;t;kqq+)xwafFP
z?*{GS@Nji)u>1DNF#ANVe;(*ws{D{&<LZ1M=@=o4q4PtBb6)}DW-Y!6TvTb%m*o{f
zd14Zde_JnBU5PtnO$y^{6Kg8<hIh0MWPHsEE@Zf-G8sZgBpDj9Oyto$bm6O`XkSEa
zFu=v4x9=f8rGh3__t<-DiRNubo6iV;0_)mv!Vwkt#ZTK5rEYs<+BQ+5XB}KPaXrhU
z5=z7nQE|~VfY_d)*=S(JM?44LP)UCb4Ho(2f#T+AhU;A1c!aSn(%uZxD$S6%4SC!#
zQPUoX8;HREs;l{uMgsnN#a8~RCTOwGPJtouQ!T^VcWd;dCp48v@x|S}`rO%fUagmC
zG2Q-QM924wv8BPG;)@JmM=~B^t6{X2<f(n=U)Ank>7Cc-e>H5WGyF%yI7(wGT~9}W
ztc|boD_P)lf`P0Lg1DxVRKIV%jGh|nhIP)N-X{rWiijM6W{pczvR6~~evl;0w2n3h
zzb~{z;x@L*M&V9v4JY)Fw|7AwP0ymr)pglL_r%Cw3a)im?uDr9y><EanDf+?z(_Ed
z=n&Ha>hSc)E3+FirUj&s{6fE?R~Ua2yMeZJ8^MWq&V1cd1&-#DBXhQCZ`io8$#_F=
zPgZ5wb*lOARzgq+r%BsW)axA{YaKXjo1c1tZwKFh89HyvHaIBb{1}7wFKIe=NbXM1
zRhQ5E@`ogUVQKp9-St%J$wa%n-WV@D$u8L~*Lw{lHe`NdH6Ou}!ctlWhU$T6m-OQP
zydu;FB&iT2uLTbjD@JP}I>WB3yI)@`YU>NQj>vF$M<x38v`*RF#)h@taCWb}Q>fhY
z16Bn+7`~Ky>5Nyk<~6rwo++cH#tUy~ud(~zrR#2Sbw$OpvvWMRI0y2S#O>(kzvR1X
zCEISM)M6*m<XU)1LvX4xrkT=1v-d7TAw2PkX=CE^@1bD63%=$_(h7vRM905QC^V|1
z-~(@(xt0s(#7bX_-;DL}v&o~aUEGdKdGn*qoG;Y_vI~)N$3*R}>Ib!(9HU49t!bAu
zyvEXCGPXm-WtJptLS4=2w+VJ?DBhF7Hb@C_Duk!(vD=+)$)zFUY83M+@U4AL6N9LI
ztA@JOThUu9GY1i^w6B~7q){i1on*Fk=HTRfI{Mi~@#d%Bj4r<wdnEk!=$@@1bZ*G_
z`I@_)(@{ASsP9PClejKnfAD`}DC+5vRi{~RHN+UY?3NPu6VaH_cW76Z$3E4uSF7EA
zKcP*2-)NVYh(G+iM5H4|Za8v_i=U1;o}AI+2M})iw}xez^kFD#4;uYcg`5|cQlO<1
z(inj1<ya31MT|#8p8V;TYMWYX1g2V=b}n=cmAiQ=QTnLLsZqg_iu9I}Bw`Xy{p39M
zR1w!zpWnpT7NIqawX;d@A~!`=b6FN>3V!|!Eb`Yt7nfsTW{~(WeQFYvH5^V>Y@fj9
zy4&Mqmf7#gm5FO8B<Ohj=VN}mVBC1KL>Zk<tZ3%aUhTRaFwfE6xAgD3cV+u^%eTy0
ze@CWG2v#YZ{i+UXag_m;Jreu=Z>xU){_%&O->#iSI3fAhU!6;J3yT!p=9ZR-BD8Hf
z?O5%SbF+fF-JI#7AslPfmYvv#!27$8u_X1)wSYv~FRJN-*Z~F2;hE_P?A1MrOa4wC
zD*`Tabi_+2p5J%U6YNZ$`E9$RbWKQ>sAA1!s)JwzZ$?DoUSb2mdt+#NAEuHIBI&vt
zUZofH3Pk4Avo_S#O_P{*9ppz1f@&*tK2k`e1_Ml=kho6yn%A!85&rP$KSu4~<BmP*
z{o2~VP?FM#WVh=tztZWWtSj0$ys2O22a)^s)10hHorkrhDk+ZaiFK}dipLC0FMt@`
zyOeEG{8`v*?vm!p7xu)9jnC<fm}ysTuG^E+9e0y^A;}9g#Kv23i3K}5%=w=OoS1V$
zgOsX=D-qi#BI*1WJq|WsyTxI-C&XkWudlRD(3l3iJk$_s2zOmZ?nmI@hY@AZ36U9`
zw$(g?Xe*<hBR1kc>gx6kMLCfhv;mo)1fEHdr>c2w3B}_iyvZJvP|n=?W4N%<B@l%|
zP$Z^e=d~s}9f+_vKYjVaFzBu6wEzQDvAiM%BlI=h(d8wkDe=K#X+(zZB63NlqHHu*
z#ewSYYV<H0T^CktE>?j%TvKQX#%{`9s>7xBH)u~8MsdW)xFD0a(0qFV+1-qw?GgZ;
zX|ltr;3P@d4b>M-kWv7p;cG1|8~^n;)2g*@!*$kO>AACZ;=><A8C79BOzfocuXT)k
zh-z5p78Vo`f*QX|{xre@zDi8nuBA0UH#;lM)p_2zboS~BYX1}O*wpB)VDmq<zTtn*
zWcycGtc?v7A)a-HJpPT||JsoKLJwli?GOb4SJzYOk`r32ZtnIVT1?eip7k^jwEXld
zPP=dae7f;MfUHaG{VbPNEN#q}VQfB8lFCW0jWuqW#hc(e4Y~x%kT8!?I&J<{vR=sb
zPz+6+0BsiTQu&eXg)Rja=^LUxti1KEQPU^+f+vaUs^&VEl#1d_JbIbhbQR+9xiV|p
z6{gCzWfzeefN9LRlxCl2Uo^DWeGoFu-{1*pLlYt%_V(DI_T4%U^erivUrVAQULf(g
z5I1N4O!zeWXxO!$mr}W3wSd{QFJ(BZy-BOAgV+1QM~<x(Cf#MlQqG&*awSebxq}0O
z+lc>k(qP5NEzA7y*Gc_;42j);&w_|(mh7>!6Sn5OqsVf9A((5`r%F7J<-_{;*P~xG
zpRGGjETjc%dkL|KdQ)Ptv#_(9^Hk+sUe1Mh8yM&xZ1#rCEiZ4CjzDtzY<cXLoS}jz
zZ_CSgpy6I;e}KmeRTeMN&zmzd>MnenuZ%<I&3td(!_zL3%Bnl1I?v0c(X5vj?he+8
zrO*3QhziYwld)ZCE5FMe6iMG5D~q!B6J`6}kDB65EnYRt1?~jk97Kv6PN(p>hgm2s
zCOEs{Q;(7$N+jOr#KEkT{$<~#Kb9fRdKiA`a)F}Y*SK1Z!~28#B;vO%GhbMe*Hz6V
zU?roecjoK~a*6*jAVnOtA!s;<BuxBmryDJ4qN1V$g0%(~0Nii2u{6fAR@nlxYrNiD
zVLg~ZP0lRU5q(Fktiq`x(y}vF%-Q&N`5U@d;kde39ox`~ViVxJ<*{13vQBawv}5Ln
zL@~>est-yM%HI@=o-DphoJ)sJ=(1H9bpgxn_<p#75p+E2Um(8N5T2bRr9lMWyE!AB
znnXJMPwvXOKaOl0s3R#}jzs!-S!80Sk3Gh(vy(B>-)VmO$x?p*7DdNs%IvET-UO$l
zW&s)PjcyxInbtVqj-is2Le!nKJs`HuW7Lwiwr+`d@m1)}jN%4!VzPGS{l_RPjQ@1n
z#<;;3*gj9gDi0;ZF28nr^z)l7($1+n6^SS&P0eYs<HavpYIsi%th3hZ3DVa$T5@m1
z!l_&=OrMCjTy<Ea7WY3_-edJ~=LQPf1_0<?ror<|8p4lTd82#hXHSC7!nrWFPkq|l
z;ywQ6$dPY8o9sOO&85thMe(s`EE54e1+|wFLx-jKWoa|7^pDNn{gV+-<JRAnH@7+^
z6EUh--0a8+T>64ZzVyPRH6P!R)RGyhma?_%?*J{a``2QI*qtcR6J${ylpD8ms&9?h
zx;nnQ$|O7cpc_rbr+r;=x>T1fRjyz@6kBlHEV$C?lLU)4U&7PrNlg1JOo`Z&i@_h@
zEB3TQ!wwG+J!!N-Nbn-pM-??w#N8N>!QxgX%!-OF!KO!E5*!No7hV_4r~7OfU(>j0
z8nG5f-gVJk{`R=LF6+~VUrf~;l_E5b1;;BSFvY>2CxL|KN|!Y;Rek2m$Y}uyBrf7t
zi)zl|LTmTx^|>+)&b`zIzj@v*fP^yn-*Dy}*9cvSGy$~eaLcoz_bElot-Gtsuud@5
zQK7=+hU#i7m>bBs3l391Bn1Mhw&4x&MMDNmT@!d!+tn;#^&ZFCI$CMvcD4Y%^HakP
z_yhZQ92%7ZJ$o<v4HengA7T8|5IZ1B6mpa^d7@^EOI62+;+AuQbz*pH_nnddbl9wF
zuF6?w$Z5q_`~R|_oeh^KRP*THzd|gT=zJ@$!CZD4D0fDV^@^F}V3IsYPuETVeLgct
z&uDG2JvPN1zenWzl7awD_Us@|;sM8wUfAFcj#1>mHxGL`0&vVzl_gkp-$D{LmQQ}h
zoa<^YXT-K-&d#%B?B>u_zGXRkhoKCO;BWkZs!i|pm&K!6=EzK(<}qhW37vxr`6>WV
zG$KjIdBIT{aefoch}9I~AiFVA+^mmD<G#2SDZUWkcLy~<?U#-If&6fnY4H2K8SpP=
zLX7P2n^$S%$HUg3<L=L)6AH*KgOxZczv%uOyX}Rvk5P?Y@uyQg2+YHkcAOaQbyx^i
zoVF2L{oX{^q!3{X-sG}JqG1FWNbuxn3x9g9P(0fv*fr>E&&j_wWy@!aWqba)Dolno
zv>%>n)E-6Br}~`jpY9}6;jQN!sIV=f>v3`dur*^3={fK%AjVhAa0&=!Rz4`TIV(5n
zBeCvujOVD~aOm~BC+>Rpp`z;em>{93pv{=70P<nBBPM2yg+fm^3a8RP7^l>{1f;T(
zsSkpwguHb1FA2*O4D0v4hS;fVj&H-gj6nAGBK@*1K>Sh0A=`5R9k5?Ik2<zASp{ej
z#7oEe)-a=p3~6e?Kr^O$KbXu5R$@FsIq^)3`S0(>Do-vEbnq7K&v&UApF7xYCPnzw
zS>Jh**(1Yk(tz@3$$M6jq26*uJ4m@RHkN)m2NY&We74*6;&Gkc-7ensRU{X=E&V&i
zB7EqJ@b+j-?|EdtZ?~jOZYkG%pndHp5Tm0w?;lbYgKNn`!79)7$)mK^qoFw$d9;-{
zn;n1RMa{k=n-$^Q0U~2h6)eqT=rfUe3i#X>WLd7Vk`h^+HB!<0r>(<eIV3GGOm%=E
z7iQ3vSY_hB2f1N??2x-mn#^SPQHvkG1pp!CM!!kCT(C!3{i}UM&t&5Y;MNRTil)3%
zWf_A+%DdHr0yz1$KZQ`YY^TR^wLxLENFJ*r4xP^Pf+vQc`Q-7RKNS(~VDU)1#9Aa`
z9RLvv&LL*pb|j6}gsN=>K*~MfpdHQUb<il<IJCSCpQQlSg4&myYlnuVX`!bm6QqEa
zm`qpYYZQQR#0-Zv9dZsAVVhsjRTHIXS%<4E7uE&-KdR0;uF0tV|B8r&NDm|gMz<&>
z2ncL+jcz2Rkyg5e(G8<V!{{0)T}t-|0qK_R`pxHgzJL7wxnFFr``!-MeRiL7uIux8
zpF2HcbkdWtVmp|O1pA9T^)X$A6}NZiOuQ^((@N;d*DF#@Jna=>XV4d=#o%9^A;=9w
z4XzoF`wK-ghF2D51J$g}mxui+U&zJsISj&WVY>F5Fn7KyW<>ilCnYw7e-GLEx@!C|
zKX>=pC%bH3EwqQF0{Qh&>4Z$p@EJoZu(zdQ9#Bk_S9UNaCsAm7Kjuc=r5_cw7g?%?
zw`?ih?qt&cn{K_O!K{-~xT;i|Ka>WktnJQR;b}%1<ni{F!u{{5w$5YkuHT3_>{6n+
zXDj{rWLk%p!DAI9X`JZcLzyHQE$Z)3l5#B7<{t}5n!j%uoFOibGdrDyy$U>d8U&x&
z<#?q_beuRsjEP7atwQDsnIe@qbA!rwE2bt0dJB;P={O26pS^cnYMt^x7bB3(sTrbq
zRbrxU<FZCMh=kpHt&dU$V|yo$8+`t=xQ^7vTG}gd<9V$ix(&?!c^F5Jy5bASRd=z_
z#q*Y@GEY-#SMq+!ouB@)RVzYx%}L$8l$sarVA^)};+-v*yyKDC9Y0;BX<k1ui0mLP
zfgQNrZjO;!Hl<SG<G~U9B9J`WZHJIrgprx8B*OYneL=B2<JUjQxq>6yvJeYbCEfl|
z3wbJDd5Laq9XPHICvS9e)VOZGp$t=TAhBk9$_|d*3BAW%Lp6VW_Hxj_a&Fn~i<QZ^
zvc=*As5z59oYK78X8E=A5Jh!w=a?;_PeqN2Ch!+S<MZaP_{O55EW?qAra*S+?jTnX
z*E2tpiYAr`!VIFku2xW4kiw!$LGG8O3)lN`0~Zydv-U<tdkX$yQZSvtGp}lm;3XBX
z{EvenpI1JcVd)S2ZvtK>d3^j74-U;*fN%4CtK6&TZ4Au+saaI8r9Q=HFB1Q4Plp>D
zom!=Ck$e<az3Yk4Qe1<g+HK{~b&O-oYppv%&74EOPf-shZDikWDhIMuT`lOTlAQ#c
zBX`W|N=JY3i@)B#(a67E^$LcP*O<I?B!Z}ovXD|5UHeSj(}s}Jddn~lK{%+UCu9)S
zq_jqEA`w8b)H0qB2GquMgFC1s`jhZaaJP-gTjzS3e-YvEolO1OYi&vb^Wi1<q#PkG
z%NTDiR%+x$u(WsW97n6^!Zajooz?`db3XB#Xh^0_)nCLe@sW#LiY4kHI93YanXL;_
zsL0t4@^f_9t~>f8Xl=aqZKHuD{+grXC$0rmA4ThLQjOrs9A1mIw~emCqi0+;=Y1FV
zMBLV8%YEY_YkOW^-?BvGm_qzifz`j5DQxqH)h9=TVK7(<?<`V%fJp*e;h%^4HWS<7
zg-d1ABGw;T<0dl$FEpXKIi$!6+FWtWM|YYK|A_HQ_wZA;N#~htEn!9VzEF#{>XU%0
z#n}o~{Ro~`73>h;nVtD;u}#4u4@3#9A}C*XP26@yYphRX3j}}DLLC{-KL>ItC4{Bk
zPLuQM)LI%otkpHaTSVQ5ml=-*+Hyd^U$g~9J{V{IZ;hxkVkxRy??)U*^{LuqEY?B%
zQg%J>UlKl6_2d5@XZ90CFAz?&3$tH>*Uz`fNXf8kXs!-<fX7y$3o!@{!;zO+(C#p|
z%`wM`tmK2*CD3wJ8P+dfM6RG*m;FERN&Fy8DQ-5Otu<U-*yO2Ln61H^p|G+3ec_&w
z^t}+*PF!z76cR3x$4;h^biy^K%!K%!-Zm0A+^F=bM^ms_@j!{vfk6qzXFVPt#kZh2
z9uE(G7tbbNqoEUX=1K<HCE{Oosck1xry9UymJDpNmDgk))Jiljsqz-B5m(&jvgzHl
z1bs3#Bew2o;OMmb@&HnhzAPcHUNV7#M(wiho6=M@Vg5w%{SD>m#&0gjaGiQCsn9Hy
zI=?m={<_b%>SP*2^6Zu9l<5x_sVx||xkAVxKI8q~l68OBNSgkUMskLE1yQ}Log4*>
z6$ajxMeWu(-`H=wde%)EK_T`gcsFsix-oCyA*xra@VteSZ`NR<q~5knr<WLadlK+9
zQ=q}S<M(RVeN`O8^d)(Noc&naSkB4_O#g_qq|f^x+HMuRr@uugyEAT7bhj|<y{S#4
zbjXR&H+V-w=j8NdRnPIH8tX%bUrgjHz1R0gjtmvXU^HE(4<C$b229uXKK%UcJlwlL
zFxKqD-TjNjM6`)nzn7Ccpd?+zLqHs)|J^~bk$O3z>IKhGvPI^wM`rZ-ZRm@0;gd{b
zC4-=rvo{Lp+t|&3L>8f<t-9OnO#FWB32yy8=F*?}RC86KYFv3^XY#UISVkHVAGpGi
z3+0ziZuM~;42`$!FQc2SvnHvzz59viLmq}Kf2M$>?z8p%$Wgox-VJk`ORYplkn~&Z
zdm95a&+BNY1yKL|J(ve^m2ncxoDG}~pDOVo;GlS6eYr>_w|{dUq%u}U<(SveMOylD
zk2QL?ZP+th=UcMx)NiOvfmy3e-DLQpjBpm*{#)CJq$v;>?38j>SCv=8HpAp}FK3dp
zmM+qjbUphi+umW;3|;@$nfb1FiH*lGOs;Y;Ao%p;N*V(gVEPO{R~7qZUO+^dz6lo>
zrG%bFUd0QSZ@>POzH|lOt^Tm2eqsK!Z6eWgC3!gO&U9PWz=v?!)D83Oy#3;Gz(8sC
zdGkk%H!%Dql-&(;OQT@@fniJNLDCd1K9z;O!Hpk-LkNF<<R2^Jyl$Ad#j+=iZ%aqu
zd^m3j{=~jbpmAk8g0fXxgE%SC@?o|H-FO{f+;dJ-kfvfxD7);K6=~O7!az)DVZ_l@
z^!DF*m6kb)h9|CvqxZhM+ueCb<hIyW?6q4fZPg2$2sWNtlW;~>gF~8$vLi2Yn*8&M
zCv}bw=u-*9dyiVBKB%XGy~>oIUCbTQkc3IeE4}UM=Y?c0iMYmkUcXS)zv128mjlTD
z=M$}D=y8M+Un+j@x2!z=$4Mf^;6&iV3Kwjqh&K1@f3)UQR#rY;mkr_rYrZE7;3@my
zVs#8&U=!%!Z}pjAB|e}8!NP=EOce~s&dD4tC?5`fUG%euKoth@3D65I-@2D0|J0?j
zSkFsK9X@r9|0ZeUk!2{Sxf{>=nTdoG(4>6nA_br9c~x|ijq!)R)a~uxnY}Ow=Xj8(
zJRC^;cPXPln1g3s2v12?5%)k8(p0O)th3p%@vls$j&ir=*r~JtXGnEbbCwBLGTP>>
zSHf3=?i6VM>HL>e>9>F|Tiv9l<p9?eO0~R!*{VIkUh*aSiUNz0kRF`vZcX(`mf0%O
zhDJ@}vfcZ^9$Y7U@~;=7NyuX@DdY6TPUdg(NV;M1G%|x!Z^!<({4@~F=MoV9IF$oW
z<=>J;Xrc~_hSuljzOBhziR$+)MpGIiN(qnZ135ZBsXC?{5xL%vl#=ZwUfL~RV%!24
zdRb5043#pQcL^tPwZ6|@+=J*^+O(?FiEBdW@9*3KxuiAO3648c*bY=Vbhbr;>b9y^
zqxCu*!iE4FyOqTxk#1;6Pxy%nuI=(;i2bfQ6&X0ZoOkXaPkeD}{%9HPSV33orjH~C
z@zE3zLMf$*>x-ryPcAbKk75=-8>+Sv$B9%ER)qnggA^hK1GjOy4|25;N?DVTiABwc
zZkfTxG;KmB;PEMxsiKs4pB6|uFf;er&^TKhQU(^0Np2C{2z?feOlBQgwsC49>S{$x
z0?=vwC~E$>-$0wWP+07*o7%C3DKOffz~A_0MOFvx&XTXSq)FFxxH=XOvsk&eqZW3J
zMJFJ>Hzg6tbb8*U3OAT-{^?uf^L-nBQ+uRr`*z{ZVIxNYx2yxjEE*$h?)3KSVM=gu
zy<bDjYPf6w-mcd{3%LkLdh_gMa|O?l@I4=8)XMLHpsM>D?~vQ@TTX8h6mHyBLc?KS
z;x@gunbX_lbmX-8`CVi}XX~)@lUricu{;eb{a$$g-M$&xr_PVUO_03c(fe~x_MGkS
z&#N8%2#&)etB_$dDCAY=>z77gmsd-VJjtiL;r7?-Qn&Qp)-M_kIdV&C4UGrU^S?4y
zYr{^Dw5-rd#uaTzb=%rjfBb<&Ee%G!Oz)ne;KIVzhUp$Vb6sUvAi8245^#L%%+AdX
z*tHJ32}L{Eeoss=Jf|b}STW{?1?DY?lJei-B_*k`M)@^`>G0^cJbrT2SG8|Ba1&Bp
z6Mx`Ba$EAyF1~q!A|;0$_D~PWl0=n%w0_rI5ZV^O3yn`V(-^zYegcmni{s$&=8#IQ
z3?mCxzRIt3snz=uX<(oE@OD^p(+0Yu095CE#h?uuyGuwfTJ20TF=i2MJS1+~VS`n=
za3km<kQ<sh5&);6vVUbk7=uX<wVIU;*l+#eqcJDCSlxYubDOGT;QT8i@xBVV*kzoA
z><TFkm6HliOu#G*`j#$6j%(W}!(h{IcG}61;4LbBvf*Ri&d75WJ`%1PjiYjve=t<q
z9)&!vO_$Om{pHzkU0!6Ux>DM0BJexBthRZIJWI1Kw9QT1W!17X3JE_8A(vBk+d#zB
zx0FW-I4+tySdgNSBuv^qh^+^o`>Rhw<&i6to5mH_Iw;zAAY;QbSW^#++t-&R;3JYF
zEH(sZ@#XI@3?56WzJ`Q-G66<;A<=~QU2!(@ev7_d_C~jlnV5R|lTHMA)(@7^u8F=Q
zXBHmguYYqBFwVBSXj^?73ayp%Sg1uHfX_LdL{-L5?+i(@j@baLV}5%a(LI_fnWqWS
zc$=;aaV7NF0nV%yLoIRV_xZFU2EJE0Fxj%dw#3OHQcg-<Eko&5fqegJ-nipowi4JJ
z*xFjLl$~}LSdZ~Ilz(SeWe$c)IDIkm&dvVh;t9EUj%O=z^@Q2zP^06D5huBYYrsaf
z(mcRf;Cn319+V^dg00rS)@d57K^qlJU(t$}sN`fn?aB-BUro-}-2_aXyaa?DxTCdD
zx@Ogj7)$Dlglh%p+$HJCj;zidUG@L}r;Zc8jt;Nv{(v3DSky@5s{fkcVBjrTLq=z(
zp6dN0z;xh=9PxWegA!b&Ktds7v_StyW7>m+$2T)bJ<{q$=pPN9WvVAjJ|mnJo(Y8!
z&y7(FZ&Qp^HBcypfh*1d>)O|T@JKX+21b?v9UdMI9PaJGm!Q8Pw?3fbVlOSl9AXs6
zU|Oc=5;)%sl011v3Rj8uf2rx>Gf)g8$kAOu(F@TTHoSf)hLL4%95N6rLmJOxLZQiS
zjv&YN@6Jm;D%o5J!E<S0OAwsKcJ^oaog4V%{B!-AZv>&0FX#SU`;2Gc>TY<i00t0{
z|Mb-!H=2prIqHV_80`sGP+UXzAThLjRbs8QI2Wz_@B4BD5%Bi)wzLh$VRAGdV56=E
zB#Qep{0l?8{&~agx_h+tO0VjTgyh;>dmB5bw3T^vDx0?1kfq0CX_Z0Shb@BL`+`f~
z=(MRJoDsN`_ZRt7bIjg?JLrcD0-&`9vkD0$YXX$|g&Ca5GQKubCUZ<wY`&9Fx4QS2
zJe7-=lAbc~sVua4tMkEoU%e5iomm%Rm$CzGNRGO#>lM8Iiys1fd#U6d^@ylRYl?M<
zdVgrlZG9T9YJo>}Wx>-ni8|it|5?tta5Cdz+_wdE=3>jWd|tA=>MKaq8iYu`5Su3b
z!`+r$xId3^!J|%Vi@S2`<++pJem5}L2m3%rw40Rfac6Ag9gc4%ZB}Nv+WXuiOWgEE
zz<muPS_`kAwtdV7-7SCd+`zIk%h>9Ic__})3)R}mQ<*i#QcC49hw8KXKg?OogaISn
zz@%HhJPHFGpCxN2HgtL{!6y|p$fmeg-hQSxE)iuCIC7F1Xg`MA@G>vP9jNKNWJ7G5
zKtzMcW2$nI7-AxxuLw)?45^iuPaMs@r`gl!=TsH{yBpy8Ki=`AFTCcn(#mD5vrHMW
zXPakE2nxgfWbvu*{$#jkW~?Pa@+O<8{f1Vv&)(l#%#*N3e~Egh$xoX5bKr9^FGIxW
z`^Yuc0lSXA775K6KeIQFP_5*Ow6@QYug?;cbX=zTD5Wy|W`p_Bj~nKIvuX^$th^E8
zWBOo2h&@1GMBnIR99n|*D8ddM3pQ%^#=8QeF{@BYaS4z(B{Z!VlF|1rTru;toyM1j
zin6!kIGh_0E*{&U1N6K5Z>&ahD9a7Ab1hiIaw$>DOAZ*+c)Qn)QB;4SP+XW04(f#$
zCL2P%D9h4;Nc7_OThn)@-Pp~y#~eM)G|o&2TF)aM)306K3ER>F-$?_j^s3rh+aoSs
z>R)|3tIxT8%vtqxGXcFi#E*sry72M!##Qx>PfdY+e0(;vJ_->}>i{zi^Plb-D+g<$
z;TnwFPKjh01-*`oY#bbU@ZdLoA)wMX!T;!%?^-`6{UH6kwu8p4U<*0B(NybUQZ)64
zX#&|kNJ@R1Wb+{+bxqBQ6_Y{@`O0hHLtie!Stk(*<Fd`;#lZu3@U}N|HEqhMvv<PR
zAyLG^SU9b<C#e#pa*%F>_*XeS`L#a?ydAlTZYR_glFExrkzRLT{*I)G!+Y>bauHOD
zyCfPz;GRiForClQXc7MR7>krg&-QSGS32@+>#X|TC%KY>KI^+XHdRE(O=a^5xCD()
zt4|c2a{no#@%9i|vt*0l^d2es`M2#fuvs+*tIhtC35$Pql|mkqDKf5%@eQgI7hU}c
zB;-M7>pt8vNIN|dKLYDW7|RrCdUx>rBY%Fy3M`d@7|I%l{rvfRA3qZ&WEw0xTY9?+
zD5!5NRN1$X=ujo=p<M!#a$pLNrUwPpa<6UiHK*pO%y-$=bU^H%l+a)PWrdzGBAP4I
zy}U%2sRb@B106eYAL#C301>05x2-rFw<Kf<x9F)}8M>eiEw$Z@hjX1NsU}!6f_p+1
zFIcN8>-XLB?6MsLDPxqQN`bwJ*TRWbHx}fRi5FqcK|<UeIiuslro3&n<%M5mekp{1
zPL0WZK?+T4M#TF2Q2_Ewv&1Yvwu|TWI+|Rw#L4cd8yMcvL4la8r5~}D!Ubasmxe<F
zDi_NOibBC;3Ey1uDPxN<LM*NF1&{R?v$g{DMLr*eoN<<Jao{U!1SsQO`cMuq^xFya
zTV_>mp{Wq`J(|FmGdbIh#m(1DfEP;<?L}aTv9EU$21hMA`L*?}D*NlKGY=&wwXRP5
z$J$#G0*kJW&v@QBwwfv)(ym1*a+0u?@>_Yjic#Ttd7iA>aQ{!p_gJychb_C)y6hS=
zlzxq~g4=qxY|M?U;N~|o%U6@fyVv_T!jAJVobpR;;3My};d2Cw+PSKtRDMrOh8j7V
z{wFrXdS!LL9^&}xO|%n71!t*`JP*9ZJFGMyHRnV2NN?Hs{wNdqbb6f4;_Ich#Tj|&
z*#`UcJ2c<u1HeIFKfP%kid4QTEM#7~+x>g4(airJ)!*88zc_b~`)ybtpOf*XRiZ3o
z30qmYbPYkM`5H|WD8O&N=Q_`RU!_WZ{U9`lwnZ1xJ)@(KDyK;?3I;JnW)3akcksf5
z6-fDVS(y0PKJCg3qV+VuxEYh%^n=N7Y&*L@3XDd>VfApJ!5Z4~Vj}~)3VjqV|1=O{
zzJksYzx`&Jc@do5W&H!55M6jm@KV1|)zXdj&3^=crr#h@yN%UCWRjDUF%_R^9g5ss
zC#|Wi)6zpQLkG;M^SlmMPBzl-N}q-l?#Put{cr9Bg%^UPmF_x!`E-A&TV3+$YPKXi
zeC>r9TH1u!;Ukg_tBg1LO#USR4%g-1r$Dtf2%Pq9aC^-Pc)G-C1yUu|t%5ELy#X71
z+{NiH6E=p4dGSBC9c1BxFfrpxZmegFj7RUQs{rwSx(EN5NnU@KP9&pV+4nK7y&I9P
zmz%Skl9k!CGen)hP7_{^8E3wEEyTAQ2!?XQ=K?|6D+~^4f&Z3>?%}SShYA{>2xufC
z3a9b9npFn>6uSvf!BIjJ{E*riaxtgllGCWSBP0U<FuS{HPpRvtt03^|;_Ho@7O>{s
z2KiwOzJkerc)s1-&@GjdkY%O<S5LR{*NB_YLavWp$Eo$Fld<18|Ckh5Y`{9Y`)yzX
zR$*1pDr0pM_Ijd%Pp_zY=2{gjhu5F^*wPEBbL|MymaM0zG)*g^rTOUFSl!`sbFbEi
zha!WD2_BJ}<h&<^oAmT`*S#kdK&@nNVr4!}#2@et`j|!_f<?5AMwn=TN*)2JI0^}8
zk3Z|o#0;l_(Rd3pu@&mf#INBD+E>Hv^#@6}7X+l56VEivUL7SQUJB#AC0#|DJshCx
z7_U6AZr9Q&p8Ll8AfnN$#`9`<Mi#7#gUf_nr!vC+cU{uZGr^cwaF=KJWV_YWTib<&
z!{_&XlrR3~J<K*h5F$*H^uHgS#^6uQ>lsGrhv?kj1}c=me-e(PF}i%!rFsY!=bW;H
z(3GTzvl{_KLCX0)V0U<w7vL9L?eO^$ju(C0>C}x20lOUhDy7d#uakZ7<g^#=jxB~V
zC?S>>QPSyd+9U&~H{1;WiBAYWq`_s;x{Du0msE_w_pDD0a3iP;kxTDD3w)<3v|9-_
zx9S+2?QBL};kcZT{jFW}kEz^r;hlWBygUunP5EfR0JkJZK$+zq_h=8Zr*F`og3bPX
z&&(vGDPKSjK3)Ca#DK`wt5DA$-d5sV^EBe#q(nO+<wKn?;gz!T7NlcJn9c&cs?tiY
zHqvR`OWliV;b<C{D5^K`r`z3FS0^#8*Pj-T?xiNMb|Q|QjvDKV{g)vRAWfYh{k1{f
z*;zVSx!$d|@pnS=#&%-?G$c4s=)qjQDnGV(=B}{`3jgEr(RNWb+^3b?{=&85A^-lz
zJtI@t#yCxS$wbCLbH$H9hjgJNbnP8#5AvaXxH*x&`wXBc>IOuFxqDJs28n5+ec100
z7qL7&QPt^~eB^#7gC{q6vw|=73JwtZ;8#0Y7X*gy_;$Tjy6i?9ul*t-&2WiAJ`3z1
zyqUv?dPYEA!4%)Yg5MToP28eMwd6X~>Mwf0-b6|s^zypCT(Vl_dYWAkuJ$nNJ}v;z
zFWm{c>O#|Hweg()S}X1jPZ&tlY`?#YR%ZtU7vAiS6yXBctL}f&0|7-TG1P=al_a->
zT8td@yg1?V$yPwgyE&L(w<l*2>P4YrmRqY1xl)I{w{f2!CV}1DA7)Rq&tzH^76+Bj
z8w}2W#$b5*u}%Te7l>JS1C1Jac2p0G8AI)mD(G0KSAm?V#{_oX7{tbxVjP8#g*<UK
za@s^ol^vEZq#ukjkjJeBb{<tGJ|9x4OutR)&`GdCG#;NX^F~+)eH-TkAabddntc3t
zbfj!dZ!}SYMHO5R%7ea)!Z=H4{uT55yA+)+Yfi{ht7|2&9cDzUmU!sOe;mwj=VaOr
zw2V#(iZ>&i^WdzkZYe1n%V}>vRanp--b)&MrRgM~RgukrMhyp2Ss(n2Kr)+xCmK4G
zaC*l8kCLomlVj9-f@tUDh9#G|GUeBZCau&+*6*_h39=boE1o<&fHi#$F4Jx|oEsO8
zYy4-hrpG=d5f8JhgBW+kUFbwwxmgYyvaJbO8PnQ)OxtPnyH-6+y`qO~2x)A1CoEb|
z!sLlxK_v*`yJ2>AP+Vu_GtqC2U|xP7woC4%AJQXT;t|532Hk2L6w~o9{J87bLMTgX
zYrjudO2Zd6H$S&Enj5rXG~exWOn0sGNf8;b|1iGcLofmL5V!qXuaw~@aaujCxhO|c
z`ZwPvGiJ0mc_hutp8iIMDc&FH*O!oGSr<+-0OkC1)7YXgFA@bx>t16D+x9u2CNaZf
z#0=r+uVum7hKqct!v%>BTP39aU<COM?cVtm5l-=Bc}hR%pl+rsbIC9M67R}YEzLTp
zk>1VN@jl~zw=@wcQ2k5ck(ut82XxRljI;ZEB^L4?<BJj+j)r9xl6@*_idN8*!ExEk
zN{gE*oA5%qe$MGiYIMjkh%0}JY*Rpx<MQ{^1{Vj$tqV@1##e^9p=%e$moMh(h3F|W
zRekp`2p-?v*QNdAw4w(MrqV}uuo9Rd(bZXfeL^xkMgU+4fg$KQY%DCM-|4-5EKXMl
zARP4?Zb{8T?%9}lWIDOG6=R%M7KYr7P`Z`bkYG|2veT=m|7HSsemFlcmd6@fQoxF^
zKokcm@!pkJsFu9kZ*Rr5O>Oi4``5w7mcMf=dBbw9#f#j{y*I|CpFF8x)!O(3cdqWj
zq`Jl8K>c)D{Gg~pc_~O)J2ALdUEu(CZsK0Qx@C2A;&dbQX8X@#=T=^<tg@8`)4Slh
zUw#?yxs-)!d8<o9|CWmP{g%fX>U`OwiLR8`Qc@;_i}X^;lW=6rBJECvnw`c;T{xcV
zcJotn*_e053wHsxhsmZ@DOtSZ7<9@8b2;F119tZ~9M>9s(Nro-OiXodyMVdsmT<Jp
zP9Ac9?B(Tk!d<bYez$dXFq$fX8m)Eo4ZUx^o;Xbrbbv3m0-&dAi#=zFu!r0<DdSxD
z7T@*!&d4abTS@U$e0l(KO)i!ypgk+cQOv#1zGIka@eX2z-fJb^L_}d!M{gLPDwxuo
zxA%Gs%BZ6?C-p0;3{=UTvQC20^$B-iV~!6H?9(Qw$p_w?58Y<^0#N3U{=QR1?sjCm
z)^a=*N<KD@cvKy|Eth(D;sZ%Yc+*86k(9?M=Iws#dA=#pmbxKe8=%zwXkdoZgr!}@
z8<@)DgCLyB?Fx-JWA!6S7j%SIRID9I_Vn~<7&#=i^nWmT@`Lu@DZ1(p+K7u&{s~%b
z1MoM!MZkP@a71{2|J%lgw@xaDc`;;gsHO2Jm384Ks>(u!{a^Q*S{!_K8ogfhvwiGw
zn3x-;1y<j8g@d+ao^EM}6nndN>ol8m%9+vzZ&#Negu6X=dF(!b0S^nNgmSzhpogX>
z@Q;u2rYsS!rWywLPM!^Y3mNUaaLoE@<d?wXfc3hSEJM(av67Zpkg!2^$3-bC;p`Ah
z{<{kgHPJhy7Ev4*GF4g}Z22)l!8014MAC1smQqHSds+Kij4b8ptLk1T`v+HC1+W+p
zrGti(WQqhA0BPemh?CF{!~F&HD@o}JV!3;y{pn4t?!I0IU9naTaW{xdeqjw;!cEOq
zkk@&Nte|7ZxSmr(_li+`<+||Ckkm~`F$R5b73mMB&)GhZr#NvOZSGHu#HU>~-7<e*
zYFYU-^pkoLY33vqqm%NdfNEx_4S57JT$As?5~#37c@gzBT!#dF_HjU%s2qMJNTT}>
zxA_Bvpip~Tf9^NPwZiI_8KyOMn;!l=t_+RajDOVRhf=SVLm3F-^aaujcFD`L%`GV1
z%+GIs@NnkHCPDn<*V70dT+a_?+P69Z8VOaHCgLhGu@pv|nSdrL8F-aKh?;;9Yj`z7
zmK1sB1@Qo9sO?wg27)R3T1TL8c;WfIZRKv*RC#fr0jR<OOtuDeRwC78WS=F{^#57E
z9u|rA7#X<C&+Hm)JQ^T35uKTrqS8rR+(*xe&^rX!GS(Pu@5~KLhim1N@f;D?_Xg$)
z6gSkht`~bio^p=Dloe*G6yGqB9<PT!`k=^lf_K@6p7m&VLh1P(z*9h3r=D2KMl}04
zA89J9geW$BU!GKKp2G0V&Biuvg*|SK60GU-{pS-t52)!4h3N`TOH<kRPxMp;H81K@
zcwR%xuFNMMFZGO4jBG_g0Zl1UYO{Y*?(b_}k^!jqP|l*1J}=2?I9;Yl-+NzTvsb<r
zURemU;ben_hzdS67TAYSil6FL|CQD-lN;mQYht@Rm1rx-EkK32rGVM5Uka<`mcs67
z-RYD%$i>7;j8KvhS3%I4*QJzbb+Mij!BWMcA@ljN%*ZCibar<G$oc)r(TU$7CJ(g=
zbr#MkKXgZ)x}_;#q~m@q%{7sAo!`d>?b3g*)R!E##p1Rt7-l2?yL+$1s?|=b1#VsO
zZ3z=pTTyBSk3LzbM&qA7-n2SkoSmPlDk$LX&o`p#i}e`8%2-UeUZ6&YYTY5Wo9=VX
z7uKGu3y$9bnh}^z=#@8pL8xWaZ{_`kdF!r<2cnH63MYJ!4$tKs>DpMIa^mk|);VHB
z6=inT7c$JJU`aeTH4uQ7Hlr~9Gp6`^m7qzcc*zyB%?G%2OoQN2Px}<(@9jgniiQy%
ze(H0+C<Ec&(6S0vQ)vn_j<+)0O`{Wh&c1mieWjqD6&)R^TtYCAh`!X9n4uyoxW3R%
zm~7(9|Ggwz)zBx<43{MHHHD%rxfVn|u?OBg3kXShk|i0gb(fxBa@f^T>EIr_&LhJ^
zrg-mT9`gI2ji5rEjEJ(u-{iQfy{Pjc4&z~O1#@Um6LKetM!qReZ+d||ds`ovKt75&
z7?C*fS{R^3jYP91Mj$rqbpMQ)Eng2Y`tD6On1=i=f{|~~cpG=inK-|(V&xlm8|tHU
z5$}BWFpBoSdhHeVslp<1ATl4`B{k+u|Jz)r#w_?doL@xprQg34AQj8PPm8tIZfcqm
zWwAH~vo3<J*u!T%y?a`bJ3|nzCbsbx%fK@Uqf4=*93Q8tbX^T6d?(TZnwHx=Sk0@J
zfJ*V|a;tYt`c;2QWB6sAELMWcsx2Bg9s-HA(VU96!!FDSx)1+up<tyb|2F8Y--j?G
zv%iFA8!Mk(r5(|m0Yv$T8Gm#IXfov<$T>>8!~mK9G=K!}7P3HZVv*~&v_ni_{eJRL
zYC*j3<eGQ@)Ger@d69Gq+~KL+deCwV1ZY#AblWN&{(;SC0=-qdr2fe3NcgYp=>FgF
z!@tzIqpnB4w~}`7YxrymIr2&5cf9Tx>|gTD0HdF~B$r)+95$pZa5u?G4$=zzGNRkN
zbFrw{t#03LP&sf1tQmhPs|Dfv;i2{r40<z)T)t&GqlW^a{ZYu8*JmMJgqkBwcudV=
z*^b^%!kZ_;Y^A=bB|}p8#$A5t5**j}Toj8ukxR-|Th`N&K({8MD$u`s3T@zh99Cv;
z(z3pvkboI0F6)ejw69`*PTba~hEAVJOHIeLKr|CA#o9n?RL?L`mg9jSwXNS@?nTc`
zpprS>_HadX{QxHctXb^A-9~VeRYTRsAHD)j<}kYS9NuKjElDFKL-FaOBvm?bF$lHM
z9$rj3^aUJ;x(4=myGpi2g^G_pkXnPQOM%zX@xXq#TIu$_TJrHTau$;Y69GvphUNV2
zY>lMD`<hBk=ii@CLd46*>R-5eg(1GQRds8UEU<O_jtteTk2dyW%N~_OJ>^MVnM1Gv
zYo4168J%QAd{WowI_pQ7fc#q=*CNQg8yD>Mb#($pR(8;~-|U_#ZL}EWKR=plaoYGO
z&*rJ8xZCx1gwpgi%~`3ZA5WW(``x28Hjl@f&H7T`IsuQCMo@0gl?DHXh4?4varAY_
zN6Qelgrc#x_ewWFHE$f-*Ldofz6_Msj(wl0#lbcuHm9ptVrzff!JA9N<gb6E(8hVx
z4x{obOd%RwkX?TswDg7aA6Ng96<vwpIF$Prn4#UmVJ1U4PS)szZ7nm+SjL>&ZSwp}
z5i#~_Q*byps{ZruM-Jeq59U3YMsf0PL|pF!4qDRPMEU5ac0W>c@~ow5|8nZ+8*cFs
zkg>(P#1M_)p^oN0_coCTy(4DQSibE1`z&ty&c!Wi!~?vU{-jT-TS>ac^sfu6`;UW8
z*tnQ|R%dGw&Z{>-hvO(>XoaJxH;LAt1SA#^(a!SksTV-70@KnV|KU=zb+INz=W9i;
zsf*b5<Z_H)=4j2c<76jc2^0#r@vOTB#qoU*aD*zpXOIX7^RY1qxt&)^MyTPh#tn7F
zuO_7r-z^)6saPI{u<rL{@o+0O!}+YiCcoDJ-T0PUpFb%vPKtc1Bzx)eX_L3fQ$5b;
z`I3t-Lo9S5Wdxyq4R_H{O6v$rYdA=MO5su>;Fc7|$UV|}gN6h@bHZ2r*G$UPDvX$a
zjZH}Rjp1LSoIm<(p7y?wjAB)fKFdj54FnU7BOG5^Ret~bE-5$<kFdm4!~iHCUw`U0
zajTJ(Zp!d`H5|@^s95O{n)tl(*F-^7{Nv$A;?XfXR@77R$nX#7BoxmjH=;cciG}{&
z{~pnpb5bp$@<Q2H#K5ndM5f$jba<JwYe9A&8Q_s5s-Q%|zC~`gaQ@rS7;MaAIbUC>
zQ`J#gFQJ|hHmz<jN%qpugYWMf#8EH6#s*iEJdwvVShOYz_dkC9{&`N@Tl$Br;i2n1
zbjBG=-g?0S(fgR_d-#5y-NX!HNrh@2&yJPooMZ2GQ{?_lZ|Nu1*It#?>}X99L9LH}
zIi?7Oq9huZBwo{VO&=#~K#b;KqoaiUzhlY@Oif4p{=9@OPsNbe@&^ywRP6eIB<Xw%
zT(GS4P0YiKI}y$b%Lkjny(P7l!XgC|6F#`sm^S^rK&xM92uUSdZ=f~QStLI1@)ypk
z!8<rNNdZ}{;DEQyI>FV_OtnR0m8cEE67%Um+eZYh!$&EnvokyOs;<Z4mI|cPWwZC`
z`<&HDudpezzF`A8adS`lAp+P<Oo*kAH#}ziTtd;+f|T+8R|~LyPow8Q0We-Os}I*=
zo?o1z#-k(!I{523&|d3w`-+<vHn@%T%e}veobGI+hEgzhj0Gdgq*iXzog{=_Kg@j(
zKevA?XxA<o+5}L)9~E!?TbD0+-D5$CS;aJ-SLk?t2AiwokQ01W4dGCovg*G#P`HdL
zKTY&LQUVnZL~?bg%(Pk|EZ3A8(t6qVKXnNw`(p3j%)BzA0yfl~=nH@nC9rolXFe<L
z9cJ5!zt&>%t+Go}%Tw=pAEL^HBN$=IoPtarqPV1<rn+ivgD^qhe3iP#d3~o-;6(Vl
z=3c=8Xdu-BvLXv}RDLp_6`2d*PdtHf@WR;*DrKyre-2JtV=RsJ)wlL^^rh1}uB<NR
z1b5euPT&XCREsWLaJ+k!TH^|r)ieECHuWw(_|lm)+=_6lhz#GkyOdeU-%fkxO~*m{
z<om&#ZKU{(j^?j~DssQ0^0*&5Jp%H3bb3RUIF`c0W>O?IPl1})uBlvFI!*@elw~gi
z9+Im}YfKsKGkF@Gj|yNMEe(d=PnXzf*Yr4(&+FS=gq2S!3a0#dMCE`v9>8quo#j^*
z)$xLa&#kQ=D|^@?qUBxpW=q(9wyDAj%)++RGJ&}_nC1RHa}=?AJ^q<BP%A5g=`B7L
zSyuTrea6GDaOio!Pj39(7NI4VjhoT_@hkXK&V*RYF2XscWp-ZY4yQNjIYea&D}SAt
zz4tZ(&tnR+G=%QAkBDrS-aRPF5}HCZ^N_2G%~Y#lyd`ZDP^%~<kNmJuDqUHpPQ9?z
zUn6pn#WWV!-`Wm04!#EXDn{VV8VPEtW6=7VBXCC>(OYMkfS0zJdQ0tJcl^EUEqw$$
zV`|v!PJX<&sVu<vSpUNoz0I~iU0aucmL1Vu5*H+c<cf5@TK6G}3ftR#*V2T73g$1)
z-S8Y?M(-3rUreE}?OiNmc^Vo^+3}7tRW>aUYAfw$6il0Q!=l&{ut@#9gq6RyioG?`
zgn#s^H`KVccuu$B^G6@VtFYa!jKgYu+&OXKyF|%j0*vXU?m3qY5jN<DZhXJx2n7Fo
zEIBFJvpxbjYi>3&O~v=&HqY;B=d5H=F*KHD(gj=D>%}kcPfltsHkmsiw!*oJGQ#xd
zQaW*or1Pk#t@nm+0KqT7{G5aqVvY#rWoaG1Api$#>%wPRXMfXF;74-OqtI1u7TM2X
zR>xBu<Q!05a;Fb`E~MB2$Mx6aTadVBG4_sK&v4bZUBH6)VuHW6C+EdGgbs@-hx}bW
z!7zMK6}^*E%@l~!vM-rBn=yjjm)45d@^v(y!(ho96*I_$o0y5)-C`DZK}eK$O>%Kz
z8z=4=OSB<>!{)g=2N!3}C)iUU<xEV-?Mx7qxcpO|U2jg)+hn{!3-(bBs+&vs21WGF
zZ~Zenk(wPQ4T?U6es59$R@3JRL>t6(@7Rxo9{+xy6Fvt#cVrasFOD~wC9EnA)XN-s
zsZ_+`+L9UaBU44&QNS5tv{aNr*GG?rfl|xaK$|o6!;fnkC<Tsf7)m8iu5|b?{~5$9
zO)|K9mrmRP3F!T$%$RX{0%`*6yd{}f=s$$bV%&^S4!{EM6X1fxfTygNSBH*|<6)}R
z;rL1E<CF`20OGih0K#EcV8|9<!w7HE4D#u!MtK-9wYi8nq7aj4%h+_#(WFNy_-Szc
zlup!>l%N^j`b(<cbh36I&Cj*?kA9Ku^@w7LiEl{!{94~Tvl>lgR=OdRXL8E2@n+W2
z$V)rw(^6Sy{Z=b<d#C>~>v_zNI81saK7)A1J~k$c)HG?nJ6zRlZTdSofs9nP-mmE7
zRZnF%%Y=~4x`kRi>CFUYwgy<j&uzR1=a;sfjwK%!&N~3Be=N6+(r?-u52IOo*wgsL
z;n!N~f$5JU1?%@7s;}hs-bM2OX{t}WmK|5Vzh`8V$S;)!Kj{Ch{SXqX&Bg19oiShR
zM0VC(h+d*!e8!v^Gi>pX`b`nB<L#R?lM!oB<3AGX>6Dz$%gNZsu!$(!-PZyfC)EMa
z>4gANuuoXjhz!}&^D%QWW0dyTKgoFN5l+$<AkUQB8NER3j!ZlVMIRo=0-Vt3#^tE7
zxr@{hnQ?zvcJ~n(u_n}IbH7gOJ`9{9{a`@Y^v-lrs9cN^Cl80;u}kt2S`|#{BNqBX
zs5&l*9mL-lX9I-9jRZRVV2kVY%m_RV+-d_Qut(<gtefzw^+~_pna~4G^TdCf0kKJd
zy~3jWesrY4K?l;}rG%coDh>Lxs{Mox47_y9!DHzWQey>nslMEKyo5hz<fTf0S{cu)
z10&kPqh8<r0lQcS;5{y7>(Tla|NM)P-e6_1UKP@&kt*uNto?X?10`Up;GfeYQcqR0
zJS%E%=4Yv@D2KBzd{5`|o{m9;q(+}~ICIF^m*70j+L$+31q~=WH89PeMcFOZ-in>(
z8vg_8bbiqv$x+TGqGN~dW*GjX?;F5&F0+@6tH$~8CFrDgo}Z3!R!No<@kRDiNK}*<
zJ>nB3I%vjw2aC#eo()R1AEt`Bj|z+}Z)o&$@o5u~e=f?{Pi9HeFx<im)kLW*YR@Zn
zKEAc0A&v@7Ng;Eatb#C0^)Lcz1CjKERkS`Wbs15_Q3SPXUl<JI2{B2#^axudt*TY%
zVL691A7yiA?Go|SldzZE*ayJURVD-P;`c}H`ENU;0^U?U8`3<|ZI}()=UMkqfa;N?
zf2%#K95$623$;71v;(l(&}QG+`J3?jS>6Ej?bPDT9|bUf3<(+h%}Jr5q}v&4p+_Yu
zpEksz`*?v6o7weLgU38i5nzpKA@jk;IG15*&QxN2t%DAr5aW*>K2l9tPNJEx>XP0s
z<Ck+Sk5(0CtDgUMRT^}ocy?ZW1QpJ9e02Sdv+500*JWn(N9I&&H#VP^PFx7Z_x;V+
z=^)?UWE+IZJ1TZgiI0#@)i>>`iSoB%cnmgBDGjaF6P7zaSeEx+G7Jhy(rK^V8P=pI
znwO>YToqM{9qp*%f62o>>0~(*QDun-HkiiOq^DZO4w?{RGdXpCt7QCvb}lmS6qa6;
zjpy+~-K>h;Zrh^Qh!VAX5cX6vwxk9NRT+lJP`i<Tm2V)ICM`EC8p5|CXjd&Jhnp&1
z!B!T8otpkMtiN@+Cd-bYFDySh-^4vcGTZ1!D*gatMBPz6LKWsuV$udA()%f$yd0(w
zEp_c#hr_91MV!@PDv(#CZ`jU!Ey%mq`$bC}2(!pDNQF~VVVLK#PWm6!-}*rZKNfZQ
zufRN5YIGqsrnOZxCSZ+-t+(j~Pk!kXyC*ux3k-G#VcfE|X5;l1@rL6A$39C)D*>#Q
zA#Sh%>F`2Z8;P4}=AHhUX-WZTy;I&hJ+9*WJ#*J6Krnj}r9j}X_|V~Sf+pPR{N<2c
zb;T!rEZU0uhDxZhrDtOyv0vHi4sZ<*cp8fn7C%Nd6#!c4i&6E2e$f<5G{ZIOw>^!-
zpT0|EZ=hyW(X-*<N2FCUlc^L+*O2koG^pBKRlib`5016Dr*z5N?T<i3O!#ruH2O&K
z1#jh~4dNWlCvR6>p<Hs}ZN{1{_$w9;07h@Io@6evNE$AAK%reZJ0s~h{k;<^FOb5>
zj3BIy)o_R1l#7RFGs5*+yvOW|@?z=`s-u5q7liTU`N%KwPnjV>Ru1`(VwT@=S5L(B
z=NN4+(1%dYTDmamCQ#^NS;!jUmh_uqi>7z(rqqn2wnnQU4)vm~$R+Krh^sTeWP!VN
z-0Z-yZWF<xR0TXxy)QxSFRbo+$_B?8HxrrXglz|uWdVUC3`ue|{<sPf;WkRMt|n-P
zIilDAaA6z_eZrwFl)pxa%a#RYJ?j#@K0$CZ45YSuSH4&>ueg$I%Z?7Ij|W>{hQ;wY
zuN5b*Kz-2d?r?D#uGc2H`{M<A@Dk79_vrQi-`hh7U6AoDa4gfK5TL!+W%lJo)-Hy~
zU2(B<{%*g(;QJ@L+iG!pYu9_ojh&=TL%02Yj=`b2sxQORX_C7>d9Zt8D&1aq8@Ac}
zr72xa;FZd_<>TR-Eq%66f!i$y85&&<giO7!4s&j_Cj!FpTZcpCrUXr8o@-b8%;+SM
zQqqeyG&J~qP~B9#s(szoouuL8ZYT0O`y}8}48CUx6S!>TGy6H=8*W=F_UEHFPfNCR
z@?DJ1HAa6o(6WPG@O-AIu`#92DiNw6AKyJitoa@g1=>1X?pnEex89-zN;SAkWc#&Z
z6V5IUu(mJg?UfcDMST)WWpLl4+u38J6c^Jq;DW68!D(pfe7dk~oLp`fg&Azc*(2rx
zXTCckF5F8LW`0I((|hVdwwlVskjK)tOPVg)Sx#qe90w*|hy7nURN!Le!xTGahbSD>
zSR>E%az^FQ6*>VDqT&;>0bLg4<;=YA=@A_Ey6PcVJe@9{F(q^nzn)f^*(Uqp{ocLJ
zLeWl~V`ouMsU2`dtQAo-JKCKjv`7|6MOs<q!yhHu#r*5h(#6v^lV-ih12re4R;uwz
zf6)YWt!mus)|s2XBEhHmI|pHB{qXJ9@Ul|Sr&<%aywaq)si+^SfaWk8r~_bE=Necc
zTY(D^O&2j)XmoUpM>0cqHipuR%gQ47^WQe2Az62W_P<tObfvqSOY)fq4*5f(3r%F&
z*t;HW>6{ff@aA1x<Gidw=DDSXeR+cjEfueycGC6N%#^w_HnXxiQ1eHvm6`rt`b7_h
zcVmLz4zpAK@Lw{D5!{GfjtTPoIl=Jp-+HUtu6IFY=3PDpy1Sgba(!qr&TH&7klg(?
z^5bt1t!}vW;)?RUCIe5-y81&%b3{Lnrl<9*2hrXwTr=e^an4=_(~G|MS*#hoy5|0J
zV`ePxM#z5}DI@TyT^|-2Cn&hv;-4Qnio_ml(CRxBZVbDbF7P<5Q*G)Aa9Xc)pHn)G
zU8EH+N=ALFTt68~H5?aon!2RSJt`MVuXyS*_#Iw3-dbUnBz;G$eL1jE5yPK^EF{*9
z2qZ+2!fhagD=<k7E_A{d4!QydBLknd#C=wG<g3G;O1Wf*O&SaWEzCEB>tcb-0|KKZ
zC8y_&q^%>@WZ8q&V8UTz{&V2qspP?nEM<c1jwKaN`sM(YJfZAG3KxWCm|vNS{yK%p
zZR^V3`p6i1L*g3J+J)};a@Jt-So+Ah@??|16Gik)7%&(eL`5c-OQd?$*=mKy|HC5+
zO~Kpjd%k<Sw^#DK+i{fW>%524l%@q1Rq~2U>UW<a{^R0<6&o54?M__c9{$W?y){FF
ziLg@eVh?{*u^y60JC9IGk~krClXU1j?kk$g1Yv#y?Eq#b&X>39i1doXb2paYO?yLS
z=c5E)-Ppyy_?P>o%BAb^D`{IT9~9oD&$K$9&~B~lkC?Wq34O+b9-Zj<oiFVWZKm6v
zwok-l*Vgh70|!!ZZ@VBMm%V!(vvK|ltl8(0g@$}bdhW#f%njB1Z?&F&HW1=@*NVK~
zo30aZ>{Tx15*NUU&mQVDDq+h4*UIo0)u(kCEvL_#N$z~At<nx9^$RJ~pi#2jGK=b|
z{5e%$6^M<;Hi*%gCimWjyTa?7(sI1kE2heI&A@<w=FMRKLHlEq?a%BLoEdB|Ke{^3
zFugDKa%loV3<{(xo5fmbACoA|t0hfvp5s-2L(3HSaYKZV8e1=1P9|XTORrJZw{b&l
zw$#3hf~d$Jv95*(W#X6D1(lHxk4g!TvQ>|~q?Fsf`B(>vbMzWJb>+&hT3l84MRY=-
z{P&+tf8zM{CU^I7nyG;ch1w<XY&mCx$$IEbH$R5_EPNo6Ri@x{;v()6dIlgwSqHs-
z@Ac=gQwW_`M|~CZc}Zt~|G;*Bg7QX$?KPD{n5`fl=nvy*NhiB<ru@V!&sa%KiWjMr
zVY|bNuUt4j5MOJU6p*lt&p3JqX}nLyVp%C=R2l1)%on5(%@aOzW#fV<`K9Fz<8T@|
z`Mf05ejZ`cb(k92I|4po(#f-Cta+((_}Ax{;1kz_pI-~vs>M^U(%vy+<?G^~%v9q(
zTPZH*t)n@%yi!IWKKscRi~78JkzK2(ZBNtLcO&qtxtcQZAJ@jZ_TcW)-8!E0Y8^AW
zoa!!zN9Rn+yBjQJLj^tScB~k2(FEwBFETet7PIol9of#_v2eQS-|Z;AiQNOA5I96E
z=otl#sN=+Wka*AS7@D?&B%am?mw){o{g?`A$C8GEm{JX$7JhZsmxwgIn-^4LWbe2I
zpjM`e#M4q~5EM#XJS9*u+B9U9D=TS*Mc11=UP&E(xC!S*N)6>J1n!vjk&c@&9y2xh
z9wH6o7?q}!YemcDZF}S*`$kQJ_ZIXy2QGfdq#1!LVcFqFwPQ2;tkMs!3(`$z*Dl^e
zQytT%chDl&<?tc)uI!N<WCXod@y_DXq<=;lDT@eYsC9`^PcAPlG!`?K6F175yKh=G
zIZ4CvGrY5&tGa7+UGrD=X}N@KeoI~?J6)-u^jxcF*PDyAi$PE*$jn9En>>Q}G#uH?
zd3>SSpD$V0G$6R}jajrWDQI+`9N(Rfw_o@h!A88_hKU1Ns5;Qw*|*IVSlrh#puw|k
z-ZM@maRMiNrdxqA-;i&B3<!=lu|WpvVeIIhArZz=6BL2U==EgT!3ugw!BD!JYOYh(
zM_ob@Y9<B<iq6kr7GrS`L{EoLW`!gb1pvHpM1$hYWADAzr^SDqrOS+b#Wm9?`yO*H
za<x^b60!a}DrR(0s*)f0OIAGwj5v5MqD7ilo{uGEemI9{z(o%QjiH0z@5>#Jy>2D;
z1R?M`^`DM<3dCAPL+xQ}V-Fcare!_d#`NLCW?hL+Z6AYT;a4}0U5xESme3i|-}G!C
zS5YTZyuQijkgIDehwjf;x(^CP(K5?iPr`P-i$oS`Ou9I+SKJClU5e;@mHYmwO^QB5
zI$Hgz+41jdHgsX|ndNN=mNw;GS90+yYeC$w+@p~aBs*;JXK2AC^@angxKvWpJDI5;
z^7Y77*nVw-^u^1f9HvspTOtn1_1#!0r}bU+C!ne7DlKhPzLJJKDaxel%}69!7;@27
zY7SHYa-zAbOk*L(0U1;xf%b4UIPyjFU*VIuNg->%Mz*!2dH$r0o)u2I6)`hJfRO*|
zk%5ic<W|O_?97(qR8kM?T)U}vU2&q#jF7Nq+@D}j5xT<571X2fW;MMLB>sKJOIzxP
zNs`ZgHqU|m!E4&Wnk;vp>A#z8qvV>reKrf~Z6cfJ{eJ;t^w+ofU+-`fEPOK4yP=Y+
z8@_u(s0dBr?%ju;RvObLKCBU5J>LB)ScCdqU$=CzL+I=u%f}YYHM*Qg;G!AgTzx1M
zQBGT(+r3h5S6x@L>{1`jCAXZLUuw3W0dg8b?*y&fleC&`i5^Sm8~V-Y)1ILRl=Naf
zA%J#LrIe)!p09#&^jA32l0*})Xr;8eje>1WM<+c!Moq!RCB9fsXT|fd{c#+B2L4jd
z899OKT3lZ|XsVMKB}#A?>b^*uO_Yqg)Z=#L3>CXD`0x3rB}H3@2ZW>My%osg5#ZI3
z=^v5{2j5{j0K>iR7OMdPac?twy(RC%JXc4E()<OW{}gA#-dkw7Rkb8@^he1<1jSU#
z4W9b^{T0dmcdysC&jS4xvr>ANKvU@5<V?5XTD|pLpOmuOclf$v6VZC#>Y^dW<9s^@
zn3ck^A`1ON=E`QLCu!&hScY_&5i$Xtnzzxq{}uZE2YF9&J{^Q~?9DP>^$ObPx8qKc
zPppZ@veN&_DM%<m$;|smRLj7Nf$L7GeH;B>h9hk}w=B@1`+t0WWmr^U*RBdEAzjkl
zC0zo7q)0am(%p@uB11RQB@ILO0MaGWIY{Tw-F-H`-}{~O>-?E(X7AZg?`N;Q*1GT8
zBaPiU?N+=LdLikKjPP_S7HVBf;A<QO#wQi=3S9bxNW}CFda!6GCf4oXgbvUXYXDqf
z>p$Lu(pqmtTv&wt!fm$3WQt8MtI{(hDa&6`bYsbS&)~rDLO=QBYm=)c{H=_0tc{9f
zRbxzde&3k0TeO99sq0pzCncfkWN?`|P;Zht=Gl6FQs_U#;YnujhW%mX^wC)iznHfQ
z`^-YiKbU>~n4fsAX&;%13eWj!bo;QyJ;uM6aEo}Mw{2o%%hz>0eqi`|Fw5Up5zSz^
z+m2qWb!Vk5V`6SDUzy&7Rord7EsO-4ArX0eAXYa7Wi-oB-c8e3!gcbMH1q_|edd|f
z)%GGcnS0jZnVS+Lr6wH0p}mSq1^#Ic4B^}=q>jJZi0PBcP4L7QdQFhluUnnj%H4;E
z9BU(a(AZgcut~(@<&cLwNX`n|*sF3s_UViaXr*wwy5X-KWso067E|x*s+g~D6!nhe
zU=QN2slxm?Sy^%1R_}zbZ9h>SM)~?6jPI-+Wm3`6T|NJ7ZQH}WKCZy)tN+KCfQfTi
zSK}<-auFXh6)%`(OGy&9>?_S5-d`aUKO^Z)Bq1nwXM>M-r`++PH{Zp8Kv-aUmH&k0
z5R#2;^{VT{UH9cnQntc#u|!P$$LX{?w)8H4#}V9t;eO4p-#*&=@8<q`kBt_Rlp!pd
z>kku5IcQZ*MGpm;0B#AeFbj_d1&M=MwB%Ct!tr0<)(Myhl}<h6hLJ;c(X}amqf%NQ
zV-2;nF|VTwpP4zTnUv^_Z-)gj$;;f{-SaWa85e&uRxDZM{0VV9EK_7|L?LW$!fxVn
zhBqqNi^Ey`f^UzWA>v4+P>Fs*$<hCJzI9u?lG2&&of64r1CR|sK5{i_mw9)p_r#~n
z{?4I*;qeYnOTU5PlVN9mb0mD;lhXa(*Pk_nw?&`%b39np0j|{g6RPg8%ovlKdew;w
z5v0?HO70RmiYgEFm<grE>jfqom$G&Z!0`@;IG7-kW}g;QE@K-CVyy8hHeJ>b{Jrkd
zyI+GsY2Rl4vZP6ki~IA<tH;1;>W1T}>NN$KG$)RMJmL*odA2el|3>moWftd@l$%fJ
zSqoi{gA*GwPM;<seR*ntNynL^d7e&8I!M=CDix{!cQqFT?m)Y_b)S!MyAt9QkR!dL
zLu=u3rYqyCi^efxsutEYCf<|16+aW)P2ZaK)_=>3`+&<WB6x#>Ih>h#Lij4!jp=bu
zG|=v>KMZ+lFMfl66?aMY$4+0ei$=)KFU+>{3KzgAIJb#ck(^+jp#g&ZHWJnbsy2}n
zc>@H)l1=6-F~s`AL1yVpVesa|P!t7sxe3<!Zk2OgzD55*chV^;O(tn}Pa4kbes-%=
za8mV^gG>bCDeFHD<`b%NRH~f_nb%#Mg|4`6V47@(8OAYJw%WuVSL&=;s2NGOScUKr
zuDnGUyJQW;15Im<TIy8=p@cH$bfUqbJ)d91BekT~k;{Rx)BVEy7YBv<3;!b;2mN-I
zM=)$T{13vkpVhdt8LY+Gi<0omaxnB{==darV3Ayy3T$@kzWe5J-+O&C33_s@ALsdt
zZEe7WlAi}q<82#MMXXHx0_Z^?$;pd|V9X)L88t+$)B*THJCTK2n0L(+jX8j=6C7Po
z7$Q%d%HToDa-JGaHvcS6)Aj<9qdZhABr}K4D9+W^Wil-MqraFfb<5Z&NEGu*5Wf5K
z3%~muEufe5O6+c0&N?Jh4KFp&PPARta;8UyJV0-7PNq3(^lJ0LU9tHJA(S@w?mF(=
zO{MI&$G7UEaaNEnaTY`D?@<*grc;u;cD0%#ZT!9o;>eh|syb`Rp(EgkV;wT-0pG=&
zCsEqq*MPz|{!fCpe+axN-x?wPK9EYRAW45xx|a5ue2}D(gut!Ed>WvEVw8``(I_Tu
zGhvMy3A%p2LbITVVEVXQgL8AgU)W=nja}`QH<7oTy{acY4L?dQ#yP&6<Mxu{X6VZ0
zk|aGIlj>y4#_>P!>@G-oh0%((IntE-JXj2=JUibcZ0QcaIvryGh1s|`<dN|sZb^R}
z*hs>Jgx2OHLLb$ZpYyN&;pb5>Dno*e3M}~&YA&mQ5b*!|sR_ye7~7>0)6#z+8hx5)
z2>fwYKwHI=`df8D#aPVGN1~f*`d7%noqXR^!!KT;c^N`xp~w}n`TXdd!bjIb!OS!%
zTAT{jwygzTAG7^7&T|rrRmd8tJgZP#T+PVD&dpg|?@z=(#n42JEvEP~RZbJ@F;MHX
zQ*__A0{B`9aq(sEDLYZ$h1e|r_j5j^1jtc|XP^6AVMFDI{y~=NtF*gA+}DEc5PMvf
zcU1;k@^xQUWoZ$>Vg`47sezn<bXebBxOZzXv{cnr;BH#>hHxaRaX?Z_n5+$7m>Gcf
zm$0-!JT+V7E|&6?0L9(wGJ7D=+L5VT5L<Iu732aWI21#@@HHL(Y|QOa>v{$#Vw>)l
zPr03?Fo!ZwX1z9sG+xOjBK@F|pYQ0AE|XgW5((G9OBtv3Es#(U_*X~?iAr6vmy?F!
zeHmpMH1S8MP`lHb-M;gM)k^z~p17vd6!#JqBCucpwk9A!0nKSBrSb*C>P~QFf$@00
zu!-V(U%}pj3wIYh5)NqM*PLhF@1g+8=LGYb_BK3?ey0J7kuQbp#ONF&ZZ(yJDs=+q
ztAGBc5*RPJ%&~&hCD7Fh>vNT60F+0z?h=|zcbq1uCWKiT$iS`s4Z?hl%z`*g@05KW
zp|nT<^-pUS-u`+|jpOv7?|CrTem~dOIcvRn#bk`E@c6@8oO{Dp!D+0lN{d?XSle$U
zm3W+m1VAaH)A^ER2KKMk{>48ZlTG#=iG&78+>B2Yxcy{;)f{T9%wGROX5CT5(~_!!
zQI!5_MUS@!$Q44n(S$J?rjPQ;vDFO~egr{<4wD9hQbq%R^Tv=M$b+V0-b4fJR9{KV
zGYQ~DX)nT?sLILgCQEmX?QQfXgqR)nWyKhZ0c?|O`dDoid?zd<=dN{>e^<J(vt2h|
zItqntoYyS-kUC$@gpu^yTcq)7ULY$#Ax|NK4|%n~{0sDB$L?%YCBmVJn>dKVd~KE&
z04UMq1`|a1H?j9--z);DwzBCiAI9q5?4nYg(W^Es78TWkU~^QYnQ2NjoK`qfwH_KA
zR8k?KTEuu#>pJUs;nt=aMW11oC<b{_t-&^~5_V@Vr?$G>-nnJqX>LAY0ch*5v^^Cg
z74d)n%qpx*X|Cxc#E-xa{@K)2dE1ePvd>GlFoovY<!~zjE?%0sq|PTCYPBkPkJMiz
zp6}+1t=mrB{9c9h)4OL&*YxzDV$Y_~*v=hNrYE_2PAnZ&77Io%uh?<d7C99u9OKX3
zJY-mZhco{W2^CxUYVovUBikIc{KO&R6jpSg7&82(Fy}uAQ=IR<f;a!SeK>NuJ}C>*
zPcTk^x%D6F2#`yc1Tch8heWAwwKHgd#C@Dl8&OT4eOnj&zaP1;UX0t)v&Pb!$1@Ky
zn*$VeSSX+1^i;7ZDDruzSxk8{M?@!aNa^UNC^9tC?vCn(y0lzQ>Y=;&@5|Jc8)h1^
zKLHYbG++QbI`dKjB4b5vAON4?_!82zbmOdmzv;Rd=zfOmR$k8NGDyY$H@GZ$O$`4+
z>{Ck-T_#~RnIPmf5>14WgwT*lR&^8|eAfaOjXlca1N7shcv6?0bI4OC;;=bugO~{%
z)f-{}cyXUffuzG|<o1-as;SXQUQ}vS<_=g?!%(-Jc`QA$hfI&89AMKk!)?KDcx#W9
zNQfT_bM|q0lI(jzcggA6BkS{PsY#wwL<gjXEdDIcLH04k-YZghp1@=J4S-W)6~Fhv
zEX~ViswC|YO66&<sjRQ7Q}On0)~+Zm&4VzH)CK$EYYvu9Oij^E5B&L4^y?R>)Vp2F
zD6-Namfb`bx(fNIdQH&J22>Y!=cIQ0>g^mZ8sr{T-d-8cw`yqvy)S|ty%xC*EOB8T
z?9{o%%sWbb_kuuMgU+X-p4vgFv&rM|^UVOaKVO6Po3QY06WG#wApagtu60FU3Q#*1
zz&?8~%u}NVcb&Cf>Pt(JcZVM<Xg5cb=6`3=O4GaR+*{fT=Wt~!|JQ({u~nNFSx4_M
z^c`sP7bZZZ1T=k!!VESzO|7-nrBf=1$x%NyO%(zws_N}uze8`hzGXRHjTF=}0rM^K
z@bxwb0c%Gfdx&3V+Tktiwd=*<R<8m)QIeVnc^#zwJnrY)M;4XHsxC5`UiBf^nX;iv
zRe_`mL9NG>=S2%3!DYxUg};11bJVJ>WRn><W&I**<995LB0VoAUI~go;`Fp;7`*~Y
z7Ddj2G_E77uiZW#Tg)1ON9FoXOUDaA<dg!rzYE*_Pm~$1o_wQX`O<vUh=$)>(UH6x
z&&j?0cJ+Q@RZe^CEDibQ?O25l@@iPYlH};8g|RWfGyC*?(lI1Qf8j|3;`vv_1bJ}#
z2AZG4Rr^Z=TatpHaOti_n+F9XnR3#FY^Efw{kbCIy39vne(q~irV@)5<x#vKu+6aW
zp^wYZGv6e_bpLE^4n!xB`?HBb-tWqclWi4P-EN~y3~4qmQE#<4%_FpvfP8E`J_<C0
zOT*F7kM3VFZI61U{o@(xV95$qq84nzG7M%YOgBD!50roHOnJkt)z{<JDY`I2d~h-Y
z-Tw5eZLNlLa5jXPXNtrFT;&VTHuOM!kt8zb=N8F&l7;D9Ql{*B>v|xT-iU&Z!Ypfh
zYz?JUSt<O!>co6Np#zK(G<igApb%TE-QL8_FCMI_E8}r)JPo^(`it^YP^k2Bs!D~=
zgj4TN>n6vaC?vmj3R&5JFF2Z5b0f3!aR64{!6|az0vtmh2Yl&1tC7CarlSVXyiBa!
z>l+^z)2QRyXLR(fOqOODGa}!VjKCSOQ_8>yXzCORtVX$?_-Y}pDpWvpb~*ZEcwk&_
zvV~Dk3_&>DT!o7()F;eFUcRI;DDA7M5z;jtER#lNsBW?o^+{R;EQycfhYG}2#eqOF
zV*=V=#tbX3qGfyJPw?W8u6#f)`|<Z5LgP~Sd7a<ynNiiqNOa&j+R>zf^rdWU#bEq(
zc~C48z(OAWm)c-;cFujUur=y`ioWh+)X-K|Xm{Fbs*VAIqa>WF;-_wlw;B^2Ic-k|
z!X>+}#sZMc@BlU-piq+@)YX(wpAZ{cHAf|-=*C3i5F3i9k5OB8cDN>5Y_+U?FIOQw
z?+gHfe}bqR)SDM0lRJ4s7HjXB7kQ-ET$eWSRg}m8JSbGfI<g%9U?`$Lz%fC!OZu%+
zXV@S4P||mvqab+&_8#8)lv!$hmpY_C0j-B~QjzJ`wqqo?MupU!DrJeAw&tPhl2Q{1
z5^e3=ztuG>_Zq5lbKQOgd{jVE2n^e-GWs(3R$d{SmeuT;U$xP;f;MI!4}u<#g(XJ)
z?*wS?MTKtOu0>>ibF(nRLk}N<o~boPeaMkT%oARKKwVoxte{b+lCk$F4f;r_4evri
zFDNwWs$P0y;DgDsHdxobbvY4VNiK(tU2htS%;rp0UUgqWKt{HGt7Fm+hW664>*UEB
zev}LYAnJPRLv104o&C|u3o&U!WzUq)|JrJ!ntVIyx%``(3ZB9n;kvw1tj=l@>+@CJ
z5F%Fb@{f5j$5Gn)iR9JuKhtfg80yv^i<W8aRaozm`7j>D85fjwbyLU0Dr)B5lTyXm
zqdbwMpoY5X1R7AIMD2FLL_5Z^IL0Q<ElBw9U(J5bM)z+0@M=yg#ICLVwZJdv+zd4_
zAD8Qo3Q%U68Wn`#R)`|I;NnnK$u+pKk3yXel?orcC8G}BmCKbb^)~xBRrMZjd8oAQ
zIO1`g&+XA7D2?CsZQ4um^9wBUhKZ^TYG<%NmMlLaS)&9VRg`^fEYN8ZyoE>e<rNLW
ziFCCGiJHQ@lt1BpY2GclR_X&mbPDM+pVxwm=((!z%!T}~gi=BGWI$|oXS*+#sqW1W
zw23;y)Wui${)zO?h{AbSET!Nn_~%0aHR_<yQ6=l-7LBJBYWfVzP{9y+k9Pt#A?PM{
zE@g-hHrK9m6ZU3CV1vA^U#*ca++{vIlQMMENC9B7PoB%AZxtUt9^k#u(>o(_so=kf
zZl(YVeE;<q4;r_VLK(@!b=2X*7b^mDfa$}h({kzVbe<LTnLRDw3DB2)_MtUnS5wWA
z*^6eVcDr54s%!Bu*?a!yr2(3BRQ6xuf}qoHGX=})t}^Z+@RfW0=w$D7+_?ymYE^wn
zQT(6~J5)uftojc;m<`h8yqD1T*sY8E&6O`W{;SFK?P^o=|J7tF0Uq$Ql=ehE@``~|
zIgKu4K<o<rTxwzPRVIZ|-OSXn+U&SjQsYL14@!xYg(=ehc2kf3V+m7fD=$*tYQByD
zp{ErA1~CsBp@vp$&dZZ2S=zW4g@qL<i=LNrwWTY}JA2g(reF#0OLyJl1B<Q0T_A@`
zWyvJx{r2{pxE_XI)S`%E*=Alrd-<X&Xd#y|Y|AA9xIxmj?_B!2&bH(U$J1C#7h2f<
z<D3U`C|kDL+urcqTWv_yepzxTZV0wqQnY&?VnaJCp%8qS!`nRk^ZR}@^3vSguWPcc
z1ii2l?|-{nkmYCeK>gs)+4&<`(*An)MAp0S_<W=`cbiF^Hri~umpU&FxPr<NdxG>Y
zC)O&IOpNX^(Dtg#Z5mb~mR<n*4Xda<N)XWvHg<?Az5u&XbE){I=LBwp8o%<JN?hF`
zX993qEA2@-OLJyaMgD+tx=05BOHmaN%4;>{Sp%}Ggb$k!(=J5@1H6P<8n1^1#3OqW
zpb)PbjTs5GyGxQiyX#`CN&TUv{G!A~kHS?{e@<0K1}$5r@`ERc5#GzNXlxq*OG5?0
znq2rb7^LPjg>P-xrTRwrF#K@e*CE_*5`etr;2-)W!fFVEftXq<x!2#+DRYOC*6ES7
zfbVwEqp2AdqZc$D`S_FCq~RsfHh-OIp4=M$M(A2b?cOF4)asmyrNJP8qgB=t3qbPy
z7Vt`iTscLWjfD1X+%=j0)I)bBLkhkLoNgBw%Fhu^x}LdA;yM8*zCqdflk#kB*{<Xe
z0Q)zO($a^cDH7qm0pz)x+t#FW_cW3)M(aqyKOdPiV``Ym2Rqi@h^WbP6}kAv?Ue7{
zyw(nG2i{I7W51o4!4k#3N~}G|(war5UseVX_frehNM1qgcedLv|3F;(Kwnd$$veYd
ze|vfvVsBccNbt-rmB>!*AmW&0>L+jPlzHbq=zfS|w+ZIp_2{TnVb;(Tz7)}0hd{<Q
zY_%`+pdXL-lS_ao18;Yy{ek2A`rr6|x~Eml09i8J{)zU%G{;FnOJAMkgzW@DRHl4L
z(k`SZUI<GjqByl;7s3&n^&}0anrFueQT-A_*g6CzdA}aE=2cSlXGsAoA?Y2Ce_jKO
zu+|?}2?amS-^xE3Xeb57-k49zZ-h2L81$U(7xaT|o?&<LDBtHR-I+xWCk;1r?pGpA
zd^m4}1pv+_nbyV8E2eTOsnukA{`$PiCP3Y4O-FlbNNGs(NA0NqwHoGOgQo393<bWL
zuQm+6Wo5o+n6;wy)8tZhd|V9|<$QSTd=lJ+ukXO+yDRpb4k23ar7xliOR9#ig7PtQ
z`HFGATsGg`#dtw;6sZQUmYVufswSHcme$o7m5GD3v=-ClQDfcc{27v1cS5xP_z*y)
zut^F~v~X_pydZd{=dtb+{JKgT0?7$wdfRbjL^M?#`&+`V3+WEYwB_e<(s=1s?Yo@7
zqg+hQyE$F>=`Gtb_uyjSpb#%}9tX-U9W*(w1^FXt((bFF=8O@7yLz9VcqqoigtSjp
zM2hwqB8N|k79Rn}s@I=M_w)&(5wQ68ms4kTJCS!fzLC(D5F0rZ-suQUr^UW&cHjl0
zFTXN%jEU<6G%_7+UZgCGoZ|2TO&tCFf(@Q~(6k+S=uDFH5!s{Z0hJYTO2C|5$+acL
z)yygOb3_^rQzb$~G{#Mg18!E|sx&~(cXZndoB1;+Rnu%e+iZj7bjz#^@TKkKU0O_-
zujROe`J`RFBLMaWRYW#KIT${`3@CUI$XmN%)p|=XM3iadB!$b#&X<{H><{`_<EF1S
z{Axano?pMp_qbnH&p{z;HhgVENsL6M5<(r7VoOc_eqP%}0ew3Gos|7X)S`&nX=)9}
zV$Tr{{^-ktW4?5s^=u&pDs*|@SrhI<;)fe<;-pbq%Z~`W{kecpSY#lWvvwD50oSSZ
z2NG&dN-D0c*6FSfIeiv~f(2z21xnjJNd24P#fznkLb_<qixzB7BMMWn4INMhTD;Ul
z&s59d7ed(U98^HLeiMp4eKajLvWYz5e{77^SPgB$L8WB?GtMsS<)wa=K9CZdT|DrX
zwiF|6B-rkeyXTGTg!fXxrlfLLHW~@FE;~&**L>XS3&1m%pl}=bo|!PnQFCnHd^M)R
z6jw`1E~~|s>S?;bl`okf1oqv$mMV3C<8ADs-ur6zl9z=OMgND?Kr$H<(>wd}A;2}`
zp;GtTZG9(CiI;?M<E`_C(imw@NZD>m=`Yt8s<rzZZsOt0hAL$nmpa2QW9!U}M0O0a
ztY3}}mJ)(@XMRUnk?p%65Na5n)#Z%naeej7yB=YSuDv_>^niX#F5aVQ+1Zn!6pz$Y
zKL4k8Gr~jfp1G`y)kd5;{;<n&m4#<pVegi7JR$hT;?<F5MR~-#Zids>wHL__t7uHj
zJiJ?z+%ytnb+$i-OuKi|1s-1-cN5Q^oXP)c&(JEDg*>K&d570Y`9Rhh1-~gd>-EWt
zw?Sq}WC_fy&*0Q$h=+7(fv+ejh`1^~M>5ObM|~EaI}5s?!It#?M%S3(<TnP2RKHkQ
zN}IcH&XrG1n{%>%b&;0o;<rytplwh=(Nw_SP#<CwmzyU8EJ32tPHT*kj#KBCOFjHa
zNl6xXVTagLTVogWqR?+LB~FaSuXTH0!&~d?rGEWRStjv3{2sTSl=f;tKo4e_-A5%z
zn!O{R5EDZ0qIqW8&1m+dgK%xVxdHzvr*f8W)IwNhBG~UqAqXj@A1~)vUu$h2@YHH8
z;y)4_2!~w1?C%)@Fj%^JHj^aw_M*&*<j49?oCfl&oLw!L0IbI?!6R(r;^HtY{}sSp
zNuHyDhO9PQ#0wjPfHR5!nDwxjEnPzZNAC36OIm&_FVAn5FX_^xBqiIjr)4Ksb~+CT
zb9*%=ZN{)tGdE{&bTVQVhOsN62*?d?R2H~$sCkk&rcWK`?Lt|7w5*sOBRA9D7zDa?
zcFP(6t+gxB_UiU9(tlg1z?#IT9-1%XLpc36H{y$r!Q$@qY=#Q$XamG5b<Ha+TRDUs
zy8Oarz_16^;*|45pMTLKrz&AEI=s%#$CPZz=-~l`7beu(x9I98Dj6Pj)XH>NbPk6%
z`WOoxczdl@mkjZK$85PGbQu!$;ryNI3m74D@dZSox4!ash2DEZ$6~WU!fMAC)tI%E
zU3yoT>xFs&KI|mUJ;X|U5&21uAY6Lfz+m!YkJgee{xtew>7@zRX?x&#p?`5+wetup
z68L^RHI-Adgg^wIlBYi^)u|ceMJVh<Ro75pGR$dGHOMM?G3SSDQ}EiTA*J09nPtFh
zd8i|6YxIdgOLWaf)6v0!!_D12RSztamsC_TQG@aF<@k7PCOIA}B#K5tEL1udccwC;
zMwvEMt4&*u{=I@KQ9e^q7VgpFRpU!5;8Et`Lt#$?a6&x~FX8Yl0hm1DsoZZ163_<(
zOgcRFwPa|G%dyF}w)tSB0hh3A{@6cz1k+0Ggl$KQK0Ysa0daWYRz4*DaviqBpHS$G
z9iU<T_rOB!C^|_ij1HMFe$IRaDt1!CBv6m}#-t6zgJxliI&88UC-n!hz=w`qr_!%L
z#6C6(V`Qm9Chta$79pY?Rr2@mDH3shv@F?(-ED3dU>VSQ+RBu!I3@>SQi%6F`Eb0?
zF3v{3A>1<IOz<QkX<^%#ZF@G^&gSw!PhPu3i$v8{<PyS`Bmw08pooqWepO;%??f#C
zwgz(efQxG{TNHMq7bQeg^d7!MX{*sO<qx2`$Fl7S87m~^t-Ja&0~mQgJT(1a<SPgE
zE`!jx`J>PRN33kMp|COdtq{J(*ETCVJKlx>gw8E>_2&=p<=Ew#IjRUnz)R!czVDpy
zHZ4$ay@ylw?MErd{dOiAo>WKPmUb_ZLC5{|SE7)Mi&UHbO5>kz!OBsRYq{pN6R#v4
z<c~Ik0D?I-fMD)&Z&8YLWqh`mH%DxWD}2VcvH@0>A9?t|Z86m8ult4S9==g^w#L9B
z<qt6<sJb;2yFGp5b(W9jJk9#+WVz>T_2T$!w@oYbL4APL__Bjshf~vszAY83)BS?*
zEiGR@u2w`gkhe2DNqU99zoW=fF4QJQk|@^;i9WXbhP{8F$N_+PDRGMK-U5C@Zc-E$
zL>z2sGqZeca|FVf@^bd7s5Uzrn>Ckr(D*yq+c~@`y&_WG)CG~JT$v95;?XU{MkY-K
zS(H(T+Ci-dngFDX$kjQm0|EP0fd2zv(IiQIHxY1HQgNv5Pir4U`6E=P9UvjGx?H<5
z@`tSbZc9lzZk7WwoEV8-Wvv3>R+2WF(GJmzIuGQork-!*!?m~1yEWv;=sHAsXm3o3
z9^;Rb^9LT>s>RBnt3h2y9nEsIap@~UEN=*nc3%js4c2tG&TR3LZ6ys*4?1B&hft%W
z-FCX&vL0{HPG3I{iTpf~9VClfqyIQ>j&$j|TkF6;&1aF2U2TeHv1fv`122p^v5?nW
z?XQ>y<1M-LZjS=`b)p^NwY(a<4=qyKZ|^BVIvq<joOVe5Uo3Zct(^-fXUAgePH-f#
zSGN+Bt(fp(>VQ-6!^C~s=O;l!45cnRR;RKor-GS!nkS;z8z9Pp1LGL1<M_Y7{9C$p
z`g>llTFYottdD@v+;s!6v|67JXlEWS;`oXdICJx>;RHf=!s6<hRPxGvNjSI&s*oi>
z;kCx|&-!&caQdHhoeF4%?5@Wv670Hz@lF51jo*VF_kD*0|Myo#vL#4(AC*Oxrd$U+
zW#3{b)>D_0^Wre6Ua_)A>El`HdB8n^R!c39SxS#~EzM9vje*YQ-!lzRNeQ>~74VAS
zc%1(p(Y#@Mdpo<u`!d;kFIE}^ICsDPwe#{0S-je87!tVv3U5VaY2V{3li}5EnfkjY
z%+$>b;Ekhn4_8Kh)IF2|Nw+^)4X1T3DTp<>wNz?Lkq&`G(F|A8@1>`#iHsZdn<nQU
zKyDcTZ`<czNfDZWA2I|03LD>oGGZh^K-dmzZgVFP;A3sB444tsVgR@c*o?~NPbCzz
zv<NfP>M+Uye6I7JwUD1k>5jN)Cs7&%fWlhuYU>oO9N9kDtvOV$>VVv;>7IJ@7H|cB
zQ(7ekfS_63yjVs^STK>f42y?e02y9|Z1<&!T%se3X&2;X-;-cK;aku^taouWv^B<y
zXV*Y?bI_yVu&4Y-g%QZf)Gof5%{-b1v~;88_@2wtB9Iz@@jdai=oO)#7dg8u9)E>C
zi8kjI8yVc&*o<wBif(dPg_Yzo4&uQ!Sj+#W31o!Z0J4w8CdV(tD0qsbqibsn{_YYB
z6Kb^xLW(^XN);xGkqL`2PpEAq(bEAYTdqi5m5LG*`dC@iR{)0E6Z@$yO|lgHul@%;
z38AMBv!DFI_)vV<IG4px+VZ;N2dtsasC!xP;ZSGO;v^x)2k5(mS?00x>!zHURM<3-
z8`RJOLc3h8`S_&8E$|JQ#gXNS>wvd@5aYL)$CJXfNAH&hw5O0^Iij6c0+trC)T~n;
z0blo&N|rSrIkAc_=3@xKk@(1rX@&;KO?NRn@tPi_@iE$A_0N*?GH$9oZQMLIfJz3C
zwzx(}fJcv^6BQIvQYh=>yv0!jYU9zHa3pr>@uu1C)xfo(Cnx2GD(>%_v~lsH7vgC}
zsq$)=zAq&Eu$!pLT(Yg^m2|>EeTy!K>LfK$Q64h59+6N;i__mutqhdi&1>;gwheFt
z2;gZMq#9CHvX(=a3-Ke~IN2>95~x@&uU5M5#WX29EE#8jS@jX;ILcXzd?uH*mJ`Ay
zq^w)YO9Va>rIk^Y$Ce+MKOpfkN*gB~8Uv4q6D1%>OB!aQ2nLFVrK7Sq0>FM`8&-3?
zv^apUI%0oNK5MxlNB`VNN{Oj_%n=!hDIlww@!ROiaH?#P2gc)I{7uQVG}01!%viCc
zb9y{578u>Un?RvJd%^fKPoVgJ^rFMEI*xqE<LWxhZzQOC-YBXiAE;<Ve*7RqP~`GN
zGP*7E<%rJ2vEX0C3g>X0)fkAo;Q)Tn_y3Jz#nr6Sz3OJ*DAQLPeGuXDvh27j+~xWr
z2ZXpzA^|Fxr&5lwpQ36&8CU-TNWiK8CkpnThTu@dc0N%D;)F*3i|qjxh0K$20$jFA
z^N$Dc|6h!839>&xey*3&xDhoxjIjeSi3619P~^wa><@o~QuGdHnmsV<YHO4Ah@3!y
zkF^kDp_ZoUdFQ?~8O$+v(V&zVsVktZw2w15(<rzMDK-b&ds{yd0NWb4fVC8$%kBob
zU<RH?@_*(A3f9*4_dl?884|&orm*z_sGTDJh4=c!>eB*f04mp1?pjOr<YBFQMvm_<
zu&YRJZoI(75aJ^LS6)p+ycVvK)SZ8HMx02WhDUW~hF}`t{+O+Ec~#d?m*QRhee+<p
zPL1dJ2km2G@laS4+1&Q^X4Z;Xd?SOf=fUZS7)$Ec6@ynYQ{vZ`C)vJd6uVmE0BasR
zbMXDAq<#CGx#?C#g^Yb_(#TqmCn0jc2iK=^q8i9?0WiSli8OntcxWXx@)J=Nv37cv
z7g)hRTYjiqo&Eb)4&V~cN&0+~=6UG)Cg3K*)80UWmOKxd6Mc5z0UKZS=QGEf3Hp8;
z_>+CEB|`|;=gAW#OAC%HDK(V*3GmG41M*+pD6G>|O<24kj?4iBT3?Y}d&1gkT1Xix
zwS%`Ll&LzmkySw*LG=Vwl}r8(z98HxtjS*3wtv0dC!9&`C*K_4H(RxWDtLG_U}=Xi
zz20@_@^_&sUj}AU!jP)qZRy<L9Xbfqp*Iw~eQL9Wg<VQl^vc_NP=*^26>|b;K5^uX
zR^+tVC=2+4$Is$foRF~8ngfXC*}L&61L^=5+<%6ov+Kf<<SebeVNMAYW_GkpCE>{r
z5Sbqc2IVlS>*&a3EB~HfvxlPJD8#m}2W?O67MGOB({knK<m6D7`MU?t{Y+_C85MPj
z<|c>`3!U|D+Ab-H3r1jqd|dg1>O`tzvf)VbwD!MQjqnXFO9A?*5$Ta8c2@QUc60TB
z^ayQ;&F9`Ki611ypLrVMLa|}LB20YO+CSe6&nCb%-z7p%QlHk8^L$rMu+0Lg2@4h_
z1OVz2r<pj_(Uk&Vww!)!l?=UVUP8UqFpa9N_5JhR>KiRJwGR+t9N$)Z@fued8GzWI
zIOOTMaM&C9d&fZk3sOS-M-|KmvaOvwgoW+sHY`{e>eJ1+4z-wd;dsRaP-;DP@g>?3
z&SB1wh5}E%y034|{}h~~cH^T}8C92AmC!r_i5Lq1c&TaU9;E)ZS!#WKVB&h(82ZF4
zTAP>|jp`)N*KDV~-wncLL1ZW_$hv@wdBu9Rb*Rc8cs;NIh*83y9L+%AT;O7wuZXI2
zp?;WsIvth->>M2Y4XBt`!Ey+w30Sv;%q*bCe|rGBR+n8K)awHf-2eih-*YF4Y%yz6
zyb&!6q)zR`SG-6|{)b7H7U#CK@rd=zDW?M07?t$W7mligME$>)&M-)WRMfL6rSLt=
zf6@Mj!xq?UL<^uz#0EQ9uzr=Ont+KFllscS(q-4HWVSsf76CF*Gqi!yCqeXn?o1j@
zG@?eY4*(4p&;g(2w8|Gu<%>^293WGM0(d6NI-Lgru>v3@I|IDp0^U^qe`~tGT`J}F
zF6%!Ova+<FQE30Wl}i10D_xxv(4+_@VX(HyIVHv2%*qHIb^(_UI6dv1aSo>4|Fb{-
z4gq{68r@BMzy5;VedrkYoHmmrxv*lf|C?9vzdNcz$FSgWYQWrVNTyeq<rH%ckoscr
zTCD(UDCL9e#a}o^Xg4pQeZsX2BtE3$%4ky+g%jeo+*LQypyf&vjU>Hbaf-&%?Efmm
zha|819r;{!+OjzZ_2Pi;=ByC?-@by22guTFUPWv3+w&lDY1C9GxG&x>)w&D{xUgtT
z)M?<EpMI~g2~M_YG#SYh;W7P<#mvOSdAT0s({kAH{Z(;6f%N2_;y2(qfk6J`GJ61@
z!_z_m*yX&V3>rnjz(DW>JFo2lN|X^=d3IcA?hxB$x(0WkAK%&w7Z(1rv$N5g^Ifai
zS}Q?(s85Rn@D^+Lw;D{Zl*tMPC~a1uOfv_iZy}HZVW$^n0JS1q*E}pNtXtouT(IoV
zqBjN$J9eVWDB_-qx;Xl_tHX$j3yZ)<`iK)L^^QXNPn<C4zQq>rQygCSt}iB;&<`fv
z1lcGwQmIk_BI#%%d0igngLgEsA(h%kq#@Q;Iw>>uv-KLRWXnRvJt*GW`AKR91{}aM
zN7=&Sm0sa>k+_0F89-|HAvkn@W8jf85yO$JYC1t{^s;a$4@1-(*s)zJ3)3(z+|#0o
zClj>Bk5*Mvl~v>%$VDW@X3nCnW!-&3wS7Z0O|BjPDtocv&G&f!jyx=^R%1xkJ4jJg
zQE1Ef655zR;&@Q1-^{nEV$!<E{|6R%dDW0WrHcgIp|3svwVm46H!ny+LVyL}X>=d`
zDZo-uv_&|@PEdy>#;^6BhpIqIsz*YgFFNZzz;aGtkt-c}KsZGsgQ1qPZNr}2p7Z5v
zPc1cR!9<CT)o^93>wPkcll#HXYzcL7LHW#K>lE%7q`lmt0Huqj!@?oyqWW<{6(s(s
z49oJ3D1=uS%4TL}!@0e{0*IxN>3%oFrJF!{2;DJ3uX)=ZvBmRQfF@SdNhU(Js;*80
znMKi9s>+w<iQ~MzAFU>5LVKC8`x3wnQbVL%^*i_x?C)JB`j}I{$O|x=WrKhBzF3i>
zZ7!<=>t0<k?HNGFGyOAZre8jsKA!pyqCdXT5bOn=CW)V#tM#NTra8zY{20p`_Ro46
zw5XraxMO<wOF!XZJ}n$MQ$uO|6EjsNJ=clP=NNJ%Rf`Z4e+A+~7Y3Q#7|WfMP?^8<
z<M=NtgVr+f)KB7iAEbm{Kkhxz9o=7#pr58trhZQtHzsz0`M3;_7^M0TFYvg>0riZ+
zLVh3DPAGE!y9pdzTxvqJ85I6_rQ2l$;>c00$!cTgN0ISoHZ?bO^L3*TgyRoMlu{Ns
zw6!Sic~AlsJ5ra1s8&E%nOi+c@#czev?DF+B_yjYU;6D;$#na@S|z?jWatc&JqN^<
zCjhI!SXiIJMv9S@diFdRbKLikC+yz6`&<%ddPmSg<vf28O-22rO1f4TKg!`Ra%#hp
zUz&6zv6=ASVUCmY))39(%(}WdcxJ7s$aA_lQqJ!~&}YKkDikb|C_gcI^(j~`R;pIx
za8Of*dY&nWhZug}<Cc76dQV~9B&rFZR4wV*&9h71-g5IQ<VHnBy}uW>h;icl05IH$
zYQE!32cN(5o0kCSC-*yU_+yIR`KLC*(Ip{`1R9c&l(5yric6_lRND}Uq%k2Pw)hK`
z`=CbGh_wPk7HXuF8*QpQ%bN}^0+Lvpc?89@fU*aTnBr(&;;HUuUre$3jA@)Bz1ywS
zDyP~|xz4M0_LgQ_nul8Ye&aO~Sa*9VULzay)g+Dx0DvFMsK$**hLPq7=_KN|Bv6&p
znlu#`jdaA@|7=tj`*TwM2Y{mTkO+~S_o^H%kb1s3B1K6Q!W5^_TfJ|5`#df8H!p*4
zX{aeS44TonWuibE4(;6^l%lYqW?o_q9Eh(;5kX@K+sj>z8@bB(#pApZiATOJatxov
zHnAF0*W%ABx3aOpMZ$SI+0!IGgmmp?Q2Szkwk}*zXq(n)aSkxIyD`L3O6VXI7B!1&
zMtm}>J4H-y0=S*m86oB61Yl~_jGrOK$1{~iT>yk~G89#u7mY?JgLfAv_1!h?*u0rk
zd6i))3wavn+NV_RO)eLQcfdcAPQhkllU_|;-EUMFsWqM>N4SX;x+5>Rk6XDeTupv>
zU)w4g=1P1&-x{D}eOJ($BFg6y+_;i4UhLKy!hB^)jw-RY)RqOf(=yeZ5S|*XOQl-J
z1i_JO{pKm5ZqniIh|Q8Sn9Z83=;^&Mn+G=x=K)j~L)`AJgoJiWQ{agr<i2MOazh;i
zR@7QB?A^U=nyq>{wV|>-Qouq{D)a1^|47g2d`?>RLb5ajbZ_j3yPrNQx9PWg565u$
zeF7e4T0Q|6$6!AV4<C{qU`NPc+jw~JlL>i#1?Y4o&EGP=r3-k0<5_yWrD8nBcUjPT
z_#6LkJ7DPMkqM`Edog!NJ~ETf)mqWCoT++^z3`JMC(%vYekeOs?dtHQ=6-{pj3Z9L
zLhkJ~67>+V?23rf_}ROxaTUQtIF$X}r?r<JV@UCl-9#KfV-8|A(CFgk<B~+DC2^km
zQ-TYuJo-4S#-=FkjHktk&EkAcXN=@0Rc5g8o@W^A!QYl#g5r8x%6Ngz4?hsN{`)Kb
zA-+F^1rpMwIKrf2*epe5WTv~4-;^;(%zt1EO4|Y=C5kCR=ju*L>5-f!z2n7&vm~?>
zB#mC@hc}#VITXCOTj4FPSB$BAzZdb$TV=`(Zg5)PyL8c=rrk*4gFMHLgnV7Y8#hRQ
zaGZTm|Hf+Y=3TW<Htn+*?Lf&K?aGX~*ODXxVcJePuPK~tZRt{don%PS6lo`M>McPv
zv!H>flw~ZBz9zF>^SKA3<=Zct`j+<j>{!poq}YtY4IXdAUD$*}o^lEvc+3Lq9%Fu-
zQK&^lw$%nrcjE{nTIlJaEgau00b&_H9A})mZ@Tlf@-HadzH=Hi#)l4z6Fri*-hECl
z(!Dz<bE-Y6;vQnNc$(&Z*zKzHU-Rou_1_^HaVR4nj7VeBLhxfrZnUV1C_(Cz2CSW2
z^6DyIA1RmEgd0tIP*N-vw@lhb+fc=kiYiU<!z%}IH1L*}Dp$xvkN0KFukJ$Ofl-!{
zXB864&%@qp_fWHj<4*y^-MG8%W7iTplj8ws$C&=V#q=H)W+OlErcHz~Ls!x>c-&)J
z;QQLjt(CUc8NjxYc7j!w^Zv!~cTgC~Z`iG|B_`LIKColOp@%Sb|2Vuuz}HZM9+*h=
zQlv`YPHa_Cz`sF-rvZT%(5;qc;yfOhelrR~iMzb}`tod2uKX^%+JEgsk9r5;Pwf~K
zpPzGXHRWp|Zr8UJ0|#O`FuKj-q>iQCS-dG1c7bm9<gFijedn)6G9<)&9`IZS$bp#@
ze);}Cqh$O_vK)yC(yn%b(>-ASA_l<+Tl3jtO#dEt>%YwTW}kD8H%3U_1i1SxbMuZ$
z@><Em_wd`|y17<pWb3Jc9NX!l%vFCAli<ipX>-<U=R&0{`-6UT;5L`+_jJGubPRnm
z4*Q%=R9Qn_s^J?k;w@8zY2YzaU2v#tLLYiKeW--fMVMGgc+IezR!DD=Xp~z=F;$RY
zQIZXx?8Q&8a(Y4Wz!pEQT25mcnm2kx`_Ei{837Hl3ANr#Az8dyr_&p%+fyGoUPOGY
z-1-*A`)v#sq8Se&%o>5+QoE3U!Du{~00c+SN1l?_yiD3dc8hx8Vf@N(I~7y9zI|@R
zihsAB8)4YGNT|>b436Y#{6BmB4c4kI*Eh=$vG{PB4+10_q6+B2C*Z~?O%-XZP-iSC
zD6ZnN?u5;D*pMcc6b2-EKH2dv1ECl?hUK0JNHkmtf~>@XS5QWS<lQ1pgF~AHjvr$X
z$<>;Fr89aum8E`A7o3|v>Sf?iT!QI-X%+ih%4p!}Ue<!D>G!SZ7%*W3mB{}9ozS(j
zvWk_H#|aHR{MU!v<sP?g36~xcErq3|YQygL90tfvAI=hYxdMQZ4`Kd8zxoRhDSnQ^
z60^D!3A|yOz9PI;L)m@=HI9LVrSp}1OMr?NemlW6?cWoLzjh<yG!ATJ;9uYMRUsQn
zbpiZ7Zy4=S`{kop=I@_ju+h!>l{Btob_ZZH8VFdgM7Bog-;b|PY!y@$Gt6P4eqxNG
zMk!2REp7Ut1sDWa8m|wFOHMbX!()-CX%RBpsWtnZhDVV|HE-44QoDm#xV{0(v_Ck0
z@%4={zn=_Q&wiR>aOG@@!bfVs*qBacCrk+EbvpxxARm?A^=tndP3&TL6a8B*6Y=tR
z&nJ^3M!XzN1#l`T8scVnQ<gIo8F~AP-|`>-P^P-xglZn`sSF+5M<0RR?h$i}Zog=<
z+55Y`6e0UUf&LI9=0Yg;WzkHKqPfYa>m{e(WK{ck-9cfCeh-glH|2@IX<6>&d3>2(
zLs+Xu7FYv#uX*|IU&1tRVgZt5Fa;O?e9fsWk#FVNa|33!Y@d~!;=h}si%|HX>zw~x
zLnHo3$T9cUqQU*wy^r`eL=CooB_;|K1_Xj!&zG`t4MdMzyllR!d|_4>OcXtfZ9EGd
zxo1J=hTpmcE?nN<at~~^`CoCnu%w_ZJyP8qR?M5*o4wjV^VpxI3){CKZ}$4ydY#~)
z(gpF@!Zm<~+h?Y^v4faO<DN&`q9%HF^>GDnV%Tvt{94KLF;bF8(|4Lss5R^e5NO`1
zt{JkJ=~5)>XqlTHU3ffKU?%n^SZFxoyjjb|9N&KwN=p=T6}#W@_p=inAaWld)C?>!
z5na-FL-XOV?YQ^Bw@^u7%BMhNFOlON)J3e!*9{@VYn;*xo?`La@?D~Almp<6`?X?{
z(xrqiW?bIbr*PeQ+{G~7C-!iR*xc`4YuymBT;Rb!@zAQ<v;rsD3YcJ+fW{Y$p`SYB
zg<E_o<aOW~fB1wuQrIqc-C48bZ}w=>Y}kuryp&Akc7JORUE!)4!BG4|*m^h4GN~#Y
z1|QClPlMU#T=Lm-Q^d+f89dd$rk2uG^I_L2%-SEGrjF-)EfHHsvLF-v_~0~KIUp;b
zIu(2N=y%NGwZ|`SDVf-&ls7s+C{69X1-3BAb74=HtAT?);X<0XdN#-OsA5T%0AHhL
zA26)^1o!<Qm#DcDaJ0w+)=-w1*f6=*ozCglpa2t%=S}1J*<piE;KTJEF3;l!tuYM>
z{r3j9i%MG#kJ=8RU7`rUN`bqjZ7-CG@N8BKs_XJa4QIJv+~4<TS$Z^7#NW!(A_W5;
z53wtC_)$|1q2-V2rFrKdpgM~z5AvZ@UY22N=9eka=Dj*Z9aLwBXoq=X@9w>C7GZ6Y
zE{YTq4v*)YO}iI*-1G$bIY$G87h$4PVVpEuXWS~a68QrhZRxWf``H>5e8ft?P^ke!
zb=Lv(DvQ-`5>ykNbOL6GPWza3x6ZI;yQs055?#<IM<lMlq*S6=h9ljzvsJxopHne^
z|KVosG<u@1JmbU2{V~z3C*{4ZSk>#m6R@33{X_}JFY(*U{X9LfEAgh2KP=nw2KVf4
zV@3q?7INGGnv3+waeEc4MAYfhS)oQ(m!@|CWm4+7c*@C#FyCTPNfqZ=P(1S9!xk>b
zvZF9uII_O($O>Jr$LrMcSld)xreyr8$fDGh^4$l7wp^6FKKpMd%ueaZdHC(J>(*MT
zwB6qhQRKN*@QycoV<wOMkc|?1>S$LXSFpy%R}1R4Z52~C*PRQ&9;3O@qN%3dUfx3%
zc~2vX+O+f7;IS$0{KF!%FKg#EuF0w{Z=5ZUFHRhXiv{Zf8BJU1HRU^Q_qVvD7#t)d
zD`xv*y`R00h66q5XWXu47G`E<LOL$IFh0B)Wc9?Tur<N_{)XmFR0oeNGF9Ey2R66d
z-0fS<OZcg#c?m>g0W#=Q!c}tZM;+(G-K^4rljC=9+Il@n*3hqhiG3aa>M@+u^E|{g
z-A4~Y^fvF^@z!Gkx|YL_IuaOksksu`z>%JL5bN)GL!{$9<<+=dkhX3@aXYi;zFXEH
zyU@)fcoc5XxP;Csipa88JqbS|rwC8(tmR<!fV5_b-W2&f-Y$*IWO|-_y(RmLWJTk-
zpwKWt@z|eac5_B@vb^~iIe)%A@+YbFhOqkPX6Z+T|1FhVqQS$ZVVQ6Ch&4><wlls@
zc%xgGtojljJrE|y5?t}iJl^(Ul>U0^+xJ!qju&A_8A*4!r{fZ=^@2W@dzhw=lMM5@
z*F7!1MtlgHit>k^U{)nQx&2P1GE;5SeYBeFQ=G8OgfQL|kXb#n$!>FGkU$H@cfdcF
zqYVFbydy!6=B(45w~vNK2AP#srVvKK<&sa+9O&hJkeKS-eVM(F#=yXU=BGr+sHquH
z2WgtMy%F;zr6aNDnp>Bg4_o>X^hd;;WY2)shK`NRSXbX!`XaG)o!o4*&^Mc{u^zjY
z4FVgg^QHQVS8}OcH>3mV(uj<dwe8Z#*iF$PU9qkjS`oqbKa66>&+|3X_M1fpEUev~
z$C1W*4#XH^-(#E=;^7<=t#CVx3KkKd+%T70iMiFqR;+fZFFN?2pg}c^om0kXUBUwo
zV`TbxwZ2AgRO+x<gD$|&*#F2^GI#Q(OJSFPv2}U#Kc^yg+*}+CkSX<l8kQ9o$HpOv
z{?Oqd*(MQJUukN!%2NL^^hoI~^`*sD*UiForK!|8>jynN%fMv8y$0VG3NIcqO1=P#
zOHD~vzL_O_@q1lZ`<!70pCulCoNBuQ$)26RqiS@XFh3PD%kHWZ{E{`_w2yM?sZj4Y
zrF?&unKjV5p!9qC{1X2iNK12xWsaC4K4aj*0$mGT{qXoF(9}dtWSgm-I>89<TZyzB
zFMY9nwCAQLWTnJ$6T?b1_z4L~fhB~HDMcyoj%zt@SJ%mO4pZm_Mhg?Jny(_`K9m;J
zqOAY9?L#la?K<c&4emqL<z{&j^GV@SUjO<+zH<s~Dy;e?5%Dfh8uN~0-6UMuDy^$>
zAMJY>B+_txj_?Ik{iosn_VzHcmXcRdeLZ;=x@P{0kmlDBqdhVqTBU~hSnTr5Gv)iV
z?+wBoUQTtzLAzJl4_$7aJ2AECZQL{<kp}zQSQL%>70PpO=uAsdQP<N1jg;wOLw${u
zr)QCGfGNJQGC*EdZT+q>gswH>lf5%$IQ4a?p>bs=g+pBgSMeY^3QrUy;-*28&Rn+^
zr+kiQ2eq!8wI0r5y%P~DBSveX){;7J(k-jTd4tTZTnRaIJZHs&kl$aTl9gwIC8oG}
zRjwS*w?J7UK1$QT<z~=XYnLJghT3b%=fLE}T!7ynqmq^~i-25EG?egGQss-ha*(w$
zasgdfA3-Uia)8=HM;CeH6)^l)_{`b~gym#p`+{Id;poaueA3}>CUp@o2F#%DU;y|g
zMObb$M`~RY`a-MZ=2GoZk+3P!P`#q0!P<2Vn}jlbv;)FJ>*iLu^r|0?sGQi)Of<^{
zn6^Y%8=af{y|1z67}zG6FSrEFplnA(u?0_W3&IJ3O?j7ip(I=5Blmr*^s04|1nwOT
z7_Bi$x%D+9u7|8#e2#RdE%(v>`B*E~du7e<8rbD4tT&G6<M2_{5B_4mHf7Kjq~Ahd
z=b3u>zEoJ5=Y|?aoo)w-nE&|{?>Yy3c&!Zqr*m-SHm$Tzcro?ZlaQ*>NFrd}*%=f~
zF{4u{OYXfRZL7>USZw%(Sb|Di?$Y3c@}Ezfa^Fo0ABWhZnkN2$gmztC>9MEUrmPb#
zz>Hi3nM-;xK|B6#m#rIY+8QyAY<ZL`y0YS(b&Tt?Kz)6^rxl`BQ`%bvm(2ezN@#Cq
zMW3h;NP7q@@m^X<g&ArD+6aX6fn2Oyik5PR=um&#&}eV<zE)`|hqcB8VSQZz?^q0~
zSRV?5PRUEd9MLUQf^69BFxbxDT;u{^k2t;n;IA)*SiXJJVH<{nAu`eDKEtRu|Nc4#
z-rblbwdQ`BF<|2(Ji!yP{7<hd^tPCZwD(X6{`)@(w0LS;18vKH^<sV14^2r4(F~$y
z&$&k%^=tcmEi;dxb$=Mb^O)hS{N~0IR%Oy>3eYtp?Rx_2+<Lb&Dhk8O-abmNFkcG#
z^Vyf9^qP%kn@`IyM#~;l5VhWEFr@;m#M9lUULk)gLFtdIDQRP$_F<L~o*_!1_&-ND
zS|k8EDqtF)>EYNNW`@iuOh<ULvN`-B-@O)TZDQg(O-tdtM6{P9+kp2kc&~9jegKrg
z?HrW$(In@P$whs%0kL4vsD)szm%cvI{Ol~V4XixUrjYKSikfiV1c_Z<>-j|M+e1r(
z5b6R2V!veK;c=6tjM$S%L#cO`X<aY)=PpY>x6G2^YpPcav}oWl*^M8Gr4ONLE$miR
zz|q0)D_0Q|y2?g1a>I7qk~j<$>%xrT;N73i(fUQq0r=09Kk<BetZ4?!P|OM3(q~_d
z)j~d=`!{+oA!|N+#!9XI{8?qlruMy_`bgD_XL~uuNYC1-fy<tSmm=DH=)yM-FDcU#
zv#p2TwD6J)zI?{$=N@p5%AlRWR$g!4GHdH}?rp=DivCRb&gYeloLnf-R_UFc9rI|B
z+3%Bc{Cw>3jG~e)07TKgal>HX=DZkHIa=g13;%+{QY%f|_0*5VKmN^dgZ{;Wgqpt0
zlBCJB7C(hHhI^Z5UsspCH7XnTb~Ou4a&uKR^zC{xi~Hqp>**931={KblVq=M+QXDf
z0@RXx)uy%^T`V%N^zC~yV`GhQ>o+#=PX@W$VmdlHluu8anFZYb@@r(Y@{TgVSnb}L
zj2un=m~5i(x`*wTo&2B9t~08srduEMMMMN_fOHiR1p%cO0i}q5fC32t0^y}dlisAG
zQbd8E5{fjDA|@dqNG}moS|E`ULXXr)k!tAW9`tp6cinaGUEli7ue0{lGc#xJ=h=H^
zO;3=eA_)m;0FJ3pIb0CbEvbo!=gaE8Ho-#?*m*+w*RDG%K~u3CS0=NwvmZgDw2}4V
z85!@80xRlecsvQr<KpbBUm&2koRqE_VjdM8&7y=CG4yTmb_i<kV<E4Oo;_LO(A0cS
zgWlgQGO686O?sEzNMr|&8N3d{j!Yt0yNL0ABCic}3=J##gR%$v`W#m`H;|ERrpQCn
zhGCm06+ONQPJU}Zq}Fj&&r*uyx4;cUkD@W!2kE;MwzkLabr;zALo@^eYqYEa_R_b=
ziQEpM5n{k8c0|KW;clU)8ovhSI%~eqRQk#MJcG%+HN}^$5JnbLclrVv@(wv3xG@=)
z)Y_^ey}G?gDM}?Y`1<PEQE<Ey11|oYm*I6}JO%N*nzBVj3ML(=k(#{yY~TXZj<Vy!
zgqL1x`Iz>bl?SdbEplPKp?e0mZ&&8r9@%KJC!DWxMsahU+b<vZ&NMDIHf0AsvVke8
zZ({C6rg)xhBwOsvTF#TtWDt~1EvzK`-A8QXw7{x77dfyY3wU=q!&Kg5-T|~AQdV;2
zyqh$1gN>4-jZEn<HZ~rQmkOX+SRe_!?zL`BqSVpNiFbab(+7loLq18B8qx~?67UoK
zA!1N#E5|;11X!X;!nV?_eanxF1ShH*NmIJ=^g0gYvlu+^@$*XwDw>voGaWkAJ|bsX
znQP&{=Hy))vQ>63%WY-qUTL^f<GZ7X;HB3mv8h?Axua;Y$d#*VV8%g<$01YeGm2u5
zQ2wdwi(9mb7=L7{IRAcoQ(`cckvyw93VQ8MT~Lu26r0#&|IYd=N5e|zov&@Of}?pp
zoiDnA3WHXIgI7mp=Z6I|SO<wjgVHP{6u0pT(cF^IPaR53Bq6Ho!E{qqpSa+^yP+#(
z<qZs_q$m%@@b%>#K8#$Hqj`O!N_8R>UG1SW{d9C>#7dfYGmF%ND3U2Xu3kWc`8M?U
zQhs<LCGt?tT3UJB_{GK*uQ5&M_g{mZGXw=VUu98gu(FNET$zDYrVDxbdTMKUcDw}1
z&p*{uF6PCFOBhT>2$9@smTAiv{$v9OD>ElU@PT_jTP&ib=d)*ES?uH@r;lK`qZ-jF
zA&A02F)v@9oZ6j6hHcw5shIHZtv4H{f;l8kZ3+ycTxyI#YYPoApnEfAwN^%>ZB^bP
zy2C9CoFOJS;F#J&RU|}AfmL{cHH4;(lio_Agt@Mw-@LI|eX%sz{tm7I!J@0H%}0V3
zRMu`ylxFQz+}rz}6K21PE-xoCck~GN!*e0HY*8rL#Ol&pQid;5b9Y`|&1n_C#lA<H
zBR@quD@vCyvR@D=^76fDf(4Gf|0w8#gQQn9nl6;0t5{Imi;a-zsfgLHqw)tyh8X=k
z68e|8%fr{MeW8d_cvMEMaI<W{WD|>iRdc76{Uole>@P7u^RmZ2A}VXBGfg=Tcm1&t
z^(u=C$7$d0zSpb&kd`cfgPt#dF`RMEegx@fGu6K7QRe?4GBaz^ql^>V=2dxOzc1I3
zgSp*X@qx?~i&P$YCAGB^ZkMN-ICJNb2LR5;Afh=;@i=S>z^-Bc!gMW~m)OPhH$Ugv
zofd2t5aGd1>ZJ=B*eIz1*WIx7&s-eyROC)7E2$O2$9Zt2tb$;{i{`!52HLfkJjzOV
zSTsgjt&szGYHBr7$Na0_i&g<av<vW0XW<O56(;GHX&$W6;947dxt@X8{mg#=2rs@E
z34lh!8nhH|G%YL!t^E18_9o`z4!RE7s^F*C_3lq4Ure3$_H)mT2Y|bWha=S3r8dv0
zQaoL;H2=w@E`<){g>B&2)kkE!76&$LiA>GZX>Y$p2X*poLxQ!_yVzt@6+-;U1G$t#
z;o+6dn+$KW12w|%!5izI8@(|nm!q5GTX7>+ieXk06Rjtvr(1`J>`;Qqcy+96KDKLz
z3;-tBU2*hN`un1}w2d+4g%<Msd!^C)HOTpdl~3kX_c#+R=Bsa%D-B{>ubM5-?LGh8
zQwjGaL#BGJilozc9d3L%VtqH;W+xouA==w9-`DMtZE`Pv__2(=EJw-4s>^UrVp}=o
zb^#O$ZEHh`<>lnqj$8$TkKK8{Sy3R`tG%~KOjT0|H1Vr!Mq>hXabYXw)7)S6YPrH{
zZlKBfX>vMdX8plrG-z(G6cvT-%x((I(n1;+)-1HYY%<838J#0xt;Dr`=k8nTU9g+0
z_g)?w50e~BBc(0eWr1J@O1dz*rE%2#KY$7VVfCwJMNYS-%s*-hpr2YtevpxA*&8a+
zGGC*&4KSJK1yC+kN%c$aE!BUT_kVJ~-u7)G<(`C*=z?xY2<VFGqEJM}$H%#CS;^Vi
zXQvky<f%-+jfvB^_lF@`#f_)E(F7U>8Y6=w?vl5M(+2bE-LAQmnTIYHC&sd+piMq~
zC@qz?#roVXJMuA#5aDuP9daC-;=A~xL+YB<yg-c1<<tbpkst-IOu#l{sbP_BcQdFC
zuOQUCr(*jLUWctjxM26ov@8-RYIE^M^$$qd0T>9%3Pt2EJ#jkR)w@yFFB^RrYPbF+
z-I|Q1SG+K+(Z0m-W6x%F8sfBBSzm93Mx!Tc{Zavd(Df_x0VYhnXA}KkBc$YSq)8&V
zMtjK^@xGb=3!z0b@>-bP%b-Lr|8f7J=eMRe3@-62xHR#~-A^e5y9Nfzl8oOPv_`UU
z*(p@P4MNA{+w*OK!(u;<^A&l;p+2^zz{|{gah4)_$r8S#&jeTHFbV(R2QZw~R>0cr
z+BtYR!cQ{H7z(A%X2u}#A(vLV7M?D5mlSS7q;c0)-}Fmbl()~7sp|{6XgtZ!&+pf3
ztQ*9=$Yyo<)s8LEyYT%{${k?`9jA9P5-w5<7N(}O%s3=SAFHxA1}|8ry<Dqu7|%i9
zue<LGHtRYhh&i%4WSvnvT-K$c+lhu?$R#5$r(hT($!p!s=2bH=!3qW-ZOV!Bc#TJy
zmv{xX7XB)!D8bGPRi()%50X7QQtyHiWRBD>JXYycFk~y*r@%Nztxp_zrj!1Zj<6$4
zH+R4mvS-+h0;}Xh(nt6jyC1Bl^!TPrrNuLxc|!29ehR5HuhTIHQJTbYmygc8HI+JY
zLw5V`y^unGQd2ZnvBivFQd^fJ&Htx~5s|H@THB_{G9&L^dMLYW2v+Q2-PEznfy~m9
z`Bbj`aaa^<E{}T8OsU1Hc7<EkxYfzXNj#f8Ai~;L;})#v=C}*J%%vdgGLPalt>q5*
zm``<~H%+hIp^X@lt?92cfN)mDD6|OYC{HExUXz%#X*^MO)I|KPfp6>g?*%<QJ(UjL
zFP4~2e_-C*k!P>YnLBh-X<|bIfg-MK<yBvx?A^QBB+um9i1&wNDYv;fVl~VM@RwAC
zkc4H3;-1He?~jSYe?zGO-<V7HmJy)?*wdLs{q?GDIcuhf5ZSVpRwhK)I&jRtm(a>$
zY~0m7EUq12Yp=9;`}XaYmX;@5<nM8YtE~iW{8{AoGEYE75dOCQlh}C8-GfAI%sW-Z
z2R|7CX7XIS23AszvbMMM&tJ|Og`OF>qAt%$j#Oon*zx2A*3XpkV69%S{`9GFFd937
z<0(+{I6&uc$dX_iML!(q+KubKuFqv(>HO(%ky8Z4tktD_A+8%-3*qcaV#$v{R3-m6
znxQ%Y+#v*)V6niT+V-Qd>ld)aUk=_Y!m4{!UB16#RD5XWIW9WG!*bo&dM4?Dguhwe
zTHZIcu*H|sF`BuiwpFK&THj^n$1d=N3=U~`K-fl|Wnp1H-*UWgdkNgMbI~4UJXpgz
zpSYuOll9+dQlm4<Am{L7Wa|Y1C%1rrA9B0XqY#Hn3J?_*YcS8~yWlWFQn}OZR0)MB
zpKSd*^u}ZQcB`zEN9vJ4Rh9^`h9kgnmS7}AFo!vi`K~1QZ1b~@_P^S4(~s&aX7k(+
zoXVVSNto~r^(EA#t7)u#d|SXJ!vIWiDZt7I@qR-fhaR|dCTkQt+@HYnqvZ4z_*=;d
zdAJzn#0$8odgXzS=T0iXI7WHcKn(ZHu;3RL2BGw2iR{Oa{-cztG*-D!vVto@a0ct8
z!?mIcX~pEXhdu}i?OM$a+j@pdUpVvF@5N;u`fE}OwcOIacS>GWPDn-Mt-X@<O(>*P
z^fd71o-7O%saM0@K<>g*mbV)tF+#SX%6@|^P!1_LGZc7|g3@c4ZnWYgRum^ku87as
z{|#LKu)MsgUm2yb5476`E#!aq@XMtl_d$@Y?}Pm;&B2;NrXkOf+xq&cjQWagu;A{l
zFmHw_d7&IdLrHJ2iR8(U&>W%eE^n!1StDt2qFQ|-&q3f#!aC+)+59m8i1?y)^A9P!
z*xBnhW;pB#zXqCi+CWhpeOt~|Jf?H|-atm!wHN#4tm{@@Fmk*2JP!RDAYk7v`JE|)
z#+;E1oUwr)IrN7{{x_Prj~IS)%l{#K^D!eCRN%Qdx0pl}s>;FWr_k7;L!0(CHjOId
zX(*yzYm`b?dadCMTCUQ;D5^<m;uhsom$FaG?^HTR(0Q|vA`=wOpOhPG`8^Rgy3n#{
z@_M5)fEhS9r3};4)y;k9RMpcXvF+)7aA&7$Fla<&S=gi)nn)&O7E)1kegA5Q66G$s
z!?Nydm=`jbnFE^_6WBknSS$ni;Z3r8I~r*74LOvPejJ2oSE&sHeU-P9dMRn1hW-^t
zSy^Ab7Zn$mMHIO^UTLNgGnZBvXqk5!0yS1DCT7YISH_c(p&AAmK_jsc`>K=9vkNaf
zFse@R>;fUz&4UD_Z3WdCXOlLgh0VN+xGO${X#{Rc5DmjFIvRxDTaA8{6Oxs@c2iJ(
zobOlThz4_GV<9o<g^o)4`uhM4=~TFID+JSCIcxW}>e`&fH)~7k2Sc~v)d=prj)p;L
zb=hH7i#?d1a$4X_o{OC$wma7Qlmd*>v(4m$+so%x8}_O>iDv3}fXm?BYw0&y37T$a
z<HjefY=g7(B&Fz!o?ddkDSE~9jfx79!eorXLW?7%5P3=zF(RdAsEGP?+qG0OB2LdJ
zITPWuGgF(5234h^MXQ{oKI2v3wZa4+Hqd?Fg&hm-h_qd0QS?O<<|O?kdpYZ3U)`^4
zjkPe?PVJWjwJ-atoyqwx110;;UsMlCBD0#072#VI^d1O*(5eU%6BTW@66<8)l1TBC
zi;IgZu_yF`H}k}3s)N>8e#>P-W8Yg$(e<$@p~jYW24VfF%Wsax!fR`*bG>SYe8)%o
z5ki79ZN~W3$@%FS-6`q_UA<{?`g5OLf8DnJJ8=Sa8vy)ZA@L9{$wISIDB8t2w`xOU
z-t20&In>JPE1|L9B#}aBt_ZV8qAVmBE^Jf<K_`foYSPHbQ_CeDa^}9XW0<CDey>4d
zR+WR68@vL6ZtL|nI}JPyU$C|;nCa0iFQZq&Q(l33@RGRL%g*P=r)QL=Gh4IrWK&6z
z`Q5ruE?Lkrq<YXzlH^<ZcjYI!@b!Z#w$vUU^iv$h+&a{FXW56qPpl_JVBWsL-Uy5y
zNlYGC@FW4im?+JfF7X3u0@by&%;0vAR#H;p#R>4wDq1d{dgJ-|QEe2vo{L<|tNfn2
z-upzl;44;BWIR1xt~@1uk^b{Gar1)FGt|#a95jEWlN!ynU$iQ7UX@#rK-wP|a3Z_A
zyGzAFC`D9ji7ldt3h48u&lBPmP%f&C5KJA>d#hvpBqf9bU(GNKtPISa8BXTseO?=Z
z@iUs?RdYle*0ra(fO0fmjqL693gi{1SLl2g+|k~xJYj<ZgIHwRNBG6_m|@6go)6yB
z((hN`P_}J8OcY8&y=#%@^z@a7iYeu{oN)P@JvL`p2ddD{nr&iI`D4u6eBepOz<%=2
z?YS9i*7nHEY&xfLhb#X3wnM^1^@(@bYP-;D&7kdA84l3-<niSx>fY5C&>RO+rZ0Z%
zuj>l|2=e!9qdW>QR8(i-V5l9Zkdy3y*VtH&xV!(ZN5kt3mrM^<KCG_ks$0$2)zZ^C
zn9iTt?mk~Ua2=vk%%-5nY+uo!pg11fh<9OTWcAe!5xvT&BhWk)CJM6#$7qZ7Me=Cd
zy%dIPFk-qw8+dT6sGuR~ODw*&Z5Q<Zp?(cBop&xv79}h#d3w)P*wEXVDPKVuXS8Y0
zd_qjm&tOw*rs61%5=>=4=1sm&+R@sqP2p{meW7mgf$N{u88O<QOt^$2pL61RACYsO
zJ@>h5blPduSsbSFc&FP7C$cX2k`uR2RoiuoMJ+~WS`Op5YKkhP)b`&~sE|Pdww-jd
z5(m=&>+8WXVoHwV;$y!#Pg7l7L**LD&#&V7Ykq(pX<i)LuaE9gT>YL0ub7Dyu1lPS
zX1xE9Td(=*1$PxIa8c^FYy21vxHE)h!kqg}Dj!S=|1q#%F1i1qvlmqZSfN_K4V-6d
z(0%}kZ=aZIzbX9jIjefSmarr=F5tCxQ;$0GsKfofoq4_l_4!rMaJpR<>)R%#XC`Gc
ztettro$BQ8hx|o6Z*5OLH1|IY0F9z8dDZ}+dhwUp(fv?282FLDS?gxeU>trg6-F||
z^`CgVQKm4MY@`8RAc~b6tvGMHG22ANgU6}8AITc5<S?rNnz4Ef007f0J^)xB2T@44
z7C4LmC#aMEO(COmBYvq(f8H_lhwDPM5VcW$G>o1#+;9N5SD?Ho9(;0FaQh?w<!`%N
z!w)58Mw!B&OcvVk^YJC7rdEbr>Ch4v`Xt3MzCn+TuNDHXUv0H0wyN~F5fv2$Mka*1
zyS*OxoG%|$x}vB9Vua&uvntSkhR|??OA?Gw>`w#yNQr35KZO2n!XI#RD*6%QKeKaY
z_Yvc4%ahy6XSp?RG?G)Zj<QuV?VdUh_YJLPybe}e%jkS8TjsRv8QF`EFN%w!s;iZB
z&P#2HD>TYK@o>E2eBJrZp}WRL=LXR(xpPu0EInr$JsVOHl*Qs$rgUo8vX>6jv_`ws
z@fgECjJpIoc=z$$gHlg|O>sO=cw%`HZcNm8iTh4fl$S$A4-%1W9KhJ6o<E<$nRVyS
zdV#^!nJ^{XIB$90`%$w)9f!ch!ioI&EV-of%+Z?Ht<T>pIBwyCJ`QZl9R4KX=w;XL
zPNP%I(hz-&`sBR4%T@=%pO~>iIppB{sSWfhNmvG=@0WMSw#MHq1Ciq4yF2&)V6pjs
zVKL=@VX=jQKUl05Z+r63kT1La$$aZWS=kTY<^XwFS>eaYdp)UPUTaO-yE|M*<nU)5
zLZff)bS&gh5QyT9IK`D&9$s&xgsgZMZEoZiKLZHU9?*=lyrKc%%w?STf4T_&{pI@a
z=M)~<=y^MI766uh4!Ks;EzI#4X`9g%2RYvT{ow?4Yh>+LnvAsc3V1%q1~1*ti3=f8
z-2GPFbJ=nrfwT<&Y7GFenawR#`4KTYOssE9*NK4?h|Yr%iKkz{yCr7q5gavlAmIP@
zI_1Hrl0ftC_ddtUnaOW`k?7x1jQ<l}{;!zxKNsGd*gL2vVy88Cof!^*kB*jsCQjY@
G(SHGG2Y_Y(

literal 37382
zcmZU)bzGBQ|39uGE#0Lkq5{$>X#q-z)EF>gG>jTJI+Sii8U)^o<i;2vFd8;WBt+Qg
z8YNxQ^&9W|{(K+z<MG=+SDbU5>s;sBIj`3<uIRUK)M=<VsjgkSM)UgBOTBB?uH&y=
zyAeY{Mm+Pr*-!J@wWPk+FP|CsTwljkuspS-4{H<B&EsWUo!we#zs8Xf=vLX+f-<%H
z_g9e8`1<jFV6tqqFivhkoA4T$cby&pZc;&9!w4cURPRw#aMTS7IEqT>Kf9A}fZ>L~
z>tTk#aF+McO%1ay^RNH8);u$-+(Vg=nVE^PU6Q%b&#XI_OchxF=f#_xl<ZFM618O4
zn=J33Pj25$e5sUwHn0u6(m8l4x1&SSKuLu^IPgN<qM^y8g=3RQ(sp*lZES6UH}D_E
zIJEqmMt8fb8!cVjAW)OXSt4iPCuPasB%2*h&Q`$DLlV9LhjF4N?W&8xIjT<r2Mx@h
z_~4|Zq~5E}I^9FG53lY2flBk>R|ml;3Q#&7q6`I;3Osu8{VfHea3JqaYOCN530z#u
zz<@cfqU=QSlh-*n-C@w3+$sw-+=s1@#4WdDnu#Z!J%cyY!$ljPv983{#7I%t;RW5L
zDFKCO^wR`5CF)`xN#c^s<N;zqPyygr4Y_Q(V9obEHvAW1i8sc7P6WTUxhi4twWLLQ
z0JU2UY2gBBK_Cm_L2FN@;N0V&J#{(sLE`l}D}^K;g=0hfi#)?@lnZPf(%9#hP|JCB
zZAK`Z8^GkAigltzngH`H4N;8xR=!TyEtKHFozF=U&enJM(mn*9-vsbFx4Ui>)`~6c
zV}h1HIZV_n(|4w)y)^(*SVN!u4z#v{3QgS|_Zx@1?`}Wo?s>SJFpm{_y?wH_KhT4^
zD;Pt3RDL~67oMr}@X{~sTN2VF4K06SS(hlTdQJtWME8KD$&G}aby0%A+WTkmPd!S~
z9YS1grn*<gYqo%HFYV=8&+wwTAEw0|ANT?D^K1X9Z{l)+>Aalq&zr#z2)rV}UQ>s1
zVR3P{k`!u{Tjz%Eyf5elcd4iAiHWHs9u&%pFG01bPsSmt=etGeV)f{#tcN0#6>OGd
zPkX8pIkfpL@7(}=UA_Ivxt#m^v-G}Z2XNeb+)YpcD(gLQlsw&W7*<kv2(HCjgEzWx
zRDJO`>b90j;iTsx@PImCtemc5&*!AVb5X-W={j<k^Oo1h9HB1p8Sv0`;>P(A0&|*?
z`v-$R^4U4iXUZAnWLt)J<*yqHUrd=q`&=HqD4OZoTgJ+vJh>=*^=Eh|>0<udC6%wg
zx|AHa_Ef1&pI;Li!r@3OLWYK{IT3L~#@|ANei;BWgXQ+b7I!E>(PgQ`S11VF|JfLp
z>cjb#g(1VEH+UxP7iU*f;L+pv0w6`NYZVm}za*u@D{m+yytdT-DSZ8lV(>fBwUe76
zxXU22ou$HfUW9axQn9e8tyJp!=v%-@=Ph=y?Zu28A~iL2+pozoGb7{u&qWCqd{Pn^
z<)gUQ-Cx5eE&W3Z7;O46I^>Obe%BB3f+IsfCG6kc)D^Afeeq!JS-zq1dUSvScr2q9
zHBYF?_qHSJ|7<gQkkfu+X{T+4k2gwFlh47`l~tg(IdsE~n=C!}gZM(BIhK<YBBqO?
zebC9SOB{4j6FDXg10LE)x+-U87M9E#@Y{wBN<8VJ!4YsHQHGIijNr5VB3WhoDEQU=
zOF7^{c`5$Il}v4MK`R*<Ct#Xw88~#tEHSr65TxA`F{1F^3~m(4dqe-v))t$<4^5I8
zyMgKXKb$!?HG|cKYs!H;dO%Tb#i%C#!>j4#2O9XJD?N8j{}&2BJbd%HVHi4s8Xp%o
z{JvO19)zWWfW6h98tnf&6$`PeGy02qDCmFzYXS>-j@<lW+XH3UgwsD7j1*43FSz76
zdl<Co`8C^4LUo>W(6#=?fj;0ofZ#`f5W}|8kP&Sc7hzUb)^Ei<P#PtKmp`YPy85?b
zPInq=glf|iqX9o!jT7-Alq4fNC%hTej~Z|W{`{Hu6fkNpgJ3gVyDPBnKgA)G{-Gl-
zS@IX#dIjU#59K?v$<TGL2?niemOtJ!$2<~1K%ld&*DVf?*2KF7>l4GnpN+~Og6HD)
zCoj%@PB&`HWUPtf7<Sw639=2#saWa(dO-*0CLSe`ukCfHJ~i)+Fyt0aXQ=|`EZzC1
zu~7!m_&s8WPsk2+{q5p<%680}*^>k}CW^U?jIuxMJS2w(I_uTXXxHq}rt;#G6Yt{(
z2Q4RxWPi7gxe~^!fBGd7AKenxFr{Z;5d!H3Yrkn0ej!Z(dO-qFQ-?F-(q}n!Q9akH
zsSpxR%WlAL{o)0)Jp6F{$n|2jEA736BBFh)B&bHiz}Q}8?RxUEUtGx!?Y0D`65_{?
zANNMe&04EdxUa>!FWSyx$VUdHm7~Ap`aN$zfUjnbuW>v#E}g)s0rc%Fy@}&>r(r-e
ze(rqlM2}XZN4S&;10qse?gJulk>4cmqd4u#;?Urm6HyQ8q*qSQ{j0du;|fr>6)wfy
z2)wH|#ee0b%QXlKm9w~1F-^$@Zui*+3j&GHR#sd*8;qXgm%h<UyaOdd%h8cCJ(M)#
z*(|3X(3d2t?@)7lC_6pMRt&AiiZD!dB{&%ZJ4B-m!RKaRRw(g`N&Q8{un#7EBd$dx
zEtax$Q>sF$f^uTVj$mSD`q;`ko?*Vi4{~pMx_U)reTv+Ndn9w|)UE3A`<oBR`?8Wl
zy_MLP8@H?06#65IXPvD-g(_Zuqj1~*2DjRQ4bbBgH$@V&09o`$_KvUzl;WWdYU25-
zy3C}753bvNlt1)e#ve{%^;i<%LVvFx;r7lZpTbDmn;O<y21@jcdh^19jsAG<`Y-q&
zE5#Xnch1`{;not?DA4Oc7t+Cf{(K>aB&;?1R(<%&>rw49FrS!J+m{Q_2hB8n=jwh~
z7hXNtBF$~I{Q!|by$7R%tnHFAj%dlurPCbPh6(DjL^(RhkE(w&Xu9iBy}GecCV*TU
zDJQ3Ty+4!axzt<Aj|{o@tvPYu#nXP6(TF#3m=(}97X`Th!?+XBOLqW=a|w{&s7@^s
zlIFA(%a?d@Jse7q1~QHoF|PcU)~ffa6r}+Qq=dKcZ|vQEr)q$8>cVxQ#-aP-2rp0-
z1^i>UX2wal6{Z+$$O#xlfk_A^ho~MWumwhNTKw{^(JN_Uy}(;=9-{$F)*~b%puixA
zz7s*Hf4B0xKGKjNALy5U2b_vlmN&(&QW2}&xw=C>N}f;(-p~Gxsu#9sZrlX3&?(FH
zWutDeK5zu`fUD<Mt%2aB-j(SH7S|2qui*U*Jq_KHsZ?&T_HCm|+vbK(d<ZcJK28xE
zGnMK@E2JeLj6)?n)DWOqD@lGBw<f177Zp`c$kGIQuaDY+x;Cd8=ylaWdz6q7ee$?9
z;P&v{m%}_pG;lqq-XRoK7{do{;eV>zQ=Lf>UY_mJr>K~Tk@DyFA>rr;wD9B6pC-Kz
z&GF947rV5373oHOT^56#7Dh+a+0t`?Y8p5-0e<kl0CE$>ddJ8cs1yYkLM$a($Yjnt
z(i`km7^Un;x1=qA=z;lALyeNZ|F5bMu_`10$k1c?Zam)SUTGXqL9JXOrsK4CmZeSj
zF{*R2Jt#ys-u%8wd5Yft1MogS@~O<tzI=2&)}#g98NqU0RgA$PldO|jOp-ppEyOd7
z;-{~gsAccZF?!R!M+@3*{;^|^19(D1*!%4U$aAeNEX&*Mxzoh0RK5pY@HQmtnx|ld
zB}jSM#)Qz<7VO+G78JXgVYqbkjj`=uRCD`&8+lPW`xw2d4k5-AsuAZLbw5MpxCx*|
zx;J7bLHan~h@*tS&5Jr})S~NZuV!ptf5>4hAF`LH3JfhDQ01*r^tp7b>8G->|5Ihe
z7et3SDF=L%CAF}yrs2F+0LGzC?%=HmR5sYlwiCt?^4l3ERyHr_m0}>#NfggbXugi!
zZvW0yPVtbhby;jfXwY`bLrLaWd$(00vzxt*G0$hW8qA5G+FkFPTV=MQm1+%gwTVf#
z=I$4%_`1v1H<d!p9`2j)w&fsWl7FNSoPbMgmNL>j%#g4O0rDe_!&t7{+P?gqMcer#
zhEa>jn{32Nf!^XwG34hT`OW~|s8Mfr(jW;r@2Dg`1Y=vvt(+}e^-&!;j9)B^9aZC9
zxx<P7JcJ()p80CJFdDgG1)<tZfR~JSNpCW?y?o4ItOgbHNX>f@XRTh=c?P1dP>Q=z
zOTOH^MIjU*<KxDe|0n@<A=qy`VlsCa;wd_KEl$bJ_h<Gc3EzMtP#QrRhP#?Cg3x^l
z#3u2r$Ix4Si<TSLZ;S)kjI+0ph$nDYgox{esYT6DHV0e01iDcsQD6esTbzJyN5vOK
zJM?&uI%mPum?wUJi)U#Zy+(u)rnRo({s-%<cJrMu7|mLdY?(A2%{tps<f&J7V%gdt
zsxS(!L!7UEYyfZ26gYM8!Plrkc%T`MQam-UV_-}u!lg5SpJJ?ty+Wz&P=$vIGODV!
zK7_9`Ll|QHUPSJzB<!Q^74wOkrqR;S+^r7}uP(9=e-eE0Ia=QR_7)olo(^ej=as9>
z(K0bPM8bJBb^^q)E61!Rz!eZ4TY_t!y2*yx7HooV=T9D?E=0o~Q_Q%LTa<&Dsn!xG
zm>uk~0LvD`7r^WroPdK@m)gn82eLK28xV)Q+Ug3DZR!3wCAH>fK=9*8mVCXJ)h1=T
zHKhvoLj4Ktl<m@oC=rvt8BaV5doHJU*lvEW^_HFveU7bP9phV?Och$noti)@Bn}Fy
zA?2Ezn{=>Q_mIlr#D9zha0&_&HGj^|(0x<CEegu}7k1P74N8Aq|JkrSdmXYO;>_bu
z5WfE=n5F@Yl`ks);<B06xjWfRX(x5md&y?%WVJvN2k7zxikj88^R?|&%mtjR6wxFs
z=lY8rqHZgL+OV&z)C)3bJ3o}n-NVFW5Iz>Gaj?tBZd=(X&|*wVzB4bjejpJ(KR*|-
z$yNyt($rn*&%sFqo(uye?aqoblQ#PMAf_=Awi~-?-l7)tYi5a}&UQBs2>iw@>yz4)
z>v>rFc~((M>m^=0z}YnL1+asyOzz?&kpr*f9FJze%Depx!#@dR5{$BYZg?{-DVZ?|
zym;v<DYq@SOd$C05L6Wx6l+md-(%)y+s-{iWSY}OEhLCBs7DDA^`N~;l+TEJW~M1{
zJ<_oG?L1wfoA`J;95PHrAwUos>T2uPOy%uijt<Ue!9G(<K*i9JnRCjw$Q)&w?sKmF
z5hE<fd5I^#v3{*q{zgy&0sJS7FF<+IQ#0-HGms~xP@x}m*04Wb#wqY@hd&B}1b2K`
zF*g!pnAsTMk=)9-{1|~V<-|Ym{~P_bXXz9{!)F}Od3&&@+K{7;Y{XF@O}xb}90mwM
zDc^34M1Qhvc2@iXhH0P6c=5#<w{BT26joBK5jtY|k^59a)9EOJ9@|x%vw|{VPVmNN
zQER~FPCwKFM<qDeeBdL^>7JkUUe+768p{{w5??u|%><$xNEf)3A09UL{7FsXLr#SJ
za}EtbUASyd3$6jOXKa?Cx7+ZjPAs!XNJhaEQ%(hrlEIELvd+7)X#~q1MkMy$Rk*#i
zR%xqwi+0j(zMh7>3rjbkN?fSw!eHAN-^b=25iEJ8L4U4csFsMqJ_FA}4cpO^-z=K&
zX>Fnm{xUgWt$LsTbK9%$H06u{jxv*cAW56AN5#SV`C<ktH)`8+odZ%-*i}|MT~s^K
zj$Jhm6Qe_$|9sUE8^s&43d#r@u(aJy;!~$LGy*|rgl4@smrE@gRTLHP>sHTa`2uZK
zw;c}QR;pqN!DGK-i|Yv*`&VoDy)=rV{ab)c&Q1fd8-m%JKMhdM^ljZgGQ2B;)EK}`
zoX<9`17Qw(fk)4JH)M?XFn-ea5Jp{rK&ZA<5z2~znU7^ax-WJRGF&F-@%Qgv-eM%W
zkP@!7XZ1mEf$*TNWk32M{$3&RB&`tO<Q@VY5kqqivt^x3!974jr}@?lT2TKR<pd1h
zFGjmY7q_$W89jOUOuIcJT7dZavRf~x`J_*%EN_bG{4k<gE437tlXGyNH3x(NMzhsE
zEBU7tLDK68S%L_Z?av3HBz*e*%lrYN<N#7p;C8VPvII*-vFgeF?j|cAaLkv|!ZcEg
zw1J>u{)>1^7m4%OBtdiAaie2xz;%1@jOUDaA|f~^v#Df<^sr7MrcjM~ZK*H2uf}Df
zmn9(*W_iLk*zRi&GAcKxxhaCYY&NNXSMdb4`mG|-x+}LMg#WX5C+uK7^C_kSMzc?%
zq}dyIo*f@}%c9x2d8C$7zf}bQk|sv7a*X_ez@&ecs)5kM+fs5O=E$s5wsQhCfwSdB
z^7E%=(D;}K2(tz}i_x>$kjpn7nbHt71F7S)P$Zg)Q6wt&r~mEX;l}+h<X<r>aYBuI
z6?IQ<4-p@ziz<B7mcx)+Q#Nq&Z0$3dr<*qx2JH}e6KDSFZmw~s^d2!h2mvVUZxfg8
zoEC4{e$~5)SCPs(9OGm;GQ3$iRj$KrxHA<_v$=-o;Q<ICf2NCice3cW`$n?d_WSe9
z9#reHHlU1HA*O#g6h1P-5L>_YXM`r<Cm*gG?Uf$<Ls8$1oy%~iiJyiOABPbHl$o$_
z7$IoWidpFats&n=(S&*-^H@r_0@7R9_ZBg(<4>;M1w;Sp@rEum^^jYarmOl(&LFiw
zy96BlTpSGRGGwN|3TEBvoB$dj*W_bIbH@{*Mu{V~BQLIlnCQ5aJi9|#Db2@b&<>&I
zbkEASjwh8P_j2D{${ZH5s)>H1?^&NW0THL7a+tI#=!X!o8Mq?Vn@!VHBfN{-tuJSx
z@9POM4Dfawk0A|2ml!=y=mF7iQE)ZE&pL9yedn3y4u(|h;KLSqo&tcltla6%Akl#p
z`vY479TKAzE*xk2K^Q?g5%pK0=N~2zG=~%Gfnm^GU3`c(?*lQ7KP{DNYO)d|dw}ah
zt&Ag_Uj-j!J?GW$!iAzRp>%Kd_z~|X99-8?@(J~kIOwnv0?C(%vP$QFX;>q9bBu}o
zOKJu|lD=Z>0y4U{E~1vELfd~yZO#{v!H{j2qtHFwlQwtCZp2aHkMKO-Mc{qvk1ysG
zEE500v*N~Ny~Xu3a1UI7)&q3h@_$|sw*z@91CglCoaI+(5>rC#*Ha(jc)wNJi**Ac
zqu>FegB>IIn(#}3C{tO!pX;+{>LDYkcPZA++x!zNPeaNFstobVHEL&PcYw=5>;X+@
zYBZ2f{>ByXPdtV>WPnokx^P(6flCy;7MvqKf4v<yfts%OU?60@28!ci9qy&EM_Vn#
z=tA17hh;e02!Ug}ACts7Q%0Ytr42dr_`A_Jdy7%E9ZTa6x9Iu<hvjR#$N#ZV<PO+u
z5w{u&-C7|_bufK_*w$vm1!qpZwfdG)YUT<SK6E3dJRAU!!bkK8J08DCeIHqZaY_X6
zqw>vEs#WNYIG5Q!h%c3gpqe5W{EfHIXW|+0(QU^a__{osJJ!Jq6hc-3!zUMOoB$^b
zKH^Dx^@(WWq*P{-Ua40~*S?`QXpaVd>fR+ifRd+G2PG#0L!Z{%ExjJYq^O1r8!U4k
zzC#5M`|HM0A^OUJhYwFRO>LziLj&2=scS=OYzoYd$<|8fX%r;;12>301SlYHN8lKU
zXv5ae2yjm3Amu@W528^TJ-feV+YYF_s|En-L<D3^MIYXf9MypUhuVUgB|Knl%B_c9
zi4vrWMPK5R^aPupWBw2BJw_mj8K#qkP^vxh0u8SI%I$Zsir{s<l=cafW5)B`trR>8
zT>oC}Uc&zj7%cD)xY}|k$^e=Z=(%WNFDoUfr(v6q`aj%wPDPxa2@H^AkP%H`SOZ7=
z*VnlNR7qTF>_e>W8)gT8k=BAhsY;HvWs$1OIa(oQu0q{vBdUS1-=mpQNOalKoh3ac
zz5)X;Dw_X8j9n;9nUbcHc_VZ4#)FuE2-r^o|6@O^`*GqbiD={6u|~OPz>f6Lf$3B0
z1mGp-yLL`Gf64~HE$h(eNSQZ(eyeI6o7B2aElf{O(*mp>+{ks;UmV$dnCtU3UN*tO
zDkc5Y%Ppr@9vGeZXlAUspr?Ea;j)_R!Ia<F7=)|*QEqzdLoOuF<aqo^u*GZ7eqwr*
zn9@lBhMDmYqjJs>=<#p<uwkANZj9ezkL|pCL}Vnro;S#oVy!NTVP2k0^t1XaK5YSE
zSOhM@arRdrd<yvae(a|(rTy5v3O13Z_u>kntsB-06l)E}DyN@doA$N^?#d%T=}K^h
zjNP|gY=v`D#)A*tl_EDYbpdi|!i+=r>5cI$H!~|S|5KE->_q*)2zWm0#s4DUs}B7S
z0+!MRnH^T#D?Tz&`^q@}>+n~?fJ7+ddmIK~mbM8CV+k4=U-)oCxUFu>5r_juGT49m
zNB+jdk4H3da>+Mw45M$<94*^3?-wVudP(eN@F8f)>DFZ@dd?{dvK5e-;f9K5+uSdI
z_wkHqVFg_+TBwrVd3N9!0C!DU$oNKOZW<Iul<{N`YNft&?45e#5Yqzc7s}i(S+@GX
zm%XKJhi=2D(u%my(Oz*lZybl<UA*+0QyI@*K?>^#jp{dap7hyIWLUz)U+}k&UzS(~
z6IN*<J5X38E)-plAtoZG`9ofxnJS&wm&epO;vY~<21ips*fA%u&N;BnTc_4dQ+9}<
zBq#T>;e~(NA5pf8q5)1GZ>>^p64*dO(oY_V?<R%eBGK}g)n_0caG5vA44i6+Irv+C
zJ}S3d3jUJvX=O%2(zgvZ5;oLgYquM+hNLVC{@J@gI%3w8M|HqUMC<Ln`9v^HFJ(bk
zy+vHHM(A%8q;LWLO6b4$QWI&5G5>c99Q>(ueZ1**g&(~UFW1*Ux}XovQC}ZIJIdtv
z)ig>1NGl{soxEPM{Lkh<264Ncr8|PxkC}K$2=NllxD>tPigGw>vB6)MVWi&Rh#`;0
zy!?O2nReU=k>!y_XdDZS9<?#k9Ck}kQOg90sbZBX<1iudceLi*6A_mqz^X)I)FOs2
zPGb0qFci2P_Jj0YB`|Z?$epZ}=Y=M&WycrE=Sv@yCVIaX9b}6HHK}03wW_C0_9Cj4
zmhjqZ+p8<jAJF}0Ss@ZjH1KvqY-x&02qfo0$;CyGB;z_d!YIIEeu-gj(8*I+H>WN*
zvhE$M9aQHPZzer-=%T}Iq@|)B2grs*6E0VUGgT(0-NwCBc4D?5Q;Jq+k+=kS;{SHB
z=!2PVDxWRL^tTqt<uzR;)DUQ?*xdiZH+0@Nh-a=9&pwitGSup2aMuN7dPWC1fbNSB
z@um(DRuh@9#p_yK4=CqO_SgD4V%g%k9p__cPB|!vC!<&YHcj;LN0)K~Kt)gxQ^Na+
z=l<8d`6=htG=+M*YW82h)$d~AIyh}HawoPa@!vMfJb|ftz?|&+rC2OhEg_CD&QRZ1
z_;+3n#;Lx4Pkq0X2lp1VGfnd2KLsiGOM?xj@7?VaMDhe7sE`IGF_rcMxoO0qVyo=S
zQ)wx9<hk7Ml&Kt8N<FqY*;rHXNFOia=6kqHS~0zUgs~(3K|uG3yc%xXU^`RN9_jBk
zRH&V?)W?rFtSV`Ix^mXd5;g>?nnexF-7*jUYcqD{>1&MySLbu)Qe9v#)@J;%tEm}F
zJd)s4(G)$6C$E5Jv^?^ELv%|5ADh+xtw$5~{)@rZLVAL7Z#2g^SP70QN}$N8({Ir}
zHpeV)EB%g1f*iJ*dm8D`T~Tf`O*_$SaT*(_=K52x0`f?)|1MJ2ia0D9Siup%vqHZO
z>p4t#6#R+r?zcLRMJm^}wkOe$C2)tZ^fD6ES<Dif-WwOFASUeW4qBKE0-Kc|@8RHm
z^ucOs2nu++^csqY>pqs4D<H}Vnw}IZk+rT8d4z2OEBEJQv=cGZN#j4+KO$WpJk?y6
zIgnjfcfM}Q0;K<p^{*w(<1a{I({rI^pn^P(hNQtmpz-_a{yolI%`$X1M@*rX_hXCi
zeTCAGd<KxdFaTP=1~r+pJht$m5|_yR!fBbL&t>{k>p3Jeui!*a18nGu1jE{4Q}wW9
zj%Z6m<m*x)AWz)9MC87XCjZUvY3Mh0_fdkfBSf~d=kmfvZ9nY~mV|^PStvEsCG`b)
zgKvRbc;+h~y1WttljHGcO!+3qcL4Tpi%>4T-@XeUnHk*C5C{`4Cte;?E)?hdY*b4x
zgR{AJ1OS~KFAbA^4XT)D;^V@k83B2q9V0Ai*0$|2|HzPwOG`g_S4^#Imy)sthP~WZ
zwv+I>lYjD71G>;N7K!69YV?wzf-iC)G8of3H2Ka1=d|dJ!m1_h%4a<ez_3o1@*L}X
z2zD0_W(9^WEdyGZm<ERU3?V0b5*yjc)om@$G)geoadQJ=F480A4%}7moXdh_x>d~?
zwzh4^P}tExbJl}wK+QxVS8%A+T!+*;rAPd+WO9W>(4h}c#XTR1{p>0iSTtO(v@rgt
z;s$$Hg>@Hw?>Fd%9W&pK+Sy^1XCo(v(ED_5<@dk`xV}ef+FU!<q+(xBE`+%l{;jtV
z+nt<Ivv>`V`QtUqWv3j?nu#4%Wg0Qx+D6qppjmS=_azcBWML8|yD=<6S?nE8fu_j`
zCN0(0Rg-{ZgUs?DGU72G{;dj07io8qqp;OmG!k8RwOWW}``r4sJkG!q(Agr5XBB06
zr;WRWAT?G}+`WaNX5Srjf1_k1J?4O3595S3Ez0;2eQ_YUv?=NK>NH}(?hooW24u8p
z^v(AypE2hT9uXP&RSW%x^(H`p8CHpcL?Pvo&R1y5yZZf57i$~O_Ug}`pb2(g9>8Of
z=i5|<PllCmvx@$J;pE3UUkMl@nwy&+taqlUgV-Jee|0>HF7fZt9*q}BL<a@nN=4LO
zH&)aRhfQVdMy&}g_pVwk@O=_Ry>3<r>#%U!S412v(G~Wuevb~*qpHQ&aF2MYRb$G;
zIJ&BHbj#d@v^t?K_6u-A;d`Ddyh;cLQd^+DQD>&?zI(<5Ct^Ld5*9q>k?>;&D;zVl
z<54xnguNh~R2xC$#n=k~Kx)3cIh6%Gr@lH49j;|e3hjuo{b&p1FKx+GWuK^Zi!f+;
zamWhjNjwjOD!jp<(-!@l@Tfd7*RI#>Bb6YXKF$NC&J8)rd6R=Jzf$Y=7zXPsF=fvM
z$5$*y&Z*sx9>Y<$Rg@iQ?*s`ZqAq+{!Bas8-;Dzab>G2F@w!Tr%>{=>BvOEkhCfCm
z3z8S2(-t%zITcV~<$FIhbdSzO@Pb?_3p89ye3c01@R=>EvdWzo)BjVvI(^ip5_b8@
ze_*wPnr-{-42TGBS@53A5yxa3Ouk_-04rF@YbC_j<B!%j>Oy-8Q(y6Y?jT+%mLr~J
ziRt?XVY`JYy^^c#x0GFr2ScrVd`7(mv1~gq6J|Y6pi!C0U5h=bpVmG;<#q0JA)h4^
zl~1BpR*W-Mfwd!yZ37#lR?}<&=j4GpmZsvKySx0pGmXJ}oO{9E2mCZ^iR?J_l~Eop
ze=kW+KKe3i=R<aiHSwD4B)y*CFoDr_{gwglr1HMGB0;h)9Neh<v{(07>jncn6hgHY
zLOQjyyQsM?p;lt|KG@rRdxRWHyOsIn%a_L(KS4(Wl}6jLCkh@Nx8mb6rW7^IWPFCZ
zcjSWOlh(vqycaOX-@s<A#SY#`3mA1GFmG9R_SpMyf2z0Jdnx%{?6I8EKz~&>hcAVG
zOl^ur!Sa}|mn2_7$_(R7!-;`yE2zOM)eJkd)AwtvN{u!kK1paAtG|;R!BTrBR*93h
zGHYp0KU@gFxAUa-ycb9X*fQYZz4u{<(>!*X`$RTmS-7byAxm^?RfiLA7~cL)e}&20
z*?jM$)@@QQiJ@5y2=0lHZo&Rh(oqzjtD#YHLkH@wB*(4ZN;(NUW^bB4d!lU<R?Ywr
z3x3{$?LK4Bo}F#}pdOuvnE&&aX?>r2I67`y8bhU|q|}0q(w;q>Ze3RX@k&6t6H7G!
zMfK;YxDgVn?E5o9$!RlqCTcT3ydYm=1njgkLHal@{1;js{C|8>wHyClV!70tX_$_R
zDc>A(6<i*;TPUYB6a8#2T)U|dc6>vuw%lUT5I6%8m}(y?9=Q9}+xd}MW8e!%$zT;j
zOwV#qE8j@`ncv*ZfXkmJ-Nm`RcYbMe|5^_DXl|1|W<V))dVQiB+&~`?{84uhfCTyK
zml*hoP^_rdWNN3PD(|4;*Pm~nKO?39P<p@zhP#CZi*i5t@aLxoSss^wyU;RIAQAFd
zVY+%!fAS+3N1hjjxXe8H&ZgV6dE|7dMil*U@RC^t*~9OX6<_R;?Na6g2nCt4Af|kI
zEJbzrytI)OXXLzmta`bdl>uFWUP*YLsvM8qPWQfc-0-MGL(3Om*I;Yv-W7;LcCGDm
zq2`*8<$mN`StGY0&L5<^9(<oOoF#Jc@?wf5s_RM$B~uqcGj*@~;v_zaARZ>%k)50W
z)kZ>5s(>U7-|x*VZ5y0u=yV?cF7D$zRCRUwiHLc~VP#L<-O%|NuY>G6>r;;I&ML4Q
z&tUDi&<;&54Yws#%{|Ps#XUMJ&Wt2`cbEM>?g3whXMyxXt#OL)A#k@PpZ-{i)zAzw
zyKkKl>L+elinZlm0^e9z9}=l~vd=YAX~)&ngSG~uQHxpDObP&%2?Hy#&)Z}9ObsEk
zdQH3;r;!g~n+gggjcyK~uBSJ>NY*%wcnJGOBTT@VK!D{p^9?8O#GC@5x9Di@7H*=K
z&_0x`A_2qeqZNI#z%E%u&8M}_V{!T!_q@8KyCz(eYaHV<l~Dt;Xm2Cq8%~9r6E5zP
zp`Hn7KlcWjLX%4ZDR^plPgkv(@bN<RB~WE`&S|zKiegQjL*VlK^iNfJMcCUygPbd+
z<Aa^S%{VoqJ1&BJDFTLgMTLr{Eh%a7o{77AOxo=6l~m6&)#w*w)F^R54Sgm04{7dj
z5A!kVAa2UY(W>klfI#A3g=f9E!uG`_{SO{jfw3n<J*3<%Hee$G@`meWfX9%@-r(=~
zC4U{);Ac<ojJB9Idv#SOaJ{r76+?a@8_^rt*~jM`Wm%kZ96thH4-lhRm8Tu;=S7_7
zs_xr)iAAl**GL}KTjVdwYVB*hl>~Hjr|X*IZ|D5V5+p)Ki5}`i8B+*tDIcmWMVyii
z6a1~NlQUs?Fn?fH8eij~BI-PTXXlhQjXnHZ7FDiFaBimf{D;w~`uVJ_v<Ss`Cs(t&
zM>1cLXg^fJ99w9~439Tb^!#MQ6yF$k+2VL@*@u5KPki^**ZmIOQia|-L*;wl*M1(Y
zeVCmjo_<zhaAHOOn<v0*bHrC;$M$Uhsr%-Dlx5KKqu=DiO4@Ngl08&vDH+YGH$Cw=
z`+s1wgl|8%TV3sT!vw6<W}hF?t@|0g05ZG^lX&oza^COH+aiCaAW_2VbXdy~nzfno
zG6l94#0n2(_^lwD9+WuPG6D4COEf1Rdp5J_xEOWejFR_h4TuX$WY|7*TbQLK;~UFX
zLVNGqhvM2OR<^{c8k1-$Lz}0DN}m-x05RDX^5PK47Nq|{;SUK7;Tsoa2v+$ylShe<
z;1m|m>cyve9i)!vx?n^-HAcX(%X(fh3O-)}?dYmTCdSVvt+IUuoKH8GESH^KYUkN4
zaMAu@y9YSGhjLpi4jj*CSi3qRoSBXlom0iCNduj2Vj>JX;+(=;p?^v#%#*g=G(hLE
zrT$K%EJnvShT2l=JEZM6+36))2&+E7e0QK_^P&BzdJ=kN$%2L9ki3gN-*2nzb$EH<
zIMf(CFfbM#0CsT!27u_e<$m=%qOw}jBx33uj8+aoK3w-pie5tT36GIN=|wy4vUnV7
z%e+|cCg$;25ovl_&(ZO$S20#7o^j-Km44)uokde1+!09k)oJQbLpyGg0`8!|AaloZ
zkeP1|qq}C+NsiV@(;bD)%!21L7)3;ofs0oelp2)2N|7M%x%AhBKqbZb_@1B`62fuS
z7Q;QYm|mZ6u}Rc2u1|jjgq+%O)ZIKx<;;6I6~kviQCD7V@)QIo>Tby#@nm;<e<F+}
ziK(gsGsW6Kl?!P*jO)}_twT@aM_}nR)GhiIx@edvl8Gl<YXA%1!<)ld4*Ml4f3V3!
zLvs0yURG!7?try<jBXIA7@j(0nT|oKUQ~LpE|FPa5{x5Q+Weu-$<xQ66PfSs8F2C4
zwFvw1-Tlca`XJTzTNW=uxg#~~McN2xKdba%O3x}jtD4+Z)|4(7pLQxNXB-dk{#=h;
zSJ``F`T*LYR2}!+hKV9M++JkTkxVpbI<4b*p_9*!-s5(bY;_yfkuuW;(1-z+UU`6^
zK{+qapKl5k+gAwJH4`Wp0cf-O(M^Kat(OPOZEHS8>jJ&<4a4^P*K+Thah#lL1&Oj6
zic?|leObqxOs`!WB&Too2Motty0<a8kLyn_$CS*ls=dDJm)nu*^nr%k>GN%Kp=_1m
zbUmm3w9fuUO#Nc3k-IXJF4uu|sdPDNQ|SWNd%$eR9I=++8&1@_MkFRu1(Xp9tq<z>
z$@4mpZ`h9|N=ZYOjX?sWW2Q#~V~=Zca;%K*5_wrW(!4hNA9NZ5AZ)J?f-Co|^ti1u
z!kNHXVXVSRvB-kI_)wl1?*G7Mw*jjl0gmJk6Dmh32cAIe4p#~hLBYEyD#dA<w)QGe
zK993?O8D{KaxJsV$={Ovy9L8E>IWn;z7hM=n-N4P545_!z?!Xy9XE99y^r*{5aRow
zs(Bo-ztz{N!9>U!E0f(+pM6x2@(I`K8z~J(12`xZE6d)a>{v!z)o$n`d?R7lr~1Tq
zQ)Rj6#Z{1^M_aAT=sJzh6QgrG|AFd81)UDQRy%X|O%AB(MC<8~=cM5kPxaS}u=lX?
zF8ey{6%GSB-S&|2rH@I)fv1=}I~68YB`cmIN0Mwol@92+z_D|mf;i~}yB~ieW$+J4
zn>NYUn$x3=g~_@HDSCS~GG4=s=(0!^>j+VvD4RR>{X9~*IT9J=+L>FQGjjc^C};sC
zX{b$=J!8+g)wWk&pZm?_x@kenlZ)p|qsJ@N2_~<H<^8xDkDhogj<>x!m<fU|e5~_X
z{AclfUBLePC!V%yy9{f;zA?T4(s2xYB;Aq7rQD)(4q&*MR#}vy!GxFUnzp}P3;~*v
z6PUdf%>w_)1(zMWbsZ0-7ZQy>Qixn4NpNyj3>`lomI8V1iy;OSE)UKJ-e9GT=&-97
z6XcPFb>($VM9Il1V7$_n`nDbTQ|o}3;5fp#%7oqapZL_}{+x;SVhTr$-|_0otApSQ
zi+T@vDvTg?)+!@DX&Iih-g3U%z4D4eh*e6d2J+kt<JV`vHx_)_UG2n7yY?=WRJ-Ag
zv?K5tw$$}Lg)QdA4NX=5KVKqm<x9~U25neHq|zJZVe2hV%d^!_gK>(({!O+MuGru<
zi&~$RNX;PWPt_*qUnpeorflCTw#79~`4}={Y*BY!-@+4{ZdZO<O}usQg#4FZsN38Z
z!d2xbTy`TnYdrFSkri~0%~uu9vXf9I>|We%SE}ZDkrYB8U!%7-SE-?{7+n~6vHD#)
zo(#%Njh|tKHN?O8ivHBv^o0UYMz7kgix`DARM6E;b*d7wYz)P$!X0o<Yr5^?tq0r<
zlH7pL-k;F*Mx>A{!7l1Is{iv7PYJ${GyKaQX+HuHQIK&WNf_Il$fEl$jQHnGt0eA1
zVPVqQXe&u-8h8ZGUIV*o$<A`WDkq(OB!x)Au{Q59e$60KUn3ZA^XH(UaH1qJ=KC63
z3g%f$iKu=xDkKL-KcIv2ArqQH7|IY=GHU`FsU-g;HL2U9+_GKT@QS&>j%E^dK=~R0
z8c0%QKz(0K&dQZZZ2w)hCH!e}_%umv0R^#*Cn{4*tv?i;sEPZP?vz*3A9Ur{im23v
z+)fAUsPs{|o!UI{woi>!602Kw4Xbv3lz#}54kdCFDB;uPicR?wY1-A9&@ky(w3j5+
zygSUc&S-nED%dUIb2Ha{M9IA1>CMoqo`~evyKKj%ZgjQSJl=@wyt{?X8VTX^1_pkn
z^(tq5!)1gpw`0b8XJv6GCTKR9$hm-^!Wp`wtsSqEdD^syCk#OYZ%TWl#N@Dk>tp$y
z@>T;439)P<3yk>bY21GfnI0xAGvez84B}wzx!ybt{QzkM=5ADRg^R*PfnYwg>k_pD
zi`AOK2-Z&daEvU{*s4JnYPdw_$7g_c%;fOU!1%R;c_sypXrg_^ZR>V9R^Gn<aXHq{
zbjyPV&gG)AQ$X7;b%W)NI^v_1KKUhv%ClA~Eii6PY0u5omRVh`Ou2JkU5TbIj?i6<
z!=eEvw7N`uy4?obxevXwiTL3us41H&SINIHQ^rM*7dfp>I#Xkp>1ft`jeev)V!vVL
z+?C1y^|r>oOyJ4i2M3>KQ`x(gVqNBnt(-D+8Sv|YZbPd|TY;439E-h&s2Ju6`V%%l
zT@kJdoyJ~gi4(T^V+>MYubahl%@FFFe~)6i^?ZmLYjebZ4O;uR)`~`(XHzj33py8n
zRKx@+o}UQRi2CpgA#=P8VnMA2e!GErCJmSUfj+j(2eQF?9ha?-gf1d+^Wkp=EMs3-
z5d3t!U+hm@>2M5aOD3{l!uVUe`=IRrfCZuc;#d0{HE_5#DIFb6`1~r)V7tP4AmZPh
ze*K5Y*tHEE#3Knr)KakJ(C9TTO7o(*fE=~b%MaStB+mDJat?wox0WwR^8KEQ`O{54
ziO-jBE$3@nlcIDqKRG=$rSA!=@AL!OzPR+mP=Q1V@|Q#@8S|_#?C0(FYQIY=C#(A)
z)GLbEaK$J{v~F1amC5MJmUiWMv}h^qMm1+{Sf!7J&%)UHM+6XVb`7JpUUz+_SUwl|
z%|`vdLL>Lw;iJ&04ELt$TxgSh&<n2oZ&wfu+EkqYE$e~dzM&jnD$Umi{Zqo-j5Ha6
z5a*wt7|VJToLs-{3!0S$A8cbZmdab|(-gA@qgqp`gs*GR8#bDE9Lq=S-x)LX;*SzE
zFDF}m9j{r50~-xOJN}jnmD09#!>o*Upf1J3oQD45`qzgr#0-vus2Y_2mz#$$fOERk
zh<dZhHqjACY*|qTlWRW`GQ#k=+#0xC!Em71z}lE_li0AEYA1_slXuVy$^6I6Tq6;c
zo+q+x-`$g-X2HcJ*-4r^`fbE4|KCo_UUhnj2S2th_?6Qy$E*m|Z)e1S`?a<%9|4nT
zh$)URhY|-QQpt}x3iA4E7Qf>4hnHxXcVoIlf_*eo;1CUX;3am0+zlfLC9OPS1Vjsc
z>_|rSgcPRot37$zThkQ=^UuN5D?LC=tg+)a#K9fDda_}b6WC6@+t8+>Q`L>QE1}2t
zv6CM<_&Ll;$C^6-vt{BmUJ==Fum^LfE9m^vTstB6vFxbC@?oW~7>l!zcn|yY1Aebh
z@u;6^44=DBN!9l?*Y9(I(}nru5)aqtaiSH;&S7RXakBy2$|YP~jlxVORihX5EhM!E
z-JK_-AN|dQI9^tVC5a&yB?ND5!usx^Mh)(qUiJXOUpo*Nb7b*_$V5kf74<r21AC)6
zMgJCNnJQ*=tI}*;v7r@N5!<#FK6@q-fNcH$Risi@U+oO(yB|_SFi37sv1qWFnelsO
z2|btou?mj!c~Y2Dx#h;w{nwpq?G5M9IW}2-v97dw*GX`c2Tv#pnF8<I3(5robCO(a
zCPv-2$AQac>6~LSGI1lb{-sRO&U_P{5j&g#I?q?6#I2$k9GDv)@)1AxNMR4OYMFZ!
zg^JS(4C%g?!v3QZ8YXp#+MKMIYHj@zIvvJxdKN=|=d+z<M@(1Kt+g^ZE0>RhWy=T{
zcGHW6Plwk5&hGpCMuWzSufy>_XyHSfW(o|=pTFf%<w`@yFzLyE_1p9{G#OeZUjf(D
z1PW5ZaCzuLqI!VK``3DGNVEzQ53XdfrvGSE!}0Sq7qDcvneT-g3EB|(qZX2S=)iHy
z#P|9bqYsDMnF=yUm!_)n@@U<rsT!x91py(p>K%SWf~k>+V6>@`aH;v_IY9(3USR*4
zn(t2Ijz;xyeEOT}mX+Tn{j%or#y2jSduNQct6NWxxRnPU@l(Q$pxRu-DN{?FGETr$
z&K7#L_LR#R|IAEI7++;v%)8|n7VTOjXtMtcLQFp&>G$$rzfhjzi;bb3(_7n|Bc-@c
znhb!^YR|}8aCoL<kv|szU2Pv7VORoXH;9uL=j>arX^4jl9p%LBhW&Fdiaq{b0!N9~
zit%L6BlWgFe{Ez587y&j$%$6_5iCNX-p(^iF2Lo1JbSxdpH`ylqN2jahe{P&IxP2L
zu;8Zj!$k$zau;xlblhA1V&B;ri_Y&7`H!10pIxcciXX_P>%it_z&B|b0d#~_3b^`J
z=5UHWxdSL*P84jYq%OvGN^itT@D4TGwu`z^$lmCGM9r?<lj3$=(2cXCM$F?Q%8z-3
znW(4Wexm9LtHHq3-z77ab4db>&-)+63n)=%FUmW$)w37uL<l{cxL>M@Y5D2E%m^s|
zPgZfl0#FB?)4}zqsN*s|R4^OG8St0FJ|scvlS)h2x?o2CjyDgn(!XwXqV-$;Jlh_`
zGt|=2=AszK=&p6iS}1P<Dk0LjHY@+NS~`Aoxi~u(HqKJ;cK!KxMSqBwi<QyFvF9ZB
z%47L9*;}a@m8pA?qKEE}Mjc<P-4|mN;l{a!m0b|w5l<flx6K#5a1J^H0;^QG4iOl5
zWK@>aay;831>Cb{q9RJb=OvwN>`x?bu+`;svK{%ehySNqYhVFImQKi2wu2OUid1~>
zZC7F)@W&BZuu(gqAe4XLV;OuHxO;1Co7ci(mLn=|H$R2SOJBm=V{)Do(J6glY|sI-
zP=ne~jlM9{qEy(lE>o!FHSd(1LvbdiurIz42see;kWlEPa;UZ)ghXYuu)-u_b~}F-
z$<vEl%xziUmqPplHq@xIt+!m6h&;$JvxmPg_q<bWS7+(iHbi2#ypl|&+~nx8nU8;L
zbp6nx;hqFfwFDz4;0y7pC*2Vz#u=wt9o-+w_ZrX1+BBG&h}Pn|P5+yQ2`$t0cSk1N
zrr*_#XD$Butz3E5bfmy>{mMk9As~yW*Jf(`y<<(b4KuYUZyWJ=Ebn#ytj<6vjAM)*
zVPYN0AV3?Z$6rbE!akl`WwLf6z`aj`L@sz>)5Q@$;VoGS&YL!|K0MGY>brpOEo};6
z$!0F+79~5CFV1$2`IhqnF9gl?Hy-v<TxE}+1qz75@JrboW$@R8HchsTL%j}`S`u-_
z>Ng~OX+$kj+=KTsv}-neZ`U>kEmA5`3C@z%Hdt&O(e3)RH}bUk4bw>J8`6hYLj{hJ
z?%N*@BM*8|MZ<@Jfy?p@Z%Vd(pf9T5bW*ymo?GVRRK2jupS<uifMLPpQt7No3rocb
zC`h5+Wa?YZDvf(<yQ8-_iK<96>`JhV9m={a+paRrdFB~sf`xW;8?uUq&otN@J;A{M
zr*nUNvTlW>k`?-FV9guv^BF$bY&6i`cbnU?y|Sip>eM)o{T}bC4HN50dye}3^wox=
zImkZsP`Sl3w%t%Ia8#BXs@-IK^LeV*+$U}iZE0?E{}`Y7*{VWV2S!UK_LYA&4YF)p
zznNHMSI^EjspZ-*NCYD|xk}g?o;Klq^q|?hxXqT!iwAaA?<6>deoyQ1brFp&(W@|b
z+N~cId&87fRen@0`6A#{Q>S$Y!fEk<l`U#tg=)L@XPF#~5+3(zV{mmii8?7y)p_Hn
zXMpJ6BqrXa^xu*02EO-Akt44Tnol<&OJatZ3<1d4LExvhzoN7+We)ayL<4$}+^yZ!
z+o*eSbMs$5oLA%}%3svG1)5<vVZ8smRxStA450+$A^uZeSEJxB_sM943ImwJ_rHYt
z+nS)K!5xoejDfWX>~|C!_?(dX1&za6KO_>;bVMirv{K%-Ji@=!+Yx9uj;=YTH&j4g
z=v>+<u$-0bk`3+HjJ*$>4Hz~+DdogGYU{!yTdUIek>TMiL+A{Gs@7uE1U+GG;uM*U
zNozR|Rnpw9<wJ%?u;lBvrXZF2xT*=Ve>skgFEJ)cf#b96w>ftu5Q{xiWL+PuB^z%+
zZ2xePbye(1DpA7qG;$r1JDL#e)mCkKlY|08^*ptY&qL6ze_nq-WpuUp;jyE4<i+`t
zWqAQ@Z?AHJcQ`wII2K5$lkmgo-;zdTlOIP>l}Y3M22tBPc<X`N(g)Dhh1cbn`tN5l
z)^|+lrZx<LKOfFGuFtoYlqc?>1Pf{>ETx<xhhVpE<s=Q7e<OYaBe?Fx^^$q+-R*=+
zUCXZO;t3bj*o#l|xk;WEQ?8y1D_FAf7xn|3-1eo0Ro166RsJJyL^1MiSj}7Jhbju#
zS-GS28=f;?Eu?15CTCTFvbUOtXZQbXhmv*8F;VyRPMh{NmNBjJ01BiK*(2}poJ0qn
zwvVL-%iU4|q_;C@qUY5tnBeGTuHiFV@7@QkmL+t}kN$SHk1Cl8i}d6i{qVlBu`p(S
zEPo)wWiiO}s3b<<(2XSuVup=@l**;K`RCOg4w6*`tabG@P0`$dmO+5x8wws9amL;Y
zG<M@zY#<Uf&>A~2NLd*Yi*T`~j@L#^{S%Zt%~0FYYJO;u=<>OtH6y;~(j6?PoRW+_
z_f5<A0M0s(vY*eM2!`C5?xDZi!Hn|%z7YorPud_x{M4a0q(6h&=KAi@PuKCWiIaZz
z6J!s5$oJ3V{FwRG?x?Yb<=2#@e8`S4!>=*(zf(&yaeF5JIl-cvI=}l0r&zNH+jV<F
zFtH)VK>Lb&CISSiwy4Um35R>?J`|-wr3vUXi=)T*j<V_qLu9_y-<WcSm(g&<S!&DT
z+G5{kF%ic2JP=ZcCuf>~rBO`|Ka?>Hosbw*jXf)XXlP;U&+Gat`rHHp`jKX90OeMx
zB1S=ql7G9zD)<BH<fBj+yt5@oFmWfkHlhr?Zzsklqw4GCV+0^-;L%xSUxTSy!Ykm^
zB(&r5nx&2Ze5zB`R$_eBAtjk0Z|UoKjhY+zPF>YeC_);ix&aSVSc<r~E51~Oqk78Z
zf`?k3xt9F6kDPO~WSH!<s^qODjMff+ON97vj^@%T8}~eVkB$(Oh!wn0RtwpUaf(5I
z5-u+$iqT`0(WQ?KJ{8v!d7F?+;-YIrt^hV+uN~wSE19o%wUy0(1Y}NGEM_s0JZYFy
z5@M^BjJZby%KY#Tqy;Snog9Yhpei~c*OJ#v#JwMB2WeT%heKIJZqSFg62BWZ2>{)J
zH-~N+{|k>VI`%6h@&}3FSoX{tCaIxhr4+mgDlL{LWXU7g&kLf7@2~{xM<9Iter1sN
z2bNEsRxbUV39vmZaBHr-d6YX?;BSr#I?gVac)ypv<!dX%SJ0^dg6s<;w~Q}<3i*SU
z!!ZIzGlUal7n_VEXFRb;izS$iPjeSVkm2M`7d4aUA}8M{Cenun;Es2K302E^5{scT
zHThYFApP*_!_iopgt=IqOl|TDy&(H>^b#k4);^O%^SDQ;+yOfRUYZci4p_`CUq8DH
zJuRi`7uR!YY^9nbYJ5myuEogbo+L~g7`^5Xc)V_TQ>3!vizrHxIsfAVIPhd!-){C-
zo55Y!6-Tq|7La57eJ8Nw`Dzp-3q?>i)G{35CVo(-$?@{Lrdr{V-@>#}HSb5tci{u1
zEr}_dIyM?;WhhMNdP8B@dDNQqV(s>$tR(lg6qK8Ot7B0JgCR%35`z)1CIR(k!%=L;
zoR`S)BcG<VgUw(zUo-2JCyHY>d6+cfoLE?Na}QQ2@{*Gr-T^I)<0(ZlPb~(+g880W
z=jheCnG692(DzCu;<M-p<Awuhf}0MfVXLc_qfC6a2MdZ1F@0r|v-G*L$yu#j+2ov9
zWXHqY6~&vlc8*0rvGFm&$gc6hj%D_Em<CwAkWdt^uWC5#wot!bp^?=>WT&Dk%ym0j
z1|CI(;o#`Pt1lgi-zr5xcEBAlJ^yjp0AUuJiceY$d{LD?0>9!Iib3ifhZGJz!(7Vb
zM~585R<*~5CqOnJh6kA!+SEG90&+-xj*`Ot!k<O;RJ4$Xd~B4EEVSR1r`J3T$1p;`
z3SNKrW($w{&6cF9MN$SGaST0tU9xix+Tj&K+Aa+ji?;lURmC;VXW4xDWKW${y8BAb
zJqcA950CuMmy;W4);sv^zetpN1(Z(%BvkFz@=P)3OZ-voUlTZ|8<AZ!rCMS!qSU{=
zJqfsw)p*iTeX_|yZNjnmROVyx0t1n~`u_;~>VT%&_isT|LO_sC1(QxG0fSHx5rHw9
zk;>?l7Lkw?5m53G1d)v~z`^JaNfow9mw+%rkP)Nad-!~R-}m?a^ZJK7J3Hq-=dLS0
z*L8isxP9_S{vU(<s324bd4rm&4Wl0?w%loBs<@agns=^@-})4%dSd?&6=B!9LzchJ
zq3ZV85KhQ>*)Cq!jxXDm1PP4{{c$vlnpT=g{3B@|Ukg3m(0EYR#{8c`Q*jAoG_<E!
z=0Ywt&yLr#ZJPik@9}zp*ln9PF<u@G+SJ8^Pk*mUk7BD4sl<|P?(1m2JZmk@mJKQO
z4opou5RIrY84;da(YreEI`LELm(AGlcbXTCK)R;58Y%%Dz+$Woovr?Oe?rJTIwL4i
zmtX3ZJ&k_S8(ggi3^U<{I%u2s34o5>KnHNWZ~Z09Box=*sYO<6bk%LLomZAJ;$uh*
zn%NJTy*aDac-HZZiJ0;&shP>(IA443^w*R%QQZs#2S1D?1fJGDCew1ItB@f<2*Nz$
zr>QGBlNo1tb6Q+Qp)Jw9gVVN$W|MUjvT3?$qvf+sTna5!D4(!<!%gu||J%?NRQ``|
zMS(`Hh+syx3GEYx(~l=Ygb7+6eVC*dbqofr^W9U#s!5x;p~ec+kasMKwdxyQ6LyE(
zR)ooHeWA@tXO)`vZ01b+KSP4jWqWQF^1=;`o$D<4UJ29Cj*As{4w%%h=2O-R3}kQx
zuz_L@;H>#>yllIDAF=~!5gwkL?^>^ed$53-%_rJ&dx2B~eQ`H9v^Dp4WvYE-=B!xg
zx=(Rcor`>*QzJ`Dv<%A8xDTCZBLA*$VIGPtMyut78N5e_FwXNIywmp>Tsnw!(6ZHE
zwFU@J>D;TGmjz+5$(Lli7>q<xQfv7X-T%pNXi&dern~&a`Ahd!+Qgve>RxMS#U|8N
z$1>IM^?qo7VgOG%w`TO{9joS)`QU<W)r7k6*#KAPZHqYR$|!0NNn!UN&ig&mzB-Yx
zef1@c=Q%k^wovty$$7OLm+OP0YEJ0`gs;~s-EI*^>)TlyAn#u4w>i!^KUvD8WG>_d
zm~JiUCKLEFzE+TbwW6#gJ!NC)MT?cLl?rdKN)>$!p1&l&3Q`z?C%%4I33j}kvV&`-
z8((doU-OFl{z`IC@nUSM)IE*+_T+1FJkCW*&P;Dte2Uc`@cP>J^q1#B_{dyJwU^l5
zXme@4Ajyrau+kIz%Si7h)SDejOUfQp$O$=F-GK5RChYIb^MU%=LlqTPauwr})erTu
zN5AR@mi*+R7kZc7oNwNLclUivr`q?>0Xr?tn_Nn-$9g_IylKbcsHHh|qeAI6{mR!0
zn0NP;^W3EY5zcc)CGfS=7W2Y_PuAL_)JJ>nOq$w14Ul*BIAg=9kgI!MB;7u<{LExf
zI(u{b+p70BYE!>mQR64?IodW?r|RGGiwN0r-GmT>cl-`6ZB+RrOsIsZx&()C3r8ht
z?=jQ1rc$f76m;wz#_~LQ7@qX$3&fT#O#ECSyF=OMxuKU?{--$dbeU|}VLkLAf+23r
zja~APl2^U8>zH;~@2rYzGfAw%Vc$N@Y^J&HUf05KU9|ZiqThQb`2|~px|3l{f2&o$
zPYk1d+}ksb9C)Mm6JzaHwETXRH{^IgTfPPH=DkuV)xkSf!((F}?AUm}q@62Nc7xlV
z$`d;uAakp?_glf@aNb!{Zu^DC-yb-*-_M<FP;X)@jr7@z^cf^((3*bh*Nr#Ja@J<c
zx%qRp>6lEjuXKB@GTSTvIGa7^#{u55d2!8TA>Xg$owG|ETG9tn8-Ag3GiZr&wL`Xy
z&MQCF(H8i5{AK1?Egw+tDKl;SLMb?YY+HdlKSJ|Pw7|6StCjkJ!PYC{_X#ovZ>R3^
z$C=9^74XqULUTX9OWD$)^4rIRyFs;FJcKVBrrv+0x%mCtVA&S*fy3jCtqZ$uaW=K-
z;$?gG?J#kbg9c5pQZ>I<b$7-MR#NK9&V71F>)(a7fw9^c%Q5*Y*_*TABpeq1iPgW(
zNW?NBoKq#kcw8E+-aWT}Q?lLBQPoU5<1^CBrp0m~9h9LP33IWIy47%K6!-lO3nZ{<
zfJaN3!z72-S^+M%&-F>!Te|2bm9Wvg4<%{vRg%+~VnKvFaz+-JWX2`K>Zx1)Yd&w<
zEynD8+>?nnu(~l1s{$x*eeb0fbaVRGiEp4du#kh(_%KgI%EsZ%jj=qD*z_|5UNKO=
zM&O8ih7~e>_!IJc(_ya<_hoZp`Pqoht;(_MO;<j=vtXQXNcMoL*j%&PF5$ti-FD4i
zyM0?ln6r^htiT2Y`!5VVrj|}lX;5pGcg>??BtAWjuw}Td!PxX#{M2j+j=D|Fk_oMB
zvQp`zE#LaqA94;=nkHQqB*RwQU)ADdIYs@Ri0lxW9_}@54}lt?r^44>E=~Vrb>6hT
z{>a0^?ZoK15F#`<tRYJOZKMxhq|ayZ)AqZ~0cu9=q^C+RaN}^ro9210H9K!+Hj{tv
zqfC}-H(tK&&$9I^&jB<9V^^(BkU!JfS@ZNegNxb~e%yKf?J-)2Q~D3%ikH3J06L)s
zeQT5>vhT#L6I{z{p4h&OxohW;W${BIXVQO!{dT!#5`~k#C{}?^jH^S7jB3Zc+MyMG
z0^l68TY~WwVKiEZm8;gF1uwv4$RVQ(ooyexz_?U&&3}5MU&vp|{^WL?e$3Y^TGys^
zoCD0qJi1vBEu5hGJk-Vcg%NCCn5Jg}{h&}PMyL|MO>Zz5m)lt^Uq7sV{Zn$%S9HPv
z+Qx~UDz-WyM*n@_Zu8#cL?XAej<><+NjCqH-VyH7k{5jq1OPnt)X#J9LY`jTox0*N
z)_LG}6Bg`o8iby{^xad79jUeA5Ze)3G!@lCsA(H%6>qEf=(McyLAHDhU$@<69nFmp
zl;nJ2ad7IU{DK^2rXr(6+D7yi?~jS*E8Rv-OnzmTZKkXFsrr<VQfxE+pjoXK^-=6K
zGSX$8sS)jd*h-v7e^LMNBbPJM+oRIJ^Sd{?OUb0Rf~s$&wb$;5d#ui=1{H+B>Y`35
z_>Hk|sg1WdmYLN4q-9fM&`f}`=mnlVkcxZU!mO`%Zm}XGWvTK<6&U*yQS9kIjE8oj
zu@VyJkW4&~4kn#T%-y~X0%dzycDK>%F;jg8f^u~omYKL!QR%XChGYJ1zkfv3{7z3<
zNeBMG_CHOa8YsULJIy!V64uWlfR_x#O-coBX?C#B{}x~hs`!OIm^^hdN-0QD8KoGt
z<vv;drDd@;fj*k2AbJ^Bd7{-QSFlFvs%!GW2e2hF6MrOcdHK*Io^p<yWx<TNBGHSv
z7imcAci3fOMYGW@cYb0XKhYyegxhX+C5Qp%t2Q@auIqmI@e&i=Q-q+J-fxZxZ$XvP
zut$8{A})!g+^;{`VPaghEs_*o`_=PtX9C>LP`fW%e%8!QHoUjw3Sh(8t!&R!ck7Us
zDKhTQlGO{Ilb!21rS?h@Ia!^s81ler^UU723c1!_Y!ifPV>Fn(Q@1A?P<^lnW9`vZ
z<;(MMq*Y8Qv_)C@e(4+wzUe(iD*-vp6GHt!phoQc2Vp`V7oSNxdnL^fvuM9?kzP*d
z$0Xry?DVQVD}E5Xrc+g@=s6VNKVTt57ov8T52>QzQ~(;57b@B<xKGteiO=7<NVQx>
zEx(xTwmzMmoBGX(9O%p<-cc;^^Comk_I-m(at`9Tk>v;{rK;4h->qK`1+{CVMW3T>
z>S{@yaRUy=X5Q>3lde;*7mp(G@547d;$w^W2|+Eu!oP30jGf~JfU#}vVgexQ&^Due
z@oD1us(pM`ZYqnYr9m9jLa(MYShfQ_-d`<-ns2Tb*{D?Q4(Vz@i>R0%bYMz<{$Oh!
z!P=D5b`+c$Z)XpcOhy+Z!h;OQJah#?N$N}<Xqb#vp5dW5r2H`cWjwov@w5m?wUIAL
zX)c4(HK<(I?7j2iW1)wnM4l;^?Sc3u<Z7=p(u#54Y{Dn#;3JCx@lW`YBM=3WNIK@1
z@Ua$CwVemazh7bTs>sWd!7UfApCOPVjS50%v5iSTN`rZYz%!{}DGOFgeX3O*&Otah
zi@u*Z11;kIVV8%8btB*Q*Qhh#%oxnawc?zLG^`6MBw7}Sps{RDcp9lN)v>iX-n2a~
z|Hvo0dii9wZNnQ|=%L)ks<>a!fjmp)*ed|!iFmX<_C-dpYm*+WLQjh_?U@HR^VAp6
zqp&fmdMkaZ$SHWyWDMdd+0QC95ZXd8e4mP~E-9@p$&1uZy49Q(6BwXCszcDZ)`acE
zd7dT`g=`Mq)95w7`vha>!KdsCD##KP5~|SCp=ZR#)&j~GJ6okW@m^`ZZ;Q1poi{U|
zh=?H95TWPqn)|H|zYB)W7$4rs#jYIY^eVlO4<Si@NJQ}Cw{cB?Gs|Lt2|maBr-tLg
z&7!eXKCs~$=RKK3#TfT9cz>ALUW+S?RNI9y61Pu_?pd3JS5>MECr3GQ?LzBGGm38Y
zq{n~}rxHy~{j%XbV&j%<pquo^$dU%Ny&tKBDb>BWR*VGf1dZpPsY~Us$%qQ|7D7}>
zc9ld?MoxhAcuW5s^FPeQ$B0nb7<e_hz2pFdDHob~8pxFupzut@y;z1%f;-9Po}!2|
zmyu9)bl!^}7x$j|1TFKF-h&E1G-W}!TBS)LX@{KBzNSVB#&BVP5n-L<U}dKsv)x1A
zYS5xwZ+v3J!$-sDj(MyFCGIO+bZgr5cab$%Z~76Y(*f2`A2H|%;1?GL^!4N8h^3A>
zZAyL=DuR9W=olwE^PB^`pL-uaL9AtXjGrA8X=i7u^3IP^3hn#@8L1zu=dpi_5BP;0
zWe{yT@zQP(60>cYD={JbofTFa6)IU`7V16{zk4mi{MytZ;e~pr)+WQIERsI&hK48+
zTMc#=Vpk19LpcVU0YOxQyr6IDQbw&5f<(`qU?cz*Rf>{4RMiw8=XiC<=b@WBd!m*K
zwc1I)jt?w*tzaG4AXxJDjIW{aOh7;r^=>ApJVjrM=WOPw3_RPp#cD$kUa;f6{Sw`J
zEuAEny|Fanx^h(tc^I*uSG$VNsM~E1sE%K$z2KpF$3owy1B1;<Tfzz`UTfh7MZ2*h
z{&%Niq5=It;iW`)Ox<%TX$`h=A&*`m<TEaz7?UKd0}DiPbA0RQ7*O&^$HiQ*aXh8h
zswv|-3<*hti)!AGn+Z|KiyNvOt5vuOJ;fRmyBRekykx5JaI37OJniCB=h0_(&Oml*
zMUltP@IxY?=S}_Fa0yOiEU1AEBc?_}1U$xqe~$PX8nm(NO~UM&yxp&sU<CxzpJ>Y)
znXmcDP}3nKK{)%ogFqVqJMI83o#fTf(3kpb{%W9rqwMJy49js2WzBds?IG2xn^eTU
zj`msXpJeGdCf~H+jQEyVCyl(v4sMR2tb3{@w(7lC&d)b2YzM{kUrm6>mtbQ)d$eJ!
zwJOG&A{{{P95&{SN85mlGWXDCcGlnulLHx!0%daz$t-uE!62T_7`AbRLR9oU4ZBiD
z!m|Ri?aKF3V|1KYx2FqR<tkR-uHz~50`H3jn<v?%JzVX7Ud=y)mvGoifZtZhlVUP%
z+rmzV9+N6#G|!ado?2H$fdCQ6<8e8vCIsc+_skiXMVmRLZBAP;#0%A2yX$UIBdlqW
z>@!-qcrjmKq2Y<l^sJZpnt}|ynV0h|-sxEnbJ4h5cWm|bL^!ALc?toO381E0bOHGm
znvwFg(+czOY*u}<ArH~Sv^UL#I0ClocHhi7OM!Oz&GYlOw2JH7ja<uF-bJuykJfdM
zpqm?YLi@qT<nFjJ6l$MNV6qq$9$Q*IX)$uzMwxJ+y1BJN{B&S&kCJ4A6DU^JDh_EQ
zExcsc%4;h8+Kq)=_LVBL=Y}*|Hr7Y7qdC!)uoK7?aUtZn%1+vsmQT+Hy^t2E*bFY=
z3T_|k5E<xGCL!7xMgwNd%vaxqdWi~if@2eN#8$~am$dSf>_T$sn9puqMe&O2rqtga
zZ0)=R>s9`nNpsZ47dQ^!JS#@M(rT9p3E-aZzM2i4;m=2t@j2M>(YDSLc-6oGyX)Jd
zY1qE;(XV}-C+sd?0y#2I{(1jSKbjIc2jmNX1JxYd5L&m$#AEkvSp596vJ1l2oB-=H
zUB!+M1bgiqR1LO*(x#Cc8t4NLmtQt-S`Vh~W?8mkWJ<&JX($m`(8<3<N#ZidXYj&J
z;W44?SH~@A-3@Q7WrN+H-yS=(&)D16A#Y)L0#%8ZMU`K>mdcHzCYTX<2)EDHaJ7Lz
zF*_j_WN?tKfy}efmc?iAqN(MRETe_bo{yHte04I!J&j6&uMIRW<cgpr-Bb%A1kER)
z%`H@1IC@?gHbG-!!;8q2+x-3`b%BoBRkcRgS0`Z0og-m~J2m{okll;Tz;VtKT<+wZ
zh#4qd#hYa*qFmx)SOvz$3*R(zJU`KaxuCDhkRijyO;~{QR$nN3;&E&wCXU$N)e7o*
z*CQU?`^0v}cyuP+%{*D$@E-P`Pnmw^g2RJ9ny%<zqvTd`&B5B~MP}LAU%NU_{A2)$
zpxkc(3;};Yut0c`d4{=WPh^nhr2{lS+t)N-pM+%cmDKpoY{{}RdB)>J?T9NOKb}T9
z`?;FB1bK9{<1T8EKE7$LLz&QU81!sgthc7u!qR<7-(Fg9Yhqq#K8lNZHvisXO)k@#
zW>j27<RXQ(MI_(zIhW0wm&GTOTfHAlyr2)!%0`$n(~4DaYw#r}JYaFSFDY9TMdci(
zc>Pm2r=k(-NlaXhSKLFNRzTbq@rcLd1#4cvVzm31&0@3|<cw{RBGXEI%7SIixw0Qn
z>ZZ8xE$LzVHzz>epwZQQ!$=Ts1;NfoJoxD+luFRQ@!tIJM>&r9Z|FHLOXCS&B^XkV
z1v1O7Cy80JmRaAePcv#%Yo@+5s(ifc6`d8syoj|0I}%2UeZ=#f!l9Gw;{OAB%bUn=
z`Xbq_YT@U|W04*#O@@y5%(X1#NXWIg$F>$_qRBe$@CTgmff1LOkCf=NTk%aU5A`CI
z+?CF*1Rc%BPPrETx7Fb+;_Oty2CdS0j6&7Fce(x@B$*fDj7K#J{)yHDG`RO8L~%y`
zF!3Or7D`zViI{yXXxRel*q7-VvfZ*vWfjPYzlump_mf;c>9u=SwEZ#Y?9-skCG?w*
z*DDlyK#f2cs2?!t0ta+r2U)i&<TUOd&bifJ=`n5?hHb9+f6qV*6@>0}gkI^nthOdC
z>$h?nB*RDtFB1+RZwbLOqR~Vy2E-$g-BZ~$Tg-hTs7+ZD1`qGt-BOS2>&fz`4+VtN
z3}O3Gp;+FVb$t!{BkF-?@#?$fdgluXJ3WrWb#z4DgB@2IlJeoM_5@`e=!;)K{WvFB
zD$1kP@nlBCpuq=J8Cq7Og+3&0E|1NCB8TsHnANX$#G)hf=-tS3>hDGZ(sn^!$D0|d
zd9@DQ+Ot2;wNP<R=b05t@+wA~LF%`=VZ#Bb<Q+&NY{jg=+6LVei*m?=mwP`yF<>E7
zN3k0;Ora}+cCB;)*<mzd9?Z%Yd0asAMB^2@IF7N(ug^jW=A|ZT(-6OHmGvJlLWj!o
z37RBPs~r`CMUx1i0Ej&Jz}4kii6X(n?VPu(LGzX`jHXQq=z7}&B(bD4WWRfkf2^DZ
z$Slf~dkj{;UDMzc=DcBO|Nb@e>+2=#(#a9`e4-j||IHndu>5=@7X+-ZAUB9ya!A%=
z1!3Pdkj+Y{?909cqB{U6P5Ex-bVe>`(#-|{1>4p^VGECk?l(u+LbL{hC`bWx5v{h~
zd7VylqEF_yG%zF@0j05ehy@rAcq?Frpl%`WmKWTE_8z_?tF{iZP{;>K^(c|pl%VH<
zj%$@wkYmCQ0*ej+KD-_McIPCB1DP$NLk@Sh?n3?3NoKU4K%G=1NymyTN{86#ZrHni
z3mEcYur_(zZ<3KCrMiEC&Amqz1@bw4j0De<6Zli&N}5&V?m}g&X0<pZswf;b9^JZ6
zr(Pd*&a!cX9J<E?+ySsfKLsQ};ya4sa;+z<)bkbvFe`%Dg9{$e_o8D()*a#sw1t#=
zjB-UT<a(gPH1uIE7Nrj<-%4GrD$5>#L56Ak@`9dsu!7MPwZ`@5qA)fpH%-t#WdlcA
z?)zCjpY0aV<0XvxT0Re4*->ybp9ghwcc2s3{KyQ=<jp8S?+%~+BIOrGS5vH+txH@R
zZlbTp16Yukm~C{3v6r#2!2T|Ehx)fFm{Egn*TZIw8V~oLqsN1{2p9eVbys|lr81Dd
zZB`I$1umfUDAx}vV@or1M(kzU{Jl6aS|h(p!d+8oAbW7-ezWp&*e6L^BJ)$}v(4{>
z09gelZ^o?!HrsaJ>W1P#t2{xRabmB|O(^p&ASyB{I`;ImIb<rZp!%zGQIJq2`Xuv%
z%Pi&%a!<bKtL^k%2R=8lAj~7PN=A0I5s-e~I5&3QrvntK)6;zC2Q(n%Orqx!P|uX7
zmD`((-mH{e=$QO!YB0RJIcj{$5##edm`_E0z?m!P2?`NjK5G9(?Sa(+N=a&CI@8zo
zHJZ#0cwS-?5yHq23YmgoNZIIF#h`QOSl_+GB~-cVlO?-WyWLyK5rs3IRjcXawvv5f
zNN8OT?U8RQj8sIag|=tbZp7a|9@~(17g`6L06-ssW5EY>{B4g<znwqjEVBdKk9Jn!
zPEUhqtnJTXZUb(z)}^qv7CiUO)QnrL{IpAxZ4F)S<+OAN_5YfiR|3uwE<;keuI85+
zYd}5B1wN%)Xg93bLoGVml3E-9E+N^nsEjgKaZa$ncK4$T;(&=L{nteNmIrcyDK{EI
zXA83@T&ueqeg;Bk3Zhg2S&pLm_t*v4Dn-xB1Dk=lMI`psy*YeJtZO5XTCh6re5Y$G
zRU<*6Ym({jh`b$!&?reY`+%(=>d;CPAG_(d^u&D8sNSX-zjwvj8MS<+fYg-I5O|%V
z^|8hUaNB+<i|&w)(UGxZb7qOx&OI8BVjm!Yj0^{dRq+DEAT6u$YKyXGN(pn$o@hDj
zpSvIr`ak)}YLS47;uKi<=OO+Pq|TQZR>LF_RGA3$CpUgfyI%Yz`=@EA5_&aI{dlni
zP$FtS2yJl=S!`n+9Q0_L=)QooY{PU?@()h~vK*isV_tUzBWV|f>)gt3FGeHOw@N8q
zNYBV`R+SG4ShANOvD~qqmkET!l~-&@7f_lM6V@K^5&|J^^g_(fQaSM8ss@hR5V$R4
z{!g~Mn9Q~1b-LZWPU83p)8J<{xq%J!{YQ=u4O&xfG@Ba!wWquP=0g@8Gg)E3?xLGV
zBb$be6nvUJYuWUt;=wCx2SGxfuDw<Ta+6+7apO_>4qD~IRREpR{s!a(`J+D<u32^%
zaYzh-gX|8RDfU8HaCL9Ctge4MMi(%DJfef?pP8QZGv^)Vj)2Mi3N#M{>B-zfzcUS9
zbOS2WoQ{~ohxe||9x*wxNG8shraYNMQ;J8=TMBewTCdPYA-exyeWmFwY)SNhmy|a9
ze8y_OjNv`|*csd`+<f+02G{nk=#ho~QpVlmyB$pr0f0G_95x<26iz_7EG#cCM}O-}
z=Vo{5Dj1(rQ9wOuupLNGxZ>w(InrF{E((#;1zC{+#G*ES{Q{)<pzlag8>sd&0rtDm
z#B>a?!6VNo?CDg4==C_bLf*F}ifpt6o|kkPCH+=1?kaKm88_!-Kjh3XNRZNXc#}3l
zCg|1!j=(-jto;CrC|s+GN7S5wY5Cuh@^ABfIrAjbdUjeS<m7n=xy>t8q;>=rRa2Fc
z#2_?hX1?}V1vm=wJ#~(kje=s}>Q<GhaKtrA1%^OYs`+^zjS5*}qfjBOUA0*XByF8m
zY`T+@A)29Sl;FJk<2154k_C{rX0LE!WId1htHImSun)xLKTCU34M{bpVO@D1KXzc#
z0;ytfsbaXyGc3e}A@8$PzNqk^m^JyWzA5ebsM6SXV%9V&n+4JA1r}?+|ByRKbAW5W
znk4RPTNG-}Tg`PbY{axS8g74!H;+~!01N}*hQJ*0Dd`uxf+Si-=^h@f22es+DD;BX
zrh>!h<A#{CgPg+^=4mHw+#$vF4+Rhe4&;@wG+fUW5hj>&D!_&zT1EahK6B%4Q9jWf
z<Db#ZHU-l&=@LcMyX*MND8{U~?~}yhWl}V-wqHQBN?k`m3(JLoJ4f4aKUy?VMCIah
zrFKllw;#DNf>i)iAa)v|J{3TIclzw#FpytKFS4}7p;<Y&?(We?gOnZjMsN6uDN$+=
z-SG^YyvAcdBleglBTOHgDAy01nz4s}v+BiQHw_LD5xgP>fjnkh_H+#CPxB5u`#i*p
zd9hDqgiiqi%_3L|uHnR@_0Q*l4`XABkQ@#_&&8&Q^sw3L`z$@66LrStbo?TPJ+fUm
zDoN0{bkBhc<QeZVC+r$OJe!wkM}FvCx^>^c=g-v3<v3PsQ!{9B#OZ#L)WuN(fzW!T
zFKe&<J{4zI-8-5Syw~5_h%eg7`Ch$VEgo*>Srq;H`bpH49|uz5brGT<J)HTNwIR)@
zK}=&o-Gt97D9J)ib*UEJ1pq66dL~_<-6=IqBWOruJ=IVYF7aE@uRCg{B-_Cl7Q6I2
zi-ks<3R6upPZ#e$|Hl`0mVW5&CrkJJ6hS4z)g+&$$DBFZZ@F=2J4)FDx9{0m{2n!4
z%JrrINqKTIbO=6B!og(KBBHGZ(+zd;*(Z}Od4Is-)0Z*0uSwIU@CpLtwzjTETSM;^
zJq8Xjsq-J!BfdHEX}nEJbm!+lM9*}t+*NC~tfzJ0<9_FGaR9wCju{}LL;O6#39vTJ
zgU_&D_(k_&5JN%Tr{$$KE<xKwxZ_2`TB1q@nt&iJOM3$C-Zx`0wrYtn@}UsPwXFi~
zXL`{BTOv0e%m2<jt2`UVcy0CLl^@5kmawB2Ifyd)Um4-@AJM6R6ZH3Q_ZT8_$kIwx
zLB{4MSFN}7A0iS%!_pke*@uf>|4GSGrm&t-6btCG2T26!+V%q1l!11LZs*81wEVXm
z;@>3if!(EHcECh@B_F1`z5(+BtYOI;js263f0&51jFJF4tjzduD&(YkhTl=H+-a*J
z*lU4p?mcIH7^7gBh~k%>>&-lBuXFk@Bd78r|1kOM?OakUdD9glf^9!8Ot__mlo#Nt
z;*hZ^Ub`dXDV`tvT6g<SKnQ6O_cG^cxKWjV6scl-R$g`O<W}+=H{P!&^p_SB0=Q*)
z{e05LqnOe`7F}SMg0IL^z`^IRntj>cRB;Qf1`^U7$ctt@b%~Y=v%D(oL6nrf@&HTG
zf##|xpYAn<bR)fezop%U+I|j)&GF}lZm*wA-GZF>$Vkl9j6Fl>F$RYeYV&CL9OC&v
zB&oQ(`V67g_{1)lFFEA&WY|81H9P6O=G#B?i0!GaldU*zJlak2u@u;Eo(u@+H7OPk
zpGZt39F;FO!YveSOv%p8R1X~oEJbW_!Jw4w(&k=s1Otn)hTP)BKZ<#JxYVA>HU_N(
zuRVo(LBBD4;hcRP+1k*lO&`&*5gz4AS#RWluDbw?|02pl*~ZAJ_Aj9xfaWQg<N*C{
zm)8W<X}SRUfOpkBN948n;EIf*ZJhug5?u#ogayB%uiyb~pojHPhos4yT3Fb#bzuIm
zo{NdLHJ!pfFsUkx2SVu0Yji;jU^ZUC7SMyjwG}kLH7Qka!!TWLkdwZv3<qV}aM3(P
z&n(O@?0Bia?&Z91?mtC<fcr5j3I){Sx)l3w%%fKgtg)km%iur-d3DD0-k}(NX{Oqt
zH=SOXbBWX3-8`$`?!<LL_V=Q4C|gq4{Jl?0*{**^OKoW#Vz6_&-Wj@qt6EY9t@0Be
zN1WBg^d|1IfOiNS95%5wfB!D2o1d3ZA(XAzMpEq-gggEe>bDgaK{cqCBgm;$TME)V
zfo~oGg79pP2ZEsf&*whF$3%D+S{YP)C%~Vhr-usp`aExXEL&eNcPHxH^bnV3l`sfM
z{d_JnqSeR2SS3&TE`=$bk|zU<M!<OKu`H4wgLr{^nKu*{abKyOUG#1ZP%Njiy%f85
z+DWDBW>49=uFxUR^r?WiKp--{K|ygXntT>yb2U#<c+yNF**R9;y}E>A#b59!{>esI
zr%&L_`*6m1De{dTC7X}97SS8$6lP}a86#TotXug6^38)2j{Fp&wW9{2-%EM~Ken}f
zsZZ^%%aF#U#HKD@yHwhx0uj&dxxzSlGTFx*aOM{Ri?dgl0&BJ$F}mGKoHn(2^Qsl2
zl85z`>Y{gzYN{&$Nr=ujEAJmVoNoa+X<2}gO_@DY4J3MkvPg9x902wu^urVV$ktq^
zjI031UOZ{gf@x*X8}uuIf~t5pR6K6P#wlL3AmlK|#J~(##_fzpnAsIT<F<bq(TXWV
z4~O~0SubN#pMKM4$g4e%ek;&U3wT~>z>EpNZQoQL)kzE^L{Zq3lLPf`SxT6cB#`x&
z1iT2~f`Y2beqeHXF(QP^JftFe3Iz(B7hT!~8uaZ3qH<w0yv|`iSRzM!s1GFrx2X7W
z{^9{amXbdzx5fkSo*yIFS8b7(o(0mc$dlSme8hgZoDe7+!ZjMtn9Ca<cT2LF_IwzP
z$T_;ZjkM?Aca6Din);RSt=&y!lARyu=m{+$S@Fnv&f#{u{rcYN#zfPrgv(zrw}7@Z
z<09nwz`@JtPREn*JJ@P8xlR5)l+oDwq7c1G;7tt;jmCQ#8Z=07FltMJiVSBex!tkO
z&mAIMzjdd9_)c6?L*pzbnp%{Fg$i-_EG0Vn89Qi=78*wR0LNkfJ+*%dG(&@=G<a|v
z0-hjbO%g=2valT8?$2~|ZBWbb@OQCy`@3F6{#&S4YjH`*<i*9JOc8O5bS~sTC8QHx
zL-bngP9f5RQVt>O-i{4#zso1#Y6bcEO486j((p|`HdgSUMrB2*bK0^|QIT>BYEK_7
zI#q(J^z<tEdQYF;fR{PyA!^s!5igsD@dQzA*|G5Obi<Vi(KM9#Nn`{o=!|9G7;f;&
zshVoL+PsF59}gw#qL>!oLx!dL9=bG;y3CrVYt&Dik!foQ2d;O&sC@tSO`^D1e0@4r
z@(Su@qf?q!C0}P8ui?HQ%EAhDm|(a<e8rH~BX1stIRjoB6N=x>kC{CcRzy3p%8O*@
zRp6rBb%@;3Vee)>X2eo4k=X2ny+jS)$R?hm%5Zfvdbqrmhvq>wnsR{=t7ewh48svx
z1Rr_Ad^~!Ekt?@#^{q*m-B+&}5K~~J@LLr|!xwFi1EMsj{c7S##1uU;f&=s`|84a@
z2~3DsxDeVj=F{;-C}@+enMbwh=yXbioW(ORCsYV_1_&pi)f!{d0$$@Zf}Iy1J1#D5
zo+wS3S0mV<PJ^~ls8!B!KzYQ39u79B+X$5N@pa&X@|$}-!%6&E{Ic=5XjSc3^Wt>+
zWpK~0uu}rt4=V=0{ag-2X1$AJK*SPhf)kBkuI~Ci9$DzsQj{xP`o4A>SU81uzKY7W
zvUWbq`lx<347c)rWgK?_Gg8U#V`L^`VQ68FG5jD6!vq%E+vk@({`NdioM9d=Q7C~j
z6&ZeNjVl=%wW_+gVp2I>xI4X`&s4~SLVRCvzABV^OX4P!5tp_hyYcbB3k<-BQxSX9
z1sTxZXT`01R>3|M=il0WdhD^1V)>}P_1yh}{6F7^9%*Pqm_JAJ6eaabnV)@zJC1^g
zyl&z-gOWf}O{Mpx3JHl!2AR|Qstbe02@hfN=Eoy&lx{>n!?`nZKw5C>$h(vDU`<w8
z6)*}yTI8W%haI9Xg^7ZZo;|SE-v)E=9!z%trE#!7eg?4@oB{2GN8sE^#}KE?!7l22
zNXk+FxBc7Ty!bKjfKF>tBEkxsy#ZFi(SDFOr~Jss2H~XaVQTO&!~gyBQJZw2&Eu5a
zx^#jC>|C&WStuLPBN1oYXXPybrTlk?YEN_iKO43&z2un@*Cpg#7XBG3QMAlyG%FQc
zhDx;Mm?#T6fEHR)t>MtiTD9w%^kiT(<oEF;5-|eyECt8`AF+q*1BoHtL0NtRjWTUC
z;QDr2=zO2N)Qm!KwbW^}DG&+tNO^go%UNuv3_cdT-YLtqDNlnC2;JnK@me{SfzeU1
z;NW1*KUKh+{5~;Zg$55t@S-2Q%T=5+oY%hG{WDZWJ7o0(1M6yz<8|@m?z!2~&oL>}
zfov5dB7xYSyKQ~~c!$M}Jn_#kn0$Zp1_Id6y)}ORQJC6VXY&T*N9zf1QYA=C#EoM1
z8FF2QDCEfj45QQN|G2F~Jw>r7G+>$Wq%BGpU=8*4mZFjU7=yC*eCya}M(+oeuFG8j
zvf)b;O5)4XggP>N#Wh&ZIjFhl;UbVUI@;Pba@X)WK0Y|KscAY%wRDY+m?lbi`Cx1E
zA7`akN#22o+KQSGD3Dusg12sd`$iatVFsMCtG8dsg3=kmoIMlEhgsDts%xs@;o-hc
zVln;vJUnFsB9wvSUv`lJVs0kuwyNs)!5@>1ct&3QT_EM+{5F?IL}NL6w@wmmRf_V9
zON`r9Qg)TgpauI)!#MkMbHyhF5AWL)9!y0TFt%rAj10@2|5%xxo(=}9rgHe}*Txnd
z8l*4=@kw8juDiaDzwf2d8g9#X5VvS$Dv>cUaY4mz&_4`kTKhE2k~OtALqX{>q|JCD
zaCcdOBq^TuPBv7+t&SA%9j%<^PkQ}3F4A<qwP<@WkbsmJXuz6F1XOBxkdDKZUCzy6
zK3MPX3LZ*H7G^grj?pO<Lktb?7#kbw2cfbd?0;5PT&*u!s}4I=x)}iJa@+su0*PRy
z|L@^<_Eiz21nO=xd1D|F_B$;+^suM<H0V(sJZd{TA%W>rQISY`f3KZPnQhdc(7wid
zjYXG@`0JvShgBi_vcV+{C3=x3Pg$6seU5ujq#VHP^EnVnb|hOmI%<J(a`XS34<&`K
zlr9Dae0gf(HE;z>O`NzNdJep?dHuuclc!p@oX2ZTl0?({i;Ihm%o8s{U#k5)0jb;I
z^((3{tj1oVL0FRGRorUV(qrMb(2MyKiUX=r)@T7B148Vkc>Tjj3uKqGo=%37F|%Im
zh7t0K3_{Ue*Z)!03%x{#@Cx-o1|n<x<gb2+EQ*DPz<gFp5_}RdNTi`df5?}IKm|x5
z`}T3AE2ZOBRZTa5HQ5O3-P$raoKBGBj#DCxjtJLlugb3sm4AG!W-JIDu5=SbKf<D`
z3+q4RyjN!=d|fGRZ^Lb=;<4C(`i@0kj{ukq8f6uF|9b7ld!_O}&liv5*r)wB-k%SC
zdPh)5B&Hu1mBQv7{FDxQH3-PmPDd^jU89qZ;KsqHY(tV^(MJMH1F>k;$3ezajG_@z
z)qd?8sD4`fWT;mn96~UfKopN%ijQYp^XR3*!wG4`zrPNe9D_~x?2lL6yXpc5q{<?;
zQ#{iIm!DptS1UsoZu{RR^}Ax1p{m8hby{Yx9<t?(3=V#<Du)?MMKB}G-c_!aw)35k
zlRzm2C(5s2)50yx|LmyZ6$g9^JE(9?@)Ha~1-jjm$i#yJIq@AUq@-Q&c{D3J!8g>%
z19Lf)xhBoeJM2aM$1O8<-EjGns47)<Bz8Etp*n1#^V<nl^7!Vm{3BB`s)^?~VKkc_
zVorKuty<+<lQz5Y#5!1SPF|r)l?cK9Q;j`Y^ZlX3USJaGs;<Pr=tmQ)PVz0VjCFqs
z5PxA$dL{atHs7DH1rwENt-Ca+JRi!9ESpZ5*r+-qv`30SO42~6Av$`wGf<S9-pP(O
zBOT2cMuggqO7<*S)cD{Q9%aGLX)MluRRT%=Su(E8|HpF47Go4(6CVzj3U$e}puT2U
zZ16F&m3#}&NiDh)ioRk89ohVx;60@9+RGpMEiN398Ux5o0DEEF|8ou!eC6(FcYUgt
z|5HcfdF(@sgowqfzSNk3Q`fabJh#TyZmLdMEq_?t=t>Ul`M3Q;k^8_zzG}EyB2qYG
z(l{}WcVG~jeiOs7RT4L_i=bb8%JJLS$ffiIi^o09*d62cg?*ef=NfO3BmsBjt;an_
zowmE}>E6Q+N@o12pBfq#f8osXl_N5^oY#OAAI;M1{#nMU3EMG<fw(-*jAZHbIq4iw
zjw6VYzSJtOiB!#44h>$qN6hGIi%0buE9NEzX@OCswpkqusr{D4Y|94H7X5tZKjY+&
zLgfhtiXBV4%m?B`1`{h<<QrL31op**dpuQvG0>J=)&W3=#xr~jg}S7F<V{e*nH*Tn
zy7gVp_&YH+bPejjXx^V(6a+TXGZ=qQwBeqUrF-4#c&Jz^DI(x1BuO;2AE(n812jCE
zOfdi=;e|lS-)wO*2z61j#ze6EXX%lfa1l63)B#1^M`23F-FxKCyr7*#26k?+zJKMw
zyEk2q)+o8-sF{C2GgOU>Q-e+n!ZFst@3VPgC%s&P-)BL>Ql8-$z;902NP5H+j~vos
zVHC#Sk=~+SKV3}?{dWP95)h&Pni1hIa0PQ8Y8$Jq+gI6tl5eFh9~Y%UJZ+Od_MZzP
z<Yg}lqKBKKZ<$*?wo<wZcKvP<nb4wi97%%|@L)XluYECTjTzeeSk<E3mEO`2ynP<e
zDNs&i09MQ4?SJwz61aEFx%8!o3|oMb<ttn7{0bl_-7X8ZzDNz}f_YkT!Qf0LR!|Mf
z9nU}~TGDU(ou?r(#9C82z6DiHiMb{moJj)_F*WHfxpyPKJb(H^USg$uRE1RTTRbNd
z-w)yVz|HO^Aqy~>N9Ke8o{wy41ub7wRU!=<Xge>GtX?P3;Avf-x+RTz_g<9oU$@g$
z^H|qh@9cNDvpd!D5+xbr)&x&F+^-tj>a?XRmUK>b3nlsPpMFQ$tN}`c9@)6))jRch
zJ*qYf!iYaxh7I1TnzsWil-hD;%ImdSX#07ss>v5;e{Q-3X+vB;B^M0ed$-@5IGdb&
zSri4@H*c`h{~7A0{>p$Pn-h#bxNqriZz4ow7|FQSZJ(p0>smJ@Q?(c=dG{ogj^aP<
zXPFX8b}p9?85r?t^Adl`v>xik=WMt7m)YnP|KL*_6|vfBCV93Q`E_PD-IOFU5Jily
zAZ7j(Uwm028MNQlF}vYalA6!p&~;heKMeV4i0<#$s1f)cSR5D#5*aL@sz{d6GKY6T
zLc9KcV~1$N<;C9(^<N|8zmX!s!+Skv-ssHoG9MTQFw1v3_A6QlglwDuLhJ;@np8FC
zzEWgRS1c(9m8_lPshW!pIUqNKAzn#w4BbO#lGYN5`$kH{@9^1i?T|}4#)f1Qt6$CO
zzsSvtjH_S144oyvHd-YPnTM=@Rrt9Si%J`-tNZUb@2slM+XugIA{TcEra5N&J3zfS
zkPn>Wt@Q%K#WGaP1gZ{Qt9}pmUnyJf6}&zR3x0nb{+!6LJF7jhQ=J+3Wj=pL{r5y!
zh2eqA`n&bM8U$Eaz#GL4q~BJ-1VF8RnbSY;j-PBe+!auTIeizFSrQ;_32c`Ikq0>M
z>6&Se_LFGfKoDE(R&?io%oIvi501?AXqOx~Wc8RyE9i#(I}DX`X!zI#rK+XbpLot{
zbO2QNhxo(}dD(Mrhj3?xMXL85>2uKZ+4=73Ws-+F;Vg2Ez$xLsdvSjvxi;xRH(*E>
z^Iz1S_<qQG-bmc#zx^K&{dl3i{;TzVQyjNU;HLA(xr2jR6w4?&DD3$q!uX!iRSUC=
zjJjs|K|^rQws#-9W(gCQijN-`z;i02=lp`-t1bl1_;@bhD({T2=rOrX7)m(WsqdC@
zmw-Jkil#<<l#lXt()9*I9ME<3W89AuoT1;Wdx<<v_Fh)02ubAu4h=gMgO%znmZ9<b
ziGK2}aMBwCHoOL&^V%RXNvG^^CsFNiF<Os)LT=WxYL90(0JspqlSc=bd2KgJuF!@A
zPkrkPOK|u!F?N3Jwq{-Z8L+Ii5nEr+i$kGivfUVKSnoy(Jgj9g6sGZKc;aPg{nrjf
zI1LbIS)_=@MPX`4hKoGzX0y|up6R>bL$-vx-3TK!%>CAx-Fo3`ijjY=`MatQs8td_
z6}+vTF%td?t)}ewdWz=)lAPm)J;?|^24@1YvEKtv%h5Ei3<L}=l;&Sq90nXNfnBt3
z{#lDYHzGrDVlj(YYQGPGlNxbI3$-v04+nk}I}mVppvR$Jk11EwXrZmu0i_r%QsaNb
ztO#gs8%?(Qd&N;37*d1)We)>&d(Zavej(a5Bs6(xRNoOB5anYs%Pxc1W7du!eR{3_
z>NU=o3pEZa9#t^vGCQ<0gie@jUF~&e<boU?y?Mib-(3C+EmUQAMB`&aNxwTg?`_gU
zy~JO?b|Vpz&~Aj=nXKSb6AI>S?GIg6gRHz$o!>fO1Hv)NUdg}s_<lHJW8&WrtH1qb
zZhre2?lAp!H=b{pe5=G34EHQWdqhz|sPS`SH9voU{VHYdl3U2c$aGJa1eq^$|BmLl
zuTMF($!KTiyKp(HyZLTQHEN%R`}(NTY2%Ef1Hy_W2NT`DZ@gLxre(dV0!()>0AW~B
z*Ye&w8MzhTJA?n`f#GH}B7TZUW_{t~ZSKOfc@0}=8VP?$89v1tSol)`GhrxA4v}L0
zr~{A#JB%%?HgfrNp9{FNyqrdrm*@2E9UZseG;wY6r=j~LN^k1Pukf7hf)q1{3Vzz$
z!ce<I-UCdah2hK$k04$VtF?kqR>Gb<hFFbYA?HlFK*0oB3S0Yl_&kgcgHxlGvC4(*
zjq+6gxknBeOzN0^l0sR9>cEBe(Y7dl&wYx}3UsuU=;53H9H&7-hxd`&*Z}YcjXxQs
z>27CdXA7vvbF|HGZf-tUdcqFYKo(mUpS$j9h|c>SD#A}|jOB!T5a3h-cckCm_p4*1
zEJ;V8OWl27j10z{cz1V3UWl0&*ZSYbt58Fj0V)?6fnb0uV#$=bYf0dq4)jjR$>NEf
z@-j0s+t2w|^P7sKH?hzH3?v=KMUC>hCYS?kw&YeGu#!lA!ORrx`h4{PbI#g%NpwIX
zFeqi^s2g$jG-YXzH_2y-vtM3Q51?iwe=fSL5K+LTMo3+*Il2ecbG+!!hNJtxAjOe!
zL5n;f@GY*McDQ60Z+*#tF9%L!AiX&a6ij4M?O%`LAM5|YB3gh&0cL7&VomX{VS8Ji
z%pD1*Ku;9d<0QpgIfk?(@R8Mu%bW$luz4Mx4#%mZrkei#YN|*vLXHtQIlAYE$<2+I
zG-;4)9u#av{vohcn!_+9*`$aQl}9pWr{Ub|$p^(4&X`IVFdzb=DK^D?`fWTXN7IoF
ze$kp#JNJqdp@}}ap6=+~2x?JB^F2Lv@i0HP_uZdJU~dc`niyPq?>)3w=3QZ!dEpH(
za*&c@&%uR%4FZqe_kg(vEGGfs!*1Rq1#`&d9^fPv*)I=O%>)xuTf$2N0SYsc3bNjC
zPLQJ4xvejHu0JdCy-bmoGL84xZUE!r^l_v{<D!DKJr~6)0>CH*mZ4xWXfgwIUmM`2
z022iwvlxZ?{yc(&86%}1Lui51HfKeU*T5)(`wd@E!EJBXZETV5Y6oWQm;d-&AxF$v
z&{O(4bd}<*M`1qv<X>3o>5OC~F6Fcp)YjfVydQecV$9c{SWKvE30Nk3ep*$#lDJ%0
z5z3LVU?#fJzoEL%AIuCOxmU*_HB0b;z+bQUl){f6_k8;JjyD^mmlNqbL@3D1vq;Fy
z&UWSI`o)=*ufxfWvb4r@*IzSZvisS&Ai&3#VY~=0hZX>fkY3&z!z568-CPeHgFN{B
z#0{Pt6VGe+XE)=tu_W3lKAyzNui7M1Mjj|Aa*D0po@M}l>9C)X^4r2D<Yhwk1NNbc
zddpH1{OAQviFcx$b!IkLfIqW4H4YDqx%{)3KgsfqpNG#7>}J&_C(8Gvah0cN9e|LL
zP9eOiw&r4t${a$q|3YNB&2-S^1*;4o`?U5{YuIYtRxO{nJn?YXrH2HP2@)g;%UbK!
ziGl7WU#GFpPx8XykI=&d4Zc;z=P_Hk*hO#V)1BQu^69Z)vh-mzNbSBW4fCUcJ`YfI
zO#wgS)&u+MjOTx*p8-ES4eeL00&l8+GaKqBFQ2dxNIsVAW#i+n`@7Xi7XK1c;aigh
zP>tYBXhUVOXY0qvHr3K<O5gOG#%yspeSy21zKUB=akxR7)+fYR_77EjYO2GRgahyK
zky`)cUmIInnm2s{X5x*{)^s>+>Fb#KDXlITyLdw?F<b?yN3TdlgIqCoUAh3D9DZ^n
zL#d!yC8Iy?;u|poMGOF25JE40!quDRG0O~rlep4kCq4@Nn9%ghi1T*bHQz^=Z<ixy
zX3}|))m%28OOuOwB|}QDtD%&doi0DB8Rg}k?+-DplIEb`m>t%QMS9dkgN6X1;^9Z1
zwjQ==SrJtYgZ09SKaD#@w>QaOhU(~~EgCch2=(S}r;p!e=M7d3+|(gwQ;T}d*SkDB
zx}?Fp>VaMn*@x$yY4r`gf|duL06vpV9XQ`5bKBeb=<VvB;hdbDAD&^<o?o!i{e~fw
zy7y8+;NNn0TC6{FC(Ob(l?6~rjbI8ra8i6O8yJdXxJ<%QKvU&S;Ax+iGbep0il=ux
z4Zz?F;qtEZ@81_*HgYkPvz;u;7ve^i)_Bj#gn#oVEBHndi@cT1VxprjNrcNgniunV
z;2wQD-DU34Yy0W(NqZD_F8^QLSk8kRd4AF<KbQM8)zo4$4-<+4Lkp#2PeTqVO5pzj
zYB>pLATW==_z!YCtZ$64s-$Cr5PKD@22vuLnw%^uiVOvBu^!>NI$OthQ8$~M76hzY
z<i(&aUv3Y(9|6EV9*m5@EByzkxBq;nAo>5l@94kR=YB2c1hJl@fDa{5V~EaQBog)L
zk%pf+?<J~SML+tMS}EZ7=t@eZE}8JRFH2MTukLAPB&j{17G*C+&Kh6*=Lj^HgR!e1
z8v{r<<8FCli;D_Do8_K_*|cuXg8MA{vWfZ8(e#BjQS4B5Tt}a}RYmAV-uE0Avx=PT
zKvbqzAI@|A3!!V_BlBuzY{8c|D)rJx1nQ6)?F2$Q^hm2rWuv09xA#6&J2xmT1l-N9
zf9nGNOvGl{{Lg0NYlmg;;Ea%+&B})2_yZmwyuN~XQ=NSm+ky%;zD|&g-D^Megzc9c
z?n0F2cYIo`>-Nm_L=x5`B!g~d`_FOjD=osUFXldHhK7;6j4iLO3Q`eKXAg`*R*g~8
zP%q`;2RUkEmdD{sfHbsJzbxP8=U)Blvy`Z`pHV}BNSw*TQ*5~8LldW*z1u@3>xlLK
zP@gZ@2MB_NUsl$=EP~$kwHF}gshF<ip2j54v7$yNDn!ASY32Cgyim!WWRlNSfEvA%
z-gg@vaQYznaV+-`HR{!`x?Z;$-0#1SDGBbiynI@eB@BM7kQ#9Ui63ANHob|tkbJPZ
zj_9yZnSMelTkWqHC<4zqyO@`#CSpbYp7uH-CAv}mm|+->4qCjze(1u58u%Ez5&i(-
zE8=4*T1XFXwyHcY<jzQMWbH$ZuN2tjoF7ykej@J)em?xAtzJgB+eCR^zM{rO8l*zd
z0sU><>zuyBO)2QdanDLGk@#A?PE){Ls3hZMddl0~Y@&qn;u%Rz&DH2>v3EuXQBBRJ
zrCXx_El53VXy7^tA1P9oGMs(gq0@f7SZ(9$ZStAq`c$2I&&tfbX@m6olMtclR%KIV
z5X7^a7*99{!z~E*bfyoNoTNiMShdbGbabU>!q>Rg|4_n=|LFq>3@E9=i6oWPS_5ex
zOTnr$w{B*cU(*{PfTcWY%U}HKG}Gxj+JR>7=wZGkmsjhHywAgNmj;Ycmw%kI##Ger
z*R)s{i{<dC7BAku=PQCC^m)=+$Fs1k8UDUQ(R`LdOiYjre2-_H1|JVn0!`IOo+Rk`
zJt#ih%Kp@+I`|7N?rA#vNQz}m70+kw^9)1~xz2#=N=nF4pwmy5-(5ru9}FoVA1vo5
zpEe4133c6im_<mMJ>zkYg{9R0>d4c%8;&1UC)wDL*Nkce%1>oJe~vqWS3veP(+2O~
z?A|1)nlVu!HCj=V7p#|8iOE?iiyxeH>|db;em$W$6P;)OTs}dE7~>2HZdt2``EY1G
zCd+4jOIxmCI1l1IF__vGWjVzw#p2?RN<G5uu_vkE6F0OV#_CrR``+1cqs{|?Eu+G0
z%8kl~0g!6=?MEX&3J9a$M}>G^y|b@-vM8LW(Ngq}n$h~HlSQ!zW2nVL(M3UTN!=PO
z`Gt{Q(Qs1eiOf3RdRJhOyoq||GcjIA{}Ct_;)}*=j7LEabZ?6isXI$e`~^_bIbJ*h
zRo(UM4+sP&@uKmDZayshyvA<mK8gJgvA=#`$<J~A%1Woq`6)(_hBhN{(?y;sUD_RY
zDuXqGlp@19sEDn9sC-o){H>3f=RATS>XrMP4oY;Y>@J9j*N#Pu$I6?Z4I@?gmEWm%
zfwr%fRz<>P&=TW2qU+Ov9kaYgp>9FQ>VK_lio)GS2XuhgxELi!-b4xIHAmr8K)?_7
zSBiu6#HNO{Jd*o~H{2=WzvBi){^tIMkzxR_>flcEobn+R`Ha|&NYruEVPW~!YLAY5
zhDeEVcuaHjapmN5_<!^WFm?}sg~G`EpTHeOAAs-l|Ic^2|M_mr46Jy79ja3_Et>?=
zXW;{4%rY7E0~=DCpL><#?$*-xy9;8kXSyTgv%DFI34-&7mY4Pw|0=Hk9os))R#YF-
zvC()>^Lrq2;J7IJavk34oxp<*tBj)vf0`;g-=h`QgMU2JexG{CrL%n$;-`f6amExi
z0VMKKq>%DKLCXGnN`M+f>8T+Nlo;cYK?{bqqC&14M9UUby&pr#jvx-FtB7O}?R!0p
zfA>AzL``hJ+z%h@)C?>B5s3P{+4K6o)ed^2ACJj72AXf9KC*GW{koxE|CD>(vd#i>
z<@*n5z4r7Xi$q;o<ZN-M5P#i88T`^>2sN0w7%Iq#fdWjvCWs%Mh0iA_FZ9^87Ub3S
zsvzkLdKVW@&GxRBw~CkqM+{<m*fW4osBI~_{3s)ad`eRfk1y*IjoeRrzSyG+MrY#C
zab7H}n7-x8aB0HEO<8>4N9MY7sy9APuKfKcVI1NR5%1MN^c)|TC0bN|9=|+q$75Tn
z7QC)_HF{&?Q}Q9rl*rcVm`gg8CHeWC%f%}PdS_5&d%qhCUXsWeYj<ycINUw`0>Kxe
z+-f7={x&Wqg}X?^h{lxFq4-6GM{;Y|X`>VoYVj}o^Si9?Z#kzzy&@D|^3|zTj85Dd
zQH%xmaK)w!6?v{Ky?cl>maw{aPqy{{>{L$Z%uNgZHLkhtZc|+<nPmIFC`9SK{e4b*
z=7<eJI$_B@Cl^HAWKs)Rw6vwG!M^s-j0x+Do_||A<@dMV+=p$QQ?F?)6w+0_lB@2%
zJU#!M+LP65EKFn`DsFD;1P+dN&RRXKrvBMJ{rmI(zLjs?yWMTs`JKCSxTDt`lej$f
zNSDv&oiR!$LNC^CnG~%Vmh$WA?bj|7RxkRUv4308niF5L-<5)8W%`mgN+tUoJM!!6
z>FFz2btY;F>2mw?iod?yUw%kzgUc$9EyZQuGG|0=-EpLFOCWcIQmD$Uv*EuYf!0hu
zDyiMH#${d1^_Xw3rk>`Vzj2dbOlQo_bvxf|S$kJnG3?fkRdzquiJtiS{d&&ctEWLB
ztJ5Kx!Mr+as)q7Trt78qpG4(vWRl*uDoXW~$GQWhclCE(i(ccP9ey=^XA$eV*Z+1_
ztA=-9l}NUVTNARjwZ_hKow)uS{-<2KWKVB3+nD91x%1pTD}^cAFUoYT&pL9-aHUMq
z;<pbzNJO=Olw1Yb*e9gD;pXYK^-+6dE^8@WJXW;Ucg-ZhOF`Y!lcQW!Zbhuy+8L^w
zXjXIeQR+-jmqoo#vp@lIyfbvFw)8$Po9f=DQTiKK6{Q{y?@V96G3K>u*j)V?+cpTz
z@70{P`e;^<p{(MyA0qAR<M#DvUyE25+GT2Y^x;b2UCC=2W1KgJ6<z9>ov#)Wy0I?*
zx?Dl3?;?i2@Hr37j+s?+CTDBzZQi)GVWWCo-NhSbhc<ro-TNVC-h%x3Rp$G>>T>6F
z{p-zd-q9x?#*ldStHCqIvyXS(*uZAnQ|a(|ho0G*gPY&WO?<E1zj_1HVc}~{JIZu9
z5@nUw#daqttbY9Kk-Phw7gARklOnVqOKsISw%A}@V0V&C_amvdFQQ}_k|It&n$^A)
zc<Ml6Z=op2hR0Fzz{?|lZFmObN&-)L{tA`tEnLf=EeDr{az8;8L%EOOdVwa}t*eZ9
z{a9-a!`H;WUmpM5wCC@)*`LGXYb`G?vU^e!`L6Qcg`cwi%c8ctzODTH^rsi6XP^K7
zq3>|sD=CK3ZGYJq9U?%eq3**acWbuGi(Y=&T+Xv>ZNX(<Yqlcq>!%nd$cV-)cD0SW
z9B{3zRO&?EI#C9Ph*nXCL|uh73>>RBh{3ojU@nsYN48`lD^ST+28KgGXK?^e1wi6n
zX)iq$o*VHwRQg&Cr}hD_L%)u_Uhg}<=Fi0qiM3yE2rt|3Z=HQ(LtXXLsfV}})+olT
z-!tdPR<kv~`|R{OvvVWv?|(8$6dZECkD}zRslY=H9Ik}9yfD4;V7<JBcgqr41+K-{
z&;9rJ`FxW#o-y0?*3|BMxqSYn4QYjUcWwCgbC=DU%9vJBixr&N1qwa36BK83s;uKi
z<9s;ZYwkBcw(RCIVDiyg^O(5>95dOEfl;Kj?vRz8Lj*S{A(#Q9YxN_D0tFx&tUv{(
z;MP_RwxSkb3hQdr>07;lk6!?s-nt596hY}t2AJNCKArv^lCZoVOKs6;+i0}Tu{%iu
zD0A<qI8a6snB=%0MF}9KF=(=Rg*_FaB`WOPO(4D39x@*K^>X><)Sn*?^QW)h^T}(O
z>t)I3XQn-U9(-=bTl-%xe7cuO=grVP{r-B4@$V0lyv?pWt_r&TieZDU86(3XE)e3-
zMj&7cf}n;COb`TBgr*d(4#+@P`u%SC{qJ|TbiUth*7Qq}L80*d-tY6ad&ca4|9$?I
zt%5Du&dd#yonpjALxIUKMqC<9{nzMQ1+x-pAi`F->+o3#cb&*@`8d&7&CDZ#VGKav
M>FVdQ&MBb@0HLuG{r~^~

diff --git a/web/images/vesta_logo.png b/web/images/vesta_logo.png
index d3ca5e9f762918a562d9c2c34a344b236bc8c2bf..4162c24481cf2ac9bfad45bfbb516336538fe89f 100644
GIT binary patch
literal 5918
zcmV+(7vboMP)<h;3K|Lk000e1NJLTq004FX001cn1^@s6;D6mS00001b5ch_0Itp)
z=>Px#1ZP1_K>z@;j|==^1poj532;bRa{vGi!vFvd!vV){sAK>D7PCo2K~#8N?OX?Z
zR8_wIpL=H}jgrt55mZFQ0xK4Z5^RXLtLXBi_)}T+*};a`0YR`mMN|-F0lT=csG!Rl
z$|@327Xev{fFLD^lmMZm&dj}Mzwg|+$z(_ZLKc1R<@5J3_nzC&|NQGYQAssGkM7z)
z#7Pll?ZfVF$y=!;<FtCB-6V<Xe6;N~C)VJILFtz+jcxt{)J+NC->BKnFF8jn^#Hbx
z60N@z<&G6cH4@9Z86roUtaeJmFXH%5=KLBQ5vb@37sWOY0!e`kTd6M4%vKQK7F<40
zTp0o(UTuzR?SOBiy@e>%$+QvL9Vt$9f>`#2Xb<Ar`9<3O4oAGfQG;rSDja=DZ1ccK
zk-%*b%%fm4NGl&god+SEC05{Q2oy~?NxSQy!AIlPsoqt9tJmY-)uN;muC;N_e2KXC
zp>3HtUW01KflYB>cd|rN)5UV4qS8i*ZS{^F0rVaScdc0ZY!QosEfVdF#ep-Rot?c?
zC~&<DT7D8vNj7aR+FbW~DcSL%BthJQ>uOM~P<qr^vCRbZyGzOFzqUiSKZ3nh5Zd?H
zhJda1*r$)BfL4nWxmf~sPwX|vIrAi-$4iN7F1ES@Z7|6)9|6=-38^<kTd78jt}cMq
zPJzHP#17OGM^BSoIiqo;7_31xK<S~U#WoXQxyh1o+*=T2FSD=tpZh&7aj|z21hf_B
zJdN#fqMSMq+EqAqwm6a_VR=h_oViCDx6P2Gq$CJgOE7s5wD!MozKf^+AX?Rj$vz7E
z76cu}z3;^~wf%n$GA9*sn9>TtTuBLdBw_{|O!793B2XUtL3QldF}7KTD;jK24|i(W
zNRsT&A&fZ5>yO2Dhe`yRW?AVF=n4tsZ<cV~t0AbDA*corKh5lDi9#a-c0UY&_TX~S
zk=H~A@-Qyg2~F^R&*A)I&29N|uJZwYulIH<N9JD&&%uu$@$Ce8T~(&M4oLS=*X#)_
z2wg?l{(-O({5u%mfgzCZa3Od)m;xf0ltth_z~vxuJlGwiFb)M@fD64%Va)P-kk4!Z
zvZq&rbHL9)4y;n_C)lj+Nwv~a)Tt5?2+zJ30_4qj8y8yjoD>(1k(8AF(9rAQTiHGh
zLamFSsE0ALq~mVHfvsZO?abo|<xH1o_&RLu5i8{^nBg}d*xz{vG4fpf8cg=9l5FR%
z-&#n4RXF<l%#L1zA4J|pQ?`Rwg8s)>gp0u`AO*=ho2l7@;7Q=Y;C&FOTj~3-Q||%!
zE$JY?*aw9Vt7a_E7_bZYAxOdhQt)1U&zHdF;KLxFSr(LfV4dJC@LBL@HV}5RW(aU&
znA$2YShsQdPzdumQFb3R)k24_fRKKGv_2GF^qd4!E{7HmgHWIeDh;1SA=QCkxlL`P
zuyY}FXeE4VJe2)2*a1GZKHeLVvO?(O?h;pRfq6a?&%F`Xw#`Tj<ise6d~<o2BeNTb
zdzcPmWc@8z8K|usoD=}H?+uVz#OwW`SQUByX&^hA7KZNUCXmnOaSmP5Kfe*kRId=^
z0HrGng8uP?B{36R3JwEr1$iH$R9!$?k8?pD`y6z@@`CMqK}JVtDTHb@grJabsubK}
zibRY0!2~ZX$+w(9$nF9GWa4x$fD#4&s6WBEYp|1!?TygvXK`IF?$Ziwd@!_KV1}6k
ztLwo(VE<=C&`&`4AL00Ah_>6{HDTW66bvR_G7s+$6YKYz$2XTp3$VcejwX-;X&3k@
zSdp(`=QFK3#q4?K%>ZuzDOle0Umyj(p%Q)_BhRG<-3hWox&Kda5=c`GD<w$tq&CQJ
zrk3$~nqd}a;_tZ`#K1T2&-*L}X;$OUA!&+Rf&)QcsB|UofnR}q4)4SF;d%TP%Avd|
z&hC}k8G@aH(|rHqpp(bL3ZX*+eV|p)Qbx3jo!SzD!!87%qy5CS^Pt5i<B~iaTjYe*
zv35xP36J2pTcE-9pshFZrUqI=Akm8?8rdLr$^ryfr<hM9T>Tk7`4()InwEHEPRwVZ
zH3DSEP$-v!Ibb6AvGhO3ff4X_kUnrWNK;Jh=X0ilm4R<X?c=?uxxNXX3=RePe1Zb(
z0X`41vw7W<Am7vfG9TzCb1zx|#s?f|9B_%?U>yb06%g4V2P%s@L<jH{5b37D%OG8i
z31rF;D1zB_;f!4`?a(ko8Yztg9)i$%LesjUFKGs6K--2O;2CJ5+4XCe%Er|>vVPTU
zS-)lxDE8(bev*QHBXrcc2lp5TbL;uRGDEXdtY|*cpuIT$srdwczSg@jfM($r8jXgE
z=xGWym7vLK?QQM{=5md_P1y!k<cldZT7k;Q;{@XY4iI7w_zvg`m7ocv_R^>FCHa*!
zk!(-AC;ehP5|8_&#i7+B*h91ozEBBTk}S}43cz<v<AxDz_D%Vr?A~cT#YuY|9oGUH
zvjD%hz{=i+OIARjv6~x-1aW*HeB%gl!eC^vG&@0q=;8z>ClxCd-63vxH%#peT=xlB
zh*#W!`{#-ix?7yU9pXmbMsRf(2FaT^mV-gi0nfe7*;kSVN+JQ8tySCr=*Qc6o8`c7
zqsgYZBIv7F0XtOC%*Nc08B`3C62T6psoVr|AW@4=M;{`1Edw+n4D!1Zf%vC1u&W1}
zB9N!C(S~P3BL{-rV2V$L4?RaB?sf^=-=f1;LkKHN$Dk<sy%o~8LxJ3TelaKq!@ECO
z_ah#3i-e;WK+|8xeNMu&?h-5blGqTg3S+b@1YOWRTXn~?Ua?a{eeFhdlR$|lup9ga
z^xuktrEiM|KeDa2Y0l&5rWPD3Oi&U7pVidc+z&Lde*jr|>ksY#4;363eyT)`tthQy
zo3F8@=X-*UDCBjl{~Dl8rNSq+l){-dI{AEPC;XSQ7U{@05Xuvh7MLb)EY=`m%!A{o
z9?i9+1aqYha$lv6#~^BeXHlDwY+F6yqt8S;a$YlfYz!_IHaba3UK$8*SjOz@m}eQm
z`jsmB@e{qxQk)9<{*Y-7&p#Y6;Gv%;7<kd2R+Pq2v*6MU<4yGug(p~Tt%J;IIy`6{
zM#pcFI$d8wha-=(dgGjYv_F8r>3Jz|i$IM3L*V+IjF36Xuv3a6aTNUy1Fte@wMPn*
zqaZw80zF?tlSeScpg)TTwb%~=*Mff0;7~zRZX!;AqmLz121k`??ym|@u&Kq1;NRYZ
z|Jw}ygzbUo=uOa`8=*D$4A4?%imf|Iy^;_JLwAU5iGQNb`xqq5J@bvvh3?DzZ@v{b
z`VRK-F1lD8cPXsH`;s0i0O4s8=xGqlfdS1A{i$!ZD0%LC-zTyF%=I?Qf#*~6230{$
zN%B5$B{C882PFM1P3>zSizeo!ek-u1b`M)pluR>tI-*gSHoZjlh2KT6Q-E<<WUM#G
zr>PZNVF@<WAVR3a;4v9r!gu#aWDOs#H$ad`>Dx9H%lSxD^c9$XPa7@xwfsU0#1JUY
z>>eSSJo-()qgiTXfJ0D=&h$2o`J@?+w-7!k92O9UR6!Oq`~gBCva00!H1-UOALBr#
z9p{0+30U=$(~(Q*`|*ywke8kaULm!U9uT{DH8f@nj%~$fAXw2KLjbd6``!pBhfUW$
z7lY|EJnu9Nq9LM#&tl-TLay5ruhkwt76FL;XR!k3O8ry?!m}mNOM6(|ArOX}8ZglY
zWG+dthFeu-io!V%eK5^o?#dM*@qrjkJ}X1W`HdE{KK-i#I-w9wBbf2wea7kX*cb4r
z&KKgkt3YT~bgEeUegJXRVKUjRg=buW9nS9HhySRHA=pbXh>&!95ft8~8C*bHNed|u
z!G8k1P~T5Gm>SUh^4j<`ht(KXg(?CykA?eLRgl-mgZ1ghz`Mb0FkX9E#9+;qMG8OX
ztxhn&Wvx1%{zOVSSm-#u=n`WN4P2NmJx>N*+7#MzA5xNYpgkw!_d2msP62V%VRHE_
zns^2@-b2m58lA7!AYh8~g(`~o+9C~-G$@J8ex@nY9%?P`z>a0WL^I4Zhx=@&8TN||
ziJ&>B_R)`4M$Qu_PDs$av+&NU6>G=w1Bd3F+RHLv1{<mgG*M50tenO3A<!ShrLZzT
z$lnSDc^1BI1Ok_TqASKqa^6S@S!cmavQ$Uy!cDD<#0|8UM)1jv&>sm@LuR*APtNXA
z(Xsv5Dbo=Z83$886VJ?r@aEw8FGvGB3xV56Scvt8;=YXFZMH1mr9ljc@>D%1B1txW
z)=ztAio1e-ZJ4I>Kxq!IWt3hS{d-pgM#+Og&NKf7^tFTFL;(d~oj3;Mz>TLLSCoSn
z6cjtV(7_BYnn7c(k>dLIBh-La#l5GN5^+_b>`B!ix-5Z8zQkEG)ZKG?`)%r;xvf>-
zxg%A-xo@g_=e8(4cUuZ_%;2447F~JnCGR~GY&+qlZL06gDYC8PWHW%g^-{~EI5J8N
z&3afpnKfMv%4#fyP?Q+aMopUc^|~z9e|?SNNB#-)HHB7z`Q(2R>?F>ruzvjl=m%-+
zTf_^czP>uZ+Bs9acy0yvgD2P|D-)*n2AJi>&=7XcV6k)%LLLi&b0UB<IP)O9WzBA$
zA&FE2v+Cm*>?7bxyI5NXY|lbFi`F+HzI~VNvd2jk*ShoRuX^3wH>+R0&o`c#{_U1i
zdNn#>=U}nzNAM24@D4}8T6BByyPi+sdd{f)9tQ4eNrjd3DPk4?IBqHf75Yhn2Urm2
zcd^5n<{VDt=a+ykWH`u~7az17^t;sox)bKjtZ2pae?XYQ^6&&J8vZnv%(FWvB+jvl
za|g_2cbLb|U@BXpeL~LYt^;yLb*%-8Ph5i>CI%%NHep0SsGRp?;lM}xP4#tcWSDib
zemuMV<6qq9=bQ#bZgMXPs55ZA{|+)|Q)>o69xVBrL~+2Uj=ir^ENajk`z1f$-_Q@n
zr$dJW24<XLLH1zC33R?`A`lsxsX^bTBcP~OjiqIx`HyFX>$N?>YR$-xW{Y5DXfsmx
zH70$x+^x{&-$8>;fHpxJ^urKx8xWrsBSIPeW1yfVjb#LWIa0UdUKFsw#Vr;$700PH
z_{$qiBzMPI)8*DSpP3uvm!!17xn)IexPf^&XL$G3GC>dSvdPRy`t&-R@B^qs&GeV5
zR0sI1ejuY=l0Ma#jS4{XSmJFO`17bo6rNzC#oxfD4Hrj$fS`pb1gP4<1jC#LXimIz
zh$2vmb<!3vr*$QemkhGqpBkfJsUaNI#O*l7*?)rp9X@(w@~X}gVR{<}Ra6h`IC0@o
zsd*;2(MkoE{M_7uby$bzuKaFG^SAPfYx^a^DR?*NWE@p#n9l%-gEDcpg+&fdR#yjD
z?xcTXe~}!tW#3#L3~)TR<XMf1DqjC_7{O+K=oV&9Dwr%*l=gZLgm=DZdz6Sh5@*y#
zw=dy&2FjS5j$%8{Ni=<+?5o9MJEJoS_&bR8nb`Kry8k6pVIWIKZ($_)hKb8AGBw>k
zt!Hm&l9qex<Q18m95yI&l6!FEU~^2DiBEB!k@qRm51yYT#jtKMs$sLZY{%1BEnBny
z==#wwhaSOS?pGDj{u0o%`e_wG|9-8vSq=>PII}|&Ofayaxjf?VG}ebwtzmNM=RzQk
zS}ZkYAf4<FO&SZ1hc+$5Io-kAk>@@l$-!Z%fnqbW60{;5tz5mAJM-FyCP-4S-<o@F
zV(??|{f^^g+7BHhq$2X<h3^zgq;Sj8wRbV4Fxa%WA(!L8<Vy<-0#=eZkd{d;C_s$r
z`T3mE<6<@+Ip&z>PkrBZFli3KujKk93aK(Or6Rcg$dA71qy~V@RXNGe!U0z^JOy%<
zi0^+nIDZ3zjiO_eE^Fi8;<)Z!N!>V4g1ZNZRrnZuZa!WcCKB&%;RBWGbY9c%O^_4O
zK~qUOuj%r)FFkST{SvT-HA&yqmu<x0xm*DPJKg?cIi~i`1!AQXwLNB)UlNorb7J%P
zS|{TluPQ||@3^9deqLV<`FuDY%M}V`(C}$E4#ZcO=&LK52u}n9t-C-L8!97nQTkJA
z>;%vc#^{n*OXjKu77Dn$hN~C-ppdSB5%Q5(YrG%I3wBRr1_U_{PK;A@ToQ^-x2~1^
z=KqkAy7x*U|LDr15B5w_%rG@d+g-YpvvtFDGQZD*Fwd$Rgpi&Rh=dx~;(`MYX@R21
zEp0yIN{yuu{GXri{MLQ-lJ}a3cHH8w^6|>{IilPT3&Sa1FsG!c8aC$}Jd456<K|bz
z%ss&s7hWLDV2Mj#_*P7F${t!Z;zP2E7#}3D(9cShZ{pd1v{JNK%nYchd_HHLSX$(Q
zvtI?}1e-Y{x=%K*c}SwpMdCzzL3_6&r|clM$#VxtQd&3k<olwWNr-NDA{F8k+o)nE
zRGL!shc@Ed%2Fqw>xm0Xj~6+iJ}v5QnSz0R2lCdQh_t(3anb@K*oYgD|C%!BSaGAX
zpbwle;ZzynFMSyckBz`BF6wLujdi1v-8)FlpgCp?P*s}4x8el2KN)@?#+M6uZ<=3P
zA!;hiv2-QOBYBL2p6iJjLH`x341BlvXT(R*@!-4C@>F#m-H(5q%Y{s@@3&ywNA@2B
zttBaWJ_K9KoNDO4D1qp!QevlLEL)QAY!X}N-#Tl+SL6S6dFvB1w#eGPHy1$Y_hTS1
zRp}4GrD1>REz|Ftz9hH#;)S;jm@DDvt+?+K7~gex->_>(&mH&jily6|vy)!Yk6p&q
z{i2?lK`r2Xse}J!>%o^9L93@{P-_@@FT%N;t~1D-RLE!YgIEdL%eG43nfZeQBio9!
zpM?=>DhoQ)Y^GhzDLD}0m(f&)_;+CBT-iW8(0Q~dbPGPrf{DrndwtT;61As7K%TZ}
z4fE_SLC{nm+l}E{7l;ni$9#>pmJiIl^Yso*R@&E`nmq|7_HCKGra-Q4-VWCws<v|_
z!1cuX8a#3v+Hzy}^<KzZ9LK^rSNR<fYWNJAT1M9+^}x$GO;&>hDE%snD3!szN^}5b
z$6vW`wK6k3K3qK!X8Q$%3%%fb`3I5N(s1V|vb}yAXzCTXE(D)F2iF}34IPWYfG6@g
z2-cN3XgdwRaFFg~*}ac-R*w2Ap~if5GPK+;WOUVi&#P!X?*DrzJ)BW`709p}=;EZH
z3R(@t4vd3v{FQ$c5JGu{C|Pl08_*lk_Nq5YE*E%BFiqOsjJESi1*_d1;)MHPFyvqW
zK<=p&RB806o}9)!wWS_>73V$6K@FS6dMtyepK-i8%XR;!p!687|2_yr_N7TMgmgpQ
zg-#8LRy$#mIWf=;!cp{<fD0{Nh5h5vo@&|*odq!0@R!I@J&pZ40v-k+6;_7S)3e{h
zdHe&U$q@HrdQfN2w>~?Y>y7<LbC`a#GpEdIPyv*F<>3EU1=`Y0l-NDsACD79FNPS`
zB4U0QVU)M@Q!_nsr$Yt1VgPs(0G#^ME&?3~(OrOl8JCCaK9x|ADM5unh8q593ml<|
z<=?;HdVz08V4|f9ele(U4@a8mVOJ)usINf`O1}<Q_)D;RZ%9&8L$bH1$gCFRA6aSZ
zHXK2e=pxvPj2AbAG)8D@(;(Qa!X4Wl#qm9<4bp4FXH%Gdg{V@fyJsrIo8uu!|L<0O
z?1f-^>&LtBZ*po-36vgn2>&~vcqBO?DRS$H6$*-5$h4q9tmGsK*iDcq1j4Rn@%)fA
zD`~`xV{jk%XK4a~{v@^JZzcUMt1R!Ufq}@s0gNB?r_Y*1^#A|>07*qoM6N<$f?&Ed
Ad;kCd

literal 4075
zcmV<H4;1i;P)<h;3K|Lk000e1NJLTq004FX001cn1^@s6;D6mS000lNNkl<ZcmeI&
z1#lb3+sE-Wv%`#KW{1hP$WED=r%bM=%&i@+ZP_A+QwkSSW@ct?n3<fIbkF-8&5hsf
zjf`^Q{%4$-&zyC)Iw||pvwOFaYK?#5&FLy$M?dkoIzmZd|0wb0bP=z!x40eYQ0?}w
zmOXLyX|Z4nk1K-^=iy!Px{Ac-I8@4<BMEyJk6+<<aqZ(-eWCWBcFlW&$I*!@Jf9E?
z#qYdH{I25&?|Jd(3WWW&Jf2CYABc~~CiWFesqHB7@EorzkMIZW@!Ddc+U*<7YD_5C
z65cXG42nNz2LZk!KIb|Kj3wB*5dYy=MP1mS-BP?JzR><khU<5z{9~ZnO8Zdk9h4~U
zF+HVhWLJjOd0Jq|*-l_zQ@LUWyN8M{!CP7t3t|7rvAq)DF@$|o@5S=?iHYJlF$t=5
zwX6T2%!ne$p@i}R{^9SJ*nUJ<HCiS9&Ja7Cs&(T<0=-Mh9i64rnL*nbc%SMV$K&%Q
z;G$aVg56EqIpT3FVc$pM$+<%wJu(rhUF)d-V8P*u1T+8tD=*jJ@y~?$Bld=d<bd-U
zC@Ht4OTcj{f4d1RUy7Zb<t7y)g@e1wlu>=8cyw<nG{Ez!QAyZ8vR%V@YheicIDQ?}
z|B{g-M@AtDDTsyI4`PsPiiQd&?9Pd2^o^2Ydk+Hm#WM6hCsUnVFgY?Ae$SAA{ScWx
zG?{i65zeN%dDi3dNQq+%mAHugtHj6r>b0H5{!u)43~0}O+M9xWAfAS54DT-kcbcw3
z5>x}yajo{8;o9S-I3-L6#>0gPcoA>mN!*5`wRQuMk2_l^1Im<)bKu46cnxlxfrLhb
z-Cb-;C9pwKW_Jp=D_X?{c|2YoAJvy(x0qly67EJqozCA2LxGw@E$x;Q!sq<WK7eX|
zSv;8?plEv{&-q>pb}x^M#qBys%E$It`bcIhR5<2;t^z@<Lk3g>vauCGY{%939l<7g
z(o&5FqYPURgrTX$kGKg@aA7xsEl`6zC>)5X*bT#CC(6*f-e5Q1a8w+jOkzG<FI>U$
z_X?`)6Si+tWs}4+sw072&ao=3iiP7V2}_@Q|KxUPvlbj&fAE302-iv(=kPf0qTL6y
z`<Cq&d_evZZ|*YAvxM`HgbIiEc@X}Dfg0Qh)qs1o0KUaw`~jnhp3;Kti@BCSgQyMD
z*|#AF6);+$7I{d<RQ;G1zW&&a_^`oBseLq^tOruXa5_awMt2bJn4XmrGCMK1JjDJ=
zy$!+6CXo49CCtIJxeRU|?}i{KgiSEZ`5*|}YL3rhR5+IB9*qz5>gL15y|AM*l$H7B
z=fg1R6=ju#C0g657^nps#J6~-0e2%7Q7AxAd+w*0jC(NyYhajuM;=}YbIuP@qn+og
zFm2w(xj5fasUM*b<MFw+e;ZB?AFRh|Cxq=<Xte}VE?)b|Y!^^fuTgP}3F0@1dEd%a
zt?f9jeESoKT|D-aplXX8eL3I#?3;@so;O>sV8Y!ZK7uVBlP+9c>%sE)RXzZ{p~5k%
zp%w;yL4T+)4#zSWsKOQKrv<wg7bB$s$=bQ}N}rD-EEhEwV3iiw!$=Kt&J(Z_1}bot
zc1)Lq88A#A-~=esFnpyQFF`ac!3IY4BD@zEHuswI>UV^4duYhyab2}}U2ejASVF-$
zPL%usQBYzvaaf{JV(-e(+mZ9!WX{2Wj|vWC9tg#;DQ0COXB+R~cBuOBUWZ~M4D7-w
zP+?qzN*Gv)qr(JyCR7ugubpcf#zI*{!L3#G%k^B`9byUA1r<hTe4!1^cSBj|qsY5R
zs|!|U9v@Fw=Mmr%=Fp$<0Udm`_-$N7xtw(PR(-*NpbEsBoht6kM5w0Vxd(^N&)m)V
zHi?(HJG7W#zg|kSk7lmDfqk<W`hUPe{=T+$VrB}I74NwdKGZ6s0Lmg7WiYf(PKh8`
zeU$hI1EIn=7t65@uc2!M!RqgI56*zHxD-_|@IAW040ftx7}fY=-K~e8&UZUcg`zSC
z5XdKlVOAQeOJ$A=MDCA*YO0%a4vQkhZc<{;pwbIMSJlkVs3c%7mD`zplL$UE1yGrl
zQpSSEtkV;qbY^8t);_6kA`ME@6`yP2-wzc*us3VLZp0|4Fye8P=?JI@f*pvzVPJPX
z?at9glAq8MX0Tos8vNSa3c|Zn#;X|dJGhc{&ck0+(r1Knr_9Vvf@+zpB&zW#Uc=Dl
zRBoGW*?efsAs+$wTrW#tbZ00lb6%=|fi*ZDN;3*uU|>6Jkp)XT+G`(_vc~VB(U!py
zn2k>TLmO_Z2>TK`d>Vwu!uC6c<>62fdEnRt=G19IRcgVm;0k##@8JbKSoS|7Mb306
zE8h13_+7j0xduvehgM-<qeq0n9)urZn5r=a{r<bb&dlsc6+K8tt_HU(RAs4a3>{sq
zU#(KL_sG+k@lcUqIOg0`zdv^uuUEkb>tQ)Rm9=TdSv>xlV|#f&KQL;Hm6@l+Kv|hX
z-dq@_nTUZxA{J}M{D=+{Y&GWM!3Lb6J@+2VJ!=pz;~d2Qr-I#FJUE)p%%n594|V-5
zUKaZ&WcFmSAcKzI0Ws%RgLe6{;M_Q<i20e<ea?4<WlJjgVew`6hvF9KGA^V(6)(fE
z*Wu#ADh?_f{sXsY9sL9PXdU;rcAIlq_zMy=Z{?{2d|_6cwxJxu|1-hTiT&xsB?PB`
zr#eLfS!q=61TLi3v40!EKg$q$3{<P|=G@9{)q3qU=W=m%4EtW@HI2F<+T$E9PoEM6
zWo51+ZO~SGTu?Yqn-7=c2tC*quRH<WF$KHAtOosxe5AL1upZa3bl?wl!GcbHRXQn#
zMw^px-{bLjbo!;@8=e3avFVOfUh_@Me7c?x^Qqu1+FTD;o;-h6G?W$pfsT03vLFzJ
zVy&u{AlVwMW!2}62Hc?sYl_1a_#jO6R%0p#?1Nyh!NC@JVS}afdeW&+zzo(^O_=vd
zv7<lRSJ}4<73_aq0=8qJB6gdKVP5tB`^wn$1s}3gg;gl+i-(%fPjNoFFbXOh{u2|m
z&V3dA@v#=%y-*tK#nXjIYCvKm0TpPgTe|7!)M~*3tFgjjEsU@iPjuiBRL0|U>gQ}d
zGGkB@9eoC&i@qkzv1{eoQPEHl^V&`zwAUqctCRB{^X<7ZZ)}|Ky)3W2R1kVk0aq8O
z`tbfwM}@Y!bS*Z)z*b~IX~JF=M<5E>VZI!w#htAjY-23J7CC#+p_A$4wOEJyxS(;-
zxuR9iPO9t@ndORtiiqENgn28qf^feiz_Cg(^t)|G@f!0(!!q-}6lD*9YKS@H{i+Rv
zpJ*3UU!wcI3|7+(lPp)wU!hN%RV*EO4#BO{=DSKd{1iI5oWE;Pg;#N0KLUViDQ<O=
zIZv4|0%)(dP$muU#)s=EZG}sC{D=gciBR=1=ewt1m@2hl*o)}>5-gC0IhL>QY^^xQ
zUW-F4@)}rqV$t2tQlWm);&EIA#l7TdbnpvQ)l&9<O$c`qcq&wj1nfOI$6J<PF|K6!
za419TciMiq=J6iVp&DX-CtCx<67a=Ptq^PquEOmmC!(OjI2*gQg_FzLaOKIFO-I(P
z6^9lo{Ek5&blYI6XPNfvh|L%U)oi6UZlSUc<^wX9bA~DwwG7RRq{!BXAm?izE;t{P
zaz_$WL-;?Ogmo}9%W!xr1=}6pqSmwkaZq6l#uhEutJ^NvlF`ZH;oBV#9nN>H1p6+X
zeKWT>!<cI?B?Phjob*a5%k3cLgA<_|Gv%D4qB!3nRDH4dL%%Qng4g&KpNfYoa<{|9
z*1>tpY4Z>Je?=LK6$e5!##}gf2ZrW3B(_qp$#_{i_YVzx2YiNBv3qb@TLlY%PCA~>
z{amOfi10UVBnWMY%-PAlnN$<=ud`65WFG<5pqVGe()LmPDw~z9*BR!Im!dIU7>4iW
z_12@3HcJWhW+@t;4AoS;|8bUIH{1mkX|S3Hwe#2D?s`4|)3tU>aYWk(>vvoh`Z-Ho
zh@p<YU;OqgDybaP3H4ptY$IS{TT7)cmXfS=_77nG<QB%!4a)G?4x-v`W`7}%uOO^9
zES3MG6piR1-ppPcTW<L^q+6zDB||lp`DObq?KWq06N0To2`+5F2q+A}QW&O9cmT(u
zKZc>iGS~YN+vdSiLFdq^`bAU)^Y1M(=a4v=HY8O7qq-6PiySkwE82~;8PE1z{7sP0
zh&Ou(+gY^PhAPgvmNtKIzDhGVq2lLog`CcuJAk%-axMYKz=ufuV^X1-$_(sh82Aib
z8x0nyYQ$_UocmF0xmR6{zp%k_ANvi4L$!Ud1({sjI7^uicM-x~s&OTA-=}o^hXixK
z6pid0S~TDSOaCsF<4d(_3$pKJY$hntF33Jc0YmT-VXmc$^Eu~y_ATNye&h8vn_m(B
z!iUEJ)f{H$&p{BS*4vy`S}RV&WbA36eGp&c+&2H(PAB&skRWBY489*djgY_AzTMeI
zfLDmmaRT>`a|wkYIPT%=J|DrD!Pfo2jbOF4;2J(G)8+1A@xPp}q8XxX9RJg-{2;b-
zt^(SeK?NTL)e^k_>#!XcK-Hr!UcgUHRA?Da<8dWk#(Gqs5<BoaJQ&)9?{;6qPxum<
zP+<(fi)Ono>S;F?-<WL{p$9C%YNROhSUP_fq3D4XNxAJnDRrJm2pKZj)`Qib6!vQi
z3pu+P(y!sU_hM7%{@COEoc2zcKDw(+Jtd6_&1e4(t)gpalMfXMbND@@3E!^tXok*E
zVWi^(<l;1p#({`|YJwh`=m^@yTH2@vgC)S8RMF?!e7lRsAF=(FAh)r7gSm7V6j#%S
z6QYN}o~MFuCa^TgIyjmSz%X&!o#J+#!0{r6;1xXYOV0BO=iICf=R28m&xdN)IvQzU
zKVA5GjUc~aPF&3P56g<tGva1w_BbXoyp|B^Su#H(mcIva>`~fJpn6?AzLr4s-!g5a
z?Ly|`pF=}3w@p$wtRqyr*3oz)--xb8QFgD;ul8A3(1Q(K&9cy-{U&%hL*kum--m!U
zp?#ld!LoI25>Hkxb2;;={V4ID77Nv`^)$V4X;un>lt>__%Dji&OlU6<m|?m4{e^AC
zzvpJ>7qnxox$Xn;3ZV{!YPWARtFhtD?!%CrN3aaLEH#$8m}7JQ*5={O4B=0(-JtCg
zg3V*i*-4-tJQf<N%TI}cYPWAR|49=^$4eRC?i7xRA><f>yqqfi1V2gWmL;^{a3|IM
z6BW9Y{r-waPUrx|EeTh|j%28I`&Q&9nU)<drI|gMNBc?X$P}>Oo*)6&fmG(9Rc>c0
d)c)1({{XhxKy{KT0qy_*002ovPDHLkV1l0t<Ou)(


From 3b729f5c9434f1539acad1655a60f094ba150f53 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 19:43:22 +0200
Subject: [PATCH 0933/2300] Version 14

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index d84dd49c..9868c416 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-13
+vesta-0.9.8-26-14

From dcc071d8a8e0618eb32a4df79ca78e68418ad7d9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 19:45:49 +0200
Subject: [PATCH 0934/2300] Update index.html

---
 install/debian/10/templates/web/skel/public_html/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/skel/public_html/index.html b/install/debian/10/templates/web/skel/public_html/index.html
index 4f5bb724..9b8789e8 100755
--- a/install/debian/10/templates/web/skel/public_html/index.html
+++ b/install/debian/10/templates/web/skel/public_html/index.html
@@ -18,7 +18,7 @@
 <body>
     <h1>%domain%</h1>
     <div>
-        <a href="http://vestacp.com/">Powered by VESTA</a>
+        <a href="http://myvestacp.com/">Powered by myVESTA</a>
     </div>
 </body>
 

From 7c3b9fa4547bc432ba4447135bc2fe9400006807 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 19:46:33 +0200
Subject: [PATCH 0935/2300] Update index.html

---
 install/debian/10/templates/web/skel/public_shtml/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/skel/public_shtml/index.html b/install/debian/10/templates/web/skel/public_shtml/index.html
index 4f5bb724..9b8789e8 100755
--- a/install/debian/10/templates/web/skel/public_shtml/index.html
+++ b/install/debian/10/templates/web/skel/public_shtml/index.html
@@ -18,7 +18,7 @@
 <body>
     <h1>%domain%</h1>
     <div>
-        <a href="http://vestacp.com/">Powered by VESTA</a>
+        <a href="http://myvestacp.com/">Powered by myVESTA</a>
     </div>
 </body>
 

From 26bf021da98511d28feb12231b5b57553bf7e994 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 19:48:45 +0200
Subject: [PATCH 0936/2300] Update index.html

---
 install/debian/10/templates/web/suspend/index.html | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/debian/10/templates/web/suspend/index.html b/install/debian/10/templates/web/suspend/index.html
index f2d04e1f..3815354d 100755
--- a/install/debian/10/templates/web/suspend/index.html
+++ b/install/debian/10/templates/web/suspend/index.html
@@ -16,10 +16,10 @@
     </style>
 </head>
 <body>
-    <h1>SUSPENDED</h1>
-    <h2>This website has been suspended.</h2>
+    <h1>Temporary under construction</h1>
+    <h2>This website is temporary under construction.</h2>
     <div>
-        Please contact the technical support department.
+        We will back again soon.
     </div>
 </body>
 </html>

From 60cefe45a79ae73804b7a93e08036568dcb6c14e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 21:05:31 +0200
Subject: [PATCH 0937/2300] Create hosting-firewall.sh

---
 .../tools/rate-limit-tpl/hosting-firewall.sh          | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.sh

diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.sh b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.sh
new file mode 100644
index 00000000..eeed37ef
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0

From d483291b64c8618365fe4c4234522881ad8ac7f7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 21:07:08 +0200
Subject: [PATCH 0938/2300] rate limit tpl

---
 .../rate-limit-tpl/force-https-firewall.stpl  | 41 +++++++++++++++++++
 .../rate-limit-tpl/force-https-firewall.tpl   |  8 ++++
 .../rate-limit-tpl/hosting-firewall.stpl      | 41 +++++++++++++++++++
 .../tools/rate-limit-tpl/hosting-firewall.tpl | 38 +++++++++++++++++
 4 files changed, 128 insertions(+)
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.tpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl

diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
new file mode 100644
index 00000000..37161c2d
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        limit_conn addr 2;
+        limit_req zone=one burst=5;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.tpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
new file mode 100644
index 00000000..fd1f75d1
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        limit_conn addr 2;
+        limit_req zone=one burst=5;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
new file mode 100644
index 00000000..b2c7d269
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        limit_conn addr 2;
+        limit_req zone=one burst=5;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %docroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+

From ace4e5f20b00930c68262627b630b7dac9bbd645 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 21:17:22 +0200
Subject: [PATCH 0939/2300] Create install_rate_limit_tpl.sh

---
 .../rate-limit-tpl/install_rate_limit_tpl.sh     | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
new file mode 100644
index 00000000..483b54d4
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -0,0 +1,16 @@
+#!/bin/bash
+
+grepc=$(grep -c 'limit_conn_zone' /etc/nginx/nginx.conf)
+if [ "$grepc" -eq 0 ]; then
+    sed -i 's|server_names_hash_bucket_size   512;|server_names_hash_bucket_size   512;\n    limit_conn_zone $binary_remote_addr zone=addr:10m;\n    limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s;\n    limit_conn_log_level error;\n    limit_req_log_level error;\n    limit_conn_status 429;\n    limit_req_status 429;|g' /etc/nginx/nginx.conf
+    echo "=== Added rate_limit to nginx.conf"
+fi
+
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall.tpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall.stpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall.sh http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall.sh
+chmod a+x /usr/local/vesta/data/templates/web/nginx/hosting-firewall.sh
+
+service nginx restart

From df8c6bee41309444f10d02393ae8a8c25b018516 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 21:32:00 +0200
Subject: [PATCH 0940/2300] Add files via upload

---
 web/images/sprite.png | Bin 57516 -> 57521 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/web/images/sprite.png b/web/images/sprite.png
index 72fefda2db8a3e6aea0200b07d4b42f3abf3c14f..456ab6f8d441083a881bcfca34a77bb118374c79 100644
GIT binary patch
literal 57521
zcmXtfWmsF!6D}2?Kq>A8in|r}0>Rzgi(7Gr;_k(*1P|^G#T|-!fk3eo4H_Wa{Qmde
z4|!(K+3eY!Gb=OiJ10g>MHUmC6def(2~%DUpn-(+Y8eUXb?iG7#GUWGeu@b3%3VWN
z5~+6P<1ymmt&N1T1QJq162_A`GU6KTo1DHo64Hmk|9-DVT`ImJA??V>10=M3O#bDg
zekWUMxton|4qWLv+k!-LnKhv(@vmaPE*e&$YVKa$FHL)!7I2Q-n>ln)8q7qDYhr@l
zUxE}P&-qGH{yQC4QAah#hY_c(uAUwR?(K)|Z2c++P)W-<R${pv3wZ($w9x&$<1iIK
zogznz`=T~g`d`Vh-tDi#meDk?{0hXlixgvo=;GpgW9SuwDI?S*V8kdL@n3nqUIS4h
z^eX)2_=*FK|22=nk~9CWDrQKwq+S6b0bm*pJvxM>zQkdw{!gadN8{`KC*=YF=v4^$
zc4((R>^RSTrf7ZLz+Dy2$iY$W3l#%o8sAbdGc$j_JIE|F7KjS+ANRKluuAVZ9Qv}>
z>ohre;8*l5y91x6+KKVg%QXu8P{nd<$D1aKFfkaEx?i}zzr)@#FnQna*V+zMNyXV1
z?QCpJRS~_>Y6!Z&Fkf%5jMDRtDR-^LUSO#UpyY_F?C6NmslFG!xxLLv5*o>Lt=<-Z
z1my62<7{c7G&P0_@wT?)Bng!L9BF8*cb;DP{>Nj8{AXl~1NwMh3C3@l;z<1X;7*Ej
z)3rBP^bdTk)p0W*yW)nwBW{`wg82qZ5`Fd`<)vc%k7pkvvu0W4&`<W6XwTaBK9HxR
zkm=MIL_~<R-nx3s(AblU2X*V+G1kg&r!2h2Sz21+aab-5iguXTj?*+}!-_i2wK4vJ
z2SV{7SP6waPn7MXMc*ZfD77VQ%brtuW=%-tU@zs9(^>fHC|9ip57!ra%<Wi1IS}U1
zP5dY*nUIiR5jd7i<?BS~?Ci`p+#Ds{I)cCU#Ean#pq5l>Yim_QeteZ8ijxyjT3<l>
zNh9Lh*$HFmxeKZ6cJNC5_BjQ629_f^%`HuAkKNQOXk9>=<0niutZXtb;+=~JTzPZq
zVO~)NVEaUwna%ZN+0KUjT}(9obWiR&c7AKjDAiAgoOsHMlmhCx_eO-V^X-k!up~|I
z`KqX@<05jJ;XT6iH=_%|FFOv`>sPY2YnmLffl{)nrFFrN&IUL0iXIRCe`s#?pY|dc
zj*0q=RaSzItUF!L(k-_CjNDuw6>}_Pp2LBwD*OG9eX4UIct@?lkDR+6!8X%X*S~ti
z2c;T2K4W62q?YZ3;ALvJ$u5!T>GIaZ5IHmyD0X^n?ZEQxR$23|$$cvc{x#?e{5>C5
ztT9WP9zec%OdmLj4`Qeei}RPp`{paa9NxlB3Vek8`RkM*-J-$srudj>Kqv#5037>V
zSlBGvjRHqW(r277gC+U*DiP#A+Rb^N5k0bZKN-Ll5hL$=yfHmqPBNCC6@jWYP<nWu
z6|?!rob^H%u1_#j=SBj1c<#y^DlHHB4DRZt!Gbgl`4W~aoyXIjhC^NpyOti$Pf7EC
zcwhDpy%$<mOeJQY&oX@~OpTtP5~qtzDn8~B6|J`*%vd1t#Mk=dQ!z_k{_C@+pXKg<
z!rJKrWliEP{IOSl^byrb--|{&NIVCX)(aJHqd`v7yyD*7us|4MXiJllwq=t}N$KBu
z>e^I3C<U?0g0MBOJK(1~pO_C%rOWxzQ>3|FSy#3%xN`iLJYXk>eKL<-Jh1%%VY?H~
zbofQN?lE`UY_SXcu+0`yM03y-<DB=RpW}W;3|r5SJLW88y??B-Q7x+D*guVyEbN6&
z^7INxnwmbn8DJ8<sg66U6?XpVvVG&U9`L2OF6jJ4Lv|0PTdUvn2`XJ;`wNYuT6z!e
zfy$9VY={zYMP*NJ>-aY^TGkwSFcP!4!E!YArpNzozBll3$d53!mqy&Wt+J9t&i%lM
zeHn{VjCN=Vg(;XLXv$f$HuA`Z$XF(Qcv#X%{APU;*dc)NpUnfS83f2vu%CU;lY1-h
zLUR~FNGYsu?|KH4&@PAfY|+Iw^EdAr%?CHMjEp2&(ni%8wUpD!7U#Rp9gDo6mw?}y
znmYO_cxCZ;8>(!Nyn$y>Q!91lz{YSX^IrMi6<r(c?q|oxr9d#X9m&6vFGZy8HCVkl
z%R8|-icoYIw`@Ey)v}?1fh}aY#zNFI&(}I%@AlebA=jmM=FkLgfo!~R)EZNcu8#cD
zb%JSc=PCM@!9~toG$dPnOMwW>t}L-a!4@~t?2KeXSyoZQl;TrauqdY*poS3JfL2UD
zK5r3#>g7@tNY0$k^~^)cYmSdu#R|lPY!fC`ffU+;ZoOczl|FVyxbg~={6bt%qo#x-
z;O~ddzi)KaBYesLU~FUl#$XFG9NTd0{rPSrb<xx2g&|xZ3<jywWWhkijlJqG&73Kc
z2t&b84}?D)0v0^{{ksllk5Qse4$GB_Sw={v_r(JOk)J&u2~V8tO66?IS657v2mD?y
z{5GNkYSJ=NSx8@3nz$vGO>L?Y@NRi*9WMWV>}$_iOr|dghCjBcJsk2cybs#MU0}0m
znMW?<1K@Sr^vmR^wPlm?pO-LcmjAXZFO>0f;da{iY6QhE%>scyFxHREz%bz#>ARr2
zpmk4H!1?2^n&x{l@45QaJ#c>F?qKA?P>j4p>^^O&_hA&p!K90+Ca38W*<i`EWwB9?
zp@O1f8i3cLb=||$^RJeX>zh1A&}bq#L6RNow+HMM4yF78S`gv0vXK>K6*o+q65>zs
zn3Bjypxl4N@(gP}y`IG)FA9d+;U?sIg)^gisZalA_d5ulEdfd7dmPKgf2F?Ja`W5Y
z6%uM`44ZiX`}x^CtND38Fg-=9v<2R2`=!4G`P`J-^($x2!<<fevJ&T3`dY$gvV55W
z1*IvgkZ}v04ZhJB2d*JEJ1D*hg!Bai$hCefjtV819*XzfqwOUr@zt7yL{PH1GSKGx
zt;wel7=02DJDi-Du$}n9g#RH5p&wy12X5?q@-=zKu_b1NB(=HS&MyghASuRB8xR;e
zyYWLj;fL_nZ9~v*GxzaTiVV9fuwq1m=ex`DgI?LspFw@Svek^cycR=pq~hilh2~_D
zqgT`It}Q?lYvw`A2kYD9-Rmf*bvcj7L3l7lWul@M%qG|MN%p;Sd6DJ%kqcHnduyDc
zza8w~*7Z6i{aiBnFknf2?$B>{U#djgw%Pke?Xo+^e1zQ6+n>wH&j!Pj5VN>RHUEo?
z%WBrHf+iC?qh?vW^{%*NlGt_M^^{`W+}LHY-M1SgsNguDIO+)Q5)eknW&m(G-*h-j
zmxEDyNfW#!?^q|$POchTs;vlx<95K<t8EP!mD`Jd@i~tDHa{qM;tGUi9~gYLDHL5W
znxw=SQRZ7o?Fa;GxlfA`+lNh=)vIE}{T*6+v|EC<Ec!L)0Rw^x{orC6_nQxLHbgD_
z=^C;P^o`+I87%mx8g`E}q>0YL#{*czI8KI|T;zY;lU2v)#f}r_M=)P-A2l_VR<@tG
zVE_6!ev-N#R?UUHK^+<g$#U~okqZSxlad)uvBi|Uyy9wM0TD{XIPj3RuptU@5T~@V
zbwcep_@~-ljH(H5z)#o5Rsj}#P7@4PQ}`&N#C-quEu}9sUBG?PvMVaimcUYb#go`h
z%1U<7!(X>b&UxNXis!7Ep7d5lFoET~%+^0z0rhsiC6jNyI+YJS-QJ_Wo6TcTS0{y#
zH;DaInJ!>}yv&==vCIpea=z7J`mZg^YmPNX*t@p=&X_lwuR1UnB`HsdfAfk;=p1}E
z=U?ZG#Y-uq;1n>RK+Ets3<c8-v1TNqSpr<C5i%CyFGC`g_%9YDT@>eFHm=xlcJDPY
z4yMcrONkC=RwNgVwDs=h)zdPQe1ZJ%R<Ik(VHUD9jTURLXBLIc#w>c)htsQy$w2t9
zir8E*3G#_lpGy+Gdbp#73<ejMoHz5To%9ri`OfhzHQ6MKsIH5!0xM=mK9DO0KSNEA
zmzHvmQmg)`7QS4w@c`_~wneUm?U^smzffPIE08#^H^(g38ao(ju{{y$b}z>g)YVsr
z{dXCPtBe0#?|z--dPU|?DiK}ZC{WczvXEJ?&$;GEvqh-4=9v$;(yn6LmzMcE6Fum0
zBWh3RpypX0xbo|Ncf>Bh-1xO3XN4`|n%5J34<)a0^d$9g8Z3^cR5wr-K*}<OmFW*;
z!es=~_v#^ba`G-3OQmc4JyLTOk}Me{3uY0qQFB@5<jt0C>eMNB_4PSbfq(~>_?9aw
zOIsgx;nOYe_|61llqcDutV8{}urihgIuotx(Puu|(TAtQ^9z{pkI`kZ+C<*SB@Yje
zEW_Ivd0Pco;wEAAciX$`Ys3u+NxUa>4Y)}Vf5k+)IO%rY9S?6D6~77-1*6Od{Ka#A
zPID){CIcgE%i$$@SJe*+dcn_-s79-vQfiw4q4PS`lmYl~tOMUX8q1eRj@XN07;fa2
zNWEwCLv%mEU}8*TRK@&PZNpBBeiXmw*|dsNTN3SMk2y^5niANkO6e(PB<EpBsE{u$
z149;Y*2q(dK~~R}&}-sX2(Vpi{`}=vNKb8GNWG+)aq5*(fW_3e75Epeu9UW2&PINw
z3WqQj^OhlQGWKEKvl!>_CEQuZc5GeK{}luXR+I+pLqeah)!wn4AcrMJE0E76Gg?Mx
zJJ%=55sWL87X*Lz>eH06O78*g?NmO_;s&QNApH51ygVNq9VA!j>l2_p@A2LC!ou-5
z5f(V-%IKQ98VMXbMu1Z-g?_S*t%um1bD-<%>j5sgcX0ujk*yd(wkdosPlJxU(K2&W
zk7;bh!{0vQ|LJoWq=kXknSlDM_VB>d7|o+}gey$r53=1@FS?$uQ^k8kgjfEYPbfGQ
zVP-U(v2k(IX6lTek{L;Ok|kx_-TUY+qL&6F_DS!;f70k+<fb^xAcSy=gT)YYirmv-
z?YB}6?~W|#vdT*N&CLzk<NZ6*27^yXk}q{(WcNRasOxYXSVccB$qG9%Fj#eeJIwio
zXiw7NH+Vj#O`Wn&^n>rCkVl2y0ohwIMhSabbV8Kje@WR{i|1qdL-yu0ZVCRMbaASX
zNAl7$Gjk2)_t`93)K>d|v5WBWXv72Lu9B*vwS~pl2e>+-jkuJv4LO(Jk0VRWpRq%f
zzsGk(KOf-y7cTA->kh0hdQ2H9&K8BCPPcpwC0z0TGp=PZYqmGC$K6UB+MD!g*mJF*
zWUVgM$6gk8**lh%21e*e8}Yv|Pv#wM_&lavPJ}2wvf(d|>)cM{K+3V5xc<yCGYkOy
zh~G1A0v<7$^k`Gg<g*s$J#(;8Nk5<NTe2W2c8~GEK?F5-*@+@buASZ~eI$)V#IkOw
zdrZD)q3_H+Hg?H9_R;&gOHxtEJAk#HKL>7sdEAU|<AfdL)gkhlClU3`3Yc+_*Kqn#
zXeMVAa;t=h%GWwPz5k+S`FjoD@x!sDHiVr<$Cg$QqHc`Wc!(LOrI7)BbufBE!U|IE
zCQGL{`=o7IR7y${t1akO>gzbE|IJ~Q+Yyzr2OhwSQnQO>b8abz2`8-Ey*)=viXr|0
z9G#ua_Rp>ZonFRa9PkI)+K_iF7g9!2OiynnDW0y#1GF;h_4w+O*|F!CnU0Q(?M0+`
zkfi{Eex*?llOps${f5G`es1vn8mQ^Pw3}$YS8zUI54Y8372Y3-4qj;}eVx_-RM}8n
z6ALAOFLZEjHR$j{ApH4)bVJ**@9U$07w1t{Z?04JYO368vn7yrZyr=Xy6Z#Ppi_-m
z)an&-d;ZZTa%<oOYHxz&O_jdD+|xjk_3rI$A}tgnI443l)p0G%6wH{2tPwXuqiiWv
z$Q)N;`+AuyVl_21Nc#_flBH+L^g!}5;JP2zi709K>e&5Lh3qQ36<N43m(fh5a0$_H
zMnmGZJ}_jvNkWUuoHZO5?=~pvl)iQK&>}z`4EavkD4|6)=F(vPan;f>LQ_G8Iwj9T
zkBHF}@t*LeRl8$ZBEhsdg+2tj?}uYr7=rFhTfnaXg$lMJl_wg#vkn&h)eNGY;SpZ1
zIc9+st;rskfz=650@P}R+NJ%`2I-fMOO8H8#1Oohp?7QRtrV!bjS|F`r-P2V^)+UL
z9)d(o`hi_5^}}L!XnaW9)q&@hxwDZRy8#Qm<0yw$e2U-ygG`vKe^s@kB<Q+glGcGq
zQN!_-d({($Q$lP{sD*msBW~sS{*0D^gzpP=<(4w*+Z(y4tU^dy_>yNHlg$VnMkDZW
zK*&H{Ktr_KiiIr73{R$NlRk-_tyoYxCJrcThUQK2>P1jpQ^QN>;k4BYI}c*jz<7Ia
z8tB1Av)bWOgbBi}s9?$`xAnsbN~TIIX!Zg<3b=4mY(?xP<Hc2-{FpiN_s;M^gAet(
z1F#}7NLw*FRb9}Y=X2P@8%u!?B$A49*0_OXDB^~Kc`sX|tufP}nWR+RqisOnVfiYB
zxm42`Yin@h@D*JvW&Lv`W{M5{MUKxYbXCU!HOzXO&G9Hs+LYy&@|&E>@&>1&5ArX&
zJ?A~|4}(4(rWFR<b%~EfB)P8idyI)K4-DN!FG<SO{<-+rabi!ijmFA5q%Pfv3)8Vt
zi!NTk4n93r+8rYZ4$FOqJgyA0*z>%$-qgQdE1wbkb^f{mz<s9GO=l@x*D(EyFbj!q
z*~H?_%gAk?<FJLIn}$U!^9$0Wczf%63Xv?C#E)w>XnVWv69{jX$MeK45GD9({C<MD
z({+F;&}%E}lBby`c$DGY>t`xO*PBQNS83{0;3o;YNLz4(n*Cg<W3(A}E^wv3V#fT{
z-#*QQ=oR%J503X5NrrCj--OJi#ZPL9rAlIKN!3}tc*M!M*RH1KRqr#eqrHE3(rmY2
z`*eTFW4~A-Cj5N8V2AM61$zi}bafZfb$gR$#Qf<oPL2b;;15JG&pslVKcWV&6Pjkq
z{b#$voh>9<{%x1%sfhO-eTLmLG0Zgo2;oH@1=s8A88xtl+M_29J2!n}&keP7{mmNC
zjo1#UE&nl(lmJ1gw(|tf<=)`S_@h`Z5m^z+aYYNqDlUA6jKUf~F!LX1lB21m6qE%f
zUqee<#pDyV8asMo*%O8-FS|@W^v2PYQ|EDP8Q&3eCHt4xJU{Y_owB~ukAXe;1)Ga$
zwww#s4}2*go^ZxcbDiU^*H=TTFVNSJZVn$;<rVz+3Vd*k!&a?v*AOk35POr$awOUg
z>~;Rf>Ck}Kn_Nk@v&`&0Rvs@zgDc1U8P>A68PH8+g8;gC0{!y!f*<~BB`C@xHl45b
z=<oqMoB0Q+$c3<6{`twryDWcsKvibaM;gGbFhplAH)@VJgJ47KZ&)5r&)C=!nKSi@
zFaIVKozj=4Np~(`pN?jbXi}iddJZIR^4y|rSs!!?)c(i|j1ISz>2-g2;MXRD2#vJO
zx5Vl8VkxfjJ|1=QcU44~zD)rU)EFptHv~jtN|HJd-Zd!OJcg}OcjjYS>YrYj@Zm>(
zm(Wr*fY*cE;En0p4nPC-;)+`76I^3m!om8)Kp$38%(}Vj3t+{v_OwidnUaJl<0+@z
zJS|lj0@iZ{qW=f*J>H(;0W;#tR*x5E@tZv8VwnX3?m2s)Gct*K4uFMk?Cp+2wp0Z%
zK=coup7ZBzE@h`RY}e9+rhwLGaw|k@K^D`fU8b6vngbmJF!S?85>FJ|Q(ZSxU|bW(
z7_d^9d<r|%R2|O`{zt}2-bv5QjP_FC2ZoHMWhN6;0}BaKYyx;o?}9CFE}~@~AO0M^
zRxXzA?)K|94OXJ`y)lPf7~kXyE3l|`K(M^$O37Yy+)r0@3yP|)nGLs^Oba{Ca)w#>
zw>9LIDQkf4_odh^)F1$UT$yPylP?ni<Jkq9WqMgX6*Y1;wGOT7@XY=9*8~jOL$Lda
zSMIzK8TFsD`PEwOz}q|qT&Z#2<>o(2)Tzc!{H_-Az52S|Xr-8%JRE9m(Y(XU!}B#a
zYH2w^1{6(D=YQIAUS4C!-&9}AeMj$pyLR|H8i&U2;YwWH)pZ0Pb%S5@n0lEqKTZ*8
zF7r<#JLdQ&H|ews4!+vrzJH^?Z{zW=6S6*^OXH8H<VA~IKGw}1HW3GweC+v#&y1V(
zn@5QfTh*-g;bh_%zsxgM!IaIxrNa|8!}~^?%};5mr3ST1b~%zpwEV}7SIzx_OYg;>
zs&oC0=-}xlc%v;n5CA?c=GU6Hq^!fmVG<aMbTp4s8t{wjFmlNm-d?+S!fNc-{nQky
zS?@?NLZmA}Jg0R2DnFRgsr^!+?p>-F{rm*&<rn<e-bL*yoos&%OVRT+o5E5=9BGZK
zyD|`4;j>)5)@(7%LM^0>8Xyr2fzFCg^1o5e9$IRu7ju2!y(X3|jaK4*^~(A5=x5i9
zzUuH2<4i_IDB&_5HHK;`;UemYG?8)#tH#&`fjVZ;6I3v@hTQurgwgSsG!WVs6s&t#
zG1w*Zv4)s5=yY+C{b5!-$P-p!>A$F*#=hzBgf_jO>(q<4aGWE};&Nzu`|BA8Mn=Ke
zuw-s|#nrmqSVST~2vJbWdPYGGS4k%p`m3%L@)@;mICAAj#_$u8Is^gr0Vr*IqXS)<
z7wPy+55sPwcQx_hJjI!n!9d6D*1uNnJ!;X4AMEuu)PBRCo%fRmE>#IM`-bTl*dG68
z7VK2@`)KItc>?IE2Z@L*0bx)R;hXt4+wBjsgLOtNd4ys&(|@<Sce{9BMD}6@ZT{&s
z!5;fyUnjA|>uq<ot&PNKH56>{Jr_8b6!1JFmYHLtab@kyNpCjQ{4!SNTwwC8sB5gB
zrK{z<B=Kkyx0f6Rs^*@$A~8Ge%Ilr1-h8%D-nm@Tj*IWreA$WX>Dg~h%ad1d)8tG|
zOGfJsdWOZn);2U`fr&vNDbP_HnnF1{YTXqa7L%6=mb$W~D&6^+{A1`M=X+F=!QiL8
z&-O0-6Qda!8D+6XqO#TEUEe-9*$OF$!*yY0cHa+cw%Rg-?jz^ER)-I2eXfth=Vd}+
zJ&NXK(C_~cBW#AiL-)8{;Sbv3+gSJX#5N9j7hzU?uz6}PG9vRtGu}jlC6aE(FO>ht
z%8dec3JlN5;0uKT`w8oV8$qyqtl+!ovfrA850hB7-!^t5bb~GbqDbROe>?+Y`DKYe
zZRMy;YDMrtZ_f*idEBv|1L*8;!J+RP;_`>LaCH_5RNjK4ytuX0BunX=af*WRfiQQz
zDqj*g^91v?9MGDKTj~pA=NMA({Ay~6Md+2=ydV}=j#!`&xxlwCU!Tif&k7<SNZS|q
zbF=f7Ylu8eZEHA<u?}bC!YAtKA2<GMR_8b|xxui7y#tCce6YRY&^%gII!?f$Aq${U
zgL!6e^jr-35w;6qIjY;Jxke9yE`seh$^$;-hN_~dIiUgL#t6`qiT7eF!E&Yn@B>}d
z=ZVIb$LIC1+`hqy?)|gTbH9_mj6f^2I1nTD<-Zl1-uuj9ZrO%s*xE4n%fO^!L6^<J
z^V90X(`3+}Ctn&o;yJhK3Ikh5Mpa@5TU99)QJA`V0OjCUHC19@Y&5@)7TbkT%<7i6
zMNvv!iao1bsKua$0jVM~aPdEE`(k%c`a0)bB>0QZAS-Sz|L7ez${cIFErEWYoSMSh
z*Us^lHAO8B2~Q(>p|*rFe4Oq6FhSrK05v1-D|OM|%Y+OdB+uEdB;J(Tn?g-Pnd+Gs
zXq`Bqns74c#_GohK;Orlh?K?fm>I5-bQ)2v1<Y;2Sl6V>zZlsL=lZ^EvLI+|+>xRx
zd}V66il}aLS{<TWsLz8}7sXXG#`A51DRjNJ-B@<Q9WIm)do_l%oZeef`$g>s&jPZ-
z+sejJwvj|~MFd!nx2G*ElsFp{5s0n*dwyQBt`F`vPfLN8;y{X)#9%yxJ`zu&$Zb==
zfSY!Ey5VppJwMM#1^QWDo{PYM1qpA9Erc_&#+EWTJ}n67ygM;om?@h8TKMf<yb`jN
zsU4hhttJfKYAvl}637T2TWVE(_<~;L4y&mjp+2xBXj%niCgV0XMsSt!u<33$T@gL)
ziub<`h)x<XU=h|!70w8RZAJO)N)6zuZ)Kg&M>_SD{`u{vA;l%`U@S`<7IQ(zl$8Zc
zT9VwWK(`22P;5}{vZaX3cb^fo2&Q+Hrex9?PGtQk>?N>wQ~pC5(hZ#{mk3LgoqN1H
z$4fcsI4oeewZUCUO~qw(e0WVkW{@^l_!%D1<PiD0d{$^>Q)+Q!?$Tw2U(MeIEAZj9
zrJf4CD;qhhHK_SiQ!IJlBv0T4R#o3w>V5w&r&fd1xMeTBZQ3~X<5kMV4P&@@I2naN
z+if{d&{)ml(gL6l4k6JJZKhK(lCtM$9L1=W)TC0Ysu}Z{kusWV&SlK`2?E8kx9^0;
zgY7L81^oPknoNR)goQQvxQSf%eU`M(Cz)&GopAgurY@@CW@olMr{K`^F@FZ78RlB^
z;;ba6!mAK`ox`CA??$vL+Tcy2r(Oef?QxoniqOM9PdrYJPvn=p8IcJZupw;*Om)`)
zG{qP*+@4fpk&n@kSb}kI|0?bW;Q{o2u@Ftw=MD}j0hA4DYgxSzW7j~71sT}d3IDL)
z>;EFh&%W~1#|+W1K9VmB&Yt?<`W+vQ80Mo>Dj~m%dubKzAD51L3W}V<6`-6}q_?11
zDvgNWn8cjlrImS{P|#D$aX$wl_dE^LXo&h<zY{m12Fd<?ot}gNQ)C*x1YF^M4(mr%
z5jAFgBt!7nsd(QPWdA5@Mg}JyDEZQtwi8Bxj)C$?CHUHLGarC7sH#sTCq}PaBW$VB
z7;&OmsI}kyn=59@H4Q`!D!CfQ)zvavZ|CwZUTlnk92Pt`)x-be!uQ{rLHl2d$`U=b
zKGw?P>P9o)Ce(JQIF{pT$0h1W8F7()hzyZa<SYM~_>EaY3hG!3SbDAQAml3g&8$!F
zAXN$6S#w;0c-B8lPnEpj=Z+-LwYpxBa1Ri*==yNmO1EtPrpI$z;wswAxj0lMAC!&9
zQt}J;cg_`e#MpA5f6c1PsT6R&5mt4qrs-&Ru*j(3@qq(OKa@;tB*f)@r6Hu2C%!;S
ziAKw!jQ;Pofj-m~6!iG|zfx-DEHCE&tY9IErhmJWNfCOP<iq_U(v|{r-rr_I=@gxk
zjKdA<$bY485l8moZNE9C5OXb)8<BMj$O%uDRNIOM(Gt%~*FJnQ-p}FqEM5DIgE-R;
zbZdB6Y=2}FnI%f-+Ay><^NeC9ddY33c#<_Fazo6@zzO_trUMxd`Mh9fn&mZwCx41p
zo@00!@Un$@t)mHI{+>Nf*ueg{lzC=#Hwwi&yeQw<koqCGXp<Z|p~QS(CO!AADX~8B
zpXLi>1nx-CDELjrCSRQM)mM{WsTzc;^qkww!Lp27S%f@qq}1kE-y6lA#JEOad|yjz
zv_ZBRu-><a+;=7Dv8``x1m=2>w<C&v8|zF1VrxHt1{c;wcs{-TVXv&Zck6VJV+sC{
zWoVwyk5y{5&=eq8hUF=Z7<R-B)}d9w$PJB)kW0iQb2V0wFQ&MI$c9L-KyhV~x$BZ0
zRa})eEm-Bxh@SlStFY0B2N3kZ^v9>6ulwS|>}kO^kH{NItG(gmXnNdhX7?j~=BQzm
z?@Ul<RdsD&XY(-Xh7Ayy{`!ETTtsOeSLg4QYSwlS|DJlxlRHcxK&Y+csOpj1K$Rkw
z2iDiaLtb2;t(#nN*5xPYMRx#xH+U@c0lOkNR_5xM*Y>A<y9s`y@KU^GtG@Q83`zUF
zON=r%)Zkb;)}KCNVmP-=Mb$;~wvJNYhmoJ|eMSmvhP0fC-$zlO2D*2CPHK?&r}i0V
zR{C^D?*hhHpS0$Ze9%^Ss_9r^cPo_Z`JQUO;vVnu4tw9U!JHC!l+<Jn5?Uk_JHB7Y
z`MhDNFD1HA(WC9X`NZ<5ONZ<7c6oGtd3j{TRW~OM@Aq4cF}U=4z%>Ue`k54`tAq?s
z=XVdx>Hd!$=v0x!jj>J1%sf$6wUOH&r5_>kaeNJ~|Hf{|n|@n|V>nxcqoqjEZm_k+
zkKM!)hY3h(z4S+}X{vpt#LF+ndUft3iggP0Nm%XU)zFVgj)9`_braqe{s_3JR?(6g
zNKnuL4wF@go+xR#x|i7%>8{G<@YtQPa+*tb1yaSaFc;%Dwp-AniVtZ6sz&1ZKE8%b
z>I>xh#C*#_)^Onq9TxM?0<QZ6&EOL1Cu-@(Fa35)w0Pjv^ES_#i+ne%gqU^M=0I+&
z$AysB&!1X@uaR3-n@G~f7r1{+;~FLVsnn*$>hNsvlR&abM3hRe_QwJ9a{%c%WJg-%
z9G<%a5R-u63rKn}XUU>hoK{HCb~)Z3m|M2v_*_NU2fvZB!1k7wj&OL{<UzK9n6_ly
zt&|Tbeb`m-hf}TZNFyB2&)*5AwwbKiUS*ZBVJh%Cuwrmh>mU=I`vwq&9+(w7|Kre=
zlH*D`p>B1l4~#e!b|h+CYAn(xRzEOZwdl{Q^7&{H3t!a|nZBiH-CO%66CUrzSv*WQ
z*S2<MAzaD5o<HN}?o&vQ{^hIWoTngB6#)Du#5C{g{t0GXN>vu~%-Ho`BFkOg_Yk}H
z>a6Um)}ilnBDFmWh!4>p7pHi;iHcim#8h}NXmA6i97&#XPQS$m{x}t1`!&1D=?cSc
zpmQCLvS}5uTZXm}bbKH!i}w3<yi*qxQpTv-n8IT>->t851}km%8%%3IAwAINg(*;_
z%21Yz4kdqdkNLj#xtQe6g3k!V!QW=tpS7y@W^&cpde8w_OF?bsU)1%A-cdx%t~gxG
zO=V*+2ed0Z&0Nb^n?(I64+h2g`q(fEiB65ES0VZlG5oFE->~XPnCQ=WRJNn%$cHg1
zO6;Nejdd+2Lf<<rCsfd)=0KJcU?ph!r6y+T@v~o@e)CmQr;NAAV?uUUopH0<8TZ{3
z01!t%@>g-&-G3{Th%)O}A+g0~z$rNW+~4|g>hQ>h<xqT8Qjta|@Ofd$LejCymnggc
zI46{id5u#G6&(A1uW7BC>1du8nWk7EC9RW5fbc82EO0mCsq4$OgG_UU3hLbn@JQ^%
zEaMhLexKVee~JK+`P~rMV`Te*vR(+L>vV4YYo%*LEh>6R73$LZkq<3%*TW5i&VODK
zv<GQOPY;v)UZD=h`S{-aF81%cyLdi-ndl4NjX4Mm8`asqiRwC<5ANaITd%9B{f%I+
zYtGhoJubGf=6fe6Z2!tu9eoU9o9b*#n@+4Z_*wY?aTGUyr1s*>hUvY?I^vjr9!cv>
z;w6||)|#eQ=6NJjeyRL@6KShux7t)rG-^82Mv6_8=+mIX?S}UoXqHHlB)f7$-#fF|
z#KytKHazWU#xKA!iNDYP^_l_XpiCt_%=^{10fcfg%W+3h{dcx-j&i=4zV}nyUNIpN
z>PgaeJMOaUp1r(P$P_@;o8M_O%a8pZEBHiTude6Tk89S99+9thtQzdMxf#n4*X~ES
z95vIM#jN*<+qJ$aOsoYg?ao5+;{`o))ILdq*&KN?sN-90$`%X7D1$B7hW}{?=5G>w
zoChh;)PgZ%KyL6pIG^SB1};?xhK;apaNBN1$Ii6c$)dgw{MWYKcjAr+qHd_+J5BJb
zmZo8~T&zHM&;3c>5)&<jTwkcxKg)SE$c<yPqwBAffVYti<|2?LM;Ud)?CyOs$**|7
z<z&-bM;fDXUE=Niz4%P|zb&L1u+Af;{2g}d<%9VRE~puc<POg_h-2%Uu=2kw^9NJ>
zaW~^LH6wqd0c1R@2Z)JD>?-IDe+&)dJ}mes<db~+PhR{pb=ZH3%cs#VTpxQL=-7XP
zvFMiNebG&pFcQUp@D9o@gsx9PDa2YV$wcp+Pss3+6^s_pAyVGUDYc)dDnsy{xMX=T
z9>Ums9Ok7R2m`O-O&2ji*HGl^%xua{&k}o|<H&Uq0`aG%z87dE)VUpKKF~2M-o4*>
zXB;?tQm&U}8sK%grdX@r4D-rpDSWc!Jl2fcqn_~?@S`WoDOTU_Ck>0m5I@1C$v$pc
z?MI|1UMnJ!?X<Vn)?z9qvdw7C&{++Bh@|6feQpMI$}WgJTB29m1XGAE>yV$G-Tq5r
zsxNp(Bh?+S-{oauN<e6<gK-~KLfck?qdPlbU(^sRr{JatY%jypiL=5A8fVn5aKI1<
zt$7%%MkZqK0YeMLY!<3=`!2`G{o#=9p!sI&D`e=Ori01?4i3{z*PGxv7+2i!C{3w{
zj5_~wDv(EA*OrYkvFcu1=GmI~I85p~$Rz61Yel^T1HaJ+QL>!C<fCv}dLFXk)i<%v
zrW4jv_N)=w^H}-~7SiOVZ!)2t)O&#I50xA&EO;H5BV~a)8BCt6(b0T?H|4~|Z;bAt
zaiXXvdf1sz<R#r;NjkdPr*Y&0b`?IDA~&u_E9X-fXD8i}qd8AG4aqoLmOaya2<SVX
zgd4^L0qOJr#-gp(l>IZj4SwPN@5T1{rNDc4B-4NU1$N#yt}3%OsC%EQ9oK2gP8k|?
zzcSx1`#R;2!N)gVnxKUFeMs4s-kS=d_!A}m`oL^VaZ)YIMu0Z;vG*s9zmPYuSI_vE
zoTxaQ2acW=5N63GR?v-D9CKFKyR3w~)w&P-+R%vRKQ`*f?%1!I)TwgH5j@%97_Ulc
z4<b?(ldW}y`^M<8J;fR|NmqaQiWXOG`a?jA(2-m$g8p=SaR|a_*{;R92SH+Rofc(L
zZ+}_rV=ai;<;ESC9|x&Ezn|_CIQ%@rw~yRg77LKFWZ|}ky8MLK+iu*BI>Ip*DG8l6
z;QP3y;RN?|wMu#4YK&KQa)X1SS?~_Gi;JUR;6h3;DKiVgk86nTUGdSNZ#C-jxoOE!
z`M<Go(9J(YY+UoFhWUEQhOjV!vIXF#(FiWS6Ys}(+#A>mqf*b>WukGxV&-5(tUT|E
zpHJg-y=ecDb=d;D>zz(<b#Pw-UHX|maaEG@++dSoZL}zIv?{#LGLvTv_)g)D+zmEm
zNDJM$NUk%8KW0Dta8g>^`@$loAsr9<rgZwqTAhtCSWgRMqR?oss{VBycwz`mcQ5g@
z_wi5~(Z@?cfzX`pi%6`4*#NV^U)cYG$WD0W_3;GmINHn#N&@KY=*U(p-Z{-E<#zLr
zNJ(QSH>urwCVPo{=teQy(%cLJUIw5K6b9`0TbHhcm;JoV`HjzGf|v8!3aY8Bp+(0a
zoS&ax;g+sAhvY7xm!0sPZqAR#$vjb-U@GQh-I4FQYsAp|Zr~%r=2AI)xtPzjzHMJ3
zS>;@BWF+FM5Nzw9MMiI<Hj09Rg6(FztHp8ZkMl{3gH_7(y6IB;=n*X~bu<oRlS<9L
zI(63xE_+ul%sLRRVrIMF_NRA_tUvK}UF2NT<<OH}H2LZi>+BMv5_b&Tm-TJX%!lXy
zwlFZ^*zWDb3YAMad;(QGc`Y#6{7$!In5)q&QzvohYS&<RfNng?o(LFt1_Z?3Tkln$
zkb>A)h!h>WJ`u%ew7yf)3;F+Dd>AEiF|sUEEmSdYif77L_3}I2g)rvm;wfqiT`{~>
zXJZCpsfr}T3TUutXrr?*Z;7mRwC7CE7CgPep5sQ<!q`SaG-9olfj0F>{(FU2QU98$
z_D?c`&Bp)GSt}en@-6T`hzkZ-8mMUpeZ;iz2(?l-ZaT$!i!t3xnZubr&<)r}|K>De
ziM=xaR=g?1HXBpXykzYTl`$Ydr3Qq1P8nzD`gesaX=SPnnZ5c;Y!!b=y8>;*E7QS$
z7$k*l*t7HV8t$qh&O-zP&U9@3pBxXQNJ7*InzH_IK3of^x6}{aENiZs+JH%4;2&~A
zsJ>`A*jMB|%SVv8DvO9ceEuJefRW$T*$G&yVg1SHNQvMl1fd+b$GBqFR5N|$WhyiO
zk3T5;`K2YV2SAM$U8l8Z27YH4v2Qb#MfDmT8<9Q^Ts}Ck2Gz<`I_@<fFiuT=g<ZOL
zCg_}97}l}4-J%sDRpLI<Jdc0IfCjj+E@u(HWT@UA@cp42sK3r{@%Zsv$;|$lQeH7n
z9P3>8>*IYMpAV;YgE*4dkW39*fD%g9C`M9^px2M)0*ZHStC=AJ!B-J(yW0iah(IF-
zkQ(!%t6{DvAd^5UjmJO=)sYfdsWatB&0sC?KNIY{7{GWO^4w^3LXdIv!fgJv;htZ8
z35*53fJd6AOTg=?88(l=(;vO3rVYtK0VnShtsmBe=F$?*=P?re?ZCgT9Kk0FdQlgL
zd3w%(6YLpJwrOg+ad1nG;c@)>x|r+M@|+6l?P)po0dR)37MZGA&<;IAjy5$d<_+qH
z=w%LK0B-{$=Fn}+ib*kzY@(WrOPwA}&4__bwo{04;PpB|!f(p9J}L620%CV`;FH%z
zuF%os%ROq#Wl;Cy9DA{q>qf%|`_p3rNRV4eQ<~5!B{85Svv^O>LyXYnd{si$&%Yuw
zX;eK?r-5Vrk9j-++c$JEi|5&8zRgzzxCJ2pCj^Mj)h&>8>d}hkD799tLYNmAwc6U`
z^mQ=2;h3QX@hO1d-^4$^sZBmHyG>Q=H%;*Z%L`kr4V36LRnX(uf&IN_6$xQ1jt^nh
zI>n~iR0+sS_N45X5tX^f5OJMqvt4Bly<=)!!b5@Jpstr_$e#P3`rQN4Iq~hl6(dEI
zz$QByUA8}k0YygllK%o0BSwQ;Ez251sV#+-g(ygPzlw3d^G|Ub1`$rJfAXn$105pW
zWQ4qD_kq>9mcFo_rTSBTJ2gudk#Ia4@P@avy;k5BHL!+1H?UTewb~SHt38R!RF1QP
z=)LEq9<pbtt0y7k`gf1uP_<W$-H&U@Bd7A=G+fi3AmaQTPtIr|l62C7)py>j8tpfg
zMWs1h2`P|q+m#xqm{Z=Y0Im+9mQsIYSNl-**SydY+G}#Nk#~qmhDs<CYyXh5Z0jsE
z5K|utaJA|mcm$?bVIkN$-`!Qp_gx)U6FezQo0BOg`N1##I_Ag?;E6f=RPjFHZ_Ufs
z3tTGU1hg?#mpwxdX&hS3hBn-Ui=EpEh1cPsf+C*C?p_wy-^!X#F2RDGtw!1vG2*vU
zPkUzSIzvfAF*i1PS}&PI!4^<v5K>*p%7B9cZK_B;?Pi?qyR>Iil~}QrzXy#;3rWpg
zSEvcS0TBd{`<29s&~UL8+F)mLF-DtF)b$^~4|Dca5&1UV*BkQXI^v&?7yb3s$n^eh
zX2xmQz5?j0UrReaY24O`4}=PZo}PEZ>@1V&c6cw>X@)WY)Z@H@xlsZ-MuMTnp^SWU
z#G~*pa?@|kdS`?%%vfD9nNCty!PpsGg2G}5y>b5G0veFb5rGX(X(KTh=|S|-|BWJj
zEZqjFONZC#iKOOAe4k`AGe<Jcf$WbQw2ysv4W~qgxG}Ug0Y!#eGoe2!m)Oy?%t%Fi
zI8V3x3Uz9Y?9N(HF&Ked9xSC_AKQyI^cNi;!{UfzC4R>5Lc3b$H4VK<uvQt0#W7QA
zPxtGsFG@n**nLyyB0oASs}augOl!=tx@K5mJQTfb@9@hTJ(;N`P-j+G(|qA+XqT*S
zqUZ@?td6G7r)TUyj#17etwIb&x4wSH%G`7DI{FBYd*h>6!0M)DZX{yU{n}MFt?ldm
zb=rtfM;3nFDE@bs+Mwelt7DW869oKvZR6>3_`j;7o}QA742|=Y;sc5e9!9!hlIL;W
z318LW!vPULSoRW#nm*x1SVOr)Vqy3TI3BfFoQ@+q5G29#Vhy%&EacLm!<DbSw@`gY
zq$+Ftm3<ThHppv<aG4!aPkipbU&?SE-P3Y<SonE^SQB989It%y$wDLG$(AU-0|>as
zPGhT%%&j$_*{Dtr;i#_wl2ESz(Ju;+7v3TgXjnH*KMwmIGOD8n0{K8JH~q7Qzgh`r
zXRR$;&)xschUd7Es-?C#nzOccU0PQRCqApk#>Oj|KCa#}WDe1BJn!aZ$K4lG#ZF<$
zMQfxB133JIAmV0n%DrQU{))5=Y*toQ?Iys8Sw64f^kReex&c`U{|p*HLbs!}?J{eW
ztx@WsziT5D6h1y$>KfhHdN6Ga%9%0qXj;SJIJ^6eQ1(3KPGa{QhtIcdw^3p`i8{uZ
z^S30M9pluvxbhVDl5Kt*7=I<*7YOxpA}$T?NUCPm1kHzfsH8pjRWq#3RpC5<&NI5D
zY;i=r=mQ=PD4k;JGX(TL9cz)Xvo|Y2Ltp$ALHd<4)%~ZGydO{PfUY!THwrTAtVU_j
zSo%wEiqnUUKu1ZBt<_bh$Fum8brHS|cuB00;EChc+(EBGf{4zB<Dyhy!IFYe>y1LK
z6c*XA1V{JPvnJr6Bo9sle0LLrvzeYD%x~d$$uV#Tph2BxI<A<Wu5Gclyv&?I5gn%|
zXplb;r#zD3FOyCx{<Ft8QTXg}XZu{wWNdu^p`?VUIU)ab!aAw5g-mTboZTGSvt)M{
zo)V{LMzl(vXem=0@}KcpEkcaVyaf_TI#3Q&u^A7=;Qp{deQrvNjxU-(me~85*Jc?g
zD~x^<WmA!nD5l{z;5ZH(_x@UwQ^zMgbliv=jPCaBRkvB)@&fr$Kfj|8r}HfTyukq&
zmB~*b&6znVD$7JxpwmI)j_;Fh<~2s4X-7lvHn|~MgL6fbzR}!h)@PT9VIsQw4EKHX
zxo>>m7LYNQh7mOjFv|=^qnX+97{t*o$eD|!VGyhr5FxIRn3z-;{Tin)my_g8wo#Hk
zIhO^k^nESlqA2Wug6N2vOpvLo#XMhp0QTq3gs$uxY*buCH6WR>`lzIL4KdPZ&qFkG
z<7<wm$j$x%7_Ujd!s-N@&~e>mAMtmunuhWV->0I<H5+E1LWqlBhv_|2irjlGEj@5)
zxg_>3kdt6|D)Ais>$~DQsyU<2X5YC&IKKdlO-!h!UO$sAap6JycHX-mN4r`P1Tw7=
z6mep*v6q_Dl^#$~D?xdByXQ9>mH(itLHT+A@VFk%QN~MX{-`;q5LqyN`XNUf-x&Cq
z@c^vveG?lSSD9JN@)N|IP({uGL-RTnp{OB(y8BHXu1c5hGX-ycMW$ie0aeu=@J1LI
z8dj8+M$jv98Z5NBY%>GeK=w$U-rfsw9KD}zg@1L^lYJZV3nvPTXY>DY!R2o@g8U?j
zetP0qzU8R<fsBsAAHHKk)oHnw<L7^*2-(JcJpF|O(d_o=Ye*NyXA?5eTr&PAVWaAU
zbdc$}t)52%f11oLmZw>C9gLqrhCo@`7L%4edv=}?DvX+&Z*@i!Onb?2Quj3MjhHLH
zV|d$Y{|o6-j|GGHEx`ar(N@!j`LlfSvv_SyYms?+RoTw&U{q6<3hwk`rLE&8dv)cw
zt6&|#JmEr8YrtzD{zSs#?}a)~lXZOuDnH?<ujh-2-{sgVzpkF)%`|et<xHPT3QLwR
z_|FSZ#x*W03VatjiV^F9DYbSi7s+K+(K{~$36Y?Iq5^IL?d+Ki-@=r`OH__W9?G2?
zErkJ_6JXqZF1}dPFZ4oRed%EjdT|aHv6b!X&*(wbhft;aaiAX#M?_(_^S!**Fn_bn
zm6yav!x#W=lBGE^VxwX$ThcNq@WXadbmt})@`x4^S|`^gxzyBSi~K+?vrv{VzqBN?
za8V%IWw+JY@(%$+85tNbJEMHuiK{nIqU215J8jZ}*y^x3x=$`73|dc({mR#{pT1ck
zR}z1)3Nv~K+1>R!PJZK8tTMqVUG5Bb(|dc3+0B-^?Xw-$2~^ef_^V`WPO{)hyQwr{
z`2fBwG@dbS%xZEYHss&%<9nBxULO^+Uk)WgQkV7*FbN2{qzPt0eCV<EOnaLa-0A2m
z-ikP{NDv5!`owEt+uu84=8|cUkmtvWo*rYzH(lB?Z(qHGAX4BwZr8Y{*}{lSpQ^C+
zFrvUYjMa&V6tZmYuWtjrz?H5XumoP0cOfnHEVUi>=sH?XtrVpjp3)EX9W0nI%UB@%
zhc2i77Zd&4Nx`OvPunw9*?~GoT(KH|0&4qi{;qY8oiWT=erzBdYDgE@Gn>BgWM-o7
zms+{L1l95#7qws36>zhLS?t^PsH`Y$%abG>e;Ixg4~(5v`}P-^P38yD?j|mPHwQ-}
zDbsKf|7yuwbs)B(NGcMzaVW6S>WuT6EY8Ul^NSuw*FRBedAs4*z9yfH-@b?Ws*n0l
zrarH@yU0gF+Ue0*dfx-E6Z<g&&*Piy0;CDHy38@P2?*vGRPtpYi4<jZb&}LauK%K0
zFd%h4DP58{onojK!=~7g57+(b5E{~$IC#}a!N6`3mZ?}&@OfL)@WWK$9!_iM<wJVz
zi8?LPYqE2Om;HMY<}pha`RSBb=T!;zMZT;6cl<`dx)%0>U(P%3XvK5|JYEL{ID5@P
zn7xqWD9qBI1<x*8+L#@}zFqRf`XmL@D`mc&BS9>;C)-dcM8E9h;X&Z6HX<X!^U<i+
z$&IHcY4~W)5)gbclP}Cz0^;$T(zADPDrGa|%bgWSBzL`G@kI+CGzZm?t1gtU%!$8r
z0B6e=R10Mg6ue?xFAQsag8x;+D*g(<+>>{+EYkEKwTR|un_j7ivTy4P#~ClI_;6VT
zxKWm;atH0roC+jd8%mGhJsfoMFn**Ct|V^Xin558hqp9n`>^_7Tyb1c&)C3)&}R-|
zxh5*N3$}#ptClQ+Gesv5o3zNE!|u;F^kU^16$)=9)6*{Vq+|%ES9m>(j3p+%(8#tZ
zGAkJF`0p%qVty2;?`)Gc3MOn^^qDMK5d>;)5|pa7I&B<)PUgR#*w4N1wz)g&g-@6d
zM$R!3ZsZGl{hlkfrAj~r8>sh#e^KW}(k?maL29ow1dM2NN~mhjd&x{acH_Cr7B*ap
zADKzW{+rsh=z#b1=|Vz6M+3Vw#~oXjhZCqHsz3(PHUtg%6<3#VIgc><=!0$s(Oqk`
zC0+iQ%M4ZP=kG}~Bw$o|kJiiT0q|uMyOhN*A-<BBz7hBbv*6hsD~X3GAn7?np_`+e
z2{S@{E&;Vb<9yJr^}-#Ra!xc)Gdqe7jrWk8XRXYMg&5^i!LHIfR*pB&K%deH32L@W
z){2;mn|L~mmKZ15?TLeBQglkUmCabO<>$xSY(td6NUZWOR0JD2{>egmA3Y^OcJwV$
zCJAKJP7l)iC45HVjq7kVmdY4)ZOp()X9?9)Tysm>+3!9N@B~LDBsJ0-QWC5<XZL0U
zwS~GxA;vy<pTkjvk`7=f&Q+izAOf$NJUhVqYuMcx0=$-B1~Mly!^buRNH9haHZ|?d
zB^pqL=LaOa$W;00e+yCo3u<|8kpt{4Si<^_{K5!v)w5j!L(@jvblW^X=nW9rb~`7t
z*0DN`_}>%ud|<AsJUt~yDJ||WB`=O<U+|Alm}1P;(~HBZ4G6`muq-!HS<f{vdQb^_
z=~-A6Pzf6~=zkUMprJJlhIyM9SvU#~%DPJ9PL__?UjV432PKP~6DxjvkhTi>OwIJ(
zIJ=bO_3w2}9;CooWbU)8*}go%_-85n)&9P=Juw!ZxYML=tcVim*?)%_*4}o+F2nG>
z{6B`6-0z_mnr?Yg+L_vT+PkEL&7Ar?m(#3&Cf#2k6>~i;J$~bEVyJFhSp2m&m_^@)
zGReZs38Xy(!s5l$O+nAAX1?tTn*m?Dxzt)u-pD%{opu&3akwreRPLpIXr^2kd0?%r
z3}0Gkb`^_Z>HU{SSh39e%u>SqvcJ?mrIp`Yg>NjFpc~fX?%m%Q#r}w17%eXbZSx~A
z?7yGFf#}|Qr|dHn^6Op#KP8=x$6{;uq;i~rNi#I>ji4TXl1LRj=i~%32fqH)#EWCe
znJ|uXpa3j=cX>bX2EZL`;7TxnzIe*g1|87eX!ds1*5rHhh6BN6-6OtDA3)bL!qNUI
zQo<q<%Mz3)C|*g2i#CT@1fc{Yzh$T7u>&0_{ER=?wtuG?R7=jPmTomog3L@VrxDwH
z<a;BU)=ojRJks_tlP`Wau3bk<r-($zDs3bZ^Z!tFmQihdakp-<7I!J`?k)ui1b4UK
z?obL8Zz&SIK!G+C3m)9Hp*Y3eiv)LfyXpVE?_KMDnZ?XXhBGJUjO^du&$t95LJKMX
z^mH}aRW`5wFHMl<6LcF@L;@s+B6fRISC0!Ay$@Pj6Y?iy#w3M<{j}>X5m<xTxcHCX
z)Q9`>cHj&g7F%XFUn@MBDxB==s~wl-cMydunr@+jDkKuaZ|QQ%;<HV7v)R?by+#O$
zq8XkhBQk2J<U<vA6GL{rU~ifenMm$gse!?7cAi+VPPT0CYU^N|YVuk{04V`ecMFZ}
zxB=1nu@3!dDBr<vpOzW{uW1ShSzE?hUzJOGdnd*!#g=_MKr4Ps3eS+ayeh1(FY$e5
zzwO#Ppf|XR5pl!lPW|3H6B^B3wsduD*PHe(o~(Ry<^nH>hm5Gl+~O1z^R*}_jn;BF
zJhBJ72fxeB8lB1{-m5$-gjcwy{*Ri`fat1!UxFJV)Q8$V-LrA<CgO6pgi!GW$u1Lk
z-H1d1kFn4Gf6u*3;yWao<$<4b_moL*0g>^qn@5V!u`<EzgWxsY1=>MZB=-#tPrAQD
zC-o*%bcq=?x|<+;AHw@Ghm(01?SNRC{nD4aL=^gIw9t=<KlSjHUojK@29}4s|0}Ub
z`vI@*rc5_#b&iftS=metxspp>pZ*VWBTloOuS^Vkp38uaFsJUqNfHJ<tdl_hw{^5v
zo$I#|dN*-)8RBonNHD!bhYZ~2{aSUdl1D5Wg5gdO(9937C;@nhmZ`_cF;6f}iwGP=
zCAsv1gh&$1zwCIY215}KFwH)zTrM|zyJBAUfXh@pZJ>+$8&}B-Oz&aIACaqAG{jd-
zCRBQ7=Iq!#_prwG^eu2;OfdzF$*HUVa{(*Tn)qC70sVtHyAC|qWAAcDLUHM#G6{XC
zxD8n%g_D2dr@eZSSdg8c5R8~nzCxT!J{wx-B=PmFZQpwtyd;j*9bzO<oY|~Ry*0gI
z8=ARl3>1*eGS;{kRg4tzED^YbdtWBH<Y#sj4&lI@uZpY1&(o*L(~r<7dHU?MQba#Z
zv%;X)_7!{ZV=O2+Oe%M*YT`KK>X|kFW>tdTDZymEDoe^bzTl=GDq%!)+5rq^qihzg
zuWO)F@p(Hb!%hD$$yIvzUyq#T^$rPW5N3=W#QKYRn>@(SCo!H|UA6??+RvuPKJ@RE
zI?im^ZIO%*a6PLpW`tV0`!nQUG0TU1i6WKm7D0vCPU5gPCl})0eQ7S3ER<Wxe@vnQ
zFJ>w2RiZGke><eKxp}Xvg%3+sNPk>jn%K46ZY=&ovvRM{lwTf6qdL0keYF4P{Rm1L
z(UVMcH*<z%S(3P>w%mGYX{kkr?Yah6Itp<!Qi3^+y&T$ciEHuY9V^Aa43%9hIMU~!
z%jP3aR&09`1R-rBajUd1Fin(do#Tg^?DDEpQKSX;j=b6mRLqbqABNpXNfE_NRVUdo
zykhkUiFRghY1M*Er{9zx-z>x!5weN5wWJ*{*yA}lfdSncjWAFLSZM!_xoDW!&8^xS
zhb5`;78Rj+Jh4hXt{1=hc?w?*?*?67h6aCGUbv8C=U{<SyK-#(`SkkJ9dtgPOdW<(
ztsG}G>-tPm{`XXpoL@E<>g)mIh@mz-2muuA1&o~NF)Ea`CIn|(35RAsGGj!U2`OD!
zVgFJlcV|H4x{_^YToZ<v)lb!bA~KFAGQjm@r^rN|qcOISWm}$nLW9*WO})g}<i;gA
z(4QXTzU)?iCoh6YKET}0SSwn_?E)+&JSm(e@|9E4T=RD;lGBKohLY5@lM6Zn%35nd
zCJE3t*%_z_-%X5}dGQH`%ygl$Rt*qF)riggabzoJ7Xtw)5eD&l@)RYG1~Yv7u6q^}
z{!Yzbphp~C#xVQyi_zh5=)}jkuX+t0i)S^>m0BQ<-j%9`+?>bzzx{L(>)Fs8X9FF7
zE`$o7Ng+4OJ>k>im9mkao1MefCGFteqif7R4`gt5Ujg$9Y753rjE~GZZ6+)ZOX7go
zNcda<uV>l%Y&;ZGpC#f;)D8oU9g~|2byc^8tK*o6CQ5|P#NC{q!kYW=gRK}8%T9S*
zQ^1hWqR&0qLXB`Xoy7ZP;`x!-xyCWNuTv$zG+wp*yd9~e2d^3%HMYDLe+P%3MAk2F
z*<gPXeMTs~`IZmsD+<8&7zAi0ks`Ljo2$$r@jj_}^QU?sb)nC_87M`wGeE_sA<h_x
zq$`qr<Q(w5!DrdZU96MTipl`YH7K5WEKarmgiW>QwI$IGZbA#(w?l~S1ks9~UYeCu
z<Dk&_&Zp#gkFn`p(}t>1+jFzrW$NqsPJU~jgg7H6)E+}wVwX71;QO8L*i6IU3}tHk
z&+Tn*?~{xZz1A?h)_5Vji@FK^GCwZ7X7Tsy#w`R8hlxYyKh>1~;hLIo5YTWG9AgeV
z7u!Zxmy$0dM9aUDEVC5NUklV^tUs2(k(94=Z^=Z%)-MkDnkQOuEWXcVO{H_Ek1!de
zCfrkx>#zjSxP`_v(A*;F<Iu9R$Fv?4MNp-xcW_6aYhsi#t}GE(OpS_dQ+f|lml~9J
zb}mnMDjFGi!9E69z}UWziV)zT6G;@~M#%P)VFQ7GF<hL+JtrXKJ`EWXYH0eyIUM`c
z+d}J}v>Z2wy;FpZA3o6FsVc(vzEqKvc9j%S!1^q<po8{f5$j3gt~W6Idy(D0!6m`R
z2Yf-5lsRK#New;q$0Be8Be?<3gexJHvRhq}io9s#L<gH=@hdLzxjPqcj;!V4wLp0$
zZDpscY%U4*j4;G}eWq8?>$z|&4kL<J;CqWqr<CK^LY95}y<!=8Dv!!qLMaM|W~cTD
z=Ph|?b>yc){#cDCipAkh@EHb0no?LN>I$DEdAr{@o%8-%rF&e;om$@{N6KRf6v0&E
zy84|Dj@j5Ne4j=0rv!D&C<&);f5}A^w_elMH&8WZ9oc>k|F_30VWQ+uaz8riN?otm
zd6W_8Bf8(6CY4SLZU$6d%jSdom;r%-8QKYgO1gSIy7)IW7=lsE7E_tly1?~Ck$C#k
z3Yq+9&?HAgx4xCdsX^iCb5>AgnND$2_tMEHDz8n&j1#PXbfo;19Oxd7Fz2x3>3x{s
z#KIWQVf0co$K9A$w1}Fv;3#Zc1&D8E^F7I~tSl>dG_~ohGM~C#?LV-R^_QJ3#f;nJ
zJ^#I$B@l-_lLU9!{q;@=W85YHNUZK**`-5<S-Ssb#`;f06Esx?IpaSJQ+0fllc3G#
zrZoK@6x2#A6?8%^Kd}d;Y=Tay;3g(%CPqKMY5;}ggOd^U!+Vp9`j(?nU>V-5XOiEF
zZZwC-^mW7Du<QG#cue?1ig8E8pX<W6rhlpRd+><#32!edw!67LAecIyI(DditJ^N~
zvSOEnKG4DdcQ8sZF%VxWB|tnrG3Pwgpxm;k+X1tWbhVL8%H&7ozVqIcSyYZe)j|*K
znh9w)xIQd1`70OJ>2WEcD_@O{KZq2j<{xF!p>q5qUp|q>ZwkX#&b5KpB2+%pvP{+L
zpAlBa2oo3N>{7Xq!>ZyMKMtdLj8-@v!6m7yLIn3q(nzh{we<BP$eh75jiX#ME^kbm
z<s>(C7jM;rGkUS)jKPTk?QuqMXbRd(6|kA>MEBKR!^ob3lr?O)Eeu4MRAk8MrJw4!
zf|qO5I~DE{82A`%!nGh;bFeEc@|L!{9^iz5i#JQbcfe6vg@|EHfRgftxFEfU#pplU
zq$$iYGwVX1rMx*962g7{Wz<||PJe8s@jT}lF&~ZgA_Ol-gaVOa`o@c~OeC(tP9g*+
zWJ7&jB&A83!lO}eT=Li!rzO9NJje}>Su95)lJY848Dw&Ae=nK@B5JCF-5<49%h`S~
z&(7VyBdA>0%o}GN`SteoKFb!zhUSLDT1Jxr2#{SDAzi43+e{vtfxgmRFJ61>pn-EQ
zK8Ssy3LNC{0eal+)os@$))y7^0Xft#{<b@QzBlB}Z(`Uk^}w$9%>p47*DX}@C+o8P
zNIdKxguG*>cOKnvn~r-Pby6TU*I5}}m>?X?N0G)>4#~GeU$F}yhb4n7(ABxr?~o98
zg(libjy`9^*#uznKvPqa+9W$fh4W}{j{t38aImDQ$*8P|?ucSQUf0vluaWnY(o%G2
zvm-`=uaEB31&^MAO0MA3CcX8qpi2d;ZkpkSD6V7D-T@WZsQO9KQSdW()It{s=pgkL
zWKidA2rIaqn{j^PR^U)^PtcZM484k#G5}Pxos?r)!RQU}#4l4|Bg4*XeDCXho<>DA
zGfUZ^Jke^^ALD@d^4IF_SqZWBk-?c4OP#74&>~0JNOM&fCmd{Og=*X_RN09!5$%!?
zPVB9eTSEMp`uruhy3G6+K_APBjkVWqfw#_G7d(I`R3DB*3L$64#@Epx_>M#6^Z;Zn
z`->l6%$7JFo2YhiNj98uog0$Uw!tFBA}hxHb~6PgQi>!39~gDVaMEVnpWkcD^0kUC
zC5W2$WT_b0GqCvJJ5K&IV>TS0fi41%nISc2RG<D)D>c(FV}OXd)i$SU1J^aa0WYf|
z&({&8SptpxF)lwtoA+$~dS37b`%JrRkz`M8+U1k<Xm(TNSJmXey%{jt!reF*xf?>O
z=(Ia`e{8%-(9^xE4S8H>yFpe_iAgQp@-QA)>0+WRPuSe#Hh)^bjbeGVH~C8XW0$M?
z<WB`nQC|qBWoQJ0Wjn@QE8-}0Ikh0qbB2_$rCH*;EL5b!yR!7U!FWiUTEL6|dbeO@
zY2PMz%;)JOlE1Tzod2Z5tAGp<D^#cMdfIT}eEiukJOjLnGFqYV`6Fy35`&*j(pC}?
z*k9l$y*IMbqgxk{qc<coVP~(@nodf>&Xox`@4@N%DdvBWHeG$`B<6?>rH*y&UplNG
z#FlWAqssw<Nm(=C3;Da&kQaSi%C#dL&~*V$yp=-`M`%r?^{+RuqBgpIRfI#6t$RAD
z>Q2V`|NpZZPF_`I{dFOIo)<!q{ig5bACK>-w;Zlw5fSw{4=*{(P`6VUKZZBy5Q9<Z
zJYmVoKz|Ry=PyS%eGq4_Q%bCkH&x*tSV7m4wM~2RU~c{(Grv)wua&l&2QJrkEoaei
z=R-7q412$mfhRjcVZsonAQeH0IIzes&#Wshh7t%8&U>bX+h8ruW#eKD(`bRDl#%Rh
zFR_OiN>`%neJr9@KYf_*e8_Xw`2g-pd>g0ucR_le13dc+|5yC+K=8F>a6{Gd7@<=(
zesn{n9Yf>QEU~&oC-OJ3Al{(iF|^&92(gdGBgcLQxcVZs+Tw#Qh{NYga#<2d8b$b5
zt?6e)pU>urC^6{`<*`xUR7>^7;?}O6uM3!}s<HYLnrf_p{&fRFs{N^%yi`+p%j4(S
zMj#TofJ;C>8}Ou0r*kRvrt&Ckj7pphc27;yyr*icx7O-0e+C(?*Js4PrS|EQuZVHy
z@P4x)X<c7MKMUX>D(kP;dX(FMD$;*`;|>0pXFG9-3zj{9MFi1IrsS`=1K$hkXLKOJ
zU9ww<oA>g$Y+Ka~>*`%MiiFz611(sIesp-iT~I*%^-vQhxT8lx1xF)s1bfDOKTqK1
z=JJ-Ip@O^3ZdM=cUR;4R$we7m$Vv&D<~nfhgvz$Q?Yg?~h2L$k;L#j)Qz*iZs*AV1
zGO5dgc4Sc~HG_f_ZB)5XbN_q>S9K*5AU74F5V3DMf52aCtY#qftTWMidXZp&Il`hG
zGQV=M1XRyu3hJm@5llsb{T77A!1VO#9V;&N&?dO$qDZaEI3VvdVFH&y5>;)GI#k#_
zNr62CT5OM>{TcIC<&dp9I#I#|EsYc#&jwC)%N>!L)Cs00nHKOreN7R=v09tA{W4d4
zp=XUq>e;u!bZ({^6(iPJ<`x-Y{X(>0t*Y{Jem>ya7MnuY*Ya4&XG`+iD812f+!3eQ
zKg#BB#B?$TPiNmg8IP`8G)U&cL9^d=_2uwm+OVR?B_XeeyOa`YhDd^z_VptkMVOI2
z4+A?cs(U|S>e9@I3mFEN@pa#(s~dSw_c;?7(QsHMm2dQ5G$^~8&f8blS8t+{%p)dg
zRsX+n(P^c*Z?Q)dZ(n>$2)M}2{T@x;<Nq_Ie+perG16hbMVuk?w>9<jS&hL>7Gf(m
z!tzo!vvBdoBr=Q)>UDT=$o#vy%H7Cg$<t6zZ!A2z$#;%H$tqL)@`HEm&h2(K@gU+F
zI!SB@WSTkr%3<~RTQwAakb>o>tVs2I0bclY80wY0d0XGyfOJ_U>L#w`XD-of#EqT1
z=M>S;yj;G7aG|u35skgWL!m~buB577g54cPE~Dr7^#4&Tl@s&IRyl=2&NYmU-w-o>
zyX9ciNu@)Sw+Q}3N0e?9d}2UEGfU-vCzbAlrs;q8>noHID8D2i=WjCDjnB#H`WSKX
zrp5hA7viinbV4GZ%bfWQZ6Xzo322V@m^!|NT;EbLIzG<h`i)jl=_E6=4@)OLhTi`1
zkLrXDeU!bKks_Emp>?G1?_8-R#vk(KqYP2AHJcIAGX)*}n<M|As{OLn7d?pNZrJ}U
zKXvOPSerVuM7ZSo<?@T$CHZ-@VT(0^gFa?z(5L+B9~9qaj`qw899~)+uC^}HiKrUe
zt_5nyU;VZtor!D_x^a`hlz15zVMfk{-xUvJN@^xC7+YSZ4*z)jk84B27ejFq&C`hy
zuqaUm#|)v1KuACWczTjCd$M=30EI1gkDaN0d<MXP!6r>3E0^T-FK1j#j7TW!(+xMo
zh;HojG9@M02Vb#hyoWM)f!aI;JHdHh8N0(zQM-)AYT73gLCWD>t7`5e4I(tSd38El
zH+OoMb*gT(mR<aPBO7t6$CUh5M=-~pn{7d71x4rwnvNcDCpZx)(A4CZci`%lx%hNv
zDu>-#t)x;e+7}pN<>TMTDgs(3z{21<WF<M5Sab&aeQW#nI_j2e?_KWql0gjgn<y(8
z=-#dk8rp+^^8-m?C<3V>)q{-oHXQQ$WeofG4nO#1{;pq@)oQ7q%Ta~BcF)EdWeFN1
z^j+>7@?GqQG(X0c)fpV~_u5pk>~|_(2=#L&kwUT~&p`Yc@ijlTIa>a&UGPrC@s5j}
zch!yrXC?M`k-W^f|05mn^p{b7UO|Q7;Tr4QbIGhuS10yM!yP)|<qsZF+>)U%Yqb-a
zjd(TAbvEd<OTY&y3e3QO^G#>&o@ojlAX9RPTAdqPcBfP69ZDqK24@Ag(_#6H4{^c$
z5;Kdx)yw@mDs*v=MI7&Zs54|#%n-8hYS}PXi;5x?wPd)FqxpZEM&tOj8R7AVKf#Nm
zf)n~n1sC!w2n7B7J?CBaXm9D&;Yk7M^p7OxW!{zckvSEGd024kV_1vuI}&#nm(u3V
zm?n+e-d=^3$NjxCy%wSWe1BJe+m$jTo<FF|fSW441rdIusc+L*?`m)(Z8xam0iQz`
zd+zee-88FIHjg87aDORlch4D_&X#AUo5cZ`;xdO<usgiSB~*w6b6J=K*|v8ShxPvv
zg66E2GCXD@*!K3@3e3l%!F3RN;6|<elCxsQP2`Jc71S_oTR5i;gFuu+=5u&<ms1-g
zC86*Fm&~+J+unyt_&>{^byN~IMMJG9vFy}TRD}bLdr^JktTUz4kBkVE$U$4myuh90
z^X-gBC~8FEo^m<rz?GY+x$rDzL=%m|W5OHM!<BGdIn?!RSxEGT#y`~>rQ@+R3tX9O
z?n(ObGX#N!IwYH2o-w%S+u{zK7Y@)(G6<tcty>3NTf7(E667w<c#~3?K){D>nSGpv
z0YE`XF1asW(KZ}=s;(kQ4mCdhN7D_Yp1ZfMr*`XN+z=a8s8?RFpH>R&b2Xbi2VbPT
z8Mnyf=M{as-zgu%4Os{S7{VFce}w%5A^Aqv@tmmYIpDt0h%KB!?`qK;S}pbwrhv?f
zP6}z)&XG!m3^@J6gpdluY6h0}f1py<8`Nq;s*CTo?t|s^gSSXe5)luA{~>+5xnp)T
z&m$1tg%7=-$gPa7vDHm~M{ar{rUEmr@ozcR!6Bh9=&8t#3%@%$**injBTA+K-;VrU
ziCpe^GR4wqF3KZTIqQo@gYqLi%(qNL`2J_NXxGQjs$4ukL)N>caNUT{XIh|05*pIU
zGp#vbY-kq62NEq|&U>sdJE;RQK>k0334Q?*$hGXdtnFZzm6f!(ABmZ;HG(4M{Xu7o
zDFL`CfjkQ{JX?`A68yAWM1Bs^G=T4O4r#@$Cp@<ERA>Y&y*Wwou;#r{zN!{y9+95!
zV^8`?`L^nOw4$$EmUSD8if(4*t?%~{3Q<5=-}|c8SaOMlJL*#Dy6h*1d*<q+Z?7Xf
zk;g=Y^*r3Xgxra(Z_hD#@?z-aln^A{v2f^1YssW9nN)&hWx%qPb}z19ZJ~)qevt{)
zH^}imUl>R&KE{zIFc^T?!GW6E*r!Wn@^>>fPSbRe0DVd)>&Jv;g9S({*r;&S?@jeT
zq%v1obWP^DFQSN!RstZ-5fi<to@@7tQCYwe=8UNBZ8{4kQ!F}6TG#zjNT_ca?HuUA
z<L2Rlzdxewtf%8VKj#sFV;;h1f({fyZuDxS;P{Hz%R4PAOKD7wAts@5g8DS||G3O^
zGS|FQ>#1F@9Otuc*787FEACDNGjr4yZifYrt@7P_BoV>#lVH0zjunbUliiU<1CXO2
z37~=^feJtEX70-|jO%HHs|6D0(3LEU@6qJ~BXlYXMjziMFK-+zbDV~^2P}ruwxT}O
z{3)~~?Y?C}s67#Yo~-s^eInF$WYcp6m4owNju}PXk1Rgh*Gz0Og6T&~vQ%5ZnfguQ
z5BK3Ef-s1VE5qLX&WZ)^UR3RGQKkkXKwZ}&FU3U(B8d&}@DrJsY)xEY%xS(sAd|;P
zhhbixG{Fvk+0V4D+dOs#){IF%lG}fQO+TC3QtE<O!)s+6HU*SjxkH2(xVq=KTEq?%
z5E*d<${HgL8qC85k9BOp)E+o<k*RT>hB}+)yG*J{xL4!dF2?CnW$%+AO5>pM#+U<(
zG3w~CLl=u<LVZj|K}jvYm-<y&pRpBj39Chay}!r-eau{qs-ibWk5*RFs{s(=@6FD%
z(aqS1<=Nu}pC4d$w>V<BZ{CZ;=stR$D~ODjI#|_5PQ+>HkvlOnN)qknM?o^JB}o{0
z|5~^PNr5V-gW_NYMMj<f1hZs9&`eVLde}ETVh~RmE9KYo7>Vtl-Wme!B6rvD?$m28
zyVex!{m0HFJc;~XBy<%72Br!((O8W_FubtZ5_`>Y;P5`MgItGjv9cwX&ByJw(dLR_
zT=^y;SCnslq`8}1!zP;j-J}P*HG|Pb{T&~XB4W6_4;vTWlWaVNc)XLe_(nk_FH_Rm
zCWt%wQ_P#|{?j!nd|)3h<mRIeT+j6b$&!+3pn10tJ_on~+g*h>q2Wcb+GKvhmSsD-
znh~Ff3!Q*}clnly6@S|SiMKkv7f$ScaGTLr5AAvo{w&kMsN0UnfyWlwMFIDd;TK-a
zi#!}IZobBZFNLeHE%>te-QGYbMxfI%H=RZ^iJ{<nh|lHz#T56q9igU>1C;TDjDCN<
z)V#59w_9#-_&IHb#eow(2}Qv&RfQ58WQG6U@+CN|y!}#^Hn>bk2)V?5_1!;TL{}8<
zk3cuV>px$1Y%=+t+#8-%O|PEQ4BF0(y(`_|515d|`i3)Zatj~Q!{d+P!a|`VOD>rI
zP9`Yb$P(EXf_dr(Mh3PorK=vP7RId@2N;=oWYmsB@0-X>Y3W#j+F6o(N~C{ZLiB0(
zyc9CJH<;+|T+EO6B_fJLPU{5jds~*<5w(Rnk47WSu*VVK6v$4WL#)`xUDPc5x@dKC
zB(lL6n6B-UtSwzbdUzZh|F_E-K`0*?$3y-xzKfGn37)=|vA#Sq8m(WhCz-Z@Dv162
zTX^1wt)|wVfLuiS3$cMrI|MVH`!>cXU5W8F;yA}FmJl+2y4lBbf;V=onV}pi>e0Yk
zW(vU=tNa0-Cr+~PaG`KwyK}S|CoUK#uYnjC*k|Sm5uPAhJHLGS>$**KCwj0F-}m~*
z_61_dJUg4rJ(p=WLWN~NSwRWT1bfV^b6?p$KNZ;0KK`=(YSbIUK1VsZvWJlh9>X~(
zt%|(G+}YcM%#bj|xw|_<Bm;eQ6%`*ui-NR`#S^YX%5#SALpT~5j{;+s?`Dyw=GOwp
zc4LyqM4gX}WdavNSQ`AOL%_>RH!r9b49S9t5J{hSC}Y%D;oC&r!X9)7VP-x3$-h3^
zVADT2#-e#mdj~GA>T)*xUVTP#PSz0u6zPcixQO~sYxe@$*rv!ld2ClB9YrI?zs;TG
zD(m4q?@?S*#XiXE1x5@@TghkdeXm|G&d(1=I89U}`~)Wuj0)BPix5ps&E+2AU?>f2
z)s0;8#3bNocy!FdFckcB);l~kxu}*zJ<!^eW%4L3=-n?}%qkxL)Nm(I2hSWGQ>B<|
zR}!eN-}!ex7nB!$+EMZQyFOO!=iGMU%_r-;cV&6Eq>sr)QIbu&Zs+4u2-iuu=+y7X
z0$!b^c$-7Z(D7LeEh41g3TrYgECh&TZblt~PL^YFS(3Tf9bhsM>ta*6Fgc`9Rn7Bj
zW@z+1Q-$NvqgVGBmEg<J)<&)pBa}P6bomwlA@6T~VbwYG6T<A*TdFi103QSb*IIJG
zqC1T%qoh{AzfH@_i!U{u!mg4ZZ}!Ep;=hl~Og$6t|NW(YQABJwxwdtQfOB~AX&d`*
zU4=3qp@&>l%j%6EU<S~uUjVy=KGbo|w-3C;z^3|fYOZvJxX!)&+-$_Qu+=g`d#C;K
zPM?mQhFU7pol@HP;0v!L!UI>GV8#90-S{0*l9rrT&pI8z%ezKlVR8G+)S9xEV=S>H
zcNc_ba`QA?J96xD)-(K~w=wJ-5%{_6f}?ekC<j;k@vfn6zUd6~Ukg}hGIquns;V*}
zP94K?^>VsCwUXUQ4Axj@9b|ggJHc1}vdl1Jq>T#Fuqx?S+#u(G<`mczRq1UoyqAY0
zGeL98T@Y*i2pr}gn#RNcT>etT#6g)>F$nu!EMJmANms1le8{X&(E^z=eJo9jVCTr*
zPz0_JwfWzC!qcY>$4d(n!8vT?fzr~w-<+-J+wTKcKr2$xe`A!-8vKyufnd}T_=r)Y
zEz{2cv=42^0d+B3D{8jUz;zfO4?Y68N9}CR0?|hpyXjRCoX=0`AYwV^!kLG}W_ikj
z3c_)AaHv2M-TPGhQUC!h?m>vN@Gf|tdCiD-!`@MuO}@2d=bb49)q#rprgs=|vqEgl
z*XEz!s`9B^Ou8}q^y73smuz%Tc_Dx@cRq}TCA{>8jO^;XzTMt8@N*0MA3dI2qup1z
zEpAup0G9EoWxqoos_GU5JUO<1y1Y0H2&jmL!~mEiAQ*Vf!ZfK#rGR7?cN*_U4oXYJ
z!(&uHixWfagoLD-^<NJ9_wj%<j?7GnIo9!*IyjR#WX6bh3T-+~SdiwN8~O>=WYP(p
zB2Bq4To$&3_X1R67xMCXu8L?&#fUGzx4hT{g{^{2XB~md2_rJZDv2i6k1MJtNIiIe
z@l~UI_}?r7<`qLdNc}%;X=uCB$f>=}74h-);jzuro2j@uK~?Y)%61iBZ6zaLfAdRb
zoc_96o1Nm~Y{h~vuQTk+qe+EgUS*DKnq37rEDD=KW0P1xv5i7Io=Lv8YP)cCut-v6
zJrc+=^B3gI$@U*-G@I|lPcZ+&r242vNuEYdfmKic?{ybWKHCkXk7Z`p#E~ylOPfSN
zKW``BqI7pnf(SO)E%mT-OWAdoGMA>LVJj8Tft$4&u^!ze@EN9{Z5Ev;B61=&m;N>-
zfuNwR#qdz(eM-^p90C4gKKCP<wt95NcS&OP^iim;;PB;1#wW)KePZ<~FPH?0LF%za
z?{q>@){(ojyL;i|{dF?}42|M-$ynC2=G<a8<L<mWC$o4ZsqWEs?luc?PNJ>I3Kz=P
zn=HeZC@yz-<+k)F-PuOKfMAI3M}&S4dwVw*os78Bn?m;gD5LhQ_1`QjIp%7_^uyP`
zOd1g+tVV4+eQg2gC<SeVS?KMLHz>f!n!w=_RMg$mSIw1?U0H=ms!^t1)5P*auWelI
zwss0g{lN+&9)g!2Q;Ur#F<n@RAWDq%fN4$Z?&*{&gLL&GYjT$VUA6w{Jh;ZLUEHau
z=5@(g#tFea&8%$7&{uNWxGydUst^@Jr)%)4E&i@93d4i}k~N<WAvCvX{Y0_eUeg%?
za#l+>3o!r9!5<z7kzbV5@K>%Go1flb%YJfgkgDw&68MvU(tC1+zRnor*_oLwF%@;x
z?$l_)3K3khojK{Dw*1@UEQGmdq<wM}L*k5weA?-mJDwrLJ1TJsiv)Sj40F!sQrCec
zx){Q<Wjc^g_*Gi)Xhv6%g-%RX*@v`}DBWo~$$dH|$bv7OK)HRh@H~{)f{D*Gv2qU4
z7B(o8i2MQ_Fkh-0bESx&j;A7kFqXZ7E&)<!WB60oY^Hqn{F0@Cn5)PZlLR5|qp|(V
zqzVa+`fgfiA(EZ9ep|OA;lwDch@bE>t-gpU({T&;^|;Fr6=YeDGGSyVI-IVldUP8z
zZUh2lypY^gcRbSWMp;VRDQsU%QMw~+G(X8}&UaM3?fklKZ*>iE?tp`{`}Joj@>*Dp
zjt8!T4b6t&F*aEr%h9QUgc7RZ$4(xvf#@8swGg@Q|6M8psnGY!_cbyrcVqAr1n<v~
z{62a4eZIk`GghAM#Pkn-8+yYm9}frAX@JBdI)$u+!rE8HOYsRZ=Mujc>jQojs}Ruq
zVULNt*4WGbs&q#oVqTTc4bTQ?H{%<U6fS#`LH5M_asjj3=kXr2+J59-<sOCu{1_=_
zEj*I<bg+gSY99yM5`H~)Afio5K!mdl?`zW?eHrZwuX?Vs#tLaB<rlYK7)6fR#Wh|i
z{($x5I=X2J+CI)v=*c_5&s701uXmnq%v=bB@Q6C;k|}8+E6Ttu^8gWiFN4=uFCt*;
z?7r%lt<?*d!dl_j43DVX4oV;ZgO#+s)N6gXE*Ss)r%QDsnHPvJR3T;eOe1vnHecrf
zlox;`1ENxP$T2G$gp<8sFH6IYE!5MCz@EaMAzYY11N@|{kABQ^Z^Fca)d;+pbT)HQ
zY>euUxyDol3XNwH3=KOP>AT!srk|l_elR-;W2;aH)6);Wi(D5PZnhPc7XnrWQ7NFz
z-J`*bI{X%gXR;!QZ#XMp7#t@E7CEuOYTmyjd*Sgp-F$JYs#(rg^DZ<iBKp$(Xk}c5
zY>vu<RV5#8o^lD_I59#Ng6GE|v%b|2>j_4$MN5R<Q<iN2P{v)961mq_>UijT(yIb$
zdF59{AW03vSbe9u`DsuEY4=sRBOLRf4yvG+U4ggw{vx|U>U*3d@<NpLI5+fVzZJbM
z&5S-L!uMJc9n<}<V`|*@fD@_RVQ|qO?g9p=%18s*Au=)T>v<3!gKs<U%`p40R}H3K
z0}PgSiA(e-#yi(<ms^!*<<@n7;q-Q#$tL)x{=^H~XuG%fu50+jGj@K{xwd0HN=jlo
z$D=JvoWOGsg6Aa0YdCuoWcUFl=D7q|a%AM#l8Un44&;V%A5L$v9Rz|`=@{V5E3COY
zcg($r5|mW53vDMx5W(y_MDm-q!YRV1W3dPnqA7(y)RE|<_JAv9PZ}I+;1UCo5PmOu
z5MfiJX{joaGP3P?VSl#(!8ap73V)cc!!vsw>ohO*{98^j?dIDynvu<OTQm#Mg!#cO
ze4>~`CC`AUSKVD^$uctGgPx+Sr1y<U(zu^5bxNrS$!^by<hBS>$((o3kV%1vxZ?D;
zH=N&{?qSBC_|lzi9HN!rX9ul_8e|aO?C<}Y`5ECiVnsAosCoDL<9T^C6|Q319~+a;
zd=<p-H`fgE`SVohbdQop-Cchzlto)!B(XPiF+muOy*)^WHT9d>ggYgZSnoRb*v;dF
zuvw1G8>Y^Y(QuhxQuRc>H#_P2{#p+KB@R38#6aZ5bN=5F<f39lJnkH`K}VO|M@Y9-
zgHbc~LtUyLO_+W_^rbui-RodiFWsoi;|BDOHhW{ci0l<bwi8zFX2eO7yy)pI_5*Ct
z=HB~I>!K&M^0bq6#p;BvVPiC7NZs|>stn_)<0^D+8P9a&9b36X+_WgIwMcF7cQ^8k
z%X=rgz$9#@&X5Qy=JeX&6{AZm4Etlm7($SHWg4!lQ!QV8QD#M~urwG+BP0}6B!tIQ
z28c}hze^pUF2=s%Y<3#|-4wA+?|rfkwlRzoQ2odnkOE~tzd0Uj?}9sDRoV|caZQ)D
zN)VGMFgOzj6T>~$?;VUpPr=rl-wRp&XvJc(fAWr`GVJkdoA3qJ4iy<ZeSMCnGWF$H
z%<FYl(5iaC?1io>2oo8u{1!%)pggf@09gHsJZzsIAu-+koU`T+vZO1+6R)JS`SR7Y
z^A5Y=ncrYCY@IAHj}HC&N@Ypex_rB9?i)$)UBPi)B(Wif8LKTJP`4G43%Z)$YB|m+
z^mO5HAELsaZJ!zY;FR;^Q{5!aIMV)xG!pr|vOL!D+1I-ZjnnqK3*RR0W8S`oCVRdG
zuu$ej2E$+HJ9~@DlE;?h59|08^+@{hg$JYc;VW}0ntw=F0O2h|a|93Jhp~v`Shme@
zDw}vITxPQyRRxPW<ZI}#=8$N&kpsL5uL?=P?(4>R{&R(FqYr;IXuvitu0N#vT0hyd
zmeu}!bnATF=TWO)pO5b;^az+#&cRI5&L2G70Bqnqm!R4*)~50J{XOLu<$(B@FbZdF
zIkC!Sg09j|A4JUxG~}AudrlP$+&85RYP&sEkUF|lQ37I0{^e!OSeOWIPbU1#rpf}!
zXG&`%&ty;r@hB#N(C~vz#%UGHoF`EFeIvLCA7IMEU0C3R`<g`k)VJt?r=%<79kKeZ
z3_UoIY1cH%!u23wK{`{!Td&?l&09wh_t~XagYj=X&^een6eea+tp{JYG2lHTkklTT
z1HQzjoPM>xdVDMARE9rzqvO=9DbP|mp7m_svMf3t@XF|3m%5(pzHOMxkPBLloqu9#
zV5~51D0CKfvR3;DKVCssZ>iwHj-q$m{A0{NIhM3G52o(C&Hh>JNCP^Us9OGVF6jWn
zE#b`MG5O7p?j($rYerB(z(7jLB7jO>-NJap?eL)J&gS^+xVM48nI<M01&%%%%7)>^
zLdkom947vfDaI*3W*PuoTw56A1($xy#t_cPQfh{1SOX4O<wPGMM4o?RUf7rbyRTZR
z!2~xa3^w|oVEV2s7#w#RJVFL;U(kJNcnwhTN_eUzc^a@zr2MLL(dUq4akW)nq1?JP
z@L9+1RJumPfA$y6C5+yAEWKN;H5I{>n;%1Y(5|+#q{58G#FFVTQrVW1<j<RpntDAl
z{u?krqz4qZJEMPi@mJbv5B*}x(o?>KFH-;14y*L@h=}k5SRVPO9p<Z<zP-;)QbVUS
z&Gk8tc>)?-jL)=|!Rlpy9e!m(UIUg+NMZdZT{d3@!}UTRzJ4oA*3s_iPATpk6Df_4
z{O~wuC2X%3^JJU=UXzyQ2@G|or>rj|9Qcq=Xe}L1tgKue{1-Gb$z&t5qovn{q`igN
z>rCJtemUz}4T%m}*^Zl*;<oB?F-Er(J$fI85(Q$m`1QUTLgtPC3P7m%8IRSXlqa72
zP03*aL0d)oYaszn9rozERhY0xA|+nu@I3*{z9~_w_Va6D#tP*IFsSEXE}1aJR=ejI
zS-lghH>o#XOn=LX)464YrL1CQ_HT(`ZIb2;<@ALiAor=ey0rIdDT}+{hx`?1?K^<v
zef3wGKqYO6kL$N#GC{xI_qok#s9<Ls8jC+^Y%M;rZ%oUp*+o0kN=7e6w<eH=7ee@#
zfJlsrOw=r&GF}O4n|43NccbCyPjKubljv*Zor~q|UW8XPR)1|g-Q62jh#TJzxFpyR
zMPY${Vo+AsPOp{JHlHyWRxo$_sP8C66MOego_O_AC~mUnCUAMgTE|G!a)>ckR7?14
zyk_wRBg$(&Q_E*#8)MxuKb;FeC*%dHG|dy&I~_uH;p*J?x+ZzAMil4?hLAdcXyoH%
z_Fjn<5>PZ+{)7^1hsn7{#ZP~uMS4_?yX7itimv)p)j(G2wfY`UqL3u?3k6CvcHGc1
zR6(ja>{nCY@9n;~uf-}2C<2%Gf<8<?I10u+bpx3fhg|l{t_}kAo6!Cm@|l^5z36#L
z5=o}bkB(GL-askH#}b$X6<WO9J7>?A{u4<k&?BmOF<y9+dSgqjSl*_ll58DHzLo-I
z-Ko@Q5v9A0!5)n3rKRgbLdBbqFOR;rc^=^iRI7cLJn^H~S;bS}(`jMaqqMMev}E6@
zd_IG32+xChP<j+26G(5mcqeo)n4}o*49cW{``Md9tO24it0(xpMV;_su@#Nel0l>w
zBA#u*B+SB?&bca(ukn+~2@CU2bbs@{b70H2h#;nNnT;3#t-Lmk{rb7K{O4dn<DS_|
z{fh`!BQ*OUS*EOhRUfn9@9~v)NsQw@O4b|E{er~RoiSx5(hM`c4S#!`X~>S~#X73M
zp|??)wMs&$c%%UL1Try$(pZH~N7>=UDm)lHC!KtDVlJ|VE1&>Fd)O@>tfaS5Yf0&$
zl3$gTlha0f$1|RfvF_;QZxlaOgC7@AZ=ZA-yFn+ct)ewfZNE<A;aSK!9ypfB9-g(5
zawshPjX!)*2}?=T>Y@;?^?{9|FniDu3x&U7LJPszW|1pfg?m^ts7ZhP12kEc{p74t
zJ)O(=NS#1(j(BkqXT<`QLY|y&hG=y?Sl-7;N`4wCk3>(u)P_Mq7{adC7xOclRf2?4
zf@BtgH(jF*QMQuAUvr#3$cvLH+2za7(|*;&LLeSlUD{H?xhm1etd3i0mj^WR6Kw1H
z{(@F8(G7nQC@l5ohO}g-kxpo3hh`?-0qXFx8`(il&n8dv^}aEp)8<I;TN??>vuq|g
zwJzDbf_BsALq-i8yZRWpZ@QoZLBjHd@5~@2dVLD>W#!)Qs@~M$L@RU+4#q5$&a<ZE
zS`)+?%Pir&o=aS&HW^Wf?u{~j4@u%yevK4k#RW2_tD7sri#NQ%;msd&6&{EvQ3*d5
zPu-+vn5){P{BvdZOdhh<`|ihV{1)_vbJ4Z?D*ddL2{HJFyXNl<9jbF3<%I9aGEid{
z`W&PwERBW*Tvx1P)!CCT7{*Y_s=ofnK>Y$`Q=O|)bIDU+uf1jD$e}>$xVbudiHT^O
z{K5whd77|KkK@rtmW1e7X^0MdiC!sAB~MJCiXv?33gycZg!%IPzCmO*kVVW0y{URX
z2fMaGMz$$F!RRo{;;d&Vg#|qvgqZn|;)xAx>3ZGo#fF%Zva1WoU5rK|F;wx4zVUv$
z5FjcbXdmqaf#G<m(>D*w&)J16*?|!+BJm<FvrL3l>}(Xmp~|rwoVvUxLe2>BaJnYR
z4skxw8VikK);G8NJe_W;|E=3-f`}Gu*TwItin_8HeOeFB3KDU<B3!(y+=iVKME#|e
zt>+HIn^x|H{?-tvBBd>(aZsI(iY>Guiod}&Ez?X!+R}6xaHd1rvVRGw@n|YzSp<zE
zXt7S;&2q;|NqOwM`2WzC2XS$HV_pT!RVsy(AetcxPbU1j?C$m!lNcQCQ1yLy=SYXN
zD*8zstCcTnItpYz&x&{s?2CF~%!)B>6U6nLO)oIF%bU}*^%vdM;2U_3(^b(3f13Vo
z$bR=7KM9noAR`%D;56rjbj<N~n3t29^%o^U;8*PwRFjW-nOlfqybCrNgXKlH)RYx~
z<E`BeSP^a^sI<fzvpm#X6~rdXn*3aExLk!Sr_;yrNTSK#r+<ib0}UsAF0N%h(Aj2T
z9Jb2N-Vbo?<<C;sxR?C!c)j<5t2>*a*DtE}fGG5|ynEh#tmsxq_}gJunZOIw1AHN7
zg_MwQf@*!(uB=np&SYZ&!r!R7`Kic0?bPMd@t50RUKeGImP`PV>YOd@f8ta#?XKgN
zqPa$WL<}(WY|UyrRa6^==;R1C(^3rdh!3F9rORU4$k{n$IFCwtON`Or;NUHN=9A_r
zSyqaO{kcyS|CM;s3+gWKvz~c}by_e5+i#nX391JddHlt*{+dd;Xbtm}$_6Y7X)<q;
z(`BJGWU`}$CwF!S0)>_9gdA;Y3=0u>rZ51fgLcHKczJA$lAzbza0%ivr(M3%<y!Ny
zx;^bM!!>gbAG!OuwbwakwOh$9nKP$TM+;(NCT#Yd<^-FAJ-z3VG#CDRfEb6nIZZaE
zh+ZZ5B>w4b>0m!U0{HqW+(URaD0ft|uhZlYM9}r-H94QPt%_HV)Z57I)n>8n78g*+
zi6rDX_{9iV!shq?Y;Lxn;e_ynB<)nR>cnzft?|8mHR|&@Gel2MY{JJ*!anP>j~`UY
z_kFN0FmQO_yb|WVnYv|fV)WJ_Pc8QnrmY_OBc9V{+#<Z%Er<`#xZ{DvsrJQo@J;zQ
zfsTu%P<N=62#CN2_v6@O>F)1tGz*8We1w+35Lr4e<yfYI5&xCi)O1mrw%EJyEyECx
z7n6QA)gsQ&b`UKLm!~zN5c`g5nCzj>0uF}aiju9U(&XUVJu{@iKJizBj6M6~C9igO
zcj>su3*gDgj9&Es;zW4{eDU`ippPLM{(b`Z%!blFDm6_ekby*b6O-cH+|M|O_v7Mj
zfifkc#l=Cr@v0<-s(QE8j)4+~b4^L$zm)BbBSQ;`1CR#Vt0Rhi$;>?h;rBKHAaiY^
zfTz9d%C<iXewRzB4(8sE1A+6@EzZjWf2K;O$>oBvp2VL5?yh>If1cNiNk7&?Pf9As
zfP4?kkp+|OO*e)9m2DSK87t&(OtGwwqE_zEC4Pk=@I*(AanXkk@_$WB(dXzbI-O4i
zDZotxeXX*dU*I&Z7V0*mHOl<IuY*5hU4G}gYDF-X@wd{O&UOX+IQ1Cgc&=dgICPnB
zS0$`})i}0zz@hBp^R7k{{V!D(_7u!nG0oJb<r_ghoWb~pjD``#3B#FHM=R|-%0NPS
zpTV@@srmUo<P%AzUJ+FxTUWMT>Uh)G=N@?pe!}BvM-@vk9O0L(E9xY(DB6D?>npYW
zY#69^_7Ig8`O+duSK&O9U_xw8S0PtMPI>+pE3*lGzse_{D{fCRzTA$go{$F-WG4n6
zKc8ffp80>4dUx@I)3W?No)0$T2tfd)f&y0CD#uOpcnYw)?9HE_aLc;|J-k?+q4=Z|
zXC==HX7ZcqY?6YB&(t;_BKV5dX-L-Bs_$*6HHkFVIr)F*?^LJ!+{U!!VVOb0X?Z?c
zbizuvP)56Hr0VxOA1!ax((MzkK0<U=yf-#QnxK`eX?@eqy_%j!VI;%s>8<?`_ijd$
zb5Q))jX}2hY?#<q=D49#==P~fUPv^@gPr$mA6Nyb8x5700l8pk*R#I%Qm2EGxcBI5
zLmud5fgNF4N=?-)<R;;JszJo+&fNA%{QTZjCQA4zb`(2PMge`M7%L8sF`8R*^sh<F
z$i4aO19JV))QeWK{;X(n(zPUM=80x6lLfcwgF;I+O*hG`9$@f;&Czk9)|DEf+P~e&
z<*ebPU+Ll&%G0dE&edqe*hz*GzEBV==i+PKb}l;#Oe5ge2oT<OAJ+cE!A=EMx5pT@
z@o{U@9+dwJw(6<a&|lajf&Y}BSA9Y&hZSlx9IT<ob;e!c1em5jhJzLKxRyYr+8{c*
zXyqaA82kJFHY2Z1R>C(umPr}|R0bAhRO>Y3c;_DDz^kq4z}=`e@l=|({WBs%`TFJH
zLXNtV>&YiGSBv`1#1DTGws|esC`Ac-Zv4x6?maF~Fo%Q!PImi7|4vh&C)uf?KCQ7r
z*nC6F_;$g8UtG}?Cb_{MxiW^*q7Pl~<Mm%sl8&fqaJq{YF_jNzRL43GBx;6jIMh}d
zLSr4q50ccK+_uI-PlgY?=q_uG=QzH^w#({56AFY7_D#6q#-53hOn3y5{mZo>#w;<?
z*<bfq0=vt#hDPG=xhtY@DeNZ#Pjae0h!Pu;j1Ub=<C%~ExY`=>)iOGgm@rPg^-AL!
zRj_J|a;s1xBj)4^lD5brWGR8{ABvi9ozx3FzV8bj?WC=UU`ae@xF`StEfv=@Q~{4Q
zp>csUP`uM@t<%;oqfP0-PT|rVy=MOFYbxt@x7B^Io!T)%PoCEO=%Kw^-F=)kI`W00
zzhy98IOoHOd+4mUEhG91pYfG6$T_{Z2)ab?N%3Z#kon%WJ|h_Hw1FM<Rm@i<odW}d
zPG=jsH*oM%Bn5n-2MJ#kJs4UQGg&xM7excnB925ZM1!}K7A-Ded<~b<H`)zH7u=#)
zp(Rc%=!kA&|D#)1jkkNLFj}nfH&ex1Z_;9|*!yj)A<zP?o4Ct*j`uBd-l_L^5c-TG
zd9*7UN!xwa!}|Q-^NNK>*GJ=yWoY$9`X3sSdD}0oIM44#V5Iv#T=xC3pu+ftj(c{6
zXs?eC;+dM964zpa7N)+#uM9)urVRjPEgJVWG_gWxNaPX+XqFc6I`@#81)vGABa$9(
z_hWW*-ET6JXuwJ0rA2OnMrAGAR#ui0;jgD7Lss%lfu`*7<zHF8ly_`fiNe>SeW_K2
zDtck_#D=dqP=tAP7}+}zWPNUuiea-q!}G8tdTsQr#wL<Vsr5hI2bMjK<RQlT7q|W0
z5e0I&o`}i+CLX^NijQr_*B&>0qNNXl#q^<F2-|debyVy{U(D>x6UAIjbT*PmCo(d~
z6L)E%yyCb+ve2n7#<L}PxYRNnTn_CrB}<@3vqFAiJBkZ_I}>oEO74psc3^?36cey)
zbhv)*T7n^#V+pVpqWqB=7*^vt{o-yDGxcJ9v*gf1BGg4{a<#HlTAjl0At8Z!s-*Fi
z^xnhRQf-*|f|+_^n}NLQe#&7IvCWQS#<(;VEp$`}D0iP&miO3N*A}y%lyy8VF)Va3
zGeRB^99UDn=#4H92~MY_gHl{uC`$eso*HQV8&hgyrJnwX=}lkZNPq(XPTD?q{sisQ
zJyCxCcLI~oX6JnECGYEb3Z67R2K=?;MYaL>P^DnG_<Uy|?(!V!vmQ$#n(E)~rs|#3
zag(A@1pVoyXXX#P?PCNxR4!cgHHMt;G;3PL?R~1S3D%GjKb*7{^P6N4JU?;4R^p$S
zTF2jCluIP-apWrL#e35xTv{$W8+23Naqj+cKjVQql;~dl8|xv#S;kCq__UJ%FTMYT
zv_tKjGvBG966AcI*KUbtjyB)%DP(MkbaCXGo&v*92?O6u^XFVA-}D!Km=u_T59oFE
zJmIvi^>Oe8<ZeVGkB#^e_%nv%SsnQa$H07IYyMbEDHq>HA9jR@{l#=mU%=jk=E|fh
zJXbM66&K@>tQ{Y`*(+iSMXIdWq@tP^g`iL^;%vL<_j=}UGc{;V1ta8o*&L&tr_{P*
z6mG>gw1BsFdbrv?oMp&pdPVAbDnzrnass1q#Gt0-Ae#k10l<suvU(^b7KOgT(ENw6
zHk&r^m3io|TP5e8f|%!{f^_^k&VpQZ;p&3uDXbJAaN9?2A$I2v8k&r*7ma%Z)<kZW
zd{PE_D$}l%nNTH9S;!;=y1XR=XZqo#Zkm^EcKOSNcDZU`xnVT@x~@J0SJ&7tL&{|o
z(_$wc`rW4fs$?ZQP|?n?b_Xxm3f=|_FQ{2g7`B$rt@f5a+uHA8r`o!FwqC)h1(JW+
zCM*B$Yofkb@?>MppeNGh>RJ1V-)x?f1c-kuWN=URJF={traHG9?&exuSGDF{AH$`*
zmYWZ?Is6Im8b-X<R--3%J)2pW)9L<dV4d#AD}o-OjA9c}62sI=IeRP25LJr=e@K%(
z!ZlU|hgP?fv27R`Wq=d3y>)eyi%pE+0XwTQNkTudS9&f<adkG5`jQa<P=eWCxX+Qk
zl6cwpX&5U#KDX~<q@IKR=ko_8MLYe+_+z%c6-{TO^tZ#-tAy9oAtUcd7@mxGSb?|%
zy)EoQ_I%G0oE;JBi_atj7wB7VcW#}*xjF(cC+`(fz8aTN(!z$PeU=BmYwH_al;?+E
zm7w-$sMTFB(-=eWZQYK7p8i72;{hJM)Xhz;5}W#r;NCt;r8uBfWkA$c!{*}r2LciP
zQ=!znDfaNb*V*8yC$hCIy*n+RR-0&?e+{!5-g3{o=S!APppVG{A8_#cC7Pm+2p~!t
z00ZfVgVlfUB91b;$vI$$7}0f_rT>Slvy6*kjr+bLC?Q?a(hVXF(k<P!fPi$nl%yby
zfFL2=OD_#ecXuw0fOL1mGn{ko`+0G{+0U}WTr+dcmH+tu*sPOp#fo9BGOnmEo(@IB
ztg8sTO(FyF0eO|!Wd%ecMnBlWtf`1dr-KvvvL}V6EjIjbtSE@2<yHvHEa($%vo$7D
z@Ok7oB~|h*G?=^{OV)D+2aXr2;FYUGt`;|27UNhIAHkx|kn%;eE^9Y`3+Ga=nsr`M
zT+PV=zBJ(WDQV2T`Mf{RcZl6x$mk8*^$ObK#WVbZsdDTy3vJ(Ewz+Fw;)#lT21ZJ}
zFITNZhs~}bzTJd7#EVbv;;kmG>prthpN&ML^!Y(TKBwfqsM4GL<>CG9Z4HKB9Pt?f
z+eTdxA-M90+v~Edorqh?Ww`>(9Fzh(FQ`FZQ3Y+kaosr|CSo*<xZTv#<6|*{rwCb`
z0s%D*&d|a@JEy5RVjw62!r<Mp{Q;L5%Di;V0yytQr2%Ry5aM&w)xpvIc)QU+3(es|
z;}Dv>k$pNs4LzE0o}J(0!IBUO9>FsW(vcN?oyUHaWApen2urHv4KYEefYU?j7Yw?e
zZaqHD&#jJ~+(-Vz;M_f9=d4*J@|xY)SyD3N2#<Z^Si*Fp#&sC>N-?Yh`;0y-RI3$x
zo!GDwb5!~l2h|j!kH@sH@abMB=Hs6c-w&9S7JJKFI^Z_q<YGPpE|KG==Q0CU_fhLF
zcpJ~@e9<;fC>CxzE5McbpE6<umu}v%t8^l)nr%joY%RMeK^oX&%_XSdmVjAeWf*m6
zv8P9WmU^t#*3HW`{qW31`D1(uvEvUyMhAh#aWBbirC=wdWzcwrF)BWOk3r<?AI*O%
zf1rPlUOTI|<l3uic~9^p6TAHu75RMt5khK6BAN+09QSpp%Hf}pWYRb8&k#^D2eBw1
zh+}L|$B~!M-s)i05v1isoazG@<tPiU9arUtYgWJ??@O2}GV#mTC#(oMk4yLNp+ZO+
zZ2tkPp}ARvpcC-;;+OV`7w{g_8>xT_;b6R8RYk8Al&O>$Hc-|%3Liy2Wc5ASP~VWa
z0*6-oikW)Y<wgRYX4ZSU!@=88eRWyxF!*WRakGeskG;uDs3guCWy3}kMLD^3(Wcc>
zn6)?Il}=CuYWADZQd)$20=No;fASXvmzkce=Tg;Pp=V9BT@FsHOgKGSh;%?ai)q`L
zqj`?*&lEL1bEzbxzL1Ld#I4J+!(+D}$u8Qk*W9HdCd*}qH@2$d0UMxUS{DQ_IQvDo
z#29@!W~ibUukpj^Io*QU&Kt}D5e))ONr>AC=I;B4S?_1_TfgwJ3uoyE96ITnqZy`x
zIW`NiroK{m?V5re+|kZ$eyK`MFwHPaX~x)yTRW)PL{Q`m5DZJ!o3H#NHW&^vOJNM#
zXgCZ-QFN7?U|Hx@J=fz|@?CHxpP<xYlxB0M=E&@017v*@Dy|Mie;}T+{6jN7p@gDR
z?);E>-NBLP49KxjXVL>fMb4~M@m<ac>2okMl3tNg!DC!`i!e6HO3Vl9=1O(q>rz5-
z6^`k6qeF5YpC6A@lG-QW19PYQ`-QI#iWL_vj}i_Bz08k+@IT@G-=}@7#=n@sAJ=|}
zvYoVII;|(Ktz)w`QoD+y4qP0LaXidl_KvUvwAcokV|V@TgdS0Q%R3xxpTu0`Ppqd4
zK>A!ve0>914GK+%Jz39FirsuegJt@qIgnk~$b$q#niqv9ec&n*v_cg=-!b3-vW{Q+
zAR!xqa7(d-r0hCrwr4i-@d@LaeP$#*vNG$u$dAB-aIsVSy&5^l!{nv!QAwY5NSZcY
zQiz>!tE}bBkPNxM{@{F%K-4&F^U>8l`RYX|P4EXWK-kaM`r9C?>uyEB#u_p5OZIbb
zZ&vIzy3d~iUH2bhYgQ4`vVFgaxqq6wKmGCzne>3;;?0vNZSd=5z~P)h@UEZ0<Lx_R
zq}~Im_)?M-Wae)$>H4W=NovW$4QmRoT3CR{+sEHgXr}2iVRf2u#6FGD=`h4Vx|my|
zb2^{K=VN7c9j%r(5w{%OYA0Q_u|=0->|f8<y2)`<^<=Y?;~%#{x|y;uybm9CQ>8q@
zXoOoFsi9sE7DKAfTnO=+2E(sT$LK*}HtNbb=)8zq(jNx^x!&T)s*HHpqxzrcKmsi<
zSA=m15qy+y*&Fcss)AksF%bWLYJpNwZCIoclT%_5jTIK?17gp*Y09~hdes(HO+<XW
z#5*ac8$$-}<a@Ylo4J`5<OvxCA~r-8N}_V|9=(?9(vqcUa7tNPu2Q+Z%=Q~N&Pgm*
z3)e{HSp;HYz{7BB&-0j|48;BdAjN)*@mGl&hpF`#sQK9`y7xO^I~5o6t3(utF!&H+
z^XGp)flVc$F%mBOvTB|Ur4PD<Eaf+8SBIEykj@Z$T;>nuMqBdLUsq*m?gK5@bff5u
zUmK%HW&j+4DLDs*{ry({B#zba^{Viq4eK!C-=edG+PA!j1cW0j^>ETT9ORlVZiyoO
zPwl8ceF5NL7#<vWUye*r!$ABLkFLnM5CZa2bwu3;8y7Nf$j4QbUi$C9t=WWQ%$~3J
z;<!1MtJ;k70isosE0>$i>Uq{w+LY|8JHS>LVyK3%<ICJj2c<R3!f;%0*KbGxd+?P#
zX#La#oe%ON`k?}lAt*n<JrM_i>55xJVK<b;1;5>Ap}%oej3UbmgbYZ#y3wGt84S-j
zqNueAEOPr;j@YF%zqFs^ftR5XfR!D*$g(G;!K&1d^Q8t7ICHtcgGLyqaz9yMw}tDv
z?`f9bec6s(o`Vl($wH0YpRZ+m4}bBZ9o4T|4rD2`_N(^Q!E!tlL%^~nMDl5T=H+yJ
zyr?Xznc?>ddm}!<o2xgf@KxCq<ZQDSC#xhJZ&U?II_tk74YTo<b7-J9uHf@_l``PM
zF<%B#Lo<IipPgClTlSwnxtz>}*%89)aRKYb-uWx$Qiq-#5`Z91b=*Eo%{t{(AcKgn
zgPThU9loWlG^XRC{DS_syA?;9o2EM(LWce)C^0XXe+SZ<WglYW$;`c7|9gIJx+=0?
zUvOeX?kRN#$AXJIqpqGRi=l=6OtD@S`mRi?06SYE+*wg~t3h^q5(`!4t%6^bZ3M9v
zh|CH<8{HpPpi2%_JF2gt-fO+pF~EWc&z89=irrrJ=2HS0O3-kp{N~H2l#<N_9cQxc
zdU52Y&{!xh0~0I!oCi60b7R6*Aw_n|F7-wHPpZyN=JPPB6P7RIQrv(mCeNlSfPI{5
zxr19ElgFdU`fNoYtzPNhTnQQ+eJ`31d3t%MpGQa3X9gE_SHe-d!z5G;3})^>tzOma
zTtJ_rId?eRiU$@f&s<XFz8Y$_DiTHN1HeqxP1t&^R1Ko4qzWINEnm~ofePH~L!;Yw
zNS`Pdoq&Z@joE_1!y|g!xk*)33dh8-lZy;%Hu9jKNT9&VTbrvH8`<WlDFcUyLr_VX
zedv>);=J!5Txp^6YNG*Aqyq#%fXbB9^GaL<l)izlp@2@^Q}&pwm*hWbFS0bkRJS^*
z)VEKGRyM+FUW>M1{MnD3R|w;u=~$xa%zrTrGMNLAx^P4~@UNe}0RgmXfg^b1)K{;+
z_8|<vtO&@)rWWKYR7b~2<SXnvSIf|1%GckUSD|Ap9*%AY-lgpe%BgIwD0WitUcv{-
zMF;OXNEleaL0r%pCZMey%fIn6d9Ooj@HidymI6XPi8B&D8u>;y$RE4=9cAi9xw38#
z&gpq&G!kJ?gD{A8Cu3lRhyR~@?+baOCxMT~SE%1h`1*E@K|Kq;+kIxu&sg!!%EZ&f
z^YUAuu;wQ{DAQO<L>HMlE)?MDnc+6!*S@pIiYLSmg@5q^zYUz?f6Bv>)3bkVAfl}<
zc}@}KpA=$PT9Ae8^$B~gH~M)T*JnTUKq{;PQ7_EmoJ__t(l&u4u2!HM)zqlz>nH1!
z78mCfGL2LR1A%6P#S^o$jMD@C{rQcJpkmKfZR3bChiD~JJ=kjDN40B$KGvt?%{wRX
z@$I{LT(rV_RC#+9Jn!=5b#$31CiE)gmO$|f^I)g;d?xNusyhS%9Zg!V(i$oU<@S1q
zW#OBF%8}ptEU&w|&Z0@|a{&EBa1^r_?li!|AGIlMvbV<$>@fBi@np-R!d&gTqANC#
zi5km{D;i?;F}`q^q$LDWM1Ynh=X2$FT<xdqP96;9{W-p2#ikXGo&7!a7dMK5k)H1K
zDg%Oo%qX~mt{twU&-*ehX#Vb=;&?TJU)wa0XPJwuvsM6TLwuP-yfVDDT=3V<7l$*D
zp$!0TzK!`8r13l^<J}{(YIS)BS%-}F5d2K#6Sy2AsY+1gqUCwf!~{B3VFP^Y_cKS$
zI?6U_0aMlpk?UJy*-CWWn0Q4fd;mX$AdF5CC7mM6KpNMPrK!XYkM-voeYEWR?=-aB
zg@_zdAlDCJyS?T3F7=QNjo&vamM_gmjj4Ifl^n@C@tj;+Z&&XpR^@cY&XSRD-i?*&
zBCm!)mL*3O7MGR`vHtl!=@^ogYVc3)=r^S}`M}n7G#`hn)|W=MB#@wR>5e*^2Sp?q
zDCuG*V}kbne6MwN<RdXJ=k;gCB8ya&QM{l)n_-bh1n|%^?*u|a$7mgPL?@xO9}`2|
z-&GhUYfG^@UH%m0{kD0DdaKRhQKgfx3NXKTC{T<ZRYpTUx_-m7J?fhF{Y6)!nXFhY
zY{4ohLvMz{c;m(M@OIX&^BKWZelKmGNDu|qHO&W<-B@+VC~X4B+8%r8g9Y8xBx%d@
z{#sZhnPB|R&M;SPh?0;?STCriw-%=LgIwzSFyGJu74bVK1bj`>5xw}QOVhnk>j?Ma
zmV%f(-yL2+B>QN!Z}5VkvU!8OU+LM<m~m5Wd_)CN_^jH6kguvM%h8JmQE{BXUuFI?
zKGTqmzci&@;WoA+%mG}{z!w@wI(K^y6E-6hN6wg%j$Qj?2`>?`dwAy~^X>G<ZQH9i
z-aIm)y|%2RIvE}XpHWE6DkwE`!%??`M4$O;=+VS-b$>u(4yw}O;tq|8miwy?N>0`v
z<X%9eL1XUCgSk=&nL~34wBB}UQZdpL{yb8DqpJQIb<AC=0MskJtuP^h<R<ayy|QLj
z<t#&71WEp63|rw_eDXbQ)!){$z3)fbJ<hhAjP2}|Sc~5pt%k9D3fIsbB)G<br%kU3
zpV#F5TXdg@bV0j6(D)?aaX_2_-Ru!IYEtRxQfU$f!Tr+@x-?YXQ3Nau*}XuP$w)gf
zvliBf!e0rHX|jJqL&H$@q$tSKN#l#8vV75-2J1{SejY4s){ScbAYAJ>sXa>Q4w0q@
zOk=Oqjv<WJnYY5FA@w%14Ab3_8bvN8jt=Gu1OY{{);#`SakMlHKmHxfl-SU-{=x_?
zADSfCPAX!3+gW!~dOLG${wX}|H?kl;cBFOn2MbPs3D2Aa#k)aD69eQQ%+e!>@JrV5
zHLRH|sWd)Bp%1JD=~|=G8Z*8)`h_m<(C$G4A)3izlmM4WK|8r?e5a@kL~K|LfQXS}
z_8OuYDs|vMfXH_|ZQ!;u+Hr0;hKBs5ID(ct?_agOr(m;uC-e`R?rPOjhsXwsB%PiP
zgjrjLg_QBjOIk*wIYsOnRa-hJFOLw*vvqRwIQ3B(AgEJ4^{j;~>jx<>LPd`N>sQMr
z_DJ6fN6eqVOtI|EBjmF*#r5v-bv<q|_mlVh2e{1ev7_-<{&+LO#^+{pe8?&_4^z$=
zYU<)h^iJU>D?L?CN0{Q<fM~$@kB6_Ri!WD^qn+hp75<Ydvc&^bcQ|s63s}tuD3K3d
zp=tJfJ+N(&8GzagyA*WJw+o!PKpXtl5$*{nUu05?_gwX_*YV?LS(mr0VO!hYvbo5(
zC3)V7X=Y)msfPHtYr-PAtXu1~AsS?upCixjVk4b>6O07F@MKdB4pPgK&A+tIR-6RM
z^x3GiuU`2%ON>S{OJc8X5fIgVq^T1dyLWg=uH}L<#DC7t<=M{(7z>9NcF7d8i2;jF
zdq9n~h$MG3_Im9oQpfaI&hzEWpQ{CFJ|B|QzKhkpGeCoEdw)8%utJb21KbwvdVH<G
zxmN=lC4ht-BlI8|=*(v?5Q<S=`!%`Vyc7U*Zkv&dvqoPR)!56pnPo`fcWZcQA=}!m
z8vwsUnK%LCNP5S@zTlCIW1oTeCz~)~(}Q#AWv9z*pg`oG3FgLh&;pmWmZghD5%!^W
zU?(3HMX{djo0c3nFkq%$CW(W^8}HLv3tqHFRgzN93FV=<W3*eiBm+m0oHg6Dg^Y3O
zcT748W6k5Ggh6|i#y)suoMMBcz$VG%G8%>9y?O0e<%(?uTT`xK8!Pd>fPe!bLp$8l
z3)q=FX)&!>FO&;mJp#@{KwJvIjNI&`%Q(dWO9#ZxlJE9Ip=EkpF2&h5Zl$?P`N`L<
zr_{v+4fDPq_4N;UYEz=wjjOjpiZhy0YwLG?xdW$a0c1-f7uqHQ@F-&6%~!IXYv$zp
zd2s`{vDWPayDZ+NYaZ63mLvgzeH7iy(dp{%Ku#mk&29Z-j^*U#Zw8fmPq*=DiS%qY
z48u+S0>-kUT0HGbhA^rdP%a=DL{IoQcdhSnwjREvNH7geGZ*ks$y-WmCuHC<;^p#5
zerP-~nX7noo19Rr@=cg#@8rg@gLG57O(ZQ^jAz!!1RUCxEZt$8^|N+O2|aZYaS5){
zm+c1~j~Th_DN4Tj_e9qFe8OH*o4XApPU|f;t;_8f`#eEV#IEi|%+a+{WmDsO479yt
zbDP@LLQ9VqB=K1Jt&#kQE|=wpsA7xDC+gr*KfpiR0yBB#GZnwOL;f^Iue2uUF3+1$
z<^z;lZlN{;=KOLPws!Mpu9XU7BEiFk!>8m<r1RGv-~j_Cf8uavC(U!ZqOw59)gkW;
z{7#)RzahC<UX``!P^k<5!6ZjT2|A+&TBLp&pI_rqP*2B4l8I|j=6kv)q65ZUW{nYG
zz;s<AT%PxUhx<%!5<?;QhhFjUO2S}Z@0CRE(Uml1ZWP`;J(BD%Q4%$pWMDBKneCQ`
zKdA#?lca5CzfeEfH9VhGnyzKk?``5i&0mtRH0k+(q`wkBASvHx5wBRl3q`2bNnqdM
zixy*l4Qyxf8^n+AbQ|)?W;b!teGfcI<^&w@gR$`@<k(s>Udg=x7Qi`gE!}zRQ(uT0
z6+U;V*`4&7oJJDFXdZ!xb>J~ENi!sctx4FiNJoWDUZ}}s*KH?C+;UmlI30L8p^Sx;
zGX;tlcq_AXAxmrIpMG5#K-^D)s58GRwBOloz3eY^?g4#Ej3Vz2d+i5Ys*|mLi7?JR
zw^%%LM~sMllCh7xu3hGX>%zqz`u?9lc5b(}(P$=3495e{nqE!K?19;`y-LTp)p-tW
z&A`IK(7?rom2bAu%y(5ArkVgRd1&!zkJTsHku>~d!_fcx$}19-9HNJ<O7HR(gTjE@
z2(D>FC4!bt4bPFCH~E}<g2nEYjK=$|7r*D6$26`b`7IOsSDFXe!+d7TN4gYZCYs0b
zhj+lrUxaj_=-MOtl}~69bXVTpDQ`x$?Px4>zwxNLtjTD#aEI6&!$ZxM=AF4peobwH
zS5xM(Iw(A>lVj1?R?gT(BE^@!qO4FqEvbaTYST#)LcZisGSg2f!UU-=gAR>N49>I(
zca)0u9OUNIH3;DBBxdgxpanD6FInD9yCHnMp{T{U!^+a)D!NI^Sk(k|bbZVgFS**!
zRdgfcsIZ1Y@|(F!^niqfqwN>nOOrne)ehFdHkozXXn-Ug#bZt~5wP3f&kV#j=?_O@
zc~*1KdyPS4Qm&yXg{%I_|G49Qp(b^7;9U^f6<V){*cyAT+?dr@Nt6{CisGwUo{`N<
z{Z@<LO(=;j)+(|_IMecu9CDu6v3P8}uT$J!rL$hyU5C*-krn1eT$vCFWp1GuUcE21
zWijkL2X^9od7NozPq>}~yD^fh${S)QPi%M$j&(kH?rLMysR6J{RFXC3&Q|~Yw=S)O
zVn`+PC)WFAL;`=}oo$0bnMIcglI8VjnK-Ni=X-n|<U*%GP}-IU?soqwRnr?@TD4EN
zL=@y#&zI?hqq-tsJ2@+t-s$CWiQyJ*TD2~k)T<Yo8Q(|%W60qEWT?Aqli-@?_$vz#
zc94s#ha3ZCR?|rZx1-ot?oN1JvL<nU=vWP-GXdFt;O%;V#hUNd*Q8*=L=^4oO>S3z
zMNg;g7*@aP8A$ixiTtD~ManrVxex^_xS6vCqG<U+XWqjqfVHQGc6er`I6SuAl4h{^
zR^)j-r<2RUt<)yoHP0O#K@Tu20ohSGWdfT4I9ib!6czJ(yNIXUc8h_K)upU0uPMIm
zJE^FVC9r~xgG=f7ceI!hLUjOp;#@`Ww{b*oH7)rSDBZ%zg-wCrno#?)dD8&I8N&1=
z`i?8D(=nfxID!p%T<v=M#mvct7Ee|QRkdoVR+jsD#6q}FRmsrhk5OU1FRbI?ziw=3
z0*4g8mzMrxN@0f{1ooM9BkkBKqLm-k5x@s$2V7xCds%{mos>p>bkMLEVb59dr`LsS
zjIQ<+>|isRWxXN|%C;-HJb@qDXqn*DGla);2&$>MFR1<6H8(y4@&<Q%r{vPDdDw=H
z|MsV6F-l_V!#Q=oZqwvg-WpkdC(vxo((5>^OhKoz8EE&IY!RM%osp=^jtZ}cCYzX>
z-+0MZ*t%sSm0p`eaV$H*ITXe9_`vdjeoHRarDfUPm8$#;sUEt}-M#t4P5+*$q=dyr
zn(EhKhvO<U*LK9-E$Mh%@U8i)Bg<0gj}L?Nr?0Cnemkt9F*0#Y?M@0&i;q<U;nSZx
zcT)HsZ%jLh=Wfmh8e3Dfp|XXKiD9>4)ly!CYjym7%3t(*<i%PF=Wt~S%&gBKR3(Uq
zw8;UtloZ4tN|hp*<nJR51@+EvYO=8<J^g6wQoo9gfg&_67MGLfUwCH8Cne1}+P}I;
zP6LY#Q4#1El~UA0c&oX>ZDO)>WPrZ84R5!`C~7<X@^ZP0H!dN;0x#?kTk|PPQW)kZ
zQ{=>8@>;L^^~Tclv{Ykn;vW+C!|ySF6ZBs$ap}V?GkYlcNi%ok<9>$Ffwj&)U&)#^
zLkrNZtvA;<GE`O1a*dl_m6-DPxl?dd6bp<)*#E9Iw+^^#H|N7oMFzrO9-+sCCqFj|
zsD^as^Day}E3gQyHk1v&@vYS{3G$>kGSIPMKExRyvs=cO$NY>x{Xw#b01Hy3Y6H#I
zL=#lC$!Uu4o%v{wWF%ce|6105{Okx}?Da>U@Q@H6i4wp3#i_tWcIn8H{D~||E}@Zf
z+6n>6hE!@pGS&~xXW8{;?oyU)M#Y;euz4KaE9kh|1IY+4M>F#76$)-wh0`rh`B}(e
zd;KS+A|1ApQXKiHE4JcF8RFBc=8BQiYQb#T3<u2#E@1qY$iy;mUkTiZZwtd8-Z1^!
zVBdI%Xv&;OL1;67-7C=Cao6#c0na5Rs&V_yD}(@l#an$zbyraleBJ51aCz3b4hJ@)
z6z<#X8%f?*CO^4vN11D@X%#tfE^p(nl;OYiSADBE0vP;HbKdrF!Xpm>1x%;{GjyHS
z4r{`{5t~#)OPwSlr=>YRF08cqmZ_LzdFfBj=M6uUUFAnLIkWY&QWD_%TG6YJVIR!T
zcv|d<t(E3O@8PdgP?=RUxpTjT?tE-&f}+~qQWht^4_Guu0KTy7`tiQ<Z8Z1=toN>d
zl<Kw#2?<S(jTzhHlSh+h4P%T5ym=!lFXQ2%QkE|eiF{8(91&^J@qSo5+S2gegq8@C
zTh1&NlHsG&>bbT_oCCmWmyf++5dhB#5y<~LE2*ijPP7?r{jJ5rvi1XMx!PzyI;2k8
zxvXIT1V&ym+FX`os?^sJd2V#q?s<BQG6~Gu0ACw#q0GEm$A5Lzq;{y?$)X`$u}#F#
zkTL!(NWnfiaP6TN00YhlfBJF%WsD`IoRKdoRGxql_xDL0>~q^q;ss1<ZeGZ@g*<wP
zKKhIkff<XE8n~ZD7O(dlH4SjkF94SPr<|-jsKc0;$CeL2A@;ZD-q^&V;wwz@3|WN<
z9RiS4aa``&)`?Zrct$_xkkAF+Tur3moFiwo%RblT=Pu1oJse`0iI)$NOyQ7Z;N<Cs
zG#=81xccmxyHnC~$Vau03HW<d`ZF$_No;a`+YcJ<p*j<^jQoq~&yA?2qiXYp9$e~;
zsG>i&xptx&I|E{Pz7yl)zz*$Iz*s>(!rf42cAG`5#GBMGrq<=XrF|x29u#nIxarSN
zv0)mw6GDUxVg7Ps<v%!^{clg7b7JjpbHHPayF`sqGf6|cWri&CFhkNd{*0glf`9s?
z+(?IumC1bVxz*@4lD>sz1m(A%cHt$tiida17DMg6hF`JoH{v+X*65j~{yQw<Y0f2d
za}vmJLtyxI3&+E%hwtWmx#)k+jw*gbE&R)9s2vdOLVJUgJRZv2Jqj#kEvzx_!dzW*
z@wHQz)6oZLOs9ITYFa~FU2+Mv4N3`7G<<#o3n(H0U5XHjoLy0&#!~5rW@}-Qr_-|x
z*z->K$rt2&s_cZM&dr&E<IUZoJUo)O9Zx;VF`VoixKZ0)NqK%23JlY??9_?VAdzXN
zA7>H91ypOVD>M5zS+ANsJfkjUR?U&c6MrKuEG(qBibPUe<OxLHC4WU~NtV1dsf}?u
zVl>?SlyEGFu)k;Opx*!xMo9PeWE&_%LDhH$IC~P_S<3OpB1BQT^?OG2w-aH^_I$4?
z8k3*y8(Qh_gk8gy!8t6TzZV{1IN|40$I?!E`E9=VkEKQ)2I%s-wB_9h*0-50ZZhkT
zfOqrfBX(MjZV5`aZj>fqEg~lQ8pm#7tql9GJ8yhzs%X>htPNz3g)CAq_8(Taa2sXy
z)iu|a^#hP5Fx%ts?}SJuw2l&jA%@v>7N}YK`?}2RVtAC1hA46IYEI|Rz~R1@^}Z7}
zax^guD^{=wTBr->FwVSd0RCreZ9qF%XZ0qq?jrF2|5YxZ8V4GD3v~@Rr+fgxKIPFO
zJFSzH{aC*~U>@5vW#R>M(u#!?K^b(5NTl@UYfh<5vBLqluq<;o`p;r~7N9qMh%ya?
zDJ6M@>C^&xmfvAFbO4d>=J3#o?tlOCSVvr&vjW5`iJgX+id}b+ZW*EY`1tNERWAOl
zK5AJOC4_smu$|mo#sQY@EHb<L@Av%zBaqTnfls2{$Uv{aV{66>Y2D*lTwJVjST+Pl
z35|yo0STw?8Wfdz$4DM;YU+B(tvaUw8t(5!$og;TqFVlBZ~8!(Ilfk_>Tc6rV#RdJ
zxjcv{7HLpm_n||gXp<={zWUG8O8Qr%=}(umE}Yzj3$J1y;91pwX-$5=j2SDG9LGGC
z(h;*wFTzy|DFU)hO>RM{Kg9uhs}|P$=1u^jQ#EaIoTpLo!QNgcxN^GfTnwZhX`t9s
z8muMMDZ^)~&J9ra?Z}wXxJlE7TI}u=wLXLwDb*l8JrUiLy0RST#Xo8zFP|ue^=`qZ
zgUfG#)Nq2#5@om;!xg7lYSC~B>|{541c-JUAa5b!E=<a@tC3u8g6*L1f8<9s;|oJ(
zo+6*eO>4l{e&Fb%`xKg!{=fRlaArY^tG#qyC$rVNWIpb_BHxlBVzQ;fJ6c627rem4
z)%uh!Zcp4iu#+7FE2|5O;h)VHue5ffc`lee4NNyz3wfou@k^7dtpxB_sLm-3KS$*I
zsXMK!L&TVOoLmM0KgP-*AbpzsNy`~tm|cl*G|~in@AROUyj@y`PzwOOH;TXFrr<y^
zvvg<5DGH97bamh)o*l->33+PzwDrP9+Iae>b92D0*Cg1ikb7w{0?Ha9^jOA7_FYe~
zgP@Js=hvG`Px{cqAC`TMkpQ}2T!vyP&MIoAtYGA1dk{=uM}4TfqvO@WfJhdS*C;2C
zt_3jG#Mc&?HKS<9jqfMJPHIW70yY2>pc^9K^~;5ANb2~>I{{`41j5xFMzs{Y8#E?3
z`_MF3iZtkWNw(f;sxv7xSQ@iX)6-+NbWpK_5fFLQP{b!1wdxtI&yDRb^o&c(y$kR4
zk%$oojhz)SQ*rW}t}}*8j<+Cd==h;I4JAI6oy2L3gwZvXK&OMu63)zaWraj74cfhK
zkcuUS@v)F`!gwYp8gwiu<q6v^LYdK+D7dfi-Pf~JqV@82nIg5j&22(#aw>~LeZ|hh
zqG#3{X5?vN?r>pc2mqg0{i$f~ymnO5kRtYW;&7raNKRuTsj1-UIQ><LrG<gcn0lBE
z7pb^d*q=O>k8hoGvY$429U`YW57y19ZEi0<I|G=xKYxL`c;PfuSBCIvH3@8t#M3q9
z_K$}ulv9l$1>K)ZGafZaMV2FI0uSP;p;<Ei6B}tK<;h)jqeAX6`z8fYAAH(Z3-X6Q
z`Ku(U_=$c33x}uQqW-dc?R$RQCvOACtMZNdL9F)fVY^<zFb0@xy{M`GkJAfac0Qd)
z@sE${>HL3PWucui0RIg5TXL29A3z`A)5QLVI1i+Nhx}jP+5ahKhN<01Pp@Cg+`cY5
zJ3H0G!(*`I2OnFz$md?Hn#_%OK>(B_KQuJ7p(Ra9xFXV2m^A!G#nirTZOAm(>J>$Y
zLN8#-1ZGWNTa>32;t=<xb5-p`+xJ&b#Slz?Jr({8t$Wpe(@j#E2;kCLik~P|bsOZ!
zyO=yJcJ{dd!40UdzZCO|ZP81H;2|PCE+&P|BA?g<F~5)*^rj}Ec0e|5vgP}t!A272
z95uG_dhsS-<Wprb+S;Po=<Ad0FIE4V)6*Xknr#ES9WK!(eWNUPkI3k>*&HT2YeyS7
zsTc!<20uIjws93(k4jUscQWog*N=Q|qR^SQ_v7in%I0q&0~cK502D5-JCX-GQhILg
z$$Ew(=eNf2m9d@h7T}AGEeSOg6je?vB>%wDATa)*J;4QLucFj(+TYsB0K~7y2G}1J
z8{Gt6i+O8(sO6=^!Bhi{$#{$i+E^X85Wh#Yz0bTCS4r5P6(d7wev&$;iD~cF)OtrX
z3eaB09=tu*5D9j%3_^${`S8WUnMD!nO}dt64MTBtiY1&W^RZT(0e;RWQ=3YxnZuR_
zN@%DKvUSJqnaDgZEs8Y@V4DMMMUKZ@3y`8Bd1RJOydW3B#FjcNZO5x4W6Clt^*7UY
z<_|B~pnpmr)MwY#4k5_XIFk}WiyPUAey~-(r$&@hc0^N5fTf-+VRh3R2SW%cFc6EN
zC0s?tYMTR0T~F36U{EvmgrVOk&d=@9vvs|<9Q{Pus9$5tb4e<ridP8u7F8HNA2{(Y
zyu63Ve)`gJw(SBWVKCw(s;R1~Mo)`0bl8m!>ifF4)b#+uV~UWP1Gbx;!oMq`VTEe2
z3UN}IX&wHBC*QBvr#bLBr~B9^TYhSbHJ#+-B+J_iyA7=mD62^cPQ_U3H#Z4`C7(??
zx!Kormib^&&6TdXb@)-V&_=qaR-STHwzZ<i+cSfT7_!4V)7-tG1F}Q0adIlR{35Bb
z8E-q(6%RAf+<T|nVr-!GSXfjfrzw#&0%x_1w|8*htW|sQG%wuV&#dU)7qOORd{JZE
zX=?#ck<Mkz_s4{Q8r>5|7r2aq=R@4vK>Vy5-<j^Ree>Jr$<$9X9|2ak!fchHAIyZ3
zN1=w-9{e|*(5YH3#aCH5)pEXt;g)d!^{9vxKpqbL+qqe+t&K!m9G~wKJLD0yT)~f{
zEz^$bPoPbw1S58{b=xy)U42RdXkBIc_o6B1BU571#RSmh4kxX5Nr2^hV5p@1#e?zq
zH*wm|hroVRxCqciqTM^D97+BYr<bJ}{=?w%a^7KfPzZr*BI~*)!%-+w^FMKUoKWv+
zkTcH>-xwT)11a)W7#x^~fUO2<qU?GadiHRsp$vs8KeJFjXdA|??w|u^+E7Uo3U!b{
z1iMSf?q7x;-L~x`4*eN*Ek^;bL4u1|{1lAzia;~1vZoGCG=g0e_yZ`7TKj1n<Tz5)
z@%xWrOB3@D1*}$bU>*`-PlLgk17K=@`!6ULXp@gwgWfA68->6TU;r#d#CZye2$lR&
zLG@G>Ph;Y-9cfWiX9R9F=h)ZC(9@A&$;~=(_&N{=11v&$-<v$e6aWL|lUV_m$;80*
zVNYDJIp$X~>{Om=JE}M2zheG(Xzhi3+D!3MY%3{|R2Gt|vc^}{Pp;z(VpI>=7^D;c
zG+KfsSBYowShg=^ja`QOsEe^CyTU^azjiG|2S!szY|8t^!2s-H&N4MXd@K+P@F23O
zGEhajy}<UqnFxC7M168$KLA75s!VY*4-o=D>x0uZ99%ohaeEZk;j?5WF`-soxAAj-
zAF5s`cRMtEQp1jm1-4yZB$}5l0k@lmfdQ+vYo4fdag0wC5I2!>)$TFCDtXv!V-L$t
z#GJri@35>T=D9@d8AXDt^#!PI#Cr}y$rVJBoigj<Na`CJtU7|wx$NeuQcyw7OSO4<
z!8P`aAAiv)#<Vl>8#^uF*}7@H(bSws<@0+F%miRoPAMs=RVY6^#n9|fD3~Atd4S&%
z;ew$sBgwhG^!9fhJ}K>*%neoHAN4iBiCky8-0b}|l=$?#IT({-7_S8IL?A{|X{Ef*
zmW~4Q+3?-cqGcs@SllrrtE-9?Y<caM>EbaQ$;wv)n)WJ~^J{B^laiAQfC;Ij!)r35
zzFs<H=O?8^*Tu=YFP{7>7@)mAz`S)kVXh`fQ3;IL0+WkU0IO_J2Hkpq*-FQWF`_g-
zhc}80LSgGO??ofnELkipSyb*-W{ccJfO@bhbOpIoo3&aSV!c!-cq7`9{Ivk67RQ5P
zg9e^WRnz7r-hOz5+jVUmr5+N{e$G5erHc88r~pmxAaQX%<|2Uj{->3Xxio(ZcS?z%
z8cT#%Ta=3uA|=%&&esz`qO6{mMs5KFIqcw0Wy?gVByQWVy&1{+`m?KwiWI{6a&j~U
z5aSFQTU*;}^pgn4_x}?AA$97##apx)8C9h8J*Q>m<OmhTT!1ZSPt4f{8XyC<+ByCG
z{V6gL*B;A2kzrqx%&M69$DF2mh|P_^5sg_jI!aSDtwz3yHj$SP$I?pa3^Tcvo^<K7
z_WMO>E|pi_${unUO)Vp-5x!OL@9=WrW)l*n$#oj<sL?Nu79D}q9xm(ZDbLA$daORv
z;+QM+_(7)l{BHAc^YJ&y14qS|s=5vK7n?(nu*yc><wzFBY!Ra)axgRRA5t+2`m9=}
zX0ajsYY!vIB49Ge<S^|HIc0rOqbwPkqk_Wn6@}h0IZ<;*1+<oir*RTP`_P&R>lR|n
z|4SQjA6`ZB0HnT*wBMYjlWcH`alK;B?c%yQxZa58ZRXl`uKzkH30x<m6gzrtJ1^b-
zpbs6W0|<l;yId*d_c`CZ01Dui>W(g>`bfs<O6ua`8fF)Q%R<1M6sRMn0xvb9zYxTN
z!|3_2wImC)4Zm_5eZUCa*YGZu=F+F6(&c&~axp_~((=M7!qXquSSshH^#|G(uqr4|
zg+^6V;Spf(2T=!aJ=BtP`UtLiyhqvn#&0q4ZJ?1bEB~))gk?1o>2d`&*Dky?52)Tb
zrJB=luO{{^%|;7F#fUn3R$XP$P#T%RPn>M67*3NtsHzBC5{mGiFmLx_SWbYrIhaFK
z9gAw_?d|I^U)0gyBxn@=?a`a0&~V)?rojgV#R)*jS4ib?n9LG1INFj_5QQIwZfY!)
zPEk8L+ajx9_Ha(m#QxhH`t?P$HB<^;mAbbYw!Z6)U4lT8#S}e*BqsS&RHMb1jcg6Z
zI1?r-1`*amW=!%a`_U!+L?fJld@AzA|GZ-wA<fMpN>0>SJ`)03BX^v`vpp~MSMV+t
zxUF?vCI=rny_bRp5|^jx3opQri`O}oGQ}u<o7#U}>pNx7Q_bx@q}8^atC9;DJX+}(
z5~`y#I&3iQ!5B*iG>PAWm8Hki+;QYy!=|sn*s?E8!ao1vux*(2Y29G>G9*V~Lj|a`
z*jupO=-~EIL7fD_V?9YB{k&)^Cx30tN7}=vZu4P(IeqBaBXrzx17CS4H`du-z0u>E
znnEwI0pzo#{19Kel-sL-#hRB0OGF#o4k3NN=)+H!UIJ@kSLBa6tg816$>-!PW?&j<
zWRgE6AGP$4oaZlIhKOSqD5*%6yW4J!8Us0$JCcDJNrBj@!$~fTib-6$TyDD2HY{&;
z!+OjI`NB5_>lPMBlvRe>*S(B&xvC?fM8bM_VX~Uf5KIk5N{AF{m4#EG6bT;4A=C5n
z(HPn3^V;v^BbFz*$7IY8xOf}Y1*)eBfet<>Ar=C-U`ES~JH9a4zco4x*J73|<dFgp
zmAqKW0H1IMgUv)LmLITdpa6y^MQe;2S=_q%NS&UDqTI@nG%NerwJ{mrgh^7{Xu2-|
z&~cdjeTscL-_%0?aN97(&14wiP|0T;YV8qhX3@^D-YNDC-f?IFne$TZlFh+U5R1`P
z3IdzaZ&ZL;y@&N#y)1C|(h;xR)x~9OMdDRKNwwzZm)Sr}1jAduo}@@JY63g3gY{h`
zC>p)d<NV`XU8QPq9*)9U>1z2<GB2?1%_C&}<My|{JU5hl<^p4iVvha&cU3<|?6dOK
z^1RD~y#Zt;nYYoqF7QNV;dhYlTUpdxt}65fe0{Ph$Ns?0VCXihQ1!8X-8NOEp?rEC
z0ZMhCQK0;z&wv6bdf=8*X&X^#{n4JhnTn7!MPGT`jBh*3OgChiUR>1{L)LA6=k7RR
zo9$)H^tqF%ydxC1+&?MFuSN+Ed3`ifdb`!OQyLn&5nG_HjO*4n`$ov)b*gJplh{dl
zbdmO>{Tl=38&v?|I5Q9wkz@5@U(tBO^Y2YA`wAKtFX(+sxw1x^)UT*fqU@w0*3AsB
zOo}Yj&)4mLqSw)ApMUG5qQU9%-(N6)JJ+h(8HQ^%bF^m4Jhm4uxT@nwl^I_q)sZx{
zq31e?7z`7fE}5^Hxxjp}JR<T)1!i{fLk?lHM$x~!fnz4x%!>U5;DDE#jB9qc!8tjP
zzrT3h<#Jci#m`Xk&Fd#`55phXruQ=fIwGm3>Dd|tsvq-7exMAbDmY{GUtJ!pyRAu1
ztzJ4r<OW8in%VP9#Irjq0Ud(3pJ#v&A`Yw-6x_*C*S;-C7Kbd1wxEh3tz>02n_$Q5
zW`!Z#1z*|E_K`6w^-6-p*>3|MG?AG^18IwN0?gv`vz|S6M>w2@I*7dQ*i`1Cuacq8
z^2PT@RY7cLA~4o1&IicdEjqQ~!-Q&i@dTg{-z$lS*^|R*`!hXwtd>Sw#O6U3$BTV#
zhaUfvKr?llAy$WllweDIBpgTbziJDjz)ebc{>(fS*PxBD6_uofcx_VT=X<ofP%yuL
z7{yEaEgg0L4zqKyoabQXV6LU2;xB}Oi@&zkGs%e-5G}}4a$Yxzy(b}Lf}l1(>+)Cl
z^W6ZN>_R3}Jh1HP?fQt_#KxcA^7_FL4#`gguNc=*OXiu2Kt<diG;UVV@{;r~ey*b}
zj$!uyQ%g94Z@;k0sv@PuB)m0r#r^iA^p0>9tYDrFn7f{La?foS`L-c5&ounDTo&30
z@=Ox!a9-kFmS;7%=(3wMprEcE^rTp!x5@kaf#gkMd2fHJuy=hOJ?~#&P^MjLQpIYg
z1xBTN@}55V^0&kangN+A-+URgRPzI7T2ypbZU}qI0{0v*a>{H0yzf>wc%Sfx=(V_r
zBtD22Vex$(QlCT!F<23(GCBFW$e+N}*YT?i0a)U1@vag>DGL)V?A_OXCD?PqD>y$z
zUebN~b`n?zMfuSzU6u5={>lqDG4Zq)-0PAKl~l8Ie~K)dBDt3a$*}QgH~RTwyY`b_
zT%H8}{!2+=h6t?RED_>?W{#5{fG_KGF5Q9!k2#k7exC>;C2F6|Ke4jri)9~lsS11V
zFB|*4bv?$bsWi^P82pkX^l!iup%2(VjInpR93g<aNEqHk7YrJYg^1BhUblmumNG^~
zUYS3%fYJm1DZMS+W{Nbce|95?SNN;kP4jd=+FhTy)O9=9dQY?L1WhtRCX%%8>xl~R
z5M$P0aHWD?jI6?cy9Fe6Xa`{u^AgPC<{=h|`o{BGJcJ~x7L<TJ2)`BAQ02kijFY57
zk^N`ifma2i5`@j9f0TXPEL7Z>b7Jz|(FZQHEAxZ9_REWYWRv`X|DDLfcPyt<ihwPI
zsFS*^;TQ3hgIA93jAN1WgXotu1i;&Ak4AGiG27copi5Qajgk|Z^-=jG?t~}DcdlVE
zmD?CodKs8+;;w90BEqZpg9VFn`x23${G*a%5X+ykxpaT*@-@9^l)d2mEUy(8{z$Fo
zS<*C^>q)>eB4BFRRt=}GF95LQc&bG7y%PSqeT;HEU~x538z##Q=k|*xLi>{1`K$C&
zD&X}OgAj2lMrVZNt%Vm(iel%2JE(IlD0xAseIh;8{uWWTUk-f(*o#TJaitbVDy^M*
zvN^Z5dp#{jU)?1(Tmkd=$o0%r1PO20akeWWw08a3{w@m;X7VbgC((hdsWjbozDDt^
z<c6iVf>CGu@ZYHKaxS*F0w-m4D`^HY16%j|m^W%xDC=m1ibKMe#}IDcy!pqqmZ1{&
zpr~ZA%ln;IpS24|M_?|yT1h;1dfgm3MUM|3?oZm%C-g}o`qeZ0InMkrhjOEQ4@|ix
ze;>lJU6(HpN7%9-A67<y-9DSg;j68dmM;x;ab&UV3r(K23^nOr_jbf?Hnf|i&Wn~H
zQNAno^=9_db&k1ZA8&+!J6%Pm7$8mK%^6!b3Ho&sxHvTAygtM`;g5v2y0<eh!jW!_
zDQJdxX=fyHc?ah$upFFqejM-FQjQXqbn~+1VfDRwelzuWH|G`4xfjn~jEos_?WJw{
z<8{*|B>Cn7fX#EACSH{3Hy@2cUsPR8ML5s>^*h_E9ElloXNgXk0qk_{9X;=Z)0uoa
zLExz5lfbng#f&JQvuqUC%6-czd!n|XL)*+3P2A3Fti0oa77AJAzw*W+P93u3%@y*v
z9k@pQ6mUoKTIGOlu;i(^Y|-G@9cZ$=)mH6&Yu|YMrF;ZKsh_a<<U}OD&YWf_RWPBZ
zcv0cde$HMPFi*gquHTdQK6o>LXB2PhVUV|g;qOTxl?`uwI{9PAT9s36v|~;o_15G4
zs`lB8L;UCwi*LGYW&-;U$&2yuktWGaL#|)uLv;b&m|HmshN2FEl3z@y12tF4fNEXR
zII{o`@!Jm&3SV4xaQQym@p)byZw|_EuI2prL$o<HMsI(Qb-!CjZ~5>F3Mmq4{MLNY
zls>xrP}k-a<b5M?-OjpOGb%V=Z#BFQ&abj%F?hELy1A8q%n&kYRytsh#v=s=%ZESe
zi5<J)hB?vw&%pykz~$1w57&SwV=-S5^o^x(5|M=&;;RXIf+Z<muN%y>rc&R~jTDaG
z(~svI^|z7p@979~vyKJ`FG7T;!p1tbe^jbeiRUsyVg7Tjhq;=iJa3evWtCI_OX^+Q
z)2m|fnFLivC7cB2{Yd?oe)pGt&30*OGdT*<BS$1=AR-DVwBkrh*leHdIzUPnP9<(8
z(4r<}pve*=kK4L)&hPGRMas{DPXbG1+(wJoo5fyT9A?cgJ^Iw|6c%mC8{M<HjAIil
zY|3(`(?_R-0B`6jSed9D++M0qTb-zX0pnNhx_FAoFJ!vKqLeDg*(87DzK084POMzG
zg4xr*?H~)R$Exd8aar5dTqdSAmZrbelk(mV3qu7fdl)|UBv&<L#~j>DFIHKOWeMMQ
zvL5ESlyZ*>-eM$;#L6mtczVzdpiO9g6kG(^wv<lUT(=87wloQ1My`E0{P6JlARH0V
zpT^w}4<)=xQmslnv_c{=X1ZYO3r<69EJlL1e!-Wj3yN}hWJ*q>oE3cC)XfGE6r!5n
zC5`VFsE7f(Tj{&vsg^TH$$S>0l2WB%AVow8p?SN&>$ks|YVY`x^xMSZp~9u;va)8;
zvb|_Z0v@->heZdGiFw8-k%ud(`RzWrOTqW2aOpBV`=)(@!~<a}--}k?=oh8r(UHF#
z2HGsrW9iASTPlwG6)Suu1TH-Z2`?`KIXQ(+l$AxOcS|i}NbF%^!WZRHLw3B&UcV+4
z(qdkSJm%gmwvJ1bwX@0FVH{qRhcGJKwyWjs-1bpN^<K6--dF91(qqDwqji7s_`??*
zi|)45y>-o%S|~BS9+n4E(;texfa#ysrt}{D`lgm5wtHOuk-WH?{Y-cN#>&Y3#62&?
zJx}6d@ybb;+hP4^UE406m12&i<%8qs<(iaeX2xlZud|`vk1n2I%*e;gz4V6w&#E$5
zE&Jf-qXnz&WQJdH5$I}7SL)1G@jAEd3R{f<{ua3=cD5kX8d$v<TzQB<TN{4JJ0GL6
z+IYMpPKQ>Z+nKYEc1l(_C#^yuh=TimfMmKK;_@Iq)xG;Na~~}a0y*(fCS=gi@~_US
z7`MF<@h0V-Ui?&3&<DeBk#kx19OB_Blbrsjr`K6kv-M+-*{4sae^B{WT))DO+EQPm
zG}-P}{F$8AVYzj3B`m0jm?CZ_s7L_L*}&C4Ws=;{Fz_%&X22qQ+g^58g<Zv12%maP
zue38le%p7mO54tzLW>I}m?t$<_v#h;NVs_sSku+yP5BM&O9j(!M|2ChfFhtW++y!4
z1?%5h-nPHXvZmHS-bZ^5`uXdVW`GT!JQWB$v+?e~LvN;b&6k_8L<>dR^fWbTrNX@!
zDh+wYdHwU-s|!|K8JTsj#4akv^=2D4B756iq^|eXQgqyX&bb8#wT@PjvU!4y=Llco
zYm&5yTLQP3diZH7{gZZyJy#U`GpaWF)W!y8-+FTG??=W{GU!mmW&hB8`n&&*DIeY^
zE;MhV%uYKyEOofJtP52%J*duBoA`D+PKlnAW9s3oSX%{_X_XizcL4A7sV>eZfSVOq
zZY!kZU%TVd*D~}`g?VJ^ZEI9*rlwc*baxM4dj;7nA0@x%Upx#L9}aJyLYs=K7Bn*{
zG#W;4v>M*z1O?||^qmcUn~XhxF@Ty>SeXlctsE;=7WiXm1I;+DhX3_^^Sk`~IpprA
ziVa6XolZ+TsB%2d39`1?J+AwtNeo^4dPUmZydrVpJYZ+FvLlB+)gtI#gj-Cgm23@D
z`mretl7V2#$sdvd2kXAxuF+|n2Y>&2xFUX;1zaWE4nw5YSo6<CpqQ==^_IFu>2BWB
zm98<gxJ3Y@cwnK-cg+_(@QvUii%gYs1%Wydo}@>|^GQHYrf@PcTzpEsY^AWxx`^M`
z^x^Q@YU=kPejO9gP^{zPT16fG{55lfiY&@i&bL|;4js=~2ny4-`|g5^WHxX1RvI{i
z3iIA}Olc)c*a>6~(Vs9B^7vP=Bcf{m`J`E}lBAgLk%bJm6`#VDg6)vHKm|7C8G9Y8
z%R~Cc#Ti6^m)u&a(pK2$xW8pN!lWT|jRB`<@zU4I-05?JJye`u6a#nXxI$brl*yCa
z3$8Bo6*)h2Zk|V$KCkyElIA5Zf8LHlR{T*yP5afY_s<XMD}~RsR!{jaf!AiWudi0Q
zuuN}`4}t|*fnhw4Q-w=wlk(-)P~vP4gQnWTgl`2}evZY6MKUBZo!lTzGfk?Rl|n5j
zqu$&Kan(@fgW%2K1~$;z5zV-D@K=b3V=&=w?J!um&n`PWeYlqG5P@<I>on&G5mt0D
zweaacn+|nY|9*0TmPL5iJO>0@>@dzftNSF$tw_X5h))-PQvy|c5vW%(j)j2KIoxp^
zKEHn8Js?+Bn6V<@I}rEp=i8OJWx-v~@PPEGChTIw=|YY$9)Hy)s8&%GyQE+F(cMxO
zm&RjJ!zHUlTcLk|jW7}l+zS;4ibOfj6MQ4YljeIaSJdsr+ob)^NyUgSH!Oeqbj_a8
zgBEWw;3+SQs6ZXM6~GHhmbfRkV~dtCBx&>FH4oWwX}SpH3V8OKT|>k)GRAXxCF%6v
zp8g(GX$7_{=qaNBLK&i~uz&2haF6PuydJc2;$hbi@+jV{j8FLYU)ezHQyVJDa)0ae
zrg;48f6_0D;ZE&Z-->%LdTIByswLF^&;JqX|Hd=EZTAZQ=ep1KJ`N5`SG~t`!rnLf
zc5y4|LE(xCs%~K&zr#Eb^V!Na=!qoz1>~k~R<EgQlopks2?_}0)Yb9Zr^d(s@kjXE
z3LcK%g>v{AQJ3N~J4P!EQTTI3BQpYRQniU~AI)!pQU|-_+783Y=r{Pri|@Z*nkG@X
zv#jGT0-xE+RW*51+4Jg79F$iz9s|#GIWreDGw9$ty?_g2{2H4|f4LXlbB9?+fl`|-
zR5yZaN9_){@MbH_<PFo;fhuvqcLXNeVxtyeXlgvHC(PC{3Li#efCNlsDcRnXsK0rv
zu8hC%$wYa(N%wR6;~!_(VVo}5E?2tl>$$}m0k?UnrJ7MC*YW7c!wzyO?P*Tp{rjRV
z43i7J)=N7A=$8g{UudV8P!kEE5(mPrnT5z&&qOK5-rbKJ2qz$jC@7a9JVR9!W}12g
zniaLq^JirtpOBulQl*)mJID$3pgt=L55s@<EF3uP8A}CDv5QMWA}h4U?zU`pb;k{E
z$3^li<7gITdLZSKOATzUX8&Vl*VG|&{xi=r(UnuOV!+i<;kqwSP*9L4cwvdD=3r#h
zBA#`Hbv{0>R<{lDrB_t!Lsf|qGGyjmJe(=#jJejtCmir?*nxjG>e#6>9f=#T9x`l!
zEdRRUekN*s)WkFcx^O9)I4<WX$S>wH9XXqfMVY6f$4fDqPm!nb^8O^1ui4f&(A>9k
zwoq586aoeQXKO12Wqy48{nw4e^nuY)mHg{#1N@Z6z2su0W#YYrqIh^>xy5G>y~0Jz
zric0e*V}bRHI@APt1hyr5tT((kRphMt`KPpxGK^F6i7e_MG*o)IsxfeP^7LPAkw7>
zNeEp61R@~42@*mNMTjI2lo$dM;9b;xfBepQf4p<vdHE}6?#!H-JM*1Sx%bYj!UO2_
zcpR+_V-G}TE=N_7wnL8lHR%Q9sH>g7eHqS?GIn+;%+&O04Su=u<%_4SOmnU-6+FZA
zlWshiNAZIPm<I+UpEi#_5nyPXr6ngRDH)JKO?;#Nsis2HX)yw|(O$|oq9iculk<IX
zA#r8xYqevbDv7lRcr5T)6zjik@u;#QcY?3bY~bTZw^iHELljC{edv}$Lo+$|@9&9O
zT+4$e){tuVzoa-VN4T4rC64rUcYo4EXbKf_>iuqr-e*7qzI+y5nHrN@>D-`=mz?fV
zXGtP<WqYpegL|+&k~S9pwBkW2=3k(tE6VvvE7bRm3=>X!Ow)_EY${H#dm$7^+>#4W
zsAFrU-6kFCqedujN?n``$v}j#@x%yh^>@x_R{|$+djovKoz5M(-)n5#-Yin=L_|8~
zj#sVkt2m4YZm4p37(_BDF)@*OHp9Omv}K<QqM|j1br?TMx2qq-Uend>3DsKWCRy0d
z{l?JkRu$W609&4e`lpwcft8m_s(X76nkE4@TybsR&=!ZPlJ@33Byyd|3aPIj_&DL#
zDovRNzqdPF5rDy9#&4=G2fH%70%l_=J(hFoh^)WJ?iX#c^YF#iw^xgZN$(_$^Ecl=
z^Y5NNiP$B+#pQ7&3E+A!(jUhU=%VJW8-i<Yz4M*qi|_3{=(7w>dcv5R${raj*q`Fd
zU~0L=`7aVi7tP#82JRhIG*VBRj#d!$eF)wB_*5Bz&i9m`e*<O=axJ8uuv7EUDP55l
z5DVQ-|LZIBd__Lk1@XyX9&B6PAeLjr7RC54qsbVuDM{k^fm(_CCx!M|)yzu}U&vdT
z29}_gC*%7jf+i|xxjwhYMn+s#_xE=~Em({{MJ{d#3k%J$Qam#1INy`_ZKUjmi9Nx^
zZq6STm3I2n5UkyXi9IO<$9u=i7bIci5vH|w2qh(bF-rY3B{oII*yHgbx*FU@5#0l=
zo5+oJ$+v>T-CGriUx?|d&k?ef|Db43pSH}?IBIaWt*MANwoGzRQIToi=5ljMSH*;l
zQ@Z}^LOlZ%hL-7r_D-f*?h?P#AOkOkqsb+c+L|jv)0IJm>O-_EY*(RD2L}hH#f2`N
zISiRTIG9%x_B~fjGu4kD)~5Zv-)tVt5gpOc<~KLWG{*+U!?Mga#~YCY%pAI9-vUM1
z{umZKC`tx+Z<5{TK;CD3r6cGHmHphcyJ3!Pms&3^Ba>ElH~1V&nsP%B3%;)Kf-@P^
zr+H+35xM<nM0=&3`m!E_$9r8?3edkOd@jkgFbW2Jk=(W5gPf3j9<~;1@@jLL`*B+-
zs0#Div^Pd!>(R3|EF$BupbT(T_6u)@t01lT3wZ;F+PW;IP4pz^s7<T;uJycQeMFfp
zRA6?JNy^|B0IZEM2zF182{yF&Vv-gXGp}I2()`#J4Q<>99NvEdCk;ioc`geU@K{)H
z)aA_6BCt9xtTB?C&(u1|l?3^u;XtHSp*`$vGk7jLVoAg;hlW%`6!T!qPvC#sY0HP%
zi$&iWa&4Q~@PgLZ-oE<B!iL`;@N{hC0^#}MzNOMl&=XC9K=MJEMvO8sS<c#N)$3D4
z7@fDG?b#F8g$uN&i7$Kkfqz7>%QHe&=i+<b$Mu@XPzX;Lh-O}};J#$G|CfNiyw<p0
zg`sJBcf2Q0cvDiMzsJvd_gVB#*6>k0f42b6URMjDoJKT*b1nPJsnCsM+I~*~KwQ?~
zBnS@@JMeL~e`x4!pGaE^i4Zh<X)MmNuVlUXNZPs-xNBp^gm8x>aOscBD${)rDjOpE
z&<GL6x=llssxd2<PaC)zV-KPZ55q2mUF{@LQDLg4DF;(hx?qlw6_Ao*TCgNCAqBg{
z#hGQH?_3IPRTRbTv_cUL=$Xgd{xXO1x)PJXARXgO*@Vo@Z^izFrUeX@Jhuv|IcCXT
zAo~tjH4GOYI=4Ea(7=jAEQn$Sdf(DM8!w1}(N&*49!Nu%_l(S6kL@Z)ZpWW0IP)n=
z2Cw)gPHmd_L3Ix}NQV0a8N7&8vod$Dw#-^q%LR>D(Y&)o(us1_wo9T?N!9gEm#e^U
z@8Ko3av~xk`{Q;^JqnK^lcZo}S}VH#-CNWBx#b@<;WkMhy_eD~4EwTeXX?L<K}?I?
zCyBQV3=EE9;DUlO;XEOm3_A+PQhQk-ltfjR9^xkyy_N`YTC!5ZI3O8T7thUdG82!9
zZRn2lkGnSL%E60KT?Qr6J<6fW^_=mrJpgxol+sXeGSzLDKtQ4NL%{)4i!<9k47f{u
zy~z-jD&13O(lHmiXC;fNxfuGiJ$cMe-v#|$B7Xq?i9#v1KC`*GdExx|=NE@=h=__N
zKX|Z<6#^W(nmjEOeFOHJOpMo?+Teyev3jiGal0OBO_>eK_4EZeHvbI2VgGP;kpc9&
zhK9z+R)aQkEO3u-mC$<HT(B`pjh8wpAt{j0e6BZ9uD?E``BVvxoolmG+!(|tqlqZ8
zG>ff-?0u;TJg&M#XqDb6qfENL*~~n<5bZB!RcZw*f-P{*%RJaM43Zs(W0)v=omW|X
z`{Bh_VHICpIA@D+o78TtDrqAT@E|Dz9i518s1!b+R90#yv$SU^T^Nbb7DqsbmXgX7
ztT<;wQC+LGx%ZD}$R^U_@A<_iFfrS48b{7CmtM>?RyYy8W?O4^ng)_BH8lN2x^|fD
zH6e@64ij$ei0=X5cK%-vXJPoVBdW)RDYzsyL#2IXu4_W+t9KVZt0RLVmMlXFo75Cg
zsDm%2Xv$DukdrtB<jm}{odM}v9p+o*y^>&ZOjmrp^QsISrx;WW?gKk|=ygucZDxWe
zbyeo>{aN*jg+GC&mmGwvY%|on;}#eRY#E{J?}i2k3CP)8T%IxBb?YtP@O&!>7hiAQ
z95^*b7frx2IBl4Rnkwd!9{$B(w<=L&R8`(`p4t#*aDU%m862-Z)aC}fE8uyh^IjfN
zjOda(Cztdj37c2u6<c%lgbGwp*m3#ovN~+hq(^FoP$WZjl^#~*S)`I)j7ICHN3p4Q
z84GRQmdiPGe$&7j6?FROi6*nKwU>jw=@-)Cc8NzC`r1dq2v+s_RyS|C$RBonhZ3$M
zxZvs<5fVe;#YN8EeXUQAm0G)sC9KRi)BL}g=cbF`{Nmro)Tu}JsIo;-bW4lfK|Lq`
zB5NWYo0Sw^8nppa7Rhc92LZg=t&qH3b)i=h2Pq|ybGy$#hBZpU48a=#mp!Hmg-=LQ
zN&=Nu!j0-F^jNdyoL*8ErjZT>*D2xh127ZWCa9;tmQl)^k`oyo14UNG8T5oQkWFGR
z-hEC|OZ<w?0$UsIC%ko2A#r}~tfvjq8TA|a<<eu@PS-|Nc-@*v9!4aM&U^QXSFA=!
z=QMNUJ367awmpx0e$+d0`x>=oo3CPf#V%|V_or>)NQ0JpF2}+y1X|PH!D|<`1|0Gq
z>gr&9{0OoaIo&v-qxzTY#>SnWKNoJ0KO0?VcXjE42G#bAbU<|w>AFc&OzgF-J-z82
z3!!TFzl8?S^OpujS%nAqdpk#%2ePJ<&x|TwR)LUPv<}L%y@Y`^@d_cFZT9Ln-#TQ%
z%n`g$p|<C4wjeS~`rtI?!RWwNY|SMjK}Q0r`S%i+$CO(gu5XuP&BUsAh4ZV+q&(aR
z3^IC&3YRay;bhagnuZj3NE7Q<1Ta@}qp906=MwM9@3$uXfqM{`$2fTgacujKm#^lY
z8QL6O4LP@_Ah!1Dp2Xn=vZXxF9!t~9ybKLp>P61YiX<I^6=bN5KiIq%a^k}5y}O6;
z@JH;T6nw(;*TrL8gajglR|a^8f7hrEg-U^3nfY8>2%nUcRDLP{u9T&Wz}Q^(#t1J;
z8bXOOKuX-|R&Xv|%|x7elv0>|tXz+91P2@{d&jY4pMRB|a)_N!7D^mmyqA5wv-3-(
z0H(13$*hSxXlP8cs3`ARSMuc#jtcx+0I<LP;1R5D(YY-ndm01b@ji}kY2hmxkdNNg
zjGhm6Z>}OroQxHY0x{3>&Tifv{R?8A{Q{pLF3J<~6a>h8DG+$mKoMTi=tP*m6Z%*N
zkQI4g!Gk>V_WNMCUtSB<H6%!`*JJ3nyB~}bbUH-8fuP?|_kNUnx)qsE`xMjtTX%bu
z0i0*gr9s?YY`Le4iX6de@9M2gJAx-Vug8NX8q|on{6uDlMO1j7Q-uw8HPswlE%(Gn
z)XN?KBH_l94Zlzsp%%pWh02O^-`vuEwy-JDIjEW)uF;#iu;5aWea_G&+QVwEdv`O}
z$x)WEkl*J)%S=e`^SI}GEzsDh;u`90%X(W%f&+-qN5XuvM@4o6;iZK3-+^!)kcI$9
zrA9}MxiuPb(YzD&UlAMRvP|l{o6h-H)O&TT_@{|G<#7JC<>GF!?jQKo`*JGRc{a0I
zCvsRvKx8*;1OUscpxU%Q40h;OjfZjnQ{o>4mMOS^4-U#Ef;-J{t|x?E9iN&C2V<oc
z8C)?CP*mn#qO3A01FlpPO8U*SBHrMXToBg!l=-#CfR;a6UO!+N5O4m6N)0lhwa?#x
z((ZrvuKEY=XX0<b;h(y6;6te?26JqiP}BHe*8+oqjt>S$*HNmf+<(kJzi9d(=em<_
z?bc;mmrVywd&-SQtMtMoH#EQgm6j!DYPT}N<iOUmpckMj2PEb-EEx=o_LWg9CFTM%
zd3yS!61=6QWu8%mM$fN}k0^y|O^pjkTb8(PB_nFK_B(M``aRl<eEQPLq!rMYix+H1
z%I6d3*QWY6@~db!l~zxhm%0~+=m}w&=Vy~wJ@ibrBi0xAd3s{AQa5s@oVRIn^<{0{
zs)jrKu-l>(4uf@I$gxi2f!yJTIiQxiCPcxVpT#F;%&(O4KX|m`r-ELffD_lB*TZN(
z*_`6GVKy>*kNz_Zjg@*$r|fMk*kbuLt7%SL->zcgLQ&<}bw9W70!YK&<$NU#$C=<E
z7U&RwbpNP=oL#0>kv!tr>Niz8F#~wHRpWfu<s^D=iK^YQH!0MHRo$Z{c2UmIHZU}w
zjotqQgL2uPM@Wqk|2qC22yglaT}rPfM|Bz~X$7suj3~?x7RgtT2J0=Yzg<8%OhBB*
zy=N4<L(lh#1-@HUKr0L-3(i#=>fc-%pD8lz{{l;?J+>c+Ou;>>!r{6XtBz=fZ4r+n
zP3`OytgGD(tp(HdPTk%74)GyflOLokg2;OH%$vR4ssi<GffOT!&Z*B4UD&Qp|8@|g
zGdG~#IR(n=u6FcHJpS%h@q|L2O{Q^-#}CA&Cye*-1NKkJG)wf?fm$>pzZ_%mDoy)S
zrl0^uDnCD<UN&9-mP>JPa9g#b<C5|Ex5=y;qz-d<(~M<ltfjCY`5IO&-+(C@Iaj^-
zy(kF&={sa2|8?H8t|s6H5X{TC1A7B6FD`DI<9@5;voP_}e-;xPXJA3m=UivXmKcP|
zD<{FrYYScOV5pC=Z-|w~y$6Zsw71DN%;Osc$OM?LQHumCP4u5P*6u#5o2L<)j#B6W
z6>b4>Ftj>oFL21>7BAM{r5Z;>piro8)x@&0vKmkJXHZ`~1W!kiJURyrwzRFfIRrhm
zT;=5LKJ@`X2=v9#D$801^Ge<z%ZId65x6{#Z`B2x$Sp16kD_c}PS^YU?(@7rsU*Wb
zBQ-VEdSPs^65M;;Mh^u#;`E6W5wtV~@fZsa%Al>LeLaI;$JZ>@{WIvvzD%xD(9n`r
z<Fi=G8`SptV4fA2sxk(q!@|Nav`+`7_W|eU8K6Ktj^h|cr{Bm(f2jx_P^<^9#YRG%
zX&;eyjuCJt*3{q-8Jov>(@@pX+q-?vIzAr=hE#R5ToS5e!OWk%NX|EE5m-|jTA4XL
zGVz5wPPd12w`At9kDB#(kUn#f|FlAMOl`gTx%cCCg13&9@MIbT!}i=cReY^4Q<D+e
z!WZ6PYe)XPds;}<GU-Ww&zP7>^z%v~H#M*6{^V+nFoN@k-s($)y$9j>GC|dLtA)2>
z^2pBgT$S28s$))q`yc;Uw!wwQK*j=Mv0MZ1yEF0fXu?Uv6&~zBC#;zqgeT_;F5Zci
zywGt7pYssrLb8WYYFFx+sd+86=N-YEe4s3}%(iDcp9MFi>UjVDvD&J2S>Swx>t`@6
zy15JE-+9+N5Y*m%L{EqaPSj24CX8samuj+gBvg7QQEDexa~_g&Z)2hpn)LWATpQ{A
zEqb+Q&&9m(tU8Lz%z1EJjUvEJ(dV<+S;U;AER%{s=;5J6Pf)B<vv&UXEJuk*!RL{Z
z2#eyK;71KTgpK@ep=;$?bzrgLqPFlfT`!H=tLgU;76Gx~-N7m!`iY=#rg&>~Yl3Yj
z8ry4W1-Cv0iFK)g0B059k6?%K(}zHFXc+e|s%Cr6o!T+X4}yaqaSn8-fB&g9|5Ag%
zbqG(c5O!a>-4XDw%H5~?x_Ie*R^4oR*NWt<s4wT5;dTSD$0OMHT7kmE^Yd<@8YK!H
zW8B{K%;(d8bHpFrN_F%1<3AG*05|ox><1|S-vOYhvn$^o0JP5j@HGu8>&F7$iL~ih
zm5dpYIH{I>CiqdIH|tfZV<`z&c3|z|boD8>bw&ZTPGyMY^AP&4Uj1L9+JE9752}f@
zu+qbHzP;qOTq{X!Qkf28+f6h|;5Q33zQ_d&Y>9E-iO9}0Y>YopP@d)ukDSBZ5fKtf
z7#SgiDE9Ek<w{-<nO$ec#MXei`eetg(o9gJJbC)mK^UK_q~v}7p7PsibycVicnf!R
zE@;Ak33`*>V+y~9!E)utv%4Ke)AanOArCT{Kb{bIesLc0t%p2}&xPHpCy!sXZ6c>;
z9e~vEZhewMphIhUE`b#jc~FOPl>dZ^L(e`sD=(k?>XnfGseuhS)h3llPiIBcCDe_*
zH(}<d#$>R0pN_Eh4~jQ=O{UsW+9R+3mQGz6Fm=J<eB<Xoi0=j@j;@)O?tQ&CckkUp
zHFyN{5EQKTQ9F9hYO&iR1YPxlH(hMU5Hc$a!hw$ycPN)87&||^Qd;@=Aly+2e5!JB
z_yA=+4YG4t<iRlo$Jc-V>GyY{q?^}=I4X%c%2ocoS>D+jq*#<Hie;MJFpp7EON*@S
z?(oQ45V+t)gvdf8yGFq>!*2LT1ULlwS!dY2^h9qh?!@HFB*Vs{CflRERi!BrK5~nW
zw}DHQ-YZO_pHp?Zb3{Ys-^u)DdGu#H|Hw=yfzsv2%(q-wasM~7US(C)l24nOil(OA
zm6WZ))G#kjtM1m+{(v-UsS@dm!`3{f-?gM?jN6*Aj*gA5(><1Uc){P#<J6D&Ok@?A
z)La38Lq{n`|J%C<WBHe1|HF~_Y3Tp|CLUQ1rkgPj0pa%pnaS3Z{(k6=+?ekfOXZ&w
zt)4B1EC>C#_9`P|lYLd9jC$N@A0?E=P*LAdNqE{X-7p)cF%CLPW$1yCOur_!JksuV
z@2M8h5#WFpQ^X8J<tn?pB+6#T+5m3o5j`^^9e)0IRz|SBJr^&-{%2<SpE3A<kyCPI
Zdsp&`ZGl;*-z)(B^mUA{;xF4j{4XQScW(dy

literal 57516
zcmXtfWmp@{_jU`#OL4d2UR+zCK!Qtg3trsaNzn#(3s&6Sy?BeeQ>=J#O|Uo5@4fyX
za-G@TY%<xLnK`#i#1|D=Y)o>@SFc`S%gX`OU%h(0@ah#(BswbM%(re|MMQY*rY<Y>
zs(OO*5OMIvN>W+!)vLNVtVdH6#4(1moSxgOSMU1&d%YfZD*gKE)uyC8KvL7&=wCM4
zH_G{xYE`Yfzol6MnD5`nMZZcw!6yxoPo?Dk-GTqdV?eMkup_*snQ;Lo^1fED23cl_
zv^Fe;d+7}YX*9RIDMM)V7xG;W<=Aztv&WWlnd}ZTuQ+!J;qoc5^^%H?qZ+rfw*5o^
zU4k3~{>zuKqW@a<wXVAg>!5J~`NiYxkC~W5B<Ei|^dw<PT**FMkISGG#CzohyY=~`
zFe?ZbqD%MG|95)?j-2U#mm&sa3u_e+5wK0KuFHssbQgH6mH)+rdkCTSe^JgKfLVcv
zZwBINr4Rl!OcuAdi@K>kvv6^h_*{ugr5VA++1S{4@AlGi4Y|Klci%tp=hcs_x%vOF
zUu}mmx^;bNodaQ#FA5UJgMH~=+`iX2p0BF)V-8Db$zQ6vnmL!~Z&^H=ARDatF#m>}
zm>cTp$(LlgM(RqqAK*G{bQ@N749p5^Lk@{_{J*6Q&dtmyv1>nO!{P8TS*o2;;RUBG
zA8KU^{!r1SxSDF8Z0O4Bm@K8nmmOU_-Il+0pPfXv-+kFx5eWNhJcDwOFfENWBw-kL
zSM%=~EzzGsXF=I&p?S8|)x52)Dods8sL)s-CO>a5;JTzsdfbYb0mb8z5Wi(3up{=@
zFYF5Ksy-=dg9l;JeY_@>bZ*H?Kf=YrvtKqr5Ga%!DsYT1F(9yeHdt1h`n~^poNuxu
zLTlb=u<1u&Pd)4Xo9&Q-chgk_w=-z6H2IhDOaKpAs|ej3y;Y`LWAR6HL*c@~M=Zpj
zk<$MiM?*s+NtZ^{-P$NK%s^jXiRZ*3p-KQK2p;dtPJrOfIyh8m_6C0b8u#7Ol(mu>
z9imB__3@+P;RD6+?A-?6Kd%lM$nKNDP~;QD%!#sN<B>g=l>*Q|BE1(*RZb;tOvkEJ
z*jl{rO{lX>_%HhPGNHfSx)EMNew&y1$NX8(3*k5J$_*FD;%f#B(4bK%HFDzx=@*xg
zcfL1Yu*F&flD*gRU8ml_&uIK(j0~R9IsJ}M>YSF+%dT&nHh>jI{s|xaHXa7VqjYk>
ziGdgAuI+pDLeto8HMkGA{9Vd%;&A)`ST$GV34prw?17MqKf&=SEe>Dh&TFw#;cnxK
z?-N5N`)uvz8yie&ej7byS<UPq53O0KPaW}bTcO|nP4%Qt+<2e-Mnal?FLh>^#<Nl9
z9Oms32k1+WF>B=nsdJxbVXG?t>$L9$Qo0@awCy#|Vt*ENHQ9lD+|WSU${pP=wAD*5
zu-_encAHM;>0$YA^IlpXMm49K;)nzG#p}+3N2~KxpGGaNSB+m%9AS&>2b19E?@Kto
z?YA>~VgRr83me}XSc!H2A91MPj=)@-IeXQ^KGQ{(T9Rss3z69MUi-LN2W(2M-SK(Y
zW)ccMzw$eP9)BpY0zW8z;(!0)8TP~RC}X&*R!VafJ|_cIduzd~`^&SY4oU&{^k144
zIg<n>b<@`X@5LZ?BO6hRbdS^n|K*apZZ^+m=uPwQ4nQb8rG+_)p-5F}Nipt(^1~Ys
zE1fc!Qs4*Ka$Jq;w&#<dCT#mBz!CwB1R$Ra$D-j&4gcN9;r09^IOf*F?)rC_*VNn=
z+tYJg&5V^}rtHS!q|<b2$oFw8f_3hf2LAo5y6dKo#Iv;GdgpgK<2h2s#=lna!o&lH
z(`=-aL%X~0(LyzRk1|MRvRjN*H@dG@8*O@IjGz9z6ipQ0c$WqD-0w%psol76RRVWj
zygzcKk{Y1;U((uAeYM{Whsc_uAacFLWoIbjM$GSa>Q9&7pf7P^H@$>qOIZ~az-<r2
zw17h;$}%vI$_nNR9COsD4nMFWF;Ykw9Fzh{+^i_(w+UmR+&rWNR1S+|C*VHWOin$Q
z5(Gn8%3mdLyt#X#kHx$g+_A<KpG#W1s}Fqos0ji|dN9Y7d?^iQQY|aE`?Ib@wYL-T
zgR7*nK8s0(jH@|U|JDw^w%;?74~2il_}=HA^g~TG&SigXbyXHP2%O<v!U&RT+S8Zt
z7pNK}5=h%4y0(g?6j85iX>OiL<un-Z?H1mN_O1JOa*`*s;h#O(^*D&xUOZiuq=J`^
z`Rp}MF}Jeki>~q~zR#DEub?>Q1Nn+nwpz**!`of}pnZ2NN}eLoKM9BD>G)Z4TZ9-_
zpFw=EJ}k^hqeQAiRU$=3l~TE%J<9rN^$aqssa0ek?ne>ubZkr__%d{S|L&fKvP^r1
zq}%o5`ePn@nbao@Iu}Sa#j*rXEjqs>x~q-Rx6&NnqcSrLwScFa#j=<%WDFo|Gf{DG
zYO_~5v{d|Vts&p0y`Z4~YTq3haC4<mJiWUUV|hu_-5vbg?!b4`)T~xmq4<x2Mb1<#
z*2caJf0`9P8MlrOZvXct7PhEy$4G+i;$V1fVGG;Sk;9=_ZgCpVRDF3k+0dA0w1PO)
zp6z9p-cT6xv_POFe?F@U(G;_4luVVCWGna@V>zr_gRTgR(#y-s;hdCg`N$ui<?sCO
z#8-Uy0W|khoQ?MsUNh&3=G)n^c>S_dh4S)}k$>M5IStEFZ;v{GHMor*Gy4k1%?m(K
z0|iCJB!GZf^NPEd*S;pm1v!hQTsDpxFV2R;8HT&arIek+P)>}j46>l9;6v4<Iewsi
zNQh-2Qtmxq2j(7*Ea<~07E{$=A#rMF%QuDC6iO?lc$zokek`K)EFOVy<9jY5wx{7^
z_uc{tB5C*T$HR>;-Z!G<_cuF*?3e-)?ljpK@Q;o6|B?<)s;KxwV`mn7nnG1_eJ}z<
zfHV~-__>ZCXJkW<Ls+Am8-2iW4;YZGnLIZv8e_aK(Q|(`M3Z5!+l7QBp}!rg*nVA4
zK*!$t+1Y<0EhS|-nN@>@@*Q)8EeEbK17Q*E;YZimVRFncK;O&{$q>ZPCWbfxfhf5x
ztYC6hul5u3r@k_)DT{(=P%J<#rl=I^v;fmB{(+cKx@9X_wgg=NvOu|A)O$=R!iO)%
z?=L*^jV#&v&0&_eQ+U@8ZdN7ypY}q*l+_W6no_x}TIASuD?i91Rmf#iBp!{;J36C%
zYdW&J&)2+cR@&3boR+w!qbsAyBv&>iHD}JD7oF4LINzK96;|hOxi7F19A@88@PcgE
z22m_Vl6g2DzaLJcy`()qZrkzO_K}jSYdDBAXINjqU%!iSn#u=89b{AajdkJw{@Gt$
z8vKJ^rz0QJm8flnNQ?Umoz6xWkup{hh8N*dI5w5w+FFuCv8u$vK*ldUt8xCt%i-V)
z<_x>vYl1fAZI(1|n<Oo{mzK4p3Q#G8JlC(P^Jj*0i>HF53$Ns<+x|(Blb;r=Id#cY
zJ*>)EZ2@^AHV$Xy4i5^?W7i3(MAJnbyVM>7hWE1lr3A0!y+Q>mUrLtJpl0o-#o(gJ
z=T)R~BCl@plZ_tZtV&;gw}zEoX|%GkviY?{IaF#~jgEX<yyRAy0<~2{qp|gms86|r
zS`#Vy_EAS|xxefiXtP61gVgJtrk|I)U`T^hUa;!t^Ex5pSiY7|&32&>Z656#tymLq
zw^#m>MBt01D0sesuD7hPCezn4OOnRnu}jWfw6P|sF;BV_UQagX77uLB&l24ON9%*#
zg;=}xNLxY-4%croOGCha{XGBi-DW6tI1`U&f7Dq*tNs+RP!sSyJX$oOx(7z@ehQ@d
zacBG_ZY$y)x&jMLk&CrL#i9Nur^y+Nt8>2%Kt#gDyBNW6%4H(0C@GS~pNVO%>lY`<
z1cMU%X!I2%TB+QHma<VUJA7AXst}H?$=t?F@y8>l1M`~4$iRp54?LDPSyWClt<nZ%
zrssN%XW0RoYv*iuvYA>@-Ks!4A(QA=WmPAQ%`Th{8;#P@%1!8D;WM)0mkEIsLiUtT
zH>%(w9UZ5_sG7(30nf8SvtNqB0<Sim%G!SRAV&<avskpc?8xYMcvc}E^0@)%LZ4l`
zb1WYojW|SC0I9t)+p^=DHO|b!5n=o4awCQqm*tx$9(KUo^7#vglNP+LArGmC?9R|`
z&GYkqoI#H<gNFt{O%O9z9v6}SL70R_>t#B4;aO>#{ber+6JUa23LJ>c<10n$47@MX
zZ1nJZ;f5~pRI&8MVJb;0!V}9s1l>+@zVDX$vO7sr{N=)#{9|WQ^BJ!KLw#j^EwthZ
zz)CK#F!DXN2oFfrXmzG`#N$bJP7`L9W7YKzT0M~JtyV{Uw;E5mbCuh(eth-?QI58X
zE|6-^E-%|SE;BRbu_ERHgZD`J>#M7Fj>~8m%IDwZVSccaO*WlpYk#*tt7~-OYr;j|
z@uVVOzVvMT3~h25w{?+>Ceq0q5EEfBeY&Zk8B4uMjm*M0?(7i<Vm^?tS1-#kS8gVc
zs3dGf9VwD}y1k_G?9rp9;YhHJQ0FUX*f$k5bAiK0z+KT&XgE>g+WcrbkM68QJxsjv
zZpxC`pArcOl%}n!MT?{8Iry<YT1>s?IsJ5a*8_f`UhMv?OI!Ov-sgijk7uYI_<gz9
zuT^K#<xIl4rrwlV{p}3wv~BV`fKZ=pgq0u&Qo;4VMpmR9lWEgu$v||LP~w|lNh?6n
zgtc5U&w!GUZVR0j1N)7UFJ9PUm$be|(|G~hZi66hHz-)thk=>ND3s_k2(PQ%T3Z?Z
zba(6Nb2%8&TKtKm3!VL2E1fIw&2fBiyWkt6_ekSDCnqP}E#nWsZdB=26p2Q;4)C*S
zGdZBZdhhA?9*>#uJIu3<wm{whmlMKi4$9R>gNsdb%?k-d)<y^Bl+NZvw$#Tye*}JN
zeckVb8zhP@h*Z$ps{4jG3<)VBu{VU}E58tqE>fH>CnccTMHOAttf`i)ZSNBz5VSGL
zAh6f~`1Gv~+%+vq?<+Jjb8x&%IZ-9B2Co7I>HYPKXlszF5A7v+-O$XaT0rBhr>pu9
zmRB_f;{N!A3ZchX5F@^PprlQ|X@7WxMYrT;2!5eVzKQ9VvFG#%dF0qEU?s62-C`@6
zD^Z=k$(WvxPg`3G;18WPR@f7Jx!g%^^nb9B;iWZFx5<2mjxs6g7tw5T8;bdOJP4P8
z>a_mPn|y`Dr#-y?pyFRroxYVd|2dH2WG^z>Sku>F;zh5GaZR&HlYUflXoKdDGkQ4}
z!{(1Rw-pRID>;FkT)caQtq1@rZ@O(m$sUS_gpubi4Yf3#RPH4{$9gJul-xk$y*E2A
zVqHQ?kbo<%=huU`F3q2pZ7_{)e^NETJj*lOEvOG0<8hv)o<|4$mndLcD1~->-iO`c
z`G_uMZF(yh1;3XfUH9}xqiXBp;wt+qDO+7y5v^q0A{+xsd)kf_Ri8thNk*luj8q@p
zZvWQv8{?62%rwY>FpgmP_)Y465E{Q*)96yf^@h`|>72*)MgS4mU6o1dB3V+Bcm2P?
zTmn#|Z28W_lTJL<1&H;_1@d)M=yjmO%~>cdsbc+}=hMfNI_6X4@0@SN!{;`gF325U
zjQ+#c{UoL+ff4Kk%$0VF0`Toz)opS}EfNAmCih9y{tM#Tn2`0rh_ax^Iz+;&N(_$u
zQ#8Z}(BK9n7wGsxdd3RqphORcj-TjbbE`z7UIzVWPcrG(g+Ew6@U61jm%b0=G+^T<
zV?SzqN<J}P>iuE<OfA@XYg|W<oc{h+q1m`T0O=#CyVAyBvy#0$!|Phxc{bw-7{`Di
z+U!=dcCEBM3~5cp{S;|cd>46Rs182Qk!2mYCEMUED{GYq3zI-#QTb*>H(dyak;;Jk
z3B`4JswqHC{@2IKQugwaJ#0?-aVbXITyA;Z;&79Q=7?c4*!42*T)%x<E%s0~=?C+E
zsu?V^QQhG)j_IFgOYh6mxrwDBF#LM@!{v?5bE7VR5jDtxzfje}-uDcKyO_k)5vj0}
zMF3p;Obvhd_u{xH^GjT?Rg*?0SqE-wfp`d+7jo`T!1EDkxB+Z=7=`7EF!7oUl!l<|
z1AO9@h|W(*`72U00@rnd7dw#8dYUOR^tM_|wez)GVP=)a!UXhR?N)s$LA|J^(M@sn
zh7--fCxp#WOO@U070YJ14{s>GIW2VK)Q(&Ar#a`?Y<vxI>t90fCk$NoY?VJNT2W(k
zT(HS&w#m^#36;CmVg?g}tdHnKyOP6h<puu?7niTXa?|AJ(`sAmd1x(y$eIKbCm!NW
zi0y_$3Gm8M@^t`p5Z6UBS=0&cG}Q(@GF@x&z!Yq}^7ILM<bvh%z?z1-m*D-e-Jc)$
z*%IVX`MYoGn6~pKwL+zdl~-F(wrL(+SN2C}Sj%v(CQDQ>2PD!0s-K=YU;6WXXSCkt
z^+t`GUjP~xmDH%7%2RO}3tZ={zoK5D4LMWthNi}kF~F6u1DjpnymX{F(65#)4gUB`
z1Q(h<gRwTtE=^T_j5?vQuk(*ML9_2MmHwN7(aB`=0BTM_B-XMQ9|hcOdJ)rk_M7FA
zjXg!JG_SMw%LCV78_h4+U*?UcQykYV^ED4{s`|Jl?hCR1KR<nvt!`f#@Iq3=cF|0z
z4DFsLBiugVA29Y4)ev?a+}LE2l5|b#Uh<~uLh&Mgx-DzCyXyGNF&+Jp$mzH4w4FU)
zEeg}Om?o0tpFOotTn2SZiCOXK`6CiPgK(-jrNiImsTIiF81#AHXYmI5Qz>Wr+V=G3
z`t#=1M>?i^yY?7<^hCmDAK$pZ2>uNIr4H)ak_RO~3R&d7Kxv`gw8{GJtQ2%hW5owe
z9OZ7hpJ8XoBHJE>7UC4$bLOdQlvyge({b&5L%23{P?<SQ+;zH{EcRvwX12CSPbB1E
zQHK?ND7Pt647FJMhRVkiekiYnf=W%8fPjGeAQ8=vh6(8JU|;>7Y_C6IW)jqsjJsRh
z0Xt(?2RUwB#T0s9I3HSAOQt8eI+Mj+>gUe|&M_)kg^9n9_iaZy;Av_&b9iQkxh)e?
zMuk{znJf2>5|f$h@Guc+r2vwu4<x#f<E#KW(OV+hFgYW9bAy;X;krkAM!3dB4%p;@
zoC0b*t!m3itEb$1JgEIio96h$UQV?B^!=&TLvY=SYICuPUF!s(nV_5XKF)6BD4#Ir
zGgLgp$#FU~&aE~>vxo<P_qIV{gD9Rk5T3hlupiJHW!GM80w}^&1s!{yuCX%VwS3!*
zrTVC?M9^Zl_~GMXU+b}n=!^i0x%XzJUK(Wjty51|s=j{g&GuU=(d1&)8j@qKuH<qT
zRt$sgZ%WF&#=<vmMV$`NeNARjeQh=z-MAvGZ|c>|!+r%?t+V-F;ga{)o2{1k$0rq&
zkhS^tEB_TegLfG3(K~&;Wou99{QC9YjLb@hOaJD3MR&6;$3l%>V`PC0VFK>>FE0*>
zvmtVG!{K}FcFT(q921NVUoOK3OQELAsQ2nk`C1hbLaCFrl5*zb+eXcY_B|v9fR;K_
zjtav+li_{1+>j%T(K8*b3FGE^TV+jlTm1PZIm7(p5i`<-I-EFQ!Il7&+K6zz-EOHA
zH=6YTtB8t8HHTxMv8;?$MYDIS|GUlEpDw96*J;9!0dO+2)M|hl%J+9v`Cc3AKk@9U
ztjQ-((qbv;2l&)9dwWkmz}K6V8>^~Px_@m){qp=#V87bTX|;RI{i&#`YJ5#W5mZF;
zoUk|5<9KvR%<Q8;7<L9Hs5g9ZANk#O6&DavB)td#GHz{XsQN$YUgFmWYh5?cT}Iaw
zU-vpyQsYfq(`-Cs)z~yb(sVfQkK+!_Ys3LGT@9uhRyMo8y`G;{+Q0U1*w(<{BeNbU
zMiv#|y<@&b!!GaL;!O53*p8OFU=LxwHXsFJHhqo7%g9xPG)UELQ8_~>2q=87F%bE;
zY>ABK%a85QNL?CZJuw{(YYg@zA7qP6%V*^RBKkIT2m>d<O?YAH+wpSdY<GNzKb<1-
zzsw~0c=XT7DJUAo`)!Y9=(PqS7rXYLI0%L%Q&)E}!!JqXxU#|K?=Q7Re;7?!tFU=w
z$Vq07JKk~JL@(pF14SpjwD7OEZTa%|BoqtN#<!-{elnPF8KsOnq{zQ=v9dY$>x=tW
zdeP$Qu|~p}L>Nle<i$7<%-lL)k6m}nSy5n7O{z!ZAKrjrsAM^@SozUPDzZSqQD4HJ
zq)~Xgj{lXAvG<FXR}E;OXHO5T$4{U}cX69=%zjv>su=+xr2Hz~Tnl6}?OFzPJ3t3F
zmd_t?8hUl!Hw0_c+7k_t=tz=IE1kX02Gg9hUMSR{Ck8T2k1$+(CXDQ!)2h(U@KZMz
zJIk=j$&(C0wZPX|?29b*UZ`AdG#ebH6IDj@mjoZXO^WpkA&+Ma%s14EyDZONlgbuB
zl=xo1c0B%9*zr95c~F35A~iLbcwvVQOEr;r4s8fXqTI%z{_C7b4Lk7hN+hw00_;6%
zZGT7}aMcs&Wwm%9{ZW>>jFdR=Bw3N`c~ZjP1Ab7@F|U=xwPgN?G5$Bxp_^d#@CeB6
zv}1hxBLELhLCsw^Z)$#7V~^92M<z^stnelM2^A$&C52RUS4}gB7p-P6d@(t7@bQ(}
z@pOSKkjA<j65!N0$0%sL9})}M(ja_p{E=p3lK+2t0YvegEofDD>iNlYZmRD>l}Mv!
zkdc}5VK*&jv!eHnx~{GVfQhc3gv1;Wa%J>!H}Pqs^-z|+TDK{SSo~&uccb&Uqv=KX
z=~AS`$+!Xj&;$Q^j3d!#J+)y865>}^C?UC-;$l@uat~Wzi-h3I+L@9+{p0oxUz~P=
z%QvGfaqt2w<vgVb7-BcH?1d|)A3MUa+wPbf988gU&6GDU=Cz`tyER@mqq@5OHWOt1
zR&dqePE3l&c)VS8vLY-+=p)m2%TwR7B*ZCT00n}!_E_BuxDLpLsLH4-(es~NZb`VQ
z@GsKmewtJ@+3#xN&5e!xT7Qp3%$}A}+^hqx@Zc8`vqH+qpPWwqh+X#!MKhT*QWhsl
zHWil2^O#7=R*L+_^psnBeP!-RksEO}Swr_2_*1A?*kC7=hT~yAjks>L72WMkh09#|
z#HIy3++;%-mjC3n;d%zieg13iG)J`ppFQ)x?)WYcmIEI%4*V>=g2UN)M8Uqu4rSSP
zW(H45KW?4Pxa$|QHAb|6AI9=CLJs%Y)fz}hzCsNDah#^s=2tt@;Yu`S<^|)k3FO6~
zKNaB4=Qik#kAB9qdpo+IIWCx(^e8(GM7>WMN@XA-NJ&ea@PSNUAI{pmJU`JL3lVuw
zl$GQtJlviXcpS%KD3QA~F;X7Z2lHg1;@K2eZYXjE<jSo*?$FQ(-H{gJ>a5bGs_0fl
zZ+`rvPn(#c?(#t*aFNVv7RT6F61;9%q;sBGLag&&or+L0=)T!1;u->~<*fTib(Dx?
z;oDb&UA`kasZSeci&RV3RN8xtUSfg!8ZS-%*cEj(fk6<fZt<(I9*!Il=*i+FM-Gg{
z$msFkI^WsO@B|{y-S#FaGJZl*&4Ke$=F&cWy3&5+u1C{xk=qZXOd-B~xLSbDx_sN9
zMfri#?j5Wc{}@ekNqj<z)R`GwHr%4q<%aJv(WJEbivVsyv_1;Ugr!E-?pz*-r757|
z7aSO@PKWDkPHD$kWoY+TXb2zBz+E5IYdAYej6#PmnSc&CdcM6CRzoTE`{UM_;qI`R
zwZd!Wp^^ngrZsEQy{+IXaDNZqo#KctWKwdE<*BATjL2}jZ~hYP7tLk-3*>e;VkfMg
ztpfrW`(E}~HXAm1?|z8Y?}6_F`7V4(XCsx6Te9g&Poh>m3P0`F%-X#A_SVGkQ1uA&
z4N#uX@CP8CjeW^%t<{C!|K6F$sHx#<=^uhCQbVb#s=9_B*Dxz@C*ZafC!BlF04q)Y
zExGW!?X}VIAeK0>JtGFr7~*_PUq8Qtw*4FnQwh3e^N0wL0}P2b#ysrDACVJ|at^j)
zp?4=G$d-Ra*C>Z=FBYpZA2Nf@<sl%4hh&_>T2ZT?n06dyvD!RQ%I+AfwCo0?<_fc}
z^Xu&3UYh3(y>B>|YPxn7Xo{}G^{PF0@45Wtbm_`z9t`z+ZcLA`x|D5M_N=Oo(apK>
zx*1TC)UWIGttqu6qrcd&HrtSl_t!Q|iW~f!WT-x%A1q%=2rH1qvFLnGuD8ziJN4oB
zKCff(-RSP3Qy1IMavOYB+SXTB4-Vrr{%PKC%LmsO%60NQ`2xSr*iZL^tcZvP-k-=E
z9UK>N<vP6`{moEaBt4*%(i|{?hEQz?_BTEgX}4U*q#LdpDwvly_dLe7DJDvb6L-H0
z<BoRjN8X=%N@jZ771r*TdAJA`%eD<~8j7%!JCVNi?$xqpdvnxCL^kOIVTXDW00}g;
zw5DPExw&c}WqS-+CnueSV^tj;oe|4Dx>(AZ&P!yy!IU~qGu3FSgn61Vs+eL!P%XaC
z%Ro|nq}>wBo;jj;dLK3~;_{qr-N*KuMu-UfLq${T62e%%xhy21OaTp4^p7dpDo6=*
znU|N=q%`hRr%PAjvLeAj+io`l)_Zd|hxW(TB6V!T=QO}alen?H&5&h0Z4(_(?ow+|
zU^85~F6Wy=?q!gY5rX_g&wqA8ooY1DNEPM~&e6=rg!@LsQVM$}Xb@Q-A;t>+*t_!b
zV$N4VM{Wo;(|vw^p2IfZhVM)Kr<C|Z_JbWR>V%^N`tPs{d^IsPl2U)rl(7P9EOTO7
zJlR`u_YoU2k*WATwggJFEWx7>P~L4feyfpOjYvDS((n&ik8%oXO$SE|qW+urs^t?z
zxH=G~#BcaPt#s;PKdD6$>tXX=o3d=i94<hVVr&XmAqCFN*1*#Y2@DFze`<LwvLMwx
zjqNE&c5rKj!6mHJY$JWeZqSnr@u~KF14Ip5CZv$YuWpz}=q334{F8eMnw+>z#RQ8_
z4|fq39}tOPkQs+g0r@4ay*~gGihs~edpa7GmM>wODOmUS8}}m|Qx<YQhEVN4p7Nb7
zR6s@Qq%b*NS8+;6L+tzg79mdy;tXt@cCC@`1cy^CRbui1`{#6yQg0)A8IyRKxr&en
zVSLJ$37_j{3V%A%*wK-e9JO%$uayA@&6@o8U(+uT#9QF_A4-zGK!h$P-Pl==P@l8S
zeymD!G_vrduad<xHn(npONPcPljV#Xfe;&~LOpcWH}f&23c<97e-X78uo_0E@mCbr
zg{saha9*JySjL77bC1;B%R|l1PH}D1`uhNtUJKr_cf&hNwm;rGG-i%~v;o+@pjoz<
z`<wOu2za8&yA1<XCxMc3r1T7XyyJS~fJ16eFp`AJJ1}Oq7$8GB0F||LtkCS8Hen3+
zG5YZ@@tYpUf0Np@naEb|3ovAY&wD5wtQHplq^qh+uh5wo8%aLyH$>xoKZ{DKX>?j&
zrHhI9X*)C7%TzbV_N+qY^AS>3i~M5Hf6bb%5W0U!*qHFULw#LlB|zE2HNV5EZM6u~
z>9;nb1)r-g`hsGkY3A@RI*4v->w>|Kdp016+u|$j*2+Hk&$Pw!2BzBaohUvioRnB6
zo4CGJA4qq)=@6arhDE|VI=4nN?gfY;r6lvL@sAfK)NEY)1UXS$O86#_gdOhmh~>$B
zAGGOl{^%aY6fYm*D!>A|K>24fMF{6<zHhf;M)!<5(@9e*S>~wzSyyUi=9g~}gN^V6
z5Ki_%S$-@81{!vIcC?qBYv~f8%&oi(5X3!f=jxa$6MnIKxpCqbzU9iU{qQhI<w2;P
z8EeR$vI^7SFnv9EbrDgUi*13O!emZ?#PMNsc!=-Wp0U`q-$a<u<}7zM#U~ou?0aH_
z_Xk_F;owEtpn$Q!5dNM3`&=_=<%Y%ON^^8t*}>eUp6~BpBC#KEf#6_ljrqLhbBtk{
z#pGq`QSzf~87hbNojv2_9<~H;`daaY+gs1>*p8X3tZz*5Qny?)rv+eBHD{XO2rS<G
zX#`7W{ci7<7CO&ByjE72W}XO#Thrqn%gV-Q{l<(KbJ=FqoCraBkTU_j5`>a&nYzvb
zP@OhRI)IlC$E2`Sl}rdgtaajVI$Lf&HBRmbn7u5>Sujd5P4qNuHPya^{_VH&%p=El
z)U3znG*YEfv&xUm<Wt7#8k3nRly|cV!eC!H!O{b%krl-c67h-L(^k{z3s^R8;p!Ss
z^evAmhW2yB`$pk$+^$L!&NH36rPls(EgUhc3{Q0<9IfeX$Lfz31h7~}TAF@CC&>0$
z%6&(8fL8ZZFxe0Q9WPbN$uYH0-3*>{bItzJn77=$tUEatzr~iqtjd%aYsnV*!Gzvs
zrm#&&N4a+yuER;bSV?^KL_7UkvcYnVV4WYu>e#sH9znzthP1M?v4I};i&=#YUdjg%
zggm3AE4t3g70xs&S7K&x!s|+tXB8ehjGz1tHeYOY&Go+F)v>jDPwsT!@}p6Bn1kEM
zr6PSaN$LVZPT1`?Ogp|+#bS^5L3m&Kh_UuSgF6VHz;N-lP4itH)o3^$-Phz0GWupn
z_qZqXDn|D7se5Xsw4Z?5D>{P6>d`g?9ZZA%xXnPX<K!I!8q{==Ddy@S#i}vYRW*m0
zx%3JWe4XO2EWa8M)>$gCtlsJ(ZF0DA$=4%IIG`{a-CVT)ZuW1-{^d7n;81wP?Dt5{
z2zGJNh8y{YoSLd%9_P-$Ib;<y@C_C}&?hmbP(EpI+|_lFYjB<-XFzL_d$N352Qz^m
zE_^~8{x@Cm%~&egcq>WWmU=)&8x_{jz!16akS76!5rM}I?(0>ob!=|aojQ36#_PI<
zRhk)1><t@j7obZ3;j${ej^SAUN9pN9TESTTBE<JB2RmZM4q7%iuZ2hop$wZf=n0?p
z{y>x=zZW>h+B4?}$MEd1C4y<$Mqx;{%3uHFPW#>Dr+}vf+MhC<#@0N>^Hbbj{O^<i
zjn-zM?(2Y-c`om*=ZMD$+9A$G4kK8Q1Xm7><H>&a5l!F522fH1ZkJJlI0&54@d+Dh
z)B+hP!jC?K5={MxGX+o#5lqTgLS|PfL{Ea1w&eIb<G~~ce&Z10`NN;ohJ@?;G-EU3
zO$1;9p|UQ7X-h^WjA#jWu@i&6mbTi5K>J%nU=-T`;Fo+M;lfg$AhcW9b7>r{r_L4t
zC<u5|o8155jmK3(?)i1{j=KFU#2D7X^=Z1^>sKrEBN)tVcsaRm1-fdQCu&!ysh^kN
z3x4;w`g+CBhOFw*n<#s{CQMJqvlg+=WAO`svrm}qjR)Q_Y0w<MKsf1?hP?ak>Wa;l
zq2<ek5tiVBLkXhxKcq2iF&$oaTlb?dZRG9X1g<$78Al|2!ZDtmi-Yz*V~ZK6&AUZK
zMXedw|4^+gGJ+q&qn`mDRU(C@t>GM8+Vh{EV7ocU9*;0SxHNQOjO43}|J?TW=cfw_
zojy?nwO7UwpK)+<n1@ZFJ{gt`1c_lC3oL?|_sGToetr~B7jbc!1{YuPbSC@Yn|dT_
zC|F;a-no0slxTOFI1Ywf8gE_dp76*qR+=nxkxU5G`wi~gzZrl0H$(&Sx;y5|2{>tp
zR4}$M?Q+}>QVy7Hse(3noiAB*pvBSXP0x#;$lcTqQ$Iha<aQiURFGVt<=&*#WHW}Z
z`2WqUpf|2&yy;V48OSU#p-EEFtudGW8igGDm!3Nddq*$VlrM5+<S*j}E?wp~8Bu67
zUn(%!+uZ$uuL0H`l$knbmVgT3;7Yw}nqH*H8G>#vbEL*T1^v1-YlF3P!>*=IpBi9D
z$4fM{_5b3wuP!h!b^6%$a48c-?*48DAvgMY!4vSv{^JK!a{Td?bB&xFi%|1>TrEa0
z+)@5_-bl>sEobTIr?V}M)s`9Lv!ZUE*JT3&Rkh;YvSNpr_=)85)5LC?4e=67!7WV2
zt(McnXCDc24`d~bKZ7%1TiM?$WRk0EGSx2njh|K}azyXoqZG_JS8LLW)lWYW^hjW2
z7%a?+IJfEV5wOC^T<_s`TzI^AlkkUaCFV-2+B^|*Aax~AY3q5x2cE<X@hGZjLhaw*
zzRs6x2^bn0Ldvr+WRQw~<^z9gh)j?7m)rUZj5kOW|Mb1xpDs8Nn9iY|d`?F?Ue5jD
z!dOXcl$1CFsjxC_`UaL$a8)FCx#6fJCV%)|$k4(NX(wumfJ;BqqSeFNo4?U7t!zx{
zJNM3vO1vC42z9p~QpBxwKlD8BGLPG-h=Tt-EPR@O*xil#SOY)PlCb1?0u&~za2@3t
zt0yxZVpi?;yD;{Q9BjO04v>S0|2oD+h`$wTif5!f=F$x~_}TFTp_b-^exK`J6qlm)
zVv1@NP~Wp_SC;PEZMt@=e9eOVp~beau%K({U22>h;VsHR!J96wc_uV>|Aqw)tn&kl
zVQss1|9~H<mKF}ANVNT&9sDf=wvh>*APxuP%Cx-6=8WERXP|FG(clD%su4{w$vH~4
zNfqdM2a(4_>QzbHFPwp6pJ<%!H{7_E&eb>2j9=D;V82=X?s>rtwrWD-yVB?HU-U&`
za_=u6y^N?W)KJPWrGMB6ExbBHDG;5#u{XBtk3*eL=TJ+LL#2dh!r<QmKT80S$0XlG
zix^}twMTxzj<OAz%*Wh&k7P;Dd|M$sF5pk=aIUA>O9}XCuL;>>MMz~Lt}z-mTzC~>
zlL>ZNU?YUM*h9BykH?Oy*GG3u!uT!)#Xv?W@AreC;FahI=?9|Gd(ofrpny9C!c&P|
zt|%+B`)GixRQ-{Lg!C2HL|b$Nwogz^8Qt{M(n$33BSonM$4c`PPbL`o<~wk;S)y&=
z|3o#=f1=u6F3tAH0POA{-L(6D|9flr$Vfc`PUfEp<RnM@H#G;u6wh{U)4^wwjKwNW
z%7GPLWtagslTnj>ar$&3w0aj84>_A*PcB=hz40t#=gA3PsA(k05;!Mfx?i6E;%|f!
zA&Lj3EN6%1_GO)y&Pa9y%F8WQIv<y)*)B)mqtJPbb&VQ03iuqnFL(2vCa8%Kp%gln
z3q|~G-5&*NwOpA+)TI#M-V}`=SgLWdfOR#oMsh(r6}3n;h@NBU%-%Y5KkNfR8Nx3)
zIikOHUOq+Ine?#<!`fF))yXyBw;G4DDU69bSvA<yh6o$Lav|wDQybk$TbGTsg|ZI+
z459j5@cI50eU-p;bv08g0JAUGf78#hXfd?-#|3nXkl%;^iexdXF|Mx3$SjH&bfvB-
ziqo&$gmp7wzA;Yw3OJa?0*S^Vj#lgiuRDeeR44l=quA1=p@Ny%Pt`sxpTjxiTyA6}
zqbdNd!Tn~b-St|i3JMC=kM|d5hl$B&qh@<cG$}RXMYfP3ZA~={E<>X-jh-4cmk}OY
z7oM2Xa(u<KR^N^H==K~x2z8v~TvFsP<6blbOLJ;$V!y|3>bvb_SYetD&g?cZv*KCz
z$4B~>NZY+HFMagf`CT$gw8J#ZsZp#(=G4)u&J4Rc@9w{$tP&L$2l_X-SSoYQr=&zN
zHXFuA0ay**FjanztPuK7bw>HV6D3s5Gh3osQmZ#asA&JO>-OA(aJ(X-h>Z$H5L`-3
zG%d@VtpKDfBQ9eLBT8`;{oU3I9iPm3e2qKJS8f;T^a^nku}%SO*@*V`8-}KC(Es%w
z&2W(lXx`eLg|OK@<=bv)gS28%c|?2bORJY}(SpM)H{z7C6ikiiTv1vDcX%LnHo>{e
zpBu-*i@0b0Js=Z`i<f9>Mcl;=R<&LpEC00HTSX$#evc@F)Ip4iecx(KZ^NP|4IoxF
zHf3$h)I!^srY(u7Cb)uEdC{LsBlVPOBn}&e)tYJtZc>w$jjguHU!LDVgJ?f%*x8k3
zJ;{erxF~-Thw)mhHam!5Wp{LR0GF#cehAu2C@U+ATyfza5{p~XPV|%%=Oll8SrXC}
zbyt=QvK8@*0N~>qmz53<;5B3Zo=oSFena>kVNn29adL8MYJ{jS51Ci!)D%-E_bK9b
z5}J6Dj1e+=TRHn^gU=(aZ@YqkO$>w^Ygj=sQs`q2of4s@haGl@=nooNps(VIsls6D
z6~C$53lWcBxaDTxSN@O~eFIp!X67(fT$PA#XyYFv^p>TxAYt%jm}~Dwj)2a8p7q3t
z7aes|MPZpZYULy*vMX(A;f=rthlIwj7YMuh3<?QoimTe7#jz-cLTJTi*^RNXV5H(8
z(j^IyYnw}4ByqN+v^cMPxbaMcb;w*iv1y%}TSXwYd`&I3(fFMSn{AS*x;oT@1w0|Y
zD^vJx3$(aGmzc_7v|1mgQd4nEvRIW()d)Tl$29$LG`6je+Xqc5HbK}SL=u*Iz&+Ma
z!IGK;Q8S<Ijr~ppME&o%Z*FcPiV#Mk8Q0d1Bsz{C>(l5@rmG!uzt19gO5Tq+wN$kw
zbw7@<&rLjBoXWPxqz+ceek`kMQLTLVy;c3;=quO+cV0X;)_fYK+u0ECk?QogNL-v+
zR#<<q+gi4SN4xPS>pkQ~Vs*s@O;gUh{Pbc~O?vop8`M0z#8i)M-XN;yd`tCpb*MQA
zn_#FocTOAO+(=%1kc#pSD*eUNU^&ja2+0Xtf!gq7D2cFgv_nuIItm2emeua!K=on*
zwZiy`H7jgd`3Z}ui7Q`p>w?3Cx=f0qKzdm_k3QZTri;V-Yg_bV0{P(1yPUSvw{Xi@
znQHw`37AydCTs~-iWT?r@28Rl3UJ61>i&t>_rTxikz#ew?0bNbso%E~+B(JrxyzxG
zfGrq@V>MH5Eqmqr>{dGVbduE=&iocTMHfSte>iY`C*B8;pPp{dz;t;kqq+)xwafFP
z?*{GS@Nji)u>1DNF#ANVe;(*ws{D{&<LZ1M=@=o4q4PtBb6)}DW-Y!6TvTb%m*o{f
zd14Zde_JnBU5PtnO$y^{6Kg8<hIh0MWPHsEE@Zf-G8sZgBpDj9Oyto$bm6O`XkSEa
zFu=v4x9=f8rGh3__t<-DiRNubo6iV;0_)mv!Vwkt#ZTK5rEYs<+BQ+5XB}KPaXrhU
z5=z7nQE|~VfY_d)*=S(JM?44LP)UCb4Ho(2f#T+AhU;A1c!aSn(%uZxD$S6%4SC!#
zQPUoX8;HREs;l{uMgsnN#a8~RCTOwGPJtouQ!T^VcWd;dCp48v@x|S}`rO%fUagmC
zG2Q-QM924wv8BPG;)@JmM=~B^t6{X2<f(n=U)Ank>7Cc-e>H5WGyF%yI7(wGT~9}W
ztc|boD_P)lf`P0Lg1DxVRKIV%jGh|nhIP)N-X{rWiijM6W{pczvR6~~evl;0w2n3h
zzb~{z;x@L*M&V9v4JY)Fw|7AwP0ymr)pglL_r%Cw3a)im?uDr9y><EanDf+?z(_Ed
z=n&Ha>hSc)E3+FirUj&s{6fE?R~Ua2yMeZJ8^MWq&V1cd1&-#DBXhQCZ`io8$#_F=
zPgZ5wb*lOARzgq+r%BsW)axA{YaKXjo1c1tZwKFh89HyvHaIBb{1}7wFKIe=NbXM1
zRhQ5E@`ogUVQKp9-St%J$wa%n-WV@D$u8L~*Lw{lHe`NdH6Ou}!ctlWhU$T6m-OQP
zydu;FB&iT2uLTbjD@JP}I>WB3yI)@`YU>NQj>vF$M<x38v`*RF#)h@taCWb}Q>fhY
z16Bn+7`~Ky>5Nyk<~6rwo++cH#tUy~ud(~zrR#2Sbw$OpvvWMRI0y2S#O>(kzvR1X
zCEISM)M6*m<XU)1LvX4xrkT=1v-d7TAw2PkX=CE^@1bD63%=$_(h7vRM905QC^V|1
z-~(@(xt0s(#7bX_-;DL}v&o~aUEGdKdGn*qoG;Y_vI~)N$3*R}>Ib!(9HU49t!bAu
zyvEXCGPXm-WtJptLS4=2w+VJ?DBhF7Hb@C_Duk!(vD=+)$)zFUY83M+@U4AL6N9LI
ztA@JOThUu9GY1i^w6B~7q){i1on*Fk=HTRfI{Mi~@#d%Bj4r<wdnEk!=$@@1bZ*G_
z`I@_)(@{ASsP9PClejKnfAD`}DC+5vRi{~RHN+UY?3NPu6VaH_cW76Z$3E4uSF7EA
zKcP*2-)NVYh(G+iM5H4|Za8v_i=U1;o}AI+2M})iw}xez^kFD#4;uYcg`5|cQlO<1
z(inj1<ya31MT|#8p8V;TYMWYX1g2V=b}n=cmAiQ=QTnLLsZqg_iu9I}Bw`Xy{p39M
zR1w!zpWnpT7NIqawX;d@A~!`=b6FN>3V!|!Eb`Yt7nfsTW{~(WeQFYvH5^V>Y@fj9
zy4&Mqmf7#gm5FO8B<Ohj=VN}mVBC1KL>Zk<tZ3%aUhTRaFwfE6xAgD3cV+u^%eTy0
ze@CWG2v#YZ{i+UXag_m;Jreu=Z>xU){_%&O->#iSI3fAhU!6;J3yT!p=9ZR-BD8Hf
z?O5%SbF+fF-JI#7AslPfmYvv#!27$8u_X1)wSYv~FRJN-*Z~F2;hE_P?A1MrOa4wC
zD*`Tabi_+2p5J%U6YNZ$`E9$RbWKQ>sAA1!s)JwzZ$?DoUSb2mdt+#NAEuHIBI&vt
zUZofH3Pk4Avo_S#O_P{*9ppz1f@&*tK2k`e1_Ml=kho6yn%A!85&rP$KSu4~<BmP*
z{o2~VP?FM#WVh=tztZWWtSj0$ys2O22a)^s)10hHorkrhDk+ZaiFK}dipLC0FMt@`
zyOeEG{8`v*?vm!p7xu)9jnC<fm}ysTuG^E+9e0y^A;}9g#Kv23i3K}5%=w=OoS1V$
zgOsX=D-qi#BI*1WJq|WsyTxI-C&XkWudlRD(3l3iJk$_s2zOmZ?nmI@hY@AZ36U9`
zw$(g?Xe*<hBR1kc>gx6kMLCfhv;mo)1fEHdr>c2w3B}_iyvZJvP|n=?W4N%<B@l%|
zP$Z^e=d~s}9f+_vKYjVaFzBu6wEzQDvAiM%BlI=h(d8wkDe=K#X+(zZB63NlqHHu*
z#ewSYYV<H0T^CktE>?j%TvKQX#%{`9s>7xBH)u~8MsdW)xFD0a(0qFV+1-qw?GgZ;
zX|ltr;3P@d4b>M-kWv7p;cG1|8~^n;)2g*@!*$kO>AACZ;=><A8C79BOzfocuXT)k
zh-z5p78Vo`f*QX|{xre@zDi8nuBA0UH#;lM)p_2zboS~BYX1}O*wpB)VDmq<zTtn*
zWcycGtc?v7A)a-HJpPT||JsoKLJwli?GOb4SJzYOk`r32ZtnIVT1?eip7k^jwEXld
zPP=dae7f;MfUHaG{VbPNEN#q}VQfB8lFCW0jWuqW#hc(e4Y~x%kT8!?I&J<{vR=sb
zPz+6+0BsiTQu&eXg)Rja=^LUxti1KEQPU^+f+vaUs^&VEl#1d_JbIbhbQR+9xiV|p
z6{gCzWfzeefN9LRlxCl2Uo^DWeGoFu-{1*pLlYt%_V(DI_T4%U^erivUrVAQULf(g
z5I1N4O!zeWXxO!$mr}W3wSd{QFJ(BZy-BOAgV+1QM~<x(Cf#MlQqG&*awSebxq}0O
z+lc>k(qP5NEzA7y*Gc_;42j);&w_|(mh7>!6Sn5OqsVf9A((5`r%F7J<-_{;*P~xG
zpRGGjETjc%dkL|KdQ)Ptv#_(9^Hk+sUe1Mh8yM&xZ1#rCEiZ4CjzDtzY<cXLoS}jz
zZ_CSgpy6I;e}KmeRTeMN&zmzd>MnenuZ%<I&3td(!_zL3%Bnl1I?v0c(X5vj?he+8
zrO*3QhziYwld)ZCE5FMe6iMG5D~q!B6J`6}kDB65EnYRt1?~jk97Kv6PN(p>hgm2s
zCOEs{Q;(7$N+jOr#KEkT{$<~#Kb9fRdKiA`a)F}Y*SK1Z!~28#B;vO%GhbMe*Hz6V
zU?roecjoK~a*6*jAVnOtA!s;<BuxBmryDJ4qN1V$g0%(~0Nii2u{6fAR@nlxYrNiD
zVLg~ZP0lRU5q(Fktiq`x(y}vF%-Q&N`5U@d;kde39ox`~ViVxJ<*{13vQBawv}5Ln
zL@~>est-yM%HI@=o-DphoJ)sJ=(1H9bpgxn_<p#75p+E2Um(8N5T2bRr9lMWyE!AB
znnXJMPwvXOKaOl0s3R#}jzs!-S!80Sk3Gh(vy(B>-)VmO$x?p*7DdNs%IvET-UO$l
zW&s)PjcyxInbtVqj-is2Le!nKJs`HuW7Lwiwr+`d@m1)}jN%4!VzPGS{l_RPjQ@1n
z#<;;3*gj9gDi0;ZF28nr^z)l7($1+n6^SS&P0eYs<HavpYIsi%th3hZ3DVa$T5@m1
z!l_&=OrMCjTy<Ea7WY3_-edJ~=LQPf1_0<?ror<|8p4lTd82#hXHSC7!nrWFPkq|l
z;ywQ6$dPY8o9sOO&85thMe(s`EE54e1+|wFLx-jKWoa|7^pDNn{gV+-<JRAnH@7+^
z6EUh--0a8+T>64ZzVyPRH6P!R)RGyhma?_%?*J{a``2QI*qtcR6J${ylpD8ms&9?h
zx;nnQ$|O7cpc_rbr+r;=x>T1fRjyz@6kBlHEV$C?lLU)4U&7PrNlg1JOo`Z&i@_h@
zEB3TQ!wwG+J!!N-Nbn-pM-??w#N8N>!QxgX%!-OF!KO!E5*!No7hV_4r~7OfU(>j0
z8nG5f-gVJk{`R=LF6+~VUrf~;l_E5b1;;BSFvY>2CxL|KN|!Y;Rek2m$Y}uyBrf7t
zi)zl|LTmTx^|>+)&b`zIzj@v*fP^yn-*Dy}*9cvSGy$~eaLcoz_bElot-Gtsuud@5
zQK7=+hU#i7m>bBs3l391Bn1Mhw&4x&MMDNmT@!d!+tn;#^&ZFCI$CMvcD4Y%^HakP
z_yhZQ92%7ZJ$o<v4HengA7T8|5IZ1B6mpa^d7@^EOI62+;+AuQbz*pH_nnddbl9wF
zuF6?w$Z5q_`~R|_oeh^KRP*THzd|gT=zJ@$!CZD4D0fDV^@^F}V3IsYPuETVeLgct
z&uDG2JvPN1zenWzl7awD_Us@|;sM8wUfAFcj#1>mHxGL`0&vVzl_gkp-$D{LmQQ}h
zoa<^YXT-K-&d#%B?B>u_zGXRkhoKCO;BWkZs!i|pm&K!6=EzK(<}qhW37vxr`6>WV
zG$KjIdBIT{aefoch}9I~AiFVA+^mmD<G#2SDZUWkcLy~<?U#-If&6fnY4H2K8SpP=
zLX7P2n^$S%$HUg3<L=L)6AH*KgOxZczv%uOyX}Rvk5P?Y@uyQg2+YHkcAOaQbyx^i
zoVF2L{oX{^q!3{X-sG}JqG1FWNbuxn3x9g9P(0fv*fr>E&&j_wWy@!aWqba)Dolno
zv>%>n)E-6Br}~`jpY9}6;jQN!sIV=f>v3`dur*^3={fK%AjVhAa0&=!Rz4`TIV(5n
zBeCvujOVD~aOm~BC+>Rpp`z;em>{93pv{=70P<nBBPM2yg+fm^3a8RP7^l>{1f;T(
zsSkpwguHb1FA2*O4D0v4hS;fVj&H-gj6nAGBK@*1K>Sh0A=`5R9k5?Ik2<zASp{ej
z#7oEe)-a=p3~6e?Kr^O$KbXu5R$@FsIq^)3`S0(>Do-vEbnq7K&v&UApF7xYCPnzw
zS>Jh**(1Yk(tz@3$$M6jq26*uJ4m@RHkN)m2NY&We74*6;&Gkc-7ensRU{X=E&V&i
zB7EqJ@b+j-?|EdtZ?~jOZYkG%pndHp5Tm0w?;lbYgKNn`!79)7$)mK^qoFw$d9;-{
zn;n1RMa{k=n-$^Q0U~2h6)eqT=rfUe3i#X>WLd7Vk`h^+HB!<0r>(<eIV3GGOm%=E
z7iQ3vSY_hB2f1N??2x-mn#^SPQHvkG1pp!CM!!kCT(C!3{i}UM&t&5Y;MNRTil)3%
zWf_A+%DdHr0yz1$KZQ`YY^TR^wLxLENFJ*r4xP^Pf+vQc`Q-7RKNS(~VDU)1#9Aa`
z9RLvv&LL*pb|j6}gsN=>K*~MfpdHQUb<il<IJCSCpQQlSg4&myYlnuVX`!bm6QqEa
zm`qpYYZQQR#0-Zv9dZsAVVhsjRTHIXS%<4E7uE&-KdR0;uF0tV|B8r&NDm|gMz<&>
z2ncL+jcz2Rkyg5e(G8<V!{{0)T}t-|0qK_R`pxHgzJL7wxnFFr``!-MeRiL7uIux8
zpF2HcbkdWtVmp|O1pA9T^)X$A6}NZiOuQ^((@N;d*DF#@Jna=>XV4d=#o%9^A;=9w
z4XzoF`wK-ghF2D51J$g}mxui+U&zJsISj&WVY>F5Fn7KyW<>ilCnYw7e-GLEx@!C|
zKX>=pC%bH3EwqQF0{Qh&>4Z$p@EJoZu(zdQ9#Bk_S9UNaCsAm7Kjuc=r5_cw7g?%?
zw`?ih?qt&cn{K_O!K{-~xT;i|Ka>WktnJQR;b}%1<ni{F!u{{5w$5YkuHT3_>{6n+
zXDj{rWLk%p!DAI9X`JZcLzyHQE$Z)3l5#B7<{t}5n!j%uoFOibGdrDyy$U>d8U&x&
z<#?q_beuRsjEP7atwQDsnIe@qbA!rwE2bt0dJB;P={O26pS^cnYMt^x7bB3(sTrbq
zRbrxU<FZCMh=kpHt&dU$V|yo$8+`t=xQ^7vTG}gd<9V$ix(&?!c^F5Jy5bASRd=z_
z#q*Y@GEY-#SMq+!ouB@)RVzYx%}L$8l$sarVA^)};+-v*yyKDC9Y0;BX<k1ui0mLP
zfgQNrZjO;!Hl<SG<G~U9B9J`WZHJIrgprx8B*OYneL=B2<JUjQxq>6yvJeYbCEfl|
z3wbJDd5Laq9XPHICvS9e)VOZGp$t=TAhBk9$_|d*3BAW%Lp6VW_Hxj_a&Fn~i<QZ^
zvc=*As5z59oYK78X8E=A5Jh!w=a?;_PeqN2Ch!+S<MZaP_{O55EW?qAra*S+?jTnX
z*E2tpiYAr`!VIFku2xW4kiw!$LGG8O3)lN`0~Zydv-U<tdkX$yQZSvtGp}lm;3XBX
z{EvenpI1JcVd)S2ZvtK>d3^j74-U;*fN%4CtK6&TZ4Au+saaI8r9Q=HFB1Q4Plp>D
zom!=Ck$e<az3Yk4Qe1<g+HK{~b&O-oYppv%&74EOPf-shZDikWDhIMuT`lOTlAQ#c
zBX`W|N=JY3i@)B#(a67E^$LcP*O<I?B!Z}ovXD|5UHeSj(}s}Jddn~lK{%+UCu9)S
zq_jqEA`w8b)H0qB2GquMgFC1s`jhZaaJP-gTjzS3e-YvEolO1OYi&vb^Wi1<q#PkG
z%NTDiR%+x$u(WsW97n6^!Zajooz?`db3XB#Xh^0_)nCLe@sW#LiY4kHI93YanXL;_
zsL0t4@^f_9t~>f8Xl=aqZKHuD{+grXC$0rmA4ThLQjOrs9A1mIw~emCqi0+;=Y1FV
zMBLV8%YEY_YkOW^-?BvGm_qzifz`j5DQxqH)h9=TVK7(<?<`V%fJp*e;h%^4HWS<7
zg-d1ABGw;T<0dl$FEpXKIi$!6+FWtWM|YYK|A_HQ_wZA;N#~htEn!9VzEF#{>XU%0
z#n}o~{Ro~`73>h;nVtD;u}#4u4@3#9A}C*XP26@yYphRX3j}}DLLC{-KL>ItC4{Bk
zPLuQM)LI%otkpHaTSVQ5ml=-*+Hyd^U$g~9J{V{IZ;hxkVkxRy??)U*^{LuqEY?B%
zQg%J>UlKl6_2d5@XZ90CFAz?&3$tH>*Uz`fNXf8kXs!-<fX7y$3o!@{!;zO+(C#p|
z%`wM`tmK2*CD3wJ8P+dfM6RG*m;FERN&Fy8DQ-5Otu<U-*yO2Ln61H^p|G+3ec_&w
z^t}+*PF!z76cR3x$4;h^biy^K%!K%!-Zm0A+^F=bM^ms_@j!{vfk6qzXFVPt#kZh2
z9uE(G7tbbNqoEUX=1K<HCE{Oosck1xry9UymJDpNmDgk))Jiljsqz-B5m(&jvgzHl
z1bs3#Bew2o;OMmb@&HnhzAPcHUNV7#M(wiho6=M@Vg5w%{SD>m#&0gjaGiQCsn9Hy
zI=?m={<_b%>SP*2^6Zu9l<5x_sVx||xkAVxKI8q~l68OBNSgkUMskLE1yQ}Log4*>
z6$ajxMeWu(-`H=wde%)EK_T`gcsFsix-oCyA*xra@VteSZ`NR<q~5knr<WLadlK+9
zQ=q}S<M(RVeN`O8^d)(Noc&naSkB4_O#g_qq|f^x+HMuRr@uugyEAT7bhj|<y{S#4
zbjXR&H+V-w=j8NdRnPIH8tX%bUrgjHz1R0gjtmvXU^HE(4<C$b229uXKK%UcJlwlL
zFxKqD-TjNjM6`)nzn7Ccpd?+zLqHs)|J^~bk$O3z>IKhGvPI^wM`rZ-ZRm@0;gd{b
zC4-=rvo{Lp+t|&3L>8f<t-9OnO#FWB32yy8=F*?}RC86KYFv3^XY#UISVkHVAGpGi
z3+0ziZuM~;42`$!FQc2SvnHvzz59viLmq}Kf2M$>?z8p%$Wgox-VJk`ORYplkn~&Z
zdm95a&+BNY1yKL|J(ve^m2ncxoDG}~pDOVo;GlS6eYr>_w|{dUq%u}U<(SveMOylD
zk2QL?ZP+th=UcMx)NiOvfmy3e-DLQpjBpm*{#)CJq$v;>?38j>SCv=8HpAp}FK3dp
zmM+qjbUphi+umW;3|;@$nfb1FiH*lGOs;Y;Ao%p;N*V(gVEPO{R~7qZUO+^dz6lo>
zrG%bFUd0QSZ@>POzH|lOt^Tm2eqsK!Z6eWgC3!gO&U9PWz=v?!)D83Oy#3;Gz(8sC
zdGkk%H!%Dql-&(;OQT@@fniJNLDCd1K9z;O!Hpk-LkNF<<R2^Jyl$Ad#j+=iZ%aqu
zd^m3j{=~jbpmAk8g0fXxgE%SC@?o|H-FO{f+;dJ-kfvfxD7);K6=~O7!az)DVZ_l@
z^!DF*m6kb)h9|CvqxZhM+ueCb<hIyW?6q4fZPg2$2sWNtlW;~>gF~8$vLi2Yn*8&M
zCv}bw=u-*9dyiVBKB%XGy~>oIUCbTQkc3IeE4}UM=Y?c0iMYmkUcXS)zv128mjlTD
z=M$}D=y8M+Un+j@x2!z=$4Mf^;6&iV3Kwjqh&K1@f3)UQR#rY;mkr_rYrZE7;3@my
zVs#8&U=!%!Z}pjAB|e}8!NP=EOce~s&dD4tC?5`fUG%euKoth@3D65I-@2D0|J0?j
zSkFsK9X@r9|0ZeUk!2{Sxf{>=nTdoG(4>6nA_br9c~x|ijq!)R)a~uxnY}Ow=Xj8(
zJRC^;cPXPln1g3s2v12?5%)k8(p0O)th3p%@vls$j&ir=*r~JtXGnEbbCwBLGTP>>
zSHf3=?i6VM>HL>e>9>F|Tiv9l<p9?eO0~R!*{VIkUh*aSiUNz0kRF`vZcX(`mf0%O
zhDJ@}vfcZ^9$Y7U@~;=7NyuX@DdY6TPUdg(NV;M1G%|x!Z^!<({4@~F=MoV9IF$oW
z<=>J;Xrc~_hSuljzOBhziR$+)MpGIiN(qnZ135ZBsXC?{5xL%vl#=ZwUfL~RV%!24
zdRb5043#pQcL^tPwZ6|@+=J*^+O(?FiEBdW@9*3KxuiAO3648c*bY=Vbhbr;>b9y^
zqxCu*!iE4FyOqTxk#1;6Pxy%nuI=(;i2bfQ6&X0ZoOkXaPkeD}{%9HPSV33orjH~C
z@zE3zLMf$*>x-ryPcAbKk75=-8>+Sv$B9%ER)qnggA^hK1GjOy4|25;N?DVTiABwc
zZkfTxG;KmB;PEMxsiKs4pB6|uFf;er&^TKhQU(^0Np2C{2z?feOlBQgwsC49>S{$x
z0?=vwC~E$>-$0wWP+07*o7%C3DKOffz~A_0MOFvx&XTXSq)FFxxH=XOvsk&eqZW3J
zMJFJ>Hzg6tbb8*U3OAT-{^?uf^L-nBQ+uRr`*z{ZVIxNYx2yxjEE*$h?)3KSVM=gu
zy<bDjYPf6w-mcd{3%LkLdh_gMa|O?l@I4=8)XMLHpsM>D?~vQ@TTX8h6mHyBLc?KS
z;x@gunbX_lbmX-8`CVi}XX~)@lUricu{;eb{a$$g-M$&xr_PVUO_03c(fe~x_MGkS
z&#N8%2#&)etB_$dDCAY=>z77gmsd-VJjtiL;r7?-Qn&Qp)-M_kIdV&C4UGrU^S?4y
zYr{^Dw5-rd#uaTzb=%rjfBb<&Ee%G!Oz)ne;KIVzhUp$Vb6sUvAi8245^#L%%+AdX
z*tHJ32}L{Eeoss=Jf|b}STW{?1?DY?lJei-B_*k`M)@^`>G0^cJbrT2SG8|Ba1&Bp
z6Mx`Ba$EAyF1~q!A|;0$_D~PWl0=n%w0_rI5ZV^O3yn`V(-^zYegcmni{s$&=8#IQ
z3?mCxzRIt3snz=uX<(oE@OD^p(+0Yu095CE#h?uuyGuwfTJ20TF=i2MJS1+~VS`n=
za3km<kQ<sh5&);6vVUbk7=uX<wVIU;*l+#eqcJDCSlxYubDOGT;QT8i@xBVV*kzoA
z><TFkm6HliOu#G*`j#$6j%(W}!(h{IcG}61;4LbBvf*Ri&d75WJ`%1PjiYjve=t<q
z9)&!vO_$Om{pHzkU0!6Ux>DM0BJexBthRZIJWI1Kw9QT1W!17X3JE_8A(vBk+d#zB
zx0FW-I4+tySdgNSBuv^qh^+^o`>Rhw<&i6to5mH_Iw;zAAY;QbSW^#++t-&R;3JYF
zEH(sZ@#XI@3?56WzJ`Q-G66<;A<=~QU2!(@ev7_d_C~jlnV5R|lTHMA)(@7^u8F=Q
zXBHmguYYqBFwVBSXj^?73ayp%Sg1uHfX_LdL{-L5?+i(@j@baLV}5%a(LI_fnWqWS
zc$=;aaV7NF0nV%yLoIRV_xZFU2EJE0Fxj%dw#3OHQcg-<Eko&5fqegJ-nipowi4JJ
z*xFjLl$~}LSdZ~Ilz(SeWe$c)IDIkm&dvVh;t9EUj%O=z^@Q2zP^06D5huBYYrsaf
z(mcRf;Cn319+V^dg00rS)@d57K^qlJU(t$}sN`fn?aB-BUro-}-2_aXyaa?DxTCdD
zx@Ogj7)$Dlglh%p+$HJCj;zidUG@L}r;Zc8jt;Nv{(v3DSky@5s{fkcVBjrTLq=z(
zp6dN0z;xh=9PxWegA!b&Ktds7v_StyW7>m+$2T)bJ<{q$=pPN9WvVAjJ|mnJo(Y8!
z&y7(FZ&Qp^HBcypfh*1d>)O|T@JKX+21b?v9UdMI9PaJGm!Q8Pw?3fbVlOSl9AXs6
zU|Oc=5;)%sl011v3Rj8uf2rx>Gf)g8$kAOu(F@TTHoSf)hLL4%95N6rLmJOxLZQiS
zjv&YN@6Jm;D%o5J!E<S0OAwsKcJ^oaog4V%{B!-AZv>&0FX#SU`;2Gc>TY<i00t0{
z|Mb-!H=2prIqHV_80`sGP+UXzAThLjRbs8QI2Wz_@B4BD5%Bi)wzLh$VRAGdV56=E
zB#Qep{0l?8{&~agx_h+tO0VjTgyh;>dmB5bw3T^vDx0?1kfq0CX_Z0Shb@BL`+`f~
z=(MRJoDsN`_ZRt7bIjg?JLrcD0-&`9vkD0$YXX$|g&Ca5GQKubCUZ<wY`&9Fx4QS2
zJe7-=lAbc~sVua4tMkEoU%e5iomm%Rm$CzGNRGO#>lM8Iiys1fd#U6d^@ylRYl?M<
zdVgrlZG9T9YJo>}Wx>-ni8|it|5?tta5Cdz+_wdE=3>jWd|tA=>MKaq8iYu`5Su3b
z!`+r$xId3^!J|%Vi@S2`<++pJem5}L2m3%rw40Rfac6Ag9gc4%ZB}Nv+WXuiOWgEE
zz<muPS_`kAwtdV7-7SCd+`zIk%h>9Ic__})3)R}mQ<*i#QcC49hw8KXKg?OogaISn
zz@%HhJPHFGpCxN2HgtL{!6y|p$fmeg-hQSxE)iuCIC7F1Xg`MA@G>vP9jNKNWJ7G5
zKtzMcW2$nI7-AxxuLw)?45^iuPaMs@r`gl!=TsH{yBpy8Ki=`AFTCcn(#mD5vrHMW
zXPakE2nxgfWbvu*{$#jkW~?Pa@+O<8{f1Vv&)(l#%#*N3e~Egh$xoX5bKr9^FGIxW
z`^Yuc0lSXA775K6KeIQFP_5*Ow6@QYug?;cbX=zTD5Wy|W`p_Bj~nKIvuX^$th^E8
zWBOo2h&@1GMBnIR99n|*D8ddM3pQ%^#=8QeF{@BYaS4z(B{Z!VlF|1rTru;toyM1j
zin6!kIGh_0E*{&U1N6K5Z>&ahD9a7Ab1hiIaw$>DOAZ*+c)Qn)QB;4SP+XW04(f#$
zCL2P%D9h4;Nc7_OThn)@-Pp~y#~eM)G|o&2TF)aM)306K3ER>F-$?_j^s3rh+aoSs
z>R)|3tIxT8%vtqxGXcFi#E*sry72M!##Qx>PfdY+e0(;vJ_->}>i{zi^Plb-D+g<$
z;TnwFPKjh01-*`oY#bbU@ZdLoA)wMX!T;!%?^-`6{UH6kwu8p4U<*0B(NybUQZ)64
zX#&|kNJ@R1Wb+{+bxqBQ6_Y{@`O0hHLtie!Stk(*<Fd`;#lZu3@U}N|HEqhMvv<PR
zAyLG^SU9b<C#e#pa*%F>_*XeS`L#a?ydAlTZYR_glFExrkzRLT{*I)G!+Y>bauHOD
zyCfPz;GRiForClQXc7MR7>krg&-QSGS32@+>#X|TC%KY>KI^+XHdRE(O=a^5xCD()
zt4|c2a{no#@%9i|vt*0l^d2es`M2#fuvs+*tIhtC35$Pql|mkqDKf5%@eQgI7hU}c
zB;-M7>pt8vNIN|dKLYDW7|RrCdUx>rBY%Fy3M`d@7|I%l{rvfRA3qZ&WEw0xTY9?+
zD5!5NRN1$X=ujo=p<M!#a$pLNrUwPpa<6UiHK*pO%y-$=bU^H%l+a)PWrdzGBAP4I
zy}U%2sRb@B106eYAL#C301>05x2-rFw<Kf<x9F)}8M>eiEw$Z@hjX1NsU}!6f_p+1
zFIcN8>-XLB?6MsLDPxqQN`bwJ*TRWbHx}fRi5FqcK|<UeIiuslro3&n<%M5mekp{1
zPL0WZK?+T4M#TF2Q2_Ewv&1Yvwu|TWI+|Rw#L4cd8yMcvL4la8r5~}D!Ubasmxe<F
zDi_NOibBC;3Ey1uDPxN<LM*NF1&{R?v$g{DMLr*eoN<<Jao{U!1SsQO`cMuq^xFya
zTV_>mp{Wq`J(|FmGdbIh#m(1DfEP;<?L}aTv9EU$21hMA`L*?}D*NlKGY=&wwXRP5
z$J$#G0*kJW&v@QBwwfv)(ym1*a+0u?@>_Yjic#Ttd7iA>aQ{!p_gJychb_C)y6hS=
zlzxq~g4=qxY|M?U;N~|o%U6@fyVv_T!jAJVobpR;;3My};d2Cw+PSKtRDMrOh8j7V
z{wFrXdS!LL9^&}xO|%n71!t*`JP*9ZJFGMyHRnV2NN?Hs{wNdqbb6f4;_Ich#Tj|&
z*#`UcJ2c<u1HeIFKfP%kid4QTEM#7~+x>g4(airJ)!*88zc_b~`)ybtpOf*XRiZ3o
z30qmYbPYkM`5H|WD8O&N=Q_`RU!_WZ{U9`lwnZ1xJ)@(KDyK;?3I;JnW)3akcksf5
z6-fDVS(y0PKJCg3qV+VuxEYh%^n=N7Y&*L@3XDd>VfApJ!5Z4~Vj}~)3VjqV|1=O{
zzJksYzx`&Jc@do5W&H!55M6jm@KV1|)zXdj&3^=crr#h@yN%UCWRjDUF%_R^9g5ss
zC#|Wi)6zpQLkG;M^SlmMPBzl-N}q-l?#Put{cr9Bg%^UPmF_x!`E-A&TV3+$YPKXi
zeC>r9TH1u!;Ukg_tBg1LO#USR4%g-1r$Dtf2%Pq9aC^-Pc)G-C1yUu|t%5ELy#X71
z+{NiH6E=p4dGSBC9c1BxFfrpxZmegFj7RUQs{rwSx(EN5NnU@KP9&pV+4nK7y&I9P
zmz%Skl9k!CGen)hP7_{^8E3wEEyTAQ2!?XQ=K?|6D+~^4f&Z3>?%}SShYA{>2xufC
z3a9b9npFn>6uSvf!BIjJ{E*riaxtgllGCWSBP0U<FuS{HPpRvtt03^|;_Ho@7O>{s
z2KiwOzJkerc)s1-&@GjdkY%O<S5LR{*NB_YLavWp$Eo$Fld<18|Ckh5Y`{9Y`)yzX
zR$*1pDr0pM_Ijd%Pp_zY=2{gjhu5F^*wPEBbL|MymaM0zG)*g^rTOUFSl!`sbFbEi
zha!WD2_BJ}<h&<^oAmT`*S#kdK&@nNVr4!}#2@et`j|!_f<?5AMwn=TN*)2JI0^}8
zk3Z|o#0;l_(Rd3pu@&mf#INBD+E>Hv^#@6}7X+l56VEivUL7SQUJB#AC0#|DJshCx
z7_U6AZr9Q&p8Ll8AfnN$#`9`<Mi#7#gUf_nr!vC+cU{uZGr^cwaF=KJWV_YWTib<&
z!{_&XlrR3~J<K*h5F$*H^uHgS#^6uQ>lsGrhv?kj1}c=me-e(PF}i%!rFsY!=bW;H
z(3GTzvl{_KLCX0)V0U<w7vL9L?eO^$ju(C0>C}x20lOUhDy7d#uakZ7<g^#=jxB~V
zC?S>>QPSyd+9U&~H{1;WiBAYWq`_s;x{Du0msE_w_pDD0a3iP;kxTDD3w)<3v|9-_
zx9S+2?QBL};kcZT{jFW}kEz^r;hlWBygUunP5EfR0JkJZK$+zq_h=8Zr*F`og3bPX
z&&(vGDPKSjK3)Ca#DK`wt5DA$-d5sV^EBe#q(nO+<wKn?;gz!T7NlcJn9c&cs?tiY
zHqvR`OWliV;b<C{D5^K`r`z3FS0^#8*Pj-T?xiNMb|Q|QjvDKV{g)vRAWfYh{k1{f
z*;zVSx!$d|@pnS=#&%-?G$c4s=)qjQDnGV(=B}{`3jgEr(RNWb+^3b?{=&85A^-lz
zJtI@t#yCxS$wbCLbH$H9hjgJNbnP8#5AvaXxH*x&`wXBc>IOuFxqDJs28n5+ec100
z7qL7&QPt^~eB^#7gC{q6vw|=73JwtZ;8#0Y7X*gy_;$Tjy6i?9ul*t-&2WiAJ`3z1
zyqUv?dPYEA!4%)Yg5MToP28eMwd6X~>Mwf0-b6|s^zypCT(Vl_dYWAkuJ$nNJ}v;z
zFWm{c>O#|Hweg()S}X1jPZ&tlY`?#YR%ZtU7vAiS6yXBctL}f&0|7-TG1P=al_a->
zT8td@yg1?V$yPwgyE&L(w<l*2>P4YrmRqY1xl)I{w{f2!CV}1DA7)Rq&tzH^76+Bj
z8w}2W#$b5*u}%Te7l>JS1C1Jac2p0G8AI)mD(G0KSAm?V#{_oX7{tbxVjP8#g*<UK
za@s^ol^vEZq#ukjkjJeBb{<tGJ|9x4OutR)&`GdCG#;NX^F~+)eH-TkAabddntc3t
zbfj!dZ!}SYMHO5R%7ea)!Z=H4{uT55yA+)+Yfi{ht7|2&9cDzUmU!sOe;mwj=VaOr
zw2V#(iZ>&i^WdzkZYe1n%V}>vRanp--b)&MrRgM~RgukrMhyp2Ss(n2Kr)+xCmK4G
zaC*l8kCLomlVj9-f@tUDh9#G|GUeBZCau&+*6*_h39=boE1o<&fHi#$F4Jx|oEsO8
zYy4-hrpG=d5f8JhgBW+kUFbwwxmgYyvaJbO8PnQ)OxtPnyH-6+y`qO~2x)A1CoEb|
z!sLlxK_v*`yJ2>AP+Vu_GtqC2U|xP7woC4%AJQXT;t|532Hk2L6w~o9{J87bLMTgX
zYrjudO2Zd6H$S&Enj5rXG~exWOn0sGNf8;b|1iGcLofmL5V!qXuaw~@aaujCxhO|c
z`ZwPvGiJ0mc_hutp8iIMDc&FH*O!oGSr<+-0OkC1)7YXgFA@bx>t16D+x9u2CNaZf
z#0=r+uVum7hKqct!v%>BTP39aU<COM?cVtm5l-=Bc}hR%pl+rsbIC9M67R}YEzLTp
zk>1VN@jl~zw=@wcQ2k5ck(ut82XxRljI;ZEB^L4?<BJj+j)r9xl6@*_idN8*!ExEk
zN{gE*oA5%qe$MGiYIMjkh%0}JY*Rpx<MQ{^1{Vj$tqV@1##e^9p=%e$moMh(h3F|W
zRekp`2p-?v*QNdAw4w(MrqV}uuo9Rd(bZXfeL^xkMgU+4fg$KQY%DCM-|4-5EKXMl
zARP4?Zb{8T?%9}lWIDOG6=R%M7KYr7P`Z`bkYG|2veT=m|7HSsemFlcmd6@fQoxF^
zKokcm@!pkJsFu9kZ*Rr5O>Oi4``5w7mcMf=dBbw9#f#j{y*I|CpFF8x)!O(3cdqWj
zq`Jl8K>c)D{Gg~pc_~O)J2ALdUEu(CZsK0Qx@C2A;&dbQX8X@#=T=^<tg@8`)4Slh
zUw#?yxs-)!d8<o9|CWmP{g%fX>U`OwiLR8`Qc@;_i}X^;lW=6rBJECvnw`c;T{xcV
zcJotn*_e053wHsxhsmZ@DOtSZ7<9@8b2;F119tZ~9M>9s(Nro-OiXodyMVdsmT<Jp
zP9Ac9?B(Tk!d<bYez$dXFq$fX8m)Eo4ZUx^o;Xbrbbv3m0-&dAi#=zFu!r0<DdSxD
z7T@*!&d4abTS@U$e0l(KO)i!ypgk+cQOv#1zGIka@eX2z-fJb^L_}d!M{gLPDwxuo
zxA%Gs%BZ6?C-p0;3{=UTvQC20^$B-iV~!6H?9(Qw$p_w?58Y<^0#N3U{=QR1?sjCm
z)^a=*N<KD@cvKy|Eth(D;sZ%Yc+*86k(9?M=Iws#dA=#pmbxKe8=%zwXkdoZgr!}@
z8<@)DgCLyB?Fx-JWA!6S7j%SIRID9I_Vn~<7&#=i^nWmT@`Lu@DZ1(p+K7u&{s~%b
z1MoM!MZkP@a71{2|J%lgw@xaDc`;;gsHO2Jm384Ks>(u!{a^Q*S{!_K8ogfhvwiGw
zn3x-;1y<j8g@d+ao^EM}6nndN>ol8m%9+vzZ&#Negu6X=dF(!b0S^nNgmSzhpogX>
z@Q;u2rYsS!rWywLPM!^Y3mNUaaLoE@<d?wXfc3hSEJM(av67Zpkg!2^$3-bC;p`Ah
z{<{kgHPJhy7Ev4*GF4g}Z22)l!8014MAC1smQqHSds+Kij4b8ptLk1T`v+HC1+W+p
zrGti(WQqhA0BPemh?CF{!~F&HD@o}JV!3;y{pn4t?!I0IU9naTaW{xdeqjw;!cEOq
zkk@&Nte|7ZxSmr(_li+`<+||Ckkm~`F$R5b73mMB&)GhZr#NvOZSGHu#HU>~-7<e*
zYFYU-^pkoLY33vqqm%NdfNEx_4S57JT$As?5~#37c@gzBT!#dF_HjU%s2qMJNTT}>
zxA_Bvpip~Tf9^NPwZiI_8KyOMn;!l=t_+RajDOVRhf=SVLm3F-^aaujcFD`L%`GV1
z%+GIs@NnkHCPDn<*V70dT+a_?+P69Z8VOaHCgLhGu@pv|nSdrL8F-aKh?;;9Yj`z7
zmK1sB1@Qo9sO?wg27)R3T1TL8c;WfIZRKv*RC#fr0jR<OOtuDeRwC78WS=F{^#57E
z9u|rA7#X<C&+Hm)JQ^T35uKTrqS8rR+(*xe&^rX!GS(Pu@5~KLhim1N@f;D?_Xg$)
z6gSkht`~bio^p=Dloe*G6yGqB9<PT!`k=^lf_K@6p7m&VLh1P(z*9h3r=D2KMl}04
zA89J9geW$BU!GKKp2G0V&Biuvg*|SK60GU-{pS-t52)!4h3N`TOH<kRPxMp;H81K@
zcwR%xuFNMMFZGO4jBG_g0Zl1UYO{Y*?(b_}k^!jqP|l*1J}=2?I9;Yl-+NzTvsb<r
zURemU;ben_hzdS67TAYSil6FL|CQD-lN;mQYht@Rm1rx-EkK32rGVM5Uka<`mcs67
z-RYD%$i>7;j8KvhS3%I4*QJzbb+Mij!BWMcA@ljN%*ZCibar<G$oc)r(TU$7CJ(g=
zbr#MkKXgZ)x}_;#q~m@q%{7sAo!`d>?b3g*)R!E##p1Rt7-l2?yL+$1s?|=b1#VsO
zZ3z=pTTyBSk3LzbM&qA7-n2SkoSmPlDk$LX&o`p#i}e`8%2-UeUZ6&YYTY5Wo9=VX
z7uKGu3y$9bnh}^z=#@8pL8xWaZ{_`kdF!r<2cnH63MYJ!4$tKs>DpMIa^mk|);VHB
z6=inT7c$JJU`aeTH4uQ7Hlr~9Gp6`^m7qzcc*zyB%?G%2OoQN2Px}<(@9jgniiQy%
ze(H0+C<Ec&(6S0vQ)vn_j<+)0O`{Wh&c1mieWjqD6&)R^TtYCAh`!X9n4uyoxW3R%
zm~7(9|Ggwz)zBx<43{MHHHD%rxfVn|u?OBg3kXShk|i0gb(fxBa@f^T>EIr_&LhJ^
zrg-mT9`gI2ji5rEjEJ(u-{iQfy{Pjc4&z~O1#@Um6LKetM!qReZ+d||ds`ovKt75&
z7?C*fS{R^3jYP91Mj$rqbpMQ)Eng2Y`tD6On1=i=f{|~~cpG=inK-|(V&xlm8|tHU
z5$}BWFpBoSdhHeVslp<1ATl4`B{k+u|Jz)r#w_?doL@xprQg34AQj8PPm8tIZfcqm
zWwAH~vo3<J*u!T%y?a`bJ3|nzCbsbx%fK@Uqf4=*93Q8tbX^T6d?(TZnwHx=Sk0@J
zfJ*V|a;tYt`c;2QWB6sAELMWcsx2Bg9s-HA(VU96!!FDSx)1+up<tyb|2F8Y--j?G
zv%iFA8!Mk(r5(|m0Yv$T8Gm#IXfov<$T>>8!~mK9G=K!}7P3HZVv*~&v_ni_{eJRL
zYC*j3<eGQ@)Ger@d69Gq+~KL+deCwV1ZY#AblWN&{(;SC0=-qdr2fe3NcgYp=>FgF
z!@tzIqpnB4w~}`7YxrymIr2&5cf9Tx>|gTD0HdF~B$r)+95$pZa5u?G4$=zzGNRkN
zbFrw{t#03LP&sf1tQmhPs|Dfv;i2{r40<z)T)t&GqlW^a{ZYu8*JmMJgqkBwcudV=
z*^b^%!kZ_;Y^A=bB|}p8#$A5t5**j}Toj8ukxR-|Th`N&K({8MD$u`s3T@zh99Cv;
z(z3pvkboI0F6)ejw69`*PTba~hEAVJOHIeLKr|CA#o9n?RL?L`mg9jSwXNS@?nTc`
zpprS>_HadX{QxHctXb^A-9~VeRYTRsAHD)j<}kYS9NuKjElDFKL-FaOBvm?bF$lHM
z9$rj3^aUJ;x(4=myGpi2g^G_pkXnPQOM%zX@xXq#TIu$_TJrHTau$;Y69GvphUNV2
zY>lMD`<hBk=ii@CLd46*>R-5eg(1GQRds8UEU<O_jtteTk2dyW%N~_OJ>^MVnM1Gv
zYo4168J%QAd{WowI_pQ7fc#q=*CNQg8yD>Mb#($pR(8;~-|U_#ZL}EWKR=plaoYGO
z&*rJ8xZCx1gwpgi%~`3ZA5WW(``x28Hjl@f&H7T`IsuQCMo@0gl?DHXh4?4varAY_
zN6Qelgrc#x_ewWFHE$f-*Ldofz6_Msj(wl0#lbcuHm9ptVrzff!JA9N<gb6E(8hVx
z4x{obOd%RwkX?TswDg7aA6Ng96<vwpIF$Prn4#UmVJ1U4PS)szZ7nm+SjL>&ZSwp}
z5i#~_Q*byps{ZruM-Jeq59U3YMsf0PL|pF!4qDRPMEU5ac0W>c@~ow5|8nZ+8*cFs
zkg>(P#1M_)p^oN0_coCTy(4DQSibE1`z&ty&c!Wi!~?vU{-jT-TS>ac^sfu6`;UW8
z*tnQ|R%dGw&Z{>-hvO(>XoaJxH;LAt1SA#^(a!SksTV-70@KnV|KU=zb+INz=W9i;
zsf*b5<Z_H)=4j2c<76jc2^0#r@vOTB#qoU*aD*zpXOIX7^RY1qxt&)^MyTPh#tn7F
zuO_7r-z^)6saPI{u<rL{@o+0O!}+YiCcoDJ-T0PUpFb%vPKtc1Bzx)eX_L3fQ$5b;
z`I3t-Lo9S5Wdxyq4R_H{O6v$rYdA=MO5su>;Fc7|$UV|}gN6h@bHZ2r*G$UPDvX$a
zjZH}Rjp1LSoIm<(p7y?wjAB)fKFdj54FnU7BOG5^Ret~bE-5$<kFdm4!~iHCUw`U0
zajTJ(Zp!d`H5|@^s95O{n)tl(*F-^7{Nv$A;?XfXR@77R$nX#7BoxmjH=;cciG}{&
z{~pnpb5bp$@<Q2H#K5ndM5f$jba<JwYe9A&8Q_s5s-Q%|zC~`gaQ@rS7;MaAIbUC>
zQ`J#gFQJ|hHmz<jN%qpugYWMf#8EH6#s*iEJdwvVShOYz_dkC9{&`N@Tl$Br;i2n1
zbjBG=-g?0S(fgR_d-#5y-NX!HNrh@2&yJPooMZ2GQ{?_lZ|Nu1*It#?>}X99L9LH}
zIi?7Oq9huZBwo{VO&=#~K#b;KqoaiUzhlY@Oif4p{=9@OPsNbe@&^ywRP6eIB<Xw%
zT(GS4P0YiKI}y$b%Lkjny(P7l!XgC|6F#`sm^S^rK&xM92uUSdZ=f~QStLI1@)ypk
z!8<rNNdZ}{;DEQyI>FV_OtnR0m8cEE67%Um+eZYh!$&EnvokyOs;<Z4mI|cPWwZC`
z`<&HDudpezzF`A8adS`lAp+P<Oo*kAH#}ziTtd;+f|T+8R|~LyPow8Q0We-Os}I*=
zo?o1z#-k(!I{523&|d3w`-+<vHn@%T%e}veobGI+hEgzhj0Gdgq*iXzog{=_Kg@j(
zKevA?XxA<o+5}L)9~E!?TbD0+-D5$CS;aJ-SLk?t2AiwokQ01W4dGCovg*G#P`HdL
zKTY&LQUVnZL~?bg%(Pk|EZ3A8(t6qVKXnNw`(p3j%)BzA0yfl~=nH@nC9rolXFe<L
z9cJ5!zt&>%t+Go}%Tw=pAEL^HBN$=IoPtarqPV1<rn+ivgD^qhe3iP#d3~o-;6(Vl
z=3c=8Xdu-BvLXv}RDLp_6`2d*PdtHf@WR;*DrKyre-2JtV=RsJ)wlL^^rh1}uB<NR
z1b5euPT&XCREsWLaJ+k!TH^|r)ieECHuWw(_|lm)+=_6lhz#GkyOdeU-%fkxO~*m{
z<om&#ZKU{(j^?j~DssQ0^0*&5Jp%H3bb3RUIF`c0W>O?IPl1})uBlvFI!*@elw~gi
z9+Im}YfKsKGkF@Gj|yNMEe(d=PnXzf*Yr4(&+FS=gq2S!3a0#dMCE`v9>8quo#j^*
z)$xLa&#kQ=D|^@?qUBxpW=q(9wyDAj%)++RGJ&}_nC1RHa}=?AJ^q<BP%A5g=`B7L
zSyuTrea6GDaOio!Pj39(7NI4VjhoT_@hkXK&V*RYF2XscWp-ZY4yQNjIYea&D}SAt
zz4tZ(&tnR+G=%QAkBDrS-aRPF5}HCZ^N_2G%~Y#lyd`ZDP^%~<kNmJuDqUHpPQ9?z
zUn6pn#WWV!-`Wm04!#EXDn{VV8VPEtW6=7VBXCC>(OYMkfS0zJdQ0tJcl^EUEqw$$
zV`|v!PJX<&sVu<vSpUNoz0I~iU0aucmL1Vu5*H+c<cf5@TK6G}3ftR#*V2T73g$1)
z-S8Y?M(-3rUreE}?OiNmc^Vo^+3}7tRW>aUYAfw$6il0Q!=l&{ut@#9gq6RyioG?`
zgn#s^H`KVccuu$B^G6@VtFYa!jKgYu+&OXKyF|%j0*vXU?m3qY5jN<DZhXJx2n7Fo
zEIBFJvpxbjYi>3&O~v=&HqY;B=d5H=F*KHD(gj=D>%}kcPfltsHkmsiw!*oJGQ#xd
zQaW*or1Pk#t@nm+0KqT7{G5aqVvY#rWoaG1Api$#>%wPRXMfXF;74-OqtI1u7TM2X
zR>xBu<Q!05a;Fb`E~MB2$Mx6aTadVBG4_sK&v4bZUBH6)VuHW6C+EdGgbs@-hx}bW
z!7zMK6}^*E%@l~!vM-rBn=yjjm)45d@^v(y!(ho96*I_$o0y5)-C`DZK}eK$O>%Kz
z8z=4=OSB<>!{)g=2N!3}C)iUU<xEV-?Mx7qxcpO|U2jg)+hn{!3-(bBs+&vs21WGF
zZ~Zenk(wPQ4T?U6es59$R@3JRL>t6(@7Rxo9{+xy6Fvt#cVrasFOD~wC9EnA)XN-s
zsZ_+`+L9UaBU44&QNS5tv{aNr*GG?rfl|xaK$|o6!;fnkC<Tsf7)m8iu5|b?{~5$9
zO)|K9mrmRP3F!T$%$RX{0%`*6yd{}f=s$$bV%&^S4!{EM6X1fxfTygNSBH*|<6)}R
z;rL1E<CF`20OGih0K#EcV8|9<!w7HE4D#u!MtK-9wYi8nq7aj4%h+_#(WFNy_-Szc
zlup!>l%N^j`b(<cbh36I&Cj*?kA9Ku^@w7LiEl{!{94~Tvl>lgR=OdRXL8E2@n+W2
z$V)rw(^6Sy{Z=b<d#C>~>v_zNI81saK7)A1J~k$c)HG?nJ6zRlZTdSofs9nP-mmE7
zRZnF%%Y=~4x`kRi>CFUYwgy<j&uzR1=a;sfjwK%!&N~3Be=N6+(r?-u52IOo*wgsL
z;n!N~f$5JU1?%@7s;}hs-bM2OX{t}WmK|5Vzh`8V$S;)!Kj{Ch{SXqX&Bg19oiShR
zM0VC(h+d*!e8!v^Gi>pX`b`nB<L#R?lM!oB<3AGX>6Dz$%gNZsu!$(!-PZyfC)EMa
z>4gANuuoXjhz!}&^D%QWW0dyTKgoFN5l+$<AkUQB8NER3j!ZlVMIRo=0-Vt3#^tE7
zxr@{hnQ?zvcJ~n(u_n}IbH7gOJ`9{9{a`@Y^v-lrs9cN^Cl80;u}kt2S`|#{BNqBX
zs5&l*9mL-lX9I-9jRZRVV2kVY%m_RV+-d_Qut(<gtefzw^+~_pna~4G^TdCf0kKJd
zy~3jWesrY4K?l;}rG%coDh>Lxs{Mox47_y9!DHzWQey>nslMEKyo5hz<fTf0S{cu)
z10&kPqh8<r0lQcS;5{y7>(Tla|NM)P-e6_1UKP@&kt*uNto?X?10`Up;GfeYQcqR0
zJS%E%=4Yv@D2KBzd{5`|o{m9;q(+}~ICIF^m*70j+L$+31q~=WH89PeMcFOZ-in>(
z8vg_8bbiqv$x+TGqGN~dW*GjX?;F5&F0+@6tH$~8CFrDgo}Z3!R!No<@kRDiNK}*<
zJ>nB3I%vjw2aC#eo()R1AEt`Bj|z+}Z)o&$@o5u~e=f?{Pi9HeFx<im)kLW*YR@Zn
zKEAc0A&v@7Ng;Eatb#C0^)Lcz1CjKERkS`Wbs15_Q3SPXUl<JI2{B2#^axudt*TY%
zVL691A7yiA?Go|SldzZE*ayJURVD-P;`c}H`ENU;0^U?U8`3<|ZI}()=UMkqfa;N?
zf2%#K95$623$;71v;(l(&}QG+`J3?jS>6Ej?bPDT9|bUf3<(+h%}Jr5q}v&4p+_Yu
zpEksz`*?v6o7weLgU38i5nzpKA@jk;IG15*&QxN2t%DAr5aW*>K2l9tPNJEx>XP0s
z<Ck+Sk5(0CtDgUMRT^}ocy?ZW1QpJ9e02Sdv+500*JWn(N9I&&H#VP^PFx7Z_x;V+
z=^)?UWE+IZJ1TZgiI0#@)i>>`iSoB%cnmgBDGjaF6P7zaSeEx+G7Jhy(rK^V8P=pI
znwO>YToqM{9qp*%f62o>>0~(*QDun-HkiiOq^DZO4w?{RGdXpCt7QCvb}lmS6qa6;
zjpy+~-K>h;Zrh^Qh!VAX5cX6vwxk9NRT+lJP`i<Tm2V)ICM`EC8p5|CXjd&Jhnp&1
z!B!T8otpkMtiN@+Cd-bYFDySh-^4vcGTZ1!D*gatMBPz6LKWsuV$udA()%f$yd0(w
zEp_c#hr_91MV!@PDv(#CZ`jU!Ey%mq`$bC}2(!pDNQF~VVVLK#PWm6!-}*rZKNfZQ
zufRN5YIGqsrnOZxCSZ+-t+(j~Pk!kXyC*ux3k-G#VcfE|X5;l1@rL6A$39C)D*>#Q
zA#Sh%>F`2Z8;P4}=AHhUX-WZTy;I&hJ+9*WJ#*J6Krnj}r9j}X_|V~Sf+pPR{N<2c
zb;T!rEZU0uhDxZhrDtOyv0vHi4sZ<*cp8fn7C%Nd6#!c4i&6E2e$f<5G{ZIOw>^!-
zpT0|EZ=hyW(X-*<N2FCUlc^L+*O2koG^pBKRlib`5016Dr*z5N?T<i3O!#ruH2O&K
z1#jh~4dNWlCvR6>p<Hs}ZN{1{_$w9;07h@Io@6evNE$AAK%reZJ0s~h{k;<^FOb5>
zj3BIy)o_R1l#7RFGs5*+yvOW|@?z=`s-u5q7liTU`N%KwPnjV>Ru1`(VwT@=S5L(B
z=NN4+(1%dYTDmamCQ#^NS;!jUmh_uqi>7z(rqqn2wnnQU4)vm~$R+Krh^sTeWP!VN
z-0Z-yZWF<xR0TXxy)QxSFRbo+$_B?8HxrrXglz|uWdVUC3`ue|{<sPf;WkRMt|n-P
zIilDAaA6z_eZrwFl)pxa%a#RYJ?j#@K0$CZ45YSuSH4&>ueg$I%Z?7Ij|W>{hQ;wY
zuN5b*Kz-2d?r?D#uGc2H`{M<A@Dk79_vrQi-`hh7U6AoDa4gfK5TL!+W%lJo)-Hy~
zU2(B<{%*g(;QJ@L+iG!pYu9_ojh&=TL%02Yj=`b2sxQORX_C7>d9Zt8D&1aq8@Ac}
zr72xa;FZd_<>TR-Eq%66f!i$y85&&<giO7!4s&j_Cj!FpTZcpCrUXr8o@-b8%;+SM
zQqqeyG&J~qP~B9#s(szoouuL8ZYT0O`y}8}48CUx6S!>TGy6H=8*W=F_UEHFPfNCR
z@?DJ1HAa6o(6WPG@O-AIu`#92DiNw6AKyJitoa@g1=>1X?pnEex89-zN;SAkWc#&Z
z6V5IUu(mJg?UfcDMST)WWpLl4+u38J6c^Jq;DW68!D(pfe7dk~oLp`fg&Azc*(2rx
zXTCckF5F8LW`0I((|hVdwwlVskjK)tOPVg)Sx#qe90w*|hy7nURN!Le!xTGahbSD>
zSR>E%az^FQ6*>VDqT&;>0bLg4<;=YA=@A_Ey6PcVJe@9{F(q^nzn)f^*(Uqp{ocLJ
zLeWl~V`ouMsU2`dtQAo-JKCKjv`7|6MOs<q!yhHu#r*5h(#6v^lV-ih12re4R;uwz
zf6)YWt!mus)|s2XBEhHmI|pHB{qXJ9@Ul|Sr&<%aywaq)si+^SfaWk8r~_bE=Necc
zTY(D^O&2j)XmoUpM>0cqHipuR%gQ47^WQe2Az62W_P<tObfvqSOY)fq4*5f(3r%F&
z*t;HW>6{ff@aA1x<Gidw=DDSXeR+cjEfueycGC6N%#^w_HnXxiQ1eHvm6`rt`b7_h
zcVmLz4zpAK@Lw{D5!{GfjtTPoIl=Jp-+HUtu6IFY=3PDpy1Sgba(!qr&TH&7klg(?
z^5bt1t!}vW;)?RUCIe5-y81&%b3{Lnrl<9*2hrXwTr=e^an4=_(~G|MS*#hoy5|0J
zV`ePxM#z5}DI@TyT^|-2Cn&hv;-4Qnio_ml(CRxBZVbDbF7P<5Q*G)Aa9Xc)pHn)G
zU8EH+N=ALFTt68~H5?aon!2RSJt`MVuXyS*_#Iw3-dbUnBz;G$eL1jE5yPK^EF{*9
z2qZ+2!fhagD=<k7E_A{d4!QydBLknd#C=wG<g3G;O1Wf*O&SaWEzCEB>tcb-0|KKZ
zC8y_&q^%>@WZ8q&V8UTz{&V2qspP?nEM<c1jwKaN`sM(YJfZAG3KxWCm|vNS{yK%p
zZR^V3`p6i1L*g3J+J)};a@Jt-So+Ah@??|16Gik)7%&(eL`5c-OQd?$*=mKy|HC5+
zO~Kpjd%k<Sw^#DK+i{fW>%524l%@q1Rq~2U>UW<a{^R0<6&o54?M__c9{$W?y){FF
ziLg@eVh?{*u^y60JC9IGk~krClXU1j?kk$g1Yv#y?Eq#b&X>39i1doXb2paYO?yLS
z=c5E)-Ppyy_?P>o%BAb^D`{IT9~9oD&$K$9&~B~lkC?Wq34O+b9-Zj<oiFVWZKm6v
zwok-l*Vgh70|!!ZZ@VBMm%V!(vvK|ltl8(0g@$}bdhW#f%njB1Z?&F&HW1=@*NVK~
zo30aZ>{Tx15*NUU&mQVDDq+h4*UIo0)u(kCEvL_#N$z~At<nx9^$RJ~pi#2jGK=b|
z{5e%$6^M<;Hi*%gCimWjyTa?7(sI1kE2heI&A@<w=FMRKLHlEq?a%BLoEdB|Ke{^3
zFugDKa%loV3<{(xo5fmbACoA|t0hfvp5s-2L(3HSaYKZV8e1=1P9|XTORrJZw{b&l
zw$#3hf~d$Jv95*(W#X6D1(lHxk4g!TvQ>|~q?Fsf`B(>vbMzWJb>+&hT3l84MRY=-
z{P&+tf8zM{CU^I7nyG;ch1w<XY&mCx$$IEbH$R5_EPNo6Ri@x{;v()6dIlgwSqHs-
z@Ac=gQwW_`M|~CZc}Zt~|G;*Bg7QX$?KPD{n5`fl=nvy*NhiB<ru@V!&sa%KiWjMr
zVY|bNuUt4j5MOJU6p*lt&p3JqX}nLyVp%C=R2l1)%on5(%@aOzW#fV<`K9Fz<8T@|
z`Mf05ejZ`cb(k92I|4po(#f-Cta+((_}Ax{;1kz_pI-~vs>M^U(%vy+<?G^~%v9q(
zTPZH*t)n@%yi!IWKKscRi~78JkzK2(ZBNtLcO&qtxtcQZAJ@jZ_TcW)-8!E0Y8^AW
zoa!!zN9Rn+yBjQJLj^tScB~k2(FEwBFETet7PIol9of#_v2eQS-|Z;AiQNOA5I96E
z=otl#sN=+Wka*AS7@D?&B%am?mw){o{g?`A$C8GEm{JX$7JhZsmxwgIn-^4LWbe2I
zpjM`e#M4q~5EM#XJS9*u+B9U9D=TS*Mc11=UP&E(xC!S*N)6>J1n!vjk&c@&9y2xh
z9wH6o7?q}!YemcDZF}S*`$kQJ_ZIXy2QGfdq#1!LVcFqFwPQ2;tkMs!3(`$z*Dl^e
zQytT%chDl&<?tc)uI!N<WCXod@y_DXq<=;lDT@eYsC9`^PcAPlG!`?K6F175yKh=G
zIZ4CvGrY5&tGa7+UGrD=X}N@KeoI~?J6)-u^jxcF*PDyAi$PE*$jn9En>>Q}G#uH?
zd3>SSpD$V0G$6R}jajrWDQI+`9N(Rfw_o@h!A88_hKU1Ns5;Qw*|*IVSlrh#puw|k
z-ZM@maRMiNrdxqA-;i&B3<!=lu|WpvVeIIhArZz=6BL2U==EgT!3ugw!BD!JYOYh(
zM_ob@Y9<B<iq6kr7GrS`L{EoLW`!gb1pvHpM1$hYWADAzr^SDqrOS+b#Wm9?`yO*H
za<x^b60!a}DrR(0s*)f0OIAGwj5v5MqD7ilo{uGEemI9{z(o%QjiH0z@5>#Jy>2D;
z1R?M`^`DM<3dCAPL+xQ}V-Fcare!_d#`NLCW?hL+Z6AYT;a4}0U5xESme3i|-}G!C
zS5YTZyuQijkgIDehwjf;x(^CP(K5?iPr`P-i$oS`Ou9I+SKJClU5e;@mHYmwO^QB5
zI$Hgz+41jdHgsX|ndNN=mNw;GS90+yYeC$w+@p~aBs*;JXK2AC^@angxKvWpJDI5;
z^7Y77*nVw-^u^1f9HvspTOtn1_1#!0r}bU+C!ne7DlKhPzLJJKDaxel%}69!7;@27
zY7SHYa-zAbOk*L(0U1;xf%b4UIPyjFU*VIuNg->%Mz*!2dH$r0o)u2I6)`hJfRO*|
zk%5ic<W|O_?97(qR8kM?T)U}vU2&q#jF7Nq+@D}j5xT<571X2fW;MMLB>sKJOIzxP
zNs`ZgHqU|m!E4&Wnk;vp>A#z8qvV>reKrf~Z6cfJ{eJ;t^w+ofU+-`fEPOK4yP=Y+
z8@_u(s0dBr?%ju;RvObLKCBU5J>LB)ScCdqU$=CzL+I=u%f}YYHM*Qg;G!AgTzx1M
zQBGT(+r3h5S6x@L>{1`jCAXZLUuw3W0dg8b?*y&fleC&`i5^Sm8~V-Y)1ILRl=Naf
zA%J#LrIe)!p09#&^jA32l0*})Xr;8eje>1WM<+c!Moq!RCB9fsXT|fd{c#+B2L4jd
z899OKT3lZ|XsVMKB}#A?>b^*uO_Yqg)Z=#L3>CXD`0x3rB}H3@2ZW>My%osg5#ZI3
z=^v5{2j5{j0K>iR7OMdPac?twy(RC%JXc4E()<OW{}gA#-dkw7Rkb8@^he1<1jSU#
z4W9b^{T0dmcdysC&jS4xvr>ANKvU@5<V?5XTD|pLpOmuOclf$v6VZC#>Y^dW<9s^@
zn3ck^A`1ON=E`QLCu!&hScY_&5i$Xtnzzxq{}uZE2YF9&J{^Q~?9DP>^$ObPx8qKc
zPppZ@veN&_DM%<m$;|smRLj7Nf$L7GeH;B>h9hk}w=B@1`+t0WWmr^U*RBdEAzjkl
zC0zo7q)0am(%p@uB11RQB@ILO0MaGWIY{Tw-F-H`-}{~O>-?E(X7AZg?`N;Q*1GT8
zBaPiU?N+=LdLikKjPP_S7HVBf;A<QO#wQi=3S9bxNW}CFda!6GCf4oXgbvUXYXDqf
z>p$Lu(pqmtTv&wt!fm$3WQt8MtI{(hDa&6`bYsbS&)~rDLO=QBYm=)c{H=_0tc{9f
zRbxzde&3k0TeO99sq0pzCncfkWN?`|P;Zht=Gl6FQs_U#;YnujhW%mX^wC)iznHfQ
z`^-YiKbU>~n4fsAX&;%13eWj!bo;QyJ;uM6aEo}Mw{2o%%hz>0eqi`|Fw5Up5zSz^
z+m2qWb!Vk5V`6SDUzy&7Rord7EsO-4ArX0eAXYa7Wi-oB-c8e3!gcbMH1q_|edd|f
z)%GGcnS0jZnVS+Lr6wH0p}mSq1^#Ic4B^}=q>jJZi0PBcP4L7QdQFhluUnnj%H4;E
z9BU(a(AZgcut~(@<&cLwNX`n|*sF3s_UViaXr*wwy5X-KWso067E|x*s+g~D6!nhe
zU=QN2slxm?Sy^%1R_}zbZ9h>SM)~?6jPI-+Wm3`6T|NJ7ZQH}WKCZy)tN+KCfQfTi
zSK}<-auFXh6)%`(OGy&9>?_S5-d`aUKO^Z)Bq1nwXM>M-r`++PH{Zp8Kv-aUmH&k0
z5R#2;^{VT{UH9cnQntc#u|!P$$LX{?w)8H4#}V9t;eO4p-#*&=@8<q`kBt_Rlp!pd
z>kku5IcQZ*MGpm;0B#AeFbj_d1&M=MwB%Ct!tr0<)(Myhl}<h6hLJ;c(X}amqf%NQ
zV-2;nF|VTwpP4zTnUv^_Z-)gj$;;f{-SaWa85e&uRxDZM{0VV9EK_7|L?LW$!fxVn
zhBqqNi^Ey`f^UzWA>v4+P>Fs*$<hCJzI9u?lG2&&of64r1CR|sK5{i_mw9)p_r#~n
z{?4I*;qeYnOTU5PlVN9mb0mD;lhXa(*Pk_nw?&`%b39np0j|{g6RPg8%ovlKdew;w
z5v0?HO70RmiYgEFm<grE>jfqom$G&Z!0`@;IG7-kW}g;QE@K-CVyy8hHeJ>b{Jrkd
zyI+GsY2Rl4vZP6ki~IA<tH;1;>W1T}>NN$KG$)RMJmL*odA2el|3>moWftd@l$%fJ
zSqoi{gA*GwPM;<seR*ntNynL^d7e&8I!M=CDix{!cQqFT?m)Y_b)S!MyAt9QkR!dL
zLu=u3rYqyCi^efxsutEYCf<|16+aW)P2ZaK)_=>3`+&<WB6x#>Ih>h#Lij4!jp=bu
zG|=v>KMZ+lFMfl66?aMY$4+0ei$=)KFU+>{3KzgAIJb#ck(^+jp#g&ZHWJnbsy2}n
zc>@H)l1=6-F~s`AL1yVpVesa|P!t7sxe3<!Zk2OgzD55*chV^;O(tn}Pa4kbes-%=
za8mV^gG>bCDeFHD<`b%NRH~f_nb%#Mg|4`6V47@(8OAYJw%WuVSL&=;s2NGOScUKr
zuDnGUyJQW;15Im<TIy8=p@cH$bfUqbJ)d91BekT~k;{Rx)BVEy7YBv<3;!b;2mN-I
zM=)$T{13vkpVhdt8LY+Gi<0omaxnB{==darV3Ayy3T$@kzWe5J-+O&C33_s@ALsdt
zZEe7WlAi}q<82#MMXXHx0_Z^?$;pd|V9X)L88t+$)B*THJCTK2n0L(+jX8j=6C7Po
z7$Q%d%HToDa-JGaHvcS6)Aj<9qdZhABr}K4D9+W^Wil-MqraFfb<5Z&NEGu*5Wf5K
z3%~muEufe5O6+c0&N?Jh4KFp&PPARta;8UyJV0-7PNq3(^lJ0LU9tHJA(S@w?mF(=
zO{MI&$G7UEaaNEnaTY`D?@<*grc;u;cD0%#ZT!9o;>eh|syb`Rp(EgkV;wT-0pG=&
zCsEqq*MPz|{!fCpe+axN-x?wPK9EYRAW45xx|a5ue2}D(gut!Ed>WvEVw8``(I_Tu
zGhvMy3A%p2LbITVVEVXQgL8AgU)W=nja}`QH<7oTy{acY4L?dQ#yP&6<Mxu{X6VZ0
zk|aGIlj>y4#_>P!>@G-oh0%((IntE-JXj2=JUibcZ0QcaIvryGh1s|`<dN|sZb^R}
z*hs>Jgx2OHLLb$ZpYyN&;pb5>Dno*e3M}~&YA&mQ5b*!|sR_ye7~7>0)6#z+8hx5)
z2>fwYKwHI=`df8D#aPVGN1~f*`d7%noqXR^!!KT;c^N`xp~w}n`TXdd!bjIb!OS!%
zTAT{jwygzTAG7^7&T|rrRmd8tJgZP#T+PVD&dpg|?@z=(#n42JEvEP~RZbJ@F;MHX
zQ*__A0{B`9aq(sEDLYZ$h1e|r_j5j^1jtc|XP^6AVMFDI{y~=NtF*gA+}DEc5PMvf
zcU1;k@^xQUWoZ$>Vg`47sezn<bXebBxOZzXv{cnr;BH#>hHxaRaX?Z_n5+$7m>Gcf
zm$0-!JT+V7E|&6?0L9(wGJ7D=+L5VT5L<Iu732aWI21#@@HHL(Y|QOa>v{$#Vw>)l
zPr03?Fo!ZwX1z9sG+xOjBK@F|pYQ0AE|XgW5((G9OBtv3Es#(U_*X~?iAr6vmy?F!
zeHmpMH1S8MP`lHb-M;gM)k^z~p17vd6!#JqBCucpwk9A!0nKSBrSb*C>P~QFf$@00
zu!-V(U%}pj3wIYh5)NqM*PLhF@1g+8=LGYb_BK3?ey0J7kuQbp#ONF&ZZ(yJDs=+q
ztAGBc5*RPJ%&~&hCD7Fh>vNT60F+0z?h=|zcbq1uCWKiT$iS`s4Z?hl%z`*g@05KW
zp|nT<^-pUS-u`+|jpOv7?|CrTem~dOIcvRn#bk`E@c6@8oO{Dp!D+0lN{d?XSle$U
zm3W+m1VAaH)A^ER2KKMk{>48ZlTG#=iG&78+>B2Yxcy{;)f{T9%wGROX5CT5(~_!!
zQI!5_MUS@!$Q44n(S$J?rjPQ;vDFO~egr{<4wD9hQbq%R^Tv=M$b+V0-b4fJR9{KV
zGYQ~DX)nT?sLILgCQEmX?QQfXgqR)nWyKhZ0c?|O`dDoid?zd<=dN{>e^<J(vt2h|
zItqntoYyS-kUC$@gpu^yTcq)7ULY$#Ax|NK4|%n~{0sDB$L?%YCBmVJn>dKVd~KE&
z04UMq1`|a1H?j9--z);DwzBCiAI9q5?4nYg(W^Es78TWkU~^QYnQ2NjoK`qfwH_KA
zR8k?KTEuu#>pJUs;nt=aMW11oC<b{_t-&^~5_V@Vr?$G>-nnJqX>LAY0ch*5v^^Cg
z74d)n%qpx*X|Cxc#E-xa{@K)2dE1ePvd>GlFoovY<!~zjE?%0sq|PTCYPBkPkJMiz
zp6}+1t=mrB{9c9h)4OL&*YxzDV$Y_~*v=hNrYE_2PAnZ&77Io%uh?<d7C99u9OKX3
zJY-mZhco{W2^CxUYVovUBikIc{KO&R6jpSg7&82(Fy}uAQ=IR<f;a!SeK>NuJ}C>*
zPcTk^x%D6F2#`yc1Tch8heWAwwKHgd#C@Dl8&OT4eOnj&zaP1;UX0t)v&Pb!$1@Ky
zn*$VeSSX+1^i;7ZDDruzSxk8{M?@!aNa^UNC^9tC?vCn(y0lzQ>Y=;&@5|Jc8)h1^
zKLHYbG++QbI`dKjB4b5vAON4?_!82zbmOdmzv;Rd=zfOmR$k8NGDyY$H@GZ$O$`4+
z>{Ck-T_#~RnIPmf5>14WgwT*lR&^8|eAfaOjXlca1N7shcv6?0bI4OC;;=bugO~{%
z)f-{}cyXUffuzG|<o1-as;SXQUQ}vS<_=g?!%(-Jc`QA$hfI&89AMKk!)?KDcx#W9
zNQfT_bM|q0lI(jzcggA6BkS{PsY#wwL<gjXEdDIcLH04k-YZghp1@=J4S-W)6~Fhv
zEX~ViswC|YO66&<sjRQ7Q}On0)~+Zm&4VzH)CK$EYYvu9Oij^E5B&L4^y?R>)Vp2F
zD6-Namfb`bx(fNIdQH&J22>Y!=cIQ0>g^mZ8sr{T-d-8cw`yqvy)S|ty%xC*EOB8T
z?9{o%%sWbb_kuuMgU+X-p4vgFv&rM|^UVOaKVO6Po3QY06WG#wApagtu60FU3Q#*1
zz&?8~%u}NVcb&Cf>Pt(JcZVM<Xg5cb=6`3=O4GaR+*{fT=Wt~!|JQ({u~nNFSx4_M
z^c`sP7bZZZ1T=k!!VESzO|7-nrBf=1$x%NyO%(zws_N}uze8`hzGXRHjTF=}0rM^K
z@bxwb0c%Gfdx&3V+Tktiwd=*<R<8m)QIeVnc^#zwJnrY)M;4XHsxC5`UiBf^nX;iv
zRe_`mL9NG>=S2%3!DYxUg};11bJVJ>WRn><W&I**<995LB0VoAUI~go;`Fp;7`*~Y
z7Ddj2G_E77uiZW#Tg)1ON9FoXOUDaA<dg!rzYE*_Pm~$1o_wQX`O<vUh=$)>(UH6x
z&&j?0cJ+Q@RZe^CEDibQ?O25l@@iPYlH};8g|RWfGyC*?(lI1Qf8j|3;`vv_1bJ}#
z2AZG4Rr^Z=TatpHaOti_n+F9XnR3#FY^Efw{kbCIy39vne(q~irV@)5<x#vKu+6aW
zp^wYZGv6e_bpLE^4n!xB`?HBb-tWqclWi4P-EN~y3~4qmQE#<4%_FpvfP8E`J_<C0
zOT*F7kM3VFZI61U{o@(xV95$qq84nzG7M%YOgBD!50roHOnJkt)z{<JDY`I2d~h-Y
z-Tw5eZLNlLa5jXPXNtrFT;&VTHuOM!kt8zb=N8F&l7;D9Ql{*B>v|xT-iU&Z!Ypfh
zYz?JUSt<O!>co6Np#zK(G<igApb%TE-QL8_FCMI_E8}r)JPo^(`it^YP^k2Bs!D~=
zgj4TN>n6vaC?vmj3R&5JFF2Z5b0f3!aR64{!6|az0vtmh2Yl&1tC7CarlSVXyiBa!
z>l+^z)2QRyXLR(fOqOODGa}!VjKCSOQ_8>yXzCORtVX$?_-Y}pDpWvpb~*ZEcwk&_
zvV~Dk3_&>DT!o7()F;eFUcRI;DDA7M5z;jtER#lNsBW?o^+{R;EQycfhYG}2#eqOF
zV*=V=#tbX3qGfyJPw?W8u6#f)`|<Z5LgP~Sd7a<ynNiiqNOa&j+R>zf^rdWU#bEq(
zc~C48z(OAWm)c-;cFujUur=y`ioWh+)X-K|Xm{Fbs*VAIqa>WF;-_wlw;B^2Ic-k|
z!X>+}#sZMc@BlU-piq+@)YX(wpAZ{cHAf|-=*C3i5F3i9k5OB8cDN>5Y_+U?FIOQw
z?+gHfe}bqR)SDM0lRJ4s7HjXB7kQ-ET$eWSRg}m8JSbGfI<g%9U?`$Lz%fC!OZu%+
zXV@S4P||mvqab+&_8#8)lv!$hmpY_C0j-B~QjzJ`wqqo?MupU!DrJeAw&tPhl2Q{1
z5^e3=ztuG>_Zq5lbKQOgd{jVE2n^e-GWs(3R$d{SmeuT;U$xP;f;MI!4}u<#g(XJ)
z?*wS?MTKtOu0>>ibF(nRLk}N<o~boPeaMkT%oARKKwVoxte{b+lCk$F4f;r_4evri
zFDNwWs$P0y;DgDsHdxobbvY4VNiK(tU2htS%;rp0UUgqWKt{HGt7Fm+hW664>*UEB
zev}LYAnJPRLv104o&C|u3o&U!WzUq)|JrJ!ntVIyx%``(3ZB9n;kvw1tj=l@>+@CJ
z5F%Fb@{f5j$5Gn)iR9JuKhtfg80yv^i<W8aRaozm`7j>D85fjwbyLU0Dr)B5lTyXm
zqdbwMpoY5X1R7AIMD2FLL_5Z^IL0Q<ElBw9U(J5bM)z+0@M=yg#ICLVwZJdv+zd4_
zAD8Qo3Q%U68Wn`#R)`|I;NnnK$u+pKk3yXel?orcC8G}BmCKbb^)~xBRrMZjd8oAQ
zIO1`g&+XA7D2?CsZQ4um^9wBUhKZ^TYG<%NmMlLaS)&9VRg`^fEYN8ZyoE>e<rNLW
ziFCCGiJHQ@lt1BpY2GclR_X&mbPDM+pVxwm=((!z%!T}~gi=BGWI$|oXS*+#sqW1W
zw23;y)Wui${)zO?h{AbSET!Nn_~%0aHR_<yQ6=l-7LBJBYWfVzP{9y+k9Pt#A?PM{
zE@g-hHrK9m6ZU3CV1vA^U#*ca++{vIlQMMENC9B7PoB%AZxtUt9^k#u(>o(_so=kf
zZl(YVeE;<q4;r_VLK(@!b=2X*7b^mDfa$}h({kzVbe<LTnLRDw3DB2)_MtUnS5wWA
z*^6eVcDr54s%!Bu*?a!yr2(3BRQ6xuf}qoHGX=})t}^Z+@RfW0=w$D7+_?ymYE^wn
zQT(6~J5)uftojc;m<`h8yqD1T*sY8E&6O`W{;SFK?P^o=|J7tF0Uq$Ql=ehE@``~|
zIgKu4K<o<rTxwzPRVIZ|-OSXn+U&SjQsYL14@!xYg(=ehc2kf3V+m7fD=$*tYQByD
zp{ErA1~CsBp@vp$&dZZ2S=zW4g@qL<i=LNrwWTY}JA2g(reF#0OLyJl1B<Q0T_A@`
zWyvJx{r2{pxE_XI)S`%E*=Alrd-<X&Xd#y|Y|AA9xIxmj?_B!2&bH(U$J1C#7h2f<
z<D3U`C|kDL+urcqTWv_yepzxTZV0wqQnY&?VnaJCp%8qS!`nRk^ZR}@^3vSguWPcc
z1ii2l?|-{nkmYCeK>gs)+4&<`(*An)MAp0S_<W=`cbiF^Hri~umpU&FxPr<NdxG>Y
zC)O&IOpNX^(Dtg#Z5mb~mR<n*4Xda<N)XWvHg<?Az5u&XbE){I=LBwp8o%<JN?hF`
zX993qEA2@-OLJyaMgD+tx=05BOHmaN%4;>{Sp%}Ggb$k!(=J5@1H6P<8n1^1#3OqW
zpb)PbjTs5GyGxQiyX#`CN&TUv{G!A~kHS?{e@<0K1}$5r@`ERc5#GzNXlxq*OG5?0
znq2rb7^LPjg>P-xrTRwrF#K@e*CE_*5`etr;2-)W!fFVEftXq<x!2#+DRYOC*6ES7
zfbVwEqp2AdqZc$D`S_FCq~RsfHh-OIp4=M$M(A2b?cOF4)asmyrNJP8qgB=t3qbPy
z7Vt`iTscLWjfD1X+%=j0)I)bBLkhkLoNgBw%Fhu^x}LdA;yM8*zCqdflk#kB*{<Xe
z0Q)zO($a^cDH7qm0pz)x+t#FW_cW3)M(aqyKOdPiV``Ym2Rqi@h^WbP6}kAv?Ue7{
zyw(nG2i{I7W51o4!4k#3N~}G|(war5UseVX_frehNM1qgcedLv|3F;(Kwnd$$veYd
ze|vfvVsBccNbt-rmB>!*AmW&0>L+jPlzHbq=zfS|w+ZIp_2{TnVb;(Tz7)}0hd{<Q
zY_%`+pdXL-lS_ao18;Yy{ek2A`rr6|x~Eml09i8J{)zU%G{;FnOJAMkgzW@DRHl4L
z(k`SZUI<GjqByl;7s3&n^&}0anrFueQT-A_*g6CzdA}aE=2cSlXGsAoA?Y2Ce_jKO
zu+|?}2?amS-^xE3Xeb57-k49zZ-h2L81$U(7xaT|o?&<LDBtHR-I+xWCk;1r?pGpA
zd^m4}1pv+_nbyV8E2eTOsnukA{`$PiCP3Y4O-FlbNNGs(NA0NqwHoGOgQo393<bWL
zuQm+6Wo5o+n6;wy)8tZhd|V9|<$QSTd=lJ+ukXO+yDRpb4k23ar7xliOR9#ig7PtQ
z`HFGATsGg`#dtw;6sZQUmYVufswSHcme$o7m5GD3v=-ClQDfcc{27v1cS5xP_z*y)
zut^F~v~X_pydZd{=dtb+{JKgT0?7$wdfRbjL^M?#`&+`V3+WEYwB_e<(s=1s?Yo@7
zqg+hQyE$F>=`Gtb_uyjSpb#%}9tX-U9W*(w1^FXt((bFF=8O@7yLz9VcqqoigtSjp
zM2hwqB8N|k79Rn}s@I=M_w)&(5wQ68ms4kTJCS!fzLC(D5F0rZ-suQUr^UW&cHjl0
zFTXN%jEU<6G%_7+UZgCGoZ|2TO&tCFf(@Q~(6k+S=uDFH5!s{Z0hJYTO2C|5$+acL
z)yygOb3_^rQzb$~G{#Mg18!E|sx&~(cXZndoB1;+Rnu%e+iZj7bjz#^@TKkKU0O_-
zujROe`J`RFBLMaWRYW#KIT${`3@CUI$XmN%)p|=XM3iadB!$b#&X<{H><{`_<EF1S
z{Axano?pMp_qbnH&p{z;HhgVENsL6M5<(r7VoOc_eqP%}0ew3Gos|7X)S`&nX=)9}
zV$Tr{{^-ktW4?5s^=u&pDs*|@SrhI<;)fe<;-pbq%Z~`W{kecpSY#lWvvwD50oSSZ
z2NG&dN-D0c*6FSfIeiv~f(2z21xnjJNd24P#fznkLb_<qixzB7BMMWn4INMhTD;Ul
z&s59d7ed(U98^HLeiMp4eKajLvWYz5e{77^SPgB$L8WB?GtMsS<)wa=K9CZdT|DrX
zwiF|6B-rkeyXTGTg!fXxrlfLLHW~@FE;~&**L>XS3&1m%pl}=bo|!PnQFCnHd^M)R
z6jw`1E~~|s>S?;bl`okf1oqv$mMV3C<8ADs-ur6zl9z=OMgND?Kr$H<(>wd}A;2}`
zp;GtTZG9(CiI;?M<E`_C(imw@NZD>m=`Yt8s<rzZZsOt0hAL$nmpa2QW9!U}M0O0a
ztY3}}mJ)(@XMRUnk?p%65Na5n)#Z%naeej7yB=YSuDv_>^niX#F5aVQ+1Zn!6pz$Y
zKL4k8Gr~jfp1G`y)kd5;{;<n&m4#<pVegi7JR$hT;?<F5MR~-#Zids>wHL__t7uHj
zJiJ?z+%ytnb+$i-OuKi|1s-1-cN5Q^oXP)c&(JEDg*>K&d570Y`9Rhh1-~gd>-EWt
zw?Sq}WC_fy&*0Q$h=+7(fv+ejh`1^~M>5ObM|~EaI}5s?!It#?M%S3(<TnP2RKHkQ
zN}IcH&XrG1n{%>%b&;0o;<rytplwh=(Nw_SP#<CwmzyU8EJ32tPHT*kj#KBCOFjHa
zNl6xXVTagLTVogWqR?+LB~FaSuXTH0!&~d?rGEWRStjv3{2sTSl=f;tKo4e_-A5%z
zn!O{R5EDZ0qIqW8&1m+dgK%xVxdHzvr*f8W)IwNhBG~UqAqXj@A1~)vUu$h2@YHH8
z;y)4_2!~w1?C%)@Fj%^JHj^aw_M*&*<j49?oCfl&oLw!L0IbI?!6R(r;^HtY{}sSp
zNuHyDhO9PQ#0wjPfHR5!nDwxjEnPzZNAC36OIm&_FVAn5FX_^xBqiIjr)4Ksb~+CT
zb9*%=ZN{)tGdE{&bTVQVhOsN62*?d?R2H~$sCkk&rcWK`?Lt|7w5*sOBRA9D7zDa?
zcFP(6t+gxB_UiU9(tlg1z?#IT9-1%XLpc36H{y$r!Q$@qY=#Q$XamG5b<Ha+TRDUs
zy8Oarz_16^;*|45pMTLKrz&AEI=s%#$CPZz=-~l`7beu(x9I98Dj6Pj)XH>NbPk6%
z`WOoxczdl@mkjZK$85PGbQu!$;ryNI3m74D@dZSox4!ash2DEZ$6~WU!fMAC)tI%E
zU3yoT>xFs&KI|mUJ;X|U5&21uAY6Lfz+m!YkJgee{xtew>7@zRX?x&#p?`5+wetup
z68L^RHI-Adgg^wIlBYi^)u|ceMJVh<Ro75pGR$dGHOMM?G3SSDQ}EiTA*J09nPtFh
zd8i|6YxIdgOLWaf)6v0!!_D12RSztamsC_TQG@aF<@k7PCOIA}B#K5tEL1udccwC;
zMwvEMt4&*u{=I@KQ9e^q7VgpFRpU!5;8Et`Lt#$?a6&x~FX8Yl0hm1DsoZZ163_<(
zOgcRFwPa|G%dyF}w)tSB0hh3A{@6cz1k+0Ggl$KQK0Ysa0daWYRz4*DaviqBpHS$G
z9iU<T_rOB!C^|_ij1HMFe$IRaDt1!CBv6m}#-t6zgJxliI&88UC-n!hz=w`qr_!%L
z#6C6(V`Qm9Chta$79pY?Rr2@mDH3shv@F?(-ED3dU>VSQ+RBu!I3@>SQi%6F`Eb0?
zF3v{3A>1<IOz<QkX<^%#ZF@G^&gSw!PhPu3i$v8{<PyS`Bmw08pooqWepO;%??f#C
zwgz(efQxG{TNHMq7bQeg^d7!MX{*sO<qx2`$Fl7S87m~^t-Ja&0~mQgJT(1a<SPgE
zE`!jx`J>PRN33kMp|COdtq{J(*ETCVJKlx>gw8E>_2&=p<=Ew#IjRUnz)R!czVDpy
zHZ4$ay@ylw?MErd{dOiAo>WKPmUb_ZLC5{|SE7)Mi&UHbO5>kz!OBsRYq{pN6R#v4
z<c~Ik0D?I-fMD)&Z&8YLWqh`mH%DxWD}2VcvH@0>A9?t|Z86m8ult4S9==g^w#L9B
z<qt6<sJb;2yFGp5b(W9jJk9#+WVz>T_2T$!w@oYbL4APL__Bjshf~vszAY83)BS?*
zEiGR@u2w`gkhe2DNqU99zoW=fF4QJQk|@^;i9WXbhP{8F$N_+PDRGMK-U5C@Zc-E$
zL>z2sGqZeca|FVf@^bd7s5Uzrn>Ckr(D*yq+c~@`y&_WG)CG~JT$v95;?XU{MkY-K
zS(H(T+Ci-dngFDX$kjQm0|EP0fd2zv(IiQIHxY1HQgNv5Pir4U`6E=P9UvjGx?H<5
z@`tSbZc9lzZk7WwoEV8-Wvv3>R+2WF(GJmzIuGQork-!*!?m~1yEWv;=sHAsXm3o3
z9^;Rb^9LT>s>RBnt3h2y9nEsIap@~UEN=*nc3%js4c2tG&TR3LZ6ys*4?1B&hft%W
z-FCX&vL0{HPG3I{iTpf~9VClfqyIQ>j&$j|TkF6;&1aF2U2TeHv1fv`122p^v5?nW
z?XQ>y<1M-LZjS=`b)p^NwY(a<4=qyKZ|^BVIvq<joOVe5Uo3Zct(^-fXUAgePH-f#
zSGN+Bt(fp(>VQ-6!^C~s=O;l!45cnRR;RKor-GS!nkS;z8z9Pp1LGL1<M_Y7{9C$p
z`g>llTFYottdD@v+;s!6v|67JXlEWS;`oXdICJx>;RHf=!s6<hRPxGvNjSI&s*oi>
z;kCx|&-!&caQdHhoeF4%?5@Wv670Hz@lF51jo*VF_kD*0|Myo#vL#4(AC*Oxrd$U+
zW#3{b)>D_0^Wre6Ua_)A>El`HdB8n^R!c39SxS#~EzM9vje*YQ-!lzRNeQ>~74VAS
zc%1(p(Y#@Mdpo<u`!d;kFIE}^ICsDPwe#{0S-je87!tVv3U5VaY2V{3li}5EnfkjY
z%+$>b;Ekhn4_8Kh)IF2|Nw+^)4X1T3DTp<>wNz?Lkq&`G(F|A8@1>`#iHsZdn<nQU
zKyDcTZ`<czNfDZWA2I|03LD>oGGZh^K-dmzZgVFP;A3sB444tsVgR@c*o?~NPbCzz
zv<NfP>M+Uye6I7JwUD1k>5jN)Cs7&%fWlhuYU>oO9N9kDtvOV$>VVv;>7IJ@7H|cB
zQ(7ekfS_63yjVs^STK>f42y?e02y9|Z1<&!T%se3X&2;X-;-cK;aku^taouWv^B<y
zXV*Y?bI_yVu&4Y-g%QZf)Gof5%{-b1v~;88_@2wtB9Iz@@jdai=oO)#7dg8u9)E>C
zi8kjI8yVc&*o<wBif(dPg_Yzo4&uQ!Sj+#W31o!Z0J4w8CdV(tD0qsbqibsn{_YYB
z6Kb^xLW(^XN);xGkqL`2PpEAq(bEAYTdqi5m5LG*`dC@iR{)0E6Z@$yO|lgHul@%;
z38AMBv!DFI_)vV<IG4px+VZ;N2dtsasC!xP;ZSGO;v^x)2k5(mS?00x>!zHURM<3-
z8`RJOLc3h8`S_&8E$|JQ#gXNS>wvd@5aYL)$CJXfNAH&hw5O0^Iij6c0+trC)T~n;
z0blo&N|rSrIkAc_=3@xKk@(1rX@&;KO?NRn@tPi_@iE$A_0N*?GH$9oZQMLIfJz3C
zwzx(}fJcv^6BQIvQYh=>yv0!jYU9zHa3pr>@uu1C)xfo(Cnx2GD(>%_v~lsH7vgC}
zsq$)=zAq&Eu$!pLT(Yg^m2|>EeTy!K>LfK$Q64h59+6N;i__mutqhdi&1>;gwheFt
z2;gZMq#9CHvX(=a3-Ke~IN2>95~x@&uU5M5#WX29EE#8jS@jX;ILcXzd?uH*mJ`Ay
zq^w)YO9Va>rIk^Y$Ce+MKOpfkN*gB~8Uv4q6D1%>OB!aQ2nLFVrK7Sq0>FM`8&-3?
zv^apUI%0oNK5MxlNB`VNN{Oj_%n=!hDIlww@!ROiaH?#P2gc)I{7uQVG}01!%viCc
zb9y{578u>Un?RvJd%^fKPoVgJ^rFMEI*xqE<LWxhZzQOC-YBXiAE;<Ve*7RqP~`GN
zGP*7E<%rJ2vEX0C3g>X0)fkAo;Q)Tn_y3Jz#nr6Sz3OJ*DAQLPeGuXDvh27j+~xWr
z2ZXpzA^|Fxr&5lwpQ36&8CU-TNWiK8CkpnThTu@dc0N%D;)F*3i|qjxh0K$20$jFA
z^N$Dc|6h!839>&xey*3&xDhoxjIjeSi3619P~^wa><@o~QuGdHnmsV<YHO4Ah@3!y
zkF^kDp_ZoUdFQ?~8O$+v(V&zVsVktZw2w15(<rzMDK-b&ds{yd0NWb4fVC8$%kBob
zU<RH?@_*(A3f9*4_dl?884|&orm*z_sGTDJh4=c!>eB*f04mp1?pjOr<YBFQMvm_<
zu&YRJZoI(75aJ^LS6)p+ycVvK)SZ8HMx02WhDUW~hF}`t{+O+Ec~#d?m*QRhee+<p
zPL1dJ2km2G@laS4+1&Q^X4Z;Xd?SOf=fUZS7)$Ec6@ynYQ{vZ`C)vJd6uVmE0BasR
zbMXDAq<#CGx#?C#g^Yb_(#TqmCn0jc2iK=^q8i9?0WiSli8OntcxWXx@)J=Nv37cv
z7g)hRTYjiqo&Eb)4&V~cN&0+~=6UG)Cg3K*)80UWmOKxd6Mc5z0UKZS=QGEf3Hp8;
z_>+CEB|`|;=gAW#OAC%HDK(V*3GmG41M*+pD6G>|O<24kj?4iBT3?Y}d&1gkT1Xix
zwS%`Ll&LzmkySw*LG=Vwl}r8(z98HxtjS*3wtv0dC!9&`C*K_4H(RxWDtLG_U}=Xi
zz20@_@^_&sUj}AU!jP)qZRy<L9Xbfqp*Iw~eQL9Wg<VQl^vc_NP=*^26>|b;K5^uX
zR^+tVC=2+4$Is$foRF~8ngfXC*}L&61L^=5+<%6ov+Kf<<SebeVNMAYW_GkpCE>{r
z5Sbqc2IVlS>*&a3EB~HfvxlPJD8#m}2W?O67MGOB({knK<m6D7`MU?t{Y+_C85MPj
z<|c>`3!U|D+Ab-H3r1jqd|dg1>O`tzvf)VbwD!MQjqnXFO9A?*5$Ta8c2@QUc60TB
z^ayQ;&F9`Ki611ypLrVMLa|}LB20YO+CSe6&nCb%-z7p%QlHk8^L$rMu+0Lg2@4h_
z1OVz2r<pj_(Uk&Vww!)!l?=UVUP8UqFpa9N_5JhR>KiRJwGR+t9N$)Z@fued8GzWI
zIOOTMaM&C9d&fZk3sOS-M-|KmvaOvwgoW+sHY`{e>eJ1+4z-wd;dsRaP-;DP@g>?3
z&SB1wh5}E%y034|{}h~~cH^T}8C92AmC!r_i5Lq1c&TaU9;E)ZS!#WKVB&h(82ZF4
zTAP>|jp`)N*KDV~-wncLL1ZW_$hv@wdBu9Rb*Rc8cs;NIh*83y9L+%AT;O7wuZXI2
zp?;WsIvth->>M2Y4XBt`!Ey+w30Sv;%q*bCe|rGBR+n8K)awHf-2eih-*YF4Y%yz6
zyb&!6q)zR`SG-6|{)b7H7U#CK@rd=zDW?M07?t$W7mligME$>)&M-)WRMfL6rSLt=
zf6@Mj!xq?UL<^uz#0EQ9uzr=Ont+KFllscS(q-4HWVSsf76CF*Gqi!yCqeXn?o1j@
zG@?eY4*(4p&;g(2w8|Gu<%>^293WGM0(d6NI-Lgru>v3@I|IDp0^U^qe`~tGT`J}F
zF6%!Ova+<FQE30Wl}i10D_xxv(4+_@VX(HyIVHv2%*qHIb^(_UI6dv1aSo>4|Fb{-
z4gq{68r@BMzy5;VedrkYoHmmrxv*lf|C?9vzdNcz$FSgWYQWrVNTyeq<rH%ckoscr
zTCD(UDCL9e#a}o^Xg4pQeZsX2BtE3$%4ky+g%jeo+*LQypyf&vjU>Hbaf-&%?Efmm
zha|819r;{!+OjzZ_2Pi;=ByC?-@by22guTFUPWv3+w&lDY1C9GxG&x>)w&D{xUgtT
z)M?<EpMI~g2~M_YG#SYh;W7P<#mvOSdAT0s({kAH{Z(;6f%N2_;y2(qfk6J`GJ61@
z!_z_m*yX&V3>rnjz(DW>JFo2lN|X^=d3IcA?hxB$x(0WkAK%&w7Z(1rv$N5g^Ifai
zS}Q?(s85Rn@D^+Lw;D{Zl*tMPC~a1uOfv_iZy}HZVW$^n0JS1q*E}pNtXtouT(IoV
zqBjN$J9eVWDB_-qx;Xl_tHX$j3yZ)<`iK)L^^QXNPn<C4zQq>rQygCSt}iB;&<`fv
z1lcGwQmIk_BI#%%d0igngLgEsA(h%kq#@Q;Iw>>uv-KLRWXnRvJt*GW`AKR91{}aM
zN7=&Sm0sa>k+_0F89-|HAvkn@W8jf85yO$JYC1t{^s;a$4@1-(*s)zJ3)3(z+|#0o
zClj>Bk5*Mvl~v>%$VDW@X3nCnW!-&3wS7Z0O|BjPDtocv&G&f!jyx=^R%1xkJ4jJg
zQE1Ef655zR;&@Q1-^{nEV$!<E{|6R%dDW0WrHcgIp|3svwVm46H!ny+LVyL}X>=d`
zDZo-uv_&|@PEdy>#;^6BhpIqIsz*YgFFNZzz;aGtkt-c}KsZGsgQ1qPZNr}2p7Z5v
zPc1cR!9<CT)o^93>wPkcll#HXYzcL7LHW#K>lE%7q`lmt0Huqj!@?oyqWW<{6(s(s
z49oJ3D1=uS%4TL}!@0e{0*IxN>3%oFrJF!{2;DJ3uX)=ZvBmRQfF@SdNhU(Js;*80
znMKi9s>+w<iQ~MzAFU>5LVKC8`x3wnQbVL%^*i_x?C)JB`j}I{$O|x=WrKhBzF3i>
zZ7!<=>t0<k?HNGFGyOAZre8jsKA!pyqCdXT5bOn=CW)V#tM#NTra8zY{20p`_Ro46
zw5XraxMO<wOF!XZJ}n$MQ$uO|6EjsNJ=clP=NNJ%Rf`Z4e+A+~7Y3Q#7|WfMP?^8<
z<M=NtgVr+f)KB7iAEbm{Kkhxz9o=7#pr58trhZQtHzsz0`M3;_7^M0TFYvg>0riZ+
zLVh3DPAGE!y9pdzTxvqJ85I6_rQ2l$;>c00$!cTgN0ISoHZ?bO^L3*TgyRoMlu{Ns
zw6!Sic~AlsJ5ra1s8&E%nOi+c@#czev?DF+B_yjYU;6D;$#na@S|z?jWatc&JqN^<
zCjhI!SXiIJMv9S@diFdRbKLikC+yz6`&<%ddPmSg<vf28O-22rO1f4TKg!`Ra%#hp
zUz&6zv6=ASVUCmY))39(%(}WdcxJ7s$aA_lQqJ!~&}YKkDikb|C_gcI^(j~`R;pIx
za8Of*dY&nWhZug}<Cc76dQV~9B&rFZR4wV*&9h71-g5IQ<VHnBy}uW>h;icl05IH$
zYQE!32cN(5o0kCSC-*yU_+yIR`KLC*(Ip{`1R9c&l(5yric6_lRND}Uq%k2Pw)hK`
z`=CbGh_wPk7HXuF8*QpQ%bN}^0+Lvpc?89@fU*aTnBr(&;;HUuUre$3jA@)Bz1ywS
zDyP~|xz4M0_LgQ_nul8Ye&aO~Sa*9VULzay)g+Dx0DvFMsK$**hLPq7=_KN|Bv6&p
znlu#`jdaA@|7=tj`*TwM2Y{mTkO+~S_o^H%kb1s3B1K6Q!W5^_TfJ|5`#df8H!p*4
zX{aeS44TonWuibE4(;6^l%lYqW?o_q9Eh(;5kX@K+sj>z8@bB(#pApZiATOJatxov
zHnAF0*W%ABx3aOpMZ$SI+0!IGgmmp?Q2Szkwk}*zXq(n)aSkxIyD`L3O6VXI7B!1&
zMtm}>J4H-y0=S*m86oB61Yl~_jGrOK$1{~iT>yk~G89#u7mY?JgLfAv_1!h?*u0rk
zd6i))3wavn+NV_RO)eLQcfdcAPQhkllU_|;-EUMFsWqM>N4SX;x+5>Rk6XDeTupv>
zU)w4g=1P1&-x{D}eOJ($BFg6y+_;i4UhLKy!hB^)jw-RY)RqOf(=yeZ5S|*XOQl-J
z1i_JO{pKm5ZqniIh|Q8Sn9Z83=;^&Mn+G=x=K)j~L)`AJgoJiWQ{agr<i2MOazh;i
zR@7QB?A^U=nyq>{wV|>-Qouq{D)a1^|47g2d`?>RLb5ajbZ_j3yPrNQx9PWg565u$
zeF7e4T0Q|6$6!AV4<C{qU`NPc+jw~JlL>i#1?Y4o&EGP=r3-k0<5_yWrD8nBcUjPT
z_#6LkJ7DPMkqM`Edog!NJ~ETf)mqWCoT++^z3`JMC(%vYekeOs?dtHQ=6-{pj3Z9L
zLhkJ~67>+V?23rf_}ROxaTUQtIF$X}r?r<JV@UCl-9#KfV-8|A(CFgk<B~+DC2^km
zQ-TYuJo-4S#-=FkjHktk&EkAcXN=@0Rc5g8o@W^A!QYl#g5r8x%6Ngz4?hsN{`)Kb
zA-+F^1rpMwIKrf2*epe5WTv~4-;^;(%zt1EO4|Y=C5kCR=ju*L>5-f!z2n7&vm~?>
zB#mC@hc}#VITXCOTj4FPSB$BAzZdb$TV=`(Zg5)PyL8c=rrk*4gFMHLgnV7Y8#hRQ
zaGZTm|Hf+Y=3TW<Htn+*?Lf&K?aGX~*ODXxVcJePuPK~tZRt{don%PS6lo`M>McPv
zv!H>flw~ZBz9zF>^SKA3<=Zct`j+<j>{!poq}YtY4IXdAUD$*}o^lEvc+3Lq9%Fu-
zQK&^lw$%nrcjE{nTIlJaEgau00b&_H9A})mZ@Tlf@-HadzH=Hi#)l4z6Fri*-hECl
z(!Dz<bE-Y6;vQnNc$(&Z*zKzHU-Rou_1_^HaVR4nj7VeBLhxfrZnUV1C_(Cz2CSW2
z^6DyIA1RmEgd0tIP*N-vw@lhb+fc=kiYiU<!z%}IH1L*}Dp$xvkN0KFukJ$Ofl-!{
zXB864&%@qp_fWHj<4*y^-MG8%W7iTplj8ws$C&=V#q=H)W+OlErcHz~Ls!x>c-&)J
z;QQLjt(CUc8NjxYc7j!w^Zv!~cTgC~Z`iG|B_`LIKColOp@%Sb|2Vuuz}HZM9+*h=
zQlv`YPHa_Cz`sF-rvZT%(5;qc;yfOhelrR~iMzb}`tod2uKX^%+JEgsk9r5;Pwf~K
zpPzGXHRWp|Zr8UJ0|#O`FuKj-q>iQCS-dG1c7bm9<gFijedn)6G9<)&9`IZS$bp#@
ze);}Cqh$O_vK)yC(yn%b(>-ASA_l<+Tl3jtO#dEt>%YwTW}kD8H%3U_1i1SxbMuZ$
z@><Em_wd`|y17<pWb3Jc9NX!l%vFCAli<ipX>-<U=R&0{`-6UT;5L`+_jJGubPRnm
z4*Q%=R9Qn_s^J?k;w@8zY2YzaU2v#tLLYiKeW--fMVMGgc+IezR!DD=Xp~z=F;$RY
zQIZXx?8Q&8a(Y4Wz!pEQT25mcnm2kx`_Ei{837Hl3ANr#Az8dyr_&p%+fyGoUPOGY
z-1-*A`)v#sq8Se&%o>5+QoE3U!Du{~00c+SN1l?_yiD3dc8hx8Vf@N(I~7y9zI|@R
zihsAB8)4YGNT|>b436Y#{6BmB4c4kI*Eh=$vG{PB4+10_q6+B2C*Z~?O%-XZP-iSC
zD6ZnN?u5;D*pMcc6b2-EKH2dv1ECl?hUK0JNHkmtf~>@XS5QWS<lQ1pgF~AHjvr$X
z$<>;Fr89aum8E`A7o3|v>Sf?iT!QI-X%+ih%4p!}Ue<!D>G!SZ7%*W3mB{}9ozS(j
zvWk_H#|aHR{MU!v<sP?g36~xcErq3|YQygL90tfvAI=hYxdMQZ4`Kd8zxoRhDSnQ^
z60^D!3A|yOz9PI;L)m@=HI9LVrSp}1OMr?NemlW6?cWoLzjh<yG!ATJ;9uYMRUsQn
zbpiZ7Zy4=S`{kop=I@_ju+h!>l{Btob_ZZH8VFdgM7Bog-;b|PY!y@$Gt6P4eqxNG
zMk!2REp7Ut1sDWa8m|wFOHMbX!()-CX%RBpsWtnZhDVV|HE-44QoDm#xV{0(v_Ck0
z@%4={zn=_Q&wiR>aOG@@!bfVs*qBacCrk+EbvpxxARm?A^=tndP3&TL6a8B*6Y=tR
z&nJ^3M!XzN1#l`T8scVnQ<gIo8F~AP-|`>-P^P-xglZn`sSF+5M<0RR?h$i}Zog=<
z+55Y`6e0UUf&LI9=0Yg;WzkHKqPfYa>m{e(WK{ck-9cfCeh-glH|2@IX<6>&d3>2(
zLs+Xu7FYv#uX*|IU&1tRVgZt5Fa;O?e9fsWk#FVNa|33!Y@d~!;=h}si%|HX>zw~x
zLnHo3$T9cUqQU*wy^r`eL=CooB_;|K1_Xj!&zG`t4MdMzyllR!d|_4>OcXtfZ9EGd
zxo1J=hTpmcE?nN<at~~^`CoCnu%w_ZJyP8qR?M5*o4wjV^VpxI3){CKZ}$4ydY#~)
z(gpF@!Zm<~+h?Y^v4faO<DN&`q9%HF^>GDnV%Tvt{94KLF;bF8(|4Lss5R^e5NO`1
zt{JkJ=~5)>XqlTHU3ffKU?%n^SZFxoyjjb|9N&KwN=p=T6}#W@_p=inAaWld)C?>!
z5na-FL-XOV?YQ^Bw@^u7%BMhNFOlON)J3e!*9{@VYn;*xo?`La@?D~Almp<6`?X?{
z(xrqiW?bIbr*PeQ+{G~7C-!iR*xc`4YuymBT;Rb!@zAQ<v;rsD3YcJ+fW{Y$p`SYB
zg<E_o<aOW~fB1wuQrIqc-C48bZ}w=>Y}kuryp&Akc7JORUE!)4!BG4|*m^h4GN~#Y
z1|QClPlMU#T=Lm-Q^d+f89dd$rk2uG^I_L2%-SEGrjF-)EfHHsvLF-v_~0~KIUp;b
zIu(2N=y%NGwZ|`SDVf-&ls7s+C{69X1-3BAb74=HtAT?);X<0XdN#-OsA5T%0AHhL
zA26)^1o!<Qm#DcDaJ0w+)=-w1*f6=*ozCglpa2t%=S}1J*<piE;KTJEF3;l!tuYM>
z{r3j9i%MG#kJ=8RU7`rUN`bqjZ7-CG@N8BKs_XJa4QIJv+~4<TS$Z^7#NW!(A_W5;
z53wtC_)$|1q2-V2rFrKdpgM~z5AvZ@UY22N=9eka=Dj*Z9aLwBXoq=X@9w>C7GZ6Y
zE{YTq4v*)YO}iI*-1G$bIY$G87h$4PVVpEuXWS~a68QrhZRxWf``H>5e8ft?P^ke!
zb=Lv(DvQ-`5>ykNbOL6GPWza3x6ZI;yQs055?#<IM<lMlq*S6=h9ljzvsJxopHne^
z|KVosG<u@1JmbU2{V~z3C*{4ZSk>#m6R@33{X_}JFY(*U{X9LfEAgh2KP=nw2KVf4
zV@3q?7INGGnv3+waeEc4MAYfhS)oQ(m!@|CWm4+7c*@C#FyCTPNfqZ=P(1S9!xk>b
zvZF9uII_O($O>Jr$LrMcSld)xreyr8$fDGh^4$l7wp^6FKKpMd%ueaZdHC(J>(*MT
zwB6qhQRKN*@QycoV<wOMkc|?1>S$LXSFpy%R}1R4Z52~C*PRQ&9;3O@qN%3dUfx3%
zc~2vX+O+f7;IS$0{KF!%FKg#EuF0w{Z=5ZUFHRhXiv{Zf8BJU1HRU^Q_qVvD7#t)d
zD`xv*y`R00h66q5XWXu47G`E<LOL$IFh0B)Wc9?Tur<N_{)XmFR0oeNGF9Ey2R66d
z-0fS<OZcg#c?m>g0W#=Q!c}tZM;+(G-K^4rljC=9+Il@n*3hqhiG3aa>M@+u^E|{g
z-A4~Y^fvF^@z!Gkx|YL_IuaOksksu`z>%JL5bN)GL!{$9<<+=dkhX3@aXYi;zFXEH
zyU@)fcoc5XxP;Csipa88JqbS|rwC8(tmR<!fV5_b-W2&f-Y$*IWO|-_y(RmLWJTk-
zpwKWt@z|eac5_B@vb^~iIe)%A@+YbFhOqkPX6Z+T|1FhVqQS$ZVVQ6Ch&4><wlls@
zc%xgGtojljJrE|y5?t}iJl^(Ul>U0^+xJ!qju&A_8A*4!r{fZ=^@2W@dzhw=lMM5@
z*F7!1MtlgHit>k^U{)nQx&2P1GE;5SeYBeFQ=G8OgfQL|kXb#n$!>FGkU$H@cfdcF
zqYVFbydy!6=B(45w~vNK2AP#srVvKK<&sa+9O&hJkeKS-eVM(F#=yXU=BGr+sHquH
z2WgtMy%F;zr6aNDnp>Bg4_o>X^hd;;WY2)shK`NRSXbX!`XaG)o!o4*&^Mc{u^zjY
z4FVgg^QHQVS8}OcH>3mV(uj<dwe8Z#*iF$PU9qkjS`oqbKa66>&+|3X_M1fpEUev~
z$C1W*4#XH^-(#E=;^7<=t#CVx3KkKd+%T70iMiFqR;+fZFFN?2pg}c^om0kXUBUwo
zV`TbxwZ2AgRO+x<gD$|&*#F2^GI#Q(OJSFPv2}U#Kc^yg+*}+CkSX<l8kQ9o$HpOv
z{?Oqd*(MQJUukN!%2NL^^hoI~^`*sD*UiForK!|8>jynN%fMv8y$0VG3NIcqO1=P#
zOHD~vzL_O_@q1lZ`<!70pCulCoNBuQ$)26RqiS@XFh3PD%kHWZ{E{`_w2yM?sZj4Y
zrF?&unKjV5p!9qC{1X2iNK12xWsaC4K4aj*0$mGT{qXoF(9}dtWSgm-I>89<TZyzB
zFMY9nwCAQLWTnJ$6T?b1_z4L~fhB~HDMcyoj%zt@SJ%mO4pZm_Mhg?Jny(_`K9m;J
zqOAY9?L#la?K<c&4emqL<z{&j^GV@SUjO<+zH<s~Dy;e?5%Dfh8uN~0-6UMuDy^$>
zAMJY>B+_txj_?Ik{iosn_VzHcmXcRdeLZ;=x@P{0kmlDBqdhVqTBU~hSnTr5Gv)iV
z?+wBoUQTtzLAzJl4_$7aJ2AECZQL{<kp}zQSQL%>70PpO=uAsdQP<N1jg;wOLw${u
zr)QCGfGNJQGC*EdZT+q>gswH>lf5%$IQ4a?p>bs=g+pBgSMeY^3QrUy;-*28&Rn+^
zr+kiQ2eq!8wI0r5y%P~DBSveX){;7J(k-jTd4tTZTnRaIJZHs&kl$aTl9gwIC8oG}
zRjwS*w?J7UK1$QT<z~=XYnLJghT3b%=fLE}T!7ynqmq^~i-25EG?egGQss-ha*(w$
zasgdfA3-Uia)8=HM;CeH6)^l)_{`b~gym#p`+{Id;poaueA3}>CUp@o2F#%DU;y|g
zMObb$M`~RY`a-MZ=2GoZk+3P!P`#q0!P<2Vn}jlbv;)FJ>*iLu^r|0?sGQi)Of<^{
zn6^Y%8=af{y|1z67}zG6FSrEFplnA(u?0_W3&IJ3O?j7ip(I=5Blmr*^s04|1nwOT
z7_Bi$x%D+9u7|8#e2#RdE%(v>`B*E~du7e<8rbD4tT&G6<M2_{5B_4mHf7Kjq~Ahd
z=b3u>zEoJ5=Y|?aoo)w-nE&|{?>Yy3c&!Zqr*m-SHm$Tzcro?ZlaQ*>NFrd}*%=f~
zF{4u{OYXfRZL7>USZw%(Sb|Di?$Y3c@}Ezfa^Fo0ABWhZnkN2$gmztC>9MEUrmPb#
zz>Hi3nM-;xK|B6#m#rIY+8QyAY<ZL`y0YS(b&Tt?Kz)6^rxl`BQ`%bvm(2ezN@#Cq
zMW3h;NP7q@@m^X<g&ArD+6aX6fn2Oyik5PR=um&#&}eV<zE)`|hqcB8VSQZz?^q0~
zSRV?5PRUEd9MLUQf^69BFxbxDT;u{^k2t;n;IA)*SiXJJVH<{nAu`eDKEtRu|Nc4#
z-rblbwdQ`BF<|2(Ji!yP{7<hd^tPCZwD(X6{`)@(w0LS;18vKH^<sV14^2r4(F~$y
z&$&k%^=tcmEi;dxb$=Mb^O)hS{N~0IR%Oy>3eYtp?Rx_2+<Lb&Dhk8O-abmNFkcG#
z^Vyf9^qP%kn@`IyM#~;l5VhWEFr@;m#M9lUULk)gLFtdIDQRP$_F<L~o*_!1_&-ND
zS|k8EDqtF)>EYNNW`@iuOh<ULvN`-B-@O)TZDQg(O-tdtM6{P9+kp2kc&~9jegKrg
z?HrW$(In@P$whs%0kL4vsD)szm%cvI{Ol~V4XixUrjYKSikfiV1c_Z<>-j|M+e1r(
z5b6R2V!veK;c=6tjM$S%L#cO`X<aY)=PpY>x6G2^YpPcav}oWl*^M8Gr4ONLE$miR
zz|q0)D_0Q|y2?g1a>I7qk~j<$>%xrT;N73i(fUQq0r=09Kk<BetZ4?!P|OM3(q~_d
z)j~d=`!{+oA!|N+#!9XI{8?qlruMy_`bgD_XL~uuNYC1-fy<tSmm=DH=)yM-FDcU#
zv#p2TwD6J)zI?{$=N@p5%AlRWR$g!4GHdH}?rp=DivCRb&gYeloLnf-R_UFc9rI|B
z+3%Bc{Cw>3jG~e)07TKgal>HX=DZkHIa=g13;%+{QY%f|_0*5VKmN^dgZ{;Wgqpt0
zlBCJB7C(hHhI^Z5UsspCH7XnTb~Ou4a&uKR^zC{xi~Hqp>**931={KblVq=M+QXDf
z0@RXx)uy%^T`V%N^zC~yV`GhQ>o+#=PX@W$VmdlHluu8anFZYb@@r(Y@{TgVSnb}L
zj2un=m~5i(x`*wTo&2B9t~08srduEMMMMN_fOHiR1p%cO0i}q5fC32t0^y}dlisAG
zQbd8E5{fjDA|@dqNG}moS|E`ULXXr)k!tAW9`tp6cinaGUEli7ue0{lGc#xJ=h=H^
zO;3=eA_)m;0FJ3pIb0CbEvbo!=gaE8Ho-#?*m*+w*RDG%K~u3CS0=NwvmZgDw2}4V
z85!@80xRlecsvQr<KpbBUm&2koRqE_VjdM8&7y=CG4yTmb_i<kV<E4Oo;_LO(A0cS
zgWlgQGO686O?sEzNMr|&8N3d{j!Yt0yNL0ABCic}3=J##gR%$v`W#m`H;|ERrpQCn
zhGCm06+ONQPJU}Zq}Fj&&r*uyx4;cUkD@W!2kE;MwzkLabr;zALo@^eYqYEa_R_b=
ziQEpM5n{k8c0|KW;clU)8ovhSI%~eqRQk#MJcG%+HN}^$5JnbLclrVv@(wv3xG@=)
z)Y_^ey}G?gDM}?Y`1<PEQE<Ey11|oYm*I6}JO%N*nzBVj3ML(=k(#{yY~TXZj<Vy!
zgqL1x`Iz>bl?SdbEplPKp?e0mZ&&8r9@%KJC!DWxMsahU+b<vZ&NMDIHf0AsvVke8
zZ({C6rg)xhBwOsvTF#TtWDt~1EvzK`-A8QXw7{x77dfyY3wU=q!&Kg5-T|~AQdV;2
zyqh$1gN>4-jZEn<HZ~rQmkOX+SRe_!?zL`BqSVpNiFbab(+7loLq18B8qx~?67UoK
zA!1N#E5|;11X!X;!nV?_eanxF1ShH*NmIJ=^g0gYvlu+^@$*XwDw>voGaWkAJ|bsX
znQP&{=Hy))vQ>63%WY-qUTL^f<GZ7X;HB3mv8h?Axua;Y$d#*VV8%g<$01YeGm2u5
zQ2wdwi(9mb7=L7{IRAcoQ(`cckvyw93VQ8MT~Lu26r0#&|IYd=N5e|zov&@Of}?pp
zoiDnA3WHXIgI7mp=Z6I|SO<wjgVHP{6u0pT(cF^IPaR53Bq6Ho!E{qqpSa+^yP+#(
z<qZs_q$m%@@b%>#K8#$Hqj`O!N_8R>UG1SW{d9C>#7dfYGmF%ND3U2Xu3kWc`8M?U
zQhs<LCGt?tT3UJB_{GK*uQ5&M_g{mZGXw=VUu98gu(FNET$zDYrVDxbdTMKUcDw}1
z&p*{uF6PCFOBhT>2$9@smTAiv{$v9OD>ElU@PT_jTP&ib=d)*ES?uH@r;lK`qZ-jF
zA&A02F)v@9oZ6j6hHcw5shIHZtv4H{f;l8kZ3+ycTxyI#YYPoApnEfAwN^%>ZB^bP
zy2C9CoFOJS;F#J&RU|}AfmL{cHH4;(lio_Agt@Mw-@LI|eX%sz{tm7I!J@0H%}0V3
zRMu`ylxFQz+}rz}6K21PE-xoCck~GN!*e0HY*8rL#Ol&pQid;5b9Y`|&1n_C#lA<H
zBR@quD@vCyvR@D=^76fDf(4Gf|0w8#gQQn9nl6;0t5{Imi;a-zsfgLHqw)tyh8X=k
z68e|8%fr{MeW8d_cvMEMaI<W{WD|>iRdc76{Uole>@P7u^RmZ2A}VXBGfg=Tcm1&t
z^(u=C$7$d0zSpb&kd`cfgPt#dF`RMEegx@fGu6K7QRe?4GBaz^ql^>V=2dxOzc1I3
zgSp*X@qx?~i&P$YCAGB^ZkMN-ICJNb2LR5;Afh=;@i=S>z^-Bc!gMW~m)OPhH$Ugv
zofd2t5aGd1>ZJ=B*eIz1*WIx7&s-eyROC)7E2$O2$9Zt2tb$;{i{`!52HLfkJjzOV
zSTsgjt&szGYHBr7$Na0_i&g<av<vW0XW<O56(;GHX&$W6;947dxt@X8{mg#=2rs@E
z34lh!8nhH|G%YL!t^E18_9o`z4!RE7s^F*C_3lq4Ure3$_H)mT2Y|bWha=S3r8dv0
zQaoL;H2=w@E`<){g>B&2)kkE!76&$LiA>GZX>Y$p2X*poLxQ!_yVzt@6+-;U1G$t#
z;o+6dn+$KW12w|%!5izI8@(|nm!q5GTX7>+ieXk06Rjtvr(1`J>`;Qqcy+96KDKLz
z3;-tBU2*hN`un1}w2d+4g%<Msd!^C)HOTpdl~3kX_c#+R=Bsa%D-B{>ubM5-?LGh8
zQwjGaL#BGJilozc9d3L%VtqH;W+xouA==w9-`DMtZE`Pv__2(=EJw-4s>^UrVp}=o
zb^#O$ZEHh`<>lnqj$8$TkKK8{Sy3R`tG%~KOjT0|H1Vr!Mq>hXabYXw)7)S6YPrH{
zZlKBfX>vMdX8plrG-z(G6cvT-%x((I(n1;+)-1HYY%<838J#0xt;Dr`=k8nTU9g+0
z_g)?w50e~BBc(0eWr1J@O1dz*rE%2#KY$7VVfCwJMNYS-%s*-hpr2YtevpxA*&8a+
zGGC*&4KSJK1yC+kN%c$aE!BUT_kVJ~-u7)G<(`C*=z?xY2<VFGqEJM}$H%#CS;^Vi
zXQvky<f%-+jfvB^_lF@`#f_)E(F7U>8Y6=w?vl5M(+2bE-LAQmnTIYHC&sd+piMq~
zC@qz?#roVXJMuA#5aDuP9daC-;=A~xL+YB<yg-c1<<tbpkst-IOu#l{sbP_BcQdFC
zuOQUCr(*jLUWctjxM26ov@8-RYIE^M^$$qd0T>9%3Pt2EJ#jkR)w@yFFB^RrYPbF+
z-I|Q1SG+K+(Z0m-W6x%F8sfBBSzm93Mx!Tc{Zavd(Df_x0VYhnXA}KkBc$YSq)8&V
zMtjK^@xGb=3!z0b@>-bP%b-Lr|8f7J=eMRe3@-62xHR#~-A^e5y9Nfzl8oOPv_`UU
z*(p@P4MNA{+w*OK!(u;<^A&l;p+2^zz{|{gah4)_$r8S#&jeTHFbV(R2QZw~R>0cr
z+BtYR!cQ{H7z(A%X2u}#A(vLV7M?D5mlSS7q;c0)-}Fmbl()~7sp|{6XgtZ!&+pf3
ztQ*9=$Yyo<)s8LEyYT%{${k?`9jA9P5-w5<7N(}O%s3=SAFHxA1}|8ry<Dqu7|%i9
zue<LGHtRYhh&i%4WSvnvT-K$c+lhu?$R#5$r(hT($!p!s=2bH=!3qW-ZOV!Bc#TJy
zmv{xX7XB)!D8bGPRi()%50X7QQtyHiWRBD>JXYycFk~y*r@%Nztxp_zrj!1Zj<6$4
zH+R4mvS-+h0;}Xh(nt6jyC1Bl^!TPrrNuLxc|!29ehR5HuhTIHQJTbYmygc8HI+JY
zLw5V`y^unGQd2ZnvBivFQd^fJ&Htx~5s|H@THB_{G9&L^dMLYW2v+Q2-PEznfy~m9
z`Bbj`aaa^<E{}T8OsU1Hc7<EkxYfzXNj#f8Ai~;L;})#v=C}*J%%vdgGLPalt>q5*
zm``<~H%+hIp^X@lt?92cfN)mDD6|OYC{HExUXz%#X*^MO)I|KPfp6>g?*%<QJ(UjL
zFP4~2e_-C*k!P>YnLBh-X<|bIfg-MK<yBvx?A^QBB+um9i1&wNDYv;fVl~VM@RwAC
zkc4H3;-1He?~jSYe?zGO-<V7HmJy)?*wdLs{q?GDIcuhf5ZSVpRwhK)I&jRtm(a>$
zY~0m7EUq12Yp=9;`}XaYmX;@5<nM8YtE~iW{8{AoGEYE75dOCQlh}C8-GfAI%sW-Z
z2R|7CX7XIS23AszvbMMM&tJ|Og`OF>qAt%$j#Oon*zx2A*3XpkV69%S{`9GFFd937
z<0(+{I6&uc$dX_iML!(q+KubKuFqv(>HO(%ky8Z4tktD_A+8%-3*qcaV#$v{R3-m6
znxQ%Y+#v*)V6niT+V-Qd>ld)aUk=_Y!m4{!UB16#RD5XWIW9WG!*bo&dM4?Dguhwe
zTHZIcu*H|sF`BuiwpFK&THj^n$1d=N3=U~`K-fl|Wnp1H-*UWgdkNgMbI~4UJXpgz
zpSYuOll9+dQlm4<Am{L7Wa|Y1C%1rrA9B0XqY#Hn3J?_*YcS8~yWlWFQn}OZR0)MB
zpKSd*^u}ZQcB`zEN9vJ4Rh9^`h9kgnmS7}AFo!vi`K~1QZ1b~@_P^S4(~s&aX7k(+
zoXVVSNto~r^(EA#t7)u#d|SXJ!vIWiDZt7I@qR-fhaR|dCTkQt+@HYnqvZ4z_*=;d
zdAJzn#0$8odgXzS=T0iXI7WHcKn(ZHu;3RL2BGw2iR{Oa{-cztG*-D!vVto@a0ct8
z!?mIcX~pEXhdu}i?OM$a+j@pdUpVvF@5N;u`fE}OwcOIacS>GWPDn-Mt-X@<O(>*P
z^fd71o-7O%saM0@K<>g*mbV)tF+#SX%6@|^P!1_LGZc7|g3@c4ZnWYgRum^ku87as
z{|#LKu)MsgUm2yb5476`E#!aq@XMtl_d$@Y?}Pm;&B2;NrXkOf+xq&cjQWagu;A{l
zFmHw_d7&IdLrHJ2iR8(U&>W%eE^n!1StDt2qFQ|-&q3f#!aC+)+59m8i1?y)^A9P!
z*xBnhW;pB#zXqCi+CWhpeOt~|Jf?H|-atm!wHN#4tm{@@Fmk*2JP!RDAYk7v`JE|)
z#+;E1oUwr)IrN7{{x_Prj~IS)%l{#K^D!eCRN%Qdx0pl}s>;FWr_k7;L!0(CHjOId
zX(*yzYm`b?dadCMTCUQ;D5^<m;uhsom$FaG?^HTR(0Q|vA`=wOpOhPG`8^Rgy3n#{
z@_M5)fEhS9r3};4)y;k9RMpcXvF+)7aA&7$Fla<&S=gi)nn)&O7E)1kegA5Q66G$s
z!?Nydm=`jbnFE^_6WBknSS$ni;Z3r8I~r*74LOvPejJ2oSE&sHeU-P9dMRn1hW-^t
zSy^Ab7Zn$mMHIO^UTLNgGnZBvXqk5!0yS1DCT7YISH_c(p&AAmK_jsc`>K=9vkNaf
zFse@R>;fUz&4UD_Z3WdCXOlLgh0VN+xGO${X#{Rc5DmjFIvRxDTaA8{6Oxs@c2iJ(
zobOlThz4_GV<9o<g^o)4`uhM4=~TFID+JSCIcxW}>e`&fH)~7k2Sc~v)d=prj)p;L
zb=hH7i#?d1a$4X_o{OC$wma7Qlmd*>v(4m$+so%x8}_O>iDv3}fXm?BYw0&y37T$a
z<HjefY=g7(B&Fz!o?ddkDSE~9jfx79!eorXLW?7%5P3=zF(RdAsEGP?+qG0OB2LdJ
zITPWuGgF(5234h^MXQ{oKI2v3wZa4+Hqd?Fg&hm-h_qd0QS?O<<|O?kdpYZ3U)`^4
zjkPe?PVJWjwJ-atoyqwx110;;UsMlCBD0#072#VI^d1O*(5eU%6BTW@66<8)l1TBC
zi;IgZu_yF`H}k}3s)N>8e#>P-W8Yg$(e<$@p~jYW24VfF%Wsax!fR`*bG>SYe8)%o
z5ki79ZN~W3$@%FS-6`q_UA<{?`g5OLf8DnJJ8=Sa8vy)ZA@L9{$wISIDB8t2w`xOU
z-t20&In>JPE1|L9B#}aBt_ZV8qAVmBE^Jf<K_`foYSPHbQ_CeDa^}9XW0<CDey>4d
zR+WR68@vL6ZtL|nI}JPyU$C|;nCa0iFQZq&Q(l33@RGRL%g*P=r)QL=Gh4IrWK&6z
z`Q5ruE?Lkrq<YXzlH^<ZcjYI!@b!Z#w$vUU^iv$h+&a{FXW56qPpl_JVBWsL-Uy5y
zNlYGC@FW4im?+JfF7X3u0@by&%;0vAR#H;p#R>4wDq1d{dgJ-|QEe2vo{L<|tNfn2
z-upzl;44;BWIR1xt~@1uk^b{Gar1)FGt|#a95jEWlN!ynU$iQ7UX@#rK-wP|a3Z_A
zyGzAFC`D9ji7ldt3h48u&lBPmP%f&C5KJA>d#hvpBqf9bU(GNKtPISa8BXTseO?=Z
z@iUs?RdYle*0ra(fO0fmjqL693gi{1SLl2g+|k~xJYj<ZgIHwRNBG6_m|@6go)6yB
z((hN`P_}J8OcY8&y=#%@^z@a7iYeu{oN)P@JvL`p2ddD{nr&iI`D4u6eBepOz<%=2
z?YS9i*7nHEY&xfLhb#X3wnM^1^@(@bYP-;D&7kdA84l3-<niSx>fY5C&>RO+rZ0Z%
zuj>l|2=e!9qdW>QR8(i-V5l9Zkdy3y*VtH&xV!(ZN5kt3mrM^<KCG_ks$0$2)zZ^C
zn9iTt?mk~Ua2=vk%%-5nY+uo!pg11fh<9OTWcAe!5xvT&BhWk)CJM6#$7qZ7Me=Cd
zy%dIPFk-qw8+dT6sGuR~ODw*&Z5Q<Zp?(cBop&xv79}h#d3w)P*wEXVDPKVuXS8Y0
zd_qjm&tOw*rs61%5=>=4=1sm&+R@sqP2p{meW7mgf$N{u88O<QOt^$2pL61RACYsO
zJ@>h5blPduSsbSFc&FP7C$cX2k`uR2RoiuoMJ+~WS`Op5YKkhP)b`&~sE|Pdww-jd
z5(m=&>+8WXVoHwV;$y!#Pg7l7L**LD&#&V7Ykq(pX<i)LuaE9gT>YL0ub7Dyu1lPS
zX1xE9Td(=*1$PxIa8c^FYy21vxHE)h!kqg}Dj!S=|1q#%F1i1qvlmqZSfN_K4V-6d
z(0%}kZ=aZIzbX9jIjefSmarr=F5tCxQ;$0GsKfofoq4_l_4!rMaJpR<>)R%#XC`Gc
ztettro$BQ8hx|o6Z*5OLH1|IY0F9z8dDZ}+dhwUp(fv?282FLDS?gxeU>trg6-F||
z^`CgVQKm4MY@`8RAc~b6tvGMHG22ANgU6}8AITc5<S?rNnz4Ef007f0J^)xB2T@44
z7C4LmC#aMEO(COmBYvq(f8H_lhwDPM5VcW$G>o1#+;9N5SD?Ho9(;0FaQh?w<!`%N
z!w)58Mw!B&OcvVk^YJC7rdEbr>Ch4v`Xt3MzCn+TuNDHXUv0H0wyN~F5fv2$Mka*1
zyS*OxoG%|$x}vB9Vua&uvntSkhR|??OA?Gw>`w#yNQr35KZO2n!XI#RD*6%QKeKaY
z_Yvc4%ahy6XSp?RG?G)Zj<QuV?VdUh_YJLPybe}e%jkS8TjsRv8QF`EFN%w!s;iZB
z&P#2HD>TYK@o>E2eBJrZp}WRL=LXR(xpPu0EInr$JsVOHl*Qs$rgUo8vX>6jv_`ws
z@fgECjJpIoc=z$$gHlg|O>sO=cw%`HZcNm8iTh4fl$S$A4-%1W9KhJ6o<E<$nRVyS
zdV#^!nJ^{XIB$90`%$w)9f!ch!ioI&EV-of%+Z?Ht<T>pIBwyCJ`QZl9R4KX=w;XL
zPNP%I(hz-&`sBR4%T@=%pO~>iIppB{sSWfhNmvG=@0WMSw#MHq1Ciq4yF2&)V6pjs
zVKL=@VX=jQKUl05Z+r63kT1La$$aZWS=kTY<^XwFS>eaYdp)UPUTaO-yE|M*<nU)5
zLZff)bS&gh5QyT9IK`D&9$s&xgsgZMZEoZiKLZHU9?*=lyrKc%%w?STf4T_&{pI@a
z=M)~<=y^MI766uh4!Ks;EzI#4X`9g%2RYvT{ow?4Yh>+LnvAsc3V1%q1~1*ti3=f8
z-2GPFbJ=nrfwT<&Y7GFenawR#`4KTYOssE9*NK4?h|Yr%iKkz{yCr7q5gavlAmIP@
zI_1Hrl0ftC_ddtUnaOW`k?7x1jQ<l}{;!zxKNsGd*gL2vVy88Cof!^*kB*jsCQjY@
G(SHGG2Y_Y(


From b58907893183d87d4e661005bc321b3b87c6e782 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 May 2020 21:53:48 +0200
Subject: [PATCH 0941/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 443208cb..07dfd77c 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -378,10 +378,18 @@ sed -i "s|= $FROM_DATABASE_PASSWORD$|= $TO_DATABASE_PASSWORD|g" $TO_CONFIG_FILE_
 
 echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in folder $TO_FOLDER"
 grep -rl "$FROM_DOMAIN" $TO_FOLDER | xargs sed -i "s#$FROM_DOMAIN#$TO_DOMAIN#g"
+if [ "$FROM_USER" != "$TO_USER" ]; then
+    echo "=== Replacing /home/$FROM_USER/ to /home/$TO_USER/ in folder $TO_FOLDER"
+    grep -rl "/home/$FROM_USER/" $TO_FOLDER | xargs sed -i "s#/home/$FROM_USER/#/home/$TO_USER/#g"
+fi
 
-echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
 if [ $IT_IS_WP -eq 0 ]; then
+    echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
     php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "$FROM_DOMAIN" -r "$TO_DOMAIN"
+    if [ "$FROM_USER" != "$TO_USER" ]; then
+        echo "=== Replacing /home/$FROM_USER/ to /home/$TO_USER/ in database $TO_DATABASE_NAME"
+        php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "/home/$FROM_USER/" -r "/home/$TO_USER/"
+    fi
 else
     cd $TO_FOLDER
     if [ -d "wp-content/plugins/w3-total-cache" ]; then
@@ -391,7 +399,12 @@ else
         rm -rf wp-content/w3tc-config
         rm -rf wp-content/plugins/w3-total-cache
     fi
+    echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
     sudo -H -u$TO_USER wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid
+    if [ "$FROM_USER" != "$TO_USER" ]; then
+        echo "=== Replacing /home/$FROM_USER/ to /home/$TO_USER/ in database $TO_DATABASE_NAME"
+        sudo -H -u$TO_USER wp search-replace "/home/$FROM_USER/" "/home/$TO_USER/" --precise --all-tables --skip-columns=guid
+    fi
     sudo -H -u$TO_USER wp cache flush
 fi
 

From 89d429b99bbed19079dff9b27d7d07f57f02d286 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 01:20:35 +0200
Subject: [PATCH 0942/2300] Update PHP-FPM-56.sh

---
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh
index 9ffaadf3..4f54592d 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -89,4 +89,4 @@ if [ -f "$pool_file_74" ]; then
     service php7.4-fpm restart
 fi
 
-exit 0
\ No newline at end of file
+exit 0

From 59f4d1fa04cce1da5a052dd095ff9c1ee728d872 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 01:21:24 +0200
Subject: [PATCH 0943/2300] Update PHP-FPM-70.sh

---
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh
index 7ae49492..fefdf195 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -89,4 +89,4 @@ if [ -f "$pool_file_74" ]; then
     service php7.4-fpm restart
 fi
 
-exit 0
\ No newline at end of file
+exit 0

From 4ab335fad8527aeeeccc24883e1497ba076ae59f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 01:22:14 +0200
Subject: [PATCH 0944/2300] Update PHP-FPM-71.sh

---
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh
index 72853906..8688598c 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -89,4 +89,4 @@ if [ -f "$pool_file_74" ]; then
     service php7.4-fpm restart
 fi
 
-exit 0
\ No newline at end of file
+exit 0

From 5f1be60ff95a4add2647a2928c4fccfd3b0bf218 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 01:23:01 +0200
Subject: [PATCH 0945/2300] Update PHP-FPM-72.sh

---
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh
index 8322eb88..33442862 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -89,4 +89,4 @@ if [ -f "$pool_file_74" ]; then
     service php7.4-fpm restart
 fi
 
-exit 0
\ No newline at end of file
+exit 0

From c7b506de9224ce487ccf4da6e76e1b2ef5115e92 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 01:23:48 +0200
Subject: [PATCH 0946/2300] Update PHP-FPM-73.sh

---
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh
index 1cddda74..72f9cec6 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -89,4 +89,4 @@ if [ -f "$pool_file_74" ]; then
     service php7.4-fpm restart
 fi
 
-exit 0
\ No newline at end of file
+exit 0

From 75ebe2f249a7feecb295c09e9a05325415cde049 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 01:24:41 +0200
Subject: [PATCH 0947/2300] Update PHP-FPM-74.sh

---
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
index 64cbaaf6..552cd112 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -89,4 +89,4 @@ if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.4/fpm/pool.d/www.conf
 fi
 
-exit 0
\ No newline at end of file
+exit 0

From d63823075b048b2c34541b2aa92f9f655577ce88 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 18:28:07 +0200
Subject: [PATCH 0948/2300] new logo

---
 web/images/vesta_logo.png | Bin 5918 -> 5902 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/web/images/vesta_logo.png b/web/images/vesta_logo.png
index 4162c24481cf2ac9bfad45bfbb516336538fe89f..f7c03aabe313114e4a6e9e83778dc3cea7f4a0d7 100644
GIT binary patch
delta 5868
zcmV<I78B{7E{-mcR)3>OL_t(|UhP~7coo&z{$}QGNkB+g6fFc$1W|Bhu?T3Z6iBqn
zqu~D+*HWvXQnjuRF8y7q0-|UXidwXS6;Y~UtP~LqDxjhwsK}ZKvXg}D_uiTFzwenl
zH#avoBrGmZpS(UVcjnBQ?R@83&qSkl@7{8-_~MD7ZAI)fF@MZ5?3PIJ*M?;F%o61U
zC92BNwpVvNSgc$b+h|5(Fw~-(Vw?McR%t%`8`az8HK&Pb@FItcQlE+8Oc&c|FQ$2=
zh(epJk(%%$IKEl;KM2^(f^9MkwP1W~vk3_LGQ}{4Kr?$mfLn3;5^>}n2=RP<TqzrT
z4(-RF-yq#aD1T>)*wJUiw9Z7kALo96w$E_Hog7U>RkL853`4ztLu|7t@LdJL+zxhv
zw8|mWB@ognV)~ANK+%LQ%Gm%7J_46cch3PFwGscW5km&yTnl|Zkcjgqw0)_MHx<o-
zZ891+#lDh|MAKV~X-CD#cw8*=;@A;Dl|s1d#8jt>n12*(l_+~U4x9k(JlpL;fvYc}
z<=xOFq}v>{InHRQ+4YJ9A#Nz6Zf^|Df^9Mk_1@*N%_IyOYsmXA_rtK?hP_@8+E>_y
zfX)8cr;nw8)`%UsQhe4(>~%$-CE`<0OO4T0EaPgl!6eHE2%uI<z<5@anXbj?s0wK9
zTnIc<EPr2?*y=UeQ}hImRD%tpS+Grpq2?thU?NN>B$?SWA;?jBU-3WZE1cqBuNwrk
z4SgQK_6#xX!yvTZ;@GKTOOb?SrmSC3DjoV}N-!9Nkd^pDcS37_kNyts`mHFV4NUgo
z*f$~QFs@B!Pi=1)KQqA&e5sPtlvW7lN@~FUihmgn5EdA8H?<;A9`#_19XmF*S&Q7Z
zn~Y(DdbF3IwFtuK8EXdAJh7a=NCcW@nyn$w)#5APBH>o&Lr{-FP;DW8n%O5L3XSwx
z*J1+n2Um%TJSECkjCsL9I111A5c>Z@UzQK&*e~LDw7c5?AlQNbtUL`{XSofs8{~QW
zGJoZVft<aq^q#<i&{fp#H-@jld@ykU10bK_Oz?Ox4MZ?0pMvjzt3aYNI0B?F4g~Ll
zpSYXCm}NM~dmaOFq}PCp!M8w8tT^fkHg80*g`^qBNkkw#Ydi$Vi}5lJwCW+Lu6$C`
z(r$!?j)re#`)d$tD+EOsX){aOP9Y9#6MxI<r*BUf_L~w7{|;NFVy2w}GyE(Bd!l;~
zGtW^^!DQ!2$SRj@l@wUL*}oBjy>wypLTn=P)|#>dJQws{J{5ii&IKt*=GhD?ZU(!7
zO~EV>sayPcIH=cye3#ZB-`E3%538mv&y(N~@D-4P-(T=re9lL~uHda8?^zp^x_@Au
zU?%t=_&pm4YEK+_y^8%3@ZE_C_6B_4JT#pEA$<r9d`DDtlBmjuC6xASoHh<ZX@}o-
z5a<{Pk$%^GaV<zAj4K}#7b>9)1W$n+@G7xw_-uPNg!w*Z!Dskg3G;le_{@dyw||p%
zq5hyGvkQMkm?mujIiPL9zTm#l4}YXk*?$AbNZgx(O{E7~nEwOEftetW@hv@V=6KQ?
z{1v3|ldrSCBq&G<^$)Rag7@@Bw*|=Oxdo&p(XjgT=@Z)&$r+q^2DJ1cm|qGE`KFPE
z)8|UG>ROoKPo&(mC14GK77s*sH-MrLm3ke0*J7tNwhN)z58}L?I^T6~27hfAm|^C?
z#%M4H``<&jcVjGG#qr-D+CCYt0`o52A!wem1kVl=>%9ZGeVhD!RkQ*-oJcf*9LPQ3
z8(=D5Lrq~?)m`to{oV#I0o#DQ@E0J>?WP9!QH<<M4Y~&8pmTp2_!3A{4J#!`^Q0xn
zcczx{e41evXA-Z;i3xY4pMRg%Spm|lCiWp|ihF<)KtD*(mAn9c2=YF>4xfkp_%4(~
zT~nMlD*bE-b}qVk{>R23KMiHXfcP$jR>5B}qBS_EJs>#jLI5gytvFUOwD?$@QjBAt
zN*Mk#U|fb<u<urw?JO~@+7MhR2qb!zL?fHTN?VQqtGj+h!clMGm49IgYE6qqEO;6?
zyPSd6WRL?xp$r3yz+~`c>3_1p2>3^kK5!vOQ%t|a`}_-R2z;takk@(*^i231@Gl_m
zPf&mtffGRvHqWDW^EtgY^MG;E*P;bre87pu36~5`*2h7*0-^xqM5WatP6wxgNH;Ye
z1L<mXAX5up)oQfC8Gk!&+M!^!6jB=T-2$PFgr*I}Se}O?Z$sPeLBKOXN3$E(t(3ww
zMY8dmg|cz&ry%C!x0|J+Y_de{>v4^H#W7qzSZic<iy1A4@b}{Q8~PRa`bw2x0{sWS
z&}cNIqN^#?RH75uP{I2Yu!FlP+rd=6m_nl!Xox&cFdpCpA%9B2=Rr@Xgbh-A=~MZT
zd`p@`wkKbcelZcr$34>G(CQH!AzB7cs01y^zd=1H0G}~~8(Oe=SCj|xF3uP!cE&Ue
z+%eFY<@g-~D|;1ASq*{4F0Liw$MG^mx0A&VgOL@|sfz+J#7PVVtHp@!5+_^&Q~Nf~
zdmXIABkscWcYlf<xK3=})#5~+LvS?~ljQF>R)k4#I_`Uwl+|Q_2zgxEF#<GO-*5w<
z-=QB(2H%Y)+w(hAcUHg-6g0Cj_oF8jgQR3|fN3hf138hX#d@F*5ImOw8W9Hh-pTkD
z^a8sqPzNHe#zxzn3XPlqo(EHW9DL|$5^;7&*!ma)zJCTn_&PoZ#h~9?Edx)lkh2C<
zg9!W^=Zx1ktjCSUNH{tenm!HJK`>>F71RGH0=26#i7?xZop_?&Fv}xwuc?wA7$@yp
z1wkRL7=aRSDd;^F1xw$S2)?8jSg{{xH?`nELCy2Pdv$a->wzXV2V~{#MsOE+py0&t
zQYC6^s(-YOZJx%)`@4dT7>MLp|J6X7kq)2OLn;?o7~}!aPWUf-9nz7d5X#+>;d@O!
zS)o7}x2EwA7j;#V=HDrYA@?<m&X`1uXsJy|w#||7(I=rDIj^2Q7A6-98-t{#I0J+?
ztYyLPm}hChdX*~r@uS_%IF187f5<e4{SO8Vcz@`p2?k#Dr>W8yY8G6YW}>P7QQ-<!
znHwN;nhqCAAzd-H%3(vF!hj=>GcQJ;a<t!sz-gjXI8`9#{{e90ZbrzQW!Q<MN^FCE
zhk;iulu;^`p(qGXmqgds(Bu*A!P@ZNg_q_K>p-t)aG;<m*AXYc*~gM8gQJEt_a}ub
z*njluPvPHQfdAV9ZpQWm4D@%<p39*%cn#1rP7+HElB}8l2t#*(?16ux_AE@2k8$U6
z?Q@kpD<3TVSe)qd*vGS|YUIx=VI5{k>p%qvPm@GfgJ2FcXnyEVJ+np0bKiYGk>%h{
zce4)IpPGl<y+LwGlGlMNk=dX(A?a^vYJZ;sSv1iP^>cxlHzI6GRfuNrctoQxZR&F=
z3;zSbP6g&=mA2lTpSo6ThQ;4bfe4`vf=6b)2j6`oB5U|?wF!b08PvC<nD(m(wx+`L
zyV_{Nua#GtAf`ZF7F-md$)n%&2AZWt1~>$@=p=Vjn@^hIL<`}8!eK4^o_&xdL4R+8
zP>8H5c|MIJ!^+$YkZH#+!Jh?83AIKprEb78jzV5~G?*(bgExs)y#^Zd<g2C2_U3GO
zNG>j#T6O34Igaeu8v*5@=~#U*nR?=WJu!*y5#@gn6Q>t)-H~{#{_wE~K&-!s>FXnH
z(hU%vEnS9ZF1kG@YmpkBwWu)Adw&b_T$UdRgyFjCL!1mUmn2xjrFCcs6i#FGz%+-s
zE58Uy48&;iSs6mkueF%<>7NwP2?OCYf*B9)YaB0kybGUdzq`I>JEVZ<!>LMNQC&Dp
z_*qkoIYkq%8(uWA5Wfm67`AER;Kbt|(dV(8!igp9hwY~&<gg5ui-TO<!G90`F@6QX
zo-=tz{@FPjA2zPp{0yI^6I?)F$p{!Af`8DE|JA*bPz6uiOyBCI9ZU^qe)$H8X%4F~
ztO}(9HIIe+|LlW2KM|}?-vM3+7J!M`%OVDAwk%S3Iq#ta16<as6X`9a)PaeC<AZ*#
z&7p<^)1{Wko#%9f_WUWs41c+U52P8eqb34DaQLQaoSjoS!0u5w!!YGG?|4GLIp}je
zURwt;*#3R)H<QO>I2h2lH`V{D!kNWOf{Q9v>m{k8$Szq}wu+zHY?Zb_1qzAtJ*^Zo
zJ;LGvixs>A2bKX7%`np(?z5d{nEg_L=A7C`KiUwvPMo|TLG#YSJAbQIT)Ir0I5h9n
zUX}q_Pd-#&zJ52z%2^`o)QCNp<6bP^29x+8eBEROF3T_!(<M|qMFQq2Fq6Z=%JyoM
z(mBwsSlWlpob^-gr+{M3aiDD|jw42OIeh(;+tJ40qz)WY&JZIq1Ezif?zt1fTa5cp
znp?IkzT%Q50q5+N$A2ToH5SUMJqkoz>lK^ofPU6XdnojwpjR8F>1-^`;kk^`8=`mZ
zRA7{R7s#>rC+KMhaRo@hA4(hva^fb^i!18D4GOC5Js4mH7oCt|TqxCTZa}Dkz)8uL
zNbO)|nHgKoUHasukRVM_N(}ojZ?Kf6OYZW#ZV)P0CF%i5>VJudqOQU1k!w1eFdh?6
z9JgRD+Run}k<-$<Zj$QA<5C&f4MOK)tP8q{&p}UP_>z}_o~F<$FrWM(L18WeS-+kH
zdO;e;7V$#d*B=TnreKPf$ZcRfxPlFu1I4s1fm!YV4dLM2C8qL2$kTU3Iq6;a#J3o>
zk->utC8ZGF2!Fg;yZ~>R(mD6ax5aUUi|k$=xdh}gmWCrv2i)s2u#;E_qLgv@s0rnL
zqhiN3_L9tjT_xbVLehO95QfMnxkoIDA1CIQ58=`xUzUE7pc!OAobSZ}XPR>`m7o0q
z)2aJFuDp1l<)Gg^6rej{-pq<tA|D3nQtH4JtSI=?n12vB9EJp;t%&UGt9RK5fPf=?
znPH!0{uP4sd@3xsTrt1XE%VS;cV*?)mE8=bHAf2{LZ0wur(3v65yyuW-@1OmHD3Mq
zsA|q`jR6_m<)}awW{J^VqACEw%kj$`ZDwnMwt`V<RAZWBujJ?X8?QZ8nzO%PV8#^|
ze$q*D0e>B@T@M^AE)9A<ot3FWsj;+7H2;ZA`MtI)Sfv>G(QFZ{3~hnETpLgK0r=X$
zJLRhwg}PAk!2Il+=fO9|8fuZKt;&$+-s*BQ^47ZjD(q@6AhE@CmVFo5;}yH*gdkjp
zyOOh3{16bmJct(eYYq>wc7Op?vSxapsvHVXuz%NrjCM)-R9c5rpn0ruH#Ooh%8v<G
zu+i$JVmtSVtzLvwxLN=j{qEd4_g;M**k$XiN29&f>dQAf-TJWjibG(m)dl2nET*zH
zyAVWC{?TK`FIc?UfNAfRWwr2fPT6B4Xmiv@xaTa)nx}n+<t<NPJ{jNRWN5fE6UVDS
z1b<?aAH#JMHFgQxHQh;>yxPJd2N$ak1z7H+$>(^HG_T%rU@{oscpsb5YNV=o{ov4o
z9rub;Iqs#3Ibud>uS;QL2Z*vB?~``)|L}Ms5Ur})+U2eh%YI0rttUuXi{mh~wd;$C
zft8YJI4(nm1ufWt(MR}Nv3Rag7~W+gDt{g;;i?<qYfn1d-^!~LNl|#$BB|MXn^aeB
z$Sr!L+we_~yyZ=nI;e)l0}C#2yy#a;Irhu_eMPkUgT%Co;0J#7#s*+Y!j&DGV1j`S
z&E<~{S7SXGMsK7zCqOs>dXO|LSTD&Q+Oqe??xA0tjedVbo_m{w{PzY8Up>u0+kYqd
zoo+6ZH2-~4)n+tq)jwp`rd#mcSrVz-ijDy>&1(=5$4yqLQ`LQZ$t%YU-#YDfWy{BL
zO@+VKzW_#fg|vWTcy#@#=i8c+<`B5F@J~@Fq=q;EBo=^P^i3!AXOOun7x@`?@N0(q
zL4GB|>k?c9{}~82ih(gyZJW|5P=6dgF_(>LJ9sr78~zi|ZqjNRg9fA>TPN}}l~I0u
z*3g~eGw+4aZbroY03x5x2*BcNnyYIzw;Z$MMMSU=tf+9NuXa7Upz@nO>#BEtf#B=`
z_g-3%Q|YgD2LLX+9PR_AIL5jaCN4;)S_n@DXBxi^VzHqiG8d&krN%x3dVga=>%&?y
zziMEifS=dUs(6tJT>&HH<l@GUg1Uk&jWAD{fsx`8U3EZwwT=~NWu`qZ%A^l=O;XG-
z{kdIEHX~W0t<_S-wHdPJ%oaWSLMRM~FnGq{(D0qMa`>%L9OY8;a(>xYFCxOSPYrcW
z{#--@w^)TKG$OytP0SPdt$&aPgpTK+Ts-PviJ!jkshH-ZtY)Nu7lJj!#2|@<epaeH
z6VLIZPvu&0JCK^n`*YQarA2;l_LHEFV8^{3Et4&4Z;_~dme|ozgIn|{JSB~_b&(T8
z*^%cvj)kdnW{F|HB(}X9K9Wmpk7JZ;?r49$yxHYed9LGFnrl{U;(vn2>pF;hzrMDz
z-+5??r$($l@3hPMBdzK1n-;wu?G^0!f+;2iqy>sV?2i2G@xA6}kDn)wp7^yNubUV&
zw#8U*v7a4ij+t`oE6w3kaRJ<03~!8y<w9PY=9iy)Qd3!u<-0PE<S|ZqeoxE@`em>o
z@YxdYkr+iMg3n6JvwyFCbU)s4elDa(J>_2l5P28)dP^|$0S3K=?yBiLBED#z)L5-C
zmrW_RzY|N9OVB?J8aY}|6aHO}ZQlU%%P%At7-e98B@EPE;;&wD>H3*NDxB~W)v&(Q
z^2;&@$x;5SDEhEUMQuol+@eVr;1T$#Dj#K4e#ww{6zyT)OMjKTC#zSi1l6%NNr>0K
zn*c_(skEOfIMh@Ybg0?<T!%R&Cqm+9Gz}r~85lV?G!Yx?M~e~<N&)@BM8kp|9Xvv!
z*1sSi_d_uS0V?Nn2(S&dJ3vd9!!^>!e1x_hqI}~p;#>lJ2fp<=nX|S+&hOd}=d^^|
zfxqSV#Ogxaa(_G8cE+yjK9Kuy91G|C$}c5`Z<@q($4jH0$=^HVP}gDqt6-=C26qj?
z`K=b1C<wsW2>aIy!BE`KK_IhXwkJUwN5S`U>7_v0?S5T$v^g1?nv3%S@Y#!TUN$s;
zIvu0-LJkD$$YQkh#4jAAGe=6wSZC#|uZP^S>D?F|<9}QoNYUrcFFc*)#AY-AL%q&#
zsP}<Pv#nGI{o*&<iRGIC;ne;~h2tQUH_Fk*g>66;qAkx|B$vT%6HJqGwxI2oaltBQ
zm)PM;F&T<xmo3enRs7Lxw0~)sa^?K&3H8#0;T!Ku)YhW>vh#k3wa))47-|V)fhHhQ
zmLdMYeSZ+nSd4A}k?d}m<RuWudC*RSBMvyw;%~6u8SUx1P19ZubB(Cc=%NMdIQa;8
z7=Ucb{ccL!ccO18QyRGH#q&Gfpfxh5Xv+OKCtmc>0aeMb`L{96*ar-?ct8GE1*SR*
z{_-OD$853H3W#x?Smr+vG`XLCDzzI@dlMapVt)d-b!A=ib#N0K(VdTf8CQ(+-jINw
zDS-|$hOd8si}Cf=ZIgj3t;(;+trs*kqdpAvVS`JnsZp{wAnEA=*;`emzZT>lSt;`>
z96^-mAlQmLElyx0giTYM0m1%Tc5S~M$4jMc>z44@6sA`piX*3RGOIS@pq=h2Q!=<j
z$Ys@}l5?7UYZG9o_Zs<sP&9_19gr#~OU!^@oJytz6=H^h;<JuIqTqvRX7M~_@gW(x
zTPHC{x*Wn~na^Excg^zx<w)LZ#Y5iHZOv!|BL5G(RmdC&y@n0|0000<MNUMnLSTYz
C6)^Mw

delta 5884
zcmV<Y76a*yE}kxsR)4ceL_t(|UhP~5d{kAw{-1kiCXJHN6cJQJ#R4l9iV|#yxU1;$
zr1(==_1VFO*a1PXJw;RyWdXamu&AKR8p<jXP!|DNihv*`h?D@Kq|VH}XTR^<xyfWm
z0zwvj@8$FNG54O^&;R`EIZ;V9K#%U)K*UKAW$nZ6ZpmAzB!A<ydZOJViRyf`?KLOX
z;D|x#moANM{sPoZ3E<zT+0HLHM=bRKwvH05zZ2z-6-PA^%eomNN1Lp6O2RMV_)q5i
z8XOU*=nEIcHV*<xfec%zF3`+Y5a1SEK2Ka30wG>)j%)3JZ==11DAmcd5!xLoPIQ7;
z_JwE<;@bH|+JF5HN4&vNgKCE=9DPY_^T0@vz-<uBqhK>gD<49g2O*s$R^Vs|6iqlu
zyX&CAN8{G1-c^9B*W=&SqNEe9wQ<gTiMaQnZJ9Y<gKEctO>tm%vP4tU#d4ye(ng7G
z^^P3@^d1OztyubO5sQK?677t|fis|;oxM{iaJ>v#et!~9Nj7aR+FbW~DcSL%BthJQ
z>uOM~P<qr^vCRbZyGzOFzqUiSKZ3nh5Zd?HhJda1*r$)BfL4nWxmf~sPwX|vIrAi-
z$4iN7F1ES@Z7|6)9|6=-38^<kTd78jt}cMqPJzHP#17OGM^BSoIiqo;7_31xK<S~U
z#WoXQxqr!$aok%FWG}O?`JekeE^)DU5(Kmr=RA$=aiW|$5ZYBZcD6W@BVl<<ew?{S
z8n?}mq@*MWSxYc^5VZEcalVVE{vcY_hsiz)`xXQp#=Y;wHnshK4KgPca+uNz!CXlR
zcqC#58%**xjUrGU`$2W=*fF+QhASFuP!D%%*?&lq?9U;LILYge#de2E1e#`9=@94&
z3FL2<aNVmRsFxwA1`t2Z>}ZKXBLj9n41o6Fa?z33L<jOPF4zf8@P5zX{A0~+`EsuF
z0e-Ldb}L8bUkcB`k00^v1bJOmro0YF_fgmE2`mU*McMv=uoC<`7~g>*kneCIcsiH@
zB7c~aMc_Zc<sfl9*d3%W4h3I;3%yNY%<_AX&ujs*r&oh>z|TMqtWxYJ*sShJwbD}5
zsS*(g&%PG|<jr^+7h3h46c>(>l$8F^(Cgt_***<It&5<jhcUCH<8H)(tzz5l%;O2=
zOqXc*I&AF`E9ESh;Wr@I-+2cy@?8BIOn>&Pl5FR%-&#n4RXF<l%#L1zA4J|pQ?`Rw
zg8s)>gp0u`AO*=ho2l7@;7Q=Y;C&FOTj~3-Q||%!E$JY?*aw9Vt7a_E7_bZYAxOdh
zQt)1U&zHdF;KLxFSr(LfV4dJC@LBL@HV}5RW(aU&nA$2YShsQdPzdumQFb3R)qg^V
zuYiz#fV4goUG$s;Q!a-V4}(yk2`UYrMIqIJV7X0gq_A@#bZ8}fYCM$vGuQz>wLab(
zk+MSQ<n9tzZGm|{6VJU7*S5__3*^KoiF|W;m?N_rh<lh0V`Tj;SQ)6T9GnyYweJm(
zTEy%9p;#4p|7jpQnihuc=O&QP=6`VxUD7|l5y(`p5aa-*D+_}D@q;BX6I==o18)U+
zAEH!UKw6J;K_2@Ybine0?R!B+M`$U8YBhwQkZ-CK++vDEi~7L?FD%KooIuF#0s&;=
zbT5Ds1^=i&!MSU&laB3;(ClY%T`um^3T=Eav|V6^nFFiq!9QUCXGG9XK!5lj;rL~U
zw%gz}Vcz8w3?^PO5AP2X>-U?-H<w2Xu)zS1CXfSZ7x*byk*{IrGp#zs?0M(S0B-;(
zSl;wsAO*gm5`G;c&!q<439>`E|4(odNK*|fB}nt6Hpp+LmhpO;VHRiN@3|Soz&G#D
z`z!`&R^!hhX^LBd13_P?bblr9fnR}q4)4SF;d%TP%Avd|&hC}k8G@aH(|rHqpp(bL
z3ZX*+eV|p)Qbx3jo!SzD!!87%qy5CS^Pt5i<B~iaTjYe*v35xP36J2pTcE-9pshFZ
zrUqI=Akm8?8rdLr$^ryfr<hM9T>Tk7`4()InwEHEPRwVZH3DSEP=6?wgE?R#__6dq
z$AJ;>c91@BHb_%U?dNl*f|Y@9MeXCgsJXrgp9~HK`Fw%`>;XOxva@;JlOW&I|1uxw
zCvz`a0LBL#XdG~f;9wmE(iITdAO|XoJ46TY6%gsB!OI|BjR|DR5GaD#b>WO%FYVAU
zLmDZK1RjFWdP38>qJJ-G24_Iqh9KY>XrkHmYnRH#)j6_$)ofY6W)Ud%<{y5Nf_)=&
z)VT-u7zT6e`N1+nvs0{SKGLAQIR2^m1b)8OyD@-f;TIZ>hKlHE3N@9W$!YCv?g!>_
zjlE6T23F*YDKuJv%E;pc;{gs3Vh{KZ=nIvg38ePYr}8EFm47smY)`x={bD>4kNc#>
zq17YUL$nOOPzhR+EYNfcz;{gJh7oM`P5Ghh-f2C>NqZd~*8&=|0Kd1u%HD=cRzRS!
zn;VG)aeN<q;|OuWU}Uj0J3)i!;shoq6)P3pA#Qj#OzjL@_X${tSKNX7=ZX`$Tb#fh
z;zr&^aCH|3$$y(TmV-gi0nfe7*;kSVN+JQ8tySCr=*Qc6o8`c7qsgYZBIv7F0XtOC
z%*Nc08B`3C62T6psoVr|AW@4=M;{`1Edw+n4D!1Zf%vC1u&W1}B9N!C(S~P3BL{-r
zV2V$L4?RaB?sf^=-=f1;LkKHN$Dk<sy%o~8LxJ3Tet$722gAERS@$Czbc=+e7eLcr
z$9+!1v+fcr_>$NVt_owcD+FE8K3jFivtF@NLw)T=b(27eC$Jm*2K3*Gf~9YZ2S2i{
zw`tDf=%yANDojuk1E1B@+uRQ{v3~$rdFv1E01p)$7=EfmjjbrHW1FwBrRRHsjVR=G
ztp6IIO@F1rC$^NrnKnB4d}t^9m$Me>$Ttwm6OtB~CT}d(AY#me<ES3ZwWI`dr4Djm
zrH;oSYJg`^n~-c<J>jFzL_2a`GkR<cE*3UANl9KB2ya-%?CY3k8NvFMD*Evgz0Fdb
z3i|$#X%5dn95CRapC%Z1(Vte7#!$21(hTEG^?wnCCs=K*gUo3<JZK$8$8V83U0*|o
zBagFs<D7i7KY+mLc`0y<K#c!G;QF16kU7e*Q;H&S6#WhZuQF)0M+%dpAUs_HJzqnU
zM=-^pKZ^&o*bf5Nf_~B9P(f2}B2Iv#k0nzEN0n*ruL@7Fsl|)n-`<1&+YJ7M?Sbg%
zO@Gjy8=*D$4A4?%imf|Iy^;_JLwAU5iGQNb`xqq5J@bvvh3?DzZ@v{b`VRK-F1lD8
zcPXsH`;s0i0O4s8=xGqlfdS1A{i$!ZD0%LC-zTyF%=I?Qf#*~6230{$N%B5$B{C88
z2PFM1P3>zSizeo!ek-u1b`M)pluR>tI)9>3m^Qsc_J!X?uv36>S!Ap?$ET?kTVV+{
z)F48r!{9L)U&43yM`R5jt~WrCNa@=)70dZZRP+^?eoq@M__h2(3&ap8&+Hx{nmqbV
zzoS`dWPn3Zi_Y{mjrpV*j<*m#C>$0LhEzcoGyDNUA+oCE`!x0piyz}arXA;jzkdl>
z^^?<)OX>UZj=hkVo(NtcwUZtYyLdG;W(<yP#b+Q`(H}zqvt;|;2q=e5*FG16=`=j=
zGz_94qJz(3;Iu-n+Y_(V9zGTUi2Y}=0_RHoR0YDbCD2QISluBIhMO8N(FSBLNw9`n
zRb`68IS_p?&0+4!6(R9~7)?GaLx0HmjTW;${i^~xp%6|ZnDOC##_96d7x1ah7vj3B
zKxkETs#yDe0CCk}GTE(#XIz0D&hFrc|EP;0*h?{pkaT+y6yBv7TtHh%3n>u6e*(Qw
z-%mT38qoam+W0hw)fiTVDgrf+h5K1mkk`k9_36jJyTNQQUVB-@V9l0A3V%Q6txhn&
zWvx1%{zOVSSm-#u=n`WN4P2NmJx>N*+7#MzA5xNYpgkw!_d2msP62V%VRHE_ns^2@
z-b2m58lA7!AYh8~g(`~o+9C~-G$@J8ex@nY9%?P`z>a0WL^I4Zhx=@&8TN||iJ&>B
z_R)`4M$Qu_PDs$av+&NU6@P2T@dJnEo!ZMXU<Mni2{chpfUKOw^C8e5#HFw@Kgiz-
z1$h>}ZUh3Cf1)eKN^;&v30Y^sOtMr*?ZQp1i^L7Imqzf(jnE$nR6}OBQ%}zBQqi&f
z*eTNy6&VLpKNHW)h4AL!`7cNVI}3r^NLYyVhT^`A;BB@n-=#qeh=1}_JtrbbHh$Jm
zduWQgf_`n7rt?5)4zFdDUK#y+R|H1MgF((S{{{55gWyB~1z(*w2IRnvryp08gBKJO
zJG;=q3@(~MW3G|n`u8K$fL6u5r<M|NRiW%j)gZbofl9u_Su@n#b9?)3>Yll+Ro}TI
zRlm7!s(a_QC_Q&u3V(9U;GJU@U3u;$?>!T2JK?2ms_)DxvaRG~Gl0DHQp=<`GD;22
zdRRS~HC+wLYAl6Nlo-)QO`7-hx-8azeU0Hq{t5Iog;s(2<bM+EB+ja^e*FUI2WjkE
z#0#aqzB<6#Ia9oNZUy&)C)gw_6Q=eCnB~UM5O&UBv2+kZ9)Amgb0UB<IP)O9WzBA$
zA&FE2v+Cm*>?7bxyI5NXY|lbFi`F+HzI~VNvd2jk*ShoRuX^3wH>+R0&o`c#{_U1i
zdNn#>=U}nzNAM24@D4}8T6BByyPi+sdd{f)9tQ4eNrjd3DPk4?IBqHf75Yhn2Urm2
zcd^5n<{VDt=YN-gE@U{!nHL|l9Q3=@0lE|B&8%p}^M62?!Se6~D;oYZmdvv|C?w9Y
zigO3dWp|jz&tNKBqJ2Wn=&l2DMs=+PicegF93}=O8#ZA?K&YJeWZ}R^`%U$AZDg2r
zvVJ_f{o`NU=;xdUMQ(C038*u0z5fm}XH#niK^`pmn}0-cz^9JAuTm^(&>Z_EKi}Wb
z55}iMhXV#?oMA!sV8{t{zG)&58Jej<-=`y>s8)@oWup0yXNBvvJ;7?t$d6`=U}b1C
zQuj3`eYf1L(B|JkgHC`pK^yeL5ONz3pB5uR8UACSpe2oE1b#VEx8q(Eu))PG7B>~g
zsWte^8-GkBcgI=N<<>TznH%Jnq_n`fWkqhdfq6M+c=y#ZK@aY-$;?Rl^g5gH1E@sJ
z^p~ns2l%XhAfsK9KGm3w3PAH%;%yrE^QcD@o?xTJ-@v8~7e{}9poJ*}sM^5<!<+_a
zPP}x8B2bET(iSkMbtRCO46@yy8lzyTAsp4j?SDAN*?)rp9X@(w@~X}gVR{<}Ra6h`
zIC0@osd*;2(MkoE{M_7uby$bzuKaFG^SAPfYx^a^DR?*NWE@p#n9l%-gEDcpg+&fd
zR#yjD?xcTXe~}!tW#3#L3~)TR<XMf1DqjC_7{O+K=oV&9Dwr%*l=gZLgm=DZdz6Sh
z5`SmZMz=5Fc?Qaun~q{T&q*|WpzN!~VmqTV3ivyS^_kfA%ewz1Q(+)WM{i*y`G$$h
zE;2RUKCNeOXp)wD>*N)goE$bNa*}&+<Y045mx)hto{{${(hr`WCB?9AF{)v+xNOJM
zSS?$#|LFSBFNYq%U+z~G(f$(9wEAfkL4W^#t+!bY4Ei{;LlaCeu%Wp;;_x)qhf=L!
za_Q$nAdXrrHD(~4><>*E3yz02EyOw9!P}ANJ|fA%VX1*)GqV!3A{?z;y_Y-l+J`1c
zQn25edv0RzWAOcs<7C<o9VDb8^5li@6icLV%h9!WF{Lorw6`Ib<G|!g3k(8Ql7Bdm
zmPsurK#c17`JB?@Vm2Q+=9uSCecyI4X%4}!<oYBEsWLL9BDns@kG|=o27t^}Imyq$
z0ar6T1#*>$?|(Tse*=PzqGOaUYvbSIxb9v_-8fHzy9bC>_!xX{K3*Fp67O!|1C{D@
zUeoVQkQ32CQ%O3n>GHQPJ#p#%5`VCUHA&yqmu<x0xm*DPJKg?cIi~i`1!AQXwLNB)
zUlNorb7J%PS|{TluPQ||@3^9deqLV<`FuDY%M}V`(C}$E4#ZcO=&LK52u}n9t-C-L
z8!97nQTkJA>;%vc#^{n*OXjKu77Dn$hN~C-ppdSB5%Q5(YrG%I3wBRr27d%O4o-|y
zbX*dOPPeX={O13VlDhXwA^+&gq7U{=Qp_+lO50t!l(Tiibuz!tgD}sk8-$Ra5{QHv
z*W!W$4{3p-$SrL?<4TRC5d5E?@BG$%^^*6Rh<4oKuJZB9_Bo>54-3O7UNEPmsTwxt
z8$64_(c|V<#mqgy6&GG0%zt2sOJDd_OmoT}S~cQBvWgfVB(c!XN|kTo*?+WBv{=jx
zsHuEDXPsDD<btzb1?2>rIU~AHHm`X|qRvI)M0-Jdw<D+QAhyYK2S`#{H}vHDqMS*H
zZg(OT;uPDcVkcCZQuK#5;@iqnC!p(z3rmj|IiWr+>Ta2Wfqe(^)_<Oew7Xw%(gGvc
zh#Qdqnlk8Eaig=K51cXKR2ktfeHjanjleA~>TC#&b)%BqJ4nr-Ic5w{Rhq-M;sm%q
z8GazfmkW7snqOKWYAVaIbS2Cqd5nXe>xmgb{}rqZe7E>##7EKb;JecDRCONRkAIxY
zg-oySw_w~y_8$YSC4VV-J_K9KoNDO4D1qp!QevlLEL)QAY!X}N-#Tl+SL6S6dFvB1
zw#eGPHy1$Y_hTS1Rp}4GrD1>REz|Ftz9hH#;)S;jm@DDvt+?+K7~gex->_>(&mH&j
zily6|vy)!Yk6p&q{i2?lK`r2Xse}J!>%o^9L93@{P-_@@FMq<hoUSv-oK(nX@`G3j
z+RL^|;F<Y@10&mtw4a3$YAOpl)NH0*%qck#;+N4>hWK}2<XqW6JkWWxD0B-x%z}x^
z1$%wc(Gs<%LO`CjXbto1E<w;#AKQ)LTNj89)5m;`ww4dfyz})AO;+01oSHoeCiZQa
zyrw{|Zr%>pAb+a1b0xs_#QGXMavR!mWB2u5$Xgu8!Z}y@9S~~x44PU-*CX}7%Q#I|
zg9Ir3DvKzU!M#d!0A|Nuxo@>HGd(_BJrQR61%wN|;CuN8k=fF4=O?ngej8}&6}T=0
zpFIcH9S02^i@|^=@;V6Cl{siT4Zm=Z?qu1$k9Ag#`hO~+#(Z@$wA?Rbbk%*&t7tv$
z|9dDsoKboe$gmpd;-sJoS`EbxjDv9em46fvLV1NKS#e?;&>PYAsy9h47kEuDP1@az
zw)08_tKA*qg!^DH<X`|m?x_@1Y4oU`oW?x0r5=10=RM0o4V%V#EQ6?@alAUqb^oWJ
z^cb%HK7R;A_N7TMgmgpQg-#8LRy$#mIWf=;!cp{<fD0{Nh5h5vo@&|*odq!0@R!I@
zJ&pZ40v-k+6;_7S)3e{hdHe&U$q@HrdQfN2w>~?Y>y7<LbC`a#GpEdIPyv*F<>3EU
z1=`Y0l-NDsACD79FNPS`B4U0QVU)M@Q!_nsr+-5QyJ7%%69An0(=GxX2hm-Ce;JpD
z>pqoGkSRfhL53RsX$u^oiRItF;Cg{?M_{6*3w|-Ea1TeC>0wtUuBfj;3`)NaSNKb?
zdv8cmQ$w=1sK~4q<R4jS>oy!gl;|SZii{UGgfvEIYSSRttim1J9>wuJsSVO=!)H^N
zeszVYQmDIUD#V-PAxQu4R($M*V0-JwyYO#vYETK39(4%+JD_+ZIUy->>xmT#id)FE
zpg^qTBnj9}kSGMgu4eK4kTol5#EfHbANXf!0)hS{wd8Ll{VuC4@2i1<$iD%MAM~fs
Snnd*g0000<MNUMnLSTYz=sJ1;


From 3926d457fad222d50e397167e8f7cc3979136bf2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 19:10:46 +0200
Subject: [PATCH 0949/2300] tune fpm config files

---
 src/deb/vesta/postinst | 74 +++++++++++++++++++++++++++++++++---------
 1 file changed, 58 insertions(+), 16 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 6b5f3969..072b845b 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -13,19 +13,51 @@ if [ ! -e "/usr/local/vesta/data/users/admin" ]; then
     exit
 fi
 
-# Run triggers
-if [ -x "/root/vesta-patch.sh" ]; then
-    /root/vesta-patch.sh
+if [ ! -d "/usr/local/vesta/data/upgrades" ]; then
+    mkdir -p /usr/local/vesta/data/upgrades
 fi
 
-# sudoers fix
-if [ -e "/etc/sudoers.d/admin" ]; then
-    sed -i "s/admin.*ALL=(ALL).*/# sudo is limited to vesta scripts/" \
-        /etc/sudoers.d/admin
+if [ ! -f "/usr/local/vesta/data/upgrades/tune-fpm-config-files-v1" ]; then
+    touch /usr/local/vesta/data/upgrades/tune-fpm-config-files-v1
+    
+    OLDVAL='pm.max_children = 16'
+    NEWVAL='pm.max_children = 8'
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    
+    OLDVAL='request_terminate_timeout = 30s'
+    NEWVAL='request_terminate_timeout = 90s'
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    
+    OLDVAL='php_admin_value\[max_execution_time\] = 20'
+    NEWVAL='php_admin_value\[max_execution_time\] = 30'
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    
+    # restart all php-fpm services
+    systemctl --full --type service --all | grep "php...-fpm" | awk '{print $1}' | xargs systemctl restart
 fi
 
-check_apt=$(grep -c 'vesta.hostingpanel.dev' /etc/apt/sources.list.d/vesta.list)
-if [ "$check_apt" -eq 1 ]; then
+if [ ! -f "/usr/local/vesta/data/upgrades/allow-backup-anytime" ]; then
+    touch /usr/local/vesta/data/upgrades/allow-backup-anytime
+    check_grep=$(grep -c 'ALLOW_BACKUP_ANYTIME' /usr/local/vesta/conf/vesta.conf)
+    if [ "$check_grep" -eq 0 ]; then
+        echo "ALLOW_BACKUP_ANYTIME='yes'" >> /usr/local/vesta/conf/vesta.conf
+    fi
+fi
+
+if [ ! -f "/usr/local/vesta/data/upgrades/fix-sudoers" ]; then
+    touch /usr/local/vesta/data/upgrades/fix-sudoers
+    # sudoers fix
+    if [ -e "/etc/sudoers.d/admin" ]; then
+        sed -i "s/admin.*ALL=(ALL).*/# sudo is limited to vesta scripts/" \
+            /etc/sudoers.d/admin
+    fi
+fi
+
+check_grep=$(grep -c 'vesta.hostingpanel.dev' /etc/apt/sources.list.d/vesta.list)
+if [ "$check_grep" -eq 1 ]; then
     wget -O - http://apt.myvestacp.com/deb_signing.key | sudo apt-key add -
     codename="$(cat /etc/os-release |grep VERSION= |cut -f 2 -d \(|cut -f 1 -d \))"
     echo "deb http://apt.myvestacp.com/$codename/ $codename vesta" > /etc/apt/sources.list.d/vesta.list
@@ -40,14 +72,24 @@ if [ "$check_cron" -eq 0 ]; then
     crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
 fi
 
+if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket" ]; then
+    touch /usr/local/vesta/data/upgrades/change-clamav-socket
+    check_grep=$(grep -c '/var/lib/clamav/clamd.sock' /etc/clamav/clamd.conf)
+    if [ "$check_grep" -eq 0 ]; then
+        touch /var/lib/clamav/clamd.sock
+        chown clamav:clamav /var/lib/clamav/clamd.sock
+        sed -i "s#/var/run/clamav/clamd.ctl#/var/lib/clamav/clamd.sock#g" /etc/clamav/clamd.conf
+        sed -i "s#/var/run/clamav/clamd.ctl#/var/lib/clamav/clamd.sock#g" /etc/exim4/exim4.conf.template
+        systemctl restart clamav-daemon
+        systemctl restart clamav-freshclam
+        systemctl restart exim4
+    fi
+fi
 
-touch /var/lib/clamav/clamd.sock
-chown clamav:clamav /var/lib/clamav/clamd.sock
-sed -i "s#/var/run/clamav/clamd.ctl#/var/lib/clamav/clamd.sock#g" /etc/clamav/clamd.conf
-sed -i "s#/var/run/clamav/clamd.ctl#/var/lib/clamav/clamd.sock#g" /etc/exim4/exim4.conf.template
-systemctl restart clamav-daemon
-systemctl restart clamav-freshclam
-systemctl restart exim4
+# Run custom triggers
+if [ -x "/root/vesta-patch.sh" ]; then
+    /root/vesta-patch.sh
+fi
 
 version=$(curl -s http://c.myvestacp.com/latest.txt?updated)
 version=${version:6}

From 482032b672b00a807ff60edb2467de37e53611a2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 19:13:34 +0200
Subject: [PATCH 0950/2300] folder for upgrade notations

---
 install/vst-install-debian.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 7ac6a3fb..7f4e692b 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1584,6 +1584,11 @@ fi
 echo "==="
 echo "UPDATE_HOSTNAME_SSL='yes'" >> $VESTA/conf/vesta.conf
 
+# folder for upgrade notations
+if [ ! -d "/usr/local/vesta/data/upgrades" ]; then
+    mkdir -p /usr/local/vesta/data/upgrades
+fi
+
 # Secret URL
 secretquery=''
 if [ ! -z "$secret_url" ]; then

From 4b7bf3b9a21af9d608e43d133cd64f4cfe4a9d30 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 19:14:21 +0200
Subject: [PATCH 0951/2300] Version 15

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 9868c416..908986e0 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-14
+vesta-0.9.8-26-15

From 3da021bcde0d3f932b7ec5a88d552ca43a65938b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 19:19:55 +0200
Subject: [PATCH 0952/2300] Update postinst

---
 src/deb/vesta/postinst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 072b845b..364574b5 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -20,6 +20,9 @@ fi
 if [ ! -f "/usr/local/vesta/data/upgrades/tune-fpm-config-files-v1" ]; then
     touch /usr/local/vesta/data/upgrades/tune-fpm-config-files-v1
     
+    mkdir -p /root/etc-php-backup
+    cp -r /etc/php/ /root/etc-php-backup/
+
     OLDVAL='pm.max_children = 16'
     NEWVAL='pm.max_children = 8'
     find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"

From f08de3d41ce0128c572ad2ec6697c4fdd99b48d6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 21:12:16 +0200
Subject: [PATCH 0953/2300] safe adding ALLOW_BACKUP_ANYTIME to vesta.conf

---
 src/deb/vesta/postinst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 364574b5..91047359 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -46,6 +46,7 @@ if [ ! -f "/usr/local/vesta/data/upgrades/allow-backup-anytime" ]; then
     touch /usr/local/vesta/data/upgrades/allow-backup-anytime
     check_grep=$(grep -c 'ALLOW_BACKUP_ANYTIME' /usr/local/vesta/conf/vesta.conf)
     if [ "$check_grep" -eq 0 ]; then
+        echo "" >> /usr/local/vesta/conf/vesta.conf
         echo "ALLOW_BACKUP_ANYTIME='yes'" >> /usr/local/vesta/conf/vesta.conf
     fi
 fi

From eaa56345da9db3791f9b84167589b385d3eb8d38 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 22:51:46 +0200
Subject: [PATCH 0954/2300] limit req burst 7

---
 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
index b2c7d269..b77fc53b 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
@@ -5,7 +5,7 @@ server {
 
     location / {
         limit_conn addr 2;
-        limit_req zone=one burst=5;
+        limit_req zone=one burst=7;
         proxy_pass      http://%ip%:%web_port%;
     }
 

From e0c80f5f71cb40f266bd6a0cd19ca1ed789bf89e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 22:52:19 +0200
Subject: [PATCH 0955/2300] limit req burst 7

---
 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
index fd1f75d1..0a9d2b79 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
@@ -8,7 +8,7 @@ server {
 
     location / {
         limit_conn addr 2;
-        limit_req zone=one burst=5;
+        limit_req zone=one burst=7;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 

From 054c32c1566516f1fa25381a88e448b7c98c9e12 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 9 May 2020 22:53:10 +0200
Subject: [PATCH 0956/2300] limit req burst 7

---
 .../for-download/tools/rate-limit-tpl/force-https-firewall.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
index 37161c2d..c60ea789 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
@@ -8,7 +8,7 @@ server {
 
     location / {
         limit_conn addr 2;
-        limit_req zone=one burst=5;
+        limit_req zone=one burst=7;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 

From d8988540614d91d095928b8d451f1d18a28bdbb2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 10 May 2020 00:48:36 +0200
Subject: [PATCH 0957/2300] Update install_rate_limit_tpl.sh

---
 .../tools/rate-limit-tpl/install_rate_limit_tpl.sh        | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index 483b54d4..8af03f14 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -1,5 +1,13 @@
 #!/bin/bash
 
+# This installer will install hosting-firewall.tpl (nginx template) that will:
+# + allow 1 http request per second per IP address (sent to your server, more precisely to your PHP-FPM)
+# + allow 2 parallel http connections per IP address (sent to your PHP-FPM)
+# + make burst (queue) for 7 additional http requests in the same second, but it will processed each request each second (so this will handle natural peaks that CMS can generate to itself)
+# + if client fills allowed queue , additional requests will be denied
+#
+# Generally, this nginx template will prevent bad bots to run hundreds parallel http requests against your site, which will probably cause denial-of-service on your server
+
 grepc=$(grep -c 'limit_conn_zone' /etc/nginx/nginx.conf)
 if [ "$grepc" -eq 0 ]; then
     sed -i 's|server_names_hash_bucket_size   512;|server_names_hash_bucket_size   512;\n    limit_conn_zone $binary_remote_addr zone=addr:10m;\n    limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s;\n    limit_conn_log_level error;\n    limit_req_log_level error;\n    limit_conn_status 429;\n    limit_req_status 429;|g' /etc/nginx/nginx.conf

From 10998e52e754d2cd402791a6fa891099b0c224fa Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 10 May 2020 02:19:49 +0200
Subject: [PATCH 0958/2300] Update README.md

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index 3cb49b49..3548062c 100644
--- a/README.md
+++ b/README.md
@@ -13,6 +13,8 @@ Features
 
 + Support for Debian 10 (previous releases are also supported)
 
++ [nginx templates](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh) that can prevent denial-of-services
+
 + You can completely "lock" VestaCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
     + During installation you will be asked to choose a secret URL for your hosting panel
     + Literally no PHP scripts will be alive on your hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - attackers won't be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless they have the secret URL.

From 4b425d07968cf69656ab00fbc520b4c658bde09f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 10 May 2020 03:23:06 +0200
Subject: [PATCH 0959/2300] Added useful tools on Homepage

---
 README.md | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 3548062c..43366089 100644
--- a/README.md
+++ b/README.md
@@ -13,7 +13,7 @@ Features
 
 + Support for Debian 10 (previous releases are also supported)
 
-+ [nginx templates](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh) that can prevent denial-of-services
++ [nginx templates](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh) that can prevent denial-of-services on your server
 
 + You can completely "lock" VestaCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
     + During installation you will be asked to choose a secret URL for your hosting panel
@@ -43,6 +43,26 @@ Features
     + With your own APT infrastructure you can take security of Vesta-installer infrastructure in your own hands. You will have full control of your Vesta code (this way you can rest assured that there's 0% chance that you'll install malicious packages from repositories that may get hacked)
     + Binaries that you compile are 100% compatible with official VestaCP from vestacp.com, so you can run official VestaCP code with your own binaries (in case you don't want the source code from this fork)
 
+Useful tools
+==================================================
+
++ [Script that will convert Vesta to myVesta](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/convert-vesta-to-myvesta.sh)
+
++ [Wordpress installer in one second](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/create_wp_https)
+
++ [Script for importing cPanel backups](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/cpanel-import.sh)
+
++ [Cloning script that will copy the whole site from one domain to another (sub)domain](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/v-clone-website)
+
++ [Script that will migrate your site from http to https, replacing http to https URLs in database](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/v-migrate-site-to-https)
+
++ [Script that will install multiple PHP versions on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
+
++ [Scrit that will insatall nginx templates that can prevent denial-of-services on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh)
+
++ [Official Vesta Softaculous installer](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/install-softaculous.sh)
+
+
 How to install
 ----------------------------
 Download the installation script:

From 4ab1d9fd8e394ba3fb731d45fc5cc04f1a13a54d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 10 May 2020 03:26:20 +0200
Subject: [PATCH 0960/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 43366089..c6d0fb52 100644
--- a/README.md
+++ b/README.md
@@ -58,7 +58,7 @@ Useful tools
 
 + [Script that will install multiple PHP versions on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
 
-+ [Scrit that will insatall nginx templates that can prevent denial-of-services on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh)
++ [Script that will insatall nginx templates that can prevent denial-of-services on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh)
 
 + [Official Vesta Softaculous installer](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/install-softaculous.sh)
 

From 81f9a76e2b5d4187a82a86211f129c7081fd8fb0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 10 May 2020 03:29:07 +0200
Subject: [PATCH 0961/2300] link to official vestacp

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index c6d0fb52..e3bc66bd 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,7 @@
 MyVesta Control Panel
 ==================================================
 
-* MyVesta is a fork of VestaCP
+* MyVesta is a fork of [VestaCP](https://vestacp.com/)
 * Focused on security and stability
 * Therefore, only Debian is supported - keeping focus on only one eco-system - not wasting energy on compatibility with other Linux distributions
 * However, it will be always synchronized with official VestaCP commits
@@ -77,7 +77,7 @@ bash vst-install-debian.sh
 About VestaCP
 ==================================================
 
-* Vesta is an open source hosting control panel.
+* [Vesta](https://vestacp.com/) is an open source hosting control panel.
 * Vesta has a clean and focused interface without clutter.
 * Vesta has the latest of very innovative technologies.
 

From 8c1d3e4ccbd33022415068d1229a75b7ccd8aeff Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 10 May 2020 03:35:40 +0200
Subject: [PATCH 0962/2300] Update README.md

---
 README.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index e3bc66bd..99b577d9 100644
--- a/README.md
+++ b/README.md
@@ -11,11 +11,15 @@ MyVesta Control Panel
 Features
 ==================================================
 
-+ Support for Debian 10 (previous releases are also supported)
++ Support for Debian 10 (previous Debian releases are also supported)
 
 + [nginx templates](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh) that can prevent denial-of-services on your server
 
-+ You can completely "lock" VestaCP so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
++ [Support for multi-PHP versions](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
+
++ You can limit the maximum number of sent emails (per hour) [per mail account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L105-L106) and [per hosting account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L65-L66), preventimg hijacking of email accounts and PHP malware scripts to send spam.
+
++ You can completely "lock" myVesta so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
     + During installation you will be asked to choose a secret URL for your hosting panel
     + Literally no PHP scripts will be alive on your hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - attackers won't be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless they have the secret URL.
     + You can see for yourself how this mechanism was built by looking at:
@@ -29,14 +33,10 @@ Features
 + Apache is fully switched to mpm_event mode, while PHP is running in PHP-FPM mode, which is the most stable PHP-stack solution
     + OPCache is turned on by default
 
-+ Support for multi-PHP versions - https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh
-
 + Auto-generating LetsEncrypt SSL for server hostname (signed SSL for Vesta 8083 port, for dovecot (IMAP & POP3) and for Exim (SMTP))
 
 + You can change Vesta port during installation or later using one command line: **v-change-vesta-port [number]**
 
-+ You can limit the maximum number of sent emails (per hour) per mail account and per hosting account.
-
 + You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
     + You can even create your own APT repository in a minute
     + We are using latest nginx version for vesta-nginx package

From 45f173c09d99551ba3428c4748abffcc2bde6a5d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 10 May 2020 03:43:26 +0200
Subject: [PATCH 0963/2300] Update README.md

---
 README.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 99b577d9..06fa1d86 100644
--- a/README.md
+++ b/README.md
@@ -17,7 +17,9 @@ Features
 
 + [Support for multi-PHP versions](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
 
-+ You can limit the maximum number of sent emails (per hour) [per mail account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L105-L106) and [per hosting account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L65-L66), preventimg hijacking of email accounts and PHP malware scripts to send spam.
++ You can limit the maximum number of sent emails (per hour) [per mail account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L105-L106) and [per hosting account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L65-L66), preventimg hijacking of email accounts and preventing PHP malware scripts to send spam.
+
++ You can see [what PHP scripts are sending emails](https://github.com/myvesta/vesta/blob/master/install/debian/10/php/php7.3-dedi.patch#L50), when and to whom
 
 + You can completely "lock" myVesta so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
     + During installation you will be asked to choose a secret URL for your hosting panel
@@ -28,7 +30,7 @@ Features
     + If you didn't set the secret URL during installation, you can do it anytime. Just execute in shell:
     + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
 
-+ We disabled dangerous PHP functions in php.ini, so even if, for example, your customer's CMS gets compromised, hacker will not be able to execute shell scripts from within PHP.
++ We [disabled dangerous PHP functions](https://github.com/myvesta/vesta/blob/master/install/debian/10/php/php7.3-dedi.patch#L9) in php.ini, so even if, for example, your customer's CMS gets compromised, hacker will not be able to execute shell scripts from within PHP.
 
 + Apache is fully switched to mpm_event mode, while PHP is running in PHP-FPM mode, which is the most stable PHP-stack solution
     + OPCache is turned on by default

From 9525acdd7ff4774748de566aa5fb458da63692e7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 10 May 2020 03:49:05 +0200
Subject: [PATCH 0964/2300] Update README.md

---
 README.md | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/README.md b/README.md
index 06fa1d86..ac2c29db 100644
--- a/README.md
+++ b/README.md
@@ -1,19 +1,19 @@
-MyVesta Control Panel
+myVesta Control Panel
 ==================================================
 
-* MyVesta is a fork of [VestaCP](https://vestacp.com/)
+* myVesta is a fork of [VestaCP](https://vestacp.com/)
 * Focused on security and stability
 * Therefore, only Debian is supported - keeping focus on only one eco-system - not wasting energy on compatibility with other Linux distributions
 * However, it will be always synchronized with official VestaCP commits
-* VestaCP commercial plugins will be only available for purchase on official vestacp.com website - we will NOT take their earnings, since we are not making this fork for monetary reasons. Instead, we are doing this with open source in mind - to enhance security and to build new features, without being interlocked with official VestaCP release cycles, and without affecting or heavily diverting from the VestaCP's planned development milestones
-* With previous in mind, all features that are built for this fork (MyVesta), will be offered to official VestaCP, via pull requests
+* VestaCP commercial plugins will be only available for purchase on official [vestacp.com](https://vestacp.com/) website - we will NOT take their earnings, since we are not making this fork for monetary reasons. Instead, we are doing this with open source in mind - to enhance security and to build new features, without being interlocked with official VestaCP release cycles, and without affecting or heavily diverting from the VestaCP's planned development milestones
+* With previous in mind, all features that are built for this fork (myVesta), will be offered to official VestaCP, via pull requests
 
-Features
+Features of myVesta
 ==================================================
 
 + Support for Debian 10 (previous Debian releases are also supported)
 
-+ [nginx templates](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh) that can prevent denial-of-services on your server
++ [nginx templates](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh) that can prevent denial-of-service on your server
 
 + [Support for multi-PHP versions](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
 
@@ -52,7 +52,7 @@ Useful tools
 
 + [Wordpress installer in one second](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/create_wp_https)
 
-+ [Script for importing cPanel backups](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/cpanel-import.sh)
++ [Script for importing cPanel backups to Vesta](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/cpanel-import.sh)
 
 + [Cloning script that will copy the whole site from one domain to another (sub)domain](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/v-clone-website)
 
@@ -60,7 +60,7 @@ Useful tools
 
 + [Script that will install multiple PHP versions on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
 
-+ [Script that will insatall nginx templates that can prevent denial-of-services on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh)
++ [Script that will insatall nginx templates that can prevent denial-of-service on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh)
 
 + [Official Vesta Softaculous installer](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/install-softaculous.sh)
 

From 060dfee2bd584f3b1fb8d1a0fe81ade4a428c4d7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 10 May 2020 18:58:16 +0200
Subject: [PATCH 0965/2300] timeout 10 sec for apache2 status

---
 bin/v-list-sys-web-status | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bin/v-list-sys-web-status b/bin/v-list-sys-web-status
index aaa33e4c..a380deff 100755
--- a/bin/v-list-sys-web-status
+++ b/bin/v-list-sys-web-status
@@ -28,17 +28,17 @@ fi
 # Displaying proxy status
 if [ "$PROXY_SYSTEM" = 'nginx' ]; then
     echo "<h2>$PROXY_SYSTEM STATUS</h2>"| tr '[:lower:]' '[:upper:]'
-    curl -fsSL --max-time 3 http://localhost:8084/
+    curl -fsSL --max-time 10 http://localhost:8084/
     echo "<br><br><br>"
 fi
 
 # Displaying web server status
 echo "<h2>$WEB_SYSTEM STATUS</h2>"| tr '[:lower:]' '[:upper:]'
 if [ "$WEB_SYSTEM" != 'nginx' ]; then
-    curl -fsSL --max-time 3 http://localhost:8081/server-status/ |\
+    curl -fsSL --max-time 10 http://localhost:8081/server-status/ |\
         egrep -v "html|DOCTYPE|h1>|title|head"
 else
-    curl -fsSL --max-time 3 http://localhost:8084/
+    curl -fsSL --max-time 10 http://localhost:8084/
 fi
 
 

From 5987766e19ed49668b706b256927998a285faed6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 11 May 2020 20:12:59 +0200
Subject: [PATCH 0966/2300] nodelay 3 ratelimit tpl

---
 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
index b77fc53b..1441a6a9 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
@@ -5,7 +5,7 @@ server {
 
     location / {
         limit_conn addr 2;
-        limit_req zone=one burst=7;
+        limit_req zone=one burst=7 delay=3;
         proxy_pass      http://%ip%:%web_port%;
     }
 

From e39f05d16590798501a4fe1723839b7b1710469e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 11 May 2020 20:13:41 +0200
Subject: [PATCH 0967/2300] nodelay 3 ratelimit tpl

---
 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
index 0a9d2b79..a5d163e3 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
@@ -8,7 +8,7 @@ server {
 
     location / {
         limit_conn addr 2;
-        limit_req zone=one burst=7;
+        limit_req zone=one burst=7 delay=3;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 

From 4526333fc9819389b46e37b33a4a0023f21ba92b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 11 May 2020 20:15:17 +0200
Subject: [PATCH 0968/2300] nodelay 3 ratelimit tpl

---
 .../for-download/tools/rate-limit-tpl/force-https-firewall.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
index c60ea789..dbb239fb 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
@@ -8,7 +8,7 @@ server {
 
     location / {
         limit_conn addr 2;
-        limit_req zone=one burst=7;
+        limit_req zone=one burst=7 delay=3;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 

From f05ff062d89e0a4d649f6cf47996c475036af8ff Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 11 May 2020 20:21:12 +0200
Subject: [PATCH 0969/2300] rate limit new definition

---
 .../tools/rate-limit-tpl/install_rate_limit_tpl.sh          | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index 8af03f14..e58c405f 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -3,10 +3,10 @@
 # This installer will install hosting-firewall.tpl (nginx template) that will:
 # + allow 1 http request per second per IP address (sent to your server, more precisely to your PHP-FPM)
 # + allow 2 parallel http connections per IP address (sent to your PHP-FPM)
-# + make burst (queue) for 7 additional http requests in the same second, but it will processed each request each second (so this will handle natural peaks that CMS can generate to itself)
-# + if client fills allowed queue , additional requests will be denied
+# + make burst (queue) for 7 additional http requests in the same second, first 3 will be processed immediately, 4 others will processed each request each second (so this will handle natural peaks that CMS can generate to itself)
+# + if client fills allowed queue, additional requests will be denied
 #
-# Generally, this nginx template will prevent bad bots to run hundreds parallel http requests against your site, which will probably cause denial-of-service on your server
+# Generally, this nginx template will prevent bad bots to run hundreds parallel http requests against your site, which will probably cause denial-of-service on your server.
 
 grepc=$(grep -c 'limit_conn_zone' /etc/nginx/nginx.conf)
 if [ "$grepc" -eq 0 ]; then

From 4020770fdf7c9a02a508b7bd039c74963123ca98 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 12 May 2020 14:41:46 +0200
Subject: [PATCH 0970/2300] Update install_rate_limit_tpl.sh

---
 .../for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index e58c405f..5062158b 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -3,7 +3,7 @@
 # This installer will install hosting-firewall.tpl (nginx template) that will:
 # + allow 1 http request per second per IP address (sent to your server, more precisely to your PHP-FPM)
 # + allow 2 parallel http connections per IP address (sent to your PHP-FPM)
-# + make burst (queue) for 7 additional http requests in the same second, first 3 will be processed immediately, 4 others will processed each request each second (so this will handle natural peaks that CMS can generate to itself)
+# + allow burst for 7 additional http requests (they will enter queue), first 3 will be processed immediately, 4 others will processed each request each second (so this will handle natural peaks that CMS can generate to itself)
 # + if client fills allowed queue, additional requests will be denied
 #
 # Generally, this nginx template will prevent bad bots to run hundreds parallel http requests against your site, which will probably cause denial-of-service on your server.

From 1e89aae6a9919c5a2a9c89f59da75c1f3ae45a06 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 12 May 2020 19:20:37 +0200
Subject: [PATCH 0971/2300] typo fix

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index ac2c29db..f0c35131 100644
--- a/README.md
+++ b/README.md
@@ -17,13 +17,13 @@ Features of myVesta
 
 + [Support for multi-PHP versions](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
 
-+ You can limit the maximum number of sent emails (per hour) [per mail account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L105-L106) and [per hosting account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L65-L66), preventimg hijacking of email accounts and preventing PHP malware scripts to send spam.
++ You can limit the maximum number of sent emails (per hour) [per mail account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L105-L106) and [per hosting account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L65-L66), preventing hijacking of email accounts and preventing PHP malware scripts to send spam.
 
 + You can see [what PHP scripts are sending emails](https://github.com/myvesta/vesta/blob/master/install/debian/10/php/php7.3-dedi.patch#L50), when and to whom
 
 + You can completely "lock" myVesta so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
     + During installation you will be asked to choose a secret URL for your hosting panel
-    + Literally no PHP scripts will be alive on your hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - attackers won't be able to access it without knowing your secret URL. PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless they have the secret URL.
+    + Literally no PHP scripts will be alive on your hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - attackers won't be able to access it without knowing your secret URL - PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless they have the secret URL.
     + You can see for yourself how this mechanism was built by looking at:
       + https://github.com/myvesta/vesta/blob/master/src/deb/for-download/php/php.ini#L496
       + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php

From 9383736acce4334d824e03078e91f9d902c0f76a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 14 May 2020 14:29:32 +0200
Subject: [PATCH 0972/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index f0c35131..a3c2668d 100644
--- a/README.md
+++ b/README.md
@@ -21,7 +21,7 @@ Features of myVesta
 
 + You can see [what PHP scripts are sending emails](https://github.com/myvesta/vesta/blob/master/install/debian/10/php/php7.3-dedi.patch#L50), when and to whom
 
-+ You can completely "lock" myVesta so it can be accessed only via https://serverhost:8083/?MY-SECRET-URL
++ You can completely "lock" myVesta so it can be accessed only via **secret URL**, for example https://serverhost:8083/?MY-SECRET-URL
     + During installation you will be asked to choose a secret URL for your hosting panel
     + Literally no PHP scripts will be alive on your hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - attackers won't be able to access it without knowing your secret URL - PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless they have the secret URL.
     + You can see for yourself how this mechanism was built by looking at:

From 559368818b3e17cc9a1155c42314701298eda968 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 14 May 2020 16:53:57 +0200
Subject: [PATCH 0973/2300] NOTIFY_ADMIN_FULL_BACKUP

---
 install/vst-install-debian.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 7f4e692b..d6ea58dc 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1608,7 +1608,8 @@ if [ "$release" -eq 10 ]; then
     echo "=== Set max_length_of_MySQL_username=80"
 fi
 echo "MAX_DBUSER_LEN=80" >> $VESTA/conf/vesta.conf
-echo "ALLOW_BACKUP_ANYTIME='yes'" >> /usr/local/vesta/conf/vesta.conf
+echo "ALLOW_BACKUP_ANYTIME='yes'" >> $VESTA/conf/vesta.conf
+echo "NOTIFY_ADMIN_FULL_BACKUP='$email'" >> $VESTA/conf/vesta.conf
 echo "================================================================"
 
 # Removing old PHP sessions files

From f596022b80dbfa9747469a93c6c4703050fd83b5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 00:05:48 +0200
Subject: [PATCH 0974/2300] Allow quick restarting of nginx

It can occur if domain has many aliases, and acme-challenge should be added many times
---
 bin/v-restart-proxy | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index 5966ddd6..ca63c16d 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -80,7 +80,9 @@ else
 
   # Default behaviour
   # Restart system
-  service $PROXY_SYSTEM restart >/dev/null 2>&1
+  # service $PROXY_SYSTEM restart > /dev/null 2>&1
+  systemctl reset-failed $PROXY_SYSTEM
+  systemctl restart $PROXY_SYSTEM > /dev/null 2>&1
   if [ $? -ne 0 ]; then
       send_email_report
       check_result $E_RESTART "$PROXY_SYSTEM restart failed"

From bc3cdc89c081da82c1999fca68bf09657b9005b0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 00:11:20 +0200
Subject: [PATCH 0975/2300] version 0.9.8-26-16

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 908986e0..76272ba2 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-15
+vesta-0.9.8-26-16

From 516701cc26e9a7a28448fdcd2464431e7abfd7ca Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 13:57:15 +0200
Subject: [PATCH 0976/2300] mail_max_userip_connections = 50

---
 install/debian/10/dovecot/conf.d/20-imap.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/dovecot/conf.d/20-imap.conf b/install/debian/10/dovecot/conf.d/20-imap.conf
index 1a459f8e..4f6e058b 100644
--- a/install/debian/10/dovecot/conf.d/20-imap.conf
+++ b/install/debian/10/dovecot/conf.d/20-imap.conf
@@ -10,7 +10,7 @@ protocol imap {
 
   # Maximum number of IMAP connections allowed for a user from each IP address.
   # NOTE: The username is compared case-sensitively.
-  #mail_max_userip_connections = 10
+  mail_max_userip_connections = 50
 
   # Space separated list of plugins to load (default is global mail_plugins).
   #mail_plugins = $mail_plugins

From 6ffb2637af491f35139402b056d282858fdfddbe Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 13:58:02 +0200
Subject: [PATCH 0977/2300] mail_max_userip_connections = 50

---
 install/debian/10/dovecot/conf.d/20-pop3.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/dovecot/conf.d/20-pop3.conf b/install/debian/10/dovecot/conf.d/20-pop3.conf
index a3a43b88..8c376996 100644
--- a/install/debian/10/dovecot/conf.d/20-pop3.conf
+++ b/install/debian/10/dovecot/conf.d/20-pop3.conf
@@ -74,7 +74,7 @@ protocol pop3 {
 
   # Maximum number of POP3 connections allowed for a user from each IP address.
   # NOTE: The username is compared case-sensitively.
-  #mail_max_userip_connections = 10
+  mail_max_userip_connections = 50
 
   # Space separated list of plugins to load (default is global mail_plugins).
   #mail_plugins = $mail_plugins

From 3986d4ec15278bbd3a9f28b8f38b49e8a3294ccf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 19:31:22 +0200
Subject: [PATCH 0978/2300] clamav sock in installer

---
 install/vst-install-debian.sh | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d6ea58dc..e29e1d84 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1211,8 +1211,6 @@ if [ "$clamd" = 'yes' ]; then
     gpasswd -a clamav Debian-exim
     cp -f $vestacp/clamav/clamd.conf /etc/clamav/
     mkdir -p /var/lib/clamav
-    touch /var/lib/clamav/clamd.sock
-    chown clamav:clamav /var/lib/clamav/clamd.sock
     /usr/bin/freshclam
     update-rc.d clamav-daemon defaults
     if [ ! -d "/var/run/clamav" ]; then
@@ -1222,8 +1220,7 @@ if [ "$clamd" = 'yes' ]; then
     if [ -e "/lib/systemd/system/clamav-daemon.service" ]; then
         exec_pre1='ExecStartPre=-/bin/mkdir -p /var/run/clamav'
         exec_pre2='ExecStartPre=-/bin/chown -R clamav:clamav /var/run/clamav'
-        sed -i "s|\[Service\]/|[Service]\n$exec_pre1\n$exec_pre2|g" \
-            /lib/systemd/system/clamav-daemon.service
+        sed -i "s|\[Service\]/|[Service]\n$exec_pre1\n$exec_pre2|g" /lib/systemd/system/clamav-daemon.service
         systemctl daemon-reload
     fi
     service clamav-daemon start

From 52eeff1b6a818d4b3031788af7639e8830caa5af Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 19:44:34 +0200
Subject: [PATCH 0979/2300] fixed patch syntax for clamav sock

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index e29e1d84..3ef544f0 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1220,7 +1220,7 @@ if [ "$clamd" = 'yes' ]; then
     if [ -e "/lib/systemd/system/clamav-daemon.service" ]; then
         exec_pre1='ExecStartPre=-/bin/mkdir -p /var/run/clamav'
         exec_pre2='ExecStartPre=-/bin/chown -R clamav:clamav /var/run/clamav'
-        sed -i "s|\[Service\]/|[Service]\n$exec_pre1\n$exec_pre2|g" /lib/systemd/system/clamav-daemon.service
+        sed -i "s|\[Service\]|[Service]\n$exec_pre1\n$exec_pre2|g" /lib/systemd/system/clamav-daemon.service
         systemctl daemon-reload
     fi
     service clamav-daemon start

From 3be351091603da3a5710255d070104eca57d6923 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 19:50:59 +0200
Subject: [PATCH 0980/2300] clamav-daemon.service fix and clamav sock fix

---
 src/deb/vesta/postinst | 29 +++++++++++++++++++++--------
 1 file changed, 21 insertions(+), 8 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 91047359..e2f64c33 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -76,20 +76,33 @@ if [ "$check_cron" -eq 0 ]; then
     crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
 fi
 
-if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket" ]; then
-    touch /usr/local/vesta/data/upgrades/change-clamav-socket
-    check_grep=$(grep -c '/var/lib/clamav/clamd.sock' /etc/clamav/clamd.conf)
+# make sure clamav-daemon.service has mkdir fix
+if [ -f "/lib/systemd/system/clamav-daemon.service" ]; then
+    check_grep=$(grep -c 'mkdir' /lib/systemd/system/clamav-daemon.service)
     if [ "$check_grep" -eq 0 ]; then
-        touch /var/lib/clamav/clamd.sock
-        chown clamav:clamav /var/lib/clamav/clamd.sock
-        sed -i "s#/var/run/clamav/clamd.ctl#/var/lib/clamav/clamd.sock#g" /etc/clamav/clamd.conf
-        sed -i "s#/var/run/clamav/clamd.ctl#/var/lib/clamav/clamd.sock#g" /etc/exim4/exim4.conf.template
+        echo "=== patching clamav-daemon.service"
+        exec_pre1='ExecStartPre=-/bin/mkdir -p /var/run/clamav'
+        exec_pre2='ExecStartPre=-/bin/chown -R clamav:clamav /var/run/clamav'
+        sed -i "s|\[Service\]|[Service]\n$exec_pre1\n$exec_pre2|g" /lib/systemd/system/clamav-daemon.service
+        systemctl daemon-reload
         systemctl restart clamav-daemon
         systemctl restart clamav-freshclam
-        systemctl restart exim4
     fi
 fi
 
+# reverting to default clamd sock
+if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v2" ]; then
+    touch /usr/local/vesta/data/upgrades/change-clamav-socket-v2
+    sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/clamav/clamd.conf
+    sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/exim4/exim4.conf.template
+    sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
+    sed -i "s#=/run/clamav/clamd.ctl#=/var/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
+    systemctl daemon-reload
+    systemctl restart clamav-daemon
+    systemctl restart clamav-freshclam
+    systemctl restart exim4
+fi
+
 # Run custom triggers
 if [ -x "/root/vesta-patch.sh" ]; then
     /root/vesta-patch.sh

From 6b457ee087c4a0b051e7d841c19998db1ca19cf3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 19:52:10 +0200
Subject: [PATCH 0981/2300] version 0.9.8-26-17

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 76272ba2..8f809dc6 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-16
+vesta-0.9.8-26-17

From d9b8330de89bf19da6f37597f5dbad8543c49b94 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 20:00:50 +0200
Subject: [PATCH 0982/2300] leave default clamav socket path

---
 src/deb/vesta/postinst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index e2f64c33..b04b2350 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -95,8 +95,8 @@ if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v2" ]; then
     touch /usr/local/vesta/data/upgrades/change-clamav-socket-v2
     sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/clamav/clamd.conf
     sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/exim4/exim4.conf.template
-    sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
-    sed -i "s#=/run/clamav/clamd.ctl#=/var/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
+    sed -i "s#/var/lib/clamav/clamd.sock#/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
+    # sed -i "s#=/run/clamav/clamd.ctl#=/var/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
     systemctl daemon-reload
     systemctl restart clamav-daemon
     systemctl restart clamav-freshclam

From 9f16db443162e17bc5069c96ee606907197ec139 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 20:04:06 +0200
Subject: [PATCH 0983/2300] check if clamav-daemon.socket exist

---
 src/deb/vesta/postinst | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index b04b2350..ab850303 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -95,8 +95,9 @@ if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v2" ]; then
     touch /usr/local/vesta/data/upgrades/change-clamav-socket-v2
     sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/clamav/clamd.conf
     sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/exim4/exim4.conf.template
-    sed -i "s#/var/lib/clamav/clamd.sock#/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
-    # sed -i "s#=/run/clamav/clamd.ctl#=/var/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
+    if [ -f "/lib/systemd/system/clamav-daemon.socket" ]; then
+        sed -i "s#/var/lib/clamav/clamd.sock#/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
+    fi
     systemctl daemon-reload
     systemctl restart clamav-daemon
     systemctl restart clamav-freshclam

From 53d6f2a1eafcd591635de9241647b2e8f713266b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 20:28:24 +0200
Subject: [PATCH 0984/2300] fixing NS parameters in v-add-dns-on-web-alias

---
 bin/v-add-dns-on-web-alias | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-dns-on-web-alias b/bin/v-add-dns-on-web-alias
index a6a7272c..705594f3 100755
--- a/bin/v-add-dns-on-web-alias
+++ b/bin/v-add-dns-on-web-alias
@@ -55,7 +55,7 @@ if [ "$domain_lvl" -eq 1 ] || [ "${#top_domain}" -le '6' ]; then
 fi
 
 # Adding top-level domain and then its sub
-$BIN/v-add-dns-domain $user $top_domain $ip '' '' '' '' '' $restart >> /dev/null
+$BIN/v-add-dns-domain $user $top_domain $ip '' '' '' '' '' '' '' '' $restart >> /dev/null
 
 # Checking top-level domain
 if [ ! -e "$USER_DATA/dns/$top_domain.conf" ]; then

From d4ffb91f098bf94f13f20dc2863825589d5eec84 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 20:33:23 +0200
Subject: [PATCH 0985/2300] version 0.9.8-26-18

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 8f809dc6..aa183727 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-17
+vesta-0.9.8-26-18

From 591369f9b48dcf55c05843c6b606ad6a8f65aacf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 20:46:45 +0200
Subject: [PATCH 0986/2300] checking if clamd.conf exists

---
 src/deb/vesta/postinst | 22 ++++++++++++++--------
 1 file changed, 14 insertions(+), 8 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index ab850303..28c44d9c 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -93,15 +93,21 @@ fi
 # reverting to default clamd sock
 if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v2" ]; then
     touch /usr/local/vesta/data/upgrades/change-clamav-socket-v2
-    sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/clamav/clamd.conf
-    sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/exim4/exim4.conf.template
-    if [ -f "/lib/systemd/system/clamav-daemon.socket" ]; then
-        sed -i "s#/var/lib/clamav/clamd.sock#/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
+    if [ -f "/etc/clamav/clamd.conf" ]; then
+        sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/clamav/clamd.conf
+        if [ -f "/etc/exim4/exim4.conf.template" ]; then
+            sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/exim4/exim4.conf.template
+        fi
+        if [ -f "/lib/systemd/system/clamav-daemon.socket" ]; then
+            sed -i "s#/var/lib/clamav/clamd.sock#/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
+        fi
+        systemctl daemon-reload
+        systemctl restart clamav-daemon
+        systemctl restart clamav-freshclam
+        if [ -f "/etc/exim4/exim4.conf.template" ]; then
+            systemctl restart exim4
+        fi
     fi
-    systemctl daemon-reload
-    systemctl restart clamav-daemon
-    systemctl restart clamav-freshclam
-    systemctl restart exim4
 fi
 
 # Run custom triggers

From ec879438527ef95a629927d55b3a8d5e6620852f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 21:59:26 +0200
Subject: [PATCH 0987/2300] Dont match subdomains while restoring domain

---
 bin/v-restore-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index a0ce7f2d..4816fde8 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -289,7 +289,7 @@ if [ "$web" != 'no' ] && [ ! -z "$WEB_SYSTEM" ]; then
     if [ -z "$web" ] || [ "$web" = '*' ]; then
         domains="$backup_domains"
     else
-        echo "$web" |tr ',' '\n' > $tmpdir/selected.txt
+        echo "$web" | tr ',' '\n' | sed -e "s/^/^/" > $tmpdir/selected.txt
         domains=$(echo "$backup_domains" |egrep -f $tmpdir/selected.txt)
     fi
 

From a3ba9f3c8481d131a977d5bd0305146d66225009 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 May 2020 22:00:44 +0200
Subject: [PATCH 0988/2300] version 0.9.8-26-19

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index aa183727..617d5954 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-18
+vesta-0.9.8-26-19

From c7859f100dd7990c340b95212413c4c8b1e91f2c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 21 May 2020 23:29:19 +0200
Subject: [PATCH 0989/2300] rate limit zone 1mb instead of 10mb

---
 .../for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index 5062158b..787bc94c 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -10,7 +10,7 @@
 
 grepc=$(grep -c 'limit_conn_zone' /etc/nginx/nginx.conf)
 if [ "$grepc" -eq 0 ]; then
-    sed -i 's|server_names_hash_bucket_size   512;|server_names_hash_bucket_size   512;\n    limit_conn_zone $binary_remote_addr zone=addr:10m;\n    limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s;\n    limit_conn_log_level error;\n    limit_req_log_level error;\n    limit_conn_status 429;\n    limit_req_status 429;|g' /etc/nginx/nginx.conf
+    sed -i 's|server_names_hash_bucket_size   512;|server_names_hash_bucket_size   512;\n    limit_conn_zone $binary_remote_addr zone=addr:1m;\n    limit_req_zone $binary_remote_addr zone=one:1m rate=1r/s;\n    limit_conn_log_level error;\n    limit_req_log_level error;\n    limit_conn_status 429;\n    limit_req_status 429;|g' /etc/nginx/nginx.conf
     echo "=== Added rate_limit to nginx.conf"
 fi
 

From e71af87d699988ccdc281b382f636250ab2f4f77 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 21 May 2020 23:33:31 +0200
Subject: [PATCH 0990/2300] second rate limit zone for 2 req/sec

---
 .../for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index 787bc94c..b626cb5a 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -10,7 +10,7 @@
 
 grepc=$(grep -c 'limit_conn_zone' /etc/nginx/nginx.conf)
 if [ "$grepc" -eq 0 ]; then
-    sed -i 's|server_names_hash_bucket_size   512;|server_names_hash_bucket_size   512;\n    limit_conn_zone $binary_remote_addr zone=addr:1m;\n    limit_req_zone $binary_remote_addr zone=one:1m rate=1r/s;\n    limit_conn_log_level error;\n    limit_req_log_level error;\n    limit_conn_status 429;\n    limit_req_status 429;|g' /etc/nginx/nginx.conf
+    sed -i 's|server_names_hash_bucket_size   512;|server_names_hash_bucket_size   512;\n    limit_conn_zone $binary_remote_addr zone=addr:1m;\n    limit_req_zone $binary_remote_addr zone=one:1m rate=1r/s;\n    limit_req_zone $binary_remote_addr zone=two:1m rate=2r/s;\n    limit_conn_log_level error;\n    limit_req_log_level error;\n    limit_conn_status 429;\n    limit_req_status 429;|g' /etc/nginx/nginx.conf
     echo "=== Added rate_limit to nginx.conf"
 fi
 

From 2540f7a16b8b64cc4fbb52349a2884dc6e625e4c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 21 May 2020 23:44:33 +0200
Subject: [PATCH 0991/2300] Delete hosting-firewall.sh

not necessary file
---
 .../tools/rate-limit-tpl/hosting-firewall.sh          | 11 -----------
 1 file changed, 11 deletions(-)
 delete mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.sh

diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.sh b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.sh
deleted file mode 100644
index eeed37ef..00000000
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.sh
+++ /dev/null
@@ -1,11 +0,0 @@
-#!/bin/bash
-# Changing public_html permission
-user="$1"
-domain="$2"
-ip="$3"
-home_dir="$4"
-docroot="$5"
-
-chmod 755 $docroot
-
-exit 0

From 9411e2f1df302631aa18422fa66bcb1886c4cc26 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 21 May 2020 23:48:01 +0200
Subject: [PATCH 0992/2300] nginx rate limit burst x2

---
 .../force-https-firewall-burst-2.stpl         | 41 +++++++++++++++++++
 .../force-https-firewall-burst-2.tpl          |  8 ++++
 .../hosting-firewall-burst-2.stpl             | 41 +++++++++++++++++++
 .../hosting-firewall-burst-2.tpl              | 38 +++++++++++++++++
 4 files changed, 128 insertions(+)
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.tpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl

diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
new file mode 100644
index 00000000..ab527372
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        limit_conn addr 3;
+        limit_req zone=one burst=14 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
new file mode 100644
index 00000000..24bf0c1f
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        limit_conn addr 3;
+        limit_req zone=one burst=14 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
new file mode 100644
index 00000000..3b382c15
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        limit_conn addr 3;
+        limit_req zone=one burst=14 delay=7;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %docroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+

From 6f78e9f1308ddd62b97a4ef62e66691856f6dc38 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 22 May 2020 00:02:01 +0200
Subject: [PATCH 0993/2300] burst x2 installer

---
 .../tools/rate-limit-tpl/install_rate_limit_tpl.sh         | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index b626cb5a..ac73de06 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -19,6 +19,11 @@ wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall.stpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall.stpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall.sh http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall.sh
-chmod a+x /usr/local/vesta/data/templates/web/nginx/hosting-firewall.sh
+
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst-2.tpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-burst-2.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst-2.stpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2.sh http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2.sh
 
 service nginx restart

From 761190755b32ce9d842c3d984d659877f85aa71b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 22 May 2020 00:03:27 +0200
Subject: [PATCH 0994/2300] nginx rate limit templates, burst x2, speed x2

---
 .../force-https-firewall-burst-2-speed-2.stpl | 41 +++++++++++++++++++
 .../force-https-firewall-burst-2-speed-2.tpl  |  8 ++++
 .../hosting-firewall-burst-2-speed-2.stpl     | 41 +++++++++++++++++++
 .../hosting-firewall-burst-2-speed-2.tpl      | 38 +++++++++++++++++
 4 files changed, 128 insertions(+)
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.tpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl

diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
new file mode 100644
index 00000000..6d4250ff
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        limit_conn addr 4;
+        limit_req zone=two burst=14 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
new file mode 100644
index 00000000..4318c814
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        limit_conn addr 4;
+        limit_req zone=two burst=14 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
new file mode 100644
index 00000000..d09c841b
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        limit_conn addr 4;
+        limit_req zone=two burst=14 delay=7;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %docroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+

From 5a87c64eaa566b58b28b62e4713cab1598326f8c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 22 May 2020 00:25:13 +0200
Subject: [PATCH 0995/2300] nginx rate limit burst x2 and speed x2 installer +
 fix

---
 .../rate-limit-tpl/install_rate_limit_tpl.sh  | 24 +++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index ac73de06..e97530f3 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -14,6 +14,24 @@ if [ "$grepc" -eq 0 ]; then
     echo "=== Added rate_limit to nginx.conf"
 fi
 
+grepc=$(grep -c 'zone=addr:10m' /etc/nginx/nginx.conf)
+if [ "$grepc" -eq 1 ]; then
+    sed -i 's|zone=addr:10m|zone=addr:1m|g' /etc/nginx/nginx.conf
+    echo "=== Decrease addr zone to 1mb to nginx.conf"
+fi
+
+grepc=$(grep -c 'zone=one:10m' /etc/nginx/nginx.conf)
+if [ "$grepc" -eq 1 ]; then
+    sed -i 's|zone=one:10m|zone=one:1m|g' /etc/nginx/nginx.conf
+    echo "=== Decrease one zone to 1mb to nginx.conf"
+fi
+
+grepc=$(grep -c 'zone=two' /etc/nginx/nginx.conf)
+if [ "$grepc" -eq 0 ]; then
+    sed -i 's|zone=one:1m rate=1r/s;|zone=one:1m rate=1r/s;\n    limit_req_zone $binary_remote_addr zone=two:1m rate=2r/s;|g' /etc/nginx/nginx.conf
+    echo "=== Added rate_limit for 2 req/sec to nginx.conf"
+fi
+
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall.tpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall.stpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall.stpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall.tpl
@@ -26,4 +44,10 @@ wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2.t
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2.sh http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2.sh
 
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst-2-speed-2.tpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst-2-speed-2.stpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2.sh http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.sh
+
 service nginx restart

From 9d84a2c57c1f3773d131312768c10bee3f5f6105 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 22 May 2020 00:31:41 +0200
Subject: [PATCH 0996/2300] Removing unnecessary .sh in installer for nginx
 rate limit tpl

---
 .../tools/rate-limit-tpl/install_rate_limit_tpl.sh             | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index e97530f3..7077620c 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -36,18 +36,15 @@ wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall.tpl h
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall.stpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall.stpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall.stpl
-wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall.sh http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall.sh
 
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst-2.tpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-burst-2.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst-2.stpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
-wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2.sh http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2.sh
 
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst-2-speed-2.tpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst-2-speed-2.stpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
-wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2.sh http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.sh
 
 service nginx restart

From 584f3e335325814f563bd8822041d33271d48c84 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 22 May 2020 15:50:15 +0200
Subject: [PATCH 0997/2300] nginx rate limit templates, burst x2, speed x2,
 conn x4

---
 ...https-firewall-burst-2-speed-2-conn-4.stpl | 41 +++++++++++++++++++
 ...-https-firewall-burst-2-speed-2-conn-4.tpl |  8 ++++
 ...sting-firewall-burst-2-speed-2-conn-4.stpl | 41 +++++++++++++++++++
 ...osting-firewall-burst-2-speed-2-conn-4.tpl | 38 +++++++++++++++++
 4 files changed, 128 insertions(+)
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.tpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl

diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
new file mode 100644
index 00000000..2597eb7f
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        limit_conn addr 8;
+        limit_req zone=two burst=14 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.tpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
new file mode 100644
index 00000000..87c34de1
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        limit_conn addr 8;
+        limit_req zone=two burst=14 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
new file mode 100644
index 00000000..cfcba2e8
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        limit_conn addr 8;
+        limit_req zone=two burst=14 delay=7;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %docroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+

From fc87362da888c5fb7961a0dc494c8e3f996e4340 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 22 May 2020 15:52:06 +0200
Subject: [PATCH 0998/2300] Update install_rate_limit_tpl.sh

---
 .../tools/rate-limit-tpl/install_rate_limit_tpl.sh           | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index 7077620c..f51c04dc 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -47,4 +47,9 @@ wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
 
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst-2-speed-2-conn-4.tpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst-2-speed-2-conn-4.stpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2-conn-4.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2-conn-4.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
+
 service nginx restart

From 684c96169fb0f2c9e5026692dfdab6f7b08fa894 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 23 May 2020 14:10:28 +0200
Subject: [PATCH 0999/2300] Recommending Debian10 in myVesta

---
 install/vst-install-debian.sh | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 3ef544f0..96636cf6 100644
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -32,6 +32,11 @@ if [ "$release" -eq 10 ]; then
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
         unrar-free vim-common net-tools unzip"
 elif [ "$release" -eq 9 ]; then
+    echo "==================================================="
+    echo "Important message:"
+    echo "myVesta is much more faster with Debian 10 ."
+    echo "Are you sure you want to continue with Debian 9 ?"
+    read -p "==================================================="
     software="nginx apache2 apache2-utils apache2-suexec-custom
         libapache2-mod-ruid2 libapache2-mod-fcgid libapache2-mod-php php
         php-common php-cgi php-mysql php-curl php-fpm php-pgsql awstats
@@ -44,6 +49,11 @@ elif [ "$release" -eq 9 ]; then
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
         unrar-free vim-common net-tools unzip"
 elif [ "$release" -eq 8 ]; then
+    echo "==================================================="
+    echo "Important message:"
+    echo "myVesta is much more faster with Debian 10 ."
+    echo "Are you sure you want to continue with Debian 8 ?"
+    read -p "==================================================="
     software="nginx apache2 apache2-utils apache2.2-common
         apache2-suexec-custom libapache2-mod-ruid2
         libapache2-mod-fcgid libapache2-mod-php5 php5 php5-common php5-cgi

From a7dc2ee2045d09e981a9ac2c19f1858c96fa8de2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 23 May 2020 14:12:25 +0200
Subject: [PATCH 1000/2300] Debian 10 is recommended

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index a3c2668d..a42b8fd2 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@ myVesta Control Panel
 Features of myVesta
 ==================================================
 
-+ Support for Debian 10 (previous Debian releases are also supported)
++ Support for Debian 10 (previous Debian releases are also supported, but Debian 10 is recommended)
 
 + [nginx templates](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh) that can prevent denial-of-service on your server
 

From 176bfe5d71edb24b1f5c61440e7ea3787f70a9ac Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 23 May 2020 14:22:33 +0200
Subject: [PATCH 1001/2300] Message in installer that only Debian is supported

---
 install/vst-install.sh | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

diff --git a/install/vst-install.sh b/install/vst-install.sh
index aa9ecbf6..b2dd163b 100755
--- a/install/vst-install.sh
+++ b/install/vst-install.sh
@@ -46,9 +46,25 @@ case $(head -n1 /etc/issue | cut -f 1 -d ' ') in
     *)          type="rhel" ;;
 esac
 
+if [ "$type" = "ubuntu" ]; then
+    echo "Sorry, Ubuntu is not supported."
+    echo "myVesta supports only Debian."
+    exit;
+fi
+if [ "$type" = "amazon" ]; then
+    echo "Sorry, Amazon linux cdistribution is not supported."
+    echo "myVesta supports only Debian."
+    exit;
+fi
+if [ "$type" = "rhel" ]; then
+    echo "Sorry, CentOS is not supported."
+    echo "myVesta supports only Debian."
+    exit;
+fi
+
 # Check wget
 if [ -e '/usr/bin/wget' ]; then
-    wget http://vestacp.com/pub/vst-install-$type.sh -O vst-install-$type.sh
+    wget http://c.myvestacp.com/vst-install-$type.sh -O vst-install-$type.sh
     if [ "$?" -eq '0' ]; then
         bash vst-install-$type.sh $*
         exit
@@ -60,7 +76,7 @@ fi
 
 # Check curl
 if [ -e '/usr/bin/curl' ]; then
-    curl -O http://vestacp.com/pub/vst-install-$type.sh
+    curl -O http://c.myvestacp.com/vst-install-$type.sh
     if [ "$?" -eq '0' ]; then
         bash vst-install-$type.sh $*
         exit

From 6fcc1dcdb84503f55126e2f3b334965950fd6d4b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 23 May 2020 14:23:48 +0200
Subject: [PATCH 1002/2300] Message in installer that only Debian is supported

---
 install/vst-install.sh | 11 +++--------
 1 file changed, 3 insertions(+), 8 deletions(-)

diff --git a/install/vst-install.sh b/install/vst-install.sh
index b2dd163b..9b3de74f 100755
--- a/install/vst-install.sh
+++ b/install/vst-install.sh
@@ -1,15 +1,10 @@
 #!/bin/bash
-# Vesta installation wrapper
-# http://vestacp.com
+# myVesta installation wrapper
+# http://myvestacp.com
 
 #
 # Currently Supported Operating Systems:
-#
-#   RHEL 5, 6, 7
-#   CentOS 5, 6, 7
-#   Debian 7, 8
-#   Ubuntu 12.04 - 18.04
-#   Amazon Linux 2017
+#   Debian 8, 9, 10
 #
 
 # Am I root?

From ced0330c45d978eb63fb54adee6c4cac1542f765 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 23 May 2020 14:25:25 +0200
Subject: [PATCH 1003/2300] Update vst-install-amazon.sh

---
 install/vst-install-amazon.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install/vst-install-amazon.sh b/install/vst-install-amazon.sh
index 2bae6418..00d9be8c 100644
--- a/install/vst-install-amazon.sh
+++ b/install/vst-install-amazon.sh
@@ -1,5 +1,9 @@
 #!/bin/bash
 
+echo "Sorry, Amazon linux distribution is not supported."
+echo "myVesta supports only Debian."
+exit;
+
 # Vesta Amazon installer v.05
 
 #----------------------------------------------------------#

From e2a491b3617d95215ff679ae687ca1e697f5b3e3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 23 May 2020 14:25:59 +0200
Subject: [PATCH 1004/2300] Update vst-install-rhel.sh

---
 install/vst-install-rhel.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
index 4ea5154c..6f691faa 100755
--- a/install/vst-install-rhel.sh
+++ b/install/vst-install-rhel.sh
@@ -1,5 +1,9 @@
 #!/bin/bash
 
+echo "Sorry, CentOS is not supported."
+echo "myVesta supports only Debian."
+exit;
+
 # Vesta RHEL/CentOS installer v.05
 
 #----------------------------------------------------------#

From e69cc7f513835003076eb94db934d29cf5ee5d4f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 23 May 2020 14:26:48 +0200
Subject: [PATCH 1005/2300] Update vst-install-ubuntu.sh

---
 install/vst-install-ubuntu.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
index 21f645bd..f3aa6549 100755
--- a/install/vst-install-ubuntu.sh
+++ b/install/vst-install-ubuntu.sh
@@ -1,5 +1,9 @@
 #!/bin/bash
 
+echo "Sorry, Ubuntu is not supported."
+echo "myVesta supports only Debian."
+exit;
+
 # Vesta Ubuntu installer v.05
 
 #----------------------------------------------------------#

From 149109698aeaef46c7c2902c530f90aa56263517 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 23 May 2020 21:51:59 +0200
Subject: [PATCH 1006/2300] typo fix

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index a42b8fd2..915c2348 100644
--- a/README.md
+++ b/README.md
@@ -60,7 +60,7 @@ Useful tools
 
 + [Script that will install multiple PHP versions on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
 
-+ [Script that will insatall nginx templates that can prevent denial-of-service on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh)
++ [Script that will install nginx templates that can prevent denial-of-service on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh)
 
 + [Official Vesta Softaculous installer](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/install-softaculous.sh)
 

From 9cb73b19df6bcdf272c822231ef1cea397823b43 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 24 May 2020 22:14:13 +0200
Subject: [PATCH 1007/2300] nginx caching tpl

---
 .../debian/10/templates/web/nginx/caching.sh  | 19 ++++++++
 .../10/templates/web/nginx/caching.stpl       | 43 +++++++++++++++++++
 .../debian/10/templates/web/nginx/caching.tpl | 41 ++++++++++++++++++
 .../debian/7/templates/web/nginx/caching.stpl |  0
 .../debian/7/templates/web/nginx/caching.tpl  |  0
 .../debian/7/templates/web/nginx/default.stpl |  0
 .../debian/7/templates/web/nginx/default.tpl  |  0
 .../debian/7/templates/web/nginx/hosting.stpl |  0
 .../debian/7/templates/web/nginx/hosting.tpl  |  0
 .../debian/7/templates/web/nginx/proxy_ip.tpl |  0
 .../debian/8/templates/web/nginx/caching.stpl |  0
 .../debian/8/templates/web/nginx/caching.tpl  |  0
 .../debian/8/templates/web/nginx/default.stpl |  0
 .../debian/8/templates/web/nginx/default.tpl  |  0
 .../debian/8/templates/web/nginx/hosting.stpl |  0
 .../debian/8/templates/web/nginx/hosting.tpl  |  0
 .../debian/8/templates/web/nginx/proxy_ip.tpl |  0
 .../debian/9/templates/web/nginx/caching.stpl |  0
 .../debian/9/templates/web/nginx/caching.tpl  |  0
 .../debian/9/templates/web/nginx/default.stpl |  0
 .../debian/9/templates/web/nginx/default.tpl  |  0
 .../debian/9/templates/web/nginx/hosting.stpl |  0
 .../debian/9/templates/web/nginx/hosting.tpl  |  0
 .../debian/9/templates/web/nginx/proxy_ip.tpl |  0
 install/vst-install-debian.sh                 |  0
 install/vst-install-rhel.sh                   |  0
 install/vst-install-ubuntu.sh                 |  0
 27 files changed, 103 insertions(+)
 create mode 100755 install/debian/10/templates/web/nginx/caching.sh
 create mode 100644 install/debian/10/templates/web/nginx/caching.stpl
 create mode 100644 install/debian/10/templates/web/nginx/caching.tpl
 mode change 100755 => 100644 install/debian/7/templates/web/nginx/caching.stpl
 mode change 100755 => 100644 install/debian/7/templates/web/nginx/caching.tpl
 mode change 100755 => 100644 install/debian/7/templates/web/nginx/default.stpl
 mode change 100755 => 100644 install/debian/7/templates/web/nginx/default.tpl
 mode change 100755 => 100644 install/debian/7/templates/web/nginx/hosting.stpl
 mode change 100755 => 100644 install/debian/7/templates/web/nginx/hosting.tpl
 mode change 100755 => 100644 install/debian/7/templates/web/nginx/proxy_ip.tpl
 mode change 100755 => 100644 install/debian/8/templates/web/nginx/caching.stpl
 mode change 100755 => 100644 install/debian/8/templates/web/nginx/caching.tpl
 mode change 100755 => 100644 install/debian/8/templates/web/nginx/default.stpl
 mode change 100755 => 100644 install/debian/8/templates/web/nginx/default.tpl
 mode change 100755 => 100644 install/debian/8/templates/web/nginx/hosting.stpl
 mode change 100755 => 100644 install/debian/8/templates/web/nginx/hosting.tpl
 mode change 100755 => 100644 install/debian/8/templates/web/nginx/proxy_ip.tpl
 mode change 100755 => 100644 install/debian/9/templates/web/nginx/caching.stpl
 mode change 100755 => 100644 install/debian/9/templates/web/nginx/caching.tpl
 mode change 100755 => 100644 install/debian/9/templates/web/nginx/default.stpl
 mode change 100755 => 100644 install/debian/9/templates/web/nginx/default.tpl
 mode change 100755 => 100644 install/debian/9/templates/web/nginx/hosting.stpl
 mode change 100755 => 100644 install/debian/9/templates/web/nginx/hosting.tpl
 mode change 100755 => 100644 install/debian/9/templates/web/nginx/proxy_ip.tpl
 mode change 100644 => 100755 install/vst-install-debian.sh
 mode change 100755 => 100644 install/vst-install-rhel.sh
 mode change 100755 => 100644 install/vst-install-ubuntu.sh

diff --git a/install/debian/10/templates/web/nginx/caching.sh b/install/debian/10/templates/web/nginx/caching.sh
new file mode 100755
index 00000000..09d8efe7
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/caching.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+user=$1
+domain=$2
+ip=$3
+home=$4
+docroot=$5
+
+str="proxy_cache_path /var/cache/nginx/$domain levels=2" 
+str="$str keys_zone=$domain:10m inactive=60m max_size=512m;" 
+conf='/etc/nginx/conf.d/01_caching_pool.conf'
+if [ -e "$conf" ]; then
+    if [ -z "$(grep "=${domain}:" $conf)" ]; then
+        echo "$str" >> $conf
+    fi
+else
+    echo "$str" >> $conf
+fi
+
diff --git a/install/debian/10/templates/web/nginx/caching.stpl b/install/debian/10/templates/web/nginx/caching.stpl
new file mode 100644
index 00000000..3c56004d
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/caching.stpl
@@ -0,0 +1,43 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/10/templates/web/nginx/caching.tpl b/install/debian/10/templates/web/nginx/caching.tpl
new file mode 100644
index 00000000..36761b65
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/caching.tpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/7/templates/web/nginx/caching.stpl b/install/debian/7/templates/web/nginx/caching.stpl
old mode 100755
new mode 100644
diff --git a/install/debian/7/templates/web/nginx/caching.tpl b/install/debian/7/templates/web/nginx/caching.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/7/templates/web/nginx/default.stpl b/install/debian/7/templates/web/nginx/default.stpl
old mode 100755
new mode 100644
diff --git a/install/debian/7/templates/web/nginx/default.tpl b/install/debian/7/templates/web/nginx/default.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/7/templates/web/nginx/hosting.stpl b/install/debian/7/templates/web/nginx/hosting.stpl
old mode 100755
new mode 100644
diff --git a/install/debian/7/templates/web/nginx/hosting.tpl b/install/debian/7/templates/web/nginx/hosting.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/7/templates/web/nginx/proxy_ip.tpl b/install/debian/7/templates/web/nginx/proxy_ip.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/8/templates/web/nginx/caching.stpl b/install/debian/8/templates/web/nginx/caching.stpl
old mode 100755
new mode 100644
diff --git a/install/debian/8/templates/web/nginx/caching.tpl b/install/debian/8/templates/web/nginx/caching.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/8/templates/web/nginx/default.stpl b/install/debian/8/templates/web/nginx/default.stpl
old mode 100755
new mode 100644
diff --git a/install/debian/8/templates/web/nginx/default.tpl b/install/debian/8/templates/web/nginx/default.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/8/templates/web/nginx/hosting.stpl b/install/debian/8/templates/web/nginx/hosting.stpl
old mode 100755
new mode 100644
diff --git a/install/debian/8/templates/web/nginx/hosting.tpl b/install/debian/8/templates/web/nginx/hosting.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/8/templates/web/nginx/proxy_ip.tpl b/install/debian/8/templates/web/nginx/proxy_ip.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/9/templates/web/nginx/caching.stpl b/install/debian/9/templates/web/nginx/caching.stpl
old mode 100755
new mode 100644
diff --git a/install/debian/9/templates/web/nginx/caching.tpl b/install/debian/9/templates/web/nginx/caching.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/9/templates/web/nginx/default.stpl b/install/debian/9/templates/web/nginx/default.stpl
old mode 100755
new mode 100644
diff --git a/install/debian/9/templates/web/nginx/default.tpl b/install/debian/9/templates/web/nginx/default.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/9/templates/web/nginx/hosting.stpl b/install/debian/9/templates/web/nginx/hosting.stpl
old mode 100755
new mode 100644
diff --git a/install/debian/9/templates/web/nginx/hosting.tpl b/install/debian/9/templates/web/nginx/hosting.tpl
old mode 100755
new mode 100644
diff --git a/install/debian/9/templates/web/nginx/proxy_ip.tpl b/install/debian/9/templates/web/nginx/proxy_ip.tpl
old mode 100755
new mode 100644
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
old mode 100644
new mode 100755
diff --git a/install/vst-install-rhel.sh b/install/vst-install-rhel.sh
old mode 100755
new mode 100644
diff --git a/install/vst-install-ubuntu.sh b/install/vst-install-ubuntu.sh
old mode 100755
new mode 100644

From e21471b030fda8a49e773d9389b9631553fefc74 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 24 May 2020 22:18:49 +0200
Subject: [PATCH 1008/2300] correcting code that take debian version

---
 bin/v-update-web-templates | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-update-web-templates b/bin/v-update-web-templates
index df882dd7..62daa141 100755
--- a/bin/v-update-web-templates
+++ b/bin/v-update-web-templates
@@ -22,7 +22,7 @@ source $VESTA/conf/vesta.conf
 #----------------------------------------------------------#
 
 # Defining config host
-chost='c.vestacp.com'
+chost='c.myvestacp.com'
 
 # Detcing OS
 case $(head -n1 /etc/issue |cut -f 1 -d ' ') in
@@ -43,7 +43,7 @@ if [ "$version" = 'ubuntu' ]; then
     release=$(lsb_release -r |awk '{print $2}')
 fi
 if [ "$version" = 'debian' ]; then
-    release=$(cat /etc/issue|grep -o [0-9]|head -n1)
+    release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
 fi
 
 # Defining download url

From d1f256173ed1bf2227d486b73c7a5771faa9b334 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 24 May 2020 22:27:57 +0200
Subject: [PATCH 1009/2300] timeout for getting latest release

---
 bin/v-list-sys-vesta-updates | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-list-sys-vesta-updates b/bin/v-list-sys-vesta-updates
index 69fcf9f8..acec8840 100755
--- a/bin/v-list-sys-vesta-updates
+++ b/bin/v-list-sys-vesta-updates
@@ -61,7 +61,7 @@ shell_list() {
 #----------------------------------------------------------#
 
 # Checking official latest version
-latest=$(wget -q -T 1 -t 1 http://c.myvestacp.com/latest.txt -O -)
+latest=$(wget -q -T 3 -t 1 http://c.myvestacp.com/latest.txt?check -O -)
 
 # Checking installed vesta version
 if [ -d "/etc/sysconfig" ]; then

From 4c6628822a936eff5fffc065c779b5d564804173 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 26 May 2020 19:09:05 +0200
Subject: [PATCH 1010/2300] confdef in v-update-sys-vesta

---
 bin/v-update-sys-vesta | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-sys-vesta b/bin/v-update-sys-vesta
index de2a07cb..d8df2aae 100755
--- a/bin/v-update-sys-vesta
+++ b/bin/v-update-sys-vesta
@@ -49,7 +49,7 @@ else
         -o Dir::Etc::sourceparts="-" -o APT::Get::List-Cleanup="0" -qq
 
     # Update vesta package
-    apt-get -y -qq -o Dpkg::Options::="--force-confold" install $package > /dev/null 2>&1
+    apt-get -y -qq -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -o Dpkg::Options::="--force-confmiss" install $package > /dev/null 2>&1
     check_result $? "$package update failed" $E_UPDATE
 fi
 

From cdcc726ac7187bc4d376ee1a422edeb4504dadc4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 29 May 2020 10:09:21 +0200
Subject: [PATCH 1011/2300] Update install_rate_limit_tpl.sh

---
 .../for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index f51c04dc..8710008c 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -7,6 +7,8 @@
 # + if client fills allowed queue, additional requests will be denied
 #
 # Generally, this nginx template will prevent bad bots to run hundreds parallel http requests against your site, which will probably cause denial-of-service on your server.
+#
+# There are also 3 additional templates, with larger limit values (for example: 2 req/sec, 14 allowed requests in queue, 7 burst, 8 parallel connections).
 
 grepc=$(grep -c 'limit_conn_zone' /etc/nginx/nginx.conf)
 if [ "$grepc" -eq 0 ]; then

From 2ef5c923253e933e4332f57f4e746a9753cee2fc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 31 May 2020 02:21:29 +0200
Subject: [PATCH 1012/2300] Making sure mpm_event will stay

---
 src/deb/vesta/postinst | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 28c44d9c..4304cc0b 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -110,6 +110,42 @@ if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v2" ]; then
     fi
 fi
 
+# Making sure mpm_event will stay
+if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event" ]; then
+    touch /usr/local/vesta/data/upgrades/keeping-mpm-event
+
+    check_grep=$(grep -c "WEB_SYSTEM='apache2'" /usr/local/vesta/conf/vesta.conf)
+    if [ "$check_grep" -eq 1 ]; then
+
+        switch_to_mpm_event=0
+
+        release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+        if [ "$release" -eq 10 ]; then
+            echo "=== Keeping mpm_event (1)"
+            switch_to_mpm_event=1
+        else
+            check_grep=$(/usr/local/vesta/bin/v-list-sys-web-status | grep -c "Server MPM: event")
+            if [ "$check_grep" -eq 1 ]; then
+                echo "=== Keeping mpm_event (2)"
+                switch_to_mpm_event=1
+            fi
+        fi
+        if [ "$switch_to_mpm_event" -eq 1 ]; then
+            apt-get -y remove libapache2-mod-php7.4
+            a2dismod ruid2
+            a2dismod suexec
+            a2dismod php5.6
+            a2dismod php7.0
+            a2dismod php7.1
+            a2dismod php7.2
+            a2dismod php7.4
+            a2dismod mpm_prefork
+            a2enmod mpm_event
+            service apache2 restart
+        fi
+    fi
+fi
+
 # Run custom triggers
 if [ -x "/root/vesta-patch.sh" ]; then
     /root/vesta-patch.sh

From 07eea77be5a0964f24f1b2eb4d50b9797e7dbda2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 31 May 2020 02:32:06 +0200
Subject: [PATCH 1013/2300] Calling /upd/keep_mpm_event.sh

---
 src/deb/vesta/postinst | 32 +-------------------------------
 1 file changed, 1 insertion(+), 31 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 4304cc0b..6253a8cc 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -113,37 +113,7 @@ fi
 # Making sure mpm_event will stay
 if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event" ]; then
     touch /usr/local/vesta/data/upgrades/keeping-mpm-event
-
-    check_grep=$(grep -c "WEB_SYSTEM='apache2'" /usr/local/vesta/conf/vesta.conf)
-    if [ "$check_grep" -eq 1 ]; then
-
-        switch_to_mpm_event=0
-
-        release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
-        if [ "$release" -eq 10 ]; then
-            echo "=== Keeping mpm_event (1)"
-            switch_to_mpm_event=1
-        else
-            check_grep=$(/usr/local/vesta/bin/v-list-sys-web-status | grep -c "Server MPM: event")
-            if [ "$check_grep" -eq 1 ]; then
-                echo "=== Keeping mpm_event (2)"
-                switch_to_mpm_event=1
-            fi
-        fi
-        if [ "$switch_to_mpm_event" -eq 1 ]; then
-            apt-get -y remove libapache2-mod-php7.4
-            a2dismod ruid2
-            a2dismod suexec
-            a2dismod php5.6
-            a2dismod php7.0
-            a2dismod php7.1
-            a2dismod php7.2
-            a2dismod php7.4
-            a2dismod mpm_prefork
-            a2enmod mpm_event
-            service apache2 restart
-        fi
-    fi
+    echo "bash /usr/local/vesta/upd/keep_mpm_event.sh" >> /usr/local/vesta/data/queue/restart.pipe
 fi
 
 # Run custom triggers

From 6c11c48d26e8b9e09ba3dc3cd491dd9ad0bb6c48 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 31 May 2020 02:42:59 +0200
Subject: [PATCH 1014/2300] keeping-mpm-event.log

---
 src/deb/vesta/postinst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 6253a8cc..0fe761d1 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -113,7 +113,7 @@ fi
 # Making sure mpm_event will stay
 if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event" ]; then
     touch /usr/local/vesta/data/upgrades/keeping-mpm-event
-    echo "bash /usr/local/vesta/upd/keep_mpm_event.sh" >> /usr/local/vesta/data/queue/restart.pipe
+    echo "bash /usr/local/vesta/upd/keep_mpm_event.sh >> /usr/local/vesta/data/upgrades/keeping-mpm-event.log 2>&1" >> /usr/local/vesta/data/queue/restart.pipe
 fi
 
 # Run custom triggers

From 123bae9e61924973288661880c03bdad64ed8bfd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 31 May 2020 02:56:15 +0200
Subject: [PATCH 1015/2300] calling v-add-cron-restart-job for
 keeping-mpm-event check script

---
 src/deb/vesta/postinst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 0fe761d1..1b0e4835 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -113,7 +113,9 @@ fi
 # Making sure mpm_event will stay
 if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event" ]; then
     touch /usr/local/vesta/data/upgrades/keeping-mpm-event
+    echo "=== scheduling keeping-mpm-event check script"
     echo "bash /usr/local/vesta/upd/keep_mpm_event.sh >> /usr/local/vesta/data/upgrades/keeping-mpm-event.log 2>&1" >> /usr/local/vesta/data/queue/restart.pipe
+    /usr/local/vesta/bin/v-add-cron-restart-job
 fi
 
 # Run custom triggers

From 208a992b7f5986998c5580c1e7ac2c5cacc48f3c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 31 May 2020 03:04:40 +0200
Subject: [PATCH 1016/2300] Create keep_mpm_event.sh

---
 upd/keep_mpm_event.sh | 42 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100644 upd/keep_mpm_event.sh

diff --git a/upd/keep_mpm_event.sh b/upd/keep_mpm_event.sh
new file mode 100644
index 00000000..da5d37f6
--- /dev/null
+++ b/upd/keep_mpm_event.sh
@@ -0,0 +1,42 @@
+#!/bin/bash
+
+check_grep=$(ps -A | grep -c "apt")
+if [ "$check_grep" -eq 0 ]; then
+    echo "apt is not running"
+    echo "cleaning restart.pipe"
+    sed -i "/keep_mpm_event/d" /usr/local/vesta/data/queue/restart.pipe
+    if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event-checked" ]; then
+        touch /usr/local/vesta/data/upgrades/keeping-mpm-event-checked
+        echo "mpm_event is not checked"
+        check_grep=$(grep -c "WEB_SYSTEM='apache2'" /usr/local/vesta/conf/vesta.conf)
+        if [ "$check_grep" -eq 1 ]; then
+            echo "we have apache"
+            switch_to_mpm_event=0
+            release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+            if [ "$release" -eq 10 ]; then
+                echo "ok, it's deb10"
+                switch_to_mpm_event=1
+            else
+                check_grep=$(/usr/local/vesta/bin/v-list-sys-web-status | grep -c "Server MPM: event")
+                if [ "$check_grep" -eq 1 ]; then
+                    echo "ok, it's already mpm_event"
+                    switch_to_mpm_event=1
+                fi
+            fi
+            if [ "$switch_to_mpm_event" -eq 1 ]; then
+                echo "ok, let's do it"
+                apt-get -y remove libapache2-mod-php7.4
+                a2dismod ruid2
+                a2dismod suexec
+                a2dismod php5.6
+                a2dismod php7.0
+                a2dismod php7.1
+                a2dismod php7.2
+                a2dismod php7.4
+                a2dismod mpm_prefork
+                a2enmod mpm_event
+                service apache2 restart
+            fi
+        fi
+    fi
+fi

From 9e59d4dff42bf792698bf5b195cc86113552576c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 31 May 2020 03:10:52 +0200
Subject: [PATCH 1017/2300] muting v-add-cron-restart-job in postinst

---
 src/deb/vesta/postinst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 1b0e4835..4f030213 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -115,7 +115,7 @@ if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event" ]; then
     touch /usr/local/vesta/data/upgrades/keeping-mpm-event
     echo "=== scheduling keeping-mpm-event check script"
     echo "bash /usr/local/vesta/upd/keep_mpm_event.sh >> /usr/local/vesta/data/upgrades/keeping-mpm-event.log 2>&1" >> /usr/local/vesta/data/queue/restart.pipe
-    /usr/local/vesta/bin/v-add-cron-restart-job
+    /usr/local/vesta/bin/v-add-cron-restart-job > /dev/null 2>&1
 fi
 
 # Run custom triggers

From e79aea271bb3f8ec7195b21ad3ba2cce2672dbfb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 31 May 2020 03:18:13 +0200
Subject: [PATCH 1018/2300] calling v-delete-cron-restart-job from
 keep_mpm_event.sh

---
 upd/keep_mpm_event.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/upd/keep_mpm_event.sh b/upd/keep_mpm_event.sh
index da5d37f6..1195dfa0 100644
--- a/upd/keep_mpm_event.sh
+++ b/upd/keep_mpm_event.sh
@@ -5,6 +5,7 @@ if [ "$check_grep" -eq 0 ]; then
     echo "apt is not running"
     echo "cleaning restart.pipe"
     sed -i "/keep_mpm_event/d" /usr/local/vesta/data/queue/restart.pipe
+    /usr/local/vesta/bin/v-delete-cron-restart-job
     if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event-checked" ]; then
         touch /usr/local/vesta/data/upgrades/keeping-mpm-event-checked
         echo "mpm_event is not checked"

From 23aa28d463a091367073222f9b53a63ab1f54ae4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 31 May 2020 04:09:46 +0200
Subject: [PATCH 1019/2300] apt-get -y remove libapache2-mod-php7.4

---
 src/deb/for-download/tools/multi-php-install.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 6316f3b8..ade0a464 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -202,6 +202,7 @@ if [ "$inst_74" -eq 1 ]; then
     apt -y install php7.4-mbstring php7.4-bcmath php7.4-cli php7.4-curl php7.4-fpm php7.4-gd php7.4-intl php7.4-mysql php7.4-soap php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached
     update-rc.d php7.4-fpm defaults
     a2enconf php7.4-fpm
+    apt-get -y remove libapache2-mod-php7.4
     systemctl restart apache2
     cp -r /etc/php/7.4/ /root/vst_install_backups/php7.4/
     wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-74.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.stpl

From 4de87735758d228bd4981f2d2e68867e13716737 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 1 Jun 2020 18:46:55 +0200
Subject: [PATCH 1020/2300] Update keep_mpm_event.sh

---
 upd/keep_mpm_event.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/upd/keep_mpm_event.sh b/upd/keep_mpm_event.sh
index 1195dfa0..e8c36a98 100644
--- a/upd/keep_mpm_event.sh
+++ b/upd/keep_mpm_event.sh
@@ -33,6 +33,7 @@ if [ "$check_grep" -eq 0 ]; then
                 a2dismod php7.0
                 a2dismod php7.1
                 a2dismod php7.2
+                a2dismod php7.3
                 a2dismod php7.4
                 a2dismod mpm_prefork
                 a2enmod mpm_event

From 470d0a134ef6a02e77e3fe53287bfdaa1048291b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 1 Jun 2020 18:53:09 +0200
Subject: [PATCH 1021/2300] skip upgrades on fresh installation

---
 install/vst-install-debian.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 96636cf6..b4d44207 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1595,6 +1595,11 @@ echo "UPDATE_HOSTNAME_SSL='yes'" >> $VESTA/conf/vesta.conf
 if [ ! -d "/usr/local/vesta/data/upgrades" ]; then
     mkdir -p /usr/local/vesta/data/upgrades
 fi
+touch /usr/local/vesta/data/upgrades/tune-fpm-config-files-v1
+touch /usr/local/vesta/data/upgrades/allow-backup-anytime
+touch /usr/local/vesta/data/upgrades/fix-sudoers
+touch /usr/local/vesta/data/upgrades/change-clamav-socket-v2
+touch /usr/local/vesta/data/upgrades/keeping-mpm-event
 
 # Secret URL
 secretquery=''

From 1c1ed27357a6eb5f88821442434e149d6c6c9116 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 1 Jun 2020 23:53:55 +0200
Subject: [PATCH 1022/2300] vesta-0.9.8-26-20

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 617d5954..2137e542 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-19
+vesta-0.9.8-26-20

From 27e892c6e35789d2176609e9fd4a6d895dfb7e66 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Jun 2020 10:21:14 +0200
Subject: [PATCH 1023/2300] Reset UPDATE_SSL_SCRIPT

---
 bin/v-add-web-domain-ssl | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-add-web-domain-ssl b/bin/v-add-web-domain-ssl
index 43e5cce3..2c0f78ae 100755
--- a/bin/v-add-web-domain-ssl
+++ b/bin/v-add-web-domain-ssl
@@ -143,6 +143,8 @@ if [ ! -z "$UPDATE_HOSTNAME_SSL" ] && [ "$UPDATE_HOSTNAME_SSL" = "yes" ]; then
     fi
 fi
 
+UPDATE_SSL_SCRIPT=''
+source $VESTA/conf/vesta.conf
 if [ ! -z "$UPDATE_SSL_SCRIPT" ]; then
     eval "$UPDATE_SSL_SCRIPT $user $domain"
 fi

From 17f943578648ff122e940b5eee499ed2df08b789 Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Thu, 11 Jun 2020 13:40:42 +0200
Subject: [PATCH 1024/2300] deb9 http2

---
 install/debian/9/templates/web/nginx/caching.stpl | 2 +-
 install/debian/9/templates/web/nginx/default.stpl | 2 +-
 install/debian/9/templates/web/nginx/hosting.stpl | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/debian/9/templates/web/nginx/caching.stpl b/install/debian/9/templates/web/nginx/caching.stpl
index 3c56004d..868e2fe9 100644
--- a/install/debian/9/templates/web/nginx/caching.stpl
+++ b/install/debian/9/templates/web/nginx/caching.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
diff --git a/install/debian/9/templates/web/nginx/default.stpl b/install/debian/9/templates/web/nginx/default.stpl
index 0e669b3d..f225becd 100644
--- a/install/debian/9/templates/web/nginx/default.stpl
+++ b/install/debian/9/templates/web/nginx/default.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
diff --git a/install/debian/9/templates/web/nginx/hosting.stpl b/install/debian/9/templates/web/nginx/hosting.stpl
index 62620789..3b0e8ce9 100644
--- a/install/debian/9/templates/web/nginx/hosting.stpl
+++ b/install/debian/9/templates/web/nginx/hosting.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;

From 1ed512cf8340ac24bb974f23f191212b5d4d4d3a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Jun 2020 14:01:55 +0200
Subject: [PATCH 1025/2300] Building templates archive for Deb 8 and 9

---
 src/deb/vesta_compile.sh | 75 ++++++++++++++++++++++++++++++++++++----
 1 file changed, 68 insertions(+), 7 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 23b2471a..694f472f 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -277,18 +277,20 @@ if [ "$CWEB_B" = true ]; then
   fi
   cp /root/vesta/src/deb/latest.txt $PATH_OF_C_WEB_FOLDER_ROOT/latest.txt
   echo "$BUILD_DATE" > $PATH_OF_C_WEB_FOLDER_ROOT/build_date.txt
-  cd $PATH_OF_C_WEB_FOLDER
-  
+
+  ###########
+  cd $PATH_OF_C_WEB_FOLDER_ROOT/debian/8
+
   if [ -f "packages.tar.gz" ]; then
     rm packages.tar.gz
   fi
   tar -czf packages.tar.gz packages/
-  
+
   if [ -f "templates.tar.gz" ]; then
     rm templates.tar.gz
   fi
   tar -czf templates.tar.gz templates/
-  
+
   if [ -f "firewall.tar.gz" ]; then
     rm firewall.tar.gz
   fi
@@ -303,12 +305,71 @@ if [ "$CWEB_B" = true ]; then
     rm dovecot.tar.gz
   fi
   tar -czf dovecot.tar.gz dovecot/
-  echo "=== All done"
-  
+  echo "=== All done for Debian8"
+  ###########
+  cd $PATH_OF_C_WEB_FOLDER_ROOT/debian/9
+
+  if [ -f "packages.tar.gz" ]; then
+    rm packages.tar.gz
+  fi
+  tar -czf packages.tar.gz packages/
+
+  if [ -f "templates.tar.gz" ]; then
+    rm templates.tar.gz
+  fi
+  tar -czf templates.tar.gz templates/
+
+  if [ -f "firewall.tar.gz" ]; then
+    rm firewall.tar.gz
+  fi
+  tar -czf firewall.tar.gz firewall/
+
+  if [ -f "fail2ban.tar.gz" ]; then
+    rm fail2ban.tar.gz
+  fi
+  tar -czf fail2ban.tar.gz fail2ban/
+
+  if [ -f "dovecot.tar.gz" ]; then
+    rm dovecot.tar.gz
+  fi
+  tar -czf dovecot.tar.gz dovecot/
+  echo "=== All done for Debian9"
+  ###########
+  cd $PATH_OF_C_WEB_FOLDER_ROOT/debian/10
+
+  if [ -f "packages.tar.gz" ]; then
+    rm packages.tar.gz
+  fi
+  tar -czf packages.tar.gz packages/
+
+  if [ -f "templates.tar.gz" ]; then
+    rm templates.tar.gz
+  fi
+  tar -czf templates.tar.gz templates/
+
+  if [ -f "firewall.tar.gz" ]; then
+    rm firewall.tar.gz
+  fi
+  tar -czf firewall.tar.gz firewall/
+
+  if [ -f "fail2ban.tar.gz" ]; then
+    rm fail2ban.tar.gz
+  fi
+  tar -czf fail2ban.tar.gz fail2ban/
+
+  if [ -f "dovecot.tar.gz" ]; then
+    rm dovecot.tar.gz
+  fi
+  tar -czf dovecot.tar.gz dovecot/
+  echo "=== All done for Debian10"
+  ##########
+
   cp /root/vesta/install/vst-install-debian.sh $PATH_OF_C_WEB_FOLDER_ROOT/vst-install-debian.sh
-  
+
   mkdir $PATH_OF_C_WEB_FOLDER_ROOT/tools
   cp -rf /root/vesta/src/deb/for-download/tools/* $PATH_OF_C_WEB_FOLDER_ROOT/tools
+
+  echo "=== All done for c subdomain ==="
 fi
 
 #################################################################################

From 977728c21a75f9b5999a8acb7d18223e28f65835 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Jun 2020 15:04:48 +0200
Subject: [PATCH 1026/2300] Run keep_mpm_event.sh with 'background' parameter

---
 src/deb/vesta/postinst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 4f030213..5064b173 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -114,7 +114,7 @@ fi
 if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event" ]; then
     touch /usr/local/vesta/data/upgrades/keeping-mpm-event
     echo "=== scheduling keeping-mpm-event check script"
-    echo "bash /usr/local/vesta/upd/keep_mpm_event.sh >> /usr/local/vesta/data/upgrades/keeping-mpm-event.log 2>&1" >> /usr/local/vesta/data/queue/restart.pipe
+    echo "bash /usr/local/vesta/upd/keep_mpm_event.sh 'background' >> /usr/local/vesta/data/upgrades/keeping-mpm-event.log 2>&1" >> /usr/local/vesta/data/queue/restart.pipe
     /usr/local/vesta/bin/v-add-cron-restart-job > /dev/null 2>&1
 fi
 

From 747b8eea4ea4a5115ed8932cc387113d7e799493 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Jun 2020 15:25:29 +0200
Subject: [PATCH 1027/2300] Update keep_mpm_event.sh

---
 upd/keep_mpm_event.sh | 80 ++++++++++++++++++++++++-------------------
 1 file changed, 44 insertions(+), 36 deletions(-)

diff --git a/upd/keep_mpm_event.sh b/upd/keep_mpm_event.sh
index e8c36a98..fdce7ef2 100644
--- a/upd/keep_mpm_event.sh
+++ b/upd/keep_mpm_event.sh
@@ -1,44 +1,52 @@
 #!/bin/bash
 
-check_grep=$(ps -A | grep -c "apt")
-if [ "$check_grep" -eq 0 ]; then
-    echo "apt is not running"
-    echo "cleaning restart.pipe"
-    sed -i "/keep_mpm_event/d" /usr/local/vesta/data/queue/restart.pipe
-    /usr/local/vesta/bin/v-delete-cron-restart-job
-    if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event-checked" ]; then
-        touch /usr/local/vesta/data/upgrades/keeping-mpm-event-checked
-        echo "mpm_event is not checked"
-        check_grep=$(grep -c "WEB_SYSTEM='apache2'" /usr/local/vesta/conf/vesta.conf)
-        if [ "$check_grep" -eq 1 ]; then
-            echo "we have apache"
-            switch_to_mpm_event=0
-            release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
-            if [ "$release" -eq 10 ]; then
-                echo "ok, it's deb10"
-                switch_to_mpm_event=1
-            else
-                check_grep=$(/usr/local/vesta/bin/v-list-sys-web-status | grep -c "Server MPM: event")
-                if [ "$check_grep" -eq 1 ]; then
-                    echo "ok, it's already mpm_event"
+switch_to_mpm_event=1
+
+if [ "$1" = 'background' ]; then
+    switch_to_mpm_event=0
+    check_grep=$(ps -A | grep -c "apt")
+    if [ "$check_grep" -eq 0 ]; then
+        echo "=== OK, apt is not running"
+        echo "=== Cleaning restart.pipe"
+        sed -i "/keep_mpm_event/d" /usr/local/vesta/data/queue/restart.pipe
+        /usr/local/vesta/bin/v-delete-cron-restart-job
+        if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event-checked" ]; then
+            touch /usr/local/vesta/data/upgrades/keeping-mpm-event-checked
+            echo "=== OK, mpm_event is not checked"
+            check_grep=$(grep -c "WEB_SYSTEM='apache2'" /usr/local/vesta/conf/vesta.conf)
+            if [ "$check_grep" -eq 1 ]; then
+                echo "=== OK, we have Apache2"
+                release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+                if [ "$release" -eq 10 ]; then
+                    echo "=== OK, it's Debian 10"
                     switch_to_mpm_event=1
+                else
+                    check_grep=$(/usr/local/vesta/bin/v-list-sys-web-status | grep -c "Server MPM: event")
+                    if [ "$check_grep" -eq 1 ]; then
+                        echo "=== OK, it's already mpm_event"
+                        switch_to_mpm_event=1
+                    fi
                 fi
             fi
-            if [ "$switch_to_mpm_event" -eq 1 ]; then
-                echo "ok, let's do it"
-                apt-get -y remove libapache2-mod-php7.4
-                a2dismod ruid2
-                a2dismod suexec
-                a2dismod php5.6
-                a2dismod php7.0
-                a2dismod php7.1
-                a2dismod php7.2
-                a2dismod php7.3
-                a2dismod php7.4
-                a2dismod mpm_prefork
-                a2enmod mpm_event
-                service apache2 restart
-            fi
         fi
     fi
+else
+    echo "=== Script is called by the user"
+fi
+
+if [ "$switch_to_mpm_event" -eq 1 ]; then
+    echo "=== OK, let's ensure mpm_event"
+    apt-get -y remove libapache2-mod-php7.4
+    a2dismod ruid2
+    a2dismod suexec
+    a2dismod php5.6
+    a2dismod php7.0
+    a2dismod php7.1
+    a2dismod php7.2
+    a2dismod php7.3
+    a2dismod php7.4
+    a2dismod mpm_prefork
+    a2enmod mpm_event
+    service apache2 restart
+    echo "=== Done!"
 fi

From ab9b778e39b72e970b492c406c15eb8f61673905 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Jun 2020 15:27:59 +0200
Subject: [PATCH 1028/2300] Update keep_mpm_event.sh

---
 upd/keep_mpm_event.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/upd/keep_mpm_event.sh b/upd/keep_mpm_event.sh
index fdce7ef2..e9ea92e4 100644
--- a/upd/keep_mpm_event.sh
+++ b/upd/keep_mpm_event.sh
@@ -1,5 +1,9 @@
 #!/bin/bash
 
+###########
+# Script that will ensure that Apache2 will always stay in mpm_event mode
+###########
+
 switch_to_mpm_event=1
 
 if [ "$1" = 'background' ]; then

From 514bf9e0f10a884452e0cc4b8d5e51340aa13b3b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Jun 2020 16:09:42 +0200
Subject: [PATCH 1029/2300] Create fix_ssl_directive_in_templates.sh

---
 upd/fix_ssl_directive_in_templates.sh | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 upd/fix_ssl_directive_in_templates.sh

diff --git a/upd/fix_ssl_directive_in_templates.sh b/upd/fix_ssl_directive_in_templates.sh
new file mode 100644
index 00000000..ccbaf7f5
--- /dev/null
+++ b/upd/fix_ssl_directive_in_templates.sh
@@ -0,0 +1,21 @@
+#!/bin/bash
+
+release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+
+if [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
+    for FILE in /usr/local/vesta/data/templates/web/nginx/*.stpl; do
+        check_grep=$(grep -c 'http2' $FILE)
+        if [ "$check_grep" -eq 0 ]; then
+            echo "=== Fixing ssl directive in $FILE"
+            sed -i "s|:%proxy_ssl_port%;|:%proxy_ssl_port% ssl http2;|g" $FILE
+            sed -i "s|ssl *on;|#ssl on;|g" $FILE
+        fi
+    done
+fi
+
+for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
+    if [ ! -f "/usr/local/vesta/data/users/$user/user.conf" ]; then
+        continue;
+    fi
+    v-rebuild-web-domains $user 'no'
+done

From 9cdfaf483f16ab2163be987a8d0e03f7f361dd8b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Jun 2020 16:13:29 +0200
Subject: [PATCH 1030/2300] Fixing ssl directive in nginx templates

---
 src/deb/vesta/postinst | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 5064b173..20b13bd1 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -118,6 +118,13 @@ if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event" ]; then
     /usr/local/vesta/bin/v-add-cron-restart-job > /dev/null 2>&1
 fi
 
+# Fixing ssl directive in nginx templates
+if [ ! -f "/usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates" ]; then
+    touch /usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates
+    echo "=== Fixing ssl directive in nginx templates"
+    bash /usr/local/vesta/upd/fix_ssl_directive_in_templates.sh
+fi
+
 # Run custom triggers
 if [ -x "/root/vesta-patch.sh" ]; then
     /root/vesta-patch.sh

From 9230e004f1189d359ad47f6f0abac720d1fb827e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Jun 2020 16:26:55 +0200
Subject: [PATCH 1031/2300] Update fix_ssl_directive_in_templates.sh

---
 upd/fix_ssl_directive_in_templates.sh | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/upd/fix_ssl_directive_in_templates.sh b/upd/fix_ssl_directive_in_templates.sh
index ccbaf7f5..7b8e00ee 100644
--- a/upd/fix_ssl_directive_in_templates.sh
+++ b/upd/fix_ssl_directive_in_templates.sh
@@ -6,9 +6,13 @@ if [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
     for FILE in /usr/local/vesta/data/templates/web/nginx/*.stpl; do
         check_grep=$(grep -c 'http2' $FILE)
         if [ "$check_grep" -eq 0 ]; then
-            echo "=== Fixing ssl directive in $FILE"
+            echo "=== Fixing http2 directive in $FILE"
             sed -i "s|:%proxy_ssl_port%;|:%proxy_ssl_port% ssl http2;|g" $FILE
-            sed -i "s|ssl *on;|#ssl on;|g" $FILE
+        fi
+        check_grep=$(grep -c 'ssl *on;' $FILE)
+        if [ "$check_grep" -gt 0 ]; then
+            echo "=== Fixing ssl directive in $FILE"
+            sed -i "s|ssl *on;|#ssl_on;|g" $FILE
         fi
     done
 fi

From 9669084e3f0597322bcb0938eaba569b9fdd2962 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jun 2020 17:18:25 +0200
Subject: [PATCH 1032/2300] Create foxhole_all.cdb

---
 src/deb/for-download/tools/clamav/foxhole_all.cdb | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 src/deb/for-download/tools/clamav/foxhole_all.cdb

diff --git a/src/deb/for-download/tools/clamav/foxhole_all.cdb b/src/deb/for-download/tools/clamav/foxhole_all.cdb
new file mode 100644
index 00000000..8b137891
--- /dev/null
+++ b/src/deb/for-download/tools/clamav/foxhole_all.cdb
@@ -0,0 +1 @@
+

From 3b3d97f658f908e1465006e5081cb7e6ebeb7cd8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jun 2020 17:19:41 +0200
Subject: [PATCH 1033/2300] foxhole_all.cdb

---
 .../for-download/tools/clamav/foxhole_all.cdb | 149 +++++++++++++++++-
 1 file changed, 148 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/clamav/foxhole_all.cdb b/src/deb/for-download/tools/clamav/foxhole_all.cdb
index 8b137891..3825e194 100644
--- a/src/deb/for-download/tools/clamav/foxhole_all.cdb
+++ b/src/deb/for-download/tools/clamav/foxhole_all.cdb
@@ -1 +1,148 @@
-
+Sanesecurity.Foxhole.7z_ade:CL_TYPE_7Z:*:\.[Aa][Dd][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_adp:CL_TYPE_7Z:*:\.[AA][Dd][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_bat:CL_TYPE_7Z:*:\.[Bb][Aa][Tt]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_chm:CL_TYPE_7Z:*:\.[Cc][Hh][Mm]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_cmd:CL_TYPE_7Z:*:\.[Cc][Mm][Dd]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_com:CL_TYPE_7Z:*:\.[Cc][Oo][Mm]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_cpl:CL_TYPE_7Z:*:\.[Cc][Pp][Ll]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_exe:CL_TYPE_7Z:*:\.[Ee][Xx][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_hta:CL_TYPE_7Z:*:\.[Hh][Tt][Aa]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_ins:CL_TYPE_7Z:*:\.[Ii][Nn][Ss]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_isp:CL_TYPE_7Z:*:\.[Ii][Ss][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_jse:CL_TYPE_7Z:*:\.[Jj][Ss][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_lib:CL_TYPE_7Z:*:\.[Ll][Ii][Bb]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_mde:CL_TYPE_7Z:*:\.[Mm][Dd][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_msc:CL_TYPE_7Z:*:\.[Mm][Ss][Cc]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_msp:CL_TYPE_7Z:*:\.[Mm][Ss][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_mst:CL_TYPE_7Z:*:\.[Mm][Ss][Tt]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_pif:CL_TYPE_7Z:*:\.[Pp][Ii][Ff]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_scr:CL_TYPE_7Z:*:\.[Ss][Cc][Rr]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_sct:CL_TYPE_7Z:*:\.[Ss][Cc][Tt]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_shb:CL_TYPE_7Z:*:\.[Ss][Hh][Bb]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_sys:CL_TYPE_7Z:*:\.[Ss][Yy][Ss]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_vb:CL_TYPE_7Z:*:\.[Vv][Bb]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_vbe:CL_TYPE_7Z:*:\.[Vv][Bb][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_vbs:CL_TYPE_7Z:*:\.[Vv][Bb][Ss]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_vxd:CL_TYPE_7Z:*:\.[Vv][Xx][Dd]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_wsc:CL_TYPE_7Z:*:\.[Ww][Ss][Cc]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_wsf:CL_TYPE_7Z:*:\.[Ww][Ss][Ff]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_wsh:CL_TYPE_7Z:*:\.[Ww][Ss][Hh]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_lnk:CL_TYPE_7Z:*:\.[Ll][Nn][Kk]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_lnk:CL_TYPE_7Z:*:\.[Uu][Rr][Ll]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_ps1:CL_TYPE_7Z:*:\.[Pp][Ss]1$:*:*:*:*:*:*
+Sanesecurity.Foxhole.7z_iqy:CL_TYPE_7Z:*:\.[Ii][Qq][Yy]$:*:*:*:1:*:*
+Sanesecurity.Foxhole.Rar_ade:CL_TYPE_RAR:*:\.[Aa][Dd][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_adp:CL_TYPE_RAR:*:\.[AA][Dd][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_bat:CL_TYPE_RAR:*:\.[Bb][Aa][Tt]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_chm:CL_TYPE_RAR:*:\.[Cc][Hh][Mm]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_cmd:CL_TYPE_RAR:*:\.[Cc][Mm][Dd]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_com:CL_TYPE_RAR:*:\.[Cc][Oo][Mm]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_cpl:CL_TYPE_RAR:*:\.[Cc][Pp][Ll]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_exe:CL_TYPE_RAR:*:\.[Ee][Xx][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_hta:CL_TYPE_RAR:*:\.[Hh][Tt][Aa]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_ins:CL_TYPE_RAR:*:\.[Ii][Nn][Ss]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_isp:CL_TYPE_RAR:*:\.[Ii][Ss][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_jse:CL_TYPE_RAR:*:\.[Jj][Ss][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_lib:CL_TYPE_RAR:*:\.[Ll][Ii][Bb]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_mde:CL_TYPE_RAR:*:\.[Mm][Dd][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_msc:CL_TYPE_RAR:*:\.[Mm][Ss][Cc]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_msp:CL_TYPE_RAR:*:\.[Mm][Ss][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_mst:CL_TYPE_RAR:*:\.[Mm][Ss][Tt]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_pif:CL_TYPE_RAR:*:\.[Pp][Ii][Ff]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_scr:CL_TYPE_RAR:*:\.[Ss][Cc][Rr]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_sct:CL_TYPE_RAR:*:\.[Ss][Cc][Tt]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_shb:CL_TYPE_RAR:*:\.[Ss][Hh][Bb]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_sys:CL_TYPE_RAR:*:\.[Ss][Yy][Ss]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_vb:CL_TYPE_RAR:*:\.[Vv][Bb]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_vbe:CL_TYPE_RAR:*:\.[Vv][Bb][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_vbs:CL_TYPE_RAR:*:\.[Vv][Bb][Ss]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_vxd:CL_TYPE_RAR:*:\.[Vv][Xx][Dd]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_wsc:CL_TYPE_RAR:*:\.[Ww][Ss][Cc]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_wsf:CL_TYPE_RAR:*:\.[Ww][Ss][Ff]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_wsh:CL_TYPE_RAR:*:\.[Ww][Ss][Hh]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_lnk:CL_TYPE_RAR:*:\.[Ll][Nn][Kk]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_url:CL_TYPE_RAR:*:\.[Uu][Rr][Ll]$:*:*:*:1:*:*
+Sanesecurity.Foxhole.Rar_jnlp:CL_TYPE_RAR:*:\.[Jj][Nn][Ll][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_ps1:CL_TYPE_RAR:*:\.[Pp][Ss]1$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_iqy:CL_TYPE_RAR:*:\.[Ii][Qq][Yy]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_ade:CL_TYPE_ZIP:*:\.[Aa][Dd][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_adp:CL_TYPE_ZIP:*:\.[AA][Dd][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_bat:CL_TYPE_ZIP:*:\.[Bb][Aa][Tt]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_chm:CL_TYPE_ZIP:*:\.[Cc][Hh][Mm]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_cmd:CL_TYPE_ZIP:*:\.[Cc][Mm][Dd]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_com:CL_TYPE_ZIP:*:\.[Cc][Oo][Mm]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_cpl:CL_TYPE_ZIP:*:\.[Cc][Pp][Ll]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_exe:CL_TYPE_ZIP:*:\.[Ee][Xx][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_hta:CL_TYPE_ZIP:*:\.[Hh][Tt][Aa]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_ins:CL_TYPE_ZIP:*:\.[Ii][Nn][Ss]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_isp:CL_TYPE_ZIP:*:\.[Ii][Ss][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_jse:CL_TYPE_ZIP:*:\.[Jj][Ss][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_lib:CL_TYPE_ZIP:*:\.[Ll][Ii][Bb]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_mde:CL_TYPE_ZIP:*:\.[Mm][Dd][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_msc:CL_TYPE_ZIP:*:\.[Mm][Ss][Cc]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_msp:CL_TYPE_ZIP:*:\.[Mm][Ss][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_mst:CL_TYPE_ZIP:*:\.[Mm][Ss][Tt]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_pif:CL_TYPE_ZIP:*:\.[Pp][Ii][Ff]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_scr:CL_TYPE_ZIP:*:\.[Ss][Cc][Rr]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_sct:CL_TYPE_ZIP:*:\.[Ss][Cc][Tt]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_shb:CL_TYPE_ZIP:*:\.[Ss][Hh][Bb]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_sys:CL_TYPE_ZIP:*:\.[Ss][Yy][Ss]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_jar:CL_TYPE_ZIP:*:\.[Jj][Aa][Rr]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_vb:CL_TYPE_ZIP:*:\.[Vv][Bb]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_vbe:CL_TYPE_ZIP:*:\.[Vv][Bb][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_vbs:CL_TYPE_ZIP:*:\.[Vv][Bb][Ss]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_vxd:CL_TYPE_ZIP:*:\.[Vv][Xx][Dd]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_wsc:CL_TYPE_ZIP:*:\.[Ww][Ss][Cc]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_wsf:CL_TYPE_ZIP:*:\.[Ww][Ss][Ff]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_wsh:CL_TYPE_ZIP:*:\.[Ww][Ss][Hh]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_lnk:CL_TYPE_ZIP:*:\.[Ll][Nn][Kk]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_url:CL_TYPE_ZIP:*:\.[Uu][Rr][Ll]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_jnlp:CL_TYPE_ZIP:*:\.[Jj][Nn][Ll][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_ps1:CL_TYPE_ZIP:*:\.[Pp][Ss]1$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_iqy:CL_TYPE_ZIP:*:\.[Ii][Qq][Yy]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_ade:CL_TYPE_ARJ:*:\.[Aa][Dd][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_adp:CL_TYPE_ARJ:*:\.[AA][Dd][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_bat:CL_TYPE_ARJ:*:\.[Bb][Aa][Tt]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_chm:CL_TYPE_ARJ:*:\.[Cc][Hh][Mm]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_cmd:CL_TYPE_ARJ:*:\.[Cc][Mm][Dd]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_com:CL_TYPE_ARJ:*:\.[Cc][Oo][Mm]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_cpl:CL_TYPE_ARJ:*:\.[Cc][Pp][Ll]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_exe:CL_TYPE_ARJ:*:\.[Ee][Xx][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_hta:CL_TYPE_ARJ:*:\.[Hh][Tt][Aa]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_ins:CL_TYPE_ARJ:*:\.[Ii][Nn][Ss]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_isp:CL_TYPE_ARJ:*:\.[Ii][Ss][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_jse:CL_TYPE_ARJ:*:\.[Jj][Ss][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_lib:CL_TYPE_ARJ:*:\.[Ll][Ii][Bb]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_mde:CL_TYPE_ARJ:*:\.[Mm][Dd][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_msc:CL_TYPE_ARJ:*:\.[Mm][Ss][Cc]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_msp:CL_TYPE_ARJ:*:\.[Mm][Ss][Pp]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_mst:CL_TYPE_ARJ:*:\.[Mm][Ss][Tt]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_pif:CL_TYPE_ARJ:*:\.[Pp][Ii][Ff]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_scr:CL_TYPE_ARJ:*:\.[Ss][Cc][Rr]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_sct:CL_TYPE_ARJ:*:\.[Ss][Cc][Tt]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_shb:CL_TYPE_ARJ:*:\.[Ss][Hh][Bb]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_sys:CL_TYPE_ARJ:*:\.[Ss][Yy][Ss]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_vb:CL_TYPE_ARJ:*:\.[Vv][Bb]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_vbe:CL_TYPE_ARJ:*:\.[Vv][Bb][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_vbs:CL_TYPE_ARJ:*:\.[Vv][Bb][Ss]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_vxd:CL_TYPE_ARJ:*:\.[Vv][Xx][Dd]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_wsc:CL_TYPE_ARJ:*:\.[Ww][Ss][Cc]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_wsf:CL_TYPE_ARJ:*:\.[Ww][Ss][Ff]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_wsh:CL_TYPE_ARJ:*:\.[Ww][Ss][Hh]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_lnk:CL_TYPE_ARJ:*:\.[Ll][Nn][Kk]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Arj_ps1:CL_TYPE_ARJ:*:\.[Pp][Ss]1$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Cab_scr:CL_TYPE_MSCAB:*:\*[Ss][Cc][Rr]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Cab_exe:CL_TYPE_MSCAB:*:\*[Ee][Xx][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Cab_ps1:CL_TYPE_MSCAB:*:\*[Pp][Ss]1$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Mail_ps1:CL_TYPE_MAIL:*:\*[Pp][Ss]1$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Iso_exe:CL_TYPE_ISO9660:*:\.[Ee][Xx][Ee]$:*:*:0:0:0:*
+Sanesecurity.Foxhole.Tar_exe:CL_TYPE_POSIX_TAR:*:\.[Ee][Xx][Ee]$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Zip_iqy:CL_TYPE_ZIP:*:\.[Ii][Qq][Yy]$:*:*:*:1:*:*
+Sanesecurity.Foxhole.Rar_iqy:CL_TYPE_RAR:*:\.[Ii][Qq][Yy]$:*:*:*:1:*:*
+Sanesecurity.Foxhole.Zip_slk:CL_TYPE_ZIP:*:\.[Ss][Ll][Kk]$:*:*:*:1:*:*
+Sanesecurity.Foxhole.Rar_slk:CL_TYPE_RAR:*:\.[Ss][Ll][Kk]$:*:*:*:1:*:*
+Sanesecurity.Foxhole.Zip_setting:CL_TYPE_ZIP:*:(?i)\.settingcontent-ms$:*:*:*:1:*:*
+Sanesecurity.Foxhole.7z_setting:CL_TYPE_7Z:*:(?i)\.settingcontent-ms$:*:*:*:*:*:*
+Sanesecurity.Foxhole.Rar_setting:CL_TYPE_RAR:*:(?i)\.settingcontent-ms$:*:*:*:1:*:*
+Sanesecurity.Foxhole.Iso_com:CL_TYPE_ISO9660:*:\.[Cc][Oo][Mm]$:*:*:0:0:0:*
+Sanesecurity.Foxhole.Iso_scr:CL_TYPE_ISO9660:*:\.[Ss][Cc][Rr]$:*:*:0:0:0:*

From 84a9df6a5832d7d9a849095b6e9a11e5daa93bda Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jun 2020 17:29:47 +0200
Subject: [PATCH 1034/2300] Block executable files inside zip/rar/tar archives
 in ClamAV

---
 src/deb/vesta/postinst | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 20b13bd1..7947ce06 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -125,6 +125,23 @@ if [ ! -f "/usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates" ]; the
     bash /usr/local/vesta/upd/fix_ssl_directive_in_templates.sh
 fi
 
+# Block executable files inside zip/rar/tar archives in ClamAV
+if [ ! -f "/usr/local/vesta/data/upgrades/clamav_block_exe_in_archives" ]; then
+    touch /usr/local/vesta/data/upgrades/clamav_block_exe_in_archives
+    if [ -f "/etc/exim4/exim4.conf.template" ]; then
+        check_grep=$(grep -c '#CLAMD' /etc/exim4/exim4.conf.template)
+        if [ "$check_grep" -eq 0 ]; then
+            folder="/var/lib/clamav"
+            if [ -d "$folder" ]; then
+                echo "=== Blocking executable files inside zip/rar/tar archives in ClamAV"
+                wget -nv -O $folder/foxhole_all.cdb http://c.myvestacp.com/tools/clamav/foxhole_all.cdb
+                chown clamav:clamav $folder/foxhole_all.cdb
+                service clamav-daemon restart
+            fi
+        fi
+    fi
+fi
+
 # Run custom triggers
 if [ -x "/root/vesta-patch.sh" ]; then
     /root/vesta-patch.sh

From bf4eb9aa4b16a089c6b90cf93895818701149ddf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jun 2020 17:38:44 +0200
Subject: [PATCH 1035/2300] Run fix ssl directive only on Deb9 and Deb10

---
 src/deb/vesta/postinst | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 7947ce06..a7178e14 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -3,6 +3,8 @@
 build_date=$(curl -s http://c.myvestacp.com/build_date.txt)
 echo "$build_date" > /usr/local/vesta/build_date.txt
 
+release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+
 # Run triggers only on updates
 if [ ! -e "/usr/local/vesta/data/users/admin" ]; then
     version=$(curl -s http://c.myvestacp.com/latest.txt?installed)
@@ -119,10 +121,12 @@ if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event" ]; then
 fi
 
 # Fixing ssl directive in nginx templates
-if [ ! -f "/usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates" ]; then
-    touch /usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates
-    echo "=== Fixing ssl directive in nginx templates"
-    bash /usr/local/vesta/upd/fix_ssl_directive_in_templates.sh
+if [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
+    if [ ! -f "/usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates" ]; then
+        touch /usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates
+        echo "=== Fixing ssl directive in nginx templates"
+        bash /usr/local/vesta/upd/fix_ssl_directive_in_templates.sh
+    fi
 fi
 
 # Block executable files inside zip/rar/tar archives in ClamAV

From fd49534c2e1c0e26b951f65634903238a5592331 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jun 2020 17:40:48 +0200
Subject: [PATCH 1036/2300] Run fix ssl directive only on Deb9 and Deb10

---
 upd/fix_ssl_directive_in_templates.sh | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/upd/fix_ssl_directive_in_templates.sh b/upd/fix_ssl_directive_in_templates.sh
index 7b8e00ee..cc6a3e01 100644
--- a/upd/fix_ssl_directive_in_templates.sh
+++ b/upd/fix_ssl_directive_in_templates.sh
@@ -15,11 +15,12 @@ if [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
             sed -i "s|ssl *on;|#ssl_on;|g" $FILE
         fi
     done
-fi
 
-for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
-    if [ ! -f "/usr/local/vesta/data/users/$user/user.conf" ]; then
-        continue;
-    fi
-    v-rebuild-web-domains $user 'no'
-done
+    for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
+        if [ ! -f "/usr/local/vesta/data/users/$user/user.conf" ]; then
+            continue;
+        fi
+        v-rebuild-web-domains $user 'no'
+    done
+
+fi

From 023234299fc20f94af2906dbb10de6aa57ddc741 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jun 2020 17:49:06 +0200
Subject: [PATCH 1037/2300] Update fix_ssl_directive_in_templates.sh

---
 upd/fix_ssl_directive_in_templates.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/upd/fix_ssl_directive_in_templates.sh b/upd/fix_ssl_directive_in_templates.sh
index cc6a3e01..a4c99efb 100644
--- a/upd/fix_ssl_directive_in_templates.sh
+++ b/upd/fix_ssl_directive_in_templates.sh
@@ -15,12 +15,15 @@ if [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
             sed -i "s|ssl *on;|#ssl_on;|g" $FILE
         fi
     done
+    
+    source /etc/profile
+    PATH=$PATH:/usr/local/vesta/bin && export PATH
 
     for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
         if [ ! -f "/usr/local/vesta/data/users/$user/user.conf" ]; then
             continue;
         fi
-        v-rebuild-web-domains $user 'no'
+        /usr/local/vesta/bin/v-rebuild-web-domains $user 'no'
     done
 
 fi

From 06fab59f0bbcc86306e781c57d331944f21148ad Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jun 2020 17:55:03 +0200
Subject: [PATCH 1038/2300] Update fix_ssl_directive_in_templates.sh

---
 upd/fix_ssl_directive_in_templates.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/upd/fix_ssl_directive_in_templates.sh b/upd/fix_ssl_directive_in_templates.sh
index a4c99efb..9c61f120 100644
--- a/upd/fix_ssl_directive_in_templates.sh
+++ b/upd/fix_ssl_directive_in_templates.sh
@@ -18,6 +18,8 @@ if [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
     
     source /etc/profile
     PATH=$PATH:/usr/local/vesta/bin && export PATH
+    
+    echo "=== Rebuilding web config files (this can take a while)"
 
     for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
         if [ ! -f "/usr/local/vesta/data/users/$user/user.conf" ]; then

From 58ff192f530e47cd769f2f1cb41d617cf97f8752 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jun 2020 18:05:29 +0200
Subject: [PATCH 1039/2300] Update caching.stpl

---
 install/debian/10/templates/web/nginx/caching.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/caching.stpl b/install/debian/10/templates/web/nginx/caching.stpl
index 3c56004d..868e2fe9 100644
--- a/install/debian/10/templates/web/nginx/caching.stpl
+++ b/install/debian/10/templates/web/nginx/caching.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl;
+    listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;

From d0e24ed92f7f22049cd0db16324c08c3c87664eb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jun 2020 22:46:08 +0200
Subject: [PATCH 1040/2300] LetsEncrypt to use Apache if myVesta is behind main
 nginx

---
 bin/v-add-letsencrypt-domain | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 8e1991f8..0b630d28 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -158,6 +158,14 @@ for auth in $authz; do
         check_result $? "DNS _acme-challenge record wasn't created"
     else
         if [ "$WEB_SYSTEM" = 'nginx' ] || [ ! -z "$PROXY_SYSTEM" ]; then
+            if [ -f "/usr/local/vesta/web/inc/nginx_proxy" ]; then
+                #  if vesta is behind main nginx
+                well_known="$HOMEDIR/$user/web/$domain/public_html/.well-known"
+                acme_challenge="$well_known/acme-challenge"
+                mkdir -p $acme_challenge
+                echo "$token.$THUMB" > $acme_challenge/$token
+                chown -R $user:$user $well_known
+            fi
             conf="$HOMEDIR/$user/conf/web/nginx.$domain.conf_letsencrypt"
             sconf="$HOMEDIR/$user/conf/web/snginx.$domain.conf_letsencrypt"
             if [ ! -e "$conf" ]; then

From 62ec3bb5a70675e383355f98c7930a33565309c5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jun 2020 22:54:53 +0200
Subject: [PATCH 1041/2300] LetsEncrypt to use Apache if myVesta is behind main
 nginx

---
 bin/v-add-letsencrypt-domain | 31 ++++++++++++++++---------------
 1 file changed, 16 insertions(+), 15 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 0b630d28..57b764da 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -165,22 +165,23 @@ for auth in $authz; do
                 mkdir -p $acme_challenge
                 echo "$token.$THUMB" > $acme_challenge/$token
                 chown -R $user:$user $well_known
+            else
+                # default nginx method
+                conf="$HOMEDIR/$user/conf/web/nginx.$domain.conf_letsencrypt"
+                sconf="$HOMEDIR/$user/conf/web/snginx.$domain.conf_letsencrypt"
+                if [ ! -e "$conf" ]; then
+                    echo 'location ~ "^/\.well-known/acme-challenge/(.*)$" {' \
+                        > $conf
+                    echo '    default_type text/plain;' >> $conf
+                    echo '    return 200 "$1.'$THUMB'";' >> $conf
+                    echo '}' >> $conf
+                fi
+                if [ ! -e "$sconf" ]; then
+                    ln -s "$conf" "$sconf"
+                fi
+                $BIN/v-restart-proxy
+                check_result $? "Proxy restart failed" >/dev/null
             fi
-            conf="$HOMEDIR/$user/conf/web/nginx.$domain.conf_letsencrypt"
-            sconf="$HOMEDIR/$user/conf/web/snginx.$domain.conf_letsencrypt"
-            if [ ! -e "$conf" ]; then
-                echo 'location ~ "^/\.well-known/acme-challenge/(.*)$" {' \
-                    > $conf
-                echo '    default_type text/plain;' >> $conf
-                echo '    return 200 "$1.'$THUMB'";' >> $conf
-                echo '}' >> $conf
-            fi
-            if [ ! -e "$sconf" ]; then
-                ln -s "$conf" "$sconf"
-            fi
-            $BIN/v-restart-proxy
-            check_result $? "Proxy restart failed" >/dev/null
-
         else
             well_known="$HOMEDIR/$user/web/$domain/public_html/.well-known"
             acme_challenge="$well_known/acme-challenge"

From d6eed3b978145d819b6fc18ec48189ee5b6cf03f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Jun 2020 23:51:16 +0200
Subject: [PATCH 1042/2300] Avoiding v-schedule-letsencrypt

Because it is entering infinite loop for some reason
---
 web/templates/admin/add_web.html | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/web/templates/admin/add_web.html b/web/templates/admin/add_web.html
index 8130fe20..3e0478ce 100644
--- a/web/templates/admin/add_web.html
+++ b/web/templates/admin/add_web.html
@@ -129,6 +129,7 @@
                         <tr>
                             <td>
                                 <table style="display:<?php if (empty($v_ssl)) { echo 'none';} else {echo 'block';}?>;" id="ssltable">
+                                    <!--
                                     <tr>
                                       <td class="step-left input-label vst-text">
                                           <label><input type="checkbox" size="20" class="vst-checkbox" name="v_letsencrypt" <?php if($v_letsencrypt == 'yes' || $v_letsencrypt == 'on') echo "checked=yes" ?> onclick="App.Actions.WEB.toggle_letsencrypt(this)"> <?php print __('Lets Encrypt Support');?></label>
@@ -139,6 +140,7 @@
                                           <?= __('Your certificate will be automatically issued in 5 minutes')?>
                                       </td>
                                   </tr>
+                                  -->
                                   <tr>
                                         <td class="vst-text input-label step-left">
                                             <?php print __('SSL Home Directory');?>

From 3296e9308325ba00a4ce10c31f84d2f9f9b52258 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 13 Jun 2020 00:00:25 +0200
Subject: [PATCH 1043/2300] Clearing letsencrypt pipe

---
 src/deb/vesta/postinst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index a7178e14..8ce87d16 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -146,6 +146,11 @@ if [ ! -f "/usr/local/vesta/data/upgrades/clamav_block_exe_in_archives" ]; then
     fi
 fi
 
+# Clearing letsencrypt pipe
+if [ -f "/usr/local/vesta/data/queue/letsencrypt.pipe" ]; then
+    truncate -s 0 /usr/local/vesta/data/queue/letsencrypt.pipe
+fi
+
 # Run custom triggers
 if [ -x "/root/vesta-patch.sh" ]; then
     /root/vesta-patch.sh

From c329b4bb96d7bce8e917c53cc013e69315d5bb48 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 13 Jun 2020 00:00:59 +0200
Subject: [PATCH 1044/2300] vesta-0.9.8-26-21

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 2137e542..9e225905 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-20
+vesta-0.9.8-26-21

From 21d4b3ee400136db0c3acb2b668dd01272641fdf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 13 Jun 2020 00:03:25 +0200
Subject: [PATCH 1045/2300] Clearing letsencrypt pipe

---
 src/deb/vesta/postinst | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 8ce87d16..b3b280f5 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -147,8 +147,11 @@ if [ ! -f "/usr/local/vesta/data/upgrades/clamav_block_exe_in_archives" ]; then
 fi
 
 # Clearing letsencrypt pipe
-if [ -f "/usr/local/vesta/data/queue/letsencrypt.pipe" ]; then
-    truncate -s 0 /usr/local/vesta/data/queue/letsencrypt.pipe
+if [ ! -f "/usr/local/vesta/data/upgrades/clearing-letsencrypt-pipe" ]; then
+    touch /usr/local/vesta/data/upgrades/clearing-letsencrypt-pipe
+    if [ -f "/usr/local/vesta/data/queue/letsencrypt.pipe" ]; then
+        truncate -s 0 /usr/local/vesta/data/queue/letsencrypt.pipe
+    fi
 fi
 
 # Run custom triggers

From 396cbc6a26621f6b6e6c6971826909c4fde9e3df Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 13 Jun 2020 00:14:57 +0200
Subject: [PATCH 1046/2300] Blocking executable files inside archives in ClamAV
 [installer]

---
 install/vst-install-debian.sh | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index b4d44207..a6c824ce 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1233,6 +1233,13 @@ if [ "$clamd" = 'yes' ]; then
         sed -i "s|\[Service\]|[Service]\n$exec_pre1\n$exec_pre2|g" /lib/systemd/system/clamav-daemon.service
         systemctl daemon-reload
     fi
+    clamavfolder="/var/lib/clamav"
+    if [ -d "$clamavfolder" ]; then
+        echo "=== Blocking executable files inside zip/rar/tar archives in ClamAV"
+        wget -nv -O $clamavfolder/foxhole_all.cdb http://c.myvestacp.com/tools/clamav/foxhole_all.cdb
+        chown clamav:clamav $clamavfolder/foxhole_all.cdb
+        service clamav-daemon restart
+    fi
     service clamav-daemon start
     check_result $? "clamav-daeom start failed"
 fi
@@ -1600,6 +1607,9 @@ touch /usr/local/vesta/data/upgrades/allow-backup-anytime
 touch /usr/local/vesta/data/upgrades/fix-sudoers
 touch /usr/local/vesta/data/upgrades/change-clamav-socket-v2
 touch /usr/local/vesta/data/upgrades/keeping-mpm-event
+touch /usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates
+touch /usr/local/vesta/data/upgrades/clamav_block_exe_in_archives
+touch /usr/local/vesta/data/upgrades/clearing-letsencrypt-pipe
 
 # Secret URL
 secretquery=''
@@ -1628,7 +1638,7 @@ echo "================================================================"
 crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
 
 #----------------------------------------------------------#
-#                   Vesta Access Info                      #
+#                  myVesta Access Info                     #
 #----------------------------------------------------------#
 
 # Sending notification to admin email

From 08834fcd15a28fbe185e028f497ca1567d29fcf6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 13 Jun 2020 00:16:31 +0200
Subject: [PATCH 1047/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 -
 1 file changed, 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index a6c824ce..4a7ea0b6 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1238,7 +1238,6 @@ if [ "$clamd" = 'yes' ]; then
         echo "=== Blocking executable files inside zip/rar/tar archives in ClamAV"
         wget -nv -O $clamavfolder/foxhole_all.cdb http://c.myvestacp.com/tools/clamav/foxhole_all.cdb
         chown clamav:clamav $clamavfolder/foxhole_all.cdb
-        service clamav-daemon restart
     fi
     service clamav-daemon start
     check_result $? "clamav-daeom start failed"

From fe6cb1fbffbd887cb58cb4f0d4f08ed49ef8b7fd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 13 Jun 2020 01:25:50 +0200
Subject: [PATCH 1048/2300] Checking php7.4 pool conf while deleting domain

---
 bin/v-delete-web-domain | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-delete-web-domain b/bin/v-delete-web-domain
index b4885ef3..75399766 100755
--- a/bin/v-delete-web-domain
+++ b/bin/v-delete-web-domain
@@ -87,6 +87,11 @@ if [ -f "$fpmconf" ]; then
     rm $fpmconf
     echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
 fi
+fpmconf="/etc/php/7.4/fpm/pool.d/$domain.conf"
+if [ -f "$fpmconf" ]; then
+    rm $fpmconf
+    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
+fi
 
 # Deleting domain from web.conf
 sed -i "/DOMAIN='$domain'/ d" $USER_DATA/web.conf

From 473aab08152c9d00b932a7890695be8e0118111f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 13 Jun 2020 01:27:02 +0200
Subject: [PATCH 1049/2300] vesta-0.9.8-26-22

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 9e225905..faf2f38e 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-21
+vesta-0.9.8-26-22

From 9021e29b01547a6bb06c53fd6292950ce8b6c378 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Jun 2020 02:02:46 +0200
Subject: [PATCH 1050/2300] Notification for LetsEncrypt

---
 web/templates/admin/add_web.html | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/web/templates/admin/add_web.html b/web/templates/admin/add_web.html
index 3e0478ce..02265380 100644
--- a/web/templates/admin/add_web.html
+++ b/web/templates/admin/add_web.html
@@ -141,6 +141,11 @@
                                       </td>
                                   </tr>
                                   -->
+                                  <tr>
+                                      <td class="vst-text input-label lets-encrypt-note step-left" >
+                                          <?= __('You can add LetsEncrypt after adding domain, just EDIT this domain')?>
+                                      </td>
+                                  </tr>
                                   <tr>
                                         <td class="vst-text input-label step-left">
                                             <?php print __('SSL Home Directory');?>

From a352722aa934297bd5939903ec185e01eb7d1e0a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Jun 2020 02:04:23 +0200
Subject: [PATCH 1051/2300] vesta-0.9.8-26-23

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index faf2f38e..81e25443 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-22
+vesta-0.9.8-26-23

From a3c147292a9d1527a719e21e3503b40d27b5b33e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Jun 2020 02:18:00 +0200
Subject: [PATCH 1052/2300] LetsEncrypt notification color

---
 web/templates/admin/add_web.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/templates/admin/add_web.html b/web/templates/admin/add_web.html
index 02265380..d874be32 100644
--- a/web/templates/admin/add_web.html
+++ b/web/templates/admin/add_web.html
@@ -142,8 +142,8 @@
                                   </tr>
                                   -->
                                   <tr>
-                                      <td class="vst-text input-label lets-encrypt-note step-left" >
-                                          <?= __('You can add LetsEncrypt after adding domain, just EDIT this domain')?>
+                                      <td class="vst-text input-label step-left" >
+                                          <span style="color: gray;"><?= __('You can add LetsEncrypt after adding domain, just EDIT this domain later')?></span>
                                       </td>
                                   </tr>
                                   <tr>

From b6295098a259d470ab80f6ba88023e8edc0c894f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Jun 2020 14:25:53 +0200
Subject: [PATCH 1053/2300] More features

---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index 915c2348..c92d23ae 100644
--- a/README.md
+++ b/README.md
@@ -39,6 +39,10 @@ Features of myVesta
 
 + You can change Vesta port during installation or later using one command line: **v-change-vesta-port [number]**
 
++ ClamAV is configured to block zip/rar/7z archives that contains executable files (just like GMail)
+
++ Backup will run with lowest priority (to avoid load on server), and can be configured to run only by night (and to stop on the morning and continue next night)
+
 + You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
     + You can even create your own APT repository in a minute
     + We are using latest nginx version for vesta-nginx package

From 1de5f42e3f87fdbd0111a33003e40cd325ccafe3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 19 Jun 2020 01:53:53 +0200
Subject: [PATCH 1054/2300] Update README.md

---
 README.md | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/README.md b/README.md
index c92d23ae..3ff9c929 100644
--- a/README.md
+++ b/README.md
@@ -1,3 +1,15 @@
+News
+==================================================
+
+Forum:
+- https://forum.myvestacp.com/
+
+Wiki:
+- https://wiki.myvestacp.com/
+
+And we finally have normal homepage:
+- https://myvestacp.com/
+
 myVesta Control Panel
 ==================================================
 

From f3584d3a74eea73e424540db8fac6dee4ea23ba2 Mon Sep 17 00:00:00 2001
From: Adam Radivojevic <37140262+adam993@users.noreply.github.com>
Date: Sat, 20 Jun 2020 08:47:52 +0200
Subject: [PATCH 1055/2300] Update cpanel-import.sh

---
 src/deb/for-download/tools/cpanel-import.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/cpanel-import.sh b/src/deb/for-download/tools/cpanel-import.sh
index 04d4f3c2..fc3c7352 100644
--- a/src/deb/for-download/tools/cpanel-import.sh
+++ b/src/deb/for-download/tools/cpanel-import.sh
@@ -26,7 +26,7 @@ if [[ $PATH != *"/usr/local/vesta/bin"* ]]; then
 fi
 if [ ! -e /usr/bin/rsync ] || [ ! -e /usr/bin/file ] ; then
 	echo "#######################################"
-	echo "rsync not installed, try install it"
+	echo "rsync not installed, try installing it"
 	echo "This script need: rsync, file"
 	echo "#######################################"
 	if  [ -e /etc/redhat-release ]; then

From 8203fbca22c085f9dd7fb463fd5356841b8fd377 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 21 Jun 2020 23:34:16 +0200
Subject: [PATCH 1056/2300] Fixing nginx+php-fpm installer variant

---
 install/vst-install-debian.sh | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 4a7ea0b6..597617b1 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -980,7 +980,12 @@ fi
 #----------------------------------------------------------#
 
 if [ "$phpfpm" = 'yes' ]; then
-    if [ "$release" -eq 9 ]; then
+    if [ "$release" -eq 10 ]; then
+        cp -f $vestacp/php-fpm/www.conf /etc/php/7.3/fpm/pool.d/www.conf
+        update-rc.d php7.3-fpm defaults
+        service php7.3-fpm start
+        check_result $? "php-fpm start failed"
+    elif [ "$release" -eq 9 ]; then
         cp -f $vestacp/php-fpm/www.conf /etc/php/7.0/fpm/pool.d/www.conf
         update-rc.d php7.0-fpm defaults
         service php7.0-fpm start

From a4b65c07aec47e45a1f94b3ffcd3edf9193a1540 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 21 Jun 2020 23:43:36 +0200
Subject: [PATCH 1057/2300] Checking official latest version

---
 bin/v-update-sys-vesta-all | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-update-sys-vesta-all b/bin/v-update-sys-vesta-all
index 75bc036f..5a42a0c0 100755
--- a/bin/v-update-sys-vesta-all
+++ b/bin/v-update-sys-vesta-all
@@ -21,6 +21,10 @@ source $VESTA/conf/vesta.conf
 #                       Action                             #
 #----------------------------------------------------------#
 
+
+# Checking official latest version
+latest=$(wget -q -T 10 -t 1 http://c.myvestacp.com/latest.txt?check_latest -O -)
+
 # Starting update loop
 for package in vesta vesta-nginx vesta-php; do
     $BIN/v-update-sys-vesta "$package"

From a4f1224f99e341a10856a936cb23c22ed8505455 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 22 Jun 2020 00:01:10 +0200
Subject: [PATCH 1058/2300] Update latest.txt

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 81e25443..8d35043e 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-23
+vesta-0.9.8-26-24

From 552f64270433b854a43957bca889304897071eb8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 22 Jun 2020 00:13:15 +0200
Subject: [PATCH 1059/2300] Fixing nginx+php-fpm installer variant

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 597617b1..c4bce902 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -801,7 +801,7 @@ if [ "$apache" = 'no' ] && [ "$nginx"  = 'yes' ]; then
     echo "WEB_PORT='80'" >> $VESTA/conf/vesta.conf
     echo "WEB_SSL_PORT='443'" >> $VESTA/conf/vesta.conf
     echo "WEB_SSL='openssl'"  >> $VESTA/conf/vesta.conf
-    if [ "$release" -eq 9 ]; then
+    if [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
         if [ "$phpfpm" = 'yes' ]; then
             echo "WEB_BACKEND='php-fpm'" >> $VESTA/conf/vesta.conf
         fi

From 094eb3a31b52f1ef85f1b0856d69b628a648d3dc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 22 Jun 2020 00:34:51 +0200
Subject: [PATCH 1060/2300]  Fixing nginx+php-fpm installer variant

---
 install/vst-install-debian.sh | 25 +++++++++++++++----------
 1 file changed, 15 insertions(+), 10 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index c4bce902..864d25b6 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -871,17 +871,22 @@ cp -rf $vestacp/packages $VESTA/data/
 # Installing templates
 cp -rf $vestacp/templates $VESTA/data/
 
-# Symlink missing templates
-ln -s /usr/local/vesta/data/templates/web/nginx/hosting.sh /usr/local/vesta/data/templates/web/nginx/default.sh
-ln -s /usr/local/vesta/data/templates/web/nginx/hosting.tpl /usr/local/vesta/data/templates/web/nginx/default.tpl
-ln -s /usr/local/vesta/data/templates/web/nginx/hosting.stpl /usr/local/vesta/data/templates/web/nginx/default.stpl
+if [ "$release" -eq 10 ]; then
+    # Symlink missing templates
+    ln -s /usr/local/vesta/data/templates/web/nginx/hosting.sh /usr/local/vesta/data/templates/web/nginx/default.sh
+    ln -s /usr/local/vesta/data/templates/web/nginx/hosting.tpl /usr/local/vesta/data/templates/web/nginx/default.tpl
+    ln -s /usr/local/vesta/data/templates/web/nginx/hosting.stpl /usr/local/vesta/data/templates/web/nginx/default.stpl
 
-ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh /usr/local/vesta/data/templates/web/apache2/hosting.sh
-ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl /usr/local/vesta/data/templates/web/apache2/hosting.tpl
-ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.stpl /usr/local/vesta/data/templates/web/apache2/hosting.stpl
-ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh /usr/local/vesta/data/templates/web/apache2/default.sh
-ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl /usr/local/vesta/data/templates/web/apache2/default.tpl
-ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.stpl /usr/local/vesta/data/templates/web/apache2/default.stpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh /usr/local/vesta/data/templates/web/apache2/hosting.sh
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl /usr/local/vesta/data/templates/web/apache2/hosting.tpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.stpl /usr/local/vesta/data/templates/web/apache2/hosting.stpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh /usr/local/vesta/data/templates/web/apache2/default.sh
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl /usr/local/vesta/data/templates/web/apache2/default.tpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.stpl /usr/local/vesta/data/templates/web/apache2/default.stpl
+    
+    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.stpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-73.stpl
+    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.tpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-73.tpl
+fi
 
 # Set nameservers
 sed -i "s/YOURHOSTNAME1/ns1.$servername/" /usr/local/vesta/data/packages/default.pkg

From b6cadcd9923c5337380efd59da5cbb689293300c Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 23 Jun 2020 18:01:38 +0200
Subject: [PATCH 1061/2300] Fixing unnecessary slash in nginx configs for
 phpmyadmin and roundcube

---
 install/debian/7/nginx/phpmyadmin.inc     | 2 +-
 install/debian/7/nginx/phppgadmin.inc     | 2 +-
 install/debian/7/nginx/webmail.inc        | 2 +-
 install/debian/8/nginx/phpmyadmin.inc     | 2 +-
 install/debian/8/nginx/phppgadmin.inc     | 2 +-
 install/debian/8/nginx/webmail.inc        | 2 +-
 install/debian/9/nginx/phpmyadmin.inc     | 2 +-
 install/debian/9/nginx/phppgadmin.inc     | 2 +-
 install/debian/9/nginx/webmail.inc        | 2 +-
 install/rhel/5/nginx/phpmyadmin.inc       | 2 +-
 install/rhel/5/nginx/phppgadmin.inc       | 2 +-
 install/rhel/5/nginx/webmail.inc          | 2 +-
 install/rhel/6/nginx/phpmyadmin.inc       | 2 +-
 install/rhel/6/nginx/phppgadmin.inc       | 2 +-
 install/rhel/6/nginx/webmail.inc          | 2 +-
 install/rhel/7/nginx/phpmyadmin.inc       | 2 +-
 install/rhel/7/nginx/phppgadmin.inc       | 2 +-
 install/rhel/7/nginx/webmail.inc          | 2 +-
 install/ubuntu/12.04/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/12.04/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/12.04/nginx/webmail.inc    | 2 +-
 install/ubuntu/12.10/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/12.10/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/12.10/nginx/webmail.inc    | 2 +-
 install/ubuntu/13.04/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/13.04/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/13.04/nginx/webmail.inc    | 2 +-
 install/ubuntu/13.10/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/13.10/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/13.10/nginx/webmail.inc    | 2 +-
 install/ubuntu/14.04/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/14.04/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/14.04/nginx/webmail.inc    | 2 +-
 install/ubuntu/14.10/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/14.10/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/14.10/nginx/webmail.inc    | 2 +-
 install/ubuntu/15.04/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/15.04/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/15.04/nginx/webmail.inc    | 2 +-
 install/ubuntu/15.10/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/15.10/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/15.10/nginx/webmail.inc    | 2 +-
 install/ubuntu/16.04/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/16.04/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/16.04/nginx/webmail.inc    | 2 +-
 install/ubuntu/16.10/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/16.10/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/16.10/nginx/webmail.inc    | 2 +-
 install/ubuntu/17.04/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/17.04/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/17.04/nginx/webmail.inc    | 2 +-
 install/ubuntu/17.10/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/17.10/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/17.10/nginx/webmail.inc    | 2 +-
 install/ubuntu/18.04/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/18.04/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/18.04/nginx/webmail.inc    | 2 +-
 install/ubuntu/18.10/nginx/phpmyadmin.inc | 2 +-
 install/ubuntu/18.10/nginx/phppgadmin.inc | 2 +-
 install/ubuntu/18.10/nginx/webmail.inc    | 2 +-
 60 files changed, 60 insertions(+), 60 deletions(-)

diff --git a/install/debian/7/nginx/phpmyadmin.inc b/install/debian/7/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/debian/7/nginx/phpmyadmin.inc
+++ b/install/debian/7/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/debian/7/nginx/phppgadmin.inc b/install/debian/7/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/debian/7/nginx/phppgadmin.inc
+++ b/install/debian/7/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/debian/7/nginx/webmail.inc b/install/debian/7/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/debian/7/nginx/webmail.inc
+++ b/install/debian/7/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/debian/8/nginx/phpmyadmin.inc b/install/debian/8/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/debian/8/nginx/phpmyadmin.inc
+++ b/install/debian/8/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/debian/8/nginx/phppgadmin.inc b/install/debian/8/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/debian/8/nginx/phppgadmin.inc
+++ b/install/debian/8/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/debian/8/nginx/webmail.inc b/install/debian/8/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/debian/8/nginx/webmail.inc
+++ b/install/debian/8/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/debian/9/nginx/phpmyadmin.inc b/install/debian/9/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/debian/9/nginx/phpmyadmin.inc
+++ b/install/debian/9/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/debian/9/nginx/phppgadmin.inc b/install/debian/9/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/debian/9/nginx/phppgadmin.inc
+++ b/install/debian/9/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/debian/9/nginx/webmail.inc b/install/debian/9/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/debian/9/nginx/webmail.inc
+++ b/install/debian/9/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/rhel/5/nginx/phpmyadmin.inc b/install/rhel/5/nginx/phpmyadmin.inc
index efd6f4c4..ee003007 100644
--- a/install/rhel/5/nginx/phpmyadmin.inc
+++ b/install/rhel/5/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpMyAdmin/;
+    alias /usr/share/phpMyAdmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/rhel/5/nginx/phppgadmin.inc b/install/rhel/5/nginx/phppgadmin.inc
index 333e560a..61dea1c9 100644
--- a/install/rhel/5/nginx/phppgadmin.inc
+++ b/install/rhel/5/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phpPgAdmin/;
+    alias /usr/share/phpPgAdmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phpPgAdmin/$1;
diff --git a/install/rhel/5/nginx/webmail.inc b/install/rhel/5/nginx/webmail.inc
index 2d0fbe29..d9cc181d 100644
--- a/install/rhel/5/nginx/webmail.inc
+++ b/install/rhel/5/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /usr/share/roundcubemail/;
+    alias /usr/share/roundcubemail;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/rhel/6/nginx/phpmyadmin.inc b/install/rhel/6/nginx/phpmyadmin.inc
index 9c5a6882..122823d7 100644
--- a/install/rhel/6/nginx/phpmyadmin.inc
+++ b/install/rhel/6/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpMyAdmin/;
+    alias /usr/share/phpMyAdmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/rhel/6/nginx/phppgadmin.inc b/install/rhel/6/nginx/phppgadmin.inc
index 333e560a..61dea1c9 100644
--- a/install/rhel/6/nginx/phppgadmin.inc
+++ b/install/rhel/6/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phpPgAdmin/;
+    alias /usr/share/phpPgAdmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phpPgAdmin/$1;
diff --git a/install/rhel/6/nginx/webmail.inc b/install/rhel/6/nginx/webmail.inc
index 2d0fbe29..d9cc181d 100644
--- a/install/rhel/6/nginx/webmail.inc
+++ b/install/rhel/6/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /usr/share/roundcubemail/;
+    alias /usr/share/roundcubemail;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/rhel/7/nginx/phpmyadmin.inc b/install/rhel/7/nginx/phpmyadmin.inc
index 457ee11c..79e17c58 100644
--- a/install/rhel/7/nginx/phpmyadmin.inc
+++ b/install/rhel/7/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpMyAdmin/;
+    alias /usr/share/phpMyAdmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/rhel/7/nginx/phppgadmin.inc b/install/rhel/7/nginx/phppgadmin.inc
index 333e560a..61dea1c9 100644
--- a/install/rhel/7/nginx/phppgadmin.inc
+++ b/install/rhel/7/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phpPgAdmin/;
+    alias /usr/share/phpPgAdmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phpPgAdmin/$1;
diff --git a/install/rhel/7/nginx/webmail.inc b/install/rhel/7/nginx/webmail.inc
index 123e4af5..63679d35 100644
--- a/install/rhel/7/nginx/webmail.inc
+++ b/install/rhel/7/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /usr/share/roundcubemail/;
+    alias /usr/share/roundcubemail;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/12.04/nginx/phpmyadmin.inc b/install/ubuntu/12.04/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/12.04/nginx/phpmyadmin.inc
+++ b/install/ubuntu/12.04/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/12.04/nginx/phppgadmin.inc b/install/ubuntu/12.04/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/12.04/nginx/phppgadmin.inc
+++ b/install/ubuntu/12.04/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/12.04/nginx/webmail.inc b/install/ubuntu/12.04/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/12.04/nginx/webmail.inc
+++ b/install/ubuntu/12.04/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/12.10/nginx/phpmyadmin.inc b/install/ubuntu/12.10/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/12.10/nginx/phpmyadmin.inc
+++ b/install/ubuntu/12.10/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/12.10/nginx/phppgadmin.inc b/install/ubuntu/12.10/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/12.10/nginx/phppgadmin.inc
+++ b/install/ubuntu/12.10/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/12.10/nginx/webmail.inc b/install/ubuntu/12.10/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/12.10/nginx/webmail.inc
+++ b/install/ubuntu/12.10/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/13.04/nginx/phpmyadmin.inc b/install/ubuntu/13.04/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/13.04/nginx/phpmyadmin.inc
+++ b/install/ubuntu/13.04/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/13.04/nginx/phppgadmin.inc b/install/ubuntu/13.04/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/13.04/nginx/phppgadmin.inc
+++ b/install/ubuntu/13.04/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/13.04/nginx/webmail.inc b/install/ubuntu/13.04/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/13.04/nginx/webmail.inc
+++ b/install/ubuntu/13.04/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/13.10/nginx/phpmyadmin.inc b/install/ubuntu/13.10/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/13.10/nginx/phpmyadmin.inc
+++ b/install/ubuntu/13.10/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/13.10/nginx/phppgadmin.inc b/install/ubuntu/13.10/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/13.10/nginx/phppgadmin.inc
+++ b/install/ubuntu/13.10/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/13.10/nginx/webmail.inc b/install/ubuntu/13.10/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/13.10/nginx/webmail.inc
+++ b/install/ubuntu/13.10/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/14.04/nginx/phpmyadmin.inc b/install/ubuntu/14.04/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/14.04/nginx/phpmyadmin.inc
+++ b/install/ubuntu/14.04/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/14.04/nginx/phppgadmin.inc b/install/ubuntu/14.04/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/14.04/nginx/phppgadmin.inc
+++ b/install/ubuntu/14.04/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/14.04/nginx/webmail.inc b/install/ubuntu/14.04/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/14.04/nginx/webmail.inc
+++ b/install/ubuntu/14.04/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/14.10/nginx/phpmyadmin.inc b/install/ubuntu/14.10/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/14.10/nginx/phpmyadmin.inc
+++ b/install/ubuntu/14.10/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/14.10/nginx/phppgadmin.inc b/install/ubuntu/14.10/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/14.10/nginx/phppgadmin.inc
+++ b/install/ubuntu/14.10/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/14.10/nginx/webmail.inc b/install/ubuntu/14.10/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/14.10/nginx/webmail.inc
+++ b/install/ubuntu/14.10/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/15.04/nginx/phpmyadmin.inc b/install/ubuntu/15.04/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/15.04/nginx/phpmyadmin.inc
+++ b/install/ubuntu/15.04/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/15.04/nginx/phppgadmin.inc b/install/ubuntu/15.04/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/15.04/nginx/phppgadmin.inc
+++ b/install/ubuntu/15.04/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/15.04/nginx/webmail.inc b/install/ubuntu/15.04/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/15.04/nginx/webmail.inc
+++ b/install/ubuntu/15.04/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/15.10/nginx/phpmyadmin.inc b/install/ubuntu/15.10/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/15.10/nginx/phpmyadmin.inc
+++ b/install/ubuntu/15.10/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/15.10/nginx/phppgadmin.inc b/install/ubuntu/15.10/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/15.10/nginx/phppgadmin.inc
+++ b/install/ubuntu/15.10/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/15.10/nginx/webmail.inc b/install/ubuntu/15.10/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/15.10/nginx/webmail.inc
+++ b/install/ubuntu/15.10/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/16.04/nginx/phpmyadmin.inc b/install/ubuntu/16.04/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/16.04/nginx/phpmyadmin.inc
+++ b/install/ubuntu/16.04/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/16.04/nginx/phppgadmin.inc b/install/ubuntu/16.04/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/16.04/nginx/phppgadmin.inc
+++ b/install/ubuntu/16.04/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/16.04/nginx/webmail.inc b/install/ubuntu/16.04/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/16.04/nginx/webmail.inc
+++ b/install/ubuntu/16.04/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/16.10/nginx/phpmyadmin.inc b/install/ubuntu/16.10/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/16.10/nginx/phpmyadmin.inc
+++ b/install/ubuntu/16.10/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/16.10/nginx/phppgadmin.inc b/install/ubuntu/16.10/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/16.10/nginx/phppgadmin.inc
+++ b/install/ubuntu/16.10/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/16.10/nginx/webmail.inc b/install/ubuntu/16.10/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/16.10/nginx/webmail.inc
+++ b/install/ubuntu/16.10/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/17.04/nginx/phpmyadmin.inc b/install/ubuntu/17.04/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/17.04/nginx/phpmyadmin.inc
+++ b/install/ubuntu/17.04/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/17.04/nginx/phppgadmin.inc b/install/ubuntu/17.04/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/17.04/nginx/phppgadmin.inc
+++ b/install/ubuntu/17.04/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/17.04/nginx/webmail.inc b/install/ubuntu/17.04/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/17.04/nginx/webmail.inc
+++ b/install/ubuntu/17.04/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/17.10/nginx/phpmyadmin.inc b/install/ubuntu/17.10/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/17.10/nginx/phpmyadmin.inc
+++ b/install/ubuntu/17.10/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/17.10/nginx/phppgadmin.inc b/install/ubuntu/17.10/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/17.10/nginx/phppgadmin.inc
+++ b/install/ubuntu/17.10/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/17.10/nginx/webmail.inc b/install/ubuntu/17.10/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/17.10/nginx/webmail.inc
+++ b/install/ubuntu/17.10/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/18.04/nginx/phpmyadmin.inc b/install/ubuntu/18.04/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/18.04/nginx/phpmyadmin.inc
+++ b/install/ubuntu/18.04/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/18.04/nginx/phppgadmin.inc b/install/ubuntu/18.04/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/18.04/nginx/phppgadmin.inc
+++ b/install/ubuntu/18.04/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/18.04/nginx/webmail.inc b/install/ubuntu/18.04/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/18.04/nginx/webmail.inc
+++ b/install/ubuntu/18.04/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;
diff --git a/install/ubuntu/18.10/nginx/phpmyadmin.inc b/install/ubuntu/18.10/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/ubuntu/18.10/nginx/phpmyadmin.inc
+++ b/install/ubuntu/18.10/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/ubuntu/18.10/nginx/phppgadmin.inc b/install/ubuntu/18.10/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/ubuntu/18.10/nginx/phppgadmin.inc
+++ b/install/ubuntu/18.10/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/ubuntu/18.10/nginx/webmail.inc b/install/ubuntu/18.10/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/ubuntu/18.10/nginx/webmail.inc
+++ b/install/ubuntu/18.10/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;

From c862bd9aff72c0cadfd1d2b22810f31e68899458 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 23 Jun 2020 18:18:30 +0200
Subject: [PATCH 1062/2300] Fixing unnecessary slash in nginx configs for
 phpmyadmin and roundcube

---
 install/debian/10/nginx/phpmyadmin.inc | 2 +-
 install/debian/10/nginx/phppgadmin.inc | 2 +-
 install/debian/10/nginx/webmail.inc    | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/debian/10/nginx/phpmyadmin.inc b/install/debian/10/nginx/phpmyadmin.inc
index 1feb8546..cdfc93c4 100644
--- a/install/debian/10/nginx/phpmyadmin.inc
+++ b/install/debian/10/nginx/phpmyadmin.inc
@@ -1,5 +1,5 @@
 location /phpmyadmin {
-    alias /usr/share/phpmyadmin/;
+    alias /usr/share/phpmyadmin;
 
     location ~ /(libraries|setup) {
         return 404;
diff --git a/install/debian/10/nginx/phppgadmin.inc b/install/debian/10/nginx/phppgadmin.inc
index cd1e5806..47cfcf4e 100644
--- a/install/debian/10/nginx/phppgadmin.inc
+++ b/install/debian/10/nginx/phppgadmin.inc
@@ -1,5 +1,5 @@
 location /phppgadmin {
-    alias /usr/share/phppgadmin/;
+    alias /usr/share/phppgadmin;
 
     location ~ ^/phppgadmin/(.*\.php)$ {
         alias /usr/share/phppgadmin/$1;
diff --git a/install/debian/10/nginx/webmail.inc b/install/debian/10/nginx/webmail.inc
index ad66895b..768c9049 100644
--- a/install/debian/10/nginx/webmail.inc
+++ b/install/debian/10/nginx/webmail.inc
@@ -1,5 +1,5 @@
 location /webmail {
-    alias /var/lib/roundcube/;
+    alias /var/lib/roundcube;
 
     location ~ /(config|temp|logs) {
         return 404;

From c377e19df851aec6758a072f3f2f31d48b18d059 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 23 Jun 2020 19:06:25 +0200
Subject: [PATCH 1063/2300] Adding escapeshellarg on few more places in php
 code

---
 web/edit/server/index.php    | 2 +-
 web/list/directory/index.php | 2 +-
 web/list/dns/index.php       | 4 ++--
 web/list/mail/index.php      | 4 ++--
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/web/edit/server/index.php b/web/edit/server/index.php
index 0743ab17..49c577d8 100644
--- a/web/edit/server/index.php
+++ b/web/edit/server/index.php
@@ -356,7 +356,7 @@ if (!empty($_POST['save'])) {
     // Change remote backup host type
     if (empty($_SESSION['error_msg'])) {
         if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] != $v_backup_type)) {
-            exec (VESTA_CMD."v-delete-backup-host ". $v_backup_type, $output, $return_var);
+            exec (VESTA_CMD."v-delete-backup-host " . escapeshellarg($v_backup_type), $output, $return_var);
             unset($output);
 
             $v_backup_host = escapeshellarg($_POST['v_backup_host']);
diff --git a/web/list/directory/index.php b/web/list/directory/index.php
index 12919b14..7a57566c 100644
--- a/web/list/directory/index.php
+++ b/web/list/directory/index.php
@@ -15,7 +15,7 @@ if (($_SESSION['user'] == 'admin') && (!empty($_SESSION['look']))) {
 }
 
 if (empty($panel)) {
-    $command = VESTA_CMD."v-list-user '".$user."' 'json'";
+    $command = VESTA_CMD."v-list-user ".escapeshellarg($user)." 'json'";
     exec ($command, $output, $return_var);
     if ( $return_var > 0 ) {
         header("Location: /error/");
diff --git a/web/list/dns/index.php b/web/list/dns/index.php
index c98b8e47..53d5980c 100644
--- a/web/list/dns/index.php
+++ b/web/list/dns/index.php
@@ -7,14 +7,14 @@ include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
 // Data & Render page
 if (empty($_GET['domain'])){
-    exec (VESTA_CMD."v-list-dns-domains $user json", $output, $return_var);
+    exec (VESTA_CMD."v-list-dns-domains ".escapeshellarg($user)." json", $output, $return_var);
     $data = json_decode(implode('', $output), true);
     $data = array_reverse($data, true);
     unset($output);
 
     render_page($user, $TAB, 'list_dns');
 } else {
-    exec (VESTA_CMD."v-list-dns-records ".$user." ".escapeshellarg($_GET['domain'])." json", $output, $return_var);
+    exec (VESTA_CMD."v-list-dns-records ".escapeshellarg($user)." ".escapeshellarg($_GET['domain'])." json", $output, $return_var);
     $data = json_decode(implode('', $output), true);
     $data = array_reverse($data, true);
     unset($output);
diff --git a/web/list/mail/index.php b/web/list/mail/index.php
index 56c42a73..e389b3b1 100644
--- a/web/list/mail/index.php
+++ b/web/list/mail/index.php
@@ -7,14 +7,14 @@ include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
 // Data & Render page
 if (empty($_GET['domain'])){
-    exec (VESTA_CMD."v-list-mail-domains $user json", $output, $return_var);
+    exec (VESTA_CMD."v-list-mail-domains ".escapeshellarg($user)." json", $output, $return_var);
     $data = json_decode(implode('', $output), true);
     $data = array_reverse($data, true);
     unset($output);
 
     render_page($user, $TAB, 'list_mail');
 } else {
-    exec (VESTA_CMD."v-list-mail-accounts ".$user." ".escapeshellarg($_GET['domain'])." json", $output, $return_var);
+    exec (VESTA_CMD."v-list-mail-accounts ".escapeshellarg($user)." ".escapeshellarg($_GET['domain'])." json", $output, $return_var);
     $data = json_decode(implode('', $output), true);
     $data = array_reverse($data, true);
     unset($output);

From 6fa21d9c699ddb907c5d1e3be0fabc65ed805945 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 23 Jun 2020 19:12:33 +0200
Subject: [PATCH 1064/2300] vesta-0.9.8-26-25

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 8d35043e..a853309e 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-24
+vesta-0.9.8-26-25

From a9e46047e91a1683b61be7cb833584dff7da1d34 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 23 Jun 2020 20:04:30 +0200
Subject: [PATCH 1065/2300] Reset UPDATE_SSL_SCRIPT

---
 bin/v-add-web-domain-ssl | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-add-web-domain-ssl b/bin/v-add-web-domain-ssl
index 43e5cce3..2c0f78ae 100755
--- a/bin/v-add-web-domain-ssl
+++ b/bin/v-add-web-domain-ssl
@@ -143,6 +143,8 @@ if [ ! -z "$UPDATE_HOSTNAME_SSL" ] && [ "$UPDATE_HOSTNAME_SSL" = "yes" ]; then
     fi
 fi
 
+UPDATE_SSL_SCRIPT=''
+source $VESTA/conf/vesta.conf
 if [ ! -z "$UPDATE_SSL_SCRIPT" ]; then
     eval "$UPDATE_SSL_SCRIPT $user $domain"
 fi

From 8d9e349b23fe85bf496a71b3d6e235b27854efbf Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 23 Jun 2020 20:08:59 +0200
Subject: [PATCH 1066/2300] Dont match subdomains while restoring domain

---
 bin/v-restore-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index bd3d86bb..b1c0c65a 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -289,7 +289,7 @@ if [ "$web" != 'no' ] && [ ! -z "$WEB_SYSTEM" ]; then
     if [ -z "$web" ] || [ "$web" = '*' ]; then
         domains="$backup_domains"
     else
-        echo "$web" |tr ',' '\n' > $tmpdir/selected.txt
+        echo "$web" | tr ',' '\n' | sed -e "s/^/^/" > $tmpdir/selected.txt
         domains=$(echo "$backup_domains" |egrep -f $tmpdir/selected.txt)
     fi
 

From d9e9c643699309594e8769a44ea8dd6e1e22e245 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 23 Jun 2020 20:10:54 +0200
Subject: [PATCH 1067/2300] Fixing NS parameters in v-add-dns-on-web-alias

---
 bin/v-add-dns-on-web-alias | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-dns-on-web-alias b/bin/v-add-dns-on-web-alias
index a6a7272c..705594f3 100755
--- a/bin/v-add-dns-on-web-alias
+++ b/bin/v-add-dns-on-web-alias
@@ -55,7 +55,7 @@ if [ "$domain_lvl" -eq 1 ] || [ "${#top_domain}" -le '6' ]; then
 fi
 
 # Adding top-level domain and then its sub
-$BIN/v-add-dns-domain $user $top_domain $ip '' '' '' '' '' $restart >> /dev/null
+$BIN/v-add-dns-domain $user $top_domain $ip '' '' '' '' '' '' '' '' $restart >> /dev/null
 
 # Checking top-level domain
 if [ ! -e "$USER_DATA/dns/$top_domain.conf" ]; then

From 83d0b9ed90d41a173f9c5b0c34cf5303a118b81e Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 23 Jun 2020 20:14:55 +0200
Subject: [PATCH 1068/2300] Allow quick restarting of nginx

It can occur if domain has many aliases, and acme-challenge should be added many times

This fix will prevent this error:
```
May 14 21:39:08 server systemd[1]: nginx.service: Start request repeated too quickly.
May 14 21:39:08 server systemd[1]: nginx.service: Failed with result 'start-limit-hit'.
```
---
 bin/v-restart-proxy | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index 25ab20bf..1e5e98cb 100755
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -50,7 +50,9 @@ if [ -z "$PROXY_SYSTEM" ] || [ "$PROXY_SYSTEM" = 'remote' ]; then
 fi
 
 # Restart system
-service $PROXY_SYSTEM restart >/dev/null 2>&1
+# service $PROXY_SYSTEM restart >/dev/null 2>&1
+systemctl reset-failed $PROXY_SYSTEM
+systemctl restart $PROXY_SYSTEM > /dev/null 2>&1
 if [ $? -ne 0 ]; then
     send_email_report
     check_result $E_RESTART "$PROXY_SYSTEM restart failed"

From e0ebf729f337805bb0834621476ca14d70e77c50 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Tue, 23 Jun 2020 20:20:11 +0200
Subject: [PATCH 1069/2300] Avoid Let's Encrypt domain validation timeout

---
 bin/v-add-letsencrypt-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 59d51c61..0e9438ed 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -208,7 +208,7 @@ for auth in $authz; do
         if [ "$i" -gt 10 ]; then
             check_result $E_CONNECT "Let's Encrypt domain validation timeout"
         fi
-        sleep 1
+        sleep $((i*2))
     done
     if [ "$validation" = 'invalid' ]; then
         check_result $E_CONNECT "Let's Encrypt domain verification failed"

From 26e7f311c16238ede37cf1e7085fb5a3fd05e6ff Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 25 Jun 2020 11:47:24 +0200
Subject: [PATCH 1070/2300] Make backup once a week

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 864d25b6..50d880a5 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1482,7 +1482,7 @@ $VESTA/bin/v-add-cron-job 'admin' '30' '03' '*' '*' '*' "$command"
 command="sudo $VESTA/bin/v-update-sys-queue backup"
 $VESTA/bin/v-add-cron-job 'admin' '*/5' '*' '*' '*' '*' "$command"
 command="sudo $VESTA/bin/v-backup-users"
-$VESTA/bin/v-add-cron-job 'admin' '10' '05' '*' '*' '*' "$command"
+$VESTA/bin/v-add-cron-job 'admin' '10' '05' '*' '*' '6' "$command"
 command="sudo $VESTA/bin/v-update-user-stats"
 $VESTA/bin/v-add-cron-job 'admin' '20' '00' '*' '*' '*' "$command"
 command="sudo $VESTA/bin/v-update-sys-rrd"

From a3513a91871cb43d17ddc78060cf3482f5be31a7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 25 Jun 2020 12:59:39 +0200
Subject: [PATCH 1071/2300] Start backup at 01 AM

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 50d880a5..33ccfaf2 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1482,7 +1482,7 @@ $VESTA/bin/v-add-cron-job 'admin' '30' '03' '*' '*' '*' "$command"
 command="sudo $VESTA/bin/v-update-sys-queue backup"
 $VESTA/bin/v-add-cron-job 'admin' '*/5' '*' '*' '*' '*' "$command"
 command="sudo $VESTA/bin/v-backup-users"
-$VESTA/bin/v-add-cron-job 'admin' '10' '05' '*' '*' '6' "$command"
+$VESTA/bin/v-add-cron-job 'admin' '10' '01' '*' '*' '6' "$command"
 command="sudo $VESTA/bin/v-update-user-stats"
 $VESTA/bin/v-add-cron-job 'admin' '20' '00' '*' '*' '*' "$command"
 command="sudo $VESTA/bin/v-update-sys-rrd"

From 2108e0e32c5db6f0588cab422322b21ce7ba721d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 26 Jun 2020 13:23:22 +0200
Subject: [PATCH 1072/2300] Multi-PHP error for servers without Apache

---
 src/deb/for-download/tools/multi-php-install.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index ade0a464..895f80d2 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -13,6 +13,12 @@ inst_74=0
 
 #######################################################################
 
+check_grep=$(grep -c "WEB_SYSTEM='nginx'" /usr/local/vesta/conf/vesta.conf)
+if [ "$check_grep" -eq 1 ]; then
+    echo "Multi-PHP support is only for myVesta that is installed in nginx+Apache or Apache variant"
+    exit 1
+fi
+
 inst_repo=0
 debian_version=$(cat /etc/debian_version | tr "." "\n" | head -n1)
 

From b93623e865a995a9eb096b79d77fdefb9a128eb4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 27 Jun 2020 02:25:56 +0200
Subject: [PATCH 1073/2300] Introducing: v-install-unsigned-ssl DOMAIN

---
 bin/v-install-unsigned-ssl | 59 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 59 insertions(+)
 create mode 100644 bin/v-install-unsigned-ssl

diff --git a/bin/v-install-unsigned-ssl b/bin/v-install-unsigned-ssl
new file mode 100644
index 00000000..e0fdd46d
--- /dev/null
+++ b/bin/v-install-unsigned-ssl
@@ -0,0 +1,59 @@
+#!/bin/bash
+
+# Script will install unsigned SSL to desired domain
+
+if [ $# -lt 1 ]; then
+	echo "usage: v-install-unsigned-ssl DOMAIN"
+	exit 1
+fi
+
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+
+if [ ! -d "/home/$user" ]; then
+    echo "User doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    echo "Domain doesn't exist";
+    exit 1;
+fi
+
+email="info@$domain"
+
+TMPLOC="/home/$user/tmp/$domain"
+mkdir $TMPLOC
+
+# Generating SSL certificate
+/usr/local/vesta/bin/v-generate-ssl-cert $domain $email 'US' 'California' 'San Francisco' 'myVesta Control Panel' 'IT' "www.$domain" > $TMPLOC/vst.pem
+
+# Parsing certificate file
+crt_end=$(grep -n "END CERTIFICATE-" $TMPLOC/vst.pem |cut -f 1 -d:)
+key_start=$(grep -n "BEGIN RSA" $TMPLOC/vst.pem |cut -f 1 -d:)
+key_end=$(grep -n  "END RSA" $TMPLOC/vst.pem |cut -f 1 -d:)
+
+# Adding SSL certificate
+cd $TMPLOC
+sed -n "1,${crt_end}p" $TMPLOC/vst.pem > $TMPLOC/$domain.crt
+sed -n "$key_start,${key_end}p" $TMPLOC/vst.pem > $TMPLOC/$domain.key
+chmod 666 $TMPLOC/*
+
+source /usr/local/vesta/func/domain.sh
+
+USER_DATA="/usr/local/vesta/data/users/$user";
+get_domain_values 'web'
+
+if [[ $SSL == 'no' ]]
+then
+    #Configure SSL and install the cert
+    /usr/local/vesta/bin/v-add-web-domain-ssl $user $domain $TMPLOC
+else
+    #Replace the existing cert with the new one
+    /usr/local/vesta/bin/v-change-web-domain-sslcert $user $domain $TMPLOC
+fi
+
+rm -rf $TMPLOC
+
+exit 0

From daa9374f59cbb63ee92348eacef181b5dc44dd5d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 27 Jun 2020 02:27:59 +0200
Subject: [PATCH 1074/2300] favicon

---
 web/favicon.ico | Bin 6458 -> 15086 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/web/favicon.ico b/web/favicon.ico
index fad74c2a4ebe9b949d5c0893075e68ca79d54f68..231b61d2c39e4700f461a956ecc2f4199f5728b2 100644
GIT binary patch
literal 15086
zcmeI330Rdy`~RN<xUZF^X{J`bEm~SyW@Tuy9TZJ7ORdyU0g)X6wZhWG%yKJp7tUc5
zaRCL9?Q96HrCDZbxuRz7qJqH8?=$CUX|HDfd*ADSUB6%Fx`uh4d1mJR-uK*d&pr1H
znx@m7wT>M%^43~vTTOdT)3nyDuf8|dw4W(!Os>BByJ*@JDm+FVnrOpFs@(p2#F72;
z_a6!Tua!W8hm*F{-C6spr;9ev%~^|o#p%DrYyT9f3$V(X{&})NXuhmB#w?tNtQ1b+
zd7^Gup==VEFB=4yr1Nd*$9Htn5<MGg2Cr_U(OPn^=~`;<FSJDO&$R@vF<OG>Q`#ce
znz!xeFH{&dK{}625q3;|`Qq+yi|jwvBBn%IM0BWCbPhI)M<Oi3FVZT$7;6>phnhsk
zhdz<I={tmze}<?L7$<c%keT~}v$n*elNPU^su}dfno)lo{MFjB-cm~<H|T%S67(zK
ztEXmkuW>`$J9rspmQEoS@nD2m_(WJmf8_fV&;6pTVncM1I5*ZNN-2+zw8|M#HnBUZ
zNR-DEi(e_96=o8h!_C4y(k$MJED+Cy6o~qE($gPx(hMH%V9rF=7r-r$dxf^l=c1P8
zQ>LZ#s(=T{w+is5Y4Pr@?f~))RiXbtWRZxCDi&M8wi9_Lkye1cJZ6KGQAH%HID*Xg
z@LU;9*|-uZB5h(9d?mw25%u<vFAFt`R|X~SbI}&P^q`jLl?2X8a9-Ao-kafN9(YHS
zh9UQ*<R?k+z&ONv`D^oDcJO`!x|_d*mI#;OCRu;<I@vhfDm<XQIi^@vDQrBS0{?f&
z`WJ9siQXVCg58GRq{H9QaU0>GNL)bXyC^%r_o|o@+7*e@;TH5Nx4KP-m2<n+GWO5a
z8TE(J^G`|Lw51*oXi2V)IlI{FF?dq^oOkGwSAmw`_UO&g-dO5aBI<zI4UCh}=TCW_
z2fqE_s8;d@+i~PNkMj56WhHaK5N;B0BHI_>X(B0|wzDElB8GNW_^DQWGd5-DSms!(
zoE>JloYW`Vw5)B~djU=c_hvUD;B8rVC+2Qf#^f7^9x(<+uh+FjZnvGwp*GPDxvc=}
z$><_^7J7Sl{|2mw!E=<990JxLt7r}%Ly_}rQbYvvHKI_o2(yS6n7iJ=1>$AOqZyO0
zX?q~TTCpYEQno$PT7ELBsJc9+Nba3rlcPV_EF1hAepQgrvk~JmLrYR);C+dC@VRDi
zzxSqfuNFQMEu5g;E2^mKa8&Un8M)yC`ci%vdB!mh-eTVRp#$Ed){A??%%Ve-O~#Ka
zmWR=!gHcxbWu!@ZQ#Y0|%7^Dw)Q^V$KK<8k^nG;2<TVd1A9t=(#+PDH{<ku+_(}!s
z7y0HNeOO!aaszFt*Imr%M%q%h+S>eAb(--JXU5<)=JsCj3*=t_{#$xNZ?6^gN9T#h
z##-cv5rv0-d@gfw^`on%$d|Lyz6&WlH!#v7yMz66Fr|||M7EQew+Es&RLHT#mt}<Y
z%5Jc)V|+>-`Xa8NOY6tkE_TrpT!(}0F!W^&V;}j{s#$WBsq|vBtt#c&jD#o`W52Jk
zml?=-37AJ}OFi$`K6^w*n}^Y%0{c8pfsX{wZa0&Ec!6jRwy3BLGC#~#v8~6N)yL{2
z4ye)+-DR!h0Xw>^P6!-ZR5b@&r@$n@cp{29JS6Y?Upj#0k@WZFvl)wy56?fahwqmZ
zetWWsp9bb^TT(yitrF~wlA&};^eOw-iYY&i$UnO4t-Rg4n=g+z#5^uX#!^f6t|T3z
zUMjrw*9@L*z&s!P<yva56X=tl_QeZzuIC}3K-5N$U&lV|K@Vi8txP<hVW_BS=nXwj
zsTtgkKbSUtRjBoXZG4HWRC5^JtsGTwY;W82$$OlQ)HApt*H<sKTQPl?zv<WSnKu{E
z`!ms2v9HfM>%qHI{jS*iLJyo1`=vg!YGJ=HQ<>2{YwhLwDQ`>lO=s*?txN8G37cAu
z&AdX|1rHySzU28NdUTGpZVGew?(6Z7G>LlQHW2{56XU=ZYAq98GmVus4Sm4n1%8jJ
z2FXKz?Y+*tFS@Ae4EE&mxFWf~f6m6#n#R61WCfpkFnCE9W8c!ws~4n<wN!qFt(g*S
ztDf(kz4lPU)M51FDZyHC|FW^cF;-bW%6xI=3z^1>T1f-I?p1wv^2mL6rHmYpykoJQ
zJHcCl+)tucKhghX#-|KCbG3N4rq|;imM`jJ`}(01+mP!;@So|ldf{;wqfey+zg~@b
zb?fEtmHHMO$!5+aj<?CECs)iEr89VLwPR28MqZ>O{T0R`xBc?T9+8Ej=>*%AUR~E1
zHr7oU0!B}HZ))J#7c-I~KiVLhhnvp~e`@vYT{V+lqkr$pmTA$}o|ze48z<=RW-ai7
zb}E?9*md8i)-l#%qkc7O*@M^cV+R{!SNbyVl#Sm3Hj}^UWZVO3F-FGng2JXV&=%Q3
zr>te#xCO&=cRpeKMmBUw>;nz`ZoA$Zy|=SwTG3tf#Ot({@Jg_@xM|I4n|^K5a(T@B
z8cF@Dk+DDz&%BlQgBkwkM3~Nv0<*y>vG;lB#9r0yR(^hHWWkYH@7rXj?#okZBj<<V
z;S>5lZs#G<y9#=R;D1Qr4>pNf*bz5y=c3c6(I2&rn!_#CFFG4~y{awqKI)v<N7hb!
zL%3iw9CBbiNpSPg7C7O*=-uu3Q}9!gyw^i33O(Iu_hpQF3p(Ac&Vs%!&MAFAR%N;b
zPx)wiT*WBU(aYnD)w)uV^LYBSCFs=w@XHRX=2QpT&ioQ>l{16P!XaaW$0NwYfE+Jf
zmD65riB~&2eq_)38ic(#ZnqW1LPi&h-K;74#z})bb!ojz75*kE0q2`83;M;$*b954
zuOzJl+cRKS^8b<frts%M=M{LE44>ub??s+JM}{r66y{utw{$}PJFJ>511+bdnrBhg
zs#4cAE5X+5J6)1qKDaza`dSZOL5H)0O;sHfM&?3o`tgNMshv)u_Yv?vr9Lrd>m%>M
z;Qs;qRnho2F&o7u@W1Pmoxh}h>d-RuLDo$f{C(5ZkOexU_d&Z1k`y+5GW~vxTz)~e
z3V%Mdp41XNTq)n|kd=N9^`^qlT6mVu2G8p5Ytt{r6p73DQWeoQY3-9;G!$NQm^X}b
zf9btG|3av_d_HSUYlYGNGkA7{&Ue^Pr2|J;=Q^o!k3{Jd%z71RmUH3bAZZ6{X4H6#
z3?6R!=~(mhNP*3k*oQ;SQzGM>483Q8>#ReMumy?UC!k%WrQok8d#}WoZ>cTp(E$CN
zVwb<t*F^8rJlp4ylfmn3*9>FMIB-K}AM5fb0r@-srAz2FhdLEb%+c1%CzSfEE%Z&>
zCV#i_@op{nzS&Mk+0g{A!K`m}LJDPVe3s|w>nnV)Evx}w1Q&_+<E+xp&vNv%T6=Z)
zugtyk_oW2I)sBC)BeFHX1G;FJ1@oG@o!Yw^{g{KlQp+x{c=zX!`#Q!2T~l-4Zab9y
z-1V>YDd90TIRjbkXWWbNg(B`x4PzWV4=GvIP8wL&eNCF-J)7(>dxLcNqVaC`Ux)t;
zV-ct&_G}n#mXEWB&Sb4Q%6OKsetnNmGh&=sb|0Sq^SVb@#9eY?Ua_uRu3;Q7v*u!-
zhUiEa+GoJSIXgCoe}0%fV1Tyts_&c7y(U;+M`yNC$H7CglCM{)cUIv9){ag1(-r7z
zIey)aKH1jU^->1yu&?!reZ)&^Q%?mH{u()XgCsJ<&yHVTa#jD&Y6kByTC!)u2%G4E
z916iNlz)!>xr9$ME7mGo_RrlE);j(DQf0G|%_+t>R<}rBPy4C|`)ZFTDVvJUZUo;(
z#^fVpPbBKPpRs!#%6l^o>CnXo_F7dZvA0`<<%&Nx`VjJxcA7SMB9wLPxy&Wz7R$q`
z+pL%%hZO9(qI4@_gS^k)qv4f%kVh(Gj6UnnxqRgjRx8e}aYT{mfbJ}gW<SDy4_{F1
z2mcu6a{Cd5M;E-XCh=_3v_RP+Eo}EA%RhRv{qmU({aDDpHQv1mW6>6y{|NfnL|gbQ
z(X&7N;@z>~UM;apkK(sI_&}Pz_P8R^6`I+|y$qTsk>8pKOSMmc`Im`)=EDaAZO6{z
zXYYux$U!5DL|uE2OI+(fV>tM2tRcB~#dd$~@xEQ^g%yf==)BseB-7_!Y-w6Zp6JB;
zfUz5@4u=(86hTENWw7nckHMyk1A_~zYX1S@9lee&sH%aF_%w8uKyM#(Qqb2P?5*#K
zw8=LZmpp7z5q`&*QLNp+bw00?PFwm)UG%G&(}EsNo4?VqL6>&zou2tt>Vj?JVfvYc
z91f9o()U>QP5z8;>G+LOPS_{~J{x-u>El}{Z@c&Tjpj`r@KGKE_e^B3Y+cz{v&g`H
zJOj-a*(;|}{tM+l!egX=foyV<E^a6aGKo6KzYp!cW)7%*cQxzRcGlz&=*;1n{kXl)
zY<vtazXH*?XL|LGF_0U2y!DHJZnX}a$XI-@*2=4U{$tPzhSo>yO^@6CTIMwG*=lce
z>)sq+*k?7M?z{APSoL{zP8}fTF$}+`1^ZiHzURT8iXE(nSO4IAdDrdwz1jC+1;QDf
z9>RWSmmR0#fps6b1VQ6t@SjxkIflJI?}gB^uTeMa>spzgRn`cziI*6&Z1#J~|G9(>
z-O9Z1?w2QPv5)oS+YWfULf^{oFAggZJ>FUN7vgGHi46Xk*pW%JM4n#gX)NnZF|s&{
z{P&~tOVNE-#w7q=b}`;(qBe*hd5?wm{nv2*S?+HW4d7J|&$DQ^iQGp2AEASNu|>hi
z>zEoBe17&*Vjnn01?P*0L-NIaqw>UUV`9YRn$X__WU~huDSNXUdh;lMC&VPZ_!dlJ
zzd(GzB37eMzKY+F#6QI9{)7qt98oLOBDx`u!l+_-9$BA89tFs23jC}C_X*^3hOxn}
ziKUd`pNNU*UzdROvR3FiQ8O?{*7Glsb{iU4C>rzaiO@pv6uQ_8x#q*aV7*d0bA~=b
z{FUu9iQ(AL-F&;m{5uPN19E?S&}wl<b8OT)sr=}HDu$-!fg_1ha89JZ-sB%J9<z{J
zCeKIV=L+&X4UWa6SK#GU(kSLj*YE=QAkXiDC5@E9_Y~y2i!l^x48ebrveACoq9OI-
z7?Vr(d57=F*ld8_OWKCNE_*dBBXXq+@h5lMe*<<$tjQ)0F}FU!4|g4H5|5!X?Vz^+
zS{1*|zarK<FoJ0_NyUa%qI1*8H^*#n_?VO*hv!Z3yE(c<Y^Q!Y_yg#>pX!fte0NdF
zIGmxLF~lmK_!CvR<tOyH3GyAyn!FlY%o-xTCG8~PV~M!nLeZHq3WeSwk|13|uK1AR
z5Nl2~<1cwWOWmI-KX=s@s+i$P{FF&*okB-_$j4GAhdR5-e;{pAdLK=kk7u{hw(I=P
zTcZ8<4=-g2T~Lu|h&^bFt_-06l9&=v!I(21Vm~qq;#()Md<3RU;<<C-cN~}tz-reG
z+MJ?ZHaIM_DI;A*7FOnJuOV5oUa(m{gv{r_`#GggjCBR=*D>}zVoc($7@KhTC;txb
zj!Kw&ouRu08r8}sgX1jN3}7EkdXE$kViRpci$oK!j^^7&H4nj(99kgUi6wcmhED_Q
zEc7H4e8G&}IQX4_tn<(*hYq6iw9i5=?e7TSZ7Q?QKcM6U?qha6K}UH17Mw?zZ|BLk
zq37>lU+!o9@L?Yp3$|d^jZR^C@*&DyLkfj^P=R=g@d(Ct?L!vIS5|XjCw%@)zo+Sc
zH~mBe<%@f61L=-FN0o>g;f44m#4eHFH0<0b;NQx4+hbSIzJeTcz%~UvDg=`m{889S
z53qd-&Ml0eP04^fKe~i{DYg^)sn*tY*qCUgdtiS%GGDgn6@O>;@~<${*C2I6*T`CL
ztrvA!XWBz|IrQze4*bNy@gG@7vF*xU2{7-5pL}w)-YMNyWoo@rvQ}#f{=T>X?#}`&
zqPcgvba6F0&Z7Pbp1)HkqChqR?>l2{axMC^75!EI_9F0=+HpD7rDK%s<lA{AYZZs&
zS;egvlj5mc%)B>ZgFJ`k|2;qUPI>9_y40aZcO&2Dk*8YopJeR2@Vpe=KE%69N$6W7
zWh=pb5Z(Tn=XvV<3w!VwxhvS)g;-?0JEi}hs_&bj&IY9OIIGabm}M>O>~rWth?=AD
z*EJ|l+=s2{2JS#)?iZ3Pp7!J1(Z|AB>sH|uXuY#_^*@FCR{eOTNGIQ1S$AlGsM|fq
z;gh~o41b$souFJ<`}z4-;|I6u;Ggn;B=G-H0@D7|v_H$srTShV&8{lfVkdG6F3)PU
zYO4HzR;yJba&6wk*cqB8bo<S*apaArgu0fHH`6*kOkS>{P~>OTbtG;dkUQ5@x$Z+-
z9Qgs~56zP%X`0P>s##|v*G=uNJFIC|t-jWSyqLVF%4;`tQSVdgw{lV6Cq39|x~AS+
z$*MLN_)Z=HUh;BZaw~Zca@&lnd7PvCV4OTyLit%u+Tv6`>;vaoDi77{d3iJKfkwQG
zW)q)xRe7W07<;ah=2+h4#AeROLh<j&k%#?V){b@LN}_zX|8AYDds?kY-ATXQ({e=Y
zDEa62cO?*>DRr;jZXcZBS&w*Z8)C)niB&#I{2q<IvtNKgIQx7dbRlNhf^};M>sc>+
z;?_LBfluMfp5+1J^tv&b;`bQi!k3+i<3A70S;SDkA%=aFd>`-giJL0bxb1IrHhzJX
zeW6W+L2EER<y8EeQ}_aVp__`|MO@nM`%eecFxJ)Z2(xtT?+or<#GrSOE)t*p3Ho0X
zQ$JykHygd?XbaqK=_dql5;}jABz`aMht`+)g%_2tME@$bbs4%U4p)c|a+<x-MX-HG
z*>P1b!YV&|d)@vvb(03oBDT-@sy>?7XlGJWVzIu^FSVxx506_3Ak4}cy;XirOfd;Q
ziQS1R`saRwh(;E1(EAL3!VOF+HWiEiJsvFhMDj9w%@Wee;rTzU>$-Z;KyB&2ejk$r
zcclwoA`^8^^{M?H!A(HW=a{iY<(DFg%81oft%BZE<Qv9*qYW|C5YE;%5u=}ukEVRJ
zX?%+VZ^XddZF9S3F5c&pQ&1ghyHGa1NQSgrHohTu*6t!6?Km$nc<P~l92`Z&oLgK^
zo)|zQ?reDmn$9lnlDYWuLo46E?3I=C0W=k#xttj-B$mEynCVA3tYB|xn5AN?J+4_K
zPmeME8tH88wMd;sH%b{Qz;foD{5|P)lLn_i%S!r!7<(7Kx8ZpM=Ru|D;q%w%`{xT6
z<m<;6mcCnf;6jt+5u6S8tZ14Vlo4KZiFkv$7gT+==h}>)8YB;{Zj}7aMbE4p;-}Ro
zIgk5waPH3U>L<T_o->x}I?02V4b9sZPkjEIbE1#XC2}s9+>39V1se4ep_>8yv*^Sy
z?c;X#SkQ2FR%#WKp;I}$@aM{Vl1Ffs>aNaf&iBo+?&l84fiTO(tR^X=I0yBtB4#h^
zB@f>FTF%Be&T4~u=M)z4F6$({QPz6-2mK?==ih#O<tOLW`OG~jep#Hu`$9Vp-8)6D
z?oFxtF45Ye?#|3*XXbE6#(4p{v;EDyZ&T|ezj=syoQ>#Zlho1sUeDR$J0$m;j-2(Z
zvbQyQf6w_ynU3?!QF$91wqG^<!y1XNR^OW%aQ>~lU5moa=L4E83$ej}^)svI6-HVv
zy;RpQh`SzMpV1y!c&qz!pKD7zYe4%!^eB<Byhz&q#`<r1YAK#M>fD@pRK+~vywr1w
zW^irJIn^p;$(f!0Bl_5kO!qRTFFK|48O9k?WvjI4szA$0&Ppn`w@#a|Mwh5Be`#%U
zC3izsa_-w)i+`~x7?z`h>f9_@Ti~JYX0&B4<uHHLna!>s)2V<aY5qH0l3%TWcQfbT
zr>Orccqc-)2>NHq2P40+U{GhJ%gMjgj2=}_to-CkWKl&WI`Q3;D`!sA5<Sj7wBkMK
zZ$6O~ZIKVy_08ZFNFSW_a3;CXvtHnO;@oEYU96qND91-w%V$5GIkyVBm5q}}Bsd#=
zxSxRx676T26`V6-$MmkuD|L6KnDR<^;qHTH<-^NA$c0Zc<Cxwp(>M@bf2^G}Ky+R;
zf9{MD>9G9?UVWjj&Z(`O5j_O$m*9ULd#(N0udr}SdC;?&i%vpc)=V6bS|h#>ch&Sp
zWN-;u>MVE@vTk#gmw~+hY%fprEN!=9+EjSofGkf3nolpkCv}ubXY`QmR(-mEjQNa@
zqm8EzwpiV#;7*^Hx(hZE8+StOOR*yfA?C7f9ahiTS~IC%RZV06Idzx5S%)(@bxx(^
zJrB9})8b#Q<>-quQG?g3VBjvDThQ?QJ^j$3pHyGi4U>Ld-r}b-W?g<QcjLK8YxTSK
zHVK@cCVT(nl;CBnJGJK%jDI`qc|2(^wscgatvYn1`N;VJ`6cCV<bE@LSne^$xz55K
zPTFF37j*W<`0f0jI&Cp`azE8{@bUy{9s0ZxyVy6vTHSA~t!hh@t$H!>F^9~Svi2nD
zyVscK-mUeJE)9chLhautsaQJg4B(i?{`}m85_tw*0)6uxac4XBKl#HxxB=_KWXAF&
zYvmU9%gR0z1C=M~e@RfGaGW>(p%3<{4^wZwUH^;a5!RML^b-n>Eu>WB^YVzy+wb*=
zYc+><mg<N67x<52-TGR^AjmgE=cenvoqwAcPn~_>_y&96N$N=-Y8;8B%H*J2(e(92
zw~hnhCn&kU4_-5UY-JwJhTb6FbLsbczKy5PTlzknC*2L7V~K(M#9FFiQ`1yG#D6Z3
zTi_)YdA`mX*eEE6^8k~qfjpf#i)cYS?lI=h=kR$2S|_19Oz}Wl8+u);)=%o)aHr}I
zL!kL)Nf+vkgI9G<r(*33iG%f{uQ0IVYbd{iGaY2gw{evDF>m|woQ|AKVB7}%GU)GT
z{8YR@fHs`r%4+I<8DPG8FZhpyuY0H6%f#!}(wCCg26SL1W7?hfui!)Rb`E+!Dmx8L
z6>Iz!8r+YChK;+7D*nou1m((avC!^o&aPMR?Cs0>+I6IE`Z&spJT0ObeS|Xx=af9@
zV=n&C0Q#Rz?0pRMXT#HZz8_{h=7Xbzv>iE(CI<fmd`|?cy5FZ{IFI|H&BocT^Gk0^
z`Nl%V+5=t{pBLyu-7QsTYFW_hMl9AHEOX$=m$SM~#AIJ1_B4?1DYQ}dQ&jxz81z+a
z&2M-?^=<jSkvjKw3Pl6P!kgqrA1f3uV5#6a2mMrIT?ocV@>RTZ_RJZ{)$>W-ZRpJ~
zzUzq#{y&|CUc<v#sxy7RiQcL66?G@ZgifpRR%f`}K@=Apc2?{{PMKg}-ih!Lg`)Pg
zKK^cwZ0o^G2l{^;{@vhj4SaJaK?G2?2weCUVkC304Rh{EVu1g(9VT<wh180BZLR$B
z?Ecz)=)^+-S>pG*K!2Cv|AXxvafEAsMI&i`ua?m294mix(&6&(o)^wd?B3}BF%`2m
zy{CED<l$3Wo1dOqQ|r3Drc>8>aaz}@XI6KeFE6-$C=a<#CvA;A6nh|cdhFo`>&G6{
zTFdhI;j+BTBq>}P5w>V0<&kT&9JyMQl+v^&{T8SAeb+?kfBqMmEp)-Tq9(fA7F||r
z*R$kzy_ZLvb?J*P_*>oa(I(>W1hP-KVeN=A%bLuAp6LD(Y)v801w4PvbL#jFazfkm
zSReKr%V<A|_S}=yM_l6|Bu~18ST9TnwO+K~AFbxh;3NFCFL|EK{wDFQ{O`96%G<G3
zpS`}XHn(M6+Un^e3;+ARpaSWF9U9p)YxUu_D<*CWx0bIRUhwm#u9-`I9Z`7r2S3v>
zOTFYbf9RYs|Lb<ErYj$D9s8m8Xm6sQm)P62!Y|G2l=0O;?xtSx%+4}(&X~JY-M_j&
zEo5!atQC{)O7T6R&(4|NY+2Aj?mI4aN$fitKlKRh)mk3Hy~wTYGd@e?&fjVF7V2*C
zJbb@Q`dEqoJ&S(M1elJ0*KAqvmTqfPti7_=w*^BE7{X{j4qlhLu1(9TlQeKM{_O(F
z&(J=W{s&U86uMjR*DO!1nvv6DdH7E5xvBOGsrM=JoeBO`ujg$^c_!nF?1o80*^hYX
zNv+s})X<DQU0+;d?2n9!d<zeLiO*>bGGAz?8QuCjFZO(caSCFbHj?IHJ6GcCI`#wC
z28Wz+7y_N`<a5{ynz)nl+dU0*qzm>>oefW;4{(Z)(HV6fSPMJZfOmJw3$VeTldq+p
z53z~A+2S$lMGe)KKGZ#q_jxu^r+}2ea~f@|d`m@6b9pYI?B(mA*&mgCrOtf5Z{&MC
zv?lSKPJc6apHEUY`3L&w&;KIb=qF$849qR4?{Dv;$nLKxAFT)+7V_1s|1aR%{HaZ)
zPAzD(f?gjmyhZNIT<VM;cyFNjzjKaak9l4uj_ONHx22|;x!p1m4kwaN!d^5Y20Vil
T7pG}6@ifh?sOzfYqmJ}HjW6+N

literal 6458
zcmbuD33Qaz7017ru!v!iLItIUA{1<t&42_GGRZ7Ss8WtcrAI~S=@Dz8E#wq8RHBJ2
z!epD7BnSaH$|7n71zg%9ND=T*sVJgRAOWisu^^BTV3^zAecyb;08xX6b9wXbyYJrr
zUEcOtRs#R}_O<xGr`5Z=W&PB$tbPzIYZRpX3;oM@M68?=vGM|9xo3;zDi&+ROlh50
zA<0?AlIRUeqAw(O=LKaW^nouZMcI{-k{gsMxs~!ken@u1uN+j^(9w&Y?4Y#w2Bh7E
z;y72nSEX3KDCN;&!^#Opt^m&@`lY!68Jk-!>G?tVEWc7jDK8`k!Mcd{zi~VP^CWjr
zd|(bhPvlm}kQ=Kd@m!lN?Q5(Q6E+NGm&+x@qBO5cPQVvpauB>Lz!Ax>vaun18r}}t
zh8Qm-ifs#WyP0Er0N-kNh4gGG7M05ahqs*gl+h9=jnxey>5}7*boW$9fAnv0;-M`z
zYLR)**u*a5b-sX1p<M@QUl>>3M*VH(;s-u{l^u|L@TGc!k~*qVlD-S4TjLbPgP)d?
zCnUdy_a+$r1=bg7KZ(c2*kW&)45Ef+k|)jc&1uUdNpr^7<H*nOR!A=W@n>NR$pK`S
z6aNp9tHoAvda-nB4qq0rQY_ewk-J*D!Q1R$LHAMm8)!em<{{cQa)OesxyOfo*a-0Z
zWo%9)pY3~R%SArw(Njj9fuC`IZb<5x_bz%?qxWD;cTkQ{r(>GM#u{X943}bb`N?5W
zj>gvwnEYVwh0VdNlQj2Ja#@a_It<FQCa>fR+sBC2J<NRw`U+i*<a9Igz7g}J%Z+oT
zJw6n`|0brpQcfXL&>S{5_2tCv=MPC6>L88!8U=5w@l9(zB!|E-&Kr_JzA9OQu7f&G
zoE`<wP9tZp5v{`w;EKfs45z?0FZ}^&ZH?J+5jl1<Udx;abQ(I0t|DYcv(Kc)V?@rv
zmgOpv_Q;eYa};~WvAY)^-@(?~j8Dz*OK0*jC#uihH-gkokTs~dAZke0>MDcn?DhLk
zctz|vE74Ix{T85e8N3&;u@if`?ltZ^yp`g0@S)S>lw90`?#7s%kTfv=kA0qzR@Xl*
z$(dEsm3gl)uKtSV1bqjPnNGVF`V5?lsl)4O7a(&8(mm%3WIn-elg^_r)YmhfQt3dP
zbg!;8`HlJl_G<QwWW|TPA?)5o?vCmFC^eyPs;5%2RUVp$p0%1^)lVBHwl8L51AdC9
ziZvUQu3)s>fyh<lZX*0*c;n!`fxM$v<Fow+zg*@DN_WQU;%qARvh2C``JvcUAM0%(
zx;CTZgzC}X&>zsV&6&%*Bk*eQyPEtL=ggL?o%m}zkaI4BwUr7HE2DRCjU*xaIC^5(
z$nERoX<(LLe&VZ;2e7vv(pcy@H*vV%#x|l<+Ts6g<b4TtcQUq?nw!YJn2zsb6=w{a
zjrq6v71D8NwX}`Lb?$HCW$>lmGCKi%eYDQ-?KSLg!Nz;gJJ?*r9+^w)#kS^V7yOT)
z3S!j@|8lUsJ!)TT`E&9+gucZ&I23Gq%oz2+{DV;Dxj4S9Z}6c<W9TlI_S9Ezuq{F7
ziKx9WxL<Jl<qFP=Wl^3vQ^?H|*qRJ4ehmnF{q689;ywz!EAVGGI=6y*3O<@T{Wd)3
z^En5dx~Y<G==ht1L0kHJ$?LG(sx!5te6TKM>=yj^(#YFuuZjA&5e(Igg`pGB8fbuJ
z{Vd^p+uzU8_%YvNZMLJWz?L01+uriwv!p9Ai0$E8NAwGQtQXp+nDYhnCG;?LmP<Ti
zb%yK_u-=)wKz<N5&Ju$SOnUda8XHeT^~B&^axxO{5;y}=v7vk3er&Jg%t^uS)r`-9
zx0yCDWWHR?*l2Qi1{;1dHa_zux#;_&)Vu^Z3_k2=9S@@aI=>HK=PhdM){#r46*0OO
z+q(_fm=+;paFFAZ%z2o5>Xo!>@bf6t0RMG&mGp1kYRkDftO@JSl1O|i(QEJFT3g)l
z*eh-V$H(yPn1tjM{r5G$4iC9C)}@lby~zi@x9D$UKN&kbByC!b;(W>Lo+NHy^UjlG
zY`*E(i=Hq0iCF=;`P$)Y-mtwghRyEJ&gPy2t{Ln{x<>R)^b&qud%ne%bDTRO`ZTwH
zA{YA&4%_Au{J$37Dr}l~B2y2!u)Pe-dLF*&njziTx6_#SjhU<G9CvTz3T}N~TD2U_
z*^)l)JLquE$8>6JEjD+s?xy90<VwZNetQ>dMei4@SlhX-8tKIEN169Iw2ydA;hmBN
zo|EPbj^-a-54xV?p7SIA6dU_U7O~g_mZS6=$n&)1F_OTZdNcj4j2#Eh`|PbF8FPap
zcHd^~1o-YmPS?5FqiMI{-|!y+%hESx|3{<^wed8#!X_v9jqZBxi+cX7aCp%gTnvtT
z;2n<fkq7e>YdUYxO1YhQErmYChfUP$l>8dG_<}Ls!M?^Gm(5&a@+`JuYZPn;+#$}*
zkgShk(DN}wUgvV}k3Ub@GpLQ5^u6o}ND6Z|GSA%CXdA)(o2hbPdvM>pi3!wtSMr&L
ze?^K19C|kB85DF?NoRPo$eHdJVQ@8Zj@>`7Mq1;`ZH%o%?n7ujGQV?k-jhckc>d@3
zqjQ;4#QibZRrcNYkoed#zqjgVegpcx!rn&gl!Ev7IpuN<^?x6{1?1*^XgR;fyJm(j
z(e<N$+-tjocLnSCxWU4`joO%uP7`ZltF?EMd1b_N8vakEeg~%%G#|tCnbOu%8tH;B
zozOGE=+rf@XJ|-jiB+!*^32$5lNbDke+Ued9ZXsW8G6nI#Dh$H-RU`Bjc>oAeV#e5
zQFr=I-3jTwqI=^8_N@WvxDp#4Fkh#Bdi~)ZiXGk($j`imPVBV>!`JK={ds?OK=;S-
z`vLtm#Nl$)gRI$iJmoS1{+aiY-u3Z`yJyF&pmcN1Xu1@8k0EdF{ZU&dz_$>b%b<PC
z-;T^(P#OJWiXYNDVJ&#-oY*tIK))3*_Znz@JT`o(VQ=f~U{idl_Z@77+$`=<`_a?D
z?|S4m(*7OUS(yRpM2+0dm~$^Q?-IuMV*gYWtL_Q4)K9#RdKdeI*y)-dPmb@V7VbxG
zJ#u>g-9k=2WxwBp9<9j?#if6WO9>gvU2-g$H^~ru@?lfo-_E&vn*Q|6Ino3DCCDDY
z-T`#Z<M(nCAC=X$uirrQ-J!J=ozI(gl`9|}iI;`!VCMYW8KXT;zl8VyRU@l;-xThS
zeIH@W#>PCY!5*V$CU{EZGVJO%p_qR1@mJqm89)qO;2Mn&eTL2BtwB7{t#5d{1_KiC
z>fRsV?a4Vq9A4v2G>RN#GB*oS`F(M^PvgsT@br6v9kA&C%2R)ooZtP5q%Ho(?(g^-
zp|9UownN9Uw})8ho^A0RqJy_e#?mjtMuD${TA3h;LyM(L=4`oQM2TFE?keV;gqrY0
zb^M39dN$}e-Ng94_;MC5?XXY9zB#BZrTOfw_&E$bE1+HcewB6uWASzMG4GS%<hTra
z1zh)gtEDq*HVxVN&^mBDNq-DA+`wFC|2T&1Gt}HlcpJd<mtQ{K{9dX1KeDm9Q*27g
z8xoYZS!L2Kqe8lXZ>iBA%`-VZjL%!iuTzta%qfLpZx!OJ^|zh4A2;=9?``@PxMT1f
zX*)O|7hfOUU(XAgGW4t?o(?8$v1zbr>ku~dJK7$`PlM|l_^XN6mm{5;w{h%Z%#M-c
z19xm>^<Aob&FMdQlU}QO)vjfopUZfhx&|~(j=bhx`|)_af$*j9#$cnEwLgJ)4FK=U
z$e6gn57Vzf$9l7F?Y&LoRzmJm!7+i~llT@j#2su*QXBdWpe28Le(3j9y`P%z<L6)_
z9_CIxYM~@Kn8|Y*n3h6ovFpd~FWA2_z_)<@YQ{^l=Y)Hxy!s7BgNOaZ<m>xziFA_)
zLegk$GwnL7joo%KZ6qPR@G-{2i3{yECHX<qA7l+10l#jXmDGW@zOHSeUOejyBSof7
zkfIX$n>xz6w`pf|l*2A<Q|z`l%WmgnNz-2VwBbp#$@F{Dww`9UN$|C=<40(>M&+IP
zjy~0&!}z8)vi=>~`Zlsban%(@46eGvHom%nR)+G!ooxK!l;Q`~k8t81<6k6USYd>|
RIB}?p#-q`iX86%~{U3Ebo9_Ss


From 2edeee1f7f8692e01de644a1f08b3d13bcebb2f8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 27 Jun 2020 03:17:16 +0200
Subject: [PATCH 1075/2300] Add files via upload

---
 web/images/favicon.ico | Bin 6458 -> 15086 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/web/images/favicon.ico b/web/images/favicon.ico
index fad74c2a4ebe9b949d5c0893075e68ca79d54f68..231b61d2c39e4700f461a956ecc2f4199f5728b2 100644
GIT binary patch
literal 15086
zcmeI330Rdy`~RN<xUZF^X{J`bEm~SyW@Tuy9TZJ7ORdyU0g)X6wZhWG%yKJp7tUc5
zaRCL9?Q96HrCDZbxuRz7qJqH8?=$CUX|HDfd*ADSUB6%Fx`uh4d1mJR-uK*d&pr1H
znx@m7wT>M%^43~vTTOdT)3nyDuf8|dw4W(!Os>BByJ*@JDm+FVnrOpFs@(p2#F72;
z_a6!Tua!W8hm*F{-C6spr;9ev%~^|o#p%DrYyT9f3$V(X{&})NXuhmB#w?tNtQ1b+
zd7^Gup==VEFB=4yr1Nd*$9Htn5<MGg2Cr_U(OPn^=~`;<FSJDO&$R@vF<OG>Q`#ce
znz!xeFH{&dK{}625q3;|`Qq+yi|jwvBBn%IM0BWCbPhI)M<Oi3FVZT$7;6>phnhsk
zhdz<I={tmze}<?L7$<c%keT~}v$n*elNPU^su}dfno)lo{MFjB-cm~<H|T%S67(zK
ztEXmkuW>`$J9rspmQEoS@nD2m_(WJmf8_fV&;6pTVncM1I5*ZNN-2+zw8|M#HnBUZ
zNR-DEi(e_96=o8h!_C4y(k$MJED+Cy6o~qE($gPx(hMH%V9rF=7r-r$dxf^l=c1P8
zQ>LZ#s(=T{w+is5Y4Pr@?f~))RiXbtWRZxCDi&M8wi9_Lkye1cJZ6KGQAH%HID*Xg
z@LU;9*|-uZB5h(9d?mw25%u<vFAFt`R|X~SbI}&P^q`jLl?2X8a9-Ao-kafN9(YHS
zh9UQ*<R?k+z&ONv`D^oDcJO`!x|_d*mI#;OCRu;<I@vhfDm<XQIi^@vDQrBS0{?f&
z`WJ9siQXVCg58GRq{H9QaU0>GNL)bXyC^%r_o|o@+7*e@;TH5Nx4KP-m2<n+GWO5a
z8TE(J^G`|Lw51*oXi2V)IlI{FF?dq^oOkGwSAmw`_UO&g-dO5aBI<zI4UCh}=TCW_
z2fqE_s8;d@+i~PNkMj56WhHaK5N;B0BHI_>X(B0|wzDElB8GNW_^DQWGd5-DSms!(
zoE>JloYW`Vw5)B~djU=c_hvUD;B8rVC+2Qf#^f7^9x(<+uh+FjZnvGwp*GPDxvc=}
z$><_^7J7Sl{|2mw!E=<990JxLt7r}%Ly_}rQbYvvHKI_o2(yS6n7iJ=1>$AOqZyO0
zX?q~TTCpYEQno$PT7ELBsJc9+Nba3rlcPV_EF1hAepQgrvk~JmLrYR);C+dC@VRDi
zzxSqfuNFQMEu5g;E2^mKa8&Un8M)yC`ci%vdB!mh-eTVRp#$Ed){A??%%Ve-O~#Ka
zmWR=!gHcxbWu!@ZQ#Y0|%7^Dw)Q^V$KK<8k^nG;2<TVd1A9t=(#+PDH{<ku+_(}!s
z7y0HNeOO!aaszFt*Imr%M%q%h+S>eAb(--JXU5<)=JsCj3*=t_{#$xNZ?6^gN9T#h
z##-cv5rv0-d@gfw^`on%$d|Lyz6&WlH!#v7yMz66Fr|||M7EQew+Es&RLHT#mt}<Y
z%5Jc)V|+>-`Xa8NOY6tkE_TrpT!(}0F!W^&V;}j{s#$WBsq|vBtt#c&jD#o`W52Jk
zml?=-37AJ}OFi$`K6^w*n}^Y%0{c8pfsX{wZa0&Ec!6jRwy3BLGC#~#v8~6N)yL{2
z4ye)+-DR!h0Xw>^P6!-ZR5b@&r@$n@cp{29JS6Y?Upj#0k@WZFvl)wy56?fahwqmZ
zetWWsp9bb^TT(yitrF~wlA&};^eOw-iYY&i$UnO4t-Rg4n=g+z#5^uX#!^f6t|T3z
zUMjrw*9@L*z&s!P<yva56X=tl_QeZzuIC}3K-5N$U&lV|K@Vi8txP<hVW_BS=nXwj
zsTtgkKbSUtRjBoXZG4HWRC5^JtsGTwY;W82$$OlQ)HApt*H<sKTQPl?zv<WSnKu{E
z`!ms2v9HfM>%qHI{jS*iLJyo1`=vg!YGJ=HQ<>2{YwhLwDQ`>lO=s*?txN8G37cAu
z&AdX|1rHySzU28NdUTGpZVGew?(6Z7G>LlQHW2{56XU=ZYAq98GmVus4Sm4n1%8jJ
z2FXKz?Y+*tFS@Ae4EE&mxFWf~f6m6#n#R61WCfpkFnCE9W8c!ws~4n<wN!qFt(g*S
ztDf(kz4lPU)M51FDZyHC|FW^cF;-bW%6xI=3z^1>T1f-I?p1wv^2mL6rHmYpykoJQ
zJHcCl+)tucKhghX#-|KCbG3N4rq|;imM`jJ`}(01+mP!;@So|ldf{;wqfey+zg~@b
zb?fEtmHHMO$!5+aj<?CECs)iEr89VLwPR28MqZ>O{T0R`xBc?T9+8Ej=>*%AUR~E1
zHr7oU0!B}HZ))J#7c-I~KiVLhhnvp~e`@vYT{V+lqkr$pmTA$}o|ze48z<=RW-ai7
zb}E?9*md8i)-l#%qkc7O*@M^cV+R{!SNbyVl#Sm3Hj}^UWZVO3F-FGng2JXV&=%Q3
zr>te#xCO&=cRpeKMmBUw>;nz`ZoA$Zy|=SwTG3tf#Ot({@Jg_@xM|I4n|^K5a(T@B
z8cF@Dk+DDz&%BlQgBkwkM3~Nv0<*y>vG;lB#9r0yR(^hHWWkYH@7rXj?#okZBj<<V
z;S>5lZs#G<y9#=R;D1Qr4>pNf*bz5y=c3c6(I2&rn!_#CFFG4~y{awqKI)v<N7hb!
zL%3iw9CBbiNpSPg7C7O*=-uu3Q}9!gyw^i33O(Iu_hpQF3p(Ac&Vs%!&MAFAR%N;b
zPx)wiT*WBU(aYnD)w)uV^LYBSCFs=w@XHRX=2QpT&ioQ>l{16P!XaaW$0NwYfE+Jf
zmD65riB~&2eq_)38ic(#ZnqW1LPi&h-K;74#z})bb!ojz75*kE0q2`83;M;$*b954
zuOzJl+cRKS^8b<frts%M=M{LE44>ub??s+JM}{r66y{utw{$}PJFJ>511+bdnrBhg
zs#4cAE5X+5J6)1qKDaza`dSZOL5H)0O;sHfM&?3o`tgNMshv)u_Yv?vr9Lrd>m%>M
z;Qs;qRnho2F&o7u@W1Pmoxh}h>d-RuLDo$f{C(5ZkOexU_d&Z1k`y+5GW~vxTz)~e
z3V%Mdp41XNTq)n|kd=N9^`^qlT6mVu2G8p5Ytt{r6p73DQWeoQY3-9;G!$NQm^X}b
zf9btG|3av_d_HSUYlYGNGkA7{&Ue^Pr2|J;=Q^o!k3{Jd%z71RmUH3bAZZ6{X4H6#
z3?6R!=~(mhNP*3k*oQ;SQzGM>483Q8>#ReMumy?UC!k%WrQok8d#}WoZ>cTp(E$CN
zVwb<t*F^8rJlp4ylfmn3*9>FMIB-K}AM5fb0r@-srAz2FhdLEb%+c1%CzSfEE%Z&>
zCV#i_@op{nzS&Mk+0g{A!K`m}LJDPVe3s|w>nnV)Evx}w1Q&_+<E+xp&vNv%T6=Z)
zugtyk_oW2I)sBC)BeFHX1G;FJ1@oG@o!Yw^{g{KlQp+x{c=zX!`#Q!2T~l-4Zab9y
z-1V>YDd90TIRjbkXWWbNg(B`x4PzWV4=GvIP8wL&eNCF-J)7(>dxLcNqVaC`Ux)t;
zV-ct&_G}n#mXEWB&Sb4Q%6OKsetnNmGh&=sb|0Sq^SVb@#9eY?Ua_uRu3;Q7v*u!-
zhUiEa+GoJSIXgCoe}0%fV1Tyts_&c7y(U;+M`yNC$H7CglCM{)cUIv9){ag1(-r7z
zIey)aKH1jU^->1yu&?!reZ)&^Q%?mH{u()XgCsJ<&yHVTa#jD&Y6kByTC!)u2%G4E
z916iNlz)!>xr9$ME7mGo_RrlE);j(DQf0G|%_+t>R<}rBPy4C|`)ZFTDVvJUZUo;(
z#^fVpPbBKPpRs!#%6l^o>CnXo_F7dZvA0`<<%&Nx`VjJxcA7SMB9wLPxy&Wz7R$q`
z+pL%%hZO9(qI4@_gS^k)qv4f%kVh(Gj6UnnxqRgjRx8e}aYT{mfbJ}gW<SDy4_{F1
z2mcu6a{Cd5M;E-XCh=_3v_RP+Eo}EA%RhRv{qmU({aDDpHQv1mW6>6y{|NfnL|gbQ
z(X&7N;@z>~UM;apkK(sI_&}Pz_P8R^6`I+|y$qTsk>8pKOSMmc`Im`)=EDaAZO6{z
zXYYux$U!5DL|uE2OI+(fV>tM2tRcB~#dd$~@xEQ^g%yf==)BseB-7_!Y-w6Zp6JB;
zfUz5@4u=(86hTENWw7nckHMyk1A_~zYX1S@9lee&sH%aF_%w8uKyM#(Qqb2P?5*#K
zw8=LZmpp7z5q`&*QLNp+bw00?PFwm)UG%G&(}EsNo4?VqL6>&zou2tt>Vj?JVfvYc
z91f9o()U>QP5z8;>G+LOPS_{~J{x-u>El}{Z@c&Tjpj`r@KGKE_e^B3Y+cz{v&g`H
zJOj-a*(;|}{tM+l!egX=foyV<E^a6aGKo6KzYp!cW)7%*cQxzRcGlz&=*;1n{kXl)
zY<vtazXH*?XL|LGF_0U2y!DHJZnX}a$XI-@*2=4U{$tPzhSo>yO^@6CTIMwG*=lce
z>)sq+*k?7M?z{APSoL{zP8}fTF$}+`1^ZiHzURT8iXE(nSO4IAdDrdwz1jC+1;QDf
z9>RWSmmR0#fps6b1VQ6t@SjxkIflJI?}gB^uTeMa>spzgRn`cziI*6&Z1#J~|G9(>
z-O9Z1?w2QPv5)oS+YWfULf^{oFAggZJ>FUN7vgGHi46Xk*pW%JM4n#gX)NnZF|s&{
z{P&~tOVNE-#w7q=b}`;(qBe*hd5?wm{nv2*S?+HW4d7J|&$DQ^iQGp2AEASNu|>hi
z>zEoBe17&*Vjnn01?P*0L-NIaqw>UUV`9YRn$X__WU~huDSNXUdh;lMC&VPZ_!dlJ
zzd(GzB37eMzKY+F#6QI9{)7qt98oLOBDx`u!l+_-9$BA89tFs23jC}C_X*^3hOxn}
ziKUd`pNNU*UzdROvR3FiQ8O?{*7Glsb{iU4C>rzaiO@pv6uQ_8x#q*aV7*d0bA~=b
z{FUu9iQ(AL-F&;m{5uPN19E?S&}wl<b8OT)sr=}HDu$-!fg_1ha89JZ-sB%J9<z{J
zCeKIV=L+&X4UWa6SK#GU(kSLj*YE=QAkXiDC5@E9_Y~y2i!l^x48ebrveACoq9OI-
z7?Vr(d57=F*ld8_OWKCNE_*dBBXXq+@h5lMe*<<$tjQ)0F}FU!4|g4H5|5!X?Vz^+
zS{1*|zarK<FoJ0_NyUa%qI1*8H^*#n_?VO*hv!Z3yE(c<Y^Q!Y_yg#>pX!fte0NdF
zIGmxLF~lmK_!CvR<tOyH3GyAyn!FlY%o-xTCG8~PV~M!nLeZHq3WeSwk|13|uK1AR
z5Nl2~<1cwWOWmI-KX=s@s+i$P{FF&*okB-_$j4GAhdR5-e;{pAdLK=kk7u{hw(I=P
zTcZ8<4=-g2T~Lu|h&^bFt_-06l9&=v!I(21Vm~qq;#()Md<3RU;<<C-cN~}tz-reG
z+MJ?ZHaIM_DI;A*7FOnJuOV5oUa(m{gv{r_`#GggjCBR=*D>}zVoc($7@KhTC;txb
zj!Kw&ouRu08r8}sgX1jN3}7EkdXE$kViRpci$oK!j^^7&H4nj(99kgUi6wcmhED_Q
zEc7H4e8G&}IQX4_tn<(*hYq6iw9i5=?e7TSZ7Q?QKcM6U?qha6K}UH17Mw?zZ|BLk
zq37>lU+!o9@L?Yp3$|d^jZR^C@*&DyLkfj^P=R=g@d(Ct?L!vIS5|XjCw%@)zo+Sc
zH~mBe<%@f61L=-FN0o>g;f44m#4eHFH0<0b;NQx4+hbSIzJeTcz%~UvDg=`m{889S
z53qd-&Ml0eP04^fKe~i{DYg^)sn*tY*qCUgdtiS%GGDgn6@O>;@~<${*C2I6*T`CL
ztrvA!XWBz|IrQze4*bNy@gG@7vF*xU2{7-5pL}w)-YMNyWoo@rvQ}#f{=T>X?#}`&
zqPcgvba6F0&Z7Pbp1)HkqChqR?>l2{axMC^75!EI_9F0=+HpD7rDK%s<lA{AYZZs&
zS;egvlj5mc%)B>ZgFJ`k|2;qUPI>9_y40aZcO&2Dk*8YopJeR2@Vpe=KE%69N$6W7
zWh=pb5Z(Tn=XvV<3w!VwxhvS)g;-?0JEi}hs_&bj&IY9OIIGabm}M>O>~rWth?=AD
z*EJ|l+=s2{2JS#)?iZ3Pp7!J1(Z|AB>sH|uXuY#_^*@FCR{eOTNGIQ1S$AlGsM|fq
z;gh~o41b$souFJ<`}z4-;|I6u;Ggn;B=G-H0@D7|v_H$srTShV&8{lfVkdG6F3)PU
zYO4HzR;yJba&6wk*cqB8bo<S*apaArgu0fHH`6*kOkS>{P~>OTbtG;dkUQ5@x$Z+-
z9Qgs~56zP%X`0P>s##|v*G=uNJFIC|t-jWSyqLVF%4;`tQSVdgw{lV6Cq39|x~AS+
z$*MLN_)Z=HUh;BZaw~Zca@&lnd7PvCV4OTyLit%u+Tv6`>;vaoDi77{d3iJKfkwQG
zW)q)xRe7W07<;ah=2+h4#AeROLh<j&k%#?V){b@LN}_zX|8AYDds?kY-ATXQ({e=Y
zDEa62cO?*>DRr;jZXcZBS&w*Z8)C)niB&#I{2q<IvtNKgIQx7dbRlNhf^};M>sc>+
z;?_LBfluMfp5+1J^tv&b;`bQi!k3+i<3A70S;SDkA%=aFd>`-giJL0bxb1IrHhzJX
zeW6W+L2EER<y8EeQ}_aVp__`|MO@nM`%eecFxJ)Z2(xtT?+or<#GrSOE)t*p3Ho0X
zQ$JykHygd?XbaqK=_dql5;}jABz`aMht`+)g%_2tME@$bbs4%U4p)c|a+<x-MX-HG
z*>P1b!YV&|d)@vvb(03oBDT-@sy>?7XlGJWVzIu^FSVxx506_3Ak4}cy;XirOfd;Q
ziQS1R`saRwh(;E1(EAL3!VOF+HWiEiJsvFhMDj9w%@Wee;rTzU>$-Z;KyB&2ejk$r
zcclwoA`^8^^{M?H!A(HW=a{iY<(DFg%81oft%BZE<Qv9*qYW|C5YE;%5u=}ukEVRJ
zX?%+VZ^XddZF9S3F5c&pQ&1ghyHGa1NQSgrHohTu*6t!6?Km$nc<P~l92`Z&oLgK^
zo)|zQ?reDmn$9lnlDYWuLo46E?3I=C0W=k#xttj-B$mEynCVA3tYB|xn5AN?J+4_K
zPmeME8tH88wMd;sH%b{Qz;foD{5|P)lLn_i%S!r!7<(7Kx8ZpM=Ru|D;q%w%`{xT6
z<m<;6mcCnf;6jt+5u6S8tZ14Vlo4KZiFkv$7gT+==h}>)8YB;{Zj}7aMbE4p;-}Ro
zIgk5waPH3U>L<T_o->x}I?02V4b9sZPkjEIbE1#XC2}s9+>39V1se4ep_>8yv*^Sy
z?c;X#SkQ2FR%#WKp;I}$@aM{Vl1Ffs>aNaf&iBo+?&l84fiTO(tR^X=I0yBtB4#h^
zB@f>FTF%Be&T4~u=M)z4F6$({QPz6-2mK?==ih#O<tOLW`OG~jep#Hu`$9Vp-8)6D
z?oFxtF45Ye?#|3*XXbE6#(4p{v;EDyZ&T|ezj=syoQ>#Zlho1sUeDR$J0$m;j-2(Z
zvbQyQf6w_ynU3?!QF$91wqG^<!y1XNR^OW%aQ>~lU5moa=L4E83$ej}^)svI6-HVv
zy;RpQh`SzMpV1y!c&qz!pKD7zYe4%!^eB<Byhz&q#`<r1YAK#M>fD@pRK+~vywr1w
zW^irJIn^p;$(f!0Bl_5kO!qRTFFK|48O9k?WvjI4szA$0&Ppn`w@#a|Mwh5Be`#%U
zC3izsa_-w)i+`~x7?z`h>f9_@Ti~JYX0&B4<uHHLna!>s)2V<aY5qH0l3%TWcQfbT
zr>Orccqc-)2>NHq2P40+U{GhJ%gMjgj2=}_to-CkWKl&WI`Q3;D`!sA5<Sj7wBkMK
zZ$6O~ZIKVy_08ZFNFSW_a3;CXvtHnO;@oEYU96qND91-w%V$5GIkyVBm5q}}Bsd#=
zxSxRx676T26`V6-$MmkuD|L6KnDR<^;qHTH<-^NA$c0Zc<Cxwp(>M@bf2^G}Ky+R;
zf9{MD>9G9?UVWjj&Z(`O5j_O$m*9ULd#(N0udr}SdC;?&i%vpc)=V6bS|h#>ch&Sp
zWN-;u>MVE@vTk#gmw~+hY%fprEN!=9+EjSofGkf3nolpkCv}ubXY`QmR(-mEjQNa@
zqm8EzwpiV#;7*^Hx(hZE8+StOOR*yfA?C7f9ahiTS~IC%RZV06Idzx5S%)(@bxx(^
zJrB9})8b#Q<>-quQG?g3VBjvDThQ?QJ^j$3pHyGi4U>Ld-r}b-W?g<QcjLK8YxTSK
zHVK@cCVT(nl;CBnJGJK%jDI`qc|2(^wscgatvYn1`N;VJ`6cCV<bE@LSne^$xz55K
zPTFF37j*W<`0f0jI&Cp`azE8{@bUy{9s0ZxyVy6vTHSA~t!hh@t$H!>F^9~Svi2nD
zyVscK-mUeJE)9chLhautsaQJg4B(i?{`}m85_tw*0)6uxac4XBKl#HxxB=_KWXAF&
zYvmU9%gR0z1C=M~e@RfGaGW>(p%3<{4^wZwUH^;a5!RML^b-n>Eu>WB^YVzy+wb*=
zYc+><mg<N67x<52-TGR^AjmgE=cenvoqwAcPn~_>_y&96N$N=-Y8;8B%H*J2(e(92
zw~hnhCn&kU4_-5UY-JwJhTb6FbLsbczKy5PTlzknC*2L7V~K(M#9FFiQ`1yG#D6Z3
zTi_)YdA`mX*eEE6^8k~qfjpf#i)cYS?lI=h=kR$2S|_19Oz}Wl8+u);)=%o)aHr}I
zL!kL)Nf+vkgI9G<r(*33iG%f{uQ0IVYbd{iGaY2gw{evDF>m|woQ|AKVB7}%GU)GT
z{8YR@fHs`r%4+I<8DPG8FZhpyuY0H6%f#!}(wCCg26SL1W7?hfui!)Rb`E+!Dmx8L
z6>Iz!8r+YChK;+7D*nou1m((avC!^o&aPMR?Cs0>+I6IE`Z&spJT0ObeS|Xx=af9@
zV=n&C0Q#Rz?0pRMXT#HZz8_{h=7Xbzv>iE(CI<fmd`|?cy5FZ{IFI|H&BocT^Gk0^
z`Nl%V+5=t{pBLyu-7QsTYFW_hMl9AHEOX$=m$SM~#AIJ1_B4?1DYQ}dQ&jxz81z+a
z&2M-?^=<jSkvjKw3Pl6P!kgqrA1f3uV5#6a2mMrIT?ocV@>RTZ_RJZ{)$>W-ZRpJ~
zzUzq#{y&|CUc<v#sxy7RiQcL66?G@ZgifpRR%f`}K@=Apc2?{{PMKg}-ih!Lg`)Pg
zKK^cwZ0o^G2l{^;{@vhj4SaJaK?G2?2weCUVkC304Rh{EVu1g(9VT<wh180BZLR$B
z?Ecz)=)^+-S>pG*K!2Cv|AXxvafEAsMI&i`ua?m294mix(&6&(o)^wd?B3}BF%`2m
zy{CED<l$3Wo1dOqQ|r3Drc>8>aaz}@XI6KeFE6-$C=a<#CvA;A6nh|cdhFo`>&G6{
zTFdhI;j+BTBq>}P5w>V0<&kT&9JyMQl+v^&{T8SAeb+?kfBqMmEp)-Tq9(fA7F||r
z*R$kzy_ZLvb?J*P_*>oa(I(>W1hP-KVeN=A%bLuAp6LD(Y)v801w4PvbL#jFazfkm
zSReKr%V<A|_S}=yM_l6|Bu~18ST9TnwO+K~AFbxh;3NFCFL|EK{wDFQ{O`96%G<G3
zpS`}XHn(M6+Un^e3;+ARpaSWF9U9p)YxUu_D<*CWx0bIRUhwm#u9-`I9Z`7r2S3v>
zOTFYbf9RYs|Lb<ErYj$D9s8m8Xm6sQm)P62!Y|G2l=0O;?xtSx%+4}(&X~JY-M_j&
zEo5!atQC{)O7T6R&(4|NY+2Aj?mI4aN$fitKlKRh)mk3Hy~wTYGd@e?&fjVF7V2*C
zJbb@Q`dEqoJ&S(M1elJ0*KAqvmTqfPti7_=w*^BE7{X{j4qlhLu1(9TlQeKM{_O(F
z&(J=W{s&U86uMjR*DO!1nvv6DdH7E5xvBOGsrM=JoeBO`ujg$^c_!nF?1o80*^hYX
zNv+s})X<DQU0+;d?2n9!d<zeLiO*>bGGAz?8QuCjFZO(caSCFbHj?IHJ6GcCI`#wC
z28Wz+7y_N`<a5{ynz)nl+dU0*qzm>>oefW;4{(Z)(HV6fSPMJZfOmJw3$VeTldq+p
z53z~A+2S$lMGe)KKGZ#q_jxu^r+}2ea~f@|d`m@6b9pYI?B(mA*&mgCrOtf5Z{&MC
zv?lSKPJc6apHEUY`3L&w&;KIb=qF$849qR4?{Dv;$nLKxAFT)+7V_1s|1aR%{HaZ)
zPAzD(f?gjmyhZNIT<VM;cyFNjzjKaak9l4uj_ONHx22|;x!p1m4kwaN!d^5Y20Vil
T7pG}6@ifh?sOzfYqmJ}HjW6+N

literal 6458
zcmbuD33Qaz7017ru!v!iLItIUA{1<t&42_GGRZ7Ss8WtcrAI~S=@Dz8E#wq8RHBJ2
z!epD7BnSaH$|7n71zg%9ND=T*sVJgRAOWisu^^BTV3^zAecyb;08xX6b9wXbyYJrr
zUEcOtRs#R}_O<xGr`5Z=W&PB$tbPzIYZRpX3;oM@M68?=vGM|9xo3;zDi&+ROlh50
zA<0?AlIRUeqAw(O=LKaW^nouZMcI{-k{gsMxs~!ken@u1uN+j^(9w&Y?4Y#w2Bh7E
z;y72nSEX3KDCN;&!^#Opt^m&@`lY!68Jk-!>G?tVEWc7jDK8`k!Mcd{zi~VP^CWjr
zd|(bhPvlm}kQ=Kd@m!lN?Q5(Q6E+NGm&+x@qBO5cPQVvpauB>Lz!Ax>vaun18r}}t
zh8Qm-ifs#WyP0Er0N-kNh4gGG7M05ahqs*gl+h9=jnxey>5}7*boW$9fAnv0;-M`z
zYLR)**u*a5b-sX1p<M@QUl>>3M*VH(;s-u{l^u|L@TGc!k~*qVlD-S4TjLbPgP)d?
zCnUdy_a+$r1=bg7KZ(c2*kW&)45Ef+k|)jc&1uUdNpr^7<H*nOR!A=W@n>NR$pK`S
z6aNp9tHoAvda-nB4qq0rQY_ewk-J*D!Q1R$LHAMm8)!em<{{cQa)OesxyOfo*a-0Z
zWo%9)pY3~R%SArw(Njj9fuC`IZb<5x_bz%?qxWD;cTkQ{r(>GM#u{X943}bb`N?5W
zj>gvwnEYVwh0VdNlQj2Ja#@a_It<FQCa>fR+sBC2J<NRw`U+i*<a9Igz7g}J%Z+oT
zJw6n`|0brpQcfXL&>S{5_2tCv=MPC6>L88!8U=5w@l9(zB!|E-&Kr_JzA9OQu7f&G
zoE`<wP9tZp5v{`w;EKfs45z?0FZ}^&ZH?J+5jl1<Udx;abQ(I0t|DYcv(Kc)V?@rv
zmgOpv_Q;eYa};~WvAY)^-@(?~j8Dz*OK0*jC#uihH-gkokTs~dAZke0>MDcn?DhLk
zctz|vE74Ix{T85e8N3&;u@if`?ltZ^yp`g0@S)S>lw90`?#7s%kTfv=kA0qzR@Xl*
z$(dEsm3gl)uKtSV1bqjPnNGVF`V5?lsl)4O7a(&8(mm%3WIn-elg^_r)YmhfQt3dP
zbg!;8`HlJl_G<QwWW|TPA?)5o?vCmFC^eyPs;5%2RUVp$p0%1^)lVBHwl8L51AdC9
ziZvUQu3)s>fyh<lZX*0*c;n!`fxM$v<Fow+zg*@DN_WQU;%qARvh2C``JvcUAM0%(
zx;CTZgzC}X&>zsV&6&%*Bk*eQyPEtL=ggL?o%m}zkaI4BwUr7HE2DRCjU*xaIC^5(
z$nERoX<(LLe&VZ;2e7vv(pcy@H*vV%#x|l<+Ts6g<b4TtcQUq?nw!YJn2zsb6=w{a
zjrq6v71D8NwX}`Lb?$HCW$>lmGCKi%eYDQ-?KSLg!Nz;gJJ?*r9+^w)#kS^V7yOT)
z3S!j@|8lUsJ!)TT`E&9+gucZ&I23Gq%oz2+{DV;Dxj4S9Z}6c<W9TlI_S9Ezuq{F7
ziKx9WxL<Jl<qFP=Wl^3vQ^?H|*qRJ4ehmnF{q689;ywz!EAVGGI=6y*3O<@T{Wd)3
z^En5dx~Y<G==ht1L0kHJ$?LG(sx!5te6TKM>=yj^(#YFuuZjA&5e(Igg`pGB8fbuJ
z{Vd^p+uzU8_%YvNZMLJWz?L01+uriwv!p9Ai0$E8NAwGQtQXp+nDYhnCG;?LmP<Ti
zb%yK_u-=)wKz<N5&Ju$SOnUda8XHeT^~B&^axxO{5;y}=v7vk3er&Jg%t^uS)r`-9
zx0yCDWWHR?*l2Qi1{;1dHa_zux#;_&)Vu^Z3_k2=9S@@aI=>HK=PhdM){#r46*0OO
z+q(_fm=+;paFFAZ%z2o5>Xo!>@bf6t0RMG&mGp1kYRkDftO@JSl1O|i(QEJFT3g)l
z*eh-V$H(yPn1tjM{r5G$4iC9C)}@lby~zi@x9D$UKN&kbByC!b;(W>Lo+NHy^UjlG
zY`*E(i=Hq0iCF=;`P$)Y-mtwghRyEJ&gPy2t{Ln{x<>R)^b&qud%ne%bDTRO`ZTwH
zA{YA&4%_Au{J$37Dr}l~B2y2!u)Pe-dLF*&njziTx6_#SjhU<G9CvTz3T}N~TD2U_
z*^)l)JLquE$8>6JEjD+s?xy90<VwZNetQ>dMei4@SlhX-8tKIEN169Iw2ydA;hmBN
zo|EPbj^-a-54xV?p7SIA6dU_U7O~g_mZS6=$n&)1F_OTZdNcj4j2#Eh`|PbF8FPap
zcHd^~1o-YmPS?5FqiMI{-|!y+%hESx|3{<^wed8#!X_v9jqZBxi+cX7aCp%gTnvtT
z;2n<fkq7e>YdUYxO1YhQErmYChfUP$l>8dG_<}Ls!M?^Gm(5&a@+`JuYZPn;+#$}*
zkgShk(DN}wUgvV}k3Ub@GpLQ5^u6o}ND6Z|GSA%CXdA)(o2hbPdvM>pi3!wtSMr&L
ze?^K19C|kB85DF?NoRPo$eHdJVQ@8Zj@>`7Mq1;`ZH%o%?n7ujGQV?k-jhckc>d@3
zqjQ;4#QibZRrcNYkoed#zqjgVegpcx!rn&gl!Ev7IpuN<^?x6{1?1*^XgR;fyJm(j
z(e<N$+-tjocLnSCxWU4`joO%uP7`ZltF?EMd1b_N8vakEeg~%%G#|tCnbOu%8tH;B
zozOGE=+rf@XJ|-jiB+!*^32$5lNbDke+Ued9ZXsW8G6nI#Dh$H-RU`Bjc>oAeV#e5
zQFr=I-3jTwqI=^8_N@WvxDp#4Fkh#Bdi~)ZiXGk($j`imPVBV>!`JK={ds?OK=;S-
z`vLtm#Nl$)gRI$iJmoS1{+aiY-u3Z`yJyF&pmcN1Xu1@8k0EdF{ZU&dz_$>b%b<PC
z-;T^(P#OJWiXYNDVJ&#-oY*tIK))3*_Znz@JT`o(VQ=f~U{idl_Z@77+$`=<`_a?D
z?|S4m(*7OUS(yRpM2+0dm~$^Q?-IuMV*gYWtL_Q4)K9#RdKdeI*y)-dPmb@V7VbxG
zJ#u>g-9k=2WxwBp9<9j?#if6WO9>gvU2-g$H^~ru@?lfo-_E&vn*Q|6Ino3DCCDDY
z-T`#Z<M(nCAC=X$uirrQ-J!J=ozI(gl`9|}iI;`!VCMYW8KXT;zl8VyRU@l;-xThS
zeIH@W#>PCY!5*V$CU{EZGVJO%p_qR1@mJqm89)qO;2Mn&eTL2BtwB7{t#5d{1_KiC
z>fRsV?a4Vq9A4v2G>RN#GB*oS`F(M^PvgsT@br6v9kA&C%2R)ooZtP5q%Ho(?(g^-
zp|9UownN9Uw})8ho^A0RqJy_e#?mjtMuD${TA3h;LyM(L=4`oQM2TFE?keV;gqrY0
zb^M39dN$}e-Ng94_;MC5?XXY9zB#BZrTOfw_&E$bE1+HcewB6uWASzMG4GS%<hTra
z1zh)gtEDq*HVxVN&^mBDNq-DA+`wFC|2T&1Gt}HlcpJd<mtQ{K{9dX1KeDm9Q*27g
z8xoYZS!L2Kqe8lXZ>iBA%`-VZjL%!iuTzta%qfLpZx!OJ^|zh4A2;=9?``@PxMT1f
zX*)O|7hfOUU(XAgGW4t?o(?8$v1zbr>ku~dJK7$`PlM|l_^XN6mm{5;w{h%Z%#M-c
z19xm>^<Aob&FMdQlU}QO)vjfopUZfhx&|~(j=bhx`|)_af$*j9#$cnEwLgJ)4FK=U
z$e6gn57Vzf$9l7F?Y&LoRzmJm!7+i~llT@j#2su*QXBdWpe28Le(3j9y`P%z<L6)_
z9_CIxYM~@Kn8|Y*n3h6ovFpd~FWA2_z_)<@YQ{^l=Y)Hxy!s7BgNOaZ<m>xziFA_)
zLegk$GwnL7joo%KZ6qPR@G-{2i3{yECHX<qA7l+10l#jXmDGW@zOHSeUOejyBSof7
zkfIX$n>xz6w`pf|l*2A<Q|z`l%WmgnNz-2VwBbp#$@F{Dww`9UN$|C=<40(>M&+IP
zjy~0&!}z8)vi=>~`Zlsban%(@46eGvHom%nR)+G!ooxK!l;Q`~k8t81<6k6USYd>|
RIB}?p#-q`iX86%~{U3Ebo9_Ss


From 3648afaab5ec2ba8dce1371d76c5ba69147b832a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 27 Jun 2020 17:04:01 +0200
Subject: [PATCH 1076/2300] Adding restart  parameter to v-install-unsigned-ssl

---
 bin/v-install-unsigned-ssl | 19 ++++++++++++-------
 1 file changed, 12 insertions(+), 7 deletions(-)

diff --git a/bin/v-install-unsigned-ssl b/bin/v-install-unsigned-ssl
index e0fdd46d..3c939e50 100644
--- a/bin/v-install-unsigned-ssl
+++ b/bin/v-install-unsigned-ssl
@@ -1,14 +1,19 @@
 #!/bin/bash
 
-# Script will install unsigned SSL to desired domain
-
 if [ $# -lt 1 ]; then
-	echo "usage: v-install-unsigned-ssl DOMAIN"
-	exit 1
+    echo "usage: v-install-unsigned-ssl DOMAIN [RESTART]"
+    exit 1
 fi
 
 domain=$1
 
+if [ $# -lt 2 ]; then
+    restart='yes'
+else
+    restart=$2
+fi
+
+
 user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
 
 if [ ! -d "/home/$user" ]; then
@@ -27,7 +32,7 @@ TMPLOC="/home/$user/tmp/$domain"
 mkdir $TMPLOC
 
 # Generating SSL certificate
-/usr/local/vesta/bin/v-generate-ssl-cert $domain $email 'US' 'California' 'San Francisco' 'myVesta Control Panel' 'IT' "www.$domain" > $TMPLOC/vst.pem
+/usr/local/vesta/bin/v-generate-ssl-cert $domain $email 'US' 'California' 'San Francisco' 'Vesta Control Panel' 'IT' "www.$domain" > $TMPLOC/vst.pem
 
 # Parsing certificate file
 crt_end=$(grep -n "END CERTIFICATE-" $TMPLOC/vst.pem |cut -f 1 -d:)
@@ -48,10 +53,10 @@ get_domain_values 'web'
 if [[ $SSL == 'no' ]]
 then
     #Configure SSL and install the cert
-    /usr/local/vesta/bin/v-add-web-domain-ssl $user $domain $TMPLOC
+    /usr/local/vesta/bin/v-add-web-domain-ssl $user $domain $TMPLOC "same" "$restart"
 else
     #Replace the existing cert with the new one
-    /usr/local/vesta/bin/v-change-web-domain-sslcert $user $domain $TMPLOC
+    /usr/local/vesta/bin/v-change-web-domain-sslcert $user $domain $TMPLOC "$restart"
 fi
 
 rm -rf $TMPLOC

From ade95317d100417c43411ae753a058feb4b239bf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 27 Jun 2020 17:05:10 +0200
Subject: [PATCH 1077/2300] Update v-install-unsigned-ssl

---
 bin/v-install-unsigned-ssl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-install-unsigned-ssl b/bin/v-install-unsigned-ssl
index 3c939e50..6e13e6e6 100644
--- a/bin/v-install-unsigned-ssl
+++ b/bin/v-install-unsigned-ssl
@@ -32,7 +32,7 @@ TMPLOC="/home/$user/tmp/$domain"
 mkdir $TMPLOC
 
 # Generating SSL certificate
-/usr/local/vesta/bin/v-generate-ssl-cert $domain $email 'US' 'California' 'San Francisco' 'Vesta Control Panel' 'IT' "www.$domain" > $TMPLOC/vst.pem
+/usr/local/vesta/bin/v-generate-ssl-cert $domain $email 'US' 'California' 'San Francisco' 'myVesta Control Panel' 'IT' "www.$domain" > $TMPLOC/vst.pem
 
 # Parsing certificate file
 crt_end=$(grep -n "END CERTIFICATE-" $TMPLOC/vst.pem |cut -f 1 -d:)

From 94ffccf1b0b9ccb517f770ad457052d8095c6dd4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 27 Jun 2020 20:24:03 +0200
Subject: [PATCH 1078/2300] Update v-install-unsigned-ssl

---
 bin/v-install-unsigned-ssl | 29 ++++++++++++++++++++++++++++-
 1 file changed, 28 insertions(+), 1 deletion(-)

diff --git a/bin/v-install-unsigned-ssl b/bin/v-install-unsigned-ssl
index 6e13e6e6..8f126c3d 100644
--- a/bin/v-install-unsigned-ssl
+++ b/bin/v-install-unsigned-ssl
@@ -1,5 +1,16 @@
 #!/bin/bash
 
+# info: install unsigned SSL to domain
+# options: DOMAIN [RESTART]
+#
+# The function install unsigned SSL to domain
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
 if [ $# -lt 1 ]; then
     echo "usage: v-install-unsigned-ssl DOMAIN [RESTART]"
     exit 1
@@ -13,6 +24,9 @@ else
     restart=$2
 fi
 
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
 
 user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
 
@@ -26,6 +40,10 @@ if [ ! -d "/home/$user/web/$domain/public_html" ]; then
     exit 1;
 fi
 
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
 email="info@$domain"
 
 TMPLOC="/home/$user/tmp/$domain"
@@ -45,6 +63,7 @@ sed -n "1,${crt_end}p" $TMPLOC/vst.pem > $TMPLOC/$domain.crt
 sed -n "$key_start,${key_end}p" $TMPLOC/vst.pem > $TMPLOC/$domain.key
 chmod 666 $TMPLOC/*
 
+source /usr/local/vesta/func/main.sh
 source /usr/local/vesta/func/domain.sh
 
 USER_DATA="/usr/local/vesta/data/users/$user";
@@ -61,4 +80,12 @@ fi
 
 rm -rf $TMPLOC
 
-exit 0
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+
+exit

From 8933d2b5b0a9c3beab83ea2bbe187e145069b9d0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 27 Jun 2020 20:25:36 +0200
Subject: [PATCH 1079/2300] Update v-install-unsigned-ssl

---
 bin/v-install-unsigned-ssl | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bin/v-install-unsigned-ssl b/bin/v-install-unsigned-ssl
index 8f126c3d..85727c33 100644
--- a/bin/v-install-unsigned-ssl
+++ b/bin/v-install-unsigned-ssl
@@ -24,6 +24,9 @@ else
     restart=$2
 fi
 
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/domain.sh
+
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#
@@ -63,9 +66,6 @@ sed -n "1,${crt_end}p" $TMPLOC/vst.pem > $TMPLOC/$domain.crt
 sed -n "$key_start,${key_end}p" $TMPLOC/vst.pem > $TMPLOC/$domain.key
 chmod 666 $TMPLOC/*
 
-source /usr/local/vesta/func/main.sh
-source /usr/local/vesta/func/domain.sh
-
 USER_DATA="/usr/local/vesta/data/users/$user";
 get_domain_values 'web'
 

From f269b275dad7a5d815e2ff31c809ec36cea5e4ea Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 27 Jun 2020 20:37:48 +0200
Subject: [PATCH 1080/2300] Install unsigned SSL when user add domain

---
 bin/v-add-web-domain | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-add-web-domain b/bin/v-add-web-domain
index b3d80de3..5a4f029f 100755
--- a/bin/v-add-web-domain
+++ b/bin/v-add-web-domain
@@ -164,6 +164,9 @@ echo "DOMAIN='$domain' IP='$ip' IP6='' ALIAS='$ALIAS' TPL='$WEB_TEMPLATE'\
  STATS='' STATS_USER='' STATS_CRYPT='' U_DISK='0' U_BANDWIDTH='0'\
  SUSPENDED='no' TIME='$time' DATE='$date'" >> $USER_DATA/web.conf
 
+# Install unsigned SSL
+$BIN/v-install-unsigned-ssl "$domain" "no"
+
 # Restarting web server
 $BIN/v-restart-web $restart
 check_result $? "Web restart failed" >/dev/null

From 884b97853ab99e1c21752ab36e70427b14240aa3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 27 Jun 2020 20:42:18 +0200
Subject: [PATCH 1081/2300] Version 0.9.8-26-26

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index a853309e..758fb6f7 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-25
+vesta-0.9.8-26-26

From 03410e47c44b617829931be0afccabdbdb920358 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 28 Jun 2020 01:49:03 +0200
Subject: [PATCH 1082/2300] Create Changelog

---
 Changelog | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 Changelog

diff --git a/Changelog b/Changelog
new file mode 100644
index 00000000..78643984
--- /dev/null
+++ b/Changelog
@@ -0,0 +1,15 @@
+Version 0.9.8-26-26 [27-Jun-2020]
+==================================================
+
+* Self-signed SSL will be automaticaly added when you add new domain
+* Script for adding self-signed SSL to desired domain
+* From now, on fresh installed server, default backup cron goes at Saturday at 01 AM (instead of everyday at 05 AM)
+
+Version 0.9.8-26-25 [23-Jun-2020]
+==================================================
+* [Security] Fixing unnecessary slash in nginx configs for phpmyadmin and roundcube
+* [Security] Adding escapeshellarg on few more places in php code
+
+Version 0.9.8-26-24 [22-Jun-2020]
+==================================================
+* nginx + php-fpm installer variant now finally works

From aac0fd1f8f854bfa533217947fc100673fa0e471 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 28 Jun 2020 01:50:15 +0200
Subject: [PATCH 1083/2300] Rename Changelog to Changelog.md

---
 Changelog => Changelog.md | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename Changelog => Changelog.md (100%)

diff --git a/Changelog b/Changelog.md
similarity index 100%
rename from Changelog
rename to Changelog.md

From a8565399d3f1f7ea217356a8ba79a7e04306f47c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 28 Jun 2020 02:41:44 +0200
Subject: [PATCH 1084/2300] Update Changelog.md

---
 Changelog.md | 51 +++++++++++++++++++++++++++++++++++++++++++++++----
 1 file changed, 47 insertions(+), 4 deletions(-)

diff --git a/Changelog.md b/Changelog.md
index 78643984..75223015 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,9 +1,9 @@
 Version 0.9.8-26-26 [27-Jun-2020]
 ==================================================
-
-* Self-signed SSL will be automaticaly added when you add new domain
-* Script for adding self-signed SSL to desired domain
+* [Feature] Self-signed SSL will be automaticaly added when you add new domain
+* [Feature] Script for adding self-signed SSL to desired domain
 * From now, on fresh installed server, default backup cron goes at Saturday at 01 AM (instead of everyday at 05 AM)
+* New favicon for hosting panel
 
 Version 0.9.8-26-25 [23-Jun-2020]
 ==================================================
@@ -12,4 +12,47 @@ Version 0.9.8-26-25 [23-Jun-2020]
 
 Version 0.9.8-26-24 [22-Jun-2020]
 ==================================================
-* nginx + php-fpm installer variant now finally works
+* [Bugfix] nginx + php-fpm installer variant now finally works
+
+Version 0.9.8-26-23 [14-Jun-2020]
+==================================================
+* Adding label that LetsEncrypt can be added when you Edit domain
+
+Version 0.9.8-26-22 [13-Jun-2020]
+==================================================
+* [Bugfix] Checking (in order to delete) php7.4 pool config file while deleting domain
+
+Version 0.9.8-26-21 [13-Jun-2020]
+==================================================
+* [Feature] Blocking executable files inside archives in received emails (ClamAV)
+* [Bugfix] Removing ability to schedule LetsEncrypt issuing while adding new domain (because it can fall in infinite loop whole day)
+* [Bugfix] Force acme-challenge to use Apache if myVesta is behind main nginx
+* [Bugfix] Adding http2 support to nginx caching.tpl
+* [Bugfix] Script that removes depricated 'ssl on;' in nginx templates
+* [Security] Ensure UPDATE_SSL_SCRIPT is not set in some config files
+
+Version 0.9.8-26-20 [01-Jun-2020]
+==================================================
+* [Bugfix] Script that will ensure that Apache2 will always stay in mpm_event mode
+* [Bugfix] Ensure config files will not be overwritten while updating vesta-nginx package
+* [Bugfix] Fixing URL in v-update-web-templates script
+* [Feature] Additional rates for nginx anti-denial-of-service templates
+
+Version 0.9.8-26-19 [15-May-2020]
+==================================================
+* [Bugfix] Do not match subdomains while restoring domain [v-restore-user]
+
+Version 0.9.8-26-18 [15-May-2020]
+==================================================
+* [Bugfix] Fixing NS parameters in v-add-dns-on-web-alias
+
+Version 0.9.8-26-17 [15-May-2020]
+==================================================
+* [Bugfix] Reverting default clamav socket path 
+* [Bugfix] Putv mail_max_userip_connections = 50 in dovecot
+
+Version 0.9.8-26-16 [15-May-2020]
+==================================================
+* [Bugfix] Allow quick restarting of nginx if acme-challenge should be added many times
+* [Bugfix] Enabling email notification  to fresh installed servers about backup success status
+* [Bugfix] Timeout 10 sec for apache2 status

From 46a2f3708b7a74e409aa39100f07b4e9b1bbab20 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 28 Jun 2020 03:18:42 +0200
Subject: [PATCH 1085/2300] Update Changelog.md

---
 Changelog.md | 41 ++++++++++++++++++++++++++++++++++++++---
 1 file changed, 38 insertions(+), 3 deletions(-)

diff --git a/Changelog.md b/Changelog.md
index 75223015..e4eafde6 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -7,8 +7,8 @@ Version 0.9.8-26-26 [27-Jun-2020]
 
 Version 0.9.8-26-25 [23-Jun-2020]
 ==================================================
-* [Security] Fixing unnecessary slash in nginx configs for phpmyadmin and roundcube
-* [Security] Adding escapeshellarg on few more places in php code
+* [Security] Fixing unnecessary slash in nginx configs for phpmyadmin and roundcube (Credits to Bernardo Berg @bberg1984 for finding this issue!)
+* [Security] Adding escapeshellarg on few more places in php code (Credits to Talha Günay and @Lupul for finding these places)
 
 Version 0.9.8-26-24 [22-Jun-2020]
 ==================================================
@@ -49,10 +49,45 @@ Version 0.9.8-26-18 [15-May-2020]
 Version 0.9.8-26-17 [15-May-2020]
 ==================================================
 * [Bugfix] Reverting default clamav socket path 
-* [Bugfix] Putv mail_max_userip_connections = 50 in dovecot
+* [Bugfix] Put mail_max_userip_connections = 50 in dovecot
 
 Version 0.9.8-26-16 [15-May-2020]
 ==================================================
 * [Bugfix] Allow quick restarting of nginx if acme-challenge should be added many times
 * [Bugfix] Enabling email notification  to fresh installed servers about backup success status
 * [Bugfix] Timeout 10 sec for apache2 status
+
+Version 0.9.8-26-15 [09-May-2020]
+==================================================
+* [Feature] nginx anti-denial-of-service templates
+* New logo
+
+Version 0.9.8-26-14 [08-May-2020]
+==================================================
+* v-clone-website script switched to parameters
+* Display new version in console while updating myVesta
+
+Version 0.9.8-26-13 [07-May-2020]
+==================================================
+* [Feature] Put build date and version in right-bottom corner of control panel
+
+Version 0.9.8-26-12 [07-May-2020]
+==================================================
+* [Feature] Put build date and version while compiling myVesta
+* [Feature] Office365 DNS template
+* [Feature] Yandex DNS template
+* ProFTPD MaxIstances = 100 for fresh installed servers
+
+Version 0.9.8-26-11 [01-May-2020]
+==================================================
+* [Feature] Skipping LE renewing after 7 failed attempts
+* [Bugfix] Keep conf files during auto-update
+* [Bugfix] Do not restart apache while preparing letsencrypt acme challenge
+* [Bugfix] Set ALLOW_BACKUP_ANYTIME='yes' for fresh installed servers
+
+Version 0.9.8-26-10 [11-Apr-2020]
+==================================================
+* [Feature] Creating v-normalize-restored-user script (normalize NS1, NS2 and IP of account that is backuped on other server and restored on this server)
+* Tweak for hostname FPM conf
+* [Security] Forbid changing root password (Credits to Alexandre ZANNI, Orange Cyberdefense, https://cyberdefense.orange.com)
+* [Security] Importing system enviroment in v-change-user-password (Credits to Alexandre ZANNI, Orange Cyberdefense, https://cyberdefense.orange.com)

From bee9a7498a3254f575c1741c9187ea8887b22cc3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 28 Jun 2020 03:59:31 +0200
Subject: [PATCH 1086/2300] Update Changelog.md

---
 Changelog.md | 52 ++++++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 50 insertions(+), 2 deletions(-)

diff --git a/Changelog.md b/Changelog.md
index e4eafde6..b0bb7a6b 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -54,12 +54,12 @@ Version 0.9.8-26-17 [15-May-2020]
 Version 0.9.8-26-16 [15-May-2020]
 ==================================================
 * [Bugfix] Allow quick restarting of nginx if acme-challenge should be added many times
-* [Bugfix] Enabling email notification  to fresh installed servers about backup success status
+* [Bugfix] Enabling email notification to fresh installed servers about backup success status
 * [Bugfix] Timeout 10 sec for apache2 status
 
 Version 0.9.8-26-15 [09-May-2020]
 ==================================================
-* [Feature] nginx anti-denial-of-service templates
+* [Feature] nginx templates that can prevent denial-of-service on your server
 * New logo
 
 Version 0.9.8-26-14 [08-May-2020]
@@ -91,3 +91,51 @@ Version 0.9.8-26-10 [11-Apr-2020]
 * Tweak for hostname FPM conf
 * [Security] Forbid changing root password (Credits to Alexandre ZANNI, Orange Cyberdefense, https://cyberdefense.orange.com)
 * [Security] Importing system enviroment in v-change-user-password (Credits to Alexandre ZANNI, Orange Cyberdefense, https://cyberdefense.orange.com)
+
+Version 0.9.8-26-9 [23-Mar-2020]
+==================================================
+* [Security] Preventing manipulation with $SERVER['HTTP_HOST'] (Credits to @mdisec - Managing Partner of PRODAFT / INVICTUS A.Ş. Master ninja at pentest.blog)
+
+Version 0.9.8-26-8 [23-Mar-2020]
+==================================================
+* [Security] Temporary fix for parsing backup conf (Credits to @dreiggy - https://pentest.blog/vesta-control-panel-second-order-remote-code-execution-0day-step-by-step-analysis/)
+
+Version 0.9.8-26-7 [18-Mar-2020]
+==================================================
+* [Bugfix] Fix that avoid LetsEncrypt domain validation timeout
+* [Bugfix] Set timeout in v-list-sys-web-status script
+
+Version 0.9.8-26-6 [21-Feb-2020]
+==================================================
+* [Bugfix] mail-wrapper.php from now works
+* [Feature] Introducing NOTIFY_ADMIN_FULL_BACKUP, email notification about backup success status
+* [Feature] Introducing KEEP_N_FTP_BACKUPS, ability to limit number of remote FTP backups
+* [Feature] Introducing force-https-webmail-phpmyadmin nginx template
+* [Feature] Trigger for /root/update_firewall_custom.sh
+* Moving to myvestacp.com
+
+Older version
+==================================================
+* [Bugfix] Let's Encrypt HTTP/2 support (by @serghey-rodin)
+* [Bugfix] Fixing broken autoreply output
+* Support for Debian 10 (previous Debian releases are also supported, but Debian 10 is recommended)
+* [Support for multi-PHP versions](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
+* You can limit the maximum number of sent emails (per hour) [per mail account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L105-L106) and [per hosting account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L65-L66), preventing hijacking of email accounts and preventing PHP malware scripts to send spam.
+* You can see [what PHP scripts are sending emails](https://github.com/myvesta/vesta/blob/master/install/debian/10/php/php7.3-dedi.patch#L50), when and to whom
+* You can completely "lock" myVesta so it can be accessed only via **secret URL**, for example https://serverhost:8083/?MY-SECRET-URL
+    + Literally no PHP scripts will be alive on your hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - attackers won't be able to access it without knowing your secret URL - PHP scripts from myVesta
+* We [disabled dangerous PHP functions](https://github.com/myvesta/vesta/blob/master/install/debian/10/php/php7.3-dedi.patch#L9) in php.ini, so even if, for example, your customer's CMS gets compromised, hacker will not be able to execute shell scripts from within PHP.
+* Apache is fully switched to mpm_event mode, while PHP is running in PHP-FPM mode, which is the most stable PHP-stack solution
+    + OPCache is turned on by default
+* Auto-generating LetsEncrypt SSL for server hostname (signed SSL for Vesta 8083 port, for dovecot (IMAP & POP3) and for Exim (SMTP))
+* You can change Vesta port during installation or later using one command line: **v-change-vesta-port [number]**
+* Backup will run with lowest priority (to avoid load on server), and can be configured to run only by night (and to stop on the morning and continue next night)
+* You can compile Vesta binaries by yourself
+* [Script that will convert Vesta to myVesta](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/convert-vesta-to-myvesta.sh)
+* [Wordpress installer in one second](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/create_wp_https)
+* [Script for importing cPanel backups to Vesta](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/cpanel-import.sh)
+* [Cloning script that will copy the whole site from one domain to another (sub)domain](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/v-clone-website)
+* [Script that will migrate your site from http to https, replacing http to https URLs in database](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/v-migrate-site-to-https)
+* [Script that will install multiple PHP versions on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
+* [Script that will install nginx templates that can prevent denial-of-service on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh)
+* [Official Vesta Softaculous installer](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/install-softaculous.sh)

From 5f3d2511efa1c1843249674af1136c69152875de Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 28 Jun 2020 04:42:37 +0200
Subject: [PATCH 1087/2300] Update Changelog.md

---
 Changelog.md | 45 ++++++++++++++++++++++++++++++++++++++++-----
 1 file changed, 40 insertions(+), 5 deletions(-)

diff --git a/Changelog.md b/Changelog.md
index b0bb7a6b..5ee3e01f 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -112,12 +112,51 @@ Version 0.9.8-26-6 [21-Feb-2020]
 * [Feature] Introducing KEEP_N_FTP_BACKUPS, ability to limit number of remote FTP backups
 * [Feature] Introducing force-https-webmail-phpmyadmin nginx template
 * [Feature] Trigger for /root/update_firewall_custom.sh
+
+Version 0.9.8-26-5 [10-Feb-2020]
+==================================================
+* [Security] sudoers fix for Debian10
+* [Feature] [Script that will migrate your site from http to https, replacing http to https URLs in database](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/v-migrate-site-to-https)
+* [Feature] [Cloning script that will copy the whole site from one domain to another (sub)domain](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/v-clone-website)
+* [Feature] [Script that will install multiple PHP versions on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
+* [Bugfix] Roundcube force https
+* [Bugfix] Exim compatibility with Loopia for Debian10
+
+Version 0.9.8-26-4 [07-Jan-2020]
+==================================================
+* [Feature] Allow whitelisting specific IP for /api/
+* [Feature] Allow whitelisting specific IP to avoid secret_url
+* [Feature] Allow Softaculous in secure_login gateway
+* [Bugfix] apparmor install fix again
+* [Bugfix] Turning off MariaDB SQL strict mode
+
+Version 0.9.8-26-3 [26-Nov-2019]
+==================================================
+* [Feature] Support for sub-releases
+* [Bugfix] Better check if session cron already added
+
+Version 0.9.8-26-2 [15-Nov-2019]
+==================================================
+* [Feature] Support for sub-sub-sub-sub versions :))
+* [Bugfix] Support for longer username of email accounts
+* [Bugfix] apparmor install fix
+* [Bugfix] Trying to fix ClamAV broken socket
 * Moving to myvestacp.com
 
-Older version
+Version 0.9.8-26 [28-Sep-2019]
 ==================================================
 * [Bugfix] Let's Encrypt HTTP/2 support (by @serghey-rodin)
 * [Bugfix] Fixing broken autoreply output
+* [Feature] Multi-PHP support for PHP 7.4
+* [Feature] Multi-PHP installer for Debian 8
+* [Bugfix] Cron for removing old PHP sessions files
+* [Bugfix] New CloudFlare IPs
+* [Security] MySQL port blocked by default from outside
+* [Feature] Warning when server hostname is not pointing to server IP
+* [Feature] max_length_of_MySQL_username=80
+
+Older versions
+==================================================
 * Support for Debian 10 (previous Debian releases are also supported, but Debian 10 is recommended)
 * [Support for multi-PHP versions](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
 * You can limit the maximum number of sent emails (per hour) [per mail account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L105-L106) and [per hosting account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L65-L66), preventing hijacking of email accounts and preventing PHP malware scripts to send spam.
@@ -134,8 +173,4 @@ Older version
 * [Script that will convert Vesta to myVesta](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/convert-vesta-to-myvesta.sh)
 * [Wordpress installer in one second](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/create_wp_https)
 * [Script for importing cPanel backups to Vesta](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/cpanel-import.sh)
-* [Cloning script that will copy the whole site from one domain to another (sub)domain](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/v-clone-website)
-* [Script that will migrate your site from http to https, replacing http to https URLs in database](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/v-migrate-site-to-https)
-* [Script that will install multiple PHP versions on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
-* [Script that will install nginx templates that can prevent denial-of-service on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh)
 * [Official Vesta Softaculous installer](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/install-softaculous.sh)

From 881d3bc64eda5a5685d046bf9323ea1e9acbf7d4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 28 Jun 2020 04:49:27 +0200
Subject: [PATCH 1088/2300] Update README.md

---
 README.md | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 3ff9c929..46098031 100644
--- a/README.md
+++ b/README.md
@@ -1,14 +1,17 @@
 News
 ==================================================
 
+We finally have normal homepage:
+- https://myvestacp.com/
+
 Forum:
 - https://forum.myvestacp.com/
 
 Wiki:
 - https://wiki.myvestacp.com/
 
-And we finally have normal homepage:
-- https://myvestacp.com/
+Changelog:
+- https://github.com/myvesta/vesta/blob/master/Changelog.md
 
 myVesta Control Panel
 ==================================================

From b9f302fed9ff76aa1f8f3b41a51ad9c8507cd870 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 28 Jun 2020 13:48:10 +0200
Subject: [PATCH 1089/2300] Update Changelog.md

---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 5ee3e01f..24aa320a 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,6 +1,6 @@
 Version 0.9.8-26-26 [27-Jun-2020]
 ==================================================
-* [Feature] Self-signed SSL will be automaticaly added when you add new domain
+* [Feature] Self-signed SSL will be automaticaly added when you add new domain (CloudFlare is fine with that, you don't need LetsEncrypt anymore if you use CloudFlare as reverse-proxy(CDN+Firewall))
 * [Feature] Script for adding self-signed SSL to desired domain
 * From now, on fresh installed server, default backup cron goes at Saturday at 01 AM (instead of everyday at 05 AM)
 * New favicon for hosting panel

From 3dca37bc769b6d831004579e52c9842bf6f49030 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 28 Jun 2020 13:57:26 +0200
Subject: [PATCH 1090/2300] Update Changelog.md

---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 24aa320a..2df62c6a 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,7 +1,7 @@
 Version 0.9.8-26-26 [27-Jun-2020]
 ==================================================
 * [Feature] Self-signed SSL will be automaticaly added when you add new domain (CloudFlare is fine with that, you don't need LetsEncrypt anymore if you use CloudFlare as reverse-proxy(CDN+Firewall))
-* [Feature] Script for adding self-signed SSL to desired domain
+* [Feature] Script for adding self-signed SSL to desired domain [v-install-unsigned-ssl]
 * From now, on fresh installed server, default backup cron goes at Saturday at 01 AM (instead of everyday at 05 AM)
 * New favicon for hosting panel
 

From 1f5acaa843e7d7111524c79945d3796aec995868 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 28 Jun 2020 23:26:42 +0200
Subject: [PATCH 1091/2300] Update Changelog.md

---
 Changelog.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/Changelog.md b/Changelog.md
index 2df62c6a..22b1d78e 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,6 +1,6 @@
 Version 0.9.8-26-26 [27-Jun-2020]
 ==================================================
-* [Feature] Self-signed SSL will be automaticaly added when you add new domain (CloudFlare is fine with that, you don't need LetsEncrypt anymore if you use CloudFlare as reverse-proxy(CDN+Firewall))
+* [Feature] Self-signed SSL will be automaticaly added when you add new domain (CloudFlare is fine with that, you don't need LetsEncrypt anymore if you use CloudFlare as reverse-proxy(CDN+Firewall), just set "Full" in SSL section on CloudFlare)
 * [Feature] Script for adding self-signed SSL to desired domain [v-install-unsigned-ssl]
 * From now, on fresh installed server, default backup cron goes at Saturday at 01 AM (instead of everyday at 05 AM)
 * New favicon for hosting panel
@@ -132,7 +132,6 @@ Version 0.9.8-26-4 [07-Jan-2020]
 
 Version 0.9.8-26-3 [26-Nov-2019]
 ==================================================
-* [Feature] Support for sub-releases
 * [Bugfix] Better check if session cron already added
 
 Version 0.9.8-26-2 [15-Nov-2019]

From c57b15b5daca2a0ea88ee6a89a2ff5a4ef47d2a3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 3 Jul 2020 16:49:25 +0200
Subject: [PATCH 1092/2300] Fix for Too many concurrent SMTP connections

---
 install/debian/10/exim/exim4.conf.template | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
index 95e9bc48..6e889067 100644
--- a/install/debian/10/exim/exim4.conf.template
+++ b/install/debian/10/exim/exim4.conf.template
@@ -25,6 +25,10 @@ acl_smtp_rcpt = acl_check_rcpt
 acl_smtp_data = acl_check_data
 acl_smtp_mime = acl_check_mime
 
+# log_selector = +smtp_connection
+smtp_accept_max = 50
+smtp_accept_max_per_host = 4
+
 .ifdef SPAMASSASSIN
 spamd_address = 127.0.0.1 783
 .endif

From 438bd68067576432335a9b7595cd2214b99ca093 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 4 Jul 2020 23:09:37 +0200
Subject: [PATCH 1093/2300] call custom_callback.sh in vesta_compile.sh

---
 src/deb/vesta_compile.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 694f472f..71e44c63 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -278,6 +278,12 @@ if [ "$CWEB_B" = true ]; then
   cp /root/vesta/src/deb/latest.txt $PATH_OF_C_WEB_FOLDER_ROOT/latest.txt
   echo "$BUILD_DATE" > $PATH_OF_C_WEB_FOLDER_ROOT/build_date.txt
 
+  if [ -f "/root/custom_callback.sh" ]; then
+    BUILD_RELEASE=$(</root/vesta/src/deb/latest.txt)
+    BUILD_RELEASE=${BUILD_RELEASE:6}
+    bash /root/custom_callback.sh "$BUILD_RELEASE" "$BUILD_DATE" "/root/vesta/Changelog.md"
+  fi
+
   ###########
   cd $PATH_OF_C_WEB_FOLDER_ROOT/debian/8
 

From 2004fa9299aa361458b97bc6a44da0adf5aa8c68 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 4 Jul 2020 23:26:44 +0200
Subject: [PATCH 1094/2300] show changelog after update

---
 src/deb/vesta/postinst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index b3b280f5..83654e9a 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -19,6 +19,9 @@ if [ ! -d "/usr/local/vesta/data/upgrades" ]; then
     mkdir -p /usr/local/vesta/data/upgrades
 fi
 
+# show changelog after update
+touch /usr/local/vesta/data/upgrades/show_changelog
+
 if [ ! -f "/usr/local/vesta/data/upgrades/tune-fpm-config-files-v1" ]; then
     touch /usr/local/vesta/data/upgrades/tune-fpm-config-files-v1
     

From c2a4f744965b484e1906f5dfdd71faf20a1fd315 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 4 Jul 2020 23:56:10 +0200
Subject: [PATCH 1095/2300] chmod a=rw
 /usr/local/vesta/data/upgrades/show_changelog

---
 src/deb/vesta/postinst | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 83654e9a..e93ca980 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -20,7 +20,8 @@ if [ ! -d "/usr/local/vesta/data/upgrades" ]; then
 fi
 
 # show changelog after update
-touch /usr/local/vesta/data/upgrades/show_changelog
+echo "1" > /usr/local/vesta/data/upgrades/show_changelog
+chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
 if [ ! -f "/usr/local/vesta/data/upgrades/tune-fpm-config-files-v1" ]; then
     touch /usr/local/vesta/data/upgrades/tune-fpm-config-files-v1

From 3607c9325ac415bf74464f945e39ffd702b21e6d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 00:02:22 +0200
Subject: [PATCH 1096/2300] Check and get changelog if needed

---
 web/list/user/index.php | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/web/list/user/index.php b/web/list/user/index.php
index 302e8c14..60d47908 100644
--- a/web/list/user/index.php
+++ b/web/list/user/index.php
@@ -14,6 +14,23 @@ if ($user == 'admin') {
 $data = json_decode(implode('', $output), true);
 $data = array_reverse($data,true);
 
+// Check and get changelog if needed
+if ($user == 'admin') {
+    if (file_exists("/usr/local/vesta/data/upgrades/show_changelog")) {
+        $show_changelog_value=file_get_contents("/usr/local/vesta/data/upgrades/show_changelog");
+        $show_changelog_value_int=intval($show_changelog_value);
+        if ($show_changelog_value_int==1) {
+            $changelog='';
+            $changelog_arr=file("/usr/local/vesta/Changelog.md");
+            for ($i=0; $i<7; $i++) {
+                if ($i>1) $changelog.="\n";
+                $changelog.=$changelog_arr[$i];
+            }
+            file_put_contents("/usr/local/vesta/data/upgrades/show_changelog", "0");
+        }
+    }
+}
+
 // Render page
 render_page($user, $TAB, 'list_user');
 

From af58e5abbc529b4f6376795fb04da887bf4c8839 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 00:06:07 +0200
Subject: [PATCH 1097/2300] Show changelog in template

---
 web/templates/admin/list_user.html | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index b3b627e7..072b447d 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -64,6 +64,9 @@
 
     <div class="l-center units">
       <?php
+        if (isset($changelog))
+          echo "<br /><br /><h1 style='margin: 0'>".__("What's new:")."</h1><br />Changelog:<br /><pre>".$changelog."</pre>".__("See")." <a style=\"color: blue; text-decoration: underline;\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\" >".__("full changelog")."</a>.<br />".__("This changelog only admin see after myVesta upgrade, and will dissapear on next refresh.")."<hr />";
+        
         foreach ($data as $key => $value) {
           ++$i;
           if ($data[$key]['SUSPENDED'] == 'yes') {

From ab7a75e07353db47e012458b2def111f2f030f34 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 00:11:09 +0200
Subject: [PATCH 1098/2300] Open changelog in new tab

---
 web/templates/admin/list_user.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index 072b447d..54bef750 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -65,7 +65,7 @@
     <div class="l-center units">
       <?php
         if (isset($changelog))
-          echo "<br /><br /><h1 style='margin: 0'>".__("What's new:")."</h1><br />Changelog:<br /><pre>".$changelog."</pre>".__("See")." <a style=\"color: blue; text-decoration: underline;\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\" >".__("full changelog")."</a>.<br />".__("This changelog only admin see after myVesta upgrade, and will dissapear on next refresh.")."<hr />";
+          echo "<br /><br /><h1 style='margin: 0'>".__("What's new:")."</h1><br />Changelog:<br /><pre>".$changelog."</pre>".__("See")." <a style=\"color: blue; text-decoration: underline;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\" >".__("full changelog")."</a>.<br />".__("This changelog only admin see after myVesta upgrade, and will dissapear on next refresh.")."<hr />";
         
         foreach ($data as $key => $value) {
           ++$i;

From d82523f1d1cc4d631741ef1a0d17f231f825f0a3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 00:27:30 +0200
Subject: [PATCH 1099/2300] Better colors for changelog

---
 web/templates/admin/list_user.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index 54bef750..6c9d4794 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -65,7 +65,7 @@
     <div class="l-center units">
       <?php
         if (isset($changelog))
-          echo "<br /><br /><h1 style='margin: 0'>".__("What's new:")."</h1><br />Changelog:<br /><pre>".$changelog."</pre>".__("See")." <a style=\"color: blue; text-decoration: underline;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\" >".__("full changelog")."</a>.<br />".__("This changelog only admin see after myVesta upgrade, and will dissapear on next refresh.")."<hr />";
+          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br />Changelog:<br /><pre>".$changelog."</pre>".__("See")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\" >".__("full changelog")."</a>.<br />".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")."<br /><br /><hr style=\"color: #ffebcd;\" />";
         
         foreach ($data as $key => $value) {
           ++$i;

From 7c12046edda30e4bcce0e4f9e83d6310d10e2c6d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 01:32:41 +0200
Subject: [PATCH 1100/2300] Better truncating of changelog

---
 web/list/user/index.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/web/list/user/index.php b/web/list/user/index.php
index 60d47908..da708edc 100644
--- a/web/list/user/index.php
+++ b/web/list/user/index.php
@@ -22,7 +22,8 @@ if ($user == 'admin') {
         if ($show_changelog_value_int==1) {
             $changelog='';
             $changelog_arr=file("/usr/local/vesta/Changelog.md");
-            for ($i=0; $i<7; $i++) {
+            for ($i=0; $i<30; $i++) {
+                if (trim($changelog_arr[$i])=="") break;
                 if ($i>1) $changelog.="\n";
                 $changelog.=$changelog_arr[$i];
             }

From 8f691d57e3ad495bea7448ad2128d901e1452e5f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 01:54:02 +0200
Subject: [PATCH 1101/2300] Changing links

---
 web/templates/admin/list_user.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index 6c9d4794..861503b5 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -65,7 +65,7 @@
     <div class="l-center units">
       <?php
         if (isset($changelog))
-          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br />Changelog:<br /><pre>".$changelog."</pre>".__("See")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\" >".__("full changelog")."</a>.<br />".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")."<br /><br /><hr style=\"color: #ffebcd;\" />";
+          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br />Changelog:<br /><pre>".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")."<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, wiki and forum")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" />";
         
         foreach ($data as $key => $value) {
           ++$i;

From a44f38257f59f9c58100b32a329bf2b98206b933 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 02:57:50 +0200
Subject: [PATCH 1102/2300] Better changelog style

---
 web/templates/admin/list_user.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index 861503b5..c6b5a750 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -65,7 +65,7 @@
     <div class="l-center units">
       <?php
         if (isset($changelog))
-          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br />Changelog:<br /><pre>".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")."<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, wiki and forum")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" />";
+          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br />Changelog:<br /><pre  style=\"padding: 16px; overflow: auto; font-size: 85%; line-height: 1.45; background-color: #f6f8fa; border-radius: 3px;\">".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")."<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, wiki and forum")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" />";
         
         foreach ($data as $key => $value) {
           ++$i;

From c582a08b357ddc75aeeefea037a7aa930a874802 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 03:01:59 +0200
Subject: [PATCH 1103/2300] Linking changelog

---
 web/templates/admin/list_user.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index c6b5a750..66efaa63 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -65,7 +65,7 @@
     <div class="l-center units">
       <?php
         if (isset($changelog))
-          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br />Changelog:<br /><pre  style=\"padding: 16px; overflow: auto; font-size: 85%; line-height: 1.45; background-color: #f6f8fa; border-radius: 3px;\">".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")."<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, wiki and forum")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" />";
+          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br /><a style=\"color: #007bff;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\">Changelog:</a><br /><pre  style=\"padding: 16px; overflow: auto; font-size: 85%; line-height: 1.45; background-color: #f6f8fa; border-radius: 3px;\">".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")."<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, wiki and forum")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" />";
         
         foreach ($data as $key => $value) {
           ++$i;

From f6089d53772909a2385c03ee659655ecc10d3e16 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 13:27:54 +0200
Subject: [PATCH 1104/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 46098031..7cc1caf5 100644
--- a/README.md
+++ b/README.md
@@ -32,7 +32,7 @@ Features of myVesta
 
 + [Support for multi-PHP versions](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
 
-+ You can limit the maximum number of sent emails (per hour) [per mail account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L105-L106) and [per hosting account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L65-L66), preventing hijacking of email accounts and preventing PHP malware scripts to send spam.
++ You can limit the maximum number of sent emails (per hour) [per mail account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L109-L110) and [per hosting account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L72-L73), preventing hijacking of email accounts and preventing PHP malware scripts to send spam.
 
 + You can see [what PHP scripts are sending emails](https://github.com/myvesta/vesta/blob/master/install/debian/10/php/php7.3-dedi.patch#L50), when and to whom
 

From 89f5e9954c7fd3c14be1948a9c48000328224019 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 22:34:38 +0200
Subject: [PATCH 1105/2300] Update PHP-FPM-73.sh

---
 .../debian/10/templates/web/apache2/PHP-FPM-73.sh   | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73.sh b/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
index 546fb7c3..72f9cec6 100755
--- a/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -45,6 +45,7 @@ pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
 pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
@@ -79,9 +80,13 @@ if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_73
     service php7.3-fpm restart
 fi
-
 if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.3/fpm/pool.d/www.conf
 fi
 
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    service php7.4-fpm restart
+fi
+
 exit 0

From a404a369ac92e99b479e1663b23a1ff75a7cbaaf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 22:42:15 +0200
Subject: [PATCH 1106/2300] Second tuning php-fpm pool.d config files

---
 src/deb/vesta/postinst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index e93ca980..e2bf8dbd 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -23,11 +23,11 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
-if [ ! -f "/usr/local/vesta/data/upgrades/tune-fpm-config-files-v1" ]; then
-    touch /usr/local/vesta/data/upgrades/tune-fpm-config-files-v1
+if [ ! -f "/usr/local/vesta/data/upgrades/tune-fpm-config-files-v2" ]; then
+    touch /usr/local/vesta/data/upgrades/tune-fpm-config-files-v2
     
-    mkdir -p /root/etc-php-backup
-    cp -r /etc/php/ /root/etc-php-backup/
+    mkdir -p /root/etc-php-backup2
+    cp -r /etc/php/ /root/etc-php-backup2/
 
     OLDVAL='pm.max_children = 16'
     NEWVAL='pm.max_children = 8'

From e6c984acd95321176b929a594858d68458ef57ec Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 22:43:41 +0200
Subject: [PATCH 1107/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 33ccfaf2..37566f95 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1612,6 +1612,7 @@ if [ ! -d "/usr/local/vesta/data/upgrades" ]; then
     mkdir -p /usr/local/vesta/data/upgrades
 fi
 touch /usr/local/vesta/data/upgrades/tune-fpm-config-files-v1
+touch /usr/local/vesta/data/upgrades/tune-fpm-config-files-v2
 touch /usr/local/vesta/data/upgrades/allow-backup-anytime
 touch /usr/local/vesta/data/upgrades/fix-sudoers
 touch /usr/local/vesta/data/upgrades/change-clamav-socket-v2

From 7a5e0227492c74f719415b57ea6cbbffbd8aaac2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 22:45:03 +0200
Subject: [PATCH 1108/2300] Version 0.9.8-26-27

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 758fb6f7..ace9cf30 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-26
+vesta-0.9.8-26-27

From e276e6b70b0cbe0f3e21e3edfd9967be69de6569 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 23:03:15 +0200
Subject: [PATCH 1109/2300] Update Changelog.md

---
 Changelog.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 22b1d78e..7ac0d3bf 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,9 @@
+Version 0.9.8-26-27 [05-Jul-2020]
+==================================================
+* [Feature] Admins now see changelog when they open myVesta panel after myVesta get updated (changelog will dissapear on next refresh)
+* [Bugfix] Better control of opened SMTP concurrent connections (preventing denial-of-service of SMTP) on fresh installed servers - https://github.com/myvesta/vesta/commit/c57b15b5daca2a0ea88ee6a89a2ff5a4ef47d2a3
+* Second tuning php-fpm pool.d config files (perfomances and limits)
+
 Version 0.9.8-26-26 [27-Jun-2020]
 ==================================================
 * [Feature] Self-signed SSL will be automaticaly added when you add new domain (CloudFlare is fine with that, you don't need LetsEncrypt anymore if you use CloudFlare as reverse-proxy(CDN+Firewall), just set "Full" in SSL section on CloudFlare)
@@ -60,6 +66,7 @@ Version 0.9.8-26-16 [15-May-2020]
 Version 0.9.8-26-15 [09-May-2020]
 ==================================================
 * [Feature] nginx templates that can prevent denial-of-service on your server
+* First tuning php-fpm pool.d config files (perfomances and limits)
 * New logo
 
 Version 0.9.8-26-14 [08-May-2020]

From cef9dfd632afad900e4fa9996dd80a4a2e0b02e2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Jul 2020 23:03:54 +0200
Subject: [PATCH 1110/2300] Update Changelog.md

---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 7ac0d3bf..a6e94dc7 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -2,7 +2,7 @@ Version 0.9.8-26-27 [05-Jul-2020]
 ==================================================
 * [Feature] Admins now see changelog when they open myVesta panel after myVesta get updated (changelog will dissapear on next refresh)
 * [Bugfix] Better control of opened SMTP concurrent connections (preventing denial-of-service of SMTP) on fresh installed servers - https://github.com/myvesta/vesta/commit/c57b15b5daca2a0ea88ee6a89a2ff5a4ef47d2a3
-* Second tuning php-fpm pool.d config files (perfomances and limits)
+* Second tuning of php-fpm pool.d config files (perfomances and limits)
 
 Version 0.9.8-26-26 [27-Jun-2020]
 ==================================================

From 4ad0611e6c93c063106aca521fbb129a29ad02c3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 6 Jul 2020 00:13:27 +0200
Subject: [PATCH 1111/2300] Update postinst

---
 src/deb/vesta/postinst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index e2bf8dbd..e414afdb 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -23,9 +23,12 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# Tuning of php-fpm pool.d config files (perfomances and limits)
 if [ ! -f "/usr/local/vesta/data/upgrades/tune-fpm-config-files-v2" ]; then
     touch /usr/local/vesta/data/upgrades/tune-fpm-config-files-v2
     
+    echo "== Tuning of php-fpm pool.d config files (perfomances and limits)"
+    
     mkdir -p /root/etc-php-backup2
     cp -r /etc/php/ /root/etc-php-backup2/
 
@@ -46,6 +49,7 @@ if [ ! -f "/usr/local/vesta/data/upgrades/tune-fpm-config-files-v2" ]; then
     
     # restart all php-fpm services
     systemctl --full --type service --all | grep "php...-fpm" | awk '{print $1}' | xargs systemctl restart
+    echo "== Done"
 fi
 
 if [ ! -f "/usr/local/vesta/data/upgrades/allow-backup-anytime" ]; then

From 51b12558145bf16783f50bf4c5db222f210d456e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 10 Jul 2020 20:22:14 +0200
Subject: [PATCH 1112/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 07dfd77c..6fe8c19e 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -357,7 +357,7 @@ mysql $TO_DATABASE_NAME < $FROM_DATABASE_NAME.sql
 
 echo "=== Copying files from $FROM_FOLDER to folder $TO_FOLDER"
 rsync -a --delete $FROM_FOLDER/ $TO_FOLDER/
-echo "=== Chowning to  $TO_USER:$TO_USER in folder $TO_FOLDER"
+echo "=== Chowning to $TO_USER:$TO_USER in folder $TO_FOLDER"
 chown -R $TO_USER:$TO_USER $TO_FOLDER
 
 echo "=== Replacing $FROM_DATABASE_NAME to $TO_DATABASE_NAME in $TO_CONFIG_FILE_FULL_PATH"

From f6680abdead15dd8b41a1792762e09d48659e29d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 01:05:21 +0200
Subject: [PATCH 1113/2300] separate-mail-ip.patch

---
 .../tools/patches/separate-mail-ip.patch      | 51 +++++++++++++++++++
 1 file changed, 51 insertions(+)
 create mode 100644 src/deb/for-download/tools/patches/separate-mail-ip.patch

diff --git a/src/deb/for-download/tools/patches/separate-mail-ip.patch b/src/deb/for-download/tools/patches/separate-mail-ip.patch
new file mode 100644
index 00000000..882cdcb4
--- /dev/null
+++ b/src/deb/for-download/tools/patches/separate-mail-ip.patch
@@ -0,0 +1,51 @@
+--- ./exim4.conf.template-normal	2020-07-12 00:56:40.000000000 +0200
++++ ./exim4.conf.template-separate	2020-07-12 00:56:07.000000000 +0200
+@@ -12,6 +12,10 @@
+ add_environment=<; PATH=/bin:/usr/bin
+ keep_environment=
+ 
++local_interfaces =  0.0.0.0
++smtp_active_hostname = ${lookup{$interface_address}lsearch{/etc/exim4/virtual/helo_data}{$value}}
++smtp_banner = "$smtp_active_hostname ESMTP $tod_full"
++
+ domainlist local_domains = dsearch;/etc/exim4/domains/
+ domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+ hostlist relay_from_hosts = 127.0.0.1
+@@ -38,8 +42,8 @@
+ .endif
+ 
+ tls_advertise_hosts = *
+-tls_certificate = /usr/local/vesta/ssl/certificate.crt
+-tls_privatekey = /usr/local/vesta/ssl/certificate.key
++tls_certificate = /usr/local/vesta/ssl/$received_ip_address.crt
++tls_privatekey = /usr/local/vesta/ssl/$received_ip_address.key
+ 
+ daemon_smtp_ports = 25 : 465 : 587 : 2525
+ tls_on_connect_ports = 465
+@@ -72,6 +76,8 @@
+   warn ratelimit = 0 / 1h / strict / $authenticated_id
+   log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period
+ 
++  warn    set acl_m3    = yes
++
+   accept
+ 
+ acl_check_spammers:
+@@ -112,6 +118,8 @@
+   warn ratelimit = 0 / 1h / strict / $authenticated_id
+   log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period
+ 
++  warn    set acl_m3    = no
++
+   deny    message       = Restricted characters in address
+           domains       = +local_domains
+           local_parts   = ^[.] : ^.*[@%!/|]
+@@ -308,6 +316,8 @@
+ 
+ remote_smtp:
+   driver = smtp
++  interface = ${if eq{$acl_m3}{yes}{IP1}{IP2}}
++  helo_data = "${if eq{$acl_m3}{yes}{HOST1}{HOST2}}"
+   #helo_data = $sender_address_domain
+   dkim_domain = DKIM_DOMAIN
+   dkim_selector = mail

From 4b61f02b43ec225a9b0fff6f40509900d71f4bb3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 03:13:35 +0200
Subject: [PATCH 1114/2300] Create v-create-ip-ssl

---
 bin/v-create-ip-ssl | 37 +++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 bin/v-create-ip-ssl

diff --git a/bin/v-create-ip-ssl b/bin/v-create-ip-ssl
new file mode 100644
index 00000000..b1d7a40a
--- /dev/null
+++ b/bin/v-create-ip-ssl
@@ -0,0 +1,37 @@
+#!/bin/bash
+
+if [ $# -lt 2 ]; then
+    echo usage: v-create-ip-ssl USER DOMAIN
+    exit 1
+fi
+
+user=$1
+domain=$2
+
+echo "Script ran with: $user $domain" >> /usr/local/vesta/log/v-create-ip-ssl.log
+
+grepr=$(grep -c "^$domain:" /etc/exim4/virtual/interfaces)
+if [ $grepr -ge 1 ]; then
+    grepr=$(grep "^$domain:" /etc/exim4/virtual/interfaces)
+    ip=${grepr/$domain: /}
+    if [ ! -z "$ip" ]; then
+        echo "Processinng $domain" >> /usr/local/vesta/log/v-create-ip-ssl.log
+        echo "IP = $ip" >> /usr/local/vesta/log/v-create-ip-ssl.log
+        cp /home/$user/conf/web/ssl.$domain.pem /usr/local/vesta/ssl/$ip.crt
+        cp /home/$user/conf/web/ssl.$domain.key /usr/local/vesta/ssl/$ip.key
+
+        exim_user="exim";
+        check_exim_username=$(grep -c '^Debian-exim:' /etc/passwd)
+        if [ "$check_exim_username" -eq 1 ]; then
+            exim_user="Debian-exim"
+        fi
+
+        # Assign exim permissions
+        chown $exim_user:mail /usr/local/vesta/ssl/$ip.crt
+        chown $exim_user:mail /usr/local/vesta/ssl/$ip.key
+
+        service exim4 restart
+        service dovecot restart
+        echo "Done." >> /usr/local/vesta/log/v-create-ip-ssl.log
+    fi
+fi

From d779d47f64e0a98f3ce08bf971ed834a8f143af6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 03:59:16 +0200
Subject: [PATCH 1115/2300] Create v-make-separate-ip-for-email

---
 bin/v-make-separate-ip-for-email | 128 +++++++++++++++++++++++++++++++
 1 file changed, 128 insertions(+)
 create mode 100644 bin/v-make-separate-ip-for-email

diff --git a/bin/v-make-separate-ip-for-email b/bin/v-make-separate-ip-for-email
new file mode 100644
index 00000000..85881f6e
--- /dev/null
+++ b/bin/v-make-separate-ip-for-email
@@ -0,0 +1,128 @@
+#!/bin/bash
+
+# info: add new ip and makes email to be sent via that IP only for SMTP authenticated users
+# options: MAIL_HOSTNAME MAIL_IP
+#
+# The function add new ip, add new host for mail, try to generate letsencrypt for it, and makes email to be sent via that IP only for SMTP authenticated users
+
+if [ $# -lt 2 ]; then
+    echo "USAGE: v-make-separate-ip-for-email MAIL_HOSTNAME MAIL_IP"
+    exit 1
+fi
+
+MAIL_HOSTNAME=$1
+MAIL_IP=$2
+
+if [ $# -gt 2 ]; then
+    NETMASK=$3
+else
+    NETMASK='255.255.255.192'
+fi
+
+if [ $# -gt 3 ]; then
+    INTERFACE=$4
+else
+    INTERFACE='eth0'
+fi
+
+HOST_USER=$($VESTA/bin/v-search-domain-owner "$HOSTNAME")
+if [ -z "$HOST_USER" ]; then
+    echo "Error: hostname $HOSTNAME is not created as web domain"
+    exit 4
+fi
+
+HOST_IP=$($VESTA/bin/v-list-web-domain "$HOST_USER" "$HOSTNAME" | grep 'IP:' | awk '{print $2}')
+
+echo "HOSTNAME     : $HOSTNAME"
+echo "HOSTNAME IP  : $HOST_IP"
+echo "MAIL HOSTNAME: $MAIL_HOSTNAME"
+echo "MAIL_IP      : $MAIL_IP"
+if [ $# -gt 2 ]; then
+    echo "NETMASK      : $NETMASK"
+fi
+if [ $# -gt 3 ]; then
+    echo "INTERFACE    : $INTERFACE"
+fi
+
+if [ ! -f "/usr/local/vesta/data/ips/$MAIL_IP" ]; then
+    $VESTA/bin/v-add-sys-ip  "$MAIL_IP" "$NETMASK" "$INTERFACE" 'admin' 'dedicated' '' ''
+fi
+
+MAIL_USER=$($VESTA/bin/v-search-domain-owner "$MAIL_HOSTNAME")
+if [ -z "$MAIL_USER" ]; then
+    MAIL_USER=$HOST_USER
+    echo "=== Creating (sub)domain $MAIL_HOSTNAME"
+    $VESTA/bin/v-add-domain "$MAIL_USER" "$MAIL_HOSTNAME" "$MAIL_IP" 'yes'
+    echo "=== Deleting www from (sub)domain $MAIL_HOSTNAME"
+    www_host="www.$MAIL_HOSTNAME"
+    $VESTA/bin/v-delete-web-domain-alias "$MAIL_USER" "$MAIL_HOSTNAME" "$www_host" 'no'
+    $VESTA/bin/v-delete-dns-on-web-alias "$MAIL_USER" "$MAIL_HOSTNAME" "$www_host" 'no'
+else
+    CURRENT_MAIL_IP=$($VESTA/bin/v-list-web-domain "$MAIL_USER" "$MAIL_HOSTNAME" | grep 'IP:' | awk '{print $2}')
+    if [ "$CURRENT_MAIL_IP" != "$MAIL_IP" ]; then
+        echo "=== Switching (sub)domain $MAIL_HOSTNAME to IP: $MAIL_IP"
+        $VESTA/bin/v-change-web-domain-ip "$MAIL_USER" "$MAIL_HOSTNAME" "$MAIL_IP" 'yes'
+        $VESTA/bin/v-change-dns-domain-ip "$MAIL_USER" "$MAIL_HOSTNAME" "$MAIL_IP" 'yes'
+    fi
+fi
+
+LETSENCRYPT=$($VESTA/bin/v-list-web-domain "$MAIL_USER" "$MAIL_HOSTNAME" | grep 'LETSENCRYPT:' | awk '{print $2}')
+if [ "$LETSENCRYPT" = "yes" ]; then
+    echo "=== LetsEncrypt already installed"
+else
+    echo "=== Installing LetsEncrypt for (sub)domain $MAIL_HOSTNAME"
+    $VESTA/bin/v-add-letsencrypt-domain "$MAIL_USER" "$MAIL_HOSTNAME" "" "yes"
+    if [ $? -ne 0 ]; then
+        echo "=== LetsEncrypt installation failed"
+    fi
+fi
+
+
+if [ ! -d "/etc/exim4/virtual" ]; then
+    echo "=== Creating /etc/exim4/virtual files"
+    mkdir -p /etc/exim4/virtual
+    echo "$HOST_IP: $HOSTNAME" > /etc/exim4/virtual/helo_data
+    echo "$MAIL_IP: $MAIL_HOSTNAME" >> /etc/exim4/virtual/helo_data
+    echo "$HOSTNAME: $HOST_IP" > /etc/exim4/virtual/interfaces
+    echo "$MAIL_HOSTNAME: $MAIL_IP" >> /etc/exim4/virtual/interfaces
+    length=$(wc -c </etc/exim4/virtual/helo_data)
+    dd if=/dev/null of=/etc/exim4/virtual/helo_data obs="$((length-1))" seek=1 > /dev/null 2>&1
+    length=$(wc -c </etc/exim4/virtual/interfaces)
+    dd if=/dev/null of=/etc/exim4/virtual/interfaces obs="$((length-1))" seek=1 > /dev/null 2>&1
+else
+    echo "=== /etc/exim4/virtual files already exists"
+fi
+
+echo "=== Generating IP for hostname $HOSTNAME"
+$VESTA/bin/v-create-ip-ssl "$HOST_USER" "$HOSTNAME"
+echo "=== Generating IP for mail hostname $MAIL_HOSTNAME"
+$VESTA/bin/v-create-ip-ssl "$MAIL_USER" "$MAIL_HOSTNAME"
+
+check_grep=$(grep -c 'smtp_active_hostname' /etc/exim4/exim4.conf.template)
+if [ "$check_grep" -eq 0 ]; then
+    echo "=== patching exim4.conf.template"
+    patch /etc/exim4/exim4.conf.template < /usr/local/vesta/src/deb/for-download/tools/patches/separate-mail-ip.patch
+    if [ $? -ne 0 ]; then
+        echo "=== Patching failed, aborting"
+        exit 1
+    else
+        echo "=== Patching successful"
+        sed -i "s|IP1|$HOST_IP|g" /etc/exim4/exim4.conf.template
+        sed -i "s|IP2|$MAIL_IP|g" /etc/exim4/exim4.conf.template
+        sed -i "s|HOST1|$HOSTNAME|g" /etc/exim4/exim4.conf.template
+        sed -i "s|HOST2|$MAIL_HOSTNAME|g" /etc/exim4/exim4.conf.template
+        service exim4 restart
+    fi
+else
+    echo "=== exim4.conf.template already patched"
+fi
+
+check_grep=$(grep -c 'v-create-ip-ssl' /usr/local/vesta/conf/vesta.conf)
+if [ "$check_grep" -eq 0 ]; then
+    echo "=== Set UPDATE_SSL_SCRIPT to 'v-create-ip-ssl'"
+    echo "UPDATE_SSL_SCRIPT='/usr/local/vesta/bin/v-create-ip-ssl'" >> /usr/local/vesta/conf/vesta.conf
+else
+    echo "=== Value UPDATE_SSL_SCRIPT is already 'v-create-ip-ssl'"
+fi
+
+echo "=== Done!"

From 89c2767e92a86e20aad661627f8a1588f6d5e2d8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 04:18:55 +0200
Subject: [PATCH 1116/2300] Adding IP to SPF in v-make-separate-ip-for-email

---
 bin/v-make-separate-ip-for-email | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/bin/v-make-separate-ip-for-email b/bin/v-make-separate-ip-for-email
index 85881f6e..6654b968 100644
--- a/bin/v-make-separate-ip-for-email
+++ b/bin/v-make-separate-ip-for-email
@@ -77,7 +77,6 @@ else
     fi
 fi
 
-
 if [ ! -d "/etc/exim4/virtual" ]; then
     echo "=== Creating /etc/exim4/virtual files"
     mkdir -p /etc/exim4/virtual
@@ -125,4 +124,16 @@ else
     echo "=== Value UPDATE_SSL_SCRIPT is already 'v-create-ip-ssl'"
 fi
 
+check_grep=$(grep -c "ip4:$MAIL_IP" /usr/local/vesta/data/templates/dns/default.tpl)
+if [ "$check_grep" -eq 0 ]; then
+    echo "=== Adding IP to SPF"
+    sed -i "s|ip4:%ip%|ip4:%ip% ip4:$MAIL_IP|g" /usr/local/vesta/data/templates/dns/default.tpl
+    NOTFOUNDVAL="ip4:$MAIL_IP"
+    OLDVAL="ip4:$HOST_IP"
+    NEWVAL="ip4:$HOST_IP ip4:$MAIL_IP"
+    find /usr/local/vesta/data/users/*/dns/ -type f -exec grep -L "$NOTFOUNDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /home/*/conf/dns/ -type f -exec grep -L "$NOTFOUNDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    service bind9 reload
+fi
+
 echo "=== Done!"

From 7a0d18fc81d0177f8037ff8f550c9c5e79d5828c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 04:45:09 +0200
Subject: [PATCH 1117/2300] PTR check in v-make-separate-ip-for-email

---
 bin/v-make-separate-ip-for-email | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/bin/v-make-separate-ip-for-email b/bin/v-make-separate-ip-for-email
index 6654b968..1e013463 100644
--- a/bin/v-make-separate-ip-for-email
+++ b/bin/v-make-separate-ip-for-email
@@ -137,3 +137,10 @@ if [ "$check_grep" -eq 0 ]; then
 fi
 
 echo "=== Done!"
+
+ptr=$(dig +short -x $MAIL_IP)
+if [ "$PTR" != "$MAIL_HOSTNAME" ]; then
+    echo ""
+    echo "WARNING: PTR for $MAIL_IP is $ptr"
+    echo "WARNING: PTR for $MAIL_IP should be $MAIL_HOSTNAME"
+fi

From 7d2dda10bcd3eef2904f7d5a0ab175617a0098ee Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 04:46:40 +0200
Subject: [PATCH 1118/2300] Update v-make-separate-ip-for-email

---
 bin/v-make-separate-ip-for-email | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-make-separate-ip-for-email b/bin/v-make-separate-ip-for-email
index 1e013463..0d99ee0c 100644
--- a/bin/v-make-separate-ip-for-email
+++ b/bin/v-make-separate-ip-for-email
@@ -139,7 +139,7 @@ fi
 echo "=== Done!"
 
 ptr=$(dig +short -x $MAIL_IP)
-if [ "$PTR" != "$MAIL_HOSTNAME" ]; then
+if [ "$PTR" != "$MAIL_HOSTNAME." ]; then
     echo ""
     echo "WARNING: PTR for $MAIL_IP is $ptr"
     echo "WARNING: PTR for $MAIL_IP should be $MAIL_HOSTNAME"

From 5bbfb4dc1a0c13224215d65f4dd20ae306303b2c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 04:52:46 +0200
Subject: [PATCH 1119/2300] PTR dot fix in v-make-separate-ip-for-email

---
 bin/v-make-separate-ip-for-email | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/bin/v-make-separate-ip-for-email b/bin/v-make-separate-ip-for-email
index 0d99ee0c..0dfc68d7 100644
--- a/bin/v-make-separate-ip-for-email
+++ b/bin/v-make-separate-ip-for-email
@@ -139,7 +139,10 @@ fi
 echo "=== Done!"
 
 ptr=$(dig +short -x $MAIL_IP)
-if [ "$PTR" != "$MAIL_HOSTNAME." ]; then
+ptr_len=${#ptr}
+ptr_len=$((ptr_len-1))
+ptr=${ptr:0:ptr_len}
+if [ "$PTR" != "$MAIL_HOSTNAME" ]; then
     echo ""
     echo "WARNING: PTR for $MAIL_IP is $ptr"
     echo "WARNING: PTR for $MAIL_IP should be $MAIL_HOSTNAME"

From b960f86e2c8eda95c083c8856ed498171b7ba4ad Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 17:52:22 +0200
Subject: [PATCH 1120/2300] Update main.sh

---
 func/main.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/func/main.sh b/func/main.sh
index c01aa123..5d85e7e4 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -1040,3 +1040,8 @@ get_web_counter() {
 
     echo $counter
 }
+
+escape_shell_quote() { 
+    local escape_shell_quoted=${1//\'/\'\\\'\'};
+    printf "'%s'" "$escape_shell_quoted"
+}

From 8e3b348e6f3ffeac7c4be349930d64c30edd43e6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 18:57:28 +0200
Subject: [PATCH 1121/2300] Create v-get-database-credentials-of-site

---
 bin/v-get-database-credentials-of-site | 100 +++++++++++++++++++++++++
 1 file changed, 100 insertions(+)
 create mode 100644 bin/v-get-database-credentials-of-site

diff --git a/bin/v-get-database-credentials-of-site b/bin/v-get-database-credentials-of-site
new file mode 100644
index 00000000..54a69b73
--- /dev/null
+++ b/bin/v-get-database-credentials-of-site
@@ -0,0 +1,100 @@
+#!/bin/bash
+
+# Importing system environment
+source /etc/profile
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
+
+if [ $# -lt 1 ]; then
+    echo "USAGE: v-get-database-credentials-of-site DOMAIN [SUBFOLDER]"
+    exit 1
+fi
+
+DOMAIN=$1
+SUBFOLDER=''
+if [ $# -gt 1 ]; then
+    SUBFOLDER=$2
+fi
+
+USER=$(/usr/local/vesta/bin/v-search-domain-owner "$DOMAIN")
+if [ -z "$USER" ]; then
+    echo "Error: domain $DOMAIN does not exists"
+    exit 2
+fi
+
+SITE_FOLDER="/home/$USER/web/$DOMAIN/public_html"
+CHECK_PUBLIC_SHTML=$(/usr/local/vesta/bin/v-list-web-domain "$USER" "$DOMAIN" | grep 'SSL:' | grep -c 'single')
+if [ $CHECK_PUBLIC_SHTML -eq 1 ]; then
+    SITE_FOLDER="/home/$USER/web/$DOMAIN/public_shtml"
+fi
+
+if [ ! -z "$SUBFOLDER" ]; then
+    SITE_FOLDER="${SITE_FOLDER}/${SUBFOLDER}"
+fi
+
+CMS_TYPE=''
+
+if [ -f "$SITE_FOLDER/wp-config.php" ]; then
+    CMS_TYPE='wordpress'
+    CONFIG_FILE="wp-config.php"
+    CONFIG_FILE_FULL_PATH="$SITE_FOLDER/$CONFIG_FILE"
+fi
+if [ -f "$SITE_FOLDER/configuration.php" ]; then
+    CMS_TYPE='joomla'
+    CONFIG_FILE="configuration.php"
+    CONFIG_FILE_FULL_PATH="$SITE_FOLDER/$CONFIG_FILE"
+fi
+
+if [ "$CMS_TYPE" = "wordpress" ]; then
+    CONFIG_FILE_FULL_PATH_BACKUP="${CONFIG_FILE_FULL_PATH}_backup"
+    cp $CONFIG_FILE_FULL_PATH $CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|//.*$||g" $CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|('|( '|g" $CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|');|' );|g" $CONFIG_FILE_FULL_PATH_BACKUP
+    DATABASE_NAME=$(grep 'DB_NAME' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    DATABASE_USERNAME=$(grep 'DB_USER' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    DATABASE_HOSTNAME=$(grep 'DB_HOST' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    rm $CONFIG_FILE_FULL_PATH_BACKUP
+fi
+
+if [ "$CMS_TYPE" = "joomla" ]; then
+    CONFIG_FILE_FULL_PATH_BACKUP="${CONFIG_FILE_FULL_PATH}_backup"
+    cp $CONFIG_FILE_FULL_PATH $CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|//.*$||g" $CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|='|= '|g" $CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|= '| = '|g" $CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|  =| =|g" $CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|';$|'|g" $CONFIG_FILE_FULL_PATH_BACKUP
+    DATABASE_NAME=$(grep 'public $db ' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $4}' | sed -e "s/^'//" -e "s/'$//")
+    DATABASE_USERNAME=$(grep 'public $user ' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $4}' | sed -e "s/^'//" -e "s/'$//")
+    DATABASE_PASSWORD=$(grep 'public $password ' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $4}' | sed -e "s/^'//" -e "s/'$//")
+    DATABASE_HOSTNAME=$(grep 'public $host ' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $4}' | sed -e "s/^'//" -e "s/'$//")
+    rm $CONFIG_FILE_FULL_PATH_BACKUP
+fi
+
+DATABASE_NAME=$(escape_shell_quote $DATABASE_NAME)
+echo "DATABASE_NAME=$DATABASE_NAME"
+
+DATABASE_USERNAME=$(escape_shell_quote $DATABASE_USERNAME)
+echo "DATABASE_USERNAME=$DATABASE_USERNAME"
+
+DATABASE_PASSWORD=$(escape_shell_quote $DATABASE_PASSWORD)
+echo "DATABASE_PASSWORD=$DATABASE_PASSWORD"
+
+DATABASE_HOSTNAME=$(escape_shell_quote $DATABASE_HOSTNAME)
+echo "DATABASE_HOSTNAME=$DATABASE_HOSTNAME"
+
+CONFIG_FILE_FULL_PATH=$(escape_shell_quote $CONFIG_FILE_FULL_PATH)
+echo "CONFIG_FILE_FULL_PATH=$CONFIG_FILE_FULL_PATH"
+
+CMS_TYPE=$(escape_shell_quote $CMS_TYPE)
+echo "CMS_TYPE=$CMS_TYPE"
+
+SITE_FOLDER=$(escape_shell_quote $SITE_FOLDER)
+echo "SITE_FOLDER=$SITE_FOLDER"
+
+USER=$(escape_shell_quote $USER)
+echo "USER=$USER"

From e4b0be46b63b2d4b141eac38f84f79a1eb031ac5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 20:38:06 +0200
Subject: [PATCH 1122/2300] replace_php_config_value function

---
 func/main.sh | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/func/main.sh b/func/main.sh
index 5d85e7e4..d86d3e59 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -1045,3 +1045,15 @@ escape_shell_quote() {
     local escape_shell_quoted=${1//\'/\'\\\'\'};
     printf "'%s'" "$escape_shell_quoted"
 }
+
+replace_php_config_value() {
+    if [ ! -z $4 ]; then
+        if [ "$4" = "yes" ] || [ $4 -eq 1 ]; then
+            echo "=== Replacing $1 to $2 in $3"
+        fi
+    fi
+    sed -i "s|'$1'|'$2'|g" $3
+    sed -i "s|\"$1\"|\"$2\"|g" $3
+    sed -i "s|=$1$|=$2|g" $3
+    sed -i "s|= $1$|= $2|g" $3
+}

From 9ac43d1f8fa6e3cbfd417727d8dbcd30d1e0f035 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 20:41:27 +0200
Subject: [PATCH 1123/2300] Update main.sh

---
 func/main.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/func/main.sh b/func/main.sh
index d86d3e59..7d0f48f1 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -1047,8 +1047,8 @@ escape_shell_quote() {
 }
 
 replace_php_config_value() {
-    if [ ! -z $4 ]; then
-        if [ "$4" = "yes" ] || [ $4 -eq 1 ]; then
+    if [ ! -z "$4" ]; then
+        if [ "$4" = "yes" ] || [ "$4" = "true" ] || [ "$4" = "1" ] || [ $4 -eq 1 ]; then
             echo "=== Replacing $1 to $2 in $3"
         fi
     fi

From 1ddba4e853b6002128645c55f28fa699fcb1d86c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 21:00:23 +0200
Subject: [PATCH 1124/2300] get_database_name_without_user_prefix function

---
 func/main.sh | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/func/main.sh b/func/main.sh
index 7d0f48f1..cdb76484 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -1057,3 +1057,11 @@ replace_php_config_value() {
     sed -i "s|=$1$|=$2|g" $3
     sed -i "s|= $1$|= $2|g" $3
 }
+
+get_database_name_without_user_prefix() {
+    user=$1
+    db=$2
+    user_len=${#user}
+    user_len=$((user_len+1))
+    echo ${db:user_len}
+}

From 70a59fbedf6ca6269f558ccdfd2b5080c6079abb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 21:41:59 +0200
Subject: [PATCH 1125/2300] Update v-get-database-credentials-of-site

---
 bin/v-get-database-credentials-of-site | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-get-database-credentials-of-site b/bin/v-get-database-credentials-of-site
index 54a69b73..9375f023 100644
--- a/bin/v-get-database-credentials-of-site
+++ b/bin/v-get-database-credentials-of-site
@@ -97,4 +97,4 @@ SITE_FOLDER=$(escape_shell_quote $SITE_FOLDER)
 echo "SITE_FOLDER=$SITE_FOLDER"
 
 USER=$(escape_shell_quote $USER)
-echo "USER=$USER"
+echo "SITE_USER=$USER"

From 4a124089813c3fd01a70ab65fa177a24efdfb3c1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 22:09:54 +0200
Subject: [PATCH 1126/2300] Update and rename
 v-get-database-credentials-of-site to v-get-database-credentials-of-domain

---
 ...e => v-get-database-credentials-of-domain} | 45 ++++++++++++++-----
 1 file changed, 35 insertions(+), 10 deletions(-)
 rename bin/{v-get-database-credentials-of-site => v-get-database-credentials-of-domain} (79%)

diff --git a/bin/v-get-database-credentials-of-site b/bin/v-get-database-credentials-of-domain
similarity index 79%
rename from bin/v-get-database-credentials-of-site
rename to bin/v-get-database-credentials-of-domain
index 9375f023..0082dc9c 100644
--- a/bin/v-get-database-credentials-of-site
+++ b/bin/v-get-database-credentials-of-domain
@@ -1,5 +1,33 @@
 #!/bin/bash
 
+# info: get database credentials of domain and other basic data
+# options: DOMAIN [SUBFOLDER]
+#
+# The function get database credentials of domain and other basic data.
+
+
+#----------------------------------------------------------#
+#               Check necessary parameters                 #
+#----------------------------------------------------------#
+
+if [ $# -lt 1 ]; then
+    echo "USAGE: v-get-database-credentials-of-site DOMAIN [SUBFOLDER]"
+    exit 1
+fi
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+
+# Argument definition
+DOMAIN=$1
+domain=$1
+SUBFOLDER=''
+if [ $# -gt 1 ]; then
+    SUBFOLDER=$2
+fi
+
 # Importing system environment
 source /etc/profile
 
@@ -7,16 +35,9 @@ source /etc/profile
 source /usr/local/vesta/func/main.sh
 
 
-if [ $# -lt 1 ]; then
-    echo "USAGE: v-get-database-credentials-of-site DOMAIN [SUBFOLDER]"
-    exit 1
-fi
-
-DOMAIN=$1
-SUBFOLDER=''
-if [ $# -gt 1 ]; then
-    SUBFOLDER=$2
-fi
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
 
 USER=$(/usr/local/vesta/bin/v-search-domain-owner "$DOMAIN")
 if [ -z "$USER" ]; then
@@ -24,6 +45,10 @@ if [ -z "$USER" ]; then
     exit 2
 fi
 
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
 SITE_FOLDER="/home/$USER/web/$DOMAIN/public_html"
 CHECK_PUBLIC_SHTML=$(/usr/local/vesta/bin/v-list-web-domain "$USER" "$DOMAIN" | grep 'SSL:' | grep -c 'single')
 if [ $CHECK_PUBLIC_SHTML -eq 1 ]; then

From d3229d4fbda2d6a57ad2fbbe4ba79fd3909ad649 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 22:24:35 +0200
Subject: [PATCH 1127/2300] Update v-get-database-credentials-of-domain

---
 bin/v-get-database-credentials-of-domain | 21 ++++++---------------
 1 file changed, 6 insertions(+), 15 deletions(-)

diff --git a/bin/v-get-database-credentials-of-domain b/bin/v-get-database-credentials-of-domain
index 0082dc9c..7ebade2a 100644
--- a/bin/v-get-database-credentials-of-domain
+++ b/bin/v-get-database-credentials-of-domain
@@ -1,28 +1,16 @@
 #!/bin/bash
 
-# info: get database credentials of domain and other basic data
+# info: get database credentials and other basic data of domain
 # options: DOMAIN [SUBFOLDER]
 #
-# The function get database credentials of domain and other basic data.
-
-
-#----------------------------------------------------------#
-#               Check necessary parameters                 #
-#----------------------------------------------------------#
-
-if [ $# -lt 1 ]; then
-    echo "USAGE: v-get-database-credentials-of-site DOMAIN [SUBFOLDER]"
-    exit 1
-fi
+# The function get database credentials and other basic data of domain.
 
 #----------------------------------------------------------#
 #                    Variable&Function                     #
 #----------------------------------------------------------#
 
-
 # Argument definition
 DOMAIN=$1
-domain=$1
 SUBFOLDER=''
 if [ $# -gt 1 ]; then
     SUBFOLDER=$2
@@ -34,11 +22,14 @@ source /etc/profile
 # Includes
 source /usr/local/vesta/func/main.sh
 
-
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#
 
+check_args '1' "$#" 'DOMAIN [SUBFOLDER]'
+domain=$DOMAIN
+is_format_valid 'domain'
+
 USER=$(/usr/local/vesta/bin/v-search-domain-owner "$DOMAIN")
 if [ -z "$USER" ]; then
     echo "Error: domain $DOMAIN does not exists"

From 8159689b1ab0318d91bda8dab2bf04cc3f52b344 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Jul 2020 23:13:00 +0200
Subject: [PATCH 1128/2300] Update v-get-database-credentials-of-domain

---
 bin/v-get-database-credentials-of-domain | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/bin/v-get-database-credentials-of-domain b/bin/v-get-database-credentials-of-domain
index 7ebade2a..71dcfe31 100644
--- a/bin/v-get-database-credentials-of-domain
+++ b/bin/v-get-database-credentials-of-domain
@@ -91,6 +91,19 @@ if [ "$CMS_TYPE" = "joomla" ]; then
     rm $CONFIG_FILE_FULL_PATH_BACKUP
 fi
 
+if [ ! -z "$DATABASE_NAME" ]; then
+    DATABASE_NAME_WITHOUT_USER_PREFIX=$(get_database_name_without_user_prefix "$USER" "$DATABASE_NAME")
+fi
+if [ ! -z "$DATABASE_USERNAME" ]; then
+    DATABASE_USERNAME_WITHOUT_USER_PREFIX=$(get_database_name_without_user_prefix "$USER" "$DATABASE_USERNAME")
+fi
+
+DATABASE_NAME_WITHOUT_USER_PREFIX=$(escape_shell_quote $DATABASE_NAME_WITHOUT_USER_PREFIX)
+echo "DATABASE_NAME_WITHOUT_USER_PREFIX=$DATABASE_NAME_WITHOUT_USER_PREFIX"
+
+DATABASE_USERNAME_WITHOUT_USER_PREFIX=$(escape_shell_quote $DATABASE_USERNAME_WITHOUT_USER_PREFIX)
+echo "DATABASE_USERNAME_WITHOUT_USER_PREFIX=$DATABASE_USERNAME_WITHOUT_USER_PREFIX"
+
 DATABASE_NAME=$(escape_shell_quote $DATABASE_NAME)
 echo "DATABASE_NAME=$DATABASE_NAME"
 

From 88e612a2165e42b028beb73a0abe1ecbf0e173f6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 00:06:12 +0200
Subject: [PATCH 1129/2300] Create v-move-domain-and-database-to-account

---
 bin/v-move-domain-and-database-to-account | 77 +++++++++++++++++++++++
 1 file changed, 77 insertions(+)
 create mode 100644 bin/v-move-domain-and-database-to-account

diff --git a/bin/v-move-domain-and-database-to-account b/bin/v-move-domain-and-database-to-account
new file mode 100644
index 00000000..7257f41d
--- /dev/null
+++ b/bin/v-move-domain-and-database-to-account
@@ -0,0 +1,77 @@
+#!/bin/bash
+# info: change domain and database owner
+# options: DOMAIN USER
+#
+# The function of changing domain and database ownership.
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+domain=$1
+user=$2
+
+# Importing system environment
+source /etc/profile
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '2' "$#" 'DOMAIN USER'
+is_format_valid 'domain' 'user'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+owner=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+if [ -z "$owner" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+if [ "$owner" = "$user" ]; then
+    exit
+fi
+
+USER_TO=$user
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+echo "================================="
+r=$(/usr/local/vesta/bin/v-get-database-credentials-of-domain $domain)
+echo $r
+eval $r
+echo "================================="
+
+if [ ! -z "$DATABASE_NAME" ]; then
+    echo "=== v-change-database-owner $DATABASE_NAME $USER_TO"
+    /usr/local/vesta/bin/v-change-database-owner $DATABASE_NAME $USER_TO
+    if [ $? -ne 0 ]; then
+        echo "=== v-change-database-owner failed"
+    fi
+
+    if [ ! -z "$DATABASE_USERNAME" ] && [ ! -z "$CONFIG_FILE_FULL_PATH" ]; then
+       replace_php_config_value "${DATABASE_NAME}" "${USER_TO}_${DATABASE_NAME_WITHOUT_USER_PREFIX}" "$CONFIG_FILE_FULL_PATH" "yes"
+       replace_php_config_value "${DATABASE_USERNAME}" "${USER_TO}_${DATABASE_USERNAME_WITHOUT_USER_PREFIX}" "$CONFIG_FILE_FULL_PATH" "yes"
+    else
+        if [ -z "$DATABASE_USERNAME" ]; then
+            echo "=== DATABASE_USERNAME is empty, so we will not change config file"
+        fi
+        if [ -z "$CONFIG_FILE_FULL_PATH" ]; then
+            echo "=== CONFIG_FILE_FULL_PATH is empty, so we will not change config file"
+        fi
+    fi
+else
+    echo "=== DATABASE_NAME is empty, so we will not move database"
+fi
+
+echo "=== v-change-domain-owner $domain $USER_TO"
+/usr/local/vesta/bin/v-change-domain-owner $domain $USER_TO
+if [ $? -ne 0 ]; then
+    echo "=== v-change-domain-owner failed"
+fi

From e698be870789fd11380fd665630ca212b4a71d48 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 11:06:16 +0200
Subject: [PATCH 1130/2300] Update and rename
 src/deb/for-download/tools/create_wp_https to bin/v-install-wordpress

---
 .../v-install-wordpress                       | 23 +++++++++----------
 1 file changed, 11 insertions(+), 12 deletions(-)
 rename src/deb/for-download/tools/create_wp_https => bin/v-install-wordpress (81%)

diff --git a/src/deb/for-download/tools/create_wp_https b/bin/v-install-wordpress
similarity index 81%
rename from src/deb/for-download/tools/create_wp_https
rename to bin/v-install-wordpress
index edfb58c5..401c998f 100644
--- a/src/deb/for-download/tools/create_wp_https
+++ b/bin/v-install-wordpress
@@ -4,7 +4,7 @@
 # Credits to Luka Paunović for wp-cli implememtation
 
 if [ $# -lt 1 ]; then
-    echo usage: create_wp_https domain [db_name] [email]
+    echo usage: v-install-wordpress domain [db_name] [email]
     exit 1
 fi
 
@@ -80,19 +80,20 @@ v-add-database $user $DBUSERSUF $DBUSERSUF $PASSWDDB mysql
 
 cd /home/$user
 
-rm -rf /home/$user/wp
-curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
-chmod +x wp-cli.phar
-sudo mv wp-cli.phar wp
-
+if [ ! -f "/usr/local/bin/wp" ]; then
+    echo "=== Downloading latest wp-cli"
+    wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
+    chmod +x /usr/local/bin/wp
+fi
+    
 cd /home/$user/web/$domain/public_html
 
-sudo -H -u$user /home/$user/wp core download
-sudo -H -u$user /home/$user/wp core config --dbname=$DBUSER --dbuser=$DBUSER --dbpass=$PASSWDDB
+sudo -H -u$user wp core download
+sudo -H -u$user wp core config --dbname=$DBUSER --dbuser=$DBUSER --dbpass=$PASSWDDB
 
 password=$(LC_CTYPE=C tr -dc A-Za-z0-9_\!\@\#\$\%\^\&\*\(\)-+= < /dev/urandom | head -c 12)
 
-sudo -H -u$user /home/$user/wp core install --url="$domain" --title="$domain" --admin_user="admin" --admin_password="$password" --admin_email="$email" --path=$WORKINGDIR
+sudo -H -u$user wp core install --url="$domain" --title="$domain" --admin_user="admin" --admin_password="$password" --admin_email="$email" --path=$WORKINGDIR
 
 #FIX za https://github.com/wp-cli/wp-cli/issues/2632
 
@@ -113,7 +114,5 @@ echo "================================================================="
 
 chown -R $user:$user $WORKINGDIR
 
-rm -rf /home/$user/wp
-
-echo "create_wp_https: Done."
+echo "v-install-wordpress: Done."
 exit 0

From b4897e982b89fbb2a8b5d7e8cbe510b52695dc0a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 11:31:11 +0200
Subject: [PATCH 1131/2300] Rename v-make-separate-ip-for-email to
 v-make-separated-ip-for-email

---
 ...v-make-separate-ip-for-email => v-make-separated-ip-for-email} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename bin/{v-make-separate-ip-for-email => v-make-separated-ip-for-email} (100%)

diff --git a/bin/v-make-separate-ip-for-email b/bin/v-make-separated-ip-for-email
similarity index 100%
rename from bin/v-make-separate-ip-for-email
rename to bin/v-make-separated-ip-for-email

From 1b60828e04f8572680761d7ff1f39b265522d2ed Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 11:33:53 +0200
Subject: [PATCH 1132/2300] Update v-install-wordpress

---
 bin/v-install-wordpress | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 401c998f..e2d07a9b 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -35,10 +35,12 @@ if [ ! -d "/home/$user/web/$domain/public_html" ]; then
     exit 1;
 fi
 
-if [ ! -f "/home/$user/conf/web/ssl.$domain.pem" ]; then
+LETSENCRYPT=$($VESTA/bin/v-list-web-domain "$user" "$domain" | grep 'LETSENCRYPT:' | awk '{print $2}')
+if [ "$LETSENCRYPT" != "yes" ]; then
     v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
 fi
-if [ -f "/home/$user/conf/web/ssl.$domain.pem" ]; then
+LETSENCRYPT=$($VESTA/bin/v-list-web-domain "$user" "$domain" | grep 'LETSENCRYPT:' | awk '{print $2}')
+if [ "$LETSENCRYPT" = "yes" ]; then
     if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
         v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
     fi
@@ -48,11 +50,9 @@ else
 fi
 
 WORKINGDIR="/home/$user/web/$domain/public_html"
-# FILE=latest.tar.gz
 
 rm -rf $WORKINGDIR/*
 
-#DBUSERSUF=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 5 | head -n 1)
 DBUSERSUF="$START_DB";
 DBUSERSUFB="$START_DB";
 DBUSER=$user\_$DBUSERSUFB;

From 32d5ed48d07b14337d43231133a6c4c8561795f0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 11:38:38 +0200
Subject: [PATCH 1133/2300] making v-install-wordpress for both http and https

---
 bin/v-install-wordpress | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index e2d07a9b..6d04e546 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -35,18 +35,17 @@ if [ ! -d "/home/$user/web/$domain/public_html" ]; then
     exit 1;
 fi
 
+PROTOCOL='http'
 LETSENCRYPT=$($VESTA/bin/v-list-web-domain "$user" "$domain" | grep 'LETSENCRYPT:' | awk '{print $2}')
 if [ "$LETSENCRYPT" != "yes" ]; then
     v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
 fi
 LETSENCRYPT=$($VESTA/bin/v-list-web-domain "$user" "$domain" | grep 'LETSENCRYPT:' | awk '{print $2}')
 if [ "$LETSENCRYPT" = "yes" ]; then
+    PROTOCOL='https'
     if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
         v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
     fi
-else
-    echo "Error: Can not generate SSL."
-    exit 20
 fi
 
 WORKINGDIR="/home/$user/web/$domain/public_html"
@@ -97,16 +96,16 @@ sudo -H -u$user wp core install --url="$domain" --title="$domain" --admin_user="
 
 #FIX za https://github.com/wp-cli/wp-cli/issues/2632
 
-mysql -u$DBUSER -p$PASSWDDB -e "USE $DBUSER; update wp_options set option_value = 'https://$domain' where option_name = 'siteurl'; update wp_options set option_value = 'https://$domain' where option_name = 'home';"
+mysql -u$DBUSER -p$PASSWDDB -e "USE $DBUSER; update wp_options set option_value = '$PROTOCOL://$domain' where option_name = 'siteurl'; update wp_options set option_value = '$PROTOCOL://$domain' where option_name = 'home';"
 
 # clear
 
 echo "================================================================="
 echo "Installation is complete. Your username/password is listed below."
 echo ""
-echo "Site: https://$domain/"
+echo "Site: $PROTOCOL://$domain/"
 echo ""
-echo "Login: https://$domain/wp-admin/"
+echo "Login: $PROTOCOL://$domain/wp-admin/"
 echo "Username: admin"
 echo "Password: $password"
 echo ""

From 6ebf690d54b8c5fe0d6fc3e84924da7e404def3f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 12:01:30 +0200
Subject: [PATCH 1134/2300] Update v-get-database-credentials-of-domain

---
 bin/v-get-database-credentials-of-domain | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/bin/v-get-database-credentials-of-domain b/bin/v-get-database-credentials-of-domain
index 71dcfe31..c32ef657 100644
--- a/bin/v-get-database-credentials-of-domain
+++ b/bin/v-get-database-credentials-of-domain
@@ -27,8 +27,7 @@ source /usr/local/vesta/func/main.sh
 #----------------------------------------------------------#
 
 check_args '1' "$#" 'DOMAIN [SUBFOLDER]'
-domain=$DOMAIN
-is_format_valid 'domain'
+is_domain_format_valid "$DOMAIN"
 
 USER=$(/usr/local/vesta/bin/v-search-domain-owner "$DOMAIN")
 if [ -z "$USER" ]; then

From 812d92b5f3297aebce57c8f22fbb6beab8d6167b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 12:03:37 +0200
Subject: [PATCH 1135/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 19 +++++++++++++++----
 1 file changed, 15 insertions(+), 4 deletions(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 0dfc68d7..bdc66036 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -5,10 +5,9 @@
 #
 # The function add new ip, add new host for mail, try to generate letsencrypt for it, and makes email to be sent via that IP only for SMTP authenticated users
 
-if [ $# -lt 2 ]; then
-    echo "USAGE: v-make-separate-ip-for-email MAIL_HOSTNAME MAIL_IP"
-    exit 1
-fi
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
 
 MAIL_HOSTNAME=$1
 MAIL_IP=$2
@@ -25,6 +24,14 @@ else
     INTERFACE='eth0'
 fi
 
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '2' "$#" 'MAIL_HOSTNAME MAIL_IP'
+is_domain_format_valid "$MAIL_HOSTNAME"
+is_ip_format_valid "$MAIL_IP"
+
 HOST_USER=$($VESTA/bin/v-search-domain-owner "$HOSTNAME")
 if [ -z "$HOST_USER" ]; then
     echo "Error: hostname $HOSTNAME is not created as web domain"
@@ -44,6 +51,10 @@ if [ $# -gt 3 ]; then
     echo "INTERFACE    : $INTERFACE"
 fi
 
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
 if [ ! -f "/usr/local/vesta/data/ips/$MAIL_IP" ]; then
     $VESTA/bin/v-add-sys-ip  "$MAIL_IP" "$NETMASK" "$INTERFACE" 'admin' 'dedicated' '' ''
 fi

From 155b8d21c7a3b1d9bea1ce35a19aa6fe56d2aaa5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 15:13:51 +0200
Subject: [PATCH 1136/2300] Update and rename v-create-ip-ssl to v-make-ip-ssl

---
 bin/v-create-ip-ssl | 37 ---------------------------
 bin/v-make-ip-ssl   | 61 +++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 61 insertions(+), 37 deletions(-)
 delete mode 100644 bin/v-create-ip-ssl
 create mode 100644 bin/v-make-ip-ssl

diff --git a/bin/v-create-ip-ssl b/bin/v-create-ip-ssl
deleted file mode 100644
index b1d7a40a..00000000
--- a/bin/v-create-ip-ssl
+++ /dev/null
@@ -1,37 +0,0 @@
-#!/bin/bash
-
-if [ $# -lt 2 ]; then
-    echo usage: v-create-ip-ssl USER DOMAIN
-    exit 1
-fi
-
-user=$1
-domain=$2
-
-echo "Script ran with: $user $domain" >> /usr/local/vesta/log/v-create-ip-ssl.log
-
-grepr=$(grep -c "^$domain:" /etc/exim4/virtual/interfaces)
-if [ $grepr -ge 1 ]; then
-    grepr=$(grep "^$domain:" /etc/exim4/virtual/interfaces)
-    ip=${grepr/$domain: /}
-    if [ ! -z "$ip" ]; then
-        echo "Processinng $domain" >> /usr/local/vesta/log/v-create-ip-ssl.log
-        echo "IP = $ip" >> /usr/local/vesta/log/v-create-ip-ssl.log
-        cp /home/$user/conf/web/ssl.$domain.pem /usr/local/vesta/ssl/$ip.crt
-        cp /home/$user/conf/web/ssl.$domain.key /usr/local/vesta/ssl/$ip.key
-
-        exim_user="exim";
-        check_exim_username=$(grep -c '^Debian-exim:' /etc/passwd)
-        if [ "$check_exim_username" -eq 1 ]; then
-            exim_user="Debian-exim"
-        fi
-
-        # Assign exim permissions
-        chown $exim_user:mail /usr/local/vesta/ssl/$ip.crt
-        chown $exim_user:mail /usr/local/vesta/ssl/$ip.key
-
-        service exim4 restart
-        service dovecot restart
-        echo "Done." >> /usr/local/vesta/log/v-create-ip-ssl.log
-    fi
-fi
diff --git a/bin/v-make-ip-ssl b/bin/v-make-ip-ssl
new file mode 100644
index 00000000..68e26862
--- /dev/null
+++ b/bin/v-make-ip-ssl
@@ -0,0 +1,61 @@
+#!/bin/bash
+
+# info: Copy host SSL as IP SSL
+# options: USER DOMAIN
+#
+# The function check if specific (sub)domain is marked as main host for specific IP, get its SSL and put it as IP SSL in /usr/local/vesta/ssl/
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+user=$1
+domain=$2
+
+# Importing system environment
+source /etc/profile
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '2' "$#" 'USER DOMAIN'
+is_format_valid 'user' 'domain'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+echo "Script ran with: $user $domain" >> /usr/local/vesta/log/v-create-ip-ssl.log
+
+grepr=$(grep -c "^$domain:" /etc/exim4/virtual/interfaces)
+if [ $grepr -ge 1 ]; then
+    grepr=$(grep "^$domain:" /etc/exim4/virtual/interfaces)
+    ip=${grepr/$domain: /}
+    if [ ! -z "$ip" ]; then
+        echo "Processinng $domain" >> /usr/local/vesta/log/v-create-ip-ssl.log
+        echo "IP = $ip" >> /usr/local/vesta/log/v-create-ip-ssl.log
+        cp /home/$user/conf/web/ssl.$domain.pem /usr/local/vesta/ssl/$ip.crt
+        cp /home/$user/conf/web/ssl.$domain.key /usr/local/vesta/ssl/$ip.key
+
+        exim_user="exim";
+        check_exim_username=$(grep -c '^Debian-exim:' /etc/passwd)
+        if [ "$check_exim_username" -eq 1 ]; then
+            exim_user="Debian-exim"
+        fi
+
+        # Assign exim permissions
+        chown $exim_user:mail /usr/local/vesp.crt ta/ssl/$
+        chown $exim_user:mail /usr/local/vesta/ssl/$ip.key
+
+        service exim4 restart
+        service dovecot restart
+        echo "Done." >> /usr/local/vesta/log/v-create-ip-ssl.log
+    fi
+fi

From 6f9bc5a77cac57a5f30455a3e9bf89bee8724908 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 15:16:40 +0200
Subject: [PATCH 1137/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index bdc66036..a969afb0 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -104,9 +104,9 @@ else
 fi
 
 echo "=== Generating IP for hostname $HOSTNAME"
-$VESTA/bin/v-create-ip-ssl "$HOST_USER" "$HOSTNAME"
+$VESTA/bin/v-make-ip-ssl "$HOST_USER" "$HOSTNAME"
 echo "=== Generating IP for mail hostname $MAIL_HOSTNAME"
-$VESTA/bin/v-create-ip-ssl "$MAIL_USER" "$MAIL_HOSTNAME"
+$VESTA/bin/v-make-ip-ssl "$MAIL_USER" "$MAIL_HOSTNAME"
 
 check_grep=$(grep -c 'smtp_active_hostname' /etc/exim4/exim4.conf.template)
 if [ "$check_grep" -eq 0 ]; then
@@ -127,12 +127,12 @@ else
     echo "=== exim4.conf.template already patched"
 fi
 
-check_grep=$(grep -c 'v-create-ip-ssl' /usr/local/vesta/conf/vesta.conf)
+check_grep=$(grep -c 'v-make-ip-ssl' /usr/local/vesta/conf/vesta.conf)
 if [ "$check_grep" -eq 0 ]; then
-    echo "=== Set UPDATE_SSL_SCRIPT to 'v-create-ip-ssl'"
-    echo "UPDATE_SSL_SCRIPT='/usr/local/vesta/bin/v-create-ip-ssl'" >> /usr/local/vesta/conf/vesta.conf
+    echo "=== Set UPDATE_SSL_SCRIPT to 'v-make-ip-ssl'"
+    echo "UPDATE_SSL_SCRIPT='/usr/local/vesta/bin/v-make-ip-ssl'" >> /usr/local/vesta/conf/vesta.conf
 else
-    echo "=== Value UPDATE_SSL_SCRIPT is already 'v-create-ip-ssl'"
+    echo "=== Value UPDATE_SSL_SCRIPT is already 'v-make-ip-ssl'"
 fi
 
 check_grep=$(grep -c "ip4:$MAIL_IP" /usr/local/vesta/data/templates/dns/default.tpl)

From 6c3033d74db678dde670cc01931daaf190546271 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 15:25:23 +0200
Subject: [PATCH 1138/2300] Update v-make-ip-ssl

---
 bin/v-make-ip-ssl | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/bin/v-make-ip-ssl b/bin/v-make-ip-ssl
index 68e26862..2d446b16 100644
--- a/bin/v-make-ip-ssl
+++ b/bin/v-make-ip-ssl
@@ -32,15 +32,15 @@ is_object_unsuspended 'user' 'USER' "$user"
 #                       Action                             #
 #----------------------------------------------------------#
 
-echo "Script ran with: $user $domain" >> /usr/local/vesta/log/v-create-ip-ssl.log
+echo "Script ran with: $user $domain" >> /usr/local/vesta/log/v-make-ip-ssl.log
 
 grepr=$(grep -c "^$domain:" /etc/exim4/virtual/interfaces)
 if [ $grepr -ge 1 ]; then
     grepr=$(grep "^$domain:" /etc/exim4/virtual/interfaces)
     ip=${grepr/$domain: /}
     if [ ! -z "$ip" ]; then
-        echo "Processinng $domain" >> /usr/local/vesta/log/v-create-ip-ssl.log
-        echo "IP = $ip" >> /usr/local/vesta/log/v-create-ip-ssl.log
+        echo "Processinng $domain" >> /usr/local/vesta/log/v-make-ip-ssl.log
+        echo "IP = $ip" >> /usr/local/vesta/log/v-make-ip-ssl.log
         cp /home/$user/conf/web/ssl.$domain.pem /usr/local/vesta/ssl/$ip.crt
         cp /home/$user/conf/web/ssl.$domain.key /usr/local/vesta/ssl/$ip.key
 
@@ -51,11 +51,11 @@ if [ $grepr -ge 1 ]; then
         fi
 
         # Assign exim permissions
-        chown $exim_user:mail /usr/local/vesp.crt ta/ssl/$
+        chown $exim_user:mail /usr/local/vesta/ssl/$ip.crt
         chown $exim_user:mail /usr/local/vesta/ssl/$ip.key
 
         service exim4 restart
         service dovecot restart
-        echo "Done." >> /usr/local/vesta/log/v-create-ip-ssl.log
+        echo "Done." >> /usr/local/vesta/log/v-make-ip-ssl.log
     fi
 fi

From ff1d6f5ddec56b05d3454640c04c1789bda96f59 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 15:58:49 +0200
Subject: [PATCH 1139/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 76 +++++++++++++---------
 1 file changed, 45 insertions(+), 31 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index 6fe8c19e..dd08021f 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -1,6 +1,8 @@
 #!/bin/bash
-
-# Migration tool that will copy whole site from one domain to another (sub)domain (on the same server), changing URL in database (it's careful with serialized arrays in database).
+# info: Migration tool that will copy whole site from one (sub)domain to another (sub)domain (on the same server)
+# options: FROM_DOMAIN TO_DOMAIN
+#
+# Migration tool that will copy whole site from one (sub)domain to another (sub)domain (on the same server), changing URL in database (it's careful with serialized arrays in database).
 # Useful for making staging copy in one command-line.
 # Automatic detection of WordPress, automaticaly read DB user, DB name, DB pass, automatic cloning to new database, automatic changing wp-config.php file.
 
@@ -20,6 +22,16 @@ if [ $# -lt 2 ]; then
     exit 1
 fi
 
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Importing system environment
+source /etc/profile
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
 FROM_DOMAIN=''
 TO_DOMAIN=''
 FROM_DATABASE_NAME=''
@@ -31,18 +43,17 @@ TO_DATABASE_USERNAME=''
 TO_DATABASE_PASSWORD=''
 DATABASE_SUFIX='_migrated'
 
-if [ -z "$1" ]; then
-    echo "Error: FROM_DOMAIN is empty"
-    exit 2
-fi
-if [ -z "$2" ]; then
-    echo "Error: TO_DOMAIN is empty"
-    exit 3
-fi
-
 FROM_DOMAIN=$1
 TO_DOMAIN=$2
 
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '2' "$#" 'FROM_DOMAIN TO_DOMAIN'
+is_domain_format_valid "$FROM_DOMAIN"
+is_domain_format_valid "$TO_DOMAIN"
+
 ############################
 # handle --parameters=val
 handle_parameter() {
@@ -64,11 +75,18 @@ do
     handle_parameter $1
     shift
 done
-############################
 
-if [ -z "$VESTA" ]; then
-    VESTA="/usr/local/vesta"
-fi
+# Defining password-gen function
+gen_pass() {
+    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
+    LENGTH=32
+    while [ ${n:=1} -le $LENGTH ]; do
+        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
+        let n+=1
+    done
+    echo "$PASS"
+}
+############################
 
 ###########################################################################
 
@@ -241,7 +259,6 @@ if [ $FROM_DOMAIN_HAS_SSL -eq 1 ] && [ $TO_DOMAIN_HAS_SSL -eq 0 ]; then
     SHOULD_INSTALL_SSL=1
 fi
 
-
 # ----------- CHECK -------------
 
 if [ $IT_IS_WP -eq 0 ]; then
@@ -261,10 +278,8 @@ else
     fi
 fi
 
-
 # ----------- PRINT -------------
 
-
 echo "==============================================================================="
 echo "FROM_DOMAIN = $FROM_DOMAIN"
 echo "TO_DOMAIN   = $TO_DOMAIN"
@@ -295,19 +310,9 @@ echo "FROM_DOMAIN_PROXY_EXT = $FROM_DOMAIN_PROXY_EXT"
 echo "==============================================================================="
 read -p "=== Press Enter to continue ==="
 
-
-# ----------- ACTION -------------
-
-# Defining password-gen function
-gen_pass() {
-    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
-    LENGTH=32
-    while [ ${n:=1} -le $LENGTH ]; do
-        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
-        let n+=1
-    done
-    echo "$PASS"
-}
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
 
 if [ $CREATE_TO_USER -eq 1 ]; then
     pass=$(gen_pass)
@@ -410,3 +415,12 @@ fi
 
 echo "===== DONE ===="
 echo "You can visit http://$TO_DOMAIN/"
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 939d3a0d053c4686665ceef879e4771dd3d64868 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 16:06:00 +0200
Subject: [PATCH 1140/2300] Update v-get-database-credentials-of-domain

---
 bin/v-get-database-credentials-of-domain | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/bin/v-get-database-credentials-of-domain b/bin/v-get-database-credentials-of-domain
index c32ef657..8e3778c2 100644
--- a/bin/v-get-database-credentials-of-domain
+++ b/bin/v-get-database-credentials-of-domain
@@ -126,3 +126,12 @@ echo "SITE_FOLDER=$SITE_FOLDER"
 
 USER=$(escape_shell_quote $USER)
 echo "SITE_USER=$USER"
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 99f2e5b1653741906864acec71aa0e745325353e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 16:08:38 +0200
Subject: [PATCH 1141/2300] Update v-make-ip-ssl

---
 bin/v-make-ip-ssl | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/bin/v-make-ip-ssl b/bin/v-make-ip-ssl
index 2d446b16..47e12b9d 100644
--- a/bin/v-make-ip-ssl
+++ b/bin/v-make-ip-ssl
@@ -59,3 +59,12 @@ if [ $grepr -ge 1 ]; then
         echo "Done." >> /usr/local/vesta/log/v-make-ip-ssl.log
     fi
 fi
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 47f5f8a1d18739b4ae76e8233e6004ac8737553e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 16:08:46 +0200
Subject: [PATCH 1142/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index a969afb0..5a6e627b 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -9,6 +9,12 @@
 #                    Variable&Function                     #
 #----------------------------------------------------------#
 
+# Importing system environment
+source /etc/profile
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
 MAIL_HOSTNAME=$1
 MAIL_IP=$2
 
@@ -158,3 +164,12 @@ if [ "$PTR" != "$MAIL_HOSTNAME" ]; then
     echo "WARNING: PTR for $MAIL_IP is $ptr"
     echo "WARNING: PTR for $MAIL_IP should be $MAIL_HOSTNAME"
 fi
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From a3dba232b7e0b93e967203d761fb7451e0286b40 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 21:56:15 +0200
Subject: [PATCH 1143/2300] phpmyadmin fix for apache-less

---
 install/vst-install-debian.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 37566f95..408b6fd2 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1078,11 +1078,11 @@ if [ "$mysql" = 'yes' ]; then
     mysql -e "FLUSH PRIVILEGES"
 
     # Configuring phpMyAdmin
+    if [ "$release" -eq 10 ]; then
+        mkdir /etc/phpmyadmin
+        mkdir -p /var/lib/phpmyadmin/tmp
+    fi
     if [ "$apache" = 'yes' ]; then
-        if [ "$release" -eq 10 ]; then
-            mkdir /etc/phpmyadmin
-            mkdir -p /var/lib/phpmyadmin/tmp
-        fi
         cp -f $vestacp/pma/apache.conf /etc/phpmyadmin/
         ln -s /etc/phpmyadmin/apache.conf /etc/apache2/conf.d/phpmyadmin.conf
     fi

From 39c3c619e02f20772516c59b6b54a65b5b03acb4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 23:46:49 +0200
Subject: [PATCH 1144/2300] Update v-install-wordpress

---
 bin/v-install-wordpress | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 6d04e546..13c4b6b5 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -36,12 +36,11 @@ if [ ! -d "/home/$user/web/$domain/public_html" ]; then
 fi
 
 PROTOCOL='http'
-LETSENCRYPT=$($VESTA/bin/v-list-web-domain "$user" "$domain" | grep 'LETSENCRYPT:' | awk '{print $2}')
-if [ "$LETSENCRYPT" != "yes" ]; then
+if [ ! -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
     v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
 fi
-LETSENCRYPT=$($VESTA/bin/v-list-web-domain "$user" "$domain" | grep 'LETSENCRYPT:' | awk '{print $2}')
-if [ "$LETSENCRYPT" = "yes" ]; then
+
+if [ -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
     PROTOCOL='https'
     if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
         v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"

From e9afc74c66d00802bde09d36024c6f1fa22526ad Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 23:50:41 +0200
Subject: [PATCH 1145/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 5a6e627b..5905347c 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -83,9 +83,10 @@ else
     fi
 fi
 
-LETSENCRYPT=$($VESTA/bin/v-list-web-domain "$MAIL_USER" "$MAIL_HOSTNAME" | grep 'LETSENCRYPT:' | awk '{print $2}')
-if [ "$LETSENCRYPT" = "yes" ]; then
-    echo "=== LetsEncrypt already installed"
+# LETSENCRYPT=$($VESTA/bin/v-list-web-domain "$MAIL_USER" "$MAIL_HOSTNAME" | grep 'LETSENCRYPT:' | awk '{print $2}')
+# if [ "$LETSENCRYPT" = "yes" ]; then
+if [ -f "/home/$MAIL_USER/conf/web/ssl.$MAIL_HOSTNAME.ca" ]; then
+    echo "=== Signed SSL already installed"
 else
     echo "=== Installing LetsEncrypt for (sub)domain $MAIL_HOSTNAME"
     $VESTA/bin/v-add-letsencrypt-domain "$MAIL_USER" "$MAIL_HOSTNAME" "" "yes"

From cecd11cf315d8a521ecd892144a6357538531d69 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 23:52:43 +0200
Subject: [PATCH 1146/2300] Update v-clone-website

---
 src/deb/for-download/tools/v-clone-website | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/for-download/tools/v-clone-website b/src/deb/for-download/tools/v-clone-website
index dd08021f..3312c76c 100644
--- a/src/deb/for-download/tools/v-clone-website
+++ b/src/deb/for-download/tools/v-clone-website
@@ -160,7 +160,7 @@ FROM_DATABASE_NAME_WITHOUT_PREFIX=${FROM_DATABASE_NAME:FROM_USER_LEN}
 FROM_DATABASE_USERNAME_WITHOUT_PREFIX=${FROM_DATABASE_USERNAME:FROM_USER_LEN}
 
 FROM_DOMAIN_HAS_SSL=0
-if [ -f "/home/$FROM_USER/conf/web/ssl.$FROM_DOMAIN.pem" ]; then
+if [ -f "/home/$FROM_USER/conf/web/ssl.$FROM_DOMAIN.ca" ]; then
     FROM_DOMAIN_HAS_SSL=1
 fi
 
@@ -251,7 +251,7 @@ TO_DATABASE_USERNAME_WITHOUT_PREFIX=${TO_DATABASE_USERNAME:TO_USER_LEN}
 
 
 TO_DOMAIN_HAS_SSL=0
-if [ -f "/home/$TO_USER/conf/web/ssl.$TO_DOMAIN.pem" ]; then
+if [ -f "/home/$TO_USER/conf/web/ssl.$TO_DOMAIN.ca" ]; then
     TO_DOMAIN_HAS_SSL=1
 fi
 SHOULD_INSTALL_SSL=0

From ce8a4e630592f28b943e1361fa19d8e7abf4691e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 23:53:38 +0200
Subject: [PATCH 1147/2300] Update v-migrate-site-to-https

---
 src/deb/for-download/tools/v-migrate-site-to-https | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/for-download/tools/v-migrate-site-to-https b/src/deb/for-download/tools/v-migrate-site-to-https
index e445fd27..5831c8ea 100644
--- a/src/deb/for-download/tools/v-migrate-site-to-https
+++ b/src/deb/for-download/tools/v-migrate-site-to-https
@@ -146,10 +146,10 @@ read -p "=== Press Enter to continue ==="
 domain=$FROM_DOMAIN
 user=$FROM_USER
 
-if [ ! -f "/home/$user/conf/web/ssl.$domain.pem" ]; then
+if [ ! -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
     v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
 fi
-if [ -f "/home/$user/conf/web/ssl.$domain.pem" ]; then
+if [ -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
     if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
         v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
     fi

From 9791041f62e60bd94b6f12a54147f2a66d45bdc9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 23:54:14 +0200
Subject: [PATCH 1148/2300] Rename
 src/deb/for-download/tools/v-migrate-site-to-https to
 bin/v-migrate-site-to-https

---
 {src/deb/for-download/tools => bin}/v-migrate-site-to-https | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename {src/deb/for-download/tools => bin}/v-migrate-site-to-https (100%)

diff --git a/src/deb/for-download/tools/v-migrate-site-to-https b/bin/v-migrate-site-to-https
similarity index 100%
rename from src/deb/for-download/tools/v-migrate-site-to-https
rename to bin/v-migrate-site-to-https

From 40ab4b6ac2dd9cc23d3c8e3d2f9085f38a36e3b6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 23:55:12 +0200
Subject: [PATCH 1149/2300] Rename src/deb/for-download/tools/v-clone-website
 to bin/v-clone-website

---
 {src/deb/for-download/tools => bin}/v-clone-website | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename {src/deb/for-download/tools => bin}/v-clone-website (100%)

diff --git a/src/deb/for-download/tools/v-clone-website b/bin/v-clone-website
similarity index 100%
rename from src/deb/for-download/tools/v-clone-website
rename to bin/v-clone-website

From b95bdb363a553e028b951098aa45795461fcc6b2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Jul 2020 23:58:11 +0200
Subject: [PATCH 1150/2300] Update README.md

---
 README.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index 7cc1caf5..54b59844 100644
--- a/README.md
+++ b/README.md
@@ -69,13 +69,13 @@ Useful tools
 
 + [Script that will convert Vesta to myVesta](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/convert-vesta-to-myvesta.sh)
 
-+ [Wordpress installer in one second](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/create_wp_https)
++ [Wordpress installer in one second](https://github.com/myvesta/vesta/blob/master/bin/v-install-wordpress)
 
 + [Script for importing cPanel backups to Vesta](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/cpanel-import.sh)
 
-+ [Cloning script that will copy the whole site from one domain to another (sub)domain](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/v-clone-website)
++ [Cloning script that will copy the whole site from one domain to another (sub)domain](https://github.com/myvesta/vesta/blob/master/bin/v-clone-website)
 
-+ [Script that will migrate your site from http to https, replacing http to https URLs in database](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/v-migrate-site-to-https)
++ [Script that will migrate your site from http to https, replacing http to https URLs in database](https://github.com/myvesta/vesta/blob/master/bin/v-migrate-site-to-https)
 
 + [Script that will install multiple PHP versions on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
 

From ab404bbdb7d13c5addded939d9501b81c14fef21 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 14 Jul 2020 23:36:11 +0200
Subject: [PATCH 1151/2300] Fix ip check for www in installer

---
 install/vst-install-debian.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 408b6fd2..65123d51 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1563,7 +1563,7 @@ fi
 # Comparing hostname and ip
 make_ssl=0
 host_ip=$(host $servername | head -n 1 | awk '{print $NF}')
-if [ "$host_ip" != "$ip" ]; then
+if [ "$host_ip" != "$pub_ip" ]; then
     echo "***** PROBLEM: Hostname $servername is not pointing to your server (IP address $ip)"
     echo "Without pointing your hostname to your IP, LetsEncrypt SSL will not be generated for your server hostname."
     echo "Try to setup an A record in your DNS, pointing your hostname $servername to IP address $ip and then press ENTER."
@@ -1584,7 +1584,7 @@ if [ $make_ssl -eq 1 ]; then
     # Check if www is also pointing to our IP
     www_host="www.$servername"
     www_host_ip=$(host $www_host | head -n 1 | awk '{print $NF}')
-    if [ "$www_host_ip" != "$ip" ]; then
+    if [ "$www_host_ip" != "$pub_ip" ]; then
         if [ "$named" = 'yes' ]; then
             echo "=== Deleting www to server hostname"
             $VESTA/bin/v-delete-web-domain-alias 'admin' "$servername" "$www_host" 'no'

From a63b6281ef677b8fb0840956464a9b2c1ca28541 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 15 Jul 2020 00:01:19 +0200
Subject: [PATCH 1152/2300] Fix for letsencrypt issuing in apache-less variant

---
 bin/v-add-letsencrypt-domain | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 57b764da..7294d0bd 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -180,6 +180,10 @@ for auth in $authz; do
                     ln -s "$conf" "$sconf"
                 fi
                 $BIN/v-restart-proxy
+                if [ -z "$PROXY_SYSTEM" ]; then
+                    # apache-less variant
+                    $BIN/v-restart-web
+                fi
                 check_result $? "Proxy restart failed" >/dev/null
             fi
         else

From 93aa6f852bec3eae1b550de7e8b5c1499b7fa340 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 15 Jul 2020 00:02:14 +0200
Subject: [PATCH 1153/2300] vesta-0.9.8-26-28

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index ace9cf30..a51c76bc 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-27
+vesta-0.9.8-26-28

From f737c6e5e07514cd4102e2de9a830647cf9d5572 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 15 Jul 2020 00:09:18 +0200
Subject: [PATCH 1154/2300] Update Changelog.md

---
 Changelog.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index a6e94dc7..262b91ab 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,11 @@
+Version 0.9.8-26-28 [15-Jul-2020]
+==================================================
+* [Feature] v-install-wordpress command introduced
+* [Feature] v-move-domain-and-database-to-account command introduced
+* [Feature] v-make-separated-ip-for-email command introduced
+* [Bugfix] Fix for LetsEncrypt renewing in apache-less variant (nginx + php-fpm variant)
+* [Bugfix] Fix for phpmyAdmin DB configuring in apache-less variant (nginx + php-fpm variant)
+
 Version 0.9.8-26-27 [05-Jul-2020]
 ==================================================
 * [Feature] Admins now see changelog when they open myVesta panel after myVesta get updated (changelog will dissapear on next refresh)

From 3fd1e641980e66ea45afcba0b66269e9041f75bc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 15 Jul 2020 00:10:44 +0200
Subject: [PATCH 1155/2300] Update Changelog.md

---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 262b91ab..b9134e98 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -3,7 +3,7 @@ Version 0.9.8-26-28 [15-Jul-2020]
 * [Feature] v-install-wordpress command introduced
 * [Feature] v-move-domain-and-database-to-account command introduced
 * [Feature] v-make-separated-ip-for-email command introduced
-* [Bugfix] Fix for LetsEncrypt renewing in apache-less variant (nginx + php-fpm variant)
+* [Bugfix] Fix for LetsEncrypt issuing in apache-less variant (nginx + php-fpm variant)
 * [Bugfix] Fix for phpmyAdmin DB configuring in apache-less variant (nginx + php-fpm variant)
 
 Version 0.9.8-26-27 [05-Jul-2020]

From c66bb6c81e77cf1af63eeb4bec2b356633e54409 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 15 Jul 2020 00:24:04 +0200
Subject: [PATCH 1156/2300] Update Changelog.md

---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index b9134e98..624b5b38 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -4,7 +4,7 @@ Version 0.9.8-26-28 [15-Jul-2020]
 * [Feature] v-move-domain-and-database-to-account command introduced
 * [Feature] v-make-separated-ip-for-email command introduced
 * [Bugfix] Fix for LetsEncrypt issuing in apache-less variant (nginx + php-fpm variant)
-* [Bugfix] Fix for phpmyAdmin DB configuring in apache-less variant (nginx + php-fpm variant)
+* [Bugfix] Fix for configuring phpMyAdmin DB in apache-less variant (nginx + php-fpm variant)
 
 Version 0.9.8-26-27 [05-Jul-2020]
 ==================================================

From a761da29e0249d06eb4ae3bc135d791c1a4f3cdb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 15 Jul 2020 00:30:45 +0200
Subject: [PATCH 1157/2300] phpmyadmin 4.9.5 to install

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 65123d51..fe385d01 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1093,7 +1093,7 @@ if [ "$mysql" = 'yes' ]; then
       mkdir /root/phpmyadmin
       mkdir /usr/share/phpmyadmin
       
-      pma_v='4.9.1'
+      pma_v='4.9.5'
       echo "(*) Installing phpMyAdmin version v$pma_v..."
 
       cd /root/phpmyadmin

From 43a8ce9fa082e4c21f7ce1588b2b26092c7e12f6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Jul 2020 23:42:02 +0200
Subject: [PATCH 1158/2300] bold for changelog

---
 web/templates/admin/list_user.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index 66efaa63..4e65deed 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -65,7 +65,7 @@
     <div class="l-center units">
       <?php
         if (isset($changelog))
-          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br /><a style=\"color: #007bff;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\">Changelog:</a><br /><pre  style=\"padding: 16px; overflow: auto; font-size: 85%; line-height: 1.45; background-color: #f6f8fa; border-radius: 3px;\">".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")."<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, wiki and forum")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" />";
+          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br /><a style=\"color: #007bff;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\">Changelog:</a><br /><pre  style=\"padding: 16px; overflow: auto; font-size: 85%; line-height: 1.45; background-color: #f6f8fa; border-radius: 3px; font-weight: bold;\">".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")."<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, wiki and forum")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" />";
         
         foreach ($data as $key => $value) {
           ++$i;

From ff053aacc9c6ac6c250288cf79778b67e9d0f580 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 18 Jul 2020 00:03:30 +0200
Subject: [PATCH 1159/2300] check_if_database_exists() funtion created

---
 func/db.sh | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/func/db.sh b/func/db.sh
index 30018065..1b48d122 100644
--- a/func/db.sh
+++ b/func/db.sh
@@ -464,3 +464,27 @@ delete_pgsql_user() {
     query="DROP ROLE $old_dbuser"
     psql_query "$query" > /dev/null
 }
+
+# Get database name without user prefix
+get_database_name_without_user_prefix() {
+    user=$1
+    db=$2
+    user_len=${#user}
+    user_len=$((user_len+1))
+    echo ${db:user_len}
+}
+
+# Check if database exists
+check_if_database_exists() {
+    USER_DATA_PATH=$VESTA/data/users/$1
+    if [ ! -d "$USER_DATA_PATH" ]; then
+        echo "no"
+        return;
+    fi
+    counter=$(grep -c "DB='$2'" $USER_DATA_PATH/db.conf)
+    if [ "$counter" = "0" ]; then
+        echo "no"
+    else
+        echo "yes"
+    fi
+}

From e263e64e397256fbe6c575ff048e915d0966bbfb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 18 Jul 2020 00:04:26 +0200
Subject: [PATCH 1160/2300] Moving get_database_name_without_user_prefix()
 function to db.sh

---
 func/main.sh | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/func/main.sh b/func/main.sh
index cdb76484..7d0f48f1 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -1057,11 +1057,3 @@ replace_php_config_value() {
     sed -i "s|=$1$|=$2|g" $3
     sed -i "s|= $1$|= $2|g" $3
 }
-
-get_database_name_without_user_prefix() {
-    user=$1
-    db=$2
-    user_len=${#user}
-    user_len=$((user_len+1))
-    echo ${db:user_len}
-}

From 40fe1a5fa29db30b727fc21369d1fa4db8736370 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 18 Jul 2020 00:07:47 +0200
Subject: [PATCH 1161/2300] Update v-get-database-credentials-of-domain

---
 bin/v-get-database-credentials-of-domain | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-get-database-credentials-of-domain b/bin/v-get-database-credentials-of-domain
index 8e3778c2..c0319511 100644
--- a/bin/v-get-database-credentials-of-domain
+++ b/bin/v-get-database-credentials-of-domain
@@ -21,6 +21,7 @@ source /etc/profile
 
 # Includes
 source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/db.sh
 
 #----------------------------------------------------------#
 #                    Verifications                         #

From 32e87ecde1f70bc2c25271066aa5691be3a5a444 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 18 Jul 2020 00:35:19 +0200
Subject: [PATCH 1162/2300] Update v-install-wordpress

---
 bin/v-install-wordpress | 102 +++++++++++++++++++++++++---------------
 1 file changed, 63 insertions(+), 39 deletions(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 13c4b6b5..191fbc56 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -1,23 +1,19 @@
 #!/bin/bash
-
-# WordPress installer in one command line
+# info: WordPress installer in one command line
+# options: DOMAIN USER
+#
 # Credits to Luka Paunović for wp-cli implememtation
 
-if [ $# -lt 1 ]; then
-    echo usage: v-install-wordpress domain [db_name] [email]
-    exit 1
-fi
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
 
+# Argument definition
 domain=$1
 
-PATH=$PATH:/usr/local/vesta/bin
-export PATH
-
-user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
-
-START_DB="wp";
+database="wp";
 if [ $# -gt 1 ]; then
-    START_DB=$2
+    database=$2
 fi
 
 email="info@$domain";
@@ -25,6 +21,27 @@ if [ $# -gt 2 ]; then
     email=$3
 fi
 
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Includes
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/db.sh
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN [DB_NAME] [EMAIL]'
+is_format_valid 'domain' 'database' 'email'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
 if [ ! -d "/home/$user" ]; then
     echo "User doesn't exist";
     exit 1;
@@ -35,15 +52,20 @@ if [ ! -d "/home/$user/web/$domain/public_html" ]; then
     exit 1;
 fi
 
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
 PROTOCOL='http'
 if [ ! -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
-    v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
+    /usr/local/vesta/bin/v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
 fi
 
 if [ -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
     PROTOCOL='https'
     if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
-        v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
+        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
     fi
 fi
 
@@ -51,32 +73,31 @@ WORKINGDIR="/home/$user/web/$domain/public_html"
 
 rm -rf $WORKINGDIR/*
 
-DBUSERSUF="$START_DB";
-DBUSERSUFB="$START_DB";
+DBUSERSUF="$database";
+DBUSERSUFB="$database";
 DBUSER=$user\_$DBUSERSUFB;
-DB_OK=0;
-if [ ! -d "/var/lib/mysql/$DBUSER" ]; then
-    DB_OK=1;
-fi
+DB_EXISTS=$(check_if_database_exists "$user" "$DBUSER")
 
-if [ "$DB_OK" -eq "0" ]; then
-i=1;
-while [ $i -lt 99 ]
-do
-i=$((i+1));
-DBUSERSUF="${DBUSERSUFB}${i}";
-DBUSER=$user\_$DBUSERSUF;
-if [ ! -d "/var/lib/mysql/$DBUSER" ]; then
-break;
-fi
-done
+if [ "$DB_EXISTS" = "yes" ]; then
+    i=1;
+    while [ $i -lt 99 ]; do
+        i=$((i+1));
+        DBUSERSUF="${DBUSERSUFB}${i}";
+        DBUSER=$user\_$DBUSERSUF;
+        DB_EXISTS=$(check_if_database_exists "$user" "$DBUSER")
+        if [ "$DB_EXISTS" = "no" ]; then
+            break;
+        fi
+    done
 fi
 
 PASSWDDB=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1)
 
-v-add-database $user $DBUSERSUF $DBUSERSUF $PASSWDDB mysql
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
 
-cd /home/$user
+/usr/local/vesta/bin/v-add-database "$user" "$DBUSERSUF" "$DBUSERSUF" "$PASSWDDB" "mysql"
 
 if [ ! -f "/usr/local/bin/wp" ]; then
     echo "=== Downloading latest wp-cli"
@@ -93,12 +114,8 @@ password=$(LC_CTYPE=C tr -dc A-Za-z0-9_\!\@\#\$\%\^\&\*\(\)-+= < /dev/urandom |
 
 sudo -H -u$user wp core install --url="$domain" --title="$domain" --admin_user="admin" --admin_password="$password" --admin_email="$email" --path=$WORKINGDIR
 
-#FIX za https://github.com/wp-cli/wp-cli/issues/2632
-
 mysql -u$DBUSER -p$PASSWDDB -e "USE $DBUSER; update wp_options set option_value = '$PROTOCOL://$domain' where option_name = 'siteurl'; update wp_options set option_value = '$PROTOCOL://$domain' where option_name = 'home';"
 
-# clear
-
 echo "================================================================="
 echo "Installation is complete. Your username/password is listed below."
 echo ""
@@ -112,5 +129,12 @@ echo "================================================================="
 
 chown -R $user:$user $WORKINGDIR
 
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
 echo "v-install-wordpress: Done."
-exit 0
+
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 6a2709d9e01d73e8158ca916ee08da0385a8a07c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 18 Jul 2020 00:41:56 +0200
Subject: [PATCH 1163/2300] Update v-install-wordpress

---
 bin/v-install-wordpress | 39 ++++++++++++++++-----------------------
 1 file changed, 16 insertions(+), 23 deletions(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 191fbc56..b5578dc9 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -52,27 +52,6 @@ if [ ! -d "/home/$user/web/$domain/public_html" ]; then
     exit 1;
 fi
 
-
-#----------------------------------------------------------#
-#                       Action                             #
-#----------------------------------------------------------#
-
-PROTOCOL='http'
-if [ ! -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
-    /usr/local/vesta/bin/v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
-fi
-
-if [ -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
-    PROTOCOL='https'
-    if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
-        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
-    fi
-fi
-
-WORKINGDIR="/home/$user/web/$domain/public_html"
-
-rm -rf $WORKINGDIR/*
-
 DBUSERSUF="$database";
 DBUSERSUFB="$database";
 DBUSER=$user\_$DBUSERSUFB;
@@ -97,6 +76,18 @@ PASSWDDB=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1)
 #                       Action                             #
 #----------------------------------------------------------#
 
+PROTOCOL='http'
+if [ ! -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
+    /usr/local/vesta/bin/v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
+fi
+
+if [ -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
+    PROTOCOL='https'
+    if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
+        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
+    fi
+fi
+
 /usr/local/vesta/bin/v-add-database "$user" "$DBUSERSUF" "$DBUSERSUF" "$PASSWDDB" "mysql"
 
 if [ ! -f "/usr/local/bin/wp" ]; then
@@ -104,8 +95,10 @@ if [ ! -f "/usr/local/bin/wp" ]; then
     wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
     chmod +x /usr/local/bin/wp
 fi
-    
-cd /home/$user/web/$domain/public_html
+
+WORKINGDIR="/home/$user/web/$domain/public_html"
+rm -rf $WORKINGDIR/*
+cd $WORKINGDIR
 
 sudo -H -u$user wp core download
 sudo -H -u$user wp core config --dbname=$DBUSER --dbuser=$DBUSER --dbpass=$PASSWDDB

From aefa55335130b56fab4e5624fff347cec2ef52d9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 18 Jul 2020 00:43:10 +0200
Subject: [PATCH 1164/2300] Update v-move-domain-and-database-to-account

---
 bin/v-move-domain-and-database-to-account | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/bin/v-move-domain-and-database-to-account b/bin/v-move-domain-and-database-to-account
index 7257f41d..c8d1eb78 100644
--- a/bin/v-move-domain-and-database-to-account
+++ b/bin/v-move-domain-and-database-to-account
@@ -4,7 +4,6 @@
 #
 # The function of changing domain and database ownership.
 
-
 #----------------------------------------------------------#
 #                    Variable&Function                     #
 #----------------------------------------------------------#
@@ -19,7 +18,6 @@ source /etc/profile
 # Includes
 source /usr/local/vesta/func/main.sh
 
-
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#
@@ -42,6 +40,8 @@ USER_TO=$user
 #                       Action                             #
 #----------------------------------------------------------#
 
+RET=$OK
+
 echo "================================="
 r=$(/usr/local/vesta/bin/v-get-database-credentials-of-domain $domain)
 echo $r
@@ -53,6 +53,7 @@ if [ ! -z "$DATABASE_NAME" ]; then
     /usr/local/vesta/bin/v-change-database-owner $DATABASE_NAME $USER_TO
     if [ $? -ne 0 ]; then
         echo "=== v-change-database-owner failed"
+        RET=$E_NOTEXIST
     fi
 
     if [ ! -z "$DATABASE_USERNAME" ] && [ ! -z "$CONFIG_FILE_FULL_PATH" ]; then
@@ -74,4 +75,13 @@ echo "=== v-change-domain-owner $domain $USER_TO"
 /usr/local/vesta/bin/v-change-domain-owner $domain $USER_TO
 if [ $? -ne 0 ]; then
     echo "=== v-change-domain-owner failed"
+    RET=$E_NOTEXIST
 fi
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+log_event "$OK" "$ARGUMENTS"
+
+exit

From d91e68d316dc478963589646dbb2352ab81cd756 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 18 Jul 2020 00:43:43 +0200
Subject: [PATCH 1165/2300] Update v-move-domain-and-database-to-account

---
 bin/v-move-domain-and-database-to-account | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-move-domain-and-database-to-account b/bin/v-move-domain-and-database-to-account
index c8d1eb78..4c2811de 100644
--- a/bin/v-move-domain-and-database-to-account
+++ b/bin/v-move-domain-and-database-to-account
@@ -82,6 +82,6 @@ fi
 #                       Vesta                              #
 #----------------------------------------------------------#
 
-log_event "$OK" "$ARGUMENTS"
+log_event "$RET" "$ARGUMENTS"
 
 exit

From ae8eb40ef420e4033dd010de9525406953ddc39d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 18 Jul 2020 02:37:39 +0200
Subject: [PATCH 1166/2300] Update v-get-database-credentials-of-domain

---
 bin/v-get-database-credentials-of-domain | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-get-database-credentials-of-domain b/bin/v-get-database-credentials-of-domain
index c0319511..811527ca 100644
--- a/bin/v-get-database-credentials-of-domain
+++ b/bin/v-get-database-credentials-of-domain
@@ -119,6 +119,9 @@ echo "DATABASE_HOSTNAME=$DATABASE_HOSTNAME"
 CONFIG_FILE_FULL_PATH=$(escape_shell_quote $CONFIG_FILE_FULL_PATH)
 echo "CONFIG_FILE_FULL_PATH=$CONFIG_FILE_FULL_PATH"
 
+CONFIG_FILE=$(escape_shell_quote $CONFIG_FILE)
+echo "CONFIG_FILE=$CONFIG_FILE"
+
 CMS_TYPE=$(escape_shell_quote $CMS_TYPE)
 echo "CMS_TYPE=$CMS_TYPE"
 

From ec1ab55e0203edc7c0930943c24c841f6dea557e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 19 Jul 2020 00:44:00 +0200
Subject: [PATCH 1167/2300] Adapting v-migrate-site-to-https to new myVesta
 functions

---
 bin/v-migrate-site-to-https | 188 ++++++++++++++++++++----------------
 1 file changed, 105 insertions(+), 83 deletions(-)

diff --git a/bin/v-migrate-site-to-https b/bin/v-migrate-site-to-https
index 5831c8ea..09662760 100644
--- a/bin/v-migrate-site-to-https
+++ b/bin/v-migrate-site-to-https
@@ -1,98 +1,112 @@
 #!/bin/bash
-
+# info: migrate site to https
+# options: DOMAIN [DATABASE_NAME] [DATABASE_USERNAME] [DATABASE_PASSWORD]
+#
 # Tool that will replace http to https URLs in database, install SSL and switch to force-https proxy template
 # Automatic detection of WordPress, automaticaly read DB user, DB name and DB pass.
 
-if [ $# -lt 1 ]; then
-    echo "USAGE: v-migrate-site-to-https DOMAIN [DATABASE_NAME] [DATABASE_USERNAME] [DATABASE_PASSWORD]"
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+if [ -z "$user" ]; then
+    echo "domain $domain doesn't exist"
     exit 1
 fi
 
-FROM_DOMAIN=''
+# Importing system environment
+source /etc/profile
+
+# Includes
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/db.sh
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN'
+is_format_valid 'domain' 'user'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
 FROM_DATABASE_NAME=''
 FROM_DATABASE_USERNAME=''
 FROM_DATABASE_PASSWORD=''
 
-if [ -z "$VESTA" ]; then
-    VESTA="/usr/local/vesta"
-fi
+FROM_DOMAIN=$domain
+FROM_USER=$user
 
-if [ -z "$1" ]; then
-    echo "Error: DOMAIN is empty"
+r=$(/usr/local/vesta/bin/v-get-database-credentials-of-domain $FROM_DOMAIN)
+# echo $r
+eval $r
+
+############################
+# handle --parameters=val
+handle_parameter() {
+    origparam=$1
+    searchstring="="
+    paramminuses=${origparam:0:2}
+    if [ "$paramminuses" = "--" ]; then
+        var_without_minuses=${origparam:2}
+        var=${var_without_minuses%%=*}
+        val=${origparam#*$searchstring}
+        #echo $var
+        #echo $val
+        printf -v "$var" '%s' "$val"
+    fi
+}
+numargs=$#
+for ((i=1 ; i <= numargs ; i++))
+do
+    handle_parameter $1
+    shift
+done
+############################
+
+FROM_CONFIG_FILE=$CONFIG_FILE
+FROM_CONFIG_FILE_FULL_PATH=$CONFIG_FILE_FULL_PATH
+if [ ! -f "$FROM_CONFIG_FILE_FULL_PATH" ]; then
+    echo "Error: CONFIG_FILE_FULL_PATH $FROM_CONFIG_FILE_FULL_PATH does not exists"
     exit 2
 fi
 
-FROM_DOMAIN=$1
-FROM_USER=$($VESTA/bin/v-search-domain-owner "$FROM_DOMAIN")
-if [ -z "$FROM_USER" ]; then
-    echo "Error: domain $FROM_DOMAIN does not exists"
-    exit 4
-fi
-
-FROM_FOLDER="/home/$FROM_USER/web/$FROM_DOMAIN/public_html"
-CHECK_PUBLIC_SHTML=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'SSL:' | grep -c 'single')
-if [ $CHECK_PUBLIC_SHTML -eq 1 ]; then
-    FROM_FOLDER="/home/$FROM_USER/web/$FROM_DOMAIN/public_shtml"
-fi
-
-FROM_CONFIG_FILE="wp-config.php"
-FROM_CONFIG_FILE_FULL_PATH="$FROM_FOLDER/$FROM_CONFIG_FILE"
-if [ ! -f "$FROM_CONFIG_FILE_FULL_PATH" ]; then
-    echo "Error: CONFIG_FILE_FULL_PATH $FROM_CONFIG_FILE_FULL_PATH does not exists"
-    exit 5
-fi
-
 IT_IS_WP=0
-if [ -f "$FROM_FOLDER/wp-config.php" ]; then
+if [ "$CMS_TYPE" = "wordpress" ]; then
     IT_IS_WP=1
 fi
 
-if [ $IT_IS_WP -eq 1 ]; then
-    FROM_CONFIG_FILE_FULL_PATH_BACKUP="${FROM_CONFIG_FILE_FULL_PATH}_backup"
-    cp $FROM_CONFIG_FILE_FULL_PATH $FROM_CONFIG_FILE_FULL_PATH_BACKUP
-    sed -i "s|//.*$||g" $FROM_CONFIG_FILE_FULL_PATH_BACKUP
-    if [ -z "$FROM_DATABASE_NAME" ]; then
-        sed -i "s|('|( '|g" $FROM_CONFIG_FILE_FULL_PATH_BACKUP
-        sed -i "s|');|' );|g" $FROM_CONFIG_FILE_FULL_PATH_BACKUP
-        FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
-    fi
+if [ -z "$FROM_DATABASE_NAME" ]; then
+    FROM_DATABASE_NAME=$DATABASE_NAME
+fi
+if [ -z "$FROM_DATABASE_USERNAME" ]; then
+    FROM_DATABASE_USERNAME=$DATABASE_USERNAME
+fi
+if [ -z "$FROM_DATABASE_PASSWORD" ]; then
+    FROM_DATABASE_PASSWORD=$DATABASE_PASSWORD
+fi
 
-    FROM_DATABASE_USERNAME=$(grep 'DB_USER' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
-    FROM_DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
-    rm $FROM_CONFIG_FILE_FULL_PATH_BACKUP
-fi
-if [ $# -ge 2 ]; then
-    if [ ! -z "$2" ]; then
-        FROM_DATABASE_NAME=$3
-    fi
-fi
-if [ $# -ge 3 ]; then
-    if [ ! -z "$3" ]; then
-        FROM_DATABASE_USERNAME=$4
-    fi
-fi
-if [ $# -ge 4 ]; then
-    if [ ! -z "$4" ]; then
-        FROM_DATABASE_PASSWORD=$5
-    fi
-fi
 if [ -z "$FROM_DATABASE_NAME" ]; then
     echo "Error: DATABASE_NAME is empty"
-    exit 6
+    exit 3
 fi
 if [ -z "$FROM_DATABASE_USERNAME" ]; then
     echo "Error: DATABASE_USERNAME is empty"
-    exit 7
+    exit 4
 fi
 if [ -z "$FROM_DATABASE_PASSWORD" ]; then
     echo "Error: DATABASE_PASSWORD is empty"
-    exit 8
+    exit 5
 fi
 
-object=$(grep "DB='$FROM_DATABASE_NAME'" $VESTA/data/users/$FROM_USER/db.conf)
-if [ -z "$object" ]; then
+DB_EXISTS=$(check_if_database_exists "$user" "$FROM_DATABASE_NAME")
+if [ "$DB_EXISTS" = "no" ]; then
     echo "Error: database $FROM_DATABASE_NAME does not exists"
-    exit 9
+    exit 6
 fi
 
 # ----------- CHECK -------------
@@ -105,11 +119,11 @@ TO_REPLACE2="https://www.$FROM_DOMAIN"
 if [ $IT_IS_WP -eq 0 ]; then
     if [ ! -f "/root/Search-Replace-DB-master/srdb.cli.php" ]; then
         echo "Please download https://interconnectit.com/products/search-and-replace-for-wordpress-databases/ and extract to /root/Search-Replace-DB-master/"
-        exit 13
+        exit 7
     fi
     if [ ! -f "/usr/bin/php7.0" ]; then
         echo "Please download https://c.myvestacp.com/tools/multi-php-install.sh and install php 7.0"
-        exit 14
+        exit 8
     fi
 else
     if [ ! -f "/usr/local/bin/wp" ]; then
@@ -129,40 +143,39 @@ echo "TO_REPLACE1   = $TO_REPLACE1"
 echo "FROM_REPLACE2 = $FROM_REPLACE2"
 echo "TO_REPLACE2   = $TO_REPLACE2"
 echo "----"
-echo "FROM_DOMAIN = $FROM_DOMAIN"
-echo "FROM_USER   = $FROM_USER"
-echo "FROM_FOLDER = $FROM_FOLDER"
+echo "DOMAIN = $FROM_DOMAIN"
+echo "USER   = $FROM_USER"
+echo "SITE_FOLDER = $SITE_FOLDER"
 echo "IT_IS_WP = $IT_IS_WP"
-echo "FROM_CONFIG_FILE_FULL_PATH = $FROM_CONFIG_FILE_FULL_PATH"
-echo "FROM_DATABASE_NAME     = $FROM_DATABASE_NAME"
-echo "FROM_DATABASE_USERNAME = $FROM_DATABASE_USERNAME"
-echo "FROM_DATABASE_PASSWORD = $FROM_DATABASE_PASSWORD"
+echo "CONFIG_FILE_FULL_PATH = $FROM_CONFIG_FILE_FULL_PATH"
+echo "DATABASE_NAME     = $FROM_DATABASE_NAME"
+echo "DATABASE_USERNAME = $FROM_DATABASE_USERNAME"
+echo "DATABASE_PASSWORD = $FROM_DATABASE_PASSWORD"
 echo "==============================================================================="
 read -p "=== Press Enter to continue ==="
 
 
-# ----------- ACTION -------------
-
-domain=$FROM_DOMAIN
-user=$FROM_USER
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
 
 if [ ! -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
-    v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
+    /usr/local/vesta/bin/v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
 fi
 if [ -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
     if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
-        v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
+        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
     fi
 else
     echo "Error: Can not generate SSL."
-    exit 20
+    exit 9
 fi
 
 echo "=== Replacing $FROM_REPLACE1 to $TO_REPLACE1 in folder $TO_FOLDER"
-grep -rl "$FROM_DOMAIN" $FROM_FOLDER | xargs sed -i "s#$FROM_REPLACE1#$TO_REPLACE1#g"
+grep -rl "$FROM_DOMAIN" $SITE_FOLDER | xargs sed -i "s#$FROM_REPLACE1#$TO_REPLACE1#g"
 
 echo "=== Replacing $FROM_REPLACE2 to $TO_REPLACE2 in folder $TO_FOLDER"
-grep -rl "$FROM_DOMAIN" $FROM_FOLDER | xargs sed -i "s#$FROM_REPLACE2#$TO_REPLACE2#g"
+grep -rl "$FROM_DOMAIN" $SITE_FOLDER | xargs sed -i "s#$FROM_REPLACE2#$TO_REPLACE2#g"
 
 if [ $IT_IS_WP -eq 0 ]; then
     echo "=== Replacing $FROM_REPLACE1 to $TO_REPLACE1 in database $FROM_DATABASE_NAME"
@@ -170,7 +183,7 @@ if [ $IT_IS_WP -eq 0 ]; then
     echo "=== Replacing $FROM_REPLACE2 to $TO_REPLACE2 in database $FROM_DATABASE_NAME"
     php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$FROM_DATABASE_NAME" -u "$FROM_DATABASE_USERNAME" -p "$FROM_DATABASE_PASSWORD" -s "$FROM_REPLACE2" -r "$TO_REPLACE2"
 else
-    cd $FROM_FOLDER
+    cd $SITE_FOLDER
     echo "=== Replacing $FROM_REPLACE1 to $TO_REPLACE1 in database $FROM_DATABASE_NAME"
     sudo -H -u$FROM_USER wp search-replace "$FROM_REPLACE1" "$TO_REPLACE1" --precise --all-tables --skip-columns=guid
     echo "=== Replacing $FROM_REPLACE2 to $TO_REPLACE2 in database $FROM_DATABASE_NAME"
@@ -179,3 +192,12 @@ fi
 
 echo "===== DONE ===="
 echo "You can visit $TO_REPLACE1"
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 79357d20770e8480a3a93cc1ad598089a40a09b0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 19 Jul 2020 00:47:46 +0200
Subject: [PATCH 1168/2300] Update v-migrate-site-to-https

---
 bin/v-migrate-site-to-https | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bin/v-migrate-site-to-https b/bin/v-migrate-site-to-https
index 09662760..fd1d64c8 100644
--- a/bin/v-migrate-site-to-https
+++ b/bin/v-migrate-site-to-https
@@ -1,9 +1,9 @@
 #!/bin/bash
 # info: migrate site to https
-# options: DOMAIN [DATABASE_NAME] [DATABASE_USERNAME] [DATABASE_PASSWORD]
+# options: DOMAIN [--DATABASE_NAME=...] [--DATABASE_USERNAME=...] [--DATABASE_PASSWORD=...]
 #
 # Tool that will replace http to https URLs in database, install SSL and switch to force-https proxy template
-# Automatic detection of WordPress, automaticaly read DB user, DB name and DB pass.
+# Automatic detection of CMS, automaticaly read DB user, DB name and DB pass.
 
 #----------------------------------------------------------#
 #                    Variable&Function                     #
@@ -29,7 +29,7 @@ source /usr/local/vesta/func/db.sh
 #                    Verifications                         #
 #----------------------------------------------------------#
 
-check_args '1' "$#" 'DOMAIN'
+check_args '1' "$#" 'DOMAIN [--DATABASE_NAME=...] [--DATABASE_USERNAME=...] [--DATABASE_PASSWORD=...]'
 is_format_valid 'domain' 'user'
 is_object_valid 'user' 'USER' "$user"
 is_object_unsuspended 'user' 'USER' "$user"

From e5b3ef9b0379e6b6cdb3317b72652ba15b7b1f44 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 19 Jul 2020 01:36:57 +0200
Subject: [PATCH 1169/2300] introducing vesta_generate_pass() function

---
 func/main.sh | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/func/main.sh b/func/main.sh
index 7d0f48f1..704e5446 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -1057,3 +1057,17 @@ replace_php_config_value() {
     sed -i "s|=$1$|=$2|g" $3
     sed -i "s|= $1$|= $2|g" $3
 }
+
+# Defining password-gen function
+vesta_generate_pass() {
+    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
+    LENGTH=32
+    if [ $# -gt 0 ] && [ $1 != "" ]; then
+        LENGTH=$1
+    fi
+    while [ ${n:=1} -le $LENGTH ]; do
+        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
+        let n+=1
+    done
+    echo "$PASS"
+}

From f761d0b3230b3e684ec5c9d967ce24da0bd31ae9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 19 Jul 2020 01:43:59 +0200
Subject: [PATCH 1170/2300] Create handle_parameters.sh

---
 func/handle_parameters.sh | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 func/handle_parameters.sh

diff --git a/func/handle_parameters.sh b/func/handle_parameters.sh
new file mode 100644
index 00000000..ba5bd36f
--- /dev/null
+++ b/func/handle_parameters.sh
@@ -0,0 +1,20 @@
+# handle --parameters=val
+handle_parameter() {
+    origparam=$1
+    searchstring="="
+    paramminuses=${origparam:0:2}
+    if [ "$paramminuses" = "--" ]; then
+        var_without_minuses=${origparam:2}
+        var=${var_without_minuses%%=*}
+        val=${origparam#*$searchstring}
+        #echo $var
+        #echo $val
+        printf -v "$var" '%s' "$val"
+    fi
+}
+numargs=$#
+for ((i=1 ; i <= numargs ; i++))
+do
+    handle_parameter $1
+    shift
+done

From 4079e83cfb4c1c1505fa3cc12d613cd3a1a43f58 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 19 Jul 2020 01:49:16 +0200
Subject: [PATCH 1171/2300] Update v-migrate-site-to-https

---
 bin/v-migrate-site-to-https | 23 +----------------------
 1 file changed, 1 insertion(+), 22 deletions(-)

diff --git a/bin/v-migrate-site-to-https b/bin/v-migrate-site-to-https
index fd1d64c8..410855c6 100644
--- a/bin/v-migrate-site-to-https
+++ b/bin/v-migrate-site-to-https
@@ -45,28 +45,7 @@ r=$(/usr/local/vesta/bin/v-get-database-credentials-of-domain $FROM_DOMAIN)
 # echo $r
 eval $r
 
-############################
-# handle --parameters=val
-handle_parameter() {
-    origparam=$1
-    searchstring="="
-    paramminuses=${origparam:0:2}
-    if [ "$paramminuses" = "--" ]; then
-        var_without_minuses=${origparam:2}
-        var=${var_without_minuses%%=*}
-        val=${origparam#*$searchstring}
-        #echo $var
-        #echo $val
-        printf -v "$var" '%s' "$val"
-    fi
-}
-numargs=$#
-for ((i=1 ; i <= numargs ; i++))
-do
-    handle_parameter $1
-    shift
-done
-############################
+source /usr/local/vesta/func/handle_parameters.sh
 
 FROM_CONFIG_FILE=$CONFIG_FILE
 FROM_CONFIG_FILE_FULL_PATH=$CONFIG_FILE_FULL_PATH

From 10632f914310c7cbe4d3cdcf4df1e05adf75a692 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 19 Jul 2020 02:32:03 +0200
Subject: [PATCH 1172/2300] Update v-clone-website

---
 bin/v-clone-website | 167 ++++++++++++++------------------------------
 1 file changed, 53 insertions(+), 114 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 3312c76c..a92788d6 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -26,14 +26,22 @@ fi
 #                    Variable&Function                     #
 #----------------------------------------------------------#
 
+FROM_DOMAIN=$1
+TO_DOMAIN=$2
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner "$FROM_DOMAIN")
+if [ -z "$user" ]; then
+    echo "Error: domain $FROM_DOMAIN does not exists"
+    exit 2
+fi
+
 # Importing system environment
 source /etc/profile
 
 # Includes
 source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/db.sh
 
-FROM_DOMAIN=''
-TO_DOMAIN=''
 FROM_DATABASE_NAME=''
 FROM_DATABASE_USERNAME=''
 FROM_DATABASE_PASSWORD=''
@@ -43,130 +51,76 @@ TO_DATABASE_USERNAME=''
 TO_DATABASE_PASSWORD=''
 DATABASE_SUFIX='_migrated'
 
-FROM_DOMAIN=$1
-TO_DOMAIN=$2
+source /usr/local/vesta/func/handle_parameters.sh
 
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#
 
-check_args '2' "$#" 'FROM_DOMAIN TO_DOMAIN'
+# check_args '2' "$#" 'FROM_DOMAIN TO_DOMAIN'
 is_domain_format_valid "$FROM_DOMAIN"
 is_domain_format_valid "$TO_DOMAIN"
 
-############################
-# handle --parameters=val
-handle_parameter() {
-    origparam=$1
-    searchstring="="
-    paramminuses=${origparam:0:2}
-    if [ "$paramminuses" = "--" ]; then
-        var_without_minuses=${origparam:2}
-        var=${var_without_minuses%%=*}
-        val=${origparam#*$searchstring}
-        #echo $var
-        #echo $val
-        printf -v "$var" '%s' "$val"
-    fi
-}
-numargs=$#
-for ((i=1 ; i <= numargs ; i++))
-do
-    handle_parameter $1
-    shift
-done
+FROM_USER=$user
 
-# Defining password-gen function
-gen_pass() {
-    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
-    LENGTH=32
-    while [ ${n:=1} -le $LENGTH ]; do
-        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
-        let n+=1
-    done
-    echo "$PASS"
-}
-############################
+r=$(/usr/local/vesta/bin/v-get-database-credentials-of-domain "$FROM_DOMAIN")
+eval $r
 
-###########################################################################
+FROM_FOLDER=$SITE_FOLDER
 
-FROM_USER=$($VESTA/bin/v-search-domain-owner "$FROM_DOMAIN")
-if [ -z "$FROM_USER" ]; then
-    echo "Error: domain $FROM_DOMAIN does not exists"
-    exit 4
-fi
+FROM_CONFIG_FILE=$CONFIG_FILE
+FROM_CONFIG_FILE_FULL_PATH=$CONFIG_FILE_FULL_PATH
 
-FROM_FOLDER="/home/$FROM_USER/web/$FROM_DOMAIN/public_html"
-CHECK_PUBLIC_SHTML=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'SSL:' | grep -c 'single')
-if [ $CHECK_PUBLIC_SHTML -eq 1 ]; then
-    FROM_FOLDER="/home/$FROM_USER/web/$FROM_DOMAIN/public_shtml"
-fi
-
-if [ ! -z "$FROM_CONFIG_FILE" ]; then
-    FROM_CONFIG_FILE_FULL_PATH="$FROM_FOLDER/$6"
-fi
-if [ -z "$FROM_CONFIG_FILE" ]; then
-    FROM_CONFIG_FILE="wp-config.php"
-    FROM_CONFIG_FILE_FULL_PATH="$FROM_FOLDER/$FROM_CONFIG_FILE"
-fi
 if [ ! -f "$FROM_CONFIG_FILE_FULL_PATH" ]; then
     echo "Error: FROM_CONFIG_FILE_FULL_PATH $FROM_CONFIG_FILE_FULL_PATH does not exists"
-    exit 5
+    exit 3
 fi
 
 IT_IS_WP=0
-if [ -f "$FROM_FOLDER/wp-config.php" ]; then
+if [ "$CMS_TYPE" = "wordpress" ]; then
     IT_IS_WP=1
 fi
 
-if [ $IT_IS_WP -eq 1 ]; then
-    FROM_CONFIG_FILE_FULL_PATH_BACKUP="${FROM_CONFIG_FILE_FULL_PATH}_backup"
-    cp $FROM_CONFIG_FILE_FULL_PATH $FROM_CONFIG_FILE_FULL_PATH_BACKUP
-    sed -i "s|//.*$||g" $FROM_CONFIG_FILE_FULL_PATH_BACKUP
-    if [ -z "$FROM_DATABASE_NAME" ]; then
-        sed -i "s|('|( '|g" $FROM_CONFIG_FILE_FULL_PATH_BACKUP
-        sed -i "s|');|' );|g" $FROM_CONFIG_FILE_FULL_PATH_BACKUP
-        FROM_DATABASE_NAME=$(grep 'DB_NAME' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
-    fi
-
-    FROM_DATABASE_USERNAME=$(grep 'DB_USER' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
-    FROM_DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $FROM_CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
-    rm $FROM_CONFIG_FILE_FULL_PATH_BACKUP
+if [ -z "$FROM_DATABASE_NAME" ]; then
+    FROM_DATABASE_NAME=$DATABASE_NAME
+fi
+if [ -z "$FROM_DATABASE_USERNAME" ]; then
+    FROM_DATABASE_USERNAME=$DATABASE_USERNAME
+fi
+if [ -z "$FROM_DATABASE_PASSWORD" ]; then
+    FROM_DATABASE_PASSWORD=$DATABASE_PASSWORD
 fi
 
 if [ -z "$FROM_DATABASE_NAME" ]; then
     echo "Error: FROM_DATABASE_NAME is empty"
-    exit 6
+    exit 4
 fi
 if [ -z "$FROM_DATABASE_USERNAME" ]; then
     echo "Error: FROM_DATABASE_USERNAME is empty"
-    exit 7
+    exit 5
 fi
 if [ -z "$FROM_DATABASE_PASSWORD" ]; then
     echo "Error: FROM_DATABASE_PASSWORD is empty"
-    exit 8
+    exit 6
 fi
 
-FROM_USER_LEN=${#FROM_USER}
-FROM_USER_LEN=$((FROM_USER_LEN+1))
-
-object=$(grep "DB='$FROM_DATABASE_NAME'" $VESTA/data/users/$FROM_USER/db.conf)
-if [ -z "$object" ]; then
+DB_EXISTS=$(check_if_database_exists "$user" "$FROM_DATABASE_NAME")
+if [ "$DB_EXISTS" = "no" ]; then
     echo "Error: database $FROM_DATABASE_NAME does not exists"
-    exit 9
+    exit 7
 fi
 
-FROM_DATABASE_NAME_WITHOUT_PREFIX=${FROM_DATABASE_NAME:FROM_USER_LEN}
-FROM_DATABASE_USERNAME_WITHOUT_PREFIX=${FROM_DATABASE_USERNAME:FROM_USER_LEN}
+FROM_DATABASE_NAME_WITHOUT_PREFIX=$(get_database_name_without_user_prefix "$FROM_USER" "$FROM_DATABASE_NAME")
+FROM_DATABASE_USERNAME_WITHOUT_PREFIX=$(get_database_name_without_user_prefix "$FROM_USER" "$FROM_DATABASE_USERNAME")
 
 FROM_DOMAIN_HAS_SSL=0
 if [ -f "/home/$FROM_USER/conf/web/ssl.$FROM_DOMAIN.ca" ]; then
     FROM_DOMAIN_HAS_SSL=1
 fi
 
-FROM_DOMAIN_TPL=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'TEMPLATE:' | awk '{print $2}')
-FROM_DOMAIN_PROXY_TPL=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY:' | awk '{print $2}')
-FROM_DOMAIN_PROXY_EXT=$($VESTA/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY EXT:' | cut -d ' ' -f8- | sed "s# #,#g")
+FROM_DOMAIN_TPL=$(/usr/local/vesta/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'TEMPLATE:' | awk '{print $2}')
+FROM_DOMAIN_PROXY_TPL=$(/usr/local/vesta/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY:' | awk '{print $2}')
+FROM_DOMAIN_PROXY_EXT=$(/usr/local/vesta/bin/v-list-web-domain "$FROM_USER" "$FROM_DOMAIN" | grep 'PROXY EXT:' | cut -d ' ' -f8- | sed "s# #,#g")
 
 # ----------- TO -------------
 
@@ -174,7 +128,7 @@ CREATE_TO_USER=0
 CREATE_TO_DOMAIN=0
 
 if [ -z "$TO_USER" ]; then
-    TO_USER=$($VESTA/bin/v-search-domain-owner "$TO_DOMAIN")
+    TO_USER=$(/usr/local/vesta/bin/v-search-domain-owner "$TO_DOMAIN")
     if [ -z "$TO_USER" ]; then
         TO_USER=$FROM_USER
         CREATE_TO_DOMAIN=1
@@ -189,7 +143,7 @@ else
 fi
 
 TO_FOLDER="/home/$TO_USER/web/$TO_DOMAIN/public_html"
-CHECK_PUBLIC_SHTML=$($VESTA/bin/v-list-web-domain "$TO_USER" "$TO_DOMAIN" | grep 'SSL:' | grep -c 'single')
+CHECK_PUBLIC_SHTML=$(/usr/local/vesta/bin/v-list-web-domain "$TO_USER" "$TO_DOMAIN" | grep 'SSL:' | grep -c 'single')
 if [ $CHECK_PUBLIC_SHTML -eq 1 ]; then
     TO_FOLDER="/home/$TO_USER/web/$TO_DOMAIN/public_shtml"
 fi
@@ -243,11 +197,8 @@ if [ -z "$TO_DATABASE_PASSWORD" ]; then
     exit 12
 fi
 
-TO_USER_LEN=${#TO_USER}
-TO_USER_LEN=$((TO_USER_LEN+1))
-
-TO_DATABASE_NAME_WITHOUT_PREFIX=${TO_DATABASE_NAME:TO_USER_LEN}
-TO_DATABASE_USERNAME_WITHOUT_PREFIX=${TO_DATABASE_USERNAME:TO_USER_LEN}
+TO_DATABASE_NAME_WITHOUT_PREFIX=$(get_database_name_without_user_prefix "$TO_USER" "$TO_DATABASE_NAME")
+TO_DATABASE_USERNAME_WITHOUT_PREFIX=$(get_database_name_without_user_prefix "$TO_USER" "$TO_DATABASE_USERNAME")
 
 
 TO_DOMAIN_HAS_SSL=0
@@ -315,20 +266,20 @@ read -p "=== Press Enter to continue ==="
 #----------------------------------------------------------#
 
 if [ $CREATE_TO_USER -eq 1 ]; then
-    pass=$(gen_pass)
+    pass=$(vesta_generate_pass 10)
     echo "=== Create user $TO_USER, pass=$pass"
-    $VESTA/bin/v-add-user "$TO_USER" "$pass" "info@$TO_DOMAIN" "default" "Migrated" "site"
+    /usr/local/vesta/bin/v-add-user "$TO_USER" "$pass" "info@$TO_DOMAIN" "default" "Migrated" "site"
 fi
 
 if [ $CREATE_TO_DOMAIN -eq 1 ]; then
     echo "=== Create domain $TO_DOMAIN"
-    $VESTA/bin/v-add-domain "$TO_USER" "$TO_DOMAIN"
+    /usr/local/vesta/bin/v-add-domain "$TO_USER" "$TO_DOMAIN"
     rm $TO_FOLDER/index.html
 fi
 
 if [ $SHOULD_INSTALL_SSL -eq 1 ]; then
     echo "=== Installing LetsEncrypt for domain $TO_DOMAIN"
-    $VESTA/bin/v-add-letsencrypt-domain "$TO_USER" "$TO_DOMAIN" "www.$TO_DOMAIN" "yes"
+    /usr/local/vesta/bin/v-add-letsencrypt-domain "$TO_USER" "$TO_DOMAIN" "www.$TO_DOMAIN" "yes"
     if [ $? -ne 0 ]; then
         echo "=== LetsEncrypt installation failed"
     fi
@@ -336,18 +287,18 @@ fi
 
 if [ ! -z "$FROM_DOMAIN_TPL" ]; then
     echo "=== Set $FROM_DOMAIN_TPL template to domain $TO_DOMAIN"
-    $VESTA/bin/v-change-web-domain-tpl "$TO_USER" "$TO_DOMAIN" "$FROM_DOMAIN_TPL" "yes"
+    /usr/local/vesta/bin/v-change-web-domain-tpl "$TO_USER" "$TO_DOMAIN" "$FROM_DOMAIN_TPL" "yes"
 fi
 
 if [ ! -z "$FROM_DOMAIN_PROXY_TPL" ]; then
     echo "=== Set $FROM_DOMAIN_PROXY_TPL proxy template to domain $TO_DOMAIN"
-    $VESTA/bin/v-change-web-domain-proxy-tpl "$TO_USER" "$TO_DOMAIN" "$FROM_DOMAIN_PROXY_TPL" "$FROM_DOMAIN_PROXY_EXT" "yes"
+    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$TO_USER" "$TO_DOMAIN" "$FROM_DOMAIN_PROXY_TPL" "$FROM_DOMAIN_PROXY_EXT" "yes"
 fi
 
 object=$(grep "DB='$TO_DATABASE_NAME'" $VESTA/data/users/$TO_USER/db.conf)
 if [ -z "$object" ]; then
     echo "=== Create database $TO_DATABASE_NAME"
-    $VESTA/bin/v-add-database "$TO_USER" "$TO_DATABASE_NAME_WITHOUT_PREFIX" "$TO_DATABASE_USERNAME_WITHOUT_PREFIX" "$TO_DATABASE_PASSWORD" 'mysql' 'localhost' 'utf8'
+    /usr/local/vesta/bin/v-add-database "$TO_USER" "$TO_DATABASE_NAME_WITHOUT_PREFIX" "$TO_DATABASE_USERNAME_WITHOUT_PREFIX" "$TO_DATABASE_PASSWORD" 'mysql' 'localhost' 'utf8'
 fi
 
 echo "=== Dumping database $FROM_DATABASE_NAME"
@@ -365,21 +316,9 @@ rsync -a --delete $FROM_FOLDER/ $TO_FOLDER/
 echo "=== Chowning to $TO_USER:$TO_USER in folder $TO_FOLDER"
 chown -R $TO_USER:$TO_USER $TO_FOLDER
 
-echo "=== Replacing $FROM_DATABASE_NAME to $TO_DATABASE_NAME in $TO_CONFIG_FILE_FULL_PATH"
-sed -i "s|'$FROM_DATABASE_NAME'|'$TO_DATABASE_NAME'|g" $TO_CONFIG_FILE_FULL_PATH
-sed -i "s|\"$FROM_DATABASE_NAME\"|\"$TO_DATABASE_NAME\"|g" $TO_CONFIG_FILE_FULL_PATH
-sed -i "s|=$FROM_DATABASE_NAME$|=$TO_DATABASE_NAME|g" $TO_CONFIG_FILE_FULL_PATH
-sed -i "s|= $FROM_DATABASE_NAME$|= $TO_DATABASE_NAME|g" $TO_CONFIG_FILE_FULL_PATH
-echo "=== Replacing $FROM_DATABASE_USERNAME to $TO_DATABASE_USERNAME in $TO_CONFIG_FILE_FULL_PATH"
-sed -i "s|'$FROM_DATABASE_USERNAME'|'$TO_DATABASE_USERNAME'|g" $TO_CONFIG_FILE_FULL_PATH
-sed -i "s|\"$FROM_DATABASE_USERNAME\"|\"$TO_DATABASE_USERNAME\"|g" $TO_CONFIG_FILE_FULL_PATH
-sed -i "s|=$FROM_DATABASE_USERNAME$|=$TO_DATABASE_USERNAME|g" $TO_CONFIG_FILE_FULL_PATH
-sed -i "s|= $FROM_DATABASE_USERNAME$|= $TO_DATABASE_USERNAME|g" $TO_CONFIG_FILE_FULL_PATH
-echo "=== Replacing $FROM_DATABASE_PASSWORD to $TO_DATABASE_PASSWORD in $TO_CONFIG_FILE_FULL_PATH"
-sed -i "s|'$FROM_DATABASE_PASSWORD'|'$TO_DATABASE_PASSWORD'|g" $TO_CONFIG_FILE_FULL_PATH
-sed -i "s|\"$FROM_DATABASE_PASSWORD\"|\"$TO_DATABASE_PASSWORD\"|g" $TO_CONFIG_FILE_FULL_PATH
-sed -i "s|=$FROM_DATABASE_PASSWORD$|=$TO_DATABASE_PASSWORD|g" $TO_CONFIG_FILE_FULL_PATH
-sed -i "s|= $FROM_DATABASE_PASSWORD$|= $TO_DATABASE_PASSWORD|g" $TO_CONFIG_FILE_FULL_PATH
+replace_php_config_value "${FROM_DATABASE_NAME}" "${TO_DATABASE_NAME}" "$TO_CONFIG_FILE_FULL_PATH" "yes"
+replace_php_config_value "${FROM_DATABASE_USERNAME}" "${TO_DATABASE_USERNAME}" "$TO_CONFIG_FILE_FULL_PATH" "yes"
+replace_php_config_value "${FROM_DATABASE_PASSWORD}" "${TO_DATABASE_PASSWORD}" "$TO_CONFIG_FILE_FULL_PATH" "yes"
 
 echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in folder $TO_FOLDER"
 grep -rl "$FROM_DOMAIN" $TO_FOLDER | xargs sed -i "s#$FROM_DOMAIN#$TO_DOMAIN#g"

From 51fbca0ea79e729ca24c1e04787eb36f57842f98 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 20 Jul 2020 14:14:51 +0200
Subject: [PATCH 1173/2300] Update clamd.conf

---
 install/debian/10/clamav/clamd.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/clamav/clamd.conf b/install/debian/10/clamav/clamd.conf
index 10ebbac3..a8d815fe 100644
--- a/install/debian/10/clamav/clamd.conf
+++ b/install/debian/10/clamav/clamd.conf
@@ -1,7 +1,7 @@
 #Automatically Generated by clamav-base postinst
 #To reconfigure clamd run #dpkg-reconfigure clamav-base
 #Please read /usr/share/doc/clamav-base/README.Debian.gz for details
-LocalSocket /var/lib/clamav/clamd.sock
+LocalSocket /var/lib/clamav/clamd.ctl
 FixStaleSocket true
 LocalSocketGroup clamav
 LocalSocketMode 666

From 715262f162588ab0d9ca9c37f5f1c43db0b3f2c8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 20 Jul 2020 14:19:40 +0200
Subject: [PATCH 1174/2300] Reverting clamav.sock

---
 src/deb/vesta/postinst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index e414afdb..e0296ff3 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -101,8 +101,8 @@ if [ -f "/lib/systemd/system/clamav-daemon.service" ]; then
 fi
 
 # reverting to default clamd sock
-if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v2" ]; then
-    touch /usr/local/vesta/data/upgrades/change-clamav-socket-v2
+if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v3" ]; then
+    touch /usr/local/vesta/data/upgrades/change-clamav-socket-v3
     if [ -f "/etc/clamav/clamd.conf" ]; then
         sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/clamav/clamd.conf
         if [ -f "/etc/exim4/exim4.conf.template" ]; then

From 397617424d8af27f071d7a0c867343de214aa44d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 20 Jul 2020 14:21:52 +0200
Subject: [PATCH 1175/2300] Update clamd.conf

---
 install/debian/9/clamav/clamd.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/9/clamav/clamd.conf b/install/debian/9/clamav/clamd.conf
index 84c4807e..3fe6454f 100644
--- a/install/debian/9/clamav/clamd.conf
+++ b/install/debian/9/clamav/clamd.conf
@@ -1,7 +1,7 @@
 #Automatically Generated by clamav-base postinst
 #To reconfigure clamd run #dpkg-reconfigure clamav-base
 #Please read /usr/share/doc/clamav-base/README.Debian.gz for details
-LocalSocket /var/lib/clamav/clamd.sock
+LocalSocket /var/run/clamav/clamd.ctl
 FixStaleSocket true
 LocalSocketGroup clamav
 LocalSocketMode 666

From 30f4c0572e881ae636360c4a1c9718fded45a38e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 20 Jul 2020 14:22:33 +0200
Subject: [PATCH 1176/2300] Update clamd.conf

---
 install/debian/8/clamav/clamd.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/8/clamav/clamd.conf b/install/debian/8/clamav/clamd.conf
index 84c4807e..3fe6454f 100644
--- a/install/debian/8/clamav/clamd.conf
+++ b/install/debian/8/clamav/clamd.conf
@@ -1,7 +1,7 @@
 #Automatically Generated by clamav-base postinst
 #To reconfigure clamd run #dpkg-reconfigure clamav-base
 #Please read /usr/share/doc/clamav-base/README.Debian.gz for details
-LocalSocket /var/lib/clamav/clamd.sock
+LocalSocket /var/run/clamav/clamd.ctl
 FixStaleSocket true
 LocalSocketGroup clamav
 LocalSocketMode 666

From 65351b52dd349b36a00b60c1900cf9ed4e14114a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 20 Jul 2020 14:28:21 +0200
Subject: [PATCH 1177/2300] clamav.sock

---
 install/debian/10/exim/exim4.conf.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
index 6e889067..cb6c960c 100644
--- a/install/debian/10/exim/exim4.conf.template
+++ b/install/debian/10/exim/exim4.conf.template
@@ -34,7 +34,7 @@ spamd_address = 127.0.0.1 783
 .endif
 
 .ifdef CLAMD
-av_scanner = clamd: /var/lib/clamav/clamd.sock
+av_scanner = clamd: /var/run/clamav/clamd.ctl
 .endif
 
 tls_advertise_hosts = *

From d48e7337d2360543ce491c3eae1a62dacd2d5813 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 20 Jul 2020 14:29:00 +0200
Subject: [PATCH 1178/2300] Update exim4.conf.template

---
 install/debian/9/exim/exim4.conf.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/9/exim/exim4.conf.template b/install/debian/9/exim/exim4.conf.template
index c1f285ea..12b41e40 100644
--- a/install/debian/9/exim/exim4.conf.template
+++ b/install/debian/9/exim/exim4.conf.template
@@ -30,7 +30,7 @@ spamd_address = 127.0.0.1 783
 .endif
 
 .ifdef CLAMD
-av_scanner = clamd: /var/lib/clamav/clamd.sock
+av_scanner = clamd: /var/run/clamav/clamd.ctl
 .endif
 
 tls_advertise_hosts = *

From d4e2bd2f9378b4f32c4a331a3ee6f7db93945e71 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 20 Jul 2020 14:29:42 +0200
Subject: [PATCH 1179/2300] Update exim4.conf.template

---
 install/debian/8/exim/exim4.conf.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/8/exim/exim4.conf.template b/install/debian/8/exim/exim4.conf.template
index c1f285ea..12b41e40 100644
--- a/install/debian/8/exim/exim4.conf.template
+++ b/install/debian/8/exim/exim4.conf.template
@@ -30,7 +30,7 @@ spamd_address = 127.0.0.1 783
 .endif
 
 .ifdef CLAMD
-av_scanner = clamd: /var/lib/clamav/clamd.sock
+av_scanner = clamd: /var/run/clamav/clamd.ctl
 .endif
 
 tls_advertise_hosts = *

From 6099b9e99692fa7e6ef70a2e7eb227cc6d1bb178 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 20 Jul 2020 14:34:45 +0200
Subject: [PATCH 1180/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index fe385d01..5bedbe33 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1616,6 +1616,7 @@ touch /usr/local/vesta/data/upgrades/tune-fpm-config-files-v2
 touch /usr/local/vesta/data/upgrades/allow-backup-anytime
 touch /usr/local/vesta/data/upgrades/fix-sudoers
 touch /usr/local/vesta/data/upgrades/change-clamav-socket-v2
+touch /usr/local/vesta/data/upgrades/change-clamav-socket-v3
 touch /usr/local/vesta/data/upgrades/keeping-mpm-event
 touch /usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates
 touch /usr/local/vesta/data/upgrades/clamav_block_exe_in_archives

From fe7ae7191732f9b3ee3e8118e02ba14c37c7b0c5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 20 Jul 2020 15:00:39 +0200
Subject: [PATCH 1181/2300] Update ISSUE_TEMPLATE.md

---
 ISSUE_TEMPLATE.md | 26 +++++++++++---------------
 1 file changed, 11 insertions(+), 15 deletions(-)

diff --git a/ISSUE_TEMPLATE.md b/ISSUE_TEMPLATE.md
index a515b12e..37d774b4 100644
--- a/ISSUE_TEMPLATE.md
+++ b/ISSUE_TEMPLATE.md
@@ -1,23 +1,19 @@
-### Operating System (OS/VERSION):
+### Describe the problem:
 
-Type here, e.g. CentOS 6
-
-### VestaCP Version:
-
-Type here, e.g. 3.14159
-
-### Installed Software (what you got with the installer):
-
-Type here, e.g. php-fpm, apache, nginx, mysql
+Type here what is the problem
 
 ### Steps to Reproduce:
 
-Type here, e.g. install vesta and type rm -rf / --no-preserve-root
+Type here what we should do in order to see bug on our test server
 
-### Related Issues/Forum Threads:
+### Debian version:
 
-Found anything that might be related to this? It might help us find the cause.
+Type here, example: Debian 10
 
-### Other Notes:
+### VestaCP Version:
 
-Anything else?
+Type here, example: 0.9.8.26-29
+
+### Installed Software (what you got with the installer):
+
+Copy here first 22 lines of file /usr/local/vesta/conf/vesta.conf

From c0dc0196196096332cd22aa7f85f83ab349f3a29 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 20 Jul 2020 15:01:25 +0200
Subject: [PATCH 1182/2300] Update ISSUE_TEMPLATE.md

---
 ISSUE_TEMPLATE.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ISSUE_TEMPLATE.md b/ISSUE_TEMPLATE.md
index 37d774b4..526e5166 100644
--- a/ISSUE_TEMPLATE.md
+++ b/ISSUE_TEMPLATE.md
@@ -4,7 +4,7 @@ Type here what is the problem
 
 ### Steps to Reproduce:
 
-Type here what we should do in order to see bug on our test server
+Type here what we should do in order to see the bug on our test server
 
 ### Debian version:
 

From aea9a6a9698394d8c68e03cc5add8d5b21a34663 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 21 Jul 2020 00:07:30 +0200
Subject: [PATCH 1183/2300] Update clamd.conf

---
 install/debian/10/clamav/clamd.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/clamav/clamd.conf b/install/debian/10/clamav/clamd.conf
index a8d815fe..c636b6d3 100644
--- a/install/debian/10/clamav/clamd.conf
+++ b/install/debian/10/clamav/clamd.conf
@@ -1,7 +1,7 @@
 #Automatically Generated by clamav-base postinst
 #To reconfigure clamd run #dpkg-reconfigure clamav-base
 #Please read /usr/share/doc/clamav-base/README.Debian.gz for details
-LocalSocket /var/lib/clamav/clamd.ctl
+LocalSocket /var/run/clamav/clamd.ctl
 FixStaleSocket true
 LocalSocketGroup clamav
 LocalSocketMode 666

From 49e405b1d0fe15d4cb4de17159e28a06b6071827 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 21 Jul 2020 00:12:12 +0200
Subject: [PATCH 1184/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 5bedbe33..85abdbe2 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1617,6 +1617,7 @@ touch /usr/local/vesta/data/upgrades/allow-backup-anytime
 touch /usr/local/vesta/data/upgrades/fix-sudoers
 touch /usr/local/vesta/data/upgrades/change-clamav-socket-v2
 touch /usr/local/vesta/data/upgrades/change-clamav-socket-v3
+touch /usr/local/vesta/data/upgrades/change-clamav-socket-v4
 touch /usr/local/vesta/data/upgrades/keeping-mpm-event
 touch /usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates
 touch /usr/local/vesta/data/upgrades/clamav_block_exe_in_archives

From 373437e5f0cc5f48d0a97e1638328b2810a9b919 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 21 Jul 2020 00:17:40 +0200
Subject: [PATCH 1185/2300] Update postinst

---
 src/deb/vesta/postinst | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index e0296ff3..31230ceb 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -120,6 +120,18 @@ if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v3" ]; then
     fi
 fi
 
+# reverting to default clamd sock
+if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v4" ]; then
+    touch /usr/local/vesta/data/upgrades/change-clamav-socket-v4
+    if [ -f "/etc/clamav/clamd.conf" ]; then
+        check_grep=$(grep -c '/var/lib/clamav/clamd.ctl' /etc/clamav/clamd.conf)
+        if [ "$check_grep" -eq 1 ]; then
+            sed -i "s#/var/lib/clamav/clamd.ctl#/var/run/clamav/clamd.ctl#g" /etc/clamav/clamd.conf
+            systemctl restart clamav-daemon
+        fi
+    fi
+fi
+
 # Making sure mpm_event will stay
 if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event" ]; then
     touch /usr/local/vesta/data/upgrades/keeping-mpm-event

From aeee97ec8a6d4da56e22248101482d13a662dfa2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 21 Jul 2020 00:33:36 +0200
Subject: [PATCH 1186/2300] Update Changelog.md

---
 Changelog.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 624b5b38..f45a88d7 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,9 @@
+Version 0.9.8-26-29 [21-Jul-2020]
+==================================================
+* [Feature] v-clone-website command moved to vesta-bin folder (becoming standard myVesta command)
+* [Feature] v-migrate-site-to-https command moved to vesta-bin folder (becoming standard myVesta command)
+* [Bugfix] Fix for ClamAV socket
+
 Version 0.9.8-26-28 [15-Jul-2020]
 ==================================================
 * [Feature] v-install-wordpress command introduced

From a9b48b4594398c9b3e49858ba5a753092f709e8d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 21 Jul 2020 00:35:12 +0200
Subject: [PATCH 1187/2300] Changing Vesta to myVesta in title of hosting panel
 pages

---
 web/templates/header.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/header.html b/web/templates/header.html
index b254b166..f0529c3a 100644
--- a/web/templates/header.html
+++ b/web/templates/header.html
@@ -3,7 +3,7 @@
 <head>
   <meta charset="utf-8">
   <link rel="icon" href="/images/favicon.ico" type="image/x-icon">
-  <title>Vesta - <?=__($TAB)?></title>
+  <title>myVesta - <?=__($TAB)?></title>
   <link rel="stylesheet" href="/css/styles.min.css?1446554103">
   <link type="text/css" href="/css/jquery-custom-dialogs.css?1446554103" rel="stylesheet" />
   <script>

From 26a894ab8789d9687d192f548e4f199f22aea963 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 21 Jul 2020 00:36:13 +0200
Subject: [PATCH 1188/2300] Update Changelog.md

---
 Changelog.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Changelog.md b/Changelog.md
index f45a88d7..1ff6d39e 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -3,6 +3,7 @@ Version 0.9.8-26-29 [21-Jul-2020]
 * [Feature] v-clone-website command moved to vesta-bin folder (becoming standard myVesta command)
 * [Feature] v-migrate-site-to-https command moved to vesta-bin folder (becoming standard myVesta command)
 * [Bugfix] Fix for ClamAV socket
+* Changing Vesta to myVesta in title of hosting panel pages
 
 Version 0.9.8-26-28 [15-Jul-2020]
 ==================================================

From 6652a2048193d9c5a5895c7f15f8e9fb6b4a2af3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 21 Jul 2020 00:37:21 +0200
Subject: [PATCH 1189/2300] Version 0.9.8-26-29

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index a51c76bc..57c3368e 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-28
+vesta-0.9.8-26-29

From 65987677ab07943c838c3ed205b526e1131efa79 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 22 Jul 2020 23:02:32 +0200
Subject: [PATCH 1190/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 5905347c..5fa9ee3e 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -62,6 +62,7 @@ fi
 #----------------------------------------------------------#
 
 if [ ! -f "/usr/local/vesta/data/ips/$MAIL_IP" ]; then
+    echo "=== Adding IP $MAIL_IP" with netmask $NETMASK on interface $INTERFACE"
     $VESTA/bin/v-add-sys-ip  "$MAIL_IP" "$NETMASK" "$INTERFACE" 'admin' 'dedicated' '' ''
 fi
 
@@ -160,7 +161,7 @@ ptr=$(dig +short -x $MAIL_IP)
 ptr_len=${#ptr}
 ptr_len=$((ptr_len-1))
 ptr=${ptr:0:ptr_len}
-if [ "$PTR" != "$MAIL_HOSTNAME" ]; then
+if [ "$ptr" != "$MAIL_HOSTNAME" ]; then
     echo ""
     echo "WARNING: PTR for $MAIL_IP is $ptr"
     echo "WARNING: PTR for $MAIL_IP should be $MAIL_HOSTNAME"

From afa77ffa5d820db1c53022e6ef6763e27a878795 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Jul 2020 01:29:34 +0200
Subject: [PATCH 1191/2300] Delete favicon.ico

---
 web/favicon.ico | Bin 15086 -> 0 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)
 delete mode 100644 web/favicon.ico

diff --git a/web/favicon.ico b/web/favicon.ico
deleted file mode 100644
index 231b61d2c39e4700f461a956ecc2f4199f5728b2..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 15086
zcmeI330Rdy`~RN<xUZF^X{J`bEm~SyW@Tuy9TZJ7ORdyU0g)X6wZhWG%yKJp7tUc5
zaRCL9?Q96HrCDZbxuRz7qJqH8?=$CUX|HDfd*ADSUB6%Fx`uh4d1mJR-uK*d&pr1H
znx@m7wT>M%^43~vTTOdT)3nyDuf8|dw4W(!Os>BByJ*@JDm+FVnrOpFs@(p2#F72;
z_a6!Tua!W8hm*F{-C6spr;9ev%~^|o#p%DrYyT9f3$V(X{&})NXuhmB#w?tNtQ1b+
zd7^Gup==VEFB=4yr1Nd*$9Htn5<MGg2Cr_U(OPn^=~`;<FSJDO&$R@vF<OG>Q`#ce
znz!xeFH{&dK{}625q3;|`Qq+yi|jwvBBn%IM0BWCbPhI)M<Oi3FVZT$7;6>phnhsk
zhdz<I={tmze}<?L7$<c%keT~}v$n*elNPU^su}dfno)lo{MFjB-cm~<H|T%S67(zK
ztEXmkuW>`$J9rspmQEoS@nD2m_(WJmf8_fV&;6pTVncM1I5*ZNN-2+zw8|M#HnBUZ
zNR-DEi(e_96=o8h!_C4y(k$MJED+Cy6o~qE($gPx(hMH%V9rF=7r-r$dxf^l=c1P8
zQ>LZ#s(=T{w+is5Y4Pr@?f~))RiXbtWRZxCDi&M8wi9_Lkye1cJZ6KGQAH%HID*Xg
z@LU;9*|-uZB5h(9d?mw25%u<vFAFt`R|X~SbI}&P^q`jLl?2X8a9-Ao-kafN9(YHS
zh9UQ*<R?k+z&ONv`D^oDcJO`!x|_d*mI#;OCRu;<I@vhfDm<XQIi^@vDQrBS0{?f&
z`WJ9siQXVCg58GRq{H9QaU0>GNL)bXyC^%r_o|o@+7*e@;TH5Nx4KP-m2<n+GWO5a
z8TE(J^G`|Lw51*oXi2V)IlI{FF?dq^oOkGwSAmw`_UO&g-dO5aBI<zI4UCh}=TCW_
z2fqE_s8;d@+i~PNkMj56WhHaK5N;B0BHI_>X(B0|wzDElB8GNW_^DQWGd5-DSms!(
zoE>JloYW`Vw5)B~djU=c_hvUD;B8rVC+2Qf#^f7^9x(<+uh+FjZnvGwp*GPDxvc=}
z$><_^7J7Sl{|2mw!E=<990JxLt7r}%Ly_}rQbYvvHKI_o2(yS6n7iJ=1>$AOqZyO0
zX?q~TTCpYEQno$PT7ELBsJc9+Nba3rlcPV_EF1hAepQgrvk~JmLrYR);C+dC@VRDi
zzxSqfuNFQMEu5g;E2^mKa8&Un8M)yC`ci%vdB!mh-eTVRp#$Ed){A??%%Ve-O~#Ka
zmWR=!gHcxbWu!@ZQ#Y0|%7^Dw)Q^V$KK<8k^nG;2<TVd1A9t=(#+PDH{<ku+_(}!s
z7y0HNeOO!aaszFt*Imr%M%q%h+S>eAb(--JXU5<)=JsCj3*=t_{#$xNZ?6^gN9T#h
z##-cv5rv0-d@gfw^`on%$d|Lyz6&WlH!#v7yMz66Fr|||M7EQew+Es&RLHT#mt}<Y
z%5Jc)V|+>-`Xa8NOY6tkE_TrpT!(}0F!W^&V;}j{s#$WBsq|vBtt#c&jD#o`W52Jk
zml?=-37AJ}OFi$`K6^w*n}^Y%0{c8pfsX{wZa0&Ec!6jRwy3BLGC#~#v8~6N)yL{2
z4ye)+-DR!h0Xw>^P6!-ZR5b@&r@$n@cp{29JS6Y?Upj#0k@WZFvl)wy56?fahwqmZ
zetWWsp9bb^TT(yitrF~wlA&};^eOw-iYY&i$UnO4t-Rg4n=g+z#5^uX#!^f6t|T3z
zUMjrw*9@L*z&s!P<yva56X=tl_QeZzuIC}3K-5N$U&lV|K@Vi8txP<hVW_BS=nXwj
zsTtgkKbSUtRjBoXZG4HWRC5^JtsGTwY;W82$$OlQ)HApt*H<sKTQPl?zv<WSnKu{E
z`!ms2v9HfM>%qHI{jS*iLJyo1`=vg!YGJ=HQ<>2{YwhLwDQ`>lO=s*?txN8G37cAu
z&AdX|1rHySzU28NdUTGpZVGew?(6Z7G>LlQHW2{56XU=ZYAq98GmVus4Sm4n1%8jJ
z2FXKz?Y+*tFS@Ae4EE&mxFWf~f6m6#n#R61WCfpkFnCE9W8c!ws~4n<wN!qFt(g*S
ztDf(kz4lPU)M51FDZyHC|FW^cF;-bW%6xI=3z^1>T1f-I?p1wv^2mL6rHmYpykoJQ
zJHcCl+)tucKhghX#-|KCbG3N4rq|;imM`jJ`}(01+mP!;@So|ldf{;wqfey+zg~@b
zb?fEtmHHMO$!5+aj<?CECs)iEr89VLwPR28MqZ>O{T0R`xBc?T9+8Ej=>*%AUR~E1
zHr7oU0!B}HZ))J#7c-I~KiVLhhnvp~e`@vYT{V+lqkr$pmTA$}o|ze48z<=RW-ai7
zb}E?9*md8i)-l#%qkc7O*@M^cV+R{!SNbyVl#Sm3Hj}^UWZVO3F-FGng2JXV&=%Q3
zr>te#xCO&=cRpeKMmBUw>;nz`ZoA$Zy|=SwTG3tf#Ot({@Jg_@xM|I4n|^K5a(T@B
z8cF@Dk+DDz&%BlQgBkwkM3~Nv0<*y>vG;lB#9r0yR(^hHWWkYH@7rXj?#okZBj<<V
z;S>5lZs#G<y9#=R;D1Qr4>pNf*bz5y=c3c6(I2&rn!_#CFFG4~y{awqKI)v<N7hb!
zL%3iw9CBbiNpSPg7C7O*=-uu3Q}9!gyw^i33O(Iu_hpQF3p(Ac&Vs%!&MAFAR%N;b
zPx)wiT*WBU(aYnD)w)uV^LYBSCFs=w@XHRX=2QpT&ioQ>l{16P!XaaW$0NwYfE+Jf
zmD65riB~&2eq_)38ic(#ZnqW1LPi&h-K;74#z})bb!ojz75*kE0q2`83;M;$*b954
zuOzJl+cRKS^8b<frts%M=M{LE44>ub??s+JM}{r66y{utw{$}PJFJ>511+bdnrBhg
zs#4cAE5X+5J6)1qKDaza`dSZOL5H)0O;sHfM&?3o`tgNMshv)u_Yv?vr9Lrd>m%>M
z;Qs;qRnho2F&o7u@W1Pmoxh}h>d-RuLDo$f{C(5ZkOexU_d&Z1k`y+5GW~vxTz)~e
z3V%Mdp41XNTq)n|kd=N9^`^qlT6mVu2G8p5Ytt{r6p73DQWeoQY3-9;G!$NQm^X}b
zf9btG|3av_d_HSUYlYGNGkA7{&Ue^Pr2|J;=Q^o!k3{Jd%z71RmUH3bAZZ6{X4H6#
z3?6R!=~(mhNP*3k*oQ;SQzGM>483Q8>#ReMumy?UC!k%WrQok8d#}WoZ>cTp(E$CN
zVwb<t*F^8rJlp4ylfmn3*9>FMIB-K}AM5fb0r@-srAz2FhdLEb%+c1%CzSfEE%Z&>
zCV#i_@op{nzS&Mk+0g{A!K`m}LJDPVe3s|w>nnV)Evx}w1Q&_+<E+xp&vNv%T6=Z)
zugtyk_oW2I)sBC)BeFHX1G;FJ1@oG@o!Yw^{g{KlQp+x{c=zX!`#Q!2T~l-4Zab9y
z-1V>YDd90TIRjbkXWWbNg(B`x4PzWV4=GvIP8wL&eNCF-J)7(>dxLcNqVaC`Ux)t;
zV-ct&_G}n#mXEWB&Sb4Q%6OKsetnNmGh&=sb|0Sq^SVb@#9eY?Ua_uRu3;Q7v*u!-
zhUiEa+GoJSIXgCoe}0%fV1Tyts_&c7y(U;+M`yNC$H7CglCM{)cUIv9){ag1(-r7z
zIey)aKH1jU^->1yu&?!reZ)&^Q%?mH{u()XgCsJ<&yHVTa#jD&Y6kByTC!)u2%G4E
z916iNlz)!>xr9$ME7mGo_RrlE);j(DQf0G|%_+t>R<}rBPy4C|`)ZFTDVvJUZUo;(
z#^fVpPbBKPpRs!#%6l^o>CnXo_F7dZvA0`<<%&Nx`VjJxcA7SMB9wLPxy&Wz7R$q`
z+pL%%hZO9(qI4@_gS^k)qv4f%kVh(Gj6UnnxqRgjRx8e}aYT{mfbJ}gW<SDy4_{F1
z2mcu6a{Cd5M;E-XCh=_3v_RP+Eo}EA%RhRv{qmU({aDDpHQv1mW6>6y{|NfnL|gbQ
z(X&7N;@z>~UM;apkK(sI_&}Pz_P8R^6`I+|y$qTsk>8pKOSMmc`Im`)=EDaAZO6{z
zXYYux$U!5DL|uE2OI+(fV>tM2tRcB~#dd$~@xEQ^g%yf==)BseB-7_!Y-w6Zp6JB;
zfUz5@4u=(86hTENWw7nckHMyk1A_~zYX1S@9lee&sH%aF_%w8uKyM#(Qqb2P?5*#K
zw8=LZmpp7z5q`&*QLNp+bw00?PFwm)UG%G&(}EsNo4?VqL6>&zou2tt>Vj?JVfvYc
z91f9o()U>QP5z8;>G+LOPS_{~J{x-u>El}{Z@c&Tjpj`r@KGKE_e^B3Y+cz{v&g`H
zJOj-a*(;|}{tM+l!egX=foyV<E^a6aGKo6KzYp!cW)7%*cQxzRcGlz&=*;1n{kXl)
zY<vtazXH*?XL|LGF_0U2y!DHJZnX}a$XI-@*2=4U{$tPzhSo>yO^@6CTIMwG*=lce
z>)sq+*k?7M?z{APSoL{zP8}fTF$}+`1^ZiHzURT8iXE(nSO4IAdDrdwz1jC+1;QDf
z9>RWSmmR0#fps6b1VQ6t@SjxkIflJI?}gB^uTeMa>spzgRn`cziI*6&Z1#J~|G9(>
z-O9Z1?w2QPv5)oS+YWfULf^{oFAggZJ>FUN7vgGHi46Xk*pW%JM4n#gX)NnZF|s&{
z{P&~tOVNE-#w7q=b}`;(qBe*hd5?wm{nv2*S?+HW4d7J|&$DQ^iQGp2AEASNu|>hi
z>zEoBe17&*Vjnn01?P*0L-NIaqw>UUV`9YRn$X__WU~huDSNXUdh;lMC&VPZ_!dlJ
zzd(GzB37eMzKY+F#6QI9{)7qt98oLOBDx`u!l+_-9$BA89tFs23jC}C_X*^3hOxn}
ziKUd`pNNU*UzdROvR3FiQ8O?{*7Glsb{iU4C>rzaiO@pv6uQ_8x#q*aV7*d0bA~=b
z{FUu9iQ(AL-F&;m{5uPN19E?S&}wl<b8OT)sr=}HDu$-!fg_1ha89JZ-sB%J9<z{J
zCeKIV=L+&X4UWa6SK#GU(kSLj*YE=QAkXiDC5@E9_Y~y2i!l^x48ebrveACoq9OI-
z7?Vr(d57=F*ld8_OWKCNE_*dBBXXq+@h5lMe*<<$tjQ)0F}FU!4|g4H5|5!X?Vz^+
zS{1*|zarK<FoJ0_NyUa%qI1*8H^*#n_?VO*hv!Z3yE(c<Y^Q!Y_yg#>pX!fte0NdF
zIGmxLF~lmK_!CvR<tOyH3GyAyn!FlY%o-xTCG8~PV~M!nLeZHq3WeSwk|13|uK1AR
z5Nl2~<1cwWOWmI-KX=s@s+i$P{FF&*okB-_$j4GAhdR5-e;{pAdLK=kk7u{hw(I=P
zTcZ8<4=-g2T~Lu|h&^bFt_-06l9&=v!I(21Vm~qq;#()Md<3RU;<<C-cN~}tz-reG
z+MJ?ZHaIM_DI;A*7FOnJuOV5oUa(m{gv{r_`#GggjCBR=*D>}zVoc($7@KhTC;txb
zj!Kw&ouRu08r8}sgX1jN3}7EkdXE$kViRpci$oK!j^^7&H4nj(99kgUi6wcmhED_Q
zEc7H4e8G&}IQX4_tn<(*hYq6iw9i5=?e7TSZ7Q?QKcM6U?qha6K}UH17Mw?zZ|BLk
zq37>lU+!o9@L?Yp3$|d^jZR^C@*&DyLkfj^P=R=g@d(Ct?L!vIS5|XjCw%@)zo+Sc
zH~mBe<%@f61L=-FN0o>g;f44m#4eHFH0<0b;NQx4+hbSIzJeTcz%~UvDg=`m{889S
z53qd-&Ml0eP04^fKe~i{DYg^)sn*tY*qCUgdtiS%GGDgn6@O>;@~<${*C2I6*T`CL
ztrvA!XWBz|IrQze4*bNy@gG@7vF*xU2{7-5pL}w)-YMNyWoo@rvQ}#f{=T>X?#}`&
zqPcgvba6F0&Z7Pbp1)HkqChqR?>l2{axMC^75!EI_9F0=+HpD7rDK%s<lA{AYZZs&
zS;egvlj5mc%)B>ZgFJ`k|2;qUPI>9_y40aZcO&2Dk*8YopJeR2@Vpe=KE%69N$6W7
zWh=pb5Z(Tn=XvV<3w!VwxhvS)g;-?0JEi}hs_&bj&IY9OIIGabm}M>O>~rWth?=AD
z*EJ|l+=s2{2JS#)?iZ3Pp7!J1(Z|AB>sH|uXuY#_^*@FCR{eOTNGIQ1S$AlGsM|fq
z;gh~o41b$souFJ<`}z4-;|I6u;Ggn;B=G-H0@D7|v_H$srTShV&8{lfVkdG6F3)PU
zYO4HzR;yJba&6wk*cqB8bo<S*apaArgu0fHH`6*kOkS>{P~>OTbtG;dkUQ5@x$Z+-
z9Qgs~56zP%X`0P>s##|v*G=uNJFIC|t-jWSyqLVF%4;`tQSVdgw{lV6Cq39|x~AS+
z$*MLN_)Z=HUh;BZaw~Zca@&lnd7PvCV4OTyLit%u+Tv6`>;vaoDi77{d3iJKfkwQG
zW)q)xRe7W07<;ah=2+h4#AeROLh<j&k%#?V){b@LN}_zX|8AYDds?kY-ATXQ({e=Y
zDEa62cO?*>DRr;jZXcZBS&w*Z8)C)niB&#I{2q<IvtNKgIQx7dbRlNhf^};M>sc>+
z;?_LBfluMfp5+1J^tv&b;`bQi!k3+i<3A70S;SDkA%=aFd>`-giJL0bxb1IrHhzJX
zeW6W+L2EER<y8EeQ}_aVp__`|MO@nM`%eecFxJ)Z2(xtT?+or<#GrSOE)t*p3Ho0X
zQ$JykHygd?XbaqK=_dql5;}jABz`aMht`+)g%_2tME@$bbs4%U4p)c|a+<x-MX-HG
z*>P1b!YV&|d)@vvb(03oBDT-@sy>?7XlGJWVzIu^FSVxx506_3Ak4}cy;XirOfd;Q
ziQS1R`saRwh(;E1(EAL3!VOF+HWiEiJsvFhMDj9w%@Wee;rTzU>$-Z;KyB&2ejk$r
zcclwoA`^8^^{M?H!A(HW=a{iY<(DFg%81oft%BZE<Qv9*qYW|C5YE;%5u=}ukEVRJ
zX?%+VZ^XddZF9S3F5c&pQ&1ghyHGa1NQSgrHohTu*6t!6?Km$nc<P~l92`Z&oLgK^
zo)|zQ?reDmn$9lnlDYWuLo46E?3I=C0W=k#xttj-B$mEynCVA3tYB|xn5AN?J+4_K
zPmeME8tH88wMd;sH%b{Qz;foD{5|P)lLn_i%S!r!7<(7Kx8ZpM=Ru|D;q%w%`{xT6
z<m<;6mcCnf;6jt+5u6S8tZ14Vlo4KZiFkv$7gT+==h}>)8YB;{Zj}7aMbE4p;-}Ro
zIgk5waPH3U>L<T_o->x}I?02V4b9sZPkjEIbE1#XC2}s9+>39V1se4ep_>8yv*^Sy
z?c;X#SkQ2FR%#WKp;I}$@aM{Vl1Ffs>aNaf&iBo+?&l84fiTO(tR^X=I0yBtB4#h^
zB@f>FTF%Be&T4~u=M)z4F6$({QPz6-2mK?==ih#O<tOLW`OG~jep#Hu`$9Vp-8)6D
z?oFxtF45Ye?#|3*XXbE6#(4p{v;EDyZ&T|ezj=syoQ>#Zlho1sUeDR$J0$m;j-2(Z
zvbQyQf6w_ynU3?!QF$91wqG^<!y1XNR^OW%aQ>~lU5moa=L4E83$ej}^)svI6-HVv
zy;RpQh`SzMpV1y!c&qz!pKD7zYe4%!^eB<Byhz&q#`<r1YAK#M>fD@pRK+~vywr1w
zW^irJIn^p;$(f!0Bl_5kO!qRTFFK|48O9k?WvjI4szA$0&Ppn`w@#a|Mwh5Be`#%U
zC3izsa_-w)i+`~x7?z`h>f9_@Ti~JYX0&B4<uHHLna!>s)2V<aY5qH0l3%TWcQfbT
zr>Orccqc-)2>NHq2P40+U{GhJ%gMjgj2=}_to-CkWKl&WI`Q3;D`!sA5<Sj7wBkMK
zZ$6O~ZIKVy_08ZFNFSW_a3;CXvtHnO;@oEYU96qND91-w%V$5GIkyVBm5q}}Bsd#=
zxSxRx676T26`V6-$MmkuD|L6KnDR<^;qHTH<-^NA$c0Zc<Cxwp(>M@bf2^G}Ky+R;
zf9{MD>9G9?UVWjj&Z(`O5j_O$m*9ULd#(N0udr}SdC;?&i%vpc)=V6bS|h#>ch&Sp
zWN-;u>MVE@vTk#gmw~+hY%fprEN!=9+EjSofGkf3nolpkCv}ubXY`QmR(-mEjQNa@
zqm8EzwpiV#;7*^Hx(hZE8+StOOR*yfA?C7f9ahiTS~IC%RZV06Idzx5S%)(@bxx(^
zJrB9})8b#Q<>-quQG?g3VBjvDThQ?QJ^j$3pHyGi4U>Ld-r}b-W?g<QcjLK8YxTSK
zHVK@cCVT(nl;CBnJGJK%jDI`qc|2(^wscgatvYn1`N;VJ`6cCV<bE@LSne^$xz55K
zPTFF37j*W<`0f0jI&Cp`azE8{@bUy{9s0ZxyVy6vTHSA~t!hh@t$H!>F^9~Svi2nD
zyVscK-mUeJE)9chLhautsaQJg4B(i?{`}m85_tw*0)6uxac4XBKl#HxxB=_KWXAF&
zYvmU9%gR0z1C=M~e@RfGaGW>(p%3<{4^wZwUH^;a5!RML^b-n>Eu>WB^YVzy+wb*=
zYc+><mg<N67x<52-TGR^AjmgE=cenvoqwAcPn~_>_y&96N$N=-Y8;8B%H*J2(e(92
zw~hnhCn&kU4_-5UY-JwJhTb6FbLsbczKy5PTlzknC*2L7V~K(M#9FFiQ`1yG#D6Z3
zTi_)YdA`mX*eEE6^8k~qfjpf#i)cYS?lI=h=kR$2S|_19Oz}Wl8+u);)=%o)aHr}I
zL!kL)Nf+vkgI9G<r(*33iG%f{uQ0IVYbd{iGaY2gw{evDF>m|woQ|AKVB7}%GU)GT
z{8YR@fHs`r%4+I<8DPG8FZhpyuY0H6%f#!}(wCCg26SL1W7?hfui!)Rb`E+!Dmx8L
z6>Iz!8r+YChK;+7D*nou1m((avC!^o&aPMR?Cs0>+I6IE`Z&spJT0ObeS|Xx=af9@
zV=n&C0Q#Rz?0pRMXT#HZz8_{h=7Xbzv>iE(CI<fmd`|?cy5FZ{IFI|H&BocT^Gk0^
z`Nl%V+5=t{pBLyu-7QsTYFW_hMl9AHEOX$=m$SM~#AIJ1_B4?1DYQ}dQ&jxz81z+a
z&2M-?^=<jSkvjKw3Pl6P!kgqrA1f3uV5#6a2mMrIT?ocV@>RTZ_RJZ{)$>W-ZRpJ~
zzUzq#{y&|CUc<v#sxy7RiQcL66?G@ZgifpRR%f`}K@=Apc2?{{PMKg}-ih!Lg`)Pg
zKK^cwZ0o^G2l{^;{@vhj4SaJaK?G2?2weCUVkC304Rh{EVu1g(9VT<wh180BZLR$B
z?Ecz)=)^+-S>pG*K!2Cv|AXxvafEAsMI&i`ua?m294mix(&6&(o)^wd?B3}BF%`2m
zy{CED<l$3Wo1dOqQ|r3Drc>8>aaz}@XI6KeFE6-$C=a<#CvA;A6nh|cdhFo`>&G6{
zTFdhI;j+BTBq>}P5w>V0<&kT&9JyMQl+v^&{T8SAeb+?kfBqMmEp)-Tq9(fA7F||r
z*R$kzy_ZLvb?J*P_*>oa(I(>W1hP-KVeN=A%bLuAp6LD(Y)v801w4PvbL#jFazfkm
zSReKr%V<A|_S}=yM_l6|Bu~18ST9TnwO+K~AFbxh;3NFCFL|EK{wDFQ{O`96%G<G3
zpS`}XHn(M6+Un^e3;+ARpaSWF9U9p)YxUu_D<*CWx0bIRUhwm#u9-`I9Z`7r2S3v>
zOTFYbf9RYs|Lb<ErYj$D9s8m8Xm6sQm)P62!Y|G2l=0O;?xtSx%+4}(&X~JY-M_j&
zEo5!atQC{)O7T6R&(4|NY+2Aj?mI4aN$fitKlKRh)mk3Hy~wTYGd@e?&fjVF7V2*C
zJbb@Q`dEqoJ&S(M1elJ0*KAqvmTqfPti7_=w*^BE7{X{j4qlhLu1(9TlQeKM{_O(F
z&(J=W{s&U86uMjR*DO!1nvv6DdH7E5xvBOGsrM=JoeBO`ujg$^c_!nF?1o80*^hYX
zNv+s})X<DQU0+;d?2n9!d<zeLiO*>bGGAz?8QuCjFZO(caSCFbHj?IHJ6GcCI`#wC
z28Wz+7y_N`<a5{ynz)nl+dU0*qzm>>oefW;4{(Z)(HV6fSPMJZfOmJw3$VeTldq+p
z53z~A+2S$lMGe)KKGZ#q_jxu^r+}2ea~f@|d`m@6b9pYI?B(mA*&mgCrOtf5Z{&MC
zv?lSKPJc6apHEUY`3L&w&;KIb=qF$849qR4?{Dv;$nLKxAFT)+7V_1s|1aR%{HaZ)
zPAzD(f?gjmyhZNIT<VM;cyFNjzjKaak9l4uj_ONHx22|;x!p1m4kwaN!d^5Y20Vil
T7pG}6@ifh?sOzfYqmJ}HjW6+N


From 6159b9f3b1fb516e1a159488e7473db27ceb8db4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Jul 2020 01:30:37 +0200
Subject: [PATCH 1192/2300] Create favicon.ico

---
 web/favicon.ico | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 web/favicon.ico

diff --git a/web/favicon.ico b/web/favicon.ico
new file mode 100644
index 00000000..8b137891
--- /dev/null
+++ b/web/favicon.ico
@@ -0,0 +1 @@
+

From 7926c9eeb0ef5ce47f9c075387f6fce41659e2b5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Jul 2020 20:21:29 +0200
Subject: [PATCH 1193/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 85abdbe2..333d252d 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -74,12 +74,11 @@ help() {
   -a, --apache            Install Apache        [yes|no]  default: yes
   -n, --nginx             Install Nginx         [yes|no]  default: yes
   -w, --phpfpm            Install PHP-FPM       [yes|no]  default: no
-  -v, --vsftpd            Install Vsftpd        [yes|no]  default: yes
-  -j, --proftpd           Install ProFTPD       [yes|no]  default: no
+  -v, --vsftpd            Install Vsftpd        [yes|no]  default: no
+  -j, --proftpd           Install ProFTPD       [yes|no]  default: yes
   -k, --named             Install Bind          [yes|no]  default: yes
   -m, --mysql             Install MySQL         [yes|no]  default: yes
   -g, --postgresql        Install PostgreSQL    [yes|no]  default: no
-  -d, --mongodb           Install MongoDB       [yes|no]  unsupported
   -x, --exim              Install Exim          [yes|no]  default: yes
   -z, --dovecot           Install Dovecot       [yes|no]  default: yes
   -c, --clamav            Install ClamAV        [yes|no]  default: yes

From 1f2fddf70717665a3cb4af0f2923afbd2c11b838 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 00:56:19 +0200
Subject: [PATCH 1194/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 333d252d..4217d253 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1409,7 +1409,7 @@ if [ "$iptables" = 'yes' ]; then
 fi
 
 # Get public ip
-pub_ip=$(curl -s vestacp.com/what-is-my-ip/)
+pub_ip=$(curl -s https://scripts.myvestacp.com/ip.php)
 
 if [ ! -z "$pub_ip" ] && [ "$pub_ip" != "$ip" ]; then
     $VESTA/bin/v-change-sys-ip-nat $ip $pub_ip

From f194eb85716594b1ee71564091c9337abc8a7c33 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 01:03:48 +0200
Subject: [PATCH 1195/2300] Update v-update-sys-ip

---
 bin/v-update-sys-ip | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-sys-ip b/bin/v-update-sys-ip
index 6c07edc6..929f2a63 100755
--- a/bin/v-update-sys-ip
+++ b/bin/v-update-sys-ip
@@ -110,7 +110,7 @@ for ip in $ips; do
 done
 
 # Updating NAT
-pub_ip=$(curl -s vestacp.com/what-is-my-ip/)
+pub_ip=$(curl -s https://scripts.myvestacp.com/ip.php)
 if [ ! -e "$VESTA/data/ips/$pub_ip" ]; then
     if [ -z "$(grep -R "$pub_ip" $VESTA/data/ips/)" ]; then
         ip=$(ls -t $VESTA/data/ips/ |head -n1)

From 3272e6c4a6145ec7748aef1cfbfa0ad83cd6223b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 01:11:09 +0200
Subject: [PATCH 1196/2300] Update v-update-dns-templates

---
 bin/v-update-dns-templates | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-dns-templates b/bin/v-update-dns-templates
index 31361d00..8b128a3d 100755
--- a/bin/v-update-dns-templates
+++ b/bin/v-update-dns-templates
@@ -25,7 +25,7 @@ source $VESTA/conf/vesta.conf
 tmpdir=$(mktemp -d --dry-run)
 mkdir $tmpdir
 cd $tmpdir
-wget http://c.vestacp.com/rhel/7/templates.tar.gz -q
+wget https://c.myvestacp.com/debian/10/templates.tar.gz -q
 if [ "$?" -ne 0 ]; then
     echo "Error: can't download template.tar.gz"
     log_event "$E_CONNECT" "$ARGUMENTS"

From ace47e7c92b77264ef58606e12907fc30cb464d0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 01:22:23 +0200
Subject: [PATCH 1197/2300] --max-time 10 sec to check official vestacp
 licences

---
 bin/v-check-vesta-license | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-check-vesta-license b/bin/v-check-vesta-license
index 7fa1a12c..46d474ce 100755
--- a/bin/v-check-vesta-license
+++ b/bin/v-check-vesta-license
@@ -42,7 +42,7 @@ for str in $modules; do
     license=$(echo "$str" |cut -f 2 -d \')
     if [ ! -z "$license" ]; then
         v_host='https://vestacp.com/checkout'
-        answer=$(curl -s "$v_host/check.php?licence_key=$license&module=$module")
+        answer=$(curl --max-time 10 -s "$v_host/check.php?licence_key=$license&module=$module")
         check_result $? "cant' connect to vestacp.com " 0
         echo "$module $license $answer"
         if [[ "$answer" != '0' ]]; then

From e56984de25c8392869e20438a62788d11eca07a2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 01:25:49 +0200
Subject: [PATCH 1198/2300] --max-time 60 sec for licence

---
 bin/v-activate-vesta-license | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-activate-vesta-license b/bin/v-activate-vesta-license
index 6d5c875e..28a5bf16 100755
--- a/bin/v-activate-vesta-license
+++ b/bin/v-activate-vesta-license
@@ -35,7 +35,7 @@ check_args '2' "$#" 'MODULE LICENSE'
 
 # Activating license
 v_host='https://vestacp.com/checkout'
-answer=$(curl -s $v_host/activate.php?licence_key=$license&module=$module)
+answer=$(curl --max-time 60 -s $v_host/activate.php?licence_key=$license&module=$module)
 check_result $? "cant' connect to vestacp.com " $E_CONNECT
 
 # Checking server answer

From d362624583bde3fd5d822029b967ec2dad918968 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 01:26:55 +0200
Subject: [PATCH 1199/2300] --max-time 60 sec for checking official licence

---
 bin/v-check-vesta-license | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-check-vesta-license b/bin/v-check-vesta-license
index 46d474ce..18c7dab4 100755
--- a/bin/v-check-vesta-license
+++ b/bin/v-check-vesta-license
@@ -42,7 +42,7 @@ for str in $modules; do
     license=$(echo "$str" |cut -f 2 -d \')
     if [ ! -z "$license" ]; then
         v_host='https://vestacp.com/checkout'
-        answer=$(curl --max-time 10 -s "$v_host/check.php?licence_key=$license&module=$module")
+        answer=$(curl --max-time 60 -s "$v_host/check.php?licence_key=$license&module=$module")
         check_result $? "cant' connect to vestacp.com " 0
         echo "$module $license $answer"
         if [[ "$answer" != '0' ]]; then

From 5353797756e6fe9b00269bebb446fa516a5f2458 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 01:28:58 +0200
Subject: [PATCH 1200/2300] --max-time 60 sec for deactivating vesta licences

---
 bin/v-deactivate-vesta-license | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-deactivate-vesta-license b/bin/v-deactivate-vesta-license
index 5839aaad..4f80d0c4 100755
--- a/bin/v-deactivate-vesta-license
+++ b/bin/v-deactivate-vesta-license
@@ -35,7 +35,7 @@ check_args '2' "$#" 'MODULE LICENSE'
 
 # Activating license
 v_host='https://vestacp.com/checkout'
-answer=$(curl -s $v_host/cancel.php?licence_key=$license)
+answer=$(curl --max-time 60 -s $v_host/cancel.php?licence_key=$license)
 check_result $? "cant' connect to vestacp.com " $E_CONNECT
 
 # Checking server answer

From c7a3f7c4148c79c6263d9beab6575dc23cd63593 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 01:33:30 +0200
Subject: [PATCH 1201/2300] Update list_user.html

---
 web/templates/admin/list_user.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index 4e65deed..f5da64ee 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -65,7 +65,7 @@
     <div class="l-center units">
       <?php
         if (isset($changelog))
-          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br /><a style=\"color: #007bff;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\">Changelog:</a><br /><pre  style=\"padding: 16px; overflow: auto; font-size: 85%; line-height: 1.45; background-color: #f6f8fa; border-radius: 3px; font-weight: bold;\">".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")."<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, wiki and forum")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" />";
+          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br /><a style=\"color: #007bff;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\">Changelog:</a><br /><pre  style=\"padding: 16px; overflow: auto; font-size: 85%; line-height: 1.45; background-color: #f6f8fa; border-radius: 3px; font-weight: bold;\">".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")."<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, forum and knowledge base")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" />";
         
         foreach ($data as $key => $value) {
           ++$i;

From 4c8fe274762a269ddb02527d6fc8379b00cb6c2e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 01:46:35 +0200
Subject: [PATCH 1202/2300] ascii logo

---
 install/vst-install-debian.sh | 20 +++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 4217d253..7c10e150 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 
-# Vesta Debian installer v.05
+# myVesta Debian installer v.05
 
 #----------------------------------------------------------#
 #                  Variables&Functions                     #
@@ -97,7 +97,7 @@ help() {
   -f, --force             Force installation
   -h, --help              Print this help
 
-  Example: bash $0 -e demo@vestacp.com -p p4ssw0rd --apache no --phpfpm yes"
+  Example: bash $0 -e demo@myvestacp.com -p p4ssw0rd --apache no --phpfpm yes"
     exit 1
 }
 
@@ -1670,16 +1670,18 @@ myvestacp.com team
 " > $tmpfile
 
 send_mail="$VESTA/web/inc/mail-wrapper.php"
-cat $tmpfile | $send_mail -s "Vesta Control Panel" $email
+cat $tmpfile | $send_mail -s "myVesta Control Panel" $email
 
 # Congrats
-echo '======================================================='
+echo '=============================================================================='
 echo
-echo ' _|      _|  _|_|_|_|    _|_|_|  _|_|_|_|_|    _|_|   '
-echo ' _|      _|  _|        _|            _|      _|    _| '
-echo ' _|      _|  _|_|_|      _|_|        _|      _|_|_|_| '
-echo '   _|  _|    _|              _|      _|      _|    _| '
-echo '     _|      _|_|_|_|  _|_|_|        _|      _|    _| '
+echo '                           _|      _|                        _|               '
+echo ' _|_|_|  _|_|    _|    _|  _|      _|    _|_|      _|_|_|  _|_|_|_|    _|_|_| '
+echo ' _|    _|    _|  _|    _|  _|      _|  _|_|_|_|  _|_|        _|      _|    _| '
+echo ' _|    _|    _|  _|    _|    _|  _|    _|            _|_|    _|      _|    _| '
+echo ' _|    _|    _|    _|_|_|      _|        _|_|_|  _|_|_|        _|_|    _|_|_| '
+echo '                       _|                                                     '
+echo '                   _|_|                                                       '
 echo
 echo
 cat $tmpfile

From 73130e50b6d1cf8da1a41b2f6a224d8d65be946a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 01:54:19 +0200
Subject: [PATCH 1203/2300] Version 0.9.8-26-30

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 57c3368e..a1cc939d 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-29
+vesta-0.9.8-26-30

From 6203ad1ab71c0ea9f473bea070ac2f5329fd8c5c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 02:02:39 +0200
Subject: [PATCH 1204/2300] Update Changelog.md

---
 Changelog.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 1ff6d39e..26cb121a 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,10 @@
+Version 0.9.8-26-30 [26-Jul-2020]
+==================================================
+* New ASCII logo in installer
+* Deleted favicon when user don't know secret-url of hosting panel
+* [bugfix] Minor bug fixed in v-make-separated-ip-for-email
+* [bugfix] Minor fix of URL for templates in v-update-dns-templates
+
 Version 0.9.8-26-29 [21-Jul-2020]
 ==================================================
 * [Feature] v-clone-website command moved to vesta-bin folder (becoming standard myVesta command)

From 3bc81d23c58bd2537532b8c451c1c0c13e583d5e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 02:11:33 +0200
Subject: [PATCH 1205/2300] ascii logo

---
 install/vst-install-debian.sh | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 7c10e150..2c61cce5 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -337,13 +337,15 @@ fi
 # Printing nice ascii aslogo
 clear
 echo
-echo ' _|      _|  _|_|_|_|    _|_|_|  _|_|_|_|_|    _|_|'
-echo ' _|      _|  _|        _|            _|      _|    _|'
-echo ' _|      _|  _|_|_|      _|_|        _|      _|_|_|_|'
-echo '   _|  _|    _|              _|      _|      _|    _|'
-echo '     _|      _|_|_|_|  _|_|_|        _|      _|    _|'
+echo '                           _|      _|                        _|               '
+echo ' _|_|_|  _|_|    _|    _|  _|      _|    _|_|      _|_|_|  _|_|_|_|    _|_|_| '
+echo ' _|    _|    _|  _|    _|  _|      _|  _|_|_|_|  _|_|        _|      _|    _| '
+echo ' _|    _|    _|  _|    _|    _|  _|    _|            _|_|    _|      _|    _| '
+echo ' _|    _|    _|    _|_|_|      _|        _|_|_|  _|_|_|        _|_|    _|_|_| '
+echo '                       _|                                                     '
+echo '                   _|_|                                                       '
 echo
-echo '                                  Vesta Control Panel'
+echo '                                myVesta Control Panel'
 echo -e "\n\n"
 
 echo 'Following software will be installed on your system:'

From 2d3aa721d04646e13c0fec48fff3e4e406dd983e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 02:28:08 +0200
Subject: [PATCH 1206/2300] new ascii logo

---
 install/vst-install-debian.sh | 31 +++++++++++++++----------------
 1 file changed, 15 insertions(+), 16 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 2c61cce5..f30ef79e 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -337,13 +337,12 @@ fi
 # Printing nice ascii aslogo
 clear
 echo
-echo '                           _|      _|                        _|               '
-echo ' _|_|_|  _|_|    _|    _|  _|      _|    _|_|      _|_|_|  _|_|_|_|    _|_|_| '
-echo ' _|    _|    _|  _|    _|  _|      _|  _|_|_|_|  _|_|        _|      _|    _| '
-echo ' _|    _|    _|  _|    _|    _|  _|    _|            _|_|    _|      _|    _| '
-echo ' _|    _|    _|    _|_|_|      _|        _|_|_|  _|_|_|        _|_|    _|_|_| '
-echo '                       _|                                                     '
-echo '                   _|_|                                                       '
+echo '                __     __        _        '
+echo '  _ __ ___  _   \ \   / /__  ___| |_ __ _ '
+echo ' | '_ ` _ \| | | \ \ / / _ \/ __| __/ _` |'
+echo ' | | | | | | |_| |\ V /  __/\__ \ || (_| |'
+echo ' |_| |_| |_|\__, | \_/ \___||___/\__\__,_|'
+echo '            |___/                         '
 echo
 echo '                                myVesta Control Panel'
 echo -e "\n\n"
@@ -358,7 +357,8 @@ if [ "$apache" = 'yes' ] && [ "$nginx" = 'no' ] ; then
     echo '   - Apache Web Server'
 fi
 if [ "$apache" = 'yes' ] && [ "$nginx"  = 'yes' ] ; then
-    echo '   - Apache Web Server (as backend)'
+    echo '   - Apache Web Server (in very fast mpm_event mode)'
+    echo '   - PHP-FPM service for PHP'
 fi
 if [ "$phpfpm"  = 'yes' ]; then
     echo '   - PHP-FPM Application Server'
@@ -1675,15 +1675,14 @@ send_mail="$VESTA/web/inc/mail-wrapper.php"
 cat $tmpfile | $send_mail -s "myVesta Control Panel" $email
 
 # Congrats
-echo '=============================================================================='
+echo '=========================================='
 echo
-echo '                           _|      _|                        _|               '
-echo ' _|_|_|  _|_|    _|    _|  _|      _|    _|_|      _|_|_|  _|_|_|_|    _|_|_| '
-echo ' _|    _|    _|  _|    _|  _|      _|  _|_|_|_|  _|_|        _|      _|    _| '
-echo ' _|    _|    _|  _|    _|    _|  _|    _|            _|_|    _|      _|    _| '
-echo ' _|    _|    _|    _|_|_|      _|        _|_|_|  _|_|_|        _|_|    _|_|_| '
-echo '                       _|                                                     '
-echo '                   _|_|                                                       '
+echo '                __     __        _        '
+echo '  _ __ ___  _   \ \   / /__  ___| |_ __ _ '
+echo ' | '_ ` _ \| | | \ \ / / _ \/ __| __/ _` |'
+echo ' | | | | | | |_| |\ V /  __/\__ \ || (_| |'
+echo ' |_| |_| |_|\__, | \_/ \___||___/\__\__,_|'
+echo '            |___/                         '
 echo
 echo
 cat $tmpfile

From 3ca86fbf983030e9d4102608757118ccb8f84b97 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 02:30:41 +0200
Subject: [PATCH 1207/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index f30ef79e..ec6932f2 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -337,12 +337,12 @@ fi
 # Printing nice ascii aslogo
 clear
 echo
-echo '                __     __        _        '
-echo '  _ __ ___  _   \ \   / /__  ___| |_ __ _ '
-echo ' | '_ ` _ \| | | \ \ / / _ \/ __| __/ _` |'
-echo ' | | | | | | |_| |\ V /  __/\__ \ || (_| |'
-echo ' |_| |_| |_|\__, | \_/ \___||___/\__\__,_|'
-echo '            |___/                         '
+echo "                __     __        _        "
+echo "  _ __ ___  _   \ \   / /__  ___| |_ __ _ "
+echo " | '_ ` _ \| | | \ \ / / _ \/ __| __/ _` |"
+echo " | | | | | | |_| |\ V /  __/\__ \ || (_| |"
+echo " |_| |_| |_|\__, | \_/ \___||___/\__\__,_|"
+echo "            |___/                         "
 echo
 echo '                                myVesta Control Panel'
 echo -e "\n\n"
@@ -1677,12 +1677,12 @@ cat $tmpfile | $send_mail -s "myVesta Control Panel" $email
 # Congrats
 echo '=========================================='
 echo
-echo '                __     __        _        '
-echo '  _ __ ___  _   \ \   / /__  ___| |_ __ _ '
-echo ' | '_ ` _ \| | | \ \ / / _ \/ __| __/ _` |'
-echo ' | | | | | | |_| |\ V /  __/\__ \ || (_| |'
-echo ' |_| |_| |_|\__, | \_/ \___||___/\__\__,_|'
-echo '            |___/                         '
+echo "                __     __        _        "
+echo "  _ __ ___  _   \ \   / /__  ___| |_ __ _ "
+echo " | '_ ` _ \| | | \ \ / / _ \/ __| __/ _` |"
+echo " | | | | | | |_| |\ V /  __/\__ \ || (_| |"
+echo " |_| |_| |_|\__, | \_/ \___||___/\__\__,_|"
+echo "            |___/                         "
 echo
 echo
 cat $tmpfile

From b0acb7c4e8b6f8058ca21eada5d7d56950c46bb1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 02:35:15 +0200
Subject: [PATCH 1208/2300] new ascii logo

---
 install/vst-install-debian.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ec6932f2..d05f8430 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -339,7 +339,7 @@ clear
 echo
 echo "                __     __        _        "
 echo "  _ __ ___  _   \ \   / /__  ___| |_ __ _ "
-echo " | '_ ` _ \| | | \ \ / / _ \/ __| __/ _` |"
+echo " | '_ \` _ \| | | \ \ / / _ \/ __| __/ _\` |"
 echo " | | | | | | |_| |\ V /  __/\__ \ || (_| |"
 echo " |_| |_| |_|\__, | \_/ \___||___/\__\__,_|"
 echo "            |___/                         "
@@ -1679,7 +1679,7 @@ echo '=========================================='
 echo
 echo "                __     __        _        "
 echo "  _ __ ___  _   \ \   / /__  ___| |_ __ _ "
-echo " | '_ ` _ \| | | \ \ / / _ \/ __| __/ _` |"
+echo " | '_ \` _ \| | | \ \ / / _ \/ __| __/ _\` |"
 echo " | | | | | | |_| |\ V /  __/\__ \ || (_| |"
 echo " |_| |_| |_|\__, | \_/ \___||___/\__\__,_|"
 echo "            |___/                         "

From a3088205aa8ab28c02dfb9116fc5b9550b36da6d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 02:36:11 +0200
Subject: [PATCH 1209/2300] Update Changelog.md

---
 Changelog.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Changelog.md b/Changelog.md
index 26cb121a..25ec830d 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -4,6 +4,7 @@ Version 0.9.8-26-30 [26-Jul-2020]
 * Deleted favicon when user don't know secret-url of hosting panel
 * [bugfix] Minor bug fixed in v-make-separated-ip-for-email
 * [bugfix] Minor fix of URL for templates in v-update-dns-templates
+* [bugfix] Minor fixes in installer
 
 Version 0.9.8-26-29 [21-Jul-2020]
 ==================================================

From e2b56349d94bd3d5866919598a753d3768c1e781 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 02:46:03 +0200
Subject: [PATCH 1210/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 37 +++++++++++++++++------------------
 1 file changed, 18 insertions(+), 19 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d05f8430..93b8438d 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -351,59 +351,58 @@ echo 'Following software will be installed on your system:'
 
 # Web stack
 if [ "$nginx" = 'yes' ]; then
-    echo '   - Nginx Web Server'
+    echo '   - nginx Web server'
 fi
 if [ "$apache" = 'yes' ] && [ "$nginx" = 'no' ] ; then
-    echo '   - Apache Web Server'
+    echo '   - Apache Web server'
 fi
 if [ "$apache" = 'yes' ] && [ "$nginx"  = 'yes' ] ; then
-    echo '   - Apache Web Server (in very fast mpm_event mode)'
+    echo '   - Apache Web server (in very fast mpm_event mode)'
     echo '   - PHP-FPM service for PHP'
 fi
 if [ "$phpfpm"  = 'yes' ]; then
-    echo '   - PHP-FPM Application Server'
+    echo '   - PHP-FPM service'
 fi
 
 # DNS stack
 if [ "$named" = 'yes' ]; then
-    echo '   - Bind DNS Server'
+    echo '   - Bind9 DNS service'
 fi
 
 # Mail Stack
 if [ "$exim" = 'yes' ]; then
-    echo -n '   - Exim mail server'
+    echo -n '   - Exim4 mail server'
     if [ "$clamd" = 'yes'  ] ||  [ "$spamd" = 'yes' ] ; then
-        echo -n ' + '
         if [ "$clamd" = 'yes' ]; then
-            echo -n 'Antivirus '
+            echo -n '+ ClamAV antivirus '
         fi
         if [ "$spamd" = 'yes' ]; then
-            echo -n 'Antispam'
+            echo -n '+  SpamAssassin antispam service'
         fi
     fi
     echo
     if [ "$dovecot" = 'yes' ]; then
-        echo '   - Dovecot POP3/IMAP Server'
+        echo '   - Dovecot POP3/IMAP service'
     fi
 fi
 
 # DB stack
 if [ "$mysql" = 'yes' ]; then
-    echo '   - MySQL Database Server'
+    echo '   - MySQL Database server'
 fi
 if [ "$postgresql" = 'yes' ]; then
-    echo '   - PostgreSQL Database Server'
-fi
-if [ "$mongodb" = 'yes' ]; then
-    echo '   - MongoDB Database Server'
+    echo '   - PostgreSQL Database server'
 fi
+# if [ "$mongodb" = 'yes' ]; then
+#    echo '   - MongoDB Database Server'
+# fi
 
 # FTP stack
 if [ "$vsftpd" = 'yes' ]; then
-    echo '   - Vsftpd FTP Server'
+    echo '   - Vsftpd FTP service'
 fi
 if [ "$proftpd" = 'yes' ]; then
-    echo '   - ProFTPD FTP Server'
+    echo '   - ProFTPD FTP service'
 fi
 
 # Softaculous
@@ -413,10 +412,10 @@ fi
 
 # Firewall stack
 if [ "$iptables" = 'yes' ]; then
-    echo -n '   - Iptables Firewall'
+    echo -n '   - iptables firewall'
 fi
 if [ "$iptables" = 'yes' ] && [ "$fail2ban" = 'yes' ]; then
-    echo -n ' + Fail2Ban'
+    echo -n ' + Fail2Ban service'
 fi
 echo -e "\n\n"
 

From 667fffeb994e2041665cd4f40c75d2c8deef6632 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 02:48:43 +0200
Subject: [PATCH 1211/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 93b8438d..93a2d18a 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -374,10 +374,10 @@ if [ "$exim" = 'yes' ]; then
     echo -n '   - Exim4 mail server'
     if [ "$clamd" = 'yes'  ] ||  [ "$spamd" = 'yes' ] ; then
         if [ "$clamd" = 'yes' ]; then
-            echo -n '+ ClamAV antivirus '
+            echo -n ' + ClamAV antivirus'
         fi
         if [ "$spamd" = 'yes' ]; then
-            echo -n '+  SpamAssassin antispam service'
+            echo -n '+ SpamAssassin antispam service'
         fi
     fi
     echo

From 1d35312597b19cfdc3f1f7cfbd3b6d4ec1c06fa9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 02:51:56 +0200
Subject: [PATCH 1212/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 93a2d18a..2ebb4613 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -354,14 +354,14 @@ if [ "$nginx" = 'yes' ]; then
     echo '   - nginx Web server'
 fi
 if [ "$apache" = 'yes' ] && [ "$nginx" = 'no' ] ; then
-    echo '   - Apache Web server'
+    echo '   - Apache web server'
 fi
 if [ "$apache" = 'yes' ] && [ "$nginx"  = 'yes' ] ; then
-    echo '   - Apache Web server (in very fast mpm_event mode)'
-    echo '   - PHP-FPM service for PHP'
+    echo '   - Apache web server (in very fast mpm_event mode)'
+    echo '   - PHP-FPM service for PHP processing'
 fi
 if [ "$phpfpm"  = 'yes' ]; then
-    echo '   - PHP-FPM service'
+    echo '   - PHP-FPM service for PHP processing'
 fi
 
 # DNS stack
@@ -377,7 +377,7 @@ if [ "$exim" = 'yes' ]; then
             echo -n ' + ClamAV antivirus'
         fi
         if [ "$spamd" = 'yes' ]; then
-            echo -n '+ SpamAssassin antispam service'
+            echo -n ' + SpamAssassin antispam service'
         fi
     fi
     echo

From 63676031588eb8e7bfcc7079e5e0710d4ee357f4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 03:11:36 +0200
Subject: [PATCH 1213/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 2ebb4613..dc1e6a89 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1410,7 +1410,7 @@ if [ "$iptables" = 'yes' ]; then
 fi
 
 # Get public ip
-pub_ip=$(curl -s https://scripts.myvestacp.com/ip.php)
+pub_ip=$(curl -4 -s https://scripts.myvestacp.com/ip.php)
 
 if [ ! -z "$pub_ip" ] && [ "$pub_ip" != "$ip" ]; then
     $VESTA/bin/v-change-sys-ip-nat $ip $pub_ip

From 8728c239ccf8e8c3731cae20b25fe6cafb00b400 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Jul 2020 04:58:28 +0200
Subject: [PATCH 1214/2300] Update v-update-sys-ip

---
 bin/v-update-sys-ip | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-sys-ip b/bin/v-update-sys-ip
index 929f2a63..0186a394 100755
--- a/bin/v-update-sys-ip
+++ b/bin/v-update-sys-ip
@@ -110,7 +110,7 @@ for ip in $ips; do
 done
 
 # Updating NAT
-pub_ip=$(curl -s https://scripts.myvestacp.com/ip.php)
+pub_ip=$(curl -4 -s https://scripts.myvestacp.com/ip.php)
 if [ ! -e "$VESTA/data/ips/$pub_ip" ]; then
     if [ -z "$(grep -R "$pub_ip" $VESTA/data/ips/)" ]; then
         ip=$(ls -t $VESTA/data/ips/ |head -n1)

From 48dfac2b3a7e7e878f77f849a5db774599695b88 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 28 Jul 2020 18:01:48 +0200
Subject: [PATCH 1215/2300] W3TC optimal settings

---
 src/deb/for-download/tools/W3TC.json | 830 +++++++++++++++++++++++++++
 1 file changed, 830 insertions(+)
 create mode 100644 src/deb/for-download/tools/W3TC.json

diff --git a/src/deb/for-download/tools/W3TC.json b/src/deb/for-download/tools/W3TC.json
new file mode 100644
index 00000000..7e1f0340
--- /dev/null
+++ b/src/deb/for-download/tools/W3TC.json
@@ -0,0 +1,830 @@
+{
+    "version": "0.14.3",
+    "cluster.messagebus.debug": false,
+    "cluster.messagebus.enabled": false,
+    "cluster.messagebus.sns.region": "",
+    "cluster.messagebus.sns.api_key": "",
+    "cluster.messagebus.sns.api_secret": "",
+    "cluster.messagebus.sns.topic_arn": "",
+    "dbcache.configuration_overloaded": false,
+    "dbcache.debug": false,
+    "dbcache.debug_purge": false,
+    "dbcache.enabled": true,
+    "dbcache.engine": "memcached",
+    "dbcache.file.gc": 3600,
+    "dbcache.file.locking": false,
+    "dbcache.lifetime": 3600,
+    "dbcache.memcached.persistent": true,
+    "dbcache.memcached.aws_autodiscovery": false,
+    "dbcache.memcached.servers": [
+        "127.0.0.1:11211"
+    ],
+    "dbcache.memcached.username": "",
+    "dbcache.memcached.password": "",
+    "dbcache.memcached.binary_protocol": true,
+    "dbcache.redis.persistent": true,
+    "dbcache.redis.servers": [
+        "127.0.0.1:6379"
+    ],
+    "dbcache.redis.password": "",
+    "dbcache.redis.dbid": 0,
+    "dbcache.use_filters": false,
+    "dbcache.reject.constants": [
+        "APP_REQUEST",
+        "DOING_CRON",
+        "DONOTCACHEDB",
+        "SHORTINIT",
+        "XMLRPC_REQUEST"
+    ],
+    "dbcache.reject.cookie": [],
+    "dbcache.reject.logged": true,
+    "dbcache.reject.sql": [
+        "gdsr_",
+        "wp_rg_",
+        "_wp_session_",
+        "_wc_session_"
+    ],
+    "dbcache.reject.uri": [
+        ""
+    ],
+    "dbcache.reject.words": [
+        "^\\s*insert\\b",
+        "^\\s*delete\\b",
+        "^\\s*update\\b",
+        "^\\s*replace\\b",
+        "^\\s*create\\b",
+        "^\\s*alter\\b",
+        "^\\s*show\\b",
+        "^\\s*set\\b",
+        "\\bautoload\\s+=\\s+'yes'",
+        "\\bsql_calc_found_rows\\b",
+        "\\bfound_rows\\(\\)"
+    ],
+    "lazyload.enabled": false,
+    "lazyload.process_img": true,
+    "lazyload.process_background": true,
+    "lazyload.googlemaps.google_maps_easy": false,
+    "lazyload.googlemaps.wp_google_maps": false,
+    "lazyload.googlemaps.wp_google_map_plugin": false,
+    "lazyload.exclude": [
+        "skip_lazy"
+    ],
+    "lazyload.embed_method": "async_head",
+    "objectcache.configuration_overloaded": false,
+    "objectcache.enabled": true,
+    "objectcache.debug": false,
+    "objectcache.debug_purge": false,
+    "objectcache.enabled_for_wp_admin": true,
+    "objectcache.fallback_transients": true,
+    "objectcache.engine": "memcached",
+    "objectcache.file.gc": 3600,
+    "objectcache.file.locking": false,
+    "objectcache.memcached.servers": [
+        "127.0.0.1:11211"
+    ],
+    "objectcache.memcached.persistent": true,
+    "objectcache.memcached.aws_autodiscovery": false,
+    "objectcache.memcached.username": "",
+    "objectcache.memcached.password": "",
+    "objectcache.memcached.binary_protocol": true,
+    "objectcache.redis.persistent": true,
+    "objectcache.redis.servers": [
+        "127.0.0.1:6379"
+    ],
+    "objectcache.redis.password": "",
+    "objectcache.redis.dbid": 0,
+    "objectcache.groups.global": [
+        "users",
+        "userlogins",
+        "usermeta",
+        "user_meta",
+        "site-transient",
+        "site-options",
+        "site-lookup",
+        "blog-lookup",
+        "blog-details",
+        "rss",
+        "global-posts"
+    ],
+    "objectcache.groups.nonpersistent": [
+        "comment",
+        "counts",
+        "plugins"
+    ],
+    "objectcache.lifetime": 3600,
+    "objectcache.purge.all": false,
+    "pgcache.configuration_overloaded": false,
+    "pgcache.enabled": true,
+    "pgcache.comment_cookie_ttl": 86400,
+    "pgcache.debug": false,
+    "pgcache.debug_purge": false,
+    "pgcache.engine": "memcached",
+    "pgcache.file.gc": 3600,
+    "pgcache.file.nfs": true,
+    "pgcache.file.locking": false,
+    "pgcache.lifetime": 86400,
+    "pgcache.memcached.servers": [
+        "127.0.0.1:11211"
+    ],
+    "pgcache.memcached.persistent": true,
+    "pgcache.memcached.aws_autodiscovery": false,
+    "pgcache.memcached.username": "",
+    "pgcache.memcached.password": "",
+    "pgcache.memcached.binary_protocol": true,
+    "pgcache.redis.persistent": true,
+    "pgcache.redis.servers": [
+        "127.0.0.1:6379"
+    ],
+    "pgcache.redis.password": "",
+    "pgcache.redis.dbid": 0,
+    "pgcache.cache.query": true,
+    "pgcache.cache.home": true,
+    "pgcache.cache.feed": true,
+    "pgcache.cache.nginx_handle_xml": false,
+    "pgcache.cache.ssl": true,
+    "pgcache.cache.404": false,
+    "pgcache.cache.headers": [
+        "Last-Modified",
+        "Content-Type",
+        "X-Pingback",
+        "P3P",
+        "Link"
+    ],
+    "pgcache.compatibility": false,
+    "pgcache.remove_charset": false,
+    "pgcache.accept.uri": [
+        "sitemap(_index)?\\.xml(\\.gz)?",
+        "([a-z0-9_\\-]+)?sitemap\\.xsl",
+        "[a-z0-9_\\-]+-sitemap([0-9]+)?\\.xml(\\.gz)?"
+    ],
+    "pgcache.accept.files": [
+        "wp-comments-popup.php",
+        "wp-links-opml.php",
+        "wp-locations.php"
+    ],
+    "pgcache.accept.qs": [
+        ""
+    ],
+    "pgcache.late_init": false,
+    "pgcache.late_caching": false,
+    "pgcache.mirrors.enabled": true,
+    "pgcache.mirrors.home_urls": [
+        ""
+    ],
+    "pgcache.reject.front_page": "0",
+    "pgcache.reject.logged": true,
+    "pgcache.reject.logged_roles": false,
+    "pgcache.reject.roles": [
+        ""
+    ],
+    "pgcache.reject.uri": [
+        "wp-.*\\.php",
+        "index\\.php"
+    ],
+    "pgcache.reject.categories": [
+        ""
+    ],
+    "pgcache.reject.tags": [
+        ""
+    ],
+    "pgcache.reject.authors": [
+        ""
+    ],
+    "pgcache.reject.custom": [
+        ""
+    ],
+    "pgcache.reject.ua": [
+        ""
+    ],
+    "pgcache.reject.cookie": [
+        "wptouch_switch_toggle"
+    ],
+    "pgcache.reject.request_head": false,
+    "pgcache.purge.front_page": "1",
+    "pgcache.purge.home": true,
+    "pgcache.purge.post": true,
+    "pgcache.purge.comments": false,
+    "pgcache.purge.author": false,
+    "pgcache.purge.terms": false,
+    "pgcache.purge.archive.daily": false,
+    "pgcache.purge.archive.monthly": false,
+    "pgcache.purge.archive.yearly": false,
+    "pgcache.purge.feed.blog": true,
+    "pgcache.purge.feed.comments": false,
+    "pgcache.purge.feed.author": false,
+    "pgcache.purge.feed.terms": false,
+    "pgcache.purge.feed.types": [
+        "rss2"
+    ],
+    "pgcache.purge.postpages_limit": 10,
+    "pgcache.purge.pages": [
+        ""
+    ],
+    "pgcache.purge.sitemap_regex": "([a-z0-9_\\-]*?)sitemap([a-z0-9_\\-]*)?\\.xml",
+    "pgcache.prime.enabled": false,
+    "pgcache.prime.interval": 3600,
+    "pgcache.prime.limit": 10,
+    "pgcache.prime.sitemap": "",
+    "pgcache.prime.post.enabled": false,
+    "pgcache.rest": "",
+    "pgcache.cookiegroups.enabled": false,
+    "pgcache.cookiegroups.groups": {
+        "mobile": {
+            "enabled": false,
+            "cache": true,
+            "cookies": [
+                "wptouch-pro-view=mobile",
+                "wptouch-pro-cache-state=mobile"
+            ]
+        },
+        "loggedin": {
+            "enabled": false,
+            "cache": true,
+            "cookies": [
+                "wordpress_logged_in_.*"
+            ]
+        },
+        "subscribers": {
+            "enabled": false,
+            "cache": true,
+            "cookies": [
+                "role=subscriber",
+                "role=member"
+            ]
+        }
+    },
+    "stats.enabled": false,
+    "stats.slot_seconds": 60,
+    "stats.slots_count": 60,
+    "stats.cpu.enabled": false,
+    "stats.access_log.enabled": false,
+    "stats.access_log.filename": "",
+    "stats.access_log.format": "%h %l %u %t \\\"%r\\\" %>s %O \\\"%{Referer}i\\\" \\\"%{User-Agent}i\\\"",
+    "stats.access_log.webserver": "apache",
+    "minify.configuration_overloaded": false,
+    "minify.enabled": false,
+    "minify.auto": true,
+    "minify.debug": false,
+    "minify.engine": "file",
+    "minify.error.notification": "",
+    "minify.file.gc": "86400",
+    "minify.file.nfs": true,
+    "minify.file.locking": false,
+    "minify.memcached.servers": [
+        "127.0.0.1:11211"
+    ],
+    "minify.memcached.persistent": true,
+    "minify.memcached.aws_autodiscovery": false,
+    "minify.memcached.username": "",
+    "minify.memcached.password": "",
+    "minify.memcached.binary_protocol": true,
+    "minify.redis.persistent": true,
+    "minify.redis.servers": [
+        "127.0.0.1:6379"
+    ],
+    "minify.redis.password": "",
+    "minify.redis.dbid": 0,
+    "minify.rewrite": "1",
+    "minify.options": [],
+    "minify.symlinks": [],
+    "minify.lifetime": "86400",
+    "minify.upload": true,
+    "minify.html.enable": "1",
+    "minify.html.engine": "html",
+    "minify.html.reject.feed": "0",
+    "minify.html.inline.css": "0",
+    "minify.html.inline.js": "0",
+    "minify.html.strip.crlf": "0",
+    "minify.html.comments.ignore": [
+        "google_ad_",
+        "RSPEAK_"
+    ],
+    "minify.css.combine": "0",
+    "minify.css.enable": "1",
+    "minify.css.engine": "css",
+    "minify.css.http2push": "0",
+    "minify.css.strip.comments": "0",
+    "minify.css.strip.crlf": "0",
+    "minify.css.embed": false,
+    "minify.css.imports": "",
+    "minify.css.groups": [],
+    "minify.js.http2push": "0",
+    "minify.js.enable": "1",
+    "minify.js.engine": "js",
+    "minify.js.combine.header": "0",
+    "minify.js.header.embed_type": "blocking",
+    "minify.js.combine.body": false,
+    "minify.js.body.embed_type": "blocking",
+    "minify.js.combine.footer": false,
+    "minify.js.footer.embed_type": "blocking",
+    "minify.js.strip.comments": "0",
+    "minify.js.strip.crlf": "0",
+    "minify.js.groups": [],
+    "minify.yuijs.path.java": "java",
+    "minify.yuijs.path.jar": "yuicompressor.jar",
+    "minify.yuijs.options.line-break": 5000,
+    "minify.yuijs.options.nomunge": false,
+    "minify.yuijs.options.preserve-semi": false,
+    "minify.yuijs.options.disable-optimizations": false,
+    "minify.yuicss.path.java": "java",
+    "minify.yuicss.path.jar": "yuicompressor.jar",
+    "minify.yuicss.options.line-break": 5000,
+    "minify.ccjs.path.java": "java",
+    "minify.ccjs.path.jar": "compiler.jar",
+    "minify.ccjs.options.compilation_level": "SIMPLE_OPTIMIZATIONS",
+    "minify.ccjs.options.formatting": "",
+    "minify.csstidy.options.remove_bslash": true,
+    "minify.csstidy.options.compress_colors": false,
+    "minify.csstidy.options.compress_font-weight": false,
+    "minify.csstidy.options.lowercase_s": false,
+    "minify.csstidy.options.optimise_shorthands": 0,
+    "minify.csstidy.options.remove_last_;": false,
+    "minify.csstidy.options.remove_space_before_important": false,
+    "minify.csstidy.options.case_properties": 1,
+    "minify.csstidy.options.sort_properties": false,
+    "minify.csstidy.options.sort_selectors": false,
+    "minify.csstidy.options.merge_selectors": 0,
+    "minify.csstidy.options.discard_invalid_selectors": false,
+    "minify.csstidy.options.discard_invalid_properties": false,
+    "minify.csstidy.options.css_level": "CSS3.0",
+    "minify.csstidy.options.preserve_css": false,
+    "minify.csstidy.options.timestamp": false,
+    "minify.csstidy.options.template": "highest_compression",
+    "minify.htmltidy.options.clean": false,
+    "minify.htmltidy.options.hide-comments": true,
+    "minify.htmltidy.options.wrap": 0,
+    "minify.reject.logged": "0",
+    "minify.reject.ua": [
+        ""
+    ],
+    "minify.reject.uri": [
+        ""
+    ],
+    "minify.reject.files.js": [
+        ""
+    ],
+    "minify.reject.files.css": [
+        ""
+    ],
+    "minify.cache.files": [
+        ""
+    ],
+    "minify.cache.files_regexp": "0",
+    "cdn.configuration_overloaded": false,
+    "cdn.enabled": false,
+    "cdn.debug": false,
+    "cdn.flush_manually": false,
+    "cdn.engine": "maxcdn",
+    "cdn.uploads.enable": true,
+    "cdn.includes.enable": true,
+    "cdn.includes.files": "*.css;*.js;*.gif;*.png;*.jpg;*.xml",
+    "cdn.theme.enable": true,
+    "cdn.theme.files": "*.css;*.js;*.gif;*.png;*.jpg;*.ico;*.ttf;*.otf;*.woff;*.woff2;*.less",
+    "cdn.minify.enable": true,
+    "cdn.custom.enable": true,
+    "cdn.custom.files": [
+        "favicon.ico",
+        "{wp_content_dir}\/gallery\/*",
+        "{wp_content_dir}\/uploads\/avatars\/*",
+        "{plugins_dir}\/wordpress-seo\/css\/xml-sitemap.xsl",
+        "{plugins_dir}\/wp-minify\/min*",
+        "{plugins_dir}\/*.js",
+        "{plugins_dir}\/*.css",
+        "{plugins_dir}\/*.gif",
+        "{plugins_dir}\/*.jpg",
+        "{plugins_dir}\/*.png"
+    ],
+    "cdn.import.files": false,
+    "cdn.queue.interval": 900,
+    "cdn.queue.limit": 25,
+    "cdn.force.rewrite": false,
+    "cdn.autoupload.enabled": false,
+    "cdn.autoupload.interval": 3600,
+    "cdn.canonical_header": false,
+    "cdn.admin.media_library": false,
+    "cdn.cors_header": true,
+    "cdn.ftp.host": "",
+    "cdn.ftp.type": "",
+    "cdn.ftp.user": "",
+    "cdn.ftp.pass": "",
+    "cdn.ftp.path": "",
+    "cdn.ftp.pasv": false,
+    "cdn.ftp.domain": [],
+    "cdn.ftp.ssl": "auto",
+    "cdn.ftp.default_keys": true,
+    "cdn.ftp.pubkey": "",
+    "cdn.ftp.privkey": "",
+    "cdn.google_drive.client_id": "",
+    "cdn.google_drive.refresh_token": "",
+    "cdn.google_drive.folder.id": "",
+    "cdn.google_drive.folder.title": "",
+    "cdn.google_drive.folder.url": "",
+    "cdn.highwinds.account_hash": "",
+    "cdn.highwinds.api_token": "",
+    "cdn.highwinds.host.hash_code": "",
+    "cdn.highwinds.host.domains": [],
+    "cdn.highwinds.ssl": "auto",
+    "cdn.s3.key": "",
+    "cdn.s3.secret": "",
+    "cdn.s3.bucket": "",
+    "cdn.s3.bucket.location": "us-east-1",
+    "cdn.s3.cname": [],
+    "cdn.s3.ssl": "auto",
+    "cdn.s3_compatible.api_host": "auto",
+    "cdn.cf.key": "",
+    "cdn.cf.secret": "",
+    "cdn.cf.bucket": "",
+    "cdn.cf.bucket.location": "us-east-1",
+    "cdn.cf.id": "",
+    "cdn.cf.cname": [],
+    "cdn.cf.ssl": "auto",
+    "cdn.cf2.key": "",
+    "cdn.cf2.secret": "",
+    "cdn.cf2.id": "",
+    "cdn.cf2.cname": [],
+    "cdn.cf2.ssl": "",
+    "cdn.rscf.user": "",
+    "cdn.rscf.key": "",
+    "cdn.rscf.location": "us",
+    "cdn.rscf.container": "",
+    "cdn.rscf.cname": [],
+    "cdn.rscf.ssl": "auto",
+    "cdn.rackspace_cdn.user_name": "",
+    "cdn.rackspace_cdn.api_key": "",
+    "cdn.rackspace_cdn.region": "",
+    "cdn.rackspace_cdn.service.access_url": "",
+    "cdn.rackspace_cdn.service.id": "",
+    "cdn.rackspace_cdn.service.name": "",
+    "cdn.rackspace_cdn.service.protocol": "http",
+    "cdn.rackspace_cdn.domains": [],
+    "cdn.azure.user": "",
+    "cdn.azure.key": "",
+    "cdn.azure.container": "",
+    "cdn.azure.cname": [],
+    "cdn.azure.ssl": "auto",
+    "cdn.mirror.domain": [],
+    "cdn.mirror.ssl": "auto",
+    "cdn.limelight.short_name": "",
+    "cdn.limelight.username": "",
+    "cdn.limelight.api_key": "",
+    "cdn.limelight.host.domains": [],
+    "cdn.limelight.ssl": "auto",
+    "cdn.maxcdn.authorization_key": "",
+    "cdn.maxcdn.domain": [],
+    "cdn.maxcdn.ssl": "auto",
+    "cdn.maxcdn.zone_id": 0,
+    "cdn.cotendo.username": "",
+    "cdn.cotendo.password": "",
+    "cdn.cotendo.zones": [],
+    "cdn.cotendo.domain": [],
+    "cdn.cotendo.ssl": "auto",
+    "cdn.akamai.username": "",
+    "cdn.akamai.password": "",
+    "cdn.akamai.email_notification": [],
+    "cdn.akamai.action": "invalidate",
+    "cdn.akamai.zone": "production",
+    "cdn.akamai.domain": [],
+    "cdn.akamai.ssl": "auto",
+    "cdn.edgecast.account": "",
+    "cdn.edgecast.token": "",
+    "cdn.edgecast.domain": [],
+    "cdn.edgecast.ssl": "auto",
+    "cdn.att.account": "",
+    "cdn.att.token": "",
+    "cdn.att.domain": [],
+    "cdn.att.ssl": "auto",
+    "cdn.stackpath.authorization_key": "",
+    "cdn.stackpath.domain": [],
+    "cdn.stackpath.ssl": "auto",
+    "cdn.stackpath.zone_id": 0,
+    "cdn.stackpath2.client_id": "",
+    "cdn.stackpath2.client_secret": "",
+    "cdn.stackpath2.stack_id": "",
+    "cdn.stackpath2.site_id": 0,
+    "cdn.stackpath2.site_root_domain": 0,
+    "cdn.stackpath2.domain": [],
+    "cdn.stackpath2.ssl": "auto",
+    "cdn.reject.admins": false,
+    "cdn.reject.logged_roles": false,
+    "cdn.reject.roles": [],
+    "cdn.reject.ua": [],
+    "cdn.reject.uri": [],
+    "cdn.reject.files": [
+        "{uploads_dir}\/wpcf7_captcha\/*",
+        "{uploads_dir}\/imagerotator.swf",
+        "{plugins_dir}\/wp-fb-autoconnect\/facebook-platform\/channel.html"
+    ],
+    "cdn.reject.ssl": false,
+    "cdnfsd.enabled": false,
+    "cdnfsd.engine": "",
+    "cdnfsd.debug": false,
+    "cdnfsd.cloudfront.access_key": "",
+    "cdnfsd.cloudfront.secret_key": "",
+    "cdnfsd.cloudfront.distribution_id": "",
+    "cdnfsd.limelight.short_name": "",
+    "cdnfsd.limelight.username": "",
+    "cdnfsd.limelight.api_key": "",
+    "cdnfsd.maxcdn.api_key": "",
+    "cdnfsd.maxcdn.zone_id": 0,
+    "cdnfsd.stackpath.api_key": "",
+    "cdnfsd.stackpath.zone_id": 0,
+    "cdnfsd.stackpath2.client_id": "",
+    "cdnfsd.stackpath2.client_secret": "",
+    "cdnfsd.stackpath2.stack_id": "",
+    "cdnfsd.stackpath2.site_id": 0,
+    "cdnfsd.stackpath2.site_root_domain": 0,
+    "cdnfsd.stackpath2.domain": [],
+    "cdnfsd.stackpath2.ssl": "auto",
+    "varnish.configuration_overloaded": false,
+    "varnish.enabled": false,
+    "varnish.debug": false,
+    "varnish.servers": [
+        ""
+    ],
+    "browsercache.configuration_overloaded": false,
+    "browsercache.enabled": false,
+    "browsercache.rewrite": false,
+    "browsercache.no404wp": false,
+    "browsercache.no404wp.exceptions": [
+        "robots\\.txt",
+        "[a-z0-9_\\-]*sitemap[a-z0-9_\\-]*\\.(xml|xsl|html)(\\.gz)?"
+    ],
+    "browsercache.cssjs.last_modified": true,
+    "browsercache.cssjs.compression": true,
+    "browsercache.cssjs.brotli": false,
+    "browsercache.cssjs.expires": true,
+    "browsercache.cssjs.lifetime": 31536000,
+    "browsercache.cssjs.nocookies": true,
+    "browsercache.cssjs.cache.control": false,
+    "browsercache.cssjs.cache.policy": "cache_public_maxage",
+    "browsercache.cssjs.etag": true,
+    "browsercache.cssjs.w3tc": false,
+    "browsercache.cssjs.replace": false,
+    "browsercache.cssjs.querystring": false,
+    "browsercache.html.compression": true,
+    "browsercache.html.brotli": false,
+    "browsercache.html.last_modified": true,
+    "browsercache.html.expires": false,
+    "browsercache.html.lifetime": 3600,
+    "browsercache.html.cache.control": false,
+    "browsercache.html.cache.policy": "cache_public_maxage",
+    "browsercache.html.etag": true,
+    "browsercache.html.w3tc": false,
+    "browsercache.html.replace": false,
+    "browsercache.other.last_modified": true,
+    "browsercache.other.compression": true,
+    "browsercache.other.brotli": false,
+    "browsercache.other.expires": true,
+    "browsercache.other.lifetime": 31536000,
+    "browsercache.other.nocookies": true,
+    "browsercache.other.cache.control": false,
+    "browsercache.other.cache.policy": "cache_public_maxage",
+    "browsercache.other.etag": true,
+    "browsercache.other.w3tc": false,
+    "browsercache.other.replace": false,
+    "browsercache.other.querystring": false,
+    "browsercache.replace.exceptions": [],
+    "browsercache.security.session.cookie_httponly": "",
+    "browsercache.security.session.cookie_secure": "",
+    "browsercache.security.session.use_only_cookies": "",
+    "browsercache.hsts": false,
+    "browsercache.security.hsts.directive": "maxage",
+    "browsercache.security.xfo": false,
+    "browsercache.security.xfo.directive": "same",
+    "browsercache.security.xfo.allow": "",
+    "browsercache.security.xss": false,
+    "browsercache.security.xss.directive": "block",
+    "browsercache.security.xcto": false,
+    "browsercache.security.pkp": false,
+    "browsercache.security.pkp.pin": "",
+    "browsercache.security.pkp.pin.backup": "",
+    "browsercache.security.pkp.extra": "maxage",
+    "browsercache.security.pkp.report.url": "",
+    "browsercache.security.pkp.report.only": "0",
+    "browsercache.security.referrer.policy": "false",
+    "browsercache.security.referrer.policy.directive": "no-referrer-when-downgrade",
+    "browsercache.security.csp": false,
+    "browsercache.security.csp.base": "",
+    "browsercache.security.csp.frame": "",
+    "browsercache.security.csp.connect": "",
+    "browsercache.security.csp.font": "",
+    "browsercache.security.csp.script": "",
+    "browsercache.security.csp.style": "",
+    "browsercache.security.csp.img": "",
+    "browsercache.security.csp.media": "",
+    "browsercache.security.csp.object": "",
+    "browsercache.security.csp.plugin": "",
+    "browsercache.security.csp.form": "",
+    "browsercache.security.csp.frame.ancestors": "",
+    "browsercache.security.csp.sandbox": "",
+    "browsercache.security.csp.default": "",
+    "browsercache.security.fp": false,
+    "browsercache.security.fp.values": [],
+    "mobile.configuration_overloaded": false,
+    "mobile.enabled": false,
+    "mobile.rgroups": {
+        "high": {
+            "theme": "",
+            "enabled": false,
+            "redirect": "",
+            "agents": [
+                "android",
+                "mobi",
+                "bada",
+                "incognito",
+                "kindle",
+                "maemo",
+                "opera\\ mini",
+                "s8000",
+                "series60",
+                "ucbrowser",
+                "ucweb",
+                "webmate",
+                "webos"
+            ]
+        },
+        "low": {
+            "theme": "",
+            "enabled": false,
+            "redirect": "",
+            "agents": [
+                "2\\.0\\ mmp",
+                "240x320",
+                "alcatel",
+                "amoi",
+                "asus",
+                "au\\-mic",
+                "audiovox",
+                "avantgo",
+                "benq",
+                "bird",
+                "blackberry",
+                "blazer",
+                "cdm",
+                "cellphone",
+                "danger",
+                "ddipocket",
+                "docomo",
+                "dopod",
+                "elaine\/3\\.0",
+                "ericsson",
+                "eudoraweb",
+                "fly",
+                "haier",
+                "hiptop",
+                "hp\\.ipaq",
+                "htc",
+                "huawei",
+                "i\\-mobile",
+                "iemobile",
+                "iemobile\/7",
+                "iemobile\/9",
+                "j\\-phone",
+                "kddi",
+                "konka",
+                "kwc",
+                "kyocera\/wx310k",
+                "lenovo",
+                "lg",
+                "lg\/u990",
+                "lge\\ vx",
+                "midp",
+                "midp\\-2\\.0",
+                "mmef20",
+                "mmp",
+                "mobilephone",
+                "mot\\-v",
+                "motorola",
+                "msie\\ 10\\.0",
+                "netfront",
+                "newgen",
+                "newt",
+                "nintendo\\ ds",
+                "nintendo\\ wii",
+                "nitro",
+                "nokia",
+                "novarra",
+                "o2",
+                "openweb",
+                "opera\\ mobi",
+                "opera\\.mobi",
+                "p160u",
+                "palm",
+                "panasonic",
+                "pantech",
+                "pdxgw",
+                "pg",
+                "philips",
+                "phone",
+                "playbook",
+                "playstation\\ portable",
+                "portalmmm",
+                "\\bppc\\b",
+                "proxinet",
+                "psp",
+                "qtek",
+                "sagem",
+                "samsung",
+                "sanyo",
+                "sch",
+                "sch\\-i800",
+                "sec",
+                "sendo",
+                "sgh",
+                "sharp",
+                "sharp\\-tq\\-gx10",
+                "small",
+                "smartphone",
+                "softbank",
+                "sonyericsson",
+                "sph",
+                "symbian",
+                "symbian\\ os",
+                "symbianos",
+                "toshiba",
+                "treo",
+                "ts21i\\-10",
+                "up\\.browser",
+                "up\\.link",
+                "uts",
+                "vertu",
+                "vodafone",
+                "wap",
+                "willcome",
+                "windows\\ ce",
+                "windows\\.ce",
+                "winwap",
+                "xda",
+                "xoom",
+                "zte"
+            ]
+        }
+    },
+    "referrer.configuration_overloaded": false,
+    "referrer.enabled": false,
+    "referrer.rgroups": {
+        "search_engines": {
+            "theme": "",
+            "enabled": false,
+            "redirect": "",
+            "referrers": [
+                "google\\.com",
+                "yahoo\\.com",
+                "bing\\.com",
+                "ask\\.com",
+                "msn\\.com"
+            ]
+        }
+    },
+    "common.track_usage": false,
+    "common.tweeted": false,
+    "config.check": false,
+    "config.path": "",
+    "widget.latest.items": 3,
+    "widget.latest_news.items": 5,
+    "widget.pagespeed.enabled": true,
+    "widget.pagespeed.key": "",
+    "widget.pagespeed.key.restrict.referrer": "",
+    "widget.pagespeed.show_in_admin_bar": false,
+    "timelimit.email_send": 180,
+    "timelimit.varnish_purge": 300,
+    "timelimit.cache_flush": 600,
+    "timelimit.cache_gc": 600,
+    "timelimit.cdn_upload": 600,
+    "timelimit.cdn_delete": 300,
+    "timelimit.cdn_purge": 300,
+    "timelimit.cdn_import": 600,
+    "timelimit.cdn_test": 300,
+    "timelimit.domain_rename": 120,
+    "timelimit.minify_recommendations": 600,
+    "common.instance_id": 393748815,
+    "common.force_master": true,
+    "extensions.active": {
+        "newrelic": "w3-total-cache\/Extension_NewRelic_Plugin.php",
+        "fragmentcache": "w3-total-cache\/Extension_FragmentCache_Plugin.php",
+        "swarmify": "w3-total-cache\/Extension_Swarmify_Plugin.php"
+    },
+    "extensions.active_frontend": [],
+    "extensions.active_dropin": [],
+    "plugin.license_key": "",
+    "plugin.type": "",
+    "common.support": "",
+    "timelimit.cdn_container_create": 300,
+    "fragmentcache": {
+        "engine": "memcached",
+        "memcached.servers": [
+            "127.0.0.1:11211"
+        ],
+        "memcached.persistent": "1",
+        "memcached.aws_autodiscovery": "0",
+        "memcached.username": "",
+        "memcached.password": "",
+        "lifetime": "3600",
+        "file.gc": "3600",
+        "groups": ""
+    },
+    "pgcache.bad_behavior_path": "",
+    "newrelic": {
+        "monitoring_type": "apm"
+    }
+}
\ No newline at end of file

From a84adf71e8da75a5859740ae204263bad77801b7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 28 Jul 2020 18:02:42 +0200
Subject: [PATCH 1216/2300] W3TC optimal settings

---
 W3TC.json | 830 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 830 insertions(+)
 create mode 100644 W3TC.json

diff --git a/W3TC.json b/W3TC.json
new file mode 100644
index 00000000..7e1f0340
--- /dev/null
+++ b/W3TC.json
@@ -0,0 +1,830 @@
+{
+    "version": "0.14.3",
+    "cluster.messagebus.debug": false,
+    "cluster.messagebus.enabled": false,
+    "cluster.messagebus.sns.region": "",
+    "cluster.messagebus.sns.api_key": "",
+    "cluster.messagebus.sns.api_secret": "",
+    "cluster.messagebus.sns.topic_arn": "",
+    "dbcache.configuration_overloaded": false,
+    "dbcache.debug": false,
+    "dbcache.debug_purge": false,
+    "dbcache.enabled": true,
+    "dbcache.engine": "memcached",
+    "dbcache.file.gc": 3600,
+    "dbcache.file.locking": false,
+    "dbcache.lifetime": 3600,
+    "dbcache.memcached.persistent": true,
+    "dbcache.memcached.aws_autodiscovery": false,
+    "dbcache.memcached.servers": [
+        "127.0.0.1:11211"
+    ],
+    "dbcache.memcached.username": "",
+    "dbcache.memcached.password": "",
+    "dbcache.memcached.binary_protocol": true,
+    "dbcache.redis.persistent": true,
+    "dbcache.redis.servers": [
+        "127.0.0.1:6379"
+    ],
+    "dbcache.redis.password": "",
+    "dbcache.redis.dbid": 0,
+    "dbcache.use_filters": false,
+    "dbcache.reject.constants": [
+        "APP_REQUEST",
+        "DOING_CRON",
+        "DONOTCACHEDB",
+        "SHORTINIT",
+        "XMLRPC_REQUEST"
+    ],
+    "dbcache.reject.cookie": [],
+    "dbcache.reject.logged": true,
+    "dbcache.reject.sql": [
+        "gdsr_",
+        "wp_rg_",
+        "_wp_session_",
+        "_wc_session_"
+    ],
+    "dbcache.reject.uri": [
+        ""
+    ],
+    "dbcache.reject.words": [
+        "^\\s*insert\\b",
+        "^\\s*delete\\b",
+        "^\\s*update\\b",
+        "^\\s*replace\\b",
+        "^\\s*create\\b",
+        "^\\s*alter\\b",
+        "^\\s*show\\b",
+        "^\\s*set\\b",
+        "\\bautoload\\s+=\\s+'yes'",
+        "\\bsql_calc_found_rows\\b",
+        "\\bfound_rows\\(\\)"
+    ],
+    "lazyload.enabled": false,
+    "lazyload.process_img": true,
+    "lazyload.process_background": true,
+    "lazyload.googlemaps.google_maps_easy": false,
+    "lazyload.googlemaps.wp_google_maps": false,
+    "lazyload.googlemaps.wp_google_map_plugin": false,
+    "lazyload.exclude": [
+        "skip_lazy"
+    ],
+    "lazyload.embed_method": "async_head",
+    "objectcache.configuration_overloaded": false,
+    "objectcache.enabled": true,
+    "objectcache.debug": false,
+    "objectcache.debug_purge": false,
+    "objectcache.enabled_for_wp_admin": true,
+    "objectcache.fallback_transients": true,
+    "objectcache.engine": "memcached",
+    "objectcache.file.gc": 3600,
+    "objectcache.file.locking": false,
+    "objectcache.memcached.servers": [
+        "127.0.0.1:11211"
+    ],
+    "objectcache.memcached.persistent": true,
+    "objectcache.memcached.aws_autodiscovery": false,
+    "objectcache.memcached.username": "",
+    "objectcache.memcached.password": "",
+    "objectcache.memcached.binary_protocol": true,
+    "objectcache.redis.persistent": true,
+    "objectcache.redis.servers": [
+        "127.0.0.1:6379"
+    ],
+    "objectcache.redis.password": "",
+    "objectcache.redis.dbid": 0,
+    "objectcache.groups.global": [
+        "users",
+        "userlogins",
+        "usermeta",
+        "user_meta",
+        "site-transient",
+        "site-options",
+        "site-lookup",
+        "blog-lookup",
+        "blog-details",
+        "rss",
+        "global-posts"
+    ],
+    "objectcache.groups.nonpersistent": [
+        "comment",
+        "counts",
+        "plugins"
+    ],
+    "objectcache.lifetime": 3600,
+    "objectcache.purge.all": false,
+    "pgcache.configuration_overloaded": false,
+    "pgcache.enabled": true,
+    "pgcache.comment_cookie_ttl": 86400,
+    "pgcache.debug": false,
+    "pgcache.debug_purge": false,
+    "pgcache.engine": "memcached",
+    "pgcache.file.gc": 3600,
+    "pgcache.file.nfs": true,
+    "pgcache.file.locking": false,
+    "pgcache.lifetime": 86400,
+    "pgcache.memcached.servers": [
+        "127.0.0.1:11211"
+    ],
+    "pgcache.memcached.persistent": true,
+    "pgcache.memcached.aws_autodiscovery": false,
+    "pgcache.memcached.username": "",
+    "pgcache.memcached.password": "",
+    "pgcache.memcached.binary_protocol": true,
+    "pgcache.redis.persistent": true,
+    "pgcache.redis.servers": [
+        "127.0.0.1:6379"
+    ],
+    "pgcache.redis.password": "",
+    "pgcache.redis.dbid": 0,
+    "pgcache.cache.query": true,
+    "pgcache.cache.home": true,
+    "pgcache.cache.feed": true,
+    "pgcache.cache.nginx_handle_xml": false,
+    "pgcache.cache.ssl": true,
+    "pgcache.cache.404": false,
+    "pgcache.cache.headers": [
+        "Last-Modified",
+        "Content-Type",
+        "X-Pingback",
+        "P3P",
+        "Link"
+    ],
+    "pgcache.compatibility": false,
+    "pgcache.remove_charset": false,
+    "pgcache.accept.uri": [
+        "sitemap(_index)?\\.xml(\\.gz)?",
+        "([a-z0-9_\\-]+)?sitemap\\.xsl",
+        "[a-z0-9_\\-]+-sitemap([0-9]+)?\\.xml(\\.gz)?"
+    ],
+    "pgcache.accept.files": [
+        "wp-comments-popup.php",
+        "wp-links-opml.php",
+        "wp-locations.php"
+    ],
+    "pgcache.accept.qs": [
+        ""
+    ],
+    "pgcache.late_init": false,
+    "pgcache.late_caching": false,
+    "pgcache.mirrors.enabled": true,
+    "pgcache.mirrors.home_urls": [
+        ""
+    ],
+    "pgcache.reject.front_page": "0",
+    "pgcache.reject.logged": true,
+    "pgcache.reject.logged_roles": false,
+    "pgcache.reject.roles": [
+        ""
+    ],
+    "pgcache.reject.uri": [
+        "wp-.*\\.php",
+        "index\\.php"
+    ],
+    "pgcache.reject.categories": [
+        ""
+    ],
+    "pgcache.reject.tags": [
+        ""
+    ],
+    "pgcache.reject.authors": [
+        ""
+    ],
+    "pgcache.reject.custom": [
+        ""
+    ],
+    "pgcache.reject.ua": [
+        ""
+    ],
+    "pgcache.reject.cookie": [
+        "wptouch_switch_toggle"
+    ],
+    "pgcache.reject.request_head": false,
+    "pgcache.purge.front_page": "1",
+    "pgcache.purge.home": true,
+    "pgcache.purge.post": true,
+    "pgcache.purge.comments": false,
+    "pgcache.purge.author": false,
+    "pgcache.purge.terms": false,
+    "pgcache.purge.archive.daily": false,
+    "pgcache.purge.archive.monthly": false,
+    "pgcache.purge.archive.yearly": false,
+    "pgcache.purge.feed.blog": true,
+    "pgcache.purge.feed.comments": false,
+    "pgcache.purge.feed.author": false,
+    "pgcache.purge.feed.terms": false,
+    "pgcache.purge.feed.types": [
+        "rss2"
+    ],
+    "pgcache.purge.postpages_limit": 10,
+    "pgcache.purge.pages": [
+        ""
+    ],
+    "pgcache.purge.sitemap_regex": "([a-z0-9_\\-]*?)sitemap([a-z0-9_\\-]*)?\\.xml",
+    "pgcache.prime.enabled": false,
+    "pgcache.prime.interval": 3600,
+    "pgcache.prime.limit": 10,
+    "pgcache.prime.sitemap": "",
+    "pgcache.prime.post.enabled": false,
+    "pgcache.rest": "",
+    "pgcache.cookiegroups.enabled": false,
+    "pgcache.cookiegroups.groups": {
+        "mobile": {
+            "enabled": false,
+            "cache": true,
+            "cookies": [
+                "wptouch-pro-view=mobile",
+                "wptouch-pro-cache-state=mobile"
+            ]
+        },
+        "loggedin": {
+            "enabled": false,
+            "cache": true,
+            "cookies": [
+                "wordpress_logged_in_.*"
+            ]
+        },
+        "subscribers": {
+            "enabled": false,
+            "cache": true,
+            "cookies": [
+                "role=subscriber",
+                "role=member"
+            ]
+        }
+    },
+    "stats.enabled": false,
+    "stats.slot_seconds": 60,
+    "stats.slots_count": 60,
+    "stats.cpu.enabled": false,
+    "stats.access_log.enabled": false,
+    "stats.access_log.filename": "",
+    "stats.access_log.format": "%h %l %u %t \\\"%r\\\" %>s %O \\\"%{Referer}i\\\" \\\"%{User-Agent}i\\\"",
+    "stats.access_log.webserver": "apache",
+    "minify.configuration_overloaded": false,
+    "minify.enabled": false,
+    "minify.auto": true,
+    "minify.debug": false,
+    "minify.engine": "file",
+    "minify.error.notification": "",
+    "minify.file.gc": "86400",
+    "minify.file.nfs": true,
+    "minify.file.locking": false,
+    "minify.memcached.servers": [
+        "127.0.0.1:11211"
+    ],
+    "minify.memcached.persistent": true,
+    "minify.memcached.aws_autodiscovery": false,
+    "minify.memcached.username": "",
+    "minify.memcached.password": "",
+    "minify.memcached.binary_protocol": true,
+    "minify.redis.persistent": true,
+    "minify.redis.servers": [
+        "127.0.0.1:6379"
+    ],
+    "minify.redis.password": "",
+    "minify.redis.dbid": 0,
+    "minify.rewrite": "1",
+    "minify.options": [],
+    "minify.symlinks": [],
+    "minify.lifetime": "86400",
+    "minify.upload": true,
+    "minify.html.enable": "1",
+    "minify.html.engine": "html",
+    "minify.html.reject.feed": "0",
+    "minify.html.inline.css": "0",
+    "minify.html.inline.js": "0",
+    "minify.html.strip.crlf": "0",
+    "minify.html.comments.ignore": [
+        "google_ad_",
+        "RSPEAK_"
+    ],
+    "minify.css.combine": "0",
+    "minify.css.enable": "1",
+    "minify.css.engine": "css",
+    "minify.css.http2push": "0",
+    "minify.css.strip.comments": "0",
+    "minify.css.strip.crlf": "0",
+    "minify.css.embed": false,
+    "minify.css.imports": "",
+    "minify.css.groups": [],
+    "minify.js.http2push": "0",
+    "minify.js.enable": "1",
+    "minify.js.engine": "js",
+    "minify.js.combine.header": "0",
+    "minify.js.header.embed_type": "blocking",
+    "minify.js.combine.body": false,
+    "minify.js.body.embed_type": "blocking",
+    "minify.js.combine.footer": false,
+    "minify.js.footer.embed_type": "blocking",
+    "minify.js.strip.comments": "0",
+    "minify.js.strip.crlf": "0",
+    "minify.js.groups": [],
+    "minify.yuijs.path.java": "java",
+    "minify.yuijs.path.jar": "yuicompressor.jar",
+    "minify.yuijs.options.line-break": 5000,
+    "minify.yuijs.options.nomunge": false,
+    "minify.yuijs.options.preserve-semi": false,
+    "minify.yuijs.options.disable-optimizations": false,
+    "minify.yuicss.path.java": "java",
+    "minify.yuicss.path.jar": "yuicompressor.jar",
+    "minify.yuicss.options.line-break": 5000,
+    "minify.ccjs.path.java": "java",
+    "minify.ccjs.path.jar": "compiler.jar",
+    "minify.ccjs.options.compilation_level": "SIMPLE_OPTIMIZATIONS",
+    "minify.ccjs.options.formatting": "",
+    "minify.csstidy.options.remove_bslash": true,
+    "minify.csstidy.options.compress_colors": false,
+    "minify.csstidy.options.compress_font-weight": false,
+    "minify.csstidy.options.lowercase_s": false,
+    "minify.csstidy.options.optimise_shorthands": 0,
+    "minify.csstidy.options.remove_last_;": false,
+    "minify.csstidy.options.remove_space_before_important": false,
+    "minify.csstidy.options.case_properties": 1,
+    "minify.csstidy.options.sort_properties": false,
+    "minify.csstidy.options.sort_selectors": false,
+    "minify.csstidy.options.merge_selectors": 0,
+    "minify.csstidy.options.discard_invalid_selectors": false,
+    "minify.csstidy.options.discard_invalid_properties": false,
+    "minify.csstidy.options.css_level": "CSS3.0",
+    "minify.csstidy.options.preserve_css": false,
+    "minify.csstidy.options.timestamp": false,
+    "minify.csstidy.options.template": "highest_compression",
+    "minify.htmltidy.options.clean": false,
+    "minify.htmltidy.options.hide-comments": true,
+    "minify.htmltidy.options.wrap": 0,
+    "minify.reject.logged": "0",
+    "minify.reject.ua": [
+        ""
+    ],
+    "minify.reject.uri": [
+        ""
+    ],
+    "minify.reject.files.js": [
+        ""
+    ],
+    "minify.reject.files.css": [
+        ""
+    ],
+    "minify.cache.files": [
+        ""
+    ],
+    "minify.cache.files_regexp": "0",
+    "cdn.configuration_overloaded": false,
+    "cdn.enabled": false,
+    "cdn.debug": false,
+    "cdn.flush_manually": false,
+    "cdn.engine": "maxcdn",
+    "cdn.uploads.enable": true,
+    "cdn.includes.enable": true,
+    "cdn.includes.files": "*.css;*.js;*.gif;*.png;*.jpg;*.xml",
+    "cdn.theme.enable": true,
+    "cdn.theme.files": "*.css;*.js;*.gif;*.png;*.jpg;*.ico;*.ttf;*.otf;*.woff;*.woff2;*.less",
+    "cdn.minify.enable": true,
+    "cdn.custom.enable": true,
+    "cdn.custom.files": [
+        "favicon.ico",
+        "{wp_content_dir}\/gallery\/*",
+        "{wp_content_dir}\/uploads\/avatars\/*",
+        "{plugins_dir}\/wordpress-seo\/css\/xml-sitemap.xsl",
+        "{plugins_dir}\/wp-minify\/min*",
+        "{plugins_dir}\/*.js",
+        "{plugins_dir}\/*.css",
+        "{plugins_dir}\/*.gif",
+        "{plugins_dir}\/*.jpg",
+        "{plugins_dir}\/*.png"
+    ],
+    "cdn.import.files": false,
+    "cdn.queue.interval": 900,
+    "cdn.queue.limit": 25,
+    "cdn.force.rewrite": false,
+    "cdn.autoupload.enabled": false,
+    "cdn.autoupload.interval": 3600,
+    "cdn.canonical_header": false,
+    "cdn.admin.media_library": false,
+    "cdn.cors_header": true,
+    "cdn.ftp.host": "",
+    "cdn.ftp.type": "",
+    "cdn.ftp.user": "",
+    "cdn.ftp.pass": "",
+    "cdn.ftp.path": "",
+    "cdn.ftp.pasv": false,
+    "cdn.ftp.domain": [],
+    "cdn.ftp.ssl": "auto",
+    "cdn.ftp.default_keys": true,
+    "cdn.ftp.pubkey": "",
+    "cdn.ftp.privkey": "",
+    "cdn.google_drive.client_id": "",
+    "cdn.google_drive.refresh_token": "",
+    "cdn.google_drive.folder.id": "",
+    "cdn.google_drive.folder.title": "",
+    "cdn.google_drive.folder.url": "",
+    "cdn.highwinds.account_hash": "",
+    "cdn.highwinds.api_token": "",
+    "cdn.highwinds.host.hash_code": "",
+    "cdn.highwinds.host.domains": [],
+    "cdn.highwinds.ssl": "auto",
+    "cdn.s3.key": "",
+    "cdn.s3.secret": "",
+    "cdn.s3.bucket": "",
+    "cdn.s3.bucket.location": "us-east-1",
+    "cdn.s3.cname": [],
+    "cdn.s3.ssl": "auto",
+    "cdn.s3_compatible.api_host": "auto",
+    "cdn.cf.key": "",
+    "cdn.cf.secret": "",
+    "cdn.cf.bucket": "",
+    "cdn.cf.bucket.location": "us-east-1",
+    "cdn.cf.id": "",
+    "cdn.cf.cname": [],
+    "cdn.cf.ssl": "auto",
+    "cdn.cf2.key": "",
+    "cdn.cf2.secret": "",
+    "cdn.cf2.id": "",
+    "cdn.cf2.cname": [],
+    "cdn.cf2.ssl": "",
+    "cdn.rscf.user": "",
+    "cdn.rscf.key": "",
+    "cdn.rscf.location": "us",
+    "cdn.rscf.container": "",
+    "cdn.rscf.cname": [],
+    "cdn.rscf.ssl": "auto",
+    "cdn.rackspace_cdn.user_name": "",
+    "cdn.rackspace_cdn.api_key": "",
+    "cdn.rackspace_cdn.region": "",
+    "cdn.rackspace_cdn.service.access_url": "",
+    "cdn.rackspace_cdn.service.id": "",
+    "cdn.rackspace_cdn.service.name": "",
+    "cdn.rackspace_cdn.service.protocol": "http",
+    "cdn.rackspace_cdn.domains": [],
+    "cdn.azure.user": "",
+    "cdn.azure.key": "",
+    "cdn.azure.container": "",
+    "cdn.azure.cname": [],
+    "cdn.azure.ssl": "auto",
+    "cdn.mirror.domain": [],
+    "cdn.mirror.ssl": "auto",
+    "cdn.limelight.short_name": "",
+    "cdn.limelight.username": "",
+    "cdn.limelight.api_key": "",
+    "cdn.limelight.host.domains": [],
+    "cdn.limelight.ssl": "auto",
+    "cdn.maxcdn.authorization_key": "",
+    "cdn.maxcdn.domain": [],
+    "cdn.maxcdn.ssl": "auto",
+    "cdn.maxcdn.zone_id": 0,
+    "cdn.cotendo.username": "",
+    "cdn.cotendo.password": "",
+    "cdn.cotendo.zones": [],
+    "cdn.cotendo.domain": [],
+    "cdn.cotendo.ssl": "auto",
+    "cdn.akamai.username": "",
+    "cdn.akamai.password": "",
+    "cdn.akamai.email_notification": [],
+    "cdn.akamai.action": "invalidate",
+    "cdn.akamai.zone": "production",
+    "cdn.akamai.domain": [],
+    "cdn.akamai.ssl": "auto",
+    "cdn.edgecast.account": "",
+    "cdn.edgecast.token": "",
+    "cdn.edgecast.domain": [],
+    "cdn.edgecast.ssl": "auto",
+    "cdn.att.account": "",
+    "cdn.att.token": "",
+    "cdn.att.domain": [],
+    "cdn.att.ssl": "auto",
+    "cdn.stackpath.authorization_key": "",
+    "cdn.stackpath.domain": [],
+    "cdn.stackpath.ssl": "auto",
+    "cdn.stackpath.zone_id": 0,
+    "cdn.stackpath2.client_id": "",
+    "cdn.stackpath2.client_secret": "",
+    "cdn.stackpath2.stack_id": "",
+    "cdn.stackpath2.site_id": 0,
+    "cdn.stackpath2.site_root_domain": 0,
+    "cdn.stackpath2.domain": [],
+    "cdn.stackpath2.ssl": "auto",
+    "cdn.reject.admins": false,
+    "cdn.reject.logged_roles": false,
+    "cdn.reject.roles": [],
+    "cdn.reject.ua": [],
+    "cdn.reject.uri": [],
+    "cdn.reject.files": [
+        "{uploads_dir}\/wpcf7_captcha\/*",
+        "{uploads_dir}\/imagerotator.swf",
+        "{plugins_dir}\/wp-fb-autoconnect\/facebook-platform\/channel.html"
+    ],
+    "cdn.reject.ssl": false,
+    "cdnfsd.enabled": false,
+    "cdnfsd.engine": "",
+    "cdnfsd.debug": false,
+    "cdnfsd.cloudfront.access_key": "",
+    "cdnfsd.cloudfront.secret_key": "",
+    "cdnfsd.cloudfront.distribution_id": "",
+    "cdnfsd.limelight.short_name": "",
+    "cdnfsd.limelight.username": "",
+    "cdnfsd.limelight.api_key": "",
+    "cdnfsd.maxcdn.api_key": "",
+    "cdnfsd.maxcdn.zone_id": 0,
+    "cdnfsd.stackpath.api_key": "",
+    "cdnfsd.stackpath.zone_id": 0,
+    "cdnfsd.stackpath2.client_id": "",
+    "cdnfsd.stackpath2.client_secret": "",
+    "cdnfsd.stackpath2.stack_id": "",
+    "cdnfsd.stackpath2.site_id": 0,
+    "cdnfsd.stackpath2.site_root_domain": 0,
+    "cdnfsd.stackpath2.domain": [],
+    "cdnfsd.stackpath2.ssl": "auto",
+    "varnish.configuration_overloaded": false,
+    "varnish.enabled": false,
+    "varnish.debug": false,
+    "varnish.servers": [
+        ""
+    ],
+    "browsercache.configuration_overloaded": false,
+    "browsercache.enabled": false,
+    "browsercache.rewrite": false,
+    "browsercache.no404wp": false,
+    "browsercache.no404wp.exceptions": [
+        "robots\\.txt",
+        "[a-z0-9_\\-]*sitemap[a-z0-9_\\-]*\\.(xml|xsl|html)(\\.gz)?"
+    ],
+    "browsercache.cssjs.last_modified": true,
+    "browsercache.cssjs.compression": true,
+    "browsercache.cssjs.brotli": false,
+    "browsercache.cssjs.expires": true,
+    "browsercache.cssjs.lifetime": 31536000,
+    "browsercache.cssjs.nocookies": true,
+    "browsercache.cssjs.cache.control": false,
+    "browsercache.cssjs.cache.policy": "cache_public_maxage",
+    "browsercache.cssjs.etag": true,
+    "browsercache.cssjs.w3tc": false,
+    "browsercache.cssjs.replace": false,
+    "browsercache.cssjs.querystring": false,
+    "browsercache.html.compression": true,
+    "browsercache.html.brotli": false,
+    "browsercache.html.last_modified": true,
+    "browsercache.html.expires": false,
+    "browsercache.html.lifetime": 3600,
+    "browsercache.html.cache.control": false,
+    "browsercache.html.cache.policy": "cache_public_maxage",
+    "browsercache.html.etag": true,
+    "browsercache.html.w3tc": false,
+    "browsercache.html.replace": false,
+    "browsercache.other.last_modified": true,
+    "browsercache.other.compression": true,
+    "browsercache.other.brotli": false,
+    "browsercache.other.expires": true,
+    "browsercache.other.lifetime": 31536000,
+    "browsercache.other.nocookies": true,
+    "browsercache.other.cache.control": false,
+    "browsercache.other.cache.policy": "cache_public_maxage",
+    "browsercache.other.etag": true,
+    "browsercache.other.w3tc": false,
+    "browsercache.other.replace": false,
+    "browsercache.other.querystring": false,
+    "browsercache.replace.exceptions": [],
+    "browsercache.security.session.cookie_httponly": "",
+    "browsercache.security.session.cookie_secure": "",
+    "browsercache.security.session.use_only_cookies": "",
+    "browsercache.hsts": false,
+    "browsercache.security.hsts.directive": "maxage",
+    "browsercache.security.xfo": false,
+    "browsercache.security.xfo.directive": "same",
+    "browsercache.security.xfo.allow": "",
+    "browsercache.security.xss": false,
+    "browsercache.security.xss.directive": "block",
+    "browsercache.security.xcto": false,
+    "browsercache.security.pkp": false,
+    "browsercache.security.pkp.pin": "",
+    "browsercache.security.pkp.pin.backup": "",
+    "browsercache.security.pkp.extra": "maxage",
+    "browsercache.security.pkp.report.url": "",
+    "browsercache.security.pkp.report.only": "0",
+    "browsercache.security.referrer.policy": "false",
+    "browsercache.security.referrer.policy.directive": "no-referrer-when-downgrade",
+    "browsercache.security.csp": false,
+    "browsercache.security.csp.base": "",
+    "browsercache.security.csp.frame": "",
+    "browsercache.security.csp.connect": "",
+    "browsercache.security.csp.font": "",
+    "browsercache.security.csp.script": "",
+    "browsercache.security.csp.style": "",
+    "browsercache.security.csp.img": "",
+    "browsercache.security.csp.media": "",
+    "browsercache.security.csp.object": "",
+    "browsercache.security.csp.plugin": "",
+    "browsercache.security.csp.form": "",
+    "browsercache.security.csp.frame.ancestors": "",
+    "browsercache.security.csp.sandbox": "",
+    "browsercache.security.csp.default": "",
+    "browsercache.security.fp": false,
+    "browsercache.security.fp.values": [],
+    "mobile.configuration_overloaded": false,
+    "mobile.enabled": false,
+    "mobile.rgroups": {
+        "high": {
+            "theme": "",
+            "enabled": false,
+            "redirect": "",
+            "agents": [
+                "android",
+                "mobi",
+                "bada",
+                "incognito",
+                "kindle",
+                "maemo",
+                "opera\\ mini",
+                "s8000",
+                "series60",
+                "ucbrowser",
+                "ucweb",
+                "webmate",
+                "webos"
+            ]
+        },
+        "low": {
+            "theme": "",
+            "enabled": false,
+            "redirect": "",
+            "agents": [
+                "2\\.0\\ mmp",
+                "240x320",
+                "alcatel",
+                "amoi",
+                "asus",
+                "au\\-mic",
+                "audiovox",
+                "avantgo",
+                "benq",
+                "bird",
+                "blackberry",
+                "blazer",
+                "cdm",
+                "cellphone",
+                "danger",
+                "ddipocket",
+                "docomo",
+                "dopod",
+                "elaine\/3\\.0",
+                "ericsson",
+                "eudoraweb",
+                "fly",
+                "haier",
+                "hiptop",
+                "hp\\.ipaq",
+                "htc",
+                "huawei",
+                "i\\-mobile",
+                "iemobile",
+                "iemobile\/7",
+                "iemobile\/9",
+                "j\\-phone",
+                "kddi",
+                "konka",
+                "kwc",
+                "kyocera\/wx310k",
+                "lenovo",
+                "lg",
+                "lg\/u990",
+                "lge\\ vx",
+                "midp",
+                "midp\\-2\\.0",
+                "mmef20",
+                "mmp",
+                "mobilephone",
+                "mot\\-v",
+                "motorola",
+                "msie\\ 10\\.0",
+                "netfront",
+                "newgen",
+                "newt",
+                "nintendo\\ ds",
+                "nintendo\\ wii",
+                "nitro",
+                "nokia",
+                "novarra",
+                "o2",
+                "openweb",
+                "opera\\ mobi",
+                "opera\\.mobi",
+                "p160u",
+                "palm",
+                "panasonic",
+                "pantech",
+                "pdxgw",
+                "pg",
+                "philips",
+                "phone",
+                "playbook",
+                "playstation\\ portable",
+                "portalmmm",
+                "\\bppc\\b",
+                "proxinet",
+                "psp",
+                "qtek",
+                "sagem",
+                "samsung",
+                "sanyo",
+                "sch",
+                "sch\\-i800",
+                "sec",
+                "sendo",
+                "sgh",
+                "sharp",
+                "sharp\\-tq\\-gx10",
+                "small",
+                "smartphone",
+                "softbank",
+                "sonyericsson",
+                "sph",
+                "symbian",
+                "symbian\\ os",
+                "symbianos",
+                "toshiba",
+                "treo",
+                "ts21i\\-10",
+                "up\\.browser",
+                "up\\.link",
+                "uts",
+                "vertu",
+                "vodafone",
+                "wap",
+                "willcome",
+                "windows\\ ce",
+                "windows\\.ce",
+                "winwap",
+                "xda",
+                "xoom",
+                "zte"
+            ]
+        }
+    },
+    "referrer.configuration_overloaded": false,
+    "referrer.enabled": false,
+    "referrer.rgroups": {
+        "search_engines": {
+            "theme": "",
+            "enabled": false,
+            "redirect": "",
+            "referrers": [
+                "google\\.com",
+                "yahoo\\.com",
+                "bing\\.com",
+                "ask\\.com",
+                "msn\\.com"
+            ]
+        }
+    },
+    "common.track_usage": false,
+    "common.tweeted": false,
+    "config.check": false,
+    "config.path": "",
+    "widget.latest.items": 3,
+    "widget.latest_news.items": 5,
+    "widget.pagespeed.enabled": true,
+    "widget.pagespeed.key": "",
+    "widget.pagespeed.key.restrict.referrer": "",
+    "widget.pagespeed.show_in_admin_bar": false,
+    "timelimit.email_send": 180,
+    "timelimit.varnish_purge": 300,
+    "timelimit.cache_flush": 600,
+    "timelimit.cache_gc": 600,
+    "timelimit.cdn_upload": 600,
+    "timelimit.cdn_delete": 300,
+    "timelimit.cdn_purge": 300,
+    "timelimit.cdn_import": 600,
+    "timelimit.cdn_test": 300,
+    "timelimit.domain_rename": 120,
+    "timelimit.minify_recommendations": 600,
+    "common.instance_id": 393748815,
+    "common.force_master": true,
+    "extensions.active": {
+        "newrelic": "w3-total-cache\/Extension_NewRelic_Plugin.php",
+        "fragmentcache": "w3-total-cache\/Extension_FragmentCache_Plugin.php",
+        "swarmify": "w3-total-cache\/Extension_Swarmify_Plugin.php"
+    },
+    "extensions.active_frontend": [],
+    "extensions.active_dropin": [],
+    "plugin.license_key": "",
+    "plugin.type": "",
+    "common.support": "",
+    "timelimit.cdn_container_create": 300,
+    "fragmentcache": {
+        "engine": "memcached",
+        "memcached.servers": [
+            "127.0.0.1:11211"
+        ],
+        "memcached.persistent": "1",
+        "memcached.aws_autodiscovery": "0",
+        "memcached.username": "",
+        "memcached.password": "",
+        "lifetime": "3600",
+        "file.gc": "3600",
+        "groups": ""
+    },
+    "pgcache.bad_behavior_path": "",
+    "newrelic": {
+        "monitoring_type": "apm"
+    }
+}
\ No newline at end of file

From a26687e946b2bd4441d3222a001862d2be1d43dc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 29 Jul 2020 00:52:37 +0200
Subject: [PATCH 1217/2300] log vesta update

---
 bin/v-update-sys-vesta | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/bin/v-update-sys-vesta b/bin/v-update-sys-vesta
index d8df2aae..999120d6 100755
--- a/bin/v-update-sys-vesta
+++ b/bin/v-update-sys-vesta
@@ -45,11 +45,10 @@ if [ -n "$(command -v yum)" ]; then
     check_result $? "$package update failed" $E_UPDATE
 else
     # Update repo
-    apt-get update -o Dir::Etc::sourcelist="sources.list.d/vesta.list" \
-        -o Dir::Etc::sourceparts="-" -o APT::Get::List-Cleanup="0" -qq
+    apt-get update -o Dir::Etc::sourcelist="sources.list.d/vesta.list" -o Dir::Etc::sourceparts="-" -o APT::Get::List-Cleanup="0"  > /usr/local/vesta/log/update.log 2>&1
 
     # Update vesta package
-    apt-get -y -qq -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -o Dpkg::Options::="--force-confmiss" install $package > /dev/null 2>&1
+    apt-get -y -qq -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -o Dpkg::Options::="--force-confmiss" install $package >> /usr/local/vesta/log/update.log 2>&1
     check_result $? "$package update failed" $E_UPDATE
 fi
 

From 09ed586b5dc3b0a5433cc0ae688695c57904fb6d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 29 Jul 2020 11:13:41 +0200
Subject: [PATCH 1218/2300] myvesta update log

---
 bin/v-update-sys-vesta | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-update-sys-vesta b/bin/v-update-sys-vesta
index 999120d6..f3373823 100755
--- a/bin/v-update-sys-vesta
+++ b/bin/v-update-sys-vesta
@@ -45,10 +45,10 @@ if [ -n "$(command -v yum)" ]; then
     check_result $? "$package update failed" $E_UPDATE
 else
     # Update repo
-    apt-get update -o Dir::Etc::sourcelist="sources.list.d/vesta.list" -o Dir::Etc::sourceparts="-" -o APT::Get::List-Cleanup="0"  > /usr/local/vesta/log/update.log 2>&1
+    apt-get update -o Dir::Etc::sourcelist="sources.list.d/vesta.list" -o Dir::Etc::sourceparts="-" -o APT::Get::List-Cleanup="0"  > /usr/local/vesta/log/update-$package.log 2>&1
 
     # Update vesta package
-    apt-get -y -qq -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -o Dpkg::Options::="--force-confmiss" install $package >> /usr/local/vesta/log/update.log 2>&1
+    apt-get -y -qq -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -o Dpkg::Options::="--force-confmiss" install $package >> /usr/local/vesta/log/update-$package.log 2>&1
     check_result $? "$package update failed" $E_UPDATE
 fi
 

From a6a3671697cd08778709ad09e83ad5e65384c7ef Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 Jul 2020 14:11:08 +0200
Subject: [PATCH 1219/2300] Rename src/deb/for-download/tools/cpanel-import.sh
 to bin/v-import-cpanel-backup

---
 .../tools/cpanel-import.sh => bin/v-import-cpanel-backup          | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename src/deb/for-download/tools/cpanel-import.sh => bin/v-import-cpanel-backup (100%)

diff --git a/src/deb/for-download/tools/cpanel-import.sh b/bin/v-import-cpanel-backup
similarity index 100%
rename from src/deb/for-download/tools/cpanel-import.sh
rename to bin/v-import-cpanel-backup

From d52fbbc6c0e9bc963b175ff59cf26dc116773514 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 Jul 2020 14:14:57 +0200
Subject: [PATCH 1220/2300] Update Changelog.md

---
 Changelog.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 25ec830d..52182df3 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,8 @@
+Version 0.9.8-26-31 [30-Jul-2020]
+==================================================
+* [Feature] v-import-cpanel-backup command moved to vesta-bin folder (becoming standard myVesta command)
+* Starting to log auto-update output
+
 Version 0.9.8-26-30 [26-Jul-2020]
 ==================================================
 * New ASCII logo in installer

From 889c53bad99ac8006927c4aaca6977eaf8c709b2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 Jul 2020 14:16:56 +0200
Subject: [PATCH 1221/2300] Version 0.9.8-26-31

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index a1cc939d..2222efc9 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-30
+vesta-0.9.8-26-31

From fa83bcdc7e244dd51a4b5dd2130ba9349826d836 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 31 Jul 2020 01:05:09 +0200
Subject: [PATCH 1222/2300] Update README.md

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 54b59844..7a3e5866 100644
--- a/README.md
+++ b/README.md
@@ -7,7 +7,7 @@ We finally have normal homepage:
 Forum:
 - https://forum.myvestacp.com/
 
-Wiki:
+Knowledge base:
 - https://wiki.myvestacp.com/
 
 Changelog:
@@ -71,7 +71,7 @@ Useful tools
 
 + [Wordpress installer in one second](https://github.com/myvesta/vesta/blob/master/bin/v-install-wordpress)
 
-+ [Script for importing cPanel backups to Vesta](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/cpanel-import.sh)
++ [Script for importing cPanel backups to Vesta](https://forum.myvestacp.com/viewtopic.php?f=24&t=63)
 
 + [Cloning script that will copy the whole site from one domain to another (sub)domain](https://github.com/myvesta/vesta/blob/master/bin/v-clone-website)
 

From fb95dd6a401e34aed8b866137489788c1ed0a295 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 31 Jul 2020 01:40:11 +0200
Subject: [PATCH 1223/2300] Backup www folder in vesta_compile.sh

---
 src/deb/vesta_compile.sh | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 71e44c63..6a8e589e 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -44,10 +44,11 @@ GIT_SRC='https://raw.githubusercontent.com/myvesta/vesta/master/src'
 GIT_REP="$GIT_REP/deb"
 
 C_WEB_ADDRESS="c.myvestacp.com"
-PATH_OF_C_WEB_FOLDER_ROOT="/var/www/$C_WEB_ADDRESS/html"
+WWW_FOLDER="/var/www"
+PATH_OF_C_WEB_FOLDER_ROOT="$WWW_FOLDER/$C_WEB_ADDRESS/html"
 PATH_OF_C_WEB_FOLDER="$PATH_OF_C_WEB_FOLDER_ROOT/debian/$TARGET_DEB_VER"
 APT_WEB_ADDRESS="apt.myvestacp.com"
-PATH_OF_APT_REPO_ROOT="/var/www/$APT_WEB_ADDRESS/html"
+PATH_OF_APT_REPO_ROOT="$WWW_FOLDER/$APT_WEB_ADDRESS/html"
 PATH_OF_APT_REPO="$PATH_OF_APT_REPO_ROOT/$TARGET_DEB_NAME"
 
 VESTA_VER=$(curl -s https://raw.githubusercontent.com/myvesta/vesta/master/src/deb/latest.txt)
@@ -71,7 +72,7 @@ ZLIB='https://www.zlib.net/zlib-'$ZLIB_V'.tar.gz'
 PHP='http://de2.php.net/distributions/php-'$PHP_V'.tar.gz'
 
 # Set package dependencies for compiling
-SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config reprepro dpkg-sig git'
+SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config reprepro dpkg-sig git rsync'
 
 function press_enter {
     if [ $wait_to_press_enter -eq 1 ]; then
@@ -166,6 +167,12 @@ if [ $# -eq 0 ]; then
   exit 1
 fi
 
+if [ ! -d "/root/backup-www" ]; then
+    mkdir /root/backup-www
+fi
+echo "=== Making backup of $WWW_FOLDER"
+rsync -a $WWW_FOLDER/ /root/backup-www/
+
 if [ $build_deb_package -eq 1 ]; then
   if [ "$APTWEB_B" = true ]; then
     VESTAGIT_B='true'

From e48d42617d78e0a48ae6a2e9616004785ac266d5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 31 Jul 2020 01:48:58 +0200
Subject: [PATCH 1224/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 6a8e589e..d266d228 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -171,7 +171,7 @@ if [ ! -d "/root/backup-www" ]; then
     mkdir /root/backup-www
 fi
 echo "=== Making backup of $WWW_FOLDER"
-rsync -a $WWW_FOLDER/ /root/backup-www/
+rsync -a --delete $WWW_FOLDER/ /root/backup-www/
 
 if [ $build_deb_package -eq 1 ]; then
   if [ "$APTWEB_B" = true ]; then

From 62b0d755ad6604f11d6f1cf9b3f99903895ff1e9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Aug 2020 01:40:26 +0200
Subject: [PATCH 1225/2300] check if user is root in v-update-host-certificate

---
 bin/v-update-host-certificate | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/bin/v-update-host-certificate b/bin/v-update-host-certificate
index 71a87709..9da49aca 100755
--- a/bin/v-update-host-certificate
+++ b/bin/v-update-host-certificate
@@ -11,12 +11,11 @@
 #----------------------------------------------------------#
 
 whoami=$(whoami)
-if [ "$whoami" != "root" ] && [ "$whoami" != "admin" ] ; then
-    echo "You must be root or admin to execute this script";
-    exit 1;
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
 fi
 
-
 # Argument definition
 user=$1
 hostname=$2

From 2d8931e90838d5c140f9b24c448f27114c419ea0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Aug 2020 01:46:38 +0200
Subject: [PATCH 1226/2300] check if user is root in v-make-ip-ssl

---
 bin/v-make-ip-ssl | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-make-ip-ssl b/bin/v-make-ip-ssl
index 47e12b9d..e0e094fa 100644
--- a/bin/v-make-ip-ssl
+++ b/bin/v-make-ip-ssl
@@ -9,6 +9,12 @@
 #                    Variable&Function                     #
 #----------------------------------------------------------#
 
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
 # Argument definition
 user=$1
 domain=$2

From dd9f963b6fd5017ec1739d667b66bfe4c4d63758 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Aug 2020 01:47:00 +0200
Subject: [PATCH 1227/2300] check if user is root in
 v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 5fa9ee3e..8e6f8d48 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -9,6 +9,12 @@
 #                    Variable&Function                     #
 #----------------------------------------------------------#
 
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
 # Importing system environment
 source /etc/profile
 

From cd5ac5642387595cc8b852070ab8b6906a8786d0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Aug 2020 01:47:25 +0200
Subject: [PATCH 1228/2300] check if user is root in v-migrate-site-to-https

---
 bin/v-migrate-site-to-https | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-migrate-site-to-https b/bin/v-migrate-site-to-https
index 410855c6..6c6c8653 100644
--- a/bin/v-migrate-site-to-https
+++ b/bin/v-migrate-site-to-https
@@ -9,6 +9,12 @@
 #                    Variable&Function                     #
 #----------------------------------------------------------#
 
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
 # Argument definition
 domain=$1
 

From c553aafbd1fe721abfa8c166c4e9ed825541f885 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Aug 2020 01:47:44 +0200
Subject: [PATCH 1229/2300] check if user is root in
 v-move-domain-and-database-to-account

---
 bin/v-move-domain-and-database-to-account | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-move-domain-and-database-to-account b/bin/v-move-domain-and-database-to-account
index 4c2811de..d055e361 100644
--- a/bin/v-move-domain-and-database-to-account
+++ b/bin/v-move-domain-and-database-to-account
@@ -8,6 +8,12 @@
 #                    Variable&Function                     #
 #----------------------------------------------------------#
 
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
 # Argument definition
 domain=$1
 user=$2

From 59c5ff7412ad00844f9caba79424b2c67a08f477 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Aug 2020 01:48:13 +0200
Subject: [PATCH 1230/2300] check if user is root in v-install-wordpress

---
 bin/v-install-wordpress | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index b5578dc9..8e60dc6f 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -8,6 +8,12 @@
 #                    Variable&Function                     #
 #----------------------------------------------------------#
 
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
 # Argument definition
 domain=$1
 

From 9b26e480295ec3ca327caab64ac84f3d8b0625c0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Aug 2020 01:48:39 +0200
Subject: [PATCH 1231/2300] check if user is root in v-install-unsigned-ssl

---
 bin/v-install-unsigned-ssl | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/bin/v-install-unsigned-ssl b/bin/v-install-unsigned-ssl
index 85727c33..6b0e7c4a 100644
--- a/bin/v-install-unsigned-ssl
+++ b/bin/v-install-unsigned-ssl
@@ -5,11 +5,16 @@
 #
 # The function install unsigned SSL to domain
 
-
 #----------------------------------------------------------#
 #                    Variable&Function                     #
 #----------------------------------------------------------#
 
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
 # Argument definition
 if [ $# -lt 1 ]; then
     echo "usage: v-install-unsigned-ssl DOMAIN [RESTART]"

From 186beba0e95fa34f71ccf2e28d60ea27f2f730a3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Aug 2020 01:49:03 +0200
Subject: [PATCH 1232/2300] check if user is root in
 v-get-database-credentials-of-domain

---
 bin/v-get-database-credentials-of-domain | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-get-database-credentials-of-domain b/bin/v-get-database-credentials-of-domain
index 811527ca..60164226 100644
--- a/bin/v-get-database-credentials-of-domain
+++ b/bin/v-get-database-credentials-of-domain
@@ -9,6 +9,12 @@
 #                    Variable&Function                     #
 #----------------------------------------------------------#
 
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
 # Argument definition
 DOMAIN=$1
 SUBFOLDER=''

From c841bceac30f79f8445b4e3f2ee78db63fb0e70b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Aug 2020 01:51:07 +0200
Subject: [PATCH 1233/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 52182df3..09eb7116 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-32 [02-Aug-2020]
+==================================================
+* [Security] Making sure new myVesta commands can be called only by root
+
 Version 0.9.8-26-31 [30-Jul-2020]
 ==================================================
 * [Feature] v-import-cpanel-backup command moved to vesta-bin folder (becoming standard myVesta command)

From a66d88c0a1d9c6b17979bc87208284e9fec68c5d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Aug 2020 01:52:17 +0200
Subject: [PATCH 1234/2300] Version 0.9.8-26-32

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 2222efc9..391820ae 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-31
+vesta-0.9.8-26-32

From 66e003c6abc1ce4d8aebd71b6b2bec9a765781a0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Aug 2020 02:10:01 +0200
Subject: [PATCH 1235/2300] Create v-replace-in-file

---
 bin/v-replace-in-file | 47 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 bin/v-replace-in-file

diff --git a/bin/v-replace-in-file b/bin/v-replace-in-file
new file mode 100644
index 00000000..2162fd7b
--- /dev/null
+++ b/bin/v-replace-in-file
@@ -0,0 +1,47 @@
+#!/usr/bin/php
+<?php
+
+$current_user=exec('whoami', $output, $return_var);
+if ($current_user != 'root') {echo "You must be root to execute this script\n"; exit(1);}
+
+if (isset($argv)) {
+	if (count($argv)==4) {
+		$find=$argv[1];
+		$replace=$argv[2];
+		$file=$argv[3];
+	} else {
+		echo "Usage: v-replace-in-file 'findString' 'replaceString' file\n";
+		exit(2);
+	}
+}
+
+function fix_backslashes($s) {
+	$s=str_replace("\\n", "\n", $s);
+	$s=str_replace("\\r", "\r", $s);
+	$s=str_replace("\\t", "\t", $s);
+	return $s;
+}
+
+$find=fix_backslashes($find);
+$replace=fix_backslashes($replace);
+
+echo "Find: ".$find."\n";
+echo "Replace: ".$replace."\n";
+echo "File: ".$file."\n";
+
+if (!file_exists($file)) {
+	echo "ERROR: File not found!\n";
+	exit(3);
+}
+
+$buf=file_get_contents($file);
+
+if (strpos($buf, $find)===false) {
+	echo "ERROR: String not found!\n";
+	exit(4);
+}
+
+$buf=str_replace($find, $replace, $buf);
+$r=file_put_contents($file, $buf);
+if ($r) echo "Done.\n";
+exit(0);

From 1154ca137eb2cfa16d2a694373e29a14ec51c182 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 2 Aug 2020 02:12:07 +0200
Subject: [PATCH 1236/2300] Update Changelog.md

---
 Changelog.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Changelog.md b/Changelog.md
index 09eb7116..3fdf49b6 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,5 +1,6 @@
 Version 0.9.8-26-32 [02-Aug-2020]
 ==================================================
+* [Feature] v-replace-in-file command introduced
 * [Security] Making sure new myVesta commands can be called only by root
 
 Version 0.9.8-26-31 [30-Jul-2020]

From 348cecb0e98e34307877aa508071ba7ae5b7531b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 8 Aug 2020 23:34:04 +0200
Subject: [PATCH 1237/2300] Update convert-vesta-to-myvesta.sh

---
 src/deb/for-download/tools/convert-vesta-to-myvesta.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/deb/for-download/tools/convert-vesta-to-myvesta.sh b/src/deb/for-download/tools/convert-vesta-to-myvesta.sh
index 0154297f..0455d1da 100644
--- a/src/deb/for-download/tools/convert-vesta-to-myvesta.sh
+++ b/src/deb/for-download/tools/convert-vesta-to-myvesta.sh
@@ -1,6 +1,8 @@
 #!/bin/bash
 
 # *** Debian only ***
+# This script is NOT recommended, because a lot of myVesta features will not be added to server this way.
+# Better way is described here - https://forum.myvestacp.com/viewtopic.php?f=14&t=50
 
 wget -O - http://apt.myvestacp.com/deb_signing.key | sudo apt-key add -
 codename="$(cat /etc/os-release |grep VERSION= |cut -f 2 -d \(|cut -f 1 -d \))"

From d1041c5681fbaee645068814f56974d3fa3a4ae8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 14 Aug 2020 23:28:34 +0200
Subject: [PATCH 1238/2300] Delete W3TC.json

---
 W3TC.json | 830 ------------------------------------------------------
 1 file changed, 830 deletions(-)
 delete mode 100644 W3TC.json

diff --git a/W3TC.json b/W3TC.json
deleted file mode 100644
index 7e1f0340..00000000
--- a/W3TC.json
+++ /dev/null
@@ -1,830 +0,0 @@
-{
-    "version": "0.14.3",
-    "cluster.messagebus.debug": false,
-    "cluster.messagebus.enabled": false,
-    "cluster.messagebus.sns.region": "",
-    "cluster.messagebus.sns.api_key": "",
-    "cluster.messagebus.sns.api_secret": "",
-    "cluster.messagebus.sns.topic_arn": "",
-    "dbcache.configuration_overloaded": false,
-    "dbcache.debug": false,
-    "dbcache.debug_purge": false,
-    "dbcache.enabled": true,
-    "dbcache.engine": "memcached",
-    "dbcache.file.gc": 3600,
-    "dbcache.file.locking": false,
-    "dbcache.lifetime": 3600,
-    "dbcache.memcached.persistent": true,
-    "dbcache.memcached.aws_autodiscovery": false,
-    "dbcache.memcached.servers": [
-        "127.0.0.1:11211"
-    ],
-    "dbcache.memcached.username": "",
-    "dbcache.memcached.password": "",
-    "dbcache.memcached.binary_protocol": true,
-    "dbcache.redis.persistent": true,
-    "dbcache.redis.servers": [
-        "127.0.0.1:6379"
-    ],
-    "dbcache.redis.password": "",
-    "dbcache.redis.dbid": 0,
-    "dbcache.use_filters": false,
-    "dbcache.reject.constants": [
-        "APP_REQUEST",
-        "DOING_CRON",
-        "DONOTCACHEDB",
-        "SHORTINIT",
-        "XMLRPC_REQUEST"
-    ],
-    "dbcache.reject.cookie": [],
-    "dbcache.reject.logged": true,
-    "dbcache.reject.sql": [
-        "gdsr_",
-        "wp_rg_",
-        "_wp_session_",
-        "_wc_session_"
-    ],
-    "dbcache.reject.uri": [
-        ""
-    ],
-    "dbcache.reject.words": [
-        "^\\s*insert\\b",
-        "^\\s*delete\\b",
-        "^\\s*update\\b",
-        "^\\s*replace\\b",
-        "^\\s*create\\b",
-        "^\\s*alter\\b",
-        "^\\s*show\\b",
-        "^\\s*set\\b",
-        "\\bautoload\\s+=\\s+'yes'",
-        "\\bsql_calc_found_rows\\b",
-        "\\bfound_rows\\(\\)"
-    ],
-    "lazyload.enabled": false,
-    "lazyload.process_img": true,
-    "lazyload.process_background": true,
-    "lazyload.googlemaps.google_maps_easy": false,
-    "lazyload.googlemaps.wp_google_maps": false,
-    "lazyload.googlemaps.wp_google_map_plugin": false,
-    "lazyload.exclude": [
-        "skip_lazy"
-    ],
-    "lazyload.embed_method": "async_head",
-    "objectcache.configuration_overloaded": false,
-    "objectcache.enabled": true,
-    "objectcache.debug": false,
-    "objectcache.debug_purge": false,
-    "objectcache.enabled_for_wp_admin": true,
-    "objectcache.fallback_transients": true,
-    "objectcache.engine": "memcached",
-    "objectcache.file.gc": 3600,
-    "objectcache.file.locking": false,
-    "objectcache.memcached.servers": [
-        "127.0.0.1:11211"
-    ],
-    "objectcache.memcached.persistent": true,
-    "objectcache.memcached.aws_autodiscovery": false,
-    "objectcache.memcached.username": "",
-    "objectcache.memcached.password": "",
-    "objectcache.memcached.binary_protocol": true,
-    "objectcache.redis.persistent": true,
-    "objectcache.redis.servers": [
-        "127.0.0.1:6379"
-    ],
-    "objectcache.redis.password": "",
-    "objectcache.redis.dbid": 0,
-    "objectcache.groups.global": [
-        "users",
-        "userlogins",
-        "usermeta",
-        "user_meta",
-        "site-transient",
-        "site-options",
-        "site-lookup",
-        "blog-lookup",
-        "blog-details",
-        "rss",
-        "global-posts"
-    ],
-    "objectcache.groups.nonpersistent": [
-        "comment",
-        "counts",
-        "plugins"
-    ],
-    "objectcache.lifetime": 3600,
-    "objectcache.purge.all": false,
-    "pgcache.configuration_overloaded": false,
-    "pgcache.enabled": true,
-    "pgcache.comment_cookie_ttl": 86400,
-    "pgcache.debug": false,
-    "pgcache.debug_purge": false,
-    "pgcache.engine": "memcached",
-    "pgcache.file.gc": 3600,
-    "pgcache.file.nfs": true,
-    "pgcache.file.locking": false,
-    "pgcache.lifetime": 86400,
-    "pgcache.memcached.servers": [
-        "127.0.0.1:11211"
-    ],
-    "pgcache.memcached.persistent": true,
-    "pgcache.memcached.aws_autodiscovery": false,
-    "pgcache.memcached.username": "",
-    "pgcache.memcached.password": "",
-    "pgcache.memcached.binary_protocol": true,
-    "pgcache.redis.persistent": true,
-    "pgcache.redis.servers": [
-        "127.0.0.1:6379"
-    ],
-    "pgcache.redis.password": "",
-    "pgcache.redis.dbid": 0,
-    "pgcache.cache.query": true,
-    "pgcache.cache.home": true,
-    "pgcache.cache.feed": true,
-    "pgcache.cache.nginx_handle_xml": false,
-    "pgcache.cache.ssl": true,
-    "pgcache.cache.404": false,
-    "pgcache.cache.headers": [
-        "Last-Modified",
-        "Content-Type",
-        "X-Pingback",
-        "P3P",
-        "Link"
-    ],
-    "pgcache.compatibility": false,
-    "pgcache.remove_charset": false,
-    "pgcache.accept.uri": [
-        "sitemap(_index)?\\.xml(\\.gz)?",
-        "([a-z0-9_\\-]+)?sitemap\\.xsl",
-        "[a-z0-9_\\-]+-sitemap([0-9]+)?\\.xml(\\.gz)?"
-    ],
-    "pgcache.accept.files": [
-        "wp-comments-popup.php",
-        "wp-links-opml.php",
-        "wp-locations.php"
-    ],
-    "pgcache.accept.qs": [
-        ""
-    ],
-    "pgcache.late_init": false,
-    "pgcache.late_caching": false,
-    "pgcache.mirrors.enabled": true,
-    "pgcache.mirrors.home_urls": [
-        ""
-    ],
-    "pgcache.reject.front_page": "0",
-    "pgcache.reject.logged": true,
-    "pgcache.reject.logged_roles": false,
-    "pgcache.reject.roles": [
-        ""
-    ],
-    "pgcache.reject.uri": [
-        "wp-.*\\.php",
-        "index\\.php"
-    ],
-    "pgcache.reject.categories": [
-        ""
-    ],
-    "pgcache.reject.tags": [
-        ""
-    ],
-    "pgcache.reject.authors": [
-        ""
-    ],
-    "pgcache.reject.custom": [
-        ""
-    ],
-    "pgcache.reject.ua": [
-        ""
-    ],
-    "pgcache.reject.cookie": [
-        "wptouch_switch_toggle"
-    ],
-    "pgcache.reject.request_head": false,
-    "pgcache.purge.front_page": "1",
-    "pgcache.purge.home": true,
-    "pgcache.purge.post": true,
-    "pgcache.purge.comments": false,
-    "pgcache.purge.author": false,
-    "pgcache.purge.terms": false,
-    "pgcache.purge.archive.daily": false,
-    "pgcache.purge.archive.monthly": false,
-    "pgcache.purge.archive.yearly": false,
-    "pgcache.purge.feed.blog": true,
-    "pgcache.purge.feed.comments": false,
-    "pgcache.purge.feed.author": false,
-    "pgcache.purge.feed.terms": false,
-    "pgcache.purge.feed.types": [
-        "rss2"
-    ],
-    "pgcache.purge.postpages_limit": 10,
-    "pgcache.purge.pages": [
-        ""
-    ],
-    "pgcache.purge.sitemap_regex": "([a-z0-9_\\-]*?)sitemap([a-z0-9_\\-]*)?\\.xml",
-    "pgcache.prime.enabled": false,
-    "pgcache.prime.interval": 3600,
-    "pgcache.prime.limit": 10,
-    "pgcache.prime.sitemap": "",
-    "pgcache.prime.post.enabled": false,
-    "pgcache.rest": "",
-    "pgcache.cookiegroups.enabled": false,
-    "pgcache.cookiegroups.groups": {
-        "mobile": {
-            "enabled": false,
-            "cache": true,
-            "cookies": [
-                "wptouch-pro-view=mobile",
-                "wptouch-pro-cache-state=mobile"
-            ]
-        },
-        "loggedin": {
-            "enabled": false,
-            "cache": true,
-            "cookies": [
-                "wordpress_logged_in_.*"
-            ]
-        },
-        "subscribers": {
-            "enabled": false,
-            "cache": true,
-            "cookies": [
-                "role=subscriber",
-                "role=member"
-            ]
-        }
-    },
-    "stats.enabled": false,
-    "stats.slot_seconds": 60,
-    "stats.slots_count": 60,
-    "stats.cpu.enabled": false,
-    "stats.access_log.enabled": false,
-    "stats.access_log.filename": "",
-    "stats.access_log.format": "%h %l %u %t \\\"%r\\\" %>s %O \\\"%{Referer}i\\\" \\\"%{User-Agent}i\\\"",
-    "stats.access_log.webserver": "apache",
-    "minify.configuration_overloaded": false,
-    "minify.enabled": false,
-    "minify.auto": true,
-    "minify.debug": false,
-    "minify.engine": "file",
-    "minify.error.notification": "",
-    "minify.file.gc": "86400",
-    "minify.file.nfs": true,
-    "minify.file.locking": false,
-    "minify.memcached.servers": [
-        "127.0.0.1:11211"
-    ],
-    "minify.memcached.persistent": true,
-    "minify.memcached.aws_autodiscovery": false,
-    "minify.memcached.username": "",
-    "minify.memcached.password": "",
-    "minify.memcached.binary_protocol": true,
-    "minify.redis.persistent": true,
-    "minify.redis.servers": [
-        "127.0.0.1:6379"
-    ],
-    "minify.redis.password": "",
-    "minify.redis.dbid": 0,
-    "minify.rewrite": "1",
-    "minify.options": [],
-    "minify.symlinks": [],
-    "minify.lifetime": "86400",
-    "minify.upload": true,
-    "minify.html.enable": "1",
-    "minify.html.engine": "html",
-    "minify.html.reject.feed": "0",
-    "minify.html.inline.css": "0",
-    "minify.html.inline.js": "0",
-    "minify.html.strip.crlf": "0",
-    "minify.html.comments.ignore": [
-        "google_ad_",
-        "RSPEAK_"
-    ],
-    "minify.css.combine": "0",
-    "minify.css.enable": "1",
-    "minify.css.engine": "css",
-    "minify.css.http2push": "0",
-    "minify.css.strip.comments": "0",
-    "minify.css.strip.crlf": "0",
-    "minify.css.embed": false,
-    "minify.css.imports": "",
-    "minify.css.groups": [],
-    "minify.js.http2push": "0",
-    "minify.js.enable": "1",
-    "minify.js.engine": "js",
-    "minify.js.combine.header": "0",
-    "minify.js.header.embed_type": "blocking",
-    "minify.js.combine.body": false,
-    "minify.js.body.embed_type": "blocking",
-    "minify.js.combine.footer": false,
-    "minify.js.footer.embed_type": "blocking",
-    "minify.js.strip.comments": "0",
-    "minify.js.strip.crlf": "0",
-    "minify.js.groups": [],
-    "minify.yuijs.path.java": "java",
-    "minify.yuijs.path.jar": "yuicompressor.jar",
-    "minify.yuijs.options.line-break": 5000,
-    "minify.yuijs.options.nomunge": false,
-    "minify.yuijs.options.preserve-semi": false,
-    "minify.yuijs.options.disable-optimizations": false,
-    "minify.yuicss.path.java": "java",
-    "minify.yuicss.path.jar": "yuicompressor.jar",
-    "minify.yuicss.options.line-break": 5000,
-    "minify.ccjs.path.java": "java",
-    "minify.ccjs.path.jar": "compiler.jar",
-    "minify.ccjs.options.compilation_level": "SIMPLE_OPTIMIZATIONS",
-    "minify.ccjs.options.formatting": "",
-    "minify.csstidy.options.remove_bslash": true,
-    "minify.csstidy.options.compress_colors": false,
-    "minify.csstidy.options.compress_font-weight": false,
-    "minify.csstidy.options.lowercase_s": false,
-    "minify.csstidy.options.optimise_shorthands": 0,
-    "minify.csstidy.options.remove_last_;": false,
-    "minify.csstidy.options.remove_space_before_important": false,
-    "minify.csstidy.options.case_properties": 1,
-    "minify.csstidy.options.sort_properties": false,
-    "minify.csstidy.options.sort_selectors": false,
-    "minify.csstidy.options.merge_selectors": 0,
-    "minify.csstidy.options.discard_invalid_selectors": false,
-    "minify.csstidy.options.discard_invalid_properties": false,
-    "minify.csstidy.options.css_level": "CSS3.0",
-    "minify.csstidy.options.preserve_css": false,
-    "minify.csstidy.options.timestamp": false,
-    "minify.csstidy.options.template": "highest_compression",
-    "minify.htmltidy.options.clean": false,
-    "minify.htmltidy.options.hide-comments": true,
-    "minify.htmltidy.options.wrap": 0,
-    "minify.reject.logged": "0",
-    "minify.reject.ua": [
-        ""
-    ],
-    "minify.reject.uri": [
-        ""
-    ],
-    "minify.reject.files.js": [
-        ""
-    ],
-    "minify.reject.files.css": [
-        ""
-    ],
-    "minify.cache.files": [
-        ""
-    ],
-    "minify.cache.files_regexp": "0",
-    "cdn.configuration_overloaded": false,
-    "cdn.enabled": false,
-    "cdn.debug": false,
-    "cdn.flush_manually": false,
-    "cdn.engine": "maxcdn",
-    "cdn.uploads.enable": true,
-    "cdn.includes.enable": true,
-    "cdn.includes.files": "*.css;*.js;*.gif;*.png;*.jpg;*.xml",
-    "cdn.theme.enable": true,
-    "cdn.theme.files": "*.css;*.js;*.gif;*.png;*.jpg;*.ico;*.ttf;*.otf;*.woff;*.woff2;*.less",
-    "cdn.minify.enable": true,
-    "cdn.custom.enable": true,
-    "cdn.custom.files": [
-        "favicon.ico",
-        "{wp_content_dir}\/gallery\/*",
-        "{wp_content_dir}\/uploads\/avatars\/*",
-        "{plugins_dir}\/wordpress-seo\/css\/xml-sitemap.xsl",
-        "{plugins_dir}\/wp-minify\/min*",
-        "{plugins_dir}\/*.js",
-        "{plugins_dir}\/*.css",
-        "{plugins_dir}\/*.gif",
-        "{plugins_dir}\/*.jpg",
-        "{plugins_dir}\/*.png"
-    ],
-    "cdn.import.files": false,
-    "cdn.queue.interval": 900,
-    "cdn.queue.limit": 25,
-    "cdn.force.rewrite": false,
-    "cdn.autoupload.enabled": false,
-    "cdn.autoupload.interval": 3600,
-    "cdn.canonical_header": false,
-    "cdn.admin.media_library": false,
-    "cdn.cors_header": true,
-    "cdn.ftp.host": "",
-    "cdn.ftp.type": "",
-    "cdn.ftp.user": "",
-    "cdn.ftp.pass": "",
-    "cdn.ftp.path": "",
-    "cdn.ftp.pasv": false,
-    "cdn.ftp.domain": [],
-    "cdn.ftp.ssl": "auto",
-    "cdn.ftp.default_keys": true,
-    "cdn.ftp.pubkey": "",
-    "cdn.ftp.privkey": "",
-    "cdn.google_drive.client_id": "",
-    "cdn.google_drive.refresh_token": "",
-    "cdn.google_drive.folder.id": "",
-    "cdn.google_drive.folder.title": "",
-    "cdn.google_drive.folder.url": "",
-    "cdn.highwinds.account_hash": "",
-    "cdn.highwinds.api_token": "",
-    "cdn.highwinds.host.hash_code": "",
-    "cdn.highwinds.host.domains": [],
-    "cdn.highwinds.ssl": "auto",
-    "cdn.s3.key": "",
-    "cdn.s3.secret": "",
-    "cdn.s3.bucket": "",
-    "cdn.s3.bucket.location": "us-east-1",
-    "cdn.s3.cname": [],
-    "cdn.s3.ssl": "auto",
-    "cdn.s3_compatible.api_host": "auto",
-    "cdn.cf.key": "",
-    "cdn.cf.secret": "",
-    "cdn.cf.bucket": "",
-    "cdn.cf.bucket.location": "us-east-1",
-    "cdn.cf.id": "",
-    "cdn.cf.cname": [],
-    "cdn.cf.ssl": "auto",
-    "cdn.cf2.key": "",
-    "cdn.cf2.secret": "",
-    "cdn.cf2.id": "",
-    "cdn.cf2.cname": [],
-    "cdn.cf2.ssl": "",
-    "cdn.rscf.user": "",
-    "cdn.rscf.key": "",
-    "cdn.rscf.location": "us",
-    "cdn.rscf.container": "",
-    "cdn.rscf.cname": [],
-    "cdn.rscf.ssl": "auto",
-    "cdn.rackspace_cdn.user_name": "",
-    "cdn.rackspace_cdn.api_key": "",
-    "cdn.rackspace_cdn.region": "",
-    "cdn.rackspace_cdn.service.access_url": "",
-    "cdn.rackspace_cdn.service.id": "",
-    "cdn.rackspace_cdn.service.name": "",
-    "cdn.rackspace_cdn.service.protocol": "http",
-    "cdn.rackspace_cdn.domains": [],
-    "cdn.azure.user": "",
-    "cdn.azure.key": "",
-    "cdn.azure.container": "",
-    "cdn.azure.cname": [],
-    "cdn.azure.ssl": "auto",
-    "cdn.mirror.domain": [],
-    "cdn.mirror.ssl": "auto",
-    "cdn.limelight.short_name": "",
-    "cdn.limelight.username": "",
-    "cdn.limelight.api_key": "",
-    "cdn.limelight.host.domains": [],
-    "cdn.limelight.ssl": "auto",
-    "cdn.maxcdn.authorization_key": "",
-    "cdn.maxcdn.domain": [],
-    "cdn.maxcdn.ssl": "auto",
-    "cdn.maxcdn.zone_id": 0,
-    "cdn.cotendo.username": "",
-    "cdn.cotendo.password": "",
-    "cdn.cotendo.zones": [],
-    "cdn.cotendo.domain": [],
-    "cdn.cotendo.ssl": "auto",
-    "cdn.akamai.username": "",
-    "cdn.akamai.password": "",
-    "cdn.akamai.email_notification": [],
-    "cdn.akamai.action": "invalidate",
-    "cdn.akamai.zone": "production",
-    "cdn.akamai.domain": [],
-    "cdn.akamai.ssl": "auto",
-    "cdn.edgecast.account": "",
-    "cdn.edgecast.token": "",
-    "cdn.edgecast.domain": [],
-    "cdn.edgecast.ssl": "auto",
-    "cdn.att.account": "",
-    "cdn.att.token": "",
-    "cdn.att.domain": [],
-    "cdn.att.ssl": "auto",
-    "cdn.stackpath.authorization_key": "",
-    "cdn.stackpath.domain": [],
-    "cdn.stackpath.ssl": "auto",
-    "cdn.stackpath.zone_id": 0,
-    "cdn.stackpath2.client_id": "",
-    "cdn.stackpath2.client_secret": "",
-    "cdn.stackpath2.stack_id": "",
-    "cdn.stackpath2.site_id": 0,
-    "cdn.stackpath2.site_root_domain": 0,
-    "cdn.stackpath2.domain": [],
-    "cdn.stackpath2.ssl": "auto",
-    "cdn.reject.admins": false,
-    "cdn.reject.logged_roles": false,
-    "cdn.reject.roles": [],
-    "cdn.reject.ua": [],
-    "cdn.reject.uri": [],
-    "cdn.reject.files": [
-        "{uploads_dir}\/wpcf7_captcha\/*",
-        "{uploads_dir}\/imagerotator.swf",
-        "{plugins_dir}\/wp-fb-autoconnect\/facebook-platform\/channel.html"
-    ],
-    "cdn.reject.ssl": false,
-    "cdnfsd.enabled": false,
-    "cdnfsd.engine": "",
-    "cdnfsd.debug": false,
-    "cdnfsd.cloudfront.access_key": "",
-    "cdnfsd.cloudfront.secret_key": "",
-    "cdnfsd.cloudfront.distribution_id": "",
-    "cdnfsd.limelight.short_name": "",
-    "cdnfsd.limelight.username": "",
-    "cdnfsd.limelight.api_key": "",
-    "cdnfsd.maxcdn.api_key": "",
-    "cdnfsd.maxcdn.zone_id": 0,
-    "cdnfsd.stackpath.api_key": "",
-    "cdnfsd.stackpath.zone_id": 0,
-    "cdnfsd.stackpath2.client_id": "",
-    "cdnfsd.stackpath2.client_secret": "",
-    "cdnfsd.stackpath2.stack_id": "",
-    "cdnfsd.stackpath2.site_id": 0,
-    "cdnfsd.stackpath2.site_root_domain": 0,
-    "cdnfsd.stackpath2.domain": [],
-    "cdnfsd.stackpath2.ssl": "auto",
-    "varnish.configuration_overloaded": false,
-    "varnish.enabled": false,
-    "varnish.debug": false,
-    "varnish.servers": [
-        ""
-    ],
-    "browsercache.configuration_overloaded": false,
-    "browsercache.enabled": false,
-    "browsercache.rewrite": false,
-    "browsercache.no404wp": false,
-    "browsercache.no404wp.exceptions": [
-        "robots\\.txt",
-        "[a-z0-9_\\-]*sitemap[a-z0-9_\\-]*\\.(xml|xsl|html)(\\.gz)?"
-    ],
-    "browsercache.cssjs.last_modified": true,
-    "browsercache.cssjs.compression": true,
-    "browsercache.cssjs.brotli": false,
-    "browsercache.cssjs.expires": true,
-    "browsercache.cssjs.lifetime": 31536000,
-    "browsercache.cssjs.nocookies": true,
-    "browsercache.cssjs.cache.control": false,
-    "browsercache.cssjs.cache.policy": "cache_public_maxage",
-    "browsercache.cssjs.etag": true,
-    "browsercache.cssjs.w3tc": false,
-    "browsercache.cssjs.replace": false,
-    "browsercache.cssjs.querystring": false,
-    "browsercache.html.compression": true,
-    "browsercache.html.brotli": false,
-    "browsercache.html.last_modified": true,
-    "browsercache.html.expires": false,
-    "browsercache.html.lifetime": 3600,
-    "browsercache.html.cache.control": false,
-    "browsercache.html.cache.policy": "cache_public_maxage",
-    "browsercache.html.etag": true,
-    "browsercache.html.w3tc": false,
-    "browsercache.html.replace": false,
-    "browsercache.other.last_modified": true,
-    "browsercache.other.compression": true,
-    "browsercache.other.brotli": false,
-    "browsercache.other.expires": true,
-    "browsercache.other.lifetime": 31536000,
-    "browsercache.other.nocookies": true,
-    "browsercache.other.cache.control": false,
-    "browsercache.other.cache.policy": "cache_public_maxage",
-    "browsercache.other.etag": true,
-    "browsercache.other.w3tc": false,
-    "browsercache.other.replace": false,
-    "browsercache.other.querystring": false,
-    "browsercache.replace.exceptions": [],
-    "browsercache.security.session.cookie_httponly": "",
-    "browsercache.security.session.cookie_secure": "",
-    "browsercache.security.session.use_only_cookies": "",
-    "browsercache.hsts": false,
-    "browsercache.security.hsts.directive": "maxage",
-    "browsercache.security.xfo": false,
-    "browsercache.security.xfo.directive": "same",
-    "browsercache.security.xfo.allow": "",
-    "browsercache.security.xss": false,
-    "browsercache.security.xss.directive": "block",
-    "browsercache.security.xcto": false,
-    "browsercache.security.pkp": false,
-    "browsercache.security.pkp.pin": "",
-    "browsercache.security.pkp.pin.backup": "",
-    "browsercache.security.pkp.extra": "maxage",
-    "browsercache.security.pkp.report.url": "",
-    "browsercache.security.pkp.report.only": "0",
-    "browsercache.security.referrer.policy": "false",
-    "browsercache.security.referrer.policy.directive": "no-referrer-when-downgrade",
-    "browsercache.security.csp": false,
-    "browsercache.security.csp.base": "",
-    "browsercache.security.csp.frame": "",
-    "browsercache.security.csp.connect": "",
-    "browsercache.security.csp.font": "",
-    "browsercache.security.csp.script": "",
-    "browsercache.security.csp.style": "",
-    "browsercache.security.csp.img": "",
-    "browsercache.security.csp.media": "",
-    "browsercache.security.csp.object": "",
-    "browsercache.security.csp.plugin": "",
-    "browsercache.security.csp.form": "",
-    "browsercache.security.csp.frame.ancestors": "",
-    "browsercache.security.csp.sandbox": "",
-    "browsercache.security.csp.default": "",
-    "browsercache.security.fp": false,
-    "browsercache.security.fp.values": [],
-    "mobile.configuration_overloaded": false,
-    "mobile.enabled": false,
-    "mobile.rgroups": {
-        "high": {
-            "theme": "",
-            "enabled": false,
-            "redirect": "",
-            "agents": [
-                "android",
-                "mobi",
-                "bada",
-                "incognito",
-                "kindle",
-                "maemo",
-                "opera\\ mini",
-                "s8000",
-                "series60",
-                "ucbrowser",
-                "ucweb",
-                "webmate",
-                "webos"
-            ]
-        },
-        "low": {
-            "theme": "",
-            "enabled": false,
-            "redirect": "",
-            "agents": [
-                "2\\.0\\ mmp",
-                "240x320",
-                "alcatel",
-                "amoi",
-                "asus",
-                "au\\-mic",
-                "audiovox",
-                "avantgo",
-                "benq",
-                "bird",
-                "blackberry",
-                "blazer",
-                "cdm",
-                "cellphone",
-                "danger",
-                "ddipocket",
-                "docomo",
-                "dopod",
-                "elaine\/3\\.0",
-                "ericsson",
-                "eudoraweb",
-                "fly",
-                "haier",
-                "hiptop",
-                "hp\\.ipaq",
-                "htc",
-                "huawei",
-                "i\\-mobile",
-                "iemobile",
-                "iemobile\/7",
-                "iemobile\/9",
-                "j\\-phone",
-                "kddi",
-                "konka",
-                "kwc",
-                "kyocera\/wx310k",
-                "lenovo",
-                "lg",
-                "lg\/u990",
-                "lge\\ vx",
-                "midp",
-                "midp\\-2\\.0",
-                "mmef20",
-                "mmp",
-                "mobilephone",
-                "mot\\-v",
-                "motorola",
-                "msie\\ 10\\.0",
-                "netfront",
-                "newgen",
-                "newt",
-                "nintendo\\ ds",
-                "nintendo\\ wii",
-                "nitro",
-                "nokia",
-                "novarra",
-                "o2",
-                "openweb",
-                "opera\\ mobi",
-                "opera\\.mobi",
-                "p160u",
-                "palm",
-                "panasonic",
-                "pantech",
-                "pdxgw",
-                "pg",
-                "philips",
-                "phone",
-                "playbook",
-                "playstation\\ portable",
-                "portalmmm",
-                "\\bppc\\b",
-                "proxinet",
-                "psp",
-                "qtek",
-                "sagem",
-                "samsung",
-                "sanyo",
-                "sch",
-                "sch\\-i800",
-                "sec",
-                "sendo",
-                "sgh",
-                "sharp",
-                "sharp\\-tq\\-gx10",
-                "small",
-                "smartphone",
-                "softbank",
-                "sonyericsson",
-                "sph",
-                "symbian",
-                "symbian\\ os",
-                "symbianos",
-                "toshiba",
-                "treo",
-                "ts21i\\-10",
-                "up\\.browser",
-                "up\\.link",
-                "uts",
-                "vertu",
-                "vodafone",
-                "wap",
-                "willcome",
-                "windows\\ ce",
-                "windows\\.ce",
-                "winwap",
-                "xda",
-                "xoom",
-                "zte"
-            ]
-        }
-    },
-    "referrer.configuration_overloaded": false,
-    "referrer.enabled": false,
-    "referrer.rgroups": {
-        "search_engines": {
-            "theme": "",
-            "enabled": false,
-            "redirect": "",
-            "referrers": [
-                "google\\.com",
-                "yahoo\\.com",
-                "bing\\.com",
-                "ask\\.com",
-                "msn\\.com"
-            ]
-        }
-    },
-    "common.track_usage": false,
-    "common.tweeted": false,
-    "config.check": false,
-    "config.path": "",
-    "widget.latest.items": 3,
-    "widget.latest_news.items": 5,
-    "widget.pagespeed.enabled": true,
-    "widget.pagespeed.key": "",
-    "widget.pagespeed.key.restrict.referrer": "",
-    "widget.pagespeed.show_in_admin_bar": false,
-    "timelimit.email_send": 180,
-    "timelimit.varnish_purge": 300,
-    "timelimit.cache_flush": 600,
-    "timelimit.cache_gc": 600,
-    "timelimit.cdn_upload": 600,
-    "timelimit.cdn_delete": 300,
-    "timelimit.cdn_purge": 300,
-    "timelimit.cdn_import": 600,
-    "timelimit.cdn_test": 300,
-    "timelimit.domain_rename": 120,
-    "timelimit.minify_recommendations": 600,
-    "common.instance_id": 393748815,
-    "common.force_master": true,
-    "extensions.active": {
-        "newrelic": "w3-total-cache\/Extension_NewRelic_Plugin.php",
-        "fragmentcache": "w3-total-cache\/Extension_FragmentCache_Plugin.php",
-        "swarmify": "w3-total-cache\/Extension_Swarmify_Plugin.php"
-    },
-    "extensions.active_frontend": [],
-    "extensions.active_dropin": [],
-    "plugin.license_key": "",
-    "plugin.type": "",
-    "common.support": "",
-    "timelimit.cdn_container_create": 300,
-    "fragmentcache": {
-        "engine": "memcached",
-        "memcached.servers": [
-            "127.0.0.1:11211"
-        ],
-        "memcached.persistent": "1",
-        "memcached.aws_autodiscovery": "0",
-        "memcached.username": "",
-        "memcached.password": "",
-        "lifetime": "3600",
-        "file.gc": "3600",
-        "groups": ""
-    },
-    "pgcache.bad_behavior_path": "",
-    "newrelic": {
-        "monitoring_type": "apm"
-    }
-}
\ No newline at end of file

From 552a33f032a898c7133321b3311a29c182dc741a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Aug 2020 16:25:31 +0200
Subject: [PATCH 1239/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 8e6f8d48..2a46f8c5 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -68,7 +68,7 @@ fi
 #----------------------------------------------------------#
 
 if [ ! -f "/usr/local/vesta/data/ips/$MAIL_IP" ]; then
-    echo "=== Adding IP $MAIL_IP" with netmask $NETMASK on interface $INTERFACE"
+    echo "=== Adding IP $MAIL_IP with netmask $NETMASK on interface $INTERFACE"
     $VESTA/bin/v-add-sys-ip  "$MAIL_IP" "$NETMASK" "$INTERFACE" 'admin' 'dedicated' '' ''
 fi
 

From 39430bbd2b004d9ab7a44e12a7f27c6405860d06 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Aug 2020 17:03:34 +0200
Subject: [PATCH 1240/2300] Allow multiple IPs in v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 2a46f8c5..300ad392 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -90,8 +90,6 @@ else
     fi
 fi
 
-# LETSENCRYPT=$($VESTA/bin/v-list-web-domain "$MAIL_USER" "$MAIL_HOSTNAME" | grep 'LETSENCRYPT:' | awk '{print $2}')
-# if [ "$LETSENCRYPT" = "yes" ]; then
 if [ -f "/home/$MAIL_USER/conf/web/ssl.$MAIL_HOSTNAME.ca" ]; then
     echo "=== Signed SSL already installed"
 else
@@ -103,19 +101,21 @@ else
 fi
 
 if [ ! -d "/etc/exim4/virtual" ]; then
-    echo "=== Creating /etc/exim4/virtual files"
+    echo "=== Creating /etc/exim4/virtual directory"
     mkdir -p /etc/exim4/virtual
     echo "$HOST_IP: $HOSTNAME" > /etc/exim4/virtual/helo_data
-    echo "$MAIL_IP: $MAIL_HOSTNAME" >> /etc/exim4/virtual/helo_data
     echo "$HOSTNAME: $HOST_IP" > /etc/exim4/virtual/interfaces
-    echo "$MAIL_HOSTNAME: $MAIL_IP" >> /etc/exim4/virtual/interfaces
-    length=$(wc -c </etc/exim4/virtual/helo_data)
-    dd if=/dev/null of=/etc/exim4/virtual/helo_data obs="$((length-1))" seek=1 > /dev/null 2>&1
-    length=$(wc -c </etc/exim4/virtual/interfaces)
-    dd if=/dev/null of=/etc/exim4/virtual/interfaces obs="$((length-1))" seek=1 > /dev/null 2>&1
 else
-    echo "=== /etc/exim4/virtual files already exists"
+    echo "" >> /etc/exim4/virtual/helo_data
+    echo "" >> /etc/exim4/virtual/interfaces
 fi
+echo "=== Adding $MAIL_IP: $MAIL_HOSTNAME to /etc/exim4/virtual/helo_data"
+echo "$MAIL_IP: $MAIL_HOSTNAME" >> /etc/exim4/virtual/helo_data
+echo "$MAIL_HOSTNAME: $MAIL_IP" >> /etc/exim4/virtual/interfaces
+length=$(wc -c </etc/exim4/virtual/helo_data)
+dd if=/dev/null of=/etc/exim4/virtual/helo_data obs="$((length-1))" seek=1 > /dev/null 2>&1
+length=$(wc -c </etc/exim4/virtual/interfaces)
+dd if=/dev/null of=/etc/exim4/virtual/interfaces obs="$((length-1))" seek=1 > /dev/null 2>&1
 
 echo "=== Generating IP for hostname $HOSTNAME"
 $VESTA/bin/v-make-ip-ssl "$HOST_USER" "$HOSTNAME"

From 367030e9bd358cd6221d976316f51aaa8045389a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Aug 2020 21:43:48 +0200
Subject: [PATCH 1241/2300] Adding check to avoid duplicates in
 v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 36 ++++++++++++++++++++-----------
 1 file changed, 24 insertions(+), 12 deletions(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 300ad392..5e4624e0 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -105,21 +105,33 @@ if [ ! -d "/etc/exim4/virtual" ]; then
     mkdir -p /etc/exim4/virtual
     echo "$HOST_IP: $HOSTNAME" > /etc/exim4/virtual/helo_data
     echo "$HOSTNAME: $HOST_IP" > /etc/exim4/virtual/interfaces
-else
-    echo "" >> /etc/exim4/virtual/helo_data
-    echo "" >> /etc/exim4/virtual/interfaces
+    length=$(wc -c </etc/exim4/virtual/helo_data)
+    dd if=/dev/null of=/etc/exim4/virtual/helo_data obs="$((length-1))" seek=1 > /dev/null 2>&1
+    length=$(wc -c </etc/exim4/virtual/interfaces)
+    dd if=/dev/null of=/etc/exim4/virtual/interfaces obs="$((length-1))" seek=1 > /dev/null 2>&1
+fi
+check_grep1=$(grep -c "^$MAIL_IP:" /etc/exim4/virtual/helo_data)
+check_grep2=$(grep -c ": $MAIL_HOSTNAME" /etc/exim4/virtual/helo_data)
+if [ "$check_grep1" -eq 0 ] && [ "$check_grep2" -eq 0 ]; then
+    echo "=== Adding $MAIL_IP: $MAIL_HOSTNAME to /etc/exim4/virtual/helo_data"
+    echo "" >> /etc/exim4/virtual/helo_data
+    echo "$MAIL_IP: $MAIL_HOSTNAME" >> /etc/exim4/virtual/helo_data
+    length=$(wc -c </etc/exim4/virtual/helo_data)
+    dd if=/dev/null of=/etc/exim4/virtual/helo_data obs="$((length-1))" seek=1 > /dev/null 2>&1
+fi
+check_grep1=$(grep -c "^$MAIL_HOSTNAME:" /etc/exim4/virtual/interfaces)
+check_grep2=$(grep -c ": $MAIL_IP" /etc/exim4/virtual/interfaces)
+if [ "$check_grep1" -eq 0 ] && [ "$check_grep2" -eq 0 ]; then
+    echo "=== Adding $MAIL_HOSTNAME: $MAIL_IP to /etc/exim4/virtual/interfaces"
+    echo "" >> /etc/exim4/virtual/interfaces
+    echo "$MAIL_HOSTNAME: $MAIL_IP" >> /etc/exim4/virtual/interfaces
+    length=$(wc -c </etc/exim4/virtual/interfaces)
+    dd if=/dev/null of=/etc/exim4/virtual/interfaces obs="$((length-1))" seek=1 > /dev/null 2>&1
 fi
-echo "=== Adding $MAIL_IP: $MAIL_HOSTNAME to /etc/exim4/virtual/helo_data"
-echo "$MAIL_IP: $MAIL_HOSTNAME" >> /etc/exim4/virtual/helo_data
-echo "$MAIL_HOSTNAME: $MAIL_IP" >> /etc/exim4/virtual/interfaces
-length=$(wc -c </etc/exim4/virtual/helo_data)
-dd if=/dev/null of=/etc/exim4/virtual/helo_data obs="$((length-1))" seek=1 > /dev/null 2>&1
-length=$(wc -c </etc/exim4/virtual/interfaces)
-dd if=/dev/null of=/etc/exim4/virtual/interfaces obs="$((length-1))" seek=1 > /dev/null 2>&1
 
-echo "=== Generating IP for hostname $HOSTNAME"
+echo "=== Generating IP SSL for hostname $HOSTNAME"
 $VESTA/bin/v-make-ip-ssl "$HOST_USER" "$HOSTNAME"
-echo "=== Generating IP for mail hostname $MAIL_HOSTNAME"
+echo "=== Generating IP SSL for mail hostname $MAIL_HOSTNAME"
 $VESTA/bin/v-make-ip-ssl "$MAIL_USER" "$MAIL_HOSTNAME"
 
 check_grep=$(grep -c 'smtp_active_hostname' /etc/exim4/exim4.conf.template)

From 5efa58a92ec6ca6fedff95c975038bd5a7b53582 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Aug 2020 22:35:59 +0200
Subject: [PATCH 1242/2300] Create v-make-separated-ip-for-email-domain

---
 bin/v-make-separated-ip-for-email-domain | 90 ++++++++++++++++++++++++
 1 file changed, 90 insertions(+)
 create mode 100644 bin/v-make-separated-ip-for-email-domain

diff --git a/bin/v-make-separated-ip-for-email-domain b/bin/v-make-separated-ip-for-email-domain
new file mode 100644
index 00000000..769139b5
--- /dev/null
+++ b/bin/v-make-separated-ip-for-email-domain
@@ -0,0 +1,90 @@
+#!/bin/bash
+
+# info: Switch domain to send emails from desired IP
+# options: DOMAIN IP
+#
+# The function switch domain to send emails from desired IP
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
+DOMAIN=$1
+IP=$2
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '2' "$#" 'DOMAIN IP'
+is_domain_format_valid "$DOMAIN"
+is_ip_format_valid "$IP"
+
+if [ ! -d "/etc/exim4/virtual" ]; then
+    echo "You must first dedicate IP to some hostname using command v-make-separated-ip-for-email"
+    exit 1
+fi
+
+HOST_USER=$($VESTA/bin/v-search-domain-owner "$HOSTNAME")
+if [ -z "$HOST_USER" ]; then
+    echo "Error: hostname $HOSTNAME is not created as web domain"
+    exit 2
+fi
+
+HOST_IP=$($VESTA/bin/v-list-web-domain "$HOST_USER" "$HOSTNAME" | grep 'IP:' | awk '{print $2}')
+
+# echo "HOSTNAME     : $HOSTNAME"
+# echo "HOSTNAME IP  : $HOST_IP"
+
+check_grep=$(grep -c "^$IP:" /etc/exim4/virtual/helo_data)
+if [ "$check_grep" -eq 0 ]; then
+    echo "You must first dedicate IP to some hostname using command v-make-separated-ip-for-email"
+    exit 3
+fi
+
+USER=$($VESTA/bin/v-search-domain-owner "$DOMAIN")
+if [ -z "$USER" ]; then
+    echo "Error: hostname $DOMAIN is not created as web domain"
+    exit 4
+fi
+
+echo "=== patching exim4.conf.template"
+NEWVALUE="  interface = \${lookup{\$sender_address_domain}lsearch{/etc/exim4/virtual/interfaces} {\$value}{$HOST_IP}}"
+sed -i "s#^  interface = .*#$NEWVALUE#g" /etc/exim4/exim4.conf.template
+NEWVALUE="  helo_data = \"\${lookup{\$sending_ip_address}lsearch{/etc/exim4/virtual/helo_data}{\$value}{$HOSTNAME}}\""
+sed -i "s#^  helo_data = .*#$NEWVALUE#g" /etc/exim4/exim4.conf.template
+
+service exim4 restart
+
+check_grep=$(grep -c "^$DOMAIN:" /etc/exim4/virtual/interfaces)
+if [ "$check_grep" -eq 0 ]; then
+    echo "=== Adding $DOMAIN: $IP to /etc/exim4/virtual/interfaces"
+    echo "" >> /etc/exim4/virtual/interfaces
+    echo "$DOMAIN: $IP" >> /etc/exim4/virtual/interfaces
+    length=$(wc -c </etc/exim4/virtual/interfaces)
+    dd if=/dev/null of=/etc/exim4/virtual/interfaces obs="$((length-1))" seek=1 > /dev/null 2>&1
+    echo "=== Done!"
+else
+    echo "=== Domain $DOMAIN is already added"
+fi
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From dd892f7303f2f418d691ebf3ccb37d3afa90ef3a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Aug 2020 22:40:03 +0200
Subject: [PATCH 1243/2300] Deleting accidentally created W3TC.json in root
 folder of project

---
 src/deb/vesta/postinst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 31230ceb..267dd688 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -174,6 +174,11 @@ if [ ! -f "/usr/local/vesta/data/upgrades/clearing-letsencrypt-pipe" ]; then
     fi
 fi
 
+# Deleting accidentally created W3TC.json in root folder of project
+if [ -f "/usr/local/vesta/W3TC.json" ]; then
+    rm /usr/local/vesta/W3TC.json
+fi
+
 # Run custom triggers
 if [ -x "/root/vesta-patch.sh" ]; then
     /root/vesta-patch.sh

From a2954d3731d2423897d3fe32265fd6b0af324938 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Aug 2020 22:46:18 +0200
Subject: [PATCH 1244/2300] Automatically call v-make-separated-ip-for-email
 from v-make-separated-ip-for-email-domain

---
 bin/v-make-separated-ip-for-email-domain | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/bin/v-make-separated-ip-for-email-domain b/bin/v-make-separated-ip-for-email-domain
index 769139b5..f4b129e1 100644
--- a/bin/v-make-separated-ip-for-email-domain
+++ b/bin/v-make-separated-ip-for-email-domain
@@ -33,8 +33,7 @@ is_domain_format_valid "$DOMAIN"
 is_ip_format_valid "$IP"
 
 if [ ! -d "/etc/exim4/virtual" ]; then
-    echo "You must first dedicate IP to some hostname using command v-make-separated-ip-for-email"
-    exit 1
+    /usr/local/vesta/bin/v-make-separated-ip-for-email "$DOMAIN" "$IP"
 fi
 
 HOST_USER=$($VESTA/bin/v-search-domain-owner "$HOSTNAME")
@@ -50,8 +49,7 @@ HOST_IP=$($VESTA/bin/v-list-web-domain "$HOST_USER" "$HOSTNAME" | grep 'IP:' | a
 
 check_grep=$(grep -c "^$IP:" /etc/exim4/virtual/helo_data)
 if [ "$check_grep" -eq 0 ]; then
-    echo "You must first dedicate IP to some hostname using command v-make-separated-ip-for-email"
-    exit 3
+    /usr/local/vesta/bin/v-make-separated-ip-for-email "$DOMAIN" "$IP"
 fi
 
 USER=$($VESTA/bin/v-search-domain-owner "$DOMAIN")

From 1f93cedfc64e5f052bbff3ce25fa7a98f676c923 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Aug 2020 22:50:29 +0200
Subject: [PATCH 1245/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 3fdf49b6..249cd203 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-33 [16-Aug-2020]
+==================================================
+* [Feature] Ability to set some domain to send emails from another IP (command: v-make-separated-ip-for-email-domain)
+
 Version 0.9.8-26-32 [02-Aug-2020]
 ==================================================
 * [Feature] v-replace-in-file command introduced

From 1f11dfbbf206507c53feee57a3ddf56a0d6ce7e2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Aug 2020 22:51:31 +0200
Subject: [PATCH 1246/2300] Version 0.9.8-26-33

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 391820ae..6e02ea74 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-32
+vesta-0.9.8-26-33

From cc0527a8dc2d7ed38aff85354b2c6754f030983e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Aug 2020 23:46:00 +0200
Subject: [PATCH 1247/2300] Update v-make-ip-ssl

---
 bin/v-make-ip-ssl | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/bin/v-make-ip-ssl b/bin/v-make-ip-ssl
index e0e094fa..25c1b10f 100644
--- a/bin/v-make-ip-ssl
+++ b/bin/v-make-ip-ssl
@@ -38,12 +38,15 @@ is_object_unsuspended 'user' 'USER' "$user"
 #                       Action                             #
 #----------------------------------------------------------#
 
+if [ ! -f "/etc/exim4/virtual/helo_data" ]; then
+    exit 1
+fi
+
 echo "Script ran with: $user $domain" >> /usr/local/vesta/log/v-make-ip-ssl.log
 
-grepr=$(grep -c "^$domain:" /etc/exim4/virtual/interfaces)
+grepr=$(grep -c ": $domain$" /etc/exim4/virtual/helo_data)
 if [ $grepr -ge 1 ]; then
-    grepr=$(grep "^$domain:" /etc/exim4/virtual/interfaces)
-    ip=${grepr/$domain: /}
+    ip=$(grep ": $domain$" /etc/exim4/virtual/helo_data | awk -F: '{print $1}')
     if [ ! -z "$ip" ]; then
         echo "Processinng $domain" >> /usr/local/vesta/log/v-make-ip-ssl.log
         echo "IP = $ip" >> /usr/local/vesta/log/v-make-ip-ssl.log

From 25bb5ce08fae9d5d4ec41a946c47516d3dd8ab42 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 16 Aug 2020 00:01:23 +0200
Subject: [PATCH 1248/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 5e4624e0..3fe6796d 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -180,9 +180,11 @@ ptr_len=${#ptr}
 ptr_len=$((ptr_len-1))
 ptr=${ptr:0:ptr_len}
 if [ "$ptr" != "$MAIL_HOSTNAME" ]; then
-    echo ""
-    echo "WARNING: PTR for $MAIL_IP is $ptr"
-    echo "WARNING: PTR for $MAIL_IP should be $MAIL_HOSTNAME"
+    echo "========================================================="
+    echo "WARNING:"
+    echo "PTR record (reverse DNS) for IP $MAIL_IP is $ptr"
+    echo "PTR record (reverse DNS) for IP $MAIL_IP should be $MAIL_HOSTNAME"
+    echo "========================================================="
 fi
 
 #----------------------------------------------------------#

From 3af821c79866ed2ffa7a70bc99eaba495697c591 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 16 Aug 2020 00:04:20 +0200
Subject: [PATCH 1249/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 3fe6796d..6ede0d04 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -180,11 +180,11 @@ ptr_len=${#ptr}
 ptr_len=$((ptr_len-1))
 ptr=${ptr:0:ptr_len}
 if [ "$ptr" != "$MAIL_HOSTNAME" ]; then
-    echo "========================================================="
+    echo "=============================================================================="
     echo "WARNING:"
     echo "PTR record (reverse DNS) for IP $MAIL_IP is $ptr"
     echo "PTR record (reverse DNS) for IP $MAIL_IP should be $MAIL_HOSTNAME"
-    echo "========================================================="
+    echo "=============================================================================="
 fi
 
 #----------------------------------------------------------#

From 1320f14c1632c91460abc57d0a1108b74ce54b69 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 17 Aug 2020 14:51:55 +0200
Subject: [PATCH 1250/2300] Better place for changelog link

---
 web/templates/admin/list_user.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index f5da64ee..4685d183 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -65,7 +65,7 @@
     <div class="l-center units">
       <?php
         if (isset($changelog))
-          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br /><a style=\"color: #007bff;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\">Changelog:</a><br /><pre  style=\"padding: 16px; overflow: auto; font-size: 85%; line-height: 1.45; background-color: #f6f8fa; border-radius: 3px; font-weight: bold;\">".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")."<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, forum and knowledge base")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" />";
+          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br /><pre  style=\"padding: 16px; overflow: auto; font-size: 85%; line-height: 1.45; background-color: #f6f8fa; border-radius: 3px; font-weight: bold;\">".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")." ".__("If you missed an update, see our previous")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\">".__("change logs")."</a>.<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, forum and knowledge base")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" />";
         
         foreach ($data as $key => $value) {
           ++$i;

From a82e0eb0a4d31784d36d2c46602875dec76b8378 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 17 Aug 2020 14:57:02 +0200
Subject: [PATCH 1251/2300] Update index.html

---
 install/debian/10/templates/web/skel/public_html/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/skel/public_html/index.html b/install/debian/10/templates/web/skel/public_html/index.html
index 9b8789e8..c2895cf2 100755
--- a/install/debian/10/templates/web/skel/public_html/index.html
+++ b/install/debian/10/templates/web/skel/public_html/index.html
@@ -18,7 +18,7 @@
 <body>
     <h1>%domain%</h1>
     <div>
-        <a href="http://myvestacp.com/">Powered by myVESTA</a>
+        <a href="https://www.myvestacp.com/">Powered by myVesta</a>
     </div>
 </body>
 

From dc73115f4a2d3993398add04bd558d388c40adca Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 17 Aug 2020 14:57:44 +0200
Subject: [PATCH 1252/2300] Update index.html

---
 install/debian/10/templates/web/skel/public_shtml/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/skel/public_shtml/index.html b/install/debian/10/templates/web/skel/public_shtml/index.html
index 9b8789e8..c2895cf2 100755
--- a/install/debian/10/templates/web/skel/public_shtml/index.html
+++ b/install/debian/10/templates/web/skel/public_shtml/index.html
@@ -18,7 +18,7 @@
 <body>
     <h1>%domain%</h1>
     <div>
-        <a href="http://myvestacp.com/">Powered by myVESTA</a>
+        <a href="https://www.myvestacp.com/">Powered by myVesta</a>
     </div>
 </body>
 

From 2afd1d78e91936ca60895e69a383fc7913a7ffb4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 17 Aug 2020 14:58:34 +0200
Subject: [PATCH 1253/2300] Update index.html

---
 install/debian/9/templates/web/skel/public_shtml/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/9/templates/web/skel/public_shtml/index.html b/install/debian/9/templates/web/skel/public_shtml/index.html
index 4f5bb724..c2895cf2 100755
--- a/install/debian/9/templates/web/skel/public_shtml/index.html
+++ b/install/debian/9/templates/web/skel/public_shtml/index.html
@@ -18,7 +18,7 @@
 <body>
     <h1>%domain%</h1>
     <div>
-        <a href="http://vestacp.com/">Powered by VESTA</a>
+        <a href="https://www.myvestacp.com/">Powered by myVesta</a>
     </div>
 </body>
 

From f3a6fef93cc68026016dca30f669131d540c1fed Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 17 Aug 2020 14:59:09 +0200
Subject: [PATCH 1254/2300] Update index.html

---
 install/debian/9/templates/web/skel/public_html/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/9/templates/web/skel/public_html/index.html b/install/debian/9/templates/web/skel/public_html/index.html
index 4f5bb724..c2895cf2 100755
--- a/install/debian/9/templates/web/skel/public_html/index.html
+++ b/install/debian/9/templates/web/skel/public_html/index.html
@@ -18,7 +18,7 @@
 <body>
     <h1>%domain%</h1>
     <div>
-        <a href="http://vestacp.com/">Powered by VESTA</a>
+        <a href="https://www.myvestacp.com/">Powered by myVesta</a>
     </div>
 </body>
 

From f74301b19f3f06edb80553574fbb29df489c2ee3 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 19 Aug 2020 12:44:46 +0200
Subject: [PATCH 1255/2300] Split long TXT entries into 255 chunks

---
 func/domain.sh | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/func/domain.sh b/func/domain.sh
index 713cc52a..fc615e7b 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -412,6 +412,20 @@ update_domain_zone() {
             VALUE=$(idn --quiet -a -t "$VALUE")
         fi
 
+        # Split long TXT entries into 255 chunks
+        if [ "$TYPE" = 'TXT' ]; then
+            txtlength=${#VALUE}
+            if [ $txtlength -gt 255 ]; then
+                if [[ ${VALUE:0:1} = '"' ]]; then
+                    txtlength=$(( $txtlength - 2 ))
+                    VALUE=${VALUE:1:txtlength}
+                fi
+                VALUE=$(echo $VALUE | fold -w 255 | xargs -I '$' echo -n ' "$"')
+                VALUE=${VALUE:1}
+                VALUE="($VALUE)"
+            fi
+        fi
+
         if [ "$SUSPENDED" != 'yes' ]; then
             eval echo -e "\"$fields\""|sed "s/%quote%/'/g" >> $zn_conf
         fi

From f0e741ee1c7bc254717e1ad41f3885b99b57f2f6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 19 Aug 2020 14:17:10 +0200
Subject: [PATCH 1256/2300] Reverting back wrong merged code from PR

---
 bin/v-restart-proxy | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/bin/v-restart-proxy b/bin/v-restart-proxy
index dd593db4..ca63c16d 100644
--- a/bin/v-restart-proxy
+++ b/bin/v-restart-proxy
@@ -49,20 +49,8 @@ if [ -z "$PROXY_SYSTEM" ] || [ "$PROXY_SYSTEM" = 'remote' ]; then
     exit
 fi
 
-
 if [ -f "/usr/local/vesta/web/inc/nginx_proxy" ]; then
 
-  # if vesta is behind default nginx, restart in background with 15 sec delay
-  # background restart
-  if [ "$1" = 'background' ]; then
-      # Restart system
-      sleep 25
-      service $PROXY_SYSTEM restart >/dev/null 2>&1
-      if [ $? -ne 0 ]; then
-          send_email_report
-          check_result $E_RESTART "$PROXY_SYSTEM restart failed"
-      fi
-
   # if vesta is behind default nginx, restart in background with 15 sec delay
   # background restart
   if [ "$1" = 'background' ]; then

From 212e074839825badefe9f714e85d6090f4fc66de Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 19 Aug 2020 14:32:30 +0200
Subject: [PATCH 1257/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 249cd203..0a5d6dd7 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-34 [19-Aug-2020]
+==================================================
+* [Bugfix] Split long DNS TXT entries into 255 chunks
+
 Version 0.9.8-26-33 [16-Aug-2020]
 ==================================================
 * [Feature] Ability to set some domain to send emails from another IP (command: v-make-separated-ip-for-email-domain)

From 311827c4b315dc2e0db0c86cf2bdca07417742e2 Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Wed, 19 Aug 2020 14:52:45 +0200
Subject: [PATCH 1258/2300] Not chunking already manually chunked TXT records

---
 func/domain.sh | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/func/domain.sh b/func/domain.sh
index fc615e7b..ad3b8a82 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -416,13 +416,19 @@ update_domain_zone() {
         if [ "$TYPE" = 'TXT' ]; then
             txtlength=${#VALUE}
             if [ $txtlength -gt 255 ]; then
-                if [[ ${VALUE:0:1} = '"' ]]; then
-                    txtlength=$(( $txtlength - 2 ))
-                    VALUE=${VALUE:1:txtlength}
+                already_chunked=0
+                if [[ $VALUE == *"\" \""* ]]; then
+                    already_chunked=1
+                fi
+                if [ $already_chunked -eq 0 ]; then
+                    if [[ ${VALUE:0:1} = '"' ]]; then
+                        txtlength=$(( $txtlength - 2 ))
+                        VALUE=${VALUE:1:txtlength}
+                    fi
+                    VALUE=$(echo $VALUE | fold -w 255 | xargs -I '$' echo -n ' "$"')
+                    VALUE=${VALUE:1}
+                    VALUE="($VALUE)"
                 fi
-                VALUE=$(echo $VALUE | fold -w 255 | xargs -I '$' echo -n ' "$"')
-                VALUE=${VALUE:1}
-                VALUE="($VALUE)"
             fi
         fi
 

From 9f612d82cfe6126a7028acc2eb94054e69e35cd5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 23 Aug 2020 18:36:43 +0200
Subject: [PATCH 1259/2300] Limit max recipients per email to 15, in order to
 prevent mass spamming

---
 src/deb/vesta/postinst | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 267dd688..82da0302 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -179,6 +179,22 @@ if [ -f "/usr/local/vesta/W3TC.json" ]; then
     rm /usr/local/vesta/W3TC.json
 fi
 
+# Limit max recipients per email to 15, in order to prevent mass spamming
+if [ ! -f "/usr/local/vesta/data/upgrades/limit_max_recipients" ]; then
+    touch /usr/local/vesta/data/upgrades/limit_max_recipients
+    if [ -f "/etc/exim4/exim4.conf.template" ]; then
+        check_grep=$(grep -c 'recipients_max' /etc/exim4/exim4.conf.template)
+        if [ "$check_grep" -eq 0 ]; then
+            echo "=== Limit max recipients per email to 15, in order to prevent mass spamming"
+            FIND="acl_smtp_mime = acl_check_mime"
+            REPLACE="recipients_max = 2\nrecipients_max_reject = true"
+            sed -i "s#$FIND#$FIND\n\n$REPLACE#g" /etc/exim4/exim4.conf.template
+            systemctl restart exim4
+        fi
+    fi
+fi
+
+
 # Run custom triggers
 if [ -x "/root/vesta-patch.sh" ]; then
     /root/vesta-patch.sh

From e3eb9c6b846bd736fa20874a18dc5731c50edb5b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 23 Aug 2020 18:38:15 +0200
Subject: [PATCH 1260/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index dc1e6a89..b278d02d 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1622,6 +1622,7 @@ touch /usr/local/vesta/data/upgrades/keeping-mpm-event
 touch /usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates
 touch /usr/local/vesta/data/upgrades/clamav_block_exe_in_archives
 touch /usr/local/vesta/data/upgrades/clearing-letsencrypt-pipe
+touch /usr/local/vesta/data/upgrades/limit_max_recipients
 
 # Secret URL
 secretquery=''

From 3aebb4f6d3b42c3c00ac2248716a34ef7a369210 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 23 Aug 2020 18:40:16 +0200
Subject: [PATCH 1261/2300] Update exim4.conf.template

---
 install/debian/10/exim/exim4.conf.template | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
index cb6c960c..7cc13c36 100644
--- a/install/debian/10/exim/exim4.conf.template
+++ b/install/debian/10/exim/exim4.conf.template
@@ -25,6 +25,9 @@ acl_smtp_rcpt = acl_check_rcpt
 acl_smtp_data = acl_check_data
 acl_smtp_mime = acl_check_mime
 
+recipients_max = 15
+recipients_max_reject = true
+
 # log_selector = +smtp_connection
 smtp_accept_max = 50
 smtp_accept_max_per_host = 4

From 028117dcb93267be34a5ef1eb74366ad153d74b6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 23 Aug 2020 18:41:11 +0200
Subject: [PATCH 1262/2300] Limit max recipients per email to 15, in order to
 prevent mass spamming

---
 install/debian/9/exim/exim4.conf.template | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install/debian/9/exim/exim4.conf.template b/install/debian/9/exim/exim4.conf.template
index 12b41e40..e49bbf4e 100644
--- a/install/debian/9/exim/exim4.conf.template
+++ b/install/debian/9/exim/exim4.conf.template
@@ -25,6 +25,9 @@ acl_smtp_rcpt = acl_check_rcpt
 acl_smtp_data = acl_check_data
 acl_smtp_mime = acl_check_mime
 
+recipients_max = 15
+recipients_max_reject = true
+
 .ifdef SPAMASSASSIN
 spamd_address = 127.0.0.1 783
 .endif

From df674aafc9edf0f8e7adb9c0a7a726ea8c101d48 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 23 Aug 2020 18:42:45 +0200
Subject: [PATCH 1263/2300] Limit max recipients per email to 15, in order to
 prevent mass spamming

---
 install/debian/8/exim/exim4.conf.template | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install/debian/8/exim/exim4.conf.template b/install/debian/8/exim/exim4.conf.template
index 12b41e40..e49bbf4e 100644
--- a/install/debian/8/exim/exim4.conf.template
+++ b/install/debian/8/exim/exim4.conf.template
@@ -25,6 +25,9 @@ acl_smtp_rcpt = acl_check_rcpt
 acl_smtp_data = acl_check_data
 acl_smtp_mime = acl_check_mime
 
+recipients_max = 15
+recipients_max_reject = true
+
 .ifdef SPAMASSASSIN
 spamd_address = 127.0.0.1 783
 .endif

From 83a643dbd800486a6a8c49529e66888aa370a6ce Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 23 Aug 2020 18:44:22 +0200
Subject: [PATCH 1264/2300] Correction of number of recipients

---
 src/deb/vesta/postinst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 82da0302..8573c16c 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -187,7 +187,7 @@ if [ ! -f "/usr/local/vesta/data/upgrades/limit_max_recipients" ]; then
         if [ "$check_grep" -eq 0 ]; then
             echo "=== Limit max recipients per email to 15, in order to prevent mass spamming"
             FIND="acl_smtp_mime = acl_check_mime"
-            REPLACE="recipients_max = 2\nrecipients_max_reject = true"
+            REPLACE="recipients_max = 15\nrecipients_max_reject = true"
             sed -i "s#$FIND#$FIND\n\n$REPLACE#g" /etc/exim4/exim4.conf.template
             systemctl restart exim4
         fi

From 8683c2dff0154fc2ab0a1aafd4671ea2a990fd7a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 23 Aug 2020 18:50:08 +0200
Subject: [PATCH 1265/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 0a5d6dd7..790ba3e5 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-35 [23-Aug-2020]
+==================================================
+* [Feature] Limiting max recipients per email to 15, in order to prevent mass spamming
+
 Version 0.9.8-26-34 [19-Aug-2020]
 ==================================================
 * [Bugfix] Split long DNS TXT entries into 255 chunks

From ef0f62a59bbebbbe3b0af09075d1c489dc3fe68d Mon Sep 17 00:00:00 2001
From: dpeca <peca@mycity.rs>
Date: Sun, 23 Aug 2020 19:44:12 +0200
Subject: [PATCH 1266/2300] Also checking "" in order to detect manually
 chunked record

And removing brackets, since they are not necessary when whole record is in one line
---
 func/domain.sh | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/func/domain.sh b/func/domain.sh
index ad3b8a82..6bd05b91 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -417,7 +417,7 @@ update_domain_zone() {
             txtlength=${#VALUE}
             if [ $txtlength -gt 255 ]; then
                 already_chunked=0
-                if [[ $VALUE == *"\" \""* ]]; then
+                if [[ $VALUE == *"\" \""* ]] || [[ $VALUE == *"\"\""* ]]; then
                     already_chunked=1
                 fi
                 if [ $already_chunked -eq 0 ]; then
@@ -425,9 +425,7 @@ update_domain_zone() {
                         txtlength=$(( $txtlength - 2 ))
                         VALUE=${VALUE:1:txtlength}
                     fi
-                    VALUE=$(echo $VALUE | fold -w 255 | xargs -I '$' echo -n ' "$"')
-                    VALUE=${VALUE:1}
-                    VALUE="($VALUE)"
+                    VALUE=$(echo $VALUE | fold -w 255 | xargs -I '$' echo -n '"$"')
                 fi
             fi
         fi

From 3b5de24de0c01b6f1aecac4ada22f20cfa1355bf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 23 Aug 2020 19:55:24 +0200
Subject: [PATCH 1267/2300] Update Changelog.md

---
 Changelog.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Changelog.md b/Changelog.md
index 790ba3e5..6f88ff0d 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,6 +1,7 @@
 Version 0.9.8-26-35 [23-Aug-2020]
 ==================================================
 * [Feature] Limiting max recipients per email to 15, in order to prevent mass spamming
+* [Bugfix] While restoring backup, only exclude logs folder from root, not in public_html
 
 Version 0.9.8-26-34 [19-Aug-2020]
 ==================================================

From bdb1c1f02823fad6dd03559e0de348a3cc3754d5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 23 Aug 2020 23:58:23 +0200
Subject: [PATCH 1268/2300] Version 0.9.8-26-34

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 6e02ea74..88f05a49 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-33
+vesta-0.9.8-26-34

From ce5d209c13e44e09b7626c82762bb36a89178950 Mon Sep 17 00:00:00 2001
From: myrevery <16082142+myrevery@users.noreply.github.com>
Date: Tue, 25 Aug 2020 14:58:01 -0700
Subject: [PATCH 1269/2300] Update cn.php

---
 web/inc/i18n/cn.php | 164 ++++++++++++++++++++++----------------------
 1 file changed, 82 insertions(+), 82 deletions(-)

diff --git a/web/inc/i18n/cn.php b/web/inc/i18n/cn.php
index dd39bc10..389e8c1e 100644
--- a/web/inc/i18n/cn.php
+++ b/web/inc/i18n/cn.php
@@ -47,8 +47,8 @@ $LANG['cn'] = array(
 
     'no notifications' => '没有通知',
 
-    'Add User' => '添加用户',
-    'Add Domain' => '添加域名',
+    'Add User' => '添加用户账户',
+    'Add Domain' => '添加网站域名',
     'Add Web Domain' => '添加网站域名',
     'Add DNS Domain' => '添加DNS域名',
     'Add DNS Record' => '添加DNS记录',
@@ -56,12 +56,12 @@ $LANG['cn'] = array(
     'Add Mail Account' => '添加邮箱账户',
     'Add Database' => '添加数据库',
     'Add Cron Job' => '添加定时任务',
-    'Create Backup' => '创建备份',
+    'Create Backup' => '创建数据备份',
     'Configure' => '配置',
     'Restore All' => '全部恢复',
-    'Add Package' => '添加方案',
+    'Add Package' => '添加用户方案',
     'Add IP' => '添加IP地址',
-    'Add Rule' => '添加规则',
+    'Add Rule' => '添加防火墙规则',
     'Ban IP Address' => '封锁IP地址',
     'Search' => '搜索',
     'Add one more FTP Account' => '增加一个FTP账户',
@@ -83,15 +83,15 @@ $LANG['cn'] = array(
     'rebuild mail' => '重建邮箱',
     'rebuild db' => '重建数据库',
     'rebuild cron' => '重建定时任务',
-    'update counters' => '更新计数器',
+    'update counters' => '更新使用情况',
     'suspend' => '暂停',
     'unsuspend' => '解除暂停',
     'delete' => '删除',
-    'show per user' => '按用户显示',
-    'login as' => '登录至账户',
+    'show per user' => '选中指定的用户显示',
+    'login as' => '切换登录至账户',
     'logout' => '登出',
     'edit' => '编辑',
-    'open webstats' => '打开网站统计',
+    'open webstats' => '查看网站统计',
     'view logs' => '查看日志',
     'list records' => '列出 %s 条记录',
     'add record' => '添加记录',
@@ -109,17 +109,17 @@ $LANG['cn'] = array(
     'update' => '更新',
     'generate' => '生成',
     'Generate CSR' => '生成CSR',
-    'reread IP' => '重新读取IP',
-    'enable autoupdate' => '启用自动更新',
-    'disable autoupdate' => '停用自动更新',
-    'turn on notifications' => '启用通知',
-    'turn off notifications' => '停用通知',
+    'reread IP' => '重新读取IP地址',
+    'enable autoupdate' => '点击启用自动更新',
+    'disable autoupdate' => '点击停用自动更新',
+    'turn on notifications' => '点击启用通知',
+    'turn off notifications' => '点击停用通知',
     'configure' => '配置',
 
-    'Adding User' => '添加用户',
-    'Editing User' => '编辑用户',
-    'Adding Domain' => '添加域名',
-    'Editing Domain' => '编辑域名',
+    'Adding User' => '添加用户账户',
+    'Editing User' => '编辑用户账户',
+    'Adding Domain' => '添加网站域名',
+    'Editing Domain' => '编辑网站域名',
     'Adding DNS Domain' => '添加DNS域名',
     'Editing DNS Domain' => '编辑DNS域名',
     'Adding DNS Record' => '添加DNS记录',
@@ -132,17 +132,17 @@ $LANG['cn'] = array(
     'Editing Cron Job' => '编辑定时任务',
     'Adding Cron Job' => '添加定时任务',
     'Editing Database' => '编辑数据库',
-    'Adding Package' => '添加方案',
-    'Editing Package' => '编辑方案',
+    'Adding Package' => '添加用户方案',
+    'Editing Package' => '编辑用户方案',
     'Adding IP address' => '添加IP地址',
     'Editing IP Address' => '编辑IP地址',
-    'Editing Backup Exclusions' => '配置需排除备份的项目',
+    'Editing Backup Exclusions' => '配置数据备份的排除项',
     'Generating CSR' => '生成CSR',
     'Listing' => '列出',
     'Search Results' => '搜索结果',
     'Adding Firewall Rule' => '添加防火墙规则',
     'Editing Firewall Rule' => '编辑防火墙规则',
-    'Adding IP Address to Banlist' => '添加IP至封锁列表',
+    'Adding IP Address to Banlist' => '添加IP地址以封锁',
 
     'active' => '正常',
     'spnd' => '暂停',
@@ -168,7 +168,7 @@ $LANG['cn'] = array(
     'month' => '月',
     'package' => '方案',
     'Bandwidth' => '流量',
-    'Disk' => '磁盘空间',
+    'Disk' => '磁盘',
     'Web' => '网站',
     'Mail' => '邮箱',
     'Databases' => '数据库',
@@ -182,7 +182,7 @@ $LANG['cn'] = array(
     'Web Domains' => '网站域名',
     'SSL Domains' => 'SSL域名',
     'Web Aliases' => '网站别名',
-    'per domain' => '每域名',
+    'per domain' => '每个域名',
     'DNS Domains' => 'DNS域名',
     'DNS domains' => 'DNS域名',
     'DNS records' => 'DNS记录',
@@ -195,10 +195,10 @@ $LANG['cn'] = array(
     'IP Addresses' => 'IP地址',
     'Backups' => '备份',
     'Backup System' => '备份系统',
-    'backup exclusions' => '需排除备份的项目',
+    'backup exclusions' => '数据备份的排除项',
     'template' => '模板',
     'SSL Support' => '启用SSL',
-    'SSL Home Directory' => 'SSL站点主目录',
+    'SSL Home Directory' => 'SSL主目录',
     'Lets Encrypt Support' => '采用 Let&#39s Encrypt',
     'Lets Encrypt' => 'Let&#39s Encrypt',
     'Your certificate will be automatically issued in 5 minutes' => '证书将在5分钟内自动完成签发',
@@ -213,7 +213,7 @@ $LANG['cn'] = array(
     'Records' => '记录',
     'Serial' => '序号',
     'Catchall email' => '未知收件人聚合邮箱',
-    'AntiVirus Support' => '防病毒支持',
+    'AntiVirus Support' => '邮件防病毒支持',
     'AntiSpam Support' => '防垃圾邮件支持',
     'DKIM Support' => 'DKIM支持',
     'Accounts' => '账户',
@@ -255,8 +255,8 @@ $LANG['cn'] = array(
     'APACHE2 Usage' => 'Apache2 使用情况',
     'HTTPD Usage' => 'HTTPD 使用情况',
     'NGINX Usage' => 'NGINX 使用情况',
-    'MySQL Usage on localhost' => 'MySQL 使用情况 (localhost)',
-    'PostgreSQL Usage on localhost' => 'PostgreSQL 使用情况 (localhost)',
+    'MySQL Usage on localhost' => '数据库使用情况 MySQL (localhost)',
+    'PostgreSQL Usage on localhost' => '数据库使用情况 PostgreSQL (localhost)',
     'Bandwidth Usage eth0' => '网络使用情况 (eth0)',
     'Bandwidth Usage eth1' => '网络使用情况 (eth1)',
     'Bandwidth Usage venet0' => '网络使用情况 (venet0)',
@@ -268,30 +268,30 @@ $LANG['cn'] = array(
     'SSH Usage' => 'SSH 使用情况',
     'reverse proxy' => '反向代理',
     'web server' => 'Web服务',
-    'backend server' => '后端服务', //New Keyword for PHP-FPM in SERVER page.
     'dns server' => 'DNS服务',
     'mail server' => '邮箱服务',
     'pop/imap server' => 'POP/IMAP服务',
-    'email antivirus' => '邮箱防病毒',
+    'email antivirus' => '邮件防病毒',
     'email antispam' => '防垃圾邮件',
     'database server' => '数据库服务',
+    'backend server' => '后端服务', //New Keyword for PHP-FPM in SERVER page.
     'ftp server' => 'FTP服务',
     'job scheduler' => '执行定时任务',
     'firewall' => '防火墙服务',
-    'brute-force monitor' => '防范暴力攻击',
+    'brute-force monitor' => '防暴力攻击',
     'CPU' => 'CPU',
     'Memory' => '内存',
     'Uptime' => '已运行时间',
-    'core package' => '核心系统',
-    'php interpreter' => 'PHP解释器',
-    'internal web server' => '内部Web服务',
+    'core package' => 'Vesta 核心系统',
+    'php interpreter' => 'Vesta PHP解释器',
+    'internal web server' => 'Vesta Web服务',
     'Version' => '版本',
-    'Release' => '发布号',
+    'Release' => '发行版本',
     'Architecture' => '架构',
     'Object' => '对象',
     'Username' => '用户名称',
     'Password' => '密码',
-    'Email' => '电子邮箱',
+    'Email' => '邮箱',
     'Package' => '方案',
     'Language' => '语言',
     'First Name' => '名字',
@@ -382,13 +382,13 @@ $LANG['cn'] = array(
     'stats password' => '统计密码',
     'ftp user password' => 'FTP用户账户密码',
     'ftp user' => 'FTP用户',
-    'Last 70 lines of %s.%s.log' => '%s.%s.log 的最后 70 行',
+    'Last 70 lines of %s.%s.log' => '%s.%s.log 的最新 70 条日志记录',
     'AccessLog' => '访问日志',
     'ErrorLog' => '错误日志',
     'Download AccessLog' => '下载访问日志',
     'Download ErrorLog' => '下载错误日志',
     'Country' => '国家地区',
-    '2 letter code' => '采用 ISO 3166-1 α-2 二位代码 如: 中国CN / 美国US',
+    '2 letter code' => 'ISO 3166-1 α-2 二位字母代码 如: 中国CN / 美国US',
     'State / Province' => '州 / 省级',
     'City / Locality' => '市 / 地区',
     'Organization' => '组织名称',
@@ -399,14 +399,14 @@ $LANG['cn'] = array(
     'Banlist' => '需封锁',
     'ranges are acceptable' => '可使用范围 如: 21-22',
     'CIDR format is supported' => '支持CIDR格式',
-    'ACCEPT' => '接受',
-    'DROP' => '拒绝',
+    'ACCEPT' => '放行',
+    'DROP' => '阻止',
     'TCP' => 'TCP',
     'UDP' => 'UDP',
     'ICMP' => 'ICMP',
     'SSH' => 'SSH',
     'FTP' => 'FTP',
-    'VESTA' => 'VESTA',
+    'VESTA' => 'Vesta',
     'Add one more Name Server' => '增加一个DNS服务器',
 
     'web domain' => '网站域名',
@@ -416,7 +416,7 @@ $LANG['cn'] = array(
     'mail account' => '邮箱账户',
     'cron job' => '定时任务',
 
-    'cron' => '任务',
+    'cron' => '定时任务',
     'user dir' => '用户目录',
 
     'unlimited' => '无限',
@@ -430,14 +430,14 @@ $LANG['cn'] = array(
     '%s mail accounts' => '%s 个邮箱账户',
     '1 database' => '1 个数据库',
     '%s databases' => '%s 个数据库',
-    '1 cron job' => '1 个任务',
-    '%s cron jobs' => '%s 个任务',
+    '1 cron job' => '1 个定时任务',
+    '%s cron jobs' => '%s 个定时任务',
     '1 archive' => '1 个存档',
     '%s archives' => '%s 个存档',
     '1 item' => '1 个项目',
     '%s items' => '%s 个项目',
-    '1 package' => '1 个方案',
-    '%s packages' => '%s 个方案',
+    '1 package' => '1 个用户方案',
+    '%s packages' => '%s 个用户方案',
     '1 IP address' => '1 个IP地址',
     '%s IP addresses' => '%s 个IP地址',
     '1 month' => '1 个月',
@@ -460,14 +460,14 @@ $LANG['cn'] = array(
     'DATABASE_CREATED_OK' => '数据库 <a href="/edit/db/?database=%s"><b>%s</b></a> 已添加成功',
     'CRON_CREATED_OK' => '定时任务已添加成功',
     'IP_CREATED_OK' => 'IP地址 <a href="/edit/ip/?ip=%s"><b>%s</b></a> 已添加成功',
-    'PACKAGE_CREATED_OK' => '方案 <a href="/edit/package/?package=%s"><b>%s</b></a> 已添加成功',
+    'PACKAGE_CREATED_OK' => '用户方案 <a href="/edit/package/?package=%s"><b>%s</b></a> 已添加成功',
     'SSL_GENERATED_OK' => 'SSL证书已生成成功',
-    'RULE_CREATED_OK' => '规则已创建成功',
+    'RULE_CREATED_OK' => '防火墙规则已创建成功',
     'BANLIST_CREATED_OK' => 'IP地址已封锁成功',
-    'Autoupdate has been successfully enabled' => '自动更新已成功启用',
-    'Autoupdate has been successfully disabled' => '自动更新已成功关闭',
-    'Cronjob email reporting has been successfully enabled' => '定时任务的电子邮件报告已成功启用',
-    'Cronjob email reporting has been successfully disabled' => '定时任务的电子邮件报告已成功关闭',
+    'Autoupdate has been successfully enabled' => '自动更新已启用成功',
+    'Autoupdate has been successfully disabled' => '自动更新已停用成功',
+    'Cronjob email reporting has been successfully enabled' => '定时任务的电子邮件通知已启用成功',
+    'Cronjob email reporting has been successfully disabled' => '定时任务的电子邮件通知已停用成功',
     'Changes has been saved.' => '已保存更改',
     'Confirmation' => '确认',
     'DELETE_USER_CONFIRMATION' => '确定要删除用户 %s 吗？',
@@ -488,31 +488,31 @@ $LANG['cn'] = array(
     'DELETE_CRON_CONFIRMATION' => '确定要删除定时任务吗？',
     'SUSPEND_CRON_CONFIRMATION' => '确定要暂停定时任务吗？',
     'UNSUSPEND_CRON_CONFIRMATION' => '确定要解除暂停定时任务吗？',
-    'DELETE_BACKUP_CONFIRMATION' => '确定要删除 %s 备份吗？',
-    'DELETE_EXCLUSION_CONFIRMATION' => '确定要删除 %s 例外吗？',
-    'DELETE_PACKAGE_CONFIRMATION' => '确定要删除方案 %s 吗？',
+    'DELETE_BACKUP_CONFIRMATION' => '确定要删除 %s 数据备份吗？',
+    'DELETE_EXCLUSION_CONFIRMATION' => '确定要删除 %s 排除项吗？',
+    'DELETE_PACKAGE_CONFIRMATION' => '确定要删除用户方案 %s 吗？',
     'DELETE_IP_CONFIRMATION' => '确定要删除IP地址 %s 吗？',
-    'DELETE_RULE_CONFIRMATION' => '确定要删除规则 #%s 吗？',
-    'SUSPEND_RULE_CONFIRMATION' => '确定要暂停规则 #%s 吗？',
-    'UNSUSPEND_RULE_CONFIRMATION' => '确定要解除暂停规则 #%s 吗？',
-    'LEAVE_PAGE_CONFIRMATION' => '确定要离开当前页吗？',
+    'DELETE_RULE_CONFIRMATION' => '确定要删除防火墙规则 #%s 吗？',
+    'SUSPEND_RULE_CONFIRMATION' => '确定要暂停防火墙规则 #%s 吗？',
+    'UNSUSPEND_RULE_CONFIRMATION' => '确定要解除暂停防火墙规则 #%s 吗？',
+    'LEAVE_PAGE_CONFIRMATION' => '确定要离开当前页面吗？',
     'RESTART_CONFIRMATION' => '确定要重新启动 %s 吗？',
-    'Welcome' => '欢迎',
+    'Welcome' => '欢迎您',
     'LOGGED_IN_AS' => '以 %s 的身份登录',
     'Error' => '错误',
     'Invalid username or password' => '无效的用户名称或密码',
-    'Invalid username or code' => '无效的用户名称或验证码.',
+    'Invalid username or code' => '无效的用户名称或重置代码',
     'Passwords not match' => '密码错误',
     'Please enter valid email address.' => '请输入正确的邮箱',
     'Field "%s" can not be blank.' => '"%s" 不能为空',
-    'Password is too short.' => '密码太短 (至少为6个数字+字母)',
+    'Password is too short.' => '密码太短 (字符至少6个)',
     'Error code:' => '错误代码: %s',
     'SERVICE_ACTION_FAILED' => '"%s" "%s" 失败',
     'IP address is in use' => 'IP地址在使用中',
-    'BACKUP_SCHEDULED' => '您的要求已加入队列中，备份完成后会以电子邮件通知您 ',
-    'BACKUP_EXISTS' => '已经有一个备份正在执行，请等待备份完成后再操作',
+    'BACKUP_SCHEDULED' => '您的要求已加入队列中，备份完成后会以电子邮件通知您',
+    'BACKUP_EXISTS' => '已经有数据备份正在执行，请等待备份完成后再操作',
     'RESTORE_SCHEDULED' => '您的要求已加入队列中，恢复完成后会以电子邮件通知您',
-    'RESTORE_EXISTS' => '已经有一个恢复正在执行，请等待恢复完成后再操作',
+    'RESTORE_EXISTS' => '已经有数据恢复正在执行，请等待恢复完成后再操作',
 
     'WEB_EXCLUSIONS' => '输入域名，每行一个。要排除所有域名请使用 *。要排除特定目录使用以下格式: domain.com:public_html/cache:public_html/tmp',
     'DNS_EXCLUSIONS' => '输入域名，每行一个。要排除所有域名请使用 *',
@@ -523,15 +523,15 @@ $LANG['cn'] = array(
 
     'Welcome to Vesta Control Panel' => '欢迎来到 Vesta 管理系统',
     'MAIL_FROM' => 'Vesta 管理系统 <noreply@%s>',
-    'GREETINGS_GORDON_FREEMAN' => "您好, %s %s,\n",
-    'GREETINGS' => "您好,\n",
-    'ACCOUNT_READY' => "您的账户已创建成功，并可以开始使用了！\n\nhttps://%s/login/\n用户名称: %s\n密码: %s\n\n--\nVesta Control Panel\n",
+    'GREETINGS_GORDON_FREEMAN' => "您好，%s %s，\n\n",
+    'GREETINGS' => "您好，\n\n",
+    'ACCOUNT_READY' => "您的账户已创建成功，并可以开始使用了！\n\nhttps://%s/login/\n用户名称: %s\n密码: %s\n\n--\nVesta 管理系统\n",
 
     'FTP login credentials' => 'FTP 登录信息',
-    'FTP_ACCOUNT_READY' => "FTP账户已创建成功，并可以开始使用了！\n\n主机名称: %s\n用户名称: %s_%s\n密码: %s\n\n--\nVesta Control Panel\n",
+    'FTP_ACCOUNT_READY' => "FTP 账户已创建成功，并可以开始使用了！\n\n主机名称: %s\n用户名称: %s_%s\n密码: %s\n\n--\nVesta 管理系统\n",
 
     'Database Credentials' => '数据库登录信息',
-    'DATABASE_READY' => "数据库已添加成功！\n\n数据库名称: %s\n用户名称: %s\n密码: %s\n%s\n\n--\nVesta Control Panel\n",
+    'DATABASE_READY' => "数据库已添加成功！\n\n数据库名称: %s\n用户名称: %s\n密码: %s\n%s\n\n--\nVesta 管理系统\n",
 
     'forgot password' => '忘记密码',
     'Confirm' => '确认',
@@ -540,9 +540,9 @@ $LANG['cn'] = array(
     'Reset' => '重置',
     'Reset Code' => '重置代码',
     'RESET_NOTICE' => '',
-    'RESET_CODE_SENT' => '密码重置代码已发送到您的邮箱<br>',
-    'MAIL_RESET_SUBJECT' => '密码重置在 %s',
-    'PASSWORD_RESET_REQUEST' => '重置密码请点击链接:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\n或者您可以到 https://%s/reset/?action=code&user=%s 输入密码重置代码:\n%s\n\n如果您没有要求重置密码，请忽略此邮件\n\n--\nVesta Control Panel\n',
+    'RESET_CODE_SENT' => '重置代码已发送到您的邮箱<br>',
+    'MAIL_RESET_SUBJECT' => '重置密码在 %s',
+    'PASSWORD_RESET_REQUEST' => '重置密码请点击链接:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\n或者您可以到 https://%s/reset/?action=code&user=%s\n输入重置代码:\n%s\n\n如果您没有要求重置密码，请忽略此邮件\n\n--\nVesta 管理系统\n',
 
     'Jan' => '01月',
     'Feb' => '02月',
@@ -559,7 +559,7 @@ $LANG['cn'] = array(
 
     'Configuring Server' => '配置服务器',
     'Hostname' => '主机名称',
-    'Time Zone' => '时区',
+    'Time Zone' => '系统时区',
     'Default Language' => '默认语言',
     'Proxy Server' => '代理服务器',
     'Web Server' => 'Web 服务器',
@@ -568,7 +568,7 @@ $LANG['cn'] = array(
     'DNS Server' => 'DNS 服务器',
     'DNS Cluster' => 'DNS 集群',
     'MAIL Server' => '邮箱服务器',
-    'Antivirus' => '防病毒引擎',
+    'Antivirus' => '邮件防病毒',
     'AntiSpam' => '防垃圾邮件',
     'Use Web Domain SSL Certificate' => '采用网站域名SSL证书',
     'Webmail URL' => '网页邮箱网址',
@@ -585,15 +585,15 @@ $LANG['cn'] = array(
     'ftp' => 'FTP',
     'sftp' => 'SFTP',
     'SFTP Chroot' => 'SFTP Chroot',
-    'FileSystem Disk Quota' => '文件系统磁盘配额',
-    'Vesta Control Panel Plugins' => 'Vesta 管理系统的插件',
+    'FileSystem Disk Quota' => '磁盘配额',
+    'Vesta Control Panel Plugins' => 'Vesta 插件',
     'preview' => '预览',
     'Reseller Role' => '作为经销商',
     'Web Config Editor' => '网络配置编辑器',
     'Template Manager' => '模板管理',
     'Backup Migration Manager' => '备份迁移管理',
     'FileManager' => '文件管理',
-    'show: CPU / MEM / NET / DISK' => '查看: CPU / 内存 / 网络 / 磁盘',
+    'show: CPU / MEM / NET / DISK' => '查看资源详细信息',
 
     'sort by' => '排序方式',
     'Date' => '日期',
@@ -696,11 +696,11 @@ $LANG['cn'] = array(
     'Switch to Left Tab' => '切换到左标签',
     'Switch to Right Tab' => '切换到右标签',
     'Switch Tab' => '切换标签',
-    'Go to the Top of the File List' => '转至文件列表顶部',
-    'Go to the Last File' => '转至最后一个文件',
+    'Go to the Top of the File List' => '转到文件列表顶部',
+    'Go to the Last File' => '转到最后一个文件',
     'Open File / Enter Directory' => '打开文件 / 进入目录',
     'Edit File' => '编辑文件',
-    'Go to Parent Directory' => '转至父目录',
+    'Go to Parent Directory' => '转到父目录',
     'Select Current File' => '选中当前文件',
     'Select Bunch of Files' => '选择多个文件',
     'Add File to the Current Selection' => '将文件添加到当前选中区内',

From d6eb5f0ba72a972b459d89b701948708623c910e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 00:10:04 +0200
Subject: [PATCH 1270/2300] Disabling login with 'root'

tnx @jaapmarcus and HestiaCP
---
 web/login/index.php | 140 +++++++++++++++++++++++---------------------
 1 file changed, 73 insertions(+), 67 deletions(-)

diff --git a/web/login/index.php b/web/login/index.php
index b2e7c714..87aa6f1a 100644
--- a/web/login/index.php
+++ b/web/login/index.php
@@ -35,82 +35,88 @@ if (isset($_POST['user']) && isset($_POST['password'])) {
         $v_user = escapeshellarg($_POST['user']);
         $v_ip = escapeshellarg($_SERVER['REMOTE_ADDR']);
 
-        // Get user's salt
-        $output = '';
-        exec (VESTA_CMD."v-get-user-salt ".$v_user." ".$v_ip." json" , $output, $return_var);
-        $pam = json_decode(implode('', $output), true);
-        if ( $return_var > 0 ) {
-            $ERROR = "<a class=\"error\">".__('Invalid username or password')."</a>";
+        if($_POST['user'] == 'root'){
+            unset($_POST['password']);
+            unset($_POST['user']);
+            $ERROR = "<a class=\"error\">".__('Login with <strong>root</strong> has been disabled')."</a>";
         } else {
-            $user = $_POST['user'];
-            $password = $_POST['password'];
-            $salt = $pam[$user]['SALT'];
-            $method = $pam[$user]['METHOD'];
-
-            if ($method == 'md5' ) {
-                $hash = crypt($password, '$1$'.$salt.'$');
-            }
-            if ($method == 'sha-512' ) {
-                $hash = crypt($password, '$6$rounds=5000$'.$salt.'$');
-                $hash = str_replace('$rounds=5000','',$hash);
-            }
-            if ($method == 'des' ) {
-                $hash = crypt($password, $salt);
-            }
-
-            // Send hash via tmp file
-            $v_hash = exec('mktemp -p /tmp');
-            $fp = fopen($v_hash, "w");
-            fwrite($fp, $hash."\n");
-            fclose($fp);
-
-            // Check user hash
-            exec(VESTA_CMD ."v-check-user-hash ".$v_user." ".$v_hash." ".$v_ip,  $output, $return_var);
-            unset($output);
-
-            // Remove tmp file
-            unlink($v_hash);
-
-            // Check API answer
+            // Get user's salt
+            $output = '';
+            exec (VESTA_CMD."v-get-user-salt ".$v_user." ".$v_ip." json" , $output, $return_var);
+            $pam = json_decode(implode('', $output), true);
             if ( $return_var > 0 ) {
                 $ERROR = "<a class=\"error\">".__('Invalid username or password')."</a>";
             } else {
+                $user = $_POST['user'];
+                $password = $_POST['password'];
+                $salt = $pam[$user]['SALT'];
+                $method = $pam[$user]['METHOD'];
 
-                // Make root admin user
-                if ($_POST['user'] == 'root') $v_user = 'admin';
-
-                // Get user speciefic parameters
-                exec (VESTA_CMD . "v-list-user ".$v_user." json", $output, $return_var);
-                $data = json_decode(implode('', $output), true);
-
-                // Define session user
-                $_SESSION['user'] = key($data);
-                $v_user = $_SESSION['user'];
-
-                // Get user favorites
-                get_favourites();
-
-                // Define language
-                $output = '';
-                exec (VESTA_CMD."v-list-sys-languages json", $output, $return_var);
-                $languages = json_decode(implode('', $output), true);
-                if (in_array($data[$v_user]['LANGUAGE'], $languages)){
-                    $_SESSION['language'] = $data[$v_user]['LANGUAGE'];
-                } else {
-                    $_SESSION['language'] = 'en';
+                if ($method == 'md5' ) {
+                    $hash = crypt($password, '$1$'.$salt.'$');
+                }
+                if ($method == 'sha-512' ) {
+                    $hash = crypt($password, '$6$rounds=5000$'.$salt.'$');
+                    $hash = str_replace('$rounds=5000','',$hash);
+                }
+                if ($method == 'des' ) {
+                    $hash = crypt($password, $salt);
                 }
 
-                // Regenerate session id to prevent session fixation
-                session_regenerate_id();
+                // Send hash via tmp file
+                $v_hash = exec('mktemp -p /tmp');
+                $fp = fopen($v_hash, "w");
+                fwrite($fp, $hash."\n");
+                fclose($fp);
 
-                // Redirect request to control panel interface
-                if (!empty($_SESSION['request_uri'])) {
-                    header("Location: ".$_SESSION['request_uri']);
-                    unset($_SESSION['request_uri']);
-                    exit;
+                // Check user hash
+                exec(VESTA_CMD ."v-check-user-hash ".$v_user." ".$v_hash." ".$v_ip,  $output, $return_var);
+                unset($output);
+
+                // Remove tmp file
+                unlink($v_hash);
+
+                // Check API answer
+                if ( $return_var > 0 ) {
+                    $ERROR = "<a class=\"error\">".__('Invalid username or password')."</a>";
                 } else {
-                    header("Location: /list/user/");
-                    exit;
+
+                    // Make root admin user
+                    // if ($_POST['user'] == 'root') $v_user = 'admin';
+
+                    // Get user speciefic parameters
+                    exec (VESTA_CMD . "v-list-user ".$v_user." json", $output, $return_var);
+                    $data = json_decode(implode('', $output), true);
+
+                    // Define session user
+                    $_SESSION['user'] = key($data);
+                    $v_user = $_SESSION['user'];
+
+                    // Get user favorites
+                    get_favourites();
+
+                    // Define language
+                    $output = '';
+                    exec (VESTA_CMD."v-list-sys-languages json", $output, $return_var);
+                    $languages = json_decode(implode('', $output), true);
+                    if (in_array($data[$v_user]['LANGUAGE'], $languages)){
+                        $_SESSION['language'] = $data[$v_user]['LANGUAGE'];
+                    } else {
+                        $_SESSION['language'] = 'en';
+                    }
+
+                    // Regenerate session id to prevent session fixation
+                    session_regenerate_id();
+
+                    // Redirect request to control panel interface
+                    if (!empty($_SESSION['request_uri'])) {
+                        header("Location: ".$_SESSION['request_uri']);
+                        unset($_SESSION['request_uri']);
+                        exit;
+                    } else {
+                        header("Location: /list/user/");
+                        exit;
+                    }
                 }
             }
         }

From 20182cb6b7b1658bfde867f85abfd366db11fd18 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 00:48:10 +0200
Subject: [PATCH 1271/2300] Ability to change IP in
 v-make-separated-ip-for-email-domain

---
 bin/v-make-separated-ip-for-email-domain | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/bin/v-make-separated-ip-for-email-domain b/bin/v-make-separated-ip-for-email-domain
index f4b129e1..8f92e6d0 100644
--- a/bin/v-make-separated-ip-for-email-domain
+++ b/bin/v-make-separated-ip-for-email-domain
@@ -67,15 +67,16 @@ sed -i "s#^  helo_data = .*#$NEWVALUE#g" /etc/exim4/exim4.conf.template
 service exim4 restart
 
 check_grep=$(grep -c "^$DOMAIN:" /etc/exim4/virtual/interfaces)
-if [ "$check_grep" -eq 0 ]; then
+if [ "$check_grep" -eq 1 ]; then
+    echo "=== Changing $DOMAIN: $IP in /etc/exim4/virtual/interfaces"
+    sed -i "s#^$DOMAIN: .*#$DOMAIN: $IP#g" /etc/exim4/virtual/interfaces
+else
     echo "=== Adding $DOMAIN: $IP to /etc/exim4/virtual/interfaces"
     echo "" >> /etc/exim4/virtual/interfaces
     echo "$DOMAIN: $IP" >> /etc/exim4/virtual/interfaces
     length=$(wc -c </etc/exim4/virtual/interfaces)
     dd if=/dev/null of=/etc/exim4/virtual/interfaces obs="$((length-1))" seek=1 > /dev/null 2>&1
     echo "=== Done!"
-else
-    echo "=== Domain $DOMAIN is already added"
 fi
 
 #----------------------------------------------------------#

From 7594eed24afc2c0682805814e776683d1ef52c7d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 01:19:30 +0200
Subject: [PATCH 1272/2300] Update v-get-user-salt

tnx @jaapmarcus and HestiaCP
---
 bin/v-get-user-salt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-get-user-salt b/bin/v-get-user-salt
index 08ee5a9c..b99a684a 100755
--- a/bin/v-get-user-salt
+++ b/bin/v-get-user-salt
@@ -61,7 +61,7 @@ check_args '1' "$#" 'USER [IP] [SALT]'
 is_format_valid 'user'
 
 # Checking user
-if [ ! -d "$VESTA/data/users/$user" ] && [ "$user" != 'root' ]; then
+if [ ! -d "$VESTA/data/users/$user" ]; then
     echo "Error: password missmatch"
     echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
     exit 9

From 756a2b0d27ed4aa28535413fbc48b754126b8509 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 02:12:21 +0200
Subject: [PATCH 1273/2300] Deleting renamed command

---
 src/deb/vesta/postinst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 8573c16c..0ac3a7c0 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -178,6 +178,10 @@ fi
 if [ -f "/usr/local/vesta/W3TC.json" ]; then
     rm /usr/local/vesta/W3TC.json
 fi
+# Deleting renamed command
+if [ -f "/usr/local/vesta/bin/v-replace-in-file" ]; then
+    rm /usr/local/vesta/bin/v-replace-in-file
+fi
 
 # Limit max recipients per email to 15, in order to prevent mass spamming
 if [ ! -f "/usr/local/vesta/data/upgrades/limit_max_recipients" ]; then

From 2a71edda370c670c5f7533609c8cc3883c87d74b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 03:10:30 +0200
Subject: [PATCH 1274/2300] Update and rename v-replace-in-file to
 v-file-replace

---
 bin/v-file-replace    | 17 ++++++++++++++++
 bin/v-replace-in-file | 47 -------------------------------------------
 2 files changed, 17 insertions(+), 47 deletions(-)
 create mode 100644 bin/v-file-replace
 delete mode 100644 bin/v-replace-in-file

diff --git a/bin/v-file-replace b/bin/v-file-replace
new file mode 100644
index 00000000..c45609a0
--- /dev/null
+++ b/bin/v-file-replace
@@ -0,0 +1,17 @@
+#!/usr/bin/php
+<?php
+
+include ("/usr/local/vesta/func/main.php");
+include ("/usr/local/vesta/func/string.php");
+
+myvesta_check_args (3, 'find replace file');
+
+echo "Find: ".$find."\n";
+echo "Replace: ".$replace."\n";
+echo "File: ".$file."\n";
+
+$r=myvesta_replace_in_file($file, $find, $replace);
+
+if ($r) echo "Replacing done!\n";
+
+exit(0);
diff --git a/bin/v-replace-in-file b/bin/v-replace-in-file
deleted file mode 100644
index 2162fd7b..00000000
--- a/bin/v-replace-in-file
+++ /dev/null
@@ -1,47 +0,0 @@
-#!/usr/bin/php
-<?php
-
-$current_user=exec('whoami', $output, $return_var);
-if ($current_user != 'root') {echo "You must be root to execute this script\n"; exit(1);}
-
-if (isset($argv)) {
-	if (count($argv)==4) {
-		$find=$argv[1];
-		$replace=$argv[2];
-		$file=$argv[3];
-	} else {
-		echo "Usage: v-replace-in-file 'findString' 'replaceString' file\n";
-		exit(2);
-	}
-}
-
-function fix_backslashes($s) {
-	$s=str_replace("\\n", "\n", $s);
-	$s=str_replace("\\r", "\r", $s);
-	$s=str_replace("\\t", "\t", $s);
-	return $s;
-}
-
-$find=fix_backslashes($find);
-$replace=fix_backslashes($replace);
-
-echo "Find: ".$find."\n";
-echo "Replace: ".$replace."\n";
-echo "File: ".$file."\n";
-
-if (!file_exists($file)) {
-	echo "ERROR: File not found!\n";
-	exit(3);
-}
-
-$buf=file_get_contents($file);
-
-if (strpos($buf, $find)===false) {
-	echo "ERROR: String not found!\n";
-	exit(4);
-}
-
-$buf=str_replace($find, $replace, $buf);
-$r=file_put_contents($file, $buf);
-if ($r) echo "Done.\n";
-exit(0);

From 071e0d29a2e0be9135bba1a3b4de195dd21cf85c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 03:11:31 +0200
Subject: [PATCH 1275/2300] Create main.php

---
 func/main.php | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 func/main.php

diff --git a/func/main.php b/func/main.php
new file mode 100644
index 00000000..0e6d4ba1
--- /dev/null
+++ b/func/main.php
@@ -0,0 +1,38 @@
+<?php
+
+$myvesta_current_user=exec('whoami', $myvesta_output, $myvesta_return_var);
+if ($myvesta_current_user != 'root') {echo "ERROR: You must be root to execute this script\n"; exit(1);}
+
+define('myvesta_exit_on_error', true);
+
+function myvesta_throw_error($code, $message) {
+    echo "ERROR: ".$message."\n";
+    if (defined('myvesta_exit_on_error')) exit($code);
+    return $code;
+}
+
+function myvesta_fix_backslashes($s) {
+	$s=str_replace("\\n", "\n", $s);
+	$s=str_replace("\\r", "\r", $s);
+	$s=str_replace("\\t", "\t", $s);
+	return $s;
+}
+
+function myvesta_check_args ($requried_arguments, $arguments) {
+    global $argv;
+    $argument_counter=count($argv);
+    $argument_counter--;
+    if ($argument_counter<$requried_arguments) {
+        $command=$argv[0];
+        $command=str_replace('/usr/local/vesta/bin/', '', $command);
+        $arguments=str_replace(" ", "' '", $arguments);
+        $arguments="'".$arguments."'";
+        return myvesta_throw_error(1, "Usage: $command $arguments");
+    }
+    $argument_arr=explode(" ", $arguments);
+    $i=1;
+    foreach ($argument_arr as $argument) {
+        $GLOBALS[$argument]=myvesta_fix_backslashes($argv[$i]);
+        $i++;
+    }
+}

From 31d3bade0508368109fab9301f3a59cd3effc83a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 03:12:36 +0200
Subject: [PATCH 1276/2300] Create string.php

---
 func/string.php | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 func/string.php

diff --git a/func/string.php b/func/string.php
new file mode 100644
index 00000000..986e9541
--- /dev/null
+++ b/func/string.php
@@ -0,0 +1,13 @@
+<?php
+
+function myvesta_replace_in_file($file, $find, $replace) {
+    if (!file_exists($file)) return myvesta_throw_error (3, "File '$file' not found");
+
+    $buf=file_get_contents($file);
+
+    if (strpos($buf, $find)===false) return myvesta_throw_error (4, "String '$find' not found");
+
+    $buf=str_replace($find, $replace, $buf);
+    $r=file_put_contents($file, $buf);
+    return $r;
+}

From 348717d33a1379a57006205b7adb42af7e24de91 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 03:19:03 +0200
Subject: [PATCH 1277/2300] Update v-file-replace

---
 bin/v-file-replace | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-file-replace b/bin/v-file-replace
index c45609a0..46c20786 100644
--- a/bin/v-file-replace
+++ b/bin/v-file-replace
@@ -1,6 +1,8 @@
 #!/usr/bin/php
 <?php
 
+echo "----------------------------------------";
+
 include ("/usr/local/vesta/func/main.php");
 include ("/usr/local/vesta/func/string.php");
 
@@ -14,4 +16,6 @@ $r=myvesta_replace_in_file($file, $find, $replace);
 
 if ($r) echo "Replacing done!\n";
 
+echo "----------------------------------------";
+
 exit(0);

From b1c95879c63a10c42df95511a4cbbac1c77a1e10 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 03:21:07 +0200
Subject: [PATCH 1278/2300] Update v-file-replace

---
 bin/v-file-replace | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/bin/v-file-replace b/bin/v-file-replace
index 46c20786..caf2189b 100644
--- a/bin/v-file-replace
+++ b/bin/v-file-replace
@@ -1,8 +1,6 @@
 #!/usr/bin/php
 <?php
 
-echo "----------------------------------------";
-
 include ("/usr/local/vesta/func/main.php");
 include ("/usr/local/vesta/func/string.php");
 
@@ -16,6 +14,4 @@ $r=myvesta_replace_in_file($file, $find, $replace);
 
 if ($r) echo "Replacing done!\n";
 
-echo "----------------------------------------";
-
-exit(0);
+myvesta_exit(0);

From eaafe8dea3b2a7162a21e29780e92627dae139cc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 03:30:14 +0200
Subject: [PATCH 1279/2300] Update main.php

---
 func/main.php | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/func/main.php b/func/main.php
index 0e6d4ba1..16c5fef6 100644
--- a/func/main.php
+++ b/func/main.php
@@ -7,7 +7,7 @@ define('myvesta_exit_on_error', true);
 
 function myvesta_throw_error($code, $message) {
     echo "ERROR: ".$message."\n";
-    if (defined('myvesta_exit_on_error')) exit($code);
+    if (defined('myvesta_exit_on_error')) myvesta_exit($code);
     return $code;
 }
 
@@ -22,9 +22,9 @@ function myvesta_check_args ($requried_arguments, $arguments) {
     global $argv;
     $argument_counter=count($argv);
     $argument_counter--;
+    $argv[0]=str_replace('/usr/local/vesta/bin/', '', $argv[0]);
+    echo "-------------------- ".$argv[0]." --------------------\n";
     if ($argument_counter<$requried_arguments) {
-        $command=$argv[0];
-        $command=str_replace('/usr/local/vesta/bin/', '', $command);
         $arguments=str_replace(" ", "' '", $arguments);
         $arguments="'".$arguments."'";
         return myvesta_throw_error(1, "Usage: $command $arguments");
@@ -36,3 +36,9 @@ function myvesta_check_args ($requried_arguments, $arguments) {
         $i++;
     }
 }
+
+function myvesta_exit($code) {
+    global $argv;
+    echo "==================== ".$argv[0].": ".$code." ====================\n";
+    exit($code);
+}

From 98cc47e654b3ee101f96d70fb62b05089cf1fbb8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 05:05:49 +0200
Subject: [PATCH 1280/2300] Update main.php

---
 func/main.php | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/func/main.php b/func/main.php
index 16c5fef6..bb628082 100644
--- a/func/main.php
+++ b/func/main.php
@@ -3,11 +3,16 @@
 $myvesta_current_user=exec('whoami', $myvesta_output, $myvesta_return_var);
 if ($myvesta_current_user != 'root') {echo "ERROR: You must be root to execute this script\n"; exit(1);}
 
-define('myvesta_exit_on_error', true);
+$myvesta_exit_on_error=true;
+define('MYVESTA_ERROR_PERMISSION_DENIED', 1);
+define('MYVESTA_ERROR_MISSING_ARGUMENTS', 2);
+define('MYVESTA_ERROR_FILE_DOES_NOT_EXISTS', 3);
+define('MYVESTA_ERROR_STRING_DOES_NOT_EXISTS', 4);
 
 function myvesta_throw_error($code, $message) {
+    global $myvesta_exit_on_error;
     echo "ERROR: ".$message."\n";
-    if (defined('myvesta_exit_on_error')) myvesta_exit($code);
+    if ($myvesta_exit_on_error) myvesta_exit($code);
     return $code;
 }
 
@@ -27,7 +32,7 @@ function myvesta_check_args ($requried_arguments, $arguments) {
     if ($argument_counter<$requried_arguments) {
         $arguments=str_replace(" ", "' '", $arguments);
         $arguments="'".$arguments."'";
-        return myvesta_throw_error(1, "Usage: $command $arguments");
+        return myvesta_throw_error(MYVESTA_ERROR_MISSING_ARGUMENTS, "Usage: $command $arguments");
     }
     $argument_arr=explode(" ", $arguments);
     $i=1;

From ea0fa49d0e9ec738ff6f82ea03790d4502ac40be Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 05:06:45 +0200
Subject: [PATCH 1281/2300] Update string.php

---
 func/string.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/func/string.php b/func/string.php
index 986e9541..be7a4ca2 100644
--- a/func/string.php
+++ b/func/string.php
@@ -1,11 +1,11 @@
 <?php
 
 function myvesta_replace_in_file($file, $find, $replace) {
-    if (!file_exists($file)) return myvesta_throw_error (3, "File '$file' not found");
+    if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
 
     $buf=file_get_contents($file);
 
-    if (strpos($buf, $find)===false) return myvesta_throw_error (4, "String '$find' not found");
+    if (strpos($buf, $find)===false) return myvesta_throw_error (MYVESTA_ERROR_STRING_DOES_NOT_EXISTS, "String '$find' not found");
 
     $buf=str_replace($find, $replace, $buf);
     $r=file_put_contents($file, $buf);

From 3c899178b4aa6c331910932aae87f24c62d1b3ba Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 05:08:31 +0200
Subject: [PATCH 1282/2300] Update and rename v-file-replace to
 v-file-replace-string

---
 bin/{v-file-replace => v-file-replace-string} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename bin/{v-file-replace => v-file-replace-string} (85%)

diff --git a/bin/v-file-replace b/bin/v-file-replace-string
similarity index 85%
rename from bin/v-file-replace
rename to bin/v-file-replace-string
index caf2189b..271cc50c 100644
--- a/bin/v-file-replace
+++ b/bin/v-file-replace-string
@@ -10,7 +10,7 @@ echo "Find: ".$find."\n";
 echo "Replace: ".$replace."\n";
 echo "File: ".$file."\n";
 
-$r=myvesta_replace_in_file($file, $find, $replace);
+$r=myvesta_replace_in_file($find, $replace, $file);
 
 if ($r) echo "Replacing done!\n";
 

From 3919840fc42c7eecbb605d64ff6a0b903782e6e7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 05:09:18 +0200
Subject: [PATCH 1283/2300] Update string.php

---
 func/string.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/string.php b/func/string.php
index be7a4ca2..e2937beb 100644
--- a/func/string.php
+++ b/func/string.php
@@ -1,6 +1,6 @@
 <?php
 
-function myvesta_replace_in_file($file, $find, $replace) {
+function myvesta_replace_in_file($find, $replace, $file) {
     if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
 
     $buf=file_get_contents($file);

From a2be18cc181da7a58babbe9b5642bf1168d56d2e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 05:14:41 +0200
Subject: [PATCH 1284/2300] Update main.php

---
 func/main.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/main.php b/func/main.php
index bb628082..888fe25d 100644
--- a/func/main.php
+++ b/func/main.php
@@ -7,7 +7,7 @@ $myvesta_exit_on_error=true;
 define('MYVESTA_ERROR_PERMISSION_DENIED', 1);
 define('MYVESTA_ERROR_MISSING_ARGUMENTS', 2);
 define('MYVESTA_ERROR_FILE_DOES_NOT_EXISTS', 3);
-define('MYVESTA_ERROR_STRING_DOES_NOT_EXISTS', 4);
+define('MYVESTA_ERROR_STRING_NOT_FOUND', 4);
 
 function myvesta_throw_error($code, $message) {
     global $myvesta_exit_on_error;

From 147e75412ffae480f048e0d8f35b2349179142ea Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Aug 2020 05:15:23 +0200
Subject: [PATCH 1285/2300] Update string.php

---
 func/string.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/string.php b/func/string.php
index e2937beb..c94f85a2 100644
--- a/func/string.php
+++ b/func/string.php
@@ -5,7 +5,7 @@ function myvesta_replace_in_file($find, $replace, $file) {
 
     $buf=file_get_contents($file);
 
-    if (strpos($buf, $find)===false) return myvesta_throw_error (MYVESTA_ERROR_STRING_DOES_NOT_EXISTS, "String '$find' not found");
+    if (strpos($buf, $find)===false) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "String '$find' not found");
 
     $buf=str_replace($find, $replace, $buf);
     $r=file_put_contents($file, $buf);

From fd47112fc136b989d237e830b7c1c949f4808e1f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 10 Sep 2020 22:49:53 +0200
Subject: [PATCH 1286/2300] Checking necessary available disk space before
 doing backup

Many thanks to @ScIT-Raphael and HestiaCP
https://github.com/hestiacp/hestiacp/pull/1141
---
 bin/v-backup-user | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 88a00cab..9e6a425c 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -54,6 +54,15 @@ start_time=$(date '+%s')
 subj="$user → backup failed"
 email=$(grep CONTACT $VESTA/data/users/admin/user.conf |cut -f 2 -d \')
 
+# Validate available disk space (take usage * 2, due to the backup handling)
+let u_disk=$(grep "U_DISK=" $VESTA/data/users/$user/user.conf |cut -f 2 -d \')*2
+let v_disk=$(($(stat -f --format="%a*%S" $BACKUP)))/1024/1024
+
+if [ "$u_disk" -gt "$v_disk" ]; then
+    echo "not enough diskspace available to perform the backup." |$SENDMAIL -s "$subj" $email $notify
+    check_result $E_LIMIT "not enough diskspace available to perform the backup."
+fi
+
 if [ -z "$BACKUP_TEMP" ]; then
     BACKUP_TEMP=$BACKUP
 fi

From dcd6be2a229321ddf67ba931e9f8fb15391ab13f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 10 Sep 2020 22:55:38 +0200
Subject: [PATCH 1287/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 6f88ff0d..d7715655 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-36 [10-Aug-2020]
+==================================================
+* [Bugfix] Checking necessary available disk space before doing backup
+
 Version 0.9.8-26-35 [23-Aug-2020]
 ==================================================
 * [Feature] Limiting max recipients per email to 15, in order to prevent mass spamming

From ce0619b44aac78e11a63117349c19c84cc0d5b07 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 10 Sep 2020 22:58:21 +0200
Subject: [PATCH 1288/2300] Version 0.9.8-26-36

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 88f05a49..f7bb6693 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-34
+0.9.8-26-36

From 69468e6ace4586f2aba7ac49f19df90da35b03d6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 10 Sep 2020 23:03:42 +0200
Subject: [PATCH 1289/2300] Update Changelog.md

---
 Changelog.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Changelog.md b/Changelog.md
index d7715655..32a497fb 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,6 +1,7 @@
 Version 0.9.8-26-36 [10-Aug-2020]
 ==================================================
 * [Bugfix] Checking necessary available disk space before doing backup
+* [Security] Disabling login with 'root'
 
 Version 0.9.8-26-35 [23-Aug-2020]
 ==================================================

From 88c064a976f03ab5d3709cecbb802dbdbf229551 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 10 Sep 2020 23:39:20 +0200
Subject: [PATCH 1290/2300] Update latest.txt

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index f7bb6693..99eb1405 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-0.9.8-26-36
+vesta-0.9.8-26-36

From 138c0e3729b18d3da94c8432915652461ecf47b6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 11 Sep 2020 11:44:07 +0200
Subject: [PATCH 1291/2300] Update Changelog.md

---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 32a497fb..35421d6f 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,4 +1,4 @@
-Version 0.9.8-26-36 [10-Aug-2020]
+Version 0.9.8-26-36 [10-Sep-2020]
 ==================================================
 * [Bugfix] Checking necessary available disk space before doing backup
 * [Security] Disabling login with 'root'

From 65625ce99069271ffbe0377f3e77eadf838fb75a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 17 Sep 2020 12:04:33 +0200
Subject: [PATCH 1292/2300] Avoid php patching if Deb9 and Apache=no

---
 install/vst-install-debian.sh | 24 +++++++++++++-----------
 1 file changed, 13 insertions(+), 11 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index b278d02d..dde23b33 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1531,17 +1531,19 @@ touch /var/log/php-mail.log
 chmod a=rw /var/log/php-mail.log
 
 if [ "$release" -eq 9 ]; then
-  if [ $memory -lt 10000000 ]; then
-    echo "=== Patching php7.0-vps"
-    mkdir -p /root/vesta-temp-dl/vesta/patch
-    cp $vestacp/php/php7.0-vps.patch /root/vesta-temp-dl/vesta/patch/php7.0-vps.patch
-    patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php7.0-vps.patch
-  fi
-  if [ $memory -gt 9999999 ]; then
-    echo "=== Patching php7.0-dedi"
-    mkdir -p /root/vesta-temp-dl/vesta/patch
-    cp $vestacp/php/php7.0-dedi.patch /root/vesta-temp-dl/vesta/patch/php7.0-dedi.patch
-    patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php7.0-dedi.patch
+  if [ "$apache" = 'yes' ]; then
+    if [ $memory -lt 10000000 ]; then
+      echo "=== Patching php7.0-vps"
+      mkdir -p /root/vesta-temp-dl/vesta/patch
+      cp $vestacp/php/php7.0-vps.patch /root/vesta-temp-dl/vesta/patch/php7.0-vps.patch
+      patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php7.0-vps.patch
+    fi
+    if [ $memory -gt 9999999 ]; then
+      echo "=== Patching php7.0-dedi"
+      mkdir -p /root/vesta-temp-dl/vesta/patch
+      cp $vestacp/php/php7.0-dedi.patch /root/vesta-temp-dl/vesta/patch/php7.0-dedi.patch
+      patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php7.0-dedi.patch
+    fi
   fi
 fi
 if [ "$release" -eq 10 ]; then

From a51c286920eb0e9325af0d168eaaf8ca3200ee83 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 17 Sep 2020 12:09:49 +0200
Subject: [PATCH 1293/2300] Changing Vesta to myVesta labels installer

---
 install/vst-install-debian.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index dde23b33..bbb0dde4 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1658,13 +1658,13 @@ crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -e
 
 # Sending notification to admin email
 echo -e "Congratulations, you have just successfully installed \
-Vesta Control Panel
+myVesta Control Panel
 
 https://$ip:$port/$secretquery
 username: admin
 password: $vpass
 
-We hope that you enjoy your installation of Vesta. Please \
+We hope that you enjoy your installation of myVesta. Please \
 feel free to contact us anytime if you have any questions.
 Thank you.
 

From 476024381a20d064e3820045f3ad10c613e34930 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 17 Sep 2020 23:52:42 +0200
Subject: [PATCH 1294/2300] More details about needes space for backup

---
 bin/v-backup-user | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 9e6a425c..4f7a0c1c 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -55,10 +55,14 @@ subj="$user → backup failed"
 email=$(grep CONTACT $VESTA/data/users/admin/user.conf |cut -f 2 -d \')
 
 # Validate available disk space (take usage * 2, due to the backup handling)
+let u_account=$(grep "U_DISK=" $VESTA/data/users/$user/user.conf |cut -f 2 -d \')
 let u_disk=$(grep "U_DISK=" $VESTA/data/users/$user/user.conf |cut -f 2 -d \')*2
 let v_disk=$(($(stat -f --format="%a*%S" $BACKUP)))/1024/1024
 
 if [ "$u_disk" -gt "$v_disk" ]; then
+    echo "available space on disk: $v_disk" |tee $BACKUP/$user.log
+    echo "account size           : $v_account" |tee $BACKUP/$user.log
+    echo "needed space on disk   : $u_disk" |tee $BACKUP/$user.log
     echo "not enough diskspace available to perform the backup." |$SENDMAIL -s "$subj" $email $notify
     check_result $E_LIMIT "not enough diskspace available to perform the backup."
 fi

From c56ac362cdb300cbfe414d06e73fc413d22c1cea Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 18 Sep 2020 00:43:49 +0200
Subject: [PATCH 1295/2300] Update v-backup-user

---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 4f7a0c1c..c394abcf 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -61,7 +61,7 @@ let v_disk=$(($(stat -f --format="%a*%S" $BACKUP)))/1024/1024
 
 if [ "$u_disk" -gt "$v_disk" ]; then
     echo "available space on disk: $v_disk" |tee $BACKUP/$user.log
-    echo "account size           : $v_account" |tee $BACKUP/$user.log
+    echo "account size           : $u_account" |tee $BACKUP/$user.log
     echo "needed space on disk   : $u_disk" |tee $BACKUP/$user.log
     echo "not enough diskspace available to perform the backup." |$SENDMAIL -s "$subj" $email $notify
     check_result $E_LIMIT "not enough diskspace available to perform the backup."

From 1f63bf12e3c03493dca2c8df3d5c0ed1c2a88948 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 18 Sep 2020 00:46:38 +0200
Subject: [PATCH 1296/2300] Update v-backup-user

---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index c394abcf..42b8503e 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -60,8 +60,8 @@ let u_disk=$(grep "U_DISK=" $VESTA/data/users/$user/user.conf |cut -f 2 -d \')*2
 let v_disk=$(($(stat -f --format="%a*%S" $BACKUP)))/1024/1024
 
 if [ "$u_disk" -gt "$v_disk" ]; then
-    echo "available space on disk: $v_disk" |tee $BACKUP/$user.log
     echo "account size           : $u_account" |tee $BACKUP/$user.log
+    echo "available space on disk: $v_disk" |tee $BACKUP/$user.log
     echo "needed space on disk   : $u_disk" |tee $BACKUP/$user.log
     echo "not enough diskspace available to perform the backup." |$SENDMAIL -s "$subj" $email $notify
     check_result $E_LIMIT "not enough diskspace available to perform the backup."

From 5b0e051565471e74ff8a8562659554c0b1c7c7e6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 18 Sep 2020 01:04:25 +0200
Subject: [PATCH 1297/2300] Update v-backup-user

---
 bin/v-backup-user | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 42b8503e..2e245156 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -60,11 +60,11 @@ let u_disk=$(grep "U_DISK=" $VESTA/data/users/$user/user.conf |cut -f 2 -d \')*2
 let v_disk=$(($(stat -f --format="%a*%S" $BACKUP)))/1024/1024
 
 if [ "$u_disk" -gt "$v_disk" ]; then
-    echo "account size           : $u_account" |tee $BACKUP/$user.log
-    echo "available space on disk: $v_disk" |tee $BACKUP/$user.log
-    echo "needed space on disk   : $u_disk" |tee $BACKUP/$user.log
-    echo "not enough diskspace available to perform the backup." |$SENDMAIL -s "$subj" $email $notify
-    check_result $E_LIMIT "not enough diskspace available to perform the backup."
+    echo "account size           : $u_account megabytes" |tee $BACKUP/$user.log
+    echo "available space on disk: $v_disk megabytes" |tee $BACKUP/$user.log
+    echo "needed space on disk   : $u_disk megabytes" |tee $BACKUP/$user.log
+    echo "not enough disk space available to perform the backup." |$SENDMAIL -s "$subj" $email $notify
+    check_result $E_LIMIT "not enough disk space available to perform the backup."
 fi
 
 if [ -z "$BACKUP_TEMP" ]; then

From 0fdc394de1041e3a8e3a98b0471e790084dbae20 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 20 Sep 2020 17:30:33 +0200
Subject: [PATCH 1298/2300] Regexp fix in v-clone-website

---
 bin/v-clone-website | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index a92788d6..5922d2d1 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -321,7 +321,8 @@ replace_php_config_value "${FROM_DATABASE_USERNAME}" "${TO_DATABASE_USERNAME}" "
 replace_php_config_value "${FROM_DATABASE_PASSWORD}" "${TO_DATABASE_PASSWORD}" "$TO_CONFIG_FILE_FULL_PATH" "yes"
 
 echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in folder $TO_FOLDER"
-grep -rl "$FROM_DOMAIN" $TO_FOLDER | xargs sed -i "s#$FROM_DOMAIN#$TO_DOMAIN#g"
+REGEXP_FROM_DOMAIN="${FROM_DOMAIN//\./\\.}"
+grep -rl "$REGEXP_FROM_DOMAIN" $TO_FOLDER | xargs sed -i "s#$REGEXP_FROM_DOMAIN#$TO_DOMAIN#g"
 if [ "$FROM_USER" != "$TO_USER" ]; then
     echo "=== Replacing /home/$FROM_USER/ to /home/$TO_USER/ in folder $TO_FOLDER"
     grep -rl "/home/$FROM_USER/" $TO_FOLDER | xargs sed -i "s#/home/$FROM_USER/#/home/$TO_USER/#g"

From 95a8046e60b7649403b4a4a554ec40082f27efd8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 21 Sep 2020 00:33:49 +0200
Subject: [PATCH 1299/2300] Roundcube SMTP auth

---
 install/vst-install-debian.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index bbb0dde4..b7bc82ad 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1305,6 +1305,8 @@ if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
         chown root:www-data /etc/roundcube/debian-db-roundcube.php
         chown root:www-data /etc/roundcube/config.inc.php
     fi
+    sed -i "s#^\$config\['smtp_user'\].*#\$config\['smtp_user'\] = '%u';#g" /etc/roundcube/defaults.inc.php
+    sed -i "s#^\$config\['smtp_pass'\].*#\$config\['smtp_pass'\] = '%p';#g" /etc/roundcube/defaults.inc.php
     if [ "$release" -eq 8 ]; then
         # RoundCube tinyMCE fix
         tinymceFixArchiveURL=$vestacp/roundcube/roundcube-tinymce.tar.gz
@@ -1625,6 +1627,7 @@ touch /usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates
 touch /usr/local/vesta/data/upgrades/clamav_block_exe_in_archives
 touch /usr/local/vesta/data/upgrades/clearing-letsencrypt-pipe
 touch /usr/local/vesta/data/upgrades/limit_max_recipients
+touch /usr/local/vesta/data/upgrades/roundcube_smtp_auth
 
 # Secret URL
 secretquery=''

From fb5a3da3de6ee72378242bf555854636045c456d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 21 Sep 2020 00:39:46 +0200
Subject: [PATCH 1300/2300] Fixing Roundcube to send via authenticated SMTP
 user instead via php

---
 src/deb/vesta/postinst | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 0ac3a7c0..f8452efb 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -198,6 +198,15 @@ if [ ! -f "/usr/local/vesta/data/upgrades/limit_max_recipients" ]; then
     fi
 fi
 
+# Fixing Roundcube to send via authenticated SMTP user instead via php
+if [ ! -f "/usr/local/vesta/data/upgrades/roundcube_smtp_auth" ]; then
+    touch /usr/local/vesta/data/upgrades/roundcube_smtp_auth
+    if [ -f "/etc/roundcube/defaults.inc.php" ]; then
+        echo "=== Fixing Roundcube to send via authenticated SMTP user instead via php"
+        sed -i "s#^\$config\['smtp_user'\].*#\$config\['smtp_user'\] = '%u';#g" /etc/roundcube/defaults.inc.php
+        sed -i "s#^\$config\['smtp_pass'\].*#\$config\['smtp_pass'\] = '%p';#g" /etc/roundcube/defaults.inc.php
+    fi
+fi
 
 # Run custom triggers
 if [ -x "/root/vesta-patch.sh" ]; then

From 2dc4adb08ef0b00a7ba914c3a94966ca41cc69a1 Mon Sep 17 00:00:00 2001
From: moucho <1095644+moucho@users.noreply.github.com>
Date: Thu, 22 Oct 2020 13:48:45 +0200
Subject: [PATCH 1301/2300] Deprecate GET acme v2

---
 bin/v-add-letsencrypt-domain | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 0e9438ed..cea360c4 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -53,7 +53,10 @@ query_le_v2() {
     post_data=$post_data'"payload":"'"$payload_"'",'
     post_data=$post_data'"signature":"'"$signature_"'"}'
 
-    curl -s -i -d "$post_data" "$1" -H "$content"
+    # Save http response to file passed as "$4" arg or print to stdout if not provided
+    # http response headers are always sent to stdout
+    local save_to_file=${4:-"/dev/stdout"}
+    curl --silent --dump-header /dev/stdout --data "$post_data" "$1" --header "$content" --output "$save_to_file"
 }
 
 
@@ -232,7 +235,12 @@ if [[ "$status" -ne 200 ]]; then
 fi
 
 # Downloading signed certificate / STEP 7
-curl -s "$certificate" -o $ssl_dir/$domain.pem
+answer=$(query_le_v2 "$certificate" "" "$nonce" "$ssl_dir/$domain.pem")
+status=$(echo "$answer"|grep HTTP/ |tail -n1 |cut -f 2 -d ' ')
+if [[ "$status" -ne 200 ]]; then
+    [ -d "$ssl_dir" ] && rm -rf "$ssl_dir"
+    check_result $E_NOTEXIST "Let's Encrypt downloading signed cert failed status: $status"
+fi
 
 # Splitting up downloaded pem
 crt_end=$(grep -n END $ssl_dir/$domain.pem |head -n1 |cut -f1 -d:)

From 46055c0ba53247db14cf8508bdb4049ec80e3cf4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 26 Oct 2020 19:23:24 +0100
Subject: [PATCH 1302/2300] Update Changelog.md

---
 Changelog.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 35421d6f..28d016c9 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,8 @@
+Version 0.9.8-26-37 [26-Oct-2020]
+==================================================
+* [Bugfix] Fixing LetsEncrypt deprecated GET method for ACME v2
+* [Bugfix] Fixing Roundcube to send via authenticated SMTP user instead via php
+
 Version 0.9.8-26-36 [10-Sep-2020]
 ==================================================
 * [Bugfix] Checking necessary available disk space before doing backup

From 27feb014132a61744f0e72d254a3fe145eb6cd99 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 26 Oct 2020 19:25:45 +0100
Subject: [PATCH 1303/2300] Update Changelog.md

thanks to @moucho
---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 28d016c9..64a74091 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,6 +1,6 @@
 Version 0.9.8-26-37 [26-Oct-2020]
 ==================================================
-* [Bugfix] Fixing LetsEncrypt deprecated GET method for ACME v2
+* [Bugfix] Fixing LetsEncrypt deprecated GET method for ACME v2 (thanks to @moucho)
 * [Bugfix] Fixing Roundcube to send via authenticated SMTP user instead via php
 
 Version 0.9.8-26-36 [10-Sep-2020]

From 7cdefe6f9a41b191329da8ddff4f557f4b82f260 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 26 Oct 2020 19:26:54 +0100
Subject: [PATCH 1304/2300] Version 0.9.8-26-37

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 99eb1405..d5c6d4d2 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-36
+vesta-0.9.8-26-37

From 2a5ba16689dbec543131f15b7cb43fb4dda2e180 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 5 Nov 2020 22:02:53 +0100
Subject: [PATCH 1305/2300] New version of phpmyadmin

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index b7bc82ad..e4d09761 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1093,7 +1093,7 @@ if [ "$mysql" = 'yes' ]; then
       mkdir /root/phpmyadmin
       mkdir /usr/share/phpmyadmin
       
-      pma_v='4.9.5'
+      pma_v='4.9.8'
       echo "(*) Installing phpMyAdmin version v$pma_v..."
 
       cd /root/phpmyadmin

From b41ac10a9666bb0e92143e90254a42d8a2d9d0da Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 5 Nov 2020 22:06:08 +0100
Subject: [PATCH 1306/2300] New version of phpmyadmin

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index e4d09761..7f4a3f3f 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1093,7 +1093,7 @@ if [ "$mysql" = 'yes' ]; then
       mkdir /root/phpmyadmin
       mkdir /usr/share/phpmyadmin
       
-      pma_v='4.9.8'
+      pma_v='4.9.7'
       echo "(*) Installing phpMyAdmin version v$pma_v..."
 
       cd /root/phpmyadmin

From 1f8d385cbbc9480b615aed055ebb12251fb27422 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 7 Nov 2020 21:21:10 +0100
Subject: [PATCH 1307/2300] Installer fix: avoid to turn On nginx if php-fpm is
 On

---
 install/vst-install-debian.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 7f4a3f3f..4afe2e98 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -253,10 +253,10 @@ set_default_value 'interactive' 'yes'
 set_default_lang 'en'
 
 # Checking software conflicts
-if [ "$phpfpm" = 'yes' ]; then
-    apache='no'
-    nginx='yes'
-fi
+# if [ "$phpfpm" = 'yes' ]; then
+#     apache='no'
+#     nginx='yes'
+# fi
 if [ "$proftpd" = 'yes' ]; then
     vsftpd='no'
 fi

From 0fd4d9f4f5e89ed067a45413cdbd36f8a5725394 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 5 Dec 2020 19:10:53 +0100
Subject: [PATCH 1308/2300] Update status.conf

---
 install/debian/10/apache2/status.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/apache2/status.conf b/install/debian/10/apache2/status.conf
index da9d9633..0d82a356 100644
--- a/install/debian/10/apache2/status.conf
+++ b/install/debian/10/apache2/status.conf
@@ -4,5 +4,5 @@ Listen 127.0.0.1:8081
     Order deny,allow
     Deny from all
     Allow from 127.0.0.1
-    Allow from all
+    # Allow from all
 </Location>

From dedfd927ab89a3070de689b61c1cdefe12e0bd00 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 5 Dec 2020 19:11:25 +0100
Subject: [PATCH 1309/2300] Update status.conf

---
 install/debian/9/apache2/status.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/9/apache2/status.conf b/install/debian/9/apache2/status.conf
index da9d9633..0d82a356 100644
--- a/install/debian/9/apache2/status.conf
+++ b/install/debian/9/apache2/status.conf
@@ -4,5 +4,5 @@ Listen 127.0.0.1:8081
     Order deny,allow
     Deny from all
     Allow from 127.0.0.1
-    Allow from all
+    # Allow from all
 </Location>

From f87855ffa8e5a96f999ce0d1e3aa54fccdcbbb3b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 5 Dec 2020 19:12:02 +0100
Subject: [PATCH 1310/2300] Update status.conf

---
 install/debian/8/apache2/status.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/8/apache2/status.conf b/install/debian/8/apache2/status.conf
index da9d9633..0d82a356 100644
--- a/install/debian/8/apache2/status.conf
+++ b/install/debian/8/apache2/status.conf
@@ -4,5 +4,5 @@ Listen 127.0.0.1:8081
     Order deny,allow
     Deny from all
     Allow from 127.0.0.1
-    Allow from all
+    # Allow from all
 </Location>

From 4b02876ca4817328705b5c8b7b3ff33080c45878 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 5 Dec 2020 19:30:28 +0100
Subject: [PATCH 1311/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 4afe2e98..3481897a 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1628,6 +1628,7 @@ touch /usr/local/vesta/data/upgrades/clamav_block_exe_in_archives
 touch /usr/local/vesta/data/upgrades/clearing-letsencrypt-pipe
 touch /usr/local/vesta/data/upgrades/limit_max_recipients
 touch /usr/local/vesta/data/upgrades/roundcube_smtp_auth
+touch /usr/local/vesta/data/upgrades/apache_status_public_access
 
 # Secret URL
 secretquery=''

From 3081f7df5c0a9f6e22b73ca14bc86343f52a2f1f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 5 Dec 2020 19:30:47 +0100
Subject: [PATCH 1312/2300] Fixing Apache status public access

---
 src/deb/vesta/postinst | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index f8452efb..712b2ac4 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -208,6 +208,16 @@ if [ ! -f "/usr/local/vesta/data/upgrades/roundcube_smtp_auth" ]; then
     fi
 fi
 
+# Fixing Apache status public access
+if [ ! -f "/usr/local/vesta/data/upgrades/apache_status_public_access" ]; then
+    touch /usr/local/vesta/data/upgrades/apache_status_public_access
+    if [ -f "/etc/apache2/mods-available/status.conf" ]; then
+        echo "=== Fixing Apache status public access"
+        sed -i "s|Allow from all|# Allow from all|g" /etc/apache2/mods-available/status.conf
+        service apache2 restart
+    fi
+fi
+
 # Run custom triggers
 if [ -x "/root/vesta-patch.sh" ]; then
     /root/vesta-patch.sh

From 55a09a9ee3a7716402326e1a52d14c864beb5580 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 5 Dec 2020 19:35:23 +0100
Subject: [PATCH 1313/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 64a74091..06126436 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-38 [05-Dec-2020]
+==================================================
+* Fixing Apache status public access (thanks to HestiaCP for for letting us know)
+
 Version 0.9.8-26-37 [26-Oct-2020]
 ==================================================
 * [Bugfix] Fixing LetsEncrypt deprecated GET method for ACME v2 (thanks to @moucho)

From 488f1c7a31a8f9d0fd732f93c7f0befc1b60d754 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 5 Dec 2020 19:36:58 +0100
Subject: [PATCH 1314/2300] Version 0.9.8-26-38

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index d5c6d4d2..e62d9535 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-37
+  vesta-0.9.8-26-38

From 4e1fa39bb6a8a0cdb6406392d98485b1d89e0ec1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 5 Dec 2020 19:38:50 +0100
Subject: [PATCH 1315/2300] Update Changelog.md

---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 06126436..bfc65d08 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,6 +1,6 @@
 Version 0.9.8-26-38 [05-Dec-2020]
 ==================================================
-* Fixing Apache status public access (thanks to HestiaCP for for letting us know)
+* Fixing Apache status public access (thanks to HestiaCP for letting us know)
 
 Version 0.9.8-26-37 [26-Oct-2020]
 ==================================================

From 1062168fed165a7def379f6b2051858c9928df8e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 5 Dec 2020 19:45:58 +0100
Subject: [PATCH 1316/2300] Update latest.txt

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index e62d9535..bee6760c 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-  vesta-0.9.8-26-38
+vesta-0.9.8-26-38

From 5da09d9c5be028b66d13be61bbfc0abcd6969c47 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 12 Dec 2020 12:54:06 +0100
Subject: [PATCH 1317/2300] Fix for downloading backup of other users

---
 web/download/backup/index.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/web/download/backup/index.php b/web/download/backup/index.php
index 06846714..f71131a1 100644
--- a/web/download/backup/index.php
+++ b/web/download/backup/index.php
@@ -3,6 +3,13 @@
 error_reporting(NULL);
 session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
+
+// Check token
+if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+    header('Location: /login/');
+    exit();
+}
+
 $backup = basename($_GET['backup']);
 
 // Check if the backup exists

From 00b4267afd7e23673887aff9bacd3c2e2d26fe76 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 12 Dec 2020 13:43:27 +0100
Subject: [PATCH 1318/2300] htmlentities() for token

---
 web/add/user/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/add/user/index.php b/web/add/user/index.php
index 914eb3dd..1ed521e3 100644
--- a/web/add/user/index.php
+++ b/web/add/user/index.php
@@ -100,7 +100,7 @@ if (!empty($_POST['ok'])) {
     // Flush field values on success
     if (empty($_SESSION['error_msg'])) {
         $_SESSION['ok_msg'] = __('USER_CREATED_OK',htmlentities($_POST['v_username']),htmlentities($_POST['v_username']));
-        $_SESSION['ok_msg'] .= " / <a href=/login/?loginas=".htmlentities($_POST['v_username']).">" . __('login as') ." ".htmlentities($_POST['v_username']). "</a>";
+        $_SESSION['ok_msg'] .= " / <a href=/login/?loginas=".htmlentities($_POST['v_username'])."&token=".htmlentities($_SESSION['token']).">" . __('login as') ." ".htmlentities($_POST['v_username']). "</a>";
         unset($v_username);
         unset($v_password);
         unset($v_email);

From 292d933f88e25132c13f030cd5396c3285f00e4a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 12 Dec 2020 13:48:51 +0100
Subject: [PATCH 1319/2300] Preventing admin to do loginas action without token

This is useless issue and useless fix too.
---
 web/login/index.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/web/login/index.php b/web/login/index.php
index 87aa6f1a..bf3f2c28 100644
--- a/web/login/index.php
+++ b/web/login/index.php
@@ -16,6 +16,12 @@ if (isset($_GET['logout'])) {
 
 // Login as someone else
 if (isset($_SESSION['user'])) {
+    if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+        session_destroy();
+        session_start();
+        header('Location: /login/');
+        exit();
+    }
     if ($_SESSION['user'] == 'admin' && !empty($_GET['loginas'])) {
         exec (VESTA_CMD . "v-list-user ".escapeshellarg($_GET['loginas'])." json", $output, $return_var);
         if ( $return_var == 0 ) {

From f31b4b4d41b1921fd82d1bb355635e8dd005f7f2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 12 Dec 2020 13:52:26 +0100
Subject: [PATCH 1320/2300] Update index.php

---
 web/logout/index.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/web/logout/index.php b/web/logout/index.php
index 795eb65f..7f1d693c 100644
--- a/web/logout/index.php
+++ b/web/logout/index.php
@@ -4,10 +4,11 @@ session_start();
 
 if (!empty($_SESSION['look'])) {
     unset($_SESSION['look']);
+    header("Location: /");
 } else {
     session_destroy();
+    header("Location: /login/");
 }
 
-header("Location: /login/");
 exit;
 ?>

From 81daa6413b187d0a26a516dda937a39eef72f976 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 12 Dec 2020 14:09:48 +0100
Subject: [PATCH 1321/2300] Checking period value in /list/rrd/

---
 web/list/rrd/index.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/web/list/rrd/index.php b/web/list/rrd/index.php
index 7a13b78b..2c30b530 100644
--- a/web/list/rrd/index.php
+++ b/web/list/rrd/index.php
@@ -11,6 +11,10 @@ if ($_SESSION['user'] != 'admin') {
     exit;
 }
 
+if (!empty($_GET['period'])) {
+    if ($_GET['period']!="daily" && $_GET['period']!="weekly" && $_GET['period']!="monthly" && $_GET['period']!="yearly") unset($_GET['period']);
+}
+
 // Data
 exec (VESTA_CMD."v-list-sys-rrd json", $output, $return_var);
 $data = json_decode(implode('', $output), true);

From 10bfc78741f2d13102f924fc2182cc3de796d383 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 12 Dec 2020 14:16:02 +0100
Subject: [PATCH 1322/2300] Version 0.9.8-26-39

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index bee6760c..22cf0781 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-38
+vesta-0.9.8-26-39

From e7ec63a85faddb6de41d5ecda176ba16d0fe18ab Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 12 Dec 2020 14:20:44 +0100
Subject: [PATCH 1323/2300] Update Changelog.md

---
 Changelog.md | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index bfc65d08..93c7aac0 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,6 +1,11 @@
+Version 0.9.8-26-39 [12-Dec-2020]
+==================================================
+* [Security] Fixing useless issue with tokens in "download backup" and "loginas" functions (thanks to HestiaCP for fixes)
+* [Security] Fixing XSS in /list/rrd/?period= value
+
 Version 0.9.8-26-38 [05-Dec-2020]
 ==================================================
-* Fixing Apache status public access (thanks to HestiaCP for letting us know)
+* [Security] Fixing Apache status public access (thanks to HestiaCP for letting us know)
 
 Version 0.9.8-26-37 [26-Oct-2020]
 ==================================================

From 5be1e2d56d5942634e6477d0f4f81715ff208a2e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 21 Dec 2020 18:40:58 +0100
Subject: [PATCH 1324/2300] Fixing DNS issue in LXC virtualization

---
 bin/v-update-firewall | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-firewall b/bin/v-update-firewall
index d2d06355..183522a7 100755
--- a/bin/v-update-firewall
+++ b/bin/v-update-firewall
@@ -60,7 +60,7 @@ echo "$iptables -P INPUT ACCEPT" >> $tmp
 echo "$iptables -F INPUT" >> $tmp
 
 # Enabling stateful support
-if [ "$conntrack" != 'no' ]; then
+if [ "$conntrack" != 'no' ] || grep --quiet container=lxc /proc/1/environ; then
     str="$iptables -A INPUT -m state"
     str="$str --state ESTABLISHED,RELATED -j ACCEPT"
     echo "$str" >> $tmp

From ad6258a50859025f93655d3d8589897015d68729 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:24:20 -0500
Subject: [PATCH 1325/2300] Update default.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/default.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/default.stpl b/install/debian/10/templates/web/nginx/php-fpm/default.stpl
index 5cb55311..38de83d2 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/default.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/default.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 156a7358e890adc5fa4e0b07786df90fffab4212 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:30:56 -0500
Subject: [PATCH 1326/2300] Update cms_made_simple.stpl

ssl directive is deprecated
---
 .../debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl
index d85bcce3..003e9180 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 01f84bff1c46f8034d8f4a00dce6a40223f7fe17 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:31:18 -0500
Subject: [PATCH 1327/2300] Update codeigniter2.stpl

ssl directive is deprecated
---
 .../debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl    | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl b/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl
index 9c24c3ea..51f1f408 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 9ae68a35da3bd565a2748c66ba5a0e5872dc96c6 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:31:35 -0500
Subject: [PATCH 1328/2300] Update codeigniter3.stpl

---
 .../debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl    | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl b/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl
index d7186314..e8dd8bf6 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 4a7ff708ae004bf865c4d6752c259bab4b7177a4 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:31:54 -0500
Subject: [PATCH 1329/2300] Update datalife_engine.stpl

---
 .../10/templates/web/nginx/php-fpm/datalife_engine.stpl      | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl b/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl
index 4f0b9ec7..b066d5d2 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl
@@ -1,13 +1,12 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
-
-    ssl         on;
+    
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From b21f0e6c32e02ee3795043cab4139df829cbcb84 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:32:34 -0500
Subject: [PATCH 1330/2300] Update dokuwiki.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl b/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl
index f85032ba..c9387bfb 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From ca4422b717ede1befab3eb367c90a9ee42516f40 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:32:49 -0500
Subject: [PATCH 1331/2300] Update drupal6.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl b/install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl
index 0af7ce84..93f8c55a 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 4371f625c450feefbe94dd92969f48983a6c059d Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:33:07 -0500
Subject: [PATCH 1332/2300] Update wordpress2_rewrite.stpl

---
 .../10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl     | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 0d933b30..264ca01a 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %docroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 3ee30043f99d1d3ff25ad565be7608da71be37bb Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:33:23 -0500
Subject: [PATCH 1333/2300] Update wordpress2.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl b/install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl
index e0aeb524..39cce361 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 049c8535ed237919b1efdb148f5d1fd808c49349 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:33:40 -0500
Subject: [PATCH 1334/2300] Update wordpress.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl b/install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl
index 5cb55311..38de83d2 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 7cbd41a1ebaae76bbae5c828d0e4d26a951c4f7f Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:34:18 -0500
Subject: [PATCH 1335/2300] Update pyrocms.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..c9f91854 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%/public;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 95d5f459f87bae60ae6e298b9fd81708ccb12120 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:34:42 -0500
Subject: [PATCH 1336/2300] Update owncloud.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl b/install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl
index 891566b9..b43fdc75 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From d177e8941dde7c530671c4201fb520b90d573371 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:45:39 -0500
Subject: [PATCH 1337/2300] Update cms_made_simple.stpl

---
 .../debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl
index 003e9180..6d24f8b5 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl;
+    listen      %ip%:%web_ssl_port% ssl https;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;

From 1cc0bcc140402782d1a1a04bc1710816e9d38b7e Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:45:57 -0500
Subject: [PATCH 1338/2300] Update cms_made_simple.stpl

---
 .../debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl
index 6d24f8b5..cf8fad56 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl https;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;

From fddbb696773e709976952d8d894b43e929e0e06a Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:46:12 -0500
Subject: [PATCH 1339/2300] Update codeigniter2.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl b/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl
index 51f1f408..5931f617 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/codeigniter2.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;

From 267651c31c6ef23201348d0110e567a9bf3a2c2a Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:46:24 -0500
Subject: [PATCH 1340/2300] Update codeigniter3.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl b/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl
index e8dd8bf6..3c2793d1 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/codeigniter3.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;

From d437c55cd0759dbac5af921b5e1be8094faa981f Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:46:36 -0500
Subject: [PATCH 1341/2300] Update datalife_engine.stpl

---
 .../debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl b/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl
index b066d5d2..bb9a727b 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/datalife_engine.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;

From 5918df6ebb71135a53e2fb6c37939e1d0bd15654 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:46:52 -0500
Subject: [PATCH 1342/2300] Update default.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/default.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/default.stpl b/install/debian/10/templates/web/nginx/php-fpm/default.stpl
index 38de83d2..f9c01e40 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/default.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/default.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;

From ed27947cf706057d041b27fce63b6e20d5718836 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:47:07 -0500
Subject: [PATCH 1343/2300] Update dokuwiki.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl b/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl
index c9387bfb..a7564705 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/dokuwiki.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;

From 086f92f7a54de1cadc0e347e79cd81676ce456bb Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:47:19 -0500
Subject: [PATCH 1344/2300] Update drupal6.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl b/install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl
index 93f8c55a..6e67a4e0 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/drupal6.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;

From 2b37a1eb11ce632565809e93c72f4fab5a16ff6b Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:47:57 -0500
Subject: [PATCH 1345/2300] Update drupal7.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/drupal7.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/drupal7.stpl b/install/debian/10/templates/web/nginx/php-fpm/drupal7.stpl
index 030ea952..32f01a6f 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/drupal7.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/drupal7.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 003a748735418522147f6aa435cdaba066a55a10 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:48:23 -0500
Subject: [PATCH 1346/2300] Update drupal8.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/drupal8.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/drupal8.stpl b/install/debian/10/templates/web/nginx/php-fpm/drupal8.stpl
index 030ea952..32f01a6f 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/drupal8.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/drupal8.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From bed654fce9790f2fdb06d3431b5f0bc7bb39c361 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:48:42 -0500
Subject: [PATCH 1347/2300] Update joomla.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/joomla.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/joomla.stpl b/install/debian/10/templates/web/nginx/php-fpm/joomla.stpl
index 704405f3..d4f96ee3 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/joomla.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/joomla.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 63ebab9db5eb88d75e1c321c09e271647a52342f Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:48:57 -0500
Subject: [PATCH 1348/2300] Update laravel.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/laravel.stpl | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/laravel.stpl b/install/debian/10/templates/web/nginx/php-fpm/laravel.stpl
index 477f6f01..db0b4dde 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/laravel.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/laravel.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%/public;
     index       index.php index.html index.htm;
@@ -7,8 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     

From 7a3e06941c3ca1c61e31745209bac8f0a69fe23d Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:49:25 -0500
Subject: [PATCH 1349/2300] Update magento.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/magento.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/magento.stpl b/install/debian/10/templates/web/nginx/php-fpm/magento.stpl
index fdab43aa..f8ac30c9 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/magento.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/magento.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
 
     root        %sdocroot%/pub;
@@ -9,7 +9,6 @@ server {
     error_page  404 403 = /errors/404.php;
     add_header  "X-UA-Compatible" "IE=Edge";
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 22accb9e83eed05be2bd37009a055e3055d03db7 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:49:55 -0500
Subject: [PATCH 1350/2300] Update modx.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/modx.stpl | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/modx.stpl b/install/debian/10/templates/web/nginx/php-fpm/modx.stpl
index f410ab77..420aeb9e 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/modx.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/modx.stpl
@@ -1,13 +1,12 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
     access_log  /var/log/nginx/domains/%domain%.log combined;
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
-
-    ssl         on;
+    
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 #   if you need to rewrite www to non-www uncomment bellow

From add195b6b0077a45a78f3701161f4e15d7e324e4 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:50:20 -0500
Subject: [PATCH 1351/2300] Update moodle.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/moodle.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/moodle.stpl b/install/debian/10/templates/web/nginx/php-fpm/moodle.stpl
index f15a68c5..8594ec94 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/moodle.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/moodle.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 4a890b1b55af912104d4b13aa9539df9de195a48 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:50:54 -0500
Subject: [PATCH 1352/2300] Update no-php.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/no-php.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/no-php.stpl b/install/debian/10/templates/web/nginx/php-fpm/no-php.stpl
index bc8b53a3..4bb50383 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/no-php.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/no-php.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 3b6acaf3a8971a38f13195fb2697936a19239aa0 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:51:12 -0500
Subject: [PATCH 1353/2300] Update odoo.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/odoo.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/odoo.stpl b/install/debian/10/templates/web/nginx/php-fpm/odoo.stpl
index d6697d7a..e28afcfc 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/odoo.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/odoo.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 760ff7fa650636b584db418c4ef8215f62892b6e Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:51:37 -0500
Subject: [PATCH 1354/2300] Update opencart.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/opencart.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/opencart.stpl b/install/debian/10/templates/web/nginx/php-fpm/opencart.stpl
index 908b9aeb..52706d21 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/opencart.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/opencart.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From 764df300314e609f3add1a6f9a48f543a4821681 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:51:53 -0500
Subject: [PATCH 1355/2300] Update owncloud.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl b/install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl
index b43fdc75..1b803f97 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/owncloud.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;

From 28cb4758ac8b6fb4ac04b0b26d97e33e2b6dc6bf Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:52:13 -0500
Subject: [PATCH 1356/2300] Update piwik.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/piwik.stpl | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/piwik.stpl b/install/debian/10/templates/web/nginx/php-fpm/piwik.stpl
index 78c1bb78..1b299343 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/piwik.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/piwik.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port%;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;
@@ -7,7 +7,6 @@ server {
     access_log  /var/log/nginx/domains/%domain%.bytes bytes;
     error_log   /var/log/nginx/domains/%domain%.error.log error;
 
-    ssl         on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
 

From f93dce60b54bec06b9917de0ddbb025eb70a1647 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:52:28 -0500
Subject: [PATCH 1357/2300] Update pyrocms.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl
index c9f91854..6d44f20f 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%/public;
     index       index.php index.html index.htm;

From ac607eafa852d850e7904f0c618d29add914b194 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:52:59 -0500
Subject: [PATCH 1358/2300] Update wordpress.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl b/install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl
index 38de83d2..f9c01e40 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/wordpress.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;

From 7bb3ab659a2717c4206e47e9ad7f5c3edc769d7a Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:53:25 -0500
Subject: [PATCH 1359/2300] Update wordpress2.stpl

---
 install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl b/install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl
index 39cce361..01dfee5b 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/wordpress2.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %sdocroot%;
     index       index.php index.html index.htm;

From a61faf24a967abe97d3a10d16c7f3033420bc2fd Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:53:48 -0500
Subject: [PATCH 1360/2300] Update wordpress2_rewrite.stpl

---
 .../10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
index 264ca01a..a5fc46fb 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%web_ssl_port% ssl;
+    listen      %ip%:%web_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
     root        %docroot%;
     index       index.php index.html index.htm;

From b18e70f5c8cb7ef9b5a13021a972610e5fa7226c Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:58:06 -0500
Subject: [PATCH 1361/2300] Update force-https-legacy.stpl

---
 install/debian/10/templates/web/nginx/force-https-legacy.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/force-https-legacy.stpl b/install/debian/10/templates/web/nginx/force-https-legacy.stpl
index 56278e86..01a4eea3 100644
--- a/install/debian/10/templates/web/nginx/force-https-legacy.stpl
+++ b/install/debian/10/templates/web/nginx/force-https-legacy.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    # ssl         on;
+
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 46f70ac244d13c19061a5f9739db862fb8b56427 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:58:26 -0500
Subject: [PATCH 1362/2300] Update force-https-public.stpl

---
 install/debian/10/templates/web/nginx/force-https-public.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/force-https-public.stpl b/install/debian/10/templates/web/nginx/force-https-public.stpl
index 8f0d3fe3..22951ae5 100644
--- a/install/debian/10/templates/web/nginx/force-https-public.stpl
+++ b/install/debian/10/templates/web/nginx/force-https-public.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    # ssl         on;
+
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 951f5c932f33b51830b1b0e8f4830c161cbf0ddf Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:58:40 -0500
Subject: [PATCH 1363/2300] Update force-https-webmail-phpmyadmin.stpl

---
 .../10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
index 4fadbbfc..dac7adaf 100644
--- a/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
+++ b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    # ssl         on;
+
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 384e24973ffb5909b6f534e6f2ab73ee6ef536af Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:58:54 -0500
Subject: [PATCH 1364/2300] Update force-https.stpl

---
 install/debian/10/templates/web/nginx/force-https.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/force-https.stpl b/install/debian/10/templates/web/nginx/force-https.stpl
index 7da96e46..4a8185c8 100644
--- a/install/debian/10/templates/web/nginx/force-https.stpl
+++ b/install/debian/10/templates/web/nginx/force-https.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    # ssl         on;
+
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 6aad1e02323e08a36ef3f63f7f60af345b143ac1 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:59:13 -0500
Subject: [PATCH 1365/2300] Update hosting-legacy.stpl

---
 install/debian/10/templates/web/nginx/hosting-legacy.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/hosting-legacy.stpl b/install/debian/10/templates/web/nginx/hosting-legacy.stpl
index d62b5171..cc0370c6 100644
--- a/install/debian/10/templates/web/nginx/hosting-legacy.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-legacy.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    # ssl         on;
+    
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 3aca6d837ef7e7e6ac198b24b5a82acd3daba474 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:59:26 -0500
Subject: [PATCH 1366/2300] Update hosting.stpl

---
 install/debian/10/templates/web/nginx/hosting.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/hosting.stpl b/install/debian/10/templates/web/nginx/hosting.stpl
index 0c456c5e..30fe0f74 100644
--- a/install/debian/10/templates/web/nginx/hosting.stpl
+++ b/install/debian/10/templates/web/nginx/hosting.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    # ssl         on;
+
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 322df88467d744bd29adc40cc0bd7cc674778b90 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:59:38 -0500
Subject: [PATCH 1367/2300] Update private-hosting.stpl

---
 install/debian/10/templates/web/nginx/private-hosting.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/private-hosting.stpl b/install/debian/10/templates/web/nginx/private-hosting.stpl
index d7326a46..60b23c55 100644
--- a/install/debian/10/templates/web/nginx/private-hosting.stpl
+++ b/install/debian/10/templates/web/nginx/private-hosting.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    # ssl         on;
+
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 20f6f3ed285bfab90751b03ff31a87f13ccf91ac Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 04:59:55 -0500
Subject: [PATCH 1368/2300] Update private-force-https.stpl

---
 install/debian/10/templates/web/nginx/private-force-https.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/private-force-https.stpl b/install/debian/10/templates/web/nginx/private-force-https.stpl
index 38532e6b..2b4e42cc 100644
--- a/install/debian/10/templates/web/nginx/private-force-https.stpl
+++ b/install/debian/10/templates/web/nginx/private-force-https.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    # ssl         on;
+
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 9778a945a2b06b94482ea418f1c9c7fde5f7e44a Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 05:00:11 -0500
Subject: [PATCH 1369/2300] Update hosting-webmail-phpmyadmin.stpl

---
 .../10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
index 4fadbbfc..dac7adaf 100644
--- a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    # ssl         on;
+
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From b1ab212701f9ef1f689611a873984b915224f05b Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 05:00:47 -0500
Subject: [PATCH 1370/2300] Update hosting-public.stpl

---
 install/debian/10/templates/web/nginx/hosting-public.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/10/templates/web/nginx/hosting-public.stpl b/install/debian/10/templates/web/nginx/hosting-public.stpl
index 8f0d3fe3..22951ae5 100644
--- a/install/debian/10/templates/web/nginx/hosting-public.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-public.stpl
@@ -1,7 +1,7 @@
 server {
     listen      %ip%:%proxy_ssl_port% ssl http2;
     server_name %domain_idn% %alias_idn%;
-    # ssl         on;
+
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 777d1d2564a69e4501fc35bed12c84a436da4894 Mon Sep 17 00:00:00 2001
From: j52m <65143495+j52m@users.noreply.github.com>
Date: Fri, 25 Dec 2020 20:04:27 -0500
Subject: [PATCH 1371/2300] Fix Issue #96

---
 install/debian/10/pma/pma.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/debian/10/pma/pma.sh b/install/debian/10/pma/pma.sh
index 53ec9982..eb4be110 100644
--- a/install/debian/10/pma/pma.sh
+++ b/install/debian/10/pma/pma.sh
@@ -134,8 +134,8 @@ PMAUSER=pma
 
 #DROP USER and TABLE
 mysql -uroot <<MYSQL_PMA1
-DROP USER '$PMAUSER'@'localhost';
-DROP DATABASE $PMADB;
+DROP USER IF EXISTS '$PMAUSER'@'localhost';
+DROP DATABASE IF EXISTS $PMADB;
 FLUSH PRIVILEGES;
 MYSQL_PMA1
 

From 7f9105e8ea3fe1413514dc484ed699d3209eb8c0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 8 Feb 2021 18:33:36 +0100
Subject: [PATCH 1372/2300] Update v-add-web-domain

---
 bin/v-add-web-domain | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-add-web-domain b/bin/v-add-web-domain
index 5a4f029f..b356080a 100755
--- a/bin/v-add-web-domain
+++ b/bin/v-add-web-domain
@@ -48,6 +48,8 @@ is_object_unsuspended 'user' 'USER' "$user"
 is_package_full 'WEB_DOMAINS' 'WEB_ALIASES'
 is_domain_new 'web' "$domain,$aliases"
 is_dir_symlink $HOMEDIR/$user/web
+if_dir_exists $HOMEDIR/$user/web/$domain
+if_dir_symlink $HOMEDIR/$user/web/$domain
 if [ ! -z "$ip" ]; then
     is_ip_valid "$ip" "$user"
 else

From 19ca71e8fb0d548d592fc911f76c0b5d3e7f11c0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 8 Feb 2021 18:34:57 +0100
Subject: [PATCH 1373/2300] Update main.sh

---
 func/main.sh | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/func/main.sh b/func/main.sh
index 704e5446..5c622b58 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -299,6 +299,20 @@ is_dir_symlink() {
     fi
 }
 
+# Check if file exists
+if_file_exists() {
+    if [[ -f "$1" ]]; then
+        check_result $E_FORBIDEN "$1 file exists"
+    fi
+}
+
+# Check if directory exists
+if_dir_exists() {
+    if [[ -d "$1" ]]; then
+        check_result $E_FORBIDEN "$1 directory exists"
+    fi
+}
+
 # Get object value
 get_object_value() {
     object=$(grep "$2='$3'" $USER_DATA/$1.conf)

From 5e6bccb68f68be5d0ffe37e0e3a91f98f871ac82 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 8 Feb 2021 18:41:55 +0100
Subject: [PATCH 1374/2300] Update v-check-api-key

---
 bin/v-check-api-key | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-check-api-key b/bin/v-check-api-key
index 8d0d409e..2c6ccd0a 100755
--- a/bin/v-check-api-key
+++ b/bin/v-check-api-key
@@ -19,6 +19,11 @@ time_n_date=$(date +'%T %F')
 time=$(echo "$time_n_date" |cut -f 1 -d \ )
 date=$(echo "$time_n_date" |cut -f 2 -d \ )
 
+if [[ -z $key || ${#key} -lt 16 ]]; then
+    echo "Error: not valid keysh"
+    echo "$date $time api $ip failed to login" >> $VESTA/log/auth.log
+    exit 9
+fi
 
 #----------------------------------------------------------#
 #                       Action                             #

From 407e84fb3731f7885f4253021d531b1c1a03ef51 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 8 Feb 2021 18:52:37 +0100
Subject: [PATCH 1375/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 93c7aac0..5cea5757 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-40 [08-Feb-2021]
+==================================================
+* Few bugfixes
+
 Version 0.9.8-26-39 [12-Dec-2020]
 ==================================================
 * [Security] Fixing useless issue with tokens in "download backup" and "loginas" functions (thanks to HestiaCP for fixes)

From 6324ca1690670517c37a5f2ae229646bfc2abf22 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 8 Feb 2021 18:53:27 +0100
Subject: [PATCH 1376/2300] Update latest.txt

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 22cf0781..f35a7617 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-39
+vesta-0.9.8-26-40

From 177793a664684b7caa9893acf28659400962ba9a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 8 Feb 2021 22:32:34 +0100
Subject: [PATCH 1377/2300] Update v-generate-api-key

---
 bin/v-generate-api-key | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-generate-api-key b/bin/v-generate-api-key
index ba60b92f..c6221cc6 100755
--- a/bin/v-generate-api-key
+++ b/bin/v-generate-api-key
@@ -23,6 +23,7 @@ HASH=$(keygen)
 
 if [ ! -d ${KEYS} ]; then
   mkdir ${KEYS}
+  chmod 0770 ${KEYS}
 fi
 
 if [[ -e ${KEYS}${HASH} ]] ; then

From 13d58ff390fb6613be6626811183064cf71603ca Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 9 Feb 2021 09:08:56 +0100
Subject: [PATCH 1378/2300] Update v-check-api-key

---
 bin/v-check-api-key | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-check-api-key b/bin/v-check-api-key
index 2c6ccd0a..66284e69 100755
--- a/bin/v-check-api-key
+++ b/bin/v-check-api-key
@@ -20,7 +20,7 @@ time=$(echo "$time_n_date" |cut -f 1 -d \ )
 date=$(echo "$time_n_date" |cut -f 2 -d \ )
 
 if [[ -z $key || ${#key} -lt 16 ]]; then
-    echo "Error: not valid keysh"
+    echo "Error: not valid keys"
     echo "$date $time api $ip failed to login" >> $VESTA/log/auth.log
     exit 9
 fi

From a136fe8009a4a9e0864b83264b59116954f657ac Mon Sep 17 00:00:00 2001
From: didyouexpectthat <didyouexpectthat@users.noreply.github.com>
Date: Wed, 10 Feb 2021 23:45:11 -0800
Subject: [PATCH 1379/2300] Change if to is

main.sh defines the command as is_dir_symlink, not if_dir_symlink.
---
 bin/v-add-web-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-web-domain b/bin/v-add-web-domain
index b356080a..64be838a 100755
--- a/bin/v-add-web-domain
+++ b/bin/v-add-web-domain
@@ -49,7 +49,7 @@ is_package_full 'WEB_DOMAINS' 'WEB_ALIASES'
 is_domain_new 'web' "$domain,$aliases"
 is_dir_symlink $HOMEDIR/$user/web
 if_dir_exists $HOMEDIR/$user/web/$domain
-if_dir_symlink $HOMEDIR/$user/web/$domain
+is_dir_symlink $HOMEDIR/$user/web/$domain
 if [ ! -z "$ip" ]; then
     is_ip_valid "$ip" "$user"
 else

From 7056f36286b6c5f8c4fc5b02be1a0a8740a4c830 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Feb 2021 09:52:42 +0100
Subject: [PATCH 1380/2300] Update latest.txt

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index f35a7617..e6ae7bb3 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-40
+vesta-0.9.8-26-41

From e3f1153942d2aaf5d8056c4449c222bb11839188 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 21 Feb 2021 22:27:15 +0100
Subject: [PATCH 1381/2300] Disabling libapache2-mod-php8.0

---
 src/deb/for-download/tools/multi-php-install.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 895f80d2..5f819755 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -240,6 +240,7 @@ if [ $debian_version -eq 10 ]; then
     a2dismod php7.2
     a2dismod php7.3
     a2dismod php7.4
+    a2dismod php8.0
     a2dismod mpm_prefork
     a2enmod mpm_event
     service apache2 restart

From bdaa3da31091d530b3f1516bc3924a52e075b660 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 21 Feb 2021 22:51:13 +0100
Subject: [PATCH 1382/2300] php8.0 apache templates

---
 .../tools/apache-fpm-tpl/PHP-FPM-74-public.sh |  2 +-
 .../tools/apache-fpm-tpl/PHP-FPM-74.sh        |  2 +-
 .../tools/apache-fpm-tpl/PHP-FPM-80-public.sh | 98 +++++++++++++++++++
 .../apache-fpm-tpl/PHP-FPM-80-public.stpl     | 44 +++++++++
 .../apache-fpm-tpl/PHP-FPM-80-public.tpl      | 38 +++++++
 .../tools/apache-fpm-tpl/PHP-FPM-80.sh        | 98 +++++++++++++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-80.stpl      | 44 +++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-80.tpl       | 38 +++++++
 8 files changed, 362 insertions(+), 2 deletions(-)
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.tpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.tpl

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh
index 64cbaaf6..6f6290b1 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh
@@ -69,7 +69,7 @@ fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
-    service php7-3-fpm restart
+    service php7.3-fpm restart
 fi
 
 write_file=0
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
index 552cd112..482cdd7e 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
@@ -69,7 +69,7 @@ fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
-    service php7-3-fpm restart
+    service php7.3-fpm restart
 fi
 
 write_file=0
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.sh
new file mode 100644
index 00000000..5f119dd8
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.sh
@@ -0,0 +1,98 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php8.0-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+request_terminate_timeout = 30s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    service php7.3-fpm restart
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    service php7.4-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_80" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_80)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_80
+    service php8.0-fpm restart
+fi
+if [ -f "/etc/php/8.0/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.0/fpm/pool.d/www.conf
+fi
+
+exit 0
\ No newline at end of file
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.stpl
new file mode 100644
index 00000000..4ce4b993
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.0-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.tpl
new file mode 100644
index 00000000..41a5d506
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.0-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh
new file mode 100644
index 00000000..5f119dd8
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh
@@ -0,0 +1,98 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php8.0-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+request_terminate_timeout = 30s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    service php7.3-fpm restart
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    service php7.4-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_80" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_80)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_80
+    service php8.0-fpm restart
+fi
+if [ -f "/etc/php/8.0/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.0/fpm/pool.d/www.conf
+fi
+
+exit 0
\ No newline at end of file
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.stpl
new file mode 100644
index 00000000..f39e9631
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.0-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.tpl
new file mode 100644
index 00000000..b9e32f14
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.0-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+

From b2ddf443b8e21613ee175c8359452ada3a5ecb0e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 21 Feb 2021 23:02:17 +0100
Subject: [PATCH 1383/2300] Support for php8.0

---
 .../for-download/tools/multi-php-install.sh   | 238 ++++++++++--------
 1 file changed, 133 insertions(+), 105 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 5f819755..a0191f4b 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -10,6 +10,7 @@ inst_71=0
 inst_72=0
 inst_73=0
 inst_74=0
+inst_80=0
 
 #######################################################################
 
@@ -43,8 +44,11 @@ fi
 if [ $# -gt 6 ]; then
     inst_74=$7
 fi
+if [ $# -gt 7 ]; then
+    inst_80=$8
+fi
 
-if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ] || [ $inst_74 -eq 1 ]; then
+if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ] || [ $inst_74 -eq 1 ] || [ $inst_80 -eq 1 ]; then
     inst_repo=1
 fi
 
@@ -71,27 +75,28 @@ echo "inst_71=$inst_71"
 echo "inst_72=$inst_72"
 echo "inst_73=$inst_73"
 echo "inst_74=$inst_74"
+echo "inst_80=$inst_80"
 echo "wait_to_press_enter=$wait_to_press_enter"
 
 press_enter "=== Press enter to continue ==============================================================================="
 
 apt update
 if [ "$inst_repo" -eq 1 ]; then
-press_enter "=== Press enter to install sury.org repo ==============================================================================="
-apt -y install apt-transport-https ca-certificates
-wget -nv -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
-if [ $debian_version -eq 8 ]; then
-  sh -c 'echo "deb https://packages.sury.org/php/ jessie main" > /etc/apt/sources.list.d/php.list'
-fi
-if [ $debian_version -eq 9 ]; then
-  sh -c 'echo "deb https://packages.sury.org/php/ stretch main" > /etc/apt/sources.list.d/php.list'
-fi
-if [ $debian_version -eq 10 ]; then
-  sh -c 'echo "deb https://packages.sury.org/php/ buster main" > /etc/apt/sources.list.d/php.list'
-fi
-apt update
-apt upgrade -y
-press_enter "=== Press enter to continue ==============================================================================="
+    press_enter "=== Press enter to install sury.org repo ==============================================================================="
+    apt -y install apt-transport-https ca-certificates
+    wget -nv -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
+    if [ $debian_version -eq 8 ]; then
+      sh -c 'echo "deb https://packages.sury.org/php/ jessie main" > /etc/apt/sources.list.d/php.list'
+    fi
+    if [ $debian_version -eq 9 ]; then
+      sh -c 'echo "deb https://packages.sury.org/php/ stretch main" > /etc/apt/sources.list.d/php.list'
+    fi
+    if [ $debian_version -eq 10 ]; then
+      sh -c 'echo "deb https://packages.sury.org/php/ buster main" > /etc/apt/sources.list.d/php.list'
+    fi
+    apt update
+    apt upgrade -y
+    press_enter "=== Press enter to continue ==============================================================================="
 fi
 
 echo "=== Enabling proxy_fcgi setenvif"
@@ -100,107 +105,107 @@ service apache2 restart
 
 
 if [ "$inst_56" -eq 1 ]; then
-press_enter "=== Press enter to install PHP 5.6 ==============================================================================="
-apt -y install php5.6-mbstring php5.6-bcmath php5.6-cli php5.6-curl php5.6-fpm php5.6-gd php5.6-intl php5.6-mcrypt php5.6-mysql php5.6-soap php5.6-xml php5.6-zip php5.6-memcache php5.6-memcached
-update-rc.d php5.6-fpm defaults
-a2enconf php5.6-fpm
-systemctl restart apache2
-cp -r /etc/php/5.6/ /root/vst_install_backups/php5.6/
-# rm -f /etc/php/5.6/fpm/pool.d/*
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.stpl
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.tpl
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
-chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
-mkdir -p /root/vesta-temp-dl/vesta/patch
-wget -nv https://c.myvestacp.com/tools/patches/php5.6.patch -O /root/vesta-temp-dl/vesta/patch/php5.6.patch
-patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php5.6.patch
-rm -rf /root/vesta-temp-dl
-press_enter "=== Press enter to continue ==============================================================================="
+    press_enter "=== Press enter to install PHP 5.6 ==============================================================================="
+    apt -y install php5.6-mbstring php5.6-bcmath php5.6-cli php5.6-curl php5.6-fpm php5.6-gd php5.6-intl php5.6-mcrypt php5.6-mysql php5.6-soap php5.6-xml php5.6-zip php5.6-memcache php5.6-memcached
+    update-rc.d php5.6-fpm defaults
+    a2enconf php5.6-fpm
+    systemctl restart apache2
+    cp -r /etc/php/5.6/ /root/vst_install_backups/php5.6/
+    # rm -f /etc/php/5.6/fpm/pool.d/*
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-56.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-56.sh
+    mkdir -p /root/vesta-temp-dl/vesta/patch
+    wget -nv https://c.myvestacp.com/tools/patches/php5.6.patch -O /root/vesta-temp-dl/vesta/patch/php5.6.patch
+    patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php5.6.patch
+    rm -rf /root/vesta-temp-dl
+    press_enter "=== Press enter to continue ==============================================================================="
 fi
 
 if [ "$inst_70" -eq 1 ]; then
-press_enter "=== Press enter to install PHP 7.0 ==============================================================================="
-apt -y install php7.0-mbstring php7.0-bcmath php7.0-cli php7.0-curl php7.0-fpm php7.0-gd php7.0-intl php7.0-mcrypt php7.0-mysql php7.0-soap php7.0-xml php7.0-zip php7.0-memcache php7.0-memcached
-update-rc.d php7.0-fpm defaults
-a2enconf php7.0-fpm
-systemctl restart apache2
-cp -r /etc/php/7.0/ /root/vst_install_backups/php7.0/
-# rm -f /etc/php/7.0/fpm/pool.d/*
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-70.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.stpl
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-70.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.tpl
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-70.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.sh
-chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.sh
-if [ $debian_version -eq 9 ]; then
-  cp /etc/php/7.0/apache2/php.ini /etc/php/7.0/fpm/php.ini
-fi
-if [ $debian_version -eq 10 ]; then
-  cp /etc/php/7.3/fpm/php.ini /etc/php/7.0/fpm/php.ini
-fi
-press_enter "=== Press enter to continue ==============================================================================="
+    press_enter "=== Press enter to install PHP 7.0 ==============================================================================="
+    apt -y install php7.0-mbstring php7.0-bcmath php7.0-cli php7.0-curl php7.0-fpm php7.0-gd php7.0-intl php7.0-mcrypt php7.0-mysql php7.0-soap php7.0-xml php7.0-zip php7.0-memcache php7.0-memcached
+    update-rc.d php7.0-fpm defaults
+    a2enconf php7.0-fpm
+    systemctl restart apache2
+    cp -r /etc/php/7.0/ /root/vst_install_backups/php7.0/
+    # rm -f /etc/php/7.0/fpm/pool.d/*
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-70.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-70.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-70.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-70.sh
+    if [ $debian_version -eq 9 ]; then
+      cp /etc/php/7.0/apache2/php.ini /etc/php/7.0/fpm/php.ini
+    fi
+    if [ $debian_version -eq 10 ]; then
+      cp /etc/php/7.3/fpm/php.ini /etc/php/7.0/fpm/php.ini
+    fi
+    press_enter "=== Press enter to continue ==============================================================================="
 fi
 
 if [ "$inst_71" -eq 1 ]; then
-press_enter "=== Press enter to install PHP 7.1 ==============================================================================="
-apt -y install php7.1-mbstring php7.1-bcmath php7.1-cli php7.1-curl php7.1-fpm php7.1-gd php7.1-intl php7.1-mcrypt php7.1-mysql php7.1-soap php7.1-xml php7.1-zip php7.1-memcache php7.1-memcached
-update-rc.d php7.1-fpm defaults
-a2enconf php7.1-fpm
-systemctl restart apache2
-cp -r /etc/php/7.1/ /root/vst_install_backups/php7.1/
-# rm -f /etc/php/7.1/fpm/pool.d/*
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-71.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.stpl
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-71.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.tpl
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-71.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.sh
-chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.sh
-if [ $debian_version -eq 9 ]; then
-  cp /etc/php/7.0/apache2/php.ini /etc/php/7.1/fpm/php.ini
-fi
-if [ $debian_version -eq 10 ]; then
-  cp /etc/php/7.3/fpm/php.ini /etc/php/7.1/fpm/php.ini
-fi
-press_enter "=== Press enter to continue ==============================================================================="
+    press_enter "=== Press enter to install PHP 7.1 ==============================================================================="
+    apt -y install php7.1-mbstring php7.1-bcmath php7.1-cli php7.1-curl php7.1-fpm php7.1-gd php7.1-intl php7.1-mcrypt php7.1-mysql php7.1-soap php7.1-xml php7.1-zip php7.1-memcache php7.1-memcached
+    update-rc.d php7.1-fpm defaults
+    a2enconf php7.1-fpm
+    systemctl restart apache2
+    cp -r /etc/php/7.1/ /root/vst_install_backups/php7.1/
+    # rm -f /etc/php/7.1/fpm/pool.d/*
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-71.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-71.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-71.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-71.sh
+    if [ $debian_version -eq 9 ]; then
+      cp /etc/php/7.0/apache2/php.ini /etc/php/7.1/fpm/php.ini
+    fi
+    if [ $debian_version -eq 10 ]; then
+      cp /etc/php/7.3/fpm/php.ini /etc/php/7.1/fpm/php.ini
+    fi
+    press_enter "=== Press enter to continue ==============================================================================="
 fi
 
 if [ "$inst_72" -eq 1 ]; then
-press_enter "=== Press enter to install PHP 7.2 ==============================================================================="
-apt -y install php7.2-mbstring php7.2-bcmath php7.2-cli php7.2-curl php7.2-fpm php7.2-gd php7.2-intl php7.2-mysql php7.2-soap php7.2-xml php7.2-zip php7.2-memcache php7.2-memcached
-update-rc.d php7.2-fpm defaults
-a2enconf php7.2-fpm
-systemctl restart apache2
-cp -r /etc/php/7.2/ /root/vst_install_backups/php7.2/
-# rm -f /etc/php/7.2/fpm/pool.d/*
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-72.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.stpl
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-72.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.tpl
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-72.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.sh
-chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.sh
-if [ $debian_version -eq 9 ]; then
-  cp /etc/php/7.0/apache2/php.ini /etc/php/7.2/fpm/php.ini
-fi
-if [ $debian_version -eq 10 ]; then
-  cp /etc/php/7.3/fpm/php.ini /etc/php/7.2/fpm/php.ini
-fi
-press_enter "=== Press enter to continue ==============================================================================="
+    press_enter "=== Press enter to install PHP 7.2 ==============================================================================="
+    apt -y install php7.2-mbstring php7.2-bcmath php7.2-cli php7.2-curl php7.2-fpm php7.2-gd php7.2-intl php7.2-mysql php7.2-soap php7.2-xml php7.2-zip php7.2-memcache php7.2-memcached
+    update-rc.d php7.2-fpm defaults
+    a2enconf php7.2-fpm
+    systemctl restart apache2
+    cp -r /etc/php/7.2/ /root/vst_install_backups/php7.2/
+    # rm -f /etc/php/7.2/fpm/pool.d/*
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-72.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-72.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-72.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-72.sh
+    if [ $debian_version -eq 9 ]; then
+      cp /etc/php/7.0/apache2/php.ini /etc/php/7.2/fpm/php.ini
+    fi
+    if [ $debian_version -eq 10 ]; then
+      cp /etc/php/7.3/fpm/php.ini /etc/php/7.2/fpm/php.ini
+    fi
+    press_enter "=== Press enter to continue ==============================================================================="
 fi
 
 if [ "$inst_73" -eq 1 ]; then
-press_enter "=== Press enter to install PHP 7.3 ==============================================================================="
-apt -y install php7.3-mbstring php7.3-bcmath php7.3-cli php7.3-curl php7.3-fpm php7.3-gd php7.3-intl php7.3-mysql php7.3-soap php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached
-update-rc.d php7.3-fpm defaults
-a2enconf php7.3-fpm
-systemctl restart apache2
-cp -r /etc/php/7.3/ /root/vst_install_backups/php7.3/
-# rm -f /etc/php/7.3/fpm/pool.d/*
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.stpl
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.stpl
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.tpl
-wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.sh
-chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh
-chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.sh
-if [ $debian_version -eq 9 ]; then
-  cp /etc/php/7.0/apache2/php.ini /etc/php/7.3/fpm/php.ini
-fi
-press_enter "=== Press enter to continue ==============================================================================="
+    press_enter "=== Press enter to install PHP 7.3 ==============================================================================="
+    apt -y install php7.3-mbstring php7.3-bcmath php7.3-cli php7.3-curl php7.3-fpm php7.3-gd php7.3-intl php7.3-mysql php7.3-soap php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached
+    update-rc.d php7.3-fpm defaults
+    a2enconf php7.3-fpm
+    systemctl restart apache2
+    cp -r /etc/php/7.3/ /root/vst_install_backups/php7.3/
+    # rm -f /etc/php/7.3/fpm/pool.d/*
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-73-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-73-public.sh
+    if [ $debian_version -eq 9 ]; then
+      cp /etc/php/7.0/apache2/php.ini /etc/php/7.3/fpm/php.ini
+    fi
+    press_enter "=== Press enter to continue ==============================================================================="
 fi
 
 if [ "$inst_74" -eq 1 ]; then
@@ -228,6 +233,28 @@ if [ "$inst_74" -eq 1 ]; then
     press_enter "=== Press enter to continue ==============================================================================="
 fi
 
+
+if [ "$inst_80" -eq 1 ]; then
+    press_enter "=== Press enter to install PHP 8.0 ==============================================================================="
+    apt -y install php8.0-mbstring php8.0-bcmath php8.0-cli php8.0-curl php8.0-fpm php8.0-gd php8.0-intl php8.0-mysql php8.0-soap php8.0-xml php8.0-zip php8.0-memcache php8.0-memcached
+    update-rc.d php8.0-fpm defaults
+    a2enconf php8.0-fpm
+    a2dismod php8.0
+    apt-get -y remove libapache2-mod-php8.0
+    systemctl restart apache2
+    cp -r /etc/php/8.0/ /root/vst_install_backups/php8.0/
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-80.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-80.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-80.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-80.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-80.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-80.sh
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-80-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-80-public.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-80-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-80-public.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-80-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-80-public.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-80.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-80-public.sh
+    press_enter "=== Press enter to continue ==============================================================================="
+fi
+
+
 apt update
 apt upgrade -y
 
@@ -243,5 +270,6 @@ if [ $debian_version -eq 10 ]; then
     a2dismod php8.0
     a2dismod mpm_prefork
     a2enmod mpm_event
+    apt-get -y remove libapache2-mod-php8.0
     service apache2 restart
 fi

From bf3387139f808c8bd5aaf399637ace4d457a71a4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 22 Feb 2021 01:00:20 +0100
Subject: [PATCH 1384/2300] php.ini patch for php8.0

---
 install/debian/10/php/php8.0.patch | 78 ++++++++++++++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 install/debian/10/php/php8.0.patch

diff --git a/install/debian/10/php/php8.0.patch b/install/debian/10/php/php8.0.patch
new file mode 100644
index 00000000..243f7f1f
--- /dev/null
+++ b/install/debian/10/php/php8.0.patch
@@ -0,0 +1,78 @@
+--- /etc/php/8.0/fpm/php.ini.orig	2021-02-20 06:34:43.000000000 +0100
++++ /etc/php/8.0/fpm/php.ini	2021-02-22 00:56:23.000000000 +0100
+@@ -320,7 +320,8 @@
+ ; This directive allows you to disable certain functions.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes.
+ ; It receives a comma-delimited list of class names.
+@@ -423,11 +424,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -700,7 +701,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 50M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -852,7 +853,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1098,7 +1099,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1760,20 +1761,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=512
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5

From 7614d0cbc34cbb4c0954bbce944aa6e4c220d05d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 22 Feb 2021 01:08:33 +0100
Subject: [PATCH 1385/2300] Delete php8.0.patch

---
 install/debian/10/php/php8.0.patch | 78 ------------------------------
 1 file changed, 78 deletions(-)
 delete mode 100644 install/debian/10/php/php8.0.patch

diff --git a/install/debian/10/php/php8.0.patch b/install/debian/10/php/php8.0.patch
deleted file mode 100644
index 243f7f1f..00000000
--- a/install/debian/10/php/php8.0.patch
+++ /dev/null
@@ -1,78 +0,0 @@
---- /etc/php/8.0/fpm/php.ini.orig	2021-02-20 06:34:43.000000000 +0100
-+++ /etc/php/8.0/fpm/php.ini	2021-02-22 00:56:23.000000000 +0100
-@@ -320,7 +320,8 @@
- ; This directive allows you to disable certain functions.
- ; It receives a comma-delimited list of function names.
- ; http://php.net/disable-functions
--disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
-+; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
-+disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen
- 
- ; This directive allows you to disable certain classes.
- ; It receives a comma-delimited list of class names.
-@@ -423,11 +424,11 @@
- ;max_input_nesting_level = 64
- 
- ; How many GET/POST/COOKIE input variables may be accepted
--;max_input_vars = 1000
-+max_input_vars = 6000
- 
- ; Maximum amount of memory a script may consume
- ; http://php.net/memory-limit
--memory_limit = 128M
-+memory_limit = 256M
- 
- ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
- ; Error handling and logging ;
-@@ -700,7 +701,7 @@
- ; Its value may be 0 to disable the limit. It is ignored if POST data reading
- ; is disabled through enable_post_data_reading.
- ; http://php.net/post-max-size
--post_max_size = 8M
-+post_max_size = 50M
- 
- ; Automatically add files before PHP document.
- ; http://php.net/auto-prepend-file
-@@ -852,7 +853,7 @@
- 
- ; Maximum allowed size for uploaded files.
- ; http://php.net/upload-max-filesize
--upload_max_filesize = 2M
-+upload_max_filesize = 50M
- 
- ; Maximum number of files that can be uploaded via a single request
- max_file_uploads = 20
-@@ -1098,7 +1099,7 @@
- 
- ; The path to a log file that will log all mail() calls. Log entries include
- ; the full path of the script, line number, To address and headers.
--;mail.log =
-+mail.log = /var/log/php-mail.log
- ; Log mail to syslog (Event Log on Windows).
- ;mail.log = syslog
- 
-@@ -1760,20 +1761,20 @@
- 
- [opcache]
- ; Determines if Zend OPCache is enabled
--;opcache.enable=1
-+opcache.enable=1
- 
- ; Determines if Zend OPCache is enabled for the CLI version of PHP
--;opcache.enable_cli=0
-+opcache.enable_cli=0
- 
- ; The OPcache shared memory storage size.
--;opcache.memory_consumption=128
-+opcache.memory_consumption=512
- 
- ; The amount of memory for interned strings in Mbytes.
- ;opcache.interned_strings_buffer=8
- 
- ; The maximum number of keys (scripts) in the OPcache hash table.
- ; Only numbers between 200 and 1000000 are allowed.
--;opcache.max_accelerated_files=10000
-+opcache.max_accelerated_files=100000
- 
- ; The maximum percentage of "wasted" memory until a restart is scheduled.
- ;opcache.max_wasted_percentage=5

From a143064127c8594d0b53bf4ed2583c526a148478 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 22 Feb 2021 01:10:03 +0100
Subject: [PATCH 1386/2300] php.ini patch for php8.0

---
 .../for-download/tools/patches/php8.0.patch   | 78 +++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 src/deb/for-download/tools/patches/php8.0.patch

diff --git a/src/deb/for-download/tools/patches/php8.0.patch b/src/deb/for-download/tools/patches/php8.0.patch
new file mode 100644
index 00000000..243f7f1f
--- /dev/null
+++ b/src/deb/for-download/tools/patches/php8.0.patch
@@ -0,0 +1,78 @@
+--- /etc/php/8.0/fpm/php.ini.orig	2021-02-20 06:34:43.000000000 +0100
++++ /etc/php/8.0/fpm/php.ini	2021-02-22 00:56:23.000000000 +0100
+@@ -320,7 +320,8 @@
+ ; This directive allows you to disable certain functions.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes.
+ ; It receives a comma-delimited list of class names.
+@@ -423,11 +424,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -700,7 +701,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 50M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -852,7 +853,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1098,7 +1099,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1760,20 +1761,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=512
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5

From 7391d3664dbc32c63d8e30187e7002b6bcd0d2f6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 22 Feb 2021 01:19:29 +0100
Subject: [PATCH 1387/2300] Patching php.ini for php8.0

---
 src/deb/for-download/tools/multi-php-install.sh | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index a0191f4b..761efac7 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -22,6 +22,7 @@ fi
 
 inst_repo=0
 debian_version=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+memory=$(grep 'MemTotal' /proc/meminfo |tr ' ' '\n' |grep [0-9])
 
 if [ $# -gt 0 ]; then
     inst_repo=$1
@@ -251,7 +252,14 @@ if [ "$inst_80" -eq 1 ]; then
     wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-80-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-80-public.sh
     chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-80.sh
     chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-80-public.sh
-    press_enter "=== Press enter to continue ==============================================================================="
+    echo "=== Patching php.ini for php8.0"
+    wget -nv https://c.myvestacp.com/tools/patches/php8.0.patch -O /root/php8.0.patch
+    patch /etc/php/8.0/fpm/php.ini < /root/php8.0.patch
+    if [ $memory -gt 9999999 ]; then
+        sed -i "s|opcache.memory_consumption=512|opcache.memory_consumption=2048|g" /etc/php/8.0/fpm/php.ini
+    fi
+    service php8.0-fpm restart
+    press_enter "=== PHP 8.0 installed, press enter to continue ==============================================================================="
 fi
 
 

From 809b310a15e965200c59e151c29254aa755b3ffa Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 25 Feb 2021 23:57:23 +0100
Subject: [PATCH 1388/2300] Making sure Apache is in mpm_event mode

---
 src/deb/vesta/postinst | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 712b2ac4..be9d932b 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -218,6 +218,34 @@ if [ ! -f "/usr/local/vesta/data/upgrades/apache_status_public_access" ]; then
     fi
 fi
 
+# Making sure Apache is in mpm_event mode
+if [ ! -f "/usr/local/vesta/data/upgrades/apache_in_mpm_mode" ]; then
+    touch /usr/local/vesta/data/upgrades/apache_in_mpm_mode
+
+    check_grep=$(grep -c "WEB_SYSTEM='nginx'" /usr/local/vesta/conf/vesta.conf)
+    if [ "$check_grep" -eq 0 ]; then
+        if [ $release -eq 10 ]; then
+            if [ -f "/etc/apt/sources.list.d/php.list" ]; then
+                echo "=== Making sure Apache is in mpm_event mode"
+                a2dismod ruid2 > /dev/null 2>&1
+                a2dismod suexec > /dev/null 2>&1
+                a2dismod php5.6 > /dev/null 2>&1
+                a2dismod php7.0 > /dev/null 2>&1
+                a2dismod php7.1 > /dev/null 2>&1
+                a2dismod php7.2 > /dev/null 2>&1
+                a2dismod php7.3 > /dev/null 2>&1
+                a2dismod php7.4 > /dev/null 2>&1
+                a2dismod php8.0 > /dev/null 2>&1
+                a2dismod mpm_prefork > /dev/null 2>&1
+                a2enmod mpm_event > /dev/null 2>&1
+                apt-get -y remove libapache2-mod-php7.4 > /dev/null 2>&1
+                apt-get -y remove libapache2-mod-php8.0 > /dev/null 2>&1
+                service apache2 restart
+            fi
+        fi
+    fi
+fi
+
 # Run custom triggers
 if [ -x "/root/vesta-patch.sh" ]; then
     /root/vesta-patch.sh

From 5dc0788b3679e8658b10e603d2e70607e792d9ff Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 25 Feb 2021 23:58:03 +0100
Subject: [PATCH 1389/2300] Update latest.txt

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index e6ae7bb3..ac7e724b 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-41
+vesta-0.9.8-26-42

From bc4c57d302644fdc4b95f8d5b2fbd5d5dff6deaf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 26 Feb 2021 00:02:10 +0100
Subject: [PATCH 1390/2300] Update Changelog.md

---
 Changelog.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 5cea5757..01b057f7 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,12 @@
+Version 0.9.8-26-42 [26-Feb-2021]
+==================================================
+* [Feature] Support for PHP 8.0, see: https://forum.myvestacp.com/viewtopic.php?f=18&t=52
+* [Bugfix] Making sure Apache is in mpm_event mode
+
+Version 0.9.8-26-41 [11-Feb-2021]
+==================================================
+* Few bugfixes
+
 Version 0.9.8-26-40 [08-Feb-2021]
 ==================================================
 * Few bugfixes

From 36e5d2c9ec9ad17bad5250b36be657b1edfc7fae Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 26 Feb 2021 01:16:42 +0100
Subject: [PATCH 1391/2300] Update keep_mpm_event.sh

---
 upd/keep_mpm_event.sh | 28 +++++++++++++++-------------
 1 file changed, 15 insertions(+), 13 deletions(-)

diff --git a/upd/keep_mpm_event.sh b/upd/keep_mpm_event.sh
index e9ea92e4..36ccae5f 100644
--- a/upd/keep_mpm_event.sh
+++ b/upd/keep_mpm_event.sh
@@ -14,8 +14,8 @@ if [ "$1" = 'background' ]; then
         echo "=== Cleaning restart.pipe"
         sed -i "/keep_mpm_event/d" /usr/local/vesta/data/queue/restart.pipe
         /usr/local/vesta/bin/v-delete-cron-restart-job
-        if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event-checked" ]; then
-            touch /usr/local/vesta/data/upgrades/keeping-mpm-event-checked
+        if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event-checked-2" ]; then
+            touch /usr/local/vesta/data/upgrades/keeping-mpm-event-checked-2
             echo "=== OK, mpm_event is not checked"
             check_grep=$(grep -c "WEB_SYSTEM='apache2'" /usr/local/vesta/conf/vesta.conf)
             if [ "$check_grep" -eq 1 ]; then
@@ -40,17 +40,19 @@ fi
 
 if [ "$switch_to_mpm_event" -eq 1 ]; then
     echo "=== OK, let's ensure mpm_event"
-    apt-get -y remove libapache2-mod-php7.4
-    a2dismod ruid2
-    a2dismod suexec
-    a2dismod php5.6
-    a2dismod php7.0
-    a2dismod php7.1
-    a2dismod php7.2
-    a2dismod php7.3
-    a2dismod php7.4
-    a2dismod mpm_prefork
-    a2enmod mpm_event
+    a2dismod ruid2 > /dev/null 2>&1
+    a2dismod suexec > /dev/null 2>&1
+    a2dismod php5.6 > /dev/null 2>&1
+    a2dismod php7.0 > /dev/null 2>&1
+    a2dismod php7.1 > /dev/null 2>&1
+    a2dismod php7.2 > /dev/null 2>&1
+    a2dismod php7.3 > /dev/null 2>&1
+    a2dismod php7.4 > /dev/null 2>&1
+    a2dismod php8.0 > /dev/null 2>&1
+    a2dismod mpm_prefork > /dev/null 2>&1
+    a2enmod mpm_event > /dev/null 2>&1
+    apt-get -y remove libapache2-mod-php7.4 > /dev/null 2>&1
+    apt-get -y remove libapache2-mod-php8.0 > /dev/null 2>&1
     service apache2 restart
     echo "=== Done!"
 fi

From d7f3d48d369c34da3dffbe1c005be4712cab9aa6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 26 Feb 2021 01:18:06 +0100
Subject: [PATCH 1392/2300] Update postinst

---
 src/deb/vesta/postinst | 32 ++------------------------------
 1 file changed, 2 insertions(+), 30 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index be9d932b..acf13709 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -133,8 +133,8 @@ if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v4" ]; then
 fi
 
 # Making sure mpm_event will stay
-if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event" ]; then
-    touch /usr/local/vesta/data/upgrades/keeping-mpm-event
+if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event-2" ]; then
+    touch /usr/local/vesta/data/upgrades/keeping-mpm-event-2
     echo "=== scheduling keeping-mpm-event check script"
     echo "bash /usr/local/vesta/upd/keep_mpm_event.sh 'background' >> /usr/local/vesta/data/upgrades/keeping-mpm-event.log 2>&1" >> /usr/local/vesta/data/queue/restart.pipe
     /usr/local/vesta/bin/v-add-cron-restart-job > /dev/null 2>&1
@@ -218,34 +218,6 @@ if [ ! -f "/usr/local/vesta/data/upgrades/apache_status_public_access" ]; then
     fi
 fi
 
-# Making sure Apache is in mpm_event mode
-if [ ! -f "/usr/local/vesta/data/upgrades/apache_in_mpm_mode" ]; then
-    touch /usr/local/vesta/data/upgrades/apache_in_mpm_mode
-
-    check_grep=$(grep -c "WEB_SYSTEM='nginx'" /usr/local/vesta/conf/vesta.conf)
-    if [ "$check_grep" -eq 0 ]; then
-        if [ $release -eq 10 ]; then
-            if [ -f "/etc/apt/sources.list.d/php.list" ]; then
-                echo "=== Making sure Apache is in mpm_event mode"
-                a2dismod ruid2 > /dev/null 2>&1
-                a2dismod suexec > /dev/null 2>&1
-                a2dismod php5.6 > /dev/null 2>&1
-                a2dismod php7.0 > /dev/null 2>&1
-                a2dismod php7.1 > /dev/null 2>&1
-                a2dismod php7.2 > /dev/null 2>&1
-                a2dismod php7.3 > /dev/null 2>&1
-                a2dismod php7.4 > /dev/null 2>&1
-                a2dismod php8.0 > /dev/null 2>&1
-                a2dismod mpm_prefork > /dev/null 2>&1
-                a2enmod mpm_event > /dev/null 2>&1
-                apt-get -y remove libapache2-mod-php7.4 > /dev/null 2>&1
-                apt-get -y remove libapache2-mod-php8.0 > /dev/null 2>&1
-                service apache2 restart
-            fi
-        fi
-    fi
-fi
-
 # Run custom triggers
 if [ -x "/root/vesta-patch.sh" ]; then
     /root/vesta-patch.sh

From 97ffdd0571f43f93dd81487862fbfebf84794517 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 27 Feb 2021 19:26:56 +0100
Subject: [PATCH 1393/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 3481897a..ec1928e0 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1623,6 +1623,7 @@ touch /usr/local/vesta/data/upgrades/change-clamav-socket-v2
 touch /usr/local/vesta/data/upgrades/change-clamav-socket-v3
 touch /usr/local/vesta/data/upgrades/change-clamav-socket-v4
 touch /usr/local/vesta/data/upgrades/keeping-mpm-event
+touch /usr/local/vesta/data/upgrades/keeping-mpm-event-2
 touch /usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates
 touch /usr/local/vesta/data/upgrades/clamav_block_exe_in_archives
 touch /usr/local/vesta/data/upgrades/clearing-letsencrypt-pipe

From d0108b4ae324ed85d42c39e1890d7f97ed5d9d27 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 2 Mar 2021 22:53:33 +0100
Subject: [PATCH 1394/2300] Update v-clone-website

---
 bin/v-clone-website | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 5922d2d1..ed7344ab 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -68,8 +68,15 @@ eval $r
 
 FROM_FOLDER=$SITE_FOLDER
 
-FROM_CONFIG_FILE=$CONFIG_FILE
-FROM_CONFIG_FILE_FULL_PATH=$CONFIG_FILE_FULL_PATH
+if [ ! -z "$CONFIG_FILE" ]; then
+    FROM_CONFIG_FILE=$CONFIG_FILE
+fi
+if [ ! -z "$FROM_CONFIG_FILE" ]; then
+    FROM_CONFIG_FILE_FULL_PATH="$FROM_FOLDER/$FROM_CONFIG_FILE"
+fi
+if [ ! -z "$CONFIG_FILE_FULL_PATH" ]; then
+    FROM_CONFIG_FILE_FULL_PATH=$CONFIG_FILE_FULL_PATH
+fi
 
 if [ ! -f "$FROM_CONFIG_FILE_FULL_PATH" ]; then
     echo "Error: FROM_CONFIG_FILE_FULL_PATH $FROM_CONFIG_FILE_FULL_PATH does not exists"

From c981edee63c0979b1bc4c77be4605c823bf85e02 Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Sun, 14 Mar 2021 00:23:23 +0100
Subject: [PATCH 1395/2300] Making sure chmod and chown does not follow
 symlinks

---
 bin/v-add-web-domain |  8 ++++----
 func/main.sh         | 12 ++++++++++++
 func/rebuild.sh      | 10 +++++-----
 3 files changed, 21 insertions(+), 9 deletions(-)

diff --git a/bin/v-add-web-domain b/bin/v-add-web-domain
index 64be838a..aab09e6a 100755
--- a/bin/v-add-web-domain
+++ b/bin/v-add-web-domain
@@ -90,10 +90,10 @@ done
 # Changing file owner & permission
 chown -R $user:$user $HOMEDIR/$user/web/$domain
 chown root:$user /var/log/$WEB_SYSTEM/domains/$domain.* $conf
-chmod 640 /var/log/$WEB_SYSTEM/domains/$domain.*
-chmod 751 $HOMEDIR/$user/web/$domain $HOMEDIR/$user/web/$domain/*
-chmod 551 $HOMEDIR/$user/web/$domain/stats $HOMEDIR/$user/web/$domain/logs
-chmod 644 $HOMEDIR/$user/web/$domain/public_*html/*.*
+sudo -u $user chmod 640 /var/log/$WEB_SYSTEM/domains/$domain.*
+sudo -u $user chmod 751 $HOMEDIR/$user/web/$domain $HOMEDIR/$user/web/$domain/*
+sudo -u $user chmod 551 $HOMEDIR/$user/web/$domain/stats $HOMEDIR/$user/web/$domain/logs
+sudo -u $user chmod 644 $HOMEDIR/$user/web/$domain/public_*html/*.*
 
 # Addding PHP-FPM backend
 if [ ! -z "$WEB_BACKEND" ]; then
diff --git a/func/main.sh b/func/main.sh
index 5c622b58..264b267d 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -1085,3 +1085,15 @@ vesta_generate_pass() {
     done
     echo "$PASS"
 }
+
+# Simple chmod wrapper that skips symlink files after glob expand
+# Taken from HestiaCP
+no_symlink_chmod() {
+    local filemode=$1; shift;
+
+    for i in "$@"; do
+        [[ -L ${i} ]] && continue
+
+        chmod "${filemode}" "${i}"
+    done
+}
diff --git a/func/rebuild.sh b/func/rebuild.sh
index cf743d65..b4df3d20 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -51,7 +51,7 @@ rebuild_user_conf() {
     mkdir -p $HOMEDIR/$user/conf
     chmod a+x $HOMEDIR/$user
     chmod a+x $HOMEDIR/$user/conf
-    chown $user:$user $HOMEDIR/$user
+    chown --no-dereference $user:$user $HOMEDIR/$user
     chown root:root $HOMEDIR/$user/conf
 
     # Update disk pipe
@@ -80,7 +80,7 @@ rebuild_user_conf() {
         chmod 751 $HOMEDIR/$user/conf/web
         chmod 751 $HOMEDIR/$user/web
         chmod 771 $HOMEDIR/$user/tmp
-        chown $user:$user $HOMEDIR/$user/web
+        chown --no-dereference $user:$user $HOMEDIR/$user/web
         if [ -z "$create_user" ]; then
             $BIN/v-rebuild-web-domains $user $restart
         fi
@@ -183,10 +183,10 @@ rebuild_web_domain_conf() {
     fi
 
     # Set folder permissions
-    chmod 551 $HOMEDIR/$user/web/$domain \
+    no_symlink_chmod 551 $HOMEDIR/$user/web/$domain \
         $HOMEDIR/$user/web/$domain/stats \
         $HOMEDIR/$user/web/$domain/logs
-    chmod 751 $HOMEDIR/$user/web/$domain/private \
+    no_symlink_chmod 751 $HOMEDIR/$user/web/$domain/private \
         $HOMEDIR/$user/web/$domain/cgi-bin \
         $HOMEDIR/$user/web/$domain/public_html \
         $HOMEDIR/$user/web/$domain/public_shtml \
@@ -194,7 +194,7 @@ rebuild_web_domain_conf() {
     chmod 640 /var/log/$WEB_SYSTEM/domains/$domain.*
 
     # Set ownership
-    chown $user:$user $HOMEDIR/$user/web/$domain \
+    chown --no-dereference $user:$user $HOMEDIR/$user/web/$domain \
         $HOMEDIR/$user/web/$domain/private \
         $HOMEDIR/$user/web/$domain/cgi-bin \
         $HOMEDIR/$user/web/$domain/public_html \

From 16b33262af46ad95b6ebd6ebb9a514b5b09838a2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Mar 2021 01:46:58 +0100
Subject: [PATCH 1396/2300] Validate user input on domain

Thanks to @hestiacp and @jaapmarcus
---
 bin/v-generate-ssl-cert | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-generate-ssl-cert b/bin/v-generate-ssl-cert
index 9f75f9d8..394c6625 100755
--- a/bin/v-generate-ssl-cert
+++ b/bin/v-generate-ssl-cert
@@ -67,7 +67,7 @@ fi
 
 args_usage='DOMAIN EMAIL COUNTRY STATE CITY ORG UNIT [ALIASES] [FORMAT]'
 check_args '7' "$#" "$args_usage"
-is_format_valid 'domain_alias' 'format'
+is_format_valid 'domain' 'alias' 'format'
 
 
 #----------------------------------------------------------#

From fdc6e191c270146c9e035f3687fae8506857f214 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Mar 2021 19:09:10 +0100
Subject: [PATCH 1397/2300] Restrict v-make-tmp-file to tmp folder

Thanks to @hestiacp and @jaapmarcus
---
 web/api/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/api/index.php b/web/api/index.php
index 08f51fc9..949ac689 100644
--- a/web/api/index.php
+++ b/web/api/index.php
@@ -116,7 +116,7 @@ if (isset($_POST['user']) || isset($_POST['hash'])) {
     // Check command
     if ($cmd == "'v-make-tmp-file'") {
         // Used in DNS Cluster
-        $fp = fopen($_POST['arg2'], 'w');
+        $fp = fopen('/tmp/'.basename($_POST['arg2']), 'w');
         fwrite($fp, $_POST['arg1']."\n");
         fclose($fp);
         $return_var = 0;

From 3402071e950e76b79fa8672a1e09b70d3860f355 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Mar 2021 20:49:14 +0100
Subject: [PATCH 1398/2300] Preventing uploads from other origin

Credits to:  Fady Othman, Security Consultant # ZINAD IT
---
 web/upload/UploadHandler.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/web/upload/UploadHandler.php b/web/upload/UploadHandler.php
index 64004c91..b77749ab 100755
--- a/web/upload/UploadHandler.php
+++ b/web/upload/UploadHandler.php
@@ -2,6 +2,13 @@
 
 //session_start();
 
+$hostname = exec('hostname');
+$port = $_SERVER['SERVER_PORT'];
+$expected_http_origin="https://".$hostname.":".$port;
+if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
+    die ("Nope.");
+}
+
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
 // Check login_as feature

From c9b238a495413d58cc4ab456d0f4c66cd2047b64 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Mar 2021 23:22:33 +0100
Subject: [PATCH 1399/2300] Ensure HTML will not be displayed in list log page

---
 web/templates/admin/list_log.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_log.html b/web/templates/admin/list_log.html
index 34a676c6..23548421 100644
--- a/web/templates/admin/list_log.html
+++ b/web/templates/admin/list_log.html
@@ -53,7 +53,7 @@
         <!-- /.l-unit__col -->
         <div class="l-unit__col l-unit__col--right">
           <div class="l-unit__name small">
-            <?=$data[$key]['CMD']?>
+            <?=htmlspecialchars($data[$key]['CMD'], ENT_QUOTES)?>
           </div>
 
           <!-- div class="l-unit__stats">

From d6240b12cace9242c7965d07378fcebdae1012ba Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 15 Mar 2021 12:53:00 +0100
Subject: [PATCH 1400/2300] Added interface validation
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Thanks to @numanturle (Numan Türle) and @hestiacp
---
 func/main.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/func/main.sh b/func/main.sh
index 264b267d..c128202b 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -871,6 +871,7 @@ is_format_valid() {
                 host)           is_object_format_valid "$arg" "$arg_name" ;;
                 hour)           is_cron_format_valid "$arg" $arg_name ;;
                 id)             is_int_format_valid "$arg" 'id' ;;
+                interface)      is_interface_format_valid "$arg" ;;
                 ip)             is_ip_format_valid "$arg" ;;
                 ip_name)        is_domain_format_valid "$arg" 'IP name';;
                 ip_status)      is_ip_status_format_valid "$arg" ;;

From 7991753ab7c5c568768028fb77554db8ea149f17 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 15 Mar 2021 13:55:11 +0100
Subject: [PATCH 1401/2300] Checking licence format
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Credits to:  @numanturle Numan Türle
---
 bin/v-activate-vesta-license | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-activate-vesta-license b/bin/v-activate-vesta-license
index 28a5bf16..8d9ebd20 100755
--- a/bin/v-activate-vesta-license
+++ b/bin/v-activate-vesta-license
@@ -27,7 +27,7 @@ source $VESTA/conf/vesta.conf
 
 # Checking arg number
 check_args '2' "$#" 'MODULE LICENSE'
-
+is_user_format_valid "$license" "license"
 
 #----------------------------------------------------------#
 #                       Action                             #

From 60a0f38ca7eb9a682e53e44724bfb0e7a1aa62d9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 15 Mar 2021 17:41:40 +0100
Subject: [PATCH 1402/2300] Version 0.9.8-26-43 changelog

---
 Changelog.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 01b057f7..475fe080 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,13 @@
+Version 0.9.8-26-43 [15-Mar-2021]
+==================================================
+* [Security] fix for: CSRF remote code execution in UploadHandler.php - CVE-2021-28379 (Credits to: Fady Osman @fady_othman)
+* [Security] fix for: Local privilege escalation from user account to admin account user via v-add-web-domain (Credits to: Two independent security researchers, Marti Guasch Jiménez and Francisco Andreu Sanz, working with the SSD Secure Disclosure program) (and also thanks to HestiaCP @hestiacp for fix)
+* [Security] fix for: Local privilege escalation in v-generate-ssl-cert (potential user to admin or root escalation) (Credits to: Numan Türle @numanturle, thanks to HestiaCP @hestiacp for fix)
+* [Security] fix for: Local privilege escalation in /web/api/ via v-make-tmp-file (probably admin to root escalation) (Credits to: Numan Türle @numanturle, thanks to HestiaCP @hestiacp for fix)
+* [Security] fix for: Cross site scripting in /web/add/ip/ (admin to other admin XSS escalation) (Credits to: Numan Türle @numanturle, thanks to HestiaCP @hestiacp for fix)
+* [Security] fix for: Admin to root escalation in v-activate-vesta-license (Credits to: Numan Türle @numanturle)
+* [Security] Ensure HTML will not be displayed in list log page (Credits to: Kristan Kenney @kristankenney, thanks to HestiaCP @hestiacp for fix)
+
 Version 0.9.8-26-42 [26-Feb-2021]
 ==================================================
 * [Feature] Support for PHP 8.0, see: https://forum.myvestacp.com/viewtopic.php?f=18&t=52

From 91c592586e3adfb2433e35eb7a3d5708637b47c0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 15 Mar 2021 17:42:23 +0100
Subject: [PATCH 1403/2300] Version 0.9.8-26-43

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index ac7e724b..c9ff1cd0 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-42
+vesta-0.9.8-26-43

From afcf1a15729ba350d8bc60829cc7125f933fd544 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 15 Mar 2021 19:42:12 +0100
Subject: [PATCH 1404/2300] Update Changelog.md

---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 475fe080..a9f65487 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,7 +1,7 @@
 Version 0.9.8-26-43 [15-Mar-2021]
 ==================================================
 * [Security] fix for: CSRF remote code execution in UploadHandler.php - CVE-2021-28379 (Credits to: Fady Osman @fady_othman)
-* [Security] fix for: Local privilege escalation from user account to admin account user via v-add-web-domain (Credits to: Two independent security researchers, Marti Guasch Jiménez and Francisco Andreu Sanz, working with the SSD Secure Disclosure program) (and also thanks to HestiaCP @hestiacp for fix)
+* [Security] fix for: Local privilege escalation from user account to admin account via v-add-web-domain (Credits to: Two independent security researchers, Marti Guasch Jiménez and Francisco Andreu Sanz, working with the SSD Secure Disclosure program) (and also thanks to HestiaCP @hestiacp for fix)
 * [Security] fix for: Local privilege escalation in v-generate-ssl-cert (potential user to admin or root escalation) (Credits to: Numan Türle @numanturle, thanks to HestiaCP @hestiacp for fix)
 * [Security] fix for: Local privilege escalation in /web/api/ via v-make-tmp-file (probably admin to root escalation) (Credits to: Numan Türle @numanturle, thanks to HestiaCP @hestiacp for fix)
 * [Security] fix for: Cross site scripting in /web/add/ip/ (admin to other admin XSS escalation) (Credits to: Numan Türle @numanturle, thanks to HestiaCP @hestiacp for fix)

From 627684c0bd98e762f4c54add5e255a7ba22a7f16 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 16 Mar 2021 00:19:03 +0100
Subject: [PATCH 1405/2300] Fix duplicated DNS records in DNS cluster

Credits to: @madeITBelgium
---
 bin/v-insert-dns-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-insert-dns-domain b/bin/v-insert-dns-domain
index b767b576..9e6874df 100755
--- a/bin/v-insert-dns-domain
+++ b/bin/v-insert-dns-domain
@@ -50,7 +50,7 @@ if [ "$flush" = 'records' ]; then
 fi
 
 # Flush domain
-if [ "$flush" ! = 'no' ]; then
+if [ "$flush" != 'no' ]; then
     sed -i "/DOMAIN='$DOMAIN'/d" $USER_DATA/dns.conf 2> /dev/null
 fi
 

From 1b9d3bb0cc5af166de3d2e84ccbb194f6d92e3fb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 17 Mar 2021 13:21:14 +0100
Subject: [PATCH 1406/2300] css fix

---
 web/css/styles.min.css | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/css/styles.min.css b/web/css/styles.min.css
index 302f9c01..614dda49 100644
--- a/web/css/styles.min.css
+++ b/web/css/styles.min.css
@@ -651,8 +651,8 @@ input[type="checkbox"] {
 }
 
 .l-center {
-  margin: 0 auto;
-  max-width: 998px;
+  margin: 0 5%;
+  max-width: 100%;
 }
 
 .l-logo {

From c907e11151689b005b3f4bc3e35f607f6dac7757 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 23 Mar 2021 14:11:45 +0100
Subject: [PATCH 1407/2300] rollback css fix

---
 web/css/styles.min.css | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/css/styles.min.css b/web/css/styles.min.css
index 614dda49..302f9c01 100644
--- a/web/css/styles.min.css
+++ b/web/css/styles.min.css
@@ -651,8 +651,8 @@ input[type="checkbox"] {
 }
 
 .l-center {
-  margin: 0 5%;
-  max-width: 100%;
+  margin: 0 auto;
+  max-width: 998px;
 }
 
 .l-logo {

From a4977253ca05dc253af7e04e4fb136d6f1a7700c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 23 Mar 2021 14:33:27 +0100
Subject: [PATCH 1408/2300] css fix on right place
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Thanks to Miloš Spasić
---
 web/templates/admin/list_server_info.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_server_info.html b/web/templates/admin/list_server_info.html
index 748c940e..eaaf34cd 100644
--- a/web/templates/admin/list_server_info.html
+++ b/web/templates/admin/list_server_info.html
@@ -40,5 +40,5 @@
   </div>
   <!-- /.l-header -->
 
-  <div style="color: #ff6701; padding: 10px 0 20px 20px; background: #fff; ">.</div><div class="l-center">
+  <div style="color: #ff6701; padding: 10px 0 20px 20px; background: #fff; ">.</div><div class="l-center" style="margin: 0 5% !important; max-width: 100% !important;">
   <pre style="color: #555">

From f5cc2bb7f24e9bdb4cdb3be425383967fb4fdc53 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Apr 2021 18:36:27 +0200
Subject: [PATCH 1409/2300] Check if it's vesta package
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Credits to: Numan Türle @numanturle
---
 bin/v-update-sys-vesta | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/bin/v-update-sys-vesta b/bin/v-update-sys-vesta
index f3373823..8db9242d 100755
--- a/bin/v-update-sys-vesta
+++ b/bin/v-update-sys-vesta
@@ -28,6 +28,23 @@ source $VESTA/conf/vesta.conf
 # Checking arg number
 check_args '1' "$#" 'PACKAGE'
 
+valid=0
+if [ "$package" = "vesta" ]; then
+    valid=1
+fi
+if [ "$package" = "vesta-nginx" ]; then
+    valid=1
+fi
+if [ "$package" = "vesta-php" ]; then
+    valid=1
+fi
+if [ "$package" = "vesta-softaculous" ]; then
+    valid=1
+fi
+if [ $valid -eq 0 ]; then
+    echo "Package $package is not valid"
+    exit 1
+fi
 
 #----------------------------------------------------------#
 #                       Action                             #

From d20f1aebd0a189de7dd485ab820b9f835da1e8b0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Apr 2021 18:48:41 +0200
Subject: [PATCH 1410/2300] Preventing multiple execution of v-backup-users

---
 bin/v-backup-users | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index 640c1916..5b9f75f4 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -4,6 +4,14 @@
 #
 # The function backups all system users.
 
+scriptname="v-backup-users"
+pidof -x "$scriptname"
+for pid in $(pidof -x "$scriptname"); do
+    if [ $pid != $$ ]; then
+        echo "[$(date)] : $scriptname : Process is already running with PID $pid"
+        exit 1
+    fi
+done
 
 #----------------------------------------------------------#
 #                    Variable&Function                     #

From 75209618a0f45c9dd67b785be090d5fabe270c51 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Apr 2021 18:55:49 +0200
Subject: [PATCH 1411/2300] Update v-backup-users

---
 bin/v-backup-users | 1 -
 1 file changed, 1 deletion(-)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index 5b9f75f4..9671c9e8 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -5,7 +5,6 @@
 # The function backups all system users.
 
 scriptname="v-backup-users"
-pidof -x "$scriptname"
 for pid in $(pidof -x "$scriptname"); do
     if [ $pid != $$ ]; then
         echo "[$(date)] : $scriptname : Process is already running with PID $pid"

From 6ac6f50598d8de41b9f77a5819d293e0cc5888e7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Apr 2021 19:05:47 +0200
Subject: [PATCH 1412/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index d266d228..389781c9 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -58,9 +58,9 @@ BUILD_DATE=$(date +"%d-%b-%Y")
 
 # Set Version for compiling
 VESTA_V=$VESTA_VER"_amd64"
-NGINX_V='1.17.7'
-OPENSSL_V='1.1.1d'
-PCRE_V='8.43'
+NGINX_V='1.19.9'
+OPENSSL_V='1.1.1k'
+PCRE_V='8.44'
 ZLIB_V='1.2.11'
 PHP_V='5.6.40'
 

From 23d02598a1829a893766677175fded191eb9dd37 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Apr 2021 19:13:17 +0200
Subject: [PATCH 1413/2300] Update control

---
 src/deb/nginx/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index a263250f..54cada5d 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -1,7 +1,7 @@
 Source: vesta-nginx
 Package: vesta-nginx
 Priority: optional
-Version: 0.9.8-26
+Version: 0.9.8-26-44
 Section: admin
 Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
 Homepage: http://myvestacp.com

From 7d05689ca9cb42ab90f7c60c19e4215a3d6d9eda Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Apr 2021 19:17:58 +0200
Subject: [PATCH 1414/2300] Update copyright

---
 src/deb/nginx/copyright | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/nginx/copyright b/src/deb/nginx/copyright
index 5f58e6bd..3feceb98 100644
--- a/src/deb/nginx/copyright
+++ b/src/deb/nginx/copyright
@@ -3,7 +3,7 @@ Upstream-Name: vesta-nginx
 Source: http://myvestacp.com
 
 Files: *
-Copyright: 2019 MyVesta <info@myvestacp.com>
+Copyright: 2021 MyVesta <info@myvestacp.com>
 License: GPL-3.0+
 Remarks: MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
 

From 801395c2b1b2b8f544dcd90f9e5e643a3a1ee280 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Apr 2021 19:30:23 +0200
Subject: [PATCH 1415/2300] vesta-0.9.8-26-44

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index c9ff1cd0..56430e65 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-43
+vesta-0.9.8-26-44

From 5f8579697c187e8621f0191cfd1600e45c9638ad Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Apr 2021 19:39:04 +0200
Subject: [PATCH 1416/2300] Update Changelog.md

---
 Changelog.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index a9f65487..250fbb89 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,10 @@
+Version 0.9.8-26-44 [04-Apr-2021]
+==================================================
+* [Security] Preventing denial-of-service in openssl library in vesta-nginx service (CVE-2021-3449)
+* [Security] Preventing admin to install non-vesta packages from vesta admin user interface (Credits to: Numan Türle @numanturle)
+* [Bugfix] Preventing multiple execution of v-backup-users
+* [UserInterface] CSS fix for Apache status table (Credits to: Milos Spasic)
+
 Version 0.9.8-26-43 [15-Mar-2021]
 ==================================================
 * [Security] fix for: CSRF remote code execution in UploadHandler.php - CVE-2021-28379 (Credits to: Fady Osman @fady_othman)

From 78f8c0cb110c4e8efb5f0a610d80b34fc994485c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Apr 2021 19:41:16 +0200
Subject: [PATCH 1417/2300] Update Changelog.md

---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 250fbb89..d4db2e5c 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,7 +1,7 @@
 Version 0.9.8-26-44 [04-Apr-2021]
 ==================================================
 * [Security] Preventing denial-of-service in openssl library in vesta-nginx service (CVE-2021-3449)
-* [Security] Preventing admin to install non-vesta packages from vesta admin user interface (Credits to: Numan Türle @numanturle)
+* [Security] Preventing admin to install non-vesta packages from vesta admin panel user interface (Credits to: Numan Türle @numanturle)
 * [Bugfix] Preventing multiple execution of v-backup-users
 * [UserInterface] CSS fix for Apache status table (Credits to: Milos Spasic)
 

From 39318bafef7079c02d2bac0a1bd960785ba8491f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 11 Apr 2021 16:58:35 +0200
Subject: [PATCH 1418/2300] Logging LetsEncrypt process

---
 bin/v-add-letsencrypt-domain | 101 ++++++++++++++++++++++++++++++++---
 1 file changed, 93 insertions(+), 8 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 15361ffb..9dbc335f 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -73,11 +73,16 @@ is_object_unsuspended 'user' 'USER' "$user"
 is_object_valid 'web' 'DOMAIN' "$domain"
 is_object_unsuspended 'web' 'DOMAIN' "$domain"
 get_domain_values 'web'
+
+echo "-----------------------------------------------------------------------------------" >> /usr/local/vesta/log/letsencrypt.log
+echo "[$(date)] : v-add-letsencrypt-domain $domain [$aliases]" >> /usr/local/vesta/log/letsencrypt.log
+
 # check if alias is the letsencrypt wildcard domain, if not, make the normal checks
 if [[ "$aliases" != "*.$domain" ]]; then
     for alias in $(echo "$aliases" |tr ',' '\n' |sort -u); do
         check_alias="$(echo $ALIAS |tr ',' '\n' |grep ^$alias$)"
         if [ -z "$check_alias" ]; then
+            echo "[$(date)] : EXIT=domain alias $alias doesn't exist" >> /usr/local/vesta/log/letsencrypt.log
             check_result $E_NOTEXIST "domain alias $alias doesn't exist"
         fi
     done
@@ -88,11 +93,14 @@ fi;
 #----------------------------------------------------------#
 
 # Registering LetsEncrypt user account
+echo "[$(date)] : v-add-letsencrypt-user $user" >> /usr/local/vesta/log/letsencrypt.log
 $BIN/v-add-letsencrypt-user $user
+echo "[$(date)] : result: $?" >> /usr/local/vesta/log/letsencrypt.log
 if [ "$?" -ne 0  ]; then
     touch $VESTA/data/queue/letsencrypt.pipe
     sed -i "/ $domain /d" $VESTA/data/queue/letsencrypt.pipe
     send_notice "LETSENCRYPT" "Account registration failed"
+    echo "[$(date)] : EXIT=LE account registration" >> /usr/local/vesta/log/letsencrypt.log
     check_result $E_CONNECT "LE account registration" >/dev/null
 fi
 
@@ -101,9 +109,11 @@ source $USER_DATA/ssl/le.conf
 
 # Checking wildcard alias
 if [ "$aliases" = "*.$domain" ]; then
+    echo "[$(date)] : Checking wildcard alias" >> /usr/local/vesta/log/letsencrypt.log
     wildcard='yes'
     proto="dns-01"
     if [ ! -e "$VESTA/data/users/$user/dns/$domain.conf" ]; then
+        echo "[$(date)] : EXIT=DNS domain $domain doesn't exist" >> /usr/local/vesta/log/letsencrypt.log
         check_result $E_NOTEXIST "DNS domain $domain doesn't exist"
     fi
 else
@@ -111,14 +121,21 @@ else
 fi
 
 # Requesting nonce / STEP 1
+echo "[$(date)] : --- Requesting nonce / STEP 1 ---" >> /usr/local/vesta/log/letsencrypt.log
+echo "[$(date)] : curl -s -I \"$API/directory\"" >> /usr/local/vesta/log/letsencrypt.log
 answer=$(curl -s -I "$API/directory")
+echo "[$(date)] : answer=$answer" >> /usr/local/vesta/log/letsencrypt.log
 nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
+echo "[$(date)] : nonce=$nonce" >> /usr/local/vesta/log/letsencrypt.log
 status=$(echo "$answer"|grep HTTP/ |tail -n1 |cut -f 2 -d ' ')
+echo "[$(date)] : status=$status" >> /usr/local/vesta/log/letsencrypt.log
 if [[ "$status" -ne 200 ]]; then
+    echo "[$(date)] : EXIT=Let's Encrypt nonce request status $status" >> /usr/local/vesta/log/letsencrypt.log
     check_result $E_CONNECT "Let's Encrypt nonce request status $status"
 fi
 
 # Placing new order / STEP 2
+echo "[$(date)] : --- Placing new order / STEP 2 ---" >> /usr/local/vesta/log/letsencrypt.log
 url="$API/acme/new-order"
 payload='{"identifiers":['
 for identifier in $(echo $domain,$aliases |tr ',' '\n' |sort -u); do
@@ -127,38 +144,62 @@ for identifier in $(echo $domain,$aliases |tr ',' '\n' |sort -u); do
 done
 payload=$(echo "$payload"|sed "s/,$//")
 payload=$payload']}'
+echo "[$(date)] : payload=$payload" >> /usr/local/vesta/log/letsencrypt.log
+echo "[$(date)] : query_le_v2 \"$url\" \"$payload\" \"$nonce\"" >> /usr/local/vesta/log/letsencrypt.log
 answer=$(query_le_v2 "$url" "$payload" "$nonce")
+echo "[$(date)] : answer=$answer" >> /usr/local/vesta/log/letsencrypt.log
 nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
+echo "[$(date)] : nonce=$nonce" >> /usr/local/vesta/log/letsencrypt.log
 authz=$(echo "$answer" |grep "acme/authz" |cut -f2 -d '"')
+echo "[$(date)] : authz=$authz" >> /usr/local/vesta/log/letsencrypt.log
 finalize=$(echo "$answer" |grep 'finalize":' |cut -f4 -d '"')
+echo "[$(date)] : finalize=$finalize" >> /usr/local/vesta/log/letsencrypt.log
 status=$(echo "$answer" |grep HTTP/ |tail -n1 |cut -f2 -d ' ')
+echo "[$(date)] : status=$status" >> /usr/local/vesta/log/letsencrypt.log
 if [[ "$status" -ne 201 ]]; then
+    echo "[$(date)] : EXIT=Let's Encrypt new auth status $status" >> /usr/local/vesta/log/letsencrypt.log
     check_result $E_CONNECT "Let's Encrypt new auth status $status"
 fi
 
 # Requesting authorization token / STEP 3
+echo "[$(date)] : --- Requesting authorization token / STEP 3 ---" >> /usr/local/vesta/log/letsencrypt.log
 for auth in $authz; do
     payload=''
+    echo "[$(date)] : for auth=$auth" >> /usr/local/vesta/log/letsencrypt.log
+    echo "[$(date)] : query_le_v2 \"$auth\" \"$payload\" \"$nonce\"" >> /usr/local/vesta/log/letsencrypt.log
     answer=$(query_le_v2 "$auth" "$payload" "$nonce")
+    echo "[$(date)] : answer=$answer" >> /usr/local/vesta/log/letsencrypt.log
     url=$(echo "$answer" |grep -A3 $proto |grep url |cut -f 4 -d \")
+    echo "[$(date)] : url=$url" >> /usr/local/vesta/log/letsencrypt.log
     token=$(echo "$answer" |grep -A3 $proto |grep token |cut -f 4 -d \")
+    echo "[$(date)] : token=$token" >> /usr/local/vesta/log/letsencrypt.log
     nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
+    echo "[$(date)] : nonce=$nonce" >> /usr/local/vesta/log/letsencrypt.log
     status=$(echo "$answer"|grep HTTP/ |tail -n1 |cut -f 2 -d ' ')
+    echo "[$(date)] : status=$status" >> /usr/local/vesta/log/letsencrypt.log
     if [[ "$status" -ne 200 ]]; then
+        echo "[$(date)] : EXIT=Let's Encrypt acme/authz bad status $status" >> /usr/local/vesta/log/letsencrypt.log
         check_result $E_CONNECT "Let's Encrypt acme/authz bad status $status"
     fi
 
-    # Accepting challenge / STEP 4
+    # Configuring challenge / STEP 4
+    echo "[$(date)] : --- Configuring challenge / STEP 4 ---" >> /usr/local/vesta/log/letsencrypt.log
+    echo "[$(date)] : wildcard=$wildcard" >> /usr/local/vesta/log/letsencrypt.log
     if [ "$wildcard" = 'yes'  ]; then
         record=$(printf "%s" "$token.$THUMB" |\
             openssl dgst -sha256 -binary |encode_base64)
         old_records=$($BIN/v-list-dns-records $user $domain plain|grep 'TXT')
         old_records=$(echo "$old_records" |grep _acme-challenge |cut -f 1)
         for old_record in $old_records; do
-            $BIN/v-delete-dns-record $user $domain $old_record
+            $BIN/v-delete-dns-record "$user" "$domain" "$old_record"
         done
-        $BIN/v-add-dns-record $user $domain "_acme-challenge" "TXT" $record
-        check_result $? "DNS _acme-challenge record wasn't created"
+        $BIN/v-add-dns-record "$user" "$domain" "_acme-challenge" "TXT" "$record"
+        exitstatus=$?
+        echo "[$(date)] : v-add-dns-record \"$user\" \"$domain\" \"_acme-challenge\" \"TXT\" \"$record\"" >> /usr/local/vesta/log/letsencrypt.log
+        if [ "$exitstatus" -ne 0  ]; then
+            echo "[$(date)] : EXIT=DNS _acme-challenge record wasn't created" >> /usr/local/vesta/log/letsencrypt.log
+        fi
+        check_result $exitstatus "DNS _acme-challenge record wasn't created"
     else
         if [ "$WEB_SYSTEM" = 'nginx' ] || [ ! -z "$PROXY_SYSTEM" ]; then
             if [ -f "/usr/local/vesta/web/inc/nginx_proxy" ]; then
@@ -167,6 +208,7 @@ for auth in $authz; do
                 acme_challenge="$well_known/acme-challenge"
                 mkdir -p $acme_challenge
                 echo "$token.$THUMB" > $acme_challenge/$token
+                echo "[$(date)] : in $acme_challenge/$token we put: $token.$THUMB" >> /usr/local/vesta/log/letsencrypt.log
                 chown -R $user:$user $well_known
             else
                 # default nginx method
@@ -179,15 +221,22 @@ for auth in $authz; do
                     echo '    return 200 "$1.'$THUMB'";' >> $conf
                     echo '}' >> $conf
                 fi
+                echo "[$(date)] : in $conf we put: $THUMB" >> /usr/local/vesta/log/letsencrypt.log
                 if [ ! -e "$sconf" ]; then
                     ln -s "$conf" "$sconf"
                 fi
+                echo "[$(date)] : v-restart-proxy" >> /usr/local/vesta/log/letsencrypt.log 
                 $BIN/v-restart-proxy
                 if [ -z "$PROXY_SYSTEM" ]; then
                     # apache-less variant
+                    echo "[$(date)] : v-restart-web" >> /usr/local/vesta/log/letsencrypt.log 
                     $BIN/v-restart-web
                 fi
-                check_result $? "Proxy restart failed" >/dev/null
+                exitstatus=$?
+                if [ "$exitstatus" -ne 0  ]; then
+                    echo "[$(date)] : EXIT=Proxy restart failed = $exitstatus" >> /usr/local/vesta/log/letsencrypt.log
+                fi
+                check_result $exitstatus "Proxy restart failed" >/dev/null
             fi
         else
             well_known="$HOMEDIR/$user/web/$domain/public_html/.well-known"
@@ -195,13 +244,16 @@ for auth in $authz; do
             mkdir -p $acme_challenge
             echo "$token.$THUMB" > $acme_challenge/$token
             chown -R $user:$user $well_known
+            echo "[$(date)] : in $acme_challenge/$token we put: $token.$THUMB" >> /usr/local/vesta/log/letsencrypt.log
             # $BIN/v-restart-web
             # check_result $? "Web restart failed" >/dev/null
         fi
     fi
 
     # Requesting ACME validation / STEP 5
+    echo "[$(date)] : --- Requesting ACME validation / STEP 5 ---" >> /usr/local/vesta/log/letsencrypt.log
     validation_check=$(echo "$answer" |grep '"valid"')
+    echo "[$(date)] : validation_check=$validation_check" >> /usr/local/vesta/log/letsencrypt.log
     if [[ ! -z "$validation_check" ]]; then
         validation='valid'
     else
@@ -211,22 +263,33 @@ for auth in $authz; do
     # Doing pol check on status
     i=1
     while [ "$validation" = 'pending' ]; do
+        echo "[$(date)] : - Doing pol check on status" >> /usr/local/vesta/log/letsencrypt.log
         payload='{}'
+        echo "[$(date)] : query_le_v2 \"$url\" \"$payload\" \"$nonce\"" >> /usr/local/vesta/log/letsencrypt.log
         answer=$(query_le_v2 "$url" "$payload" "$nonce")
+        echo "[$(date)] : answer=$answer" >> /usr/local/vesta/log/letsencrypt.log
         validation=$(echo "$answer"|grep -A1 $proto |tail -n1|cut -f4 -d \")
+        echo "[$(date)] : validation=$validation" >> /usr/local/vesta/log/letsencrypt.log
         nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
+        echo "[$(date)] : nonce=$nonce" >> /usr/local/vesta/log/letsencrypt.log
         status=$(echo "$answer"|grep HTTP/ |tail -n1 |cut -f 2 -d ' ')
+        echo "[$(date)] : status=$status" >> /usr/local/vesta/log/letsencrypt.log
         if [[ "$status" -ne 200 ]]; then
+            echo "[$(date)] : EXIT=Let's Encrypt validation status $status" >> /usr/local/vesta/log/letsencrypt.log
             check_result $E_CONNECT "Let's Encrypt validation status $status"
         fi
 
         i=$((i + 1))
         if [ "$i" -gt 10 ]; then
+            echo "[$(date)] : EXIT=Let's Encrypt domain validation timeout" >> /usr/local/vesta/log/letsencrypt.log
             check_result $E_CONNECT "Let's Encrypt domain validation timeout"
         fi
-        sleep $((i*2))
+        sleeping=$((i*2))
+        echo "[$(date)] : sleep $sleeping (i=$i)" >> /usr/local/vesta/log/letsencrypt.log
+        sleep $sleeping
     done
     if [ "$validation" = 'invalid' ]; then
+        echo "[$(date)] : EXIT=Let's Encrypt domain verification failed" >> /usr/local/vesta/log/letsencrypt.log
         check_result $E_CONNECT "Let's Encrypt domain verification failed"
     fi
 done
@@ -237,40 +300,62 @@ ssl_dir=$($BIN/v-generate-ssl-cert "$domain" "info@$domain" "US" "California"\
     "San Francisco" "Vesta" "IT" "$aliases" |tail -n1 |awk '{print $2}')
 
 # Sending CSR to finalize order / STEP 6
+echo "[$(date)] : --- Sending CSR to finalize order / STEP 6 ---" >> /usr/local/vesta/log/letsencrypt.log
+
 csr=$(openssl req -in $ssl_dir/$domain.csr -outform DER |encode_base64)
 payload='{"csr":"'$csr'"}'
+echo "[$(date)] : query_le_v2 \"$finalize\" \"$payload\" \"$nonce\"" >> /usr/local/vesta/log/letsencrypt.log
 answer=$(query_le_v2 "$finalize" "$payload" "$nonce")
+echo "[$(date)] : answer=$answer" >> /usr/local/vesta/log/letsencrypt.log
 nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
+echo "[$(date)] : nonce=$nonce" >> /usr/local/vesta/log/letsencrypt.log
 status=$(echo "$answer"|grep HTTP/ |tail -n1 |cut -f 2 -d ' ')
+echo "[$(date)] : status=$status" >> /usr/local/vesta/log/letsencrypt.log
 certificate=$(echo "$answer"|grep 'certificate":' |cut -f4 -d '"')
+echo "[$(date)] : certificate=$certificate" >> /usr/local/vesta/log/letsencrypt.log
 if [[ "$status" -ne 200 ]]; then
+    echo "[$(date)] : EXIT=Let's Encrypt finalize bad status $status" >> /usr/local/vesta/log/letsencrypt.log
     check_result $E_CONNECT "Let's Encrypt finalize bad status $status"
 fi
 
 # Downloading signed certificate / STEP 7
+echo "[$(date)] : --- Downloading signed certificate / STEP 7 ---" >> /usr/local/vesta/log/letsencrypt.log
+echo "[$(date)] : query_le_v2 \"$certificate\" \"\" \"$nonce\"" >> /usr/local/vesta/log/letsencrypt.log
 answer=$(query_le_v2 "$certificate" "" "$nonce" "$ssl_dir/$domain.pem")
+echo "[$(date)] : answer=$answer" >> /usr/local/vesta/log/letsencrypt.log
 status=$(echo "$answer"|grep HTTP/ |tail -n1 |cut -f 2 -d ' ')
+echo "[$(date)] : status=$status" >> /usr/local/vesta/log/letsencrypt.log
 if [[ "$status" -ne 200 ]]; then
     [ -d "$ssl_dir" ] && rm -rf "$ssl_dir"
+    echo "[$(date)] : EXIT=Let's Encrypt downloading signed cert failed status: $status" >> /usr/local/vesta/log/letsencrypt.log
     check_result $E_NOTEXIST "Let's Encrypt downloading signed cert failed status: $status"
 fi
 
 # Splitting up downloaded pem
+echo "[$(date)] : - Splitting up downloaded pem" >> /usr/local/vesta/log/letsencrypt.log
 crt_end=$(grep -n END $ssl_dir/$domain.pem |head -n1 |cut -f1 -d:)
+echo "[$(date)] : crt_end=$crt_end" >> /usr/local/vesta/log/letsencrypt.log
 head -n $crt_end $ssl_dir/$domain.pem > $ssl_dir/$domain.crt
 
 pem_lines=$(wc -l $ssl_dir/$domain.pem |cut -f 1 -d ' ')
+echo "[$(date)] : pem_lines=$pem_lines" >> /usr/local/vesta/log/letsencrypt.log
 ca_end=$(grep -n  "BEGIN" $ssl_dir/$domain.pem |tail -n1 |cut -f 1 -d :)
+echo "[$(date)] : ca_end=$ca_end" >> /usr/local/vesta/log/letsencrypt.log
 ca_end=$(( pem_lines - crt_end + 1 ))
+echo "[$(date)] : ca_end=$ca_end" >> /usr/local/vesta/log/letsencrypt.log
 tail -n $ca_end $ssl_dir/$domain.pem > $ssl_dir/$domain.ca
 
 # Adding SSL
 ssl_home=$(search_objects 'web' 'LETSENCRYPT' 'yes' 'SSL_HOME')
 $BIN/v-delete-web-domain-ssl $user $domain >/dev/null 2>&1
+echo "[$(date)] : v-add-web-domain-ssl $user $domain $ssl_dir $ssl_home" >> /usr/local/vesta/log/letsencrypt.log
 $BIN/v-add-web-domain-ssl $user $domain $ssl_dir $ssl_home
-if [ "$?" -ne '0' ]; then
+$exitstatus=$?
+echo "[$(date)] : v-add-web-domain-ssl status: $exitstatus" >> /usr/local/vesta/log/letsencrypt.log
+if [ "$exitstatus" -ne '0' ]; then
     touch $VESTA/data/queue/letsencrypt.pipe
     sed -i "/ $domain /d" $VESTA/data/queue/letsencrypt.pipe
+    echo "[$(date)] : EXIT=$domain certificate installation failed" >> /usr/local/vesta/log/letsencrypt.log
     send_notice 'LETSENCRYPT' "$domain certificate installation failed"
     check_result $? "SSL install" >/dev/null
 fi
@@ -301,7 +386,7 @@ sed -i "/ $domain /d" $VESTA/data/queue/letsencrypt.pipe
 
 # Notifying user
 send_notice 'LETSENCRYPT' "$domain SSL has been installed successfully"
-
+echo "[$(date)] : EXIT=***** $domain SSL has been installed successfully *****" >> /usr/local/vesta/log/letsencrypt.log
 
 # Logging
 log_event "$OK" "$ARGUMENTS"

From e9b6cd6d0928fe8b5767ae440fdd91e4c2dd328b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 11 Apr 2021 18:12:07 +0200
Subject: [PATCH 1419/2300] Update v-add-letsencrypt-domain

---
 bin/v-add-letsencrypt-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 9dbc335f..a87d7618 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -357,7 +357,7 @@ if [ "$exitstatus" -ne '0' ]; then
     sed -i "/ $domain /d" $VESTA/data/queue/letsencrypt.pipe
     echo "[$(date)] : EXIT=$domain certificate installation failed" >> /usr/local/vesta/log/letsencrypt.log
     send_notice 'LETSENCRYPT' "$domain certificate installation failed"
-    check_result $? "SSL install" >/dev/null
+    check_result $exitstatus "SSL install" >/dev/null
 fi
 
 # Adding LE autorenew cronjob

From f1acff47effc1da5d0013d97d40af4b2121b18dc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 11 Apr 2021 18:15:06 +0200
Subject: [PATCH 1420/2300] Temporary fix for double "END CERTIFICATE"

Credits to HestiaCP @hestiacp
---
 bin/v-add-letsencrypt-domain | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index a87d7618..94ccb9be 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -345,6 +345,11 @@ ca_end=$(( pem_lines - crt_end + 1 ))
 echo "[$(date)] : ca_end=$ca_end" >> /usr/local/vesta/log/letsencrypt.log
 tail -n $ca_end $ssl_dir/$domain.pem > $ssl_dir/$domain.ca
 
+# Temporary fix for double "END CERTIFICATE"
+if [[ $(head -n 1 $ssl_dir/$domain.ca) = "-----END CERTIFICATE-----" ]]; then
+    sed -i '1,2d' $ssl_dir/$domain.ca
+fi
+
 # Adding SSL
 ssl_home=$(search_objects 'web' 'LETSENCRYPT' 'yes' 'SSL_HOME')
 $BIN/v-delete-web-domain-ssl $user $domain >/dev/null 2>&1

From a7b209ff3f65e7e2741a214caee9650b65662a0a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 11 Apr 2021 19:39:19 +0200
Subject: [PATCH 1421/2300] Update v-add-letsencrypt-domain

---
 bin/v-add-letsencrypt-domain | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 94ccb9be..3f666f67 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -332,17 +332,17 @@ if [[ "$status" -ne 200 ]]; then
 fi
 
 # Splitting up downloaded pem
-echo "[$(date)] : - Splitting up downloaded pem" >> /usr/local/vesta/log/letsencrypt.log
+# echo "[$(date)] : - Splitting up downloaded pem" >> /usr/local/vesta/log/letsencrypt.log
 crt_end=$(grep -n END $ssl_dir/$domain.pem |head -n1 |cut -f1 -d:)
-echo "[$(date)] : crt_end=$crt_end" >> /usr/local/vesta/log/letsencrypt.log
+# echo "[$(date)] : crt_end=$crt_end" >> /usr/local/vesta/log/letsencrypt.log
 head -n $crt_end $ssl_dir/$domain.pem > $ssl_dir/$domain.crt
 
 pem_lines=$(wc -l $ssl_dir/$domain.pem |cut -f 1 -d ' ')
-echo "[$(date)] : pem_lines=$pem_lines" >> /usr/local/vesta/log/letsencrypt.log
+# echo "[$(date)] : pem_lines=$pem_lines" >> /usr/local/vesta/log/letsencrypt.log
 ca_end=$(grep -n  "BEGIN" $ssl_dir/$domain.pem |tail -n1 |cut -f 1 -d :)
-echo "[$(date)] : ca_end=$ca_end" >> /usr/local/vesta/log/letsencrypt.log
+# echo "[$(date)] : ca_end=$ca_end" >> /usr/local/vesta/log/letsencrypt.log
 ca_end=$(( pem_lines - crt_end + 1 ))
-echo "[$(date)] : ca_end=$ca_end" >> /usr/local/vesta/log/letsencrypt.log
+# echo "[$(date)] : ca_end=$ca_end" >> /usr/local/vesta/log/letsencrypt.log
 tail -n $ca_end $ssl_dir/$domain.pem > $ssl_dir/$domain.ca
 
 # Temporary fix for double "END CERTIFICATE"

From 74209ee7dbb393e70271af8c9547c31f52a840bf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Apr 2021 00:12:04 +0200
Subject: [PATCH 1422/2300] Warn admin if LE renewing failed for hostname

---
 bin/v-update-letsencrypt-ssl | 25 +++++++++++++++++++++----
 1 file changed, 21 insertions(+), 4 deletions(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 36d7a1e9..3105c86c 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -23,6 +23,9 @@ source $VESTA/conf/vesta.conf
 #----------------------------------------------------------#
 
 lecounter=0
+hostname=$(hostname)
+
+echo "[$(date)] : -----------------------------------------------------------------------------------" >> /usr/local/vesta/log/letsencrypt_cron.log
 
 # Checking user certificates
 for user in $($BIN/v-list-users plain |cut -f 1); do
@@ -31,8 +34,20 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
     for domain in $(search_objects 'web' 'LETSENCRYPT' 'yes' 'DOMAIN'); do
     
         fail_counter=$(get_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
-        if [[ "$fail_counter" -ge 7 ]]; then
-            echo "$domain failed $fail_counter times for LetsEncrypt renewing, skipping"
+
+        if [[ "$fail_counter" -ge 8 ]]; then
+            if [ "$hostname" = "$domain" ]; then
+                if [ -z "$SKIP_HOSTNAME_LETSENCRIPT_RENEWING_WARNING" ]; then
+                    email=$(grep CONTACT $VESTA/data/users/admin/user.conf)
+                    email=$(echo "$email" | cut -f 2 -d "'")
+                    echo "hostname $domain failed for LetsEncrypt renewing" | $SENDMAIL -s "LetsEncrypt renewing hostname $hostname" "$email" 'yes'
+                fi
+            fi
+        fi
+
+        if [[ "$fail_counter" -ge 8 ]]; then
+            # echo "$domain failed $fail_counter times for LetsEncrypt renewing, skipping"
+            echo "[$(date)] : $domain failed $fail_counter times for LetsEncrypt renewing, skipping" >> /usr/local/vesta/log/letsencrypt_cron.log
             continue;
         fi
         crt_data=$(openssl x509 -text -in $USER_DATA/ssl/$domain.crt)
@@ -53,11 +68,13 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
             aliases=$(echo "$aliases" |sed -e ':a;N;$!ba;s/\n/,/g')
             msg=$($BIN/v-add-letsencrypt-domain $user $domain $aliases)
             if [ $? -ne 0 ]; then
-                echo "$domain $msg"
                 if [[ $msg == *"is suspended" ]]; then
-                    echo "OK, it's suspended"
+                    echo "[$(date)] : SUSPENDED: $domain $msg" >> /usr/local/vesta/log/letsencrypt_cron.log
                 else
+                    echo "[$(date)] : $domain $msg" >> /usr/local/vesta/log/letsencrypt_cron.log
+                    echo "$domain $msg"
                     fail_counter=$(alter_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
+                    echo "[$(date)] : fail_counter = $fail_counter" >> /usr/local/vesta/log/letsencrypt_cron.log
                     echo "fail_counter = $fail_counter"
                 fi
             fi

From dba978b2007549097b4f29958b6bea9e488c0378 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Apr 2021 00:13:33 +0200
Subject: [PATCH 1423/2300] Update v-update-letsencrypt-ssl

---
 bin/v-update-letsencrypt-ssl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 3105c86c..be61c6c9 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -35,7 +35,7 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
     
         fail_counter=$(get_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
 
-        if [[ "$fail_counter" -ge 8 ]]; then
+        if [[ "$fail_counter" -ge 7 ]]; then
             if [ "$hostname" = "$domain" ]; then
                 if [ -z "$SKIP_HOSTNAME_LETSENCRIPT_RENEWING_WARNING" ]; then
                     email=$(grep CONTACT $VESTA/data/users/admin/user.conf)
@@ -45,7 +45,7 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
             fi
         fi
 
-        if [[ "$fail_counter" -ge 8 ]]; then
+        if [[ "$fail_counter" -ge 7 ]]; then
             # echo "$domain failed $fail_counter times for LetsEncrypt renewing, skipping"
             echo "[$(date)] : $domain failed $fail_counter times for LetsEncrypt renewing, skipping" >> /usr/local/vesta/log/letsencrypt_cron.log
             continue;

From 1f56c826e3f2cb0bc5a1052bc57540a44c6de6f7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Apr 2021 10:01:38 +0200
Subject: [PATCH 1424/2300] Update v-add-letsencrypt-domain

---
 bin/v-add-letsencrypt-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 3f666f67..edd2c8d5 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -355,7 +355,7 @@ ssl_home=$(search_objects 'web' 'LETSENCRYPT' 'yes' 'SSL_HOME')
 $BIN/v-delete-web-domain-ssl $user $domain >/dev/null 2>&1
 echo "[$(date)] : v-add-web-domain-ssl $user $domain $ssl_dir $ssl_home" >> /usr/local/vesta/log/letsencrypt.log
 $BIN/v-add-web-domain-ssl $user $domain $ssl_dir $ssl_home
-$exitstatus=$?
+exitstatus=$?
 echo "[$(date)] : v-add-web-domain-ssl status: $exitstatus" >> /usr/local/vesta/log/letsencrypt.log
 if [ "$exitstatus" -ne '0' ]; then
     touch $VESTA/data/queue/letsencrypt.pipe

From e1d962e60b6025b404f6428824807b5e8baf877c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 10:50:53 +0200
Subject: [PATCH 1425/2300] Introducing UPDATE_SSL_SCRIPT2 callback

---
 bin/v-add-web-domain-ssl | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/bin/v-add-web-domain-ssl b/bin/v-add-web-domain-ssl
index 2c0f78ae..6d9deb9b 100755
--- a/bin/v-add-web-domain-ssl
+++ b/bin/v-add-web-domain-ssl
@@ -149,6 +149,13 @@ if [ ! -z "$UPDATE_SSL_SCRIPT" ]; then
     eval "$UPDATE_SSL_SCRIPT $user $domain"
 fi
 
+UPDATE_SSL_SCRIPT2=''
+source $VESTA/conf/vesta.conf
+if [ ! -z "$UPDATE_SSL_SCRIPT2" ]; then
+    eval "$UPDATE_SSL_SCRIPT2 $user $domain"
+fi
+
+
 # Logging
 log_history "enabled ssl support for $domain"
 log_event "$OK" "$ARGUMENTS"

From d40424eb4d5af632b39d3183d6928184da787eb8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 12:44:27 +0200
Subject: [PATCH 1426/2300] Create node-app-3000.tpl

---
 .../tools/nodejs-nginx-templates/node-app-3000.tpl        | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.tpl

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}

From dd9c8cf1f6f1aca23582c71fafdd78f8df7f591c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 12:45:32 +0200
Subject: [PATCH 1427/2300] nodejs nginx templates

---
 .../node-app-3000-no-https-force.stpl         | 52 +++++++++++++++++++
 .../node-app-3000-no-https-force.tpl          | 45 ++++++++++++++++
 .../node-app-3000-pass-to-https.stpl          | 52 +++++++++++++++++++
 .../node-app-3000-pass-to-https.tpl           |  8 +++
 .../nodejs-nginx-templates/node-app-3000.stpl | 52 +++++++++++++++++++
 .../node-app-nextjs-3000.stpl                 | 37 +++++++++++++
 .../node-app-nextjs-3000.tpl                  |  8 +++
 7 files changed, 254 insertions(+)
 create mode 100644 src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
 create mode 100644 src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.tpl
 create mode 100644 src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
 create mode 100644 src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.tpl
 create mode 100644 src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
 create mode 100644 src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.stpl
 create mode 100644 src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.tpl

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
new file mode 100644
index 00000000..85fb4a95
--- /dev/null
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+    
+    # test %port_num%
+    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+
+    root %sdocroot%/public;
+    index index.html;
+
+    location / {
+        proxy_pass      http://localhost:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+
+
+        # try_files $uri $uri/ @rewrites;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+        }
+    }
+
+    location @rewrites {
+      rewrite ^(.+)$ /index.html last;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
\ No newline at end of file
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.tpl
new file mode 100644
index 00000000..fff0aebb
--- /dev/null
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.tpl
@@ -0,0 +1,45 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    root %sdocroot%/public;
+    index index.html;
+
+    location / {
+        proxy_pass      http://localhost:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+
+
+        # try_files $uri $uri/ @rewrites;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+        }
+    }
+
+    location @rewrites {
+      rewrite ^(.+)$ /index.html last;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
new file mode 100644
index 00000000..a392afef
--- /dev/null
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+    
+    # test %port_num%
+    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+
+    root %sdocroot%/public;
+    index index.html;
+
+    location / {
+        proxy_pass      https://localhost:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+
+
+        # try_files $uri $uri/ @rewrites;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+        }
+    }
+
+    location @rewrites {
+      rewrite ^(.+)$ /index.html last;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
\ No newline at end of file
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
new file mode 100644
index 00000000..85fb4a95
--- /dev/null
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+    
+    # test %port_num%
+    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+
+    root %sdocroot%/public;
+    index index.html;
+
+    location / {
+        proxy_pass      http://localhost:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+
+
+        # try_files $uri $uri/ @rewrites;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+        }
+    }
+
+    location @rewrites {
+      rewrite ^(.+)$ /index.html last;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
\ No newline at end of file
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.stpl
new file mode 100644
index 00000000..1d8dcffe
--- /dev/null
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.stpl
@@ -0,0 +1,37 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+    
+    # test %port_num%
+    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+
+    location / {
+        # reverse proxy for next server
+        proxy_pass http://localhost:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+      
+        # we need to remove this 404 handling
+        # because next's _next folder and own handling
+        # try_files $uri $uri/ =404;
+    }
+
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
\ No newline at end of file
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}

From d03d8e95371f9599b29ac7708e29b99549f3983c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 18:07:03 +0200
Subject: [PATCH 1428/2300] send_email_to_admin function

---
 func/main.sh | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/func/main.sh b/func/main.sh
index c128202b..5f71bb1f 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -1098,3 +1098,19 @@ no_symlink_chmod() {
         chmod "${filemode}" "${i}"
     done
 }
+
+# $1 = subject
+# $2 = body
+send_email_to_admin() {
+    email=$(grep CONTACT /usr/local/vesta/data/users/admin/user.conf)
+    email=$(echo "$email" | cut -f 2 -d "'")
+    if [ -z "$email" ]; then
+        if [ ! -z "$NOTIFY_ADMIN_FULL_BACKUP" ]; then
+            email=$NOTIFY_ADMIN_FULL_BACKUP
+        fi
+    fi
+    if [ -z "$email" ]; then
+        return;
+    fi
+    echo "$2" | $SENDMAIL -s "$1" "$email" 'yes'
+}

From 6b30357f9a3997917f9ea4d1cb8765e940e5515a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 18:09:33 +0200
Subject: [PATCH 1429/2300] Update v-update-letsencrypt-ssl

---
 bin/v-update-letsencrypt-ssl | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index be61c6c9..aa1f8167 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -38,9 +38,7 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
         if [[ "$fail_counter" -ge 7 ]]; then
             if [ "$hostname" = "$domain" ]; then
                 if [ -z "$SKIP_HOSTNAME_LETSENCRIPT_RENEWING_WARNING" ]; then
-                    email=$(grep CONTACT $VESTA/data/users/admin/user.conf)
-                    email=$(echo "$email" | cut -f 2 -d "'")
-                    echo "hostname $domain failed for LetsEncrypt renewing" | $SENDMAIL -s "LetsEncrypt renewing hostname $hostname" "$email" 'yes'
+                    send_email_to_admin "LetsEncrypt renewing hostname $hostname" "Warning: hostname $domain failed for LetsEncrypt renewing"
                 fi
             fi
         fi

From be9710f9ead3ce8142d7cff8b76399c4bf04fcc1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 18:25:56 +0200
Subject: [PATCH 1430/2300] Update v-update-letsencrypt-ssl

---
 bin/v-update-letsencrypt-ssl | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index aa1f8167..80b07159 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -35,11 +35,10 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
     
         fail_counter=$(get_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
 
-        if [[ "$fail_counter" -ge 7 ]]; then
+        if [[ "$fail_counter" -eq 7 ]]; then
             if [ "$hostname" = "$domain" ]; then
-                if [ -z "$SKIP_HOSTNAME_LETSENCRIPT_RENEWING_WARNING" ]; then
-                    send_email_to_admin "LetsEncrypt renewing hostname $hostname" "Warning: hostname $domain failed for LetsEncrypt renewing"
-                fi
+                fail_counter=$(alter_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
+                send_email_to_admin "LetsEncrypt renewing hostname $hostname" "Warning: hostname $domain failed for LetsEncrypt renewing"
             fi
         fi
 

From 3611b888e572257eb0b6a18b4627452452686c20 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 18:55:22 +0200
Subject: [PATCH 1431/2300] Update v-update-letsencrypt-ssl

---
 bin/v-update-letsencrypt-ssl | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index 80b07159..ac3e2eda 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -33,16 +33,20 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
 
     for domain in $(search_objects 'web' 'LETSENCRYPT' 'yes' 'DOMAIN'); do
     
+        limit_check=1
         fail_counter=$(get_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
 
-        if [[ "$fail_counter" -eq 7 ]]; then
-            if [ "$hostname" = "$domain" ]; then
+        if [[ "$hostname" = "$domain" ]]; then
+            if [[ "$fail_counter" -eq 7 ]]; then
+                limit_check=0
+            fi
+            if [[ "$fail_counter" -eq 8 ]]; then
                 fail_counter=$(alter_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
                 send_email_to_admin "LetsEncrypt renewing hostname $hostname" "Warning: hostname $domain failed for LetsEncrypt renewing"
             fi
         fi
 
-        if [[ "$fail_counter" -ge 7 ]]; then
+        if [[ "$fail_counter" -ge 7 ]] && [[ "$limit_check" -eq 1 ]]; then
             # echo "$domain failed $fail_counter times for LetsEncrypt renewing, skipping"
             echo "[$(date)] : $domain failed $fail_counter times for LetsEncrypt renewing, skipping" >> /usr/local/vesta/log/letsencrypt_cron.log
             continue;

From 76efd9a1cd14bd5eb05d1a6ab3606596168d34a2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 19:05:07 +0200
Subject: [PATCH 1432/2300] Version 0.9.8-26-45

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 56430e65..c95b3f55 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-44
+vesta-0.9.8-26-45

From 7c5948b579df8e7944c0183c1807d5ddd69e131f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 19:12:17 +0200
Subject: [PATCH 1433/2300] Update Changelog.md

---
 Changelog.md | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index d4db2e5c..cedb6cc7 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,4 +1,10 @@
-Version 0.9.8-26-44 [04-Apr-2021]
+Version 0.9.8-26-45 [13-Apr-2021]
+==================================================
+* [Feature] Logging whole LetsEncrypt process to /usr/local/vesta/log/letsencrypt.log and /usr/local/vesta/log/letsencrypt_cron.log
+* [Feature] Warn admin once (by sending email) if LetsEncrypt renewing failed for server hostname
+* [Bugfix] Correct truncating of CA LetsEncrypt certificate (thanks to HestiaCP @hestiacp for fix)
+
+* Version 0.9.8-26-44 [04-Apr-2021]
 ==================================================
 * [Security] Preventing denial-of-service in openssl library in vesta-nginx service (CVE-2021-3449)
 * [Security] Preventing admin to install non-vesta packages from vesta admin panel user interface (Credits to: Numan Türle @numanturle)

From 7293dd9f7b9de9310b97db0e5a2348a3dab39671 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 19:12:41 +0200
Subject: [PATCH 1434/2300] Update Changelog.md

---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index cedb6cc7..78567100 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -4,7 +4,7 @@ Version 0.9.8-26-45 [13-Apr-2021]
 * [Feature] Warn admin once (by sending email) if LetsEncrypt renewing failed for server hostname
 * [Bugfix] Correct truncating of CA LetsEncrypt certificate (thanks to HestiaCP @hestiacp for fix)
 
-* Version 0.9.8-26-44 [04-Apr-2021]
+Version 0.9.8-26-44 [04-Apr-2021]
 ==================================================
 * [Security] Preventing denial-of-service in openssl library in vesta-nginx service (CVE-2021-3449)
 * [Security] Preventing admin to install non-vesta packages from vesta admin panel user interface (Credits to: Numan Türle @numanturle)

From e6067fa57be7528ff224aa2015a4ba19936544f7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 21:16:22 +0200
Subject: [PATCH 1435/2300] Rename node-app-nextjs-3000.stpl to
 node-app-that-also-handle-static files-3000.stpl

---
 ...00.stpl => node-app-that-also-handle-static files-3000.stpl} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename src/deb/for-download/tools/nodejs-nginx-templates/{node-app-nextjs-3000.stpl => node-app-that-also-handle-static files-3000.stpl} (99%)

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-that-also-handle-static files-3000.stpl
similarity index 99%
rename from src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.stpl
rename to src/deb/for-download/tools/nodejs-nginx-templates/node-app-that-also-handle-static files-3000.stpl
index 1d8dcffe..9b0a5853 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-that-also-handle-static files-3000.stpl	
@@ -34,4 +34,4 @@ server {
 
     include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
     include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
-}
\ No newline at end of file
+}

From 2a4832abf53a1bbad8b066a245ecad38e933d22c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 21:19:57 +0200
Subject: [PATCH 1436/2300] Update and rename node-app-nextjs-3000.tpl to
 node-app-that-also-handle-static files-3000tpl

---
 .../node-app-nextjs-3000.tpl                  |  8 -----
 ...-app-that-also-handle-static files-3000tpl | 29 +++++++++++++++++++
 2 files changed, 29 insertions(+), 8 deletions(-)
 delete mode 100644 src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.tpl
 create mode 100644 src/deb/for-download/tools/nodejs-nginx-templates/node-app-that-also-handle-static files-3000tpl

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.tpl
deleted file mode 100644
index 851ac0dc..00000000
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-nextjs-3000.tpl
+++ /dev/null
@@ -1,8 +0,0 @@
-server {
-    listen      %ip%:%proxy_port%;
-    server_name %domain_idn% %alias_idn%;
-    location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
-    }
-include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
-}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-that-also-handle-static files-3000tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-that-also-handle-static files-3000tpl
new file mode 100644
index 00000000..93267737
--- /dev/null
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-that-also-handle-static files-3000tpl	
@@ -0,0 +1,29 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        # reverse proxy for next server
+        proxy_pass http://localhost:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+      
+        # we need to remove this 404 handling
+        # because next's _next folder and own handling
+        # try_files $uri $uri/ =404;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}

From a4732472084c5959a008ad87a38932ddac3aa62b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 21:24:34 +0200
Subject: [PATCH 1437/2300] Rename node-app-that-also-handle-static
 files-3000.stpl to node-app-also-handle-static files-3000.stpl

---
 ...iles-3000.stpl => node-app-also-handle-static files-3000.stpl} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename src/deb/for-download/tools/nodejs-nginx-templates/{node-app-that-also-handle-static files-3000.stpl => node-app-also-handle-static files-3000.stpl} (100%)

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-that-also-handle-static files-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static files-3000.stpl
similarity index 100%
rename from src/deb/for-download/tools/nodejs-nginx-templates/node-app-that-also-handle-static files-3000.stpl
rename to src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static files-3000.stpl

From 3bc6bcd9ab96039b7a782d21c53c39b5821b0dc5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 21:24:59 +0200
Subject: [PATCH 1438/2300] Rename node-app-that-also-handle-static
 files-3000tpl to node-app-also-handle-static files-3000tpl

---
 ...ic files-3000tpl => node-app-also-handle-static files-3000tpl} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename src/deb/for-download/tools/nodejs-nginx-templates/{node-app-that-also-handle-static files-3000tpl => node-app-also-handle-static files-3000tpl} (100%)

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-that-also-handle-static files-3000tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static files-3000tpl
similarity index 100%
rename from src/deb/for-download/tools/nodejs-nginx-templates/node-app-that-also-handle-static files-3000tpl
rename to src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static files-3000tpl

From c5e4a069fa345520ced3ad5a08e105d13399e326 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 21:27:51 +0200
Subject: [PATCH 1439/2300] Rename node-app-also-handle-static files-3000.stpl
 to node-app-also-handle-static-files-3000.stpl

---
 ...iles-3000.stpl => node-app-also-handle-static-files-3000.stpl} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename src/deb/for-download/tools/nodejs-nginx-templates/{node-app-also-handle-static files-3000.stpl => node-app-also-handle-static-files-3000.stpl} (100%)

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static files-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
similarity index 100%
rename from src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static files-3000.stpl
rename to src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl

From 74823ca988ed552eac4797c7de6b02018548ad00 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Apr 2021 21:28:21 +0200
Subject: [PATCH 1440/2300] Rename node-app-also-handle-static files-3000tpl to
 node-app-also-handle-static-files-3000tpl

---
 ...ic files-3000tpl => node-app-also-handle-static-files-3000tpl} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename src/deb/for-download/tools/nodejs-nginx-templates/{node-app-also-handle-static files-3000tpl => node-app-also-handle-static-files-3000tpl} (100%)

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static files-3000tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000tpl
similarity index 100%
rename from src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static files-3000tpl
rename to src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000tpl

From 543e6b5bc9c9796a287d876318311970d262bc33 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 15 Apr 2021 20:24:33 +0200
Subject: [PATCH 1441/2300] Sorting issue fix

Closing https://github.com/myvesta/vesta/issues/116
Thanks to @jaapmarcus and @hestiacp
---
 web/templates/admin/list_user.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index 4685d183..7dd47577 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -81,7 +81,7 @@
       ?>
 
       <div class="l-unit  <? if($status == 'suspended') echo 'l-unit--suspended'; if($_SESSION['favourites']['USER'][$key] == 1) echo ' l-unit--starred';?>" v_section="user"
-v_unit_id="<?=$key?>" sort-date="<?=strtotime($data[$key]['DATE'].' '.$data[$key]['TIME'])?>" sort-name="<?=$key?>"
+v_unit_id="<?=$key?>" sort-date="<?=strtotime($data[$key]['DATE'].' '.$data[$key]['TIME'])?>" sort-name="<?=strtolower($key)?>"
 sort-bandwidth="<?=$data[$key]['U_BANDWIDTH']?>" sort-disk="<?=$data[$key]['U_DISK']?>" sort-star="<? if($_SESSION['favourites']['USER'][$key] == 1) echo '1'; else echo '0'; ?>">
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left">

From b7c6eba7a54f935465d48455ca43c9b396a49e27 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Apr 2021 18:24:17 +0200
Subject: [PATCH 1442/2300] New cloudflare IP addresses

---
 install/debian/10/nginx/nginx.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/install/debian/10/nginx/nginx.conf b/install/debian/10/nginx/nginx.conf
index ccf657de..6d5e36ba 100644
--- a/install/debian/10/nginx/nginx.conf
+++ b/install/debian/10/nginx/nginx.conf
@@ -77,6 +77,8 @@ http {
     set_real_ip_from 103.21.244.0/22;
     set_real_ip_from 103.22.200.0/22;
     set_real_ip_from 103.31.4.0/22;
+    set_real_ip_from 104.16.0.0/13;
+    set_real_ip_from 104.24.0.0/14;
     set_real_ip_from 141.101.64.0/18;
     set_real_ip_from 108.162.192.0/18;
     set_real_ip_from 190.93.240.0/20;
@@ -84,7 +86,6 @@ http {
     set_real_ip_from 197.234.240.0/22;
     set_real_ip_from 198.41.128.0/17;
     set_real_ip_from 162.158.0.0/15;
-    set_real_ip_from 104.16.0.0/12;
     set_real_ip_from 172.64.0.0/13;
     set_real_ip_from 131.0.72.0/22;
     set_real_ip_from 2400:cb00::/32;

From b207d508d87f1971d9d96a3e3ba287cf4f7dd373 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Apr 2021 18:27:47 +0200
Subject: [PATCH 1443/2300] New cloudflare IP adresses

---
 install/debian/9/nginx/nginx.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/install/debian/9/nginx/nginx.conf b/install/debian/9/nginx/nginx.conf
index 745e1082..989c6b63 100644
--- a/install/debian/9/nginx/nginx.conf
+++ b/install/debian/9/nginx/nginx.conf
@@ -76,6 +76,8 @@ http {
     set_real_ip_from 103.21.244.0/22;
     set_real_ip_from 103.22.200.0/22;
     set_real_ip_from 103.31.4.0/22;
+    set_real_ip_from 104.16.0.0/13;
+    set_real_ip_from 104.24.0.0/14;
     set_real_ip_from 141.101.64.0/18;
     set_real_ip_from 108.162.192.0/18;
     set_real_ip_from 190.93.240.0/20;
@@ -83,7 +85,6 @@ http {
     set_real_ip_from 197.234.240.0/22;
     set_real_ip_from 198.41.128.0/17;
     set_real_ip_from 162.158.0.0/15;
-    set_real_ip_from 104.16.0.0/12;
     set_real_ip_from 172.64.0.0/13;
     set_real_ip_from 131.0.72.0/22;
     set_real_ip_from 2400:cb00::/32;

From 0ad91de3a35249be529f88c6409a5b95e54fba91 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Apr 2021 18:29:19 +0200
Subject: [PATCH 1444/2300] New cloudflare IP adresses

---
 install/debian/8/nginx/nginx.conf | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/install/debian/8/nginx/nginx.conf b/install/debian/8/nginx/nginx.conf
index 65520501..989c6b63 100644
--- a/install/debian/8/nginx/nginx.conf
+++ b/install/debian/8/nginx/nginx.conf
@@ -72,27 +72,28 @@ http {
 
 
     # Cloudflare https://www.cloudflare.com/ips
+    set_real_ip_from 173.245.48.0/20;
     set_real_ip_from 103.21.244.0/22;
     set_real_ip_from 103.22.200.0/22;
     set_real_ip_from 103.31.4.0/22;
-    set_real_ip_from 104.16.0.0/12;
-    set_real_ip_from 108.162.192.0/18;
-    set_real_ip_from 131.0.72.0/22;
+    set_real_ip_from 104.16.0.0/13;
+    set_real_ip_from 104.24.0.0/14;
     set_real_ip_from 141.101.64.0/18;
-    set_real_ip_from 162.158.0.0/15;
-    set_real_ip_from 172.64.0.0/13;
-    set_real_ip_from 173.245.48.0/20;
-    set_real_ip_from 188.114.96.0/20;
+    set_real_ip_from 108.162.192.0/18;
     set_real_ip_from 190.93.240.0/20;
+    set_real_ip_from 188.114.96.0/20;
     set_real_ip_from 197.234.240.0/22;
     set_real_ip_from 198.41.128.0/17;
+    set_real_ip_from 162.158.0.0/15;
+    set_real_ip_from 172.64.0.0/13;
+    set_real_ip_from 131.0.72.0/22;
     set_real_ip_from 2400:cb00::/32;
     set_real_ip_from 2606:4700::/32;
     set_real_ip_from 2803:f800::/32;
     set_real_ip_from 2405:b500::/32;
     set_real_ip_from 2405:8100::/32;
-    set_real_ip_from 2c0f:f248::/32;
     set_real_ip_from 2a06:98c0::/29;
+    set_real_ip_from 2c0f:f248::/32;
     real_ip_header     CF-Connecting-IP;
 
 

From 79402b233604615eb3b281dc2b787448977bb582 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Apr 2021 18:46:49 +0200
Subject: [PATCH 1445/2300] Updating CloudFlare IP addresses

---
 src/deb/vesta/postinst | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index acf13709..c9154edc 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -23,6 +23,16 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# Updating CloudFlare IP addresses
+if [ ! -f "/usr/local/vesta/data/upgrades/update-cloudflare-ips" ]; then
+  if [ -f "/etc/nginx/nginx.conf" ]; then
+    touch /usr/local/vesta/data/upgrades/update-cloudflare-ips
+    echo "== Updating CloudFlare IP addresses"
+    sed -i 's/ set_real_ip_from 104.16.0.0/12;/ set_real_ip_from 104.16.0.0/13;\n set_real_ip_from 104.24.0.0/14;/g' /etc/nginx/nginx.conf
+    systemctl restart nginx
+  fi
+fi
+
 # Tuning of php-fpm pool.d config files (perfomances and limits)
 if [ ! -f "/usr/local/vesta/data/upgrades/tune-fpm-config-files-v2" ]; then
     touch /usr/local/vesta/data/upgrades/tune-fpm-config-files-v2

From 92fa49bd6cb1623ccbf3e6032e19466491fdc6a6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Apr 2021 18:50:33 +0200
Subject: [PATCH 1446/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ec1928e0..d433af05 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1630,6 +1630,7 @@ touch /usr/local/vesta/data/upgrades/clearing-letsencrypt-pipe
 touch /usr/local/vesta/data/upgrades/limit_max_recipients
 touch /usr/local/vesta/data/upgrades/roundcube_smtp_auth
 touch /usr/local/vesta/data/upgrades/apache_status_public_access
+touch /usr/local/vesta/data/upgrades/update-cloudflare-ips
 
 # Secret URL
 secretquery=''

From c7a089b37e24f67b20e24dd44f901e711cb82737 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Apr 2021 19:09:01 +0200
Subject: [PATCH 1447/2300] Updating CloudFlare IP addresses

---
 src/deb/vesta/postinst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index c9154edc..35194389 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -28,7 +28,7 @@ if [ ! -f "/usr/local/vesta/data/upgrades/update-cloudflare-ips" ]; then
   if [ -f "/etc/nginx/nginx.conf" ]; then
     touch /usr/local/vesta/data/upgrades/update-cloudflare-ips
     echo "== Updating CloudFlare IP addresses"
-    sed -i 's/ set_real_ip_from 104.16.0.0/12;/ set_real_ip_from 104.16.0.0/13;\n set_real_ip_from 104.24.0.0/14;/g' /etc/nginx/nginx.conf
+    sed -i "s|    set_real_ip_from 104.16.0.0\/12;|    set_real_ip_from 104.16.0.0/13;\n    set_real_ip_from 104.24.0.0/14;|g" /etc/nginx/nginx.conf
     systemctl restart nginx
   fi
 fi

From 693ad5cff270c9af6fc24d7d4a39af4b690922a5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Apr 2021 19:30:07 +0200
Subject: [PATCH 1448/2300] Version 0.9.8-26-46

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index c95b3f55..82624a72 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-45
+vesta-0.9.8-26-46

From 54fbba596b96472b48a3327df50dae7dcfe2fe5a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Apr 2021 19:32:17 +0200
Subject: [PATCH 1449/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 78567100..dc9ff804 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-46 [17-Apr-2021]
+==================================================
+* [Feature] Updating CloudFlare IP addresses
+
 Version 0.9.8-26-45 [13-Apr-2021]
 ==================================================
 * [Feature] Logging whole LetsEncrypt process to /usr/local/vesta/log/letsencrypt.log and /usr/local/vesta/log/letsencrypt_cron.log

From 5b7c04a8f218a3d9691a6cf965d720868d8ab0c3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 21 Apr 2021 21:47:30 +0200
Subject: [PATCH 1450/2300] Rename node-app-also-handle-static-files-3000tpl to
 node-app-also-handle-static-files-3000.tpl

---
 ...c-files-3000tpl => node-app-also-handle-static-files-3000.tpl} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename src/deb/for-download/tools/nodejs-nginx-templates/{node-app-also-handle-static-files-3000tpl => node-app-also-handle-static-files-3000.tpl} (100%)

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.tpl
similarity index 100%
rename from src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000tpl
rename to src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.tpl

From fe1f5f91f299417f9e3fdde64ce705ab95f59f88 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 30 Apr 2021 03:49:41 +0200
Subject: [PATCH 1451/2300] proftpd tls.conf

---
 install/debian/10/proftpd/tls.conf | 63 ++++++++++++++++++++++++++++++
 1 file changed, 63 insertions(+)
 create mode 100644 install/debian/10/proftpd/tls.conf

diff --git a/install/debian/10/proftpd/tls.conf b/install/debian/10/proftpd/tls.conf
new file mode 100644
index 00000000..9da0017b
--- /dev/null
+++ b/install/debian/10/proftpd/tls.conf
@@ -0,0 +1,63 @@
+#
+# Proftpd sample configuration for FTPS connections.
+#
+# Note that FTPS impose some limitations in NAT traversing.
+# See http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-TLS.html
+# for more information.
+#
+<IfModule mod_dso.c>
+    # If mod_tls was built as a shared/DSO module, load it
+    LoadModule mod_tls.c
+</IfModule>
+<IfModule mod_tls.c>
+TLSEngine                               on
+TLSLog                                  /var/log/proftpd/tls.log
+# this is an example of protocols, proftp works witl all, but use only the most secure ones like TLSv1.1 and TLSv1.2
+TLSProtocol                             TLSv1.1 TLSv1.2
+#
+# Server SSL certificate. You can generate a self-signed certificate using
+# a command like:
+#
+# openssl req -x509 -newkey rsa:1024 \
+#          -keyout /etc/ssl/private/proftpd.key -out /etc/ssl/certs/proftpd.crt \
+#          -nodes -days 365
+#
+# The proftpd.key file must be readable by root only. The other file can be
+# readable by anyone.
+#
+# chmod 0600 /etc/ssl/private/proftpd.key
+# chmod 0640 /etc/ssl/private/proftpd.key
+#
+TLSRSACertificateFile                   /usr/local/vesta/ssl/certificate.crt
+TLSRSACertificateKeyFile                /usr/local/vesta/ssl/certificate.key
+#
+# CA the server trusts...
+#TLSCACertificateFile                    /etc/ssl/certs/CA.pem
+# ...or avoid CA cert and be verbose
+#TLSOptions                      NoCertRequest EnableDiags
+# ... or the same with relaxed session use for some clients (e.g. FireFtp)
+#TLSOptions                      NoCertRequest EnableDiags NoSessionReuseRequired
+#
+#
+# Per default drop connection if client tries to start a renegotiate
+# This is a fix for CVE-2009-3555 but could break some clients.
+#
+#TLSOptions                                                     AllowClientRenegotiations
+#
+TLSOptions                       NoSessionReuseRequired AllowClientRenegotiations
+# Authenticate clients that want to use FTP over TLS?
+#
+#TLSVerifyClient                         off
+#
+# Are clients required to use FTP over TLS when talking to this server?
+#
+TLSRequired                             off
+#
+# Allow SSL/TLS renegotiations when the client requests them, but
+# do not force the renegotations.  Some clients do not support
+# SSL/TLS renegotiations; when mod_tls forces a renegotiation, these
+# clients will close the data connection, or there will be a timeout
+# on an idle data connection.
+#
+TLSRenegotiate                          required off
+</IfModule>

From 91961383d9b05d6305b2117718bc5d105a586cf4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 30 Apr 2021 03:51:04 +0200
Subject: [PATCH 1452/2300] Include /etc/proftpd/tls.conf

---
 install/debian/10/proftpd/proftpd.conf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/debian/10/proftpd/proftpd.conf b/install/debian/10/proftpd/proftpd.conf
index 3eb0ec2c..b144b8a5 100644
--- a/install/debian/10/proftpd/proftpd.conf
+++ b/install/debian/10/proftpd/proftpd.conf
@@ -4,6 +4,8 @@ ServerAdmin                     root@localhost
 DefaultServer                   on
 DefaultRoot                  ~ !adm
 
+Include /etc/proftpd/tls.conf
+
 <IfModule mod_vroot.c>
     VRootEngine                 on
     VRootAlias                  /etc/security/pam_env.conf etc/security/pam_env.conf

From 139f864b5471ca4e0ff1104ccc25999f0c167289 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 30 Apr 2021 04:03:43 +0200
Subject: [PATCH 1453/2300] Proftpd tls.conf

---
 install/debian/9/proftpd/tls.conf | 63 +++++++++++++++++++++++++++++++
 1 file changed, 63 insertions(+)
 create mode 100644 install/debian/9/proftpd/tls.conf

diff --git a/install/debian/9/proftpd/tls.conf b/install/debian/9/proftpd/tls.conf
new file mode 100644
index 00000000..9da0017b
--- /dev/null
+++ b/install/debian/9/proftpd/tls.conf
@@ -0,0 +1,63 @@
+#
+# Proftpd sample configuration for FTPS connections.
+#
+# Note that FTPS impose some limitations in NAT traversing.
+# See http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-TLS.html
+# for more information.
+#
+<IfModule mod_dso.c>
+    # If mod_tls was built as a shared/DSO module, load it
+    LoadModule mod_tls.c
+</IfModule>
+<IfModule mod_tls.c>
+TLSEngine                               on
+TLSLog                                  /var/log/proftpd/tls.log
+# this is an example of protocols, proftp works witl all, but use only the most secure ones like TLSv1.1 and TLSv1.2
+TLSProtocol                             TLSv1.1 TLSv1.2
+#
+# Server SSL certificate. You can generate a self-signed certificate using
+# a command like:
+#
+# openssl req -x509 -newkey rsa:1024 \
+#          -keyout /etc/ssl/private/proftpd.key -out /etc/ssl/certs/proftpd.crt \
+#          -nodes -days 365
+#
+# The proftpd.key file must be readable by root only. The other file can be
+# readable by anyone.
+#
+# chmod 0600 /etc/ssl/private/proftpd.key
+# chmod 0640 /etc/ssl/private/proftpd.key
+#
+TLSRSACertificateFile                   /usr/local/vesta/ssl/certificate.crt
+TLSRSACertificateKeyFile                /usr/local/vesta/ssl/certificate.key
+#
+# CA the server trusts...
+#TLSCACertificateFile                    /etc/ssl/certs/CA.pem
+# ...or avoid CA cert and be verbose
+#TLSOptions                      NoCertRequest EnableDiags
+# ... or the same with relaxed session use for some clients (e.g. FireFtp)
+#TLSOptions                      NoCertRequest EnableDiags NoSessionReuseRequired
+#
+#
+# Per default drop connection if client tries to start a renegotiate
+# This is a fix for CVE-2009-3555 but could break some clients.
+#
+#TLSOptions                                                     AllowClientRenegotiations
+#
+TLSOptions                       NoSessionReuseRequired AllowClientRenegotiations
+# Authenticate clients that want to use FTP over TLS?
+#
+#TLSVerifyClient                         off
+#
+# Are clients required to use FTP over TLS when talking to this server?
+#
+TLSRequired                             off
+#
+# Allow SSL/TLS renegotiations when the client requests them, but
+# do not force the renegotations.  Some clients do not support
+# SSL/TLS renegotiations; when mod_tls forces a renegotiation, these
+# clients will close the data connection, or there will be a timeout
+# on an idle data connection.
+#
+TLSRenegotiate                          required off
+</IfModule>

From 2ac32032a8e0fdcbabe59969dadca3e36b0edfb0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 30 Apr 2021 04:04:30 +0200
Subject: [PATCH 1454/2300] Include /etc/proftpd/tls.conf

---
 install/debian/9/proftpd/proftpd.conf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/debian/9/proftpd/proftpd.conf b/install/debian/9/proftpd/proftpd.conf
index 69ec6b2e..d2bd8667 100644
--- a/install/debian/9/proftpd/proftpd.conf
+++ b/install/debian/9/proftpd/proftpd.conf
@@ -4,6 +4,8 @@ ServerAdmin                     root@localhost
 DefaultServer                   on
 DefaultRoot                  ~ !adm
 
+Include /etc/proftpd/tls.conf
+
 <IfModule mod_vroot.c>
     VRootEngine                 on
     VRootAlias                  /etc/security/pam_env.conf etc/security/pam_env.conf

From 39af1bd5017cfb9da415c7ddbfca08195996ba39 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 30 Apr 2021 04:05:33 +0200
Subject: [PATCH 1455/2300] Proftpd tls.conf

---
 install/debian/8/proftpd/tls.conf | 63 +++++++++++++++++++++++++++++++
 1 file changed, 63 insertions(+)
 create mode 100644 install/debian/8/proftpd/tls.conf

diff --git a/install/debian/8/proftpd/tls.conf b/install/debian/8/proftpd/tls.conf
new file mode 100644
index 00000000..9da0017b
--- /dev/null
+++ b/install/debian/8/proftpd/tls.conf
@@ -0,0 +1,63 @@
+#
+# Proftpd sample configuration for FTPS connections.
+#
+# Note that FTPS impose some limitations in NAT traversing.
+# See http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-TLS.html
+# for more information.
+#
+<IfModule mod_dso.c>
+    # If mod_tls was built as a shared/DSO module, load it
+    LoadModule mod_tls.c
+</IfModule>
+<IfModule mod_tls.c>
+TLSEngine                               on
+TLSLog                                  /var/log/proftpd/tls.log
+# this is an example of protocols, proftp works witl all, but use only the most secure ones like TLSv1.1 and TLSv1.2
+TLSProtocol                             TLSv1.1 TLSv1.2
+#
+# Server SSL certificate. You can generate a self-signed certificate using
+# a command like:
+#
+# openssl req -x509 -newkey rsa:1024 \
+#          -keyout /etc/ssl/private/proftpd.key -out /etc/ssl/certs/proftpd.crt \
+#          -nodes -days 365
+#
+# The proftpd.key file must be readable by root only. The other file can be
+# readable by anyone.
+#
+# chmod 0600 /etc/ssl/private/proftpd.key
+# chmod 0640 /etc/ssl/private/proftpd.key
+#
+TLSRSACertificateFile                   /usr/local/vesta/ssl/certificate.crt
+TLSRSACertificateKeyFile                /usr/local/vesta/ssl/certificate.key
+#
+# CA the server trusts...
+#TLSCACertificateFile                    /etc/ssl/certs/CA.pem
+# ...or avoid CA cert and be verbose
+#TLSOptions                      NoCertRequest EnableDiags
+# ... or the same with relaxed session use for some clients (e.g. FireFtp)
+#TLSOptions                      NoCertRequest EnableDiags NoSessionReuseRequired
+#
+#
+# Per default drop connection if client tries to start a renegotiate
+# This is a fix for CVE-2009-3555 but could break some clients.
+#
+#TLSOptions                                                     AllowClientRenegotiations
+#
+TLSOptions                       NoSessionReuseRequired AllowClientRenegotiations
+# Authenticate clients that want to use FTP over TLS?
+#
+#TLSVerifyClient                         off
+#
+# Are clients required to use FTP over TLS when talking to this server?
+#
+TLSRequired                             off
+#
+# Allow SSL/TLS renegotiations when the client requests them, but
+# do not force the renegotations.  Some clients do not support
+# SSL/TLS renegotiations; when mod_tls forces a renegotiation, these
+# clients will close the data connection, or there will be a timeout
+# on an idle data connection.
+#
+TLSRenegotiate                          required off
+</IfModule>

From 108cb3dfdb9337edd6945729f4caa7ca3c5d40f0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 30 Apr 2021 04:06:09 +0200
Subject: [PATCH 1456/2300] Include /etc/proftpd/tls.conf

---
 install/debian/8/proftpd/proftpd.conf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/debian/8/proftpd/proftpd.conf b/install/debian/8/proftpd/proftpd.conf
index 69ec6b2e..d2bd8667 100644
--- a/install/debian/8/proftpd/proftpd.conf
+++ b/install/debian/8/proftpd/proftpd.conf
@@ -4,6 +4,8 @@ ServerAdmin                     root@localhost
 DefaultServer                   on
 DefaultRoot                  ~ !adm
 
+Include /etc/proftpd/tls.conf
+
 <IfModule mod_vroot.c>
     VRootEngine                 on
     VRootAlias                  /etc/security/pam_env.conf etc/security/pam_env.conf

From 0a0d3a4649df03d1e2b9521d7f6e0c2fd3cb5b9b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 30 Apr 2021 04:08:42 +0200
Subject: [PATCH 1457/2300] Copy Proftpd tls.conf in installer

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d433af05..8921a4d7 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1040,6 +1040,7 @@ fi
 if [ "$proftpd" = 'yes' ]; then
     echo "127.0.0.1 $servername" >> /etc/hosts
     cp -f $vestacp/proftpd/proftpd.conf /etc/proftpd/
+    cp -f $vestacp/proftpd/tls.conf /etc/proftpd/
     update-rc.d proftpd defaults
     service proftpd start
     check_result $? "proftpd start failed"

From 17b4b25f97534e224ecf82d27cec0ba3343d6bd5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 16 May 2021 11:46:40 +0200
Subject: [PATCH 1458/2300] Add files via upload

---
 .../node-app-4000-and-websocket-6001.stpl     | 68 +++++++++++++++++++
 .../node-app-4000-and-websocket-6001.tpl      | 25 +++++++
 2 files changed, 93 insertions(+)
 create mode 100644 src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
 create mode 100644 src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.tpl

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
new file mode 100644
index 00000000..0def9f53
--- /dev/null
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
@@ -0,0 +1,68 @@
+server {
+    listen      %ip%:%proxy_ssl_port%;
+    server_name %domain_idn% %alias_idn%;
+    ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+    
+    # test %port_num%
+    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+
+    root %sdocroot%/public;
+    index index.html;
+
+    location / {
+        proxy_pass      http://localhost:4000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+
+
+        # try_files $uri $uri/ @rewrites;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+        }
+    }
+    
+    
+    location /app {
+        proxy_pass             http://127.0.0.1:6001;
+        proxy_set_header Host  $host;
+        proxy_read_timeout     60;
+        proxy_connect_timeout  60;
+        proxy_redirect         off;
+
+        # Allow the use of websockets
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+    }
+
+    location @rewrites {
+      rewrite ^(.+)$ /index.html last;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
\ No newline at end of file
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.tpl
new file mode 100644
index 00000000..958b2594
--- /dev/null
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.tpl
@@ -0,0 +1,25 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+
+    location /app {
+        proxy_pass             http://127.0.0.1:6001;
+        proxy_set_header Host  $host;
+        proxy_read_timeout     60;
+        proxy_connect_timeout  60;
+        proxy_redirect         off;
+
+        # Allow the use of websockets
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+    }
+
+
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}

From d368a7e6d46fae3924accbf2ba4c16a1c741b5e1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 May 2021 19:21:06 +0200
Subject: [PATCH 1459/2300] More logical restore backup template

---
 web/templates/admin/list_backup_detail.html | 16 +++++-----------
 1 file changed, 5 insertions(+), 11 deletions(-)

diff --git a/web/templates/admin/list_backup_detail.html b/web/templates/admin/list_backup_detail.html
index 39790652..137d0099 100644
--- a/web/templates/admin/list_backup_detail.html
+++ b/web/templates/admin/list_backup_detail.html
@@ -4,13 +4,6 @@
         <div class="l-sort-toolbar clearfix">
           <table>
             <tr>
-              <td class="l-sort-toolbar__search-box">
-                <form action="/search/" method="get">
-                  <input type="hidden" name="token" value="<?=$_SESSION['token']?>" />
-                  <input type="text" name="q" class="search-input" value="<? echo isset($_POST['q']) ? htmlspecialchars($_POST['q']) : '' ?>" />
-                  <input type="submit" value="" class="l-sort-toolbar__search" onClick="return doSearch('/search/')" />
-                </form>
-              </td>
               <td class="toggle-all">
                 <input id="toggle-all" type="checkbox" name="toggle-all" value="toggle-all" onchange="checkedAll('objects');">
                 <label for="toggle-all" class="check-label toggle-all"><?=__('toggle all')?></label>
@@ -19,13 +12,13 @@
                 <form action="/bulk/restore/" method="post" id="objects">
                 <input type="hidden" name="token" value="<?=$_SESSION['token']?>" />
                 <input type="hidden" name="backup" value="<?=htmlentities($_GET['backup']); ?>">
-                <div class="l-select">
+                <div style="display: none;">
                   <select name="action">
                     <option value=""><?=__('apply to selected')?></option>
-                    <option value="restore"><?php print __('restore') ?></option>
+                    <option selected="selected" value="restore"><?php print __('restore') ?></option>
                   </select>
                 </div>
-                <input type="submit" value="" class="l-sort-toolbar__filter-apply" />
+                <input type="submit" value="<?php print __('restore').' '.__('backup') ?>" style="width: 100px; height:30px; background-color: #a8cb1c; color: white;" />
               </td>
             </tr>
           </table>
@@ -40,7 +33,8 @@
 
     <div class="l-center units">
     <div class="l-unit header">
-      <div class="subtitle"><?=__('Listing')?>  <?=htmlentities($_GET['backup'])?></div>
+      <div class="subtitle" style="color: black;"><?=__('Listing')?>  <?=htmlentities($_GET['backup'])?></div>
+      <div class="subtitle"><?=__('First select what to restore:')?></div>
     </div>
 
       <?

From 1739c8c73163904ea9e1a493128d1f2fa2e00424 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 May 2021 20:17:27 +0200
Subject: [PATCH 1460/2300] Update list_backup_detail.html

---
 web/templates/admin/list_backup_detail.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_backup_detail.html b/web/templates/admin/list_backup_detail.html
index 137d0099..cc1a9f0e 100644
--- a/web/templates/admin/list_backup_detail.html
+++ b/web/templates/admin/list_backup_detail.html
@@ -18,7 +18,7 @@
                     <option selected="selected" value="restore"><?php print __('restore') ?></option>
                   </select>
                 </div>
-                <input type="submit" value="<?php print __('restore').' '.__('backup') ?>" style="width: 100px; height:30px; background-color: #a8cb1c; color: white;" />
+                <input type="submit" value="<?php print __('restore').' '.__('selected') ?>" style="width: 100px; height:30px; background-color: #a8cb1c; color: white;" />
               </td>
             </tr>
           </table>

From 8fe06a215397936b4c7901f8e852bde553affaee Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 May 2021 20:23:23 +0200
Subject: [PATCH 1461/2300] Update sr.php

---
 web/inc/i18n/sr.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/web/inc/i18n/sr.php b/web/inc/i18n/sr.php
index 2b91b293..a83aeb32 100644
--- a/web/inc/i18n/sr.php
+++ b/web/inc/i18n/sr.php
@@ -755,4 +755,7 @@ $LANG['sr'] = array(
     'maximum characters length, including prefix' => 'maksimalna dužina sme biti %s karaktera, uključujući i prefix',
 
     'Email Credentials' => 'Email lozinka i podešavanja',
+    
+    'selected' => 'selektovano',
+    'First select what to restore' => 'Prvo selektujte šta tačno želite da vratite'
 );

From f1da73a7bd77101ce46703b466104f3366a8e727 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 May 2021 20:25:21 +0200
Subject: [PATCH 1462/2300] Update list_backup_detail.html

---
 web/templates/admin/list_backup_detail.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/templates/admin/list_backup_detail.html b/web/templates/admin/list_backup_detail.html
index cc1a9f0e..6c2812cf 100644
--- a/web/templates/admin/list_backup_detail.html
+++ b/web/templates/admin/list_backup_detail.html
@@ -18,7 +18,7 @@
                     <option selected="selected" value="restore"><?php print __('restore') ?></option>
                   </select>
                 </div>
-                <input type="submit" value="<?php print __('restore').' '.__('selected') ?>" style="width: 100px; height:30px; background-color: #a8cb1c; color: white;" />
+                <input type="submit" value="<?php print __('restore selected') ?>" style="width: 100px; height:30px; background-color: #a8cb1c; color: white;" />
               </td>
             </tr>
           </table>
@@ -34,7 +34,7 @@
     <div class="l-center units">
     <div class="l-unit header">
       <div class="subtitle" style="color: black;"><?=__('Listing')?>  <?=htmlentities($_GET['backup'])?></div>
-      <div class="subtitle"><?=__('First select what to restore:')?></div>
+      <div class="subtitle"><?=__('First select what to restore')?>:</div>
     </div>
 
       <?

From 0233834da4a1c11d3c5b70d29d73a6f4d724b937 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 May 2021 20:26:48 +0200
Subject: [PATCH 1463/2300] Update sr.php

---
 web/inc/i18n/sr.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/i18n/sr.php b/web/inc/i18n/sr.php
index a83aeb32..4cb8db27 100644
--- a/web/inc/i18n/sr.php
+++ b/web/inc/i18n/sr.php
@@ -756,6 +756,6 @@ $LANG['sr'] = array(
 
     'Email Credentials' => 'Email lozinka i podešavanja',
     
-    'selected' => 'selektovano',
+    'restore selected' => 'vrati selektovano',
     'First select what to restore' => 'Prvo selektujte šta tačno želite da vratite'
 );

From cf75660818a422dfa5a3a813f51acbc40e0c0585 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 May 2021 20:28:35 +0200
Subject: [PATCH 1464/2300] Update list_backup_detail.html

---
 web/templates/admin/list_backup_detail.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_backup_detail.html b/web/templates/admin/list_backup_detail.html
index 6c2812cf..096f5198 100644
--- a/web/templates/admin/list_backup_detail.html
+++ b/web/templates/admin/list_backup_detail.html
@@ -18,7 +18,7 @@
                     <option selected="selected" value="restore"><?php print __('restore') ?></option>
                   </select>
                 </div>
-                <input type="submit" value="<?php print __('restore selected') ?>" style="width: 100px; height:30px; background-color: #a8cb1c; color: white;" />
+                <input type="submit" value="<?php print __('restore selected') ?>" style="width: 150px; height:30px; background-color: #a8cb1c; color: white;" />
               </td>
             </tr>
           </table>

From e1f32c04706ce7b1f2b8cf3cbf041fc24a2d4b4f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 May 2021 20:46:34 +0200
Subject: [PATCH 1465/2300] Enabling TLS for ProFTPD FTPS

---
 src/deb/vesta/postinst | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 35194389..fe80212f 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -23,6 +23,20 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# Enabling TLS for ProFTPD FTPS
+if [ ! -f "/usr/local/vesta/data/upgrades/enable-tls-in-proftpd" ]; then
+  if [ -f "/etc/proftpd/proftpd.conf" ]; then
+    touch /usr/local/vesta/data/upgrades/enable-tls-in-proftpd
+    check_grep=$(grep -c 'tls' /etc/proftpd/proftpd.conf)
+    if [ "$check_grep" -eq 0 ]; then
+        echo "== Enabling TLS for ProFTPD FTPS"
+        wget -nv https://c.myvestacp.com/debian/10/proftpd/tls.conf -O /etc/proftpd/tls.conf
+        sed -i "s|AuthPAMConfig|Include /etc/proftpd/tls.conf\n\nAuthPAMConfig|g" /etc/proftpd/proftpd.conf
+        systemctl restart proftpd
+    fi
+  fi
+fi
+
 # Updating CloudFlare IP addresses
 if [ ! -f "/usr/local/vesta/data/upgrades/update-cloudflare-ips" ]; then
   if [ -f "/etc/nginx/nginx.conf" ]; then

From 77d1da1359abccb3573132738066a197fe8d5c42 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 May 2021 20:49:02 +0200
Subject: [PATCH 1466/2300] Update Changelog.md

---
 Changelog.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index dc9ff804..82f5bc60 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,8 @@
+Version 0.9.8-26-47 [30-May-2021]
+==================================================
+* Enabling TLS for ProFTPD FTPS
+* More logical "Restore backup" template
+
 Version 0.9.8-26-46 [17-Apr-2021]
 ==================================================
 * [Feature] Updating CloudFlare IP addresses

From a2792f8ebd392f043bca34f3caa8d9cebdd154e9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 May 2021 20:50:29 +0200
Subject: [PATCH 1467/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 8921a4d7..bfab2778 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1632,6 +1632,7 @@ touch /usr/local/vesta/data/upgrades/limit_max_recipients
 touch /usr/local/vesta/data/upgrades/roundcube_smtp_auth
 touch /usr/local/vesta/data/upgrades/apache_status_public_access
 touch /usr/local/vesta/data/upgrades/update-cloudflare-ips
+touch /usr/local/vesta/data/upgrades/enable-tls-in-proftpd
 
 # Secret URL
 secretquery=''

From 2d10c646ff61ca2ebed8d80f279e31dbf2287347 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 May 2021 20:52:11 +0200
Subject: [PATCH 1468/2300] Version 0.9.8-26-47

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 82624a72..5acd4ac4 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-46
+vesta-0.9.8-26-47

From 8301436be6ba6d3768c44bc23f81e0ae5af22d8c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 9 Jun 2021 09:50:12 +0200
Subject: [PATCH 1469/2300] Update README.md

---
 README.md | 102 ++----------------------------------------------------
 1 file changed, 3 insertions(+), 99 deletions(-)

diff --git a/README.md b/README.md
index 7a3e5866..c34d496b 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
-News
+myVesta
 ==================================================
 
-We finally have normal homepage:
-- https://myvestacp.com/
+Visit our homepage:
+- https://www.myvestacp.com/
 
 Forum:
 - https://forum.myvestacp.com/
@@ -12,99 +12,3 @@ Knowledge base:
 
 Changelog:
 - https://github.com/myvesta/vesta/blob/master/Changelog.md
-
-myVesta Control Panel
-==================================================
-
-* myVesta is a fork of [VestaCP](https://vestacp.com/)
-* Focused on security and stability
-* Therefore, only Debian is supported - keeping focus on only one eco-system - not wasting energy on compatibility with other Linux distributions
-* However, it will be always synchronized with official VestaCP commits
-* VestaCP commercial plugins will be only available for purchase on official [vestacp.com](https://vestacp.com/) website - we will NOT take their earnings, since we are not making this fork for monetary reasons. Instead, we are doing this with open source in mind - to enhance security and to build new features, without being interlocked with official VestaCP release cycles, and without affecting or heavily diverting from the VestaCP's planned development milestones
-* With previous in mind, all features that are built for this fork (myVesta), will be offered to official VestaCP, via pull requests
-
-Features of myVesta
-==================================================
-
-+ Support for Debian 10 (previous Debian releases are also supported, but Debian 10 is recommended)
-
-+ [nginx templates](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh) that can prevent denial-of-service on your server
-
-+ [Support for multi-PHP versions](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
-
-+ You can limit the maximum number of sent emails (per hour) [per mail account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L109-L110) and [per hosting account](https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L72-L73), preventing hijacking of email accounts and preventing PHP malware scripts to send spam.
-
-+ You can see [what PHP scripts are sending emails](https://github.com/myvesta/vesta/blob/master/install/debian/10/php/php7.3-dedi.patch#L50), when and to whom
-
-+ You can completely "lock" myVesta so it can be accessed only via **secret URL**, for example https://serverhost:8083/?MY-SECRET-URL
-    + During installation you will be asked to choose a secret URL for your hosting panel
-    + Literally no PHP scripts will be alive on your hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - attackers won't be able to access it without knowing your secret URL - PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless they have the secret URL.
-    + You can see for yourself how this mechanism was built by looking at:
-      + https://github.com/myvesta/vesta/blob/master/src/deb/for-download/php/php.ini#L496
-      + https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php
-    + If you didn't set the secret URL during installation, you can do it anytime. Just execute in shell:
-    + `echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php`
-
-+ We [disabled dangerous PHP functions](https://github.com/myvesta/vesta/blob/master/install/debian/10/php/php7.3-dedi.patch#L9) in php.ini, so even if, for example, your customer's CMS gets compromised, hacker will not be able to execute shell scripts from within PHP.
-
-+ Apache is fully switched to mpm_event mode, while PHP is running in PHP-FPM mode, which is the most stable PHP-stack solution
-    + OPCache is turned on by default
-
-+ Auto-generating LetsEncrypt SSL for server hostname (signed SSL for Vesta 8083 port, for dovecot (IMAP & POP3) and for Exim (SMTP))
-
-+ You can change Vesta port during installation or later using one command line: **v-change-vesta-port [number]**
-
-+ ClamAV is configured to block zip/rar/7z archives that contains executable files (just like GMail)
-
-+ Backup will run with lowest priority (to avoid load on server), and can be configured to run only by night (and to stop on the morning and continue next night)
-
-+ You can compile Vesta binaries by yourself - https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh
-    + You can even create your own APT repository in a minute
-    + We are using latest nginx version for vesta-nginx package
-    + With your own APT infrastructure you can take security of Vesta-installer infrastructure in your own hands. You will have full control of your Vesta code (this way you can rest assured that there's 0% chance that you'll install malicious packages from repositories that may get hacked)
-    + Binaries that you compile are 100% compatible with official VestaCP from vestacp.com, so you can run official VestaCP code with your own binaries (in case you don't want the source code from this fork)
-
-Useful tools
-==================================================
-
-+ [Script that will convert Vesta to myVesta](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/convert-vesta-to-myvesta.sh)
-
-+ [Wordpress installer in one second](https://github.com/myvesta/vesta/blob/master/bin/v-install-wordpress)
-
-+ [Script for importing cPanel backups to Vesta](https://forum.myvestacp.com/viewtopic.php?f=24&t=63)
-
-+ [Cloning script that will copy the whole site from one domain to another (sub)domain](https://github.com/myvesta/vesta/blob/master/bin/v-clone-website)
-
-+ [Script that will migrate your site from http to https, replacing http to https URLs in database](https://github.com/myvesta/vesta/blob/master/bin/v-migrate-site-to-https)
-
-+ [Script that will install multiple PHP versions on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/multi-php-install.sh)
-
-+ [Script that will install nginx templates that can prevent denial-of-service on your server](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh)
-
-+ [Official Vesta Softaculous installer](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/install-softaculous.sh)
-
-
-How to install
-----------------------------
-Download the installation script:
-```bash
-curl -O http://c.myvestacp.com/vst-install-debian.sh
-```
-Then run it:
-```bash
-bash vst-install-debian.sh
-```
-
-About VestaCP
-==================================================
-
-* [Vesta](https://vestacp.com/) is an open source hosting control panel.
-* Vesta has a clean and focused interface without clutter.
-* Vesta has the latest of very innovative technologies.
-
-Special thanks to vestacp.com and Serghey Rodin for open-source VestaCP project
-
-License
-----------------------------
-Vesta is licensed under  [GPL v3 ](https://github.com/serghey-rodin/vesta/blob/master/LICENSE) license
-

From 7f9f1c0253bf590a7d562370858662404aad4167 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 11 Jul 2021 15:00:25 +0200
Subject: [PATCH 1470/2300] update acme-challenge always

---
 bin/v-add-letsencrypt-domain | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index edd2c8d5..b8188d2b 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -214,13 +214,13 @@ for auth in $authz; do
                 # default nginx method
                 conf="$HOMEDIR/$user/conf/web/nginx.$domain.conf_letsencrypt"
                 sconf="$HOMEDIR/$user/conf/web/snginx.$domain.conf_letsencrypt"
-                if [ ! -e "$conf" ]; then
+                # if [ ! -e "$conf" ]; then
                     echo 'location ~ "^/\.well-known/acme-challenge/(.*)$" {' \
                         > $conf
                     echo '    default_type text/plain;' >> $conf
                     echo '    return 200 "$1.'$THUMB'";' >> $conf
                     echo '}' >> $conf
-                fi
+                # fi
                 echo "[$(date)] : in $conf we put: $THUMB" >> /usr/local/vesta/log/letsencrypt.log
                 if [ ! -e "$sconf" ]; then
                     ln -s "$conf" "$sconf"

From d6b6599709ad44b48de87faa92c30db167305406 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 11 Jul 2021 15:39:46 +0200
Subject: [PATCH 1471/2300] Grep carefully for 'END CERTIFICATE'

---
 bin/v-add-letsencrypt-domain | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index b8188d2b..ed6e5e90 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -333,13 +333,13 @@ fi
 
 # Splitting up downloaded pem
 # echo "[$(date)] : - Splitting up downloaded pem" >> /usr/local/vesta/log/letsencrypt.log
-crt_end=$(grep -n END $ssl_dir/$domain.pem |head -n1 |cut -f1 -d:)
+crt_end=$(grep -n 'END CERTIFICATE' $ssl_dir/$domain.pem |head -n1 |cut -f1 -d:)
 # echo "[$(date)] : crt_end=$crt_end" >> /usr/local/vesta/log/letsencrypt.log
 head -n $crt_end $ssl_dir/$domain.pem > $ssl_dir/$domain.crt
 
 pem_lines=$(wc -l $ssl_dir/$domain.pem |cut -f 1 -d ' ')
 # echo "[$(date)] : pem_lines=$pem_lines" >> /usr/local/vesta/log/letsencrypt.log
-ca_end=$(grep -n  "BEGIN" $ssl_dir/$domain.pem |tail -n1 |cut -f 1 -d :)
+ca_end=$(grep -n 'BEGIN CERTIFICATE' $ssl_dir/$domain.pem |tail -n1 |cut -f 1 -d :)
 # echo "[$(date)] : ca_end=$ca_end" >> /usr/local/vesta/log/letsencrypt.log
 ca_end=$(( pem_lines - crt_end + 1 ))
 # echo "[$(date)] : ca_end=$ca_end" >> /usr/local/vesta/log/letsencrypt.log

From 96dd1287642ec7115421d8687dac544d0317cd6c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 11 Jul 2021 15:53:40 +0200
Subject: [PATCH 1472/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 82f5bc60..0605428d 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-48 [11-Jul-2021]
+==================================================
+* Fixed two bugs in LetsEncrypt generating process
+
 Version 0.9.8-26-47 [30-May-2021]
 ==================================================
 * Enabling TLS for ProFTPD FTPS

From 71ac6f2a570d628f014efbb0d6a0f4d7f6e2831f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 11 Jul 2021 15:54:48 +0200
Subject: [PATCH 1473/2300] Version 0.9.8-26-48

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 5acd4ac4..fa6171f7 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-47
+vesta-0.9.8-26-48

From 23ae0227c0680f748a1779f3de2e9b56a19ed2d8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 14:09:16 +0200
Subject: [PATCH 1474/2300] Update control

---
 src/deb/vesta/control | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/control b/src/deb/vesta/control
index 0cb5f67d..534e200a 100644
--- a/src/deb/vesta/control
+++ b/src/deb/vesta/control
@@ -3,8 +3,8 @@ Package: vesta
 Priority: optional
 Version: 0.9.8-26
 Section: admin
-Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
-Homepage: http://myvestacp.com
+Maintainer: myVesta <info@myvestacp.com>
+Homepage: https://www.myvestacp.com
 Architecture: amd64
 Depends: bash, awk, sed
 Description: Vesta

From 1ebe164b15d8320a801b2b70b28ce18ab9023697 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 14:10:40 +0200
Subject: [PATCH 1475/2300] Update control

---
 src/deb/php/control | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/php/control b/src/deb/php/control
index fa32b0d5..d4298780 100644
--- a/src/deb/php/control
+++ b/src/deb/php/control
@@ -3,8 +3,8 @@ Package: vesta-php
 Priority: optional
 Version: 0.9.8-26
 Section: admin
-Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
-Homepage: http://myvestacp.com
+Maintainer: myVesta <info@myvestacp.com>
+Homepage: https://www.myvestacp.com
 Architecture: amd64
 Depends: vesta
 Description: Vesta php-fpm

From 0729152f72d8cf3d69e0c6d783bdbc3c2dad498b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 14:11:55 +0200
Subject: [PATCH 1476/2300] Update control

---
 src/deb/nginx/control | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/nginx/control b/src/deb/nginx/control
index 54cada5d..86ae383a 100644
--- a/src/deb/nginx/control
+++ b/src/deb/nginx/control
@@ -3,8 +3,8 @@ Package: vesta-nginx
 Priority: optional
 Version: 0.9.8-26-44
 Section: admin
-Maintainer: Predrag Damnjanovic <predrag@myvestacp.com>
-Homepage: http://myvestacp.com
+Maintainer: myVesta <info@myvestacp.com>
+Homepage: https://www.myvestacp.com
 Architecture: amd64
 Depends: vesta
 Description: Vesta Nginx

From b69f6221bb6d6347bef56bc7ce041a3f017f7134 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 14:13:07 +0200
Subject: [PATCH 1477/2300] Update copyright

---
 src/deb/php/copyright | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/php/copyright b/src/deb/php/copyright
index af8b3c23..2b3c513e 100644
--- a/src/deb/php/copyright
+++ b/src/deb/php/copyright
@@ -1,6 +1,6 @@
 Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
 Upstream-Name: vesta-php
-Source: http://myvestacp.com
+Source: https://www.myvestacp.com
 
 Files: *
 Copyright: 2019 MyVesta <info@myvestacp.com>

From d605a80d7d7b29b61ea24ca5c2d3769858b939f7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 14:13:53 +0200
Subject: [PATCH 1478/2300] Update copyright

---
 src/deb/nginx/copyright | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/nginx/copyright b/src/deb/nginx/copyright
index 3feceb98..d6604bdf 100644
--- a/src/deb/nginx/copyright
+++ b/src/deb/nginx/copyright
@@ -1,9 +1,9 @@
 Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
 Upstream-Name: vesta-nginx
-Source: http://myvestacp.com
+Source: https://www.myvestacp.com
 
 Files: *
-Copyright: 2021 MyVesta <info@myvestacp.com>
+Copyright: 2021 myVesta <info@myvestacp.com>
 License: GPL-3.0+
 Remarks: MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
 

From 191f1565f6000b944f3fa61310d4c97e7ae2924e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 14:14:33 +0200
Subject: [PATCH 1479/2300] Update copyright

---
 src/deb/php/copyright | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/php/copyright b/src/deb/php/copyright
index 2b3c513e..65ee43e2 100644
--- a/src/deb/php/copyright
+++ b/src/deb/php/copyright
@@ -3,7 +3,7 @@ Upstream-Name: vesta-php
 Source: https://www.myvestacp.com
 
 Files: *
-Copyright: 2019 MyVesta <info@myvestacp.com>
+Copyright: 2021 myVesta <info@myvestacp.com>
 License: GPL-3.0+
 Remarks: MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
 

From 2e7c03b4ccd26478f7138d440ee0aee2032afadd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 14:16:08 +0200
Subject: [PATCH 1480/2300] Update copyright

---
 src/deb/vesta/copyright | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/copyright b/src/deb/vesta/copyright
index 8845a756..8930fb15 100644
--- a/src/deb/vesta/copyright
+++ b/src/deb/vesta/copyright
@@ -1,9 +1,9 @@
 Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
 Upstream-Name: vesta
-Source: http://myvestacp.com
+Source: https://www.myvestacp.com
 
 Files: *
-Copyright: 2019 MyVesta <info@myvestacp.com>
+Copyright: 2021 myVesta <info@myvestacp.com>
 License: GPL-3.0+
 Remarks: MyVesta is a fork from VestaCP, special thanks to vestacp.com and Serghey Rodin
 

From fa8321686fae680ab19787704f51a44b7abb0a28 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 14:55:08 +0200
Subject: [PATCH 1481/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 389781c9..3e9663bd 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -29,7 +29,7 @@ if [ $# -gt 4 ]; then
     add_deb_to_apt_repo=$5
 fi
 
-MAINTAINER_EMAIL='predrag@myvestacp.com'
+MAINTAINER_EMAIL='info@myvestacp.com'
 
 TARGET_DEB_NAME_MAIN='buster'
 TARGET_DEB_VER_MAIN='10'
@@ -248,6 +248,10 @@ EOF
     press_enter "*** please copy above generated key to your clipboard and then paste it after pressing enter now ***"
     vi $PATH_OF_APT_REPO_ROOT/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key
+    cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/10/deb_signing.key
+    cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/9/deb_signing.key
+    cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/8/deb_signing.key
+    cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/7/deb_signing.key
   fi
 
   echo "=== All done"

From de1f566d14e679c31d90ff4c1154019b4e598c08 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 14:58:30 +0200
Subject: [PATCH 1482/2300] Update deb_signing.key

---
 install/debian/10/deb_signing.key | 76 +++++++++++++++----------------
 1 file changed, 38 insertions(+), 38 deletions(-)

diff --git a/install/debian/10/deb_signing.key b/install/debian/10/deb_signing.key
index 9debc008..14faf4f8 100644
--- a/install/debian/10/deb_signing.key
+++ b/install/debian/10/deb_signing.key
@@ -1,41 +1,41 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 
-mQGNBF0pEcYBDADE5M0hqORpLBNuCtGaDzX7b7pRNCpWG0zBqjfXf6GSNCZFmoT8
-ag0DJqhEgt9+MK8StYPvZJNrnhEfT3z8twRfvnFGl6SIHMidInmDOJG8Y6btUPc4
-pylXYgAMnRUzT3eXaHcn/UGNQ1NR3DwUaL8wqGpurMkxqmoeHsvn6sHO5v7PiAW1
-xSFVyrMLDEAQASdif6Zfmjm4WaxJF3p8BxCcmfmMIC+UXiRVn5jrib1J0yC5AQZf
-uPHcnZZIynYphcNV9fOC0VFpxxtdWz3cdtJQNEuM/bV5qEowlULgopQQVn4W7I3/
-6Hy4RSS+B5mSinKF7Na666sKiBbOqWNWHpGi9YEGfD+3bE36Gd/B3FaMKDc/zDn7
-5eWFgxBT89ASHNzKULKpNwOzRMwBDj6nZySFzr2lMNH9SAQ6xL5i2/L49SXu2wsI
-FisvNzSFpflyseiHpda2DbQ3U9Uk36Ixy8OrHFcRHW/an4mPuae+FHjI3+TYJPbM
-DINOKGlDAHpXIEUAEQEAAbQuUHJlZHJhZyBEYW1uamFub3ZpYyA8cHJlZHJhZ0Bo
-b3N0aW5ncGFuZWwuZGV2PokB1AQTAQoAPhYhBKkALHMylGR2fdARrXm+rmsIksKF
-BQJdKRHGAhsDBQkDwmcABQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEHm+rmsI
-ksKF8ywL+gM1e/22lvq+q6mElPZBPtpa6rHgvPlm9pKdp/vdpV/x7bXWOiE/xClK
-F5+ULBbudeWiiJi6e6aUKSYTtEFku6qJLBe64gX4EfjOYjBdYqbmGr0I+s2F/awB
-jBqg/97XB5JnUVis9762VU9CltvRjHjhd/s5HM4lCta0bSjPkRyFASONPDLx0y/L
-1ESXyHgTBOHOotQrnH0l4RQmTEcjN1jyGsHqbt6D5Km5DrteI9uFt2MWjOAOB6Fc
-noiGJCaLGffw7aJ0CwKWySUPaXgTiLYWwJW3KIIh/IgKtLfhteAwImxMxLiQDLk2
-p6jO4h+I6k+n3e+u/Bd7/zK2PbpoEqgw2NzfAFX6qkJKQgtps1oP2IwEi64BbFTd
-uOjJjfYLKuFgwilHe0mdrUusjQy8HSBhezpciTlalDOJtrjF3DHiIvp3WUPXsS7o
-vswoR8SH7yJTH5dP7lrfFEeQ8TBBq+f+d3uAQVBXi8ETyflHnws9LHMR8J3QuadK
-y6OESuMzPrkBjQRdKRHGAQwAyqeIfU2TL36ddAKAmNvDlMwYAcxlsq619KbIuFPK
-h3nW1bXYwhFGjOwSFrIhFPT8cG69S4yvVDwkN1BeCefEA35PJdwy9FLERHFApEbO
-C2WUrbqYovd26W/xdAlHXsphsD0p64ntYkqJzYWGKAQ/6LO0esoesRl5iTSda7WG
-pHX/2LXiSl91gqysWZIaB8LoJaACkoti9N/FFH/Li08ez3Am2mxciX5yGdcba290
-rEvzgxwi00KdhNTE7ZT8FmpiUDxdm5kninRRklk6FAfEaQ1sLffhhZkcaNF+cmSV
-ijU8TCmoTpkAoyOddWri1zZBgeDQh7CGaNbx3n/6EZVKwPajFgDuVA/n9YVKyG9O
-AGpgK5p3pn7yrBCdDEOl+pun/NsEaUm3mrRpQvEZoVCLYkVfdYaXpgTcifVYJnt3
-/8xbYYM6qMXM/ajiUQrAWaYBylzF5uc0WaK3w0feb1KdEV8o0+BgpOxUQtUfM88m
-GMCLb+2S2DQY2ay4tImgIjKVABEBAAGJAbwEGAEKACYWIQSpACxzMpRkdn3QEa15
-vq5rCJLChQUCXSkRxgIbDAUJA8JnAAAKCRB5vq5rCJLChRWJDACNA2AOuB5wuJOY
-pm9fXB5uwtvqbqd7Q3219o5236F7Imw81afxcu2RDZDh6DXHmW3YnICq4ffyYjWW
-1jQrZJo7uemlc+Vkqvq/XFS5T/DbaWwZCYj5uN6BbsfmfoLpa7QYvUu2vsNM6UD6
-DmrWeLIWAv9VS/RHAFgzs5Rre3EjD5NrWVOttOmwqeMJC06Nf9JUqE7o5DDQ6avG
-Hy+7KMYHSJf6dtH7lYNI0tq3/qxkNr7xF5c7FO5J/hv0wOeilExEJEiSrBfVXrhJ
-tOs6B1qE6liD6IoMSPHZDZESzU/PJG+UbzxYpi3rtqcte/qXS7QzOnv77rFK0VmF
-pHGSkDCoUmxbSIGrju8D9MeXuj5ygS7LoqpdxifCfnxa50VJk10+ucyiW4yUjBZv
-7SjBioKXx4cW7TDjPcZ7XrsCKftipZxr8d7BvSRESgRdBI/p8md3sf9e7vw4V4d0
-ME0RikTA0b3qYO0RroUPcs/FD6PcvJ4SiWNwWqIU6DbtFh1ojo0=
-=mMOx
+mQGNBGDsNnsBDADJzQDPd4pTSrF6OTN8BmRGcHYNBIMV3iJqXGEcITizqUtooFaz
+9x2ewHKREHssjFB4FcEduPabKmEgUDX+XQHRq99w8npD4eyzNzhVUv50GCFfk8Ab
+4M479gO0fbu039hvepmKTs+x0wtvjC/3Wyt1IT/+nmfVgWpFWH5t0O2spMxj1Eca
+un5Qy1+NAn+zI3GFx5OVXmKK9vaneDX9ztKSia3NqLGsBDS+hluSJKlyOGYkDptb
+4o8vnx/jhpf921q0vKrQ4ZzzTZaBQk5fmgX8Je0SKdGULTfXGPWFBLCYiFSJVqMP
+emz1yfrpPiWGrD/KJFiDetGC1KPuM9uzjGjpx3V0ZILrmX+U86peSI08cqbdz408
+QKX+fbTp56vITw37wTrVKvR4Y8CA0eQQjM6qDzbJGnRXkM+8+JqfjGCxg2oxcLn7
+NIIqyrMCDAOkwthrXX0qa8UD3zKqxnYmLzLnEJxOYBk+ccjQaH3ddj8NhMx1iEfl
+Lw1tDg+ra7XceZUAEQEAAbQhbXlWZXN0YSB0ZWFtIDxpbmZvQG15dmVzdGFjcC5j
+b20+iQHUBBMBCgA+FiEEJnm7CzymmC3hqXmE3RveHvHBiEcFAmDsNnsCGwMFCQPC
+ZwAFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQ3RveHvHBiEdC/Av/buI0U5BR
+juCRBerCKeB7AJ8Yei2q0DAyFV1+UjGkT1G12jvnOv+GnJWHTCwzJjwxmHfBQKMz
+7EK0gHPV7v34agfhDl/yJAttRBbrwpxC2mu2EFEN7zl90g2/714Rd46Tjtmi1z+h
+k7OXM1TR6AzOglzKoR3H1tbzRiFy7kS7sAJaeWoyxQMN0O5hQz+6NYpkUHt+5xzY
+1TTvS5FJdIL4m4AGtIZsMTeNrnfWulOhpYFJrTm9hRikfuFH0ttY8cuy+hCiCc8J
+fcdKA7HPr5IVTIj7V+TCwnQaV7cSVVfenE4Ia960RlqN0x4gUufBKs6ySCUGxkQS
+8knAQNdN9a2lbmBlpotx7HoDoAuhB3tFhsXwzSBVxya6MxTYbrzf3aEWynufXZqs
+sJ5qqWBYEvVNOTB9E8Bh5eqAVMqrJNugoq/yCqJKGLJ3fnnSYpR7bHfrSxxidymX
+lmqP8uuz809xqEd/bYciKoEwFAdiMPE1Tdd7RL6T/qcLeT9yymNypqI1uQGNBGDs
+NnsBDADQcj+pPa2Qq1n2jZnVlV9ULhXNB3bVpgrRUQyvIEtda0aHbAjvumXQdJlA
+DB3jPPoDglIotOXsyxW8Ni4+dJ+P1zggHUZfFmcbIp1cwC2gRMoz6lWPz/N2YLIr
+BbXah5cIGv8hnIo1uFzihAdEXwYQNzP/giysCKNQBZrfi3NxNQLFEITTeMGH0G44
+4oEeVih3KIgbfEdO6qu3fTlO/tHa6tB2z6q2qDiT0/sqs4lgM38Z2udR1vsCi1e/
+aHIVxcBanTTdGrv27hrlHY5GT/K8mVKD+PVTuQk0lCiI5SlXvDeCQiMkyUSNr+fV
+4d6214WLh6xv7TN7Op1XZVXLZLf2g7DMuaOs4ZL1oVwqwXZXbnEosyFaJdIPJMvm
+mggbO7g52WABAo6U3rY33N+Dy1JbAA8R7wF3MFK6zrt0tyoK9DkpOEjo4GRjPDzG
+Q/6ajOQjRIPYruRTa94PE7IyqPGDA+MvOsTsHGw/W0wDIsacWXhJsRTNDZLiWDaK
+T1VOIE8AEQEAAYkBvAQYAQoAJhYhBCZ5uws8ppgt4al5hN0b3h7xwYhHBQJg7DZ7
+AhsMBQkDwmcAAAoJEN0b3h7xwYhHf+0L/36hcdqZjMawSUjWRw3g2BxcXmyfqhYq
+bVeIQc7hOFSY62BcHYb5dk0ChtGefSSdE3sOtYxsLd3jBcU+32mDV74/iJfW/r3+
+9ZtFTHJ/AiybgjI6WysYNnlCuXHi/FMrByDRrZR7CkpGQ8PYZzsy8WZDaOJd2HqN
+SjkSeMesuwNGB5e76ngyP++OdLn83nN2N4C7dubssN229mBg8F0zrFFroNtRGf/j
+EDh30dkXt8uSsiv1Btz5uNfzLzDaMmPjITuROqCsGJVR4OwWVtYYgDKXaW7INa+E
+N0sl8SGclA5/evlS+BIQMgAfKS138JDgTHc4l+eJuKQTWSyPhEoVqVM1e/C2idnK
+B/j698LFBfvfhQ8UX5eZd9IyKIV/FYX2Hk7zDGaKokDdtWx82lcmSG+hXgYfWgMK
+t362nvwEJVR5Qo8syYdyZKUk6E31qFPCU77RHJhTyUqbEhFOhBUg9o2xoynjYnd1
+lRP4w0e42TCozCmH3fx/Ya0a2jdTm2f79Q==
+=RFAO
 -----END PGP PUBLIC KEY BLOCK-----

From 23a01d2625617f7ab76e09e54f00aec6f576aaca Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 14:59:06 +0200
Subject: [PATCH 1483/2300] Update deb_signing.key

---
 install/debian/9/deb_signing.key | 65 +++++++++++++++++++-------------
 1 file changed, 38 insertions(+), 27 deletions(-)

diff --git a/install/debian/9/deb_signing.key b/install/debian/9/deb_signing.key
index 2ad2db8b..14faf4f8 100644
--- a/install/debian/9/deb_signing.key
+++ b/install/debian/9/deb_signing.key
@@ -1,30 +1,41 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
-Version: GnuPG v1.4.12 (GNU/Linux)
 
-mQENBFJIGbEBCAC8SHOOFo7iDTbnC2GhNZ+uBGCh226Dn1QPoFZNFM/DNakHZ6rD
-G3wzr8++eKz4fJual/VLllE2N9XDPuxbozb3LLkcyY1WzJqtIXbXhFGQ/SuIeT+x
-QY90XU6t2Ckze2c+zUniAWmJ8GSyVmXOoc9JxAQ1u47wvGXLzrjWXc8u8PNRYXuf
-fZplTL+dFu9P0d6lP8FGsV+r9wXvvazpRTz3+H8PKrGCYT55ZQIEdG9Jgamylto2
-oVPFXkwGML+TLw6oeCIBuz2y2vtivphW4MJ3ifQjDj7k3n+DTIxfDFs8lB6VRhhY
-2nMHCrcZC6U2mhmXmr6O4s1fu6irBVx05ejPABEBAAG0IFNlcmdoZXkgUm9kaW4g
-PHNraWRAdmVzdGFjcC5jb20+iQE4BBMBAgAiBQJSSBmxAhsDBgsJCAcDAgYVCAIJ
-CgsEFgIDAQIeAQIXgAAKCRBCxbITCh93FPdqB/93GjV9g+wBfeZYLHQK9MDU2wBb
-VloYOJJae6IvYKYQVAJayD3PbHdpxrF8s9e23vdnmb9jKu6jX6oV54EIyqP2HPiN
-QYc8wcea+eSHerznBixCtoQh8mtdWGFeN71zU/ig7L5qlOVF/EmxDVZTFUeivFxh
-IV6qyBnktQKktE45585yKZyyLtfGoXA54DGK69OtJFh+wdkKEMmUXocMl7wUrxW6
-Cx2CuKeEXEgvwu8mRHQi3S3T9XP456qWEn5dWyMVcP660IzEuZfSJApZusNK7zG3
-WMy0/EuX7xHNY3mcNxTOUN1LsO7iHnhHD9+iKWJo9parGkMZzc92MpjDK/g7uQEN
-BFJIGbEBCAC7k5QEA9WQM7E3ceNaeLMrA9lXfuzaNCcySq7ONdVAa5PxzbSKdHvz
-QFoL1VFqBTYQ038lbil1XqnoM0zvIfAI3LcpS8sq92El/vPxp6jZh2Ari9Uw7x95
-k2cZMgI67g+zQMGdjVRA155nFQRCgg000xU4F7JA6+WsuLlVUmccsDv7YWJExMtC
-YPxiuz5DFu8RALnw4Ckts+dbwsrcvUHhkm9b6RAsdCKjjRpUZjLgdltjH83gUVvt
-i1YmdjjsVpt95dtsaG+ad852g/Rk8EdxNMkjPF6HLA67CLADP9wYaj80yPcPtylS
-ycvPtcclVeHkFBRVM8xZpQd4iD19MWI1ABEBAAGJAR8EGAECAAkFAlJIGbECGwwA
-CgkQQsWyEwofdxQ7tQgAhB0FwTs7L8Qr63DHC2yAnXVxgtTAY1/36CccNXVculyR
-+EkLcwahms9AKhz7eQb+Mud+5vH0GRohLp2npgO38CjVUfIP5d+Y6dsthmrkF6p8
-XdV1dVK9vWX+i/YZSw/Mded30Cq4P2Yhq9EaemMT0rtli8lz2NnkZ9dFJZk1lzJC
-CZmRpbjSNWqRU4f7qyh21lYk/OC/0XE8fh8CaO23TZ+6gBionoCztwb7NyC9OArN
-qYlNnbmh9iNqdblykPS3bkjf34n2xyMgnIehNrM89tk8PY4UfNPhgT1TMD9W3Svq
-ynNZvLuF/FIDwDeC1qcfjGbfDn9fXO/lMIIRooQYKQ==
-=J2HJ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+=RFAO
 -----END PGP PUBLIC KEY BLOCK-----

From ff72f12fe2dcff3361368796b966c16968148866 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 14:59:42 +0200
Subject: [PATCH 1484/2300] Update deb_signing.key

---
 install/debian/8/deb_signing.key | 65 +++++++++++++++++++-------------
 1 file changed, 38 insertions(+), 27 deletions(-)

diff --git a/install/debian/8/deb_signing.key b/install/debian/8/deb_signing.key
index 2ad2db8b..14faf4f8 100644
--- a/install/debian/8/deb_signing.key
+++ b/install/debian/8/deb_signing.key
@@ -1,30 +1,41 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
-Version: GnuPG v1.4.12 (GNU/Linux)
 
-mQENBFJIGbEBCAC8SHOOFo7iDTbnC2GhNZ+uBGCh226Dn1QPoFZNFM/DNakHZ6rD
-G3wzr8++eKz4fJual/VLllE2N9XDPuxbozb3LLkcyY1WzJqtIXbXhFGQ/SuIeT+x
-QY90XU6t2Ckze2c+zUniAWmJ8GSyVmXOoc9JxAQ1u47wvGXLzrjWXc8u8PNRYXuf
-fZplTL+dFu9P0d6lP8FGsV+r9wXvvazpRTz3+H8PKrGCYT55ZQIEdG9Jgamylto2
-oVPFXkwGML+TLw6oeCIBuz2y2vtivphW4MJ3ifQjDj7k3n+DTIxfDFs8lB6VRhhY
-2nMHCrcZC6U2mhmXmr6O4s1fu6irBVx05ejPABEBAAG0IFNlcmdoZXkgUm9kaW4g
-PHNraWRAdmVzdGFjcC5jb20+iQE4BBMBAgAiBQJSSBmxAhsDBgsJCAcDAgYVCAIJ
-CgsEFgIDAQIeAQIXgAAKCRBCxbITCh93FPdqB/93GjV9g+wBfeZYLHQK9MDU2wBb
-VloYOJJae6IvYKYQVAJayD3PbHdpxrF8s9e23vdnmb9jKu6jX6oV54EIyqP2HPiN
-QYc8wcea+eSHerznBixCtoQh8mtdWGFeN71zU/ig7L5qlOVF/EmxDVZTFUeivFxh
-IV6qyBnktQKktE45585yKZyyLtfGoXA54DGK69OtJFh+wdkKEMmUXocMl7wUrxW6
-Cx2CuKeEXEgvwu8mRHQi3S3T9XP456qWEn5dWyMVcP660IzEuZfSJApZusNK7zG3
-WMy0/EuX7xHNY3mcNxTOUN1LsO7iHnhHD9+iKWJo9parGkMZzc92MpjDK/g7uQEN
-BFJIGbEBCAC7k5QEA9WQM7E3ceNaeLMrA9lXfuzaNCcySq7ONdVAa5PxzbSKdHvz
-QFoL1VFqBTYQ038lbil1XqnoM0zvIfAI3LcpS8sq92El/vPxp6jZh2Ari9Uw7x95
-k2cZMgI67g+zQMGdjVRA155nFQRCgg000xU4F7JA6+WsuLlVUmccsDv7YWJExMtC
-YPxiuz5DFu8RALnw4Ckts+dbwsrcvUHhkm9b6RAsdCKjjRpUZjLgdltjH83gUVvt
-i1YmdjjsVpt95dtsaG+ad852g/Rk8EdxNMkjPF6HLA67CLADP9wYaj80yPcPtylS
-ycvPtcclVeHkFBRVM8xZpQd4iD19MWI1ABEBAAGJAR8EGAECAAkFAlJIGbECGwwA
-CgkQQsWyEwofdxQ7tQgAhB0FwTs7L8Qr63DHC2yAnXVxgtTAY1/36CccNXVculyR
-+EkLcwahms9AKhz7eQb+Mud+5vH0GRohLp2npgO38CjVUfIP5d+Y6dsthmrkF6p8
-XdV1dVK9vWX+i/YZSw/Mded30Cq4P2Yhq9EaemMT0rtli8lz2NnkZ9dFJZk1lzJC
-CZmRpbjSNWqRU4f7qyh21lYk/OC/0XE8fh8CaO23TZ+6gBionoCztwb7NyC9OArN
-qYlNnbmh9iNqdblykPS3bkjf34n2xyMgnIehNrM89tk8PY4UfNPhgT1TMD9W3Svq
-ynNZvLuF/FIDwDeC1qcfjGbfDn9fXO/lMIIRooQYKQ==
-=J2HJ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+=RFAO
 -----END PGP PUBLIC KEY BLOCK-----

From 4bb0ad5ffb192d752129c1f49c804a448763c904 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 15:00:13 +0200
Subject: [PATCH 1485/2300] Update deb_signing.key

---
 install/debian/7/deb_signing.key | 65 +++++++++++++++++++-------------
 1 file changed, 38 insertions(+), 27 deletions(-)

diff --git a/install/debian/7/deb_signing.key b/install/debian/7/deb_signing.key
index 2ad2db8b..14faf4f8 100644
--- a/install/debian/7/deb_signing.key
+++ b/install/debian/7/deb_signing.key
@@ -1,30 +1,41 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
-Version: GnuPG v1.4.12 (GNU/Linux)
 
-mQENBFJIGbEBCAC8SHOOFo7iDTbnC2GhNZ+uBGCh226Dn1QPoFZNFM/DNakHZ6rD
-G3wzr8++eKz4fJual/VLllE2N9XDPuxbozb3LLkcyY1WzJqtIXbXhFGQ/SuIeT+x
-QY90XU6t2Ckze2c+zUniAWmJ8GSyVmXOoc9JxAQ1u47wvGXLzrjWXc8u8PNRYXuf
-fZplTL+dFu9P0d6lP8FGsV+r9wXvvazpRTz3+H8PKrGCYT55ZQIEdG9Jgamylto2
-oVPFXkwGML+TLw6oeCIBuz2y2vtivphW4MJ3ifQjDj7k3n+DTIxfDFs8lB6VRhhY
-2nMHCrcZC6U2mhmXmr6O4s1fu6irBVx05ejPABEBAAG0IFNlcmdoZXkgUm9kaW4g
-PHNraWRAdmVzdGFjcC5jb20+iQE4BBMBAgAiBQJSSBmxAhsDBgsJCAcDAgYVCAIJ
-CgsEFgIDAQIeAQIXgAAKCRBCxbITCh93FPdqB/93GjV9g+wBfeZYLHQK9MDU2wBb
-VloYOJJae6IvYKYQVAJayD3PbHdpxrF8s9e23vdnmb9jKu6jX6oV54EIyqP2HPiN
-QYc8wcea+eSHerznBixCtoQh8mtdWGFeN71zU/ig7L5qlOVF/EmxDVZTFUeivFxh
-IV6qyBnktQKktE45585yKZyyLtfGoXA54DGK69OtJFh+wdkKEMmUXocMl7wUrxW6
-Cx2CuKeEXEgvwu8mRHQi3S3T9XP456qWEn5dWyMVcP660IzEuZfSJApZusNK7zG3
-WMy0/EuX7xHNY3mcNxTOUN1LsO7iHnhHD9+iKWJo9parGkMZzc92MpjDK/g7uQEN
-BFJIGbEBCAC7k5QEA9WQM7E3ceNaeLMrA9lXfuzaNCcySq7ONdVAa5PxzbSKdHvz
-QFoL1VFqBTYQ038lbil1XqnoM0zvIfAI3LcpS8sq92El/vPxp6jZh2Ari9Uw7x95
-k2cZMgI67g+zQMGdjVRA155nFQRCgg000xU4F7JA6+WsuLlVUmccsDv7YWJExMtC
-YPxiuz5DFu8RALnw4Ckts+dbwsrcvUHhkm9b6RAsdCKjjRpUZjLgdltjH83gUVvt
-i1YmdjjsVpt95dtsaG+ad852g/Rk8EdxNMkjPF6HLA67CLADP9wYaj80yPcPtylS
-ycvPtcclVeHkFBRVM8xZpQd4iD19MWI1ABEBAAGJAR8EGAECAAkFAlJIGbECGwwA
-CgkQQsWyEwofdxQ7tQgAhB0FwTs7L8Qr63DHC2yAnXVxgtTAY1/36CccNXVculyR
-+EkLcwahms9AKhz7eQb+Mud+5vH0GRohLp2npgO38CjVUfIP5d+Y6dsthmrkF6p8
-XdV1dVK9vWX+i/YZSw/Mded30Cq4P2Yhq9EaemMT0rtli8lz2NnkZ9dFJZk1lzJC
-CZmRpbjSNWqRU4f7qyh21lYk/OC/0XE8fh8CaO23TZ+6gBionoCztwb7NyC9OArN
-qYlNnbmh9iNqdblykPS3bkjf34n2xyMgnIehNrM89tk8PY4UfNPhgT1TMD9W3Svq
-ynNZvLuF/FIDwDeC1qcfjGbfDn9fXO/lMIIRooQYKQ==
-=J2HJ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+=RFAO
 -----END PGP PUBLIC KEY BLOCK-----

From c174cc8dca5940d4436fe634124e3f3995ba84fb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 15:09:46 +0200
Subject: [PATCH 1486/2300] Update deb_signing.key

---
 install/debian/10/deb_signing.key | 76 +++++++++++++++----------------
 1 file changed, 38 insertions(+), 38 deletions(-)

diff --git a/install/debian/10/deb_signing.key b/install/debian/10/deb_signing.key
index 14faf4f8..d279abbd 100644
--- a/install/debian/10/deb_signing.key
+++ b/install/debian/10/deb_signing.key
@@ -1,41 +1,41 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 
-mQGNBGDsNnsBDADJzQDPd4pTSrF6OTN8BmRGcHYNBIMV3iJqXGEcITizqUtooFaz
-9x2ewHKREHssjFB4FcEduPabKmEgUDX+XQHRq99w8npD4eyzNzhVUv50GCFfk8Ab
-4M479gO0fbu039hvepmKTs+x0wtvjC/3Wyt1IT/+nmfVgWpFWH5t0O2spMxj1Eca
-un5Qy1+NAn+zI3GFx5OVXmKK9vaneDX9ztKSia3NqLGsBDS+hluSJKlyOGYkDptb
-4o8vnx/jhpf921q0vKrQ4ZzzTZaBQk5fmgX8Je0SKdGULTfXGPWFBLCYiFSJVqMP
-emz1yfrpPiWGrD/KJFiDetGC1KPuM9uzjGjpx3V0ZILrmX+U86peSI08cqbdz408
-QKX+fbTp56vITw37wTrVKvR4Y8CA0eQQjM6qDzbJGnRXkM+8+JqfjGCxg2oxcLn7
-NIIqyrMCDAOkwthrXX0qa8UD3zKqxnYmLzLnEJxOYBk+ccjQaH3ddj8NhMx1iEfl
-Lw1tDg+ra7XceZUAEQEAAbQhbXlWZXN0YSB0ZWFtIDxpbmZvQG15dmVzdGFjcC5j
-b20+iQHUBBMBCgA+FiEEJnm7CzymmC3hqXmE3RveHvHBiEcFAmDsNnsCGwMFCQPC
-ZwAFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQ3RveHvHBiEdC/Av/buI0U5BR
-juCRBerCKeB7AJ8Yei2q0DAyFV1+UjGkT1G12jvnOv+GnJWHTCwzJjwxmHfBQKMz
-7EK0gHPV7v34agfhDl/yJAttRBbrwpxC2mu2EFEN7zl90g2/714Rd46Tjtmi1z+h
-k7OXM1TR6AzOglzKoR3H1tbzRiFy7kS7sAJaeWoyxQMN0O5hQz+6NYpkUHt+5xzY
-1TTvS5FJdIL4m4AGtIZsMTeNrnfWulOhpYFJrTm9hRikfuFH0ttY8cuy+hCiCc8J
-fcdKA7HPr5IVTIj7V+TCwnQaV7cSVVfenE4Ia960RlqN0x4gUufBKs6ySCUGxkQS
-8knAQNdN9a2lbmBlpotx7HoDoAuhB3tFhsXwzSBVxya6MxTYbrzf3aEWynufXZqs
-sJ5qqWBYEvVNOTB9E8Bh5eqAVMqrJNugoq/yCqJKGLJ3fnnSYpR7bHfrSxxidymX
-lmqP8uuz809xqEd/bYciKoEwFAdiMPE1Tdd7RL6T/qcLeT9yymNypqI1uQGNBGDs
-NnsBDADQcj+pPa2Qq1n2jZnVlV9ULhXNB3bVpgrRUQyvIEtda0aHbAjvumXQdJlA
-DB3jPPoDglIotOXsyxW8Ni4+dJ+P1zggHUZfFmcbIp1cwC2gRMoz6lWPz/N2YLIr
-BbXah5cIGv8hnIo1uFzihAdEXwYQNzP/giysCKNQBZrfi3NxNQLFEITTeMGH0G44
-4oEeVih3KIgbfEdO6qu3fTlO/tHa6tB2z6q2qDiT0/sqs4lgM38Z2udR1vsCi1e/
-aHIVxcBanTTdGrv27hrlHY5GT/K8mVKD+PVTuQk0lCiI5SlXvDeCQiMkyUSNr+fV
-4d6214WLh6xv7TN7Op1XZVXLZLf2g7DMuaOs4ZL1oVwqwXZXbnEosyFaJdIPJMvm
-mggbO7g52WABAo6U3rY33N+Dy1JbAA8R7wF3MFK6zrt0tyoK9DkpOEjo4GRjPDzG
-Q/6ajOQjRIPYruRTa94PE7IyqPGDA+MvOsTsHGw/W0wDIsacWXhJsRTNDZLiWDaK
-T1VOIE8AEQEAAYkBvAQYAQoAJhYhBCZ5uws8ppgt4al5hN0b3h7xwYhHBQJg7DZ7
-AhsMBQkDwmcAAAoJEN0b3h7xwYhHf+0L/36hcdqZjMawSUjWRw3g2BxcXmyfqhYq
-bVeIQc7hOFSY62BcHYb5dk0ChtGefSSdE3sOtYxsLd3jBcU+32mDV74/iJfW/r3+
-9ZtFTHJ/AiybgjI6WysYNnlCuXHi/FMrByDRrZR7CkpGQ8PYZzsy8WZDaOJd2HqN
-SjkSeMesuwNGB5e76ngyP++OdLn83nN2N4C7dubssN229mBg8F0zrFFroNtRGf/j
-EDh30dkXt8uSsiv1Btz5uNfzLzDaMmPjITuROqCsGJVR4OwWVtYYgDKXaW7INa+E
-N0sl8SGclA5/evlS+BIQMgAfKS138JDgTHc4l+eJuKQTWSyPhEoVqVM1e/C2idnK
-B/j698LFBfvfhQ8UX5eZd9IyKIV/FYX2Hk7zDGaKokDdtWx82lcmSG+hXgYfWgMK
-t362nvwEJVR5Qo8syYdyZKUk6E31qFPCU77RHJhTyUqbEhFOhBUg9o2xoynjYnd1
-lRP4w0e42TCozCmH3fx/Ya0a2jdTm2f79Q==
-=RFAO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+=RAbI
 -----END PGP PUBLIC KEY BLOCK-----

From f6eafa7a6f929dfcd4d2f1c5d40aba5d9fe5b437 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 15:10:08 +0200
Subject: [PATCH 1487/2300] Update deb_signing.key

---
 install/debian/9/deb_signing.key | 76 ++++++++++++++++----------------
 1 file changed, 38 insertions(+), 38 deletions(-)

diff --git a/install/debian/9/deb_signing.key b/install/debian/9/deb_signing.key
index 14faf4f8..d279abbd 100644
--- a/install/debian/9/deb_signing.key
+++ b/install/debian/9/deb_signing.key
@@ -1,41 +1,41 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 
-mQGNBGDsNnsBDADJzQDPd4pTSrF6OTN8BmRGcHYNBIMV3iJqXGEcITizqUtooFaz
-9x2ewHKREHssjFB4FcEduPabKmEgUDX+XQHRq99w8npD4eyzNzhVUv50GCFfk8Ab
-4M479gO0fbu039hvepmKTs+x0wtvjC/3Wyt1IT/+nmfVgWpFWH5t0O2spMxj1Eca
-un5Qy1+NAn+zI3GFx5OVXmKK9vaneDX9ztKSia3NqLGsBDS+hluSJKlyOGYkDptb
-4o8vnx/jhpf921q0vKrQ4ZzzTZaBQk5fmgX8Je0SKdGULTfXGPWFBLCYiFSJVqMP
-emz1yfrpPiWGrD/KJFiDetGC1KPuM9uzjGjpx3V0ZILrmX+U86peSI08cqbdz408
-QKX+fbTp56vITw37wTrVKvR4Y8CA0eQQjM6qDzbJGnRXkM+8+JqfjGCxg2oxcLn7
-NIIqyrMCDAOkwthrXX0qa8UD3zKqxnYmLzLnEJxOYBk+ccjQaH3ddj8NhMx1iEfl
-Lw1tDg+ra7XceZUAEQEAAbQhbXlWZXN0YSB0ZWFtIDxpbmZvQG15dmVzdGFjcC5j
-b20+iQHUBBMBCgA+FiEEJnm7CzymmC3hqXmE3RveHvHBiEcFAmDsNnsCGwMFCQPC
-ZwAFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQ3RveHvHBiEdC/Av/buI0U5BR
-juCRBerCKeB7AJ8Yei2q0DAyFV1+UjGkT1G12jvnOv+GnJWHTCwzJjwxmHfBQKMz
-7EK0gHPV7v34agfhDl/yJAttRBbrwpxC2mu2EFEN7zl90g2/714Rd46Tjtmi1z+h
-k7OXM1TR6AzOglzKoR3H1tbzRiFy7kS7sAJaeWoyxQMN0O5hQz+6NYpkUHt+5xzY
-1TTvS5FJdIL4m4AGtIZsMTeNrnfWulOhpYFJrTm9hRikfuFH0ttY8cuy+hCiCc8J
-fcdKA7HPr5IVTIj7V+TCwnQaV7cSVVfenE4Ia960RlqN0x4gUufBKs6ySCUGxkQS
-8knAQNdN9a2lbmBlpotx7HoDoAuhB3tFhsXwzSBVxya6MxTYbrzf3aEWynufXZqs
-sJ5qqWBYEvVNOTB9E8Bh5eqAVMqrJNugoq/yCqJKGLJ3fnnSYpR7bHfrSxxidymX
-lmqP8uuz809xqEd/bYciKoEwFAdiMPE1Tdd7RL6T/qcLeT9yymNypqI1uQGNBGDs
-NnsBDADQcj+pPa2Qq1n2jZnVlV9ULhXNB3bVpgrRUQyvIEtda0aHbAjvumXQdJlA
-DB3jPPoDglIotOXsyxW8Ni4+dJ+P1zggHUZfFmcbIp1cwC2gRMoz6lWPz/N2YLIr
-BbXah5cIGv8hnIo1uFzihAdEXwYQNzP/giysCKNQBZrfi3NxNQLFEITTeMGH0G44
-4oEeVih3KIgbfEdO6qu3fTlO/tHa6tB2z6q2qDiT0/sqs4lgM38Z2udR1vsCi1e/
-aHIVxcBanTTdGrv27hrlHY5GT/K8mVKD+PVTuQk0lCiI5SlXvDeCQiMkyUSNr+fV
-4d6214WLh6xv7TN7Op1XZVXLZLf2g7DMuaOs4ZL1oVwqwXZXbnEosyFaJdIPJMvm
-mggbO7g52WABAo6U3rY33N+Dy1JbAA8R7wF3MFK6zrt0tyoK9DkpOEjo4GRjPDzG
-Q/6ajOQjRIPYruRTa94PE7IyqPGDA+MvOsTsHGw/W0wDIsacWXhJsRTNDZLiWDaK
-T1VOIE8AEQEAAYkBvAQYAQoAJhYhBCZ5uws8ppgt4al5hN0b3h7xwYhHBQJg7DZ7
-AhsMBQkDwmcAAAoJEN0b3h7xwYhHf+0L/36hcdqZjMawSUjWRw3g2BxcXmyfqhYq
-bVeIQc7hOFSY62BcHYb5dk0ChtGefSSdE3sOtYxsLd3jBcU+32mDV74/iJfW/r3+
-9ZtFTHJ/AiybgjI6WysYNnlCuXHi/FMrByDRrZR7CkpGQ8PYZzsy8WZDaOJd2HqN
-SjkSeMesuwNGB5e76ngyP++OdLn83nN2N4C7dubssN229mBg8F0zrFFroNtRGf/j
-EDh30dkXt8uSsiv1Btz5uNfzLzDaMmPjITuROqCsGJVR4OwWVtYYgDKXaW7INa+E
-N0sl8SGclA5/evlS+BIQMgAfKS138JDgTHc4l+eJuKQTWSyPhEoVqVM1e/C2idnK
-B/j698LFBfvfhQ8UX5eZd9IyKIV/FYX2Hk7zDGaKokDdtWx82lcmSG+hXgYfWgMK
-t362nvwEJVR5Qo8syYdyZKUk6E31qFPCU77RHJhTyUqbEhFOhBUg9o2xoynjYnd1
-lRP4w0e42TCozCmH3fx/Ya0a2jdTm2f79Q==
-=RFAO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+=RAbI
 -----END PGP PUBLIC KEY BLOCK-----

From b19ea501836ef7280e3c22cf64e86001e2172a94 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 15:10:31 +0200
Subject: [PATCH 1488/2300] Update deb_signing.key

---
 install/debian/8/deb_signing.key | 76 ++++++++++++++++----------------
 1 file changed, 38 insertions(+), 38 deletions(-)

diff --git a/install/debian/8/deb_signing.key b/install/debian/8/deb_signing.key
index 14faf4f8..d279abbd 100644
--- a/install/debian/8/deb_signing.key
+++ b/install/debian/8/deb_signing.key
@@ -1,41 +1,41 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 
-mQGNBGDsNnsBDADJzQDPd4pTSrF6OTN8BmRGcHYNBIMV3iJqXGEcITizqUtooFaz
-9x2ewHKREHssjFB4FcEduPabKmEgUDX+XQHRq99w8npD4eyzNzhVUv50GCFfk8Ab
-4M479gO0fbu039hvepmKTs+x0wtvjC/3Wyt1IT/+nmfVgWpFWH5t0O2spMxj1Eca
-un5Qy1+NAn+zI3GFx5OVXmKK9vaneDX9ztKSia3NqLGsBDS+hluSJKlyOGYkDptb
-4o8vnx/jhpf921q0vKrQ4ZzzTZaBQk5fmgX8Je0SKdGULTfXGPWFBLCYiFSJVqMP
-emz1yfrpPiWGrD/KJFiDetGC1KPuM9uzjGjpx3V0ZILrmX+U86peSI08cqbdz408
-QKX+fbTp56vITw37wTrVKvR4Y8CA0eQQjM6qDzbJGnRXkM+8+JqfjGCxg2oxcLn7
-NIIqyrMCDAOkwthrXX0qa8UD3zKqxnYmLzLnEJxOYBk+ccjQaH3ddj8NhMx1iEfl
-Lw1tDg+ra7XceZUAEQEAAbQhbXlWZXN0YSB0ZWFtIDxpbmZvQG15dmVzdGFjcC5j
-b20+iQHUBBMBCgA+FiEEJnm7CzymmC3hqXmE3RveHvHBiEcFAmDsNnsCGwMFCQPC
-ZwAFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQ3RveHvHBiEdC/Av/buI0U5BR
-juCRBerCKeB7AJ8Yei2q0DAyFV1+UjGkT1G12jvnOv+GnJWHTCwzJjwxmHfBQKMz
-7EK0gHPV7v34agfhDl/yJAttRBbrwpxC2mu2EFEN7zl90g2/714Rd46Tjtmi1z+h
-k7OXM1TR6AzOglzKoR3H1tbzRiFy7kS7sAJaeWoyxQMN0O5hQz+6NYpkUHt+5xzY
-1TTvS5FJdIL4m4AGtIZsMTeNrnfWulOhpYFJrTm9hRikfuFH0ttY8cuy+hCiCc8J
-fcdKA7HPr5IVTIj7V+TCwnQaV7cSVVfenE4Ia960RlqN0x4gUufBKs6ySCUGxkQS
-8knAQNdN9a2lbmBlpotx7HoDoAuhB3tFhsXwzSBVxya6MxTYbrzf3aEWynufXZqs
-sJ5qqWBYEvVNOTB9E8Bh5eqAVMqrJNugoq/yCqJKGLJ3fnnSYpR7bHfrSxxidymX
-lmqP8uuz809xqEd/bYciKoEwFAdiMPE1Tdd7RL6T/qcLeT9yymNypqI1uQGNBGDs
-NnsBDADQcj+pPa2Qq1n2jZnVlV9ULhXNB3bVpgrRUQyvIEtda0aHbAjvumXQdJlA
-DB3jPPoDglIotOXsyxW8Ni4+dJ+P1zggHUZfFmcbIp1cwC2gRMoz6lWPz/N2YLIr
-BbXah5cIGv8hnIo1uFzihAdEXwYQNzP/giysCKNQBZrfi3NxNQLFEITTeMGH0G44
-4oEeVih3KIgbfEdO6qu3fTlO/tHa6tB2z6q2qDiT0/sqs4lgM38Z2udR1vsCi1e/
-aHIVxcBanTTdGrv27hrlHY5GT/K8mVKD+PVTuQk0lCiI5SlXvDeCQiMkyUSNr+fV
-4d6214WLh6xv7TN7Op1XZVXLZLf2g7DMuaOs4ZL1oVwqwXZXbnEosyFaJdIPJMvm
-mggbO7g52WABAo6U3rY33N+Dy1JbAA8R7wF3MFK6zrt0tyoK9DkpOEjo4GRjPDzG
-Q/6ajOQjRIPYruRTa94PE7IyqPGDA+MvOsTsHGw/W0wDIsacWXhJsRTNDZLiWDaK
-T1VOIE8AEQEAAYkBvAQYAQoAJhYhBCZ5uws8ppgt4al5hN0b3h7xwYhHBQJg7DZ7
-AhsMBQkDwmcAAAoJEN0b3h7xwYhHf+0L/36hcdqZjMawSUjWRw3g2BxcXmyfqhYq
-bVeIQc7hOFSY62BcHYb5dk0ChtGefSSdE3sOtYxsLd3jBcU+32mDV74/iJfW/r3+
-9ZtFTHJ/AiybgjI6WysYNnlCuXHi/FMrByDRrZR7CkpGQ8PYZzsy8WZDaOJd2HqN
-SjkSeMesuwNGB5e76ngyP++OdLn83nN2N4C7dubssN229mBg8F0zrFFroNtRGf/j
-EDh30dkXt8uSsiv1Btz5uNfzLzDaMmPjITuROqCsGJVR4OwWVtYYgDKXaW7INa+E
-N0sl8SGclA5/evlS+BIQMgAfKS138JDgTHc4l+eJuKQTWSyPhEoVqVM1e/C2idnK
-B/j698LFBfvfhQ8UX5eZd9IyKIV/FYX2Hk7zDGaKokDdtWx82lcmSG+hXgYfWgMK
-t362nvwEJVR5Qo8syYdyZKUk6E31qFPCU77RHJhTyUqbEhFOhBUg9o2xoynjYnd1
-lRP4w0e42TCozCmH3fx/Ya0a2jdTm2f79Q==
-=RFAO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+=RAbI
 -----END PGP PUBLIC KEY BLOCK-----

From ac416b15ab6a7a7304ce8a1f96b46abc08e1dbfd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 15:11:02 +0200
Subject: [PATCH 1489/2300] Update deb_signing.key

---
 install/debian/7/deb_signing.key | 76 ++++++++++++++++----------------
 1 file changed, 38 insertions(+), 38 deletions(-)

diff --git a/install/debian/7/deb_signing.key b/install/debian/7/deb_signing.key
index 14faf4f8..d279abbd 100644
--- a/install/debian/7/deb_signing.key
+++ b/install/debian/7/deb_signing.key
@@ -1,41 +1,41 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 
-mQGNBGDsNnsBDADJzQDPd4pTSrF6OTN8BmRGcHYNBIMV3iJqXGEcITizqUtooFaz
-9x2ewHKREHssjFB4FcEduPabKmEgUDX+XQHRq99w8npD4eyzNzhVUv50GCFfk8Ab
-4M479gO0fbu039hvepmKTs+x0wtvjC/3Wyt1IT/+nmfVgWpFWH5t0O2spMxj1Eca
-un5Qy1+NAn+zI3GFx5OVXmKK9vaneDX9ztKSia3NqLGsBDS+hluSJKlyOGYkDptb
-4o8vnx/jhpf921q0vKrQ4ZzzTZaBQk5fmgX8Je0SKdGULTfXGPWFBLCYiFSJVqMP
-emz1yfrpPiWGrD/KJFiDetGC1KPuM9uzjGjpx3V0ZILrmX+U86peSI08cqbdz408
-QKX+fbTp56vITw37wTrVKvR4Y8CA0eQQjM6qDzbJGnRXkM+8+JqfjGCxg2oxcLn7
-NIIqyrMCDAOkwthrXX0qa8UD3zKqxnYmLzLnEJxOYBk+ccjQaH3ddj8NhMx1iEfl
-Lw1tDg+ra7XceZUAEQEAAbQhbXlWZXN0YSB0ZWFtIDxpbmZvQG15dmVzdGFjcC5j
-b20+iQHUBBMBCgA+FiEEJnm7CzymmC3hqXmE3RveHvHBiEcFAmDsNnsCGwMFCQPC
-ZwAFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQ3RveHvHBiEdC/Av/buI0U5BR
-juCRBerCKeB7AJ8Yei2q0DAyFV1+UjGkT1G12jvnOv+GnJWHTCwzJjwxmHfBQKMz
-7EK0gHPV7v34agfhDl/yJAttRBbrwpxC2mu2EFEN7zl90g2/714Rd46Tjtmi1z+h
-k7OXM1TR6AzOglzKoR3H1tbzRiFy7kS7sAJaeWoyxQMN0O5hQz+6NYpkUHt+5xzY
-1TTvS5FJdIL4m4AGtIZsMTeNrnfWulOhpYFJrTm9hRikfuFH0ttY8cuy+hCiCc8J
-fcdKA7HPr5IVTIj7V+TCwnQaV7cSVVfenE4Ia960RlqN0x4gUufBKs6ySCUGxkQS
-8knAQNdN9a2lbmBlpotx7HoDoAuhB3tFhsXwzSBVxya6MxTYbrzf3aEWynufXZqs
-sJ5qqWBYEvVNOTB9E8Bh5eqAVMqrJNugoq/yCqJKGLJ3fnnSYpR7bHfrSxxidymX
-lmqP8uuz809xqEd/bYciKoEwFAdiMPE1Tdd7RL6T/qcLeT9yymNypqI1uQGNBGDs
-NnsBDADQcj+pPa2Qq1n2jZnVlV9ULhXNB3bVpgrRUQyvIEtda0aHbAjvumXQdJlA
-DB3jPPoDglIotOXsyxW8Ni4+dJ+P1zggHUZfFmcbIp1cwC2gRMoz6lWPz/N2YLIr
-BbXah5cIGv8hnIo1uFzihAdEXwYQNzP/giysCKNQBZrfi3NxNQLFEITTeMGH0G44
-4oEeVih3KIgbfEdO6qu3fTlO/tHa6tB2z6q2qDiT0/sqs4lgM38Z2udR1vsCi1e/
-aHIVxcBanTTdGrv27hrlHY5GT/K8mVKD+PVTuQk0lCiI5SlXvDeCQiMkyUSNr+fV
-4d6214WLh6xv7TN7Op1XZVXLZLf2g7DMuaOs4ZL1oVwqwXZXbnEosyFaJdIPJMvm
-mggbO7g52WABAo6U3rY33N+Dy1JbAA8R7wF3MFK6zrt0tyoK9DkpOEjo4GRjPDzG
-Q/6ajOQjRIPYruRTa94PE7IyqPGDA+MvOsTsHGw/W0wDIsacWXhJsRTNDZLiWDaK
-T1VOIE8AEQEAAYkBvAQYAQoAJhYhBCZ5uws8ppgt4al5hN0b3h7xwYhHBQJg7DZ7
-AhsMBQkDwmcAAAoJEN0b3h7xwYhHf+0L/36hcdqZjMawSUjWRw3g2BxcXmyfqhYq
-bVeIQc7hOFSY62BcHYb5dk0ChtGefSSdE3sOtYxsLd3jBcU+32mDV74/iJfW/r3+
-9ZtFTHJ/AiybgjI6WysYNnlCuXHi/FMrByDRrZR7CkpGQ8PYZzsy8WZDaOJd2HqN
-SjkSeMesuwNGB5e76ngyP++OdLn83nN2N4C7dubssN229mBg8F0zrFFroNtRGf/j
-EDh30dkXt8uSsiv1Btz5uNfzLzDaMmPjITuROqCsGJVR4OwWVtYYgDKXaW7INa+E
-N0sl8SGclA5/evlS+BIQMgAfKS138JDgTHc4l+eJuKQTWSyPhEoVqVM1e/C2idnK
-B/j698LFBfvfhQ8UX5eZd9IyKIV/FYX2Hk7zDGaKokDdtWx82lcmSG+hXgYfWgMK
-t362nvwEJVR5Qo8syYdyZKUk6E31qFPCU77RHJhTyUqbEhFOhBUg9o2xoynjYnd1
-lRP4w0e42TCozCmH3fx/Ya0a2jdTm2f79Q==
-=RFAO
+mQGNBGDsPogBDADT7jiPewIuavqJZJMZ18c+kEC8N+/EK15k9zdBvcluxZ7gb5D6
+sKT3fVmLWD49mux+OoFs8DJH1LkpFe2Ax58NVMgDwCNUtcqeR8eB6nEWpZLjzJhZ
+RD5+ZpUaX/emXrr7mxJ1SvT8PgWWerl2ZuPSlpPm4Ls6JO53AvPAsUVgMTHkfHNj
+4/GqKtORkanzBwimC0bcB3BBRLH/kiW/TNi3hQnR5GYIaKWrc8oGpHHqX5BNw72O
+JTSqTj8OZXKG7US6cXgBQuLN68sKd9TIy2HZdTKlqR1yQyc2BiPwVYDrJemM72VT
+kuW0qbsOwji7rG2B6Pg1yggWXpB8Znczzi8AfzoFgXeOTi/hzcaf3YnAxfeL1Ofq
+aOW+ReqsF1wxpgVwNj0DVquPTqzd4uCIGNNGGHhlIR434FyA4YNfxK63YxZS5SAR
+leQGTUtBRdh1SOKPDZMcSlJ3wEfHKbp72qmnLdqUkGl//FZsCDdPFxx3wDCPPS2e
+++g3ImqeaQ553nUAEQEAAbQhbXlWZXN0YSB0ZWFtIDxpbmZvQG15dmVzdGFjcC5j
+b20+iQHOBBMBCgA4FiEEDcdTLoRXCPbKaPuqiIB9SyIhM4wFAmDsPogCGwMFCwkI
+BwIGFQoJCAsCBBYCAwECHgECF4AACgkQiIB9SyIhM4yADAv+M62/6N+uFx9Izbj5
+HxZCzLEgvlQzdQcLJPDwFWYByVRiQRkRJWt5kqwNpndWoDo5zEtyKn3Yulbj6zyy
+UqYhN0ctXyaFjKFIHIqrrz9P9AF2uGr17rTWbnRpjlMSkDSmUGXNEKO7gMtKiTo3
+olWldDELuM0MQddwMGgnqZPb3/Z+om68U1/6NS8A5hAHL+HuwcKGFZpFRJYXSOLY
+lIpHyicifvkRAMkPp025Y3Who3EZMWq3Bpo78djtxfA4CoUn+OH64Hn0llkJ3vU6
+bM+KuC2ZrkHrzcqZbPbYnmEmVD1rkxVoOgzqE76fAY2I6YFY09uhdg0FbZeeMjA+
+DReBwINRFYsk6/maY7Zc82clfc7+vr3xmR+f+KEiUCU4mI72PnlU9LT9RuoCkKbo
+znUZo+Xj6ezM6lCKGnOmqhvQmWR+hdsn1zX1ufxPA5uQyeFfR5VpAjvDOFykPA93
+3Et0ZdrKB2U6jjlGzWhsCkYphF7M0DVIRPOm1xLUJvLx+zB+uQGNBGDsPogBDADG
+rJuQBsLJ6MWAGLydwaIBttwG3GOysSsQ1P09mbeOqiyCaWfEladePorTpKsbOHA/
+USAfjN8Eik81Un1Kik6rYU8ieGERKpCMiBkcNLQH/DnYyCNT5oaGqXtIQ+5GNn71
+mt7sLmf0yL3C320RJa8KSP+rAaey4ttLyl7rM1q8RPmlsRSxVjeiMw01i6cXmA1G
+EJDuRbXdzDuo5utHDBMHgN0T0g8kgoTX9G2uwUTnJm9qzW2Lg3d4xoe2+H5/86Qm
+0lVl5vLSMEPl01NcoTVgQpGO/yR3nJ4ubMkkbzCM0e0MByHqOKJ2LfW77BcvcoXg
+coa7tF+6DZBB4UGyb1VuSZJoVOYN2tnSj2/taPk0yHJf/tLvNm/hVHEvXNXk09hy
+fne0FZmHKwwp0TGSC8tzsHPRSbIOazifIC8pdN4fPTQyfI9tKxi26opCIAHHkcTr
+7VOUvUNyAGVB9TU/nmzpvkv8BLCKSQM1FxUQ0owgFtrtIoMVxkYG5hb6EjAHyUcA
+EQEAAYkBtgQYAQoAIBYhBA3HUy6EVwj2ymj7qoiAfUsiITOMBQJg7D6IAhsMAAoJ
+EIiAfUsiITOMR40MALn5sqKFZ9FMe7982XMamanjPqO3Odi5/9rUXYKbJGjsaSof
+lSC3OtqnRTVGE6KEuYErCKCpAk2ZvEf5eQHi264fC255zuxWihdcEQpiPK1DdlN3
+m9JNp/4Pns38Nn/zG3cFQuDEvDsC75xmxN7pi+ZkokodwA0PgaiMVh5mSos+Mc/G
+fLcEes21xVk2DQ3Vw6p1P/39uujBPZ3J2unWBqv0rCFEpwgXm/d80Y0x31tq0ToZ
+hf1r/GcoB6rC3sSAtUykrTZUaRv57BouvnAP9zfFlFSrYpJZ5L9/IawBH+O9yUu2
+N1jGq9eJ/RwHG1lKUBJd6wCWz1ZKzxnaoH9CfRC/aG9vRQWLSjiHCl2cnNDxElKx
+JOT7RUjxlri4zvxdum49Vr8iEpjUFXzhRYq79SsmqkLuXZYQnccNFAdde8ZcPpKA
+zhfavTutAPNJRyg9hbwxQYUH6N1i5J7ZZsqHB/GIBaSReXroacHjFYcU6uiBt/da
+qiC8NLvRaE3PVkma9Q==
+=RAbI
 -----END PGP PUBLIC KEY BLOCK-----

From efcd74ce9263a8622d32b503d1be35521ee01b34 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jul 2021 15:30:44 +0200
Subject: [PATCH 1490/2300] Update vesta_compile.sh

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 3e9663bd..c21bdc90 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -243,7 +243,7 @@ Pull: $TARGET_DEB_NAME
 EOF
   
   if [ ! -d "/root/.gnupg" ]; then
-    gpg --gen-key
+    gpg --full-gen-key
     gpg --armor --export $MAINTAINER_EMAIL --output $MAINTAINER_EMAIL.gpg.key
     press_enter "*** please copy above generated key to your clipboard and then paste it after pressing enter now ***"
     vi $PATH_OF_APT_REPO_ROOT/deb_signing.key

From 3b114ee25be0065d8d7f8672b6e2d9bc9fb5f765 Mon Sep 17 00:00:00 2001
From: Sofonov Evgeniy <1279489+oldgin@users.noreply.github.com>
Date: Tue, 13 Jul 2021 02:12:12 +0500
Subject: [PATCH 1491/2300] Create default_host.tpl

we determine the default host that requests for an IP or an unassigned domain were sent to this host
---
 .../web/nginx/php-fpm/default_host.tpl        | 77 +++++++++++++++++++
 1 file changed, 77 insertions(+)
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/default_host.tpl

diff --git a/install/debian/10/templates/web/nginx/php-fpm/default_host.tpl b/install/debian/10/templates/web/nginx/php-fpm/default_host.tpl
new file mode 100644
index 00000000..45b8476e
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/default_host.tpl
@@ -0,0 +1,77 @@
+#
+# this file directory: /usr/local/vesta/data/templates/web/nginx/php-fpm/
+#
+server {
+    listen      %ip%:%web_port% default_server;
+    server_name %domain_idn% %alias_idn%;
+	# redirect http > httpS (www cut)
+    return 301 https://%domain_idn%$request_uri;
+    root        %docroot%;
+    index       index.php index.html;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+    # запрещаем всем доступ
+    # access is denied to everyone
+        deny  all;
+    # не засоряем лог отказом в доступе
+    # we do not clog the blog with access denial
+        access_log off;
+        log_not_found off;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+	
+	location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+    
+    gzip on;
+    gzip_static on;
+    gzip_proxied any;
+    gzip_min_length 512;
+    gzip_buffers 16 8k;
+    gzip_comp_level 3;
+    gzip_vary on;
+    gzip_types
+        application/atom+xml
+        application/javascript
+        application/json
+        application/ld+json
+        application/manifest+json
+        application/rss+xml
+        application/vnd.geo+json
+        application/vnd.ms-fontobject
+        application/x-font-ttf
+        application/x-web-app-manifest+json
+        application/xhtml+xml
+        application/xml
+        font/opentype
+        image/bmp
+        image/svg+xml
+        image/x-icon
+        text/cache-manifest
+        text/css
+        text/plain
+        text/vcard
+        text/vnd.rim.location.xloc
+        text/vtt
+        text/x-component
+        text/x-cross-domain-policy;
+}

From 1fae6fda46708704ed23e6b53c41eef367697cd7 Mon Sep 17 00:00:00 2001
From: Sofonov Evgeniy <1279489+oldgin@users.noreply.github.com>
Date: Tue, 13 Jul 2021 02:20:34 +0500
Subject: [PATCH 1492/2300] Create default_host.stpl

this template is for httpS (http2). we determine the default host that requests for an IP or an unassigned domain were sent to this host.
---
 .../web/nginx/php-fpm/default_host.stpl       | 62 +++++++++++++++++++
 1 file changed, 62 insertions(+)
 create mode 100644 install/debian/10/templates/web/nginx/php-fpm/default_host.stpl

diff --git a/install/debian/10/templates/web/nginx/php-fpm/default_host.stpl b/install/debian/10/templates/web/nginx/php-fpm/default_host.stpl
new file mode 100644
index 00000000..005705ce
--- /dev/null
+++ b/install/debian/10/templates/web/nginx/php-fpm/default_host.stpl
@@ -0,0 +1,62 @@
+###
+# this file directory: 
+# /usr/local/vesta/data/templates/web/nginx/php-fpm/default_host.stpl
+#
+# 
+###
+server {
+    listen      %ip%:%web_ssl_port% ssl http2 default_server;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+	
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+	
+	error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+        access_log off;
+        log_not_found off;
+    }
+	
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}

From 3fdf72082ed197d379db344ac9b9821253e3c54f Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Fri, 16 Jul 2021 11:30:57 +0200
Subject: [PATCH 1493/2300] Debian11 configs tree

---
 install/debian/11/apache2/apache2.conf        |  95 ++
 install/debian/11/apache2/status.conf         |   8 +
 install/debian/11/bind/named.conf             |  12 +
 install/debian/11/clamav/clamd.conf           |  61 ++
 install/debian/11/deb_signing.key             |  41 +
 install/debian/11/dovecot/conf.d/10-auth.conf |   4 +
 .../debian/11/dovecot/conf.d/10-logging.conf  |   1 +
 install/debian/11/dovecot/conf.d/10-mail.conf |   4 +
 .../debian/11/dovecot/conf.d/10-master.conf   |  29 +
 install/debian/11/dovecot/conf.d/10-ssl.conf  |   3 +
 .../11/dovecot/conf.d/15-mailboxes.conf       |  30 +
 install/debian/11/dovecot/conf.d/20-imap.conf |  58 ++
 install/debian/11/dovecot/conf.d/20-pop3.conf |  91 ++
 .../dovecot/conf.d/auth-passwdfile.conf.ext   |   9 +
 install/debian/11/dovecot/dovecot.conf        |   4 +
 install/debian/11/exim/deny_senders           |   1 +
 install/debian/11/exim/dnsbl.conf             |   2 +
 install/debian/11/exim/exim4.conf.template    | 412 +++++++++
 install/debian/11/exim/spam-blocks.conf       |   0
 .../debian/11/fail2ban/action.d/vesta.conf    |   9 +
 .../debian/11/fail2ban/filter.d/vesta.conf    |  10 +
 install/debian/11/fail2ban/jail.local         |  39 +
 install/debian/11/firewall/ports.conf         |  17 +
 install/debian/11/firewall/rules.conf         |  11 +
 install/debian/11/logrotate/apache2           |  19 +
 install/debian/11/logrotate/dovecot           |  12 +
 install/debian/11/logrotate/nginx             |  13 +
 install/debian/11/logrotate/vesta             |   7 +
 install/debian/11/mysql/my-large.cnf          |  44 +
 install/debian/11/mysql/my-medium.cnf         |  42 +
 install/debian/11/mysql/my-small.cnf          |  42 +
 install/debian/11/nginx/nginx.conf            | 140 +++
 install/debian/11/nginx/phpmyadmin.inc        |  18 +
 install/debian/11/nginx/phppgadmin.inc        |  11 +
 install/debian/11/nginx/status.conf           |   9 +
 install/debian/11/nginx/webmail.inc           |  15 +
 install/debian/11/packages/default.pkg        |  18 +
 install/debian/11/pga/config.inc.php          | 159 ++++
 install/debian/11/pga/phppgadmin.conf         |  31 +
 install/debian/11/php-fpm/www.conf            |  11 +
 install/debian/11/php/php7.3-dedi.patch       |  78 ++
 install/debian/11/php/php7.3-vps.patch        |  78 ++
 install/debian/11/pma/apache.conf             |  42 +
 install/debian/11/pma/config.inc.php          | 146 +++
 install/debian/11/pma/create_tables.sql       | 385 ++++++++
 install/debian/11/pma/pma.sh                  | 157 ++++
 install/debian/11/postgresql/pg_hba.conf      |  11 +
 install/debian/11/proftpd/proftpd.conf        |  36 +
 install/debian/11/proftpd/tls.conf            |  63 ++
 install/debian/11/roundcube/apache.conf       |  40 +
 install/debian/11/roundcube/config.inc.php    |  33 +
 install/debian/11/roundcube/db.inc.php        |  66 ++
 install/debian/11/roundcube/main.inc.php      | 850 ++++++++++++++++++
 install/debian/11/roundcube/vesta.php         |  73 ++
 install/debian/11/sudo/admin                  |   8 +
 install/debian/11/templates/dns/child-ns.tpl  |  14 +
 install/debian/11/templates/dns/default.tpl   |  18 +
 install/debian/11/templates/dns/gmail.tpl     |  12 +
 install/debian/11/templates/dns/office365.tpl |  22 +
 install/debian/11/templates/dns/yandex.tpl    |  16 +
 .../web/apache2/PHP-FPM-73-public.sh          |  88 ++
 .../web/apache2/PHP-FPM-73-public.stpl        |  44 +
 .../web/apache2/PHP-FPM-73-public.tpl         |  38 +
 .../11/templates/web/apache2/PHP-FPM-73.sh    |  92 ++
 .../11/templates/web/apache2/PHP-FPM-73.stpl  |  44 +
 .../11/templates/web/apache2/PHP-FPM-73.tpl   |  38 +
 .../11/templates/web/awstats/awstats.tpl      | 133 +++
 .../debian/11/templates/web/awstats/index.tpl |  10 +
 .../debian/11/templates/web/awstats/nav.tpl   |  23 +
 .../debian/11/templates/web/nginx/caching.sh  |  19 +
 .../11/templates/web/nginx/caching.stpl       |  43 +
 .../debian/11/templates/web/nginx/caching.tpl |  41 +
 .../web/nginx/force-https-legacy.stpl         |  38 +
 .../web/nginx/force-https-legacy.tpl          |   8 +
 .../web/nginx/force-https-public.stpl         |  38 +
 .../web/nginx/force-https-public.tpl          |   8 +
 .../nginx/force-https-webmail-phpmyadmin.stpl |  62 ++
 .../nginx/force-https-webmail-phpmyadmin.tpl  |   8 +
 .../11/templates/web/nginx/force-https.stpl   |  38 +
 .../11/templates/web/nginx/force-https.tpl    |   8 +
 .../11/templates/web/nginx/hosting-legacy.sh  |  11 +
 .../templates/web/nginx/hosting-legacy.stpl   |  38 +
 .../11/templates/web/nginx/hosting-legacy.tpl |  35 +
 .../templates/web/nginx/hosting-public.stpl   |  38 +
 .../11/templates/web/nginx/hosting-public.tpl |  35 +
 .../web/nginx/hosting-webmail-phpmyadmin.stpl |  62 ++
 .../web/nginx/hosting-webmail-phpmyadmin.tpl  |  59 ++
 .../debian/11/templates/web/nginx/hosting.sh  |  11 +
 .../11/templates/web/nginx/hosting.stpl       |  38 +
 .../debian/11/templates/web/nginx/hosting.tpl |  35 +
 .../web/nginx/php-fpm/cms_made_simple.stpl    |  55 ++
 .../web/nginx/php-fpm/cms_made_simple.tpl     |  52 ++
 .../web/nginx/php-fpm/codeigniter2.stpl       |  60 ++
 .../web/nginx/php-fpm/codeigniter2.tpl        |  57 ++
 .../web/nginx/php-fpm/codeigniter3.stpl       |  55 ++
 .../web/nginx/php-fpm/codeigniter3.tpl        |  52 ++
 .../web/nginx/php-fpm/datalife_engine.stpl    | 126 +++
 .../web/nginx/php-fpm/datalife_engine.tpl     | 123 +++
 .../templates/web/nginx/php-fpm/default.stpl  |  54 ++
 .../templates/web/nginx/php-fpm/default.tpl   |  51 ++
 .../templates/web/nginx/php-fpm/dokuwiki.stpl |  71 ++
 .../templates/web/nginx/php-fpm/dokuwiki.tpl  |  67 ++
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  94 ++
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  91 ++
 .../templates/web/nginx/php-fpm/drupal7.stpl  |  94 ++
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  91 ++
 .../templates/web/nginx/php-fpm/drupal8.stpl  |  94 ++
 .../templates/web/nginx/php-fpm/drupal8.tpl   |  91 ++
 .../templates/web/nginx/php-fpm/joomla.stpl   |  62 ++
 .../11/templates/web/nginx/php-fpm/joomla.tpl |  59 ++
 .../templates/web/nginx/php-fpm/laravel.stpl  |  54 ++
 .../templates/web/nginx/php-fpm/laravel.tpl   |  50 ++
 .../templates/web/nginx/php-fpm/magento.stpl  | 197 ++++
 .../templates/web/nginx/php-fpm/magento.tpl   | 194 ++++
 .../11/templates/web/nginx/php-fpm/modx.stpl  |  68 ++
 .../11/templates/web/nginx/php-fpm/modx.tpl   |  65 ++
 .../templates/web/nginx/php-fpm/moodle.stpl   |  89 ++
 .../11/templates/web/nginx/php-fpm/moodle.tpl |  87 ++
 .../templates/web/nginx/php-fpm/no-php.stpl   |  46 +
 .../11/templates/web/nginx/php-fpm/no-php.tpl |  43 +
 .../11/templates/web/nginx/php-fpm/odoo.stpl  |  69 ++
 .../11/templates/web/nginx/php-fpm/odoo.tpl   |  66 ++
 .../templates/web/nginx/php-fpm/opencart.stpl |  58 ++
 .../templates/web/nginx/php-fpm/opencart.tpl  |  54 ++
 .../templates/web/nginx/php-fpm/owncloud.stpl |  84 ++
 .../templates/web/nginx/php-fpm/owncloud.tpl  |  81 ++
 .../11/templates/web/nginx/php-fpm/piwik.stpl |  72 ++
 .../11/templates/web/nginx/php-fpm/piwik.tpl  |  69 ++
 .../templates/web/nginx/php-fpm/pyrocms.stpl  |  65 ++
 .../templates/web/nginx/php-fpm/pyrocms.tpl   |  62 ++
 .../11/templates/web/nginx/php-fpm/sendy.stpl |  88 ++
 .../11/templates/web/nginx/php-fpm/sendy.tpl  |  86 ++
 .../web/nginx/php-fpm/wordpress.stpl          |  54 ++
 .../templates/web/nginx/php-fpm/wordpress.tpl |  51 ++
 .../web/nginx/php-fpm/wordpress2.stpl         |  66 ++
 .../web/nginx/php-fpm/wordpress2.tpl          |  63 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.stpl |  71 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.tpl  |  67 ++
 .../web/nginx/private-force-https.stpl        |  38 +
 .../web/nginx/private-force-https.tpl         |   8 +
 .../11/templates/web/nginx/private-hosting.sh |  11 +
 .../templates/web/nginx/private-hosting.stpl  |  40 +
 .../templates/web/nginx/private-hosting.tpl   |  37 +
 .../11/templates/web/nginx/proxy_ip.tpl       |   9 +
 .../11/templates/web/php-fpm/default.tpl      |  21 +
 .../11/templates/web/php-fpm/no-php.tpl       |  20 +
 .../11/templates/web/php-fpm/socket.tpl       |  24 +
 .../web/skel/document_errors/403.html         |  29 +
 .../web/skel/document_errors/404.html         |  28 +
 .../web/skel/document_errors/50x.html         |  29 +
 .../templates/web/skel/public_html/index.html |  26 +
 .../templates/web/skel/public_html/robots.txt |   3 +
 .../web/skel/public_shtml/index.html          |  26 +
 .../web/skel/public_shtml/robots.txt          |   3 +
 .../debian/11/templates/web/suspend/.htaccess |   2 +
 .../11/templates/web/suspend/index.html       |  25 +
 .../11/templates/web/webalizer/webalizer.tpl  | 110 +++
 install/debian/11/vsftpd/vsftpd.conf          |  26 +
 158 files changed, 9006 insertions(+)
 create mode 100644 install/debian/11/apache2/apache2.conf
 create mode 100644 install/debian/11/apache2/status.conf
 create mode 100644 install/debian/11/bind/named.conf
 create mode 100644 install/debian/11/clamav/clamd.conf
 create mode 100644 install/debian/11/deb_signing.key
 create mode 100644 install/debian/11/dovecot/conf.d/10-auth.conf
 create mode 100644 install/debian/11/dovecot/conf.d/10-logging.conf
 create mode 100644 install/debian/11/dovecot/conf.d/10-mail.conf
 create mode 100644 install/debian/11/dovecot/conf.d/10-master.conf
 create mode 100644 install/debian/11/dovecot/conf.d/10-ssl.conf
 create mode 100644 install/debian/11/dovecot/conf.d/15-mailboxes.conf
 create mode 100644 install/debian/11/dovecot/conf.d/20-imap.conf
 create mode 100644 install/debian/11/dovecot/conf.d/20-pop3.conf
 create mode 100644 install/debian/11/dovecot/conf.d/auth-passwdfile.conf.ext
 create mode 100644 install/debian/11/dovecot/dovecot.conf
 create mode 100644 install/debian/11/exim/deny_senders
 create mode 100644 install/debian/11/exim/dnsbl.conf
 create mode 100644 install/debian/11/exim/exim4.conf.template
 create mode 100644 install/debian/11/exim/spam-blocks.conf
 create mode 100644 install/debian/11/fail2ban/action.d/vesta.conf
 create mode 100644 install/debian/11/fail2ban/filter.d/vesta.conf
 create mode 100644 install/debian/11/fail2ban/jail.local
 create mode 100644 install/debian/11/firewall/ports.conf
 create mode 100644 install/debian/11/firewall/rules.conf
 create mode 100644 install/debian/11/logrotate/apache2
 create mode 100644 install/debian/11/logrotate/dovecot
 create mode 100644 install/debian/11/logrotate/nginx
 create mode 100644 install/debian/11/logrotate/vesta
 create mode 100644 install/debian/11/mysql/my-large.cnf
 create mode 100644 install/debian/11/mysql/my-medium.cnf
 create mode 100644 install/debian/11/mysql/my-small.cnf
 create mode 100644 install/debian/11/nginx/nginx.conf
 create mode 100644 install/debian/11/nginx/phpmyadmin.inc
 create mode 100644 install/debian/11/nginx/phppgadmin.inc
 create mode 100644 install/debian/11/nginx/status.conf
 create mode 100644 install/debian/11/nginx/webmail.inc
 create mode 100644 install/debian/11/packages/default.pkg
 create mode 100644 install/debian/11/pga/config.inc.php
 create mode 100644 install/debian/11/pga/phppgadmin.conf
 create mode 100644 install/debian/11/php-fpm/www.conf
 create mode 100644 install/debian/11/php/php7.3-dedi.patch
 create mode 100644 install/debian/11/php/php7.3-vps.patch
 create mode 100644 install/debian/11/pma/apache.conf
 create mode 100644 install/debian/11/pma/config.inc.php
 create mode 100644 install/debian/11/pma/create_tables.sql
 create mode 100644 install/debian/11/pma/pma.sh
 create mode 100644 install/debian/11/postgresql/pg_hba.conf
 create mode 100644 install/debian/11/proftpd/proftpd.conf
 create mode 100644 install/debian/11/proftpd/tls.conf
 create mode 100644 install/debian/11/roundcube/apache.conf
 create mode 100644 install/debian/11/roundcube/config.inc.php
 create mode 100644 install/debian/11/roundcube/db.inc.php
 create mode 100644 install/debian/11/roundcube/main.inc.php
 create mode 100644 install/debian/11/roundcube/vesta.php
 create mode 100644 install/debian/11/sudo/admin
 create mode 100755 install/debian/11/templates/dns/child-ns.tpl
 create mode 100755 install/debian/11/templates/dns/default.tpl
 create mode 100755 install/debian/11/templates/dns/gmail.tpl
 create mode 100644 install/debian/11/templates/dns/office365.tpl
 create mode 100644 install/debian/11/templates/dns/yandex.tpl
 create mode 100755 install/debian/11/templates/web/apache2/PHP-FPM-73-public.sh
 create mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-73-public.stpl
 create mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-73-public.tpl
 create mode 100755 install/debian/11/templates/web/apache2/PHP-FPM-73.sh
 create mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-73.stpl
 create mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-73.tpl
 create mode 100755 install/debian/11/templates/web/awstats/awstats.tpl
 create mode 100755 install/debian/11/templates/web/awstats/index.tpl
 create mode 100755 install/debian/11/templates/web/awstats/nav.tpl
 create mode 100755 install/debian/11/templates/web/nginx/caching.sh
 create mode 100644 install/debian/11/templates/web/nginx/caching.stpl
 create mode 100644 install/debian/11/templates/web/nginx/caching.tpl
 create mode 100644 install/debian/11/templates/web/nginx/force-https-legacy.stpl
 create mode 100644 install/debian/11/templates/web/nginx/force-https-legacy.tpl
 create mode 100644 install/debian/11/templates/web/nginx/force-https-public.stpl
 create mode 100644 install/debian/11/templates/web/nginx/force-https-public.tpl
 create mode 100644 install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
 create mode 100644 install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
 create mode 100644 install/debian/11/templates/web/nginx/force-https.stpl
 create mode 100644 install/debian/11/templates/web/nginx/force-https.tpl
 create mode 100755 install/debian/11/templates/web/nginx/hosting-legacy.sh
 create mode 100644 install/debian/11/templates/web/nginx/hosting-legacy.stpl
 create mode 100644 install/debian/11/templates/web/nginx/hosting-legacy.tpl
 create mode 100644 install/debian/11/templates/web/nginx/hosting-public.stpl
 create mode 100644 install/debian/11/templates/web/nginx/hosting-public.tpl
 create mode 100644 install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
 create mode 100644 install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
 create mode 100755 install/debian/11/templates/web/nginx/hosting.sh
 create mode 100644 install/debian/11/templates/web/nginx/hosting.stpl
 create mode 100644 install/debian/11/templates/web/nginx/hosting.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/cms_made_simple.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/cms_made_simple.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/codeigniter2.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/codeigniter2.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/codeigniter3.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/codeigniter3.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/datalife_engine.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/datalife_engine.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/default.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/default.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/dokuwiki.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/dokuwiki.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/drupal6.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/drupal6.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/drupal7.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/drupal7.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/drupal8.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/drupal8.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/joomla.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/joomla.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/laravel.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/laravel.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/magento.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/magento.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/modx.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/modx.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/moodle.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/moodle.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/no-php.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/no-php.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/odoo.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/odoo.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/opencart.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/opencart.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/owncloud.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/owncloud.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/piwik.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/piwik.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/pyrocms.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/pyrocms.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/sendy.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/sendy.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/wordpress.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/wordpress.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/wordpress2.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/wordpress2.tpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
 create mode 100644 install/debian/11/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
 create mode 100644 install/debian/11/templates/web/nginx/private-force-https.stpl
 create mode 100644 install/debian/11/templates/web/nginx/private-force-https.tpl
 create mode 100755 install/debian/11/templates/web/nginx/private-hosting.sh
 create mode 100644 install/debian/11/templates/web/nginx/private-hosting.stpl
 create mode 100644 install/debian/11/templates/web/nginx/private-hosting.tpl
 create mode 100644 install/debian/11/templates/web/nginx/proxy_ip.tpl
 create mode 100644 install/debian/11/templates/web/php-fpm/default.tpl
 create mode 100644 install/debian/11/templates/web/php-fpm/no-php.tpl
 create mode 100644 install/debian/11/templates/web/php-fpm/socket.tpl
 create mode 100755 install/debian/11/templates/web/skel/document_errors/403.html
 create mode 100755 install/debian/11/templates/web/skel/document_errors/404.html
 create mode 100755 install/debian/11/templates/web/skel/document_errors/50x.html
 create mode 100755 install/debian/11/templates/web/skel/public_html/index.html
 create mode 100755 install/debian/11/templates/web/skel/public_html/robots.txt
 create mode 100755 install/debian/11/templates/web/skel/public_shtml/index.html
 create mode 100755 install/debian/11/templates/web/skel/public_shtml/robots.txt
 create mode 100755 install/debian/11/templates/web/suspend/.htaccess
 create mode 100755 install/debian/11/templates/web/suspend/index.html
 create mode 100755 install/debian/11/templates/web/webalizer/webalizer.tpl
 create mode 100644 install/debian/11/vsftpd/vsftpd.conf

diff --git a/install/debian/11/apache2/apache2.conf b/install/debian/11/apache2/apache2.conf
new file mode 100644
index 00000000..2be3e50d
--- /dev/null
+++ b/install/debian/11/apache2/apache2.conf
@@ -0,0 +1,95 @@
+# It is split into several files forming the configuration hierarchy outlined
+# below, all located in the /etc/apache2/ directory:
+#
+#	/etc/apache2/
+#	|-- apache2.conf
+#	|	`--  ports.conf
+#	|-- mods-enabled
+#	|	|-- *.load
+#	|	`-- *.conf
+#	|-- conf.d
+#	|	`-- *
+
+# Global configuration
+PidFile ${APACHE_PID_FILE}
+Timeout 900
+ProxyTimeout 900
+KeepAlive Off
+MaxKeepAliveRequests 100
+KeepAliveTimeout 10
+
+<IfModule mpm_prefork_module>
+    StartServers          8
+    MinSpareServers       5
+    MaxSpareServers      20
+    ServerLimit         256
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_worker_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_event_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+# These need to be set in /etc/apache2/envvars
+User ${APACHE_RUN_USER}
+Group ${APACHE_RUN_GROUP}
+#User www-data
+#Group www-data
+
+AccessFileName .htaccess
+
+<Files ~ "^\.ht">
+    Order allow,deny
+    Deny from all
+    Satisfy all
+</Files>
+
+DefaultType None
+HostnameLookups Off
+
+ErrorLog ${APACHE_LOG_DIR}/error.log
+LogLevel warn
+
+# Include module configuration:
+Include mods-enabled/*.load
+Include mods-enabled/*.conf
+
+# Include list of ports to listen on and which to use for name based vhosts
+Include ports.conf
+
+LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
+LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
+LogFormat "%h %l %u %t \"%r\" %>s %O" common
+LogFormat "%{Referer}i -> %U" referer
+LogFormat "%{User-agent}i" agent
+LogFormat "%b" bytes
+
+Include conf.d/
+
+# Include the virtual host configurations:
+#Include sites-enabled/
+
+ErrorDocument 403 /error/403.html
+ErrorDocument 404 /error/404.html
+ErrorDocument 500 /error/50x.html
+ErrorDocument 501 /error/50x.html
+ErrorDocument 502 /error/50x.html
+ErrorDocument 503 /error/50x.html
+ErrorDocument 506 /error/50x.html
diff --git a/install/debian/11/apache2/status.conf b/install/debian/11/apache2/status.conf
new file mode 100644
index 00000000..0d82a356
--- /dev/null
+++ b/install/debian/11/apache2/status.conf
@@ -0,0 +1,8 @@
+Listen 127.0.0.1:8081
+<Location /server-status>
+    SetHandler server-status
+    Order deny,allow
+    Deny from all
+    Allow from 127.0.0.1
+    # Allow from all
+</Location>
diff --git a/install/debian/11/bind/named.conf b/install/debian/11/bind/named.conf
new file mode 100644
index 00000000..ed6ece88
--- /dev/null
+++ b/install/debian/11/bind/named.conf
@@ -0,0 +1,12 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
+
diff --git a/install/debian/11/clamav/clamd.conf b/install/debian/11/clamav/clamd.conf
new file mode 100644
index 00000000..c636b6d3
--- /dev/null
+++ b/install/debian/11/clamav/clamd.conf
@@ -0,0 +1,61 @@
+#Automatically Generated by clamav-base postinst
+#To reconfigure clamd run #dpkg-reconfigure clamav-base
+#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
+LocalSocket /var/run/clamav/clamd.ctl
+FixStaleSocket true
+LocalSocketGroup clamav
+LocalSocketMode 666
+# TemporaryDirectory is not set to its default /tmp here to make overriding
+# the default with environment variables TMPDIR/TMP/TEMP possible
+User clamav
+# AllowSupplementaryGroups true
+ScanMail true
+ScanArchive true
+ArchiveBlockEncrypted false
+MaxDirectoryRecursion 15
+FollowDirectorySymlinks false
+FollowFileSymlinks false
+ReadTimeout 180
+MaxThreads 12
+MaxConnectionQueueLength 15
+LogSyslog false
+LogFacility LOG_LOCAL6
+LogClean true
+LogVerbose true
+PidFile /var/run/clamav/clamd.pid
+DatabaseDirectory /var/lib/clamav
+SelfCheck 3600
+Foreground false
+Debug false
+ScanPE true
+ScanOLE2 true
+ScanHTML true
+ExitOnOOM false
+LeaveTemporaryFiles false
+AlgorithmicDetection true
+ScanELF true
+IdleTimeout 30
+PhishingSignatures true
+PhishingScanURLs true
+PhishingAlwaysBlockSSLMismatch false
+PhishingAlwaysBlockCloak false
+DetectPUA false
+ScanPartialMessages false
+HeuristicScanPrecedence false
+StructuredDataDetection false
+CommandReadTimeout 5
+SendBufTimeout 200
+MaxQueue 100
+ExtendedDetectionInfo true
+OLE2BlockMacros false
+StreamMaxLength 2M
+MaxFileSize 2M
+LogFile /var/log/clamav/clamav.log
+LogTime true
+LogFileUnlock false
+LogFileMaxSize 0
+Bytecode true
+BytecodeSecurity TrustSigned
+BytecodeTimeout 60000
+OfficialDatabaseOnly false
+CrossFilesystems true
diff --git a/install/debian/11/deb_signing.key b/install/debian/11/deb_signing.key
new file mode 100644
index 00000000..d279abbd
--- /dev/null
+++ b/install/debian/11/deb_signing.key
@@ -0,0 +1,41 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQGNBGDsPogBDADT7jiPewIuavqJZJMZ18c+kEC8N+/EK15k9zdBvcluxZ7gb5D6
+sKT3fVmLWD49mux+OoFs8DJH1LkpFe2Ax58NVMgDwCNUtcqeR8eB6nEWpZLjzJhZ
+RD5+ZpUaX/emXrr7mxJ1SvT8PgWWerl2ZuPSlpPm4Ls6JO53AvPAsUVgMTHkfHNj
+4/GqKtORkanzBwimC0bcB3BBRLH/kiW/TNi3hQnR5GYIaKWrc8oGpHHqX5BNw72O
+JTSqTj8OZXKG7US6cXgBQuLN68sKd9TIy2HZdTKlqR1yQyc2BiPwVYDrJemM72VT
+kuW0qbsOwji7rG2B6Pg1yggWXpB8Znczzi8AfzoFgXeOTi/hzcaf3YnAxfeL1Ofq
+aOW+ReqsF1wxpgVwNj0DVquPTqzd4uCIGNNGGHhlIR434FyA4YNfxK63YxZS5SAR
+leQGTUtBRdh1SOKPDZMcSlJ3wEfHKbp72qmnLdqUkGl//FZsCDdPFxx3wDCPPS2e
+++g3ImqeaQ553nUAEQEAAbQhbXlWZXN0YSB0ZWFtIDxpbmZvQG15dmVzdGFjcC5j
+b20+iQHOBBMBCgA4FiEEDcdTLoRXCPbKaPuqiIB9SyIhM4wFAmDsPogCGwMFCwkI
+BwIGFQoJCAsCBBYCAwECHgECF4AACgkQiIB9SyIhM4yADAv+M62/6N+uFx9Izbj5
+HxZCzLEgvlQzdQcLJPDwFWYByVRiQRkRJWt5kqwNpndWoDo5zEtyKn3Yulbj6zyy
+UqYhN0ctXyaFjKFIHIqrrz9P9AF2uGr17rTWbnRpjlMSkDSmUGXNEKO7gMtKiTo3
+olWldDELuM0MQddwMGgnqZPb3/Z+om68U1/6NS8A5hAHL+HuwcKGFZpFRJYXSOLY
+lIpHyicifvkRAMkPp025Y3Who3EZMWq3Bpo78djtxfA4CoUn+OH64Hn0llkJ3vU6
+bM+KuC2ZrkHrzcqZbPbYnmEmVD1rkxVoOgzqE76fAY2I6YFY09uhdg0FbZeeMjA+
+DReBwINRFYsk6/maY7Zc82clfc7+vr3xmR+f+KEiUCU4mI72PnlU9LT9RuoCkKbo
+znUZo+Xj6ezM6lCKGnOmqhvQmWR+hdsn1zX1ufxPA5uQyeFfR5VpAjvDOFykPA93
+3Et0ZdrKB2U6jjlGzWhsCkYphF7M0DVIRPOm1xLUJvLx+zB+uQGNBGDsPogBDADG
+rJuQBsLJ6MWAGLydwaIBttwG3GOysSsQ1P09mbeOqiyCaWfEladePorTpKsbOHA/
+USAfjN8Eik81Un1Kik6rYU8ieGERKpCMiBkcNLQH/DnYyCNT5oaGqXtIQ+5GNn71
+mt7sLmf0yL3C320RJa8KSP+rAaey4ttLyl7rM1q8RPmlsRSxVjeiMw01i6cXmA1G
+EJDuRbXdzDuo5utHDBMHgN0T0g8kgoTX9G2uwUTnJm9qzW2Lg3d4xoe2+H5/86Qm
+0lVl5vLSMEPl01NcoTVgQpGO/yR3nJ4ubMkkbzCM0e0MByHqOKJ2LfW77BcvcoXg
+coa7tF+6DZBB4UGyb1VuSZJoVOYN2tnSj2/taPk0yHJf/tLvNm/hVHEvXNXk09hy
+fne0FZmHKwwp0TGSC8tzsHPRSbIOazifIC8pdN4fPTQyfI9tKxi26opCIAHHkcTr
+7VOUvUNyAGVB9TU/nmzpvkv8BLCKSQM1FxUQ0owgFtrtIoMVxkYG5hb6EjAHyUcA
+EQEAAYkBtgQYAQoAIBYhBA3HUy6EVwj2ymj7qoiAfUsiITOMBQJg7D6IAhsMAAoJ
+EIiAfUsiITOMR40MALn5sqKFZ9FMe7982XMamanjPqO3Odi5/9rUXYKbJGjsaSof
+lSC3OtqnRTVGE6KEuYErCKCpAk2ZvEf5eQHi264fC255zuxWihdcEQpiPK1DdlN3
+m9JNp/4Pns38Nn/zG3cFQuDEvDsC75xmxN7pi+ZkokodwA0PgaiMVh5mSos+Mc/G
+fLcEes21xVk2DQ3Vw6p1P/39uujBPZ3J2unWBqv0rCFEpwgXm/d80Y0x31tq0ToZ
+hf1r/GcoB6rC3sSAtUykrTZUaRv57BouvnAP9zfFlFSrYpJZ5L9/IawBH+O9yUu2
+N1jGq9eJ/RwHG1lKUBJd6wCWz1ZKzxnaoH9CfRC/aG9vRQWLSjiHCl2cnNDxElKx
+JOT7RUjxlri4zvxdum49Vr8iEpjUFXzhRYq79SsmqkLuXZYQnccNFAdde8ZcPpKA
+zhfavTutAPNJRyg9hbwxQYUH6N1i5J7ZZsqHB/GIBaSReXroacHjFYcU6uiBt/da
+qiC8NLvRaE3PVkma9Q==
+=RAbI
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/install/debian/11/dovecot/conf.d/10-auth.conf b/install/debian/11/dovecot/conf.d/10-auth.conf
new file mode 100644
index 00000000..dfcc8311
--- /dev/null
+++ b/install/debian/11/dovecot/conf.d/10-auth.conf
@@ -0,0 +1,4 @@
+disable_plaintext_auth = no
+auth_verbose = yes
+auth_mechanisms = plain login
+!include auth-passwdfile.conf.ext
diff --git a/install/debian/11/dovecot/conf.d/10-logging.conf b/install/debian/11/dovecot/conf.d/10-logging.conf
new file mode 100644
index 00000000..a5f207d5
--- /dev/null
+++ b/install/debian/11/dovecot/conf.d/10-logging.conf
@@ -0,0 +1 @@
+log_path = /var/log/dovecot.log
diff --git a/install/debian/11/dovecot/conf.d/10-mail.conf b/install/debian/11/dovecot/conf.d/10-mail.conf
new file mode 100644
index 00000000..55313419
--- /dev/null
+++ b/install/debian/11/dovecot/conf.d/10-mail.conf
@@ -0,0 +1,4 @@
+mail_privileged_group = mail
+mail_access_groups = mail
+mail_location = maildir:%h/mail/%d/%n
+pop3_uidl_format = %08Xu%08Xv
diff --git a/install/debian/11/dovecot/conf.d/10-master.conf b/install/debian/11/dovecot/conf.d/10-master.conf
new file mode 100644
index 00000000..a75a9aaa
--- /dev/null
+++ b/install/debian/11/dovecot/conf.d/10-master.conf
@@ -0,0 +1,29 @@
+service imap-login {
+  inet_listener imap {
+  }
+  inet_listener imaps {
+  }
+}
+
+service pop3-login {
+  inet_listener pop3 {
+  }
+  inet_listener pop3s {
+  }
+}
+
+
+service imap {
+}
+
+service pop3 {
+}
+
+service auth {
+  unix_listener auth-client {
+    group = mail
+    mode = 0660
+    user = dovecot
+  }
+  user = dovecot
+}
diff --git a/install/debian/11/dovecot/conf.d/10-ssl.conf b/install/debian/11/dovecot/conf.d/10-ssl.conf
new file mode 100644
index 00000000..3aaff6ee
--- /dev/null
+++ b/install/debian/11/dovecot/conf.d/10-ssl.conf
@@ -0,0 +1,3 @@
+ssl = yes
+ssl_cert = </usr/local/vesta/ssl/certificate.crt
+ssl_key = </usr/local/vesta/ssl/certificate.key
diff --git a/install/debian/11/dovecot/conf.d/15-mailboxes.conf b/install/debian/11/dovecot/conf.d/15-mailboxes.conf
new file mode 100644
index 00000000..9014bdab
--- /dev/null
+++ b/install/debian/11/dovecot/conf.d/15-mailboxes.conf
@@ -0,0 +1,30 @@
+## Mailbox definitions
+##
+
+
+# NOTE: Assumes "namespace inbox" has been defined in 10-mail.conf.
+namespace inbox {
+  inbox = yes
+  mailbox Drafts {
+    special_use = \Drafts
+    auto = subscribe
+  }
+
+  mailbox Junk {
+    special_use = \Junk
+    auto = subscribe
+  }
+
+  mailbox Trash {
+    special_use = \Trash
+    auto = subscribe
+  }
+
+  mailbox Sent {
+    special_use = \Sent
+    auto = subscribe
+  }
+  mailbox "Sent Messages" {
+    special_use = \Sent
+  }
+}
diff --git a/install/debian/11/dovecot/conf.d/20-imap.conf b/install/debian/11/dovecot/conf.d/20-imap.conf
new file mode 100644
index 00000000..4f6e058b
--- /dev/null
+++ b/install/debian/11/dovecot/conf.d/20-imap.conf
@@ -0,0 +1,58 @@
+##
+## IMAP specific settings
+##
+
+protocol imap {
+  # Maximum IMAP command line length. Some clients generate very long command
+  # lines with huge mailboxes, so you may need to raise this if you get
+  # "Too long argument" or "IMAP command line too large" errors often.
+  #imap_max_line_length = 64k
+
+  # Maximum number of IMAP connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  mail_max_userip_connections = 50
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # IMAP logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #imap_logout_format = bytes=%i/%o
+
+  # Override the IMAP CAPABILITY response. If the value begins with '+',
+  # add the given capabilities on top of the defaults (e.g. +XFOO XBAR).
+  #imap_capability = 
+
+  # How long to wait between "OK Still here" notifications when client is
+  # IDLEing.
+  #imap_idle_notify_interval = 2 mins
+
+  # ID field names and values to send to clients. Using * as the value makes
+  # Dovecot use the default value. The following fields have default values
+  # currently: name, version, os, os-version, support-url, support-email.
+  #imap_id_send = 
+
+  # ID fields sent by client to log. * means everything.
+  #imap_id_log =
+
+  # Workarounds for various client bugs:
+  #   delay-newmail:
+  #     Send EXISTS/RECENT new mail notifications only when replying to NOOP
+  #     and CHECK commands. Some clients ignore them otherwise, for example OSX
+  #     Mail (<v2.1). Outlook Express breaks more badly though, without this it
+  #     may show user "Message no longer in server" errors. Note that OE6 still
+  #     breaks even with this workaround if synchronization is set to
+  #     "Headers Only".
+  #   tb-extra-mailbox-sep:
+  #     Thunderbird gets somehow confused with LAYOUT=fs (mbox and dbox) and
+  #     adds extra '/' suffixes to mailbox names. This option causes Dovecot to
+  #     ignore the extra '/' instead of treating it as invalid mailbox name.
+  #   tb-lsub-flags:
+  #     Show \Noselect flags for LSUB replies with LAYOUT=fs (e.g. mbox).
+  #     This makes Thunderbird realize they aren't selectable and show them
+  #     greyed out, instead of only later giving "not selectable" popup error.
+  #
+  # The list is space-separated.
+  #imap_client_workarounds = 
+}
diff --git a/install/debian/11/dovecot/conf.d/20-pop3.conf b/install/debian/11/dovecot/conf.d/20-pop3.conf
new file mode 100644
index 00000000..8c376996
--- /dev/null
+++ b/install/debian/11/dovecot/conf.d/20-pop3.conf
@@ -0,0 +1,91 @@
+##
+## POP3 specific settings
+##
+
+protocol pop3 {
+  # Don't try to set mails non-recent or seen with POP3 sessions. This is
+  # mostly intended to reduce disk I/O. With maildir it doesn't move files
+  # from new/ to cur/, with mbox it doesn't write Status-header.
+  #pop3_no_flag_updates = no
+
+  # Support LAST command which exists in old POP3 specs, but has been removed
+  # from new ones. Some clients still wish to use this though. Enabling this
+  # makes RSET command clear all \Seen flags from messages.
+  #pop3_enable_last = no
+
+  # If mail has X-UIDL header, use it as the mail's UIDL.
+  #pop3_reuse_xuidl = no
+
+  # Keep the mailbox locked for the entire POP3 session.
+  #pop3_lock_session = no
+
+  # POP3 requires message sizes to be listed as if they had CR+LF linefeeds.
+  # Many POP3 servers violate this by returning the sizes with LF linefeeds,
+  # because it's faster to get. When this setting is enabled, Dovecot still
+  # tries to do the right thing first, but if that requires opening the
+  # message, it fallbacks to the easier (but incorrect) size.
+  #pop3_fast_size_lookups = no
+
+  # POP3 UIDL (unique mail identifier) format to use. You can use following
+  # variables, along with the variable modifiers described in
+  # doc/wiki/Variables.txt (e.g. %Uf for the filename in uppercase)
+  #
+  #  %v - Mailbox's IMAP UIDVALIDITY
+  #  %u - Mail's IMAP UID
+  #  %m - MD5 sum of the mailbox headers in hex (mbox only)
+  #  %f - filename (maildir only)
+  #  %g - Mail's GUID
+  #
+  # If you want UIDL compatibility with other POP3 servers, use:
+  #  UW's ipop3d         : %08Xv%08Xu
+  #  Courier             : %f or %v-%u (both might be used simultaneosly)
+  #  Cyrus (<= 2.1.3)    : %u
+  #  Cyrus (>= 2.1.4)    : %v.%u
+  #  Dovecot v0.99.x     : %v.%u
+  #  tpop3d              : %Mf
+  #
+  # Note that Outlook 2003 seems to have problems with %v.%u format which was
+  # Dovecot's default, so if you're building a new server it would be a good
+  # idea to change this. %08Xu%08Xv should be pretty fail-safe.
+  #
+  #pop3_uidl_format = %08Xu%08Xv
+
+  # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes
+  # won't change those UIDLs. Currently this works only with Maildir.
+  #pop3_save_uidl = no
+
+  # What to do about duplicate UIDLs if they exist?
+  #   allow: Show duplicates to clients.
+  #   rename: Append a temporary -2, -3, etc. counter after the UIDL.
+  #pop3_uidl_duplicates = allow
+
+  # POP3 logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #  %t - number of TOP commands
+  #  %p - number of bytes sent to client as a result of TOP command
+  #  %r - number of RETR commands
+  #  %b - number of bytes sent to client as a result of RETR command
+  #  %d - number of deleted messages
+  #  %m - number of messages (before deletion)
+  #  %s - mailbox size in bytes (before deletion)
+  #  %u - old/new UIDL hash. may help finding out if UIDLs changed unexpectedly
+  #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
+
+  # Maximum number of POP3 connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  mail_max_userip_connections = 50
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # Workarounds for various client bugs:
+  #   outlook-no-nuls:
+  #     Outlook and Outlook Express hang if mails contain NUL characters.
+  #     This setting replaces them with 0x80 character.
+  #   oe-ns-eoh:
+  #     Outlook Express and Netscape Mail breaks if end of headers-line is
+  #     missing. This option simply sends it if it's missing.
+  # The list is space-separated.
+  #pop3_client_workarounds = 
+}
diff --git a/install/debian/11/dovecot/conf.d/auth-passwdfile.conf.ext b/install/debian/11/dovecot/conf.d/auth-passwdfile.conf.ext
new file mode 100644
index 00000000..75e6e115
--- /dev/null
+++ b/install/debian/11/dovecot/conf.d/auth-passwdfile.conf.ext
@@ -0,0 +1,9 @@
+passdb {
+  driver = passwd-file
+  args = scheme=MD5-CRYPT username_format=%n /etc/exim4/domains/%d/passwd
+}
+
+userdb {
+  driver = passwd-file
+  args = username_format=%n /etc/exim4/domains/%d/passwd
+}
diff --git a/install/debian/11/dovecot/dovecot.conf b/install/debian/11/dovecot/dovecot.conf
new file mode 100644
index 00000000..0a855351
--- /dev/null
+++ b/install/debian/11/dovecot/dovecot.conf
@@ -0,0 +1,4 @@
+protocols = imap pop3
+listen = *, ::
+base_dir = /var/run/dovecot/
+!include conf.d/*.conf
diff --git a/install/debian/11/exim/deny_senders b/install/debian/11/exim/deny_senders
new file mode 100644
index 00000000..8b137891
--- /dev/null
+++ b/install/debian/11/exim/deny_senders
@@ -0,0 +1 @@
+
diff --git a/install/debian/11/exim/dnsbl.conf b/install/debian/11/exim/dnsbl.conf
new file mode 100644
index 00000000..5166b255
--- /dev/null
+++ b/install/debian/11/exim/dnsbl.conf
@@ -0,0 +1,2 @@
+bl.spamcop.net
+zen.spamhaus.org
diff --git a/install/debian/11/exim/exim4.conf.template b/install/debian/11/exim/exim4.conf.template
new file mode 100644
index 00000000..7cc13c36
--- /dev/null
+++ b/install/debian/11/exim/exim4.conf.template
@@ -0,0 +1,412 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+disable_ipv6=true
+add_environment=<; PATH=/bin:/usr/bin
+keep_environment=
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+recipients_max = 15
+recipients_max_reject = true
+
+# log_selector = +smtp_connection
+smtp_accept_max = 50
+smtp_accept_max_per_host = 4
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/certificate.crt
+tls_privatekey = /usr/local/vesta/ssl/certificate.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 0s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lc:${domain:$h_from:}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+
+acl_not_smtp = acl_not_smtp
+
+begin acl
+
+acl_not_smtp:
+  deny message = Web site is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period
+  ratelimit = 40 / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period
+
+  accept
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period
+  ratelimit = 40 / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth requried
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+
+  deny senders = /etc/exim4/deny_senders
+
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = */defer_ok
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{100K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = nobody:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh|\.jar)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/$domain/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #helo_data = $sender_address_domain
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+  hosts_try_chunking = !93.188.3.0/24
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
+  from = "${local_part}@${domain}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################
diff --git a/install/debian/11/exim/spam-blocks.conf b/install/debian/11/exim/spam-blocks.conf
new file mode 100644
index 00000000..e69de29b
diff --git a/install/debian/11/fail2ban/action.d/vesta.conf b/install/debian/11/fail2ban/action.d/vesta.conf
new file mode 100644
index 00000000..0edfc349
--- /dev/null
+++ b/install/debian/11/fail2ban/action.d/vesta.conf
@@ -0,0 +1,9 @@
+# Fail2Ban configuration file for vesta
+
+[Definition]
+
+actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
+actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
+actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
+actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
+actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>
diff --git a/install/debian/11/fail2ban/filter.d/vesta.conf b/install/debian/11/fail2ban/filter.d/vesta.conf
new file mode 100644
index 00000000..36ec1001
--- /dev/null
+++ b/install/debian/11/fail2ban/filter.d/vesta.conf
@@ -0,0 +1,10 @@
+# Fail2Ban filter for unsuccessful Vesta authentication attempts
+#
+
+[INCLUDES]
+before = common.conf
+
+[Definition]
+failregex =  .* <HOST> failed to login
+ignoreregex =
+
diff --git a/install/debian/11/fail2ban/jail.local b/install/debian/11/fail2ban/jail.local
new file mode 100644
index 00000000..eccea068
--- /dev/null
+++ b/install/debian/11/fail2ban/jail.local
@@ -0,0 +1,39 @@
+[ssh-iptables]
+enabled  = true
+filter   = sshd
+action   = vesta[name=SSH]
+logpath  = /var/log/auth.log
+maxretry = 5
+
+[vsftpd-iptables]
+enabled  = false
+filter   = vsftpd
+action   = vesta[name=FTP]
+logpath  = /var/log/vsftpd.log
+maxretry = 5
+
+[exim-iptables]
+enabled = true
+filter  = exim
+action  = vesta[name=MAIL]
+logpath = /var/log/exim4/mainlog
+
+[dovecot-iptables]
+enabled = true
+filter  = dovecot
+action  = vesta[name=MAIL]
+logpath = /var/log/dovecot.log
+
+[mysqld-iptables]
+enabled  = false
+filter   = mysqld-auth
+action   = vesta[name=DB]
+logpath  = /var/log/mysql.log
+maxretry = 5
+
+[vesta-iptables]
+enabled = true
+filter  = vesta
+action  = vesta[name=VESTA]
+logpath = /var/log/vesta/auth.log
+maxretry = 5
diff --git a/install/debian/11/firewall/ports.conf b/install/debian/11/firewall/ports.conf
new file mode 100644
index 00000000..b730d012
--- /dev/null
+++ b/install/debian/11/firewall/ports.conf
@@ -0,0 +1,17 @@
+PROTOCOL='TCP' PORT='20'
+PROTOCOL='TCP' PORT='21'
+PROTOCOL='TCP' PORT='22'
+PROTOCOL='TCP' PORT='25'
+PROTOCOL='TCP' PORT='53'
+PROTOCOL='UDP' PORT='53'
+PROTOCOL='TCP' PORT='80'
+PROTOCOL='TCP' PORT='443'
+PROTOCOL='TCP' PORT='110'
+PROTOCOL='UDP' PORT='123'
+PROTOCOL='TCP' PORT='143'
+PROTOCOL='TCP' PORT='3306'
+PROTOCOL='TCP' PORT='5432'
+PROTOCOL='TCP' PORT='8080'
+PROTOCOL='TCP' PORT='8433'
+PROTOCOL='TCP' PORT='8083'
+PROTOCOL='TCP' PORT='12000:12100'
diff --git a/install/debian/11/firewall/rules.conf b/install/debian/11/firewall/rules.conf
new file mode 100644
index 00000000..6da5a1c4
--- /dev/null
+++ b/install/debian/11/firewall/rules.conf
@@ -0,0 +1,11 @@
+RULE='1' ACTION='ACCEPT' PROTOCOL='ICMP' PORT='0' IP='0.0.0.0/0' COMMENT='PING' SUSPENDED='no' TIME='17:13:48' DATE='2014-09-16'
+RULE='2' ACTION='ACCEPT' PROTOCOL='TCP' PORT='8083' IP='0.0.0.0/0' COMMENT='VESTA' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='3' ACTION='ACCEPT' PROTOCOL='TCP' PORT='3306,5432' IP='0.0.0.0/0' COMMENT='DB' SUSPENDED='yes' TIME='07:40:16' DATE='2014-05-25'
+RULE='4' ACTION='ACCEPT' PROTOCOL='TCP' PORT='143,993' IP='0.0.0.0/0' COMMENT='IMAP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='5' ACTION='ACCEPT' PROTOCOL='TCP' PORT='110,995' IP='0.0.0.0/0' COMMENT='POP3' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='6' ACTION='ACCEPT' PROTOCOL='TCP' PORT='25,465,587,2525' IP='0.0.0.0/0' COMMENT='SMTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='7' ACTION='ACCEPT' PROTOCOL='TCP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='8' ACTION='ACCEPT' PROTOCOL='UDP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='9' ACTION='ACCEPT' PROTOCOL='TCP' PORT='21,12000-12100' IP='0.0.0.0/0' COMMENT='FTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='10' ACTION='ACCEPT' PROTOCOL='TCP' PORT='80,443' IP='0.0.0.0/0' COMMENT='WEB' SUSPENDED='no' TIME='17:04:27' DATE='2014-09-24'
+RULE='11' ACTION='ACCEPT' PROTOCOL='TCP' PORT='22' IP='0.0.0.0/0' COMMENT='SSH' SUSPENDED='no' TIME='17:14:41' DATE='2014-09-16'
diff --git a/install/debian/11/logrotate/apache2 b/install/debian/11/logrotate/apache2
new file mode 100644
index 00000000..27629d0d
--- /dev/null
+++ b/install/debian/11/logrotate/apache2
@@ -0,0 +1,19 @@
+/var/log/apache2/*.log /var/log/apache2/domains/*log {
+        weekly
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 root adm
+        sharedscripts
+        postrotate
+                /etc/init.d/apache2 reload > /dev/null || true
+                [ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+        prerotate
+                if [ -d /etc/logrotate.d/httpd-prerotate ]; then \
+                        run-parts /etc/logrotate.d/httpd-prerotate; \
+                fi; \
+        endscript
+}
diff --git a/install/debian/11/logrotate/dovecot b/install/debian/11/logrotate/dovecot
new file mode 100644
index 00000000..ac4fd6e9
--- /dev/null
+++ b/install/debian/11/logrotate/dovecot
@@ -0,0 +1,12 @@
+/var/log/dovecot*.log {
+  weekly
+  rotate 4
+  missingok
+  notifempty
+  compress
+  delaycompress
+  sharedscripts
+  postrotate
+    doveadm log reopen
+  endscript
+}
diff --git a/install/debian/11/logrotate/nginx b/install/debian/11/logrotate/nginx
new file mode 100644
index 00000000..d667f213
--- /dev/null
+++ b/install/debian/11/logrotate/nginx
@@ -0,0 +1,13 @@
+/var/log/nginx/*log /var/log/nginx/domains/*log {
+        daily
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 nginx adm
+        sharedscripts
+        postrotate
+                [ -f /var/run/nginx.pid ] && kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+}
diff --git a/install/debian/11/logrotate/vesta b/install/debian/11/logrotate/vesta
new file mode 100644
index 00000000..027a3439
--- /dev/null
+++ b/install/debian/11/logrotate/vesta
@@ -0,0 +1,7 @@
+/usr/local/vesta/log/*.log {
+    missingok
+    notifempty
+    size 30k
+    yearly
+    create 0600 root root
+}
diff --git a/install/debian/11/mysql/my-large.cnf b/install/debian/11/mysql/my-large.cnf
new file mode 100644
index 00000000..febfda66
--- /dev/null
+++ b/install/debian/11/mysql/my-large.cnf
@@ -0,0 +1,44 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 256M
+max_allowed_packet = 32M
+table_open_cache = 256
+sort_buffer_size = 1M
+read_buffer_size = 1M
+read_rnd_buffer_size = 4M
+myisam_sort_buffer_size = 64M
+thread_cache_size = 8
+query_cache_size= 16M
+thread_concurrency = 8
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=200
+max_user_connections=50
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+sql_mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/11/mysql/my-medium.cnf b/install/debian/11/mysql/my-medium.cnf
new file mode 100644
index 00000000..3aa8fe22
--- /dev/null
+++ b/install/debian/11/mysql/my-medium.cnf
@@ -0,0 +1,42 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+  
+skip-external-locking
+key_buffer_size = 16M
+max_allowed_packet = 16M
+table_open_cache = 64
+sort_buffer_size = 512K
+net_buffer_length = 8K
+read_buffer_size = 256K
+read_rnd_buffer_size = 512K
+myisam_sort_buffer_size = 8M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=70
+max_user_connections=30
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+sql_mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/11/mysql/my-small.cnf b/install/debian/11/mysql/my-small.cnf
new file mode 100644
index 00000000..bd53770b
--- /dev/null
+++ b/install/debian/11/mysql/my-small.cnf
@@ -0,0 +1,42 @@
+[client]
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld]
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 16K
+max_allowed_packet = 1M
+table_open_cache = 4
+sort_buffer_size = 64K
+read_buffer_size = 256K
+read_rnd_buffer_size = 256K
+net_buffer_length = 2K
+thread_stack = 240K
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=30
+max_user_connections=20
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+sql_mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/11/nginx/nginx.conf b/install/debian/11/nginx/nginx.conf
new file mode 100644
index 00000000..6d5e36ba
--- /dev/null
+++ b/install/debian/11/nginx/nginx.conf
@@ -0,0 +1,140 @@
+# Server globals
+user                    www-data;
+worker_processes        auto;
+worker_rlimit_nofile    65535;
+timer_resolution         50ms; #In order to free some CPU cycles
+error_log               /var/log/nginx/error.log crit;
+pid                     /var/run/nginx.pid;
+
+
+# Worker config
+events {
+        worker_connections  1024;
+        use                 epoll;
+        multi_accept        on;
+}
+
+
+http {
+    # Main settings
+    sendfile                        on;
+    tcp_nopush                      on;
+    tcp_nodelay                     on;
+    client_header_timeout           1m;
+    client_body_timeout             1m;
+    client_header_buffer_size       2k;
+    client_body_buffer_size         256k;
+    client_max_body_size            256m;
+    large_client_header_buffers     4   8k;
+    send_timeout                    30;
+    keepalive_timeout               60 60;
+    reset_timedout_connection       on;
+    server_tokens                   off;
+    server_name_in_redirect         off;
+    server_names_hash_max_size      512;
+    server_names_hash_bucket_size   512;
+
+
+    # Log format
+    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
+                        '"$status" $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  bytes   '$body_bytes_sent';
+    #access_log          /var/log/nginx/access.log main;
+    access_log off;
+
+
+    # Mime settings
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+
+    # Compression
+    gzip                on;
+    gzip_comp_level     9;
+    gzip_min_length     512;
+    gzip_buffers        8 64k;
+    gzip_types          text/plain text/css text/javascript text/js text/xml application/json application/javascript application/x-javascript application/xml application/xml+rss application/x-font-ttf image/svg+xml font/opentype;
+    gzip_proxied        any;
+    gzip_disable        "MSIE [1-6]\.";
+
+    # Proxy settings
+    proxy_redirect      off;
+    proxy_set_header    Host            $host;
+    proxy_set_header    X-Real-IP       $remote_addr;
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_header   Set-Cookie;
+    proxy_connect_timeout   900;
+    proxy_send_timeout  900;
+    proxy_read_timeout  900;
+    proxy_buffer_size   128k;
+    proxy_buffers   4 256k;
+    proxy_busy_buffers_size   256k;
+
+
+    # Cloudflare https://www.cloudflare.com/ips
+    set_real_ip_from 173.245.48.0/20;
+    set_real_ip_from 103.21.244.0/22;
+    set_real_ip_from 103.22.200.0/22;
+    set_real_ip_from 103.31.4.0/22;
+    set_real_ip_from 104.16.0.0/13;
+    set_real_ip_from 104.24.0.0/14;
+    set_real_ip_from 141.101.64.0/18;
+    set_real_ip_from 108.162.192.0/18;
+    set_real_ip_from 190.93.240.0/20;
+    set_real_ip_from 188.114.96.0/20;
+    set_real_ip_from 197.234.240.0/22;
+    set_real_ip_from 198.41.128.0/17;
+    set_real_ip_from 162.158.0.0/15;
+    set_real_ip_from 172.64.0.0/13;
+    set_real_ip_from 131.0.72.0/22;
+    set_real_ip_from 2400:cb00::/32;
+    set_real_ip_from 2606:4700::/32;
+    set_real_ip_from 2803:f800::/32;
+    set_real_ip_from 2405:b500::/32;
+    set_real_ip_from 2405:8100::/32;
+    set_real_ip_from 2a06:98c0::/29;
+    set_real_ip_from 2c0f:f248::/32;
+    real_ip_header     CF-Connecting-IP;
+
+
+    # SSL PCI Compliance
+    ssl_session_cache   shared:SSL:10m;
+    ssl_protocols       TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
+
+
+    # Error pages
+    error_page          403          /error/403.html;
+    error_page          404          /error/404.html;
+    error_page          502 503 504  /error/50x.html;
+
+
+    # Cache settings
+    proxy_cache_path /var/cache/nginx levels=2 keys_zone=cache:10m inactive=60m max_size=1024m;
+    proxy_cache_key "$host$request_uri $cookie_user";
+    proxy_temp_path  /var/cache/nginx/temp;
+    proxy_ignore_headers Expires Cache-Control;
+    proxy_cache_use_stale error timeout invalid_header http_502;
+    proxy_cache_valid any 1d;
+
+
+    # Cache bypass
+    map $http_cookie $no_cache {
+        default 0;
+        ~SESS 1;
+        ~wordpress_logged_in 1;
+    }
+
+
+    # File cache settings
+    open_file_cache          max=10000 inactive=30s;
+    open_file_cache_valid    60s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors   off;
+
+
+    # Wildcard include
+    include             /etc/nginx/conf.d/*.conf;
+}
diff --git a/install/debian/11/nginx/phpmyadmin.inc b/install/debian/11/nginx/phpmyadmin.inc
new file mode 100644
index 00000000..cdfc93c4
--- /dev/null
+++ b/install/debian/11/nginx/phpmyadmin.inc
@@ -0,0 +1,18 @@
+location /phpmyadmin {
+    alias /usr/share/phpmyadmin;
+
+    location ~ /(libraries|setup) {
+        return 404;
+    }
+
+    location ~ ^/phpmyadmin/(.*\.php)$ {
+        alias /usr/share/phpmyadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+    location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
+        root /usr/share/;
+    }
+}
diff --git a/install/debian/11/nginx/phppgadmin.inc b/install/debian/11/nginx/phppgadmin.inc
new file mode 100644
index 00000000..47cfcf4e
--- /dev/null
+++ b/install/debian/11/nginx/phppgadmin.inc
@@ -0,0 +1,11 @@
+location /phppgadmin {
+    alias /usr/share/phppgadmin;
+
+    location ~ ^/phppgadmin/(.*\.php)$ {
+        alias /usr/share/phppgadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/debian/11/nginx/status.conf b/install/debian/11/nginx/status.conf
new file mode 100644
index 00000000..c0bcd069
--- /dev/null
+++ b/install/debian/11/nginx/status.conf
@@ -0,0 +1,9 @@
+server {
+    listen       127.0.0.1:8084 default;
+    server_name  _;
+    server_name_in_redirect  off;
+    location / {
+        stub_status on;
+        access_log   off;
+   }
+}
diff --git a/install/debian/11/nginx/webmail.inc b/install/debian/11/nginx/webmail.inc
new file mode 100644
index 00000000..768c9049
--- /dev/null
+++ b/install/debian/11/nginx/webmail.inc
@@ -0,0 +1,15 @@
+location /webmail {
+    alias /var/lib/roundcube;
+
+    location ~ /(config|temp|logs) {
+        return 404;
+    }
+
+    location ~ ^/webmail/(.*\.php)$ {
+        alias /var/lib/roundcube/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/debian/11/packages/default.pkg b/install/debian/11/packages/default.pkg
new file mode 100644
index 00000000..de293236
--- /dev/null
+++ b/install/debian/11/packages/default.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='PHP-FPM-73'
+PROXY_TEMPLATE='hosting'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='unlimited'
+WEB_ALIASES='unlimited'
+DNS_DOMAINS='unlimited'
+DNS_RECORDS='unlimited'
+MAIL_DOMAINS='unlimited'
+MAIL_ACCOUNTS='unlimited'
+DATABASES='unlimited'
+CRON_JOBS='unlimited'
+DISK_QUOTA='unlimited'
+BANDWIDTH='unlimited'
+NS='YOURHOSTNAME1,YOURHOSTNAME2'
+SHELL='nologin'
+BACKUPS='2'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/debian/11/pga/config.inc.php b/install/debian/11/pga/config.inc.php
new file mode 100644
index 00000000..1eec9776
--- /dev/null
+++ b/install/debian/11/pga/config.inc.php
@@ -0,0 +1,159 @@
+<?php
+
+    /**
+     * Central phpPgAdmin configuration.  As a user you may modify the
+     * settings here for your particular configuration.
+     *
+     * $Id: config.inc.php-dist,v 1.55 2008/02/18 21:10:31 xzilla Exp $
+     */
+
+    // An example server.  Create as many of these as you wish,
+    // indexed from zero upwards.
+
+    // Display name for the server on the login screen
+    $conf['servers'][0]['desc'] = 'PostgreSQL';
+
+    // Hostname or IP address for server.  Use '' for UNIX domain socket.
+    // use 'localhost' for TCP/IP connection on this computer
+    $conf['servers'][0]['host'] = 'localhost';
+
+    // Database port on server (5432 is the PostgreSQL default)
+    $conf['servers'][0]['port'] = 5432;
+
+    // Database SSL mode
+    // Possible options: disable, allow, prefer, require
+    // To require SSL on older servers use option: legacy
+    // To ignore the SSL mode, use option: unspecified
+    $conf['servers'][0]['sslmode'] = 'allow';
+
+    // Change the default database only if you cannot connect to template1.
+    // For a PostgreSQL 8.1+ server, you can set this to 'postgres'.
+    $conf['servers'][0]['defaultdb'] = 'template1';
+
+    // Specify the path to the database dump utilities for this server.
+    // You can set these to '' if no dumper is available.
+    $conf['servers'][0]['pg_dump_path'] = '/usr/bin/pg_dump';
+    $conf['servers'][0]['pg_dumpall_path'] = '/usr/bin/pg_dumpall';
+
+    // Slony (www.slony.info) support?
+    $conf['servers'][0]['slony_support'] = false;
+    // Specify the path to the Slony SQL scripts (where slony1_base.sql is located, etc.)
+    // No trailing slash.
+    $conf['servers'][0]['slony_sql'] = '/usr/share/pgsql';
+
+    // Example for a second server (PostgreSQL for Windows)
+    //$conf['servers'][1]['desc'] = 'Test Server';
+    //$conf['servers'][1]['host'] = '127.0.0.1';
+    //$conf['servers'][1]['port'] = 5432;
+    //$conf['servers'][1]['sslmode'] = 'allow';
+    //$conf['servers'][1]['defaultdb'] = 'template1';
+    //$conf['servers'][1]['pg_dump_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dump.exe';
+    //$conf['servers'][1]['pg_dumpall_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dumpall.exe';
+    //$conf['servers'][1]['slony_support'] = false;
+    //$conf['servers'][1]['slony_sql'] = 'C:\\Program Files\\PostgreSQL\\8.0\\share';
+
+
+    // Example of groups definition.
+    // Groups allow administrators to logicaly group servers together under group nodes in the left browser tree
+    //
+    // The group '0' description
+    //$conf['srv_groups'][0]['desc'] = 'group one';
+    //
+    // Add here servers indexes belonging to the group '0' seperated by comma
+    //$conf['srv_groups'][0]['servers'] = '0,1,2'; 
+    //
+    // A server can belong to multi groups
+    //$conf['srv_groups'][1]['desc'] = 'group two';
+    //$conf['srv_groups'][1]['servers'] = '3,1';
+
+
+    // Default language. E.g.: 'english', 'polish', etc.  See lang/ directory
+    // for all possibilities. If you specify 'auto' (the default) it will use 
+    // your browser preference.
+    $conf['default_lang'] = 'auto';
+
+    // AutoComplete uses AJAX interaction to list foreign key values 
+    // on insert fields. It currently only works on single column 
+    // foreign keys. You can choose one of the following values:
+    // 'default on' enables AutoComplete and turns it on by default.
+    // 'default off' enables AutoComplete but turns it off by default.
+    // 'disable' disables AutoComplete.
+    $conf['autocomplete'] = 'default on';
+
+    // If extra login security is true, then logins via phpPgAdmin with no
+    // password or certain usernames (pgsql, postgres, root, administrator)
+    // will be denied. Only set this false once you have read the FAQ and
+    // understand how to change PostgreSQL's pg_hba.conf to enable
+    // passworded local connections.
+    $conf['extra_login_security'] = true;
+
+    // Only show owned databases?
+    // Note: This will simply hide other databases in the list - this does
+    // not in any way prevent your users from seeing other database by
+    // other means. (e.g. Run 'SELECT * FROM pg_database' in the SQL area.)
+    $conf['owned_only'] = false;
+
+    // Display comments on objects?  Comments are a good way of documenting
+    // a database, but they do take up space in the interface.
+    $conf['show_comments'] = true;
+
+    // Display "advanced" objects? Setting this to true will show 
+    // aggregates, types, operators, operator classes, conversions, 
+    // languages and casts in phpPgAdmin. These objects are rarely 
+    // administered and can clutter the interface.
+    $conf['show_advanced'] = false;
+
+    // Display "system" objects?
+    $conf['show_system'] = false;
+
+    // Display reports feature?  For this feature to work, you must
+    // install the reports database as explained in the INSTALL file.
+    $conf['show_reports'] = true;
+
+    // Database and table for reports
+    $conf['reports_db'] = 'phppgadmin';
+    $conf['reports_schema'] = 'public';
+    $conf['reports_table'] = 'ppa_reports';
+
+    // Only show owned reports?
+    // Note: This does not prevent people from accessing other reports by
+    // other means.
+    $conf['owned_reports_only'] = false;
+
+    // Minimum length users can set their password to.
+    $conf['min_password_length'] = 1;
+
+    // Width of the left frame in pixels (object browser)
+    $conf['left_width'] = 200;
+
+    // Which look & feel theme to use
+    $conf['theme'] = 'default';
+
+    // Show OIDs when browsing tables?
+    $conf['show_oids'] = false;
+
+    // Max rows to show on a page when browsing record sets
+    $conf['max_rows'] = 30;
+
+    // Max chars of each field to display by default in browse mode
+    $conf['max_chars'] = 50;
+
+    // Send XHTML strict headers?
+    $conf['use_xhtml_strict'] = false;
+
+    // Base URL for PostgreSQL documentation.
+    // '%s', if present, will be replaced with the PostgreSQL version
+    // (e.g. 8.4 )
+    $conf['help_base'] = 'http://www.postgresql.org/docs/%s/interactive/';
+
+    // Configuration for ajax scripts
+    // Time in seconds. If set to 0, refreshing data using ajax will be disabled (locks and activity pages)
+    $conf['ajax_refresh'] = 3;
+
+    /*****************************************
+     * Don't modify anything below this line *
+     *****************************************/
+
+    $conf['version'] = 19;
+
+?>
diff --git a/install/debian/11/pga/phppgadmin.conf b/install/debian/11/pga/phppgadmin.conf
new file mode 100644
index 00000000..f39247d6
--- /dev/null
+++ b/install/debian/11/pga/phppgadmin.conf
@@ -0,0 +1,31 @@
+Alias /phppgadmin /usr/share/phppgadmin
+
+<Directory /usr/share/phppgadmin>
+
+DirectoryIndex index.php
+AllowOverride None
+
+order deny,allow
+deny from all
+allow from 127.0.0.0/255.0.0.0 ::1/128
+allow from all
+
+<IfModule mod_php5.c>
+  php_flag magic_quotes_gpc Off
+  php_flag track_vars On
+  php_value include_path .
+</IfModule>
+<IfModule !mod_php5.c>
+  <IfModule mod_actions.c>
+    <IfModule mod_cgi.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+    <IfModule mod_cgid.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+  </IfModule>
+</IfModule>
+
+</Directory>
diff --git a/install/debian/11/php-fpm/www.conf b/install/debian/11/php-fpm/www.conf
new file mode 100644
index 00000000..3c87f33c
--- /dev/null
+++ b/install/debian/11/php-fpm/www.conf
@@ -0,0 +1,11 @@
+[www]
+listen = 127.0.0.1:9000
+listen.allowed_clients = 127.0.0.1
+
+user = www-data
+group = www-data
+
+pm = ondemand
+pm.max_children = 2
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
diff --git a/install/debian/11/php/php7.3-dedi.patch b/install/debian/11/php/php7.3-dedi.patch
new file mode 100644
index 00000000..c044e002
--- /dev/null
+++ b/install/debian/11/php/php7.3-dedi.patch
@@ -0,0 +1,78 @@
+--- /etc/php/7.3/fpm/php.ini.orig	2019-07-18 16:11:18.856589963 +0200
++++ /etc/php/7.3/fpm/php.ini	2019-07-18 17:45:51.000000000 +0200
+@@ -312,7 +312,8 @@
+ ; This directive allows you to disable certain functions for security reasons.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes for security reasons.
+ ; It receives a comma-delimited list of class names.
+@@ -399,11 +400,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume (128MB)
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -690,7 +691,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -842,7 +843,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1087,7 +1088,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1791,20 +1792,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=2048
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5
diff --git a/install/debian/11/php/php7.3-vps.patch b/install/debian/11/php/php7.3-vps.patch
new file mode 100644
index 00000000..803b93e8
--- /dev/null
+++ b/install/debian/11/php/php7.3-vps.patch
@@ -0,0 +1,78 @@
+--- /etc/php/7.3/fpm/php.ini.orig	2019-07-18 16:11:18.856589963 +0200
++++ /etc/php/7.3/fpm/php.ini	2019-07-18 17:45:51.000000000 +0200
+@@ -312,7 +312,8 @@
+ ; This directive allows you to disable certain functions for security reasons.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes for security reasons.
+ ; It receives a comma-delimited list of class names.
+@@ -399,11 +400,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume (128MB)
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -690,7 +691,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -842,7 +843,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1087,7 +1088,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1791,20 +1792,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=512
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5
diff --git a/install/debian/11/pma/apache.conf b/install/debian/11/pma/apache.conf
new file mode 100644
index 00000000..2a8f69e2
--- /dev/null
+++ b/install/debian/11/pma/apache.conf
@@ -0,0 +1,42 @@
+# phpMyAdmin default Apache configuration
+
+Alias /phpmyadmin /usr/share/phpmyadmin
+
+<Directory /usr/share/phpmyadmin>
+	Options FollowSymLinks
+	DirectoryIndex index.php
+
+	<IfModule mod_php5.c>
+		AddType application/x-httpd-php .php
+
+		php_flag magic_quotes_gpc Off
+		php_flag track_vars On
+		php_flag register_globals Off
+		php_admin_flag allow_url_fopen Off
+		php_value include_path .
+		php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp
+		php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/:/usr/share/php/php-gettext
+	</IfModule>
+
+</Directory>
+
+# Authorize for setup
+<Directory /usr/share/phpmyadmin/setup>
+    <IfModule mod_authn_file.c>
+    AuthType Basic
+    AuthName "phpMyAdmin Setup"
+    AuthUserFile /etc/phpmyadmin/htpasswd.setup
+    </IfModule>
+    Require valid-user
+</Directory>
+
+# Disallow web access to directories that don't need it
+<Directory /usr/share/phpmyadmin/libraries>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+<Directory /usr/share/phpmyadmin/setup/lib>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+
diff --git a/install/debian/11/pma/config.inc.php b/install/debian/11/pma/config.inc.php
new file mode 100644
index 00000000..eafc6d67
--- /dev/null
+++ b/install/debian/11/pma/config.inc.php
@@ -0,0 +1,146 @@
+<?php
+/**
+ * Debian local configuration file
+ *
+ * This file overrides the settings made by phpMyAdmin interactive setup
+ * utility.
+ *
+ * For example configuration see
+ *   /usr/share/doc/phpmyadmin/examples/config.sample.inc.php
+ * or
+ *   /usr/share/doc/phpmyadmin/examples/config.manyhosts.inc.php
+ *
+ * NOTE: do not add security sensitive data to this file (like passwords)
+ * unless you really know what you're doing. If you do, any user that can
+ * run PHP or CGI on your webserver will be able to read them. If you still
+ * want to do this, make sure to properly secure the access to this file
+ * (also on the filesystem level).
+ */
+
+function check_file_access($path)
+{
+    if (is_readable($path)) {
+        return true;
+    } else {
+        error_log(
+            'phpmyadmin: Failed to load ' . $path
+            . ' Check group www-data has read access and open_basedir restrictions.'
+        );
+        return false;
+    }
+}
+
+// Load secret generated on postinst
+if (check_file_access('/var/lib/phpmyadmin/blowfish_secret.inc.php')) {
+    require('/var/lib/phpmyadmin/blowfish_secret.inc.php');
+}
+
+// Load autoconf local config
+if (check_file_access('/var/lib/phpmyadmin/config.inc.php')) {
+    require('/var/lib/phpmyadmin/config.inc.php');
+}
+
+/**
+ * Server(s) configuration
+ */
+$i = 0;
+// The $cfg['Servers'] array starts with $cfg['Servers'][1].  Do not use $cfg['Servers'][0].
+// You can disable a server config entry by setting host to ''.
+$i++;
+
+/**
+ * Read configuration from dbconfig-common
+ * You can regenerate it using: dpkg-reconfigure -plow phpmyadmin
+ */
+if (check_file_access('/etc/phpmyadmin/config-db.php')) {
+    require('/etc/phpmyadmin/config-db.php');
+}
+
+/* Configure according to dbconfig-common if enabled */
+if (!empty($dbname)) {
+    /* Authentication type */
+    $cfg['Servers'][$i]['auth_type'] = 'cookie';
+    /* Server parameters */
+    if (empty($dbserver)) $dbserver = 'localhost';
+    $cfg['Servers'][$i]['host'] = $dbserver;
+
+    if (!empty($dbport) || $dbserver != 'localhost') {
+        $cfg['Servers'][$i]['connect_type'] = 'tcp';
+        $cfg['Servers'][$i]['port'] = $dbport;
+    }
+    //$cfg['Servers'][$i]['compress'] = false;
+    /* Select mysqli if your server has it */
+    $cfg['Servers'][$i]['extension'] = 'mysqli';
+    /* Optional: User for advanced features */
+    $cfg['Servers'][$i]['controluser'] = $dbuser;
+    $cfg['Servers'][$i]['controlpass'] = $dbpass;
+    /* Optional: Advanced phpMyAdmin features */
+    $cfg['Servers'][$i]['pmadb'] = $dbname;
+    $cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
+    $cfg['Servers'][$i]['relation'] = 'pma__relation';
+    $cfg['Servers'][$i]['table_info'] = 'pma__table_info';
+    $cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
+    $cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
+    $cfg['Servers'][$i]['column_info'] = 'pma__column_info';
+    $cfg['Servers'][$i]['history'] = 'pma__history';
+    $cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
+    $cfg['Servers'][$i]['designer_coords'] = 'pma__designer_coords';
+    $cfg['Servers'][$i]['tracking'] = 'pma__tracking';
+    $cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
+    $cfg['Servers'][$i]['recent'] = 'pma__recent';
+
+    /* Uncomment the following to enable logging in to passwordless accounts,
+     * after taking note of the associated security risks. */
+    // $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+    /* Advance to next server for rest of config */
+    $i++;
+}
+
+/* Authentication type */
+//$cfg['Servers'][$i]['auth_type'] = 'cookie';
+/* Server parameters */
+//$cfg['Servers'][$i]['host'] = 'localhost';
+//$cfg['Servers'][$i]['connect_type'] = 'tcp';
+//$cfg['Servers'][$i]['compress'] = false;
+/* Select mysqli if your server has it */
+//$cfg['Servers'][$i]['extension'] = 'mysql';
+/* Optional: User for advanced features */
+// $cfg['Servers'][$i]['controluser'] = 'pma';
+// $cfg['Servers'][$i]['controlpass'] = 'pmapass';
+
+/* Storage database and tables */
+// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
+// $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+// $cfg['Servers'][$i]['relation'] = 'pma_relation';
+// $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+// $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+// $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+// $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+// $cfg['Servers'][$i]['history'] = 'pma_history';
+// $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+// $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+// $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+// $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+// $cfg['Servers'][$i]['recent'] = 'pma_recent';
+/* Uncomment the following to enable logging in to passwordless accounts,
+ * after taking note of the associated security risks. */
+// $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+/*
+ * End of servers configuration
+ */
+
+/*
+ * Directories for saving/loading files from server
+ */
+$cfg['UploadDir'] = '';
+$cfg['SaveDir'] = '';
+
+/* Support additional configurations */
+foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
+{
+    include($filename);
+}
+
+
diff --git a/install/debian/11/pma/create_tables.sql b/install/debian/11/pma/create_tables.sql
new file mode 100644
index 00000000..3583a6ed
--- /dev/null
+++ b/install/debian/11/pma/create_tables.sql
@@ -0,0 +1,385 @@
+-- --------------------------------------------------------
+-- SQL Commands to set up the pmadb as described in the documentation.
+--
+-- This file is meant for use with MySQL 5 and above!
+--
+-- This script expects the user pma to already be existing. If we would put a
+-- line here to create him too many users might just use this script and end
+-- up with having the same password for the controluser.
+--
+-- This user "pma" must be defined in config.inc.php (controluser/controlpass)
+--
+-- Please don't forget to set up the tablenames in config.inc.php
+--
+
+-- --------------------------------------------------------
+
+--
+-- Database : `phpmyadmin`
+--
+CREATE DATABASE IF NOT EXISTS `phpmyadmin`
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+USE phpmyadmin;
+
+-- --------------------------------------------------------
+
+--
+-- Privileges
+--
+-- (activate this statement if necessary)
+-- GRANT SELECT, INSERT, DELETE, UPDATE, ALTER ON `phpmyadmin`.* TO
+--    'pma'@localhost;
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__usergroups`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__usergroups` (
+  `usergroup` varchar(64) NOT NULL,
+  `tab` varchar(64) NOT NULL,
+  `allowed` enum('Y','N') NOT NULL DEFAULT 'N',
+  PRIMARY KEY (`usergroup`,`tab`,`allowed`)
+)
+  COMMENT='User groups with configured menu items'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__designer_coords`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__designer_coords` (
+  `db_name` varchar(64) COLLATE utf8_bin NOT NULL DEFAULT '',
+  `table_name` varchar(64) COLLATE utf8_bin NOT NULL DEFAULT '',
+  `x` int(11) DEFAULT NULL,
+  `y` int(11) DEFAULT NULL,
+  `v` tinyint(4) DEFAULT NULL,
+  `h` tinyint(4) DEFAULT NULL,
+  PRIMARY KEY (`db_name`,`table_name`)
+) ENGINE=MyISAM DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='Table coordinates for Designer';
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__bookmark`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__bookmark` (
+  `id` int(11) NOT NULL auto_increment,
+  `dbase` varchar(255) NOT NULL default '',
+  `user` varchar(255) NOT NULL default '',
+  `label` varchar(255) COLLATE utf8_general_ci NOT NULL default '',
+  `query` text NOT NULL,
+  PRIMARY KEY  (`id`)
+)
+  COMMENT='Bookmarks'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__column_info`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__column_info` (
+  `id` int(5) unsigned NOT NULL auto_increment,
+  `db_name` varchar(64) NOT NULL default '',
+  `table_name` varchar(64) NOT NULL default '',
+  `column_name` varchar(64) NOT NULL default '',
+  `comment` varchar(255) COLLATE utf8_general_ci NOT NULL default '',
+  `mimetype` varchar(255) COLLATE utf8_general_ci NOT NULL default '',
+  `transformation` varchar(255) NOT NULL default '',
+  `transformation_options` varchar(255) NOT NULL default '',
+  `input_transformation` varchar(255) NOT NULL default '',
+  `input_transformation_options` varchar(255) NOT NULL default '',
+  PRIMARY KEY  (`id`),
+  UNIQUE KEY `db_name` (`db_name`,`table_name`,`column_name`)
+)
+  COMMENT='Column information for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__history`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__history` (
+  `id` bigint(20) unsigned NOT NULL auto_increment,
+  `username` varchar(64) NOT NULL default '',
+  `db` varchar(64) NOT NULL default '',
+  `table` varchar(64) NOT NULL default '',
+  `timevalue` timestamp NOT NULL default CURRENT_TIMESTAMP,
+  `sqlquery` text NOT NULL,
+  PRIMARY KEY  (`id`),
+  KEY `username` (`username`,`db`,`table`,`timevalue`)
+)
+  COMMENT='SQL history for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__pdf_pages`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__pdf_pages` (
+  `db_name` varchar(64) NOT NULL default '',
+  `page_nr` int(10) unsigned NOT NULL auto_increment,
+  `page_descr` varchar(50) COLLATE utf8_general_ci NOT NULL default '',
+  PRIMARY KEY  (`page_nr`),
+  KEY `db_name` (`db_name`)
+)
+  COMMENT='PDF relation pages for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__recent`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__recent` (
+  `username` varchar(64) NOT NULL,
+  `tables` text NOT NULL,
+  PRIMARY KEY (`username`)
+)
+  COMMENT='Recently accessed tables'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__favorite`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__favorite` (
+  `username` varchar(64) NOT NULL,
+  `tables` text NOT NULL,
+  PRIMARY KEY (`username`)
+)
+  COMMENT='Favorite tables'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__table_uiprefs`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__table_uiprefs` (
+  `username` varchar(64) NOT NULL,
+  `db_name` varchar(64) NOT NULL,
+  `table_name` varchar(64) NOT NULL,
+  `prefs` text NOT NULL,
+  `last_update` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY (`username`,`db_name`,`table_name`)
+)
+  COMMENT='Tables'' UI preferences'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__relation`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__relation` (
+  `master_db` varchar(64) NOT NULL default '',
+  `master_table` varchar(64) NOT NULL default '',
+  `master_field` varchar(64) NOT NULL default '',
+  `foreign_db` varchar(64) NOT NULL default '',
+  `foreign_table` varchar(64) NOT NULL default '',
+  `foreign_field` varchar(64) NOT NULL default '',
+  PRIMARY KEY  (`master_db`,`master_table`,`master_field`),
+  KEY `foreign_field` (`foreign_db`,`foreign_table`)
+)
+  COMMENT='Relation table'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__table_coords`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__table_coords` (
+  `db_name` varchar(64) NOT NULL default '',
+  `table_name` varchar(64) NOT NULL default '',
+  `pdf_page_number` int(11) NOT NULL default '0',
+  `x` float unsigned NOT NULL default '0',
+  `y` float unsigned NOT NULL default '0',
+  PRIMARY KEY  (`db_name`,`table_name`,`pdf_page_number`)
+)
+  COMMENT='Table coordinates for phpMyAdmin PDF output'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__table_info`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__table_info` (
+  `db_name` varchar(64) NOT NULL default '',
+  `table_name` varchar(64) NOT NULL default '',
+  `display_field` varchar(64) NOT NULL default '',
+  PRIMARY KEY  (`db_name`,`table_name`)
+)
+  COMMENT='Table information for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__tracking`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__tracking` (
+  `db_name` varchar(64) NOT NULL,
+  `table_name` varchar(64) NOT NULL,
+  `version` int(10) unsigned NOT NULL,
+  `date_created` datetime NOT NULL,
+  `date_updated` datetime NOT NULL,
+  `schema_snapshot` text NOT NULL,
+  `schema_sql` text,
+  `data_sql` longtext,
+  `tracking` set('UPDATE','REPLACE','INSERT','DELETE','TRUNCATE','CREATE DATABASE','ALTER DATABASE','DROP DATABASE','CREATE TABLE','ALTER TABLE','RENAME TABLE','DROP TABLE','CREATE INDEX','DROP INDEX','CREATE VIEW','ALTER VIEW','DROP VIEW') default NULL,
+  `tracking_active` int(1) unsigned NOT NULL default '1',
+  PRIMARY KEY  (`db_name`,`table_name`,`version`)
+)
+  COMMENT='Database changes tracking for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__userconfig`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__userconfig` (
+  `username` varchar(64) NOT NULL,
+  `timevalue` timestamp NOT NULL default CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  `config_data` text NOT NULL,
+  PRIMARY KEY  (`username`)
+)
+  COMMENT='User preferences storage for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__users`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__users` (
+  `username` varchar(64) NOT NULL,
+  `usergroup` varchar(64) NOT NULL,
+  PRIMARY KEY (`username`,`usergroup`)
+)
+  COMMENT='Users and their assignments to user groups'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__usergroups`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__usergroups` (
+  `usergroup` varchar(64) NOT NULL,
+  `tab` varchar(64) NOT NULL,
+  `allowed` enum('Y','N') NOT NULL DEFAULT 'N',
+  PRIMARY KEY (`usergroup`,`tab`,`allowed`)
+)
+  COMMENT='User groups with configured menu items'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__navigationhiding`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__navigationhiding` (
+  `username` varchar(64) NOT NULL,
+  `item_name` varchar(64) NOT NULL,
+  `item_type` varchar(64) NOT NULL,
+  `db_name` varchar(64) NOT NULL,
+  `table_name` varchar(64) NOT NULL,
+  PRIMARY KEY (`username`,`item_name`,`item_type`,`db_name`,`table_name`)
+)
+  COMMENT='Hidden items of navigation tree'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__savedsearches`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__savedsearches` (
+  `id` int(5) unsigned NOT NULL auto_increment,
+  `username` varchar(64) NOT NULL default '',
+  `db_name` varchar(64) NOT NULL default '',
+  `search_name` varchar(64) NOT NULL default '',
+  `search_data` text NOT NULL,
+  PRIMARY KEY  (`id`),
+  UNIQUE KEY `u_savedsearches_username_dbname` (`username`,`db_name`,`search_name`)
+)
+  COMMENT='Saved searches'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__central_columns`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__central_columns` (
+  `db_name` varchar(64) NOT NULL,
+  `col_name` varchar(64) NOT NULL,
+  `col_type` varchar(64) NOT NULL,
+  `col_length` text,
+  `col_collation` varchar(64) NOT NULL,
+  `col_isNull` boolean NOT NULL,
+  `col_extra` varchar(255) default '',
+  `col_default` text,
+  PRIMARY KEY (`db_name`,`col_name`)
+)
+  COMMENT='Central list of columns'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__designer_settings`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__designer_settings` (
+  `username` varchar(64) NOT NULL,
+  `settings_data` text NOT NULL,
+  PRIMARY KEY (`username`)
+)
+  COMMENT='Settings related to Designer'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__export_templates`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__export_templates` (
+  `id` int(5) unsigned NOT NULL AUTO_INCREMENT,
+  `username` varchar(64) NOT NULL,
+  `export_type` varchar(10) NOT NULL,
+  `template_name` varchar(64) NOT NULL,
+  `template_data` text NOT NULL,
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `u_user_type_template` (`username`,`export_type`,`template_name`)
+)
+  COMMENT='Saved export templates'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
\ No newline at end of file
diff --git a/install/debian/11/pma/pma.sh b/install/debian/11/pma/pma.sh
new file mode 100644
index 00000000..eb4be110
--- /dev/null
+++ b/install/debian/11/pma/pma.sh
@@ -0,0 +1,157 @@
+#!/bin/bash
+# 
+# phpmyadmin-fixer
+#
+# Fixes for phpmyadmin (configuration storage and some extended features)
+#
+# Original Version by Pavel Galkin (https://skurudo.ru)
+# https://github.com/skurudo/phpmyadmin-fixer
+#
+# Changed some lines to fit to Hestia Configuration.
+#
+
+# Defining password-gen function
+gen_pass() {
+    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
+    LENGTH=10
+    while [ ${n:=1} -le $LENGTH ]; do
+        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
+        let n+=1
+    done
+    echo "$PASS"
+}
+
+PASS=$(gen_pass)
+
+#ubuntu phpmyadmin path
+pmapath1="/etc/phpmyadmin/config.inc.php"
+pmapath2="/usr/share/phpmyadmin/config.sample.inc.php"
+
+#delete old and paste new value 
+sed -i '/pmadb/d' $pmapath1
+sed -i '/controluser/d' $pmapath1
+sed -i '/bookmarktable/d' $pmapath1
+sed -i '/relation/d' $pmapath1
+sed -i '/userconfig/d' $pmapath1
+sed -i '/table_info/d' $pmapath1
+sed -i '/column_info/d' $pmapath1
+sed -i '/history/d' $pmapath1
+sed -i '/recent/d' $pmapath1
+sed -i '/table_uiprefs/d' $pmapath1
+sed -i '/tracking/d' $pmapath1
+sed -i '/table_coords/d' $pmapath1
+sed -i '/pdf_pages/d' $pmapath1
+sed -i '/designer_coords/d' $pmapath1
+sed -i '/controlpass/d' $pmapath1
+sed -i '/\$i = 1; /d' $pmapath1
+echo "\$i = 1;" >> $pmapath1
+sed -i '/savedsearches/d' $pmapath1
+sed -i '/navigationhiding/d' $pmapath1
+sed -i '/users/d' $pmapath1
+sed -i '/controlpass/d' $pmapath1
+sed -i '/favorite/d' $pmapath1
+sed -i '/usergroups/d' $pmapath1
+sed -i '/central_columns/d' $pmapath1
+sed -i '/designer_settings/d' $pmapath1
+sed -i '/export_templates/d' $pmapath1
+echo "\$cfg['Servers'][\$i]['favorite'] = 'pma__favorite';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['central_columns'] = 'pma__central_columns';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['designer_settings'] = 'pma__designer_settings';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['export_templates'] = 'pma__export_templates';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['savedsearches'] = 'pma__savedsearches';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['navigationhiding'] = 'pma__navigationhiding';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['users'] = 'pma__users';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['pmadb'] = 'phpmyadmin';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['controluser'] = 'pma';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['controlpass'] = '$PASS';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['bookmarktable'] = 'pma__bookmark';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['relation'] = 'pma__relation';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['userconfig'] = 'pma__userconfig';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['table_info'] = 'pma__table_info';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['column_info'] = 'pma__column_info';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['history'] = 'pma__history';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['recent'] = 'pma__recent';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['table_uiprefs'] = 'pma__table_uiprefs';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['tracking'] = 'pma__tracking';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['table_coords'] = 'pma__table_coords';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['pdf_pages'] = 'pma__pdf_pages';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['designer_coords'] = 'pma__designer_coords';" >> $pmapath1
+
+sed -i '/pmadb/d' $pmapath2
+sed -i '/controluser/d' $pmapath2
+sed -i '/bookmarktable/d' $pmapath2
+sed -i '/relation/d' $pmapath2
+sed -i '/userconfig/d' $pmapath2
+sed -i '/table_info/d' $pmapath2
+sed -i '/column_info/d' $pmapath2
+sed -i '/history/d' $pmapath2
+sed -i '/recent/d' $pmapath2
+sed -i '/table_uiprefs/d' $pmapath2
+sed -i '/tracking/d' $pmapath2
+sed -i '/table_coords/d' $pmapath2
+sed -i '/pdf_pages/d' $pmapath2
+sed -i '/designer_coords/d' $pmapath2
+sed -i '/controlpass/d' $pmapath2
+sed -i '/savedsearches/d' $pmapath2
+sed -i '/navigationhiding/d' $pmapath2
+sed -i '/users/d' $pmapath2
+sed -i '/controlpass/d' $pmapath2
+sed -i '/favorite/d' $pmapath2
+sed -i '/usergroups/d' $pmapath2
+sed -i '/central_columns/d' $pmapath2
+sed -i '/designer_settings/d' $pmapath2
+sed -i '/export_templates/d' $pmapath2
+echo "\$cfg['Servers'][\$i]['favorite'] = 'pma__favorite';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['central_columns'] = 'pma__central_columns';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['designer_settings'] = 'pma__designer_settings';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['export_templates'] = 'pma__export_templates';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['savedsearches'] = 'pma__savedsearches';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['navigationhiding'] = 'pma__navigationhiding';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['users'] = 'pma__users';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['pmadb'] = 'phpmyadmin';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['controluser'] = 'pma';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['controlpass'] = '$PASS';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['bookmarktable'] = 'pma__bookmark';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['relation'] = 'pma__relation';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['userconfig'] = 'pma__userconfig';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['table_info'] = 'pma__table_info';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['column_info'] = 'pma__column_info';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['history'] = 'pma__history';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['recent'] = 'pma__recent';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['table_uiprefs'] = 'pma__table_uiprefs';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['tracking'] = 'pma__tracking';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['table_coords'] = 'pma__table_coords';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['pdf_pages'] = 'pma__pdf_pages';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['designer_coords'] = 'pma__designer_coords';" >> $pmapath2
+
+#SOME WORK with DATABASE (table / user)
+PMADB=phpmyadmin
+PMAUSER=pma
+
+#DROP USER and TABLE
+mysql -uroot <<MYSQL_PMA1
+DROP USER IF EXISTS '$PMAUSER'@'localhost';
+DROP DATABASE IF EXISTS $PMADB;
+FLUSH PRIVILEGES;
+MYSQL_PMA1
+
+#CREATE PMA USER
+mysql -uroot <<MYSQL_PMA2
+CREATE USER '$PMAUSER'@'localhost' IDENTIFIED BY '$PASS';
+CREATE DATABASE $PMADB;
+MYSQL_PMA2
+
+#GRANT PMA USE SOME RIGHTS
+mysql -uroot <<MYSQL_PMA3
+USE $PMADB;
+GRANT USAGE ON $PMADB.* TO '$PMAUSER'@'localhost' IDENTIFIED BY '$PASS';
+GRANT ALL PRIVILEGES ON $PMADB.* TO '$PMAUSER'@'localhost';
+FLUSH PRIVILEGES;
+MYSQL_PMA3
+
+#MYSQL DB and TABLES ADDITION
+mysql -uroot < /root/phpmyadmin/create_tables.sql
diff --git a/install/debian/11/postgresql/pg_hba.conf b/install/debian/11/postgresql/pg_hba.conf
new file mode 100644
index 00000000..1ba43941
--- /dev/null
+++ b/install/debian/11/postgresql/pg_hba.conf
@@ -0,0 +1,11 @@
+# "local" is for Unix domain socket connections only
+local   all         all                               ident
+
+# IPv4 local connections:
+host    all         all         127.0.0.1/32          md5
+
+# IPv6 local connections:
+host    all         all         ::1/128               md5
+
+# Others
+host    all         all         0.0.0.0/0             md5
diff --git a/install/debian/11/proftpd/proftpd.conf b/install/debian/11/proftpd/proftpd.conf
new file mode 100644
index 00000000..b144b8a5
--- /dev/null
+++ b/install/debian/11/proftpd/proftpd.conf
@@ -0,0 +1,36 @@
+ServerName                      "FTP"
+ServerIdent                     on "FTP Server ready."
+ServerAdmin                     root@localhost
+DefaultServer                   on
+DefaultRoot                  ~ !adm
+
+Include /etc/proftpd/tls.conf
+
+<IfModule mod_vroot.c>
+    VRootEngine                 on
+    VRootAlias                  /etc/security/pam_env.conf etc/security/pam_env.conf
+</IfModule>
+
+AuthPAMConfig                   proftpd
+AuthOrder                       mod_auth_pam.c* mod_auth_unix.c
+UseReverseDNS                   off
+User                            proftpd
+Group                           nogroup
+MaxInstances                    100
+UseSendfile                     off
+LogFormat                       default "%h %l %u %t \"%r\" %s %b"
+LogFormat                       auth    "%v [%P] %h %t \"%r\" %s"
+ListOptions                     -a
+RequireValidShell               off
+PassivePorts                    12000 12100
+TransferLog                     /var/log/proftpd/xferlog
+SystemLog                       /var/log/proftpd/proftpd.log
+
+<Global>
+  Umask                         002
+  IdentLookups                  off
+  AllowOverwrite                yes
+  <Limit ALL SITE_CHMOD>
+    AllowAll
+  </Limit>
+</Global>
diff --git a/install/debian/11/proftpd/tls.conf b/install/debian/11/proftpd/tls.conf
new file mode 100644
index 00000000..9da0017b
--- /dev/null
+++ b/install/debian/11/proftpd/tls.conf
@@ -0,0 +1,63 @@
+#
+# Proftpd sample configuration for FTPS connections.
+#
+# Note that FTPS impose some limitations in NAT traversing.
+# See http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-TLS.html
+# for more information.
+#
+<IfModule mod_dso.c>
+    # If mod_tls was built as a shared/DSO module, load it
+    LoadModule mod_tls.c
+</IfModule>
+<IfModule mod_tls.c>
+TLSEngine                               on
+TLSLog                                  /var/log/proftpd/tls.log
+# this is an example of protocols, proftp works witl all, but use only the most secure ones like TLSv1.1 and TLSv1.2
+TLSProtocol                             TLSv1.1 TLSv1.2
+#
+# Server SSL certificate. You can generate a self-signed certificate using
+# a command like:
+#
+# openssl req -x509 -newkey rsa:1024 \
+#          -keyout /etc/ssl/private/proftpd.key -out /etc/ssl/certs/proftpd.crt \
+#          -nodes -days 365
+#
+# The proftpd.key file must be readable by root only. The other file can be
+# readable by anyone.
+#
+# chmod 0600 /etc/ssl/private/proftpd.key
+# chmod 0640 /etc/ssl/private/proftpd.key
+#
+TLSRSACertificateFile                   /usr/local/vesta/ssl/certificate.crt
+TLSRSACertificateKeyFile                /usr/local/vesta/ssl/certificate.key
+#
+# CA the server trusts...
+#TLSCACertificateFile                    /etc/ssl/certs/CA.pem
+# ...or avoid CA cert and be verbose
+#TLSOptions                      NoCertRequest EnableDiags
+# ... or the same with relaxed session use for some clients (e.g. FireFtp)
+#TLSOptions                      NoCertRequest EnableDiags NoSessionReuseRequired
+#
+#
+# Per default drop connection if client tries to start a renegotiate
+# This is a fix for CVE-2009-3555 but could break some clients.
+#
+#TLSOptions                                                     AllowClientRenegotiations
+#
+TLSOptions                       NoSessionReuseRequired AllowClientRenegotiations
+# Authenticate clients that want to use FTP over TLS?
+#
+#TLSVerifyClient                         off
+#
+# Are clients required to use FTP over TLS when talking to this server?
+#
+TLSRequired                             off
+#
+# Allow SSL/TLS renegotiations when the client requests them, but
+# do not force the renegotations.  Some clients do not support
+# SSL/TLS renegotiations; when mod_tls forces a renegotiation, these
+# clients will close the data connection, or there will be a timeout
+# on an idle data connection.
+#
+TLSRenegotiate                          required off
+</IfModule>
diff --git a/install/debian/11/roundcube/apache.conf b/install/debian/11/roundcube/apache.conf
new file mode 100644
index 00000000..a0c87bcc
--- /dev/null
+++ b/install/debian/11/roundcube/apache.conf
@@ -0,0 +1,40 @@
+Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/
+Alias /roundcube /var/lib/roundcube
+Alias /webmail /var/lib/roundcube
+
+# Access to tinymce files
+<Directory "/usr/share/tinymce/www/">
+      Options Indexes MultiViews FollowSymLinks
+      AllowOverride None
+      Order allow,deny
+      allow from all
+</Directory>
+
+<Directory /var/lib/roundcube/>
+  Options +FollowSymLinks
+  # This is needed to parse /var/lib/roundcube/.htaccess. See its
+  # content before setting AllowOverride to None.
+  AllowOverride All
+  order allow,deny
+  allow from all
+</Directory>
+
+# Protecting basic directories:
+<Directory /var/lib/roundcube/config>
+        Options -FollowSymLinks
+        AllowOverride None
+</Directory>
+
+<Directory /var/lib/roundcube/temp>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
+
+<Directory /var/lib/roundcube/logs>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
diff --git a/install/debian/11/roundcube/config.inc.php b/install/debian/11/roundcube/config.inc.php
new file mode 100644
index 00000000..0c82b1bc
--- /dev/null
+++ b/install/debian/11/roundcube/config.inc.php
@@ -0,0 +1,33 @@
+<?php
+
+// Password Plugin options
+// -----------------------
+// A driver to use for password change. Default: "sql".
+// See README file for list of supported driver names.
+$rcmail_config['password_driver'] = 'vesta';
+
+// Require the new password to be a certain length.
+// set to blank to allow passwords of any length
+$rcmail_config['password_minimum_length'] = 6;
+
+// Require the new password to contain a letter and punctuation character
+// Change to false to remove this check.
+$rcmail_config['password_require_nonalpha'] = false;
+
+// Enables logging of password changes into logs/password
+$rcmail_config['password_log'] = false;
+
+// Comma-separated list of login exceptions for which password change
+// will be not available (no Password tab in Settings)
+$rcmail_config['password_login_exceptions'] = null;
+
+
+// By default domains in variables are using unicode.
+// Enable this option to use punycoded names
+$rcmail_config['password_idn_ascii'] = false;
+
+// Vesta Driver options
+// -----------------------
+// Control Panel host
+$rcmail_config['password_vesta_host'] = 'localhost';
+$rcmail_config['password_vesta_port'] = '8083';
diff --git a/install/debian/11/roundcube/db.inc.php b/install/debian/11/roundcube/db.inc.php
new file mode 100644
index 00000000..5268a309
--- /dev/null
+++ b/install/debian/11/roundcube/db.inc.php
@@ -0,0 +1,66 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Configuration file for database access                                |
+ |                                                                       |
+ | This file is part of the RoundCube Webmail client                     |
+ | Copyright (C) 2005-2008, RoundCube Dev. - Switzerland                 |
+ | Licensed under the GNU GPL                                            |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// PEAR database DSN for read/write operations
+// format is db_provider://user:password@host/database 
+
+$rcmail_config['db_dsnw'] = 'mysql://roundcube:%password%@localhost/roundcube';
+// postgres example: 'pgsql://roundcube:pass@localhost/roundcubemail';
+
+// PEAR database DSN for read only operations (if empty write database will be used)
+// useful for database replication
+$rcmail_config['db_dsnr'] = '';
+
+// database backend to use (only db or mdb2 are supported)
+//$rcmail_config['db_backend'] = 'mdb2';
+
+// maximum length of a query in bytes
+$rcmail_config['db_max_length'] = 512000;  // 500K
+
+// use persistent db-connections
+// beware this will not "always" work as expected
+// see: http://www.php.net/manual/en/features.persistent-connections.php
+$rcmail_config['db_persistent'] = FALSE;
+
+
+// you can define specific table names used to store webmail data
+$rcmail_config['db_table_users'] = 'users';
+
+$rcmail_config['db_table_identities'] = 'identities';
+
+$rcmail_config['db_table_contacts'] = 'contacts';
+
+$rcmail_config['db_table_session'] = 'session';
+
+$rcmail_config['db_table_cache'] = 'cache';
+
+$rcmail_config['db_table_messages'] = 'messages';
+
+
+// you can define specific sequence names used in PostgreSQL
+$rcmail_config['db_sequence_users'] = 'user_ids';
+
+$rcmail_config['db_sequence_identities'] = 'identity_ids';
+
+$rcmail_config['db_sequence_contacts'] = 'contact_ids';
+
+$rcmail_config['db_sequence_cache'] = 'cache_ids';
+
+$rcmail_config['db_sequence_messages'] = 'message_ids';
+
+
+// end db config file
+?>
diff --git a/install/debian/11/roundcube/main.inc.php b/install/debian/11/roundcube/main.inc.php
new file mode 100644
index 00000000..55a4e082
--- /dev/null
+++ b/install/debian/11/roundcube/main.inc.php
@@ -0,0 +1,850 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Main configuration file                                               |
+ |                                                                       |
+ | This file is part of the Roundcube Webmail client                     |
+ | Copyright (C) 2005-2011, The Roundcube Dev Team                       |
+ |                                                                       |
+ | Licensed under the GNU General Public License version 3 or            |
+ | any later version with exceptions for skins & plugins.                |
+ | See the README file for a full license statement.                     |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// ----------------------------------
+// LOGGING/DEBUGGING
+// ----------------------------------
+
+// system error reporting: 1 = log; 2 = report (not implemented yet), 4 = show, 8 = trace
+$rcmail_config['debug_level'] = 1;
+
+// log driver:  'syslog' or 'file'.
+$rcmail_config['log_driver'] = 'file';
+
+// date format for log entries
+// (read http://php.net/manual/en/function.date.php for all format characters)  
+$rcmail_config['log_date_format'] = 'd-M-Y H:i:s O';
+
+// Syslog ident string to use, if using the 'syslog' log driver.
+$rcmail_config['syslog_id'] = 'roundcube';
+
+// Syslog facility to use, if using the 'syslog' log driver.
+// For possible values see installer or http://php.net/manual/en/function.openlog.php
+$rcmail_config['syslog_facility'] = LOG_USER;
+
+// Log sent messages to <log_dir>/sendmail or to syslog
+$rcmail_config['smtp_log'] = true;
+
+// Log successful logins to <log_dir>/userlogins or to syslog
+$rcmail_config['log_logins'] = false;
+
+// Log session authentication errors to <log_dir>/session or to syslog
+$rcmail_config['log_session'] = false;
+
+// Log SQL queries to <log_dir>/sql or to syslog
+$rcmail_config['sql_debug'] = false;
+
+// Log IMAP conversation to <log_dir>/imap or to syslog
+$rcmail_config['imap_debug'] = false;
+
+// Log LDAP conversation to <log_dir>/ldap or to syslog
+$rcmail_config['ldap_debug'] = false;
+
+// Log SMTP conversation to <log_dir>/smtp or to syslog
+$rcmail_config['smtp_debug'] = false;
+
+// ----------------------------------
+// IMAP
+// ----------------------------------
+
+// the mail host chosen to perform the log-in
+// leave blank to show a textbox at login, give a list of hosts
+// to display a pulldown menu or set one host as string.
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// Supported replacement variables:
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %s - domain name after the '@' from e-mail address provided at login screen
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['default_host'] = 'localhost';
+
+// TCP port used for IMAP connections
+$rcmail_config['default_port'] = 143;
+
+// IMAP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['imap_auth_type'] = null;
+
+// If you know your imap's folder delimiter, you can specify it here.
+// Otherwise it will be determined automatically
+$rcmail_config['imap_delimiter'] = null;
+
+// If IMAP server doesn't support NAMESPACE extension, but you're
+// using shared folders or personal root folder is non-empty, you'll need to
+// set these options. All can be strings or arrays of strings.
+// Folders need to be ended with directory separator, e.g. "INBOX."
+// (special directory "~" is an exception to this rule)
+// These can be used also to overwrite server's namespaces
+$rcmail_config['imap_ns_personal'] = null;
+$rcmail_config['imap_ns_other']    = null;
+$rcmail_config['imap_ns_shared']   = null;
+
+// By default IMAP capabilities are readed after connection to IMAP server
+// In some cases, e.g. when using IMAP proxy, there's a need to refresh the list
+// after login. Set to True if you've got this case.
+$rcmail_config['imap_force_caps'] = false;
+
+// By default list of subscribed folders is determined using LIST-EXTENDED
+// extension if available. Some servers (dovecot 1.x) returns wrong results
+// for shared namespaces in this case. http://trac.roundcube.net/ticket/1486225
+// Enable this option to force LSUB command usage instead.
+$rcmail_config['imap_force_lsub'] = false;
+
+// Some server configurations (e.g. Courier) doesn't list folders in all namespaces
+// Enable this option to force listing of folders in all namespaces
+$rcmail_config['imap_force_ns'] = false;
+
+// IMAP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['imap_timeout'] = 0;
+
+// Optional IMAP authentication identifier to be used as authorization proxy
+$rcmail_config['imap_auth_cid'] = null;
+
+// Optional IMAP authentication password to be used for imap_auth_cid
+$rcmail_config['imap_auth_pw'] = null;
+
+// Type of IMAP indexes cache. Supported values: 'db', 'apc' and 'memcache'.
+$rcmail_config['imap_cache'] = null;
+
+// Enables messages cache. Only 'db' cache is supported.
+$rcmail_config['messages_cache'] = false;
+
+
+// ----------------------------------
+// SMTP
+// ----------------------------------
+
+// SMTP server host (for sending mails).
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// If left blank, the PHP mail() function is used
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['smtp_server'] = '';
+
+// SMTP port (default is 25; use 587 for STARTTLS or 465 for the
+// deprecated SSL over SMTP (aka SMTPS))
+$rcmail_config['smtp_port'] = 25;
+
+// SMTP username (if required) if you use %u as the username Roundcube
+// will use the current username for login
+$rcmail_config['smtp_user'] = '';
+
+// SMTP password (if required) if you use %p as the password Roundcube
+// will use the current user's password for login
+$rcmail_config['smtp_pass'] = '';
+
+// SMTP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['smtp_auth_type'] = '';
+
+// Optional SMTP authentication identifier to be used as authorization proxy
+$rcmail_config['smtp_auth_cid'] = null;
+
+// Optional SMTP authentication password to be used for smtp_auth_cid
+$rcmail_config['smtp_auth_pw'] = null;
+
+// SMTP HELO host 
+// Hostname to give to the remote server for SMTP 'HELO' or 'EHLO' messages 
+// Leave this blank and you will get the server variable 'server_name' or 
+// localhost if that isn't defined. 
+$rcmail_config['smtp_helo_host'] = '';
+
+// SMTP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['smtp_timeout'] = 0;
+
+// ----------------------------------
+// SYSTEM
+// ----------------------------------
+include_once("/etc/roundcube/debian-db-roundcube.php");
+
+
+// THIS OPTION WILL ALLOW THE INSTALLER TO RUN AND CAN EXPOSE SENSITIVE CONFIG DATA.
+// ONLY ENABLE IT IF YOU'RE REALLY SURE WHAT YOU'RE DOING!
+$rcmail_config['enable_installer'] = false;
+
+// provide an URL where a user can get support for this Roundcube installation
+// PLEASE DO NOT LINK TO THE ROUNDCUBE.NET WEBSITE HERE!
+$rcmail_config['support_url'] = '';
+
+// replace Roundcube logo with this image
+// specify an URL relative to the document root of this Roundcube installation
+$rcmail_config['skin_logo'] = null;
+
+// automatically create a new Roundcube user when log-in the first time.
+// a new user will be created once the IMAP login succeeds.
+// set to false if only registered users can use this service
+$rcmail_config['auto_create_user'] = true;
+
+// use this folder to store log files (must be writeable for apache user)
+// This is used by the 'file' log driver.
+$rcmail_config['log_dir'] = '/var/log/roundcubemail/';
+
+// use this folder to store temp files (must be writeable for apache user)
+$rcmail_config['temp_dir'] = '/tmp';
+
+// lifetime of message cache
+// possible units: s, m, h, d, w
+$rcmail_config['message_cache_lifetime'] = '10d';
+
+// enforce connections over https
+// with this option enabled, all non-secure connections will be redirected.
+// set the port for the ssl connection as value of this option if it differs from the default 443
+$rcmail_config['force_https'] = true;
+
+// tell PHP that it should work as under secure connection
+// even if it doesn't recognize it as secure ($_SERVER['HTTPS'] is not set)
+// e.g. when you're running Roundcube behind a https proxy
+// this option is mutually exclusive to 'force_https' and only either one of them should be set to true.
+$rcmail_config['use_https'] = false;
+
+// Allow browser-autocompletion on login form.
+// 0 - disabled, 1 - username and host only, 2 - username, host, password
+$rcmail_config['login_autocomplete'] = 0;
+
+// Forces conversion of logins to lower case.
+// 0 - disabled, 1 - only domain part, 2 - domain and local part.
+// If users authentication is not case-sensitive this must be enabled.
+// After enabling it all user records need to be updated, e.g. with query:
+// UPDATE users SET username = LOWER(username);
+$rcmail_config['login_lc'] = 0;
+
+// Includes should be interpreted as PHP files
+$rcmail_config['skin_include_php'] = false;
+
+// display software version on login screen
+$rcmail_config['display_version'] = false;
+
+// Session lifetime in minutes
+// must be greater than 'keep_alive'/60
+$rcmail_config['session_lifetime'] = 10;
+
+// session domain: .example.org
+$rcmail_config['session_domain'] = '';
+
+// session name. Default: 'roundcube_sessid'
+$rcmail_config['session_name'] = null;
+
+// Backend to use for session storage. Can either be 'db' (default) or 'memcache'
+// If set to memcache, a list of servers need to be specified in 'memcache_hosts'
+// Make sure the Memcache extension (http://pecl.php.net/package/memcache) version >= 2.0.0 is installed
+$rcmail_config['session_storage'] = 'db';
+
+// Use these hosts for accessing memcached
+// Define any number of hosts in the form of hostname:port or unix:///path/to/sock.file
+$rcmail_config['memcache_hosts'] = null; // e.g. array( 'localhost:11211', '192.168.1.12:11211', 'unix:///var/tmp/memcached.sock' );
+
+// check client IP in session athorization
+$rcmail_config['ip_check'] = false;
+
+// check referer of incoming requests
+$rcmail_config['referer_check'] = false;
+
+// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
+// Possible values: sameorigin|deny. Set to false in order to disable sending them
+$rcmail_config['x_frame_options'] = 'sameorigin';
+
+// this key is used to encrypt the users imap password which is stored
+// in the session record (and the client cookie if remember password is enabled).
+// please provide a string of exactly 24 chars.
+$rcmail_config['des_key'] = 'vtIOjLZo9kffJoqzpSbm5r1r';
+
+// Automatically add this domain to user names for login
+// Only for IMAP servers that require full e-mail addresses for login
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['username_domain'] = '';
+
+// This domain will be used to form e-mail addresses of new users
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['mail_domain'] = '';
+
+// Password charset.
+// Use it if your authentication backend doesn't support UTF-8.
+// Defaults to ISO-8859-1 for backward compatibility
+$rcmail_config['password_charset'] = 'ISO-8859-1';
+
+// How many seconds must pass between emails sent by a user
+$rcmail_config['sendmail_delay'] = 0;
+
+// Maximum number of recipients per message. Default: 0 (no limit)
+$rcmail_config['max_recipients'] = 0; 
+
+// Maximum allowednumber of members of an address group. Default: 0 (no limit)
+// If 'max_recipients' is set this value should be less or equal
+$rcmail_config['max_group_members'] = 0; 
+
+// add this user-agent to message headers when sending
+$rcmail_config['useragent'] = 'Roundcube Webmail/'.RCMAIL_VERSION;
+
+// use this name to compose page titles
+$rcmail_config['product_name'] = 'Roundcube Webmail';
+
+// try to load host-specific configuration
+// see http://trac.roundcube.net/wiki/Howto_Config for more details
+$rcmail_config['include_host_config'] = false;
+
+// path to a text file which will be added to each sent message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer'] = '';
+
+// path to a text file which will be added to each sent HTML message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer_html'] = '';
+
+// add a received header to outgoing mails containing the creators IP and hostname
+$rcmail_config['http_received_header'] = false;
+
+// Whether or not to encrypt the IP address and the host name
+// these could, in some circles, be considered as sensitive information;
+// however, for the administrator, these could be invaluable help
+// when tracking down issues.
+$rcmail_config['http_received_header_encrypt'] = false;
+
+// This string is used as a delimiter for message headers when sending
+// a message via mail() function. Leave empty for auto-detection
+$rcmail_config['mail_header_delimiter'] = NULL;
+
+// number of chars allowed for line when wrapping text.
+// text wrapping is done when composing/sending messages
+$rcmail_config['line_length'] = 72;
+
+// send plaintext messages as format=flowed
+$rcmail_config['send_format_flowed'] = true;
+
+// don't allow these settings to be overriden by the user
+$rcmail_config['dont_override'] = array();
+
+// Set identities access level:
+// 0 - many identities with possibility to edit all params
+// 1 - many identities with possibility to edit all params but not email address
+// 2 - one identity with possibility to edit all params
+// 3 - one identity with possibility to edit all params but not email address
+$rcmail_config['identities_level'] = 0;
+
+// Mimetypes supported by the browser.
+// attachments of these types will open in a preview window
+// either a comma-separated list or an array: 'text/plain,text/html,text/xml,image/jpeg,image/gif,image/png,application/pdf'
+$rcmail_config['client_mimetypes'] = null;  # null == default
+
+// mime magic database
+$rcmail_config['mime_magic'] = null;
+
+// path to imagemagick identify binary
+$rcmail_config['im_identify_path'] = null;
+
+// path to imagemagick convert binary
+$rcmail_config['im_convert_path'] = null;
+
+// maximum size of uploaded contact photos in pixel
+$rcmail_config['contact_photo_size'] = 160;
+
+// Enable DNS checking for e-mail address validation
+$rcmail_config['email_dns_check'] = false;
+
+// ----------------------------------
+// PLUGINS
+// ----------------------------------
+
+// List of active plugins (in plugins/ directory)
+$rcmail_config['plugins'] = array('password');
+
+// ----------------------------------
+// USER INTERFACE
+// ----------------------------------
+
+// default messages sort column. Use empty value for default server's sorting, 
+// or 'arrival', 'date', 'subject', 'from', 'to', 'fromto', 'size', 'cc'
+$rcmail_config['message_sort_col'] = '';
+
+// default messages sort order
+$rcmail_config['message_sort_order'] = 'DESC';
+
+// These cols are shown in the message list. Available cols are:
+// subject, from, to, fromto, cc, replyto, date, size, status, flag, attachment, 'priority'
+$rcmail_config['list_cols'] = array('subject', 'status', 'fromto', 'date', 'size', 'flag', 'attachment');
+
+// the default locale setting (leave empty for auto-detection)
+// RFC1766 formatted language name like en_US, de_DE, de_CH, fr_FR, pt_BR
+$rcmail_config['language'] = null;
+
+// use this format for date display (date or strftime format)
+$rcmail_config['date_format'] = 'Y-m-d';
+
+// give this choice of date formats to the user to select from
+$rcmail_config['date_formats'] = array('Y-m-d', 'd-m-Y', 'Y/m/d', 'm/d/Y', 'd/m/Y', 'd.m.Y', 'j.n.Y');
+
+// use this format for time display (date or strftime format)
+$rcmail_config['time_format'] = 'H:i';
+
+// give this choice of time formats to the user to select from
+$rcmail_config['time_formats'] = array('G:i', 'H:i', 'g:i a', 'h:i A');
+
+// use this format for short date display (derived from date_format and time_format)
+$rcmail_config['date_short'] = 'D H:i';
+
+// use this format for detailed date/time formatting (derived from date_format and time_format)
+$rcmail_config['date_long'] = 'Y-m-d H:i';
+
+// store draft message is this mailbox
+// leave blank if draft messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['drafts_mbox'] = 'Drafts';
+
+// store spam messages in this mailbox
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['junk_mbox'] = 'Spam';
+
+// store sent message is this mailbox
+// leave blank if sent messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['sent_mbox'] = 'Sent';
+
+// move messages to this folder when deleting them
+// leave blank if they should be deleted directly
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['trash_mbox'] = 'Trash';
+
+// display these folders separately in the mailbox list.
+// these folders will also be displayed with localized names
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['default_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+$rcmail_config['default_imap_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+
+// automatically create the above listed default folders on first login
+$rcmail_config['create_default_folders'] = true;
+
+// protect the default folders from renames, deletes, and subscription changes
+$rcmail_config['protect_default_folders'] = true;
+
+// if in your system 0 quota means no limit set this option to true 
+$rcmail_config['quota_zero_as_unlimited'] = false;
+
+// Make use of the built-in spell checker. It is based on GoogieSpell.
+// Since Google only accepts connections over https your PHP installatation
+// requires to be compiled with Open SSL support
+$rcmail_config['enable_spellcheck'] = true;
+
+// Enables spellchecker exceptions dictionary.
+// Setting it to 'shared' will make the dictionary shared by all users.
+$rcmail_config['spellcheck_dictionary'] = false;
+
+// Set the spell checking engine. 'googie' is the default. 'pspell' is also available,
+// but requires the Pspell extensions. When using Nox Spell Server, also set 'googie' here.
+$rcmail_config['spellcheck_engine'] = 'googie';
+
+// For a locally installed Nox Spell Server, please specify the URI to call it.
+// Get Nox Spell Server from http://orangoo.com/labs/?page_id=72
+// Leave empty to use the Google spell checking service, what means
+// that the message content will be sent to Google in order to check spelling
+$rcmail_config['spellcheck_uri'] = '';
+
+// These languages can be selected for spell checking.
+// Configure as a PHP style hash array: array('en'=>'English', 'de'=>'Deutsch');
+// Leave empty for default set of available language.
+$rcmail_config['spellcheck_languages'] = NULL;
+
+// Makes that words with all letters capitalized will be ignored (e.g. GOOGLE)
+$rcmail_config['spellcheck_ignore_caps'] = false;
+
+// Makes that words with numbers will be ignored (e.g. g00gle)
+$rcmail_config['spellcheck_ignore_nums'] = false;
+
+// Makes that words with symbols will be ignored (e.g. g@@gle)
+$rcmail_config['spellcheck_ignore_syms'] = false;
+
+// Use this char/string to separate recipients when composing a new message
+$rcmail_config['recipients_separator'] = ',';
+
+// don't let users set pagesize to more than this value if set
+$rcmail_config['max_pagesize'] = 200;
+
+// Minimal value of user's 'keep_alive' setting (in seconds)
+// Must be less than 'session_lifetime'
+$rcmail_config['min_keep_alive'] = 60;
+
+// Enables files upload indicator. Requires APC installed and enabled apc.rfc1867 option.
+// By default refresh time is set to 1 second. You can set this value to true
+// or any integer value indicating number of seconds.
+$rcmail_config['upload_progress'] = false;
+
+// Specifies for how many seconds the Undo button will be available
+// after object delete action. Currently used with supporting address book sources.
+// Setting it to 0, disables the feature.
+$rcmail_config['undo_timeout'] = 0;
+
+// ----------------------------------
+// ADDRESSBOOK SETTINGS
+// ----------------------------------
+
+// This indicates which type of address book to use. Possible choises:
+// 'sql' (default) and 'ldap'.
+// If set to 'ldap' then it will look at using the first writable LDAP
+// address book as the primary address book and it will not display the
+// SQL address book in the 'Address Book' view.
+$rcmail_config['address_book_type'] = 'sql';
+
+// In order to enable public ldap search, configure an array like the Verisign
+// example further below. if you would like to test, simply uncomment the example.
+// Array key must contain only safe characters, ie. a-zA-Z0-9_
+$rcmail_config['ldap_public'] = array();
+
+// If you are going to use LDAP for individual address books, you will need to 
+// set 'user_specific' to true and use the variables to generate the appropriate DNs to access it.
+//
+// The recommended directory structure for LDAP is to store all the address book entries
+// under the users main entry, e.g.:
+//
+//  o=root
+//   ou=people
+//    uid=user@domain
+//  mail=contact@contactdomain
+//
+// So the base_dn would be uid=%fu,ou=people,o=root
+// The bind_dn would be the same as based_dn or some super user login.
+/* 
+ * example config for Verisign directory
+ *
+$rcmail_config['ldap_public']['Verisign'] = array(
+  'name'          => 'Verisign.com',
+  // Replacement variables supported in host names:
+  // %h - user's IMAP hostname
+  // %n - http hostname ($_SERVER['SERVER_NAME'])
+  // %d - domain (http hostname without the first part)
+  // %z - IMAP domain (IMAP hostname without the first part)
+  // For example %n = mail.domain.tld, %d = domain.tld
+  'hosts'         => array('directory.verisign.com'),
+  'port'          => 389,
+  'use_tls'	      => false,
+  'ldap_version'  => 3,       // using LDAPv3
+  'user_specific' => false,   // If true the base_dn, bind_dn and bind_pass default to the user's IMAP login.
+  // %fu - The full username provided, assumes the username is an email
+  //       address, uses the username_domain value if not an email address.
+  // %u  - The username prior to the '@'.
+  // %d  - The domain name after the '@'.
+  // %dc - The domain name hierarchal string e.g. "dc=test,dc=domain,dc=com"
+  // %dn - DN found by ldap search when search_filter/search_base_dn are used
+  'base_dn'       => '',
+  'bind_dn'       => '',
+  'bind_pass'     => '',
+  // It's possible to bind for an individual address book
+  // The login name is used to search for the DN to bind with
+  'search_base_dn' => '',
+  'search_filter'  => '',   // e.g. '(&(objectClass=posixAccount)(uid=%u))'
+  // DN and password to bind as before searching for bind DN, if anonymous search is not allowed
+  'search_bind_dn' => '',
+  'search_bind_pw' => '',
+  // Default for %dn variable if search doesn't return DN value
+  'search_dn_default' => '',
+  // Optional authentication identifier to be used as SASL authorization proxy
+  // bind_dn need to be empty
+  'auth_cid'       => '',
+  // SASL authentication method (for proxy auth), e.g. DIGEST-MD5
+  'auth_method'    => '',
+  // Indicates if the addressbook shall be hidden from the list.
+  // With this option enabled you can still search/view contacts.
+  'hidden'        => false,
+  // Indicates if the addressbook shall not list contacts but only allows searching.
+  'searchonly'    => false,
+  // Indicates if we can write to the LDAP directory or not.
+  // If writable is true then these fields need to be populated:
+  // LDAP_Object_Classes, required_fields, LDAP_rdn
+  'writable'       => false,
+  // To create a new contact these are the object classes to specify
+  // (or any other classes you wish to use).
+  'LDAP_Object_Classes' => array('top', 'inetOrgPerson'),
+  // The RDN field that is used for new entries, this field needs
+  // to be one of the search_fields, the base of base_dn is appended
+  // to the RDN to insert into the LDAP directory.
+  'LDAP_rdn'       => 'cn',
+  // The required fields needed to build a new contact as required by
+  // the object classes (can include additional fields not required by the object classes).
+  'required_fields' => array('cn', 'sn', 'mail'),
+  'search_fields'   => array('mail', 'cn'),  // fields to search in
+  // mapping of contact fields to directory attributes
+  //   for every attribute one can specify the number of values (limit) allowed.
+  //   default is 1, a wildcard * means unlimited
+  'fieldmap' => array(
+    // Roundcube  => LDAP:limit
+    'name'        => 'cn',
+    'surname'     => 'sn',
+    'firstname'   => 'givenName',
+    'title'       => 'title',
+    'email'       => 'mail:*',
+    'phone:home'  => 'homePhone',
+    'phone:work'  => 'telephoneNumber',
+    'phone:mobile' => 'mobile',
+    'phone:pager' => 'pager',
+    'street'      => 'street',
+    'zipcode'     => 'postalCode',
+    'region'      => 'st',
+    'locality'    => 'l',
+// if you uncomment country, you need to modify 'sub_fields' above
+//    'country'     => 'c',
+    'department'  => 'departmentNumber',
+    'notes'       => 'description',
+// these currently don't work:
+//    'phone:workfax' => 'facsimileTelephoneNumber',
+//    'photo'        => 'jpegPhoto',
+//    'organization' => 'o',
+//    'manager'      => 'manager',
+//    'assistant'    => 'secretary',
+  ),
+  // Map of contact sub-objects (attribute name => objectClass(es)), e.g. 'c' => 'country'
+  'sub_fields' => array(),
+  'sort'          => 'cn',    // The field to sort the listing by.
+  'scope'         => 'sub',   // search mode: sub|base|list
+  'filter'        => '(objectClass=inetOrgPerson)',      // used for basic listing (if not empty) and will be &'d with search queries. example: status=act
+  'fuzzy_search'  => true,    // server allows wildcard search
+  'vlv'           => false,   // Enable Virtual List View to more efficiently fetch paginated data (if server supports it)
+  'numsub_filter' => '(objectClass=organizationalUnit)',   // with VLV, we also use numSubOrdinates to query the total number of records. Set this filter to get all numSubOrdinates attributes for counting
+  'sizelimit'     => '0',     // Enables you to limit the count of entries fetched. Setting this to 0 means no limit.
+  'timelimit'     => '0',     // Sets the number of seconds how long is spend on the search. Setting this to 0 means no limit.
+  'referrals'     => true|false,  // Sets the LDAP_OPT_REFERRALS option. Mostly used in multi-domain Active Directory setups
+
+  // definition for contact groups (uncomment if no groups are supported)
+  // for the groups base_dn, the user replacements %fu, %u, $d and %dc work as for base_dn (see above)
+  // if the groups base_dn is empty, the contact base_dn is used for the groups as well
+  // -> in this case, assure that groups and contacts are separated due to the concernig filters! 
+  'groups'        => array(
+    'base_dn'     => '',
+    'scope'       => 'sub',   // search mode: sub|base|list
+    'filter'      => '(objectClass=groupOfNames)',
+    'object_classes' => array("top", "groupOfNames"),
+    'member_attr'  => 'member',   // name of the member attribute, e.g. uniqueMember
+    'name_attr'    => 'cn',       // attribute to be used as group name
+  ),
+);
+*/
+
+// An ordered array of the ids of the addressbooks that should be searched
+// when populating address autocomplete fields server-side. ex: array('sql','Verisign');
+$rcmail_config['autocomplete_addressbooks'] = array('sql');
+
+// The minimum number of characters required to be typed in an autocomplete field
+// before address books will be searched. Most useful for LDAP directories that
+// may need to do lengthy results building given overly-broad searches
+$rcmail_config['autocomplete_min_length'] = 1;
+
+// Number of parallel autocomplete requests.
+// If there's more than one address book, n parallel (async) requests will be created,
+// where each request will search in one address book. By default (0), all address
+// books are searched in one request.
+$rcmail_config['autocomplete_threads'] = 0;
+
+// Max. numer of entries in autocomplete popup. Default: 15.
+$rcmail_config['autocomplete_max'] = 15;
+
+// show address fields in this order
+// available placeholders: {street}, {locality}, {zipcode}, {country}, {region}
+$rcmail_config['address_template'] = '{street}<br/>{locality} {zipcode}<br/>{country} {region}';
+
+// Matching mode for addressbook search (including autocompletion)
+// 0 - partial (*abc*), default
+// 1 - strict (abc)
+// 2 - prefix (abc*)
+// Note: For LDAP sources fuzzy_search must be enabled to use 'partial' or 'prefix' mode
+$rcmail_config['addressbook_search_mode'] = 0;
+
+// ----------------------------------
+// USER PREFERENCES
+// ----------------------------------
+
+// Use this charset as fallback for message decoding
+//$rcmail_config['default_charset'] = 'ISO-8859-1';
+$rcmail_config['default_charset'] = 'UTF-8';
+
+// skin name: folder from skins/
+$rcmail_config['skin'] = 'larry';
+
+// show up to X items in messages list view
+$rcmail_config['mail_pagesize'] = 50;
+
+// show up to X items in contacts list view
+$rcmail_config['addressbook_pagesize'] = 50;
+
+// sort contacts by this col (preferably either one of name, firstname, surname)
+$rcmail_config['addressbook_sort_col'] = 'surname';
+
+// the way how contact names are displayed in the list
+// 0: display name
+// 1: (prefix) firstname middlename surname (suffix)
+// 2: (prefix) surname firstname middlename (suffix)
+// 3: (prefix) surname, firstname middlename (suffix)
+$rcmail_config['addressbook_name_listing'] = 0;
+
+// use this timezone to display date/time
+// valid timezone identifers are listed here: php.net/manual/en/timezones.php
+// 'auto' will use the browser's timezone settings
+$rcmail_config['timezone'] = 'auto';
+
+// prefer displaying HTML messages
+$rcmail_config['prefer_html'] = true;
+
+// display remote inline images
+// 0 - Never, always ask
+// 1 - Ask if sender is not in address book
+// 2 - Always show inline images
+$rcmail_config['show_images'] = 0;
+
+// compose html formatted messages by default
+// 0 - never, 1 - always, 2 - on reply to HTML message only 
+$rcmail_config['htmleditor'] = 0;
+
+// show pretty dates as standard
+$rcmail_config['prettydate'] = true;
+
+// save compose message every 300 seconds (5min)
+$rcmail_config['draft_autosave'] = 300;
+
+// default setting if preview pane is enabled
+$rcmail_config['preview_pane'] = false;
+
+// Mark as read when viewed in preview pane (delay in seconds)
+// Set to -1 if messages in preview pane should not be marked as read
+$rcmail_config['preview_pane_mark_read'] = 0;
+
+// Clear Trash on logout
+$rcmail_config['logout_purge'] = false;
+
+// Compact INBOX on logout
+$rcmail_config['logout_expunge'] = false;
+
+// Display attached images below the message body 
+$rcmail_config['inline_images'] = true;
+
+// Encoding of long/non-ascii attachment names:
+// 0 - Full RFC 2231 compatible
+// 1 - RFC 2047 for 'name' and RFC 2231 for 'filename' parameter (Thunderbird's default)
+// 2 - Full 2047 compatible
+$rcmail_config['mime_param_folding'] = 1;
+
+// Set true if deleted messages should not be displayed
+// This will make the application run slower
+$rcmail_config['skip_deleted'] = false;
+
+// Set true to Mark deleted messages as read as well as deleted
+// False means that a message's read status is not affected by marking it as deleted
+$rcmail_config['read_when_deleted'] = true;
+
+// Set to true to never delete messages immediately
+// Use 'Purge' to remove messages marked as deleted
+$rcmail_config['flag_for_deletion'] = false;
+
+// Default interval for keep-alive/check-recent requests (in seconds)
+// Must be greater than or equal to 'min_keep_alive' and less than 'session_lifetime'
+$rcmail_config['keep_alive'] = 60;
+
+// If true all folders will be checked for recent messages
+$rcmail_config['check_all_folders'] = false;
+
+// If true, after message delete/move, the next message will be displayed
+$rcmail_config['display_next'] = false;
+
+// 0 - Do not expand threads 
+// 1 - Expand all threads automatically 
+// 2 - Expand only threads with unread messages 
+$rcmail_config['autoexpand_threads'] = 0;
+
+// When replying place cursor above original message (top posting)
+$rcmail_config['top_posting'] = false;
+
+// When replying strip original signature from message
+$rcmail_config['strip_existing_sig'] = true;
+
+// Show signature:
+// 0 - Never
+// 1 - Always
+// 2 - New messages only
+// 3 - Forwards and Replies only
+$rcmail_config['show_sig'] = 1;
+
+// When replying or forwarding place sender's signature above existing message
+$rcmail_config['sig_above'] = false;
+
+// Use MIME encoding (quoted-printable) for 8bit characters in message body
+$rcmail_config['force_7bit'] = false;
+
+// Defaults of the search field configuration.
+// The array can contain a per-folder list of header fields which should be considered when searching
+// The entry with key '*' stands for all folders which do not have a specific list set.
+// Please note that folder names should to be in sync with $rcmail_config['default_folders']
+$rcmail_config['search_mods'] = null;  // Example: array('*' => array('subject'=>1, 'from'=>1), 'Sent' => array('subject'=>1, 'to'=>1));
+
+// Defaults of the addressbook search field configuration.
+$rcmail_config['addressbook_search_mods'] = null;  // Example: array('name'=>1, 'firstname'=>1, 'surname'=>1, 'email'=>1, '*'=>1);
+
+// 'Delete always'
+// This setting reflects if mail should be always deleted
+// when moving to Trash fails. This is necessary in some setups
+// when user is over quota and Trash is included in the quota.
+$rcmail_config['delete_always'] = false;
+
+// Directly delete messages in Junk instead of moving to Trash
+$rcmail_config['delete_junk'] = true;
+
+// Behavior if a received message requests a message delivery notification (read receipt)
+// 0 = ask the user, 1 = send automatically, 2 = ignore (never send or ask)
+// 3 = send automatically if sender is in addressbook, otherwise ask the user
+// 4 = send automatically if sender is in addressbook, otherwise ignore
+$rcmail_config['mdn_requests'] = 0;
+
+// Return receipt checkbox default state
+$rcmail_config['mdn_default'] = 0;
+
+// Delivery Status Notification checkbox default state
+$rcmail_config['dsn_default'] = 0;
+
+// Place replies in the folder of the message being replied to
+$rcmail_config['reply_same_folder'] = false;
+
+// Sets default mode of Forward feature to "forward as attachment"
+$rcmail_config['forward_attachment'] = false;
+
+// Defines address book (internal index) to which new contacts will be added
+// By default it is the first writeable addressbook.
+// Note: Use '0' for built-in address book.
+$rcmail_config['default_addressbook'] = null;
+
+// Enables spell checking before sending a message.
+$rcmail_config['spellcheck_before_send'] = false;
+
+// Skip alternative email addresses in autocompletion (show one address per contact)
+$rcmail_config['autocomplete_single'] = false;
+
+// Default font for composed HTML message.
+// Supported values: Andale Mono, Arial, Arial Black, Book Antiqua, Courier New,
+// Georgia, Helvetica, Impact, Tahoma, Terminal, Times New Roman, Trebuchet MS, Verdana
+$rcmail_config['default_font'] = '';
+
+// end of config file
diff --git a/install/debian/11/roundcube/vesta.php b/install/debian/11/roundcube/vesta.php
new file mode 100644
index 00000000..b3dd167f
--- /dev/null
+++ b/install/debian/11/roundcube/vesta.php
@@ -0,0 +1,73 @@
+<?php
+
+/**
+ * Vesta Control Panel Password Driver
+ *
+ * @version 1.0
+ * @author Serghey Rodin <skid@vestacp.com>
+ */
+class rcube_vesta_password {
+    function save($curpass, $passwd)
+    {
+        $rcmail = rcmail::get_instance();
+        $vesta_host = $rcmail->config->get('password_vesta_host');
+
+        if (empty($vesta_host))
+        {
+            $vesta_host = 'localhost';
+        }
+
+        $vesta_port = $rcmail->config->get('password_vesta_port');
+        if (empty($vesta_port))
+        {
+            $vesta_port = '8083';
+        }
+
+        $postvars = array(
+          'email' => $_SESSION['username'],
+          'password' => $curpass,
+          'new' => $passwd
+        );
+
+        $postdata = http_build_query($postvars);
+
+        $send  = 'POST /reset/mail/ HTTP/1.1' . PHP_EOL;
+        $send .= 'Host: ' . $vesta_host . PHP_EOL;
+        $send .= 'User-Agent: PHP Script' . PHP_EOL;
+        $send .= 'Content-length: ' . strlen($postdata) . PHP_EOL;
+        $send .= 'Content-type: application/x-www-form-urlencoded' . PHP_EOL;
+        $send .= 'Connection: close' . PHP_EOL;
+        $send .= PHP_EOL;
+        $send .= $postdata . PHP_EOL . PHP_EOL;
+
+        //$fp = fsockopen('ssl://' . $vesta_host, $vesta_port);
+        $errno = "";
+        $errstr = "";
+        $context = stream_context_create();
+
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer_name', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_host', false);
+        $result = stream_context_set_option($context, 'ssl', 'allow_self_signed', true);
+
+        $fp = stream_socket_client('ssl://' . $vesta_host . ':'.$vesta_port, $errno, $errstr, 60, STREAM_CLIENT_CONNECT, $context);
+        fputs($fp, $send);
+        $result = fread($fp, 2048);
+        fclose($fp);
+
+        $fp = fopen("/tmp/roundcube.log", 'w');
+        fwrite($fp, "test ok");
+        fwrite($fp, "\n");
+        fclose($fp);
+
+
+        if(strpos($result, 'ok') && !strpos($result, 'error'))
+        {
+            return PASSWORD_SUCCESS;
+        }
+        else {
+            return PASSWORD_ERROR;
+        }
+
+    }
+}
diff --git a/install/debian/11/sudo/admin b/install/debian/11/sudo/admin
new file mode 100644
index 00000000..331fa1f2
--- /dev/null
+++ b/install/debian/11/sudo/admin
@@ -0,0 +1,8 @@
+# Created by vesta installer
+Defaults env_keep="VESTA"
+Defaults:admin !syslog
+Defaults:admin !requiretty
+Defaults:root !requiretty
+
+# sudo is limited to vesta scripts
+admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/debian/11/templates/dns/child-ns.tpl b/install/debian/11/templates/dns/child-ns.tpl
new file mode 100755
index 00000000..42c046e4
--- /dev/null
+++ b/install/debian/11/templates/dns/child-ns.tpl
@@ -0,0 +1,14 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns1.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns2.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ns1' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='ns2' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/11/templates/dns/default.tpl b/install/debian/11/templates/dns/default.tpl
new file mode 100755
index 00000000..e0a37e62
--- /dev/null
+++ b/install/debian/11/templates/dns/default.tpl
@@ -0,0 +1,18 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/11/templates/dns/gmail.tpl b/install/debian/11/templates/dns/gmail.tpl
new file mode 100755
index 00000000..219c9d24
--- /dev/null
+++ b/install/debian/11/templates/dns/gmail.tpl
@@ -0,0 +1,12 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='localhost' TYPE='A' PRIORITY='' VALUE='127.0.0.1' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='MX' PRIORITY='1' VALUE='ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT1.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT2.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT3.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT4.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.google.com ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/11/templates/dns/office365.tpl b/install/debian/11/templates/dns/office365.tpl
new file mode 100644
index 00000000..dcf556e1
--- /dev/null
+++ b/install/debian/11/templates/dns/office365.tpl
@@ -0,0 +1,22 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:spf.protection.outlook.com -all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='@' TYPE='MX' PRIORITY='0' VALUE='XXXXXXX.mail.protection.outlook.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"MS=msXXXX"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='autodiscover' TYPE='CNAME' PRIORITY='' VALUE='autodiscover.outlook.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='sip' TYPE='CNAME' PRIORITY='' VALUE='sipdir.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='lyncdiscover' TYPE='CNAME' PRIORITY='' VALUE='webdir.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='19' RECORD='enterpriseregistration' TYPE='CNAME' PRIORITY='' VALUE='enterpriseregistration.windows.net.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='20' RECORD='enterpriseenrollment' TYPE='CNAME' PRIORITY='' VALUE='enterpriseenrollment.manage.microsoft.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='21' RECORD='_sip._tls' TYPE='SRV' PRIORITY='100 1 443' VALUE='sipdir.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='22' RECORD='_sipfederationtls._tcp' TYPE='SRV' PRIORITY='100 1 5061' VALUE='sipfed.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/11/templates/dns/yandex.tpl b/install/debian/11/templates/dns/yandex.tpl
new file mode 100644
index 00000000..4ce768fe
--- /dev/null
+++ b/install/debian/11/templates/dns/yandex.tpl
@@ -0,0 +1,16 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='CNAME' PRIORITY='' VALUE='domain.mail.yandex.net.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mx.yandex.net.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.yandex.net ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"yandex-verification: XXXXXXXXXXXXXXX"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-73-public.sh b/install/debian/11/templates/web/apache2/PHP-FPM-73-public.sh
new file mode 100755
index 00000000..cc55b61e
--- /dev/null
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-73-public.sh
@@ -0,0 +1,88 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.3-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+request_terminate_timeout = 30s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_73" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_73)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_73
+    service php7.3-fpm restart
+fi
+
+if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.3/fpm/pool.d/www.conf
+fi
+
+exit 0
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-73-public.stpl b/install/debian/11/templates/web/apache2/PHP-FPM-73-public.stpl
new file mode 100644
index 00000000..9660c234
--- /dev/null
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-73-public.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-73-public.tpl b/install/debian/11/templates/web/apache2/PHP-FPM-73-public.tpl
new file mode 100644
index 00000000..892c0d1f
--- /dev/null
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-73-public.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-73.sh b/install/debian/11/templates/web/apache2/PHP-FPM-73.sh
new file mode 100755
index 00000000..72f9cec6
--- /dev/null
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-73.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.3-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 90s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 30
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_73" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_73)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_73
+    service php7.3-fpm restart
+fi
+if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.3/fpm/pool.d/www.conf
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    service php7.4-fpm restart
+fi
+
+exit 0
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-73.stpl b/install/debian/11/templates/web/apache2/PHP-FPM-73.stpl
new file mode 100644
index 00000000..28224413
--- /dev/null
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-73.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-73.tpl b/install/debian/11/templates/web/apache2/PHP-FPM-73.tpl
new file mode 100644
index 00000000..7bec5e73
--- /dev/null
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-73.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/11/templates/web/awstats/awstats.tpl b/install/debian/11/templates/web/awstats/awstats.tpl
new file mode 100755
index 00000000..9a92e0fd
--- /dev/null
+++ b/install/debian/11/templates/web/awstats/awstats.tpl
@@ -0,0 +1,133 @@
+LogFile="/var/log/%web_system%/domains/%domain%.log"
+LogType=W
+LogFormat=1
+LogSeparator=" "
+SiteDomain="%domain_idn%"
+HostAliases="%alias_idn%"
+DirData="%home%/%user%/web/%domain%/stats"
+DirCgi="/vstats"
+DirIcons="/vstats/icon"
+AllowToUpdateStatsFromBrowser=0
+AllowFullYearView=2
+EnableLockForUpdate=1
+DNSStaticCacheFile="dnscache.txt"
+DNSLastUpdateCacheFile="dnscachelastupdate.txt"
+SkipDNSLookupFor=""
+AllowAccessFromWebToAuthenticatedUsersOnly=0
+AllowAccessFromWebToFollowingAuthenticatedUsers=""
+AllowAccessFromWebToFollowingIPAddresses=""
+CreateDirDataIfNotExists=0
+BuildHistoryFormat=text
+BuildReportFormat=html
+SaveDatabaseFilesWithPermissionsForEveryone=0
+PurgeLogFile=0
+ArchiveLogRecords=0
+KeepBackupOfHistoricFiles=1
+DefaultFile="index.php index.html"
+SkipHosts="127.0.0.1
+SkipUserAgents=""
+SkipFiles=""
+SkipReferrersBlackList=""
+OnlyHosts=""
+OnlyUserAgents=""
+OnlyUsers=""
+OnlyFiles=""
+NotPageList="css js class gif jpg jpeg png bmp ico rss xml swf"
+ValidHTTPCodes="200 304"
+ValidSMTPCodes="1 250"
+AuthenticatedUsersNotCaseSensitive=0
+URLNotCaseSensitive=0
+URLWithAnchor=0
+URLQuerySeparators="?;"
+URLWithQuery=0
+URLWithQueryWithOnlyFollowingParameters=""
+URLWithQueryWithoutFollowingParameters=""
+URLReferrerWithQuery=0
+WarningMessages=1
+ErrorMessages=""
+DebugMessages=0
+NbOfLinesForCorruptedLog=50
+WrapperScript=""
+DecodeUA=0
+MiscTrackerUrl="/js/awstats_misc_tracker.js"
+UseFramesWhenCGI=1
+DetailedReportsOnNewWindows=1
+Expires=3600
+MaxRowsInHTMLOutput=1000
+Lang="auto"
+DirLang="./lang"
+ShowMenu=1
+ShowSummary=UVPHB
+ShowMonthStats=UVPHB
+ShowDaysOfMonthStats=VPHB
+ShowDaysOfWeekStats=PHB
+ShowHoursStats=PHB
+ShowDomainsStats=PHB
+ShowHostsStats=PHBL
+ShowAuthenticatedUsers=0
+ShowRobotsStats=HBL
+ShowWormsStats=0
+ShowEMailSenders=0
+ShowEMailReceivers=0
+ShowSessionsStats=1
+ShowPagesStats=PBEX
+ShowFileTypesStats=HB
+ShowFileSizesStats=0
+ShowDownloadsStats=HB
+ShowOSStats=1
+ShowBrowsersStats=1
+ShowScreenSizeStats=0
+ShowOriginStats=PH
+ShowKeyphrasesStats=1
+ShowKeywordsStats=1
+ShowMiscStats=a
+ShowHTTPErrorsStats=1
+ShowSMTPErrorsStats=0
+ShowClusterStats=0
+AddDataArrayMonthStats=1
+AddDataArrayShowDaysOfMonthStats=1
+AddDataArrayShowDaysOfWeekStats=1
+AddDataArrayShowHoursStats=1
+IncludeInternalLinksInOriginSection=0
+MaxNbOfDomain = 10
+MinHitDomain  = 1
+MaxNbOfHostsShown = 10
+MinHitHost    = 1
+MaxNbOfLoginShown = 10
+MinHitLogin   = 1
+MaxNbOfRobotShown = 10
+MinHitRobot   = 1
+MaxNbOfDownloadsShown = 10
+MinHitDownloads = 1
+MaxNbOfPageShown = 10
+MinHitFile    = 1
+MaxNbOfOsShown = 10
+MinHitOs      = 1
+MaxNbOfBrowsersShown = 10
+MinHitBrowser = 1
+MaxNbOfScreenSizesShown = 5
+MinHitScreenSize = 1
+MaxNbOfWindowSizesShown = 5
+MinHitWindowSize = 1
+MaxNbOfRefererShown = 10
+MinHitRefer   = 1
+MaxNbOfKeyphrasesShown = 10
+MinHitKeyphrase = 1
+MaxNbOfKeywordsShown = 10
+MinHitKeyword = 1
+MaxNbOfEMailsShown = 20
+MinHitEMail   = 1
+FirstDayOfWeek=0
+ShowFlagLinks=""
+ShowLinksOnUrl=1
+UseHTTPSLinkForUrl=""
+MaxLengthOfShownURL=64
+HTMLHeadSection=""
+HTMLEndSection=""
+MetaRobot=0
+Logo="awstats_logo6.png"
+LogoLink="http://awstats.sourceforge.net"
+BarWidth   = 260
+BarHeight  = 90
+StyleSheet=""
+ExtraTrackedRowsLimit=500
diff --git a/install/debian/11/templates/web/awstats/index.tpl b/install/debian/11/templates/web/awstats/index.tpl
new file mode 100755
index 00000000..9df9bb5c
--- /dev/null
+++ b/install/debian/11/templates/web/awstats/index.tpl
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+    <title>Awstats log analyzer </title>
+</head>
+<frameset rows="60,*" cols="*">
+    <frame src="nav.html" name="nav" scrolling="no" noresize>
+    <frame src="%month%/index.html" name="stats">
+</frameset>
+</html>
diff --git a/install/debian/11/templates/web/awstats/nav.tpl b/install/debian/11/templates/web/awstats/nav.tpl
new file mode 100755
index 00000000..f29bed68
--- /dev/null
+++ b/install/debian/11/templates/web/awstats/nav.tpl
@@ -0,0 +1,23 @@
+<html>
+<head>
+    <title>Awstats navigation</title>
+    <script language="javascript">
+        function change() {
+            top.stats.location= document.period.select.value + '/';
+        }
+    </script>
+</head>
+<body>
+<table width="100%" border="0" cellspacing="0" cellpadding="0">
+<tr>
+    <td><img src="logo.png" alt="vesta"></td>
+    <td><form name="period" action="" method="get">
+        <select name="select" ONCHANGE="change()">
+%select_month%
+        </select>
+    </form>
+    </td>
+</tr>
+</table>
+</body>
+</html>
diff --git a/install/debian/11/templates/web/nginx/caching.sh b/install/debian/11/templates/web/nginx/caching.sh
new file mode 100755
index 00000000..09d8efe7
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/caching.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+user=$1
+domain=$2
+ip=$3
+home=$4
+docroot=$5
+
+str="proxy_cache_path /var/cache/nginx/$domain levels=2" 
+str="$str keys_zone=$domain:10m inactive=60m max_size=512m;" 
+conf='/etc/nginx/conf.d/01_caching_pool.conf'
+if [ -e "$conf" ]; then
+    if [ -z "$(grep "=${domain}:" $conf)" ]; then
+        echo "$str" >> $conf
+    fi
+else
+    echo "$str" >> $conf
+fi
+
diff --git a/install/debian/11/templates/web/nginx/caching.stpl b/install/debian/11/templates/web/nginx/caching.stpl
new file mode 100644
index 00000000..868e2fe9
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/caching.stpl
@@ -0,0 +1,43 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/caching.tpl b/install/debian/11/templates/web/nginx/caching.tpl
new file mode 100644
index 00000000..36761b65
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/caching.tpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/force-https-legacy.stpl b/install/debian/11/templates/web/nginx/force-https-legacy.stpl
new file mode 100644
index 00000000..01a4eea3
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/force-https-legacy.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/force-https-legacy.tpl b/install/debian/11/templates/web/nginx/force-https-legacy.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/force-https-legacy.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/11/templates/web/nginx/force-https-public.stpl b/install/debian/11/templates/web/nginx/force-https-public.stpl
new file mode 100644
index 00000000..22951ae5
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/force-https-public.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/11/templates/web/nginx/force-https-public.tpl b/install/debian/11/templates/web/nginx/force-https-public.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/force-https-public.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
new file mode 100644
index 00000000..dac7adaf
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl b/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/11/templates/web/nginx/force-https.stpl b/install/debian/11/templates/web/nginx/force-https.stpl
new file mode 100644
index 00000000..4a8185c8
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/force-https.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/force-https.tpl b/install/debian/11/templates/web/nginx/force-https.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/11/templates/web/nginx/hosting-legacy.sh b/install/debian/11/templates/web/nginx/hosting-legacy.sh
new file mode 100755
index 00000000..eeed37ef
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/hosting-legacy.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/11/templates/web/nginx/hosting-legacy.stpl b/install/debian/11/templates/web/nginx/hosting-legacy.stpl
new file mode 100644
index 00000000..cc0370c6
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/hosting-legacy.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/11/templates/web/nginx/hosting-legacy.tpl b/install/debian/11/templates/web/nginx/hosting-legacy.tpl
new file mode 100644
index 00000000..15961c95
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/hosting-legacy.tpl
@@ -0,0 +1,35 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/11/templates/web/nginx/hosting-public.stpl b/install/debian/11/templates/web/nginx/hosting-public.stpl
new file mode 100644
index 00000000..22951ae5
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/hosting-public.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/11/templates/web/nginx/hosting-public.tpl b/install/debian/11/templates/web/nginx/hosting-public.tpl
new file mode 100644
index 00000000..9ff417ba
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/hosting-public.tpl
@@ -0,0 +1,35 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
new file mode 100644
index 00000000..dac7adaf
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl b/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
new file mode 100644
index 00000000..5f601672
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/11/templates/web/nginx/hosting.sh b/install/debian/11/templates/web/nginx/hosting.sh
new file mode 100755
index 00000000..eeed37ef
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/11/templates/web/nginx/hosting.stpl b/install/debian/11/templates/web/nginx/hosting.stpl
new file mode 100644
index 00000000..30fe0f74
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/hosting.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/11/templates/web/nginx/hosting.tpl b/install/debian/11/templates/web/nginx/hosting.tpl
new file mode 100644
index 00000000..262417b1
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/hosting.tpl
@@ -0,0 +1,35 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/11/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/debian/11/templates/web/nginx/php-fpm/cms_made_simple.stpl
new file mode 100644
index 00000000..cf8fad56
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/cms_made_simple.tpl b/install/debian/11/templates/web/nginx/php-fpm/cms_made_simple.tpl
new file mode 100644
index 00000000..f9e90393
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/cms_made_simple.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/codeigniter2.stpl b/install/debian/11/templates/web/nginx/php-fpm/codeigniter2.stpl
new file mode 100644
index 00000000..5931f617
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/codeigniter2.stpl
@@ -0,0 +1,60 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/codeigniter2.tpl b/install/debian/11/templates/web/nginx/php-fpm/codeigniter2.tpl
new file mode 100644
index 00000000..d2422be2
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/codeigniter2.tpl
@@ -0,0 +1,57 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/codeigniter3.stpl b/install/debian/11/templates/web/nginx/php-fpm/codeigniter3.stpl
new file mode 100644
index 00000000..3c2793d1
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/codeigniter3.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/codeigniter3.tpl b/install/debian/11/templates/web/nginx/php-fpm/codeigniter3.tpl
new file mode 100644
index 00000000..54f81b99
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/codeigniter3.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/datalife_engine.stpl b/install/debian/11/templates/web/nginx/php-fpm/datalife_engine.stpl
new file mode 100644
index 00000000..bb9a727b
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/datalife_engine.stpl
@@ -0,0 +1,126 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/datalife_engine.tpl b/install/debian/11/templates/web/nginx/php-fpm/datalife_engine.tpl
new file mode 100644
index 00000000..3ea45347
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/datalife_engine.tpl
@@ -0,0 +1,123 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/default.stpl b/install/debian/11/templates/web/nginx/php-fpm/default.stpl
new file mode 100644
index 00000000..f9c01e40
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/default.stpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/default.tpl b/install/debian/11/templates/web/nginx/php-fpm/default.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/default.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/dokuwiki.stpl b/install/debian/11/templates/web/nginx/php-fpm/dokuwiki.stpl
new file mode 100644
index 00000000..a7564705
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/dokuwiki.stpl
@@ -0,0 +1,71 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/dokuwiki.tpl b/install/debian/11/templates/web/nginx/php-fpm/dokuwiki.tpl
new file mode 100644
index 00000000..0a9a75ed
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/dokuwiki.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/drupal6.stpl b/install/debian/11/templates/web/nginx/php-fpm/drupal6.stpl
new file mode 100644
index 00000000..6e67a4e0
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/drupal6.stpl
@@ -0,0 +1,94 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri @rewrite;
+    }
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/drupal6.tpl b/install/debian/11/templates/web/nginx/php-fpm/drupal6.tpl
new file mode 100644
index 00000000..d1096bff
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/drupal6.tpl
@@ -0,0 +1,91 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+    }
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/drupal7.stpl b/install/debian/11/templates/web/nginx/php-fpm/drupal7.stpl
new file mode 100644
index 00000000..32f01a6f
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/drupal7.stpl
@@ -0,0 +1,94 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/drupal7.tpl b/install/debian/11/templates/web/nginx/php-fpm/drupal7.tpl
new file mode 100644
index 00000000..c9729795
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/drupal7.tpl
@@ -0,0 +1,91 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/drupal8.stpl b/install/debian/11/templates/web/nginx/php-fpm/drupal8.stpl
new file mode 100644
index 00000000..32f01a6f
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/drupal8.stpl
@@ -0,0 +1,94 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/drupal8.tpl b/install/debian/11/templates/web/nginx/php-fpm/drupal8.tpl
new file mode 100644
index 00000000..c9729795
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/drupal8.tpl
@@ -0,0 +1,91 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/joomla.stpl b/install/debian/11/templates/web/nginx/php-fpm/joomla.stpl
new file mode 100644
index 00000000..d4f96ee3
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/joomla.stpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/joomla.tpl b/install/debian/11/templates/web/nginx/php-fpm/joomla.tpl
new file mode 100644
index 00000000..91b7a8f1
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/joomla.tpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/laravel.stpl b/install/debian/11/templates/web/nginx/php-fpm/laravel.stpl
new file mode 100644
index 00000000..db0b4dde
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/laravel.stpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/laravel.tpl b/install/debian/11/templates/web/nginx/php-fpm/laravel.tpl
new file mode 100644
index 00000000..d14b0173
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/laravel.tpl
@@ -0,0 +1,50 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/magento.stpl b/install/debian/11/templates/web/nginx/php-fpm/magento.stpl
new file mode 100644
index 00000000..f8ac30c9
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/magento.stpl
@@ -0,0 +1,197 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %sdocroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %sdocroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %sdocroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %sdocroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/magento.tpl b/install/debian/11/templates/web/nginx/php-fpm/magento.tpl
new file mode 100644
index 00000000..3f292fff
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/magento.tpl
@@ -0,0 +1,194 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %docroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %docroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %docroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %docroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/modx.stpl b/install/debian/11/templates/web/nginx/php-fpm/modx.stpl
new file mode 100644
index 00000000..420aeb9e
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/modx.stpl
@@ -0,0 +1,68 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  https://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/modx.tpl b/install/debian/11/templates/web/nginx/php-fpm/modx.tpl
new file mode 100644
index 00000000..342d3ecf
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/modx.tpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  http://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/moodle.stpl b/install/debian/11/templates/web/nginx/php-fpm/moodle.stpl
new file mode 100644
index 00000000..8594ec94
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/moodle.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/moodle.tpl b/install/debian/11/templates/web/nginx/php-fpm/moodle.tpl
new file mode 100644
index 00000000..c20ba648
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/moodle.tpl
@@ -0,0 +1,87 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/no-php.stpl b/install/debian/11/templates/web/nginx/php-fpm/no-php.stpl
new file mode 100644
index 00000000..4bb50383
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/no-php.stpl
@@ -0,0 +1,46 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/no-php.tpl b/install/debian/11/templates/web/nginx/php-fpm/no-php.tpl
new file mode 100644
index 00000000..7ff8aa1d
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/no-php.tpl
@@ -0,0 +1,43 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/odoo.stpl b/install/debian/11/templates/web/nginx/php-fpm/odoo.stpl
new file mode 100644
index 00000000..e28afcfc
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/odoo.stpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+    
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/odoo.tpl b/install/debian/11/templates/web/nginx/php-fpm/odoo.tpl
new file mode 100644
index 00000000..b1240aae
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/odoo.tpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/opencart.stpl b/install/debian/11/templates/web/nginx/php-fpm/opencart.stpl
new file mode 100644
index 00000000..52706d21
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/opencart.stpl
@@ -0,0 +1,58 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/opencart.tpl b/install/debian/11/templates/web/nginx/php-fpm/opencart.tpl
new file mode 100644
index 00000000..d0a9060b
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/opencart.tpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/owncloud.stpl b/install/debian/11/templates/web/nginx/php-fpm/owncloud.stpl
new file mode 100644
index 00000000..1b803f97
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/owncloud.stpl
@@ -0,0 +1,84 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/owncloud.tpl b/install/debian/11/templates/web/nginx/php-fpm/owncloud.tpl
new file mode 100644
index 00000000..e3ec31de
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/owncloud.tpl
@@ -0,0 +1,81 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+            access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/piwik.stpl b/install/debian/11/templates/web/nginx/php-fpm/piwik.stpl
new file mode 100644
index 00000000..1b299343
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/piwik.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+        return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+        }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/piwik.tpl b/install/debian/11/templates/web/nginx/php-fpm/piwik.tpl
new file mode 100644
index 00000000..f94fb7de
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/piwik.tpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+            return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/pyrocms.stpl b/install/debian/11/templates/web/nginx/php-fpm/pyrocms.stpl
new file mode 100644
index 00000000..6d44f20f
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+        }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/pyrocms.tpl b/install/debian/11/templates/web/nginx/php-fpm/pyrocms.tpl
new file mode 100644
index 00000000..297fe0e8
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/sendy.stpl b/install/debian/11/templates/web/nginx/php-fpm/sendy.stpl
new file mode 100644
index 00000000..0b351000
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/sendy.stpl
@@ -0,0 +1,88 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+     location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/sendy.tpl b/install/debian/11/templates/web/nginx/php-fpm/sendy.tpl
new file mode 100644
index 00000000..b27b427d
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/sendy.tpl
@@ -0,0 +1,86 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/wordpress.stpl b/install/debian/11/templates/web/nginx/php-fpm/wordpress.stpl
new file mode 100644
index 00000000..f9c01e40
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/wordpress.stpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/wordpress.tpl b/install/debian/11/templates/web/nginx/php-fpm/wordpress.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/wordpress.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/wordpress2.stpl b/install/debian/11/templates/web/nginx/php-fpm/wordpress2.stpl
new file mode 100644
index 00000000..01dfee5b
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/wordpress2.stpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/wordpress2.tpl b/install/debian/11/templates/web/nginx/php-fpm/wordpress2.tpl
new file mode 100644
index 00000000..bccb8b3d
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/wordpress2.tpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/debian/11/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
new file mode 100644
index 00000000..a5fc46fb
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -0,0 +1,71 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+} 
diff --git a/install/debian/11/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl b/install/debian/11/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
new file mode 100644
index 00000000..39e366b7
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/private-force-https.stpl b/install/debian/11/templates/web/nginx/private-force-https.stpl
new file mode 100644
index 00000000..2b4e42cc
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/private-force-https.stpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/11/templates/web/nginx/private-force-https.tpl b/install/debian/11/templates/web/nginx/private-force-https.tpl
new file mode 100644
index 00000000..851ac0dc
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/private-force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/11/templates/web/nginx/private-hosting.sh b/install/debian/11/templates/web/nginx/private-hosting.sh
new file mode 100755
index 00000000..abc9155d
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/private-hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/11/templates/web/nginx/private-hosting.stpl b/install/debian/11/templates/web/nginx/private-hosting.stpl
new file mode 100644
index 00000000..60b23c55
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/private-hosting.stpl
@@ -0,0 +1,40 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/11/templates/web/nginx/private-hosting.tpl b/install/debian/11/templates/web/nginx/private-hosting.tpl
new file mode 100644
index 00000000..da70045f
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/private-hosting.tpl
@@ -0,0 +1,37 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/11/templates/web/nginx/proxy_ip.tpl b/install/debian/11/templates/web/nginx/proxy_ip.tpl
new file mode 100644
index 00000000..ae195617
--- /dev/null
+++ b/install/debian/11/templates/web/nginx/proxy_ip.tpl
@@ -0,0 +1,9 @@
+server {
+    listen       %ip%:%proxy_port% default;
+    server_name  _;
+    #access_log  /var/log/nginx/%ip%.log main;
+    location / {
+        proxy_pass  http://%ip%:%web_port%;
+   }
+}
+
diff --git a/install/debian/11/templates/web/php-fpm/default.tpl b/install/debian/11/templates/web/php-fpm/default.tpl
new file mode 100644
index 00000000..209e1e43
--- /dev/null
+++ b/install/debian/11/templates/web/php-fpm/default.tpl
@@ -0,0 +1,21 @@
+[%backend%]
+listen = 127.0.0.1:%backend_port%
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/11/templates/web/php-fpm/no-php.tpl b/install/debian/11/templates/web/php-fpm/no-php.tpl
new file mode 100644
index 00000000..047c33ed
--- /dev/null
+++ b/install/debian/11/templates/web/php-fpm/no-php.tpl
@@ -0,0 +1,20 @@
+;[%backend%]
+;listen = /dev/null
+
+;user = %user%
+;group = %user%
+
+;listen.owner = %user%
+;listen.group = www-data
+
+;pm = ondemand
+;pm.max_children = 4
+;pm.max_requests = 4000
+;pm.process_idle_timeout = 10s
+;pm.status_path = /status
+
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /home/%user%/tmp
+;env[TMPDIR] = /home/%user%/tmp
+;env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/11/templates/web/php-fpm/socket.tpl b/install/debian/11/templates/web/php-fpm/socket.tpl
new file mode 100644
index 00000000..a0151084
--- /dev/null
+++ b/install/debian/11/templates/web/php-fpm/socket.tpl
@@ -0,0 +1,24 @@
+[%backend%]
+listen = /var/run/php/%backend%.sock
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+listen.owner = %user%
+listen.group = www-data
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/11/templates/web/skel/document_errors/403.html b/install/debian/11/templates/web/skel/document_errors/403.html
new file mode 100755
index 00000000..9c3f6baa
--- /dev/null
+++ b/install/debian/11/templates/web/skel/document_errors/403.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>403 &mdash; Forbidden</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="You do not have permission to view this"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>403</h1>
+    <h2>Forbidden</h2>
+    <div>
+        Unfortunately, you do not have permission to view this
+    </div>
+</body>
+
+</html>
diff --git a/install/debian/11/templates/web/skel/document_errors/404.html b/install/debian/11/templates/web/skel/document_errors/404.html
new file mode 100755
index 00000000..2cee7708
--- /dev/null
+++ b/install/debian/11/templates/web/skel/document_errors/404.html
@@ -0,0 +1,28 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>404 &mdash; Not Found</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, page not found"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+    <h1>404</h1>
+    <h2>Page Not Found</h2>
+    <div>
+        It seems that the page you were trying to reach does not exist anymore, or maybe it has just moved.
+        You can start again from the <a href="http://%domain%/">home</a> or go back to <a href="javascript:%20history.go(-1)">previous page</a>.
+    </div>
+</body>
+</html>
diff --git a/install/debian/11/templates/web/skel/document_errors/50x.html b/install/debian/11/templates/web/skel/document_errors/50x.html
new file mode 100755
index 00000000..85ba648b
--- /dev/null
+++ b/install/debian/11/templates/web/skel/document_errors/50x.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>500 &mdash; Internal Sever Error</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, something went wrong. Internal Server Error"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>500</h1>
+    <h2>Internal Server Error</h2>
+    <div>
+        Sorry, something went wrong :(
+    </div>
+</body>
+
+</html>
diff --git a/install/debian/11/templates/web/skel/public_html/index.html b/install/debian/11/templates/web/skel/public_html/index.html
new file mode 100755
index 00000000..c2895cf2
--- /dev/null
+++ b/install/debian/11/templates/web/skel/public_html/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="https://www.myvestacp.com/">Powered by myVesta</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/debian/11/templates/web/skel/public_html/robots.txt b/install/debian/11/templates/web/skel/public_html/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/debian/11/templates/web/skel/public_html/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/debian/11/templates/web/skel/public_shtml/index.html b/install/debian/11/templates/web/skel/public_shtml/index.html
new file mode 100755
index 00000000..c2895cf2
--- /dev/null
+++ b/install/debian/11/templates/web/skel/public_shtml/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="https://www.myvestacp.com/">Powered by myVesta</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/debian/11/templates/web/skel/public_shtml/robots.txt b/install/debian/11/templates/web/skel/public_shtml/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/debian/11/templates/web/skel/public_shtml/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/debian/11/templates/web/suspend/.htaccess b/install/debian/11/templates/web/suspend/.htaccess
new file mode 100755
index 00000000..5a6df83f
--- /dev/null
+++ b/install/debian/11/templates/web/suspend/.htaccess
@@ -0,0 +1,2 @@
+ErrorDocument 403 /index.html
+ErrorDocument 404 /index.html
diff --git a/install/debian/11/templates/web/suspend/index.html b/install/debian/11/templates/web/suspend/index.html
new file mode 100755
index 00000000..3815354d
--- /dev/null
+++ b/install/debian/11/templates/web/suspend/index.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>Website Suspended</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This website has been suspended."/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:84px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: 15px 0 25px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+<body>
+    <h1>Temporary under construction</h1>
+    <h2>This website is temporary under construction.</h2>
+    <div>
+        We will back again soon.
+    </div>
+</body>
+</html>
diff --git a/install/debian/11/templates/web/webalizer/webalizer.tpl b/install/debian/11/templates/web/webalizer/webalizer.tpl
new file mode 100755
index 00000000..068adcfb
--- /dev/null
+++ b/install/debian/11/templates/web/webalizer/webalizer.tpl
@@ -0,0 +1,110 @@
+HostName         %domain_idn%
+LogFile          /var/log/%web_system%/domains/%domain%.log
+OutputDir        %home%/%user%/web/%domain%/stats
+HistoryName      %home%/%user%/web/%domain%/stats/%domain%.hist
+Incremental      yes
+IncrementalName  %home%/%user%/web/%domain%/stats/%domain%.current
+PageType         htm*
+PageType         cgi
+PageType         php
+PageType         shtml
+DNSCache         /var/lib/webalizer/dns_cache.db
+DNSChildren      10
+Quiet            yes
+FoldSeqErr       yes
+IndexAlias       index.php
+HideURL          *.gif
+HideURL          *.GIF
+HideURL          *.jpg
+HideURL          *.JPG
+HideURL          *.png
+HideURL          *.PNG
+HideURL          *.ra
+SearchEngine     abcsearch.          terms=
+SearchEngine     alexa.              q=
+SearchEngine     alltheweb.          q=
+SearchEngine     alltheweb.          query=
+SearchEngine     alot.               q=
+SearchEngine     altavista.          q=
+SearchEngine     aolsearch.          query=
+SearchEngine     aport.ru            r=
+SearchEngine     ask.                q=
+SearchEngine     atlas.cz            q=
+SearchEngine     bbc.                q=
+SearchEngine     bing.               q=
+SearchEngine     blingo.             q=
+SearchEngine     blogs.yandex.ru     text=
+SearchEngine     btopenworld         query=
+SearchEngine     buscador.ya.com     q=
+SearchEngine     busca.              q=
+SearchEngine     business.           query=
+SearchEngine     centrum.cz          q=
+SearchEngine     chiff.              q=
+SearchEngine     clusty.             query=
+SearchEngine     comcast.            q=
+SearchEngine     crawler.            q=
+SearchEngine     cuil.               q=
+SearchEngine     dmoz.               search=
+SearchEngine     dogpile.com         q=
+SearchEngine     dpxml               qkw=
+SearchEngine     eureka.             searchword=
+SearchEngine     euroseek.           string=
+SearchEngine     exalead.            q=
+SearchEngine     excite              search=
+SearchEngine     ezilon.             q=
+SearchEngine     fastbrowsersearch.  q=
+SearchEngine     feedster.com        q=
+SearchEngine     fireball.de         q=
+SearchEngine     fireball.           keyword=
+SearchEngine     freeserve.          q=
+SearchEngine     gigablast.          q=
+SearchEngine     gogo.ru             q=
+SearchEngine     go.mail.ru          q=
+SearchEngine     google.             q=
+SearchEngine     hakia.              q=
+SearchEngine     hotbot.             query=
+SearchEngine     infoseek.           qt=
+SearchEngine     iwon                searchfor=
+SearchEngine     ixquick.com         query=
+SearchEngine     joeant.             keywords=
+SearchEngine     jyxo.cz             s=
+SearchEngine     looksmart.          key=
+SearchEngine     lycos.              query=
+SearchEngine     mamma.              q=
+SearchEngine     metacrawler         q=
+SearchEngine     msn.                MT=
+SearchEngine     msxml               qkw=
+SearchEngine     mysearch.           searchfor=
+SearchEngine     mywebsearch.        searchfor=
+SearchEngine     netscape.           q=
+SearchEngine     nigma.ru            q=
+SearchEngine     northernlight.      qr=
+SearchEngine     ntlworld.           q=
+SearchEngine     orange.             q=
+SearchEngine     overture.           Keywords=
+SearchEngine     punto.ru            text=
+SearchEngine     rambler.            keyword=
+SearchEngine     search.aol.         q=
+SearchEngine     search.babylon.     q=
+SearchEngine     search.centrum.     phrase=
+SearchEngine     search.conduit.     q=
+SearchEngine     search.earthlink    q=
+SearchEngine     search.icq.         q=
+SearchEngine     search.live.com     q=
+SearchEngine     search.rambler.ru   words=
+SearchEngine     search.winamp.      q=
+SearchEngine     searchy.            q=
+SearchEngine     seznam.cz           w=
+SearchEngine     snap.               query=
+SearchEngine     teoma.              q=
+SearchEngine     teradex.com         q=
+SearchEngine     ukplus              key=
+SearchEngine     verizon.            q=
+SearchEngine     virginmedia.        q=
+SearchEngine     voila.              rdata=
+SearchEngine     webcrawler          searchText=
+SearchEngine     web.search.naver.   query=
+SearchEngine     wisenut             q=
+SearchEngine     yahoo.              p=
+SearchEngine     yandex.             text=
+SearchEngine     yodao.              q=
diff --git a/install/debian/11/vsftpd/vsftpd.conf b/install/debian/11/vsftpd/vsftpd.conf
new file mode 100644
index 00000000..1ca1a992
--- /dev/null
+++ b/install/debian/11/vsftpd/vsftpd.conf
@@ -0,0 +1,26 @@
+anonymous_enable=NO
+local_enable=YES
+write_enable=YES
+local_umask=022
+anon_umask=022
+anon_upload_enable=NO
+dirmessage_enable=YES
+xferlog_enable=YES
+connect_from_port_20=YES
+xferlog_std_format=YES
+dual_log_enable=YES
+chroot_local_user=YES
+listen=YES
+pam_service_name=vsftpd
+userlist_enable=NO
+tcp_wrappers=YES
+force_dot_files=YES
+ascii_upload_enable=YES
+ascii_download_enable=YES
+#allow_writable_chroot=YES
+allow_writeable_chroot=YES
+seccomp_sandbox=NO
+pasv_enable=YES
+pasv_max_port=12100
+pasv_min_port=12000
+use_localtime=YES

From fb98936297b472d5c3740332c65854f87c7e75de Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 14:28:44 +0200
Subject: [PATCH 1494/2300] deb11 proftpd identlookups fix

---
 install/debian/11/proftpd/proftpd.conf | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/install/debian/11/proftpd/proftpd.conf b/install/debian/11/proftpd/proftpd.conf
index b144b8a5..4e7f798f 100644
--- a/install/debian/11/proftpd/proftpd.conf
+++ b/install/debian/11/proftpd/proftpd.conf
@@ -28,7 +28,9 @@ SystemLog                       /var/log/proftpd/proftpd.log
 
 <Global>
   Umask                         002
-  IdentLookups                  off
+  <IfModule mod_ident.c>
+    IdentLookups                  off
+  </IfModule>
   AllowOverwrite                yes
   <Limit ALL SITE_CHMOD>
     AllowAll

From ebe60ba28ced07b25fd8b91f7cb4b5ca38e95061 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 15:19:44 +0200
Subject: [PATCH 1495/2300] php7.4 patches for deb11

---
 install/debian/11/php/php7.4-dedi.patch | 87 +++++++++++++++++++++++++
 install/debian/11/php/php7.4-vps.patch  | 87 +++++++++++++++++++++++++
 2 files changed, 174 insertions(+)
 create mode 100644 install/debian/11/php/php7.4-dedi.patch
 create mode 100644 install/debian/11/php/php7.4-vps.patch

diff --git a/install/debian/11/php/php7.4-dedi.patch b/install/debian/11/php/php7.4-dedi.patch
new file mode 100644
index 00000000..c622b51c
--- /dev/null
+++ b/install/debian/11/php/php7.4-dedi.patch
@@ -0,0 +1,87 @@
+--- /etc/php/7.4/fpm/php.ini.orig	2021-02-20 10:45:56.000000000 +0100
++++ /etc/php/7.4/fpm/php.ini	2021-07-16 15:17:44.465823204 +0200
+@@ -309,7 +309,8 @@
+ ; This directive allows you to disable certain functions.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes.
+ ; It receives a comma-delimited list of class names.
+@@ -402,11 +403,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -691,7 +692,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -843,7 +844,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -959,7 +960,7 @@
+ [Date]
+ ; Defines the default timezone used by the date functions
+ ; http://php.net/date.timezone
+-;date.timezone =
++date.timezone = UTC
+ 
+ ; http://php.net/date.default-latitude
+ ;date.default_latitude = 31.7667
+@@ -1089,7 +1090,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1766,20 +1767,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=2048
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5
diff --git a/install/debian/11/php/php7.4-vps.patch b/install/debian/11/php/php7.4-vps.patch
new file mode 100644
index 00000000..e78199bc
--- /dev/null
+++ b/install/debian/11/php/php7.4-vps.patch
@@ -0,0 +1,87 @@
+--- /etc/php/7.4/fpm/php.ini.orig	2021-02-20 10:45:56.000000000 +0100
++++ /etc/php/7.4/fpm/php.ini	2021-07-16 15:05:25.244169530 +0200
+@@ -309,7 +309,8 @@
+ ; This directive allows you to disable certain functions.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes.
+ ; It receives a comma-delimited list of class names.
+@@ -402,11 +403,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -691,7 +692,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -843,7 +844,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -959,7 +960,7 @@
+ [Date]
+ ; Defines the default timezone used by the date functions
+ ; http://php.net/date.timezone
+-;date.timezone =
++date.timezone = UTC
+ 
+ ; http://php.net/date.default-latitude
+ ;date.default_latitude = 31.7667
+@@ -1089,7 +1090,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1766,20 +1767,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=512
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5

From fd82be8cf2f1edb086d04dd687c0f1f9d4ff0bd1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 15:42:26 +0200
Subject: [PATCH 1496/2300] Update php7.4-vps.patch

---
 install/debian/11/php/php7.4-vps.patch | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/install/debian/11/php/php7.4-vps.patch b/install/debian/11/php/php7.4-vps.patch
index e78199bc..4fd24e55 100644
--- a/install/debian/11/php/php7.4-vps.patch
+++ b/install/debian/11/php/php7.4-vps.patch
@@ -42,15 +42,6 @@
  
  ; Maximum number of files that can be uploaded via a single request
  max_file_uploads = 20
-@@ -959,7 +960,7 @@
- [Date]
- ; Defines the default timezone used by the date functions
- ; http://php.net/date.timezone
--;date.timezone =
-+date.timezone = UTC
- 
- ; http://php.net/date.default-latitude
- ;date.default_latitude = 31.7667
 @@ -1089,7 +1090,7 @@
  
  ; The path to a log file that will log all mail() calls. Log entries include

From b27e96b285d02e8d31d70dafef8676687c381e63 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 15:43:10 +0200
Subject: [PATCH 1497/2300] Update php7.4-dedi.patch

---
 install/debian/11/php/php7.4-dedi.patch | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/install/debian/11/php/php7.4-dedi.patch b/install/debian/11/php/php7.4-dedi.patch
index c622b51c..4b533087 100644
--- a/install/debian/11/php/php7.4-dedi.patch
+++ b/install/debian/11/php/php7.4-dedi.patch
@@ -42,15 +42,6 @@
  
  ; Maximum number of files that can be uploaded via a single request
  max_file_uploads = 20
-@@ -959,7 +960,7 @@
- [Date]
- ; Defines the default timezone used by the date functions
- ; http://php.net/date.timezone
--;date.timezone =
-+date.timezone = UTC
- 
- ; http://php.net/date.default-latitude
- ;date.default_latitude = 31.7667
 @@ -1089,7 +1090,7 @@
  
  ; The path to a log file that will log all mail() calls. Log entries include

From 823ab23c3e34dc487a2daaf5297bb6cd289cc975 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 16:27:40 +0200
Subject: [PATCH 1498/2300] php7.4 patches

---
 install/debian/11/php/php7.4-dedi.patch | 4 ++--
 install/debian/11/php/php7.4-vps.patch  | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/install/debian/11/php/php7.4-dedi.patch b/install/debian/11/php/php7.4-dedi.patch
index 4b533087..3e5bd2fb 100644
--- a/install/debian/11/php/php7.4-dedi.patch
+++ b/install/debian/11/php/php7.4-dedi.patch
@@ -1,5 +1,5 @@
---- /etc/php/7.4/fpm/php.ini.orig	2021-02-20 10:45:56.000000000 +0100
-+++ /etc/php/7.4/fpm/php.ini	2021-07-16 15:17:44.465823204 +0200
+--- /etc/php/7.4/fpm/php.ini.orig	2021-07-16 16:12:30.027464762 +0200
++++ /etc/php/7.4/fpm/php.ini	2021-07-16 16:25:15.000000000 +0200
 @@ -309,7 +309,8 @@
  ; This directive allows you to disable certain functions.
  ; It receives a comma-delimited list of function names.
diff --git a/install/debian/11/php/php7.4-vps.patch b/install/debian/11/php/php7.4-vps.patch
index 4fd24e55..7c52d402 100644
--- a/install/debian/11/php/php7.4-vps.patch
+++ b/install/debian/11/php/php7.4-vps.patch
@@ -1,5 +1,5 @@
---- /etc/php/7.4/fpm/php.ini.orig	2021-02-20 10:45:56.000000000 +0100
-+++ /etc/php/7.4/fpm/php.ini	2021-07-16 15:05:25.244169530 +0200
+--- /etc/php/7.4/fpm/php.ini.orig	2021-07-16 16:12:30.027464762 +0200
++++ /etc/php/7.4/fpm/php.ini	2021-07-16 16:24:26.000000000 +0200
 @@ -309,7 +309,8 @@
  ; This directive allows you to disable certain functions.
  ; It receives a comma-delimited list of function names.

From a0c1145fe78163abb9091f28d1dd3e7cb1b1e39d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 21:01:13 +0200
Subject: [PATCH 1499/2300] php7.4 apache templates

---
 .../web/apache2/PHP-FPM-74-public.sh          | 92 +++++++++++++++++++
 .../web/apache2/PHP-FPM-74-public.stpl        | 44 +++++++++
 .../web/apache2/PHP-FPM-74-public.tpl         | 38 ++++++++
 .../11/templates/web/apache2/PHP-FPM-74.sh    | 92 +++++++++++++++++++
 .../11/templates/web/apache2/PHP-FPM-74.stpl  | 44 +++++++++
 .../11/templates/web/apache2/PHP-FPM-74.tpl   | 38 ++++++++
 6 files changed, 348 insertions(+)
 create mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
 create mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-74-public.stpl
 create mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-74-public.tpl
 create mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-74.sh
 create mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-74.stpl
 create mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-74.tpl

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
new file mode 100644
index 00000000..6f6290b1
--- /dev/null
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.4-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 16
+request_terminate_timeout = 30s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 20
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    service php7.3-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_74" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_74)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_74
+    service php7.4-fpm restart
+fi
+if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.4/fpm/pool.d/www.conf
+fi
+
+exit 0
\ No newline at end of file
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.stpl b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.stpl
new file mode 100644
index 00000000..fdbc26f9
--- /dev/null
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.tpl b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.tpl
new file mode 100644
index 00000000..614f20c3
--- /dev/null
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74.sh b/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
new file mode 100644
index 00000000..482cdd7e
--- /dev/null
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
@@ -0,0 +1,92 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.4-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 90s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 30
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    service php5.6-fpm restart
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    service php7.0-fpm restart
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    service php7.1-fpm restart
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    service php7.2-fpm restart
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    service php7.3-fpm restart
+fi
+
+write_file=0
+if [ ! -f "$pool_file_74" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_74)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_74
+    service php7.4-fpm restart
+fi
+if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.4/fpm/pool.d/www.conf
+fi
+
+exit 0
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74.stpl b/install/debian/11/templates/web/apache2/PHP-FPM-74.stpl
new file mode 100644
index 00000000..df607247
--- /dev/null
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74.tpl b/install/debian/11/templates/web/apache2/PHP-FPM-74.tpl
new file mode 100644
index 00000000..7b6e2cb5
--- /dev/null
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+

From ad20438e6c6619b13d520f4f2dd45ff86d7cdb88 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 21:02:06 +0200
Subject: [PATCH 1500/2300] Delete PHP-FPM-73-public.sh

---
 .../web/apache2/PHP-FPM-73-public.sh          | 88 -------------------
 1 file changed, 88 deletions(-)
 delete mode 100755 install/debian/11/templates/web/apache2/PHP-FPM-73-public.sh

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-73-public.sh b/install/debian/11/templates/web/apache2/PHP-FPM-73-public.sh
deleted file mode 100755
index cc55b61e..00000000
--- a/install/debian/11/templates/web/apache2/PHP-FPM-73-public.sh
+++ /dev/null
@@ -1,88 +0,0 @@
-#!/bin/bash
-# Adding php pool conf
-user="$1"
-domain="$2"
-ip="$3"
-home_dir="$4"
-docroot="$5"
-
-pool_conf="[$2]
-
-listen = /run/php/php7.3-fpm-$2.sock
-listen.owner = $1
-listen.group = $1
-listen.mode = 0666
-
-user = $1
-group = $1
-
-pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
-pm.max_requests = 4000
-pm.process_idle_timeout = 10s
-pm.status_path = /status
-
-php_admin_value[upload_tmp_dir] = /home/$1/tmp
-php_admin_value[session.save_path] = /home/$1/tmp
-php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
-php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
-php_admin_flag[mysql.allow_persistent] = off
-php_admin_flag[safe_mode] = off
-
-env[PATH] = /usr/local/bin:/usr/bin:/bin
-env[TMP] = /home/$1/tmp
-env[TMPDIR] = /home/$1/tmp
-env[TEMP] = /home/$1/tmp
-"
-
-pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
-pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
-pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
-pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
-pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
-
-if [ -f "$pool_file_56" ]; then
-    rm $pool_file_56
-    service php5.6-fpm restart
-fi
-
-if [ -f "$pool_file_70" ]; then
-    rm $pool_file_70
-    service php7.0-fpm restart
-fi
-
-if [ -f "$pool_file_71" ]; then
-    rm $pool_file_71
-    service php7.1-fpm restart
-fi
-
-if [ -f "$pool_file_72" ]; then
-    rm $pool_file_72
-    service php7.2-fpm restart
-fi
-
-write_file=0
-if [ ! -f "$pool_file_73" ]; then
-  write_file=1
-else
-  user_count=$(grep -c "/home/$1/" $pool_file_73)
-  if [ $user_count -eq 0 ]; then
-    write_file=1
-  fi
-fi
-
-if [ $write_file -eq 1 ]; then
-    echo "$pool_conf" > $pool_file_73
-    service php7.3-fpm restart
-fi
-
-if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
-    rm /etc/php/7.3/fpm/pool.d/www.conf
-fi
-
-exit 0

From c267045cea60906f205423637001449ed836a730 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 21:02:21 +0200
Subject: [PATCH 1501/2300] Delete PHP-FPM-73-public.stpl

---
 .../web/apache2/PHP-FPM-73-public.stpl        | 44 -------------------
 1 file changed, 44 deletions(-)
 delete mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-73-public.stpl

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-73-public.stpl b/install/debian/11/templates/web/apache2/PHP-FPM-73-public.stpl
deleted file mode 100644
index 9660c234..00000000
--- a/install/debian/11/templates/web/apache2/PHP-FPM-73-public.stpl
+++ /dev/null
@@ -1,44 +0,0 @@
-<VirtualHost %ip%:%web_ssl_port%>
-
-    ServerName %domain_idn%
-    %alias_string%
-    ServerAdmin %email%
-    DocumentRoot %sdocroot%/public
-    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
-    Alias /vstats/ %home%/%user%/web/%domain%/stats/
-    Alias /error/ %home%/%user%/web/%domain%/document_errors/
-    #SuexecUserGroup %user% %group%
-    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
-    CustomLog /var/log/%web_system%/domains/%domain%.log combined
-    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
-    <Directory %home%/%user%/web/%domain%/stats>
-        AllowOverride All
-    </Directory>
-    <Directory %sdocroot%>
-        AllowOverride All
-        SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
-	</Directory>
-    SSLEngine on
-    SSLVerifyClient none
-    SSLCertificateFile %ssl_crt%
-    SSLCertificateKeyFile %ssl_key%
-    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
-#    <IfModule mod_ruid2.c>
-#        RMode config
-#        RUidGid %user% %group%
-#        RGroups www-data
-#    </IfModule>
-#    <IfModule itk.c>
-#        AssignUserID %user% %group%
-#    </IfModule>
-
-    <FilesMatch \.php$>
-        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
-    </FilesMatch>
-    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
-
-    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
-
-</VirtualHost>
-

From 92e09e8a25f0a1a2a07d485b7cea9e3e6f018b4b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 21:02:35 +0200
Subject: [PATCH 1502/2300] Delete PHP-FPM-73-public.tpl

---
 .../web/apache2/PHP-FPM-73-public.tpl         | 38 -------------------
 1 file changed, 38 deletions(-)
 delete mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-73-public.tpl

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-73-public.tpl b/install/debian/11/templates/web/apache2/PHP-FPM-73-public.tpl
deleted file mode 100644
index 892c0d1f..00000000
--- a/install/debian/11/templates/web/apache2/PHP-FPM-73-public.tpl
+++ /dev/null
@@ -1,38 +0,0 @@
-<VirtualHost %ip%:%web_port%>
-
-    ServerName %domain_idn%
-    %alias_string%
-    ServerAdmin %email%
-    DocumentRoot %docroot%/public
-    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
-    Alias /vstats/ %home%/%user%/web/%domain%/stats/
-    Alias /error/ %home%/%user%/web/%domain%/document_errors/
-    #SuexecUserGroup %user% %group%
-    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
-    CustomLog /var/log/%web_system%/domains/%domain%.log combined
-    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
-    <Directory %home%/%user%/web/%domain%/stats>
-        AllowOverride All
-    </Directory>
-    <Directory %sdocroot%>
-        AllowOverride All
-        Options +Includes -Indexes +ExecCGI
-    </Directory>
-#    <IfModule mod_ruid2.c>
-#        RMode config
-#        RUidGid %user% %group%
-#        RGroups www-data
-#    </IfModule>
-#    <IfModule itk.c>
-#        AssignUserID %user% %group%
-#    </IfModule>
-
-    <FilesMatch \.php$>
-        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
-    </FilesMatch>
-    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
-
-    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
-
-</VirtualHost>
-

From 19f5439351a9dd8c96b5daef61029ec637abfb42 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 21:02:53 +0200
Subject: [PATCH 1503/2300] Delete PHP-FPM-73.sh

---
 .../11/templates/web/apache2/PHP-FPM-73.sh    | 92 -------------------
 1 file changed, 92 deletions(-)
 delete mode 100755 install/debian/11/templates/web/apache2/PHP-FPM-73.sh

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-73.sh b/install/debian/11/templates/web/apache2/PHP-FPM-73.sh
deleted file mode 100755
index 72f9cec6..00000000
--- a/install/debian/11/templates/web/apache2/PHP-FPM-73.sh
+++ /dev/null
@@ -1,92 +0,0 @@
-#!/bin/bash
-# Adding php pool conf
-user="$1"
-domain="$2"
-ip="$3"
-home_dir="$4"
-docroot="$5"
-
-pool_conf="[$2]
-
-listen = /run/php/php7.3-fpm-$2.sock
-listen.owner = $1
-listen.group = $1
-listen.mode = 0666
-
-user = $1
-group = $1
-
-pm = ondemand
-pm.max_children = 8
-request_terminate_timeout = 90s
-pm.max_requests = 4000
-pm.process_idle_timeout = 10s
-pm.status_path = /status
-
-php_admin_value[upload_tmp_dir] = /home/$1/tmp
-php_admin_value[session.save_path] = /home/$1/tmp
-php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
-php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
-php_admin_flag[mysql.allow_persistent] = off
-php_admin_flag[safe_mode] = off
-
-env[PATH] = /usr/local/bin:/usr/bin:/bin
-env[TMP] = /home/$1/tmp
-env[TMPDIR] = /home/$1/tmp
-env[TEMP] = /home/$1/tmp
-"
-
-pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
-pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
-pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
-pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
-pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
-pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
-
-if [ -f "$pool_file_56" ]; then
-    rm $pool_file_56
-    service php5.6-fpm restart
-fi
-
-if [ -f "$pool_file_70" ]; then
-    rm $pool_file_70
-    service php7.0-fpm restart
-fi
-
-if [ -f "$pool_file_71" ]; then
-    rm $pool_file_71
-    service php7.1-fpm restart
-fi
-
-if [ -f "$pool_file_72" ]; then
-    rm $pool_file_72
-    service php7.2-fpm restart
-fi
-
-write_file=0
-if [ ! -f "$pool_file_73" ]; then
-  write_file=1
-else
-  user_count=$(grep -c "/home/$1/" $pool_file_73)
-  if [ $user_count -eq 0 ]; then
-    write_file=1
-  fi
-fi
-if [ $write_file -eq 1 ]; then
-    echo "$pool_conf" > $pool_file_73
-    service php7.3-fpm restart
-fi
-if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
-    rm /etc/php/7.3/fpm/pool.d/www.conf
-fi
-
-if [ -f "$pool_file_74" ]; then
-    rm $pool_file_74
-    service php7.4-fpm restart
-fi
-
-exit 0

From 343135650ba76bacc3fc0b3704e6b0ab1f9c713f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 21:03:06 +0200
Subject: [PATCH 1504/2300] Delete PHP-FPM-73.tpl

---
 .../11/templates/web/apache2/PHP-FPM-73.tpl   | 38 -------------------
 1 file changed, 38 deletions(-)
 delete mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-73.tpl

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-73.tpl b/install/debian/11/templates/web/apache2/PHP-FPM-73.tpl
deleted file mode 100644
index 7bec5e73..00000000
--- a/install/debian/11/templates/web/apache2/PHP-FPM-73.tpl
+++ /dev/null
@@ -1,38 +0,0 @@
-<VirtualHost %ip%:%web_port%>
-
-    ServerName %domain_idn%
-    %alias_string%
-    ServerAdmin %email%
-    DocumentRoot %docroot%
-    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
-    Alias /vstats/ %home%/%user%/web/%domain%/stats/
-    Alias /error/ %home%/%user%/web/%domain%/document_errors/
-    #SuexecUserGroup %user% %group%
-    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
-    CustomLog /var/log/%web_system%/domains/%domain%.log combined
-    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
-    <Directory %home%/%user%/web/%domain%/stats>
-        AllowOverride All
-    </Directory>
-    <Directory %sdocroot%>
-        AllowOverride All
-        Options +Includes -Indexes +ExecCGI
-    </Directory>
-#    <IfModule mod_ruid2.c>
-#        RMode config
-#        RUidGid %user% %group%
-#        RGroups www-data
-#    </IfModule>
-#    <IfModule itk.c>
-#        AssignUserID %user% %group%
-#    </IfModule>
-
-    <FilesMatch \.php$>
-        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
-    </FilesMatch>
-    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
-
-    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
-
-</VirtualHost>
-

From d946dbe412cf8757068e3daee9a884fad6201077 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 21:03:23 +0200
Subject: [PATCH 1505/2300] Delete PHP-FPM-73.stpl

---
 .../11/templates/web/apache2/PHP-FPM-73.stpl  | 44 -------------------
 1 file changed, 44 deletions(-)
 delete mode 100644 install/debian/11/templates/web/apache2/PHP-FPM-73.stpl

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-73.stpl b/install/debian/11/templates/web/apache2/PHP-FPM-73.stpl
deleted file mode 100644
index 28224413..00000000
--- a/install/debian/11/templates/web/apache2/PHP-FPM-73.stpl
+++ /dev/null
@@ -1,44 +0,0 @@
-<VirtualHost %ip%:%web_ssl_port%>
-
-    ServerName %domain_idn%
-    %alias_string%
-    ServerAdmin %email%
-    DocumentRoot %sdocroot%
-    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
-    Alias /vstats/ %home%/%user%/web/%domain%/stats/
-    Alias /error/ %home%/%user%/web/%domain%/document_errors/
-    #SuexecUserGroup %user% %group%
-    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
-    CustomLog /var/log/%web_system%/domains/%domain%.log combined
-    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
-    <Directory %home%/%user%/web/%domain%/stats>
-        AllowOverride All
-    </Directory>
-    <Directory %sdocroot%>
-        AllowOverride All
-        SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
-	</Directory>
-    SSLEngine on
-    SSLVerifyClient none
-    SSLCertificateFile %ssl_crt%
-    SSLCertificateKeyFile %ssl_key%
-    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
-#    <IfModule mod_ruid2.c>
-#        RMode config
-#        RUidGid %user% %group%
-#        RGroups www-data
-#    </IfModule>
-#    <IfModule itk.c>
-#        AssignUserID %user% %group%
-#    </IfModule>
-
-    <FilesMatch \.php$>
-        SetHandler "proxy:unix:/run/php/php7.3-fpm-%domain%.sock|fcgi://localhost/"
-    </FilesMatch>
-    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
-
-    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
-
-</VirtualHost>
-

From 2c91d72277d7593ac698bab5e832ca57c5aeeb91 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jul 2021 21:54:43 +0200
Subject: [PATCH 1506/2300] Debian11 installer

---
 install/vst-install-debian.sh | 82 +++++++++++++++++++++++++++++++----
 1 file changed, 74 insertions(+), 8 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index bfab2778..ef16f464 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -19,7 +19,19 @@ release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
 codename="$(cat /etc/os-release |grep VERSION= |cut -f 2 -d \(|cut -f 1 -d \))"
 vestacp="$VESTA/install/$VERSION/$release"
 
-if [ "$release" -eq 10 ]; then
+if [ "$release" -eq 11 ]; then
+    software="nginx apache2 apache2-utils
+        libapache2-mod-fcgid php-fpm php
+        php-common php-cgi php-mysql php-curl php-fpm php-pgsql awstats
+        vsftpd proftpd-basic bind9 exim4 exim4-daemon-heavy
+        clamav-daemon spamassassin dovecot-imapd dovecot-pop3d roundcube-core
+        roundcube-mysql roundcube-plugins mariadb-server mariadb-common
+        mariadb-client postgresql postgresql-contrib phppgadmin phpmyadmin mc
+        flex whois git idn zip sudo bc ftp lsof ntpdate rrdtool quota
+        e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
+        bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
+        unrar-free vim-common net-tools unzip iptables"
+elif [ "$release" -eq 10 ]; then
     software="nginx apache2 apache2-utils
         libapache2-mod-fcgid php-fpm php
         php-common php-cgi php-mysql php-curl php-fpm php-pgsql awstats
@@ -515,9 +527,11 @@ check_result $? 'apt-get upgrade failed'
 
 # Installing nginx repo
 apt=/etc/apt/sources.list.d
-echo "deb http://nginx.org/packages/debian/ $codename nginx" > $apt/nginx.list
-wget http://nginx.org/keys/nginx_signing.key -O /tmp/nginx_signing.key
-apt-key add /tmp/nginx_signing.key
+if [ "$release" -ne 11 ]; then
+    echo "deb http://nginx.org/packages/debian/ $codename nginx" > $apt/nginx.list
+    wget http://nginx.org/keys/nginx_signing.key -O /tmp/nginx_signing.key
+    apt-key add /tmp/nginx_signing.key
+fi
 
 # Installing vesta repo
 echo "deb http://$RHOST/$codename/ $codename vesta" > $apt/vesta.list
@@ -801,7 +815,7 @@ if [ "$apache" = 'no' ] && [ "$nginx"  = 'yes' ]; then
     echo "WEB_PORT='80'" >> $VESTA/conf/vesta.conf
     echo "WEB_SSL_PORT='443'" >> $VESTA/conf/vesta.conf
     echo "WEB_SSL='openssl'"  >> $VESTA/conf/vesta.conf
-    if [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
+    if [ "$release" -eq 9 ] || [ "$release" -eq 10 ] || [ "$release" -eq 11 ]; then
         if [ "$phpfpm" = 'yes' ]; then
             echo "WEB_BACKEND='php-fpm'" >> $VESTA/conf/vesta.conf
         fi
@@ -887,6 +901,22 @@ if [ "$release" -eq 10 ]; then
     ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.stpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-73.stpl
     ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.tpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-73.tpl
 fi
+if [ "$release" -eq 11 ]; then
+    # Symlink missing templates
+    ln -s /usr/local/vesta/data/templates/web/nginx/hosting.sh /usr/local/vesta/data/templates/web/nginx/default.sh
+    ln -s /usr/local/vesta/data/templates/web/nginx/hosting.tpl /usr/local/vesta/data/templates/web/nginx/default.tpl
+    ln -s /usr/local/vesta/data/templates/web/nginx/hosting.stpl /usr/local/vesta/data/templates/web/nginx/default.stpl
+
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.sh /usr/local/vesta/data/templates/web/apache2/hosting.sh
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl /usr/local/vesta/data/templates/web/apache2/hosting.tpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.stpl /usr/local/vesta/data/templates/web/apache2/hosting.stpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.sh /usr/local/vesta/data/templates/web/apache2/default.sh
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl /usr/local/vesta/data/templates/web/apache2/default.tpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.stpl /usr/local/vesta/data/templates/web/apache2/default.stpl
+    
+    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.stpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-74.stpl
+    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.tpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-74.tpl
+fi
 
 # Set nameservers
 sed -i "s/YOURHOSTNAME1/ns1.$servername/" /usr/local/vesta/data/packages/default.pkg
@@ -985,7 +1015,12 @@ fi
 #----------------------------------------------------------#
 
 if [ "$phpfpm" = 'yes' ]; then
-    if [ "$release" -eq 10 ]; then
+    if [ "$release" -eq 11 ]; then
+        cp -f $vestacp/php-fpm/www.conf /etc/php/7.4/fpm/pool.d/www.conf
+        update-rc.d php7.4-fpm defaults
+        service php7.4-fpm start
+        check_result $? "php-fpm start failed"
+    elif [ "$release" -eq 10 ]; then
         cp -f $vestacp/php-fpm/www.conf /etc/php/7.3/fpm/pool.d/www.conf
         update-rc.d php7.3-fpm defaults
         service php7.3-fpm start
@@ -1298,7 +1333,7 @@ if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
         /etc/roundcube/plugins/password/config.inc.php
     mysql roundcube < /usr/share/dbconfig-common/data/roundcube/install/mysql
     chmod a+r /etc/roundcube/main.inc.php
-    if [ "$release" -eq 8 ] || [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
+    if [ "$release" -eq 8 ] || [ "$release" -eq 9 ] || [ "$release" -eq 10 ] || [ "$release" -eq 11 ]; then
         mv -f /etc/roundcube/main.inc.php /etc/roundcube/config.inc.php
         mv -f /etc/roundcube/db.inc.php /etc/roundcube/debian-db-roundcube.php
         chmod 640 /etc/roundcube/debian-db-roundcube.php
@@ -1371,6 +1406,11 @@ fi
 #                   Configure Admin User                   #
 #----------------------------------------------------------#
 
+if [ "$release" -eq 11 ]; then
+    # Switching to sha512
+    sed -i "s/obscure yescrypt/obscure sha512/g" /etc/pam.d/common-password
+fi
+
 # Deleting old admin user
 if [ ! -z "$(grep ^admin: /etc/passwd)" ] && [ "$force" = 'yes' ]; then
     chattr -i /home/admin/conf > /dev/null 2>&1
@@ -1474,6 +1514,18 @@ if [ "$release" -eq 10 ]; then
     /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'no'
   fi
 fi
+if [ "$release" -eq 11 ]; then
+  if [ -f "/etc/php/7.4/fpm/pool.d/$servername.conf" ]; then
+    sed -i "/^group =/c\group = www-data" /etc/php/7.4/fpm/pool.d/$servername.conf
+    sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/7.4/fpm/pool.d/$servername.conf
+    sed -i "/request_terminate_timeout/c\request_terminate_timeout = 900s" /etc/php/7.4/fpm/pool.d/$servername.conf
+    sed -i "s|80M|800M|g" /etc/php/7.4/fpm/pool.d/$servername.conf
+    sed -i "s|256M|512M|g" /etc/php/7.4/fpm/pool.d/$servername.conf
+    service php7.4-fpm restart
+    ln -s /var/lib/roundcube /var/lib/roundcube/webmail
+    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'no'
+  fi
+fi
 
 # Adding cron jobs
 command="sudo $VESTA/bin/v-update-sys-queue disk"
@@ -1529,6 +1581,9 @@ fi
 if [ "$release" -eq 10 ]; then
   apt-get -y install php7.3-apcu php7.3-mbstring php7.3-bcmath php7.3-curl php7.3-gd php7.3-intl php7.3-mysql php7.3-mysqlnd php7.3-pdo php7.3-soap php7.3-json php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached php7.3-zip
 fi
+if [ "$release" -eq 11 ]; then
+  apt-get -y install php7.4-apcu php7.4-mbstring php7.4-bcmath php7.4-curl php7.4-gd php7.4-intl php7.4-mysql php7.4-mysqlnd php7.4-pdo php7.4-soap php7.4-json php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached php7.4-zip
+fi
 
 touch /var/log/php-mail.log
 chmod a=rw /var/log/php-mail.log
@@ -1560,6 +1615,17 @@ if [ "$release" -eq 10 ]; then
   fi
   service php7.3-fpm restart
 fi
+if [ "$release" -eq 11 ]; then
+  if [ $memory -lt 10000000 ]; then
+    echo "=== Patching php7.4-vps"
+    patch /etc/php/7.4/fpm/php.ini < $vestacp/php/php7.4-vps.patch
+  fi
+  if [ $memory -gt 9999999 ]; then
+    echo "=== Patching php7.4-dedi"
+    patch /etc/php/7.4/fpm/php.ini < $vestacp/php/php7.4-dedi.patch
+  fi
+  service php7.4-fpm restart
+fi
 
 # echo "=== Patching rcube_vcard.php"
 # wget -nv https://c.myvestacp.com/tools/patches/rcube_vcard.patch -O /root/rcube_vcard.patch
@@ -1649,7 +1715,7 @@ fi
 
 echo "=== Set URL for phpmyadmin"
 echo "DB_PMA_URL='https://$servername/phpmyadmin/'" >> $VESTA/conf/vesta.conf
-if [ "$release" -eq 10 ]; then
+if [ "$release" -eq 10 ] || [ "$release" -eq 11 ]; then
     echo "=== Set max_length_of_MySQL_username=80"
 fi
 echo "MAX_DBUSER_LEN=80" >> $VESTA/conf/vesta.conf

From 267fc214f09500270bc0f8fd59e506ee0226a8f9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 08:34:06 +0200
Subject: [PATCH 1507/2300] Update default.pkg

---
 install/debian/11/packages/default.pkg | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/11/packages/default.pkg b/install/debian/11/packages/default.pkg
index de293236..45a34c96 100644
--- a/install/debian/11/packages/default.pkg
+++ b/install/debian/11/packages/default.pkg
@@ -1,4 +1,4 @@
-WEB_TEMPLATE='PHP-FPM-73'
+WEB_TEMPLATE='PHP-FPM-74'
 PROXY_TEMPLATE='hosting'
 DNS_TEMPLATE='default'
 WEB_DOMAINS='unlimited'

From 854b0e9ecf6c7c1e943e3d7c89c5769379e9a03e Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Sat, 17 Jul 2021 09:17:42 +0200
Subject: [PATCH 1508/2300] Debian11 Apache template chmod a+x

---
 install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh | 0
 install/debian/11/templates/web/apache2/PHP-FPM-74.sh        | 0
 2 files changed, 0 insertions(+), 0 deletions(-)
 mode change 100644 => 100755 install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
 mode change 100644 => 100755 install/debian/11/templates/web/apache2/PHP-FPM-74.sh

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
old mode 100644
new mode 100755
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74.sh b/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
old mode 100644
new mode 100755

From e1deee28735f2ecd606b379767fae4b1c13b36f3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 10:20:56 +0200
Subject: [PATCH 1509/2300] adding php7.4-imagick to installer

---
 install/vst-install-debian.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ef16f464..adcb37b4 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1576,13 +1576,13 @@ $VESTA/bin/v-add-cron-vesta-autoupdate
 
 echo "=== Installing additional PHP libs"
 if [ "$release" -eq 9 ]; then
-  apt-get -y install php7.0-apcu php7.0-mbstring php7.0-bcmath php7.0-curl php7.0-gd php7.0-intl php7.0-mcrypt php7.0-mysql php7.0-mysqlnd php7.0-pdo php7.0-soap php7.0-json php7.0-xml php7.0-zip php7.0-memcache php7.0-memcached php7.0-zip
+  apt-get -y install php7.0-apcu php7.0-mbstring php7.0-bcmath php7.0-curl php7.0-gd php7.0-intl php7.0-mcrypt php7.0-mysql php7.0-mysqlnd php7.0-pdo php7.0-soap php7.0-json php7.0-xml php7.0-zip php7.0-memcache php7.0-memcached php7.0-zip php7.0-imagick
 fi
 if [ "$release" -eq 10 ]; then
-  apt-get -y install php7.3-apcu php7.3-mbstring php7.3-bcmath php7.3-curl php7.3-gd php7.3-intl php7.3-mysql php7.3-mysqlnd php7.3-pdo php7.3-soap php7.3-json php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached php7.3-zip
+  apt-get -y install php7.3-apcu php7.3-mbstring php7.3-bcmath php7.3-curl php7.3-gd php7.3-intl php7.3-mysql php7.3-mysqlnd php7.3-pdo php7.3-soap php7.3-json php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached php7.3-zip php7.3-imagick
 fi
 if [ "$release" -eq 11 ]; then
-  apt-get -y install php7.4-apcu php7.4-mbstring php7.4-bcmath php7.4-curl php7.4-gd php7.4-intl php7.4-mysql php7.4-mysqlnd php7.4-pdo php7.4-soap php7.4-json php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached php7.4-zip
+  apt-get -y install php7.4-apcu php7.4-mbstring php7.4-bcmath php7.4-curl php7.4-gd php7.4-intl php7.4-mysql php7.4-mysqlnd php7.4-pdo php7.4-soap php7.4-json php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached php7.4-zip php7.4-imagick
 fi
 
 touch /var/log/php-mail.log

From 70ee71e64a55d59f3ce1ccd5587ffcb757f7130c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 11:01:06 +0200
Subject: [PATCH 1510/2300] phpmyadmin install steps for deb11

---
 install/vst-install-debian.sh | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index adcb37b4..a139c4ae 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1164,6 +1164,22 @@ if [ "$mysql" = 'yes' ]; then
       blowfish=$(gen_pass)
       echo "\$cfg['blowfish_secret'] = '$blowfish';" >> /etc/phpmyadmin/config.inc.php
   fi
+  if [ "$release" -eq 11 ]; then
+      # Set config and log directory
+      sed -i "s|define('CONFIG_DIR', '');|define('CONFIG_DIR', '/etc/phpmyadmin/');|" /usr/share/phpmyadmin/libraries/vendor_config.php
+      sed -i "s|define('TEMP_DIR', './tmp/');|define('TEMP_DIR', '/var/lib/phpmyadmin/tmp/');|" /usr/share/phpmyadmin/libraries/vendor_config.php
+
+      # Create temporary folder and change permission
+      mkdir /usr/share/phpmyadmin/tmp
+      chmod 777 /usr/share/phpmyadmin/tmp
+
+      mkdir /root/phpmyadmin
+      wget -nv -O /root/phpmyadmin/pma.sh http://c.myvestacp.com/debian/11/pma/pma.sh 
+      wget -nv -O /root/phpmyadmin/create_tables.sql http://c.myvestacp.com/debian/11/pma/create_tables.sql
+      bash /root/phpmyadmin/pma.sh
+      blowfish=$(gen_pass)
+      echo "\$cfg['blowfish_secret'] = '$blowfish';" >> /etc/phpmyadmin/config.inc.php
+  fi
 fi
 
 #----------------------------------------------------------#

From eba0f774788bfec31da4643a9a5e7efd900c609d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 12:02:04 +0200
Subject: [PATCH 1511/2300] deb11 installer: restart nginx after set
 hosting-webmail-phpmyadmin template

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index a139c4ae..8b83ae87 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1539,7 +1539,7 @@ if [ "$release" -eq 11 ]; then
     sed -i "s|256M|512M|g" /etc/php/7.4/fpm/pool.d/$servername.conf
     service php7.4-fpm restart
     ln -s /var/lib/roundcube /var/lib/roundcube/webmail
-    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'no'
+    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'yes'
   fi
 fi
 

From 9791d0b3b3d0d8dd3e835f0b9e1ad1310f0a8531 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 12:26:14 +0200
Subject: [PATCH 1512/2300] detecting mariadb in v-list-sys-services

---
 bin/v-list-sys-services | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-list-sys-services b/bin/v-list-sys-services
index 3718c171..93f01a11 100755
--- a/bin/v-list-sys-services
+++ b/bin/v-list-sys-services
@@ -220,6 +220,11 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB_SYSTEM" != 'remote' ]; then
         proc_name=''
         service="$db"
         if [ "$service" = 'mysql' ]; then
+            release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+            if [ "$release" -eq 11 ]; then
+                service='mariadb'
+                proc_name='mariadbd'
+            fi
             if [ -d "/etc/sysconfig" ]; then
                 service='mysqld'
                 proc_name='mysqld'

From a2572f44dfc9b8bc86c269e295e83f217ad4933a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 12:58:54 +0200
Subject: [PATCH 1513/2300] deb11 installer: systemctl enable proftpd

---
 install/vst-install-debian.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 8b83ae87..e67aa4f2 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1079,6 +1079,12 @@ if [ "$proftpd" = 'yes' ]; then
     update-rc.d proftpd defaults
     service proftpd start
     check_result $? "proftpd start failed"
+    if [ "$release" -eq 11 ]; then
+        unit_files="$(systemctl list-unit-files |grep proftpd)"
+        if [[ "$unit_files" =~ "disabled" ]]; then
+            systemctl enable proftpd
+        fi
+    fi
 fi
 
 

From f80cbe955fe827989b57a5206954ad63ec90ccbb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 13:22:51 +0200
Subject: [PATCH 1514/2300] Update v-change-vesta-port

---
 bin/v-change-vesta-port | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-change-vesta-port b/bin/v-change-vesta-port
index 09cff31d..620d9324 100755
--- a/bin/v-change-vesta-port
+++ b/bin/v-change-vesta-port
@@ -47,6 +47,7 @@ fi
 sed -i "s|'$oldport'|'$port'|g" $VESTA/data/firewall/rules.conf
 $VESTA/bin/v-update-firewall
 systemctl restart fail2ban.service
+sed -i "s|'$oldport'|'$port'|g" /etc/iptables.rules
 systemctl restart vesta
 
 #----------------------------------------------------------#

From a839f643e7341da5360fc5c25c8c2dfdfbf26f13 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 13:23:59 +0200
Subject: [PATCH 1515/2300] Update v-change-vesta-port

---
 bin/v-change-vesta-port | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-change-vesta-port b/bin/v-change-vesta-port
index 620d9324..3f386654 100755
--- a/bin/v-change-vesta-port
+++ b/bin/v-change-vesta-port
@@ -47,7 +47,7 @@ fi
 sed -i "s|'$oldport'|'$port'|g" $VESTA/data/firewall/rules.conf
 $VESTA/bin/v-update-firewall
 systemctl restart fail2ban.service
-sed -i "s|'$oldport'|'$port'|g" /etc/iptables.rules
+sed -i "s| $oldport | $port |g" /etc/iptables.rules
 systemctl restart vesta
 
 #----------------------------------------------------------#

From 20914184129a394bbd8bca7e275751b90544f057 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 15:06:12 +0200
Subject: [PATCH 1516/2300] Create mail account folder (mailbox)

---
 bin/v-add-mail-account | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-add-mail-account b/bin/v-add-mail-account
index 44925680..1675d5d7 100755
--- a/bin/v-add-mail-account
+++ b/bin/v-add-mail-account
@@ -63,6 +63,10 @@ if [[ "$MAIL_SYSTEM" =~ exim ]]; then
     echo $str >> $HOMEDIR/$user/conf/mail/$domain/passwd
 fi
 
+# Create mail account folder (mailbox)
+mkdir $HOMEDIR/$user/mail/$domain/$account
+chown $user:mail $HOMEDIR/$user/mail/$domain/$account
+chmod 700 $HOMEDIR/$user/mail/$domain/$account
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 1a6785eb704322cf66fc93155939d4143c43d81f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 15:12:11 +0200
Subject: [PATCH 1517/2300] Exim4 config adaption for Exim4.94+

Many many thanks to @madeITBelgium
Adaptions taken from https://github.com/madeITBelgium/vesta/blob/master/install/os-configs/rhel/general/exim/exim.conf
---
 install/debian/11/exim/exim4.conf.template | 36 +++++++++++-----------
 1 file changed, 18 insertions(+), 18 deletions(-)

diff --git a/install/debian/11/exim/exim4.conf.template b/install/debian/11/exim/exim4.conf.template
index 7cc13c36..fe92680f 100644
--- a/install/debian/11/exim/exim4.conf.template
+++ b/install/debian/11/exim/exim4.conf.template
@@ -54,7 +54,7 @@ ignore_bounce_errors_after = 2d
 timeout_frozen_after = 7d
 
 DKIM_DOMAIN = ${lc:${domain:$h_from:}}
-DKIM_FILE = /etc/exim4/domains/${lc:${domain:$h_from:}}/dkim.pem
+DKIM_FILE = /etc/exim4/domains/${lookup{${lc:${domain:$h_from:}}}dsearch{/etc/exim4/domains/}}/dkim.pem
 DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
 
 
@@ -241,7 +241,7 @@ dnslookup:
 localuser_spam:
   driver = accept
   transport = local_spam_delivery
-  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{yes}{no_such_user}}}}
 
 userforward:
   driver = redirect
@@ -264,8 +264,8 @@ procmail:
 
 autoreplay:
   driver = accept
-  require_files = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
-  condition = ${if exists{/etc/exim4/domains/$domain/autoreply.${local_part}.msg}{yes}{no}}
+  require_files = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg}{yes}{no}}
   retry_use_local_part
   transport = userautoreply
   unseen
@@ -273,7 +273,7 @@ autoreplay:
 aliases:
   driver = redirect
   headers_add = X-redirected: yes
-  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
   require_files = /etc/exim4/domains/$domain/aliases
   redirect_router = dnslookup
   pipe_transport = address_pipe
@@ -282,25 +282,25 @@ aliases:
 localuser_fwd_only:
   driver = accept
   transport = devnull
-  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/fwd_only}{true}{false}}}}
 
 localuser:
   driver = accept
   transport = local_delivery
-  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{true}{false}}
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{true}{false}}
 
 catchall:
   driver = redirect
   headers_add = X-redirected: yes
   require_files = /etc/exim4/domains/$domain/aliases
-  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
   file_transport = local_delivery
   redirect_router = dnslookup
 
 terminate_alias:
   driver = accept
   transport = devnull
-  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
 
 
 
@@ -333,7 +333,7 @@ local_delivery:
   driver = appendfile
   maildir_format
   maildir_use_size_file
-  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
   group = mail
   create_directory
   directory_mode = 770
@@ -342,15 +342,15 @@ local_delivery:
   delivery_date_add
   envelope_to_add
   return_path_add
-  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
-  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
   quota_warn_threshold = 75%
 
 local_spam_delivery:
   driver = appendfile
   maildir_format
   maildir_use_size_file
-  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
   group = mail
   create_directory
   directory_mode = 770
@@ -359,9 +359,9 @@ local_spam_delivery:
   delivery_date_add
   envelope_to_add
   return_path_add
-  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part/.Spam"
-  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
-  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
   quota_warn_threshold = 75%
 
 address_pipe:
@@ -379,8 +379,8 @@ address_reply:
 
 userautoreply:
   driver = autoreply
-  file = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
-  from = "${local_part}@${domain}"
+  file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}.msg
+  from = "${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"
   headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
   subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
   to = "${sender_address}"

From 68b6ed0c33a7fbbe94c1b25a9629f4624c866575 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 16:41:02 +0200
Subject: [PATCH 1518/2300] vesta compiling script for deb11

---
 src/deb/vesta_compile.sh | 37 +++++++++++++++++++++++++++++++++----
 1 file changed, 33 insertions(+), 4 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index c21bdc90..026e3812 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -7,8 +7,8 @@
 build_deb_package=1
 add_deb_to_apt_repo=0
 
-TARGET_DEB_NAME='buster'
-TARGET_DEB_VER='10'
+TARGET_DEB_NAME='bullseye'
+TARGET_DEB_VER='11'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1
@@ -31,8 +31,8 @@ fi
 
 MAINTAINER_EMAIL='info@myvestacp.com'
 
-TARGET_DEB_NAME_MAIN='buster'
-TARGET_DEB_VER_MAIN='10'
+TARGET_DEB_NAME_MAIN='bullseye'
+TARGET_DEB_VER_MAIN='11'
 
 # Set compiling directory
 BUILD_DIR="/usr/src/$TARGET_DEB_NAME"
@@ -248,6 +248,7 @@ EOF
     press_enter "*** please copy above generated key to your clipboard and then paste it after pressing enter now ***"
     vi $PATH_OF_APT_REPO_ROOT/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key
+    cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/11/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/10/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/9/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/8/deb_signing.key
@@ -380,7 +381,35 @@ if [ "$CWEB_B" = true ]; then
   tar -czf dovecot.tar.gz dovecot/
   echo "=== All done for Debian10"
   ##########
+  cd $PATH_OF_C_WEB_FOLDER_ROOT/debian/11
+  
+  if [ -f "packages.tar.gz" ]; then
+    rm packages.tar.gz
+  fi
+  tar -czf packages.tar.gz packages/
+  
+  if [ -f "templates.tar.gz" ]; then
+    rm templates.tar.gz
+  fi
+  tar -czf templates.tar.gz templates/
+  
+  if [ -f "firewall.tar.gz" ]; then
+    rm firewall.tar.gz
+  fi
+  tar -czf firewall.tar.gz firewall/
 
+  if [ -f "fail2ban.tar.gz" ]; then
+    rm fail2ban.tar.gz
+  fi
+  tar -czf fail2ban.tar.gz fail2ban/
+
+  if [ -f "dovecot.tar.gz" ]; then
+    rm dovecot.tar.gz
+  fi
+  tar -czf dovecot.tar.gz dovecot/
+  echo "=== All done for Debian11"
+  ##########
+  
   cp /root/vesta/install/vst-install-debian.sh $PATH_OF_C_WEB_FOLDER_ROOT/vst-install-debian.sh
 
   mkdir $PATH_OF_C_WEB_FOLDER_ROOT/tools

From 7f428046572be5487d8d6fcdc407a7f653d46f89 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 16:57:23 +0200
Subject: [PATCH 1519/2300] Update v-update-sys-vesta-all

---
 bin/v-update-sys-vesta-all | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-sys-vesta-all b/bin/v-update-sys-vesta-all
index 5a42a0c0..cd3e677f 100755
--- a/bin/v-update-sys-vesta-all
+++ b/bin/v-update-sys-vesta-all
@@ -23,7 +23,7 @@ source $VESTA/conf/vesta.conf
 
 
 # Checking official latest version
-latest=$(wget -q -T 10 -t 1 http://c.myvestacp.com/latest.txt?check_latest -O -)
+latest=$(wget -q -T 10 -t 1 http://c.myvestacp.com/latest.txt?check_latest_version -O -)
 
 # Starting update loop
 for package in vesta vesta-nginx vesta-php; do

From 31564ff06abd7da36755db64d2c22390791f44df Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 16:57:59 +0200
Subject: [PATCH 1520/2300] Update latest.txt

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index fa6171f7..efd44125 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-48
+vesta-0.9.8-26-49

From de4f13b042f8c75880197b5bc5254687b74705a8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jul 2021 17:00:22 +0200
Subject: [PATCH 1521/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 0605428d..647187e0 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-49 [17-Jul-2021]
+==================================================
+* Support for Debian 11
+
 Version 0.9.8-26-48 [11-Jul-2021]
 ==================================================
 * Fixed two bugs in LetsEncrypt generating process

From 083954af41ecae34ac4a9c5071127f4c95669566 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 19 Jul 2021 14:26:26 +0200
Subject: [PATCH 1522/2300] Create www.conf

---
 .../tools/default-pool.d/7.2/www.conf         | 424 ++++++++++++++++++
 1 file changed, 424 insertions(+)
 create mode 100644 src/deb/for-download/tools/default-pool.d/7.2/www.conf

diff --git a/src/deb/for-download/tools/default-pool.d/7.2/www.conf b/src/deb/for-download/tools/default-pool.d/7.2/www.conf
new file mode 100644
index 00000000..86aca4cc
--- /dev/null
+++ b/src/deb/for-download/tools/default-pool.d/7.2/www.conf
@@ -0,0 +1,424 @@
+; Start a new pool named 'www'.
+; the variable $pool can be used in any directive and will be replaced by the
+; pool name ('www' here)
+[www]
+
+; Per pool prefix
+; It only applies on the following directives:
+; - 'access.log'
+; - 'slowlog'
+; - 'listen' (unixsocket)
+; - 'chroot'
+; - 'chdir'
+; - 'php_values'
+; - 'php_admin_values'
+; When not set, the global prefix (or /usr) applies instead.
+; Note: This directive can also be relative to the global prefix.
+; Default Value: none
+;prefix = /path/to/pools/$pool
+
+; Unix user/group of processes
+; Note: The user is mandatory. If the group is not set, the default user's group
+;       will be used.
+user = www-data
+group = www-data
+
+; The address on which to accept FastCGI requests.
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Note: This value is mandatory.
+listen = /run/php/php7.2-fpm.sock
+
+; Set listen(2) backlog.
+; Default Value: 511 (-1 on FreeBSD and OpenBSD)
+;listen.backlog = 511
+
+; Set permissions for unix socket, if one is used. In Linux, read/write
+; permissions must be set in order to allow connections from a web server. Many
+; BSD-derived systems allow connections regardless of permissions. The owner
+; and group can be specified either by name or by their numeric IDs.
+; Default Values: user and group are set as the running user
+;                 mode is set to 0660
+listen.owner = www-data
+listen.group = www-data
+;listen.mode = 0660
+; When POSIX Access Control Lists are supported you can set them using
+; these options, value is a comma separated list of user/group names.
+; When set, listen.owner and listen.group are ignored
+;listen.acl_users =
+;listen.acl_groups =
+
+; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
+; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
+; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
+; must be separated by a comma. If this value is left blank, connections will be
+; accepted from any ip address.
+; Default Value: any
+;listen.allowed_clients = 127.0.0.1
+
+; Specify the nice(2) priority to apply to the pool processes (only if set)
+; The value can vary from -19 (highest priority) to 20 (lower priority)
+; Note: - It will only work if the FPM master process is launched as root
+;       - The pool processes will inherit the master process priority
+;         unless it specified otherwise
+; Default Value: no set
+; process.priority = -19
+
+; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user
+; or group is differrent than the master process user. It allows to create process
+; core dump and ptrace the process for the pool user.
+; Default Value: no
+; process.dumpable = yes
+
+; Choose how the process manager will control the number of child processes.
+; Possible Values:
+;   static  - a fixed number (pm.max_children) of child processes;
+;   dynamic - the number of child processes are set dynamically based on the
+;             following directives. With this process management, there will be
+;             always at least 1 children.
+;             pm.max_children      - the maximum number of children that can
+;                                    be alive at the same time.
+;             pm.start_servers     - the number of children created on startup.
+;             pm.min_spare_servers - the minimum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is less than this
+;                                    number then some children will be created.
+;             pm.max_spare_servers - the maximum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is greater than this
+;                                    number then some children will be killed.
+;  ondemand - no children are created at startup. Children will be forked when
+;             new requests will connect. The following parameter are used:
+;             pm.max_children           - the maximum number of children that
+;                                         can be alive at the same time.
+;             pm.process_idle_timeout   - The number of seconds after which
+;                                         an idle process will be killed.
+; Note: This value is mandatory.
+pm = dynamic
+
+; The number of child processes to be created when pm is set to 'static' and the
+; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
+; This value sets the limit on the number of simultaneous requests that will be
+; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
+; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
+; CGI. The below defaults are based on a server without much resources. Don't
+; forget to tweak pm.* to fit your needs.
+; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
+; Note: This value is mandatory.
+pm.max_children = 5
+
+; The number of child processes created on startup.
+; Note: Used only when pm is set to 'dynamic'
+; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2
+pm.start_servers = 2
+
+; The desired minimum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.min_spare_servers = 1
+
+; The desired maximum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.max_spare_servers = 3
+
+; The number of seconds after which an idle process will be killed.
+; Note: Used only when pm is set to 'ondemand'
+; Default Value: 10s
+;pm.process_idle_timeout = 10s;
+
+; The number of requests each child process should execute before respawning.
+; This can be useful to work around memory leaks in 3rd party libraries. For
+; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
+; Default Value: 0
+;pm.max_requests = 500
+
+; The URI to view the FPM status page. If this value is not set, no URI will be
+; recognized as a status page. It shows the following informations:
+;   pool                 - the name of the pool;
+;   process manager      - static, dynamic or ondemand;
+;   start time           - the date and time FPM has started;
+;   start since          - number of seconds since FPM has started;
+;   accepted conn        - the number of request accepted by the pool;
+;   listen queue         - the number of request in the queue of pending
+;                          connections (see backlog in listen(2));
+;   max listen queue     - the maximum number of requests in the queue
+;                          of pending connections since FPM has started;
+;   listen queue len     - the size of the socket queue of pending connections;
+;   idle processes       - the number of idle processes;
+;   active processes     - the number of active processes;
+;   total processes      - the number of idle + active processes;
+;   max active processes - the maximum number of active processes since FPM
+;                          has started;
+;   max children reached - number of times, the process limit has been reached,
+;                          when pm tries to start more children (works only for
+;                          pm 'dynamic' and 'ondemand');
+; Value are updated in real time.
+; Example output:
+;   pool:                 www
+;   process manager:      static
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          62636
+;   accepted conn:        190460
+;   listen queue:         0
+;   max listen queue:     1
+;   listen queue len:     42
+;   idle processes:       4
+;   active processes:     11
+;   total processes:      15
+;   max active processes: 12
+;   max children reached: 0
+;
+; By default the status page output is formatted as text/plain. Passing either
+; 'html', 'xml' or 'json' in the query string will return the corresponding
+; output syntax. Example:
+;   http://www.foo.bar/status
+;   http://www.foo.bar/status?json
+;   http://www.foo.bar/status?html
+;   http://www.foo.bar/status?xml
+;
+; By default the status page only outputs short status. Passing 'full' in the
+; query string will also return status for each pool process.
+; Example:
+;   http://www.foo.bar/status?full
+;   http://www.foo.bar/status?json&full
+;   http://www.foo.bar/status?html&full
+;   http://www.foo.bar/status?xml&full
+; The Full status returns for each process:
+;   pid                  - the PID of the process;
+;   state                - the state of the process (Idle, Running, ...);
+;   start time           - the date and time the process has started;
+;   start since          - the number of seconds since the process has started;
+;   requests             - the number of requests the process has served;
+;   request duration     - the duration in µs of the requests;
+;   request method       - the request method (GET, POST, ...);
+;   request URI          - the request URI with the query string;
+;   content length       - the content length of the request (only with POST);
+;   user                 - the user (PHP_AUTH_USER) (or '-' if not set);
+;   script               - the main script called (or '-' if not set);
+;   last request cpu     - the %cpu the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because CPU calculation is done when the request
+;                          processing has terminated;
+;   last request memory  - the max amount of memory the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because memory calculation is done when the request
+;                          processing has terminated;
+; If the process is in Idle state, then informations are related to the
+; last request the process has served. Otherwise informations are related to
+; the current request being served.
+; Example output:
+;   ************************
+;   pid:                  31330
+;   state:                Running
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          63087
+;   requests:             12808
+;   request duration:     1250261
+;   request method:       GET
+;   request URI:          /test_mem.php?N=10000
+;   content length:       0
+;   user:                 -
+;   script:               /home/fat/web/docs/php/test_mem.php
+;   last request cpu:     0.00
+;   last request memory:  0
+;
+; Note: There is a real-time FPM status monitoring sample web page available
+;       It's available in: /usr/share/php/7.2/fpm/status.html
+;
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;pm.status_path = /status
+
+; The ping URI to call the monitoring page of FPM. If this value is not set, no
+; URI will be recognized as a ping page. This could be used to test from outside
+; that FPM is alive and responding, or to
+; - create a graph of FPM availability (rrd or such);
+; - remove a server from a group if it is not responding (load balancing);
+; - trigger alerts for the operating team (24/7).
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;ping.path = /ping
+
+; This directive may be used to customize the response of a ping request. The
+; response is formatted as text/plain with a 200 response code.
+; Default Value: pong
+;ping.response = pong
+
+; The access log file
+; Default: not set
+;access.log = log/$pool.access.log
+
+; The access log format.
+; The following syntax is allowed
+;  %%: the '%' character
+;  %C: %CPU used by the request
+;      it can accept the following format:
+;      - %{user}C for user CPU only
+;      - %{system}C for system CPU only
+;      - %{total}C  for user + system CPU (default)
+;  %d: time taken to serve the request
+;      it can accept the following format:
+;      - %{seconds}d (default)
+;      - %{miliseconds}d
+;      - %{mili}d
+;      - %{microseconds}d
+;      - %{micro}d
+;  %e: an environment variable (same as $_ENV or $_SERVER)
+;      it must be associated with embraces to specify the name of the env
+;      variable. Some exemples:
+;      - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
+;      - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
+;  %f: script filename
+;  %l: content-length of the request (for POST request only)
+;  %m: request method
+;  %M: peak of memory allocated by PHP
+;      it can accept the following format:
+;      - %{bytes}M (default)
+;      - %{kilobytes}M
+;      - %{kilo}M
+;      - %{megabytes}M
+;      - %{mega}M
+;  %n: pool name
+;  %o: output header
+;      it must be associated with embraces to specify the name of the header:
+;      - %{Content-Type}o
+;      - %{X-Powered-By}o
+;      - %{Transfert-Encoding}o
+;      - ....
+;  %p: PID of the child that serviced the request
+;  %P: PID of the parent of the child that serviced the request
+;  %q: the query string
+;  %Q: the '?' character if query string exists
+;  %r: the request URI (without the query string, see %q and %Q)
+;  %R: remote IP address
+;  %s: status (response code)
+;  %t: server time the request was received
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %T: time the log has been written (the request has finished)
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %u: remote user
+;
+; Default: "%R - %u %t \"%m %r\" %s"
+;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
+
+; The log file for slow requests
+; Default Value: not set
+; Note: slowlog is mandatory if request_slowlog_timeout is set
+;slowlog = log/$pool.log.slow
+
+; The timeout for serving a single request after which a PHP backtrace will be
+; dumped to the 'slowlog' file. A value of '0s' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_slowlog_timeout = 0
+
+; Depth of slow log stack trace.
+; Default Value: 20
+;request_slowlog_trace_depth = 20
+
+; The timeout for serving a single request after which the worker process will
+; be killed. This option should be used when the 'max_execution_time' ini option
+; does not stop script execution for some reason. A value of '0' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_terminate_timeout = 0
+
+; Set open file descriptor rlimit.
+; Default Value: system defined value
+;rlimit_files = 1024
+
+; Set max core size rlimit.
+; Possible Values: 'unlimited' or an integer greater or equal to 0
+; Default Value: system defined value
+;rlimit_core = 0
+
+; Chroot to this directory at the start. This value must be defined as an
+; absolute path. When this value is not set, chroot is not used.
+; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
+; of its subdirectories. If the pool prefix is not set, the global prefix
+; will be used instead.
+; Note: chrooting is a great security feature and should be used whenever
+;       possible. However, all PHP paths will be relative to the chroot
+;       (error_log, sessions.save_path, ...).
+; Default Value: not set
+;chroot =
+
+; Chdir to this directory at the start.
+; Note: relative path can be used.
+; Default Value: current directory or / when chroot
+;chdir = /var/www
+
+; Redirect worker stdout and stderr into main error log. If not set, stdout and
+; stderr will be redirected to /dev/null according to FastCGI specs.
+; Note: on highloaded environement, this can cause some delay in the page
+; process time (several ms).
+; Default Value: no
+;catch_workers_output = yes
+
+; Clear environment in FPM workers
+; Prevents arbitrary environment variables from reaching FPM worker processes
+; by clearing the environment in workers before env vars specified in this
+; pool configuration are added.
+; Setting to "no" will make all environment variables available to PHP code
+; via getenv(), $_ENV and $_SERVER.
+; Default Value: yes
+;clear_env = no
+
+; Limits the extensions of the main script FPM will allow to parse. This can
+; prevent configuration mistakes on the web server side. You should only limit
+; FPM to .php extensions to prevent malicious users to use other extensions to
+; execute php code.
+; Note: set an empty value to allow all extensions.
+; Default Value: .php
+;security.limit_extensions = .php .php3 .php4 .php5 .php7
+
+; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
+; the current environment.
+; Default Value: clean env
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /tmp
+;env[TMPDIR] = /tmp
+;env[TEMP] = /tmp
+
+; Additional php.ini defines, specific to this pool of workers. These settings
+; overwrite the values previously defined in the php.ini. The directives are the
+; same as the PHP SAPI:
+;   php_value/php_flag             - you can set classic ini defines which can
+;                                    be overwritten from PHP call 'ini_set'.
+;   php_admin_value/php_admin_flag - these directives won't be overwritten by
+;                                     PHP call 'ini_set'
+; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
+
+; Defining 'extension' will load the corresponding shared extension from
+; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
+; overwrite previously defined php.ini values, but will append the new value
+; instead.
+
+; Note: path INI options can be relative and will be expanded with the prefix
+; (pool, global or /usr)
+
+; Default Value: nothing is defined by default except the values in php.ini and
+;                specified at startup with the -d argument
+;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
+;php_flag[display_errors] = off
+;php_admin_value[error_log] = /var/log/fpm-php.www.log
+;php_admin_flag[log_errors] = on
+;php_admin_value[memory_limit] = 32M

From 54fab10b525e900480e6e13d4d5a1a7518680589 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 27 Jul 2021 15:27:40 +0200
Subject: [PATCH 1523/2300] Checking custom OpenSSH port

Taken from @HestiaCP
---
 bin/v-update-firewall | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/bin/v-update-firewall b/bin/v-update-firewall
index 183522a7..d3a46686 100755
--- a/bin/v-update-firewall
+++ b/bin/v-update-firewall
@@ -52,6 +52,13 @@ if [ $? -ne 0 ]; then
 fi
 
 
+# Checking custom OpenSSH port
+# Taken from HestiaCP
+sshport=$(grep '^Port ' /etc/ssh/sshd_config | head -1 | cut -d ' ' -f 2)
+if [[ "$sshport" =~ ^[0-9]+$ ]] && [ "$sshport" -ne "22"  ]; then
+    sed -i "s/PORT='22'/PORT=\'$sshport\'/" $rules
+fi
+
 # Creating temporary file
 tmp=$(mktemp)
 

From bc3ac1d9930775594a9502ca7c81afe52550194c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 5 Aug 2021 22:02:35 +0200
Subject: [PATCH 1524/2300] Update v-clone-website

---
 bin/v-clone-website | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index ed7344ab..7ed3046c 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -51,8 +51,6 @@ TO_DATABASE_USERNAME=''
 TO_DATABASE_PASSWORD=''
 DATABASE_SUFIX='_migrated'
 
-source /usr/local/vesta/func/handle_parameters.sh
-
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#
@@ -66,6 +64,9 @@ FROM_USER=$user
 r=$(/usr/local/vesta/bin/v-get-database-credentials-of-domain "$FROM_DOMAIN")
 eval $r
 
+# take --parameters
+source /usr/local/vesta/func/handle_parameters.sh
+
 FROM_FOLDER=$SITE_FOLDER
 
 if [ ! -z "$CONFIG_FILE" ]; then

From df11eaf33f5ca48a5fda16be2fb1e266421087bd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 14 Aug 2021 22:36:07 +0200
Subject: [PATCH 1525/2300] Fix for "Broken or Risky Cryptographic Algorithm"

---
 web/inc/main.php    | 5 +++--
 web/login/index.php | 5 +++--
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/web/inc/main.php b/web/inc/main.php
index 09eef5f7..f75f9530 100644
--- a/web/inc/main.php
+++ b/web/inc/main.php
@@ -66,9 +66,10 @@ if ((!isset($_SESSION['user'])) && (!defined('NO_AUTH_REQUIRED'))) {
     exit;
 }
 
+// Generate CSRF Token
 if (isset($_SESSION['user'])) {
-    if(!isset($_SESSION['token'])){
-        $token = uniqid(mt_rand(), true);
+    if (!isset($_SESSION['token'])){
+        $token = bin2hex(file_get_contents('/dev/urandom', false, null, 0, 16));
         $_SESSION['token'] = $token;
     }
 }
diff --git a/web/login/index.php b/web/login/index.php
index bf3f2c28..18841344 100644
--- a/web/login/index.php
+++ b/web/login/index.php
@@ -112,7 +112,7 @@ if (isset($_POST['user']) && isset($_POST['password'])) {
                     }
 
                     // Regenerate session id to prevent session fixation
-                    session_regenerate_id();
+                    session_regenerate_id(true);
 
                     // Redirect request to control panel interface
                     if (!empty($_SESSION['request_uri'])) {
@@ -158,7 +158,8 @@ if (empty($_SESSION['language'])) {
 }
 
 // Generate CSRF token
-$_SESSION['token'] = md5(uniqid(mt_rand(), true));
+$token = bin2hex(file_get_contents('/dev/urandom', false, null, 0, 16));
+$_SESSION['token'] = $token;
 
 require_once($_SERVER['DOCUMENT_ROOT'].'/inc/i18n/'.$_SESSION['language'].'.php');
 require_once('../templates/header.html');

From 88596a8cd9a9bb053d2d5bebf80c870dff49b639 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Aug 2021 12:35:28 +0200
Subject: [PATCH 1526/2300] Fix for possible file inclusion vulnerability in
 i18n.php

Fix for https://github.com/serghey-rodin/vesta/issues/2052
---
 web/inc/i18n.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/i18n.php b/web/inc/i18n.php
index 8b8abf3a..9d6c1b7e 100644
--- a/web/inc/i18n.php
+++ b/web/inc/i18n.php
@@ -24,7 +24,7 @@ function _translate() {
 
     // Load language file (if not loaded yet)
     if (!isset($LANG[$l])) {
-        require_once($_SERVER['DOCUMENT_ROOT']."/inc/i18n/$l.php");
+        require_once($_SERVER['DOCUMENT_ROOT']."/inc/i18n/".basename($l).".php");
     }
 
     //if (!isset($LANG[$l][$key])) file_put_contents('/somewhere/something.log', "$key\n", FILE_APPEND);

From 914b53ea1ca85ff07e0d86ded561b157e8511835 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Aug 2021 14:11:14 +0200
Subject: [PATCH 1527/2300] Getting hostname from $_SERVER['HTTP_HOST'] for
 UploadHandler

---
 web/upload/UploadHandler.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/web/upload/UploadHandler.php b/web/upload/UploadHandler.php
index b77749ab..15adb406 100755
--- a/web/upload/UploadHandler.php
+++ b/web/upload/UploadHandler.php
@@ -2,7 +2,8 @@
 
 //session_start();
 
-$hostname = exec('hostname');
+$host_arr=explode(":", $_SERVER['HTTP_HOST']);
+$hostname=$host_arr[0];
 $port = $_SERVER['SERVER_PORT'];
 $expected_http_origin="https://".$hostname.":".$port;
 if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {

From d559763427efbbfef83e3a988b91ee8650247109 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Aug 2021 14:15:48 +0200
Subject: [PATCH 1528/2300] Preventing CSRF in edit/file

---
 web/edit/file/index.php | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/web/edit/file/index.php b/web/edit/file/index.php
index d6ae8dce..9addd23e 100644
--- a/web/edit/file/index.php
+++ b/web/edit/file/index.php
@@ -1,5 +1,14 @@
 <?php
 
+// Preventing CSRF
+$host_arr=explode(":", $_SERVER['HTTP_HOST']);
+$hostname=$host_arr[0];
+$port = $_SERVER['SERVER_PORT'];
+$expected_http_origin="https://".$hostname.":".$port;
+if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
+    die ("Nope.");
+}
+
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 $user = $_SESSION['user'];
 

From d66afcbaaa42be89edf57da761134b35e1b3f7cf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Aug 2021 14:20:13 +0200
Subject: [PATCH 1529/2300] Preventing CSRF in schedule / backup

---
 web/schedule/backup/index.php | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/web/schedule/backup/index.php b/web/schedule/backup/index.php
index 67c7b44f..10b83a24 100644
--- a/web/schedule/backup/index.php
+++ b/web/schedule/backup/index.php
@@ -1,4 +1,14 @@
 <?php
+
+// Preventing CSRF
+$host_arr=explode(":", $_SERVER['HTTP_HOST']);
+$hostname=$host_arr[0];
+$port = $_SERVER['SERVER_PORT'];
+$expected_http_origin="https://".$hostname.":".$port;
+if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
+    die ("Nope.");
+}
+
 // Init
 error_reporting(NULL);
 ob_start();

From 9f55ef33cf9b2ecaddb43a334440bd8ae8a49791 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Aug 2021 14:36:45 +0200
Subject: [PATCH 1530/2300] Update index.php

---
 web/schedule/backup/index.php | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/web/schedule/backup/index.php b/web/schedule/backup/index.php
index 10b83a24..6a36030b 100644
--- a/web/schedule/backup/index.php
+++ b/web/schedule/backup/index.php
@@ -1,14 +1,5 @@
 <?php
 
-// Preventing CSRF
-$host_arr=explode(":", $_SERVER['HTTP_HOST']);
-$hostname=$host_arr[0];
-$port = $_SERVER['SERVER_PORT'];
-$expected_http_origin="https://".$hostname.":".$port;
-if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
-    die ("Nope.");
-}
-
 // Init
 error_reporting(NULL);
 ob_start();

From 518e627b46ac6ee7eb8bf095abbb82fa57ef8c5e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Aug 2021 14:37:53 +0200
Subject: [PATCH 1531/2300] Update index.php

---
 web/edit/file/index.php | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/web/edit/file/index.php b/web/edit/file/index.php
index 9addd23e..9071af3a 100644
--- a/web/edit/file/index.php
+++ b/web/edit/file/index.php
@@ -1,12 +1,14 @@
 <?php
 
 // Preventing CSRF
-$host_arr=explode(":", $_SERVER['HTTP_HOST']);
-$hostname=$host_arr[0];
-$port = $_SERVER['SERVER_PORT'];
-$expected_http_origin="https://".$hostname.":".$port;
-if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
-    die ("Nope.");
+if ($_SERVER['REQUEST_METHOD']=='POST') {
+    $host_arr=explode(":", $_SERVER['HTTP_HOST']);
+    $hostname=$host_arr[0];
+    $port = $_SERVER['SERVER_PORT'];
+    $expected_http_origin="https://".$hostname.":".$port;
+    if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
+        die ("Nope.");
+    }
 }
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");

From 1d73ff488b5c4f3a1863c81e8632bda073cfe25a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Aug 2021 14:41:04 +0200
Subject: [PATCH 1532/2300] Preventing CSRF in schedule / backup

---
 web/schedule/backup/index.php | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/web/schedule/backup/index.php b/web/schedule/backup/index.php
index 6a36030b..06881993 100644
--- a/web/schedule/backup/index.php
+++ b/web/schedule/backup/index.php
@@ -1,5 +1,16 @@
 <?php
 
+// Preventing CSRF
+if ($_SERVER['REQUEST_METHOD']=='POST') {
+    $host_arr=explode(":", $_SERVER['HTTP_HOST']);
+    $hostname=$host_arr[0];
+    $port = $_SERVER['SERVER_PORT'];
+    $expected_http_origin="https://".$hostname.":".$port;
+    if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
+        die ("Nope.");
+    }
+}
+
 // Init
 error_reporting(NULL);
 ob_start();

From 55c591535cee2739c07017e37764aa950a494a16 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Aug 2021 14:53:16 +0200
Subject: [PATCH 1533/2300] Preventing all CSRF

---
 web/inc/secure_login.php | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 55b17e55..34b02695 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -49,3 +49,16 @@ if ($skip_login_url_check==0) {
         }
     }
 }
+
+// Preventing all CSRF
+if ($skip_login_url_check==0) {
+    if ($_SERVER['REQUEST_METHOD']=='POST') {
+        $host_arr=explode(":", $_SERVER['HTTP_HOST']);
+        $hostname=$host_arr[0];
+        $port = $_SERVER['SERVER_PORT'];
+        $expected_http_origin="https://".$hostname.":".$port;
+        if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
+            die ("Nope.");
+        }
+    }
+}

From 43da9e2aa71dfa92fb3a2a778d8a80722f17e670 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Aug 2021 15:14:16 +0200
Subject: [PATCH 1534/2300] Preventing CSRF in file_manager/fm_api.php

---
 web/file_manager/fm_api.php | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/web/file_manager/fm_api.php b/web/file_manager/fm_api.php
index cf4eef82..4a4dd9ec 100644
--- a/web/file_manager/fm_api.php
+++ b/web/file_manager/fm_api.php
@@ -2,6 +2,17 @@
 // Init
 //error_reporting(NULL);
 
+// Preventing CSRF
+if ($_SERVER['REQUEST_METHOD']=='POST') {
+    $host_arr=explode(":", $_SERVER['HTTP_HOST']);
+    $hostname=$host_arr[0];
+    $port = $_SERVER['SERVER_PORT'];
+    $expected_http_origin="https://".$hostname.":".$port;
+    if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
+        die ("Nope.");
+    }
+}
+
 header('Content-Type: application/json');
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");

From d0dba33d9475966c3955114ff7dce88a1db1608a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Aug 2021 16:37:34 +0200
Subject: [PATCH 1535/2300] Changing the Default Character Set To UTF-8 in
 MariaDB

---
 install/debian/10/mysql/my-large.cnf  | 7 +++++++
 install/debian/10/mysql/my-medium.cnf | 7 +++++++
 install/debian/10/mysql/my-small.cnf  | 7 +++++++
 3 files changed, 21 insertions(+)

diff --git a/install/debian/10/mysql/my-large.cnf b/install/debian/10/mysql/my-large.cnf
index febfda66..b056c316 100644
--- a/install/debian/10/mysql/my-large.cnf
+++ b/install/debian/10/mysql/my-large.cnf
@@ -1,11 +1,18 @@
 [client]
+default-character-set=utf8mb4
 port=3306
 socket=/var/run/mysqld/mysqld.sock
 
 [mysqld_safe]
 socket=/var/run/mysqld/mysqld.sock
 
+[mysql]
+default-character-set=utf8mb4
+
 [mysqld]
+collation-server = utf8mb4_unicode_520_ci
+init-connect='SET NAMES utf8mb4'
+character-set-server = utf8mb4
 user=mysql
 pid-file=/var/run/mysqld/mysqld.pid
 socket=/var/run/mysqld/mysqld.sock
diff --git a/install/debian/10/mysql/my-medium.cnf b/install/debian/10/mysql/my-medium.cnf
index 3aa8fe22..33aa04c2 100644
--- a/install/debian/10/mysql/my-medium.cnf
+++ b/install/debian/10/mysql/my-medium.cnf
@@ -1,11 +1,18 @@
 [client]
+default-character-set=utf8mb4
 port=3306
 socket=/var/run/mysqld/mysqld.sock
 
 [mysqld_safe]
 socket=/var/run/mysqld/mysqld.sock
 
+[mysql]
+default-character-set=utf8mb4
+
 [mysqld]
+collation-server = utf8mb4_unicode_520_ci
+init-connect='SET NAMES utf8mb4'
+character-set-server = utf8mb4
 user=mysql
 pid-file=/var/run/mysqld/mysqld.pid
 socket=/var/run/mysqld/mysqld.sock
diff --git a/install/debian/10/mysql/my-small.cnf b/install/debian/10/mysql/my-small.cnf
index bd53770b..857f48ce 100644
--- a/install/debian/10/mysql/my-small.cnf
+++ b/install/debian/10/mysql/my-small.cnf
@@ -1,11 +1,18 @@
 [client]
+default-character-set=utf8mb4
 port=3306
 socket=/var/run/mysqld/mysqld.sock
 
 [mysqld_safe]
 socket=/var/run/mysqld/mysqld.sock
 
+[mysql]
+default-character-set=utf8mb4
+
 [mysqld]
+collation-server = utf8mb4_unicode_520_ci
+init-connect='SET NAMES utf8mb4'
+character-set-server = utf8mb4
 user=mysql
 pid-file=/var/run/mysqld/mysqld.pid
 socket=/var/run/mysqld/mysqld.sock

From b71238813b20e33cad60d24fa82a11b746bf663a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Aug 2021 18:08:13 +0200
Subject: [PATCH 1536/2300] Changing the Default Character Set To UTF-8 in
 MariaDB

---
 install/debian/11/mysql/my-large.cnf  | 7 +++++++
 install/debian/11/mysql/my-medium.cnf | 7 +++++++
 install/debian/11/mysql/my-small.cnf  | 7 +++++++
 3 files changed, 21 insertions(+)

diff --git a/install/debian/11/mysql/my-large.cnf b/install/debian/11/mysql/my-large.cnf
index febfda66..b056c316 100644
--- a/install/debian/11/mysql/my-large.cnf
+++ b/install/debian/11/mysql/my-large.cnf
@@ -1,11 +1,18 @@
 [client]
+default-character-set=utf8mb4
 port=3306
 socket=/var/run/mysqld/mysqld.sock
 
 [mysqld_safe]
 socket=/var/run/mysqld/mysqld.sock
 
+[mysql]
+default-character-set=utf8mb4
+
 [mysqld]
+collation-server = utf8mb4_unicode_520_ci
+init-connect='SET NAMES utf8mb4'
+character-set-server = utf8mb4
 user=mysql
 pid-file=/var/run/mysqld/mysqld.pid
 socket=/var/run/mysqld/mysqld.sock
diff --git a/install/debian/11/mysql/my-medium.cnf b/install/debian/11/mysql/my-medium.cnf
index 3aa8fe22..33aa04c2 100644
--- a/install/debian/11/mysql/my-medium.cnf
+++ b/install/debian/11/mysql/my-medium.cnf
@@ -1,11 +1,18 @@
 [client]
+default-character-set=utf8mb4
 port=3306
 socket=/var/run/mysqld/mysqld.sock
 
 [mysqld_safe]
 socket=/var/run/mysqld/mysqld.sock
 
+[mysql]
+default-character-set=utf8mb4
+
 [mysqld]
+collation-server = utf8mb4_unicode_520_ci
+init-connect='SET NAMES utf8mb4'
+character-set-server = utf8mb4
 user=mysql
 pid-file=/var/run/mysqld/mysqld.pid
 socket=/var/run/mysqld/mysqld.sock
diff --git a/install/debian/11/mysql/my-small.cnf b/install/debian/11/mysql/my-small.cnf
index bd53770b..857f48ce 100644
--- a/install/debian/11/mysql/my-small.cnf
+++ b/install/debian/11/mysql/my-small.cnf
@@ -1,11 +1,18 @@
 [client]
+default-character-set=utf8mb4
 port=3306
 socket=/var/run/mysqld/mysqld.sock
 
 [mysqld_safe]
 socket=/var/run/mysqld/mysqld.sock
 
+[mysql]
+default-character-set=utf8mb4
+
 [mysqld]
+collation-server = utf8mb4_unicode_520_ci
+init-connect='SET NAMES utf8mb4'
+character-set-server = utf8mb4
 user=mysql
 pid-file=/var/run/mysqld/mysqld.pid
 socket=/var/run/mysqld/mysqld.sock

From dcbb7b80f985102118c223819f166fc05ace1940 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 23 Aug 2021 20:47:57 +0200
Subject: [PATCH 1537/2300] $OVERRIDE_BACKUP_PATH

---
 bin/v-restore-user | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index 8aef31b1..a78ffc4d 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -36,6 +36,10 @@ source $VESTA/func/db.sh
 source $VESTA/func/rebuild.sh
 source $VESTA/conf/vesta.conf
 
+if [ ! -z "$OVERRIDE_BACKUP_PATH" ]; then
+    BACKUP=$OVERRIDE_BACKUP_PATH
+fi
+
 # Check backup ownership function
 is_backup_available() {
     passed=false

From 29f83585163f504bba783e04c89f9b9c385d2e65 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 23 Aug 2021 20:50:48 +0200
Subject: [PATCH 1538/2300] Override backup path

---
 bin/v-backup-user | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 2e245156..767eba22 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -41,6 +41,11 @@ is_backup_enabled
 
 wait_for_backup_if_it_is_not_time_for_backup
 
+# Override backup path
+if [ ! -z "$OVERRIDE_BACKUP_PATH" ]; then
+    BACKUP=$OVERRIDE_BACKUP_PATH
+fi
+
 # Set backup directory if undefined
 if [ -z "$BACKUP" ]; then
     BACKUP=/backup

From c6226e403ac62d30fe0260398ea2e3b4bf3f8043 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 16:45:15 +0200
Subject: [PATCH 1539/2300] systemctl reset-failed php7.3

---
 .../11/templates/web/apache2/PHP-FPM-74-public.sh | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
index 6f6290b1..814b434b 100755
--- a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
@@ -46,29 +46,35 @@ pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
     service php5.6-fpm restart
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
     service php7.0-fpm restart
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
     service php7.1-fpm restart
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
     service php7.2-fpm restart
 fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
     service php7.3-fpm restart
 fi
 
@@ -83,10 +89,17 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_74
+    systemctl reset-failed php7.4-fpm
     service php7.4-fpm restart
 fi
 if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.4/fpm/pool.d/www.conf
 fi
 
-exit 0
\ No newline at end of file
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    service php8.0-fpm restart
+fi
+
+exit 0

From 4942f52f7feb85edde00d588c4f340ceaa1bf551 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 16:46:40 +0200
Subject: [PATCH 1540/2300] systemctl reset-failed php7.4-fpm

---
 .../11/templates/web/apache2/PHP-FPM-74.sh    | 19 ++++++++++++++++---
 1 file changed, 16 insertions(+), 3 deletions(-)

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74.sh b/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
index 482cdd7e..814b434b 100755
--- a/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 8
-request_terminate_timeout = 90s
+pm.max_children = 16
+request_terminate_timeout = 30s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
+php_admin_value[max_execution_time] = 20
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -46,29 +46,35 @@ pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
     service php5.6-fpm restart
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
     service php7.0-fpm restart
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
     service php7.1-fpm restart
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
     service php7.2-fpm restart
 fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
     service php7.3-fpm restart
 fi
 
@@ -83,10 +89,17 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_74
+    systemctl reset-failed php7.4-fpm
     service php7.4-fpm restart
 fi
 if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.4/fpm/pool.d/www.conf
 fi
 
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    service php8.0-fpm restart
+fi
+
 exit 0

From 628464b96986102139e62decb9d0374e545ed8b4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 16:48:17 +0200
Subject: [PATCH 1541/2300] Update PHP-FPM-74.sh

---
 install/debian/11/templates/web/apache2/PHP-FPM-74.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74.sh b/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
index 814b434b..5bc6f5fb 100755
--- a/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"

From 9cb517a5148e6417667acc6e26eb1fdcc4548066 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 17:00:40 +0200
Subject: [PATCH 1542/2300] Update PHP-FPM-73.sh

---
 .../10/templates/web/apache2/PHP-FPM-73.sh    | 25 ++++++++++++++-----
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73.sh b/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
index 72f9cec6..57b10863 100755
--- a/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
@@ -46,25 +46,30 @@ pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
-    service php5.6-fpm restart
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
-    service php7.0-fpm restart
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
-    service php7.1-fpm restart
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
-    service php7.2-fpm restart
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
 fi
 
 write_file=0
@@ -78,7 +83,8 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_73
-    service php7.3-fpm restart
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
 fi
 if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.3/fpm/pool.d/www.conf
@@ -86,7 +92,14 @@ fi
 
 if [ -f "$pool_file_74" ]; then
     rm $pool_file_74
-    service php7.4-fpm restart
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
 fi
 
 exit 0

From ce75daf4de838f0d7beb36a9a2bade188be2b591 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 17:08:47 +0200
Subject: [PATCH 1543/2300] systemctl reset-failed php7.3-fpm

---
 .../web/apache2/PHP-FPM-73-public.sh          | 37 ++++++++++++++-----
 1 file changed, 27 insertions(+), 10 deletions(-)

diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh
index cc55b61e..57b10863 100755
--- a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -45,25 +45,31 @@ pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
 pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
-    service php5.6-fpm restart
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
-    service php7.0-fpm restart
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
-    service php7.1-fpm restart
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
-    service php7.2-fpm restart
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
 fi
 
 write_file=0
@@ -75,14 +81,25 @@ else
     write_file=1
   fi
 fi
-
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_73
-    service php7.3-fpm restart
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
 fi
-
 if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.3/fpm/pool.d/www.conf
 fi
 
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
 exit 0

From 6b1dd5ae189448838640a9c424d087a7ddef7915 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 17:13:52 +0200
Subject: [PATCH 1544/2300] systemctl restart php7.4-fpm

---
 .../debian/11/templates/web/apache2/PHP-FPM-74.sh  | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74.sh b/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
index 5bc6f5fb..0ff7b21b 100755
--- a/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
@@ -51,31 +51,31 @@ pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
     systemctl reset-failed php5.6-fpm
-    service php5.6-fpm restart
+    systemctl restart php5.6-fpm
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
     systemctl reset-failed php7.0-fpm
-    service php7.0-fpm restart
+    systemctl restart php7.0-fpm
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
     systemctl reset-failed php7.1-fpm
-    service php7.1-fpm restart
+    systemctl restart php7.1-fpm
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
     systemctl reset-failed php7.2-fpm
-    service php7.2-fpm restart
+    systemctl restart php7.2-fpm
 fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
     systemctl reset-failed php7.3-fpm
-    service php7.3-fpm restart
+    systemctl restart php7.3-fpm
 fi
 
 write_file=0
@@ -90,7 +90,7 @@ fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_74
     systemctl reset-failed php7.4-fpm
-    service php7.4-fpm restart
+    systemctl restart php7.4-fpm
 fi
 if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.4/fpm/pool.d/www.conf
@@ -99,7 +99,7 @@ fi
 if [ -f "$pool_file_80" ]; then
     rm $pool_file_80
     systemctl reset-failed php8.0-fpm
-    service php8.0-fpm restart
+    systemctl restart php8.0-fpm
 fi
 
 exit 0

From abcf557d059c9482d6eb222a74e155321599d236 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 17:15:14 +0200
Subject: [PATCH 1545/2300] systemctl restart php7.4-fpm

---
 .../web/apache2/PHP-FPM-74-public.sh          | 20 +++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
index 814b434b..0ff7b21b 100755
--- a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -51,31 +51,31 @@ pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
     systemctl reset-failed php5.6-fpm
-    service php5.6-fpm restart
+    systemctl restart php5.6-fpm
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
     systemctl reset-failed php7.0-fpm
-    service php7.0-fpm restart
+    systemctl restart php7.0-fpm
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
     systemctl reset-failed php7.1-fpm
-    service php7.1-fpm restart
+    systemctl restart php7.1-fpm
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
     systemctl reset-failed php7.2-fpm
-    service php7.2-fpm restart
+    systemctl restart php7.2-fpm
 fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
     systemctl reset-failed php7.3-fpm
-    service php7.3-fpm restart
+    systemctl restart php7.3-fpm
 fi
 
 write_file=0
@@ -90,7 +90,7 @@ fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_74
     systemctl reset-failed php7.4-fpm
-    service php7.4-fpm restart
+    systemctl restart php7.4-fpm
 fi
 if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.4/fpm/pool.d/www.conf
@@ -99,7 +99,7 @@ fi
 if [ -f "$pool_file_80" ]; then
     rm $pool_file_80
     systemctl reset-failed php8.0-fpm
-    service php8.0-fpm restart
+    systemctl restart php8.0-fpm
 fi
 
 exit 0

From df377c677cd26e25fccfd4d0d2ce7b2475c8503d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 17:58:46 +0200
Subject: [PATCH 1546/2300] Update PHP-FPM-74.sh

---
 .../tools/apache-fpm-tpl/PHP-FPM-74.sh        | 25 ++++++++++++++-----
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
index 482cdd7e..0ff7b21b 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
@@ -46,30 +46,36 @@ pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
-    service php5.6-fpm restart
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
-    service php7.0-fpm restart
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
-    service php7.1-fpm restart
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
-    service php7.2-fpm restart
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
 fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
-    service php7.3-fpm restart
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
 fi
 
 write_file=0
@@ -83,10 +89,17 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_74
-    service php7.4-fpm restart
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
 fi
 if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.4/fpm/pool.d/www.conf
 fi
 
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
 exit 0

From 77fa4d0a6b38f5f3e6f28f4f6ac758becf4c7660 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 18:00:27 +0200
Subject: [PATCH 1547/2300] Update PHP-FPM-74-public.sh

---
 .../tools/apache-fpm-tpl/PHP-FPM-74-public.sh | 33 +++++++++++++------
 1 file changed, 23 insertions(+), 10 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh
index 6f6290b1..0ff7b21b 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -46,30 +46,36 @@ pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
-    service php5.6-fpm restart
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
-    service php7.0-fpm restart
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
-    service php7.1-fpm restart
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
-    service php7.2-fpm restart
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
 fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
-    service php7.3-fpm restart
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
 fi
 
 write_file=0
@@ -83,10 +89,17 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_74
-    service php7.4-fpm restart
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
 fi
 if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.4/fpm/pool.d/www.conf
 fi
 
-exit 0
\ No newline at end of file
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+exit 0

From c2fc51e0697a04b47d615117071a36bdf36a12f9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 18:01:57 +0200
Subject: [PATCH 1548/2300] Update PHP-FPM-73.sh

---
 .../tools/apache-fpm-tpl/PHP-FPM-73.sh        | 25 ++++++++++++++-----
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh
index 72f9cec6..57b10863 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh
@@ -46,25 +46,30 @@ pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
-    service php5.6-fpm restart
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
-    service php7.0-fpm restart
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
-    service php7.1-fpm restart
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
-    service php7.2-fpm restart
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
 fi
 
 write_file=0
@@ -78,7 +83,8 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_73
-    service php7.3-fpm restart
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
 fi
 if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.3/fpm/pool.d/www.conf
@@ -86,7 +92,14 @@ fi
 
 if [ -f "$pool_file_74" ]; then
     rm $pool_file_74
-    service php7.4-fpm restart
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
 fi
 
 exit 0

From 5e24bf72225d3c0f2c021c259835d7184f482e5f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 18:03:23 +0200
Subject: [PATCH 1549/2300] Update PHP-FPM-73-public.sh

---
 .../tools/apache-fpm-tpl/PHP-FPM-73-public.sh | 33 +++++++++++++------
 1 file changed, 23 insertions(+), 10 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.sh
index 1cddda74..57b10863 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -46,25 +46,30 @@ pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
-    service php5.6-fpm restart
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
-    service php7.0-fpm restart
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
-    service php7.1-fpm restart
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
-    service php7.2-fpm restart
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
 fi
 
 write_file=0
@@ -78,7 +83,8 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_73
-    service php7.3-fpm restart
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
 fi
 if [ -f "/etc/php/7.3/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.3/fpm/pool.d/www.conf
@@ -86,7 +92,14 @@ fi
 
 if [ -f "$pool_file_74" ]; then
     rm $pool_file_74
-    service php7.4-fpm restart
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
 fi
 
-exit 0
\ No newline at end of file
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+exit 0

From a56a2c7dd51e4cdf8e81b2a18db70aafded50559 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 18:17:20 +0200
Subject: [PATCH 1550/2300] Update PHP-FPM-80.sh

---
 .../tools/apache-fpm-tpl/PHP-FPM-80.sh        | 23 ++++++++++++-------
 1 file changed, 15 insertions(+), 8 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh
index 5f119dd8..dfdb85f8 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh
@@ -50,32 +50,38 @@ pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
-    service php5.6-fpm restart
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
-    service php7.0-fpm restart
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
-    service php7.1-fpm restart
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
-    service php7.2-fpm restart
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
 fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
-    service php7.3-fpm restart
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
 fi
 
 if [ -f "$pool_file_74" ]; then
     rm $pool_file_74
-    service php7.4-fpm restart
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
 fi
 
 write_file=0
@@ -89,10 +95,11 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_80
-    service php8.0-fpm restart
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
 fi
 if [ -f "/etc/php/8.0/fpm/pool.d/www.conf" ]; then
     rm /etc/php/8.0/fpm/pool.d/www.conf
 fi
 
-exit 0
\ No newline at end of file
+exit 0

From e6b559cdf2416e06502cee9912abd3c48ce954d5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 18:18:42 +0200
Subject: [PATCH 1551/2300] Update PHP-FPM-80.sh

---
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh
index dfdb85f8..343392c2 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"

From d368bf72914ee0c936bee8072312e7ef4b584131 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 18:20:14 +0200
Subject: [PATCH 1552/2300] Update PHP-FPM-80-public.sh

---
 .../tools/apache-fpm-tpl/PHP-FPM-80-public.sh | 29 ++++++++++++-------
 1 file changed, 18 insertions(+), 11 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.sh
index 5f119dd8..343392c2 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.sh
@@ -17,8 +17,8 @@ user = $1
 group = $1
 
 pm = ondemand
-pm.max_children = 16
-request_terminate_timeout = 30s
+pm.max_children = 8
+request_terminate_timeout = 90s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -27,7 +27,7 @@ php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
 php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 20
+php_admin_value[max_execution_time] = 30
 php_admin_value[post_max_size] = 80M
 php_admin_value[memory_limit] = 256M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
@@ -50,32 +50,38 @@ pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
-    service php5.6-fpm restart
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
-    service php7.0-fpm restart
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
-    service php7.1-fpm restart
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
-    service php7.2-fpm restart
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
 fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
-    service php7.3-fpm restart
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
 fi
 
 if [ -f "$pool_file_74" ]; then
     rm $pool_file_74
-    service php7.4-fpm restart
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
 fi
 
 write_file=0
@@ -89,10 +95,11 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_80
-    service php8.0-fpm restart
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
 fi
 if [ -f "/etc/php/8.0/fpm/pool.d/www.conf" ]; then
     rm /etc/php/8.0/fpm/pool.d/www.conf
 fi
 
-exit 0
\ No newline at end of file
+exit 0

From d36218db92d6670b91099393599e582847a51bc7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 24 Aug 2021 18:53:56 +0200
Subject: [PATCH 1553/2300] Create SECURITY.md

close https://github.com/myvesta/vesta/issues/130
---
 SECURITY.md | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..32d7405f
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,5 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please report security issues to info@myvestacp.com

From e52f036dfbe7d20857adae1d54ae28c405276e30 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 26 Aug 2021 14:30:33 +0200
Subject: [PATCH 1554/2300] sury.org bullseye repo

---
 src/deb/for-download/tools/multi-php-install.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 761efac7..ffee228e 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -95,6 +95,9 @@ if [ "$inst_repo" -eq 1 ]; then
     if [ $debian_version -eq 10 ]; then
       sh -c 'echo "deb https://packages.sury.org/php/ buster main" > /etc/apt/sources.list.d/php.list'
     fi
+    if [ $debian_version -eq 11 ]; then
+      sh -c 'echo "deb https://packages.sury.org/php/ bullseye main" > /etc/apt/sources.list.d/php.list'
+    fi
     apt update
     apt upgrade -y
     press_enter "=== Press enter to continue ==============================================================================="

From b9ccc103f1bf4467d8ad63dbca44fdd514e2ad4a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 26 Aug 2021 14:32:34 +0200
Subject: [PATCH 1555/2300] Enabling nginx official repo for deb11

---
 install/vst-install-debian.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index e67aa4f2..d835bdc5 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -527,11 +527,11 @@ check_result $? 'apt-get upgrade failed'
 
 # Installing nginx repo
 apt=/etc/apt/sources.list.d
-if [ "$release" -ne 11 ]; then
+# if [ "$release" -ne 11 ]; then
     echo "deb http://nginx.org/packages/debian/ $codename nginx" > $apt/nginx.list
     wget http://nginx.org/keys/nginx_signing.key -O /tmp/nginx_signing.key
     apt-key add /tmp/nginx_signing.key
-fi
+# fi
 
 # Installing vesta repo
 echo "deb http://$RHOST/$codename/ $codename vesta" > $apt/vesta.list

From 7767ab759b8e01fbff57ca6def549fcc0f5b4048 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 27 Aug 2021 15:51:37 +0200
Subject: [PATCH 1556/2300] systemctl reset-failed php7.2-fpm

---
 .../tools/apache-fpm-tpl/PHP-FPM-72.sh        | 25 ++++++++++++++-----
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh
index 33442862..6541a0dc 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh
@@ -46,20 +46,24 @@ pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
-    service php5.6-fpm restart
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
-    service php7.0-fpm restart
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
 fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
-    service php7.1-fpm restart
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
 fi
 
 write_file=0
@@ -73,7 +77,8 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_72
-    service php7.2-fpm restart
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
 fi
 if [ -f "/etc/php/7.2/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.2/fpm/pool.d/www.conf
@@ -81,12 +86,20 @@ fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
-    service php7.3-fpm restart
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
 fi
 
 if [ -f "$pool_file_74" ]; then
     rm $pool_file_74
-    service php7.4-fpm restart
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
 fi
 
 exit 0

From ded5ca220275f5c9c713db3f19f53502eb4db181 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 27 Aug 2021 16:01:52 +0200
Subject: [PATCH 1557/2300] systemctl reset-failed php7.1-fpm

---
 .../tools/apache-fpm-tpl/PHP-FPM-71.sh        | 26 ++++++++++++++-----
 1 file changed, 20 insertions(+), 6 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh
index 8688598c..6110e898 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh
@@ -46,15 +46,18 @@ pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
-    service php5.6-fpm restart
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
 fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
-    service php7.0-fpm restart
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
 fi
 
 write_file=0
@@ -68,7 +71,8 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_71
-    service php7.1-fpm restart
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
 fi
 if [ -f "/etc/php/7.1/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.1/fpm/pool.d/www.conf
@@ -76,17 +80,27 @@ fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
-    service php7.2-fpm restart
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
 fi
 
+
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
-    service php7.3-fpm restart
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
 fi
 
 if [ -f "$pool_file_74" ]; then
     rm $pool_file_74
-    service php7.4-fpm restart
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
 fi
 
 exit 0

From 2d4efd2db988a3c98546d20ff3b1779cf35f3a74 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 27 Aug 2021 16:05:18 +0200
Subject: [PATCH 1558/2300] systemctl reset-failed php7.0-fpm

---
 .../tools/apache-fpm-tpl/PHP-FPM-70.sh        | 25 ++++++++++++++-----
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh
index fefdf195..0e742ad8 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh
@@ -46,10 +46,12 @@ pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
-    service php5.6-fpm restart
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
 fi
 
 write_file=0
@@ -63,7 +65,8 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_70
-    service php7.0-fpm restart
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
 fi
 if [ -f "/etc/php/7.0/fpm/pool.d/www.conf" ]; then
     rm /etc/php/7.0/fpm/pool.d/www.conf
@@ -71,22 +74,32 @@ fi
 
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
-    service php7.1-fpm restart
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
-    service php7.2-fpm restart
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
 fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
-    service php7.3-fpm restart
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
 fi
 
 if [ -f "$pool_file_74" ]; then
     rm $pool_file_74
-    service php7.4-fpm restart
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
 fi
 
 exit 0

From 8e666c269b8d1cdf01275831c9bab7e75901c4f7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 27 Aug 2021 16:09:58 +0200
Subject: [PATCH 1559/2300] systemctl reset-failed php5.6-fpm

---
 .../tools/apache-fpm-tpl/PHP-FPM-56.sh        | 26 ++++++++++++++-----
 1 file changed, 20 insertions(+), 6 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh
index 4f54592d..b9137821 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh
@@ -46,6 +46,7 @@ pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
 pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 
 write_file=0
 if [ ! -f "$pool_file_56" ]; then
@@ -58,7 +59,8 @@ else
 fi
 if [ $write_file -eq 1 ]; then
     echo "$pool_conf" > $pool_file_56
-    service php5.6-fpm restart
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
 fi
 if [ -f "/etc/php/5.6/fpm/pool.d/www.conf" ]; then
     rm /etc/php/5.6/fpm/pool.d/www.conf
@@ -66,27 +68,39 @@ fi
 
 if [ -f "$pool_file_70" ]; then
     rm $pool_file_70
-    service php7.0-fpm restart
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
 fi
 
+
 if [ -f "$pool_file_71" ]; then
     rm $pool_file_71
-    service php7.1-fpm restart
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
 fi
 
 if [ -f "$pool_file_72" ]; then
     rm $pool_file_72
-    service php7.2-fpm restart
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
 fi
 
 if [ -f "$pool_file_73" ]; then
     rm $pool_file_73
-    service php7.3-fpm restart
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
 fi
 
 if [ -f "$pool_file_74" ]; then
     rm $pool_file_74
-    service php7.4-fpm restart
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
 fi
 
 exit 0

From b4204da66fcad7eb279f28fe0b0664377def62f7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 28 Aug 2021 20:01:47 +0200
Subject: [PATCH 1560/2300] Fix for: news@anydomain.com went to /var/spool/news

Issue https://github.com/hestiacp/hestiacp/issues/2078
Credits to HestiaCP
---
 install/debian/10/exim/exim4.conf.template | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
index 7cc13c36..cb79ab3c 100644
--- a/install/debian/10/exim/exim4.conf.template
+++ b/install/debian/10/exim/exim4.conf.template
@@ -247,6 +247,8 @@ userforward:
   driver = redirect
   check_local_user
   file = $home/.forward
+  require_files = ${local_part}:+${home}/.forward
+  domains = +local_domains
   allow_filter
   no_verify
   no_expn

From b8963d5b2d9909df1245e6a73e3b794145bcc28b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 28 Aug 2021 20:06:24 +0200
Subject: [PATCH 1561/2300] Fix for: news@anydomain.com went to /var/spool/news

Issue https://github.com/hestiacp/hestiacp/issues/2078
Credits to @HestiaCP
---
 install/debian/11/exim/exim4.conf.template | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install/debian/11/exim/exim4.conf.template b/install/debian/11/exim/exim4.conf.template
index fe92680f..977dc661 100644
--- a/install/debian/11/exim/exim4.conf.template
+++ b/install/debian/11/exim/exim4.conf.template
@@ -247,6 +247,8 @@ userforward:
   driver = redirect
   check_local_user
   file = $home/.forward
+  require_files = ${local_part}:+${home}/.forward
+  domains = +local_domains
   allow_filter
   no_verify
   no_expn

From 0686c6d5f6004784c9c3cd1323efe9af17c77550 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 28 Aug 2021 23:35:10 +0200
Subject: [PATCH 1562/2300] More logical check expression in secure_login.php

---
 web/inc/secure_login.php | 38 +++++++++++++++++++-------------------
 1 file changed, 19 insertions(+), 19 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 34b02695..b5fcf32f 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -1,38 +1,38 @@
 <?php
 
-$skip_login_url_check=0;
+$secure_gate_check=true;
 
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/inc/mail-wrapper.php') $skip_login_url_check=1; // it can be executed only from cli
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/inc/mail-wrapper.php') $secure_gate_check=false; // it can be executed only from cli
 
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/index.php') $skip_login_url_check=1; // it's accessible only from localhost
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/index.php') $skip_login_url_check=1;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/index.php') $secure_gate_check=false; // it's accessible only from localhost
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/index.php') $secure_gate_check=false;
 
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/api/index.php') $skip_login_url_check=1; // api has its own security check
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//api/index.php') $skip_login_url_check=1;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/api/index.php') $secure_gate_check=false; // api has its own security check
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//api/index.php') $secure_gate_check=false;
 
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/set-ar.php') $skip_login_url_check=1; // commercial addon for changing auto-reply from Roundcube, not included in this fork, also accessible only from localhost
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/set-ar.php') $skip_login_url_check=1;
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/get-ar.php') $skip_login_url_check=1;
-if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/get-ar.php') $skip_login_url_check=1;
-if (substr($_SERVER['SCRIPT_FILENAME'], 0, 28)=='/usr/local/vesta/web/custom/') $skip_login_url_check=1; // custom scripts like git webhooks
-if (substr($_SERVER['SCRIPT_FILENAME'], 0, 29)=='/usr/local/vesta/web//custom/') $skip_login_url_check=1;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/set-ar.php') $secure_gate_check=false; // commercial addon for changing auto-reply from Roundcube, not included in this fork, also accessible only from localhost
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/set-ar.php') $secure_gate_check=false;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/get-ar.php') $secure_gate_check=false;
+if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/get-ar.php') $secure_gate_check=false;
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 28)=='/usr/local/vesta/web/custom/') $secure_gate_check=false; // custom scripts like git webhooks
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 29)=='/usr/local/vesta/web//custom/') $secure_gate_check=false;
 
-if (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/vesta/bin/') $skip_login_url_check=1; // allow executing v-* PHP scripts from bash
-if (substr($_SERVER['SCRIPT_FILENAME'], 0, 29)=='/usr/local/vesta/softaculous/') $skip_login_url_check=1; // allow softaculous
-if (substr($_SERVER['SCRIPT_FILENAME'], 0, 33)=='/usr/local/vesta/web/softaculous/') $skip_login_url_check=1; // allow softaculous
-if (substr($_SERVER['SCRIPT_FILENAME'], 0, 34)=='/usr/local/vesta/web//softaculous/') $skip_login_url_check=1; // allow softaculous
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/vesta/bin/') $secure_gate_check=false; // allow executing v-* PHP scripts from bash
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 29)=='/usr/local/vesta/softaculous/') $secure_gate_check=false; // allow softaculous
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 33)=='/usr/local/vesta/web/softaculous/') $secure_gate_check=false; // allow softaculous
+if (substr($_SERVER['SCRIPT_FILENAME'], 0, 34)=='/usr/local/vesta/web//softaculous/') $secure_gate_check=false; // allow softaculous
 
 $check_file="/usr/local/vesta/conf_web/allow_ip_for_secret_url.conf";
 if (file_exists($check_file)) {
     $file_content=file($check_file);
     if (is_array($file_content)) {
         foreach ($file_content as $line) {
-            if (trim($line) == $_SERVER['REMOTE_ADDR']) {$skip_login_url_check=1; break;}
+            if (trim($line) == $_SERVER['REMOTE_ADDR']) {$secure_gate_check=false; break;}
         }
     }
 }
 
-if ($skip_login_url_check==0) {
+if ($secure_gate_check==true) {
     if (!isset($login_url_loaded)) {
         $login_url_loaded=1;
         if (file_exists('/usr/local/vesta/web/inc/login_url.php')) {
@@ -51,7 +51,7 @@ if ($skip_login_url_check==0) {
 }
 
 // Preventing all CSRF
-if ($skip_login_url_check==0) {
+if ($secure_gate_check==true) {
     if ($_SERVER['REQUEST_METHOD']=='POST') {
         $host_arr=explode(":", $_SERVER['HTTP_HOST']);
         $hostname=$host_arr[0];

From c7bd10ab3b2f9f5c7b119e50cf2bf3abcfcf88ed Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 00:04:27 +0200
Subject: [PATCH 1563/2300] Smarter preventing all POST CSRF

---
 web/inc/secure_login.php | 25 ++++++++++++++++++++++---
 1 file changed, 22 insertions(+), 3 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index b5fcf32f..ce614ea1 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -50,15 +50,34 @@ if ($secure_gate_check==true) {
     }
 }
 
-// Preventing all CSRF
-if ($secure_gate_check==true) {
+function prevent_post_csrf ($hard_check=false) {
+    if (file_exists('/usr/local/vesta/conf_web/dont_check_csrf')) return; 
     if ($_SERVER['REQUEST_METHOD']=='POST') {
+        if ($hard_check==false) {
+            if (isset($_SERVER['HTTP_HOST']) == false) return;
+            if (isset($_SERVER['HTTP_ORIGIN']) == false) return;
+            if (isset($_SERVER['SERVER_PORT']) == false) return;
+        } else {
+            if (isset($_SERVER['HTTP_HOST']) == false) $_SERVER['HTTP_HOST']='';
+            if (isset($_SERVER['HTTP_ORIGIN']) == false) $_SERVER['HTTP_ORIGIN']='';
+            if (isset($_SERVER['SERVER_PORT']) == false) $_SERVER['HTTP_PORT']='';
+        }
+        $_SERVER['HTTP_HOST']=strtolower($_SERVER['HTTP_HOST']);
+        $_SERVER['HTTP_ORIGIN']=strtolower($_SERVER['HTTP_ORIGIN']);
+        if ($hard_check==false) {
+            if (substr($_SERVER['HTTP_ORIGIN'], 0,7) != "http://" && substr($_SERVER['HTTP_ORIGIN'], 0,8)!="https://") return;
+        }
         $host_arr=explode(":", $_SERVER['HTTP_HOST']);
         $hostname=$host_arr[0];
         $port = $_SERVER['SERVER_PORT'];
         $expected_http_origin="https://".$hostname.":".$port;
+        $level=1;
+        if ($hard_check==true) $level=2;
         if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
-            die ("Nope.");
+            die ("CSRF detected (".$level.").<br />Your browser sent HTTP_ORIGIN with value: <b>".$_SERVER['HTTP_ORIGIN']."</b><br />myVesta expected HTTP_ORIGIN with value: <b>".$expected_http_origin."</b><br />Probably some browser extension is blocking it... disable all extensions and try again (or try to login with other browser).<br />If you are system administrator of this server, you can disable CSRF check by doing (as root, in SSH): <b>mkdir /usr/local/vesta/conf_web && touch /usr/local/vesta/conf_web/dont_check_csrf</b><br >(but we don't recommend it)<br />If you are not system administrator of this server and you can't access the hosting panel even you disabled all browser extensions, please copy-paste this message to the system administrator of this server.<br />Once again, before you disable CSRF check, try to disable all browser extensions or try to login with other browser.");
         }
     }
 }
+
+// Preventing all POST CSRF
+if ($secure_gate_check==true) prevent_post_csrf();

From c2a30bcd31d41ce90146734af3d52073ae1c169a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 00:07:41 +0200
Subject: [PATCH 1564/2300] Preventing CSRF in /edit/file/

---
 web/edit/file/index.php | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/web/edit/file/index.php b/web/edit/file/index.php
index 9071af3a..b36a4656 100644
--- a/web/edit/file/index.php
+++ b/web/edit/file/index.php
@@ -1,15 +1,7 @@
 <?php
 
 // Preventing CSRF
-if ($_SERVER['REQUEST_METHOD']=='POST') {
-    $host_arr=explode(":", $_SERVER['HTTP_HOST']);
-    $hostname=$host_arr[0];
-    $port = $_SERVER['SERVER_PORT'];
-    $expected_http_origin="https://".$hostname.":".$port;
-    if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
-        die ("Nope.");
-    }
-}
+prevent_post_csrf(true);
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 $user = $_SESSION['user'];

From 92297f2fc250fcf57e3b26202065a8f52e1464c7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 00:10:42 +0200
Subject: [PATCH 1565/2300] Preventing CSRF in UploadHandler.php

---
 web/upload/UploadHandler.php | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/web/upload/UploadHandler.php b/web/upload/UploadHandler.php
index 15adb406..511ec4b3 100755
--- a/web/upload/UploadHandler.php
+++ b/web/upload/UploadHandler.php
@@ -2,13 +2,8 @@
 
 //session_start();
 
-$host_arr=explode(":", $_SERVER['HTTP_HOST']);
-$hostname=$host_arr[0];
-$port = $_SERVER['SERVER_PORT'];
-$expected_http_origin="https://".$hostname.":".$port;
-if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
-    die ("Nope.");
-}
+// Preventing CSRF
+prevent_post_csrf(true);
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 

From 9277b3780007a371ea7bb067a7a40dc39ed05d0d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 00:12:09 +0200
Subject: [PATCH 1566/2300] Preventing CSRF in /schedule/backup

---
 web/schedule/backup/index.php | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/web/schedule/backup/index.php b/web/schedule/backup/index.php
index 06881993..07412e71 100644
--- a/web/schedule/backup/index.php
+++ b/web/schedule/backup/index.php
@@ -1,15 +1,7 @@
 <?php
 
 // Preventing CSRF
-if ($_SERVER['REQUEST_METHOD']=='POST') {
-    $host_arr=explode(":", $_SERVER['HTTP_HOST']);
-    $hostname=$host_arr[0];
-    $port = $_SERVER['SERVER_PORT'];
-    $expected_http_origin="https://".$hostname.":".$port;
-    if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
-        die ("Nope.");
-    }
-}
+prevent_post_csrf(true);
 
 // Init
 error_reporting(NULL);

From 0336e8b8d0acd232adb7f3f5d2a04c718d8a1829 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 00:14:15 +0200
Subject: [PATCH 1567/2300] Preventing CSRF in /file_manager/fm_api.php

---
 web/file_manager/fm_api.php | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/web/file_manager/fm_api.php b/web/file_manager/fm_api.php
index 4a4dd9ec..c593b3f6 100644
--- a/web/file_manager/fm_api.php
+++ b/web/file_manager/fm_api.php
@@ -3,15 +3,7 @@
 //error_reporting(NULL);
 
 // Preventing CSRF
-if ($_SERVER['REQUEST_METHOD']=='POST') {
-    $host_arr=explode(":", $_SERVER['HTTP_HOST']);
-    $hostname=$host_arr[0];
-    $port = $_SERVER['SERVER_PORT'];
-    $expected_http_origin="https://".$hostname.":".$port;
-    if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
-        die ("Nope.");
-    }
-}
+prevent_post_csrf(true);
 
 header('Content-Type: application/json');
 

From 11f1cfcf4e4f575625c91309159e67d40baca28f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 00:54:57 +0200
Subject: [PATCH 1568/2300] Proper way to fix CSRF in /schedule/backup/

---
 web/schedule/backup/index.php        | 10 +++++++---
 web/templates/admin/list_backup.html |  2 +-
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/web/schedule/backup/index.php b/web/schedule/backup/index.php
index 07412e71..8d51832e 100644
--- a/web/schedule/backup/index.php
+++ b/web/schedule/backup/index.php
@@ -1,14 +1,18 @@
 <?php
 
-// Preventing CSRF
-prevent_post_csrf(true);
-
 // Init
 error_reporting(NULL);
 ob_start();
 session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Check token
+if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+    die($_SESSION['token']);
+    header('location: /login/');
+    exit();
+}
+
 $v_username = escapeshellarg($user);
 exec (VESTA_CMD."v-schedule-user-backup ".$v_username, $output, $return_var);
 if ($return_var == 0) {
diff --git a/web/templates/admin/list_backup.html b/web/templates/admin/list_backup.html
index ef00139d..87876cde 100644
--- a/web/templates/admin/list_backup.html
+++ b/web/templates/admin/list_backup.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/schedule/backup/" class="l-sort__create-btn" title="<?=__('Create Backup')?>"></a>
+        <a href="/schedule/backup/?token=<?=$_SESSION['token']?>" class="l-sort__create-btn" title="<?=__('Create Backup')?>"></a>
         <div class="l-sort-toolbar clearfix">
           <table>
             <tr>

From 59edb05f49fed2b141da8d2ad130b6e704bc9649 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 01:20:12 +0200
Subject: [PATCH 1569/2300] Proper way to fix CSRF in /edit/file/

---
 web/edit/file/index.php | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/web/edit/file/index.php b/web/edit/file/index.php
index b36a4656..931b861f 100644
--- a/web/edit/file/index.php
+++ b/web/edit/file/index.php
@@ -1,8 +1,5 @@
 <?php
 
-// Preventing CSRF
-prevent_post_csrf(true);
-
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 $user = $_SESSION['user'];
 
@@ -40,6 +37,12 @@ if (($_SESSION['user'] == 'admin') && (!empty($_SESSION['look']))) {
         $content = '';
         $path = $_REQUEST['path'];
         if (!empty($_POST['save'])) {
+            // Check token
+            if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
+                header('location: /login/');
+                exit();
+            }
+
             $fn = tempnam ('/tmp', 'vst-save-file-');
             if ($fn) {
                 $contents = $_POST['contents'];
@@ -76,7 +79,7 @@ if (($_SESSION['user'] == 'admin') && (!empty($_SESSION['look']))) {
 <!-- input id="do-backup" type="button" onClick="javascript:void(0);" name="save" value="backup (ctrl+F2)" class="backup" / -->
 <input type="submit" name="save" value="Save" class="save" />
 
-
+<input type="hidden" id="token" name="token" value="<?=$_SESSION['token']?>">
 <textarea name="contents" class="editor" id="editor" rows="4" style="display:none;width: 100%; height: 100%;"><?=htmlentities($content)?></textarea>
 
 </form>
@@ -96,6 +99,7 @@ if (($_SESSION['user'] == 'admin') && (!empty($_SESSION['look']))) {
     var makeBackup = function() {
         var params = {
             action: 'backup',
+            token: '<?=$_SESSION['token']?>',
             path:   '<?= $path ?>'
         };
         

From 085a25d1658dc818e5ca6729252fcad94dcbfcb6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 01:59:49 +0200
Subject: [PATCH 1570/2300] Update secure_login.php

---
 web/inc/secure_login.php | 34 ++++++++++++++++++----------------
 1 file changed, 18 insertions(+), 16 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index ce614ea1..b55d8e31 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -53,31 +53,33 @@ if ($secure_gate_check==true) {
 function prevent_post_csrf ($hard_check=false) {
     if (file_exists('/usr/local/vesta/conf_web/dont_check_csrf')) return; 
     if ($_SERVER['REQUEST_METHOD']=='POST') {
-        if ($hard_check==false) {
-            if (isset($_SERVER['HTTP_HOST']) == false) return;
+        if ($hard_check == false) {
             if (isset($_SERVER['HTTP_ORIGIN']) == false) return;
+            if (isset($_SERVER['HTTP_HOST']) == false) return;
             if (isset($_SERVER['SERVER_PORT']) == false) return;
         } else {
-            if (isset($_SERVER['HTTP_HOST']) == false) $_SERVER['HTTP_HOST']='';
-            if (isset($_SERVER['HTTP_ORIGIN']) == false) $_SERVER['HTTP_ORIGIN']='';
-            if (isset($_SERVER['SERVER_PORT']) == false) $_SERVER['HTTP_PORT']='';
+            if (isset($_SERVER['HTTP_ORIGIN']) == false) $_SERVER['HTTP_ORIGIN'] = '';
+            if (isset($_SERVER['HTTP_HOST']) == false) $_SERVER['HTTP_HOST'] = '';
+            if (isset($_SERVER['SERVER_PORT']) == false) $_SERVER['HTTP_PORT'] = '';
         }
-        $_SERVER['HTTP_HOST']=strtolower($_SERVER['HTTP_HOST']);
-        $_SERVER['HTTP_ORIGIN']=strtolower($_SERVER['HTTP_ORIGIN']);
-        if ($hard_check==false) {
+        $_SERVER['HTTP_HOST'] = strtolower($_SERVER['HTTP_HOST']);
+        $_SERVER['HTTP_ORIGIN'] = strtolower($_SERVER['HTTP_ORIGIN']);
+        if ($hard_check == false) {
             if (substr($_SERVER['HTTP_ORIGIN'], 0,7) != "http://" && substr($_SERVER['HTTP_ORIGIN'], 0,8)!="https://") return;
         }
-        $host_arr=explode(":", $_SERVER['HTTP_HOST']);
-        $hostname=$host_arr[0];
+        $host_arr = explode(":", $_SERVER['HTTP_HOST']);
+        $hostname = $host_arr[0];
         $port = $_SERVER['SERVER_PORT'];
-        $expected_http_origin="https://".$hostname.":".$port;
-        $level=1;
-        if ($hard_check==true) $level=2;
+        $expected_http_origin = "https://".$hostname.":".$port;
+        $level = 1;
+        if ($hard_check == true) $level = 2;
         if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
-            die ("CSRF detected (".$level.").<br />Your browser sent HTTP_ORIGIN with value: <b>".$_SERVER['HTTP_ORIGIN']."</b><br />myVesta expected HTTP_ORIGIN with value: <b>".$expected_http_origin."</b><br />Probably some browser extension is blocking it... disable all extensions and try again (or try to login with other browser).<br />If you are system administrator of this server, you can disable CSRF check by doing (as root, in SSH): <b>mkdir /usr/local/vesta/conf_web && touch /usr/local/vesta/conf_web/dont_check_csrf</b><br >(but we don't recommend it)<br />If you are not system administrator of this server and you can't access the hosting panel even you disabled all browser extensions, please copy-paste this message to the system administrator of this server.<br />Once again, before you disable CSRF check, try to disable all browser extensions or try to login with other browser.");
+            die ("CSRF detected (".$level.").<br />Your browser sent HTTP_ORIGIN with value: <b>".$_SERVER['HTTP_ORIGIN']."</b><br />myVesta expected HTTP_ORIGIN with value: <b>".$expected_http_origin."</b><br />Probably some browser extension is blocking it... disable all browser extensions and try again (or try to login with other browser).<br />If you are system administrator of this server, you can disable CSRF check by doing (as root, in SSH): <b>mkdir /usr/local/vesta/conf_web && touch /usr/local/vesta/conf_web/dont_check_csrf</b><br >(but we don't recommend it)<br />If you are not system administrator of this server and you can't access the hosting panel even you disabled all browser extensions, please copy-paste this message to the system administrator of this server.<br />Once again, before you disable CSRF check, try to disable all browser extensions or try to login with other browser.");
         }
     }
 }
 
-// Preventing all POST CSRF
-if ($secure_gate_check==true) prevent_post_csrf();
+// Preventing all CSRFs
+if ($secure_gate_check == true) {
+    prevent_post_csrf();
+}

From 49905063f634e5d95585664f227520512a324605 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 11:09:24 +0200
Subject: [PATCH 1571/2300] Update secure_login.php

---
 web/inc/secure_login.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index b55d8e31..f9452cc3 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -54,18 +54,18 @@ function prevent_post_csrf ($hard_check=false) {
     if (file_exists('/usr/local/vesta/conf_web/dont_check_csrf')) return; 
     if ($_SERVER['REQUEST_METHOD']=='POST') {
         if ($hard_check == false) {
-            if (isset($_SERVER['HTTP_ORIGIN']) == false) return;
             if (isset($_SERVER['HTTP_HOST']) == false) return;
             if (isset($_SERVER['SERVER_PORT']) == false) return;
+            if (isset($_SERVER['HTTP_ORIGIN']) == false) return;
         } else {
-            if (isset($_SERVER['HTTP_ORIGIN']) == false) $_SERVER['HTTP_ORIGIN'] = '';
             if (isset($_SERVER['HTTP_HOST']) == false) $_SERVER['HTTP_HOST'] = '';
             if (isset($_SERVER['SERVER_PORT']) == false) $_SERVER['HTTP_PORT'] = '';
+            if (isset($_SERVER['HTTP_ORIGIN']) == false) $_SERVER['HTTP_ORIGIN'] = '';
         }
         $_SERVER['HTTP_HOST'] = strtolower($_SERVER['HTTP_HOST']);
         $_SERVER['HTTP_ORIGIN'] = strtolower($_SERVER['HTTP_ORIGIN']);
         if ($hard_check == false) {
-            if (substr($_SERVER['HTTP_ORIGIN'], 0,7) != "http://" && substr($_SERVER['HTTP_ORIGIN'], 0,8)!="https://") return;
+            if (substr($_SERVER['HTTP_ORIGIN'], 0, 8) != "file:///" && substr($_SERVER['HTTP_ORIGIN'], 0, 7) != "http://" && substr($_SERVER['HTTP_ORIGIN'], 0, 8) != "https://") return;
         }
         $host_arr = explode(":", $_SERVER['HTTP_HOST']);
         $hostname = $host_arr[0];

From eae5c3418a87c58cf69b9d800647429e67550976 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 11:14:11 +0200
Subject: [PATCH 1572/2300] Preventing GET CSRFs

---
 web/inc/secure_login.php | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index f9452cc3..93df7b53 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -79,7 +79,26 @@ function prevent_post_csrf ($hard_check=false) {
     }
 }
 
+function prevent_get_csrf ($hard_check=false) {
+    if (file_exists('/usr/local/vesta/conf_web/dont_check_csrf')) return; 
+        if (isset($_SERVER['HTTP_HOST']) == false) return;
+        if (isset($_SERVER['SERVER_PORT']) == false) return;
+        if (isset($_SERVER['HTTP_REFERER']) == false) return;
+        $_SERVER['HTTP_HOST'] = strtolower($_SERVER['HTTP_HOST']);
+        $_SERVER['HTTP_ORIGIN'] = strtolower($_SERVER['HTTP_ORIGIN']);
+        if (substr($_SERVER['HTTP_REFERER'], 0, 8) != "file:///" && substr($_SERVER['HTTP_REFERER'], 0, 7) != "http://" && substr($_SERVER['HTTP_REFERER'], 0, 8) != "https://") return;
+        $host_arr = explode(":", $_SERVER['HTTP_HOST']);
+        $hostname = $host_arr[0];
+        $port = $_SERVER['SERVER_PORT'];
+        $expected_http_referer = "https://".$hostname.":".$port;
+        $expected_http_referer_length = strlen($expected_http_referer);
+        if (substr($_SERVER['HTTP_REFERER'], 0, $expected_http_referer_length) != $expected_http_referer) {
+            die ("You clicked on someone's link from other site.<br />This is just a protection layer to prevent potentially dangerous clicks, so if it was your link - you can <a href=\"".$expected_http_referer.$_SERVER['REQUEST_URI']."\"><b>proceed safely to your hosting panel</b></a>.<br /><br />Technical details:<br />Your browser sent HTTP_REFERER with value: <b>".$_SERVER['HTTP_REFERER']."</b><br />myVesta expected HTTP_REFERER to begin with value: <b>".$expected_http_referer."</b><br />If you got this error during casual work in your hosting panel, probably some browser extension is blocking HTTP_REFERER... disable all browser extensions and try again (or try to login with other browser).<br />If you are system administrator of this server, you can disable CSRF check by doing (as root, in SSH): <b>mkdir /usr/local/vesta/conf_web && touch /usr/local/vesta/conf_web/dont_check_csrf</b><br >(but we don't recommend it)<br />If you are not system administrator of this server and you can't access the hosting panel even you clicked \"<b>proceed safely to your hosting panel</b>\" and disabled all browser extensions or changed the browser, please copy-paste this message to the system administrator of this server.<br />Once again, before you disable CSRF check, try to click \"<b>proceed safely to your hosting panel</b>\", and if that does not help then try to disable all browser extensions or try to login with other browser.");
+        }
+}
+
 // Preventing all CSRFs
 if ($secure_gate_check == true) {
     prevent_post_csrf();
+    prevent_get_csrf();
 }

From 834f939fbea444d1fb1fedff67fe271ad008e2e2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 11:50:22 +0200
Subject: [PATCH 1573/2300] Exception for function prevent_get_csrf

---
 web/inc/secure_login.php | 37 +++++++++++++++++++++----------------
 1 file changed, 21 insertions(+), 16 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 93df7b53..1dfe2541 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -79,22 +79,27 @@ function prevent_post_csrf ($hard_check=false) {
     }
 }
 
-function prevent_get_csrf ($hard_check=false) {
-    if (file_exists('/usr/local/vesta/conf_web/dont_check_csrf')) return; 
-        if (isset($_SERVER['HTTP_HOST']) == false) return;
-        if (isset($_SERVER['SERVER_PORT']) == false) return;
-        if (isset($_SERVER['HTTP_REFERER']) == false) return;
-        $_SERVER['HTTP_HOST'] = strtolower($_SERVER['HTTP_HOST']);
-        $_SERVER['HTTP_ORIGIN'] = strtolower($_SERVER['HTTP_ORIGIN']);
-        if (substr($_SERVER['HTTP_REFERER'], 0, 8) != "file:///" && substr($_SERVER['HTTP_REFERER'], 0, 7) != "http://" && substr($_SERVER['HTTP_REFERER'], 0, 8) != "https://") return;
-        $host_arr = explode(":", $_SERVER['HTTP_HOST']);
-        $hostname = $host_arr[0];
-        $port = $_SERVER['SERVER_PORT'];
-        $expected_http_referer = "https://".$hostname.":".$port;
-        $expected_http_referer_length = strlen($expected_http_referer);
-        if (substr($_SERVER['HTTP_REFERER'], 0, $expected_http_referer_length) != $expected_http_referer) {
-            die ("You clicked on someone's link from other site.<br />This is just a protection layer to prevent potentially dangerous clicks, so if it was your link - you can <a href=\"".$expected_http_referer.$_SERVER['REQUEST_URI']."\"><b>proceed safely to your hosting panel</b></a>.<br /><br />Technical details:<br />Your browser sent HTTP_REFERER with value: <b>".$_SERVER['HTTP_REFERER']."</b><br />myVesta expected HTTP_REFERER to begin with value: <b>".$expected_http_referer."</b><br />If you got this error during casual work in your hosting panel, probably some browser extension is blocking HTTP_REFERER... disable all browser extensions and try again (or try to login with other browser).<br />If you are system administrator of this server, you can disable CSRF check by doing (as root, in SSH): <b>mkdir /usr/local/vesta/conf_web && touch /usr/local/vesta/conf_web/dont_check_csrf</b><br >(but we don't recommend it)<br />If you are not system administrator of this server and you can't access the hosting panel even you clicked \"<b>proceed safely to your hosting panel</b>\" and disabled all browser extensions or changed the browser, please copy-paste this message to the system administrator of this server.<br />Once again, before you disable CSRF check, try to click \"<b>proceed safely to your hosting panel</b>\", and if that does not help then try to disable all browser extensions or try to login with other browser.");
-        }
+function prevent_get_csrf () {
+    global $login_url;
+    if (file_exists('/usr/local/vesta/conf_web/dont_check_csrf')) return;
+    if ($_SERVER['REQUEST_METHOD'] == "GET") {
+        if (isset($_GET[$login_url])) return;
+        if ($_SERVER['REQUEST_URI']=="" || $_SERVER['REQUEST_URI']=="/" || $_SERVER['REQUEST_URI']=="/login/" || $_SERVER['REQUEST_URI']=="/list/web/") return;
+    }
+    if (isset($_SERVER['HTTP_HOST']) == false) return;
+    if (isset($_SERVER['SERVER_PORT']) == false) return;
+    if (isset($_SERVER['HTTP_REFERER']) == false) return;
+    $_SERVER['HTTP_HOST'] = strtolower($_SERVER['HTTP_HOST']);
+    $_SERVER['HTTP_ORIGIN'] = strtolower($_SERVER['HTTP_ORIGIN']);
+    if (substr($_SERVER['HTTP_REFERER'], 0, 8) != "file:///" && substr($_SERVER['HTTP_REFERER'], 0, 7) != "http://" && substr($_SERVER['HTTP_REFERER'], 0, 8) != "https://") return;
+    $host_arr = explode(":", $_SERVER['HTTP_HOST']);
+    $hostname = $host_arr[0];
+    $port = $_SERVER['SERVER_PORT'];
+    $expected_http_referer = "https://".$hostname.":".$port;
+    $expected_http_referer_length = strlen($expected_http_referer);
+    if (substr($_SERVER['HTTP_REFERER'], 0, $expected_http_referer_length) != $expected_http_referer) {
+        die ("You clicked on someone's link from other site.<br />This is just a protection layer to prevent potentially dangerous clicks, so if it was your link - you can <a href=\"".$expected_http_referer.$_SERVER['REQUEST_URI']."\"><b>proceed safely to your hosting panel</b></a>.<br /><br />Technical details:<br />Your browser sent HTTP_REFERER with value: <b>".$_SERVER['HTTP_REFERER']."</b><br />myVesta expected HTTP_REFERER to begin with value: <b>".$expected_http_referer."</b><br />If you got this error during casual work in your hosting panel, probably some browser extension is blocking HTTP_REFERER... disable all browser extensions and try again (or try to login with other browser).<br />If you are system administrator of this server, you can disable CSRF check by doing (as root, in SSH): <b>mkdir /usr/local/vesta/conf_web && touch /usr/local/vesta/conf_web/dont_check_csrf</b><br >(but we don't recommend it)<br />If you are not system administrator of this server and you can't access the hosting panel even you clicked \"<b>proceed safely to your hosting panel</b>\" and disabled all browser extensions or changed the browser, please copy-paste this message to the system administrator of this server.<br />Once again, before you disable CSRF check, try to click \"<b>proceed safely to your hosting panel</b>\", and if that does not help then try to disable all browser extensions or try to login with other browser.");
+    }
 }
 
 // Preventing all CSRFs

From 8a5469abcd282fe1c916fa960995561ff3954bbd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 12:39:48 +0200
Subject: [PATCH 1574/2300] Update secure_login.php

---
 web/inc/secure_login.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 1dfe2541..dcfc2b82 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -84,7 +84,7 @@ function prevent_get_csrf () {
     if (file_exists('/usr/local/vesta/conf_web/dont_check_csrf')) return;
     if ($_SERVER['REQUEST_METHOD'] == "GET") {
         if (isset($_GET[$login_url])) return;
-        if ($_SERVER['REQUEST_URI']=="" || $_SERVER['REQUEST_URI']=="/" || $_SERVER['REQUEST_URI']=="/login/" || $_SERVER['REQUEST_URI']=="/list/web/") return;
+        if ($_SERVER['REQUEST_URI']=="" || $_SERVER['REQUEST_URI']=="/" || $_SERVER['REQUEST_URI']=="/login/" || $_SERVER['REQUEST_URI']=="/list/user/" || $_SERVER['REQUEST_URI']=="/list/web/") return;
     }
     if (isset($_SERVER['HTTP_HOST']) == false) return;
     if (isset($_SERVER['SERVER_PORT']) == false) return;

From 7c9da855e8853b2b095dbc2bc1f1840ff9bd3f7c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 14:05:15 +0200
Subject: [PATCH 1575/2300] Update secure_login.php

---
 web/inc/secure_login.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index dcfc2b82..b360c1e8 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -74,7 +74,7 @@ function prevent_post_csrf ($hard_check=false) {
         $level = 1;
         if ($hard_check == true) $level = 2;
         if ($_SERVER['HTTP_ORIGIN'] != $expected_http_origin) {
-            die ("CSRF detected (".$level.").<br />Your browser sent HTTP_ORIGIN with value: <b>".$_SERVER['HTTP_ORIGIN']."</b><br />myVesta expected HTTP_ORIGIN with value: <b>".$expected_http_origin."</b><br />Probably some browser extension is blocking it... disable all browser extensions and try again (or try to login with other browser).<br />If you are system administrator of this server, you can disable CSRF check by doing (as root, in SSH): <b>mkdir /usr/local/vesta/conf_web && touch /usr/local/vesta/conf_web/dont_check_csrf</b><br >(but we don't recommend it)<br />If you are not system administrator of this server and you can't access the hosting panel even you disabled all browser extensions, please copy-paste this message to the system administrator of this server.<br />Once again, before you disable CSRF check, try to disable all browser extensions or try to login with other browser.");
+            die ("CSRF detected (".$level.").<br />Your browser sent HTTP_ORIGIN with value: <b>".$_SERVER['HTTP_ORIGIN']."</b><br />myVesta expected HTTP_ORIGIN with value: <b>".$expected_http_origin."</b><br />Probably some browser extension is blocking it... disable all browser extensions and try again (or try to login with other browser).<br />If you are system administrator of this server, you can disable CSRF check by doing (as root, in SSH): <b>mkdir -p /usr/local/vesta/conf_web && touch /usr/local/vesta/conf_web/dont_check_csrf</b><br >(but we don't recommend it)<br />If you are not system administrator of this server and you can't access the hosting panel even you disabled all browser extensions, please copy-paste this message to the system administrator of this server.<br />Once again, before you disable CSRF check, try to disable all browser extensions or try to login with other browser.");
         }
     }
 }
@@ -98,7 +98,7 @@ function prevent_get_csrf () {
     $expected_http_referer = "https://".$hostname.":".$port;
     $expected_http_referer_length = strlen($expected_http_referer);
     if (substr($_SERVER['HTTP_REFERER'], 0, $expected_http_referer_length) != $expected_http_referer) {
-        die ("You clicked on someone's link from other site.<br />This is just a protection layer to prevent potentially dangerous clicks, so if it was your link - you can <a href=\"".$expected_http_referer.$_SERVER['REQUEST_URI']."\"><b>proceed safely to your hosting panel</b></a>.<br /><br />Technical details:<br />Your browser sent HTTP_REFERER with value: <b>".$_SERVER['HTTP_REFERER']."</b><br />myVesta expected HTTP_REFERER to begin with value: <b>".$expected_http_referer."</b><br />If you got this error during casual work in your hosting panel, probably some browser extension is blocking HTTP_REFERER... disable all browser extensions and try again (or try to login with other browser).<br />If you are system administrator of this server, you can disable CSRF check by doing (as root, in SSH): <b>mkdir /usr/local/vesta/conf_web && touch /usr/local/vesta/conf_web/dont_check_csrf</b><br >(but we don't recommend it)<br />If you are not system administrator of this server and you can't access the hosting panel even you clicked \"<b>proceed safely to your hosting panel</b>\" and disabled all browser extensions or changed the browser, please copy-paste this message to the system administrator of this server.<br />Once again, before you disable CSRF check, try to click \"<b>proceed safely to your hosting panel</b>\", and if that does not help then try to disable all browser extensions or try to login with other browser.");
+        die ("You clicked on someone's link from other site.<br />This is just a protection layer to prevent potentially dangerous clicks, so if it was your link - you can <a href=\"".$expected_http_referer.$_SERVER['REQUEST_URI']."\"><b>proceed safely to your hosting panel</b></a>.<br /><br />Technical details:<br />Your browser sent HTTP_REFERER with value: <b>".$_SERVER['HTTP_REFERER']."</b><br />myVesta expected HTTP_REFERER to begin with value: <b>".$expected_http_referer."</b><br />If you got this error during casual work in your hosting panel, probably some browser extension is blocking HTTP_REFERER... disable all browser extensions and try again (or try to login with other browser).<br />If you are system administrator of this server, you can disable CSRF check by doing (as root, in SSH): <b>mkdir -p /usr/local/vesta/conf_web && touch /usr/local/vesta/conf_web/dont_check_csrf</b><br >(but we don't recommend it)<br />If you are not system administrator of this server and you can't access the hosting panel even you clicked \"<b>proceed safely to your hosting panel</b>\" and disabled all browser extensions or changed the browser, please copy-paste this message to the system administrator of this server.<br />Once again, before you disable CSRF check, try to click \"<b>proceed safely to your hosting panel</b>\", and if that does not help then try to disable all browser extensions or try to login with other browser.");
     }
 }
 

From 5262b3f4470e7a937dccd3b9d537d6d1543bbca4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 14:13:03 +0200
Subject: [PATCH 1576/2300] Update secure_login.php

---
 web/inc/secure_login.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index b360c1e8..0fb030fc 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -98,7 +98,7 @@ function prevent_get_csrf () {
     $expected_http_referer = "https://".$hostname.":".$port;
     $expected_http_referer_length = strlen($expected_http_referer);
     if (substr($_SERVER['HTTP_REFERER'], 0, $expected_http_referer_length) != $expected_http_referer) {
-        die ("You clicked on someone's link from other site.<br />This is just a protection layer to prevent potentially dangerous clicks, so if it was your link - you can <a href=\"".$expected_http_referer.$_SERVER['REQUEST_URI']."\"><b>proceed safely to your hosting panel</b></a>.<br /><br />Technical details:<br />Your browser sent HTTP_REFERER with value: <b>".$_SERVER['HTTP_REFERER']."</b><br />myVesta expected HTTP_REFERER to begin with value: <b>".$expected_http_referer."</b><br />If you got this error during casual work in your hosting panel, probably some browser extension is blocking HTTP_REFERER... disable all browser extensions and try again (or try to login with other browser).<br />If you are system administrator of this server, you can disable CSRF check by doing (as root, in SSH): <b>mkdir -p /usr/local/vesta/conf_web && touch /usr/local/vesta/conf_web/dont_check_csrf</b><br >(but we don't recommend it)<br />If you are not system administrator of this server and you can't access the hosting panel even you clicked \"<b>proceed safely to your hosting panel</b>\" and disabled all browser extensions or changed the browser, please copy-paste this message to the system administrator of this server.<br />Once again, before you disable CSRF check, try to click \"<b>proceed safely to your hosting panel</b>\", and if that does not help then try to disable all browser extensions or try to login with other browser.");
+        die ("You clicked on someone's link from other site.<br />This is just a protection layer to prevent potentially dangerous clicks, so if it was your link (or you got the link from the trusted source) - then you can <a style=\"color: green\" href=\"".$expected_http_referer.$_SERVER['REQUEST_URI']."\"><b>proceed safely to your hosting panel</b></a>.<br /><br />Technical details:<br />Your browser sent HTTP_REFERER with value: <b>".$_SERVER['HTTP_REFERER']."</b><br />myVesta expected HTTP_REFERER to begin with value: <b>".$expected_http_referer."</b><br />If you got this error during casual work in your hosting panel, probably some browser extension is blocking HTTP_REFERER... disable all browser extensions and try again (or try to login with other browser).<br />If you are system administrator of this server, you can disable CSRF check by doing (as root, in SSH): <b>mkdir -p /usr/local/vesta/conf_web && touch /usr/local/vesta/conf_web/dont_check_csrf</b><br >(but we don't recommend it)<br />If you are not system administrator of this server and you can't access the hosting panel even you clicked \"<b>proceed safely to your hosting panel</b>\" and disabled all browser extensions or changed the browser, please copy-paste this message to the system administrator of this server.<br />Once again, before you disable CSRF check, try to click \"<b>proceed safely to your hosting panel</b>\", and if that does not help then try to disable all browser extensions or try to login with other browser.");
     }
 }
 

From 475fe47984df6209cebc741fba02ee65f84e0a4d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 29 Aug 2021 16:05:33 +0200
Subject: [PATCH 1577/2300] Checking token on adding and deleting favorites

---
 web/add/favorite/index.php    | 7 +++----
 web/delete/favorite/index.php | 5 +++++
 web/js/init.js                | 5 +++--
 3 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/web/add/favorite/index.php b/web/add/favorite/index.php
index e9f2e828..a3054d99 100644
--- a/web/add/favorite/index.php
+++ b/web/add/favorite/index.php
@@ -7,10 +7,9 @@ session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
 // Check token
-//    if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
-//        header('location: /login/');
-//        exit();
-//    }
+if ((!isset($_REQUEST['token'])) || ($_SESSION['token'] != $_REQUEST['token'])) {
+    die("Wrong token");
+}
 
     // Protect input
     $v_section = escapeshellarg($_REQUEST['v_section']);
diff --git a/web/delete/favorite/index.php b/web/delete/favorite/index.php
index 9f471b9b..093566f9 100644
--- a/web/delete/favorite/index.php
+++ b/web/delete/favorite/index.php
@@ -5,6 +5,11 @@
 
     include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+    // Check token
+    if ((!isset($_REQUEST['token'])) || ($_SESSION['token'] != $_REQUEST['token'])) {
+        die("Wrong token");
+    }
+
     unset($_SESSION['favourites'][strtoupper($_REQUEST['v_section'])][$_REQUEST['v_unit_id']]);
 
     $v_section = escapeshellarg($_REQUEST['v_section']);
diff --git a/web/js/init.js b/web/js/init.js
index 3ac6175e..6c60ff85 100644
--- a/web/js/init.js
+++ b/web/js/init.js
@@ -128,6 +128,7 @@ $(document).ready(function(){
 
               $('.l-unit .l-icon-star').click(function(){
                 var l_unit = $(this).parents('.l-unit');
+                var token = $('#token').attr('token');
 
                 if(l_unit.hasClass('l-unit--starred')){
                   // removing star
@@ -135,7 +136,7 @@ $(document).ready(function(){
                   $.ajax({
                     method: "POST",
                     url: "/delete/favorite/index.php",
-                    data: { v_section: l_unit.attr('v_section'), v_unit_id: l_unit.attr('v_unit_id') }
+                    data: { v_section: l_unit.attr('v_section'), v_unit_id: l_unit.attr('v_unit_id'), token: token }
                   });
 
                   l_unit.attr({'sort-star': 0});
@@ -145,7 +146,7 @@ $(document).ready(function(){
                   $.ajax({
                     method: "POST",
                     url: "/add/favorite/index.php",
-                    data: { v_unit_id: l_unit.attr('v_unit_id'), v_section: l_unit.attr('v_section') }
+                    data: { v_unit_id: l_unit.attr('v_unit_id'), v_section: l_unit.attr('v_section'), token: token }
                   });
 
                   l_unit.attr({'sort-star': 1});

From 693dd2877cdec6da8287d7739f1484102f88652b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 30 Aug 2021 00:06:32 +0200
Subject: [PATCH 1578/2300] session.cookie_httponly and session.cookie_secure
 in myvesta php-fpm

---
 src/deb/for-download/php/php-fpm.conf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/deb/for-download/php/php-fpm.conf b/src/deb/for-download/php/php-fpm.conf
index d9a04795..cd0005f8 100644
--- a/src/deb/for-download/php/php-fpm.conf
+++ b/src/deb/for-download/php/php-fpm.conf
@@ -32,3 +32,5 @@ php_admin_value[upload_max_filesize] = 512M
 php_admin_value[max_execution_time] = 600
 php_admin_value[max_input_time] = 600
 php_admin_value[session.save_path] = /usr/local/vesta/data/sessions
+php_admin_flag[session.cookie_httponly] = on
+php_admin_flag[session.cookie_secure] = on

From ab9c10b05c63fc5efdf46d7fc07f6105f43f8104 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 1 Sep 2021 00:24:43 +0200
Subject: [PATCH 1579/2300] Update secure_login.php

---
 web/inc/secure_login.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 0fb030fc..b9e2115c 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -85,6 +85,7 @@ function prevent_get_csrf () {
     if ($_SERVER['REQUEST_METHOD'] == "GET") {
         if (isset($_GET[$login_url])) return;
         if ($_SERVER['REQUEST_URI']=="" || $_SERVER['REQUEST_URI']=="/" || $_SERVER['REQUEST_URI']=="/login/" || $_SERVER['REQUEST_URI']=="/list/user/" || $_SERVER['REQUEST_URI']=="/list/web/") return;
+        if ($_SERVER['DOCUMENT_URI']=="/reset/index.php") return;
     }
     if (isset($_SERVER['HTTP_HOST']) == false) return;
     if (isset($_SERVER['SERVER_PORT']) == false) return;

From 3b287934c3bd42cfadd05ea00eba3a125340f59a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 1 Sep 2021 00:33:16 +0200
Subject: [PATCH 1580/2300] Enabling session.cookie_httponly and
 session.cookie_secure in myvesta php-fpm

---
 src/deb/vesta/postinst | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index fe80212f..dbb7cbd2 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -23,6 +23,18 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# Enabling session.cookie_httponly and session.cookie_secure in myvesta php-fpm
+if [ ! -f "/usr/local/vesta/data/upgrades/enable_cookie_httponly" ]; then
+    touch /usr/local/vesta/data/upgrades/enable_cookie_httponly
+    check_grep=$(grep -c 'cookie_httponly' /usr/local/vesta/php/etc/php-fpm.conf)
+    if [ "$check_grep" -eq 0 ]; then
+        echo "== Enabling session.cookie_httponly and session.cookie_secure in myvesta php-fpm"
+        echo "php_admin_flag[session.cookie_httponly] = on" >> /usr/local/vesta/php/etc/php-fpm.conf
+        echo "php_admin_flag[session.cookie_secure] = on" >> /usr/local/vesta/php/etc/php-fpm.conf
+        systemctl restart vesta
+    fi
+fi
+
 # Enabling TLS for ProFTPD FTPS
 if [ ! -f "/usr/local/vesta/data/upgrades/enable-tls-in-proftpd" ]; then
   if [ -f "/etc/proftpd/proftpd.conf" ]; then

From 584acfd4568e813666718cfa3ea372335ce205f1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 2 Sep 2021 21:40:40 +0200
Subject: [PATCH 1581/2300] New versions of software in vesta_compile.sh

---
 src/deb/vesta_compile.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 026e3812..c8308d7f 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -58,9 +58,9 @@ BUILD_DATE=$(date +"%d-%b-%Y")
 
 # Set Version for compiling
 VESTA_V=$VESTA_VER"_amd64"
-NGINX_V='1.19.9'
-OPENSSL_V='1.1.1k'
-PCRE_V='8.44'
+NGINX_V='1.21.2'
+OPENSSL_V='1.1.1l'
+PCRE_V='8.45'
 ZLIB_V='1.2.11'
 PHP_V='5.6.40'
 

From 5a6977660cd81230212c7dd93c23a359d72e104c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 2 Sep 2021 21:47:17 +0200
Subject: [PATCH 1582/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d835bdc5..d419edb6 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1721,6 +1721,7 @@ touch /usr/local/vesta/data/upgrades/roundcube_smtp_auth
 touch /usr/local/vesta/data/upgrades/apache_status_public_access
 touch /usr/local/vesta/data/upgrades/update-cloudflare-ips
 touch /usr/local/vesta/data/upgrades/enable-tls-in-proftpd
+touch /usr/local/vesta/data/upgrades/enable_cookie_httponly
 
 # Secret URL
 secretquery=''

From 9a746ea4845f198e30fc86cea52faf68a91ecbe6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 4 Sep 2021 01:23:24 +0200
Subject: [PATCH 1583/2300] Adding token for /logout/

---
 web/templates/admin/list_search.html      | 2 +-
 web/templates/admin/list_server_info.html | 2 +-
 web/templates/admin/list_user.html        | 2 +-
 web/templates/admin/list_weblog.html      | 2 +-
 web/templates/admin/panel.html            | 2 +-
 web/templates/user/list_search.html       | 2 +-
 web/templates/user/list_user.html         | 2 +-
 web/templates/user/panel.html             | 2 +-
 8 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/web/templates/admin/list_search.html b/web/templates/admin/list_search.html
index 13aef07f..4483920f 100644
--- a/web/templates/admin/list_search.html
+++ b/web/templates/admin/list_search.html
@@ -71,7 +71,7 @@
               if ($value['USER'] != $user && $value['KEY'] == 'ACCOUNT') {
                 if ($key == $user) {
             ?>
-                  <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
+                  <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout/?token=<?=$_SESSION['token']?>"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
 <?php
                 } else {
 ?>
diff --git a/web/templates/admin/list_server_info.html b/web/templates/admin/list_server_info.html
index eaaf34cd..7a131572 100644
--- a/web/templates/admin/list_server_info.html
+++ b/web/templates/admin/list_server_info.html
@@ -33,7 +33,7 @@
       <!-- /.l-menu -->
       <div class="l-profile">
         <a class="l-profile__username" href="/edit/user/?user=<?php echo $user; ?>"><?=$user?></a>
-        <a class="l-profile__logout" href="/logout/"> <?=__('Log out')?> </a>
+        <a class="l-profile__logout" href="/logout/?token=<?=$_SESSION['token']?>"> <?=__('Log out')?> </a>
       </div>
       <!-- /.l-profile -->
     </div>
diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index 7dd47577..4ad3daec 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -94,7 +94,7 @@ sort-bandwidth="<?=$data[$key]['U_BANDWIDTH']?>" sort-disk="<?=$data[$key]['U_DI
             <?
               if ($key == $user) {
             ?>
-                <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
+                <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout/?token=<?=$_SESSION['token']?>"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
 <?php
               } else {
 ?>
diff --git a/web/templates/admin/list_weblog.html b/web/templates/admin/list_weblog.html
index 0627c477..1ca837e2 100644
--- a/web/templates/admin/list_weblog.html
+++ b/web/templates/admin/list_weblog.html
@@ -29,7 +29,7 @@
       <!-- /.l-menu -->
       <div class="l-profile">
         <a class="l-profile__username" href="/edit/user/?user=<?php echo $user; ?>"><?=$user?></a>
-        <a class="l-profile__logout" href="/logout/"> <?=__('Log out')?> </a>
+        <a class="l-profile__logout" href="/logout/?token=<?=$_SESSION['token']?>"> <?=__('Log out')?> </a>
       </div>
       <!-- /.l-profile -->
     </div>
diff --git a/web/templates/admin/panel.html b/web/templates/admin/panel.html
index 80bfdaf1..b4534ccd 100644
--- a/web/templates/admin/panel.html
+++ b/web/templates/admin/panel.html
@@ -26,7 +26,7 @@
       <div class="l-profile noselect">
         <a class="l-profile__notifications <? if($panel[$user]['NOTIFICATIONS'] == 'yes') echo " updates"; ?>">&nbsp;</a>
         <a class="l-profile__username" href="/edit/user/?user=<?php echo $user; ?>"><?=$user?></a>
-        <a class="l-profile__logout" href="/logout/"> <?=__('Log out')?> </a>
+        <a class="l-profile__logout" href="/logout/?token=<?=$_SESSION['token']?>"> <?=__('Log out')?> </a>
       </div>
       <!-- /.l-profile -->
     </div>
diff --git a/web/templates/user/list_search.html b/web/templates/user/list_search.html
index a9198d1d..abe3a768 100644
--- a/web/templates/user/list_search.html
+++ b/web/templates/user/list_search.html
@@ -70,7 +70,7 @@
               if ($value['USER'] != $user && $value['KEY'] == 'ACCOUNT') {
                 if ($key == $user) {
             ?>
-                  <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
+                  <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout/?token=<?=$_SESSION['token']?>"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
 <?php
                 } else {
  ?>
diff --git a/web/templates/user/list_user.html b/web/templates/user/list_user.html
index 85ed64c3..e6645900 100644
--- a/web/templates/user/list_user.html
+++ b/web/templates/user/list_user.html
@@ -89,7 +89,7 @@ sort-disk="<?=$data[$key]['U_DISK']?>" sort-star="<?if($_SESSION['favourites']['
             <?
               if ($key == $user) {
             ?>
-                <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
+                <div class="actions-panel__col actions-panel__loginas shortcut-l" key-action="href"><a href="/logout/?token=<?=$_SESSION['token']?>"><?=__('logout')?> <i></i></a><span class="shortcut">&nbsp;L</span></div>
 <?php
               } else {
 ?>
diff --git a/web/templates/user/panel.html b/web/templates/user/panel.html
index dfb544c9..81cd8358 100644
--- a/web/templates/user/panel.html
+++ b/web/templates/user/panel.html
@@ -20,7 +20,7 @@
       <div class="l-profile">
         <a class="l-profile__notifications <? if($panel[$user]['NOTIFICATIONS'] == 'yes') echo " updates"; ?>">&nbsp;</a>
         <a class="l-profile__username" href="/edit/user/?user=<?php echo $user; ?>"><? if(($_SESSION['user'] == 'admin') && ($user != 'admin')) echo 'admin → ' ?><?=$user?></a>
-        <a class="l-profile__logout" href="/logout/"> <?=__('Log out')?> </a>
+        <a class="l-profile__logout" href="/logout/?token=<?=$_SESSION['token']?>"> <?=__('Log out')?> </a>
       </div>
       <!-- /.l-profile -->
     </div>

From 82d00b4a5c0e7fd1ebe1f648953122f841eac99e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 4 Sep 2021 11:29:36 +0200
Subject: [PATCH 1584/2300] Fix for: mv: cannot stat
 '/usr/local/vesta/log/backup.log'

---
 bin/v-backup-users | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index 9671c9e8..16a93d6d 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -39,9 +39,9 @@ log=$VESTA/log/backup.log
 
 $BIN/v-check-vesta-license >/dev/null
 
+touch $log
 if [ ! -z "$NOTIFY_ADMIN_FULL_BACKUP" ]; then
     mv $log $log-`date +"%Y-%m-%d--%H:%M:%S"`
-    touch $log
 fi
 
 # Auto-repair all databases before backuping all accounts

From 7220e011161a08beb2a3539e867535288f15cc8a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 4 Sep 2021 12:18:09 +0200
Subject: [PATCH 1585/2300] secured php.ini for multi-php

---
 src/deb/for-download/tools/multi-php-install.sh | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index ffee228e..ce04f573 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -145,6 +145,9 @@ if [ "$inst_70" -eq 1 ]; then
     if [ $debian_version -eq 10 ]; then
       cp /etc/php/7.3/fpm/php.ini /etc/php/7.0/fpm/php.ini
     fi
+    if [ $debian_version -eq 11 ]; then
+      cp /etc/php/7.4/fpm/php.ini /etc/php/7.0/fpm/php.ini
+    fi
     press_enter "=== Press enter to continue ==============================================================================="
 fi
 
@@ -166,6 +169,9 @@ if [ "$inst_71" -eq 1 ]; then
     if [ $debian_version -eq 10 ]; then
       cp /etc/php/7.3/fpm/php.ini /etc/php/7.1/fpm/php.ini
     fi
+    if [ $debian_version -eq 11 ]; then
+      cp /etc/php/7.4/fpm/php.ini /etc/php/7.1/fpm/php.ini
+    fi
     press_enter "=== Press enter to continue ==============================================================================="
 fi
 
@@ -187,6 +193,9 @@ if [ "$inst_72" -eq 1 ]; then
     if [ $debian_version -eq 10 ]; then
       cp /etc/php/7.3/fpm/php.ini /etc/php/7.2/fpm/php.ini
     fi
+    if [ $debian_version -eq 11 ]; then
+      cp /etc/php/7.4/fpm/php.ini /etc/php/7.2/fpm/php.ini
+    fi
     press_enter "=== Press enter to continue ==============================================================================="
 fi
 
@@ -209,6 +218,9 @@ if [ "$inst_73" -eq 1 ]; then
     if [ $debian_version -eq 9 ]; then
       cp /etc/php/7.0/apache2/php.ini /etc/php/7.3/fpm/php.ini
     fi
+    if [ $debian_version -eq 11 ]; then
+      cp /etc/php/7.4/fpm/php.ini /etc/php/7.3/fpm/php.ini
+    fi
     press_enter "=== Press enter to continue ==============================================================================="
 fi
 

From 329c37a13cd3ef44de901a90ca14181cb6281099 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 4 Sep 2021 12:32:16 +0200
Subject: [PATCH 1586/2300] Update index.php

---
 web/schedule/backup/index.php | 1 -
 1 file changed, 1 deletion(-)

diff --git a/web/schedule/backup/index.php b/web/schedule/backup/index.php
index 8d51832e..be7e713c 100644
--- a/web/schedule/backup/index.php
+++ b/web/schedule/backup/index.php
@@ -8,7 +8,6 @@ include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
 // Check token
 if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
-    die($_SESSION['token']);
     header('location: /login/');
     exit();
 }

From 63861e4ffdc009a8f0176fe4733be0c6e261e6fb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 4 Sep 2021 12:55:40 +0200
Subject: [PATCH 1587/2300] Fix fox CSRF in /dowload/web-log/

---
 web/download/web-log/index.php       | 7 +++++++
 web/templates/admin/list_weblog.html | 4 ++--
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/web/download/web-log/index.php b/web/download/web-log/index.php
index 79b5601c..35ebc335 100644
--- a/web/download/web-log/index.php
+++ b/web/download/web-log/index.php
@@ -3,6 +3,13 @@
 error_reporting(NULL);
 session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
+
+// Check token
+if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+    header('Location: /login/');
+    exit();
+}
+
 $v_domain = $_GET['domain'];
 $v_domain = escapeshellarg($_GET['domain']);
 if ($_GET['type'] == 'access') $type = 'access';
diff --git a/web/templates/admin/list_weblog.html b/web/templates/admin/list_weblog.html
index 1ca837e2..b46e7979 100644
--- a/web/templates/admin/list_weblog.html
+++ b/web/templates/admin/list_weblog.html
@@ -23,8 +23,8 @@
       <div class="l-menu clearfix">
         <div class="l-menu__item <?php if($_GET['type'] == 'access') echo 'l-menu__item--active' ?>"><a href="/list/web-log/?domain=<?=htmlentities($_GET['domain'])?>&type=access"><?=__('AccessLog')?></a></div>
         <div class="l-menu__item <?php if($_GET['type'] == 'error') echo 'l-menu__item--active' ?>"><a href="/list/web-log/?domain=<?=htmlentities($_GET['domain'])?>&type=error"><?=__('ErrorLog')?></a></div>
-        <div class="l-menu__item"><a href="/download/web-log/?domain=<?=htmlentities($_GET['domain'])?>&type=access"><?=__('Download AccessLog')?></a></div>
-        <div class="l-menu__item"><a href="/download/web-log/?domain=<?=htmlentities($_GET['domain'])?>&type=error"><?=__('Download ErrorLog')?></a></div>
+        <div class="l-menu__item"><a href="/download/web-log/?domain=<?=htmlentities($_GET['domain'])?>&type=access&token=<?=$_SESSION['token']?>"><?=__('Download AccessLog')?></a></div>
+        <div class="l-menu__item"><a href="/download/web-log/?domain=<?=htmlentities($_GET['domain'])?>&type=error&token=<?=$_SESSION['token']?>"><?=__('Download ErrorLog')?></a></div>
       </div>
       <!-- /.l-menu -->
       <div class="l-profile">

From 93de22a0b3d45fb46e47ff7337445fb074179773 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 4 Sep 2021 15:31:34 +0200
Subject: [PATCH 1588/2300] Fix for CSRF in FileManager and UploadHandler

---
 web/download/file/index.php         |  5 +++++
 web/file_manager/fm_api.php         |  7 +++++--
 web/js/app.js                       |  2 ++
 web/js/file_manager.js              | 13 ++++++++-----
 web/templates/file_manager/main.php |  4 +++-
 web/upload/UploadHandler.php        |  7 ++++++-
 6 files changed, 29 insertions(+), 9 deletions(-)

diff --git a/web/download/file/index.php b/web/download/file/index.php
index efabb0e1..ee1a9989 100644
--- a/web/download/file/index.php
+++ b/web/download/file/index.php
@@ -1,6 +1,11 @@
 <?php
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Check token
+if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
+    die("Wrong token or missing token");
+}
+
 if ((!isset($_SESSION['FILEMANAGER_KEY'])) || (empty($_SESSION['FILEMANAGER_KEY']))) {
     header("Location: /login/");
     exit;
diff --git a/web/file_manager/fm_api.php b/web/file_manager/fm_api.php
index c593b3f6..eb407ba7 100644
--- a/web/file_manager/fm_api.php
+++ b/web/file_manager/fm_api.php
@@ -3,15 +3,18 @@
 //error_reporting(NULL);
 
 // Preventing CSRF
-prevent_post_csrf(true);
+// prevent_post_csrf(true);
 
 header('Content-Type: application/json');
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 include($_SERVER['DOCUMENT_ROOT']."/file_manager/fm_core.php");
 
+// Check token
+if ((!isset($_REQUEST['token'])) || ($_SESSION['token'] != $_REQUEST['token'])) {
+    die("Wrong token or missing token");
+}
 
-// todo: set in session?
 if (empty($panel)) {
     $command = VESTA_CMD."v-list-user '".$user."' 'json'";
     exec ($command, $output, $return_var);
diff --git a/web/js/app.js b/web/js/app.js
index 58eb60a8..9ba909a5 100644
--- a/web/js/app.js
+++ b/web/js/app.js
@@ -797,6 +797,8 @@ App.Ajax.request = function(method, data, callback, onError){
     }*/
     //App.Helpers.setAjaxBusy(method, data);
     data = data || {};
+    var token = $('#token').attr('token');
+    data.token = token;
 
     var prgs = $('.progress-container');
 
diff --git a/web/js/file_manager.js b/web/js/file_manager.js
index 749a3a97..bcbe319e 100644
--- a/web/js/file_manager.js
+++ b/web/js/file_manager.js
@@ -533,7 +533,8 @@ FM.downloadFileFromSubcontext = function(elm) {
     var src = $.parseJSON($(elm).find('.source').val());
 
     var path = src.full_path;
-    var win = window.open('/download/file/?path=' + path, '_blank');
+    var token = $('#token').attr('token');
+    var win = window.open('/download/file/?token='+token+'&path=' + path, '_blank');
     win.focus();
 }
 
@@ -552,20 +553,21 @@ FM.openFile = function(dir, box, elm) {
     };
     
     App.Ajax.request('check_file_type', params, function(reply) {
+        var token = $('#token').attr('token');
         if (reply.result) {
             if (FM.isFileEditable(src, reply.data)) {
-                var myWindow = window.open('/edit/file/?path=' + src.full_path, '_blank');//, src.full_path, "width=900, height=700");
+                var myWindow = window.open('/edit/file/?token='+token+'&path=' + src.full_path, '_blank');//, src.full_path, "width=900, height=700");
             }
             else {
                 var path = src.full_path;
-                var win = window.open('/download/file/?path=' + path, '_blank');
+                var win = window.open('/download/file/?token='+token+'&path=' + path, '_blank');
                 //win.focus();
             }
         }
         else {
             // force download file
             var path = src.full_path;
-            var win = window.open('/download/file/?path=' + path, '_blank');
+            var win = window.open('/download/file/?token='+token+'&path=' + path, '_blank');
             //win.focus();
         }
     });
@@ -1994,7 +1996,8 @@ FM.downloadFiles = function() {
     }
 
     var path = src.full_path;
-    var win = window.open('/download/file/?path=' + path, '_blank');
+    var token = $('#token').attr('token');
+    var win = window.open('/download/file/?token='+token+'&path=' + path, '_blank');
     win.focus();
 }
 
diff --git a/web/templates/file_manager/main.php b/web/templates/file_manager/main.php
index 99398d75..2e82f811 100644
--- a/web/templates/file_manager/main.php
+++ b/web/templates/file_manager/main.php
@@ -15,6 +15,7 @@
 <script> GLOBAL = {}; </script>
 </head>
 <body>
+    <div class="hidden" id="token" token="<?=$_SESSION['token']?>"></div>
     <a href="#" class="to-shortcuts">
         <i class="l-icon-shortcuts"></i>
     </a>
@@ -145,6 +146,7 @@
             var acc = $('<div>');
             $(['A', 'B']).each(function(k, letter) {
                 var url = '/upload/';
+                var token = $('#token').attr('token');
                 $('#file_upload_' + letter).fileupload({
                     singleFileUploads: false,
                     add: function (e, data) {
@@ -154,7 +156,7 @@
                         var file_relocation = FM['TAB_'+tab+'_CURRENT_PATH'];
 
 
-                        $('#file_upload_' + letter).fileupload("option", "url", url + '?dir=' + file_relocation);
+                        $('#file_upload_' + letter).fileupload("option", "url", url + '?token='+token+'&dir=' + file_relocation);
                         acc = $('<div>');
                         show_msg = false;
                         data.submit();
diff --git a/web/upload/UploadHandler.php b/web/upload/UploadHandler.php
index 511ec4b3..48f40b23 100755
--- a/web/upload/UploadHandler.php
+++ b/web/upload/UploadHandler.php
@@ -3,10 +3,15 @@
 //session_start();
 
 // Preventing CSRF
-prevent_post_csrf(true);
+// prevent_post_csrf(true);
 
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
+// Check token
+if ((!isset($_REQUEST['token'])) || ($_SESSION['token'] != $_REQUEST['token'])) {
+    die("Wrong token or missing token");
+}
+
 // Check login_as feature
 $user = $_SESSION['user'];
 if (($_SESSION['user'] == 'admin') && (!empty($_SESSION['look']))) {

From ee3665ecb7e46d58ef7d9039e0eda55c76254a94 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 4 Sep 2021 19:00:20 +0200
Subject: [PATCH 1589/2300] Update index.php

---
 web/delete/backup/exclusion/index.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/web/delete/backup/exclusion/index.php b/web/delete/backup/exclusion/index.php
index 29ad3bd5..7cad5856 100644
--- a/web/delete/backup/exclusion/index.php
+++ b/web/delete/backup/exclusion/index.php
@@ -1,4 +1,7 @@
 <?php
+echo "We think this script is not used anymore. Report it if it's linked from somewhere";
+exit;
+
 // Init
 error_reporting(NULL);
 ob_start();

From 2f3bcfe5ecbc8b5e482a472ec89ea4b91aaf2408 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 14 Sep 2021 20:22:35 +0200
Subject: [PATCH 1590/2300] backuping php-fpm conf file

---
 bin/v-backup-user | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 767eba22..52e5134d 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -151,6 +151,25 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
         format_domain_idn
         get_domain_values 'web'
 
+        # backuping php-fpm conf file
+        if [[ $TPL == "PHP-FPM-"* ]]; then
+            fpm_tpl_ver=${TPL:8:2}
+            fpm_ver="${TPL:8:1}.${TPL:9:1}"
+            fpm_folder="$fpm_ver/fpm/pool.d"
+            fpm_path="$fpm_ver/fpm/pool.d/$domain.conf"
+            if [[ $TPL == *"-ioncube" ]]; then
+                fpm_folder="$fpm_ver/fpm/pool.d-ioncube"
+                fpm_path = "$fpm_ver/fpm/pool.d-ioncube/$domain.conf"
+            fi
+            fpm_original_path="/etc/php/$fpm_path"
+            fpm_dest_path="$tmpdir/web/$domain/php/$fpm_path"
+            fpm_dest_folder="$tmpdir/web/$domain/php/$fpm_folder"
+            if [ -f "$fpm_original_path" ]; then
+                mkdir -p $fpm_dest_folder
+                cp $fpm_original_path $fpm_dest_path
+            fi
+        fi
+        
         # Backup web.conf
         cd $tmpdir/web/$domain/
         conf="$USER_DATA/web.conf"

From f36d20641e6818072e02e9a426d56633c272ea50 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 14 Sep 2021 20:24:39 +0200
Subject: [PATCH 1591/2300] Update v-backup-user

---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 52e5134d..e2d7cac9 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -159,7 +159,7 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
             fpm_path="$fpm_ver/fpm/pool.d/$domain.conf"
             if [[ $TPL == *"-ioncube" ]]; then
                 fpm_folder="$fpm_ver/fpm/pool.d-ioncube"
-                fpm_path = "$fpm_ver/fpm/pool.d-ioncube/$domain.conf"
+                fpm_path="$fpm_ver/fpm/pool.d-ioncube/$domain.conf"
             fi
             fpm_original_path="/etc/php/$fpm_path"
             fpm_dest_path="$tmpdir/web/$domain/php/$fpm_path"

From ca76e2bc8cfd1dbecc997742cc6f008e9fb44610 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 14 Sep 2021 21:07:22 +0200
Subject: [PATCH 1592/2300] Allow to specify full path to backup file

---
 bin/v-restore-user | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index a78ffc4d..c1f19fd8 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -28,6 +28,11 @@ if [ -z "$BACKUP" ]; then
     BACKUP=/backup
 fi
 
+# Allow to specify full path to backup file
+if [[ $backup == "/backup/"* ]]; then
+    backup="${backup:8}"
+fi
+
 # Includes
 source $VESTA/func/main.sh
 source $VESTA/func/domain.sh

From c93345f669fa62694f353a960374926e96260ce6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 14 Sep 2021 21:10:10 +0200
Subject: [PATCH 1593/2300] Restoring php-fpm pool.d conf files

---
 bin/v-restore-user | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index c1f19fd8..4aaab76d 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -440,6 +440,12 @@ if [ "$web" != 'no' ] && [ ! -z "$WEB_SYSTEM" ]; then
             find $HOMEDIR/$user/web/$domain/ -user $old_uid \
                 -exec chown -h $user:$user {} \;
         fi
+    
+        # Restoring php-fpm pool.d conf files
+        if [ -d "$tmpdir/web/$domain/php" ]; then
+            cp -r $tmpdir/web/$domain/php/ /etc/
+        fi
+
     done
 
     # Adding user to traff queue

From 7ee21aad7b06b2c506165a2af3d2f15b3d79edfa Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 14 Sep 2021 21:43:46 +0200
Subject: [PATCH 1594/2300] Restoring php-fpm pool.d conf files

---
 bin/v-restore-user | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index 4aaab76d..e9861d46 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -443,7 +443,10 @@ if [ "$web" != 'no' ] && [ ! -z "$WEB_SYSTEM" ]; then
     
         # Restoring php-fpm pool.d conf files
         if [ -d "$tmpdir/web/$domain/php" ]; then
-            cp -r $tmpdir/web/$domain/php/ /etc/
+            fpmver=$(ls $tmpdir/web/$domain/php/)
+            cp -r $tmpdir/web/$domain/php/$fpmver/ /etc/php/
+            systemctl reset-failed php$fpmver-fpm
+            systemctl restart php$fpmver-fpm
         fi
 
     done

From 73948ac4d1958a08d656aa36b0ebb95a37a97476 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 19 Sep 2021 13:26:45 +0200
Subject: [PATCH 1595/2300] Logging letsencrypt error message

---
 bin/v-add-letsencrypt-domain | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index ed6e5e90..3a7b10b8 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -268,6 +268,8 @@ for auth in $authz; do
         echo "[$(date)] : query_le_v2 \"$url\" \"$payload\" \"$nonce\"" >> /usr/local/vesta/log/letsencrypt.log
         answer=$(query_le_v2 "$url" "$payload" "$nonce")
         echo "[$(date)] : answer=$answer" >> /usr/local/vesta/log/letsencrypt.log
+        url2=$(echo "$answer" |grep -A3 $proto |grep url |cut -f 4 -d \")
+        echo "[$(date)] : url2=$url2" >> /usr/local/vesta/log/letsencrypt.log
         validation=$(echo "$answer"|grep -A1 $proto |tail -n1|cut -f4 -d \")
         echo "[$(date)] : validation=$validation" >> /usr/local/vesta/log/letsencrypt.log
         nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
@@ -284,6 +286,9 @@ for auth in $authz; do
             echo "[$(date)] : EXIT=Let's Encrypt domain validation timeout" >> /usr/local/vesta/log/letsencrypt.log
             check_result $E_CONNECT "Let's Encrypt domain validation timeout"
         fi
+        echo "[$(date)] : curl: $url2 :" >> /usr/local/vesta/log/letsencrypt.log
+        get_answer=$(curl -S "$url2")
+        echo "[$(date)] : get_answer=$get_answer" >> /usr/local/vesta/log/letsencrypt.log
         sleeping=$((i*2))
         echo "[$(date)] : sleep $sleeping (i=$i)" >> /usr/local/vesta/log/letsencrypt.log
         sleep $sleeping

From e7b2626d4ca0643cbab3ce40b8d4943830608082 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 24 Sep 2021 10:54:20 +0200
Subject: [PATCH 1596/2300] installing php7.x-imap

---
 install/vst-install-debian.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d419edb6..99600590 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1598,13 +1598,13 @@ $VESTA/bin/v-add-cron-vesta-autoupdate
 
 echo "=== Installing additional PHP libs"
 if [ "$release" -eq 9 ]; then
-  apt-get -y install php7.0-apcu php7.0-mbstring php7.0-bcmath php7.0-curl php7.0-gd php7.0-intl php7.0-mcrypt php7.0-mysql php7.0-mysqlnd php7.0-pdo php7.0-soap php7.0-json php7.0-xml php7.0-zip php7.0-memcache php7.0-memcached php7.0-zip php7.0-imagick
+  apt-get -y install php7.0-apcu php7.0-mbstring php7.0-bcmath php7.0-curl php7.0-gd php7.0-intl php7.0-mcrypt php7.0-mysql php7.0-mysqlnd php7.0-pdo php7.0-soap php7.0-json php7.0-xml php7.0-zip php7.0-memcache php7.0-memcached php7.0-zip php7.0-imagick php7.0-imap
 fi
 if [ "$release" -eq 10 ]; then
-  apt-get -y install php7.3-apcu php7.3-mbstring php7.3-bcmath php7.3-curl php7.3-gd php7.3-intl php7.3-mysql php7.3-mysqlnd php7.3-pdo php7.3-soap php7.3-json php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached php7.3-zip php7.3-imagick
+  apt-get -y install php7.3-apcu php7.3-mbstring php7.3-bcmath php7.3-curl php7.3-gd php7.3-intl php7.3-mysql php7.3-mysqlnd php7.3-pdo php7.3-soap php7.3-json php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached php7.3-zip php7.3-imagick php7.3-imap
 fi
 if [ "$release" -eq 11 ]; then
-  apt-get -y install php7.4-apcu php7.4-mbstring php7.4-bcmath php7.4-curl php7.4-gd php7.4-intl php7.4-mysql php7.4-mysqlnd php7.4-pdo php7.4-soap php7.4-json php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached php7.4-zip php7.4-imagick
+  apt-get -y install php7.4-apcu php7.4-mbstring php7.4-bcmath php7.4-curl php7.4-gd php7.4-intl php7.4-mysql php7.4-mysqlnd php7.4-pdo php7.4-soap php7.4-json php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached php7.4-zip php7.4-imagick php7.4-imap
 fi
 
 touch /var/log/php-mail.log

From ae99e0c837dd195f37051f9b0cf9531cd79952c3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Sep 2021 14:17:09 +0200
Subject: [PATCH 1597/2300] Fresh W3TC.json

---
 src/deb/for-download/tools/W3TC.json | 305 ++++++++++++++++++---------
 1 file changed, 200 insertions(+), 105 deletions(-)

diff --git a/src/deb/for-download/tools/W3TC.json b/src/deb/for-download/tools/W3TC.json
index 7e1f0340..d42973d0 100644
--- a/src/deb/for-download/tools/W3TC.json
+++ b/src/deb/for-download/tools/W3TC.json
@@ -1,5 +1,5 @@
 {
-    "version": "0.14.3",
+    "version": "2.1.8",
     "cluster.messagebus.debug": false,
     "cluster.messagebus.enabled": false,
     "cluster.messagebus.sns.region": "",
@@ -11,7 +11,7 @@
     "dbcache.debug_purge": false,
     "dbcache.enabled": true,
     "dbcache.engine": "memcached",
-    "dbcache.file.gc": 3600,
+    "dbcache.file.gc": 7200,
     "dbcache.file.locking": false,
     "dbcache.lifetime": 3600,
     "dbcache.memcached.persistent": true,
@@ -60,24 +60,47 @@
         "\\bsql_calc_found_rows\\b",
         "\\bfound_rows\\(\\)"
     ],
+    "docroot_fix.enable": false,
     "lazyload.enabled": false,
+    "lazyload.threshold": "",
     "lazyload.process_img": true,
     "lazyload.process_background": true,
     "lazyload.googlemaps.google_maps_easy": false,
     "lazyload.googlemaps.wp_google_maps": false,
     "lazyload.googlemaps.wp_google_map_plugin": false,
     "lazyload.exclude": [
-        "skip_lazy"
+        "avia-bg-style-fixed",
+        "data-bgposition=",
+        "data-envira-src=",
+        "data-large_image=",
+        "data-lazy-original=",
+        "data-lazy-src=",
+        "data-lazyload=",
+        "data-lazysrc=",
+        "data-no-lazy=",
+        "data-src=",
+        "data-srcset=",
+        "fullurl=",
+        "lazy-slider-img=",
+        "loading=\"eager\"",
+        "no-lazy",
+        "rev-slidebg",
+        "skip-lazy",
+        "soliloquy-image",
+        "swatch-img",
+        "w3-total-cache",
+        "woocommerce\/assets\/images\/placeholder.png",
+        "wpcf7_captcha"
     ],
     "lazyload.embed_method": "async_head",
     "objectcache.configuration_overloaded": false,
     "objectcache.enabled": true,
     "objectcache.debug": false,
     "objectcache.debug_purge": false,
-    "objectcache.enabled_for_wp_admin": true,
+    "objectcache.enabled_for_wp_admin": false,
     "objectcache.fallback_transients": true,
     "objectcache.engine": "memcached",
-    "objectcache.file.gc": 3600,
+    "objectcache.file.gc": 7200,
     "objectcache.file.locking": false,
     "objectcache.memcached.servers": [
         "127.0.0.1:11211"
@@ -107,7 +130,6 @@
         "global-posts"
     ],
     "objectcache.groups.nonpersistent": [
-        "comment",
         "counts",
         "plugins"
     ],
@@ -120,7 +142,7 @@
     "pgcache.debug_purge": false,
     "pgcache.engine": "memcached",
     "pgcache.file.gc": 3600,
-    "pgcache.file.nfs": true,
+    "pgcache.file.nfs": false,
     "pgcache.file.locking": false,
     "pgcache.lifetime": 86400,
     "pgcache.memcached.servers": [
@@ -137,9 +159,9 @@
     ],
     "pgcache.redis.password": "",
     "pgcache.redis.dbid": 0,
-    "pgcache.cache.query": true,
+    "pgcache.cache.query": false,
     "pgcache.cache.home": true,
-    "pgcache.cache.feed": true,
+    "pgcache.cache.feed": false,
     "pgcache.cache.nginx_handle_xml": false,
     "pgcache.cache.ssl": true,
     "pgcache.cache.404": false,
@@ -167,11 +189,11 @@
     ],
     "pgcache.late_init": false,
     "pgcache.late_caching": false,
-    "pgcache.mirrors.enabled": true,
+    "pgcache.mirrors.enabled": false,
     "pgcache.mirrors.home_urls": [
         ""
     ],
-    "pgcache.reject.front_page": "0",
+    "pgcache.reject.front_page": false,
     "pgcache.reject.logged": true,
     "pgcache.reject.logged_roles": false,
     "pgcache.reject.roles": [
@@ -200,7 +222,7 @@
         "wptouch_switch_toggle"
     ],
     "pgcache.reject.request_head": false,
-    "pgcache.purge.front_page": "1",
+    "pgcache.purge.front_page": true,
     "pgcache.purge.home": true,
     "pgcache.purge.post": true,
     "pgcache.purge.comments": false,
@@ -222,7 +244,7 @@
     ],
     "pgcache.purge.sitemap_regex": "([a-z0-9_\\-]*?)sitemap([a-z0-9_\\-]*)?\\.xml",
     "pgcache.prime.enabled": false,
-    "pgcache.prime.interval": 3600,
+    "pgcache.prime.interval": 900,
     "pgcache.prime.limit": 10,
     "pgcache.prime.sitemap": "",
     "pgcache.prime.post.enabled": false,
@@ -267,8 +289,8 @@
     "minify.debug": false,
     "minify.engine": "file",
     "minify.error.notification": "",
-    "minify.file.gc": "86400",
-    "minify.file.nfs": true,
+    "minify.file.gc": 86400,
+    "minify.file.nfs": false,
     "minify.file.locking": false,
     "minify.memcached.servers": [
         "127.0.0.1:11211"
@@ -284,41 +306,43 @@
     ],
     "minify.redis.password": "",
     "minify.redis.dbid": 0,
-    "minify.rewrite": "1",
+    "minify.rewrite": true,
     "minify.options": [],
     "minify.symlinks": [],
-    "minify.lifetime": "86400",
+    "minify.lifetime": 86400,
     "minify.upload": true,
-    "minify.html.enable": "1",
+    "minify.html.enable": false,
     "minify.html.engine": "html",
-    "minify.html.reject.feed": "0",
-    "minify.html.inline.css": "0",
-    "minify.html.inline.js": "0",
-    "minify.html.strip.crlf": "0",
+    "minify.html.reject.feed": false,
+    "minify.html.inline.css": false,
+    "minify.html.inline.js": false,
+    "minify.html.strip.crlf": false,
     "minify.html.comments.ignore": [
         "google_ad_",
-        "RSPEAK_"
+        "RSPEAK_",
+        "mfunc"
     ],
-    "minify.css.combine": "0",
-    "minify.css.enable": "1",
+    "minify.css.enable": true,
     "minify.css.engine": "css",
-    "minify.css.http2push": "0",
-    "minify.css.strip.comments": "0",
-    "minify.css.strip.crlf": "0",
+    "minify.css.method": "both",
+    "minify.css.http2push": false,
+    "minify.css.strip.comments": false,
+    "minify.css.strip.crlf": false,
     "minify.css.embed": false,
     "minify.css.imports": "",
     "minify.css.groups": [],
-    "minify.js.http2push": "0",
-    "minify.js.enable": "1",
+    "minify.js.http2push": false,
+    "minify.js.enable": true,
     "minify.js.engine": "js",
-    "minify.js.combine.header": "0",
+    "minify.js.method": "both",
+    "minify.js.combine.header": false,
     "minify.js.header.embed_type": "blocking",
     "minify.js.combine.body": false,
     "minify.js.body.embed_type": "blocking",
     "minify.js.combine.footer": false,
     "minify.js.footer.embed_type": "blocking",
-    "minify.js.strip.comments": "0",
-    "minify.js.strip.crlf": "0",
+    "minify.js.strip.comments": false,
+    "minify.js.strip.crlf": false,
     "minify.js.groups": [],
     "minify.yuijs.path.java": "java",
     "minify.yuijs.path.jar": "yuicompressor.jar",
@@ -353,28 +377,20 @@
     "minify.htmltidy.options.clean": false,
     "minify.htmltidy.options.hide-comments": true,
     "minify.htmltidy.options.wrap": 0,
-    "minify.reject.logged": "0",
-    "minify.reject.ua": [
-        ""
-    ],
-    "minify.reject.uri": [
-        ""
-    ],
-    "minify.reject.files.js": [
-        ""
-    ],
-    "minify.reject.files.css": [
-        ""
-    ],
+    "minify.reject.logged": false,
+    "minify.reject.ua": [],
+    "minify.reject.uri": [],
+    "minify.reject.files.js": [],
+    "minify.reject.files.css": [],
     "minify.cache.files": [
         ""
     ],
-    "minify.cache.files_regexp": "0",
+    "minify.cache.files_regexp": false,
     "cdn.configuration_overloaded": false,
     "cdn.enabled": false,
     "cdn.debug": false,
     "cdn.flush_manually": false,
-    "cdn.engine": "maxcdn",
+    "cdn.engine": "stackpath2",
     "cdn.uploads.enable": true,
     "cdn.includes.enable": true,
     "cdn.includes.files": "*.css;*.js;*.gif;*.png;*.jpg;*.xml",
@@ -535,6 +551,9 @@
     "cdnfsd.stackpath2.site_root_domain": 0,
     "cdnfsd.stackpath2.domain": [],
     "cdnfsd.stackpath2.ssl": "auto",
+    "cdnfsd.transparentcdn.client_id": "",
+    "cdnfsd.transparentcdn.client_secret": "",
+    "cdnfsd.transparentcdn.company_id": "",
     "varnish.configuration_overloaded": false,
     "varnish.enabled": false,
     "varnish.debug": false,
@@ -547,7 +566,7 @@
     "browsercache.no404wp": false,
     "browsercache.no404wp.exceptions": [
         "robots\\.txt",
-        "[a-z0-9_\\-]*sitemap[a-z0-9_\\-]*\\.(xml|xsl|html)(\\.gz)?"
+        "[a-z0-9_\\-]*sitemap[a-z0-9_\\.\\-]*\\.(xml|xsl|html)(\\.gz)?"
     ],
     "browsercache.cssjs.last_modified": true,
     "browsercache.cssjs.compression": true,
@@ -623,63 +642,136 @@
     "mobile.configuration_overloaded": false,
     "mobile.enabled": false,
     "mobile.rgroups": {
-        "high": {
+        "tablets": {
             "theme": "",
             "enabled": false,
             "redirect": "",
             "agents": [
-                "android",
-                "mobi",
-                "bada",
-                "incognito",
+                "a1-32ab0",
+                "a210",
+                "a211",
+                "b6000-h",
+                "b8000-h",
+                "bnrv200",
+                "bntv400",
+                "darwin",
+                "gt-n8005",
+                "gt-p3105",
+                "gt-p6810",
+                "gt-p7510",
+                "hmj37",
+                "hp-tablet",
+                "hp\\sslate",
+                "hp\\sslatebook",
+                "ht7s3",
+                "ideatab_a1107",
+                "ideataba2109a",
+                "ideos\\ss7",
+                "imm76d",
+                "ipad",
+                "k00f",
+                "kfjwi",
+                "kfot",
+                "kftt",
                 "kindle",
-                "maemo",
-                "opera\\ mini",
-                "s8000",
-                "series60",
-                "ucbrowser",
-                "ucweb",
-                "webmate",
-                "webos"
+                "l-06c",
+                "lg-f200k",
+                "lg-f200l",
+                "lg-f200s",
+                "m470bsa",
+                "m470bse",
+                "maxwell",
+                "me173x",
+                "mediapad",
+                "midc497",
+                "msi\\senjoy\\s10\\splus",
+                "mz601",
+                "mz616",
+                "nexus",
+                "nookcolor",
+                "pg09410",
+                "pg41200",
+                "pmp5570c",
+                "pmp5588c",
+                "pocketbook",
+                "qmv7a",
+                "sgp311",
+                "sgpt12",
+                "shv-e230k",
+                "shw-m305w",
+                "shw-m380w",
+                "sm-p605",
+                "smarttab",
+                "sonysgp321",
+                "sph-p500",
+                "surfpad",
+                "tab07-200",
+                "tab10-201",
+                "tab465euk",
+                "tab474",
+                "tablet",
+                "tegranote",
+                "tf700t",
+                "thinkpad",
+                "viewpad",
+                "voltaire"
             ]
         },
-        "low": {
+        "phones": {
             "theme": "",
             "enabled": false,
             "redirect": "",
             "agents": [
-                "2\\.0\\ mmp",
+                "(android|bb\\d+|meego).+mobile",
                 "240x320",
+                "2.0\\ mmp",
+                "\\bppc\\b",
+                "acer\\ s100",
                 "alcatel",
                 "amoi",
+                "archos5",
                 "asus",
-                "au\\-mic",
+                "au-mic",
                 "audiovox",
                 "avantgo",
+                "bada",
                 "benq",
                 "bird",
                 "blackberry",
                 "blazer",
                 "cdm",
                 "cellphone",
+                "cupcake",
                 "danger",
                 "ddipocket",
                 "docomo",
+                "docomo\\ ht-03a",
                 "dopod",
-                "elaine\/3\\.0",
+                "dream",
+                "elaine\/3.0",
                 "ericsson",
                 "eudoraweb",
                 "fly",
+                "froyo",
+                "googlebot-mobile",
                 "haier",
                 "hiptop",
-                "hp\\.ipaq",
+                "hp.ipaq",
                 "htc",
+                "htc\\ hero",
+                "htc\\ magic",
+                "htc_dream",
+                "htc_magic",
                 "huawei",
-                "i\\-mobile",
+                "i-mobile",
                 "iemobile",
                 "iemobile\/7",
+                "iemobile\/7.0",
                 "iemobile\/9",
-                "j\\-phone",
+                "incognito",
+                "iphone",
+                "ipod",
+                "j-phone",
                 "kddi",
                 "konka",
                 "kwc",
@@ -687,27 +779,34 @@
                 "lenovo",
                 "lg",
                 "lg\/u990",
+                "lg-gw620",
                 "lge\\ vx",
+                "liquid\\ build",
+                "maemo",
                 "midp",
-                "midp\\-2\\.0",
+                "midp-2.0",
                 "mmef20",
                 "mmp",
                 "mobilephone",
-                "mot\\-v",
+                "mot-mb200",
+                "mot-mb300",
+                "mot-v",
                 "motorola",
-                "msie\\ 10\\.0",
+                "msie\\ 10.0",
                 "netfront",
                 "newgen",
                 "newt",
+                "nexus\\ 7",
+                "nexus\\ one",
                 "nintendo\\ ds",
                 "nintendo\\ wii",
                 "nitro",
                 "nokia",
                 "novarra",
-                "o2",
                 "openweb",
+                "opera\\ mini",
                 "opera\\ mobi",
-                "opera\\.mobi",
+                "opera.mobi",
                 "p160u",
                 "palm",
                 "panasonic",
@@ -719,40 +818,52 @@
                 "playbook",
                 "playstation\\ portable",
                 "portalmmm",
-                "\\bppc\\b",
                 "proxinet",
                 "psp",
                 "qtek",
+                "s8000",
                 "sagem",
                 "samsung",
+                "samsung-s8000",
                 "sanyo",
                 "sch",
-                "sch\\-i800",
+                "sch-i800",
                 "sec",
                 "sendo",
+                "series60.*webkit",
+                "series60\/5.0",
                 "sgh",
                 "sharp",
-                "sharp\\-tq\\-gx10",
+                "sharp-tq-gx10",
                 "small",
                 "smartphone",
                 "softbank",
                 "sonyericsson",
+                "sonyericssone10",
+                "sonyericssonu20",
+                "sonyericssonx10",
                 "sph",
                 "symbian",
                 "symbian\\ os",
                 "symbianos",
+                "t-mobile\\ mytouch\\ 3g",
+                "t-mobile\\ opal",
+                "tattoo",
                 "toshiba",
+                "touch",
                 "treo",
-                "ts21i\\-10",
-                "up\\.browser",
-                "up\\.link",
+                "ts21i-10",
+                "up.browser",
+                "up.link",
                 "uts",
                 "vertu",
                 "vodafone",
                 "wap",
+                "webmate",
+                "webos",
                 "willcome",
                 "windows\\ ce",
-                "windows\\.ce",
+                "windows.ce",
                 "winwap",
                 "xda",
                 "xoom",
@@ -776,13 +887,14 @@
             ]
         }
     },
+    "robots_block.enable": false,
     "common.track_usage": false,
     "common.tweeted": false,
-    "config.check": false,
+    "config.check": true,
     "config.path": "",
     "widget.latest.items": 3,
     "widget.latest_news.items": 5,
-    "widget.pagespeed.enabled": true,
+    "widget.pagespeed.enabled": false,
     "widget.pagespeed.key": "",
     "widget.pagespeed.key.restrict.referrer": "",
     "widget.pagespeed.show_in_admin_bar": false,
@@ -797,34 +909,17 @@
     "timelimit.cdn_test": 300,
     "timelimit.domain_rename": 120,
     "timelimit.minify_recommendations": 600,
-    "common.instance_id": 393748815,
+    "common.instance_id": 1165104676,
     "common.force_master": true,
     "extensions.active": {
-        "newrelic": "w3-total-cache\/Extension_NewRelic_Plugin.php",
-        "fragmentcache": "w3-total-cache\/Extension_FragmentCache_Plugin.php",
-        "swarmify": "w3-total-cache\/Extension_Swarmify_Plugin.php"
+        "fragmentcache": "w3-total-cache\/Extension_FragmentCache_Plugin.php"
     },
     "extensions.active_frontend": [],
     "extensions.active_dropin": [],
     "plugin.license_key": "",
     "plugin.type": "",
-    "common.support": "",
-    "timelimit.cdn_container_create": 300,
+    "jquerymigrate.disabled": false,
     "fragmentcache": {
-        "engine": "memcached",
-        "memcached.servers": [
-            "127.0.0.1:11211"
-        ],
-        "memcached.persistent": "1",
-        "memcached.aws_autodiscovery": "0",
-        "memcached.username": "",
-        "memcached.password": "",
-        "lifetime": "3600",
-        "file.gc": "3600",
-        "groups": ""
-    },
-    "pgcache.bad_behavior_path": "",
-    "newrelic": {
-        "monitoring_type": "apm"
+        "engine": "memcached"
     }
-}
\ No newline at end of file
+}

From d7a656b94fb0af3fa37d27d0c49c825d0304bb53 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Sep 2021 14:35:35 +0200
Subject: [PATCH 1598/2300] roundcube set elastic skin as defalt

---
 install/debian/11/roundcube/main.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/11/roundcube/main.inc.php b/install/debian/11/roundcube/main.inc.php
index 55a4e082..91f32000 100644
--- a/install/debian/11/roundcube/main.inc.php
+++ b/install/debian/11/roundcube/main.inc.php
@@ -685,7 +685,7 @@ $rcmail_config['addressbook_search_mode'] = 0;
 $rcmail_config['default_charset'] = 'UTF-8';
 
 // skin name: folder from skins/
-$rcmail_config['skin'] = 'larry';
+$rcmail_config['skin'] = 'elastic';
 
 // show up to X items in messages list view
 $rcmail_config['mail_pagesize'] = 50;

From 43955dd086cb3da35d3532595ca2ff09bec9bbbc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Sep 2021 15:30:30 +0200
Subject: [PATCH 1599/2300] Updating apt before installation

---
 install/vst-install-debian.sh | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 99600590..f8f73cb4 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -294,15 +294,18 @@ if [ ! -z "$(grep ^admin: /etc/passwd)" ] && [ -z "$force" ]; then
     check_result 1 "User admin exists"
 fi
 
+echo "Updating apt, please wait..."
+apt-get update > /dev/null 2>&1
+
 # Checking wget
 if [ ! -e '/usr/bin/wget' ]; then
-    apt-get -y install wget
+    apt-get -y install wget > /dev/null 2>&1
     check_result $? "Can't install wget"
 fi
 
 # Check if gnupg2 is installed
 if [ $(dpkg-query -W -f='${Status}' gnupg2 2>/dev/null | grep -c "ok installed") -eq 0 ]; then
-    apt -y install gnupg2
+    apt-get -y install gnupg2 > /dev/null 2>&1
 fi
 
 # Check if apparmor is installed

From e843f1e701fbb77d235cfe68d329f08f1c51444f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Sep 2021 10:41:18 +0200
Subject: [PATCH 1600/2300] Removing pre-installed exim4

---
 install/vst-install-debian.sh | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index f8f73cb4..d985b525 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -329,6 +329,15 @@ for pkg in exim4 mysql-server apache2 nginx vesta; do
     fi
 done
 rm -f $tmpfile
+
+if [ ! -z "$conflicts" ] && [[ "$conflicts" = *"exim4"* ]]; then
+    echo "=== Removing pre-installed exim4"
+    apt remove --purge -y exim4 exim4-base exim4-config
+    rm -rf /etc/exim4
+    conflicts=$(echo "$conflicts" | sed -e "s/exim4//")
+    conflicts=$(echo "$conflicts" | sed -e "s/ //")
+fi
+
 if [ ! -z "$conflicts" ] && [ -z "$force" ]; then
     echo '!!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!! !!!'
     echo

From f66403eb9fe4b1c09846cbd8e6a35ce62f5105fd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Sep 2021 11:55:15 +0200
Subject: [PATCH 1601/2300] Better replacing yescrypt to sha512

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d985b525..231e2aa3 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1442,7 +1442,7 @@ fi
 
 if [ "$release" -eq 11 ]; then
     # Switching to sha512
-    sed -i "s/obscure yescrypt/obscure sha512/g" /etc/pam.d/common-password
+    sed -i "s/yescrypt/sha512/g" /etc/pam.d/common-password
 fi
 
 # Deleting old admin user

From 1884463e8efe5082237995deaa234a2a4f09c333 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 27 Sep 2021 16:28:49 +0200
Subject: [PATCH 1602/2300] Set original cPanel mail passwords

---
 bin/v-import-cpanel-backup | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/bin/v-import-cpanel-backup b/bin/v-import-cpanel-backup
index fc3c7352..c6005800 100644
--- a/bin/v-import-cpanel-backup
+++ b/bin/v-import-cpanel-backup
@@ -7,7 +7,6 @@
 # This script can import databases and database users and password, 
 # Import domains, subdomains and website files
 # This script import also mail accounts and mails into accounts if previous cpanel run dovecot
-# Mail password not are restored this was reset by new one.
 ###########
 # If you need restore main database user read line 160 or above
 ###########
@@ -272,7 +271,13 @@ if [[ "$sk_maild" != "cur" && "$sk_maild" != "new" && "$sk_maild" != "tmp"  ]];
 					mv ${sk_maild}/${sk_mail_account} /home/${sk_cp_user}/mail/${sk_maild}
 					chown ${sk_cp_user}:mail -R /home/${sk_cp_user}/mail/${sk_maild}
 					find /home/${sk_cp_user}/mail/${sk_maild} -type f -name 'dovecot*' -delete
-					echo "${sk_mail_account}@${sk_maild} | $sk_mail_pass1"	>> /root/sk_mail_password_${sk_cp_user}-${sk_cod}
+					# echo "${sk_mail_account}@${sk_maild} | $sk_mail_pass1"	>> /root/sk_mail_password_${sk_cp_user}-${sk_cod}
+				    echo "Set password for ${sk_mail_account}@${sk_maild}"
+				    pass=$(grep "^${sk_mail_account}:" ${sk_importer_in}/homedir/etc/${sk_maild}/shadow | awk -F  ":" '{print $2}')
+				    newline="${sk_mail_account}:{SHA512-CRYPT}$pass:${sk_cp_user}:mail::/home/${sk_cp_user}:0"
+				    echo $newline
+				    escaped=$(printf '%s\n' "$newline" | sed -e 's/[\/&]/\\&/g')
+				    sed -i "s/^${sk_mail_account}:.*/$escaped/g" /home/${sk_cp_user}/conf/mail/${sk_maild}/passwd
 		done
 	fi
 #else
@@ -351,7 +356,7 @@ tput setaf 4
 echo "##############################"
 echo "cPanel Backup restored"
 echo "Review your content and report any fail"
-echo "I reset mail password not posible restore it yet."
-echo "Check your new passwords runing: cat /root/sk_mail_password_${sk_cp_user}-${sk_cod}"
+# echo "I reset mail password not posible restore it yet."
+# echo "Check your new passwords runing: cat /root/sk_mail_password_${sk_cp_user}-${sk_cod}"
 echo "##############################"
 tput sgr0

From d4411dc92f7c67ab0fba4cee4a1f87b7b21fe043 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 27 Sep 2021 19:12:33 +0200
Subject: [PATCH 1603/2300] Update v-import-cpanel-backup

---
 bin/v-import-cpanel-backup | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-import-cpanel-backup b/bin/v-import-cpanel-backup
index c6005800..a740a44b 100644
--- a/bin/v-import-cpanel-backup
+++ b/bin/v-import-cpanel-backup
@@ -275,7 +275,7 @@ if [[ "$sk_maild" != "cur" && "$sk_maild" != "new" && "$sk_maild" != "tmp"  ]];
 				    echo "Set password for ${sk_mail_account}@${sk_maild}"
 				    pass=$(grep "^${sk_mail_account}:" ${sk_importer_in}/homedir/etc/${sk_maild}/shadow | awk -F  ":" '{print $2}')
 				    newline="${sk_mail_account}:{SHA512-CRYPT}$pass:${sk_cp_user}:mail::/home/${sk_cp_user}:0"
-				    echo $newline
+				    # echo $newline
 				    escaped=$(printf '%s\n' "$newline" | sed -e 's/[\/&]/\\&/g')
 				    sed -i "s/^${sk_mail_account}:.*/$escaped/g" /home/${sk_cp_user}/conf/mail/${sk_maild}/passwd
 		done

From fc483f5d3cf29631f171d545c8790e3727482d8c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 27 Sep 2021 21:35:47 +0200
Subject: [PATCH 1604/2300] Set original cPanel mail passwords

---
 bin/v-import-cpanel-backup | 20 ++++++++++++++------
 1 file changed, 14 insertions(+), 6 deletions(-)

diff --git a/bin/v-import-cpanel-backup b/bin/v-import-cpanel-backup
index a740a44b..a4d40226 100644
--- a/bin/v-import-cpanel-backup
+++ b/bin/v-import-cpanel-backup
@@ -252,6 +252,11 @@ rm -f sk_sds2 sk_sds
 
 ##################
 # mail
+
+time_n_date=$(date +'%T %F')
+time=$(echo "$time_n_date" |cut -f 1 -d \ )
+date=$(echo "$time_n_date" |cut -f 2 -d \ )
+
 tput setaf 2
 echo "Start Restoring Mails"
 tput sgr0
@@ -272,12 +277,15 @@ if [[ "$sk_maild" != "cur" && "$sk_maild" != "new" && "$sk_maild" != "tmp"  ]];
 					chown ${sk_cp_user}:mail -R /home/${sk_cp_user}/mail/${sk_maild}
 					find /home/${sk_cp_user}/mail/${sk_maild} -type f -name 'dovecot*' -delete
 					# echo "${sk_mail_account}@${sk_maild} | $sk_mail_pass1"	>> /root/sk_mail_password_${sk_cp_user}-${sk_cod}
-				    echo "Set password for ${sk_mail_account}@${sk_maild}"
-				    pass=$(grep "^${sk_mail_account}:" ${sk_importer_in}/homedir/etc/${sk_maild}/shadow | awk -F  ":" '{print $2}')
-				    newline="${sk_mail_account}:{SHA512-CRYPT}$pass:${sk_cp_user}:mail::/home/${sk_cp_user}:0"
-				    # echo $newline
-				    escaped=$(printf '%s\n' "$newline" | sed -e 's/[\/&]/\\&/g')
-				    sed -i "s/^${sk_mail_account}:.*/$escaped/g" /home/${sk_cp_user}/conf/mail/${sk_maild}/passwd
+					echo "Set password for ${sk_mail_account}@${sk_maild}"
+					pass=$(grep "^${sk_mail_account}:" ${sk_importer_in}/homedir/etc/${sk_maild}/shadow | awk -F  ":" '{print $2}')
+					newline="${sk_mail_account}:{SHA512-CRYPT}$pass:${sk_cp_user}:mail::/home/${sk_cp_user}:0"
+					newline2="ACCOUNT='${sk_mail_account}' ALIAS='' AUTOREPLY='no' FWD='' FWD_ONLY='' MD5='{SHA512-CRYPT}$pass' QUOTA='unlimited' U_DISK='0' SUSPENDED='no' TIME='$time' DATE='$date'"
+					# echo $newline
+					escaped=$(printf '%s\n' "$newline" | sed -e 's/[\/&]/\\&/g')
+					escaped2=$(printf '%s\n' "$newline2" | sed -e 's/[\/&]/\\&/g')
+					sed -i "s/^${sk_mail_account}:.*/$escaped/g" /home/${sk_cp_user}/conf/mail/${sk_maild}/passwd
+					sed -i "s/^ACCOUNT='${sk_mail_account}.*/$escaped2/g" /usr/local/vesta/data/users/${sk_cp_user}/mail/${sk_maild}.conf
 		done
 	fi
 #else

From 2ac72e00fb914eee6632ee0937782ceede89ee4f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 Sep 2021 11:02:23 +0200
Subject: [PATCH 1605/2300] Fix Autoreply issue with Exim 4.94+

---
 bin/v-add-mail-account                     |  2 ++
 bin/v-add-mail-domain                      |  2 ++
 bin/v-delete-mail-account                  |  1 +
 func/rebuild.sh                            |  6 ++++++
 install/debian/11/exim/exim4.conf.template |  4 ++--
 install/vst-install-debian.sh              |  1 +
 src/deb/vesta/postinst                     | 11 +++++++++++
 7 files changed, 25 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-mail-account b/bin/v-add-mail-account
index 1675d5d7..81da9e71 100755
--- a/bin/v-add-mail-account
+++ b/bin/v-add-mail-account
@@ -61,6 +61,8 @@ if [[ "$MAIL_SYSTEM" =~ exim ]]; then
     fi
     str="$account:$md5:$user:mail::$HOMEDIR/$user:$quota"
     echo $str >> $HOMEDIR/$user/conf/mail/$domain/passwd
+    userstr="$account:$account:$user:mail:$HOMEDIR/$user"
+    echo $userstr >> $HOMEDIR/$user/conf/mail/$domain/accounts
 fi
 
 # Create mail account folder (mailbox)
diff --git a/bin/v-add-mail-domain b/bin/v-add-mail-domain
index 7c9dbc36..c26dadb2 100755
--- a/bin/v-add-mail-domain
+++ b/bin/v-add-mail-domain
@@ -91,6 +91,7 @@ if [[ "$MAIL_SYSTEM" =~ exim ]]; then
     touch $HOMEDIR/$user/conf/mail/$domain/aliases
     touch $HOMEDIR/$user/conf/mail/$domain/passwd
     touch $HOMEDIR/$user/conf/mail/$domain/fwd_only
+    touch $HOMEDIR/$user/conf/mail/$domain/accounts
     ln -s $HOMEDIR/$user/conf/mail/$domain \
         /etc/$MAIL_SYSTEM/domains/$domain_idn
 
@@ -119,6 +120,7 @@ if [[ "$MAIL_SYSTEM" =~ exim ]]; then
     # Set ownership
     chown -R $MAIL_USER:mail $HOMEDIR/$user/conf/mail/$domain
     chown -R dovecot:mail $HOMEDIR/$user/conf/mail/$domain/passwd
+    chown $MAIL_USER:mail $HOMEDIR/$user/conf/mail/$domain/accounts
     chown $user:mail $HOMEDIR/$user/mail/$domain_idn
 fi
 
diff --git a/bin/v-delete-mail-account b/bin/v-delete-mail-account
index f0da423c..09c41b50 100755
--- a/bin/v-delete-mail-account
+++ b/bin/v-delete-mail-account
@@ -53,6 +53,7 @@ if [[ "$MAIL_SYSTEM" =~ exim ]]; then
 
     sed -i "/^$account@$domain_idn:/d" $HOMEDIR/$user/conf/mail/$domain/aliases
     sed -i "/^$account:/d" $HOMEDIR/$user/conf/mail/$domain/passwd
+    sed -i "/^$account:/d" $HOMEDIR/$user/conf/mail/$domain/accounts
     rm -rf $HOMEDIR/$user/mail/$domain/$account
 fi
 
diff --git a/func/rebuild.sh b/func/rebuild.sh
index b4df3d20..bf04dda0 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -445,9 +445,12 @@ rebuild_mail_domain_conf() {
         rm -f $HOMEDIR/$user/conf/mail/$domain/protection
         rm -f $HOMEDIR/$user/conf/mail/$domain/passwd
         rm -f $HOMEDIR/$user/conf/mail/$domain/fwd_only
+        rm -f $HOMEDIR/$user/conf/mail/$domain/accounts
+
         touch $HOMEDIR/$user/conf/mail/$domain/aliases
         touch $HOMEDIR/$user/conf/mail/$domain/passwd
         touch $HOMEDIR/$user/conf/mail/$domain/fwd_only
+        touch $HOMEDIR/$user/conf/mail/$domain/accounts
 
         # Adding antispam protection
         if [ "$ANTISPAM" = 'yes' ]; then
@@ -506,6 +509,8 @@ rebuild_mail_domain_conf() {
             fi
             str="$account:$MD5:$user:mail::$HOMEDIR/$user:$QUOTA"
             echo $str >> $HOMEDIR/$user/conf/mail/$domain/passwd
+            userstr="$account:$account:$user:mail:$HOMEDIR/$user"
+            echo $userstr >> $HOMEDIR/$user/conf/mail/$domain/accounts
             for malias in ${ALIAS//,/ }; do
                 echo "$malias@$domain_idn:$account@$domain_idn" >> $dom_aliases
             done
@@ -527,6 +532,7 @@ rebuild_mail_domain_conf() {
         chmod 770 $HOMEDIR/$user/mail/$domain_idn
         chown -R $MAIL_USER:mail $HOMEDIR/$user/conf/mail/$domain
         chown -R dovecot:mail $HOMEDIR/$user/conf/mail/$domain/passwd
+        chown $MAIL_USER:mail $HOMEDIR/$user/conf/mail/$domain/accounts
         chown $user:mail $HOMEDIR/$user/mail/$domain_idn
     fi
 
diff --git a/install/debian/11/exim/exim4.conf.template b/install/debian/11/exim/exim4.conf.template
index 977dc661..d8bca393 100644
--- a/install/debian/11/exim/exim4.conf.template
+++ b/install/debian/11/exim/exim4.conf.template
@@ -381,8 +381,8 @@ address_reply:
 
 userautoreply:
   driver = autoreply
-  file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}.msg
-  from = "${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"
+  file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}.msg
+  from = "${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"
   headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
   subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
   to = "${sender_address}"
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 231e2aa3..b73c929f 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1734,6 +1734,7 @@ touch /usr/local/vesta/data/upgrades/apache_status_public_access
 touch /usr/local/vesta/data/upgrades/update-cloudflare-ips
 touch /usr/local/vesta/data/upgrades/enable-tls-in-proftpd
 touch /usr/local/vesta/data/upgrades/enable_cookie_httponly
+touch /usr/local/vesta/data/upgrades/fix_exim_494_autoreply
 
 # Secret URL
 secretquery=''
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index dbb7cbd2..906cd305 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -23,6 +23,17 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# Fix Autoreply issue with Exim 4.94+
+if [ ! -f "/usr/local/vesta/data/upgrades/fix_exim_494_autoreply" ]; then
+    touch /usr/local/vesta/data/upgrades/fix_exim_494_autoreply
+    if [ -f "/etc/exim4/exim4.conf.template" ]; then 
+        echo "== Fix Autoreply issue with Exim 4.94+"
+        sed -i 's|file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}.msg|file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}.msg|g'  /etc/exim4/exim4.conf.template
+        sed -i 's| from = "${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"| from = "${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"|g' /etc/exim4/exim4.conf.template
+        systemctl restart exim4
+    fi
+fi
+
 # Enabling session.cookie_httponly and session.cookie_secure in myvesta php-fpm
 if [ ! -f "/usr/local/vesta/data/upgrades/enable_cookie_httponly" ]; then
     touch /usr/local/vesta/data/upgrades/enable_cookie_httponly

From f236015bdf806bbb8b438b601af9bcad91eef1b6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 Sep 2021 13:40:01 +0200
Subject: [PATCH 1606/2300] Update process for Autoreply fix with Exim 4.94+

---
 src/deb/vesta/postinst | 20 ++++++++++++++------
 1 file changed, 14 insertions(+), 6 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 906cd305..b644a3cd 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -25,12 +25,20 @@ chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
 # Fix Autoreply issue with Exim 4.94+
 if [ ! -f "/usr/local/vesta/data/upgrades/fix_exim_494_autoreply" ]; then
-    touch /usr/local/vesta/data/upgrades/fix_exim_494_autoreply
-    if [ -f "/etc/exim4/exim4.conf.template" ]; then 
-        echo "== Fix Autoreply issue with Exim 4.94+"
-        sed -i 's|file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}.msg|file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}.msg|g'  /etc/exim4/exim4.conf.template
-        sed -i 's| from = "${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"| from = "${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"|g' /etc/exim4/exim4.conf.template
-        systemctl restart exim4
+    if [ "$release" -eq 11 ]; then
+        touch /usr/local/vesta/data/upgrades/fix_exim_494_autoreply
+        if [ -f "/etc/exim4/exim4.conf.template" ]; then 
+            echo "== Fix Autoreply issue with Exim 4.94+"
+            sed -i 's|file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}.msg|file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}.msg|g'  /etc/exim4/exim4.conf.template
+            sed -i 's| from = "${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"| from = "${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"|g' /etc/exim4/exim4.conf.template
+            for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
+                if [ ! -f "/usr/local/vesta/data/users/$user/user.conf" ]; then
+                    continue;
+                fi
+                v-rebuild-mail-domains $user
+            done
+            systemctl restart exim4
+        fi
     fi
 fi
 

From fd8a44ae23884f345626ffd50bcf47dd11eb95fd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 Sep 2021 13:43:51 +0200
Subject: [PATCH 1607/2300] Update postinst

---
 src/deb/vesta/postinst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index b644a3cd..8649087b 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -35,7 +35,7 @@ if [ ! -f "/usr/local/vesta/data/upgrades/fix_exim_494_autoreply" ]; then
                 if [ ! -f "/usr/local/vesta/data/users/$user/user.conf" ]; then
                     continue;
                 fi
-                v-rebuild-mail-domains $user
+                /usr/local/vesta/bin/v-rebuild-mail-domains $user
             done
             systemctl restart exim4
         fi

From 9eb21cef4cf2c23c7476de7e4c95d73f2ded53db Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 Sep 2021 15:44:18 +0200
Subject: [PATCH 1608/2300] Define mail user in rebuild_mail_domain_conf()

---
 func/rebuild.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/func/rebuild.sh b/func/rebuild.sh
index bf04dda0..23f9d4d7 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -523,6 +523,12 @@ rebuild_mail_domain_conf() {
         fi
     done
 
+    # Define mail user
+    if [ "$MAIL_SYSTEM" = 'exim4' ]; then
+        MAIL_USER=Debian-exim
+    else
+        MAIL_USER=exim
+    fi
     # Set permissions and ownership
     if [[ "$MAIL_SYSTEM" =~ exim ]]; then
         chmod 660 $USER_DATA/mail/$domain.*

From 402131c22b352e9200c8f141aa516aff53692fec Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 Sep 2021 16:41:36 +0200
Subject: [PATCH 1609/2300] Moving v-install-wordpress to --parameters

---
 bin/v-install-wordpress | 23 ++++++++++++++---------
 1 file changed, 14 insertions(+), 9 deletions(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 8e60dc6f..82c8e6ac 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -17,14 +17,15 @@ fi
 # Argument definition
 domain=$1
 
-database="wp";
-if [ $# -gt 1 ]; then
-    database=$2
+# take --parameters
+source /usr/local/vesta/func/handle_parameters.sh
+
+if [ -z "$database" ]; then
+    database="wp"
 fi
 
-email="info@$domain";
-if [ $# -gt 2 ]; then
-    email=$3
+if [ -z "$emil" ]; then
+    email="info@$domain";
 fi
 
 user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
@@ -83,11 +84,15 @@ PASSWDDB=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1)
 #----------------------------------------------------------#
 
 PROTOCOL='http'
-if [ ! -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
-    /usr/local/vesta/bin/v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
+if [ -z "$SKIP_LE" ]; then
+    if [ ! -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
+        /usr/local/vesta/bin/v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
+    fi
+else
+    PROTOCOL='https'
 fi
 
-if [ -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
+if [ -f "/home/$user/conf/web/ssl.$domain.ca" ] || [ ! -z "$SKIP_LE" ]; then
     PROTOCOL='https'
     if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
         /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"

From def46e8cd7b738b5dce9d94b9a29358e4232af19 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 12 Oct 2021 11:41:04 +0200
Subject: [PATCH 1610/2300] Update v-install-wordpress

---
 bin/v-install-wordpress | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 82c8e6ac..d558dd35 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -17,17 +17,6 @@ fi
 # Argument definition
 domain=$1
 
-# take --parameters
-source /usr/local/vesta/func/handle_parameters.sh
-
-if [ -z "$database" ]; then
-    database="wp"
-fi
-
-if [ -z "$emil" ]; then
-    email="info@$domain";
-fi
-
 user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
 if [ -z "$user" ]; then
     check_result $E_NOTEXIST "domain $domain doesn't exist"
@@ -49,6 +38,17 @@ is_format_valid 'domain' 'database' 'email'
 is_object_valid 'user' 'USER' "$user"
 is_object_unsuspended 'user' 'USER' "$user"
 
+# take --parameters
+source /usr/local/vesta/func/handle_parameters.sh
+
+if [ -z "$database" ]; then
+    database="wp"
+fi
+
+if [ -z "$emil" ]; then
+    email="info@$domain";
+fi
+
 if [ ! -d "/home/$user" ]; then
     echo "User doesn't exist";
     exit 1;

From 8bbfc1255ffacc02c2e45617320b29dd92adbb4d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 Oct 2021 10:33:21 +0200
Subject: [PATCH 1611/2300] Avoiding error if unzip destination exists

---
 bin/v-extract-fs-archive | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-extract-fs-archive b/bin/v-extract-fs-archive
index ec70baba..1ea608af 100755
--- a/bin/v-extract-fs-archive
+++ b/bin/v-extract-fs-archive
@@ -82,7 +82,7 @@ fi
 # Extracting ziped archive
 if [ ! -z "$(echo $src_file |grep -i  '.zip')" ]; then
     sudo -u $user mkdir -p "$dst_dir" >/dev/null 2>&1
-    sudo -u $user unzip "$src_file" -d "$dst_dir" >/dev/null 2>&1
+    sudo -u $user unzip -o "$src_file" -d "$dst_dir" >/dev/null 2>&1
     rc=$?
 fi
 

From a493c140cea6ac604938273c244128fac9d7c807 Mon Sep 17 00:00:00 2001
From: Jaap Marcus <9754650+jaapmarcus@users.noreply.github.com>
Date: Mon, 18 Oct 2021 09:31:48 +0200
Subject: [PATCH 1612/2300] Regex string threaded literally instead as regex

During shellcheck of Hestia source code I noticed the following error matching the line:
^----^ SC2076: Don't quote right-hand side of =~, it'll match literally rather than as a regex.
                                                                                      ^--------------^ SC2076: Don't quote right-hand side of =~, it'll match literally rather
Proof of concept:
root@dev:~# v-add-web-domain jaap jaap..nu
Error: nginx restart failed
root@dev:~# v-add-web-domain jaap jaap..nu
Error: invalid domain format :: jaap..nu
---
 func/main.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/main.sh b/func/main.sh
index 5f71bb1f..a92bb59a 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -551,7 +551,7 @@ is_user_format_valid() {
 is_domain_format_valid() {
     object_name=${2-domain}
     exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|_|/|\|\"|'|;|%|\`| ]"
-    if [[ $1 =~ $exclude ]] || [[ $1 =~ ^[0-9]+$ ]] || [[ $1 =~ "\.\." ]] || [[ $1 =~ "$(printf '\t')" ]]; then
+    if [[ $1 =~ $exclude ]] || [[ $1 =~ ^[0-9]+$ ]] || [[ $1 =~ \.\. ]] || [[ $1 =~ $(printf '\t') ]]; then
         check_result $E_INVALID "invalid $object_name format :: $1"
     fi
 }

From f68d0178c810d5353434d9a1f4becb4ef80233c3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 20 Oct 2021 21:51:17 +0200
Subject: [PATCH 1613/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index ce04f573..4dd830c1 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -293,6 +293,6 @@ if [ $debian_version -eq 10 ]; then
     a2dismod php8.0
     a2dismod mpm_prefork
     a2enmod mpm_event
-    apt-get -y remove libapache2-mod-php8.0
+    apt-get -y remove libapache2-mod-php*
     service apache2 restart
 fi

From e2537d902655ccd90dcf3930d3925896c7ceefe7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 20 Oct 2021 23:34:42 +0200
Subject: [PATCH 1614/2300] Set default php in installer

---
 install/vst-install-debian.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index b73c929f..4f48ca0b 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1637,7 +1637,9 @@ if [ "$release" -eq 9 ]; then
       patch -p1 --directory=/ < /root/vesta-temp-dl/vesta/patch/php7.0-dedi.patch
     fi
   fi
+  update-alternatives --set php /usr/bin/php7.0
 fi
+
 if [ "$release" -eq 10 ]; then
   if [ $memory -lt 10000000 ]; then
     echo "=== Patching php7.3-vps"
@@ -1647,8 +1649,10 @@ if [ "$release" -eq 10 ]; then
     echo "=== Patching php7.3-dedi"
     patch /etc/php/7.3/fpm/php.ini < $vestacp/php/php7.3-dedi.patch
   fi
+  update-alternatives --set php /usr/bin/php7.3
   service php7.3-fpm restart
 fi
+
 if [ "$release" -eq 11 ]; then
   if [ $memory -lt 10000000 ]; then
     echo "=== Patching php7.4-vps"
@@ -1658,6 +1662,7 @@ if [ "$release" -eq 11 ]; then
     echo "=== Patching php7.4-dedi"
     patch /etc/php/7.4/fpm/php.ini < $vestacp/php/php7.4-dedi.patch
   fi
+  update-alternatives --set php /usr/bin/php7.4
   service php7.4-fpm restart
 fi
 

From 5633b839e5e3821784aa880c6c35b04038e70039 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 20 Oct 2021 23:36:26 +0200
Subject: [PATCH 1615/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 4dd830c1..6d30ab25 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -281,7 +281,7 @@ fi
 apt update
 apt upgrade -y
 
-if [ $debian_version -eq 10 ]; then
+if [ $debian_version -ge 10 ]; then
     a2dismod ruid2
     a2dismod suexec
     a2dismod php5.6
@@ -291,6 +291,7 @@ if [ $debian_version -eq 10 ]; then
     a2dismod php7.3
     a2dismod php7.4
     a2dismod php8.0
+    a2dismod php8.1
     a2dismod mpm_prefork
     a2enmod mpm_event
     apt-get -y remove libapache2-mod-php*

From bc9ca52c3736bd9dc46df38eed98b6231c0dc58a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 20 Oct 2021 23:48:42 +0200
Subject: [PATCH 1616/2300] Create v-clean-garbage

---
 bin/v-clean-garbage | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 bin/v-clean-garbage

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
new file mode 100644
index 00000000..fc354210
--- /dev/null
+++ b/bin/v-clean-garbage
@@ -0,0 +1,35 @@
+#!/bin/bash
+
+nice -n 19 ionice -c 3 find /home/*/tmp/ -type f -delete
+find /home/ -name '.wp-cli' -type d -exec rm -rf {} \;
+
+rm /var/backups/*
+rm /var/cache/apt/archives/*
+cd /var/log
+truncate -s 0 xferlog lastlog faillog btmp syslog;
+find /var/log/ -name "*.log" -type f -exec truncate -s 0 {} \;
+find /var/log/ -name "*.err" -type f -exec truncate -s 0 {} \;
+find /var/log/ -name "errors" -type f -exec truncate -s 0 {} \;
+find /var/log/ -name "*.info" -type f -exec truncate -s 0 {} \;
+find /var/log/ -name "*.warn" -type f -exec truncate -s 0 {} \;
+find /var/log/ -type f -name "*.1" -delete
+find /var/log/ -type f -name "*.2" -delete
+find /var/log/ -type f -name "*.3" -delete
+find /var/log/ -type f -name "*.4" -delete
+find /var/log/ -type f -name "*.5" -delete
+find /var/log/ -type f -name "*.6" -delete
+find /var/log/ -type f -name "*.7" -delete
+find /var/log/ -name "*.gz" -type f -delete
+find /usr/local/vesta/log/ -type f -name "*.log" -exec truncate -s 0 {} \;
+find /usr/local/vesta/log/ -type f -not -name "*.log" -delete
+find /var/log/exim4/ -type f -exec truncate -s 0 {} \;
+
+find /home/*/web/*/public_html/wp-content/aiowps_backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+find /home/*/web/*/public_html/wp-content/envato-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+find /home/*/web/*/public_html/wp-content/ai1wm-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+find /home/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+find /home/*/web/*/public_html/ -type f -name "error_log" -delete
+find /home/*/web/*/public_html/ -type f -name "error_log.txt" -delete
+find /home/ -type f -name "*.log" -delete
+
+echo "=== Garbage cleaned ==="

From 39c9ebc2a7edbb1dd17fd5b4e6110cb065fba852 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 7 Nov 2021 00:33:45 +0100
Subject: [PATCH 1617/2300] curl --silent in v-add-letsencrypt-domain

---
 bin/v-add-letsencrypt-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 3a7b10b8..0cea207c 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -287,7 +287,7 @@ for auth in $authz; do
             check_result $E_CONNECT "Let's Encrypt domain validation timeout"
         fi
         echo "[$(date)] : curl: $url2 :" >> /usr/local/vesta/log/letsencrypt.log
-        get_answer=$(curl -S "$url2")
+        get_answer=$(curl --silent -S "$url2")
         echo "[$(date)] : get_answer=$get_answer" >> /usr/local/vesta/log/letsencrypt.log
         sleeping=$((i*2))
         echo "[$(date)] : sleep $sleeping (i=$i)" >> /usr/local/vesta/log/letsencrypt.log

From 4bb53ff28f22fe5f18a50da493683cfba19983c0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 7 Nov 2021 14:26:16 +0100
Subject: [PATCH 1618/2300] Properly rebuild_mysql_database password for
 MariaDB > 10.4

---
 func/rebuild.sh | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/func/rebuild.sh b/func/rebuild.sh
index 23f9d4d7..eeef03ee 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -568,21 +568,30 @@ rebuild_mysql_database() {
         fi
     else
         # mariadb
-        if [ "$(echo $mysql_ver |cut -d '.' -f1)" -eq 5 ]; then
+        mysql_ver_sub=$(echo $mysql_ver |cut -d '.' -f1)
+        mysql_ver_sub_sub=$(echo $mysql_ver |cut -d '.' -f2)
+        if [ "$mysql_ver_sub" -eq 5 ]; then
             # mariadb = 5
             mysql_query "CREATE USER \`$DBUSER\`" > /dev/null
             mysql_query "CREATE USER \`$DBUSER\`@localhost" > /dev/null
+            query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
         else
             # mariadb = 10
             mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
             mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
+            query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
+            if [ "$mysql_ver_sub_sub" -ge 4 ]; then
+                query="SET PASSWORD FOR '$DBUSER'@'%' = '$MD5';"
+                query2="SET PASSWORD FOR '$DBUSER'@'localhost' = '$MD5';"
+            fi
         fi
-        # mariadb any version
-        query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
     fi
     mysql_query "GRANT ALL ON \`$DB\`.* TO \`$DBUSER\`@\`%\`" >/dev/null
     mysql_query "GRANT ALL ON \`$DB\`.* TO \`$DBUSER\`@localhost" >/dev/null
     mysql_query "$query" >/dev/null
+    if [ ! -z "$query2" ]; then
+        mysql_query "$query2" >/dev/null
+    fi
     mysql_query "FLUSH PRIVILEGES" >/dev/null
 }
 

From 14ba4ab999869dacabe670e41a22ebf9e7b1a3e4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 7 Nov 2021 21:46:52 +0100
Subject: [PATCH 1619/2300] Version 0.9.8-26-50

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index efd44125..53712deb 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-49
+vesta-0.9.8-26-50

From c0cebf526438aac378862e45ac16d6fe774cb6fe Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 7 Nov 2021 21:48:46 +0100
Subject: [PATCH 1620/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 647187e0..4ecfde8f 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-50 [07-Nov-2021]
+==================================================
+* Many small bugfixes and CSRF fixes
+
 Version 0.9.8-26-49 [17-Jul-2021]
 ==================================================
 * Support for Debian 11

From aba861c8143c0b23a3d327636bf79ebe13cc897d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Nov 2021 22:54:42 +0100
Subject: [PATCH 1621/2300] check spam if email smaller than 600 KB

---
 install/debian/10/exim/exim4.conf.template | 2 +-
 install/debian/11/exim/exim4.conf.template | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
index cb79ab3c..70577b6e 100644
--- a/install/debian/10/exim/exim4.conf.template
+++ b/install/debian/10/exim/exim4.conf.template
@@ -174,7 +174,7 @@ acl_check_data:
 .ifdef SPAMASSASSIN
   warn   !authenticated = *
          hosts          = !+relay_from_hosts
-         condition      = ${if < {$message_size}{100K}}
+         condition      = ${if < {$message_size}{600K}}
          condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
          spam           = nobody:true/defer_ok
          add_header     = X-Spam-Score: $spam_score_int
diff --git a/install/debian/11/exim/exim4.conf.template b/install/debian/11/exim/exim4.conf.template
index d8bca393..a041b329 100644
--- a/install/debian/11/exim/exim4.conf.template
+++ b/install/debian/11/exim/exim4.conf.template
@@ -174,7 +174,7 @@ acl_check_data:
 .ifdef SPAMASSASSIN
   warn   !authenticated = *
          hosts          = !+relay_from_hosts
-         condition      = ${if < {$message_size}{100K}}
+         condition      = ${if < {$message_size}{600K}}
          condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
          spam           = nobody:true/defer_ok
          add_header     = X-Spam-Score: $spam_score_int

From 8c4be97720bdda6f25db0a94c7150d779679d2f0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 12 Nov 2021 23:04:46 +0100
Subject: [PATCH 1622/2300] Fix for "chmod: changing permissions"

---
 bin/v-add-web-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-web-domain b/bin/v-add-web-domain
index aab09e6a..72de559a 100755
--- a/bin/v-add-web-domain
+++ b/bin/v-add-web-domain
@@ -90,7 +90,7 @@ done
 # Changing file owner & permission
 chown -R $user:$user $HOMEDIR/$user/web/$domain
 chown root:$user /var/log/$WEB_SYSTEM/domains/$domain.* $conf
-sudo -u $user chmod 640 /var/log/$WEB_SYSTEM/domains/$domain.*
+chmod 640 /var/log/$WEB_SYSTEM/domains/$domain.*
 sudo -u $user chmod 751 $HOMEDIR/$user/web/$domain $HOMEDIR/$user/web/$domain/*
 sudo -u $user chmod 551 $HOMEDIR/$user/web/$domain/stats $HOMEDIR/$user/web/$domain/logs
 sudo -u $user chmod 644 $HOMEDIR/$user/web/$domain/public_*html/*.*

From 302e351252d2afa3428381bd11d72a03729a2438 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Nov 2021 19:47:54 +0100
Subject: [PATCH 1623/2300] Many fixes for v-list-sys-services

---
 bin/v-list-sys-services                | 142 ++++++++++++++++++++++---
 web/templates/admin/list_services.html |  12 ++-
 2 files changed, 133 insertions(+), 21 deletions(-)

diff --git a/bin/v-list-sys-services b/bin/v-list-sys-services
index 93f01a11..71133ac4 100755
--- a/bin/v-list-sys-services
+++ b/bin/v-list-sys-services
@@ -18,6 +18,8 @@ source $VESTA/conf/vesta.conf
 
 export PATH=$PATH:/sbin
 
+debug=0
+
 # JSON list function
 json_list() {
     IFS=$'\n'
@@ -50,6 +52,9 @@ shell_list() {
     echo "----   -----   ---   ---   ------"
     while read str; do
         eval $str
+        if [ "$STATE" = "stopped" ]; then
+            STATE='off'
+        fi
         echo "$NAME $STATE $CPU $MEM $RTIME"
     done < <(echo -e "$data" |grep NAME)
 }
@@ -77,8 +82,17 @@ csv_list() {
 get_srv_state() {
     srv=$1
     name=${2-$1}
+    procfolder=$4
+    procfile=$5
     state='running'
+    mem=0
+    cpu=0
+    rtime="0"
 
+    if [ $debug -eq 1 ]; then
+        echo "---------------------"
+        echo "$srv = $name"
+    fi
     # Searching related pids
     if [ -z $3 ]; then
         pids=$(pidof $name |tr ' ' '|')
@@ -88,10 +102,23 @@ get_srv_state() {
     if [ -z "$pids" ] && [ "$name" != 'nginx' ]; then
         pids=$(pgrep $name |tr '\n' '|')
     fi
+    if [ "$name" = 'elasticsearch' ]; then
+        pids=$(ps -Af | grep 'elasticsearch' | grep -v 'grep' | awk '{print $2}' | tr '\n' '|')
+    fi
+    if [ "$name" = 'vesta-nginx' ]; then
+        pids=$(ps -Af | grep 'vesta/nginx' | grep -v 'grep' | awk '{print $2}' | tr '\n' '|')
+    fi
+    if [ "$name" = 'vesta-php' ]; then
+        pids=$(ps -Af | grep 'vesta/php' | grep -v 'grep' | awk '{print $2}' | tr '\n' '|')
+    fi
+    if [ $debug -eq 1 ]; then
+        echo "pids = $pids"
+    fi
 
     # Checking pid
-    if [ ! -z "$pids" ]; then
+    if [ -n "$pids" ]; then
         pid=$(echo "$pids" |cut -f 1 -d '|')
+        pids=${pids%|}
         pids=$(egrep "$pids" $tmp_file)
 
         # Calculating CPU usage
@@ -103,7 +130,22 @@ get_srv_state() {
 
         # Searching pid file
         pid_file=''
-        if [ -e "/var/run/$srv.pid" ]; then
+        if [ ! -z "$procfolder" ]; then
+            if [ -f "/var/run/$procfolder/$srv.pid" ]; then
+                pid_file="/var/run/$procfolder/$srv.pid"
+            fi
+        fi
+        if [ -z "$pid_file" ] && [ ! -z "$procfolder" ] && [ ! -z "$procfile" ]; then
+            if [ -f "/var/run/$procfolder/$procfile.pid" ]; then
+                pid_file="/var/run/$procfolder/$procfile.pid"
+            fi
+        fi
+        if [ -z "$pid_file" ] && [ -z "$procfolder" ] && [ ! -z "$procfile" ]; then
+            if [ -f "/var/run/$procfile.pid" ]; then
+                pid_file="/var/run/$procfile.pid"
+            fi
+        fi
+        if [ -z "$pid_file" ] && [ -e "/var/run/$srv.pid" ]; then
             pid_file="/var/run/$srv.pid"
         fi
         if [ -z "$pid_file" ] && [ -e "/var/run/$srv/$srv.pid" ]; then
@@ -112,18 +154,31 @@ get_srv_state() {
         if [ -z "$pid_file" ] && [ -e "/var/run/$name/$name.pid" ]; then
             pid_file="/var/run/$name/$name.pid"
         fi
+        if [ -z "$pid_file" ] && [ -f "/var/run/$name.pid" ]; then
+            pid_file="/var/run/$name.pid"
+        fi
         if [ -z "$pid_file" ] && [ -e "/proc/$pid" ]; then
             pid_file="/proc/$pid"
         fi
 
+        if [ $debug -eq 1 ]; then
+            echo "$srv = $name = $pid_file"
+        fi
         # Calculating uptime
-        if [ ! -z "$pid_file" ]; then
+        if [ -n "$pid_file" ]; then
             mtime=$(stat -c "%Y" $pid_file)
             rtime=$((ctime - mtime))
             rtime=$((rtime  / 60))
         else
             rtime=0
         fi
+        if [ "$pid_file" = "/proc/$pid" ]; then
+            if [ $debug -eq 1 ]; then
+                echo "getting pid lifetime via ps"
+            fi            
+            rtime=$(ps -p 2877633 -o etimes | tail -n 1 | awk '{print $1}')
+            rtime=$((rtime  / 60))
+        fi
     else
         state='stopped'
         mem=0
@@ -151,14 +206,6 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB_SYSTEM" != 'remote' ]; then
     data="$data MEM='$mem' RTIME='$rtime'"
 fi
 
-# Checking WEB Backend
-if [ ! -z "$WEB_BACKEND" ] && [ "$WEB_BACKEND" != 'remote' ]; then
-    proc_name=$(ls /usr/sbin/php*fpm* | rev | cut -d'/' -f 1 | rev)
-    get_srv_state $proc_name
-    data="$data\nNAME='$WEB_BACKEND' SYSTEM='backend server' STATE='$state'"
-    data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
-fi
-
 # Checking WEB Proxy
 if [ ! -z "$PROXY_SYSTEM" ] && [ "$PROXY_SYSTEM" != 'remote' ]; then
     get_srv_state $PROXY_SYSTEM
@@ -166,6 +213,18 @@ if [ ! -z "$PROXY_SYSTEM" ] && [ "$PROXY_SYSTEM" != 'remote' ]; then
     data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
 fi
 
+# Checking WEB Backend
+if [ "$WEB_BACKEND" != 'remote' ]; then
+    php_versions=$(ls /usr/sbin/php*fpm* | cut -d'/' -f4 | sed 's|php-fpm||')
+    for version in $php_versions; do
+        proc_name="php-fpm${version}"
+        service_name="php${version}-fpm"
+        get_srv_state "$service_name" "$proc_name" '' 'php'
+        data="$data\nNAME='$service_name' SYSTEM='backend server' STATE='$state'"
+        data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
+    done
+fi
+
 # DNS
 service=$DNS_SYSTEM
 if [ ! -z "$service" ] && [ "$service" != 'remote' ]; then
@@ -177,14 +236,22 @@ fi
 
 # Checking MAIL system
 if [ ! -z "$MAIL_SYSTEM" ] && [ "$MAIL_SYSTEM" != 'remote' ]; then
-    get_srv_state $MAIL_SYSTEM
+    if [ "$MAIL_SYSTEM" = "exim4" ]; then
+        get_srv_state "$MAIL_SYSTEM" "$MAIL_SYSTEM" '' 'exim4' 'exim'
+    else
+        get_srv_state $MAIL_SYSTEM
+    fi
     data="$data\nNAME='$MAIL_SYSTEM' SYSTEM='mail server' STATE='$state'"
     data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
 fi
 
 # Checking MAIL IMAP
 if [ ! -z "$IMAP_SYSTEM" ] && [ "$IMAP_SYSTEM" != 'remote' ]; then
-    get_srv_state $IMAP_SYSTEM
+    if [ "$IMAP_SYSTEM" = "dovecot" ]; then
+        get_srv_state "$IMAP_SYSTEM" "$IMAP_SYSTEM" '' 'dovecot' 'master'
+    else
+        get_srv_state $IMAP_SYSTEM
+    fi
     data="$data\nNAME='$IMAP_SYSTEM' SYSTEM='pop/imap server' STATE='$state'"
     data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
 fi
@@ -200,11 +267,19 @@ if [ ! -z "$ANTIVIRUS_SYSTEM" ] && [ "$ANTIVIRUS_SYSTEM" != 'remote' ]; then
         if [ "$ANTIVIRUS_SYSTEM" == 'clamav-daemon' ];then
             proc_name='clamd'
         fi
-        get_srv_state $ANTIVIRUS_SYSTEM $proc_name
+        get_srv_state $ANTIVIRUS_SYSTEM $proc_name '' 'clamav' 'clamd'
     fi
     data="$data\nNAME='$ANTIVIRUS_SYSTEM' SYSTEM='email antivirus'"
     data="$data STATE='$state' CPU='$cpu' MEM='$mem' RTIME='$rtime'"
     proc_name=''
+    if [ ! -d "/etc/sysconfig" ]; then
+        if [ "$ANTIVIRUS_SYSTEM" == 'clamav-daemon' ];then
+            get_srv_state "clamav-freshclam" "freshclam"
+            data="$data\nNAME='clamav-freshclam' SYSTEM='email antivirus updater'"
+            data="$data STATE='$state' CPU='$cpu' MEM='$mem' RTIME='$rtime'"
+            proc_name=''
+        fi
+    fi
 fi
 
 # Checking MAIL ANTISPAM
@@ -220,6 +295,7 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB_SYSTEM" != 'remote' ]; then
         proc_name=''
         service="$db"
         if [ "$service" = 'mysql' ]; then
+            proc_name='mysqld'
             release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
             if [ "$release" -eq 11 ]; then
                 service='mariadb'
@@ -243,7 +319,7 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB_SYSTEM" != 'remote' ]; then
                 proc_name='postgres'
             fi
         fi
-        get_srv_state $service $proc_name
+        get_srv_state $service $proc_name '' 'mysqld' 'mysqld'
         data="$data\nNAME='$service' SYSTEM='database server' STATE='$state'"
         data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
         proc_name=''
@@ -259,11 +335,28 @@ fi
 
 # Checking CRON system
 if [ ! -z "$CRON_SYSTEM" ] && [ "$CRON_SYSTEM" != 'remote' ]; then
-    get_srv_state $CRON_SYSTEM
+    get_srv_state "$CRON_SYSTEM" "$CRON_SYSTEM" '' '' 'crond'
     data="$data\nNAME='$CRON_SYSTEM' SYSTEM='job scheduler' STATE='$state'"
     data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
 fi
 
+# Checking SSH daemon
+if [ -e "/etc/ssh/sshd_config" ]; then
+    get_srv_state 'ssh' 'ssh' '' '' 'sshd'
+    data="$data\nNAME='ssh' SYSTEM='SSH Access' STATE='$state'"
+    data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
+fi
+
+# Checking Vesta nginx
+get_srv_state 'vesta' 'vesta-nginx' '' '' 'vesta-nginx'
+data="$data\nNAME='vesta-nginx' SYSTEM='Vesta nginx service' STATE='$state'"
+data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
+
+# Checking Vesta php-fpm
+get_srv_state 'vesta' 'vesta-php' '' '' 'vesta-php'
+data="$data\nNAME='vesta-php' SYSTEM='Vesta php service' STATE='$state'"
+data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
+
 # Checking FIREWALL system
 if [ ! -z "$FIREWALL_SYSTEM" ] && [ "$FIREWALL_SYSTEM" != 'remote' ]; then
     state="stopped"
@@ -277,11 +370,26 @@ fi
 
 # Checking FIREWALL Fail2ban extention
 if [ ! -z "$FIREWALL_EXTENSION" ]; then
-    get_srv_state $FIREWALL_EXTENSION fail2ban-server script
+    get_srv_state "$FIREWALL_EXTENSION" 'fail2ban-server' 'script'
     data="$data\nNAME='$FIREWALL_EXTENSION' SYSTEM='brute-force monitor'"
     data="$data STATE='$state' CPU='$cpu' MEM='$mem' RTIME='$rtime'"
 fi
 
+# Checking ElasticSearch
+if [ -d "/etc/elasticsearch" ]; then
+    get_srv_state 'elasticsearch'
+    data="$data\nNAME='elasticsearch' SYSTEM='ElasticSearch' STATE='$state'"
+    data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
+fi
+
+# Checking Redis
+if [ -d "/etc/redis" ]; then
+    get_srv_state 'redis' 'redis-server' '' 'redis' 'redis-server'
+    data="$data\nNAME='redis' SYSTEM='Redis' STATE='$state'"
+    data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
+fi
+
+
 # Listing data
 case $format in
     json)   json_list ;;
diff --git a/web/templates/admin/list_services.html b/web/templates/admin/list_services.html
index 6012d2a3..45d6b18a 100644
--- a/web/templates/admin/list_services.html
+++ b/web/templates/admin/list_services.html
@@ -121,7 +121,11 @@
             $status = 'suspended';
             $action = 'start';
           }
-
+          
+          $realservice=$key;
+          if ($realservice=="vesta-php") $realservice="vesta";
+          if ($realservice=="vesta-nginx") $realservice="vesta";
+          
           $cpu = $data[$key]['CPU'] / 10;
           $cpu = number_format($cpu, 1);
           if ($cpu == '0.0')  $cpu = 0;
@@ -137,9 +141,9 @@
           <!-- l-unit-toolbar__col -->
           <div class="l-unit-toolbar__col l-unit-toolbar__col--right noselect">
             <div class="actions-panel clearfix">
-              <div class="actions-panel__col actions-panel__configure shortcut-enter" key-action="href"><a href="/edit/server/<? echo $key ?>/"><?=__('configure')?> <i></i></a><span class="shortcut enter">&nbsp;&#8629;</span></div>
-              <div class="actions-panel__col actions-panel__<?=$action?> shortcut-s" key-action="href"><a href="/<?php echo $action ?>/service/?srv=<?=$key?>&token=<?=$_SESSION['token']?>"><?=__($action)?> <i></i></a><span class="shortcut">&nbsp;S</span></div>
-              <div class="actions-panel__col actions-panel__restart shortcut-r" key-action="href"><a href="/restart/service/?srv=<?=$key?>&token=<?=$_SESSION['token']?>"><?=__('restart')?> <i></i></a><span class="shortcut">&nbsp;R</span></div>
+              <div class="actions-panel__col actions-panel__configure shortcut-enter" key-action="href"><a href="/edit/server/<? echo $realservice ?>/"><?=__('configure')?> <i></i></a><span class="shortcut enter">&nbsp;&#8629;</span></div>
+              <div class="actions-panel__col actions-panel__<?=$action?> shortcut-s" key-action="href"><a href="/<?php echo $action ?>/service/?srv=<?=$realservice?>&token=<?=$_SESSION['token']?>"><?=__($action)?> <i></i></a><span class="shortcut">&nbsp;S</span></div>
+              <div class="actions-panel__col actions-panel__restart shortcut-r" key-action="href"><a href="/restart/service/?srv=<?=$realservice?>&token=<?=$_SESSION['token']?>"><?=__('restart')?> <i></i></a><span class="shortcut">&nbsp;R</span></div>
             </div>
             <!-- /.actions-panel -->
           </div>

From d9202d91b9a0d334db272b738f2996f38fb1a6d9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Nov 2021 20:01:21 +0100
Subject: [PATCH 1624/2300] Avoid clamav fixes if clamav is disabled

---
 src/deb/vesta/postinst | 119 +++++++++++++++++++++--------------------
 1 file changed, 61 insertions(+), 58 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 8649087b..c9b9732c 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -141,48 +141,68 @@ if [ "$check_cron" -eq 0 ]; then
     crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
 fi
 
-# make sure clamav-daemon.service has mkdir fix
-if [ -f "/lib/systemd/system/clamav-daemon.service" ]; then
-    check_grep=$(grep -c 'mkdir' /lib/systemd/system/clamav-daemon.service)
-    if [ "$check_grep" -eq 0 ]; then
-        echo "=== patching clamav-daemon.service"
-        exec_pre1='ExecStartPre=-/bin/mkdir -p /var/run/clamav'
-        exec_pre2='ExecStartPre=-/bin/chown -R clamav:clamav /var/run/clamav'
-        sed -i "s|\[Service\]|[Service]\n$exec_pre1\n$exec_pre2|g" /lib/systemd/system/clamav-daemon.service
-        systemctl daemon-reload
-        systemctl restart clamav-daemon
-        systemctl restart clamav-freshclam
-    fi
-fi
-
-# reverting to default clamd sock
-if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v3" ]; then
-    touch /usr/local/vesta/data/upgrades/change-clamav-socket-v3
-    if [ -f "/etc/clamav/clamd.conf" ]; then
-        sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/clamav/clamd.conf
-        if [ -f "/etc/exim4/exim4.conf.template" ]; then
-            sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/exim4/exim4.conf.template
-        fi
-        if [ -f "/lib/systemd/system/clamav-daemon.socket" ]; then
-            sed -i "s#/var/lib/clamav/clamd.sock#/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
-        fi
-        systemctl daemon-reload
-        systemctl restart clamav-daemon
-        systemctl restart clamav-freshclam
-        if [ -f "/etc/exim4/exim4.conf.template" ]; then
-            systemctl restart exim4
-        fi
-    fi
-fi
-
-# reverting to default clamd sock
-if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v4" ]; then
-    touch /usr/local/vesta/data/upgrades/change-clamav-socket-v4
-    if [ -f "/etc/clamav/clamd.conf" ]; then
-        check_grep=$(grep -c '/var/lib/clamav/clamd.ctl' /etc/clamav/clamd.conf)
-        if [ "$check_grep" -eq 1 ]; then
-            sed -i "s#/var/lib/clamav/clamd.ctl#/var/run/clamav/clamd.ctl#g" /etc/clamav/clamd.conf
+unit_files="$(systemctl list-unit-files | grep clamav-daemon)"
+if [[ ! "$unit_files" =~ "disabled" ]]; then
+    # make sure clamav-daemon.service has mkdir fix
+    if [ -f "/lib/systemd/system/clamav-daemon.service" ]; then
+        check_grep=$(grep -c 'mkdir' /lib/systemd/system/clamav-daemon.service)
+        if [ "$check_grep" -eq 0 ]; then
+            echo "=== patching clamav-daemon.service"
+            exec_pre1='ExecStartPre=-/bin/mkdir -p /var/run/clamav'
+            exec_pre2='ExecStartPre=-/bin/chown -R clamav:clamav /var/run/clamav'
+            sed -i "s|\[Service\]|[Service]\n$exec_pre1\n$exec_pre2|g" /lib/systemd/system/clamav-daemon.service
+            systemctl daemon-reload
             systemctl restart clamav-daemon
+            systemctl restart clamav-freshclam
+        fi
+    fi
+
+    # reverting to default clamd sock
+    if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v3" ]; then
+        touch /usr/local/vesta/data/upgrades/change-clamav-socket-v3
+        if [ -f "/etc/clamav/clamd.conf" ]; then
+            sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/clamav/clamd.conf
+            if [ -f "/etc/exim4/exim4.conf.template" ]; then
+                sed -i "s#/var/lib/clamav/clamd.sock#/var/run/clamav/clamd.ctl#g" /etc/exim4/exim4.conf.template
+            fi
+            if [ -f "/lib/systemd/system/clamav-daemon.socket" ]; then
+                sed -i "s#/var/lib/clamav/clamd.sock#/run/clamav/clamd.ctl#g" /lib/systemd/system/clamav-daemon.socket
+            fi
+            systemctl daemon-reload
+            systemctl restart clamav-daemon
+            systemctl restart clamav-freshclam
+            if [ -f "/etc/exim4/exim4.conf.template" ]; then
+                systemctl restart exim4
+            fi
+        fi
+    fi
+
+    # reverting to default clamd sock
+    if [ ! -f "/usr/local/vesta/data/upgrades/change-clamav-socket-v4" ]; then
+        touch /usr/local/vesta/data/upgrades/change-clamav-socket-v4
+        if [ -f "/etc/clamav/clamd.conf" ]; then
+            check_grep=$(grep -c '/var/lib/clamav/clamd.ctl' /etc/clamav/clamd.conf)
+            if [ "$check_grep" -eq 1 ]; then
+                sed -i "s#/var/lib/clamav/clamd.ctl#/var/run/clamav/clamd.ctl#g" /etc/clamav/clamd.conf
+                systemctl restart clamav-daemon
+            fi
+        fi
+    fi
+
+    # Block executable files inside zip/rar/tar archives in ClamAV
+    if [ ! -f "/usr/local/vesta/data/upgrades/clamav_block_exe_in_archives" ]; then
+        touch /usr/local/vesta/data/upgrades/clamav_block_exe_in_archives
+        if [ -f "/etc/exim4/exim4.conf.template" ]; then
+            check_grep=$(grep -c '#CLAMD' /etc/exim4/exim4.conf.template)
+            if [ "$check_grep" -eq 0 ]; then
+                folder="/var/lib/clamav"
+                if [ -d "$folder" ]; then
+                    echo "=== Blocking executable files inside zip/rar/tar archives in ClamAV"
+                    wget -nv -O $folder/foxhole_all.cdb http://c.myvestacp.com/tools/clamav/foxhole_all.cdb
+                    chown clamav:clamav $folder/foxhole_all.cdb
+                    service clamav-daemon restart
+                fi
+            fi
         fi
     fi
 fi
@@ -204,23 +224,6 @@ if [ "$release" -eq 9 ] || [ "$release" -eq 10 ]; then
     fi
 fi
 
-# Block executable files inside zip/rar/tar archives in ClamAV
-if [ ! -f "/usr/local/vesta/data/upgrades/clamav_block_exe_in_archives" ]; then
-    touch /usr/local/vesta/data/upgrades/clamav_block_exe_in_archives
-    if [ -f "/etc/exim4/exim4.conf.template" ]; then
-        check_grep=$(grep -c '#CLAMD' /etc/exim4/exim4.conf.template)
-        if [ "$check_grep" -eq 0 ]; then
-            folder="/var/lib/clamav"
-            if [ -d "$folder" ]; then
-                echo "=== Blocking executable files inside zip/rar/tar archives in ClamAV"
-                wget -nv -O $folder/foxhole_all.cdb http://c.myvestacp.com/tools/clamav/foxhole_all.cdb
-                chown clamav:clamav $folder/foxhole_all.cdb
-                service clamav-daemon restart
-            fi
-        fi
-    fi
-fi
-
 # Clearing letsencrypt pipe
 if [ ! -f "/usr/local/vesta/data/upgrades/clearing-letsencrypt-pipe" ]; then
     touch /usr/local/vesta/data/upgrades/clearing-letsencrypt-pipe

From b42d607ad141e2f82088a2ba629b508cdb812f39 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Nov 2021 20:05:49 +0100
Subject: [PATCH 1625/2300] Version 0.9.8-26-51

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 53712deb..af812423 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-50
+vesta-0.9.8-26-51

From a7d96a479bfb039b01a75f1845c568e7f9d65fbc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Nov 2021 20:16:27 +0100
Subject: [PATCH 1626/2300] Fixes only if ClamAV is enabled

---
 src/deb/vesta/postinst | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index c9b9732c..d06501bd 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -141,8 +141,9 @@ if [ "$check_cron" -eq 0 ]; then
     crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
 fi
 
-unit_files="$(systemctl list-unit-files | grep clamav-daemon)"
-if [[ ! "$unit_files" =~ "disabled" ]]; then
+if [ $(systemctl list-unit-files | grep clamav-daemon | grep -c "disabled") -eq 0 ]; then
+    # Fixes only if ClamAV is enabled
+
     # make sure clamav-daemon.service has mkdir fix
     if [ -f "/lib/systemd/system/clamav-daemon.service" ]; then
         check_grep=$(grep -c 'mkdir' /lib/systemd/system/clamav-daemon.service)

From b62486ddd291382abccf162f2d542942152e613b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Nov 2021 20:20:29 +0100
Subject: [PATCH 1627/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 4ecfde8f..3cf4b126 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-51 [14-Nov-2021]
+==================================================
+* Many fixes for "List services" page (v-list-sys-services function)
+
 Version 0.9.8-26-50 [07-Nov-2021]
 ==================================================
 * Many small bugfixes and CSRF fixes

From de5f28459e7e2d53927f100e6ddc05ffc517d4ad Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 14 Nov 2021 21:11:34 +0100
Subject: [PATCH 1628/2300] $pid fix in v-list-sys-services

---
 bin/v-list-sys-services | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-list-sys-services b/bin/v-list-sys-services
index 71133ac4..2b7e7890 100755
--- a/bin/v-list-sys-services
+++ b/bin/v-list-sys-services
@@ -176,7 +176,7 @@ get_srv_state() {
             if [ $debug -eq 1 ]; then
                 echo "getting pid lifetime via ps"
             fi            
-            rtime=$(ps -p 2877633 -o etimes | tail -n 1 | awk '{print $1}')
+            rtime=$(ps -p $pid -o etimes | tail -n 1 | awk '{print $1}')
             rtime=$((rtime  / 60))
         fi
     else

From 8f6fe21dbf10e03705f649bd0e1538698e37cafc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 17 Nov 2021 15:15:23 +0100
Subject: [PATCH 1629/2300] Dont match wildcardly *domains and databases* while
 restoring

---
 bin/v-restore-user | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index e9861d46..af451d88 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -476,7 +476,7 @@ if [ "$dns" != 'no' ] && [ ! -z "$DNS_SYSTEM" ]; then
     if [ -z "$dns" ] || [ "$dns" = '*' ]; then
         domains="$backup_domains"
     else
-        echo "$dns" |tr ',' '\n' > $tmpdir/selected.txt
+        echo "$dns" | tr ',' '\n' | sed -e "s/^/^/" > $tmpdir/selected.txt
         domains=$(echo "$backup_domains" |egrep -f $tmpdir/selected.txt)
     fi
 
@@ -556,7 +556,7 @@ if [ "$mail" != 'no' ] && [ ! -z "$MAIL_SYSTEM" ]; then
     if [ -z "$mail" ] || [ "$mail" = '*' ]; then
         domains="$backup_domains"
     else
-        echo "$mail" |tr ',' '\n' > $tmpdir/selected.txt
+        echo "$mail" | tr ',' '\n' | sed -e "s/^/^/" > $tmpdir/selected.txt
         domains=$(echo "$backup_domains" |egrep -f $tmpdir/selected.txt)
     fi
 
@@ -653,7 +653,7 @@ if [ "$db" != 'no' ] && [ ! -z "$DB_SYSTEM" ]; then
     if [ -z "$db" ] || [ "$db" = '*' ]; then
         databases="$backup_databases"
     else
-        echo "$db" |tr ',' '\n' > $tmpdir/selected.txt
+        echo "$db" |tr ',' '\n' | sed -e "s/$/$/" > $tmpdir/selected.txt
         databases=$(echo "$backup_databases" |egrep -f $tmpdir/selected.txt)
     fi
 

From d36f1a355b3bcb1d37f6a9015b9c81c245f320e6 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Fri, 19 Nov 2021 21:28:19 +0300
Subject: [PATCH 1630/2300] Small improvmemts for login form

---
 web/css/styles.min.css | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/css/styles.min.css b/web/css/styles.min.css
index 302f9c01..edc706d5 100644
--- a/web/css/styles.min.css
+++ b/web/css/styles.min.css
@@ -2917,7 +2917,7 @@ a.button.cancel {
   padding: 0;
   text-align: left;
   vertical-align: top;
-  width: 500px;
+  width: 550px;
 }
 
 .login a.error {
@@ -2940,7 +2940,7 @@ a.button.cancel {
   padding: 0 26px 0 0;
   text-align: right;
   vertical-align: top;
-  width: 474px;
+  width: 520px;
 }
 
 .l-unit.selected {

From 47f2ca1d378668ac4882e360ccacbbb172fe8005 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Fri, 19 Nov 2021 21:29:42 +0300
Subject: [PATCH 1631/2300] Small improvmemts for login form

---
 web/templates/login.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/login.html b/web/templates/login.html
index 47e004de..1fd923fb 100644
--- a/web/templates/login.html
+++ b/web/templates/login.html
@@ -7,7 +7,7 @@
                                 <td style="padding: 0 10px 0 42px; height: 280px; width: 170px;">
                                     <a href="/"><img border=0 src="/images/vesta_logo.png" alt="Vesta Control Panel" style="margin: 0 0 0 0;" /></a>
                                 </td>
-                                <td style="padding: 20px 0 0 0;">
+                                <td style="padding: 50px 0 0 0;">
                                     <form method="post" action="/login/" >
                                     <input type="hidden" name="token" value="<?php echo $_SESSION['token']; ?>">
                                     <table class="login-box">

From a30d8b8233b78106b9ec7fa79943383550032e99 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 21 Nov 2021 13:41:48 +0100
Subject: [PATCH 1632/2300] Update v-normalize-restored-user

---
 bin/v-normalize-restored-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-normalize-restored-user b/bin/v-normalize-restored-user
index 86e1f0b8..5da14543 100644
--- a/bin/v-normalize-restored-user
+++ b/bin/v-normalize-restored-user
@@ -45,7 +45,7 @@ NEWNS2=${arrNS[1]}
 
 for domain in $(/usr/local/vesta/bin/v-list-web-domains $user plain |cut -f 1); do
     if [ -f "/usr/local/vesta/data/users/$user/dns/$domain.conf" ]; then
-        NEWIPV4=$(v-list-dns-domain "$user" "$domain" | grep 'IP:' | awk '{print $2}')
+        NEWIPV4=$(/usr/local/vesta/bin/v-list-dns-domain "$user" "$domain" | grep 'IP:' | awk '{print $2}')
         res=$(grep "'www'" /usr/local/vesta/data/users/$user/dns/$domain.conf)
         eval $res
         OLDIPV4=$VALUE

From dba6c79f71983d45610860ed896ae215c19602be Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 21 Nov 2021 13:43:01 +0100
Subject: [PATCH 1633/2300] Update v-normalize-restored-user

---
 bin/v-normalize-restored-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-normalize-restored-user b/bin/v-normalize-restored-user
index 5da14543..91ef29c9 100644
--- a/bin/v-normalize-restored-user
+++ b/bin/v-normalize-restored-user
@@ -79,7 +79,7 @@ sed -i "s#$OLDIPV4#$NEWIPV4#g" /usr/local/vesta/data/users/$user/dns.conf
 sed -i "s#$OLDNS1#$NEWNS1#g" /usr/local/vesta/data/users/$user/dns.conf
 sed -i "s#$OLDNS1#$NEWNS1#g" /usr/local/vesta/data/users/$user/user.conf
 sed -i "s#$OLDNS2#$NEWNS2#g" /usr/local/vesta/data/users/$user/user.conf
-service bind9 reload
+systemctl reload bind9
 
 echo "Done!"
 

From fb0e127adfe42f5f2f6a8204b3890a0abfd21604 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 23 Nov 2021 13:33:34 +0100
Subject: [PATCH 1634/2300] Added memcached to v-list-sys-services

---
 bin/v-list-sys-services | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/bin/v-list-sys-services b/bin/v-list-sys-services
index 2b7e7890..b7a9f351 100755
--- a/bin/v-list-sys-services
+++ b/bin/v-list-sys-services
@@ -389,6 +389,13 @@ if [ -d "/etc/redis" ]; then
     data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
 fi
 
+# Checking Memcached
+if [ -f "/etc/memcached.conf" ]; then
+    get_srv_state 'memcached'
+    data="$data\nNAME='memcached' SYSTEM='Memcached' STATE='$state'"
+    data="$data CPU='$cpu' MEM='$mem' RTIME='$rtime'"
+fi
+
 
 # Listing data
 case $format in

From 706fe4a5e7fc83ee5d1b6758b50b334ff6e31fcc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 23 Nov 2021 13:37:32 +0100
Subject: [PATCH 1635/2300] Update Changelog.md

---
 Changelog.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 3cf4b126..9e9a1390 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,8 @@
+Version 0.9.8-26-52 [23-Nov-2021]
+==================================================
+* Fix for not to match wildcard "*domains" and "databases*" while restoring
+* Added memcached to v-list-sys-services
+
 Version 0.9.8-26-51 [14-Nov-2021]
 ==================================================
 * Many fixes for "List services" page (v-list-sys-services function)

From cf4f5af280f820b9fc36009374f7a530ce57445a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 23 Nov 2021 13:38:12 +0100
Subject: [PATCH 1636/2300] Update latest.txt

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index af812423..e61c21d3 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-51
+vesta-0.9.8-26-52

From 591bd21615b67b7ebe049afe51555421556c85aa Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 16:24:23 +0100
Subject: [PATCH 1637/2300] default pool.d www.conf files

---
 .../tools/default-pool.d/5.6/www.conf         | 417 ++++++++++++++++
 .../tools/default-pool.d/7.0/www.conf         | 420 ++++++++++++++++
 .../tools/default-pool.d/7.1/www.conf         | 420 ++++++++++++++++
 .../tools/default-pool.d/7.3/www.conf         | 439 +++++++++++++++++
 .../tools/default-pool.d/7.4/www.conf         | 439 +++++++++++++++++
 .../tools/default-pool.d/8.0/www.conf         | 455 +++++++++++++++++
 .../tools/default-pool.d/8.1/www.conf         | 463 ++++++++++++++++++
 7 files changed, 3053 insertions(+)
 create mode 100644 src/deb/for-download/tools/default-pool.d/5.6/www.conf
 create mode 100644 src/deb/for-download/tools/default-pool.d/7.0/www.conf
 create mode 100644 src/deb/for-download/tools/default-pool.d/7.1/www.conf
 create mode 100644 src/deb/for-download/tools/default-pool.d/7.3/www.conf
 create mode 100644 src/deb/for-download/tools/default-pool.d/7.4/www.conf
 create mode 100644 src/deb/for-download/tools/default-pool.d/8.0/www.conf
 create mode 100644 src/deb/for-download/tools/default-pool.d/8.1/www.conf

diff --git a/src/deb/for-download/tools/default-pool.d/5.6/www.conf b/src/deb/for-download/tools/default-pool.d/5.6/www.conf
new file mode 100644
index 00000000..6bc161d0
--- /dev/null
+++ b/src/deb/for-download/tools/default-pool.d/5.6/www.conf
@@ -0,0 +1,417 @@
+; Start a new pool named 'www'.
+; the variable $pool can we used in any directive and will be replaced by the
+; pool name ('www' here)
+[www]
+
+; Per pool prefix
+; It only applies on the following directives:
+; - 'access.log'
+; - 'slowlog'
+; - 'listen' (unixsocket)
+; - 'chroot'
+; - 'chdir'
+; - 'php_values'
+; - 'php_admin_values'
+; When not set, the global prefix (or /usr) applies instead.
+; Note: This directive can also be relative to the global prefix.
+; Default Value: none
+;prefix = /path/to/pools/$pool
+
+; Unix user/group of processes
+; Note: The user is mandatory. If the group is not set, the default user's group
+;       will be used.
+user = www-data
+group = www-data
+
+; The address on which to accept FastCGI requests.
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all IPv4 addresses on a
+;                            specific port;
+;   '[::]:port'            - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Note: This value is mandatory.
+listen = /run/php/php5.6-fpm.sock
+
+; Set listen(2) backlog.
+; Default Value: 65535 (-1 on FreeBSD and OpenBSD)
+;listen.backlog = 65535
+
+; Set permissions for unix socket, if one is used. In Linux, read/write
+; permissions must be set in order to allow connections from a web server. Many
+; BSD-derived systems allow connections regardless of permissions. 
+; Default Values: user and group are set as the running user
+;                 mode is set to 0660
+listen.owner = www-data
+listen.group = www-data
+;listen.mode = 0660
+; When POSIX Access Control Lists are supported you can set them using
+; these options, value is a comma separated list of user/group names.
+; When set, listen.owner and listen.group are ignored
+;listen.acl_users =
+;listen.acl_groups =
+ 
+; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
+; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
+; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
+; must be separated by a comma. If this value is left blank, connections will be
+; accepted from any ip address.
+; Default Value: any
+;listen.allowed_clients = 127.0.0.1
+
+; Specify the nice(2) priority to apply to the pool processes (only if set)
+; The value can vary from -19 (highest priority) to 20 (lower priority)
+; Note: - It will only work if the FPM master process is launched as root
+;       - The pool processes will inherit the master process priority
+;         unless it specified otherwise
+; Default Value: no set
+; process.priority = -19
+
+; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user
+; or group is differrent than the master process user. It allows to create process
+; core dump and ptrace the process for the pool user.
+; Default Value: no
+; process.dumpable = yes
+
+; Choose how the process manager will control the number of child processes.
+; Possible Values:
+;   static  - a fixed number (pm.max_children) of child processes;
+;   dynamic - the number of child processes are set dynamically based on the
+;             following directives. With this process management, there will be
+;             always at least 1 children.
+;             pm.max_children      - the maximum number of children that can
+;                                    be alive at the same time.
+;             pm.start_servers     - the number of children created on startup.
+;             pm.min_spare_servers - the minimum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is less than this
+;                                    number then some children will be created.
+;             pm.max_spare_servers - the maximum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is greater than this
+;                                    number then some children will be killed.
+;  ondemand - no children are created at startup. Children will be forked when
+;             new requests will connect. The following parameter are used:
+;             pm.max_children           - the maximum number of children that
+;                                         can be alive at the same time.
+;             pm.process_idle_timeout   - The number of seconds after which
+;                                         an idle process will be killed.
+; Note: This value is mandatory.
+pm = dynamic
+
+; The number of child processes to be created when pm is set to 'static' and the
+; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
+; This value sets the limit on the number of simultaneous requests that will be
+; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
+; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
+; CGI. The below defaults are based on a server without much resources. Don't
+; forget to tweak pm.* to fit your needs.
+; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
+; Note: This value is mandatory.
+pm.max_children = 5
+
+; The number of child processes created on startup.
+; Note: Used only when pm is set to 'dynamic'
+; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2
+pm.start_servers = 2
+
+; The desired minimum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.min_spare_servers = 1
+
+; The desired maximum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.max_spare_servers = 3
+
+; The number of seconds after which an idle process will be killed.
+; Note: Used only when pm is set to 'ondemand'
+; Default Value: 10s
+;pm.process_idle_timeout = 10s;
+ 
+; The number of requests each child process should execute before respawning.
+; This can be useful to work around memory leaks in 3rd party libraries. For
+; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
+; Default Value: 0
+;pm.max_requests = 500
+
+; The URI to view the FPM status page. If this value is not set, no URI will be
+; recognized as a status page. It shows the following informations:
+;   pool                 - the name of the pool;
+;   process manager      - static, dynamic or ondemand;
+;   start time           - the date and time FPM has started;
+;   start since          - number of seconds since FPM has started;
+;   accepted conn        - the number of request accepted by the pool;
+;   listen queue         - the number of request in the queue of pending
+;                          connections (see backlog in listen(2));
+;   max listen queue     - the maximum number of requests in the queue
+;                          of pending connections since FPM has started;
+;   listen queue len     - the size of the socket queue of pending connections;
+;   idle processes       - the number of idle processes;
+;   active processes     - the number of active processes;
+;   total processes      - the number of idle + active processes;
+;   max active processes - the maximum number of active processes since FPM
+;                          has started;
+;   max children reached - number of times, the process limit has been reached,
+;                          when pm tries to start more children (works only for
+;                          pm 'dynamic' and 'ondemand');
+; Value are updated in real time.
+; Example output:
+;   pool:                 www
+;   process manager:      static
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          62636
+;   accepted conn:        190460
+;   listen queue:         0
+;   max listen queue:     1
+;   listen queue len:     42
+;   idle processes:       4
+;   active processes:     11
+;   total processes:      15
+;   max active processes: 12
+;   max children reached: 0
+;
+; By default the status page output is formatted as text/plain. Passing either
+; 'html', 'xml' or 'json' in the query string will return the corresponding
+; output syntax. Example:
+;   http://www.foo.bar/status
+;   http://www.foo.bar/status?json
+;   http://www.foo.bar/status?html
+;   http://www.foo.bar/status?xml
+;
+; By default the status page only outputs short status. Passing 'full' in the
+; query string will also return status for each pool process.
+; Example: 
+;   http://www.foo.bar/status?full
+;   http://www.foo.bar/status?json&full
+;   http://www.foo.bar/status?html&full
+;   http://www.foo.bar/status?xml&full
+; The Full status returns for each process:
+;   pid                  - the PID of the process;
+;   state                - the state of the process (Idle, Running, ...);
+;   start time           - the date and time the process has started;
+;   start since          - the number of seconds since the process has started;
+;   requests             - the number of requests the process has served;
+;   request duration     - the duration in µs of the requests;
+;   request method       - the request method (GET, POST, ...);
+;   request URI          - the request URI with the query string;
+;   content length       - the content length of the request (only with POST);
+;   user                 - the user (PHP_AUTH_USER) (or '-' if not set);
+;   script               - the main script called (or '-' if not set);
+;   last request cpu     - the %cpu the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because CPU calculation is done when the request
+;                          processing has terminated;
+;   last request memory  - the max amount of memory the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because memory calculation is done when the request
+;                          processing has terminated;
+; If the process is in Idle state, then informations are related to the
+; last request the process has served. Otherwise informations are related to
+; the current request being served.
+; Example output:
+;   ************************
+;   pid:                  31330
+;   state:                Running
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          63087
+;   requests:             12808
+;   request duration:     1250261
+;   request method:       GET
+;   request URI:          /test_mem.php?N=10000
+;   content length:       0
+;   user:                 -
+;   script:               /home/fat/web/docs/php/test_mem.php
+;   last request cpu:     0.00
+;   last request memory:  0
+;
+; Note: There is a real-time FPM status monitoring sample web page available
+;       It's available in: /usr/share/php/5.6/fpm/status.html
+;
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set 
+;pm.status_path = /status
+ 
+; The ping URI to call the monitoring page of FPM. If this value is not set, no
+; URI will be recognized as a ping page. This could be used to test from outside
+; that FPM is alive and responding, or to
+; - create a graph of FPM availability (rrd or such);
+; - remove a server from a group if it is not responding (load balancing);
+; - trigger alerts for the operating team (24/7).
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;ping.path = /ping
+
+; This directive may be used to customize the response of a ping request. The
+; response is formatted as text/plain with a 200 response code.
+; Default Value: pong
+;ping.response = pong
+
+; The access log file
+; Default: not set
+;access.log = log/$pool.access.log
+
+; The access log format.
+; The following syntax is allowed
+;  %%: the '%' character
+;  %C: %CPU used by the request
+;      it can accept the following format:
+;      - %{user}C for user CPU only
+;      - %{system}C for system CPU only
+;      - %{total}C  for user + system CPU (default)
+;  %d: time taken to serve the request
+;      it can accept the following format:
+;      - %{seconds}d (default)
+;      - %{miliseconds}d
+;      - %{mili}d
+;      - %{microseconds}d
+;      - %{micro}d
+;  %e: an environment variable (same as $_ENV or $_SERVER)
+;      it must be associated with embraces to specify the name of the env
+;      variable. Some exemples:
+;      - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
+;      - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
+;  %f: script filename
+;  %l: content-length of the request (for POST request only)
+;  %m: request method
+;  %M: peak of memory allocated by PHP
+;      it can accept the following format:
+;      - %{bytes}M (default)
+;      - %{kilobytes}M
+;      - %{kilo}M
+;      - %{megabytes}M
+;      - %{mega}M
+;  %n: pool name
+;  %o: output header
+;      it must be associated with embraces to specify the name of the header:
+;      - %{Content-Type}o
+;      - %{X-Powered-By}o
+;      - %{Transfert-Encoding}o
+;      - ....
+;  %p: PID of the child that serviced the request
+;  %P: PID of the parent of the child that serviced the request
+;  %q: the query string 
+;  %Q: the '?' character if query string exists
+;  %r: the request URI (without the query string, see %q and %Q)
+;  %R: remote IP address
+;  %s: status (response code)
+;  %t: server time the request was received
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;  %T: time the log has been written (the request has finished)
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;  %u: remote user
+;
+; Default: "%R - %u %t \"%m %r\" %s"
+;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
+ 
+; The log file for slow requests
+; Default Value: not set
+; Note: slowlog is mandatory if request_slowlog_timeout is set
+;slowlog = log/$pool.log.slow
+ 
+; The timeout for serving a single request after which a PHP backtrace will be
+; dumped to the 'slowlog' file. A value of '0s' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_slowlog_timeout = 0
+ 
+; The timeout for serving a single request after which the worker process will
+; be killed. This option should be used when the 'max_execution_time' ini option
+; does not stop script execution for some reason. A value of '0' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_terminate_timeout = 0
+ 
+; Set open file descriptor rlimit.
+; Default Value: system defined value
+;rlimit_files = 1024
+ 
+; Set max core size rlimit.
+; Possible Values: 'unlimited' or an integer greater or equal to 0
+; Default Value: system defined value
+;rlimit_core = 0
+ 
+; Chroot to this directory at the start. This value must be defined as an
+; absolute path. When this value is not set, chroot is not used.
+; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
+; of its subdirectories. If the pool prefix is not set, the global prefix
+; will be used instead.
+; Note: chrooting is a great security feature and should be used whenever 
+;       possible. However, all PHP paths will be relative to the chroot
+;       (error_log, sessions.save_path, ...).
+; Default Value: not set
+;chroot = 
+ 
+; Chdir to this directory at the start.
+; Note: relative path can be used.
+; Default Value: current directory or / when chroot
+;chdir = /var/www
+ 
+; Redirect worker stdout and stderr into main error log. If not set, stdout and
+; stderr will be redirected to /dev/null according to FastCGI specs.
+; Note: on highloaded environement, this can cause some delay in the page
+; process time (several ms).
+; Default Value: no
+;catch_workers_output = yes
+
+; Clear environment in FPM workers
+; Prevents arbitrary environment variables from reaching FPM worker processes
+; by clearing the environment in workers before env vars specified in this
+; pool configuration are added.
+; Setting to "no" will make all environment variables available to PHP code
+; via getenv(), $_ENV and $_SERVER.
+; Default Value: yes
+;clear_env = no
+
+; Limits the extensions of the main script FPM will allow to parse. This can
+; prevent configuration mistakes on the web server side. You should only limit
+; FPM to .php extensions to prevent malicious users to use other extensions to
+; exectute php code.
+; Note: set an empty value to allow all extensions.
+; Default Value: .php
+;security.limit_extensions = .php .php3 .php4 .php5
+ 
+; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
+; the current environment.
+; Default Value: clean env
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /tmp
+;env[TMPDIR] = /tmp
+;env[TEMP] = /tmp
+
+; Additional php.ini defines, specific to this pool of workers. These settings
+; overwrite the values previously defined in the php.ini. The directives are the
+; same as the PHP SAPI:
+;   php_value/php_flag             - you can set classic ini defines which can
+;                                    be overwritten from PHP call 'ini_set'. 
+;   php_admin_value/php_admin_flag - these directives won't be overwritten by
+;                                     PHP call 'ini_set'
+; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
+
+; Defining 'extension' will load the corresponding shared extension from
+; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
+; overwrite previously defined php.ini values, but will append the new value
+; instead.
+
+; Note: path INI options can be relative and will be expanded with the prefix
+; (pool, global or /usr)
+
+; Default Value: nothing is defined by default except the values in php.ini and
+;                specified at startup with the -d argument
+;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
+;php_flag[display_errors] = off
+;php_admin_value[error_log] = /var/log/fpm-php.www.log
+;php_admin_flag[log_errors] = on
+;php_admin_value[memory_limit] = 32M
diff --git a/src/deb/for-download/tools/default-pool.d/7.0/www.conf b/src/deb/for-download/tools/default-pool.d/7.0/www.conf
new file mode 100644
index 00000000..5eafe960
--- /dev/null
+++ b/src/deb/for-download/tools/default-pool.d/7.0/www.conf
@@ -0,0 +1,420 @@
+; Start a new pool named 'www'.
+; the variable $pool can be used in any directive and will be replaced by the
+; pool name ('www' here)
+[www]
+
+; Per pool prefix
+; It only applies on the following directives:
+; - 'access.log'
+; - 'slowlog'
+; - 'listen' (unixsocket)
+; - 'chroot'
+; - 'chdir'
+; - 'php_values'
+; - 'php_admin_values'
+; When not set, the global prefix (or /usr) applies instead.
+; Note: This directive can also be relative to the global prefix.
+; Default Value: none
+;prefix = /path/to/pools/$pool
+
+; Unix user/group of processes
+; Note: The user is mandatory. If the group is not set, the default user's group
+;       will be used.
+user = www-data
+group = www-data
+
+; The address on which to accept FastCGI requests.
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Note: This value is mandatory.
+listen = /run/php/php7.0-fpm.sock
+
+; Set listen(2) backlog.
+; Default Value: 511 (-1 on FreeBSD and OpenBSD)
+;listen.backlog = 511
+
+; Set permissions for unix socket, if one is used. In Linux, read/write
+; permissions must be set in order to allow connections from a web server. Many
+; BSD-derived systems allow connections regardless of permissions. The owner
+; and group can be specified either by name or by their numeric IDs.
+; Default Values: user and group are set as the running user
+;                 mode is set to 0660
+listen.owner = www-data
+listen.group = www-data
+;listen.mode = 0660
+; When POSIX Access Control Lists are supported you can set them using
+; these options, value is a comma separated list of user/group names.
+; When set, listen.owner and listen.group are ignored
+;listen.acl_users =
+;listen.acl_groups =
+
+; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
+; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
+; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
+; must be separated by a comma. If this value is left blank, connections will be
+; accepted from any ip address.
+; Default Value: any
+;listen.allowed_clients = 127.0.0.1
+
+; Specify the nice(2) priority to apply to the pool processes (only if set)
+; The value can vary from -19 (highest priority) to 20 (lower priority)
+; Note: - It will only work if the FPM master process is launched as root
+;       - The pool processes will inherit the master process priority
+;         unless it specified otherwise
+; Default Value: no set
+; process.priority = -19
+
+; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user
+; or group is differrent than the master process user. It allows to create process
+; core dump and ptrace the process for the pool user.
+; Default Value: no
+; process.dumpable = yes
+
+; Choose how the process manager will control the number of child processes.
+; Possible Values:
+;   static  - a fixed number (pm.max_children) of child processes;
+;   dynamic - the number of child processes are set dynamically based on the
+;             following directives. With this process management, there will be
+;             always at least 1 children.
+;             pm.max_children      - the maximum number of children that can
+;                                    be alive at the same time.
+;             pm.start_servers     - the number of children created on startup.
+;             pm.min_spare_servers - the minimum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is less than this
+;                                    number then some children will be created.
+;             pm.max_spare_servers - the maximum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is greater than this
+;                                    number then some children will be killed.
+;  ondemand - no children are created at startup. Children will be forked when
+;             new requests will connect. The following parameter are used:
+;             pm.max_children           - the maximum number of children that
+;                                         can be alive at the same time.
+;             pm.process_idle_timeout   - The number of seconds after which
+;                                         an idle process will be killed.
+; Note: This value is mandatory.
+pm = dynamic
+
+; The number of child processes to be created when pm is set to 'static' and the
+; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
+; This value sets the limit on the number of simultaneous requests that will be
+; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
+; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
+; CGI. The below defaults are based on a server without much resources. Don't
+; forget to tweak pm.* to fit your needs.
+; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
+; Note: This value is mandatory.
+pm.max_children = 5
+
+; The number of child processes created on startup.
+; Note: Used only when pm is set to 'dynamic'
+; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2
+pm.start_servers = 2
+
+; The desired minimum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.min_spare_servers = 1
+
+; The desired maximum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.max_spare_servers = 3
+
+; The number of seconds after which an idle process will be killed.
+; Note: Used only when pm is set to 'ondemand'
+; Default Value: 10s
+;pm.process_idle_timeout = 10s;
+
+; The number of requests each child process should execute before respawning.
+; This can be useful to work around memory leaks in 3rd party libraries. For
+; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
+; Default Value: 0
+;pm.max_requests = 500
+
+; The URI to view the FPM status page. If this value is not set, no URI will be
+; recognized as a status page. It shows the following informations:
+;   pool                 - the name of the pool;
+;   process manager      - static, dynamic or ondemand;
+;   start time           - the date and time FPM has started;
+;   start since          - number of seconds since FPM has started;
+;   accepted conn        - the number of request accepted by the pool;
+;   listen queue         - the number of request in the queue of pending
+;                          connections (see backlog in listen(2));
+;   max listen queue     - the maximum number of requests in the queue
+;                          of pending connections since FPM has started;
+;   listen queue len     - the size of the socket queue of pending connections;
+;   idle processes       - the number of idle processes;
+;   active processes     - the number of active processes;
+;   total processes      - the number of idle + active processes;
+;   max active processes - the maximum number of active processes since FPM
+;                          has started;
+;   max children reached - number of times, the process limit has been reached,
+;                          when pm tries to start more children (works only for
+;                          pm 'dynamic' and 'ondemand');
+; Value are updated in real time.
+; Example output:
+;   pool:                 www
+;   process manager:      static
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          62636
+;   accepted conn:        190460
+;   listen queue:         0
+;   max listen queue:     1
+;   listen queue len:     42
+;   idle processes:       4
+;   active processes:     11
+;   total processes:      15
+;   max active processes: 12
+;   max children reached: 0
+;
+; By default the status page output is formatted as text/plain. Passing either
+; 'html', 'xml' or 'json' in the query string will return the corresponding
+; output syntax. Example:
+;   http://www.foo.bar/status
+;   http://www.foo.bar/status?json
+;   http://www.foo.bar/status?html
+;   http://www.foo.bar/status?xml
+;
+; By default the status page only outputs short status. Passing 'full' in the
+; query string will also return status for each pool process.
+; Example:
+;   http://www.foo.bar/status?full
+;   http://www.foo.bar/status?json&full
+;   http://www.foo.bar/status?html&full
+;   http://www.foo.bar/status?xml&full
+; The Full status returns for each process:
+;   pid                  - the PID of the process;
+;   state                - the state of the process (Idle, Running, ...);
+;   start time           - the date and time the process has started;
+;   start since          - the number of seconds since the process has started;
+;   requests             - the number of requests the process has served;
+;   request duration     - the duration in µs of the requests;
+;   request method       - the request method (GET, POST, ...);
+;   request URI          - the request URI with the query string;
+;   content length       - the content length of the request (only with POST);
+;   user                 - the user (PHP_AUTH_USER) (or '-' if not set);
+;   script               - the main script called (or '-' if not set);
+;   last request cpu     - the %cpu the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because CPU calculation is done when the request
+;                          processing has terminated;
+;   last request memory  - the max amount of memory the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because memory calculation is done when the request
+;                          processing has terminated;
+; If the process is in Idle state, then informations are related to the
+; last request the process has served. Otherwise informations are related to
+; the current request being served.
+; Example output:
+;   ************************
+;   pid:                  31330
+;   state:                Running
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          63087
+;   requests:             12808
+;   request duration:     1250261
+;   request method:       GET
+;   request URI:          /test_mem.php?N=10000
+;   content length:       0
+;   user:                 -
+;   script:               /home/fat/web/docs/php/test_mem.php
+;   last request cpu:     0.00
+;   last request memory:  0
+;
+; Note: There is a real-time FPM status monitoring sample web page available
+;       It's available in: /usr/share/php/7.0/fpm/status.html
+;
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;pm.status_path = /status
+
+; The ping URI to call the monitoring page of FPM. If this value is not set, no
+; URI will be recognized as a ping page. This could be used to test from outside
+; that FPM is alive and responding, or to
+; - create a graph of FPM availability (rrd or such);
+; - remove a server from a group if it is not responding (load balancing);
+; - trigger alerts for the operating team (24/7).
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;ping.path = /ping
+
+; This directive may be used to customize the response of a ping request. The
+; response is formatted as text/plain with a 200 response code.
+; Default Value: pong
+;ping.response = pong
+
+; The access log file
+; Default: not set
+;access.log = log/$pool.access.log
+
+; The access log format.
+; The following syntax is allowed
+;  %%: the '%' character
+;  %C: %CPU used by the request
+;      it can accept the following format:
+;      - %{user}C for user CPU only
+;      - %{system}C for system CPU only
+;      - %{total}C  for user + system CPU (default)
+;  %d: time taken to serve the request
+;      it can accept the following format:
+;      - %{seconds}d (default)
+;      - %{miliseconds}d
+;      - %{mili}d
+;      - %{microseconds}d
+;      - %{micro}d
+;  %e: an environment variable (same as $_ENV or $_SERVER)
+;      it must be associated with embraces to specify the name of the env
+;      variable. Some exemples:
+;      - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
+;      - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
+;  %f: script filename
+;  %l: content-length of the request (for POST request only)
+;  %m: request method
+;  %M: peak of memory allocated by PHP
+;      it can accept the following format:
+;      - %{bytes}M (default)
+;      - %{kilobytes}M
+;      - %{kilo}M
+;      - %{megabytes}M
+;      - %{mega}M
+;  %n: pool name
+;  %o: output header
+;      it must be associated with embraces to specify the name of the header:
+;      - %{Content-Type}o
+;      - %{X-Powered-By}o
+;      - %{Transfert-Encoding}o
+;      - ....
+;  %p: PID of the child that serviced the request
+;  %P: PID of the parent of the child that serviced the request
+;  %q: the query string
+;  %Q: the '?' character if query string exists
+;  %r: the request URI (without the query string, see %q and %Q)
+;  %R: remote IP address
+;  %s: status (response code)
+;  %t: server time the request was received
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %T: time the log has been written (the request has finished)
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %u: remote user
+;
+; Default: "%R - %u %t \"%m %r\" %s"
+;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
+
+; The log file for slow requests
+; Default Value: not set
+; Note: slowlog is mandatory if request_slowlog_timeout is set
+;slowlog = log/$pool.log.slow
+
+; The timeout for serving a single request after which a PHP backtrace will be
+; dumped to the 'slowlog' file. A value of '0s' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_slowlog_timeout = 0
+
+; The timeout for serving a single request after which the worker process will
+; be killed. This option should be used when the 'max_execution_time' ini option
+; does not stop script execution for some reason. A value of '0' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_terminate_timeout = 0
+
+; Set open file descriptor rlimit.
+; Default Value: system defined value
+;rlimit_files = 1024
+
+; Set max core size rlimit.
+; Possible Values: 'unlimited' or an integer greater or equal to 0
+; Default Value: system defined value
+;rlimit_core = 0
+
+; Chroot to this directory at the start. This value must be defined as an
+; absolute path. When this value is not set, chroot is not used.
+; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
+; of its subdirectories. If the pool prefix is not set, the global prefix
+; will be used instead.
+; Note: chrooting is a great security feature and should be used whenever
+;       possible. However, all PHP paths will be relative to the chroot
+;       (error_log, sessions.save_path, ...).
+; Default Value: not set
+;chroot =
+
+; Chdir to this directory at the start.
+; Note: relative path can be used.
+; Default Value: current directory or / when chroot
+;chdir = /var/www
+
+; Redirect worker stdout and stderr into main error log. If not set, stdout and
+; stderr will be redirected to /dev/null according to FastCGI specs.
+; Note: on highloaded environement, this can cause some delay in the page
+; process time (several ms).
+; Default Value: no
+;catch_workers_output = yes
+
+; Clear environment in FPM workers
+; Prevents arbitrary environment variables from reaching FPM worker processes
+; by clearing the environment in workers before env vars specified in this
+; pool configuration are added.
+; Setting to "no" will make all environment variables available to PHP code
+; via getenv(), $_ENV and $_SERVER.
+; Default Value: yes
+;clear_env = no
+
+; Limits the extensions of the main script FPM will allow to parse. This can
+; prevent configuration mistakes on the web server side. You should only limit
+; FPM to .php extensions to prevent malicious users to use other extensions to
+; execute php code.
+; Note: set an empty value to allow all extensions.
+; Default Value: .php
+;security.limit_extensions = .php .php3 .php4 .php5 .php7
+
+; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
+; the current environment.
+; Default Value: clean env
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /tmp
+;env[TMPDIR] = /tmp
+;env[TEMP] = /tmp
+
+; Additional php.ini defines, specific to this pool of workers. These settings
+; overwrite the values previously defined in the php.ini. The directives are the
+; same as the PHP SAPI:
+;   php_value/php_flag             - you can set classic ini defines which can
+;                                    be overwritten from PHP call 'ini_set'.
+;   php_admin_value/php_admin_flag - these directives won't be overwritten by
+;                                     PHP call 'ini_set'
+; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
+
+; Defining 'extension' will load the corresponding shared extension from
+; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
+; overwrite previously defined php.ini values, but will append the new value
+; instead.
+
+; Note: path INI options can be relative and will be expanded with the prefix
+; (pool, global or /usr)
+
+; Default Value: nothing is defined by default except the values in php.ini and
+;                specified at startup with the -d argument
+;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
+;php_flag[display_errors] = off
+;php_admin_value[error_log] = /var/log/fpm-php.www.log
+;php_admin_flag[log_errors] = on
+;php_admin_value[memory_limit] = 32M
diff --git a/src/deb/for-download/tools/default-pool.d/7.1/www.conf b/src/deb/for-download/tools/default-pool.d/7.1/www.conf
new file mode 100644
index 00000000..fc09b4c0
--- /dev/null
+++ b/src/deb/for-download/tools/default-pool.d/7.1/www.conf
@@ -0,0 +1,420 @@
+; Start a new pool named 'www'.
+; the variable $pool can be used in any directive and will be replaced by the
+; pool name ('www' here)
+[www]
+
+; Per pool prefix
+; It only applies on the following directives:
+; - 'access.log'
+; - 'slowlog'
+; - 'listen' (unixsocket)
+; - 'chroot'
+; - 'chdir'
+; - 'php_values'
+; - 'php_admin_values'
+; When not set, the global prefix (or /usr) applies instead.
+; Note: This directive can also be relative to the global prefix.
+; Default Value: none
+;prefix = /path/to/pools/$pool
+
+; Unix user/group of processes
+; Note: The user is mandatory. If the group is not set, the default user's group
+;       will be used.
+user = www-data
+group = www-data
+
+; The address on which to accept FastCGI requests.
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Note: This value is mandatory.
+listen = /run/php/php7.1-fpm.sock
+
+; Set listen(2) backlog.
+; Default Value: 511 (-1 on FreeBSD and OpenBSD)
+;listen.backlog = 511
+
+; Set permissions for unix socket, if one is used. In Linux, read/write
+; permissions must be set in order to allow connections from a web server. Many
+; BSD-derived systems allow connections regardless of permissions. The owner
+; and group can be specified either by name or by their numeric IDs.
+; Default Values: user and group are set as the running user
+;                 mode is set to 0660
+listen.owner = www-data
+listen.group = www-data
+;listen.mode = 0660
+; When POSIX Access Control Lists are supported you can set them using
+; these options, value is a comma separated list of user/group names.
+; When set, listen.owner and listen.group are ignored
+;listen.acl_users =
+;listen.acl_groups =
+
+; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
+; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
+; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
+; must be separated by a comma. If this value is left blank, connections will be
+; accepted from any ip address.
+; Default Value: any
+;listen.allowed_clients = 127.0.0.1
+
+; Specify the nice(2) priority to apply to the pool processes (only if set)
+; The value can vary from -19 (highest priority) to 20 (lower priority)
+; Note: - It will only work if the FPM master process is launched as root
+;       - The pool processes will inherit the master process priority
+;         unless it specified otherwise
+; Default Value: no set
+; process.priority = -19
+
+; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user
+; or group is differrent than the master process user. It allows to create process
+; core dump and ptrace the process for the pool user.
+; Default Value: no
+; process.dumpable = yes
+
+; Choose how the process manager will control the number of child processes.
+; Possible Values:
+;   static  - a fixed number (pm.max_children) of child processes;
+;   dynamic - the number of child processes are set dynamically based on the
+;             following directives. With this process management, there will be
+;             always at least 1 children.
+;             pm.max_children      - the maximum number of children that can
+;                                    be alive at the same time.
+;             pm.start_servers     - the number of children created on startup.
+;             pm.min_spare_servers - the minimum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is less than this
+;                                    number then some children will be created.
+;             pm.max_spare_servers - the maximum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is greater than this
+;                                    number then some children will be killed.
+;  ondemand - no children are created at startup. Children will be forked when
+;             new requests will connect. The following parameter are used:
+;             pm.max_children           - the maximum number of children that
+;                                         can be alive at the same time.
+;             pm.process_idle_timeout   - The number of seconds after which
+;                                         an idle process will be killed.
+; Note: This value is mandatory.
+pm = dynamic
+
+; The number of child processes to be created when pm is set to 'static' and the
+; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
+; This value sets the limit on the number of simultaneous requests that will be
+; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
+; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
+; CGI. The below defaults are based on a server without much resources. Don't
+; forget to tweak pm.* to fit your needs.
+; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
+; Note: This value is mandatory.
+pm.max_children = 5
+
+; The number of child processes created on startup.
+; Note: Used only when pm is set to 'dynamic'
+; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2
+pm.start_servers = 2
+
+; The desired minimum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.min_spare_servers = 1
+
+; The desired maximum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.max_spare_servers = 3
+
+; The number of seconds after which an idle process will be killed.
+; Note: Used only when pm is set to 'ondemand'
+; Default Value: 10s
+;pm.process_idle_timeout = 10s;
+
+; The number of requests each child process should execute before respawning.
+; This can be useful to work around memory leaks in 3rd party libraries. For
+; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
+; Default Value: 0
+;pm.max_requests = 500
+
+; The URI to view the FPM status page. If this value is not set, no URI will be
+; recognized as a status page. It shows the following informations:
+;   pool                 - the name of the pool;
+;   process manager      - static, dynamic or ondemand;
+;   start time           - the date and time FPM has started;
+;   start since          - number of seconds since FPM has started;
+;   accepted conn        - the number of request accepted by the pool;
+;   listen queue         - the number of request in the queue of pending
+;                          connections (see backlog in listen(2));
+;   max listen queue     - the maximum number of requests in the queue
+;                          of pending connections since FPM has started;
+;   listen queue len     - the size of the socket queue of pending connections;
+;   idle processes       - the number of idle processes;
+;   active processes     - the number of active processes;
+;   total processes      - the number of idle + active processes;
+;   max active processes - the maximum number of active processes since FPM
+;                          has started;
+;   max children reached - number of times, the process limit has been reached,
+;                          when pm tries to start more children (works only for
+;                          pm 'dynamic' and 'ondemand');
+; Value are updated in real time.
+; Example output:
+;   pool:                 www
+;   process manager:      static
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          62636
+;   accepted conn:        190460
+;   listen queue:         0
+;   max listen queue:     1
+;   listen queue len:     42
+;   idle processes:       4
+;   active processes:     11
+;   total processes:      15
+;   max active processes: 12
+;   max children reached: 0
+;
+; By default the status page output is formatted as text/plain. Passing either
+; 'html', 'xml' or 'json' in the query string will return the corresponding
+; output syntax. Example:
+;   http://www.foo.bar/status
+;   http://www.foo.bar/status?json
+;   http://www.foo.bar/status?html
+;   http://www.foo.bar/status?xml
+;
+; By default the status page only outputs short status. Passing 'full' in the
+; query string will also return status for each pool process.
+; Example:
+;   http://www.foo.bar/status?full
+;   http://www.foo.bar/status?json&full
+;   http://www.foo.bar/status?html&full
+;   http://www.foo.bar/status?xml&full
+; The Full status returns for each process:
+;   pid                  - the PID of the process;
+;   state                - the state of the process (Idle, Running, ...);
+;   start time           - the date and time the process has started;
+;   start since          - the number of seconds since the process has started;
+;   requests             - the number of requests the process has served;
+;   request duration     - the duration in µs of the requests;
+;   request method       - the request method (GET, POST, ...);
+;   request URI          - the request URI with the query string;
+;   content length       - the content length of the request (only with POST);
+;   user                 - the user (PHP_AUTH_USER) (or '-' if not set);
+;   script               - the main script called (or '-' if not set);
+;   last request cpu     - the %cpu the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because CPU calculation is done when the request
+;                          processing has terminated;
+;   last request memory  - the max amount of memory the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because memory calculation is done when the request
+;                          processing has terminated;
+; If the process is in Idle state, then informations are related to the
+; last request the process has served. Otherwise informations are related to
+; the current request being served.
+; Example output:
+;   ************************
+;   pid:                  31330
+;   state:                Running
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          63087
+;   requests:             12808
+;   request duration:     1250261
+;   request method:       GET
+;   request URI:          /test_mem.php?N=10000
+;   content length:       0
+;   user:                 -
+;   script:               /home/fat/web/docs/php/test_mem.php
+;   last request cpu:     0.00
+;   last request memory:  0
+;
+; Note: There is a real-time FPM status monitoring sample web page available
+;       It's available in: /usr/share/php/7.1/fpm/status.html
+;
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;pm.status_path = /status
+
+; The ping URI to call the monitoring page of FPM. If this value is not set, no
+; URI will be recognized as a ping page. This could be used to test from outside
+; that FPM is alive and responding, or to
+; - create a graph of FPM availability (rrd or such);
+; - remove a server from a group if it is not responding (load balancing);
+; - trigger alerts for the operating team (24/7).
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;ping.path = /ping
+
+; This directive may be used to customize the response of a ping request. The
+; response is formatted as text/plain with a 200 response code.
+; Default Value: pong
+;ping.response = pong
+
+; The access log file
+; Default: not set
+;access.log = log/$pool.access.log
+
+; The access log format.
+; The following syntax is allowed
+;  %%: the '%' character
+;  %C: %CPU used by the request
+;      it can accept the following format:
+;      - %{user}C for user CPU only
+;      - %{system}C for system CPU only
+;      - %{total}C  for user + system CPU (default)
+;  %d: time taken to serve the request
+;      it can accept the following format:
+;      - %{seconds}d (default)
+;      - %{miliseconds}d
+;      - %{mili}d
+;      - %{microseconds}d
+;      - %{micro}d
+;  %e: an environment variable (same as $_ENV or $_SERVER)
+;      it must be associated with embraces to specify the name of the env
+;      variable. Some exemples:
+;      - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
+;      - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
+;  %f: script filename
+;  %l: content-length of the request (for POST request only)
+;  %m: request method
+;  %M: peak of memory allocated by PHP
+;      it can accept the following format:
+;      - %{bytes}M (default)
+;      - %{kilobytes}M
+;      - %{kilo}M
+;      - %{megabytes}M
+;      - %{mega}M
+;  %n: pool name
+;  %o: output header
+;      it must be associated with embraces to specify the name of the header:
+;      - %{Content-Type}o
+;      - %{X-Powered-By}o
+;      - %{Transfert-Encoding}o
+;      - ....
+;  %p: PID of the child that serviced the request
+;  %P: PID of the parent of the child that serviced the request
+;  %q: the query string
+;  %Q: the '?' character if query string exists
+;  %r: the request URI (without the query string, see %q and %Q)
+;  %R: remote IP address
+;  %s: status (response code)
+;  %t: server time the request was received
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %T: time the log has been written (the request has finished)
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %u: remote user
+;
+; Default: "%R - %u %t \"%m %r\" %s"
+;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
+
+; The log file for slow requests
+; Default Value: not set
+; Note: slowlog is mandatory if request_slowlog_timeout is set
+;slowlog = log/$pool.log.slow
+
+; The timeout for serving a single request after which a PHP backtrace will be
+; dumped to the 'slowlog' file. A value of '0s' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_slowlog_timeout = 0
+
+; The timeout for serving a single request after which the worker process will
+; be killed. This option should be used when the 'max_execution_time' ini option
+; does not stop script execution for some reason. A value of '0' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_terminate_timeout = 0
+
+; Set open file descriptor rlimit.
+; Default Value: system defined value
+;rlimit_files = 1024
+
+; Set max core size rlimit.
+; Possible Values: 'unlimited' or an integer greater or equal to 0
+; Default Value: system defined value
+;rlimit_core = 0
+
+; Chroot to this directory at the start. This value must be defined as an
+; absolute path. When this value is not set, chroot is not used.
+; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
+; of its subdirectories. If the pool prefix is not set, the global prefix
+; will be used instead.
+; Note: chrooting is a great security feature and should be used whenever
+;       possible. However, all PHP paths will be relative to the chroot
+;       (error_log, sessions.save_path, ...).
+; Default Value: not set
+;chroot =
+
+; Chdir to this directory at the start.
+; Note: relative path can be used.
+; Default Value: current directory or / when chroot
+;chdir = /var/www
+
+; Redirect worker stdout and stderr into main error log. If not set, stdout and
+; stderr will be redirected to /dev/null according to FastCGI specs.
+; Note: on highloaded environement, this can cause some delay in the page
+; process time (several ms).
+; Default Value: no
+;catch_workers_output = yes
+
+; Clear environment in FPM workers
+; Prevents arbitrary environment variables from reaching FPM worker processes
+; by clearing the environment in workers before env vars specified in this
+; pool configuration are added.
+; Setting to "no" will make all environment variables available to PHP code
+; via getenv(), $_ENV and $_SERVER.
+; Default Value: yes
+;clear_env = no
+
+; Limits the extensions of the main script FPM will allow to parse. This can
+; prevent configuration mistakes on the web server side. You should only limit
+; FPM to .php extensions to prevent malicious users to use other extensions to
+; execute php code.
+; Note: set an empty value to allow all extensions.
+; Default Value: .php
+;security.limit_extensions = .php .php3 .php4 .php5 .php7
+
+; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
+; the current environment.
+; Default Value: clean env
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /tmp
+;env[TMPDIR] = /tmp
+;env[TEMP] = /tmp
+
+; Additional php.ini defines, specific to this pool of workers. These settings
+; overwrite the values previously defined in the php.ini. The directives are the
+; same as the PHP SAPI:
+;   php_value/php_flag             - you can set classic ini defines which can
+;                                    be overwritten from PHP call 'ini_set'.
+;   php_admin_value/php_admin_flag - these directives won't be overwritten by
+;                                     PHP call 'ini_set'
+; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
+
+; Defining 'extension' will load the corresponding shared extension from
+; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
+; overwrite previously defined php.ini values, but will append the new value
+; instead.
+
+; Note: path INI options can be relative and will be expanded with the prefix
+; (pool, global or /usr)
+
+; Default Value: nothing is defined by default except the values in php.ini and
+;                specified at startup with the -d argument
+;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
+;php_flag[display_errors] = off
+;php_admin_value[error_log] = /var/log/fpm-php.www.log
+;php_admin_flag[log_errors] = on
+;php_admin_value[memory_limit] = 32M
diff --git a/src/deb/for-download/tools/default-pool.d/7.3/www.conf b/src/deb/for-download/tools/default-pool.d/7.3/www.conf
new file mode 100644
index 00000000..03ce7b03
--- /dev/null
+++ b/src/deb/for-download/tools/default-pool.d/7.3/www.conf
@@ -0,0 +1,439 @@
+; Start a new pool named 'www'.
+; the variable $pool can be used in any directive and will be replaced by the
+; pool name ('www' here)
+[www]
+
+; Per pool prefix
+; It only applies on the following directives:
+; - 'access.log'
+; - 'slowlog'
+; - 'listen' (unixsocket)
+; - 'chroot'
+; - 'chdir'
+; - 'php_values'
+; - 'php_admin_values'
+; When not set, the global prefix (or /usr) applies instead.
+; Note: This directive can also be relative to the global prefix.
+; Default Value: none
+;prefix = /path/to/pools/$pool
+
+; Unix user/group of processes
+; Note: The user is mandatory. If the group is not set, the default user's group
+;       will be used.
+user = www-data
+group = www-data
+
+; The address on which to accept FastCGI requests.
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Note: This value is mandatory.
+listen = /run/php/php7.3-fpm.sock
+
+; Set listen(2) backlog.
+; Default Value: 511 (-1 on FreeBSD and OpenBSD)
+;listen.backlog = 511
+
+; Set permissions for unix socket, if one is used. In Linux, read/write
+; permissions must be set in order to allow connections from a web server. Many
+; BSD-derived systems allow connections regardless of permissions. The owner
+; and group can be specified either by name or by their numeric IDs.
+; Default Values: user and group are set as the running user
+;                 mode is set to 0660
+listen.owner = www-data
+listen.group = www-data
+;listen.mode = 0660
+; When POSIX Access Control Lists are supported you can set them using
+; these options, value is a comma separated list of user/group names.
+; When set, listen.owner and listen.group are ignored
+;listen.acl_users =
+;listen.acl_groups =
+
+; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
+; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
+; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
+; must be separated by a comma. If this value is left blank, connections will be
+; accepted from any ip address.
+; Default Value: any
+;listen.allowed_clients = 127.0.0.1
+
+; Specify the nice(2) priority to apply to the pool processes (only if set)
+; The value can vary from -19 (highest priority) to 20 (lower priority)
+; Note: - It will only work if the FPM master process is launched as root
+;       - The pool processes will inherit the master process priority
+;         unless it specified otherwise
+; Default Value: no set
+; process.priority = -19
+
+; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user
+; or group is differrent than the master process user. It allows to create process
+; core dump and ptrace the process for the pool user.
+; Default Value: no
+; process.dumpable = yes
+
+; Choose how the process manager will control the number of child processes.
+; Possible Values:
+;   static  - a fixed number (pm.max_children) of child processes;
+;   dynamic - the number of child processes are set dynamically based on the
+;             following directives. With this process management, there will be
+;             always at least 1 children.
+;             pm.max_children      - the maximum number of children that can
+;                                    be alive at the same time.
+;             pm.start_servers     - the number of children created on startup.
+;             pm.min_spare_servers - the minimum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is less than this
+;                                    number then some children will be created.
+;             pm.max_spare_servers - the maximum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is greater than this
+;                                    number then some children will be killed.
+;  ondemand - no children are created at startup. Children will be forked when
+;             new requests will connect. The following parameter are used:
+;             pm.max_children           - the maximum number of children that
+;                                         can be alive at the same time.
+;             pm.process_idle_timeout   - The number of seconds after which
+;                                         an idle process will be killed.
+; Note: This value is mandatory.
+pm = dynamic
+
+; The number of child processes to be created when pm is set to 'static' and the
+; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
+; This value sets the limit on the number of simultaneous requests that will be
+; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
+; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
+; CGI. The below defaults are based on a server without much resources. Don't
+; forget to tweak pm.* to fit your needs.
+; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
+; Note: This value is mandatory.
+pm.max_children = 5
+
+; The number of child processes created on startup.
+; Note: Used only when pm is set to 'dynamic'
+; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2
+pm.start_servers = 2
+
+; The desired minimum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.min_spare_servers = 1
+
+; The desired maximum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.max_spare_servers = 3
+
+; The number of seconds after which an idle process will be killed.
+; Note: Used only when pm is set to 'ondemand'
+; Default Value: 10s
+;pm.process_idle_timeout = 10s;
+
+; The number of requests each child process should execute before respawning.
+; This can be useful to work around memory leaks in 3rd party libraries. For
+; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
+; Default Value: 0
+;pm.max_requests = 500
+
+; The URI to view the FPM status page. If this value is not set, no URI will be
+; recognized as a status page. It shows the following informations:
+;   pool                 - the name of the pool;
+;   process manager      - static, dynamic or ondemand;
+;   start time           - the date and time FPM has started;
+;   start since          - number of seconds since FPM has started;
+;   accepted conn        - the number of request accepted by the pool;
+;   listen queue         - the number of request in the queue of pending
+;                          connections (see backlog in listen(2));
+;   max listen queue     - the maximum number of requests in the queue
+;                          of pending connections since FPM has started;
+;   listen queue len     - the size of the socket queue of pending connections;
+;   idle processes       - the number of idle processes;
+;   active processes     - the number of active processes;
+;   total processes      - the number of idle + active processes;
+;   max active processes - the maximum number of active processes since FPM
+;                          has started;
+;   max children reached - number of times, the process limit has been reached,
+;                          when pm tries to start more children (works only for
+;                          pm 'dynamic' and 'ondemand');
+; Value are updated in real time.
+; Example output:
+;   pool:                 www
+;   process manager:      static
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          62636
+;   accepted conn:        190460
+;   listen queue:         0
+;   max listen queue:     1
+;   listen queue len:     42
+;   idle processes:       4
+;   active processes:     11
+;   total processes:      15
+;   max active processes: 12
+;   max children reached: 0
+;
+; By default the status page output is formatted as text/plain. Passing either
+; 'html', 'xml' or 'json' in the query string will return the corresponding
+; output syntax. Example:
+;   http://www.foo.bar/status
+;   http://www.foo.bar/status?json
+;   http://www.foo.bar/status?html
+;   http://www.foo.bar/status?xml
+;
+; By default the status page only outputs short status. Passing 'full' in the
+; query string will also return status for each pool process.
+; Example:
+;   http://www.foo.bar/status?full
+;   http://www.foo.bar/status?json&full
+;   http://www.foo.bar/status?html&full
+;   http://www.foo.bar/status?xml&full
+; The Full status returns for each process:
+;   pid                  - the PID of the process;
+;   state                - the state of the process (Idle, Running, ...);
+;   start time           - the date and time the process has started;
+;   start since          - the number of seconds since the process has started;
+;   requests             - the number of requests the process has served;
+;   request duration     - the duration in µs of the requests;
+;   request method       - the request method (GET, POST, ...);
+;   request URI          - the request URI with the query string;
+;   content length       - the content length of the request (only with POST);
+;   user                 - the user (PHP_AUTH_USER) (or '-' if not set);
+;   script               - the main script called (or '-' if not set);
+;   last request cpu     - the %cpu the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because CPU calculation is done when the request
+;                          processing has terminated;
+;   last request memory  - the max amount of memory the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because memory calculation is done when the request
+;                          processing has terminated;
+; If the process is in Idle state, then informations are related to the
+; last request the process has served. Otherwise informations are related to
+; the current request being served.
+; Example output:
+;   ************************
+;   pid:                  31330
+;   state:                Running
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          63087
+;   requests:             12808
+;   request duration:     1250261
+;   request method:       GET
+;   request URI:          /test_mem.php?N=10000
+;   content length:       0
+;   user:                 -
+;   script:               /home/fat/web/docs/php/test_mem.php
+;   last request cpu:     0.00
+;   last request memory:  0
+;
+; Note: There is a real-time FPM status monitoring sample web page available
+;       It's available in: /usr/share/php/7.3/fpm/status.html
+;
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;pm.status_path = /status
+
+; The ping URI to call the monitoring page of FPM. If this value is not set, no
+; URI will be recognized as a ping page. This could be used to test from outside
+; that FPM is alive and responding, or to
+; - create a graph of FPM availability (rrd or such);
+; - remove a server from a group if it is not responding (load balancing);
+; - trigger alerts for the operating team (24/7).
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;ping.path = /ping
+
+; This directive may be used to customize the response of a ping request. The
+; response is formatted as text/plain with a 200 response code.
+; Default Value: pong
+;ping.response = pong
+
+; The access log file
+; Default: not set
+;access.log = log/$pool.access.log
+
+; The access log format.
+; The following syntax is allowed
+;  %%: the '%' character
+;  %C: %CPU used by the request
+;      it can accept the following format:
+;      - %{user}C for user CPU only
+;      - %{system}C for system CPU only
+;      - %{total}C  for user + system CPU (default)
+;  %d: time taken to serve the request
+;      it can accept the following format:
+;      - %{seconds}d (default)
+;      - %{miliseconds}d
+;      - %{mili}d
+;      - %{microseconds}d
+;      - %{micro}d
+;  %e: an environment variable (same as $_ENV or $_SERVER)
+;      it must be associated with embraces to specify the name of the env
+;      variable. Some exemples:
+;      - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
+;      - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
+;  %f: script filename
+;  %l: content-length of the request (for POST request only)
+;  %m: request method
+;  %M: peak of memory allocated by PHP
+;      it can accept the following format:
+;      - %{bytes}M (default)
+;      - %{kilobytes}M
+;      - %{kilo}M
+;      - %{megabytes}M
+;      - %{mega}M
+;  %n: pool name
+;  %o: output header
+;      it must be associated with embraces to specify the name of the header:
+;      - %{Content-Type}o
+;      - %{X-Powered-By}o
+;      - %{Transfert-Encoding}o
+;      - ....
+;  %p: PID of the child that serviced the request
+;  %P: PID of the parent of the child that serviced the request
+;  %q: the query string
+;  %Q: the '?' character if query string exists
+;  %r: the request URI (without the query string, see %q and %Q)
+;  %R: remote IP address
+;  %s: status (response code)
+;  %t: server time the request was received
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %T: time the log has been written (the request has finished)
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %u: remote user
+;
+; Default: "%R - %u %t \"%m %r\" %s"
+;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
+
+; The log file for slow requests
+; Default Value: not set
+; Note: slowlog is mandatory if request_slowlog_timeout is set
+;slowlog = log/$pool.log.slow
+
+; The timeout for serving a single request after which a PHP backtrace will be
+; dumped to the 'slowlog' file. A value of '0s' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_slowlog_timeout = 0
+
+; Depth of slow log stack trace.
+; Default Value: 20
+;request_slowlog_trace_depth = 20
+
+; The timeout for serving a single request after which the worker process will
+; be killed. This option should be used when the 'max_execution_time' ini option
+; does not stop script execution for some reason. A value of '0' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_terminate_timeout = 0
+
+; The timeout set by 'request_terminate_timeout' ini option is not engaged after
+; application calls 'fastcgi_finish_request' or when application has finished and
+; shutdown functions are being called (registered via register_shutdown_function).
+; This option will enable timeout limit to be applied unconditionally
+; even in such cases.
+; Default Value: no
+;request_terminate_timeout_track_finished = no
+
+; Set open file descriptor rlimit.
+; Default Value: system defined value
+;rlimit_files = 1024
+
+; Set max core size rlimit.
+; Possible Values: 'unlimited' or an integer greater or equal to 0
+; Default Value: system defined value
+;rlimit_core = 0
+
+; Chroot to this directory at the start. This value must be defined as an
+; absolute path. When this value is not set, chroot is not used.
+; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
+; of its subdirectories. If the pool prefix is not set, the global prefix
+; will be used instead.
+; Note: chrooting is a great security feature and should be used whenever
+;       possible. However, all PHP paths will be relative to the chroot
+;       (error_log, sessions.save_path, ...).
+; Default Value: not set
+;chroot =
+
+; Chdir to this directory at the start.
+; Note: relative path can be used.
+; Default Value: current directory or / when chroot
+;chdir = /var/www
+
+; Redirect worker stdout and stderr into main error log. If not set, stdout and
+; stderr will be redirected to /dev/null according to FastCGI specs.
+; Note: on highloaded environement, this can cause some delay in the page
+; process time (several ms).
+; Default Value: no
+;catch_workers_output = yes
+
+; Decorate worker output with prefix and suffix containing information about
+; the child that writes to the log and if stdout or stderr is used as well as
+; log level and time. This options is used only if catch_workers_output is yes.
+; Settings to "no" will output data as written to the stdout or stderr.
+; Default value: yes
+;decorate_workers_output = no
+
+; Clear environment in FPM workers
+; Prevents arbitrary environment variables from reaching FPM worker processes
+; by clearing the environment in workers before env vars specified in this
+; pool configuration are added.
+; Setting to "no" will make all environment variables available to PHP code
+; via getenv(), $_ENV and $_SERVER.
+; Default Value: yes
+;clear_env = no
+
+; Limits the extensions of the main script FPM will allow to parse. This can
+; prevent configuration mistakes on the web server side. You should only limit
+; FPM to .php extensions to prevent malicious users to use other extensions to
+; execute php code.
+; Note: set an empty value to allow all extensions.
+; Default Value: .php
+;security.limit_extensions = .php .php3 .php4 .php5 .php7
+
+; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
+; the current environment.
+; Default Value: clean env
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /tmp
+;env[TMPDIR] = /tmp
+;env[TEMP] = /tmp
+
+; Additional php.ini defines, specific to this pool of workers. These settings
+; overwrite the values previously defined in the php.ini. The directives are the
+; same as the PHP SAPI:
+;   php_value/php_flag             - you can set classic ini defines which can
+;                                    be overwritten from PHP call 'ini_set'.
+;   php_admin_value/php_admin_flag - these directives won't be overwritten by
+;                                     PHP call 'ini_set'
+; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
+
+; Defining 'extension' will load the corresponding shared extension from
+; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
+; overwrite previously defined php.ini values, but will append the new value
+; instead.
+
+; Note: path INI options can be relative and will be expanded with the prefix
+; (pool, global or /usr)
+
+; Default Value: nothing is defined by default except the values in php.ini and
+;                specified at startup with the -d argument
+;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
+;php_flag[display_errors] = off
+;php_admin_value[error_log] = /var/log/fpm-php.www.log
+;php_admin_flag[log_errors] = on
+;php_admin_value[memory_limit] = 32M
diff --git a/src/deb/for-download/tools/default-pool.d/7.4/www.conf b/src/deb/for-download/tools/default-pool.d/7.4/www.conf
new file mode 100644
index 00000000..8ef08a99
--- /dev/null
+++ b/src/deb/for-download/tools/default-pool.d/7.4/www.conf
@@ -0,0 +1,439 @@
+; Start a new pool named 'www'.
+; the variable $pool can be used in any directive and will be replaced by the
+; pool name ('www' here)
+[www]
+
+; Per pool prefix
+; It only applies on the following directives:
+; - 'access.log'
+; - 'slowlog'
+; - 'listen' (unixsocket)
+; - 'chroot'
+; - 'chdir'
+; - 'php_values'
+; - 'php_admin_values'
+; When not set, the global prefix (or /usr) applies instead.
+; Note: This directive can also be relative to the global prefix.
+; Default Value: none
+;prefix = /path/to/pools/$pool
+
+; Unix user/group of processes
+; Note: The user is mandatory. If the group is not set, the default user's group
+;       will be used.
+user = www-data
+group = www-data
+
+; The address on which to accept FastCGI requests.
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Note: This value is mandatory.
+listen = /run/php/php7.4-fpm.sock
+
+; Set listen(2) backlog.
+; Default Value: 511 (-1 on FreeBSD and OpenBSD)
+;listen.backlog = 511
+
+; Set permissions for unix socket, if one is used. In Linux, read/write
+; permissions must be set in order to allow connections from a web server. Many
+; BSD-derived systems allow connections regardless of permissions. The owner
+; and group can be specified either by name or by their numeric IDs.
+; Default Values: user and group are set as the running user
+;                 mode is set to 0660
+listen.owner = www-data
+listen.group = www-data
+;listen.mode = 0660
+; When POSIX Access Control Lists are supported you can set them using
+; these options, value is a comma separated list of user/group names.
+; When set, listen.owner and listen.group are ignored
+;listen.acl_users =
+;listen.acl_groups =
+
+; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
+; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
+; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
+; must be separated by a comma. If this value is left blank, connections will be
+; accepted from any ip address.
+; Default Value: any
+;listen.allowed_clients = 127.0.0.1
+
+; Specify the nice(2) priority to apply to the pool processes (only if set)
+; The value can vary from -19 (highest priority) to 20 (lower priority)
+; Note: - It will only work if the FPM master process is launched as root
+;       - The pool processes will inherit the master process priority
+;         unless it specified otherwise
+; Default Value: no set
+; process.priority = -19
+
+; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user
+; or group is differrent than the master process user. It allows to create process
+; core dump and ptrace the process for the pool user.
+; Default Value: no
+; process.dumpable = yes
+
+; Choose how the process manager will control the number of child processes.
+; Possible Values:
+;   static  - a fixed number (pm.max_children) of child processes;
+;   dynamic - the number of child processes are set dynamically based on the
+;             following directives. With this process management, there will be
+;             always at least 1 children.
+;             pm.max_children      - the maximum number of children that can
+;                                    be alive at the same time.
+;             pm.start_servers     - the number of children created on startup.
+;             pm.min_spare_servers - the minimum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is less than this
+;                                    number then some children will be created.
+;             pm.max_spare_servers - the maximum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is greater than this
+;                                    number then some children will be killed.
+;  ondemand - no children are created at startup. Children will be forked when
+;             new requests will connect. The following parameter are used:
+;             pm.max_children           - the maximum number of children that
+;                                         can be alive at the same time.
+;             pm.process_idle_timeout   - The number of seconds after which
+;                                         an idle process will be killed.
+; Note: This value is mandatory.
+pm = dynamic
+
+; The number of child processes to be created when pm is set to 'static' and the
+; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
+; This value sets the limit on the number of simultaneous requests that will be
+; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
+; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
+; CGI. The below defaults are based on a server without much resources. Don't
+; forget to tweak pm.* to fit your needs.
+; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
+; Note: This value is mandatory.
+pm.max_children = 5
+
+; The number of child processes created on startup.
+; Note: Used only when pm is set to 'dynamic'
+; Default Value: (min_spare_servers + max_spare_servers) / 2
+pm.start_servers = 2
+
+; The desired minimum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.min_spare_servers = 1
+
+; The desired maximum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.max_spare_servers = 3
+
+; The number of seconds after which an idle process will be killed.
+; Note: Used only when pm is set to 'ondemand'
+; Default Value: 10s
+;pm.process_idle_timeout = 10s;
+
+; The number of requests each child process should execute before respawning.
+; This can be useful to work around memory leaks in 3rd party libraries. For
+; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
+; Default Value: 0
+;pm.max_requests = 500
+
+; The URI to view the FPM status page. If this value is not set, no URI will be
+; recognized as a status page. It shows the following informations:
+;   pool                 - the name of the pool;
+;   process manager      - static, dynamic or ondemand;
+;   start time           - the date and time FPM has started;
+;   start since          - number of seconds since FPM has started;
+;   accepted conn        - the number of request accepted by the pool;
+;   listen queue         - the number of request in the queue of pending
+;                          connections (see backlog in listen(2));
+;   max listen queue     - the maximum number of requests in the queue
+;                          of pending connections since FPM has started;
+;   listen queue len     - the size of the socket queue of pending connections;
+;   idle processes       - the number of idle processes;
+;   active processes     - the number of active processes;
+;   total processes      - the number of idle + active processes;
+;   max active processes - the maximum number of active processes since FPM
+;                          has started;
+;   max children reached - number of times, the process limit has been reached,
+;                          when pm tries to start more children (works only for
+;                          pm 'dynamic' and 'ondemand');
+; Value are updated in real time.
+; Example output:
+;   pool:                 www
+;   process manager:      static
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          62636
+;   accepted conn:        190460
+;   listen queue:         0
+;   max listen queue:     1
+;   listen queue len:     42
+;   idle processes:       4
+;   active processes:     11
+;   total processes:      15
+;   max active processes: 12
+;   max children reached: 0
+;
+; By default the status page output is formatted as text/plain. Passing either
+; 'html', 'xml' or 'json' in the query string will return the corresponding
+; output syntax. Example:
+;   http://www.foo.bar/status
+;   http://www.foo.bar/status?json
+;   http://www.foo.bar/status?html
+;   http://www.foo.bar/status?xml
+;
+; By default the status page only outputs short status. Passing 'full' in the
+; query string will also return status for each pool process.
+; Example:
+;   http://www.foo.bar/status?full
+;   http://www.foo.bar/status?json&full
+;   http://www.foo.bar/status?html&full
+;   http://www.foo.bar/status?xml&full
+; The Full status returns for each process:
+;   pid                  - the PID of the process;
+;   state                - the state of the process (Idle, Running, ...);
+;   start time           - the date and time the process has started;
+;   start since          - the number of seconds since the process has started;
+;   requests             - the number of requests the process has served;
+;   request duration     - the duration in µs of the requests;
+;   request method       - the request method (GET, POST, ...);
+;   request URI          - the request URI with the query string;
+;   content length       - the content length of the request (only with POST);
+;   user                 - the user (PHP_AUTH_USER) (or '-' if not set);
+;   script               - the main script called (or '-' if not set);
+;   last request cpu     - the %cpu the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because CPU calculation is done when the request
+;                          processing has terminated;
+;   last request memory  - the max amount of memory the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because memory calculation is done when the request
+;                          processing has terminated;
+; If the process is in Idle state, then informations are related to the
+; last request the process has served. Otherwise informations are related to
+; the current request being served.
+; Example output:
+;   ************************
+;   pid:                  31330
+;   state:                Running
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          63087
+;   requests:             12808
+;   request duration:     1250261
+;   request method:       GET
+;   request URI:          /test_mem.php?N=10000
+;   content length:       0
+;   user:                 -
+;   script:               /home/fat/web/docs/php/test_mem.php
+;   last request cpu:     0.00
+;   last request memory:  0
+;
+; Note: There is a real-time FPM status monitoring sample web page available
+;       It's available in: /usr/share/php/7.4/fpm/status.html
+;
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;pm.status_path = /status
+
+; The ping URI to call the monitoring page of FPM. If this value is not set, no
+; URI will be recognized as a ping page. This could be used to test from outside
+; that FPM is alive and responding, or to
+; - create a graph of FPM availability (rrd or such);
+; - remove a server from a group if it is not responding (load balancing);
+; - trigger alerts for the operating team (24/7).
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;ping.path = /ping
+
+; This directive may be used to customize the response of a ping request. The
+; response is formatted as text/plain with a 200 response code.
+; Default Value: pong
+;ping.response = pong
+
+; The access log file
+; Default: not set
+;access.log = log/$pool.access.log
+
+; The access log format.
+; The following syntax is allowed
+;  %%: the '%' character
+;  %C: %CPU used by the request
+;      it can accept the following format:
+;      - %{user}C for user CPU only
+;      - %{system}C for system CPU only
+;      - %{total}C  for user + system CPU (default)
+;  %d: time taken to serve the request
+;      it can accept the following format:
+;      - %{seconds}d (default)
+;      - %{miliseconds}d
+;      - %{mili}d
+;      - %{microseconds}d
+;      - %{micro}d
+;  %e: an environment variable (same as $_ENV or $_SERVER)
+;      it must be associated with embraces to specify the name of the env
+;      variable. Some exemples:
+;      - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
+;      - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
+;  %f: script filename
+;  %l: content-length of the request (for POST request only)
+;  %m: request method
+;  %M: peak of memory allocated by PHP
+;      it can accept the following format:
+;      - %{bytes}M (default)
+;      - %{kilobytes}M
+;      - %{kilo}M
+;      - %{megabytes}M
+;      - %{mega}M
+;  %n: pool name
+;  %o: output header
+;      it must be associated with embraces to specify the name of the header:
+;      - %{Content-Type}o
+;      - %{X-Powered-By}o
+;      - %{Transfert-Encoding}o
+;      - ....
+;  %p: PID of the child that serviced the request
+;  %P: PID of the parent of the child that serviced the request
+;  %q: the query string
+;  %Q: the '?' character if query string exists
+;  %r: the request URI (without the query string, see %q and %Q)
+;  %R: remote IP address
+;  %s: status (response code)
+;  %t: server time the request was received
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %T: time the log has been written (the request has finished)
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %u: remote user
+;
+; Default: "%R - %u %t \"%m %r\" %s"
+;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
+
+; The log file for slow requests
+; Default Value: not set
+; Note: slowlog is mandatory if request_slowlog_timeout is set
+;slowlog = log/$pool.log.slow
+
+; The timeout for serving a single request after which a PHP backtrace will be
+; dumped to the 'slowlog' file. A value of '0s' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_slowlog_timeout = 0
+
+; Depth of slow log stack trace.
+; Default Value: 20
+;request_slowlog_trace_depth = 20
+
+; The timeout for serving a single request after which the worker process will
+; be killed. This option should be used when the 'max_execution_time' ini option
+; does not stop script execution for some reason. A value of '0' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_terminate_timeout = 0
+
+; The timeout set by 'request_terminate_timeout' ini option is not engaged after
+; application calls 'fastcgi_finish_request' or when application has finished and
+; shutdown functions are being called (registered via register_shutdown_function).
+; This option will enable timeout limit to be applied unconditionally
+; even in such cases.
+; Default Value: no
+;request_terminate_timeout_track_finished = no
+
+; Set open file descriptor rlimit.
+; Default Value: system defined value
+;rlimit_files = 1024
+
+; Set max core size rlimit.
+; Possible Values: 'unlimited' or an integer greater or equal to 0
+; Default Value: system defined value
+;rlimit_core = 0
+
+; Chroot to this directory at the start. This value must be defined as an
+; absolute path. When this value is not set, chroot is not used.
+; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
+; of its subdirectories. If the pool prefix is not set, the global prefix
+; will be used instead.
+; Note: chrooting is a great security feature and should be used whenever
+;       possible. However, all PHP paths will be relative to the chroot
+;       (error_log, sessions.save_path, ...).
+; Default Value: not set
+;chroot =
+
+; Chdir to this directory at the start.
+; Note: relative path can be used.
+; Default Value: current directory or / when chroot
+;chdir = /var/www
+
+; Redirect worker stdout and stderr into main error log. If not set, stdout and
+; stderr will be redirected to /dev/null according to FastCGI specs.
+; Note: on highloaded environement, this can cause some delay in the page
+; process time (several ms).
+; Default Value: no
+;catch_workers_output = yes
+
+; Decorate worker output with prefix and suffix containing information about
+; the child that writes to the log and if stdout or stderr is used as well as
+; log level and time. This options is used only if catch_workers_output is yes.
+; Settings to "no" will output data as written to the stdout or stderr.
+; Default value: yes
+;decorate_workers_output = no
+
+; Clear environment in FPM workers
+; Prevents arbitrary environment variables from reaching FPM worker processes
+; by clearing the environment in workers before env vars specified in this
+; pool configuration are added.
+; Setting to "no" will make all environment variables available to PHP code
+; via getenv(), $_ENV and $_SERVER.
+; Default Value: yes
+;clear_env = no
+
+; Limits the extensions of the main script FPM will allow to parse. This can
+; prevent configuration mistakes on the web server side. You should only limit
+; FPM to .php extensions to prevent malicious users to use other extensions to
+; execute php code.
+; Note: set an empty value to allow all extensions.
+; Default Value: .php
+;security.limit_extensions = .php .php3 .php4 .php5 .php7
+
+; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
+; the current environment.
+; Default Value: clean env
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /tmp
+;env[TMPDIR] = /tmp
+;env[TEMP] = /tmp
+
+; Additional php.ini defines, specific to this pool of workers. These settings
+; overwrite the values previously defined in the php.ini. The directives are the
+; same as the PHP SAPI:
+;   php_value/php_flag             - you can set classic ini defines which can
+;                                    be overwritten from PHP call 'ini_set'.
+;   php_admin_value/php_admin_flag - these directives won't be overwritten by
+;                                     PHP call 'ini_set'
+; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
+
+; Defining 'extension' will load the corresponding shared extension from
+; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
+; overwrite previously defined php.ini values, but will append the new value
+; instead.
+
+; Note: path INI options can be relative and will be expanded with the prefix
+; (pool, global or /usr)
+
+; Default Value: nothing is defined by default except the values in php.ini and
+;                specified at startup with the -d argument
+;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
+;php_flag[display_errors] = off
+;php_admin_value[error_log] = /var/log/fpm-php.www.log
+;php_admin_flag[log_errors] = on
+;php_admin_value[memory_limit] = 32M
diff --git a/src/deb/for-download/tools/default-pool.d/8.0/www.conf b/src/deb/for-download/tools/default-pool.d/8.0/www.conf
new file mode 100644
index 00000000..e21e6158
--- /dev/null
+++ b/src/deb/for-download/tools/default-pool.d/8.0/www.conf
@@ -0,0 +1,455 @@
+; Start a new pool named 'www'.
+; the variable $pool can be used in any directive and will be replaced by the
+; pool name ('www' here)
+[www]
+
+; Per pool prefix
+; It only applies on the following directives:
+; - 'access.log'
+; - 'slowlog'
+; - 'listen' (unixsocket)
+; - 'chroot'
+; - 'chdir'
+; - 'php_values'
+; - 'php_admin_values'
+; When not set, the global prefix (or /usr) applies instead.
+; Note: This directive can also be relative to the global prefix.
+; Default Value: none
+;prefix = /path/to/pools/$pool
+
+; Unix user/group of processes
+; Note: The user is mandatory. If the group is not set, the default user's group
+;       will be used.
+user = www-data
+group = www-data
+
+; The address on which to accept FastCGI requests.
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Note: This value is mandatory.
+listen = /run/php/php8.0-fpm.sock
+
+; Set listen(2) backlog.
+; Default Value: 511 (-1 on FreeBSD and OpenBSD)
+;listen.backlog = 511
+
+; Set permissions for unix socket, if one is used. In Linux, read/write
+; permissions must be set in order to allow connections from a web server. Many
+; BSD-derived systems allow connections regardless of permissions. The owner
+; and group can be specified either by name or by their numeric IDs.
+; Default Values: user and group are set as the running user
+;                 mode is set to 0660
+listen.owner = www-data
+listen.group = www-data
+;listen.mode = 0660
+; When POSIX Access Control Lists are supported you can set them using
+; these options, value is a comma separated list of user/group names.
+; When set, listen.owner and listen.group are ignored
+;listen.acl_users =
+;listen.acl_groups =
+
+; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
+; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
+; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
+; must be separated by a comma. If this value is left blank, connections will be
+; accepted from any ip address.
+; Default Value: any
+;listen.allowed_clients = 127.0.0.1
+
+; Specify the nice(2) priority to apply to the pool processes (only if set)
+; The value can vary from -19 (highest priority) to 20 (lower priority)
+; Note: - It will only work if the FPM master process is launched as root
+;       - The pool processes will inherit the master process priority
+;         unless it specified otherwise
+; Default Value: no set
+; process.priority = -19
+
+; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user
+; or group is different than the master process user. It allows to create process
+; core dump and ptrace the process for the pool user.
+; Default Value: no
+; process.dumpable = yes
+
+; Choose how the process manager will control the number of child processes.
+; Possible Values:
+;   static  - a fixed number (pm.max_children) of child processes;
+;   dynamic - the number of child processes are set dynamically based on the
+;             following directives. With this process management, there will be
+;             always at least 1 children.
+;             pm.max_children      - the maximum number of children that can
+;                                    be alive at the same time.
+;             pm.start_servers     - the number of children created on startup.
+;             pm.min_spare_servers - the minimum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is less than this
+;                                    number then some children will be created.
+;             pm.max_spare_servers - the maximum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is greater than this
+;                                    number then some children will be killed.
+;  ondemand - no children are created at startup. Children will be forked when
+;             new requests will connect. The following parameter are used:
+;             pm.max_children           - the maximum number of children that
+;                                         can be alive at the same time.
+;             pm.process_idle_timeout   - The number of seconds after which
+;                                         an idle process will be killed.
+; Note: This value is mandatory.
+pm = dynamic
+
+; The number of child processes to be created when pm is set to 'static' and the
+; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
+; This value sets the limit on the number of simultaneous requests that will be
+; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
+; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
+; CGI. The below defaults are based on a server without much resources. Don't
+; forget to tweak pm.* to fit your needs.
+; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
+; Note: This value is mandatory.
+pm.max_children = 5
+
+; The number of child processes created on startup.
+; Note: Used only when pm is set to 'dynamic'
+; Default Value: (min_spare_servers + max_spare_servers) / 2
+pm.start_servers = 2
+
+; The desired minimum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.min_spare_servers = 1
+
+; The desired maximum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.max_spare_servers = 3
+
+; The number of seconds after which an idle process will be killed.
+; Note: Used only when pm is set to 'ondemand'
+; Default Value: 10s
+;pm.process_idle_timeout = 10s;
+
+; The number of requests each child process should execute before respawning.
+; This can be useful to work around memory leaks in 3rd party libraries. For
+; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
+; Default Value: 0
+;pm.max_requests = 500
+
+; The URI to view the FPM status page. If this value is not set, no URI will be
+; recognized as a status page. It shows the following information:
+;   pool                 - the name of the pool;
+;   process manager      - static, dynamic or ondemand;
+;   start time           - the date and time FPM has started;
+;   start since          - number of seconds since FPM has started;
+;   accepted conn        - the number of request accepted by the pool;
+;   listen queue         - the number of request in the queue of pending
+;                          connections (see backlog in listen(2));
+;   max listen queue     - the maximum number of requests in the queue
+;                          of pending connections since FPM has started;
+;   listen queue len     - the size of the socket queue of pending connections;
+;   idle processes       - the number of idle processes;
+;   active processes     - the number of active processes;
+;   total processes      - the number of idle + active processes;
+;   max active processes - the maximum number of active processes since FPM
+;                          has started;
+;   max children reached - number of times, the process limit has been reached,
+;                          when pm tries to start more children (works only for
+;                          pm 'dynamic' and 'ondemand');
+; Value are updated in real time.
+; Example output:
+;   pool:                 www
+;   process manager:      static
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          62636
+;   accepted conn:        190460
+;   listen queue:         0
+;   max listen queue:     1
+;   listen queue len:     42
+;   idle processes:       4
+;   active processes:     11
+;   total processes:      15
+;   max active processes: 12
+;   max children reached: 0
+;
+; By default the status page output is formatted as text/plain. Passing either
+; 'html', 'xml' or 'json' in the query string will return the corresponding
+; output syntax. Example:
+;   http://www.foo.bar/status
+;   http://www.foo.bar/status?json
+;   http://www.foo.bar/status?html
+;   http://www.foo.bar/status?xml
+;
+; By default the status page only outputs short status. Passing 'full' in the
+; query string will also return status for each pool process.
+; Example:
+;   http://www.foo.bar/status?full
+;   http://www.foo.bar/status?json&full
+;   http://www.foo.bar/status?html&full
+;   http://www.foo.bar/status?xml&full
+; The Full status returns for each process:
+;   pid                  - the PID of the process;
+;   state                - the state of the process (Idle, Running, ...);
+;   start time           - the date and time the process has started;
+;   start since          - the number of seconds since the process has started;
+;   requests             - the number of requests the process has served;
+;   request duration     - the duration in µs of the requests;
+;   request method       - the request method (GET, POST, ...);
+;   request URI          - the request URI with the query string;
+;   content length       - the content length of the request (only with POST);
+;   user                 - the user (PHP_AUTH_USER) (or '-' if not set);
+;   script               - the main script called (or '-' if not set);
+;   last request cpu     - the %cpu the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because CPU calculation is done when the request
+;                          processing has terminated;
+;   last request memory  - the max amount of memory the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because memory calculation is done when the request
+;                          processing has terminated;
+; If the process is in Idle state, then informations are related to the
+; last request the process has served. Otherwise informations are related to
+; the current request being served.
+; Example output:
+;   ************************
+;   pid:                  31330
+;   state:                Running
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          63087
+;   requests:             12808
+;   request duration:     1250261
+;   request method:       GET
+;   request URI:          /test_mem.php?N=10000
+;   content length:       0
+;   user:                 -
+;   script:               /home/fat/web/docs/php/test_mem.php
+;   last request cpu:     0.00
+;   last request memory:  0
+;
+; Note: There is a real-time FPM status monitoring sample web page available
+;       It's available in: /usr/share/php/8.0/fpm/status.html
+;
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;pm.status_path = /status
+
+; The address on which to accept FastCGI status request. This creates a new
+; invisible pool that can handle requests independently. This is useful
+; if the main pool is busy with long running requests because it is still possible
+; to get the status before finishing the long running requests.
+;
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Default Value: value of the listen option
+;pm.status_listen = 127.0.0.1:9001
+
+; The ping URI to call the monitoring page of FPM. If this value is not set, no
+; URI will be recognized as a ping page. This could be used to test from outside
+; that FPM is alive and responding, or to
+; - create a graph of FPM availability (rrd or such);
+; - remove a server from a group if it is not responding (load balancing);
+; - trigger alerts for the operating team (24/7).
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;ping.path = /ping
+
+; This directive may be used to customize the response of a ping request. The
+; response is formatted as text/plain with a 200 response code.
+; Default Value: pong
+;ping.response = pong
+
+; The access log file
+; Default: not set
+;access.log = log/$pool.access.log
+
+; The access log format.
+; The following syntax is allowed
+;  %%: the '%' character
+;  %C: %CPU used by the request
+;      it can accept the following format:
+;      - %{user}C for user CPU only
+;      - %{system}C for system CPU only
+;      - %{total}C  for user + system CPU (default)
+;  %d: time taken to serve the request
+;      it can accept the following format:
+;      - %{seconds}d (default)
+;      - %{milliseconds}d
+;      - %{mili}d
+;      - %{microseconds}d
+;      - %{micro}d
+;  %e: an environment variable (same as $_ENV or $_SERVER)
+;      it must be associated with embraces to specify the name of the env
+;      variable. Some examples:
+;      - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
+;      - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
+;  %f: script filename
+;  %l: content-length of the request (for POST request only)
+;  %m: request method
+;  %M: peak of memory allocated by PHP
+;      it can accept the following format:
+;      - %{bytes}M (default)
+;      - %{kilobytes}M
+;      - %{kilo}M
+;      - %{megabytes}M
+;      - %{mega}M
+;  %n: pool name
+;  %o: output header
+;      it must be associated with embraces to specify the name of the header:
+;      - %{Content-Type}o
+;      - %{X-Powered-By}o
+;      - %{Transfert-Encoding}o
+;      - ....
+;  %p: PID of the child that serviced the request
+;  %P: PID of the parent of the child that serviced the request
+;  %q: the query string
+;  %Q: the '?' character if query string exists
+;  %r: the request URI (without the query string, see %q and %Q)
+;  %R: remote IP address
+;  %s: status (response code)
+;  %t: server time the request was received
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %T: time the log has been written (the request has finished)
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %u: remote user
+;
+; Default: "%R - %u %t \"%m %r\" %s"
+;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
+
+; The log file for slow requests
+; Default Value: not set
+; Note: slowlog is mandatory if request_slowlog_timeout is set
+;slowlog = log/$pool.log.slow
+
+; The timeout for serving a single request after which a PHP backtrace will be
+; dumped to the 'slowlog' file. A value of '0s' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_slowlog_timeout = 0
+
+; Depth of slow log stack trace.
+; Default Value: 20
+;request_slowlog_trace_depth = 20
+
+; The timeout for serving a single request after which the worker process will
+; be killed. This option should be used when the 'max_execution_time' ini option
+; does not stop script execution for some reason. A value of '0' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_terminate_timeout = 0
+
+; The timeout set by 'request_terminate_timeout' ini option is not engaged after
+; application calls 'fastcgi_finish_request' or when application has finished and
+; shutdown functions are being called (registered via register_shutdown_function).
+; This option will enable timeout limit to be applied unconditionally
+; even in such cases.
+; Default Value: no
+;request_terminate_timeout_track_finished = no
+
+; Set open file descriptor rlimit.
+; Default Value: system defined value
+;rlimit_files = 1024
+
+; Set max core size rlimit.
+; Possible Values: 'unlimited' or an integer greater or equal to 0
+; Default Value: system defined value
+;rlimit_core = 0
+
+; Chroot to this directory at the start. This value must be defined as an
+; absolute path. When this value is not set, chroot is not used.
+; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
+; of its subdirectories. If the pool prefix is not set, the global prefix
+; will be used instead.
+; Note: chrooting is a great security feature and should be used whenever
+;       possible. However, all PHP paths will be relative to the chroot
+;       (error_log, sessions.save_path, ...).
+; Default Value: not set
+;chroot =
+
+; Chdir to this directory at the start.
+; Note: relative path can be used.
+; Default Value: current directory or / when chroot
+;chdir = /var/www
+
+; Redirect worker stdout and stderr into main error log. If not set, stdout and
+; stderr will be redirected to /dev/null according to FastCGI specs.
+; Note: on highloaded environment, this can cause some delay in the page
+; process time (several ms).
+; Default Value: no
+;catch_workers_output = yes
+
+; Decorate worker output with prefix and suffix containing information about
+; the child that writes to the log and if stdout or stderr is used as well as
+; log level and time. This options is used only if catch_workers_output is yes.
+; Settings to "no" will output data as written to the stdout or stderr.
+; Default value: yes
+;decorate_workers_output = no
+
+; Clear environment in FPM workers
+; Prevents arbitrary environment variables from reaching FPM worker processes
+; by clearing the environment in workers before env vars specified in this
+; pool configuration are added.
+; Setting to "no" will make all environment variables available to PHP code
+; via getenv(), $_ENV and $_SERVER.
+; Default Value: yes
+;clear_env = no
+
+; Limits the extensions of the main script FPM will allow to parse. This can
+; prevent configuration mistakes on the web server side. You should only limit
+; FPM to .php extensions to prevent malicious users to use other extensions to
+; execute php code.
+; Note: set an empty value to allow all extensions.
+; Default Value: .php
+;security.limit_extensions = .php .php3 .php4 .php5 .php7
+
+; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
+; the current environment.
+; Default Value: clean env
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /tmp
+;env[TMPDIR] = /tmp
+;env[TEMP] = /tmp
+
+; Additional php.ini defines, specific to this pool of workers. These settings
+; overwrite the values previously defined in the php.ini. The directives are the
+; same as the PHP SAPI:
+;   php_value/php_flag             - you can set classic ini defines which can
+;                                    be overwritten from PHP call 'ini_set'.
+;   php_admin_value/php_admin_flag - these directives won't be overwritten by
+;                                     PHP call 'ini_set'
+; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
+
+; Defining 'extension' will load the corresponding shared extension from
+; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
+; overwrite previously defined php.ini values, but will append the new value
+; instead.
+
+; Note: path INI options can be relative and will be expanded with the prefix
+; (pool, global or /usr)
+
+; Default Value: nothing is defined by default except the values in php.ini and
+;                specified at startup with the -d argument
+;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
+;php_flag[display_errors] = off
+;php_admin_value[error_log] = /var/log/fpm-php.www.log
+;php_admin_flag[log_errors] = on
+;php_admin_value[memory_limit] = 32M
diff --git a/src/deb/for-download/tools/default-pool.d/8.1/www.conf b/src/deb/for-download/tools/default-pool.d/8.1/www.conf
new file mode 100644
index 00000000..5278cea0
--- /dev/null
+++ b/src/deb/for-download/tools/default-pool.d/8.1/www.conf
@@ -0,0 +1,463 @@
+; Start a new pool named 'www'.
+; the variable $pool can be used in any directive and will be replaced by the
+; pool name ('www' here)
+[www]
+
+; Per pool prefix
+; It only applies on the following directives:
+; - 'access.log'
+; - 'slowlog'
+; - 'listen' (unixsocket)
+; - 'chroot'
+; - 'chdir'
+; - 'php_values'
+; - 'php_admin_values'
+; When not set, the global prefix (or /usr) applies instead.
+; Note: This directive can also be relative to the global prefix.
+; Default Value: none
+;prefix = /path/to/pools/$pool
+
+; Unix user/group of processes
+; Note: The user is mandatory. If the group is not set, the default user's group
+;       will be used.
+user = www-data
+group = www-data
+
+; The address on which to accept FastCGI requests.
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Note: This value is mandatory.
+listen = /run/php/php8.1-fpm.sock
+
+; Set listen(2) backlog.
+; Default Value: 511 (-1 on FreeBSD and OpenBSD)
+;listen.backlog = 511
+
+; Set permissions for unix socket, if one is used. In Linux, read/write
+; permissions must be set in order to allow connections from a web server. Many
+; BSD-derived systems allow connections regardless of permissions. The owner
+; and group can be specified either by name or by their numeric IDs.
+; Default Values: user and group are set as the running user
+;                 mode is set to 0660
+listen.owner = www-data
+listen.group = www-data
+;listen.mode = 0660
+; When POSIX Access Control Lists are supported you can set them using
+; these options, value is a comma separated list of user/group names.
+; When set, listen.owner and listen.group are ignored
+;listen.acl_users =
+;listen.acl_groups =
+
+; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
+; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
+; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
+; must be separated by a comma. If this value is left blank, connections will be
+; accepted from any ip address.
+; Default Value: any
+;listen.allowed_clients = 127.0.0.1
+
+; Specify the nice(2) priority to apply to the pool processes (only if set)
+; The value can vary from -19 (highest priority) to 20 (lower priority)
+; Note: - It will only work if the FPM master process is launched as root
+;       - The pool processes will inherit the master process priority
+;         unless it specified otherwise
+; Default Value: no set
+; process.priority = -19
+
+; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user
+; or group is different than the master process user. It allows to create process
+; core dump and ptrace the process for the pool user.
+; Default Value: no
+; process.dumpable = yes
+
+; Choose how the process manager will control the number of child processes.
+; Possible Values:
+;   static  - a fixed number (pm.max_children) of child processes;
+;   dynamic - the number of child processes are set dynamically based on the
+;             following directives. With this process management, there will be
+;             always at least 1 children.
+;             pm.max_children      - the maximum number of children that can
+;                                    be alive at the same time.
+;             pm.start_servers     - the number of children created on startup.
+;             pm.min_spare_servers - the minimum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is less than this
+;                                    number then some children will be created.
+;             pm.max_spare_servers - the maximum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is greater than this
+;                                    number then some children will be killed.
+;             pm.max_spawn_rate    - the maximum number of rate to spawn child
+;                                    processes at once.
+;  ondemand - no children are created at startup. Children will be forked when
+;             new requests will connect. The following parameter are used:
+;             pm.max_children           - the maximum number of children that
+;                                         can be alive at the same time.
+;             pm.process_idle_timeout   - The number of seconds after which
+;                                         an idle process will be killed.
+; Note: This value is mandatory.
+pm = dynamic
+
+; The number of child processes to be created when pm is set to 'static' and the
+; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
+; This value sets the limit on the number of simultaneous requests that will be
+; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
+; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
+; CGI. The below defaults are based on a server without much resources. Don't
+; forget to tweak pm.* to fit your needs.
+; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
+; Note: This value is mandatory.
+pm.max_children = 5
+
+; The number of child processes created on startup.
+; Note: Used only when pm is set to 'dynamic'
+; Default Value: (min_spare_servers + max_spare_servers) / 2
+pm.start_servers = 2
+
+; The desired minimum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.min_spare_servers = 1
+
+; The desired maximum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.max_spare_servers = 3
+
+; The number of rate to spawn child processes at once.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+; Default Value: 32
+;pm.max_spawn_rate = 32
+
+; The number of seconds after which an idle process will be killed.
+; Note: Used only when pm is set to 'ondemand'
+; Default Value: 10s
+;pm.process_idle_timeout = 10s;
+
+; The number of requests each child process should execute before respawning.
+; This can be useful to work around memory leaks in 3rd party libraries. For
+; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
+; Default Value: 0
+;pm.max_requests = 500
+
+; The URI to view the FPM status page. If this value is not set, no URI will be
+; recognized as a status page. It shows the following information:
+;   pool                 - the name of the pool;
+;   process manager      - static, dynamic or ondemand;
+;   start time           - the date and time FPM has started;
+;   start since          - number of seconds since FPM has started;
+;   accepted conn        - the number of request accepted by the pool;
+;   listen queue         - the number of request in the queue of pending
+;                          connections (see backlog in listen(2));
+;   max listen queue     - the maximum number of requests in the queue
+;                          of pending connections since FPM has started;
+;   listen queue len     - the size of the socket queue of pending connections;
+;   idle processes       - the number of idle processes;
+;   active processes     - the number of active processes;
+;   total processes      - the number of idle + active processes;
+;   max active processes - the maximum number of active processes since FPM
+;                          has started;
+;   max children reached - number of times, the process limit has been reached,
+;                          when pm tries to start more children (works only for
+;                          pm 'dynamic' and 'ondemand');
+; Value are updated in real time.
+; Example output:
+;   pool:                 www
+;   process manager:      static
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          62636
+;   accepted conn:        190460
+;   listen queue:         0
+;   max listen queue:     1
+;   listen queue len:     42
+;   idle processes:       4
+;   active processes:     11
+;   total processes:      15
+;   max active processes: 12
+;   max children reached: 0
+;
+; By default the status page output is formatted as text/plain. Passing either
+; 'html', 'xml' or 'json' in the query string will return the corresponding
+; output syntax. Example:
+;   http://www.foo.bar/status
+;   http://www.foo.bar/status?json
+;   http://www.foo.bar/status?html
+;   http://www.foo.bar/status?xml
+;
+; By default the status page only outputs short status. Passing 'full' in the
+; query string will also return status for each pool process.
+; Example:
+;   http://www.foo.bar/status?full
+;   http://www.foo.bar/status?json&full
+;   http://www.foo.bar/status?html&full
+;   http://www.foo.bar/status?xml&full
+; The Full status returns for each process:
+;   pid                  - the PID of the process;
+;   state                - the state of the process (Idle, Running, ...);
+;   start time           - the date and time the process has started;
+;   start since          - the number of seconds since the process has started;
+;   requests             - the number of requests the process has served;
+;   request duration     - the duration in µs of the requests;
+;   request method       - the request method (GET, POST, ...);
+;   request URI          - the request URI with the query string;
+;   content length       - the content length of the request (only with POST);
+;   user                 - the user (PHP_AUTH_USER) (or '-' if not set);
+;   script               - the main script called (or '-' if not set);
+;   last request cpu     - the %cpu the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because CPU calculation is done when the request
+;                          processing has terminated;
+;   last request memory  - the max amount of memory the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because memory calculation is done when the request
+;                          processing has terminated;
+; If the process is in Idle state, then informations are related to the
+; last request the process has served. Otherwise informations are related to
+; the current request being served.
+; Example output:
+;   ************************
+;   pid:                  31330
+;   state:                Running
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          63087
+;   requests:             12808
+;   request duration:     1250261
+;   request method:       GET
+;   request URI:          /test_mem.php?N=10000
+;   content length:       0
+;   user:                 -
+;   script:               /home/fat/web/docs/php/test_mem.php
+;   last request cpu:     0.00
+;   last request memory:  0
+;
+; Note: There is a real-time FPM status monitoring sample web page available
+;       It's available in: /usr/share/php/8.1/fpm/status.html
+;
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;pm.status_path = /status
+
+; The address on which to accept FastCGI status request. This creates a new
+; invisible pool that can handle requests independently. This is useful
+; if the main pool is busy with long running requests because it is still possible
+; to get the status before finishing the long running requests.
+;
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Default Value: value of the listen option
+;pm.status_listen = 127.0.0.1:9001
+
+; The ping URI to call the monitoring page of FPM. If this value is not set, no
+; URI will be recognized as a ping page. This could be used to test from outside
+; that FPM is alive and responding, or to
+; - create a graph of FPM availability (rrd or such);
+; - remove a server from a group if it is not responding (load balancing);
+; - trigger alerts for the operating team (24/7).
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;ping.path = /ping
+
+; This directive may be used to customize the response of a ping request. The
+; response is formatted as text/plain with a 200 response code.
+; Default Value: pong
+;ping.response = pong
+
+; The access log file
+; Default: not set
+;access.log = log/$pool.access.log
+
+; The access log format.
+; The following syntax is allowed
+;  %%: the '%' character
+;  %C: %CPU used by the request
+;      it can accept the following format:
+;      - %{user}C for user CPU only
+;      - %{system}C for system CPU only
+;      - %{total}C  for user + system CPU (default)
+;  %d: time taken to serve the request
+;      it can accept the following format:
+;      - %{seconds}d (default)
+;      - %{milliseconds}d
+;      - %{milli}d
+;      - %{microseconds}d
+;      - %{micro}d
+;  %e: an environment variable (same as $_ENV or $_SERVER)
+;      it must be associated with embraces to specify the name of the env
+;      variable. Some examples:
+;      - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
+;      - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
+;  %f: script filename
+;  %l: content-length of the request (for POST request only)
+;  %m: request method
+;  %M: peak of memory allocated by PHP
+;      it can accept the following format:
+;      - %{bytes}M (default)
+;      - %{kilobytes}M
+;      - %{kilo}M
+;      - %{megabytes}M
+;      - %{mega}M
+;  %n: pool name
+;  %o: output header
+;      it must be associated with embraces to specify the name of the header:
+;      - %{Content-Type}o
+;      - %{X-Powered-By}o
+;      - %{Transfert-Encoding}o
+;      - ....
+;  %p: PID of the child that serviced the request
+;  %P: PID of the parent of the child that serviced the request
+;  %q: the query string
+;  %Q: the '?' character if query string exists
+;  %r: the request URI (without the query string, see %q and %Q)
+;  %R: remote IP address
+;  %s: status (response code)
+;  %t: server time the request was received
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsulated in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %T: time the log has been written (the request has finished)
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsulated in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %u: remote user
+;
+; Default: "%R - %u %t \"%m %r\" %s"
+;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{milli}d %{kilo}M %C%%"
+
+; The log file for slow requests
+; Default Value: not set
+; Note: slowlog is mandatory if request_slowlog_timeout is set
+;slowlog = log/$pool.log.slow
+
+; The timeout for serving a single request after which a PHP backtrace will be
+; dumped to the 'slowlog' file. A value of '0s' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_slowlog_timeout = 0
+
+; Depth of slow log stack trace.
+; Default Value: 20
+;request_slowlog_trace_depth = 20
+
+; The timeout for serving a single request after which the worker process will
+; be killed. This option should be used when the 'max_execution_time' ini option
+; does not stop script execution for some reason. A value of '0' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_terminate_timeout = 0
+
+; The timeout set by 'request_terminate_timeout' ini option is not engaged after
+; application calls 'fastcgi_finish_request' or when application has finished and
+; shutdown functions are being called (registered via register_shutdown_function).
+; This option will enable timeout limit to be applied unconditionally
+; even in such cases.
+; Default Value: no
+;request_terminate_timeout_track_finished = no
+
+; Set open file descriptor rlimit.
+; Default Value: system defined value
+;rlimit_files = 1024
+
+; Set max core size rlimit.
+; Possible Values: 'unlimited' or an integer greater or equal to 0
+; Default Value: system defined value
+;rlimit_core = 0
+
+; Chroot to this directory at the start. This value must be defined as an
+; absolute path. When this value is not set, chroot is not used.
+; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
+; of its subdirectories. If the pool prefix is not set, the global prefix
+; will be used instead.
+; Note: chrooting is a great security feature and should be used whenever
+;       possible. However, all PHP paths will be relative to the chroot
+;       (error_log, sessions.save_path, ...).
+; Default Value: not set
+;chroot =
+
+; Chdir to this directory at the start.
+; Note: relative path can be used.
+; Default Value: current directory or / when chroot
+;chdir = /var/www
+
+; Redirect worker stdout and stderr into main error log. If not set, stdout and
+; stderr will be redirected to /dev/null according to FastCGI specs.
+; Note: on highloaded environment, this can cause some delay in the page
+; process time (several ms).
+; Default Value: no
+;catch_workers_output = yes
+
+; Decorate worker output with prefix and suffix containing information about
+; the child that writes to the log and if stdout or stderr is used as well as
+; log level and time. This options is used only if catch_workers_output is yes.
+; Settings to "no" will output data as written to the stdout or stderr.
+; Default value: yes
+;decorate_workers_output = no
+
+; Clear environment in FPM workers
+; Prevents arbitrary environment variables from reaching FPM worker processes
+; by clearing the environment in workers before env vars specified in this
+; pool configuration are added.
+; Setting to "no" will make all environment variables available to PHP code
+; via getenv(), $_ENV and $_SERVER.
+; Default Value: yes
+;clear_env = no
+
+; Limits the extensions of the main script FPM will allow to parse. This can
+; prevent configuration mistakes on the web server side. You should only limit
+; FPM to .php extensions to prevent malicious users to use other extensions to
+; execute php code.
+; Note: set an empty value to allow all extensions.
+; Default Value: .php
+;security.limit_extensions = .php .php3 .php4 .php5 .php7
+
+; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
+; the current environment.
+; Default Value: clean env
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /tmp
+;env[TMPDIR] = /tmp
+;env[TEMP] = /tmp
+
+; Additional php.ini defines, specific to this pool of workers. These settings
+; overwrite the values previously defined in the php.ini. The directives are the
+; same as the PHP SAPI:
+;   php_value/php_flag             - you can set classic ini defines which can
+;                                    be overwritten from PHP call 'ini_set'.
+;   php_admin_value/php_admin_flag - these directives won't be overwritten by
+;                                     PHP call 'ini_set'
+; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
+
+; Defining 'extension' will load the corresponding shared extension from
+; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
+; overwrite previously defined php.ini values, but will append the new value
+; instead.
+
+; Note: path INI options can be relative and will be expanded with the prefix
+; (pool, global or /usr)
+
+; Default Value: nothing is defined by default except the values in php.ini and
+;                specified at startup with the -d argument
+;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
+;php_flag[display_errors] = off
+;php_admin_value[error_log] = /var/log/fpm-php.www.log
+;php_admin_flag[log_errors] = on
+;php_admin_value[memory_limit] = 32M

From c7b872b7787c38b89cc2683b2abf369bb920c024 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 16:28:16 +0100
Subject: [PATCH 1638/2300] check_if_service_exists() function

---
 func/main.sh | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/func/main.sh b/func/main.sh
index a92bb59a..69737c72 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -1114,3 +1114,11 @@ send_email_to_admin() {
     fi
     echo "$2" | $SENDMAIL -s "$1" "$email" 'yes'
 }
+
+check_if_service_exists() {
+    if [ $(systemctl list-units --all -t service --full --no-legend | grep -c "$1") -gt 0 ]; then
+        echo "1"
+    else
+        echo "0"
+    fi
+}

From 77de50a6cd759b0ded4b67f9b5a0dcf522af92b2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 16:31:21 +0100
Subject: [PATCH 1639/2300] Create v-ensure-poold-folders-not-empty

---
 bin/v-ensure-poold-folders-not-empty | 31 ++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 bin/v-ensure-poold-folders-not-empty

diff --git a/bin/v-ensure-poold-folders-not-empty b/bin/v-ensure-poold-folders-not-empty
new file mode 100644
index 00000000..cb89765f
--- /dev/null
+++ b/bin/v-ensure-poold-folders-not-empty
@@ -0,0 +1,31 @@
+#!/bin/bash
+# info: ensure that pool.d folders are not empty
+# options: 
+#
+# The function ensure that pool.d folders are not empty
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Includes
+source $VESTA/func/main.sh
+source $VESTA/func/domain.sh
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+ensure_poold_folders_not_empty
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 3c17e159a1ceafd88c627381d29e6608e462f899 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 16:49:24 +0100
Subject: [PATCH 1640/2300] Ensure that pool.d folders are not empty

---
 func/domain.sh | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/func/domain.sh b/func/domain.sh
index 6bd05b91..9310e9c4 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -590,3 +590,28 @@ is_domain_new() {
 get_domain_values() {
     eval $(grep "DOMAIN='$domain'" $USER_DATA/$1.conf)
 }
+
+# Ensure that pool.d folders are not empty
+ensure_poold_folders_not_empty () {
+    for D in /etc/php/*; do
+        if [ -d "${D}" ]; then
+            BD=$(basename ${D})
+            POOLD="${D}/fpm/pool.d"
+            if [ -d "$POOLD" ]; then
+                # echo $POOLD
+                # service_to_check="php${BD}-fpm"
+                # service_exists=$(check_if_service_exists $service_to_check)
+                # if [ $service_exists -eq 1 ]; then
+                    # echo "$BD = $service_to_check = $POOLD = $service_exists"
+                    ls=$(ls $POOLD | grep -c '.conf')
+                    if [ $ls -eq 0 ]; then
+                        # echo "$BD = $POOLD = $ls"
+                        if [ -f "/usr/local/vesta/src/deb/for-download/tools/default-pool.d/$BD/www.conf" ] && [ ! -f "/etc/php/$BD/fpm/pool.d/www.conf" ]; then
+                            cp /usr/local/vesta/src/deb/for-download/tools/default-pool.d/$BD/www.conf /etc/php/$BD/fpm/pool.d/www.conf
+                        fi
+                    fi
+                # fi
+            fi
+        fi
+    done
+}

From 9c04bb8417530d31713b0efac416715ea832ad4c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 17:25:19 +0100
Subject: [PATCH 1641/2300] Ensure pool.d folders after template changes

---
 func/domain.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/func/domain.sh b/func/domain.sh
index 9310e9c4..f2a45e71 100644
--- a/func/domain.sh
+++ b/func/domain.sh
@@ -225,6 +225,10 @@ add_web_config() {
             $user $domain $local_ip $HOMEDIR \
             $HOMEDIR/$user/web/$domain/public_html
     fi
+
+    if [[ "$2" =~ ^PHP-FPM ]]; then
+        ensure_poold_folders_not_empty
+    fi
 }
 
 # Get config top and bottom line number

From 353526d2897944357275b734c9a410843528ab83 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 17:31:50 +0100
Subject: [PATCH 1642/2300] Update postinst

---
 src/deb/vesta/postinst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index d06501bd..de6fa3b0 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -15,6 +15,8 @@ if [ ! -e "/usr/local/vesta/data/users/admin" ]; then
     exit
 fi
 
+/usr/local/vesta/bin/v-ensure-poold-folders-not-empty
+
 if [ ! -d "/usr/local/vesta/data/upgrades" ]; then
     mkdir -p /usr/local/vesta/data/upgrades
 fi

From 3b9d81bc807039483282348abebf9e184e1725cc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 17:32:45 +0100
Subject: [PATCH 1643/2300] Version 0.9.8-26-53

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index e61c21d3..1fa6aa49 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-52
+vesta-0.9.8-26-53

From 5631e6d732b89ca215ee790321f67bf19f8f25bc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 17:35:18 +0100
Subject: [PATCH 1644/2300] Update Changelog.md

---
 Changelog.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 9e9a1390..ca274724 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,8 @@
+Version 0.9.8-26-53 [12-Dec-2021]
+==================================================
+* Support for PHP 8.1
+* Function to ensure that pool.d folders are not empty
+
 Version 0.9.8-26-52 [23-Nov-2021]
 ==================================================
 * Fix for not to match wildcard "*domains" and "databases*" while restoring

From c03d8cd75eab317feb7e0753b40a6c6c3ddfe9af Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 19:25:40 +0100
Subject: [PATCH 1645/2300] PHP-FPM 8.1 templates

---
 .../tools/apache-fpm-tpl/PHP-FPM-81-public.sh | 112 ++++++++++++++++++
 .../apache-fpm-tpl/PHP-FPM-81-public.stpl     |  44 +++++++
 .../apache-fpm-tpl/PHP-FPM-81-public.tpl      |  38 ++++++
 .../tools/apache-fpm-tpl/PHP-FPM-81.sh        | 112 ++++++++++++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-81.stpl      |  44 +++++++
 .../tools/apache-fpm-tpl/PHP-FPM-81.tpl       |  38 ++++++
 6 files changed, 388 insertions(+)
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.tpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.tpl

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.sh
new file mode 100644
index 00000000..67c8ccfb
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.sh
@@ -0,0 +1,112 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php8.1-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 90s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 30
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_81" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_81)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_81
+    systemctl reset-failed php8.1-fpm
+    systemctl restart php8.1-fpm
+fi
+if [ -f "/etc/php/8.1/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.1/fpm/pool.d/www.conf
+fi
+
+exit 0
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.stpl
new file mode 100644
index 00000000..0d6404ec
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.1-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.tpl
new file mode 100644
index 00000000..f2814063
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.1-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.sh
new file mode 100644
index 00000000..67c8ccfb
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.sh
@@ -0,0 +1,112 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php8.1-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 90s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 80M
+php_admin_value[max_execution_time] = 30
+php_admin_value[post_max_size] = 80M
+php_admin_value[memory_limit] = 256M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_81" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_81)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_81
+    systemctl reset-failed php8.1-fpm
+    systemctl restart php8.1-fpm
+fi
+if [ -f "/etc/php/8.1/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.1/fpm/pool.d/www.conf
+fi
+
+exit 0
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.stpl
new file mode 100644
index 00000000..fb191d03
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.1-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.tpl
new file mode 100644
index 00000000..1a02ec15
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.1-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+

From a17af106fdf529355f69dc26325263901471524c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 19:38:43 +0100
Subject: [PATCH 1646/2300] Support for PHP 8.1

---
 .../for-download/tools/multi-php-install.sh   | 59 ++++++++++++++-----
 1 file changed, 45 insertions(+), 14 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 6d30ab25..9380fe25 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -11,6 +11,7 @@ inst_72=0
 inst_73=0
 inst_74=0
 inst_80=0
+inst_81=0
 
 #######################################################################
 
@@ -48,8 +49,11 @@ fi
 if [ $# -gt 7 ]; then
     inst_80=$8
 fi
+if [ $# -gt 8 ]; then
+    inst_81=$9
+fi
 
-if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ] || [ $inst_74 -eq 1 ] || [ $inst_80 -eq 1 ]; then
+if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ] || [ $inst_74 -eq 1 ] || [ $inst_80 -eq 1 ] || [ $inst_81 -eq 1 ]; then
     inst_repo=1
 fi
 
@@ -277,23 +281,50 @@ if [ "$inst_80" -eq 1 ]; then
     press_enter "=== PHP 8.0 installed, press enter to continue ==============================================================================="
 fi
 
+if [ "$inst_81" -eq 1 ]; then
+    press_enter "=== Press enter to install PHP 8.1 ==============================================================================="
+    apt -y install php8.1-mbstring php8.1-bcmath php8.1-cli php8.1-curl php8.1-fpm php8.1-gd php8.1-intl php8.1-mysql php8.1-soap php8.1-xml php8.1-zip php8.1-memcache php8.1-memcached
+    update-rc.d php8.1-fpm defaults
+    a2enconf php8.1-fpm
+    a2dismod php8.1
+    apt-get -y remove libapache2-mod-php8.1
+    systemctl restart apache2
+    cp -r /etc/php/8.1/ /root/vst_install_backups/php8.1/
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-81.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-81.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-81.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-81.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-81.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-81.sh
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-81-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-81-public.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-81-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-81-public.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-81-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-81-public.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-81.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-81-public.sh
+    echo "=== Patching php.ini for php8.1"
+    wget -nv https://c.myvestacp.com/tools/patches/php8.0.patch -O /root/php8.1.patch
+    patch /etc/php/8.1/fpm/php.ini < /root/php8.1.patch
+    if [ $memory -gt 9999999 ]; then
+        sed -i "s|opcache.memory_consumption=512|opcache.memory_consumption=2048|g" /etc/php/8.1/fpm/php.ini
+    fi
+    service php8.1-fpm restart
+    press_enter "=== PHP 8.1 installed, press enter to continue ==============================================================================="
+fi
+
 
 apt update
 apt upgrade -y
 
 if [ $debian_version -ge 10 ]; then
-    a2dismod ruid2
-    a2dismod suexec
-    a2dismod php5.6
-    a2dismod php7.0
-    a2dismod php7.1
-    a2dismod php7.2
-    a2dismod php7.3
-    a2dismod php7.4
-    a2dismod php8.0
-    a2dismod php8.1
-    a2dismod mpm_prefork
-    a2enmod mpm_event
-    apt-get -y remove libapache2-mod-php*
+    a2dismod ruid2 > /dev/null 2>&1
+    a2dismod suexec > /dev/null 2>&1
+    a2dismod php5.6 > /dev/null 2>&1
+    a2dismod php7.0 > /dev/null 2>&1
+    a2dismod php7.1 > /dev/null 2>&1
+    a2dismod php7.2 > /dev/null 2>&1
+    a2dismod php7.3 > /dev/null 2>&1
+    a2dismod php7.4 > /dev/null 2>&1
+    a2dismod php8.0 > /dev/null 2>&1
+    a2dismod php8.1 > /dev/null 2>&1
+    a2dismod mpm_prefork > /dev/null 2>&1
+    a2enmod mpm_event > /dev/null 2>&1
+    apt-get -y remove libapache2-mod-php* > /dev/null 2>&1
     service apache2 restart
 fi

From 549ba4e1546437aabdbd2add33a8b3e9e0042341 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 19:39:37 +0100
Subject: [PATCH 1647/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 9380fe25..20badca8 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -309,8 +309,8 @@ if [ "$inst_81" -eq 1 ]; then
 fi
 
 
-apt update
-apt upgrade -y
+apt update > /dev/null 2>&1
+apt upgrade -y > /dev/null 2>&1
 
 if [ $debian_version -ge 10 ]; then
     a2dismod ruid2 > /dev/null 2>&1

From 71bdbfbcf533b5464b71a1ae0cacb90b0226e2b0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 20:27:57 +0100
Subject: [PATCH 1648/2300] php8.1.patch

---
 .../for-download/tools/patches/php8.1.patch   | 77 +++++++++++++++++++
 1 file changed, 77 insertions(+)
 create mode 100644 src/deb/for-download/tools/patches/php8.1.patch

diff --git a/src/deb/for-download/tools/patches/php8.1.patch b/src/deb/for-download/tools/patches/php8.1.patch
new file mode 100644
index 00000000..479af689
--- /dev/null
+++ b/src/deb/for-download/tools/patches/php8.1.patch
@@ -0,0 +1,77 @@
+--- /etc/php/8.1/fpm/php.ini.orig	2021-11-25 21:48:52.000000000 +0100
++++ /etc/php/8.1/fpm/php.ini	2021-12-12 20:25:01.000000000 +0100
+@@ -320,7 +320,7 @@
+ ; This directive allows you to disable certain functions.
+ ; It receives a comma-delimited list of function names.
+ ; https://php.net/disable-functions
+-disable_functions = 
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes.
+ ; It receives a comma-delimited list of class names.
+@@ -423,11 +423,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume
+ ; https://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -695,7 +695,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; https://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 50M
+ 
+ ; Automatically add files before PHP document.
+ ; https://php.net/auto-prepend-file
+@@ -847,7 +847,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; https://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1093,7 +1093,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1764,20 +1764,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=512
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5

From d399d74fd98de86e88e160469cc479021d1c8e08 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 20:29:25 +0100
Subject: [PATCH 1649/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 20badca8..1b3ff855 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -299,7 +299,7 @@ if [ "$inst_81" -eq 1 ]; then
     chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-81.sh
     chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-81-public.sh
     echo "=== Patching php.ini for php8.1"
-    wget -nv https://c.myvestacp.com/tools/patches/php8.0.patch -O /root/php8.1.patch
+    wget -nv https://c.myvestacp.com/tools/patches/php8.1.patch -O /root/php8.1.patch
     patch /etc/php/8.1/fpm/php.ini < /root/php8.1.patch
     if [ $memory -gt 9999999 ]; then
         sed -i "s|opcache.memory_consumption=512|opcache.memory_consumption=2048|g" /etc/php/8.1/fpm/php.ini

From 4ec64b019162cd6d53a2dd93ea1aa3651e9d6426 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 21:14:15 +0100
Subject: [PATCH 1650/2300] Update keep_mpm_event.sh

---
 upd/keep_mpm_event.sh | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/upd/keep_mpm_event.sh b/upd/keep_mpm_event.sh
index 36ccae5f..9095a601 100644
--- a/upd/keep_mpm_event.sh
+++ b/upd/keep_mpm_event.sh
@@ -21,8 +21,8 @@ if [ "$1" = 'background' ]; then
             if [ "$check_grep" -eq 1 ]; then
                 echo "=== OK, we have Apache2"
                 release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
-                if [ "$release" -eq 10 ]; then
-                    echo "=== OK, it's Debian 10"
+                if [ "$release" -ge 10 ]; then
+                    echo "=== OK, it's Debian 10 or 11"
                     switch_to_mpm_event=1
                 else
                     check_grep=$(/usr/local/vesta/bin/v-list-sys-web-status | grep -c "Server MPM: event")
@@ -40,6 +40,7 @@ fi
 
 if [ "$switch_to_mpm_event" -eq 1 ]; then
     echo "=== OK, let's ensure mpm_event"
+
     a2dismod ruid2 > /dev/null 2>&1
     a2dismod suexec > /dev/null 2>&1
     a2dismod php5.6 > /dev/null 2>&1
@@ -49,10 +50,10 @@ if [ "$switch_to_mpm_event" -eq 1 ]; then
     a2dismod php7.3 > /dev/null 2>&1
     a2dismod php7.4 > /dev/null 2>&1
     a2dismod php8.0 > /dev/null 2>&1
+    a2dismod php8.1 > /dev/null 2>&1
     a2dismod mpm_prefork > /dev/null 2>&1
     a2enmod mpm_event > /dev/null 2>&1
-    apt-get -y remove libapache2-mod-php7.4 > /dev/null 2>&1
-    apt-get -y remove libapache2-mod-php8.0 > /dev/null 2>&1
+    apt-get -y remove libapache2-mod-php* > /dev/null 2>&1
     service apache2 restart
     echo "=== Done!"
 fi

From 98dcbbc691549d2145695e3da864a3d79c8cbae6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 21:16:22 +0100
Subject: [PATCH 1651/2300] Update postinst

---
 src/deb/vesta/postinst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index de6fa3b0..01b6ac48 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -211,8 +211,8 @@ if [ $(systemctl list-unit-files | grep clamav-daemon | grep -c "disabled") -eq
 fi
 
 # Making sure mpm_event will stay
-if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event-2" ]; then
-    touch /usr/local/vesta/data/upgrades/keeping-mpm-event-2
+if [ ! -f "/usr/local/vesta/data/upgrades/keeping-mpm-event-3" ]; then
+    touch /usr/local/vesta/data/upgrades/keeping-mpm-event-3
     echo "=== scheduling keeping-mpm-event check script"
     echo "bash /usr/local/vesta/upd/keep_mpm_event.sh 'background' >> /usr/local/vesta/data/upgrades/keeping-mpm-event.log 2>&1" >> /usr/local/vesta/data/queue/restart.pipe
     /usr/local/vesta/bin/v-add-cron-restart-job > /dev/null 2>&1

From 93d8ca4a81f9d9043d70d0feff3019239b71d561 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Dec 2021 21:17:24 +0100
Subject: [PATCH 1652/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 4f48ca0b..fef0b8f7 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1730,6 +1730,7 @@ touch /usr/local/vesta/data/upgrades/change-clamav-socket-v3
 touch /usr/local/vesta/data/upgrades/change-clamav-socket-v4
 touch /usr/local/vesta/data/upgrades/keeping-mpm-event
 touch /usr/local/vesta/data/upgrades/keeping-mpm-event-2
+touch /usr/local/vesta/data/upgrades/keeping-mpm-event-3
 touch /usr/local/vesta/data/upgrades/fix_ssl_directive_in_templates
 touch /usr/local/vesta/data/upgrades/clamav_block_exe_in_archives
 touch /usr/local/vesta/data/upgrades/clearing-letsencrypt-pipe

From 39fd40f0cc4e67533d4d39c3ed4dc889604c9e82 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 13 Dec 2021 00:57:03 +0100
Subject: [PATCH 1653/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 1b3ff855..e847df17 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -81,6 +81,7 @@ echo "inst_72=$inst_72"
 echo "inst_73=$inst_73"
 echo "inst_74=$inst_74"
 echo "inst_80=$inst_80"
+echo "inst_81=$inst_81"
 echo "wait_to_press_enter=$wait_to_press_enter"
 
 press_enter "=== Press enter to continue ==============================================================================="

From 11b5f0d9c763d86bf52715fa2107a39ab5ea102a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 16 Dec 2021 23:53:46 +0100
Subject: [PATCH 1654/2300] Delete create_wp_http

---
 src/deb/for-download/tools/create_wp_http | 104 ----------------------
 1 file changed, 104 deletions(-)
 delete mode 100644 src/deb/for-download/tools/create_wp_http

diff --git a/src/deb/for-download/tools/create_wp_http b/src/deb/for-download/tools/create_wp_http
deleted file mode 100644
index a3d69cf4..00000000
--- a/src/deb/for-download/tools/create_wp_http
+++ /dev/null
@@ -1,104 +0,0 @@
-#!/bin/bash
-
-if [ $# -lt 1 ]; then
-    echo usage: create_wp_http domain [db_name] [email]
-    exit 1
-fi
-
-domain=$1
-
-PATH=$PATH:/usr/local/vesta/bin
-export PATH
-
-user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
-
-START_DB="wp";
-if [ $# -gt 1 ]; then
-    START_DB=$2
-fi
-
-email="info@$domain";
-if [ $# -gt 2 ]; then
-    email=$3
-fi
-
-if [ ! -d "/home/$user" ]; then
-    echo "User doesn't exist";
-    exit 1;
-fi
-
-if [ ! -d "/home/$user/web/$domain/public_html" ]; then
-    echo "Domain doesn't exist";
-    exit 1;
-fi
-
-WORKINGDIR="/home/$user/web/$domain/public_html"
-# FILE=latest.tar.gz
-
-rm -rf $WORKINGDIR/*
-
-#DBUSERSUF=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 5 | head -n 1)
-DBUSERSUF="$START_DB";
-DBUSERSUFB="$START_DB";
-DBUSER=$user\_$DBUSERSUFB;
-DB_OK=0;
-if [ ! -d "/var/lib/mysql/$DBUSER" ]; then
-    DB_OK=1;
-fi
-
-if [ "$DB_OK" -eq "0" ]; then
-i=1;
-while [ $i -lt 99 ]
-do
-i=$((i+1));
-DBUSERSUF="${DBUSERSUFB}${i}";
-DBUSER=$user\_$DBUSERSUF;
-if [ ! -d "/var/lib/mysql/$DBUSER" ]; then
-break;
-fi
-done
-fi
-
-PASSWDDB=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1)
-
-v-add-database $user $DBUSERSUF $DBUSERSUF $PASSWDDB mysql
-
-cd /home/$user
-
-rm -rf /home/$user/wp
-curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
-chmod +x wp-cli.phar
-sudo mv wp-cli.phar wp
-
-cd /home/$user/web/$domain/public_html
-
-sudo -H -u$user /home/$user/wp core download
-sudo -H -u$user /home/$user/wp core config --dbname=$DBUSER --dbuser=$DBUSER --dbpass=$PASSWDDB
-
-password=$(LC_CTYPE=C tr -dc A-Za-z0-9_\!\@\#\$\%\^\&\*\(\)-+= < /dev/urandom | head -c 12)
-
-sudo -H -u$user /home/$user/wp core install --url="$domain" --title="$domain" --admin_user="admin" --admin_password="$password" --admin_email="$email" --path=$WORKINGDIR
-
-#FIX za https://github.com/wp-cli/wp-cli/issues/2632
-
-mysql -u$DBUSER -p$PASSWDDB -e "USE $DBUSER; update wp_options set option_value = 'http://$domain' where option_name = 'siteurl'; update wp_options set option_value = 'http://$domain' where option_name = 'home';"
-
-# clear
-
-echo "================================================================="
-echo "Installation is complete. Your username/password is listed below."
-echo ""
-echo "Site: http://$domain/"
-echo ""
-echo "Login: http://$domain/wp-admin/"
-echo "Username: admin"
-echo "Password: $password"
-echo ""
-echo "================================================================="
-
-chown -R $user:$user $WORKINGDIR
-
-rm -rf /home/$user/wp
-
-echo "create_wp: Done."
-exit 0
\ No newline at end of file

From 5b9672b26f0613a1f4dac641d719e7ebc8744362 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 16 Dec 2021 23:56:59 +0100
Subject: [PATCH 1655/2300] Add files via upload

---
 .../for-download/tools/roundcube-filters.tgz    | Bin 0 -> 13187 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)
 create mode 100644 src/deb/for-download/tools/roundcube-filters.tgz

diff --git a/src/deb/for-download/tools/roundcube-filters.tgz b/src/deb/for-download/tools/roundcube-filters.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..c7c496906d78e603e3ae069f0d5167ecee86d7e1
GIT binary patch
literal 13187
zcmV-}GknY+iwFSmiMC+?1MFSva}!6l=WF~|bh)<HkYLGAxbYe%gh!HvfQ!f7yGd=S
z+M1TsFc0lKZ0x<Mifst6K#`l9kdTlNZb$+IVoWd){NRJ^ud@6%7@6>2+|xY|jWjcw
zkq{=kQKy2XneKB=pYHzsx~ET%QdHE5s>L@v$J7C7Yi}?A3#sxi|J>Qr+1uOO(X+L;
zXG2G4XIJ-@4XF2d8f7O#)3J)s231k?YWc$M|BI%S)&5zWJc`pKc1#i*u7fr3mY$xV
z_V4Z9+P$H(ySEeiKu_-$xZc?f-!`C*hFjv3e&_Aq{~EM78ip=F6?t20XRM<Y5jm*{
zR8DVeJ$z_)`+u~)Hqg><^$!HOWo=t)M%S}_@pzVCHI~g}V=~d>f-czIsJ)BH;d%RX
ztR1aVg5PfMEag9@Q78Av$VhCYJEo}VcvnY9XZ*k3*?TaVArfw<GPIkVB(2C&sk-X$
zDwF1XH*L{qpT>*sRgzfeH$qKnL6Aao#g1u0)toM;M9s%!whpws)GuR+3|ND-KhD2#
z8U2Pz2bds@NfM1TI3%VjhAbqFA;Lvk;<UJPIqnEzr9rx8ND@{@2X=^*$a=d*1%gPs
zgsF(kto?C23*;7vmQ-n$Id5Q)t3-MR>j(>ihA@)J2-5Ko(iON&kVbSJI*|q+lB@{3
zo>U3e2}%a3gZ%w*w;IqY5-h-9%M}NdA)<n$cd@DxQKYs{;J%>|b)X&U#{RMkgh?J4
zvvR&}$W&6q7}fjZ<{g#?gKfiPV3dGUtk0k`ZYix$zFpM~6%7(yRfa1SZy`xwt?sT)
zj{%sKdL0@%nZZ<!sYVU@1#s6uS4Zco?Hya%J6{FounTa*>fKxhRF7Z{^2MO%^vCV5
zTzr<=m)S=qx>T|shR_fdsXkgJhFukjSB`z%7UVA7FVZBDHG-gHnFC9+hHqLn`1rLl
zXmOm*itXLd#Z@Dg(Iv5U;LUx9(VK&Nhr9djT)gKiI?-5rnjhdwQjvA&HyXD{peh;y
z^EeQQB7EJ}8gE6cQP>BT=cRt=Rm8dkg;O*gqjHjsxmKhqB3xx32m0B#Af6J|V5v3x
z5zWpGZG{7~ivU9+9pg|GPil!B?=stJFDj74&Rz8tC1T>u19cXa6NeAhSyW5xs<UWH
zP3*4I;Ea)Y>u`NVsh)WIP<=&@;KZK?>nkdYiG6$PE1DG(gY_2G6K~Y%VJJFSr<+tI
zabSO)MUBLPI@?t{nmD+pzM{ICI8>*bjH8Le+v_VjmPs7?OXQ*lc5UDJ&aRjwM9Q61
zq^ttG1@NWFK_!5GsLHY51;sEe$P!tANh2kiMI?VWs7eG=31BAw@KV1-<$>N<HzOnV
zk>8EmxBJ<2$O3bdKCKd+o)VQA8C5wN+5Dl*9%g_=WpS9u+S8(emKQzs{!Ju%{a4oh
z4b~B|{_EVb#k2lnj{%zNzja9e;H!yN1_G^psMWJnXx(gP&_}c78QRT7hkf5QX=mA<
z+wvf0D?Ca@M-)}iK-+t*j<Kz-vhYncM8d9WSuC~w%_^BuB$5RLV0PLw)il*J#!w7K
zLEM?hSGvHOo3digjP(`!rZuZ(H~D<qzK#t&qo~|Ue&Hq4;dXKyU%9Ta$~*b^ih*VH
zE@vvUGVEqKw{z94&dv8X16Bs8cdu*$ReKgPL7I1xVInG7;#ST-*-fAl02`_+DnPX3
z8kQ=|vwNM5PL&D`RkT|%Xc-)A0;dcpUed|u_aJXz8>cCkHrK!~wX{17WESX%0Z*B_
z-nTT6W4emV<vUW!E}Qp&;M!fis592lt|lw3f4}AZ#`2bp|E1MSL&ftHhX1|Y9hLas
z)!lslw=OCE^2;sgWwhIDe)!0~JwNoe6ufSAbi}ceUon9aRpKD(_X6GkFCf?;gWTYS
z`aLMcvd3FmT4)Mw9HFwHjKtI=vuhI{gXZTL)N|J`7`~TkFta7<#x^Qby=^l}88WZp
zMl!5#vPNw@j#QFnIaLJMBw^Wn0%*yy?<K5z8{16Kh*_hoU4Z$hPTayb{lhMtR&*r+
zz!p?!695d-RfBB$6H{4}UJVadYPA4n7zP2Avxc6~V0xX*XgX^zv<*Z9TqRQAw}diu
z1X_DzTUnMi(+p$_VqW$U^v6H?h>s0p(IDHlwY6<3gF_6ks&BOY0bLECbYq*Wl<D2v
zX4R@~lWl^_3~q{7VM<9F+Qv<PYH@=qLPXSvQ_$9HP^-q8?Z1?wN-@nClBjOWaM}XC
zy}t?2*-9^ZTt`hd{+BH@8?2+Y{l9KL|L^K;?*FYv@@;?T8AW4sgz!I1wzpL9e{WCc
z)+Yb2N9unKn6jni4<a4{5Cpsjw#B0i-K<ORIWYS-xZ75^x^kf~yK;7AV&#LvgEm(-
z4W{!%D9?NuGTkoRDLg357H+#UkHFNz%<2_eCe)4iX3k417goksCJGNA?^$<VNf{=(
zVrwqUfbN;XTq$?CxhYkVth^tC?z`@Lj+8G73m{?AeJ`1G-FpPm&zIS2aK^B*{2w!*
zyy6y#TZ+LkcfmokKIU=fWK{}lBz@G%|5afI748>q^BOIzjDrPtRwlu}w^?xn)tFy7
zwQ>Q0UFCjn`GZ6>jco>&wXl8hy-IFn>RQ2v3s8Q><8xG)XNJtd?R((n2~?O~ndBCL
z;z=`OVJ_BMra?23N%)d7L~)c&Lj+ri%hUx{yJ@TCKs4xCs1Rewfr40DaWM}IxBJR{
zuwa=SCfzODY^eY<?>H?NZe)d^2xeB7E@|lmO~I6mh=SEIrV0;NPP5{V%qDB|6krc*
zVLGe@4WjbgY$zqT9=Y0hGWFeI!-v<(w0C~xJYpBTVr3;^qC~<C6XnjmZTf&KxdWY?
zDV<-ru$f<GqiN+6Z#zC%IZ@_G=CPL7nvZzHlP~`}dy0+G5w`x{+TByh|J}{!zw47~
z<$v=*K?v`^Nwh4X$qcOG2=bPwB!3^79@^g}>zUkDQ4b>g{{-d93?)NEMlw!j{HcEX
zkjA!#R6nxcC1q2&t8%*hu1)tlb_CM=8$?%0Diy@?dvo_#;E`M}4e!Jn+6_?e@&OXC
znnE&oSVtluDq>*}(fHQ%H6m(C5z{JbB$O_-R#dXxO){`V@3Y$0vLskeARGExBXWmT
zx20T)zcv1HyzKcGBFo@W)5~GZDM0^vTh3s!Cx);lHc}&mYWijn4?2dOK8gfN&_3v<
zDz}w_evrFg6=bvbMWW3;(CEbNbr4~?z@on><KGwmodANyU`#0fZ|(A||GJv^zb?td
z|H$xvfTWG3iBbMUS5-!^OmPSo9M(q^bxeVts#Y)S#|o-(q&h9Ui$^F?aS$sEs$)c^
zWa&#JDE^GFU-09Col1=yaEM4)4`P7Bnz3}eUicqWL{h3JfEz)QvNT7~(CFexl!fj~
zq9MQ8blB~FG={TO!!nMF`)@2wES?ZzXdhT%2zY5iK^k4WXvqP4eA+lF7x>zz!02Qb
z4b6~2kzU=>GI>F^GEs{sBH8NYia$eN5-G|;ql7WVSgC7<&_vehr6Uvz3N-JRV4m4y
zBQXK1qJ+`X92VqJ;83$>Wu9~-Cn>9>vo`X_e>)1SF&GmX|FN~xi~n6s{9lh$&-`Ci
zv=Gp@av=?i!{wQMQC_JI@;hK$<*rLXApZ`0R#6t0(?AL04-kp4U^U{4^hDFCjP=|V
zmHLBz?&mCwpCnd?6j=!*fbAN<imn7vz^-FS(V%5>yBauPKd6_oO34#Q&V8!@3b8F#
z-hYSj7*(S2z<$65a5+jT)NCKNgNYzB<gFADNCdl7Rp~>D1u>>Mj=-phzuzv-N)qOw
z+$|xxIc2hf406PVLi<4i#krrukR5=rvM~dYUE*C6BZ<f?o8<J;Xt2&IL5{I4UCFAL
z#;5iTe6;0@|4w9VV|0Yh|2rz<|C;!}UMUd&QAi5lhd~t&Q$fsK30oG3%F+UnbJtPU
zuS6wHSYktnV*ikaGsY1T#1vd9UHY!Z)xaJ_GW@7v52uDeN*IJX1M>t?!n+b4!%N>i
z+q%H1F_MXty9+M0=FH!LUvpQ+1UcgBz;-YiQs5uMZk?!nup=`%g!}Ba1pFmc<pjcb
zxfx^3MPXKyl@G8ZK#-RN29=`}FD^uy;47})7QzGE4^&4QYm{N5rnx<|>lK}pTv-}0
zH9Y1COuqQ<99wA&#)R$vcXfK6|8#F@?*Fe#s`2^H>g1=Z6W^{*{<u2vXmxTf1mq9$
zOUS-f1>e`cy7GATUUhUYe)Qw&_`>SM+0}_NYZp!yZ+%ug^;r<qKlx#{c;?gMiBtYS
zzngvXf%-%KYk*`R$RD)61c3Zb^K;0?{^QvTtK&a0uTIW!-+ugb{Q8qmuC0!LwmN=e
zb^Lgp>xKZAAyDw-`op!G$5+SU{zbU?_~Dt=@u}j;hihMb$4ZQUxjON`s~=26;*PRT
zG4b)^M_(0hea>xP;QwCs2nytp)ro7Xlh?rweJDWc53A$nN*1!Oz8V4<qC#x(^go|o
zyjp{?<-!8ZHRV=1G|*fx6QMBrfwqglJgehp-JPKL&E4Whr&d20U%PpQcR4WnI`4QN
zu)a6`qd9JDe_RAZBQw>L^9#jG*Fbg!NI=K>_1dlCPhYH#f6A;F{~mgDMJH?S)xV(R
z%m2=y%Essj<Nuys@A|K&$^Yw;YLEY8@ik_k-pZK<#{ZSXhQ$9}DJ&H3^5~y?EDEV|
z0^o}4W7-!$JLFwC&jOuTywYv>|6zGZpMT&W{B<IvP~lEM?BLhs7DSI61i{Y`IrwcU
zZm>KEGB|FKg-1PL)nWl!W~J_eV<rnf!{wRA#|&1slV8-}8LL&ysKJ#pbw&-cNXV5F
z{L*}lQG;KvoB|=!!NGW;vZKZff~V_?7z{VDnq;47!B3%1vv%}elxRVpAs0DbuxuFd
zkktif_|s<C9uIb`BF;6?9u)3BV?ZG&zRw*szjDS5CxlMuX<oSbdkQA><$vcD9gWcu
zy8iF+#Q*hlH2HsBlF9$^ms`*)?TtyVw4nb+=Go&u^jAfus2#mCdcZ#UY8@`r5PLb0
zG+H{Vn^dHR8u4=cdF^UqQNl?gW1%ryo0Q0bPpr+o&47)~oxVGogB2U05u#VNSKqr7
zsYGS0hD|f}DF|mpnuOt`=qlD&7=nnkI-gza65X4g+($@OP}U%>P0wWRR>WOTvoTyv
zhjQ1CQC-on#I}ZO+4qEQZSOL=1=bSt2xSTPYE5={HayELF$H=J@!9F5kU82`XVTR_
zBkgtaoz5c!)v(K{pbWO7aLNYPzcumxMv^c8J8!&djE?aA-`?i_?+Z$G#sAPKL`e~4
zFYVBwONFu|R>`yR<Uy_pQ8|Dqu^&@zuaPGAr`cKbK%U&e-bX5mxZbt%+rEq^1LfuJ
z0OM&yC1}`C^oWf2wrG<>?iymvpz!D%_7_kcS*2=<_yGfCU=C9ZPN%7YzyX$;sQl++
zmqlH*SmxzIZkvdaN+o5CvVh}2+kAt6XyYkSvwEe7%#6%oW*3dZj4+{+OFps(6Pt1*
z4cV$#+q3Qf`{KXzI?BdiOxXIbv%`D-ySe^bpY)vKe?m_MSkVku>}ZCnM**HK`p0$r
z3zjEGjUz}7JTP$B3e;#&fRK`<B#=%9mo5@PTKqC_^Y|c(TG2z7T?AmpSh}KvB*Y;?
z&fRjmwNc?kOH(|&XlaV+u)~Y0hW7Zz7mb$Uf+CZTPgqYCF%hDRSZNL1o4X<_H4sgJ
z9k!$>;YEh<yn>6ysstDLJW(C1I|QjTXqzjvfAth}{$p?**MD2Kde?tFTblg89_jg>
z|418H6&m%N^u-+kQ6#o7$&e&v59#VY1hPGg)9f)S`fVKou^WjWyvW^PPa~i87>F&h
zu9F~`xhc9ik&b~_GXKpEfiz(J`{KXzdh-S-*bw3QU#}Pco4^0FKB+GJhY=U{3XnZ`
zba7f27pIYL311Efc?P(6JNE-osTxEAZxMl{2s(t9E-y|uB<wf%QJ@v}8{ebIM&R;|
zieYQFopkXsV8c;E#i9tPfQ-?!Az}%~>Rq?F+=Q@*WoUpQW$7|fnAEWv_R0VVMPuo*
zZm5PR7*Pq~Ev#c}Q;MLY7{FPeB9N~@YuX+oNTVW^J*BE3zp2?>+E1+)@pthSSh{R*
zccH$}xLe378;Eizk1DE$eam=RfN1y#v<4K1mc&SRx@jaDcnj8Db7N?Ts<wAa%_CuH
zaeC=;4E>eJ)Va=ooJZBDOvkD$(|qyY`Jsu%U`!bP_j-Q+4e-CCiT~@7YQ_KJsSlrC
z`MP-VS_u9Z@82mNzf-*R`I9e>|N8y;;^~uBkAHl0sd)R$+RfvS=g);40y%r4_|cEm
zPksD)@@IeeFHRkQJbUl)!-swxu=dG4?@gNuil?X6F5UFaQpO99AIz?Ob}fhzil=To
zy?C`=Xn*?IrKjg+inl&{{NP;i{M6&w@76w_dUE|CcsLTQo6TUh%G#-qivPSE5!9ca
zo%;30)jqTQ+NB$&h=_P@Y2`H!*IHK8qn8T_1N7qe6Kh{zD)psmSYGN)A?R&(tf!MR
z)+wb(n7wxA<F!kty(8hb^w7*d{?Gnlu*T>JjsNfTy#J$nYi|?(*CW+<{xAQ1ekwn^
ze0+I4KOMpV`Ttq|Apa=;Ab&sqFh8?=B0rbEm7mW~qaYcTq~OZ;s5&X+zX1i~`Csz4
zmQUtq^1lSpL;e!vJD#5ggQmcg`^%I0`w0G-@uv$`gXOb+T#^4af6I?1@?SuWf631W
z@<aY}aKc=9z1<9v{{)Ip=YM9tS^hBpQ`iC`{}prS9Qb%1<$qb8Tt2ycF8>Ie4PS5O
zXW>7v2SI(O^YhDRq0TeQW#QX3&`<tq{t<#Eoyp$??>+MII)XbhO!FLTdAK!`pF(Dn
z&v1uNo3_j_TcRyROr;-|IsyW}xVzOkXixqr>Ix<QEr?^TfmY~4P`XmSRflM50=dh_
z@Vida-dz4LlG)`FBN`q>jh8j^pMvapORUq#Vf^Vg@Isgr%&#1SGp1U&^Aq$81{BlI
zsEkCkFlt!UmrsD@H<!o37HbGpG$PZ@`=iTo(`B#2`rRe}^MCg5F*Zg=`1)_FcmJpP
z{BK=Sjr{NPoGxJZhge}^q#DJW?|6(5`d1}F-l!J$N08_n`nLmDR3q9mKU(Fe|3Ro#
zn$)|v+kvI5A(m>3WCLXt_IpYxiqeW$!;?G1@;pi!RxDlg?HmQG#CnPb*0^mjW!Cf*
z57e_x5z&r{eH_!0RLK&IQi`UVB17qHCr)C%k7J0D;`yRQxU;UtpW}f=(c}19_t7Lp
zcF3OL@?=AHaGovs;=l7d%Z<?yw*Kqrto;2qSpPNm|JNnexBnAq{~z#={i1y;eDgnA
z@OR+5-*@J&XGNSODu2UvO=qPP!~bpXEN~CyzNx|mM}pt%b<oJdDorBcC#DF>V(?Nn
zE7HFkV86(GW^mW3xoc_mRUjsA;QF~`FG0x+V4=&CNCwr!(7FEH4Mx|)REYSlFpJ-b
zZ2sPyn!AqRW|D(^?s^SuqY^`Pc8gf3yM~QnlE$hK{f%MvWW)4%Ev8fk4tR{QMMgPL
zC0ag?7(E{4?eT)stwFez*XiMri05q}&bCotPS(nHM}n^7YB~Fm)r-cVW_mHn|M{<+
zIJ}PMzdJg;>%Xq%{@=Q!`hNc<jQ^v*_|23T&i@=iEBL>}?mIFh`Ty-b+j1L6cF)9D
zv>=uNctJoUWyvNDTGY+b#*$ScW$%Wof(Mu(G2&nbo(pfbs&Y@Il9zqRYpVR1hg4;g
z*l{_w^PuuO^+$Wo>C1G_1sG72oU93#MPR!7^y$;*)~8SR?8ExN%e>nqn<L2LlDz)&
zP7En?4XWJ-cN-7%#^e_qvmhRU37|KbpVa}_9-;21cgQGO!s^J!P6lAe$CLPYuGh!t
zrHs%28BS2+yIO*{xc#hG#uylg3THYzEs!V%kvH}Ccj^7d{7D5{FZs4YjvxV+c0R6_
z#J?-}wvsylYyhqetgHP-EM-%p{x3KR`pf+k+JE2cKYWAl|G8F>|9N5m-^}Or*#D0w
zpo=_ENd9^G05_cjYud}-V5MZm^zOIJMI}mAeq#AW7XD$TL6vjh_zJm0=(Ehq13riD
zGpKa-x4zwTVp!{;#pWYtV`~pz{zET(+hZs0v-w{5HinkG1`E{WRDRuCki^njB8?G^
zQYf=5w}#1qq|+RxTgQcCQVJz+y*GiyM}o4mtoJ~2+ziu=@CFWlk=ub_#7N`BN~ZZv
zNK?x89B3Kjr04Z5(hK$fDCysOgZF=4S<dHw!lMiQ{{}wu>i?~ipZ*a3^!xo824MTe
zS7G3Rpchons(%4;y8hp`!WgdxIw@b?o$Og4X(j7B$FuAg|5;=JZoT-o@re`1MMmJk
zi?5=<GYyaV-ZvQM-f@{7*naU%_~M(HrvR`Qpp-Ru@s)QR?1vUcXFX@{7!<$=&!xez
zyt5jTP4>Gwa5&NKcXiOdCqMljPjf>DsJUKzA3D*cN|t0(&L)f8eJ}*5<Y25c(+8Db
zA$QNk6V#T1<%61uSP7I;D^P?>%&C1a$0b@E8Kee*dGS54Y>FBJ^j`dHlm(c#EBCCT
z3$ILj!YLo?d_3#=kdqhR95{PU+-Bq81eu#zCop3tjt@hKnQJ?1b8JEaouT2rpmi#n
z7i+&?@JHHz;MHAs4{d%248r;LF~j~}S-qBB|E*qs=VJf&jeMm2=kveQu#z~~wC$~l
zHRk^M<HY0EZ2R$(JL_r12x{~VTe!3JX!F6-hE`{2Mb3R6v`*y4?t!yK#;FLH?F<9k
zxe3*;U40O7%XN42qpe(rBge9(O5+x=@tY+?cIhrS%#F7EwG~@&64CG9TCiL@qQ{Na
zg{I4Vr2Id=vw8c$ozB>P4Sh_Pe-QT7?ESwh?_Bu*Z|0M|msh+&JgW7kd}=jOIR^KX
zS+*T9^jQzVyBV-Jpg?v6E;Trz;MjtKfJG%fABGNQlMOxG0bhz-yt!a$Y`LCT=R*BX
zt#$+VxUt1bXQgwccEh5(gxTW&R@ngL&q3}T&vV)PC*s?U#COMm*Ky;G+6~)*#eFbw
zLbe&kNyr{KaTpx1_bvQ&1C-rx1U^|OOg3sY&`mKOyhZ$KRj(GV)wb~#H)=^Eop4$l
z2MKuVw8ykoTkf#i!J+R3mJJL0$r36)m&%x;cy}UhLgxEc>$Q~*d*VZFW{akd(RjVK
z+F_3!-x@nC!FssEMokfHBMr1&?J!W`tS+9^8O@YLG@X%v?`5bfm>E~KNk{}?P5v|E
z8nimKyD%Hhku{!p&RXrW&pu0awCF)o&o$N%=r`K%eF9$WVG!E%Lt@;nfnG*9#)Pou
z{jEp02rygiEVrsp5Q4gVsXK7}?!byhwV}<rNfdUYkrg`KFiZd1A-LFV6vvZjt=rvm
z<54oe+o-$OoZ<4y>gvjJS87Qyl<wHVG{g?fL5*gDr4QI!Z?W-#4BRa70{IhBksB{q
zZ{K!9)^*}x9xK^r4S<<5Frz_czG|M&mZJIEuwoEXXea@(?tv9{J$Eo=Ks3|0bXJ>B
z_CT{F6OEzU48)ytcxD*Tqr<@bGskvgzHb+JUT_F{h5??gHSnB>voK>-T_DD~UFPo6
z4_qulH5rb?O<LwgLeHUeh77et5+P|0NA7Th>0QAXMm@A}=aTmQ)T-X~L6Dy%zTC>j
zZu~%T4DA8yn3nrs;*vhV^j>g?>S1h!`&=(0zCt00rXR5FfU7QNcNczh+J?@78zhk;
z6dQx7#O-1nct=NLhMQ*)Ol><-C7cMr1p%N+l@Nd|wqtZr<RA**YNWCYUY8B1G9&XM
zDcs3X@0A@&?3t$@fE{#^n=OwCs0`<SY#q3fy@cjbKK9&whiTokLF40|tnUER&`cG~
z5|^8ME-vnm=a87%+ibaWrNi#~fF0l_tZRp!gPpqT9zm~B09FO>7!6~~kAaD!1j&VU
zR*X7h*N0K@a<+sXfWIFhhdqD^4cKjmec~Pjyya?nOO#3=m}Bc?i$lwgxb~0M*zF`n
zd4Y;|L&t}&dT)=D#0J*%VYYqX@g(Lwg6Vtc971Eqf(9gyL#X6~5C|Csv1>DsPa7vE
z@#$O29th)|sWgEOW0(ynJ_JjVT61=#^DZ^NM%K4<U~B9{CmaJ#`e^PR`#$?KE3_St
z<8XZzkjF_Bxfv*%p%Xo@jyQyOXF<4i;$&$0zzqW^K43SkeTzeRZx$5bVc(5RIP}to
zrvA={+s*;oc7UaqieCHBl6@^t?+vE)QQ&2JyKRk;5TAx8mKW{2>uk#l4y^sm$o5^?
z$;uiifu$M4dIWQx?7>qV3NQhTEEtC!g20&sCG^Sm-KBTI_}Hk=0xq>;mNlpbtWO*_
z?r4Yz>lKIYK>26HVDZQe?WGC0ug5GJhVCSec)M){>y{Npxc9j=93{{vx!Q-J8;gt*
z%TFxnVY7*aLWPD&IQpC>(m0_jkBx$f^w~u_4h7SZe2|{cK@eirbURLmj0;*ZG<2Zk
zA`cvY@|8Sr*TK0B1Jq=L;D}ZRAvk0$8~|gOmBi6;j)03q&uZN;!88~mf#pkl>JLD(
zucbD$%h9S!b%N`Vx-sB78zgbehl1eaAn*oOh$8Oec-jm+gJfcZz2^Pv8)4)?kXC?&
z$XaH$$WOpdb1p!m(9~m1a<@?_NurgS{?1G$1!>r}+{3I60QG*%K26rEw0{if`B^Qp
z4Vu#dZEgb@{B@nv1HtGx3ZatA*!$su3l)G(IPsRV#M=c2DG42o!GyU6sDVvZP&3=>
zGg~V<PWLN-?dh56X>joO#}im6Dp9lvJbFQ}R;6dptOJWnAi#VkWYo|yxTkZHfku#m
za1RL0nTnS`AY(X4_Fx1@lE;=Mp*X=UD(Ac;5aH8+Lki>UQ25Xp-~2Ic^Bt542l(!0
znD~M0%+!R;K8B^GJ46S8cox+SxXU0dfCG21dHNXC^@13ekJ6jNyX8k<V+~I9V4aO#
z0f@6JyIkd6K7_hMa++wK10UoAD&K#2^W)!e@93DEtPU>@*&cr3lmmLPdg$zeu^ZK?
zJ?IwnD0YbvNUGprw4SFV*Qb1$;JM)Fl1I%~%W_MO;{_nw!fOEC%Iop=svZ&oma_X4
zwBVz=s?Q$kSTJrAtS9HBxea;~%3!RhE<<6&hp?yuz1PxF<{EEJ^H)&EWgHem$|(XP
zn~@hO-5mN+*z_*tPlgU1G(Z@Fi7amqM>!hnD4D7e;5J0YEukiUbiiGek9Bs45Ah1a
za1d6~Oux3kA~?X_1_&#Tl4C1zY)c1XF8UP0tS%M;h@2SK&CRVlxF!%Zs8_<}$$ki&
zoK=&z$8>?_hxpop<Nbg&ZFg+#;V*YTxIz4?d>iDAce1>pyd&aqbhB4v-D|V!Uezb&
z&<cIzFa244Yx9#k%K8DrDZ{$7p&Kh;|LxHcyYcH__v81j>ktIZplRyJ=@giNBOLCB
z0bffX-q&a0y=vm^U>dHLo*Xfmp3E1UdVX@f)9K)7()3$!$Z^p`rCdYd6oTfr<oI-K
zF&k^&jRr|{48AEI)n$_eWl%UXmsj59zKT{+#CZ(4e01*-`;^mr4c1f#AQ8Yj;a-AQ
z!_t`{&lRJG|8W`8Y#|N1prxIt3-0ffFpNz1!QchV8eU?@R<2$*26EH63HUCrtQHSr
zb%hT@RqK+EwX`fo@z}xaH7z{r+779BTFu;QL^Q(9NB50RpY4KL41u=AeG1aaT9R&(
zFW%J+O{%4cND-JN(8N)YghNL;KfK+0db^>>@ehj@+SGj}`qL~~>GwqHgg{TZb_P#M
z%SK@lSaMG=+A7q&Fg2hMxZ}usPovf#2uL#;L7g=#MHczuvU~Mft3W{R@@No6ercW}
zzyhrK=SdKAZHyW|B6$&6dUm~2X`8En^Ui&bVfy~h)$3PRv+w^{y}EL-|MNyZV*j`M
z_S-e~w%Yt*^y@Wl^6(BaJ3aVhuFW27Fvormz7n!F^sFdSj;nJ73uhQvi0Zh{)$tcK
zkibbY01uHZ##XeCfmJVnk}q)>U&=vaMixVV5O29)i-lq1b-jijuFV%nRi>qOX;lhi
ztVWGYh}7&rOA9OMAPR>f=v-WGgQlNa0dtQM*Df0X#_0QF@T>9aYQ}aGpK}a&R&ldM
zG-s@<SdcEs#!K77h^n~C^X#xK$065t>~!Lz7-tpRF2*A_TH3&Uvp!e+90P*-_E|o}
zF9bRq5(D=b|FX8W=fr*51N4WE>_#9E4x!##qRDzqFDhgasI6KqZE(z&HlTxM$xcKY
zqugenI%iFRXY3cW<z|5is*us9z$^~_7vPxT&nY0Y!TvU-f)tE66`83cmX^P5g!Wrv
zZrt6b)|$&Zrt87%HE@&e5}0NHwb=jg&h}2d|9Sms3)q$KI>>po?fxhT_M4On3oDC0
zvTUO*1c7R`nOWEp<0$|lmnVG>mP|P)LUr}Y9|ECMke<`Oj)yUiT~;_KrMjk!Kvd~l
zB%e`!6xj;7k?_OiPAF<L#kO!q?e~_9sF*G@pe<o;X(>o5oExOb;VlCyiVJ5j28$9k
z8%8?40+jA}XH#|aD8jS_Njynn4wv$WQvliO^fm(9>GSxMs@HjjRmBUtD)I<fx|Bh*
zYK7{kRa?mM5P|5Emt0CjsEsFb5g2K;l#6TpA7vqQv1u+&T2TH)O`%4;Dm~Do&RW&f
zfwWVtmL%q6r?Kn6YRT9Zgc%w)3yL}o)?gis?Zg2r`<$@(EO3FD7(mw1YRRF64!9&f
z^s+97sEsirR4}e^FA|eL-**~P-k$F0=@s-5WewKbU^!`%b;$GKRdQv-UL|FA0J_jG
zDwHZz4h-?kk1eaPnu}vpY;th8Ic{oje6p@)7@UAnVE5@27?IAg?%0~N8)%6|5U`I6
zBw!?_lp9ttVdE1eJIW`)I#@z%Vt{Mrl<O4Wf>UR~=WbL}XLu#Zs!7lAm=?NSW(N*m
z;sHyeTOH~LhVjM8=o1~wU1Qp5;qFhD1Vuxp++I>Ess(hcEkL(?ZaE5+&Lq<~7GS!=
z{v>pEry1a^&PQ3OEr`enim!rUMQm~3IYu^Hr1JtIe;xQ_LGJI<b2C;z6yeN)QiLlI
z3L|4995;oBng+z3hH`crV9Z&0A)WX}XyEH-kg&yDgLoW+FcDZ_ym6SoYQ>LL9!JFL
zL+y@&y2LKS+?=H)|M8~{bT<|jXbw3KndRBBrH(ob4jq_Et#pb|qtfD@#+d~*_3khA
zru2e?V!3{@=T}DY*y{r&-T1iA{lXmPMiXGK1wK<LBA2C%TsBYNT*jyg3Ju3ZIF=f?
zoh*9B(WR%k;tckPKY(7CLZMFma=nu&m)I7UW)Bb*LJ;F>JVk0eM`n92IquS#SdQa6
zC&x`~^m8yA%Y9x0`{g^ClNk%Jd>yP=&`%*velB)>E{qp)ZCrG71-DFc4R>i6Bz~+J
zlotE)OD3P@3CN4Z+KwC&eJHZDFPztW1?e*?`zWxDFyBZw%v2z^0tBGC+JSmXc2E3N
zekey*En*1mrmB^8rmhW<QD3uH6kvk@>0Gwh2D_p}BDKfadW4=W+N2V+n2+=nLy}RU
z9SKAX7@rvuNf61i<%KE8=jxj_9%?Ubh%j(;evXfyS7<BL+nO_$nh3FrEZ`%g#E<X<
zc9B<yjtzCKKsKH{+`4n;VY(Pgt%x;o)Aidh7>~gzptW_MZ^QNpR->)q$GaBDO$CE2
zB%Rd8lm?LlwOe^YKGzpourMrg)@4{uW5?3vZ6^LD7uO>|)&oCRE=UG}eO$U61il%o
zHDJLS7)gg2L7<5}M>5wQrWze-UglH)NIH%R$GCWvf~u)GYi;uXkSrWRCJ;<ZTORvP
zV%LjgU=v{X4=gWnnvK3;IoiyqegEO3C)@o;A8&290aoHDO!a7TrA}o1sB#xZK)OmF
z^LCJ0)QTNwCb()J+JWvWJt+HA6~1YHEA}EYV5*No81Sm2koLX;{4~&GvTl#n>lt&Y
z%Z1XFwi``6>sV3_Lo*p6$wuNp`e@r#%CE8J_nkv@338VhXw0&nt6S(*MiXb~S{|kT
zG;w#$gO#@vnd8*Lf+;j(d74UEzNYTEVb%0^zHaK-kOkI~gv@#c_ZMWCtN^z1?+CW|
zrRo`B1k|rQN<xoP^OaW9ZlvJ;g6K%rByQnwP?-xrnqw&W=2bZ-f5QPX4~0L%F&Tl>
zH9#&pr*4a`R>*Pf^PI)NYjQ9txGXCF>ZX&&#s6fDC-RlP7bLc`ZGAt8KkK`w3Ny9N
zh2PT-C^prYT3h<(ecRpLZ5CEhI}_Rt#Lpr>@>-6cL4x$IGcu&+UGlmNW;BX7g7ae5
zNEeC~Ta*bVZQ9H!(61`dC_!p-eo8RD-M}RnZoB)qwTv-UGvqFdnk9pgdpue-fjb>N
z>rvtf1!L$zQ*iAt@c53#N-E}9PKu@3Ai>Uh8KE=j>&CawiIS6l&BC`j^|d;12O?lN
z(;nY%SIF@v5<A+CpluV=HEg&xf2?<*JZA#I2ar=qc%KonDgRQTMI2Cl{8OR!aLDCv
zSgE#5B)}%>`??<PP*DJ5w;tF3+Jjc67p<sm)GL@^lx^7<6VOX2)-u`YJh;R38IeC)
zia`XT<n;1PRgFc`rv+@1S!*dqDcmd0Q6dE`r~xjr7A(@!!;LMJb0&?tnwgWOwLZTV
z6_H~;wWyGltFL6PV$&ib>ub%F#Oc$Pp`=ugnz}m2P73Ls;p*4GzvAk&|D#h>K)Ums
zoC@IQnwE@kO+B)4-t)-8@^E6Y9-6~UY4HU`8TG7^iGs0{L7=}C>T~K)6Zy45D>qWD
z<kz!U2ST!J7FAF~9H4p4^9Vhplz!!TOd~AmJj!R4=Fty)hv>_{RA`aXh}!8tE4DV;
zo_$t1#%0qg&%uglMVr+Fzm7hM<CCk2B3q{iu#Uhd=RDDw07~&x%Ltr4+45PzbZY@S
zHQnl2sk<O+NN3@S;Vn?E2Tyg786N~?TDnf9rR|~%h08ilD;52Fxz#69I*Qh_sTJao
z%^5qJWES43*wU8+${ywS(+bz+(^6eZb5_zQT0UjPh_G=1Sf2vwOzAIaq)~)7N}FNj
zDK+)5q`<PW*CB#Ljxga9D<1J=1%1zf61S%K9|b^~#^_p<?X&m_&<s$|YYRMxT!^J6
zNoPZB7Jv*cFge<;L+NJzI#uL(+HR-LmRP-0BpT`>RM2GX{lP}A)|5O2X!3q{uu%e8
zU7y<O;HU+3Tm((hVEMFMjH%G|+g4N5HOf+_&}|hMa=9a*m~*Vq-~a(+vjAMykIQ#i
zI#o!Yg?hUPNze-wp{3fTQ*YIUT(V1r`XjpufT@Cv32v#szY7z`Ky?RUudx?8j^99{
zKq*oJ3peVVkBf9P))Q=Qd#=Av5G^(W9olPjx*zm0QMo7cW#1CPuU=sW_ggaf+JpW<
z;dbhcJb%g?n~7blsi+Y`0y+0rzmkzjZ9g58K9g8%@vN=c?twC8Y4$ByWtm=^t0)aP
zS&b#>Yh>E<$E|#5GmTnz$~rJ1p_JkK=m-|~5cuMTnE)nDKY?}4v<NIeYuq$4lkw9K
zq1mGJWRbqF*N%@T!m*)%hFPd1&yO}^a<YiE8a1_)X6i$fwOT448>gyMFja*!P;~;#
z%h0P$L*k;ZhiM)7mtVVpkwO4=488O=P&|QXOK~t+TY2Zo<Y+x*p!sKbMNP35SSUPo
zu$Q>~fFgT}vuIN#-DFwfn=F|`@H{lE2BN!{<&Ja#uER^mrn$LgHF!)~Oj&>@W@-yM
z2_|7M$+pq+<tr-{ja8ABFf=~yl0=eB*47u&v*wAwpk6KYwx<zzgab@GQVD?CW|OD{
zH1sSy2S7PTB5AUuOgh16o5aTavf3)j95jSQf4HYSZn9);3>ddD4&2tGyamDBbh}E+
zhwiJi3~hr-Y+NCpW&v6r{jupnHy8D=aq2u6=Tiis3bG`%7TPvlL4dlf5p_%FyU|(4
zK?-jZ=miKnM-vZ|LhG07ZC)x&mzEvgqslv1o~}zP*;i>LRI)5ea>*K0x+2@9Nfz{c
zRkh*~<}A19#9|+?!UDD?h{v>s^uoDlht9Ql!J!j2bx==DU^6O12e6oKsaZA76Pc2-
zMZ|CN@w7S7TkKMg?OM3BLT=Znda0K^Fd>owDaToOEha&Ey5K@Fr|M7FshY{K+O+Xv
zoo%(81}GZ9w|%z4^YWf6qy$d+-ro>jdLm^u6OjL}ldc3!o{lTkmKCL8PP)6$jFGi5
zHPy#s5i!3aLF!0?bNbIO|MK*IPQPXF=STSO4=?}W^y||fPQN|<nw@@k`tPUTvD5#3
z`4^`@zWn>sZ(sfuJoo|r`w>gOWv4&9{Oi+i@Hc#gX2lirklPF@K%4(~`HwIE7K;80
zfSvv~d-*p2?uXOwUj7~Y{FX89{YqL$Ey`7{L4R;g`Izf1l?j|Dk|2vB)A<sqeEb<g
zoiCA$_`-A&@ffX6BIR*t`N27k6X`ul*Fe2>b&LTI81k%-d_!fbw0!4Q{@KpcjDYoJ
zb`+BS0bZJv<#fD|RbA4VDdZFOFF?ERPrrtLfy^)eX>RW3WYxvEhgaHhIj*ZwNZlz*
z^z85=>;(&!;m?cb9ziMVm5xG5%dBy<jqK{@HB?Y#v(m(hExK)0jkL*|w~Ab|d}m5i
z_P7g$x^7V<C6t`;Q{_C72uIm8c(tAC-!^;r<fD(KWgQzP5QL(=$eoexfS;(BNmU?0
z>AMl=$<WQ7(J#F#g2`JVFle#R69Me8J9c3Czzevy)ohCVL$Mkc@p}WKUM3P_qAS~^
z{h`09r8%YrYJ0$dkf~k_o|sG$z;Fq35ykPKPY4J6bd$7%i}4r_ai*m@X6-CeEpy3l
zCWk6uXMmJHUOHtEQ^#;_LzsI6>5L$ZOFhA+X>uIrUH<A1tx0y&N>69*i|FyT+Q8{x
zRoNYH(OzxAWWRED=a)~a6JE%aIiFPnrH@SuITUl_{5<(eoM}#O(G;JZSM#v-@A+Ql
z;NgNXzs4b-(}<@qyXY~?@>v)KM{?3A3j7roqsU}rE>KWudee94G6z8PCB1etQTBL6
z+39Y)u$G?|Z!-)J79O3b3&8dKnTNXNd3CktXdEx6s%Ji7&H<*O7IpEin;w+s8@@c;
zvbc+P@-ea4%qFo_I;5_##Pma@z054+kF=VH3yjkRtrS%}BC$SCw~gOAQKLe4<~2D*
z9cs${k|>tzbHOtx5y%lm&+GNnCY;ZK3WK1tj!dX6&1|)EJTGzHXBwvFW9PBUzG73K
p&<f-vM)`%3QQklE{NhDn7oUsI#pmL4@%hvJ{1HNm>R$jD0RXID9IpTX

literal 0
HcmV?d00001


From e44da1ee669cbab77c96e1ed72ddc2f028adac7f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Dec 2021 00:36:35 +0100
Subject: [PATCH 1656/2300] Add files via upload

---
 .../tools/install-new-roundcube.sh            | 176 ++++++++++++++++++
 1 file changed, 176 insertions(+)
 create mode 100644 src/deb/for-download/tools/install-new-roundcube.sh

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
new file mode 100644
index 00000000..a2409e71
--- /dev/null
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -0,0 +1,176 @@
+#!/bin/bash
+
+USER='webmail'
+DOMAIN='' # enter domain or subdomain
+
+VERSION='1.5.1'
+DOWNLOAD="https://github.com/roundcube/roundcubemail/releases/download/$VERSION/roundcubemail-$VERSION-complete.tar.gz"
+
+LOGINMESSAGE1='Click here for NEW Webmail'
+LOGINMESSAGE2='(it is adapted to mobile phones)'
+
+DATABASE_NAME_WITHOUT_PREFIX="roundcube"
+DATABASE_NAME="${USER}_roundcube"
+
+#############################################################################################################################
+
+if [ $# -gt 0 ]; then
+    USER=$1
+fi
+if [ $# -gt 1 ]; then
+    DOMAIN=$2
+fi
+
+if [ -z "$USER" ] || [ -z "$DOMAIN" ]; then
+    echo "Usage:"
+    echo "bash install-new-roundcube.sh VESTAUSER YOURDOMAIN.com"
+    exit 1
+fi
+
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/db.sh
+
+# Defining password-gen function
+gen_pass() {
+    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
+    LENGTH=32
+    while [ ${n:=1} -le $LENGTH ]; do
+        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
+        let n+=1
+    done
+    echo "$PASS"
+}
+DATABASE_PASSWORD=$(gen_pass)
+
+fix_ownership() {
+    chown -R $USER:$USER /home/$USER/web/$DOMAIN/public_html/
+    find /home/$USER/web/$DOMAIN/public_html/ -type d -exec chmod 755 {} +
+    find /home/$USER/web/$DOMAIN/public_html/ -type f -exec chmod 644 {} +
+}
+
+
+if [ ! -d "/home/$USER" ]; then
+    echo "== Creating user: $USER"
+    USER_PASSWORD=$(gen_pass)
+    /usr/local/vesta/bin/v-add-user "$USER" "$USER_PASSWORD" "admin@$DOMAIN" 'default' 'Webmail' 'Roundcube'
+    /usr/local/vesta/bin/v-change-user-language "$USER" 'en'
+fi
+
+if [ ! -d "/home/$USER/web/$DOMAIN" ]; then
+    echo "== Adding domain: $DOMAIN"
+    /usr/local/vesta/bin/v-add-domain "$USER" "$DOMAIN" "" "yes"
+    if [ ! -d "/home/$USER/web/$DOMAIN" ]; then
+        echo "ERROR: Can't create domain $DOMAIN, maybe it's already created under the other user?"
+        exit 1
+    fi
+    if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl" ]; then
+        /usr/local/vesta/bin/v-change-web-domain-tpl "$USER" "$DOMAIN" 'PHP-FPM-74' 'yes'
+    fi
+fi
+
+pub_ip=$(curl -4 -s https://scripts.myvestacp.com/ip.php)
+domain_host_ip=$(host $DOMAIN | head -n 1 | awk '{print $NF}')
+if [ "$pub_ip" != "$domain_host_ip" ]; then
+    echo "ERROR:"
+    echo "$DOMAIN is not pointing to $pub_ip"
+    echo "I see it is pointing to $domain_host_ip"
+    read -p "Are you sure you want to continue? (y/n)" answer
+    if [ "$answer" = "y" ] || [ "$answer" = "Y" ]; then
+        echo "Okay, we will continue."
+    else
+        echo "OK, good bye!"
+        exit 1
+    fi
+fi
+
+number_of_files=$(ls /home/$USER/web/$DOMAIN/public_html | wc -l)
+if [ $number_of_files -eq 2 ] && [ -f "/home/$USER/web/$DOMAIN/public_html/index.html" ] && [ -f "/home/$USER/web/$DOMAIN/public_html/robots.txt" ]; then
+    rm /home/$USER/web/$DOMAIN/public_html/index.html
+    rm /home/$USER/web/$DOMAIN/public_html/robots.txt
+else
+    echo "== public_html folder is not empty, aborting."
+    exit 1
+fi
+
+
+if [ ! -f "/home/$USER/conf/web/ssl.$DOMAIN.ca" ]; then
+    www_host="www.$DOMAIN"
+    www_host_ip=$(host $www_host | head -n 1 | awk '{print $NF}')
+    if [ "$www_host_ip" != "$domain_host_ip" ]; then
+        echo "=== Deleting www"
+        www_host=""
+        /usr/local/vesta/bin/v-delete-web-domain-alias "$USER" "$DOMAIN" "$www_host" 'no'
+        /usr/local/vesta/bin/v-delete-dns-on-web-alias "$USER" "$DOMAIN" "$www_host" 'no'
+    fi
+    echo "== Installing LetsEncrypt SSL, please wait..."
+    /usr/local/vesta/bin/v-add-letsencrypt-domain "$USER" "$DOMAIN" "$www_host" 'yes'
+    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$USER" "$DOMAIN" 'force-https' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'yes'
+fi
+
+echo "== Downloading Roundcube..."
+wget -nv "$DOWNLOAD" -O /root/roundcubemail.tar.gz
+
+echo "== Extracting Roundcube..."
+tar --directory /home/$USER/web/$DOMAIN/public_html --strip-components=1 -xzf /root/roundcubemail.tar.gz roundcubemail-$VERSION/
+
+fix_ownership
+
+DB_EXISTS=$(check_if_database_exists "$USER" "$DATABASE_NAME")
+if [ "$DB_EXISTS" = "no" ]; then
+    echo "== Creating database: $DATABASE_NAME"
+    /usr/local/vesta/bin/v-add-database "$USER" "$DATABASE_NAME_WITHOUT_PREFIX" "$DATABASE_NAME_WITHOUT_PREFIX" "$DATABASE_PASSWORD" 'mysql' 'localhost' 'utf8'
+fi
+
+if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl" ]; then
+    echo "================================"
+    echo "== Installing php7.3-imap module"
+    apt update
+    apt install -y php7.3-imap
+    echo "================================"
+fi
+if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl" ]; then
+    echo "================================"
+    echo "== Installing php7.4-imap module"
+    apt update
+    apt install -y php7.4-imap
+    echo "================================"
+fi
+
+echo "-------------------------------------"
+echo "Go to:"
+echo "https://${DOMAIN}/installer/"
+echo "... and finish the Roundcube installation."
+echo ""
+echo "You will be asked for:"
+echo "Database user: $DATABASE_NAME"
+echo "Database name: $DATABASE_NAME"
+echo "Database pass: $DATABASE_PASSWORD"
+echo ""
+echo "Suggestion: plugins to be enabled: new_user_dialog, password"
+echo "-------------------------------------"
+echo ""
+echo "=== When you click 'Initialize database' button (and see DB Write: OK), you can consider the installation as done."
+read -p "=== Then press Enter here, and this script will remove /home/$USER/web/$DOMAIN/public_html/installer folder ==="
+rm -rf /home/$USER/web/$DOMAIN/public_html/installer
+
+if [ -d "/home/$USER/web/$DOMAIN/public_html/plugins/password" ]; then
+    cp /usr/share/roundcube/plugins/password/config.inc.php /home/$USER/web/$DOMAIN/public_html/plugins/password/config.inc.php
+    cp /usr/share/roundcube/plugins/password/drivers/vesta.php /home/$USER/web/$DOMAIN/public_html/plugins/password/drivers/vesta.php
+fi
+
+wget -nv https://c.myvestacp.com/tools/roundcube-filters.tgz -O /root/roundcube-filters.tgz
+tar --directory /home/$USER/web/$DOMAIN/public_html/plugins -xzf /root/roundcube-filters.tgz
+
+sed -i "s/\$config\['plugins'\] = \[/\$config['plugins'] = ['filters', /g" /home/$USER/web/$DOMAIN/public_html/config/config.inc.php
+echo "\$config['session_lifetime'] = 1080;" >> /home/$USER/web/$DOMAIN/public_html/config/config.inc.php
+
+fix_ownership
+
+sed -i "s|<roundcube:form name=\"form\" method=\"post\">|<br /><br /><center><a href=\"https://$DOMAIN/\" style=\"color: white; font-size: 12pt;\">$LOGINMESSAGE1</a><br /><span style=\"color: white; font-size: 8pt;\">$LOGINMESSAGE2</span></center><br /><br />\n\n<roundcube:form name=\"form\" method=\"post\">|g" /usr/share/roundcube/skins/larry/templates/login.html
+
+
+echo "-------------------------------------"
+echo "Roundcube installed!"
+echo "Go to:"
+echo "https://${DOMAIN}/"
+echo "-------------------------------------"

From b965a3d1844e946328ecd25fc561202fd4fc456b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Dec 2021 00:42:45 +0100
Subject: [PATCH 1657/2300] Delete install-new-roundcube.sh

---
 .../tools/install-new-roundcube.sh            | 176 ------------------
 1 file changed, 176 deletions(-)
 delete mode 100644 src/deb/for-download/tools/install-new-roundcube.sh

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
deleted file mode 100644
index a2409e71..00000000
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ /dev/null
@@ -1,176 +0,0 @@
-#!/bin/bash
-
-USER='webmail'
-DOMAIN='' # enter domain or subdomain
-
-VERSION='1.5.1'
-DOWNLOAD="https://github.com/roundcube/roundcubemail/releases/download/$VERSION/roundcubemail-$VERSION-complete.tar.gz"
-
-LOGINMESSAGE1='Click here for NEW Webmail'
-LOGINMESSAGE2='(it is adapted to mobile phones)'
-
-DATABASE_NAME_WITHOUT_PREFIX="roundcube"
-DATABASE_NAME="${USER}_roundcube"
-
-#############################################################################################################################
-
-if [ $# -gt 0 ]; then
-    USER=$1
-fi
-if [ $# -gt 1 ]; then
-    DOMAIN=$2
-fi
-
-if [ -z "$USER" ] || [ -z "$DOMAIN" ]; then
-    echo "Usage:"
-    echo "bash install-new-roundcube.sh VESTAUSER YOURDOMAIN.com"
-    exit 1
-fi
-
-source /usr/local/vesta/func/main.sh
-source /usr/local/vesta/func/db.sh
-
-# Defining password-gen function
-gen_pass() {
-    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
-    LENGTH=32
-    while [ ${n:=1} -le $LENGTH ]; do
-        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
-        let n+=1
-    done
-    echo "$PASS"
-}
-DATABASE_PASSWORD=$(gen_pass)
-
-fix_ownership() {
-    chown -R $USER:$USER /home/$USER/web/$DOMAIN/public_html/
-    find /home/$USER/web/$DOMAIN/public_html/ -type d -exec chmod 755 {} +
-    find /home/$USER/web/$DOMAIN/public_html/ -type f -exec chmod 644 {} +
-}
-
-
-if [ ! -d "/home/$USER" ]; then
-    echo "== Creating user: $USER"
-    USER_PASSWORD=$(gen_pass)
-    /usr/local/vesta/bin/v-add-user "$USER" "$USER_PASSWORD" "admin@$DOMAIN" 'default' 'Webmail' 'Roundcube'
-    /usr/local/vesta/bin/v-change-user-language "$USER" 'en'
-fi
-
-if [ ! -d "/home/$USER/web/$DOMAIN" ]; then
-    echo "== Adding domain: $DOMAIN"
-    /usr/local/vesta/bin/v-add-domain "$USER" "$DOMAIN" "" "yes"
-    if [ ! -d "/home/$USER/web/$DOMAIN" ]; then
-        echo "ERROR: Can't create domain $DOMAIN, maybe it's already created under the other user?"
-        exit 1
-    fi
-    if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl" ]; then
-        /usr/local/vesta/bin/v-change-web-domain-tpl "$USER" "$DOMAIN" 'PHP-FPM-74' 'yes'
-    fi
-fi
-
-pub_ip=$(curl -4 -s https://scripts.myvestacp.com/ip.php)
-domain_host_ip=$(host $DOMAIN | head -n 1 | awk '{print $NF}')
-if [ "$pub_ip" != "$domain_host_ip" ]; then
-    echo "ERROR:"
-    echo "$DOMAIN is not pointing to $pub_ip"
-    echo "I see it is pointing to $domain_host_ip"
-    read -p "Are you sure you want to continue? (y/n)" answer
-    if [ "$answer" = "y" ] || [ "$answer" = "Y" ]; then
-        echo "Okay, we will continue."
-    else
-        echo "OK, good bye!"
-        exit 1
-    fi
-fi
-
-number_of_files=$(ls /home/$USER/web/$DOMAIN/public_html | wc -l)
-if [ $number_of_files -eq 2 ] && [ -f "/home/$USER/web/$DOMAIN/public_html/index.html" ] && [ -f "/home/$USER/web/$DOMAIN/public_html/robots.txt" ]; then
-    rm /home/$USER/web/$DOMAIN/public_html/index.html
-    rm /home/$USER/web/$DOMAIN/public_html/robots.txt
-else
-    echo "== public_html folder is not empty, aborting."
-    exit 1
-fi
-
-
-if [ ! -f "/home/$USER/conf/web/ssl.$DOMAIN.ca" ]; then
-    www_host="www.$DOMAIN"
-    www_host_ip=$(host $www_host | head -n 1 | awk '{print $NF}')
-    if [ "$www_host_ip" != "$domain_host_ip" ]; then
-        echo "=== Deleting www"
-        www_host=""
-        /usr/local/vesta/bin/v-delete-web-domain-alias "$USER" "$DOMAIN" "$www_host" 'no'
-        /usr/local/vesta/bin/v-delete-dns-on-web-alias "$USER" "$DOMAIN" "$www_host" 'no'
-    fi
-    echo "== Installing LetsEncrypt SSL, please wait..."
-    /usr/local/vesta/bin/v-add-letsencrypt-domain "$USER" "$DOMAIN" "$www_host" 'yes'
-    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$USER" "$DOMAIN" 'force-https' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'yes'
-fi
-
-echo "== Downloading Roundcube..."
-wget -nv "$DOWNLOAD" -O /root/roundcubemail.tar.gz
-
-echo "== Extracting Roundcube..."
-tar --directory /home/$USER/web/$DOMAIN/public_html --strip-components=1 -xzf /root/roundcubemail.tar.gz roundcubemail-$VERSION/
-
-fix_ownership
-
-DB_EXISTS=$(check_if_database_exists "$USER" "$DATABASE_NAME")
-if [ "$DB_EXISTS" = "no" ]; then
-    echo "== Creating database: $DATABASE_NAME"
-    /usr/local/vesta/bin/v-add-database "$USER" "$DATABASE_NAME_WITHOUT_PREFIX" "$DATABASE_NAME_WITHOUT_PREFIX" "$DATABASE_PASSWORD" 'mysql' 'localhost' 'utf8'
-fi
-
-if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl" ]; then
-    echo "================================"
-    echo "== Installing php7.3-imap module"
-    apt update
-    apt install -y php7.3-imap
-    echo "================================"
-fi
-if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl" ]; then
-    echo "================================"
-    echo "== Installing php7.4-imap module"
-    apt update
-    apt install -y php7.4-imap
-    echo "================================"
-fi
-
-echo "-------------------------------------"
-echo "Go to:"
-echo "https://${DOMAIN}/installer/"
-echo "... and finish the Roundcube installation."
-echo ""
-echo "You will be asked for:"
-echo "Database user: $DATABASE_NAME"
-echo "Database name: $DATABASE_NAME"
-echo "Database pass: $DATABASE_PASSWORD"
-echo ""
-echo "Suggestion: plugins to be enabled: new_user_dialog, password"
-echo "-------------------------------------"
-echo ""
-echo "=== When you click 'Initialize database' button (and see DB Write: OK), you can consider the installation as done."
-read -p "=== Then press Enter here, and this script will remove /home/$USER/web/$DOMAIN/public_html/installer folder ==="
-rm -rf /home/$USER/web/$DOMAIN/public_html/installer
-
-if [ -d "/home/$USER/web/$DOMAIN/public_html/plugins/password" ]; then
-    cp /usr/share/roundcube/plugins/password/config.inc.php /home/$USER/web/$DOMAIN/public_html/plugins/password/config.inc.php
-    cp /usr/share/roundcube/plugins/password/drivers/vesta.php /home/$USER/web/$DOMAIN/public_html/plugins/password/drivers/vesta.php
-fi
-
-wget -nv https://c.myvestacp.com/tools/roundcube-filters.tgz -O /root/roundcube-filters.tgz
-tar --directory /home/$USER/web/$DOMAIN/public_html/plugins -xzf /root/roundcube-filters.tgz
-
-sed -i "s/\$config\['plugins'\] = \[/\$config['plugins'] = ['filters', /g" /home/$USER/web/$DOMAIN/public_html/config/config.inc.php
-echo "\$config['session_lifetime'] = 1080;" >> /home/$USER/web/$DOMAIN/public_html/config/config.inc.php
-
-fix_ownership
-
-sed -i "s|<roundcube:form name=\"form\" method=\"post\">|<br /><br /><center><a href=\"https://$DOMAIN/\" style=\"color: white; font-size: 12pt;\">$LOGINMESSAGE1</a><br /><span style=\"color: white; font-size: 8pt;\">$LOGINMESSAGE2</span></center><br /><br />\n\n<roundcube:form name=\"form\" method=\"post\">|g" /usr/share/roundcube/skins/larry/templates/login.html
-
-
-echo "-------------------------------------"
-echo "Roundcube installed!"
-echo "Go to:"
-echo "https://${DOMAIN}/"
-echo "-------------------------------------"

From 5fa3645004704c48d03bf28d7f4ce8aa7f3feea8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Dec 2021 00:43:49 +0100
Subject: [PATCH 1658/2300] Adding install-new-roundcube.sh

---
 .../tools/install-new-roundcube.sh            | 176 ++++++++++++++++++
 1 file changed, 176 insertions(+)
 create mode 100644 src/deb/for-download/tools/install-new-roundcube.sh

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
new file mode 100644
index 00000000..9e0dc6cc
--- /dev/null
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -0,0 +1,176 @@
+#!/bin/bash
+
+USER='webmail'
+DOMAIN='' # enter domain or subdomain
+
+VERSION='1.5.1'
+DOWNLOAD="https://github.com/roundcube/roundcubemail/releases/download/$VERSION/roundcubemail-$VERSION-complete.tar.gz"
+
+LOGINMESSAGE1='Click here for NEW Webmail'
+LOGINMESSAGE2='(it is adapted to mobile phones)'
+
+DATABASE_NAME_WITHOUT_PREFIX="roundcube"
+DATABASE_NAME="${USER}_roundcube"
+
+#############################################################################################################################
+
+if [ $# -gt 0 ]; then
+    USER=$1
+fi
+if [ $# -gt 1 ]; then
+    DOMAIN=$2
+fi
+
+if [ -z "$USER" ] || [ -z "$DOMAIN" ]; then
+    echo "Usage:"
+    echo "bash install-new-roundcube.sh VESTAUSER YOURDOMAIN.com"
+    exit 1
+fi
+
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/db.sh
+
+# Defining password-gen function
+gen_pass() {
+    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
+    LENGTH=32
+    while [ ${n:=1} -le $LENGTH ]; do
+        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
+        let n+=1
+    done
+    echo "$PASS"
+}
+DATABASE_PASSWORD=$(gen_pass)
+
+fix_ownership() {
+    chown -R $USER:$USER /home/$USER/web/$DOMAIN/public_html/
+    find /home/$USER/web/$DOMAIN/public_html/ -type d -exec chmod 755 {} +
+    find /home/$USER/web/$DOMAIN/public_html/ -type f -exec chmod 644 {} +
+}
+
+
+if [ ! -d "/home/$USER" ]; then
+    echo "== Creating user: $USER"
+    USER_PASSWORD=$(gen_pass)
+    /usr/local/vesta/bin/v-add-user "$USER" "$USER_PASSWORD" "admin@$DOMAIN" 'default' 'Webmail' 'Roundcube'
+    /usr/local/vesta/bin/v-change-user-language "$USER" 'en'
+fi
+
+if [ ! -d "/home/$USER/web/$DOMAIN" ]; then
+    echo "== Adding domain: $DOMAIN"
+    /usr/local/vesta/bin/v-add-domain "$USER" "$DOMAIN" "" "yes"
+    if [ ! -d "/home/$USER/web/$DOMAIN" ]; then
+        echo "ERROR: Can't create domain $DOMAIN, maybe it's already created under the other user?"
+        exit 1
+    fi
+    if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl" ]; then
+        /usr/local/vesta/bin/v-change-web-domain-tpl "$USER" "$DOMAIN" 'PHP-FPM-74' 'yes'
+    fi
+fi
+
+pub_ip=$(curl -4 -s https://scripts.myvestacp.com/ip.php)
+domain_host_ip=$(host $DOMAIN | head -n 1 | awk '{print $NF}')
+if [ "$pub_ip" != "$domain_host_ip" ]; then
+    echo "ERROR:"
+    echo "$DOMAIN is not pointing to $pub_ip"
+    echo "I see it is pointing to $domain_host_ip"
+    read -p "Are you sure you want to continue? (y/n)" answer
+    if [ "$answer" = "y" ] || [ "$answer" = "Y" ]; then
+        echo "Okay, we will continue."
+    else
+        echo "OK, good bye!"
+        exit 1
+    fi
+fi
+
+number_of_files=$(ls /home/$USER/web/$DOMAIN/public_html | wc -l)
+if [ $number_of_files -eq 2 ] && [ -f "/home/$USER/web/$DOMAIN/public_html/index.html" ] && [ -f "/home/$USER/web/$DOMAIN/public_html/robots.txt" ]; then
+    rm /home/$USER/web/$DOMAIN/public_html/index.html
+    rm /home/$USER/web/$DOMAIN/public_html/robots.txt
+else
+    echo "== public_html folder is not empty, aborting."
+    exit 1
+fi
+
+
+if [ ! -f "/home/$USER/conf/web/ssl.$DOMAIN.ca" ]; then
+    www_host="www.$DOMAIN"
+    www_host_ip=$(host $www_host | head -n 1 | awk '{print $NF}')
+    if [ "$www_host_ip" != "$domain_host_ip" ]; then
+        echo "=== Deleting www"
+        www_host=""
+        /usr/local/vesta/bin/v-delete-web-domain-alias "$USER" "$DOMAIN" "$www_host" 'no'
+        /usr/local/vesta/bin/v-delete-dns-on-web-alias "$USER" "$DOMAIN" "$www_host" 'no'
+    fi
+    echo "== Installing LetsEncrypt SSL, please wait..."
+    /usr/local/vesta/bin/v-add-letsencrypt-domain "$USER" "$DOMAIN" "$www_host" 'yes'
+    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$USER" "$DOMAIN" 'force-https' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'yes'
+fi
+
+echo "== Downloading Roundcube..."
+wget -nv "$DOWNLOAD" -O /root/roundcubemail.tar.gz
+
+echo "== Extracting Roundcube..."
+tar --directory /home/$USER/web/$DOMAIN/public_html --strip-components=1 -xzf /root/roundcubemail.tar.gz roundcubemail-$VERSION/
+
+fix_ownership
+
+DB_EXISTS=$(check_if_database_exists "$USER" "$DATABASE_NAME")
+if [ "$DB_EXISTS" = "no" ]; then
+    echo "== Creating database: $DATABASE_NAME"
+    /usr/local/vesta/bin/v-add-database "$USER" "$DATABASE_NAME_WITHOUT_PREFIX" "$DATABASE_NAME_WITHOUT_PREFIX" "$DATABASE_PASSWORD" 'mysql' 'localhost' 'utf8'
+fi
+
+if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl" ]; then
+    echo "================================"
+    echo "== Installing php7.3-imap module"
+    apt update
+    apt install -y php7.3-imap
+    echo "================================"
+fi
+if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl" ]; then
+    echo "================================"
+    echo "== Installing php7.4-imap module"
+    apt update
+    apt install -y php7.4-imap
+    echo "================================"
+fi
+
+echo "-------------------------------------"
+echo "Go to:"
+echo "https://${DOMAIN}/installer/"
+echo "... and finish the Roundcube installation."
+echo ""
+echo "You will be asked for:"
+echo "Database user: $DATABASE_NAME"
+echo "Database name: $DATABASE_NAME"
+echo "Database pass: $DATABASE_PASSWORD"
+echo ""
+echo "Suggestion: plugins to be enabled: new_user_dialog, password"
+echo "-------------------------------------"
+echo ""
+echo "=== When you click 'Initialize database' button (and see DB Write: OK), you can consider the installation as done."
+read -p "=== Then press Enter here, and this script will remove /home/$USER/web/$DOMAIN/public_html/installer folder ==="
+rm -rf /home/$USER/web/$DOMAIN/public_html/installer
+
+if [ -d "/home/$USER/web/$DOMAIN/public_html/plugins/password" ]; then
+    cp /usr/share/roundcube/plugins/password/config.inc.php /home/$USER/web/$DOMAIN/public_html/plugins/password/config.inc.php
+    cp /usr/share/roundcube/plugins/password/drivers/vesta.php /home/$USER/web/$DOMAIN/public_html/plugins/password/drivers/vesta.php
+fi
+
+wget -nv https://c.myvestacp.com/tools/roundcube-filters.tgz -O /root/roundcube-filters.tgz
+tar --directory /home/$USER/web/$DOMAIN/public_html/plugins -xzf /root/roundcube-filters.tgz
+
+sed -i "s/\$config\['plugins'\] = \[/\$config['plugins'] = ['filters', /g" /home/$USER/web/$DOMAIN/public_html/config/config.inc.php
+echo "\$config['session_lifetime'] = 1080;" >> /home/$USER/web/$DOMAIN/public_html/config/config.inc.php
+
+fix_ownership
+
+sed -i "s|<roundcube:form name=\"form\" method=\"post\">|<br /><br /><center><a href=\"https://$DOMAIN/\" style=\"color: white; font-size: 12pt;\">$LOGINMESSAGE1</a><br /><span style=\"color: white; font-size: 8pt;\">$LOGINMESSAGE2</span></center><br /><br />\n\n<roundcube:form name=\"form\" method=\"post\">|g" /usr/share/roundcube/skins/larry/templates/login.html
+
+
+echo "-------------------------------------"
+echo "Roundcube installed!"
+echo "Go to:"
+echo "https://${DOMAIN}/"
+echo "-------------------------------------"

From 774faa2d982069e2524dc64aec3dae38b0bbbfe7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Dec 2021 01:18:49 +0100
Subject: [PATCH 1659/2300] Update install-new-roundcube.sh

---
 src/deb/for-download/tools/install-new-roundcube.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index 9e0dc6cc..d545973c 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -7,7 +7,7 @@ VERSION='1.5.1'
 DOWNLOAD="https://github.com/roundcube/roundcubemail/releases/download/$VERSION/roundcubemail-$VERSION-complete.tar.gz"
 
 LOGINMESSAGE1='Click here for NEW Webmail'
-LOGINMESSAGE2='(it is adapted to mobile phones)'
+LOGINMESSAGE2='(it is adapted for mobile phones too)'
 
 DATABASE_NAME_WITHOUT_PREFIX="roundcube"
 DATABASE_NAME="${USER}_roundcube"

From 6db07c4aa57bddc62cacdadc5e142467ff52f44d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Dec 2021 16:38:43 +0100
Subject: [PATCH 1660/2300] Starting FreshClam during myVesta installation

---
 install/vst-install-debian.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index fef0b8f7..34b55527 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1321,6 +1321,11 @@ if [ "$clamd" = 'yes' ]; then
     fi
     service clamav-daemon start
     check_result $? "clamav-daeom start failed"
+    
+    systemctl status clamav-freshclam.service > /dev/null 2>&1
+    if [ $? -ne 0 ]; then
+        systemctl start clamav-freshclam.service
+    fi
 fi
 
 

From e0530d895ad942df180a0d9f6ac34d35bf896c0d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Dec 2021 18:12:47 +0100
Subject: [PATCH 1661/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 34b55527..a90414e0 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1746,6 +1746,7 @@ touch /usr/local/vesta/data/upgrades/update-cloudflare-ips
 touch /usr/local/vesta/data/upgrades/enable-tls-in-proftpd
 touch /usr/local/vesta/data/upgrades/enable_cookie_httponly
 touch /usr/local/vesta/data/upgrades/fix_exim_494_autoreply
+touch /usr/local/vesta/data/upgrades/freshclam_start
 
 # Secret URL
 secretquery=''

From 5d87f24b3f1be07e7013747ad06e4efb26c19559 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Dec 2021 18:19:25 +0100
Subject: [PATCH 1662/2300] Checking if FreshClam is started after installation

---
 src/deb/vesta/postinst | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 01b6ac48..e2a1219c 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -25,6 +25,18 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# Checking if FreshClam is started after installation
+if [ ! -f "/usr/local/vesta/data/upgrades/freshclam_start" ]; then
+    clamavup=$(/usr/local/vesta/bin/v-list-sys-services | grep 'clamav-daemon' | grep -c 'running')
+    freshclamdown=$(/usr/local/vesta/bin/v-list-sys-services | grep 'clamav-freshclam' | grep -c 'off')
+    if [ $clamavup -eq 1 ] && [ $freshclamdown -eq 1 ]; then
+        echo "== Starting FreshClam"
+        systemctl enable clamav-freshclam.service
+        systemctl start clamav-freshclam.service
+    fi
+    touch /usr/local/vesta/data/upgrades/freshclam_start
+fi
+
 # Fix Autoreply issue with Exim 4.94+
 if [ ! -f "/usr/local/vesta/data/upgrades/fix_exim_494_autoreply" ]; then
     if [ "$release" -eq 11 ]; then

From a0ad0c6101c40f88ec04a18f44925234c039503b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Dec 2021 19:16:50 +0100
Subject: [PATCH 1663/2300] Update sr.php

---
 web/inc/i18n/sr.php | 48 ++++++++++++++++++++++-----------------------
 1 file changed, 24 insertions(+), 24 deletions(-)

diff --git a/web/inc/i18n/sr.php b/web/inc/i18n/sr.php
index 4cb8db27..dc215f26 100644
--- a/web/inc/i18n/sr.php
+++ b/web/inc/i18n/sr.php
@@ -26,7 +26,7 @@ $LANG['sr'] = array(
     'BACKUP'  => 'BACKUP',
 
     'LOGIN'  => 'LOGIN',
-    'RESET PASSWORD'  => 'PROMENA ŠIFRE',
+    'RESET PASSWORD'  => 'PROMENA PASSWORDA',
     'SEARCH'  => 'PRETRAGA',
     'PACKAGE'  => 'PAKET',
     'RRD'  => 'RRD',
@@ -278,8 +278,8 @@ $LANG['sr'] = array(
     'Release'  => 'Distribucija',
     'Architecture'  => 'Arhitektura',
     'Object'  => 'Predmet',
-    'Username'  => 'Korisničko ime',
-    'Password'  => 'Šifra',
+    'Username'  => 'Username',
+    'Password'  => 'Password',
     'Email'  => 'Email',
     'Package'  => 'Paket',
     'Language'  => 'Jezik',
@@ -303,7 +303,7 @@ $LANG['sr'] = array(
     'Statistics Authorization'  => 'Autorizacija za statistiku',
     'Statistics Auth'  => 'Autorizacija statistiku',
     'Account'  => 'Nalog',
-    'Prefix will be automaticaly added to username'  => 'Prefiks %s će automatski biti pridodat korisničkom imenu',
+    'Prefix will be automaticaly added to username'  => 'Prefiks %s će automatski biti pridodat username-u',
     'Send FTP credentials to email'  => 'Pošalji FTP login podatke na mail adresu',
     'Expiration Date'  => 'Datum isteka',
     'YYYY-MM-DD'  => 'YYYY-MM-DD',
@@ -316,7 +316,7 @@ $LANG['sr'] = array(
     'Message'  => 'Poruka',
     'use local-part'  => 'unesi samo početni deo (bez @domen.com dela)',
     'one or more email addresses'  => 'jedna ili više email adresa',
-    'Prefix will be automaticaly added to database name and database user'  => 'Prefiks %s se automatski dodaje na ime baze i na korisničko ime baze',
+    'Prefix will be automaticaly added to database name and database user'  => 'Prefiks %s se automatski dodaje na ime baze i na username baze',
     'Database'  => 'Baza podataka',
     'Type'  => 'Tip',
     'Minute'  => 'Minut',
@@ -346,8 +346,8 @@ $LANG['sr'] = array(
     'aliases'  => 'aliasa',
     'records'  => 'zapisa',
     'jobs'  => 'jobs',
-    'username'  => 'korisničko ime',
-    'password'  => 'šifra',
+    'username'  => 'username',
+    'password'  => 'password',
     'type'  => 'tip',
     'charset'  => 'charset',
     'domain'  => 'domen',
@@ -366,10 +366,10 @@ $LANG['sr'] = array(
     'account'  => 'nalog',
     'ssl certificate'  => 'ssl certifikat',
     'ssl key'  => 'ssl ključ',
-    'stats user password'  => 'šifra za korisničku statistiku',
-    'stats username'  => 'stats korisničko ime',
-    'stats password'  => 'stats šifra',
-    'ftp user password'  => 'ftp šifra',
+    'stats user password'  => 'password za korisničku statistiku',
+    'stats username'  => 'stats username',
+    'stats password'  => 'stats password',
+    'ftp user password'  => 'ftp password',
     'ftp user'  => 'ftp username',
     'Last 70 lines of %s.%s.log' => 'Zadnjih 70. redova od %s.%s.log',
     'AccessLog' => 'AccessLog',
@@ -490,11 +490,11 @@ $LANG['sr'] = array(
     'LOGGED_IN_AS'  => 'Ulogovani ste kao %s',
     'Error'  => 'Greška',
     'Invalid username or password'  => 'Pogrešni login podaci',
-    'Invalid username or code'  => 'Pogrešno korisničko ime ili kod',
+    'Invalid username or code'  => 'Pogrešan username ili kod',
     'Passwords not match'  => 'Passwordi se ne poklapaju',
     'Please enter valid email address.'  => 'Potrebno je uneti validnu email adresu.',
     'Field "%s" can not be blank.'  => 'Polja "%s" ne smeju biti prazna.',
-    'Password is too short.'  => 'Šifra je previše kratka (najmanje 6 znakova)',
+    'Password is too short.'  => 'Password je previše kratak (najmanje 6 znakova)',
     'Error code:'  => 'Greška koda: %s',
     'SERVICE_ACTION_FAILED'  => '"%s" "%s" nije uspelo',
     'IP address is in use' => 'IP adresa se već koristi',
@@ -510,28 +510,28 @@ $LANG['sr'] = array(
     'CRON_EXCLUSIONS' => 'Da bi izuzeo sve cron-job-ove unesi zvezdicu *',
     'USER_EXCLUSIONS' => 'Unesi direktorijume, po jedan u svakoj liniji. Da bi izuzeo sve direktorijume unesi zvezdicu *',
 
-    'Welcome to Vesta Control Panel'  => 'Dobrodošli u Vesta kontrolni panel',
-    'MAIL_FROM'  => 'Vesta kontrolni panel <noreply@%s>',
+    'Welcome to Vesta Control Panel'  => 'Dobrodošli u myVesta kontrolni panel',
+    'MAIL_FROM'  => 'myVesta kontrolni panel <noreply@%s>',
     'GREETINGS_GORDON_FREEMAN' => "Poštovani %s %s,\n",
     'GREETINGS' => "Poštovani,\n",
-    'ACCOUNT_READY' => "Vaš hosting nalog je kreiran i spreman za korišćenje.\n\nhttps://%s/login/\nKorisničko ime: %s\nŠifra: %s\n\n--\nVesta kontrolni panel\n",
+    'ACCOUNT_READY' => "Vaš hosting nalog je kreiran i spreman za korišćenje.\n\nhttps://%s/login/\nUsername: %s\nPassword: %s\n\n--\nmyVesta kontrolni panel\n",
 
     'FTP login credentials'  => 'FTP podaci',
-    'FTP_ACCOUNT_READY' => "FTP nalog je kreiran. Koristite sledeće podatke kako biste se ulogovali:\n\nHostname: %s\nKorisničko ime: %s_%s\nŠifra: %s\n\n--\nVesta kontrolni panel\n",
+    'FTP_ACCOUNT_READY' => "FTP nalog je kreiran. Koristite sledeće podatke kako biste se ulogovali:\n\nHostname: %s\nUsername: %s_%s\nPassword: %s\n\n--\nmyVesta kontrolni panel\n",
 
     'Database Credentials'  => 'Podaci baze podataka',
-    'DATABASE_READY' => "Baza podataka je kreirana. Koristite sledeće podatke kako biste se ulogovali:\n\nDatabase: %s\nKorisničko ime: %s\nŠifra: %s\n%s\n\n--\nVesta kontrolni panel\n",
+    'DATABASE_READY' => "Baza podataka je kreirana. Koristite sledeće podatke kako biste se ulogovali:\n\nDatabase: %s\nUsername: %s\nPassword: %s\n%s\n\n--\nmyVesta kontrolni panel\n",
 
-    'forgot password'  => 'zaboravljena šifra',
+    'forgot password'  => 'zaboravljen password',
     'Confirm'  => 'Potvrditi',
-    'New Password'  => 'Nova šifra',
-    'Confirm Password'  => 'Potvrdi šifru',
+    'New Password'  => 'Nov password',
+    'Confirm Password'  => 'Potvrdi password',
     'Reset'  => 'Reset',
     'Reset Code'  => 'Resetuj kod',
     'RESET_NOTICE'  => '',
-    'RESET_CODE_SENT'  => 'Kod resetovane šifre je poslat na vašu email adresu<br>',
-    'MAIL_RESET_SUBJECT'  => 'Šifra je resetovana %s',
-    'PASSWORD_RESET_REQUEST' => "Za resetovanje šifre sledite link:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\nIli, možete ići na https://%s/reset/?action=code&user=%s i uneti kod:\n%s\n\nAko niste tražili resetovanje šifre, ignorišite ovu poruku i prihvatite naše izvinjenje.\n\n--\nVesta kontrolni panel\n",
+    'RESET_CODE_SENT'  => 'Kod resetovanog passworda je poslat na vašu email adresu<br>',
+    'MAIL_RESET_SUBJECT'  => 'Password je resetovan %s',
+    'PASSWORD_RESET_REQUEST' => "Za resetovanje passworda sledite link:\nhttps://%s/reset/?action=confirm&user=%s&code=%s\n\nIli, možete ići na https://%s/reset/?action=code&user=%s i uneti kod:\n%s\n\nAko niste tražili resetovanje passworda, ignorišite ovu poruku i prihvatite naše izvinjenje.\n\n--\nmyVesta kontrolni panel\n",
 
     'Jan' => 'Jan',
     'Feb' => 'Feb',

From ecc06404159bb0c3978af10c8249de2cc96b7a1b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Dec 2021 19:35:20 +0100
Subject: [PATCH 1664/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index ca274724..a25b40bc 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-54 [17-Dec-2021]
+==================================================
+* Checking if FreshClam is started after installation
+
 Version 0.9.8-26-53 [12-Dec-2021]
 ==================================================
 * Support for PHP 8.1

From d89da4f51b34116bbed949566305762e8da3cde1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Dec 2021 19:36:17 +0100
Subject: [PATCH 1665/2300] Version 0.9.8-26-54

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 1fa6aa49..2c883b97 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-53
+vesta-0.9.8-26-54

From 2ee193873ffc473b6e33476846a7f57f357ab12b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Dec 2021 22:36:49 +0100
Subject: [PATCH 1666/2300] Update install-new-roundcube.sh

---
 src/deb/for-download/tools/install-new-roundcube.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index d545973c..7350db16 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -98,9 +98,9 @@ if [ ! -f "/home/$USER/conf/web/ssl.$DOMAIN.ca" ]; then
     www_host_ip=$(host $www_host | head -n 1 | awk '{print $NF}')
     if [ "$www_host_ip" != "$domain_host_ip" ]; then
         echo "=== Deleting www"
-        www_host=""
         /usr/local/vesta/bin/v-delete-web-domain-alias "$USER" "$DOMAIN" "$www_host" 'no'
         /usr/local/vesta/bin/v-delete-dns-on-web-alias "$USER" "$DOMAIN" "$www_host" 'no'
+        www_host=""
     fi
     echo "== Installing LetsEncrypt SSL, please wait..."
     /usr/local/vesta/bin/v-add-letsencrypt-domain "$USER" "$DOMAIN" "$www_host" 'yes'

From 90db1084ec0bdbcfd262797e5ad4693a4f678025 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 19 Dec 2021 01:08:43 +0100
Subject: [PATCH 1667/2300] Update install-new-roundcube.sh

---
 .../for-download/tools/install-new-roundcube.sh   | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index 7350db16..42ac73a0 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -84,15 +84,16 @@ if [ "$pub_ip" != "$domain_host_ip" ]; then
 fi
 
 number_of_files=$(ls /home/$USER/web/$DOMAIN/public_html | wc -l)
-if [ $number_of_files -eq 2 ] && [ -f "/home/$USER/web/$DOMAIN/public_html/index.html" ] && [ -f "/home/$USER/web/$DOMAIN/public_html/robots.txt" ]; then
-    rm /home/$USER/web/$DOMAIN/public_html/index.html
-    rm /home/$USER/web/$DOMAIN/public_html/robots.txt
-else
-    echo "== public_html folder is not empty, aborting."
-    exit 1
+if [ $number_of_files -ne 0 ]; then
+    if [ $number_of_files -eq 2 ] && [ -f "/home/$USER/web/$DOMAIN/public_html/index.html" ] && [ -f "/home/$USER/web/$DOMAIN/public_html/robots.txt" ]; then
+        rm /home/$USER/web/$DOMAIN/public_html/index.html
+        rm /home/$USER/web/$DOMAIN/public_html/robots.txt
+    else
+        echo "== public_html folder is not empty, aborting."
+        exit 1
+    fi
 fi
 
-
 if [ ! -f "/home/$USER/conf/web/ssl.$DOMAIN.ca" ]; then
     www_host="www.$DOMAIN"
     www_host_ip=$(host $www_host | head -n 1 | awk '{print $NF}')

From fee11ca777397a693307912643b31c89fe642602 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 19 Dec 2021 01:56:35 +0100
Subject: [PATCH 1668/2300] Update install-new-roundcube.sh

---
 src/deb/for-download/tools/install-new-roundcube.sh | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index 42ac73a0..95e1d1cd 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -120,6 +120,9 @@ DB_EXISTS=$(check_if_database_exists "$USER" "$DATABASE_NAME")
 if [ "$DB_EXISTS" = "no" ]; then
     echo "== Creating database: $DATABASE_NAME"
     /usr/local/vesta/bin/v-add-database "$USER" "$DATABASE_NAME_WITHOUT_PREFIX" "$DATABASE_NAME_WITHOUT_PREFIX" "$DATABASE_PASSWORD" 'mysql' 'localhost' 'utf8'
+else
+    echo "== Database $DATABASE_NAME already exists, and it's maybe used by another site. I will not continue. Please edit this script and enter other database name."
+    exit 1
 fi
 
 if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-73.tpl" ]; then
@@ -167,7 +170,10 @@ echo "\$config['session_lifetime'] = 1080;" >> /home/$USER/web/$DOMAIN/public_ht
 
 fix_ownership
 
-sed -i "s|<roundcube:form name=\"form\" method=\"post\">|<br /><br /><center><a href=\"https://$DOMAIN/\" style=\"color: white; font-size: 12pt;\">$LOGINMESSAGE1</a><br /><span style=\"color: white; font-size: 8pt;\">$LOGINMESSAGE2</span></center><br /><br />\n\n<roundcube:form name=\"form\" method=\"post\">|g" /usr/share/roundcube/skins/larry/templates/login.html
+check_grep=$(grep -c 'color: white; font-size: 12pt' /usr/share/roundcube/skins/larry/templates/login.html)
+if [ "$check_grep" -eq 0 ]; then
+    sed -i "s|<roundcube:form name=\"form\" method=\"post\">|<br /><br /><center><a href=\"https://$DOMAIN/\" style=\"color: white; font-size: 12pt;\">$LOGINMESSAGE1</a><br /><span style=\"color: white; font-size: 8pt;\">$LOGINMESSAGE2</span></center><br /><br />\n\n<roundcube:form name=\"form\" method=\"post\">|g" /usr/share/roundcube/skins/larry/templates/login.html
+fi
 
 
 echo "-------------------------------------"

From 909619ef6916ad320efeed4fc956a1674e7eec48 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 19 Dec 2021 16:06:13 +0100
Subject: [PATCH 1669/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index fc354210..1a98759d 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -28,8 +28,8 @@ find /home/*/web/*/public_html/wp-content/aiowps_backups/ -type f -not -name ".h
 find /home/*/web/*/public_html/wp-content/envato-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
 find /home/*/web/*/public_html/wp-content/ai1wm-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
 find /home/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
-find /home/*/web/*/public_html/ -type f -name "error_log" -delete
-find /home/*/web/*/public_html/ -type f -name "error_log.txt" -delete
-find /home/ -type f -name "*.log" -delete
+find /home/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
+find /home/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;
+find /home/ -type f -name "*.log" -exec truncate -s 0 {} \;
 
 echo "=== Garbage cleaned ==="

From aa85d2e58177f32f84f91cd837e032db9ef33bb8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Dec 2021 13:36:08 +0100
Subject: [PATCH 1670/2300] Update install-softaculous.sh

---
 src/deb/for-download/tools/install-softaculous.sh | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/src/deb/for-download/tools/install-softaculous.sh b/src/deb/for-download/tools/install-softaculous.sh
index ba586930..b209c68d 100644
--- a/src/deb/for-download/tools/install-softaculous.sh
+++ b/src/deb/for-download/tools/install-softaculous.sh
@@ -15,7 +15,7 @@ rm -rf /usr/local/vesta/web/softaculous/
 
 apt update
 
-apt install --reinstall vesta-php
+# apt install --reinstall vesta-php
 
 apt install --reinstall vesta-ioncube vesta-softaculous
 
@@ -28,7 +28,11 @@ if [ -f "/usr/local/vesta/web/inc/login_url.php-bak" ]; then
     mv /usr/local/vesta/web/inc/login_url.php-bak /usr/local/vesta/web/inc/login_url.php
 fi
 
+echo ""
+echo ""
 echo "=== Softaculous installation done ==="
+echo ""
 echo "Wait for about 5 minutes so softaculous-cron download all packages."
 echo "You can check if it is still downloading packages by running command:"
-echo 'ps -Af | grep "cron.php"  | grep -v "grep"'
+echo 'ps -Af | grep "cron.php" | grep -v "grep"'
+echo ""

From 91fe4bc7c5f90a1fd692e10b5f7da9012d23d176 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 9 Jan 2022 14:43:45 +0100
Subject: [PATCH 1671/2300] Exclude /var/log/apt/* while cleaning garbage

---
 bin/v-clean-garbage | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 1a98759d..ccee5fb5 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -7,7 +7,7 @@ rm /var/backups/*
 rm /var/cache/apt/archives/*
 cd /var/log
 truncate -s 0 xferlog lastlog faillog btmp syslog;
-find /var/log/ -name "*.log" -type f -exec truncate -s 0 {} \;
+find /var/log/ -name "*.log" -not -path "/var/log/apt/*" -type f -exec truncate -s 0 {} \;
 find /var/log/ -name "*.err" -type f -exec truncate -s 0 {} \;
 find /var/log/ -name "errors" -type f -exec truncate -s 0 {} \;
 find /var/log/ -name "*.info" -type f -exec truncate -s 0 {} \;

From d30c9f584e455fe0175fc4da0dd329e09eca2654 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 22 Jan 2022 16:15:24 +0100
Subject: [PATCH 1672/2300] Update install-new-roundcube.sh

---
 src/deb/for-download/tools/install-new-roundcube.sh | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index 95e1d1cd..ff218ccb 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -155,6 +155,18 @@ echo "-------------------------------------"
 echo ""
 echo "=== When you click 'Initialize database' button (and see DB Write: OK), you can consider the installation as done."
 read -p "=== Then press Enter here, and this script will remove /home/$USER/web/$DOMAIN/public_html/installer folder ==="
+
+if [ ! -f "/home/$USER/web/$DOMAIN/public_html/config/config.inc.php" ]; then
+    echo "=== ERROR: You didn't finish the installation."
+    echo "=== Please read carefully what is written above."
+    read -p "=== Then press Enter when you finish installation ==="
+fi
+if [ ! -f "/home/$USER/web/$DOMAIN/public_html/config/config.inc.php" ]; then
+    echo "=== ERROR: You didn't finish the installation."
+    echo "=== Sorry, the script will exit now."
+    exit 1;
+fi
+
 rm -rf /home/$USER/web/$DOMAIN/public_html/installer
 
 if [ -d "/home/$USER/web/$DOMAIN/public_html/plugins/password" ]; then

From e91976613c9921e7270ec4dd52ae1dd7bcc844c6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 23 Jan 2022 15:41:28 +0100
Subject: [PATCH 1673/2300] mysql8 create user, set password, grant

---
 func/db.sh      | 125 ++++++++++++++++++++++++++++++++++++++----------
 func/rebuild.sh |  18 ++++---
 2 files changed, 113 insertions(+), 30 deletions(-)

diff --git a/func/db.sh b/func/db.sh
index 1373d741..deb9e5b8 100644
--- a/func/db.sh
+++ b/func/db.sh
@@ -202,21 +202,57 @@ decrease_dbhost_values() {
 add_mysql_database() {
     mysql_connect $host
 
+    mysql_ver_sub=$(echo $mysql_ver |cut -d '.' -f1)
+    mysql_ver_sub_sub=$(echo $mysql_ver |cut -d '.' -f2)
+
     query="CREATE DATABASE \`$database\` CHARACTER SET $charset"
     mysql_query "$query" > /dev/null
 
-    query="GRANT ALL ON \`$database\`.* TO \`$dbuser\`@\`%\`
-        IDENTIFIED BY '$dbpass'"
-    mysql_query "$query" > /dev/null
+    if [ "$mysql_fork" = "mysql" ] && [ "$mysql_ver_sub" -ge 8 ] ; then
+        query="CREATE USER \`$dbuser\`@\`%\`
+            IDENTIFIED BY '$dbpass'"
+        mysql_query "$query" > /dev/null
 
-    query="GRANT ALL ON \`$database\`.* TO \`$dbuser\`@localhost
-        IDENTIFIED BY '$dbpass'"
-    mysql_query "$query" > /dev/null
+        query="CREATE USER \`$dbuser\`@localhost
+            IDENTIFIED BY '$dbpass'"
+        mysql_query "$query" > /dev/null
 
-    if [ "$(echo $mysql_ver |cut -d '.' -f2)" -ge 7 ]; then
-        md5=$(mysql_query "SHOW CREATE USER \`$dbuser\`" 2>/dev/null)
-        md5=$(echo "$md5" |grep password |cut -f8 -d \')
+        query="GRANT ALL ON \`$database\`.* TO \`$dbuser\`@\`%\`"
+        mysql_query "$query" > /dev/null
+
+        query="GRANT ALL ON \`$database\`.* TO \`$dbuser\`@localhost"
+        mysql_query "$query" > /dev/null
     else
+        query="GRANT ALL ON \`$database\`.* TO \`$dbuser\`@\`%\`
+            IDENTIFIED BY '$dbpass'"
+        mysql_query "$query" > /dev/null
+
+        query="GRANT ALL ON \`$database\`.* TO \`$dbuser\`@localhost
+            IDENTIFIED BY '$dbpass'"
+        mysql_query "$query" > /dev/null
+    fi
+
+    if [ "$mysql_fork" = "mysql" ]; then
+        # mysql
+        if [ "$mysql_ver_sub" -ge 8 ] || { [ "$mysql_ver_sub" -eq 5 ] && [ "$mysql_ver_sub_sub" -ge 7 ]; } then
+            if [ "$mysql_ver_sub" -ge 8 ]; then
+                # mysql >= 8
+                md5=$(mysql_query "SHOW CREATE USER \`$dbuser\`" 2>/dev/null)
+                # echo $md5
+                md5=$(echo "$md5" |grep password |cut -f4 -d \')
+                # echo $md5
+            else
+                # mysql < 8
+                md5=$(mysql_query "SHOW CREATE USER \`$dbuser\`" 2>/dev/null)
+                md5=$(echo "$md5" |grep password |cut -f8 -d \')
+            fi
+        else
+            # mysql < 5.7
+            md5=$(mysql_query "SHOW GRANTS FOR \`$dbuser\`" 2>/dev/null)
+            md5=$(echo "$md5" |grep PASSW|tr ' ' '\n' |tail -n1 |cut -f 2 -d \')
+        fi
+    else
+        # mariadb
         md5=$(mysql_query "SHOW GRANTS FOR \`$dbuser\`" 2>/dev/null)
         md5=$(echo "$md5" |grep PASSW|tr ' ' '\n' |tail -n1 |cut -f 2 -d \')
     fi
@@ -267,22 +303,63 @@ get_database_values() {
 # Change MySQL database password
 change_mysql_password() {
     mysql_connect $HOST
-    query="GRANT ALL ON \`$database\`.* TO \`$DBUSER\`@\`%\`
-        IDENTIFIED BY '$dbpass'"
-    mysql_query "$query" > /dev/null
-
-    query="GRANT ALL ON \`$database\`.* TO \`$DBUSER\`@localhost
-        IDENTIFIED BY '$dbpass'"
-    mysql_query "$query" > /dev/null
     
-if [ "$(echo $mysql_ver |cut -d '.' -f2)" -ge 7 ]; then
- 
-    md5=$(mysql_query "SHOW CREATE USER \`$DBUSER\`" 2>/dev/null)
-    md5=$(echo "$md5" |grep password |cut -f8 -d \')
-else
-    md5=$(mysql_query "SHOW GRANTS FOR \`$DBUSER\`" 2>/dev/null)
-    md5=$(echo "$md5" |grep PASSW|tr ' ' '\n' |tail -n1 |cut -f 2 -d \')
-fi
+    mysql_ver_sub=$(echo $mysql_ver |cut -d '.' -f1)
+    mysql_ver_sub_sub=$(echo $mysql_ver |cut -d '.' -f2)
+
+    if [ "$mysql_fork" = "mysql" ]; then
+        # mysql
+        if [ "$mysql_ver_sub" -ge 8 ]; then
+            # mysql >= 8
+            query="SET PASSWORD FOR \`$DBUSER\`@\`%\` = '$dbpass'"
+            mysql_query "$query" > /dev/null
+            query="SET PASSWORD FOR \`$DBUSER\`@localhost = '$dbpass'"
+            mysql_query "$query" > /dev/null
+        else
+            # mysql < 8
+            query="GRANT ALL ON \`$database\`.* TO \`$DBUSER\`@\`%\`
+                IDENTIFIED BY '$dbpass'"
+            mysql_query "$query" > /dev/null
+
+            query="GRANT ALL ON \`$database\`.* TO \`$DBUSER\`@localhost
+                IDENTIFIED BY '$dbpass'"
+            mysql_query "$query" > /dev/null
+        fi
+    else
+        # mariadb
+        query="GRANT ALL ON \`$database\`.* TO \`$DBUSER\`@\`%\`
+            IDENTIFIED BY '$dbpass'"
+        mysql_query "$query" > /dev/null
+
+        query="GRANT ALL ON \`$database\`.* TO \`$DBUSER\`@localhost
+            IDENTIFIED BY '$dbpass'"
+        mysql_query "$query" > /dev/null
+    fi
+
+    if [ "$mysql_fork" = "mysql" ]; then
+        # mysql
+        if [ "$mysql_ver_sub" -ge 8 ] || { [ "$mysql_ver_sub" -eq 5 ] && [ "$mysql_ver_sub_sub" -ge 7 ]; } then
+            if [ "$mysql_ver_sub" -ge 8 ]; then
+                # mysql >= 8
+                md5=$(mysql_query "SHOW CREATE USER \`$DBUSER\`" 2>/dev/null)
+                # echo $md5
+                md5=$(echo "$md5" |grep password |cut -f4 -d \')
+                # echo $md5
+            else
+                # mysql < 8
+                md5=$(mysql_query "SHOW CREATE USER \`$DBUSER\`" 2>/dev/null)
+                md5=$(echo "$md5" |grep password |cut -f8 -d \')
+            fi
+        else
+            # mysql < 5.7
+            md5=$(mysql_query "SHOW GRANTS FOR \`$DBUSER\`" 2>/dev/null)
+            md5=$(echo "$md5" |grep PASSW|tr ' ' '\n' |tail -n1 |cut -f 2 -d \')
+        fi
+    else
+        # mariadb
+        md5=$(mysql_query "SHOW GRANTS FOR \`$DBUSER\`" 2>/dev/null)
+        md5=$(echo "$md5" |grep PASSW|tr ' ' '\n' |tail -n1 |cut -f 2 -d \')
+    fi
 }
 
 # Change PostgreSQL database password
diff --git a/func/rebuild.sh b/func/rebuild.sh
index eeef03ee..b4a5f73d 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -556,12 +556,15 @@ rebuild_mysql_database() {
     mysql_query "CREATE DATABASE \`$DB\` CHARACTER SET $CHARSET" >/dev/null
     if [ "$mysql_fork" = "mysql" ]; then
         # mysql
-        if [ "$(echo $mysql_ver |cut -d '.' -f2)" -ge 7 ]; then
+        mysql_ver_sub=$(echo $mysql_ver |cut -d '.' -f1)
+        mysql_ver_sub_sub=$(echo $mysql_ver |cut -d '.' -f2)
+        if [ "$mysql_ver_sub" -ge 8 ] || { [ "$mysql_ver_sub" -eq 5 ] && [ "$mysql_ver_sub_sub" -ge 7 ]; } then
             # mysql >= 5.7
-            mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
-            mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
-            query="UPDATE mysql.user SET authentication_string='$MD5'"
-            query="$query WHERE User='$DBUSER'"
+            # if [ "$mysql_ver_sub" -eq 5 ] && [ "$mysql_ver_sub_sub" -ge 7 ]; then
+                mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
+                mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
+                query="UPDATE mysql.user SET authentication_string='$MD5'"
+                query="$query WHERE User='$DBUSER'"
         else
             # mysql < 5.7
             query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
@@ -579,10 +582,13 @@ rebuild_mysql_database() {
             # mariadb = 10
             mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`" > /dev/null
             mysql_query "CREATE USER IF NOT EXISTS \`$DBUSER\`@localhost" > /dev/null
-            query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
             if [ "$mysql_ver_sub_sub" -ge 4 ]; then
+                # mariadb >= 10.4
                 query="SET PASSWORD FOR '$DBUSER'@'%' = '$MD5';"
                 query2="SET PASSWORD FOR '$DBUSER'@'localhost' = '$MD5';"
+            else
+                # mariadb < 10.4
+                query="UPDATE mysql.user SET Password='$MD5' WHERE User='$DBUSER'"
             fi
         fi
     fi

From f0f28da12e886c3a284d4e304a767c35dd5ffd74 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 23 Jan 2022 23:46:17 +0100
Subject: [PATCH 1674/2300] phpmyadmin installer mysql8 suppodrt

---
 install/debian/10/pma/pma.sh | 10 ++++++++++
 install/debian/11/pma/pma.sh | 10 ++++++++++
 2 files changed, 20 insertions(+)

diff --git a/install/debian/10/pma/pma.sh b/install/debian/10/pma/pma.sh
index eb4be110..f04f3f8e 100644
--- a/install/debian/10/pma/pma.sh
+++ b/install/debian/10/pma/pma.sh
@@ -146,12 +146,22 @@ CREATE DATABASE $PMADB;
 MYSQL_PMA2
 
 #GRANT PMA USE SOME RIGHTS
+if [ ! -f "/etc/apt/sources.list.d/mysql.list" ]; then
+# MariaDB
 mysql -uroot <<MYSQL_PMA3
 USE $PMADB;
 GRANT USAGE ON $PMADB.* TO '$PMAUSER'@'localhost' IDENTIFIED BY '$PASS';
 GRANT ALL PRIVILEGES ON $PMADB.* TO '$PMAUSER'@'localhost';
 FLUSH PRIVILEGES;
 MYSQL_PMA3
+else
+# MySQL8
+mysql -uroot <<MYSQL_PMA3
+USE $PMADB;
+GRANT ALL ON $PMADB.* TO '$PMAUSER'@'localhost';
+FLUSH PRIVILEGES;
+MYSQL_PMA3
+fi
 
 #MYSQL DB and TABLES ADDITION
 mysql -uroot < /root/phpmyadmin/create_tables.sql
diff --git a/install/debian/11/pma/pma.sh b/install/debian/11/pma/pma.sh
index eb4be110..f04f3f8e 100644
--- a/install/debian/11/pma/pma.sh
+++ b/install/debian/11/pma/pma.sh
@@ -146,12 +146,22 @@ CREATE DATABASE $PMADB;
 MYSQL_PMA2
 
 #GRANT PMA USE SOME RIGHTS
+if [ ! -f "/etc/apt/sources.list.d/mysql.list" ]; then
+# MariaDB
 mysql -uroot <<MYSQL_PMA3
 USE $PMADB;
 GRANT USAGE ON $PMADB.* TO '$PMAUSER'@'localhost' IDENTIFIED BY '$PASS';
 GRANT ALL PRIVILEGES ON $PMADB.* TO '$PMAUSER'@'localhost';
 FLUSH PRIVILEGES;
 MYSQL_PMA3
+else
+# MySQL8
+mysql -uroot <<MYSQL_PMA3
+USE $PMADB;
+GRANT ALL ON $PMADB.* TO '$PMAUSER'@'localhost';
+FLUSH PRIVILEGES;
+MYSQL_PMA3
+fi
 
 #MYSQL DB and TABLES ADDITION
 mysql -uroot < /root/phpmyadmin/create_tables.sql

From d98f37322606f81919b018fa842ae82dbfdb55d1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 24 Jan 2022 20:41:48 +0100
Subject: [PATCH 1675/2300] Detection of MySQL 8 in v-list-sys-services

---
 bin/v-list-sys-services | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-list-sys-services b/bin/v-list-sys-services
index b7a9f351..cddb59be 100755
--- a/bin/v-list-sys-services
+++ b/bin/v-list-sys-services
@@ -297,7 +297,7 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB_SYSTEM" != 'remote' ]; then
         if [ "$service" = 'mysql' ]; then
             proc_name='mysqld'
             release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
-            if [ "$release" -eq 11 ]; then
+            if [ "$release" -eq 11 ] && [ ! -f "/etc/apt/sources.list.d/mysql.list" ]; then
                 service='mariadb'
                 proc_name='mariadbd'
             fi

From 9090a21bc7aa2fee1b33d6d17dfe6212a21e186d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 24 Jan 2022 20:43:41 +0100
Subject: [PATCH 1676/2300] MySQL 8 support as installer option

---
 install/vst-install-debian.sh | 437 ++++++++++++++++++++++------------
 1 file changed, 287 insertions(+), 150 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index a90414e0..f4920005 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 
-# myVesta Debian installer v.05
+# myVesta Debian installer v 0.9
 
 #----------------------------------------------------------#
 #                  Variables&Functions                     #
@@ -89,7 +89,8 @@ help() {
   -v, --vsftpd            Install Vsftpd        [yes|no]  default: no
   -j, --proftpd           Install ProFTPD       [yes|no]  default: yes
   -k, --named             Install Bind          [yes|no]  default: yes
-  -m, --mysql             Install MySQL         [yes|no]  default: yes
+  -m, --mysql             Install MariaDB       [yes|no]  default: yes
+  -d, --mysql8            Install MySQL 8       [yes|no]  default: no
   -g, --postgresql        Install PostgreSQL    [yes|no]  default: no
   -x, --exim              Install Exim          [yes|no]  default: yes
   -z, --dovecot           Install Dovecot       [yes|no]  default: yes
@@ -159,6 +160,25 @@ set_default_lang() {
     fi
 }
 
+ensure_startup() {
+    echo "- making sure startup is enabled for: $1"
+    currentservice=$1
+    unit_files="$(systemctl list-unit-files |grep $currentservice)"
+    if [[ "$unit_files" =~ "disabled" ]]; then
+        systemctl enable $currentservice
+    fi
+}
+
+ensure_start() {
+    echo "- making sure $1 is started"
+    currentservice=$1
+    systemctl status $currentservice.service > /dev/null 2>&1
+    r=$?
+    if [ $r -ne 0 ]; then
+        systemctl start $currentservice
+        check_result $? "$currentservice start failed"
+    fi
+}
 
 #----------------------------------------------------------#
 #                    Verifications                         #
@@ -178,6 +198,7 @@ for arg; do
         --proftpd)              args="${args}-j " ;;
         --named)                args="${args}-k " ;;
         --mysql)                args="${args}-m " ;;
+        --mysql8)               args="${args}-d " ;;
         --postgresql)           args="${args}-g " ;;
         --mongodb)              args="${args}-d " ;;
         --exim)                 args="${args}-x " ;;
@@ -213,7 +234,8 @@ while getopts "a:n:w:v:j:k:m:g:d:x:z:c:t:i:b:r:o:q:l:y:s:e:p:u:1:fh" Option; do
         v) vsftpd=$OPTARG ;;            # Vsftpd
         j) proftpd=$OPTARG ;;           # Proftpd
         k) named=$OPTARG ;;             # Named
-        m) mysql=$OPTARG ;;             # MySQL
+        m) mysql=$OPTARG ;;             # MariaDB
+        d) mysql8=$OPTARG ;;            # MySQL8
         g) postgresql=$OPTARG ;;        # PostgreSQL
         d) mongodb=$OPTARG ;;           # MongoDB (unsupported)
         x) exim=$OPTARG ;;              # Exim
@@ -246,6 +268,7 @@ set_default_value 'vsftpd' 'no'
 set_default_value 'proftpd' 'yes'
 set_default_value 'named' 'yes'
 set_default_value 'mysql' 'yes'
+set_default_value 'mysql8' 'no'
 set_default_value 'postgresql' 'no'
 set_default_value 'mongodb' 'no'
 set_default_value 'exim' 'yes'
@@ -280,6 +303,9 @@ fi
 if [ "$iptables" = 'no' ]; then
     fail2ban='no'
 fi
+if [ "$mysql8" = 'yes' ]; then
+    mysql='no'
+fi
 
 # Checking root permissions
 if [ "x$(id -u)" != 'x0' ]; then
@@ -412,7 +438,10 @@ fi
 
 # DB stack
 if [ "$mysql" = 'yes' ]; then
-    echo '   - MySQL Database server'
+    echo '   - MariaDB Database server'
+fi
+if [ "$mysql8" = 'yes' ]; then
+    echo '   - MySQL 8 Database server'
 fi
 if [ "$postgresql" = 'yes' ]; then
     echo '   - PostgreSQL Database server'
@@ -519,8 +548,8 @@ sleep 5
 #                      Checking swap                       #
 #----------------------------------------------------------#
 
-# Checking swap on small instances
 if [ -z "$(swapon -s)" ] && [ $memory -lt 1000000 ]; then
+    echo "== Checking swap on small instances"
     fallocate -l 1G /swapfile
     chmod 600 /swapfile
     mkswap /swapfile
@@ -533,19 +562,17 @@ fi
 #                   Install repository                     #
 #----------------------------------------------------------#
 
-# Updating system
+echo "=== Updating system (apt-get -y upgrade)"
 apt-get -y upgrade
 check_result $? 'apt-get upgrade failed'
 
-# Installing nginx repo
+echo "=== Installing nginx repo"
 apt=/etc/apt/sources.list.d
-# if [ "$release" -ne 11 ]; then
-    echo "deb http://nginx.org/packages/debian/ $codename nginx" > $apt/nginx.list
-    wget http://nginx.org/keys/nginx_signing.key -O /tmp/nginx_signing.key
-    apt-key add /tmp/nginx_signing.key
-# fi
+echo "deb http://nginx.org/packages/debian/ $codename nginx" > $apt/nginx.list
+wget http://nginx.org/keys/nginx_signing.key -O /tmp/nginx_signing.key
+apt-key add /tmp/nginx_signing.key
 
-# Installing vesta repo
+echo "=== Installing myVesta repo"
 echo "deb http://$RHOST/$codename/ $codename vesta" > $apt/vesta.list
 wget $CHOST/deb_signing.key -O deb_signing.key
 apt-key add deb_signing.key
@@ -566,12 +593,13 @@ fi
 #                         Backup                           #
 #----------------------------------------------------------#
 
-# Creating backup directory tree
+echo "=== Creating backup directory tree"
 mkdir -p $vst_backups
 cd $vst_backups
 mkdir nginx apache2 php php5 php5-fpm vsftpd proftpd bind exim4 dovecot clamd
 mkdir spamassassin mysql postgresql mongodb vesta
 
+echo "=== Backing up old configs"
 # Backing up Nginx configuration
 service nginx stop > /dev/null 2>&1
 cp -r /etc/nginx/* $vst_backups/nginx >/dev/null 2>&1
@@ -689,9 +717,47 @@ if [ "$mysql" = 'no' ]; then
     software=$(echo "$software" | sed -e 's/mysql-server//')
     software=$(echo "$software" | sed -e 's/mysql-client//')
     software=$(echo "$software" | sed -e 's/mysql-common//')
+    software=$(echo "$software" | sed -e 's/mariadb-server//')
+    software=$(echo "$software" | sed -e 's/mariadb-client//')
+    software=$(echo "$software" | sed -e 's/mariadb-common//')
     software=$(echo "$software" | sed -e 's/php5-mysql//')
     software=$(echo "$software" | sed -e 's/php-mysql//')
     software=$(echo "$software" | sed -e 's/phpMyAdmin//')
+    software=$(echo "$software" | sed -e 's/phpmyadmin//')
+    software=$(echo "$software" | sed -e 's/roundcube-mysql//')
+fi
+if [ "$mysql8" = 'yes' ]; then
+    echo "=== Preparing MySQL 8 apt repo"
+    software=$(echo "$software" | sed -e 's/exim4-daemon-heavy//')
+    software=$(echo "$software" | sed -e 's/exim4//')
+    #software="$software php-mysql roundcube-mysql"
+    echo "### THIS FILE IS AUTOMATICALLY CONFIGURED ###" > /etc/apt/sources.list.d/mysql.list
+    echo "# You may comment out entries below, but any other modifications may be lost." >> /etc/apt/sources.list.d/mysql.list
+    echo "# Use command 'dpkg-reconfigure mysql-apt-config' as root for modifications." >> /etc/apt/sources.list.d/mysql.list
+    echo "deb http://repo.mysql.com/apt/debian/ $codename mysql-apt-config" >> /etc/apt/sources.list.d/mysql.list
+    echo "deb http://repo.mysql.com/apt/debian/ $codename mysql-8.0" >> /etc/apt/sources.list.d/mysql.list
+    echo "deb http://repo.mysql.com/apt/debian/ $codename mysql-tools" >> /etc/apt/sources.list.d/mysql.list
+    echo "#deb http://repo.mysql.com/apt/debian/ $codename mysql-tools-preview" >> /etc/apt/sources.list.d/mysql.list
+    echo "deb-src http://repo.mysql.com/apt/debian/ $codename mysql-8.0" >> /etc/apt/sources.list.d/mysql.list
+
+    # apt-key adv --keyserver pgp.mit.edu --recv-keys 3A79BD29
+    key="467B942D3A79BD29"
+    readonly key
+    GNUPGHOME="$(mktemp -d)"
+    export GNUPGHOME
+    for keyserver in $(shuf -e ha.pool.sks-keyservers.net hkp://p80.pool.sks-keyservers.net:80 keyserver.ubuntu.com hkp://keyserver.ubuntu.com:80)
+    do
+        gpg --keyserver "${keyserver}" --recv-keys "${key}" 2>&1 && break
+    done
+    gpg --export "${key}" > /etc/apt/trusted.gpg.d/mysql.gpg
+    gpgconf --kill all
+    rm -rf "${GNUPGHOME}"
+    unset GNUPGHOME
+    
+    mpass=$(gen_pass)
+    debconf-set-selections <<< "mysql-community-server mysql-community-server/root-pass password $mpass"
+    debconf-set-selections <<< "mysql-community-server mysql-community-server/re-root-pass password $mpass"
+    debconf-set-selections <<< "mysql-community-server mysql-server/default-auth-override select Use Legacy Authentication Method (Retain MySQL 5.x Compatibility)"
 fi
 if [ "$postgresql" = 'no' ]; then
     software=$(echo "$software" | sed -e 's/postgresql-contrib//')
@@ -713,17 +779,42 @@ fi
 #----------------------------------------------------------#
 
 # Update system packages
+echo "=== Running: apt-get update"
 apt-get update
 
-# Disable daemon autostart /usr/share/doc/sysv-rc/README.policy-rc.d.gz
+echo "=== Disable daemon autostart /usr/share/doc/sysv-rc/README.policy-rc.d.gz"
 echo -e '#!/bin/sh \nexit 101' > /usr/sbin/policy-rc.d
 chmod a+x /usr/sbin/policy-rc.d
 
-# Install apt packages
+if [ "$mysql8" = 'yes' ]; then
+    echo "=== Installing MySQL 8"
+    apt-get -y install mysql-server mysql-client mysql-common
+    #update-rc.d mysql defaults
+    currentservice='mysql'
+    ensure_startup $currentservice
+    ensure_start $currentservice
+    echo -e "[client]\npassword='$mpass'\n" > /root/.my.cnf
+    chmod 600 /root/.my.cnf
+    mysqladmin -u root password $mpass
+fi
+
+echo "=== Installing all apt packages"
+# echo "apt-get -y install $software"
 apt-get -y install $software
+
 check_result $? "apt-get install failed"
 
-# Restore  policy
+if [ "$mysql8" = 'yes' ]; then
+    if [ "$exim" = 'yes' ]; then
+        echo "=== Installing exim4"
+        apt-get -y install exim4 exim4-daemon-heavy
+    fi
+    echo "=== Installing phpmyadmin"
+    #apt-get -y --no-install-recommends install phpmyadmin
+    apt-get -y install phpmyadmin
+fi
+
+echo "=== Enabling daemon autostart"
 rm -f /usr/sbin/policy-rc.d
 
 
@@ -731,21 +822,21 @@ rm -f /usr/sbin/policy-rc.d
 #                     Configure system                     #
 #----------------------------------------------------------#
 
-# Enable SSH password auth
+echo "== Enable SSH password auth"
 sed -i "s/rdAuthentication no/rdAuthentication yes/g" /etc/ssh/sshd_config
-service ssh restart
+systemctl restart ssh
 
-# Disable awstats cron
+echo "== Disable awstats cron"
 rm -f /etc/cron.d/awstats
 
-# Set directory color
+echo "== Set directory color"
 echo 'LS_COLORS="$LS_COLORS:di=00;33"' >> /etc/profile
 
-# Register /sbin/nologin and /usr/sbin/nologin
+echo "== Register /sbin/nologin and /usr/sbin/nologin"
 echo "/sbin/nologin" >> /etc/shells
 echo "/usr/sbin/nologin" >> /etc/shells
 
-# NTP Synchronization
+echo "== NTP Synchronization"
 echo '#!/bin/sh' > /etc/cron.daily/ntpdate
 echo "$(which ntpdate) -s pool.ntp.org" >> /etc/cron.daily/ntpdate
 chmod 775 /etc/cron.daily/ntpdate
@@ -766,12 +857,12 @@ fi
 #                     Configure VESTA                      #
 #----------------------------------------------------------#
 
-# Installing sudo configuration
+echo "== Installing sudo configuration"
 mkdir -p /etc/sudoers.d
 cp -f $vestacp/sudo/admin /etc/sudoers.d/
 chmod 440 /etc/sudoers.d/admin
 
-# Configuring system env
+echo "== Configuring system env"
 echo "export VESTA='$VESTA'" > /etc/profile.d/vesta.sh
 chmod 755 /etc/profile.d/vesta.sh
 source /etc/profile.d/vesta.sh
@@ -779,10 +870,10 @@ echo 'PATH=$PATH:'$VESTA'/bin' >> /root/.bash_profile
 echo 'export PATH' >> /root/.bash_profile
 source /root/.bash_profile
 
-# Configuring logrotate for Vesta logs
+echo "== Copying logrotate for myVesta logs"
 cp -f $vestacp/logrotate/vesta /etc/logrotate.d/
 
-# Building directory tree and creating some blank files for vesta
+echo "== Building directory tree and creating some blank files for myVesta"
 mkdir -p $VESTA/conf $VESTA/log $VESTA/ssl $VESTA/data/ips \
     $VESTA/data/queue $VESTA/data/users $VESTA/data/firewall \
     $VESTA/data/sessions
@@ -797,7 +888,7 @@ rm -f /var/log/vesta
 ln -s $VESTA/log /var/log/vesta
 chmod 770 $VESTA/data/sessions
 
-# Generating vesta configuration
+echo "== Generating vesta.conf"
 rm -f $VESTA/conf/vesta.conf 2>/dev/null
 touch $VESTA/conf/vesta.conf
 chmod 660 $VESTA/conf/vesta.conf
@@ -891,14 +982,14 @@ echo "LANGUAGE='$lang'" >> $VESTA/conf/vesta.conf
 # Version
 echo "VERSION='0.9.8'" >> $VESTA/conf/vesta.conf
 
-# Installing hosting packages
+echo "== Copying packages"
 cp -rf $vestacp/packages $VESTA/data/
 
-# Installing templates
+echo "== Copying templates"
 cp -rf $vestacp/templates $VESTA/data/
 
 if [ "$release" -eq 10 ]; then
-    # Symlink missing templates
+    echo "== Symlink missing templates"
     ln -s /usr/local/vesta/data/templates/web/nginx/hosting.sh /usr/local/vesta/data/templates/web/nginx/default.sh
     ln -s /usr/local/vesta/data/templates/web/nginx/hosting.tpl /usr/local/vesta/data/templates/web/nginx/default.tpl
     ln -s /usr/local/vesta/data/templates/web/nginx/hosting.stpl /usr/local/vesta/data/templates/web/nginx/default.stpl
@@ -914,7 +1005,7 @@ if [ "$release" -eq 10 ]; then
     ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.tpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-73.tpl
 fi
 if [ "$release" -eq 11 ]; then
-    # Symlink missing templates
+    echo "== Symlink missing templates"
     ln -s /usr/local/vesta/data/templates/web/nginx/hosting.sh /usr/local/vesta/data/templates/web/nginx/default.sh
     ln -s /usr/local/vesta/data/templates/web/nginx/hosting.tpl /usr/local/vesta/data/templates/web/nginx/default.tpl
     ln -s /usr/local/vesta/data/templates/web/nginx/hosting.stpl /usr/local/vesta/data/templates/web/nginx/default.stpl
@@ -930,7 +1021,7 @@ if [ "$release" -eq 11 ]; then
     ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.tpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-74.tpl
 fi
 
-# Set nameservers
+echo "== Set nameservers address"
 sed -i "s/YOURHOSTNAME1/ns1.$servername/" /usr/local/vesta/data/packages/default.pkg
 sed -i "s/YOURHOSTNAME2/ns2.$servername/" /usr/local/vesta/data/packages/default.pkg
 sed -i "s/ns1.domain.tld/ns1.$servername/" /usr/local/vesta/data/packages/default.pkg
@@ -938,17 +1029,17 @@ sed -i "s/ns2.domain.tld/ns2.$servername/" /usr/local/vesta/data/packages/defaul
 sed -i "s/ns1.example.com/ns1.$servername/" /usr/local/vesta/data/packages/default.pkg
 sed -i "s/ns2.example.com/ns2.$servername/" /usr/local/vesta/data/packages/default.pkg
 
-# Copying index.html to default documentroot
+echo "== Copying index.html to default documentroot"
 cp $VESTA/data/templates/web/skel/public_html/index.html /var/www/
 sed -i 's/%domain%/It worked!/g' /var/www/index.html
 
-# Installing firewall rules
+echo "== Copying firewall rules"
 cp -rf $vestacp/firewall $VESTA/data/
 
-# Configuring server hostname
+echo "== Configuring server hostname: $servername"
 $VESTA/bin/v-change-sys-hostname $servername 2>/dev/null
 
-# Generating SSL certificate
+echo "== Generating myVesta unsigned SSL certificate"
 $VESTA/bin/v-generate-ssl-cert $(hostname) $email 'US' 'California' \
      'San Francisco' 'Vesta Control Panel' 'IT' > /tmp/vst.pem
 
@@ -957,7 +1048,6 @@ crt_end=$(grep -n "END CERTIFICATE-" /tmp/vst.pem |cut -f 1 -d:)
 key_start=$(grep -n "BEGIN RSA" /tmp/vst.pem |cut -f 1 -d:)
 key_end=$(grep -n  "END RSA" /tmp/vst.pem |cut -f 1 -d:)
 
-# Adding SSL certificate
 cd $VESTA/ssl
 sed -n "1,${crt_end}p" /tmp/vst.pem > certificate.crt
 sed -n "$key_start,${key_end}p" /tmp/vst.pem > certificate.key
@@ -971,6 +1061,7 @@ rm /tmp/vst.pem
 #----------------------------------------------------------#
 
 if [ "$nginx" = 'yes' ]; then
+    echo "=== Configure nginx"
     rm -f /etc/nginx/conf.d/*.conf
     cp -f $vestacp/nginx/nginx.conf /etc/nginx/
     cp -f $vestacp/nginx/status.conf /etc/nginx/conf.d/
@@ -980,9 +1071,11 @@ if [ "$nginx" = 'yes' ]; then
     cp -f $vestacp/logrotate/nginx /etc/logrotate.d/
     echo > /etc/nginx/conf.d/vesta.conf
     mkdir -p /var/log/nginx/domains
-    update-rc.d nginx defaults
-    service nginx start
-    check_result $? "nginx start failed"
+    #update-rc.d nginx defaults
+    #service nginx start
+    currentservice='nginx'
+    ensure_startup $currentservice
+    ensure_start $currentservice
 fi
 
 
@@ -991,6 +1084,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$apache" = 'yes'  ]; then
+    echo "=== Configure Apache"
     cp -f $vestacp/apache2/apache2.conf /etc/apache2/
     cp -f $vestacp/apache2/status.conf /etc/apache2/mods-enabled/
     cp -f  $vestacp/logrotate/apache2 /etc/logrotate.d/
@@ -1013,12 +1107,16 @@ if [ "$apache" = 'yes'  ]; then
     chmod a+x /var/log/apache2
     chmod 640 /var/log/apache2/access.log /var/log/apache2/error.log
     chmod 751 /var/log/apache2/domains
-    update-rc.d apache2 defaults
-    service apache2 start
-    check_result $? "apache2 start failed"
+    #update-rc.d apache2 defaults
+    #service apache2 start
+    currentservice='apache2'
+    ensure_startup $currentservice
+    ensure_start $currentservice
 else
-    update-rc.d apache2 disable >/dev/null 2>&1
-    service apache2 stop >/dev/null 2>&1
+    #update-rc.d apache2 disable >/dev/null 2>&1
+    #service apache2 stop >/dev/null 2>&1
+    systemctl disable apache2
+    systemctl stop apache2
 fi
 
 
@@ -1027,26 +1125,31 @@ fi
 #----------------------------------------------------------#
 
 if [ "$phpfpm" = 'yes' ]; then
+    echo "=== Configure PHP-FPM"
     if [ "$release" -eq 11 ]; then
         cp -f $vestacp/php-fpm/www.conf /etc/php/7.4/fpm/pool.d/www.conf
-        update-rc.d php7.4-fpm defaults
-        service php7.4-fpm start
-        check_result $? "php-fpm start failed"
+        #update-rc.d php7.4-fpm defaults
+        currentservice='php7.4-fpm'
+        ensure_startup $currentservice
+        ensure_start $currentservice
     elif [ "$release" -eq 10 ]; then
         cp -f $vestacp/php-fpm/www.conf /etc/php/7.3/fpm/pool.d/www.conf
-        update-rc.d php7.3-fpm defaults
-        service php7.3-fpm start
-        check_result $? "php-fpm start failed"
+        #update-rc.d php7.3-fpm defaults
+        currentservice='php7.3-fpm'
+        ensure_startup $currentservice
+        ensure_start $currentservice
     elif [ "$release" -eq 9 ]; then
         cp -f $vestacp/php-fpm/www.conf /etc/php/7.0/fpm/pool.d/www.conf
-        update-rc.d php7.0-fpm defaults
-        service php7.0-fpm start
-        check_result $? "php-fpm start failed"
+        #update-rc.d php7.0-fpm defaults
+        currentservice='php7.0-fpm'
+        ensure_startup $currentservice
+        ensure_start $currentservice
     else
         cp -f $vestacp/php5-fpm/www.conf /etc/php5/fpm/pool.d/www.conf
-        update-rc.d php5-fpm defaults
-        service php5-fpm start
-        check_result $? "php-fpm start failed"
+        #update-rc.d php5-fpm defaults
+        currentservice='php5-fpm'
+        ensure_startup $currentservice
+        ensure_start $currentservice
     fi
 fi
 
@@ -1055,6 +1158,7 @@ fi
 #                     Configure PHP                        #
 #----------------------------------------------------------#
 
+echo "=== Configure PHP timezone"
 ZONE=$(timedatectl 2>/dev/null|grep Timezone|awk '{print $2}')
 if [ -z "$ZONE" ]; then
     ZONE='UTC'
@@ -1070,10 +1174,12 @@ done
 #----------------------------------------------------------#
 
 if [ "$vsftpd" = 'yes' ]; then
+    echo "=== Configure VSFTPD"
     cp -f $vestacp/vsftpd/vsftpd.conf /etc/
-    update-rc.d vsftpd defaults
-    service vsftpd start
-    check_result $? "vsftpd start failed"
+    #update-rc.d vsftpd defaults
+    currentservice='vsftpd'
+    ensure_startup $currentservice
+    ensure_start $currentservice
 
     # To be deleted after release 0.9.8-18
     echo "/sbin/nologin" >> /etc/shells
@@ -1085,18 +1191,14 @@ fi
 #----------------------------------------------------------#
 
 if [ "$proftpd" = 'yes' ]; then
+    echo "=== Configure ProFTPD"
     echo "127.0.0.1 $servername" >> /etc/hosts
     cp -f $vestacp/proftpd/proftpd.conf /etc/proftpd/
     cp -f $vestacp/proftpd/tls.conf /etc/proftpd/
-    update-rc.d proftpd defaults
-    service proftpd start
-    check_result $? "proftpd start failed"
-    if [ "$release" -eq 11 ]; then
-        unit_files="$(systemctl list-unit-files |grep proftpd)"
-        if [[ "$unit_files" =~ "disabled" ]]; then
-            systemctl enable proftpd
-        fi
-    fi
+    #update-rc.d proftpd defaults
+    currentservice='proftpd'
+    ensure_startup $currentservice
+    ensure_start $currentservice
 fi
 
 
@@ -1104,34 +1206,39 @@ fi
 #                  Configure MySQL/MariaDB                 #
 #----------------------------------------------------------#
 
-if [ "$mysql" = 'yes' ]; then
-    mycnf="my-small.cnf"
-    if [ $memory -gt 1200000 ]; then
-        mycnf="my-medium.cnf"
-    fi
-    if [ $memory -gt 3900000 ]; then
-        mycnf="my-large.cnf"
-    fi
+if [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; then
+    if [ "$mysql" = 'yes' ]; then
+        echo "=== Configure MariaDB"
+        mycnf="my-small.cnf"
+        if [ $memory -gt 1200000 ]; then
+            mycnf="my-medium.cnf"
+        fi
+        if [ $memory -gt 3900000 ]; then
+            mycnf="my-large.cnf"
+        fi
 
-    # MySQL configuration
-    cp -f $vestacp/mysql/$mycnf /etc/mysql/my.cnf
-    mysql_install_db
-    update-rc.d mysql defaults
-    service mysql start
-    check_result $? "mysql start failed"
+        # MySQL configuration
+        cp -f $vestacp/mysql/$mycnf /etc/mysql/my.cnf
+        mysql_install_db
+        # update-rc.d mysql defaults
+        currentservice='mysql'
+        ensure_startup $currentservice
+        ensure_start $currentservice
 
-    # Securing MySQL installation
-    mpass=$(gen_pass)
-    mysqladmin -u root password $mpass
-    echo -e "[client]\npassword='$mpass'\n" > /root/.my.cnf
-    chmod 600 /root/.my.cnf
-    mysql -e "DELETE FROM mysql.user WHERE User=''"
-    mysql -e "DROP DATABASE test" >/dev/null 2>&1
-    mysql -e "DELETE FROM mysql.db WHERE Db='test' OR Db='test\\_%'"
-    mysql -e "DELETE FROM mysql.user WHERE user='' or password='';"
-    mysql -e "FLUSH PRIVILEGES"
+        # Securing MySQL installation
+        mpass=$(gen_pass)
+        mysqladmin -u root password $mpass
+        echo -e "[client]\npassword='$mpass'\n" > /root/.my.cnf
+        chmod 600 /root/.my.cnf
+        mysql -e "DELETE FROM mysql.user WHERE User=''"
+        mysql -e "DROP DATABASE test" >/dev/null 2>&1
+        mysql -e "DELETE FROM mysql.db WHERE Db='test' OR Db='test\\_%'"
+        mysql -e "DELETE FROM mysql.user WHERE user='' or password='';"
+        mysql -e "FLUSH PRIVILEGES"
+    fi
 
     # Configuring phpMyAdmin
+    echo "=== Configure phpMyAdmin"
     if [ "$release" -eq 10 ]; then
         mkdir /etc/phpmyadmin
         mkdir -p /var/lib/phpmyadmin/tmp
@@ -1148,7 +1255,7 @@ if [ "$mysql" = 'yes' ]; then
       mkdir /usr/share/phpmyadmin
       
       pma_v='4.9.7'
-      echo "(*) Installing phpMyAdmin version v$pma_v..."
+      echo "=== Installing phpMyAdmin version v$pma_v (Debian10 custom part)"
 
       cd /root/phpmyadmin
 
@@ -1183,6 +1290,7 @@ if [ "$mysql" = 'yes' ]; then
       echo "\$cfg['blowfish_secret'] = '$blowfish';" >> /etc/phpmyadmin/config.inc.php
   fi
   if [ "$release" -eq 11 ]; then
+      echo "=== Configure phpMyAdmin (Debian11 custom part)"
       # Set config and log directory
       sed -i "s|define('CONFIG_DIR', '');|define('CONFIG_DIR', '/etc/phpmyadmin/');|" /usr/share/phpmyadmin/libraries/vendor_config.php
       sed -i "s|define('TEMP_DIR', './tmp/');|define('TEMP_DIR', '/var/lib/phpmyadmin/tmp/');|" /usr/share/phpmyadmin/libraries/vendor_config.php
@@ -1205,9 +1313,12 @@ fi
 #----------------------------------------------------------#
 
 if [ "$postgresql" = 'yes' ]; then
+    echo "=== Configure PostgreSQL"
     ppass=$(gen_pass)
     cp -f $vestacp/postgresql/pg_hba.conf /etc/postgresql/*/main/
-    service postgresql restart
+    currentservice='postgresql'
+    ensure_startup $currentservice
+    ensure_start $currentservice
     sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$ppass'"
 
     # Configuring phpPgAdmin
@@ -1223,6 +1334,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$named" = 'yes' ]; then
+    echo "=== Configure Bind9"
     cp -f $vestacp/bind/named.conf /etc/bind/
     sed -i "s%listen-on%//listen%" /etc/bind/named.conf.options
     chown root:bind /etc/bind/named.conf
@@ -1237,9 +1349,10 @@ if [ "$named" = 'yes' ]; then
           service apparmor restart
       # fi
     fi
-    update-rc.d bind9 defaults
-    service bind9 start
-    check_result $? "bind9 start failed"
+    # update-rc.d bind9 defaults
+    currentservice='bind9'
+    ensure_startup $currentservice
+    ensure_start $currentservice
 fi
 
 #----------------------------------------------------------#
@@ -1247,6 +1360,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$exim" = 'yes' ]; then
+    echo "=== Configure Exim"
     gpasswd -a Debian-exim mail
     cp -f $vestacp/exim/exim4.conf.template /etc/exim4/
     cp -f $vestacp/exim/dnsbl.conf /etc/exim4/
@@ -1272,8 +1386,10 @@ if [ "$exim" = 'yes' ]; then
     update-rc.d -f postfix remove > /dev/null 2>&1
     service postfix stop > /dev/null 2>&1
 
-    update-rc.d exim4 defaults
-    service exim4 start
+    #update-rc.d exim4 defaults
+    currentservice='exim4'
+    ensure_startup $currentservice
+    ensure_start $currentservice
 fi
 
 
@@ -1282,13 +1398,15 @@ fi
 #----------------------------------------------------------#
 
 if [ "$dovecot" = 'yes' ]; then
+    echo "=== Configure Dovecot"
     gpasswd -a dovecot mail
     cp -rf $vestacp/dovecot /etc/
     cp -f $vestacp/logrotate/dovecot /etc/logrotate.d/
     chown -R root:root /etc/dovecot*
-    update-rc.d dovecot defaults
-    service dovecot start
-    check_result $? "dovecot start failed"
+    # update-rc.d dovecot defaults
+    currentservice='dovecot'
+    ensure_startup $currentservice
+    ensure_start $currentservice
 fi
 
 
@@ -1297,13 +1415,20 @@ fi
 #----------------------------------------------------------#
 
 if [ "$clamd" = 'yes' ]; then
+    echo "=== Configure ClamAV"
     gpasswd -a clamav mail
     gpasswd -a clamav Debian-exim
     cp -f $vestacp/clamav/clamd.conf /etc/clamav/
     mkdir -p /var/lib/clamav
     /usr/bin/freshclam
-    update-rc.d clamav-daemon defaults
-    if [ ! -d "/var/run/clamav" ]; then
+
+    # update-rc.d clamav-daemon defaults
+    currentservice='clamav-daemon'
+    ensure_startup $currentservice
+    currentservice='clamav-freshclam'
+    ensure_startup $currentservice
+    
+ if [ ! -d "/var/run/clamav" ]; then
         mkdir /var/run/clamav
     fi
     chown -R clamav:clamav /var/run/clamav
@@ -1319,13 +1444,11 @@ if [ "$clamd" = 'yes' ]; then
         wget -nv -O $clamavfolder/foxhole_all.cdb http://c.myvestacp.com/tools/clamav/foxhole_all.cdb
         chown clamav:clamav $clamavfolder/foxhole_all.cdb
     fi
-    service clamav-daemon start
-    check_result $? "clamav-daeom start failed"
     
-    systemctl status clamav-freshclam.service > /dev/null 2>&1
-    if [ $? -ne 0 ]; then
-        systemctl start clamav-freshclam.service
-    fi
+    currentservice='clamav-daemon'
+    ensure_start $currentservice
+    currentservice='clamav-freshclam'
+    ensure_start $currentservice
 fi
 
 
@@ -1334,14 +1457,12 @@ fi
 #----------------------------------------------------------#
 
 if [ "$spamd" = 'yes' ]; then
-    update-rc.d spamassassin defaults
+    echo "=== Configure SpamAssassin"
+    #update-rc.d spamassassin defaults
     sed -i "s/ENABLED=0/ENABLED=1/" /etc/default/spamassassin
-    service spamassassin start
-    check_result $? "spamassassin start failed"
-    unit_files="$(systemctl list-unit-files |grep spamassassin)"
-    if [[ "$unit_files" =~ "disabled" ]]; then
-        systemctl enable spamassassin
-    fi
+    currentservice='spamassassin'
+    ensure_startup $currentservice
+    ensure_start $currentservice
 fi
 
 
@@ -1349,7 +1470,8 @@ fi
 #                   Configure RoundCube                    #
 #----------------------------------------------------------#
 
-if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
+if [ "$exim" = 'yes' ] && { [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; } then
+    echo "=== Configure RoundCube"
     if [ "$apache" = 'yes' ]; then
         cp -f $vestacp/roundcube/apache.conf /etc/roundcube/
         ln -s /etc/roundcube/apache.conf /etc/apache2/conf.d/roundcube.conf
@@ -1365,8 +1487,14 @@ if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
     cp -f $vestacp/roundcube/config.inc.php /etc/roundcube/plugins/password/
     r="$(gen_pass)"
     mysql -e "CREATE DATABASE roundcube"
-    mysql -e "GRANT ALL ON roundcube.* 
-        TO roundcube@localhost IDENTIFIED BY '$r'"
+    if [ "$mysql8" = 'yes' ]; then
+        mysql -e "CREATE USER 'roundcube'@'localhost' IDENTIFIED BY '$r';"
+        mysql -e "GRANT ALL ON roundcube.* 
+            TO roundcube@localhost"
+    else
+        mysql -e "GRANT ALL ON roundcube.* 
+            TO roundcube@localhost IDENTIFIED BY '$r'"
+    fi
     sed -i "s/%password%/$r/g" /etc/roundcube/db.inc.php
     sed -i "s/localhost/$servername/g" \
         /etc/roundcube/plugins/password/config.inc.php
@@ -1415,6 +1543,7 @@ fi
 #----------------------------------------------------------#
 
 if [ "$fail2ban" = 'yes' ]; then
+    echo "=== Configure Fail2Ban"
     cp -rf $vestacp/fail2ban /etc/
     if [ "$dovecot" = 'no' ]; then
         fline=$(cat /etc/fail2ban/jail.local |grep -n dovecot-iptables -A 2)
@@ -1435,9 +1564,11 @@ if [ "$fail2ban" = 'yes' ]; then
         fline=$(echo "$fline" |grep enabled |tail -n1 |cut -f 1 -d -)
         sed -i "${fline}s/false/true/" /etc/fail2ban/jail.local
     fi 
-    update-rc.d fail2ban defaults
-    service fail2ban start
-    check_result $? "fail2ban start failed"
+    #update-rc.d fail2ban defaults
+    currentservice='fail2ban'
+    ensure_startup $currentservice
+    ensure_start $currentservice
+    echo "- leaving fail2ban config"
 fi
 
 
@@ -1445,12 +1576,13 @@ fi
 #                   Configure Admin User                   #
 #----------------------------------------------------------#
 
+echo "=== Configure Admin User"
 if [ "$release" -eq 11 ]; then
-    # Switching to sha512
+    echo "=== Switching to sha512"
     sed -i "s/yescrypt/sha512/g" /etc/pam.d/common-password
 fi
 
-# Deleting old admin user
+echo "== Deleting old admin user"
 if [ ! -z "$(grep ^admin: /etc/passwd)" ] && [ "$force" = 'yes' ]; then
     chattr -i /home/admin/conf > /dev/null 2>&1
     userdel -f admin >/dev/null 2>&1
@@ -1462,14 +1594,14 @@ if [ ! -z "$(grep ^admin: /etc/group)" ]; then
     groupdel admin > /dev/null 2>&1
 fi
 
-# Adding vesta account
+echo "== Adding vesta account"
 $VESTA/bin/v-add-user admin $vpass $email default System Administrator
 check_result $? "can't create admin user"
 $VESTA/bin/v-change-user-shell admin bash
 $VESTA/bin/v-change-user-language admin $lang
 
-# RoundCube permissions fix
-if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
+if [ "$exim" = 'yes' ] && { [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; } then
+    echo "== RoundCube permissions fix"
     if [ ! -d "/var/log/roundcube" ]; then
         mkdir /var/log/roundcube
     fi
@@ -1479,28 +1611,30 @@ fi
 # Vesta data sessions permissions
 chown admin:admin $VESTA/data/sessions
 
-# Configuring system ips
+echo "== Configuring system ips"
 $VESTA/bin/v-update-sys-ip
 
-# Get main ip
+echo "== Get main ip"
 ip=$(ip addr|grep 'inet '|grep global|head -n1|awk '{print $2}'|cut -f1 -d/)
 local_ip=$ip
 
 # Firewall configuration
 if [ "$iptables" = 'yes' ]; then
+    echo "== Firewall configuration"
     $VESTA/bin/v-update-firewall
 fi
 
-# Get public ip
+echo "== Get public ip"
 pub_ip=$(curl -4 -s https://scripts.myvestacp.com/ip.php)
 
 if [ ! -z "$pub_ip" ] && [ "$pub_ip" != "$ip" ]; then
+    echo "== NAT detected"
     $VESTA/bin/v-change-sys-ip-nat $ip $pub_ip
     ip=$pub_ip
 fi
 
-# Configuring libapache2-mod-remoteip
 if [ "$apache" = 'yes' ] && [ "$nginx"  = 'yes' ] ; then
+    echo "== Configuring libapache2-mod-remoteip"
     cd /etc/apache2/mods-available
     echo "<IfModule mod_remoteip.c>" > remoteip.conf
     echo "  RemoteIPHeader X-Real-IP" >> remoteip.conf
@@ -1519,30 +1653,31 @@ if [ "$apache" = 'yes' ] && [ "$nginx"  = 'yes' ] ; then
     service apache2 restart
 fi
 
-# Configuring mysql host
-if [ "$mysql" = 'yes' ]; then
-     $VESTA/bin/v-add-database-host mysql localhost root $mpass
-     # $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
+if [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; then
+    echo "== Configuring mysql host"
+    $VESTA/bin/v-add-database-host mysql localhost root $mpass
+    # $VESTA/bin/v-add-database admin default default $(gen_pass) mysql
 fi
 
-# Configuring pgsql host
 if [ "$postgresql" = 'yes' ]; then
+    echo "== Configuring pgsql host"
     $VESTA/bin/v-add-database-host pgsql localhost postgres $ppass
     $VESTA/bin/v-add-database admin db db $(gen_pass) pgsql
 fi
 
-# Adding default domain
+echo "== Adding default domain"
 $VESTA/bin/v-add-domain admin $servername
 check_result $? "can't create $servername domain"
 
 if [ "$named" = 'yes' ]; then
-    # Adding ns1 and ns2 A records
+    echo "== Adding ns1 and ns2 A records"
     /usr/local/vesta/bin/v-add-dns-record 'admin' "$servername" 'ns1' 'A' "$pub_ip"
     /usr/local/vesta/bin/v-add-dns-record 'admin' "$servername" 'ns2' 'A' "$pub_ip"
 fi
 
 if [ "$release" -eq 10 ]; then
   if [ -f "/etc/php/7.3/fpm/pool.d/$servername.conf" ]; then
+    echo "== FPM pool.d $servername tweaks"
     sed -i "/^group =/c\group = www-data" /etc/php/7.3/fpm/pool.d/$servername.conf
     sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/7.3/fpm/pool.d/$servername.conf
     sed -i "/request_terminate_timeout/c\request_terminate_timeout = 900s" /etc/php/7.3/fpm/pool.d/$servername.conf
@@ -1555,6 +1690,7 @@ if [ "$release" -eq 10 ]; then
 fi
 if [ "$release" -eq 11 ]; then
   if [ -f "/etc/php/7.4/fpm/pool.d/$servername.conf" ]; then
+    echo "== FPM pool.d $servername tweaks"
     sed -i "/^group =/c\group = www-data" /etc/php/7.4/fpm/pool.d/$servername.conf
     sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/7.4/fpm/pool.d/$servername.conf
     sed -i "/request_terminate_timeout/c\request_terminate_timeout = 900s" /etc/php/7.4/fpm/pool.d/$servername.conf
@@ -1566,7 +1702,7 @@ if [ "$release" -eq 11 ]; then
   fi
 fi
 
-# Adding cron jobs
+echo "== Adding cron jobs"
 command="sudo $VESTA/bin/v-update-sys-queue disk"
 $VESTA/bin/v-add-cron-job 'admin' '15' '02' '*' '*' '*' "$command"
 command="sudo $VESTA/bin/v-update-sys-queue traffic"
@@ -1583,29 +1719,30 @@ command="sudo $VESTA/bin/v-update-sys-rrd"
 $VESTA/bin/v-add-cron-job 'admin' '*/5' '*' '*' '*' '*' "$command"
 service cron restart
 
-# Building inititall rrd images
+echo "== Building inititall rrd images"
 $VESTA/bin/v-update-sys-rrd
 
-# Enabling file system quota
 if [ "$quota" = 'yes' ]; then
+    echo "== Enabling file system quota"
     $VESTA/bin/v-add-sys-quota
 fi
 
-# Enabling softaculous plugin
+echo "== Enabling softaculous plugin"
 if [ "$softaculous" = 'yes' ]; then
     $VESTA/bin/v-add-vesta-softaculous
 fi
 
 # Starting vesta service
-update-rc.d vesta defaults
-service vesta start
-check_result $? "vesta start failed"
+#update-rc.d vesta defaults
+currentservice='vesta'
+ensure_startup $currentservice
+ensure_start $currentservice
 chown admin:admin $VESTA/data/sessions
 
-# Adding notifications
+echo "== Adding notifications"
 $VESTA/upd/add_notifications.sh
 
-# Adding cronjob for autoupdates
+echo "== Adding cronjob for autoupdates"
 $VESTA/bin/v-add-cron-vesta-autoupdate
 
 

From 5a0914b71b35999440bd00e30618dfca1d3caa44 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 24 Jan 2022 23:20:31 +0100
Subject: [PATCH 1677/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 1 -
 1 file changed, 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index f4920005..2dbd2c11 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1568,7 +1568,6 @@ if [ "$fail2ban" = 'yes' ]; then
     currentservice='fail2ban'
     ensure_startup $currentservice
     ensure_start $currentservice
-    echo "- leaving fail2ban config"
 fi
 
 

From a4251739e9b979a43e929e6be7dc71c8fd67b921 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 1 Feb 2022 16:19:16 +0100
Subject: [PATCH 1678/2300] Update install-new-roundcube.sh

---
 src/deb/for-download/tools/install-new-roundcube.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index ff218ccb..2494e590 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -187,6 +187,11 @@ if [ "$check_grep" -eq 0 ]; then
     sed -i "s|<roundcube:form name=\"form\" method=\"post\">|<br /><br /><center><a href=\"https://$DOMAIN/\" style=\"color: white; font-size: 12pt;\">$LOGINMESSAGE1</a><br /><span style=\"color: white; font-size: 8pt;\">$LOGINMESSAGE2</span></center><br /><br />\n\n<roundcube:form name=\"form\" method=\"post\">|g" /usr/share/roundcube/skins/larry/templates/login.html
 fi
 
+check_grep=$(grep -c 'MAIL_URL=' /usr/local/vesta/conf/vesta.conf)
+if [ "$check_grep" -eq 0 ]; then
+    echo "MAIL_URL='https://$DOMAIN/'" >> /usr/local/vesta/conf/vesta.conf
+fi
+
 
 echo "-------------------------------------"
 echo "Roundcube installed!"

From 29b83e7f7629a3d482e7d49bad3ce60b53eaced0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 8 Feb 2022 11:39:03 +0100
Subject: [PATCH 1679/2300] Update install-new-roundcube.sh

---
 src/deb/for-download/tools/install-new-roundcube.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index 2494e590..8996fa75 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -3,7 +3,7 @@
 USER='webmail'
 DOMAIN='' # enter domain or subdomain
 
-VERSION='1.5.1'
+VERSION='1.5.2'
 DOWNLOAD="https://github.com/roundcube/roundcubemail/releases/download/$VERSION/roundcubemail-$VERSION-complete.tar.gz"
 
 LOGINMESSAGE1='Click here for NEW Webmail'

From 8c186156fd71b8fdb97b62ff818dc73303efd2ae Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 11 Feb 2022 16:43:39 +0100
Subject: [PATCH 1680/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index ccee5fb5..067ecd58 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -27,6 +27,7 @@ find /var/log/exim4/ -type f -exec truncate -s 0 {} \;
 find /home/*/web/*/public_html/wp-content/aiowps_backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
 find /home/*/web/*/public_html/wp-content/envato-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
 find /home/*/web/*/public_html/wp-content/ai1wm-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+find /home/*/web/*/public_html/wp-content/wpvividbackups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
 find /home/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
 find /home/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
 find /home/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;

From 2f115195d4870a0cb11c92f01f8f5249ee7a05f0 Mon Sep 17 00:00:00 2001
From: Umut Korkmaz <umutkorkmaaz@gmail.com>
Date: Wed, 16 Feb 2022 20:24:10 +0300
Subject: [PATCH 1681/2300] Update v-install-wordpress

if the user reached the database limit abort the installation
---
 bin/v-install-wordpress | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index d558dd35..95f6f353 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -29,6 +29,12 @@ source /etc/profile
 source /usr/local/vesta/func/main.sh
 source /usr/local/vesta/func/db.sh
 
+
+if [[ $(is_package_full 'DATABASES') = *reached* ]]; then
+        echo "Database limit is reached. Delete database or upgrade user package."
+        exit
+fi
+
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#

From 7331a39aceca45c2d46590ef6338cba2f83593b1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 4 Mar 2022 18:53:06 +0100
Subject: [PATCH 1682/2300] srdb cli in v-clone-website

---
 bin/v-clone-website | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 7ed3046c..93e5ffc4 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -222,12 +222,11 @@ fi
 
 if [ $IT_IS_WP -eq 0 ]; then
     if [ ! -f "/root/Search-Replace-DB-master/srdb.cli.php" ]; then
-        echo "Please download https://interconnectit.com/products/search-and-replace-for-wordpress-databases/ and extract to /root/Search-Replace-DB-master/"
-        exit 13
-    fi
-    if [ ! -f "/usr/bin/php7.0" ]; then
-        echo "Please download https://c.myvestacp.com/tools/multi-php-install.sh and install php 7.0"
-        exit 14
+        if [ ! -f "/usr/bin/git" ]; then
+            apt-get update > /dev/null 2>&1
+            apt-get -y install git > /dev/null 2>&1
+        fi
+        git clone https://github.com/interconnectit/Search-Replace-DB.git
     fi
 else
     if [ ! -f "/usr/local/bin/wp" ]; then
@@ -338,7 +337,7 @@ fi
 
 if [ $IT_IS_WP -eq 0 ]; then
     echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
-    php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "$FROM_DOMAIN" -r "$TO_DOMAIN"
+    php /root/Search-Replace-DB/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "$FROM_DOMAIN" -r "$TO_DOMAIN"
     if [ "$FROM_USER" != "$TO_USER" ]; then
         echo "=== Replacing /home/$FROM_USER/ to /home/$TO_USER/ in database $TO_DATABASE_NAME"
         php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "/home/$FROM_USER/" -r "/home/$TO_USER/"

From 81b63267cfea7d3e81422d85f60ea2b96f04d1c7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 4 Mar 2022 18:54:15 +0100
Subject: [PATCH 1683/2300] Update v-clone-website

---
 bin/v-clone-website | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 93e5ffc4..8247d78d 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -226,6 +226,7 @@ if [ $IT_IS_WP -eq 0 ]; then
             apt-get update > /dev/null 2>&1
             apt-get -y install git > /dev/null 2>&1
         fi
+        cd /root
         git clone https://github.com/interconnectit/Search-Replace-DB.git
     fi
 else

From dd09dbe748e16bdcd2244ef4205d6bd1e642a69b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 4 Mar 2022 20:30:40 +0100
Subject: [PATCH 1684/2300] Update v-clone-website

---
 bin/v-clone-website | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 8247d78d..e055d1a3 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -221,7 +221,7 @@ fi
 # ----------- CHECK -------------
 
 if [ $IT_IS_WP -eq 0 ]; then
-    if [ ! -f "/root/Search-Replace-DB-master/srdb.cli.php" ]; then
+    if [ ! -f "/root/Search-Replace-DB/srdb.cli.php" ]; then
         if [ ! -f "/usr/bin/git" ]; then
             apt-get update > /dev/null 2>&1
             apt-get -y install git > /dev/null 2>&1
@@ -341,7 +341,7 @@ if [ $IT_IS_WP -eq 0 ]; then
     php /root/Search-Replace-DB/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "$FROM_DOMAIN" -r "$TO_DOMAIN"
     if [ "$FROM_USER" != "$TO_USER" ]; then
         echo "=== Replacing /home/$FROM_USER/ to /home/$TO_USER/ in database $TO_DATABASE_NAME"
-        php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "/home/$FROM_USER/" -r "/home/$TO_USER/"
+        php /root/Search-Replace-DB/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "/home/$FROM_USER/" -r "/home/$TO_USER/"
     fi
 else
     cd $TO_FOLDER

From 54c3fd1e13297a6451e92c69a246763064b4069d Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Fri, 11 Mar 2022 15:55:00 +0100
Subject: [PATCH 1685/2300] Blocking in nginx everything that begins with dot

---
 install/debian/10/templates/web/nginx/caching.stpl              | 2 +-
 install/debian/10/templates/web/nginx/caching.tpl               | 2 +-
 install/debian/10/templates/web/nginx/force-https-legacy.stpl   | 2 +-
 install/debian/10/templates/web/nginx/force-https-public.stpl   | 2 +-
 .../10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl  | 2 +-
 install/debian/10/templates/web/nginx/force-https.stpl          | 2 +-
 install/debian/10/templates/web/nginx/hosting-legacy.stpl       | 2 +-
 install/debian/10/templates/web/nginx/hosting-legacy.tpl        | 2 +-
 install/debian/10/templates/web/nginx/hosting-public.stpl       | 2 +-
 install/debian/10/templates/web/nginx/hosting-public.tpl        | 2 +-
 .../10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl      | 2 +-
 .../10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl       | 2 +-
 install/debian/10/templates/web/nginx/hosting.stpl              | 2 +-
 install/debian/10/templates/web/nginx/hosting.tpl               | 2 +-
 install/debian/10/templates/web/nginx/private-force-https.stpl  | 2 +-
 install/debian/10/templates/web/nginx/private-hosting.stpl      | 2 +-
 install/debian/10/templates/web/nginx/private-hosting.tpl       | 2 +-
 install/debian/11/templates/web/nginx/caching.stpl              | 2 +-
 install/debian/11/templates/web/nginx/caching.tpl               | 2 +-
 install/debian/11/templates/web/nginx/force-https-legacy.stpl   | 2 +-
 install/debian/11/templates/web/nginx/force-https-public.stpl   | 2 +-
 .../11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl  | 2 +-
 install/debian/11/templates/web/nginx/force-https.stpl          | 2 +-
 install/debian/11/templates/web/nginx/hosting-legacy.stpl       | 2 +-
 install/debian/11/templates/web/nginx/hosting-legacy.tpl        | 2 +-
 install/debian/11/templates/web/nginx/hosting-public.stpl       | 2 +-
 install/debian/11/templates/web/nginx/hosting-public.tpl        | 2 +-
 .../11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl      | 2 +-
 .../11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl       | 2 +-
 install/debian/11/templates/web/nginx/hosting.stpl              | 2 +-
 install/debian/11/templates/web/nginx/hosting.tpl               | 2 +-
 install/debian/11/templates/web/nginx/private-force-https.stpl  | 2 +-
 install/debian/11/templates/web/nginx/private-hosting.stpl      | 2 +-
 install/debian/11/templates/web/nginx/private-hosting.tpl       | 2 +-
 install/debian/7/templates/web/nginx/caching.stpl               | 2 +-
 install/debian/7/templates/web/nginx/caching.tpl                | 2 +-
 install/debian/7/templates/web/nginx/default.stpl               | 2 +-
 install/debian/7/templates/web/nginx/default.tpl                | 2 +-
 install/debian/7/templates/web/nginx/hosting.stpl               | 2 +-
 install/debian/7/templates/web/nginx/hosting.tpl                | 2 +-
 install/debian/7/templates/web/nginx/http2.stpl                 | 2 +-
 install/debian/7/templates/web/nginx/http2.tpl                  | 2 +-
 install/debian/8/templates/web/nginx/caching.stpl               | 2 +-
 install/debian/8/templates/web/nginx/caching.tpl                | 2 +-
 install/debian/8/templates/web/nginx/default.stpl               | 2 +-
 install/debian/8/templates/web/nginx/default.tpl                | 2 +-
 install/debian/8/templates/web/nginx/hosting.stpl               | 2 +-
 install/debian/8/templates/web/nginx/hosting.tpl                | 2 +-
 install/debian/8/templates/web/nginx/http2.stpl                 | 2 +-
 install/debian/8/templates/web/nginx/http2.tpl                  | 2 +-
 install/debian/9/templates/web/nginx/caching.stpl               | 2 +-
 install/debian/9/templates/web/nginx/caching.tpl                | 2 +-
 install/debian/9/templates/web/nginx/default.stpl               | 2 +-
 install/debian/9/templates/web/nginx/default.tpl                | 2 +-
 install/debian/9/templates/web/nginx/hosting.stpl               | 2 +-
 install/debian/9/templates/web/nginx/hosting.tpl                | 2 +-
 install/debian/9/templates/web/nginx/http2.stpl                 | 2 +-
 install/debian/9/templates/web/nginx/http2.tpl                  | 2 +-
 install/rhel/5/templates/web/nginx/caching.stpl                 | 2 +-
 install/rhel/5/templates/web/nginx/caching.tpl                  | 2 +-
 install/rhel/5/templates/web/nginx/default.stpl                 | 2 +-
 install/rhel/5/templates/web/nginx/default.tpl                  | 2 +-
 install/rhel/5/templates/web/nginx/hosting.stpl                 | 2 +-
 install/rhel/5/templates/web/nginx/hosting.tpl                  | 2 +-
 install/rhel/5/templates/web/nginx/http2.stpl                   | 2 +-
 install/rhel/5/templates/web/nginx/http2.tpl                    | 2 +-
 install/rhel/6/templates/web/nginx/caching.stpl                 | 2 +-
 install/rhel/6/templates/web/nginx/caching.tpl                  | 2 +-
 install/rhel/6/templates/web/nginx/default.stpl                 | 2 +-
 install/rhel/6/templates/web/nginx/default.tpl                  | 2 +-
 install/rhel/6/templates/web/nginx/hosting.stpl                 | 2 +-
 install/rhel/6/templates/web/nginx/hosting.tpl                  | 2 +-
 install/rhel/6/templates/web/nginx/http2.stpl                   | 2 +-
 install/rhel/6/templates/web/nginx/http2.tpl                    | 2 +-
 install/rhel/7/templates/web/nginx/caching.stpl                 | 2 +-
 install/rhel/7/templates/web/nginx/caching.tpl                  | 2 +-
 install/rhel/7/templates/web/nginx/default.stpl                 | 2 +-
 install/rhel/7/templates/web/nginx/default.tpl                  | 2 +-
 install/rhel/7/templates/web/nginx/hosting.stpl                 | 2 +-
 install/rhel/7/templates/web/nginx/hosting.tpl                  | 2 +-
 install/rhel/7/templates/web/nginx/http2.stpl                   | 2 +-
 install/rhel/7/templates/web/nginx/http2.tpl                    | 2 +-
 install/ubuntu/12.04/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/12.04/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/12.04/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/12.04/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/12.04/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/12.04/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/12.04/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/12.04/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/12.10/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/12.10/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/12.10/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/12.10/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/12.10/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/12.10/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/12.10/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/12.10/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/13.04/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/13.04/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/13.04/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/13.04/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/13.04/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/13.04/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/13.04/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/13.04/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/13.10/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/13.10/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/13.10/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/13.10/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/13.10/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/13.10/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/13.10/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/13.10/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/14.04/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/14.04/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/14.04/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/14.04/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/14.04/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/14.04/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/14.04/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/14.04/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/14.10/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/14.10/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/14.10/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/14.10/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/14.10/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/14.10/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/14.10/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/14.10/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/15.04/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/15.04/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/15.04/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/15.04/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/15.04/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/15.04/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/15.04/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/15.04/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/15.10/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/15.10/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/15.10/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/15.10/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/15.10/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/15.10/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/15.10/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/15.10/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/16.04/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/16.04/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/16.04/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/16.04/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/16.04/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/16.04/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/16.04/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/16.04/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/16.10/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/16.10/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/16.10/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/16.10/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/16.10/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/16.10/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/16.10/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/16.10/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/17.04/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/17.04/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/17.04/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/17.04/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/17.04/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/17.04/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/17.04/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/17.04/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/17.10/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/17.10/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/17.10/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/17.10/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/17.10/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/17.10/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/17.10/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/17.10/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/18.04/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/18.04/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/18.04/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/18.04/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/18.04/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/18.04/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/18.04/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/18.04/templates/web/nginx/http2.tpl              | 2 +-
 install/ubuntu/18.10/templates/web/nginx/caching.stpl           | 2 +-
 install/ubuntu/18.10/templates/web/nginx/caching.tpl            | 2 +-
 install/ubuntu/18.10/templates/web/nginx/default.stpl           | 2 +-
 install/ubuntu/18.10/templates/web/nginx/default.tpl            | 2 +-
 install/ubuntu/18.10/templates/web/nginx/hosting.stpl           | 2 +-
 install/ubuntu/18.10/templates/web/nginx/hosting.tpl            | 2 +-
 install/ubuntu/18.10/templates/web/nginx/http2.stpl             | 2 +-
 install/ubuntu/18.10/templates/web/nginx/http2.tpl              | 2 +-
 .../nodejs-nginx-templates/node-app-3000-no-https-force.stpl    | 2 +-
 .../nodejs-nginx-templates/node-app-3000-no-https-force.tpl     | 2 +-
 .../nodejs-nginx-templates/node-app-3000-pass-to-https.stpl     | 2 +-
 .../tools/nodejs-nginx-templates/node-app-3000.stpl             | 2 +-
 .../node-app-4000-and-websocket-6001.stpl                       | 2 +-
 .../node-app-also-handle-static-files-3000.stpl                 | 2 +-
 .../node-app-also-handle-static-files-3000.tpl                  | 2 +-
 .../force-https-firewall-burst-2-speed-2-conn-4.stpl            | 2 +-
 .../rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl    | 2 +-
 .../tools/rate-limit-tpl/force-https-firewall-burst-2.stpl      | 2 +-
 .../for-download/tools/rate-limit-tpl/force-https-firewall.stpl | 2 +-
 .../rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl | 2 +-
 .../rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl  | 2 +-
 .../tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl  | 2 +-
 .../tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl   | 2 +-
 .../tools/rate-limit-tpl/hosting-firewall-burst-2.stpl          | 2 +-
 .../tools/rate-limit-tpl/hosting-firewall-burst-2.tpl           | 2 +-
 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl | 2 +-
 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl  | 2 +-
 213 files changed, 213 insertions(+), 213 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/caching.stpl b/install/debian/10/templates/web/nginx/caching.stpl
index 868e2fe9..2302b419 100644
--- a/install/debian/10/templates/web/nginx/caching.stpl
+++ b/install/debian/10/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/caching.tpl b/install/debian/10/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100644
--- a/install/debian/10/templates/web/nginx/caching.tpl
+++ b/install/debian/10/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/force-https-legacy.stpl b/install/debian/10/templates/web/nginx/force-https-legacy.stpl
index 01a4eea3..db3714c2 100644
--- a/install/debian/10/templates/web/nginx/force-https-legacy.stpl
+++ b/install/debian/10/templates/web/nginx/force-https-legacy.stpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/force-https-public.stpl b/install/debian/10/templates/web/nginx/force-https-public.stpl
index 22951ae5..9c11d06d 100644
--- a/install/debian/10/templates/web/nginx/force-https-public.stpl
+++ b/install/debian/10/templates/web/nginx/force-https-public.stpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
index dac7adaf..45e05c3b 100644
--- a/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
+++ b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -49,7 +49,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/force-https.stpl b/install/debian/10/templates/web/nginx/force-https.stpl
index 4a8185c8..2abae221 100644
--- a/install/debian/10/templates/web/nginx/force-https.stpl
+++ b/install/debian/10/templates/web/nginx/force-https.stpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting-legacy.stpl b/install/debian/10/templates/web/nginx/hosting-legacy.stpl
index cc0370c6..16874648 100644
--- a/install/debian/10/templates/web/nginx/hosting-legacy.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-legacy.stpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting-legacy.tpl b/install/debian/10/templates/web/nginx/hosting-legacy.tpl
index 15961c95..541e560a 100644
--- a/install/debian/10/templates/web/nginx/hosting-legacy.tpl
+++ b/install/debian/10/templates/web/nginx/hosting-legacy.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting-public.stpl b/install/debian/10/templates/web/nginx/hosting-public.stpl
index 22951ae5..9c11d06d 100644
--- a/install/debian/10/templates/web/nginx/hosting-public.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-public.stpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting-public.tpl b/install/debian/10/templates/web/nginx/hosting-public.tpl
index 9ff417ba..756ede37 100644
--- a/install/debian/10/templates/web/nginx/hosting-public.tpl
+++ b/install/debian/10/templates/web/nginx/hosting-public.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
index dac7adaf..45e05c3b 100644
--- a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
@@ -49,7 +49,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
index 5f601672..da7dc9b2 100644
--- a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
+++ b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
@@ -46,7 +46,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting.stpl b/install/debian/10/templates/web/nginx/hosting.stpl
index 30fe0f74..e6ce0670 100644
--- a/install/debian/10/templates/web/nginx/hosting.stpl
+++ b/install/debian/10/templates/web/nginx/hosting.stpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting.tpl b/install/debian/10/templates/web/nginx/hosting.tpl
index 262417b1..87c2f824 100644
--- a/install/debian/10/templates/web/nginx/hosting.tpl
+++ b/install/debian/10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/private-force-https.stpl b/install/debian/10/templates/web/nginx/private-force-https.stpl
index 2b4e42cc..164cec16 100644
--- a/install/debian/10/templates/web/nginx/private-force-https.stpl
+++ b/install/debian/10/templates/web/nginx/private-force-https.stpl
@@ -27,7 +27,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/private-hosting.stpl b/install/debian/10/templates/web/nginx/private-hosting.stpl
index 60b23c55..dbd5bec9 100644
--- a/install/debian/10/templates/web/nginx/private-hosting.stpl
+++ b/install/debian/10/templates/web/nginx/private-hosting.stpl
@@ -27,7 +27,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/private-hosting.tpl b/install/debian/10/templates/web/nginx/private-hosting.tpl
index da70045f..5fd75be5 100644
--- a/install/debian/10/templates/web/nginx/private-hosting.tpl
+++ b/install/debian/10/templates/web/nginx/private-hosting.tpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/caching.stpl b/install/debian/11/templates/web/nginx/caching.stpl
index 868e2fe9..2302b419 100644
--- a/install/debian/11/templates/web/nginx/caching.stpl
+++ b/install/debian/11/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/caching.tpl b/install/debian/11/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100644
--- a/install/debian/11/templates/web/nginx/caching.tpl
+++ b/install/debian/11/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/force-https-legacy.stpl b/install/debian/11/templates/web/nginx/force-https-legacy.stpl
index 01a4eea3..db3714c2 100644
--- a/install/debian/11/templates/web/nginx/force-https-legacy.stpl
+++ b/install/debian/11/templates/web/nginx/force-https-legacy.stpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/force-https-public.stpl b/install/debian/11/templates/web/nginx/force-https-public.stpl
index 22951ae5..9c11d06d 100644
--- a/install/debian/11/templates/web/nginx/force-https-public.stpl
+++ b/install/debian/11/templates/web/nginx/force-https-public.stpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
index dac7adaf..45e05c3b 100644
--- a/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
+++ b/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -49,7 +49,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/force-https.stpl b/install/debian/11/templates/web/nginx/force-https.stpl
index 4a8185c8..2abae221 100644
--- a/install/debian/11/templates/web/nginx/force-https.stpl
+++ b/install/debian/11/templates/web/nginx/force-https.stpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting-legacy.stpl b/install/debian/11/templates/web/nginx/hosting-legacy.stpl
index cc0370c6..16874648 100644
--- a/install/debian/11/templates/web/nginx/hosting-legacy.stpl
+++ b/install/debian/11/templates/web/nginx/hosting-legacy.stpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting-legacy.tpl b/install/debian/11/templates/web/nginx/hosting-legacy.tpl
index 15961c95..541e560a 100644
--- a/install/debian/11/templates/web/nginx/hosting-legacy.tpl
+++ b/install/debian/11/templates/web/nginx/hosting-legacy.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting-public.stpl b/install/debian/11/templates/web/nginx/hosting-public.stpl
index 22951ae5..9c11d06d 100644
--- a/install/debian/11/templates/web/nginx/hosting-public.stpl
+++ b/install/debian/11/templates/web/nginx/hosting-public.stpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting-public.tpl b/install/debian/11/templates/web/nginx/hosting-public.tpl
index 9ff417ba..756ede37 100644
--- a/install/debian/11/templates/web/nginx/hosting-public.tpl
+++ b/install/debian/11/templates/web/nginx/hosting-public.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
index dac7adaf..45e05c3b 100644
--- a/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
+++ b/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
@@ -49,7 +49,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl b/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
index 5f601672..da7dc9b2 100644
--- a/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
+++ b/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
@@ -46,7 +46,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting.stpl b/install/debian/11/templates/web/nginx/hosting.stpl
index 30fe0f74..e6ce0670 100644
--- a/install/debian/11/templates/web/nginx/hosting.stpl
+++ b/install/debian/11/templates/web/nginx/hosting.stpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting.tpl b/install/debian/11/templates/web/nginx/hosting.tpl
index 262417b1..87c2f824 100644
--- a/install/debian/11/templates/web/nginx/hosting.tpl
+++ b/install/debian/11/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/private-force-https.stpl b/install/debian/11/templates/web/nginx/private-force-https.stpl
index 2b4e42cc..164cec16 100644
--- a/install/debian/11/templates/web/nginx/private-force-https.stpl
+++ b/install/debian/11/templates/web/nginx/private-force-https.stpl
@@ -27,7 +27,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/private-hosting.stpl b/install/debian/11/templates/web/nginx/private-hosting.stpl
index 60b23c55..dbd5bec9 100644
--- a/install/debian/11/templates/web/nginx/private-hosting.stpl
+++ b/install/debian/11/templates/web/nginx/private-hosting.stpl
@@ -27,7 +27,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/private-hosting.tpl b/install/debian/11/templates/web/nginx/private-hosting.tpl
index da70045f..5fd75be5 100644
--- a/install/debian/11/templates/web/nginx/private-hosting.tpl
+++ b/install/debian/11/templates/web/nginx/private-hosting.tpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/caching.stpl b/install/debian/7/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100644
--- a/install/debian/7/templates/web/nginx/caching.stpl
+++ b/install/debian/7/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/caching.tpl b/install/debian/7/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100644
--- a/install/debian/7/templates/web/nginx/caching.tpl
+++ b/install/debian/7/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/default.stpl b/install/debian/7/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100644
--- a/install/debian/7/templates/web/nginx/default.stpl
+++ b/install/debian/7/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/default.tpl b/install/debian/7/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100644
--- a/install/debian/7/templates/web/nginx/default.tpl
+++ b/install/debian/7/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/hosting.stpl b/install/debian/7/templates/web/nginx/hosting.stpl
index 62620789..3f4ad39b 100644
--- a/install/debian/7/templates/web/nginx/hosting.stpl
+++ b/install/debian/7/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/hosting.tpl b/install/debian/7/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100644
--- a/install/debian/7/templates/web/nginx/hosting.tpl
+++ b/install/debian/7/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/http2.stpl b/install/debian/7/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/debian/7/templates/web/nginx/http2.stpl
+++ b/install/debian/7/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/http2.tpl b/install/debian/7/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/debian/7/templates/web/nginx/http2.tpl
+++ b/install/debian/7/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/caching.stpl b/install/debian/8/templates/web/nginx/caching.stpl
index 3c56004d..86ba5c78 100644
--- a/install/debian/8/templates/web/nginx/caching.stpl
+++ b/install/debian/8/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/caching.tpl b/install/debian/8/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100644
--- a/install/debian/8/templates/web/nginx/caching.tpl
+++ b/install/debian/8/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/default.stpl b/install/debian/8/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100644
--- a/install/debian/8/templates/web/nginx/default.stpl
+++ b/install/debian/8/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/default.tpl b/install/debian/8/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100644
--- a/install/debian/8/templates/web/nginx/default.tpl
+++ b/install/debian/8/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/hosting.stpl b/install/debian/8/templates/web/nginx/hosting.stpl
index 62620789..3f4ad39b 100644
--- a/install/debian/8/templates/web/nginx/hosting.stpl
+++ b/install/debian/8/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/hosting.tpl b/install/debian/8/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100644
--- a/install/debian/8/templates/web/nginx/hosting.tpl
+++ b/install/debian/8/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/http2.stpl b/install/debian/8/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/debian/8/templates/web/nginx/http2.stpl
+++ b/install/debian/8/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/http2.tpl b/install/debian/8/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/debian/8/templates/web/nginx/http2.tpl
+++ b/install/debian/8/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/caching.stpl b/install/debian/9/templates/web/nginx/caching.stpl
index 868e2fe9..2302b419 100644
--- a/install/debian/9/templates/web/nginx/caching.stpl
+++ b/install/debian/9/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/caching.tpl b/install/debian/9/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100644
--- a/install/debian/9/templates/web/nginx/caching.tpl
+++ b/install/debian/9/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/default.stpl b/install/debian/9/templates/web/nginx/default.stpl
index f225becd..b694d1c2 100644
--- a/install/debian/9/templates/web/nginx/default.stpl
+++ b/install/debian/9/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/default.tpl b/install/debian/9/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100644
--- a/install/debian/9/templates/web/nginx/default.tpl
+++ b/install/debian/9/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/hosting.stpl b/install/debian/9/templates/web/nginx/hosting.stpl
index 3b0e8ce9..736751d5 100644
--- a/install/debian/9/templates/web/nginx/hosting.stpl
+++ b/install/debian/9/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/hosting.tpl b/install/debian/9/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100644
--- a/install/debian/9/templates/web/nginx/hosting.tpl
+++ b/install/debian/9/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/http2.stpl b/install/debian/9/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/debian/9/templates/web/nginx/http2.stpl
+++ b/install/debian/9/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/http2.tpl b/install/debian/9/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/debian/9/templates/web/nginx/http2.tpl
+++ b/install/debian/9/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/caching.stpl b/install/rhel/5/templates/web/nginx/caching.stpl
index 5e1ac757..2d8cb3ca 100755
--- a/install/rhel/5/templates/web/nginx/caching.stpl
+++ b/install/rhel/5/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/caching.tpl b/install/rhel/5/templates/web/nginx/caching.tpl
index 6d727c67..677fea6f 100755
--- a/install/rhel/5/templates/web/nginx/caching.tpl
+++ b/install/rhel/5/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/default.stpl b/install/rhel/5/templates/web/nginx/default.stpl
index 22bbd55a..cd350432 100755
--- a/install/rhel/5/templates/web/nginx/default.stpl
+++ b/install/rhel/5/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/default.tpl b/install/rhel/5/templates/web/nginx/default.tpl
index c1fec114..d7fa634c 100755
--- a/install/rhel/5/templates/web/nginx/default.tpl
+++ b/install/rhel/5/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/hosting.stpl b/install/rhel/5/templates/web/nginx/hosting.stpl
index c3414149..8985f0aa 100755
--- a/install/rhel/5/templates/web/nginx/hosting.stpl
+++ b/install/rhel/5/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/hosting.tpl b/install/rhel/5/templates/web/nginx/hosting.tpl
index 44d87496..41fe0c43 100755
--- a/install/rhel/5/templates/web/nginx/hosting.tpl
+++ b/install/rhel/5/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/http2.stpl b/install/rhel/5/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/rhel/5/templates/web/nginx/http2.stpl
+++ b/install/rhel/5/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/http2.tpl b/install/rhel/5/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/rhel/5/templates/web/nginx/http2.tpl
+++ b/install/rhel/5/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/caching.stpl b/install/rhel/6/templates/web/nginx/caching.stpl
index 5e1ac757..2d8cb3ca 100755
--- a/install/rhel/6/templates/web/nginx/caching.stpl
+++ b/install/rhel/6/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/caching.tpl b/install/rhel/6/templates/web/nginx/caching.tpl
index 6d727c67..677fea6f 100755
--- a/install/rhel/6/templates/web/nginx/caching.tpl
+++ b/install/rhel/6/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/default.stpl b/install/rhel/6/templates/web/nginx/default.stpl
index 22bbd55a..cd350432 100755
--- a/install/rhel/6/templates/web/nginx/default.stpl
+++ b/install/rhel/6/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/default.tpl b/install/rhel/6/templates/web/nginx/default.tpl
index c1fec114..d7fa634c 100755
--- a/install/rhel/6/templates/web/nginx/default.tpl
+++ b/install/rhel/6/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/hosting.stpl b/install/rhel/6/templates/web/nginx/hosting.stpl
index c3414149..8985f0aa 100755
--- a/install/rhel/6/templates/web/nginx/hosting.stpl
+++ b/install/rhel/6/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/hosting.tpl b/install/rhel/6/templates/web/nginx/hosting.tpl
index 44d87496..41fe0c43 100755
--- a/install/rhel/6/templates/web/nginx/hosting.tpl
+++ b/install/rhel/6/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/http2.stpl b/install/rhel/6/templates/web/nginx/http2.stpl
index cfdb9188..3f13ff22 100644
--- a/install/rhel/6/templates/web/nginx/http2.stpl
+++ b/install/rhel/6/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/http2.tpl b/install/rhel/6/templates/web/nginx/http2.tpl
index b20e2922..b51af9bf 100644
--- a/install/rhel/6/templates/web/nginx/http2.tpl
+++ b/install/rhel/6/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/caching.stpl b/install/rhel/7/templates/web/nginx/caching.stpl
index 5e1ac757..2d8cb3ca 100755
--- a/install/rhel/7/templates/web/nginx/caching.stpl
+++ b/install/rhel/7/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/caching.tpl b/install/rhel/7/templates/web/nginx/caching.tpl
index 6d727c67..677fea6f 100755
--- a/install/rhel/7/templates/web/nginx/caching.tpl
+++ b/install/rhel/7/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/default.stpl b/install/rhel/7/templates/web/nginx/default.stpl
index 22bbd55a..cd350432 100755
--- a/install/rhel/7/templates/web/nginx/default.stpl
+++ b/install/rhel/7/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/default.tpl b/install/rhel/7/templates/web/nginx/default.tpl
index c1fec114..d7fa634c 100755
--- a/install/rhel/7/templates/web/nginx/default.tpl
+++ b/install/rhel/7/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/hosting.stpl b/install/rhel/7/templates/web/nginx/hosting.stpl
index c3414149..8985f0aa 100755
--- a/install/rhel/7/templates/web/nginx/hosting.stpl
+++ b/install/rhel/7/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/hosting.tpl b/install/rhel/7/templates/web/nginx/hosting.tpl
index 44d87496..41fe0c43 100755
--- a/install/rhel/7/templates/web/nginx/hosting.tpl
+++ b/install/rhel/7/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/http2.stpl b/install/rhel/7/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/rhel/7/templates/web/nginx/http2.stpl
+++ b/install/rhel/7/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/http2.tpl b/install/rhel/7/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/rhel/7/templates/web/nginx/http2.tpl
+++ b/install/rhel/7/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/caching.stpl b/install/ubuntu/12.04/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/12.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/caching.tpl b/install/ubuntu/12.04/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/12.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/default.stpl b/install/ubuntu/12.04/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/12.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/default.tpl b/install/ubuntu/12.04/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/12.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/hosting.stpl b/install/ubuntu/12.04/templates/web/nginx/hosting.stpl
index 62620789..3f4ad39b 100755
--- a/install/ubuntu/12.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/hosting.tpl b/install/ubuntu/12.04/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/12.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/http2.stpl b/install/ubuntu/12.04/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/12.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/http2.tpl b/install/ubuntu/12.04/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/12.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/caching.stpl b/install/ubuntu/12.10/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/12.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/caching.tpl b/install/ubuntu/12.10/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/12.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/default.stpl b/install/ubuntu/12.10/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/12.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/default.tpl b/install/ubuntu/12.10/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/12.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/hosting.stpl b/install/ubuntu/12.10/templates/web/nginx/hosting.stpl
index 62620789..3f4ad39b 100755
--- a/install/ubuntu/12.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/hosting.tpl b/install/ubuntu/12.10/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/12.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/http2.stpl b/install/ubuntu/12.10/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/12.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/http2.tpl b/install/ubuntu/12.10/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/12.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/caching.stpl b/install/ubuntu/13.04/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/13.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/caching.tpl b/install/ubuntu/13.04/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/13.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/default.stpl b/install/ubuntu/13.04/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/13.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/default.tpl b/install/ubuntu/13.04/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/13.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/hosting.stpl b/install/ubuntu/13.04/templates/web/nginx/hosting.stpl
index 62620789..3f4ad39b 100755
--- a/install/ubuntu/13.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/hosting.tpl b/install/ubuntu/13.04/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/13.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/http2.stpl b/install/ubuntu/13.04/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/13.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/http2.tpl b/install/ubuntu/13.04/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/13.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/caching.stpl b/install/ubuntu/13.10/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/13.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/caching.tpl b/install/ubuntu/13.10/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/13.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/default.stpl b/install/ubuntu/13.10/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/13.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/default.tpl b/install/ubuntu/13.10/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/13.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/hosting.stpl b/install/ubuntu/13.10/templates/web/nginx/hosting.stpl
index 62620789..3f4ad39b 100755
--- a/install/ubuntu/13.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/hosting.tpl b/install/ubuntu/13.10/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/13.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/http2.stpl b/install/ubuntu/13.10/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/13.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/http2.tpl b/install/ubuntu/13.10/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/13.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/caching.stpl b/install/ubuntu/14.04/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/14.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/caching.tpl b/install/ubuntu/14.04/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/14.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/default.stpl b/install/ubuntu/14.04/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/14.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/default.tpl b/install/ubuntu/14.04/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/14.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/hosting.stpl b/install/ubuntu/14.04/templates/web/nginx/hosting.stpl
index 62620789..3f4ad39b 100755
--- a/install/ubuntu/14.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/hosting.tpl b/install/ubuntu/14.04/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/14.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/http2.stpl b/install/ubuntu/14.04/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/14.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/http2.tpl b/install/ubuntu/14.04/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/14.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/caching.stpl b/install/ubuntu/14.10/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/14.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/caching.tpl b/install/ubuntu/14.10/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/14.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/default.stpl b/install/ubuntu/14.10/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/14.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/default.tpl b/install/ubuntu/14.10/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/14.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/hosting.stpl b/install/ubuntu/14.10/templates/web/nginx/hosting.stpl
index 62620789..3f4ad39b 100755
--- a/install/ubuntu/14.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/hosting.tpl b/install/ubuntu/14.10/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/14.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/http2.stpl b/install/ubuntu/14.10/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/14.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/http2.tpl b/install/ubuntu/14.10/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/14.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/caching.stpl b/install/ubuntu/15.04/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/15.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/caching.tpl b/install/ubuntu/15.04/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/15.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/default.stpl b/install/ubuntu/15.04/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/15.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/default.tpl b/install/ubuntu/15.04/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/15.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/hosting.stpl b/install/ubuntu/15.04/templates/web/nginx/hosting.stpl
index 62620789..3f4ad39b 100755
--- a/install/ubuntu/15.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/hosting.tpl b/install/ubuntu/15.04/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/15.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/http2.stpl b/install/ubuntu/15.04/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/15.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/http2.tpl b/install/ubuntu/15.04/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/15.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/caching.stpl b/install/ubuntu/15.10/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/15.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/caching.tpl b/install/ubuntu/15.10/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/15.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/default.stpl b/install/ubuntu/15.10/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/15.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/default.tpl b/install/ubuntu/15.10/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/15.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/hosting.stpl b/install/ubuntu/15.10/templates/web/nginx/hosting.stpl
index 62620789..3f4ad39b 100755
--- a/install/ubuntu/15.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/hosting.tpl b/install/ubuntu/15.10/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/15.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/http2.stpl b/install/ubuntu/15.10/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/15.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/http2.tpl b/install/ubuntu/15.10/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/15.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/caching.stpl b/install/ubuntu/16.04/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/16.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/caching.tpl b/install/ubuntu/16.04/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/16.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/default.stpl b/install/ubuntu/16.04/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/16.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/default.tpl b/install/ubuntu/16.04/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/16.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/hosting.stpl b/install/ubuntu/16.04/templates/web/nginx/hosting.stpl
index 62620789..3f4ad39b 100755
--- a/install/ubuntu/16.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/hosting.tpl b/install/ubuntu/16.04/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/16.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/http2.stpl b/install/ubuntu/16.04/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/16.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/http2.tpl b/install/ubuntu/16.04/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/16.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/caching.stpl b/install/ubuntu/16.10/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/16.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/caching.tpl b/install/ubuntu/16.10/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/16.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/default.stpl b/install/ubuntu/16.10/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/16.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/default.tpl b/install/ubuntu/16.10/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/16.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/hosting.stpl b/install/ubuntu/16.10/templates/web/nginx/hosting.stpl
index 62620789..3f4ad39b 100755
--- a/install/ubuntu/16.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/hosting.tpl b/install/ubuntu/16.10/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/16.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/http2.stpl b/install/ubuntu/16.10/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/16.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/http2.tpl b/install/ubuntu/16.10/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/16.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/caching.stpl b/install/ubuntu/17.04/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/17.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/caching.tpl b/install/ubuntu/17.04/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/17.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/default.stpl b/install/ubuntu/17.04/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/17.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/default.tpl b/install/ubuntu/17.04/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/17.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/hosting.stpl b/install/ubuntu/17.04/templates/web/nginx/hosting.stpl
index 1ef8994b..587b02c7 100755
--- a/install/ubuntu/17.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/hosting.tpl b/install/ubuntu/17.04/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/17.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/http2.stpl b/install/ubuntu/17.04/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/17.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/http2.tpl b/install/ubuntu/17.04/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/17.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/caching.stpl b/install/ubuntu/17.10/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/17.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/caching.tpl b/install/ubuntu/17.10/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/17.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/default.stpl b/install/ubuntu/17.10/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/17.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/default.tpl b/install/ubuntu/17.10/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/17.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/hosting.stpl b/install/ubuntu/17.10/templates/web/nginx/hosting.stpl
index 1ef8994b..587b02c7 100755
--- a/install/ubuntu/17.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/hosting.tpl b/install/ubuntu/17.10/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/17.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/http2.stpl b/install/ubuntu/17.10/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/17.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/http2.tpl b/install/ubuntu/17.10/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/17.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/caching.stpl b/install/ubuntu/18.04/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/18.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/caching.tpl b/install/ubuntu/18.04/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/18.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/default.stpl b/install/ubuntu/18.04/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/18.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/default.tpl b/install/ubuntu/18.04/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/18.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/hosting.stpl b/install/ubuntu/18.04/templates/web/nginx/hosting.stpl
index 1ef8994b..587b02c7 100755
--- a/install/ubuntu/18.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/hosting.tpl b/install/ubuntu/18.04/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/18.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/http2.stpl b/install/ubuntu/18.04/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/18.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/http2.tpl b/install/ubuntu/18.04/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/18.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/caching.stpl b/install/ubuntu/18.10/templates/web/nginx/caching.stpl
index e149b98b..62be58ba 100755
--- a/install/ubuntu/18.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/18.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,7 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/caching.tpl b/install/ubuntu/18.10/templates/web/nginx/caching.tpl
index 36761b65..a1a89549 100755
--- a/install/ubuntu/18.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/18.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/default.stpl b/install/ubuntu/18.10/templates/web/nginx/default.stpl
index 0e669b3d..7672d9ac 100755
--- a/install/ubuntu/18.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/18.10/templates/web/nginx/default.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/default.tpl b/install/ubuntu/18.10/templates/web/nginx/default.tpl
index 4d5c774b..0e200e92 100755
--- a/install/ubuntu/18.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/18.10/templates/web/nginx/default.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/hosting.stpl b/install/ubuntu/18.10/templates/web/nginx/hosting.stpl
index 1ef8994b..587b02c7 100755
--- a/install/ubuntu/18.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/18.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/hosting.tpl b/install/ubuntu/18.10/templates/web/nginx/hosting.tpl
index 15961c95..541e560a 100755
--- a/install/ubuntu/18.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/18.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/http2.stpl b/install/ubuntu/18.10/templates/web/nginx/http2.stpl
index f225becd..b694d1c2 100644
--- a/install/ubuntu/18.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/18.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/http2.tpl b/install/ubuntu/18.10/templates/web/nginx/http2.tpl
index 4d5c774b..0e200e92 100644
--- a/install/ubuntu/18.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/18.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
index 85fb4a95..0978f452 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
@@ -41,7 +41,7 @@ server {
     }
 
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.tpl
index fff0aebb..933eea6d 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.tpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.tpl
@@ -32,7 +32,7 @@ server {
         alias   %home%/%user%/web/%domain%/document_errors/;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
index a392afef..4e75c188 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
@@ -41,7 +41,7 @@ server {
     }
 
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
index 85fb4a95..0978f452 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
@@ -41,7 +41,7 @@ server {
     }
 
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
index 0def9f53..d1781ee6 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
@@ -57,7 +57,7 @@ server {
     }
 
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
index 9b0a5853..e22d4ccc 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
@@ -26,7 +26,7 @@ server {
     }
 
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.tpl
index 93267737..bb298e66 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.tpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.tpl
@@ -17,7 +17,7 @@ server {
         # try_files $uri $uri/ =404;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
index 2597eb7f..c993be39 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
@@ -28,7 +28,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
index 6d4250ff..2b4fa14e 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
@@ -28,7 +28,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
index ab527372..289116df 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
@@ -28,7 +28,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
index dbb239fb..b06aca58 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
@@ -28,7 +28,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
index 87c34de1..05ede9e6 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
@@ -28,7 +28,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
index cfcba2e8..15fe6fe5 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
index 4318c814..e02ce616 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
@@ -28,7 +28,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
index d09c841b..03426c6e 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
index 24bf0c1f..d43b7529 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
@@ -28,7 +28,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
index 3b382c15..c93bc951 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
index a5d163e3..c2274a43 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
@@ -28,7 +28,7 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
index 1441a6a9..deed2b71 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
@@ -25,7 +25,7 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.      {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}

From bda54c4ec4194d1a1d994676fab9bae7a08657f4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 24 Mar 2022 18:20:31 +0100
Subject: [PATCH 1686/2300] handle --parameters without shifting

---
 func/handle_parameters.sh | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/func/handle_parameters.sh b/func/handle_parameters.sh
index ba5bd36f..32e09312 100644
--- a/func/handle_parameters.sh
+++ b/func/handle_parameters.sh
@@ -1,4 +1,5 @@
 # handle --parameters=val
+
 handle_parameter() {
     origparam=$1
     searchstring="="
@@ -7,14 +8,12 @@ handle_parameter() {
         var_without_minuses=${origparam:2}
         var=${var_without_minuses%%=*}
         val=${origparam#*$searchstring}
-        #echo $var
-        #echo $val
+        # echo "$var = $val"
         printf -v "$var" '%s' "$val"
     fi
 }
 numargs=$#
 for ((i=1 ; i <= numargs ; i++))
 do
-    handle_parameter $1
-    shift
+    handle_parameter ${@:$i:1}
 done

From 6523a2daf953409499ab2eb269fdd358d92f2ae1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 24 Mar 2022 20:26:16 +0100
Subject: [PATCH 1687/2300] OpenCart detection

---
 bin/v-get-database-credentials-of-domain | 37 ++++++++++++++++++++++--
 1 file changed, 35 insertions(+), 2 deletions(-)

diff --git a/bin/v-get-database-credentials-of-domain b/bin/v-get-database-credentials-of-domain
index 60164226..22550d7a 100644
--- a/bin/v-get-database-credentials-of-domain
+++ b/bin/v-get-database-credentials-of-domain
@@ -46,11 +46,12 @@ fi
 #                       Action                             #
 #----------------------------------------------------------#
 
-SITE_FOLDER="/home/$USER/web/$DOMAIN/public_html"
+PUBLIC_HTML='public_html';
 CHECK_PUBLIC_SHTML=$(/usr/local/vesta/bin/v-list-web-domain "$USER" "$DOMAIN" | grep 'SSL:' | grep -c 'single')
 if [ $CHECK_PUBLIC_SHTML -eq 1 ]; then
-    SITE_FOLDER="/home/$USER/web/$DOMAIN/public_shtml"
+    PUBLIC_HTML='public_shtml';
 fi
+SITE_FOLDER="/home/$USER/web/$DOMAIN/$PUBLIC_HTML"
 
 if [ ! -z "$SUBFOLDER" ]; then
     SITE_FOLDER="${SITE_FOLDER}/${SUBFOLDER}"
@@ -68,6 +69,16 @@ if [ -f "$SITE_FOLDER/configuration.php" ]; then
     CONFIG_FILE="configuration.php"
     CONFIG_FILE_FULL_PATH="$SITE_FOLDER/$CONFIG_FILE"
 fi
+if [ -f "$SITE_FOLDER/system/engine/model.php" ]; then
+    check_grep=$(grep -c 'OpenCart' $SITE_FOLDER/system/engine/model.php)
+    if [ "$check_grep" -gt 0 ]; then
+        CMS_TYPE='opencart'
+        CONFIG_FILE="$PUBLIC_HTML/config.php"
+        SUBFOLDER='..'
+        SITE_FOLDER="${SITE_FOLDER}/.."
+        CONFIG_FILE_FULL_PATH="$SITE_FOLDER/$CONFIG_FILE"
+    fi
+fi
 
 if [ "$CMS_TYPE" = "wordpress" ]; then
     CONFIG_FILE_FULL_PATH_BACKUP="${CONFIG_FILE_FULL_PATH}_backup"
@@ -97,6 +108,20 @@ if [ "$CMS_TYPE" = "joomla" ]; then
     rm $CONFIG_FILE_FULL_PATH_BACKUP
 fi
 
+if [ "$CMS_TYPE" = "opencart" ]; then
+    CONFIG_FILE_FULL_PATH_BACKUP="${CONFIG_FILE_FULL_PATH}_backup"
+    cp $CONFIG_FILE_FULL_PATH $CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|//.*$||g" $CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|('|( '|g" $CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|');|' );|g" $CONFIG_FILE_FULL_PATH_BACKUP
+    DATABASE_NAME=$(grep 'DB_DATABASE' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    DATABASE_USERNAME=$(grep 'DB_USERNAME' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    DATABASE_PASSWORD=$(grep 'DB_PASSWORD' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    DATABASE_HOSTNAME=$(grep 'DB_HOST' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")
+    rm $CONFIG_FILE_FULL_PATH_BACKUP
+fi
+
+
 if [ ! -z "$DATABASE_NAME" ]; then
     DATABASE_NAME_WITHOUT_USER_PREFIX=$(get_database_name_without_user_prefix "$USER" "$DATABASE_NAME")
 fi
@@ -134,9 +159,17 @@ echo "CMS_TYPE=$CMS_TYPE"
 SITE_FOLDER=$(escape_shell_quote $SITE_FOLDER)
 echo "SITE_FOLDER=$SITE_FOLDER"
 
+SUBFOLDER=$(escape_shell_quote $SUBFOLDER)
+echo "SITE_SUBFOLDER=$SUBFOLDER"
+
 USER=$(escape_shell_quote $USER)
 echo "SITE_USER=$USER"
 
+if [ "$CMS_TYPE" = "'opencart'" ]; then
+    echo "SEARCH_FOR_CONFIGS_DATABASE_NAME=1"
+    echo "SEARCH_FOR_CONFIGS_DATABASE_USERNAME=1"
+fi
+
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#

From ebb6b5406581e79aca4881a67b301c221a28c307 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 24 Mar 2022 20:31:43 +0100
Subject: [PATCH 1688/2300] Many improvements in v-clone-website

---
 bin/v-clone-website | 81 ++++++++++++++++++++++++++++++++++++++-------
 1 file changed, 69 insertions(+), 12 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index e055d1a3..2c38eef9 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -14,11 +14,12 @@ if [ $# -lt 2 ]; then
     echo "--FROM_DATABASE_NAME=..."
     echo "--FROM_DATABASE_USERNAME=..."
     echo "--FROM_DATABASE_PASSWORD=..."
-    echo "--FROM_CONFIG_FILE=..."
+    echo "--CONFIG_FILE=..."
     echo "--TO_USER=..."
     echo "--TO_DATABASE_NAME=..."
     echo "--TO_DATABASE_USERNAME=..."
     echo "--TO_DATABASE_PASSWORD=..."
+    echo "--SITE_SUBFOLDER=..."
     exit 1
 fi
 
@@ -50,6 +51,9 @@ TO_DATABASE_NAME=''
 TO_DATABASE_USERNAME=''
 TO_DATABASE_PASSWORD=''
 DATABASE_SUFIX='_migrated'
+SITE_SUBFOLDER=''
+SEARCH_FOR_CONFIGS_DATABASE_NAME=''
+SEARCH_FOR_CONFIGS_DATABASE_USERNAME=''
 
 #----------------------------------------------------------#
 #                    Verifications                         #
@@ -61,7 +65,16 @@ is_domain_format_valid "$TO_DOMAIN"
 
 FROM_USER=$user
 
-r=$(/usr/local/vesta/bin/v-get-database-credentials-of-domain "$FROM_DOMAIN")
+# take --parameters
+source /usr/local/vesta/func/handle_parameters.sh
+
+if [ -z "$SITE_SUBFOLDER" ]; then
+    r=$(/usr/local/vesta/bin/v-get-database-credentials-of-domain "$FROM_DOMAIN")
+else
+    r=$(/usr/local/vesta/bin/v-get-database-credentials-of-domain "$FROM_DOMAIN" "$SITE_SUBFOLDER")
+fi
+#echo $r
+#exit
 eval $r
 
 # take --parameters
@@ -155,6 +168,9 @@ CHECK_PUBLIC_SHTML=$(/usr/local/vesta/bin/v-list-web-domain "$TO_USER" "$TO_DOMA
 if [ $CHECK_PUBLIC_SHTML -eq 1 ]; then
     TO_FOLDER="/home/$TO_USER/web/$TO_DOMAIN/public_shtml"
 fi
+if [ ! -z "$SITE_SUBFOLDER" ]; then
+    TO_FOLDER="$TO_FOLDER/$SITE_SUBFOLDER"
+fi
 
 TO_CONFIG_FILE_FULL_PATH="$TO_FOLDER/$FROM_CONFIG_FILE"
 
@@ -218,6 +234,12 @@ if [ $FROM_DOMAIN_HAS_SSL -eq 1 ] && [ $TO_DOMAIN_HAS_SSL -eq 0 ]; then
     SHOULD_INSTALL_SSL=1
 fi
 
+FROM_FPM_VER=""
+if [[ $FROM_DOMAIN_TPL == "PHP-FPM-"* ]]; then
+    FROM_FPM_TPL_VER=${FROM_DOMAIN_TPL:8:2}
+    FROM_FPM_VER="${FROM_DOMAIN_TPL:8:1}.${FROM_DOMAIN_TPL:9:1}"
+fi
+
 # ----------- CHECK -------------
 
 if [ $IT_IS_WP -eq 0 ]; then
@@ -240,13 +262,16 @@ fi
 # ----------- PRINT -------------
 
 echo "==============================================================================="
-echo "FROM_DOMAIN = $FROM_DOMAIN"
-echo "TO_DOMAIN   = $TO_DOMAIN"
-echo "FROM_USER = $FROM_USER"
-echo "TO_USER   = $TO_USER"
-echo "FROM_FOLDER = $FROM_FOLDER"
-echo "TO_FOLDER   = $TO_FOLDER"
-echo "IT_IS_WP = $IT_IS_WP"
+echo "FROM_DOMAIN    = $FROM_DOMAIN"
+echo "TO_DOMAIN      = $TO_DOMAIN"
+echo "FROM_USER      = $FROM_USER"
+echo "TO_USER        = $TO_USER"
+echo "SITE_SUBFOLDER = $SITE_SUBFOLDER"
+echo "FROM_FOLDER    = $FROM_FOLDER"
+echo "TO_FOLDER      = $TO_FOLDER"
+echo "CMS_TYPE       = $CMS_TYPE"
+echo "IT_IS_WP       = $IT_IS_WP"
+echo "CONFIG_FILE    = $CONFIG_FILE"
 echo "FROM_CONFIG_FILE_FULL_PATH = $FROM_CONFIG_FILE_FULL_PATH"
 echo "TO_CONFIG_FILE_FULL_PATH   = $TO_CONFIG_FILE_FULL_PATH"
 echo "FROM_DATABASE_NAME = $FROM_DATABASE_NAME"
@@ -264,8 +289,11 @@ echo "CREATE_TO_USER        = $CREATE_TO_USER"
 echo "CREATE_TO_DOMAIN      = $CREATE_TO_DOMAIN"
 echo "SHOULD_INSTALL_SSL    = $SHOULD_INSTALL_SSL"
 echo "FROM_DOMAIN_TPL       = $FROM_DOMAIN_TPL"
+echo "FROM_FPM_VER          = $FROM_FPM_VER"
 echo "FROM_DOMAIN_PROXY_TPL = $FROM_DOMAIN_PROXY_TPL"
 echo "FROM_DOMAIN_PROXY_EXT = $FROM_DOMAIN_PROXY_EXT"
+echo "SEARCH_FOR_CONFIGS_DATABASE_NAME     = $SEARCH_FOR_CONFIGS_DATABASE_NAME"
+echo "SEARCH_FOR_CONFIGS_DATABASE_USERNAME = $SEARCH_FOR_CONFIGS_DATABASE_USERNAME"
 echo "==============================================================================="
 read -p "=== Press Enter to continue ==="
 
@@ -297,6 +325,15 @@ if [ ! -z "$FROM_DOMAIN_TPL" ]; then
     echo "=== Set $FROM_DOMAIN_TPL template to domain $TO_DOMAIN"
     /usr/local/vesta/bin/v-change-web-domain-tpl "$TO_USER" "$TO_DOMAIN" "$FROM_DOMAIN_TPL" "yes"
 fi
+if [ "$SITE_SUBFOLDER" = ".." ]; then
+    if [ ! -z "$FROM_FPM_VER" ]; then
+        POOLD_FILE="/etc/php/$FROM_FPM_VER/fpm/pool.d/$TO_DOMAIN.conf"
+        echo "=== Removing public_html from open_basedir in $POOLD_FILE"
+        sed -i "s|/public_html:|:|g" $POOLD_FILE
+        sed -i "s|/public_shtml:|:|g" $POOLD_FILE
+        systemctl restart php${FROM_FPM_VER}-fpm
+    fi
+fi
 
 if [ ! -z "$FROM_DOMAIN_PROXY_TPL" ]; then
     echo "=== Set $FROM_DOMAIN_PROXY_TPL proxy template to domain $TO_DOMAIN"
@@ -320,7 +357,13 @@ echo "=== Importing to database $TO_DATABASE_NAME"
 mysql $TO_DATABASE_NAME < $FROM_DATABASE_NAME.sql
 
 echo "=== Copying files from $FROM_FOLDER to folder $TO_FOLDER"
-rsync -a --delete $FROM_FOLDER/ $TO_FOLDER/
+if [ "$SITE_SUBFOLDER" != ".." ]; then
+    echo "====== Executing: rsync -a --delete $FROM_FOLDER/ $TO_FOLDER/"
+    rsync -a --delete $FROM_FOLDER/ $TO_FOLDER/
+else
+    echo "====== Executing: rsync -a --delete --exclude 'logs/*' $FROM_FOLDER/ $TO_FOLDER/"
+    rsync -a --delete --exclude 'logs/*' $FROM_FOLDER/ $TO_FOLDER/
+fi
 echo "=== Chowning to $TO_USER:$TO_USER in folder $TO_FOLDER"
 chown -R $TO_USER:$TO_USER $TO_FOLDER
 
@@ -328,13 +371,27 @@ replace_php_config_value "${FROM_DATABASE_NAME}" "${TO_DATABASE_NAME}" "$TO_CONF
 replace_php_config_value "${FROM_DATABASE_USERNAME}" "${TO_DATABASE_USERNAME}" "$TO_CONFIG_FILE_FULL_PATH" "yes"
 replace_php_config_value "${FROM_DATABASE_PASSWORD}" "${TO_DATABASE_PASSWORD}" "$TO_CONFIG_FILE_FULL_PATH" "yes"
 
-echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in folder $TO_FOLDER"
+echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN by searching in folder $TO_FOLDER"
 REGEXP_FROM_DOMAIN="${FROM_DOMAIN//\./\\.}"
 grep -rl "$REGEXP_FROM_DOMAIN" $TO_FOLDER | xargs sed -i "s#$REGEXP_FROM_DOMAIN#$TO_DOMAIN#g"
 if [ "$FROM_USER" != "$TO_USER" ]; then
-    echo "=== Replacing /home/$FROM_USER/ to /home/$TO_USER/ in folder $TO_FOLDER"
+    echo "=== Replacing /home/$FROM_USER/ to /home/$TO_USER/ by searching in folder $TO_FOLDER"
     grep -rl "/home/$FROM_USER/" $TO_FOLDER | xargs sed -i "s#/home/$FROM_USER/#/home/$TO_USER/#g"
 fi
+if [ ! -z "$SEARCH_FOR_CONFIGS_DATABASE_NAME" ]; then
+    echo "=== Replacing ${FROM_DATABASE_NAME} to ${TO_DATABASE_NAME} by searching in folder $TO_FOLDER [SEARCH_FOR_CONFIGS_DATABASE_NAME]"
+    grep -rl "${FROM_DATABASE_NAME}" $TO_FOLDER | xargs sed -i "s#${FROM_DATABASE_NAME}#${TO_DATABASE_NAME}#g"
+fi
+if [ ! -z "$SEARCH_FOR_CONFIGS_DATABASE_USERNAME" ]; then
+    DO_SEARCH_FOR_CONFIGS_DATABASE_USERNAME=1;
+    if [ ! -z "$SEARCH_FOR_CONFIGS_DATABASE_NAME" ] && [ "$SEARCH_FOR_CONFIGS_DATABASE_NAME" = "$SEARCH_FOR_CONFIGS_DATABASE_USERNAME" ]; then
+        DO_SEARCH_FOR_CONFIGS_DATABASE_USERNAME=0
+    fi
+    if [ $DO_SEARCH_FOR_CONFIGS_DATABASE_USERNAME -eq 1 ]; then
+        echo "=== Replacing ${FROM_DATABASE_USERNAME} to ${TO_DATABASE_USERNAME} by searching in folder $TO_FOLDER [SEARCH_FOR_CONFIGS_DATABASE_USERNAME]"
+        grep -rl "${FROM_DATABASE_USERNAME}" $TO_FOLDER | xargs sed -i "s#${FROM_DATABASE_USERNAME}#${TO_DATABASE_USERNAME}#g"
+    fi
+fi
 
 if [ $IT_IS_WP -eq 0 ]; then
     echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"

From 355ae012223927707580a75f534b3bee0201e4d6 Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Wed, 30 Mar 2022 13:50:29 +0200
Subject: [PATCH 1689/2300] Reverting blocking in nginx everything that begins
 with dot

---
 install/debian/10/templates/web/nginx/caching.tpl              | 3 ++-
 install/debian/10/templates/web/nginx/hosting-legacy.tpl       | 3 ++-
 install/debian/10/templates/web/nginx/hosting-public.tpl       | 3 ++-
 .../10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl      | 3 ++-
 install/debian/10/templates/web/nginx/hosting.tpl              | 3 ++-
 install/debian/10/templates/web/nginx/php-fpm/pyrocms.tpl      | 2 +-
 install/debian/10/templates/web/nginx/private-hosting.tpl      | 3 ++-
 install/debian/11/templates/web/nginx/caching.tpl              | 3 ++-
 install/debian/11/templates/web/nginx/hosting-legacy.tpl       | 3 ++-
 install/debian/11/templates/web/nginx/hosting-public.tpl       | 3 ++-
 .../11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl      | 3 ++-
 install/debian/11/templates/web/nginx/hosting.tpl              | 3 ++-
 install/debian/11/templates/web/nginx/php-fpm/pyrocms.tpl      | 2 +-
 install/debian/11/templates/web/nginx/private-hosting.tpl      | 3 ++-
 install/debian/7/templates/web/nginx/caching.tpl               | 3 ++-
 install/debian/7/templates/web/nginx/default.tpl               | 3 ++-
 install/debian/7/templates/web/nginx/hosting.tpl               | 3 ++-
 install/debian/7/templates/web/nginx/http2.tpl                 | 3 ++-
 install/debian/7/templates/web/nginx/php5-fpm/pyrocms.tpl      | 2 +-
 install/debian/8/templates/web/nginx/caching.tpl               | 3 ++-
 install/debian/8/templates/web/nginx/default.tpl               | 3 ++-
 install/debian/8/templates/web/nginx/hosting.tpl               | 3 ++-
 install/debian/8/templates/web/nginx/http2.tpl                 | 3 ++-
 install/debian/8/templates/web/nginx/php5-fpm/pyrocms.tpl      | 2 +-
 install/debian/9/templates/web/nginx/caching.tpl               | 3 ++-
 install/debian/9/templates/web/nginx/default.tpl               | 3 ++-
 install/debian/9/templates/web/nginx/hosting.tpl               | 3 ++-
 install/debian/9/templates/web/nginx/http2.tpl                 | 3 ++-
 install/debian/9/templates/web/nginx/php-fpm/pyrocms.tpl       | 2 +-
 install/rhel/5/templates/web/nginx/caching.tpl                 | 3 ++-
 install/rhel/5/templates/web/nginx/default.tpl                 | 3 ++-
 install/rhel/5/templates/web/nginx/hosting.tpl                 | 3 ++-
 install/rhel/5/templates/web/nginx/http2.tpl                   | 3 ++-
 install/rhel/5/templates/web/nginx/php-fpm/pyrocms.tpl         | 2 +-
 install/rhel/6/templates/web/nginx/caching.tpl                 | 3 ++-
 install/rhel/6/templates/web/nginx/default.tpl                 | 3 ++-
 install/rhel/6/templates/web/nginx/hosting.tpl                 | 3 ++-
 install/rhel/6/templates/web/nginx/http2.tpl                   | 3 ++-
 install/rhel/6/templates/web/nginx/php-fpm/pyrocms.tpl         | 2 +-
 install/rhel/7/templates/web/nginx/caching.tpl                 | 3 ++-
 install/rhel/7/templates/web/nginx/default.tpl                 | 3 ++-
 install/rhel/7/templates/web/nginx/hosting.tpl                 | 3 ++-
 install/rhel/7/templates/web/nginx/http2.tpl                   | 3 ++-
 install/rhel/7/templates/web/nginx/php-fpm/pyrocms.tpl         | 2 +-
 install/ubuntu/12.04/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/12.04/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/12.04/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/12.04/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/12.04/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/12.10/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/12.10/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/12.10/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/12.10/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/12.10/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/13.04/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/13.04/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/13.04/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/13.04/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/13.04/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/13.10/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/13.10/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/13.10/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/13.10/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/13.10/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/14.04/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/14.04/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/14.04/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/14.04/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/14.04/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/14.10/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/14.10/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/14.10/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/14.10/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/14.10/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/15.04/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/15.04/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/15.04/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/15.04/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/15.04/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/15.10/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/15.10/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/15.10/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/15.10/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/15.10/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/16.04/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/16.04/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/16.04/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/16.04/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/16.04/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/16.10/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/16.10/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/16.10/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/16.10/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/16.10/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/17.04/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/17.04/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/17.04/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/17.04/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/17.10/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/17.10/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/17.10/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/17.10/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/18.04/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/18.04/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/18.04/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/18.04/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 install/ubuntu/18.10/templates/web/nginx/caching.tpl           | 3 ++-
 install/ubuntu/18.10/templates/web/nginx/default.tpl           | 3 ++-
 install/ubuntu/18.10/templates/web/nginx/hosting.tpl           | 3 ++-
 install/ubuntu/18.10/templates/web/nginx/http2.tpl             | 3 ++-
 install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.tpl   | 2 +-
 .../nodejs-nginx-templates/node-app-3000-no-https-force.tpl    | 3 ++-
 .../node-app-also-handle-static-files-3000.tpl                 | 3 ++-
 .../rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl | 3 ++-
 .../tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl  | 3 ++-
 .../tools/rate-limit-tpl/hosting-firewall-burst-2.tpl          | 3 ++-
 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl | 3 ++-
 120 files changed, 218 insertions(+), 120 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/caching.tpl b/install/debian/10/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100644
--- a/install/debian/10/templates/web/nginx/caching.tpl
+++ b/install/debian/10/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting-legacy.tpl b/install/debian/10/templates/web/nginx/hosting-legacy.tpl
index 541e560a..a41d4054 100644
--- a/install/debian/10/templates/web/nginx/hosting-legacy.tpl
+++ b/install/debian/10/templates/web/nginx/hosting-legacy.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting-public.tpl b/install/debian/10/templates/web/nginx/hosting-public.tpl
index 756ede37..f5d8b327 100644
--- a/install/debian/10/templates/web/nginx/hosting-public.tpl
+++ b/install/debian/10/templates/web/nginx/hosting-public.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
index da7dc9b2..f84f4781 100644
--- a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
+++ b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
@@ -46,7 +46,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting.tpl b/install/debian/10/templates/web/nginx/hosting.tpl
index 87c2f824..61469ad2 100644
--- a/install/debian/10/templates/web/nginx/hosting.tpl
+++ b/install/debian/10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/pyrocms.tpl b/install/debian/10/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/10/templates/web/nginx/private-hosting.tpl b/install/debian/10/templates/web/nginx/private-hosting.tpl
index 5fd75be5..a8ee840e 100644
--- a/install/debian/10/templates/web/nginx/private-hosting.tpl
+++ b/install/debian/10/templates/web/nginx/private-hosting.tpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/caching.tpl b/install/debian/11/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100644
--- a/install/debian/11/templates/web/nginx/caching.tpl
+++ b/install/debian/11/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting-legacy.tpl b/install/debian/11/templates/web/nginx/hosting-legacy.tpl
index 541e560a..a41d4054 100644
--- a/install/debian/11/templates/web/nginx/hosting-legacy.tpl
+++ b/install/debian/11/templates/web/nginx/hosting-legacy.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting-public.tpl b/install/debian/11/templates/web/nginx/hosting-public.tpl
index 756ede37..f5d8b327 100644
--- a/install/debian/11/templates/web/nginx/hosting-public.tpl
+++ b/install/debian/11/templates/web/nginx/hosting-public.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl b/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
index da7dc9b2..f84f4781 100644
--- a/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
+++ b/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
@@ -46,7 +46,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting.tpl b/install/debian/11/templates/web/nginx/hosting.tpl
index 87c2f824..61469ad2 100644
--- a/install/debian/11/templates/web/nginx/hosting.tpl
+++ b/install/debian/11/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/pyrocms.tpl b/install/debian/11/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/debian/11/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/debian/11/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/11/templates/web/nginx/private-hosting.tpl b/install/debian/11/templates/web/nginx/private-hosting.tpl
index 5fd75be5..a8ee840e 100644
--- a/install/debian/11/templates/web/nginx/private-hosting.tpl
+++ b/install/debian/11/templates/web/nginx/private-hosting.tpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/caching.tpl b/install/debian/7/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100644
--- a/install/debian/7/templates/web/nginx/caching.tpl
+++ b/install/debian/7/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/default.tpl b/install/debian/7/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100644
--- a/install/debian/7/templates/web/nginx/default.tpl
+++ b/install/debian/7/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/hosting.tpl b/install/debian/7/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100644
--- a/install/debian/7/templates/web/nginx/hosting.tpl
+++ b/install/debian/7/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/http2.tpl b/install/debian/7/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/debian/7/templates/web/nginx/http2.tpl
+++ b/install/debian/7/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/pyrocms.tpl b/install/debian/7/templates/web/nginx/php5-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/pyrocms.tpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/8/templates/web/nginx/caching.tpl b/install/debian/8/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100644
--- a/install/debian/8/templates/web/nginx/caching.tpl
+++ b/install/debian/8/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/default.tpl b/install/debian/8/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100644
--- a/install/debian/8/templates/web/nginx/default.tpl
+++ b/install/debian/8/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/hosting.tpl b/install/debian/8/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100644
--- a/install/debian/8/templates/web/nginx/hosting.tpl
+++ b/install/debian/8/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/http2.tpl b/install/debian/8/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/debian/8/templates/web/nginx/http2.tpl
+++ b/install/debian/8/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/pyrocms.tpl b/install/debian/8/templates/web/nginx/php5-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/pyrocms.tpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/9/templates/web/nginx/caching.tpl b/install/debian/9/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100644
--- a/install/debian/9/templates/web/nginx/caching.tpl
+++ b/install/debian/9/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/default.tpl b/install/debian/9/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100644
--- a/install/debian/9/templates/web/nginx/default.tpl
+++ b/install/debian/9/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/hosting.tpl b/install/debian/9/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100644
--- a/install/debian/9/templates/web/nginx/hosting.tpl
+++ b/install/debian/9/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/http2.tpl b/install/debian/9/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/debian/9/templates/web/nginx/http2.tpl
+++ b/install/debian/9/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/pyrocms.tpl b/install/debian/9/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/5/templates/web/nginx/caching.tpl b/install/rhel/5/templates/web/nginx/caching.tpl
index 677fea6f..fc721982 100755
--- a/install/rhel/5/templates/web/nginx/caching.tpl
+++ b/install/rhel/5/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/default.tpl b/install/rhel/5/templates/web/nginx/default.tpl
index d7fa634c..e49081a5 100755
--- a/install/rhel/5/templates/web/nginx/default.tpl
+++ b/install/rhel/5/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/hosting.tpl b/install/rhel/5/templates/web/nginx/hosting.tpl
index 41fe0c43..de42b9df 100755
--- a/install/rhel/5/templates/web/nginx/hosting.tpl
+++ b/install/rhel/5/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/http2.tpl b/install/rhel/5/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/rhel/5/templates/web/nginx/http2.tpl
+++ b/install/rhel/5/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/pyrocms.tpl b/install/rhel/5/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/6/templates/web/nginx/caching.tpl b/install/rhel/6/templates/web/nginx/caching.tpl
index 677fea6f..fc721982 100755
--- a/install/rhel/6/templates/web/nginx/caching.tpl
+++ b/install/rhel/6/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/default.tpl b/install/rhel/6/templates/web/nginx/default.tpl
index d7fa634c..e49081a5 100755
--- a/install/rhel/6/templates/web/nginx/default.tpl
+++ b/install/rhel/6/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/hosting.tpl b/install/rhel/6/templates/web/nginx/hosting.tpl
index 41fe0c43..de42b9df 100755
--- a/install/rhel/6/templates/web/nginx/hosting.tpl
+++ b/install/rhel/6/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/http2.tpl b/install/rhel/6/templates/web/nginx/http2.tpl
index b51af9bf..9344a7a9 100644
--- a/install/rhel/6/templates/web/nginx/http2.tpl
+++ b/install/rhel/6/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/pyrocms.tpl b/install/rhel/6/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/7/templates/web/nginx/caching.tpl b/install/rhel/7/templates/web/nginx/caching.tpl
index 677fea6f..fc721982 100755
--- a/install/rhel/7/templates/web/nginx/caching.tpl
+++ b/install/rhel/7/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/default.tpl b/install/rhel/7/templates/web/nginx/default.tpl
index d7fa634c..e49081a5 100755
--- a/install/rhel/7/templates/web/nginx/default.tpl
+++ b/install/rhel/7/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/hosting.tpl b/install/rhel/7/templates/web/nginx/hosting.tpl
index 41fe0c43..de42b9df 100755
--- a/install/rhel/7/templates/web/nginx/hosting.tpl
+++ b/install/rhel/7/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/http2.tpl b/install/rhel/7/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/rhel/7/templates/web/nginx/http2.tpl
+++ b/install/rhel/7/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/pyrocms.tpl b/install/rhel/7/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/caching.tpl b/install/ubuntu/12.04/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/12.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/default.tpl b/install/ubuntu/12.04/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/12.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/hosting.tpl b/install/ubuntu/12.04/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/12.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/http2.tpl b/install/ubuntu/12.04/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/12.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/caching.tpl b/install/ubuntu/12.10/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/12.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/default.tpl b/install/ubuntu/12.10/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/12.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/hosting.tpl b/install/ubuntu/12.10/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/12.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/http2.tpl b/install/ubuntu/12.10/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/12.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/caching.tpl b/install/ubuntu/13.04/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/13.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/default.tpl b/install/ubuntu/13.04/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/13.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/hosting.tpl b/install/ubuntu/13.04/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/13.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/http2.tpl b/install/ubuntu/13.04/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/13.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/caching.tpl b/install/ubuntu/13.10/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/13.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/default.tpl b/install/ubuntu/13.10/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/13.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/hosting.tpl b/install/ubuntu/13.10/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/13.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/http2.tpl b/install/ubuntu/13.10/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/13.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/caching.tpl b/install/ubuntu/14.04/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/14.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/default.tpl b/install/ubuntu/14.04/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/14.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/hosting.tpl b/install/ubuntu/14.04/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/14.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/http2.tpl b/install/ubuntu/14.04/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/14.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/caching.tpl b/install/ubuntu/14.10/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/14.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/default.tpl b/install/ubuntu/14.10/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/14.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/hosting.tpl b/install/ubuntu/14.10/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/14.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/http2.tpl b/install/ubuntu/14.10/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/14.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/caching.tpl b/install/ubuntu/15.04/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/15.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/default.tpl b/install/ubuntu/15.04/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/15.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/hosting.tpl b/install/ubuntu/15.04/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/15.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/http2.tpl b/install/ubuntu/15.04/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/15.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/caching.tpl b/install/ubuntu/15.10/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/15.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/default.tpl b/install/ubuntu/15.10/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/15.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/hosting.tpl b/install/ubuntu/15.10/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/15.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/http2.tpl b/install/ubuntu/15.10/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/15.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/caching.tpl b/install/ubuntu/16.04/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/16.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/default.tpl b/install/ubuntu/16.04/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/16.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/hosting.tpl b/install/ubuntu/16.04/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/16.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/http2.tpl b/install/ubuntu/16.04/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/16.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/caching.tpl b/install/ubuntu/16.10/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/16.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/default.tpl b/install/ubuntu/16.10/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/16.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/hosting.tpl b/install/ubuntu/16.10/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/16.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/http2.tpl b/install/ubuntu/16.10/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/16.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/caching.tpl b/install/ubuntu/17.04/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/17.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/default.tpl b/install/ubuntu/17.04/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/17.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/hosting.tpl b/install/ubuntu/17.04/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/17.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/http2.tpl b/install/ubuntu/17.04/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/17.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/caching.tpl b/install/ubuntu/17.10/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/17.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/default.tpl b/install/ubuntu/17.10/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/17.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/hosting.tpl b/install/ubuntu/17.10/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/17.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/http2.tpl b/install/ubuntu/17.10/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/17.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/caching.tpl b/install/ubuntu/18.04/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/18.04/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/default.tpl b/install/ubuntu/18.04/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/18.04/templates/web/nginx/default.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/hosting.tpl b/install/ubuntu/18.04/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/18.04/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/http2.tpl b/install/ubuntu/18.04/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/18.04/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/18.10/templates/web/nginx/caching.tpl b/install/ubuntu/18.10/templates/web/nginx/caching.tpl
index a1a89549..73de28d5 100755
--- a/install/ubuntu/18.10/templates/web/nginx/caching.tpl
+++ b/install/ubuntu/18.10/templates/web/nginx/caching.tpl
@@ -31,7 +31,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/default.tpl b/install/ubuntu/18.10/templates/web/nginx/default.tpl
index 0e200e92..bebd47a2 100755
--- a/install/ubuntu/18.10/templates/web/nginx/default.tpl
+++ b/install/ubuntu/18.10/templates/web/nginx/default.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/hosting.tpl b/install/ubuntu/18.10/templates/web/nginx/hosting.tpl
index 541e560a..a41d4054 100755
--- a/install/ubuntu/18.10/templates/web/nginx/hosting.tpl
+++ b/install/ubuntu/18.10/templates/web/nginx/hosting.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/http2.tpl b/install/ubuntu/18.10/templates/web/nginx/http2.tpl
index 0e200e92..bebd47a2 100644
--- a/install/ubuntu/18.10/templates/web/nginx/http2.tpl
+++ b/install/ubuntu/18.10/templates/web/nginx/http2.tpl
@@ -22,7 +22,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.tpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.tpl
index 297fe0e8..b92861b0 100644
--- a/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.tpl
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -33,7 +33,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.tpl
index 933eea6d..29aadf7b 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.tpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.tpl
@@ -32,7 +32,8 @@ server {
         alias   %home%/%user%/web/%domain%/document_errors/;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.tpl
index bb298e66..a62f7275 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.tpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.tpl
@@ -17,7 +17,8 @@ server {
         # try_files $uri $uri/ =404;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
index 15fe6fe5..13657bd3 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
index 03426c6e..a4035844 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
index c93bc951..9e0edcf8 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
index deed2b71..9438e532 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}

From 3cf64450a2f7bac6ba3417e01ee0cd9e1900b524 Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Wed, 30 Mar 2022 14:12:30 +0200
Subject: [PATCH 1690/2300] Blocking in nginx .env

---
 install/debian/10/templates/web/nginx/caching.stpl             | 3 ++-
 install/debian/10/templates/web/nginx/force-https-legacy.stpl  | 3 ++-
 install/debian/10/templates/web/nginx/force-https-public.stpl  | 3 ++-
 .../10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl | 3 ++-
 install/debian/10/templates/web/nginx/force-https.stpl         | 3 ++-
 install/debian/10/templates/web/nginx/hosting-legacy.stpl      | 3 ++-
 install/debian/10/templates/web/nginx/hosting-public.stpl      | 3 ++-
 .../10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl     | 3 ++-
 install/debian/10/templates/web/nginx/hosting.stpl             | 3 ++-
 install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl     | 2 +-
 install/debian/10/templates/web/nginx/private-force-https.stpl | 3 ++-
 install/debian/10/templates/web/nginx/private-hosting.stpl     | 3 ++-
 install/debian/11/templates/web/nginx/caching.stpl             | 3 ++-
 install/debian/11/templates/web/nginx/force-https-legacy.stpl  | 3 ++-
 install/debian/11/templates/web/nginx/force-https-public.stpl  | 3 ++-
 .../11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl | 3 ++-
 install/debian/11/templates/web/nginx/force-https.stpl         | 3 ++-
 install/debian/11/templates/web/nginx/hosting-legacy.stpl      | 3 ++-
 install/debian/11/templates/web/nginx/hosting-public.stpl      | 3 ++-
 .../11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl     | 3 ++-
 install/debian/11/templates/web/nginx/hosting.stpl             | 3 ++-
 install/debian/11/templates/web/nginx/php-fpm/pyrocms.stpl     | 2 +-
 install/debian/11/templates/web/nginx/private-force-https.stpl | 3 ++-
 install/debian/11/templates/web/nginx/private-hosting.stpl     | 3 ++-
 install/debian/7/templates/web/nginx/caching.stpl              | 3 ++-
 install/debian/7/templates/web/nginx/default.stpl              | 3 ++-
 install/debian/7/templates/web/nginx/hosting.stpl              | 3 ++-
 install/debian/7/templates/web/nginx/http2.stpl                | 3 ++-
 install/debian/7/templates/web/nginx/php5-fpm/pyrocms.stpl     | 2 +-
 install/debian/8/templates/web/nginx/caching.stpl              | 3 ++-
 install/debian/8/templates/web/nginx/default.stpl              | 3 ++-
 install/debian/8/templates/web/nginx/hosting.stpl              | 3 ++-
 install/debian/8/templates/web/nginx/http2.stpl                | 3 ++-
 install/debian/8/templates/web/nginx/php5-fpm/pyrocms.stpl     | 2 +-
 install/debian/9/templates/web/nginx/caching.stpl              | 3 ++-
 install/debian/9/templates/web/nginx/default.stpl              | 3 ++-
 install/debian/9/templates/web/nginx/hosting.stpl              | 3 ++-
 install/debian/9/templates/web/nginx/http2.stpl                | 3 ++-
 install/debian/9/templates/web/nginx/php-fpm/pyrocms.stpl      | 2 +-
 install/rhel/5/templates/web/nginx/caching.stpl                | 3 ++-
 install/rhel/5/templates/web/nginx/default.stpl                | 3 ++-
 install/rhel/5/templates/web/nginx/hosting.stpl                | 3 ++-
 install/rhel/5/templates/web/nginx/http2.stpl                  | 3 ++-
 install/rhel/5/templates/web/nginx/php-fpm/pyrocms.stpl        | 2 +-
 install/rhel/6/templates/web/nginx/caching.stpl                | 3 ++-
 install/rhel/6/templates/web/nginx/default.stpl                | 3 ++-
 install/rhel/6/templates/web/nginx/hosting.stpl                | 3 ++-
 install/rhel/6/templates/web/nginx/http2.stpl                  | 3 ++-
 install/rhel/6/templates/web/nginx/php-fpm/pyrocms.stpl        | 2 +-
 install/rhel/7/templates/web/nginx/caching.stpl                | 3 ++-
 install/rhel/7/templates/web/nginx/default.stpl                | 3 ++-
 install/rhel/7/templates/web/nginx/hosting.stpl                | 3 ++-
 install/rhel/7/templates/web/nginx/http2.stpl                  | 3 ++-
 install/rhel/7/templates/web/nginx/php-fpm/pyrocms.stpl        | 2 +-
 install/ubuntu/12.04/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/12.04/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/12.04/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/12.04/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/12.04/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/12.10/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/12.10/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/12.10/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/12.10/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/12.10/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/13.04/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/13.04/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/13.04/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/13.04/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/13.04/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/13.10/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/13.10/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/13.10/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/13.10/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/13.10/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/14.04/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/14.04/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/14.04/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/14.04/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/14.04/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/14.10/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/14.10/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/14.10/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/14.10/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/14.10/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/15.04/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/15.04/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/15.04/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/15.04/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/15.04/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/15.10/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/15.10/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/15.10/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/15.10/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/15.10/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/16.04/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/16.04/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/16.04/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/16.04/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/16.04/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/16.10/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/16.10/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/16.10/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/16.10/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/16.10/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/17.04/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/17.04/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/17.04/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/17.04/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/17.10/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/17.10/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/17.10/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/17.10/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/18.04/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/18.04/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/18.04/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/18.04/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 install/ubuntu/18.10/templates/web/nginx/caching.stpl          | 3 ++-
 install/ubuntu/18.10/templates/web/nginx/default.stpl          | 3 ++-
 install/ubuntu/18.10/templates/web/nginx/hosting.stpl          | 3 ++-
 install/ubuntu/18.10/templates/web/nginx/http2.stpl            | 3 ++-
 install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.stpl  | 2 +-
 .../nodejs-nginx-templates/node-app-3000-no-https-force.stpl   | 3 ++-
 .../nodejs-nginx-templates/node-app-3000-pass-to-https.stpl    | 3 ++-
 .../tools/nodejs-nginx-templates/node-app-3000.stpl            | 3 ++-
 .../node-app-4000-and-websocket-6001.stpl                      | 3 ++-
 .../node-app-also-handle-static-files-3000.stpl                | 3 ++-
 .../force-https-firewall-burst-2-speed-2-conn-4.stpl           | 3 ++-
 .../rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl   | 3 ++-
 .../tools/rate-limit-tpl/force-https-firewall-burst-2.stpl     | 3 ++-
 .../tools/rate-limit-tpl/force-https-firewall.stpl             | 3 ++-
 .../hosting-firewall-burst-2-speed-2-conn-4.stpl               | 3 ++-
 .../tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl | 3 ++-
 .../tools/rate-limit-tpl/hosting-firewall-burst-2.stpl         | 3 ++-
 .../for-download/tools/rate-limit-tpl/hosting-firewall.stpl    | 3 ++-
 137 files changed, 252 insertions(+), 137 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/caching.stpl b/install/debian/10/templates/web/nginx/caching.stpl
index 2302b419..f5c9740f 100644
--- a/install/debian/10/templates/web/nginx/caching.stpl
+++ b/install/debian/10/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/force-https-legacy.stpl b/install/debian/10/templates/web/nginx/force-https-legacy.stpl
index db3714c2..79e55a26 100644
--- a/install/debian/10/templates/web/nginx/force-https-legacy.stpl
+++ b/install/debian/10/templates/web/nginx/force-https-legacy.stpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/force-https-public.stpl b/install/debian/10/templates/web/nginx/force-https-public.stpl
index 9c11d06d..ac422df6 100644
--- a/install/debian/10/templates/web/nginx/force-https-public.stpl
+++ b/install/debian/10/templates/web/nginx/force-https-public.stpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
index 45e05c3b..7e0e71d1 100644
--- a/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
+++ b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -49,7 +49,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/force-https.stpl b/install/debian/10/templates/web/nginx/force-https.stpl
index 2abae221..33fab443 100644
--- a/install/debian/10/templates/web/nginx/force-https.stpl
+++ b/install/debian/10/templates/web/nginx/force-https.stpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting-legacy.stpl b/install/debian/10/templates/web/nginx/hosting-legacy.stpl
index 16874648..a34b4bf1 100644
--- a/install/debian/10/templates/web/nginx/hosting-legacy.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-legacy.stpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting-public.stpl b/install/debian/10/templates/web/nginx/hosting-public.stpl
index 9c11d06d..ac422df6 100644
--- a/install/debian/10/templates/web/nginx/hosting-public.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-public.stpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
index 45e05c3b..7e0e71d1 100644
--- a/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
+++ b/install/debian/10/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
@@ -49,7 +49,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/hosting.stpl b/install/debian/10/templates/web/nginx/hosting.stpl
index e6ce0670..755caadf 100644
--- a/install/debian/10/templates/web/nginx/hosting.stpl
+++ b/install/debian/10/templates/web/nginx/hosting.stpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl
index 6d44f20f..d26ed9f4 100644
--- a/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/debian/10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -36,7 +36,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/10/templates/web/nginx/private-force-https.stpl b/install/debian/10/templates/web/nginx/private-force-https.stpl
index 164cec16..64094fb8 100644
--- a/install/debian/10/templates/web/nginx/private-force-https.stpl
+++ b/install/debian/10/templates/web/nginx/private-force-https.stpl
@@ -27,7 +27,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/10/templates/web/nginx/private-hosting.stpl b/install/debian/10/templates/web/nginx/private-hosting.stpl
index dbd5bec9..fd9471bd 100644
--- a/install/debian/10/templates/web/nginx/private-hosting.stpl
+++ b/install/debian/10/templates/web/nginx/private-hosting.stpl
@@ -27,7 +27,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/caching.stpl b/install/debian/11/templates/web/nginx/caching.stpl
index 2302b419..f5c9740f 100644
--- a/install/debian/11/templates/web/nginx/caching.stpl
+++ b/install/debian/11/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/force-https-legacy.stpl b/install/debian/11/templates/web/nginx/force-https-legacy.stpl
index db3714c2..79e55a26 100644
--- a/install/debian/11/templates/web/nginx/force-https-legacy.stpl
+++ b/install/debian/11/templates/web/nginx/force-https-legacy.stpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/force-https-public.stpl b/install/debian/11/templates/web/nginx/force-https-public.stpl
index 9c11d06d..ac422df6 100644
--- a/install/debian/11/templates/web/nginx/force-https-public.stpl
+++ b/install/debian/11/templates/web/nginx/force-https-public.stpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
index 45e05c3b..7e0e71d1 100644
--- a/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
+++ b/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -49,7 +49,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/force-https.stpl b/install/debian/11/templates/web/nginx/force-https.stpl
index 2abae221..33fab443 100644
--- a/install/debian/11/templates/web/nginx/force-https.stpl
+++ b/install/debian/11/templates/web/nginx/force-https.stpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting-legacy.stpl b/install/debian/11/templates/web/nginx/hosting-legacy.stpl
index 16874648..a34b4bf1 100644
--- a/install/debian/11/templates/web/nginx/hosting-legacy.stpl
+++ b/install/debian/11/templates/web/nginx/hosting-legacy.stpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting-public.stpl b/install/debian/11/templates/web/nginx/hosting-public.stpl
index 9c11d06d..ac422df6 100644
--- a/install/debian/11/templates/web/nginx/hosting-public.stpl
+++ b/install/debian/11/templates/web/nginx/hosting-public.stpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
index 45e05c3b..7e0e71d1 100644
--- a/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
+++ b/install/debian/11/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
@@ -49,7 +49,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/hosting.stpl b/install/debian/11/templates/web/nginx/hosting.stpl
index e6ce0670..755caadf 100644
--- a/install/debian/11/templates/web/nginx/hosting.stpl
+++ b/install/debian/11/templates/web/nginx/hosting.stpl
@@ -25,7 +25,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/php-fpm/pyrocms.stpl b/install/debian/11/templates/web/nginx/php-fpm/pyrocms.stpl
index 6d44f20f..d26ed9f4 100644
--- a/install/debian/11/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/debian/11/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -36,7 +36,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/11/templates/web/nginx/private-force-https.stpl b/install/debian/11/templates/web/nginx/private-force-https.stpl
index 164cec16..64094fb8 100644
--- a/install/debian/11/templates/web/nginx/private-force-https.stpl
+++ b/install/debian/11/templates/web/nginx/private-force-https.stpl
@@ -27,7 +27,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/11/templates/web/nginx/private-hosting.stpl b/install/debian/11/templates/web/nginx/private-hosting.stpl
index dbd5bec9..fd9471bd 100644
--- a/install/debian/11/templates/web/nginx/private-hosting.stpl
+++ b/install/debian/11/templates/web/nginx/private-hosting.stpl
@@ -27,7 +27,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/caching.stpl b/install/debian/7/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100644
--- a/install/debian/7/templates/web/nginx/caching.stpl
+++ b/install/debian/7/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/default.stpl b/install/debian/7/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100644
--- a/install/debian/7/templates/web/nginx/default.stpl
+++ b/install/debian/7/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/hosting.stpl b/install/debian/7/templates/web/nginx/hosting.stpl
index 3f4ad39b..fc70c266 100644
--- a/install/debian/7/templates/web/nginx/hosting.stpl
+++ b/install/debian/7/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/http2.stpl b/install/debian/7/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/debian/7/templates/web/nginx/http2.stpl
+++ b/install/debian/7/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/7/templates/web/nginx/php5-fpm/pyrocms.stpl b/install/debian/7/templates/web/nginx/php5-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/debian/7/templates/web/nginx/php5-fpm/pyrocms.stpl
+++ b/install/debian/7/templates/web/nginx/php5-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/8/templates/web/nginx/caching.stpl b/install/debian/8/templates/web/nginx/caching.stpl
index 86ba5c78..d104643a 100644
--- a/install/debian/8/templates/web/nginx/caching.stpl
+++ b/install/debian/8/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/default.stpl b/install/debian/8/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100644
--- a/install/debian/8/templates/web/nginx/default.stpl
+++ b/install/debian/8/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/hosting.stpl b/install/debian/8/templates/web/nginx/hosting.stpl
index 3f4ad39b..fc70c266 100644
--- a/install/debian/8/templates/web/nginx/hosting.stpl
+++ b/install/debian/8/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/http2.stpl b/install/debian/8/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/debian/8/templates/web/nginx/http2.stpl
+++ b/install/debian/8/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/8/templates/web/nginx/php5-fpm/pyrocms.stpl b/install/debian/8/templates/web/nginx/php5-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/debian/8/templates/web/nginx/php5-fpm/pyrocms.stpl
+++ b/install/debian/8/templates/web/nginx/php5-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/debian/9/templates/web/nginx/caching.stpl b/install/debian/9/templates/web/nginx/caching.stpl
index 2302b419..f5c9740f 100644
--- a/install/debian/9/templates/web/nginx/caching.stpl
+++ b/install/debian/9/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/default.stpl b/install/debian/9/templates/web/nginx/default.stpl
index b694d1c2..5a958ca4 100644
--- a/install/debian/9/templates/web/nginx/default.stpl
+++ b/install/debian/9/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/hosting.stpl b/install/debian/9/templates/web/nginx/hosting.stpl
index 736751d5..605fa875 100644
--- a/install/debian/9/templates/web/nginx/hosting.stpl
+++ b/install/debian/9/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/http2.stpl b/install/debian/9/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/debian/9/templates/web/nginx/http2.stpl
+++ b/install/debian/9/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/debian/9/templates/web/nginx/php-fpm/pyrocms.stpl b/install/debian/9/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/debian/9/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/debian/9/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/5/templates/web/nginx/caching.stpl b/install/rhel/5/templates/web/nginx/caching.stpl
index 2d8cb3ca..720b880b 100755
--- a/install/rhel/5/templates/web/nginx/caching.stpl
+++ b/install/rhel/5/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/default.stpl b/install/rhel/5/templates/web/nginx/default.stpl
index cd350432..92804815 100755
--- a/install/rhel/5/templates/web/nginx/default.stpl
+++ b/install/rhel/5/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/hosting.stpl b/install/rhel/5/templates/web/nginx/hosting.stpl
index 8985f0aa..10dae25e 100755
--- a/install/rhel/5/templates/web/nginx/hosting.stpl
+++ b/install/rhel/5/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/http2.stpl b/install/rhel/5/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/rhel/5/templates/web/nginx/http2.stpl
+++ b/install/rhel/5/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/5/templates/web/nginx/php-fpm/pyrocms.stpl b/install/rhel/5/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/rhel/5/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/rhel/5/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/6/templates/web/nginx/caching.stpl b/install/rhel/6/templates/web/nginx/caching.stpl
index 2d8cb3ca..720b880b 100755
--- a/install/rhel/6/templates/web/nginx/caching.stpl
+++ b/install/rhel/6/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/default.stpl b/install/rhel/6/templates/web/nginx/default.stpl
index cd350432..92804815 100755
--- a/install/rhel/6/templates/web/nginx/default.stpl
+++ b/install/rhel/6/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/hosting.stpl b/install/rhel/6/templates/web/nginx/hosting.stpl
index 8985f0aa..10dae25e 100755
--- a/install/rhel/6/templates/web/nginx/hosting.stpl
+++ b/install/rhel/6/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/http2.stpl b/install/rhel/6/templates/web/nginx/http2.stpl
index 3f13ff22..0810e9d4 100644
--- a/install/rhel/6/templates/web/nginx/http2.stpl
+++ b/install/rhel/6/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/6/templates/web/nginx/php-fpm/pyrocms.stpl b/install/rhel/6/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/rhel/6/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/rhel/6/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/rhel/7/templates/web/nginx/caching.stpl b/install/rhel/7/templates/web/nginx/caching.stpl
index 2d8cb3ca..720b880b 100755
--- a/install/rhel/7/templates/web/nginx/caching.stpl
+++ b/install/rhel/7/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/default.stpl b/install/rhel/7/templates/web/nginx/default.stpl
index cd350432..92804815 100755
--- a/install/rhel/7/templates/web/nginx/default.stpl
+++ b/install/rhel/7/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/hosting.stpl b/install/rhel/7/templates/web/nginx/hosting.stpl
index 8985f0aa..10dae25e 100755
--- a/install/rhel/7/templates/web/nginx/hosting.stpl
+++ b/install/rhel/7/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/http2.stpl b/install/rhel/7/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/rhel/7/templates/web/nginx/http2.stpl
+++ b/install/rhel/7/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/rhel/7/templates/web/nginx/php-fpm/pyrocms.stpl b/install/rhel/7/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/rhel/7/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/rhel/7/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.04/templates/web/nginx/caching.stpl b/install/ubuntu/12.04/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/12.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/default.stpl b/install/ubuntu/12.04/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/12.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/hosting.stpl b/install/ubuntu/12.04/templates/web/nginx/hosting.stpl
index 3f4ad39b..fc70c266 100755
--- a/install/ubuntu/12.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/http2.stpl b/install/ubuntu/12.04/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/12.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.04/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/12.04/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/ubuntu/12.04/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/12.04/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/12.10/templates/web/nginx/caching.stpl b/install/ubuntu/12.10/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/12.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/default.stpl b/install/ubuntu/12.10/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/12.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/hosting.stpl b/install/ubuntu/12.10/templates/web/nginx/hosting.stpl
index 3f4ad39b..fc70c266 100755
--- a/install/ubuntu/12.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/http2.stpl b/install/ubuntu/12.10/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/12.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/12.10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/12.10/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/ubuntu/12.10/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/12.10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.04/templates/web/nginx/caching.stpl b/install/ubuntu/13.04/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/13.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/default.stpl b/install/ubuntu/13.04/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/13.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/hosting.stpl b/install/ubuntu/13.04/templates/web/nginx/hosting.stpl
index 3f4ad39b..fc70c266 100755
--- a/install/ubuntu/13.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/http2.stpl b/install/ubuntu/13.04/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/13.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.04/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/13.04/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/ubuntu/13.04/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/13.04/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/13.10/templates/web/nginx/caching.stpl b/install/ubuntu/13.10/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/13.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/default.stpl b/install/ubuntu/13.10/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/13.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/hosting.stpl b/install/ubuntu/13.10/templates/web/nginx/hosting.stpl
index 3f4ad39b..fc70c266 100755
--- a/install/ubuntu/13.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/http2.stpl b/install/ubuntu/13.10/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/13.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/13.10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/13.10/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/ubuntu/13.10/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/13.10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.04/templates/web/nginx/caching.stpl b/install/ubuntu/14.04/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/14.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/default.stpl b/install/ubuntu/14.04/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/14.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/hosting.stpl b/install/ubuntu/14.04/templates/web/nginx/hosting.stpl
index 3f4ad39b..fc70c266 100755
--- a/install/ubuntu/14.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/http2.stpl b/install/ubuntu/14.04/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/14.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.04/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/14.04/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/ubuntu/14.04/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/14.04/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/14.10/templates/web/nginx/caching.stpl b/install/ubuntu/14.10/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/14.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/default.stpl b/install/ubuntu/14.10/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/14.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/hosting.stpl b/install/ubuntu/14.10/templates/web/nginx/hosting.stpl
index 3f4ad39b..fc70c266 100755
--- a/install/ubuntu/14.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/http2.stpl b/install/ubuntu/14.10/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/14.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/14.10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/14.10/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/ubuntu/14.10/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/14.10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.04/templates/web/nginx/caching.stpl b/install/ubuntu/15.04/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/15.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/default.stpl b/install/ubuntu/15.04/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/15.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/hosting.stpl b/install/ubuntu/15.04/templates/web/nginx/hosting.stpl
index 3f4ad39b..fc70c266 100755
--- a/install/ubuntu/15.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/http2.stpl b/install/ubuntu/15.04/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/15.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.04/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/15.04/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/ubuntu/15.04/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/15.04/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/15.10/templates/web/nginx/caching.stpl b/install/ubuntu/15.10/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/15.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/default.stpl b/install/ubuntu/15.10/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/15.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/hosting.stpl b/install/ubuntu/15.10/templates/web/nginx/hosting.stpl
index 3f4ad39b..fc70c266 100755
--- a/install/ubuntu/15.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/http2.stpl b/install/ubuntu/15.10/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/15.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/15.10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/15.10/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/ubuntu/15.10/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/15.10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.04/templates/web/nginx/caching.stpl b/install/ubuntu/16.04/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/16.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/default.stpl b/install/ubuntu/16.04/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/16.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/hosting.stpl b/install/ubuntu/16.04/templates/web/nginx/hosting.stpl
index 3f4ad39b..fc70c266 100755
--- a/install/ubuntu/16.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/http2.stpl b/install/ubuntu/16.04/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/16.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.04/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/16.04/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/ubuntu/16.04/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/16.04/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/16.10/templates/web/nginx/caching.stpl b/install/ubuntu/16.10/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/16.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/default.stpl b/install/ubuntu/16.10/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/16.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/hosting.stpl b/install/ubuntu/16.10/templates/web/nginx/hosting.stpl
index 3f4ad39b..fc70c266 100755
--- a/install/ubuntu/16.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/http2.stpl b/install/ubuntu/16.10/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/16.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/16.10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/16.10/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/ubuntu/16.10/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/16.10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.04/templates/web/nginx/caching.stpl b/install/ubuntu/17.04/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/17.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/default.stpl b/install/ubuntu/17.04/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/17.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/hosting.stpl b/install/ubuntu/17.04/templates/web/nginx/hosting.stpl
index 587b02c7..3e3567d6 100755
--- a/install/ubuntu/17.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/http2.stpl b/install/ubuntu/17.04/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/17.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/17.04/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/17.10/templates/web/nginx/caching.stpl b/install/ubuntu/17.10/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/17.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/default.stpl b/install/ubuntu/17.10/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/17.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/hosting.stpl b/install/ubuntu/17.10/templates/web/nginx/hosting.stpl
index 587b02c7..3e3567d6 100755
--- a/install/ubuntu/17.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/http2.stpl b/install/ubuntu/17.10/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/17.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.stpl
index 5ffc9ed5..a721dd81 100644
--- a/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/17.10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -37,7 +37,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/18.04/templates/web/nginx/caching.stpl b/install/ubuntu/18.04/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/18.04/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/default.stpl b/install/ubuntu/18.04/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/18.04/templates/web/nginx/default.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/hosting.stpl b/install/ubuntu/18.04/templates/web/nginx/hosting.stpl
index 587b02c7..3e3567d6 100755
--- a/install/ubuntu/18.04/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/http2.stpl b/install/ubuntu/18.04/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/18.04/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl
index c9f91854..b8bf770a 100644
--- a/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/18.04/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -36,7 +36,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/install/ubuntu/18.10/templates/web/nginx/caching.stpl b/install/ubuntu/18.10/templates/web/nginx/caching.stpl
index 62be58ba..61b74814 100755
--- a/install/ubuntu/18.10/templates/web/nginx/caching.stpl
+++ b/install/ubuntu/18.10/templates/web/nginx/caching.stpl
@@ -33,7 +33,8 @@ server {
         proxy_pass https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/default.stpl b/install/ubuntu/18.10/templates/web/nginx/default.stpl
index 7672d9ac..418305a8 100755
--- a/install/ubuntu/18.10/templates/web/nginx/default.stpl
+++ b/install/ubuntu/18.10/templates/web/nginx/default.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/hosting.stpl b/install/ubuntu/18.10/templates/web/nginx/hosting.stpl
index 587b02c7..3e3567d6 100755
--- a/install/ubuntu/18.10/templates/web/nginx/hosting.stpl
+++ b/install/ubuntu/18.10/templates/web/nginx/hosting.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/http2.stpl b/install/ubuntu/18.10/templates/web/nginx/http2.stpl
index b694d1c2..5a958ca4 100644
--- a/install/ubuntu/18.10/templates/web/nginx/http2.stpl
+++ b/install/ubuntu/18.10/templates/web/nginx/http2.stpl
@@ -24,7 +24,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.stpl b/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.stpl
index c9f91854..b8bf770a 100644
--- a/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.stpl
+++ b/install/ubuntu/18.10/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -36,7 +36,7 @@ server {
 
     location = /robots.txt  { access_log off; log_not_found off; }
     location = /favicon.ico { access_log off; log_not_found off; }
-    location ~ /\.          { access_log off; log_not_found off; deny all; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
     location ~ ~$           { access_log off; log_not_found off; deny all; }
 
     error_page  403 /error/404.html;
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
index 0978f452..d66f80be 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
@@ -41,7 +41,8 @@ server {
     }
 
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
index 4e75c188..27dd354b 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
@@ -41,7 +41,8 @@ server {
     }
 
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
index 0978f452..d66f80be 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
@@ -41,7 +41,8 @@ server {
     }
 
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
index d1781ee6..d8a23009 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
@@ -57,7 +57,8 @@ server {
     }
 
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
index e22d4ccc..a6a0b744 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
@@ -26,7 +26,8 @@ server {
     }
 
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
index c993be39..d770ac6a 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
@@ -28,7 +28,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
index 2b4fa14e..a2f7f9f2 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
@@ -28,7 +28,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
index 289116df..6118fa82 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
@@ -28,7 +28,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
index b06aca58..b4468a6a 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
@@ -28,7 +28,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
index 05ede9e6..df269ad4 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
@@ -28,7 +28,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
index e02ce616..8e0a0f5a 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
@@ -28,7 +28,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
index d43b7529..9649671d 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
@@ -28,7 +28,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
index c2274a43..21acb34b 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
@@ -28,7 +28,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
-    location ~ /\.      {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
     location ~ /\.hg/   {return 404;}

From 1cbd6a57973a34bd29aec16097c7ba24e29ec482 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 31 Mar 2022 16:12:46 +0200
Subject: [PATCH 1691/2300] Update v-get-database-credentials-of-domain

---
 bin/v-get-database-credentials-of-domain | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-get-database-credentials-of-domain b/bin/v-get-database-credentials-of-domain
index 22550d7a..cb5729b0 100644
--- a/bin/v-get-database-credentials-of-domain
+++ b/bin/v-get-database-credentials-of-domain
@@ -84,6 +84,7 @@ if [ "$CMS_TYPE" = "wordpress" ]; then
     CONFIG_FILE_FULL_PATH_BACKUP="${CONFIG_FILE_FULL_PATH}_backup"
     cp $CONFIG_FILE_FULL_PATH $CONFIG_FILE_FULL_PATH_BACKUP
     sed -i "s|//.*$||g" $CONFIG_FILE_FULL_PATH_BACKUP
+    sed -i "s|\"|'|g" $CONFIG_FILE_FULL_PATH_BACKUP
     sed -i "s|('|( '|g" $CONFIG_FILE_FULL_PATH_BACKUP
     sed -i "s|');|' );|g" $CONFIG_FILE_FULL_PATH_BACKUP
     DATABASE_NAME=$(grep 'DB_NAME' $CONFIG_FILE_FULL_PATH_BACKUP | awk '{print $3}' | sed -e "s/^'//" -e "s/'$//")

From 8bbf4ef361607907971e35203a7214b913a2d987 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 2 Apr 2022 10:12:05 +0200
Subject: [PATCH 1692/2300] Update install-new-roundcube.sh

---
 src/deb/for-download/tools/install-new-roundcube.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index 8996fa75..4d03160e 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -10,7 +10,6 @@ LOGINMESSAGE1='Click here for NEW Webmail'
 LOGINMESSAGE2='(it is adapted for mobile phones too)'
 
 DATABASE_NAME_WITHOUT_PREFIX="roundcube"
-DATABASE_NAME="${USER}_roundcube"
 
 #############################################################################################################################
 
@@ -21,6 +20,8 @@ if [ $# -gt 1 ]; then
     DOMAIN=$2
 fi
 
+DATABASE_NAME="${USER}_roundcube"
+
 if [ -z "$USER" ] || [ -z "$DOMAIN" ]; then
     echo "Usage:"
     echo "bash install-new-roundcube.sh VESTAUSER YOURDOMAIN.com"

From add252bbd71840f4cfa7c96c7997323d92632e95 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 2 Apr 2022 10:13:37 +0200
Subject: [PATCH 1693/2300] Update install-new-roundcube.sh

---
 src/deb/for-download/tools/install-new-roundcube.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index 4d03160e..a746ff59 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -20,7 +20,7 @@ if [ $# -gt 1 ]; then
     DOMAIN=$2
 fi
 
-DATABASE_NAME="${USER}_roundcube"
+DATABASE_NAME="${USER}_${DATABASE_NAME_WITHOUT_PREFIX}"
 
 if [ -z "$USER" ] || [ -z "$DOMAIN" ]; then
     echo "Usage:"

From 547d5f0c5be550028d17d85989792d01cabc4637 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 25 Apr 2022 21:13:46 +0200
Subject: [PATCH 1694/2300] Preventing brute-force reseting password

---
 bin/v-change-user-rkey     |  60 +++++++++++++++++++
 bin/v-log-failed-login     |  31 ++++++++++
 web/reset/index.php        | 114 +++++++++++++++++++++++++++----------
 web/templates/reset_1.html |  17 +++++-
 web/templates/reset_2.html |   5 +-
 web/templates/reset_3.html |   5 +-
 6 files changed, 195 insertions(+), 37 deletions(-)
 create mode 100644 bin/v-change-user-rkey
 create mode 100644 bin/v-log-failed-login

diff --git a/bin/v-change-user-rkey b/bin/v-change-user-rkey
new file mode 100644
index 00000000..6a11eed2
--- /dev/null
+++ b/bin/v-change-user-rkey
@@ -0,0 +1,60 @@
+#!/bin/bash
+# info: change user rkey
+# options: USER
+#
+# The function changes user's RKEY value.
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+user=$1
+
+# Includes
+source $VESTA/func/main.sh
+source $VESTA/conf/vesta.conf
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+if [ "$user" = "root" ]; then
+    check_result $E_FORBIDEN "Changing root password is forbiden"
+fi
+
+check_args '1' "$#" 'USER'
+is_format_valid 'user'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+hash=$(generate_password)
+d=$(date +%s)
+
+# Changing RKEY value
+update_user_value "$user" '$RKEY' "$hash"
+
+#check if RKEYEXP exists
+if [ -z "$(grep RKEYEXP $USER_DATA/user.conf)" ]; then
+    sed -i "s/^RKEY/RKEYEXP='$d'\nRKEY/g" $USER_DATA/user.conf
+else
+    update_user_value "$user" '$RKEYEXP' "$d"
+fi
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_history "changed rkey"
+log_event "$OK" "$ARGUMENTS"
+
+exit
diff --git a/bin/v-log-failed-login b/bin/v-log-failed-login
new file mode 100644
index 00000000..76bfd36a
--- /dev/null
+++ b/bin/v-log-failed-login
@@ -0,0 +1,31 @@
+#!/bin/bash
+# info: log failed login attempt
+# options: USER [IP]
+#
+# The function log failed login attempt
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+user=$1
+ip=${2-127.0.0.1}
+
+time_n_date=$(date +'%T %F')
+time=$(echo "$time_n_date" |cut -f 1 -d \ )
+date=$(echo "$time_n_date" |cut -f 2 -d \ )
+
+
+#----------------------------------------------------------#
+#                           Action                         #
+#----------------------------------------------------------#
+
+echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+exit 0
diff --git a/web/reset/index.php b/web/reset/index.php
index e4a7608f..9a42b2cb 100644
--- a/web/reset/index.php
+++ b/web/reset/index.php
@@ -2,6 +2,7 @@
 session_start();
 define('NO_AUTH_REQUIRED',true);
 $TAB = 'RESET PASSWORD';
+$v_ip = $_SERVER['REMOTE_ADDR'];
 
 if (isset($_SESSION['user'])) {
     header("Location: /list/user");
@@ -11,35 +12,72 @@ if (isset($_SESSION['user'])) {
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
 if ((!empty($_POST['user'])) && (empty($_POST['code']))) {
+
+    // Check token
+    if ((!isset($_REQUEST['token'])) || ($_SESSION['token'] != $_REQUEST['token'])) {
+        die("Wrong token or missing token");
+    }
+
     $v_user = escapeshellarg($_POST['user']);
     $user = $_POST['user'];
+    $email = $_POST['email'];
     $cmd="/usr/bin/sudo /usr/local/vesta/bin/v-list-user";
     exec ($cmd." ".$v_user." json", $output, $return_var);
     if ( $return_var == 0 ) {
         $data = json_decode(implode('', $output), true);
-        $rkey = $data[$user]['RKEY'];
-        $fname = $data[$user]['FNAME'];
-        $lname = $data[$user]['LNAME'];
-        $contact = $data[$user]['CONTACT'];
-        $to = $data[$user]['CONTACT'];
-        $subject = __('MAIL_RESET_SUBJECT',date("Y-m-d H:i:s"));
-        $hostname = exec('hostname');
-        $from = __('MAIL_FROM',$hostname);
-        if (!empty($fname)) {
-            $mailtext = __('GREETINGS_GORDON_FREEMAN',$fname,$lname);
-        } else {
-            $mailtext = __('GREETINGS');
-        }
-        $mailtext .= __('PASSWORD_RESET_REQUEST',$hostname.":".$_SERVER['SERVER_PORT'],$user,$rkey,$hostname.":".$_SERVER['SERVER_PORT'],$user,$rkey);
-        if (!empty($rkey)) send_email($to, $subject, $mailtext, $from);
         unset($output);
+        exec("/usr/bin/sudo /usr/local/vesta/bin/v-get-user-value ".$v_user." RKEYEXP", $output, $return_var);
+        $rkeyexp = trim(implode('', $output));
+        if (strlen($rkeyexp)>9) $rkeyexp=intval($rkeyexp);
+        unset($output);
+        if ($rkeyexp === null || $rkeyexp < time() - 900) {
+            if ($email == $data[$user]['CONTACT']) {
+                exec("/usr/bin/sudo /usr/local/vesta/bin/v-change-user-rkey ".$v_user, $output, $return_var);
+                unset($output);
+                $CMD="/usr/bin/sudo /usr/local/vesta/bin/v-get-user-value ".$v_user." RKEY";
+                exec($CMD, $output, $return_var);
+                $rkey = trim(implode('', $output));
+                //unset($output);
+                //echo $rkey; exit;
+                //echo $CMD."\n<br />";
+                //var_dump($rkey); exit;
+                $fname = $data[$user]['FNAME'];
+                $lname = $data[$user]['LNAME'];
+                $contact = $data[$user]['CONTACT'];
+                $to = $data[$user]['CONTACT'];
+                $subject = __('MAIL_RESET_SUBJECT',date("Y-m-d H:i:s"));
+                $hostname = exec('hostname');
+                $from = __('MAIL_FROM',$hostname);
+                if (!empty($fname)) {
+                    $mailtext = __('GREETINGS_GORDON_FREEMAN',$fname,$lname);        
+                } else {
+                    $mailtext = __('GREETINGS');
+                }
+                $mailtext .= __('PASSWORD_RESET_REQUEST',$hostname.":".$_SERVER['SERVER_PORT'],$user,$rkey,$hostname.":".$_SERVER['SERVER_PORT'],$user,$rkey);
+                if (!empty($rkey)) {
+                    send_email($to, $subject, $mailtext, $from);
+                    header("Location: /reset/?action=code&user=".$_POST['user']);
+                }
+            } else {
+                $ERROR = "<a class=\"error\">".__('User and email not matched')."</a>";
+                exec("/usr/bin/sudo /usr/local/vesta/bin/v-log-failed-login " . $v_user . " " . $v_ip, $output, $return_var);
+            }
+        } else {
+            $ERROR = "<a class=\"error\">".__('Please wait 15 minutes before sending a new request')."</a>";
+        }
+    } else {
+        $ERROR = "<a class=\"error\">".__('User and email not matched')."</a>";
     }
-
-    header("Location: /reset/?action=code&user=".$_POST['user']);
-    exit;
+    unset($output);
 }
 
 if ((!empty($_POST['user'])) && (!empty($_POST['code'])) && (!empty($_POST['password'])) ) {
+
+    // Check token
+    if ((!isset($_REQUEST['token'])) || ($_SESSION['token'] != $_REQUEST['token'])) {
+        die("Wrong token or missing token");
+    }
+
     if ( $_POST['password'] == $_POST['password_confirm'] ) {
         $v_user = escapeshellarg($_POST['user']);
         $user = $_POST['user'];
@@ -47,26 +85,42 @@ if ((!empty($_POST['user'])) && (!empty($_POST['code'])) && (!empty($_POST['pass
         exec ($cmd." ".$v_user." json", $output, $return_var);
         if ( $return_var == 0 ) {
             $data = json_decode(implode('', $output), true);
+            unset($output);
             $rkey = $data[$user]['RKEY'];
             if (hash_equals($rkey, $_POST['code'])) {
-                $v_password = tempnam("/tmp","vst");
-                $fp = fopen($v_password, "w");
-                fwrite($fp, $_POST['password']."\n");
-                fclose($fp);
-                $cmd="/usr/bin/sudo /usr/local/vesta/bin/v-change-user-password";
-                exec ($cmd." ".$v_user." ".$v_password, $output, $return_var);
-                unlink($v_password);
-                if ( $return_var > 0 ) {
-                    $ERROR = "<a class=\"error\">".__('An internal error occurred')."</a>";
+                unset($output);
+                exec("/usr/bin/sudo /usr/local/vesta/bin/v-get-user-value ".$v_user." RKEYEXP", $output, $return_var);
+                $rkeyexp = trim(implode('', $output));
+                if (strlen($rkeyexp)>9) $rkeyexp=intval($rkeyexp);
+                unset($output);
+                if ($rkeyexp > time() - 900) {
+                    $v_password = tempnam("/tmp","vst");
+                    $fp = fopen($v_password, "w");
+                    fwrite($fp, $_POST['password']."\n");
+                    fclose($fp);
+                    $cmd="/usr/bin/sudo /usr/local/vesta/bin/v-change-user-password";
+                    exec ($cmd." ".$v_user." ".$v_password, $output, $return_var);
+                    unlink($v_password);
+                    if ( $return_var > 0 ) {
+                        sleep(5);
+                        $ERROR = "<a class=\"error\">".__('An internal error occurred')."</a>";
+                    } else {
+                        $_SESSION['user'] = $_POST['user'];
+                        header("Location: /");
+                        exit;
+                    }
                 } else {
-                    $_SESSION['user'] = $_POST['user'];
-                    header("Location: /");
-                    exit;
+                    sleep(5);
+                    $ERROR = "<a class=\"error\">".__('Code has been expired')."</a>";
+                    exec("/usr/bin/sudo /usr/local/vesta/bin/v-log-failed-login " . $v_user . " " . $v_ip, $output, $return_var);
                 }
             } else {
+                sleep(5);
                 $ERROR = "<a class=\"error\">".__('Invalid username or code')."</a>";
+                exec("/usr/bin/sudo /usr/local/vesta/bin/v-log-failed-login " . $v_user . " " . $v_ip, $output, $return_var);
             }
         } else {
+            sleep(5);
             $ERROR = "<a class=\"error\">".__('Invalid username or code')."</a>";
         }
     } else {
diff --git a/web/templates/reset_1.html b/web/templates/reset_1.html
index b48f3706..87c9235a 100644
--- a/web/templates/reset_1.html
+++ b/web/templates/reset_1.html
@@ -5,13 +5,14 @@
                         <table>
                             <tr>
                                 <td style="padding: 0 10px 0 42px; height: 280px; width: 170px;">
-                                    <a href="/"><img border=0 src="/images/logo.png" width="124px" height="46px" alt="Vesta Control Panel" /></a>
+                                    <a href="/"><img border=0 src="/images/vesta_logo.png" alt="myVesta Control Panel" /></a>
                                 </td>
                                 <td style="padding: 10px 0 0 0;">
                                     <form method="post" action="/reset/">
                                         <table class="login-box">
                                             <tr>
                                             <td style="padding: 12px 0 0 2px;">
+                                                <input type="hidden" name="token" value="<?=$_SESSION['token'];?>"/>
                                                 <?php print __('RESET_NOTICE');?>
                                             </td>
                                             </tr>
@@ -25,9 +26,19 @@
                                                     <input tabindex="1" type="text" size="20px" style="width:240px" name="user" class="vst-input">
                                                 </td>
                                             </tr>
+                                            <tr>
+                                                <td style="padding: 12px 0 0 2px;">
+                                                    <?php print __('Email');?>
+                                                </td>
+                                            </tr>
+                                            <tr>
+                                                <td>
+                                                    <input tabindex="2" type="text" size="20px" style="width:240px" name="email" class="vst-input">
+                                                </td>
+                                            </tr>
                                             <tr>
                                                 <td style="padding: 20px 0 12px 0;">
-                                                    <input tabindex="2" type="submit" value="<?php print __('Submit');?>" class="button">
+                                                    <input tabindex="3" type="submit" value="<?php print __('Submit');?>" class="button">
                                                     <input type="button" class="button cancel" value="<?php print __('Back');?>" onclick="location.href='/login/'">
                                                 </td>
                                             </tr>
@@ -39,7 +50,7 @@
                                 <td colspan=2>
                                     <div class="login-bottom">
                                         <div style="height:20px"><?php if (isset($ERROR)) echo $ERROR ?></div>
-                                        <a class="vestacp" href="http://vestacp.com" >vestacp.com</a>
+                                        <a class="vestacp" href="https://www.myvestacp.com/">myvestacp.com</a>
                                     </div>
                                 </td>
                             </tr>
diff --git a/web/templates/reset_2.html b/web/templates/reset_2.html
index 58c3b94f..94fd9fea 100644
--- a/web/templates/reset_2.html
+++ b/web/templates/reset_2.html
@@ -5,13 +5,14 @@
                         <table>
                             <tr>
                                 <td style="padding: 0 10px 0 42px; height: 280px; width: 170px;">
-                                    <a href="/"><img border=0 src="/images/logo.png" width="124px" height="46px" alt="Vesta Control Panel" /></a>
+                                    <a href="/"><img border=0 src="/images/vesta_logo.png" alt="myVesta Control Panel" /></a>
                                 </td>
                                 <td style="padding: 30px 0 0 0;">
                                     <form method="get" action="/reset/" >
                                         <table class="login-box">
                                             <tr>
                                                 <td style="padding: 12px 0 0 2px;">
+                                                    <input type="hidden" name="token" value="<?=$_SESSION['token'];?>"/>
                                                     <?php print __('RESET_CODE_SENT');?>
                                                 </td>
                                             </tr>
@@ -39,7 +40,7 @@
                                 <td colspan=2>
                                     <div class="login-bottom">
                                         <div style="height:20px"><?php if (isset($ERROR)) echo $ERROR ?></div>
-                                        <a class="vestacp" href="http://vestacp.com" >vestacp.com</a>
+                                        <a class="vestacp" href="https://www.myvestacp.com/">myvestacp.com</a>
                                     </div>
                                 </td>
                             </tr>
diff --git a/web/templates/reset_3.html b/web/templates/reset_3.html
index 0cc54bda..3d5ebb9d 100644
--- a/web/templates/reset_3.html
+++ b/web/templates/reset_3.html
@@ -5,7 +5,7 @@
                         <table>
                             <tr>
                                 <td style="padding: 0 10px 0 42px; height: 280px; width: 170px;">
-                                    <a href="/"><img border=0 src="/images/logo.png" width="124px" height="46px" alt="Vesta Control Panel" /></a>
+                                    <a href="/"><img border=0 src="/images/vesta_logo.png" alt="myVesta Control Panel" /></a>
                                 </td>
                                 <td style="padding: 10px 0 0 0;">
                                     <form method="post">
@@ -15,6 +15,7 @@
                                                     <input type="hidden" name="action" value="confirm" >
                                                     <input type="hidden" name="user" value="<?=htmlentities($_GET['user'], ENT_QUOTES|ENT_HTML5)?>" >
                                                     <input type="hidden" name="code" value="<?=htmlentities($_GET['code'], ENT_QUOTES|ENT_HTML5)?>" >
+                                                    <input type="hidden" name="token" value="<?=$_SESSION['token'];?>"/>
                                                     <?php print __('New Password');?>
                                                 </td>
                                             </tr>
@@ -47,7 +48,7 @@
                                 <td colspan=2>
                                     <div class="login-bottom">
                                         <div style="height:20px"><?php if (isset($ERROR)) echo $ERROR ?></div>
-                                        <a class="vestacp" href="http://vestacp.com" >vestacp.com</a>
+                                        <a class="vestacp" href="https://www.myvestacp.com/">myvestacp.com</a>
                                     </div>
                                 </td>
                             </tr>

From 475b7eac6be1a4e7221b0b1cd288fbadaa60c688 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 25 Apr 2022 21:23:02 +0200
Subject: [PATCH 1695/2300] Generating 16 chars password for users

---
 func/main.sh              | 2 +-
 web/js/pages/add_user.js  | 2 +-
 web/js/pages/edit_user.js | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/func/main.sh b/func/main.sh
index 69737c72..9346e918 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -152,7 +152,7 @@ generate_password() {
         matrix=0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
     fi
     if [ -z "$lenght" ]; then
-        lenght=10
+        lenght=16
     fi
     i=1
     while [ $i -le $lenght ]; do
diff --git a/web/js/pages/add_user.js b/web/js/pages/add_user.js
index 510ed167..597c869e 100644
--- a/web/js/pages/add_user.js
+++ b/web/js/pages/add_user.js
@@ -7,7 +7,7 @@ $(function() {
 
 randomString = function() {
     var chars = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXTZabcdefghiklmnopqrstuvwxyz';
-    var string_length = 10;
+    var string_length = 16;
     var randomstring = '';
     for (var i = 0; i < string_length; i++) {
         var rnum = Math.floor(Math.random() * chars.length);
diff --git a/web/js/pages/edit_user.js b/web/js/pages/edit_user.js
index 439aeab0..381f4330 100644
--- a/web/js/pages/edit_user.js
+++ b/web/js/pages/edit_user.js
@@ -1,6 +1,6 @@
 function randomString() {
     var chars = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXTZabcdefghiklmnopqrstuvwxyz';
-    var string_length = 10;
+    var string_length = 16;
     var randomstring = '';
     for (var i = 0; i < string_length; i++) {
         var rnum = Math.floor(Math.random() * chars.length);

From da69aaa7aa1d44d85f68b623ea85db48638ca68d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 25 Apr 2022 22:09:23 +0200
Subject: [PATCH 1696/2300] Update v-log-failed-login

---
 bin/v-log-failed-login | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-log-failed-login b/bin/v-log-failed-login
index 76bfd36a..c164d060 100644
--- a/bin/v-log-failed-login
+++ b/bin/v-log-failed-login
@@ -29,3 +29,4 @@ echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
 #----------------------------------------------------------#
 
 exit 0
+

From 822541d1c57d5926111e8b291a41fdb5a13f6377 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 25 Apr 2022 22:12:19 +0200
Subject: [PATCH 1697/2300] Delete v-log-failed-login

---
 bin/v-log-failed-login | 32 --------------------------------
 1 file changed, 32 deletions(-)
 delete mode 100644 bin/v-log-failed-login

diff --git a/bin/v-log-failed-login b/bin/v-log-failed-login
deleted file mode 100644
index c164d060..00000000
--- a/bin/v-log-failed-login
+++ /dev/null
@@ -1,32 +0,0 @@
-#!/bin/bash
-# info: log failed login attempt
-# options: USER [IP]
-#
-# The function log failed login attempt
-
-
-#----------------------------------------------------------#
-#                    Variable&Function                     #
-#----------------------------------------------------------#
-
-# Argument definition
-user=$1
-ip=${2-127.0.0.1}
-
-time_n_date=$(date +'%T %F')
-time=$(echo "$time_n_date" |cut -f 1 -d \ )
-date=$(echo "$time_n_date" |cut -f 2 -d \ )
-
-
-#----------------------------------------------------------#
-#                           Action                         #
-#----------------------------------------------------------#
-
-echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
-
-#----------------------------------------------------------#
-#                       Vesta                              #
-#----------------------------------------------------------#
-
-exit 0
-

From fca4ca66d4755ea566e2fa26a75689c323fa7e44 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 25 Apr 2022 22:13:46 +0200
Subject: [PATCH 1698/2300] Delete v-change-user-rkey

---
 bin/v-change-user-rkey | 60 ------------------------------------------
 1 file changed, 60 deletions(-)
 delete mode 100644 bin/v-change-user-rkey

diff --git a/bin/v-change-user-rkey b/bin/v-change-user-rkey
deleted file mode 100644
index 6a11eed2..00000000
--- a/bin/v-change-user-rkey
+++ /dev/null
@@ -1,60 +0,0 @@
-#!/bin/bash
-# info: change user rkey
-# options: USER
-#
-# The function changes user's RKEY value.
-
-
-#----------------------------------------------------------#
-#                    Variable&Function                     #
-#----------------------------------------------------------#
-
-# Argument definition
-user=$1
-
-# Includes
-source $VESTA/func/main.sh
-source $VESTA/conf/vesta.conf
-
-
-#----------------------------------------------------------#
-#                    Verifications                         #
-#----------------------------------------------------------#
-
-if [ "$user" = "root" ]; then
-    check_result $E_FORBIDEN "Changing root password is forbiden"
-fi
-
-check_args '1' "$#" 'USER'
-is_format_valid 'user'
-is_object_valid 'user' 'USER' "$user"
-is_object_unsuspended 'user' 'USER' "$user"
-
-
-#----------------------------------------------------------#
-#                       Action                             #
-#----------------------------------------------------------#
-
-hash=$(generate_password)
-d=$(date +%s)
-
-# Changing RKEY value
-update_user_value "$user" '$RKEY' "$hash"
-
-#check if RKEYEXP exists
-if [ -z "$(grep RKEYEXP $USER_DATA/user.conf)" ]; then
-    sed -i "s/^RKEY/RKEYEXP='$d'\nRKEY/g" $USER_DATA/user.conf
-else
-    update_user_value "$user" '$RKEYEXP' "$d"
-fi
-
-
-#----------------------------------------------------------#
-#                       Vesta                              #
-#----------------------------------------------------------#
-
-# Logging
-log_history "changed rkey"
-log_event "$OK" "$ARGUMENTS"
-
-exit

From 74e9dd4abf6f5137e44944b02fdc501f335bfa8b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 25 Apr 2022 22:16:34 +0200
Subject: [PATCH 1699/2300] Linux EOL in v-log-failed-login and
 v-change-user-rkey

---
 bin/v-change-user-rkey | 60 ++++++++++++++++++++++++++++++++++++++++++
 bin/v-log-failed-login | 31 ++++++++++++++++++++++
 2 files changed, 91 insertions(+)
 create mode 100644 bin/v-change-user-rkey
 create mode 100644 bin/v-log-failed-login

diff --git a/bin/v-change-user-rkey b/bin/v-change-user-rkey
new file mode 100644
index 00000000..38777e4c
--- /dev/null
+++ b/bin/v-change-user-rkey
@@ -0,0 +1,60 @@
+#!/bin/bash
+# info: change user rkey
+# options: USER
+#
+# The function changes user's RKEY value.
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+user=$1
+
+# Includes
+source $VESTA/func/main.sh
+source $VESTA/conf/vesta.conf
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+if [ "$user" = "root" ]; then
+    check_result $E_FORBIDEN "Changing root password is forbiden"
+fi
+
+check_args '1' "$#" 'USER'
+is_format_valid 'user'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+hash=$(generate_password)
+d=$(date +%s)
+
+# Changing RKEY value
+update_user_value "$user" '$RKEY' "$hash"
+
+#check if RKEYEXP exists
+if [ -z "$(grep RKEYEXP $USER_DATA/user.conf)" ]; then
+    sed -i "s/^RKEY/RKEYEXP='$d'\nRKEY/g" $USER_DATA/user.conf
+else
+    update_user_value "$user" '$RKEYEXP' "$d"
+fi
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_history "changed rkey"
+log_event "$OK" "$ARGUMENTS"
+
+exit
diff --git a/bin/v-log-failed-login b/bin/v-log-failed-login
new file mode 100644
index 00000000..66b9b808
--- /dev/null
+++ b/bin/v-log-failed-login
@@ -0,0 +1,31 @@
+#!/bin/bash
+# info: log failed login attempt
+# options: USER [IP]
+#
+# The function log failed login attempt
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+user=$1
+ip=${2-127.0.0.1}
+
+time_n_date=$(date +'%T %F')
+time=$(echo "$time_n_date" |cut -f 1 -d \ )
+date=$(echo "$time_n_date" |cut -f 2 -d \ )
+
+
+#----------------------------------------------------------#
+#                           Action                         #
+#----------------------------------------------------------#
+
+echo "$date $time $user $ip failed to login" >> $VESTA/log/auth.log
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+exit 0

From 1c4cce181a6a9377b267583e5ebe74a0523a735a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 25 Apr 2022 22:34:33 +0200
Subject: [PATCH 1700/2300] Making sure yescrypt is disabled

---
 src/deb/vesta/postinst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index e2a1219c..565047f1 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -25,6 +25,12 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+
+# Making sure yescrypt is disabled
+if [ "$release" -eq 11 ]; then
+    sed -i "s/yescrypt/sha512/g" /etc/pam.d/common-password
+fi
+
 # Checking if FreshClam is started after installation
 if [ ! -f "/usr/local/vesta/data/upgrades/freshclam_start" ]; then
     clamavup=$(/usr/local/vesta/bin/v-list-sys-services | grep 'clamav-daemon' | grep -c 'running')

From d98d67d5a13f3ec18be234efe75c9770e4ebc51d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 25 Apr 2022 22:39:52 +0200
Subject: [PATCH 1701/2300] Update Changelog.md

---
 Changelog.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index a25b40bc..9c98c282 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,9 @@
+Version 0.9.8-26-55 [26-Apr-2022]
+==================================================
+* Support for MySQL 8
+* Preventing brute-force resetting password
+* Many minor bugfixes
+
 Version 0.9.8-26-54 [17-Dec-2021]
 ==================================================
 * Checking if FreshClam is started after installation

From 247dce94f80c07469e24660ed9e3d8e927e34498 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 25 Apr 2022 22:41:53 +0200
Subject: [PATCH 1702/2300] Version 0.9.8-26-55

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 2c883b97..f9160904 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-54
+vesta-0.9.8-26-55

From f2809eeb6775da02d63f1a763a49a67326a27150 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 25 Apr 2022 23:38:47 +0200
Subject: [PATCH 1703/2300] Update Changelog.md

---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 9c98c282..819eea8c 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,7 +1,7 @@
 Version 0.9.8-26-55 [26-Apr-2022]
 ==================================================
 * Support for MySQL 8
-* Preventing brute-force resetting password
+* Preventing brute-force resetting password  (thanks to HestiaCP @hestiacp for fix)
 * Many minor bugfixes
 
 Version 0.9.8-26-54 [17-Dec-2021]

From 3a688f33fac01ee2c75c8243598f2f4a9d46d79e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 7 May 2022 12:45:33 +0200
Subject: [PATCH 1704/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 2dbd2c11..6f9410e4 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1610,7 +1610,7 @@ fi
 # Vesta data sessions permissions
 chown admin:admin $VESTA/data/sessions
 
-echo "== Configuring system ips"
+echo "== Configuring system ips (this can take a few minutes, relax)"
 $VESTA/bin/v-update-sys-ip
 
 echo "== Get main ip"

From aeb210433f28d19b4871750f40e3fcecfdd62419 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 7 May 2022 14:23:11 +0200
Subject: [PATCH 1705/2300] conf/mariadb_installed and conf/mysql8_installed

---
 install/vst-install-debian.sh | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 6f9410e4..8e87f737 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1207,6 +1207,14 @@ fi
 #----------------------------------------------------------#
 
 if [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; then
+
+    if [ "$mysql" = 'yes' ]; then
+        touch $VESTA/conf/mariadb_installed
+    fi
+    if [ "$mysql8" = 'yes' ]; then
+        touch $VESTA/conf/mysql8_installed
+    fi
+
     if [ "$mysql" = 'yes' ]; then
         echo "=== Configure MariaDB"
         mycnf="my-small.cnf"

From 18e42c954060377ca53e9ef80702eb5ccc9a31a5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 7 May 2022 21:11:10 +0200
Subject: [PATCH 1706/2300] exim4.conf.template-RC

---
 install/debian/11/exim/exim4.conf.template-RC | 440 ++++++++++++++++++
 1 file changed, 440 insertions(+)
 create mode 100644 install/debian/11/exim/exim4.conf.template-RC

diff --git a/install/debian/11/exim/exim4.conf.template-RC b/install/debian/11/exim/exim4.conf.template-RC
new file mode 100644
index 00000000..9c5fc671
--- /dev/null
+++ b/install/debian/11/exim/exim4.conf.template-RC
@@ -0,0 +1,440 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+disable_ipv6=true
+add_environment=<; PATH=/bin:/usr/bin
+keep_environment=
+
+#local_interfaces =  0.0.0.0
+#smtp_active_hostname = ${lookup{$interface_address}lsearch{/etc/exim4/virtual/helo_data}{$value}}
+#smtp_banner = "$smtp_active_hostname ESMTP $tod_full"
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS = 15
+LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS = 5
+LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
+LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
+
+recipients_max = 150
+recipients_max_reject = true
+
+# log_selector = +smtp_connection
+smtp_accept_max = 50
+smtp_accept_max_per_host = 4
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/$received_ip_address.crt
+tls_privatekey = /usr/local/vesta/ssl/$received_ip_address.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 0s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lookup{${lc:${domain:$h_from:}}}dsearch{/etc/exim4/domains/}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+
+acl_not_smtp = acl_not_smtp
+
+begin acl
+
+acl_not_smtp:
+  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
+  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_recipients}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS}}
+  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
+
+  deny message = Hosting account is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+
+  warn    set acl_m3    = yes
+
+  accept
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
+  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_recipients}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS}}
+  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
+
+  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+
+  warn    set acl_m3    = no
+  
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth requried
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+
+  deny senders = /etc/exim4/deny_senders
+
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = */defer_ok
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{600K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = nobody:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh|\.jar)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{yes}{no_such_user}}}}
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  require_files = ${local_part}:+${home}/.forward
+  domains = +local_domains
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/fwd_only}{true}{false}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #interface = ${if eq{$acl_m3}{yes}{FIRSTIP}{${lookup{$sender_address_domain}lsearch{/etc/exim4/virtual/interfaces} {$value}{SECONDIP}}}}
+  #helo_data = "${if eq{$acl_m3}{yes}{FIRSTHOST}{${lookup{$sending_ip_address}lsearch{/etc/exim4/virtual/helo_data}{$value}{SECONDHOST}}}}"
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+  hosts_try_chunking = !93.188.3.0/24
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}.msg
+  from = "${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################

From f49479043f1894dd448b13a7c5054157d3d2f235 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 7 May 2022 21:39:40 +0200
Subject: [PATCH 1707/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 39 ++++++++++++++++++++++++-------
 1 file changed, 31 insertions(+), 8 deletions(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 6ede0d04..6ca4343b 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -137,18 +137,41 @@ $VESTA/bin/v-make-ip-ssl "$MAIL_USER" "$MAIL_HOSTNAME"
 check_grep=$(grep -c 'smtp_active_hostname' /etc/exim4/exim4.conf.template)
 if [ "$check_grep" -eq 0 ]; then
     echo "=== patching exim4.conf.template"
-    patch /etc/exim4/exim4.conf.template < /usr/local/vesta/src/deb/for-download/tools/patches/separate-mail-ip.patch
+    mv /etc/exim4/exim4.conf.template /etc/exim4/exim4.conf.template-backup
+    cp /usr/local/vesta/install/debian/11/exim/exim4.conf.template-RC /etc/exim4/exim4.conf.template
+    sed -i "s|FIRSTIP|$HOST_IP|g" /etc/exim4/exim4.conf.template
+    sed -i "s|SECONDIP|$MAIL_IP|g" /etc/exim4/exim4.conf.template
+    sed -i "s|FIRSTHOST|$HOSTNAME|g" /etc/exim4/exim4.conf.template
+    sed -i "s|SECONDHOST|$MAIL_HOSTNAME|g" /etc/exim4/exim4.conf.template
+    sed -i "s|#local_interfaces|local_interfaces|g" /etc/exim4/exim4.conf.template
+    sed -i "s|#smtp_active_hostname|smtp_active_hostname|g" /etc/exim4/exim4.conf.template
+    sed -i "s|#smtp_banner|smtp_banner|g" /etc/exim4/exim4.conf.template
+    sed -i "s|#interface =|interface =|g" /etc/exim4/exim4.conf.template
+    sed -i "s|#helo_data =|helo_data =|g" /etc/exim4/exim4.conf.template
+    touch /etc/exim4/limit_per_email_account_max_sent_emails_per_hour
+    touch /etc/exim4/limit_per_email_account_max_recipients
+    touch /etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour
+    touch /etc/exim4/limit_per_hosting_account_max_recipients
+    check_grep=$(grep -c '#SPAMASSASSIN' /etc/exim4/exim4.conf.template-backup)
+    if [ "$check_grep" -eq 0 ]; then
+        sed -i "s|#SPAMASSASSIN|SPAMASSASSIN|g" /etc/exim4/exim4.conf.template
+    fi
+    check_grep=$(grep -c '#SPAM_SCORE' /etc/exim4/exim4.conf.template-backup)
+    if [ "$check_grep" -eq 0 ]; then
+        sed -i "s|#SPAM_SCORE|SPAM_SCORE|g" /etc/exim4/exim4.conf.template
+    fi
+    check_grep=$(grep -c '#CLAMD' /etc/exim4/exim4.conf.template-backup)
+    if [ "$check_grep" -eq 0 ]; then
+        sed -i "s|#CLAMD|CLAMD|g" /etc/exim4/exim4.conf.template
+    fi
+    systemctl restart exim4
     if [ $? -ne 0 ]; then
+        cp /etc/exim4/exim4.conf.template-backup /etc/exim4/exim4.conf.template
+        systemctl restart exim4
         echo "=== Patching failed, aborting"
         exit 1
-    else
-        echo "=== Patching successful"
-        sed -i "s|IP1|$HOST_IP|g" /etc/exim4/exim4.conf.template
-        sed -i "s|IP2|$MAIL_IP|g" /etc/exim4/exim4.conf.template
-        sed -i "s|HOST1|$HOSTNAME|g" /etc/exim4/exim4.conf.template
-        sed -i "s|HOST2|$MAIL_HOSTNAME|g" /etc/exim4/exim4.conf.template
-        service exim4 restart
     fi
+    echo "=== Patching successful"
 else
     echo "=== exim4.conf.template already patched"
 fi

From 23ba131e6978e7bb3fa2b7a5173ebd7d1df93edc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 7 May 2022 22:21:20 +0200
Subject: [PATCH 1708/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 6ca4343b..69c8565b 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -40,7 +40,7 @@ fi
 #                    Verifications                         #
 #----------------------------------------------------------#
 
-check_args '2' "$#" 'MAIL_HOSTNAME MAIL_IP'
+check_args '2' "$#" 'MAIL_HOSTNAME MAIL_IP [NETMASK]'
 is_domain_format_valid "$MAIL_HOSTNAME"
 is_ip_format_valid "$MAIL_IP"
 

From aaf20378b1a2888f81af624e582486ef6507f849 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 8 May 2022 15:59:46 +0200
Subject: [PATCH 1709/2300] Create barracuda.cf

---
 .../for-download/tools/spamassassin/barracuda.cf  | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 src/deb/for-download/tools/spamassassin/barracuda.cf

diff --git a/src/deb/for-download/tools/spamassassin/barracuda.cf b/src/deb/for-download/tools/spamassassin/barracuda.cf
new file mode 100644
index 00000000..8d0fada9
--- /dev/null
+++ b/src/deb/for-download/tools/spamassassin/barracuda.cf
@@ -0,0 +1,15 @@
+header IN_BCUDA_RBL rbleval:check_rbl('bcuda', 'b.barracudacentral.org')
+describe IN_BCUDA_RBL Received via a relay listed by Barracuda BRBL
+tflags IN_BCUDA_RBL net
+
+header RCVD_IN_BCUDA_RELAY rbleval:check_rbl_results_for('bcuda', '127.0.0.2')
+describe RCVD_IN_BCUDA_RELAY BCUDA: relay ip is convicted spammer
+tflags RCVD_IN_BCUDA_RELAY net
+
+score RCVD_IN_BCUDA_RBL 1.50
+score RCVD_IN_BCUDA_RELAY 1.50
+
+header IN_BCUDA_HOP rbleval:check_rbl('bcuda-notfirsthop', 'b.barracudacentral.org')
+describe IN_BCUDA_HOP Received via a relay listed by Barracuda BRBL
+tflags IN_BCUDA_HOP net
+score RCVD_IN_BCUDA_HOP 1.50

From d8fb531865e8c899e2f5f9e1ceb90bf643b8f507 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 8 May 2022 16:24:56 +0200
Subject: [PATCH 1710/2300] Update barracuda.cf

---
 src/deb/for-download/tools/spamassassin/barracuda.cf | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/spamassassin/barracuda.cf b/src/deb/for-download/tools/spamassassin/barracuda.cf
index 8d0fada9..4491d645 100644
--- a/src/deb/for-download/tools/spamassassin/barracuda.cf
+++ b/src/deb/for-download/tools/spamassassin/barracuda.cf
@@ -6,10 +6,10 @@ header RCVD_IN_BCUDA_RELAY rbleval:check_rbl_results_for('bcuda', '127.0.0.2')
 describe RCVD_IN_BCUDA_RELAY BCUDA: relay ip is convicted spammer
 tflags RCVD_IN_BCUDA_RELAY net
 
-score RCVD_IN_BCUDA_RBL 1.50
-score RCVD_IN_BCUDA_RELAY 1.50
+score RCVD_IN_BCUDA_RBL 1.00
+score RCVD_IN_BCUDA_RELAY 3.00
 
 header IN_BCUDA_HOP rbleval:check_rbl('bcuda-notfirsthop', 'b.barracudacentral.org')
 describe IN_BCUDA_HOP Received via a relay listed by Barracuda BRBL
 tflags IN_BCUDA_HOP net
-score RCVD_IN_BCUDA_HOP 1.50
+score RCVD_IN_BCUDA_HOP 1.00

From 360abd80c07a00d9ad7f546f3d2af45bee89b4dd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 21 May 2022 12:42:29 +0200
Subject: [PATCH 1711/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 69c8565b..a26c68e3 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -40,7 +40,7 @@ fi
 #                    Verifications                         #
 #----------------------------------------------------------#
 
-check_args '2' "$#" 'MAIL_HOSTNAME MAIL_IP [NETMASK]'
+check_args '2' "$#" 'MAIL_HOSTNAME MAIL_IP [NETMASK] [INTERFACE]'
 is_domain_format_valid "$MAIL_HOSTNAME"
 is_ip_format_valid "$MAIL_IP"
 

From 93f2a62ee84e0642a472136549fe9a6f10f2b367 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 27 May 2022 23:28:25 +0200
Subject: [PATCH 1712/2300] Fixing insane HTML form bug in Lisr backup details
 page

Without this fix, selecting first item and skiping next item and selecting any other item below, resulted with selected only first item in HTML form array
---
 web/templates/admin/list_backup_detail.html | 46 +++++++++++----------
 1 file changed, 25 insertions(+), 21 deletions(-)

diff --git a/web/templates/admin/list_backup_detail.html b/web/templates/admin/list_backup_detail.html
index 096f5198..b2f378d0 100644
--- a/web/templates/admin/list_backup_detail.html
+++ b/web/templates/admin/list_backup_detail.html
@@ -1,15 +1,18 @@
+<style>
+input[type="checkbox"] {
+  display: block;
+  margin-top: 26px;
+}
+</style>
+<br /><br />
+<form action="/bulk/restore/" method="post" id="objects">
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/schedule/restore/?backup=<?=htmlentities($_GET['backup'])?>" class="l-sort__create-btn restore" title="<?=__('Restore All')?>"></a>
+        <a href="/schedule/restore/?backup=<?=htmlentities($_GET['backup'])?>" class="l-sort__create-btn restore" style="bottom: 0" title="<?=__('Restore All')?>"></a>
         <div class="l-sort-toolbar clearfix">
           <table>
             <tr>
-              <td class="toggle-all">
-                <input id="toggle-all" type="checkbox" name="toggle-all" value="toggle-all" onchange="checkedAll('objects');">
-                <label for="toggle-all" class="check-label toggle-all"><?=__('toggle all')?></label>
-              </td>
               <td>
-                <form action="/bulk/restore/" method="post" id="objects">
                 <input type="hidden" name="token" value="<?=$_SESSION['token']?>" />
                 <input type="hidden" name="backup" value="<?=htmlentities($_GET['backup']); ?>">
                 <div style="display: none;">
@@ -31,7 +34,7 @@
     <!-- /.l-separator -->
 
 
-    <div class="l-center units">
+    <div class="l-center units" style="margin-top:240px">
     <div class="l-unit header">
       <div class="subtitle" style="color: black;"><?=__('Listing')?>  <?=htmlentities($_GET['backup'])?></div>
       <div class="subtitle"><?=__('First select what to restore')?>:</div>
@@ -45,11 +48,11 @@
             ++$i;
       ?>
 
-      <div class="l-unit">
+      <div>
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
             <input id="check<?=$i?>" class="ch-toggle" type="checkbox" name="web[]" value="<?=$key?>">
-            <label for="check<?=$i++?>" class="check-label"></label>
+            
           </div>
           <!-- l-unit-toolbar__col -->
           <div class="l-unit-toolbar__col l-unit-toolbar__col--right">
@@ -96,11 +99,11 @@
           if (!empty($key)) {
       ?>
 
-      <div class="l-unit">
+      <div>
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
             <input id="check2<?=$i?>" type="checkbox" name="mail[]" value="<?=$key?>">
-            <label for="check2<?=$i++?>" class="check-label"></label>
+            
           </div>
           <!-- l-unit-toolbar__col -->
           <div class="l-unit-toolbar__col l-unit-toolbar__col--right noselect">
@@ -144,11 +147,11 @@
           if (!empty($key)) {
       ?>
 
-      <div class="l-unit">
+      <div>
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
             <input id="check3<?=$i?>" type="checkbox" name="dns[]" value="<?=$key?>">
-            <label for="check3<?=$i++?>" class="check-label"></label>
+            
           </div>
           <!-- l-unit-toolbar__col -->
           <div class="l-unit-toolbar__col l-unit-toolbar__col--right">
@@ -191,11 +194,11 @@
           if (!empty($key)) {
       ?>
 
-      <div class="l-unit">
+      <div>
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
             <input id="check4<?=$i?>" type="checkbox" name="db[]" value="<?=$key?>">
-            <label for="check4<?=$i++?>" class="check-label"></label>
+            
           </div>
           <!-- l-unit-toolbar__col -->
           <div class="l-unit-toolbar__col l-unit-toolbar__col--right">
@@ -239,11 +242,11 @@
           if (!empty($key)) {
       ?>
 
-      <div class="l-unit">
+      <div>
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
             <input id="check5<?=$i?>" type="checkbox" name="check" value="<?=$key?>">
-            <label for="check5<?=$i++?>" class="check-label"></label>
+            
           </div>
           <!-- l-unit-toolbar__col -->
           <div class="l-unit-toolbar__col l-unit-toolbar__col--right">
@@ -287,11 +290,11 @@
           if (!empty($key)) {
       ?>
 
-      <div class="l-unit">
+      <div>
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
             <input id="check6<?=$i?>" type="checkbox" name="udir[]" value="<?=$key?>">
-            <label for="check6<?=$i++?>" class="check-label"></label>
+            
           </div>
           <!-- l-unit-toolbar__col -->
           <div class="l-unit-toolbar__col l-unit-toolbar__col--right">
@@ -326,11 +329,11 @@
       <!-- /.l-separator -->
       <? }} ?>
 
-      <div class="l-unit">
+      <div>
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
             <input id="check7<?=$i?>" type="checkbox" name="cron" value="<?=$i?>">
-            <label for="check7<?=$i++?>" class="check-label"></label>
+            
           </div>
           <!-- l-unit-toolbar__col -->
           <div class="l-unit-toolbar__col l-unit-toolbar__col--right">
@@ -388,3 +391,4 @@
         </div>
       </div>
     </div>
+</form>

From c787f2c235c366d1dbf1152ae01a18cbefd52861 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 27 May 2022 23:46:39 +0200
Subject: [PATCH 1713/2300] Adding Barracuda RBL to SpamAssassin

---
 src/deb/vesta/postinst | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 565047f1..8bda7d8d 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -31,6 +31,21 @@ if [ "$release" -eq 11 ]; then
     sed -i "s/yescrypt/sha512/g" /etc/pam.d/common-password
 fi
 
+# Adding Barracuda RBL to SpamAssassin
+if [ ! -f "/usr/local/vesta/data/upgrades/barracuda_rbl" ]; then
+    spamassassin_installed=$(/usr/local/vesta/bin/v-list-sys-services | grep -c 'spamassassin')
+    spamassassin_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'spamassassin' | grep -c 'running')
+    if [ $spamassassin_installed -eq 1 ]; then
+        echo "== Adding Barracuda RBL to SpamAssassin"
+        wget -nv -O /etc/spamassassin/barracuda.cf http://c.myvestacp.com/tools/spamassassin/barracuda.cf
+    fi
+    if [ $spamassassin_running -eq 1 ]; then
+        echo "== Restarting SpamAssassin"
+        systemctl restart spamassassin
+    fi
+    touch /usr/local/vesta/data/upgrades/barracuda_rbl
+fi
+
 # Checking if FreshClam is started after installation
 if [ ! -f "/usr/local/vesta/data/upgrades/freshclam_start" ]; then
     clamavup=$(/usr/local/vesta/bin/v-list-sys-services | grep 'clamav-daemon' | grep -c 'running')

From 67ba371722abf9545b53fbc8c2999654a643d60c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 27 May 2022 23:50:14 +0200
Subject: [PATCH 1714/2300] Barracuda RBL in installer

---
 install/vst-install-debian.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 8e87f737..aa1d043c 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1468,9 +1468,11 @@ if [ "$spamd" = 'yes' ]; then
     echo "=== Configure SpamAssassin"
     #update-rc.d spamassassin defaults
     sed -i "s/ENABLED=0/ENABLED=1/" /etc/default/spamassassin
+    wget -nv -O /etc/spamassassin/barracuda.cf http://c.myvestacp.com/tools/spamassassin/barracuda.cf
     currentservice='spamassassin'
     ensure_startup $currentservice
-    ensure_start $currentservice
+    # ensure_start $currentservice
+    systemctl restart spamassassin
 fi
 
 
@@ -1891,6 +1893,7 @@ touch /usr/local/vesta/data/upgrades/enable-tls-in-proftpd
 touch /usr/local/vesta/data/upgrades/enable_cookie_httponly
 touch /usr/local/vesta/data/upgrades/fix_exim_494_autoreply
 touch /usr/local/vesta/data/upgrades/freshclam_start
+touch /usr/local/vesta/data/upgrades/barracuda_rbl
 
 # Secret URL
 secretquery=''

From 748d42ead7d7a49ba376654e99183ab3e460c374 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 27 May 2022 23:55:58 +0200
Subject: [PATCH 1715/2300] Update Changelog.md

---
 Changelog.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 819eea8c..002cd045 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,9 @@
+Version 0.9.8-26-56 [28-May-2022]
+==================================================
+* Adding Barracuda RBL to SpamAssassin
+* Fixing insane HTML form bug in List backup items page
+* Script for easy adding second IP address for SMTP authenticated users only (v-make-separated-ip-for-email)
+
 Version 0.9.8-26-55 [26-Apr-2022]
 ==================================================
 * Support for MySQL 8

From 8dd8cd07679e8d041cd3c8f24fd264cb9b56ffad Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 27 May 2022 23:57:37 +0200
Subject: [PATCH 1716/2300] Version 0.9.8-26-56

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index f9160904..2a785f14 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-55
+vesta-0.9.8-26-56

From 0f86941e8e507e072a9396fa136770c0403a5e7b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 4 Jun 2022 19:06:23 +0200
Subject: [PATCH 1717/2300] Fix for Sed Injection Vulnerability

---
 bin/v-change-sys-config-value |  1 +
 func/main.sh                  | 17 +++++++++++++++++
 2 files changed, 18 insertions(+)

diff --git a/bin/v-change-sys-config-value b/bin/v-change-sys-config-value
index 10657656..3681075c 100755
--- a/bin/v-change-sys-config-value
+++ b/bin/v-change-sys-config-value
@@ -28,6 +28,7 @@ PATH="$PATH:/usr/local/sbin:/sbin:/usr/sbin:/root/bin"
 check_args '2' "$#" 'KEY VALUE'
 is_format_valid 'key'
 
+format_no_quotes "$value" 'value'
 
 #----------------------------------------------------------#
 #                       Action                             #
diff --git a/func/main.sh b/func/main.sh
index 9346e918..c4169b01 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -838,6 +838,22 @@ is_format_valid_shell() {
         exit $E_INVALID	
     fi	
 }
+
+format_no_quotes() {
+    exclude="['|\"]"
+    if [[ "$1" =~ $exclude ]]; then
+       check_result "$E_INVALID" "Invalid $2 contains qoutes (\" or ') :: $1"
+    fi
+    is_no_new_line_format "$1"
+}
+
+is_no_new_line_format() {
+    test=$(echo "$1" | head -n1 );
+    if [[ "$test" != "$1" ]]; then
+      check_result "$E_INVALID" "invalid value :: $1"
+    fi
+}
+
 # Format validation controller
 is_format_valid() {
     for arg_name in $*; do
@@ -846,6 +862,7 @@ is_format_valid() {
             case $arg_name in
                 account)        is_user_format_valid "$arg" "$arg_name";;
                 action)         is_fw_action_format_valid "$arg";;
+                alias)          is_alias_format_valid "$arg" ;;
                 aliases)        is_alias_format_valid "$arg" ;;
                 antispam)       is_boolean_format_valid "$arg" 'antispam' ;;
                 antivirus)      is_boolean_format_valid "$arg" 'antivirus' ;;

From c7aa6ec7494bc3b7ac4885182383c1bf88692c1b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 6 Jul 2022 12:48:09 +0200
Subject: [PATCH 1718/2300] Fix for Exim4 fastopen with Gmail services
 (Debian11)

---
 install/debian/11/exim/exim4.conf.template | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/debian/11/exim/exim4.conf.template b/install/debian/11/exim/exim4.conf.template
index a041b329..4b3c0dd9 100644
--- a/install/debian/11/exim/exim4.conf.template
+++ b/install/debian/11/exim/exim4.conf.template
@@ -319,6 +319,7 @@ remote_smtp:
   dkim_private_key = DKIM_PRIVATE_KEY
   dkim_canon = relaxed
   dkim_strict = 0
+  hosts_try_fastopen = !*.l.google.com
   hosts_try_chunking = !93.188.3.0/24
 
 procmail:

From 2598785a755bc59d2691fc17c6bce400ae188641 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 6 Jul 2022 13:25:34 +0200
Subject: [PATCH 1719/2300] Fix for Exim4 fastopen with Gmail services
 (Debian11)

---
 install/debian/11/exim/exim4.conf.template-RC | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/debian/11/exim/exim4.conf.template-RC b/install/debian/11/exim/exim4.conf.template-RC
index 9c5fc671..605d848a 100644
--- a/install/debian/11/exim/exim4.conf.template-RC
+++ b/install/debian/11/exim/exim4.conf.template-RC
@@ -345,6 +345,7 @@ remote_smtp:
   dkim_private_key = DKIM_PRIVATE_KEY
   dkim_canon = relaxed
   dkim_strict = 0
+  hosts_try_fastopen = !*.l.google.com
   hosts_try_chunking = !93.188.3.0/24
 
 procmail:

From cf8a49f7394e91f4d8ee22040695f7ef0d914122 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 6 Jul 2022 14:38:58 +0200
Subject: [PATCH 1720/2300] Patch for GMail SMTP timeouts

---
 src/deb/vesta/postinst | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 8bda7d8d..cc798224 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -31,6 +31,24 @@ if [ "$release" -eq 11 ]; then
     sed -i "s/yescrypt/sha512/g" /etc/pam.d/common-password
 fi
 
+# Fixing Gmail hosts_try_fastopen in Exim4
+if [ "$release" -eq 11 ]; then
+	if [ -f "/etc/exim4/exim4.conf.template" ]; then 
+		check_grep=$(grep -c 'hosts_try_fastopen' /etc/exim4/exim4.conf.template)
+		if [ "$check_grep" -eq 0 ]; then
+					echo "=== Fixing Gmail hosts_try_fastopen in Exim4"
+					FIND="dkim_strict = 0"
+					ADD="  hosts_try_fastopen = \!\*.l.google.com"
+					sed -i "s#$FIND#$FIND\n$ADD#g" /etc/exim4/exim4.conf.template
+					systemctl restart exim4
+					
+					sed -i "s/net.ipv4.tcp_window_scaling/#net.ipv4.tcp_window_scaling/g" /etc/sysctl.conf
+					echo 1 > /proc/sys/net/ipv4/tcp_window_scaling
+		fi
+	fi
+fi
+
+
 # Adding Barracuda RBL to SpamAssassin
 if [ ! -f "/usr/local/vesta/data/upgrades/barracuda_rbl" ]; then
     spamassassin_installed=$(/usr/local/vesta/bin/v-list-sys-services | grep -c 'spamassassin')

From 7f1de189dd0181fde52a7db560122f844e2d344e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 6 Jul 2022 15:08:12 +0200
Subject: [PATCH 1721/2300] Update Changelog.md

---
 Changelog.md | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 002cd045..17494c79 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,8 @@
+Version 0.9.8-26-57 [06-Jul-2022]
+==================================================
+* Fix for GMail SMTP timeouts on Debian11
+* [Security] Fix for Local Sed Injection Vulnerability ( credits to @cleemy-desu-wayo )
+
 Version 0.9.8-26-56 [28-May-2022]
 ==================================================
 * Adding Barracuda RBL to SpamAssassin
@@ -7,7 +12,7 @@ Version 0.9.8-26-56 [28-May-2022]
 Version 0.9.8-26-55 [26-Apr-2022]
 ==================================================
 * Support for MySQL 8
-* Preventing brute-force resetting password  (thanks to HestiaCP @hestiacp for fix)
+* [Security] Preventing brute-force resetting password  (thanks to HestiaCP @hestiacp for fix)
 * Many minor bugfixes
 
 Version 0.9.8-26-54 [17-Dec-2021]

From 16f18bd8b3d007018c18843a7dea1e8d1c9d7da8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 6 Jul 2022 15:09:22 +0200
Subject: [PATCH 1722/2300] Version 0.9.8-26-57

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 2a785f14..162eec34 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-56
+vesta-0.9.8-26-57

From d3bde491c73460edf0d2e0feff7ca55f8a7920c6 Mon Sep 17 00:00:00 2001
From: Umut Korkmaz <umutkorkmaaz@gmail.com>
Date: Wed, 6 Jul 2022 19:43:11 +0300
Subject: [PATCH 1723/2300] fix typo

---
 bin/v-copy-fs-file | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-copy-fs-file b/bin/v-copy-fs-file
index 792956ec..87447b40 100755
--- a/bin/v-copy-fs-file
+++ b/bin/v-copy-fs-file
@@ -43,7 +43,7 @@ fi
 # Checking destination path
 rpath=$(readlink -f "$dst_file")
 if [ -z "$(echo $rpath |egrep "^/tmp|^$homedir")" ]; then
-    echo "Error: ivalid destination path $dst_file"
+    echo "Error: invalid destination path $dst_file"
     exit 2
 fi
 

From b13b82112a0b26ec0db5f56f34de75b786ff0da9 Mon Sep 17 00:00:00 2001
From: divinity76 <divinity76@gmail.com>
Date: Sat, 9 Jul 2022 11:16:02 +0200
Subject: [PATCH 1724/2300] avoid out-of-memory serving large logfiles

large logfiles previously resulted in out-of-memory errors, see https://github.com/hestiacp/hestiacp/issues/2736

hestacp PR: https://github.com/hestiacp/hestiacp/pull/2741

and no, removing the php end tag was not an accident, it was intentional. end tags, ideally, should only be used when they're absolutely required, because they can easily introduce bugs like printing a newline after the end tag.
---
 web/download/web-log/index.php | 19 +++++++++++++------
 1 file changed, 13 insertions(+), 6 deletions(-)

diff --git a/web/download/web-log/index.php b/web/download/web-log/index.php
index 35ebc335..9078d20c 100644
--- a/web/download/web-log/index.php
+++ b/web/download/web-log/index.php
@@ -25,11 +25,18 @@ $v_domain = escapeshellarg($_GET['domain']);
 if ($_GET['type'] == 'access') $type = 'access';
 if ($_GET['type'] == 'error') $type = 'error';
 
-exec (VESTA_CMD."v-list-web-domain-".$type."log $user ".$v_domain." 5000", $output, $return_var);
-if ($return_var == 0 ) {
-    foreach($output as $file) {
-        echo $file . "\n";
-    }
+
+
+$cmd = implode(" ", array(
+    escapeshellarg(HESTIA_CMD . "v-list-web-domain-" . $type . "log"),
+    escapeshellarg($user),
+    escapeshellarg($v_domain),
+    "5000",
+));
+passthru($cmd, $return_var);
+if ($return_var != 0) {
+    $errstr = "Internal server error: command returned non-zero: {$return_var}: {$cmd}";
+    echo $errstr;
+    throw new Exception($errstr); // make sure it ends up in an errorlog somewhere
 }
 
-?>

From b09d244af7ab6dd93f07e63331b483c5f8d10dd7 Mon Sep 17 00:00:00 2001
From: divinity76 <divinity76@gmail.com>
Date: Sat, 9 Jul 2022 11:18:30 +0200
Subject: [PATCH 1725/2300] code-breaking-typo

from copypasta
---
 web/download/web-log/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/download/web-log/index.php b/web/download/web-log/index.php
index 9078d20c..e9c63a8d 100644
--- a/web/download/web-log/index.php
+++ b/web/download/web-log/index.php
@@ -28,7 +28,7 @@ if ($_GET['type'] == 'error') $type = 'error';
 
 
 $cmd = implode(" ", array(
-    escapeshellarg(HESTIA_CMD . "v-list-web-domain-" . $type . "log"),
+    escapeshellarg(VESTA_CMD . "v-list-web-domain-" . $type . "log"),
     escapeshellarg($user),
     escapeshellarg($v_domain),
     "5000",

From e65af22a54337f96e2abe2b612efc2b1533c3775 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 12 Jul 2022 18:10:31 +0200
Subject: [PATCH 1726/2300] hash_equals() in /reset/mail/

Thanks to @divinity76
---
 web/reset/mail/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/reset/mail/index.php b/web/reset/mail/index.php
index 5419d8ea..c0524ebb 100644
--- a/web/reset/mail/index.php
+++ b/web/reset/mail/index.php
@@ -149,7 +149,7 @@ if ((!empty($_POST['email'])) && (!empty($_POST['password'])) && (!empty($_POST[
         $n_hash = '{MD5}'.$n_hash;
 
         // Change password
-        if ( $v_hash == $n_hash ) {
+        if ( hash_equals($v_hash, $n_hash ) ) {
             $v_new_password = tempnam("/tmp","vst");
             $fp = fopen($v_new_password, "w");
             fwrite($fp, $_POST['new']."\n");

From 1a081dfdbe72eac0aeaf3a27a52f1ff3df8e4555 Mon Sep 17 00:00:00 2001
From: divinity76 <divinity76@gmail.com>
Date: Tue, 12 Jul 2022 19:14:55 +0200
Subject: [PATCH 1727/2300] workaround for passthru() being disabled

---
 web/download/web-log/index.php | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/web/download/web-log/index.php b/web/download/web-log/index.php
index e9c63a8d..4bef3528 100644
--- a/web/download/web-log/index.php
+++ b/web/download/web-log/index.php
@@ -26,14 +26,24 @@ if ($_GET['type'] == 'access') $type = 'access';
 if ($_GET['type'] == 'error') $type = 'error';
 
 
-
 $cmd = implode(" ", array(
     escapeshellarg(VESTA_CMD . "v-list-web-domain-" . $type . "log"),
     escapeshellarg($user),
     escapeshellarg($v_domain),
     "5000",
 ));
-passthru($cmd, $return_var);
+
+if(is_callable("passthru")){
+    passthru($cmd, $return_var);
+} else{
+    // passthru is disabled, workaround it by writing the output to a file then reading the file. 
+    // this is slower than passthru, but avoids running out of RAM...
+    $passthru_is_disabled_workaround_handle = tmpfile();
+    $passthru_is_disabled_workaround_file = stream_get_meta_data($passthru_is_disabled_workaround_handle)['uri'];
+    exec ($cmd . " > " . escapeshellarg($passthru_is_disabled_workaround_file), $output, $return_var);
+    readfile($passthru_is_disabled_workaround_file);
+    fclose($passthru_is_disabled_workaround_handle); // fclose(tmpfile()) automatically deletes the file, unlink is not required :)
+}
 if ($return_var != 0) {
     $errstr = "Internal server error: command returned non-zero: {$return_var}: {$cmd}";
     echo $errstr;

From 5aebfde6cf471fc69d46f2287c6a285d16f96013 Mon Sep 17 00:00:00 2001
From: divinity76 <divinity76@gmail.com>
Date: Tue, 12 Jul 2022 19:17:01 +0200
Subject: [PATCH 1728/2300] avoid double-quoting v_domain

---
 web/download/web-log/index.php | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/web/download/web-log/index.php b/web/download/web-log/index.php
index 4bef3528..5e882c89 100644
--- a/web/download/web-log/index.php
+++ b/web/download/web-log/index.php
@@ -10,8 +10,6 @@ if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
     exit();
 }
 
-$v_domain = $_GET['domain'];
-$v_domain = escapeshellarg($_GET['domain']);
 if ($_GET['type'] == 'access') $type = 'access';
 if ($_GET['type'] == 'error') $type = 'error';
 
@@ -21,7 +19,7 @@ header("Content-Disposition: attachment; filename=".$_GET['domain'].".".$type."-
 header("Content-Type: application/octet-stream; "); 
 header("Content-Transfer-Encoding: binary");
 
-$v_domain = escapeshellarg($_GET['domain']);
+$v_domain = $_GET['domain'];
 if ($_GET['type'] == 'access') $type = 'access';
 if ($_GET['type'] == 'error') $type = 'error';
 

From 15c5bdac5134f398288f6c81f30aa9b3f51744a5 Mon Sep 17 00:00:00 2001
From: divinity76 <divinity76@gmail.com>
Date: Tue, 12 Jul 2022 20:07:55 +0200
Subject: [PATCH 1729/2300] turns out VESTA_CMD is 2 commands

---
 web/download/web-log/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/download/web-log/index.php b/web/download/web-log/index.php
index 5e882c89..b9859c6f 100644
--- a/web/download/web-log/index.php
+++ b/web/download/web-log/index.php
@@ -25,7 +25,7 @@ if ($_GET['type'] == 'error') $type = 'error';
 
 
 $cmd = implode(" ", array(
-    escapeshellarg(VESTA_CMD . "v-list-web-domain-" . $type . "log"),
+    VESTA_CMD . "v-list-web-domain-" . $type . "log",
     escapeshellarg($user),
     escapeshellarg($v_domain),
     "5000",

From b2d7c5a1fd6525a91c4e1227ee16797a1f0e1f37 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 12 Jul 2022 20:40:20 +0200
Subject: [PATCH 1730/2300] Fix for PHP Notice in vesta-php

---
 web/inc/secure_login.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index b9e2115c..3ae149d5 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -91,7 +91,8 @@ function prevent_get_csrf () {
     if (isset($_SERVER['SERVER_PORT']) == false) return;
     if (isset($_SERVER['HTTP_REFERER']) == false) return;
     $_SERVER['HTTP_HOST'] = strtolower($_SERVER['HTTP_HOST']);
-    $_SERVER['HTTP_ORIGIN'] = strtolower($_SERVER['HTTP_ORIGIN']);
+    if (isset($_SERVER['HTTP_ORIGIN'])) $_SERVER['HTTP_ORIGIN'] = strtolower($_SERVER['HTTP_ORIGIN']);
+    else $_SERVER['HTTP_ORIGIN']='';
     if (substr($_SERVER['HTTP_REFERER'], 0, 8) != "file:///" && substr($_SERVER['HTTP_REFERER'], 0, 7) != "http://" && substr($_SERVER['HTTP_REFERER'], 0, 8) != "https://") return;
     $host_arr = explode(":", $_SERVER['HTTP_HOST']);
     $hostname = $host_arr[0];

From 94d7c20a3bba372159b4f576a0cc525c318fce93 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 12 Jul 2022 20:42:10 +0200
Subject: [PATCH 1731/2300] Version 0.9.8-26-58

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 162eec34..5a056019 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-57
+vesta-0.9.8-26-58

From 8b1c8b658da9302b39fdb9d0b88f3d089522fc9d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 12 Jul 2022 20:47:56 +0200
Subject: [PATCH 1732/2300] Update Changelog.md

---
 Changelog.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 17494c79..c0dcbd49 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,8 @@
+Version 0.9.8-26-58 [12-Jul-2022]
+==================================================
+* [Security] hash_equals() in /reset/mail/ (credits to @divinity76 )
+* Fix for an boring PHP Notice in vesta-php
+
 Version 0.9.8-26-57 [06-Jul-2022]
 ==================================================
 * Fix for GMail SMTP timeouts on Debian11

From 6d365026236d98a425dfd4183eb4b60c6c2d54e2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 12 Jul 2022 20:52:41 +0200
Subject: [PATCH 1733/2300] Update Changelog.md

---
 Changelog.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Changelog.md b/Changelog.md
index c0dcbd49..b7e52d49 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,6 +1,7 @@
 Version 0.9.8-26-58 [12-Jul-2022]
 ==================================================
 * [Security] hash_equals() in /reset/mail/ (credits to @divinity76 )
+* Avoid out-of-memory while downloading large log files from panel (credits to @divinity76 )
 * Fix for an boring PHP Notice in vesta-php
 
 Version 0.9.8-26-57 [06-Jul-2022]

From d625c9722ac512f873b3dcb8182e5ffaddc36c3c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 12 Jul 2022 21:00:33 +0200
Subject: [PATCH 1734/2300] Fix for an boring PHP Notice in vesta-php

---
 web/inc/secure_login.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 3ae149d5..7f8c8d15 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -63,7 +63,8 @@ function prevent_post_csrf ($hard_check=false) {
             if (isset($_SERVER['HTTP_ORIGIN']) == false) $_SERVER['HTTP_ORIGIN'] = '';
         }
         $_SERVER['HTTP_HOST'] = strtolower($_SERVER['HTTP_HOST']);
-        $_SERVER['HTTP_ORIGIN'] = strtolower($_SERVER['HTTP_ORIGIN']);
+        if (isset($_SERVER['HTTP_ORIGIN'])) $_SERVER['HTTP_ORIGIN'] = strtolower($_SERVER['HTTP_ORIGIN']);
+        else $_SERVER['HTTP_ORIGIN']='';
         if ($hard_check == false) {
             if (substr($_SERVER['HTTP_ORIGIN'], 0, 8) != "file:///" && substr($_SERVER['HTTP_ORIGIN'], 0, 7) != "http://" && substr($_SERVER['HTTP_ORIGIN'], 0, 8) != "https://") return;
         }

From bc67f1028a1d6247d5cec6edb35733348d73e46f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 12 Jul 2022 21:08:30 +0200
Subject: [PATCH 1735/2300] Fix for an boring PHP Notice in vesta-php

---
 web/inc/secure_login.php | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 7f8c8d15..3dcdb0ae 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -63,8 +63,7 @@ function prevent_post_csrf ($hard_check=false) {
             if (isset($_SERVER['HTTP_ORIGIN']) == false) $_SERVER['HTTP_ORIGIN'] = '';
         }
         $_SERVER['HTTP_HOST'] = strtolower($_SERVER['HTTP_HOST']);
-        if (isset($_SERVER['HTTP_ORIGIN'])) $_SERVER['HTTP_ORIGIN'] = strtolower($_SERVER['HTTP_ORIGIN']);
-        else $_SERVER['HTTP_ORIGIN']='';
+        $_SERVER['HTTP_ORIGIN'] = strtolower($_SERVER['HTTP_ORIGIN']);
         if ($hard_check == false) {
             if (substr($_SERVER['HTTP_ORIGIN'], 0, 8) != "file:///" && substr($_SERVER['HTTP_ORIGIN'], 0, 7) != "http://" && substr($_SERVER['HTTP_ORIGIN'], 0, 8) != "https://") return;
         }
@@ -92,8 +91,6 @@ function prevent_get_csrf () {
     if (isset($_SERVER['SERVER_PORT']) == false) return;
     if (isset($_SERVER['HTTP_REFERER']) == false) return;
     $_SERVER['HTTP_HOST'] = strtolower($_SERVER['HTTP_HOST']);
-    if (isset($_SERVER['HTTP_ORIGIN'])) $_SERVER['HTTP_ORIGIN'] = strtolower($_SERVER['HTTP_ORIGIN']);
-    else $_SERVER['HTTP_ORIGIN']='';
     if (substr($_SERVER['HTTP_REFERER'], 0, 8) != "file:///" && substr($_SERVER['HTTP_REFERER'], 0, 7) != "http://" && substr($_SERVER['HTTP_REFERER'], 0, 8) != "https://") return;
     $host_arr = explode(":", $_SERVER['HTTP_HOST']);
     $hostname = $host_arr[0];

From d48f6cc4281bd3620f8ed8f7d9ab1dbdb105be7d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 29 Jul 2022 00:34:52 +0200
Subject: [PATCH 1736/2300] typo fix

---
 bin/v-install-wordpress | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 95f6f353..bdf56f72 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -51,7 +51,7 @@ if [ -z "$database" ]; then
     database="wp"
 fi
 
-if [ -z "$emil" ]; then
+if [ -z "$email" ]; then
     email="info@$domain";
 fi
 

From 44cf0b53063145c88a2b8b809c109582364ec6c1 Mon Sep 17 00:00:00 2001
From: Umut Korkmaz <umutkorkmaaz@gmail.com>
Date: Tue, 2 Aug 2022 17:24:55 +0300
Subject: [PATCH 1737/2300] Fixed #142

---
 web/templates/admin/list_firewall.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_firewall.html b/web/templates/admin/list_firewall.html
index 889de6a2..a12c9daf 100644
--- a/web/templates/admin/list_firewall.html
+++ b/web/templates/admin/list_firewall.html
@@ -120,7 +120,7 @@ sort-ip="<?=str_replace('.', '', $data[$key]['IP'])?>" sort-comment="<?=$data[$k
             <div class="clearfix l-unit__stat-col--left"><b><?=__($data[$key]['ACTION'])?></b></div>
             <div class="clearfix l-unit__stat-col--left compact"><b><?=__($data[$key]['PROTOCOL'])?></b></div>
             <div class="clearfix l-unit__stat-col--left wide-2"><? if(!empty($data[$key]['COMMENT'])) echo '/ ' . $data[$key]['COMMENT']; else echo "&nbsp;"; ?></div>
-            <div class="clearfix l-unit__stat-col--left wide"><b><?=$data[$key]['PORT']?></b></div>
+            <div class="clearfix l-unit__stat-col--left wide"><b><? if(!empty($data[$key]['PORT'])) echo $data[$key]['PORT']; else echo "&nbsp;"; ?></b></div>
             <div class="clearfix l-unit__stat-col--left"><b><?=$data[$key]['IP']?></b></div>
           </div>
           <!-- /.l-unit__stats -->

From 5518e0e0598661a286fbb17bc0b05cec0a3df29e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 24 Sep 2022 11:55:07 +0200
Subject: [PATCH 1738/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 067ecd58..62bb39c8 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -29,6 +29,7 @@ find /home/*/web/*/public_html/wp-content/envato-backups/ -type f -not -name ".h
 find /home/*/web/*/public_html/wp-content/ai1wm-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
 find /home/*/web/*/public_html/wp-content/wpvividbackups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
 find /home/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+find /home/*/web/*/public_html/ -type f -name "*.wpress" -delete
 find /home/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
 find /home/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;
 find /home/ -type f -name "*.log" -exec truncate -s 0 {} \;

From e5a03804aa8f8f5f1906778b94b9dc6f89c46578 Mon Sep 17 00:00:00 2001
From: N1ebieski <kontakt@intelekt.net.pl>
Date: Sun, 25 Sep 2022 14:47:31 +0200
Subject: [PATCH 1739/2300] Include "hidden" files to backup

Files like .htaccess, .env, .git etc
---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index e2d7cac9..8bd0bb25 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -265,7 +265,7 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
         set +f
 
         # Backup files
-        tar --anchored -cpf- ${fargs[@]} * |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
+        tar --anchored -cpf- ${fargs[@]} --exclude={'./','../'} . |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
     done
 
     # Print total

From 25d3fef4aa6f53b09249fae8001e4357f8215b70 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 26 Sep 2022 14:27:39 +0200
Subject: [PATCH 1740/2300] Create v-fix-user-permissions

---
 bin/v-fix-user-permissions | 55 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 55 insertions(+)
 create mode 100644 bin/v-fix-user-permissions

diff --git a/bin/v-fix-user-permissions b/bin/v-fix-user-permissions
new file mode 100644
index 00000000..fa902ec3
--- /dev/null
+++ b/bin/v-fix-user-permissions
@@ -0,0 +1,55 @@
+#!/bin/bash
+
+# info:
+# This script will fix files permissions for desired user (if ownership is lost or files have wrong chmod)
+
+# options: user
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ] && [ "$whoami" != "admin" ] ; then
+    echo "You must be root or admin to execute this script";
+    exit 1;
+fi
+
+# Argument definition
+user=$1
+
+# Includes
+source $VESTA/func/main.sh
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'USER'
+is_format_valid 'user'
+is_object_valid 'user' 'USER' "$user"
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+find /home/$user/conf/mail/ -type d -exec chown Debian-exim:mail {} \;
+find /home/$user/conf/mail/*/ -type f -exec chown Debian-exim:mail {} \;
+find /home/$user/conf/mail/*/ -name "passwd" -type f -exec chown dovecot:mail {} \;
+find /home/$user/mail/ -type d -exec chown $user:mail {} \;
+find /home/$user/mail/*/ -type d -exec chown $user:mail {} \;
+find /home/$user/mail/*/ -type f -exec chown $user:mail {} \;
+
+find /home/$user/conf/dns/ -type f -exec chown root:bind {} \;
+find /home/$user/conf/ -type d -exec chown root:root {} \;
+
+find /home/$user/web/*/public_html/ -type d -exec chmod 755 {} +
+find /home/$user/web/*/public_html/ -type f -exec chmod 644 {} +
+find /home/$user/web/*/public_html/ -exec chown $user:$user {} \;
+
+echo "Done, permissions fixed for user: $user"
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 7f38c8ceafd9abc8c11224902ee3cfbbb837177b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 14 Oct 2022 16:00:02 +0200
Subject: [PATCH 1741/2300] Restart DNS after adding acme_challenge TXT record

---
 bin/v-add-letsencrypt-domain | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 0cea207c..2940bbb6 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -200,6 +200,7 @@ for auth in $authz; do
             echo "[$(date)] : EXIT=DNS _acme-challenge record wasn't created" >> /usr/local/vesta/log/letsencrypt.log
         fi
         check_result $exitstatus "DNS _acme-challenge record wasn't created"
+        $BIN/v-restart-dns
     else
         if [ "$WEB_SYSTEM" = 'nginx' ] || [ ! -z "$PROXY_SYSTEM" ]; then
             if [ -f "/usr/local/vesta/web/inc/nginx_proxy" ]; then

From 93c1414217ea13ca8b3edcb54ad2f0a73039b325 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 14 Oct 2022 18:38:39 +0200
Subject: [PATCH 1742/2300] systemctl instead of service in v-restart-dns

---
 bin/v-restart-dns | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/bin/v-restart-dns b/bin/v-restart-dns
index 4e7712a7..f96937a1 100755
--- a/bin/v-restart-dns
+++ b/bin/v-restart-dns
@@ -55,9 +55,10 @@ if [ -z "$DNS_SYSTEM" ] || [ "$DNS_SYSTEM" = 'remote' ] ; then
 fi
 
 # Restart system
-service $DNS_SYSTEM reload >/dev/null 2>&1
+systemctl reset-failed $DNS_SYSTEM
+systemctl reload $DNS_SYSTEM >/dev/null 2>&1
 if [ $? -ne 0 ]; then
-    service $DNS_SYSTEM restart >/dev/null 2>&1
+    systemctl restart $DNS_SYSTEM >/dev/null 2>&1
     if [ $? -ne 0 ]; then
         send_email_report
         check_result $E_RESTART "$DNS_SYSTEM restart failed"

From 374b4da5bc6f440c09eaa2937e631fbbd09df6e5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 2 Nov 2022 19:57:48 +0100
Subject: [PATCH 1743/2300] Update W3TC.json

---
 src/deb/for-download/tools/W3TC.json | 36 ++++++++++++++++++++++++----
 1 file changed, 32 insertions(+), 4 deletions(-)

diff --git a/src/deb/for-download/tools/W3TC.json b/src/deb/for-download/tools/W3TC.json
index d42973d0..0ca4cf8d 100644
--- a/src/deb/for-download/tools/W3TC.json
+++ b/src/deb/for-download/tools/W3TC.json
@@ -1,5 +1,5 @@
 {
-    "version": "2.1.8",
+    "version": "2.2.7",
     "cluster.messagebus.debug": false,
     "cluster.messagebus.enabled": false,
     "cluster.messagebus.sns.region": "",
@@ -26,8 +26,12 @@
     "dbcache.redis.servers": [
         "127.0.0.1:6379"
     ],
+    "dbcache.redis.verify_tls_certificates": true,
     "dbcache.redis.password": "",
     "dbcache.redis.dbid": 0,
+    "dbcache.redis.timeout": 0,
+    "dbcache.redis.retry_interval": 0,
+    "dbcache.redis.read_timeout": 0,
     "dbcache.use_filters": false,
     "dbcache.reject.constants": [
         "APP_REQUEST",
@@ -114,8 +118,12 @@
     "objectcache.redis.servers": [
         "127.0.0.1:6379"
     ],
+    "objectcache.redis.verify_tls_certificates": true,
     "objectcache.redis.password": "",
     "objectcache.redis.dbid": 0,
+    "objectcache.redis.timeout": 0,
+    "objectcache.redis.retry_interval": 0,
+    "objectcache.redis.read_timeout": 0,
     "objectcache.groups.global": [
         "users",
         "userlogins",
@@ -140,7 +148,7 @@
     "pgcache.comment_cookie_ttl": 86400,
     "pgcache.debug": false,
     "pgcache.debug_purge": false,
-    "pgcache.engine": "memcached",
+    "pgcache.engine": "file_generic",
     "pgcache.file.gc": 3600,
     "pgcache.file.nfs": false,
     "pgcache.file.locking": false,
@@ -157,8 +165,12 @@
     "pgcache.redis.servers": [
         "127.0.0.1:6379"
     ],
+    "pgcache.redis.verify_tls_certificates": true,
     "pgcache.redis.password": "",
     "pgcache.redis.dbid": 0,
+    "pgcache.redis.timeout": 0,
+    "pgcache.redis.retry_interval": 0,
+    "pgcache.redis.read_timeout": 0,
     "pgcache.cache.query": false,
     "pgcache.cache.home": true,
     "pgcache.cache.feed": false,
@@ -304,8 +316,12 @@
     "minify.redis.servers": [
         "127.0.0.1:6379"
     ],
+    "minify.redis.verify_tls_certificates": true,
     "minify.redis.password": "",
     "minify.redis.dbid": 0,
+    "minify.redis.timeout": 0,
+    "minify.redis.retry_interval": 0,
+    "minify.redis.read_timeout": 0,
     "minify.rewrite": true,
     "minify.options": [],
     "minify.symlinks": [],
@@ -446,6 +462,7 @@
     "cdn.s3.bucket.location": "us-east-1",
     "cdn.s3.cname": [],
     "cdn.s3.ssl": "auto",
+    "cdn.s3.public_objects": "enabled",
     "cdn.s3_compatible.api_host": "auto",
     "cdn.cf.key": "",
     "cdn.cf.secret": "",
@@ -454,6 +471,7 @@
     "cdn.cf.id": "",
     "cdn.cf.cname": [],
     "cdn.cf.ssl": "auto",
+    "cdn.cf.public_objects": "enabled",
     "cdn.cf2.key": "",
     "cdn.cf2.secret": "",
     "cdn.cf2.id": "",
@@ -887,8 +905,7 @@
             ]
         }
     },
-    "robots_block.enable": false,
-    "common.track_usage": false,
+    "common.track_usage": true,
     "common.tweeted": false,
     "config.check": true,
     "config.path": "",
@@ -919,7 +936,18 @@
     "plugin.license_key": "",
     "plugin.type": "",
     "jquerymigrate.disabled": false,
+    "imageservice": {
+        "compression": "lossy",
+        "auto": "enabled",
+        "visibility": "never"
+    },
+    "imageservice.configuration_overloaded": true,
+    "robots_block.enable": false,
     "fragmentcache": {
         "engine": "memcached"
+    },
+    "pgcache.bad_behavior_path": "",
+    "newrelic": {
+        "monitoring_type": "apm"
     }
 }

From c6d226023e4427223a691ea0b4b00f20b2a9f244 Mon Sep 17 00:00:00 2001
From: Jaap Marcus <9754650+jaapmarcus@users.noreply.github.com>
Date: Thu, 3 Nov 2022 07:14:43 +0100
Subject: [PATCH 1744/2300] Unsuspend database does not restore permissions
 remote users

See https://github.com/hestiacp/hestiacp/issues/3011 and https://github.com/hestiacp/hestiacp/issues/3014
---
 func/db.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/db.sh b/func/db.sh
index deb9e5b8..20230fec 100644
--- a/func/db.sh
+++ b/func/db.sh
@@ -468,7 +468,7 @@ suspend_pgsql_database() {
 # Unsuspend MySQL database
 unsuspend_mysql_database() {
     mysql_connect $HOST
-    query="GRANT ALL ON \`$database\`.* FROM \`$DBUSER\`@\`%\`"
+    query="GRANT ALL ON \`$database\`.* TO \`$DBUSER\`@\`%\`"
     mysql_query "$query" > /dev/null
     query="GRANT ALL ON \`$database\`.* TO \`$DBUSER\`@localhost"
     mysql_query "$query" > /dev/null

From c182d7f0a701c7deb455bf49879340cf6b0bb164 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 3 Nov 2022 15:19:08 +0100
Subject: [PATCH 1745/2300] Create fix-fpm-poold.sh

---
 .../tools/patches/fix-fpm-poold.sh            | 40 +++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 src/deb/for-download/tools/patches/fix-fpm-poold.sh

diff --git a/src/deb/for-download/tools/patches/fix-fpm-poold.sh b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
new file mode 100644
index 00000000..6c7443b1
--- /dev/null
+++ b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+
+if [ -d "/etc/php" ]; then
+    OLDVAL='php_admin_value\[upload_max_filesize\] = 80M'
+    NEWVAL='php_admin_value\[upload_max_filesize\] = 800M'
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+
+    OLDVAL='php_admin_value\[post_max_size\] = 80M'
+    NEWVAL='php_admin_value\[post_max_size\] = 800M'
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+
+    OLDVAL='php_admin_value\[memory_limit\] = 256M'
+    NEWVAL='php_admin_value\[memory_limit\] = 512M'
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+
+    OLDVAL='pm.max_children = 8'
+    NEWVAL='pm.max_children = 3'
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+
+    OLDVAL='request_terminate_timeout = 90s'
+    NEWVAL='request_terminate_timeout = 360s'
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+
+    OLDVAL='php_admin_value\[max_execution_time\] = 30'
+    NEWVAL='php_admin_value\[max_execution_time\] = 300'
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+
+    systemctl --full --type service --all | grep "php...-fpm" | awk '{print $1}' | xargs systemctl restart
+fi
+
+if [ -f "/etc/apache2/mods-enabled/mpm_event.conf"]; then
+    sed -i "s#MaxRequestWorkers.*#MaxRequestWorkers        600#g" /etc/apache2/mods-enabled/mpm_event.conf
+    systemctl restart apache2
+fi

From 039dca41c395ae2de9332da083299f82e01e3e87 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 3 Nov 2022 15:23:15 +0100
Subject: [PATCH 1746/2300] Update fix-fpm-poold.sh

---
 src/deb/for-download/tools/patches/fix-fpm-poold.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/patches/fix-fpm-poold.sh b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
index 6c7443b1..20879cb7 100644
--- a/src/deb/for-download/tools/patches/fix-fpm-poold.sh
+++ b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
@@ -34,7 +34,7 @@ if [ -d "/etc/php" ]; then
     systemctl --full --type service --all | grep "php...-fpm" | awk '{print $1}' | xargs systemctl restart
 fi
 
-if [ -f "/etc/apache2/mods-enabled/mpm_event.conf"]; then
+if [ -f "/etc/apache2/mods-enabled/mpm_event.conf" ]; then
     sed -i "s#MaxRequestWorkers.*#MaxRequestWorkers        600#g" /etc/apache2/mods-enabled/mpm_event.conf
     systemctl restart apache2
 fi

From 402a4286d3ff95994de80eaa29481c666f9a6153 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 3 Nov 2022 15:37:43 +0100
Subject: [PATCH 1747/2300] Update fix-fpm-poold.sh

---
 src/deb/for-download/tools/patches/fix-fpm-poold.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/patches/fix-fpm-poold.sh b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
index 20879cb7..e83c11a5 100644
--- a/src/deb/for-download/tools/patches/fix-fpm-poold.sh
+++ b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
@@ -28,7 +28,7 @@ if [ -d "/etc/php" ]; then
 
     OLDVAL='php_admin_value\[max_execution_time\] = 30'
     NEWVAL='php_admin_value\[max_execution_time\] = 300'
-    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL$|$NEWVAL|g"
     find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
 
     systemctl --full --type service --all | grep "php...-fpm" | awk '{print $1}' | xargs systemctl restart

From af11a4cbf2afb438f31bd77bd1fcb408d62da581 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 4 Nov 2022 20:09:50 +0100
Subject: [PATCH 1748/2300] Update fix-fpm-poold.sh

---
 src/deb/for-download/tools/patches/fix-fpm-poold.sh | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/src/deb/for-download/tools/patches/fix-fpm-poold.sh b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
index e83c11a5..f9b562a9 100644
--- a/src/deb/for-download/tools/patches/fix-fpm-poold.sh
+++ b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
@@ -21,15 +21,15 @@ if [ -d "/etc/php" ]; then
     find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
     find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
 
-    OLDVAL='request_terminate_timeout = 90s'
+    OLDVAL='request_terminate_timeout = '
     NEWVAL='request_terminate_timeout = 360s'
-    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
-    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL.*|$NEWVAL|g"
+    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL.*|$NEWVAL|g"
 
-    OLDVAL='php_admin_value\[max_execution_time\] = 30'
+    OLDVAL='php_admin_value\[max_execution_time\] = '
     NEWVAL='php_admin_value\[max_execution_time\] = 300'
-    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL$|$NEWVAL|g"
-    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL.*|$NEWVAL|g"
+    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL.*|$NEWVAL|g"
 
     systemctl --full --type service --all | grep "php...-fpm" | awk '{print $1}' | xargs systemctl restart
 fi

From f89065a80a8095baed2d4f3b0178db59c942e088 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 9 Nov 2022 10:35:38 +0100
Subject: [PATCH 1749/2300] Create create-mail-sync.sh

---
 .../for-download/tools/create-mail-sync.sh    | 87 +++++++++++++++++++
 1 file changed, 87 insertions(+)
 create mode 100644 src/deb/for-download/tools/create-mail-sync.sh

diff --git a/src/deb/for-download/tools/create-mail-sync.sh b/src/deb/for-download/tools/create-mail-sync.sh
new file mode 100644
index 00000000..e325754e
--- /dev/null
+++ b/src/deb/for-download/tools/create-mail-sync.sh
@@ -0,0 +1,87 @@
+#!/bin/bash
+
+##################################
+# usage: ./create-mail-sync.sh SRCHOST EMAIL PASSWORD-ON-REMOTE-SERVER [PASSWORD-ON-THIS-SERVER] [TEST]
+##################################
+
+if [ $# -lt 3 ]; then
+    echo "usage: ./create-mail-sync.sh SRCHOST EMAIL PASSWORD-ON-REMOTE-SERVER [PASSWORD-ON-THIS-SERVER] [TEST]"
+    exit 1
+fi
+
+if [ $# -eq 3 ]; then
+SRCHOST=$1
+EMAIL=$2
+PASS=$3
+PASS2=$3
+TEST=1
+fi
+
+if [ $# -eq 4 ]; then
+SRCHOST=$1
+EMAIL=$2
+PASS=$3
+PASS2=$4
+TEST=1
+fi
+
+if [ $# -eq 5 ]; then
+SRCHOST=$1
+EMAIL=$2
+PASS=$3
+PASS2=$4
+TEST=$5
+fi
+
+TESTOPT=""
+if [[ $TEST -eq 1 ]]; then
+	TESTOPT="--justlogin"
+fi
+
+if [ ! -d "accounts" ]; then
+    mkdir accounts
+fi
+if [ -f "accounts/$EMAIL" ]; then
+	echo "********* $EMAIL ALREADY EXISTS !!! ************"
+    exit 1;
+    exit
+fi
+
+echo "Writing to: accounts/$EMAIL"
+echo "#!/bin/bash
+
+# --- 
+# SRCHOST = $SRCHOST
+# email   = $EMAIL
+# pass    = $PASS
+# pass2   = $PASS2
+# test    = $TEST
+# ---
+
+/root/imapsync/imapsync --host1  $SRCHOST   --user1 $EMAIL   --password1 '$PASS' --ssl1 --host2 localhost   --user2 $EMAIL   --password2 '$PASS2' $TESTOPT --addheader  --automap \"\$@\"
+
+exit;
+# ---
+" > accounts/$EMAIL
+
+chmod a=rwx accounts/$EMAIL
+
+if [[ $TEST -eq 0 ]]; then
+	exit 0;
+fi
+
+accounts/$EMAIL
+RET=$?
+
+if [ $RET -eq 0 ]; then
+	# echo "./create-mail-sync.sh $EMAIL $PASS $PASS2 $TEST"
+	sed -i "s/--justlogin//g" accounts/$EMAIL
+	echo "--- OK! ---"
+	echo "./create-mail-sync.sh '$SRCHOST' '$EMAIL' '$PASS' '$PASS2' $TEST" >> accounts.log
+else
+	echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
+	echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
+	echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
+	rm accounts/$EMAIL
+fi
+exit $RET;

From 8d4eee37d03c4884ef1aabc5bd58581f6617dcbc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 9 Nov 2022 15:36:57 +0100
Subject: [PATCH 1750/2300] Create scanps.sh

---
 src/deb/for-download/tools/scanps/scanps.sh | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 src/deb/for-download/tools/scanps/scanps.sh

diff --git a/src/deb/for-download/tools/scanps/scanps.sh b/src/deb/for-download/tools/scanps/scanps.sh
new file mode 100644
index 00000000..fa9129f3
--- /dev/null
+++ b/src/deb/for-download/tools/scanps/scanps.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+
+# run 'crontab -e' and add the following:
+# 0,5,10,15,20,25,30,35,40,45,50,55 * * * * /home/scanps.sh > /dev/null 2>&1
+
+cd /home
+php scanps.php

From aa493287f3b77aba380e3cd9cf0d8cc39a9fb0da Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 9 Nov 2022 16:15:48 +0100
Subject: [PATCH 1751/2300] Create scanps.php

---
 src/deb/for-download/tools/scanps/scanps.php | 58 ++++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 src/deb/for-download/tools/scanps/scanps.php

diff --git a/src/deb/for-download/tools/scanps/scanps.php b/src/deb/for-download/tools/scanps/scanps.php
new file mode 100644
index 00000000..7b52064d
--- /dev/null
+++ b/src/deb/for-download/tools/scanps/scanps.php
@@ -0,0 +1,58 @@
+<?php
+
+/*
+The script is checking if MySQL/MariaDB server process is up.
+If it's not, it assumes that it was killed by Kernel OOM Killer, and reboots the server, in order to bring the back server to a normal state.
+It can detect 'apt upgrade' process and avoid a reboot.
+*/
+
+function my_exec($command) {
+    $out=array();
+    $ret_no=0;
+    if (strpos($command, " > ")!==FALSE) $command.=" 2> /dev/null";
+    else {
+        if (strpos($command, " 2>&1")===FALSE) $command.=" 2>&1";
+    }
+    $ret = exec($command, $out, $ret_no);
+    return implode("\n", $out);
+}
+
+function is_there($list, $what) {
+    $arr=explode("\n", $list);
+    $c=count($arr);
+    for ($i=1; $i<$c; $i++) if (strpos($arr[$i], $what)!==false) return true;
+    return false;
+}
+
+$list=my_exec("ps -Af");
+if (is_there($list, "apt")) exit; // the server is in upgrading proccess
+
+$search_for1="mysqld";
+$search_for2="mariadbd";
+$v1=is_there($list, $search_for1);
+$v2=is_there($list, $search_for2);
+$sufix="";
+
+if ($v1==false && $v2==false) {
+    echo "- reboot\n";
+    $buffer="- reboot\n".$list;
+    $sufix="_".time();
+    $fp = fopen('/home/cron'.$sufix.'.log', 'w');
+    fwrite($fp, $buffer);
+    fclose($fp);
+    $out=array();
+    $ret_no=0;
+    $uname_arr=posix_uname();
+    $hostname=$uname_arr['nodename'];
+    $email=my_exec("/usr/local/vesta/bin/v-list-user 'admin' | grep 'EMAIL' | awk '{print $2}'");
+    mail($email, 'VPS reboot - '.$hostname, $buffer, "From: ".$hostname." <admin@".$hostname.">");
+    sleep(10);
+    $ret = exec("sudo reboot", $out, $ret_no);
+    exit;
+} else {
+    echo "- mysql ok\n";
+    $fp = fopen('/home/cron.log', 'w');
+    fwrite($fp, "- mysql ok");
+    fclose($fp);
+    exit;
+}

From 7e37ed471112acd4ac8a5bb654921b19303622f7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 9 Nov 2022 17:04:10 +0100
Subject: [PATCH 1752/2300] scanps fixes

---
 src/deb/for-download/tools/scanps/scanps.php | 18 ++++++++++--------
 src/deb/for-download/tools/scanps/scanps.sh  |  4 ++--
 2 files changed, 12 insertions(+), 10 deletions(-)

diff --git a/src/deb/for-download/tools/scanps/scanps.php b/src/deb/for-download/tools/scanps/scanps.php
index 7b52064d..d2dbd2b3 100644
--- a/src/deb/for-download/tools/scanps/scanps.php
+++ b/src/deb/for-download/tools/scanps/scanps.php
@@ -1,10 +1,12 @@
 <?php
 
-/*
-The script is checking if MySQL/MariaDB server process is up.
-If it's not, it assumes that it was killed by Kernel OOM Killer, and reboots the server, in order to bring the back server to a normal state.
-It can detect 'apt upgrade' process and avoid a reboot.
-*/
+// The script is checking if MySQL/MariaDB server process is up.
+// If it's not, it assumes that it was killed by Kernel OOM Killer, and reboots the server, in order to bring the back server to a normal state.
+// It can detect 'apt upgrade' process and avoid a reboot.
+
+// You can put this script in cronjob every 5 minutes:
+// Run 'crontab -e' and add the following:
+// */5 * * * * php /home/scanps.php > /dev/null 2>&1
 
 function my_exec($command) {
     $out=array();
@@ -37,21 +39,21 @@ if ($v1==false && $v2==false) {
     echo "- reboot\n";
     $buffer="- reboot\n".$list;
     $sufix="_".time();
-    $fp = fopen('/home/cron'.$sufix.'.log', 'w');
+    $fp = fopen('/var/log/scanps_cron'.$sufix.'.log', 'w');
     fwrite($fp, $buffer);
     fclose($fp);
     $out=array();
     $ret_no=0;
     $uname_arr=posix_uname();
     $hostname=$uname_arr['nodename'];
-    $email=my_exec("/usr/local/vesta/bin/v-list-user 'admin' | grep 'EMAIL' | awk '{print $2}'");
+    $email=my_exec("export VESTA=/usr/local/vesta && /usr/local/vesta/bin/v-list-user 'admin' | grep 'EMAIL' | awk '{print $2}'");
     mail($email, 'VPS reboot - '.$hostname, $buffer, "From: ".$hostname." <admin@".$hostname.">");
     sleep(10);
     $ret = exec("sudo reboot", $out, $ret_no);
     exit;
 } else {
     echo "- mysql ok\n";
-    $fp = fopen('/home/cron.log', 'w');
+    $fp = fopen('/var/log/scanps_cron.log', 'w');
     fwrite($fp, "- mysql ok");
     fclose($fp);
     exit;
diff --git a/src/deb/for-download/tools/scanps/scanps.sh b/src/deb/for-download/tools/scanps/scanps.sh
index fa9129f3..b693d21a 100644
--- a/src/deb/for-download/tools/scanps/scanps.sh
+++ b/src/deb/for-download/tools/scanps/scanps.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 
 # run 'crontab -e' and add the following:
-# 0,5,10,15,20,25,30,35,40,45,50,55 * * * * /home/scanps.sh > /dev/null 2>&1
+# */5 * * * * /home/scanps.sh > /dev/null 2>&1
 
 cd /home
-php scanps.php
+php scanps.php
\ No newline at end of file

From 595dd5dffd5b90adde74e55f477170d903d2ac3d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 9 Nov 2022 19:00:15 +0100
Subject: [PATCH 1753/2300] Delete create-mail-sync.sh

---
 .../for-download/tools/create-mail-sync.sh    | 87 -------------------
 1 file changed, 87 deletions(-)
 delete mode 100644 src/deb/for-download/tools/create-mail-sync.sh

diff --git a/src/deb/for-download/tools/create-mail-sync.sh b/src/deb/for-download/tools/create-mail-sync.sh
deleted file mode 100644
index e325754e..00000000
--- a/src/deb/for-download/tools/create-mail-sync.sh
+++ /dev/null
@@ -1,87 +0,0 @@
-#!/bin/bash
-
-##################################
-# usage: ./create-mail-sync.sh SRCHOST EMAIL PASSWORD-ON-REMOTE-SERVER [PASSWORD-ON-THIS-SERVER] [TEST]
-##################################
-
-if [ $# -lt 3 ]; then
-    echo "usage: ./create-mail-sync.sh SRCHOST EMAIL PASSWORD-ON-REMOTE-SERVER [PASSWORD-ON-THIS-SERVER] [TEST]"
-    exit 1
-fi
-
-if [ $# -eq 3 ]; then
-SRCHOST=$1
-EMAIL=$2
-PASS=$3
-PASS2=$3
-TEST=1
-fi
-
-if [ $# -eq 4 ]; then
-SRCHOST=$1
-EMAIL=$2
-PASS=$3
-PASS2=$4
-TEST=1
-fi
-
-if [ $# -eq 5 ]; then
-SRCHOST=$1
-EMAIL=$2
-PASS=$3
-PASS2=$4
-TEST=$5
-fi
-
-TESTOPT=""
-if [[ $TEST -eq 1 ]]; then
-	TESTOPT="--justlogin"
-fi
-
-if [ ! -d "accounts" ]; then
-    mkdir accounts
-fi
-if [ -f "accounts/$EMAIL" ]; then
-	echo "********* $EMAIL ALREADY EXISTS !!! ************"
-    exit 1;
-    exit
-fi
-
-echo "Writing to: accounts/$EMAIL"
-echo "#!/bin/bash
-
-# --- 
-# SRCHOST = $SRCHOST
-# email   = $EMAIL
-# pass    = $PASS
-# pass2   = $PASS2
-# test    = $TEST
-# ---
-
-/root/imapsync/imapsync --host1  $SRCHOST   --user1 $EMAIL   --password1 '$PASS' --ssl1 --host2 localhost   --user2 $EMAIL   --password2 '$PASS2' $TESTOPT --addheader  --automap \"\$@\"
-
-exit;
-# ---
-" > accounts/$EMAIL
-
-chmod a=rwx accounts/$EMAIL
-
-if [[ $TEST -eq 0 ]]; then
-	exit 0;
-fi
-
-accounts/$EMAIL
-RET=$?
-
-if [ $RET -eq 0 ]; then
-	# echo "./create-mail-sync.sh $EMAIL $PASS $PASS2 $TEST"
-	sed -i "s/--justlogin//g" accounts/$EMAIL
-	echo "--- OK! ---"
-	echo "./create-mail-sync.sh '$SRCHOST' '$EMAIL' '$PASS' '$PASS2' $TEST" >> accounts.log
-else
-	echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
-	echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
-	echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
-	rm accounts/$EMAIL
-fi
-exit $RET;

From 56484d4b01561ff79c30556f881bad65c006547c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 9 Nov 2022 19:01:02 +0100
Subject: [PATCH 1754/2300] Create run-all.sh

---
 src/deb/for-download/tools/imapsync/run-all.sh | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 src/deb/for-download/tools/imapsync/run-all.sh

diff --git a/src/deb/for-download/tools/imapsync/run-all.sh b/src/deb/for-download/tools/imapsync/run-all.sh
new file mode 100644
index 00000000..fa535927
--- /dev/null
+++ b/src/deb/for-download/tools/imapsync/run-all.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+
+cd accounts
+
+for name in *
+do
+    if [ -f "$name" ]; then
+        ./$name
+    fi
+done

From f5d3d97dfbf0a52647ebd4470df905950f65d9e1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 9 Nov 2022 19:01:33 +0100
Subject: [PATCH 1755/2300] Add files via upload

---
 .../tools/imapsync/create-mail-sync.sh        | 87 +++++++++++++++++++
 1 file changed, 87 insertions(+)
 create mode 100644 src/deb/for-download/tools/imapsync/create-mail-sync.sh

diff --git a/src/deb/for-download/tools/imapsync/create-mail-sync.sh b/src/deb/for-download/tools/imapsync/create-mail-sync.sh
new file mode 100644
index 00000000..e325754e
--- /dev/null
+++ b/src/deb/for-download/tools/imapsync/create-mail-sync.sh
@@ -0,0 +1,87 @@
+#!/bin/bash
+
+##################################
+# usage: ./create-mail-sync.sh SRCHOST EMAIL PASSWORD-ON-REMOTE-SERVER [PASSWORD-ON-THIS-SERVER] [TEST]
+##################################
+
+if [ $# -lt 3 ]; then
+    echo "usage: ./create-mail-sync.sh SRCHOST EMAIL PASSWORD-ON-REMOTE-SERVER [PASSWORD-ON-THIS-SERVER] [TEST]"
+    exit 1
+fi
+
+if [ $# -eq 3 ]; then
+SRCHOST=$1
+EMAIL=$2
+PASS=$3
+PASS2=$3
+TEST=1
+fi
+
+if [ $# -eq 4 ]; then
+SRCHOST=$1
+EMAIL=$2
+PASS=$3
+PASS2=$4
+TEST=1
+fi
+
+if [ $# -eq 5 ]; then
+SRCHOST=$1
+EMAIL=$2
+PASS=$3
+PASS2=$4
+TEST=$5
+fi
+
+TESTOPT=""
+if [[ $TEST -eq 1 ]]; then
+	TESTOPT="--justlogin"
+fi
+
+if [ ! -d "accounts" ]; then
+    mkdir accounts
+fi
+if [ -f "accounts/$EMAIL" ]; then
+	echo "********* $EMAIL ALREADY EXISTS !!! ************"
+    exit 1;
+    exit
+fi
+
+echo "Writing to: accounts/$EMAIL"
+echo "#!/bin/bash
+
+# --- 
+# SRCHOST = $SRCHOST
+# email   = $EMAIL
+# pass    = $PASS
+# pass2   = $PASS2
+# test    = $TEST
+# ---
+
+/root/imapsync/imapsync --host1  $SRCHOST   --user1 $EMAIL   --password1 '$PASS' --ssl1 --host2 localhost   --user2 $EMAIL   --password2 '$PASS2' $TESTOPT --addheader  --automap \"\$@\"
+
+exit;
+# ---
+" > accounts/$EMAIL
+
+chmod a=rwx accounts/$EMAIL
+
+if [[ $TEST -eq 0 ]]; then
+	exit 0;
+fi
+
+accounts/$EMAIL
+RET=$?
+
+if [ $RET -eq 0 ]; then
+	# echo "./create-mail-sync.sh $EMAIL $PASS $PASS2 $TEST"
+	sed -i "s/--justlogin//g" accounts/$EMAIL
+	echo "--- OK! ---"
+	echo "./create-mail-sync.sh '$SRCHOST' '$EMAIL' '$PASS' '$PASS2' $TEST" >> accounts.log
+else
+	echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
+	echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
+	echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
+	rm accounts/$EMAIL
+fi
+exit $RET;

From 06ebea1a8b7c79f68a3fe228a4d77782d2da9a33 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 14 Nov 2022 14:45:59 +0100
Subject: [PATCH 1756/2300] Update fix-fpm-poold.sh

---
 src/deb/for-download/tools/patches/fix-fpm-poold.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/patches/fix-fpm-poold.sh b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
index f9b562a9..d853114a 100644
--- a/src/deb/for-download/tools/patches/fix-fpm-poold.sh
+++ b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
@@ -35,6 +35,6 @@ if [ -d "/etc/php" ]; then
 fi
 
 if [ -f "/etc/apache2/mods-enabled/mpm_event.conf" ]; then
-    sed -i "s#MaxRequestWorkers.*#MaxRequestWorkers        600#g" /etc/apache2/mods-enabled/mpm_event.conf
+    sed -i "s#MaxRequestWorkers.*#MaxRequestWorkers        400#g" /etc/apache2/mods-enabled/mpm_event.conf
     systemctl restart apache2
 fi

From e134202224757c32f97fb817ba03ee5105104432 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 22 Nov 2022 09:07:25 +0100
Subject: [PATCH 1757/2300] Skipping forward proxy while renewing LetsEncrypt

---
 bin/v-update-letsencrypt-ssl | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index ac3e2eda..eacbfa05 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -36,6 +36,12 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
         limit_check=1
         fail_counter=$(get_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
 
+        proxy_tpl=$(/usr/local/vesta/bin/v-list-web-domain "$user" "$domain" "shell" | grep 'PROXY:' | cut -d ' ' -f11-)
+        if [ "$proxy_tpl" = "forward" ]; then
+            echo "[$(date)] : $domain is using forward proxy, skipping" >> /usr/local/vesta/log/letsencrypt_cron.log
+            continue;
+        fi
+
         if [[ "$hostname" = "$domain" ]]; then
             if [[ "$fail_counter" -eq 7 ]]; then
                 limit_check=0

From 8563303fbef5975ea2ad6242ed005902de44dbbf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 23 Nov 2022 14:25:56 +0100
Subject: [PATCH 1758/2300] Rollback of previous commit

---
 bin/v-update-letsencrypt-ssl | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/bin/v-update-letsencrypt-ssl b/bin/v-update-letsencrypt-ssl
index eacbfa05..819e9846 100755
--- a/bin/v-update-letsencrypt-ssl
+++ b/bin/v-update-letsencrypt-ssl
@@ -36,11 +36,11 @@ for user in $($BIN/v-list-users plain |cut -f 1); do
         limit_check=1
         fail_counter=$(get_web_counter "$user" "$domain" 'LETSENCRYPT_FAIL_COUNT')
 
-        proxy_tpl=$(/usr/local/vesta/bin/v-list-web-domain "$user" "$domain" "shell" | grep 'PROXY:' | cut -d ' ' -f11-)
-        if [ "$proxy_tpl" = "forward" ]; then
-            echo "[$(date)] : $domain is using forward proxy, skipping" >> /usr/local/vesta/log/letsencrypt_cron.log
-            continue;
-        fi
+        # proxy_tpl=$(/usr/local/vesta/bin/v-list-web-domain "$user" "$domain" "shell" | grep 'PROXY:' | cut -d ' ' -f11-)
+        # if [ "$proxy_tpl" = "forward" ]; then
+        #     echo "[$(date)] : $domain is using forward proxy, skipping" >> /usr/local/vesta/log/letsencrypt_cron.log
+        #     continue;
+        # fi
 
         if [[ "$hostname" = "$domain" ]]; then
             if [[ "$fail_counter" -eq 7 ]]; then

From 8e34db9a712be57fc81d05c9abc2bd137a88faf7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 23 Nov 2022 14:28:32 +0100
Subject: [PATCH 1759/2300] Replacing utf8mb4_0900_ai_ci

---
 bin/v-import-cpanel-backup | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-import-cpanel-backup b/bin/v-import-cpanel-backup
index a4d40226..d8fdac11 100644
--- a/bin/v-import-cpanel-backup
+++ b/bin/v-import-cpanel-backup
@@ -157,6 +157,7 @@ for sk_dbr in $sk_db_list
 			echo " Create and restore ${sk_dbr} "
 			mysql < mysql/${sk_dbr}.create
 			sed -i "s/utf8mb4_unicode_520_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.sql
+			sed -i "s/utf8mb4_0900_ai_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.sql
 			mysql ${sk_dbr} < mysql/${sk_dbr}.sql
 		else
 			echo "Error: Cant restore database $sk_dbr alredy exists in mysql server"

From 93b4b1e466aac7ad0ebea41b3132279757045049 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 26 Nov 2022 15:37:51 +0100
Subject: [PATCH 1760/2300] Update v-fix-user-permissions

---
 bin/v-fix-user-permissions | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-fix-user-permissions b/bin/v-fix-user-permissions
index fa902ec3..ae798992 100644
--- a/bin/v-fix-user-permissions
+++ b/bin/v-fix-user-permissions
@@ -36,9 +36,15 @@ is_object_valid 'user' 'USER' "$user"
 find /home/$user/conf/mail/ -type d -exec chown Debian-exim:mail {} \;
 find /home/$user/conf/mail/*/ -type f -exec chown Debian-exim:mail {} \;
 find /home/$user/conf/mail/*/ -name "passwd" -type f -exec chown dovecot:mail {} \;
+
 find /home/$user/mail/ -type d -exec chown $user:mail {} \;
 find /home/$user/mail/*/ -type d -exec chown $user:mail {} \;
 find /home/$user/mail/*/ -type f -exec chown $user:mail {} \;
+find /home/$user/mail/*/ -type d -exec chmod u+rwx {} \;
+find /home/$user/mail/*/ -type d -exec chmod g+rwx {} \;
+find /home/$user/mail/*/ -type f -exec chmod u+rw {} \;
+find /home/$user/mail/*/ -type f -exec chmod g+rw {} \;
+
 
 find /home/$user/conf/dns/ -type f -exec chown root:bind {} \;
 find /home/$user/conf/ -type d -exec chown root:root {} \;

From 343a4deb73bf1d0d7584e9428495880b695b6cda Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 26 Nov 2022 21:42:09 +0100
Subject: [PATCH 1761/2300] Additional fix for utf8mb4_0900_ai_ci

---
 bin/v-import-cpanel-backup | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-import-cpanel-backup b/bin/v-import-cpanel-backup
index d8fdac11..02383018 100644
--- a/bin/v-import-cpanel-backup
+++ b/bin/v-import-cpanel-backup
@@ -155,6 +155,8 @@ for sk_dbr in $sk_db_list
 		grep -w $sk_dbr server_dbs	
 		if [ $? == "1" ]; then
 			echo " Create and restore ${sk_dbr} "
+			sed -i "s/utf8mb4_unicode_520_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.create
+			sed -i "s/utf8mb4_0900_ai_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.create
 			mysql < mysql/${sk_dbr}.create
 			sed -i "s/utf8mb4_unicode_520_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.sql
 			sed -i "s/utf8mb4_0900_ai_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.sql

From d0f5d1a355f67e3c7c0e772536b3a27ffd3f2f06 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 8 Dec 2022 14:13:42 +0100
Subject: [PATCH 1762/2300] Update fix-fpm-poold.sh

---
 src/deb/for-download/tools/patches/fix-fpm-poold.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/patches/fix-fpm-poold.sh b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
index d853114a..88534bfd 100644
--- a/src/deb/for-download/tools/patches/fix-fpm-poold.sh
+++ b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
@@ -35,6 +35,6 @@ if [ -d "/etc/php" ]; then
 fi
 
 if [ -f "/etc/apache2/mods-enabled/mpm_event.conf" ]; then
-    sed -i "s#MaxRequestWorkers.*#MaxRequestWorkers        400#g" /etc/apache2/mods-enabled/mpm_event.conf
+    sed -i "s#MaxRequestWorkers.*#MaxRequestWorkers        200#g" /etc/apache2/mods-enabled/mpm_event.conf
     systemctl restart apache2
 fi

From cab6df399a781727f31102fc56729c341248e6a7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 29 Dec 2022 12:57:17 +0100
Subject: [PATCH 1763/2300] Create v-move-folder-and-make-symlink

---
 bin/v-move-folder-and-make-symlink | 85 ++++++++++++++++++++++++++++++
 1 file changed, 85 insertions(+)
 create mode 100644 bin/v-move-folder-and-make-symlink

diff --git a/bin/v-move-folder-and-make-symlink b/bin/v-move-folder-and-make-symlink
new file mode 100644
index 00000000..f543ff65
--- /dev/null
+++ b/bin/v-move-folder-and-make-symlink
@@ -0,0 +1,85 @@
+#!/bin/bash
+
+# info:
+# This script will move a folder to the new destination and make a symlink from the old path to the new destination
+
+# options: FROMFOLDER TOFOLDER
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ] && [ "$whoami" != "admin" ] ; then
+    echo "You must be root or admin to execute this script";
+    exit 1;
+fi
+
+# Argument definition
+FROMFOLDER=$1
+TOFOLDER=$2
+
+# Includes
+source $VESTA/func/main.sh
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+# Trimming the ending slash, just in case
+FROMFOLDER=$(echo "$FROMFOLDER" | sed 's:/*$::')
+TOFOLDER=$(echo "$TOFOLDER" | sed 's:/*$::')
+
+if [ ! -d "$FROMFOLDER" ]; then
+    echo "Folder $FROMFOLDER does not exists, aborting"
+    exit 1
+fi
+
+USER=$(stat -c '%U' "$FROMFOLDER")
+GROUP=$(stat -c '%G' "$FROMFOLDER")
+PARENTFOLDER=$(dirname "$TOFOLDER")
+
+if [ ! -d "$PARENTFOLDER" ]; then
+    PUSER=$(stat -c '%U' "$PARENTFOLDER")
+    PGROUP=$(stat -c '%G' "$PARENTFOLDER")
+    echo "= Creating parent folder..."
+    mkdir -p $PARENTFOLDER
+    chown $PUSER:$PGROUP $PARENTFOLDER
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+rsync -a "$FROMFOLDER/" "$TOFOLDER/"
+# with slashes on the end of the path of both folders
+if [ "$?" -ne 0 ]; then
+    echo "Error happened, aborting"
+    exit 1
+fi
+
+if [ "$FROMFOLDER" = "/home/$USER" ] && [ -d "$FROMFOLDER/conf" ]; then
+    # if we are moving myVesta home folder, we must remove immutable attribute from conf/ files
+    chattr -R -i "$FROMFOLDER/conf/" > /dev/null 2>&1
+    # with slashes on the end of the path of the folder
+fi
+
+rm -rf "$FROMFOLDER"
+# without slash on the end of the path of the folder
+
+ln -s "$TOFOLDER" "$FROMFOLDER"
+# without slashes on the end of the path of both folders
+
+chown -h $USER:$GROUP $FROMFOLDER
+# without slash on the end of the path of the folder
+
+#----------------------------------------------------------#
+#             Log and print result                         #
+#----------------------------------------------------------#
+
+echo "Done, folder $FROMFOLDER moved to $TOFOLDER and symlinked"
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 5b0056b193a32f312cb3d4c93b8e751a7e4f901c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 29 Dec 2022 13:18:44 +0100
Subject: [PATCH 1764/2300] Update v-move-folder-and-make-symlink

---
 bin/v-move-folder-and-make-symlink | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-move-folder-and-make-symlink b/bin/v-move-folder-and-make-symlink
index f543ff65..b17f6465 100644
--- a/bin/v-move-folder-and-make-symlink
+++ b/bin/v-move-folder-and-make-symlink
@@ -43,8 +43,8 @@ if [ ! -d "$PARENTFOLDER" ]; then
     PUSER=$(stat -c '%U' "$PARENTFOLDER")
     PGROUP=$(stat -c '%G' "$PARENTFOLDER")
     echo "= Creating parent folder..."
-    mkdir -p $PARENTFOLDER
-    chown $PUSER:$PGROUP $PARENTFOLDER
+    mkdir -p "$PARENTFOLDER"
+    chown $PUSER:$PGROUP "$PARENTFOLDER"
 fi
 
 #----------------------------------------------------------#

From 75e7d7c5e04feeb40d5ecea15eb26f852215f221 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 29 Dec 2022 13:44:40 +0100
Subject: [PATCH 1765/2300] Update v-move-folder-and-make-symlink

---
 bin/v-move-folder-and-make-symlink | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/bin/v-move-folder-and-make-symlink b/bin/v-move-folder-and-make-symlink
index b17f6465..6cedcbe0 100644
--- a/bin/v-move-folder-and-make-symlink
+++ b/bin/v-move-folder-and-make-symlink
@@ -35,6 +35,16 @@ if [ ! -d "$FROMFOLDER" ]; then
     exit 1
 fi
 
+if [ -L "$FROMFOLDER" ]; then
+    echo "Folder $FROMFOLDER is already symlink, aborting"
+    exit 1
+fi
+
+if [ -d "$TOFOLDER" ]; then
+    echo "Folder $TOFOLDER already exists, aborting"
+    exit 1
+fi
+
 USER=$(stat -c '%U' "$FROMFOLDER")
 GROUP=$(stat -c '%G' "$FROMFOLDER")
 PARENTFOLDER=$(dirname "$TOFOLDER")

From 0db48dcdaadd2e03469a9b67dea43e65de3bdb31 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 29 Dec 2022 15:12:58 +0100
Subject: [PATCH 1766/2300] Update v-move-folder-and-make-symlink

---
 bin/v-move-folder-and-make-symlink | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-move-folder-and-make-symlink b/bin/v-move-folder-and-make-symlink
index 6cedcbe0..81561a97 100644
--- a/bin/v-move-folder-and-make-symlink
+++ b/bin/v-move-folder-and-make-symlink
@@ -45,6 +45,11 @@ if [ -d "$TOFOLDER" ]; then
     exit 1
 fi
 
+if [ -L "$TOFOLDER" ]; then
+    echo "Folder $TOFOLDER already exists (as symlink), aborting"
+    exit 1
+fi
+
 USER=$(stat -c '%U' "$FROMFOLDER")
 GROUP=$(stat -c '%G' "$FROMFOLDER")
 PARENTFOLDER=$(dirname "$TOFOLDER")

From fab56e1b708a00bdfa9a1b3d88d8ef1aba3631b3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 12 Jan 2023 17:59:49 +0100
Subject: [PATCH 1767/2300] Another attempt to fix wildcard letsencrypt

---
 bin/v-add-letsencrypt-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 2940bbb6..faa51f8c 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -200,7 +200,7 @@ for auth in $authz; do
             echo "[$(date)] : EXIT=DNS _acme-challenge record wasn't created" >> /usr/local/vesta/log/letsencrypt.log
         fi
         check_result $exitstatus "DNS _acme-challenge record wasn't created"
-        $BIN/v-restart-dns
+        systemctl restart bind9
     else
         if [ "$WEB_SYSTEM" = 'nginx' ] || [ ! -z "$PROXY_SYSTEM" ]; then
             if [ -f "/usr/local/vesta/web/inc/nginx_proxy" ]; then

From 171a42a65ebfcd4d8055a2686ccd04d8cc9600a3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 14 Jan 2023 15:49:46 +0100
Subject: [PATCH 1768/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index aa1d043c..5ca3690e 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1627,6 +1627,10 @@ echo "== Get main ip"
 ip=$(ip addr|grep 'inet '|grep global|head -n1|awk '{print $2}'|cut -f1 -d/)
 local_ip=$ip
 
+echo "== Writing '$ip $servername' to /etc/hosts"
+sed -i "/$servername/d" /etc/hosts
+echo "$ip $servername" >> /etc/hosts
+
 # Firewall configuration
 if [ "$iptables" = 'yes' ]; then
     echo "== Firewall configuration"

From d0a77cf3f652a3dc9cb9b11b26b499f9b386f099 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 14 Jan 2023 16:44:27 +0100
Subject: [PATCH 1769/2300] Writing '$ip $servername' to /etc/hosts

---
 install/vst-install-debian.sh | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 5ca3690e..ffb036dd 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -524,6 +524,8 @@ if ! [[ "$servername" =~ ^${mask1}${mask2}$ ]]; then
     fi
     echo "127.0.0.1 $servername" >> /etc/hosts
 fi
+echo "$servername" > /etc/hostname
+hostname $servername
 
 # Set email if it wasn't set
 if [ -z "$email" ]; then
@@ -1627,9 +1629,15 @@ echo "== Get main ip"
 ip=$(ip addr|grep 'inet '|grep global|head -n1|awk '{print $2}'|cut -f1 -d/)
 local_ip=$ip
 
+# Writing '$ip $servername' to /etc/hosts
 echo "== Writing '$ip $servername' to /etc/hosts"
 sed -i "/$servername/d" /etc/hosts
-echo "$ip $servername" >> /etc/hosts
+subdomain=$(echo "$servername" | cut -d . -f-1)
+if [ "servername" != "$subdomain" ]; then
+    echo "$ip $servername $subdomain" >> /etc/hosts
+else
+    echo "$ip $servername" >> /etc/hosts
+fi
 
 # Firewall configuration
 if [ "$iptables" = 'yes' ]; then

From ae81474f8e902821ede90216124a8c54a9994d90 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 14 Jan 2023 17:15:36 +0100
Subject: [PATCH 1770/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ffb036dd..b5fda479 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1633,7 +1633,7 @@ local_ip=$ip
 echo "== Writing '$ip $servername' to /etc/hosts"
 sed -i "/$servername/d" /etc/hosts
 subdomain=$(echo "$servername" | cut -d . -f-1)
-if [ "servername" != "$subdomain" ]; then
+if [ "$servername" != "$subdomain" ]; then
     echo "$ip $servername $subdomain" >> /etc/hosts
 else
     echo "$ip $servername" >> /etc/hosts

From 2df6bfbb0bea7fa5ad7871c51da112260d94b55d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Jan 2023 17:37:32 +0100
Subject: [PATCH 1771/2300] New roundcube version

---
 src/deb/for-download/tools/install-new-roundcube.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index a746ff59..6311563e 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -3,7 +3,7 @@
 USER='webmail'
 DOMAIN='' # enter domain or subdomain
 
-VERSION='1.5.2'
+VERSION='1.6.0'
 DOWNLOAD="https://github.com/roundcube/roundcubemail/releases/download/$VERSION/roundcubemail-$VERSION-complete.tar.gz"
 
 LOGINMESSAGE1='Click here for NEW Webmail'

From 479805c52cedc5e310704bc7e93c98ed5c0e9c60 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 15 Jan 2023 22:01:43 +0100
Subject: [PATCH 1772/2300] Cleaning fail2ban database

---
 bin/v-clean-garbage | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 62bb39c8..15b1a5ae 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -34,4 +34,15 @@ find /home/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {}
 find /home/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;
 find /home/ -type f -name "*.log" -exec truncate -s 0 {} \;
 
+fail2ban_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'fail2ban' | grep -c 'running')
+if [ $fail2ban_running -eq 1 ]; then
+    systemctl stop fail2ban
+fi
+if [ -f "/var/lib/fail2ban/fail2ban.sqlite3" ]; then
+    rm /var/lib/fail2ban/fail2ban.sqlite3
+fi
+if [ $fail2ban_running -eq 1 ]; then
+    systemctl start fail2ban
+fi
+
 echo "=== Garbage cleaned ==="

From caee59c0152431ca15b03d6a806ac99877200d5c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 19 Jan 2023 17:43:42 +0100
Subject: [PATCH 1773/2300] Update v-install-wordpress

---
 bin/v-install-wordpress | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index bdf56f72..ba69c22d 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -1,6 +1,6 @@
 #!/bin/bash
 # info: WordPress installer in one command line
-# options: DOMAIN USER
+# options: DOMAIN
 #
 # Credits to Luka Paunović for wp-cli implememtation
 

From efc2be9f717a049da63527ed5a8994cd8a3b5266 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 19 Jan 2023 17:55:44 +0100
Subject: [PATCH 1774/2300] Lock WordPress files if they are potentially
 infected

---
 bin/v-lock-wordpress | 70 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 70 insertions(+)
 create mode 100644 bin/v-lock-wordpress

diff --git a/bin/v-lock-wordpress b/bin/v-lock-wordpress
new file mode 100644
index 00000000..e722abaa
--- /dev/null
+++ b/bin/v-lock-wordpress
@@ -0,0 +1,70 @@
+#!/bin/bash
+# info: Lock WordPress files if they are potentially infected (somewhere) by PHP malware, in order to stop further infection
+# options: DOMAIN
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Argument definition
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+if [ ! -d "/home/$user" ]; then
+    echo "User doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    echo "Domain doesn't exist";
+    exit 1;
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+cd /home/$user/web/$domain/public_html
+
+# lock files
+chown -R www-data:www-data public_html/
+
+# unlock /wp-content/uploads/ for uploading
+chown -R $user:$user public_html/wp-content/uploads/
+
+# block .php execution inside /wp-content/uploads/
+cat <<EOF >public_html/wp-content/uploads/.htaccess
+RewriteEngine on
+RewriteRule ^.*\.(?:php[1-6]?|pht|phtml?)$ - [NC,F]
+EOF
+
+chown root:root public_html/wp-content/uploads/.htaccess
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+echo "v-lock-wordpress: Done."
+
+log_event "$OK" "$ARGUMENTS"
+
+exit

From c9c29ce7a95cdf3cd73325a446f495db8ed913cb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 19 Jan 2023 18:02:56 +0100
Subject: [PATCH 1775/2300] Create v-unlock-wordpress

---
 bin/v-unlock-wordpress | 67 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 67 insertions(+)
 create mode 100644 bin/v-unlock-wordpress

diff --git a/bin/v-unlock-wordpress b/bin/v-unlock-wordpress
new file mode 100644
index 00000000..faadbdde
--- /dev/null
+++ b/bin/v-unlock-wordpress
@@ -0,0 +1,67 @@
+#!/bin/bash
+# info: Unlock previously locked WordPress files if they were potentially infected (somewhere) by PHP malware, in order to stop further infection
+# options: DOMAIN
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
+# Argument definition
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+if [ ! -d "/home/$user" ]; then
+    echo "User doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    echo "Domain doesn't exist";
+    exit 1;
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+cd /home/$user/web/$domain/public_html
+
+# lock files
+chown -R $user:$user public_html/
+
+rm public_html/wp-content/uploads/.htaccess
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+echo "v-unlock-wordpress: Done."
+
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 8b756993777b792fd83bdaf8b65bebe5051c98a6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 19 Jan 2023 18:03:40 +0100
Subject: [PATCH 1776/2300] Update v-lock-wordpress

---
 bin/v-lock-wordpress | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/bin/v-lock-wordpress b/bin/v-lock-wordpress
index e722abaa..e56f42eb 100644
--- a/bin/v-lock-wordpress
+++ b/bin/v-lock-wordpress
@@ -12,6 +12,12 @@ if [ "$whoami" != "root" ]; then
     exit 1
 fi
 
+# Importing system environment
+source /etc/profile
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
 # Argument definition
 domain=$1
 
@@ -43,7 +49,7 @@ fi
 #                       Action                             #
 #----------------------------------------------------------#
 
-cd /home/$user/web/$domain/public_html
+cd /home/$user/web/$domain
 
 # lock files
 chown -R www-data:www-data public_html/

From f397454364a17e7bead2bc1dfd281ac4096e65ce Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 19 Jan 2023 18:04:45 +0100
Subject: [PATCH 1777/2300] Update v-install-wordpress

---
 bin/v-install-wordpress | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index ba69c22d..08abb8a3 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -14,14 +14,6 @@ if [ "$whoami" != "root" ]; then
     exit 1
 fi
 
-# Argument definition
-domain=$1
-
-user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
-if [ -z "$user" ]; then
-    check_result $E_NOTEXIST "domain $domain doesn't exist"
-fi
-
 # Importing system environment
 source /etc/profile
 
@@ -29,6 +21,13 @@ source /etc/profile
 source /usr/local/vesta/func/main.sh
 source /usr/local/vesta/func/db.sh
 
+# Argument definition
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
 
 if [[ $(is_package_full 'DATABASES') = *reached* ]]; then
         echo "Database limit is reached. Delete database or upgrade user package."

From 0fc6fd5fa54f22a504a1dfb06d7646a8bde3de6d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 19 Jan 2023 18:05:56 +0100
Subject: [PATCH 1778/2300] Update v-install-wordpress

---
 bin/v-install-wordpress | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 08abb8a3..e0509fed 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -1,6 +1,6 @@
 #!/bin/bash
 # info: WordPress installer in one command line
-# options: DOMAIN
+# options: DOMAIN [DB_NAME] [EMAIL]
 #
 # Credits to Luka Paunović for wp-cli implememtation
 

From a65f008f9a9a5f3c5f66d3f392ad0fec9f570ed6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 19 Jan 2023 18:06:44 +0100
Subject: [PATCH 1779/2300] Update v-unlock-wordpress

---
 bin/v-unlock-wordpress | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-unlock-wordpress b/bin/v-unlock-wordpress
index faadbdde..f54348a1 100644
--- a/bin/v-unlock-wordpress
+++ b/bin/v-unlock-wordpress
@@ -1,5 +1,5 @@
 #!/bin/bash
-# info: Unlock previously locked WordPress files if they were potentially infected (somewhere) by PHP malware, in order to stop further infection
+# info: Unlock previously locked WordPress files if they were potentially infected (somewhere) by PHP malware
 # options: DOMAIN
 
 #----------------------------------------------------------#

From 0a78d937ddbf8ac03551ee2d5ce2a13bf17b1141 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 19 Jan 2023 18:07:43 +0100
Subject: [PATCH 1780/2300] Update v-unlock-wordpress

---
 bin/v-unlock-wordpress | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-unlock-wordpress b/bin/v-unlock-wordpress
index f54348a1..22b891b1 100644
--- a/bin/v-unlock-wordpress
+++ b/bin/v-unlock-wordpress
@@ -49,7 +49,7 @@ fi
 #                       Action                             #
 #----------------------------------------------------------#
 
-cd /home/$user/web/$domain/public_html
+cd /home/$user/web/$domain
 
 # lock files
 chown -R $user:$user public_html/

From ee5df22828c7acc7614834d1fe588cf887fc2cf5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 20 Jan 2023 13:06:34 +0100
Subject: [PATCH 1781/2300] Update v-lock-wordpress

---
 bin/v-lock-wordpress | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/bin/v-lock-wordpress b/bin/v-lock-wordpress
index e56f42eb..156d1a5e 100644
--- a/bin/v-lock-wordpress
+++ b/bin/v-lock-wordpress
@@ -15,13 +15,15 @@ fi
 # Importing system environment
 source /etc/profile
 
-# Includes
-source /usr/local/vesta/func/main.sh
-
 # Argument definition
 domain=$1
 
 user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
 if [ -z "$user" ]; then
     check_result $E_NOTEXIST "domain $domain doesn't exist"
 fi

From bdfe17490feab7b1b78fd98a239fe2ec603a3ae9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 20 Jan 2023 13:07:16 +0100
Subject: [PATCH 1782/2300] Update v-unlock-wordpress

---
 bin/v-unlock-wordpress | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/bin/v-unlock-wordpress b/bin/v-unlock-wordpress
index 22b891b1..1e2cccc6 100644
--- a/bin/v-unlock-wordpress
+++ b/bin/v-unlock-wordpress
@@ -15,13 +15,15 @@ fi
 # Importing system environment
 source /etc/profile
 
-# Includes
-source /usr/local/vesta/func/main.sh
-
 # Argument definition
 domain=$1
 
 user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
 if [ -z "$user" ]; then
     check_result $E_NOTEXIST "domain $domain doesn't exist"
 fi

From 7cdd65baf2b7ebab874082a5fd2507133d56e6fa Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 20 Jan 2023 13:09:23 +0100
Subject: [PATCH 1783/2300] Update v-install-wordpress

---
 bin/v-install-wordpress | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index e0509fed..91bbdf0a 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -17,14 +17,16 @@ fi
 # Importing system environment
 source /etc/profile
 
-# Includes
-source /usr/local/vesta/func/main.sh
-source /usr/local/vesta/func/db.sh
-
 # Argument definition
 domain=$1
 
 user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/db.sh
+
 if [ -z "$user" ]; then
     check_result $E_NOTEXIST "domain $domain doesn't exist"
 fi

From cdbcf84b2cafbb526213fb5b288d1573b6bde9cd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 22 Jan 2023 16:35:59 +0100
Subject: [PATCH 1784/2300] unlock /wp-content/cache/ for caching

---
 bin/v-lock-wordpress | 27 +++++++++++++++++++--------
 1 file changed, 19 insertions(+), 8 deletions(-)

diff --git a/bin/v-lock-wordpress b/bin/v-lock-wordpress
index 156d1a5e..ea7b2978 100644
--- a/bin/v-lock-wordpress
+++ b/bin/v-lock-wordpress
@@ -28,6 +28,18 @@ if [ -z "$user" ]; then
     check_result $E_NOTEXIST "domain $domain doesn't exist"
 fi
 
+unlock_folder() {
+    chown -R $user:$user $1/
+
+    # block .php execution inside folder
+    cat <<EOF >$1/.htaccess
+RewriteEngine on
+RewriteRule ^.*\.(?:php[1-6]?|pht|phtml?)$ - [NC,F]
+EOF
+
+    chown root:root $1/.htaccess
+}
+
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#
@@ -57,15 +69,14 @@ cd /home/$user/web/$domain
 chown -R www-data:www-data public_html/
 
 # unlock /wp-content/uploads/ for uploading
-chown -R $user:$user public_html/wp-content/uploads/
+if [ -d "/home/$user/web/$domain/public_html/wp-content/uploads" ]; then
+    unlock_folder "public_html/wp-content/uploads"
+fi
 
-# block .php execution inside /wp-content/uploads/
-cat <<EOF >public_html/wp-content/uploads/.htaccess
-RewriteEngine on
-RewriteRule ^.*\.(?:php[1-6]?|pht|phtml?)$ - [NC,F]
-EOF
-
-chown root:root public_html/wp-content/uploads/.htaccess
+# unlock /wp-content/cache/ for caching
+if [ -d "/home/$user/web/$domain/public_html/wp-content/cache" ]; then
+    unlock_folder "public_html/wp-content/cache"
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From a39b192d308a8ea916a1d2ab72409883790ffe27 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 23 Jan 2023 12:47:49 +0100
Subject: [PATCH 1785/2300] v-lock-wordpress - set correct chmod just in case

---
 bin/v-lock-wordpress | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-lock-wordpress b/bin/v-lock-wordpress
index ea7b2978..36852781 100644
--- a/bin/v-lock-wordpress
+++ b/bin/v-lock-wordpress
@@ -68,6 +68,10 @@ cd /home/$user/web/$domain
 # lock files
 chown -R www-data:www-data public_html/
 
+# set correct chmod just in case
+find public_html/ -type d -exec chmod 755 {} +
+find public_html/ -type f -exec chmod 644 {} +
+
 # unlock /wp-content/uploads/ for uploading
 if [ -d "/home/$user/web/$domain/public_html/wp-content/uploads" ]; then
     unlock_folder "public_html/wp-content/uploads"

From 8409e19fac8df17eb719da45aa695181cc808946 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Mon, 30 Jan 2023 13:42:03 +0100
Subject: [PATCH 1786/2300] Added install-rocket-nginx.sh and the following
 nginx templates

---
 .../tools/install-rocket-nginx.sh             | 23 +++++++++++
 .../wprocket-force-htpps.stpl                 | 41 +++++++++++++++++++
 .../wprocket-force-htpps.tpl                  |  9 ++++
 .../wprocket-hosting.stpl                     | 39 ++++++++++++++++++
 .../wprocket-hosting.tpl                      | 36 ++++++++++++++++
 5 files changed, 148 insertions(+)
 create mode 100644 src/deb/for-download/tools/install-rocket-nginx.sh
 create mode 100644 src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl
 create mode 100644 src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.tpl
 create mode 100644 src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
 create mode 100644 src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.tpl

diff --git a/src/deb/for-download/tools/install-rocket-nginx.sh b/src/deb/for-download/tools/install-rocket-nginx.sh
new file mode 100644
index 00000000..0fb5d86d
--- /dev/null
+++ b/src/deb/for-download/tools/install-rocket-nginx.sh
@@ -0,0 +1,23 @@
+#!/bin/bash
+
+echo "Updating apt, please wait..."
+apt-get update > /dev/null 2>&1
+
+apt-get -y install git > /dev/null 2>&1
+
+if [ ! -d "/etc/nginx/rocket-nginx" ]; then
+    cd /etc/nginx
+    git clone https://github.com/satellitewp/rocket-nginx.git
+else
+    cd /etc/nginx/rocket-nginx
+    git pull
+    cd ..
+fi
+
+cd rocket-nginx
+cp rocket-nginx.ini.disabled rocket-nginx.ini
+php rocket-parser.php
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-htpps.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-htpps.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-htpps.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-htpps.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-hosting.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-hosting.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-hosting.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-hosting.stpl
diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl
new file mode 100644
index 00000000..05ba994a
--- /dev/null
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+    include rocket-nginx/conf.d/default.conf;
+}
diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.tpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.tpl
new file mode 100644
index 00000000..0c877632
--- /dev/null
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.tpl
@@ -0,0 +1,9 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://%domain_idn%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+include rocket-nginx/conf.d/default.conf;
+}
diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
new file mode 100644
index 00000000..2610efc4
--- /dev/null
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+    include rocket-nginx/conf.d/default.conf;
+}
diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.tpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.tpl
new file mode 100644
index 00000000..521348ae
--- /dev/null
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.tpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+    include rocket-nginx/conf.d/default.conf;
+}

From ed85dfdac71400c848cbf927ec3bd191b0cde3c3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 15:03:05 +0100
Subject: [PATCH 1787/2300] Support for PHP 8.2

---
 .../for-download/tools/multi-php-install.sh   | 51 +++++++++++++++----
 1 file changed, 42 insertions(+), 9 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index e847df17..58ec502d 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -12,6 +12,7 @@ inst_73=0
 inst_74=0
 inst_80=0
 inst_81=0
+inst_82=0
 
 #######################################################################
 
@@ -52,8 +53,11 @@ fi
 if [ $# -gt 8 ]; then
     inst_81=$9
 fi
+if [ $# -gt 9 ]; then
+    inst_82=$10
+fi
 
-if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ] || [ $inst_74 -eq 1 ] || [ $inst_80 -eq 1 ] || [ $inst_81 -eq 1 ]; then
+if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ] || [ $inst_74 -eq 1 ] || [ $inst_80 -eq 1 ] || [ $inst_81 -eq 1 ] || [ $inst_82 -eq 1 ]; then
     inst_repo=1
 fi
 
@@ -82,6 +86,7 @@ echo "inst_73=$inst_73"
 echo "inst_74=$inst_74"
 echo "inst_80=$inst_80"
 echo "inst_81=$inst_81"
+echo "inst_82=$inst_82"
 echo "wait_to_press_enter=$wait_to_press_enter"
 
 press_enter "=== Press enter to continue ==============================================================================="
@@ -115,7 +120,7 @@ service apache2 restart
 
 if [ "$inst_56" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 5.6 ==============================================================================="
-    apt -y install php5.6-mbstring php5.6-bcmath php5.6-cli php5.6-curl php5.6-fpm php5.6-gd php5.6-intl php5.6-mcrypt php5.6-mysql php5.6-soap php5.6-xml php5.6-zip php5.6-memcache php5.6-memcached
+    apt -y install php5.6-mbstring php5.6-bcmath php5.6-cli php5.6-curl php5.6-fpm php5.6-gd php5.6-intl php5.6-mcrypt php5.6-mysql php5.6-soap php5.6-xml php5.6-zip php5.6-memcache php5.6-memcached php5.6-imagick
     update-rc.d php5.6-fpm defaults
     a2enconf php5.6-fpm
     systemctl restart apache2
@@ -134,7 +139,7 @@ fi
 
 if [ "$inst_70" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 7.0 ==============================================================================="
-    apt -y install php7.0-mbstring php7.0-bcmath php7.0-cli php7.0-curl php7.0-fpm php7.0-gd php7.0-intl php7.0-mcrypt php7.0-mysql php7.0-soap php7.0-xml php7.0-zip php7.0-memcache php7.0-memcached
+    apt -y install php7.0-mbstring php7.0-bcmath php7.0-cli php7.0-curl php7.0-fpm php7.0-gd php7.0-intl php7.0-mcrypt php7.0-mysql php7.0-soap php7.0-xml php7.0-zip php7.0-memcache php7.0-memcached php7.0-imagick
     update-rc.d php7.0-fpm defaults
     a2enconf php7.0-fpm
     systemctl restart apache2
@@ -158,7 +163,7 @@ fi
 
 if [ "$inst_71" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 7.1 ==============================================================================="
-    apt -y install php7.1-mbstring php7.1-bcmath php7.1-cli php7.1-curl php7.1-fpm php7.1-gd php7.1-intl php7.1-mcrypt php7.1-mysql php7.1-soap php7.1-xml php7.1-zip php7.1-memcache php7.1-memcached
+    apt -y install php7.1-mbstring php7.1-bcmath php7.1-cli php7.1-curl php7.1-fpm php7.1-gd php7.1-intl php7.1-mcrypt php7.1-mysql php7.1-soap php7.1-xml php7.1-zip php7.1-memcache php7.1-memcached php7.1-imagick
     update-rc.d php7.1-fpm defaults
     a2enconf php7.1-fpm
     systemctl restart apache2
@@ -182,7 +187,7 @@ fi
 
 if [ "$inst_72" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 7.2 ==============================================================================="
-    apt -y install php7.2-mbstring php7.2-bcmath php7.2-cli php7.2-curl php7.2-fpm php7.2-gd php7.2-intl php7.2-mysql php7.2-soap php7.2-xml php7.2-zip php7.2-memcache php7.2-memcached
+    apt -y install php7.2-mbstring php7.2-bcmath php7.2-cli php7.2-curl php7.2-fpm php7.2-gd php7.2-intl php7.2-mysql php7.2-soap php7.2-xml php7.2-zip php7.2-memcache php7.2-memcached php7.2-imagick
     update-rc.d php7.2-fpm defaults
     a2enconf php7.2-fpm
     systemctl restart apache2
@@ -206,7 +211,7 @@ fi
 
 if [ "$inst_73" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 7.3 ==============================================================================="
-    apt -y install php7.3-mbstring php7.3-bcmath php7.3-cli php7.3-curl php7.3-fpm php7.3-gd php7.3-intl php7.3-mysql php7.3-soap php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached
+    apt -y install php7.3-mbstring php7.3-bcmath php7.3-cli php7.3-curl php7.3-fpm php7.3-gd php7.3-intl php7.3-mysql php7.3-soap php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached php7.3-imagick
     update-rc.d php7.3-fpm defaults
     a2enconf php7.3-fpm
     systemctl restart apache2
@@ -231,7 +236,7 @@ fi
 
 if [ "$inst_74" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 7.4 ==============================================================================="
-    apt -y install php7.4-mbstring php7.4-bcmath php7.4-cli php7.4-curl php7.4-fpm php7.4-gd php7.4-intl php7.4-mysql php7.4-soap php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached
+    apt -y install php7.4-mbstring php7.4-bcmath php7.4-cli php7.4-curl php7.4-fpm php7.4-gd php7.4-intl php7.4-mysql php7.4-soap php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached php7.4-imagick
     update-rc.d php7.4-fpm defaults
     a2enconf php7.4-fpm
     apt-get -y remove libapache2-mod-php7.4
@@ -257,7 +262,7 @@ fi
 
 if [ "$inst_80" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 8.0 ==============================================================================="
-    apt -y install php8.0-mbstring php8.0-bcmath php8.0-cli php8.0-curl php8.0-fpm php8.0-gd php8.0-intl php8.0-mysql php8.0-soap php8.0-xml php8.0-zip php8.0-memcache php8.0-memcached
+    apt -y install php8.0-mbstring php8.0-bcmath php8.0-cli php8.0-curl php8.0-fpm php8.0-gd php8.0-intl php8.0-mysql php8.0-soap php8.0-xml php8.0-zip php8.0-memcache php8.0-memcached php8.0-imagick
     update-rc.d php8.0-fpm defaults
     a2enconf php8.0-fpm
     a2dismod php8.0
@@ -284,7 +289,7 @@ fi
 
 if [ "$inst_81" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 8.1 ==============================================================================="
-    apt -y install php8.1-mbstring php8.1-bcmath php8.1-cli php8.1-curl php8.1-fpm php8.1-gd php8.1-intl php8.1-mysql php8.1-soap php8.1-xml php8.1-zip php8.1-memcache php8.1-memcached
+    apt -y install php8.1-mbstring php8.1-bcmath php8.1-cli php8.1-curl php8.1-fpm php8.1-gd php8.1-intl php8.1-mysql php8.1-soap php8.1-xml php8.1-zip php8.1-memcache php8.1-memcached php8.1-imagick
     update-rc.d php8.1-fpm defaults
     a2enconf php8.1-fpm
     a2dismod php8.1
@@ -309,6 +314,33 @@ if [ "$inst_81" -eq 1 ]; then
     press_enter "=== PHP 8.1 installed, press enter to continue ==============================================================================="
 fi
 
+if [ "$inst_82" -eq 1 ]; then
+    press_enter "=== Press enter to install PHP 8.2 ==============================================================================="
+    apt -y install php8.2-mbstring php8.2-bcmath php8.2-cli php8.2-curl php8.2-fpm php8.2-gd php8.2-intl php8.2-mysql php8.2-soap php8.2-xml php8.2-zip php8.2-memcache php8.2-memcached php8.2-imagick
+    update-rc.d php8.2-fpm defaults
+    a2enconf php8.2-fpm
+    a2dismod php8.2
+    apt-get -y remove libapache2-mod-php8.2
+    systemctl restart apache2
+    cp -r /etc/php/8.2/ /root/vst_install_backups/php8.2/
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-82.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-82.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-82.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.sh
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-82-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82-public.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-82-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82-public.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-82-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82-public.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82-public.sh
+    echo "=== Patching php.ini for php8.2"
+    wget -nv https://c.myvestacp.com/tools/patches/php8.1.patch -O /root/php8.1.patch
+    patch /etc/php/8.2/fpm/php.ini < /root/php8.1.patch
+    if [ $memory -gt 9999999 ]; then
+        sed -i "s|opcache.memory_consumption=512|opcache.memory_consumption=2048|g" /etc/php/8.2/fpm/php.ini
+    fi
+    service php8.2-fpm restart
+    press_enter "=== PHP 8.2 installed, press enter to continue ==============================================================================="
+fi
+
 
 apt update > /dev/null 2>&1
 apt upgrade -y > /dev/null 2>&1
@@ -324,6 +356,7 @@ if [ $debian_version -ge 10 ]; then
     a2dismod php7.4 > /dev/null 2>&1
     a2dismod php8.0 > /dev/null 2>&1
     a2dismod php8.1 > /dev/null 2>&1
+    a2dismod php8.2 > /dev/null 2>&1
     a2dismod mpm_prefork > /dev/null 2>&1
     a2enmod mpm_event > /dev/null 2>&1
     apt-get -y remove libapache2-mod-php* > /dev/null 2>&1

From 2db5a6404a023b2a117831f457ddb9dcaaf40aa3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 15:20:33 +0100
Subject: [PATCH 1788/2300] PHP 8.2 apache templates

---
 .../tools/apache-fpm-tpl/PHP-FPM-82-public.sh | 119 ++++++++++++++++++
 .../apache-fpm-tpl/PHP-FPM-82-public.stpl     |  36 ++++++
 .../apache-fpm-tpl/PHP-FPM-82-public.tpl      |  30 +++++
 .../tools/apache-fpm-tpl/PHP-FPM-82.sh        | 119 ++++++++++++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-82.stpl      |  36 ++++++
 .../tools/apache-fpm-tpl/PHP-FPM-82.tpl       |  30 +++++
 6 files changed, 370 insertions(+)
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.tpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.tpl

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.sh
new file mode 100644
index 00000000..a4deb752
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.sh
@@ -0,0 +1,119 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php8.2-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 360s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
+pool_file_82="/etc/php/8.2/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+if [ -f "$pool_file_81" ]; then
+    rm $pool_file_81
+    systemctl reset-failed php8.1-fpm
+    systemctl restart php8.1-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_82" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_82)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_82
+    systemctl reset-failed php8.2-fpm
+    systemctl restart php8.2-fpm
+fi
+if [ -f "/etc/php/8.2/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.2/fpm/pool.d/www.conf
+fi
+
+exit 0
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.stpl
new file mode 100644
index 00000000..6afebb6e
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.stpl
@@ -0,0 +1,36 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.2-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.tpl
new file mode 100644
index 00000000..03e67a3d
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.tpl
@@ -0,0 +1,30 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.2-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.sh
new file mode 100644
index 00000000..a4deb752
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.sh
@@ -0,0 +1,119 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php8.2-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 360s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
+pool_file_82="/etc/php/8.2/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+if [ -f "$pool_file_81" ]; then
+    rm $pool_file_81
+    systemctl reset-failed php8.1-fpm
+    systemctl restart php8.1-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_82" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_82)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_82
+    systemctl reset-failed php8.2-fpm
+    systemctl restart php8.2-fpm
+fi
+if [ -f "/etc/php/8.2/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.2/fpm/pool.d/www.conf
+fi
+
+exit 0
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.stpl
new file mode 100644
index 00000000..ed39fad4
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.stpl
@@ -0,0 +1,36 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.2-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.tpl
new file mode 100644
index 00000000..789ee9d3
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.tpl
@@ -0,0 +1,30 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.2-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+

From 91ac345b3e191739ea9f2f96b24a6356856b0006 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 15:26:38 +0100
Subject: [PATCH 1789/2300] default php 8.2 www.conf

---
 .../tools/default-pool.d/8.2/www.conf         | 484 ++++++++++++++++++
 1 file changed, 484 insertions(+)
 create mode 100644 src/deb/for-download/tools/default-pool.d/8.2/www.conf

diff --git a/src/deb/for-download/tools/default-pool.d/8.2/www.conf b/src/deb/for-download/tools/default-pool.d/8.2/www.conf
new file mode 100644
index 00000000..ffdd57b7
--- /dev/null
+++ b/src/deb/for-download/tools/default-pool.d/8.2/www.conf
@@ -0,0 +1,484 @@
+; Start a new pool named 'www'.
+; the variable $pool can be used in any directive and will be replaced by the
+; pool name ('www' here)
+[www]
+
+; Per pool prefix
+; It only applies on the following directives:
+; - 'access.log'
+; - 'slowlog'
+; - 'listen' (unixsocket)
+; - 'chroot'
+; - 'chdir'
+; - 'php_values'
+; - 'php_admin_values'
+; When not set, the global prefix (or /usr) applies instead.
+; Note: This directive can also be relative to the global prefix.
+; Default Value: none
+;prefix = /path/to/pools/$pool
+
+; Unix user/group of processes
+; Note: The user is mandatory. If the group is not set, the default user's group
+;       will be used.
+user = www-data
+group = www-data
+
+; The address on which to accept FastCGI requests.
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Note: This value is mandatory.
+listen = /run/php/php8.2-fpm.sock
+
+; Set listen(2) backlog.
+; Default Value: 511 (-1 on Linux, FreeBSD and OpenBSD)
+;listen.backlog = 511
+
+; Set permissions for unix socket, if one is used. In Linux, read/write
+; permissions must be set in order to allow connections from a web server. Many
+; BSD-derived systems allow connections regardless of permissions. The owner
+; and group can be specified either by name or by their numeric IDs.
+; Default Values: user and group are set as the running user
+;                 mode is set to 0660
+listen.owner = www-data
+listen.group = www-data
+;listen.mode = 0660
+; When POSIX Access Control Lists are supported you can set them using
+; these options, value is a comma separated list of user/group names.
+; When set, listen.owner and listen.group are ignored
+;listen.acl_users =
+;listen.acl_groups =
+
+; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
+; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
+; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
+; must be separated by a comma. If this value is left blank, connections will be
+; accepted from any ip address.
+; Default Value: any
+;listen.allowed_clients = 127.0.0.1
+
+; Set the associated the route table (FIB). FreeBSD only
+; Default Value: -1
+;listen.setfib = 1
+
+; Specify the nice(2) priority to apply to the pool processes (only if set)
+; The value can vary from -19 (highest priority) to 20 (lower priority)
+; Note: - It will only work if the FPM master process is launched as root
+;       - The pool processes will inherit the master process priority
+;         unless it specified otherwise
+; Default Value: no set
+; process.priority = -19
+
+; Set the process dumpable flag (PR_SET_DUMPABLE prctl for Linux or
+; PROC_TRACE_CTL procctl for FreeBSD) even if the process user
+; or group is different than the master process user. It allows to create process
+; core dump and ptrace the process for the pool user.
+; Default Value: no
+; process.dumpable = yes
+
+; Choose how the process manager will control the number of child processes.
+; Possible Values:
+;   static  - a fixed number (pm.max_children) of child processes;
+;   dynamic - the number of child processes are set dynamically based on the
+;             following directives. With this process management, there will be
+;             always at least 1 children.
+;             pm.max_children      - the maximum number of children that can
+;                                    be alive at the same time.
+;             pm.start_servers     - the number of children created on startup.
+;             pm.min_spare_servers - the minimum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is less than this
+;                                    number then some children will be created.
+;             pm.max_spare_servers - the maximum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is greater than this
+;                                    number then some children will be killed.
+;             pm.max_spawn_rate    - the maximum number of rate to spawn child
+;                                    processes at once.
+;  ondemand - no children are created at startup. Children will be forked when
+;             new requests will connect. The following parameter are used:
+;             pm.max_children           - the maximum number of children that
+;                                         can be alive at the same time.
+;             pm.process_idle_timeout   - The number of seconds after which
+;                                         an idle process will be killed.
+; Note: This value is mandatory.
+pm = dynamic
+
+; The number of child processes to be created when pm is set to 'static' and the
+; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
+; This value sets the limit on the number of simultaneous requests that will be
+; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
+; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
+; CGI. The below defaults are based on a server without much resources. Don't
+; forget to tweak pm.* to fit your needs.
+; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
+; Note: This value is mandatory.
+pm.max_children = 5
+
+; The number of child processes created on startup.
+; Note: Used only when pm is set to 'dynamic'
+; Default Value: (min_spare_servers + max_spare_servers) / 2
+pm.start_servers = 2
+
+; The desired minimum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.min_spare_servers = 1
+
+; The desired maximum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.max_spare_servers = 3
+
+; The number of rate to spawn child processes at once.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+; Default Value: 32
+;pm.max_spawn_rate = 32
+
+; The number of seconds after which an idle process will be killed.
+; Note: Used only when pm is set to 'ondemand'
+; Default Value: 10s
+;pm.process_idle_timeout = 10s;
+
+; The number of requests each child process should execute before respawning.
+; This can be useful to work around memory leaks in 3rd party libraries. For
+; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
+; Default Value: 0
+;pm.max_requests = 500
+
+; The URI to view the FPM status page. If this value is not set, no URI will be
+; recognized as a status page. It shows the following information:
+;   pool                 - the name of the pool;
+;   process manager      - static, dynamic or ondemand;
+;   start time           - the date and time FPM has started;
+;   start since          - number of seconds since FPM has started;
+;   accepted conn        - the number of request accepted by the pool;
+;   listen queue         - the number of request in the queue of pending
+;                          connections (see backlog in listen(2));
+;   max listen queue     - the maximum number of requests in the queue
+;                          of pending connections since FPM has started;
+;   listen queue len     - the size of the socket queue of pending connections;
+;   idle processes       - the number of idle processes;
+;   active processes     - the number of active processes;
+;   total processes      - the number of idle + active processes;
+;   max active processes - the maximum number of active processes since FPM
+;                          has started;
+;   max children reached - number of times, the process limit has been reached,
+;                          when pm tries to start more children (works only for
+;                          pm 'dynamic' and 'ondemand');
+; Value are updated in real time.
+; Example output:
+;   pool:                 www
+;   process manager:      static
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          62636
+;   accepted conn:        190460
+;   listen queue:         0
+;   max listen queue:     1
+;   listen queue len:     42
+;   idle processes:       4
+;   active processes:     11
+;   total processes:      15
+;   max active processes: 12
+;   max children reached: 0
+;
+; By default the status page output is formatted as text/plain. Passing either
+; 'html', 'xml' or 'json' in the query string will return the corresponding
+; output syntax. Example:
+;   http://www.foo.bar/status
+;   http://www.foo.bar/status?json
+;   http://www.foo.bar/status?html
+;   http://www.foo.bar/status?xml
+;
+; By default the status page only outputs short status. Passing 'full' in the
+; query string will also return status for each pool process.
+; Example:
+;   http://www.foo.bar/status?full
+;   http://www.foo.bar/status?json&full
+;   http://www.foo.bar/status?html&full
+;   http://www.foo.bar/status?xml&full
+; The Full status returns for each process:
+;   pid                  - the PID of the process;
+;   state                - the state of the process (Idle, Running, ...);
+;   start time           - the date and time the process has started;
+;   start since          - the number of seconds since the process has started;
+;   requests             - the number of requests the process has served;
+;   request duration     - the duration in µs of the requests;
+;   request method       - the request method (GET, POST, ...);
+;   request URI          - the request URI with the query string;
+;   content length       - the content length of the request (only with POST);
+;   user                 - the user (PHP_AUTH_USER) (or '-' if not set);
+;   script               - the main script called (or '-' if not set);
+;   last request cpu     - the %cpu the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because CPU calculation is done when the request
+;                          processing has terminated;
+;   last request memory  - the max amount of memory the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because memory calculation is done when the request
+;                          processing has terminated;
+; If the process is in Idle state, then informations are related to the
+; last request the process has served. Otherwise informations are related to
+; the current request being served.
+; Example output:
+;   ************************
+;   pid:                  31330
+;   state:                Running
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          63087
+;   requests:             12808
+;   request duration:     1250261
+;   request method:       GET
+;   request URI:          /test_mem.php?N=10000
+;   content length:       0
+;   user:                 -
+;   script:               /home/fat/web/docs/php/test_mem.php
+;   last request cpu:     0.00
+;   last request memory:  0
+;
+; Note: There is a real-time FPM status monitoring sample web page available
+;       It's available in: /usr/share/php/8.2/fpm/status.html
+;
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;pm.status_path = /status
+
+; The address on which to accept FastCGI status request. This creates a new
+; invisible pool that can handle requests independently. This is useful
+; if the main pool is busy with long running requests because it is still possible
+; to get the status before finishing the long running requests.
+;
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Default Value: value of the listen option
+;pm.status_listen = 127.0.0.1:9001
+
+; The ping URI to call the monitoring page of FPM. If this value is not set, no
+; URI will be recognized as a ping page. This could be used to test from outside
+; that FPM is alive and responding, or to
+; - create a graph of FPM availability (rrd or such);
+; - remove a server from a group if it is not responding (load balancing);
+; - trigger alerts for the operating team (24/7).
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;ping.path = /ping
+
+; This directive may be used to customize the response of a ping request. The
+; response is formatted as text/plain with a 200 response code.
+; Default Value: pong
+;ping.response = pong
+
+; The access log file
+; Default: not set
+;access.log = log/$pool.access.log
+
+; The access log format.
+; The following syntax is allowed
+;  %%: the '%' character
+;  %C: %CPU used by the request
+;      it can accept the following format:
+;      - %{user}C for user CPU only
+;      - %{system}C for system CPU only
+;      - %{total}C  for user + system CPU (default)
+;  %d: time taken to serve the request
+;      it can accept the following format:
+;      - %{seconds}d (default)
+;      - %{milliseconds}d
+;      - %{milli}d
+;      - %{microseconds}d
+;      - %{micro}d
+;  %e: an environment variable (same as $_ENV or $_SERVER)
+;      it must be associated with embraces to specify the name of the env
+;      variable. Some examples:
+;      - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
+;      - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
+;  %f: script filename
+;  %l: content-length of the request (for POST request only)
+;  %m: request method
+;  %M: peak of memory allocated by PHP
+;      it can accept the following format:
+;      - %{bytes}M (default)
+;      - %{kilobytes}M
+;      - %{kilo}M
+;      - %{megabytes}M
+;      - %{mega}M
+;  %n: pool name
+;  %o: output header
+;      it must be associated with embraces to specify the name of the header:
+;      - %{Content-Type}o
+;      - %{X-Powered-By}o
+;      - %{Transfert-Encoding}o
+;      - ....
+;  %p: PID of the child that serviced the request
+;  %P: PID of the parent of the child that serviced the request
+;  %q: the query string
+;  %Q: the '?' character if query string exists
+;  %r: the request URI (without the query string, see %q and %Q)
+;  %R: remote IP address
+;  %s: status (response code)
+;  %t: server time the request was received
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsulated in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %T: time the log has been written (the request has finished)
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsulated in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %u: remote user
+;
+; Default: "%R - %u %t \"%m %r\" %s"
+;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{milli}d %{kilo}M %C%%"
+
+; A list of request_uri values which should be filtered from the access log.
+;
+; As a security precuation, this setting will be ignored if:
+;     - the request method is not GET or HEAD; or
+;     - there is a request body; or
+;     - there are query parameters; or
+;     - the response code is outwith the successful range of 200 to 299
+;
+; Note: The paths are matched against the output of the access.format tag "%r".
+;       On common configurations, this may look more like SCRIPT_NAME than the
+;       expected pre-rewrite URI.
+;
+; Default Value: not set
+;access.suppress_path[] = /ping
+;access.suppress_path[] = /health_check.php
+
+; The log file for slow requests
+; Default Value: not set
+; Note: slowlog is mandatory if request_slowlog_timeout is set
+;slowlog = log/$pool.log.slow
+
+; The timeout for serving a single request after which a PHP backtrace will be
+; dumped to the 'slowlog' file. A value of '0s' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_slowlog_timeout = 0
+
+; Depth of slow log stack trace.
+; Default Value: 20
+;request_slowlog_trace_depth = 20
+
+; The timeout for serving a single request after which the worker process will
+; be killed. This option should be used when the 'max_execution_time' ini option
+; does not stop script execution for some reason. A value of '0' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_terminate_timeout = 0
+
+; The timeout set by 'request_terminate_timeout' ini option is not engaged after
+; application calls 'fastcgi_finish_request' or when application has finished and
+; shutdown functions are being called (registered via register_shutdown_function).
+; This option will enable timeout limit to be applied unconditionally
+; even in such cases.
+; Default Value: no
+;request_terminate_timeout_track_finished = no
+
+; Set open file descriptor rlimit.
+; Default Value: system defined value
+;rlimit_files = 1024
+
+; Set max core size rlimit.
+; Possible Values: 'unlimited' or an integer greater or equal to 0
+; Default Value: system defined value
+;rlimit_core = 0
+
+; Chroot to this directory at the start. This value must be defined as an
+; absolute path. When this value is not set, chroot is not used.
+; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
+; of its subdirectories. If the pool prefix is not set, the global prefix
+; will be used instead.
+; Note: chrooting is a great security feature and should be used whenever
+;       possible. However, all PHP paths will be relative to the chroot
+;       (error_log, sessions.save_path, ...).
+; Default Value: not set
+;chroot =
+
+; Chdir to this directory at the start.
+; Note: relative path can be used.
+; Default Value: current directory or / when chroot
+;chdir = /var/www
+
+; Redirect worker stdout and stderr into main error log. If not set, stdout and
+; stderr will be redirected to /dev/null according to FastCGI specs.
+; Note: on highloaded environment, this can cause some delay in the page
+; process time (several ms).
+; Default Value: no
+;catch_workers_output = yes
+
+; Decorate worker output with prefix and suffix containing information about
+; the child that writes to the log and if stdout or stderr is used as well as
+; log level and time. This options is used only if catch_workers_output is yes.
+; Settings to "no" will output data as written to the stdout or stderr.
+; Default value: yes
+;decorate_workers_output = no
+
+; Clear environment in FPM workers
+; Prevents arbitrary environment variables from reaching FPM worker processes
+; by clearing the environment in workers before env vars specified in this
+; pool configuration are added.
+; Setting to "no" will make all environment variables available to PHP code
+; via getenv(), $_ENV and $_SERVER.
+; Default Value: yes
+;clear_env = no
+
+; Limits the extensions of the main script FPM will allow to parse. This can
+; prevent configuration mistakes on the web server side. You should only limit
+; FPM to .php extensions to prevent malicious users to use other extensions to
+; execute php code.
+; Note: set an empty value to allow all extensions.
+; Default Value: .php
+;security.limit_extensions = .php .php3 .php4 .php5 .php7
+
+; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
+; the current environment.
+; Default Value: clean env
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /tmp
+;env[TMPDIR] = /tmp
+;env[TEMP] = /tmp
+
+; Additional php.ini defines, specific to this pool of workers. These settings
+; overwrite the values previously defined in the php.ini. The directives are the
+; same as the PHP SAPI:
+;   php_value/php_flag             - you can set classic ini defines which can
+;                                    be overwritten from PHP call 'ini_set'.
+;   php_admin_value/php_admin_flag - these directives won't be overwritten by
+;                                     PHP call 'ini_set'
+; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
+
+; Defining 'extension' will load the corresponding shared extension from
+; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
+; overwrite previously defined php.ini values, but will append the new value
+; instead.
+
+; Note: path INI options can be relative and will be expanded with the prefix
+; (pool, global or /usr)
+
+; Default Value: nothing is defined by default except the values in php.ini and
+;                specified at startup with the -d argument
+;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
+;php_flag[display_errors] = off
+;php_admin_value[error_log] = /var/log/fpm-php.www.log
+;php_admin_flag[log_errors] = on
+;php_admin_value[memory_limit] = 32M

From 66162375fd1b6b84864a4b6744babd8c4d05ad43 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 16:23:15 +0100
Subject: [PATCH 1790/2300] Minor fix for install-rocket-nginx.sh

---
 .../tools/rocket-nginx-templates/wprocket-force-htpps.stpl  | 5 +++--
 .../tools/rocket-nginx-templates/wprocket-force-htpps.tpl   | 1 -
 .../tools/rocket-nginx-templates/wprocket-hosting.stpl      | 5 ++++-
 .../tools/rocket-nginx-templates/wprocket-hosting.tpl       | 6 ++++--
 4 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl
index 05ba994a..f82368cb 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl
@@ -6,11 +6,13 @@ server {
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
+    root           %sdocroot%;
+    # Rocket-Nginx configuration
+    include rocket-nginx/conf.d/default.conf;
 
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
-            root           %sdocroot%;
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
@@ -37,5 +39,4 @@ server {
 
     include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
     include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
-    include rocket-nginx/conf.d/default.conf;
 }
diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.tpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.tpl
index 0c877632..851ac0dc 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.tpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.tpl
@@ -5,5 +5,4 @@ server {
         rewrite ^(.*) https://%domain_idn%$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
-include rocket-nginx/conf.d/default.conf;
 }
diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
index 2610efc4..51c4fffc 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
@@ -6,10 +6,13 @@ server {
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
+    root           %sdocroot%;
+    # Rocket-Nginx configuration
+    include rocket-nginx/conf.d/default.conf;
+
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
-            root           %sdocroot%;
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.tpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.tpl
index 521348ae..8840c051 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.tpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.tpl
@@ -3,10 +3,13 @@ server {
     server_name %domain_idn% %alias_idn%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
+    root           %docroot%;
+    # Rocket-Nginx configuration
+    include rocket-nginx/conf.d/default.conf;
+
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
-            root           %docroot%;
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
@@ -32,5 +35,4 @@ server {
     disable_symlinks if_not_owner from=%docroot%;
 
     include %home%/%user%/conf/web/nginx.%domain%.conf*;
-    include rocket-nginx/conf.d/default.conf;
 }

From 290600dfcd3bef1aa9edfb5ec8e9f4d9337073ec Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 16:27:52 +0100
Subject: [PATCH 1791/2300] Minor fix for install-rocket-nginx.sh

---
 .../tools/rocket-nginx-templates/wprocket-force-htpps.stpl       | 1 +
 .../tools/rocket-nginx-templates/wprocket-hosting.stpl           | 1 +
 2 files changed, 2 insertions(+)

diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl
index f82368cb..6e1be1fd 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl
@@ -13,6 +13,7 @@ server {
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;
diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
index 51c4fffc..c216d6d8 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
@@ -13,6 +13,7 @@ server {
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;

From 1d67c6ae542de4680f545c1a1abbbc7c1019e80d Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 16:31:02 +0100
Subject: [PATCH 1792/2300] Update wprocket-hosting.tpl

---
 .../tools/rocket-nginx-templates/wprocket-hosting.tpl            | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.tpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.tpl
index 8840c051..3b162038 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.tpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.tpl
@@ -10,6 +10,7 @@ server {
     location / {
         proxy_pass      http://%ip%:%web_port%;
         location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
             access_log     /var/log/%web_system%/domains/%domain%.log combined;
             access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
             expires        max;

From 4bc0ecc46eeeff619cf4075182a511a915e881e1 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 16:34:10 +0100
Subject: [PATCH 1793/2300] Update wprocket-hosting.stpl

---
 .../tools/rocket-nginx-templates/wprocket-hosting.stpl           | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
index c216d6d8..d7d6905f 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
@@ -39,5 +39,4 @@ server {
     disable_symlinks if_not_owner from=%docroot%;
 
     include %home%/%user%/conf/web/snginx.%domain%.conf*;
-    include rocket-nginx/conf.d/default.conf;
 }

From ac96d9f9b376fe3309e7c17b60c4e8601d5cecee Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 17:48:45 +0100
Subject: [PATCH 1794/2300] Fix filename

---
 .../{wprocket-force-htpps.stpl => wprocket-force-https.stpl}      | 0
 .../{wprocket-force-htpps.tpl => wprocket-force-https.tpl}        | 0
 2 files changed, 0 insertions(+), 0 deletions(-)
 rename src/deb/for-download/tools/rocket-nginx-templates/{wprocket-force-htpps.stpl => wprocket-force-https.stpl} (100%)
 rename src/deb/for-download/tools/rocket-nginx-templates/{wprocket-force-htpps.tpl => wprocket-force-https.tpl} (100%)

diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-https.stpl
similarity index 100%
rename from src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.stpl
rename to src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-https.stpl
diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.tpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-https.tpl
similarity index 100%
rename from src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-htpps.tpl
rename to src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-https.tpl

From e7543afbd329bd16c3c787037b7fab569d846043 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 17:54:25 +0100
Subject: [PATCH 1795/2300] Update install-rocket-nginx.sh

---
 src/deb/for-download/tools/install-rocket-nginx.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/for-download/tools/install-rocket-nginx.sh b/src/deb/for-download/tools/install-rocket-nginx.sh
index 0fb5d86d..3e298c7d 100644
--- a/src/deb/for-download/tools/install-rocket-nginx.sh
+++ b/src/deb/for-download/tools/install-rocket-nginx.sh
@@ -17,7 +17,7 @@ fi
 cd rocket-nginx
 cp rocket-nginx.ini.disabled rocket-nginx.ini
 php rocket-parser.php
-wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-htpps.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-htpps.tpl
-wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-htpps.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-htpps.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-https.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-https.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-https.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-https.stpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-hosting.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-hosting.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-hosting.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-hosting.stpl

From 08146520a0d43c44b863dacdb27a4295bac3d487 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 18:01:56 +0100
Subject: [PATCH 1796/2300] default user/pass for private-hosting.tpl

---
 install/vst-install-debian.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index b5fda479..650fa241 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1071,6 +1071,10 @@ if [ "$nginx" = 'yes' ]; then
     cp -f $vestacp/nginx/phppgadmin.inc /etc/nginx/conf.d/
     cp -f $vestacp/nginx/webmail.inc /etc/nginx/conf.d/
     cp -f $vestacp/logrotate/nginx /etc/logrotate.d/
+    
+    # default user/pass for private-hosting.tpl: private / folder
+    echo 'private:$apr1$0MYnchM5$yVi/OTfp7o3lGNst/a8.90' > /etc/nginx/.htpasswd
+    
     echo > /etc/nginx/conf.d/vesta.conf
     mkdir -p /var/log/nginx/domains
     #update-rc.d nginx defaults

From f5cc5d75c288b6455e9b1e69769f449484d4b844 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 20:10:19 +0100
Subject: [PATCH 1797/2300] Update PHP-FPM-74.sh

---
 install/debian/11/templates/web/apache2/PHP-FPM-74.sh | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74.sh b/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
index 0ff7b21b..e72bb003 100755
--- a/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off

From 13b310d115fa570ed039203b9dc5ca89a7ca68aa Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 20:11:12 +0100
Subject: [PATCH 1798/2300] Update PHP-FPM-74-public.sh

---
 .../11/templates/web/apache2/PHP-FPM-74-public.sh      | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
index 0ff7b21b..e72bb003 100755
--- a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off

From 60dbae21b15a216e7feecaf634fca83c0fa7e512 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 20:12:40 +0100
Subject: [PATCH 1799/2300] Update PHP-FPM-73.sh

---
 install/debian/10/templates/web/apache2/PHP-FPM-73.sh | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73.sh b/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
index 57b10863..a2fea927 100755
--- a/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off

From 780f63732517846b4575b9bfdfe79c399b224e89 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 20:13:31 +0100
Subject: [PATCH 1800/2300] Update PHP-FPM-73-public.sh

---
 .../10/templates/web/apache2/PHP-FPM-73-public.sh      | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh
index 57b10863..a2fea927 100755
--- a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off

From bfd822092c00efe3bed25028cad32bdcf51b0e21 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 20:22:44 +0100
Subject: [PATCH 1801/2300] Creating /etc/nginx/.htpasswd if it does not exist

---
 src/deb/vesta/postinst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index cc798224..975d12cd 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -31,6 +31,11 @@ if [ "$release" -eq 11 ]; then
     sed -i "s/yescrypt/sha512/g" /etc/pam.d/common-password
 fi
 
+# Creating /etc/nginx/.htpasswd if it does not exist
+if [ ! -f "/etc/nginx/.htpasswd" ]; then
+    echo 'private:$apr1$0MYnchM5$yVi/OTfp7o3lGNst/a8.90' > /etc/nginx/.htpasswd
+fi
+
 # Fixing Gmail hosts_try_fastopen in Exim4
 if [ "$release" -eq 11 ]; then
 	if [ -f "/etc/exim4/exim4.conf.template" ]; then 

From 151159f9d307d16e66183704e67339e76a2665c1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 21:51:19 +0100
Subject: [PATCH 1802/2300] fpm pool.d conf tweak

---
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh    | 10 +++++-----
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh    | 10 +++++-----
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh    | 10 +++++-----
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh    | 10 +++++-----
 .../tools/apache-fpm-tpl/PHP-FPM-73-public.sh          | 10 +++++-----
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh    | 10 +++++-----
 .../tools/apache-fpm-tpl/PHP-FPM-74-public.sh          | 10 +++++-----
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh    | 10 +++++-----
 .../tools/apache-fpm-tpl/PHP-FPM-80-public.sh          | 10 +++++-----
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh    | 10 +++++-----
 .../tools/apache-fpm-tpl/PHP-FPM-81-public.sh          | 10 +++++-----
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-81.sh    | 10 +++++-----
 12 files changed, 60 insertions(+), 60 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh
index b9137821..081aaf19 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh
index 0e742ad8..10c58c57 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh
index 6110e898..90230674 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh
index 6541a0dc..cc76256e 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.sh
index 57b10863..a2fea927 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh
index 57b10863..a2fea927 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh
index 0ff7b21b..e72bb003 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
index 0ff7b21b..e72bb003 100755
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.sh
index 343392c2..a4842ac9 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh
index 343392c2..a4842ac9 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.sh
index 67c8ccfb..4b4f9d78 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.sh
index 67c8ccfb..4b4f9d78 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.sh
@@ -18,7 +18,7 @@ group = $1
 
 pm = ondemand
 pm.max_children = 8
-request_terminate_timeout = 90s
+request_terminate_timeout = 360s
 pm.max_requests = 4000
 pm.process_idle_timeout = 10s
 pm.status_path = /status
@@ -26,10 +26,10 @@ pm.status_path = /status
 php_admin_value[upload_tmp_dir] = /home/$1/tmp
 php_admin_value[session.save_path] = /home/$1/tmp
 php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
-php_admin_value[upload_max_filesize] = 80M
-php_admin_value[max_execution_time] = 30
-php_admin_value[post_max_size] = 80M
-php_admin_value[memory_limit] = 256M
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
 php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
 php_admin_flag[mysql.allow_persistent] = off
 php_admin_flag[safe_mode] = off

From e8b9545a9d439682a7730eb50f2ce42e025a49fc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 21:56:18 +0100
Subject: [PATCH 1803/2300] CRLF to LF EOL

---
 .../wprocket-force-https.stpl                 | 86 +++++++++----------
 .../wprocket-hosting.stpl                     | 84 +++++++++---------
 2 files changed, 85 insertions(+), 85 deletions(-)

diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-https.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-https.stpl
index 6e1be1fd..58f1e9fa 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-https.stpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-https.stpl
@@ -1,43 +1,43 @@
-server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
-    server_name %domain_idn% %alias_idn%;
-
-    ssl_certificate      %ssl_pem%;
-    ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
-
-    root           %sdocroot%;
-    # Rocket-Nginx configuration
-    include rocket-nginx/conf.d/default.conf;
-
-    location / {
-        proxy_pass      https://%ip%:%web_ssl_port%;
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            root           %sdocroot%;
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-            # try_files      $uri @fallback;
-        }
-    }
-
-    location /error/ {
-        alias   %home%/%user%/web/%domain%/document_errors/;
-    }
-
-    location @fallback {
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location ~ /\.ht    {return 404;}
-    location ~ /\.env   {return 404;}
-    location ~ /\.svn/  {return 404;}
-    location ~ /\.git/  {return 404;}
-    location ~ /\.hg/   {return 404;}
-    location ~ /\.bzr/  {return 404;}
-
-    disable_symlinks if_not_owner from=%docroot%;
-
-    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
-    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
-}
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    root           %sdocroot%;
+    # Rocket-Nginx configuration
+    include rocket-nginx/conf.d/default.conf;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
index d7d6905f..d4eaeed8 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-hosting.stpl
@@ -1,42 +1,42 @@
-server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
-    server_name %domain_idn% %alias_idn%;
-
-    ssl_certificate      %ssl_pem%;
-    ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
-
-    root           %sdocroot%;
-    # Rocket-Nginx configuration
-    include rocket-nginx/conf.d/default.conf;
-
-    location / {
-        proxy_pass      https://%ip%:%web_ssl_port%;
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            root           %sdocroot%;
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-            # try_files      $uri @fallback;
-        }
-    }
-
-    location /error/ {
-        alias   %home%/%user%/web/%domain%/document_errors/;
-    }
-
-    location @fallback {
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location ~ /\.ht    {return 404;}
-    location ~ /\.env   {return 404;}
-    location ~ /\.svn/  {return 404;}
-    location ~ /\.git/  {return 404;}
-    location ~ /\.hg/   {return 404;}
-    location ~ /\.bzr/  {return 404;}
-
-    disable_symlinks if_not_owner from=%docroot%;
-
-    include %home%/%user%/conf/web/snginx.%domain%.conf*;
-}
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    root           %sdocroot%;
+    # Rocket-Nginx configuration
+    include rocket-nginx/conf.d/default.conf;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}

From fa94c7a2104e0fde015c4764c75ccc818419b491 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 23:24:37 +0100
Subject: [PATCH 1804/2300] Update Changelog.md

---
 Changelog.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index b7e52d49..887ec04f 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,10 @@
+Version 0.9.8-26-59 [01-Feb-2023]
+==================================================
+* Support for PHP 8.2
+* New script: v-move-folder-and-make-symlink
+* New script: v-lock-wordpress (to prevent PHP malware) and v-unlock-wordpress
+* Many minor bugfixes
+
 Version 0.9.8-26-58 [12-Jul-2022]
 ==================================================
 * [Security] hash_equals() in /reset/mail/ (credits to @divinity76 )

From 0e9a5304a5a1be6ce7f3befc43980830e5598ffd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 23:34:10 +0100
Subject: [PATCH 1805/2300] Installing WordPress to user_domain_com database

---
 bin/v-install-wordpress | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 91bbdf0a..0e24f847 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -49,7 +49,7 @@ is_object_unsuspended 'user' 'USER' "$user"
 source /usr/local/vesta/func/handle_parameters.sh
 
 if [ -z "$database" ]; then
-    database="wp"
+    database=$(echo "$domain" | sed 's#\.#_#g')
 fi
 
 if [ -z "$email" ]; then

From 1325a73661b12a2fd2cb1572de6b10efdfd8e1a9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 23:43:47 +0100
Subject: [PATCH 1806/2300] Update Changelog.md

---
 Changelog.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Changelog.md b/Changelog.md
index 887ec04f..f49b75e4 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -3,6 +3,7 @@ Version 0.9.8-26-59 [01-Feb-2023]
 * Support for PHP 8.2
 * New script: v-move-folder-and-make-symlink
 * New script: v-lock-wordpress (to prevent PHP malware) and v-unlock-wordpress
+* v-install-wordpress: Installing WordPress to user_domain_com database instead of installing to user_wp database
 * Many minor bugfixes
 
 Version 0.9.8-26-58 [12-Jul-2022]

From 0a17e3759b5d4cc77d2b71e92374eb65300308d2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 31 Jan 2023 23:49:12 +0100
Subject: [PATCH 1807/2300] Version 0.9.8-26-59

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 5a056019..44148247 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-58
+vesta-0.9.8-26-59

From 8eb0b19a0bf78c5e2b0d0c4eb2fe1843c573267a Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 1 Feb 2023 19:37:14 +0100
Subject: [PATCH 1808/2300] Automatic installation of rocket-nginx for a given
 domain

---
 bin/v-activate-rocket-nginx.sh | 116 +++++++++++++++++++++++++++++++++
 1 file changed, 116 insertions(+)
 create mode 100644 bin/v-activate-rocket-nginx.sh

diff --git a/bin/v-activate-rocket-nginx.sh b/bin/v-activate-rocket-nginx.sh
new file mode 100644
index 00000000..36c6d768
--- /dev/null
+++ b/bin/v-activate-rocket-nginx.sh
@@ -0,0 +1,116 @@
+#!/bin/bash
+# info: Install rocket-nginx extension for certain domain
+# options: DOMAIN 
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Argument definition
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/domain.sh
+
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+if [ ! -d "/home/$user" ]; then
+    echo "User doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    echo "Domain doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/etc/nginx/rocket-nginx" ]; then
+    echo "rocket-nginx is not installed";
+    echo "Do you want to install it now (y/n)?"
+    read answer
+    if [ "$answer" == "y" ]; then
+        echo "Installing rocket-nginx..."
+        curl -sL https://c.myvestacp.com/tools/install-rocket-nginx.sh | bash -
+    else
+        echo "Exiting script"
+        exit 1;
+    fi
+fi
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# Chaning Proxy Template
+echo "Do you want to force-https in your Proxy Template or not (y/n):"
+read answer
+if [ "$answer" == "y" ]; then
+    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$user" "$domain" "wprocket-force-https"
+else
+    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$user" "$domain" "wprocket-hosting"
+fi
+echo "Proxy Template is ready"
+
+# Checking if the website is WordPress
+if [ ! -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
+    echo 'Please install WordPress first.'
+    exit 1;
+fi
+
+# Disabling wp-cron in wp-config.php
+echo "Disabling WP-Cron in your wp-config.php..."
+string="define( 'DISABLE_WP_CRON', true );"
+line="define( 'DB_COLLATE', '' );"
+file="/home/$user/web/$domain/public_html/wp-config.php"
+sed -i "/$line/a $string" $file
+
+# Adding cron job
+echo "Adding cron job..."
+
+TPL=$(/usr/local/vesta/bin/v-list-web-domain $user $domain shell | grep 'TEMPLATE:' | awk '{print $2}')
+if [[ $TPL == "PHP-FPM-"* ]]; then
+    fpm_tpl_ver=${TPL:8:2}
+    fpm_ver="${TPL:8:1}.${TPL:9:1}"
+fi
+
+touch /home/$user/web/$domain/cron.log
+chown $user:$user /home/$user/web/$domain/cron.log
+
+case $fpm_ver in
+    5.6 | 7.0 | 7.1 | 7.2 | 7.3 | 7.4 | 8.0 | 8.1 | 8.2) 
+    /usr/local/vesta/bin/v-add-cron-job "$user" "*/15" "*" "*" "*" "*" "cd /home/$user/web/$domain/public_html; /usr/bin/php$fpm_ver wp-cron.php >/home/$user/web/$domain/cron.log 2>&1"
+    ;;
+esac
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+echo "Installation is completed."
+
+exit

From c263c3322c5cf0c493bbfedd6361243b06975948 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 1 Feb 2023 19:40:01 +0100
Subject: [PATCH 1809/2300] Update v-activate-rocket-nginx.sh

---
 bin/v-activate-rocket-nginx.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-activate-rocket-nginx.sh b/bin/v-activate-rocket-nginx.sh
index 36c6d768..93deab0a 100644
--- a/bin/v-activate-rocket-nginx.sh
+++ b/bin/v-activate-rocket-nginx.sh
@@ -67,7 +67,7 @@ fi
 #                       Action                             #
 #----------------------------------------------------------#
 
-# Chaning Proxy Template
+# Changing Proxy Template
 echo "Do you want to force-https in your Proxy Template or not (y/n):"
 read answer
 if [ "$answer" == "y" ]; then

From 2d8fc21ba7565b8e6fe4834cbace520be6e82c9c Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 1 Feb 2023 20:07:07 +0100
Subject: [PATCH 1810/2300] Update v-activate-rocket-nginx.sh

---
 bin/v-activate-rocket-nginx.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-activate-rocket-nginx.sh b/bin/v-activate-rocket-nginx.sh
index 93deab0a..b2f7b682 100644
--- a/bin/v-activate-rocket-nginx.sh
+++ b/bin/v-activate-rocket-nginx.sh
@@ -112,5 +112,7 @@ esac
 #                       Vesta                              #
 #----------------------------------------------------------#
 echo "Installation is completed."
+echo "Checking RESPONSE HEADERS (You should see x-rocket-nginx-serving-static if the WP Rocket plugin is activated):"
+curl -I https://$domain
 
 exit

From 1c33f9cfd25e2cbf448d0913866200a7ee8f387b Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 2 Feb 2023 11:37:42 +0100
Subject: [PATCH 1811/2300] Update v-activate-rocket-nginx.sh

---
 bin/v-activate-rocket-nginx.sh | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/bin/v-activate-rocket-nginx.sh b/bin/v-activate-rocket-nginx.sh
index b2f7b682..1b8561c3 100644
--- a/bin/v-activate-rocket-nginx.sh
+++ b/bin/v-activate-rocket-nginx.sh
@@ -49,6 +49,11 @@ if [ ! -d "/home/$user/web/$domain/public_html" ]; then
     exit 1;
 fi
 
+if [ ! -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
+    echo 'Please install WordPress first.'
+    exit 1;
+fi
+
 if [ ! -d "/etc/nginx/rocket-nginx" ]; then
     echo "rocket-nginx is not installed";
     echo "Do you want to install it now (y/n)?"
@@ -77,12 +82,6 @@ else
 fi
 echo "Proxy Template is ready"
 
-# Checking if the website is WordPress
-if [ ! -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
-    echo 'Please install WordPress first.'
-    exit 1;
-fi
-
 # Disabling wp-cron in wp-config.php
 echo "Disabling WP-Cron in your wp-config.php..."
 string="define( 'DISABLE_WP_CRON', true );"

From d940389c153cb476df3c54ad7bec91a9f215708a Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 2 Feb 2023 13:44:29 +0100
Subject: [PATCH 1812/2300] Script to determine which PHP version a given
 domain is using

---
 bin/v-get-php-version-of-domain.sh | 69 ++++++++++++++++++++++++++++++
 1 file changed, 69 insertions(+)
 create mode 100644 bin/v-get-php-version-of-domain.sh

diff --git a/bin/v-get-php-version-of-domain.sh b/bin/v-get-php-version-of-domain.sh
new file mode 100644
index 00000000..bd0e7a51
--- /dev/null
+++ b/bin/v-get-php-version-of-domain.sh
@@ -0,0 +1,69 @@
+#!/bin/bash
+# info: Check PHP version used for certain domain
+# options: DOMAIN 
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Argument definition
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/domain.sh
+
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+if [ ! -d "/home/$user" ]; then
+    echo "User doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    echo "Domain doesn't exist";
+    exit 1;
+fi
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+
+TPL=$(/usr/local/vesta/bin/v-list-web-domain $user $domain shell | grep 'TEMPLATE:' | awk '{print $2}')
+if [[ $TPL == "PHP-FPM-"* ]]; then
+    fpm_tpl_ver=${TPL:8:2}
+    fpm_ver="${TPL:8:1}.${TPL:9:1}"
+fi
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+echo "PHP-FPM version running on given domain is: $fpm_ver"
+
+exit

From 15e5f3bc81d9e36d8e63c920eb9636d241a7c250 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 2 Feb 2023 13:49:00 +0100
Subject: [PATCH 1813/2300] Rename v-get-php-version-of-domain.sh to
 v-get-php-version-of-domain

---
 ...v-get-php-version-of-domain.sh => v-get-php-version-of-domain} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename bin/{v-get-php-version-of-domain.sh => v-get-php-version-of-domain} (100%)

diff --git a/bin/v-get-php-version-of-domain.sh b/bin/v-get-php-version-of-domain
similarity index 100%
rename from bin/v-get-php-version-of-domain.sh
rename to bin/v-get-php-version-of-domain

From ab0b8c53c4c028a5e76f79d96b47ef761106b6aa Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 2 Feb 2023 14:28:37 +0100
Subject: [PATCH 1814/2300] Rename v-activate-rocket-nginx.sh to
 v-activate-rocket-nginx

---
 bin/{v-activate-rocket-nginx.sh => v-activate-rocket-nginx} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename bin/{v-activate-rocket-nginx.sh => v-activate-rocket-nginx} (100%)

diff --git a/bin/v-activate-rocket-nginx.sh b/bin/v-activate-rocket-nginx
similarity index 100%
rename from bin/v-activate-rocket-nginx.sh
rename to bin/v-activate-rocket-nginx

From 1ecd2277851cdf6813658640b08b2ff2466edcce Mon Sep 17 00:00:00 2001
From: Umut Korkmaz <umutkorkmaaz@gmail.com>
Date: Sat, 4 Feb 2023 01:58:49 +0300
Subject: [PATCH 1815/2300] Untranslated fields translated, typos fixed

---
 web/inc/i18n/tr.php | 151 ++++++++++++++++++++++----------------------
 1 file changed, 76 insertions(+), 75 deletions(-)

diff --git a/web/inc/i18n/tr.php b/web/inc/i18n/tr.php
index a7fadc43..7aac0098 100644
--- a/web/inc/i18n/tr.php
+++ b/web/inc/i18n/tr.php
@@ -3,6 +3,7 @@
  * Vesta turkish language file
  * 2014.11.01 Özgür Bozkurt (info@ozgurbozkurt.com/ozgur@forum.vestacp.com)
  * 2016.06.27 Selim Can CABA (info@selimcancaba.com)
+ * 2023.02.04 Umut Korkmaz (umutkorkmaaz@gmail.com)
  */
 
 $LANG['tr'] = array(
@@ -26,22 +27,22 @@ $LANG['tr'] = array(
     'CRON'  => 'CRON',
     'BACKUP'  => 'YEDEK',
 
-    'LOGIN'  => 'LOGIN',
-    'RESET PASSWORD'  => 'RESET PASSWORD',
-    'SEARCH'  => 'SEARCH',
-    'PACKAGE'  => 'PACKAGE',
+    'LOGIN'  => 'GİRİŞ',
+    'RESET PASSWORD'  => 'PAROLAYI SIFIRLA',
+    'SEARCH'  => 'ARA',
+    'PACKAGE'  => 'PAKET',
     'RRD'  => 'RRD',
-    'STATS'  => 'STATS',
+    'STATS'  => 'ISTATISTIKLER',
     'LOG'  => 'LOG',
-    'UPDATES'  => 'UPDATES',
-    'FIREWALL'  => 'FIREWALL',
-    'SERVER'  => 'SERVER',
-    'MEMORY'  => 'MEMORY',
+    'UPDATES'  => 'GÜNCELLEMELER',
+    'FIREWALL'  => 'GÜVENLİK DUVARI',
+    'SERVER'  => 'SUNUCU',
+    'MEMORY'  => 'BELLEK',
     'DISK'  => 'DISK',
-    'NETWORK'  => 'NETWORK',
+    'NETWORK'  => 'AĞ',
     'Web Log Manager'  => 'Web Log Manager',
 
-    'no notifications'  => 'no notifications',
+    'no notifications'  => 'bildirim yok',
 
     'Add User'  => 'Kullanıcı Ekle',
     'Add Domain'  => 'Alan Adı Ekle',
@@ -84,7 +85,7 @@ $LANG['tr'] = array(
     'unsuspend'  => 'devam ettir',
     'delete'  => 'sil',
     'show per user'  => 'kullanıcı başına göster',
-    'login as'  => 'giriş yapıldı:',
+    'login as'  => 'giriş yap:',
     'logout'  => 'oturumu kapat',
     'edit'  => 'düzenle',
     'open webstats'  => 'webstats aç',
@@ -110,7 +111,7 @@ $LANG['tr'] = array(
     'disable autoupdate' => 'otomatik güncellemeyi pasif hale getir',
     'turn on notifications' => 'duyuruları aç',
     'turn off notifications' => 'duyuruları kapat',
-    'configure' => 'configure',
+    'configure' => 'yapılandır',
 
     'Adding User'  => 'Kullanıcı Ekleme',
     'Editing User'  => 'Kullanıcı Düzenleme',
@@ -186,22 +187,22 @@ $LANG['tr'] = array(
     'Mail Accounts'  => 'Posta Hesapları',
     'Cron Jobs'  => 'Zamanlanmış Görevler',
     'SSH Access'  => 'SSH Erişimi',
-    'IP Address'  => 'IP Address',
+    'IP Address'  => 'IP Adresi',
     'IP Addresses'  => 'IP Adresleri',
     'Backups'  => 'Yedekler',
     'Backup System'  => 'Yedekleme Sistemi',
     'backup exclusions' => 'yedekleme istisnaları',
     'template'  => 'template',
-    'SSL Support'  => 'SSL Support',
-    'SSL Home Directory'  => 'SSL Home',
-    'Lets Encrypt Support'  => 'Lets Encrypt Support',
+    'SSL Support'  => 'SSL Desteği',
+    'SSL Home Directory'  => 'SSL Dizini',
+    'Lets Encrypt Support'  => 'Lets Encrypt Desteği',
     'Lets Encrypt'  => 'Lets Encrypt',
-    'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
+    'Your certificate will be automatically issued in 5 minutes' => 'Sertifikanız 5 dakika içinde otomatik olarak verilecektir.',
     'Proxy Support'  => 'Proxy Desteği',
     'Proxy Extensions'  => 'Proxy Uzantıları',
     'Web Statistics'  => 'Web İstatistikleri',
     'Additional FTP Account'  => 'İlave FTP Hesabı',
-    'Path'  => 'Path',
+    'Path'  => 'Ana dizin',
     'SOA'  => 'SOA',
     'TTL'  => 'TTL',
     'Expire'  => 'Sonlanış',
@@ -216,19 +217,19 @@ $LANG['tr'] = array(
     'Autoreply'  => 'Otomatik Cevap',
     'Forward to'  => 'Şuraya yönlendir',
     'Do not store forwarded mail' => 'Yönlendirilmiş postaları depolama',
-    'IMAP hostname'  => 'IMAP hostname',
+    'IMAP hostname'  => 'IMAP sunucusu',
     'IMAP port'  => 'IMAP port',
-    'IMAP security'  => 'IMAP security',
-    'IMAP auth method'  => 'IMAP auth method',
-    'SMTP hostname'  => 'SMTP hostname',
+    'IMAP security'  => 'IMAP güvenliği',
+    'IMAP auth method'  => 'IMAP giriş metodu',
+    'SMTP hostname'  => 'SMTP sunucusu',
     'SMTP port'  => 'SMTP port',
-    'SMTP security'  => 'SMTP security',
-    'SMTP auth method'  => 'SMTP auth method',
+    'SMTP security'  => 'SMTP güvenliği',
+    'SMTP auth method'  => 'SMTP giriş metodu',
     'STARTTLS'  => 'STARTTLS',
-    'Normal password'  => 'Normal password',
+    'Normal password'  => 'Normal parola',
     'database'  => 'veritabanı',
     'User'  => 'Kullanıcı',
-    'Host'  => 'Host',
+    'Host'  => 'Sunucu',
     'Charset'  => 'Karakter Seti',
     'Min'  => 'Dak',
     'Hour'  => 'Saat',
@@ -247,14 +248,14 @@ $LANG['tr'] = array(
     'Users'  => 'Kullanıcılar',
     'Load Average'  => 'Sistem Yükü',
     'Memory Usage'  => 'Hafıza Kullanımı',
-    'APACHE2 Usage'  => 'APACHE2 Usage',
+    'APACHE2 Usage'  => 'APACHE2 Kullanımı',
     'HTTPD Usage'  => 'HTTPD Kullanımı',
     'NGINX Usage'  => 'NGINX Kullanımı',
     'MySQL Usage on localhost'  => 'Localhost Üzerindeki MySQL Kullanımı',
     'PostgreSQL Usage on localhost'  => 'Localhost Üzerindeki PostgreSQL Kullanımı',
     'Bandwidth Usage eth0'  => 'eth0 Trafik Kullanımı',
     'Bandwidth Usage eth1'  => 'eth1 Trafik Kullanımı',
-    'Exim Usage'  => 'Exim Usage',
+    'Exim Usage'  => 'Exim Kullanımı',
     'FTP Usage'  => 'FTP Kullanımı',
     'SSH Usage'  => 'SSH Kullanımı',
     'reverse proxy'  => 'reverse proxy',
@@ -293,7 +294,7 @@ $LANG['tr'] = array(
     'DNS Support'  => 'DNS Desteği',
     'Mail Support'  => 'Mail Desteği',
     'Advanced options'  => 'Gelişmiş seçenekler',
-    'Basic options'  => 'Basic options',
+    'Basic options'  => 'Basit seçenekler',
     'Aliases'  => 'Takma adlar (Alias)',
     'SSL Certificate'  => 'SSL Sertifikası',
     'SSL Key'  => 'SSL Anahtarı (Key)',
@@ -397,7 +398,7 @@ $LANG['tr'] = array(
     'SSH' => 'SSH',
     'FTP' => 'FTP',
     'VESTA' => 'VESTA',
-    'Add one more Name Server' => 'Add one more Name Server',
+    'Add one more Name Server' => 'Bir Name Server daha ekle',
 
     'web domain' => 'web domain',
     'dns domain' => 'dns domain',
@@ -449,17 +450,17 @@ $LANG['tr'] = array(
     'MAIL_ACCOUNT_CREATED_OK'  => '<a href="/edit/mail/?account=%s&domain=%s"><b>%s@%s</b></a> mail hesabı başarıyla oluşturuldu',
     'DATABASE_CREATED_OK'  => '<a href="/edit/db/?database=%s"><b>%s</b></a> veritabanı başarıyla oluşturuldu.',
     'CRON_CREATED_OK'  => 'Zamanlanmış görev başarıyla oluşturuldu.',
-    'IP_CREATED_OK'  => '<a href="/edit/ip/?ip=%s"><b>%s</b></a> ip adresi başarıyla oluşturuldu.',
+    'IP_CREATED_OK'  => '<a href="/edit/ip/?ip=%s"><b>%s</b></a> IP adresi başarıyla oluşturuldu.',
     'PACKAGE_CREATED_OK'  => '<a href="/edit/package/?package=%s"><b>%s</b></a> paketi başarıyla oluşturuldu.',
     'SSL_GENERATED_OK' => 'Sertifika başarıyla oluşturuldu.',
     'RULE_CREATED_OK' => 'Kural başarıyla oluşturuldu.',
-    'BANLIST_CREATED_OK' => 'IP address has been banned successfully',
+    'BANLIST_CREATED_OK' => 'IP adresi başarıyla engellendi',
     'Autoupdate has been successfully enabled' => 'Otomatik güncelleme başarıyla aktifleştirildi',
     'Autoupdate has been successfully disabled' => 'Otomatik güncelleme başarıyla pasifleştirildi',
     'Cronjob email reporting has been successfully enabled' => 'Zamanlanmış görev e-posta raporlama başarıyla aktif hale getirildi',
     'Cronjob email reporting has been successfully disabled' => 'Zamanlanmış görev e-posta raporlama başarıyla pasif hale getirildi',
     'Changes has been saved.'  => 'Değişiklikler kaydedildi.',
-    'Confirmation'  => 'Onaylama',
+    'Confirmation'  => 'Onayla',
     'DELETE_USER_CONFIRMATION' => '%s kullanıcısını silmek istediğinize emin misiniz?',
     'SUSPEND_USER_CONFIRMATION' => '%s kullanıcısını askıya almak istediğinize emin misiniz?',
     'UNSUSPEND_USER_CONFIRMATION' => '%s kullanıcısını devam ettirmek istediğinize emin misiniz?',
@@ -488,7 +489,7 @@ $LANG['tr'] = array(
     'LEAVE_PAGE_CONFIRMATION' => 'Leave Page?',
     'RESTART_CONFIRMATION' => '%s yeniden başlatılacak. Onaylıyor musunuz?',
     'Welcome'  => 'Hoşgeldiniz',
-    'LOGGED_IN_AS'  => '%s kullanıcısı olarak oturum aç',
+    'LOGGED_IN_AS'  => '%s kullanıcısı olarak oturum açıldı',
     'Error'  => 'Hata',
     'Invalid username or password'  => 'Geçersiz kullanıcı adı veya şifre',
     'Invalid username or code'  => 'Geçersiz kullanıcı adı veya kod',
@@ -548,30 +549,30 @@ $LANG['tr'] = array(
     'Dec' => 'Ara',
 
     'Configuring Server' => 'Sunucu Yapılandırma',
-    'Hostname' => 'Hostadı',
+    'Hostname' => 'Sunucu Adı',
     'Time Zone' => 'Zaman Dilimi',
     'Default Language' => 'Varsayılan Dil',
-    'Proxy Server' => 'Proxy Server',
-    'Web Server' => 'Web Server',
-    'Backend Server' => 'Backend Server',
+    'Proxy Server' => 'Proxy Sunucusu',
+    'Web Server' => 'Web Sunucusu',
+    'Backend Server' => 'Backend Sunucusu',
     'Backend Pool Mode' => 'Backend Pool Mode',
-    'DNS Server' => 'DNS Server',
+    'DNS Server' => 'DNS Sunucusu',
     'DNS Cluster' => 'DNS Cluster',
-    'MAIL Server' => 'MAIL Server',
+    'MAIL Server' => 'MAIL Sunucusu',
     'Antivirus' => 'Antivirus',
     'AntiSpam' => 'AntiSpam',
-    'Use Web Domain SSL Certificate' => 'Use Web Domain SSL Certificate',
+    'Use Web Domain SSL Certificate' => 'Web Alan Adının SSL Sertifikasını Kullan',
     'Webmail URL' => 'Webmail URL',
-    'MySQL Support' => 'MySQL Support',
+    'MySQL Support' => 'MySQL Desteği',
     'phpMyAdmin URL' => 'phpMyAdmin URL',
-    'PostgreSQL Support' => 'PostgreSQL Support',
+    'PostgreSQL Support' => 'PostgreSQL Desteği',
     'phpPgAdmin URL' => 'phpPgAdmin URL',
-    'Maximum Number Of Databases' => 'Maximum Number Of Databases',
-    'Current Number Of Databases' => 'Current Number Of Databases',
-    'Local backup' => 'Local backup',
-    'Compression level' => 'Compression level',
-    'Directory' => 'Directory',
-    'Remote backup' => 'Remote backup',
+    'Maximum Number Of Databases' => 'Maksimum Veritabanı Sayısı',
+    'Current Number Of Databases' => 'Mevcut Veritabanı Sayısı',
+    'Local backup' => 'Yerel Yedek',
+    'Compression level' => 'Sıkıştırma seviyesi',
+    'Directory' => 'Dizin',
+    'Remote backup' => 'Uzak Yedek',
     'ftp' => 'FTP',
     'sftp' => 'SFTP',
     'SFTP Chroot' => 'SFTP Chroot',
@@ -590,7 +591,7 @@ $LANG['tr'] = array(
     'Starred' => 'Yıldızlı',
     'Name' => 'İsim',
 
-    'save to favorites' => 'save to favorites',
+    'save to favorites' => 'favorilere kaydet',
 
     'File Manager' => 'Dosya Yöneticisi',
     'size' => 'boyut',
@@ -602,13 +603,13 @@ $LANG['tr'] = array(
     'NEW DIR' => 'YENİ KLASÖR',
     'DELETE' => 'SİL',
     'RENAME' => 'YENİDEN ADLANDIR',
-    'MOVE' => 'MOVE',
-    'RIGHTS' => 'RIGHTS',
+    'MOVE' => 'TAŞI',
+    'RIGHTS' => 'IZINLER',
     'COPY' => 'KOPYALA',
     'ARCHIVE' => 'ARŞİVLE',
     'EXTRACT' => 'ÇIKART',
     'DOWNLOAD' => 'İNDİR',
-    'Are you sure?' => 'Are you sure?',
+    'Are you sure?' => 'Emin misin?',
     'Hit' => 'Hit',
     'to reload the page' => 'sayfayı yenilemek için',
     'Directory name cannot be empty' => 'Dizin adı boş olamaz',
@@ -623,20 +624,20 @@ $LANG['tr'] = array(
     'Copy' => 'Kopyala',
     'Cancel' => 'Vazgeç',
     'Rename' => 'Yeniden Adlandır',
-    'Move' => 'Move',
-    'Change Rights' => 'Change Rights',
+    'Move' => 'Taşı',
+    'Change Rights' => 'İzinleri Değiştir',
     'Delete' => 'Sil',
     'Extract' => 'Çıkart',
     'Create' => 'Oluştur',
     'Compress' => 'Sıkıştır',
     'OK' => 'TAMAM',
-    'YOU ARE COPYING' => 'YOU ARE COPYING',
-    'YOU ARE REMOVING' => 'YOU ARE REMOVING',
-    'Delete items' => 'Delete items',
-    'Copy files' => 'Copy files',
-    'Move files' => 'Move files',
+    'YOU ARE COPYING' => 'KOPYALAMA YAPIYORSUNUZ',
+    'YOU ARE REMOVING' => 'SİLME İŞLEMİ YAPIYORSUNUZ',
+    'Delete items' => 'Öğeleri sil',
+    'Copy files' => 'Dosyaları kopyala',
+    'Move files' => 'Dosyaları taşı',
     'Are you sure you want to copy' => 'Kopyalamak istediğinizden emin misiniz',
-    'Are you sure you want to move' => 'Are you sure you want to move',
+    'Are you sure you want to move' => 'Taşımak istediğinizden emin misiniz',
     'Are you sure you want to delete' => 'Silmek istediğinizden emin misiniz',
     'into' => 'into',
     'existing files will be replaced' => 'varolan dosyalar değiştirilir',
@@ -655,7 +656,7 @@ $LANG['tr'] = array(
     'write by others' => 'write by others',
     'execute/search by others' => 'execute/search by others',
 
-    'Shortcuts' => 'Shortcuts',
+    'Shortcuts' => 'Kısayollar',
     'Add New object' => 'Yeni Nesne Ekle',
     'Save Form' => 'Formu Kaydet',
     'Cancel saving form' => 'Formu kaydetmekten vazgeç',
@@ -671,8 +672,8 @@ $LANG['tr'] = array(
     'Move backward through top menu' => 'Üst menüden arasında geriye doğru git',
     'Move forward through top menu' => 'Üst menüden arasında ileriye doğru git',
     'Enter focused element' => 'Odaklanmış elemanı gir',
-    'Move up through elements list' => 'Move up through elements list',
-    'Move down through elements list' => 'Move down through elements list',
+    'Move up through elements list' => 'Öğeler listesinde yukarı git',
+    'Move down through elements list' => 'Öğeler listesinde aşağı git',
 
     'Upload' => 'Yükle',
     'New File' => 'Yeni Dosya',
@@ -689,7 +690,7 @@ $LANG['tr'] = array(
     'Go to the Top of the File List' => 'Dosya Listesinin Tepesine git',
     'Go to the Last File' => 'Son Dosyaya git',
     'Open File / Enter Directory' => 'Dosya Aç/Dizin Gir',
-    'Edit File' => 'Edit File',
+    'Edit File' => 'Dosya düzenle',
     'Go to Parent Directory' => 'Üst Dizine Git',
     'Select Current File' => 'Şuanki Dosyayı Seç',
     'Select Bunch of Files' => 'Dosya Demetini Seç',
@@ -732,7 +733,7 @@ $LANG['tr'] = array(
     'every minute' => 'her dakika',
     'every two minutes' => 'her iki dakikada bir',
     'every' => 'her',
-    'Generate' => 'Generate',
+    'Generate' => 'Oluştur',
 
     'webalizer' => 'webalizer',
     'awstats' => 'awstats',
@@ -746,14 +747,14 @@ $LANG['tr'] = array(
     'PUB_KEY' => 'PUB_KEY',
     'ISSUER' => 'ISSUER',
 
-    'Use server hostname' => 'Use server hostname',
-    'Use domain hostname' => 'Use domain hostname',
-    'Use STARTTLS' => 'Use STARTTLS',
-    'Use SSL / TLS' => 'Use SSL / TLS',
-    'No encryption' => 'No encryption',
-    'Do not use encryption' => 'Do not use encryption',
+    'Use server hostname' => 'Sunucu adını kullan',
+    'Use domain hostname' => 'Alan adını kullan',
+    'Use STARTTLS' => 'STARTTLS Kullan',
+    'Use SSL / TLS' => 'SSL / TLS Kullan',
+    'No encryption' => 'Şifreleme yok',
+    'Do not use encryption' => 'Şifreleme kullanma',
 
-    'maximum characters length, including prefix' => 'maximum %s characters length, including prefix',
+    'maximum characters length, including prefix' => 'önek dahil maksimum %s karakter uzunluğu',
 
-    'Email Credentials' => 'Email Credentials',
+    'Email Credentials' => 'E-posta Kimlik Bilgileri',
 );

From 164ea90d53a92253ffd1b569292fefd6726f3a6c Mon Sep 17 00:00:00 2001
From: Umut Korkmaz <umutkorkmaaz@gmail.com>
Date: Sat, 4 Feb 2023 02:45:31 +0300
Subject: [PATCH 1816/2300] Added missing fields

---
 web/inc/i18n/ar.php    | 1 +
 web/inc/i18n/az.php    | 1 +
 web/inc/i18n/bg.php    | 7 ++++++-
 web/inc/i18n/bs.php    | 1 +
 web/inc/i18n/cn.php    | 1 +
 web/inc/i18n/cz.php    | 1 +
 web/inc/i18n/da.php    | 1 +
 web/inc/i18n/de.php    | 1 +
 web/inc/i18n/el.php    | 1 +
 web/inc/i18n/en.php    | 1 +
 web/inc/i18n/es.php    | 1 +
 web/inc/i18n/fa.php    | 1 +
 web/inc/i18n/fi.php    | 1 +
 web/inc/i18n/fr.php    | 1 +
 web/inc/i18n/hu.php    | 1 +
 web/inc/i18n/id.php    | 1 +
 web/inc/i18n/it.php    | 1 +
 web/inc/i18n/ja.php    | 1 +
 web/inc/i18n/ka.php    | 1 +
 web/inc/i18n/ko.php    | 1 +
 web/inc/i18n/nl.php    | 1 +
 web/inc/i18n/no.php    | 1 +
 web/inc/i18n/pl.php    | 1 +
 web/inc/i18n/pt-BR.php | 1 +
 web/inc/i18n/pt.php    | 1 +
 web/inc/i18n/ro.php    | 1 +
 web/inc/i18n/ru.php    | 1 +
 web/inc/i18n/se.php    | 1 +
 web/inc/i18n/sr.php    | 1 +
 web/inc/i18n/th.php    | 3 ++-
 web/inc/i18n/tr.php    | 1 +
 web/inc/i18n/tw.php    | 1 +
 web/inc/i18n/ua.php    | 1 +
 web/inc/i18n/ur.php    | 5 ++++-
 web/inc/i18n/vi.php    | 1 +
 35 files changed, 44 insertions(+), 3 deletions(-)

diff --git a/web/inc/i18n/ar.php b/web/inc/i18n/ar.php
index e50cfec7..927f9576 100644
--- a/web/inc/i18n/ar.php
+++ b/web/inc/i18n/ar.php
@@ -196,6 +196,7 @@ $LANG['ar'] = array(
     'SSL Home Directory'  => 'المجلد الرئيسي لـ SSL',
     'Lets Encrypt Support'  => 'دعم Lets Encrypt',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'سوف يتم اصدار الترخيص الخاص بك خلال 5 دقائق',
     'Proxy Support'  => 'دغم بروكسي',
     'Proxy Extensions'  => 'توسعات بروكسي',
diff --git a/web/inc/i18n/az.php b/web/inc/i18n/az.php
index 715043a0..929d5d29 100644
--- a/web/inc/i18n/az.php
+++ b/web/inc/i18n/az.php
@@ -187,6 +187,7 @@ $LANG['az'] = array(
     'SSL Home Directory'  => 'SSL Ana qovluğu',
     'Lets Encrypt Support'  => 'Lets Encrypt dəstəyi',
     'Lets Encrypt'  => 'Şifrələ',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Sənədiniz avtomatik olaraq 5 dəqiqə ərzində veriləcək',
     'Proxy Support'  => 'Proxy dəstəyi',
     'Proxy Extensions'  => 'Proxy əlavələri',
diff --git a/web/inc/i18n/bg.php b/web/inc/i18n/bg.php
index 642e6cfa..4baf8f2f 100644
--- a/web/inc/i18n/bg.php
+++ b/web/inc/i18n/bg.php
@@ -40,6 +40,8 @@ $LANG['bg'] = array(
     'NETWORK'  => 'МРЕЖА',
     'Web Log Manager'  => 'МЕНИДЖЪР НА УЕБ ЛОГОВЕ',
 
+    'no notifications'  => 'no notifications',
+
     'Add User'  => 'Добави потребител',
     'Add Domain'  => 'Добави домейн',
     'Add Web Domain'  => 'Добави уеб домейн',
@@ -107,6 +109,7 @@ $LANG['bg'] = array(
     'disable autoupdate' => 'забрани автоматичното обновяване',
     'turn on notifications' => 'включи известията',
     'turn off notifications' => 'изключи известията',
+    'configure' => 'configure',
 
     'Adding User'  => 'Добавяне на потребител',
     'Editing User'  => 'Редактиране на потребител',
@@ -191,6 +194,8 @@ $LANG['bg'] = array(
     'SSL Home Directory'  => 'SSL начало',
     'Lets Encrypt Support'  => 'Lets Encrypt поддръжка',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
+    'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Прокси поддръжка',
     'Proxy Extensions'  => 'Прокси разширения',
     'Web Statistics'  => 'Уеб статистики',
@@ -688,7 +693,7 @@ $LANG['bg'] = array(
     'Select Bunch of Files' => 'Избери няколко файла',
     'Add File to the Current Selection' => 'Добави файла към текущата селекция',
     'Select All Files' => 'Избери всички файлове',
-    'shortcuts are inspired by magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> файлов мениджър' =>
+    'shortcuts are inspired by magnificent GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> file manager' =>
     'преките пътища са вдъхновени от великолепният GNU <a href="https://www.midnight-commander.org/">Midnight Commander</a> файлов мениджър',
     'Licence Key' => 'Лицензен ключ',
     'Enter License Key' => 'Въведете лицензен ключ',
diff --git a/web/inc/i18n/bs.php b/web/inc/i18n/bs.php
index 4e2f32e1..8f515153 100644
--- a/web/inc/i18n/bs.php
+++ b/web/inc/i18n/bs.php
@@ -195,6 +195,7 @@ $LANG['bs'] = array(
     'SSL Home Directory'  => 'SSL direktorij',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Proxy podrška',
     'Proxy Extensions'  => 'Proxy ekstenzije',
diff --git a/web/inc/i18n/cn.php b/web/inc/i18n/cn.php
index 389e8c1e..9276cd83 100644
--- a/web/inc/i18n/cn.php
+++ b/web/inc/i18n/cn.php
@@ -201,6 +201,7 @@ $LANG['cn'] = array(
     'SSL Home Directory' => 'SSL主目录',
     'Lets Encrypt Support' => '采用 Let&#39s Encrypt',
     'Lets Encrypt' => 'Let&#39s Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => '证书将在5分钟内自动完成签发',
     'Proxy Support' => '反向代理',
     'Proxy Extensions' => '需代理的文件扩展名',
diff --git a/web/inc/i18n/cz.php b/web/inc/i18n/cz.php
index 9a0cac79..9237444e 100644
--- a/web/inc/i18n/cz.php
+++ b/web/inc/i18n/cz.php
@@ -196,6 +196,7 @@ $LANG['cz'] = array(
     'SSL Home Directory'  => 'SSL home adresář',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Proxy podpora',
     'Proxy Extensions'  => 'Proxy rozšíření',
diff --git a/web/inc/i18n/da.php b/web/inc/i18n/da.php
index 6e0fab72..92f1ee78 100644
--- a/web/inc/i18n/da.php
+++ b/web/inc/i18n/da.php
@@ -197,6 +197,7 @@ $LANG['da'] = array(
     'SSL Home Directory'  => 'SSL Home',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Proxy Support',
     'Proxy Extensions'  => 'Proxy Tilføjelser',
diff --git a/web/inc/i18n/de.php b/web/inc/i18n/de.php
index 17d1101f..2e6cf9f3 100644
--- a/web/inc/i18n/de.php
+++ b/web/inc/i18n/de.php
@@ -195,6 +195,7 @@ $LANG['de'] = array(
     'SSL Home Directory'  => 'SSL Homeverzeichnis',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Proxy Unterstützung',
     'Proxy Extensions'  => 'Proxy Erweiterungen',
diff --git a/web/inc/i18n/el.php b/web/inc/i18n/el.php
index bef89086..66b6532a 100644
--- a/web/inc/i18n/el.php
+++ b/web/inc/i18n/el.php
@@ -197,6 +197,7 @@ $LANG['el'] = array(
     'SSL Home Directory'  => 'Αρχικός Κατάλογος SSL',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Υποστήριξη Proxy',
     'Proxy Extensions'  => 'Πρόσθετα Proxy',
diff --git a/web/inc/i18n/en.php b/web/inc/i18n/en.php
index d7ae290d..39c3bfff 100644
--- a/web/inc/i18n/en.php
+++ b/web/inc/i18n/en.php
@@ -195,6 +195,7 @@ $LANG['en'] = array(
     'SSL Home Directory'  => 'SSL Home',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Proxy Support',
     'Proxy Extensions'  => 'Proxy Extensions',
diff --git a/web/inc/i18n/es.php b/web/inc/i18n/es.php
index 6e5ce352..3a8ae573 100644
--- a/web/inc/i18n/es.php
+++ b/web/inc/i18n/es.php
@@ -203,6 +203,7 @@ $LANG['es'] = array(
     'SSL Home Directory'  => 'Directorio local del SSL',
     'Lets Encrypt Support'  => 'Soportar Lets Encrypt',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Tu certificado será emitido automáticamente en 5 minutos',
     'Proxy Support'  => 'Soportar Proxy',
     'Proxy Extensions'  => 'Extensiones Proxy',
diff --git a/web/inc/i18n/fa.php b/web/inc/i18n/fa.php
index 8355691a..1778b5b8 100644
--- a/web/inc/i18n/fa.php
+++ b/web/inc/i18n/fa.php
@@ -190,6 +190,7 @@ $LANG['fa'] = array(
     'SSL Home Directory' => 'پوشه خانه SSL',
     'Lets Encrypt Support'  => 'پشتیبانی از Lets Encrypt',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'گواهینامه شما به صورت خودکار در طی 5 دقیقه صادر خواهد شد',
     'Proxy Support' => 'پشتیبانی پراکسی',
     'Proxy Extensions' => 'فرمت های پراکسی',
diff --git a/web/inc/i18n/fi.php b/web/inc/i18n/fi.php
index 951f8da3..8b7d33e2 100644
--- a/web/inc/i18n/fi.php
+++ b/web/inc/i18n/fi.php
@@ -197,6 +197,7 @@ $LANG['fi'] = array(
     'SSL Home Directory' => 'SSL-kotihakemisto',
     'Lets Encrypt Support'  => 'Lets Encrypt Tuki',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Sertifikaattisi käsitellään viiden minuutin sisään',
     'Proxy Support' => 'Proxy-tuki',
     'Proxy Extensions' => 'Proxy-laajennukset',
diff --git a/web/inc/i18n/fr.php b/web/inc/i18n/fr.php
index 4e2e3144..5a68a58a 100644
--- a/web/inc/i18n/fr.php
+++ b/web/inc/i18n/fr.php
@@ -195,6 +195,7 @@ $LANG['fr'] = array(
     'SSL Home Directory'  => 'Racine SSL',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Support Proxy',
     'Proxy Extensions'  => 'Extensions Proxy',
diff --git a/web/inc/i18n/hu.php b/web/inc/i18n/hu.php
index 1c37f93f..c0ac0a41 100644
--- a/web/inc/i18n/hu.php
+++ b/web/inc/i18n/hu.php
@@ -199,6 +199,7 @@ $LANG['hu'] = array(
     'SSL Home Directory'  => 'SSL kezdőlap',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Proxy támogatás',
     'Proxy Extensions'  => 'Proxy kiterjesztések',
diff --git a/web/inc/i18n/id.php b/web/inc/i18n/id.php
index dd870f0d..7b43c044 100644
--- a/web/inc/i18n/id.php
+++ b/web/inc/i18n/id.php
@@ -196,6 +196,7 @@ $LANG['id'] = array(
     'SSL Home Directory'  => 'Direktori Home SSL',
     'Lets Encrypt Support'  => 'Dukungan Lets Encrypt',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Sertifikat anda akan otomatis diterbitkan dalam 5 menit',
     'Proxy Support'  => 'Dukungan Proxy',
     'Proxy Extensions'  => 'Ekstensi Proxy',
diff --git a/web/inc/i18n/it.php b/web/inc/i18n/it.php
index 1e104c51..91296d8b 100644
--- a/web/inc/i18n/it.php
+++ b/web/inc/i18n/it.php
@@ -196,6 +196,7 @@ $LANG['it'] = array(
     'SSL Home Directory'  => 'SSL Home',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Supporto Proxy',
     'Proxy Extensions'  => 'Estensioni Proxy',
diff --git a/web/inc/i18n/ja.php b/web/inc/i18n/ja.php
index a592fd7b..c0e9e541 100644
--- a/web/inc/i18n/ja.php
+++ b/web/inc/i18n/ja.php
@@ -195,6 +195,7 @@ $LANG['ja'] = array(
     'SSL Home Directory'  => 'SSLホームディレクトリ',
     'Lets Encrypt Support'  => "Let's Encryptのサポート",
     'Lets Encrypt'  => "Let's Encrypt",
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => '証明書は5分以内に自動的に発行されます',
     'Proxy Support'  => 'プロキシのサポート',
     'Proxy Extensions'  => 'プロキシ対象拡張子',
diff --git a/web/inc/i18n/ka.php b/web/inc/i18n/ka.php
index 1512e06c..f82e2305 100644
--- a/web/inc/i18n/ka.php
+++ b/web/inc/i18n/ka.php
@@ -195,6 +195,7 @@ $LANG['ka'] = array(
     'SSL Home Directory'  => 'SSL მთავარი დირექტორია',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'პროქსის მხარდაჭერა',
     'Proxy Extensions'  => 'პროქსის გაფართოებები',
diff --git a/web/inc/i18n/ko.php b/web/inc/i18n/ko.php
index 1b09de25..e81ab4b0 100644
--- a/web/inc/i18n/ko.php
+++ b/web/inc/i18n/ko.php
@@ -195,6 +195,7 @@ $LANG['ko'] = array(
     'SSL Home Directory'  => 'SSL 홈 디렉토리',
     'Lets Encrypt Support'  => 'Lets Encrypt 지원',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => '인증서는 5분 안에 자동으로 발급될 것입니다',
     'Proxy Support'  => '프록시 지원',
     'Proxy Extensions'  => '프록시 확장',
diff --git a/web/inc/i18n/nl.php b/web/inc/i18n/nl.php
index b5d68ec4..3b4fde10 100644
--- a/web/inc/i18n/nl.php
+++ b/web/inc/i18n/nl.php
@@ -198,6 +198,7 @@ $LANG['nl'] = array(
     'SSL Home Directory'  => 'SSL Map',
     'Lets Encrypt Support'  => 'Lets Encrypt Ondersteuning',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Het certificaat wordt automatisch aangemaakt in 5 minuten',
     'Proxy Support'  => 'Proxy Ondersteuning',
     'Proxy Extensions'  => 'Proxy Extensies',
diff --git a/web/inc/i18n/no.php b/web/inc/i18n/no.php
index fe026f39..30cc9306 100644
--- a/web/inc/i18n/no.php
+++ b/web/inc/i18n/no.php
@@ -196,6 +196,7 @@ $LANG['no'] = array(
     'SSL Home Directory'  => 'SSL Hjem',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Proxy Støtte',
     'Proxy Extensions'  => 'Proxy Utvidelser',
diff --git a/web/inc/i18n/pl.php b/web/inc/i18n/pl.php
index e649a22c..a6376c1f 100644
--- a/web/inc/i18n/pl.php
+++ b/web/inc/i18n/pl.php
@@ -196,6 +196,7 @@ $LANG['pl'] = array(
     'SSL Home Directory'  => 'Folder główny SSL',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Wsparcie dla Proxy',
     'Proxy Extensions'  => 'Rozszerzenia Proxy',
diff --git a/web/inc/i18n/pt-BR.php b/web/inc/i18n/pt-BR.php
index 303ae53f..b6716ef0 100644
--- a/web/inc/i18n/pt-BR.php
+++ b/web/inc/i18n/pt-BR.php
@@ -195,6 +195,7 @@ $LANG['pt-BR'] = array(
     'SSL Home Directory'  => 'Diretório Home SSL',
     'Lets Encrypt Support'  => 'Suporte Lets Encrypt',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Seu certificado será gerado automaticamente em 5 minutos',
     'Proxy Support'  => 'Suporte ao Proxy',
     'Proxy Extensions'  => 'Extensões do Proxy',
diff --git a/web/inc/i18n/pt.php b/web/inc/i18n/pt.php
index 02d3bf51..57366dbc 100644
--- a/web/inc/i18n/pt.php
+++ b/web/inc/i18n/pt.php
@@ -195,6 +195,7 @@ $LANG['pt'] = array(
     'SSL Home Directory'  => 'Diretório Home SSL',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Suporte ao Proxy',
     'Proxy Extensions'  => 'Extenções do Proxy',
diff --git a/web/inc/i18n/ro.php b/web/inc/i18n/ro.php
index 5b70f5d5..4b4104bd 100644
--- a/web/inc/i18n/ro.php
+++ b/web/inc/i18n/ro.php
@@ -197,6 +197,7 @@ $LANG['ro'] = array(
     'SSL Home Directory' => 'Director SSL',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support' => 'Suport Proxy',
     'Proxy Extensions' => 'Extensii Proxy',
diff --git a/web/inc/i18n/ru.php b/web/inc/i18n/ru.php
index 58829fad..5b634db3 100644
--- a/web/inc/i18n/ru.php
+++ b/web/inc/i18n/ru.php
@@ -197,6 +197,7 @@ $LANG['ru'] = array(
     'SSL Home Directory' => 'Директория SSL',
     'Lets Encrypt Support'  => 'Поддержка Lets Encrypt',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Сертификат будет автоматически создан в течение 5-ти минут',
     'Proxy Support' => 'Поддержка Proxy',
     'Proxy Extensions' => 'Обработка Proxy',
diff --git a/web/inc/i18n/se.php b/web/inc/i18n/se.php
index 96c5af9c..fc70440e 100644
--- a/web/inc/i18n/se.php
+++ b/web/inc/i18n/se.php
@@ -195,6 +195,7 @@ $LANG['se'] = array(
     'SSL Home Directory'  => 'Hemmakatalog för SSL',
     'Lets Encrypt Support'  => 'Lets Encrypt Support',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Your certificate will be automatically issued in 5 minutes',
     'Proxy Support'  => 'Nginx-stöd',
     'Proxy Extensions'  => 'Nginx-tillägg',
diff --git a/web/inc/i18n/sr.php b/web/inc/i18n/sr.php
index dc215f26..3dfcc0f5 100644
--- a/web/inc/i18n/sr.php
+++ b/web/inc/i18n/sr.php
@@ -195,6 +195,7 @@ $LANG['sr'] = array(
     'SSL Home Directory'  => 'SSL direktorijum',
     'Lets Encrypt Support'  => 'Lets Encrypt podrška',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Vaš sertifikat će biti automatski generisan za 5 minuta',
     'Proxy Support'  => 'Proxy podrška',
     'Proxy Extensions'  => 'Proxy ekstenzije',
diff --git a/web/inc/i18n/th.php b/web/inc/i18n/th.php
index 2878192f..63350f02 100644
--- a/web/inc/i18n/th.php
+++ b/web/inc/i18n/th.php
@@ -198,6 +198,7 @@ $LANG['th'] = array(
     'SSL Home Directory'  => 'ไดเร็กทอรี่หลักของ SSL',
     'Lets Encrypt Support'  => 'สนับสนุน Lets Encrypt',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'ใบรับรองของคุณจะได้รับการออกโดยอัตโนมัติภายใน 5 นาที',
     'Proxy Support'  => 'สนับสนุน Proxy',
     'Proxy Extensions'  => 'ส่วนขยาย Proxy',
@@ -704,7 +705,7 @@ $LANG['th'] = array(
     'Enter License Key' => 'กรอก License Key',
     'Buy Licence' => 'ซื้อ License',
     'Buy Lifetime License' => 'ซื้อ License แบบถาวร',
-    'Disable and Cancel License' => 'ปิดการใช้งาน และยกเลิก License',
+    'Disable and Cancel Licence' => 'ปิดการใช้งาน และยกเลิก License',
     'Licence Activated' => 'เปิดใช้งาน License แล้ว',
     'Licence Deactivated' => 'ปิดการใช้งาน License แล้ว',
     'Restrict users so that they cannot use SSH and access only their home directory.' => 'จำกัดผู้ใช้เพื่อไม่ให้ใช้ SSH และเข้าถึงไดเร็กทอรี่ของตนเองเท่านั้น',
diff --git a/web/inc/i18n/tr.php b/web/inc/i18n/tr.php
index 7aac0098..4b1ff8a4 100644
--- a/web/inc/i18n/tr.php
+++ b/web/inc/i18n/tr.php
@@ -197,6 +197,7 @@ $LANG['tr'] = array(
     'SSL Home Directory'  => 'SSL Dizini',
     'Lets Encrypt Support'  => 'Lets Encrypt Desteği',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Sertifikanız 5 dakika içinde otomatik olarak verilecektir.',
     'Proxy Support'  => 'Proxy Desteği',
     'Proxy Extensions'  => 'Proxy Uzantıları',
diff --git a/web/inc/i18n/tw.php b/web/inc/i18n/tw.php
index 163bee62..145f465d 100644
--- a/web/inc/i18n/tw.php
+++ b/web/inc/i18n/tw.php
@@ -197,6 +197,7 @@ $LANG['tw'] = array(
     'SSL Home Directory'  => 'SSL 主目錄',
     'Lets Encrypt Support'  => 'Lets Encrypt 支援',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => '您的憑證會在五分鐘內完成簽發',
     'Proxy Support'  => 'Proxy 支援',
     'Proxy Extensions'  => 'Proxy 副檔名',
diff --git a/web/inc/i18n/ua.php b/web/inc/i18n/ua.php
index 136cc73f..d552b3f8 100644
--- a/web/inc/i18n/ua.php
+++ b/web/inc/i18n/ua.php
@@ -196,6 +196,7 @@ $LANG['ua'] = array(
     'SSL Home Directory' => 'Домашня тека SSL',
     'Lets Encrypt Support'  => 'Підтримка Lets Encrypt',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Ваш сертифікат буде автоматично виданий протягом 5-ти хвилин',
     'Proxy Support' => 'Підтримка Proxy',
     'Proxy Extensions' => 'Розширення Proxy',
diff --git a/web/inc/i18n/ur.php b/web/inc/i18n/ur.php
index 2c95e821..87c11ed3 100644
--- a/web/inc/i18n/ur.php
+++ b/web/inc/i18n/ur.php
@@ -108,6 +108,8 @@ $LANG['ur'] = array(
     'reread IP'  => 'IP پھر سے پڑھنا',
     'enable autoupdate'  => 'آٹو اپ ڈیٹ کو چالو',
     'disable autoupdate'  => 'غیر فعال آٹو اپ ڈیٹ',
+    'turn on notifications' => 'turn on notifications',
+    'turn off notifications' => 'turn off notifications',
     'configure'  => 'ترتیب دے',
     
     'Adding User'   => 'شامل کرنے صارف',
@@ -194,6 +196,7 @@ $LANG['ur'] = array(
     'SSL Home Directory'   => 'SSL ہوم',
     'Lets Encrypt Support'   => 'ینکریپٹ سپورٹ کی اجازت دیتا ہے',
     'Lets Encrypt'   => 'ینکریپٹ کی اجازت دیتا ہے',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes'  => 'آپ کے سرٹیفکیٹ خود بخود 5 منٹ میں جاری کیا جائے گا',
     'Proxy Support'   => 'پراکسی سپورٹ',
     'Proxy Extensions'   => 'پراکسی ایکسٹنشن',
@@ -747,7 +750,7 @@ $LANG['ur'] = array(
     'Use server hostname'  => 'سرور استعمال میزبان نام',
     'Use domain hostname'  => 'ڈومین کا استعمال میزبان نام',
     'Use STARTTLS'  => 'STARTTLS استعمال',
-    'Use SSL'  => 'SSL استعمال کریں',
+    'Use SSL / TLS'  => 'SSL استعمال کریں',
     'No encryption'  => 'کوئی خفیہ کاری',
     'Do not use encryption'  => 'خفیہ کاری کا استعمال نہ کریں',
     
diff --git a/web/inc/i18n/vi.php b/web/inc/i18n/vi.php
index 2de145b4..303bf8ac 100644
--- a/web/inc/i18n/vi.php
+++ b/web/inc/i18n/vi.php
@@ -198,6 +198,7 @@ $LANG['vi'] = array(
     'SSL Home Directory'  => 'Trang chủ SSL',
     'Lets Encrypt Support'  => 'Hỗ trợ Lets Encrypt',
     'Lets Encrypt'  => 'Lets Encrypt',
+    'You can add LetsEncrypt after adding domain, just EDIT this domain later' => 'You can add LetsEncrypt after adding domain, just EDIT this domain later',
     'Your certificate will be automatically issued in 5 minutes' => 'Chứng chỉ của bạn sẽ được tự động cấp phát trong 5 phút',
     'Proxy Support'  => 'Hỗ trợ Nginx',
     'Proxy Extensions'  => 'Phần mở rộng Nginx',

From 87b821681284e7d9912aa50f195b880241184054 Mon Sep 17 00:00:00 2001
From: Umut Korkmaz <umutkorkmaaz@gmail.com>
Date: Sat, 4 Feb 2023 02:47:43 +0300
Subject: [PATCH 1817/2300] Duplicated fields removed

---
 web/inc/i18n/bg.php | 3 ---
 web/inc/i18n/ru.php | 1 -
 2 files changed, 4 deletions(-)

diff --git a/web/inc/i18n/bg.php b/web/inc/i18n/bg.php
index 4baf8f2f..746963d3 100644
--- a/web/inc/i18n/bg.php
+++ b/web/inc/i18n/bg.php
@@ -707,9 +707,6 @@ $LANG['bg'] = array(
     'This is a commercial module, you would need to purchace license key to enable it.' => 'Това е комерсиален модул, за чиито ползване е нужно да поръчате лицензионен ключ.',
     'Minutes' => 'Минути',
     'Hourly' => 'Всеки час',
-    'Daily' => 'Всеки ден ',
-    'Weekly' => 'Всяка седмица',
-    'Monthly' => 'Всеки месец',
     'Run Command' => 'Изпълни команда',
     'every month' => 'всеки месец',
     'every odd month' => 'всеки нечетен месец',
diff --git a/web/inc/i18n/ru.php b/web/inc/i18n/ru.php
index 5b634db3..ed8f116d 100644
--- a/web/inc/i18n/ru.php
+++ b/web/inc/i18n/ru.php
@@ -581,7 +581,6 @@ $LANG['ru'] = array(
     'Vesta Control Panel Plugins' => 'Плагины Vesta Control Panel',
     'preview' => 'предпросмотр',
     'Reseller Role' => 'Реселлер',
-    'Reseller Role' => 'Реселлер',
     'Web Config Editor' => 'Веб Редактор Конфигов',
     'Template Manager' => 'Менеджер Шаблонов',
     'Backup Migration Manager' => 'Менеджер Миграции Бэкапов',

From 71daf552e5c8ad0f59ac7246ee287d1d022a8edf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Feb 2023 15:52:13 +0100
Subject: [PATCH 1818/2300] Cleaning /hdd/home

---
 bin/v-clean-garbage | 26 +++++++++++++++++---------
 1 file changed, 17 insertions(+), 9 deletions(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 15b1a5ae..873c8450 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -24,15 +24,23 @@ find /usr/local/vesta/log/ -type f -name "*.log" -exec truncate -s 0 {} \;
 find /usr/local/vesta/log/ -type f -not -name "*.log" -delete
 find /var/log/exim4/ -type f -exec truncate -s 0 {} \;
 
-find /home/*/web/*/public_html/wp-content/aiowps_backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
-find /home/*/web/*/public_html/wp-content/envato-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
-find /home/*/web/*/public_html/wp-content/ai1wm-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
-find /home/*/web/*/public_html/wp-content/wpvividbackups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
-find /home/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
-find /home/*/web/*/public_html/ -type f -name "*.wpress" -delete
-find /home/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
-find /home/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;
-find /home/ -type f -name "*.log" -exec truncate -s 0 {} \;
+clean_home() {
+    find $1/*/web/*/public_html/wp-content/aiowps_backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+    find $1/*/web/*/public_html/wp-content/envato-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+    find $1/*/web/*/public_html/wp-content/ai1wm-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+    find $1/*/web/*/public_html/wp-content/wpvividbackups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+    find $1/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+    find $1/*/web/*/public_html/wp-content/ezpz-one-click-backup/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+    find $1/*/web/*/public_html/ -type f -name "*.wpress" -delete
+    find $1/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
+    find $1/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;
+    find $1/ -type f -name "*.log" -exec truncate -s 0 {} \;
+}
+
+clean_home "/home"
+if [ -d "/hdd/home" ]; then
+    clean_home "/hdd/home"
+fi
 
 fail2ban_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'fail2ban' | grep -c 'running')
 if [ $fail2ban_running -eq 1 ]; then

From 6d9c6d473490f422de56e71ba0bddf78f8c90e9f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Feb 2023 16:05:00 +0100
Subject: [PATCH 1819/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 37 ++++++++++++++++++++++++++++++++-----
 1 file changed, 32 insertions(+), 5 deletions(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 873c8450..92c5e840 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -1,7 +1,23 @@
 #!/bin/bash
+# info: Clean all unnecessary files like logs
+# options: NONE
+#
+# The function is cleaning all unnecessary files like logs
 
-nice -n 19 ionice -c 3 find /home/*/tmp/ -type f -delete
-find /home/ -name '.wp-cli' -type d -exec rm -rf {} \;
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
 
 rm /var/backups/*
 rm /var/cache/apt/archives/*
@@ -25,6 +41,8 @@ find /usr/local/vesta/log/ -type f -not -name "*.log" -delete
 find /var/log/exim4/ -type f -exec truncate -s 0 {} \;
 
 clean_home() {
+    nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -delete
+    find $1/ -name '.wp-cli' -type d -exec rm -rf {} \;
     find $1/*/web/*/public_html/wp-content/aiowps_backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
     find $1/*/web/*/public_html/wp-content/envato-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
     find $1/*/web/*/public_html/wp-content/ai1wm-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
@@ -32,9 +50,9 @@ clean_home() {
     find $1/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
     find $1/*/web/*/public_html/wp-content/ezpz-one-click-backup/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
     find $1/*/web/*/public_html/ -type f -name "*.wpress" -delete
-    find $1/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
-    find $1/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;
-    find $1/ -type f -name "*.log" -exec truncate -s 0 {} \;
+    nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
+    nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;
+    nice -n 19 ionice -c 3 find $1/ -type f -name "*.log" -exec truncate -s 0 {} \;
 }
 
 clean_home "/home"
@@ -42,6 +60,7 @@ if [ -d "/hdd/home" ]; then
     clean_home "/hdd/home"
 fi
 
+# Cleaning fail2ban database
 fail2ban_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'fail2ban' | grep -c 'running')
 if [ $fail2ban_running -eq 1 ]; then
     systemctl stop fail2ban
@@ -53,4 +72,12 @@ if [ $fail2ban_running -eq 1 ]; then
     systemctl start fail2ban
 fi
 
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
 echo "=== Garbage cleaned ==="
+
+log_event "$OK" "$ARGUMENTS"
+
+exit

From a10f82af3064dc8639989314d36f4d45cbb198ab Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Feb 2023 16:11:15 +0100
Subject: [PATCH 1820/2300] Create v-update-myvesta

---
 bin/v-update-myvesta | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 bin/v-update-myvesta

diff --git a/bin/v-update-myvesta b/bin/v-update-myvesta
new file mode 100644
index 00000000..9df80894
--- /dev/null
+++ b/bin/v-update-myvesta
@@ -0,0 +1,33 @@
+#!/bin/bash
+# info: Get the very latest build of myVesta
+# options: NONE
+#
+# The function is downloading the very latest build of myVesta
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+rm /var/cache/apt/archives/vesta_* > /dev/null 2>&1
+apt-get update
+apt-get install --reinstall vesta
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+echo "=== myVesta updated ==="
+
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 5007cc2edfe84d450b4104ff95baaca3b80d48a9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Feb 2023 16:17:46 +0100
Subject: [PATCH 1821/2300] Update v-update-myvesta

---
 bin/v-update-myvesta | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/bin/v-update-myvesta b/bin/v-update-myvesta
index 9df80894..50ea49a0 100644
--- a/bin/v-update-myvesta
+++ b/bin/v-update-myvesta
@@ -5,7 +5,7 @@
 # The function is downloading the very latest build of myVesta
 
 #----------------------------------------------------------#
-#                    Verifications                         #
+#           Verifications & Variable & Function            #
 #----------------------------------------------------------#
 
 whoami=$(whoami)
@@ -14,6 +14,9 @@ if [ "$whoami" != "root" ]; then
     exit 1
 fi
 
+# Includes
+source /usr/local/vesta/func/main.sh
+
 #----------------------------------------------------------#
 #                       Action                             #
 #----------------------------------------------------------#

From 43ebf79c34d32efaafe850aaa1ab8d5f915147ce Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Feb 2023 16:19:10 +0100
Subject: [PATCH 1822/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 92c5e840..b53b2509 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -4,9 +4,8 @@
 #
 # The function is cleaning all unnecessary files like logs
 
-
 #----------------------------------------------------------#
-#                    Verifications                         #
+#           Verifications & Variable & Function            #
 #----------------------------------------------------------#
 
 whoami=$(whoami)
@@ -15,6 +14,9 @@ if [ "$whoami" != "root" ]; then
     exit 1
 fi
 
+# Includes
+source /usr/local/vesta/func/main.sh
+
 #----------------------------------------------------------#
 #                       Action                             #
 #----------------------------------------------------------#

From cf5b5325d6b014a2320793ab8f9facaec6f41bee Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Feb 2023 16:32:14 +0100
Subject: [PATCH 1823/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index b53b2509..d4c47267 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -22,7 +22,7 @@ source /usr/local/vesta/func/main.sh
 #----------------------------------------------------------#
 
 rm /var/backups/*
-rm /var/cache/apt/archives/*
+rm /var/cache/apt/archives/* > /dev/null 2>&1
 cd /var/log
 truncate -s 0 xferlog lastlog faillog btmp syslog;
 find /var/log/ -name "*.log" -not -path "/var/log/apt/*" -type f -exec truncate -s 0 {} \;
@@ -44,13 +44,13 @@ find /var/log/exim4/ -type f -exec truncate -s 0 {} \;
 
 clean_home() {
     nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -delete
-    find $1/ -name '.wp-cli' -type d -exec rm -rf {} \;
+    find $1/ -name '.wp-cli' -type d -exec rm -rf {} \; > /dev/null 2>&1
     find $1/*/web/*/public_html/wp-content/aiowps_backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
     find $1/*/web/*/public_html/wp-content/envato-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
     find $1/*/web/*/public_html/wp-content/ai1wm-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
     find $1/*/web/*/public_html/wp-content/wpvividbackups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
     find $1/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
-    find $1/*/web/*/public_html/wp-content/ezpz-one-click-backup/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+    find $1/*/web/*/public_html/wp-content/ezpz-one-click-backup/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/ -type f -name "*.wpress" -delete
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;

From 65f626eda7b7a4a2707f42ce330ea5c8f02c603f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Feb 2023 16:36:12 +0100
Subject: [PATCH 1824/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index d4c47267..c6d41ab9 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -50,7 +50,7 @@ clean_home() {
     find $1/*/web/*/public_html/wp-content/ai1wm-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
     find $1/*/web/*/public_html/wp-content/wpvividbackups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
     find $1/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
-    find $1/*/web/*/public_html/wp-content/ezpz-one-click-backup/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
+    find $1/*/web/*/public_html/wp-content/plugins/ezpz-one-click-backup/backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/ -type f -name "*.wpress" -delete
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;

From d6a84f37d2db6bd44383f5e9bab75f18aea68696 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Feb 2023 16:40:24 +0100
Subject: [PATCH 1825/2300] Update v-update-myvesta

---
 bin/v-update-myvesta | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-myvesta b/bin/v-update-myvesta
index 50ea49a0..c3eaf337 100644
--- a/bin/v-update-myvesta
+++ b/bin/v-update-myvesta
@@ -22,7 +22,7 @@ source /usr/local/vesta/func/main.sh
 #----------------------------------------------------------#
 
 rm /var/cache/apt/archives/vesta_* > /dev/null 2>&1
-apt-get update
+apt-get update -o Dir::Etc::sourcelist="sources.list.d/vesta.list" -o Dir::Etc::sourceparts="-" -o APT::Get::List-Cleanup="0"  > /usr/local/vesta/log/update-$package.log 2>&1
 apt-get install --reinstall vesta
 
 #----------------------------------------------------------#

From 94770a5f1220cbc75b4cd626222160fbcaf27e16 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Feb 2023 16:43:14 +0100
Subject: [PATCH 1826/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index c6d41ab9..5b402653 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -21,7 +21,7 @@ source /usr/local/vesta/func/main.sh
 #                       Action                             #
 #----------------------------------------------------------#
 
-rm /var/backups/*
+rm /var/backups/* > /dev/null 2>&1
 rm /var/cache/apt/archives/* > /dev/null 2>&1
 cd /var/log
 truncate -s 0 xferlog lastlog faillog btmp syslog;

From 33d0e6df9c100ae9edef9cfa607beaba9eadefeb Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Mon, 6 Feb 2023 15:57:07 +0100
Subject: [PATCH 1827/2300] Update v-activate-rocket-nginx

---
 bin/v-activate-rocket-nginx | 19 +++++++++++++++----
 1 file changed, 15 insertions(+), 4 deletions(-)

diff --git a/bin/v-activate-rocket-nginx b/bin/v-activate-rocket-nginx
index 1b8561c3..08ff2ad8 100644
--- a/bin/v-activate-rocket-nginx
+++ b/bin/v-activate-rocket-nginx
@@ -83,11 +83,22 @@ fi
 echo "Proxy Template is ready"
 
 # Disabling wp-cron in wp-config.php
-echo "Disabling WP-Cron in your wp-config.php..."
-string="define( 'DISABLE_WP_CRON', true );"
-line="define( 'DB_COLLATE', '' );"
+string_disable="define( 'DISABLE_WP_CRON', true );"
+string_enable="define( 'DISABLE_WP_CRON', false );"
+line="<?php"
 file="/home/$user/web/$domain/public_html/wp-config.php"
-sed -i "/$line/a $string" $file
+
+if grep -q "$string_disable" "$file"; then
+  echo "WP-Cron is already disabled in your wp-config.php"
+elif grep -q "$string_enable" "$file"; then
+  echo "Disabling WP-Cron in your wp-config.php..."
+  sed -i "/$string_enable/d" $file
+  sed -i "/$line/a $string_disable" $file
+else
+  echo "Disabling WP-Cron in your wp-config.php..."
+  sed -i "/$line/a $string_disable" $file
+fi
+
 
 # Adding cron job
 echo "Adding cron job..."

From a531eb20f69ad4a8e8bfb9203a22b09ff1398413 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Mon, 6 Feb 2023 18:34:10 +0100
Subject: [PATCH 1828/2300] Update v-activate-rocket-nginx

---
 bin/v-activate-rocket-nginx | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/bin/v-activate-rocket-nginx b/bin/v-activate-rocket-nginx
index 08ff2ad8..f6957975 100644
--- a/bin/v-activate-rocket-nginx
+++ b/bin/v-activate-rocket-nginx
@@ -83,23 +83,25 @@ fi
 echo "Proxy Template is ready"
 
 # Disabling wp-cron in wp-config.php
+checkstring_disable="define('DISABLE_WP_CRON', true)"
+checkstring_enable="define('DISABLE_WP_CRON', false)"
 string_disable="define( 'DISABLE_WP_CRON', true );"
-string_enable="define( 'DISABLE_WP_CRON', false );"
 line="<?php"
-file="/home/$user/web/$domain/public_html/wp-config.php"
+file="wp-config.php"
 
-if grep -q "$string_disable" "$file"; then
+if grep -q -w -i -F "$checkstring_disable" "$file"; then
   echo "WP-Cron is already disabled in your wp-config.php"
-elif grep -q "$string_enable" "$file"; then
+elif grep -q -w -i -F "$checkstring_enable" "$file"; then
   echo "Disabling WP-Cron in your wp-config.php..."
-  sed -i "/$string_enable/d" $file
-  sed -i "/$line/a $string_disable" $file
+  sed -i "/$checkstring_enable/d" "$file"
+  sed -i "/$line/Ia $string_disable" "$file"
 else
   echo "Disabling WP-Cron in your wp-config.php..."
-  sed -i "/$line/a $string_disable" $file
+  sed -i "/$line/Ia $string_disable" "$file"
 fi
 
 
+
 # Adding cron job
 echo "Adding cron job..."
 

From 7420a9ca845c974c569d98863f46a824141110fa Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Fri, 10 Feb 2023 17:40:20 +0100
Subject: [PATCH 1829/2300] Update v-move-domain-and-database-to-account

---
 bin/v-move-domain-and-database-to-account | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-move-domain-and-database-to-account b/bin/v-move-domain-and-database-to-account
index d055e361..6a97383d 100644
--- a/bin/v-move-domain-and-database-to-account
+++ b/bin/v-move-domain-and-database-to-account
@@ -42,6 +42,11 @@ fi
 
 USER_TO=$user
 
+if [ ! -d "/backup" ]; then
+  echo "There is no /backup folder, creating it now..."
+  mkdir /backup
+fi
+
 #----------------------------------------------------------#
 #                       Action                             #
 #----------------------------------------------------------#

From 6770d3bc4c619155e25698ff8373566a3b813bf4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 10 Feb 2023 19:37:45 +0100
Subject: [PATCH 1830/2300] Fix for /backup

---
 bin/v-change-database-owner               | 4 ++++
 bin/v-move-domain-and-database-to-account | 5 -----
 install/vst-install-debian.sh             | 2 ++
 3 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/bin/v-change-database-owner b/bin/v-change-database-owner
index d84d8eb2..983f7cb1 100755
--- a/bin/v-change-database-owner
+++ b/bin/v-change-database-owner
@@ -60,6 +60,10 @@ if [ ! -z "$check_db" ]; then
     exit $E_EXISTS
 fi
 
+if [ ! -d "/backup" ]; then
+  echo "There is no /backup folder, creating it now..."
+  mkdir /backup
+fi
 
 #----------------------------------------------------------#
 #                       Action                             #
diff --git a/bin/v-move-domain-and-database-to-account b/bin/v-move-domain-and-database-to-account
index 6a97383d..d055e361 100644
--- a/bin/v-move-domain-and-database-to-account
+++ b/bin/v-move-domain-and-database-to-account
@@ -42,11 +42,6 @@ fi
 
 USER_TO=$user
 
-if [ ! -d "/backup" ]; then
-  echo "There is no /backup folder, creating it now..."
-  mkdir /backup
-fi
-
 #----------------------------------------------------------#
 #                       Action                             #
 #----------------------------------------------------------#
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 650fa241..4349a56d 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -595,6 +595,8 @@ fi
 #                         Backup                           #
 #----------------------------------------------------------#
 
+mkdir /backup
+
 echo "=== Creating backup directory tree"
 mkdir -p $vst_backups
 cd $vst_backups

From a28436e6e8bdec0b0cd58de574365eb1b6a96086 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 11 Feb 2023 19:20:03 +0100
Subject: [PATCH 1831/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 58ec502d..14253444 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -54,7 +54,7 @@ if [ $# -gt 8 ]; then
     inst_81=$9
 fi
 if [ $# -gt 9 ]; then
-    inst_82=$10
+    inst_82=${10}
 fi
 
 if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ] || [ $inst_74 -eq 1 ] || [ $inst_80 -eq 1 ] || [ $inst_81 -eq 1 ] || [ $inst_82 -eq 1 ]; then

From e0b90ef9d65c7e7a3756920f0f8f9bfa50204c7b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 11 Feb 2023 19:43:58 +0100
Subject: [PATCH 1832/2300] v-install-wordpress: Check if MariaDB allows long
 database name

---
 bin/v-install-wordpress | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 0e24f847..4bf82c5f 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -26,6 +26,7 @@ USER=$user
 # Includes
 source /usr/local/vesta/func/main.sh
 source /usr/local/vesta/func/db.sh
+source /usr/local/vesta/conf/vesta.conf
 
 if [ -z "$user" ]; then
     check_result $E_NOTEXIST "domain $domain doesn't exist"
@@ -49,7 +50,11 @@ is_object_unsuspended 'user' 'USER' "$user"
 source /usr/local/vesta/func/handle_parameters.sh
 
 if [ -z "$database" ]; then
-    database=$(echo "$domain" | sed 's#\.#_#g')
+    if [ ! -z "$MAX_DBUSER_LEN" ] && [ "$MAX_DBUSER_LEN" -ge 80  ]; then
+        database=$(echo "$domain" | sed 's#\.#_#g')
+    else
+       database="wp"
+    fi
 fi
 
 if [ -z "$email" ]; then

From 7fe91ca4c98e1731f084977674c20f455706244d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 11 Feb 2023 20:29:14 +0100
Subject: [PATCH 1833/2300] v-clone-website: By default cloning to DB:
 user_domain_com

instead of cloning to database: user_old_db_migrated
---
 bin/v-clone-website | 66 ++++++++++++++++++++++++++-------------------
 1 file changed, 39 insertions(+), 27 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 2c38eef9..262d1a15 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -9,7 +9,7 @@
 if [ $# -lt 2 ]; then
     echo "USAGE: v-clone-website FROM_DOMAIN TO_DOMAIN"
     echo "Available parameters:"
-    echo "--DATABASE_SUFIX=... (default is '_migrated')"
+    echo "--DATABASE_SUFIX=... (will be added to database name)"
     echo "--TO_DATABASE=... (this will override --TO_DATABASE_NAME, --TO_DATABASE_USERNAME and --DATABASE_SUFIX)"
     echo "--FROM_DATABASE_NAME=..."
     echo "--FROM_DATABASE_USERNAME=..."
@@ -42,6 +42,7 @@ source /etc/profile
 # Includes
 source /usr/local/vesta/func/main.sh
 source /usr/local/vesta/func/db.sh
+source /usr/local/vesta/conf/vesta.conf
 
 FROM_DATABASE_NAME=''
 FROM_DATABASE_USERNAME=''
@@ -55,6 +56,10 @@ SITE_SUBFOLDER=''
 SEARCH_FOR_CONFIGS_DATABASE_NAME=''
 SEARCH_FOR_CONFIGS_DATABASE_USERNAME=''
 
+if [ ! -z "$MAX_DBUSER_LEN" ] && [ "$MAX_DBUSER_LEN" -ge 80  ]; then
+    DATABASE_SUFIX=''
+fi
+
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#
@@ -174,33 +179,40 @@ fi
 
 TO_CONFIG_FILE_FULL_PATH="$TO_FOLDER/$FROM_CONFIG_FILE"
 
-LENGTH_OF_DATABASE_SUFIX=${#DATABASE_SUFIX}
-if [ -z "$TO_DATABASE_NAME" ]; then
-    LENGTH_OF_TO_DATABASE_NAME=${#FROM_DATABASE_NAME}
-    START_FROM=$((LENGTH_OF_TO_DATABASE_NAME-LENGTH_OF_DATABASE_SUFIX))
-    CHECK_PREFIX=${FROM_DATABASE_NAME:START_FROM}
-    if [ "$CHECK_PREFIX" = "${DATABASE_SUFIX}" ]; then
-        TO_DATABASE_NAME="${TO_USER}_${FROM_DATABASE_NAME_WITHOUT_PREFIX}"
-        LENGTH_OF_TO_DATABASE_NAME=${#TO_DATABASE_NAME}
-        CUT_TO=$((LENGTH_OF_TO_DATABASE_NAME-LENGTH_OF_DATABASE_SUFIX))
-        TO_DATABASE_NAME=${TO_DATABASE_NAME:0:CUT_TO}
-    else
-        TO_DATABASE_NAME="${TO_USER}_${FROM_DATABASE_NAME_WITHOUT_PREFIX}${DATABASE_SUFIX}"
-    fi
-fi
-if [ -z "$TO_DATABASE_USERNAME" ]; then
-    LENGTH_OF_TO_DATABASE_USERNAME=${#FROM_DATABASE_USERNAME}
-    START_FROM=$((LENGTH_OF_TO_DATABASE_USERNAME-LENGTH_OF_DATABASE_SUFIX))
-    CHECK_PREFIX=${FROM_DATABASE_USERNAME:START_FROM}
-    if [ "$CHECK_PREFIX" = "${DATABASE_SUFIX}" ]; then
-        TO_DATABASE_USERNAME="${TO_USER}_${FROM_DATABASE_USERNAME_WITHOUT_PREFIX}"
-        LENGTH_OF_TO_DATABASE_USERNAME=${#TO_DATABASE_USERNAME}
-        CUT_TO=$((LENGTH_OF_TO_DATABASE_USERNAME-LENGTH_OF_DATABASE_SUFIX))
-        TO_DATABASE_USERNAME=${TO_DATABASE_USERNAME:0:CUT_TO}
-    else
-        TO_DATABASE_USERNAME="${TO_USER}_${FROM_DATABASE_USERNAME_WITHOUT_PREFIX}${DATABASE_SUFIX}"
+if [ ! -z "$MAX_DBUSER_LEN" ] && [ "$MAX_DBUSER_LEN" -ge 80  ] && [ -z "$DATABASE_SUFIX" ]; then
+    TO_DATABASE_NAME=$(echo "$TO_DOMAIN" | sed 's#\.#_#g')
+    TO_DATABASE_NAME="${TO_USER}_$TO_DATABASE_NAME"
+    TO_DATABASE_USERNAME=$TO_DATABASE_NAME
+else
+    LENGTH_OF_DATABASE_SUFIX=${#DATABASE_SUFIX}
+    if [ -z "$TO_DATABASE_NAME" ]; then
+        LENGTH_OF_TO_DATABASE_NAME=${#FROM_DATABASE_NAME}
+        START_FROM=$((LENGTH_OF_TO_DATABASE_NAME-LENGTH_OF_DATABASE_SUFIX))
+        CHECK_PREFIX=${FROM_DATABASE_NAME:START_FROM}
+        if [ "$CHECK_PREFIX" = "${DATABASE_SUFIX}" ]; then
+            TO_DATABASE_NAME="${TO_USER}_${FROM_DATABASE_NAME_WITHOUT_PREFIX}"
+            LENGTH_OF_TO_DATABASE_NAME=${#TO_DATABASE_NAME}
+            CUT_TO=$((LENGTH_OF_TO_DATABASE_NAME-LENGTH_OF_DATABASE_SUFIX))
+            TO_DATABASE_NAME=${TO_DATABASE_NAME:0:CUT_TO}
+        else
+            TO_DATABASE_NAME="${TO_USER}_${FROM_DATABASE_NAME_WITHOUT_PREFIX}${DATABASE_SUFIX}"
+        fi
+    fi
+    if [ -z "$TO_DATABASE_USERNAME" ]; then
+        LENGTH_OF_TO_DATABASE_USERNAME=${#FROM_DATABASE_USERNAME}
+        START_FROM=$((LENGTH_OF_TO_DATABASE_USERNAME-LENGTH_OF_DATABASE_SUFIX))
+        CHECK_PREFIX=${FROM_DATABASE_USERNAME:START_FROM}
+        if [ "$CHECK_PREFIX" = "${DATABASE_SUFIX}" ]; then
+            TO_DATABASE_USERNAME="${TO_USER}_${FROM_DATABASE_USERNAME_WITHOUT_PREFIX}"
+            LENGTH_OF_TO_DATABASE_USERNAME=${#TO_DATABASE_USERNAME}
+            CUT_TO=$((LENGTH_OF_TO_DATABASE_USERNAME-LENGTH_OF_DATABASE_SUFIX))
+            TO_DATABASE_USERNAME=${TO_DATABASE_USERNAME:0:CUT_TO}
+        else
+            TO_DATABASE_USERNAME="${TO_USER}_${FROM_DATABASE_USERNAME_WITHOUT_PREFIX}${DATABASE_SUFIX}"
+        fi
     fi
 fi
+
 if [ ! -z "$TO_DATABASE" ]; then
     TO_DATABASE_USERNAME=$TO_DATABASE
     TO_DATABASE_NAME=$TO_DATABASE
@@ -304,7 +316,7 @@ read -p "=== Press Enter to continue ==="
 if [ $CREATE_TO_USER -eq 1 ]; then
     pass=$(vesta_generate_pass 10)
     echo "=== Create user $TO_USER, pass=$pass"
-    /usr/local/vesta/bin/v-add-user "$TO_USER" "$pass" "info@$TO_DOMAIN" "default" "Migrated" "site"
+    /usr/local/vesta/bin/v-add-user "$TO_USER" "$pass" "info@$TO_DOMAIN" "default" "cloned" "site"
 fi
 
 if [ $CREATE_TO_DOMAIN -eq 1 ]; then

From 5dedc1e8131e2491c578138d38f4c91fa6186e5f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 11 Feb 2023 20:35:00 +0100
Subject: [PATCH 1834/2300] Checking for $CREATE_TO_DATABASE in v-clone-website

---
 bin/v-clone-website | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 262d1a15..df98c6db 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -271,6 +271,12 @@ else
     fi
 fi
 
+CREATE_TO_DATABASE=0
+object=$(grep "DB='$TO_DATABASE_NAME'" $VESTA/data/users/$TO_USER/db.conf)
+if [ -z "$object" ]; then
+    CREATE_TO_DATABASE=1
+fi
+
 # ----------- PRINT -------------
 
 echo "==============================================================================="
@@ -299,6 +305,7 @@ echo "TO_DATABASE_USERNAME_WITHOUT_PREFIX   = $TO_DATABASE_USERNAME_WITHOUT_PREF
 echo "DATABASE_SUFIX        = $DATABASE_SUFIX"
 echo "CREATE_TO_USER        = $CREATE_TO_USER"
 echo "CREATE_TO_DOMAIN      = $CREATE_TO_DOMAIN"
+echo "CREATE_TO_DATABASE    = $CREATE_TO_DATABASE"
 echo "SHOULD_INSTALL_SSL    = $SHOULD_INSTALL_SSL"
 echo "FROM_DOMAIN_TPL       = $FROM_DOMAIN_TPL"
 echo "FROM_FPM_VER          = $FROM_FPM_VER"
@@ -316,7 +323,7 @@ read -p "=== Press Enter to continue ==="
 if [ $CREATE_TO_USER -eq 1 ]; then
     pass=$(vesta_generate_pass 10)
     echo "=== Create user $TO_USER, pass=$pass"
-    /usr/local/vesta/bin/v-add-user "$TO_USER" "$pass" "info@$TO_DOMAIN" "default" "cloned" "site"
+    /usr/local/vesta/bin/v-add-user "$TO_USER" "$pass" "info@$TO_DOMAIN" "default" "Cloned" "site"
 fi
 
 if [ $CREATE_TO_DOMAIN -eq 1 ]; then
@@ -352,8 +359,7 @@ if [ ! -z "$FROM_DOMAIN_PROXY_TPL" ]; then
     /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$TO_USER" "$TO_DOMAIN" "$FROM_DOMAIN_PROXY_TPL" "$FROM_DOMAIN_PROXY_EXT" "yes"
 fi
 
-object=$(grep "DB='$TO_DATABASE_NAME'" $VESTA/data/users/$TO_USER/db.conf)
-if [ -z "$object" ]; then
+if [ $CREATE_TO_DATABASE -eq 1 ]; then
     echo "=== Create database $TO_DATABASE_NAME"
     /usr/local/vesta/bin/v-add-database "$TO_USER" "$TO_DATABASE_NAME_WITHOUT_PREFIX" "$TO_DATABASE_USERNAME_WITHOUT_PREFIX" "$TO_DATABASE_PASSWORD" 'mysql' 'localhost' 'utf8'
 fi

From 0ab6925adb4c63abc3618b3a8cc069d675873468 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Feb 2023 15:59:45 +0100
Subject: [PATCH 1835/2300] Create v-commander

---
 bin/v-commander | 515 ++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 515 insertions(+)
 create mode 100644 bin/v-commander

diff --git a/bin/v-commander b/bin/v-commander
new file mode 100644
index 00000000..6fe05286
--- /dev/null
+++ b/bin/v-commander
@@ -0,0 +1,515 @@
+#!/bin/bash
+
+numargs=$#
+
+SHOWHEADER=0
+if [ $numargs -eq 0 ]; then
+    SHOWHEADER=1
+fi
+if [ $numargs -eq 1 ] && [ "$1" = "q" ]; then
+    SHOWHEADER=1
+fi
+
+
+source /etc/profile
+PATH=$PATH:/usr/local/vesta/bin && export PATH
+echo "======================= mvVesta-commander ================================"
+
+if [ -f /root/kernelupdate ]; then
+    rm /root/kernelupdate
+fi
+apt_upgraded=0
+quit_on_empty=0
+
+if [ $SHOWHEADER -eq 1 ]; then
+    hostname
+    if [ -f "/root/current-status.txt" ]; then
+        echo "------------------ WAS LONG TIME AGO ------------------"
+        cat /root/current-status.txt
+        truncate -s 0 /root/current-status.txt
+    fi
+    echo -n 'Debian ' >> /root/current-status.txt && cat /etc/debian_version >> /root/current-status.txt
+    php -v | grep '^PHP' >> /root/current-status.txt
+    /usr/local/vesta/bin/v-list-sys-services >> /root/current-status.txt
+    /usr/local/vesta/bin/v-list-sys-web-status | grep "Server MPM:" >> /root/current-status.txt
+    w | grep 'load average' >> /root/current-status.txt
+    df -h | grep "/$" >> /root/current-status.txt
+
+    echo "------------------------ NOW ------------------------"
+    cat /root/current-status.txt
+    echo "-----------------------------------------------------"
+    echo "(press 'h' for help)"
+    echo ""
+fi
+
+check_status() {
+    echo "=============================================================="
+    hostname
+    echo "------------------------ WAS ------------------------"
+    cat /root/current-status.txt
+    echo "------------------------ NOW ------------------------"
+    hostname
+    echo -n 'Debian ' && cat /etc/debian_version
+    php -v | grep '^PHP'
+    /usr/local/vesta/bin/v-list-sys-services
+    /usr/local/vesta/bin/v-list-sys-web-status | grep "Server MPM:"
+    w | grep 'load average'
+    df -h | grep "/$"
+    echo "-----------------------------------------------------"
+}
+
+myhelp() {
+    echo "---------- Press: -----------"
+    echo "u  = apt-get update"
+    echo "g  = apt-get upgrade"
+    echo "c  = check status"
+    echo "e  = make sure Apache is in mpm_event"
+    echo "s  = download sury.org apt-get key"
+    echo "m  = install php-memcached"
+    echo "p  = set version of php as default"
+    echo "v  = update myVesta"
+    echo "vo = update myVesta without 'apt-get update'"
+    echo "t  = clean the trash"
+    echo "w  = w"
+    echo "d  = df -h"
+    echo "f  = free -h"
+    echo "b  = bash"
+    echo "r  = reboot"
+    echo "q  = quit"
+    echo "h  = help"
+    echo "-----------------------------"
+    echo "inst v   = install myVesta"
+    echo "inst p   = install multi-php"
+    echo "inst pgw = install php-gate"
+    echo "inst r   = install new Roundcube"
+    echo "dis fb   = stop and disable fail2ban"
+    echo "dis dove = stop and disable dovecot"
+    echo "dis spam = stop and disable spam"
+    echo "dis clam = stop and disable clamav"
+    echo "p 7.0    = set default php 7.0"
+    echo "p 7.3    = set default php 7.3"
+    echo "p 7.4    = set default php 7.4"
+    echo "p def    = set proper default php"
+    echo "e def    = set mpm_event if needed"
+    echo "m def    = install php-memcached if needed"
+    echo "check fc = check if FreshClam is up"
+    echo "-----------------------------"
+    echo "enable-ssh-root-password-login = Allow root password authentication via SSH and set the root password to match the password for the admin account"
+    echo "-----------------------------"
+}
+
+COUNTER=0
+
+while true
+do
+
+    COUNTER=$((COUNTER + 1))
+    if [ $COUNTER -le $numargs ]; then
+        answer=$1
+        shift
+    else
+        read -p 'What to do: ' answer
+    fi
+
+    if [ "$answer" = 'prompt' ] || [ "$answer" = 'PROMPT' ]; then
+        echo "============================="
+        echo "hostname: $HOSTNAME"
+        read -p 'What to do [or press Enter to continue]: ' answer
+    fi
+    
+    if [ "$answer" = '' ] && [ $quit_on_empty -eq 1 ]; then
+        answer='q'
+    fi
+
+    if [ "$answer" = 'quit-on-empty' ]; then
+        echo "== the script will quit on next enter"
+        quit_on_empty=1
+    fi
+
+    if [ "$answer" = 'u' ] || [ "$answer" = 'U' ]; then
+        echo "============================="
+        echo "== running: apt-get update"
+        release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+        if [ "$release" -lt 10 ]; then
+            apt-get update
+        else
+            apt-get update --allow-releaseinfo-change
+        fi
+    fi
+
+    if [ "$answer" = 'g' ] || [ "$answer" = 'G' ]; then
+        echo "============================="
+        echo "== running: apt-get upgrade"
+        
+        if [ $apt_upgraded -eq 0 ]; then
+            cp /var/log/apt/history.log /var/log/apt/history-`date +"%Y%m%d%H%M%S"`.log
+            truncate -s 0 /var/log/apt/history.log
+        fi
+        
+        apt-get -y --with-new-pkgs upgrade
+        apt-get -y dist-upgrade
+        apt_upgraded=1
+        
+        kernelupdate=$(grep -c 'linux-image-' /var/log/apt/history.log)
+        if [ $kernelupdate -gt 0 ]; then
+            touch /root/kernelupdate
+            echo "== kernel is updated"
+        else
+            echo "== kernel is not updated"
+        fi
+    fi
+
+    if [ "$answer" = 'c' ] || [ "$answer" = 'C' ]; then
+        check_status
+    fi
+
+    if [ "$answer" = 's' ] || [ "$answer" = 'S' ]; then
+        if [ -f "/etc/apt/trusted.gpg.d/php.gpg" ]; then
+            echo "============================="
+            echo "== renewing sury.org gpg key"
+            wget -nv -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
+        fi
+    fi
+
+    if [ "$answer" = 'e def' ] || [ "$answer" = 'E DEF' ]; then
+        release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+        echo "============================="
+        echo "== checking if we need mpm_event mode"
+        echo "== detected Debian $release"
+        if [ "$release" -eq 10 ] || [ "$release" -eq 11 ] || [ -f "/root/switch-apache-to-event-mode.sh" ]; then
+            isevent=$(/usr/local/vesta/bin/v-list-sys-web-status | grep -c "Server MPM: event")
+            if [ $isevent -eq 0 ]; then
+                echo "== Apache should be switched to mpm_event mode"
+                answer='e'
+            else
+                echo "== Apache is already in mpm_event mode"
+            fi
+        fi
+        
+    fi
+    if [ "$answer" = 'e' ] || [ "$answer" = 'E' ]; then
+        echo "============================="
+        echo "== switching to mpm_event mode"
+        apt-get -y remove libapache2-mod-php*
+        a2dismod ruid2
+        a2dismod suexec
+        a2dismod php5.6
+        a2dismod php7.0
+        a2dismod php7.1
+        a2dismod php7.2
+        a2dismod php7.3
+        a2dismod php7.4
+        a2dismod php8.0
+        a2dismod php8.1
+        a2dismod php8.2
+        a2dismod mpm_prefork
+        a2enmod mpm_event
+        systemctl restart apache2
+    fi
+
+    if [ "$answer" = 'dis fb' ] || [ "$answer" = 'DIS FB' ]; then
+        echo "============================="
+        echo "== disabling fail2ban"
+        systemctl stop fail2ban
+        systemctl disable fail2ban
+        systemctl status fail2ban
+    fi
+
+    if [ "$answer" = 'dis dove' ] || [ "$answer" = 'DIS DOVE' ]; then
+        echo "============================="
+        echo "== disabling dovecot"
+        systemctl stop dovecot.service
+        systemctl stop dovecot.socket
+        systemctl disable dovecot.service
+    fi
+
+    if [ "$answer" = 'dis clam' ] || [ "$answer" = 'DIS CLAM' ]; then
+        echo "============================="
+        echo "== disabling ClamAV"
+        systemctl stop clamav-daemon.service
+        systemctl disable clamav-daemon.service
+
+        systemctl stop clamav-freshclam.service
+        systemctl disable clamav-freshclam.service
+
+        sed -i "s/^CLAMD =/#CLAMD =/g" /etc/exim4/exim4.conf.template
+        systemctl restart exim4
+    fi
+
+    if [ "$answer" = 'dis spam' ] || [ "$answer" = 'DIS SPAM' ]; then
+        echo "============================="
+        echo "== disabling SpamAssassin"
+        systemctl stop spamassassin.service
+        systemctl disable spamassassin.service
+
+        sed -i "s/^SPAMASSASSIN =/#SPAMASSASSIN =/g" /etc/exim4/exim4.conf.template
+        sed -i "s/^SPAM_SCORE =/#SPAM_SCORE =/g" /etc/exim4/exim4.conf.template
+        systemctl restart exim4
+    fi
+
+    if [ "$answer" = 'p' ] || [ "$answer" = 'P' ]; then
+        echo "============================="
+        echo "== changing default php version"
+        update-alternatives --config php
+        echo "--- NEW ---"
+        php -v | grep '^PHP'
+    fi
+
+    if [ "$answer" = 'p 7.0' ] || [ "$answer" = 'P 7.0' ]; then
+        echo "============================="
+        echo "== changing default php version to 7.0"
+        update-alternatives --set php /usr/bin/php7.0
+        echo "--- NEW ---"
+        php -v | grep '^PHP'
+    fi
+
+    if [ "$answer" = 'p 7.3' ] || [ "$answer" = 'P 7.3' ]; then
+        echo "============================="
+        echo "== changing default php version to 7.3"
+        update-alternatives --set php /usr/bin/php7.3
+        echo "--- NEW ---"
+        php -v | grep '^PHP'
+    fi
+
+    if [ "$answer" = 'p 7.4' ] || [ "$answer" = 'P 7.4' ]; then
+        echo "============================="
+        echo "== changing default php version to 7.4"
+        update-alternatives --set php /usr/bin/php7.4
+        echo "--- NEW ---"
+        php -v | grep '^PHP'
+    fi
+
+    if [ "$answer" = 'p def' ] || [ "$answer" = 'P DEF' ]; then
+        echo "============================="
+        echo "== checking if we need to change default php version"
+        automode=$(update-alternatives --display php | grep -c 'auto mode')
+        echo "============================="
+        if [ $automode -ge 1 ]; then
+            echo "=== php auto mode detected"
+            release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+            echo "== detected Debian $release"
+            if [ "$release" -eq 8 ]; then
+                echo "== set default php 5"
+                update-alternatives --set php /usr/bin/php5
+            fi
+            if [ "$release" -eq 9 ]; then
+                echo "== set default php 7.0"
+                update-alternatives --set php /usr/bin/php7.0
+            fi
+            if [ "$release" -eq 10 ]; then
+                echo "== set default php 7.3"
+                update-alternatives --set php /usr/bin/php7.3
+            fi
+            if [ "$release" -eq 11 ]; then
+                echo "== set default php 7.4"
+                update-alternatives --set php /usr/bin/php7.4
+            fi
+            echo "--- NEW ---"
+            php -v | grep '^PHP'
+        else
+            echo "== php is already in manual mode"
+            php -v | grep '^PHP'
+        fi
+    fi
+
+
+    if [ "$answer" = 'v' ] || [ "$answer" = 'V' ]; then
+        echo "============================="
+        echo "== updating myVesta"
+        if [ -f "/usr/local/vesta/bin/v-update-myvesta" ]; then
+            /usr/local/vesta/bin/v-update-myvesta
+        else
+            number_of_files=$(ls /var/cache/apt/archives/vesta_.* 2>/dev/null | wc -l)
+            if [ $number_of_files -gt 0 ]; then
+                rm /var/cache/apt/archives/vesta_* > /dev/null 2>&1
+            fi
+            apt-get update -o Dir::Etc::sourcelist="sources.list.d/vesta.list" -o Dir::Etc::sourceparts="-" -o APT::Get::List-Cleanup="0"  > /usr/local/vesta/log/update-$package.log 2>&1
+            apt-get install --reinstall vesta
+        fi
+    fi
+
+    if [ "$answer" = 'vo' ] || [ "$answer" = 'VO' ]; then
+        echo "============================="
+        echo "== updating myVesta (without 'apt-get update')"
+        number_of_files=$(ls /var/cache/apt/archives/vesta_.* 2>/dev/null | wc -l)
+        if [ $number_of_files -gt 0 ]; then
+            rm /var/cache/apt/archives/vesta_* > /dev/null 2>&1
+        fi
+        apt-get install --reinstall vesta
+    fi
+
+    if [ "$answer" = 'vor' ] || [ "$answer" = 'VOR' ]; then
+        echo "============================="
+        echo "== updating myVesta (without apt-get update and without reinstall)"
+        number_of_files=$(ls /var/cache/apt/archives/vesta_.* 2>/dev/null | wc -l)
+        if [ $number_of_files -gt 0 ]; then
+            rm /var/cache/apt/archives/vesta_* > /dev/null 2>&1
+        fi
+        apt-get install vesta
+    fi
+
+    if [ "$answer" = 't' ] || [ "$answer" = 'T' ]; then
+        echo "============================="
+        echo "== cleaning trash"
+        df -m
+        ps -Af | grep tailf | grep -v "grep tailf"
+        if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then
+            kill $(ps aux | grep 'tailf_apache_error' | grep -v "grep tailf_apache_error" | awk '{print $2}')
+        fi
+        if [ -f "/usr/local/bin/tailf_exim.php" ]; then
+            kill $(ps aux | grep 'tailf_exim' | grep -v "grep tailf_exim" | awk '{print $2}')
+        fi
+        echo "------"
+        ps -Af | grep tailf | grep -v "grep tailf"
+        echo "------"
+        sleep 2
+        truncate -s 0 /*.log
+        rm /panic-*.log
+        rm /var/log/panic-*.log
+        /usr/local/vesta/bin/v-clean-garbage
+        sleep 2
+        if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then
+            nohup php /usr/local/bin/tailf_apache_error.php > /var/log/tailf_apache_error.log &
+        fi
+        if [ -f "/usr/local/bin/tailf_exim.php" ]; then
+            nohup php /usr/local/bin/tailf_exim.php > /var/log/tailf_exim.log &
+        fi
+        echo "--------------"
+        df -m
+        echo "--------------"
+        sleep 2
+        ps -Af | grep tailf | grep -v "grep tailf"
+    fi
+
+    if [ "$answer" = 'm def' ] || [ "$answer" = 'M DEF' ]; then
+        phpupdate=$(grep -c 'php' /var/log/apt/history.log)
+        if [ $phpupdate -gt 0 ]; then
+            answer='m'
+        fi
+    fi
+
+    if [ "$answer" = 'm' ] || [ "$answer" = 'M' ]; then
+        echo "============================="
+        echo "== installing php-memcache modules"
+        apt-get install -y $(systemctl --full --type service --all | grep "php...-fpm" | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-memcache ")
+        apt-get install -y $(systemctl --full --type service --all | grep "php...-fpm" | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-memcached ")
+    fi
+
+    if [ "$answer" = 'd' ] || [ "$answer" = 'D' ]; then
+        echo "============================="
+        echo "== running: df -h"
+        df -h
+    fi
+
+    if [ "$answer" = 'f' ] || [ "$answer" = 'F' ]; then
+        echo "============================="
+        echo "== running: free -h"
+        free -h
+    fi
+
+    if [ "$answer" = 'w' ] || [ "$answer" = 'W' ]; then
+        echo "== running: free -h"
+        w
+    fi
+
+    if [ "$answer" = 'inst p' ] || [ "$answer" = 'INST P' ]; then
+        echo "============================="
+        echo "== installing new PHP versions"
+        cd /root
+        wget -nv -O /root/vesta-inst-php.sh https://c.myvestacp.com/tools/multi-php-install.sh
+        chmod u+x ./vesta-inst-php.sh
+        mcedit ./vesta-inst-php.sh
+        sudo ./vesta-inst-php.sh
+    fi
+
+    if [ "$answer" = 'inst pgw' ] || [ "$answer" = 'INST PGW' ]; then
+        echo "============================="
+        echo "== Installing phpgate"
+        wget -nv http://dl.myvestacp.com/vesta/install-phpgate.sh -O /root/install-phpgate.sh
+        chmod u+x /root/install-phpgate.sh
+        /root/install-phpgate.sh
+    fi
+
+    if [ "$answer" = 'check fc' ] || [ "$answer" = 'CHECK FC' ]; then
+        echo "== Checking if FreshClam is up"
+        clamavup=$(/usr/local/vesta/bin/v-list-sys-services | grep 'clamav-daemon' | grep -c 'running')
+        freshclamdown=$(/usr/local/vesta/bin/v-list-sys-services | grep 'clamav-freshclam' | grep -c 'off')
+        if [ $clamavup -eq 1 ] && [ $freshclamdown -eq 1 ]; then
+            echo "== Starting FreshClam"
+            systemctl enable clamav-freshclam.service
+            systemctl start clamav-freshclam.service
+        fi
+    fi
+    
+    if [ "$answer" = 'enable-ssh-root-password-login' ] || [ "$answer" = 'ENABLE-SSH-ROOT-PASSWORD-LOGIN' ]; then
+        sed -i "s|^PermitRootLogin .*|PermitRootLogin yes|g" /etc/ssh/sshd_config
+        sed -i "s|^#PermitRootLogin .*|PermitRootLogin yes|g" /etc/ssh/sshd_config
+        systemctl restart sshd
+        echo "--- New settings ---"
+        grep '^PermitRoot' /etc/ssh/sshd_config
+        echo "--------------------"
+        adminline=$(grep '^admin:' /etc/shadow)
+        adminline=${adminline:6}
+        adminline="root:$adminline"
+        sed -i "s#^root:.*#$adminline#" /etc/shadow
+        echo "root password is now the same as admin password."
+        echo "--------------------"
+        grep '^root:' /etc/shadow
+        grep '^admin:' /etc/shadow
+        echo "--------------------"
+        echo "Port 22 opened in Firewall for all IP addresses."
+        /usr/local/vesta/bin/v-unsuspend-firewall-rule "11"
+        echo "--------------------"
+    fi
+
+
+    if [ "$answer" = 'r' ] || [ "$answer" = 'R' ]; then
+        echo "============================="
+        echo "== Rebooting the server"
+        reboot
+    fi
+
+    if [ "$answer" = 'b' ] || [ "$answer" = 'B' ]; then
+        echo "============================="
+        echo "== Running bash"
+        bash
+    fi
+
+    if [ "$answer" = 'q' ] || [ "$answer" = 'Q' ]; then
+        echo "============================="
+        echo "== Exiting... bye bye :)"
+        exit 0
+    fi
+
+    if [ "$answer" = 'h' ] || [ "$answer" = 'H' ]; then
+        myhelp
+    fi
+
+    if [ "$answer" = 'inst v' ] || [ "$answer" = 'INST V' ]; then
+        echo "============================="
+        echo "== installing myVesta"
+        release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+        if [ "$release" -lt 10 ]; then
+            apt-get update
+        else
+            apt-get update --allow-releaseinfo-change
+        fi
+        apt-get -y --with-new-pkgs upgrade && apt-get -y dist-upgrade
+        apt-get -y install curl wget mc git sudo dnsutils screen
+        cd ~
+        curl -O http://c.myvestacp.com/vst-install-debian.sh
+        sudo bash vst-install-debian.sh
+        source /etc/profile
+        PATH=$PATH:/usr/local/vesta/bin && export PATH
+    fi
+
+    if [ "$answer" = 'inst r' ] || [ "$answer" = 'INST R' ]; then
+        echo "============================="
+        echo "== Installing new Roundcube"
+        wget -nv https://c.myvestacp.com/tools/install-new-roundcube.sh -O /root/install-new-roundcube.sh
+        chmod u+x /root/install-new-roundcube.sh
+        mcedit /root/install-new-roundcube.sh
+        /root/install-new-roundcube.sh
+    fi
+
+done

From df9e5508e09ed9b500971ec91eb4f9579a1ecccb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Feb 2023 16:21:32 +0100
Subject: [PATCH 1836/2300] Update Changelog.md

---
 Changelog.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index f49b75e4..9af9791b 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,11 @@
+Version 0.9.8-26-60 [12-Feb-2023]
+==================================================
+* New script: v-commander (useful for maintaining the server)
+* New script: v-activate-rocket-nginx (serve WP-Rocket cache directly from nginx)
+* New script: v-update-myvesta (get the very latest build of myVesta)
+* v-clone-website: By default cloning to database: user_domain_com (instead of cloning to database: user_old_db_migrated)
+* Many minor bugfixes
+
 Version 0.9.8-26-59 [01-Feb-2023]
 ==================================================
 * Support for PHP 8.2

From 1e201598474a912074d9af3157dd6fc41a9a7b38 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Feb 2023 16:22:53 +0100
Subject: [PATCH 1837/2300] Version 0.9.8-26-60

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 44148247..68750920 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-59
+vesta-0.9.8-26-60

From 7c9dfd4c05bd2b0afda9bb47836fc05d7970b274 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 15 Feb 2023 14:00:04 +0100
Subject: [PATCH 1838/2300] Update v-activate-rocket-nginx

---
 bin/v-activate-rocket-nginx | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-activate-rocket-nginx b/bin/v-activate-rocket-nginx
index f6957975..8e5d8ee1 100644
--- a/bin/v-activate-rocket-nginx
+++ b/bin/v-activate-rocket-nginx
@@ -83,6 +83,7 @@ fi
 echo "Proxy Template is ready"
 
 # Disabling wp-cron in wp-config.php
+cd /home/$user/web/$domain/public_html
 checkstring_disable="define('DISABLE_WP_CRON', true)"
 checkstring_enable="define('DISABLE_WP_CRON', false)"
 string_disable="define( 'DISABLE_WP_CRON', true );"

From a997f6f59c7bc134a00f5ad4b97e76d0aef54128 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 16 Feb 2023 20:50:57 +0100
Subject: [PATCH 1839/2300] Update v-activate-rocket-nginx

---
 bin/v-activate-rocket-nginx | 38 ++++++++++++++++++++++---------------
 1 file changed, 23 insertions(+), 15 deletions(-)

diff --git a/bin/v-activate-rocket-nginx b/bin/v-activate-rocket-nginx
index 8e5d8ee1..770cb866 100644
--- a/bin/v-activate-rocket-nginx
+++ b/bin/v-activate-rocket-nginx
@@ -104,23 +104,31 @@ fi
 
 
 # Adding cron job
-echo "Adding cron job..."
-
-TPL=$(/usr/local/vesta/bin/v-list-web-domain $user $domain shell | grep 'TEMPLATE:' | awk '{print $2}')
-if [[ $TPL == "PHP-FPM-"* ]]; then
-    fpm_tpl_ver=${TPL:8:2}
-    fpm_ver="${TPL:8:1}.${TPL:9:1}"
+# Check if a cron job already exists for any of the specified PHP-FPM versions
+existing_cron=$(crontab -l -u $user | grep "*/15.*wp-cron.php.*php[5-8].[6-9]\|8.[0-2]" | grep -v "grep")
+​
+if [ ! -z "$existing_cron" ]; then
+    echo "There is already a cron job added for user $user and domain $domain."
+else
+    echo "Adding cron job..."
+​
+    # Add the cron job
+    TPL=$(/usr/local/vesta/bin/v-list-web-domain $user $domain shell | grep 'TEMPLATE:' | awk '{print $2}')
+    if [[ $TPL == "PHP-FPM-"* ]]; then
+        fpm_tpl_ver=${TPL:8:2}
+        fpm_ver="${TPL:8:1}.${TPL:9:1}"
+    fi
+​
+    touch /home/$user/web/$domain/cron.log
+    chown $user:$user /home/$user/web/$domain/cron.log
+​
+    case $fpm_ver in
+        5.6 | 7.0 | 7.1 | 7.2 | 7.3 | 7.4 | 8.0 | 8.1 | 8.2) 
+            /usr/local/vesta/bin/v-add-cron-job "$user" "*/15" "*" "*" "*" "*" "cd /home/$user/web/$domain/public_html; /usr/bin/php$fpm_ver wp-cron.php >/home/$user/web/$domain/cron.log 2>&1"
+            ;;
+    esac
 fi
 
-touch /home/$user/web/$domain/cron.log
-chown $user:$user /home/$user/web/$domain/cron.log
-
-case $fpm_ver in
-    5.6 | 7.0 | 7.1 | 7.2 | 7.3 | 7.4 | 8.0 | 8.1 | 8.2) 
-    /usr/local/vesta/bin/v-add-cron-job "$user" "*/15" "*" "*" "*" "*" "cd /home/$user/web/$domain/public_html; /usr/bin/php$fpm_ver wp-cron.php >/home/$user/web/$domain/cron.log 2>&1"
-    ;;
-esac
-
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#

From 38ec1b872f73fa4f531f14c3c943e58ca3d836c2 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 16 Feb 2023 21:04:20 +0100
Subject: [PATCH 1840/2300] Update v-activate-rocket-nginx

---
 bin/v-activate-rocket-nginx | 22 ++++++++++++++++------
 1 file changed, 16 insertions(+), 6 deletions(-)

diff --git a/bin/v-activate-rocket-nginx b/bin/v-activate-rocket-nginx
index 770cb866..f42a1fc3 100644
--- a/bin/v-activate-rocket-nginx
+++ b/bin/v-activate-rocket-nginx
@@ -73,14 +73,24 @@ fi
 #----------------------------------------------------------#
 
 # Changing Proxy Template
-echo "Do you want to force-https in your Proxy Template or not (y/n):"
-read answer
-if [ "$answer" == "y" ]; then
-    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$user" "$domain" "wprocket-force-https"
+# Check if the proxy template is already set correctly
+current_template=$(/usr/local/vesta/bin/v-list-web-domain $user $domain | grep 'PROXY:' | awk '{print $2}')
+if [ "$current_template" == "wprocket-force-https" ] || [ "$current_template" == "wprocket-hosting" ]; then
+    echo "Proxy Template is already set up correctly"
 else
-    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$user" "$domain" "wprocket-hosting"
+    # Prompt the user to choose whether to force HTTPS or not
+    echo "Do you want to force-https in your Proxy Template or not (y/n):"
+    read answer
+
+    # Change the proxy template based on the user's choice
+    if [ "$answer" == "y" ]; then
+        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$user" "$domain" "wprocket-force-https"
+    else
+        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$user" "$domain" "wprocket-hosting"
+    fi
+
+    echo "Proxy Template is ready"
 fi
-echo "Proxy Template is ready"
 
 # Disabling wp-cron in wp-config.php
 cd /home/$user/web/$domain/public_html

From 72e659ac187e5ff1d8a5048c12ca15648939847b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 16 Feb 2023 21:20:11 +0100
Subject: [PATCH 1841/2300] Update v-get-php-version-of-domain

---
 bin/v-get-php-version-of-domain | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/bin/v-get-php-version-of-domain b/bin/v-get-php-version-of-domain
index bd0e7a51..b3b320fc 100644
--- a/bin/v-get-php-version-of-domain
+++ b/bin/v-get-php-version-of-domain
@@ -40,12 +40,12 @@ is_object_valid 'user' 'USER' "$user"
 is_object_unsuspended 'user' 'USER' "$user"
 
 if [ ! -d "/home/$user" ]; then
-    echo "User doesn't exist";
+    # echo "User doesn't exist";
     exit 1;
 fi
 
 if [ ! -d "/home/$user/web/$domain/public_html" ]; then
-    echo "Domain doesn't exist";
+    # echo "Domain doesn't exist";
     exit 1;
 fi
 
@@ -59,11 +59,12 @@ TPL=$(/usr/local/vesta/bin/v-list-web-domain $user $domain shell | grep 'TEMPLAT
 if [[ $TPL == "PHP-FPM-"* ]]; then
     fpm_tpl_ver=${TPL:8:2}
     fpm_ver="${TPL:8:1}.${TPL:9:1}"
+    echo "$fpm_ver"
+    exit 0;
 fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#
-echo "PHP-FPM version running on given domain is: $fpm_ver"
 
-exit
+exit 1;

From d267a3deaa08552cf03373a7b2d1de9b0064d4f7 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 16 Feb 2023 21:28:28 +0100
Subject: [PATCH 1842/2300] Update v-activate-rocket-nginx

---
 bin/v-activate-rocket-nginx | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/bin/v-activate-rocket-nginx b/bin/v-activate-rocket-nginx
index f42a1fc3..0c491c68 100644
--- a/bin/v-activate-rocket-nginx
+++ b/bin/v-activate-rocket-nginx
@@ -112,10 +112,9 @@ else
 fi
 
 
-
 # Adding cron job
 # Check if a cron job already exists for any of the specified PHP-FPM versions
-existing_cron=$(crontab -l -u $user | grep "*/15.*wp-cron.php.*php[5-8].[6-9]\|8.[0-2]" | grep -v "grep")
+existing_cron=$(crontab -l -u $user | grep -o "wp-cron.php >/home/$user/web/$domain/cron.log" | grep -v "grep")
 ​
 if [ ! -z "$existing_cron" ]; then
     echo "There is already a cron job added for user $user and domain $domain."

From ca4abdb864c2b7965edd030c469104ab17b05c27 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 16 Feb 2023 21:38:17 +0100
Subject: [PATCH 1843/2300] Update v-activate-rocket-nginx

---
 bin/v-activate-rocket-nginx | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/bin/v-activate-rocket-nginx b/bin/v-activate-rocket-nginx
index 0c491c68..c142f122 100644
--- a/bin/v-activate-rocket-nginx
+++ b/bin/v-activate-rocket-nginx
@@ -122,11 +122,7 @@ else
     echo "Adding cron job..."
 ​
     # Add the cron job
-    TPL=$(/usr/local/vesta/bin/v-list-web-domain $user $domain shell | grep 'TEMPLATE:' | awk '{print $2}')
-    if [[ $TPL == "PHP-FPM-"* ]]; then
-        fpm_tpl_ver=${TPL:8:2}
-        fpm_ver="${TPL:8:1}.${TPL:9:1}"
-    fi
+    fpm_ver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
 ​
     touch /home/$user/web/$domain/cron.log
     chown $user:$user /home/$user/web/$domain/cron.log

From 84cf1269fbe5e8066766afa936ff2c4c2bbe6a7f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 20 Feb 2023 11:16:08 +0100
Subject: [PATCH 1844/2300] Update sr.php

---
 web/inc/i18n/sr.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/i18n/sr.php b/web/inc/i18n/sr.php
index 3dfcc0f5..8c437ab9 100644
--- a/web/inc/i18n/sr.php
+++ b/web/inc/i18n/sr.php
@@ -119,7 +119,7 @@ $LANG['sr'] = array(
     'Editing DNS Domain'  => 'Izmena DNS-a za domen',
     'Adding DNS Record'  => 'Dodavanje DNS zapisa (DNS record)',
     'Editing DNS Record'  => 'Izmena DNS zapisa (DNS record)',
-    'Adding Mail Domain'  => 'Dodavanje Mail-a za domee',
+    'Adding Mail Domain'  => 'Dodavanje Mail-a za domene',
     'Editing Mail Domain'  => 'Izmena Mail-a za domen',
     'Adding Mail Account'  => 'Dodavanje Mail naloga',
     'Editing Mail Account'  => 'Izmena Mail naloga',

From d0bba785bee13c7cf3f8746ce0aef02029998be0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 21 Feb 2023 20:29:16 +0100
Subject: [PATCH 1845/2300] Update v-activate-rocket-nginx

---
 bin/v-activate-rocket-nginx | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/bin/v-activate-rocket-nginx b/bin/v-activate-rocket-nginx
index c142f122..bd4145cc 100644
--- a/bin/v-activate-rocket-nginx
+++ b/bin/v-activate-rocket-nginx
@@ -115,18 +115,16 @@ fi
 # Adding cron job
 # Check if a cron job already exists for any of the specified PHP-FPM versions
 existing_cron=$(crontab -l -u $user | grep -o "wp-cron.php >/home/$user/web/$domain/cron.log" | grep -v "grep")
-​
+
 if [ ! -z "$existing_cron" ]; then
     echo "There is already a cron job added for user $user and domain $domain."
 else
     echo "Adding cron job..."
-​
     # Add the cron job
     fpm_ver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
-​
     touch /home/$user/web/$domain/cron.log
     chown $user:$user /home/$user/web/$domain/cron.log
-​
+
     case $fpm_ver in
         5.6 | 7.0 | 7.1 | 7.2 | 7.3 | 7.4 | 8.0 | 8.1 | 8.2) 
             /usr/local/vesta/bin/v-add-cron-job "$user" "*/15" "*" "*" "*" "*" "cd /home/$user/web/$domain/public_html; /usr/bin/php$fpm_ver wp-cron.php >/home/$user/web/$domain/cron.log 2>&1"

From f8a3f209c4c0c6c7dd593c0011d43588f323eabb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 23 Feb 2023 14:55:45 +0100
Subject: [PATCH 1846/2300] Update fix-fpm-poold.sh

---
 src/deb/for-download/tools/patches/fix-fpm-poold.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/deb/for-download/tools/patches/fix-fpm-poold.sh b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
index 88534bfd..25cd7f84 100644
--- a/src/deb/for-download/tools/patches/fix-fpm-poold.sh
+++ b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
@@ -35,6 +35,8 @@ if [ -d "/etc/php" ]; then
 fi
 
 if [ -f "/etc/apache2/mods-enabled/mpm_event.conf" ]; then
+    rm /etc/apache2/mods-enabled/mpm_event.conf
+    ln -s /etc/apache2/mods-available/mpm_event.conf /etc/apache2/mods-enabled/mpm_event.conf
     sed -i "s#MaxRequestWorkers.*#MaxRequestWorkers        200#g" /etc/apache2/mods-enabled/mpm_event.conf
     systemctl restart apache2
 fi

From db554bacb7bf026d58e9d965fbfb4ff562df51b2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 23 Feb 2023 14:57:37 +0100
Subject: [PATCH 1847/2300] Update fix-fpm-poold.sh

---
 src/deb/for-download/tools/patches/fix-fpm-poold.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/patches/fix-fpm-poold.sh b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
index 25cd7f84..94566768 100644
--- a/src/deb/for-download/tools/patches/fix-fpm-poold.sh
+++ b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
@@ -37,6 +37,6 @@ fi
 if [ -f "/etc/apache2/mods-enabled/mpm_event.conf" ]; then
     rm /etc/apache2/mods-enabled/mpm_event.conf
     ln -s /etc/apache2/mods-available/mpm_event.conf /etc/apache2/mods-enabled/mpm_event.conf
-    sed -i "s#MaxRequestWorkers.*#MaxRequestWorkers        200#g" /etc/apache2/mods-enabled/mpm_event.conf
+    sed -i "s#MaxRequestWorkers.*#MaxRequestWorkers        200#g" /etc/apache2/mods-available/mpm_event.conf
     systemctl restart apache2
 fi

From 8dcbafcc73dd45a892f14cf02b21e1ab71a5263a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 23 Feb 2023 15:47:30 +0100
Subject: [PATCH 1848/2300] Update v-get-php-version-of-domain

---
 bin/v-get-php-version-of-domain | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-get-php-version-of-domain b/bin/v-get-php-version-of-domain
index b3b320fc..c87b4e4c 100644
--- a/bin/v-get-php-version-of-domain
+++ b/bin/v-get-php-version-of-domain
@@ -15,6 +15,8 @@ fi
 # Importing system environment
 source /etc/profile
 
+SILENT_MODE=1
+
 # Argument definition
 domain=$1
 

From 0fae1613e31e74fa081d84d65bcb000edc3b57d6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 23 Feb 2023 15:58:00 +0100
Subject: [PATCH 1849/2300] Update main.sh

---
 func/main.sh | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/func/main.sh b/func/main.sh
index c4169b01..10de469a 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -86,7 +86,9 @@ log_history() {
 # Result checker
 check_result() {
     if [ $1 -ne 0 ]; then
-        echo "Error: $2"
+        if [ -z "$SILENT_MODE" ]; then
+            echo "Error: $2"
+        fi
         if [ ! -z "$3" ]; then
             log_event "$3" "$ARGUMENTS"
             exit $3
@@ -100,7 +102,9 @@ check_result() {
 # Argument list checker
 check_args() {
     if [ "$1" -gt "$2" ]; then
-        echo "Usage: $(basename $0) $3"
+        if [ -z "$SILENT_MODE" ]; then
+            echo "Usage: $(basename $0) $3"
+        fi
         check_result $E_ARGS "not enought arguments" >/dev/null
     fi
 }

From 33911259254493c9e7b2a81da3d1e869eb7a15aa Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 23 Feb 2023 16:18:31 +0100
Subject: [PATCH 1850/2300] SILENT_MODE in v-search-domain-owner

---
 bin/v-search-domain-owner | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-search-domain-owner b/bin/v-search-domain-owner
index 5b88f495..f807ebd2 100755
--- a/bin/v-search-domain-owner
+++ b/bin/v-search-domain-owner
@@ -9,6 +9,8 @@
 #                    Variable&Function                     #
 #----------------------------------------------------------#
 
+SILENT_MODE=1
+
 # Argument definition
 domain=$(idn -t --quiet -u "$1" )
 type=${2-any}

From 91c6ff09ab96df883fa739bf5c7c785b5ec5f42a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 23 Feb 2023 20:45:28 +0100
Subject: [PATCH 1851/2300] Revert "Include "hidden" files to backup"

---
 bin/v-backup-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 8bd0bb25..e2d7cac9 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -265,7 +265,7 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
         set +f
 
         # Backup files
-        tar --anchored -cpf- ${fargs[@]} --exclude={'./','../'} . |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
+        tar --anchored -cpf- ${fargs[@]} * |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
     done
 
     # Print total

From 47d55cff76206530588a10321106fb7ea3b6c5ba Mon Sep 17 00:00:00 2001
From: N1ebieski <kontakt@intelekt.net.pl>
Date: Fri, 24 Feb 2023 11:52:37 +0100
Subject: [PATCH 1852/2300] Update v-backup-user

Include "hidden" files to backup with support for exclusions in old pattern
---
 bin/v-backup-user | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index e2d7cac9..0db5d376 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -251,6 +251,11 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
         if [ ! -z "$exlusion" ]; then
             xdirs="$(echo -e "$exlusion" |tr ':' '\n' |grep -v $domain)"
             for xpath in $xdirs; do
+                # Add ./ at the beginning of the path if the path is in old pattern
+                if [[ $xpath != ./* ]]; then
+                    xpath=(./$xpath)
+                fi
+            
                 if [ -d "$xpath" ]; then
                     fargs+=(--exclude=$xpath/*)
                     echo "$(date "+%F %T") excluding directory $xpath"
@@ -265,7 +270,7 @@ if [ ! -z "$WEB_SYSTEM" ] && [ "$WEB" != '*' ]; then
         set +f
 
         # Backup files
-        tar --anchored -cpf- ${fargs[@]} * |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
+        tar --anchored -cpf- ${fargs[@]} --exclude={'./','../'} . |gzip -$BACKUP_GZIP - > $tmpdir/web/$domain/domain_data.tar.gz
     done
 
     # Print total

From 6db5f28ae53cb6379d8b2d12ca88b081290ecbaa Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 2 Mar 2023 15:29:26 +0100
Subject: [PATCH 1853/2300] Update v-commander

---
 bin/v-commander | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-commander b/bin/v-commander
index 6fe05286..f6b24612 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -391,8 +391,8 @@ do
     if [ "$answer" = 'm' ] || [ "$answer" = 'M' ]; then
         echo "============================="
         echo "== installing php-memcache modules"
-        apt-get install -y $(systemctl --full --type service --all | grep "php...-fpm" | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-memcache ")
-        apt-get install -y $(systemctl --full --type service --all | grep "php...-fpm" | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-memcached ")
+        apt-get install -y $(systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-memcache ")
+        apt-get install -y $(systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-memcached ")
     fi
 
     if [ "$answer" = 'd' ] || [ "$answer" = 'D' ]; then

From 38137b3ba9c125f2ffb4554a0997f233f8b351b8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 3 Mar 2023 10:47:25 +0100
Subject: [PATCH 1854/2300] Do not delete ssl.$domain*

---
 bin/v-delete-web-domain-ssl | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/bin/v-delete-web-domain-ssl b/bin/v-delete-web-domain-ssl
index 05e8c940..30272928 100755
--- a/bin/v-delete-web-domain-ssl
+++ b/bin/v-delete-web-domain-ssl
@@ -57,8 +57,14 @@ fi
 
 # Deleting old certificate
 tmpdir=$(mktemp -p $HOMEDIR/$user/web/$domain/private -d)
-rm -f $HOMEDIR/$user/conf/web/ssl.$domain.*
-mv $USER_DATA/ssl/$domain.* $tmpdir
+rm -f $HOMEDIR/$user/conf/web/ssl.$domain.ca
+rm -f $HOMEDIR/$user/conf/web/ssl.$domain.crt
+rm -f $HOMEDIR/$user/conf/web/ssl.$domain.key
+rm -f $HOMEDIR/$user/conf/web/ssl.$domain.pem
+mv $USER_DATA/ssl/$domain.ca $tmpdir
+mv $USER_DATA/ssl/$domain.crt $tmpdir
+mv $USER_DATA/ssl/$domain.key $tmpdir
+mv $USER_DATA/ssl/$domain.pem $tmpdir
 chown -R $user:$user $tmpdir
 
 

From 16e1000f1cac5f4b0fefcb94badbbf6188c5450c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 11 Mar 2023 10:40:40 +0100
Subject: [PATCH 1855/2300] str_get_between PHP function

---
 func/string.php | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/func/string.php b/func/string.php
index c94f85a2..111c57eb 100644
--- a/func/string.php
+++ b/func/string.php
@@ -11,3 +11,33 @@ function myvesta_replace_in_file($find, $replace, $file) {
     $r=file_put_contents($file, $buf);
     return $r;
 }
+
+function myvesta_str_get_between (&$text, $left_substring, $right_substring, $start=0, $do_not_return_left_substring=1, $do_not_return_right_substring=1, $left_substring_necessary=1, $right_substring_necessary=1)
+{
+	$from_null=0;
+	$pos1=strpos($text, $left_substring, $start);
+	if ($pos1===FALSE)
+	{
+		if ($left_substring_necessary==1) return "";
+		$pos1=$start;
+		$from_null=1;
+	}
+
+	if ($do_not_return_left_substring==1)
+	{
+		if ($from_null==0) $pos1=$pos1+strlen($left_substring);
+	}
+	$pos2=strpos($text, $right_substring, $pos1+1);
+	if ($pos2===FALSE)
+	{
+		if ($right_substring_necessary==1) return "";
+		$pos2=strlen($text);
+	}
+	if ($do_not_return_right_substring==1) $len=$pos2-$pos1;
+	else $len=($pos2-$pos1)+strlen($right_substring);
+	
+	$slen=strlen($text);
+	if ($pos1+$len>$slen) $len=$slen-$pos1;
+	
+	return substr($text, $pos1, $len);
+}

From 8ae36f7df53c174eef34fbf945ca241705b8d715 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 11 Mar 2023 14:50:11 +0100
Subject: [PATCH 1856/2300] Update string.php

---
 func/string.php | 102 ++++++++++++++++++++++++++++++++++++------------
 1 file changed, 76 insertions(+), 26 deletions(-)

diff --git a/func/string.php b/func/string.php
index 111c57eb..8677af04 100644
--- a/func/string.php
+++ b/func/string.php
@@ -12,32 +12,82 @@ function myvesta_replace_in_file($find, $replace, $file) {
     return $r;
 }
 
-function myvesta_str_get_between (&$text, $left_substring, $right_substring, $start=0, $do_not_return_left_substring=1, $do_not_return_right_substring=1, $left_substring_necessary=1, $right_substring_necessary=1)
+function myvesta_str_get_between (&$text, $left_substring, $right_substring, $start=0, $return_left_substring=0, $return_right_substring=0, $left_substring_necessary=1, $right_substring_necessary=1)
 {
-	$from_null=0;
-	$pos1=strpos($text, $left_substring, $start);
-	if ($pos1===FALSE)
-	{
-		if ($left_substring_necessary==1) return "";
-		$pos1=$start;
-		$from_null=1;
-	}
+    global $myvesta_str_found_at, $myvesta_str_end_at;
+    $myvesta_str_found_at=0;
+    $myvesta_str_end_at=0;
+    $from_null=0;
+    $pos1=strpos($text, $left_substring, $start);
+    if ($pos1===FALSE)
+    {
+        if ($left_substring_necessary==1) return "";
+        $pos1=$start;
+        $from_null=1;
+    }
 
-	if ($do_not_return_left_substring==1)
-	{
-		if ($from_null==0) $pos1=$pos1+strlen($left_substring);
-	}
-	$pos2=strpos($text, $right_substring, $pos1+1);
-	if ($pos2===FALSE)
-	{
-		if ($right_substring_necessary==1) return "";
-		$pos2=strlen($text);
-	}
-	if ($do_not_return_right_substring==1) $len=$pos2-$pos1;
-	else $len=($pos2-$pos1)+strlen($right_substring);
-	
-	$slen=strlen($text);
-	if ($pos1+$len>$slen) $len=$slen-$pos1;
-	
-	return substr($text, $pos1, $len);
+    if ($return_left_substring==0)
+    {
+        if ($from_null==0) $pos1=$pos1+strlen($left_substring);
+    }
+    $pos2=strpos($text, $right_substring, $pos1+1);
+    if ($pos2===FALSE)
+    {
+        if ($right_substring_necessary==1) return "";
+        $pos2=strlen($text);
+    }
+    if ($return_right_substring==0) $len=$pos2-$pos1;
+    else $len=($pos2-$pos1)+strlen($right_substring);
+    
+    $slen=strlen($text);
+    if ($pos1+$len>$slen) $len=$slen-$pos1;
+    
+    $myvesta_str_found_at=$pos1;
+    $myvesta_str_end_at=$pos1+$len;
+    
+    return substr($text, $pos1, $len);
+}
+
+function myvesta_str_replace_once_between_including_borders(&$text, $left, $right, $replace_with) {
+    $pos1=strpos($text, $left);
+    if ($pos1===false) return $text;
+    $pos2=strpos($text, $right, $left+strlen($left));
+    if ($pos2===false) return $text;
+    return substr($text, 0, $pos1).$replace_with.substr($text, $pos2+strlen($right));
+}
+
+function myvesta_str_strip_once_between_including_borders(&$text, $left, $right) {
+    $pos1=strpos($text, $left);
+    if ($pos1===false) return $text;
+    $pos2=strpos($text, $right, $left+strlen($left));
+    if ($pos2===false) return $text;
+    return substr($text, 0, $pos1).substr($text, $pos2+strlen($right));
+}
+
+
+function myvesta_str_replace_between_including_borders($text, $left, $right, $replace_with) {
+    $start=0;
+    $left_len=strlen($left);
+    $right_len=strlen($right);
+    while (true) {
+        $pos1=strpos($text, $left);
+        if ($pos1===false) break;
+        $pos2=strpos($text, $right, $left+$left_len);
+        if ($pos2===false) break;
+        $text=substr($text, 0, $pos1).$replace_with.substr($text, $pos2+$right_len);
+    }
+    return $text;
+}
+
+function myvesta_str_strip_between_including_borders($text, $left, $right) {
+    $left_len=strlen($left);
+    $right_len=strlen($right);
+    while (true) {
+        $pos1=strpos($text, $left);
+        if ($pos1===false) break;
+        $pos2=strpos($text, $right, $left+$left_len);
+        if ($pos2===false) break;
+        $text=substr($text, 0, $pos1).substr($text, $pos2+$right_len);
+    }
+    return $text;
 }

From bdc75152d20e183b4f5d0a4fc9d5dc91c4f78a07 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 21 Mar 2023 17:49:08 +0100
Subject: [PATCH 1857/2300] php8.2.patch

---
 .../for-download/tools/patches/php8.2.patch   | 81 +++++++++++++++++++
 1 file changed, 81 insertions(+)
 create mode 100644 src/deb/for-download/tools/patches/php8.2.patch

diff --git a/src/deb/for-download/tools/patches/php8.2.patch b/src/deb/for-download/tools/patches/php8.2.patch
new file mode 100644
index 00000000..1083a720
--- /dev/null
+++ b/src/deb/for-download/tools/patches/php8.2.patch
@@ -0,0 +1,81 @@
+--- /etc/php/8.2/fpm/php.ini.orig	2023-03-21 14:35:10.000000000 +0100
++++ /etc/php/8.2/fpm/php.ini	2023-03-21 14:43:42.000000000 +0100
+@@ -320,7 +320,7 @@
+ ; This directive allows you to disable certain functions.
+ ; It receives a comma-delimited list of function names.
+ ; https://php.net/disable-functions
+-disable_functions = 
++ disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes.
+ ; It receives a comma-delimited list of class names.
+@@ -423,7 +423,7 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; How many multipart body parts (combined input variable and file uploads) may
+ ; be accepted.
+@@ -432,7 +432,7 @@
+ 
+ ; Maximum amount of memory a script may consume
+ ; https://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -700,7 +700,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; https://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 80M
+ 
+ ; Automatically add files before PHP document.
+ ; https://php.net/auto-prepend-file
+@@ -852,7 +852,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; https://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 80M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1108,7 +1108,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1786,20 +1786,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=512
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5

From afa72dc25836775e01e6183dfdfd34dde71e1ab4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 21 Mar 2023 17:50:14 +0100
Subject: [PATCH 1858/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 14253444..764f56cf 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -332,8 +332,8 @@ if [ "$inst_82" -eq 1 ]; then
     chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.sh
     chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82-public.sh
     echo "=== Patching php.ini for php8.2"
-    wget -nv https://c.myvestacp.com/tools/patches/php8.1.patch -O /root/php8.1.patch
-    patch /etc/php/8.2/fpm/php.ini < /root/php8.1.patch
+    wget -nv https://c.myvestacp.com/tools/patches/php8.2.patch -O /root/php8.2.patch
+    patch /etc/php/8.2/fpm/php.ini < /root/php8.2.patch
     if [ $memory -gt 9999999 ]; then
         sed -i "s|opcache.memory_consumption=512|opcache.memory_consumption=2048|g" /etc/php/8.2/fpm/php.ini
     fi

From 172d66b4d2b9eba11cbcfb3920d09f692c81a826 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 22 Mar 2023 15:02:22 +0100
Subject: [PATCH 1859/2300] Add files via upload

---
 .../for-download/tools/patches/php8.1.patch    | 18 +++++++++++-------
 1 file changed, 11 insertions(+), 7 deletions(-)

diff --git a/src/deb/for-download/tools/patches/php8.1.patch b/src/deb/for-download/tools/patches/php8.1.patch
index 479af689..9e1648ab 100644
--- a/src/deb/for-download/tools/patches/php8.1.patch
+++ b/src/deb/for-download/tools/patches/php8.1.patch
@@ -1,5 +1,5 @@
---- /etc/php/8.1/fpm/php.ini.orig	2021-11-25 21:48:52.000000000 +0100
-+++ /etc/php/8.1/fpm/php.ini	2021-12-12 20:25:01.000000000 +0100
+--- /etc/php/8.1/fpm/php.ini.orig	2023-03-16 15:37:38.000000000 +0100
++++ /etc/php/8.1/fpm/php.ini	2023-03-22 14:58:38.000000000 +0100
 @@ -320,7 +320,7 @@
  ; This directive allows you to disable certain functions.
  ; It receives a comma-delimited list of function names.
@@ -9,13 +9,17 @@
  
  ; This directive allows you to disable certain classes.
  ; It receives a comma-delimited list of class names.
-@@ -423,11 +423,11 @@
+@@ -423,7 +423,7 @@
  ;max_input_nesting_level = 64
  
  ; How many GET/POST/COOKIE input variables may be accepted
 -;max_input_vars = 1000
 +max_input_vars = 6000
  
+ ; How many multipart body parts (combined input variable and file uploads) may
+ ; be accepted.
+@@ -432,7 +432,7 @@
+ 
  ; Maximum amount of memory a script may consume
  ; https://php.net/memory-limit
 -memory_limit = 128M
@@ -23,7 +27,7 @@
  
  ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
  ; Error handling and logging ;
-@@ -695,7 +695,7 @@
+@@ -700,7 +700,7 @@
  ; Its value may be 0 to disable the limit. It is ignored if POST data reading
  ; is disabled through enable_post_data_reading.
  ; https://php.net/post-max-size
@@ -32,7 +36,7 @@
  
  ; Automatically add files before PHP document.
  ; https://php.net/auto-prepend-file
-@@ -847,7 +847,7 @@
+@@ -852,7 +852,7 @@
  
  ; Maximum allowed size for uploaded files.
  ; https://php.net/upload-max-filesize
@@ -41,7 +45,7 @@
  
  ; Maximum number of files that can be uploaded via a single request
  max_file_uploads = 20
-@@ -1093,7 +1093,7 @@
+@@ -1103,7 +1103,7 @@
  
  ; The path to a log file that will log all mail() calls. Log entries include
  ; the full path of the script, line number, To address and headers.
@@ -50,7 +54,7 @@
  ; Log mail to syslog (Event Log on Windows).
  ;mail.log = syslog
  
-@@ -1764,20 +1764,20 @@
+@@ -1774,20 +1774,20 @@
  
  [opcache]
  ; Determines if Zend OPCache is enabled

From e9ca648f12c7a772a12dfd48127b89105e5ed6dd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 23 Mar 2023 14:14:40 +0100
Subject: [PATCH 1860/2300] v-commander: inst-memchached and inst-redis

---
 bin/v-commander | 42 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)

diff --git a/bin/v-commander b/bin/v-commander
index f6b24612..06a5f737 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -82,6 +82,8 @@ myhelp() {
     echo "inst p   = install multi-php"
     echo "inst pgw = install php-gate"
     echo "inst r   = install new Roundcube"
+    echo "inst memcached = install memcached"
+    echo "inst redis     = install Redis"
     echo "dis fb   = stop and disable fail2ban"
     echo "dis dove = stop and disable dovecot"
     echo "dis spam = stop and disable spam"
@@ -430,6 +432,46 @@ do
         /root/install-phpgate.sh
     fi
 
+    if [ "$answer" = 'inst memcache' ] || [ "$answer" = 'inst memcached' ] || [ "$answer" = 'INST MEMCACHE' ] || [ "$answer" = 'INST MEMCACHED' ]; then
+        echo "============================="
+        echo "== Installing memcached"
+        memory=$(grep 'MemTotal' /proc/meminfo |tr ' ' '\n' |grep [0-9])
+        apt-get update
+        apt-get -y install memcached 
+        apt-get install $(systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-memcache ")
+        apt-get install $(systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-memcached ")
+        if [ $memory -lt 15000000 ]; then
+            sed -i "s/-m 64/-m 256/" /etc/memcached.conf
+        else
+            sed -i "s/-m 64/-m 1024/" /etc/memcached.conf
+        fi
+        systemctl restart memcached
+        echo "== memcached installed."
+        echo "-----------------------"
+    fi
+
+    if [ "$answer" = 'inst redis' ] || [ "$answer" = 'INST REDIS' ]; then
+        echo "============================="
+        echo "== Installing Redis"
+        memory=$(grep 'MemTotal' /proc/meminfo |tr ' ' '\n' |grep [0-9])
+        apt-get update
+        apt-get install -y redis-server
+        apt-get install $(systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-redis ")
+
+        sed -i "s|^supervised no|supervised systemd|g" /etc/redis/redis.conf
+        sed -i "s|^save |# save |g" /etc/redis/redis.conf
+        if [ $memory -lt 15000000 ]; then
+            sed -i "s|^# maxmemory .*|maxmemory 256m|g" /etc/redis/redis.conf
+        else
+            sed -i "s|^# maxmemory .*|maxmemory 1g|g" /etc/redis/redis.conf
+        fi
+        sed -i "s|^# maxmemory-policy .*|maxmemory-policy allkeys-lru|g" /etc/redis/redis.conf
+        systemctl restart redis
+        redis-cli info memory
+        echo "== Redis installed."
+        echo "-------------------"
+    fi
+
     if [ "$answer" = 'check fc' ] || [ "$answer" = 'CHECK FC' ]; then
         echo "== Checking if FreshClam is up"
         clamavup=$(/usr/local/vesta/bin/v-list-sys-services | grep 'clamav-daemon' | grep -c 'running')

From cd5cc2eda4e685490f2638969fc5b1345f1b9575 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 24 Mar 2023 20:36:20 +0100
Subject: [PATCH 1861/2300] Forward from primary ip, not from secondary

---
 install/debian/11/exim/exim4.conf.template-RC | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/install/debian/11/exim/exim4.conf.template-RC b/install/debian/11/exim/exim4.conf.template-RC
index 605d848a..36ba2a0d 100644
--- a/install/debian/11/exim/exim4.conf.template-RC
+++ b/install/debian/11/exim/exim4.conf.template-RC
@@ -140,6 +140,11 @@ acl_check_rcpt:
 
   warn    set acl_m3    = no
   
+  warn    !authenticated = *
+          hosts          = !+relay_from_hosts
+          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+          set acl_m3    = yes
+
   deny    message       = Restricted characters in address
           domains       = +local_domains
           local_parts   = ^[.] : ^.*[@%!/|]

From a235ba63847464e7b1e4e63efd69799e45a3a3f0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 24 Mar 2023 23:15:17 +0100
Subject: [PATCH 1862/2300] exim_forwarding.patch

---
 .../tools/patches/exim_forwarding.patch            | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 src/deb/for-download/tools/patches/exim_forwarding.patch

diff --git a/src/deb/for-download/tools/patches/exim_forwarding.patch b/src/deb/for-download/tools/patches/exim_forwarding.patch
new file mode 100644
index 00000000..78b7ef69
--- /dev/null
+++ b/src/deb/for-download/tools/patches/exim_forwarding.patch
@@ -0,0 +1,14 @@
+--- old	2023-03-23 14:17:42.536656160 +0100
++++ new	2023-03-24 23:07:08.186018906 +0100
+@@ -140,6 +140,11 @@
+ 
+   warn    set acl_m3    = no
+   
++  warn    !authenticated = *
++          hosts          = !+relay_from_hosts
++          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
++          set acl_m3    = yes
++
+   deny    message       = Restricted characters in address
+           domains       = +local_domains
+           local_parts   = ^[.] : ^.*[@%!/|]

From 77857f92f016df78420d1eaa167c2b491c071ad9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Mar 2023 15:39:57 +0100
Subject: [PATCH 1863/2300] https redirect to the same host

---
 install/debian/10/templates/web/nginx/force-https-legacy.tpl    | 2 +-
 install/debian/10/templates/web/nginx/force-https-public.tpl    | 2 +-
 .../10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl   | 2 +-
 install/debian/10/templates/web/nginx/force-https.tpl           | 2 +-
 install/debian/10/templates/web/nginx/private-force-https.tpl   | 2 +-
 install/debian/11/templates/web/nginx/force-https-legacy.tpl    | 2 +-
 install/debian/11/templates/web/nginx/force-https-public.tpl    | 2 +-
 .../11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl   | 2 +-
 install/debian/11/templates/web/nginx/force-https.tpl           | 2 +-
 install/debian/11/templates/web/nginx/private-force-https.tpl   | 2 +-
 10 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/force-https-legacy.tpl b/install/debian/10/templates/web/nginx/force-https-legacy.tpl
index 851ac0dc..8bdbea42 100644
--- a/install/debian/10/templates/web/nginx/force-https-legacy.tpl
+++ b/install/debian/10/templates/web/nginx/force-https-legacy.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host%$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/10/templates/web/nginx/force-https-public.tpl b/install/debian/10/templates/web/nginx/force-https-public.tpl
index 851ac0dc..8bdbea42 100644
--- a/install/debian/10/templates/web/nginx/force-https-public.tpl
+++ b/install/debian/10/templates/web/nginx/force-https-public.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host%$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
index 851ac0dc..8bdbea42 100644
--- a/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
+++ b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host%$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/10/templates/web/nginx/force-https.tpl b/install/debian/10/templates/web/nginx/force-https.tpl
index 851ac0dc..8bdbea42 100644
--- a/install/debian/10/templates/web/nginx/force-https.tpl
+++ b/install/debian/10/templates/web/nginx/force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host%$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/10/templates/web/nginx/private-force-https.tpl b/install/debian/10/templates/web/nginx/private-force-https.tpl
index 851ac0dc..8bdbea42 100644
--- a/install/debian/10/templates/web/nginx/private-force-https.tpl
+++ b/install/debian/10/templates/web/nginx/private-force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host%$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/11/templates/web/nginx/force-https-legacy.tpl b/install/debian/11/templates/web/nginx/force-https-legacy.tpl
index 851ac0dc..8bdbea42 100644
--- a/install/debian/11/templates/web/nginx/force-https-legacy.tpl
+++ b/install/debian/11/templates/web/nginx/force-https-legacy.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host%$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/11/templates/web/nginx/force-https-public.tpl b/install/debian/11/templates/web/nginx/force-https-public.tpl
index 851ac0dc..8bdbea42 100644
--- a/install/debian/11/templates/web/nginx/force-https-public.tpl
+++ b/install/debian/11/templates/web/nginx/force-https-public.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host%$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl b/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
index 851ac0dc..8bdbea42 100644
--- a/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
+++ b/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host%$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/11/templates/web/nginx/force-https.tpl b/install/debian/11/templates/web/nginx/force-https.tpl
index 851ac0dc..8bdbea42 100644
--- a/install/debian/11/templates/web/nginx/force-https.tpl
+++ b/install/debian/11/templates/web/nginx/force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host%$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/11/templates/web/nginx/private-force-https.tpl b/install/debian/11/templates/web/nginx/private-force-https.tpl
index 851ac0dc..8bdbea42 100644
--- a/install/debian/11/templates/web/nginx/private-force-https.tpl
+++ b/install/debian/11/templates/web/nginx/private-force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host%$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }

From ce7f31121dbf800f5e738749303dcef7ed39c6b2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Mar 2023 16:10:09 +0100
Subject: [PATCH 1864/2300] https redirect to the same host (deb9)

---
 .../web/nginx/force-https-legacy.stpl         | 39 ++++++++++++
 .../web/nginx/force-https-legacy.tpl          |  8 +++
 .../web/nginx/force-https-public.stpl         | 39 ++++++++++++
 .../web/nginx/force-https-public.tpl          |  8 +++
 .../nginx/force-https-webmail-phpmyadmin.stpl | 63 +++++++++++++++++++
 .../nginx/force-https-webmail-phpmyadmin.tpl  |  8 +++
 .../8/templates/web/nginx/force-https.stpl    | 39 ++++++++++++
 .../8/templates/web/nginx/force-https.tpl     |  8 +++
 .../web/nginx/private-force-https.stpl        | 39 ++++++++++++
 9 files changed, 251 insertions(+)
 create mode 100644 install/debian/8/templates/web/nginx/force-https-legacy.stpl
 create mode 100644 install/debian/8/templates/web/nginx/force-https-legacy.tpl
 create mode 100644 install/debian/8/templates/web/nginx/force-https-public.stpl
 create mode 100644 install/debian/8/templates/web/nginx/force-https-public.tpl
 create mode 100644 install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
 create mode 100644 install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
 create mode 100644 install/debian/8/templates/web/nginx/force-https.stpl
 create mode 100644 install/debian/8/templates/web/nginx/force-https.tpl
 create mode 100644 install/debian/8/templates/web/nginx/private-force-https.stpl

diff --git a/install/debian/8/templates/web/nginx/force-https-legacy.stpl b/install/debian/8/templates/web/nginx/force-https-legacy.stpl
new file mode 100644
index 00000000..79e55a26
--- /dev/null
+++ b/install/debian/8/templates/web/nginx/force-https-legacy.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/8/templates/web/nginx/force-https-legacy.tpl b/install/debian/8/templates/web/nginx/force-https-legacy.tpl
new file mode 100644
index 00000000..8bdbea42
--- /dev/null
+++ b/install/debian/8/templates/web/nginx/force-https-legacy.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/8/templates/web/nginx/force-https-public.stpl b/install/debian/8/templates/web/nginx/force-https-public.stpl
new file mode 100644
index 00000000..ac422df6
--- /dev/null
+++ b/install/debian/8/templates/web/nginx/force-https-public.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/8/templates/web/nginx/force-https-public.tpl b/install/debian/8/templates/web/nginx/force-https-public.tpl
new file mode 100644
index 00000000..8bdbea42
--- /dev/null
+++ b/install/debian/8/templates/web/nginx/force-https-public.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
new file mode 100644
index 00000000..7e0e71d1
--- /dev/null
+++ b/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.tpl b/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
new file mode 100644
index 00000000..8bdbea42
--- /dev/null
+++ b/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/8/templates/web/nginx/force-https.stpl b/install/debian/8/templates/web/nginx/force-https.stpl
new file mode 100644
index 00000000..33fab443
--- /dev/null
+++ b/install/debian/8/templates/web/nginx/force-https.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/8/templates/web/nginx/force-https.tpl b/install/debian/8/templates/web/nginx/force-https.tpl
new file mode 100644
index 00000000..8bdbea42
--- /dev/null
+++ b/install/debian/8/templates/web/nginx/force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/8/templates/web/nginx/private-force-https.stpl b/install/debian/8/templates/web/nginx/private-force-https.stpl
new file mode 100644
index 00000000..64094fb8
--- /dev/null
+++ b/install/debian/8/templates/web/nginx/private-force-https.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}

From fdd8350fef054a18d55d5a848d4c51566a6068ff Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Mar 2023 16:12:44 +0100
Subject: [PATCH 1865/2300] https redirect to the same host (deb9)

---
 .../web/nginx/force-https-legacy.stpl         | 39 ++++++++++++
 .../web/nginx/force-https-legacy.tpl          |  8 +++
 .../web/nginx/force-https-public.stpl         | 39 ++++++++++++
 .../web/nginx/force-https-public.tpl          |  8 +++
 .../nginx/force-https-webmail-phpmyadmin.stpl | 63 +++++++++++++++++++
 .../nginx/force-https-webmail-phpmyadmin.tpl  |  8 +++
 .../9/templates/web/nginx/force-https.stpl    | 39 ++++++++++++
 .../9/templates/web/nginx/force-https.tpl     |  8 +++
 .../web/nginx/private-force-https.stpl        | 39 ++++++++++++
 9 files changed, 251 insertions(+)
 create mode 100644 install/debian/9/templates/web/nginx/force-https-legacy.stpl
 create mode 100644 install/debian/9/templates/web/nginx/force-https-legacy.tpl
 create mode 100644 install/debian/9/templates/web/nginx/force-https-public.stpl
 create mode 100644 install/debian/9/templates/web/nginx/force-https-public.tpl
 create mode 100644 install/debian/9/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
 create mode 100644 install/debian/9/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
 create mode 100644 install/debian/9/templates/web/nginx/force-https.stpl
 create mode 100644 install/debian/9/templates/web/nginx/force-https.tpl
 create mode 100644 install/debian/9/templates/web/nginx/private-force-https.stpl

diff --git a/install/debian/9/templates/web/nginx/force-https-legacy.stpl b/install/debian/9/templates/web/nginx/force-https-legacy.stpl
new file mode 100644
index 00000000..79e55a26
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/force-https-legacy.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/force-https-legacy.tpl b/install/debian/9/templates/web/nginx/force-https-legacy.tpl
new file mode 100644
index 00000000..8bdbea42
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/force-https-legacy.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/9/templates/web/nginx/force-https-public.stpl b/install/debian/9/templates/web/nginx/force-https-public.stpl
new file mode 100644
index 00000000..ac422df6
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/force-https-public.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/9/templates/web/nginx/force-https-public.tpl b/install/debian/9/templates/web/nginx/force-https-public.tpl
new file mode 100644
index 00000000..8bdbea42
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/force-https-public.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/9/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/9/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
new file mode 100644
index 00000000..7e0e71d1
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/9/templates/web/nginx/force-https-webmail-phpmyadmin.tpl b/install/debian/9/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
new file mode 100644
index 00000000..8bdbea42
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/9/templates/web/nginx/force-https.stpl b/install/debian/9/templates/web/nginx/force-https.stpl
new file mode 100644
index 00000000..33fab443
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/force-https.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/9/templates/web/nginx/force-https.tpl b/install/debian/9/templates/web/nginx/force-https.tpl
new file mode 100644
index 00000000..8bdbea42
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/9/templates/web/nginx/private-force-https.stpl b/install/debian/9/templates/web/nginx/private-force-https.stpl
new file mode 100644
index 00000000..64094fb8
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/private-force-https.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}

From 66097392bf6fe30edabb679615211f3b16a04980 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Mar 2023 16:22:49 +0100
Subject: [PATCH 1866/2300] deb8 ttp2->ssl fix

---
 .../debian/8/templates/web/nginx/force-https-legacy.stpl  | 2 +-
 .../debian/8/templates/web/nginx/force-https-public.stpl  | 2 +-
 .../web/nginx/force-https-webmail-phpmyadmin.stpl         | 2 +-
 install/debian/8/templates/web/nginx/force-https.stpl     | 2 +-
 .../debian/8/templates/web/nginx/private-force-https.stpl | 2 +-
 .../debian/8/templates/web/nginx/private-force-https.tpl  | 8 ++++++++
 6 files changed, 13 insertions(+), 5 deletions(-)
 create mode 100644 install/debian/8/templates/web/nginx/private-force-https.tpl

diff --git a/install/debian/8/templates/web/nginx/force-https-legacy.stpl b/install/debian/8/templates/web/nginx/force-https-legacy.stpl
index 79e55a26..4e51748d 100644
--- a/install/debian/8/templates/web/nginx/force-https-legacy.stpl
+++ b/install/debian/8/templates/web/nginx/force-https-legacy.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/8/templates/web/nginx/force-https-public.stpl b/install/debian/8/templates/web/nginx/force-https-public.stpl
index ac422df6..9522313b 100644
--- a/install/debian/8/templates/web/nginx/force-https-public.stpl
+++ b/install/debian/8/templates/web/nginx/force-https-public.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
index 7e0e71d1..2d62e72b 100644
--- a/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
+++ b/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/8/templates/web/nginx/force-https.stpl b/install/debian/8/templates/web/nginx/force-https.stpl
index 33fab443..d138ea63 100644
--- a/install/debian/8/templates/web/nginx/force-https.stpl
+++ b/install/debian/8/templates/web/nginx/force-https.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/8/templates/web/nginx/private-force-https.stpl b/install/debian/8/templates/web/nginx/private-force-https.stpl
index 64094fb8..c77baf91 100644
--- a/install/debian/8/templates/web/nginx/private-force-https.stpl
+++ b/install/debian/8/templates/web/nginx/private-force-https.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/8/templates/web/nginx/private-force-https.tpl b/install/debian/8/templates/web/nginx/private-force-https.tpl
new file mode 100644
index 00000000..8bdbea42
--- /dev/null
+++ b/install/debian/8/templates/web/nginx/private-force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}

From 71f91ba16dbbe713d78c632b2dc94ce7827ae826 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Mar 2023 16:24:20 +0100
Subject: [PATCH 1867/2300] deb9 private-force-https.tpl

---
 .../debian/9/templates/web/nginx/private-force-https.tpl  | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 install/debian/9/templates/web/nginx/private-force-https.tpl

diff --git a/install/debian/9/templates/web/nginx/private-force-https.tpl b/install/debian/9/templates/web/nginx/private-force-https.tpl
new file mode 100644
index 00000000..8bdbea42
--- /dev/null
+++ b/install/debian/9/templates/web/nginx/private-force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host%$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}

From 797ae8e515f72987234130326225144b671c9191 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Mar 2023 18:19:29 +0100
Subject: [PATCH 1868/2300] force-https.patch

---
 src/deb/for-download/tools/patches/force-https.patch | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 src/deb/for-download/tools/patches/force-https.patch

diff --git a/src/deb/for-download/tools/patches/force-https.patch b/src/deb/for-download/tools/patches/force-https.patch
new file mode 100644
index 00000000..8de3c241
--- /dev/null
+++ b/src/deb/for-download/tools/patches/force-https.patch
@@ -0,0 +1,11 @@
+--- force-https.tpl.orig	2023-03-25 18:15:15.577555584 +0100
++++ force-https.tpl	2023-03-25 16:51:48.044997322 +0100
+@@ -2,7 +2,7 @@
+     listen      %ip%:%proxy_port%;
+     server_name %domain_idn% %alias_idn%;
+     location / {
+-        rewrite ^(.*) https://%domain_idn%$1 permanent;
++        rewrite ^(.*) https://$host%$1 permanent;
+     }
+ include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+ }

From 505c4085f5f8b0ef7894dd03d7220b9f26b47113 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Mar 2023 18:30:41 +0100
Subject: [PATCH 1869/2300] Update force-https.patch

---
 src/deb/for-download/tools/patches/force-https.patch | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/patches/force-https.patch b/src/deb/for-download/tools/patches/force-https.patch
index 8de3c241..05c2004d 100644
--- a/src/deb/for-download/tools/patches/force-https.patch
+++ b/src/deb/for-download/tools/patches/force-https.patch
@@ -5,7 +5,7 @@
      server_name %domain_idn% %alias_idn%;
      location / {
 -        rewrite ^(.*) https://%domain_idn%$1 permanent;
-+        rewrite ^(.*) https://$host%$1 permanent;
++        rewrite ^(.*) https://$host$1 permanent;
      }
  include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
  }

From d84a021354d4f8bf317e558b1225c6cdd6acb728 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Mar 2023 23:59:28 +0100
Subject: [PATCH 1870/2300] force-https fix

---
 install/debian/10/templates/web/nginx/force-https-legacy.tpl    | 2 +-
 install/debian/10/templates/web/nginx/force-https-public.tpl    | 2 +-
 .../10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl   | 2 +-
 install/debian/10/templates/web/nginx/force-https.tpl           | 2 +-
 install/debian/10/templates/web/nginx/private-force-https.tpl   | 2 +-
 install/debian/11/templates/web/nginx/force-https-legacy.tpl    | 2 +-
 install/debian/11/templates/web/nginx/force-https-public.tpl    | 2 +-
 .../11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl   | 2 +-
 install/debian/11/templates/web/nginx/force-https.tpl           | 2 +-
 install/debian/11/templates/web/nginx/private-force-https.tpl   | 2 +-
 install/debian/8/templates/web/nginx/force-https-legacy.tpl     | 2 +-
 install/debian/8/templates/web/nginx/force-https-public.tpl     | 2 +-
 .../8/templates/web/nginx/force-https-webmail-phpmyadmin.tpl    | 2 +-
 install/debian/8/templates/web/nginx/force-https.tpl            | 2 +-
 install/debian/8/templates/web/nginx/private-force-https.tpl    | 2 +-
 install/debian/9/templates/web/nginx/force-https-legacy.tpl     | 2 +-
 install/debian/9/templates/web/nginx/force-https-public.tpl     | 2 +-
 .../9/templates/web/nginx/force-https-webmail-phpmyadmin.tpl    | 2 +-
 install/debian/9/templates/web/nginx/force-https.tpl            | 2 +-
 install/debian/9/templates/web/nginx/private-force-https.tpl    | 2 +-
 .../nodejs-nginx-templates/node-app-3000-pass-to-https.tpl      | 2 +-
 .../for-download/tools/nodejs-nginx-templates/node-app-3000.tpl | 2 +-
 .../nodejs-nginx-templates/node-app-4000-and-websocket-6001.tpl | 2 +-
 .../force-https-firewall-burst-2-speed-2-conn-4.tpl             | 2 +-
 .../rate-limit-tpl/force-https-firewall-burst-2-speed-2.tpl     | 2 +-
 .../tools/rate-limit-tpl/force-https-firewall-burst-2.tpl       | 2 +-
 .../for-download/tools/rate-limit-tpl/force-https-firewall.tpl  | 2 +-
 .../tools/rocket-nginx-templates/wprocket-force-https.tpl       | 2 +-
 28 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/force-https-legacy.tpl b/install/debian/10/templates/web/nginx/force-https-legacy.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/10/templates/web/nginx/force-https-legacy.tpl
+++ b/install/debian/10/templates/web/nginx/force-https-legacy.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/10/templates/web/nginx/force-https-public.tpl b/install/debian/10/templates/web/nginx/force-https-public.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/10/templates/web/nginx/force-https-public.tpl
+++ b/install/debian/10/templates/web/nginx/force-https-public.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
+++ b/install/debian/10/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/10/templates/web/nginx/force-https.tpl b/install/debian/10/templates/web/nginx/force-https.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/10/templates/web/nginx/force-https.tpl
+++ b/install/debian/10/templates/web/nginx/force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/10/templates/web/nginx/private-force-https.tpl b/install/debian/10/templates/web/nginx/private-force-https.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/10/templates/web/nginx/private-force-https.tpl
+++ b/install/debian/10/templates/web/nginx/private-force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/11/templates/web/nginx/force-https-legacy.tpl b/install/debian/11/templates/web/nginx/force-https-legacy.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/11/templates/web/nginx/force-https-legacy.tpl
+++ b/install/debian/11/templates/web/nginx/force-https-legacy.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/11/templates/web/nginx/force-https-public.tpl b/install/debian/11/templates/web/nginx/force-https-public.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/11/templates/web/nginx/force-https-public.tpl
+++ b/install/debian/11/templates/web/nginx/force-https-public.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl b/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
+++ b/install/debian/11/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/11/templates/web/nginx/force-https.tpl b/install/debian/11/templates/web/nginx/force-https.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/11/templates/web/nginx/force-https.tpl
+++ b/install/debian/11/templates/web/nginx/force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/11/templates/web/nginx/private-force-https.tpl b/install/debian/11/templates/web/nginx/private-force-https.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/11/templates/web/nginx/private-force-https.tpl
+++ b/install/debian/11/templates/web/nginx/private-force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/8/templates/web/nginx/force-https-legacy.tpl b/install/debian/8/templates/web/nginx/force-https-legacy.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/8/templates/web/nginx/force-https-legacy.tpl
+++ b/install/debian/8/templates/web/nginx/force-https-legacy.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/8/templates/web/nginx/force-https-public.tpl b/install/debian/8/templates/web/nginx/force-https-public.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/8/templates/web/nginx/force-https-public.tpl
+++ b/install/debian/8/templates/web/nginx/force-https-public.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.tpl b/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
+++ b/install/debian/8/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/8/templates/web/nginx/force-https.tpl b/install/debian/8/templates/web/nginx/force-https.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/8/templates/web/nginx/force-https.tpl
+++ b/install/debian/8/templates/web/nginx/force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/8/templates/web/nginx/private-force-https.tpl b/install/debian/8/templates/web/nginx/private-force-https.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/8/templates/web/nginx/private-force-https.tpl
+++ b/install/debian/8/templates/web/nginx/private-force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/9/templates/web/nginx/force-https-legacy.tpl b/install/debian/9/templates/web/nginx/force-https-legacy.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/9/templates/web/nginx/force-https-legacy.tpl
+++ b/install/debian/9/templates/web/nginx/force-https-legacy.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/9/templates/web/nginx/force-https-public.tpl b/install/debian/9/templates/web/nginx/force-https-public.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/9/templates/web/nginx/force-https-public.tpl
+++ b/install/debian/9/templates/web/nginx/force-https-public.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/9/templates/web/nginx/force-https-webmail-phpmyadmin.tpl b/install/debian/9/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/9/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
+++ b/install/debian/9/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/9/templates/web/nginx/force-https.tpl b/install/debian/9/templates/web/nginx/force-https.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/9/templates/web/nginx/force-https.tpl
+++ b/install/debian/9/templates/web/nginx/force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/install/debian/9/templates/web/nginx/private-force-https.tpl b/install/debian/9/templates/web/nginx/private-force-https.tpl
index 8bdbea42..5a463370 100644
--- a/install/debian/9/templates/web/nginx/private-force-https.tpl
+++ b/install/debian/9/templates/web/nginx/private-force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://$host%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.tpl
index 851ac0dc..5a463370 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.tpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.tpl
index 851ac0dc..5a463370 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.tpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.tpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.tpl
index 958b2594..ee8db90e 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.tpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 
     location /app {
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.tpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.tpl
index 851ac0dc..5a463370 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.tpl
index 851ac0dc..5a463370 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.tpl
index 851ac0dc..5a463370 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.tpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.tpl
index 851ac0dc..5a463370 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }
diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-https.tpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-https.tpl
index 851ac0dc..5a463370 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-https.tpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-force-https.tpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_port%;
     server_name %domain_idn% %alias_idn%;
     location / {
-        rewrite ^(.*) https://%domain_idn%$1 permanent;
+        rewrite ^(.*) https://$host$1 permanent;
     }
 include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
 }

From 09dcc123be70b17f53d1b72bed77285d95a1b023 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Mar 2023 03:40:33 +0200
Subject: [PATCH 1871/2300] Interpreter for calling myVesta PHP functions

---
 bin/v-php-func                   | 11 ++++++++
 func/bash-to-php-interpreter.php | 21 ++++++++++++++
 func/main.php                    | 21 ++++++++++++--
 func/string.php                  | 48 +++++++++++++++++++++++++++++---
 4 files changed, 95 insertions(+), 6 deletions(-)
 create mode 100644 bin/v-php-func
 create mode 100644 func/bash-to-php-interpreter.php

diff --git a/bin/v-php-func b/bin/v-php-func
new file mode 100644
index 00000000..dd75df43
--- /dev/null
+++ b/bin/v-php-func
@@ -0,0 +1,11 @@
+#!/bin/bash
+# info: calling myVesta PHP functions
+# options: FUNCTION
+#
+# The function is calling myVesta PHP functions.
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+php /usr/local/vesta/func/bash-to-php-interpreter.php "$@"
diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
new file mode 100644
index 00000000..6f06dae2
--- /dev/null
+++ b/func/bash-to-php-interpreter.php
@@ -0,0 +1,21 @@
+<?php
+
+if (!isset($argv)) exit;
+
+include ("/usr/local/vesta/func/main.php");
+include ("/usr/local/vesta/func/string.php");
+
+$counter=count($argv);
+if ($counter<1) myvesta_throw_error(2, 'Function is missing');
+
+$func="myvesta_".$argv[1];
+if (!function_exists($func)) myvesta_throw_error(2, 'Function does not exists');
+
+$params=array();
+
+for ($i=2; $i<$counter; $i++) {
+	$argv[$i]=myvesta_fix_backslashes($argv[$i]);
+	$params[]=$argv[$i];
+}
+// echo $func."\n"; print_r($params);
+$r=call_user_func_array($func, $params);
diff --git a/func/main.php b/func/main.php
index 888fe25d..5b127691 100644
--- a/func/main.php
+++ b/func/main.php
@@ -28,7 +28,7 @@ function myvesta_check_args ($requried_arguments, $arguments) {
     $argument_counter=count($argv);
     $argument_counter--;
     $argv[0]=str_replace('/usr/local/vesta/bin/', '', $argv[0]);
-    echo "-------------------- ".$argv[0]." --------------------\n";
+    // echo "-------------------- ".$argv[0]." --------------------\n";
     if ($argument_counter<$requried_arguments) {
         $arguments=str_replace(" ", "' '", $arguments);
         $arguments="'".$arguments."'";
@@ -42,8 +42,25 @@ function myvesta_check_args ($requried_arguments, $arguments) {
     }
 }
 
+function myvesta_fix_args() {
+    global $argv;
+	$i=0;
+    foreach ($argv as $argument) {
+		if ($i==0) {$i++; continue;}
+        $argv[$i]=myvesta_fix_backslashes($argv[$i]);
+		$i++;
+    }
+}
+
 function myvesta_exit($code) {
     global $argv;
-    echo "==================== ".$argv[0].": ".$code." ====================\n";
+    // echo "==================== ".$argv[0].": ".$code." ====================\n";
     exit($code);
 }
+
+function myvesta_test_func () {
+	$args=func_get_args();
+	echo "You said: ";
+	print_r ($args);
+	echo "\n";
+}
diff --git a/func/string.php b/func/string.php
index 8677af04..e6e9f7ba 100644
--- a/func/string.php
+++ b/func/string.php
@@ -1,6 +1,8 @@
 <?php
 
-function myvesta_replace_in_file($find, $replace, $file) {
+// --- file functions ---
+
+function myvesta_replace_in_file($file, $find, $replace) {
     if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
 
     $buf=file_get_contents($file);
@@ -12,8 +14,47 @@ function myvesta_replace_in_file($find, $replace, $file) {
     return $r;
 }
 
-function myvesta_str_get_between (&$text, $left_substring, $right_substring, $start=0, $return_left_substring=0, $return_right_substring=0, $left_substring_necessary=1, $right_substring_necessary=1)
-{
+function myvesta_get_between_in_file($file, $left_substring, $right_substring, $start=0, $return_left_substring=0, $return_right_substring=0, $left_substring_necessary=1, $right_substring_necessary=1) {
+    if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
+    $text=file_get_contents($file);
+	return myvesta_str_get_between ($text, $left_substring, $right_substring, $start, $return_left_substring, $return_right_substring, $left_substring_necessary, $right_substring_necessary);
+}
+
+function myvesta_replace_in_file_once_between_including_borders($file, $left, $right, $replace_with) {
+    if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
+    $text=file_get_contents($file);
+	$buf=myvesta_str_replace_once_between_including_borders($text, $left, $right, $replace_with);
+    $r=file_put_contents($file, $buf);
+    return $r;
+}
+
+function myvesta_strip_once_in_file_between_including_borders($file, $left, $right) {
+    if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
+    $text=file_get_contents($file);
+	$buf=myvesta_str_strip_once_between_including_borders($text, $left, $right);
+    $r=file_put_contents($file, $buf);
+    return $r;
+}
+
+function myvesta_replace_in_file_between_including_borders($file, $left, $right, $replace_with) {
+    if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
+    $text=file_get_contents($file);
+	$buf=myvesta_str_replace_between_including_borders($text, $left, $right, $replace_with);
+    $r=file_put_contents($file, $buf);
+    return $r;
+}
+
+function myvesta_strip_in_file_between_including_borders($file, $left, $right) {
+    if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
+    $text=file_get_contents($file);
+	$buf=myvesta_str_strip_between_including_borders($text, $left, $right);
+    $r=file_put_contents($file, $buf);
+    return $r;
+}
+
+// --- string functions ---
+
+function myvesta_str_get_between (&$text, $left_substring, $right_substring, $start=0, $return_left_substring=0, $return_right_substring=0, $left_substring_necessary=1, $right_substring_necessary=1) {
     global $myvesta_str_found_at, $myvesta_str_end_at;
     $myvesta_str_found_at=0;
     $myvesta_str_end_at=0;
@@ -64,7 +105,6 @@ function myvesta_str_strip_once_between_including_borders(&$text, $left, $right)
     return substr($text, 0, $pos1).substr($text, $pos2+strlen($right));
 }
 
-
 function myvesta_str_replace_between_including_borders($text, $left, $right, $replace_with) {
     $start=0;
     $left_len=strlen($left);

From dd1efc58a101863a08ed1ddeb1d0d1e1ee817592 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Mar 2023 03:49:38 +0200
Subject: [PATCH 1872/2300] Update bash-to-php-interpreter.php

---
 func/bash-to-php-interpreter.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
index 6f06dae2..f47e7f9c 100644
--- a/func/bash-to-php-interpreter.php
+++ b/func/bash-to-php-interpreter.php
@@ -6,7 +6,7 @@ include ("/usr/local/vesta/func/main.php");
 include ("/usr/local/vesta/func/string.php");
 
 $counter=count($argv);
-if ($counter<1) myvesta_throw_error(2, 'Function is missing');
+if ($counter<2) myvesta_throw_error(2, 'Function is missing');
 
 $func="myvesta_".$argv[1];
 if (!function_exists($func)) myvesta_throw_error(2, 'Function does not exists');

From beccead3889bd42459f8933ad55cdd6a17dc5a6d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Mar 2023 14:58:10 +0200
Subject: [PATCH 1873/2300] php-func fix

---
 bin/v-php-func                   |  1 +
 func/bash-to-php-interpreter.php | 21 +++++++++++++++++----
 func/main.php                    |  1 +
 func/string.php                  | 25 +++++++++++++++----------
 4 files changed, 34 insertions(+), 14 deletions(-)

diff --git a/bin/v-php-func b/bin/v-php-func
index dd75df43..f6192c33 100644
--- a/bin/v-php-func
+++ b/bin/v-php-func
@@ -9,3 +9,4 @@
 #----------------------------------------------------------#
 
 php /usr/local/vesta/func/bash-to-php-interpreter.php "$@"
+exit $?
diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
index f47e7f9c..6c1c2fa0 100644
--- a/func/bash-to-php-interpreter.php
+++ b/func/bash-to-php-interpreter.php
@@ -1,6 +1,6 @@
 <?php
 
-if (!isset($argv)) exit;
+if (!isset($argv)) exit 5;
 
 include ("/usr/local/vesta/func/main.php");
 include ("/usr/local/vesta/func/string.php");
@@ -8,8 +8,11 @@ include ("/usr/local/vesta/func/string.php");
 $counter=count($argv);
 if ($counter<2) myvesta_throw_error(2, 'Function is missing');
 
-$func="myvesta_".$argv[1];
-if (!function_exists($func)) myvesta_throw_error(2, 'Function does not exists');
+$func=$argv[1];
+if (!function_exists($func)) {
+	$func="myvesta_".$argv[1];	
+	if (!function_exists($func)) myvesta_throw_error(2, 'Function does not exists');
+}
 
 $params=array();
 
@@ -17,5 +20,15 @@ for ($i=2; $i<$counter; $i++) {
 	$argv[$i]=myvesta_fix_backslashes($argv[$i]);
 	$params[]=$argv[$i];
 }
-// echo $func."\n"; print_r($params);
+
 $r=call_user_func_array($func, $params);
+if (is_bool($r)) {
+	if ($r) {
+		exit(0);
+	} else {
+		exit(MYVESTA_ERROR_GENERAL);
+	}
+} else {
+	echo $r;
+	exit(0);
+}
diff --git a/func/main.php b/func/main.php
index 5b127691..d09a6bd8 100644
--- a/func/main.php
+++ b/func/main.php
@@ -8,6 +8,7 @@ define('MYVESTA_ERROR_PERMISSION_DENIED', 1);
 define('MYVESTA_ERROR_MISSING_ARGUMENTS', 2);
 define('MYVESTA_ERROR_FILE_DOES_NOT_EXISTS', 3);
 define('MYVESTA_ERROR_STRING_NOT_FOUND', 4);
+define('MYVESTA_ERROR_GENERAL', 5);
 
 function myvesta_throw_error($code, $message) {
     global $myvesta_exit_on_error;
diff --git a/func/string.php b/func/string.php
index e6e9f7ba..0fa284cf 100644
--- a/func/string.php
+++ b/func/string.php
@@ -11,7 +11,8 @@ function myvesta_replace_in_file($file, $find, $replace) {
 
     $buf=str_replace($find, $replace, $buf);
     $r=file_put_contents($file, $buf);
-    return $r;
+	if ($r===false) return false;
+    return true;
 }
 
 function myvesta_get_between_in_file($file, $left_substring, $right_substring, $start=0, $return_left_substring=0, $return_right_substring=0, $left_substring_necessary=1, $right_substring_necessary=1) {
@@ -25,7 +26,8 @@ function myvesta_replace_in_file_once_between_including_borders($file, $left, $r
     $text=file_get_contents($file);
 	$buf=myvesta_str_replace_once_between_including_borders($text, $left, $right, $replace_with);
     $r=file_put_contents($file, $buf);
-    return $r;
+	if ($r===false) return false;
+    return true;
 }
 
 function myvesta_strip_once_in_file_between_including_borders($file, $left, $right) {
@@ -33,7 +35,8 @@ function myvesta_strip_once_in_file_between_including_borders($file, $left, $rig
     $text=file_get_contents($file);
 	$buf=myvesta_str_strip_once_between_including_borders($text, $left, $right);
     $r=file_put_contents($file, $buf);
-    return $r;
+	if ($r===false) return false;
+    return true;
 }
 
 function myvesta_replace_in_file_between_including_borders($file, $left, $right, $replace_with) {
@@ -41,7 +44,8 @@ function myvesta_replace_in_file_between_including_borders($file, $left, $right,
     $text=file_get_contents($file);
 	$buf=myvesta_str_replace_between_including_borders($text, $left, $right, $replace_with);
     $r=file_put_contents($file, $buf);
-    return $r;
+	if ($r===false) return false;
+    return true;
 }
 
 function myvesta_strip_in_file_between_including_borders($file, $left, $right) {
@@ -49,7 +53,8 @@ function myvesta_strip_in_file_between_including_borders($file, $left, $right) {
     $text=file_get_contents($file);
 	$buf=myvesta_str_strip_between_including_borders($text, $left, $right);
     $r=file_put_contents($file, $buf);
-    return $r;
+	if ($r===false) return false;
+    return true;
 }
 
 // --- string functions ---
@@ -71,7 +76,7 @@ function myvesta_str_get_between (&$text, $left_substring, $right_substring, $st
     {
         if ($from_null==0) $pos1=$pos1+strlen($left_substring);
     }
-    $pos2=strpos($text, $right_substring, $pos1+1);
+    $pos2=strpos($text, $right_substring, $pos1+strlen($left_substring));
     if ($pos2===FALSE)
     {
         if ($right_substring_necessary==1) return "";
@@ -92,7 +97,7 @@ function myvesta_str_get_between (&$text, $left_substring, $right_substring, $st
 function myvesta_str_replace_once_between_including_borders(&$text, $left, $right, $replace_with) {
     $pos1=strpos($text, $left);
     if ($pos1===false) return $text;
-    $pos2=strpos($text, $right, $left+strlen($left));
+    $pos2=strpos($text, $right, $pos1+strlen($left));
     if ($pos2===false) return $text;
     return substr($text, 0, $pos1).$replace_with.substr($text, $pos2+strlen($right));
 }
@@ -100,7 +105,7 @@ function myvesta_str_replace_once_between_including_borders(&$text, $left, $righ
 function myvesta_str_strip_once_between_including_borders(&$text, $left, $right) {
     $pos1=strpos($text, $left);
     if ($pos1===false) return $text;
-    $pos2=strpos($text, $right, $left+strlen($left));
+    $pos2=strpos($text, $right, $pos1+strlen($left));
     if ($pos2===false) return $text;
     return substr($text, 0, $pos1).substr($text, $pos2+strlen($right));
 }
@@ -112,7 +117,7 @@ function myvesta_str_replace_between_including_borders($text, $left, $right, $re
     while (true) {
         $pos1=strpos($text, $left);
         if ($pos1===false) break;
-        $pos2=strpos($text, $right, $left+$left_len);
+        $pos2=strpos($text, $right, $pos1+$left_len);
         if ($pos2===false) break;
         $text=substr($text, 0, $pos1).$replace_with.substr($text, $pos2+$right_len);
     }
@@ -125,7 +130,7 @@ function myvesta_str_strip_between_including_borders($text, $left, $right) {
     while (true) {
         $pos1=strpos($text, $left);
         if ($pos1===false) break;
-        $pos2=strpos($text, $right, $left+$left_len);
+        $pos2=strpos($text, $right, $pos1+$left_len);
         if ($pos2===false) break;
         $text=substr($text, 0, $pos1).substr($text, $pos2+$right_len);
     }

From 3192243fb4cf662caf010f728e65b7bdf445f039 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Mar 2023 15:01:52 +0200
Subject: [PATCH 1874/2300] tabs fix

---
 func/bash-to-php-interpreter.php | 22 +++++++++++-----------
 func/main.php                    | 22 +++++++++++-----------
 func/string.php                  | 20 ++++++++++----------
 3 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
index 6c1c2fa0..9c67ab55 100644
--- a/func/bash-to-php-interpreter.php
+++ b/func/bash-to-php-interpreter.php
@@ -10,25 +10,25 @@ if ($counter<2) myvesta_throw_error(2, 'Function is missing');
 
 $func=$argv[1];
 if (!function_exists($func)) {
-	$func="myvesta_".$argv[1];	
-	if (!function_exists($func)) myvesta_throw_error(2, 'Function does not exists');
+    $func="myvesta_".$argv[1];    
+    if (!function_exists($func)) myvesta_throw_error(2, 'Function does not exists');
 }
 
 $params=array();
 
 for ($i=2; $i<$counter; $i++) {
-	$argv[$i]=myvesta_fix_backslashes($argv[$i]);
-	$params[]=$argv[$i];
+    $argv[$i]=myvesta_fix_backslashes($argv[$i]);
+    $params[]=$argv[$i];
 }
 
 $r=call_user_func_array($func, $params);
 if (is_bool($r)) {
-	if ($r) {
-		exit(0);
-	} else {
-		exit(MYVESTA_ERROR_GENERAL);
-	}
+    if ($r) {
+        exit(0);
+    } else {
+        exit(MYVESTA_ERROR_GENERAL);
+    }
 } else {
-	echo $r;
-	exit(0);
+    echo $r;
+    exit(0);
 }
diff --git a/func/main.php b/func/main.php
index d09a6bd8..1a932fa7 100644
--- a/func/main.php
+++ b/func/main.php
@@ -18,10 +18,10 @@ function myvesta_throw_error($code, $message) {
 }
 
 function myvesta_fix_backslashes($s) {
-	$s=str_replace("\\n", "\n", $s);
-	$s=str_replace("\\r", "\r", $s);
-	$s=str_replace("\\t", "\t", $s);
-	return $s;
+    $s=str_replace("\\n", "\n", $s);
+    $s=str_replace("\\r", "\r", $s);
+    $s=str_replace("\\t", "\t", $s);
+    return $s;
 }
 
 function myvesta_check_args ($requried_arguments, $arguments) {
@@ -45,11 +45,11 @@ function myvesta_check_args ($requried_arguments, $arguments) {
 
 function myvesta_fix_args() {
     global $argv;
-	$i=0;
+    $i=0;
     foreach ($argv as $argument) {
-		if ($i==0) {$i++; continue;}
+        if ($i==0) {$i++; continue;}
         $argv[$i]=myvesta_fix_backslashes($argv[$i]);
-		$i++;
+        $i++;
     }
 }
 
@@ -60,8 +60,8 @@ function myvesta_exit($code) {
 }
 
 function myvesta_test_func () {
-	$args=func_get_args();
-	echo "You said: ";
-	print_r ($args);
-	echo "\n";
+    $args=func_get_args();
+    echo "You said: ";
+    print_r ($args);
+    echo "\n";
 }
diff --git a/func/string.php b/func/string.php
index 0fa284cf..3882c069 100644
--- a/func/string.php
+++ b/func/string.php
@@ -11,49 +11,49 @@ function myvesta_replace_in_file($file, $find, $replace) {
 
     $buf=str_replace($find, $replace, $buf);
     $r=file_put_contents($file, $buf);
-	if ($r===false) return false;
+    if ($r===false) return false;
     return true;
 }
 
 function myvesta_get_between_in_file($file, $left_substring, $right_substring, $start=0, $return_left_substring=0, $return_right_substring=0, $left_substring_necessary=1, $right_substring_necessary=1) {
     if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
     $text=file_get_contents($file);
-	return myvesta_str_get_between ($text, $left_substring, $right_substring, $start, $return_left_substring, $return_right_substring, $left_substring_necessary, $right_substring_necessary);
+    return myvesta_str_get_between ($text, $left_substring, $right_substring, $start, $return_left_substring, $return_right_substring, $left_substring_necessary, $right_substring_necessary);
 }
 
 function myvesta_replace_in_file_once_between_including_borders($file, $left, $right, $replace_with) {
     if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
     $text=file_get_contents($file);
-	$buf=myvesta_str_replace_once_between_including_borders($text, $left, $right, $replace_with);
+    $buf=myvesta_str_replace_once_between_including_borders($text, $left, $right, $replace_with);
     $r=file_put_contents($file, $buf);
-	if ($r===false) return false;
+    if ($r===false) return false;
     return true;
 }
 
 function myvesta_strip_once_in_file_between_including_borders($file, $left, $right) {
     if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
     $text=file_get_contents($file);
-	$buf=myvesta_str_strip_once_between_including_borders($text, $left, $right);
+    $buf=myvesta_str_strip_once_between_including_borders($text, $left, $right);
     $r=file_put_contents($file, $buf);
-	if ($r===false) return false;
+    if ($r===false) return false;
     return true;
 }
 
 function myvesta_replace_in_file_between_including_borders($file, $left, $right, $replace_with) {
     if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
     $text=file_get_contents($file);
-	$buf=myvesta_str_replace_between_including_borders($text, $left, $right, $replace_with);
+    $buf=myvesta_str_replace_between_including_borders($text, $left, $right, $replace_with);
     $r=file_put_contents($file, $buf);
-	if ($r===false) return false;
+    if ($r===false) return false;
     return true;
 }
 
 function myvesta_strip_in_file_between_including_borders($file, $left, $right) {
     if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
     $text=file_get_contents($file);
-	$buf=myvesta_str_strip_between_including_borders($text, $left, $right);
+    $buf=myvesta_str_strip_between_including_borders($text, $left, $right);
     $r=file_put_contents($file, $buf);
-	if ($r===false) return false;
+    if ($r===false) return false;
     return true;
 }
 

From 201cdad4b30f0b36e6cfe975fedd9170872960b9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Mar 2023 15:06:22 +0200
Subject: [PATCH 1875/2300] exit with brackets fix

---
 func/bash-to-php-interpreter.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
index 9c67ab55..6ed31455 100644
--- a/func/bash-to-php-interpreter.php
+++ b/func/bash-to-php-interpreter.php
@@ -1,6 +1,6 @@
 <?php
 
-if (!isset($argv)) exit 5;
+if (!isset($argv)) exit(5);
 
 include ("/usr/local/vesta/func/main.php");
 include ("/usr/local/vesta/func/string.php");

From 4563f02f0fc6d371c2392efc3cc493a5d31d2f20 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Mar 2023 15:11:50 +0200
Subject: [PATCH 1876/2300] Strip 'BROWSER MEDIA CACHE' block in rocket-nginx
 conf

---
 src/deb/for-download/tools/install-rocket-nginx.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/deb/for-download/tools/install-rocket-nginx.sh b/src/deb/for-download/tools/install-rocket-nginx.sh
index 3e298c7d..20364f80 100644
--- a/src/deb/for-download/tools/install-rocket-nginx.sh
+++ b/src/deb/for-download/tools/install-rocket-nginx.sh
@@ -17,6 +17,8 @@ fi
 cd rocket-nginx
 cp rocket-nginx.ini.disabled rocket-nginx.ini
 php rocket-parser.php
+/usr/local/vesta/bin/v-php-func 'strip_once_in_file_between_including_borders' '/etc/nginx/rocket-nginx/conf.d/default.conf' '# BROWSER MEDIA CACHE' '}'
+
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-https.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-https.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-https.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-https.stpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-hosting.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-hosting.tpl

From da136faf08b8cc83b8532cd04fe3fae53bb3b6ef Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 26 Mar 2023 19:04:45 +0200
Subject: [PATCH 1877/2300] php function "find_in_file"

---
 func/main.php   |  2 +-
 func/string.php | 11 +++++++++++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/func/main.php b/func/main.php
index 1a932fa7..cf13f3f0 100644
--- a/func/main.php
+++ b/func/main.php
@@ -12,7 +12,7 @@ define('MYVESTA_ERROR_GENERAL', 5);
 
 function myvesta_throw_error($code, $message) {
     global $myvesta_exit_on_error;
-    echo "ERROR: ".$message."\n";
+    if ($message!=='') echo "ERROR: ".$message."\n";
     if ($myvesta_exit_on_error) myvesta_exit($code);
     return $code;
 }
diff --git a/func/string.php b/func/string.php
index 3882c069..2b6a63d9 100644
--- a/func/string.php
+++ b/func/string.php
@@ -2,6 +2,17 @@
 
 // --- file functions ---
 
+function myvesta_find_in_file($file, $find) {
+    if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
+
+    $buf=file_get_contents($file);
+
+    $pos=strpos($buf, $find);
+    if ($pos===false) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "");
+
+    return $pos;
+}
+
 function myvesta_replace_in_file($file, $find, $replace) {
     if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
 

From b1a3b88877efe2dd8f22bc2a2e5454ee825c0635 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 28 Mar 2023 10:39:38 +0200
Subject: [PATCH 1878/2300] new line on the output end if v-php-func called
 directly from shell

---
 func/bash-to-php-interpreter.php | 6 ++++++
 func/main.php                    | 5 ++---
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
index 6ed31455..cd849d6c 100644
--- a/func/bash-to-php-interpreter.php
+++ b/func/bash-to-php-interpreter.php
@@ -1,5 +1,8 @@
 <?php
 
+if (isset($_SERVER['SHLVL'])) $SHLVL=intval($_SERVER['SHLVL']);
+else $SHLVL=3;
+
 if (!isset($argv)) exit(5);
 
 include ("/usr/local/vesta/func/main.php");
@@ -24,11 +27,14 @@ for ($i=2; $i<$counter; $i++) {
 $r=call_user_func_array($func, $params);
 if (is_bool($r)) {
     if ($r) {
+        if ($SHLVL<3) echo "\n";
         exit(0);
     } else {
+        if ($SHLVL<3) echo "\n";
         exit(MYVESTA_ERROR_GENERAL);
     }
 } else {
     echo $r;
+    if ($SHLVL<3) echo "\n";
     exit(0);
 }
diff --git a/func/main.php b/func/main.php
index cf13f3f0..ee4fb962 100644
--- a/func/main.php
+++ b/func/main.php
@@ -54,7 +54,7 @@ function myvesta_fix_args() {
 }
 
 function myvesta_exit($code) {
-    global $argv;
+    // global $argv;
     // echo "==================== ".$argv[0].": ".$code." ====================\n";
     exit($code);
 }
@@ -62,6 +62,5 @@ function myvesta_exit($code) {
 function myvesta_test_func () {
     $args=func_get_args();
     echo "You said: ";
-    print_r ($args);
-    echo "\n";
+    echo trim(print_r ($args, true));
 }

From a792f42ffdace9383af44e56dbde151a0d5052f0 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 28 Mar 2023 17:07:52 +0200
Subject: [PATCH 1879/2300] Security Improvements

---
 bin/v-install-wordpress | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 4bf82c5f..70f3fc7b 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -128,7 +128,9 @@ sudo -H -u$user wp core config --dbname=$DBUSER --dbuser=$DBUSER --dbpass=$PASSW
 
 password=$(LC_CTYPE=C tr -dc A-Za-z0-9_\!\@\#\$\%\^\&\*\(\)-+= < /dev/urandom | head -c 12)
 
-sudo -H -u$user wp core install --url="$domain" --title="$domain" --admin_user="admin" --admin_password="$password" --admin_email="$email" --path=$WORKINGDIR
+wpadmin=$(echo "$domain" | sed 's#\.#_#g')_4dm1n
+
+sudo -H -u$user wp core install --url="$domain" --title="$domain" --admin_user="$wpadmin" --admin_password="$password" --admin_email="$email" --path=$WORKINGDIR
 
 mysql -u$DBUSER -p$PASSWDDB -e "USE $DBUSER; update wp_options set option_value = '$PROTOCOL://$domain' where option_name = 'siteurl'; update wp_options set option_value = '$PROTOCOL://$domain' where option_name = 'home';"
 
@@ -138,7 +140,7 @@ echo ""
 echo "Site: $PROTOCOL://$domain/"
 echo ""
 echo "Login: $PROTOCOL://$domain/wp-admin/"
-echo "Username: admin"
+echo "Username: $wpadmin"
 echo "Password: $password"
 echo ""
 echo "================================================================="

From 551df0b5a6cea7d8bce07053f5add474fd1cc30d Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 29 Mar 2023 15:45:36 +0200
Subject: [PATCH 1880/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 5b402653..72e8560e 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -45,13 +45,13 @@ find /var/log/exim4/ -type f -exec truncate -s 0 {} \;
 clean_home() {
     nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -delete
     find $1/ -name '.wp-cli' -type d -exec rm -rf {} \; > /dev/null 2>&1
-    find $1/*/web/*/public_html/wp-content/aiowps_backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
-    find $1/*/web/*/public_html/wp-content/envato-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
-    find $1/*/web/*/public_html/wp-content/ai1wm-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
-    find $1/*/web/*/public_html/wp-content/wpvividbackups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
-    find $1/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete
+    find $1/*/web/*/public_html/wp-content/aiowps_backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
+    find $1/*/web/*/public_html/wp-content/envato-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
+    find $1/*/web/*/public_html/wp-content/ai1wm-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
+    find $1/*/web/*/public_html/wp-content/wpvividbackups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
+    find $1/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/wp-content/plugins/ezpz-one-click-backup/backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
-    find $1/*/web/*/public_html/ -type f -name "*.wpress" -delete
+    find $1/*/web/*/public_html/ -type f -name "*.wpress" -delete > /dev/null 2>&1
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;
     nice -n 19 ionice -c 3 find $1/ -type f -name "*.log" -exec truncate -s 0 {} \;

From a47603156d5da0b7c7fa1cdb640aaf63fc7f97c6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 29 Mar 2023 15:48:42 +0200
Subject: [PATCH 1881/2300] Update exim_forwarding.patch

---
 src/deb/for-download/tools/patches/exim_forwarding.patch | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/for-download/tools/patches/exim_forwarding.patch b/src/deb/for-download/tools/patches/exim_forwarding.patch
index 78b7ef69..1fa6d408 100644
--- a/src/deb/for-download/tools/patches/exim_forwarding.patch
+++ b/src/deb/for-download/tools/patches/exim_forwarding.patch
@@ -1,9 +1,9 @@
 --- old	2023-03-23 14:17:42.536656160 +0100
 +++ new	2023-03-24 23:07:08.186018906 +0100
 @@ -140,6 +140,11 @@
- 
+
    warn    set acl_m3    = no
-   
+  
 +  warn    !authenticated = *
 +          hosts          = !+relay_from_hosts
 +          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}

From 3bafc5b064fdbbe1e31da69eef801548b4514985 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 1 Apr 2023 23:29:35 +0200
Subject: [PATCH 1882/2300] myvesta_echo php function

---
 func/bash-to-php-interpreter.php | 13 ++++++-----
 func/main.php                    | 37 +++++++++++++++++++++-----------
 2 files changed, 30 insertions(+), 20 deletions(-)

diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
index cd849d6c..13995e1c 100644
--- a/func/bash-to-php-interpreter.php
+++ b/func/bash-to-php-interpreter.php
@@ -1,5 +1,7 @@
 <?php
 
+$myvesta_echo_done=false;
+
 if (isset($_SERVER['SHLVL'])) $SHLVL=intval($_SERVER['SHLVL']);
 else $SHLVL=3;
 
@@ -27,14 +29,11 @@ for ($i=2; $i<$counter; $i++) {
 $r=call_user_func_array($func, $params);
 if (is_bool($r)) {
     if ($r) {
-        if ($SHLVL<3) echo "\n";
-        exit(0);
+        myvesta_exit (0);
     } else {
-        if ($SHLVL<3) echo "\n";
-        exit(MYVESTA_ERROR_GENERAL);
+        myvesta_exit (MYVESTA_ERROR_GENERAL);
     }
 } else {
-    echo $r;
-    if ($SHLVL<3) echo "\n";
-    exit(0);
+    myvesta_echo ($r);
+    myvesta_exit (0);
 }
diff --git a/func/main.php b/func/main.php
index ee4fb962..fcc96610 100644
--- a/func/main.php
+++ b/func/main.php
@@ -1,8 +1,5 @@
 <?php
 
-$myvesta_current_user=exec('whoami', $myvesta_output, $myvesta_return_var);
-if ($myvesta_current_user != 'root') {echo "ERROR: You must be root to execute this script\n"; exit(1);}
-
 $myvesta_exit_on_error=true;
 define('MYVESTA_ERROR_PERMISSION_DENIED', 1);
 define('MYVESTA_ERROR_MISSING_ARGUMENTS', 2);
@@ -10,9 +7,29 @@ define('MYVESTA_ERROR_FILE_DOES_NOT_EXISTS', 3);
 define('MYVESTA_ERROR_STRING_NOT_FOUND', 4);
 define('MYVESTA_ERROR_GENERAL', 5);
 
+function myvesta_echo($str) {
+    global $myvesta_echo_done, $myvesta_last_echo;
+    $myvesta_echo_done=true;
+    $myvesta_last_echo=$str;
+    echo $str;
+}
+
+function myvesta_exit($code) {
+    global $SHLVL, $myvesta_echo_done, $myvesta_last_echo;
+    // myvesta_echo ("==================== ".$argv[0].": ".$code." ====================\n");
+    if ($SHLVL<3 && $myvesta_echo_done==true) {
+        $last_char=substr($myvesta_last_echo, -1, 1);
+        if ($last_char!="\n") echo "\n";
+    }
+    exit($code);
+}
+
+$myvesta_current_user=exec('whoami', $myvesta_output, $myvesta_return_var);
+if ($myvesta_current_user != 'root') {myvesta_echo ("ERROR: You must be root to execute this script"); myvesta_exit(1);}
+
 function myvesta_throw_error($code, $message) {
     global $myvesta_exit_on_error;
-    if ($message!=='') echo "ERROR: ".$message."\n";
+    if ($message!=='') myvesta_echo ("ERROR: ".$message);
     if ($myvesta_exit_on_error) myvesta_exit($code);
     return $code;
 }
@@ -29,7 +46,7 @@ function myvesta_check_args ($requried_arguments, $arguments) {
     $argument_counter=count($argv);
     $argument_counter--;
     $argv[0]=str_replace('/usr/local/vesta/bin/', '', $argv[0]);
-    // echo "-------------------- ".$argv[0]." --------------------\n";
+    // myvesta_echo ( "-------------------- ".$argv[0]." --------------------\n");
     if ($argument_counter<$requried_arguments) {
         $arguments=str_replace(" ", "' '", $arguments);
         $arguments="'".$arguments."'";
@@ -53,14 +70,8 @@ function myvesta_fix_args() {
     }
 }
 
-function myvesta_exit($code) {
-    // global $argv;
-    // echo "==================== ".$argv[0].": ".$code." ====================\n";
-    exit($code);
-}
-
 function myvesta_test_func () {
     $args=func_get_args();
-    echo "You said: ";
-    echo trim(print_r ($args, true));
+    myvesta_echo ("You said: ");
+    myvesta_echo (trim(print_r ($args, true)));
 }

From ec1c2146a13a29ff8577910bf02441f1360bc4a7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 5 Apr 2023 21:07:11 +0200
Subject: [PATCH 1883/2300] LetsEncrypt check if 'certificate' is empty on step
 6

---
 bin/v-add-letsencrypt-domain | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index faa51f8c..9d9b7cbe 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -323,6 +323,14 @@ if [[ "$status" -ne 200 ]]; then
     echo "[$(date)] : EXIT=Let's Encrypt finalize bad status $status" >> /usr/local/vesta/log/letsencrypt.log
     check_result $E_CONNECT "Let's Encrypt finalize bad status $status"
 fi
+if [ "$certificate" = "" ]; then
+    echo "[$(date)] : EXIT=Let's Encrypt 'certificate' is empty on step 6" >> /usr/local/vesta/log/letsencrypt.log
+    check_result $E_CONNECT "Let's Encrypt 'certificate' is empty on step 6"
+fi
+if [ "$nonce" = "" ]; then
+    echo "[$(date)] : EXIT=Let's Encrypt 'nonce' is empty on step 6" >> /usr/local/vesta/log/letsencrypt.log
+    check_result $E_CONNECT "Let's Encrypt 'nonce' is empty on step 6"
+fi
 
 # Downloading signed certificate / STEP 7
 echo "[$(date)] : --- Downloading signed certificate / STEP 7 ---" >> /usr/local/vesta/log/letsencrypt.log

From cdde300f80ce8abe9d5fa21ab5c711923715e4d3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 5 Apr 2023 21:08:38 +0200
Subject: [PATCH 1884/2300] Version 0.9.8-26-61

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 68750920..4ee18f6a 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-60
+vesta-0.9.8-26-61

From a098a9831c8760cfc15c1d58470cfcc184d4a2d8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 5 Apr 2023 21:10:28 +0200
Subject: [PATCH 1885/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 9af9791b..e4938183 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.8-26-61 [05-Apr-2023]
+==================================================
+* Many bugfixes
+
 Version 0.9.8-26-60 [12-Feb-2023]
 ==================================================
 * New script: v-commander (useful for maintaining the server)

From f5132329c8500cccb48fcfc2e3657822071ebed5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 5 Apr 2023 23:13:38 +0200
Subject: [PATCH 1886/2300] Update Changelog.md

---
 Changelog.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Changelog.md b/Changelog.md
index e4938183..28f5cd6c 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,6 +1,7 @@
 Version 0.9.8-26-61 [05-Apr-2023]
 ==================================================
 * Many bugfixes
+* Hotfix for LetsEncrypt to prevent Apache falling 
 
 Version 0.9.8-26-60 [12-Feb-2023]
 ==================================================

From 4771d2502c9f523a5d29bd25211ee443897af849 Mon Sep 17 00:00:00 2001
From: Jaap Marcus <9754650+jaapmarcus@users.noreply.github.com>
Date: Thu, 6 Apr 2023 01:23:10 +0200
Subject: [PATCH 1887/2300] Fix: Changes in Certificate request Lets Encrypt
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

See: https://community.letsencrypt.org/t/myvesta-hestiacp-vestacp-fail-issuance-with-async-finalization/195923

And https://github.com/hestiacp/hestiacp/pull/3442

Not tested on Vesta CP
❤️
---
 bin/v-add-letsencrypt-domain | 30 +++++++++++++++++++++++++-----
 1 file changed, 25 insertions(+), 5 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 9d9b7cbe..c37492b7 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -56,7 +56,7 @@ query_le_v2() {
     # Save http response to file passed as "$4" arg or print to stdout if not provided
     # http response headers are always sent to stdout
     local save_to_file=${4:-"/dev/stdout"}
-    curl --silent --dump-header /dev/stdout --data "$post_data" "$1" --header "$content" --output "$save_to_file"
+    curl --location --user-agent "MyVestaCP" --insecure --retry 5 --retry-connrefused --silent --dump-header /dev/stdout --data "$post_data" "$1" --header "$content" --output "$save_to_file"
 }
 
 
@@ -154,6 +154,8 @@ authz=$(echo "$answer" |grep "acme/authz" |cut -f2 -d '"')
 echo "[$(date)] : authz=$authz" >> /usr/local/vesta/log/letsencrypt.log
 finalize=$(echo "$answer" |grep 'finalize":' |cut -f4 -d '"')
 echo "[$(date)] : finalize=$finalize" >> /usr/local/vesta/log/letsencrypt.log
+order=$(echo -e "$answer" | grep -i location | cut -f2 -d \  | tr -d '\r\n')
+echo "[$(date)] : order=$order" >> /usr/local/vesta/log/letsencrypt.log
 status=$(echo "$answer" |grep HTTP/ |tail -n1 |cut -f2 -d ' ')
 echo "[$(date)] : status=$status" >> /usr/local/vesta/log/letsencrypt.log
 if [[ "$status" -ne 201 ]]; then
@@ -324,16 +326,34 @@ if [[ "$status" -ne 200 ]]; then
     check_result $E_CONNECT "Let's Encrypt finalize bad status $status"
 fi
 if [ "$certificate" = "" ]; then
-    echo "[$(date)] : EXIT=Let's Encrypt 'certificate' is empty on step 6" >> /usr/local/vesta/log/letsencrypt.log
-    check_result $E_CONNECT "Let's Encrypt 'certificate' is empty on step 6"
+    validation="processing"
+	i=1
+	while [ "$validation" = "processing" ]; do
+        echo "[$(date)] : --- Polling server waiting for Certificate / STEP 7 ---" >> /usr/local/vesta/log/letsencrypt.log
+		answer=$(query_le_v2 "$order" "" "$nonce")
+		i=$((i + 1))
+
+		nonce=$(echo "$answer" | grep -i nonce | cut -f2 -d \  | tr -d '\r\n')
+        echo "[$(date)] : answer=$answer" >> /usr/local/vesta/log/letsencrypt.log
+		status=$(echo "$answer" | grep HTTP/ | tail -n1 | cut -f 2 -d ' ')
+        echo "[$(date)] : status=$status" >> /usr/local/vesta/log/letsencrypt.log
+		validation=$(echo "$answer" | grep 'status":' | cut -f4 -d '"')
+        echo "[$(date)] : validation=$validation" >> /usr/local/vesta/log/letsencrypt.log
+		certificate=$(echo "$answer" | grep 'certificate":' | cut -f4 -d '"')
+        echo "[$(date)] : certificate=$certificate" >> /usr/local/vesta/log/letsencrypt.log
+		sleep $((i * 2)) # Sleep for 2s, 4s, 6s, 8s
+		if [ $i -gt 10 ]; then
+			check_result "$E_CONNECT" "Certificate processing timeout ($domain)"
+		fi
+	done
 fi
 if [ "$nonce" = "" ]; then
     echo "[$(date)] : EXIT=Let's Encrypt 'nonce' is empty on step 6" >> /usr/local/vesta/log/letsencrypt.log
     check_result $E_CONNECT "Let's Encrypt 'nonce' is empty on step 6"
 fi
 
-# Downloading signed certificate / STEP 7
-echo "[$(date)] : --- Downloading signed certificate / STEP 7 ---" >> /usr/local/vesta/log/letsencrypt.log
+# Downloading signed certificate / STEP 8
+echo "[$(date)] : --- Downloading signed certificate / STEP 8 ---" >> /usr/local/vesta/log/letsencrypt.log
 echo "[$(date)] : query_le_v2 \"$certificate\" \"\" \"$nonce\"" >> /usr/local/vesta/log/letsencrypt.log
 answer=$(query_le_v2 "$certificate" "" "$nonce" "$ssl_dir/$domain.pem")
 echo "[$(date)] : answer=$answer" >> /usr/local/vesta/log/letsencrypt.log

From 2f395f0a5e09c18ac3b75e364964b8ed40777da5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 6 Apr 2023 09:06:03 +0200
Subject: [PATCH 1888/2300] Add staging

---
 bin/v-add-letsencrypt-domain | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index c37492b7..117d3eff 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -17,6 +17,10 @@ aliases=$3
 # LE API
 API='https://acme-v02.api.letsencrypt.org'
 
+if [[ "$LE_STAGING" = 'yes' ]]; then
+	LE_API='https://acme-staging-v02.api.letsencrypt.org'
+fi
+
 # Includes
 source $VESTA/func/main.sh
 source $VESTA/func/domain.sh

From f50a785fffcfd1cdd1e8c94bf0af38207d24a763 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 6 Apr 2023 09:10:50 +0200
Subject: [PATCH 1889/2300] Changing user-agent in v-add-letsencrypt-domain

---
 bin/v-add-letsencrypt-domain | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 117d3eff..305589e6 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -60,8 +60,8 @@ query_le_v2() {
     # Save http response to file passed as "$4" arg or print to stdout if not provided
     # http response headers are always sent to stdout
     local save_to_file=${4:-"/dev/stdout"}
-    curl --location --user-agent "MyVestaCP" --insecure --retry 5 --retry-connrefused --silent --dump-header /dev/stdout --data "$post_data" "$1" --header "$content" --output "$save_to_file"
-}
+    curl --location --user-agent "myVesta" --insecure --retry 5 --retry-connrefused --silent --dump-header /dev/stdout --data "$post_data" "$1" --header "$content" --output "$save_to_file"
+ }
 
 
 
@@ -127,7 +127,7 @@ fi
 # Requesting nonce / STEP 1
 echo "[$(date)] : --- Requesting nonce / STEP 1 ---" >> /usr/local/vesta/log/letsencrypt.log
 echo "[$(date)] : curl -s -I \"$API/directory\"" >> /usr/local/vesta/log/letsencrypt.log
-answer=$(curl -s -I "$API/directory")
+answer=$(curl --user-agent "myVesta" -s -I "$API/directory")
 echo "[$(date)] : answer=$answer" >> /usr/local/vesta/log/letsencrypt.log
 nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
 echo "[$(date)] : nonce=$nonce" >> /usr/local/vesta/log/letsencrypt.log
@@ -294,7 +294,7 @@ for auth in $authz; do
             check_result $E_CONNECT "Let's Encrypt domain validation timeout"
         fi
         echo "[$(date)] : curl: $url2 :" >> /usr/local/vesta/log/letsencrypt.log
-        get_answer=$(curl --silent -S "$url2")
+        get_answer=$(curl --user-agent "myVesta" --silent -S "$url2")
         echo "[$(date)] : get_answer=$get_answer" >> /usr/local/vesta/log/letsencrypt.log
         sleeping=$((i*2))
         echo "[$(date)] : sleep $sleeping (i=$i)" >> /usr/local/vesta/log/letsencrypt.log

From a18ee316a220265faf5d0cb329fee2c5b6c13b92 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 6 Apr 2023 09:56:18 +0200
Subject: [PATCH 1890/2300] $LE_API to $API

---
 bin/v-add-letsencrypt-domain | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 305589e6..457557f0 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -18,7 +18,7 @@ aliases=$3
 API='https://acme-v02.api.letsencrypt.org'
 
 if [[ "$LE_STAGING" = 'yes' ]]; then
-	LE_API='https://acme-staging-v02.api.letsencrypt.org'
+	API='https://acme-staging-v02.api.letsencrypt.org'
 fi
 
 # Includes

From 1056cd624bc8319e1bc51de674a7a9da50329bf1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 6 Apr 2023 10:00:57 +0200
Subject: [PATCH 1891/2300] Adding LE_STAGING to v-add-letsencrypt-user

---
 bin/v-add-letsencrypt-user | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-add-letsencrypt-user b/bin/v-add-letsencrypt-user
index 11aec113..9c7181c0 100755
--- a/bin/v-add-letsencrypt-user
+++ b/bin/v-add-letsencrypt-user
@@ -15,6 +15,10 @@ user=$1
 # LE API
 API='https://acme-v02.api.letsencrypt.org'
 
+if [[ "$LE_STAGING" = 'yes' ]]; then
+	API='https://acme-staging-v02.api.letsencrypt.org'
+fi
+
 # Includes
 source $VESTA/func/main.sh
 source $VESTA/conf/vesta.conf

From fbf1d3390a97da4dfd2f0619644b3f0ad52e58ea Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 6 Apr 2023 10:24:54 +0200
Subject: [PATCH 1892/2300] Checking for $nonce before step 7, and check for
 $certificate after step 7

---
 bin/v-add-letsencrypt-domain | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 457557f0..7a306ab3 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -329,6 +329,12 @@ if [[ "$status" -ne 200 ]]; then
     echo "[$(date)] : EXIT=Let's Encrypt finalize bad status $status" >> /usr/local/vesta/log/letsencrypt.log
     check_result $E_CONNECT "Let's Encrypt finalize bad status $status"
 fi
+
+if [ "$nonce" = "" ]; then
+    echo "[$(date)] : EXIT=Let's Encrypt 'nonce' is empty after step 6" >> /usr/local/vesta/log/letsencrypt.log
+    check_result $E_CONNECT "Let's Encrypt 'nonce' is empty after step 6"
+fi
+
 if [ "$certificate" = "" ]; then
     validation="processing"
 	i=1
@@ -351,9 +357,10 @@ if [ "$certificate" = "" ]; then
 		fi
 	done
 fi
-if [ "$nonce" = "" ]; then
-    echo "[$(date)] : EXIT=Let's Encrypt 'nonce' is empty on step 6" >> /usr/local/vesta/log/letsencrypt.log
-    check_result $E_CONNECT "Let's Encrypt 'nonce' is empty on step 6"
+
+if [ "$certificate" = "" ]; then
+    echo "[$(date)] : EXIT=Let's Encrypt 'certificate' is empty after step 7" >> /usr/local/vesta/log/letsencrypt.log
+    check_result $E_CONNECT "Let's Encrypt 'certificate' is empty after step 7"
 fi
 
 # Downloading signed certificate / STEP 8

From b21efb09b6ca5441f157597ae6ef146df95782c2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 6 Apr 2023 10:28:44 +0200
Subject: [PATCH 1893/2300] Adding user-agent in v-add-letsencrypt-user

---
 bin/v-add-letsencrypt-user | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-user b/bin/v-add-letsencrypt-user
index 9c7181c0..d2338e82 100755
--- a/bin/v-add-letsencrypt-user
+++ b/bin/v-add-letsencrypt-user
@@ -45,7 +45,7 @@ query_le_v2() {
     post_data=$post_data'"payload":"'"$payload_"'",'
     post_data=$post_data'"signature":"'"$signature_"'"}'
 
-    curl -s -i -d "$post_data" "$1" -H "$content"
+    curl --user-agent "myVesta" -s -i -d "$post_data" "$1" -H "$content"
 }
 
 

From 7a3fc4fcea84ab4c902936807d2bd36feb166f0b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 6 Apr 2023 11:13:17 +0200
Subject: [PATCH 1894/2300] Update Changelog.md

---
 Changelog.md | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 28f5cd6c..87f48b62 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,4 +1,8 @@
-Version 0.9.8-26-61 [05-Apr-2023]
+Version 0.9.8-26-62 [05-Apr-2023]
+==================================================
+* Fix for LetsEncrypt Asynchronous Order Finalization (in collaboration with @HestiaCP )
+
+Version 0.9.8-26-61 [04-Apr-2023]
 ==================================================
 * Many bugfixes
 * Hotfix for LetsEncrypt to prevent Apache falling 

From 0b7b8cef857ef9d335f59b98b907cf88d967f877 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 6 Apr 2023 11:14:44 +0200
Subject: [PATCH 1895/2300] Version 0.9.8-26-62

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 4ee18f6a..5e8393bb 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-61
+vesta-0.9.8-26-62

From 863f3e2aa5f3b06bbf53eb465ca1834653cb8dec Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Fri, 7 Apr 2023 13:40:23 +0200
Subject: [PATCH 1896/2300] Update README.md

---
 README.md | 87 ++++++++++++++++++++++++++++++++++++++++++++++++-------
 1 file changed, 77 insertions(+), 10 deletions(-)

diff --git a/README.md b/README.md
index c34d496b..6dfe1024 100644
--- a/README.md
+++ b/README.md
@@ -1,14 +1,81 @@
-myVesta
-==================================================
 
-Visit our homepage:
-- https://www.myvestacp.com/
+<h1 align="center"><a href="https://myvestacp.com">myVesta</a></h1>
 
-Forum:
-- https://forum.myvestacp.com/
+<div style="text-align:center">
+
+[![Screenshot of myVesta](https://www.myvestacp.com/screenshot1.png)](https://www.myvestacp.com/)
+
+</div>
+
+<h1 align="center">About</h1>
+
+<p align="center">myVesta is a security and stability-focused fork of VestaCP, exclusively supporting Debian in order to maintain a streamlined ecosystem. Boasting a clean, clutter-free interface and the latest innovative technologies, our project is committed to staying synchronized with official VestaCP commits. We work independently to enhance security and develop new features, driven by our passion for contributing to the open-source community rather than monetary gain. As such, we will offer all features built for myVesta to the official VestaCP project through pull requests, without interfering with their development milestones.</p>
+
+<p align="center"><b>Latest stable release: Version 1.7.0 | <a href="https://github.com/myvesta/vesta/blob/master/Changelog.md">View Changelog</a>
+</b></p>
+
+<h1>Links</h1>
+<ul>
+  <li><a href="https://www.myvestacp.com/">Visit our homepage.</a></li>
+  <li><a href="https://forum.myvestacp.com/">Check out our forum for discussions and support.</a></li>
+  <li><a href="https://wiki.myvestacp.com/">For more information, take a look at our knowledge base.</a></li>
+</ul>
+
+<h1>Features of myVesta</h1>
+<ul>
+    <li>Support for Debian 10 and 11 (Debian 11 is recommended, but previous Debian releases are also supported)</li>
+    <li>Support for MySQL 8</li>
+    <li><a href="https://forum.myvestacp.com/viewtopic.php?f=20&t=51">nginx templates</a> that can prevent denial-of-service on your server</li>
+    <li><a href="https://forum.myvestacp.com/viewtopic.php?f=18&t=52">Support for multi-PHP versions</a></li>
+    <li>You can <a href="https://forum.myvestacp.com/viewtopic.php?f=20&t=350">host NodeJS apps</a></li>
+    <li>You can limit the maximum number of sent emails (per hour) <a href="https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L112-L113">per mail account</a> and <a href="https://github.com/myvesta/vesta/blob/master/install/debian/10/exim/exim4.conf.template#L72-L73">per hosting account</a>, preventing hijacking of email accounts and preventing PHP malware scripts to send spam.</li>
+    <li>
+      You can completely "lock" myVesta so it can be accessed only via secret URL, for example https://serverhost:8083/?MY-SECRET-URL
+      <ul>
+        <li>During installation you will be asked to choose a secret URL for your hosting panel</li>
+        <li>Literally no PHP scripts will be alive on your hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - attackers won't be able to access it without knowing your secret URL - PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless they have the secret URL.</li>
+        <li>You can see for yourself how this mechanism was built by looking at:</li>
+        <ul>
+          <li><a href="https://www.myvestacp.com/#details:~:text=src/deb/for%2Ddownload/php/php.ini">src/deb/for-download/php/php.ini</a></li>
+          <li><a href="https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php">web/inc/secure_login.php</a></li>
+        </ul>
+        <li>If you didn't set the secret URL during installation, you can do it anytime. Just execute in shell: <code>echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php</code></li>
+      </ul>
+    </li>
+  <li>We <a href="https://github.com/myvesta/vesta/blob/master/install/debian/10/php/php7.3-dedi.patch#L9">disabled dangerous PHP functions</a> in php.ini, so even if, for example, your customer's CMS gets compromised, hacker will not be able to execute shell scripts from within PHP.</li>
+  <li>Apache is fully switched to mpm_event mode, while PHP is running in PHP-FPM mode, which is the most stable PHP-stack solution
+    <ul><li>OPCache is turned on by default</li></ul>
+    <li>Auto-generating LetsEncrypt SSL for server hostname (signed SSL for Vesta 8083 port, for dovecot (IMAP & POP3) and for Exim (SMTP))</li>
+    <li>You can change Vesta port during installation or later using one command line: v-change-vesta-port [number]</li>
+    <li>ClamAV is configured to block zip/rar/7z archives that contains executable files (just like GMail)</li>
+    <li>Backup will run with lowest priority (to avoid load on server), and can be configured to run only by night (and to stop on the morning and continue next night) </li>
+    <ul>
+    <li>You can compile Vesta binaries by yourself - <a href="https://github.com/myvesta/vesta/blob/master/src/deb/vesta_compile.sh">src/deb/vesta_compile.sh</a></li>
+<li>You can even create your own APT repository in a minute</li>
+<li>We are using latest nginx version for vesta-nginx package</li>
+<li>With your own APT infrastructure you can take security of Vesta-installer infrastructure in your own hands. You will have full control of your Vesta code (this way you can rest assured that there's 0% chance that you'll install malicious packages from repositories that may get hacked)</li>
+<li>Binaries that you compile are 100% compatible with official VestaCP from vestacp.com, so you can run official VestaCP code with your own binaries (in case you don't want the source code from this fork)</li>
+</ul>
+    
+  </li>
+  </ul>
+  
+<h1>How to install</h1>
+Download the installation script:
+
+```shell
+curl -O http://c.myvestacp.com/vst-install-debian.sh
+```
+
+Then run it:
+
+```shell
+bash vst-install-debian.sh
+```
+
+Or use our <a href="https://www.myvestacp.com/install_generator.html">installer generator</a>.
+
+<h1>Licence</h1>
+myVesta is licensed under <a href="https://github.com/serghey-rodin/vesta/blob/master/LICENSE">GPL v3</a> license.
 
-Knowledge base:
-- https://wiki.myvestacp.com/
 
-Changelog:
-- https://github.com/myvesta/vesta/blob/master/Changelog.md

From 5eabdd4784ca09356e865361b86ce6ac1ce8ca2f Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Fri, 7 Apr 2023 13:41:06 +0200
Subject: [PATCH 1897/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 6dfe1024..55b6c2c8 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@
 
 <p align="center">myVesta is a security and stability-focused fork of VestaCP, exclusively supporting Debian in order to maintain a streamlined ecosystem. Boasting a clean, clutter-free interface and the latest innovative technologies, our project is committed to staying synchronized with official VestaCP commits. We work independently to enhance security and develop new features, driven by our passion for contributing to the open-source community rather than monetary gain. As such, we will offer all features built for myVesta to the official VestaCP project through pull requests, without interfering with their development milestones.</p>
 
-<p align="center"><b>Latest stable release: Version 1.7.0 | <a href="https://github.com/myvesta/vesta/blob/master/Changelog.md">View Changelog</a>
+<p align="center"><b>Latest stable release: Version 0.9.8-26-62 | <a href="https://github.com/myvesta/vesta/blob/master/Changelog.md">View Changelog</a>
 </b></p>
 
 <h1>Links</h1>

From e86585568d4baefb50b81f25ed9d692ddb3522a4 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Fri, 7 Apr 2023 13:44:53 +0200
Subject: [PATCH 1898/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 55b6c2c8..cc5d56d4 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@
 
 <p align="center">myVesta is a security and stability-focused fork of VestaCP, exclusively supporting Debian in order to maintain a streamlined ecosystem. Boasting a clean, clutter-free interface and the latest innovative technologies, our project is committed to staying synchronized with official VestaCP commits. We work independently to enhance security and develop new features, driven by our passion for contributing to the open-source community rather than monetary gain. As such, we will offer all features built for myVesta to the official VestaCP project through pull requests, without interfering with their development milestones.</p>
 
-<p align="center"><b>Latest stable release: Version 0.9.8-26-62 | <a href="https://github.com/myvesta/vesta/blob/master/Changelog.md">View Changelog</a>
+<p align="center"><b><a href="https://github.com/myvesta/vesta/blob/master/Changelog.md">View Changelog</a>
 </b></p>
 
 <h1>Links</h1>

From f0a82f02d3ca34f8a0e4d03a81e5bf414b0c9775 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Fri, 7 Apr 2023 13:50:02 +0200
Subject: [PATCH 1899/2300] Update README.md

---
 README.md | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/README.md b/README.md
index cc5d56d4..62207405 100644
--- a/README.md
+++ b/README.md
@@ -75,6 +75,20 @@ bash vst-install-debian.sh
 
 Or use our <a href="https://www.myvestacp.com/install_generator.html">installer generator</a>.
 
+<h1>UUseful scripts</h1>
+<ul>
+  <li><a href="https://forum.myvestacp.com/viewtopic.php?f=24&t=50">How to move accounts from one (my)Vesta server to another myVesta server</a></li>
+  <li><a href="https://forum.myvestacp.com/viewtopic.php?f=17&t=386">WordPress installer in one second </a></li>(v-install-wordpress)
+  <li><a href="https://forum.myvestacp.com/viewtopic.php?f=17&t=385">Cloning script that will copy the whole site from one (sub)domain to another (sub)domain </a></li>(v-clone-website)
+  <li><a href="https://forum.myvestacp.com/viewtopic.php?f=17&t=382">Script that will migrate your site from http to https, replacing http to https URLs in database </a></li>(v-migrate-site-to-https)
+  <li><a href="https://forum.myvestacp.com/viewtopic.php?f=24&t=63">Script for importing cPanel backups to Vesta (thanks to Maks Usmanov - Skamasle) </a></li> (v-import-cpanel-backup)
+  <li><a href="https://forum.myvestacp.com/viewtopic.php?f=18&t=52">Script that will install multiple PHP versions on your server</a></li>
+  <li><a href="https://forum.myvestacp.com/viewtopic.php?f=20&t=350">How to host NodeJS apps</a></li>
+  <li><a href="https://forum.myvestacp.com/viewtopic.php?f=20&t=51">Script that will install nginx templates that can prevent denial-of-service on your server</a></li>
+  <li><a href="https://forum.myvestacp.com/viewtopic.php?f=15&t=47">Official VestaCP Softaculous installer</a></li>
+</ul>
+
+
 <h1>Licence</h1>
 myVesta is licensed under <a href="https://github.com/serghey-rodin/vesta/blob/master/LICENSE">GPL v3</a> license.
 

From 0e16d8d59c8f9276a3bf3de9cd21ab7c2ec16ca9 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Fri, 7 Apr 2023 13:50:17 +0200
Subject: [PATCH 1900/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 62207405..1848be5d 100644
--- a/README.md
+++ b/README.md
@@ -75,7 +75,7 @@ bash vst-install-debian.sh
 
 Or use our <a href="https://www.myvestacp.com/install_generator.html">installer generator</a>.
 
-<h1>UUseful scripts</h1>
+<h1>Useful scripts</h1>
 <ul>
   <li><a href="https://forum.myvestacp.com/viewtopic.php?f=24&t=50">How to move accounts from one (my)Vesta server to another myVesta server</a></li>
   <li><a href="https://forum.myvestacp.com/viewtopic.php?f=17&t=386">WordPress installer in one second </a></li>(v-install-wordpress)

From 8dbfa3e2103790411c43084024db3fbd832ca06e Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Fri, 7 Apr 2023 13:53:10 +0200
Subject: [PATCH 1901/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 1848be5d..44d414b8 100644
--- a/README.md
+++ b/README.md
@@ -36,7 +36,7 @@
         <li>Literally no PHP scripts will be alive on your hosting panel (won't be able to get executed), unless you access the hosting panel with secret URL parameter. Thus, when it happens that, let's say, some zero-day exploit pops up - attackers won't be able to access it without knowing your secret URL - PHP scripts from VestaCP will be simply dead - no one will be able to interact with your panel unless they have the secret URL.</li>
         <li>You can see for yourself how this mechanism was built by looking at:</li>
         <ul>
-          <li><a href="https://www.myvestacp.com/#details:~:text=src/deb/for%2Ddownload/php/php.ini">src/deb/for-download/php/php.ini</a></li>
+          <li><a href="https://github.com/myvesta/vesta/blob/master/src/deb/for-download/php/php.ini#L496">src/deb/for-download/php/php.ini</a></li>
           <li><a href="https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php">web/inc/secure_login.php</a></li>
         </ul>
         <li>If you didn't set the secret URL during installation, you can do it anytime. Just execute in shell: <code>echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php</code></li>

From e2fcade5bb91ab978d6ffb59574d632858386e8b Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Sun, 9 Apr 2023 00:17:27 +0200
Subject: [PATCH 1902/2300] Update v-clone-website

---
 bin/v-clone-website | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index df98c6db..57749f74 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -434,6 +434,9 @@ else
         sudo -H -u$TO_USER wp search-replace "/home/$FROM_USER/" "/home/$TO_USER/" --precise --all-tables --skip-columns=guid
     fi
     sudo -H -u$TO_USER wp cache flush
+    cd $TO_FOLDER
+    sudo -H -u$TO_USER wp config shuffle-salts WP_CACHE_KEY_SALT --force
+    sudo -H -u$TO_USER wp config shuffle-salts
 fi
 
 echo "===== DONE ===="

From 2fae00ae7dcce79657f54c3e8c057694a3451566 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Sun, 9 Apr 2023 00:22:04 +0200
Subject: [PATCH 1903/2300] Update v-clone-website

---
 bin/v-clone-website | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 57749f74..74de3271 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -420,12 +420,6 @@ if [ $IT_IS_WP -eq 0 ]; then
     fi
 else
     cd $TO_FOLDER
-    if [ -d "wp-content/plugins/w3-total-cache" ]; then
-        rm -f wp-content/object-cache.php
-        rm -f wp-content/db.php
-        rm -f wp-content/advanced-cache.php
-        rm -rf wp-content/w3tc-config
-        rm -rf wp-content/plugins/w3-total-cache
     fi
     echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
     sudo -H -u$TO_USER wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid

From 706e365a5e031f9d6d90630954d03cfabc1f0489 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 9 Apr 2023 14:01:18 +0200
Subject: [PATCH 1904/2300] syntax fix

---
 bin/v-clone-website | 2 --
 1 file changed, 2 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 74de3271..46623db4 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -420,7 +420,6 @@ if [ $IT_IS_WP -eq 0 ]; then
     fi
 else
     cd $TO_FOLDER
-    fi
     echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
     sudo -H -u$TO_USER wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid
     if [ "$FROM_USER" != "$TO_USER" ]; then
@@ -428,7 +427,6 @@ else
         sudo -H -u$TO_USER wp search-replace "/home/$FROM_USER/" "/home/$TO_USER/" --precise --all-tables --skip-columns=guid
     fi
     sudo -H -u$TO_USER wp cache flush
-    cd $TO_FOLDER
     sudo -H -u$TO_USER wp config shuffle-salts WP_CACHE_KEY_SALT --force
     sudo -H -u$TO_USER wp config shuffle-salts
 fi

From 77467eeebddd6853c04f462be8117a24f3603c53 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 12 Apr 2023 19:58:32 +0200
Subject: [PATCH 1905/2300] exim4 HELO authenticated patch

---
 install/debian/10/exim/exim4.conf.template         | 10 ++++++----
 install/debian/11/exim/exim4.conf.template         | 10 ++++++----
 install/debian/11/exim/exim4.conf.template-RC      | 10 ++++++----
 install/debian/8/exim/exim4.conf.template          | 10 ++++++----
 install/debian/9/exim/exim4.conf.template          | 10 ++++++----
 .../tools/patches/exim_helo_authenticated.patch    | 14 ++++++++++++++
 6 files changed, 44 insertions(+), 20 deletions(-)
 create mode 100644 src/deb/for-download/tools/patches/exim_helo_authenticated.patch

diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
index 70577b6e..0e5afaac 100644
--- a/install/debian/10/exim/exim4.conf.template
+++ b/install/debian/10/exim/exim4.conf.template
@@ -91,16 +91,18 @@ acl_check_mail:
   deny    condition     = ${if eq{$sender_helo_name}{}}
           message       = HELO required before MAIL
 
-  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+  drop    !authenticated = *
+          message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
           condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
-          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
           condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
           delay         = 45s
 
-  drop    condition     = ${if isip{$sender_helo_name}}
+  drop    !authenticated = *
+          condition     = ${if isip{$sender_helo_name}}
           message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
 
-  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+  drop    !authenticated = *
+          condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
           message       = $interface_address is _my_ address
 
   accept
diff --git a/install/debian/11/exim/exim4.conf.template b/install/debian/11/exim/exim4.conf.template
index 4b3c0dd9..72e3f668 100644
--- a/install/debian/11/exim/exim4.conf.template
+++ b/install/debian/11/exim/exim4.conf.template
@@ -91,16 +91,18 @@ acl_check_mail:
   deny    condition     = ${if eq{$sender_helo_name}{}}
           message       = HELO required before MAIL
 
-  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+  drop    !authenticated = *
+          message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
           condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
-          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
           condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
           delay         = 45s
 
-  drop    condition     = ${if isip{$sender_helo_name}}
+  drop    !authenticated = *
+          condition     = ${if isip{$sender_helo_name}}
           message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
 
-  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+  drop    !authenticated = *
+          condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
           message       = $interface_address is _my_ address
 
   accept
diff --git a/install/debian/11/exim/exim4.conf.template-RC b/install/debian/11/exim/exim4.conf.template-RC
index 36ba2a0d..e5ba36ab 100644
--- a/install/debian/11/exim/exim4.conf.template-RC
+++ b/install/debian/11/exim/exim4.conf.template-RC
@@ -108,16 +108,18 @@ acl_check_mail:
   deny    condition     = ${if eq{$sender_helo_name}{}}
           message       = HELO required before MAIL
 
-  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+  drop    !authenticated = *
+          message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
           condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
-          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
           condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
           delay         = 45s
 
-  drop    condition     = ${if isip{$sender_helo_name}}
+  drop    !authenticated = *
+          condition     = ${if isip{$sender_helo_name}}
           message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
 
-  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+  drop    !authenticated = *
+          condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
           message       = $interface_address is _my_ address
 
   accept
diff --git a/install/debian/8/exim/exim4.conf.template b/install/debian/8/exim/exim4.conf.template
index e49bbf4e..261947d2 100644
--- a/install/debian/8/exim/exim4.conf.template
+++ b/install/debian/8/exim/exim4.conf.template
@@ -87,16 +87,18 @@ acl_check_mail:
   deny    condition     = ${if eq{$sender_helo_name}{}}
           message       = HELO required before MAIL
 
-  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+  drop    !authenticated = *
+          message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
           condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
-          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
           condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
           delay         = 45s
 
-  drop    condition     = ${if isip{$sender_helo_name}}
+  drop    !authenticated = *
+          condition     = ${if isip{$sender_helo_name}}
           message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
 
-  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+  drop    !authenticated = *
+          condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
           message       = $interface_address is _my_ address
 
   accept
diff --git a/install/debian/9/exim/exim4.conf.template b/install/debian/9/exim/exim4.conf.template
index e49bbf4e..261947d2 100644
--- a/install/debian/9/exim/exim4.conf.template
+++ b/install/debian/9/exim/exim4.conf.template
@@ -87,16 +87,18 @@ acl_check_mail:
   deny    condition     = ${if eq{$sender_helo_name}{}}
           message       = HELO required before MAIL
 
-  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+  drop    !authenticated = *
+          message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
           condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
-          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
           condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
           delay         = 45s
 
-  drop    condition     = ${if isip{$sender_helo_name}}
+  drop    !authenticated = *
+          condition     = ${if isip{$sender_helo_name}}
           message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
 
-  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+  drop    !authenticated = *
+          condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
           message       = $interface_address is _my_ address
 
   accept
diff --git a/src/deb/for-download/tools/patches/exim_helo_authenticated.patch b/src/deb/for-download/tools/patches/exim_helo_authenticated.patch
new file mode 100644
index 00000000..9dd8dbad
--- /dev/null
+++ b/src/deb/for-download/tools/patches/exim_helo_authenticated.patch
@@ -0,0 +1,14 @@
+--- /etc/exim4/exim4.conf.template.orig	2023-04-12 19:05:20.745847763 +0200
++++ /etc/exim4/exim4.conf.template	2023-04-12 19:34:29.000000000 +0200
+@@ -94 +94,2 @@
+-  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
++  drop    !authenticated = *
++          message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+@@ -100 +101,2 @@
+-  drop    condition     = ${if isip{$sender_helo_name}}
++  drop    !authenticated = *
++          condition     = ${if isip{$sender_helo_name}}
+@@ -103 +105,2 @@
+-  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
++  drop    !authenticated = *
++          condition     = ${if eq{[$interface_address]}{$sender_helo_name}}

From 4dd6d22f077370e88ff049fc7ee9aab487008efb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 14 Apr 2023 15:39:33 +0200
Subject: [PATCH 1906/2300] myvesta-php-func support for stdin

---
 bin/v-php-func                   |   9 +++
 func/bash-to-php-interpreter.php |   8 +++
 func/main.php                    |   2 +
 func/string.php                  | 113 +++++++++++++++++++++++++++++--
 4 files changed, 126 insertions(+), 6 deletions(-)

diff --git a/bin/v-php-func b/bin/v-php-func
index f6192c33..f7a73385 100644
--- a/bin/v-php-func
+++ b/bin/v-php-func
@@ -8,5 +8,14 @@
 #                       Action                             #
 #----------------------------------------------------------#
 
+
+if [ -p /dev/stdin ]; then
+    STDIN=$(cat -)
+    if [ ! -z "$STDIN" ]; then
+        echo "$STDIN" | php /usr/local/vesta/func/bash-to-php-interpreter.php "$@"
+        exit $?
+    fi
+fi
+
 php /usr/local/vesta/func/bash-to-php-interpreter.php "$@"
 exit $?
diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
index 13995e1c..e780d41c 100644
--- a/func/bash-to-php-interpreter.php
+++ b/func/bash-to-php-interpreter.php
@@ -7,6 +7,14 @@ else $SHLVL=3;
 
 if (!isset($argv)) exit(5);
 
+stream_set_blocking(STDIN, false);
+$myvesta_stdin='';
+$myvesta_f = fopen( 'php://stdin', 'r' );
+while( $myvesta_line = fgets( $myvesta_f ) ) {
+  $myvesta_stdin .= $myvesta_line;
+}
+fclose( $myvesta_f );
+
 include ("/usr/local/vesta/func/main.php");
 include ("/usr/local/vesta/func/string.php");
 
diff --git a/func/main.php b/func/main.php
index fcc96610..03a501a1 100644
--- a/func/main.php
+++ b/func/main.php
@@ -71,7 +71,9 @@ function myvesta_fix_args() {
 }
 
 function myvesta_test_func () {
+    global $myvesta_stdin;
     $args=func_get_args();
+    if ($myvesta_stdin!='') array_splice( $args, 0, 0, array($myvesta_stdin) );
     myvesta_echo ("You said: ");
     myvesta_echo (trim(print_r ($args, true)));
 }
diff --git a/func/string.php b/func/string.php
index 2b6a63d9..a38e068e 100644
--- a/func/string.php
+++ b/func/string.php
@@ -70,8 +70,23 @@ function myvesta_strip_in_file_between_including_borders($file, $left, $right) {
 
 // --- string functions ---
 
-function myvesta_str_get_between (&$text, $left_substring, $right_substring, $start=0, $return_left_substring=0, $return_right_substring=0, $left_substring_necessary=1, $right_substring_necessary=1) {
-    global $myvesta_str_found_at, $myvesta_str_end_at;
+function myvesta_str_get_between () {
+    global $myvesta_stdin, $myvesta_str_found_at, $myvesta_str_end_at;
+    $args=func_get_args();
+    $args_i=-1;
+    if ($myvesta_stdin!='') {
+        $text=$myvesta_stdin;
+    } else {
+        $args_i++; $text=$args[$args_i];
+    }
+    $args_i++; $left_substring=$args[$args_i];
+    $args_i++; $right_substring=$args[$args_i]; 
+    $args_i++; $start=0; if (!empty($args[$args_i])) $start=intval($args[$args_i]);
+    $args_i++; $return_left_substring=0; if (!empty($args[$args_i])) $return_left_substring=intval($args[$args_i]);
+    $args_i++; $return_right_substring=0; if (!empty($args[$args_i])) $return_right_substring=intval($args[$args_i]);
+    $args_i++; $left_substring_necessary=1; if (!empty($args[$args_i])) $left_substring_necessary=intval($args[$args_i]);
+    $args_i++; $right_substring_necessary=1; if (!empty($args[$args_i])) $right_substring_necessary=intval($args[$args_i]);
+
     $myvesta_str_found_at=0;
     $myvesta_str_end_at=0;
     $from_null=0;
@@ -105,7 +120,19 @@ function myvesta_str_get_between (&$text, $left_substring, $right_substring, $st
     return substr($text, $pos1, $len);
 }
 
-function myvesta_str_replace_once_between_including_borders(&$text, $left, $right, $replace_with) {
+function myvesta_str_replace_once_between_including_borders() {
+    global $myvesta_stdin;
+    $args=func_get_args();
+    $args_i=-1;
+    if ($myvesta_stdin!='') {
+        $text=$myvesta_stdin;
+    } else {
+        $args_i++; $text=$args[$args_i];
+    }
+    $args_i++; $left=$args[$args_i];
+    $args_i++; $right=$args[$args_i];
+    $args_i++; $replace_with=$args[$args_i];
+
     $pos1=strpos($text, $left);
     if ($pos1===false) return $text;
     $pos2=strpos($text, $right, $pos1+strlen($left));
@@ -113,7 +140,18 @@ function myvesta_str_replace_once_between_including_borders(&$text, $left, $righ
     return substr($text, 0, $pos1).$replace_with.substr($text, $pos2+strlen($right));
 }
 
-function myvesta_str_strip_once_between_including_borders(&$text, $left, $right) {
+function myvesta_str_strip_once_between_including_borders() {
+    global $myvesta_stdin;
+    $args=func_get_args();
+    $args_i=-1;
+    if ($myvesta_stdin!='') {
+        $text=$myvesta_stdin;
+    } else {
+        $args_i++; $text=$args[$args_i];
+    }
+    $args_i++; $left=$args[$args_i];
+    $args_i++; $right=$args[$args_i];
+
     $pos1=strpos($text, $left);
     if ($pos1===false) return $text;
     $pos2=strpos($text, $right, $pos1+strlen($left));
@@ -121,7 +159,19 @@ function myvesta_str_strip_once_between_including_borders(&$text, $left, $right)
     return substr($text, 0, $pos1).substr($text, $pos2+strlen($right));
 }
 
-function myvesta_str_replace_between_including_borders($text, $left, $right, $replace_with) {
+function myvesta_str_replace_between_including_borders() {
+    global $myvesta_stdin;
+    $args=func_get_args();
+    $args_i=-1;
+    if ($myvesta_stdin!='') {
+        $text=$myvesta_stdin;
+    } else {
+        $args_i++; $text=$args[$args_i];
+    }
+    $args_i++; $left=$args[$args_i];
+    $args_i++; $right=$args[$args_i];
+    $args_i++; $replace_with=$args[$args_i];
+
     $start=0;
     $left_len=strlen($left);
     $right_len=strlen($right);
@@ -135,7 +185,18 @@ function myvesta_str_replace_between_including_borders($text, $left, $right, $re
     return $text;
 }
 
-function myvesta_str_strip_between_including_borders($text, $left, $right) {
+function myvesta_str_strip_between_including_borders() {
+    global $myvesta_stdin;
+    $args=func_get_args();
+    $args_i=-1;
+    if ($myvesta_stdin!='') {
+        $text=$myvesta_stdin;
+    } else {
+        $args_i++; $text=$args[$args_i];
+    }
+    $args_i++; $left=$args[$args_i];
+    $args_i++; $right=$args[$args_i];
+
     $left_len=strlen($left);
     $right_len=strlen($right);
     while (true) {
@@ -147,3 +208,43 @@ function myvesta_str_strip_between_including_borders($text, $left, $right) {
     }
     return $text;
 }
+
+function myvesta_str_find() {
+    global $myvesta_stdin;
+    $args=func_get_args();
+    $args_i=-1;
+    if ($myvesta_stdin!='') {
+        $text=$myvesta_stdin;
+    } else {
+        $args_i++; $text=$args[$args_i];
+    }
+    $args_i++; $find=$args[$args_i];
+
+    $pos=strpos($text, $find);
+    if ($pos===false) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "");
+    return $pos;
+}
+
+function myvesta_str_uppercase() {
+    global $myvesta_stdin;
+    $args=func_get_args();
+    $args_i=-1;
+    if ($myvesta_stdin!='') {
+        $text=$myvesta_stdin;
+    } else {
+        $args_i++; $text=$args[$args_i];
+    }
+    return strtoupper($text);
+}
+
+function myvesta_str_lowercase() {
+    global $myvesta_stdin;
+    $args=func_get_args();
+    $args_i=-1;
+    if ($myvesta_stdin!='') {
+        $text=$myvesta_stdin;
+    } else {
+        $args_i++; $text=$args[$args_i];
+    }
+    return strtolower($text);
+}

From 452f8a81d94380d02f163d110ab3ba4f2c22ea24 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 14 Apr 2023 16:21:00 +0200
Subject: [PATCH 1907/2300] php myvesta_str_substring

---
 func/string.php | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/func/string.php b/func/string.php
index a38e068e..9e531fb8 100644
--- a/func/string.php
+++ b/func/string.php
@@ -248,3 +248,19 @@ function myvesta_str_lowercase() {
     }
     return strtolower($text);
 }
+
+function myvesta_str_substring() {
+    global $myvesta_stdin;
+    $args=func_get_args();
+    $args_i=-1;
+    if ($myvesta_stdin!='') {
+        $text=$myvesta_stdin;
+    } else {
+        $args_i++; $text=$args[$args_i];
+    }
+    $args_i++; $start=$args[$args_i];
+    $args_i++; $length=null; if (!empty($args[$args_i])) $length=intval($args[$args_i]);
+    
+    if ($length===null) return substr($text, $start);
+    if ($length!==null) return substr($text, $start, $length);
+}

From c5144bcbae09a3e332ce934127800b85cc1526df Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 14 Apr 2023 16:47:42 +0200
Subject: [PATCH 1908/2300] v-php-func str_find quiet

---
 func/string.php | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/func/string.php b/func/string.php
index 9e531fb8..ffc7bf68 100644
--- a/func/string.php
+++ b/func/string.php
@@ -2,14 +2,18 @@
 
 // --- file functions ---
 
-function myvesta_find_in_file($file, $find) {
-    if (!file_exists($file)) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
-
+function myvesta_find_in_file($file, $find, $quiet=false) {
+    if (!file_exists($file)) {
+        if ($quiet) return false;
+        return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
+    }
+    
     $buf=file_get_contents($file);
 
     $pos=strpos($buf, $find);
+    
     if ($pos===false) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "");
-
+    if ($quiet) return true;
     return $pos;
 }
 
@@ -219,9 +223,11 @@ function myvesta_str_find() {
         $args_i++; $text=$args[$args_i];
     }
     $args_i++; $find=$args[$args_i];
+    $args_i++; $quiet=false; if (!empty($args[$args_i])) $quiet=boolval($args[$args_i]);
 
     $pos=strpos($text, $find);
     if ($pos===false) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "");
+    if ($quiet) return true;
     return $pos;
 }
 

From 2f371245455db8e982ddf853c37c820d6b447d54 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 14 Apr 2023 19:01:07 +0200
Subject: [PATCH 1909/2300] simplifying php str functions

---
 func/bash-to-php-interpreter.php |   1 +
 func/string.php                  | 110 ++++---------------------------
 2 files changed, 12 insertions(+), 99 deletions(-)

diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
index e780d41c..461c1af0 100644
--- a/func/bash-to-php-interpreter.php
+++ b/func/bash-to-php-interpreter.php
@@ -29,6 +29,7 @@ if (!function_exists($func)) {
 
 $params=array();
 
+if ($myvesta_stdin!='') $params[]=$myvesta_stdin;
 for ($i=2; $i<$counter; $i++) {
     $argv[$i]=myvesta_fix_backslashes($argv[$i]);
     $params[]=$argv[$i];
diff --git a/func/string.php b/func/string.php
index ffc7bf68..69881c8f 100644
--- a/func/string.php
+++ b/func/string.php
@@ -7,7 +7,7 @@ function myvesta_find_in_file($file, $find, $quiet=false) {
         if ($quiet) return false;
         return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File '$file' not found");
     }
-    
+
     $buf=file_get_contents($file);
 
     $pos=strpos($buf, $find);
@@ -74,23 +74,8 @@ function myvesta_strip_in_file_between_including_borders($file, $left, $right) {
 
 // --- string functions ---
 
-function myvesta_str_get_between () {
-    global $myvesta_stdin, $myvesta_str_found_at, $myvesta_str_end_at;
-    $args=func_get_args();
-    $args_i=-1;
-    if ($myvesta_stdin!='') {
-        $text=$myvesta_stdin;
-    } else {
-        $args_i++; $text=$args[$args_i];
-    }
-    $args_i++; $left_substring=$args[$args_i];
-    $args_i++; $right_substring=$args[$args_i]; 
-    $args_i++; $start=0; if (!empty($args[$args_i])) $start=intval($args[$args_i]);
-    $args_i++; $return_left_substring=0; if (!empty($args[$args_i])) $return_left_substring=intval($args[$args_i]);
-    $args_i++; $return_right_substring=0; if (!empty($args[$args_i])) $return_right_substring=intval($args[$args_i]);
-    $args_i++; $left_substring_necessary=1; if (!empty($args[$args_i])) $left_substring_necessary=intval($args[$args_i]);
-    $args_i++; $right_substring_necessary=1; if (!empty($args[$args_i])) $right_substring_necessary=intval($args[$args_i]);
-
+function myvesta_str_get_between (&$text, $left_substring, $right_substring, $start=0, $return_left_substring=0, $return_right_substring=0, $left_substring_necessary=1, $right_substring_necessary=1) {
+    global $myvesta_str_found_at, $myvesta_str_end_at;
     $myvesta_str_found_at=0;
     $myvesta_str_end_at=0;
     $from_null=0;
@@ -124,19 +109,7 @@ function myvesta_str_get_between () {
     return substr($text, $pos1, $len);
 }
 
-function myvesta_str_replace_once_between_including_borders() {
-    global $myvesta_stdin;
-    $args=func_get_args();
-    $args_i=-1;
-    if ($myvesta_stdin!='') {
-        $text=$myvesta_stdin;
-    } else {
-        $args_i++; $text=$args[$args_i];
-    }
-    $args_i++; $left=$args[$args_i];
-    $args_i++; $right=$args[$args_i];
-    $args_i++; $replace_with=$args[$args_i];
-
+function myvesta_str_replace_once_between_including_borders(&$text, $left, $right, $replace_with) {
     $pos1=strpos($text, $left);
     if ($pos1===false) return $text;
     $pos2=strpos($text, $right, $pos1+strlen($left));
@@ -144,18 +117,7 @@ function myvesta_str_replace_once_between_including_borders() {
     return substr($text, 0, $pos1).$replace_with.substr($text, $pos2+strlen($right));
 }
 
-function myvesta_str_strip_once_between_including_borders() {
-    global $myvesta_stdin;
-    $args=func_get_args();
-    $args_i=-1;
-    if ($myvesta_stdin!='') {
-        $text=$myvesta_stdin;
-    } else {
-        $args_i++; $text=$args[$args_i];
-    }
-    $args_i++; $left=$args[$args_i];
-    $args_i++; $right=$args[$args_i];
-
+function myvesta_str_strip_once_between_including_borders(&$text, $left, $right) {
     $pos1=strpos($text, $left);
     if ($pos1===false) return $text;
     $pos2=strpos($text, $right, $pos1+strlen($left));
@@ -163,19 +125,7 @@ function myvesta_str_strip_once_between_including_borders() {
     return substr($text, 0, $pos1).substr($text, $pos2+strlen($right));
 }
 
-function myvesta_str_replace_between_including_borders() {
-    global $myvesta_stdin;
-    $args=func_get_args();
-    $args_i=-1;
-    if ($myvesta_stdin!='') {
-        $text=$myvesta_stdin;
-    } else {
-        $args_i++; $text=$args[$args_i];
-    }
-    $args_i++; $left=$args[$args_i];
-    $args_i++; $right=$args[$args_i];
-    $args_i++; $replace_with=$args[$args_i];
-
+function myvesta_str_replace_between_including_borders($text, $left, $right, $replace_with) {
     $start=0;
     $left_len=strlen($left);
     $right_len=strlen($right);
@@ -189,7 +139,7 @@ function myvesta_str_replace_between_including_borders() {
     return $text;
 }
 
-function myvesta_str_strip_between_including_borders() {
+function myvesta_str_strip_between_including_borders($text, $left, $right) {
     global $myvesta_stdin;
     $args=func_get_args();
     $args_i=-1;
@@ -213,60 +163,22 @@ function myvesta_str_strip_between_including_borders() {
     return $text;
 }
 
-function myvesta_str_find() {
-    global $myvesta_stdin;
-    $args=func_get_args();
-    $args_i=-1;
-    if ($myvesta_stdin!='') {
-        $text=$myvesta_stdin;
-    } else {
-        $args_i++; $text=$args[$args_i];
-    }
-    $args_i++; $find=$args[$args_i];
-    $args_i++; $quiet=false; if (!empty($args[$args_i])) $quiet=boolval($args[$args_i]);
-
+function myvesta_str_find($text, $find, $quiet=false) {
     $pos=strpos($text, $find);
     if ($pos===false) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "");
     if ($quiet) return true;
     return $pos;
 }
 
-function myvesta_str_uppercase() {
-    global $myvesta_stdin;
-    $args=func_get_args();
-    $args_i=-1;
-    if ($myvesta_stdin!='') {
-        $text=$myvesta_stdin;
-    } else {
-        $args_i++; $text=$args[$args_i];
-    }
+function myvesta_str_uppercase($text) {
     return strtoupper($text);
 }
 
-function myvesta_str_lowercase() {
-    global $myvesta_stdin;
-    $args=func_get_args();
-    $args_i=-1;
-    if ($myvesta_stdin!='') {
-        $text=$myvesta_stdin;
-    } else {
-        $args_i++; $text=$args[$args_i];
-    }
+function myvesta_str_lowercase($text) {
     return strtolower($text);
 }
 
-function myvesta_str_substring() {
-    global $myvesta_stdin;
-    $args=func_get_args();
-    $args_i=-1;
-    if ($myvesta_stdin!='') {
-        $text=$myvesta_stdin;
-    } else {
-        $args_i++; $text=$args[$args_i];
-    }
-    $args_i++; $start=$args[$args_i];
-    $args_i++; $length=null; if (!empty($args[$args_i])) $length=intval($args[$args_i]);
-    
+function myvesta_str_substring($text, $start, $length=null) {
     if ($length===null) return substr($text, $start);
     if ($length!==null) return substr($text, $start, $length);
 }

From 888db2bc72a9951b53051ab32ac25a6eb7341ca8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Apr 2023 15:50:27 +0200
Subject: [PATCH 1910/2300] myvesta php replacement for gnu 'grep' (but without
 regular expression)

---
 bin/v-php-func                   |  2 +-
 func/bash-to-php-interpreter.php | 27 ++++++++++-
 func/main.php                    | 83 ++++++++++++++++++++++++++++++--
 func/string.php                  | 34 +++++++++++++
 4 files changed, 140 insertions(+), 6 deletions(-)

diff --git a/bin/v-php-func b/bin/v-php-func
index f7a73385..0c789863 100644
--- a/bin/v-php-func
+++ b/bin/v-php-func
@@ -2,7 +2,7 @@
 # info: calling myVesta PHP functions
 # options: FUNCTION
 #
-# The function is calling myVesta PHP functions.
+# The function is calling myVesta or standard PHP functions directly from bash
 
 #----------------------------------------------------------#
 #                       Action                             #
diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
index 461c1af0..baf9475e 100644
--- a/func/bash-to-php-interpreter.php
+++ b/func/bash-to-php-interpreter.php
@@ -11,7 +11,7 @@ stream_set_blocking(STDIN, false);
 $myvesta_stdin='';
 $myvesta_f = fopen( 'php://stdin', 'r' );
 while( $myvesta_line = fgets( $myvesta_f ) ) {
-  $myvesta_stdin .= $myvesta_line;
+    $myvesta_stdin .= $myvesta_line;
 }
 fclose( $myvesta_f );
 
@@ -27,13 +27,36 @@ if (!function_exists($func)) {
     if (!function_exists($func)) myvesta_throw_error(2, 'Function does not exists');
 }
 
+$insert_stdin_at_position=false;
+if ($func=="myvesta_grep") $insert_stdin_at_position=1;
+
 $params=array();
 
-if ($myvesta_stdin!='') $params[]=$myvesta_stdin;
+$added=0;
+$stdin_content='';
+ $myvesta_stdin_return_not_found=false;
+if ($myvesta_stdin!='' && $insert_stdin_at_position===false) {$params[]=$myvesta_stdin; $added++;}
+
 for ($i=2; $i<$counter; $i++) {
     $argv[$i]=myvesta_fix_backslashes($argv[$i]);
+    if ($insert_stdin_at_position!==false && $myvesta_stdin=='') if ($insert_stdin_at_position==$added) {$stdin_content=$argv[$i]; $added++; continue;}
     $params[]=$argv[$i];
+    $added++;
 }
+if ($insert_stdin_at_position!=false) {
+    if ($myvesta_stdin=='') {
+        $file_or_stdin=$stdin_content;
+        if (!file_exists($file_or_stdin)) {
+            $myvesta_stdin_return_not_found=true;
+            $myvesta_stdin='';
+        } else {
+            $myvesta_stdin=file_get_contents($file_or_stdin);
+        }
+    }
+    if (isset($params[$insert_stdin_at_position])) array_splice($params, $insert_stdin_at_position, 0, array($myvesta_stdin));
+    else $params[$insert_stdin_at_position]=$myvesta_stdin;
+}
+//print_r($params); exit;
 
 $r=call_user_func_array($func, $params);
 if (is_bool($r)) {
diff --git a/func/main.php b/func/main.php
index 03a501a1..650f52ef 100644
--- a/func/main.php
+++ b/func/main.php
@@ -14,9 +14,88 @@ function myvesta_echo($str) {
     echo $str;
 }
 
-function myvesta_exit($code) {
+function myvesta_exit($code, $echo='') {
     global $SHLVL, $myvesta_echo_done, $myvesta_last_echo;
     // myvesta_echo ("==================== ".$argv[0].": ".$code." ====================\n");
+    if ($echo!='') myvesta_echo($echo);
+    if ($SHLVL<3 && $myvesta_echo_done==true) {
+        $last_char=substr($myvesta_last_echo, -1, 1);
+        if ($last_char!="\n") echo "\n";
+    }
+    exit($code);
+}
+
+$myvesta_current_user=exec('whoami', $myvesta_output, $myvesta_return_var);
+if ($myvesta_current_user != 'root') {myvesta_echo ("ERROR: You must be root to execute this script"); myvesta_exit(1);}
+
+function myvesta_throw_error($code, $message) {
+    global $myvesta_exit_on_error;
+    if ($message!=='') myvesta_echo ("ERROR: ".$message);
+    if ($myvesta_exit_on_error) myvesta_exit($code);
+    return $code;
+}
+
+function myvesta_fix_backslashes($s) {
+    $s=str_replace("\\n", "\n", $s);
+    $s=str_replace("\\r", "\r", $s);
+    $s=str_replace("\\t", "\t", $s);
+    return $s;
+}
+
+function myvesta_check_args ($requried_arguments, $arguments) {
+    global $argv;
+    $argument_counter=count($argv);
+    $argument_counter--;
+    $argv[0]=str_replace('/usr/local/vesta/bin/', '', $argv[0]);
+    // myvesta_echo ( "-------------------- ".$argv[0]." --------------------\n");
+    if ($argument_counter<$requried_arguments) {
+        $arguments=str_replace(" ", "' '", $arguments);
+        $arguments="'".$arguments."'";
+        return myvesta_throw_error(MYVESTA_ERROR_MISSING_ARGUMENTS, "Usage: $command $arguments");
+    }
+    $argument_arr=explode(" ", $arguments);
+    $i=1;
+    foreach ($argument_arr as $argument) {
+        $GLOBALS[$argument]=myvesta_fix_backslashes($argv[$i]);
+        $i++;
+    }
+}
+
+function myvesta_fix_args() {
+    global $argv;
+    $i=0;
+    foreach ($argv as $argument) {
+        if ($i==0) {$i++; continue;}
+        $argv[$i]=myvesta_fix_backslashes($argv[$i]);
+        $i++;
+    }
+}
+
+function myvesta_test_func () {
+    $args=func_get_args();
+    myvesta_echo ("You said: ");
+    myvesta_echo (trim(print_r ($args, true)));
+}
+<?php
+
+$myvesta_exit_on_error=true;
+define('MYVESTA_ERROR_PERMISSION_DENIED', 1);
+define('MYVESTA_ERROR_MISSING_ARGUMENTS', 2);
+define('MYVESTA_ERROR_FILE_DOES_NOT_EXISTS', 3);
+define('MYVESTA_ERROR_STRING_NOT_FOUND', 4);
+define('MYVESTA_ERROR_GENERAL', 5);
+
+function myvesta_echo($str) {
+    global $myvesta_echo_done, $myvesta_last_echo;
+    $myvesta_echo_done=true;
+    $myvesta_last_echo=$str;
+    echo $str;
+}
+
+function myvesta_exit($code, $echo='') {
+    global $SHLVL, $myvesta_echo_done, $myvesta_last_echo;
+    // myvesta_echo ("==================== ".$argv[0].": ".$code." ====================\n");
+    if ($echo!='') myvesta_echo($echo);
     if ($SHLVL<3 && $myvesta_echo_done==true) {
         $last_char=substr($myvesta_last_echo, -1, 1);
         if ($last_char!="\n") echo "\n";
@@ -71,9 +150,7 @@ function myvesta_fix_args() {
 }
 
 function myvesta_test_func () {
-    global $myvesta_stdin;
     $args=func_get_args();
-    if ($myvesta_stdin!='') array_splice( $args, 0, 0, array($myvesta_stdin) );
     myvesta_echo ("You said: ");
     myvesta_echo (trim(print_r ($args, true)));
 }
diff --git a/func/string.php b/func/string.php
index 69881c8f..8445195f 100644
--- a/func/string.php
+++ b/func/string.php
@@ -72,6 +72,40 @@ function myvesta_strip_in_file_between_including_borders($file, $left, $right) {
     return true;
 }
 
+// --- mixed functions ---
+
+function myvesta_grep($find, $file_or_stdin, $count=0, $quiet=0) {
+    global $myvesta_stdin, $myvesta_stdin_return_not_found;
+    if ($count=='-c') {$count=1; $quiet=0;}
+    if ($count=='-q') {$count=0; $quiet=1;}
+    //echo "find          = " . $find."\n"; echo "file_or_stdin = " . $file_or_stdin."\n"; echo "count         = " . $count."\n"; echo "quiet         = " . $quiet."\n"; exit;
+    if ($myvesta_stdin_return_not_found==true) {
+        if ($count==1) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "0");
+        return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "");
+    }
+    
+    $arr=explode("\n", $file_or_stdin);
+
+    $buf='';
+    $hits=0;
+    foreach ($arr as $line) {
+        if (strpos($line, $find)!==false) {
+            $hits++;
+            if ($quiet==false && $count==false) $buf.=$line."\n";
+        }
+    }
+    if ($count==1) {
+        if ($hits==0) return myvesta_exit (MYVESTA_ERROR_STRING_NOT_FOUND, "0");
+        return $hits;
+    }
+    if ($quiet==1) {
+        if ($hits==0) return myvesta_exit (MYVESTA_ERROR_STRING_NOT_FOUND, "");
+        return true;
+    }
+    if ($hits==0) return myvesta_exit (MYVESTA_ERROR_STRING_NOT_FOUND, "");
+    return $buf;
+}
+
 // --- string functions ---
 
 function myvesta_str_get_between (&$text, $left_substring, $right_substring, $start=0, $return_left_substring=0, $return_right_substring=0, $left_substring_necessary=1, $right_substring_necessary=1) {

From b01da84b15f9a5abf24cee4841fae64f72e2b073 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Apr 2023 15:53:21 +0200
Subject: [PATCH 1911/2300] correction for main.php

---
 func/main.php | 78 ---------------------------------------------------
 1 file changed, 78 deletions(-)

diff --git a/func/main.php b/func/main.php
index 650f52ef..b521ea2e 100644
--- a/func/main.php
+++ b/func/main.php
@@ -76,81 +76,3 @@ function myvesta_test_func () {
     myvesta_echo ("You said: ");
     myvesta_echo (trim(print_r ($args, true)));
 }
-<?php
-
-$myvesta_exit_on_error=true;
-define('MYVESTA_ERROR_PERMISSION_DENIED', 1);
-define('MYVESTA_ERROR_MISSING_ARGUMENTS', 2);
-define('MYVESTA_ERROR_FILE_DOES_NOT_EXISTS', 3);
-define('MYVESTA_ERROR_STRING_NOT_FOUND', 4);
-define('MYVESTA_ERROR_GENERAL', 5);
-
-function myvesta_echo($str) {
-    global $myvesta_echo_done, $myvesta_last_echo;
-    $myvesta_echo_done=true;
-    $myvesta_last_echo=$str;
-    echo $str;
-}
-
-function myvesta_exit($code, $echo='') {
-    global $SHLVL, $myvesta_echo_done, $myvesta_last_echo;
-    // myvesta_echo ("==================== ".$argv[0].": ".$code." ====================\n");
-    if ($echo!='') myvesta_echo($echo);
-    if ($SHLVL<3 && $myvesta_echo_done==true) {
-        $last_char=substr($myvesta_last_echo, -1, 1);
-        if ($last_char!="\n") echo "\n";
-    }
-    exit($code);
-}
-
-$myvesta_current_user=exec('whoami', $myvesta_output, $myvesta_return_var);
-if ($myvesta_current_user != 'root') {myvesta_echo ("ERROR: You must be root to execute this script"); myvesta_exit(1);}
-
-function myvesta_throw_error($code, $message) {
-    global $myvesta_exit_on_error;
-    if ($message!=='') myvesta_echo ("ERROR: ".$message);
-    if ($myvesta_exit_on_error) myvesta_exit($code);
-    return $code;
-}
-
-function myvesta_fix_backslashes($s) {
-    $s=str_replace("\\n", "\n", $s);
-    $s=str_replace("\\r", "\r", $s);
-    $s=str_replace("\\t", "\t", $s);
-    return $s;
-}
-
-function myvesta_check_args ($requried_arguments, $arguments) {
-    global $argv;
-    $argument_counter=count($argv);
-    $argument_counter--;
-    $argv[0]=str_replace('/usr/local/vesta/bin/', '', $argv[0]);
-    // myvesta_echo ( "-------------------- ".$argv[0]." --------------------\n");
-    if ($argument_counter<$requried_arguments) {
-        $arguments=str_replace(" ", "' '", $arguments);
-        $arguments="'".$arguments."'";
-        return myvesta_throw_error(MYVESTA_ERROR_MISSING_ARGUMENTS, "Usage: $command $arguments");
-    }
-    $argument_arr=explode(" ", $arguments);
-    $i=1;
-    foreach ($argument_arr as $argument) {
-        $GLOBALS[$argument]=myvesta_fix_backslashes($argv[$i]);
-        $i++;
-    }
-}
-
-function myvesta_fix_args() {
-    global $argv;
-    $i=0;
-    foreach ($argv as $argument) {
-        if ($i==0) {$i++; continue;}
-        $argv[$i]=myvesta_fix_backslashes($argv[$i]);
-        $i++;
-    }
-}
-
-function myvesta_test_func () {
-    $args=func_get_args();
-    myvesta_echo ("You said: ");
-    myvesta_echo (trim(print_r ($args, true)));
-}

From 3fbb3dad7861871a5d1c583c453a50ae6f7264ce Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Apr 2023 16:38:53 +0200
Subject: [PATCH 1912/2300] myvesta php replacement for gnu 'sed' (but without
 regular expression)

---
 func/bash-to-php-interpreter.php |  3 +++
 func/main.php                    | 20 ++++++++++++--------
 func/string.php                  | 26 +++++++++++++++++++++++---
 3 files changed, 38 insertions(+), 11 deletions(-)

diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
index baf9475e..09c9c499 100644
--- a/func/bash-to-php-interpreter.php
+++ b/func/bash-to-php-interpreter.php
@@ -29,11 +29,13 @@ if (!function_exists($func)) {
 
 $insert_stdin_at_position=false;
 if ($func=="myvesta_grep") $insert_stdin_at_position=1;
+if ($func=="myvesta_sed") $insert_stdin_at_position=2;
 
 $params=array();
 
 $added=0;
 $stdin_content='';
+$myvesta_stdin_from_file='';
  $myvesta_stdin_return_not_found=false;
 if ($myvesta_stdin!='' && $insert_stdin_at_position===false) {$params[]=$myvesta_stdin; $added++;}
 
@@ -51,6 +53,7 @@ if ($insert_stdin_at_position!=false) {
             $myvesta_stdin='';
         } else {
             $myvesta_stdin=file_get_contents($file_or_stdin);
+            $myvesta_stdin_from_file=$file_or_stdin;
         }
     }
     if (isset($params[$insert_stdin_at_position])) array_splice($params, $insert_stdin_at_position, 0, array($myvesta_stdin));
diff --git a/func/main.php b/func/main.php
index b521ea2e..967fb8fb 100644
--- a/func/main.php
+++ b/func/main.php
@@ -1,6 +1,7 @@
 <?php
 
 $myvesta_exit_on_error=true;
+$myvesta_quiet_mode=0;
 define('MYVESTA_ERROR_PERMISSION_DENIED', 1);
 define('MYVESTA_ERROR_MISSING_ARGUMENTS', 2);
 define('MYVESTA_ERROR_FILE_DOES_NOT_EXISTS', 3);
@@ -8,19 +9,22 @@ define('MYVESTA_ERROR_STRING_NOT_FOUND', 4);
 define('MYVESTA_ERROR_GENERAL', 5);
 
 function myvesta_echo($str) {
-    global $myvesta_echo_done, $myvesta_last_echo;
+    global $myvesta_echo_done, $myvesta_last_echo, $myvesta_quiet_mode;
+    if ($myvesta_quiet_mode==1) return;
     $myvesta_echo_done=true;
     $myvesta_last_echo=$str;
     echo $str;
 }
 
 function myvesta_exit($code, $echo='') {
-    global $SHLVL, $myvesta_echo_done, $myvesta_last_echo;
+    global $SHLVL, $myvesta_echo_done, $myvesta_last_echo, $myvesta_quiet_mode;
     // myvesta_echo ("==================== ".$argv[0].": ".$code." ====================\n");
-    if ($echo!='') myvesta_echo($echo);
-    if ($SHLVL<3 && $myvesta_echo_done==true) {
-        $last_char=substr($myvesta_last_echo, -1, 1);
-        if ($last_char!="\n") echo "\n";
+    if ($myvesta_quiet_mode!=1) {
+        if ($echo!='') myvesta_echo($echo);
+        if ($SHLVL<3 && $myvesta_echo_done==true) {
+            $last_char=substr($myvesta_last_echo, -1, 1);
+            if ($last_char!="\n") echo "\n";
+        }
     }
     exit($code);
 }
@@ -29,8 +33,8 @@ $myvesta_current_user=exec('whoami', $myvesta_output, $myvesta_return_var);
 if ($myvesta_current_user != 'root') {myvesta_echo ("ERROR: You must be root to execute this script"); myvesta_exit(1);}
 
 function myvesta_throw_error($code, $message) {
-    global $myvesta_exit_on_error;
-    if ($message!=='') myvesta_echo ("ERROR: ".$message);
+    global $myvesta_exit_on_error, $myvesta_quiet_mode;
+    if ($message!=='' && $myvesta_quiet_mode!=1) myvesta_echo ("ERROR: ".$message);
     if ($myvesta_exit_on_error) myvesta_exit($code);
     return $code;
 }
diff --git a/func/string.php b/func/string.php
index 8445195f..e4ba2a5f 100644
--- a/func/string.php
+++ b/func/string.php
@@ -75,9 +75,10 @@ function myvesta_strip_in_file_between_including_borders($file, $left, $right) {
 // --- mixed functions ---
 
 function myvesta_grep($find, $file_or_stdin, $count=0, $quiet=0) {
-    global $myvesta_stdin, $myvesta_stdin_return_not_found;
-    if ($count=='-c') {$count=1; $quiet=0;}
-    if ($count=='-q') {$count=0; $quiet=1;}
+    global $myvesta_stdin, $myvesta_stdin_return_not_found, $myvesta_quiet_mode;
+    if ($count==='-c') {$count=1; $quiet=0;}
+    if ($count==='-q') {$count=0; $quiet=1;}
+    $myvesta_quiet_mode=$quiet;
     //echo "find          = " . $find."\n"; echo "file_or_stdin = " . $file_or_stdin."\n"; echo "count         = " . $count."\n"; echo "quiet         = " . $quiet."\n"; exit;
     if ($myvesta_stdin_return_not_found==true) {
         if ($count==1) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "0");
@@ -106,6 +107,25 @@ function myvesta_grep($find, $file_or_stdin, $count=0, $quiet=0) {
     return $buf;
 }
 
+function myvesta_sed($find, $replace, $file_or_stdin) {
+    global $myvesta_stdin, $myvesta_stdin_return_not_found, $myvesta_stdin_from_file;
+    //echo "find            = " . $find."\n"; echo "replace         = " . $replace."\n"; echo "file_or_stdin   = " . $file_or_stdin."\n"; echo "stdin_from_file = " . $myvesta_stdin_from_file."\n"; exit;
+    if ($myvesta_stdin_return_not_found==true) {
+        return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "File not found");
+    }
+
+    if (strpos($file_or_stdin, $find)===false) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "String '$find' not found");
+
+    $file_or_stdin=str_replace($find, $replace, $file_or_stdin);
+    if ($myvesta_stdin_from_file!='') {
+        $r=file_put_contents($myvesta_stdin_from_file, $file_or_stdin);
+        if ($r===false) return false;
+    } else {
+        myvesta_echo ($file_or_stdin);
+    }
+    return true;
+}
+
 // --- string functions ---
 
 function myvesta_str_get_between (&$text, $left_substring, $right_substring, $start=0, $return_left_substring=0, $return_right_substring=0, $left_substring_necessary=1, $right_substring_necessary=1) {

From 075c5e231bdca2acb1c7750e5a7f03261ac638b8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Apr 2023 18:51:15 +0200
Subject: [PATCH 1913/2300] MYVESTA_QUIET as export variable

---
 func/main.php   | 2 ++
 func/string.php | 6 +++---
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/func/main.php b/func/main.php
index 967fb8fb..22834d42 100644
--- a/func/main.php
+++ b/func/main.php
@@ -2,6 +2,8 @@
 
 $myvesta_exit_on_error=true;
 $myvesta_quiet_mode=0;
+if (isset($_SERVER['MYVESTA_QUIET'])) $myvesta_quiet_mode=intval($_SERVER['MYVESTA_QUIET']);
+
 define('MYVESTA_ERROR_PERMISSION_DENIED', 1);
 define('MYVESTA_ERROR_MISSING_ARGUMENTS', 2);
 define('MYVESTA_ERROR_FILE_DOES_NOT_EXISTS', 3);
diff --git a/func/string.php b/func/string.php
index e4ba2a5f..371c643c 100644
--- a/func/string.php
+++ b/func/string.php
@@ -81,8 +81,8 @@ function myvesta_grep($find, $file_or_stdin, $count=0, $quiet=0) {
     $myvesta_quiet_mode=$quiet;
     //echo "find          = " . $find."\n"; echo "file_or_stdin = " . $file_or_stdin."\n"; echo "count         = " . $count."\n"; echo "quiet         = " . $quiet."\n"; exit;
     if ($myvesta_stdin_return_not_found==true) {
-        if ($count==1) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "0");
-        return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "");
+        if ($count==1) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "0");
+        return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "");
     }
     
     $arr=explode("\n", $file_or_stdin);
@@ -111,7 +111,7 @@ function myvesta_sed($find, $replace, $file_or_stdin) {
     global $myvesta_stdin, $myvesta_stdin_return_not_found, $myvesta_stdin_from_file;
     //echo "find            = " . $find."\n"; echo "replace         = " . $replace."\n"; echo "file_or_stdin   = " . $file_or_stdin."\n"; echo "stdin_from_file = " . $myvesta_stdin_from_file."\n"; exit;
     if ($myvesta_stdin_return_not_found==true) {
-        return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "File not found");
+        return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File not found");
     }
 
     if (strpos($file_or_stdin, $find)===false) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "String '$find' not found");

From 502acb44c01a21fe4435d93ed59e1fe605441ac9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 15 Apr 2023 19:03:11 +0200
Subject: [PATCH 1914/2300] v-grep and v-sed

---
 bin/v-grep | 21 +++++++++++++++++++++
 bin/v-sed  | 21 +++++++++++++++++++++
 2 files changed, 42 insertions(+)
 create mode 100644 bin/v-grep
 create mode 100644 bin/v-sed

diff --git a/bin/v-grep b/bin/v-grep
new file mode 100644
index 00000000..3e467129
--- /dev/null
+++ b/bin/v-grep
@@ -0,0 +1,21 @@
+#!/bin/bash
+# info: calling myvesta_grep PHP function
+# options: PARAMETERS
+#
+# The function is calling myVesta PHP replacement for GNU 'grep' command (but without regular expression)
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+
+if [ -p /dev/stdin ]; then
+    STDIN=$(cat -)
+    if [ ! -z "$STDIN" ]; then
+        echo "$STDIN" | php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_grep' "$@"
+        exit $?
+    fi
+fi
+
+php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_grep' "$@"
+exit $?
diff --git a/bin/v-sed b/bin/v-sed
new file mode 100644
index 00000000..9d1a82ee
--- /dev/null
+++ b/bin/v-sed
@@ -0,0 +1,21 @@
+#!/bin/bash
+# info: calling myvesta_sed PHP function
+# options: PARAMETERS
+#
+# The function is calling myVesta PHP replacement for GNU 'sed' command (but without regular expression)
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+
+if [ -p /dev/stdin ]; then
+    STDIN=$(cat -)
+    if [ ! -z "$STDIN" ]; then
+        echo "$STDIN" | php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_sed' "$@"
+        exit $?
+    fi
+fi
+
+php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_sed' "$@"
+exit $?

From ae45e4a57198557a47a31ddf5e847dc0579d060b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 16 Apr 2023 00:10:54 +0200
Subject: [PATCH 1915/2300] simplifying php code

---
 func/bash-to-php-interpreter.php | 11 +++++++----
 func/string.php                  | 26 +++++++++++++-------------
 2 files changed, 20 insertions(+), 17 deletions(-)

diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
index 09c9c499..4c1e9dc5 100644
--- a/func/bash-to-php-interpreter.php
+++ b/func/bash-to-php-interpreter.php
@@ -41,13 +41,15 @@ if ($myvesta_stdin!='' && $insert_stdin_at_position===false) {$params[]=$myvesta
 
 for ($i=2; $i<$counter; $i++) {
     $argv[$i]=myvesta_fix_backslashes($argv[$i]);
-    if ($insert_stdin_at_position!==false && $myvesta_stdin=='') if ($insert_stdin_at_position==$added) {$stdin_content=$argv[$i]; $added++; continue;}
+    //if ($insert_stdin_at_position!==false && $myvesta_stdin=='') if ($insert_stdin_at_position==$added) {$stdin_content=$argv[$i]; $added++; continue;}
     $params[]=$argv[$i];
     $added++;
 }
+//print_r($params); exit;
+
 if ($insert_stdin_at_position!=false) {
     if ($myvesta_stdin=='') {
-        $file_or_stdin=$stdin_content;
+        $file_or_stdin=$params[$insert_stdin_at_position];
         if (!file_exists($file_or_stdin)) {
             $myvesta_stdin_return_not_found=true;
             $myvesta_stdin='';
@@ -55,9 +57,10 @@ if ($insert_stdin_at_position!=false) {
             $myvesta_stdin=file_get_contents($file_or_stdin);
             $myvesta_stdin_from_file=$file_or_stdin;
         }
+        $params[$insert_stdin_at_position]=$myvesta_stdin;
+    } else {
+        array_splice($params, $insert_stdin_at_position, 0, array($myvesta_stdin));
     }
-    if (isset($params[$insert_stdin_at_position])) array_splice($params, $insert_stdin_at_position, 0, array($myvesta_stdin));
-    else $params[$insert_stdin_at_position]=$myvesta_stdin;
 }
 //print_r($params); exit;
 
diff --git a/func/string.php b/func/string.php
index 371c643c..7ada2546 100644
--- a/func/string.php
+++ b/func/string.php
@@ -74,25 +74,25 @@ function myvesta_strip_in_file_between_including_borders($file, $left, $right) {
 
 // --- mixed functions ---
 
-function myvesta_grep($find, $file_or_stdin, $count=0, $quiet=0) {
+function myvesta_grep($find, $content, $count=0, $quiet=0) {
     global $myvesta_stdin, $myvesta_stdin_return_not_found, $myvesta_quiet_mode;
     if ($count==='-c') {$count=1; $quiet=0;}
     if ($count==='-q') {$count=0; $quiet=1;}
-    $myvesta_quiet_mode=$quiet;
-    //echo "find          = " . $find."\n"; echo "file_or_stdin = " . $file_or_stdin."\n"; echo "count         = " . $count."\n"; echo "quiet         = " . $quiet."\n"; exit;
+    if ($myvesta_quiet_mode==0) $myvesta_quiet_mode=$quiet;
+    //echo "find          = " . $find."\n"; echo "file_or_stdin = " . $content."\n"; echo "count         = " . $count."\n"; echo "quiet         = " . $quiet."\n"; exit;
     if ($myvesta_stdin_return_not_found==true) {
         if ($count==1) return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "0");
         return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "");
     }
     
-    $arr=explode("\n", $file_or_stdin);
+    $arr=explode("\n", $content);
 
-    $buf='';
+    $buffer='';
     $hits=0;
     foreach ($arr as $line) {
         if (strpos($line, $find)!==false) {
             $hits++;
-            if ($quiet==false && $count==false) $buf.=$line."\n";
+            if ($quiet==false && $count==false) $buffer.=$line."\n";
         }
     }
     if ($count==1) {
@@ -104,24 +104,24 @@ function myvesta_grep($find, $file_or_stdin, $count=0, $quiet=0) {
         return true;
     }
     if ($hits==0) return myvesta_exit (MYVESTA_ERROR_STRING_NOT_FOUND, "");
-    return $buf;
+    return $buffer;
 }
 
-function myvesta_sed($find, $replace, $file_or_stdin) {
+function myvesta_sed($find, $replace, $content) {
     global $myvesta_stdin, $myvesta_stdin_return_not_found, $myvesta_stdin_from_file;
-    //echo "find            = " . $find."\n"; echo "replace         = " . $replace."\n"; echo "file_or_stdin   = " . $file_or_stdin."\n"; echo "stdin_from_file = " . $myvesta_stdin_from_file."\n"; exit;
+    //echo "find            = " . $find."\n"; echo "replace         = " . $replace."\n"; echo "file_or_stdin   = " . $content."\n"; echo "stdin_from_file = " . $myvesta_stdin_from_file."\n"; exit;
     if ($myvesta_stdin_return_not_found==true) {
         return myvesta_throw_error (MYVESTA_ERROR_FILE_DOES_NOT_EXISTS, "File not found");
     }
 
-    if (strpos($file_or_stdin, $find)===false) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "String '$find' not found");
+    if (strpos($content, $find)===false) return myvesta_throw_error (MYVESTA_ERROR_STRING_NOT_FOUND, "String '$find' not found");
 
-    $file_or_stdin=str_replace($find, $replace, $file_or_stdin);
+    $content=str_replace($find, $replace, $content);
     if ($myvesta_stdin_from_file!='') {
-        $r=file_put_contents($myvesta_stdin_from_file, $file_or_stdin);
+        $r=file_put_contents($myvesta_stdin_from_file, $content);
         if ($r===false) return false;
     } else {
-        myvesta_echo ($file_or_stdin);
+        myvesta_echo ($content);
     }
     return true;
 }

From 22d524cfceb793cf9c1a1f337fa2c58e0a70004e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 30 Apr 2023 15:15:43 +0200
Subject: [PATCH 1916/2300] apache templates -FollowSymLinks
 +SymLinksIfOwnerMatch

---
 install/debian/10/templates/web/apache2/PHP-FPM-73-public.stpl  | 2 +-
 install/debian/10/templates/web/apache2/PHP-FPM-73-public.tpl   | 2 +-
 install/debian/10/templates/web/apache2/PHP-FPM-73.stpl         | 2 +-
 install/debian/10/templates/web/apache2/PHP-FPM-73.tpl          | 2 +-
 install/debian/11/templates/web/apache2/PHP-FPM-74-public.stpl  | 2 +-
 install/debian/11/templates/web/apache2/PHP-FPM-74-public.tpl   | 2 +-
 install/debian/11/templates/web/apache2/PHP-FPM-74.stpl         | 2 +-
 install/debian/11/templates/web/apache2/PHP-FPM-74.tpl          | 2 +-
 install/debian/8/templates/web/apache2/basedir.stpl             | 2 +-
 install/debian/8/templates/web/apache2/basedir.tpl              | 2 +-
 install/debian/8/templates/web/apache2/default.stpl             | 2 +-
 install/debian/8/templates/web/apache2/default.tpl              | 2 +-
 install/debian/8/templates/web/apache2/hosting.stpl             | 2 +-
 install/debian/8/templates/web/apache2/hosting.tpl              | 2 +-
 install/debian/8/templates/web/apache2/phpcgi.stpl              | 2 +-
 install/debian/8/templates/web/apache2/phpcgi.tpl               | 2 +-
 install/debian/8/templates/web/apache2/phpfcgid.stpl            | 2 +-
 install/debian/8/templates/web/apache2/phpfcgid.tpl             | 2 +-
 install/debian/9/templates/web/apache2/basedir.stpl             | 2 +-
 install/debian/9/templates/web/apache2/basedir.tpl              | 2 +-
 install/debian/9/templates/web/apache2/default.stpl             | 2 +-
 install/debian/9/templates/web/apache2/default.tpl              | 2 +-
 install/debian/9/templates/web/apache2/hosting.stpl             | 2 +-
 install/debian/9/templates/web/apache2/hosting.tpl              | 2 +-
 install/debian/9/templates/web/apache2/phpcgi.stpl              | 2 +-
 install/debian/9/templates/web/apache2/phpcgi.tpl               | 2 +-
 install/debian/9/templates/web/apache2/phpfcgid.stpl            | 2 +-
 install/debian/9/templates/web/apache2/phpfcgid.tpl             | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.stpl       | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.tpl        | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.stpl       | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.tpl        | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.stpl       | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.tpl        | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.stpl       | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.tpl        | 2 +-
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.stpl    | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.tpl | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.stpl       | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.tpl        | 2 +-
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.stpl    | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.tpl | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.stpl       | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.tpl        | 2 +-
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.stpl    | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.tpl | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.stpl       | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.tpl        | 2 +-
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.stpl    | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.tpl | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.stpl       | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.tpl        | 2 +-
 .../for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.stpl    | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.tpl | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.stpl       | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.tpl        | 2 +-
 56 files changed, 56 insertions(+), 56 deletions(-)

diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.stpl b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.stpl
index 9660c234..39777224 100644
--- a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.stpl
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.tpl b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.tpl
index 892c0d1f..b6e306d7 100644
--- a/install/debian/10/templates/web/apache2/PHP-FPM-73-public.tpl
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73-public.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73.stpl b/install/debian/10/templates/web/apache2/PHP-FPM-73.stpl
index 28224413..902d647a 100644
--- a/install/debian/10/templates/web/apache2/PHP-FPM-73.stpl
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/install/debian/10/templates/web/apache2/PHP-FPM-73.tpl b/install/debian/10/templates/web/apache2/PHP-FPM-73.tpl
index 7bec5e73..40df2629 100644
--- a/install/debian/10/templates/web/apache2/PHP-FPM-73.tpl
+++ b/install/debian/10/templates/web/apache2/PHP-FPM-73.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.stpl b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.stpl
index fdbc26f9..739cb48d 100644
--- a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.stpl
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.tpl b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.tpl
index 614f20c3..f31ed5a8 100644
--- a/install/debian/11/templates/web/apache2/PHP-FPM-74-public.tpl
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74-public.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74.stpl b/install/debian/11/templates/web/apache2/PHP-FPM-74.stpl
index df607247..fbc1d9c6 100644
--- a/install/debian/11/templates/web/apache2/PHP-FPM-74.stpl
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/install/debian/11/templates/web/apache2/PHP-FPM-74.tpl b/install/debian/11/templates/web/apache2/PHP-FPM-74.tpl
index 7b6e2cb5..aaf8f62c 100644
--- a/install/debian/11/templates/web/apache2/PHP-FPM-74.tpl
+++ b/install/debian/11/templates/web/apache2/PHP-FPM-74.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/install/debian/8/templates/web/apache2/basedir.stpl b/install/debian/8/templates/web/apache2/basedir.stpl
index 2db1d52c..60a8f7fd 100644
--- a/install/debian/8/templates/web/apache2/basedir.stpl
+++ b/install/debian/8/templates/web/apache2/basedir.stpl
@@ -14,7 +14,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/8/templates/web/apache2/basedir.tpl b/install/debian/8/templates/web/apache2/basedir.tpl
index 96c94a1b..3b8f875a 100644
--- a/install/debian/8/templates/web/apache2/basedir.tpl
+++ b/install/debian/8/templates/web/apache2/basedir.tpl
@@ -13,7 +13,7 @@
     ErrorLog /var/log/%web_system%/domains/%domain%.error.log
     <Directory %docroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %docroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/8/templates/web/apache2/default.stpl b/install/debian/8/templates/web/apache2/default.stpl
index ec34c279..3fc7e160 100644
--- a/install/debian/8/templates/web/apache2/default.stpl
+++ b/install/debian/8/templates/web/apache2/default.stpl
@@ -14,7 +14,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/8/templates/web/apache2/default.tpl b/install/debian/8/templates/web/apache2/default.tpl
index 3a227015..464257ec 100644
--- a/install/debian/8/templates/web/apache2/default.tpl
+++ b/install/debian/8/templates/web/apache2/default.tpl
@@ -13,7 +13,7 @@
     ErrorLog /var/log/%web_system%/domains/%domain%.error.log
     <Directory %docroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %docroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/8/templates/web/apache2/hosting.stpl b/install/debian/8/templates/web/apache2/hosting.stpl
index c9c19512..b17014cd 100644
--- a/install/debian/8/templates/web/apache2/hosting.stpl
+++ b/install/debian/8/templates/web/apache2/hosting.stpl
@@ -14,7 +14,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value upload_max_filesize 10M
         php_admin_value max_execution_time 20
         php_admin_value post_max_size  8M
diff --git a/install/debian/8/templates/web/apache2/hosting.tpl b/install/debian/8/templates/web/apache2/hosting.tpl
index 1eb26910..34f55b29 100644
--- a/install/debian/8/templates/web/apache2/hosting.tpl
+++ b/install/debian/8/templates/web/apache2/hosting.tpl
@@ -13,7 +13,7 @@
     ErrorLog /var/log/%web_system%/domains/%domain%.error.log
     <Directory %docroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value upload_max_filesize 10M
         php_admin_value max_execution_time 20
         php_admin_value post_max_size  8M
diff --git a/install/debian/8/templates/web/apache2/phpcgi.stpl b/install/debian/8/templates/web/apache2/phpcgi.stpl
index ae560dbe..7c1248d4 100644
--- a/install/debian/8/templates/web/apache2/phpcgi.stpl
+++ b/install/debian/8/templates/web/apache2/phpcgi.stpl
@@ -14,7 +14,7 @@
     <Directory %sdocroot%>
         SSLRequireSSL
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/8/templates/web/apache2/phpcgi.tpl b/install/debian/8/templates/web/apache2/phpcgi.tpl
index c6796d29..603ea8b9 100644
--- a/install/debian/8/templates/web/apache2/phpcgi.tpl
+++ b/install/debian/8/templates/web/apache2/phpcgi.tpl
@@ -13,7 +13,7 @@
     ErrorLog /var/log/%web_system%/domains/%domain%.error.log
     <Directory %docroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %docroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/8/templates/web/apache2/phpfcgid.stpl b/install/debian/8/templates/web/apache2/phpfcgid.stpl
index bc3688d9..98304f2a 100644
--- a/install/debian/8/templates/web/apache2/phpfcgid.stpl
+++ b/install/debian/8/templates/web/apache2/phpfcgid.stpl
@@ -14,7 +14,7 @@
     <Directory %sdocroot%>
         SSLRequireSSL
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/8/templates/web/apache2/phpfcgid.tpl b/install/debian/8/templates/web/apache2/phpfcgid.tpl
index a4c01269..525b1f53 100644
--- a/install/debian/8/templates/web/apache2/phpfcgid.tpl
+++ b/install/debian/8/templates/web/apache2/phpfcgid.tpl
@@ -13,7 +13,7 @@
     ErrorLog /var/log/%web_system%/domains/%domain%.error.log
     <Directory %docroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %docroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/9/templates/web/apache2/basedir.stpl b/install/debian/9/templates/web/apache2/basedir.stpl
index 2db1d52c..60a8f7fd 100644
--- a/install/debian/9/templates/web/apache2/basedir.stpl
+++ b/install/debian/9/templates/web/apache2/basedir.stpl
@@ -14,7 +14,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/9/templates/web/apache2/basedir.tpl b/install/debian/9/templates/web/apache2/basedir.tpl
index 96c94a1b..3b8f875a 100644
--- a/install/debian/9/templates/web/apache2/basedir.tpl
+++ b/install/debian/9/templates/web/apache2/basedir.tpl
@@ -13,7 +13,7 @@
     ErrorLog /var/log/%web_system%/domains/%domain%.error.log
     <Directory %docroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %docroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/9/templates/web/apache2/default.stpl b/install/debian/9/templates/web/apache2/default.stpl
index ec34c279..3fc7e160 100644
--- a/install/debian/9/templates/web/apache2/default.stpl
+++ b/install/debian/9/templates/web/apache2/default.stpl
@@ -14,7 +14,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/9/templates/web/apache2/default.tpl b/install/debian/9/templates/web/apache2/default.tpl
index 3a227015..464257ec 100644
--- a/install/debian/9/templates/web/apache2/default.tpl
+++ b/install/debian/9/templates/web/apache2/default.tpl
@@ -13,7 +13,7 @@
     ErrorLog /var/log/%web_system%/domains/%domain%.error.log
     <Directory %docroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %docroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/9/templates/web/apache2/hosting.stpl b/install/debian/9/templates/web/apache2/hosting.stpl
index c9c19512..b17014cd 100644
--- a/install/debian/9/templates/web/apache2/hosting.stpl
+++ b/install/debian/9/templates/web/apache2/hosting.stpl
@@ -14,7 +14,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value upload_max_filesize 10M
         php_admin_value max_execution_time 20
         php_admin_value post_max_size  8M
diff --git a/install/debian/9/templates/web/apache2/hosting.tpl b/install/debian/9/templates/web/apache2/hosting.tpl
index 1eb26910..34f55b29 100644
--- a/install/debian/9/templates/web/apache2/hosting.tpl
+++ b/install/debian/9/templates/web/apache2/hosting.tpl
@@ -13,7 +13,7 @@
     ErrorLog /var/log/%web_system%/domains/%domain%.error.log
     <Directory %docroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value upload_max_filesize 10M
         php_admin_value max_execution_time 20
         php_admin_value post_max_size  8M
diff --git a/install/debian/9/templates/web/apache2/phpcgi.stpl b/install/debian/9/templates/web/apache2/phpcgi.stpl
index ae560dbe..7c1248d4 100644
--- a/install/debian/9/templates/web/apache2/phpcgi.stpl
+++ b/install/debian/9/templates/web/apache2/phpcgi.stpl
@@ -14,7 +14,7 @@
     <Directory %sdocroot%>
         SSLRequireSSL
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/9/templates/web/apache2/phpcgi.tpl b/install/debian/9/templates/web/apache2/phpcgi.tpl
index c6796d29..603ea8b9 100644
--- a/install/debian/9/templates/web/apache2/phpcgi.tpl
+++ b/install/debian/9/templates/web/apache2/phpcgi.tpl
@@ -13,7 +13,7 @@
     ErrorLog /var/log/%web_system%/domains/%domain%.error.log
     <Directory %docroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %docroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/9/templates/web/apache2/phpfcgid.stpl b/install/debian/9/templates/web/apache2/phpfcgid.stpl
index bc3688d9..98304f2a 100644
--- a/install/debian/9/templates/web/apache2/phpfcgid.stpl
+++ b/install/debian/9/templates/web/apache2/phpfcgid.stpl
@@ -14,7 +14,7 @@
     <Directory %sdocroot%>
         SSLRequireSSL
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %sdocroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/install/debian/9/templates/web/apache2/phpfcgid.tpl b/install/debian/9/templates/web/apache2/phpfcgid.tpl
index a4c01269..525b1f53 100644
--- a/install/debian/9/templates/web/apache2/phpfcgid.tpl
+++ b/install/debian/9/templates/web/apache2/phpfcgid.tpl
@@ -13,7 +13,7 @@
     ErrorLog /var/log/%web_system%/domains/%domain%.error.log
     <Directory %docroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
         php_admin_value open_basedir %docroot%:%home%/%user%/tmp
         php_admin_value upload_tmp_dir %home%/%user%/tmp
         php_admin_value session.save_path %home%/%user%/tmp
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.stpl
index eb5631db..a24b368f 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.tpl
index cd4e797d..55bc8233 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-56.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.stpl
index 38285302..5d944c0f 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.tpl
index 7d30d39c..c9378152 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-70.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.stpl
index c5d284f7..a718b21f 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.tpl
index 695b9937..9f0cf8a7 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-71.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.stpl
index 2b4363b4..20792e92 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.tpl
index be2ca7ae..89b19147 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-72.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.stpl
index 9660c234..39777224 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.tpl
index 892c0d1f..b6e306d7 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73-public.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.stpl
index 28224413..902d647a 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.tpl
index 7bec5e73..40df2629 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-73.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.stpl
index fdbc26f9..739cb48d 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.tpl
index 614f20c3..f31ed5a8 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74-public.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.stpl
index df607247..fbc1d9c6 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.tpl
index 7b6e2cb5..aaf8f62c 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-74.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.stpl
index 4ce4b993..b1335a44 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.tpl
index 41a5d506..1b0a610c 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80-public.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.stpl
index f39e9631..fae336fc 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.tpl
index b9e32f14..64699c22 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-80.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.stpl
index 0d6404ec..4116fd42 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.tpl
index f2814063..ee319a20 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81-public.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.stpl
index fb191d03..5822a27a 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.tpl
index 1a02ec15..7864b3a4 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-81.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 #    <IfModule mod_ruid2.c>
 #        RMode config
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.stpl
index 6afebb6e..809e7f33 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.tpl
index 03e67a3d..679d1409 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82-public.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 
     <FilesMatch \.php$>
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.stpl
index ed39fad4..e0d04794 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.stpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.stpl
@@ -17,7 +17,7 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.tpl
index 789ee9d3..eba95935 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.tpl
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-82.tpl
@@ -16,7 +16,7 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
 
     <FilesMatch \.php$>

From c2511876c2a73489a5885efd5ff38af97babb662 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 2 May 2023 12:59:16 +0200
Subject: [PATCH 1917/2300] --retry-connrefused exception for Debian8

---
 bin/v-add-letsencrypt-domain | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 7a306ab3..1f1f5a6e 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -21,6 +21,8 @@ if [[ "$LE_STAGING" = 'yes' ]]; then
 	API='https://acme-staging-v02.api.letsencrypt.org'
 fi
 
+deb_release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+
 # Includes
 source $VESTA/func/main.sh
 source $VESTA/func/domain.sh
@@ -60,7 +62,11 @@ query_le_v2() {
     # Save http response to file passed as "$4" arg or print to stdout if not provided
     # http response headers are always sent to stdout
     local save_to_file=${4:-"/dev/stdout"}
-    curl --location --user-agent "myVesta" --insecure --retry 5 --retry-connrefused --silent --dump-header /dev/stdout --data "$post_data" "$1" --header "$content" --output "$save_to_file"
+    if [ "$deb_release" -gt 8 ]; then
+        curl --location --user-agent "myVesta" --insecure --retry 5 --retry-connrefused --silent --dump-header /dev/stdout --data "$post_data" "$1" --header "$content" --output "$save_to_file"
+    else
+        curl --location --user-agent "myVesta" --insecure --retry 5 --silent --dump-header /dev/stdout --data "$post_data" "$1" --header "$content" --output "$save_to_file"
+    fi
  }
 
 

From ec8e1741588dc9554d07a0d6b2f3a764d461d9d4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 27 May 2023 19:03:41 +0200
Subject: [PATCH 1918/2300] Update README.md, fixing < char

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 44d414b8..71d9f5a9 100644
--- a/README.md
+++ b/README.md
@@ -39,7 +39,7 @@
           <li><a href="https://github.com/myvesta/vesta/blob/master/src/deb/for-download/php/php.ini#L496">src/deb/for-download/php/php.ini</a></li>
           <li><a href="https://github.com/myvesta/vesta/blob/master/web/inc/secure_login.php">web/inc/secure_login.php</a></li>
         </ul>
-        <li>If you didn't set the secret URL during installation, you can do it anytime. Just execute in shell: <code>echo "<?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php</code></li>
+        <li>If you didn't set the secret URL during installation, you can do it anytime. Just execute in shell: <code>echo "&lt;?php \$login_url='MY-SECRET-URL';" > /usr/local/vesta/web/inc/login_url.php</code></li>
       </ul>
     </li>
   <li>We <a href="https://github.com/myvesta/vesta/blob/master/install/debian/10/php/php7.3-dedi.patch#L9">disabled dangerous PHP functions</a> in php.ini, so even if, for example, your customer's CMS gets compromised, hacker will not be able to execute shell scripts from within PHP.</li>

From 2afbc2cddfbbc57f296640cb28d89fb29b2526c2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 16:41:08 +0200
Subject: [PATCH 1919/2300] Patching exim4.conf for: smtputf8_advertise_hosts

---
 install/debian/10/exim/exim4.conf.template |  1 +
 install/debian/11/exim/exim4.conf.template |  1 +
 install/debian/9/exim/exim4.conf.template  |  1 +
 src/deb/vesta/postinst                     | 20 ++++++++++++++++++++
 4 files changed, 23 insertions(+)

diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
index 0e5afaac..8fa12c2d 100644
--- a/install/debian/10/exim/exim4.conf.template
+++ b/install/debian/10/exim/exim4.conf.template
@@ -11,6 +11,7 @@
 disable_ipv6=true
 add_environment=<; PATH=/bin:/usr/bin
 keep_environment=
+smtputf8_advertise_hosts =
 
 domainlist local_domains = dsearch;/etc/exim4/domains/
 domainlist relay_to_domains = dsearch;/etc/exim4/domains/
diff --git a/install/debian/11/exim/exim4.conf.template b/install/debian/11/exim/exim4.conf.template
index 72e3f668..cbc2e75f 100644
--- a/install/debian/11/exim/exim4.conf.template
+++ b/install/debian/11/exim/exim4.conf.template
@@ -11,6 +11,7 @@
 disable_ipv6=true
 add_environment=<; PATH=/bin:/usr/bin
 keep_environment=
+smtputf8_advertise_hosts =
 
 domainlist local_domains = dsearch;/etc/exim4/domains/
 domainlist relay_to_domains = dsearch;/etc/exim4/domains/
diff --git a/install/debian/9/exim/exim4.conf.template b/install/debian/9/exim/exim4.conf.template
index 261947d2..c9344903 100644
--- a/install/debian/9/exim/exim4.conf.template
+++ b/install/debian/9/exim/exim4.conf.template
@@ -11,6 +11,7 @@
 disable_ipv6=true
 add_environment=<; PATH=/bin:/usr/bin
 keep_environment=
+smtputf8_advertise_hosts =
 
 domainlist local_domains = dsearch;/etc/exim4/domains/
 domainlist relay_to_domains = dsearch;/etc/exim4/domains/
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 975d12cd..97df816e 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -25,6 +25,26 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# Patching exim4.conf for: smtputf8_advertise_hosts
+if [ "$release" -gt 8 ]; then
+    if [ -f "/etc/exim4/exim4.conf.template" ]; then
+        if ! grep -q 'smtputf8_advertise_hosts' /etc/exim4/exim4.conf.template; then
+            echo 'Patching exim4.conf for: smtputf8_advertise_hosts'
+            sed -i  "/^domainlist local_domains = dsearch;\/etc\/exim4\/domains\//i smtputf8_advertise_hosts =" /etc/exim4/exim4.conf.template
+            systemctl restart exim4
+        fi
+    fi
+fi
+
+# Patching exim4.conf for: Helo name contains a ip address
+if [ -f "/etc/exim4/exim4.conf.template" ]; then
+    if grep -q 'drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid' /etc/exim4/exim4.conf.template; then
+        echo 'Patching exim4.conf for: Helo name contains a ip address'
+        patch /etc/exim4/exim4.conf.template < /usr/local/vesta/src/deb/for-download/tools/patches/exim_helo_authenticated.patch
+        sed -i '/telenor\.rs/d' /etc/exim4/exim4.conf.template
+        systemctl restart exim4
+    fi
+fi
 
 # Making sure yescrypt is disabled
 if [ "$release" -eq 11 ]; then

From c3d0c17c518153a6bcb725b0d6842706206bb814 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 17:56:44 +0200
Subject: [PATCH 1920/2300] Redesign of hosting panel

---
 bin/v-list-user-log                       |    8 +-
 bin/v-update-sys-rrd-la                   |    4 +-
 web/add/user/index.php                    |    2 +-
 web/css/styles.fix.css                    | 1001 ++++++
 web/css/styles.fix.css.map                |    1 +
 web/css/styles.min.css                    | 3491 ++++++++++-----------
 web/images/myvesta-large-white-130.png    |  Bin 0 -> 5284 bytes
 web/images/sprite.png                     |  Bin 57521 -> 35005 bytes
 web/images/vesta_logo.png                 |  Bin 5902 -> 5438 bytes
 web/inc/main.php                          |    5 +-
 web/js/fix.js                             |  157 +
 web/js/init.js                            |   20 +-
 web/templates/admin/list_dns_rec.html     |    2 +-
 web/templates/admin/list_server_info.html |    6 +-
 web/templates/admin/list_user.html        |   19 +-
 web/templates/admin/list_weblog.html      |    6 +-
 web/templates/admin/panel.html            |   25 +-
 web/templates/footer.html                 |    3 -
 web/templates/header.html                 |   15 +-
 web/templates/login.html                  |    2 +-
 web/templates/reset_1.html                |    6 +-
 web/templates/reset_2.html                |    6 +-
 web/templates/reset_3.html                |    6 +-
 web/templates/scripts.html                |  161 +
 web/templates/user/list_dns_rec.html      |    2 +-
 web/templates/user/list_user.html         |    2 +-
 web/templates/user/panel.html             |   23 +-
 27 files changed, 3143 insertions(+), 1830 deletions(-)
 create mode 100644 web/css/styles.fix.css
 create mode 100644 web/css/styles.fix.css.map
 create mode 100644 web/images/myvesta-large-white-130.png
 create mode 100644 web/js/fix.js

diff --git a/bin/v-list-user-log b/bin/v-list-user-log
index ca317f7d..6be9f9ae 100755
--- a/bin/v-list-user-log
+++ b/bin/v-list-user-log
@@ -12,6 +12,7 @@
 # Argument definition
 user=$1
 format=${2-shell}
+limit=${3-300}
 
 # Includes
 source $VESTA/func/main.sh
@@ -34,6 +35,9 @@ json_list() {
         "TIME": "'$TIME'",
         "DATE": "'$DATE'"
     }'
+        if [ "$limit" -gt 0 ] && [ "$i" = "$limit" ]; then
+            break;
+        fi
         if [ "$i" -lt "$objects" ]; then
             echo ','
         else
@@ -83,7 +87,7 @@ csv_list() {
 #                    Verifications                         #
 #----------------------------------------------------------#
 
-check_args '1' "$#" 'USER [FORMAT]'
+check_args '1' "$#" 'USER [FORMAT] [LIMIT]'
 is_format_valid 'user'
 is_object_valid 'user' 'USER' "$user"
 
@@ -93,7 +97,7 @@ is_object_valid 'user' 'USER' "$user"
 #----------------------------------------------------------#
 
 # Parsing history log
-logs=$(tail -n 300 $USER_DATA/history.log 2>/dev/null)
+logs=$(tail -n $limit $USER_DATA/history.log | tac)
 
 case $format in
     json)   json_list ;;
diff --git a/bin/v-update-sys-rrd-la b/bin/v-update-sys-rrd-la
index c8266626..860bdec6 100755
--- a/bin/v-update-sys-rrd-la
+++ b/bin/v-update-sys-rrd-la
@@ -74,7 +74,7 @@ rrdtool graph $RRD/la/$period-la.png \
     -c "SHADEA#ffffff" \
     -c "SHADEB#ffffff" \
     -c "FONT#555555" \
-    -c "CANVAS#302c2d" \
+    -c "CANVAS#F2F2F2" \
     -c "GRID#666666" \
     -c "MGRID#AAAAAA" \
     -c "FRAME#777777" \
@@ -82,7 +82,7 @@ rrdtool graph $RRD/la/$period-la.png \
     DEF:la=$RRD/la/la.rrd:LA:AVERAGE \
     DEF:pr=$RRD/la/la.rrd:PR:AVERAGE \
     COMMENT:'\r' \
-    AREA:la#C8EA2E:"LA * 100"\
+    AREA:la#00CD2E:"LA * 100"\
     GPRINT:la:'LAST: Current\:''%8.0lf'  \
     GPRINT:la:'MIN: Min\:''%8.0lf'  \
     GPRINT:la:'MAX: Max\:''%8.0lf\j'  \
diff --git a/web/add/user/index.php b/web/add/user/index.php
index 1ed521e3..04043484 100644
--- a/web/add/user/index.php
+++ b/web/add/user/index.php
@@ -100,7 +100,7 @@ if (!empty($_POST['ok'])) {
     // Flush field values on success
     if (empty($_SESSION['error_msg'])) {
         $_SESSION['ok_msg'] = __('USER_CREATED_OK',htmlentities($_POST['v_username']),htmlentities($_POST['v_username']));
-        $_SESSION['ok_msg'] .= " / <a href=/login/?loginas=".htmlentities($_POST['v_username'])."&token=".htmlentities($_SESSION['token']).">" . __('login as') ." ".htmlentities($_POST['v_username']). "</a>";
+        $_SESSION['ok_msg'] .= " / <a style=\"text-decoration: underline;\" href=\"/login/?loginas=".htmlentities($_POST['v_username'])."&token=".htmlentities($_SESSION['token'])."\">" . __('login as') ." ".htmlentities($_POST['v_username']). "</a>";
         unset($v_username);
         unset($v_password);
         unset($v_email);
diff --git a/web/css/styles.fix.css b/web/css/styles.fix.css
new file mode 100644
index 00000000..5fbdb6ec
--- /dev/null
+++ b/web/css/styles.fix.css
@@ -0,0 +1,1001 @@
+body {
+  background: #f0f3f5;
+  color: #58666f;
+  font-family: 'Source Sans Pro', sans-serif;
+}
+b, strong {
+  color: #58666f;
+}
+.l-percent {
+  border-bottom: none;
+  margin-top: 1px;
+  width: 200px;
+  background: #e4eaed;
+}
+.l-percent__fill {
+  background-color: #2ac34e;
+  bottom: 0;
+}
+.to-top {
+  z-index: 100;
+  top: unset;
+  bottom: 30px;
+  right: 85px;
+}
+.to-shortcuts {
+  z-index: 100;
+  top: unset;
+  bottom: 30px;
+  right: 130px;
+}
+.shortcuts {
+  right: calc(50% - 400px);
+  bottom: calc(50% - 213px);
+}
+.l-separator {
+  display: none;
+}
+.l-header {
+  position: fixed;
+  width: calc(100% - 40px);
+  z-index: 99;
+  background: #fff;
+  box-shadow: 0 2px 2px rgba(0, 0, 0, 0.05), 0 1px 0 rgba(0, 0, 0, 0.05);
+  color: #58666f;
+  height: 50px;
+  padding: 0 20px;
+  margin-bottom: unset;
+}
+.l-header a {
+  color: #58666f;
+  font-size: 14px;
+}
+.l-header a:hover {
+  color: #58666f;
+}
+.l-header .l-center {
+  max-width: none !important;
+}
+.l-header .l-center .l-logo {
+  background-position: -65px -182px;
+  /* background-position: -125px -478px; */
+  background-repeat: no-repeat;
+  display: block;
+  height: 40px;
+  margin-top: 0;
+  width: 80px;
+  /* width: 42px; */
+  margin-left: 0;
+  background-size: 235px 325px;
+  position: relative;
+  top: 5px;
+  left: 0;
+  float: left;
+  padding-right: 20px;
+}
+.l-header .l-center .l-menu {
+  position: unset;
+  margin-left: unset;
+}
+.l-header .l-center .l-menu .l-menu__item a {
+  line-height: 50px;
+  padding: 0 18px;
+  display: inline-block;
+}
+.l-header .l-center .l-menu .l-menu__item a:hover {
+  background-color: rgba(0, 0, 0, 0.05);
+}
+.l-header .l-center .l-menu .l-menu__item a:active {
+  background-color: rgba(0, 0, 0, 0.05);
+}
+.l-header .l-center .l-menu .l-menu__item.l-menu__item--active a {
+  color: unset;
+  font-size: unset;
+  font-weight: unset;
+  text-transform: unset;
+  background-color: rgba(0, 0, 0, 0.05);
+}
+.l-header .l-center .l-profile .l-profile__notifications {
+  margin-top: 13px;
+}
+.l-header .l-center .l-profile .l-profile__notifications:hover {
+  background-color: rgba(0, 0, 0, 0.05);
+}
+.l-header .l-center .l-profile .l-profile__username {
+  padding: 15px 0 0 10px;
+}
+.l-header .l-center .l-profile .l-profile__logout {
+  padding: 15px 0 0 10px;
+}
+.l-header > .l-center {
+  margin-left: 200px;
+}
+.l-content {
+  position: relative;
+  top: 50px;
+}
+.l-content + div {
+  right: 100px !important;
+  top: unset !important;
+  bottom: 40px !important;
+}
+.l-content + div div {
+  background-color: #e4eaed !important;
+  padding: 10px;
+  border-radius: 5px;
+}
+.l-content .l-center {
+  max-width: none !important;
+}
+.l-content .l-center .l-stat {
+  display: block;
+  position: fixed;
+  z-index: 100;
+  padding-top: 0 !important;
+  width: 200px;
+  height: 100%;
+  top: 0;
+  margin-top: 0;
+  background: #1c2b35;
+  overflow-y: scroll;
+  scrollbar-width: thin;
+  /* Firefox */
+  -ms-overflow-style: scrollbar;
+  /* Internet Explorer 10+ */
+  /* width */
+}
+.l-content .l-center .l-stat::-webkit-scrollbar {
+  display: block;
+  width: 7px;
+  /* Track */
+}
+.l-content .l-center .l-stat::-webkit-scrollbar-track {
+  background: rgba(255, 255, 255, 0);
+  /* Handle */
+}
+.l-content .l-center .l-stat::-webkit-scrollbar-thumb {
+  background: rgba(255, 255, 255, 0.15);
+}
+.l-content .l-center .l-stat:hover {
+  /* Handle on hover */
+}
+.l-content .l-center .l-stat:hover::-webkit-scrollbar-thumb {
+  background: rgba(255, 255, 255, 0.4);
+}
+.l-content .l-center .l-stat .l-stat__col--active ul {
+    display: block !important;
+}
+.l-content .l-center .l-stat .l-stat__col--active {
+  background: #131e27;
+}
+.l-content .l-center .l-stat .l-stat__col--active a {
+  border-bottom: 2px solid #131e27;
+}
+.l-content .l-center .l-stat .l-stat__col--active a .l-stat__col-title {
+  background: #16232d;
+  color: white !important;
+  font-size: 20px;
+  font-weight: 400;
+  margin-top: unset;
+  letter-spacing: unset;
+  margin-right: unset;
+}
+.l-content .l-center .l-stat .l-stat__col--active span {
+    display: none;
+}
+.l-content .l-center .l-stat .focus {
+  background: #5e5e5e;
+}
+.l-content .l-center .l-stat .focus a {
+  border-bottom: 2px solid #131e27;
+}
+.l-content .l-center .l-stat .focus a ul li {
+  color: #c2e5ff !important;
+}
+.l-content .l-center .l-stat .focus a .l-stat__col-title {
+  background: #5e5e5e;
+  color: #c4d0d8;
+  font-size: 20px;
+  font-weight: 400;
+  margin-top: unset;
+  letter-spacing: unset;
+  margin-right: unset;
+}
+.l-content .l-center .l-stat .l-stat__col {
+  display: block;
+  float: unset;
+}
+.l-content .l-center .l-stat .l-stat__col:hover .l-stat__col-title {
+  color: #fff;
+}
+.l-content .l-center .l-stat .l-stat__col:hover .l-stat__col-title:after {
+  color: #fff;
+}
+.l-content .l-center .l-stat .l-stat__col a {
+  height: unset !important;
+  min-height: unset !important;
+  display: block;
+  width: unset;
+  border-bottom: 2px solid #131e27;
+  background-color: transparent;
+  padding-left: unset;
+  padding-bottom: 10px;
+  padding-top: unset;
+  margin-top: unset;
+}
+.l-content .l-center .l-stat .l-stat__col a .l-stat__col-title {
+  min-height: unset !important;
+  color: #869fb2;
+  font-size: 20px;
+  font-weight: 400;
+  padding: 15px 15px 15px 20px;
+  margin-bottom: 0;
+  margin-top: 0 !important;
+}
+.l-content .l-center .l-stat .l-stat__col a .l-stat__col-title:after {
+  font-family: 'Font Awesome 5 Free';
+  font-weight: bold;
+  content: "\f054";
+  float: right;
+  font-size: 10px;
+  color: #5c798f;
+  margin-top: 8px;
+  margin-right: 26px;
+}
+.l-content .l-center .l-stat .l-stat__col a .l-stat__col-title:before {
+  font-family: 'Font Awesome 5 Free';
+  font-weight: bold;
+  content: "\f233";
+  padding-right: 10px;
+  font-size: 17px;
+}
+
+.l-content .l-center .l-stat .l-stat__col--active a .l-stat__col-title:after {
+    margin-right: 26px;
+}
+
+.l-content .l-center .l-stat .l-stat__col a ul {
+  margin: 0;
+  display: none;
+}
+.l-content .l-center .l-stat .l-stat__col a ul li {
+  color: #92adc2;
+  margin-bottom: unset;
+  padding: 10px 20px 10px 20px;
+  font-size: 14px;
+}
+.l-content .l-center .l-stat .l-stat__col a ul li span {
+  float: right;
+  padding: 3px 5px 4px 5px;
+  font-size: 13px;
+  color: #fff;
+  background-color: #27c54e;
+  font-weight: 700;
+  text-shadow: 0 1px 0 rgba(0, 0, 0, 0.2);
+  display: inline-block;
+  min-width: 10px;
+  line-height: 1;
+  text-align: center;
+  white-space: nowrap;
+  vertical-align: baseline;
+  border-radius: 0.25em;
+  left: 140px;
+}
+.l-content .l-center .l-stat .l-stat__col a ul li:first-child span {
+  float: right;
+  padding: 3px 5px 4px 5px;
+  font-size: 13px;
+  color: #fff;
+  background-color: #34b5dd;
+  font-weight: 700;
+  text-shadow: 0 1px 0 rgba(0, 0, 0, 0.2);
+  display: inline-block;
+  min-width: 10px;
+  line-height: 1;
+  text-align: center;
+  white-space: nowrap;
+  vertical-align: baseline;
+  border-radius: 10px;
+}
+.l-content .l-center .l-stat .l-stat__col a ul li:before {
+  font-family: 'Font Awesome 5 Free';
+  font-weight: bold;
+  content: "\f03a";
+  padding-right: 15px;
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(1) a .l-stat__col-title:before {
+  content: "\f500";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(1) a ul li:nth-of-type(1):before {
+  content: "\f0a0";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(1) a ul li:nth-of-type(2):before {
+  content: "\f75b";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(1) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(2) a .l-stat__col-title:before {
+  content: "\f233";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(2) a ul li:nth-of-type(1):before {
+  content: "\f0ac";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(2) a ul li:nth-of-type(2):before {
+  content: "\f0c5";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(2) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(3) a .l-stat__col-title:before {
+  content: "\f6ff";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(3) a ul li:nth-of-type(1):before {
+  content: "\f0ac";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(3) a ul li:nth-of-type(2):before {
+  content: "\f303";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(3) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(4) a .l-stat__col-title:before {
+  content: "\f674";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(4) a ul li:nth-of-type(1):before {
+  content: "\f0ac";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(4) a ul li:nth-of-type(2):before {
+  content: "\f2bb";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(4) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(5) a .l-stat__col-title:before {
+  content: "\f1c0";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(5) a ul li:nth-of-type(1):before {
+  content: "\f1c0";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(5) a ul li:nth-of-type(2):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(5) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(6) a .l-stat__col-title:before {
+  content: "\f120";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(6) a ul li:nth-of-type(1):before {
+  content: "\f120";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(6) a ul li:nth-of-type(2):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(6) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(7) a .l-stat__col-title:before {
+  content: "\f019";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(7) a ul li:nth-of-type(1):before {
+  content: "\f019";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(7) a ul li:nth-of-type(2):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(7) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-sort {
+  padding: 0 20px;
+  position: relative;
+  z-index: 98;
+  width: auto;
+  margin-top: unset !important;
+  background-color: #f6f8f8;
+  border-bottom: 1px solid #dee5e8;
+  margin-bottom: 30px;
+}
+.l-content .l-center .l-sort .l-sort__create-btn {
+  bottom: -20px;
+}
+.l-content .l-center .l-sort .context-menu {
+  top: 77px;
+}
+.l-content .l-center .l-sort .l-sort-toolbar {
+  padding: 24px 0 22px 0;
+  color: #98a6ac;
+}
+.l-content .l-center .l-sort .l-sort-toolbar .l-select {
+  border-radius: 3px 0 0 3px;
+  background: #fff;
+  border: 1px solid #dee5e8;
+}
+.l-content .l-center .l-sort .l-sort-toolbar .l-sort-toolbar__filter-apply {
+  border-radius: 0 3px 3px 0;
+}
+.l-content .l-center .l-sort .l-sort-toolbar table tbody tr .l-sort-toolbar__search-box form .search-input {
+  border-radius: 3px 0 0 3px;
+  border: 1px solid #dee5e8;
+}
+.l-content .l-center .l-sort .l-sort-toolbar table tbody tr .l-sort-toolbar__search-box form .l-sort-toolbar__search {
+  border-radius: 0 3px 3px 0;
+}
+.l-content .l-center .l-sort .l-sort-toolbar table tbody tr .sort-by {
+  padding-left: 30px;
+}
+.l-content .l-center .l-unit {
+  padding: 0 0 0 15px;
+  overflow: hidden;
+  margin: 0px 20px 20px 20px;
+  background: #fff;
+  border-radius: 3px;
+  border-bottom: none !important;
+  border-left: none !important;
+  color: #98a6ac;
+  font-size: 14px;
+}
+.l-content .l-center .l-unit.selected {
+  background-color: #e4eaed;
+}
+.l-content .l-center .l-unit--suspended {
+  background-color: #eaeaea !important;
+}
+.l-content .l-center .l-unit.selected .l-percent {
+  border-bottom: none;
+  margin-top: 1px;
+  width: 200px;
+  background: #cbd3d7;
+}
+.l-content .l-center .l-unit .l-unit-toolbar .l-unit-toolbar__col.l-unit-toolbar__col--right {
+  position: relative;
+  top: 20px;
+  right: 20px;
+  display: block;
+}
+.l-content .l-center .l-unit .l-unit-toolbar .l-unit-toolbar__col.l-unit-toolbar__col--right .actions-panel__col {
+  margin-left: 10px;
+  border-radius: 3px;
+  overflow: hidden;
+  border-right: none;
+  background-color: #dde6e8;
+}
+.l-content .l-center .l-unit .l-unit-toolbar .l-unit-toolbar__col.l-unit-toolbar__col--right .actions-panel__col a {
+  font-weight: 500;
+}
+.l-content .l-center .l-unit .l-unit-toolbar .l-unit-toolbar__col .check-label:before {
+  z-index: 97;
+}
+.l-content .l-center .l-unit .l-unit__col .l-unit__name {
+  color: #34b5dd;
+  font-weight: 500;
+  font-size: 24px;
+  margin-bottom: unset;
+}
+.l-content .l-center .l-unit .l-unit__col .l-unit__ip {
+  font-size: 18px;
+}
+.l-content .l-center .l-unit .l-unit__col .l-unit__date {
+  letter-spacing: unset;
+  display: inline-block;
+  border-bottom: solid 10px #ffeb0087;
+  line-height: 3px;
+  padding: 0 0px;
+  margin-bottom: 30px;
+  font-weight: 400;
+  font-size: 16px;
+}
+.l-content .l-center .l-unit .l-unit__col .l-unit__stats td {
+  height: 27px;
+}
+.l-content .l-center .io-box {
+  overflow: hidden;
+  margin: 20px 20px 0px 20px;
+  color: #98a6ac;
+}
+.l-content .l-center .io-box .io-box-left {
+  float: left;
+  width: calc(100% - 800px);
+  min-width: 410px;
+  text-align: center;
+}
+.l-content .l-center .io-box .io-box-left .io-box-left-items {
+  float: left;
+  width: calc(50% - 20px);
+  height: 137px;
+  margin-right: 20px;
+  margin-bottom: 20px;
+  background: #fff;
+  border-radius: 3px;
+}
+.l-content .l-center .io-box .io-box-left .io-box-left-items a {
+  display: block;
+  font-size: 36px;
+  font-weight: 300;
+  margin-top: 32px;
+}
+.l-content .l-center .io-box .io-box-left .io-1-homepage-block {
+  color: #98a6ac;
+}
+.l-content .l-center .io-box .io-box-left .io-1-homepage-block a {
+  color: #34b5dd;
+}
+.l-content .l-center .io-box .io-box-left .io-2-homepage-block {
+  color: #b4efc2;
+  background-color: #27c54e;
+}
+.l-content .l-center .io-box .io-box-left .io-2-homepage-block a {
+  color: #ecfff1;
+}
+.l-content .l-center .io-box .io-box-left .io-3-homepage-block {
+  color: #b0e1f1;
+  background-color: #34b5dd;
+}
+.l-content .l-center .io-box .io-box-left .io-3-homepage-block a {
+  color: #dcf2f8;
+}
+.l-content .l-center .io-box .io-box-left .io-4-homepage-block {
+  color: #98a6ac;
+}
+.l-content .l-center .io-box .io-box-left .io-4-homepage-block a {
+  color: #58666f;
+}
+.l-content .l-center .io-box .io-box-left .io-5-homepage-block {
+  width: calc(100% - 20px);
+  color: #98a6ac;
+  background: #e4eaed;
+}
+.l-content .l-center .io-box .io-box-left .io-5-homepage-block a {
+  color: #27c54e;
+}
+.l-content .l-center .io-box .io-box-left .io-5-homepage-block:before {
+  font-family: 'Font Awesome 5 Free';
+  font-weight: bold;
+  font-size: 32px;
+  background: #dde6e8;
+  height: 121px;
+  width: 115px;
+  line-height: 90px;
+  content: "\f581";
+  color: #fff;
+  float: left;
+  border-radius: 5px 0 0 5px;
+  padding-top: 16px;
+}
+.l-content .l-center .io-box .io-box-right {
+  float: right;
+  width: 800px;
+  background: #fff;
+  height: 450px;
+  overflow: hidden;
+  border-radius: 3px;
+  text-align: center;
+}
+.l-content .l-center .io-box .io-box-right img {
+  margin-top: 8px;
+  width: 767px;
+  height: 433px;
+  position: relative;
+}
+.l-content .l-center .l-unit-ft {
+  padding: 0 0 37px 15px;
+  overflow: hidden;
+  margin: 0px 20px 19px 20px;
+  background: #e4eaed;
+  border-radius: 3px;
+  border-bottom: none !important;
+  border-left: none !important;
+  position: relative;
+  color: #a6b0b4;
+  font-weight: bold;
+  text-transform: uppercase;
+  font-size: 11px;
+}
+.l-content .l-center .l-unit-ft:before {
+  font-family: "Font Awesome 5 Free";
+  font-weight: bold;
+  font-size: 32px;
+  background: #dde6e8;
+  height: 100%;
+  width: 90px;
+  line-height: 108px;
+  content: "\f05a";
+  color: #fff;
+  float: left;
+  border-radius: 5px 0 0 5px;
+  position: absolute;
+  left: 0;
+  text-align: center;
+}
+.l-content .l-center .l-unit-ft .data {
+  margin: 0 0 50px 0;
+}
+.l-content .l-center #vstobjects {
+  padding: 0 0 0 15px;
+  overflow: hidden;
+  margin: 0px 20px 20px 20px;
+  background: #fff;
+  border-radius: 3px;
+  border-bottom: none !important;
+  border-left: none !important;
+  color: #98a6ac;
+  font-size: 14px;
+}
+.l-content .l-center #vstobjects .data-date {
+  color: #98A6AC;
+  letter-spacing: unset;
+  display: inline-block;
+  border-bottom: solid 10px #ffeb0087;
+  line-height: 3px;
+  padding: 0 0px;
+  margin-bottom: 30px;
+  font-weight: 400;
+  font-size: 16px;
+}
+.l-content .l-center .vst-text.step-top.helper-container {
+  margin-bottom: unset;
+  margin-top: 0;
+  float: unset;
+  height: auto;
+  width: auto;
+}
+.l-content .l-center .vst-text.step-top.helper-container #tabs.cron-helper-tabs {
+  padding: 0 0 0 15px;
+  overflow: hidden;
+  margin: 0 20px 20px 20px;
+  background: #fff;
+  border-radius: 3px;
+  border-bottom: none !important;
+  border-left: none !important;
+  color: #98a6ac;
+  font-size: 14px;
+  border: none !important;
+}
+.l-content > .units.l-center::before {
+  content: '';
+  display: block;
+  height: 0;
+}
+.l-content > .l-center {
+  margin-left: 200px;
+  margin-right: 40px;
+}
+.l-content > .l-center:first-child {
+  margin-left: 0;
+}
+.l-content #vstobjects > .l-center {
+  margin-left: 200px;
+  margin-right: 40px;
+  padding-top: 0;
+  padding-bottom: 1px;
+}
+.l-content .io-log {
+  color: #58666f;
+  border-left: 1px solid #dee5e8;
+  width: 240px;
+  position: fixed;
+  display: block;
+  /*overflow-scrolling: auto;*/
+  z-index: 98;
+  top: 50px;
+  right: -200px;
+  background: #fff;
+  word-break: break-word;
+  overflow: hidden;
+  border-right: 10px solid #e3e3e3;
+  box-sizing: border-box;
+  /* Firefox */
+  /* width */
+}
+.l-content .io-log::-webkit-scrollbar {
+  width: 7px;
+  /* Track */
+}
+.l-content .io-log::-webkit-scrollbar-track {
+  background: rgba(255, 255, 255, 0);
+  /* Handle */
+}
+.l-content .io-log::-webkit-scrollbar-thumb {
+  background: rgba(0, 0, 0, 0.15);
+  border-radius: 7px;
+  /* Handle on hover */
+}
+.l-content .io-log::-webkit-scrollbar-thumb:hover {
+  background: rgba(0, 0, 0, 0.4);
+  border-radius: 7px;
+}
+.l-content .io-log > * {
+  margin: 0 20px;
+}
+.l-content .io-log h2 {
+  margin: 0 0 20px 0;
+  padding-left: 20px;
+  font-size: 24px;
+  font-weight: 300;
+  line-height: 60px;
+  color: #98a6ac;
+  border-bottom: 1px solid #dee5e8;
+  cursor: pointer;
+}
+.l-content .io-log h2:before {
+  font-family: "Font Awesome 5 Free";
+  font-weight: bold;
+  content: "\f15c";
+  padding-right: 10px;
+  font-size: 17px;
+}
+.l-content .io-log > div {
+  /* border-left: solid 1px #dee5e8; */
+  padding-left: 15px;
+  position: relative;
+  margin-left: 25px;
+}
+.l-content .io-log > div > div {
+  position: relative;
+  margin-bottom: 25px;
+}
+.l-content .io-log > div > div > div:nth-of-type(2) {
+  color: #98a6ac;
+  font-size: 13px;
+  margin-bottom: 5px;
+}
+.l-content .io-log > div > div > div:nth-of-type(3) {
+  color: #98a6ac;
+  font-size: 13px;
+  margin-bottom: 5px;
+}
+.l-content .io-log > div > div:before {
+  content: '';
+  position: absolute;
+  height: 100%;
+  width: 7px;
+  border-radius: 10px;
+  border: solid 1px #dee5e8;
+  background: #e0fff9;
+  left: -20px;
+}
+.l-content .io-log > div > div:first-child(1n):before {
+  background: #e0fff9;
+}
+.l-content .io-log > div > div:nth-child(2n):before {
+  background: #fbffe0;
+}
+.l-content .io-log > div > div:nth-child(3n):before {
+  background: #fbffe0;
+}
+.l-content .io-log > div > div:nth-child(4n):before {
+  background: #fbffe0;
+}
+.l-content .io-log > div > div:nth-child(5n):before {
+  background: #fbffe0;
+}
+
+
+.l-content .io-log2 {
+  color: #58666f;
+  border-left: 1px solid #dee5e8;
+  border-top: 1px solid #cecece;
+  width: 240px;
+  position: fixed;
+  height: 100%;
+  display: block;
+  /*overflow-scrolling: auto;*/
+  z-index: 98;
+  top: 380px;
+  right: -200px;
+  background: #fff;
+  word-break: break-word;
+  overflow-y: scroll;
+  scrollbar-width: thin;
+  box-sizing: border-box;
+  /* Firefox */
+  /* width */
+}
+.l-content .io-log2::-webkit-scrollbar {
+  width: 7px;
+  /* Track */
+}
+.l-content .io-log2::-webkit-scrollbar-track {
+  background: rgba(255, 255, 255, 0);
+  /* Handle */
+}
+.l-content .io-log2::-webkit-scrollbar-thumb {
+  background: rgba(0, 0, 0, 0.15);
+  border-radius: 7px;
+  /* Handle on hover */
+}
+.l-content .io-log2::-webkit-scrollbar-thumb:hover {
+  background: rgba(0, 0, 0, 0.4);
+  border-radius: 7px;
+}
+.l-content .io-log2 > * {
+  margin: 0 20px;
+}
+.l-content .io-log2 h2 {
+  margin: 0 0 20px 0;
+  padding-left: 20px;
+  font-size: 24px;
+  font-weight: 300;
+  line-height: 60px;
+  color: #98a6ac;
+  border-bottom: 1px solid #dee5e8;
+  cursor: pointer;
+}
+.l-content .io-log2 h2:before {
+  font-family: "Font Awesome 5 Free";
+  font-weight: bold;
+  content: "\f15c";
+  padding-right: 10px;
+  font-size: 17px;
+}
+.l-content .io-log2 > div {
+  border-left: solid 1px #dee5e8;
+  padding-left: 15px;
+  position: relative;
+  margin-left: 25px;
+}
+.l-content .io-log2 > div > div {
+  position: relative;
+  margin-bottom: 25px;
+}
+.l-content .io-log2 > div > div > div:nth-of-type(2) {
+  color: #98a6ac;
+  font-size: 12px;
+  margin-bottom: 5px;
+}
+.l-content .io-log2 > div > div:before {
+  content: '';
+  position: absolute;
+  height: 100%;
+  width: 7px;
+  border-radius: 10px;
+  border: solid 1px #dee5e8;
+  background: #fff;
+  left: -20px;
+}
+.l-content .io-log2 > div > div:nth-child(2n):before {
+  border: solid 1px #27c54e;
+}
+.l-content .io-log2 > div > div:nth-child(3n):before {
+  border: solid 1px #27bbc5;
+}
+.l-content .io-log2 > div > div:nth-child(4n):before {
+  border: solid 1px #275bc5;
+}
+.l-content .io-log2 > div > div:nth-child(5n):before {
+  border: solid 1px #ffcc00;
+}
+
+
+#tooltip {
+  background-color: #34b5dd;
+}
+.l-sort__create-btn.edit:hover #tooltip {
+  background-color: #49c8ef;
+}
+.l-sort__create-btn.edit:active #tooltip {
+  background-color: #00d8ff !important;
+}
+.l-sort__create-btn:active #tooltip {
+  background-color: #00d8ff;
+}
+.body-login, .body-reset {
+  background-color: #f0f3f5;
+}
+.body-login .login, .body-reset .login {
+  font-family: Arial, Helvetica, sans-serif;
+  border: 1px solid #e7ecee;
+  border-radius: 10px;
+  overflow: hidden;
+  position: relative;
+  padding: 35px 35px 10px 35px;
+  display: block;
+  width: 420px;
+  box-shadow: 0 2px 2px rgba(0, 0, 0, 0.05), 0 1px 0 rgba(0, 0, 0, 0.05);
+}
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1), .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) {
+  position: absolute;
+  text-align: center;
+  width: calc(100% - 46px);
+}
+/*
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) a, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) a {
+  background-image: url(/images/sprite.png?1446554103);
+  background-position: -65px -182px;
+  background-repeat: no-repeat;
+  display: inline-block;
+  height: 40px;
+  margin-top: 0;
+  width: 80px;
+  margin-left: 0;
+  background-size: 235px 325px;
+  position: relative;
+}
+*/
+/*
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) a img, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) a img {
+  display: none;
+}
+*/
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2), .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) {
+  position: relative;
+  padding: 65px 0 0 0 !important;
+}
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .vst-input, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .vst-input {
+  padding: 5px 10px;
+  margin: 0;
+  width: 320px !important;
+  margin-top: 7px;
+  border-radius: 3px;
+  border: solid 1px #d3d9e2;
+}
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button, .body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button:hover, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button:hover, .body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button:active, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button:active {
+  width: 100% !important;
+  border: 1px solid #27c54e;
+  background-color: #27c54e;
+  color: #f4f3f9;
+  margin-bottom: 20px;
+}
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(2) .login-bottom, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(2) .login-bottom {
+  width: auto;
+  text-align: center;
+  padding-bottom: unset;
+  padding: 0;
+}
+.body-login .login-box .vst-advanced, .body-reset .login-box .vst-advanced {
+  color: #34b5dd;
+}
+.body-web-log .l-header > .l-center {
+  margin-left: 0;
+}
+.l-stat__col span {
+    padding: 4px 0;
+    font-size: 15px;
+    position: fixed;
+    display: inline-block;
+    left: 159px;
+}
+.l-sort__create-btn2 {
+    background-image: url("/images/sprite.png?1446554103");
+    background-position: -331px -107px;
+    background-repeat: no-repeat;
+    display: inline-block;
+    height: 45px;
+    width: 45px;
+}
+/*
+.ui-resizable-handle {
+    background-color: #333 !important;
+}
+*/
+/*
+div.ui-dialog div {
+    background-color: #333 !important;
+}
+*/
+div.ui-dialog > div {
+    background-color: #333 !important;
+}
+div.ui-dialog > div div {
+    background-color: #333 !important;
+}
+/*
+div.ui-dialog > div > div {
+    background-color: #333 !important;
+}
+div.ui-dialog + div {
+    background-color: #333 !important;
+}
+div.ui-dialog + div div{
+    background-color: #333 !important;
+}
+*/
+/*
+.ui-dialog-titlebar {
+    background-color: #333 !important;
+}
+.ui-dialog-buttonpane {
+    background-color: #333 !important;
+}
+*/
diff --git a/web/css/styles.fix.css.map b/web/css/styles.fix.css.map
new file mode 100644
index 00000000..c6718a78
--- /dev/null
+++ b/web/css/styles.fix.css.map
@@ -0,0 +1 @@
+{"version":3,"sourceRoot":"","sources":["styles.fix.scss"],"names":[],"mappings":";AAAA;EACI;EACA;EACA;;;AAMJ;EACI;;;AAGJ;EACI;EACA;EACA;EACA;;;AAGJ;EACI;EACA;;;AAGJ;EACI;EACA;EACA;EACA;;AAOJ;EACI;EACA;EACA;EACA;;AAOJ;EACI;EACA;;;AAGJ;EACI;;;AAGJ;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EAEA;;AAEA;EACI;EACA;;AAEA;EACI;;AAMR;EACI;;AAEA;EACI;AACA;EACA;EACA;EACA;EACA;EACA;AACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAGJ;EACI;EACA;;AAII;EACI;EACA;EACA;;AAEA;EACI;;AAEJ;EACI;;AAMJ;EACI;EACA;EACA;EACA;EACA;;AAQZ;EACI;;AAEA;EACI;;AAIR;EACI;;AAGJ;EACI;;AAKZ;EACI;;;AAQR;EACI;EACA;;AAEA;EACI;;AAEA;EACI;EACA;EAGA;EACA;EACA;EACA;EACA;EACA;EACA;EAyCA;EAEA;AAAwB;EACxB;AAAgC;AAEhC;AAMA;AAKA;;AAVA;EACI;EACA;;AAIJ;EACI;;AAIJ;EACI;;AAIJ;AACI;;AACA;EACI;;AAKR;EAEI;EAKA;EACA;EACA;EACA;EACA;EAGA;EACA;;AAIJ;EACI;;AAEA;EACI;;AAEA;EACI;EACA;EACA;EACA;EACA;EACA;EACA;;AAQZ;EACI;EACA;;AAII;EACI;;AAEA;EACI;;AAMZ;EACI;EACA;EAEA;EACA;EACA;EACA;EACA;EACA;EAEA;EACA;;AAEA;EACI;EACA;EACA;EACA;EACA;EACA;EACA;;AAEA;EACI;EACA;EACA;EACA;EACA;EACA;EACA;;AAGJ;EACI;EACA;EACA;EACA;EACA;;AAIR;EACI;;AAEA;EAEI;EACA;EACA;;AAEA;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EAIA;EAEA;EACA;EACA;EAEA;;AA8BA;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EAIA;EAEA;EACA;EACA;EAEA;;AAIR;EACI;EACA;EACA;EACA;;AASR;EACI;;AAKA;EACI;;AAEJ;EAEI;;AAEJ;EACI;;AAQR;EACI;;AAKA;EACI;;AAEJ;EACI;;AAEJ;EACI;;AAQR;EACI;;AAKA;EACI;;AAEJ;EACI;;AAEJ;EACI;;AAQR;EACI;;AAKA;EACI;;AAEJ;EACI;;AAEJ;EACI;;AAQR;EACI;;AAKA;EACI;;AAEJ;EACI;;AAEJ;EACI;;AAQR;EACI;;AAKA;EACI;;AAEJ;EACI;;AAEJ;EACI;;AAQR;EACI;;AAKA;EACI;;AAEJ;EACI;;AAEJ;EACI;;AAWxB;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAEA;EACI;;AAGJ;EACI;;AAcJ;EACI;EACA;;AAEA;EACI;EACA;EACA;;AAGJ;EACI;;AAiBgB;EACI;EACA;;AAGJ;EACI;;AAqCZ;EACI;;AAmBxB;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAEA;EAEI;;AAOI;EACI;EACA;EACA;EACA;;AAEA;EACI;EACA;EACA;EACA;EACA;;AAEA;EACI;;AAUR;EACI;;AAQZ;EACI;EACA;EACA;EACA;EACA;;AAGJ;EACI;;AAGJ;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAOJ;EACI;;AAYZ;EACI;EACA;EACA;;AAEA;EACI;EACA;EACA;;AAEA;EACI;EACA;EACA;EACA;EACA;EACA;EACA;;AAEA;EACI;EACA;EACA;EACA;;AAQR;EACI;;AAEA;EACI;;AAGR;EACI;EAEA;;AAEA;EACI;;AAGR;EACI;EACA;;AAEA;EACI;;AAGR;EACI;;AAEA;EACI;;AAGR;EACI;EACA;EACA;;AAEA;EACI;;AAGJ;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EAEA;EACA;EAEA;EACA;;AAKZ;EACI;EACA;EACA;EACA;EACA;EACA;EACA;;AAEA;EAII;EACA;EACA;;AAKZ;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAEA;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAGJ;EACI;;AAIR;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAEA;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAIR;EACI;EACA;EACA;EACA;EACA;;AAEA;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAKZ;EACI;EACA;EACA;;AAEJ;EACI;EACA;;AAEA;EACI;;AAUJ;EACI;EACA;EACA;EACA;;AA0BR;EACI;EACA;EACA;EACA;EACA;EACA;EACA;AACA;EACA;EACA;EACA;EACA;EACA;EAQA;EAEA;AAAwB;AAExB;AAKA;AAKA;AAMA;;AAfA;EACI;;AAIJ;EACI;;AAIJ;EACI;EACA;;AAIJ;EACI;EACA;;AAGJ;EACI;;AAIJ;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAEA;EACI;EACA;EACA;EACA;EACA;;AAKR;EACI;EACA;EACA;EACA;;AAEA;EACI;EACA;;AAEA;EACI;EACA;EACA;;AAGJ;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAIA;EACI;;AAKJ;EACI;;AAKJ;EACI;;AAKJ;EACI;;;AA8CxB;EACI;;;AAGJ;EACI;;;AAEJ;EACI;;;AAGJ;EACI;;;AAIJ;EACI;;AAEA;EACI;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAQwB;EACI;EACA;EACA;;AAEA;EACI;EACA;AACA;EACA;EACA;EACA;EACA;EACA;AACA;EACA;EACA;EACA;;AAEA;EACI;;AAIZ;EACI;EACA;;AAEA;EACI;EACA;EACA;EACA;EACA;EACA;;AAGJ;EACI;EACA;EACA;EACA;EACA;;AAKR;EACI;EACA;EACA;EACA;;AAUhC;EACI;;;AAMJ;EACI","file":"styles.fix.css"}
\ No newline at end of file
diff --git a/web/css/styles.min.css b/web/css/styles.min.css
index edc706d5..5f63b030 100644
--- a/web/css/styles.min.css
+++ b/web/css/styles.min.css
@@ -149,20 +149,20 @@
  *  `em` units.
  */
 html {
-  font-family: sans-serif;
-  /* 1 */
-  -ms-text-size-adjust: 100%;
-  /* 2 */
-  -webkit-text-size-adjust: 100%;
-  /* 2 */
+    font-family: sans-serif;
+    /* 1 */
+    -ms-text-size-adjust: 100%;
+    /* 2 */
+    -webkit-text-size-adjust: 100%;
+    /* 2 */
 }
 
 /**
  * Remove default margin.
  */
 body {
-  margin: 0;
-  background-color: #fff;
+    margin: 0;
+    background-color: #fff;
 }
 
 /* HTML5 display definitions
@@ -173,34 +173,19 @@ body {
  * and Firefox.
  * Correct `block` display not defined for `main` in IE 11.
  */
-article,
-aside,
-details,
-figcaption,
-figure,
-footer,
-header,
-hgroup,
-main,
-menu,
-nav,
-section,
-summary {
-  display: block;
+article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {
+    display: block;
 }
 
 /**
  * 1. Correct `inline-block` display not defined in IE 6/7/8/9 and Firefox 3.
  * 2. Normalize vertical alignment of `progress` in Chrome, Firefox, and Opera.
  */
-audio,
-canvas,
-progress,
-video {
-  display: inline-block;
-  /* 1 */
-  vertical-align: baseline;
-  /* 2 */
+audio, canvas, progress, video {
+    display: inline-block;
+    /* 1 */
+    vertical-align: baseline;
+    /* 2 */
 }
 
 /**
@@ -208,61 +193,55 @@ video {
  * Remove excess height in iOS 5 devices.
  */
 audio:not([controls]) {
-  display: none;
-  height: 0;
+    display: none;
+    height: 0;
 }
 
 /**
  * Address `[hidden]` styling not present in IE 8/9/10.
  * Hide the `template` element in IE 8/9/11, Safari, and Firefox < 22.
  */
-[hidden],
-template {
-  display: none;
+[hidden], template, .hidden {
+    display: none;
 }
 
-.hidden {
-  display: none;
-}
 /* Links
    ========================================================================== */
 /**
  * Remove the gray background color from active links in IE 10.
  */
 a {
-  background-color: transparent;
+    background-color: transparent;
+}
+a:active, a:hover {
+    outline: 0;
 }
 
 /**
  * Improve readability when focused and also mouse hovered in all browsers.
  */
-a:active, a:hover {
-  outline: 0;
-}
-
 /* Text-level semantics
    ========================================================================== */
 /**
  * Address styling not present in IE 8/9/10/11, Safari, and Chrome.
  */
 abbr[title] {
-  border-bottom: 1px dotted;
+    border-bottom: 1px dotted;
 }
 
 /**
  * Address style set to `bolder` in Firefox 4+, Safari, and Chrome.
  */
-b,
-strong {
-  font-weight: bold;
-  color: #5f5f5f;
+b, strong {
+    font-weight: bold;
+    color: #5f5f5f;
 }
 
 /**
  * Address styling not present in Safari and Chrome.
  */
 dfn {
-  font-style: italic;
+    font-style: italic;
 }
 
 /**
@@ -270,42 +249,45 @@ dfn {
  * contexts in Firefox 4+, Safari, and Chrome.
  */
 h1 {
-  font-size: 2em;
-  margin: 0.67em 0;
+    font-size: 2em;
+    margin: 0.67em 0;
 }
 
 /**
  * Addresses styling not present in IE 8/9.
  */
 mark {
-  background: #ff0;
-  color: #000;
+    background: #ff0;
+    color: #000;
 }
 
 /**
  * Address inconsistent and variable font size in all browsers.
  */
 small {
-  font-size: 80%;
+    font-size: 80%;
 }
 
 /**
  * Prevent `sub` and `sup` affecting `line-height` in all browsers.
  */
-sub,
-sup {
-  font-size: 75%;
-  line-height: 0;
-  position: relative;
-  vertical-align: baseline;
+sub {
+    font-size: 75%;
+    line-height: 0;
+    position: relative;
+    vertical-align: baseline;
 }
 
 sup {
-  top: -0.5em;
+    font-size: 75%;
+    line-height: 0;
+    position: relative;
+    vertical-align: baseline;
+    top: -0.5em;
 }
 
 sub {
-  bottom: -0.25em;
+    bottom: -0.25em;
 }
 
 /* Embedded content
@@ -315,14 +297,14 @@ sub {
  * 2. Improves image quality when scaled in IE 7.
  */
 img {
-  border: 0;
+    border: 0;
 }
 
 /**
  * Correct overflow not hidden in IE 9/10/11.
  */
 svg:not(:root) {
-  overflow: hidden;
+    overflow: hidden;
 }
 
 /* Grouping content
@@ -331,34 +313,31 @@ svg:not(:root) {
  * Address margin not present in IE 8/9 and Safari.
  */
 figure {
-  margin: 1em 40px;
+    margin: 1em 40px;
 }
 
 /**
  * Address differences between Firefox and other browsers.
  */
 hr {
-  box-sizing: content-box;
-  height: 0;
+    box-sizing: content-box;
+    height: 0;
 }
 
 /**
  * Contain overflow in all browsers.
  */
 pre {
-  overflow: auto;
+    overflow: auto;
 }
 
 /**
  * Address odd `em`-unit font size rendering in all browsers.
  * Correct font family set oddly in IE 6, Safari 4/5, and Chrome.
  */
-code,
-kbd,
-pre,
-samp {
-  font-family: monospace, monospace;
-  font-size: 1em;
+code, kbd, pre, samp {
+    font-family: monospace, monospace;
+    font-size: 1em;
 }
 
 /* Forms
@@ -374,24 +353,23 @@ samp {
  * 3. Address margins set differently in Firefox 4+, Safari, and Chrome.
  * 4. Improves appearance and consistency in all browsers.
  */
-button,
-input,
-optgroup,
-select,
-textarea {
-  color: inherit;
-  /* 1 */
-  font: inherit;
-  /* 2 */
-  margin: 0;
-  /* 3 */
+button, input, optgroup, select, textarea {
+    color: inherit;
+    /* 1 */
+    font: inherit;
+    /* 2 */
+    margin: 0;
+    /* 3 */
 }
 
 /**
  * Address `overflow` set to `hidden` in IE 8/9/10/11.
  */
 button {
-  overflow: visible;
+    overflow: visible;
+    text-transform: none;
+    /*color: transparent !important;*/
+    text-shadow: 0 0 0 #555 !important;
 }
 
 /**
@@ -400,11 +378,10 @@ button {
  * Correct `button` style inheritance in Firefox, IE 8/9/10/11, and Opera.
  * Correct `select` style inheritance in Firefox.
  */
-button,
 select {
-  text-transform: none;
-  /*color: transparent !important;*/
-  text-shadow: 0 0 0 #555 !important;
+    text-transform: none;
+    /*color: transparent !important;*/
+    text-shadow: 0 0 0 #555 !important;
 }
 
 /**
@@ -416,93 +393,92 @@ select {
  * 4. Removes inner spacing in IE 7 without affecting normal text inputs.
  *  Known issue: inner spacing remains in IE 6.
  */
-button,
-html input[type="button"],
-input[type="reset"],
-input[type="submit"] {
-  -webkit-appearance: button;
-  /* 2 */
-  cursor: pointer;
-  /* 3 */
+button, html input[type=button] {
+    -webkit-appearance: button;
+    /* 2 */
+    cursor: pointer;
+    /* 3 */
+}
+
+input[type=reset], input[type=submit] {
+    -webkit-appearance: button;
+    /* 2 */
+    cursor: pointer;
+    /* 3 */
 }
 
 /**
  * Re-set default cursor for disabled elements.
  */
-button[disabled],
-html input[disabled] {
-  cursor: default;
+button[disabled], html input[disabled] {
+    cursor: default;
 }
 
 /**
  * Remove inner padding and border in Firefox 4+.
  */
-button::-moz-focus-inner,
+button::-moz-focus-inner {
+    border: 0;
+    padding: 0;
+}
+
+input {
+    line-height: normal;
+}
 input::-moz-focus-inner {
-  border: 0;
-  padding: 0;
+    border: 0;
+    padding: 0;
+}
+input[type=checkbox], input[type=radio] {
+    box-sizing: border-box;
+    /* 1 */
+    padding: 0;
+    /* 2 */
+}
+input[type=number]::-webkit-inner-spin-button, input[type=number]::-webkit-outer-spin-button {
+    height: auto;
+}
+input[type=search] {
+    -webkit-appearance: textfield;
+    /* 1 */
+    /* 2 */
+    box-sizing: content-box;
+}
+input[type=search]::-webkit-search-cancel-button, input[type=search]::-webkit-search-decoration {
+    -webkit-appearance: none;
 }
 
 /**
  * Address Firefox 4+ setting `line-height` on `input` using `!important` in
  * the UA stylesheet.
  */
-input {
-  line-height: normal;
-}
-
 /**
  * 1. Address box sizing set to `content-box` in IE 8/9/10.
  * 2. Remove excess padding in IE 8/9/10.
  *  Known issue: excess padding remains in IE 6.
  */
-input[type="checkbox"],
-input[type="radio"] {
-  box-sizing: border-box;
-  /* 1 */
-  padding: 0;
-  /* 2 */
-}
-
 /**
  * Fix the cursor style for Chrome's increment/decrement buttons. For certain
  * `font-size` values of the `input`, it causes the cursor style of the
  * decrement button to change from `default` to `text`.
  */
-input[type="number"]::-webkit-inner-spin-button,
-input[type="number"]::-webkit-outer-spin-button {
-  height: auto;
-}
-
 /**
  * 1. Address `appearance` set to `searchfield` in Safari and Chrome.
  * 2. Address `box-sizing` set to `border-box` in Safari and Chrome
  *  (include `-moz` to future-proof).
  */
-input[type="search"] {
-  -webkit-appearance: textfield;
-  /* 1 */
-  /* 2 */
-  box-sizing: content-box;
-}
-
 /**
  * Remove inner padding and search cancel button in Safari and Chrome on OS X.
  * Safari (but not Chrome) clips the cancel button when the search input has
  * padding (and `textfield` appearance).
  */
-input[type="search"]::-webkit-search-cancel-button,
-input[type="search"]::-webkit-search-decoration {
-  -webkit-appearance: none;
-}
-
 /**
  * Define consistent border, margin, and padding.
  */
 fieldset {
-  border: 1px solid #c0c0c0;
-  margin: 0 2px;
-  padding: 0.35em 0.625em 0.75em;
+    border: 1px solid #c0c0c0;
+    margin: 0 2px;
+    padding: 0.35em 0.625em 0.75em;
 }
 
 /**
@@ -512,17 +488,17 @@ fieldset {
  * 4. Corrects alignment displayed oddly in IE 6/7.
  */
 legend {
-  border: 0;
-  /* 1 */
-  padding: 0;
-  /* 2 */
+    border: 0;
+    /* 1 */
+    padding: 0;
+    /* 2 */
 }
 
 /**
  * Remove default vertical scrollbar in IE 8/9/10/11.
  */
 textarea {
-  overflow: auto;
+    overflow: auto;
 }
 
 /**
@@ -530,7 +506,7 @@ textarea {
  * NOTE: the default cannot safely be changed in Chrome and Safari on OS X.
  */
 optgroup {
-  font-weight: bold;
+    font-weight: bold;
 }
 
 /* Tables
@@ -539,2249 +515,2248 @@ optgroup {
  * Remove most spacing between table cells.
  */
 table {
-  border-collapse: collapse;
-  border-spacing: 0;
+    border-collapse: collapse;
+    border-spacing: 0;
 }
 
-td,
-th {
-  padding: 0;
+td, th {
+    padding: 0;
 }
 
 * {
-  -webkit-tap-highlight-color: transparent;
+    -webkit-tap-highlight-color: transparent;
 }
 
 body {
-/*  -webkit-touch-callout: none;
-  -webkit-text-size-adjust: none;
-  -webkit-user-select: none; */
+    /*  -webkit-touch-callout: none;
+      -webkit-text-size-adjust: none;
+      -webkit-user-select: none; */
 }
 
-html,
-input,
-textarea,
-select,
-button {
-  -webkit-font-smoothing: antialiased;
-  -moz-osx-font-smoothing: grayscale;
+html, input, textarea, select, button {
+    -webkit-font-smoothing: antialiased;
+    -moz-osx-font-smoothing: grayscale;
 }
 
 html {
-  height: 100%;
+    height: 100%;
 }
 
 body {
-  font-family: arial;
-  overflow-x: hidden;
-  font-size: 14px;
-  height: 100%;
-  color: #929292;
+    font-family: arial;
+    overflow-x: hidden;
+    font-size: 14px;
+    height: 100%;
+    color: #929292;
 }
 
 .body-login, .body-reset {
-  height: auto;
-  padding-top: 10%;
-  /*background: url(/images/edit_bg.png);*/
-  background-color: #eee;
+    height: auto;
+    padding-top: 10%;
+    /*background: url(/images/edit_bg.png);*/
+    background-color: #eee;
 }
 
 a {
-  text-decoration: none;
-  color: #929292;
+    text-decoration: none;
+    color: #929292;
 }
 
 .disabled {
-  text-decoration: line-through;
+    text-decoration: line-through;
 }
 
-.clearfix:before,
-.clearfix:after {
-  content: '';
-  display: table;
+.clearfix:before {
+    content: "";
+    display: table;
 }
-
 .clearfix:after {
-  clear: both;
+    content: "";
+    display: table;
+    clear: both;
 }
 
 .text-right {
-  text-align: right;
+    text-align: right;
 }
 
 .text-center {
-  text-align: center;
+    text-align: center;
 }
 
 .check-label {
-  display: inline-block;
-  cursor: pointer;
-  position: relative;
-  line-height: 16px;
-  padding-left: 26px;
+    display: inline-block;
+    cursor: pointer;
+    position: relative;
+    line-height: 16px;
+    padding-left: 26px;
 }
-
 .check-label:before {
-  content: '';
-  width: 16px;
-  height: 16px;
-  position: absolute;
-  left: 0;
-  top: 0;
-  display: inline-block;
-  background-image: url("/images/sprite.png?1446554103");
-  background-size: 450px auto;
-  background-repeat: no-repeat;
-  background-position: -232px -9px;
-  z-index: 99;
+    content: "";
+    width: 16px;
+    height: 16px;
+    position: absolute;
+    left: 0;
+    top: 0;
+    display: inline-block;
+    background-image: url("/images/sprite.png?1446554103");
+    background-size: 450px auto;
+    background-repeat: no-repeat;
+    background-position: -232px -9px;
+    z-index: 99;
 }
 
-input[type="checkbox"] {
-  display: none;
+input[type=checkbox] {
+    display: none;
 }
-.clicked-on.check-label:before,
-.selected .check-label:before {
-  content: '';
-  display: inline-block;
-  width: 27px;
-  height: 27px;
-  background-position: -225px -42px;
-  left: -6px;
-  top: -6px;
+
+.clicked-on.check-label:before, .selected .check-label:before {
+    content: "";
+    display: inline-block;
+    width: 27px;
+    height: 27px;
+    background-position: -225px -42px;
+    left: -6px;
+    top: -6px;
 }
 
 .l-center {
-  margin: 0 auto;
-  max-width: 998px;
+    margin: 0 auto;
+    max-width: 998px;
 }
 
 .l-logo {
-  background-image: url("/images/sprite.png?1446554103");
-  background-position: -117px -7px;
-/*  background-position: -125px -478px; */
-  background-repeat: no-repeat;
-  display: inline-block;
-  float: left;
-  height: 22px;
-  margin-top: 4px;
-  width: 73px;
-/*  width: 42px; */
-  margin-left: -2px;
+    background-image: url("/images/sprite.png?1446554103");
+    background-position: -117px -7px;
+    /*  background-position: -125px -478px; */
+    background-repeat: no-repeat;
+    display: inline-block;
+    float: left;
+    height: 22px;
+    margin-top: 4px;
+    width: 73px;
+    /*  width: 42px; */
+    margin-left: -2px;
 }
 
 .l-header {
-  background-color: #5d5d5d;
-  overflow: hidden;
-  margin-bottom: 28px;
-  position: fixed;
-  width: 100%;
-  z-index: 100;
-  height: 34px
+    background-color: #5d5d5d;
+    overflow: hidden;
+    margin-bottom: 28px;
+    position: fixed;
+    width: 100%;
+    z-index: 100;
+    height: 34px;
 }
 .l-header a {
-  font-size: 12px;
-}
-
-.l-menu__item--active {
-  //background-color: #fff;
+    font-size: 12px;
 }
 
 .l-menu__item.l-menu__item--active a {
-  color: #ff6701;
-  font-size: 10px;
-  font-weight: bold;
-  text-transform: uppercase;
-  background-color: #fff;
+    color: #9c8cff;
+    font-size: 10px;
+    font-weight: bold;
+    text-transform: uppercase;
+    background-color: #fff;
 }
 
 .l-menu {
-  float: left;
-  position: fixed;
-  margin-left: 70px;
+    float: left;
+    position: fixed;
+    margin-left: 70px;
 }
+
 .l-menu__item {
-  float: left;
+    float: left;
 }
 .l-menu__item a {
-  color: #f7f7f7;
-  position: relative;
-  line-height: 34px;
-  padding: 11px 18px;
+    color: #f7f7f7;
+    position: relative;
+    line-height: 34px;
+    padding: 11px 18px;
 }
 .l-menu__item a:hover {
-  background-color: #f79b44;
-  color: #fff;
+    background-color: #f79b44;
+    color: #fff;
 }
 .l-menu__item a:active {
-  color: #fff;
-  background-color: #ff6701;
+    color: #fff;
+    background-color: #9c8cff;
 }
 
 .l-menu.active .l-menu__item.focus a {
-  text-decoration: underline;
-  color: #5edad0;
+    text-decoration: underline;
+    color: #5edad0;
 }
 .l-menu.active .l-menu__item.focus a:hover {
-  background-color: #f79b44;
-  color: #fff;
+    background-color: #f79b44;
+    color: #fff;
 }
 
+.lang-ua .l-menu__item a, .lang-nl .l-menu__item a, .lang-fr .l-menu__item a, .lang-ru .l-menu__item a {
+    padding: 11px 18px;
+}
 
-.lang-ua .l-menu__item a,
-.lang-nl .l-menu__item a,
-.lang-fr .l-menu__item a,
-.lang-ru .l-menu__item a {
-  padding: 11px 18px;
-}
-.lang-el .l-menu__item a,
-.lang-tr .l-menu__item a {
-  padding: 11px 15px;
+.lang-el .l-menu__item a, .lang-tr .l-menu__item a {
+    padding: 11px 15px;
 }
+
 .lang-ar .l-menu__item a {
-  padding: 11px 11px;
-}
-.lang-ar .l-menu__item a {
-  line-height: 35px;
+    padding: 11px 11px;
+    line-height: 35px;
 }
 
 .lang-de .l-menu__item a {
-  padding: 11px 12px;
+    padding: 11px 12px;
 }
 
 .lang-tw .l-menu__item a {
-  padding: 13px 18px;
+    padding: 13px 18px;
 }
 
 .l-profile {
-  overflow: hidden;
-  float: right;
+    overflow: hidden;
+    float: right;
 }
+
 .l-profile__username {
-  float: left;
-  color: #a4abad;
-  font-weight: 700;
-  padding: 10px 0 0 10px;
-  margin-right: 12px;
+    float: left;
+    color: #a4abad;
+    font-weight: 700;
+    padding: 10px 0 0 10px;
+    margin-right: 12px;
 }
 .l-profile__username:hover {
-  color: #ffd62e;
+    color: #ffd62e;
 }
 .l-profile__username:active {
-  color: #f79b44;
+    color: #f79b44;
 }
 
-
 .l-profile__logout {
-  float: left;
-  color: #fff;
-/*  margin-left: 40px; */
-  padding: 10px 0 0 10px;
+    float: left;
+    color: #fff;
+    /*  margin-left: 40px; */
+    padding: 10px 0 0 10px;
 }
 .l-profile__logout:hover {
-  color: #C0E60E;
+    color: #C0E60E;
 }
 .l-profile__logout:active {
-  color: #ffd62e;
+    color: #ffd62e;
 }
-.lang-cn .l-profile__logout {
-  padding: 8px 5px;
-}
-.lang-tw .l-profile__logout {
-  padding: 8px 5px;
+
+.lang-cn .l-profile__logout, .lang-tw .l-profile__logout {
+    padding: 8px 5px;
 }
 
 .l-profile__notifications {
-  background: url("/images/sprite.png?1446554103") no-repeat scroll -129px -135px;
-  border-radius: 30px;
-  color: #fff;
-  cursor: pointer;
-  float: left;
-  font-weight: bold;
-  height: 15px;
-  margin-right: 4px;
-  margin-top: 5px;
-  padding: 10px 5px 0;
-  width: 15px;
+    background: url("/images/sprite.png?1446554103") no-repeat scroll -129px -135px;
+    border-radius: 30px;
+    color: #fff;
+    cursor: pointer;
+    float: left;
+    font-weight: bold;
+    height: 15px;
+    margin-right: 4px;
+    margin-top: 5px;
+    padding: 10px 5px 0;
+    width: 15px;
 }
 .l-profile__notifications.active {
-  background-color: #454545;
+    background-color: #454545;
 }
 .l-profile__notifications:hover {
-  background-color: #333;
+    background-color: #333;
 }
 .l-profile__notifications:active {
-  background-color: #c4da5e;
+    background-color: #c4da5e;
 }
 .l-profile__notifications.updates {
-  background-position: -202px -135px;
+    background-position: -202px -135px;
 }
 
 .notification-container {
-  background-color: #454545;
-  box-shadow: 0 2px 7px 0 rgba(0, 0, 0, 0.3);
-  list-style-type: none;
-  margin: 0;
-  overflow: hidden;
-  padding-left: 0;
-  position: fixed;
-  top: 34px;
-  width: 351px;
-  z-index: 200;
-  font-size: 12px;
-  padding: 0;
-  color: #7f7f7f;
+    background-color: #454545;
+    box-shadow: 0 2px 7px 0 rgba(0, 0, 0, 0.3);
+    list-style-type: none;
+    margin: 0;
+    overflow: hidden;
+    padding-left: 0;
+    position: fixed;
+    top: 34px;
+    width: 351px;
+    z-index: 200;
+    font-size: 12px;
+    padding: 0;
+    color: #7f7f7f;
 }
 .notification-container .unseen {
-  color: #ABABAB;
+    color: #ABABAB;
 }
-
-
 .notification-container li {
-  border-bottom: 1px solid #555;
-  padding: 10px 15px 24px;
+    border-bottom: 1px solid #555;
+    padding: 10px 15px 24px;
 }
 .notification-container .mark-seen {
-  background-color: #abc04b;
-  border: 2px solid #454545;
-  border-radius: 10px;
-  cursor: pointer;
-  display: none;
-  float: right;
-  height: 7px;
-  margin-right: -5px;
-  margin-top: 0;
-  width: 7px;
+    background-color: #abc04b;
+    border: 2px solid #454545;
+    border-radius: 10px;
+    cursor: pointer;
+    display: none;
+    float: right;
+    height: 7px;
+    margin-right: -5px;
+    margin-top: 0;
+    width: 7px;
 }
 .notification-container .mark-seen:hover {
-  background-color: #333;
-  border-color: #abc04b;
+    background-color: #333;
+    border-color: #abc04b;
 }
 .notification-container .mark-seen:active {
-  background-color: #777;
-  border-color: #777;
+    background-color: #777;
+    border-color: #777;
 }
-.notification-container .unseen .mark-seen{
-  display: inline-block;
+.notification-container .unseen .mark-seen {
+    display: inline-block;
 }
 .notification-container .title {
-  color: #9e9e9e;
-  font-weight: bold;
-  line-height: 30px;
-  padding: 0;
-  text-transform: none;
-  float: none;
-  display: block;
+    color: #9e9e9e;
+    font-weight: bold;
+    line-height: 30px;
+    padding: 0;
+    text-transform: none;
+    float: none;
+    display: block;
 }
 .notification-container .title a {
-  color: #9e9e9e;
+    color: #9e9e9e;
 }
-
-.notification-container .unseen .title a,
 .notification-container .unseen .title {
-  color: #C4DA5E;
+    color: #C4DA5E;
+}
+.notification-container .unseen .title a {
+    color: #C4DA5E;
 }
 .notification-container .unseen .title a:hover {
-  color: #ffcc00;
+    color: #ffcc00;
 }
 .notification-container .unseen .title a:active {
-  color: #dacf2e;
+    color: #dacf2e;
 }
-
 .notification-container a {
-  color: #5ABDB5;/* #eee;*/
+    color: #5ABDB5;
+    /* #eee;*/
 }
 .notification-container a:hover {
-  color: #2CA99B;
+    color: #2CA99B;
 }
 .notification-container a:active {
-  color: #00C0C0;
+    color: #00C0C0;
 }
-
 .notification-container .icon {
-  display: inline-block;
-  width: 0;
+    display: inline-block;
+    width: 0;
 }
 .notification-container .icon.filemanager {
-  display: inline-block;
-  width: 22px;
-  background: url("/images/flat_icons.png") repeat scroll -31px -100px;
+    display: inline-block;
+    width: 22px;
+    background: url("/images/flat_icons.png") repeat scroll -31px -100px;
 }
 .notification-container .icon.starred {
-  display: inline-block;
-  width: 21px;
-  background: url("/images/sprite.png?1446554103") repeat scroll -184px 556px;
+    display: inline-block;
+    width: 21px;
+    background: url("/images/sprite.png?1446554103") repeat scroll -184px 556px;
 }
 
-
-
 .l-stat {
-  margin: 0 auto;
-  margin: 34px auto;
-  position: fixed;
-  background-color: #fff;
-  z-index: 100;
-  padding-top: 30px;
-  width: 100%;
-  overflow: hidden;
+    margin: 0 auto;
+    margin: 34px auto;
+    position: fixed;
+    background-color: #fff;
+    z-index: 100;
+    padding-top: 30px;
+    width: 100%;
+    overflow: hidden;
 }
+
 .l-stat__col {
-  display: block;
-  vertical-align: top;
-  float: left;
+    display: block;
+    vertical-align: top;
+    float: left;
 }
 .l-stat__col a {
-  display: inline-block;
-  padding-bottom: 36px;
-  min-height: 111px;
-  width: 138px;
-  border-bottom: 3px solid #fff;
-  overflow: hidden;
-  background-color: #fff;
-  padding-top: 3px;
-  margin-top: -3px;
-  padding-left: 5px;
+    display: inline-block;
+    padding-bottom: 36px;
+    min-height: 111px;
+    width: 138px;
+    border-bottom: 3px solid #fff;
+    overflow: hidden;
+    background-color: #fff;
+    padding-top: 3px;
+    margin-top: -3px;
+    padding-left: 5px;
 }
 .l-stat__col a:hover {
-  border-bottom: 3px solid #ff8e61;
+    border-bottom: 3px solid #ff8e61;
 }
 .l-stat__col a:active {
-  border-bottom: 3px solid #f72b44;
+    border-bottom: 3px solid #796cc7;
 }
+
 .l-stat__col--active a {
-  border-bottom: 3px solid #ff6e42;
+    border-bottom: 3px solid #ff6e42;
 }
 
 .l-stat.active .l-stat__col.focus a {
-  border-bottom: 3px solid #5edad0;
+    border-bottom: 3px solid #5edad0;
 }
 .l-stat.active .l-stat__col.focus a .l-stat__col-title {
-  color: #36B3A9;
+    color: #36B3A9;
 }
 
-
-
 .l-stat__col a:hover .l-stat__col-title {
-  color: #ff6701;
+    color: #9c8cff;
 }
 .l-stat__col a:active .l-stat__col-title {
-  color: #f72b44;
+    color: #796cc7;
 }
-
-
 .l-stat__col ul {
-  list-style-type: none;
-  font-size: 12px;
-  padding-left: 0;
+    list-style-type: none;
+    font-size: 12px;
+    padding-left: 0;
 }
 .l-stat__col li {
-  color: #a0a0a0;
-  margin-bottom: 8px;
-  text-transform: lowercase;
+    color: #a0a0a0;
+    margin-bottom: 8px;
+    text-transform: lowercase;
 }
 .l-stat__col span {
-  padding-left: 15px;
-}
-.l-stat__col-title {
-  text-transform: uppercase;
-  font-weight: 700;
-  color: #212134;
-  min-height: 21px;
-}
-.l-stat__col--active .l-stat__col-title {
-  color: #ff6701;
-  font-size: 24px;
-  margin-top: -7px;
-  letter-spacing: -1px;
-  margin-right: -8px;
+    padding-left: 15px;
+}
+
+.l-stat__col-title {
+    text-transform: uppercase;
+    font-weight: 700;
+    color: #212134;
+    min-height: 21px;
+}
+
+.l-stat__col--active .l-stat__col-title {
+    color: #9c8cff;
+    font-size: 24px;
+    margin-top: -7px;
+    letter-spacing: -1px;
+    margin-right: -8px;
 }
 
-.l-separator.selected,
 .l-separator {
-  height: 1px;
-  background-color: #ddd;
+    height: 1px;
+    background-color: #ddd;
+}
+.l-separator.selected {
+    height: 1px;
+    background-color: #ddd;
 }
 
 div.l-content > div.l-separator:nth-of-type(2) {
-  margin-top: 214px;
-  width: 100%;
-  position: fixed;
-  z-index: 120;
+    margin-top: 214px;
+    width: 100%;
+    position: fixed;
+    z-index: 120;
 }
-
 div.l-content > div.l-separator:nth-of-type(4) {
-  margin-top: 259px;
-  width: 100%;
-  position: fixed;
-  z-index: 100;
+    margin-top: 259px;
+    width: 100%;
+    position: fixed;
+    z-index: 100;
 }
 
 .l-sort {
-  position: fixed;
-  width: 998px;
-  background-color: #fff;
-  z-index: 110;
-  margin-top: 215px;
+    position: fixed;
+    width: 998px;
+    background-color: #fff;
+    z-index: 110;
+    margin-top: 215px;
 }
+
 .l-sort__create-btn {
-  background-image: url("/images/sprite.png?1446554103");
-  background-position: -331px -107px;
-  background-repeat: no-repeat;
-  bottom: -23px;
-  display: inline-block;
-  height: 45px;
-  left: 30px;
-  position: absolute;
-  width: 45px;
-  z-index: 3;
+    background-image: url("/images/sprite.png?1446554103");
+    background-position: -331px -107px;
+    background-repeat: no-repeat;
+    bottom: -23px;
+    display: inline-block;
+    height: 45px;
+    left: 30px;
+    position: absolute;
+    width: 45px;
+    z-index: 3;
 }
 .l-sort__create-btn:hover {
-  background-position: -378px -107px;
+    background-position: -378px -107px;
 }
 .l-sort__create-btn:active {
-  background-position: -425px -107px;
+    background-position: -425px -107px;
 }
+
 .l-sort__create-btn--active {
-  background-position: -425px -107px;
+    background-position: -425px -107px;
 }
 
 .l-sort__create-btn.restore {
-  background-position: -331px -250px;
-  bottom: -22px;
+    background-position: -331px -250px;
+    bottom: -22px;
 }
-.l-sort__create-btn.restore:hover {
-  background-position: -331px -250px;
+.l-sort__create-btn.restore:hover, .l-sort__create-btn.restore:active {
+    background-position: -331px -250px;
 }
-.l-sort__create-btn.restore:active {
-  background-position: -331px -250px;
-}
-
 .l-sort__create-btn.edit {
-  background-position: -331px -154px;
-  bottom: -22px;
+    background-position: -331px -154px;
+    bottom: -22px;
 }
 .l-sort__create-btn.edit:hover {
-  background-position: -378px -154px;
+    background-position: -378px -154px;
 }
 .l-sort__create-btn.edit:active {
-  background-position: -425px -154px;
+    background-position: -425px -154px;
 }
 
 .context-menu.sort-order {
-  display: inline-block;
-  position: absolute;
-  z-index: 3;
-  left: 397px;
-  margin: 0;
-  overflow: hidden;
-  top: 42px;
-  width: 201px;
-  background-color: #5c5c5c;
-  list-style-type: none;
-  padding-left: 0;
-  box-shadow: 0 2px 7px 0 rgba(0, 0, 0, 0.3);
+    display: inline-block;
+    position: absolute;
+    z-index: 3;
+    left: 397px;
+    margin: 0;
+    overflow: hidden;
+    top: 42px;
+    width: 201px;
+    background-color: #5c5c5c;
+    list-style-type: none;
+    padding-left: 0;
+    box-shadow: 0 2px 7px 0 rgba(0, 0, 0, 0.3);
 }
 .context-menu.sort-order li {
-  padding: 0;
+    padding: 0;
 }
 .context-menu li {
-  border-bottom: 1px solid #777;
-  color: #fff;
-  cursor: pointer;
-  font-size: 12px;
-  padding: 12px;
+    border-bottom: 1px solid #777;
+    color: #fff;
+    cursor: pointer;
+    font-size: 12px;
+    padding: 12px;
 }
 .context-menu.sort-order span.name {
-  background: url("/images/sprite.png?1446554103") no-repeat scroll -292px -361px rgba(0, 0, 0, 0);
-  display: inline-block;
-  padding: 12px 28px 12px 12px;
-  width: 117px;
-  text-transform: uppercase;
-  font-weight: bold;
+    background: url("/images/sprite.png?1446554103") no-repeat scroll -292px -361px rgba(0, 0, 0, 0);
+    display: inline-block;
+    padding: 12px 28px 12px 12px;
+    width: 117px;
+    text-transform: uppercase;
+    font-weight: bold;
 }
 .context-menu.sort-order span.up {
-  background: url("/images/sprite.png?1446554103") no-repeat scroll -434px -417px rgba(0, 0, 0, 0);
-  display: inline-block;
-  padding: 12px 14px;
-  width: 16px;
+    background: url("/images/sprite.png?1446554103") no-repeat scroll -434px -417px rgba(0, 0, 0, 0);
+    display: inline-block;
+    padding: 12px 14px;
+    width: 16px;
 }
 .context-menu.sort-order span.active {
-  background-color: #FFD437;
-  color: #555;
+    background-color: #FFD437;
+    color: #555;
 }
 .context-menu.sort-order span:hover {
-  background-color: #777;
-  color: #fff;
+    background-color: #777;
+    color: #fff;
 }
 .context-menu.sort-order span:active {
-  background-color: #ffcc00;
+    background-color: #ffcc00;
 }
 
-
-
-
 .l-sort-toolbar {
-  float: right;
-  padding: 7px 0 7px 0;
-  width: 100%;
+    float: right;
+    padding: 7px 0 7px 0;
+    width: 100%;
 }
-.l-sort-toolbar table{
-  float: right;
+.l-sort-toolbar table {
+    float: right;
 }
-
 .l-sort-toolbar td.toggle-all {
-  padding-top: 7px;
-  padding-right: 20px;
+    padding-top: 7px;
+    padding-right: 20px;
 }
-
 .l-sort-toolbar .sort-by {
-  cursor: pointer;
-  padding-top: 7px;
-  padding-left: 40px;
+    cursor: pointer;
+    padding-top: 7px;
+    padding-left: 40px;
 }
 .l-sort-toolbar .sort-by:hover {
-  color: #555;
+    color: #555;
 }
 .l-sort-toolbar .sort-by:hover b {
-  color: #555;
+    color: #555;
 }
 .l-sort-toolbar .sort-by:active {
-  color: #55c9c0;
+    color: #23b7e5;
 }
 .l-sort-toolbar .sort-by:active b {
-  color: #55c9c0;
+    color: #23b7e5;
 }
-
 .l-sort-toolbar .sort-by b {
-  text-transform: uppercase;
-  padding-left: 3px;
-  font-size: 12px;
+    text-transform: uppercase;
+    padding-left: 3px;
+    font-size: 12px;
 }
-
 .l-sort-toolbar .toggle-all:hover {
-  color: #555;
+    color: #555;
 }
 .l-sort-toolbar .toggle-all:active {
-  color: #55c9c0;
+    color: #23b7e5;
 }
-
 .l-sort-toolbar .l-select {
-  float: left;
+    float: left;
 }
 .l-sort-toolbar td {
-  vertical-align: middle;
+    vertical-align: middle;
 }
-
-.l-sort-toolbar.subtitle  {
-  padding-left: 96px;
+.l-sort-toolbar.subtitle {
+    padding-left: 96px;
 }
-
-
 .l-sort-toolbar td:first-of-type {
-  padding-left: 40px;
+    padding-left: 40px;
 }
-
-
 .l-sort-toolbar td.step-right:first-of-type {
-  padding-right: 20px;
+    padding-right: 20px;
 }
-
 .l-sort-toolbar td:nth-of-type(2) {
-/* ///  padding-right: 60px;*/
-  padding-right: 20px;
+    /* ///  padding-right: 60px;*/
+    padding-right: 20px;
 }
 .l-sort-toolbar td:last-of-type {
-/* ///  padding-left: 40px; */
+    /* ///  padding-left: 40px; */
 }
+
 .l-sort-toolbar__filter-apply {
-  float: left;
-  width: 30px;
-  height: 30px;
-  background-image: url("/images/sprite.png?1446554103");
-  background-position: -333px -1px;
-  border: none;
+    float: left;
+    width: 30px;
+    height: 30px;
+    background-image: url("/images/sprite.png?1446554103");
+    background-position: -333px -1px;
+    border: none;
 }
 .l-sort-toolbar__filter-apply:hover {
-  background-position: -368px -1px;
-  border-color: #afafac;
+    background-position: -368px -1px;
+    border-color: #afafac;
 }
 .l-sort-toolbar__filter-apply:active {
-  background-position: -404px -1px;
-  border-color: #afafac;
+    background-position: -404px -1px;
+    border-color: #afafac;
 }
+
 .l-sort-toolbar__filter-apply--active {
-  background-position: -404px -1px;
-  border-color: #50bdb5;
+    background-position: -404px -1px;
+    border-color: #50bdb5;
 }
 
 .l-sort-toolbar__search {
-  float: left;
-  width: 25px;
-  height: 25px;
-  background-image: url("/images/sprite.png?1446554103");
-  background-position: -333px -37px;
-  border: none;
+    float: left;
+    width: 25px;
+    height: 25px;
+    background-image: url("/images/sprite.png?1446554103");
+    background-position: -333px -37px;
+    border: none;
 }
 .l-sort-toolbar__search:hover {
-  background-position: -368px -37px;
-  border-color: #afafac;
+    background-position: -368px -37px;
+    border-color: #afafac;
 }
 .l-sort-toolbar__search:active {
-  background-position: -404px -37px;
-  border-color: #50bdb5;
+    background-position: -404px -37px;
+    border-color: #50bdb5;
 }
+
 .l-sort-toolbar__search--active {
-  background-position: -404px -37px;
-  border-color: #50bdb5;
+    background-position: -404px -37px;
+    border-color: #50bdb5;
 }
+
 .l-sort-toolbar .vst {
-  padding: 0 12px;
-  color: #777;
-  text-transform: uppercase;
-  font-size: 11px;
-  font-weight: bold;
-  line-height: 30px;
+    padding: 0 12px;
+    color: #777;
+    text-transform: uppercase;
+    font-size: 11px;
+    font-weight: bold;
+    line-height: 30px;
 }
 .l-sort-toolbar .vst:hover {
-  color: #ff6701;
+    color: #9c8cff;
 }
 .l-sort-toolbar .vst:active {
-  color: #55C9C0;
+    color: #23b7e5;
 }
 .l-sort-toolbar .vst.selected {
-  color: #ff6701;
-//  color: #92af0b;
+    color: #9c8cff;
 }
 
-
-
 .l-select {
-  width: 178px;
-  height: 28px;
-  border: 1px solid #ddd;
-  border-radius: 0;
-  overflow-x: hidden;
-  position: relative;
-  display: inline-block;
-  border-style: solid none solid solid;
+    width: 178px;
+    height: 28px;
+    border: 1px solid #ddd;
+    border-radius: 0;
+    overflow-x: hidden;
+    position: relative;
+    display: inline-block;
+    border-style: solid none solid solid;
 }
+
 .lang-ru .l-select {
-  width: 199px;
+    width: 199px;
 }
 
 .l-select:after {
-  pointer-events: none;
-  background-image: url("/images/sprite.png?1446554103");
-  background-position: -245px -175px;
-  width: 7px;
-  height: 4px;
-  margin-top: -2px;
-  content: '';
-  position: absolute;
-  right: 10px;
-  top: 50%;
+    pointer-events: none;
+    background-image: url("/images/sprite.png?1446554103");
+    background-position: -245px -175px;
+    width: 7px;
+    height: 4px;
+    margin-top: -2px;
+    content: "";
+    position: absolute;
+    right: 10px;
+    top: 50%;
 }
 .l-select select {
-  border: 0;
-  background-color: transparent;
-  line-height: 28px;
-  height: 28px;
-  min-width: 208px;
-  padding-left: 4px;
-  appearance:none;
-  -moz-appearance:none;
-  -webkit-appearance:none;
-  padding-left: 10px;
+    border: 0;
+    background-color: transparent;
+    line-height: 28px;
+    height: 28px;
+    min-width: 208px;
+    padding-left: 4px;
+    appearance: none;
+    -moz-appearance: none;
+    -webkit-appearance: none;
+    padding-left: 10px;
 }
 .l-select select:focus {
-  border: 0;
-  outline: 0;
+    border: 0;
+    outline: 0;
 }
+
 .lang-ru .l-select select {
-  min-width: 215px;
+    min-width: 215px;
 }
+
 .l-select select option {
-  padding: 7px;
+    padding: 7px;
 }
 
 .l-unit {
-  color: #888;
-  padding: 0 0 0 15px;
-  overflow: hidden;
-  font-size: 13px;
-}
-.units .l-unit {
-  border-bottom: 1px solid #ddd;
-  border-left: 2px solid #fff;
-}
-.units .l-unit.l-unit--starred {
-  border-left: 2px solid #ff6701;
-}
-.units.active .l-unit.focus {
-  border-left: 2px solid #5edad0;
-}
-.units.active .l-unit.focus .l-unit__name {
-  color: #36b3a9;
-}
-.units.active .l-unit.focus .l-unit-toolbar__col--right {
-  display: block;
+    color: #888;
+    padding: 0 0 0 15px;
+    overflow: hidden;
+    font-size: 13px;
 }
 
+.units .l-unit {
+    border-bottom: 1px solid #ddd;
+    border-left: 2px solid #fff;
+}
+.units .l-unit.l-unit--starred {
+    border-left: 2px solid #9c8cff;
+}
+.units.active .l-unit.focus {
+    border-left: 2px solid #5edad0;
+    background: #f4faff;
+}
+.units.active .l-unit.focus .l-unit__name {
+    color: #36b3a9;
+}
+.units.active .l-unit.focus .l-unit-toolbar__col--right {
+    display: block;
+}
 .units > div:last-child {
-  border-bottom: none;
+    border-bottom: none;
 }
 
 .l-unit-ft {
-  color: #929292;
-  padding: 0 0 0 15px;
+    color: #929292;
+    padding: 0 0 0 15px;
 }
 
 .l-unit:hover .l-unit-toolbar__col--right {
-  display: block;
+    display: block;
 }
+
 .l-unit--blue {
-  border-left: 2px solid #55c9c0;
+    border-left: 2px solid #23b7e5;
 }
 
 .l-unit--suspended {
-  background-color: #eaeaea;
-  color: #c0c0c0;
+    background-color: #eaeaea;
+    color: #c0c0c0;
 }
 
-
 .units .l-unit.l-unit--outdated {
-  background-color: #ffcaca;
-  color: #555;
-  border-left: 5px solid #ff6f6f;
-  border-bottom: 1px solid #fff;
+    background-color: #ffcaca;
+    color: #555;
+    border-left: 5px solid #ff6f6f;
+    border-bottom: 1px solid #fff;
 }
 
-.l-unit--suspended .l-unit__name,
-.l-unit--suspended b,
-.l-unit--outdated .l-unit__name,
-.l-unit--outdated b {
-  color: #c0c0c0;
+.l-unit--suspended .l-unit__name, .l-unit--suspended b {
+    color: #c0c0c0;
 }
 
+.l-unit--outdated .l-unit__name, .l-unit--outdated b {
+    color: #c0c0c0;
+}
 .l-unit--outdated .l-unit__name {
-  color: #333;
+    color: #333;
 }
 .l-unit--outdated b {
-  color: #555;
+    color: #555;
 }
 
 .l-unit--suspended .l-percent {
-  border-color: #fff;
+    border-color: #fff;
 }
 .l-unit--suspended .l-percent__fill {
-  background-color: #fff;
+    background-color: #fff;
+}
+.l-unit--suspended .l-unit__name {
+    color: #ADADAD;
 }
-.l-unit--suspended .l-unit__name,
 .l-unit--suspended .l-unit__name span {
-  color: #ADADAD;
+    color: #ADADAD;
 }
-
-.l-unit--suspended.selected .l-unit__name,
-.l-unit--suspended.selected .l-unit__name span {
-  color: #777;
-}
-
 .l-unit--suspended.selected {
-  background-color: #f2eab8 !important;
-  color: #b2ac87 !important;
+    background-color: #f2eab8 !important;
+    color: #b2ac87 !important;
+}
+.l-unit--suspended.selected .l-unit__name {
+    color: #777;
+}
+.l-unit--suspended.selected .l-unit__name span {
+    color: #777;
 }
 
 .l-unit--outdated.selected {
-  background: #765D5D !important;
-  color: #333 !important;
+    background: #765D5D !important;
+    color: #333 !important;
 }
 
+.l-unit--suspended.selected .l-unit__name, .l-unit--suspended.selected b {
+    color: #333 !important;
+}
 
+.l-unit--outdated.selected .l-unit__name, .l-unit--outdated.selected b {
+    color: #333 !important;
+}
 
-.l-unit--suspended.selected .l-unit__name,
-.l-unit--suspended.selected b,
-.l-unit--outdated.selected .l-unit__name,
-.l-unit--outdated.selected b,
-.l-unit--suspended.selected .l-percent,
-.l-unit--suspended.selected .l-percent__fill,
-.l-unit--suspended.selected .l-unit__name,
+.l-unit--suspended.selected .l-percent, .l-unit--suspended.selected .l-percent__fill {
+    color: #333 !important;
+}
+.l-unit--suspended.selected .l-unit__name {
+    color: #333 !important;
+}
 .l-unit--suspended.selected .l-unit__name span {
-  color: #333 !important;
+    color: #333 !important;
 }
 
 .l-unit.selected .l-percent {
-  border-bottom: 1px dotted #777;
+    border-bottom: 1px dotted #777;
 }
 
-
 .l-unit--selected {
-  background-color: #d1eddc;
+    background-color: #d1eddc;
 }
-.l-unit-toolbar{
-  height: 39px;
+
+.l-unit-toolbar {
+    height: 39px;
 }
 
 .l-unit label {
-  margin-bottom: 20px;
+    margin-bottom: 20px;
 }
+
 .l-unit__columns {
-  display: table;
-  width: 100%;
+    display: table;
+    width: 100%;
 }
+
 .l-unit__col {
-  display: table-cell;
-  padding-top: 1px;
-  vertical-align: top;
+    display: table-cell;
+    padding-top: 1px;
+    vertical-align: top;
 }
+
 .l-unit__col--left {
-  width: 124px;
-  padding-right: 10px;
+    width: 124px;
+    padding-right: 10px;
 }
+
 .units.compact .l-unit__col--left {
-  vertical-align: top;
+    vertical-align: top;
 }
 
 .l-unit__col--left.step-left {
-  padding-left: 30px;
+    padding-left: 30px;
 }
 
 .l-unit__col--right.total {
-  padding-left: 16px;
+    padding-left: 16px;
 }
-
 .l-unit__col--right.back {
-  padding-left: 78px
+    padding-left: 78px;
 }
 
 .l-sort-toolbar .step-left {
-  padding-left: 40px;
+    padding-left: 40px;
 }
+
 .step-right {
-  padding-right: 40px;
+    padding-right: 40px;
 }
 
 .l-unit__date {
-  font-size: 12px;
-  letter-spacing: 1px;
-  margin-top: 10px;
-  padding-bottom: 30px;
+    font-size: 12px;
+    letter-spacing: 1px;
+    margin-top: 10px;
+    padding-bottom: 30px;
 }
 
 .l-unit__suspended {
-  display: none;
-  font-size: 11px;
-  font-weight: bold;
-  letter-spacing: 3px;
-  margin-top: 36px;
-  text-transform: uppercase;
-  margin-bottom: 14px;
+    display: none;
+    font-size: 11px;
+    font-weight: bold;
+    letter-spacing: 3px;
+    margin-top: 36px;
+    text-transform: uppercase;
+    margin-bottom: 14px;
 }
 
 .units.compact .l-unit__suspended {
-  margin-top: 1px;
+    margin-top: 1px;
 }
 
-.l-unit--outdated .l-unit__suspended,
-.l-unit--suspended .l-unit__suspended {
-  display: block;
+.l-unit--outdated .l-unit__suspended, .l-unit--suspended .l-unit__suspended {
+    display: block;
+}
+
+.l-unit-ft .subtitle {
+    color: #9c8cff;
+    font-size: 12px;
+    font-weight: bold;
+    margin: 20px 0 18px 129px;
+    text-transform: uppercase;
 }
 
-.l-unit-ft .subtitle,
 .l-unit .subtitle {
-  color: #ff6701;
-  font-size: 12px;
-  font-weight: bold;
-  margin: 20px 0 18px 129px;
-  text-transform: uppercase;
+    color: #9c8cff;
+    font-size: 12px;
+    font-weight: bold;
+    margin: 20px 0 18px 129px;
+    text-transform: uppercase;
 }
-
 .l-unit.l-unit--outdated .l-unit__date {
-  color: #d24c4c;
-  font-size: 10px;
-  letter-spacing: 3px;
-  text-transform: uppercase;
-  font-weight: bold;
+    color: #d24c4c;
+    font-size: 10px;
+    letter-spacing: 3px;
+    text-transform: uppercase;
+    font-weight: bold;
 }
 
 .l-unit__name {
-  color: #111;
-  font-size: 32px;
-  margin-bottom: 10px;
+    color: #111;
+    font-size: 32px;
+    margin-bottom: 10px;
 }
-.l-unit__stats.separate,
+
+.l-unit__stats.separate {
+    padding-bottom: 15px;
+}
+
 .l-unit__name.separate {
-  padding-bottom: 15px;
+    padding-bottom: 15px;
 }
-
 .l-unit__name.small {
-  font-size: 19px;
+    font-size: 19px;
 }
-
 .l-unit__name.small-2 {
-  font-size: 24px;
+    font-size: 24px;
 }
-
-
 .l-unit__name span {
-  color: #999;
-  margin-left: 30px;
-  font-size: 14px;
-  font-style: italic;
+    color: #999;
+    margin-left: 30px;
+    font-size: 14px;
+    font-style: italic;
 }
 .l-unit__name span:first-of-type {
-  margin-left: 39px;
+    margin-left: 39px;
 }
 .l-unit__name b {
-  font-weight: normal;
-  font-style: italic;
+    font-weight: normal;
+    font-style: italic;
 }
 
 .l-unit__ip {
-  margin-bottom: 26px;
-  font-size: 12px;
-  letter-spacing: 1px;
+    margin-bottom: 26px;
+    font-size: 12px;
+    letter-spacing: 1px;
 }
 .l-unit__ip span {
-  padding-left: 3px;
-  padding-right: 3px;
+    padding-left: 3px;
+    padding-right: 3px;
 }
+
 .display-ip {
-  font-size: 12px;
-  letter-spacing: 1px;
+    font-size: 12px;
+    letter-spacing: 1px;
 }
 .display-ip span {
-  padding-left: 3px;
-  padding-right: 3px;
+    padding-left: 3px;
+    padding-right: 3px;
 }
 
 .l-unit__stats {
-  margin-bottom: 50px;
+    margin-bottom: 50px;
 }
 .l-unit__stats table {
-  width: 100%;
-  table-layout: fixed;
+    width: 100%;
+    table-layout: fixed;
 }
 .l-unit__stats td {
-  height: 22px;
-  padding-bottom: 3px;
-  vertical-align: top;
+    height: 22px;
+    padding-bottom: 3px;
+    vertical-align: top;
 }
+
 .l-unit__stat-col--left {
-  float: left;
-  width: 124px;
+    float: left;
+    width: 124px;
 }
 .l-unit__stat-col--left.compact {
-  width: 70px;
+    width: 70px;
 }
 .l-unit__stat-col--left.compact-2 {
-  width: 95px;
+    width: 95px;
 }
 .l-unit__stat-col--left.wide {
-  width: 190px;
+    width: 190px;
 }
 .l-unit__stat-col--left.wide-2 {
-  width: 230px;
+    width: 230px;
 }
 .l-unit__stat-col--left.wide-3 {
-  width: 250px;
+    width: 250px;
 }
 .l-unit__stat-col--left.wide-4 {
-  width: 550px;
+    width: 550px;
 }
-
-
 .l-unit__stat-col--left.small-2 {
-  line-height: 11px;
+    line-height: 11px;
 }
-
 .l-unit__stat-col--left.tiny {
-  font-size: 11px;
+    font-size: 11px;
 }
-
 .l-unit__stat-col--left.tiny b {
-  font-size: 18px;
+    font-size: 18px;
 }
 
-
 .l-unit__stat-col--right {
-  float: left;
-  max-width: 152px;
+    float: left;
+    max-width: 152px;
 }
 
 .l-unit-toolbar__col--left {
-  float: left;
-  margin-left: -15px;
-  margin-top: 0;
-  padding-bottom: 0px;/* 8px */
-  padding-left: 15px;
-  padding-top: 15px;
-  width: 30px;
-  cursor: pointer;
+    float: left;
+    margin-left: -15px;
+    margin-top: 0;
+    padding-bottom: 0px;
+    /* 8px */
+    padding-left: 15px;
+    padding-top: 15px;
+    width: 30px;
+    cursor: pointer;
 }
 
 .l-unit-toolbar__col--right {
-  float: right;
-  display: none;
+    float: right;
+    display: none;
 }
 
 body.mobile .l-unit-toolbar__col--right {
-  display: block;
+    display: block;
 }
 
 .l-unit-toolbar .shortcut {
-  display: none;
+    display: none;
 }
 
 .units.active .l-unit.focus .l-unit-toolbar .shortcut {
-  display: block;
-  background-color: #69a298;
-  border-radius: 13px;
-  color: #fff;
-  cursor: pointer;
-  display: block;
-  font-size: 12px;
-  font-weight: 700;
-  line-height: 25px;
-  padding-left: 7px;
-  padding-right: 9px;
-  position: absolute;
-  right: 3px;
-  top: 3px;
+    display: block;
+    background-color: #69a298;
+    border-radius: 13px;
+    color: #fff;
+    cursor: pointer;
+    display: block;
+    font-size: 12px;
+    font-weight: 700;
+    line-height: 25px;
+    padding-left: 7px;
+    padding-right: 9px;
+    position: absolute;
+    right: 3px;
+    top: 3px;
 }
 .units.active .l-unit.focus .l-unit-toolbar .shortcut.delete {
-  font-size: 10px;
-  padding-left: 2px;
-  padding-right: 5px;
-  text-transform: capitalize;
+    font-size: 10px;
+    padding-left: 2px;
+    padding-right: 5px;
+    text-transform: capitalize;
 }
 .units.active .l-unit.focus .l-unit-toolbar .shortcut.enter {
-  font-size: 17px;
-  padding-left: 1px;
-  padding-right: 7px;
+    font-size: 17px;
+    padding-left: 1px;
+    padding-right: 7px;
 }
 .units.active .l-unit.focus .l-unit-toolbar i {
-  background: none;
+    background: none;
 }
 
 .l-unit__stat-col.volume {
-  font-size: 12px;
-  line-height: 17px;
-  float: right;
+    font-size: 12px;
+    line-height: 17px;
+    float: right;
 }
 
 .actions-panel__col {
-  float: left;
-  min-width: 95px;
-  min-height: 31px;
-  text-transform: uppercase;
-  background-color: #dfdedd;
-  border-right: 1px solid #d8d7d7;
-  position: relative;
+    float: left;
+    min-width: 95px;
+    min-height: 31px;
+    text-transform: uppercase;
+    background-color: #dde6e9;
+    border-right: 1px solid #dde6e9;
+    position: relative;
 }
+
 .selected .actions-panel__col {
-  -webkit-filter: contrast(80%);
-  filter: contrast(80%);
+    -webkit-filter: contrast(80%);
+    filter: contrast(80%);
 }
+
 .actions-panel__col i {
-  background-image: url("/images/sprite.png?1446554103");
-  background-repeat: no-repeat;
-  display: inline-block;
-  float: right;
-  content: '';
-  width: 31px;
-  height: 31px;
-  position: absolute;
-  top: 0;
-  right: 0;
+    background-image: url("/images/sprite.png?1446554103");
+    background-repeat: no-repeat;
+    display: inline-block;
+    float: right;
+    content: "";
+    width: 31px;
+    height: 31px;
+    position: absolute;
+    top: 0;
+    right: 0;
 }
 .actions-panel__col a {
-  line-height: 31px;
-  color: #777;
-  font-weight: 700;
-  font-size: 12px;
-  padding-left: 13px;
-  display: block;
-  cursor: pointer;
-  position: relative;
-  padding-right: 36px;
-}
-.lang-ru .actions-panel__col a {
-  font-size: 11px;
-  padding-top: 1px;
-}
-.lang-tw .actions-panel__col a {
-  font-size: 15px;
-  font-weight: normal;
-  line-height: 29px;
-}
-.lang-ar .actions-panel__col a {
-  font-size: 15px;
-  font-weight: normal;
-  line-height: 31px;
+    line-height: 31px;
+    color: #777;
+    font-weight: 700;
+    font-size: 12px;
+    padding-left: 13px;
+    display: block;
+    cursor: pointer;
+    position: relative;
+    padding-right: 36px;
 }
 
+.lang-ru .actions-panel__col a {
+    font-size: 11px;
+    padding-top: 1px;
+}
+
+.lang-tw .actions-panel__col a {
+    font-size: 15px;
+    font-weight: normal;
+    line-height: 29px;
+}
+
+.lang-ar .actions-panel__col a {
+    font-size: 15px;
+    font-weight: normal;
+    line-height: 31px;
+}
 
 .actions-panel__favorite a {
-  background-color: #afafac;
-  color: #fff;
+    background-color: #afafac;
+    color: #fff;
 }
 .actions-panel__favorite i {
-  background-position: -39px -85px;
+    background-position: -39px -85px;
 }
 
 .actions-panel__edit i {
-  background-position: -1px -169px;
+    background-position: -1px -169px;
 }
 .actions-panel__edit:hover a {
-  background-color: #9fbf0c;
-  color: #fff;
+    background-color: #27c24c;
+    color: #fff;
 }
 .actions-panel__edit:active a {
-  background-color: #c0e60f;
-  color: #555;
+    background-color: #32f360;
+    color: #555;
 }
 .actions-panel__edit:hover a i {
-  background-position: -41px -169px;
+    background-position: -41px -169px;
 }
 .actions-panel__edit:active a i {
-  background-position: -81px -169px;
+    background-position: -81px -169px;
 }
+
 .actions-panel__edit--active a {
-  background-color: #c0e60f;
-  color: #fff;
+    background-color: #32f360;
+    color: #fff;
 }
 .actions-panel__edit--active i {
-  background-position: -78px -169px;
+    background-position: -78px -169px;
 }
 
 .actions-panel__restart i {
-  background-position: -1px -520px;
+    background-position: -1px -520px;
 }
 .actions-panel__restart:hover a {
-  background-color: #9fbf0c;
-  color: #fff;
+    background-color: #27c24c;
+    color: #fff;
 }
 .actions-panel__restart:active a {
-  background-color: #c0e60f;
-  color: #555;
+    background-color: #32f360;
+    color: #555;
 }
 .actions-panel__restart:hover a i {
-  background-position: -41px -520px;
+    background-position: -41px -520px;
 }
 .actions-panel__restart:active a i {
-  background-position: -81px -520px;
+    background-position: -81px -520px;
 }
+
 .actions-panel__restart--active a {
-  background-color: #c0e60f;
-  color: #fff;
+    background-color: #32f360;
+    color: #fff;
 }
 .actions-panel__restart--active i {
-  background-position: -78px -520px;
+    background-position: -78px -520px;
 }
 
 .actions-panel__add i {
-  background-position: -1px -285px;
+    background-position: -1px -285px;
 }
 .actions-panel__add:hover a {
-  background-color: #9fbf0c;
-  color: #fff;
+    background-color: #27c24c;
+    color: #fff;
 }
 .actions-panel__add:active a {
-  background-color: #c0e60f;
-  color: #555;
+    background-color: #32f360;
+    color: #555;
 }
 .actions-panel__add:hover a i {
-  background-position: -41px -285px;
+    background-position: -41px -285px;
 }
 .actions-panel__add:active a i {
-  background-position: -81px -285px;
+    background-position: -81px -285px;
 }
 
 .actions-panel__add--active a {
-  background-color: #c0e60f;
-  color: #fff;
+    background-color: #32f360;
+    color: #fff;
 }
 .actions-panel__add--active i {
-  background-position: -78px -285px;
+    background-position: -78px -285px;
 }
 
 .actions-panel__update i {
-  background-position: -1px -481px;
+    background-position: -1px -481px;
 }
 .actions-panel__update:hover a {
-  background-color: #9fbf0c;
-  color: #fff;
+    background-color: #27c24c;
+    color: #fff;
 }
 .actions-panel__update:active a {
-  background-color: #c0e60f;
-  color: #555;
+    background-color: #32f360;
+    color: #555;
 }
 .actions-panel__update:hover a i {
-  background-position: -41px -481px;
+    background-position: -41px -481px;
 }
 .actions-panel__update:active a i {
-  background-position: -81px -481px;
+    background-position: -81px -481px;
 }
+
 .actions-panel__update--active a {
-  background-color: #c0e60f;
-  color: #fff;
+    background-color: #32f360;
+    color: #fff;
 }
 .actions-panel__update--active i {
-  background-position: -78px -481px;
+    background-position: -78px -481px;
 }
 
 .actions-panel__logs i {
-  background-position: -2px -130px;
+    background-position: -2px -130px;
 }
 .actions-panel__logs:hover a {
-  background-color: #afafac;
-  color: #fff;
+    background-color: #afafac;
+    color: #fff;
 }
 .actions-panel__logs:active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__logs:hover a i {
-  background-position: -42px -130px;
+    background-position: -42px -130px;
 }
 .actions-panel__logs:active a i {
-  background-position: -82px -130px;
+    background-position: -82px -130px;
 }
+
 .actions-panel__logs--active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__logs--active i {
-  background-position: -79px -130px;
+    background-position: -79px -130px;
 }
 
 .actions-panel__db i {
-  background-position: -2px -363px;
+    background-position: -2px -363px;
 }
 .actions-panel__db:hover a {
-  background-color: #afafac;
-  color: #fff;
+    background-color: #afafac;
+    color: #fff;
 }
 .actions-panel__db:active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__db:hover a i {
-  background-position: -42px -363px;
+    background-position: -42px -363px;
 }
 .actions-panel__db:active a i {
-  background-position: -82px -363px;
+    background-position: -82px -363px;
 }
+
 .actions-panel__db--active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__db--active i {
-  background-position: -79px -362px;
+    background-position: -79px -362px;
 }
 
 .actions-panel__suspend i {
-  background-position: -1px -51px;
+    background-position: -1px -51px;
 }
 .actions-panel__suspend:hover a {
-  background-color: #afafac;
-  color: #fff;
+    background-color: #afafac;
+    color: #fff;
 }
 .actions-panel__suspend:active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__suspend:hover a i {
-  background-position: -41px -51px;
+    background-position: -41px -51px;
 }
 .actions-panel__suspend:active a i {
-  background-position: -81px -51px;
+    background-position: -81px -51px;
 }
+
 .actions-panel__suspend--active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__suspend--active i {
-  background-position: -78px -51px;
+    background-position: -78px -51px;
 }
 
 .actions-panel__unsuspend i {
-  background-position: -1px -12px;
+    background-position: -1px -12px;
 }
 .actions-panel__unsuspend:hover a {
-  background-color: #afafac;
-  color: #fff;
+    background-color: #afafac;
+    color: #fff;
 }
 .actions-panel__unsuspend:active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__unsuspend:hover a i {
-  background-position: -41px -12px;
+    background-position: -41px -12px;
 }
 .actions-panel__unsuspend:active a i {
-  background-position: -81px -12px;
+    background-position: -81px -12px;
 }
+
 .actions-panel__unsuspend--active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__unsuspend--active i {
-  background-position: -78px -12px;
+    background-position: -78px -12px;
 }
 
-
 .actions-panel__loginas i {
-  background-position: -1px -245px;
+    background-position: -1px -245px;
 }
 .actions-panel__loginas:hover a {
-  background-color: #afafac;
-  color: #fff;
+    background-color: #afafac;
+    color: #fff;
 }
 .actions-panel__loginas:active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__loginas:hover a i {
-  background-position: -41px -245px;
+    background-position: -41px -245px;
 }
 .actions-panel__loginas:active a i {
-  background-position: -81px -245px;
+    background-position: -81px -245px;
 }
+
 .actions-panel__loginas--active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__loginas--active i {
-  background-position: -78px -245px;
+    background-position: -78px -245px;
 }
 
 .actions-panel__download i {
-  background-position: -1px -402px;
+    background-position: -1px -402px;
 }
 .actions-panel__download:hover a {
-  background-color: #9fbf0c;
-  color: #fff;
+    background-color: #27c24c;
+    color: #fff;
 }
 .actions-panel__download:active a {
-  background-color: #c0e60f;
-  color: #555;
+    background-color: #32f360;
+    color: #555;
 }
 .actions-panel__download:hover a i {
-  background-position: -41px -402px;
+    background-position: -41px -402px;
 }
 .actions-panel__download:active a i {
-  background-position: -81px -402px;
+    background-position: -81px -402px;
 }
+
 .actions-panel__download--active a {
-  background-color: #c0e60f;
-  color: #fff;
+    background-color: #32f360;
+    color: #fff;
 }
 .actions-panel__download--active i {
-  background-position: -78px -402px;
+    background-position: -78px -402px;
 }
 
 .actions-panel__configure i {
-  background-position: -1px -442px;
+    background-position: -1px -442px;
 }
 .actions-panel__configure:hover a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__configure:active a {
-  background-color: #afafac;
-  color: #fff;
+    background-color: #afafac;
+    color: #fff;
 }
 .actions-panel__configure:hover a i {
-  background-position: -81px -442px;
+    background-position: -81px -442px;
 }
 .actions-panel__configure:active a i {
-  background-position: -41px -442px;
+    background-position: -41px -442px;
 }
+
 .actions-panel__configure--active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__configure--active i {
-  background-position: -78px -442px;
+    background-position: -78px -442px;
 }
 
 .actions-panel__.l-icon-starmail i {
-  background-position: -1px -324px;
+    background-position: -1px -324px;
 }
+
 .actions-panel__mail:hover a {
-  background-color: #afafac;
-  color: #fff;
+    background-color: #afafac;
+    color: #fff;
 }
 .actions-panel__mail:active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__mail:hover a i {
-  background-position: -41px -324px;
+    background-position: -41px -324px;
 }
 .actions-panel__mail:active a i {
-  background-position: -81px -324px;
+    background-position: -81px -324px;
 }
+
 .actions-panel__mail--active a {
-  background-color: #55c9c0;
-  color: #fff;
+    background-color: #23b7e5;
+    color: #fff;
 }
 .actions-panel__mail--active i {
-  background-position: -78px -324px;
+    background-position: -78px -324px;
 }
 
 .actions-panel__delete i {
-  background-position: -1px -207px;
+    background-position: -1px -207px;
 }
 .actions-panel__delete:hover a {
-  background-color: #ff3438;
-  color: #fff;
+    background-color: #ff3438;
+    color: #fff;
 }
 .actions-panel__delete:active a {
-  background-color: #ff5f5f;
-  color: #fff;
+    background-color: #ff5f5f;
+    color: #fff;
 }
 .actions-panel__delete:hover a i {
-  background-position: -41px -207px;
+    background-position: -41px -207px;
 }
 .actions-panel__delete:active a i {
-  background-position: -81px -207px;
+    background-position: -81px -207px;
 }
+
 .actions-panel__delete--active a {
-  background-color: #ff5f5f;
-  color: #fff;
+    background-color: #ff5f5f;
+    color: #fff;
 }
 .actions-panel__delete--active i {
-  background-position: -78px -207px;
+    background-position: -78px -207px;
 }
 
 .actions-panel__stop i {
-  background-position: -1px -561px;
+    background-position: -1px -561px;
 }
 .actions-panel__stop:hover a {
-  background-color: #ff3438;
-  color: #fff;
+    background-color: #ff3438;
+    color: #fff;
 }
 .actions-panel__stop:active a {
-  background-color: #ff5f5f;
-  color: #fff;
+    background-color: #ff5f5f;
+    color: #fff;
 }
 .actions-panel__stop:hover a i {
-  background-position: -41px -561px;
+    background-position: -41px -561px;
 }
 .actions-panel__stop:active a i {
-  background-position: -81px -561px;
+    background-position: -81px -561px;
 }
+
 .actions-panel__stop--active a {
-  background-color: #ff5f5f;
-  color: #fff;
+    background-color: #ff5f5f;
+    color: #fff;
 }
 .actions-panel__stop--active i {
-  background-position: -78px -561px;
+    background-position: -78px -561px;
 }
 
 .actions-panel__start i {
-  background-position: -1px -482px;
+    background-position: -1px -482px;
 }
 .actions-panel__start:hover a {
-  background-color: #9fbf0c;
-  color: #fff;
+    background-color: #27c24c;
+    color: #fff;
 }
 .actions-panel__start:active a {
-  background-color: #c0e60f;
-  color: #555;
+    background-color: #32f360;
+    color: #555;
 }
 .actions-panel__start:hover a i {
-  background-position: -41px -482px;
+    background-position: -41px -482px;
 }
 .actions-panel__start:active a i {
-  background-position: -81px -482px;
+    background-position: -81px -482px;
 }
+
 .actions-panel__start--active a {
-  background-color: #c0e60f;
-  color: #fff;
+    background-color: #32f360;
+    color: #fff;
 }
 .actions-panel__start--active i {
-  background-position: -78px -482px;
+    background-position: -78px -482px;
 }
 
-
 .l-icon-up-arrow, .l-icon-down-arrow, .l-icon-star, .l-icon-to-top, .l-icon-shortcuts, .l-icon-star-orange, .l-icon-star-blue {
-  display: inline-block;
-  vertical-align: middle;
-  background-image: url("/images/sprite.png?1446554103");
+    display: inline-block;
+    vertical-align: middle;
+    background-image: url("/images/sprite.png?1446554103");
 }
 
 .l-icon-down-arrow {
-  width: 7px;
-  height: 15px;
-  background-position: -280px -128px;
+    width: 7px;
+    height: 15px;
+    background-position: -280px -128px;
 }
 
 .l-icon-up-arrow {
-  width: 7px;
-  height: 15px;
-  background-position: -299px -129px;
+    width: 7px;
+    height: 15px;
+    background-position: -299px -129px;
 }
 
-
 .l-icon-star {
-  width: 36px;
-  height: 36px;
-  background-position: -216px 560px;
-  cursor: pointer;
-  visibility: hidden;
+    width: 36px;
+    height: 36px;
+    background-position: -216px 560px;
+    cursor: pointer;
+    visibility: hidden;
 }
+
 .l-unit--starred .l-icon-star {
-  background-position: -174px 560px;
-  visibility: visible;
+    background-position: -174px 560px;
+    visibility: visible;
 }
+
 .selected .l-icon-star {
-  filter: contrast(70%);
-  -webkit-filter:  contrast(70%);
+    filter: contrast(70%);
+    -webkit-filter: contrast(70%);
 }
 
 .units.compact .l-icon-star {
-  margin-top: -14px;
+    margin-top: -14px;
 }
 
 .l-icon-star:hover {
-  background-position: 0px 560px;
+    background-position: 0px 560px;
 }
-
 .l-icon-star:active {
-  -background-position: -174px 560px;
-  background-position: -80px 562px;
+    -background-position: -174px 560px;
+    background-position: -80px 562px;
 }
 
 .l-unit:hover .l-icon-star {
-  visibility: visible;
+    visibility: visible;
 }
 
-
 .l-icon-to-top {
-  width: 35px;
-  height: 35px;
-  background-position: -330px -68px;
+    width: 35px;
+    height: 35px;
+    background-position: -330px -68px;
 }
 .l-icon-to-top:hover {
-  background-position: -366px -68px;
+    background-position: -366px -68px;
 }
 .l-icon-to-top:active {
-  background-position: -402px -68px;
+    background-position: -402px -68px;
 }
 
 .l-icon-shortcuts {
-  width: 35px;
-  height: 35px;
-  background-position: -240px -281px;
-  border-radius: 18px;
+    width: 35px;
+    height: 35px;
+    background-position: -240px -281px;
+    border-radius: 18px;
 }
 .l-icon-shortcuts:hover {
-  background-position: -160px -281px;
+    background-position: -160px -281px;
 }
 .l-icon-shortcuts:active {
-  background-position: -198px -281px;
+    background-position: -198px -281px;
 }
 
-body.mobile .l-icon-to-top,
-body.mobile .l-icon-shortcuts {
-  display: none;
+body.mobile .l-icon-to-top, body.mobile .l-icon-shortcuts {
+    display: none;
 }
 
-
 .l-icon-star-orange {
-  width: 13px;
-  height: 13px;
-  background-position: -178px -97px;
+    width: 13px;
+    height: 13px;
+    background-position: -178px -97px;
 }
 
 .l-icon-star-blue {
-  width: 13px;
-  height: 13px;
-  background-position: -134px -97px;
+    width: 13px;
+    height: 13px;
+    background-position: -134px -97px;
 }
 
 .media-top {
-  vertical-align: top;
+    vertical-align: top;
 }
 
 .l-unit__stat-cols {
-  padding-right: 10px;
+    padding-right: 10px;
 }
 .l-unit__stat-cols.last {
-  padding-right: 0;
+    padding-right: 0;
 }
 .l-unit__stat-cols.graph {
-  width: 200px;
+    width: 200px;
 }
 .l-unit__stat-cols.tiny {
-  font-size:11px;
-  line-height: 19px;
+    font-size: 11px;
+    line-height: 19px;
 }
 
 .l-percent {
-  border-bottom: 1px dotted #ccc;
-  margin-top: 1px;
-  width: 200px;
+    border-bottom: 1px dotted #ccc;
+    margin-top: 1px;
+    width: 200px;
 }
+
 .l-percent__fill {
-  background-color: #aacc0d;
-  height: 3px;
-  position: relative;
-  bottom: -1px;
+    background-color: #aacc0d;
+    height: 3px;
+    position: relative;
+    bottom: -1px;
 }
 
 .to-top {
-  display: inline-block;
-  position: fixed;
-  top: 92%;
-  right: 1%;
+    display: inline-block;
+    position: fixed;
+    top: 92%;
+    right: 1%;
 }
 
 .to-shortcuts {
-  display: inline-block;
-  position: fixed;
-  top: 92%;
-  right: 4%;
+    display: inline-block;
+    position: fixed;
+    top: 92%;
+    right: 4%;
 }
 
-
 /*
 #vstobjects {
   margin-top: -1px;
 }
 */
-
 #vstobjects .l-center {
-  padding-top: 20px;
-  padding-bottom: 30px;
-  font-size: 12px;
+    padding-top: 20px;
+    padding-bottom: 30px;
+    font-size: 12px;
 }
 
 .timer-container {
-  margin-top: 4px;
+    margin-top: 4px;
 }
-
 .timer-container .refresh-timer {
-  border: 2px solid #9f9f9f;
-  border-radius: 14px;
-  height: 14px;
-  width: 14px;
-  float: left;
-  margin: 2px 10px 0 0;
+    border: 2px solid #9f9f9f;
+    border-radius: 14px;
+    height: 14px;
+    width: 14px;
+    float: left;
+    margin: 2px 10px 0 0;
 }
 .timer-container .refresh-timer.paused {
-  border: 2px solid #9f9f9f;
+    border: 2px solid #9f9f9f;
 }
-.timer-container .refresh-timer.paused .loader-half.right,
-.timer-container .refresh-timer.paused .loader-half.dark {
-  background-color: #9d9f9f;
+.timer-container .refresh-timer.paused .loader-half.right, .timer-container .refresh-timer.paused .loader-half.dark {
+    background-color: #9d9f9f;
 }
 .timer-container .loader-half {
-  border-radius: 0 14px 14px 0;
-  height: 14px;
-  width: 7px;
-  float: left;
+    border-radius: 0 14px 14px 0;
+    height: 14px;
+    width: 7px;
+    float: left;
 }
 .timer-container .loader-half.left {
-  border-radius: 14px 0 0 14px;
-  background-color: #fff;
+    border-radius: 14px 0 0 14px;
+    background-color: #fff;
 }
 .timer-container .loader-half.right {
-  margin-left: 7px;
-  background-color: #9f9f9f;
+    margin-left: 7px;
+    background-color: #9f9f9f;
 }
 .timer-container .loader-half.dark {
-  background-color: #9f9f9f;
+    background-color: #9f9f9f;
 }
 .timer-container .movement {
-  float: left;
-  width: 14px;
-  height: 14px;
-  position: absolute;
+    float: left;
+    width: 14px;
+    height: 14px;
+    position: absolute;
 }
 .timer-container .movement.left {
-  z-index: 10;
+    z-index: 10;
 }
 .timer-container .movement.right {
-  transform: rotate(180deg);
-  -webkit-transform: rotate(180deg);
+    transform: rotate(180deg);
+    -webkit-transform: rotate(180deg);
 }
 .timer-container .timer-button {
-  cursor: pointer;
-  text-decotation: underline;
-  margin: 7px 0 0 38px;
-  width: 15px;
-  float: left;
-  height: 10px;
+    cursor: pointer;
+    text-decotation: underline;
+    margin: 7px 0 0 38px;
+    width: 15px;
+    float: left;
+    height: 10px;
 }
 .timer-container .timer-button.pause {
-  background: url(/images/pause.png) no-repeat ;
+    background: url(/images/pause.png) no-repeat;
 }
 .timer-container .timer-button.play {
-  background: url(/images/start.png) no-repeat;
+    background: url(/images/start.png) no-repeat;
 }
 
 .uppercase {
-  text-transform: uppercase;
-}
-
-.title b,
-.title {
-  color: #ff6701;
-  font-size: 12px;
-  font-weight: bold;
-  padding: 0 30px 0px 73px;
-  line-height: 30px;
-  text-transform: uppercase;
+    text-transform: uppercase;
 }
 
 .title {
-  display: inline-block;
-  float: left;
+    color: #9c8cff;
+    font-size: 12px;
+    font-weight: bold;
+    padding: 0 30px 0px 73px;
+    line-height: 30px;
+    text-transform: uppercase;
+    display: inline-block;
+    float: left;
+}
+.title b {
+    color: #9c8cff;
+    font-size: 12px;
+    font-weight: bold;
+    padding: 0 30px 0px 73px;
+    line-height: 30px;
+    text-transform: uppercase;
 }
-
-
-
 
 /* form styles */
-
-
-
 .vst-error {
-  color: #BE5ABF;
-  font-weight: bold;
-  display: inline-block;
-  height: 17px;
-  overflow: hidden;
-  padding-top: 6px;
-  width: 593px;
+    color: #BE5ABF;
+    font-weight: bold;
+    display: inline-block;
+    height: 17px;
+    overflow: hidden;
+    padding-top: 6px;
+    width: 593px;
 }
 
 .vst-ok {
-  color: #9fbf0c;
-  font-weight: bold;
-  display: inline-block;
-  height: 17px;
-  overflow: hidden;
-  padding-top: 6px;
-  max-width: 600px;
+    color: #27c24c;
+    font-weight: bold;
+    display: inline-block;
+    height: 17px;
+    overflow: hidden;
+    padding-top: 6px;
+    max-width: 600px;
 }
-
 .vst-ok a {
-  color: #2c9491;
+    color: #27c24c;
 }
 .vst-ok a:hover {
-  color: #ff6701;
+    color: #9c8cff;
 }
 .vst-ok a:active {
-  color: #f72b44;
+    color: #796cc7;
 }
 
-
-
-
 .data {
-  margin: 0 0 90px 0;
+    margin: 0 0 90px 0;
 }
+
 .data-col1 {
-  width: 148px;
+    width: 148px;
 }
-
 .data-col1 td {
-  padding: 10px 0 0 5px;
+    padding: 10px 0 0 5px;
 }
-
 .data-col1 tr:first-child td {
-  padding: 59px 0 0 5px;
+    padding: 59px 0 0 5px;
 }
 
-.login-box td,
-.data td {
-  color: #555;
-  font-size: 15px;
-  padding-bottom: 3px;
-  font-weight: bold;
+.login-box td, .data td {
+    color: #555;
+    font-size: 15px;
+    padding-bottom: 3px;
+    font-weight: bold;
 }
+
 .input-label {
-  padding-top: 20px;
+    padding-top: 20px;
 }
-.data input[type="checkbox"] {
-  display: inline;
-  cursor: pointer;
+
+.data input[type=checkbox] {
+    display: inline;
+    cursor: pointer;
 }
+
 .step-top {
-  padding-top: 42px;
+    padding-top: 42px;
 }
+
 .step-top-small {
-  padding-top: 22px;
+    padding-top: 22px;
 }
+
 .jump-top {
-  margin-top: -60px;
+    margin-top: -60px;
 }
+
 .jump-small-top {
-  margin-top: -12px;
+    margin-top: -12px;
 }
+
 .float-right {
     display: inline-block;
     float: right;
 }
 
 .data a {
-  text-decoration: none;
-}
-label {
-  cursor: pointer;
+    text-decoration: none;
 }
 
+label {
+    cursor: pointer;
+}
 label:hover {
-  color: #333;
+    color: #333;
 }
 
 .vst-input {
-  background-color: #fff;
-  border: 1px solid #cfcfcf;
-  border-radius: 0px;
-  color: #555;
-  font-family: Arial;
-  font-size: 19px;
-  height: 28px;
-  margin: 2px 6px 0 0;
-  padding: 7px 3px 9px 14px;
-  width: 360px;
-  font-weight: normal;
+    background-color: #fff;
+    border: 1px solid #dee5e7;
+    border-radius: 3px;
+    color: #555;
+    font-family: Arial;
+    font-size: 19px;
+    height: 28px;
+    margin: 2px 6px 0 0;
+    padding: 7px 3px 9px 14px;
+    width: 360px;
+    font-weight: normal;
 }
 .vst-input:hover {
-  border: 1px solid #909090;
+    border: 1px solid #909090;
 }
 .vst-input:focus {
-  border: 1px solid #55C9C0;
-  background-color: #D7F9FF;
-  color: #333;
+    border: 1px solid #23b7e5;
+    background-color: #fff;
+    color: #333;
+}
+.vst-input:disabled {
+    background-color: #e0e0e0;
 }
 
-.vst-input:disabled,
 .vst-list:disabled {
-  background-color: #e0e0e0;
+    background-color: #e0e0e0;
 }
+
 .vst-input:focus:disabled {
-  border-color: #f1f1f1;
-  background-color: #f1f1f1;
+    border-color: #f1f1f1;
+    background-color: #f1f1f1;
 }
 .vst-input.long {
-  width: 832px;
+    width: 100%;
 }
 .vst-input.short {
-  width: 200px;
+    width: 200px;
 }
 
 .vst-list {
-  background-color: #fff;
-  border: 1px solid #ccc;
-  border-radius: 0;
-  color: #555;
-  font-family: Arial,Helvetica,sans-serif;
-  font-size: 19px;
-  font-weight: normal;
-  height: 43px;
-  cursor: pointer;
-  margin: 2px 6px 0 0;
-  min-width: 138px;
-  padding: 8px 1px 6px 10px;
-  background-image: url("/images/sprite.png?1446554103");
-  background-position: -185px -604px;
-  width: 270px;
-  appearance:none;
-  -moz-appearance:none;
-  -webkit-appearance:none;
-  text-shadow: 0 0 0 #555;
+    background-color: #fff;
+    border: 1px solid #dee5e7;
+    border-radius: 3px;
+    color: #555;
+    font-family: Arial, Helvetica, sans-serif;
+    font-size: 19px;
+    font-weight: normal;
+    height: 43px;
+    cursor: pointer;
+    margin: 2px 6px 0 0;
+    min-width: 138px;
+    padding: 8px 1px 6px 10px;
+    background-image: url("/images/sprite.png?1446554103");
+    background-position: -185px -604px;
+    width: 270px;
+    appearance: none;
+    -moz-appearance: none;
+    -webkit-appearance: none;
+    text-shadow: 0 0 0 #555;
 }
-
 .vst-list.long-2 {
-  width: 486px;
-  background-position: 502px -604px;
+    width: 486px;
+    background-position: 502px -604px;
 }
 .vst-list option {
-  padding: 6px 1px 6px 15px;
+    padding: 6px 1px 6px 15px;
 }
 .vst-list:hover {
-  border: 1px solid #909090;
+    border: 1px solid #909090;
 }
 .vst-list:focus {
-  border: 1px solid #55C9C0;
-  color: #333;
+    border: 1px solid #23b7e5;
+    color: #333;
 }
-
 .vst-list.flat {
-  border: 1px solid #fff;
-  color: #2c9491;
-  text-transform: uppercase;
-  font-weight: bold;
-  font-size: 11px;
-  margin-left: -14px;
-  background-position: -210px -604px;
-  text-shadow: none !important;
+    border: 1px solid #fff;
+    color: #27c24c;
+    text-transform: uppercase;
+    font-weight: bold;
+    font-size: 11px;
+    margin-left: -14px;
+    background-position: -210px -604px;
+    text-shadow: none !important;
 }
 .vst-list.flat:hover {
-  color: #ff6701;
+    color: #9c8cff;
 }
 .vst-list.flat option {
-  color: #555;
+    color: #555;
 }
 
-a.vst-text,
-a.vst-text b{
-  color: #2c9491;
+a.vst-text {
+    color: #27c24c;
 }
-a.vst-text:hover,
-a.vst-text:hover b{
-  color: #ff6701;
+a.vst-text b {
+    color: #27c24c;
 }
-a.vst-text:active,
-a.vst-text:active b{
-  color: #ff6701;
+a.vst-text:hover, a.vst-text:active {
+    color: #9c8cff;
+}
+a.vst-text:hover b, a.vst-text:active b {
+    color: #9c8cff;
 }
 
 .vst-textinput {
-  background-color: #fff;
-  border: 1px solid #cfcfcf;
-  border-radius: 0px;
-  color: #555;
-  font-size: 19px;
-  padding: 5px;
-  width: 560px;
-  height: 90px;
-  font-family:Arial, Helvetica, sans-serif;
-  padding: 9px 1px 6px 14px;
-  font-weight: normal;
+    background-color: #fff;
+    border: 1px solid #dee5e7;
+    border-radius: 3px;
+    color: #555;
+    font-size: 19px;
+    padding: 5px;
+    width: 560px;
+    height: 90px;
+    font-family: Arial, Helvetica, sans-serif;
+    padding: 9px 1px 6px 14px;
+    font-weight: normal;
 }
 .vst-textinput:hover {
-  border: 1px solid #909090;
+    border: 1px solid #909090;
 }
 .vst-textinput:focus {
-  border: 1px solid #55C9C0;
-  background-color: #D7F9FF;
-  color: #333;
+    border: 1px solid #23b7e5;
+    background-color: #fff;
+    color: #333;
 }
 .vst-textinput:disabled {
-  background-color: #f1f1f1;
+    background-color: #f1f1f1;
 }
-.vst-textinput.console{
-  font-size: 13px;
-  width: 630px;
-  height: 300px;
-  font-family:"Lucida Console", Monaco, monospace;
-  white-space: pre;
+.vst-textinput.console {
+    font-size: 13px;
+    width: 630px;
+    height: 300px;
+    font-family: "Lucida Console", Monaco, monospace;
+    white-space: pre;
 }
 .vst-textinput.short {
-  width: 360px;
+    width: 360px;
 }
-#advanced-options .console{
-  width: 833px;
-  height: 600px;
+
+#advanced-options .console {
+    width: 833px;
+    height: 600px;
 }
+
 .generate {
-  color: #2C9491;
-  text-decoration: underline;
-  cursor: pointer;
-  margin-left: -3px;
-  padding: 0 3px;
+    color: #27c24c;
+    text-decoration: underline;
+    cursor: pointer;
+    margin-left: -3px;
+    padding: 0 3px;
 }
 .generate:hover {
-  background-color: #ff6701;
-  border-color: #ff6701;
-  color: #fff;
+    background-color: #9c8cff;
+    border-color: #9c8cff;
+    color: #fff;
 }
 .generate:active {
-  background-color: #F7D616;
-  border-color: #F7D616;
+    background-color: #F7D616;
+    border-color: #F7D616;
 }
+
 .vst-advanced {
-  border-bottom: 1px solid #2c9491;
-  color: #2c9491;
-  font-size: 11px;
-  letter-spacing: 1px;
-  padding: 2px 2px 0;
-  text-decoration: none;
-  text-transform: uppercase;
+    border-bottom: 1px solid #27c24c;
+    color: #27c24c;
+    font-size: 11px;
+    letter-spacing: 1px;
+    padding: 2px 2px 0;
+    text-decoration: none;
+    text-transform: uppercase;
 }
+
 .login-box .vst-advanced:hover {
-  color: #ff6701;
-  background-color: transparent;
-  border-color: transparent;
+    color: #9c8cff;
+    background-color: transparent;
+    border-color: transparent;
 }
 
 .vst-advanced:hover {
-  color: #fff;
-  background-color: #ff6701;
-  border-color: #ff6701;
+    color: #fff;
+    background-color: #9c8cff;
+    border-color: #9c8cff;
 }
 
-.login-box .vst-advanced:active,
-.vst-advanced:active {
-  color: #fff;
-  background-color: #F7D616;
-  border-color: #F7D616;
+.login-box .vst-advanced:active, .vst-advanced:active {
+    color: #fff;
+    background-color: #F7D616;
+    border-color: #F7D616;
 }
 
 .login-box .vst-advanced {
-  border-bottom: none;
-  color: #2c9491;
-  font-size: 10px;
-  letter-spacing: 1px;
-  padding: 2px 2px 0;
-  text-decoration: none;
-  text-transform: uppercase;
+    border-bottom: none;
+    color: #27c24c;
+    font-size: 10px;
+    letter-spacing: 1px;
+    padding: 2px 2px 0;
+    text-decoration: none;
+    text-transform: uppercase;
 }
+
 .vst-checkbox {
-  font-size: 19px;
-  margin: 2px 6px 0 3px;
-  padding: 5px;
+    font-size: 19px;
+    margin: 2px 6px 0 3px;
+    padding: 5px;
 }
+
 .lets-encrypt-note {
-  color: #89a40a !important;
-  font-style: italic;
-  font-weight: normal !important;
-  height: 30px;
-  padding-top: 10px;
-  vertical-align: top;
+    color: #89a40a !important;
+    font-style: italic;
+    font-weight: normal !important;
+    height: 30px;
+    padding-top: 10px;
+    vertical-align: top;
 }
 
 .additional-control {
-  margin-left: 17px;
-  color: #2C9491;
-  border-bottom: 1px solid #2C9491;
-  font-size: 11px;
-  letter-spacing: 1px;
-  cursor: pointer;
-  text-transform: uppercase;
-  font-weight: bold;
-  padding: 2px 2px 0;
+    margin-left: 17px;
+    color: #27c24c;
+    border-bottom: 1px solid #27c24c;
+    font-size: 11px;
+    letter-spacing: 1px;
+    cursor: pointer;
+    text-transform: uppercase;
+    font-weight: bold;
+    padding: 2px 2px 0;
 }
 .additional-control:hover {
-  background-color: #ff6701;
-  border-color: #ff6701;
-  color: #fff;
+    background-color: #9c8cff;
+    border-color: #9c8cff;
+    color: #fff;
 }
 .additional-control:active {
-  color: #fff;
-  background-color: #aaa;
+    color: #fff;
+    background-color: #aaa;
 }
-
 .additional-control.ftp-remove-user {
-  padding: 2px 0 0 0;
+    padding: 2px 0 0 0;
 }
-
-.additional-control.delete:hover,
-.additional-control.ftp-remove-user:hover {
-  background-color: #FF3438;
-  border-color: #FF3438;
+.additional-control.delete:hover, .additional-control.ftp-remove-user:hover {
+    background-color: #FF3438;
+    border-color: #FF3438;
 }
-.additional-control.delete:active,
-.additional-control.ftp-remove-user:active {
-  background-color: #FF5F5F;
-  border-color: #FF5F5F;
+.additional-control.delete:active, .additional-control.ftp-remove-user:active {
+    background-color: #FF5F5F;
+    border-color: #FF5F5F;
 }
 .additional-control.add:hover {
-  background-color: #9FBF0C;
-  border-color: #9FBF0C;
+    background-color: #27c24c;
+    border-color: #27c24c;
 }
-.additional-control.add:active{
-  background-color: #c0e60f;
-  border-color: #c0e60f;
+.additional-control.add:active {
+    background-color: #32f360;
+    border-color: #32f360;
 }
-
 .additional-control.remove-ns {
-  display: none;
+    display: none;
 }
 
 .data .step-left {
-  padding-left: 50px;
+    padding-left: 50px;
 }
+
 .hide-password {
-  color: #2361a1;
-  margin-left: -36px;
-  padding-left: 3px;
-  z-index: 1;
+    color: #2361a1;
+    margin-left: -36px;
+    padding-left: 3px;
+    z-index: 1;
 }
+
 .toggle-psw-visibility-icon {
-  cursor: pointer;
-  opacity: 1;
+    cursor: pointer;
+    opacity: 1;
 }
+
 .show-passwords-enabled-action {
-  opacity: 0.4;
-}
-.ftp-path-value,
-.hint,
-td.hint {
-  color: #777;
-  font-size: 15px;
-  font-style: italic;
-  font-weight: normal;
-}
-.ftp-path-prefix { padding-top: 7px; }
-
-.ui-button,
-.button {
-  filter:chroma(color=#000);
-  cursor: pointer;
-  border-radius: 3px 3px 3px 3px;
-  font-size: 13px;
-  font-weight: bold;
-  padding: 1px 16px 3px 16px;
-  width: 108px;
-  height: 34px;
-  color: #fafafa;
-  border: 1px solid #9FBF0C;
-  background-color: #9FBF0C;
-}
-.ui-button:hover,
-.button:hover {
-  color: #555;
-  border: 1px solid #C0E60F;
-  background-color: #C0E60F;
-}
-.ui-button:active,
-.button:active {
-  border: 1px solid #D1D70D !important;
-  background-color: #D1D70D !important;
+    opacity: 0.4;
 }
 
-.ui-button:focus,
-.button:focus {
-  border: 1px solid #90AD0D;
-  background-color: #90AD0D;
+.ftp-path-value, .hint, td.hint {
+    color: #777;
+    font-size: 15px;
+    font-style: italic;
+    font-weight: normal;
 }
 
-.ui-button.cancel,
-.button.cancel {
-  color: #777;
-  border: 1px solid #DFDEDD;
-  background-color: #DFDEDD;
+.ftp-path-prefix {
+    padding-top: 7px;
 }
-.ui-button.cancel:hover,
-.button.cancel:hover {
-  color: #fff;
-  border: 1px solid #999;
-  background-color: #999;
+
+.ui-button, .button {
+    filter: chroma(color=#000);
+    cursor: pointer;
+    border-radius: 3px 3px 3px 3px;
+    font-size: 13px;
+    font-weight: bold;
+    padding: 1px 16px 3px 16px;
+    width: 108px;
+    height: 34px;
+    color: #fafafa;
+    border: 1px solid #27c24c;
+    background-color: #27c24c;
 }
-.ui-button.cancel:active,
-.button.cancel:active {
-  border: 1px solid #D1D70D;
-  background-color: #D1D70D;
+
+.ui-button:hover, .button:hover {
+    color: #555;
+    border: 1px solid #32f360;
+    background-color: #32f360;
 }
+
+.ui-button:active, .button:active {
+    border: 1px solid #54ca70 !important;
+    background-color: #54ca70 !important;
+}
+
+.ui-button:focus, .button:focus {
+    border: 1px solid #25af49;
+    background-color: #25af49;
+}
+
+.ui-button.cancel, .button.cancel {
+    color: #777;
+    border: 1px solid #dde6e9;
+    background-color: #dde6e9;
+}
+
+.ui-button.cancel:hover, .button.cancel:hover {
+    color: #fff;
+    border: 1px solid #999;
+    background-color: #999;
+}
+
+.ui-button.cancel:active, .button.cancel:active {
+    border: 1px solid #54ca70;
+    background-color: #54ca70;
+}
+
 a.button.cancel {
-  padding: 8px 38px;
-  text-transform: capitalize;
+    padding: 8px 38px;
+    text-transform: capitalize;
 }
 
-
 .ui-dialog button.cancel {
-  color: #000;
-  border: 1px solid #555;
-  background-color: #555;
+    color: #000;
+    border: 1px solid #555;
+    background-color: #555;
 }
+
 /*
 .ui-dialog button.cancel:hover {
   color: #fff;
@@ -2789,105 +2764,101 @@ a.button.cancel {
   background-color: #999;
 }
 .ui-dialog button.cancel:active {
-  border: 1px solid #D1D70D;
-  background-color: #D1D70D;
+  border: 1px solid #54ca70;
+  background-color: #54ca70;
 }
 */
-
-
-
 .ui-button span {
-  color: #fff;
+    color: #fff;
 }
 .ui-button:hover span {
-  color: #555 !important;
+    color: #555 !important;
 }
 .ui-button:active span {
-  color: #555;
+    color: #555;
 }
 .ui-button.cancel span {
-  color: #777;
+    color: #777;
 }
-.ui-button:hover span {
-  color: #fff;
-}
-.ui-button:active span {
-  color: #fff;
+.ui-button:hover span, .ui-button:active span {
+    color: #fff;
 }
 
 .ui-dialog button.cancel span {
-  color: #ccc;
+    color: #ccc;
 }
 
-
 .unlim-trigger {
-  cursor: pointer;
-  margin-left: -36px;
-  padding-left: 3px;
-  z-index: 1;
+    cursor: pointer;
+    margin-left: -36px;
+    padding-left: 3px;
+    z-index: 1;
 }
+
 .optional {
-  font-size: 12px;
-  padding: 0 0 0 6px;
-  font-weight: normal;
+    font-size: 12px;
+    padding: 0 0 0 6px;
+    font-weight: normal;
 }
+
 .data-active b {
-  color: #9FBF0C;
-  font-size: 11px;
-  letter-spacing: 1px;
-  text-transform: uppercase;
+    color: #27c24c;
+    font-size: 11px;
+    letter-spacing: 1px;
+    text-transform: uppercase;
 }
+
 .data-suspended b {
-  color: #A3A3A3;
-  font-size: 11px;
-  letter-spacing: 3px;
-  font-weight: bold;
-  text-transform: uppercase;
+    color: #A3A3A3;
+    font-size: 11px;
+    letter-spacing: 3px;
+    font-weight: bold;
+    text-transform: uppercase;
 }
+
 .data-date {
-  font-weight: normal;
-  color: #777;
-  font-size: 12px;
-  letter-spacing: 1px;
-  line-height: 23px;
+    font-weight: normal;
+    color: #777;
+    font-size: 12px;
+    letter-spacing: 1px;
+    line-height: 23px;
 }
-.data-dotted {
-  vertical-align: top;
-}
-.mail-infoblock-td {
-  vertical-align: top;
+
+.data-dotted, .mail-infoblock-td {
+    vertical-align: top;
 }
+
 .mail-infoblock {
-  margin-left: -110px;
-  font-size: 12px;
-  color: #777;
-  border: 1px solid #d9d9d9;
-  padding: 0px 5px 12px 20px;
-  margin-top: 64px;
-  width: 334px;
-  overflow: hidden;
+    margin-left: -110px;
+    font-size: 12px;
+    color: #777;
+    border: 1px solid #d9d9d9;
+    padding: 0px 5px 12px 20px;
+    margin-top: 64px;
+    width: 334px;
+    overflow: hidden;
 }
 .mail-infoblock:hover {
-  overflow: visible;
+    overflow: visible;
 }
 .mail-infoblock td {
-  color: #777;
-  font-size: 14px;
-  height: 18px;
-  font-weight: normal;
+    color: #777;
+    font-size: 14px;
+    height: 18px;
+    font-weight: normal;
 }
-.mail-infoblock td:first-child{
-  padding-right: 15px;
+.mail-infoblock td:first-child {
+    padding-right: 15px;
 }
 .mail-infoblock div {
-  width: 190px;
-  white-space: nowrap;
+    width: 190px;
+    white-space: nowrap;
 }
 .mail-infoblock a {
-  color: #2c9491;
+    color: #27c24c;
 }
 .mail-infoblock a:hover {
-  color: #ff6701;
+    color: #9c8cff;
 }
 
 .additional-info {
@@ -2904,489 +2875,467 @@ a.button.cancel {
     padding-left: 20px;
 }
 
+:focus {
+    outline: none;
+}
 
-
-:focus {outline:none;}
-::-moz-focus-inner {border:0;}
+::-moz-focus-inner {
+    border: 0;
+}
 
 .login {
-  background-color: #fff;
-  box-shadow: 0 2px 6px rgba(100, 100, 100, 0.3);
-  font-family: Arial,Helvetica,sans-serif;
-  margin: 0;
-  padding: 0;
-  text-align: left;
-  vertical-align: top;
-  width: 550px;
+    background-color: #fff;
+    box-shadow: 0 2px 6px rgba(100, 100, 100, 0.3);
+    font-family: Arial, Helvetica, sans-serif;
+    margin: 0;
+    padding: 0;
+    text-align: left;
+    vertical-align: top;
+    width: 500px;
+}
+.login a.error {
+    color: #BE5ABF;
 }
 
-.login a.error {
-  color: #BE5ABF;
-}
 .vestacp {
-  color: #505050;
-  font-size: 10px;
-  text-align: right;
+    color: #505050;
+    font-size: 10px;
+    text-align: right;
 }
 .vestacp:hover {
-  color: #2c9491;
+    color: #27c24c;
 }
 .vestacp:active {
-  color: #ff6701;
+    color: #9c8cff;
 }
+
 .login-bottom {
-  height: 50px;
-  margin: 0;
-  padding: 0 26px 0 0;
-  text-align: right;
-  vertical-align: top;
-  width: 520px;
+    height: 50px;
+    margin: 0;
+    padding: 0 26px 0 0;
+    text-align: right;
+    vertical-align: top;
+    width: 474px;
 }
 
 .l-unit.selected {
-  background-color: #feef9a;
-  color: #555;
-  border-bottom: 1px solid #c0b990;
+    background-color: #feef9a;
+    color: #555;
+    border-bottom: 1px solid #c0b990;
 }
-
-.l-unit.selected b,
-.l-unit.selected strong {
-  color: #555;
+.l-unit.selected b, .l-unit.selected strong {
+    color: #555;
 }
 
-
 /* MAIN MENU COLLAPSED */
 .collapsed .l-stat {
-  padding-top: 20px;
+    padding-top: 20px;
 }
-
 .collapsed .l-stat__col a {
-  height: 0;
-  min-height: 0;
-  overflow: hidden;
+    height: 0;
+    min-height: 0;
+    overflow: hidden;
 }
-
 .collapsed .l-stat__col-title {
-  padding-top: 2px;
+    padding-top: 2px;
 }
 
 div.l-content.collapsed > div.l-separator:nth-of-type(2) {
-  margin-top: 93px;
-  position: fixed;
+    margin-top: 93px;
+    position: fixed;
 }
-
 div.l-content.collapsed > div.l-separator:nth-of-type(4) {
-  margin-top: 138px;
-  position: fixed;
+    margin-top: 138px;
+    position: fixed;
 }
-
 div.l-content.collapsed .l-sort {
-  margin-top: 94px;
+    margin-top: 94px;
 }
 
 .l-content > .units.l-center::before {
-  content: '';
-  display: block;
-  height: 260px;
+    content: "";
+    display: block;
+    height: 260px;
 }
 
 form#vstobjects {
-  padding-top: 280px;
+    padding-top: 280px;
 }
-
 form#vstobjects.suspended {
-  background-color: #EAEAEA;
-  padding-bottom: 30px;
+    background-color: #EAEAEA;
+    padding-bottom: 30px;
 }
 
 #add-icon {
-  width: 45px;
-  height: 45px;
-  background-image: url("/images/sprite.png?1446554103");
-  background-position: -378px -107px;
-  background-repeat: no-repeat;
-  display: inline-block;
-  z-index: 3;
+    width: 45px;
+    height: 45px;
+    background-image: url("/images/sprite.png?1446554103");
+    background-position: -378px -107px;
+    background-repeat: no-repeat;
+    display: inline-block;
+    z-index: 3;
 }
+
 .l-sort__create-btn.restore #add-icon {
-  background-position: -378px -250px;
+    background-position: -378px -250px;
 }
 .l-sort__create-btn.edit #add-icon {
-  background-position: -378px -154px;
+    background-position: -378px -154px;
 }
+
 #tooltip {
-  background-color: #aacc0d;
-  border-radius: 15px;
-  bottom: 6px;
-  color: #fff;
-  font-size: 12px;
-  font-weight: bold;
-  height: 26px;
-  left: 12px;
-  letter-spacing: 0;
-  line-height: 25px;
-  margin-left: 12px;
-  margin-top: 7px;
-  padding: 3px 14px 3px 27px;
-  position: absolute;
-  text-transform: uppercase;
-  white-space: nowrap;
-  word-break: keep-all;
-  z-index: -1;
+    background-color: #aacc0d;
+    border-radius: 15px;
+    bottom: 6px;
+    color: #fff;
+    font-size: 12px;
+    font-weight: bold;
+    height: 26px;
+    left: 12px;
+    letter-spacing: 0;
+    line-height: 25px;
+    margin-left: 12px;
+    margin-top: 7px;
+    padding: 3px 14px 3px 27px;
+    position: absolute;
+    text-transform: uppercase;
+    white-space: nowrap;
+    word-break: keep-all;
+    z-index: -1;
 }
 
 .l-sort__create-btn:active #add-icon {
-  background-position: -425px -107px;
+    background-position: -425px -107px;
 }
 .l-sort__create-btn.restore:active #add-icon {
-  background-position: -425px -250px !important;
+    background-position: -425px -250px !important;
 }
-
 .l-sort__create-btn.edit:active #add-icon {
-  background-position: -425px -154px !important;
+    background-position: -425px -154px !important;
 }
-
 .l-sort__create-btn.edit:hover #tooltip {
-  background-color: #55C9C0;
+    background-color: #23b7e5;
 }
 .l-sort__create-btn.edit:active #tooltip {
-  background-color: #3BF0E6 !important;
+    background-color: #3BF0E6 !important;
 }
-
-
-
-
 .l-sort__create-btn:active #tooltip {
-  background-color: #D9F210;
+    background-color: #D9F210;
 }
 
 .noselect {
-  -webkit-touch-callout: none;
-  -webkit-user-select: none;
-  -khtml-user-select: none;
-  -moz-user-select: none;
-  -ms-user-select: none;
-  user-select: none;
+    -webkit-touch-callout: none;
+    -webkit-user-select: none;
+    -khtml-user-select: none;
+    -moz-user-select: none;
+    -ms-user-select: none;
+    user-select: none;
 }
 
 .search-input {
-  background-color: #fff;
-  border: 1px solid #ddd;
-  height: 21px;
-  line-height: 28px;
-  padding-left: 7px;
-  float: left;
-  width: 74px;
-/*  visibility: hidden;*/
-  -webkit-transition: width .2s ease-out;
-  -moz-transition: width .2s ease-out;
-  -o-transition: width .2s ease-out;
-  transition: width .2s ease-out;
-}
-.lang-ru .search-input.activated{
-  width: 70px;
-}
-.search-input.activated{
-  width: 130px;
-  visibility: visible;
-}
-.search-input:focus {
-//  background-color: #e8fcff;
-//  border-color: #75c9c2;
-//  color: #333;
+    background-color: #fff;
+    border: 1px solid #ddd;
+    height: 21px;
+    line-height: 28px;
+    padding-left: 7px;
+    float: left;
+    width: 74px;
+    /*  visibility: hidden;*/
+    -webkit-transition: width 0.2s ease-out;
+    -moz-transition: width 0.2s ease-out;
+    -o-transition: width 0.2s ease-out;
+    transition: width 0.2s ease-out;
 }
 
+.lang-ru .search-input.activated {
+    width: 70px;
+}
+
+.search-input.activated {
+    width: 130px;
+    visibility: visible;
+}
 .float-left {
-  float: left;
+    float: left;
 }
+
 .float-right {
-  float: right;
+    float: right;
 }
+
 .display-inline-block {
-  display: inline-block;
+    display: inline-block;
 }
+
 .width-100p {
-  width: 100%;
+    width: 100%;
 }
 
 .l-sort-toolbar table td {
-  float: left;
+    float: left;
 }
+
 .l-sort-toolbar__search-box {
-  float: right !important;
-  padding-top: 3px;
-  padding-right: 0 !important;
+    float: right !important;
+    padding-top: 3px;
+    padding-right: 0 !important;
 }
+
 .ui-dialog .ui-dialog-buttonpane button:nth-of-type(2) {
-  -background-color: #dfdedd;
+    -background-color: #dde6e9;
 }
 
 .shortcuts {
-  background: rgba(50, 50, 50, 0.9);
-  display: inline-block;
-  position: fixed;
-  left: 50%;
-  bottom: 0;
-  color: #eee;
-  width: 800px;
-  border: 1px solid #333;
-  font-size: 13px;
-  z-index: 120;
-  transform: translate(-50%, 0);
+    background: rgba(50, 50, 50, 0.9);
+    display: inline-block;
+    position: fixed;
+    left: 50%;
+    bottom: 0;
+    color: #eee;
+    width: 800px;
+    border: 1px solid #333;
+    font-size: 13px;
+    z-index: 120;
+    transform: translate(-50%, 0);
 }
 .shortcuts .header {
-  border-bottom: 1px solid #333;
-  height: 43px;
+    border-bottom: 1px solid #333;
+    height: 43px;
 }
 .shortcuts .title {
-  text-transform: uppercase;
-  color: #ffcc00;
-  padding: 7px 0 7px 14px;
-  display: inline-block;
-  float: left;
-  font-size: 11px;
-  letter-spacing: 3px;
+    text-transform: uppercase;
+    color: #ffcc00;
+    padding: 7px 0 7px 14px;
+    display: inline-block;
+    float: left;
+    font-size: 11px;
+    letter-spacing: 3px;
 }
 .shortcuts .close {
-  background: url("/images/sprite.png?1446554103") repeat scroll -408px -469px;
-  cursor: pointer;
-  display: inline-block;
-  float: right;
-  height: 32px;
-  padding-top: 11px;
-  width: 46px;
+    background: url("/images/sprite.png?1446554103") repeat scroll -408px -469px;
+    cursor: pointer;
+    display: inline-block;
+    float: right;
+    height: 32px;
+    padding-top: 11px;
+    width: 46px;
 }
 .shortcuts .close:hover {
-  background-color: #000;
+    background-color: #000;
 }
 .shortcuts .close:active {
-  background-color: #55c9c0;
+    background-color: #23b7e5;
 }
 .shortcuts ul {
-  list-style-type: none;
-  padding: 30px 20px;
-  display: inline-block;
-  float: left;
-  width: 360px;
+    list-style-type: none;
+    padding: 30px 20px;
+    display: inline-block;
+    float: left;
+    width: 360px;
 }
 .shortcuts ul li {
-  padding: 5px 20px;
+    padding: 5px 20px;
 }
 .shortcuts ul li.step-top {
-  padding-top: 30px;
+    padding-top: 30px;
 }
 .shortcuts ul li span {
-  color: #48F4EF;
-  display: inline-block;
-  font-weight: bold;
-  padding: 0 20px 0 0;
-  text-align: right;
-/*  width: 140px;*/
+    color: #48F4EF;
+    display: inline-block;
+    font-weight: bold;
+    padding: 0 20px 0 0;
+    text-align: right;
+    /*  width: 140px;*/
 }
 .shortcuts ul li span.bigger {
-  font-size: 18px;
+    font-size: 18px;
 }
 
 .description {
-  font-weight: normal;
-  line-height: 25px;
-  padding-bottom: 45px;
-  margin-left: 50px;
+    font-weight: normal;
+    line-height: 25px;
+    padding-bottom: 45px;
+    margin-left: 50px;
 }
-.description ul{
-  margin-top: 15px;
-  list-style: none;
-  padding-left: 0;
+.description ul {
+    margin-top: 15px;
+    list-style: none;
+    padding-left: 0;
 }
-
-.description li{
-  margin: 10px 0;
+.description li {
+    margin: 10px 0;
 }
-
 .description a {
-  line-height: 30px;
-  text-decoration: underline;
-  color: #2c9491;
+    line-height: 30px;
+    text-decoration: underline;
+    color: #27c24c;
 }
 .description a.purchase {
-  color: #FFF;
-  background-color: #9fbf0c;
-  border: none;
-  border-radius: 3px;
-  font-size: 13px;
-  font-weight: bold;
-  padding: 7px 15px;;
-  text-transform: capitalize;
-  text-decoration: none;
+    color: #FFF;
+    background-color: #27c24c;
+    border: none;
+    border-radius: 3px;
+    font-size: 13px;
+    font-weight: bold;
+    padding: 7px 15px;
+    text-transform: capitalize;
+    text-decoration: none;
 }
 .description a.purchase:hover {
-  background-color: #c0e60f;
-  color: #555;
+    background-color: #32f360;
+    color: #555;
 }
 .description a.purchase:active {
-  background-color: #D9F210;
-  color: #555;
+    background-color: #D9F210;
+    color: #555;
 }
-
 .description a.cancel {
-  background-color: #999;
-  border: none;
-  border-radius: 3px;
-  color: #fff;
-  font-size: 13px;
-  font-weight: bold;
-  padding: 7px 15px;
-  text-transform: capitalize;
-  text-decoration: none;
+    background-color: #999;
+    border: none;
+    border-radius: 3px;
+    color: #fff;
+    font-size: 13px;
+    font-weight: bold;
+    padding: 7px 15px;
+    text-transform: capitalize;
+    text-decoration: none;
 }
 .description a.cancel:hover {
-  background-color: #2c9491;
+    background-color: #27c24c;
 }
 .description a.cancel:active {
-  background-color: #5f9491;
+    background-color: #5f9491;
 }
-
 .description.cancel-success {
-  color: #8fac0a;
-  font-weight: bold;
+    color: #8fac0a;
+    font-weight: bold;
 }
-
 .description .licence {
-  padding: 20px 0;
-  color: #2c9491;
+    padding: 20px 0;
+    color: #27c24c;
 }
-
 .description .licence input {
-  margin-left: 17px;
-  width: 137px;
+    margin-left: 17px;
+    width: 137px;
 }
-
 .description span {
-  font-style: italic;
-  line-height: 45px;
-  padding-top: 20px;
+    font-style: italic;
+    line-height: 45px;
+    padding-top: 20px;
 }
-
 .description .twoco {
-  font-style: italic;
-  line-height: 15px;
-  font-size: 12px;
+    font-style: italic;
+    line-height: 15px;
+    font-size: 12px;
 }
 
 .ui-dialog .ui-dialog-content {
-  padding: 10px 26px 30px !important;
+    padding: 10px 26px 30px !important;
 }
 
 .helper-container {
-  float: right;
-  height: 293px;
-  margin-bottom: -450px;
-  margin-top: 459px;
-  padding-top: 3px;
-  width: 563px;
+    float: right;
+    height: 293px;
+    margin-bottom: -450px;
+    margin-top: 459px;
+    padding-top: 3px;
+    width: 563px;
 }
 
 .context-helper {
-  text-transform: uppercase;
-#  text-decoration: underline;
-  color: #777;
-  font-size: 11px;
-  cursor: pointer;
-  font-weight: bold;
-  float: right;
+    text-transform: uppercase;
+    color: #777;
+    font-size: 11px;
+    cursor: pointer;
+    font-weight: bold;
+    float: right;
 }
 .context-helper:hover {
-  color: #55C9C0;
+    color: #23b7e5;
 }
 .context-helper:active {
-  color: #ff6701;
+    color: #9c8cff;
 }
 
-
 .cron-helper-tabs {
-/*  margin-top: 30px;*/
-  border: 1px solid #d9d9d9 !important;
+    /*  margin-top: 30px;*/
+    border: 1px solid #d9d9d9 !important;
 }
-
 .cron-helper-tabs a {
-  color: #777;
-  font-size: 11px;
-  font-weight: bold;
-  line-height: 30px;
-  padding: 0 12px;
-  text-transform: uppercase;
+    color: #777;
+    font-size: 11px;
+    font-weight: bold;
+    line-height: 30px;
+    padding: 0 12px;
+    text-transform: uppercase;
 }
-
 .cron-helper-tabs a:hover {
-  color: #ff6701;
+    color: #9c8cff;
 }
 .cron-helper-tabs a:active {
-  color: #55C9C0;
+    color: #23b7e5;
 }
 .cron-helper-tabs .ui-tabs-selected a {
-  color: #ff6701;
+    color: #9c8cff;
 }
-
 .cron-helper-tabs select {
-  font-size: 15px !important;
+    font-size: 15px !important;
 }
 .cron-helper-tabs select.short {
-  background-position: -388px -604px;
-  min-width: 30px;
-  width: 70px;
+    background-position: -388px -604px;
+    min-width: 30px;
+    width: 70px;
 }
-
 .cron-helper-tabs p {
-  color: #777;
-  font-size: 12px;
+    color: #777;
+    font-size: 12px;
 }
-.cron-helper-tabs p span{
-  padding-right: 15px;
-  padding-left: 25px;
+.cron-helper-tabs p span {
+    padding-right: 15px;
+    padding-left: 25px;
 }
-.cron-helper-tabs p span.first{
-  display: inline-block;
-  padding-right: 15px;
-  width: 100px;
-  padding-left: 0;
+.cron-helper-tabs p span.first {
+    display: inline-block;
+    padding-right: 15px;
+    width: 100px;
+    padding-left: 0;
 }
-
 .cron-helper-tabs .button {
-  width: auto;
-  background-color: #55C9C0;
-  border: 1px solid #55C9C0;
-  text-transform: capitalize;
+    width: auto;
+    background-color: #23b7e5;
+    border: 1px solid #23b7e5;
+    text-transform: capitalize;
 }
 .cron-helper-tabs .button:hover {
-  background-color: #5BD8CF;
-  border: 1px solid #5BD8CF;
+    background-color: #00d8ff;
+    border: 1px solid #00d8ff;
 }
 .cron-helper-tabs .button:active {
-  background-color: #4FBCB4;
-  border: 1px solid #4FBCB4;
+    background-color: #49c8ef;
+    border: 1px solid #49c8ef;
 }
 
 .context-helper-close {
-  background: rgba(0, 0, 0, 0) url("/images/sprite.png?1446554103") repeat scroll -408px -469px;
-  cursor: pointer;
-  display: inline-block;
-  float: right;
-  height: 32px;
-  padding-top: 11px;
-  width: 46px;
-  filter: contrast(50%);
+    background: rgba(0, 0, 0, 0) url("/images/sprite.png?1446554103") repeat scroll -408px -469px;
+    cursor: pointer;
+    display: inline-block;
+    float: right;
+    height: 32px;
+    padding-top: 11px;
+    width: 46px;
+    filter: contrast(50%);
 }
 .context-helper-close:hover {
-  background-color: #aaa;
-  filter: none;
+    background-color: #aaa;
+    filter: none;
 }
 .context-helper-close:active {
-  background-color: #999;
-  filter: none;
+    background-color: #999;
+    filter: none;
 }
 
 @media screen and (max-width: 950px) {
-  .helper-container {
-    display: none;
-  }
+    .helper-container {
+        display: none;
+    }
 }
diff --git a/web/images/myvesta-large-white-130.png b/web/images/myvesta-large-white-130.png
new file mode 100644
index 0000000000000000000000000000000000000000..2007b0bcf7cdd0506f97f510834aee84386c42b8
GIT binary patch
literal 5284
zcmZvgcRUo1|Hsd{<LvE>h_mi|kdZAMcZah_A(EZVg%S~GWMyZTtn4j9_RbdBdy9^;
z_pjgo-#=dO*X#9o|Nr{q8KI}6Mn%p>4gdhCG}KWB{~Z5MXb8!_8%9w4^UsJp4b)Ts
z<->P&{uR(Oq&5-&sEVbyvI76>WFG3Ko&W%K=l_eS*S*jd0AQ5WKp~BMEPj6=OS*$*
z?e()i=_71T+t$dod9aDjlc|UzQ5sydK!`Oc7%mM{0MZ-9nJFvl#erabbh1gRsB+~b
z&2o>W=lr~wAtZ$N+l;gQ)opPBe{J(ZO^v)}!s*_v-|g>ALS{MPqUEBz*z_JInnldI
zE1Zt!e+7g1K37eZlbKI$*+cfLq!CX<d`Ipudc6j)b6j>Q(cAc=zejRe>Hgd_uZpcV
zP%v!LX)?J=PNj2a8c9&O@5pZR0F}ao#4kO}s0csoitSSCW*f5(l`;F^qFB~mwCcYa
z+l5?JT@^NndE{zSYU8Crmj_as+=NvP-Z^MOuZG>Y6)5A*7DW%g_r5X+sqwrNo8*ps
z1VXgyxmqxgrW22u2nPrSw7(XNz703iV6BAx`;!aeLzav)n!5s43s&!Tk&ks>!c_M8
ztT*q`KBc=&l_!BPH@FELI#TJSCU*a^HfVZ?{gYKEHYpBcLSpqQhCX#yZ3Zg+_zw-T
zk7uTXAy-qn&R5M~_}gNi!fF0RIKA2+U6~otyaeCl4V8H6_u}(AZ=$Q}mdPc<b5SLr
zEUXJNG#n1dJ%2_&o4ZOed;8TV?JQrtvR<n<cKpQH`eQizaweR7DnX-3xRE*ETmgxl
z-r$nLIKpk|)QMt`ls2kNZ1Z@gh0z9`DJaZ|XAZkklaP3|E)*wL()B57Djd#)YhUVK
zKto5cL48>3QnZ&I2m#nxX<3!-%F=yfK5uqacIHnPrLuRB(|7zaTYp{y-y=B6T(tgh
zPyQ@J{lh`|SzP(`{P=*2R0eHzL+nBrA$X3*0+!hELo%Gg+r4yUi=;McZUHmjb?4y8
z(XLa<jR^T~MkHR=B*PR|6$s`4iLITzwm1r?`X-~sdzP1cP$^@+-qJ-LjApk4mj1vQ
zkeKVkC&-k3+J6Y|(E2%W_~E0<l4^Xb!1H~16yqHVV@ehPw76{RJj?IT-V(De?N=th
zDD%$dh?E;{i=5q0W3});FPu%4eE-{O?Wtz1JD)H8)z~9_OdQzXj1kyZXBr9jHq{0C
z{=+8$Zm+(a*?C%0!LQ<WTM<F`x8-uK{*ze=3`>cC{8(kh$&U$35tV;l6Drg;7mlGP
z<HxZxL+qt%FOzPocqZt2omG4B<43Dq2ypg37w`O!sjd-}b(&dMc^5zF==Vlw<iO!w
zs~Al1*tzN-srdVM+P$IU6DOaYGGGgzttUJsWMal^TThiRom9+YMw=w~wkCZ_IaO?1
zpVbi<Y2~Q<2MSB?Cr)@_0jmoS{QLL$*h65T-!cm>qy!YW<w>Du)%N}%+7d5Uz+&ab
zOIY4dXCXCwTq+5{*Y`dIUf=_A4kI%5{7ca0zeKEG&Q<qqKfujxMTIV=wEH)dcVn4Q
z-!jxkr<^>aZxJ+F`@Fd5^YvgTw=n8ea-@L6#NWRhS$==pcu-nQJo^q~;G4t=1~gZj
z7qQOZFNXzrrFf<g3wqD95cR<C$MO!KxEYknlB`xn#<lL^2&(!+1B|=@m3P;t6+Y^2
z`ylm&IKMeZn=fb4$@j>;8aj`sh}peuPF$Ens}0gGX~WeqlL(b{eQ)eN!{vly;Q?nK
zQIMs7*sP77QHehR7w6C_t=a1l94`vRnkX<r3EcGXzqF`xhvO31z2CsZPKpF{lQ2?v
z-SU~9JVWhy$#x4%?w=`GK3iz}Z(60%h`gLu#(jPE2|<-?>NamWzd(eq<KSyvuLql~
zOZ|RX%L+8*lxUwPs5Ci_+C~~Ts&UFb{ENv`Ie1xlZp`!g+wUgbW!?*Ku4A3EcJ;8O
zf^B#=C{Ahh{=DWJPh}CcsciFC+iZ#w2LLxezb7_~_bD~VNbkPQ8k@aF%dMH>^5kv>
zX00vo%ju_HH!Iffx!#hZ%!ycua-p<4IS>fYvWM{ZWpf!CL-^>c1FVG8dd<>BSEE%p
zLN05L<7rSyLl3o1Iu~Ur-5!Mkajl~Dks6mx#w_N>RNGskw3cRkK4$w~hHgqU9Jv8D
zq%@D}vi!2FegQ92b)A*TWxJLn1E_^xv}=wBJ;5i1)slf;fa2kq6!`u_6sKHjB>kJc
zt^F|k*7@ktaZfRWi$G{l*2HkILb*QP^tXt)^hp(g$qs#kus&x=qYP9TF{X6#G&|4{
zPovaisG4NF7MkDp0z}d>bBV*8B*`@d#_ZY859!aw5%dmuMFh$V5hm<c24N2}lklut
z5XdJx4&Y&<^_Cbvz;V5xr$t)^hI?Cdmf<LqfFx>Pz(niAuw=lgG4_JWB^{z-!+K2C
z>zcKQ@bSR&0u`aDG9gIqAe~xo@Q;BAdfuR?MU~}kV4k<Dj0{F1K8RTn&^)zrALJV`
zFMP4n{sAb|<ePyq*R!CV>zvj(P7`umQ9a6BDA_txS(GnUWz0J=F9hqPK5A3@b~&!l
z_sceOG9X?yw@yGg8F@40KvMt7(U)_O6-iy*+tOzzr(>@NfiQVOdNx8hK{F9UOIuhj
z4q%-K9$Nw?-XgCZz?O}$yJ<0yKTvb4kf9Z#Kd47?w<JfJPFIU3bxXco2m=i?>oB@<
zp-C-rwq`80GA9%fAC4Omz320>*_L^Zs&N#wGW;?SYZ|i#-k<+5rTR!03rsfZs&G-8
z7U;cMKZztR586)9sad+pR~IJw8tCqcOAJA^jT<V94ypqg>7pcv?M9Qmsid41jXspG
zN%ckHy=hE{4OX~H2ioq>rNSV8ueEsxwdJ|b<sMNw|DsM`=<4+fXf(kddz1muZD0_R
zj#NpTZ*Z0FUc7C*lP;d#T@*cw%?m^aeFtwi4>NVx<akT^Y0{osW&0=fC6A;Xk@s*j
zpS_Ait?%gbV#I6m4Z{3t&x0JstpdGskFGz=Hj7Wa(1i(>c?G#dH4Fzvb^d6RzJI}@
z|LhNU;*d|&W5x5HH)hFmIqJIHE{|fKiy>`9nRv!4#RA(EYv`F^`<6jwJnuoN&%P>X
z|8BEa_vCFW3{St*uYsfbyU!m76TH7k9YN7z&@QU_)`HKJ?cGhEv&JpOq#=!YkfgYX
zEFwA*JFNY63{#0MxJkgcd5uH<wsB$tT%(hAzobdEQTB$v!rb<q3UWIgi>q`{6C9Xf
z@n^Oroq!UUujwn}J@FC6X|UWeWpZVwftT*1Ep(Bfj?=Pz0pkLUwUskp6A!|JQS`J)
zNes*QiW$GBFd?;pvllHgY1{|t^_lU0knjZl(g?wX?s%mK8F`u6QhAZrSWkc<AlIza
z*v8wR)$`7SUtZn)TE@1R<j8k-SXHIFLJ8JVbj{v9Y8?^7kd$L<lEq3d-C=`t39u!b
zSV7G6>k1@G+NO_t8aM9_xm*0rGS+{Sp82!s3uuHQlQ*F{oAw1KXZ=GA&uec*w;n<8
zAuU9hJjp8dy=7W$6m07d>zHjL4C~kapuD+3k`S%KAAyhZ$9A(cFLA7X6dCC6FJy*(
zT#1)-DHrCmxMB;UX9XSKC`FKb%0CP(aglQd3KNs1+^rM^{y9GLFn?QizLmXuP{8Oe
zI${!IL&K?8Q-P5$c@Lo!F64YZ<Vcm4fA{IZ{x`#C!i}BZoW83v7)uJ<=9$)~$G{rE
z@UQ*#C32yjgZIU6X)+Tk<;*013qDK9zN}z2-PR0Eenkb{+D(hRCQ}w$w&)Ae;7`$l
zE_Xx%U!(|evkZ>z2<3Bqdh-Ttmb-Hvi87tDBJO45R<DOpGO$tpI{DFX<yC#sa7tw@
zKP6V#Bwa3Ga*Lr8@Qs)timiA(;Mag_k$ZT9FwHE~c_jXqic>}l8Fg0zFpp7mN&$q6
zl~(ld=7L_lzi;APl6NdrZ%*>|qdZX(flOrTzfoDMQ0O4bmc8%Hpu7nv@9ERUg4cfo
zpV%*+v=QX{F}FHzSzIB&#1SA(pdHSb^&_`+qr}B<Nlq2~Q=KGXG~Kbb16QT)S{_h@
z%XCa^>?{1Gz0ui^_om8?0}_NxoWFK#vi+i|OYf_eV|-nP>~A|1D^Z_gUbAD`J4_+B
zW+RzBCVD>j(HRZ_wSTF+jI*q}5^EoQ<T`UCv&MEbEvdn?v~o{!@UmoGLWTFsr<=Z&
z{9Lh60H63+aVb%}e9MnS&4#nZl>$zQx>M$Nv#0B~q=-!jrWIuBsiZAEn6cDk)S+uh
z)%3eW8cC+7K->+Pm@VUjUC<=EAcSTpZ6Y0@*`l#eJ<2+^K-OTvI_ANe5UMsp;Hec=
zmp)OoNmxXAj&h~?sH&4Hb<B$(WF!Zq=c3MboQ!P9VNii=D+&DOz{2$^oNI*rk(g!o
z=T7P>XC{|fdoI4^|GFq7>8~V;LS9-uEWVg`Ee`vctxT1c+=WlJ)95Bkax}H*DdtZ*
z>e}0IEy)*hKBUspu6};gR;_p`fO)!%xiHD0x_Yw4JZnnf4dkC0wu{>^p^!A&!aF*C
z&7y1m)c5PtK-YM8U%iU!-+nh-OwbQQ=Ag^^L_Ly*Ekq-gO}b|qalhrbI&5z#T%Zgq
z{orS5G|?CPxu(+$XvXW${H80~>~cjfY>)F#?Y1&&%rqx!y#3goCDB*znPsZKQk&Yp
zS?}Z-Uc{W(>;@q0^5lXZ`cy<z@Sb0HI?iUB`{8}dmgcmhn)1yv2F6Ru%Q!CC#fhM{
zTo_g`xw@2vhgC^5bE?B6>Vy#!c}0H*%n#ld@_(_w)m>01*CQ8n>5=rbXzW|+(d;j<
zgt7gjE$w?Mw(1-P(mj_3OgPKB;eoo$T79&urp|ThX@0OsLM20@liI7LB6f+PfiIT0
zuoK~u1lGU%hgK54DODvgX*p%waG$Cb)tz7!3&h+yk<Bbq(>gN*j@aEymv9p<HCzzn
z$x4{skYofeKUNkp@)&dHWcz3WknX-NC<Rsh^d&Z?D@+CJ{~NF}oeZu8Qor0{=@aU`
z3Z!G~vl^a}>E*zI{&%}l@wc*U2N~{*C5xAC9IT8|s7=`nVZ);(p*NOEEAM(jHJ`d)
zZId)`Ta*3xre%}={j$<7qFh~_PLREK!o|@LnFNp+p%;3|X;oAWF_ZRaKb<$f74r_5
z2F4KZK0U(!eS!zQ6djYL&8=kV%~7Swi4x_QP4r+2N*eGNi<>QW>Ws2mJlwHtHL4h-
zA$?~oxYO9R7kE*v$Ro%!ZEDoVcgMK(?UWj`B~`VPC{BBJpxjcXLS6dNWPWkcgjne7
zhSV#e=2<hu^P9E0_cKKl?so*i)5^B6Xi2hmyS4TRvEcb|&$USFXY7u0-Ea}q!Y8gF
zZ>7>4n7xNHn+b8LP)W6m+GsCm`*U0QEJ19Y2^o-np-3l{K8&Z(a>HWvMz%o)oh}uq
z^Do-IRB4}|%!B#UCjO)a6gj#3RB&5lh~OEV)#{>)XG+0_`&>_+PM&f$P}bDl+qJuF
zS^DDh0oZe;?lfFiTWe59e^h|6HF&GR$rv`HFzYqs^v%E>00&OuDRZXL@GA<gd2%eY
zTb5q*7{Hu9TTd=paeyCQ5V8=4d6d5_sY<~{<nT8|qGLf#BIZ$n;#n(<k?^BbahK1S
z0KxeC9Sd1aC(VgrTJ?(q`2{<SyN6;sR{<+0NkVPkg9Uv2j^}#hvu@%0qm5M{pY;)`
z7G<th&IxCawfYvGbRUL1|DhkUne)LXuk8$z<BE@-M1y(0CzqX50Uu)X3xyZIyLJWw
z<5eD147*EPF#+CP(ky>f6OB9|ufm@4ws1dqu|KrO*9)Jkfz2z*_iLWdm-|u&`;#my
z8oty&I-NrR<HWy&Ct1GBU@=+jmA76dEG}Nx9S_eOWX+CAcCy-mu<OU(jmgl7fRixp
zjcemfMX%P$L=s(}s=CtCqJO}`wv3oRF~&;AIw-~By6aDH&%1@nrb%1sC^Pn^DK<Mh
zPYT4Ze&5y~$wQzanH}y#{WT_<IOfN9HS5|UxAoNZQuPQ-gIsuJ)3kI<Wp|vjc3`oT
zo=>$9e@<l{p@ZY-W57D=$$0IR3PLEe$}%(fG3g^#l3gC=e@osCiF}+hEVFh;B>Md(
zctInt2OelM25HUM{XGI8?-}e=@L|Ewd^Z2JFlc7kpXOsl9rUKKJBJ>_kGI9>^GmKY
zSNR6Loci0aSQ**)zF+ym2%$=wTwI38UApKlAs(QQ_Qi0ztv^R7x4;U0f=WYD@nbE`
z!!yP9q<snupsyN$_I_K=#xUr88a>`^5P#~dcNjrcRP%+Up$6VCq!#Yu%JO_<g?iX)
z`qYb~J+<szC8xMiUt>%IiQzm$>TS4D2R>i5zb#hjY=vTKY$neYX~}v<R7jNor#^7z
z2gTBxWOXZ;5YV350tryTOCN)>Ke4iz38A=}5OT5xRj0zW2?By+spL?rybDeTW@-;j
z0*((CdPy={-r#!+aT0QJ-;`!s3PPTGWvgM8xg*X(XNHRmK=wK|N#R)liXgkqD?bIO
zEv1#d-!wVfAia|1if_`}W17_4t71;FhE^GE+d5Hlle<ZQXIxGTR?#9k4p9JGCed3V
zsn5zPZ5XT?dH2Y)IhV&IT$uu|H3@r86Hr}il$`a1jStKvf^2{&e{UY~x^5k=X-TLD
zqm{*aLmFaOo~WfTa#I>m19<{IDMzpoRR_dg$bYuKNdew|C(eF?Xor4aexH@rff;=&
zO?t&D|Hv>gQ@?}nvQl$HC!QX3tE(FAmSc+s7?2P;yHp={#9Vc|ip7cR6(ZBjo#{a$
zPSuRr0-8OyQ`>atZAW$1O8&geQUVUz0Jzy$(l-Fg+i~WSR$2(+LmBZ!7J?D$n~Y9p
mP`T4y9P)qBx?RT1Qzf^!l)QvJ74?5)5ukzAL6xgm;{OjrI@=up

literal 0
HcmV?d00001

diff --git a/web/images/sprite.png b/web/images/sprite.png
index 456ab6f8d441083a881bcfca34a77bb118374c79..061392c3677cc4e7d9659d877a407891e538dde4 100644
GIT binary patch
literal 35005
zcma&O2UHWy`!*bUmm(dcccc?~5fPClAS8qyML>u&kzPbPB1JHC1w;^&00E>*uhLaa
z=tZg$1nJV><te{^dB5+R_Z+fic6MfVW_IrDy6<aAFuSc!N6kqM0)glZZr!*80ukXs
zAmV3~<UmS9ORy2JBl5kYf1PNe@9Goagv$GtwJ!)nbNS*&1j@-{2Z7@68QjpZ49r_^
zrpvR31Z`@6L*t-iO|$q~hgV<OJm(ZY71o@M4vZ7t`G1>zYlEukrX|M`r==PYZ{J(V
zVAFX)d!3B=731fg2x9>vA<`A$1WNvF(9`FsvX?2nh~zJ)U6T*8K3|;(DN`V<S0AW`
zR5b6;5(ZDg^G7y)hbJmV@>E@0b}*T)V6YAY>EC}Wg<oIU>Je#ivl<adir#?YdKTQO
z8OT)Bcqk+JK7|osK$1Yt`{p3YHfrDwYvwj;>~-K~Rx&Ix2H2<S{a;xu?})u_a`~tL
zKkYB7P$k1J#t}g&BMZbUgsz?Z=)YTuI7zK{`GM<b5B}OHS9#oacPq-HLY)X-l+S!`
zRfm6gMvkhzajzjWTDLqnDmd7a<x+!0OJq(AQ`liaUqu{mIP9&r*Ox8jw6svsk9E(f
zi(h)1(BX?meo6MGF_lBxf)6E^y}x$gnp;CIwK2noC^4e>p;eSeC!?lJb<z)6TG#)S
zj?V=}2JS9gZtf+loH=@hjH{Nb3~cHYB@($wXx07r!)0L5l1^)3FFv2ciTP{qPWJbn
z8hGyRr^xohZ_c9w*PJW<tjz_bP=C;Vc>b1R;tfAFR^)P9PJUXrj8r?$kQXgnZ$ogZ
zA+?HNflHBN^4`m<Y_|S(T1b<5BEoFf^on0Sc-hgJq<3_Lb*JT9#(bWFWb(*%$mbu#
zu$}b2fKg(*vLxzSkQKTpQmTywP6pedknDVU_pq$m<=N<z)~55@hqFD$<0y`-0|hus
zbQJb@dx9+?v$wZ<B*Q<mZb*Iej-3A=Y`qr_h0>lRIk;NnG})EreDJbPQ~9K{e!B`S
zc>Z}Va8J35PI*S6XPGd>g^#ZW;d62%;F|vP7GA>2My>DS*^OKC#lO4zHJTXK+vIzu
zGnE7LAx8$bI((K#am#bf`N6glxkOZYozJL@GX2iZYWbgd3OlXaV3wUjHCXHKn1+SQ
z@2=gWrWi@D<J)6QKELNLZFTaV#Pc|^4rI#6g#1h+bURzwZ-!apr*{;#W;XJlW$ypF
z+-a(1uC-EVV%tU2nUd*v{`+|5-fDZ)z0pRZ%3arkXU&f{OuY^rI#0G_u3Hdcm{7ib
zS8}xT0=V5;ip1yL!*~$X^)B)$U@|)*Xav|1i)yhT7t*!ZD|$4Fy<|*gvEjSy1R0gf
z=N+`+@IO9i6=Tiw=WKp0MUMAkQhyzG-7aMBKm+SPm}~2E@(j|-5aO>XIDELkHn6%m
zTVs;v+b_O*lz49_wzqq~EG1s1e^I7+P0i=WXUT;HvK@_7?Zb{sm0M4bxfW8MnCA$<
zPrX5?^_}fx!Cwd87|OGm<7J}}E@T3<-!CTBVI;(B#ThHF5oJcV-?=TfW=HPvyS~C6
zZ@_yvvoI+s&FbN?)8+dyAQ60UW^Bhugn#|<Si>y*csn`u7#f9Z9lqrAeZq08t<i1D
zcVTM}{co)vR742<SsxGvgs@iySww&Zv5)dm{bs5(%d2+_FrTE|TGe9P`&UVILi@#k
zEgUw7=xy59CG4EfAr~UXMax^)2s{k*yx|ayy>AxI6^*{{AGFTPR~%Z!oBJI6s*8U@
z0V_j1i}16dgsrYz(I+w+BE>wQ9ya^y<&$;79UC;zgWYdntK8LGvLvw3{2k$~#H8GA
zUsG)f&z8O0a$09;us_8zLD!ay_q*8~uYTNI)tpsb^$XS2sNMl@((EjJT6}Z*&4LiQ
zmt!Q&c;(6!5Q5f(3|mF{_DO|qO+1k?*)^OROfFE|>7VCAX+b=x%W<wKTb7i0Evw<c
zAb2|G?%U&!8t$19jp0As<m5j%gcj0vt(CyT=11)hwCBToUI)3Gg}x_;MG?ag2vh`)
zj0FTi!@D2naxa05iSV=vP)~9whp1~o%@K^FKrM9dscE~@)W~_`xNs|Fz^s3Dh8ubN
zk+aWMH(UBhdWCBO%fab&ZWXL<-V=N_SOJedU)1gzYuN|i$H<XlSKbj9xYJ?87+$1*
z?eOmIhb&AI%6A4w>`4f^^qPFJadp8ftL0Dkn&@PnP1XI{9vtzALcYV7M$*$-Bimzj
zkkuCC6*-&zy<4hx8D4`4+;UaE-v}0`F1?4~HZ}c+(^V!-+b5}i`q^6MJ&w;(LYf{P
zpdHWTk6=<%@F7#6$EacEUuE@+W7gIu-o-17sC6o6n^IY!;m)a5J-r7ZF2&Jk2v+`<
zb<+`9E|RGn0*44b#hq9VJFq<DD0s+&d0S<HER(l91aGFeE1ey->E1gSzZJxpL`?9g
zn}P19csAUe-X8t<LsVUiJiNuu&i6E>OTnokAv1sKstyfylHp>V3>7tx)}9pW;QdY`
z-Dvh<#EUJ(i(_kWBq&!Be&x!H`2PBYAQS`J$j;wUvT8f(8rP}}+pMqqz?=&t<ihD(
z%1{PbL?~*#-vuIJt!uf<iycQ+$cjJv2TcN(L=o3$pGnI2_<wXcU0n94*bIi+`Sr!H
zvph5hA;Jx}Uv*XaeCet30n6iS2ud#<eSKv+aV*$J{*zN5Q71XMQ5@yv5kN<WG2ZvQ
z<WfILE_v|&5tNhr`@mGxY1#BH`siNg5!A14$dipNd~aZ~R_P0#b+>EFQEe5yfS?&+
zeMerwqH^2*T_|sZ_Jw(oT(0s7^tvqe^MHxwm43)q>Bp~YQy_H+INc-|Oa6)lHi2qu
z={IAsL_%1(T$jAfhqpsOIzG-j>iNnrDb;FXMhi|1LD@rEnS=lhD{D$g5vRsTTFpW{
z$?;`JHbK0+7R)f$T~EpXT(6|Um%6}}w5^8PX(xiSCEBP>oB@lCu+NUzt6dHVBtgF1
zYd7i-H8zJ|;kI-968Dzg;m(57Gh#w<O0ykfqE?_mLP{Sorr&*@N%{0<(uv=YbvQkr
zSUCt9QB(df0(opbQ6Bm47Cv6vPOX!A0UHqZ6Ci?=QAV&o3no`db8P~G-Hvac4^@s}
zi7W`d_lf2ErwH~(dgEXqThh$TYkM+6y6L4LAh*VtN&Y7J1<C+pA4Wjv93HV?+<&K`
z;gG0I&;^n(;JXZz<p}AK?bl18hC0(0+3l9XFHV(ilIa4VgzOV3hJ#b@&uD`*tlO>k
zl~~K;X^QTjyf#9&k3W~Hoc^)i4b9>S`J}%cZksQ4flb6I;MCX^QmEW<{lR687>aMB
z$-KMyymPj*D<n`*IZ&qfUyH!=_BH4C;r^40?db(;UfSWwnavs1Fc}2PtRRW9Xd5;E
ztf7`#_o0`OuNHufAb%}KzF4Mfr|XZg)3obgq7Vj_ZLoI!GVi9&_!LjDCcoB=@T6(B
zs!gw@7WF>uj1lzJ6wREb=ulWr=CNw#iIw@PTZ_KK;>}+tQcLMfVMKglg~|5E^a4)3
zJd!?Z88mu5w-r4X(|*k{s*ayl3jMX{GGM~1We&f&DKwSLk7|7be<59Wtynh34cuui
z`EEVCRTZSN?yC#p%8(7Qf*%VsguNz})SkQiLBqdz`kXeXjQmsg(?$ANyH%d;Iz>Kh
zv3y@D^qk`P&1+^JM3^tcuww2A@wOaBnD8xqVa3&3S<?GFRC&nWprLO2<q|lKmvH=P
zex%I#Sw7Xn&Gael(x-cZ{Hy2b)5>io4UeYgK6$iKbBCa(9lq9H(OF@+67>4(@pA2X
zYA<-~&nI0oiT_py3+$Bk@n;Ix2Gx4ywQ9cH1h#>ealLT7;p$~?bTZ3=qfpnG#nirZ
zg9kd)o(4l5NkcMam7b3~HWq9<3ZWjHtUWjNJa#nK79=fZY2%cNfb<h(5o0(aAeU}#
zE8Hf3OJN)-tW%3$Z6C111yT3#TT8YR>V&(L5K~%$bzxR5<z)DvM|1Rqu$zKy!Oy4t
zQ))eOruX0Nl~XmmO9{g)$G>rk7mNVgfY2{VWXWLFAhfdRp00iP<=;0hd*zLE-Kdtc
z@66w{K~@I$QdQm@VNeZ0R%lB)X0}Tx7|&2gt`qva5}s4QU+vy2O`EfP%<V&py-5Q{
zJ_4115Ug-1<x?ihW^pj`6jfu%BfK8fV8ttE=aa{9ZW_5xdl+0Ddg^(2)XS;i*UEn|
zf~)lqi0h%i<`BluOnJJc)slnL;HNcj7UPS8;V0uqqg?@Yb0V*U7Rf5z4lHJUXQ8C9
z*2Z793madEDxE^#u}>W29pu%qP~j1dO?oE_HFWoO+oZQn{#@Er^&){0;j6eK+(==|
z(-36M(WonH@1gOJUWBi0XWLP$@F(`rb0e+Iv3*Ib7Uu{5LGEo&I_y~V^g9t)pT41~
z8`dy>m@nXkexCq*7O(qyne(AAjH^ZbPyY+gN&@Ifo@Dpb?TN>C%i+zxkRe^Ox)oO4
z9aAlPc2@lGX0I`lg(Tf$)V&1{?chUK0DP_u5M{+iB897mc&I*+nzYk8wH{hM;R(ht
zG`#^;1O>!KPYQTA-seTka}K?Eq(xY0JF|h)?YtyLldip?%))OASb+v6+>4_8hCeSm
z$Db{A=Z92GoY;A!WH*$M6ZT}J#dSYC8B^N?=jNk-$thSN;HN*)2QT>>?~W|aB7g;T
z%E_gijtJi=t;){ZzMg7ysYhQ{eJKrM#}bwKt#qCp_flebltMnnxM3@qZ9&uq-=8vC
z6IR)Vx^fPoOMX)7Q9%av4Br^jC~h-^=iTJFP5BMZItASw`Eu(Sv4HY%l?sAxV{rwJ
zpQ*s~kzuCS2Np2k`jp%#Yl6Rah9s<EBD32X;mxZ|QT;kFY+wl_sTj1(68xJ&dgxht
z&CyUVts^dUFs#ghF+ugk>Sq=(dkgcp6~glOYVo-MHtgDK1&gUzEj)u9g9WHYB1GzF
z)s0zi4~@d?MpK*%Khi$<=t2h_z5#&-?~i8Q+*l1CYijGyF6}q02t7M~aojM+0*}ed
z&_-E}Xaz-ATx}V_?j>I1wtn#i)dE2_yxuSTl5@bYK(B~BQ^8iS!k$PUglS<<{TanH
zh_KKBc}t}Fv$F<HotidIvSES0HtoQX0R@!e2=b*j$DCKvi1i!qZXsuB`I7GA`X*G8
z1a09;Q~!F+tZRG=J(uuj7mC_3VuIeIxv=ZEYYKa{SDt)W-q-$|Oa=q@tvF7ZK|Cdo
zR(<X7$}U}n(AgaA3a(oIT77DC)l+(y6O&hr(lKJwK7NHd)$mT}9_kKyimbK-Klphp
zGh<VePa$1d-@pzKu2&S2Mv_%?f(l=(FNeJkxA1DXiFN45-n{JHy(j9vuS8KRiEZJ&
zCoNlPzcDAF03*W@NXCd@#Y@+U6~j<IM|Qc1XR7v4W(FKzaZOPaOVrChs;(#u_H69x
z5e&yCyixs)LVU}2*wXs$X@&KEB}&K8bTg#(UMiFJsxguUe}2IY^whaAK-FH|oEVhb
zxTKH{T#9Wb)1<xX+Ks#shA>_&gIR{ESM9;FUG6*t$7lTu$LpIhcB{}J2L=p<Zd<T-
zT2zgoZmC27+o^9OMvU(f9tG;3kR-_{Gi{~1t}KcDUkQl+mB0pcguVB#m|@Y3XM``$
zcIa>4FQ>+AMcDXw@Xu!Na{sb(NZGrxq@3&EByr0HZSd|}R%64D{4oeFQb0Fd|7=Zm
zd9{7aZ{>qcc5naZr5CMg#)m<_{a&e-L02o~6*+$V=ltT;z6A3_<~}*Se%$Pn8&<e*
z1DoqclH>dOPvb%F=^N3C_kPpUZ=N_<u@s4q4LHb5J}OgALFW6mB8cm4q})DD5KPoF
zf_7ksss|rMA`l|NbgCiEz8^+%d;3Qk=D<W3R1jx^y`CiM`No6>XIhbOaYk~UzPefN
zw+{cJU4ec^f|vC@N0oDuWXo5u44$GJ-D&UlmqBF@D%MbPsePxdz86-O3|7c4FrHNW
zbd3t3ZM#9TdsaH8+H&#G*^yw{a>moL2IlYd9pE>u;4y&{o%)-*b&cl%!x!cUB+0Dn
zR)~@ysk|MuM7&$gDM1IDn7%O>l@-YBW6pt=S7!9h7flh6R&#=^h}`4p>MDwVQAv!E
z9zUh$zAvQe{a%{3BD8V9*ZX)z9hzBqG~?=-M6;Cf=7}d8k`*KO+<8$}f*tPnY2(Q}
zpI|qUB>l}hUyn@>8@^7yiZYO&`70yYf7uxwILkZUb5EbityY=aulCg!cIjWFD8H5`
zajp;wE2S>aYnBK?qcv32sbKF|P8B|i{g=V>B}dy(d)|{q1f98?rgbowwLDV@OnCS8
zhBzjHJt{Me2A;&)CV^y)m4ucvjX4Coat+_$gz*OdAd=H)!YOD6&|y|R0?nseJThIw
zUkk$qXfi|i_SQ&7zEW?DpfG~mUgo=R-?VOeiL`dkH`S%iz1A~M5{R6sQn|LI^{t>j
z1^hkYU6S5;lUdj@2!G=oPK3GRR;U)TFTOBXJ^Xuc#G(Ty0poa!+1fgNZ4LM^STMAA
zDiS<TQeB~j^>}hgE9-lu83P>soE>LOKAqGhXL307q*>q-;ghN;$4d|MrRp5TJJ@*6
zm4l|~YdmZ}@ruq}_PKOipt0%h!6h^OC$4?GBr@3q`zA??c-*%C;V;+p$eN-b`D~G#
zP`9?=c0IOd`-i_4wxk4KAF6u!l3|L9)Vp76hIBn+8PMGEon4`Z<+D$T)^1*5<F!{^
zzu-Ajz}t<_l*IkvgMg!)w@woxPqzIUyw5S)e$j#H(YD<=<-5TN)8SR2b}YYJUwEY+
zXS}G$9BKG*7B=Za&>i*~t(_6euP{FE^U~<%XnQ*t_8!G>;}x~h562k3DMJz{xwtYB
zdh8^xu7UXf``DTSJ@$>@{5J9A;Y$UpVH?TgI|C7W{a5<+MoeER6)mvy2ls^#Pt{K<
zvyGm+Qni>`cF%iljyXKJ?Rgwo>k*Smc2wh0*S8pM-_nxc7<Zayq0=jJwZkj*eN`sQ
zsqb|&T^jhSX*jMLLWg~E`i`X+tz|U{ot5bdVtV{U*pXM%@re{QX7}jTqvKbTwE-`J
z_Eu%wr#jjuO~Y@8giSD05X^nZ<%%Ese$f^s1%EIG)rXI|RP<TxmB|}VtbsQdF9=LO
zG9bvL1?7dj+Yhby4>j7!35Co_biOQe*wNDJvFTYOd6Z%EtqH%XBP}>4$)<Kdvu70v
zdAcibcw|R5sm4LTP6ya5H51`shF{0r;mmV!1s~*z2p$8QzsV)U2~n9Z53}C1sj1XE
z{P;>CBfcf4_jK=TuS0pf9&gjzu3lIl3|KRBi>p2d=Tnu@*Pg&C9pkM&p_hF(jzdkf
ztl(k7@C_$T17q52joBv~sAFPGCGvxTO3BB>vj)BgcRrEB#>%JW0rs@NU%tIA0W)=|
zp79ld<Bkk*Ip{sD%gzPvX656XGVtMu(8SOt6HlN>ML1aEPj$y;3WOx{Hm#j96K3ha
zkOXrl<NKuj?g)ua`c0*_;DNN_3({3$l5#=O#%P<@R4-#6jh3%lAx%0o+nrF!nS|<$
z+{mb?yyz_9?|;M#!JE%GP1+|Lyx78f`g?s8I`Z9)-?Z6)S>EACWRXI-F{AqpZw{47
zu6*3*EqTF~9#RY;iobi<7^jgKYRR*e*SOr_w$#1k;0CtxgSBk%j|i+XjR;S*DkL>!
zO-q)oyuUOsrnzLjWVcW$!3A%w{5VyOhKFtU@sE^8)`Sd{t{S(Y=x<URf26WFWN%H4
z)(-q>)EkBcX5*|N(Yum~CR5J}8t5<1E8F8<h$(kx4BIV1C%SkFt}BRIC_$dqvPv>m
zDCkABYnr<e?Ii2emaI@;qL4;9b1eL`O-dZUfrHTZ?6+d1QTSku>^^cBZeG}`9YrqF
zKn(>4iql}LPF&`n1)()(=Y>4X(gN~kc?VWW$)zFOl3h+r&s)FN>LpR1QG93fS8<%$
zw|x`*R`v*Haf{erI>?DG%k!nlr>uAG*7C>PCf38LM2O`8!RnDOFOiw-Sm?rwiPZ=F
zC?i_ff%Zoc_%dTF>iON5i99Tre)gLUKg`=NPRo+1rA@2(3$}fc2@;>7&HG2NkQ0yI
zSM0$<2@*!ZJsf0s`cJ>mA3Q|+J;vOoK+wdr0*@E|=PBk<hA!_lSrKFkc~i!VFRa~D
zx~pPoT^9rIXG}U(zUA+nP<d^4pBPV@ByjT6?%mr$N0gZhwp!%o>Gp%WtqW=4c0&lN
ztpKLy`Cn_rv9pY_Dbx<a2dB{|CflW<n)d3v@EA@*(l(cE_|5J=m&XVqAf<E)1r%4F
z3J)<{AxO3;r#<_dLY=^09GeUZdHh5`{gq(u6IbMF!x1t&@bgzTcl&{lujzY~5fv;j
zv^!b)6RSVC>~FPl+v{z6AZY1bAq5<!05#31%#;1zg$%MhzV*o%ELkein=ESe7s(dI
zRsrqJu&QF5-1hO)r_*Ivl9c_bY&7!xvMKznS4J|+zq|6ks8uo?x4c*9etSnXvf#bY
zu#j&gYR%W9oQ2*sO;rc7*MNT>r_h&IfI6~6^rU~h;JY>qFn&ry=?T(@ibn?kMDAuT
zpE2M1Bmyt`((0-m_FmjhaPfsn+s&dUGEX+hE$VOfSj1o42gFOvI^+4q+=zQ6^&7ht
zyqfs5YR?oc>XqWUbyEq7PZvEZrUm_<Z!$a1>`PhH$M*c4N*}NrAJT)5m&`wJ5x3J_
z6u<E|>fkTs7pjH`mP!;yAOd80vdcJiAmU_pXkZSZ7%eFrY*$q;&cu!Xlf8>1;p;W9
zupJs&vhehVTR{%s%-i~X?Tw<D3DsDRWWch-#mE5RoNo*Zm@mwzkC)cV0~MnYdWH1E
zoF;{h2cHQnDY4#V@p08RElOuw2~VHt>()1#Q+EFiW=O%&$tGqbusGD3Bb}CV1R{=S
z<UN%;h+qaeMYpe#19z^bk%A-qN>OLHd0&!xXqQFSzg?sIi5b;o(!TpfYAje591Yx?
zB5oO!8~O7B#a$%mX_S~Pdr+6mJ^2ZxFS%&OJK2jN2k1vZtQiybQF=wBI|Js#rrqz?
zkAgn{%I_j0$ZNh9f-j3WlHvGZhc%Ie%N1UX7hu00UKTG(1#9TD(g9OK!^`FyLs!Gz
z?8I!;!|m~;xJ(k+G75mwHN?*`lA4e)ezQs2jU!*hkhgRC8`B=V52SRLGC0zW@`Xmh
z>C{DH2euggSC*KQH9jD6W`$&k^lNvA7d;0L-i3p)<~^J%vRF=b4j`IlCfG-W_5ZP@
z0>VEF<OTr`Xco==;H+$dIS*Q_UiZ3mBB^kJfi&h>o6-V1OrM*CK-uQ5W1AoH^TrUq
zeI8_7_7vF`#2m!h@NSszt@$IiAo6@CLUS~q*sEj{l@u@uwj`%FhX`gd<TM1rBxU9?
zsH6yt2poLlm{B*}5Ez;F{W?8LlvP45*<NWK`St!=8C`!y5RFbZ0T$J7#M-XL^nBIw
zuOl0l5n*y<=GDj=37&U)-VZYh6tk~)rrO`9hEc%XX`$JL(zS}n9uiDn2&GP{CgXe$
zH8H{!ra@X?8QI3kNl)a7;lsxEEau&hZ5;o~4WY*xIC+CgZo-k)YjAR3NJwh)bu%9|
zytfoyRW~y;QI|ckM)m4z3%ap;&1c=h%L@##aJr;brp_9eS3#hq52fx!X)o_*sAcIe
z#=jPtK$FOt&_a2lg%k!c)H<@*+@vQB45S<c*pnEpA`Cc2u)5OXl*RLT6`ncy`6|;t
zsWT(cAcnL-*=iKFtIad{aw1R)DW1Ck)ya}ANy@@Eiot!R-O8Es`{!UQ%cU&VCH~`S
zoh(J^ns?c;iwbCT9F7b_b*f&2G>px9@kAB~sVQ|+evkG{xIFS+{3fO7V@#m5f!uYK
zLZ@zvto!+E-j~cE<uv3J@ElT1v+8xo#Hk1aWlnUONe7ogth?=W;QjR9J<kg{)p;g_
zn&g~Hdy?PD%Kdm0je2Av3seV#3%AuUgCNT;1YUB=$TbP4`e74J(;jaV?!Px10)Jm$
zDXj;bG<MjP2~zII0j&8{l#vU4kE(yerdQ^~tUXzI5~ohMga?K?oQ9RpC6=cza#`A4
zYWpA!qk8B;cAdpql2o<8>2!gyN0`2t<MWWxf+|ji=dRthSq_nh@N1)!f3H9n`s_$+
zYl#bO6c9CJ-7JzBu2gtuxAs3@kezPrYvI+Dq$Wf@tq(d@?hcz}Uf~k6dSEmylY<S)
zQuyZlj=Y~`lIb8(<RQ-rt>1)j60|(Ep!O;qGw+=IJrYbI97~43qVB+i!0)<};lFXL
zM#;2F4+s7}R2*X;+_$)6d%im`Ta?(;n$VS*{2)FnB!p|TIYy&R$yfXR;PvCTy&qOz
z<t?uO>-p<xQ;F)&T0iA}1&O*g1a)_2iyox+U;SVjY#cJ%XYJ{*1+%gda|oR%zK3g@
z`~asTi=r!)H?yX-nt}@#3>niv$R!fLPnHg~lj1}AcqP})L<F$2M*dnZ#DwPitBcWm
zx1L2PDbO)+lvcauFSLUbSKzi2s5|`_FfHbaQWd25r8UBcCqKJ@z4U&&x75O!$i0Fz
zvd)?xF!zL~hOD$>Z=9a;iIq^gTyd+0kV{To$4@dnA0dqZ{QAN?7eoobmKujksh`1W
zjTR3lcT4Lk>H;8NTdXAEufBXV$*cRW=kwD^CUHZmh-FJtuGZ8}VHZ`mxdfg{-*2v6
z-pZyjbU|Nl<d>JsE~9pHb;_7PrTQz~ri@e+CL<h~<aR$pqPqY*%b@HZkXhK@GXI9A
z`@(U5j4z*pe?6FF1sa2ys?(NScn});<SVTbEhfyMJ$Q2`<X(3j;>7GLZLMI+2yOcg
z`?kT-XkRA6%vsx5%W6Y?7TIDIxhl7m{^?!1%veExcvfinbU^5funN)<r%$3UOhp~b
zb&#jBhjtB{fxFGuQ;P($_Jp6#A+78oM5AK)L3j=kj)(fPS^zF(ZFDsa3-noWFBDgi
zgQ?QYv;;JHhUPVhH2LF>Gh-+-j7VgYwr^X>!y=czf{crrsz1?Yz#9}nqhgyk$Z2$v
zCB%WdJo4up*f4nwoQh-tq>Bo_=$BXKZM?w|?#!^Hl1Xo0Z>f6DYhY6>kI5`231)SL
z(UjYV)$rmtrf1MvEC@l1Roj`p&cOT`8ueajn%j=1Jl3p+8oK}cH~yBlTwo$k)8pe>
z`xjesfpq2BQ=cDCTx1zO{hm40UNgUTW3WoKp4IME{AI)PwAR}@2}^okn_3>p1XYG=
z#vQO-am}*fW%m#n;gd<*;6F%X8yKtpbh~F(QK;mF>kBr614Hy!b(7OWaW`J{cFmYQ
z8x@qif**!%OC`r>n28%|)W3g#-M&^Vwlyyjg{Xxc!@C&TcVao=nj#~xg=h0Yx^!5z
z%L;!b`H9>vZ4ol&$m^tP9ig4JE+)>56EeG<KF=+ZNV@T&K+03Kj$bZnT8~FKF^dPe
zI(W;^%i^!XvD@<^y4YIMMI#a@j(ITZW#F~+OE!rn?W4x+sGP{4R3`cdUv&`U%z1=3
z*d<GVh#3U+Fj+k+xWf#4m0*35f>!Xk{zc-D#&<X8EbOy}MEi7})jDYxYj%>zQ@1RA
zXQkY^IT7t+?%TlV(T9x5e}O(Z#dR@QnzU=&N}y2uSzz*o*=}#;-A^ayf=9mC+4X_Z
zhwRv<8FHBQ?o(caBj@iW4&)Nb6ojD`jiFegfvL+5zS&<W_+mbk%)fecZM0KbnXLNX
z<8tu7$G~H_E<~e*6~6J%T%#jde{<C-bEsJ<f|DGkaH|`a`k<2Zn`~RHP;y*^Qrd?U
z<kSA4_TXw6)9Slz+x{e_v61{HJvL}w9F$iwQEPoh#POxgX(@Ra#v|d$mblO{ETDg7
z-s!`ycSdcqsjeD6|06|>v3lKUMm#qv<x6e8G!fxOo>`4yxNz+k+5%LFY~nhyZA^sd
z0T-%W<lgZFAr+QKWESO+CngeU6L5zCzorjfck-Y~l%j(vcr(Ki?GlliP>BNG5~wz+
zGYs>>M-|`8$w6}jo3ZTU4ShKl@cO%l2bQkAT+*pvZRN~Hy^=nm=u;G6&4NCEbmjJt
z@|S|{!(a-sfR`OlCOM#ps9CyHZ7NKvqjY1gy_~q^fOah7L**(hq}fg7irr2eiqY<}
zYZ>bdBMShbl4$TNkp*gZZqx#?K$)X6Kh{5{eyG73zS5F7gpZjCxmBdCua4Q3gnp>?
zr8Y%Yn6)qs*&*F@{eXmySyW=n6Tl2X;t&f@%BkG10Ea=JOGo@}?J`qBmS4jvJx#1r
z=RSikfRIxZ64GC1z@C_^Yo;S{SY~NWZ~2TcD^yu`v}2JNi+W`BMmhY}pdSd;zja2w
zIxS?UECv{0W{my|<(1!hYsq^wF??c|k?VuzH9u?XD+i1#9~7*4Cb0ZTec)*b{mqX^
z36{fMRvt)GUIF1YR5pt)kODL#8f{MZJ!|9nWeQTAiP9xgv^eKmonCh)k@z7$&|4k)
z-r&W!8+9bIbdBoJb*AzJ1f{6=!wW0k1&2sDE0h*W8PGD2PFRTt1$8t{o6GFumzJq^
z9@!4Hoj$C25P!2lbw4hSD2vDv(HcYqU|lC{mEjrpSeMa2OxCeyZu%^5B;Q8~>zuk_
zJ$Pf?^9&Cduf~s@Y)7;ssQ{SNbOLL1HO$j-B2%-WmmEfcXxU<|!a3Da`y8S#YyE7<
ztA-Yr0ma=g8qfoursZCqX?nlaj<Vd&O*RG%nDk4P9K`T_DmTm^7n8r`Cub++T=s(G
zx~&va@_y>ty?UE|n_R)UK$<W#?HzksD<k+7@R97+4}0CVN9m6eznJ8T(8G|1;pd24
zQjsVq?~iYyGxmf5A{{dy32RQOJbu{6&IOSNSDeukO1fD8=$4<l_e$tME|gIJ#H~2P
z{nlCo_&yoA+Ma>0zdIT2rM7Pp0Pk|QLtf308DhW`0%o`@n+}9;`3wy0V<iwwu9P{F
zPwc%RYhv4dpb*@Td1xXTzdR|LG7K06N0Nvd8NvuJsm|xO7Jc`KvYxjC*7a3&`%Mr6
z0n<hoH=sG9{NCh);|@^<cDQeA*LJ*yO5ll(q+B;Gz@*NlY3-n{`5%tUA^8>2qW}ou
z3C{ce;5%wTT?9^-d<NkObZ!#Zr*opXo}$1lHGOBVM>N{bd$(fy>zD*!BWHgvKG&y_
z{10DArGiCeyWQb%sk+iW?s31wz&We0){=CCZQ2x>ErRqBL0^QKp+JnB^EwD2Z%vFa
z>WqLS(fR}7KtO?4{JGJOK+YTf=kANH(A$iaXMcLNwZ44yb9q6LDQzG8Hi^*9(w1ZV
z2{t2p!8@tC3ydYS-o?Yt39V<6dtn@?$FHPYSR0g0>vJNIrvOfaT;ghC_Rsr1M=TkJ
zSx?6&K~x|9zBBG4a!~!Hw_oe%y?Y#;1GW0FtSuRg2>PJvfy7gY4#XbOmnO_Rc)46S
zaj#WQLgnia#OoxLT_M&!$r!&~I$!yy=^qa{bB-bW^h-+k?%90Ju7`D^LOVH;<VxiV
zJ-+3C<QZDC@zI;BbOQ$V1$NxlJV+dY^?$kO_s?SkQjv-uAxbMM7n8?RuWbIrolO02
z4tR$WK4ewg<1piry$JV64qcSmt#+ZrS3ZMX`HOtpj8&542TL|sA8G3KrWb?op^z$A
z{9MP6xdMIn?pb#?O=xY*msTAw%wdl$ECuP|yz5mXN%Q;f;%g+Ra1BeBhIpmb$}vl7
zuxd_kOJ-ob>U2|9tuJy|C&e<_de^Mi<~*fOa7pC*@N4Bi^|I(Hf*|`rdc8=b9R&hv
zai5x;U`)}nspC86g?lhx@X)1<Rg;O3RQIyR#y<d(SHfTi#zHZ3A117^<<_Gz(DJ4M
zYwYW-`5gxz&j?%#<r^t}_%E@)+hJ|Z>?g*A!K8&)BW$O~8zyi>Sr-dey<<#Ye;(9`
zXXhSuKQjsdqyp0QKd$>sZL4=(AcnQxy64Qq&{zq?<HzsVx$R^Col$IX_p{}g2xMV@
z@V$rm^}Cgs-M^;%V<rpcgnhB$tLk&AX(#Vavi6!6ew5^Ts$HCv)-v9B7ZXu~Vlsg;
z(JNCeYix{B!ks6ib$@_hxkec`DQ&$S)5fXpk8(%6e^f=*5!Yo$5rLX!<t(CtsaiOf
z%4=MBHQT|1dd?T3NK1~_&CO_y`q+lj=ST%etVHJy0ADrhV<)<wBO`*z53NqvYtO$~
zv<BY5%l!~2c&&5BqP;dnb)o+Pj}RH}wHa2z!csWNFtrdxV0e^sqMg7*6nfWk2_Q>V
z-`m{kL>}2BX1|i3k30>B>{d?ty1<1~d34VB58bwj4nI}+lD%hox=XoD-)EXm|EZT(
z8ur=Ymd4d9r8=%bb97uvd08JQwHqV{vbIypBG26P<~}Az7OD*?`UCd&so9mq!3i<%
zR)avNr)D$klcbpY#Me9*n*UT8{RN~)RHNv8%>j4B>;<E_5W{G$(kcz=Jw@gQ2AMA+
zVjcEg`;v3H^tMf2pS>|_8g8$(O~}A(SR0XkVcizl4&Nqhzi?z@qDPBiuXm&GyLlpB
zn?WQf%U6KyrSh7>e!w9OfcPdY{6(mtXTx(-ZcuNpQfv1!iG%OhMX=#QT9a~D8kGVu
zp`B|9n9gM$PPyy<J_QL1COhN{vb*kQ*U}<@4#6`K?NV>+Y}ZGx)rZ;xJrLpNj=o=+
z?CoF%>E|dHd|!xqscm<>b{*+F`EVetbh>rT-9q-D@X<L6ZPGp+*MEx6XnklMxd)vf
z4b2L@1w4ptb)%~k<25g&Nn2cB+>&6cv=9$#8#VGoYYao7xb<LZ=`_vn+nQ-7#{fHO
z;Q5gyq3@2=ceRc9D=Ffnax*=dKQoKIluR*P%lt&UXEyI+06oA66aQe!F65!sU}d7G
zfycmTHMgstSA8?que-dPV=E;s!}j3FV?cgiq#T!Pvfo%~P(i}2Ut-q%n9H%m%;UpP
zCDPCO0&PdP{w_+85ia#tn|?|h7SnqS`Z*W)-+xhjGl6gX9u=1MTe5N0H?b||EPlCr
zM5Tfz=A&+FeWaKyPX+#T8N(uzI{v`drr~-@ryFCT*F3eg6OV5u%m-;5vP|rLblf3o
z&>Rbd)f7<I-}XSB9G27eBmsy!4-j8beJijzJuH7!*4NLM+$S<u`(|N($rU?8#jh?f
z;%4CIHDJ;(tVrg%B(6LYTX0CEdK6H>O*fdm#<jiW*YN7#N!xyN=Z()N5!|OAt&+)C
zjQ8jc|1?eyANwZ6u~48QB)cRIhq|PgKCIuSGTY11nY{Bj?`|59B2V%wwavby*|S<n
ztgrS25dJlX-<g~Fy0$l10&kvEyl{}BJK;FJ-=XS3f<bkmp&=OuXwk^ksXng0kIPPl
zTUd|<Wh9^g16NX(9xVIh*9#P=vCz|8izyJldf`h{Vh3z?WC7<zNq-5)6@&h@YbDW!
zXO!PB_a(j!`P97By}idh>v++ws7#ksfa0Wv^d&A6tnZ6Dd2uq0eyaWi<SWJztY_tF
z|1CkJ?7#Dtg?Cf3Dsh*G9e)9&<*GmNGA-Z`Q*3{nYaTTG-16Wb!>N;gTlk5MNkz=&
zUMZ=suS4a48@QR3`o{DAhe{*FjCo;~Y{eMl*6j!Wb+SJAddsC$lOwd11Dja&++OKm
z66DSfAL3)N3fH0J0@%Srqc^aBe3+l#n)S(aXy<GlgaSw%!Wzgv1OkBi!qsQLWrjhe
zIx@*uQZB?nfDGO}5P8zB9~3smF{_lBMCfNPZHy~}JlM`m;u<7E^+%alOLI|RkN)a6
zQkJVn8-6Um!(8iY-zI6gmads}DzU1KTt;nuU;7s&K!sapz0BthEwd3iW+wDw3k5k>
zef=PSKZgfK|8YqmT%SP^0@+SnVLPP<cY?Qg523Bz;pS!#9>q1^D@>XIylxQnnFa)I
zW*-dCe#~JgB)a{)(#CC158vzQLK-B$aA^yzr~!^AW470Ee3UtNBqp+p+($ipoHDcT
zeYu94VUqNIa#$xs##^=jz+(K7@1<Qde%(p4_B_3V->N%cdc(Sdzet=t@{w6zJ~W*=
z`Xb!>*o#9d<mP6rT~0LBJ>SvD-&LXq@fQmI<Ck<Fzef70;JG#{3UjDqMKwjcmMd=m
z$trsf#I9K0{o9RV$h1sRjC`jhTNEDfm;3{v(Sx$M?t+@snpzy~^a#|#H5-ub)7sFC
zd6dTk2J#~CP6~c*82-NFM%yv)DS{8+!)WSNfold0`TGF8T?Ag1eOPm($Hzpp`PR?r
z-aOK0Q|=P1b^8Zmp*(XxH^L9Q!sV4(#&i0T!N_rkcQIn`4<o-PJ5ZzAzaDAEcC@;<
zWj_0kPFISn#-ApN3H!x3iL<sHM65Uo^p`?3VX$=E_Hu^g{Vc7T)dDse?bqjBp7d28
z>AB0}UpXomb70-``RxFR{U;iL*rRcCzZVyKQ#2QK{a4!!vD^O?6G3>OhxymTf7jAb
zg$bsEvn2Qabty5oz|Zo|XYtaUeo*<9La(FLtZc<ZOEWN%$j-KZ>pu-mHBk5s)~&#w
zOY-m!+cj8^-}IH$LAcz(p24RGJ(a#I{X-p8n-gqDJ@g5~Z{eB&aXvpB{z<e>9{aaD
zqXWHD`wHH`pSar<vwyY(tJUMMd^fP#;BsRM#h8{Y-8Uom&CD;(X(<%<kpDtD9lFA|
zr|5qA7Q0u6at~FxmbGBGO-}#k{4m?dN?)Z1#Ek%^MlIYMf27nOhDFVR*V)sLWA>{#
zhwYmKyugYawRuU8crj}Mbm~3x;g?VU?F%EDI?tKsz(*o~KD}AY!U(|kx?{LH(-ek{
zctaZ2=#`b}<6d2kChRva&Vt9ORvVxYQbPa_3A^Ua&DxlVc=B9Q7o{9y+rP41-hNwU
zq^5W+$rPk=as6E@jL!I<>t%~);PHf&28n-w{Z+TqqrF5*j6g@jm{RliSgvHDM9N;r
zxvz}EM2K$%!W+tEWQ$_LgAVGEm7;x|MdVUGt!`56`r>!@C+{%UJ9=yH{U=ku1M;7B
zg;fvqi~2fJexm)2`~;z*^(>0?i}@AQ2Px|?nErhdOq1psw<l{dps`r~WxncN?fvpj
zWKB0YEGXog>hx9a;^?7{@b!P@$bdlnun!T+P|c2u1$C7RzPvJ1>RUg8bH+Z}@dUE3
z0&>o>`<Uq_F273$4K_sRw7*|9F%m{&*9H(om})E*afU;ZVy092WtW0Vb$nV8<Ergn
zI;S6E+^Iyl`SVaI$YXPkSPgox*ak2xqAI~zxk(VI@6m$Mwy4=Zr10f%%h>O9{3Mlt
z3}-!W{>NQUC1_3b<s=4Z6<zOMu97+(K1EYy$_*Rtz8MNoAZ|#Xx4G}|ov1e24)DVk
zNqQIg2FJdIQuzN$Li_<Jhmbd9mXjSb_+NSJ=U}Q1xn|A#jfAcXiMwP)W4{6RZ0Yc0
zv+}QvE9h6G1k>J-=08xLKuUNFA4PX|0o9K;&u++iH}t8%X3Y{P6gVPrlN$I^0Y+Lo
zPx(t3%9ac5#v%taVT*LDl{Z-u;Pa2teXvc1OhC)(9UWC2Y|Wgr0A(B9_Z$uwM@b{?
zfA$waz*qsei4nExhH?_ItESxJy^d2kO(xb5w9YaxKmIFi26*GREFBiYN5#DHmvyaV
zrg=xNEC+h%>|F?2@|eoABar-!gf`ESM%wutDj3I`kC!&LFasdqn;cT-tHfil9GCgG
z@((U;TuS_iD}Z`qIaJ=$=0vGqpL-l-)878~MNjcw1PuyJj(;|lF=tK$ojv=L@#1<r
zsvx*ukS#v(byLYg(&8^s%<02IIK=GqV62s2dUg!L!Rw*zGr|GXr26(w#~KiI?oR=x
z8kueR=eP85`9T<>%(Hq>(P>#9n3$1LRu8^X$a1(~hF*Auc7#JU|7ZGrj1x=cWTXVW
zO(Ou6HS1C9$U3&{$~CiP9V0}*rC@K!grt{@yc4dlKPn?U$UB|F3fa8ve;>oJlwn97
z^M|9H)}px}-1`GoD=XnUqM8Ht9tYQi#!7Zt%9QeQOJV3;?)~As?&mb5Jo|sAE0F|1
zyWB6MP67cXL<!)<#mkm%FCt9?vabV*q0WN-6st`~cWMYQ5g*+VZ~u@hHfHlfBSw9#
z`!<M6j>GcpNBs3w@oA{SZ~iY2WeZCCYgpAxzhCgbNE8_BLJC0upPr$Bo>~_2^faN-
zK_VsIu@hki!&)IlPow1fY@(pn@2h?S^i{BOHZTeUegNd)N(SL)>{(pz{3(Mq^b@q5
z<85M5EZE_o1;XqTep>SZvl?Q2jF%muyO*Jc_OG_ROv2!*rWSgJhss&yjdTAYfe&sY
zZeEZ;3Goy50(W?tbEyrHB+1L}i@PM@&Jn>|j5nlo!3x;qC&%^l8=F`6)(Kblst&<k
za{+r)zWV{M`No^V&T+*Y*3-O^cFa#P4KKZ;y<<0wnAD#>%psA5Y+!gROZer+hzca?
zVtO8YrNyKiEx%#NC;+~cI|_xwinGOFNrAd>t7v)S2C-=2QWtV4@oE8a>F)d=T<-|=
z!=0<;nj5E!uZp`bw`tzZs&i&!BW01|GU;IDMpLPX5l`At6!d5NE{sz>7~qa@54ay{
z@O@0Hwb|V;Nf>w>0uV|!`y%JTh=R5qtrzy+;bScX>L%@!MrLpCkj!a)?~;wcds}&P
zIZAriF)X1d0dJzNUyj>4Y0U<4p;}LNwfTHF5OpIiY?S*z1rw+GQ$LZ}-fz+d1VTbA
z5KO}sL(CVtTY$OEZ)*9Xm1{)4Yv7FA`-fU+p`OGWldT=OHtF84-AmwfF+Xs{dUrv~
z#){mS;xE`=p<zCqTl(9Y<8BMld}DxpuEUX)O0bYx`2t&tu}L#$>*#ym;Y01|!G5`=
z4=r3OSbi_9%%m=Utd~)utqp&IxioWUBhgdWEJK0=&nV4=GF0vK69QWzx8o3w_N9Ol
z`!7jCL%yZgKHX0v7I$o#yMPNHs@-T7{6p2X0L2Tr^cXd0(~PN8OJ6<~O<;?(%Ut&z
z3chBMZ;<b<2?)5od*ox+<cqX$!SbcT59gD|fsnLCL=6ZVOC<XtXbk?gB6CRIIBX<-
z{ax{?K?R*od19fyLxy>VP0cXMgb`p`bU@Jd%kET$^SX&0S~+*!&nex3LM8dHwt-;i
z+yK$4Pum}I;-9A-8}9v7-kX=qO+s(Pv_K!oqn9$ZKFEzBpH9Be%it7_geMBO$(yOm
z_uVP#vVg~S#gi2zE9#lNdoOxHDAY)yr|jgVW6Flv#g``5S|F_>xGDWqKtSe~tgY!P
zpt}!B4#IwB1~BGkKYTiiq4fWWVO<o>3WCx{@LM=bBvTPR=n8VEE?-Y98;qzqgT>0Y
zzMu7B9Ba?BdLVD4bh+-<=PGsKYd8eCo6#4aSOXyC6YU3G;(+Y^#-Ygqp{Z>G?a1zt
zL0EthdQ2fVaxZ-J(*;aYjezWhpjK=v=F;b(p8LP9O0CdBuJDo@fOC|oF^qzdy87og
zO%`=_WJz`CWG>pY0>YPyE136=ae6Z=1!q;T;F|`gEKAmscrtz`qo&`w)~6d>j}J&a
ze|h4w9oM%hDVw1!bnf+t<}fAk8A+r_*~JLt$ia%p>3<eIIxVsGc!`~}v?Vhm(+@jJ
zTH`A7R4eCk!&u#=Rt=XO&*#!7jidNP04w)uZ2CUkQR_RG!b+7_B-c~ut_y4n-gn?X
z!Ya!21gRe;K3zP=|315W_NuMMROA3~#4n8NJ1{;ci7a6LOIOnaPwLkS`pvMJSrkgL
zV{BBk-K5j}qz3QW$F=^}xs0g^w_~Mll!#Mx_qH5A-7EQ-bHK7-%PBT~&a~5nCRu$Y
z)UL)n&eIEl7klLMX>%`5a{)2Y_MF|>yWtQDNzGQ39@V+$J1sg4-{ye|_u7KTh4q_L
z_$Ppc#VTXRSobMU=@o8VKDy1(lr(yT6twj#YgO~@t4_U=CnKz|pL^&0t$Fh&xywQL
zcEc1`Ar-Iirn#&41yry9xv?$qljpw&<Cf-&Ie-YA=90tqy~AMEiN5jN*e=EGt3W;n
zx4qzu09w-S7n~o2tnxT4hw6fr#B%+U+Mz~whdPf*ic&@+U%`L#Z2NL@^CbHWJCa3g
zTQq1=;$L-m^^~omYY^wGhip#?ynN?bC%k|v?xSvje>o|l?D$7-D{OUqj{n?ryZY%)
z{m&D_ZI-3kHm$RubD^J`9M3YM#iM*xzCY$7-?&Oq^8ZVIZ#TYwa!K(V|B#xscXUoW
z!0yT%24G@VT~?acN)<W5Dq@&c1y75IQZd(j&FJob)d%VCt@bq2x5M2)47}yOC(~_P
zJ4^d~Fp9LZ!N<dyBxB)uCtGcDq4_i<y=7&-_B^1y=l&;}a`#j<y;Jh#AJ&|nM}=C9
zhY%H~=Rrpih1a_NADA}qarSpTK9Q1E%iAg9dx6$crhSFRIC9H@%@?&O6PzMfHnJb1
z>i@(OrzvpFdhw4LgDo*3>?uM&Ts1~J>z4NZraL!+7|*A8uC<ia%6P^n;z!GR>lS}@
z;r@NIuc<`2ZX9M4(+HB%yAeaRO7)Hm9pq-6ps6%5){EE7g%oddntONWR<(n2P0x=d
z4rK42WhT|cWcAZn`0q@jh-sTem?sLCtIzv&znEC^%DK`u>#xua*VAUs-h8I`V;XQW
zn24Y`xh1$15X<dL8kFuoEwgamm0F(W82v<%q;!pEP#^?J#&c64!X2BSk|=PJr~q>R
zoJgP$SibnER6_wuRjDFO=OKC9(H)lVJ?(Bx8tv%rJ$^gfw97|<M3(SvznF}`o7lg;
zNwr-urt<onA66K2H_6GQO^tokwJ<Eet#?bC+zWj^dcARJzUb;x&OrwcX|6G(oS7fJ
zE&B7443}~ii6xRESERGb2k;BrZAU#@&V1MK4Rb(HZs!bdazf*`eOSrm$llGIICc40
zktVAfOl7iSS`B77>(8hR%FP!i0l_JS#@?8UXN>>!=+YdPamSKTr(9AWki&QwaD@z;
z;c{a=u0DP(YPs0?7t`j50Ar%>>P@qR<>2Or4EaqyFEe($aAsbN0;~KIdF&w4c}Kk`
z*QMwe5NDX=jW0r<Syz_RVAV>~95<D{N^Sb=Xd>N%>scvqf!-HU00cQa$)e+P6xuF9
zWaLg{u-w^v%bIbc|IhAcgriZTT{mUK_2fgo!vg<7Q<7tk2tRWWhG(hI%OJR{&5sD$
zYkA=UA%k2gPdJvcJ?%Ku)A{dV#UDE17d)wk79T83dn#hpYLH=cX)>!K$I^UYpfd3B
zqo5X#4xA??Wu1G(JX2&Z+5UM5DDc<QQwUs`m$!EkT%W%e!%)9X316hz1)*&v4vU^t
z^OQ1=C6M#f{u7I=VtsXimP#e!WHdG}+&2U8GDwGPQ|R3mbpJP7huf^x4AdtE^Af0c
zGkJ{Tym{f<-`m1%k(n*bKGQtg#Y=OBM=eAc&-eFTlTjvh-AVQ?&-6$j0Y;d%)8)A|
z=Fm@*MJ9I#hAt>6II3hm^-E2ZyOvu{xG@*1rpay`rEE|_l(6Qetc*BL7Sb;M6(Y72
znp+dehEoZ@a=0Y4$<?-&Y<Tt|=Z%j0Hz8vNz;%8riYIxm=NM7SN;g{Y5xwyE?}2cR
zN6E(qQ+1ZQENJ9Lb+)1A-JCd6OY{6Y1s|uRO`U6j>V{K&%br3UDoiXhnK2;kL;8DX
zb|AE%gs_ZhRwe+UXLFh~?mBp)IqLJvSn0lqDO+`2xU}%JZEMPPM<AO0qS*T}(0;Za
z$PXKgyi@Wgm&+z3Ot?``o8|p;w(+wO{#Ek!{+OeR#P4R<e#BYKZ!2s<q~y8a?>f2g
z@^5hAR+$bE!WemSCkFadr6?e`41pUwu{jlBfIbcEkF~EY2g7!fM)+(sT@W{|0T~$?
zOezX|TN}lxVcFFt4D}9b*e3pQrcGLO_j8h@x#q8xdkv=!9$akL3RFBZF}|xP64BK?
z@U<)<LXzaS%vxSPD`tI60K-dy#WS>{r$j7ArhdN}2Z!Iv1O6388DjYPvu50*hK_;P
zfYg&$<!TGyQmQSV;09t&8@8H1Rr&pS-f9yBq2*SGBd!0m#y}f|`kssEG5k%-`n_V@
zl*7ZDaZl)?6QD0rSkBt`Yks|BTm?XNP}s)mGK=SaY}?+j+Ug_-!A*hzTUKc>{b|p1
zWV@R9k5lO7uZMn}<3uw4KmujhXk3@^)WlkINb_fpj+$cbii=u3TrqM-<{a+RH|*q&
zlql-S3wgP-m?3Yq-``mNz;#AVhS;vv&&w2t)f|UDYf>e3&o2j-6dP>S1M-%zDe1!d
zRONpMXlvVp$Bd2#Ds3YXjz0hoqMAq4UhJ1gKWgXI<Xi;lD7|dM^>MWj62uG<q1drv
zc7M5gnh0TKwO8vEDhP&I?;V+=Y2+-SI{nwH+QRP}=vD-&E%8Ra^|fveftY@55dMAi
ze_DGJc&Og?e;korBxF~TLdh~@C!q*gW{iCcWfu~%Zy}UIc9CsnFvz})eHq!3k*wKw
zSqH=TpYiGWe4p?7`+c9^zn7PebMAAW`@YU~-`D!SP6=;c4;f<HOg32R?$jPXD7I>_
z)5kw_lN7odoi%L9j$m!Bu=j9vP$j$K*b3T>;lAis*_=Xbf<tfR1)X8u9ZKqo>(>+c
zG#Z?MVi6Y*G+>Oj@AXPQoKZlkl*xJ!5D{BhPybQrQHbj0C{BQn9c1Yet$!nCN*T1R
zuhne0zJg@(dbIc>3RqONBg1!vC6Q=cI^*m0X0}c%eb;6I!wvIZ`r=#7Kcv{d0-)2T
zikg*}e%B3{O10K*d0sb^6-J|b9u_R1ApO2nRNs(BpA78p!Dnq#P<FY13U>VTinYx!
z8^veIbBmxP5G>Nj2JtB;j8+V?>7Ov<>|vl;KG^rrIP~=V^P~lz)s_tU*X!Qf0daQ$
z*eH|~(THfWXDtRZ1(lJ)ZK^Bv8@5=LhNVpszU@Z~WEln8OZXwE3YI^mXmZ0z?0pI#
zb_h^j@f{CA98{wL)@H%X8#Zjg*Z2Y%Su47LzHXlp?ck&BqgE0{<N%1}^|UV*Cvi;;
zje3g*UK$@^v*s5Wz{y0I8Nfj#8y2p1e0`768t2$l!F$>FV)fP~Hm<GI@7n89PtO(K
zVhX~MVXa$Z@&|sup8D*6KuhfkCV}z`LsyxMZx~qB){66fZ2lSQz&G7MQ!5A!HSf?V
z=3I->m-womaDVR$yM%VRw@Zxsx8S|6O(zhH6uyL{Q$cqY8dzZgc-yedw`kR`C|AEA
zwbmx70({DFZYT{az~NV2xtvmooRd)Yd>(q$N2NJ8Uv5i~MbMt7T2-U%zIx&~*b*h_
zmg42~)s*&qLB@;L#)dwrXU#_=*=!4^MzaShLDm8KXHOwUbU&d)M2cbnf5{UnB^tB%
zt>k-mBAPW2$iZeB1Hbj*8_1tGzH-|s#>d!e=v)L|){jp^j$dY-gxI~jrZX<QRp5Hg
z!Sd!ZEeFm81V}w*#Cdxvt>MlUeZ4yl0w6N$+L*c_r{He}Z*-=0Sqn{e>!}>mz&-=>
zdq&o`gSkvB<fsq{ydPSdQV{a4Ph^L4oR#xOpLUWrqj^@Ne*wDXvBPx6n#eXbRDpI0
zKDQac(VFmSQioRpAW?#-+4u38>D)w%wTDgiR?#6zDe%dID<ZbOP4UheAxRy;@>sX7
zaJ=*y`J)pCpWJ2R4rFxrg3g_&g;@wLwg^m@F<oobxOuTjFiWe1@AIK-!20kC1G+K~
z{~G;F^4-}yZ?Ur=3{3iICR6r;i7_+n$rk4n6Vk_IAw7?KJ-Og21yR@8cYt^ZtNGTQ
z7&6S~-&Dq8U|M@B2~IdnvtpqTkS|m%!>k@;Z+smgK^GZ^oUc;PJ9PdeSxxOWXp_ad
zZ7a0BrafbGAZ1{fkTM`vQ2&G-RwM;6E29CwP?It{v!jSHZ~gTrA;nA_mxI_TyI<QH
zdlnV=F>M+?9V!o4FE|)_@aR!pWSVUbC%oy%<DS|rcC5=>X8eUPqJ&L%*2C(L3Y{_}
z*f-P=&sTEDm67vM-uu&R?w4U}8^~(lkxXey4_jjgB;^3d8tVsf$D5t21S!VR1jE>Y
z{W2|cJVRV3%p0J!uUEv<q5HR91$my->hOk@!;bGyr3PFLF#P_}mhmp$>3Xqy?}d2d
z?tJvim%G2~X#Ep^U>`ky^=(zlCPB!+9GyiGP&Dk6I7;epUgdz0e$#V;NR0j+2mVWJ
zax}5&w>_ASGHMnr=g{}dk@d@;jQ5ak+PiLgA<u|7isCN6S@-$iZAka?EB-w_9Wmbl
zakTA&NKA?u1LR;;Jr{i5W>x@RLr@+nD3IZo;(m*cDw;q2C;*o@40&%qDfn4iBH9~H
z{~<{|QG?ycWU2nI?1xm>is}JxAag0=e);->MKpE#KSVi6labtvWSx9Jk|s&)*JnL%
zo-QUgcep0fNECYli8)V)eu1&?CiuR34B>oU2JOoP(gAmkeq9Z@ZU0cRVceoYG{nDx
ze_gtHgcX~A@3C1~dWDhef5>;ZIV4p?DYwvm=?s8RO$2ADOS_uGkq9_AtOS~&;YAXg
z3FZ9--iS{iz*j*Hs-}3-%h$sjs#h)iaE-L=8C{dU)bonM$Fz|(bVT5qTjHu`UI9`}
zR3@+0W8IgP4|!;Xe{&DlkLTKTK7$~Fc#`HGymv)hpU$Fq>dqM`VAmIE&7XD4od`DZ
zZi_&`VPa%iaQkn5RV-#TdboV-Xa{=bsc2*tM(2)xesYJ_<JH^rFzYlacCrmgN*5t|
z7`t+6;F;5Zg#y};x%hK-vP5{9x$<6YW>EN(G9W5vfiVKbF$G^wRZm>3Tp$ML22b15
zfpcf3jo4vl0as~K%pEYZ$M40waH5fO1(I>#K11+Hv0)pjQgPu2OU_>adgg<eiJGo5
z_+~)${&1K*FW{QMoLjX_N?YB${&wQtfc}5$9YPl*x;AlQX2Stw!^(ej0hJq?#Rg6M
zdk@g%U>*tqRX)`2r<j^zAbu_c#LpQ>jfIF40dLPkz}u5SB6dwxh{*HvO?zogIjMmX
zqw=_l{6)yGxA2*sQf<CicPFZFo`Obo{40a=vmK#Rc6~l$+obl7i}0^T`Y=yy=sTah
zcQMv+^W7Hvu@U-~^WEZ?&$U3t-C2+|<>LQC;QK#>t9hPopZRbAKdur0T>kTf;H++5
z0+*bXKzpzDC&oe%d_C?@=w{#p;E5XYx$6DS<3deRJ+v{S6&D>V_UL(SFU`NX8KT#o
ztZ6D+v3WBC?MlA*$o0r{B>tm^&k27S`q<<k8MywdAd2&gt}Rg-au>g}Ga<MyiglUJ
z4U&>wRh^d-)14Um6OPlAPB^|t-@x2Bl5_EEuXp=xYNcJH8_(_vl#j}4usz?Ga{To9
z7t-q%<DbA))<a%`sr>uIw&^xn^u-@j85E*#a>z&HL<FKi-iowx`xC`~e~&L<w0iIj
zYB9v{NlDqYUr*0Jrj=l@D|H;7p$TN$o%ykKEo|ziCp#gVyr4|bVtw6|?>za4!6*}w
zP!W!hS_G#7A|clBxeM~>)y${iRlQ+-b)x5C8<q~Bu#>Ppa`!;kwuN3=Sl|1WO`sqW
zBap$QI}gN$d~dTMT3d}(J`&QR+y^Zh{Kkq04s3UwcL*KMMmGAI0-%Zr2aTUU+{0m$
z;%Rinhsq#%6V0Zd@+dhVAmL|V<_Z2~F;Q-({j>v(t8@vdbVWK($#A8VZa4a7PMrg~
zIafGW^7y@^e$kU+G9{3lNpy(4Y;{U-LgrN2lR~V~VQ}>A-7*7z@vmk81Siu4NX5q*
zc>{@5Nu1j`mis_8r{m+4PX-MmXze%aJ2SItt!o635(juY$y<;LCT+rqHLg6;XkY>W
zY)U!uBUc9Xc=Qu|uM#q;{b?MSZFd?0jhLEDP(d{kTVyz7egk?aqF%rGhCGuTdZkMz
z;dl`B-)FeGD_fHiQVfFQ;s1q&NY?ZIkA+D68HmPfHq(>x=>Y+GJ@E%2vBUpt?p=s<
zCbwYoAY`Ojv`^=5vwWpMT&^coih=8HZ-;u<0Q-JXcMs#jJdpH;8?_&#k9qE{g1Am7
zlocfmwL*qd4mt4@i0E%?Ffr2(+!*=G>{2-=jt&7$y_75;{*3_LJbuiRy`qu06cR_m
zK>z(m_NHM~H+CmSFk&b8EIv-#!<6yGSxC5ALalKt+z+m%kU$Mp6SS%zy>Hi)QmXTf
zJ~*#h{XB0FD-1?`BLa19!qScLORQ+v3N?-{(#2&Wl^hBLymqgM3|)d5cZS_PX*Zev
zsryf1YxVHnCK^aCxw-#@Lk;@(rs7jV_&e_=G(qAGC%w7%ZiP_u&$HmSmL5`IqR!y;
ztePm9gWX?>#Ti&GdlRZ=gcR^}VeKvRt_ExkxTO*WCqi8#b1cbl$CY6B9DNH0FK-)&
zIdE+Vp6LdErFQ0CI)PiFk>1sOmu2iiDx1)RW577j9z?O_y-A7SKQjC)dl5iNzizbl
zlW2y0P}*??tMH6jfYDjr)j(KUGSu`EGyx%b;oq`LA44p_Wj|!c8Qx4>^4M#FJt+lR
zUUfxH`(FnxU}O>hNTFf7XBd)TQ|Mg{sOK098$)|8=R%4!wJ}>7NMi1SrNWCpo7;DK
z5-2sX!vZTDg#1UW8vxy5EGmHXeq(O9uB~RXkT}^nLSlucRsszRNZ8`HuEw2xL{m!h
zbnXHS$kBac1GqZQ^vb_e59sZJC7M%yd89sCEG;Wbab`T~Fiz`4qo3Al0zuTjpPjw=
zL)_S+7pd6x0J>JhEFgT-2FjByyc<*X*!$tlRuTpvEcy>JwZ3k&vwqf;qWrLxpqlA@
zr-GnAeYR9vO3lcIAa&{ZXpPHo-whN09l(z-fd(c#ZxV{atVr}cYD%$Yz%O)3PG)6-
zI<FpEzjGthlBxi!>%3MVFNh_mOs;a6w8S%&Nzx<^ly5UD?a)C7l*Jr|bi4l4q}wQ9
zks)@xM*bkBy2y4~Ia`WcF{QTVDxso@!+t5(*y%%pfRk~?3jKOpBtbT`Y0c(M=gr_P
zQj;{!XI`E^T5s;?#5~mH-WA;y-Q6&E`_SiI6^dt&JL1`#)SSv(dlA0no9Q;F4*BDQ
zI-V%)?A)B$^Q2e3w`EmF+Ix%W6vdxz;ELF2IX*nYq?D>zHEe|&I&^FlM*)aG5(HgP
zf<Jlh#q3s*0K3-hgM}~H;=<lt?oSs6Ez4g2vh;pc=?3x+C`jSEA7PDWU`_0_<4V1F
z((IH-&l!8D<^$!*G=39voxB_aB+I*(18$SE^dA(}`@uBK8`*#8V4OsP4Oq2qNAcdx
zk{)Rb$)N~Lzv^t0INH>ZsB)OwW;9{@g1SLs;5?10ZO${ig%>e$IQ|rIjq6I<J6wF*
zZDUAOIFL1p@BTZwxI|D5gPYYiec8Rg&uoeuw<hYRE-Tj=zR3%PIm@_#5>kg$Z{gia
znNu&?-I*J_Dw<uG9S=kjOH%?vviryXQy`Hbv2W2Mj87WB3Hc{Qzwgk!f-3pW{Ma);
z8s3cy`EnyiLA20XPvFom*YKF3ih1@4Ljyk$JshsqPLp?^AiL*@820!YG<B`MRI$LB
z#)$-S7X47Nm`G_{uF9y3Z_|Su<xL%FwuaklPVE}^ca+{t_$GORabLO2pQ?V|-57u;
z=qkB_B4E01u0^z9fHBFS)I_Tg)S+bD)HAj5kFtloD8qYTDMJ&@n%KNY9I3k9F8JQr
zxLUV2@4<Yn(k&|Yz&GuxV?P5O;a%6^)PMEieqOMl|CZFL8Lwco{?qcO-IM_MVa9$N
z|NG0_F}L3uz&YVz)Vg<pUQGE={h(E1O<6W6Z`2dc?f{NXQM`%!JpXE`BrE2k*3zGd
zASeJyw|MN!8M|lsMj@diakhPU?qra)j}=i0kf=RV-MS~zI*m%;khe6+=0h%|sN7z!
z2>)FqXMTR=<G<4l^}b0r5lG+5fH0;_35+oR!Qf!b>GhrFYZm3f6924|#@My-6eQ(c
z#Br+S!|GaqXf!E-t?Fy6A10zXXZ7{EU6hc22Mu!}sIZRn7OVxF$xjM(W^Ue5wrV4J
ztd^3UH}w5Ifu1{L4%v>LxLAYsgXRz>p83W47%X2kv-V;n{yE=QNF4Wmw8QE@oi04g
z)s8RPMsu4WO~?xctelYoT~Egq9y}}uo0*11x2*Dj!)6$Z>qS!*xsO%#|Bf~G%qcty
zYe4<2oU-Qii1t5T?e4dzW4!m`e#TJz%H-L!DG|H)zDHEU$`N$F8n+v29lX3{6zsMd
zLtSY%-_JJog+89}9x$g`8RujiJCusX@`XAS4J%reSawg3`!xli{E_Q>+b{h4X8Zt9
z^;n#t`rV}X<{F@&F3S**%9U8P<IcRPL1D04(V^e%a^3k|mW`KsAZ&!@TVnPsjUIgJ
z(fC!d0XoWYo1YHOqi*FKdFFO6^G38+>WqyVGDa^Uu&JtN<Gg@Kzy5d+|6{|ip*}8C
z5EzEnQ;SrUd`f*o$v0YSvy1AKzu348-eWsIi`~>W^lJEmBD7;|0*OlS9d=5I=o?nK
zjDaUR`+HEEPh5-Gc}X>IjuOqx8mr3IQDGP{{urRNgB*}alHpFY>S|Pw7rOfNsf9>t
zkb@EcRBxTNj~bydp@uO}v$3Y?j@wQf5uoa|BKHP9#M2@x`(3a=C5%j<ju}uHVsBJg
zMs|@1B1mYmg1@Rk_<z7(i2ZQ|(MXD)V<iFazGN51!w2Lt2YSL$_A#J>yg&yH6$?BJ
zgvm-F0X%frNBcJogY4C-A?<nB$UC4R_EZ3XpF&Abi)i%&u|sb*{q@HH79F_9GwR+)
z#bJV14~wW!)uCV{^aXZQ&y`lW@+ixmVx;Txm8WP*pga%(#sTCNMXOUOaDD!)2z#|)
zX!nxNS@QD02R4N4gNH%--XlR186jh|=f!i+3trIG<pEE6zKmO(ei1^fS<xh2G>J2R
ztoK_yA~o2d*l_s)a41fu{MMQTntvWTi!T;=S*UxtKD1eb{sZ)3Gn=hAS>4nnp@0$V
z%4vJ)B#=0=*Xk>?Nz7uIY5_=9XZub5*!_+?{V2m-xz=R~PwUXEn*d4FgDPY;Hm~N8
zF!bCzH%me*g3}Zepl9GR&^w<0A}U1B0K9;k%|=<QOs@;hUL!F=j|!oZB<@H}i#Ui6
z|K$df0_up0O62Np@zJglXr>O(jAT{E*jj>o)wM!DG?R1kLgz`UNNR{@wUIyz_b3WI
zgYUiD+bnHz3-D}@q0j<{dv=UP#P+2W3P%Q4ZrotEP<hzu(Fgzh>DbTf+DQY{NTRsh
z)}sEEvFPQW!0`(cO)e9e_@;rGGB;1cHcd9pNIdwh%&n9#D_(Ysil>);^>ZO2%OTVY
zxZyr~nlcDA7d)XzfUno+mbZ{rCG1Ijh0*WJWnc=bGo#L(6n>n}Z?-0zD`Vw%nU+~b
zd-<gsh|hd&JlMK3PhS)YTw&}4CU@^_fv_UBv0T2PuIgU=M~c@kUrGDcJ!2oGaPLPj
zBhXs?&b_<2F~CqBo<;M441>eEsgGNm?@Kc43th{9d=$}_?07~($Ef6D-SK$h<7djd
zk4PJ0Sd~3_Qv$CPgcD3aBMxW{%F|F4)g#YaP<D*R*sv;9^k0GrjZW1H@fPgoh6!lw
zSKaQRfcXUqkPe?sf|>-r&${&G*mq4LGDlt3s%jd*d@~Tqm_EbDTqH&^_M+(Z1J63Y
z1D#*YQn5{b<{!Xo9HO#6gf>6P6XpXp&wEj8`CvHeNYh+BEA|WKMp-6=FJLdV@q;4g
z%}-tOr0oE}j||F51mE|bW@vqgGdnz}1k{L|0d20|8b@L@K`?<)UAThP-DgvR+?n2v
z>U?Kc4CLjjfQ9kx%$TMN0^>|L_^yoI5;IKbg)L4z4=6A4?TDW`{fU{2<JuT1Gu*2;
z-sqPs&U=0;s9b4mTPBbS?ysB2k6Y`-pOnyyIwyC-93gU>i8$(LhF~@`!b|a_KPyQ7
z>5l;o=x*NKe|#J!ZJR(*hJXH9oL5BI_sU~3GK|BNi=%{Rzqvh($+G~G*0TwLS%RAW
zFPi@Jq?%lRtZN`$TJ|iJn@~Ib-%{ZJw;ewsdI{inth@nu`aMFWA^F4+#Ii6cB1wM#
zxlkqm5F$7y9_QS=sqeD3!3<c;7sr5VTWBVPw!GA}_@z$~TwP3v31d~pcCX2Bma}5)
zs=B&JGv5i%4Azh9J7db0K3g_PQ9upcmpCc+UPgkYEhlydyEe*51t(xu0B}zINm|VU
zCFZOYanpFCm#larU^|%-!dq3DVg>|y6$AlAWPn1#%Hx2!{PI=LYpfA5c*=hsY~Vc>
zMYMWw;9vS|D8~vw8%;X!`Qi50`+W%Ki?@_#0JFJW&4A9gBw=?QE5CWFM|4*I^&?R6
zM-koc&2Cph^NrvIAb`_*Ixi7J`273E?)uuiEjIB^S{xiqpSO-8f&(S<oYERZ9{?3_
zcaGbBG;WKWQ6}UjEficX-1-5#Wx>~Hw0EKs3<lvuA9-_MfXpDk2JbAuKt`9|WM@di
zU58<^zn=UpIHA|C5Gaoj3Zu5LaWfZ?Bqsl~LIO1$PXaQ;lnTyVKeWJ3Rb<1`WTbIB
zup;rSIPLN9;GjtF!Q5wpL9EV4CYU#-NKcx}s8k|6yQ<AQWl1yg*}^7Au`M({I3WhG
zeo2)U&=-Ny<yF7s=B%Fsz&wz0&Sy*Ma{x1I`q+>`$iOFDs%J6qGuPB5V?#-@{KkmC
zJyAbM&Lj<hfy_mKhB{E@nOoh2<v>P&V633gP1y(76*2kIKOQ2b$3nRoRE($cejWUO
zAapzwQALPPDMo+a^|u@A|ALn(&>H^?Hu&>d0l+2#ex!uYYB@&96RP(9A3SFN7mxba
zTyg)qj^FBCy!Qy8)}`R8TPS4{V2ONM@KXu#baidG%r(hoKWQKi74}=RA;1NID`)&w
zP2uCmY97FLNM}v(77-Jw&z;?sK+MKRxPdiGXXZ~+AQ%_Aa_iNF!;c)rK<#m0kw8(;
z+zY(T2Q5rXt!kh(+r^J}8nc^^0C1)ifRK2+BTrabH%tr(z)MsFgNbG{p>$WapTF<f
zT@zoHbxQ5}GtTbv=^cPu;U>5K?JfeZkT;!uvjG%;{T6ia(i%0v`J;4b|1B7(RQf8J
z@Eh0~zluL=j#`#zeAFz>nm_hBC~TAY-1?~=!p!vp_Q)<%`X0jUV5+_8c!~*Ig(~m*
z!9!v1Xvhw|bm|W<Qfe@WH%IZl^dc3c6yI_R@t;Ix-KReh-afIiXs&8o*;iop+sS8i
z3{WiD{Cr{%nczN|YWE6wGq(+s0bVrw!;2NoO#(+_ad|?!<)nieZ7GL#Q6Osh2fx=C
z9Qv3t41{GLl%TX9ud~1pD|U&RE3jz_j3*v_O~Ey!Q;cm*Ql~|DPJriM<=&p8|C_%n
z2Aiaj(;mT#ca(PDLd#uQh<CM0eel#)>)sa;T=%QKH8$A%C?jW<*KADfn_tJZt&m|O
zabu@f<33&iwr?~Wtne&T=R6Vo^2Za1+o{1M?@`~&swMN^=1ff{<*si65AWCj)i6u+
zRO>#zDoJb?b>z<Vb9r5{>r*t2Q8+bkM^{!w;VY|bm}G!$`mFpEfUaVi`NT`{nfv;U
z+dE|gcrvenS^MC5;#-WI7aJB|g_dEow)-gxsN02qPVxCHCN2G7@AmtUZl(^@4#wR6
zT@K|&_%8i$9-L}St1MzZp<ay6=x-R_?<Z2C{{SZlz!gzw(&>&d<r|IbqW$g{hE_F6
zht#@VUTU^DEM_in;-cLrZ(=GlAC<^Ze%xt;9d2Hfd^N2(W0&7(Jnp`*840#KxouN0
zGUz?~#F=WrK~`-<?t%Q8(`x1^-<X0jCPm)wh+(ekUBLS^jZBe=Ma{XXxA+R#4N9fQ
zkIq6MI>^br3T=)nkY1b<$@FYc-qcw8xgCWY=YJZvrI3lW|MU*H#wB|qxm4ZH$YFjP
zTfQ$`tvWv9f7K?t>f62@Ws6sIkUL)3>6Bd>dw+YeVV!YA{=Q-(pOz!(`-|Q|yDY4Z
zp0NS^haT%`ainG=JNdyxIU_Dt0@98>xBI)W@h(^UubkGrFcI@M3-%>5{Z`!0bHcw}
zF_-y%^SW2OU3`Gt^5*5>ESfWq7<sb*Bz@-v$pU4z%jA^zkj-^bNbpo}Pa9fnN)XbI
zifXD3nXV1VI+F8g{C*B*zrqQ<b1&;S7i*G^dV!}J4A_4+DF?~KU6HoSIggQC+5^wv
z$pU!%-6mb4$NFQx;;)(P$6t77KJbgt?RYBQ3q9M}Ro<<<?a49q*)C`I_(J#8b(8>>
z8}sVz@r}br$-Sblu-B@SHqOn}Y-e=7b$L4?&GFkoG-Ik_k2R2|>+H)4o-~M=+5m4c
zr7fz`7tPU=6q7+@V>fzCG~(bldg|}(W_n*Dc4uB6E3ql1`DRCv=rgtY-m3T5K%jhr
z40V+!Amdf-QjWuJmGExfJR%tt#KnD0QGxG#A7|dGQ2wfRT+}<FZSpyOKK;w`cHfVZ
zpPm|kh@5#&`3?=P1V(N50@WE0%(mmsDau_7VhiQ8D+v%jrF`vM!t;3%{b(<|NuJF7
z1Y}p@Qo1Ge_lRi`4Lf*AB`xw9|3TF6)S1Te*h}Zkz2mBP)^b!%k4wDuY<I2CGkY-5
zC%w(wJF>tn1_X^iEWviwAR=Uc6r0_h33|EL;`a0O96CxtaS<<7gSuL`zF31?-=vCm
ztDT~$yC0&iqRM(V5vP#k&?%ag0zz`dBO6M>`{!4CXm+h=pB^7jZ%baQce$pJKjH8o
zc&qQN16@}D)pt)!7)N>3tBZ%_LxN(%!*d#4N$&y*ow)e|zI7}T1@kDMF*OLe-+y{p
z$@Njlf)dHho|VNU|MC|92k@jO>!K5BOYakqi)Y1>!eU6a7am9Pnw#-tCl*`m>4NiJ
z_F);Q<bID*S@Z-yLBd%Y1t5%2U(~jii$^IPCMe8{A&@s!!bYN?tgW+qGy3jEz`KZf
zH(a;V+-YIZ9_=<t3ro(eawz%5VLADB>xuRk->t0d{&$(ffi<s>_uo2jsrjpNb+WGK
z^KP6-P&#_{`^y{DEt+fGfS*L?TPre>GM%MS*Ph2z*x~7#-IJl^)3l={(hnZXcDj@$
z^fsnB(FrYG3%tGEJc_?Ecyd84)NHd@xB)yaxjB*Tg4gj#7whpu;y<MFxBo1U+lpN^
z|J@s@u1T$SGu++2{o(I}JKhnY-Ok(jS7ULq-kGwoO8bjfEKWM_ZpM7&7_PW0b9}!`
zByISGz2SP)@|6(y(=l$crlYObzKzkx)4P#*zuc8$2g{dm-J7p>b`<Hw$$(9FHE0j1
zp|xWc?P>m!x_LX3GOGs=K$>&@B;$^y3u%n^r-D(u)9Z*E2LqC)Rw8$>>ofRr>wdXh
z_tSwodF({7Jl3Xm$_Vwbtv-OI!Tr<(k$h_NbN?K`d<@&VCFmhjyHndA6%<@*+SpV*
zu<c8?E)kT(1owA$Xvnw=fPu~61HONw#?jeZ#XEEo1eSe{ow(B3Mh53vU7bt5(wQbZ
z(cf|SF=p<RVR11CkfEX<US^$?++_FrBD)u+adA@Nl)K*VWM@)a(PY);y@QQsZsUGG
z<<|QFA&~l%>C0~nq=TnQtd5bQ6VWF+?TZ`OBM0&YbB)o}x~F4IT-7y{K6}A_q`$*v
zenrFb;=8{7W;e>K6#ZBzGLWaetF-OL(zTvvA*XRp(5@$d(TxL3e44zQd7p!k1u@QD
zufkQuzgE4Bzws>Lp@OQvc3LJmU;?2ZlU5E<*jh9BW%;dBw?$p3e~5Ut_^$p`#Xm~4
zo17wwx~<kdriVVt(|uBPbg9?O@^z&AFsId?RDj07M&`$iR(f;fJ%pT~J^fIAzV@5y
zc_rl`65Oe6tpZ;-c1Jw*l(!1VeCM9uqWV5X=dcjteGAZEuIF$p85E6n`Z%8Q6U?p6
z>WT7DWv!7*<EY=K^xyq+LD&ucA9!}+&AKOsn_j=NmW+SD6UT0CRP0Xqo9+r96eDUs
zH`QwH_Tn_6EDgz^<jnX7<1z{!at0(_o7z~lN!T;Ve6s!i5z(&^-Kbl@5EAkaWu^VH
zpLwSpYc`sF!x90JxQAzj4r@s;o_5?ShI1;UW$R`tpNY}xzAR}Eve-*57uEUTy=Ml?
z_4*SoVS95N^!Do(#wR>b4W#=jGvDGkt{jaitTXMIH~glJT4X?{C|tp$pXMPQx~`9K
zJ7nSH4>g}p8FyDb!!?ST#wOARdYYKcX0v4!ru$CrqNU(zHN|gTqfZ)%5cJ{?&&*8n
zCP4BWIgpk!2ajGX^=W1%`N=ucS3bpizV8;p!3$0C9v_h3Vq`B1YIN6(32QopA0b`A
zHIzmAQ8PylyEohvv)Zc{ehu0QP;x`ipIhe!_?&lBjs7s|e63m+iofdg-T7-=KX%C0
zIXDqMrD3%RNlRM~wga?EimTglLQD8N(My0qnDUumroyQ$OvO(9NK5DE<3sV|-(8|A
z+$WWiS4RST?0Sl|$H%Y9<8rFj8-8OJYVxp!wVO>X<?ShC!uHtX(#s#QEMJ_$pyj_^
zYa*)y@M>*2i%I0_6_ek0!Lj*!3wcffz8#wZ;fmYeb|dZ8xLz)8W#((|Mr>1<`ZYeI
zN0bT*ckcu^)J~Ds%eZp1?nf^BJ53KPIIOb~LQAS=+b<b%U-*ECc<r4iR4(gQwMN=O
z5bym{sQ_%u*y)_%`Q%OBjluq0Cv(fD?i2VaK0=c}d?F;a=7>=e6!Va0@&=b<fXsxu
zO_su*O7K#>pv!5w->Y$yuy@r|Rh>_>NomFG$QK8>yqRYWzk1EDzumRBm<^_pwK@>E
z1)oD}pg#3o2n2)WYV*SvwJ+$u$R2UY*kDOry3lP_<DD!h+n}%_r%j9*%EMJedG-U=
zR~N&dQ5TyXa0UOo(4eI5uQ}z0*6(M5|GfD=Jzyl@wv4k$(3)6Py-kR89I+I!31w|+
z>IR)zX5}qfE^IfqgelJvi+}#}C%=Qq>k|DA;74xQ$-T&sORaY8#U)8%n5fn9aq(!y
z=QZc6>bf?0O9q<`!EzbP!y!p{n_BZ<H_-3gJ^6TQ6hmMepK-o(ISy$+KJME3oD;D^
z$vO~JE_iS@Mj&D3hVcm_nx^DhH9nrJgyBN(!c7q|DQlDQogmS!pGo*hznMa@fS9s=
zjS!?hrUahi)Ji0DzE3JP>(D&_*4ttR=+qB0>knUZf4JhmV@&5QQe^sjYR@4&(6eJV
z@|h%!pxMO@o5K`?io*hbe+sB|3{`CW*SFqe=@xGIkU27j#gD-i82~E^=$`p<$Pn1R
zQ>Q_NQ+Cpt#ctuZ{Vaae@_l=Oi^6^`tWT0A_d6y1Ru*`FW@n-Cr(<<2JcTeB;@JYk
z=<7H~D@e}6nopRgW$YvjBh||>5KL#(!PR1_Z4Y|dM^CbR!!LV`zMk&5!Q4V}mHEa6
zHzEe_oAe9qJQtdE87?sp8@}m6U+m}%e7=9|f?clh%U|@w?T?EkZ5nvOQa5DeG?ClG
zQdpbBkdpL?jaTKztDF;d8P&p`0{zaMBec?46Vje59xZ!f+CQBuy`MIRZ5Ae|>?P{S
zStht^^hfhyol<OmtUxD-HQ9F$jIsUXoRE=4f8#iXHqkh?M4JWoa>t%GOs}s}Td6~x
zC>?CNdwnoRpBw`6O=t`2U^kM#dG$S8etTkxkK1rv*8^YFicH0Ul2y=l(m3$yRVW|M
zdP3)ssb}|b<2R99PGL6`%4;uOy%Vnh_Pp9~X|?UAm`p4m)~nB>y?xE)!)VU<rE%Z)
z+x4NKz0v$-k=8xaxj<MzZ&~`3A0k9oVU=smn#|Es=@BIyWO<7#j~8p$u@@*f(=aE;
zSQ^xi*Idt`KHcKod?Qk!nIMB;EeD@GwJqJqEb>3Rj-7DaZ_AWf9NhhSa7g_XKWVpz
zeZXzG8dL6V+WEv4u_58O(KNYnQg=k@AmknMOJ?_SBAdbTyS@0>qdoKX73ZDnQ-v;x
zPIm<^|4j~+nI!2ao+DJihi?#(=0cmvulLg3eHP+3#MV1LW@5vK<%|;+i`Ty?psYqg
z3mr@5Fi@m-)z_od{I9;ziDvJluigbdTfnYuF7bH3SArfBZPgt;S=TB+e#vwR7zhnK
z&8l3g;;Z1SRPs$pWYPG82@`dl7NfT|>@8IH-;s&%Au2=nw8QcXqGpWsRl3vW8Xy{w
z)gMfglAHB|qx<jnGu=DbVXxX)?bj9Uk};eRY>;NzeW6X%v0^{t?qd3sZ(kw#S6_FQ
z)9CR_ent3nZTRpO+_!fF*<4@sWI5q9XUf+EOuPBCF~{!NsG*s}W_vt~^TB(5M1N-)
z$Ka|MBEK!(04kb!izVmj5*Jdk))w(xEoHUbQ5hO^ql_mnbT}T#CjBJc6FO1|W2ks;
zwwld{8vhluQevC&YHdBCs(+}w`zB0uE6b;5DPl7Di8P}Bi@TPm4m+-DWDGB_<KsMm
z|4F7Wo{OGMA4X5T(n#P}r4f|l_cQAM9A;_@OYo9e%s`htKbL7fkKd5KVQuB9HjlP`
zSc%HXMCSQ#_>V01JQ5#k(BW&+uB{wn?Rg$Spq)OwQW~i0J8Nb5-n;anbV~<l=SZS-
zYYMVB5<9F^B!ZJS5JD{!NIunW9N3d<=xv_U>{okLXji-Ak~ZvL=2e$!TQOCDj;8i3
z;MPyr!uy;*+V<N)W%{G4ck2Rl1OxmMVfBkLM-8SMIdR-ZuD`;47yRnpyVu6zx~xXr
zu@}n+l$N>Rb!_ozwmZ>|0czU7=ZoUn;}^>$#QiglYBY2|iI+p9au?<0q=B=2W+_KP
z*haG&RX3c_R1lIx=hA)XY-F{VBkgKNzk)}2k>$xW{G<<g9WlR^>Un2~T%-uP?^3Y=
zHB;DW^OSBB&J$jHE1T_g%FS|IAT;ZdVyAW2q!NJ>B}{D)#fQ^ZnMr>re7viHeL+@^
z8q@^S$!T|b)o~y{IAK=lo^?D&I&hafAamCcxKq+rHf}Lqk&cTGuh4w6Tw3cu7Wc*`
zLyNb6{?bP;>uwFf+J5VaOAgaNn?spi-)K>XHhj<aojYop9ZqSptZ998Shm4kH;b`*
z5z*YI!k(7;scs|J$gqAWR7b1duyJ?AU~iS&#H-`oxopfM=#N7_>|*y`MAGdB-TiWB
z-)E!45$qHzsS8Wi*m$H=QRmx(_W1nT2jd-`viYOcl{<b#)6i`XwwmT6yBJ4dl)1AW
zc9ZsG^AR-Y^;JYDh<$I3)?9DCwHCJhYh<;n(LT{-Gu>;FfpY*46PQ#1^Div1E)jd1
zgD*{$@YWY?=yNV^hk~`BtHorm^gE9pf^fy}#ri^qtvjL>WERGsG>D4$++W7pqT6{N
zJ?@n^;+=gpI=bG6_4ndTsI%%$O_{<BOlhOArgCNvR0^bKo1qIT2lFpH&slYcB;(Vl
zazfW13wa0pp!7LLl%B>|cl*}e*7j>OX`9(TU->@Ty#C`)XTQqzU55$Xa_doBGa=6@
zL!v7@h|mfV`+2$NZur(^Lp#xraj=S3X;@jCw&#sHSW<X;E`-^0prqep(#u)cKsN_H
z>$Q^EU=SCVzGE$Tadmg!pl~nDZa>-GzJ#k>3*VMjQd_mAb$FcfoEYEH828m^qWp*B
z*iu0ns|HuX*!KyWKKtea+jE(2wOppV)v9r;dk0}$oYsZDEfVcJGG%?mspY2jc^Q*=
zQYd!CjDwhIW0@DA%Mh%uW!T=#iZMG49M^zs@iFY3KHs|HFT9H^=6q3^p;GK_Dn5h6
zyC?XM!<2m<D>NbmqHlXv7P0w%id`ZF>y$n2x1jd4(AHD-O)EI}s?bR8SfHY|I@<qK
z2Mn$^J{>=QBBils$K`s9|5OFc=j^nGd)XJ0&b&LtLiBurKXAzQ>tkgqayU3)c&|mE
zq}#Vl6Ka`WYnLJIv5RE;ebnV+nJ_XZH+mg`)G9H}rsIU`cm?dcHUJ==?F>h2WoQ`P
z0&U;=gg~@pA^PCe$$^%1csEZU1U_r3uX2pi_ujIWhRJ=$$oyPgWLd@fmsABj=r=3D
z1aQrn{J!Ehv^#U+Gp1XS_au7Kxz7D(U$mEB&Zo^^4I9YOMJgi579)gFo6&#~vbky*
zHrzJUHXJ&P^MP7|w#3~)mV1rP8qhG<(O$B>&7hb5;cqSJ*j2GsBSa3gY}D}l3)Sx1
z;CDALar51R{0R?U%~!0vK^EV{L%}o+stFfx5u?$<>xoge;L4M{7BS<A^b(XH(Olc6
zE>b3Y@|PGa=r&m$?+T}U4%^Z{PI=S9KcT~43@E*N1Wx*%*Jml0m2((Ow;<9#h;mu(
z)E2|`UdODizsPgRGc&B$SKHg1bDzLz@gXnjVBdWAjh5ad)+Dl^MOk`wR%BTOiamd0
zp9LHbcZtA)!iPCWcCkITU_}=pp9G@&zzJJdIU$Do>pAEsVQ>QPi|YMWuE*fW{JmK<
zR+in8N0$oGmIljNS_8Ahc7-q3H@}e|KB;5%QO=+I(lNzI^s1W=F`5|Weq7%aM@46G
zDCuI^TPc(_yI7$P4KsqgEE5ox0yi9_zV~>d{q4$nzFpz4PyNmOuLYn!GVZ9owS7%F
z<%vS`%+DE{Ug10C3Ch}fOj~+oe#K&9PSf}zTZx`VFcG8&gt%Tzd><ri338+5fq7HH
zBOQozoQ9D;g`O(>@G{>%2vg){VOcY0+K51SfF_v5>$}(xcfoL^UMkM8FyuqW%iAl$
zJ*~M57<VFzBAynu>FKM-PT~lnz)J*`ic*m1egr{|hcXdmw+4T_2x*}r8YCz<f|g`~
zwtDJJ6)l@fYq*G8uWwrNA&3SXrG4hT@yC5WLi?Nse|iu%mTygoS`j+rEbL6|9RAZw
zZ(<2DrJyz-qNLi0UJuxXiL*wx8!n~oY$5@<oPZ=zEN6faPV*>YB8Fcuw|yx@a+N;|
z-Etu%DvCss5Yh7hV^IvG5ClFZT_%rU=0JX5YSy4;>C<D5@tG=F{f7OZ65@v-x*CT(
z8@3eH+6-;)so#8Kz>hy;(4?As9@2Yi`cJ2N<9EomQ%`--ey7Mk6HmD{rK5R5cUqNK
z{%2$!(7#5^BQ5mTyy-ca+dcq~A$m>s-;?c~1I?na5#qX52Ew-YR)r{{q@nU*!ztd^
zz9&%<L9_Z%QUTJxDgXI;{RxUd?<Q>`NvF|7y2ASeZjIufS;j)ZkO(#mP&_<WSwM#g
z1OhE%F^ED65JK|9x>kgKw!pr>&$W}u={+1kmM>ucYyk#N-Mi2jE}4!<7%T54s^8l*
zyuW&Z145a9f4A$MQANP18hU-YSvzgS=HQJ(pJjrp`uz)>hw4SA2jy=ztM*PCUCoky
zi4_9_YFV(eJ?yG>V^!LtqlA;*MX;_;HgFeoJb>~wS@uE=HsH^8aSwq%fVMw*6f8kK
zDA6Yv0i0oe@5f)H!(UBWO{gS#Q1@($$}#~Xp(;HqCE4MlMzigqK^FqNU*7k_ZGaM%
zTvK+5hR8`@qowLeJ8W0fwK7oMMAOwqhMQb`{t||k-Rz<8IXmitw&AzyuQ&!i=s^SO
z4*QpFrX7hBs@clY<Ibf3a}O=z`}ID#(6`&bw)mE}!jxq~a$)LM6XR|F##R9_J;~&n
z$~ixPf1DIGS_~T8${97ptoJrFJh{JK8+-WFSPWrf15bmdu)@8}VK|HHqgwaIQY_cY
zZA<=rLtuS;5%J#-LtiYxDe^@Y2vOHz>%wc|z=<zuBjNY;6T>EOrmf?h0vh!j=Mt`E
zmkF&+ZldKOL{D>!*c9ArHTBfUaP=1VE%L|2RjpQcf*FF+orf+*7WGrB(nE+SQZtit
z)10m8w4Mu7_k10$XW3ttSeU+sEkk}a>GieD{HIHu%MwHbs)r_Jnh`_3^Lzx+29SJy
z@IM`&y&aS#NSW?we8`76{WKE=!7gOV6>{-zCH3b5TE&@6PoTYT&!x=q@JTW8kMv(f
z5LpBfSzVr+-jE>NEb-s7_&;`rrGKp9|IJDnFcNzGOwUrzc8FqjiURm7Jn%1YPv}R<
z&n0;bwLmfWY+d*K@<(Sk>)s&>?fvKd$l<l+`cQt{%2-`h?P}%Nccihi&N<(G{cR%$
zTGZ(TNnizGsnUudE)GYInC4fSd%S}U&vMFjnEMv3V2a{ukGK6-(1K!WRqW)28Oi}k
zB0d)`KY$W95oQ8vLr#vulYBHf^=mrl<Qj)917j!CeQ3~^S;l2GC+=WlYDL_Yr4c!5
zaW7P@`zZwjy9iqaa2wt7sGi?1%GIF0)6b2Edq<W|0qUPt_P=+$K~8QrJ>h?Qj+{<k
zFJH@(i`_>HO3cCXXOv#!{&hYRjF<~n3OaU~lT~KWldll97`EYQM__Awir$#0Gu}OA
zyfq;&{EvB6sg=}eISnbvUDatg?p&GZUWBD<^gUL<<G6ZLiuO0B6yyZ=<TJ&e#R~`t
zT|*GPa&Q(ZdJQ|9-y9PC*00F;bQY)Hds3^*K6Z1@UIyg%{Q_G?(TW=`>q=jLEQge?
z-0|<$y^OfaB3Dn+kR)9ydV^oC!&(Thfx1OtHnQ||jdb`;hz&nnOlv*Kv(jgWd-1a!
z+!nHu{z)ExFe|_n#|R+`dU_)Rq5>vtq4p1<HsAG6!Kx-|w6z6;qcC5{ivMk;1myEt
z+CUy}UVBshFv2Fx9JY5DnZD9%#GX>*W0$+JINK59@VpWb4hNQ2_BMYvDh@UlYZ0(M
z{x-;Jxej{rvca$rS0hB$6OR<41)h9p;q;HDVAXjsPO+AwLBYk(IX`DnN#at*oH8#E
z?)2|vH+5u9O!2#y?7G}rsCW$CrI$MYEbCoCnw2&-tsq~Vid#BCBWN27ClQ`=+4*Tm
zG#`ykYIb(^F3s@CxUUigrTxfud*9o|P$tFOR~zCyXXd)?cYlZ|kxL+v@>MQ1F#KFa
z);V@4l!fD_-fH9cMGuQ}l<+r2!f6Q%7)f}o?N`V=51*Kzrvlcj@hy^sLVYfdDiO(i
ziRMgMd?sdFQ1xQ1>^5R%V6fGGCBu6KP+^Ox;X5a>!v)I~8sBX|Aw^WHAE(R=T`)eI
zU1odxpK3Gfgy}5hBXTW>l<wZ{vj$m$cr#wZ52KllSs>Q^i`+0=l{WG=qJ!Lg-5>|`
z(ODB}vt~YVg%j-UZ05D8?5W^o&XHZyx*1SK6wBS&n~+ow^w2r~t3GVF%gy_)izVo}
z2^XC>VuM<>%Y9Q`e-r;b@3uLxfWCZp^DMGxNx3u+@ECCM?T~9d?(sx_DnKcKyxUN!
zN?wG-ZL%K1#i#a_Kht_x072RrX3~mo)~E>^#)Kq&eVYtRE~<4QUi9CPp9n{i+})VJ
z2+;yu$N6Ks8xvy&^dW5ir*&jR4u>&3EUzDIvnv_jrY9z%fO5?|Re|n^U-f#ZOr+TK
zzmeAe%2t+D0i_?xYw`J-$IyXd_-h9Pe!I$+P6zVQnaxb|{f`R5zw*fcK|Ncd5Pjpa
z{v(&5Y)Bwj45naQqf!$;k!BDvXiUj1g1VMS#){E2t}F}=CMK|GpZi#gPx}!GA56i!
z*W1|`S{IPw+Bj7!Ty+=N)QG+))!f&&&1dA-?z?;u!U|X}xa5ZO%z!TORV#C>O4j;v
zL@d|7m@lmm;-Xe^`t7^Ai6Y;oHlZ<@qXcykc^J6@L)-JGUC*YCd54`E`IhX!W6AmZ
z=mCG4=IHZ-iNrpWbCjzSnR08P<u{E{KB!zV13*Sw?uh9n6m&4U@gukG#9)%nTKy0}
zrC>noB13hvYZrGeq&J~6dzVU|J@u)S_Ux~JoEXga;o|Ux#-E#{5WJ&miMCp<9el_k
z2}#f_bTnr9n?Jl%zhACmU|Tpk=}?4JzY}&}+}Oh=F=f30Lj@<*d+?8oya16@zli&n
zaf5B){@C6H8N`2a2=FU1Efa~>ElD%7c7WOx8fX=jf)Hij1@ke07=N9W*x}M01@6;D
z_WKohUsxR|x*(-dB#-^HAcx?~)b?o11kMAZ)p3zOFzyX|lKjeuZ>?sm*r;MGm02T7
z!0&qr)+3d}t}KXyseWcDd{+lGIpp*_ts8hSMd}m<S_)QHGVJ>^rk`4wlnuiAJQlX*
zu$S>-cBh3tC>$J~mLq^OYRI2BsJ}yMNk(KmSNlp(Odoqw(o&erH{$E#iTv@<hD&Rl
zqRO6`&szc6`o+!rhqgT!>NM7wvZw^;;Ew+n`t85MzW>vT$yEiuuFhhbEyT8mGDi`l
zKA<>Jr2e<&$iJj?{Aa7?zv$*z73ni;3kn#tS}ZLcxkv5b!kHp+fsdQr_Z9*f%a;3n
zce%T>!;HWzl?Sw|ZQbv|O3g%nwOtJkLtlxDX<&vxd(iPyDqQToF@SM1c8_3O@hB23
z9U_wZ|EE9vThU}!b*K7Wpf!r5MEBoMAs3#xK5QL7Pgqxm|B5y8zj#}U4y8PKnqhk%
zHF@6z@czB6{r_}8FQP5G)utq;&pT`JV~T+&P{JDh;iiJiwPNx;oB}0IhJ<J!?}2Q2
zTS5T|(R31j@qH$uK$F~=BQhPb|A!%TR-KaH5R@9+$jYB1bn{R}>wfV)i{Sqc(tjX@

literal 57521
zcmXtfWmsF!6D}2?Kq>A8in|r}0>Rzgi(7Gr;_k(*1P|^G#T|-!fk3eo4H_Wa{Qmde
z4|!(K+3eY!Gb=OiJ10g>MHUmC6def(2~%DUpn-(+Y8eUXb?iG7#GUWGeu@b3%3VWN
z5~+6P<1ymmt&N1T1QJq162_A`GU6KTo1DHo64Hmk|9-DVT`ImJA??V>10=M3O#bDg
zekWUMxton|4qWLv+k!-LnKhv(@vmaPE*e&$YVKa$FHL)!7I2Q-n>ln)8q7qDYhr@l
zUxE}P&-qGH{yQC4QAah#hY_c(uAUwR?(K)|Z2c++P)W-<R${pv3wZ($w9x&$<1iIK
zogznz`=T~g`d`Vh-tDi#meDk?{0hXlixgvo=;GpgW9SuwDI?S*V8kdL@n3nqUIS4h
z^eX)2_=*FK|22=nk~9CWDrQKwq+S6b0bm*pJvxM>zQkdw{!gadN8{`KC*=YF=v4^$
zc4((R>^RSTrf7ZLz+Dy2$iY$W3l#%o8sAbdGc$j_JIE|F7KjS+ANRKluuAVZ9Qv}>
z>ohre;8*l5y91x6+KKVg%QXu8P{nd<$D1aKFfkaEx?i}zzr)@#FnQna*V+zMNyXV1
z?QCpJRS~_>Y6!Z&Fkf%5jMDRtDR-^LUSO#UpyY_F?C6NmslFG!xxLLv5*o>Lt=<-Z
z1my62<7{c7G&P0_@wT?)Bng!L9BF8*cb;DP{>Nj8{AXl~1NwMh3C3@l;z<1X;7*Ej
z)3rBP^bdTk)p0W*yW)nwBW{`wg82qZ5`Fd`<)vc%k7pkvvu0W4&`<W6XwTaBK9HxR
zkm=MIL_~<R-nx3s(AblU2X*V+G1kg&r!2h2Sz21+aab-5iguXTj?*+}!-_i2wK4vJ
z2SV{7SP6waPn7MXMc*ZfD77VQ%brtuW=%-tU@zs9(^>fHC|9ip57!ra%<Wi1IS}U1
zP5dY*nUIiR5jd7i<?BS~?Ci`p+#Ds{I)cCU#Ean#pq5l>Yim_QeteZ8ijxyjT3<l>
zNh9Lh*$HFmxeKZ6cJNC5_BjQ629_f^%`HuAkKNQOXk9>=<0niutZXtb;+=~JTzPZq
zVO~)NVEaUwna%ZN+0KUjT}(9obWiR&c7AKjDAiAgoOsHMlmhCx_eO-V^X-k!up~|I
z`KqX@<05jJ;XT6iH=_%|FFOv`>sPY2YnmLffl{)nrFFrN&IUL0iXIRCe`s#?pY|dc
zj*0q=RaSzItUF!L(k-_CjNDuw6>}_Pp2LBwD*OG9eX4UIct@?lkDR+6!8X%X*S~ti
z2c;T2K4W62q?YZ3;ALvJ$u5!T>GIaZ5IHmyD0X^n?ZEQxR$23|$$cvc{x#?e{5>C5
ztT9WP9zec%OdmLj4`Qeei}RPp`{paa9NxlB3Vek8`RkM*-J-$srudj>Kqv#5037>V
zSlBGvjRHqW(r277gC+U*DiP#A+Rb^N5k0bZKN-Ll5hL$=yfHmqPBNCC6@jWYP<nWu
z6|?!rob^H%u1_#j=SBj1c<#y^DlHHB4DRZt!Gbgl`4W~aoyXIjhC^NpyOti$Pf7EC
zcwhDpy%$<mOeJQY&oX@~OpTtP5~qtzDn8~B6|J`*%vd1t#Mk=dQ!z_k{_C@+pXKg<
z!rJKrWliEP{IOSl^byrb--|{&NIVCX)(aJHqd`v7yyD*7us|4MXiJllwq=t}N$KBu
z>e^I3C<U?0g0MBOJK(1~pO_C%rOWxzQ>3|FSy#3%xN`iLJYXk>eKL<-Jh1%%VY?H~
zbofQN?lE`UY_SXcu+0`yM03y-<DB=RpW}W;3|r5SJLW88y??B-Q7x+D*guVyEbN6&
z^7INxnwmbn8DJ8<sg66U6?XpVvVG&U9`L2OF6jJ4Lv|0PTdUvn2`XJ;`wNYuT6z!e
zfy$9VY={zYMP*NJ>-aY^TGkwSFcP!4!E!YArpNzozBll3$d53!mqy&Wt+J9t&i%lM
zeHn{VjCN=Vg(;XLXv$f$HuA`Z$XF(Qcv#X%{APU;*dc)NpUnfS83f2vu%CU;lY1-h
zLUR~FNGYsu?|KH4&@PAfY|+Iw^EdAr%?CHMjEp2&(ni%8wUpD!7U#Rp9gDo6mw?}y
znmYO_cxCZ;8>(!Nyn$y>Q!91lz{YSX^IrMi6<r(c?q|oxr9d#X9m&6vFGZy8HCVkl
z%R8|-icoYIw`@Ey)v}?1fh}aY#zNFI&(}I%@AlebA=jmM=FkLgfo!~R)EZNcu8#cD
zb%JSc=PCM@!9~toG$dPnOMwW>t}L-a!4@~t?2KeXSyoZQl;TrauqdY*poS3JfL2UD
zK5r3#>g7@tNY0$k^~^)cYmSdu#R|lPY!fC`ffU+;ZoOczl|FVyxbg~={6bt%qo#x-
z;O~ddzi)KaBYesLU~FUl#$XFG9NTd0{rPSrb<xx2g&|xZ3<jywWWhkijlJqG&73Kc
z2t&b84}?D)0v0^{{ksllk5Qse4$GB_Sw={v_r(JOk)J&u2~V8tO66?IS657v2mD?y
z{5GNkYSJ=NSx8@3nz$vGO>L?Y@NRi*9WMWV>}$_iOr|dghCjBcJsk2cybs#MU0}0m
znMW?<1K@Sr^vmR^wPlm?pO-LcmjAXZFO>0f;da{iY6QhE%>scyFxHREz%bz#>ARr2
zpmk4H!1?2^n&x{l@45QaJ#c>F?qKA?P>j4p>^^O&_hA&p!K90+Ca38W*<i`EWwB9?
zp@O1f8i3cLb=||$^RJeX>zh1A&}bq#L6RNow+HMM4yF78S`gv0vXK>K6*o+q65>zs
zn3Bjypxl4N@(gP}y`IG)FA9d+;U?sIg)^gisZalA_d5ulEdfd7dmPKgf2F?Ja`W5Y
z6%uM`44ZiX`}x^CtND38Fg-=9v<2R2`=!4G`P`J-^($x2!<<fevJ&T3`dY$gvV55W
z1*IvgkZ}v04ZhJB2d*JEJ1D*hg!Bai$hCefjtV819*XzfqwOUr@zt7yL{PH1GSKGx
zt;wel7=02DJDi-Du$}n9g#RH5p&wy12X5?q@-=zKu_b1NB(=HS&MyghASuRB8xR;e
zyYWLj;fL_nZ9~v*GxzaTiVV9fuwq1m=ex`DgI?LspFw@Svek^cycR=pq~hilh2~_D
zqgT`It}Q?lYvw`A2kYD9-Rmf*bvcj7L3l7lWul@M%qG|MN%p;Sd6DJ%kqcHnduyDc
zza8w~*7Z6i{aiBnFknf2?$B>{U#djgw%Pke?Xo+^e1zQ6+n>wH&j!Pj5VN>RHUEo?
z%WBrHf+iC?qh?vW^{%*NlGt_M^^{`W+}LHY-M1SgsNguDIO+)Q5)eknW&m(G-*h-j
zmxEDyNfW#!?^q|$POchTs;vlx<95K<t8EP!mD`Jd@i~tDHa{qM;tGUi9~gYLDHL5W
znxw=SQRZ7o?Fa;GxlfA`+lNh=)vIE}{T*6+v|EC<Ec!L)0Rw^x{orC6_nQxLHbgD_
z=^C;P^o`+I87%mx8g`E}q>0YL#{*czI8KI|T;zY;lU2v)#f}r_M=)P-A2l_VR<@tG
zVE_6!ev-N#R?UUHK^+<g$#U~okqZSxlad)uvBi|Uyy9wM0TD{XIPj3RuptU@5T~@V
zbwcep_@~-ljH(H5z)#o5Rsj}#P7@4PQ}`&N#C-quEu}9sUBG?PvMVaimcUYb#go`h
z%1U<7!(X>b&UxNXis!7Ep7d5lFoET~%+^0z0rhsiC6jNyI+YJS-QJ_Wo6TcTS0{y#
zH;DaInJ!>}yv&==vCIpea=z7J`mZg^YmPNX*t@p=&X_lwuR1UnB`HsdfAfk;=p1}E
z=U?ZG#Y-uq;1n>RK+Ets3<c8-v1TNqSpr<C5i%CyFGC`g_%9YDT@>eFHm=xlcJDPY
z4yMcrONkC=RwNgVwDs=h)zdPQe1ZJ%R<Ik(VHUD9jTURLXBLIc#w>c)htsQy$w2t9
zir8E*3G#_lpGy+Gdbp#73<ejMoHz5To%9ri`OfhzHQ6MKsIH5!0xM=mK9DO0KSNEA
zmzHvmQmg)`7QS4w@c`_~wneUm?U^smzffPIE08#^H^(g38ao(ju{{y$b}z>g)YVsr
z{dXCPtBe0#?|z--dPU|?DiK}ZC{WczvXEJ?&$;GEvqh-4=9v$;(yn6LmzMcE6Fum0
zBWh3RpypX0xbo|Ncf>Bh-1xO3XN4`|n%5J34<)a0^d$9g8Z3^cR5wr-K*}<OmFW*;
z!es=~_v#^ba`G-3OQmc4JyLTOk}Me{3uY0qQFB@5<jt0C>eMNB_4PSbfq(~>_?9aw
zOIsgx;nOYe_|61llqcDutV8{}urihgIuotx(Puu|(TAtQ^9z{pkI`kZ+C<*SB@Yje
zEW_Ivd0Pco;wEAAciX$`Ys3u+NxUa>4Y)}Vf5k+)IO%rY9S?6D6~77-1*6Od{Ka#A
zPID){CIcgE%i$$@SJe*+dcn_-s79-vQfiw4q4PS`lmYl~tOMUX8q1eRj@XN07;fa2
zNWEwCLv%mEU}8*TRK@&PZNpBBeiXmw*|dsNTN3SMk2y^5niANkO6e(PB<EpBsE{u$
z149;Y*2q(dK~~R}&}-sX2(Vpi{`}=vNKb8GNWG+)aq5*(fW_3e75Epeu9UW2&PINw
z3WqQj^OhlQGWKEKvl!>_CEQuZc5GeK{}luXR+I+pLqeah)!wn4AcrMJE0E76Gg?Mx
zJJ%=55sWL87X*Lz>eH06O78*g?NmO_;s&QNApH51ygVNq9VA!j>l2_p@A2LC!ou-5
z5f(V-%IKQ98VMXbMu1Z-g?_S*t%um1bD-<%>j5sgcX0ujk*yd(wkdosPlJxU(K2&W
zk7;bh!{0vQ|LJoWq=kXknSlDM_VB>d7|o+}gey$r53=1@FS?$uQ^k8kgjfEYPbfGQ
zVP-U(v2k(IX6lTek{L;Ok|kx_-TUY+qL&6F_DS!;f70k+<fb^xAcSy=gT)YYirmv-
z?YB}6?~W|#vdT*N&CLzk<NZ6*27^yXk}q{(WcNRasOxYXSVccB$qG9%Fj#eeJIwio
zXiw7NH+Vj#O`Wn&^n>rCkVl2y0ohwIMhSabbV8Kje@WR{i|1qdL-yu0ZVCRMbaASX
zNAl7$Gjk2)_t`93)K>d|v5WBWXv72Lu9B*vwS~pl2e>+-jkuJv4LO(Jk0VRWpRq%f
zzsGk(KOf-y7cTA->kh0hdQ2H9&K8BCPPcpwC0z0TGp=PZYqmGC$K6UB+MD!g*mJF*
zWUVgM$6gk8**lh%21e*e8}Yv|Pv#wM_&lavPJ}2wvf(d|>)cM{K+3V5xc<yCGYkOy
zh~G1A0v<7$^k`Gg<g*s$J#(;8Nk5<NTe2W2c8~GEK?F5-*@+@buASZ~eI$)V#IkOw
zdrZD)q3_H+Hg?H9_R;&gOHxtEJAk#HKL>7sdEAU|<AfdL)gkhlClU3`3Yc+_*Kqn#
zXeMVAa;t=h%GWwPz5k+S`FjoD@x!sDHiVr<$Cg$QqHc`Wc!(LOrI7)BbufBE!U|IE
zCQGL{`=o7IR7y${t1akO>gzbE|IJ~Q+Yyzr2OhwSQnQO>b8abz2`8-Ey*)=viXr|0
z9G#ua_Rp>ZonFRa9PkI)+K_iF7g9!2OiynnDW0y#1GF;h_4w+O*|F!CnU0Q(?M0+`
zkfi{Eex*?llOps${f5G`es1vn8mQ^Pw3}$YS8zUI54Y8372Y3-4qj;}eVx_-RM}8n
z6ALAOFLZEjHR$j{ApH4)bVJ**@9U$07w1t{Z?04JYO368vn7yrZyr=Xy6Z#Ppi_-m
z)an&-d;ZZTa%<oOYHxz&O_jdD+|xjk_3rI$A}tgnI443l)p0G%6wH{2tPwXuqiiWv
z$Q)N;`+AuyVl_21Nc#_flBH+L^g!}5;JP2zi709K>e&5Lh3qQ36<N43m(fh5a0$_H
zMnmGZJ}_jvNkWUuoHZO5?=~pvl)iQK&>}z`4EavkD4|6)=F(vPan;f>LQ_G8Iwj9T
zkBHF}@t*LeRl8$ZBEhsdg+2tj?}uYr7=rFhTfnaXg$lMJl_wg#vkn&h)eNGY;SpZ1
zIc9+st;rskfz=650@P}R+NJ%`2I-fMOO8H8#1Oohp?7QRtrV!bjS|F`r-P2V^)+UL
z9)d(o`hi_5^}}L!XnaW9)q&@hxwDZRy8#Qm<0yw$e2U-ygG`vKe^s@kB<Q+glGcGq
zQN!_-d({($Q$lP{sD*msBW~sS{*0D^gzpP=<(4w*+Z(y4tU^dy_>yNHlg$VnMkDZW
zK*&H{Ktr_KiiIr73{R$NlRk-_tyoYxCJrcThUQK2>P1jpQ^QN>;k4BYI}c*jz<7Ia
z8tB1Av)bWOgbBi}s9?$`xAnsbN~TIIX!Zg<3b=4mY(?xP<Hc2-{FpiN_s;M^gAet(
z1F#}7NLw*FRb9}Y=X2P@8%u!?B$A49*0_OXDB^~Kc`sX|tufP}nWR+RqisOnVfiYB
zxm42`Yin@h@D*JvW&Lv`W{M5{MUKxYbXCU!HOzXO&G9Hs+LYy&@|&E>@&>1&5ArX&
zJ?A~|4}(4(rWFR<b%~EfB)P8idyI)K4-DN!FG<SO{<-+rabi!ijmFA5q%Pfv3)8Vt
zi!NTk4n93r+8rYZ4$FOqJgyA0*z>%$-qgQdE1wbkb^f{mz<s9GO=l@x*D(EyFbj!q
z*~H?_%gAk?<FJLIn}$U!^9$0Wczf%63Xv?C#E)w>XnVWv69{jX$MeK45GD9({C<MD
z({+F;&}%E}lBby`c$DGY>t`xO*PBQNS83{0;3o;YNLz4(n*Cg<W3(A}E^wv3V#fT{
z-#*QQ=oR%J503X5NrrCj--OJi#ZPL9rAlIKN!3}tc*M!M*RH1KRqr#eqrHE3(rmY2
z`*eTFW4~A-Cj5N8V2AM61$zi}bafZfb$gR$#Qf<oPL2b;;15JG&pslVKcWV&6Pjkq
z{b#$voh>9<{%x1%sfhO-eTLmLG0Zgo2;oH@1=s8A88xtl+M_29J2!n}&keP7{mmNC
zjo1#UE&nl(lmJ1gw(|tf<=)`S_@h`Z5m^z+aYYNqDlUA6jKUf~F!LX1lB21m6qE%f
zUqee<#pDyV8asMo*%O8-FS|@W^v2PYQ|EDP8Q&3eCHt4xJU{Y_owB~ukAXe;1)Ga$
zwww#s4}2*go^ZxcbDiU^*H=TTFVNSJZVn$;<rVz+3Vd*k!&a?v*AOk35POr$awOUg
z>~;Rf>Ck}Kn_Nk@v&`&0Rvs@zgDc1U8P>A68PH8+g8;gC0{!y!f*<~BB`C@xHl45b
z=<oqMoB0Q+$c3<6{`twryDWcsKvibaM;gGbFhplAH)@VJgJ47KZ&)5r&)C=!nKSi@
zFaIVKozj=4Np~(`pN?jbXi}iddJZIR^4y|rSs!!?)c(i|j1ISz>2-g2;MXRD2#vJO
zx5Vl8VkxfjJ|1=QcU44~zD)rU)EFptHv~jtN|HJd-Zd!OJcg}OcjjYS>YrYj@Zm>(
zm(Wr*fY*cE;En0p4nPC-;)+`76I^3m!om8)Kp$38%(}Vj3t+{v_OwidnUaJl<0+@z
zJS|lj0@iZ{qW=f*J>H(;0W;#tR*x5E@tZv8VwnX3?m2s)Gct*K4uFMk?Cp+2wp0Z%
zK=coup7ZBzE@h`RY}e9+rhwLGaw|k@K^D`fU8b6vngbmJF!S?85>FJ|Q(ZSxU|bW(
z7_d^9d<r|%R2|O`{zt}2-bv5QjP_FC2ZoHMWhN6;0}BaKYyx;o?}9CFE}~@~AO0M^
zRxXzA?)K|94OXJ`y)lPf7~kXyE3l|`K(M^$O37Yy+)r0@3yP|)nGLs^Oba{Ca)w#>
zw>9LIDQkf4_odh^)F1$UT$yPylP?ni<Jkq9WqMgX6*Y1;wGOT7@XY=9*8~jOL$Lda
zSMIzK8TFsD`PEwOz}q|qT&Z#2<>o(2)Tzc!{H_-Az52S|Xr-8%JRE9m(Y(XU!}B#a
zYH2w^1{6(D=YQIAUS4C!-&9}AeMj$pyLR|H8i&U2;YwWH)pZ0Pb%S5@n0lEqKTZ*8
zF7r<#JLdQ&H|ews4!+vrzJH^?Z{zW=6S6*^OXH8H<VA~IKGw}1HW3GweC+v#&y1V(
zn@5QfTh*-g;bh_%zsxgM!IaIxrNa|8!}~^?%};5mr3ST1b~%zpwEV}7SIzx_OYg;>
zs&oC0=-}xlc%v;n5CA?c=GU6Hq^!fmVG<aMbTp4s8t{wjFmlNm-d?+S!fNc-{nQky
zS?@?NLZmA}Jg0R2DnFRgsr^!+?p>-F{rm*&<rn<e-bL*yoos&%OVRT+o5E5=9BGZK
zyD|`4;j>)5)@(7%LM^0>8Xyr2fzFCg^1o5e9$IRu7ju2!y(X3|jaK4*^~(A5=x5i9
zzUuH2<4i_IDB&_5HHK;`;UemYG?8)#tH#&`fjVZ;6I3v@hTQurgwgSsG!WVs6s&t#
zG1w*Zv4)s5=yY+C{b5!-$P-p!>A$F*#=hzBgf_jO>(q<4aGWE};&Nzu`|BA8Mn=Ke
zuw-s|#nrmqSVST~2vJbWdPYGGS4k%p`m3%L@)@;mICAAj#_$u8Is^gr0Vr*IqXS)<
z7wPy+55sPwcQx_hJjI!n!9d6D*1uNnJ!;X4AMEuu)PBRCo%fRmE>#IM`-bTl*dG68
z7VK2@`)KItc>?IE2Z@L*0bx)R;hXt4+wBjsgLOtNd4ys&(|@<Sce{9BMD}6@ZT{&s
z!5;fyUnjA|>uq<ot&PNKH56>{Jr_8b6!1JFmYHLtab@kyNpCjQ{4!SNTwwC8sB5gB
zrK{z<B=Kkyx0f6Rs^*@$A~8Ge%Ilr1-h8%D-nm@Tj*IWreA$WX>Dg~h%ad1d)8tG|
zOGfJsdWOZn);2U`fr&vNDbP_HnnF1{YTXqa7L%6=mb$W~D&6^+{A1`M=X+F=!QiL8
z&-O0-6Qda!8D+6XqO#TEUEe-9*$OF$!*yY0cHa+cw%Rg-?jz^ER)-I2eXfth=Vd}+
zJ&NXK(C_~cBW#AiL-)8{;Sbv3+gSJX#5N9j7hzU?uz6}PG9vRtGu}jlC6aE(FO>ht
z%8dec3JlN5;0uKT`w8oV8$qyqtl+!ovfrA850hB7-!^t5bb~GbqDbROe>?+Y`DKYe
zZRMy;YDMrtZ_f*idEBv|1L*8;!J+RP;_`>LaCH_5RNjK4ytuX0BunX=af*WRfiQQz
zDqj*g^91v?9MGDKTj~pA=NMA({Ay~6Md+2=ydV}=j#!`&xxlwCU!Tif&k7<SNZS|q
zbF=f7Ylu8eZEHA<u?}bC!YAtKA2<GMR_8b|xxui7y#tCce6YRY&^%gII!?f$Aq${U
zgL!6e^jr-35w;6qIjY;Jxke9yE`seh$^$;-hN_~dIiUgL#t6`qiT7eF!E&Yn@B>}d
z=ZVIb$LIC1+`hqy?)|gTbH9_mj6f^2I1nTD<-Zl1-uuj9ZrO%s*xE4n%fO^!L6^<J
z^V90X(`3+}Ctn&o;yJhK3Ikh5Mpa@5TU99)QJA`V0OjCUHC19@Y&5@)7TbkT%<7i6
zMNvv!iao1bsKua$0jVM~aPdEE`(k%c`a0)bB>0QZAS-Sz|L7ez${cIFErEWYoSMSh
z*Us^lHAO8B2~Q(>p|*rFe4Oq6FhSrK05v1-D|OM|%Y+OdB+uEdB;J(Tn?g-Pnd+Gs
zXq`Bqns74c#_GohK;Orlh?K?fm>I5-bQ)2v1<Y;2Sl6V>zZlsL=lZ^EvLI+|+>xRx
zd}V66il}aLS{<TWsLz8}7sXXG#`A51DRjNJ-B@<Q9WIm)do_l%oZeef`$g>s&jPZ-
z+sejJwvj|~MFd!nx2G*ElsFp{5s0n*dwyQBt`F`vPfLN8;y{X)#9%yxJ`zu&$Zb==
zfSY!Ey5VppJwMM#1^QWDo{PYM1qpA9Erc_&#+EWTJ}n67ygM;om?@h8TKMf<yb`jN
zsU4hhttJfKYAvl}637T2TWVE(_<~;L4y&mjp+2xBXj%niCgV0XMsSt!u<33$T@gL)
ziub<`h)x<XU=h|!70w8RZAJO)N)6zuZ)Kg&M>_SD{`u{vA;l%`U@S`<7IQ(zl$8Zc
zT9VwWK(`22P;5}{vZaX3cb^fo2&Q+Hrex9?PGtQk>?N>wQ~pC5(hZ#{mk3LgoqN1H
z$4fcsI4oeewZUCUO~qw(e0WVkW{@^l_!%D1<PiD0d{$^>Q)+Q!?$Tw2U(MeIEAZj9
zrJf4CD;qhhHK_SiQ!IJlBv0T4R#o3w>V5w&r&fd1xMeTBZQ3~X<5kMV4P&@@I2naN
z+if{d&{)ml(gL6l4k6JJZKhK(lCtM$9L1=W)TC0Ysu}Z{kusWV&SlK`2?E8kx9^0;
zgY7L81^oPknoNR)goQQvxQSf%eU`M(Cz)&GopAgurY@@CW@olMr{K`^F@FZ78RlB^
z;;ba6!mAK`ox`CA??$vL+Tcy2r(Oef?QxoniqOM9PdrYJPvn=p8IcJZupw;*Om)`)
zG{qP*+@4fpk&n@kSb}kI|0?bW;Q{o2u@Ftw=MD}j0hA4DYgxSzW7j~71sT}d3IDL)
z>;EFh&%W~1#|+W1K9VmB&Yt?<`W+vQ80Mo>Dj~m%dubKzAD51L3W}V<6`-6}q_?11
zDvgNWn8cjlrImS{P|#D$aX$wl_dE^LXo&h<zY{m12Fd<?ot}gNQ)C*x1YF^M4(mr%
z5jAFgBt!7nsd(QPWdA5@Mg}JyDEZQtwi8Bxj)C$?CHUHLGarC7sH#sTCq}PaBW$VB
z7;&OmsI}kyn=59@H4Q`!D!CfQ)zvavZ|CwZUTlnk92Pt`)x-be!uQ{rLHl2d$`U=b
zKGw?P>P9o)Ce(JQIF{pT$0h1W8F7()hzyZa<SYM~_>EaY3hG!3SbDAQAml3g&8$!F
zAXN$6S#w;0c-B8lPnEpj=Z+-LwYpxBa1Ri*==yNmO1EtPrpI$z;wswAxj0lMAC!&9
zQt}J;cg_`e#MpA5f6c1PsT6R&5mt4qrs-&Ru*j(3@qq(OKa@;tB*f)@r6Hu2C%!;S
ziAKw!jQ;Pofj-m~6!iG|zfx-DEHCE&tY9IErhmJWNfCOP<iq_U(v|{r-rr_I=@gxk
zjKdA<$bY485l8moZNE9C5OXb)8<BMj$O%uDRNIOM(Gt%~*FJnQ-p}FqEM5DIgE-R;
zbZdB6Y=2}FnI%f-+Ay><^NeC9ddY33c#<_Fazo6@zzO_trUMxd`Mh9fn&mZwCx41p
zo@00!@Un$@t)mHI{+>Nf*ueg{lzC=#Hwwi&yeQw<koqCGXp<Z|p~QS(CO!AADX~8B
zpXLi>1nx-CDELjrCSRQM)mM{WsTzc;^qkww!Lp27S%f@qq}1kE-y6lA#JEOad|yjz
zv_ZBRu-><a+;=7Dv8``x1m=2>w<C&v8|zF1VrxHt1{c;wcs{-TVXv&Zck6VJV+sC{
zWoVwyk5y{5&=eq8hUF=Z7<R-B)}d9w$PJB)kW0iQb2V0wFQ&MI$c9L-KyhV~x$BZ0
zRa})eEm-Bxh@SlStFY0B2N3kZ^v9>6ulwS|>}kO^kH{NItG(gmXnNdhX7?j~=BQzm
z?@Ul<RdsD&XY(-Xh7Ayy{`!ETTtsOeSLg4QYSwlS|DJlxlRHcxK&Y+csOpj1K$Rkw
z2iDiaLtb2;t(#nN*5xPYMRx#xH+U@c0lOkNR_5xM*Y>A<y9s`y@KU^GtG@Q83`zUF
zON=r%)Zkb;)}KCNVmP-=Mb$;~wvJNYhmoJ|eMSmvhP0fC-$zlO2D*2CPHK?&r}i0V
zR{C^D?*hhHpS0$Ze9%^Ss_9r^cPo_Z`JQUO;vVnu4tw9U!JHC!l+<Jn5?Uk_JHB7Y
z`MhDNFD1HA(WC9X`NZ<5ONZ<7c6oGtd3j{TRW~OM@Aq4cF}U=4z%>Ue`k54`tAq?s
z=XVdx>Hd!$=v0x!jj>J1%sf$6wUOH&r5_>kaeNJ~|Hf{|n|@n|V>nxcqoqjEZm_k+
zkKM!)hY3h(z4S+}X{vpt#LF+ndUft3iggP0Nm%XU)zFVgj)9`_braqe{s_3JR?(6g
zNKnuL4wF@go+xR#x|i7%>8{G<@YtQPa+*tb1yaSaFc;%Dwp-AniVtZ6sz&1ZKE8%b
z>I>xh#C*#_)^Onq9TxM?0<QZ6&EOL1Cu-@(Fa35)w0Pjv^ES_#i+ne%gqU^M=0I+&
z$AysB&!1X@uaR3-n@G~f7r1{+;~FLVsnn*$>hNsvlR&abM3hRe_QwJ9a{%c%WJg-%
z9G<%a5R-u63rKn}XUU>hoK{HCb~)Z3m|M2v_*_NU2fvZB!1k7wj&OL{<UzK9n6_ly
zt&|Tbeb`m-hf}TZNFyB2&)*5AwwbKiUS*ZBVJh%Cuwrmh>mU=I`vwq&9+(w7|Kre=
zlH*D`p>B1l4~#e!b|h+CYAn(xRzEOZwdl{Q^7&{H3t!a|nZBiH-CO%66CUrzSv*WQ
z*S2<MAzaD5o<HN}?o&vQ{^hIWoTngB6#)Du#5C{g{t0GXN>vu~%-Ho`BFkOg_Yk}H
z>a6Um)}ilnBDFmWh!4>p7pHi;iHcim#8h}NXmA6i97&#XPQS$m{x}t1`!&1D=?cSc
zpmQCLvS}5uTZXm}bbKH!i}w3<yi*qxQpTv-n8IT>->t851}km%8%%3IAwAINg(*;_
z%21Yz4kdqdkNLj#xtQe6g3k!V!QW=tpS7y@W^&cpde8w_OF?bsU)1%A-cdx%t~gxG
zO=V*+2ed0Z&0Nb^n?(I64+h2g`q(fEiB65ES0VZlG5oFE->~XPnCQ=WRJNn%$cHg1
zO6;Nejdd+2Lf<<rCsfd)=0KJcU?ph!r6y+T@v~o@e)CmQr;NAAV?uUUopH0<8TZ{3
z01!t%@>g-&-G3{Th%)O}A+g0~z$rNW+~4|g>hQ>h<xqT8Qjta|@Ofd$LejCymnggc
zI46{id5u#G6&(A1uW7BC>1du8nWk7EC9RW5fbc82EO0mCsq4$OgG_UU3hLbn@JQ^%
zEaMhLexKVee~JK+`P~rMV`Te*vR(+L>vV4YYo%*LEh>6R73$LZkq<3%*TW5i&VODK
zv<GQOPY;v)UZD=h`S{-aF81%cyLdi-ndl4NjX4Mm8`asqiRwC<5ANaITd%9B{f%I+
zYtGhoJubGf=6fe6Z2!tu9eoU9o9b*#n@+4Z_*wY?aTGUyr1s*>hUvY?I^vjr9!cv>
z;w6||)|#eQ=6NJjeyRL@6KShux7t)rG-^82Mv6_8=+mIX?S}UoXqHHlB)f7$-#fF|
z#KytKHazWU#xKA!iNDYP^_l_XpiCt_%=^{10fcfg%W+3h{dcx-j&i=4zV}nyUNIpN
z>PgaeJMOaUp1r(P$P_@;o8M_O%a8pZEBHiTude6Tk89S99+9thtQzdMxf#n4*X~ES
z95vIM#jN*<+qJ$aOsoYg?ao5+;{`o))ILdq*&KN?sN-90$`%X7D1$B7hW}{?=5G>w
zoChh;)PgZ%KyL6pIG^SB1};?xhK;apaNBN1$Ii6c$)dgw{MWYKcjAr+qHd_+J5BJb
zmZo8~T&zHM&;3c>5)&<jTwkcxKg)SE$c<yPqwBAffVYti<|2?LM;Ud)?CyOs$**|7
z<z&-bM;fDXUE=Niz4%P|zb&L1u+Af;{2g}d<%9VRE~puc<POg_h-2%Uu=2kw^9NJ>
zaW~^LH6wqd0c1R@2Z)JD>?-IDe+&)dJ}mes<db~+PhR{pb=ZH3%cs#VTpxQL=-7XP
zvFMiNebG&pFcQUp@D9o@gsx9PDa2YV$wcp+Pss3+6^s_pAyVGUDYc)dDnsy{xMX=T
z9>Ums9Ok7R2m`O-O&2ji*HGl^%xua{&k}o|<H&Uq0`aG%z87dE)VUpKKF~2M-o4*>
zXB;?tQm&U}8sK%grdX@r4D-rpDSWc!Jl2fcqn_~?@S`WoDOTU_Ck>0m5I@1C$v$pc
z?MI|1UMnJ!?X<Vn)?z9qvdw7C&{++Bh@|6feQpMI$}WgJTB29m1XGAE>yV$G-Tq5r
zsxNp(Bh?+S-{oauN<e6<gK-~KLfck?qdPlbU(^sRr{JatY%jypiL=5A8fVn5aKI1<
zt$7%%MkZqK0YeMLY!<3=`!2`G{o#=9p!sI&D`e=Ori01?4i3{z*PGxv7+2i!C{3w{
zj5_~wDv(EA*OrYkvFcu1=GmI~I85p~$Rz61Yel^T1HaJ+QL>!C<fCv}dLFXk)i<%v
zrW4jv_N)=w^H}-~7SiOVZ!)2t)O&#I50xA&EO;H5BV~a)8BCt6(b0T?H|4~|Z;bAt
zaiXXvdf1sz<R#r;NjkdPr*Y&0b`?IDA~&u_E9X-fXD8i}qd8AG4aqoLmOaya2<SVX
zgd4^L0qOJr#-gp(l>IZj4SwPN@5T1{rNDc4B-4NU1$N#yt}3%OsC%EQ9oK2gP8k|?
zzcSx1`#R;2!N)gVnxKUFeMs4s-kS=d_!A}m`oL^VaZ)YIMu0Z;vG*s9zmPYuSI_vE
zoTxaQ2acW=5N63GR?v-D9CKFKyR3w~)w&P-+R%vRKQ`*f?%1!I)TwgH5j@%97_Ulc
z4<b?(ldW}y`^M<8J;fR|NmqaQiWXOG`a?jA(2-m$g8p=SaR|a_*{;R92SH+Rofc(L
zZ+}_rV=ai;<;ESC9|x&Ezn|_CIQ%@rw~yRg77LKFWZ|}ky8MLK+iu*BI>Ip*DG8l6
z;QP3y;RN?|wMu#4YK&KQa)X1SS?~_Gi;JUR;6h3;DKiVgk86nTUGdSNZ#C-jxoOE!
z`M<Go(9J(YY+UoFhWUEQhOjV!vIXF#(FiWS6Ys}(+#A>mqf*b>WukGxV&-5(tUT|E
zpHJg-y=ecDb=d;D>zz(<b#Pw-UHX|maaEG@++dSoZL}zIv?{#LGLvTv_)g)D+zmEm
zNDJM$NUk%8KW0Dta8g>^`@$loAsr9<rgZwqTAhtCSWgRMqR?oss{VBycwz`mcQ5g@
z_wi5~(Z@?cfzX`pi%6`4*#NV^U)cYG$WD0W_3;GmINHn#N&@KY=*U(p-Z{-E<#zLr
zNJ(QSH>urwCVPo{=teQy(%cLJUIw5K6b9`0TbHhcm;JoV`HjzGf|v8!3aY8Bp+(0a
zoS&ax;g+sAhvY7xm!0sPZqAR#$vjb-U@GQh-I4FQYsAp|Zr~%r=2AI)xtPzjzHMJ3
zS>;@BWF+FM5Nzw9MMiI<Hj09Rg6(FztHp8ZkMl{3gH_7(y6IB;=n*X~bu<oRlS<9L
zI(63xE_+ul%sLRRVrIMF_NRA_tUvK}UF2NT<<OH}H2LZi>+BMv5_b&Tm-TJX%!lXy
zwlFZ^*zWDb3YAMad;(QGc`Y#6{7$!In5)q&QzvohYS&<RfNng?o(LFt1_Z?3Tkln$
zkb>A)h!h>WJ`u%ew7yf)3;F+Dd>AEiF|sUEEmSdYif77L_3}I2g)rvm;wfqiT`{~>
zXJZCpsfr}T3TUutXrr?*Z;7mRwC7CE7CgPep5sQ<!q`SaG-9olfj0F>{(FU2QU98$
z_D?c`&Bp)GSt}en@-6T`hzkZ-8mMUpeZ;iz2(?l-ZaT$!i!t3xnZubr&<)r}|K>De
ziM=xaR=g?1HXBpXykzYTl`$Ydr3Qq1P8nzD`gesaX=SPnnZ5c;Y!!b=y8>;*E7QS$
z7$k*l*t7HV8t$qh&O-zP&U9@3pBxXQNJ7*InzH_IK3of^x6}{aENiZs+JH%4;2&~A
zsJ>`A*jMB|%SVv8DvO9ceEuJefRW$T*$G&yVg1SHNQvMl1fd+b$GBqFR5N|$WhyiO
zk3T5;`K2YV2SAM$U8l8Z27YH4v2Qb#MfDmT8<9Q^Ts}Ck2Gz<`I_@<fFiuT=g<ZOL
zCg_}97}l}4-J%sDRpLI<Jdc0IfCjj+E@u(HWT@UA@cp42sK3r{@%Zsv$;|$lQeH7n
z9P3>8>*IYMpAV;YgE*4dkW39*fD%g9C`M9^px2M)0*ZHStC=AJ!B-J(yW0iah(IF-
zkQ(!%t6{DvAd^5UjmJO=)sYfdsWatB&0sC?KNIY{7{GWO^4w^3LXdIv!fgJv;htZ8
z35*53fJd6AOTg=?88(l=(;vO3rVYtK0VnShtsmBe=F$?*=P?re?ZCgT9Kk0FdQlgL
zd3w%(6YLpJwrOg+ad1nG;c@)>x|r+M@|+6l?P)po0dR)37MZGA&<;IAjy5$d<_+qH
z=w%LK0B-{$=Fn}+ib*kzY@(WrOPwA}&4__bwo{04;PpB|!f(p9J}L620%CV`;FH%z
zuF%os%ROq#Wl;Cy9DA{q>qf%|`_p3rNRV4eQ<~5!B{85Svv^O>LyXYnd{si$&%Yuw
zX;eK?r-5Vrk9j-++c$JEi|5&8zRgzzxCJ2pCj^Mj)h&>8>d}hkD799tLYNmAwc6U`
z^mQ=2;h3QX@hO1d-^4$^sZBmHyG>Q=H%;*Z%L`kr4V36LRnX(uf&IN_6$xQ1jt^nh
zI>n~iR0+sS_N45X5tX^f5OJMqvt4Bly<=)!!b5@Jpstr_$e#P3`rQN4Iq~hl6(dEI
zz$QByUA8}k0YygllK%o0BSwQ;Ez251sV#+-g(ygPzlw3d^G|Ub1`$rJfAXn$105pW
zWQ4qD_kq>9mcFo_rTSBTJ2gudk#Ia4@P@avy;k5BHL!+1H?UTewb~SHt38R!RF1QP
z=)LEq9<pbtt0y7k`gf1uP_<W$-H&U@Bd7A=G+fi3AmaQTPtIr|l62C7)py>j8tpfg
zMWs1h2`P|q+m#xqm{Z=Y0Im+9mQsIYSNl-**SydY+G}#Nk#~qmhDs<CYyXh5Z0jsE
z5K|utaJA|mcm$?bVIkN$-`!Qp_gx)U6FezQo0BOg`N1##I_Ag?;E6f=RPjFHZ_Ufs
z3tTGU1hg?#mpwxdX&hS3hBn-Ui=EpEh1cPsf+C*C?p_wy-^!X#F2RDGtw!1vG2*vU
zPkUzSIzvfAF*i1PS}&PI!4^<v5K>*p%7B9cZK_B;?Pi?qyR>Iil~}QrzXy#;3rWpg
zSEvcS0TBd{`<29s&~UL8+F)mLF-DtF)b$^~4|Dca5&1UV*BkQXI^v&?7yb3s$n^eh
zX2xmQz5?j0UrReaY24O`4}=PZo}PEZ>@1V&c6cw>X@)WY)Z@H@xlsZ-MuMTnp^SWU
z#G~*pa?@|kdS`?%%vfD9nNCty!PpsGg2G}5y>b5G0veFb5rGX(X(KTh=|S|-|BWJj
zEZqjFONZC#iKOOAe4k`AGe<Jcf$WbQw2ysv4W~qgxG}Ug0Y!#eGoe2!m)Oy?%t%Fi
zI8V3x3Uz9Y?9N(HF&Ked9xSC_AKQyI^cNi;!{UfzC4R>5Lc3b$H4VK<uvQt0#W7QA
zPxtGsFG@n**nLyyB0oASs}augOl!=tx@K5mJQTfb@9@hTJ(;N`P-j+G(|qA+XqT*S
zqUZ@?td6G7r)TUyj#17etwIb&x4wSH%G`7DI{FBYd*h>6!0M)DZX{yU{n}MFt?ldm
zb=rtfM;3nFDE@bs+Mwelt7DW869oKvZR6>3_`j;7o}QA742|=Y;sc5e9!9!hlIL;W
z318LW!vPULSoRW#nm*x1SVOr)Vqy3TI3BfFoQ@+q5G29#Vhy%&EacLm!<DbSw@`gY
zq$+Ftm3<ThHppv<aG4!aPkipbU&?SE-P3Y<SonE^SQB989It%y$wDLG$(AU-0|>as
zPGhT%%&j$_*{Dtr;i#_wl2ESz(Ju;+7v3TgXjnH*KMwmIGOD8n0{K8JH~q7Qzgh`r
zXRR$;&)xschUd7Es-?C#nzOccU0PQRCqApk#>Oj|KCa#}WDe1BJn!aZ$K4lG#ZF<$
zMQfxB133JIAmV0n%DrQU{))5=Y*toQ?Iys8Sw64f^kReex&c`U{|p*HLbs!}?J{eW
ztx@WsziT5D6h1y$>KfhHdN6Ga%9%0qXj;SJIJ^6eQ1(3KPGa{QhtIcdw^3p`i8{uZ
z^S30M9pluvxbhVDl5Kt*7=I<*7YOxpA}$T?NUCPm1kHzfsH8pjRWq#3RpC5<&NI5D
zY;i=r=mQ=PD4k;JGX(TL9cz)Xvo|Y2Ltp$ALHd<4)%~ZGydO{PfUY!THwrTAtVU_j
zSo%wEiqnUUKu1ZBt<_bh$Fum8brHS|cuB00;EChc+(EBGf{4zB<Dyhy!IFYe>y1LK
z6c*XA1V{JPvnJr6Bo9sle0LLrvzeYD%x~d$$uV#Tph2BxI<A<Wu5Gclyv&?I5gn%|
zXplb;r#zD3FOyCx{<Ft8QTXg}XZu{wWNdu^p`?VUIU)ab!aAw5g-mTboZTGSvt)M{
zo)V{LMzl(vXem=0@}KcpEkcaVyaf_TI#3Q&u^A7=;Qp{deQrvNjxU-(me~85*Jc?g
zD~x^<WmA!nD5l{z;5ZH(_x@UwQ^zMgbliv=jPCaBRkvB)@&fr$Kfj|8r}HfTyukq&
zmB~*b&6znVD$7JxpwmI)j_;Fh<~2s4X-7lvHn|~MgL6fbzR}!h)@PT9VIsQw4EKHX
zxo>>m7LYNQh7mOjFv|=^qnX+97{t*o$eD|!VGyhr5FxIRn3z-;{Tin)my_g8wo#Hk
zIhO^k^nESlqA2Wug6N2vOpvLo#XMhp0QTq3gs$uxY*buCH6WR>`lzIL4KdPZ&qFkG
z<7<wm$j$x%7_Ujd!s-N@&~e>mAMtmunuhWV->0I<H5+E1LWqlBhv_|2irjlGEj@5)
zxg_>3kdt6|D)Ais>$~DQsyU<2X5YC&IKKdlO-!h!UO$sAap6JycHX-mN4r`P1Tw7=
z6mep*v6q_Dl^#$~D?xdByXQ9>mH(itLHT+A@VFk%QN~MX{-`;q5LqyN`XNUf-x&Cq
z@c^vveG?lSSD9JN@)N|IP({uGL-RTnp{OB(y8BHXu1c5hGX-ycMW$ie0aeu=@J1LI
z8dj8+M$jv98Z5NBY%>GeK=w$U-rfsw9KD}zg@1L^lYJZV3nvPTXY>DY!R2o@g8U?j
zetP0qzU8R<fsBsAAHHKk)oHnw<L7^*2-(JcJpF|O(d_o=Ye*NyXA?5eTr&PAVWaAU
zbdc$}t)52%f11oLmZw>C9gLqrhCo@`7L%4edv=}?DvX+&Z*@i!Onb?2Quj3MjhHLH
zV|d$Y{|o6-j|GGHEx`ar(N@!j`LlfSvv_SyYms?+RoTw&U{q6<3hwk`rLE&8dv)cw
zt6&|#JmEr8YrtzD{zSs#?}a)~lXZOuDnH?<ujh-2-{sgVzpkF)%`|et<xHPT3QLwR
z_|FSZ#x*W03VatjiV^F9DYbSi7s+K+(K{~$36Y?Iq5^IL?d+Ki-@=r`OH__W9?G2?
zErkJ_6JXqZF1}dPFZ4oRed%EjdT|aHv6b!X&*(wbhft;aaiAX#M?_(_^S!**Fn_bn
zm6yav!x#W=lBGE^VxwX$ThcNq@WXadbmt})@`x4^S|`^gxzyBSi~K+?vrv{VzqBN?
za8V%IWw+JY@(%$+85tNbJEMHuiK{nIqU215J8jZ}*y^x3x=$`73|dc({mR#{pT1ck
zR}z1)3Nv~K+1>R!PJZK8tTMqVUG5Bb(|dc3+0B-^?Xw-$2~^ef_^V`WPO{)hyQwr{
z`2fBwG@dbS%xZEYHss&%<9nBxULO^+Uk)WgQkV7*FbN2{qzPt0eCV<EOnaLa-0A2m
z-ikP{NDv5!`owEt+uu84=8|cUkmtvWo*rYzH(lB?Z(qHGAX4BwZr8Y{*}{lSpQ^C+
zFrvUYjMa&V6tZmYuWtjrz?H5XumoP0cOfnHEVUi>=sH?XtrVpjp3)EX9W0nI%UB@%
zhc2i77Zd&4Nx`OvPunw9*?~GoT(KH|0&4qi{;qY8oiWT=erzBdYDgE@Gn>BgWM-o7
zms+{L1l95#7qws36>zhLS?t^PsH`Y$%abG>e;Ixg4~(5v`}P-^P38yD?j|mPHwQ-}
zDbsKf|7yuwbs)B(NGcMzaVW6S>WuT6EY8Ul^NSuw*FRBedAs4*z9yfH-@b?Ws*n0l
zrarH@yU0gF+Ue0*dfx-E6Z<g&&*Piy0;CDHy38@P2?*vGRPtpYi4<jZb&}LauK%K0
zFd%h4DP58{onojK!=~7g57+(b5E{~$IC#}a!N6`3mZ?}&@OfL)@WWK$9!_iM<wJVz
zi8?LPYqE2Om;HMY<}pha`RSBb=T!;zMZT;6cl<`dx)%0>U(P%3XvK5|JYEL{ID5@P
zn7xqWD9qBI1<x*8+L#@}zFqRf`XmL@D`mc&BS9>;C)-dcM8E9h;X&Z6HX<X!^U<i+
z$&IHcY4~W)5)gbclP}Cz0^;$T(zADPDrGa|%bgWSBzL`G@kI+CGzZm?t1gtU%!$8r
z0B6e=R10Mg6ue?xFAQsag8x;+D*g(<+>>{+EYkEKwTR|un_j7ivTy4P#~ClI_;6VT
zxKWm;atH0roC+jd8%mGhJsfoMFn**Ct|V^Xin558hqp9n`>^_7Tyb1c&)C3)&}R-|
zxh5*N3$}#ptClQ+Gesv5o3zNE!|u;F^kU^16$)=9)6*{Vq+|%ES9m>(j3p+%(8#tZ
zGAkJF`0p%qVty2;?`)Gc3MOn^^qDMK5d>;)5|pa7I&B<)PUgR#*w4N1wz)g&g-@6d
zM$R!3ZsZGl{hlkfrAj~r8>sh#e^KW}(k?maL29ow1dM2NN~mhjd&x{acH_Cr7B*ap
zADKzW{+rsh=z#b1=|Vz6M+3Vw#~oXjhZCqHsz3(PHUtg%6<3#VIgc><=!0$s(Oqk`
zC0+iQ%M4ZP=kG}~Bw$o|kJiiT0q|uMyOhN*A-<BBz7hBbv*6hsD~X3GAn7?np_`+e
z2{S@{E&;Vb<9yJr^}-#Ra!xc)Gdqe7jrWk8XRXYMg&5^i!LHIfR*pB&K%deH32L@W
z){2;mn|L~mmKZ15?TLeBQglkUmCabO<>$xSY(td6NUZWOR0JD2{>egmA3Y^OcJwV$
zCJAKJP7l)iC45HVjq7kVmdY4)ZOp()X9?9)Tysm>+3!9N@B~LDBsJ0-QWC5<XZL0U
zwS~GxA;vy<pTkjvk`7=f&Q+izAOf$NJUhVqYuMcx0=$-B1~Mly!^buRNH9haHZ|?d
zB^pqL=LaOa$W;00e+yCo3u<|8kpt{4Si<^_{K5!v)w5j!L(@jvblW^X=nW9rb~`7t
z*0DN`_}>%ud|<AsJUt~yDJ||WB`=O<U+|Alm}1P;(~HBZ4G6`muq-!HS<f{vdQb^_
z=~-A6Pzf6~=zkUMprJJlhIyM9SvU#~%DPJ9PL__?UjV432PKP~6DxjvkhTi>OwIJ(
zIJ=bO_3w2}9;CooWbU)8*}go%_-85n)&9P=Juw!ZxYML=tcVim*?)%_*4}o+F2nG>
z{6B`6-0z_mnr?Yg+L_vT+PkEL&7Ar?m(#3&Cf#2k6>~i;J$~bEVyJFhSp2m&m_^@)
zGReZs38Xy(!s5l$O+nAAX1?tTn*m?Dxzt)u-pD%{opu&3akwreRPLpIXr^2kd0?%r
z3}0Gkb`^_Z>HU{SSh39e%u>SqvcJ?mrIp`Yg>NjFpc~fX?%m%Q#r}w17%eXbZSx~A
z?7yGFf#}|Qr|dHn^6Op#KP8=x$6{;uq;i~rNi#I>ji4TXl1LRj=i~%32fqH)#EWCe
znJ|uXpa3j=cX>bX2EZL`;7TxnzIe*g1|87eX!ds1*5rHhh6BN6-6OtDA3)bL!qNUI
zQo<q<%Mz3)C|*g2i#CT@1fc{Yzh$T7u>&0_{ER=?wtuG?R7=jPmTomog3L@VrxDwH
z<a;BU)=ojRJks_tlP`Wau3bk<r-($zDs3bZ^Z!tFmQihdakp-<7I!J`?k)ui1b4UK
z?obL8Zz&SIK!G+C3m)9Hp*Y3eiv)LfyXpVE?_KMDnZ?XXhBGJUjO^du&$t95LJKMX
z^mH}aRW`5wFHMl<6LcF@L;@s+B6fRISC0!Ay$@Pj6Y?iy#w3M<{j}>X5m<xTxcHCX
z)Q9`>cHj&g7F%XFUn@MBDxB==s~wl-cMydunr@+jDkKuaZ|QQ%;<HV7v)R?by+#O$
zq8XkhBQk2J<U<vA6GL{rU~ifenMm$gse!?7cAi+VPPT0CYU^N|YVuk{04V`ecMFZ}
zxB=1nu@3!dDBr<vpOzW{uW1ShSzE?hUzJOGdnd*!#g=_MKr4Ps3eS+ayeh1(FY$e5
zzwO#Ppf|XR5pl!lPW|3H6B^B3wsduD*PHe(o~(Ry<^nH>hm5Gl+~O1z^R*}_jn;BF
zJhBJ72fxeB8lB1{-m5$-gjcwy{*Ri`fat1!UxFJV)Q8$V-LrA<CgO6pgi!GW$u1Lk
z-H1d1kFn4Gf6u*3;yWao<$<4b_moL*0g>^qn@5V!u`<EzgWxsY1=>MZB=-#tPrAQD
zC-o*%bcq=?x|<+;AHw@Ghm(01?SNRC{nD4aL=^gIw9t=<KlSjHUojK@29}4s|0}Ub
z`vI@*rc5_#b&iftS=metxspp>pZ*VWBTloOuS^Vkp38uaFsJUqNfHJ<tdl_hw{^5v
zo$I#|dN*-)8RBonNHD!bhYZ~2{aSUdl1D5Wg5gdO(9937C;@nhmZ`_cF;6f}iwGP=
zCAsv1gh&$1zwCIY215}KFwH)zTrM|zyJBAUfXh@pZJ>+$8&}B-Oz&aIACaqAG{jd-
zCRBQ7=Iq!#_prwG^eu2;OfdzF$*HUVa{(*Tn)qC70sVtHyAC|qWAAcDLUHM#G6{XC
zxD8n%g_D2dr@eZSSdg8c5R8~nzCxT!J{wx-B=PmFZQpwtyd;j*9bzO<oY|~Ry*0gI
z8=ARl3>1*eGS;{kRg4tzED^YbdtWBH<Y#sj4&lI@uZpY1&(o*L(~r<7dHU?MQba#Z
zv%;X)_7!{ZV=O2+Oe%M*YT`KK>X|kFW>tdTDZymEDoe^bzTl=GDq%!)+5rq^qihzg
zuWO)F@p(Hb!%hD$$yIvzUyq#T^$rPW5N3=W#QKYRn>@(SCo!H|UA6??+RvuPKJ@RE
zI?im^ZIO%*a6PLpW`tV0`!nQUG0TU1i6WKm7D0vCPU5gPCl})0eQ7S3ER<Wxe@vnQ
zFJ>w2RiZGke><eKxp}Xvg%3+sNPk>jn%K46ZY=&ovvRM{lwTf6qdL0keYF4P{Rm1L
z(UVMcH*<z%S(3P>w%mGYX{kkr?Yah6Itp<!Qi3^+y&T$ciEHuY9V^Aa43%9hIMU~!
z%jP3aR&09`1R-rBajUd1Fin(do#Tg^?DDEpQKSX;j=b6mRLqbqABNpXNfE_NRVUdo
zykhkUiFRghY1M*Er{9zx-z>x!5weN5wWJ*{*yA}lfdSncjWAFLSZM!_xoDW!&8^xS
zhb5`;78Rj+Jh4hXt{1=hc?w?*?*?67h6aCGUbv8C=U{<SyK-#(`SkkJ9dtgPOdW<(
ztsG}G>-tPm{`XXpoL@E<>g)mIh@mz-2muuA1&o~NF)Ea`CIn|(35RAsGGj!U2`OD!
zVgFJlcV|H4x{_^YToZ<v)lb!bA~KFAGQjm@r^rN|qcOISWm}$nLW9*WO})g}<i;gA
z(4QXTzU)?iCoh6YKET}0SSwn_?E)+&JSm(e@|9E4T=RD;lGBKohLY5@lM6Zn%35nd
zCJE3t*%_z_-%X5}dGQH`%ygl$Rt*qF)riggabzoJ7Xtw)5eD&l@)RYG1~Yv7u6q^}
z{!Yzbphp~C#xVQyi_zh5=)}jkuX+t0i)S^>m0BQ<-j%9`+?>bzzx{L(>)Fs8X9FF7
zE`$o7Ng+4OJ>k>im9mkao1MefCGFteqif7R4`gt5Ujg$9Y753rjE~GZZ6+)ZOX7go
zNcda<uV>l%Y&;ZGpC#f;)D8oU9g~|2byc^8tK*o6CQ5|P#NC{q!kYW=gRK}8%T9S*
zQ^1hWqR&0qLXB`Xoy7ZP;`x!-xyCWNuTv$zG+wp*yd9~e2d^3%HMYDLe+P%3MAk2F
z*<gPXeMTs~`IZmsD+<8&7zAi0ks`Ljo2$$r@jj_}^QU?sb)nC_87M`wGeE_sA<h_x
zq$`qr<Q(w5!DrdZU96MTipl`YH7K5WEKarmgiW>QwI$IGZbA#(w?l~S1ks9~UYeCu
z<Dk&_&Zp#gkFn`p(}t>1+jFzrW$NqsPJU~jgg7H6)E+}wVwX71;QO8L*i6IU3}tHk
z&+Tn*?~{xZz1A?h)_5Vji@FK^GCwZ7X7Tsy#w`R8hlxYyKh>1~;hLIo5YTWG9AgeV
z7u!Zxmy$0dM9aUDEVC5NUklV^tUs2(k(94=Z^=Z%)-MkDnkQOuEWXcVO{H_Ek1!de
zCfrkx>#zjSxP`_v(A*;F<Iu9R$Fv?4MNp-xcW_6aYhsi#t}GE(OpS_dQ+f|lml~9J
zb}mnMDjFGi!9E69z}UWziV)zT6G;@~M#%P)VFQ7GF<hL+JtrXKJ`EWXYH0eyIUM`c
z+d}J}v>Z2wy;FpZA3o6FsVc(vzEqKvc9j%S!1^q<po8{f5$j3gt~W6Idy(D0!6m`R
z2Yf-5lsRK#New;q$0Be8Be?<3gexJHvRhq}io9s#L<gH=@hdLzxjPqcj;!V4wLp0$
zZDpscY%U4*j4;G}eWq8?>$z|&4kL<J;CqWqr<CK^LY95}y<!=8Dv!!qLMaM|W~cTD
z=Ph|?b>yc){#cDCipAkh@EHb0no?LN>I$DEdAr{@o%8-%rF&e;om$@{N6KRf6v0&E
zy84|Dj@j5Ne4j=0rv!D&C<&);f5}A^w_elMH&8WZ9oc>k|F_30VWQ+uaz8riN?otm
zd6W_8Bf8(6CY4SLZU$6d%jSdom;r%-8QKYgO1gSIy7)IW7=lsE7E_tly1?~Ck$C#k
z3Yq+9&?HAgx4xCdsX^iCb5>AgnND$2_tMEHDz8n&j1#PXbfo;19Oxd7Fz2x3>3x{s
z#KIWQVf0co$K9A$w1}Fv;3#Zc1&D8E^F7I~tSl>dG_~ohGM~C#?LV-R^_QJ3#f;nJ
zJ^#I$B@l-_lLU9!{q;@=W85YHNUZK**`-5<S-Ssb#`;f06Esx?IpaSJQ+0fllc3G#
zrZoK@6x2#A6?8%^Kd}d;Y=Tay;3g(%CPqKMY5;}ggOd^U!+Vp9`j(?nU>V-5XOiEF
zZZwC-^mW7Du<QG#cue?1ig8E8pX<W6rhlpRd+><#32!edw!67LAecIyI(DditJ^N~
zvSOEnKG4DdcQ8sZF%VxWB|tnrG3Pwgpxm;k+X1tWbhVL8%H&7ozVqIcSyYZe)j|*K
znh9w)xIQd1`70OJ>2WEcD_@O{KZq2j<{xF!p>q5qUp|q>ZwkX#&b5KpB2+%pvP{+L
zpAlBa2oo3N>{7Xq!>ZyMKMtdLj8-@v!6m7yLIn3q(nzh{we<BP$eh75jiX#ME^kbm
z<s>(C7jM;rGkUS)jKPTk?QuqMXbRd(6|kA>MEBKR!^ob3lr?O)Eeu4MRAk8MrJw4!
zf|qO5I~DE{82A`%!nGh;bFeEc@|L!{9^iz5i#JQbcfe6vg@|EHfRgftxFEfU#pplU
zq$$iYGwVX1rMx*962g7{Wz<||PJe8s@jT}lF&~ZgA_Ol-gaVOa`o@c~OeC(tP9g*+
zWJ7&jB&A83!lO}eT=Li!rzO9NJje}>Su95)lJY848Dw&Ae=nK@B5JCF-5<49%h`S~
z&(7VyBdA>0%o}GN`SteoKFb!zhUSLDT1Jxr2#{SDAzi43+e{vtfxgmRFJ61>pn-EQ
zK8Ssy3LNC{0eal+)os@$))y7^0Xft#{<b@QzBlB}Z(`Uk^}w$9%>p47*DX}@C+o8P
zNIdKxguG*>cOKnvn~r-Pby6TU*I5}}m>?X?N0G)>4#~GeU$F}yhb4n7(ABxr?~o98
zg(libjy`9^*#uznKvPqa+9W$fh4W}{j{t38aImDQ$*8P|?ucSQUf0vluaWnY(o%G2
zvm-`=uaEB31&^MAO0MA3CcX8qpi2d;ZkpkSD6V7D-T@WZsQO9KQSdW()It{s=pgkL
zWKidA2rIaqn{j^PR^U)^PtcZM484k#G5}Pxos?r)!RQU}#4l4|Bg4*XeDCXho<>DA
zGfUZ^Jke^^ALD@d^4IF_SqZWBk-?c4OP#74&>~0JNOM&fCmd{Og=*X_RN09!5$%!?
zPVB9eTSEMp`uruhy3G6+K_APBjkVWqfw#_G7d(I`R3DB*3L$64#@Epx_>M#6^Z;Zn
z`->l6%$7JFo2YhiNj98uog0$Uw!tFBA}hxHb~6PgQi>!39~gDVaMEVnpWkcD^0kUC
zC5W2$WT_b0GqCvJJ5K&IV>TS0fi41%nISc2RG<D)D>c(FV}OXd)i$SU1J^aa0WYf|
z&({&8SptpxF)lwtoA+$~dS37b`%JrRkz`M8+U1k<Xm(TNSJmXey%{jt!reF*xf?>O
z=(Ia`e{8%-(9^xE4S8H>yFpe_iAgQp@-QA)>0+WRPuSe#Hh)^bjbeGVH~C8XW0$M?
z<WB`nQC|qBWoQJ0Wjn@QE8-}0Ikh0qbB2_$rCH*;EL5b!yR!7U!FWiUTEL6|dbeO@
zY2PMz%;)JOlE1Tzod2Z5tAGp<D^#cMdfIT}eEiukJOjLnGFqYV`6Fy35`&*j(pC}?
z*k9l$y*IMbqgxk{qc<coVP~(@nodf>&Xox`@4@N%DdvBWHeG$`B<6?>rH*y&UplNG
z#FlWAqssw<Nm(=C3;Da&kQaSi%C#dL&~*V$yp=-`M`%r?^{+RuqBgpIRfI#6t$RAD
z>Q2V`|NpZZPF_`I{dFOIo)<!q{ig5bACK>-w;Zlw5fSw{4=*{(P`6VUKZZBy5Q9<Z
zJYmVoKz|Ry=PyS%eGq4_Q%bCkH&x*tSV7m4wM~2RU~c{(Grv)wua&l&2QJrkEoaei
z=R-7q412$mfhRjcVZsonAQeH0IIzes&#Wshh7t%8&U>bX+h8ruW#eKD(`bRDl#%Rh
zFR_OiN>`%neJr9@KYf_*e8_Xw`2g-pd>g0ucR_le13dc+|5yC+K=8F>a6{Gd7@<=(
zesn{n9Yf>QEU~&oC-OJ3Al{(iF|^&92(gdGBgcLQxcVZs+Tw#Qh{NYga#<2d8b$b5
zt?6e)pU>urC^6{`<*`xUR7>^7;?}O6uM3!}s<HYLnrf_p{&fRFs{N^%yi`+p%j4(S
zMj#TofJ;C>8}Ou0r*kRvrt&Ckj7pphc27;yyr*icx7O-0e+C(?*Js4PrS|EQuZVHy
z@P4x)X<c7MKMUX>D(kP;dX(FMD$;*`;|>0pXFG9-3zj{9MFi1IrsS`=1K$hkXLKOJ
zU9ww<oA>g$Y+Ka~>*`%MiiFz611(sIesp-iT~I*%^-vQhxT8lx1xF)s1bfDOKTqK1
z=JJ-Ip@O^3ZdM=cUR;4R$we7m$Vv&D<~nfhgvz$Q?Yg?~h2L$k;L#j)Qz*iZs*AV1
zGO5dgc4Sc~HG_f_ZB)5XbN_q>S9K*5AU74F5V3DMf52aCtY#qftTWMidXZp&Il`hG
zGQV=M1XRyu3hJm@5llsb{T77A!1VO#9V;&N&?dO$qDZaEI3VvdVFH&y5>;)GI#k#_
zNr62CT5OM>{TcIC<&dp9I#I#|EsYc#&jwC)%N>!L)Cs00nHKOreN7R=v09tA{W4d4
zp=XUq>e;u!bZ({^6(iPJ<`x-Y{X(>0t*Y{Jem>ya7MnuY*Ya4&XG`+iD812f+!3eQ
zKg#BB#B?$TPiNmg8IP`8G)U&cL9^d=_2uwm+OVR?B_XeeyOa`YhDd^z_VptkMVOI2
z4+A?cs(U|S>e9@I3mFEN@pa#(s~dSw_c;?7(QsHMm2dQ5G$^~8&f8blS8t+{%p)dg
zRsX+n(P^c*Z?Q)dZ(n>$2)M}2{T@x;<Nq_Ie+perG16hbMVuk?w>9<jS&hL>7Gf(m
z!tzo!vvBdoBr=Q)>UDT=$o#vy%H7Cg$<t6zZ!A2z$#;%H$tqL)@`HEm&h2(K@gU+F
zI!SB@WSTkr%3<~RTQwAakb>o>tVs2I0bclY80wY0d0XGyfOJ_U>L#w`XD-of#EqT1
z=M>S;yj;G7aG|u35skgWL!m~buB577g54cPE~Dr7^#4&Tl@s&IRyl=2&NYmU-w-o>
zyX9ciNu@)Sw+Q}3N0e?9d}2UEGfU-vCzbAlrs;q8>noHID8D2i=WjCDjnB#H`WSKX
zrp5hA7viinbV4GZ%bfWQZ6Xzo322V@m^!|NT;EbLIzG<h`i)jl=_E6=4@)OLhTi`1
zkLrXDeU!bKks_Emp>?G1?_8-R#vk(KqYP2AHJcIAGX)*}n<M|As{OLn7d?pNZrJ}U
zKXvOPSerVuM7ZSo<?@T$CHZ-@VT(0^gFa?z(5L+B9~9qaj`qw899~)+uC^}HiKrUe
zt_5nyU;VZtor!D_x^a`hlz15zVMfk{-xUvJN@^xC7+YSZ4*z)jk84B27ejFq&C`hy
zuqaUm#|)v1KuACWczTjCd$M=30EI1gkDaN0d<MXP!6r>3E0^T-FK1j#j7TW!(+xMo
zh;HojG9@M02Vb#hyoWM)f!aI;JHdHh8N0(zQM-)AYT73gLCWD>t7`5e4I(tSd38El
zH+OoMb*gT(mR<aPBO7t6$CUh5M=-~pn{7d71x4rwnvNcDCpZx)(A4CZci`%lx%hNv
zDu>-#t)x;e+7}pN<>TMTDgs(3z{21<WF<M5Sab&aeQW#nI_j2e?_KWql0gjgn<y(8
z=-#dk8rp+^^8-m?C<3V>)q{-oHXQQ$WeofG4nO#1{;pq@)oQ7q%Ta~BcF)EdWeFN1
z^j+>7@?GqQG(X0c)fpV~_u5pk>~|_(2=#L&kwUT~&p`Yc@ijlTIa>a&UGPrC@s5j}
zch!yrXC?M`k-W^f|05mn^p{b7UO|Q7;Tr4QbIGhuS10yM!yP)|<qsZF+>)U%Yqb-a
zjd(TAbvEd<OTY&y3e3QO^G#>&o@ojlAX9RPTAdqPcBfP69ZDqK24@Ag(_#6H4{^c$
z5;Kdx)yw@mDs*v=MI7&Zs54|#%n-8hYS}PXi;5x?wPd)FqxpZEM&tOj8R7AVKf#Nm
zf)n~n1sC!w2n7B7J?CBaXm9D&;Yk7M^p7OxW!{zckvSEGd024kV_1vuI}&#nm(u3V
zm?n+e-d=^3$NjxCy%wSWe1BJe+m$jTo<FF|fSW441rdIusc+L*?`m)(Z8xam0iQz`
zd+zee-88FIHjg87aDORlch4D_&X#AUo5cZ`;xdO<usgiSB~*w6b6J=K*|v8ShxPvv
zg66E2GCXD@*!K3@3e3l%!F3RN;6|<elCxsQP2`Jc71S_oTR5i;gFuu+=5u&<ms1-g
zC86*Fm&~+J+unyt_&>{^byN~IMMJG9vFy}TRD}bLdr^JktTUz4kBkVE$U$4myuh90
z^X-gBC~8FEo^m<rz?GY+x$rDzL=%m|W5OHM!<BGdIn?!RSxEGT#y`~>rQ@+R3tX9O
z?n(ObGX#N!IwYH2o-w%S+u{zK7Y@)(G6<tcty>3NTf7(E667w<c#~3?K){D>nSGpv
z0YE`XF1asW(KZ}=s;(kQ4mCdhN7D_Yp1ZfMr*`XN+z=a8s8?RFpH>R&b2Xbi2VbPT
z8Mnyf=M{as-zgu%4Os{S7{VFce}w%5A^Aqv@tmmYIpDt0h%KB!?`qK;S}pbwrhv?f
zP6}z)&XG!m3^@J6gpdluY6h0}f1py<8`Nq;s*CTo?t|s^gSSXe5)luA{~>+5xnp)T
z&m$1tg%7=-$gPa7vDHm~M{ar{rUEmr@ozcR!6Bh9=&8t#3%@%$**injBTA+K-;VrU
ziCpe^GR4wqF3KZTIqQo@gYqLi%(qNL`2J_NXxGQjs$4ukL)N>caNUT{XIh|05*pIU
zGp#vbY-kq62NEq|&U>sdJE;RQK>k0334Q?*$hGXdtnFZzm6f!(ABmZ;HG(4M{Xu7o
zDFL`CfjkQ{JX?`A68yAWM1Bs^G=T4O4r#@$Cp@<ERA>Y&y*Wwou;#r{zN!{y9+95!
zV^8`?`L^nOw4$$EmUSD8if(4*t?%~{3Q<5=-}|c8SaOMlJL*#Dy6h*1d*<q+Z?7Xf
zk;g=Y^*r3Xgxra(Z_hD#@?z-aln^A{v2f^1YssW9nN)&hWx%qPb}z19ZJ~)qevt{)
zH^}imUl>R&KE{zIFc^T?!GW6E*r!Wn@^>>fPSbRe0DVd)>&Jv;g9S({*r;&S?@jeT
zq%v1obWP^DFQSN!RstZ-5fi<to@@7tQCYwe=8UNBZ8{4kQ!F}6TG#zjNT_ca?HuUA
z<L2Rlzdxewtf%8VKj#sFV;;h1f({fyZuDxS;P{Hz%R4PAOKD7wAts@5g8DS||G3O^
zGS|FQ>#1F@9Otuc*787FEACDNGjr4yZifYrt@7P_BoV>#lVH0zjunbUliiU<1CXO2
z37~=^feJtEX70-|jO%HHs|6D0(3LEU@6qJ~BXlYXMjziMFK-+zbDV~^2P}ruwxT}O
z{3)~~?Y?C}s67#Yo~-s^eInF$WYcp6m4owNju}PXk1Rgh*Gz0Og6T&~vQ%5ZnfguQ
z5BK3Ef-s1VE5qLX&WZ)^UR3RGQKkkXKwZ}&FU3U(B8d&}@DrJsY)xEY%xS(sAd|;P
zhhbixG{Fvk+0V4D+dOs#){IF%lG}fQO+TC3QtE<O!)s+6HU*SjxkH2(xVq=KTEq?%
z5E*d<${HgL8qC85k9BOp)E+o<k*RT>hB}+)yG*J{xL4!dF2?CnW$%+AO5>pM#+U<(
zG3w~CLl=u<LVZj|K}jvYm-<y&pRpBj39Chay}!r-eau{qs-ibWk5*RFs{s(=@6FD%
z(aqS1<=Nu}pC4d$w>V<BZ{CZ;=stR$D~ODjI#|_5PQ+>HkvlOnN)qknM?o^JB}o{0
z|5~^PNr5V-gW_NYMMj<f1hZs9&`eVLde}ETVh~RmE9KYo7>Vtl-Wme!B6rvD?$m28
zyVex!{m0HFJc;~XBy<%72Br!((O8W_FubtZ5_`>Y;P5`MgItGjv9cwX&ByJw(dLR_
zT=^y;SCnslq`8}1!zP;j-J}P*HG|Pb{T&~XB4W6_4;vTWlWaVNc)XLe_(nk_FH_Rm
zCWt%wQ_P#|{?j!nd|)3h<mRIeT+j6b$&!+3pn10tJ_on~+g*h>q2Wcb+GKvhmSsD-
znh~Ff3!Q*}clnly6@S|SiMKkv7f$ScaGTLr5AAvo{w&kMsN0UnfyWlwMFIDd;TK-a
zi#!}IZobBZFNLeHE%>te-QGYbMxfI%H=RZ^iJ{<nh|lHz#T56q9igU>1C;TDjDCN<
z)V#59w_9#-_&IHb#eow(2}Qv&RfQ58WQG6U@+CN|y!}#^Hn>bk2)V?5_1!;TL{}8<
zk3cuV>px$1Y%=+t+#8-%O|PEQ4BF0(y(`_|515d|`i3)Zatj~Q!{d+P!a|`VOD>rI
zP9`Yb$P(EXf_dr(Mh3PorK=vP7RId@2N;=oWYmsB@0-X>Y3W#j+F6o(N~C{ZLiB0(
zyc9CJH<;+|T+EO6B_fJLPU{5jds~*<5w(Rnk47WSu*VVK6v$4WL#)`xUDPc5x@dKC
zB(lL6n6B-UtSwzbdUzZh|F_E-K`0*?$3y-xzKfGn37)=|vA#Sq8m(WhCz-Z@Dv162
zTX^1wt)|wVfLuiS3$cMrI|MVH`!>cXU5W8F;yA}FmJl+2y4lBbf;V=onV}pi>e0Yk
zW(vU=tNa0-Cr+~PaG`KwyK}S|CoUK#uYnjC*k|Sm5uPAhJHLGS>$**KCwj0F-}m~*
z_61_dJUg4rJ(p=WLWN~NSwRWT1bfV^b6?p$KNZ;0KK`=(YSbIUK1VsZvWJlh9>X~(
zt%|(G+}YcM%#bj|xw|_<Bm;eQ6%`*ui-NR`#S^YX%5#SALpT~5j{;+s?`Dyw=GOwp
zc4LyqM4gX}WdavNSQ`AOL%_>RH!r9b49S9t5J{hSC}Y%D;oC&r!X9)7VP-x3$-h3^
zVADT2#-e#mdj~GA>T)*xUVTP#PSz0u6zPcixQO~sYxe@$*rv!ld2ClB9YrI?zs;TG
zD(m4q?@?S*#XiXE1x5@@TghkdeXm|G&d(1=I89U}`~)Wuj0)BPix5ps&E+2AU?>f2
z)s0;8#3bNocy!FdFckcB);l~kxu}*zJ<!^eW%4L3=-n?}%qkxL)Nm(I2hSWGQ>B<|
zR}!eN-}!ex7nB!$+EMZQyFOO!=iGMU%_r-;cV&6Eq>sr)QIbu&Zs+4u2-iuu=+y7X
z0$!b^c$-7Z(D7LeEh41g3TrYgECh&TZblt~PL^YFS(3Tf9bhsM>ta*6Fgc`9Rn7Bj
zW@z+1Q-$NvqgVGBmEg<J)<&)pBa}P6bomwlA@6T~VbwYG6T<A*TdFi103QSb*IIJG
zqC1T%qoh{AzfH@_i!U{u!mg4ZZ}!Ep;=hl~Og$6t|NW(YQABJwxwdtQfOB~AX&d`*
zU4=3qp@&>l%j%6EU<S~uUjVy=KGbo|w-3C;z^3|fYOZvJxX!)&+-$_Qu+=g`d#C;K
zPM?mQhFU7pol@HP;0v!L!UI>GV8#90-S{0*l9rrT&pI8z%ezKlVR8G+)S9xEV=S>H
zcNc_ba`QA?J96xD)-(K~w=wJ-5%{_6f}?ekC<j;k@vfn6zUd6~Ukg}hGIquns;V*}
zP94K?^>VsCwUXUQ4Axj@9b|ggJHc1}vdl1Jq>T#Fuqx?S+#u(G<`mczRq1UoyqAY0
zGeL98T@Y*i2pr}gn#RNcT>etT#6g)>F$nu!EMJmANms1le8{X&(E^z=eJo9jVCTr*
zPz0_JwfWzC!qcY>$4d(n!8vT?fzr~w-<+-J+wTKcKr2$xe`A!-8vKyufnd}T_=r)Y
zEz{2cv=42^0d+B3D{8jUz;zfO4?Y68N9}CR0?|hpyXjRCoX=0`AYwV^!kLG}W_ikj
z3c_)AaHv2M-TPGhQUC!h?m>vN@Gf|tdCiD-!`@MuO}@2d=bb49)q#rprgs=|vqEgl
z*XEz!s`9B^Ou8}q^y73smuz%Tc_Dx@cRq}TCA{>8jO^;XzTMt8@N*0MA3dI2qup1z
zEpAup0G9EoWxqoos_GU5JUO<1y1Y0H2&jmL!~mEiAQ*Vf!ZfK#rGR7?cN*_U4oXYJ
z!(&uHixWfagoLD-^<NJ9_wj%<j?7GnIo9!*IyjR#WX6bh3T-+~SdiwN8~O>=WYP(p
zB2Bq4To$&3_X1R67xMCXu8L?&#fUGzx4hT{g{^{2XB~md2_rJZDv2i6k1MJtNIiIe
z@l~UI_}?r7<`qLdNc}%;X=uCB$f>=}74h-);jzuro2j@uK~?Y)%61iBZ6zaLfAdRb
zoc_96o1Nm~Y{h~vuQTk+qe+EgUS*DKnq37rEDD=KW0P1xv5i7Io=Lv8YP)cCut-v6
zJrc+=^B3gI$@U*-G@I|lPcZ+&r242vNuEYdfmKic?{ybWKHCkXk7Z`p#E~ylOPfSN
zKW``BqI7pnf(SO)E%mT-OWAdoGMA>LVJj8Tft$4&u^!ze@EN9{Z5Ev;B61=&m;N>-
zfuNwR#qdz(eM-^p90C4gKKCP<wt95NcS&OP^iim;;PB;1#wW)KePZ<~FPH?0LF%za
z?{q>@){(ojyL;i|{dF?}42|M-$ynC2=G<a8<L<mWC$o4ZsqWEs?luc?PNJ>I3Kz=P
zn=HeZC@yz-<+k)F-PuOKfMAI3M}&S4dwVw*os78Bn?m;gD5LhQ_1`QjIp%7_^uyP`
zOd1g+tVV4+eQg2gC<SeVS?KMLHz>f!n!w=_RMg$mSIw1?U0H=ms!^t1)5P*auWelI
zwss0g{lN+&9)g!2Q;Ur#F<n@RAWDq%fN4$Z?&*{&gLL&GYjT$VUA6w{Jh;ZLUEHau
z=5@(g#tFea&8%$7&{uNWxGydUst^@Jr)%)4E&i@93d4i}k~N<WAvCvX{Y0_eUeg%?
za#l+>3o!r9!5<z7kzbV5@K>%Go1flb%YJfgkgDw&68MvU(tC1+zRnor*_oLwF%@;x
z?$l_)3K3khojK{Dw*1@UEQGmdq<wM}L*k5weA?-mJDwrLJ1TJsiv)Sj40F!sQrCec
zx){Q<Wjc^g_*Gi)Xhv6%g-%RX*@v`}DBWo~$$dH|$bv7OK)HRh@H~{)f{D*Gv2qU4
z7B(o8i2MQ_Fkh-0bESx&j;A7kFqXZ7E&)<!WB60oY^Hqn{F0@Cn5)PZlLR5|qp|(V
zqzVa+`fgfiA(EZ9ep|OA;lwDch@bE>t-gpU({T&;^|;Fr6=YeDGGSyVI-IVldUP8z
zZUh2lypY^gcRbSWMp;VRDQsU%QMw~+G(X8}&UaM3?fklKZ*>iE?tp`{`}Joj@>*Dp
zjt8!T4b6t&F*aEr%h9QUgc7RZ$4(xvf#@8swGg@Q|6M8psnGY!_cbyrcVqAr1n<v~
z{62a4eZIk`GghAM#Pkn-8+yYm9}frAX@JBdI)$u+!rE8HOYsRZ=Mujc>jQojs}Ruq
zVULNt*4WGbs&q#oVqTTc4bTQ?H{%<U6fS#`LH5M_asjj3=kXr2+J59-<sOCu{1_=_
zEj*I<bg+gSY99yM5`H~)Afio5K!mdl?`zW?eHrZwuX?Vs#tLaB<rlYK7)6fR#Wh|i
z{($x5I=X2J+CI)v=*c_5&s701uXmnq%v=bB@Q6C;k|}8+E6Ttu^8gWiFN4=uFCt*;
z?7r%lt<?*d!dl_j43DVX4oV;ZgO#+s)N6gXE*Ss)r%QDsnHPvJR3T;eOe1vnHecrf
zlox;`1ENxP$T2G$gp<8sFH6IYE!5MCz@EaMAzYY11N@|{kABQ^Z^Fca)d;+pbT)HQ
zY>euUxyDol3XNwH3=KOP>AT!srk|l_elR-;W2;aH)6);Wi(D5PZnhPc7XnrWQ7NFz
z-J`*bI{X%gXR;!QZ#XMp7#t@E7CEuOYTmyjd*Sgp-F$JYs#(rg^DZ<iBKp$(Xk}c5
zY>vu<RV5#8o^lD_I59#Ng6GE|v%b|2>j_4$MN5R<Q<iN2P{v)961mq_>UijT(yIb$
zdF59{AW03vSbe9u`DsuEY4=sRBOLRf4yvG+U4ggw{vx|U>U*3d@<NpLI5+fVzZJbM
z&5S-L!uMJc9n<}<V`|*@fD@_RVQ|qO?g9p=%18s*Au=)T>v<3!gKs<U%`p40R}H3K
z0}PgSiA(e-#yi(<ms^!*<<@n7;q-Q#$tL)x{=^H~XuG%fu50+jGj@K{xwd0HN=jlo
z$D=JvoWOGsg6Aa0YdCuoWcUFl=D7q|a%AM#l8Un44&;V%A5L$v9Rz|`=@{V5E3COY
zcg($r5|mW53vDMx5W(y_MDm-q!YRV1W3dPnqA7(y)RE|<_JAv9PZ}I+;1UCo5PmOu
z5MfiJX{joaGP3P?VSl#(!8ap73V)cc!!vsw>ohO*{98^j?dIDynvu<OTQm#Mg!#cO
ze4>~`CC`AUSKVD^$uctGgPx+Sr1y<U(zu^5bxNrS$!^by<hBS>$((o3kV%1vxZ?D;
zH=N&{?qSBC_|lzi9HN!rX9ul_8e|aO?C<}Y`5ECiVnsAosCoDL<9T^C6|Q319~+a;
zd=<p-H`fgE`SVohbdQop-Cchzlto)!B(XPiF+muOy*)^WHT9d>ggYgZSnoRb*v;dF
zuvw1G8>Y^Y(QuhxQuRc>H#_P2{#p+KB@R38#6aZ5bN=5F<f39lJnkH`K}VO|M@Y9-
zgHbc~LtUyLO_+W_^rbui-RodiFWsoi;|BDOHhW{ci0l<bwi8zFX2eO7yy)pI_5*Ct
z=HB~I>!K&M^0bq6#p;BvVPiC7NZs|>stn_)<0^D+8P9a&9b36X+_WgIwMcF7cQ^8k
z%X=rgz$9#@&X5Qy=JeX&6{AZm4Etlm7($SHWg4!lQ!QV8QD#M~urwG+BP0}6B!tIQ
z28c}hze^pUF2=s%Y<3#|-4wA+?|rfkwlRzoQ2odnkOE~tzd0Uj?}9sDRoV|caZQ)D
zN)VGMFgOzj6T>~$?;VUpPr=rl-wRp&XvJc(fAWr`GVJkdoA3qJ4iy<ZeSMCnGWF$H
z%<FYl(5iaC?1io>2oo8u{1!%)pggf@09gHsJZzsIAu-+koU`T+vZO1+6R)JS`SR7Y
z^A5Y=ncrYCY@IAHj}HC&N@Ypex_rB9?i)$)UBPi)B(Wif8LKTJP`4G43%Z)$YB|m+
z^mO5HAELsaZJ!zY;FR;^Q{5!aIMV)xG!pr|vOL!D+1I-ZjnnqK3*RR0W8S`oCVRdG
zuu$ej2E$+HJ9~@DlE;?h59|08^+@{hg$JYc;VW}0ntw=F0O2h|a|93Jhp~v`Shme@
zDw}vITxPQyRRxPW<ZI}#=8$N&kpsL5uL?=P?(4>R{&R(FqYr;IXuvitu0N#vT0hyd
zmeu}!bnATF=TWO)pO5b;^az+#&cRI5&L2G70Bqnqm!R4*)~50J{XOLu<$(B@FbZdF
zIkC!Sg09j|A4JUxG~}AudrlP$+&85RYP&sEkUF|lQ37I0{^e!OSeOWIPbU1#rpf}!
zXG&`%&ty;r@hB#N(C~vz#%UGHoF`EFeIvLCA7IMEU0C3R`<g`k)VJt?r=%<79kKeZ
z3_UoIY1cH%!u23wK{`{!Td&?l&09wh_t~XagYj=X&^een6eea+tp{JYG2lHTkklTT
z1HQzjoPM>xdVDMARE9rzqvO=9DbP|mp7m_svMf3t@XF|3m%5(pzHOMxkPBLloqu9#
zV5~51D0CKfvR3;DKVCssZ>iwHj-q$m{A0{NIhM3G52o(C&Hh>JNCP^Us9OGVF6jWn
zE#b`MG5O7p?j($rYerB(z(7jLB7jO>-NJap?eL)J&gS^+xVM48nI<M01&%%%%7)>^
zLdkom947vfDaI*3W*PuoTw56A1($xy#t_cPQfh{1SOX4O<wPGMM4o?RUf7rbyRTZR
z!2~xa3^w|oVEV2s7#w#RJVFL;U(kJNcnwhTN_eUzc^a@zr2MLL(dUq4akW)nq1?JP
z@L9+1RJumPfA$y6C5+yAEWKN;H5I{>n;%1Y(5|+#q{58G#FFVTQrVW1<j<RpntDAl
z{u?krqz4qZJEMPi@mJbv5B*}x(o?>KFH-;14y*L@h=}k5SRVPO9p<Z<zP-;)QbVUS
z&Gk8tc>)?-jL)=|!Rlpy9e!m(UIUg+NMZdZT{d3@!}UTRzJ4oA*3s_iPATpk6Df_4
z{O~wuC2X%3^JJU=UXzyQ2@G|or>rj|9Qcq=Xe}L1tgKue{1-Gb$z&t5qovn{q`igN
z>rCJtemUz}4T%m}*^Zl*;<oB?F-Er(J$fI85(Q$m`1QUTLgtPC3P7m%8IRSXlqa72
zP03*aL0d)oYaszn9rozERhY0xA|+nu@I3*{z9~_w_Va6D#tP*IFsSEXE}1aJR=ejI
zS-lghH>o#XOn=LX)464YrL1CQ_HT(`ZIb2;<@ALiAor=ey0rIdDT}+{hx`?1?K^<v
zef3wGKqYO6kL$N#GC{xI_qok#s9<Ls8jC+^Y%M;rZ%oUp*+o0kN=7e6w<eH=7ee@#
zfJlsrOw=r&GF}O4n|43NccbCyPjKubljv*Zor~q|UW8XPR)1|g-Q62jh#TJzxFpyR
zMPY${Vo+AsPOp{JHlHyWRxo$_sP8C66MOego_O_AC~mUnCUAMgTE|G!a)>ckR7?14
zyk_wRBg$(&Q_E*#8)MxuKb;FeC*%dHG|dy&I~_uH;p*J?x+ZzAMil4?hLAdcXyoH%
z_Fjn<5>PZ+{)7^1hsn7{#ZP~uMS4_?yX7itimv)p)j(G2wfY`UqL3u?3k6CvcHGc1
zR6(ja>{nCY@9n;~uf-}2C<2%Gf<8<?I10u+bpx3fhg|l{t_}kAo6!Cm@|l^5z36#L
z5=o}bkB(GL-askH#}b$X6<WO9J7>?A{u4<k&?BmOF<y9+dSgqjSl*_ll58DHzLo-I
z-Ko@Q5v9A0!5)n3rKRgbLdBbqFOR;rc^=^iRI7cLJn^H~S;bS}(`jMaqqMMev}E6@
zd_IG32+xChP<j+26G(5mcqeo)n4}o*49cW{``Md9tO24it0(xpMV;_su@#Nel0l>w
zBA#u*B+SB?&bca(ukn+~2@CU2bbs@{b70H2h#;nNnT;3#t-Lmk{rb7K{O4dn<DS_|
z{fh`!BQ*OUS*EOhRUfn9@9~v)NsQw@O4b|E{er~RoiSx5(hM`c4S#!`X~>S~#X73M
zp|??)wMs&$c%%UL1Try$(pZH~N7>=UDm)lHC!KtDVlJ|VE1&>Fd)O@>tfaS5Yf0&$
zl3$gTlha0f$1|RfvF_;QZxlaOgC7@AZ=ZA-yFn+ct)ewfZNE<A;aSK!9ypfB9-g(5
zawshPjX!)*2}?=T>Y@;?^?{9|FniDu3x&U7LJPszW|1pfg?m^ts7ZhP12kEc{p74t
zJ)O(=NS#1(j(BkqXT<`QLY|y&hG=y?Sl-7;N`4wCk3>(u)P_Mq7{adC7xOclRf2?4
zf@BtgH(jF*QMQuAUvr#3$cvLH+2za7(|*;&LLeSlUD{H?xhm1etd3i0mj^WR6Kw1H
z{(@F8(G7nQC@l5ohO}g-kxpo3hh`?-0qXFx8`(il&n8dv^}aEp)8<I;TN??>vuq|g
zwJzDbf_BsALq-i8yZRWpZ@QoZLBjHd@5~@2dVLD>W#!)Qs@~M$L@RU+4#q5$&a<ZE
zS`)+?%Pir&o=aS&HW^Wf?u{~j4@u%yevK4k#RW2_tD7sri#NQ%;msd&6&{EvQ3*d5
zPu-+vn5){P{BvdZOdhh<`|ihV{1)_vbJ4Z?D*ddL2{HJFyXNl<9jbF3<%I9aGEid{
z`W&PwERBW*Tvx1P)!CCT7{*Y_s=ofnK>Y$`Q=O|)bIDU+uf1jD$e}>$xVbudiHT^O
z{K5whd77|KkK@rtmW1e7X^0MdiC!sAB~MJCiXv?33gycZg!%IPzCmO*kVVW0y{URX
z2fMaGMz$$F!RRo{;;d&Vg#|qvgqZn|;)xAx>3ZGo#fF%Zva1WoU5rK|F;wx4zVUv$
z5FjcbXdmqaf#G<m(>D*w&)J16*?|!+BJm<FvrL3l>}(Xmp~|rwoVvUxLe2>BaJnYR
z4skxw8VikK);G8NJe_W;|E=3-f`}Gu*TwItin_8HeOeFB3KDU<B3!(y+=iVKME#|e
zt>+HIn^x|H{?-tvBBd>(aZsI(iY>Guiod}&Ez?X!+R}6xaHd1rvVRGw@n|YzSp<zE
zXt7S;&2q;|NqOwM`2WzC2XS$HV_pT!RVsy(AetcxPbU1j?C$m!lNcQCQ1yLy=SYXN
zD*8zstCcTnItpYz&x&{s?2CF~%!)B>6U6nLO)oIF%bU}*^%vdM;2U_3(^b(3f13Vo
z$bR=7KM9noAR`%D;56rjbj<N~n3t29^%o^U;8*PwRFjW-nOlfqybCrNgXKlH)RYx~
z<E`BeSP^a^sI<fzvpm#X6~rdXn*3aExLk!Sr_;yrNTSK#r+<ib0}UsAF0N%h(Aj2T
z9Jb2N-Vbo?<<C;sxR?C!c)j<5t2>*a*DtE}fGG5|ynEh#tmsxq_}gJunZOIw1AHN7
zg_MwQf@*!(uB=np&SYZ&!r!R7`Kic0?bPMd@t50RUKeGImP`PV>YOd@f8ta#?XKgN
zqPa$WL<}(WY|UyrRa6^==;R1C(^3rdh!3F9rORU4$k{n$IFCwtON`Or;NUHN=9A_r
zSyqaO{kcyS|CM;s3+gWKvz~c}by_e5+i#nX391JddHlt*{+dd;Xbtm}$_6Y7X)<q;
z(`BJGWU`}$CwF!S0)>_9gdA;Y3=0u>rZ51fgLcHKczJA$lAzbza0%ivr(M3%<y!Ny
zx;^bM!!>gbAG!OuwbwakwOh$9nKP$TM+;(NCT#Yd<^-FAJ-z3VG#CDRfEb6nIZZaE
zh+ZZ5B>w4b>0m!U0{HqW+(URaD0ft|uhZlYM9}r-H94QPt%_HV)Z57I)n>8n78g*+
zi6rDX_{9iV!shq?Y;Lxn;e_ynB<)nR>cnzft?|8mHR|&@Gel2MY{JJ*!anP>j~`UY
z_kFN0FmQO_yb|WVnYv|fV)WJ_Pc8QnrmY_OBc9V{+#<Z%Er<`#xZ{DvsrJQo@J;zQ
zfsTu%P<N=62#CN2_v6@O>F)1tGz*8We1w+35Lr4e<yfYI5&xCi)O1mrw%EJyEyECx
z7n6QA)gsQ&b`UKLm!~zN5c`g5nCzj>0uF}aiju9U(&XUVJu{@iKJizBj6M6~C9igO
zcj>su3*gDgj9&Es;zW4{eDU`ippPLM{(b`Z%!blFDm6_ekby*b6O-cH+|M|O_v7Mj
zfifkc#l=Cr@v0<-s(QE8j)4+~b4^L$zm)BbBSQ;`1CR#Vt0Rhi$;>?h;rBKHAaiY^
zfTz9d%C<iXewRzB4(8sE1A+6@EzZjWf2K;O$>oBvp2VL5?yh>If1cNiNk7&?Pf9As
zfP4?kkp+|OO*e)9m2DSK87t&(OtGwwqE_zEC4Pk=@I*(AanXkk@_$WB(dXzbI-O4i
zDZotxeXX*dU*I&Z7V0*mHOl<IuY*5hU4G}gYDF-X@wd{O&UOX+IQ1Cgc&=dgICPnB
zS0$`})i}0zz@hBp^R7k{{V!D(_7u!nG0oJb<r_ghoWb~pjD``#3B#FHM=R|-%0NPS
zpTV@@srmUo<P%AzUJ+FxTUWMT>Uh)G=N@?pe!}BvM-@vk9O0L(E9xY(DB6D?>npYW
zY#69^_7Ig8`O+duSK&O9U_xw8S0PtMPI>+pE3*lGzse_{D{fCRzTA$go{$F-WG4n6
zKc8ffp80>4dUx@I)3W?No)0$T2tfd)f&y0CD#uOpcnYw)?9HE_aLc;|J-k?+q4=Z|
zXC==HX7ZcqY?6YB&(t;_BKV5dX-L-Bs_$*6HHkFVIr)F*?^LJ!+{U!!VVOb0X?Z?c
zbizuvP)56Hr0VxOA1!ax((MzkK0<U=yf-#QnxK`eX?@eqy_%j!VI;%s>8<?`_ijd$
zb5Q))jX}2hY?#<q=D49#==P~fUPv^@gPr$mA6Nyb8x5700l8pk*R#I%Qm2EGxcBI5
zLmud5fgNF4N=?-)<R;;JszJo+&fNA%{QTZjCQA4zb`(2PMge`M7%L8sF`8R*^sh<F
z$i4aO19JV))QeWK{;X(n(zPUM=80x6lLfcwgF;I+O*hG`9$@f;&Czk9)|DEf+P~e&
z<*ebPU+Ll&%G0dE&edqe*hz*GzEBV==i+PKb}l;#Oe5ge2oT<OAJ+cE!A=EMx5pT@
z@o{U@9+dwJw(6<a&|lajf&Y}BSA9Y&hZSlx9IT<ob;e!c1em5jhJzLKxRyYr+8{c*
zXyqaA82kJFHY2Z1R>C(umPr}|R0bAhRO>Y3c;_DDz^kq4z}=`e@l=|({WBs%`TFJH
zLXNtV>&YiGSBv`1#1DTGws|esC`Ac-Zv4x6?maF~Fo%Q!PImi7|4vh&C)uf?KCQ7r
z*nC6F_;$g8UtG}?Cb_{MxiW^*q7Pl~<Mm%sl8&fqaJq{YF_jNzRL43GBx;6jIMh}d
zLSr4q50ccK+_uI-PlgY?=q_uG=QzH^w#({56AFY7_D#6q#-53hOn3y5{mZo>#w;<?
z*<bfq0=vt#hDPG=xhtY@DeNZ#Pjae0h!Pu;j1Ub=<C%~ExY`=>)iOGgm@rPg^-AL!
zRj_J|a;s1xBj)4^lD5brWGR8{ABvi9ozx3FzV8bj?WC=UU`ae@xF`StEfv=@Q~{4Q
zp>csUP`uM@t<%;oqfP0-PT|rVy=MOFYbxt@x7B^Io!T)%PoCEO=%Kw^-F=)kI`W00
zzhy98IOoHOd+4mUEhG91pYfG6$T_{Z2)ab?N%3Z#kon%WJ|h_Hw1FM<Rm@i<odW}d
zPG=jsH*oM%Bn5n-2MJ#kJs4UQGg&xM7excnB925ZM1!}K7A-Ded<~b<H`)zH7u=#)
zp(Rc%=!kA&|D#)1jkkNLFj}nfH&ex1Z_;9|*!yj)A<zP?o4Ct*j`uBd-l_L^5c-TG
zd9*7UN!xwa!}|Q-^NNK>*GJ=yWoY$9`X3sSdD}0oIM44#V5Iv#T=xC3pu+ftj(c{6
zXs?eC;+dM964zpa7N)+#uM9)urVRjPEgJVWG_gWxNaPX+XqFc6I`@#81)vGABa$9(
z_hWW*-ET6JXuwJ0rA2OnMrAGAR#ui0;jgD7Lss%lfu`*7<zHF8ly_`fiNe>SeW_K2
zDtck_#D=dqP=tAP7}+}zWPNUuiea-q!}G8tdTsQr#wL<Vsr5hI2bMjK<RQlT7q|W0
z5e0I&o`}i+CLX^NijQr_*B&>0qNNXl#q^<F2-|debyVy{U(D>x6UAIjbT*PmCo(d~
z6L)E%yyCb+ve2n7#<L}PxYRNnTn_CrB}<@3vqFAiJBkZ_I}>oEO74psc3^?36cey)
zbhv)*T7n^#V+pVpqWqB=7*^vt{o-yDGxcJ9v*gf1BGg4{a<#HlTAjl0At8Z!s-*Fi
z^xnhRQf-*|f|+_^n}NLQe#&7IvCWQS#<(;VEp$`}D0iP&miO3N*A}y%lyy8VF)Va3
zGeRB^99UDn=#4H92~MY_gHl{uC`$eso*HQV8&hgyrJnwX=}lkZNPq(XPTD?q{sisQ
zJyCxCcLI~oX6JnECGYEb3Z67R2K=?;MYaL>P^DnG_<Uy|?(!V!vmQ$#n(E)~rs|#3
zag(A@1pVoyXXX#P?PCNxR4!cgHHMt;G;3PL?R~1S3D%GjKb*7{^P6N4JU?;4R^p$S
zTF2jCluIP-apWrL#e35xTv{$W8+23Naqj+cKjVQql;~dl8|xv#S;kCq__UJ%FTMYT
zv_tKjGvBG966AcI*KUbtjyB)%DP(MkbaCXGo&v*92?O6u^XFVA-}D!Km=u_T59oFE
zJmIvi^>Oe8<ZeVGkB#^e_%nv%SsnQa$H07IYyMbEDHq>HA9jR@{l#=mU%=jk=E|fh
zJXbM66&K@>tQ{Y`*(+iSMXIdWq@tP^g`iL^;%vL<_j=}UGc{;V1ta8o*&L&tr_{P*
z6mG>gw1BsFdbrv?oMp&pdPVAbDnzrnass1q#Gt0-Ae#k10l<suvU(^b7KOgT(ENw6
zHk&r^m3io|TP5e8f|%!{f^_^k&VpQZ;p&3uDXbJAaN9?2A$I2v8k&r*7ma%Z)<kZW
zd{PE_D$}l%nNTH9S;!;=y1XR=XZqo#Zkm^EcKOSNcDZU`xnVT@x~@J0SJ&7tL&{|o
z(_$wc`rW4fs$?ZQP|?n?b_Xxm3f=|_FQ{2g7`B$rt@f5a+uHA8r`o!FwqC)h1(JW+
zCM*B$Yofkb@?>MppeNGh>RJ1V-)x?f1c-kuWN=URJF={traHG9?&exuSGDF{AH$`*
zmYWZ?Is6Im8b-X<R--3%J)2pW)9L<dV4d#AD}o-OjA9c}62sI=IeRP25LJr=e@K%(
z!ZlU|hgP?fv27R`Wq=d3y>)eyi%pE+0XwTQNkTudS9&f<adkG5`jQa<P=eWCxX+Qk
zl6cwpX&5U#KDX~<q@IKR=ko_8MLYe+_+z%c6-{TO^tZ#-tAy9oAtUcd7@mxGSb?|%
zy)EoQ_I%G0oE;JBi_atj7wB7VcW#}*xjF(cC+`(fz8aTN(!z$PeU=BmYwH_al;?+E
zm7w-$sMTFB(-=eWZQYK7p8i72;{hJM)Xhz;5}W#r;NCt;r8uBfWkA$c!{*}r2LciP
zQ=!znDfaNb*V*8yC$hCIy*n+RR-0&?e+{!5-g3{o=S!APppVG{A8_#cC7Pm+2p~!t
z00ZfVgVlfUB91b;$vI$$7}0f_rT>Slvy6*kjr+bLC?Q?a(hVXF(k<P!fPi$nl%yby
zfFL2=OD_#ecXuw0fOL1mGn{ko`+0G{+0U}WTr+dcmH+tu*sPOp#fo9BGOnmEo(@IB
ztg8sTO(FyF0eO|!Wd%ecMnBlWtf`1dr-KvvvL}V6EjIjbtSE@2<yHvHEa($%vo$7D
z@Ok7oB~|h*G?=^{OV)D+2aXr2;FYUGt`;|27UNhIAHkx|kn%;eE^9Y`3+Ga=nsr`M
zT+PV=zBJ(WDQV2T`Mf{RcZl6x$mk8*^$ObK#WVbZsdDTy3vJ(Ewz+Fw;)#lT21ZJ}
zFITNZhs~}bzTJd7#EVbv;;kmG>prthpN&ML^!Y(TKBwfqsM4GL<>CG9Z4HKB9Pt?f
z+eTdxA-M90+v~Edorqh?Ww`>(9Fzh(FQ`FZQ3Y+kaosr|CSo*<xZTv#<6|*{rwCb`
z0s%D*&d|a@JEy5RVjw62!r<Mp{Q;L5%Di;V0yytQr2%Ry5aM&w)xpvIc)QU+3(es|
z;}Dv>k$pNs4LzE0o}J(0!IBUO9>FsW(vcN?oyUHaWApen2urHv4KYEefYU?j7Yw?e
zZaqHD&#jJ~+(-Vz;M_f9=d4*J@|xY)SyD3N2#<Z^Si*Fp#&sC>N-?Yh`;0y-RI3$x
zo!GDwb5!~l2h|j!kH@sH@abMB=Hs6c-w&9S7JJKFI^Z_q<YGPpE|KG==Q0CU_fhLF
zcpJ~@e9<;fC>CxzE5McbpE6<umu}v%t8^l)nr%joY%RMeK^oX&%_XSdmVjAeWf*m6
zv8P9WmU^t#*3HW`{qW31`D1(uvEvUyMhAh#aWBbirC=wdWzcwrF)BWOk3r<?AI*O%
zf1rPlUOTI|<l3uic~9^p6TAHu75RMt5khK6BAN+09QSpp%Hf}pWYRb8&k#^D2eBw1
zh+}L|$B~!M-s)i05v1isoazG@<tPiU9arUtYgWJ??@O2}GV#mTC#(oMk4yLNp+ZO+
zZ2tkPp}ARvpcC-;;+OV`7w{g_8>xT_;b6R8RYk8Al&O>$Hc-|%3Liy2Wc5ASP~VWa
z0*6-oikW)Y<wgRYX4ZSU!@=88eRWyxF!*WRakGeskG;uDs3guCWy3}kMLD^3(Wcc>
zn6)?Il}=CuYWADZQd)$20=No;fASXvmzkce=Tg;Pp=V9BT@FsHOgKGSh;%?ai)q`L
zqj`?*&lEL1bEzbxzL1Ld#I4J+!(+D}$u8Qk*W9HdCd*}qH@2$d0UMxUS{DQ_IQvDo
z#29@!W~ibUukpj^Io*QU&Kt}D5e))ONr>AC=I;B4S?_1_TfgwJ3uoyE96ITnqZy`x
zIW`NiroK{m?V5re+|kZ$eyK`MFwHPaX~x)yTRW)PL{Q`m5DZJ!o3H#NHW&^vOJNM#
zXgCZ-QFN7?U|Hx@J=fz|@?CHxpP<xYlxB0M=E&@017v*@Dy|Mie;}T+{6jN7p@gDR
z?);E>-NBLP49KxjXVL>fMb4~M@m<ac>2okMl3tNg!DC!`i!e6HO3Vl9=1O(q>rz5-
z6^`k6qeF5YpC6A@lG-QW19PYQ`-QI#iWL_vj}i_Bz08k+@IT@G-=}@7#=n@sAJ=|}
zvYoVII;|(Ktz)w`QoD+y4qP0LaXidl_KvUvwAcokV|V@TgdS0Q%R3xxpTu0`Ppqd4
zK>A!ve0>914GK+%Jz39FirsuegJt@qIgnk~$b$q#niqv9ec&n*v_cg=-!b3-vW{Q+
zAR!xqa7(d-r0hCrwr4i-@d@LaeP$#*vNG$u$dAB-aIsVSy&5^l!{nv!QAwY5NSZcY
zQiz>!tE}bBkPNxM{@{F%K-4&F^U>8l`RYX|P4EXWK-kaM`r9C?>uyEB#u_p5OZIbb
zZ&vIzy3d~iUH2bhYgQ4`vVFgaxqq6wKmGCzne>3;;?0vNZSd=5z~P)h@UEZ0<Lx_R
zq}~Im_)?M-Wae)$>H4W=NovW$4QmRoT3CR{+sEHgXr}2iVRf2u#6FGD=`h4Vx|my|
zb2^{K=VN7c9j%r(5w{%OYA0Q_u|=0->|f8<y2)`<^<=Y?;~%#{x|y;uybm9CQ>8q@
zXoOoFsi9sE7DKAfTnO=+2E(sT$LK*}HtNbb=)8zq(jNx^x!&T)s*HHpqxzrcKmsi<
zSA=m15qy+y*&Fcss)AksF%bWLYJpNwZCIoclT%_5jTIK?17gp*Y09~hdes(HO+<XW
z#5*ac8$$-}<a@Ylo4J`5<OvxCA~r-8N}_V|9=(?9(vqcUa7tNPu2Q+Z%=Q~N&Pgm*
z3)e{HSp;HYz{7BB&-0j|48;BdAjN)*@mGl&hpF`#sQK9`y7xO^I~5o6t3(utF!&H+
z^XGp)flVc$F%mBOvTB|Ur4PD<Eaf+8SBIEykj@Z$T;>nuMqBdLUsq*m?gK5@bff5u
zUmK%HW&j+4DLDs*{ry({B#zba^{Viq4eK!C-=edG+PA!j1cW0j^>ETT9ORlVZiyoO
zPwl8ceF5NL7#<vWUye*r!$ABLkFLnM5CZa2bwu3;8y7Nf$j4QbUi$C9t=WWQ%$~3J
z;<!1MtJ;k70isosE0>$i>Uq{w+LY|8JHS>LVyK3%<ICJj2c<R3!f;%0*KbGxd+?P#
zX#La#oe%ON`k?}lAt*n<JrM_i>55xJVK<b;1;5>Ap}%oej3UbmgbYZ#y3wGt84S-j
zqNueAEOPr;j@YF%zqFs^ftR5XfR!D*$g(G;!K&1d^Q8t7ICHtcgGLyqaz9yMw}tDv
z?`f9bec6s(o`Vl($wH0YpRZ+m4}bBZ9o4T|4rD2`_N(^Q!E!tlL%^~nMDl5T=H+yJ
zyr?Xznc?>ddm}!<o2xgf@KxCq<ZQDSC#xhJZ&U?II_tk74YTo<b7-J9uHf@_l``PM
zF<%B#Lo<IipPgClTlSwnxtz>}*%89)aRKYb-uWx$Qiq-#5`Z91b=*Eo%{t{(AcKgn
zgPThU9loWlG^XRC{DS_syA?;9o2EM(LWce)C^0XXe+SZ<WglYW$;`c7|9gIJx+=0?
zUvOeX?kRN#$AXJIqpqGRi=l=6OtD@S`mRi?06SYE+*wg~t3h^q5(`!4t%6^bZ3M9v
zh|CH<8{HpPpi2%_JF2gt-fO+pF~EWc&z89=irrrJ=2HS0O3-kp{N~H2l#<N_9cQxc
zdU52Y&{!xh0~0I!oCi60b7R6*Aw_n|F7-wHPpZyN=JPPB6P7RIQrv(mCeNlSfPI{5
zxr19ElgFdU`fNoYtzPNhTnQQ+eJ`31d3t%MpGQa3X9gE_SHe-d!z5G;3})^>tzOma
zTtJ_rId?eRiU$@f&s<XFz8Y$_DiTHN1HeqxP1t&^R1Ko4qzWINEnm~ofePH~L!;Yw
zNS`Pdoq&Z@joE_1!y|g!xk*)33dh8-lZy;%Hu9jKNT9&VTbrvH8`<WlDFcUyLr_VX
zedv>);=J!5Txp^6YNG*Aqyq#%fXbB9^GaL<l)izlp@2@^Q}&pwm*hWbFS0bkRJS^*
z)VEKGRyM+FUW>M1{MnD3R|w;u=~$xa%zrTrGMNLAx^P4~@UNe}0RgmXfg^b1)K{;+
z_8|<vtO&@)rWWKYR7b~2<SXnvSIf|1%GckUSD|Ap9*%AY-lgpe%BgIwD0WitUcv{-
zMF;OXNEleaL0r%pCZMey%fIn6d9Ooj@HidymI6XPi8B&D8u>;y$RE4=9cAi9xw38#
z&gpq&G!kJ?gD{A8Cu3lRhyR~@?+baOCxMT~SE%1h`1*E@K|Kq;+kIxu&sg!!%EZ&f
z^YUAuu;wQ{DAQO<L>HMlE)?MDnc+6!*S@pIiYLSmg@5q^zYUz?f6Bv>)3bkVAfl}<
zc}@}KpA=$PT9Ae8^$B~gH~M)T*JnTUKq{;PQ7_EmoJ__t(l&u4u2!HM)zqlz>nH1!
z78mCfGL2LR1A%6P#S^o$jMD@C{rQcJpkmKfZR3bChiD~JJ=kjDN40B$KGvt?%{wRX
z@$I{LT(rV_RC#+9Jn!=5b#$31CiE)gmO$|f^I)g;d?xNusyhS%9Zg!V(i$oU<@S1q
zW#OBF%8}ptEU&w|&Z0@|a{&EBa1^r_?li!|AGIlMvbV<$>@fBi@np-R!d&gTqANC#
zi5km{D;i?;F}`q^q$LDWM1Ynh=X2$FT<xdqP96;9{W-p2#ikXGo&7!a7dMK5k)H1K
zDg%Oo%qX~mt{twU&-*ehX#Vb=;&?TJU)wa0XPJwuvsM6TLwuP-yfVDDT=3V<7l$*D
zp$!0TzK!`8r13l^<J}{(YIS)BS%-}F5d2K#6Sy2AsY+1gqUCwf!~{B3VFP^Y_cKS$
zI?6U_0aMlpk?UJy*-CWWn0Q4fd;mX$AdF5CC7mM6KpNMPrK!XYkM-voeYEWR?=-aB
zg@_zdAlDCJyS?T3F7=QNjo&vamM_gmjj4Ifl^n@C@tj;+Z&&XpR^@cY&XSRD-i?*&
zBCm!)mL*3O7MGR`vHtl!=@^ogYVc3)=r^S}`M}n7G#`hn)|W=MB#@wR>5e*^2Sp?q
zDCuG*V}kbne6MwN<RdXJ=k;gCB8ya&QM{l)n_-bh1n|%^?*u|a$7mgPL?@xO9}`2|
z-&GhUYfG^@UH%m0{kD0DdaKRhQKgfx3NXKTC{T<ZRYpTUx_-m7J?fhF{Y6)!nXFhY
zY{4ohLvMz{c;m(M@OIX&^BKWZelKmGNDu|qHO&W<-B@+VC~X4B+8%r8g9Y8xBx%d@
z{#sZhnPB|R&M;SPh?0;?STCriw-%=LgIwzSFyGJu74bVK1bj`>5xw}QOVhnk>j?Ma
zmV%f(-yL2+B>QN!Z}5VkvU!8OU+LM<m~m5Wd_)CN_^jH6kguvM%h8JmQE{BXUuFI?
zKGTqmzci&@;WoA+%mG}{z!w@wI(K^y6E-6hN6wg%j$Qj?2`>?`dwAy~^X>G<ZQH9i
z-aIm)y|%2RIvE}XpHWE6DkwE`!%??`M4$O;=+VS-b$>u(4yw}O;tq|8miwy?N>0`v
z<X%9eL1XUCgSk=&nL~34wBB}UQZdpL{yb8DqpJQIb<AC=0MskJtuP^h<R<ayy|QLj
z<t#&71WEp63|rw_eDXbQ)!){$z3)fbJ<hhAjP2}|Sc~5pt%k9D3fIsbB)G<br%kU3
zpV#F5TXdg@bV0j6(D)?aaX_2_-Ru!IYEtRxQfU$f!Tr+@x-?YXQ3Nau*}XuP$w)gf
zvliBf!e0rHX|jJqL&H$@q$tSKN#l#8vV75-2J1{SejY4s){ScbAYAJ>sXa>Q4w0q@
zOk=Oqjv<WJnYY5FA@w%14Ab3_8bvN8jt=Gu1OY{{);#`SakMlHKmHxfl-SU-{=x_?
zADSfCPAX!3+gW!~dOLG${wX}|H?kl;cBFOn2MbPs3D2Aa#k)aD69eQQ%+e!>@JrV5
zHLRH|sWd)Bp%1JD=~|=G8Z*8)`h_m<(C$G4A)3izlmM4WK|8r?e5a@kL~K|LfQXS}
z_8OuYDs|vMfXH_|ZQ!;u+Hr0;hKBs5ID(ct?_agOr(m;uC-e`R?rPOjhsXwsB%PiP
zgjrjLg_QBjOIk*wIYsOnRa-hJFOLw*vvqRwIQ3B(AgEJ4^{j;~>jx<>LPd`N>sQMr
z_DJ6fN6eqVOtI|EBjmF*#r5v-bv<q|_mlVh2e{1ev7_-<{&+LO#^+{pe8?&_4^z$=
zYU<)h^iJU>D?L?CN0{Q<fM~$@kB6_Ri!WD^qn+hp75<Ydvc&^bcQ|s63s}tuD3K3d
zp=tJfJ+N(&8GzagyA*WJw+o!PKpXtl5$*{nUu05?_gwX_*YV?LS(mr0VO!hYvbo5(
zC3)V7X=Y)msfPHtYr-PAtXu1~AsS?upCixjVk4b>6O07F@MKdB4pPgK&A+tIR-6RM
z^x3GiuU`2%ON>S{OJc8X5fIgVq^T1dyLWg=uH}L<#DC7t<=M{(7z>9NcF7d8i2;jF
zdq9n~h$MG3_Im9oQpfaI&hzEWpQ{CFJ|B|QzKhkpGeCoEdw)8%utJb21KbwvdVH<G
zxmN=lC4ht-BlI8|=*(v?5Q<S=`!%`Vyc7U*Zkv&dvqoPR)!56pnPo`fcWZcQA=}!m
z8vwsUnK%LCNP5S@zTlCIW1oTeCz~)~(}Q#AWv9z*pg`oG3FgLh&;pmWmZghD5%!^W
zU?(3HMX{djo0c3nFkq%$CW(W^8}HLv3tqHFRgzN93FV=<W3*eiBm+m0oHg6Dg^Y3O
zcT748W6k5Ggh6|i#y)suoMMBcz$VG%G8%>9y?O0e<%(?uTT`xK8!Pd>fPe!bLp$8l
z3)q=FX)&!>FO&;mJp#@{KwJvIjNI&`%Q(dWO9#ZxlJE9Ip=EkpF2&h5Zl$?P`N`L<
zr_{v+4fDPq_4N;UYEz=wjjOjpiZhy0YwLG?xdW$a0c1-f7uqHQ@F-&6%~!IXYv$zp
zd2s`{vDWPayDZ+NYaZ63mLvgzeH7iy(dp{%Ku#mk&29Z-j^*U#Zw8fmPq*=DiS%qY
z48u+S0>-kUT0HGbhA^rdP%a=DL{IoQcdhSnwjREvNH7geGZ*ks$y-WmCuHC<;^p#5
zerP-~nX7noo19Rr@=cg#@8rg@gLG57O(ZQ^jAz!!1RUCxEZt$8^|N+O2|aZYaS5){
zm+c1~j~Th_DN4Tj_e9qFe8OH*o4XApPU|f;t;_8f`#eEV#IEi|%+a+{WmDsO479yt
zbDP@LLQ9VqB=K1Jt&#kQE|=wpsA7xDC+gr*KfpiR0yBB#GZnwOL;f^Iue2uUF3+1$
z<^z;lZlN{;=KOLPws!Mpu9XU7BEiFk!>8m<r1RGv-~j_Cf8uavC(U!ZqOw59)gkW;
z{7#)RzahC<UX``!P^k<5!6ZjT2|A+&TBLp&pI_rqP*2B4l8I|j=6kv)q65ZUW{nYG
zz;s<AT%PxUhx<%!5<?;QhhFjUO2S}Z@0CRE(Uml1ZWP`;J(BD%Q4%$pWMDBKneCQ`
zKdA#?lca5CzfeEfH9VhGnyzKk?``5i&0mtRH0k+(q`wkBASvHx5wBRl3q`2bNnqdM
zixy*l4Qyxf8^n+AbQ|)?W;b!teGfcI<^&w@gR$`@<k(s>Udg=x7Qi`gE!}zRQ(uT0
z6+U;V*`4&7oJJDFXdZ!xb>J~ENi!sctx4FiNJoWDUZ}}s*KH?C+;UmlI30L8p^Sx;
zGX;tlcq_AXAxmrIpMG5#K-^D)s58GRwBOloz3eY^?g4#Ej3Vz2d+i5Ys*|mLi7?JR
zw^%%LM~sMllCh7xu3hGX>%zqz`u?9lc5b(}(P$=3495e{nqE!K?19;`y-LTp)p-tW
z&A`IK(7?rom2bAu%y(5ArkVgRd1&!zkJTsHku>~d!_fcx$}19-9HNJ<O7HR(gTjE@
z2(D>FC4!bt4bPFCH~E}<g2nEYjK=$|7r*D6$26`b`7IOsSDFXe!+d7TN4gYZCYs0b
zhj+lrUxaj_=-MOtl}~69bXVTpDQ`x$?Px4>zwxNLtjTD#aEI6&!$ZxM=AF4peobwH
zS5xM(Iw(A>lVj1?R?gT(BE^@!qO4FqEvbaTYST#)LcZisGSg2f!UU-=gAR>N49>I(
zca)0u9OUNIH3;DBBxdgxpanD6FInD9yCHnMp{T{U!^+a)D!NI^Sk(k|bbZVgFS**!
zRdgfcsIZ1Y@|(F!^niqfqwN>nOOrne)ehFdHkozXXn-Ug#bZt~5wP3f&kV#j=?_O@
zc~*1KdyPS4Qm&yXg{%I_|G49Qp(b^7;9U^f6<V){*cyAT+?dr@Nt6{CisGwUo{`N<
z{Z@<LO(=;j)+(|_IMecu9CDu6v3P8}uT$J!rL$hyU5C*-krn1eT$vCFWp1GuUcE21
zWijkL2X^9od7NozPq>}~yD^fh${S)QPi%M$j&(kH?rLMysR6J{RFXC3&Q|~Yw=S)O
zVn`+PC)WFAL;`=}oo$0bnMIcglI8VjnK-Ni=X-n|<U*%GP}-IU?soqwRnr?@TD4EN
zL=@y#&zI?hqq-tsJ2@+t-s$CWiQyJ*TD2~k)T<Yo8Q(|%W60qEWT?Aqli-@?_$vz#
zc94s#ha3ZCR?|rZx1-ot?oN1JvL<nU=vWP-GXdFt;O%;V#hUNd*Q8*=L=^4oO>S3z
zMNg;g7*@aP8A$ixiTtD~ManrVxex^_xS6vCqG<U+XWqjqfVHQGc6er`I6SuAl4h{^
zR^)j-r<2RUt<)yoHP0O#K@Tu20ohSGWdfT4I9ib!6czJ(yNIXUc8h_K)upU0uPMIm
zJE^FVC9r~xgG=f7ceI!hLUjOp;#@`Ww{b*oH7)rSDBZ%zg-wCrno#?)dD8&I8N&1=
z`i?8D(=nfxID!p%T<v=M#mvct7Ee|QRkdoVR+jsD#6q}FRmsrhk5OU1FRbI?ziw=3
z0*4g8mzMrxN@0f{1ooM9BkkBKqLm-k5x@s$2V7xCds%{mos>p>bkMLEVb59dr`LsS
zjIQ<+>|isRWxXN|%C;-HJb@qDXqn*DGla);2&$>MFR1<6H8(y4@&<Q%r{vPDdDw=H
z|MsV6F-l_V!#Q=oZqwvg-WpkdC(vxo((5>^OhKoz8EE&IY!RM%osp=^jtZ}cCYzX>
z-+0MZ*t%sSm0p`eaV$H*ITXe9_`vdjeoHRarDfUPm8$#;sUEt}-M#t4P5+*$q=dyr
zn(EhKhvO<U*LK9-E$Mh%@U8i)Bg<0gj}L?Nr?0Cnemkt9F*0#Y?M@0&i;q<U;nSZx
zcT)HsZ%jLh=Wfmh8e3Dfp|XXKiD9>4)ly!CYjym7%3t(*<i%PF=Wt~S%&gBKR3(Uq
zw8;UtloZ4tN|hp*<nJR51@+EvYO=8<J^g6wQoo9gfg&_67MGLfUwCH8Cne1}+P}I;
zP6LY#Q4#1El~UA0c&oX>ZDO)>WPrZ84R5!`C~7<X@^ZP0H!dN;0x#?kTk|PPQW)kZ
zQ{=>8@>;L^^~Tclv{Ykn;vW+C!|ySF6ZBs$ap}V?GkYlcNi%ok<9>$Ffwj&)U&)#^
zLkrNZtvA;<GE`O1a*dl_m6-DPxl?dd6bp<)*#E9Iw+^^#H|N7oMFzrO9-+sCCqFj|
zsD^as^Day}E3gQyHk1v&@vYS{3G$>kGSIPMKExRyvs=cO$NY>x{Xw#b01Hy3Y6H#I
zL=#lC$!Uu4o%v{wWF%ce|6105{Okx}?Da>U@Q@H6i4wp3#i_tWcIn8H{D~||E}@Zf
z+6n>6hE!@pGS&~xXW8{;?oyU)M#Y;euz4KaE9kh|1IY+4M>F#76$)-wh0`rh`B}(e
zd;KS+A|1ApQXKiHE4JcF8RFBc=8BQiYQb#T3<u2#E@1qY$iy;mUkTiZZwtd8-Z1^!
zVBdI%Xv&;OL1;67-7C=Cao6#c0na5Rs&V_yD}(@l#an$zbyraleBJ51aCz3b4hJ@)
z6z<#X8%f?*CO^4vN11D@X%#tfE^p(nl;OYiSADBE0vP;HbKdrF!Xpm>1x%;{GjyHS
z4r{`{5t~#)OPwSlr=>YRF08cqmZ_LzdFfBj=M6uUUFAnLIkWY&QWD_%TG6YJVIR!T
zcv|d<t(E3O@8PdgP?=RUxpTjT?tE-&f}+~qQWht^4_Guu0KTy7`tiQ<Z8Z1=toN>d
zl<Kw#2?<S(jTzhHlSh+h4P%T5ym=!lFXQ2%QkE|eiF{8(91&^J@qSo5+S2gegq8@C
zTh1&NlHsG&>bbT_oCCmWmyf++5dhB#5y<~LE2*ijPP7?r{jJ5rvi1XMx!PzyI;2k8
zxvXIT1V&ym+FX`os?^sJd2V#q?s<BQG6~Gu0ACw#q0GEm$A5Lzq;{y?$)X`$u}#F#
zkTL!(NWnfiaP6TN00YhlfBJF%WsD`IoRKdoRGxql_xDL0>~q^q;ss1<ZeGZ@g*<wP
zKKhIkff<XE8n~ZD7O(dlH4SjkF94SPr<|-jsKc0;$CeL2A@;ZD-q^&V;wwz@3|WN<
z9RiS4aa``&)`?Zrct$_xkkAF+Tur3moFiwo%RblT=Pu1oJse`0iI)$NOyQ7Z;N<Cs
zG#=81xccmxyHnC~$Vau03HW<d`ZF$_No;a`+YcJ<p*j<^jQoq~&yA?2qiXYp9$e~;
zsG>i&xptx&I|E{Pz7yl)zz*$Iz*s>(!rf42cAG`5#GBMGrq<=XrF|x29u#nIxarSN
zv0)mw6GDUxVg7Ps<v%!^{clg7b7JjpbHHPayF`sqGf6|cWri&CFhkNd{*0glf`9s?
z+(?IumC1bVxz*@4lD>sz1m(A%cHt$tiida17DMg6hF`JoH{v+X*65j~{yQw<Y0f2d
za}vmJLtyxI3&+E%hwtWmx#)k+jw*gbE&R)9s2vdOLVJUgJRZv2Jqj#kEvzx_!dzW*
z@wHQz)6oZLOs9ITYFa~FU2+Mv4N3`7G<<#o3n(H0U5XHjoLy0&#!~5rW@}-Qr_-|x
z*z->K$rt2&s_cZM&dr&E<IUZoJUo)O9Zx;VF`VoixKZ0)NqK%23JlY??9_?VAdzXN
zA7>H91ypOVD>M5zS+ANsJfkjUR?U&c6MrKuEG(qBibPUe<OxLHC4WU~NtV1dsf}?u
zVl>?SlyEGFu)k;Opx*!xMo9PeWE&_%LDhH$IC~P_S<3OpB1BQT^?OG2w-aH^_I$4?
z8k3*y8(Qh_gk8gy!8t6TzZV{1IN|40$I?!E`E9=VkEKQ)2I%s-wB_9h*0-50ZZhkT
zfOqrfBX(MjZV5`aZj>fqEg~lQ8pm#7tql9GJ8yhzs%X>htPNz3g)CAq_8(Taa2sXy
z)iu|a^#hP5Fx%ts?}SJuw2l&jA%@v>7N}YK`?}2RVtAC1hA46IYEI|Rz~R1@^}Z7}
zax^guD^{=wTBr->FwVSd0RCreZ9qF%XZ0qq?jrF2|5YxZ8V4GD3v~@Rr+fgxKIPFO
zJFSzH{aC*~U>@5vW#R>M(u#!?K^b(5NTl@UYfh<5vBLqluq<;o`p;r~7N9qMh%ya?
zDJ6M@>C^&xmfvAFbO4d>=J3#o?tlOCSVvr&vjW5`iJgX+id}b+ZW*EY`1tNERWAOl
zK5AJOC4_smu$|mo#sQY@EHb<L@Av%zBaqTnfls2{$Uv{aV{66>Y2D*lTwJVjST+Pl
z35|yo0STw?8Wfdz$4DM;YU+B(tvaUw8t(5!$og;TqFVlBZ~8!(Ilfk_>Tc6rV#RdJ
zxjcv{7HLpm_n||gXp<={zWUG8O8Qr%=}(umE}Yzj3$J1y;91pwX-$5=j2SDG9LGGC
z(h;*wFTzy|DFU)hO>RM{Kg9uhs}|P$=1u^jQ#EaIoTpLo!QNgcxN^GfTnwZhX`t9s
z8muMMDZ^)~&J9ra?Z}wXxJlE7TI}u=wLXLwDb*l8JrUiLy0RST#Xo8zFP|ue^=`qZ
zgUfG#)Nq2#5@om;!xg7lYSC~B>|{541c-JUAa5b!E=<a@tC3u8g6*L1f8<9s;|oJ(
zo+6*eO>4l{e&Fb%`xKg!{=fRlaArY^tG#qyC$rVNWIpb_BHxlBVzQ;fJ6c627rem4
z)%uh!Zcp4iu#+7FE2|5O;h)VHue5ffc`lee4NNyz3wfou@k^7dtpxB_sLm-3KS$*I
zsXMK!L&TVOoLmM0KgP-*AbpzsNy`~tm|cl*G|~in@AROUyj@y`PzwOOH;TXFrr<y^
zvvg<5DGH97bamh)o*l->33+PzwDrP9+Iae>b92D0*Cg1ikb7w{0?Ha9^jOA7_FYe~
zgP@Js=hvG`Px{cqAC`TMkpQ}2T!vyP&MIoAtYGA1dk{=uM}4TfqvO@WfJhdS*C;2C
zt_3jG#Mc&?HKS<9jqfMJPHIW70yY2>pc^9K^~;5ANb2~>I{{`41j5xFMzs{Y8#E?3
z`_MF3iZtkWNw(f;sxv7xSQ@iX)6-+NbWpK_5fFLQP{b!1wdxtI&yDRb^o&c(y$kR4
zk%$oojhz)SQ*rW}t}}*8j<+Cd==h;I4JAI6oy2L3gwZvXK&OMu63)zaWraj74cfhK
zkcuUS@v)F`!gwYp8gwiu<q6v^LYdK+D7dfi-Pf~JqV@82nIg5j&22(#aw>~LeZ|hh
zqG#3{X5?vN?r>pc2mqg0{i$f~ymnO5kRtYW;&7raNKRuTsj1-UIQ><LrG<gcn0lBE
z7pb^d*q=O>k8hoGvY$429U`YW57y19ZEi0<I|G=xKYxL`c;PfuSBCIvH3@8t#M3q9
z_K$}ulv9l$1>K)ZGafZaMV2FI0uSP;p;<Ei6B}tK<;h)jqeAX6`z8fYAAH(Z3-X6Q
z`Ku(U_=$c33x}uQqW-dc?R$RQCvOACtMZNdL9F)fVY^<zFb0@xy{M`GkJAfac0Qd)
z@sE${>HL3PWucui0RIg5TXL29A3z`A)5QLVI1i+Nhx}jP+5ahKhN<01Pp@Cg+`cY5
zJ3H0G!(*`I2OnFz$md?Hn#_%OK>(B_KQuJ7p(Ra9xFXV2m^A!G#nirTZOAm(>J>$Y
zLN8#-1ZGWNTa>32;t=<xb5-p`+xJ&b#Slz?Jr({8t$Wpe(@j#E2;kCLik~P|bsOZ!
zyO=yJcJ{dd!40UdzZCO|ZP81H;2|PCE+&P|BA?g<F~5)*^rj}Ec0e|5vgP}t!A272
z95uG_dhsS-<Wprb+S;Po=<Ad0FIE4V)6*Xknr#ES9WK!(eWNUPkI3k>*&HT2YeyS7
zsTc!<20uIjws93(k4jUscQWog*N=Q|qR^SQ_v7in%I0q&0~cK502D5-JCX-GQhILg
z$$Ew(=eNf2m9d@h7T}AGEeSOg6je?vB>%wDATa)*J;4QLucFj(+TYsB0K~7y2G}1J
z8{Gt6i+O8(sO6=^!Bhi{$#{$i+E^X85Wh#Yz0bTCS4r5P6(d7wev&$;iD~cF)OtrX
z3eaB09=tu*5D9j%3_^${`S8WUnMD!nO}dt64MTBtiY1&W^RZT(0e;RWQ=3YxnZuR_
zN@%DKvUSJqnaDgZEs8Y@V4DMMMUKZ@3y`8Bd1RJOydW3B#FjcNZO5x4W6Clt^*7UY
z<_|B~pnpmr)MwY#4k5_XIFk}WiyPUAey~-(r$&@hc0^N5fTf-+VRh3R2SW%cFc6EN
zC0s?tYMTR0T~F36U{EvmgrVOk&d=@9vvs|<9Q{Pus9$5tb4e<ridP8u7F8HNA2{(Y
zyu63Ve)`gJw(SBWVKCw(s;R1~Mo)`0bl8m!>ifF4)b#+uV~UWP1Gbx;!oMq`VTEe2
z3UN}IX&wHBC*QBvr#bLBr~B9^TYhSbHJ#+-B+J_iyA7=mD62^cPQ_U3H#Z4`C7(??
zx!Kormib^&&6TdXb@)-V&_=qaR-STHwzZ<i+cSfT7_!4V)7-tG1F}Q0adIlR{35Bb
z8E-q(6%RAf+<T|nVr-!GSXfjfrzw#&0%x_1w|8*htW|sQG%wuV&#dU)7qOORd{JZE
zX=?#ck<Mkz_s4{Q8r>5|7r2aq=R@4vK>Vy5-<j^Ree>Jr$<$9X9|2ak!fchHAIyZ3
zN1=w-9{e|*(5YH3#aCH5)pEXt;g)d!^{9vxKpqbL+qqe+t&K!m9G~wKJLD0yT)~f{
zEz^$bPoPbw1S58{b=xy)U42RdXkBIc_o6B1BU571#RSmh4kxX5Nr2^hV5p@1#e?zq
zH*wm|hroVRxCqciqTM^D97+BYr<bJ}{=?w%a^7KfPzZr*BI~*)!%-+w^FMKUoKWv+
zkTcH>-xwT)11a)W7#x^~fUO2<qU?GadiHRsp$vs8KeJFjXdA|??w|u^+E7Uo3U!b{
z1iMSf?q7x;-L~x`4*eN*Ek^;bL4u1|{1lAzia;~1vZoGCG=g0e_yZ`7TKj1n<Tz5)
z@%xWrOB3@D1*}$bU>*`-PlLgk17K=@`!6ULXp@gwgWfA68->6TU;r#d#CZye2$lR&
zLG@G>Ph;Y-9cfWiX9R9F=h)ZC(9@A&$;~=(_&N{=11v&$-<v$e6aWL|lUV_m$;80*
zVNYDJIp$X~>{Om=JE}M2zheG(Xzhi3+D!3MY%3{|R2Gt|vc^}{Pp;z(VpI>=7^D;c
zG+KfsSBYowShg=^ja`QOsEe^CyTU^azjiG|2S!szY|8t^!2s-H&N4MXd@K+P@F23O
zGEhajy}<UqnFxC7M168$KLA75s!VY*4-o=D>x0uZ99%ohaeEZk;j?5WF`-soxAAj-
zAF5s`cRMtEQp1jm1-4yZB$}5l0k@lmfdQ+vYo4fdag0wC5I2!>)$TFCDtXv!V-L$t
z#GJri@35>T=D9@d8AXDt^#!PI#Cr}y$rVJBoigj<Na`CJtU7|wx$NeuQcyw7OSO4<
z!8P`aAAiv)#<Vl>8#^uF*}7@H(bSws<@0+F%miRoPAMs=RVY6^#n9|fD3~Atd4S&%
z;ew$sBgwhG^!9fhJ}K>*%neoHAN4iBiCky8-0b}|l=$?#IT({-7_S8IL?A{|X{Ef*
zmW~4Q+3?-cqGcs@SllrrtE-9?Y<caM>EbaQ$;wv)n)WJ~^J{B^laiAQfC;Ij!)r35
zzFs<H=O?8^*Tu=YFP{7>7@)mAz`S)kVXh`fQ3;IL0+WkU0IO_J2Hkpq*-FQWF`_g-
zhc}80LSgGO??ofnELkipSyb*-W{ccJfO@bhbOpIoo3&aSV!c!-cq7`9{Ivk67RQ5P
zg9e^WRnz7r-hOz5+jVUmr5+N{e$G5erHc88r~pmxAaQX%<|2Uj{->3Xxio(ZcS?z%
z8cT#%Ta=3uA|=%&&esz`qO6{mMs5KFIqcw0Wy?gVByQWVy&1{+`m?KwiWI{6a&j~U
z5aSFQTU*;}^pgn4_x}?AA$97##apx)8C9h8J*Q>m<OmhTT!1ZSPt4f{8XyC<+ByCG
z{V6gL*B;A2kzrqx%&M69$DF2mh|P_^5sg_jI!aSDtwz3yHj$SP$I?pa3^Tcvo^<K7
z_WMO>E|pi_${unUO)Vp-5x!OL@9=WrW)l*n$#oj<sL?Nu79D}q9xm(ZDbLA$daORv
z;+QM+_(7)l{BHAc^YJ&y14qS|s=5vK7n?(nu*yc><wzFBY!Ra)axgRRA5t+2`m9=}
zX0ajsYY!vIB49Ge<S^|HIc0rOqbwPkqk_Wn6@}h0IZ<;*1+<oir*RTP`_P&R>lR|n
z|4SQjA6`ZB0HnT*wBMYjlWcH`alK;B?c%yQxZa58ZRXl`uKzkH30x<m6gzrtJ1^b-
zpbs6W0|<l;yId*d_c`CZ01Dui>W(g>`bfs<O6ua`8fF)Q%R<1M6sRMn0xvb9zYxTN
z!|3_2wImC)4Zm_5eZUCa*YGZu=F+F6(&c&~axp_~((=M7!qXquSSshH^#|G(uqr4|
zg+^6V;Spf(2T=!aJ=BtP`UtLiyhqvn#&0q4ZJ?1bEB~))gk?1o>2d`&*Dky?52)Tb
zrJB=luO{{^%|;7F#fUn3R$XP$P#T%RPn>M67*3NtsHzBC5{mGiFmLx_SWbYrIhaFK
z9gAw_?d|I^U)0gyBxn@=?a`a0&~V)?rojgV#R)*jS4ib?n9LG1INFj_5QQIwZfY!)
zPEk8L+ajx9_Ha(m#QxhH`t?P$HB<^;mAbbYw!Z6)U4lT8#S}e*BqsS&RHMb1jcg6Z
zI1?r-1`*amW=!%a`_U!+L?fJld@AzA|GZ-wA<fMpN>0>SJ`)03BX^v`vpp~MSMV+t
zxUF?vCI=rny_bRp5|^jx3opQri`O}oGQ}u<o7#U}>pNx7Q_bx@q}8^atC9;DJX+}(
z5~`y#I&3iQ!5B*iG>PAWm8Hki+;QYy!=|sn*s?E8!ao1vux*(2Y29G>G9*V~Lj|a`
z*jupO=-~EIL7fD_V?9YB{k&)^Cx30tN7}=vZu4P(IeqBaBXrzx17CS4H`du-z0u>E
znnEwI0pzo#{19Kel-sL-#hRB0OGF#o4k3NN=)+H!UIJ@kSLBa6tg816$>-!PW?&j<
zWRgE6AGP$4oaZlIhKOSqD5*%6yW4J!8Us0$JCcDJNrBj@!$~fTib-6$TyDD2HY{&;
z!+OjI`NB5_>lPMBlvRe>*S(B&xvC?fM8bM_VX~Uf5KIk5N{AF{m4#EG6bT;4A=C5n
z(HPn3^V;v^BbFz*$7IY8xOf}Y1*)eBfet<>Ar=C-U`ES~JH9a4zco4x*J73|<dFgp
zmAqKW0H1IMgUv)LmLITdpa6y^MQe;2S=_q%NS&UDqTI@nG%NerwJ{mrgh^7{Xu2-|
z&~cdjeTscL-_%0?aN97(&14wiP|0T;YV8qhX3@^D-YNDC-f?IFne$TZlFh+U5R1`P
z3IdzaZ&ZL;y@&N#y)1C|(h;xR)x~9OMdDRKNwwzZm)Sr}1jAduo}@@JY63g3gY{h`
zC>p)d<NV`XU8QPq9*)9U>1z2<GB2?1%_C&}<My|{JU5hl<^p4iVvha&cU3<|?6dOK
z^1RD~y#Zt;nYYoqF7QNV;dhYlTUpdxt}65fe0{Ph$Ns?0VCXihQ1!8X-8NOEp?rEC
z0ZMhCQK0;z&wv6bdf=8*X&X^#{n4JhnTn7!MPGT`jBh*3OgChiUR>1{L)LA6=k7RR
zo9$)H^tqF%ydxC1+&?MFuSN+Ed3`ifdb`!OQyLn&5nG_HjO*4n`$ov)b*gJplh{dl
zbdmO>{Tl=38&v?|I5Q9wkz@5@U(tBO^Y2YA`wAKtFX(+sxw1x^)UT*fqU@w0*3AsB
zOo}Yj&)4mLqSw)ApMUG5qQU9%-(N6)JJ+h(8HQ^%bF^m4Jhm4uxT@nwl^I_q)sZx{
zq31e?7z`7fE}5^Hxxjp}JR<T)1!i{fLk?lHM$x~!fnz4x%!>U5;DDE#jB9qc!8tjP
zzrT3h<#Jci#m`Xk&Fd#`55phXruQ=fIwGm3>Dd|tsvq-7exMAbDmY{GUtJ!pyRAu1
ztzJ4r<OW8in%VP9#Irjq0Ud(3pJ#v&A`Yw-6x_*C*S;-C7Kbd1wxEh3tz>02n_$Q5
zW`!Z#1z*|E_K`6w^-6-p*>3|MG?AG^18IwN0?gv`vz|S6M>w2@I*7dQ*i`1Cuacq8
z^2PT@RY7cLA~4o1&IicdEjqQ~!-Q&i@dTg{-z$lS*^|R*`!hXwtd>Sw#O6U3$BTV#
zhaUfvKr?llAy$WllweDIBpgTbziJDjz)ebc{>(fS*PxBD6_uofcx_VT=X<ofP%yuL
z7{yEaEgg0L4zqKyoabQXV6LU2;xB}Oi@&zkGs%e-5G}}4a$Yxzy(b}Lf}l1(>+)Cl
z^W6ZN>_R3}Jh1HP?fQt_#KxcA^7_FL4#`gguNc=*OXiu2Kt<diG;UVV@{;r~ey*b}
zj$!uyQ%g94Z@;k0sv@PuB)m0r#r^iA^p0>9tYDrFn7f{La?foS`L-c5&ounDTo&30
z@=Ox!a9-kFmS;7%=(3wMprEcE^rTp!x5@kaf#gkMd2fHJuy=hOJ?~#&P^MjLQpIYg
z1xBTN@}55V^0&kangN+A-+URgRPzI7T2ypbZU}qI0{0v*a>{H0yzf>wc%Sfx=(V_r
zBtD22Vex$(QlCT!F<23(GCBFW$e+N}*YT?i0a)U1@vag>DGL)V?A_OXCD?PqD>y$z
zUebN~b`n?zMfuSzU6u5={>lqDG4Zq)-0PAKl~l8Ie~K)dBDt3a$*}QgH~RTwyY`b_
zT%H8}{!2+=h6t?RED_>?W{#5{fG_KGF5Q9!k2#k7exC>;C2F6|Ke4jri)9~lsS11V
zFB|*4bv?$bsWi^P82pkX^l!iup%2(VjInpR93g<aNEqHk7YrJYg^1BhUblmumNG^~
zUYS3%fYJm1DZMS+W{Nbce|95?SNN;kP4jd=+FhTy)O9=9dQY?L1WhtRCX%%8>xl~R
z5M$P0aHWD?jI6?cy9Fe6Xa`{u^AgPC<{=h|`o{BGJcJ~x7L<TJ2)`BAQ02kijFY57
zk^N`ifma2i5`@j9f0TXPEL7Z>b7Jz|(FZQHEAxZ9_REWYWRv`X|DDLfcPyt<ihwPI
zsFS*^;TQ3hgIA93jAN1WgXotu1i;&Ak4AGiG27copi5Qajgk|Z^-=jG?t~}DcdlVE
zmD?CodKs8+;;w90BEqZpg9VFn`x23${G*a%5X+ykxpaT*@-@9^l)d2mEUy(8{z$Fo
zS<*C^>q)>eB4BFRRt=}GF95LQc&bG7y%PSqeT;HEU~x538z##Q=k|*xLi>{1`K$C&
zD&X}OgAj2lMrVZNt%Vm(iel%2JE(IlD0xAseIh;8{uWWTUk-f(*o#TJaitbVDy^M*
zvN^Z5dp#{jU)?1(Tmkd=$o0%r1PO20akeWWw08a3{w@m;X7VbgC((hdsWjbozDDt^
z<c6iVf>CGu@ZYHKaxS*F0w-m4D`^HY16%j|m^W%xDC=m1ibKMe#}IDcy!pqqmZ1{&
zpr~ZA%ln;IpS24|M_?|yT1h;1dfgm3MUM|3?oZm%C-g}o`qeZ0InMkrhjOEQ4@|ix
ze;>lJU6(HpN7%9-A67<y-9DSg;j68dmM;x;ab&UV3r(K23^nOr_jbf?Hnf|i&Wn~H
zQNAno^=9_db&k1ZA8&+!J6%Pm7$8mK%^6!b3Ho&sxHvTAygtM`;g5v2y0<eh!jW!_
zDQJdxX=fyHc?ah$upFFqejM-FQjQXqbn~+1VfDRwelzuWH|G`4xfjn~jEos_?WJw{
z<8{*|B>Cn7fX#EACSH{3Hy@2cUsPR8ML5s>^*h_E9ElloXNgXk0qk_{9X;=Z)0uoa
zLExz5lfbng#f&JQvuqUC%6-czd!n|XL)*+3P2A3Fti0oa77AJAzw*W+P93u3%@y*v
z9k@pQ6mUoKTIGOlu;i(^Y|-G@9cZ$=)mH6&Yu|YMrF;ZKsh_a<<U}OD&YWf_RWPBZ
zcv0cde$HMPFi*gquHTdQK6o>LXB2PhVUV|g;qOTxl?`uwI{9PAT9s36v|~;o_15G4
zs`lB8L;UCwi*LGYW&-;U$&2yuktWGaL#|)uLv;b&m|HmshN2FEl3z@y12tF4fNEXR
zII{o`@!Jm&3SV4xaQQym@p)byZw|_EuI2prL$o<HMsI(Qb-!CjZ~5>F3Mmq4{MLNY
zls>xrP}k-a<b5M?-OjpOGb%V=Z#BFQ&abj%F?hELy1A8q%n&kYRytsh#v=s=%ZESe
zi5<J)hB?vw&%pykz~$1w57&SwV=-S5^o^x(5|M=&;;RXIf+Z<muN%y>rc&R~jTDaG
z(~svI^|z7p@979~vyKJ`FG7T;!p1tbe^jbeiRUsyVg7Tjhq;=iJa3evWtCI_OX^+Q
z)2m|fnFLivC7cB2{Yd?oe)pGt&30*OGdT*<BS$1=AR-DVwBkrh*leHdIzUPnP9<(8
z(4r<}pve*=kK4L)&hPGRMas{DPXbG1+(wJoo5fyT9A?cgJ^Iw|6c%mC8{M<HjAIil
zY|3(`(?_R-0B`6jSed9D++M0qTb-zX0pnNhx_FAoFJ!vKqLeDg*(87DzK084POMzG
zg4xr*?H~)R$Exd8aar5dTqdSAmZrbelk(mV3qu7fdl)|UBv&<L#~j>DFIHKOWeMMQ
zvL5ESlyZ*>-eM$;#L6mtczVzdpiO9g6kG(^wv<lUT(=87wloQ1My`E0{P6JlARH0V
zpT^w}4<)=xQmslnv_c{=X1ZYO3r<69EJlL1e!-Wj3yN}hWJ*q>oE3cC)XfGE6r!5n
zC5`VFsE7f(Tj{&vsg^TH$$S>0l2WB%AVow8p?SN&>$ks|YVY`x^xMSZp~9u;va)8;
zvb|_Z0v@->heZdGiFw8-k%ud(`RzWrOTqW2aOpBV`=)(@!~<a}--}k?=oh8r(UHF#
z2HGsrW9iASTPlwG6)Suu1TH-Z2`?`KIXQ(+l$AxOcS|i}NbF%^!WZRHLw3B&UcV+4
z(qdkSJm%gmwvJ1bwX@0FVH{qRhcGJKwyWjs-1bpN^<K6--dF91(qqDwqji7s_`??*
zi|)45y>-o%S|~BS9+n4E(;texfa#ysrt}{D`lgm5wtHOuk-WH?{Y-cN#>&Y3#62&?
zJx}6d@ybb;+hP4^UE406m12&i<%8qs<(iaeX2xlZud|`vk1n2I%*e;gz4V6w&#E$5
zE&Jf-qXnz&WQJdH5$I}7SL)1G@jAEd3R{f<{ua3=cD5kX8d$v<TzQB<TN{4JJ0GL6
z+IYMpPKQ>Z+nKYEc1l(_C#^yuh=TimfMmKK;_@Iq)xG;Na~~}a0y*(fCS=gi@~_US
z7`MF<@h0V-Ui?&3&<DeBk#kx19OB_Blbrsjr`K6kv-M+-*{4sae^B{WT))DO+EQPm
zG}-P}{F$8AVYzj3B`m0jm?CZ_s7L_L*}&C4Ws=;{Fz_%&X22qQ+g^58g<Zv12%maP
zue38le%p7mO54tzLW>I}m?t$<_v#h;NVs_sSku+yP5BM&O9j(!M|2ChfFhtW++y!4
z1?%5h-nPHXvZmHS-bZ^5`uXdVW`GT!JQWB$v+?e~LvN;b&6k_8L<>dR^fWbTrNX@!
zDh+wYdHwU-s|!|K8JTsj#4akv^=2D4B756iq^|eXQgqyX&bb8#wT@PjvU!4y=Llco
zYm&5yTLQP3diZH7{gZZyJy#U`GpaWF)W!y8-+FTG??=W{GU!mmW&hB8`n&&*DIeY^
zE;MhV%uYKyEOofJtP52%J*duBoA`D+PKlnAW9s3oSX%{_X_XizcL4A7sV>eZfSVOq
zZY!kZU%TVd*D~}`g?VJ^ZEI9*rlwc*baxM4dj;7nA0@x%Upx#L9}aJyLYs=K7Bn*{
zG#W;4v>M*z1O?||^qmcUn~XhxF@Ty>SeXlctsE;=7WiXm1I;+DhX3_^^Sk`~IpprA
ziVa6XolZ+TsB%2d39`1?J+AwtNeo^4dPUmZydrVpJYZ+FvLlB+)gtI#gj-Cgm23@D
z`mretl7V2#$sdvd2kXAxuF+|n2Y>&2xFUX;1zaWE4nw5YSo6<CpqQ==^_IFu>2BWB
zm98<gxJ3Y@cwnK-cg+_(@QvUii%gYs1%Wydo}@>|^GQHYrf@PcTzpEsY^AWxx`^M`
z^x^Q@YU=kPejO9gP^{zPT16fG{55lfiY&@i&bL|;4js=~2ny4-`|g5^WHxX1RvI{i
z3iIA}Olc)c*a>6~(Vs9B^7vP=Bcf{m`J`E}lBAgLk%bJm6`#VDg6)vHKm|7C8G9Y8
z%R~Cc#Ti6^m)u&a(pK2$xW8pN!lWT|jRB`<@zU4I-05?JJye`u6a#nXxI$brl*yCa
z3$8Bo6*)h2Zk|V$KCkyElIA5Zf8LHlR{T*yP5afY_s<XMD}~RsR!{jaf!AiWudi0Q
zuuN}`4}t|*fnhw4Q-w=wlk(-)P~vP4gQnWTgl`2}evZY6MKUBZo!lTzGfk?Rl|n5j
zqu$&Kan(@fgW%2K1~$;z5zV-D@K=b3V=&=w?J!um&n`PWeYlqG5P@<I>on&G5mt0D
zweaacn+|nY|9*0TmPL5iJO>0@>@dzftNSF$tw_X5h))-PQvy|c5vW%(j)j2KIoxp^
zKEHn8Js?+Bn6V<@I}rEp=i8OJWx-v~@PPEGChTIw=|YY$9)Hy)s8&%GyQE+F(cMxO
zm&RjJ!zHUlTcLk|jW7}l+zS;4ibOfj6MQ4YljeIaSJdsr+ob)^NyUgSH!Oeqbj_a8
zgBEWw;3+SQs6ZXM6~GHhmbfRkV~dtCBx&>FH4oWwX}SpH3V8OKT|>k)GRAXxCF%6v
zp8g(GX$7_{=qaNBLK&i~uz&2haF6PuydJc2;$hbi@+jV{j8FLYU)ezHQyVJDa)0ae
zrg;48f6_0D;ZE&Z-->%LdTIByswLF^&;JqX|Hd=EZTAZQ=ep1KJ`N5`SG~t`!rnLf
zc5y4|LE(xCs%~K&zr#Eb^V!Na=!qoz1>~k~R<EgQlopks2?_}0)Yb9Zr^d(s@kjXE
z3LcK%g>v{AQJ3N~J4P!EQTTI3BQpYRQniU~AI)!pQU|-_+783Y=r{Pri|@Z*nkG@X
zv#jGT0-xE+RW*51+4Jg79F$iz9s|#GIWreDGw9$ty?_g2{2H4|f4LXlbB9?+fl`|-
zR5yZaN9_){@MbH_<PFo;fhuvqcLXNeVxtyeXlgvHC(PC{3Li#efCNlsDcRnXsK0rv
zu8hC%$wYa(N%wR6;~!_(VVo}5E?2tl>$$}m0k?UnrJ7MC*YW7c!wzyO?P*Tp{rjRV
z43i7J)=N7A=$8g{UudV8P!kEE5(mPrnT5z&&qOK5-rbKJ2qz$jC@7a9JVR9!W}12g
zniaLq^JirtpOBulQl*)mJID$3pgt=L55s@<EF3uP8A}CDv5QMWA}h4U?zU`pb;k{E
z$3^li<7gITdLZSKOATzUX8&Vl*VG|&{xi=r(UnuOV!+i<;kqwSP*9L4cwvdD=3r#h
zBA#`Hbv{0>R<{lDrB_t!Lsf|qGGyjmJe(=#jJejtCmir?*nxjG>e#6>9f=#T9x`l!
zEdRRUekN*s)WkFcx^O9)I4<WX$S>wH9XXqfMVY6f$4fDqPm!nb^8O^1ui4f&(A>9k
zwoq586aoeQXKO12Wqy48{nw4e^nuY)mHg{#1N@Z6z2su0W#YYrqIh^>xy5G>y~0Jz
zric0e*V}bRHI@APt1hyr5tT((kRphMt`KPpxGK^F6i7e_MG*o)IsxfeP^7LPAkw7>
zNeEp61R@~42@*mNMTjI2lo$dM;9b;xfBepQf4p<vdHE}6?#!H-JM*1Sx%bYj!UO2_
zcpR+_V-G}TE=N_7wnL8lHR%Q9sH>g7eHqS?GIn+;%+&O04Su=u<%_4SOmnU-6+FZA
zlWshiNAZIPm<I+UpEi#_5nyPXr6ngRDH)JKO?;#Nsis2HX)yw|(O$|oq9iculk<IX
zA#r8xYqevbDv7lRcr5T)6zjik@u;#QcY?3bY~bTZw^iHELljC{edv}$Lo+$|@9&9O
zT+4$e){tuVzoa-VN4T4rC64rUcYo4EXbKf_>iuqr-e*7qzI+y5nHrN@>D-`=mz?fV
zXGtP<WqYpegL|+&k~S9pwBkW2=3k(tE6VvvE7bRm3=>X!Ow)_EY${H#dm$7^+>#4W
zsAFrU-6kFCqedujN?n``$v}j#@x%yh^>@x_R{|$+djovKoz5M(-)n5#-Yin=L_|8~
zj#sVkt2m4YZm4p37(_BDF)@*OHp9Omv}K<QqM|j1br?TMx2qq-Uend>3DsKWCRy0d
z{l?JkRu$W609&4e`lpwcft8m_s(X76nkE4@TybsR&=!ZPlJ@33Byyd|3aPIj_&DL#
zDovRNzqdPF5rDy9#&4=G2fH%70%l_=J(hFoh^)WJ?iX#c^YF#iw^xgZN$(_$^Ecl=
z^Y5NNiP$B+#pQ7&3E+A!(jUhU=%VJW8-i<Yz4M*qi|_3{=(7w>dcv5R${raj*q`Fd
zU~0L=`7aVi7tP#82JRhIG*VBRj#d!$eF)wB_*5Bz&i9m`e*<O=axJ8uuv7EUDP55l
z5DVQ-|LZIBd__Lk1@XyX9&B6PAeLjr7RC54qsbVuDM{k^fm(_CCx!M|)yzu}U&vdT
z29}_gC*%7jf+i|xxjwhYMn+s#_xE=~Em({{MJ{d#3k%J$Qam#1INy`_ZKUjmi9Nx^
zZq6STm3I2n5UkyXi9IO<$9u=i7bIci5vH|w2qh(bF-rY3B{oII*yHgbx*FU@5#0l=
zo5+oJ$+v>T-CGriUx?|d&k?ef|Db43pSH}?IBIaWt*MANwoGzRQIToi=5ljMSH*;l
zQ@Z}^LOlZ%hL-7r_D-f*?h?P#AOkOkqsb+c+L|jv)0IJm>O-_EY*(RD2L}hH#f2`N
zISiRTIG9%x_B~fjGu4kD)~5Zv-)tVt5gpOc<~KLWG{*+U!?Mga#~YCY%pAI9-vUM1
z{umZKC`tx+Z<5{TK;CD3r6cGHmHphcyJ3!Pms&3^Ba>ElH~1V&nsP%B3%;)Kf-@P^
zr+H+35xM<nM0=&3`m!E_$9r8?3edkOd@jkgFbW2Jk=(W5gPf3j9<~;1@@jLL`*B+-
zs0#Div^Pd!>(R3|EF$BupbT(T_6u)@t01lT3wZ;F+PW;IP4pz^s7<T;uJycQeMFfp
zRA6?JNy^|B0IZEM2zF182{yF&Vv-gXGp}I2()`#J4Q<>99NvEdCk;ioc`geU@K{)H
z)aA_6BCt9xtTB?C&(u1|l?3^u;XtHSp*`$vGk7jLVoAg;hlW%`6!T!qPvC#sY0HP%
zi$&iWa&4Q~@PgLZ-oE<B!iL`;@N{hC0^#}MzNOMl&=XC9K=MJEMvO8sS<c#N)$3D4
z7@fDG?b#F8g$uN&i7$Kkfqz7>%QHe&=i+<b$Mu@XPzX;Lh-O}};J#$G|CfNiyw<p0
zg`sJBcf2Q0cvDiMzsJvd_gVB#*6>k0f42b6URMjDoJKT*b1nPJsnCsM+I~*~KwQ?~
zBnS@@JMeL~e`x4!pGaE^i4Zh<X)MmNuVlUXNZPs-xNBp^gm8x>aOscBD${)rDjOpE
z&<GL6x=llssxd2<PaC)zV-KPZ55q2mUF{@LQDLg4DF;(hx?qlw6_Ao*TCgNCAqBg{
z#hGQH?_3IPRTRbTv_cUL=$Xgd{xXO1x)PJXARXgO*@Vo@Z^izFrUeX@Jhuv|IcCXT
zAo~tjH4GOYI=4Ea(7=jAEQn$Sdf(DM8!w1}(N&*49!Nu%_l(S6kL@Z)ZpWW0IP)n=
z2Cw)gPHmd_L3Ix}NQV0a8N7&8vod$Dw#-^q%LR>D(Y&)o(us1_wo9T?N!9gEm#e^U
z@8Ko3av~xk`{Q;^JqnK^lcZo}S}VH#-CNWBx#b@<;WkMhy_eD~4EwTeXX?L<K}?I?
zCyBQV3=EE9;DUlO;XEOm3_A+PQhQk-ltfjR9^xkyy_N`YTC!5ZI3O8T7thUdG82!9
zZRn2lkGnSL%E60KT?Qr6J<6fW^_=mrJpgxol+sXeGSzLDKtQ4NL%{)4i!<9k47f{u
zy~z-jD&13O(lHmiXC;fNxfuGiJ$cMe-v#|$B7Xq?i9#v1KC`*GdExx|=NE@=h=__N
zKX|Z<6#^W(nmjEOeFOHJOpMo?+Teyev3jiGal0OBO_>eK_4EZeHvbI2VgGP;kpc9&
zhK9z+R)aQkEO3u-mC$<HT(B`pjh8wpAt{j0e6BZ9uD?E``BVvxoolmG+!(|tqlqZ8
zG>ff-?0u;TJg&M#XqDb6qfENL*~~n<5bZB!RcZw*f-P{*%RJaM43Zs(W0)v=omW|X
z`{Bh_VHICpIA@D+o78TtDrqAT@E|Dz9i518s1!b+R90#yv$SU^T^Nbb7DqsbmXgX7
ztT<;wQC+LGx%ZD}$R^U_@A<_iFfrS48b{7CmtM>?RyYy8W?O4^ng)_BH8lN2x^|fD
zH6e@64ij$ei0=X5cK%-vXJPoVBdW)RDYzsyL#2IXu4_W+t9KVZt0RLVmMlXFo75Cg
zsDm%2Xv$DukdrtB<jm}{odM}v9p+o*y^>&ZOjmrp^QsISrx;WW?gKk|=ygucZDxWe
zbyeo>{aN*jg+GC&mmGwvY%|on;}#eRY#E{J?}i2k3CP)8T%IxBb?YtP@O&!>7hiAQ
z95^*b7frx2IBl4Rnkwd!9{$B(w<=L&R8`(`p4t#*aDU%m862-Z)aC}fE8uyh^IjfN
zjOda(Cztdj37c2u6<c%lgbGwp*m3#ovN~+hq(^FoP$WZjl^#~*S)`I)j7ICHN3p4Q
z84GRQmdiPGe$&7j6?FROi6*nKwU>jw=@-)Cc8NzC`r1dq2v+s_RyS|C$RBonhZ3$M
zxZvs<5fVe;#YN8EeXUQAm0G)sC9KRi)BL}g=cbF`{Nmro)Tu}JsIo;-bW4lfK|Lq`
zB5NWYo0Sw^8nppa7Rhc92LZg=t&qH3b)i=h2Pq|ybGy$#hBZpU48a=#mp!Hmg-=LQ
zN&=Nu!j0-F^jNdyoL*8ErjZT>*D2xh127ZWCa9;tmQl)^k`oyo14UNG8T5oQkWFGR
z-hEC|OZ<w?0$UsIC%ko2A#r}~tfvjq8TA|a<<eu@PS-|Nc-@*v9!4aM&U^QXSFA=!
z=QMNUJ367awmpx0e$+d0`x>=oo3CPf#V%|V_or>)NQ0JpF2}+y1X|PH!D|<`1|0Gq
z>gr&9{0OoaIo&v-qxzTY#>SnWKNoJ0KO0?VcXjE42G#bAbU<|w>AFc&OzgF-J-z82
z3!!TFzl8?S^OpujS%nAqdpk#%2ePJ<&x|TwR)LUPv<}L%y@Y`^@d_cFZT9Ln-#TQ%
z%n`g$p|<C4wjeS~`rtI?!RWwNY|SMjK}Q0r`S%i+$CO(gu5XuP&BUsAh4ZV+q&(aR
z3^IC&3YRay;bhagnuZj3NE7Q<1Ta@}qp906=MwM9@3$uXfqM{`$2fTgacujKm#^lY
z8QL6O4LP@_Ah!1Dp2Xn=vZXxF9!t~9ybKLp>P61YiX<I^6=bN5KiIq%a^k}5y}O6;
z@JH;T6nw(;*TrL8gajglR|a^8f7hrEg-U^3nfY8>2%nUcRDLP{u9T&Wz}Q^(#t1J;
z8bXOOKuX-|R&Xv|%|x7elv0>|tXz+91P2@{d&jY4pMRB|a)_N!7D^mmyqA5wv-3-(
z0H(13$*hSxXlP8cs3`ARSMuc#jtcx+0I<LP;1R5D(YY-ndm01b@ji}kY2hmxkdNNg
zjGhm6Z>}OroQxHY0x{3>&Tifv{R?8A{Q{pLF3J<~6a>h8DG+$mKoMTi=tP*m6Z%*N
zkQI4g!Gk>V_WNMCUtSB<H6%!`*JJ3nyB~}bbUH-8fuP?|_kNUnx)qsE`xMjtTX%bu
z0i0*gr9s?YY`Le4iX6de@9M2gJAx-Vug8NX8q|on{6uDlMO1j7Q-uw8HPswlE%(Gn
z)XN?KBH_l94Zlzsp%%pWh02O^-`vuEwy-JDIjEW)uF;#iu;5aWea_G&+QVwEdv`O}
z$x)WEkl*J)%S=e`^SI}GEzsDh;u`90%X(W%f&+-qN5XuvM@4o6;iZK3-+^!)kcI$9
zrA9}MxiuPb(YzD&UlAMRvP|l{o6h-H)O&TT_@{|G<#7JC<>GF!?jQKo`*JGRc{a0I
zCvsRvKx8*;1OUscpxU%Q40h;OjfZjnQ{o>4mMOS^4-U#Ef;-J{t|x?E9iN&C2V<oc
z8C)?CP*mn#qO3A01FlpPO8U*SBHrMXToBg!l=-#CfR;a6UO!+N5O4m6N)0lhwa?#x
z((ZrvuKEY=XX0<b;h(y6;6te?26JqiP}BHe*8+oqjt>S$*HNmf+<(kJzi9d(=em<_
z?bc;mmrVywd&-SQtMtMoH#EQgm6j!DYPT}N<iOUmpckMj2PEb-EEx=o_LWg9CFTM%
zd3yS!61=6QWu8%mM$fN}k0^y|O^pjkTb8(PB_nFK_B(M``aRl<eEQPLq!rMYix+H1
z%I6d3*QWY6@~db!l~zxhm%0~+=m}w&=Vy~wJ@ibrBi0xAd3s{AQa5s@oVRIn^<{0{
zs)jrKu-l>(4uf@I$gxi2f!yJTIiQxiCPcxVpT#F;%&(O4KX|m`r-ELffD_lB*TZN(
z*_`6GVKy>*kNz_Zjg@*$r|fMk*kbuLt7%SL->zcgLQ&<}bw9W70!YK&<$NU#$C=<E
z7U&RwbpNP=oL#0>kv!tr>Niz8F#~wHRpWfu<s^D=iK^YQH!0MHRo$Z{c2UmIHZU}w
zjotqQgL2uPM@Wqk|2qC22yglaT}rPfM|Bz~X$7suj3~?x7RgtT2J0=Yzg<8%OhBB*
zy=N4<L(lh#1-@HUKr0L-3(i#=>fc-%pD8lz{{l;?J+>c+Ou;>>!r{6XtBz=fZ4r+n
zP3`OytgGD(tp(HdPTk%74)GyflOLokg2;OH%$vR4ssi<GffOT!&Z*B4UD&Qp|8@|g
zGdG~#IR(n=u6FcHJpS%h@q|L2O{Q^-#}CA&Cye*-1NKkJG)wf?fm$>pzZ_%mDoy)S
zrl0^uDnCD<UN&9-mP>JPa9g#b<C5|Ex5=y;qz-d<(~M<ltfjCY`5IO&-+(C@Iaj^-
zy(kF&={sa2|8?H8t|s6H5X{TC1A7B6FD`DI<9@5;voP_}e-;xPXJA3m=UivXmKcP|
zD<{FrYYScOV5pC=Z-|w~y$6Zsw71DN%;Osc$OM?LQHumCP4u5P*6u#5o2L<)j#B6W
z6>b4>Ftj>oFL21>7BAM{r5Z;>piro8)x@&0vKmkJXHZ`~1W!kiJURyrwzRFfIRrhm
zT;=5LKJ@`X2=v9#D$801^Ge<z%ZId65x6{#Z`B2x$Sp16kD_c}PS^YU?(@7rsU*Wb
zBQ-VEdSPs^65M;;Mh^u#;`E6W5wtV~@fZsa%Al>LeLaI;$JZ>@{WIvvzD%xD(9n`r
z<Fi=G8`SptV4fA2sxk(q!@|Nav`+`7_W|eU8K6Ktj^h|cr{Bm(f2jx_P^<^9#YRG%
zX&;eyjuCJt*3{q-8Jov>(@@pX+q-?vIzAr=hE#R5ToS5e!OWk%NX|EE5m-|jTA4XL
zGVz5wPPd12w`At9kDB#(kUn#f|FlAMOl`gTx%cCCg13&9@MIbT!}i=cReY^4Q<D+e
z!WZ6PYe)XPds;}<GU-Ww&zP7>^z%v~H#M*6{^V+nFoN@k-s($)y$9j>GC|dLtA)2>
z^2pBgT$S28s$))q`yc;Uw!wwQK*j=Mv0MZ1yEF0fXu?Uv6&~zBC#;zqgeT_;F5Zci
zywGt7pYssrLb8WYYFFx+sd+86=N-YEe4s3}%(iDcp9MFi>UjVDvD&J2S>Swx>t`@6
zy15JE-+9+N5Y*m%L{EqaPSj24CX8samuj+gBvg7QQEDexa~_g&Z)2hpn)LWATpQ{A
zEqb+Q&&9m(tU8Lz%z1EJjUvEJ(dV<+S;U;AER%{s=;5J6Pf)B<vv&UXEJuk*!RL{Z
z2#eyK;71KTgpK@ep=;$?bzrgLqPFlfT`!H=tLgU;76Gx~-N7m!`iY=#rg&>~Yl3Yj
z8ry4W1-Cv0iFK)g0B059k6?%K(}zHFXc+e|s%Cr6o!T+X4}yaqaSn8-fB&g9|5Ag%
zbqG(c5O!a>-4XDw%H5~?x_Ie*R^4oR*NWt<s4wT5;dTSD$0OMHT7kmE^Yd<@8YK!H
zW8B{K%;(d8bHpFrN_F%1<3AG*05|ox><1|S-vOYhvn$^o0JP5j@HGu8>&F7$iL~ih
zm5dpYIH{I>CiqdIH|tfZV<`z&c3|z|boD8>bw&ZTPGyMY^AP&4Uj1L9+JE9752}f@
zu+qbHzP;qOTq{X!Qkf28+f6h|;5Q33zQ_d&Y>9E-iO9}0Y>YopP@d)ukDSBZ5fKtf
z7#SgiDE9Ek<w{-<nO$ec#MXei`eetg(o9gJJbC)mK^UK_q~v}7p7PsibycVicnf!R
zE@;Ak33`*>V+y~9!E)utv%4Ke)AanOArCT{Kb{bIesLc0t%p2}&xPHpCy!sXZ6c>;
z9e~vEZhewMphIhUE`b#jc~FOPl>dZ^L(e`sD=(k?>XnfGseuhS)h3llPiIBcCDe_*
zH(}<d#$>R0pN_Eh4~jQ=O{UsW+9R+3mQGz6Fm=J<eB<Xoi0=j@j;@)O?tQ&CckkUp
zHFyN{5EQKTQ9F9hYO&iR1YPxlH(hMU5Hc$a!hw$ycPN)87&||^Qd;@=Aly+2e5!JB
z_yA=+4YG4t<iRlo$Jc-V>GyY{q?^}=I4X%c%2ocoS>D+jq*#<Hie;MJFpp7EON*@S
z?(oQ45V+t)gvdf8yGFq>!*2LT1ULlwS!dY2^h9qh?!@HFB*Vs{CflRERi!BrK5~nW
zw}DHQ-YZO_pHp?Zb3{Ys-^u)DdGu#H|Hw=yfzsv2%(q-wasM~7US(C)l24nOil(OA
zm6WZ))G#kjtM1m+{(v-UsS@dm!`3{f-?gM?jN6*Aj*gA5(><1Uc){P#<J6D&Ok@?A
z)La38Lq{n`|J%C<WBHe1|HF~_Y3Tp|CLUQ1rkgPj0pa%pnaS3Z{(k6=+?ekfOXZ&w
zt)4B1EC>C#_9`P|lYLd9jC$N@A0?E=P*LAdNqE{X-7p)cF%CLPW$1yCOur_!JksuV
z@2M8h5#WFpQ^X8J<tn?pB+6#T+5m3o5j`^^9e)0IRz|SBJr^&-{%2<SpE3A<kyCPI
Zdsp&`ZGl;*-z)(B^mUA{;xF4j{4XQScW(dy

diff --git a/web/images/vesta_logo.png b/web/images/vesta_logo.png
index f7c03aabe313114e4a6e9e83778dc3cea7f4a0d7..7a2bd53aecb9f9cf19835100b4bf1a3fcf0f8209 100644
GIT binary patch
delta 5414
zcmV+>71`>JF1{*|Nq@os01m<d6(~x8000!zNkl<ZcwX&WcYIV;+CFDmCXJ9n0wnZ=
zVuT>YfChAzU8D#BM1gN{#YL(GalsV?KIux?^=HIIQShUQ0+AMBkzffz=qN}DV1Ph?
z5YpSUd%x#B_hy((W+qHP-9Pf=cjmmO%)NK+d)|6ZIJ?h~(|@N0qk0mhm~l-CkDqUm
z55B2ovJ`{%b+ik`#5(+{(5Ur&0hrnVpT|*FqkIWw?m}O4Cfj~Q`wZ%A`QWs{>U1U_
zTX<jZUxz!mCyAAh%+)h%*$hy`tY2`si=baqMk~QDpf6f&5N@GwEc%i_L%Mk~)9A+X
zhv!x(!*#eHxPLdsrcZknpZ`*u?of;psE~FL6O9T<;FEZ_h3~12I@||%%~<)+EDe(^
zF(3=jT8#QxF>nXhQ5q>E-;R$Bn72-83qVz~hZNEdNH5Km$qs+V;}`s__Sd17@QShW
zp&9j<WZMI(E1Fgml16ftDsh2vT^HEWM?jaOq(KsG@_)hUiA<Ig@x5bAYgo%{=5&m;
zp)UY39wQ4?Q?+eDyFb47wc4&jE#RH=BH73`5>p8}6ta<Dp)Nv6XIwjs$ImMSbC017
zTPv5!>2IWhKEX8l@r;9kHVc@}`=fk{{@tkmhI#ctS3-~ScZIA&ZQ-p~8m88cm;#29
zw80Cu4S#{%eUQnPMPSwd^!cFt5#I4SCYkp`YPX<21?6L=F^uEg-hKj((;CcylvY8V
zBXy6sD^-jT<#{j#juMMP2@#zF{16zEz$7bFtK3QLG@+21_7^R8;F_Ue_<umr;u?wa
zKJ}tdbpqD|bNL?3n~T`jtn^n!-@bk69zvx@M}J3WBqb%45bX(l`t*5#b8ZCk^?H4n
zMx(K*LvB&8UcHKsKKkgi+GI0l&h$Nh{`|m-ii*cdOG_jC{QQ{JYCYMwapN5;R;)Ne
zbMS2SP&q~ecLkkJSFwHjc5$yMQ>OUgJ|is_OK;qxIqr4EU@+`%(W1rbci(-tOnku&
zYJX%b>|<9j;2=oHxrkHw8A$3fNNEeqLY(Rmc_<DGg1~>m_u7I0WBD?u=}$n%;$Blw
zccvK%_(Is*>1v}2UU}t}rpJ#T&y;0Z6BHCQCM6~1V|B<SX3Uroo|cw&&1SRde0_Z<
zmzS5<<k1U+hK8Qnx^-)NqK6J0nov|!w12LwtgO-}aD)^V7M2_r7dJXJHMKk1yOeIP
zaBAPaeeK7L8548)^5qoVhaA-^0F!_2(xuD51q&7+#B`0CRk1A54{}}rTfm5wVCq1O
zRN7nz@M-v1f^ru0Cy=^W)EQz(0alyb0kr`IwpyNqx(U<yZN|Jfns5hlZ<VNq_kZ4d
z?~0F)&tam$+##aV1CAa&`Uhev(G43m^x8Q~OiX;}=FOWsE162t6&M(J9*g9*n1J`0
zo0~iI@ZrNN)po5ge*Ac!YuB!AbH!8w`eTnAIr7CDZ@fY8&n0SREZ2ZJOi~&GR`ivD
z;Rs3OwRoeIQbOt%;D^EVWw4)9QGeP&+Fn5TasvyXBgRIfz**wYD{~zn%T0La8L+jK
zxpD-rDfEHOW(;bo$LP_c14NG-KwZLVgW>n_IhmD}bzXD=V9Z(cz3;9-Wv{1sCX;Cy
z7Ld3H)bkhZ+qZADbLY<10|pETkBEr)n^vn8?+Ft9R7gljL#X+w&IKkQmw)CEaE;9_
z<}A(0$$1{vAZ^BQ&0;K`#ckWRof;e*{3*<c@JGPh&KVgQ&Y`9q9#ye?@Xbz;%KrgL
z(h!Q0jjz0kk#3-;qTB)3bO3WKOy_%^cbVnUZb7|=V_}>G8LspYIAx-CU^Ejo;$Dte
zSB7-)f8i-t@c4yi#55<29e+Ev^Xb#4g<Xq^ib~wDVZ$~t;Dp7C7yCd}XM?#R0RaI^
zOG-*ey^}w{!o$N?CnqOAN3=V<{PN2kPMkRLBN)qI=dSnY(Ia~H?AcZ9T)%$(J_JJ$
zIS6(6@$TKb$A|$3V9q(rX-#y?mMzDvUcLGwG2j5$=d|MD;sh{RZhzIPRqs`+Rw2Yx
z@XRyMjLXi>UQRU3&jI`<3N5R_t;FKx!@ITp0Fpuv*ilX|JQfm|jM{lYfRS=G#?IEn
zR01S82Mgg3pjMy>TT75%Mu9WMCqU94Mu*BEc`_Ev2|N$=RRfrM6fgP;(U4lV>Uhtd
zJ)MZDM8jt86rElGs(-OHF_i!bN_S=|0gPCslB5-A@z)A47cgDoJ_j9{O6c0P>nD{`
zPg48ptFKbzQ4Q`@u`E4<PlvRh90zBqi+t!!#F_k(+F6O^kf=&Kb5{U!Ph%m_>b9#y
z1@bG<6fIHPHwyp*m<u&t9dI=01&AMCP*CtVB-7<@f(jc%HGkA@KBVb8(dh-C9#sl2
z#pv)_9MH38&tGsKlBVVP`T3iaUhe^hiMp_`P+jzQFm>uwE1q9G3>K>4+_`fuf3F7{
z%k8#61?-1xVv-FWvP_`~z^_8`dNZzvwAC8Up$xStYo*$3JKV;$kd!Z|hD0^Hc=2Mq
z=yU=?6JcL5=YMO2B+l2a5s{IRD#aL>)?(A9P1VfU>#x6_1Fw4m78{k>YPVOwHH@&U
zernSt^78U1ZR-)97>n?O?^7FKDxZzF0`=*b=anNN*%x{ITt!FK3VZ=RDy5y$i}Mh-
z;=%b`wU3Ymkz1<L)c~g=4IV0`H`#>?7oHHE4j49USbuX#l7xCgI6|2+uYr4z6DNKr
z!laI{pMN3xe#2}w8?aDas#kB|fw2^0R;K#+9;VSQM%!0u+d-?=b0VS!Kpme#^&lux
z$&e&DT26l>jA?zqSiVq964ENet9Ff*D_54m&h8}|t36S4Ishs<5salVD<rp8j9tEb
z`5CBu@_#u<>KQb{szHMWjhj1nu7`K{`@!Wy$?4Oy_(V)eFI@EWh6<hx8@myWe5Frd
zKhx;%$4<;d+=F5^$`d0L;-4|eL|*ahVwABMyv<GW!D+C)u7Qx`OR8a?;wDX+)Le9`
zfHTsUYDnG5EnBwS5}gi!v<J_dH?O0+GJpPjk$*vgv`>T$6~7;$j}9^Ga;V;Pc&bmr
z$@#Bhu<M86oVMMXDUC{y#7Gw~C}KLG6pS9nAD-(N<JK19#ovM43repa2rMu=^k8mf
z+Ois&H*cN_6=s7paj0Ya^(IfATpx`6BheTa%y$ODhXK2G?K<wR96EGJd~eN~H7Bt+
zdVj;?y(+#4U?FwI_qVTGw=Qk?@Zl~)4{v}_h>>>j1U!R7nCKd=87oWI@adE$<lp0E
z(@xBb)Vflh@1I_fx$fV4hl@<ky@4N9iAo&6;-Xz4N84?Nqeg05VDgT~gI`PebHc1W
ziQ+dbTej>fyhU*xFqbwU1Tr%-ds{3P(tiXbxm!i2mw=S26k@P#+m1A7&>#*m<O*mB
z`}0A?KZ1}bt$+Xi3#Lq&QfukW$jG4QR9mir1?p@PtHI?1AdaL5#>){~a@3QA*YyF4
zeMKhS_>RrGvA)B;+%r`I`w3eULWgaLed*baot}IzeS*sb$gs~_bsWAS_N^C^yMI3*
zI=E&YK2;Sja?s-t4yA)8$BJ+ZbDl>ZWx?3u?_bbeE;{@3xx77TmkTaYSSA4XpUelT
z$v@4RGbe~>#J0kjs$ai;&epA4tA!5)iff~yq8@QqA|fJalfsS-8#d&nq@;{()22-a
zsOL?U87C|#4MLP@u)k}u&}z-xN`F8zG=Lp{(7E9ExlJWj!h^JNa%5C>ERV&q{R#5(
z3uw`kV^a<rnrx-^eCF`aTPIvDI`xG`Du62I?7(Hy9CZJ$GOA$cXEEaoP1llaa+$8k
z67<TZZ^lGJLu|p2x?wK|qn#rkoIa$&W}348<}sFS%@2GwyqoZP2@U)kHGeSMa>OZ(
zLenMT?GnPn!@s_A<;pww;rjji_xFV4q#QeTOh_-JfD$V%0mj?{vks`uy9OL8(jZTd
z967S<jT<*sL2AXb+`4sZL~3d(IddL2C29hG$6zXI(<^vbRWhaADqorpmLr856u+)A
zNmg5~q=dPl8eiC5#{RmoQ-Avc)77sOrV?aUY`OK~%45^*c5=k$?FJW_FD@gdQrjXG
z2K$%i!~2yTc5_%mlxM-*>AUkXe3DDPW$6_^8vQkTS|kETu5ZuPs@lj=O|D<R{<zU-
z6v-2K$wRWTvbrODXrQ)5PWjis+O=yBw`<q#QQVsj7zn^tP8&UXw14YN#%};m>cV+b
zJrL^9A8K-Zk=1nCA}f32Gb0ja{<L>=%REz7G8h)9*VNDV)ix5_Nmi*abpMs@;>V5O
z`e;Cr`PK(AlQafR$PEqm5ebK@=HebyJE0tUL7!TpINT2zVp*8p->zLWTnl}mJi4#8
zag{_0)G<jvso;JkC4VJ!zM1m2=9rim5f1%YNJ>g7Y}~l<DA+%t(jdJp!D!mLt2JQ5
za~m~k^dIK}6<uSN&jVw{{-~oBPZo&-S?XbytYUAH<Ihj4Z@RxA^N`7QD_YBqmQZ7}
z{;h)Bi&)Yoo7mMNC3l}+p8pTCl-tl>*YtQ&v*De_1^2#5{ePD#t}Axd4t^41c;JSq
zDC44q($kD31Vl?%RQ6Mh&4W5Ov`D3bmROlWsK5^=r;F5BIHdI@qM>S2mn>Q0abx;^
zVD;+NC!s-vA3(^<%X8X;_6~6Rj%?hxv5#}XJx-`o+`=tmdAEgo@JX4bWol0x;#+c}
zq%xZ#tup>5UVmE0HW%-uogemMNT1WIn+>?xBq;if4yuwEuhSaXOWS(2D7M^~qTzaT
zpdsk5Eet^~wloF{`~8zSLt7zPDaA)23WX&f;ueSUEM-G!oR&`^XHUU#q74Iq16e7p
z=<bBZez8?t$ef&<T~NDp28%L8m0N7Psje*$#sv20(SPHsgoFet6wA8>Z238rtYRj9
zYj{${#N0G|s&;}7eanylKI)RGz<x5|wxno<e*WEAzpyrOOtOAINf+d&VF9;^@vVdY
z9GqQp@m-6QXM8E-$-LD~`j5hOdIV^dtXYLz!E#I`v^{s8X${|Fj67uBsWK%UT2C96
zdD2i;C4WrOabNp}K!N#^J*FhUX|cjPr6V^2P>onNR*%f636T5>FsUcVzPR2{=LCo&
zbUK~ggu!EW&bR+&@W@yNB0uZ^xl2;s-YOChu8ClyA|A%Y#0rhXMMp;Kf<^3jvGB;L
zV#}q0j~Y9&KA|z>7|}LhPd`X<B~FxH|AA@rzkgsI-~!4*`k_?W^y%r_?)<zz?N-DS
znDFJ}gNiMg!__8}WZeywv;#4wJ#7ekbawOR%@mi{8p+AY7Jq+#q5dd&fLPNWVmV^^
z^y#5k0AhO)wHeY&$83KW+y!G{^Qt27g`k9|Ra)Th5xrS`y<^NQzu(r-kPdUPGV8S<
zUw`h$#x{Hel6L2IJ~~6PMpXu>B^Ps;Wch?i=A-y7E3uhard8P)JZ8Qw_F5-y?H>O0
zXN~`Pwe-M7IAFq&A_pomuw@mAB?JZr?to+odjZGE<;J_W!1X>;Ny;|Om^g9bqiR!N
z>C&az<HwILgk2OXHXtD22gI^sBi|dq$$ulCKyB3?cf(k6KuGnHlR~j%lW={2-P;S$
zHQw5>UgTPkBvrHvL^O{viYP;1d`RztMm~bic7*7B*BUfILfU*~d9cJJIxa)!pp4~`
z4Hr{{^tvT;^wXa;J%6?Mrz>UF>ystfZ1;{0+OXTrLt7Q7O*_`CS(6KuNC)ujUVpMD
z6ciM6hwc2>L-|W=Z0x6yTH(z>5(CeiIkUH4zkX{54jedh(4awY@7%fbaB*?5I59z+
z4WXf-bneS*K-<tFQd_l0jaT5^7F^}s-tLP+j)+jfMvbzf!nF}>VExWhxkf)0Gou*S
zHHKZLb2z6T3u(z-4IRW@3K_t9g@4BU6XPGCpE5MWd|Lfy6a62|LJg_>nQgv#Cn@Bo
z(ODslg0r%0<z?2aXoONeMs1@DQ33Hi;aQ7KY=fp=)|f6!>}uK(kklQ%zP<&BC7sSt
zRR?S+C0WRByDN_@TC}JXPS_Jr?Lw81WFl4_3D0*<Zf@>B5Z;LGOfa<+8h>L1Vq3AW
zelK{rG`LWU4+J!1vm-{Z`H_R<QK1iRfEtA)%dl&bBBoq3RL8a7_6uv9J+MJ+l7Z_M
zq3?AJ#G$5hz@NhNJuxCYu4^lu;)k3pzh;+Gf3459Kz&QQ9p_wUsb^^QeoS!ZP9F|V
zPt$39M4W7viVukiE&#`62Y;mY-$RBBad{>gphZU6sJkh`z9Q5(9~~VXhilIQ^G<@v
zWptVXUbqR1=py=(pn@ORv15nZ(-R>fAv+Q8CR4%U6UiMXSRx}M4>xPp>?n$>aXMjn
zhQ^yTX+po>Wn$SYe_TE^BNAROIVPksDWo7yh@7kn%I^+C_gkQ2L4U7dI^!~Ct)K&N
zv(QJ*(f^?abL9m3!fi_#yIh`E8spbsSD?-Zjt4)5vFFBSrxu%SrWeX>d7**&u;fpk
zI$^i<L)S-bF1KA95@L)Uv*zhj_msA~7rgV%J9^k#vZ>bDvuAs4Pk&8#9cW1hr)jt>
z{(*|(9Qtp%$EaTgWq*^%4z&|40lox`B2U=Uy{<vk(|;M%i22`+@Hu#O+fCTopr(QG
zZ9f>a&mK3{;SRjE(wg{%5}0ra1?rb0&UFNx?ssG=LHr}M6H_@IK2x$Bn1FWWNeO{*
zTROFy|IM>5PiCCUIh6=|8)Vcqyi~_j_qa#*i&QS3sWR#v)PJ-^mMw<t;PgMVcaHce
z-t`2=wX^`9gUx*i4wstUVr<6l#5PxpPyBrBdg|Fxn>tWZz>bj{o7OM3T%S)gR*Kl7
ztAlHJt%_@coIVZAkSWhhDMNU_d>p)=D7d$i(XR!)ipMW>>oLy!I#Hi-`(#>)B{N>j
z>)CvD!7D?JO@H_2o3g`9wvv}kwwp~g+*fKA82|A5iQhPH(APo5eP`_bz>M94L(knl
zwyn&1#l=w*4GZyUGjq)|rz!PV2RFF)NcdO4yxw2lZW9{UtG=PlB7-K>{;!dGO>lXz
zPwUs(g+EZo)Ee+#DY1^2vv;^LtMFX&5JQU~Un4*FRv)j;)iO<Wa0X-l4_P-bI|bbR
QS^xk507*qoM6N<$f?-2&0RR91

delta 5881
zcmV<V76$3QDvmCYNq@rt01m?e$8V@)000)FNkl<ZcwX&X33wIN+5TqcZb?8$SQIS;
zPy|tMWw8ios}xAI%A?@_7uQm&pi;H24=(*(ssf^D6pC83f)!D!VyqMq4Jx3bBB;ok
z2(pue?DyW8^S|$zJ2y8sHzX`BPoKO#FL&n5neBY%ThBzJcYp8Ra<KT~iJ@&p>@+dV
zGVGQ}@z;iA_RJFH1SP7<(Y9B2JXow;8QW+^V=&aBn_`>$fmUfg{2SHV<u#{?Y49S4
zi&CG7;Y=6XXfLLDrHDeCtdW}VBRIZU_df{O&4O(*47Ff<Y_kan`ZC2ZhCnlWL4aFv
z`Vw*E9tiP#eScgj8+;D!$DrRJ-9{*9irCR-#I(*tyC3I%fVR(Y#GM>XL{+n3n+!v}
ze?x4uDezqd!Q2jZg0#vZ)FlwoDPsDLfI!iNF3Q;e4L$;wPIu1%9JLYut`S29;am%S
zK9Gp>C$xR3k2e*~f^9MyH^sh^kVMm4i)ly2$aq{V^MB&l5kQqfxa-7Jr;3;qY?UZ`
zIu4uw?L6D<LV>F<q2=AsC8XONv^mabsoC|41R-uHqi$~u&4O(*4E5gSvCSk58f(b=
zFZaW+--f+j5ZYJRhJelf*r$)BfYyi|xl(-ANbGe*pC#f`PfLx_RV?Fbw813H2MC~6
zO2Bwllz*A7#ptLCXzg4GJX0)Rme}ew*;Dicj#PsUqgk*`hN0#qC}1K?CnTBKGa<-P
zdSCHB=PR7zV6Phlv<-b8!1fF=?86|m-{RP*VoQ;PWu~lOP%0hzW=b#^gpif^Lw7=J
ze~<nS?)t4LqYX^<;n+7J=rFELXHRW!7(X+?4u5>9lGBt{2<A#^!2OCD4iFX?bT_pk
zP#*PQj2$~RwpokZwwsJ$gL<@=ptT6X=oxDU)I71Azeog{W}2-b(ADBA-y-2w=R;7B
zK~QZWewx`QBnpl6S=V9$^aodoiaaICSB!bVK{yJ}_YnI3LSL2-=h!deceK0P03g_b
z|9`AJ4O?fq4YC{LdHXWuhk=~Et@NJ2g3wje?l*?7!F(`r00SVO;Y{#&Fbza7DW8Jx
zfU7{FGdKdIFb)Lof}gmX!kA?^$a@|Ga-`RQi@~=*POLcU2{vy;u!W=<$4NvWJZn4z
z$cynZ4z%hasjhrd($a2(hK`1BW&3LoYJV#PMHgu^OWIB$4r~+4>Zfl{81|bI4gU^X
zrDCR?0yF$91bd=;5HrtFPr+p8NysXfZIu*Qz1hDJg1vNM^g?VR^46NN13VY>UOp9m
z1<nO2NaooLDsBe5fla|I5UE@Ic{r%ogM63PAm7*ng%7KyEzgtS5bza{g5O{8T7P`b
zN5QV(tsw7N8<e_WonR*TAox8S2x?CpdA*AL67b!L3HAnj-#j#(03m${4SYvbbdspb
zhb5HuYn(O?LTQKJb`a<o2$6o*eQ_;FBaAB_6BjC>3<OVs9Plc!ZTM_^HiY>;X2ECp
zT?zAiuK3J_@V9@HcA@^DB(n>DMSqwkZ2>u;ZNa|azR(Y(P}zS2$Vl9qf=#6dTA2R>
z$AOt3kMS)%ZRU8=8vGTc@RP5zza%I~3iS`MZG!joMz;mX=eY%>CDE|@^yw4Z6v-K!
zc?PufA(&qZ4Ed&!hSTRtwCY-z;7_F7v?X8-fff%$cQ=5d5S4lzeb-{AHGj4Xq1g}O
zyq!AVb#Df37not@z{Y4W2m9YcxOZbLUd8d>Alg0|uLAQf-63e6vINf#6YISLxP6=a
zeO0sqJDf-~fgH#^;2U5nUqek{TGd_ex&7V-F9F+tyzmzw&F!WJ_)(1POAWdP<e+nZ
z8Tb-NQw=L6Nb{s6$akie@qc`pVHRf+ugQrCcch=6*I5D5tS0s$X^MM*6F@&m(3QLZ
zehBhDybhm-{rE1FLtRsxH!A&X2zD;IdH%=7AU_Rd#DMrNg;v2|F`_j%s68M!>_Px4
zdaXECF|_ztoKlQqpGp}1GhkeXTd?m|nC&bvtlAJ<DF`HbmP8|)#D7X#jsUB>enrAj
zZ{d|;32IG?Ml5(5IJ=yI)?|<aL!k@<i@;>?W$Ayi!3g+AkUnrBNK;I|#QXdUYzTa+
zN|4uj4fIU-9Plq7?@v&G7l9K&4mQuDcJn#CH}imT($}H|V0^%d#tD}UPS(dkx&opA
z<V2;_B2EXVf=D+t9)APrYIGn|3t!c0w80rWZrY(>wiHqt@!bNUjfAER#aNz)BX2|7
z?m@saK}WM2*R7PoHAS-Vn}xD*?WZ8-<hPrpqHMB6?dx%kd&MzaKUiyIc8eJ;hw%5}
z_#65a`1(qfU;_OIztCtjq@t@S)KsDq*igay6tIK4DciwRzJHiPqZMd~JWenk-~=H`
z!RJ9wsDuqtd+Ag8kbFy;L$)VhlYTJ~$;Um?;?U|593ff;PpAYf$-hB8C;*=^gBx0~
zc~_JN@-EI8DR#y*4BRo$nC18#11ozKPFW3s#xAZU;>YnaM7NX04ug>u(y5CAF~ms>
z1*^q~?h+?l0)JEcHqLt;ti&Vk!u5BG9k@<x-__zoo<ndo7L(-fI97y7a60aLm6X+F
zfCzb9+A#t&Ti<X4px>b%O$OhMCfoBnRCiXu4iq%AG54b<6@#Q?aDZtlzXLgusKt7q
z4-h<;0U8ko`QFL+7W4wUEKmm`uEs{&oeGVd0G<a^e19B#=xGvhc1YOz7z4frLijp9
z2gRV@TP*`muaL6_RD%fo8|RGIH>}5v#z;6i7@9r}*Fi94jTO`XC<3*sF^MqSjh%R+
z-Z0A}aIdM79vCO>TLnQOtr&q4a4G0L6$MM*mI%J27g(_$XE(LrKtav(z<YIcH|v2W
zHV0(o?SDpa7kHrH#PCujYHX^sj%}XC#{0X1jTngJSpU^Pn~@Hm*h4B8SQz91&`$U-
zdmYk|r4Y*9lHq$zK3Sna7`LYJ4;OV+lIGtjhavYhjLw)ujA*G%NVd(9@X;rs9XYR_
zJr*Vx3mb!^rZ@wHH>_pB@0e$4!FrV{`thUP&3`zK13iDpG>82U1`K%UrwImL^rxxP
z7-|+=nr5P@{!!ryR+$?hbD9npN+De_w#s2cpTdA6k25bupK`R{gurQ{R5(>2=Kle3
z<8DUCoMqUFqe^UpeusfqEtF9zm7ypIPnSg3*U;n<?ZMjc-i4Ru5bHp%XmFsQDc2Dv
zz<=4tk|~3uhBWslg)7+f>QCX{UV#7G0&d3k1Pt_d(4NboHFyosG)@vr4U(*y00={O
zfb4;PqV_CIl8<rca_w`KJS!h8{aBpn^Vr9;sA}ZTD`6dGN$Wrb2v3tlSA$><G-!V4
zPd&3m$#dU*Kau6&PIt2o*q@q*+`U0^Nq>^pfh&>Opf@4uZ)s|u0$DWC5A}0_nKvSA
zN>zwv@OVU{Fm38{DGUDt!A=F{WtFzxoS(W@Y=*_(PJsxa4uVH!z6alZBO+_~aJ317
z6dBaFqnP%q2)3re^t;+<!mpKAnjoe?T^3vvpvj}(^ah%xMg}+pwdf>wQ=3nk;eSL6
z;eo<oE&QH+kR?HHf>4O8DtSJQBg4wv43KHZFTtM$ObN9{E~Re3Gmb)DdNi0TErU0S
zRlNop^W>|g%l77Mct|cTnp$<|_BoF1*c$=mpy^nBFqwMdemyaX?h)mG5EG{ta@~=5
ztp4z^2tcgAiRtSjZPE=8o-JL5XMZlbJtu3C8lJVNFwlDo^IVo6354Og>O-6iGM6M+
z!=-g-2oz3Z^uRQSxhua2Neskj@>v-|&abtY_357!&<O+KG=doq?rR(`cf1RqYQMX_
zW;>*S=)<W>Ur}8+O!!$-j5$RUuNz)8u@JusEEu+F;^4&N9?|EqoWhAE?0<*trzPaD
z43>+7T;0JB|1o|A!JadDNB-G48y_~V+58Njr4w90U&#m<AcB9;kpI=akx&Is+)Ur<
zr5#KSXny$yiD?e2F{}!u0yU3?`~U2NJU<bvPu~Gv2Nr;d+RGvaYql&>cscK(1Or^w
zsuSrgq|||lf#ZXIuFau_1Ao({mdKswbcFW&DZ>o8gAb$`u%jjdL2&q{X`G!?Il%5w
zIm0mJHt%>szd7i0JziS}GT8oo?l+UiV>lSlxHr}Rs=}GYOM;6kR_i6HqR1{;Shk9v
z+H94!K?Mql^F6H;Gd;rM0gDy90tc1>6U{Kw9PYE7W|;j_f##grM}I%s5V=mAydXjI
z&cZvZR$RJFoH#V^)LxbWSx-JxV7`7g$jVtF>(q!nnB!h7-v*QTAbj0q1TM=k6w@VC
zJVgTLDKL}6!pin)l+roSu2|ZK&7Ad9?x%oa&2gY@D2^jWbvb<fl-tq9;G_;5Q_c`0
zG6SZ50q(gI!dr~{Pk)+Qwk*Elk|qJ??3TwP$2AtpsyzxsT<aB^>VSUMOM58vp`ceA
zrs-@f&EdI>(i@_8?Nnftd>6>E_$TOT2XO^R!5>N-33B2l(u*tVzzqtj?L8P^1{a->
zVq7TIZEirQfxt=0mPqYjW|<jV&RzQCrH~*^QA!N^FmJGwrhiNB^1N;kDpw`y0ZHnK
zh@!5+?U8Fbn=l>|PaL;kF51tCb&=E3yKa)|$m3EO*$qPHVyp|giO)e#WB8Jnfu5$&
zDlnh?Awgj-0$IPF1bRUl#}@HI+}9rpFs5LNm&k2kJ-C7mnghkOE`eF@01e^b+$E;+
zL&(#2L^<hQ_<zK=7`BnYg9|045Z(y9S-b#mnbJA;%D2UFgp2H69=QbMGM0uTP6yoU
zGO&|a2%?m6`KSryeWPN>HTIIsfn6owyF$`^ArOYhC%H!~iXSKDmk;66B43t%lAsx6
zL7eZ!0cV<XFqNPE0n@4bK(4%apyi<7JrtljVcyJ&R(~QN2I*4jz!j`0_|upWI2?uq
zp{<DQ?5lU#2!MbieVJjOW&Ra{^n5BTxLh&6(=GGRR(ECP)|K51r8P$jA3~n+W~W=Y
zN)gA072mpk!8Km}_o!;lZjAvM-Q}o27G{ajU7{)g!prf?9BpQ6fwqECX;fpHW3S}r
z`5Ui2RezeZzhGd-6&8NdNpb-luU!uuEG`XtKAn}RL#eT}Of>(AO!>XGD_Er%`O$0<
ztPE{|y<8hl_W}6Yz&quu7=^k}^1%G;o9Dqd#u{posIAJ7=icgaGxFBD{VMEgFCekS
zbe4S=+2a+v<%A$yhr5!qR{RhUy*!8(_iGLhv43`e0aUVPdY`Hs3Q(}uf{b=a`cztn
zRG@jRaW^&MG0Kk#SFq9QrD8kxiLG9QRJd9I8vX9vI`>|E9N1;+tVg50)#}SPJKg%Q
z_=-bdtknhNaV(~?HoFi+QU1|m#xGdB*??*9mSwf@a!%P}BWQEfN4V!K%$lcthUG0!
zVShdu-{WLxxHA*St3U)|lOMx%6E$`T+cn)unY`M<A_o_%4+U86q{-)aku<N~a$qtT
z;CLUK(Q2fsc>Unef*tpYQ#tOXiaBCNX|GFRV+V+`9`BQO^#Aa9A`q>r+uG%>5zBr^
zqOB)LS&QQ^w6*JtiGh`pX*e!Jh6OFyfq&6Q_*$`eu2C4?Wg{vcE8(ge;cHJi+~3Np
z6iHEd*CMIedz(~OZpbZqq}%XKkG$ngmO7}0#RCg2aJ=YOOF8z-{e4BW`-8-^ir@!+
z^~MHZO2U;LnqY!~4bA0`4p(D67)EcTI43|j0eX-$D_Aed9@?_^#_pkCoQ-~eM1P)p
zn}q!L1`S_5%|P2H`JHYqlQjQ*Qq^WOZq+|z)}~wV-B}W;+=`9?G0kfb5ywqdsZ-T`
ze90@v4BtBKc4f=QaZQE4*1rHoc!jipVt91@sps38lI9S&wD3<+D5Qos03;TGUi3{T
z^=FW|Di`?~ckpY5`$2vs!s`-T1b_b-2sVm=F;s1v(kW0JJ~5Y#X*+l|9vl7>&u-Fc
z8iNL;9a|^zGnG+(eb&&O;xq4s&~8S={Qx4L&IrKbYnrQTHn$wJ<3&WU5Ui+hrmuEA
zx}fr#KI^J?eu3cZ0ry^7kW=Zebq4@0yBzKVrZ~pB6(%l7r&<V424@<-4S!;>p&>FC
zr9Y*{J_CAVLhHj?GQVnIp@5&)(5iTm30(mr<mBSUkAk{_EsZcwnSqhw5?ysbe6@}h
zXl157FUq73c1=>uF#Wk*PBtT1qOH|Z#<dx;=FAp7`$8xTh%k7@;n47%wsQEbQ5@w`
z^KyRKS1%&MvQG_lPX1g(1An(zg();5zspU`6Zx%>28531pj<raV2Pi;@Tr*Qq^xG7
zfER)_#Ka(pg??75JQL6Hqfg~pa66Ei%KLNGiKRt;aQ2g+j$p^V9W9eBYj2ULeU{kK
zQG;9bC_E*NwRMpbL)nq%JC22^b7qNQza+N38$OatY>#7<Ywl=&zJI*g<yLvF<5-$&
zR&3&e$Ll(Xe80Z7vfp`Vil;`bKku~5`XjCB@S7IB9_<zE_<|`W1*8RvK<tkE?D4(k
zXOEvJj-L3nAFrDjG`7W9aIv2qXpWh3>?_UTQ*i;@TMTcEiRD6Go936Fds0(bj^(>D
zkK{2<dVWvL2>NBPA%F1M67P{1MJIyKO3Smaesn+HaegkOM?K|V0uXr@_<Bn)^Z^FF
zh3=~9JR-hmp43>aF_%p#x4#ohl}pe+4H`LGPZR!Kj&0un^UE(J7#L+>e<cjmUE;4^
zaq0S*Ln@r`6V<T3)bh(R2gy<XtSI`hN=0o*iQJ+|7vK^2sedXTWmSI3ka!gBVc<)Z
zyeF$ytOV7uHc5!rzncI?wyCtAD>&3t7IdiD{9K1QB_~4SXEY5V@fjF7H#89&>qm<c
z4@v?3!9>G?9UVMEqSn74AooKt1pzAOa|o~vwmU#em%}yE$9#mg9-@5XFydSSd<VYu
zIhnJzLeB5n4}a&hgxi6?<@dzuLfmpY+IGgS>pqbCaU2Wh{K_vShHsk0bjM4hp2^=k
z<WSdP|EplA0tR;t!TGHgm?#Lq*$DgB3&Bv_&p{xwVYVkh8%M$Sa_OZ&+U<T_cC<Me
znwpFA0`S?3ab7kwe>xqb_CgK>>&RlX^~5h6q%%iK%70jA<*cuV+_LH27#-tW9Z1pV
z&M!Qj<-}$*07JdbZ>aZyOtY<22mRtV+ll3y0pZmCNrmGelsC%J#)WM_6{0QAT_l&m
zZWBzCa<-uDmvO-=XP4OFOEDRWW|u9^o>lzOY_xxAm~!R(><RVKgW((ROVrk){Ic_Y
zh_%lDDt{Pi31fjKAX1hg{=j_@&RC3Y0Fmr&nB*l8$a&CCgCh<&(Bf~f-x=-cx=qtw
z4s(sD(deQD>p1xcco=|e%KdIi+;^gHDN`D_>c#Ur-k>!yr)bLkI4558&;eD+ulctz
z&DaMFwRk`NR|Tdz3jXpU_{VIq)e4Aloml2S5PvkepMEN}8&Z1{9fx89xOHV+^L20&
z8_}JQe;HSd^WKnvpDBS3GKQ~zfQ#|<)@_r4E3L|}$gLMNHKRTZ^<jfctEo}4Hz4Wh
z0ohwsrN0*BA6Y5$DjY$S=pfjNJS|ROB!o><n*qW8TXt=~9mh+hZR?is*%YQ%A&MiX
zaB?!MHshe3?kZC<xJ1a+q>^)*eQOh7sP`KAe^4}rpdFAZCriwLUz|#&1r=h3g5tA|
zLZaY<X=d>}W$_^yxmzbONV*)tWtq=iba&130_8~FYsEv}({0UY1S0<ryj92?2)%|5
P00000NkvXXu0mjf`cpLh

diff --git a/web/inc/main.php b/web/inc/main.php
index f75f9530..880b962d 100644
--- a/web/inc/main.php
+++ b/web/inc/main.php
@@ -1,8 +1,5 @@
 <?php
 
-$vesta_version=file_get_contents('/usr/local/vesta/version.txt');
-$vesta_build_date=file_get_contents('/usr/local/vesta/build_date.txt');
-
 if (file_exists("/usr/local/vesta/web/inc/switch_to_vesta_port") && isset($_SERVER['HTTP_X_REAL_IP'])) {
     header("Location: https://".$_SERVER['HTTP_HOST'].":".$_SERVER['SERVER_PORT']);
     exit;
@@ -11,7 +8,7 @@ if (file_exists("/usr/local/vesta/web/inc/switch_to_vesta_port") && isset($_SERV
 session_start();
 
 define('VESTA_CMD', '/usr/bin/sudo /usr/local/vesta/bin/');
-define('JS_LATEST_UPDATE', '1491697868');
+define('JS_LATEST_UPDATE', '1491697869');
 
 $i = 0;
 
diff --git a/web/js/fix.js b/web/js/fix.js
new file mode 100644
index 00000000..24842fed
--- /dev/null
+++ b/web/js/fix.js
@@ -0,0 +1,157 @@
+function setCookie(cname, cvalue, exdays) {
+    var d = new Date();
+    d.setTime(d.getTime() + (exdays * 24 * 60 * 60 * 1000));
+    var expires = "expires="+d.toUTCString();
+    document.cookie = cname + "=" + cvalue + ";" + expires + ";path=/";
+}
+
+function getCookie(cname) {
+    var name = cname + "=";
+    var ca = document.cookie.split(';');
+    for(var i = 0; i < ca.length; i++) {
+        var c = ca[i];
+        while (c.charAt(0) === ' ') {
+            c = c.substring(1);
+        }
+        if (c.indexOf(name) === 0) {
+            return c.substring(name.length, c.length);
+        }
+    }
+    return "";
+}
+
+function showIoLog(animate) {
+    //console.log('animate='+animate);
+    if (animate==0) {
+        $(".l-content .l-center").css("margin-right", 240);
+        $(".to-top").css("right", 285);
+        $(".to-shortcuts").css("right", 330);
+        $(".io-log").css("right", 0);
+        $(".io-log2").css("right", 0);
+        //$("#myvesta_float").css("margin-right", 280);
+    } else {
+        $(".l-content .l-center").animate({"margin-right": 240});
+        $(".to-top").animate({"right": 285});
+        $(".to-shortcuts").animate({"right": 330});
+        $(".io-log").animate({"right": 0});
+        $(".io-log2").animate({"right": 0});
+        //$("#myvesta_float").animate({"margin-right": 280});
+    }
+
+    /*
+    $.ajax({url: "/list/log/", success: function(result){
+            $( ".io-log div" ).remove();
+            $($(result).find('.l-center.units')).insertAfter(".io-log h2");
+            $( ".io-log div" ).removeClass();
+    }});
+    */
+}
+
+function hideIoLog(animate){
+    //console.log('animate='+animate);
+    if (animate==0) {
+        $(".l-content .l-center").css("margin-right", 40);
+        $(".to-top").css("right", 85);
+        $(".to-shortcuts").css("right", 130);
+        $(".io-log").css("right", -200);
+        $(".io-log2").css("right", -200);
+        $("#myvesta_float").css("margin-right", 100);
+    } else {
+        $(".l-content .l-center").animate({"margin-right": 40});
+        $(".to-top").animate({"right": 85});
+        $(".to-shortcuts").animate({"right": 130});
+        $(".io-log").animate({"right": -200});
+        $(".io-log2").animate({"right": -200});
+        $("#myvesta_float").animate({"margin-right": 100});
+    }
+}
+
+function checkCookie() {
+    iolog = getCookie("iolog");
+    //console.log('cookie: "'+iolog+'"');
+    if (iolog === '1') {
+        return 1;
+    }
+    if (iolog === '0') {
+        return 0;
+    }
+    if (iolog == '') {
+        //console.log('cookie is empty');
+        return '';
+    }
+}
+
+// function getRandomInt(max) {
+//   return Math.floor(Math.random() * max);
+// }
+// var randomnumber=getRandomInt(100000000);
+var iohtml = '<div class="io-box clearfix">\n' +
+    '        <div class="io-box-left clearfix">\n' +
+    '          <div class="io-box-left-items io-1-homepage-block">\n' +
+    '            <a href="https://www.myvestacp.com/" target="_blank">myVesta</a>\n' +
+    '            <span class="io-description">website</span>\n' +
+    '          </div>\n' +
+    '          <div class="io-box-left-items io-2-homepage-block">\n' +
+    '            <a href="https://forum.myvestacp.com/" target="_blank">Forum</a>\n' +
+    '            <span class="io-description">Ask the questions on our forum</span>\n' +
+    '          </div>\n' +
+    '          <div class="io-box-left-items io-3-homepage-block">\n' +
+    '            <a href="https://github.com/myvesta/vesta" target="_blank">Git</a>\n' +
+    '            <span class="io-description">Become our code contributor</span>\n' +
+    '          </div>\n' +
+    '          <div class="io-box-left-items io-4-homepage-block">\n' +
+    '            <a href="https://forum.myvestacp.com/viewtopic.php?t=814" target="_self">Donate</a>\n' +
+    '            <span class="io-description">Buy us a coffe</span>\n' +
+    '          </div>\n' +
+    '          <div class="io-box-left-items io-5-homepage-block">\n' +
+    '            <a href="https://wiki.myvestacp.com/" target="_self">Wiki</a>\n' +
+    '            <span class="io-description">Find solution in our documentation</span>\n' +
+    '          </div>\n' +
+    '        </div>\n' +
+    '        <div class="io-box-right io-banner clearfix">\n' +
+    '          <a href="/list/rrd/"><img src="/list/rrd/image.php?/rrd/la/daily-la.png" alt="SysLoad"></a>\n' +
+    '        </div>\n' +
+    '      </div>';
+
+$(document).ready(function(){
+    var sys_height=$(".io-log").height();
+    $(".io-log2").css("top", sys_height+50);
+    setTimeout(function() {
+        iolog = getCookie("iolog");
+        //console.log('cookie: "'+iolog+'"');
+        if (iolog === '1') {
+            showIoLog(0);
+            return 1;
+        }
+        if (iolog === '0') {
+            //setCookie("iolog", 0, 365);
+            hideIoLog(0);
+            return 0;
+        }
+        if (iolog == '') {
+            //console.log('cookie is empty');
+            //setCookie("iolog", 1, 365);
+            showIoLog(0);
+            return '';
+        }
+    }, 1);
+
+    if (GLOBAL.CURRENT_USER_FINAL == 'admin') $(".body-user .l-content > .l-center.units").first().prepend( iohtml );
+
+    $(".io-log").on("click", function() {
+        var showlog=checkCookie();
+        //console.log('cookie = "'+iolog+'"');
+        if (showlog===1 || showlog=='') {
+            //console.log('cookie is active or empty, calling hidelog()');
+            setCookie("iolog", 0, 365);
+            hideIoLog(1);
+        }
+        if (showlog===0) {
+            //console.log('cookie is inactive, calling showlog()');
+            setCookie("iolog", 1, 365);
+            showIoLog(1);
+        }
+
+    });
+});
+
diff --git a/web/js/init.js b/web/js/init.js
index 6c60ff85..4da9422f 100644
--- a/web/js/init.js
+++ b/web/js/init.js
@@ -32,15 +32,17 @@ $(document).ready(function(){
 
 
             // CREATE BUTTON
-              
-            $('.l-sort__create-btn').hover(function(){
-              $(".l-sort__create-btn").append("<div id='add-icon'></div>");
-              $(".l-sort__create-btn").append("<div id='tooltip'>"+$('.l-sort__create-btn').attr('title').replace(' ','&nbsp;')+"</div>");
-            }, function(){
-              $("#add-icon").remove();
-              $("#tooltip").remove();
-            });
-            
+            if ($(".l-sort__create-btn").length>0) {
+                $(".l-sort__create-btn").append("<div id='add-icon'></div>");
+                $(".l-sort__create-btn").append("<div id='tooltip'>"+$('.l-sort__create-btn').attr('title').replace(' ','&nbsp;')+"</div>");
+                $('.l-sort__create-btn').hover(function(){
+                    $("#tooltip").css('background-color', '#1ca2cc');
+                }, function() {
+                    $("#tooltip").css('background-color', '#34b5dd');
+                      //$("#add-icon").remove();
+                      //$("#tooltip").remove();
+                });
+            }
               
             // SEARCH BOX
                 
diff --git a/web/templates/admin/list_dns_rec.html b/web/templates/admin/list_dns_rec.html
index 24f28103..f84b504f 100644
--- a/web/templates/admin/list_dns_rec.html
+++ b/web/templates/admin/list_dns_rec.html
@@ -105,7 +105,7 @@ v_unit_id="<?=$key?>" v_section="dns_rec">
             <div class="clearfix l-unit__stat-col--left small"><b><? echo substr($data[$key]['RECORD'], 0, 12); if(strlen($data[$key]['RECORD']) > 12 ) echo '...'; ?></b></div>
             <div class="clearfix l-unit__stat-col--left compact"><b><?=$data[$key]['TYPE']?></b></div>
             <div class="clearfix l-unit__stat-col--left compact"><?=$data[$key]['PRIORITY']?>&nbsp;</div>
-            <div class="clearfix l-unit__stat-col--left wide-4"><b><?=htmlspecialchars($data[$key]['VALUE'], ENT_QUOTES, 'UTF-8')?></b></div>
+            <div class="clearfix l-unit__stat-col--left wide-4" style="overflow: hidden; margin-bottom: 20px;"><b><?=htmlspecialchars($data[$key]['VALUE'], ENT_QUOTES, 'UTF-8')?></b></div>
           </div>
           <!-- /.l-unit__stats -->
         </div>
diff --git a/web/templates/admin/list_server_info.html b/web/templates/admin/list_server_info.html
index 7a131572..7ff5feec 100644
--- a/web/templates/admin/list_server_info.html
+++ b/web/templates/admin/list_server_info.html
@@ -5,6 +5,10 @@
   <link rel="icon" href="/images/favicon.ico" type="image/x-icon">
   <title>Vesta - <?=__($TAB)?></title>
   <link rel="stylesheet" href="/css/styles.min.css">
+  <link href="https://fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap" rel="stylesheet">
+  <link href="https://fonts.googleapis.com/css2?family=Lobster&display=swap" rel="stylesheet">
+  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css">
+  <link rel="stylesheet" href="/css/styles.fix.css">
 
   <link type="text/css" href="/css/jquery-custom-dialogs.css" rel="stylesheet" />
   <script type="text/javascript" src="/js/jquery-1.7.2.min.js"></script>
@@ -12,7 +16,7 @@
   <script type="text/javascript" src="/js/jquery-ui-1.8.20.custom.min.js"></script>
   <script type="text/javascript" src="/js/events.js"></script>
 </head>
-<body>
+<body class="body-web-log">
   <a href="#" class="to-top">
     <i class="l-icon-to-top"></i>
   </a>
diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index 4ad3daec..1e5a67cc 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -1,9 +1,9 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
         <?php
-          if ($user == 'admin') {
-            echo '<a class="l-sort__create-btn" href="/add/user/" title="'.__('Add User').'"></a>';
-          } else {
+          if ($user != 'admin') {
+            //echo '<a class="l-sort__create-btn" href="/add/user/" title="'.__('Add User').'"></a>';
+          //} else {
             echo '<a class="l-sort__create-btn" href="/add/web/" title="'.__('Add Web Domain').'"></a>';
           }
         ?>
@@ -61,12 +61,15 @@
     <div class="l-separator"></div>
     <!-- /.l-separator -->
 
-
     <div class="l-center units">
       <?php
-        if (isset($changelog))
-          echo "<br /><br /><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br /><pre  style=\"padding: 16px; overflow: auto; font-size: 85%; line-height: 1.45; background-color: #f6f8fa; border-radius: 3px; font-weight: bold;\">".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")." ".__("If you missed an update, see our previous")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\">".__("change logs")."</a>.<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, forum and knowledge base")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" />";
-        
+        if ($user == 'admin') {
+            echo '<a class="l-sort__create-btn" style="position: relative; bottom: 0; margin-bottom: 15px; left: 20px;" href="/add/user/" title="'.__('Add User').'"></a>';
+        }
+        if (isset($changelog)) {
+          echo "<br /><br /><div style='margin: -20px 20px 20px 20px; padding: 10px; background: #fff;'><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br /><pre  style=\"padding: 16px; overflow: auto; font-size: 85%; line-height: 1.45; background-color: #f6f8fa; border-radius: 3px; font-weight: bold;\">".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")." ".__("If you missed an update, see our previous")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\">".__("change logs")."</a>.<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, forum and knowledge base")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" /></div>";
+        }
+
         foreach ($data as $key => $value) {
           ++$i;
           if ($data[$key]['SUSPENDED'] == 'yes') {
@@ -176,7 +179,7 @@ sort-bandwidth="<?=$data[$key]['U_BANDWIDTH']?>" sort-disk="<?=$data[$key]['U_DI
                 </td>
                 <td>
                   <div class="l-unit__stat-cols clearfix last">
-                    <div class="l-unit__stat-col l-unit__stat-col--left compact"><?=__('Email')?>:</div>
+                    <div class="l-unit__stat-col l-unit__stat-col--left"><?=__('Email')?>:</div>
                     <div class="l-unit__stat-col l-unit__stat-col--right">
                       <b><?=$data[$key]['CONTACT']?></b>
                     </div>
diff --git a/web/templates/admin/list_weblog.html b/web/templates/admin/list_weblog.html
index b46e7979..08fea512 100644
--- a/web/templates/admin/list_weblog.html
+++ b/web/templates/admin/list_weblog.html
@@ -5,6 +5,10 @@
   <link rel="icon" href="/images/favicon.ico" type="image/x-icon">
   <title>Vesta - <?=__('Web Log Manager')?> </title>
   <link rel="stylesheet" href="/css/styles.min.css">
+  <link href="https://fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap" rel="stylesheet">
+  <link href="https://fonts.googleapis.com/css2?family=Lobster&display=swap" rel="stylesheet">
+  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css">
+  <link rel="stylesheet" href="/css/styles.fix.css">
 
   <link type="text/css" href="/css/jquery-custom-dialogs.css" rel="stylesheet" />
   <script type="text/javascript" src="/js/jquery-1.7.2.min.js"></script>
@@ -12,7 +16,7 @@
   <script type="text/javascript" src="/js/jquery-ui-1.8.20.custom.min.js"></script>
   <script type="text/javascript" src="/js/events.js"></script>
 </head>
-<body>
+<body class="body-web-log">
   <a href="#" class="to-top">
     <i class="l-icon-to-top"></i>
   </a>
diff --git a/web/templates/admin/panel.html b/web/templates/admin/panel.html
index b4534ccd..4c1fdaf7 100644
--- a/web/templates/admin/panel.html
+++ b/web/templates/admin/panel.html
@@ -40,9 +40,10 @@
   <div class="l-content">
     <div class="l-center">
       <div class="l-stat">
+        <a href="/list/user/"><img src="/images/myvesta-large-white-130.png" style="display: block; width: 130px; height: 69px; margin-top: 5px; margin-left: 13px; position: relative;"></a>
         <div class="l-stat__col <?php if($TAB == 'USER' ) echo 'l-stat__col--active' ?>">
           <a href="/list/user/">
-            <div class="l-stat__col-title"><?=__('USER')?></div>
+            <div class="l-stat__col-title"><?=__('USER')?><span><?=$panel[$user]['U_USERS']?></span></div>
             <ul>
               <li><?=__('users')?>: <span><?=$panel[$user]['U_USERS']?></span></li>
               <li><?=__('spnd');?>: <span><?=$panel[$user]['SUSPENDED_USERS']?></span></li>
@@ -52,7 +53,7 @@
 		<?php if($panel[$user]['WEB_DOMAINS'] != "0") { ?>
 	        <div class="l-stat__col <?php if($TAB == 'WEB' ) echo 'l-stat__col--active' ?>">
 	          <a href="/list/web/">
-	            <div class="l-stat__col-title"><?=__('WEB')?></div>
+	            <div class="l-stat__col-title"><?=__('WEB')?><span><?=$panel[$user]['U_WEB_DOMAINS']?></span></div>
 	            <ul>
 	              <li><?=__('domains')?>: <span><?=$panel[$user]['U_WEB_DOMAINS']?></span></li>
 	              <li><?=__('aliases')?>: <span><?=$panel[$user]['U_WEB_ALIASES']?></span></li>
@@ -64,7 +65,7 @@
 		<?php if($panel[$user]['DNS_DOMAINS'] != "0") { ?>
 	        <div class="l-stat__col <?php if($TAB == 'DNS' ) echo 'l-stat__col--active' ?>">
 	          <a href="/list/dns/">
-	            <div class="l-stat__col-title"><?=__('DNS')?></div>
+	            <div class="l-stat__col-title"><?=__('DNS')?><span><?=$panel[$user]['U_DNS_DOMAINS']?></span></div>
 	            <ul>
 	              <li><?=__('domains')?>: <span><?=$panel[$user]['U_DNS_DOMAINS']?></span></li>
 	              <li><?=__('records')?>: <span><?=$panel[$user]['U_DNS_RECORDS']?></span></li>
@@ -76,7 +77,7 @@
 		<?php if($panel[$user]['MAIL_DOMAINS'] != "0") { ?>
 	        <div class="l-stat__col <?php if($TAB == 'MAIL' ) echo 'l-stat__col--active' ?>">
 	          <a href="/list/mail/">
-	            <div class="l-stat__col-title"><?=__('MAIL')?></div>
+	            <div class="l-stat__col-title"><?=__('MAIL')?><span><?=$panel[$user]['U_MAIL_DOMAINS']?></span></div>
 	            <ul>
 	              <li><?=__('domains')?>: <span><?=$panel[$user]['U_MAIL_DOMAINS']?></span></li>
 	              <li><?=__('accounts')?>: <span><?=$panel[$user]['U_MAIL_ACCOUNTS']?></span></li>
@@ -88,7 +89,7 @@
 		<?php if($panel[$user]['DATABASES'] != "0") { ?>
 	        <div class="l-stat__col <?php if($TAB == 'DB' ) echo 'l-stat__col--active' ?>">
 	          <a href="/list/db/">
-	            <div class="l-stat__col-title"><?=__('DB')?></div>
+	            <div class="l-stat__col-title"><?=__('DB')?><span><?=$panel[$user]['U_DATABASES']?></span></div>
 	            <ul>
 	              <li><?=__('databases')?>: <span><?=$panel[$user]['U_DATABASES']?></span></li>
 	              <li><?=__('spnd')?>: <span><?=$panel[$user]['SUSPENDED_DB']?></span></li>
@@ -99,7 +100,7 @@
 		<?php if($panel[$user]['CRON_JOBS'] != "0") { ?>
 	        <div class="l-stat__col <?php if($TAB == 'CRON' ) echo 'l-stat__col--active' ?>">
 	          <a href="/list/cron/">
-	            <div class="l-stat__col-title"><?=__('CRON')?></div>
+	            <div class="l-stat__col-title"><?=__('CRON')?><span><?=$panel[$user]['U_CRON_JOBS']?></span></div>
 	            <ul>
 	              <li><?=__('jobs')?>: <span><?=$panel[$user]['U_CRON_JOBS']?></span></li>
 	              <li><?=__('spnd')?>: <span><?=$panel[$user]['SUSPENDED_CRON']?></span></li>
@@ -110,13 +111,23 @@
 		<?php if($panel[$user]['BACKUPS'] != "0") { ?>
 	        <div class="l-stat__col <?php if($TAB == 'BACKUP' ) echo 'l-stat__col--active' ?>">
 	          <a href="/list/backup/">
-	            <div class="l-stat__col-title"><?=__('BACKUP')?></div>
+	            <div class="l-stat__col-title"><?=__('BACKUP')?><span><?=$panel[$user]['U_BACKUPS']?></span></div>
 	            <ul>
 	              <li><?=__('backups')?>: <span><?=$panel[$user]['U_BACKUPS']?></span></li>
 	            </ul>
 	          </a>
 	        </div>
 		<?php } ?>
+<?php
+$vesta_version=file_get_contents('/usr/local/vesta/version.txt');
+$vesta_build_date=file_get_contents('/usr/local/vesta/build_date.txt');
+$debian_ver=file_get_contents('/etc/debian_version');
+?>
+        <div style="display: block; padding: 30px 0 0 19px; color: #b9bcbd;">
+            <span style="font-weight: bold;">myVesta</span> <?php echo $vesta_version;?><br />
+            <span style="font-weight: bold;">Build date:</span> <?php echo $vesta_build_date;?><br />
+            <span style="font-weight: bold;">Debian </span> <?php echo $debian_ver;?><br />
+        </div>
       </div>
       <!-- /.l-stats -->
     </div>
diff --git a/web/templates/footer.html b/web/templates/footer.html
index 9aab9af7..a4930810 100644
--- a/web/templates/footer.html
+++ b/web/templates/footer.html
@@ -1,8 +1,5 @@
   </div>
 
-  <div style="position: fixed; top: 92%; right: 1%;">
-  <div style="margin-right: 100px; background-color: white; padding-left: 20px;"><span style="font-weight: bold;">myVesta <?php echo $vesta_version;?></span><br />Build date: <?php echo $vesta_build_date;?></div>
-  </div>
 
   <div title="<?=__('Confirmation')?>" class="confirmation-text-redirect hidden">
     <p class="confirmation"><?=__('LEAVE_PAGE_CONFIRMATION')?></p>
diff --git a/web/templates/header.html b/web/templates/header.html
index f0529c3a..a4bd95cc 100644
--- a/web/templates/header.html
+++ b/web/templates/header.html
@@ -4,16 +4,27 @@
   <meta charset="utf-8">
   <link rel="icon" href="/images/favicon.ico" type="image/x-icon">
   <title>myVesta - <?=__($TAB)?></title>
-  <link rel="stylesheet" href="/css/styles.min.css?1446554103">
-  <link type="text/css" href="/css/jquery-custom-dialogs.css?1446554103" rel="stylesheet" />
+  <link rel="stylesheet" href="/css/styles.min.css?1446554108">
+  <link type="text/css" href="/css/jquery-custom-dialogs.css?1446554104" rel="stylesheet" />
+  <link href="https://fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap" rel="stylesheet">
+  <link href="https://fonts.googleapis.com/css2?family=Lobster&display=swap" rel="stylesheet">
+  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css">
+  <link rel="stylesheet" href="/css/styles.fix.css?1446554108">
   <script>
     //
     //  GLOBAL SETTINGS
     //
+    <?php
+        $CURRENT_USER_FINAL=$_SESSION['user'];
+        if (isset($_SESSION['look']) && $_SESSION['look']!='') $CURRENT_USER_FINAL=$_SESSION['look'];
+    ?>
     var GLOBAL = {};
     GLOBAL.FTP_USER_PREFIX  = 'admin_';
     GLOBAL.DB_USER_PREFIX   = 'admin_';
     GLOBAL.DB_DBNAME_PREFIX = 'admin_';
+    GLOBAL.CURRENT_USER = '<?=$_SESSION['user']?>';
+    GLOBAL.CURRENT_USER_LOOK = '<?=$_SESSION['look']?>';
+    GLOBAL.CURRENT_USER_FINAL = '<?=$CURRENT_USER_FINAL?>';
     GLOBAL.AJAX_URL = '';
   </script>
 </head>
diff --git a/web/templates/login.html b/web/templates/login.html
index 1fd923fb..d9685864 100644
--- a/web/templates/login.html
+++ b/web/templates/login.html
@@ -4,7 +4,7 @@
                     <td>
                         <table>
                             <tr>
-                                <td style="padding: 0 10px 0 42px; height: 280px; width: 170px;">
+                                <td style="padding: 0; height: 280px; width: 342px;">
                                     <a href="/"><img border=0 src="/images/vesta_logo.png" alt="Vesta Control Panel" style="margin: 0 0 0 0;" /></a>
                                 </td>
                                 <td style="padding: 50px 0 0 0;">
diff --git a/web/templates/reset_1.html b/web/templates/reset_1.html
index 87c9235a..ad14d07d 100644
--- a/web/templates/reset_1.html
+++ b/web/templates/reset_1.html
@@ -4,10 +4,10 @@
                     <td>
                         <table>
                             <tr>
-                                <td style="padding: 0 10px 0 42px; height: 280px; width: 170px;">
-                                    <a href="/"><img border=0 src="/images/vesta_logo.png" alt="myVesta Control Panel" /></a>
+                                <td style="padding: 0; height: 280px; width: 342px;">
+                                    <a href="/"><img border=0 src="/images/vesta_logo.png" alt="Vesta Control Panel" style="margin: 0 0 0 0;" /></a>
                                 </td>
-                                <td style="padding: 10px 0 0 0;">
+                                <td style="padding: 50px 0 0 0;">
                                     <form method="post" action="/reset/">
                                         <table class="login-box">
                                             <tr>
diff --git a/web/templates/reset_2.html b/web/templates/reset_2.html
index 94fd9fea..5fe8bf40 100644
--- a/web/templates/reset_2.html
+++ b/web/templates/reset_2.html
@@ -4,10 +4,10 @@
                     <td>
                         <table>
                             <tr>
-                                <td style="padding: 0 10px 0 42px; height: 280px; width: 170px;">
-                                    <a href="/"><img border=0 src="/images/vesta_logo.png" alt="myVesta Control Panel" /></a>
+                                <td style="padding: 0; height: 280px; width: 342px;">
+                                    <a href="/"><img border=0 src="/images/vesta_logo.png" alt="Vesta Control Panel" style="margin: 0 0 0 0;" /></a>
                                 </td>
-                                <td style="padding: 30px 0 0 0;">
+                                <td style="padding: 50px 0 0 0;">
                                     <form method="get" action="/reset/" >
                                         <table class="login-box">
                                             <tr>
diff --git a/web/templates/reset_3.html b/web/templates/reset_3.html
index 3d5ebb9d..d4b65ea6 100644
--- a/web/templates/reset_3.html
+++ b/web/templates/reset_3.html
@@ -4,10 +4,10 @@
                     <td>
                         <table>
                             <tr>
-                                <td style="padding: 0 10px 0 42px; height: 280px; width: 170px;">
-                                    <a href="/"><img border=0 src="/images/vesta_logo.png" alt="myVesta Control Panel" /></a>
+                                <td style="padding: 0; height: 280px; width: 342px;">
+                                    <a href="/"><img border=0 src="/images/vesta_logo.png" alt="Vesta Control Panel" style="margin: 0 0 0 0;" /></a>
                                 </td>
-                                <td style="padding: 10px 0 0 0;">
+                                <td style="padding: 50px 0 0 0;">
                                     <form method="post">
                                         <table class="login-box">
                                             <tr>
diff --git a/web/templates/scripts.html b/web/templates/scripts.html
index 7c1e551e..46ab09d4 100644
--- a/web/templates/scripts.html
+++ b/web/templates/scripts.html
@@ -1,3 +1,160 @@
+<div class="io-log">
+  <h2 class="io-log-h2" id="iologbutton">
+    <?php
+    if ($CURRENT_USER_FINAL=='admin') echo __('Server');
+    else echo __('Account');
+    ?>
+  </h2>
+    <div>
+
+<?php
+    if ($CURRENT_USER_FINAL=='admin') {
+        $sysload=sys_getloadavg();
+        $sysload[0]=number_format((float)$sysload[0], 2, '.', '');
+        $sysload[1]=number_format((float)$sysload[1], 2, '.', '');
+        $sysload[2]=number_format((float)$sysload[2], 2, '.', '');
+?>
+      <div>
+        <div>
+          <div>
+          </div>
+          <div>
+            <div>
+            </div>
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=__('CPU')?>
+          </div>
+          <div>
+            
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=$sysload[0]?>&nbsp;&nbsp;&nbsp;&nbsp;<?=$sysload[1]?>&nbsp;&nbsp;&nbsp;&nbsp;<?=$sysload[2]?>
+          </div>
+        </div>
+      </div>
+<?php
+    } else {
+?>
+      <div>
+        <div>
+          <div>
+          </div>
+          <div>
+            <div>
+            </div>
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=__('Disk')?>
+          </div>
+          <div>
+            
+          </div>
+        </div>
+        <div>
+          <div>
+            <?php
+                $output='';
+                exec (VESTA_CMD . "v-list-user ".$CURRENT_USER_FINAL." json", $output, $return_var);
+                $data = json_decode(implode('', $output), true);
+                $data = array_reverse($data,true);
+                //print_r($data); exit;
+                $key=$CURRENT_USER_FINAL;
+                if ($data[$key]['DISK_QUOTA']=='unlimited') echo __('unlimited');
+                else echo get_percentage($data[$key]['U_DISK'],$data[$key]['DISK_QUOTA']).' %';
+            ?>
+          </div>
+        </div>
+      </div>
+<?php
+    }
+    if ($CURRENT_USER_FINAL=='admin') {
+        $output='';
+        exec ("df -h | grep '^/dev'", $output, $return_var);
+        foreach($output as $line) {
+        while(strpos($line, '  ')!==false) $line=str_replace('  ', ' ', $line);
+        $disk_arr=explode(' ', $line);
+        $percent=$disk_arr[4];
+        $disk=$disk_arr[5];
+        if (strpos($disk, "/boot")!==false) continue;
+        if (strpos($disk, "/efi")!==false) continue;
+?>
+      <div>
+        <div>
+          <div>
+          </div>
+          <div>
+            <div>
+            </div>
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=__('Disk').' '.$disk?>
+          </div>
+          <div>
+
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=$percent?>
+          </div>
+        </div>
+      </div>
+<?php }
+    }
+?>
+</div>
+
+</div>
+
+<div class="io-log2">
+  <h2 class="io-log2-h2" id="iologbutton2">
+    Log System
+  </h2>
+    <div>
+<?php
+$output='';
+exec (VESTA_CMD."v-list-user-log ".$CURRENT_USER_FINAL." json 25", $output, $return_var);
+check_error($return_var);
+$data = json_decode(implode('', $output), true);
+foreach ($data as $key => $value) {
+    ++$i;
+?>
+
+      <div>
+        <div>
+          <div>
+          </div>
+          <div>
+            <div>
+            </div>
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=translate_date($data[$key]['DATE'])?>
+          </div>
+          <div>
+            <?=$data[$key]['TIME']?>
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=htmlspecialchars($data[$key]['CMD'], ENT_QUOTES)?>
+          </div>
+        </div>
+      </div>
+<?php } ?>
+</div>
+
   <script type="text/javascript" src="/js/jquery-1.7.2.min.js?<?=JS_LATEST_UPDATE?>"></script>
   <script type="text/javascript" src="/js/jquery.cookie.js?<?=JS_LATEST_UPDATE?>"></script>
   <script type="text/javascript" src="/js/jquery-ui-1.8.20.custom.min.js?<?=JS_LATEST_UPDATE?>"></script>
@@ -8,10 +165,14 @@
   <script type="text/javascript" src="/js/i18n.js.php?<?=JS_LATEST_UPDATE?>"></script>
   <script type="text/javascript" src="/js/templates.js?<?=JS_LATEST_UPDATE?>"></script>
   <script type="text/javascript" src="/js/jquery.finder.js?<?=JS_LATEST_UPDATE?>"></script>
+  <script type="text/javascript" src="/js/fix.js"></script>
 
   <script>
+    hover_menu = function() {}
     $(function() {
       hover_menu();
+      $( ".l-separator" ).remove();
+      $( ".io-log div" ).removeClass();
     });
   </script>
 
diff --git a/web/templates/user/list_dns_rec.html b/web/templates/user/list_dns_rec.html
index d3749234..0b62187f 100644
--- a/web/templates/user/list_dns_rec.html
+++ b/web/templates/user/list_dns_rec.html
@@ -103,7 +103,7 @@
             <div class="clearfix l-unit__stat-col--left small"><b><? echo substr($data[$key]['RECORD'], 0, 14); if(strlen($data[$key]['RECORD']) > 14 ) echo '..'; ?></b></div>
             <div class="clearfix l-unit__stat-col--left compact"><b><?=$data[$key]['TYPE']?></b></div>
             <div class="clearfix l-unit__stat-col--left compact"><?=$data[$key]['PRIORITY']?>&nbsp;</div>
-            <div class="clearfix l-unit__stat-col--left wide-4"><b><?=htmlspecialchars($data[$key]['VALUE'], ENT_QUOTES, 'UTF-8')?></b></div>
+            <div class="clearfix l-unit__stat-col--left wide-4"  style="overflow: hidden; margin-bottom: 20px;"><b><?=htmlspecialchars($data[$key]['VALUE'], ENT_QUOTES, 'UTF-8')?></b></div>
           </div>
           <!-- /.l-unit__stats -->
         </div>
diff --git a/web/templates/user/list_user.html b/web/templates/user/list_user.html
index e6645900..5fbd287d 100644
--- a/web/templates/user/list_user.html
+++ b/web/templates/user/list_user.html
@@ -161,7 +161,7 @@ sort-disk="<?=$data[$key]['U_DISK']?>" sort-star="<?if($_SESSION['favourites']['
                 </td>
                 <td>
                   <div class="l-unit__stat-cols clearfix last">
-                    <div class="l-unit__stat-col l-unit__stat-col--left compact"><?=__('Email')?>:</div>
+                    <div class="l-unit__stat-col l-unit__stat-col--left"><?=__('Email')?>:</div>
                     <div class="l-unit__stat-col l-unit__stat-col--right">
                       <b><?=$data[$key]['CONTACT']?></b>
                     </div>
diff --git a/web/templates/user/panel.html b/web/templates/user/panel.html
index 81cd8358..3f55f306 100644
--- a/web/templates/user/panel.html
+++ b/web/templates/user/panel.html
@@ -33,6 +33,7 @@
   <div class="l-content">
     <div class="l-center">
       <div class="l-stat">
+        <a href="/list/user/"><img src="/images/myvesta-large-white-130.png" style="display: block; width: 130px; height: 69px; margin-top: 5px; margin-left: 13px; position: relative;"></a>
         <div class="l-stat__col <?php if($TAB == 'USER' ) echo 'l-stat__col--active' ?>">
           <a href="/list/user/">
             <div class="l-stat__col-title"><?=__('USER')?></div>
@@ -45,7 +46,7 @@
 		<?php if($panel[$user]['WEB_DOMAINS'] != "0") { ?>
 	        <div class="l-stat__col <?php if($TAB == 'WEB' ) echo 'l-stat__col--active' ?>">
 	          <a href="/list/web/">
-	            <div class="l-stat__col-title"><?=__('WEB')?></div>
+	            <div class="l-stat__col-title"><?=__('WEB')?><span><?=$panel[$user]['U_WEB_DOMAINS']?></span></div>
 	            <ul>
 	              <li><?=__('domains')?>: <span><?=$panel[$user]['U_WEB_DOMAINS']?></span></li>
 	              <li><?=__('aliases')?>: <span><?=$panel[$user]['U_WEB_ALIASES']?></span></li>
@@ -57,7 +58,7 @@
 		<?php if($panel[$user]['DNS_DOMAINS'] != "0") { ?>
 	        <div class="l-stat__col <?php if($TAB == 'DNS' ) echo 'l-stat__col--active' ?>">
 	          <a href="/list/dns/">
-	            <div class="l-stat__col-title"><?=__('DNS')?></div>
+	            <div class="l-stat__col-title"><?=__('DNS')?><span><?=$panel[$user]['U_DNS_DOMAINS']?></span></div>
 	            <ul>
 	              <li><?=__('domains')?>: <span><?=$panel[$user]['U_DNS_DOMAINS']?></span></li>
 	              <li><?=__('records')?>: <span><?=$panel[$user]['U_DNS_RECORDS']?></span></li>
@@ -69,7 +70,7 @@
 		<?php if($panel[$user]['MAIL_DOMAINS'] != "0") { ?>
 	        <div class="l-stat__col <?php if($TAB == 'MAIL' ) echo 'l-stat__col--active' ?>">
 	          <a href="/list/mail/">
-	            <div class="l-stat__col-title"><?=__('MAIL')?></div>
+	            <div class="l-stat__col-title"><?=__('MAIL')?><span><?=$panel[$user]['U_MAIL_DOMAINS']?></span></div>
 	            <ul>
 	              <li><?=__('domains')?>: <span><?=$panel[$user]['U_MAIL_DOMAINS']?></span></li>
 	              <li><?=__('accounts')?>: <span><?=$panel[$user]['U_MAIL_ACCOUNTS']?></span></li>
@@ -81,7 +82,7 @@
 		<?php if($panel[$user]['DATABASES'] != "0") { ?>
 	        <div class="l-stat__col <?php if($TAB == 'DB' ) echo 'l-stat__col--active' ?>">
 	          <a href="/list/db/">
-	            <div class="l-stat__col-title"><?=__('DB')?></div>
+	            <div class="l-stat__col-title"><?=__('DB')?><span><?=$panel[$user]['U_DATABASES']?></span></div>
 	            <ul>
 	              <li><?=__('databases')?>: <span><?=$panel[$user]['U_DATABASES']?></span></li>
 	              <li><?=__('spnd')?>: <span><?=$panel[$user]['SUSPENDED_DB']?></span></li>
@@ -92,7 +93,7 @@
 		<?php if($panel[$user]['CRON_JOBS'] != "0") { ?>
 	        <div class="l-stat__col <?php if($TAB == 'CRON' ) echo 'l-stat__col--active' ?>">
 	          <a href="/list/cron/">
-	            <div class="l-stat__col-title"><?=__('CRON')?></div>
+	            <div class="l-stat__col-title"><?=__('CRON')?><span><?=$panel[$user]['U_CRON_JOBS']?></span></div>
 	            <ul>
 	              <li><?=__('jobs')?>: <span><?=$panel[$user]['U_CRON_JOBS']?></span></li>
 	              <li><?=__('spnd')?>: <span><?=$panel[$user]['SUSPENDED_CRON']?></span></li>
@@ -103,13 +104,23 @@
 		<?php if($panel[$user]['BACKUPS'] != "0") { ?>
 	        <div class="l-stat__col <?php if($TAB == 'BACKUP' ) echo 'l-stat__col--active' ?>">
 	          <a href="/list/backup/">
-	            <div class="l-stat__col-title"><?=__('BACKUP')?></div>
+	            <div class="l-stat__col-title"><?=__('BACKUP')?><span><?=$panel[$user]['U_BACKUPS']?></span></div>
 	            <ul>
 	              <li><?=__('backups')?>: <span><?=$panel[$user]['U_BACKUPS']?></span></li>
 	            </ul>
 	          </a>
 	        </div>
 		<?php } ?>
+<?php
+$vesta_version=file_get_contents('/usr/local/vesta/version.txt');
+$vesta_build_date=file_get_contents('/usr/local/vesta/build_date.txt');
+$debian_ver=file_get_contents('/etc/debian_version');
+?>
+        <div style="display: block; padding: 30px 0 0 19px; color: #b9bcbd;">
+            <span style="font-weight: bold;">myVesta</span> <?php echo $vesta_version;?><br />
+            <span style="font-weight: bold;">Build date:</span> <?php echo $vesta_build_date;?><br />
+            <span style="font-weight: bold;">Debian </span> <?php echo $debian_ver;?><br />
+        </div>
       </div>
       <!-- /.l-stats -->
     </div>

From 8bead4afaadf79e95249f3ba9dbfabf5639075b4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 19:50:39 +0200
Subject: [PATCH 1921/2300] Update styles.fix.css

---
 web/css/styles.fix.css | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/css/styles.fix.css b/web/css/styles.fix.css
index 5fbdb6ec..f5f11a38 100644
--- a/web/css/styles.fix.css
+++ b/web/css/styles.fix.css
@@ -497,7 +497,7 @@ b, strong {
 .l-content .l-center .io-box .io-box-left {
   float: left;
   width: calc(100% - 800px);
-  min-width: 410px;
+  min-width: 283px;
   text-align: center;
 }
 .l-content .l-center .io-box .io-box-left .io-box-left-items {

From 2a3de783ae658be84bfadb225c357e23132c9587 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 19:57:07 +0200
Subject: [PATCH 1922/2300] Update scripts.html, correcting 'Log' label

---
 web/templates/scripts.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/templates/scripts.html b/web/templates/scripts.html
index 46ab09d4..7cf6223a 100644
--- a/web/templates/scripts.html
+++ b/web/templates/scripts.html
@@ -117,7 +117,7 @@
 
 <div class="io-log2">
   <h2 class="io-log2-h2" id="iologbutton2">
-    Log System
+    <?=__('Log')?>
   </h2>
     <div>
 <?php
@@ -229,4 +229,4 @@ elseif (!empty($_SESSION['error_msg'])):
 <?php
   unset($_SESSION['error_msg']);
 endif;
-?>
\ No newline at end of file
+?>

From ff61a26f69c90caa9dd06cadeebd48cd7d44a05c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 20:25:37 +0200
Subject: [PATCH 1923/2300] Update styles.fix.css

---
 web/css/styles.fix.css | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/web/css/styles.fix.css b/web/css/styles.fix.css
index f5f11a38..35b498da 100644
--- a/web/css/styles.fix.css
+++ b/web/css/styles.fix.css
@@ -497,7 +497,7 @@ b, strong {
 .l-content .l-center .io-box .io-box-left {
   float: left;
   width: calc(100% - 800px);
-  min-width: 283px;
+  /*min-width: 283px;*/
   text-align: center;
 }
 .l-content .l-center .io-box .io-box-left .io-box-left-items {
@@ -508,6 +508,7 @@ b, strong {
   margin-bottom: 20px;
   background: #fff;
   border-radius: 3px;
+  min-width: 125px;
 }
 .l-content .l-center .io-box .io-box-left .io-box-left-items a {
   display: block;
@@ -541,6 +542,22 @@ b, strong {
 .l-content .l-center .io-box .io-box-left .io-4-homepage-block a {
   color: #58666f;
 }
+.l-content .l-center .io-box .io-box-left .io-1-homepage-block span {
+  padding: 5px;
+}
+.l-content .l-center .io-box .io-box-left .io-2-homepage-block span {
+  padding: 5px;
+}
+.l-content .l-center .io-box .io-box-left .io-3-homepage-block span {
+  padding: 5px;
+}
+.l-content .l-center .io-box .io-box-left .io-4-homepage-block span {
+  padding: 5px;
+}
+.l-content .l-center .io-box .io-box-left .io-5-homepage-block span {
+  padding: 5px;
+}
+
 .l-content .l-center .io-box .io-box-left .io-5-homepage-block {
   width: calc(100% - 20px);
   color: #98a6ac;

From 524a3a592bc2f7a5e05da6234831a4a1490543f4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 20:36:32 +0200
Subject: [PATCH 1924/2300] Update styles.fix.css

---
 web/css/styles.fix.css | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/css/styles.fix.css b/web/css/styles.fix.css
index 35b498da..c5723b15 100644
--- a/web/css/styles.fix.css
+++ b/web/css/styles.fix.css
@@ -279,7 +279,7 @@ b, strong {
   white-space: nowrap;
   vertical-align: baseline;
   border-radius: 0.25em;
-  left: 140px;
+  left: 130px;
 }
 .l-content .l-center .l-stat .l-stat__col a ul li:first-child span {
   float: right;

From cd6c58564148d717e53e7c7d57a730cf2d0f4039 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 20:45:13 +0200
Subject: [PATCH 1925/2300] Update styles.fix.css

---
 web/css/styles.fix.css | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/css/styles.fix.css b/web/css/styles.fix.css
index c5723b15..6c7a54c4 100644
--- a/web/css/styles.fix.css
+++ b/web/css/styles.fix.css
@@ -279,7 +279,7 @@ b, strong {
   white-space: nowrap;
   vertical-align: baseline;
   border-radius: 0.25em;
-  left: 130px;
+  left: 133px;
 }
 .l-content .l-center .l-stat .l-stat__col a ul li:first-child span {
   float: right;

From ecb988d2ebf0b0ae3bfaba2fdb4a44fdcbabb483 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 21:10:05 +0200
Subject: [PATCH 1926/2300] sprite.png fix

---
 web/images/sprite.png | Bin 35005 -> 47705 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/web/images/sprite.png b/web/images/sprite.png
index 061392c3677cc4e7d9659d877a407891e538dde4..c0ac73f38c2abcc11a9a2da69fba71024159a89a 100644
GIT binary patch
literal 47705
zcmY&<Wk4Ij);29}g#y9drD#hj#T|-6aF^mvaVrqqp}12dKyddq6f00Pp}4!d!<XKB
zzaQ_9?9QAylih4)cFyz6bE4E#<Z!Xbv5=6Ea24dGHIR^Az>$z%Mq{8MEML2Q6%nTw
z?izBENY#HRcM%m7YYAluB&50o><2ScL><#bUe6r~37hcW=LJ$$4k;2++mV8_1kl^~
zFc-4`=y5qPmfKR>i!6a6Ee@nL6o2g%JWarc+Cr>3{$><#o^Md9TdJL9W2aYYYRkq9
zCMzLM6pASb5&wD+6LRvGrc=QEdHcTO`qkTWtEFrqcWa;H05Olw{e@dz=dHkF!Jcy=
zF**>wq`ZsnQ8MC0j^pc*d04$g=yw&lMCT>)`^2k-sF+hz)yAZfGd#>wVvgYvvT?|U
zF9Rc$#GorKlrm#Nbbkqge!`#wp<sli;!9#+;$v|jzLbELNE_k9D9#E2;U`PoHQ8@f
z1M;NwQ(Nu(e)5hkrpluIb9a-@u1^%^YmJFLGFm-iqpVWoY%4RdZ!55O#R%|&-OO~v
zEOh2~e1C1mX>hMchjvj4JzA`C&-tsGCtMDm6R?{`bv@)5H$4S1Qc0_ji#1q}{n_&S
z5HMaK(YxTGffpEfK69~)4}i%LJEuhrvyb|sSsKx<O@``A%UqUgb$p&|7qJpSe#wUK
zYEl+Z<U1^zWa7UHu@;{IL>AQEeV4%8?;|lWtaMy701o|#rkd<3X)x^UD!H(2P|P!&
zkolOVGd#R6)NW186s&`FKb8NqQO)l_3mKqvkL}n@5Om*)#Nw!|Es4rs7M2FA?Ine^
zT5&?~wIVC!h}Xy?YbAkn)zo^C930$9P*=}%WjEWgOE=FM<;i+Rb7>D)wUw1%t$D|6
z(A`t^=C8-*_8MA{C9*V;`QGdOpIa1>tiPri;Gvu-`0A16auD?S@xt2ouUE<?Kj<9W
zarNl?CqC>2#f!9*Ht31AABZ>57#|4WJ&Xis{b;n|&egwD$g|l$_m_;ui?+8TuWaQb
zI!Hhx!|HAv@Lf-$U+C~g@0_CA`hfDq=`%&cQ{NIFA)1pqL0YK(K@!cS9+R`P9gAw!
zfqA@NqtmixpzpKl#v<F;?_!-N$19ILxXw}Qwsz)u{_|kEs?g}cx%YWf`UYN59zDaK
z`!xUcoSKY)eQp0YLAS&2+D_s7BcAj@{x>=VPRoj1T{r%0Q-?C{%V}~n{*)0f@pMF?
zYA&HzsMoj0Gl_D(UmKXTVpJdR(Y!>QE$_0&_}=7ruzpB;(+dqISw+-FMB%;#wN`SR
zW{WkQbD*yVY2k6TN3YTcd*vQgTNv0Ys+37d3r#TWy#T;Sjw_QXzp6Gg<4_Cgw5I%r
zoob2_*b%PVb{AfD0E@p5$p3kbd-$zt4;P8i8NlZf<~0&nYklpj*RHYwr>IVBG4YcT
z)idGT_IC#z=wFumH@ZX#mMI=TO?JVkGjAs}8jRX(WBdayyet<Nye=L@_}2EzhQ;!I
zUPip^xy`@MJ#Mqd%`T;dRD+GniT95lHTy0_yhOMy&$GuQ4UqxbiD9i<mY&&fex(LL
z7<>F1?ycQ42CB|xV7YN+cfWXJV!f9x6;uhI0@lx8olS*x6}^m3<h?U_ZubpJnFh@a
zn9rLGLK8?7T9y_!zizdTr4FykQFCR_I42*@du6(B{mEeF?mP*p(=iS(h!;MSpKWt&
zdN^!jJKO3h8;qS<`WBySFm%DDd6AQDdAuY-5I;Srcw`TESmZo}e9C-yAiBNBuK7KO
zOHtx=yd=mwSwLElMk+<M$3=mHgI!k28y3a}iOVtKXF5A;k5{iDq-J-xJi1AmJ+Y)K
zwf?e1pMGiR9M3@1X*(wB46}H8K-Dl_`s7RLmiX;kW6Dy*W#TiZKD*H3dK6ISIF-1{
z;8RWSE57*}C13sO_ASp@pr%DLAsZ)~){BI}JQ0|c-|><i8wdArR1%s@z1z#7tJfN8
ztdO{j7l+Lh&K^1+7%?!VcxF788M3pP67D3FOr9ZKLqu0!$DuKoJChw6q6Q5>_%W8k
zGsB(2jIq(@XZUBn=XKOAZ&sq@m_V1N1=j(pe%YY&{WG}1@nGp5-0g65X1GNzKubUK
zE#|3meTHp6vJ|#N+9M=5`Lme)iskH>K2S}Ug7>_+nRkhe;M+<a^d2Yotc~)$O=x4q
zUj~y7yXu^PMRWr8sEqRjA;0p*POB)K@%6k6E~-|e_#WtMWtX`O)#4d-Ma#ZqEjQie
z-s0u-yC|bBEm5ORC}j)8&339(dHR#$?~QXU?9HF|)M+q-Pa7lZBtxzFi}d#bm0}yy
zKF@#LPJV`ArX;OdoR$aWm&N>j0<un;<ige>in6l$87sa*=OQIE2<{YACz(KQJ;Z(`
zkT%Ya=G5V+ZLXwxVzb$reXiZV0TCCXcW-Yeqf|mRCtsP(7E8u5mc|)Xd|r%hwi0tg
z`Td(-qf6k;xmXr=?yG}0CK@#!i)Hqfy<BBM{FK$n%a3QGw-X70mIn!Aoi<lBMptzU
zqF1jnKOTzgF03oMJ&x)qD!MZYGBM?DWYIk99(A6p>;|dncyZhAfm`YIY;)|_VP|=O
z984nE^t<=!s6=qt5h0Vtw~wX9`Flb_`q_`@2Q8X1t`VK5)9E9gKIe9V=7Z!u*SAZP
zuAkfFJ8E~`MOG8z2y6jK9yA}8@1h@br6WXyhCiPcmDG1Q1PQjQa_jLt6Q(Wz8`FAU
z2`N=&EBN0HYxbn*JfBy8*_~Csvfsw^bcC+Pot=yYT7f)%R(Kp4OOjLnyCGS1R6Xo{
zC@RhHbh^pA@JsXW1}(^+e|-HOXV&%iLzf~)+u=!ke=YSpQag8#V}7fEfa2*lc+~Y0
zTMv~H4$BJ~P=5M=cmwV<_VuuiN=xg{?z39dyz6>m&bA7z?2N-YTJrl>9h)HaKPMSf
zshjn-huig^6-%Nwt!^!!Bpbv8H_tAejp)U0j!4UE$6F|p#zgOxOsr$5JSE4=|F+tG
zhv?RgF47mTN~kL<TL82YQ)?yVS;Vem_4=zxu<<7?5=55XSj@zrV(fMy3k};E=~MLj
zj<4O#@aM+0MAx3kb>!H${553P(Qy<QQcl_<5Cof)9Q1%oD5u>LKwfF`=T|VkwP}Ex
zTLYEGq%i$Jf+0J}g0LLD+4g>YLw%++eYWMq15>^Gyr*6ZyC}KWO%%(p;C7D1!AK1?
z{kfPS?Y)PfG}q0Q58qAk+s)Vpm6R$9f#LYv^0P=xTgpbZMXwmnVsHqY*O9Fe9P&4*
zHckO3p$)w|%AP7I3P5kOJ5cVgjSuL97Dikp<@%ln9ySG$_kO$rV5d_W(%E}y4G->C
z#+p&xhoG#QUepx*o~-VQA85CS2bR7htOwy4OdEdu<H+zhlRmiVe)rpCNl>>!)R{Sg
zvR+11e^Nc|&z@xkU+3ANdcChY`fO7du);Gfd*A=Vv6Nn$WvWAkXL#S&<m7m_C7*4X
zD!;O$v%BG%;dz=jX`0=>&4%uMEhXQZw4N@e-)dyu>bgmiqY#Q!eRG5*g~YIDG**A|
zoc=3ASFu8pEz=C5$Onf&*tvfSIo6o_iqAM%QLL_P4yXOr5?HWoeoH(4Tk%ANt~52(
zVB|gYXYNOjv>B6pyZ_%Xb5xNOW{}G*2>lr<)U1|d<cMgoRgl8q5Z1=Yy*-S7wESbv
z^0fB(sXyLU=5-*@bnh>uT^m+Hw`|C`TFd0D>_)Bf>GyRy^7S$k$IJ&N0*?f&$_{cS
zNR2C8-&0uaWBTDYkNp<;g)w~-Ac1?HS8i>`_g{w75OiZI8z`t>b8_5h6yuLmifCZa
zdB)DdeVnxfZE8Bt#O-A61dV<vinb3XVeZ(hKo++qxz1)u;A28$v>k7~=V2BYOw8a6
zStk31S8Yt2bIzVyC?IC@7`EVbQx68egnZBAxijyXeRS7+!VkMe5A>^RJX&FV(^L&k
z4n=oJZc@CuBni6?q-Ll<TFbCGqWe5k%3m+64wQiUEO`ib?r%WJvGMyIM!Il@UfkZq
zl_??>k+Z&tv{O$`8qjb1+|YTm@K&SA&qVNzn%1TR1Ec?u02iNPKFV5MvmNaBMOj*^
zAe~}@Tg&9D&cAvMOK<<v<Y}*Gcc(d@)+aX8$mYHv0s=Yb-e;a#1td>f#G$^#T0NNZ
zO)n?G@q~daby}tM(>{bmdw5sKYwx))Sl3&rhc((5Ia2o;`*;`lC<kL0B9RaKLl}dI
zz@pwOO(6}mEQmvat2YGW+DW$sj`0R3#7-%UINahxnHueaf%?SKKND8yIMfAan<)Ax
zl|j~tT1(pJep)aO1}Dydiwf5d2Y&GDSe|1B#g5F?4`3?);fE!+#fS*9V>tG6x6rLx
z=4ra<S>N3Iv)zc?4Kda0xA&NIpkii*1dpSG%u+GfdOb%C|1e9?HAMqT@0h3#+AHz{
zrxImaYWuM~^z0{K!tPY=?r8X{MS+spP9K`VXh43ufh}R=z{kCU=70T@TXHik^F(b;
zbRY9>vn|iqm!*`~^6bWfYP<=CqEkuYoz?gk6kdxbq*B`lpwL5l|ByPRO_?W$L@Vf$
zv`T%wyB34Kk>JJT;6sx*@D{+b4=kun4v)pMUkv@}E=>j1PrQ2f$xLMR8=ckdQTE#r
z0-}^!F1`A{Z!99_5Jg|x8&ahs3A0f=1U8W$M=3hP-VSnr=<d#4id*zyg)eRt?Gey{
z5+71rwOs<jXjMLZwvlKE+2=rc!QGsw_w)Nc8%l8S=ByR!ltmSdF9eiWFeI<*E>8>1
zl6v_XPN`8-t8%xFE5*o|YHq;LmsV%4XL0#?{i5<KTU&o56<NV>0Pmx0{AEPj5jg@c
zN#)2V_Ky~eEsRS+#=k`APQ}&gYllVelcuKUna}UF&z_ICzAl@}!IzA5-l;=i5no8Z
zBEUWxtNf@I9So*7z)GdAPFIr-(`KjSeqWqd84JuV3NfG~`007nHM1P_H7h#9lVOTa
z&zrM)_5Ly~(=`HLG9(nbmw?6&5isUXi`A*iDU<xz?_FtLH7-Rsf~mqvN?);5sRTUs
zh&i<y4Q#`<{&jjoS!}qzMgwN@)W|Eks+h~RGk|rMrr{{{&lw-K*pZk=oVCq`+O=No
z|5Zmnt_aXN#B3U_m6FK1uChxR(I!{ZjWW6Ge7rP#-a71K=_2sTSLoYRbRP3D$osHy
z)HwI@$oO1W^eE!$5ZyS{GaE}nT_E04ZnWBny+RDgt%Ax&K+TpENqz^^l2*p}Yi#yQ
z`^`n=9`l{<=d6lRU3bwtQ<=1Ei#kJB92CI0dQL@JM&Z?G{t@sIaMJ~TDx&!AB!^rY
zK-e$Idacu;bC_*cw_SvzwdU~y*$!U|<LpgSDD0`CpU7TP{^yC4TJdYX+f15k9*z^y
zs^mNZEM>K^CJj{g_P?vA?2TPt1l6EPb>?#81MQLty~tYXO<RJ-l`ze!TyicV3-wjX
zEiREx$Kww-(c~ar_#Yi1qeD*qVwe2lt;@r_5@Nq2Oa8CTKKFls6jkBVyX%G>2DouC
znWCBal4saqO}xl-GJ^t?>aIZAtmaddi1P97;?nzR$->mTd@_Rify&kjHYPafjD0Rk
z^O00Zz3x0q&WW1HN*6RHEd8F&bNXk}(b=)xlEW(unw}~&Jb>9+`%XppwV$f;yz@<Z
z$ASPJH63V!49lLOuiJb@T~?lxj5ZBd(^W?PLs1A>QnB`TbDMe1i_M)-D(g<eb6<d-
zVwd)XoG<ek&4XMN0B*Tt$KI)zf8U{qcQN6qQ_20hJhLM<*L;W~W8~NadE;U#B8!`t
z4wq`_D>;X!O<42>%9N^I811(m11egkz1*~&e34YWy|y)e3=#u*Ck@{BGj%QGs<4J*
zn)A%=VIez=^{YMu_Pjx6LhTVAeEU2e6UdcN(~aPhd<qnx_4txt@?@2ytu92G(L0OO
zI24~7#7B@<P`YF*Vl@j;`Ab^UFul)Dy}tu)X&<v!#z8M5(7yOy9nU+$78yb$21H)g
zk&>Jiw2DEI%_n1EH$Aedv$!KA|G1b<Lo0Aa%2`A6=yyAx)boD-uMWn?)TZ?FtNZ8$
z_i?<<E94+kcwJ2*@LO{#cZ-N|^^t#)Ve|8?71cdCAtC}*L<#t=(#lUDDenyieIc6^
z^9k6Bb=Nxm_Q|6B6orV+)Vu1$ctW*ZfivwEvsoIqK<pZgALP<g9L`u0;Eq?SDm0Vz
zt~xUB`_;EOVtx#O<et^yqJW-bqdsr6V<-vy*h6S6k}VB?>ZuAZ>PV<=QT<5oc6B6L
zGd9B<llO1}V*kaYhq!C8;cOVw5$(5^P_8q=nd@_I(Y-G}$CB?+;6w+jZLDrkhLF_r
zzU5WclU4%>S+{Qgte)4O+xe6HkqPG}CWfP&@5T(#@)<m5xSH|zRzlW`{WscVyiQk{
zy3jxR+$Pz2Oc^2Qc@^7LzI02v)j+9w4Tz6$aro^+o`3<pPNmr!`}Ukdt6x&M#?C3o
z^yQvq)%3PF0UM+VIZ7Yu@KD8h0?Fw8tY2e7FoWM&{#iI?T+a>J7Q0W6HG06d&~-ML
z)9=4-6LikoFMvl-91}fw%{%x!G;GJ3b$teh8T$MXI6G>S99hi`X%iAlA`$4Z!r32{
z8r@iUWn%j-j{^iyjp{QWiX=*6vbU%|$ND^RC6kiw!hoBt#&f64@hcujeTtA$=)SB$
zXy0c${8P#NiIDYkZ?om^bCv{NvyF4-+|!<AyyqUX=fj|I1!Ii~5%p!$y_5V=!AV@y
zggcX_Q_)lG%aqn{7|~j$2YU&l#O#t$lxq+;_7(~#{Xj28GVHb9603KtIdz~6L5*JZ
z%vXGpZvsmh)ar^JcsBSy-l7KS-V3x@%zi%`<6e3n?r{*>>I==bU&#z9H(2^6=IF0r
zb)4ahv;Pe7pNixFy~#&(IX=kXcn0UtVS91E4Zrki8RK8u!*rG^`zgkhJpFfB%&O5h
zZHK|*6Im7t^ZG<A9}BDXqUb#aTWSI%abd}PyE!Iam%k-|m0*dWo?%$jd8S0pc63R~
z0I1XDah+c+VsT^Ca6HXDGW6W)j^8OgaX3oSnAT$q@Aob?{jP6q4LgC5qnumvGk)wl
zbM%V3MYGtZe5fJ+Bc_Avhzc$Sbr3V(<i=59MN1Ua5CgK*f-%J{SDL7+uP{BQ<)o@R
zH?Y<;|7gQw4TLvfb6U;voXJ|oAuQ3NFh_o&jSIYP=d?QS0R*5(e0$+7VyWeWna6qu
z^pf!$uHvA1H>}&aPEpx1=vWzec%-a=h#*&@id37}>*c5)56Bu~`-F`38b&E=(6x=}
zQBg00UC(7$b!4!}x<hJtx*xtXQSQ2qlMJ_;E9TC01U)Qpc62!D2mIL5&i%A}`1asi
z_LJxRYoitj?&xj+^y4-Y-(a(P^>|vtQBFY9Cyjet{xh^!tv9FI-0JrY<j@~=-j5AT
zN6CzIrs}Bc7g;B!3d9at63Rp{$-1|OT8cnyToitFAO!;iaF7tL#o@h$lX>wAkA;G_
z38?F6Afl798k1d5R&(c+uPJsv+Y-2V%i&%+_*dsB&+QuZTB~#F`J(Vq=g;Gcj%uLu
zJo5J=hv)vUHC_-~uE*i4K|%!i=BOwNl*2PNpOG*B@@UPHS+Tz(@R&D80~6jm(+w&@
z!?Vqrb7|_bizugqL>1jdRB&n{U+7vyVm@z$D8k%5?B!D|8P9cJZv{w+XuKJ_--)O<
zMeokK7hju9c?`0;T1Wf^n|1Ufe$ELLBWFkaJ*laF7i}NVE<B!U_emRQ2KMRj698t$
z-o?72x3}2!-Q+*30%%=#=c#&}{&gO=U_xayA4W|V;rSg|!FGdBz7N!as!_gmj|1^^
z%933kH5~7oe~RM7%V}J}ZQHyxP`3&CO(7TbD4Uw6rk9%YeQ8hgE^fA@hY}~X%`n~I
z>2_UW-(&F{sObaYE?-S2vhUI9<)#j3z=l1QZ$+`k`xJdLS5ub}tI%2FB@qT6uQGQe
zeF;vFege9zOQio|Vl#WJUK$*l;%@U(;R;Uw=r{1PA@4&c+CGVwn`~3z7{AF6MVTOW
zQaD$jH!ggv!lfe9cl+HJR)}(N?a)cCldz7^JJoax6wSUUk)u{7=j%3~NynbO)7xY}
z*mtU+ee9Obvvmc5gk|ReW=&f2J*v>B#{}2V_6iXZkA;GuowIL2OZ+=#BAz)|M?DM1
zzLqbg9FjoaFp?`yhU59C?_`28FTNMu1ak9RYKQ|@PkjTL>sCHS6?fF|1_z!QV$p!I
z=~i)CgEpn7B7DvJkluD~4RJqClfp#`MI=OKbSFjuLHBF?QxRClM7{Pah0xj~%)@m3
zt9Zgi!}EN{<4jSYcNwWMG9Dn@L)FIhjrJD`b|N_Q57cEpmrc~=0Mm@<0!{S4vC2)9
z+}fyKgCR44jD?BrBS^<^@8pcDQJ%HxS%&b0?8gZAK+z7|W|&{sLjA&Arw$JEoom$8
zzzas!RAycb){OG-wR<pbtSgvRGt$M4o&>z=VN6PD8vWtm9Qp%kEk3|DESQ44x+OYx
z*D%zz`a(b8WzA*1>QSU`3BE4r$(@nN#OP&)ws#d?brAbrs-$UGU8QkPB}@C#lOb}=
zWhS?A6v9*8`JiIvcrU8DrKb=osvY!h@K!g)Y|Dnf;V)<)Mr-XewuO@Ir|@O|d%V2@
z<7)Fx^{{IxZlP8>i$}Bg4($i<Uo#v#xY^2Eq1-oOA{XRsLANMAfg<!L3T<Ymi8>b4
z&5?2+&+Ce60PFg6;A4l!aqn`~^6ThFq<h|ez(6wojz46_o@%<i2g@$izurFcRAaTv
zT<q)klT)vIIkZ+VGXW4#h5rR(?@YwLI6%Q*9nt#Z>EB`%&s4Z`ugeB`vUvy1VuR&I
z0D=7JPLA4tTt2#zf8eG>tioI>K;0zZH<-9Q@TKqGV8<vfb&>BtvfKhgQ$`td4@a2M
z)$-$nV1HYGyhRm565BRmu0>9zj`+*zq`_}3QGa;<@Ox6)Q$;B$8Pmtb)Q?#K-xI4l
ze*IxFN*cL)!@X#p)>=M8SMejtEcu6cQY5;z%9oa$h#dcm7G`7_`f<GdV7G|d17~Hl
zXz2nPIP&Hz3cDbVu++qGss77Ey3!M17sV}dK3uFQ{1NhVUF)-NnOh#4N2Fz$<O^3B
zCT7rA^*#I{l`yom=ub)*FTPLHCFhdUBj6S}lGB<-mw(OuZ9joTKD#jENd$~LgTfC1
z58RPZ017Jje<hJ69xvN5Wla&}(_TZiG4IQHwZdA0N%_{=;Y>G+8s2`|VrpGED1o>2
zu&|G*;Jz4svSLQ(MuKc==eyk@3ZZCD$6v2>GI!U0K`$I}-(Drt!H+3`+Ag`v{2;$)
z&x;$IR+1qF41P(Q7kuht_ok5ill32cQpU=|O^%-|vpP3Ib6B`<X`P1@MNQ8L*hHBh
zPa{-+{%TH-WXg{Q+(|Q`X(cjOj2HbfP062cl#hz%P(cH|g;QJ#>*9gFK3?pq12KnU
zAtLZFY|%8paE?!<-<2rv?ot&}eiZXV1n#u>>YGaLmB2oQKp>a>3^Nr;Dp#-{q|D2f
zDfHUCKV|g6yrr{_TE(J&dbdu+_bdW$FTb-4i=A0iE-BLWF8PIdA)h9Od#yP$WlMZ*
z9Q&sXkgzUwzGmsOV|DYQLz!xueX#ZiXZfZOm_?tiMH#gbmADe&z20-%DJNOSiKrI`
zrzp_uvz1Fy3VMRpw1x7$oMZxwj>9YrtP*%cX1fG^9bU26@p)Q+>$mK`orlQ1x&dl#
z7z}*OrJ=3O)nL_?9@mNhkN7Y@bk8(Lm<ph~`7>Rc$C34Hr2QiFZh&HYk4*$7TT#@C
z{6YD$q>jDXI4P3i%e*39>{!q9W6t_T5358Zw5%?4sk`zDoqt3k)xk7RAO*Ld+%T33
zi=Acl;|DRVLQH=iL|6d@%$P^K<ld8Px?$fYoBRRdKO}R+C%8&ZT^Y&~J$Gxk_-Vur
zdE+QAk7ikNcib&##6IVhSlPd1iGzsW-%$G6(9E{EmvvsviNzuKzUVN;SJjD49TlH9
zF0}qpgc5Ie@dPe1E;i!skW8h%0pGxc_(LkzqRFB0*U>oRN$t*A6>(Tqu`?xA@AYx9
zK#D$0sD#$?SD*<FhS0g6b!gN&q2O*vIQ@M_?v@NcMwwThfJID895>-Fl%nWE7TAi6
zNGY7?XQ--v?Bhl^II#$ttg4P`+e1Rfm<Is?sO@T&B1jVuZ{-6H;*~<Dg`3P%T{GQ*
zZu1w^dn3vnpF4aZJP-?$m2X)g_Z+}Cub09EKFS_oK!5JFWo7+1VJyr8zs9Mn!dK!&
zpNIo-z^1)`_e<hRVWE^a(s+cD*sAbso7Z{!yS!-50RFGbK&d2TqFFgAGtkGAr6r#X
zHuRaufWw*T9~e!;Fc;1PXE!i<Ii9#xMVGIH$=-@rw=E>TKCIk3>ah}Jsq*S*tvKUr
z%ibTG?|J1SGGPrG>FrMC;&TSD3kX>Gn@e$7-dkfCZ4nv3y4n!YrTHa!MF-D_%{tMj
zoGxj>0o8&-8EueT=NVg_6XEY}!$P!#Ca#a=J|WokdyLK~1%b}F3QBdBE9Ec0VB<^j
zF*2A{E!6AfJuEsGSJ<`eS_d5bH2Fv4u9E&?BdXGGN-mUAO*uQ`n;P@&C+q$9|Ne*f
za^h6n+)Zg$$gU?4tWvbk<ZJBUg;>zUujbJH7<s=JprS^ng-7&uj#Pt%DHX&{^*Y?k
zUND3*fu+Fs!(Rh96ND7npn*%6<<~H?f*lg52l7(LYBjd!3d8HWPEmfA!%#?x1$o@o
zm(-gr>Jwh^mzvv+EcWx}XtI9v*n0y294h}MLE{bcng0;(j@7pk&sk#9Va0ra9hw2{
zbfoMRl;A<Us3zq0V%xsTf86>A9>Otxb2pR73!!~Si52&5-Oy~A1{A0kS;PXy!0zRQ
zO7BvuRys!49fKE((Z*-)SeoLkVs2!^@GR^mu`ur~i;T11&fzCB1%pC*MDE-y`hL$l
z_t-*o+pM;HEd+nYL)3nLx%)(y9EjDHUCiti#ae5vLP~NDF6zA-KJt7+N=RXEnmpGs
z?J^oOz4G&wx+00v_}^L<TO53VxbO`MTQ$Dc_KR5jWB?g%OQw)tsZszLX6~!rKjI)&
z%ej5cQ34#Xdqc7hHnkn8?}Kq#c4yB`$#_<5yc8{eh9r#E2aWI)_?(L-0yucqdPxut
zWFBe;h#ioCSMv-pxwW_a0UtA%TCJa$Gdq8Ky)M@8b)2?vEbB;$<dZ>dmh95Gh=~6W
zni0Hr_LQ#9ziW`Nmt7FN&(S$1M@b;2TW2Fw>9_;)J_k0YN3;F%-j8%`81w%Zbp2j$
zkb8E`Rsz>;#&gVNW((bYdJXU6$>^z|Tiv0t8~OqIMp}XFTBY4f^E;b!``E6m+=s9b
znNcx!4buO5P|8e-+$jae3*%Mih(olm%MpxneEYD5A(ZO;m(O}|mmt<_yNFdf!k(sd
z;{1!~bNp;6E)!qBxkI0|#18kRyp9>+G*3S#v6G6N78d!JZGu`_hkV+QZ|Mw_hQhNy
zq8iz7$%ZjkBeB?`CBa}>2X8@!zGig~g+EWb2Y=YJ{tq<W**EUiy2gDx@<=)MeVSI}
zesq4Giiig63a-V^vg{H5nqC#l4JbBVH#r7IHDV3TZi(z2nJA-}S>SZsmXk-zh=1Eh
zK6+3!JlEPRs9O&YbG4WgpwYW4IP>L>wsQezXoDBan+*jf97CR5Fv3~Lk)-Bp<IuGq
z9-DV=r>4!vFi`+gSWQAO|0cPy{8D0XKcEuF^bznJMlBMQrN44G1PERjCHeFGSGR7m
zX+O9>8bB2Nb@OFPClTg%+FzuYVayq|Je}H#N5UTP<y;mSMHQX>@$+*gXR4l!9)V@o
zi5rEz&A=~%S*pzsPa_mT9Q<cyjFxvA%Ncj;-^G%L6PDD-l1_epc8fidnyu1mRig4Y
zIz(=oA4v-pAZ}{ufF$I1$P%cT8Lo!A`jyl1j#8-R;803^d*Sg_Zmr3Rdx#t$>urLM
zBm6^>@&Re$Yb#V3kBb9H+TfJHQ5)PS7sk7P)%ub`-p@@z78-q8fpP8|erS1*h1y?9
zKeA8OoN~xP^j6@I&&+s?ClEl~!~Fw8JgP)M^=*8UhGbIRUX^x5Ry@Voko|SVcr;Z~
z2hGD{#`-J0hT4IwS6%M||E~Xi-J;U&s9H0Y-pGxqLvs+Qh*q9*&ki4J-w&<yn%9{8
zIh!Bfg1{>eq~kRE6JthjmfwuZhQU-d@5OO>oiI52*?MV<)BGHA$Op>NKv;C0(?ji8
z$5=+3vn!Ym{f~?6pc4&b#{^^U^(!zwR1vpP#J8*H5Bkc%`zM?6hIysCb-Y}SFi+{O
zndIngRcd!AXsV`dEu+tw`*yZrrsnaqF9G;RWaB2OY&78WahzuVA^FpkV2}E07o@c9
zf_t7pRbKa1Gw1Di{YIs4YIV?@$-(0%r4OV5-+$~|1i%~)*9G|>@M$6P<{=sM^SF;8
zWfff|Xd0JwYiw27vjlB&hr~^-JyNCbE=098bb&~#J`(TTR%PN${3kiO_dF_*wi-oL
zDcxFXuE76_Ei~R*Czm70w29e-wzMBguvk9G&{!(5Qofgo9?QFYIIepZnhFxQ0jZX1
z<v%XDd+iU+?01u~3l-M03(9rD$}Z;X74zv=b`7hCIoT^{GY6vC73$E`xJhA|TxuQa
zxY6OfRe4~7$%3zC6)}cUXrz_L!L_#fKQv)7D)ZlulRW)a%J=BY4kxbVJ49|l)Rki7
z5B?Bl#lM!1^zR(v^x(HVyIp3kCA(f8SPClx_@m@1{d!)bva3&`&!hqvz1HOKaBUGk
z)eyX67A*r}b{}QEG)$s0U}5+5u}|==zHFA0;dVY$A8T5=+933WD92)R`I+wj!(x9?
zmme=n%w^Cnp8O|}FwNRqG1C4Dd{PEj=f}0$Uq!C2TRpGl<c~RpI$j!cx4gLo68^DI
zl$A$o&9fAhMi$--&(U1-O-5XX!c8S=Utz0C#A&e2reFZU`ft|7Kd4p|7C)8m2|eJY
zJq5xv7g^K%|2j-e12wz&SxfzI-+09(Ubsm87<B5JBym(Uu-5PKDe|pSAoN_ocac4`
zC9|XJpeIw#;ZyH|7azJx{UB>9n`TcUr*IFru|hb?q>M`^G`+T%nMSc1-Re2(Iun@`
zB}g{gJU0<!m=(mGz!*aEw&<2w_gnmv(nED?zq|B+<dwiJJG0tkHJ$gCLnUb*?;-dL
zdrZEkpz{B$N1H~Lrj<{V!qX#*>oF638%-Lz3U_aOO6qS1YP_|QF>Kvhm-a6IXy1tg
zoey~DBKJ~E?rclfuzp7OUTO!lpcnZr1)A^{`AVfLz6H$aAG&sFEguGhuj~Q~8r9TA
ziazHn^)+exVWIw$q)iTZ^%SyHAXHiQ^>cIG^XpL+|Fl~2e!}XPgOY}i)6`>Z|Fmri
z`4=p8YUVPqeS<zeDc8etYWKBqfXQJLK&!?XFpSgJROUOP*TkX?w09`8NBf_ljeKq$
z`=3ItSar@=9Re1ubt`i42)o3ye`c<%d~eBK9R*GG^fQ;abT;W^7V6cq3fM~%_-t{R
zrqsv3e)TJQ@2rAf<B*xNYN<iOQ|=1Up&KNkqo#{V#~3jADN%t)E3zCN<q83-2W1T{
z6e>j!B+%IJfGHcOMS#nrCL&OOW81`{j?mI93OF(g!xOwX|Hv9*zlxZ@`7VLmg4mZ*
z%x~$*gCA2tu|f-ci|+0wdIVnj4%EwS-i|#109qIa$d!3%s6uI3=X)<SM`XI{htrqx
zwEbuyz4Q6zotmn^W5JyWS@Gw_Q>NSF=2><1MPS2h<neEjCE#z55VozN!#2NB3)?1i
z=v>$Ai+-U?>C3-xIdVFqdcQD8&63S8q9Xm0mmU6NcC)WlDg!^3W^lC5=wF0sP<*W=
z)=GVWczSITGJq&SF!ML!C<|@EFn}dbwMRHsr2@W&`Xwyy7jI=06pN2^=A%>?tWiz|
zrsGF20Aa@B7&JB9#{p<h<w-)ZHW0Ez=3QUNkUTSlEHP;yE7lU4^@7ajzXmlTYK|@n
zNetT$MDt&Q98?KNv99E*)Lfbo5=lJ=;zjr@gRgs@l4LZ|r7kb8Kc4k4%?lrhSNQ-r
zC#ZnhzW)$&(4tFG1a9LuZ86#^^4~W76Uo<lF~91Y@^Pc;ib$n^5OAb6I8HkoV%7Ua
zptRuBp}Hd|W=_*?8+^-!D~mCNm|U^HxuY6dYei0p`rZh1gS5gLBpn;)Ecq!)J4DpK
zj(S`>tNVRAq-<j5#$k^aq5IYz9o5ep6BrPHbTgu+MsAY4c{eA-Rtq9R4eNBR0Xp;Z
z7HN%Nfm`%}hw9Evtn`7ln3d5Msu(5JR*X0Z*X*Jnk~lExX|0iq#N83>n+5zio|pDl
z_>x#5SQJOL2Dw$8nu?9UztI&U><%)pJW2JkT11DJglHI$*(nsY*T2MVi}Morh3W_V
z<9&@lN!bfhSadSKyuEg@iK4}y_c{#3zFglh!|oB&{U0ZCr$cgNymfS{TyUtT-qe3l
z<Amw#j&S&XJ&MW}rX|C}0xg)4A#GE~4#lFm%i6BkEE*%52(hhpA(TABb6V-{st*c0
zZC22il!(Ofmhbw^h{nY5{c2>1cbSp1a7_bExOmB};BZ#AVHQ!RmHtn?;%Xze7+L{M
zcQ<nh>zG)LW~Y{SyFK}OU9kO0{)Jj_<+O}w7egfQw~`K^wa6|3%TT?k41bzHTL*Yf
zj}tfQ?h)oxuP^#!wDtCjHYVNeFRC-XiP_(R3`V@FQ9>I`&WEmj!c0er>77jjfb$|c
z6<wpk?>v^To<wdhennJdY@ZJ$;@9JSN%_2Bmc^W20WK8+F>xQNt8-Rdfx)Hod7Vi+
zbz4THz!8ct9`KJs(a&^tK;xR@(I;)mv)Fx^HGzDN(^iRP<nKI_&`WyvIqHCf#`$&M
zBtgf7Zn?R`Ar^HrtzeD}o*h2{G_xNr#ggj4M{LkL0ByBhWH&0=m300pPgk{b8S+|1
zTFTXq2jV69zfugGE#^{}4Tr3VnjxGXaJGsB%h_on(4YmPxZ;tPG*2E3QeuoFbs1}~
zDg%Cs&wrm8Mhu0J;AXiRoiD4)x=K~1m!zi&T*b8^#$6pA)u~)mz^aw{dbjfGrG2N*
zN|X9O+3iR({No!^$sB)6)^~lZB-?Sy5GfM4H^5}$30QjicvQAyBK-RROyg~eAMMHx
z4%T_q?!S9T)*^?>e{!|ZwN)28|2;&XC^dDjmk<sC71~`p*)A1@b)@nNfNS9d;RT?}
z;uMwC=SSxxhlQKA4i*LtOnbPa{}&gM%p2R1k%bL=u3x%a<+ZQA%$)zZJyy1VhMxBF
zk>l&I9&kXe;Om|fEk1LNwuce8_PY6;yf0%|3BpO}iS}f^)gDD5r%h=ooon#QqrR`Y
z0%vTMh_Kh%Hp%rh+OV^i#IQj0Fnb#a^AibGs4KX(>5lSZ5yYLoB54Rd{2%!P#ZnKr
zKYVWYdrLnny?tYDnYt+4YJtswAXO@@KQ`=I%X0%}LU59`%>s-_demG4dS^8sz_nTL
zD_e;@vbA)Tg|rMQMywU(HJOWxu*?QC{wad6n!J{Of7}qE)lpE2pn}i5p{uR^`jb#w
zJ67~B*&<4C*k=h9(VjcRT4zL3n>`wj_BGlr)TRM(xOc#`-TQI>`xB|KL|Ch&WdkF=
znGLKW^~=6z!Nq}3?Zt7BbWVo({kYV9hQ&X8yKLXR3$F*N98Z3drJB~R-kqXTQK}PZ
z_X-n)*BHH>y50*7!KhqYyioO$X{N(>Y~ZNx`_!0QJxCxKO{v%=ZMjiuMA_puY^B%Z
zRJE&9wQv^JdB25o9Xa^Is6(OWNiORN&ed)_(H*+nJ)`L7wNEL)#g?LWf?%SYK~18G
zBk$a|`~vTcQo=$`Enf@i`E)G^)i%6_-~H95N;23E+$vkXMDW$V+rqv2edne|l;7dT
zxchZW)09mLb~}W>?#lYcuPfGeD@Vij{IpIlU@BK#1RDP0jQ(*(xmR<*%!h@ye3zRf
z>(T%RwV%0HcR+WX$7+02g#5>KH2XUEV4-bl@zdz@Q_F{W%hFf`c$L-bsGLKXre>Mm
zZYJMP=jr$va$fc0(PDjwx7eZh<;gp)Hn)H;W*{k#)4djJdNaFCuG%R2Qr_w}sdv$F
z=lSx-J`V(3{ydc2cciU-Q>`9l#xJi?p=d~>*Qv+M#ZhsVUT0W%Ro<Y_()VrTn`bt5
z4&o@3IU+6Z8lqNvT=*UXT})^dvq7o9_HFnuX4y@2yzc_6!(h8r&Fa10Ph>Po$2*Ob
z({^9@u6GkABR1+iR>^?d{3?~Qi5;J;ib)C7VBM)?6#Vb8G4U_rqW9W=dU_GFP*ik>
z?bXHV()-h+Sx=^E#nJO$NmHf?ENYNU?b{;`td7VcVUv!>t|#GbL{XjO!O4xmLnnUG
zySy0EY;jPYo}Tj8Gge-g_Y!m^Gvlde`Mt`fg9LCX8pOR%?D(v9r@y3@4>?&J*b8<!
zUYLEmSmj;azFOMYImZ~QVHQUi?f~-G8J|)L(crTh^;Lye8zJsfxd3{1p|JSRINoyC
z@4E~YQwmDdE3+<(iRO?@UiNCXn=lCDryAp^0k^_utpM;M#89`-Jp`I@wvVMT4gjY1
zVLUH;RlP_8hX)0H6oO_@F-^)dBok#TZykk>)@##&HrRx|29~{M(j8{IDsMuYKRO=U
zcUfLpemz#Jl{0!QBfF^bMY%&i;R}3C9v-Q!eKdS-Gh6?(QTT4?uav{S)dRf(CVjih
zem7=dN7Ebk8UNRVQ)zg6d+QwVr=IZ1t?--KWKy6S?>$lJieYv5C#gUX=8wvdTCSOW
z;T^0m#%dB&72(Ym#z#tXuXx`&&g?IgrzMb0Q4-I7hn-}uFU7K}1};%-ukmY+@Vivu
z{KyqyFca725r;b?W>7|~X~OT(A*o-s_!&H=gUUWWnGoI6a;5wy=k-GKs9($&Z{pE|
zMHPxhyZ24Z2bB?IS!SnQw&B?o`Ff%8*_D19f{|gUUDW^9Ze6NOmuJ`If|RG5SQV|L
zl>jswk(~PPa4r%@f~mbjgA)Dv#oRh8wXn74@iscXBnHb=RYxt<L8!<V|8J}`yCd<e
zl#xVO0s1L^h`o{vDtyNJ_1<DtgR`0VvYi&p=^uM!=(*X%w?{#e$wZJ%TT2?A@`Bse
z01;DM<oimJ&!_KUI*LarQg`>(?1+UGNXlE>Yfu#$+5e`vW3(6(BwP^HUU&$qdA}33
z9$^H2FF%vykNldoJ-cUqfZVa+vNfPkf1+vj&?2tc{co)qNd@52T9FcXvr_(ZxR=i+
zR({t{+!XoRSPNk(Je0t&qqn(72}l^S)5S}ZxeC2A5yshoRu1r&wH+rB8!Je$cGi?(
zM%q^dPPfOyB&rbH9a#V8i=+x|p6<w-@5ER{<wu#$34pb%3Yw;Bi!hY`6>ib~S15LA
zU9vPh`~2#sGnF79So#)tz=Mem;-{fix0#+MoU>lOl6fyper?QM$Uajr+FM+swcQ0L
zgcsq5TT<Ig;cFL&u`lDXyhu)m;)4=5c8<mJp&P;XOtLR6Q)@G<)h~JQ(Db70pJZU)
zja~Wa3q!)iloAOi?mqh`nytK4XEl=|&7bOfjabovr}x7xJTEYYEd!oo!%D=9uwq&F
z?ycch&?xpFe)R8R-!n47?~8aWgGKr2J6+QoQg!;bgiw?)T-DS=S<P6L3wd6CKa}@L
zQ4NbGKe`RW*TQSOWpj);Zszc&Wd(tKSGp#`i>1S~MEXN8r5H}Mah*QA&(9NM78tXi
zB%u2x(TAhJY0J{Mfsc_=Q_f+e%3DU(ZyVxybB{wZJDB)K#x27{w%xH@#xST5%Wx@7
zV!5FX6IpZzFBgVDpfag+rjl6b!f8sKRfb=A8v;AWzAb6LApI_xZ_Io~Pl5Ng??imX
zwQRohLo(CahB7G-NRi9aYNqF}z*jw&god|!Ps9h3l24J9!J*dV3NNulj+US1xL`ML
z9U$S0&5HdJM*YX6PIv^Vu|!+Ij?>Jew_cD0Eg)Z(0|#G+|KWt%?F!|0iSJ?YD!Qcn
z5^FfV3w`TQnY%NqWxfl$T1JtRvWsx9WLzg08|WK-uAkxqku`+5G2{3iGSlHyBfZkZ
zE@I`Eyy&{fYU;lukUWd<4RaB;3wwSD*|Yzbwbb-w%SI*iW7q(o1~MNg-jHbMs}=*!
ztv8Wn(j_ccJ+b!*4;0kR_CaJWc}h@Ri(ma};w-QAZGA}!=Go!T{>B5wSJCOkbN!~z
zoX<dyPKqHai;HOmN`w-~H{ueyAX2VgH+4Ivs1B|Ye$#|-)Un_v9FN19+$3hK)P;&u
zj|m_{qy<ou^qu>xFix_8cO-3Xy`sII;=h`zRLoG>K~u1LVzjP)(k5mO9QJ5U!(f^6
zc174p+sb+D;aLBB96UPG8^`iE;P8AbKPb_6=ngI4A{nbPnpm>06&>()h(@1y_C^4p
zxok%dnCsuMHmIrf1+%KSqP}-D8$ai4O0pwDBLOH}^r*O?x`XGC_%T><=6Sr!C}pMO
zlUBonV{Xy#G?c@Q4vMfen(F8pMef8cK9LhhVwBSWv@c3f`4*4^Dz0B095|H=)I&6=
z^>R)}OrsiSBF<aykoM}(;GP%dOTIhZqN@t~SA&|BIb>t?pZ72i?e{0?DgNkHpocd~
z<nNsuE#hvH+_^5-Pb?1RkxkC<;UU@jA+p*e-T3@Iaml~WDW&rc@J5oqBBR;lipjL0
zsQPR##!*3kjR=3^3GdChp*5<tGBDAAPn*32bb^vW$K4_<me28fOYp@xIfO>nHS-68
zUwrS*%TjMMPwivz*j>&&g`zdPwub^Xy>$|*4~p=r&IN`&)@A;1Z-Ea^=9+og(<pku
z2eVCp9R{|cYY(T35it%X*Ls%Efno|jsP8S_1~30*;w$^T82RF!+0jejVSI*f>3tZC
z20>k9@nmAyn-9)#lZ8jxk9wCt_wJ2TNzX17!|B$%%{-zPEuhbh3OKiSOzZe{9FR^-
zLP-oZtLUmvK)ZzzQw03R&CzSH8qF2)Yd#z}A-~@A*_^e`AN}|Ob;m=tax~!Sc6+|9
zLw=npacJRO(q!0s4hQu<w9r)Ji#Th7;1;PDhsf4QCPOG1?(ci>*Pe$>?yHvW%PPnc
zNs*l%^F4tDby@niZ?T;xQ0$hhP(kJtH69yH?R#q<!vW%^`Vf{teZQibL)dGtQIg<`
zx)69t)3YJ+d@B4mR$gPZr}buhR;*Kk-gRBb71PltoU#^3E&xZ-Qt|L;?ZT8b1AlV-
zL|Utl%wkt&W+1$GmCfhE@a<V1ZG2Q(?3Xdc&>x+`krqWv42$QJw0d-O%XljI1Ja7J
z?b{_1jd6&lCm;H=`EWN69O4{!o=qc5pTv86rkfhBA;Ohe+wT`F6YX0$B)T4s|0=#Y
z36U6S%VYRuLWW}z#yWJhnHWy1!ePxq6yaivu?G4bFl2+_m=GxNpBzbMcHP#W+rvVC
zz5&;k@u{)MW#-usqiij~yk<SOF#wT;iO2mu{oDav;%s*8P9HIG&XGs8xfw{+bQQiA
zj|KI>4XeuR(OWw(F+;>lyQTR{xO=+k?OwnzWl3APR`E6pkzn7ra=Q5cnVxuLo-5?w
zj&l4ZuN1HKzIueLcM}q6PwspL@2!2}#~Ju)RDK^n!^DO(CVZ}h=f(f2J^&XLz~#+c
ze)lrqwfL1Yy+?F67D+t%Bn#EQnrm-pa^j`*HtpAgWy@bpxzJDK4B+WxUA9IEB3kEI
zQ|}Rzr?d331?Ag)lV@KbD^b??j~Jn8mX~2jg_B?A0FmOTBcF6GG^b`l1Y+0}V&bBl
z=8G)fK!(#fQ-5;?gSgxz%T(?aE44FcT1WU184WyrZ3-%12eRbr0~qoA@8_5EBF*^n
zTKDd5{E0mVQJq@(@oV_S`%4GW;(GzLe|;Kbf;R|rW~?CkyaCSR#Eoq6vFzLuz-PWw
zOu+(s0kRJ}A7*Qv;`|u%%&c+Jw>b4%4QyY_Z!$&hDX`?SBa$pE`=U2B)RX*;*HE#y
z6g@7D5!>l6%R5oj0}!zCZA#w;Y`(-~-tAgmxJR#Z);W@OJ2jo!?||2vY;hWH>;cn4
zeGU<OyqKD}GISeaDisNMy65+XOejPcv6JNAU3YquT{%PrvOpx-^3PiffyR=q=ti-e
zoSanTATXMG9~;F*OTzAGB9kFb-ZjqSVHs5_+0zm6gDjQ?oDUPP{O=4w*|#_Ku1BGN
zWPi2+yI}fxp0Wa~S5zNK)eqO^UKrsi*@?>V^LQT4*-CrlYcccZ7m<@9@?j{{jW*_>
zj(#cnUmv+7+>+)jz4T&+xqIF$3$*JWs=w$PJrc1V{#tg^^RY5aF09AYTupwZtpe9!
zFwgD{yCueR$-eC-fqz~UUb07#WcczR?jLQ5;OztMcZ)MnWH(+*0S1(ucmAXLKc8&s
z5z++BFwzypFVXs5O)xv>ia7N#{^R^$-wK8K^V0#E_*+;FHS6FqBV1FNF+Fb|oyMPs
zks#`ZYFj`8!KR^p50CWyAq50uQ^&*nkU*;{)*Q#;z=*wL(eE#@5W->skh~-vkE55&
z63ri=+sz*myO&>t@o}`wl*xU^<aH}OkJCu<gJgZF{J}Vs?{q6FlFRgU8jn}15orui
zeT2p#6rF}UKj<kF6E!{kI6F}wEmtT&m6|fLwutsR0Fe+i!hPXx*rYti%r=e-KdNw@
znPg6fM)OQD*hN&(<-cO8P6r!(hwfdM=JB&b*yi1bn9?`8L<-cPpRf{^(6Q*$^bmA%
z@GpLM^-I>ARybP)ErXd+>x#uc*eUzro+=RZCg-^hF$#yPJDX_(AdBr(tOL}3ov;6R
z?8D_}s?po!)-pvOmr-{uE}2DT<w-4OYja~`mW>VG1why#J>z|Gb~gA=qxe{zGsp;;
z|2|(0xVF?G0n2`A9vLBNqv#^pXgKD^M{wB<t>&#`gAi#L!}D4+#?WB9G{BM)D-W^D
zJKq!Cne+qW4beiw_RqD;Iy8CH!WDJ&CXYKE*h|KA=tl*Toq=HM9ZWLeJ~nm;$<F`1
zi1ab~jf!NkTjsc>)6tzljR5jrJof4xZrSJ0T=VhW6TIvd!Ocdf#E0EWvx8(_<prfM
znw(Q*(j~jX<djLX?LSngiYlMby({M{La7RKEXH*sk$?5RRUN^SsB4PAcP4#RALgE9
zh|CQ*hd?!PwKIqSLc;j81|LWs;Wqarcho09Wakbn>LS$MX*b?jj2X(bYVgZfEvqis
zjcN%1lj<kCybPaV)V;bbkzjEV__ss#geF={+zVZWH@?o|)JRVK-7F-kNJS_K4*pyy
z{A7DwXiHZ)7<PQbvnQPsR}Phabe1A2r~o|5?!g`Ak=6IJ6XW6YVDM5Y_OAyz%0Y05
zP9#%vN87-8c(h&ap=-i+D&pZzd*!?n1)`Moc1**J?YzowFH2Vt++9bRv9)2hGysgD
zq9ZkrULjJvRfa?VYr4^>M!oPomva#oEhvCf8h7Pqkw!{>^SWUt8nxY+k~F}jHBKyR
z!G!`a%HVMdA$NLp(w<em8inHY{$u3nu}Srn<E5e4<YyK238fB^y|%4Rksk>*lkSdl
zJC83{-+~P2^pWO`3o*ae)p5}N{$q7oVEkqdv$FE=94L*f0LJ<z^L{RBj0&w5w^IXT
zb1n>+Y@GyUN}65Dr4Yh(ftCjQYn)9>cEi&u+PsT}!yyIq29+Z0rKt9J^33%_nvz+>
zL<n)7t=Xko@M8<sp6!v<PxXH#yNO10aZ@%h=$*1#AR%*Hf;oYfnnMv5YX#_?(Z7{Y
zQvNFs(E(m~2qqob_iJp%QB%^$bR>`^IpYgDAGFMdTAw>1u4cB~&J8A<&*ubR3Fe&$
zYD)9QyLaZeVjLO)j@QX)ony<21pkk&ua1kVdHbeBnkA(>q){ZKQ|a8LLt0`<3F&U6
zy99})ySqV3x?80?UBdTp-@oU1`yW1g&d$u4!=9NrbA98IS{6&}(4-010y^>pkaRfo
z6GHq|lZIQXi;(T$B*$m*j};gE`i!VV8ff_PlyImJhIyCa_XE`oZQ{k9UEfJN5-Nl#
zM5xQs+WhyXq38d;KFR9twj&ziS+t+EeN*fnqe8liee6Ic#ZjlW^AG#F^aTko)tOfe
zsdZ=|5CKE__A^KpRn&$stgA`W=#)tjjTR9J7lQ4KqM|XPnTpWHk$9L<IzP5|`3dc&
zBzIM!fs(FKzcOQ)?r-E_t~E*Tm(W;S8KMm`f>B;aDD^)$4-NPh<eFI;V*Z09ZtBLb
z3ze3_5q6qONV7y0^pz=~LFLCyYFV<KHlH`~Vk!g;7unyJ6Qkno7!V`=S_McH5SrE)
zgl9K`>8UO~CH31G^2*ezJ>_3i={K$lyYJpTn|4(sZyXxvMG%JT^USrS@IVZ*{<*LM
z_$Q4#+UMVxD=S5NcNRwmEqNIByhbFr+%}FbC^&}JA8<*m{B8nnbc>qQpAacb@JeiE
zf{O8Z*O<2xU$zaR^lWdK$-tH_iP{xROFyzhP!V|ugYyf^NBvYHMcKz6>tfRATVUB(
z=<>)(ECms-`@&nL5P9S%a?0OArtWdkv7Vgp>IXmCx8GK-1hieF0jiL=3=yr;<;g55
z@hCxR9?o=rLGS@f-cf%S3X!H_ObS(`?PXD6mTaP_ovNcuA03VdKY;v@{*k?wOUbRc
z$>a>at}!Kj+A|te^E~L~wjXLAe_AGdKlvhTm&a6Et==9Wg>EnLJKXK&S+B3~5&Wr=
zmi?lJCq;t4ITZC4Q1tFC6HlWHDH^sb%^ml6J&-17%4*B7+r*qCK79Wft66ZIJTx<L
zJrp9Ma}|+GNcUU2B14960A|5UbsfM*H~7YlKXLt_=*p_THI9^E)+X8$wyBf~lDtoF
zd5NDV*y1KL1Fv6Zt|3J_d7EX-{IW8Y2sDe?!WX%eTduG|Pa4=m=;FEZ#WK|;4n1st
zjPhEiY{+70SGqFk$(BP@)t<<BM0c~Z<)a31JV4vy8~NlnwC3vm-fiTC3q}l^VaL*1
z%S^l;F4R1E&q1~nzxjG2`8b(tpTKLqH*KkOO>BKurx02C`fU6-L~Lv6-IM2s@9o~m
z8x#2M1}D>H<S&5c6gBik5LWIP(pw(t_Sz)kf@<=@K^WOl=52pVjk)({FVM6nyq+)D
zi2Zp38!w%Z*I%a_tWX=z`Zp%~S)tpcVFw6Ak1f*FGFQ{6CUCgF^6ra~>H4>z#gj&7
z6$k&=p0<mQN*`a;EwXvO>uPwQcUjOIM{rZaF5OXnL6ORSG9=aQyaehraj$f&sjHYN
zlIO;8rZp*<F?n70`8JGi0C_C2IOim3-K%9}RX(!yX|`yvY#F*<EfQ&c?`mv#*=~52
z)*43z1Y67tbGM)V|5JU~$amjS9&bXjj?;Y`An(o2_m7S>m#`dD!fz|4E`Pu9T;=_H
z2&-07Pf$^>pLAPh{`0tSUCmh5(=xj%oAWW>@978F+rC2;bJQuQR%~(uLd8w9jRLe3
znTq$`S}f^xb}`k8w`1o9HJ^%D6UEd;2ygA~xcG#U(NDoU;AZkY0x12zkhIoT%=;Qu
z?!N2z#`*6lMn<$+6Z%~CWtB&Z12}_ca<6I6A5;<Ig9B(A=DphtfVX^zPn$!iM??K!
zX&+EPD#B;(+e!h~KP3V+BR*-fIt}dq%!Y>0{`^P|Y%|`_S&XH-j2|x65=`;P`sH(!
z$*N1z;m5~TQH{_?@{<Shx3mk=0lU;>AjGbzpnv8u(NcfO2<{MR(~iv#l4f9_H5N%O
z(mdirwI|$MYu2;*xyC4D6V7IMvWPh5C8ty~A#ijm6rUIy7R10%Ht00+Zg3--Zsl%(
zGY)fpmRPH8tu}CECF=^f<Ajv^?w^e6GoxudJIc!q8rTY{uRs3ynqRNv+`k<oh7+ek
z^qkVSpGa$Eqk<m|wY>#vn5DQU$uVDESF&@@YQKO987XRX)2ypEn51afp!WUcmpdvL
zbLw?FD`W~kh|tjbHBFb;$^6o4#B(anJ^>|Fp#=s+(oB;ZD`tZNdEJ269t9;-l-sN0
z<9A4>4zvSSlk=}l<J}3E^6?x;Uk$DlV1kRnrTU5c$Gx!$(2<D7%i(LM*;{>(8>NpQ
z^T-Ho+zL1^5+r=B4U0=#rttqh6z|0+-5jZDxfHyW@IH*RC9o?3c+Eqqm4wg6z7e_8
zlq8#D&ptd}P#|x7XREwdUG^jYf~OT$a;(s~>p}kwN-0B!W1Hr)QVp7cF!We9&EvYi
z98GVDkiJE`nZpiU22HuE;d#rxFvZ{~p?b9?*ijtD8nQ^^73m18{-klH$d0q=xP(}~
z!uvcZy1i^mX4$J5GTd{*vtr)<Ar-r)ktCE1vyZ1*AZU=~uK(oy!omovVGB<r*^oDf
z5zFi@m&`5kwyLSWd)_)P>8?WbGh<V(Qh~t3jg32Pwnp3Jh-=Cfj`g2yG4-Ao$Yw6H
zsBR<tZ%<5*i1!(6==V@BZMsD@C7p(7EY+RY>s^bmj_gookpsdXr?e+!+Ba<Aed|JT
zqe1zFSR{O&(kI>ziBHBu`Kw|SBMHdM1E0Tv6faW-A~^S-8F{FB1rW!l#m*!mwgY2W
zw1dDS4m<5KE3xr#!`+@R;PXhK`%{~Dg3aWdAWH_`KW3$(C?tD0VC|xg`@GRC5e@j2
znB+U}Z92C~E+^Kqe*^#kz5IM4+J1N;_@>#@J5Iy6y?v47ZKEx$&5%dIuEJwx^#H)<
zrsrR=B>oJ^HNf1zC8i*ni?RrjV@gMOC<p0;+0}qvg>2H83Lq~rk2`(qi7;bY*Qj75
zQ1W}!3}ct(*9jx(b%=d+_=0G5>4lz|<)vz@;u}P`9&HV1)r{5zt5;&6O2q<Jg}OW_
z_@~)23KjrR$oZE0`)++2Nz|TMx(Y7Zz98uQ=u?jead@{^ZIJ;||J3){f6s4pLjgyb
zDlq8lmV1ehR+wW;@SUl4n#sPvx_8nLR>xPHbBQbvm_lXt1ml%*qk}J2anEeW@|V#M
zXg05DU;^1C>qI7*cAJkRdF#>QK}2*d_tOPaZT%fZ=_dGEVY}f+&xab)DUY+ao{k(D
zjpCu#9aZT4NwHf}&oKGjjqL8)k#8z_jEgyGS{f;{`+k*VfVWQWayJ@!r*dYQ@WMDF
zF76nr8t&4b4(w2aZvzQ5Rlx5J+~cr>Oq*Kg5${S}EeQwEuvEZ<K2A9+ox(nZNY{-V
zN}|WCM(%kY&a<ZHr)zS@hR+Y}ZTgvc04BmXp<5bp<M_i$kf;BAW4iSac29>a_`K^h
z!}Isuc(d$MM=^8VV6c%>!_;>6-=jC1h8tJqg=9{FRb2Q<!m8p(=GflqHn7y(%3$Aw
z%I9R4fY}kI;(CcsRB^}(&0(Z8BQ68`ANH=8$Jq}-yqe%;x81LX`|n@hA38_xVDvs}
zbMdYBMX=&0j~}|%tW^KR+ivcu5}S)0<FC$Z8F*ZAFLpag`yi}Eay{r#9Tb~K^Jh%#
z8EDYPqJrNff-%VX=jCjDP4KHgY&h7o^tCa0Qks_^w}U~?$w4l{miuxK<vYddAO}M}
zH@$LO<IxX+qO%JniUR8dzux?*(wtHk?pVTc6gG{fFVvP4@buLc(j!3v#B~2vCj3qr
zh?@YcpO_S*#9A;|1efT}^GdX@>_vdITKmBdo1e-=v#u4P5f3L|)YrnS^!NamMgatw
zkm`TD>BSrsq|JACsD(~bwII>NgQgddK-n)2s@px*vnaMA1$#tgh-O&etoi~SQ;YJr
zVGMnQ3Ng~%D|l;-*k>}7#yNQyv5p2WidiEHQ0UNKMN_`6W!$8XCQ=RK+DE%1gn;I+
zqk?#oV4T1%x9x83GLHyyS?UAGLS)!VEE92(UzuA1Dhd{#eFA@vMMHvDk_S3@KP(U=
z3-;<p8pRoFq?U1Vuh^0Cl*|g);Kh43-5FWCwq`ie1VBMly7VFGMyQ$>ZsS>e{EwWa
zlT-Qt;@Ps$Wp_C_T=tv~A+sp#B|8847Va@N`c)>W7b>f4wciUhIn&@5P|+`0`=o2U
zzj<QUt;GF})YM7Z%X<SX;1Wn{((jbei<?)3VWaQ2*jUv8VAg2>I6Uq4<jf)AS)zl<
z)^{;rXsWorcYmZ1cnz*4o_qC+{%6ZM@M!Jz3`KkunaxBy2<M{kN~B~VE&8j<V?jfR
zVamQ9ir0GSG2)sX3#~5FOV+tbqL3gX9;?VXs=y=C9PJ4pmw&bL(-H;~+`gI;4<@>D
z+Y!`zwnIxa`w@NIL&wbWO|rmy{gOQ01LFa=m+rkSycXddGuQ`nB|nt8B2Fvc|D97N
zk3I5q&yb4xN-T9d|IKJ94G-PBSi7^%R(dkj_ei$b$FVFfSzF53Vi_m;TAJuX=fYg#
zdAtMe>ff&wrE|IsP`#0A6{U~Z>qDa8p^dk{yiEcbx@^ey$_hg<NbN%UxzT$<tsf<)
zy~|BL`@KgKunOvG9E2|fcD^yk6lptL_mk$eiMhJ!R!OZ1rZT*?7tc$tAA~!N7!CX9
zdT&qtcZr}KTu*tTNmysZuLxCHCTY5kf!NJRVz*j<{?bU}abl~XH`EF-ym(joJS86q
zL7>@O)^pO;jTz_u6PLQ$BsaxngSeYe0{j8*0@Y1hAn>Dvh3I*UuL<ah2(n`%a47Q?
z=IzuceZ(|6xVvb1b<o*Ru7>GPl4o1_hXN=Sl(z8UI>;322}xCXIH&d*>kKwW6XwS5
z!DZF_-^qDv11Qu@gIvzvqZ1WO|FoID!zpIWOBPWUnb1{9gvS^fGiJq-@QP%4q@ip7
z;-EXSz7A?*`RZj3iQoEq*rIbx7B16Y4?;>xf_V_i>hrvS#Po#QWaVKXl@n1Qy#4P#
z@3eE$lXWH|?R^(cSPU30__9>(30rI0-UxrNS7JfozxI0Y-x{%F3@SL3U#=O@u|Tp@
z`2>xU8#%~dX7Eg(G*yx-bP3{N_&;Mj7@;4`4Dv9xqyye?aKd2|yY}7-Ze*iGv-t!V
zt;6yJ6mj)M+PSAc_QT5RBzaRxu+f6eK7O`RQsG_2DRoazdwFd<eCw|EY)*Eh=6xx8
z`6h{6bOZ(b@w5tUa)hy|`36fK>>oiv75gg7sNyNkgXkZ|>eqEu@37wUCcODKr+1~G
z2n5&TN&ZH4AVW<Zp=d<(-P@$-Z|u^h!AQu>9-G?NHii{b`=-7Nvz=h}($`jE96h7A
zHSws(fDOlc5v}{e4a96ySCr?{_L*!OZzX^;kCWG5L-BHtOd+a{M=MoBX(w77A5VyK
z*Q;4!^(V$GUk8_@!=>dfF-g{6V5rrX4UxDPa+m3ubmkWhUh8~zZq4FkT5eDb+*8=L
zqhT#UyAtO%=1K~&j!$OM=+3GLVJ!D20q~>_d0ydII%BRdeWWmaAB9tOXQmSIVEbS)
z6xP#*9WWR%XyVLp^YdK^XA+V=a<3KYEgnQXW|lg7z*OdzzhnK4{N-`D**6ggZJ154
zZry%3G!!3hk|nBTpi`WO5qBl|9qoq1Udu>qsUeQ(B<!uU5M3@t<n{-0!b|Ok?JsWq
zC(ld{1~Yo>5u4F8Xyz<bvK<FoJ)kH4-c|^&f<a2d&8c(2+ueCb+J(!mVJu6c-Ib{W
zPr;gRcyso?GdC1bLN5Fwr}SOZ+3z_JA;A<0KV9HTHG?{u?h%wM(FZ~j)McC?`M8?c
zOIUc~bzMQ>RD*&CQ!5VK+6Av~nrRquj<;W3<E!yjNcdUCDV23~^hw)IYd7*C2GLZM
z{eE)~HbL*c^_?)$^ar>~pjjNLWZ1;2=k6fiX`a<n^k_PNlDAV;`(g4!u*+zGlu~CA
zR7fl$K9-l$WSOW1%9_0^W^Jg0IlU8Jq*S~{@Rn7LfiiY1BlW5@)%fl0)ZBNp5cj$9
z$NHb+X1(sQXa$%!{VeJND<QG)T)?NX8^h-4$4SR&c`ap(M{@mO9g?L!Ti>+jIZxO0
ziiXB(+E;B+Ap6>>Qxf-*1x_fjzqWmOMf_v~WeE{e#FYa%f%&|TUw8kiL2vJfU_Hb-
z7-3ewrDU@;%Jp7_gM<CL7GIs~DV!y1%)4f-WOW33@1=SCwj_Y{lbs|%jX!0~Yi03G
zHA#w_W1MKM$;0ACouE+KSgyT4as%B1mSj>NU5rb(i_w^~#Z=ba<ZXTJ1QQMT?+gqQ
zh4ex$W~R{hyflv9kC$vJ)&JG-T(|wR%~5}lH7h`4vaT*<bmYLRlGafApm%g)tzr^7
zk}~V_tIT3-er8UnG$e9%93rGqPU`wHRr><F{>7}xavULm(OpRaKYk$L+=<r;SMiON
z9uwBRYVB`;+V1wvo|aExp#m$oEDkQnKv>+=@=)r+@Pby)eZo#5c=AkFNizO3)a1H4
z+9qAF0B@v)YFN#qrh)PCVMH(02ah1VBH?7hNBl3j-pwUleWyUFOF*^#ykKdFJxob6
zqtcbc^>%~bI=sgtc}ZpV3!h%G|JO}n_bQMknn8oDT41ba51gl-TBwwzdxzxitJ)JA
z`by)nGai+uOh+Y;gaI@s_BfcvE|PrWb;)R!)#s6O@m)`v#!t`YI!Ha#`{r|9n!m|C
zdY?x*uzoThO<V=7FUl*`9$559W&N}zrBZ7h*C|g(vkuIJ{87X{&_<;#D=L0~K*eey
zViU0LZ==Cgh6N!L43u{2t?N4F*ulI)D_F*6Fb@N!Tcs_3{B>Wm$DZF~RFkc{=U6L0
z8O?Y-Z{qqI=;ebp1^ZLztB2m{O}cV<{Puoa^Tz#$#3Xkvf8T2)M{joa#rw;;F@Z-~
zK4VfNhMtHVQN8@bw_fs~o4wD0`_&=V1s6qZwl29RdThdFedg4mlJQAZDMtL5wVb1B
z2PUpzUSEHsTd;o7kV0ET&Sphv0dr_-pEZ}cY962*-2}P#@-jdv?Hee#d9nI@i^<@6
zcYxmxN3z~*EG1Y=r;UDv@m3!j7pYi$=*8b`x0x2>P)x~H`_f#cz*&<>#Eo^&_$A5O
zB!u8uv5M5KR{s^0lYwlUTjeynWF*{1iDIcv=->_Ybvy=CVyVI;BG>mLKRc(j=JSuG
z)7KrE15$q@L<w!FodGiJMEZq~*WJ4pS}zyU1zwr??g&|YgD(W5qf4@u<Z@@vSTjB^
z9@H-FoWA&&H8v`{g*~A`%bPaD`Fl@uLhcggZH|^=D0K1J;4Ag?wsieX=4}2~>`qrr
z>|MQn*SxB{lS{BAFVyGjHLTX!Pxe9e$jD*@@x(cjOtOm#<PoOJN;8y-x+h-Cc;2F$
zC%}B}UBCXe6jfM!WBpi!{X+?3kY5&8bl{E7Oh8Y%C@bvt(PWN%Lg+i;%Hf%i55U{Z
zTJbMalfbSy+J$##mj1z8kl~|3IaNL0k)R>HEgLNED$F|B#AC+Kk5g4QVK>o3&(4Dw
zGqJ}c!eYrX$^xu=!MbWFCc<sf?j;gotS_O&X}R+yezIh_b%!jVCD`J1mi5bb{x{CO
z+`AL?@An@`1(Lt8oPIa)ubPwDI_sOalq%~AG%D$jV1=o*>Tz5b-=fr43Y7Xg*0f&U
z2I`hQ?@+_Oi|zaA7}3f=iU5R*ak*jg$>rRL?t1Pd>HqI=@k_MoA;StAceG(mFk;24
zZvAN%zBoR>n?|wbyF9A|(Yp}tFK_Hdi+Nw?QGK(XF)&%iJz9i9AqjrAHUcIS+y&SK
zgB60yJBQ^p4JD~KpD?8r=Ut;_O;vO>Z(s6WCGPVvs*%vD7mLIAt_8lM&;DA4BRanv
z(ER*Ivb;icI%TzBuwytVFt@f9MfQvQH3DKK1+8_=!aRr?cDl(QysI#3&&K^P*(wn9
zMF4zzO7o@RIV~*w>k+}F2vcbRd9qTD3}1`NDL3eLCvPKtdgVqI6Ywe;P{NPs?NQ`O
zrgFxV=|iH`99jI^R$V3+7UFj^m#FMNbnxfnItc@Bu1NwJD}TY8&zBz==(>ezGK-}#
z)~s!FOk>wr2Z}v%brE755^B>4gIxdOnMz=?QPBz0lr3k@3Y?Y^2^A7oqT9y*DhxPK
z0w5(rfvxV7XF#;kB_5mAbr&PxSIg1wZmD&y)CSX~Cg5Q~HEB(8>es$790$9&1nA*g
z<-f7<PqR||MK9&0_Fz`f%DqZ{T-{t9=26~KHan4bq~p&Q%#JDdrryUvwnM$QMp+{^
zcH18bt+;Kj@1eSKB)PugGmYGytR*jtJ4u(j#sr8DCw^gF;1N_DHfA?yvyirrO!PKP
z-Rlig<Hm1MrFDLrlPRLvK9pX46XCA1{#iT$_hNsM5BZ2|m}@p!Tk^)xGKxF3n0CmV
zc6)+mm$S^@Li1pzlH#tAA4TEJZA~*yBQ=9e<DH~+dq+!zt1-p_&`_q5J%diB<)0y+
z?sQCpiFE1#%Q2zZIe}6&?v>y->fn{rtnni5&%pKHl26nl<n0?vzcO{?h=O^{uvGw0
z8pe0byubLgkW`OI4S6YEkr@=G*|>5hV>Bt<8ATQew%2M({akJqI-9LOVyuG<*EO&c
z3ce-MrbpZUN@chBpp~2w#0)deo)=W|7a!0hlmA_9!md}gvBg_WWdXV$H1MFYLY_@D
zDV2(Q=NCaH&7#v^?q!VfZaMCpDF@>TEcpL0&;avQ`u*}2@5EQyM4qd$tosNj<t&Q<
z)uj#4Xf>mn*Cr`GFs46MBAZi5csz*W!?J+daa@fcHR8TtNZA!0dc@)~%Tv++?Y$J(
zv|R=5K-`iS<GSDHWco}qMs8YI^@_#OYcJY*qWGDJ{~Hz%s|A`>Vb+g$DH_GyWhL@?
zjZv!*$Mmn1kD|RYe0k7jS)7Xz*+!1~uT^}K>Wt_T;%cs-HMSt)JNCHjWR7hGcG5hc
zH?a`sM2~3=#dlSv8Z!ye7JmhgdIJ4<om7-q@T;b>6!7}4Q}$bD&vglUd#|o4O`0$w
z_+~6qV4uIjylWo$u(W+4M?2Qlax(eGNHL5A_G~Y(T-tX&$?ZXj{9dtM?p+ZHO?MLY
zBKr?!*=1}!^+kTi3tff?U%`3IW={BZu7!$h4rtrv2I-0>bl?l-Sb;Hn`CWrr+gZIy
z=(_`C@k<ufq{-3rZy~3y?S%{;U#okTlsR05hK%{bg)5TFticMrVC{geydYXDKUi3|
z>32cLmmjDUnHkFHLe^gh_nXie<PNrf)26aOSW-Xmd1nmG|N57Z7GePLuP<tPM$(X8
zoiFFd58zzm9Hh$eL@1)wu;A_Xl7g$wc3f;_3Rh&@**jWEuqW^q^r@$75y7}!kwb@?
zQ*sctd(K?Hz!w)H@hZrVp!-JH>f>vF$!qi?q+pi)>n6$x?nW7=*QTHH=7C|74?YRM
z1n2fpd-_Ez`iVetUs)IW67<?-*5;AeYbu=^C)eAf#fF*>e~PM{{mVRzbuEPTlCy1D
zVeCSkptolajjc`BJ?Bb?H8v_($4*^oI3&$o)sMRW=Av7IB`QDMBiLQGoak{R#EwI4
z^EGInkV>l!33`V(hLjKoM-kJxk=LZq|6O6GqQ4B-6vq+lG}h8HPD2V6pNsVrS3kf=
zTm$3%hfv@Bk*xP;ZPAN9{oPH6pH8CJhIH_2?C8weB)A9uOo`+mf>zMs({%k(z}{8q
zz;$JwpSR$)R_ToDU888}LE&lj(l6`OWX`nIZy-_OuM0?b%?Je;YR})MN!-hM0B}xO
z%5-a8e36QvD!l%paA*wUUrM0rzcAJ&{n8L^xgx(}1D5J$rNU+0HxS8-y2+y7R8Ihw
zo7ww+Iv@K9u0}KiYgY(%r9#mX8FmfNHm|@MR$!#H$<z~Dn7T4vvQRWCYSD)0deoV=
zmwmWE*znyK4Aa`G$`C!CLe3+*<j#P19rDr7sM5RhyY?ZdwNL1bv80yqr^Q{OU!sbY
zc<Nc{5y!trbwiiePk7=I9;5qTW9Bsb@>m&I4~snLK4+|WA{M6IiI;oo@_89m&KYLh
z!~Olk*jUA7#PopmgdxiZ41QY!wQ1JE@|`#a#b?E?B;e7Hr+crQR*qFP`UzXKN~B4i
zc=zIYrl-3X=J_&P{H$In``|72ogp%AXF^_(V00}sMv3nbb&VB2RCo#<c?U_+)*+Ov
zZN7g2uh*g8ISZm5)nvROZhs0eY%<LKw$iO-wZ7(I@EwMyJ{^@r`!_ylxGjYv^z*{S
zfq27s7G(zgR+X2IEyoFxvt9i2#_quuHkqy;4C_gc535P+sV-*i4=`41)3VeK;<A%f
zO0r6(v{VB+9(ILC-uuJF^~-B)G0W>XOK<P%Kx-9mm!F4H`GQlur2E^a9ut)#BFrM(
zm&{VWcTPiK3w0HmT-m=t^cCbcV{tr>&ex3=F5w)gj^lr7sV3ib7L2?wx$!LQ3;C>e
zLrf4esQ%LU>b8}v$0>Z<fVQc5OR0WYV*$*oF6O_!agx?4$5iPgFYuh90_{07!QU<(
zf8UEe&NO)QH&w)No08Cgu4SL#$8(<(SHWit6_b1x?10v#n5*;S==LhV<&Y7Rs2ar<
zhFbd(@u2WKBlhzJ`v@t0+7eUn-3KcAcVYLt@BPDU7N3U-J;3f*NyjvdOI4+28Exk=
zniouNz!wjlwc|O>IUOr2=wRxY-j3RdoX-J7d>6rV3XW0Mt2vox^~z!J;Er#<CcDMr
zbXJv<{@mfh;fp(C0~B8!#j@W%&!o|S8?r;pIYM<j&GS2`Og}}l81?vqql5;JW8P-J
z%v^U(K}g6ORCY3ad1{ufO)l`GFP>o~p-1sALUBswy|)uh#c<He(@-Q(T~pz%rA&Wa
z7rM6oH|VIg_H!IETP!3@iC`s9?~<p8_vOBKn5QP<XEjQC5)|S9jMi)G2V&upMxLl0
zF7D|fAyoh1uRWYi;$~9}anDju89dq9+9Xd>vX@0I?3MN++Bf5c)V$?R^6Go~S=E&-
zDpc62N6i*-8p=NUJg~D7#xu`;i{c1yxX(mZ=~3jWf%W2@@6cb_<0*uD_2LUvD4n=1
zyHWpm@89Y9i^Le-!DL(h_sjQ%hit~QBc|j}@yV~Bk@k=z?2s}ERAMSF5@T8nb_Zgx
zC_7zm5L7jx9&gUdbZw;{^5DF=r&93SB7>T0=5B0S=GX)g2JDCLqZbjX^*4APJO6tq
zjYZCm&jjN^rwx9RlCtijq6BJ$(b9$wk2;t5-l~obX*)u=rbnjQr-=_dD!KS5r@7SL
z-_+w*oBuv_Irpo$o(;??l?hF=#jSr!p))i=`Djr4Fk9f8prQFlaFLXU_&$%MvqHw^
zneUH3?ruttw>K}o7#J96&}FlfpHg4NvYFltrpL3cWQ=fgOSYn&d1$U{Ffm!IZIqGy
zIE^}y&3Eqtk(u4YtJ91QlY{kcQs*sMo_@=t44#l5G~4qrW6Qc63T}c)(@07mOTI05
zzvd1?CGGS%j5eTij{RGSf=4_quPx{Jttag#CVDPJA}Y~mp-jdM;k9#CZ1wCk+pDnL
zw;m?&z#*xreuIQ~d>2lR=I+%t09wsyK5+W+yI^8$`EOI}4wXaRLW6<#%)m`Z`{y5N
zFv)zbxbwe9^M56vBN%l%<$)dN(Msi6Bm31azRUOG+rVR{D?9%1+bIeEPKzJq>F3VS
z$FyO;LT8JR>KpIIh?60gLw>&4@x*>!HVJ;y6~ttOb+V#pCsLPWA4xQY&_A1U6K%V`
z(+Y3YrXADPUme{5ENLD}vy1jWSD>N4z}_{w5{67T%g8oqi~lXzDfY-_lk7n>p3Tlv
z3LeTnzKmL`v23j8rKq-q%`a;7vvJ-dIrdkP@M6UjPhaW>adofAN+0(}V5~`TJsj<_
zbb38Z?fwXIfwqi@;k;ePI$Ef-o+gl*|LfU88BTg`(q>iUdJ5Mxc>lK5?B=K3;3L7N
z&BVCiO`rl88a-&eTtj=UUB&|Xv0%)PaED*yf*FsyQZTq@{SqlIf@ihh`9LDR<aL~O
zcD?(aP1=yrKu<&mgaodG_Za+nOZUyN0{3Mt-96?-U%hsG$_HSG-oE%9ZUai|mjCno
z!AO1-ry=vlX<e*&%sVDdcB14&O_;Gx5z9Mmdb%v|XlOB+ovj94<F@wlemR_dx2k2e
z`*rCuhy`71WI<>9F_?j#%`7B`MAV+h#fy;;om@h*`!C7<{^H_`(H;lFpeXEp$I1v1
zDjQGg65d19pEbTjG%Wi@<JO5bGadV71G&D3x{SN2S<AAiZ5|mbf;T+tzk>t18}`HW
zd7QmhI^KkH)ojH!%=28;ia4FbXLXEWJ`1GeZCGh=c)!vSwQIw8*O-s;Q1GJS!rt&D
ziR~m)PHxP4_1*mkAZZGzofPRNx(z#MmOVb@aBWp^FudJ+)RDB2i?ys;9L%F)SX2J?
zWU$fxa(8rj=bwV32`RQVTYa$&!>cRruezS$mROQG6Ew1wtCAQ;;*O*TFCDE?%HN(Z
zC8gFtRhmBKGd5t9$+1UZ=(6u*iru|}h=ZwLd$}yGKRW)(yc<oO%rY-uhmXUoNXGGg
zt*9`4{}o9U5ZZP=dLg<?TB9WP4a*1~pnv9{z#z0aWMd}3u24r><MBPe`#J4J69uh>
zf{(4TLv_#juVG*EDD;>Fb)N^tpn}Pr1OMtu7ju+tIYh&4V~de9J24j^PU1Z5vFYp%
z3(xv9BtOZ_+)e$W*Y}jZ8O)LFTe{h8+`3qzM9$l`7Sv5-X248vsQrVpGLIl+Ie*`>
z_msL4j{i6pT6*+a@0IqDrcDo)6BF-*PWkFG&dJMfIMz0EwIB$$Es!3^kw4`LByt^(
z|4<>)RDiX<p5`Q=pmxLyDBaG6lOh#)8=?jm=Lfg5vOuqgB*BgQQhv?yz+5S<_Dm)Y
z?=bFV$ybus0U`kShLVVvDcc4^Dy73`A+5BK><K`hSXB>z=T{-+wKf*c?Ah0sJHA}{
zusoMs^Lt7e+Z;V^BS^YPXc=sO^ntUO0^H1gANaOY0P`8uhw@T4{b{F@FImUNR@IiF
z-sem673Dag+=JFJTG>L^@HvRySmjB5;QMz3$-3YZT@y|AJ)iMlo^>|dVWzN>257?C
zl2Q|?^mp^57fZ_5VvKWAV`iz?(uXr|*okKzmDs1gv@+H-_>_lOZ3A8JiS*TCRb%Xz
zxW^U~M<Rs8vU{cf3?aZmj3}AGhlFMZ2O{G`K)@OS(7|y)3U0hC4IFNJZ;v2R;6_`*
zis$I22IUbV%CG(&h;#>2b{K2cnY#bn5@R-F)g}^QOOa;7aw*pJgsvZ9Qcuo{gl&p}
z?ziX0xGT{^<$qZgiN_qWgocXwTQ+0e)k_Q-7el?;3Y#hL!(}h+rY*je+0FGNgPA(1
z355=sQsflEKOkIHX3l!(z(U6V{!QgjAN?tvi9|e`v|rAIne$sZGk_4n2x$^zhT^J%
zB`#YfjG?Rya%T7=>FW43AzkT7A)c^s%jCosqegf3Wh!fF-Vmx~QC@VpU$c;dj<%X>
zhuoZrrY)=Xjd=)(%IA&xNa~~-)mCj>_;czNHs%TsDV&uCuUc)!mp{2n{{CHCh1IwR
zP{x(g(`hZuIt?i#d}%+QEs9ws;|XyY&si66Jy}~#o-vPLhWWs?&S<s<@g=faGG@6E
z;by#0I}UDI!F^=k_eVsBvVmmv;FGk7PZKwut4yI7#CE5XZGJRp+F%LRGu-=J8o;dd
zvyEq09!4H?v?PZ2ISL?*6YjpQMvd7sUA-K$Z^^h@uwRIGooy|5WL0N!5iwgN0Il&p
zH~6k#qu5zg%a}*?OW&ZcsD<7PONG~e9j9$?w)lCD@81z$a;y}dYu<~t<_}p)kW5z6
ztlKs5c5|;+p>OqyNnN_j(pYB(_c5t5h4&WV7~Hb82bNitn1t1S?zt0nqCcLeqlX7y
znMy#28Jt`+0{Q)IKL)k(7yqHHhPt#f%ii4Ajoa*dmwotAI&!*No;4Ip8-sI92eALq
z<iXu9y%A)ma4q0E)nZk0C_ZbI^;ouAWcqpPHII-OzdIeH6HX_OkuGW8rA~~O0O$nj
zY5AD1Wy``V5?b!k(|ooOf_HSMAt9|!(5D=%-Z_&T#bR%#qQ#}!d3zSjJnF6;M_MpO
zr-nGM=V1OBlYH}M`8&l|nwpd5=J7WnAHQv;x-c`+Ph_~H24!wt;pvTg{RuWD;Bk<{
zv2qnDEP^gI1>b5gjsAHSOlv37rlFb_!R=7<T?Um%^PWl#j~%2+vbAK$5r{vF3ju4y
z=opwihl>aHfKGLhL6Fl}44XF?gQ^Z1{a=y=qw=UsRoKAJi4i|RSB9RlE@q{i&r5WE
z6>MJrV%$ur!VOn~zu6RpEF~o`Y(t|$Aq5(0!ImC@KGh+`RbP7e;AYXG``5$!<a;l;
z9mgRIDsS@y&sTI(GM&5GXDZ91%_U1eP|73`BJnTtRUzI1nHN}6+S-}W)SlJTNmRoe
zHr?N_CUMyNsBr+~GLfg#)D7FkL@XmAa?4k=a$?~K(nL>^k0t496hlklp{=XJPdqNc
zHu6lRa(Rn!@wgC0&td^O&ILo6Yt*Kr;?bJukMAa5>=D%0BmKgrg^}2l&bKNk#q6=k
z|77zRFK4Zo$l`I*w735Yyrc_CXpK6MFDHw6+*$qM!7mWSJMCXG*cF^06P_uYt`L9r
zJwuRFL9-<<C%xl$cG9OIqe8F!(S;Nag4G5YARU$(fE|Du!p7>RuTZ$u%i@SJ<buj*
zJ+#^h3bSo+dF9MKaNzb0;>yu)m+Mten$%~{XwB%~+uG!%yAxN$Ikx=OAezT4f34$j
z{j7E;+xziQt1LEw;_HjG8qdi4*Vnvt_au%EcifS%(M;pA2DVLpeR8cX?vCbESrY$P
z{FO!|C8`npIz}?2Yaqm;MyztwK_n-$OYWl7Npbd2h`LPn;kT+wZ_}w+X>aZ%Z`>5^
ze!JZy)Kf)i?;MCn9mE}#mK2FCr5@}yU>KK!KbL+<`(&8rbvWhg%KMB^5z%**SNz6T
zDdm?(J5*Df)8lA;@L1N1lH=yx7WW_IaqI51+&taJ!51nmlF7JK>eVq8Gjrh@!7QpV
zLJ9*d(1^gEr6B(%&O4Px(yA$oI0mZHGn}jEBwS5+LT@-JB;4m0D{q#wW#28e3cV3M
z)3<Fk-hnmgn#9asoH%(e<u}~qnjWQOi(R+QnolY5bNvX}C_eRSEj|1@wf-e5{gAhA
zg?tg<2z1Q%)2M=O;5@{ps<gc)lNs#aV!NELnG?M^f?5w0okj`J5ShJGjWw&p$doi4
zUgJETfB$wU8!r0RBfu)gt;UnXOkxgmywL{YF8M9$rRY!FxDdsQgGiW@P8|2{tT`w|
z2yiArR--JTGh$;+!~q28NXBUF({s#)M-@YNy=n3|hIYzK;ws2bq=4V$NEm>pQ+-u{
zXi?>%8Uf3Zl>&ALH}#V1@LP}BzE_TL(>EGp{hy0Ks#n&roYZ%OMm7{|R!!PkUx5{Y
zVYj;6D*pcj@kub49NB%o4ax_Fh&`yp;Le);sY52P7^*Hx?PD(0M6)#n&^L4ei}A)o
zN04p=s}%;UY4av_;)gX&9tL>j$F+DZ^Z>EfyM_R=fkuAJ^+&N!vPTzS2SkWc<|4Y6
z`TtCR{!DnT|Jx|I@a<03v}WJu#&N@`RF+Ph{w7)08E2U$G^!8d7A9&A&eX+ux;ta5
zTy|$@mqxz<l!Kh|TOQfR<ylXeR%gD0*bxI(nAO#Do{37l^EIcU<CnA&&R$%KJyQFU
z{Y13#VKyHMkPS8pzGz4&S(aJ9g8>#O1WQzxmrft=w28p_Lj3GCo9$b*=z?#siVzn&
z_slujo*a>e5$*P*+yxdR2&K^jUWtC>;w56O@^2Jz06s)2l0xd*Ll?&>f&hHwE8K_V
zCH!Z>Z~`+C<nCQ`3r&SLe4C}@dJi||;dc-ro=1$|i?9rlo<5&8mLR1#0Rcv%fb=ko
zvXrQ>h9WjFNW<Mt!)ZTvF7$tcykkPs(f-5HA80Z*2_v$*Mpy<Ja>YG2HPzZZ5!lY~
zsBq}*t7=&i<vPgE*RL9SCv?{ADf3v3{lmhKZ$jhMRYPq+&ps{yNe0CV{zJq5e<m~p
zBnnT2_@G#XrzaMmuA>c;xGAy?fIXx%x$lvCHMv)iO(Dh?mu~vD2{6xIC^ybLc}@I+
zD-ZZ1ATW)rII8&vMYK<izWL+XoBrb(x1f?}NR<|NET1G0MolIWf(<WgHdYs=yIH_A
z=YUWFQ-=nLXZ;r1%3_;)t-i*}$q2L|Cs#)v^4#x}xL#JnP5tZai==;h&%klHhER!i
zQRlIyR=8n->+db=yY5fO4a05BH&%tdm+K8Z*Pa65BE7WQ{TK97oBDAxD)yxHl=bV9
zf@GAHPS4a3F(KI7lr8DE+bJ`H-#2MtAK}y-ftr7LtgejziNFtuJp9!X@;?O%S?6I^
zPdOoD{Zu!l7Vw-8j7i_T%fA$%sggi@Pr>R1D~<fW5ubk*_9&0dFPnb9xe=M_`G>?*
zUt`D-=O2jLYNHe9^0Fx}uf1AYv+Q=pU?ieUs{3JyH=)BiT+xtd=#xIyGXixQeS7>h
z9Z_*@m(<5KWVwca1P!1$FF()$OxzlStA=(81pY5QeMk8C1I7W6pDVGs*0M$Ku4z9c
zW3&cH9#uOUTNdmBB<m`$oCsVk_ilTHgKJj+4_O@x*|{DMz%avnMxuU4f%2_)l1{}c
z#59>y(wH$HVb`1HNrIno_wr%P5>h2L0U#q(ST*?b_mL&<+qcpul}NVU0_?$Uth+UD
z=N3i4Z1<+D2k|VE|0GbLw?hi|i2h0A<*B);-CC-9oYu)QP6PXfTM-NJ^<5|Eg5IEj
z!Eu=h_Qpt{<YD+DDW-zIG!co~%*{mEQ7{3-??(C~2~<{oU=3Tc6VmE765?VL)tw*{
z=Drya^J{qh;T>zEt?L9k7TQB{Qj(mEOz<oB8Z<mNz~Tjq(j&bNNNOZf%T05++`!K8
zu#`+5$Q%he+cVG|o@RDQ0320Uf%r{-1OT|8OIcwA<B>q$f6wq@1<!yQI023S*D)0<
zA+JV*Ze$5s=~?8HXuvd}v}$u@@g$?F%5vBDnYJk4O`_9bTfE3gh=x9xK7SMOE1Wr-
zHB0cwz5%lzb_`Y2Uf{XxL}I6=T#-R_vo&r2t`{0X8m~L0{Bf8T#AHTW6n((*`%SNa
z(hnTpoJ~4%(y9MOQ9k%m&<2^I{%ZrkJ#&>k%~;R~K^TDjC`t)GRMa-a!bPES1C}~^
zHe*Ua<w<~ledt%QI_ksTDe~KCZ}tvUYw!|K>(+n&&S4>z4EV7aEjFDw11Fg(*X$&F
zvN={-1`h|%_tOr{e;2MkQE&DCfiwE65^deNvtp|vNZQIIL(~%DDt^#=8L;E>AV7<g
z(6g(n=q{JrWH5;)k)vt-iz6|t0dI~Wb1lORsH?*q&841!K{=hS6&AW8Xr|s~e&}-V
z?>L{3fDH(~3Ru|$FJF^MAx+Z}&G65iBr2>u)#9dQXe5+E6Tn;fnGnK6@ZUZIG0SII
z&U$8aJnxu2$|>x&ad8@H^TWS&es(VzlI3`(xhwKDrPUBqt1W^Bi(;e=V8>GLR?J((
zMMuc@zbyNZcUhl@i^>k##3c@+d8+p(%I@@EZ>BA~UxZOm8QMR(u&OQpE;qDRmtsaC
zYp>P)*99pNHs>BgfV}3{9~|UHF1$s2SAM7W1sFD9cdzxJNnf(%%6*+`KL>l0b!+iF
zGPGT>=p(JGDA3f0t}>PmKiK15zMb4R$Xgn#fwBlzX%>1lZ$PT?8qkKgsVK`);TW22
zuP4UA#*b;wz1J%*m4X{y!561mfm!#BV{aGfY9ZjP!ebyoBEN%OK7uE;Voui~GrR3)
zLHnd&Ilu5J{}roQqS;IjA?LBX>o%v0aU=fR-a7PZY&ENy7B2qJM0GiQi+bXJw)Yar
zSt$nxu;4~aHDFG=wah{nt}-Y-GvpG11)rHYivv+?z=FX;VbHU^GGTl8x8Fai2~fOf
z{Q$eg_uVz3W-MH0g1j<n3}MdQC3efrO&~fT_m3k$?eE_>Z!vM-FUvm7jF;$&+7dXu
zy>F?D(tA%G09k}8>8P5!z|y;?HHR>jA}BNgU9E)MM)Rkzu>Sk%JKJH1d+L*rL`L!p
zP>nHkb2HO(-9I>V^&csIP^<~le`NNf(F#vjpfld8k#D{|s+Wj@s_>!TV7a9cFqJRU
zKM6w$eLCh>2|zB2FR2JS7ua8aEEqaL_F#UxbiRsm8?$1QKiOss`x*t<rLgVuXTWTL
zM8ey8_V{ZF4`XRt-K+uXck)&WiFR{Sn%T5GX#SI$49>vSnDUfZF9ThGJ0pp|6(Y_+
zph-}O6@l$Zcb=i*HXQTfIJQ72u#_}4FW>kpE=G=Kr2bjj5NWB*Z*a3vE%U$kp0Dy@
zi}1q&e_Rrv*ia^(!BWh0BED9ltiUNdk_h!S4f|hp@|Hx&qY^+_@K(;1lmt#sNBGaO
zBg9be1U#szvbFlN@byKglVZ&x^!&AfOpAjnxulZ<Q|+?5%q_D|3omto-3)Il_Vr!5
zbQfEXm=zSlDLf;+pT3GJ3go<@7ipur2MB%}xdSy2xb9@PpbQtVCaWs~8#?ca!So`l
zZ4j!m4khdKAMJ}b(3MculH$QK3ju1I?80bI*<fD5Vc{q5z%zf07m_|5p%p)^I5opm
z<iSl2UIn#DqMy?vUD{d|`vu(gB89_P!)#hl!pEHz%frX-MoHAbM^9-|ny#@|L|cFa
z$BkosT~x`Jt^P&t6D6d=kVBwBR&A<d3h*0@H+ozg#7kEV3UHl2_9=N(67A6G3_XdZ
z-?>y;?a)tm_;MJRJbi@530dWNh~AwdSN2+#KX^1Mc?Zj8)@2@CQh6?QokyjwG`D}p
z6#yK%Nz76o>eF8xhS>aHK4E;>wuth{2)(r5SxpVJ%*}Fa1)Dj~bM|LN(|>CyI8?zP
zAqt3EhVk#W)m7)_=CBCQXU?pT#VTCcLy89XbJul*1)lMlDk5M_uS-6l%PX&b@S^s<
zs{akT;7-u)175OX-m#UzMY>*GOVt15xh;C`GvoG*wF+|#mnGKq8Ap|eGe#M-8DG2o
z&vSrSU@Lswi-A%?Vt3ASd6IBl=U``MUQr8iIQ1hv$|*~c;T!LFYawX@%hb>HDr&A_
zTT#GZTZOIq92ps0-1Cl=DI%Ch;>*7bxj-upx*wp<l`md;Y~$8NA76z<0vt4~9P~DT
zZ9MfZ7+5U$1@xZ%lH&FCF7oEMwCwn4OGp^xXA{l}?B5*0C?_+|;CdU2DE%59tB2Vy
zUo5?~N-^X=U^XD?&a6|aBwx^Iiuj<s1e@m|R>^${NDiCsIW0?R0Fk=2kQXkKnq#oI
z(x(Otq$N>+w=gVDBK$)<5%bxaP(g~4F|-GEyE%}dR%k#L<x+W)6YQ!C^jVA^eDAcx
zcLUeS-Ab9}Ynf-}WVOC6!=zQshFN5OEX+goXVqRdm{=53&S8>V4+d$q?fmHTnbij5
z-h}-683){RB;M4%{O-*985gd5celh;z}bt2y*o4Z2)ib}9q7!>aFPSREWqzb+u^B8
zuLt<a;`*;vn4d)IQB5YP5MUbuGzKCP@*=(X<+4(Il4AIGLXt<$VQs14B*nEeF~Y!b
zx$tDCbOH;u@T)!=?$fcnkg663@E#M%q`6Wyet$9M)rl+#WvfUj0k|~4h9nlaiueXx
zSGLb%XfaOXc<QD^3yc_CZxw%{YS{AN)W5{3Itsl23^HtIU<<huM2kJmvK9Wjt6xvz
z)N-u7VGFc)&*_pPKkH3iD_n`ZD|xo&N+fjYhNCeOd=p`VGkqf~BrjzQHEE*V_%!h9
z9eS{}R)=CkC631&Ilil8SI1JYx_LOmvet8vX>{~f+Ksy9kaPQ|6SyJ|K|!mas>%sm
z#%p}Jrz)=*^vT1r$=W`z>;{5Z!tn9)HwxyovR<-*FEwGb=XmbR2AkuQ-sOAN?%aMm
zN3AVjd<Sf-BGL~PN5~j9)5wc?R?}r=;1-vC5OcovpeV&f_Z4e}i#ZH#J^yO#3bpVx
zK3jg_M#FLMD{B49EnTDEwo6c<d`LKpHWk~y6^4Nddlpx4_&tzI-6EoA5TjV@CDovp
zLwkfxY}#NnDpB{IHK^Fo8uX%bjj+uy3<bp{Q};C65Cf2$w;~CtVjF9UNj`hU3!S$C
z!=g1t^p+tg%rL;j9QXOI(Dk%yX5@UAl+0#m6cwsAO%FA8i+IrTe3~mMADU&#!xA~|
zY8x~Ze7s<OtyO2oLb=qCEZdiSWn>#CGRte>OBOZN$t7uiCg7cA)ri^i$HVQt?5k%p
zTpbSA>uoth-dUMTUqzX@sTd#1mX6d{I>zgkP&eCvOz-shshXJ1ngM{IH9-N_+IYWw
z?YFP`u9}C2{1P8-V<peg1a8ltp$*O{&0s=}6k|hGZoq0#f4V5pw)D#o?<3Qi^4koI
z@Ih}hf30VeNDCoo?%rQW$Xk)}4sD5X;d<gi#xC{V**-?d2Y1*}GKEg$qHZKze5VoF
zU&k)MvdAm}Pb6un7n(tFs&f^FCNe~}%k_GE5Ig<@O1350<z$Z078S=Vn6FU~`?k)<
zqSXp*wP&dq`w`gV@a^YeUh7v`UJ(b<M03DxU0TFzE(0xm@F-vR+7}Mf_jFJo?eJ~Z
znGn}!-j8OrS{A;v$hzKn!B&Exk-Ey`o1oJPWCMN;WXH5vEoxE*)52<_gWfQzuLV7*
z)_XQqn-oB;Y)t#*^-7bfg=6Q0qg()AF2QTW%s}U9Ahou~-?}A83Xl-h)0uONA~VB6
zyQ$))vJv`Js)av>alE@(w5Mm!i_gm2=ihT$urrIRl{dXTR_$W6O2OhmSHSLIK)d?9
z@!KFdo95$+NoKY1MzEN=dJfFP>}3TJ3tZ;_s^y)xAD7#tIWsw-Yq`8n0EuDmtEY?h
zne!0qgah^wQjX;x#Mo%>(4@8H&b|c@r~XsdkUBJw$3`hDpRI(7G{VNKm9SBTg>f(9
z$xT_e6iUVV(I2qF2-!-n0q&U>m|j8!?Yn$ro|=m;7<c_c1c|}w=Z#B*UH}aMX3VVn
z_xJZe?T{^bG`0Wu1l*2eyo*;i@wJ8|ZCAgsKQ@c-c(Rh4YLmI|@E8(gBaxF2e<(g$
z=_@Gb6&jt|Zo?h;-Vo${73-qO9iNDQrvae5V@?^ACud%kHv+4TfU{#{qE0v5?H#OQ
z{Lc%XGhLn`5LKb?wzm}e(^AVuP{|vJwP`%X<pa7s_4r*j+GjJyEhX@a;YXmMf#%6h
zO89)bM968C2?d>`EbWu_K=oCrn=L5{UJsf-3P=&nlJzx(E5Z5~AI<io02)aW+E|1D
z^i4&XkX}3M`fnX)?jUJ2dK7$dZraS^A(I8A@2;@a*}FdyAlfL9EJAmXLm^$SG5=LV
zU~Hiz&9*kR=V^+?=UHt2G;`vgW)uepfjQhGJQjv_$vUwKj%8ep_enb0?Fa8I(w<#K
zo61z03R$x8?zvZ_eKDWytaP5#CSJ0tXQQ0p-L5YCXK2pYls7_w0*g`R5Pub52wv$<
z!|$ig^m!;pN|1~!$<eLkf0#mb^C6T)q7%FtY7liICY4fytIrjrk=CovrVpTc-q|*M
zc_sN8qax)KmH!r+vZAL|LItKmx}zHB@GV`9S{1Z57eFkg-tN0}Bu_Z6QkunhI_C`#
zVh<jst@ZMn>|jebpFbavhOx@-JWM~{<M+E99eeu<*{>GC0_xUtVha&~#lrt5KH-ou
zriy-P@8)hSnV-wy1z@Q%i@l)LD(n~>>mg;0FjqYR)MyE!J!<&8)ncr|AefK(f%5J(
z2on3{;~)6Fu%iL6={EcnI)hMVngb+g0YX_OX!$X-Y?iw`$O5Eq0jHJkr0`J$<#)<(
z?RKXSQ69epHA`x?AD#T_@!n%W0UeqX&R4Pxl~hzyogBXv6~FL!12p*D%GnEjk@%z1
z(9ryxw2@bgy;*z9Q+DKVU6F}d`o)en?oXkh1KW&28cR5zQ4Y05?c%XV1=aBNY_HVQ
zD{v_=E{KrMv}s{LZsKvjuc$O7Z;=DY{9uKc19SyPtA1uk`x@XgpEJ`a>+M#9VU(F7
zSm8A1Mk#a{<qfi$QX`bAL#*?kLJtjbu}p|k-AY(jWO%}3jiImByw_(gYcZxcZ@dqr
z+Xn*b#=O_-R4c1#pr6)LK={bP_2_wYp~If9((FaMz>a&Lc^^jedp_HwbQmqIB}eH0
zv)nHefa6AN$gduD%kkq;Fl-29`f)BSeRgesVd<~uy!bU5sq1y54nB-%0EWA(%=$Y?
zG9kjb!ZFo){b-5IT)w(Bkb{%cTE!>HE|#Is%lAQk8nG9AuTd0bt%3P~BrJPL*1&sc
zk$?p4uLWy~vM*q(#(Xq&U_oC}*a_iahE5-#(*Eb;%z-)>z4-b6=<PehqUgFU70Hr=
z1j#vyqU4+;NzOS5NRu-(G`uK5f&>*%P!J^3B%#ScGN_0M-DHp?p=ppTc~1Mi-^~5)
zeV#jaW}Z9#z^<<9s&lGp?{m)HYp+Et81<0@F7beLPD30H1aDx`oVEQ7_|)d0#ICbW
z+u$lmohP*IBbX!O&_B9)0F7!$OYPGDhIEaK_n&_X=6vA?dGiD_vc4+vpEfnf_nX-F
z=mzgLIsBOg>w{Ua^Y0cbQLk)bi0<^yJ0Seb&|rWkCgRCeP@{+~xuG*9Kev6iajPqS
zt!j^FlqLUXsDj{_{*G(&#ZYw)E3ml+Z9K6^aBJ*Gv1hTJ2JOiXx@n?+{X4iv(lnsb
zgaOO5@SNcf`5OCG!+n1~@hd4vGtx$Dl@!2IPsk34Qm}svv-9<Avt&aJ0aL|T$@Rr4
z3D6!jWINz;y-NewM)0B~9KeBGihsMzzvGrbSPOi66@;(Ad2ph!3(RO-LM++9|0dx1
zuRr8^Kk51NYtDKlQb+BS?0fkUJK$fy6>ZT0iqI|YfwlgtWY}N|mMZJ@tjm~^=PaTb
z(B)dXcuirv3h`V4-+U_0l9hRJo4g4Kjm5T@D7<g?P1{FDMz@%VSX_6HgjIp?*pe4=
z7;dpWIE8SZseleznpdrlD&0S-^l8{wMK$FP-b4pCTOD9K1I~8JV+{sRK<_j`$Rqpx
z;l8oR0am!W-#0>@Ur_J`t)RTv<0gMsKc&Z+(y)_`p&dX@9qb+P2;d3_%j+3Bqt&xW
zLP|jf48`PaWV*No?$CFNfq@naK+{w@(>nQ-R~7X>H1US$X3~P+Rt#M!kom<1*ix1=
zu?k-q!d47B(F0Jxu%C`Mb@=-3{9Rkma?^?#&f}H3TNQ;?pGBL@d#O3lH5JkvV683G
zP_kz0=My6Z)R{H9IXE3+=n_(IdjOW;``v96QxS2j?8Ca@T~EF9{sKFEE-&If195Ft
z>^?vVH2~Pj9D5q{Kf0@F{I*1d{q#<V4HF3sdv+^$;Qf=9fpr^V&J*y6KX8^`NOIj#
zQf&#qxby@jLTmIcwj{7BMn_3qkGYCo=t`Ri2sY6B#?Z+GthpHiL2<eF)ok&9SZrB1
zD}U+d%C9S~k5|49!w1hS_C6~9mSBc(x+|}&163A}!sUaxQ)BddqvG?G9%?<Yy!p;2
zDZ^o4o=&ng(e+f2Dr<{*Vlt!_w1n|i)J*S4W<s@3O?(-_i6JH9EpdZ`zlsyS-Btsy
zU&0gLr9M(0GuYCpZZa;n!f!bRtFrPJu2V%gL^{W~L|PFOw#-4};B~!1+qS+1(e+U~
zaDAO1cwMzx5tlvs9v>SVqB1+A=-a!0IhMMRz(H_?ZVzpKkPXU?<AA2P6d<@BV#o6M
zz2`OS+K4Z^)v?qTH<cThE8@F?<^3QuV9SBb`$~{b9CDWZq44<IFf>Nq+b&%Zi*|l*
zfAe&9C_f5oGzDwE-8F0Idy5;lV7xb0uKmdz;79RRLZ)kk?*AD~2-!*T%^pNPcQ-(y
zUEc&gz?$6mcYLOL$S41q*$D+()ZP0Fu%;E258i=;6vIC)9`IX|7C+k~D1OEX%%Asf
z5ApwM$^QixfK%^D4j#;lop89n>+nlZV%%u8!}RSy@s9x1O5(?#P8c8nRa#Qw)38_y
zhra}-7T6F@IS~#A*cm|(T5hr05t^wt<EfhZ>2>^guZBvQQBD9lD*Tyo!wWxIuuQ?|
zG`@XUwsw?&VLqC@jAHy@hL+DBkt!h5{bESuB_CCyZ2iJQpcCsFt*i~s6%gX)E{jbr
zn>D7GIbjo%7C<1KCE?9JWL4(_F8rz=OX;?<;=E-l8+K&+hqUiAT~sI>1UJ8%3NuWX
zaelB7zP9$K9ZkFDat28E$o?>Ln+uDh+3kM+A#?M2;FO@n+o0hjOaX7+_<W)Oyg5-s
z=)AbYJ9BQL6!^9u9@eygzDEZJY!fpenaNcVuUnxl53EhsK^MUTcH3XpGItvMDF+Bd
z{`lHF`^ejWJaf^694aX$aO1N`mTKWcHqH=W^UYT6gb&OKNF<xT>i+_E-uP$RTc-8B
zrm+^j=wkr49h}|83YC0cbF1sJG&>ZDn;z4%nd~49Y<zY;pDmpbZS|CP%IocJxz_1Q
zmBsf9ZRVcjdoLKn;to~_L{HQym7fyZu*Ivb8v;Y1j3RPR1{d^KwT(gM_=lASewh_>
zf%T=}YYsFUn8~0e{3^}U`nf$YB6;7Op~gppj+3=V<0vy0firU<z=hdEZHBmp^br}1
zFTo*pzj#+IaF}#+I?)-XCO67ytT>JyUlWcWkfa?+`$`mK?wP-(pgJsr+`JaFtVA?^
zW}wWi5*Ycq{m^q(VqE$_iSsLXqgg8(U94My90(<<HB_R2(jf+j_UQHQn4S~Qa#EsM
zYBrYwr)Ba~FYg+6*gU~)k)?Joc=>X+3g=84ak`H<($pzoO$NSHy3sMq$N=wk0*Kr^
zudBX1o&9+jSt<81C&EO%#`#qQ8oJ?ieqru;(7_weY$>==(!7Z>YZXcxkl7Mvx%`#O
zd?HP2U0z7+c^8JsEbNi~9^v`GKdkRn()R%(cAXUKL`XfL-h4Z8_~3KS&if@b=`$0p
z><(em@?v9}k&YUX@SAC*RF&<zdJ!7E2eb%ZL&)WWF2C{wG%M0&EqyDk`rMyLjYHrI
zi_C$gt48g4&Wq<?t0wPyohXFuN@Tb61LvXytU7RS_k76stWS$CAbF}2!WrNl7C&(v
zS!VpeOha?|s{6!~Z4J%eWJHrM3RIi5o{8O$IWV&LT_srH_xbpP`?wQTCDaJAS$q(P
z6!;Kk?4f|H`oUmmnBbmMu<hRvAn8*VI*;Eo$eZg?iqLm2G~L+x%6}ry4H33k+J2SF
z@pw@C;*sH?_GROeko)ga*iohn_a&v^K6h|~qn_!VHtjOZp+Ft2V+@_fdNSfe!>mS4
zMI6^dc58T!$1-JUd@EZa_jt)8mMU?(&5ij4n`SjQ;nbu~!7?3GUe=x>P2;x+s`Mzb
ze^xg>VUW#+#J_&|I-;ZX0A)2On862?$0v<6s(3rezFR-F0GSJd2^pWpwX4_p#o1CX
z6@J6t@7*_3kqm2_VnRfsoAv_Z_b9~sKYH!Uxpv)aLwUg05SAN@LSn6}?2z9D2D$#t
zQ^s<7tmcI5G0`9b$-@ahyeUzaal=%h)O7ovv0oc8pV!aEXX-u4XUb(`*E~lS;~eAK
z-`fftb`<1K=?bB7X!XxsN@F+$4?g1a^Gn@gyg+nSX${RK!r95a5%aCbj}Ag|jUD7Z
z$ypZ8ZF(ciVa8dRo2jHN?bTmll5Ty~#9xk^UzNmu+gXL!9rf@sKrb=_cOElF2edH8
z;-70^^br9e_c5X{@==yH7FCQiB5~}t{ZxT#lVZ4nL6|k>4x*~$Tu1mt#6xSe`bqoJ
zft<n4vWr+NFRpk7GlY6<Yt(=IwOn-SV~SV7DvacZ-W?`9D}@RM1ZY}*{<rWJGPAUB
zb-8bmi8lTn6D<+^LsoB!>~hOZXk^wuydd6KIr+47V69I0EY&jX;AW79v2m0qvq0W1
z<ze>a5sWA<g+k^Gp0FNi60^Fo%UQEorR}yxN;KV(sXOG`X8gs(svKVlU1Dmd_IzoK
ztxS>?sU#mXe*Q`ckBsF|4_RsIUKQ)~+YCA<6k+x&cH891ZywwJs?Zz()q^ldPRXKN
zn_dHgamxQi&gW19B7Qa+Q^V|b8{KcG$HB;(82IB!!#3o#fK%quIatoX9D%cXd||^L
z3smU7sEMlDMa7|nT>X8uU8e(&?TqR(i-zE4DvC71zUAmG@WwX2jJ|kRg%(W9au2-Z
zhAOAGkF%dtY?k`@)!Qx^o_0tCeMG*fwj3(gj;BEH2=Hm1N(3s%sy(fv<af?sY_%q@
zBeRGd-MB3RPjm-r45VW4CB$~A+`A%j&fNmWuFfltN7oST5JDu6?VhlhNIK)V5~0)%
zQ!5!cg`L@x;*BVM@#s@Jh^?nV9RY02^_8%)h7xd0Q_;#R0$DX2CixAU;)bRXA2br<
z3Os9F53>CWpw*v|Oqx$sUCJb6Y$06|>nDZH5v5|w7sbw1unyI(qmA~Cl4lZX>_X*n
zBUfnR6%A<~-myk#1qX<4|8%gh;WB=HPy2U8!`$Q4j`E+O@%<%%fu`<x+r^l`64P#U
zzS9#L>+4-1LCnAkNM_VA%3^v2yrnR+6d*R4_hgOZ3&|Z^La}b6SPEX-J*b#obotn?
zlOF%C2B$5IJ>U0?=Z#x*=eL6p(*fuBVoyashP|yMzjEdY((%8SI1&7_ZHfn4a)pFm
zhZMR8@|a%e4;~^5y0RZ{OYN9v_Ai}dQL0@H<-yQ4A-j__vCRt;RH|K@1L-lMX~fD^
zw)%dMSEM2yUAJ#UQBLV7IkAOb!TNO~<Ysm3xl1-nWbZ)1ju%F&W^=saMWlsUBs&l8
z+$Q{!5+o;t$FI(k&ecTTNE=1hqOAsTWv>4$M}FQ(0jV~@xXH!#@I0whsm?W0$rZTZ
z{%yumej~Xl<IZec#EAJ~a{n8Glv6_g*gdu=E`jJS(&l7>n8>n)^D9#mpDehem$UV^
zz1~)Ee2C@SzmK2L^PwvzP_yZLp4EnL!L-B3K}MCM9-4Q!;)pqKw}nL!mxcLDB$yZV
zH<S~c{1ts9Z%-Qf<C^;yLCtCVw+A8Vfm2ly7Ao6SFQ0$w*bfvb#~8*>6pYXFE$q5u
zE-!v*#T)C<2!^L8>>EKn(i46WP33HZdVyQ%8f-U%(rO{CQv2`w7NA~)*TT+|Sxbe3
zP46yV5gX2qE8*1SC!>`PCnH31Sd+5H>E%58wt$#RqWV?&V(9y&f|$t2^#%WA0-gfJ
zkOd*-o`|D9YA);D#t31ycTaar2j>PPDn#Zl6XcfS<az{Pro9KM)T>ViyokoFc~tNf
zTrK7`ti~cENAXZc?Wnf*#^vK?jMD1xZ?qeDoZ)WetEbT~H``RYhP+YUKXp!Q9cU*R
ziKc@!&^O2}o<!V`c-e#5R%PW>t}>5Q!N}5zKRjpLXW|lP2M|Y|x;-+v3;)@9n{i)x
zWklmvL!bf`Vnfv~_}Q(#@&%)hGZ7&Q(Jo8h_Slwf`+QZ0<Dm!^C|UA*JH|nMdVzq-
zoFfsNzPwe3MzW~{xP8dikm1I?eWr(+PDSLc+c=23`)^2_xuTaDVjmC6msNC|<Wd;o
zoy;mOKA#=GI8Ea=bbMPdw=R(O%doU&-iWf*$TGcsS>3qvC{k*$UibXqz8gT?%oqXi
zGr^rlMc$!#s#^GK5mj40@zKgd`)zvZa#oPgZ~>+eZ!R(^c6V1HH*Zib3ZV?cA?WNq
zp8TubXn*wa`PeOegL1K?`_uJio>A@yRWP3m;Xm<(!(5X1$_|BDb|KcM_+G3w#+dAB
z7sozw?Zc#OU8B6P2e6LrH_V5&2lO4~kK-61?XKa<RzEd++NT&#%3*<j-TfGGAv09q
zpE<8VRFr-<&+q`fX+l-nq^R}DYxGF@d-76TEXLJYZ<zqaa5SDZY@$|?d8?=_Z)k14
zRV!wby!qam?}Iymxs3934=Gc=E#<CXJdiUbY`BX%cy(bsZj1#r&bgm04i$z1(m-X=
zcA^*eH9nU~2^2({Mp>2D-yiqRtVUS2_21bLD;p?{fnPOr%!Nb-yd8IaO^J$$oZ}Q*
za5Zkdv+o?Y?vGf}3_WeL5UAt}EAgx;=VCh6Xj^hE$Y;`&9sG;nwd7_WA>!7^@Y4&E
z?XYAA{+oah!$)3rICso}6R9j<`gwoG71`?XaKGU~AJYIm3rE1^>A(^?u1kyL@MdP*
z!(jhthttHu$2^C!pb|!J!ysS(!fRA!Jp_Kz@y(VW{Sr~^_4W|W;20Ch7Zj4wzDi7M
zm}W!}+z>1KE8kp<JdsxECmM2|5$oJvSuk%x+uY+I!58=xm-9*$jlTp=wD<hzUfZ5y
zl%%8Nmquw4ZlX5vGgDHN^w!}kxg-KcokkJnz-%_T0MjiWyeBWTH>!+UqU3(K3S8eC
zQKgyfBB7;;bUdJE4f92xPTvndxqke!EH3zRxptM)v?Dj<JZX}WU&^%iOuOiYujZpS
z6V6AIm*)$Vj_KAVcEd}(H0L76ZP8jO2!&=+92feFx)~@cw}<6|*TN!V*^*>Xsm=bc
zZ`E`~%q6HH3$Z1&1?FO$@ycNmfv@x~{+Ux%NJlw0E{8nP@6-a73dSlhM`aCauq0*b
zGL3-{oa{0&F|3O;=uGFatkgM&$=^NCp5|<^iqJ>+HA-#d;{*%ik|`G-{(MdC{4|V@
zOl~!=HYY>Nj3T#szJoG7zP-p!rTBLAvACt3Y0B>;0{P4Sb<T{-?<bvE3i-kWngfhN
z6`$TO7M-?ZgqGjAs8>wdnYB5HX!t2h(y#WB)gJ467S>u`56PhqK7}&Jj;kB^s;%(Q
zxHg)ST6EUT2?_}3*&Ufpk$Hb{Ph~0?m*YYO<VvJnWiR-sZyv8Q@L2!L-34<MRXM{`
z;p0JuS!5W~w7{6GC2eVp32M+L##}xxF^=8mD~r@5@u2V)ltyklRBlx|ojD{>KX*IA
zbL851Ig>C_XH{n?5|d6{--_H+kfFQRjVjyF+3h<#cJLgBu1|b%XR_T6Eu?~2Jd0+b
zN&M(bc(bpTgCvPve4;NRI;xF>Jf7_h$+rJP=EJA$b2oV*-!Kp{n)VKB3=6`1;eH6i
z92x^)alA}4^i^TSjL&l%F+5_2+f;_Qpc9?aE15TYK5S8cj!@({JQYw&(cTj#*9u*G
zRHNK|G_@dlWV~)M=a$&EypamcRftn;Zh61fes|X7T33DZHcs$eEiNwJM3ZxZ_-MP)
zqnVOLDVzDr3%dG_ZPJvq8-^@WZ911bhK_9xh!((AuBoU{F0qN9pD6zBj7@Q^zTH9G
zMBsS~`u6q|;+vCpfNvb5d}2pgZ~dO37@>FSy8uoWCdVPP8Ba6~J+a`Vx=BbaG1K!f
zGOB55yRyTUPMXL1B0-)AGb#N7l@jDsRmaf;ciB6_7@pqi1Sui+$xIA-;X(+$v~LC+
z&I;eE92C+gY0K0*q&GIkZNHuKwiFM%%OI#qE!&tk=RN;~R?)%l8sp2~4o#w9pm~2J
zs}|Br|M>Y`V{1>u<(k08<y_TIZp{UWpgd@Wt(`Z;J3R)KFvn*q?u7hQeDH^?L(0V(
zCCiRP7B*ul(UP<5>@5$}4tIv#f9y-W)LP%Kp3s={t#&R?SZ&%UssJ4RL@p%;9F(10
zt2}4r_TqF8-n%^2C`fD{e}s5aP_S$c%e^z-2<!jBNTe=@N}SI1tA3ej3+XtI9HD|y
zxCbMDZS=ZW^Y`=#s;1l)O4waGCEcd%_R#0%2jFQ($>CWDz0t<iVTSWcrN4Z{i{LVH
zoe`z6sp5ZLUQLpqqY^^pWFfbrIf#|}fJoI0O;8zbkg#V*LmgK@6>;f!al%4Hrt(aH
zow0e;j;ZI86yuIbTH84*-DmGF^`B*AE?4)jOLvYgNlcr(lIrs@ESLXY(fXvU4yg{=
zd~}(2GUl7-^6qhlr2Dhr_Q|UL7o@d2G0?XaW4DZ2I>Gv4T|tHgCK7I5RT2toF8M-J
z(BEu0@1zM|Zx{Q@uB?%lSN$9|Auei1DUL@;+k!CUXmnGbbdURd+2$nw!H3zSssDi9
zof2I!mGR(g_0ekwvYzU@)+^k&G2Aqvk%0#;RTHgDb8wj{Tq_Re5z)ur?2{OD@Tp!=
z$r+K<?#NDhDD~Ze;9Y(a+b@OU9aAfXh}YNq)}>@od~d{FdCa(t*WrP#m(!N<myCQD
z=HSx;76pG@eI)UAxj<v2W=o2l+}cmOscmapcOF_~clTKOT?aebE)ye>4D{u}sJF$T
z)n)LbxaX*mi|<1V%s06lJIc3@lgbXM3r*uC<gy^m2wgiki`T=)fs5Dpj$LCn*8-j7
zOrta9e(9%5PLm`&fcu!%;*YknFDK2Dk}TMGOE;^g+CLP{rj@1PD*vrY=oSqE12pJ5
z^&ktCh=bN>$TzzN6CpHLjdp~;N8;SP-`5HC>--Jg>-&gaL#m6IG2<DpOLq?i+HbJE
z#6BMJ$z2(tcF|Ug_><0gsdshE3F9|Sw`OTFG=2+Aww%UMeZUX6<-Tg7_1q*(;#~dE
zqor4RWjvPy4$qfHQllTXuF!ZX9#&DC2W8N^ybygqP7ZxL;UM=z8-kF}exWDNpyGJH
zB((Q9&75ZSm|B@pB#IE-;{EluDLfnyG4>^-1Kz?UTGEWb0`t6X6Q<9|0yWKAOEt2u
z9{$U_@<ZgZHp4B-@aI+qp_9W|7KI2|m05{XR)X_KEnpfvE8KE)njEo`?9DPIG2>?x
z5=Kxuhp^QX%G6&Y;HFB5eb8_}=%}fE*E`O>F_}5T!axrx-t9_K=41QTo_xO+3d>$6
zsl5tylQO~Eu?n2f{93x3m6ZugV(h*w?!Rq%pdm)%C8>0DZta=GSb6<6kyK22DvvT-
zmvr#qDQNrkmN#y2bE$@alA8Ry`!Rzbj$jfVcX4^ON~7mGT9;Ds1a4xIf}$x92wl0-
zUI*XTRqWGKzBX}pCA8euTm`Zep6d_FIjTc}y=`;T4?dQ2pR&F<wo4vCmrPBCO=oUp
zGj9#qBqrNfB6d_hKM#9zB&vLJ`^0^SD8acuWRR?eHsdyXNJad>iz|g4TBN-!hLd1@
zSGa*#OuSGR+rArh^vtsBQeP!6mLKw~>@7ps8~y#<gFxS2ZbJ5Fbg_>$J?l*`wK>uh
zo<;|kl$fS#yUhf6Vw8n*ZpcK-oAYvQ;NQQj8hy$#u#Cs7JvD$lg*oqhL)kIH^8vFm
ztw?z-wDD$l5U$ZXwMq6co^z*D-bl)6V%E`C*L;1(ec_+w(YcB3ma_px2qWWwk!15!
z_&qDqimuz)uxmbO{2V`<8`%Z>)r<mSq3kYa$=`|-_*eAPiE{+zSm*X(0%aCDHR^<J
z=HUGnhWoS3-Ez;I;SyVLpsGCXOGUxVSY~k$7`0@`-20RDEi;T^9EPE$YgkkAEJn5K
z)gnfs%rDGqI<la33hnZG;#?p)QKu`7w^cxbl1S}_Z7sU7Hqb2K5!nX0H;K1`trq;2
zohPj4H)mGhrN4$Ug$8Fyy>LV6I~K|pu%vdKxYVBb3^W4=QxdyKAZe{q`R%Jx#Oei3
zBYrVZ9qZE|L^<+DX+9IzMFqWjf)mAQ|5)XSKkvFI?IWwrupSr6{>SxQdzEO}=#I9f
z#IaVrw-nD^abB;T)exkiIsA~Md}dj+QegX_lh0MqukQ<7@bk*U{Jl&o$K}|8$(D$R
zAjghWT^+2p>)6t8L!EijwxNESdJ65j^H+o#AHFm$5utm|ynr-x+)j0I?l4N(m-*={
z?6_?_(x#-$%^Y|=Ub7<Ll#@SArU1V2L_0(0_ouG|bLwTAZJ33XWUt7w0710=`_&l_
z(k9k9d&B!@n)ltPZF`z;t*ZD8MbYcZA3tp6Edvf9rUJFR#samiyYOXvcgsh3+pH>z
z!2|UD9lq?emRJ&huleYs0U25%&xw*M%@a2L`A{emOW-~J2Pu(1D}nIXgT5}1I%>G*
zy}%{ML+rkJCl{9o4%ELt*E8~#z2bw{^oLWus;)PAJ6SY!jVea$@Ri<UI#jTiq#{JC
zs6;Wpx@}AUDuQ#*Sn+7|;MPXrSDLVGN%Yvx_LTQUb=5?nS^1&^adV`$+oOEhj)%ob
zvcDx^IycjvKQn~D)P+vN&o^L2rvTU%h|BKiO((c3hkkjQdv{vX2QasGhg_6&F$OT(
zg8Gt#B(JVf+gyQ^XP1RSc0Z9+69k6~^k4aDBn}xly-Qx@m{T%0QR1EYkgU=qpg)P|
z-#IU2GW$M1TT8y#edmo4i8-%)qf+mdEp6L4H`TG?=C6)`?F)gDb1s^)Z!2c1pQ>su
z{g)Ku&7JmJ8Pi)8G>b(dc#&!Cesk=>Wes8VP<TefbTX}Wo0(uhs+SWB%88rlI3=e;
z(XK%?{lH=JgH2WLn?^0&gosePKr<rtf=2@y=3y+GFClNw&hGjyCIoI?o0E$9F)Lis
ze@pa2yP+pu5LH7SvP$##s9QIGLnO<NmbVh%!+yL4Z7n`K;jXEVv^q47)WQ2zEbx>t
zxX+$du#h|QrT+SmAr)hJ{;~Vy!~#C;m|bb=T;A$@e$M*RM(KUE5qtJQ*KH$1qw{C3
z4ee4vJqf2(3^fNkW>oH1!+K2os4UXU7O4T;_<52_XANM@Ex9i8+_vq`(Fbpw>v;VM
zk2stZn)K#Mzi60W`^UC~nOsp<0u#+VE(@`4Pfid_kYBLFs&`kwq`|MILZqjD-mufZ
z)o^w6X~`9l@0gtCj>1V-Az7m~r0xj<ji+f+cowG$sjQEcZ{(=oHXfc$U>7?ff4vpY
zTU0VSu9~R(D!NE}**5qENC3vdpJ&SYs^tnOc0g_bc2phP-5y$4*_HD$i>CsF_d*A$
z&Gt)i_RC$^%h*=Ch&L~jF+7HTQP4a&E|17}qRqx~NCnLSt{ugLc70^H30FW7akY`z
z#Ms%h88#fV)_rudYhwErEx*X=N9i4w7t2e!v9{hM)>SX>xy6IaN5Q?iDD(;WamB6}
zkTMbS0VWH8xxgpGrBNnUB2_friw)fPjria+>}1HPkXB(btfi?cH}Y$EOdF=|*-pIX
z-CNeK(z_o)Yd)K?0_jNCxtaSx7xqgmt*v2Q>c~PRQtUIe$vel;yqsWiS<_%M&;3^s
zZg)y0!Q<eLB5BwG473!;H~-;7YY2R>dj6)>trkvZE@NAsG@I-ShZIbm>sj^dml**s
zAp9nsHm<Pai#o%ak$y;=bCS7VnV0m79GQiM@y(~QSsocoK*sF`4khZ!V0<;chHkW&
zA~6qEZ-wcfnW_Jnj!eam@tk&=MZU?~HfRa3%ld;JxOeY<^XE4|5;lfKY0a<+Pm0CG
zg!Ri(M5idVZ{Z(cK>{z}w1*K)Z+&n0qXZI7p%xR6!&}Az)<wa0h5r?c(79}*rgM$Y
zjo#NR5hvpwST6^8Oy_u6p!9?9@-8pQfy`%W{+0aI%AZLdb5G_-!3C*6X!sARAt7R_
z@!wXFVPRMxW&-4-Su?<Zn&r6d^e3welDEndikRW8qN~#r+g>+F|NLGp#j0Q-LeF}3
z<$UWRADgWMIhP;t<x@dIi3R|T3i8oF?u~XdcUj4}xKVrlAKmBMT`1iMOA0oFVQUEf
zi|~nuV7vrLQ^0$}x7{w)J!@o*l~*RA_o-uoK4J~l^SuLLfLKjlXOKq>CdcO3AKdS<
zY;yKD){uZ(IrRi?Z5|DYCkxxvkHP5@Oe-waV(RkqL2jMohdGc&%RW#Zsc?2P);L87
zODsy4h25-u=7iNrLxUDFvb4K4MEPI~aZ1akgb4yLJc5p@G}Dq~_W=<*mXgNeNC{Ot
ztthD{yJO5RBJ$$Xr%#fU74R9y<R<{Z@Z#A`1qrnL05s?(;VOU?XaLDri@HF)H&1Vk
zVZ4Mte>th}S9tL{J19Gl6$`c}<iFkS-9?L$(V(OKRyNy$6;n2EKy4CWWCCt~4hOIh
zUCwvT&MOGn(S(FU7ljFgd$GmOY(xtL3?YEjSYLR!&aTD9MFG@9O$mWQyL&>SyIxrh
z6TF0SNI~X^!zRBjewF-F_V#LJ1Dm#S8|tO>uRxqx$l`-!Gwb4YL7M6E?yW57*NyZ!
z0J8+iSbmV}bzxPd#Q}Nrf`tV^npU6Aeo+jfl!t_5m?m!?$ZetI1Vk|hr6cWTgy@e-
z{S2K4N`S8c3+WJntrJq?$GQ>^2cGOlwy3L}94T;29T7X&)GQitHp&kO(1b%XP5nR#
z$={~~^*U%4TK_NTu$V?&+qPN4N^(#jibbcOc}VW4v6j(oscA?8<%H8FcU?P=l?;)Y
zinA;K*b!6RM};n2l&$Izvs2U`iQ9+?8|i2KJT-gTYW!xrLanq#4fG-JhqgI;!8HQX
z<k;|qPUxVPJt+2?5xcX>3=;Cef(nWn3o%f3yO8Rd#duHhH*w2F;W+GXTOn5WmcuMF
zQ9Q2)m-eq6B4}5IXX-@?bif%Me#i*Yv&|${i~Kck2mm;6y9N}O$kqLph_L+?msws5
zSG;S{VU&k>6qBG_=~WLmy<!J?+WT@Ge#(W0+yCVw($#*2<8=E#rog+!g(sBg-TVP4
zni^`>`@8F>JS61Eo3+FgH~J)j2EbL+b(7mTEM*cdv}{74R>k;gU;T|Tdt6y#?=J$1
z=JZP-ACE_2aU+Qh*h0Lw!$It{y%fOQj8xywAiV4f^PID8o9JdvxicTq?OAPI{bT8o
zIlXpt<U-rltd%etRdMHZ@0r95{-7qdqJ{LjQ~a-O02IoCFG!3fVlf!M2KZ=5el#gt
z8+@f;5kyr1<>^Kz1_}*6`j7rGjrnibWliB7Td`Gb|MSa%KVK4J2G+}$lAW)pbb@rX
zJqUt^b;Yxb(f3Pl3U&{P59k|T>!tomE0~e(3(pPTt(nAUNPxTx`NuKD+sG$Qpmwxi
z;W;AsNe$eVu#tX8G=>uA*8STV$m>^u)~4I<+a4Og>HS~evHl&3<Fm~T;nz17hA9UV
ze#wlE(hv!C>HS+AiB8{M&CjQndo_oz@8p+EHG~Y5`(kc3!U6!8%qu${R8}f$T>WPm
zES9)CfCb%4XXjy6FDwj!6gYEnOlxaB)N?BhyLWW9t`{kAf-4OQU#`iac*s-(f1xV;
zmY#F_&3|y-eSdkbhwnKjWEal<0UD?w?(wuiq`o0Fi)?o3%Pr5Jwm`{=Fa{An`k-yh
z0gW2WYqqTndNuWw^ycz8L!l@P+SGaht(CMgl{OE0`)dd${)p?AljLS~cM=kz3;aAY
z03Q}x%c17Bn$^`BLCp2NzqVC|_V$8$lNH%e#xP~MOUgZW)C1|@Eg?a($_Gv0M><!*
zk6eTKxDsarQ)VlUG(s&VfFSF3Exv|D`KxO0!1R~p)sI=^paZVCFrKi(&3LPARE1T*
zTcFL9PrlN=YkroKdmR83-#}<l63s#BYUXBEqb^m(Hg%eFp@-a3i>V@Cq~6`~Midlq
zZKU&9#bL{(c-EdYr&pRU%Dw@k5DBqhS|}~;E?OS;aQ*3!-;Z?dl~g77!ttwCD{*u~
z!NVGh6#~xgZ<c;(2?`3nXDMqSGnlP$iu0IlM!r!eWPhES+;}4qATI>(7?%bgyX@WK
zh}%pyO=Xb^h^cdL<1KBltcSKo2YKJM<?jhVmYMjXKVH8E9%}s<cV#aZ7T%QKil}bb
zoH6?86>nTODd^N8r%>83<uN$z!hlZitK9Cmy!iQhH8;{L17L212YV0`s<dGB$5b_h
zS*?^xI!E>Mx0z6&(|Ib<baQZUYW<!B_d9<u7m^q0Z17)}9ng;ov%+z^w6#N`D8Xko
z-s6>T?|IKzw=1R-0kk2#p7lS*+MXJB@21w{!OpFWZV8z)lnpiiv19s6kLgFK18wF5
zEvNC8AdG<fcxAeeq>v2x8dtfV!XP~g$c$OZ8uWgjH8BRd7wJ~wE$+RVM?VP~!G8_<
zI|*Nwj}}!rPBSZBbX$E9MGsvZC0lGY%tyEok&6W}<FQKzZPJqxdCQ;Oo*a3feFxhG
z@g8VduRtZkbr2TO&2;6JH>kroZQEM?{6c-krVb~}ZIbZVGm(|H@T1q%oaK$m^-V9S
zkM1!Imd&Av$yl?Ec-Kv7Su=Po8!kK7BS)aaP2Ve4uKz2+S^G~lZV>=GmIZAG9o-=3
zt!HJ6l!3O+Ot>f2343C;gjtdW*F}cw=y}J}?btjkOt<D1?RUe}o88Ic8eR#*P;&05
zk+`YmKzHh`XErIqWD6q>7ncPGpAdc3;GKS*`oLH&LC3mw%PHm^R-=Nm8q7KZz?CSB
zL#ikyKy+jsT!XE|>67|Eu8IAy@Xd`aVcA3!3){^G40Ra1%EH7E<#ej=G@eGZNgMa;
z5yIhpK;)9AlR0lRMaLL-8A~r$WfZpvJD2Ri3SFYOY*OkkJ@U4qN8Q~7vC@N>p*|Xu
z5Xt%~q*V$=MQ2klrW)GI4&bMR-ziN}94W^?MyKDCZ+%QzO`Z`bak`&)6QlCXrr#$!
zD~mBhgew|Xt2uvT;poho;#IY2-8NhIu)JBj+=*YUtp~hviY-_uRQ1;B?;z}EyvNIy
zqX((1n-}SD<bmT=JWhN1SflX(9|{X^V4_)~06n^QLwGsbC>C3ED+q>4>>Zzm1P!p7
zcCf9&Zky)VvD&S@qn~iuen}K&m%hEp!Yg8`7YvT#qhFwX_Devp6SOXc*-Hg@i?{G-
zgzGlY&>#aWev}iAOK*kulHSQzhd;({od3dU(!e`dXnT?L@dnOxWs3|>jsQvc$$If_
z$EDQkwi<Lv^*#5DyI;YSGD{lu0g>xGHj;>2$P^up`9sPD%Vppcg|Je+^rP5C(2<9V
zRl=?{q<k%bY3P4a8W_(3SwQ;*7?|^34F2Y^PC75Cp>a}x2=$JofJrNt<k~D24*dU&
z=ly&9(CFliu1I;1_-pm)L$%+WTM&bf9A{u2`ESM!_UPr8Nxag-lu<eXIh;7zYqIJ-
z`Tp3M-+v1rF;y`J0XgytJsM)zGTj-euR~yCmDrCc2se0{8?CU@Tn?ZEfb_!ZvV;aL
zQX4io*S0i-JSy&jI#u1-U8W4y#`=Y@#5i$N?WW2z9IO!oAHf?ef}L)w_Ko%_Nz#42
zG|#ka3}XVYX15FgBuu5&Wf9<gBiiFptZ9!uVt6yaPxxvZP>phFs&I)rb2zx(7fvxz
z=S%VRt`@=PDAU%za;(J1gc>GgoRtq09(K){4FzTSOi5yI4g(Q-*IC<ncW?OBH*XuJ
zZ;0$Sr_T}#0Qo?$UK@a?@|u#Q?$|Z=Mn|9>JCh4V4_}=AQPldgvp;=5)9zl!C+tp#
zhcPq82PN=l9sx&V*Rd-V;v{c}nBtS=?Fi1H?1of8$|#7D*`(GXtdJ_2+xV#T#Cd|D
zdzRDf1){o3<$QW%$+;X_5PY$nCOH!QZIQkexr(|pVlkKRlzT1?)NEvtu9itgDFK;h
z;lsEVPLW$IBZr!Tp+(%un3r_r#h<&wc$?I}$70t^czs7YAz*p(?5{3r3@E5ydIrT;
zipe~|jAXiUltuleFM>;xvnG?imsI^{2XtM%0lUM;c3pp|bPk@gcDjJqck{p_d-I;{
z26@n>0JQ;_pc&%+zG3=QK$Qk3i}276)b(hltX${fQ&MGr7jJ(V%9^AD6|z$_9xr*S
ztVkWzXj|uQ{oM)s8sIa;kfxnm*<C`|qZ(1;9hMqXmcnR^9d^=pdq)^97sd)vJ(z7M
zY6(lY9vzt&+A7f1;nE73wAf++@A$L$B%m^`aFiru{i}xPI7pN5G~b&RR>44}VfqUw
za=pqECp^A2!NPjj7I}<2I-bQI^$_ne{}|~9q`7#OTW&M49;(d?JkJ!39@PFbLuBbs
zAlBwd<7XEN$JXk!qezH6m;_}_xkR~RV}@UaHm$o4rGD(I$?y8!1P+rIIy<mY*uC4z
zLy28p)4WQGL0-!z_B{YZa!U4H8&?ft8lewC_~W+2!Cxi$i_g_ToCLe3HnjiHPQ<x+
z{mub=LUDr55!ByDRaZ&O@M!<zetrYh^Z&*5>VH-z@D%9WXLz{d5j^-{*-06U;Ipr=
z|5x8Yq3oxH+N;5TP;qRIaRSKRLks`86z}=9&7V%B^wU`bKoO3RpX<NHRZ#p1Nl>wY
z;TsTPIB#vfc3DsJu<KkKH(Q=b`}!T!-YAdM77u*O!+w?r4JS<iFkJBdI%A=@h3X$*
zcup^g*E|~}wNoCR664_pe4%#*r(gwM0v``M>HlB+FaKH&@$aVJe>Vi{?I*XIMf7nU
z+blCHXP2)aj8DTIkG4=!x|`tcd@g|%5#o9*aP%8u_ToH;LKWI!@6}yV@-$I@RhTcB
zm%%QoE8?-jqrlX-oB(RKlgQnRP}ki5+8?_o@$ULRZPMS-lYfoF{M{GFrqB6>SI3Bx
z8_U(Mx`QRazj*zBHwgUy*rZX&XyF1qOvvbGjSNq`CGe)Az}VKemliX7@R-Uk6WjR_
z$LYiI0E2Z8WWHevdEoeUGC6F3i1hLN`Bt#HMTVG-nUkCuXPKF8=t|sHQ0Je%y4~h_
z>OO+4>;}a!Zu*UjC+!IvzP&tU;Eez6ojz7xzPy^uxlG%N`yk^A_@}9+t6HgS|M-6Z
DSPNdE

literal 35005
zcma&O2UHWy`!*bUmm(dcccc?~5fPClAS8qyML>u&kzPbPB1JHC1w;^&00E>*uhLaa
z=tZg$1nJV><te{^dB5+R_Z+fic6MfVW_IrDy6<aAFuSc!N6kqM0)glZZr!*80ukXs
zAmV3~<UmS9ORy2JBl5kYf1PNe@9Goagv$GtwJ!)nbNS*&1j@-{2Z7@68QjpZ49r_^
zrpvR31Z`@6L*t-iO|$q~hgV<OJm(ZY71o@M4vZ7t`G1>zYlEukrX|M`r==PYZ{J(V
zVAFX)d!3B=731fg2x9>vA<`A$1WNvF(9`FsvX?2nh~zJ)U6T*8K3|;(DN`V<S0AW`
zR5b6;5(ZDg^G7y)hbJmV@>E@0b}*T)V6YAY>EC}Wg<oIU>Je#ivl<adir#?YdKTQO
z8OT)Bcqk+JK7|osK$1Yt`{p3YHfrDwYvwj;>~-K~Rx&Ix2H2<S{a;xu?})u_a`~tL
zKkYB7P$k1J#t}g&BMZbUgsz?Z=)YTuI7zK{`GM<b5B}OHS9#oacPq-HLY)X-l+S!`
zRfm6gMvkhzajzjWTDLqnDmd7a<x+!0OJq(AQ`liaUqu{mIP9&r*Ox8jw6svsk9E(f
zi(h)1(BX?meo6MGF_lBxf)6E^y}x$gnp;CIwK2noC^4e>p;eSeC!?lJb<z)6TG#)S
zj?V=}2JS9gZtf+loH=@hjH{Nb3~cHYB@($wXx07r!)0L5l1^)3FFv2ciTP{qPWJbn
z8hGyRr^xohZ_c9w*PJW<tjz_bP=C;Vc>b1R;tfAFR^)P9PJUXrj8r?$kQXgnZ$ogZ
zA+?HNflHBN^4`m<Y_|S(T1b<5BEoFf^on0Sc-hgJq<3_Lb*JT9#(bWFWb(*%$mbu#
zu$}b2fKg(*vLxzSkQKTpQmTywP6pedknDVU_pq$m<=N<z)~55@hqFD$<0y`-0|hus
zbQJb@dx9+?v$wZ<B*Q<mZb*Iej-3A=Y`qr_h0>lRIk;NnG})EreDJbPQ~9K{e!B`S
zc>Z}Va8J35PI*S6XPGd>g^#ZW;d62%;F|vP7GA>2My>DS*^OKC#lO4zHJTXK+vIzu
zGnE7LAx8$bI((K#am#bf`N6glxkOZYozJL@GX2iZYWbgd3OlXaV3wUjHCXHKn1+SQ
z@2=gWrWi@D<J)6QKELNLZFTaV#Pc|^4rI#6g#1h+bURzwZ-!apr*{;#W;XJlW$ypF
z+-a(1uC-EVV%tU2nUd*v{`+|5-fDZ)z0pRZ%3arkXU&f{OuY^rI#0G_u3Hdcm{7ib
zS8}xT0=V5;ip1yL!*~$X^)B)$U@|)*Xav|1i)yhT7t*!ZD|$4Fy<|*gvEjSy1R0gf
z=N+`+@IO9i6=Tiw=WKp0MUMAkQhyzG-7aMBKm+SPm}~2E@(j|-5aO>XIDELkHn6%m
zTVs;v+b_O*lz49_wzqq~EG1s1e^I7+P0i=WXUT;HvK@_7?Zb{sm0M4bxfW8MnCA$<
zPrX5?^_}fx!Cwd87|OGm<7J}}E@T3<-!CTBVI;(B#ThHF5oJcV-?=TfW=HPvyS~C6
zZ@_yvvoI+s&FbN?)8+dyAQ60UW^Bhugn#|<Si>y*csn`u7#f9Z9lqrAeZq08t<i1D
zcVTM}{co)vR742<SsxGvgs@iySww&Zv5)dm{bs5(%d2+_FrTE|TGe9P`&UVILi@#k
zEgUw7=xy59CG4EfAr~UXMax^)2s{k*yx|ayy>AxI6^*{{AGFTPR~%Z!oBJI6s*8U@
z0V_j1i}16dgsrYz(I+w+BE>wQ9ya^y<&$;79UC;zgWYdntK8LGvLvw3{2k$~#H8GA
zUsG)f&z8O0a$09;us_8zLD!ay_q*8~uYTNI)tpsb^$XS2sNMl@((EjJT6}Z*&4LiQ
zmt!Q&c;(6!5Q5f(3|mF{_DO|qO+1k?*)^OROfFE|>7VCAX+b=x%W<wKTb7i0Evw<c
zAb2|G?%U&!8t$19jp0As<m5j%gcj0vt(CyT=11)hwCBToUI)3Gg}x_;MG?ag2vh`)
zj0FTi!@D2naxa05iSV=vP)~9whp1~o%@K^FKrM9dscE~@)W~_`xNs|Fz^s3Dh8ubN
zk+aWMH(UBhdWCBO%fab&ZWXL<-V=N_SOJedU)1gzYuN|i$H<XlSKbj9xYJ?87+$1*
z?eOmIhb&AI%6A4w>`4f^^qPFJadp8ftL0Dkn&@PnP1XI{9vtzALcYV7M$*$-Bimzj
zkkuCC6*-&zy<4hx8D4`4+;UaE-v}0`F1?4~HZ}c+(^V!-+b5}i`q^6MJ&w;(LYf{P
zpdHWTk6=<%@F7#6$EacEUuE@+W7gIu-o-17sC6o6n^IY!;m)a5J-r7ZF2&Jk2v+`<
zb<+`9E|RGn0*44b#hq9VJFq<DD0s+&d0S<HER(l91aGFeE1ey->E1gSzZJxpL`?9g
zn}P19csAUe-X8t<LsVUiJiNuu&i6E>OTnokAv1sKstyfylHp>V3>7tx)}9pW;QdY`
z-Dvh<#EUJ(i(_kWBq&!Be&x!H`2PBYAQS`J$j;wUvT8f(8rP}}+pMqqz?=&t<ihD(
z%1{PbL?~*#-vuIJt!uf<iycQ+$cjJv2TcN(L=o3$pGnI2_<wXcU0n94*bIi+`Sr!H
zvph5hA;Jx}Uv*XaeCet30n6iS2ud#<eSKv+aV*$J{*zN5Q71XMQ5@yv5kN<WG2ZvQ
z<WfILE_v|&5tNhr`@mGxY1#BH`siNg5!A14$dipNd~aZ~R_P0#b+>EFQEe5yfS?&+
zeMerwqH^2*T_|sZ_Jw(oT(0s7^tvqe^MHxwm43)q>Bp~YQy_H+INc-|Oa6)lHi2qu
z={IAsL_%1(T$jAfhqpsOIzG-j>iNnrDb;FXMhi|1LD@rEnS=lhD{D$g5vRsTTFpW{
z$?;`JHbK0+7R)f$T~EpXT(6|Um%6}}w5^8PX(xiSCEBP>oB@lCu+NUzt6dHVBtgF1
zYd7i-H8zJ|;kI-968Dzg;m(57Gh#w<O0ykfqE?_mLP{Sorr&*@N%{0<(uv=YbvQkr
zSUCt9QB(df0(opbQ6Bm47Cv6vPOX!A0UHqZ6Ci?=QAV&o3no`db8P~G-Hvac4^@s}
zi7W`d_lf2ErwH~(dgEXqThh$TYkM+6y6L4LAh*VtN&Y7J1<C+pA4Wjv93HV?+<&K`
z;gG0I&;^n(;JXZz<p}AK?bl18hC0(0+3l9XFHV(ilIa4VgzOV3hJ#b@&uD`*tlO>k
zl~~K;X^QTjyf#9&k3W~Hoc^)i4b9>S`J}%cZksQ4flb6I;MCX^QmEW<{lR687>aMB
z$-KMyymPj*D<n`*IZ&qfUyH!=_BH4C;r^40?db(;UfSWwnavs1Fc}2PtRRW9Xd5;E
ztf7`#_o0`OuNHufAb%}KzF4Mfr|XZg)3obgq7Vj_ZLoI!GVi9&_!LjDCcoB=@T6(B
zs!gw@7WF>uj1lzJ6wREb=ulWr=CNw#iIw@PTZ_KK;>}+tQcLMfVMKglg~|5E^a4)3
zJd!?Z88mu5w-r4X(|*k{s*ayl3jMX{GGM~1We&f&DKwSLk7|7be<59Wtynh34cuui
z`EEVCRTZSN?yC#p%8(7Qf*%VsguNz})SkQiLBqdz`kXeXjQmsg(?$ANyH%d;Iz>Kh
zv3y@D^qk`P&1+^JM3^tcuww2A@wOaBnD8xqVa3&3S<?GFRC&nWprLO2<q|lKmvH=P
zex%I#Sw7Xn&Gael(x-cZ{Hy2b)5>io4UeYgK6$iKbBCa(9lq9H(OF@+67>4(@pA2X
zYA<-~&nI0oiT_py3+$Bk@n;Ix2Gx4ywQ9cH1h#>ealLT7;p$~?bTZ3=qfpnG#nirZ
zg9kd)o(4l5NkcMam7b3~HWq9<3ZWjHtUWjNJa#nK79=fZY2%cNfb<h(5o0(aAeU}#
zE8Hf3OJN)-tW%3$Z6C111yT3#TT8YR>V&(L5K~%$bzxR5<z)DvM|1Rqu$zKy!Oy4t
zQ))eOruX0Nl~XmmO9{g)$G>rk7mNVgfY2{VWXWLFAhfdRp00iP<=;0hd*zLE-Kdtc
z@66w{K~@I$QdQm@VNeZ0R%lB)X0}Tx7|&2gt`qva5}s4QU+vy2O`EfP%<V&py-5Q{
zJ_4115Ug-1<x?ihW^pj`6jfu%BfK8fV8ttE=aa{9ZW_5xdl+0Ddg^(2)XS;i*UEn|
zf~)lqi0h%i<`BluOnJJc)slnL;HNcj7UPS8;V0uqqg?@Yb0V*U7Rf5z4lHJUXQ8C9
z*2Z793madEDxE^#u}>W29pu%qP~j1dO?oE_HFWoO+oZQn{#@Er^&){0;j6eK+(==|
z(-36M(WonH@1gOJUWBi0XWLP$@F(`rb0e+Iv3*Ib7Uu{5LGEo&I_y~V^g9t)pT41~
z8`dy>m@nXkexCq*7O(qyne(AAjH^ZbPyY+gN&@Ifo@Dpb?TN>C%i+zxkRe^Ox)oO4
z9aAlPc2@lGX0I`lg(Tf$)V&1{?chUK0DP_u5M{+iB897mc&I*+nzYk8wH{hM;R(ht
zG`#^;1O>!KPYQTA-seTka}K?Eq(xY0JF|h)?YtyLldip?%))OASb+v6+>4_8hCeSm
z$Db{A=Z92GoY;A!WH*$M6ZT}J#dSYC8B^N?=jNk-$thSN;HN*)2QT>>?~W|aB7g;T
z%E_gijtJi=t;){ZzMg7ysYhQ{eJKrM#}bwKt#qCp_flebltMnnxM3@qZ9&uq-=8vC
z6IR)Vx^fPoOMX)7Q9%av4Br^jC~h-^=iTJFP5BMZItASw`Eu(Sv4HY%l?sAxV{rwJ
zpQ*s~kzuCS2Np2k`jp%#Yl6Rah9s<EBD32X;mxZ|QT;kFY+wl_sTj1(68xJ&dgxht
z&CyUVts^dUFs#ghF+ugk>Sq=(dkgcp6~glOYVo-MHtgDK1&gUzEj)u9g9WHYB1GzF
z)s0zi4~@d?MpK*%Khi$<=t2h_z5#&-?~i8Q+*l1CYijGyF6}q02t7M~aojM+0*}ed
z&_-E}Xaz-ATx}V_?j>I1wtn#i)dE2_yxuSTl5@bYK(B~BQ^8iS!k$PUglS<<{TanH
zh_KKBc}t}Fv$F<HotidIvSES0HtoQX0R@!e2=b*j$DCKvi1i!qZXsuB`I7GA`X*G8
z1a09;Q~!F+tZRG=J(uuj7mC_3VuIeIxv=ZEYYKa{SDt)W-q-$|Oa=q@tvF7ZK|Cdo
zR(<X7$}U}n(AgaA3a(oIT77DC)l+(y6O&hr(lKJwK7NHd)$mT}9_kKyimbK-Klphp
zGh<VePa$1d-@pzKu2&S2Mv_%?f(l=(FNeJkxA1DXiFN45-n{JHy(j9vuS8KRiEZJ&
zCoNlPzcDAF03*W@NXCd@#Y@+U6~j<IM|Qc1XR7v4W(FKzaZOPaOVrChs;(#u_H69x
z5e&yCyixs)LVU}2*wXs$X@&KEB}&K8bTg#(UMiFJsxguUe}2IY^whaAK-FH|oEVhb
zxTKH{T#9Wb)1<xX+Ks#shA>_&gIR{ESM9;FUG6*t$7lTu$LpIhcB{}J2L=p<Zd<T-
zT2zgoZmC27+o^9OMvU(f9tG;3kR-_{Gi{~1t}KcDUkQl+mB0pcguVB#m|@Y3XM``$
zcIa>4FQ>+AMcDXw@Xu!Na{sb(NZGrxq@3&EByr0HZSd|}R%64D{4oeFQb0Fd|7=Zm
zd9{7aZ{>qcc5naZr5CMg#)m<_{a&e-L02o~6*+$V=ltT;z6A3_<~}*Se%$Pn8&<e*
z1DoqclH>dOPvb%F=^N3C_kPpUZ=N_<u@s4q4LHb5J}OgALFW6mB8cm4q})DD5KPoF
zf_7ksss|rMA`l|NbgCiEz8^+%d;3Qk=D<W3R1jx^y`CiM`No6>XIhbOaYk~UzPefN
zw+{cJU4ec^f|vC@N0oDuWXo5u44$GJ-D&UlmqBF@D%MbPsePxdz86-O3|7c4FrHNW
zbd3t3ZM#9TdsaH8+H&#G*^yw{a>moL2IlYd9pE>u;4y&{o%)-*b&cl%!x!cUB+0Dn
zR)~@ysk|MuM7&$gDM1IDn7%O>l@-YBW6pt=S7!9h7flh6R&#=^h}`4p>MDwVQAv!E
z9zUh$zAvQe{a%{3BD8V9*ZX)z9hzBqG~?=-M6;Cf=7}d8k`*KO+<8$}f*tPnY2(Q}
zpI|qUB>l}hUyn@>8@^7yiZYO&`70yYf7uxwILkZUb5EbityY=aulCg!cIjWFD8H5`
zajp;wE2S>aYnBK?qcv32sbKF|P8B|i{g=V>B}dy(d)|{q1f98?rgbowwLDV@OnCS8
zhBzjHJt{Me2A;&)CV^y)m4ucvjX4Coat+_$gz*OdAd=H)!YOD6&|y|R0?nseJThIw
zUkk$qXfi|i_SQ&7zEW?DpfG~mUgo=R-?VOeiL`dkH`S%iz1A~M5{R6sQn|LI^{t>j
z1^hkYU6S5;lUdj@2!G=oPK3GRR;U)TFTOBXJ^Xuc#G(Ty0poa!+1fgNZ4LM^STMAA
zDiS<TQeB~j^>}hgE9-lu83P>soE>LOKAqGhXL307q*>q-;ghN;$4d|MrRp5TJJ@*6
zm4l|~YdmZ}@ruq}_PKOipt0%h!6h^OC$4?GBr@3q`zA??c-*%C;V;+p$eN-b`D~G#
zP`9?=c0IOd`-i_4wxk4KAF6u!l3|L9)Vp76hIBn+8PMGEon4`Z<+D$T)^1*5<F!{^
zzu-Ajz}t<_l*IkvgMg!)w@woxPqzIUyw5S)e$j#H(YD<=<-5TN)8SR2b}YYJUwEY+
zXS}G$9BKG*7B=Za&>i*~t(_6euP{FE^U~<%XnQ*t_8!G>;}x~h562k3DMJz{xwtYB
zdh8^xu7UXf``DTSJ@$>@{5J9A;Y$UpVH?TgI|C7W{a5<+MoeER6)mvy2ls^#Pt{K<
zvyGm+Qni>`cF%iljyXKJ?Rgwo>k*Smc2wh0*S8pM-_nxc7<Zayq0=jJwZkj*eN`sQ
zsqb|&T^jhSX*jMLLWg~E`i`X+tz|U{ot5bdVtV{U*pXM%@re{QX7}jTqvKbTwE-`J
z_Eu%wr#jjuO~Y@8giSD05X^nZ<%%Ese$f^s1%EIG)rXI|RP<TxmB|}VtbsQdF9=LO
zG9bvL1?7dj+Yhby4>j7!35Co_biOQe*wNDJvFTYOd6Z%EtqH%XBP}>4$)<Kdvu70v
zdAcibcw|R5sm4LTP6ya5H51`shF{0r;mmV!1s~*z2p$8QzsV)U2~n9Z53}C1sj1XE
z{P;>CBfcf4_jK=TuS0pf9&gjzu3lIl3|KRBi>p2d=Tnu@*Pg&C9pkM&p_hF(jzdkf
ztl(k7@C_$T17q52joBv~sAFPGCGvxTO3BB>vj)BgcRrEB#>%JW0rs@NU%tIA0W)=|
zp79ld<Bkk*Ip{sD%gzPvX656XGVtMu(8SOt6HlN>ML1aEPj$y;3WOx{Hm#j96K3ha
zkOXrl<NKuj?g)ua`c0*_;DNN_3({3$l5#=O#%P<@R4-#6jh3%lAx%0o+nrF!nS|<$
z+{mb?yyz_9?|;M#!JE%GP1+|Lyx78f`g?s8I`Z9)-?Z6)S>EACWRXI-F{AqpZw{47
zu6*3*EqTF~9#RY;iobi<7^jgKYRR*e*SOr_w$#1k;0CtxgSBk%j|i+XjR;S*DkL>!
zO-q)oyuUOsrnzLjWVcW$!3A%w{5VyOhKFtU@sE^8)`Sd{t{S(Y=x<URf26WFWN%H4
z)(-q>)EkBcX5*|N(Yum~CR5J}8t5<1E8F8<h$(kx4BIV1C%SkFt}BRIC_$dqvPv>m
zDCkABYnr<e?Ii2emaI@;qL4;9b1eL`O-dZUfrHTZ?6+d1QTSku>^^cBZeG}`9YrqF
zKn(>4iql}LPF&`n1)()(=Y>4X(gN~kc?VWW$)zFOl3h+r&s)FN>LpR1QG93fS8<%$
zw|x`*R`v*Haf{erI>?DG%k!nlr>uAG*7C>PCf38LM2O`8!RnDOFOiw-Sm?rwiPZ=F
zC?i_ff%Zoc_%dTF>iON5i99Tre)gLUKg`=NPRo+1rA@2(3$}fc2@;>7&HG2NkQ0yI
zSM0$<2@*!ZJsf0s`cJ>mA3Q|+J;vOoK+wdr0*@E|=PBk<hA!_lSrKFkc~i!VFRa~D
zx~pPoT^9rIXG}U(zUA+nP<d^4pBPV@ByjT6?%mr$N0gZhwp!%o>Gp%WtqW=4c0&lN
ztpKLy`Cn_rv9pY_Dbx<a2dB{|CflW<n)d3v@EA@*(l(cE_|5J=m&XVqAf<E)1r%4F
z3J)<{AxO3;r#<_dLY=^09GeUZdHh5`{gq(u6IbMF!x1t&@bgzTcl&{lujzY~5fv;j
zv^!b)6RSVC>~FPl+v{z6AZY1bAq5<!05#31%#;1zg$%MhzV*o%ELkein=ESe7s(dI
zRsrqJu&QF5-1hO)r_*Ivl9c_bY&7!xvMKznS4J|+zq|6ks8uo?x4c*9etSnXvf#bY
zu#j&gYR%W9oQ2*sO;rc7*MNT>r_h&IfI6~6^rU~h;JY>qFn&ry=?T(@ibn?kMDAuT
zpE2M1Bmyt`((0-m_FmjhaPfsn+s&dUGEX+hE$VOfSj1o42gFOvI^+4q+=zQ6^&7ht
zyqfs5YR?oc>XqWUbyEq7PZvEZrUm_<Z!$a1>`PhH$M*c4N*}NrAJT)5m&`wJ5x3J_
z6u<E|>fkTs7pjH`mP!;yAOd80vdcJiAmU_pXkZSZ7%eFrY*$q;&cu!Xlf8>1;p;W9
zupJs&vhehVTR{%s%-i~X?Tw<D3DsDRWWch-#mE5RoNo*Zm@mwzkC)cV0~MnYdWH1E
zoF;{h2cHQnDY4#V@p08RElOuw2~VHt>()1#Q+EFiW=O%&$tGqbusGD3Bb}CV1R{=S
z<UN%;h+qaeMYpe#19z^bk%A-qN>OLHd0&!xXqQFSzg?sIi5b;o(!TpfYAje591Yx?
zB5oO!8~O7B#a$%mX_S~Pdr+6mJ^2ZxFS%&OJK2jN2k1vZtQiybQF=wBI|Js#rrqz?
zkAgn{%I_j0$ZNh9f-j3WlHvGZhc%Ie%N1UX7hu00UKTG(1#9TD(g9OK!^`FyLs!Gz
z?8I!;!|m~;xJ(k+G75mwHN?*`lA4e)ezQs2jU!*hkhgRC8`B=V52SRLGC0zW@`Xmh
z>C{DH2euggSC*KQH9jD6W`$&k^lNvA7d;0L-i3p)<~^J%vRF=b4j`IlCfG-W_5ZP@
z0>VEF<OTr`Xco==;H+$dIS*Q_UiZ3mBB^kJfi&h>o6-V1OrM*CK-uQ5W1AoH^TrUq
zeI8_7_7vF`#2m!h@NSszt@$IiAo6@CLUS~q*sEj{l@u@uwj`%FhX`gd<TM1rBxU9?
zsH6yt2poLlm{B*}5Ez;F{W?8LlvP45*<NWK`St!=8C`!y5RFbZ0T$J7#M-XL^nBIw
zuOl0l5n*y<=GDj=37&U)-VZYh6tk~)rrO`9hEc%XX`$JL(zS}n9uiDn2&GP{CgXe$
zH8H{!ra@X?8QI3kNl)a7;lsxEEau&hZ5;o~4WY*xIC+CgZo-k)YjAR3NJwh)bu%9|
zytfoyRW~y;QI|ckM)m4z3%ap;&1c=h%L@##aJr;brp_9eS3#hq52fx!X)o_*sAcIe
z#=jPtK$FOt&_a2lg%k!c)H<@*+@vQB45S<c*pnEpA`Cc2u)5OXl*RLT6`ncy`6|;t
zsWT(cAcnL-*=iKFtIad{aw1R)DW1Ck)ya}ANy@@Eiot!R-O8Es`{!UQ%cU&VCH~`S
zoh(J^ns?c;iwbCT9F7b_b*f&2G>px9@kAB~sVQ|+evkG{xIFS+{3fO7V@#m5f!uYK
zLZ@zvto!+E-j~cE<uv3J@ElT1v+8xo#Hk1aWlnUONe7ogth?=W;QjR9J<kg{)p;g_
zn&g~Hdy?PD%Kdm0je2Av3seV#3%AuUgCNT;1YUB=$TbP4`e74J(;jaV?!Px10)Jm$
zDXj;bG<MjP2~zII0j&8{l#vU4kE(yerdQ^~tUXzI5~ohMga?K?oQ9RpC6=cza#`A4
zYWpA!qk8B;cAdpql2o<8>2!gyN0`2t<MWWxf+|ji=dRthSq_nh@N1)!f3H9n`s_$+
zYl#bO6c9CJ-7JzBu2gtuxAs3@kezPrYvI+Dq$Wf@tq(d@?hcz}Uf~k6dSEmylY<S)
zQuyZlj=Y~`lIb8(<RQ-rt>1)j60|(Ep!O;qGw+=IJrYbI97~43qVB+i!0)<};lFXL
zM#;2F4+s7}R2*X;+_$)6d%im`Ta?(;n$VS*{2)FnB!p|TIYy&R$yfXR;PvCTy&qOz
z<t?uO>-p<xQ;F)&T0iA}1&O*g1a)_2iyox+U;SVjY#cJ%XYJ{*1+%gda|oR%zK3g@
z`~asTi=r!)H?yX-nt}@#3>niv$R!fLPnHg~lj1}AcqP})L<F$2M*dnZ#DwPitBcWm
zx1L2PDbO)+lvcauFSLUbSKzi2s5|`_FfHbaQWd25r8UBcCqKJ@z4U&&x75O!$i0Fz
zvd)?xF!zL~hOD$>Z=9a;iIq^gTyd+0kV{To$4@dnA0dqZ{QAN?7eoobmKujksh`1W
zjTR3lcT4Lk>H;8NTdXAEufBXV$*cRW=kwD^CUHZmh-FJtuGZ8}VHZ`mxdfg{-*2v6
z-pZyjbU|Nl<d>JsE~9pHb;_7PrTQz~ri@e+CL<h~<aR$pqPqY*%b@HZkXhK@GXI9A
z`@(U5j4z*pe?6FF1sa2ys?(NScn});<SVTbEhfyMJ$Q2`<X(3j;>7GLZLMI+2yOcg
z`?kT-XkRA6%vsx5%W6Y?7TIDIxhl7m{^?!1%veExcvfinbU^5funN)<r%$3UOhp~b
zb&#jBhjtB{fxFGuQ;P($_Jp6#A+78oM5AK)L3j=kj)(fPS^zF(ZFDsa3-noWFBDgi
zgQ?QYv;;JHhUPVhH2LF>Gh-+-j7VgYwr^X>!y=czf{crrsz1?Yz#9}nqhgyk$Z2$v
zCB%WdJo4up*f4nwoQh-tq>Bo_=$BXKZM?w|?#!^Hl1Xo0Z>f6DYhY6>kI5`231)SL
z(UjYV)$rmtrf1MvEC@l1Roj`p&cOT`8ueajn%j=1Jl3p+8oK}cH~yBlTwo$k)8pe>
z`xjesfpq2BQ=cDCTx1zO{hm40UNgUTW3WoKp4IME{AI)PwAR}@2}^okn_3>p1XYG=
z#vQO-am}*fW%m#n;gd<*;6F%X8yKtpbh~F(QK;mF>kBr614Hy!b(7OWaW`J{cFmYQ
z8x@qif**!%OC`r>n28%|)W3g#-M&^Vwlyyjg{Xxc!@C&TcVao=nj#~xg=h0Yx^!5z
z%L;!b`H9>vZ4ol&$m^tP9ig4JE+)>56EeG<KF=+ZNV@T&K+03Kj$bZnT8~FKF^dPe
zI(W;^%i^!XvD@<^y4YIMMI#a@j(ITZW#F~+OE!rn?W4x+sGP{4R3`cdUv&`U%z1=3
z*d<GVh#3U+Fj+k+xWf#4m0*35f>!Xk{zc-D#&<X8EbOy}MEi7})jDYxYj%>zQ@1RA
zXQkY^IT7t+?%TlV(T9x5e}O(Z#dR@QnzU=&N}y2uSzz*o*=}#;-A^ayf=9mC+4X_Z
zhwRv<8FHBQ?o(caBj@iW4&)Nb6ojD`jiFegfvL+5zS&<W_+mbk%)fecZM0KbnXLNX
z<8tu7$G~H_E<~e*6~6J%T%#jde{<C-bEsJ<f|DGkaH|`a`k<2Zn`~RHP;y*^Qrd?U
z<kSA4_TXw6)9Slz+x{e_v61{HJvL}w9F$iwQEPoh#POxgX(@Ra#v|d$mblO{ETDg7
z-s!`ycSdcqsjeD6|06|>v3lKUMm#qv<x6e8G!fxOo>`4yxNz+k+5%LFY~nhyZA^sd
z0T-%W<lgZFAr+QKWESO+CngeU6L5zCzorjfck-Y~l%j(vcr(Ki?GlliP>BNG5~wz+
zGYs>>M-|`8$w6}jo3ZTU4ShKl@cO%l2bQkAT+*pvZRN~Hy^=nm=u;G6&4NCEbmjJt
z@|S|{!(a-sfR`OlCOM#ps9CyHZ7NKvqjY1gy_~q^fOah7L**(hq}fg7irr2eiqY<}
zYZ>bdBMShbl4$TNkp*gZZqx#?K$)X6Kh{5{eyG73zS5F7gpZjCxmBdCua4Q3gnp>?
zr8Y%Yn6)qs*&*F@{eXmySyW=n6Tl2X;t&f@%BkG10Ea=JOGo@}?J`qBmS4jvJx#1r
z=RSikfRIxZ64GC1z@C_^Yo;S{SY~NWZ~2TcD^yu`v}2JNi+W`BMmhY}pdSd;zja2w
zIxS?UECv{0W{my|<(1!hYsq^wF??c|k?VuzH9u?XD+i1#9~7*4Cb0ZTec)*b{mqX^
z36{fMRvt)GUIF1YR5pt)kODL#8f{MZJ!|9nWeQTAiP9xgv^eKmonCh)k@z7$&|4k)
z-r&W!8+9bIbdBoJb*AzJ1f{6=!wW0k1&2sDE0h*W8PGD2PFRTt1$8t{o6GFumzJq^
z9@!4Hoj$C25P!2lbw4hSD2vDv(HcYqU|lC{mEjrpSeMa2OxCeyZu%^5B;Q8~>zuk_
zJ$Pf?^9&Cduf~s@Y)7;ssQ{SNbOLL1HO$j-B2%-WmmEfcXxU<|!a3Da`y8S#YyE7<
ztA-Yr0ma=g8qfoursZCqX?nlaj<Vd&O*RG%nDk4P9K`T_DmTm^7n8r`Cub++T=s(G
zx~&va@_y>ty?UE|n_R)UK$<W#?HzksD<k+7@R97+4}0CVN9m6eznJ8T(8G|1;pd24
zQjsVq?~iYyGxmf5A{{dy32RQOJbu{6&IOSNSDeukO1fD8=$4<l_e$tME|gIJ#H~2P
z{nlCo_&yoA+Ma>0zdIT2rM7Pp0Pk|QLtf308DhW`0%o`@n+}9;`3wy0V<iwwu9P{F
zPwc%RYhv4dpb*@Td1xXTzdR|LG7K06N0Nvd8NvuJsm|xO7Jc`KvYxjC*7a3&`%Mr6
z0n<hoH=sG9{NCh);|@^<cDQeA*LJ*yO5ll(q+B;Gz@*NlY3-n{`5%tUA^8>2qW}ou
z3C{ce;5%wTT?9^-d<NkObZ!#Zr*opXo}$1lHGOBVM>N{bd$(fy>zD*!BWHgvKG&y_
z{10DArGiCeyWQb%sk+iW?s31wz&We0){=CCZQ2x>ErRqBL0^QKp+JnB^EwD2Z%vFa
z>WqLS(fR}7KtO?4{JGJOK+YTf=kANH(A$iaXMcLNwZ44yb9q6LDQzG8Hi^*9(w1ZV
z2{t2p!8@tC3ydYS-o?Yt39V<6dtn@?$FHPYSR0g0>vJNIrvOfaT;ghC_Rsr1M=TkJ
zSx?6&K~x|9zBBG4a!~!Hw_oe%y?Y#;1GW0FtSuRg2>PJvfy7gY4#XbOmnO_Rc)46S
zaj#WQLgnia#OoxLT_M&!$r!&~I$!yy=^qa{bB-bW^h-+k?%90Ju7`D^LOVH;<VxiV
zJ-+3C<QZDC@zI;BbOQ$V1$NxlJV+dY^?$kO_s?SkQjv-uAxbMM7n8?RuWbIrolO02
z4tR$WK4ewg<1piry$JV64qcSmt#+ZrS3ZMX`HOtpj8&542TL|sA8G3KrWb?op^z$A
z{9MP6xdMIn?pb#?O=xY*msTAw%wdl$ECuP|yz5mXN%Q;f;%g+Ra1BeBhIpmb$}vl7
zuxd_kOJ-ob>U2|9tuJy|C&e<_de^Mi<~*fOa7pC*@N4Bi^|I(Hf*|`rdc8=b9R&hv
zai5x;U`)}nspC86g?lhx@X)1<Rg;O3RQIyR#y<d(SHfTi#zHZ3A117^<<_Gz(DJ4M
zYwYW-`5gxz&j?%#<r^t}_%E@)+hJ|Z>?g*A!K8&)BW$O~8zyi>Sr-dey<<#Ye;(9`
zXXhSuKQjsdqyp0QKd$>sZL4=(AcnQxy64Qq&{zq?<HzsVx$R^Col$IX_p{}g2xMV@
z@V$rm^}Cgs-M^;%V<rpcgnhB$tLk&AX(#Vavi6!6ew5^Ts$HCv)-v9B7ZXu~Vlsg;
z(JNCeYix{B!ks6ib$@_hxkec`DQ&$S)5fXpk8(%6e^f=*5!Yo$5rLX!<t(CtsaiOf
z%4=MBHQT|1dd?T3NK1~_&CO_y`q+lj=ST%etVHJy0ADrhV<)<wBO`*z53NqvYtO$~
zv<BY5%l!~2c&&5BqP;dnb)o+Pj}RH}wHa2z!csWNFtrdxV0e^sqMg7*6nfWk2_Q>V
z-`m{kL>}2BX1|i3k30>B>{d?ty1<1~d34VB58bwj4nI}+lD%hox=XoD-)EXm|EZT(
z8ur=Ymd4d9r8=%bb97uvd08JQwHqV{vbIypBG26P<~}Az7OD*?`UCd&so9mq!3i<%
zR)avNr)D$klcbpY#Me9*n*UT8{RN~)RHNv8%>j4B>;<E_5W{G$(kcz=Jw@gQ2AMA+
zVjcEg`;v3H^tMf2pS>|_8g8$(O~}A(SR0XkVcizl4&Nqhzi?z@qDPBiuXm&GyLlpB
zn?WQf%U6KyrSh7>e!w9OfcPdY{6(mtXTx(-ZcuNpQfv1!iG%OhMX=#QT9a~D8kGVu
zp`B|9n9gM$PPyy<J_QL1COhN{vb*kQ*U}<@4#6`K?NV>+Y}ZGx)rZ;xJrLpNj=o=+
z?CoF%>E|dHd|!xqscm<>b{*+F`EVetbh>rT-9q-D@X<L6ZPGp+*MEx6XnklMxd)vf
z4b2L@1w4ptb)%~k<25g&Nn2cB+>&6cv=9$#8#VGoYYao7xb<LZ=`_vn+nQ-7#{fHO
z;Q5gyq3@2=ceRc9D=Ffnax*=dKQoKIluR*P%lt&UXEyI+06oA66aQe!F65!sU}d7G
zfycmTHMgstSA8?que-dPV=E;s!}j3FV?cgiq#T!Pvfo%~P(i}2Ut-q%n9H%m%;UpP
zCDPCO0&PdP{w_+85ia#tn|?|h7SnqS`Z*W)-+xhjGl6gX9u=1MTe5N0H?b||EPlCr
zM5Tfz=A&+FeWaKyPX+#T8N(uzI{v`drr~-@ryFCT*F3eg6OV5u%m-;5vP|rLblf3o
z&>Rbd)f7<I-}XSB9G27eBmsy!4-j8beJijzJuH7!*4NLM+$S<u`(|N($rU?8#jh?f
z;%4CIHDJ;(tVrg%B(6LYTX0CEdK6H>O*fdm#<jiW*YN7#N!xyN=Z()N5!|OAt&+)C
zjQ8jc|1?eyANwZ6u~48QB)cRIhq|PgKCIuSGTY11nY{Bj?`|59B2V%wwavby*|S<n
ztgrS25dJlX-<g~Fy0$l10&kvEyl{}BJK;FJ-=XS3f<bkmp&=OuXwk^ksXng0kIPPl
zTUd|<Wh9^g16NX(9xVIh*9#P=vCz|8izyJldf`h{Vh3z?WC7<zNq-5)6@&h@YbDW!
zXO!PB_a(j!`P97By}idh>v++ws7#ksfa0Wv^d&A6tnZ6Dd2uq0eyaWi<SWJztY_tF
z|1CkJ?7#Dtg?Cf3Dsh*G9e)9&<*GmNGA-Z`Q*3{nYaTTG-16Wb!>N;gTlk5MNkz=&
zUMZ=suS4a48@QR3`o{DAhe{*FjCo;~Y{eMl*6j!Wb+SJAddsC$lOwd11Dja&++OKm
z66DSfAL3)N3fH0J0@%Srqc^aBe3+l#n)S(aXy<GlgaSw%!Wzgv1OkBi!qsQLWrjhe
zIx@*uQZB?nfDGO}5P8zB9~3smF{_lBMCfNPZHy~}JlM`m;u<7E^+%alOLI|RkN)a6
zQkJVn8-6Um!(8iY-zI6gmads}DzU1KTt;nuU;7s&K!sapz0BthEwd3iW+wDw3k5k>
zef=PSKZgfK|8YqmT%SP^0@+SnVLPP<cY?Qg523Bz;pS!#9>q1^D@>XIylxQnnFa)I
zW*-dCe#~JgB)a{)(#CC158vzQLK-B$aA^yzr~!^AW470Ee3UtNBqp+p+($ipoHDcT
zeYu94VUqNIa#$xs##^=jz+(K7@1<Qde%(p4_B_3V->N%cdc(Sdzet=t@{w6zJ~W*=
z`Xb!>*o#9d<mP6rT~0LBJ>SvD-&LXq@fQmI<Ck<Fzef70;JG#{3UjDqMKwjcmMd=m
z$trsf#I9K0{o9RV$h1sRjC`jhTNEDfm;3{v(Sx$M?t+@snpzy~^a#|#H5-ub)7sFC
zd6dTk2J#~CP6~c*82-NFM%yv)DS{8+!)WSNfold0`TGF8T?Ag1eOPm($Hzpp`PR?r
z-aOK0Q|=P1b^8Zmp*(XxH^L9Q!sV4(#&i0T!N_rkcQIn`4<o-PJ5ZzAzaDAEcC@;<
zWj_0kPFISn#-ApN3H!x3iL<sHM65Uo^p`?3VX$=E_Hu^g{Vc7T)dDse?bqjBp7d28
z>AB0}UpXomb70-``RxFR{U;iL*rRcCzZVyKQ#2QK{a4!!vD^O?6G3>OhxymTf7jAb
zg$bsEvn2Qabty5oz|Zo|XYtaUeo*<9La(FLtZc<ZOEWN%$j-KZ>pu-mHBk5s)~&#w
zOY-m!+cj8^-}IH$LAcz(p24RGJ(a#I{X-p8n-gqDJ@g5~Z{eB&aXvpB{z<e>9{aaD
zqXWHD`wHH`pSar<vwyY(tJUMMd^fP#;BsRM#h8{Y-8Uom&CD;(X(<%<kpDtD9lFA|
zr|5qA7Q0u6at~FxmbGBGO-}#k{4m?dN?)Z1#Ek%^MlIYMf27nOhDFVR*V)sLWA>{#
zhwYmKyugYawRuU8crj}Mbm~3x;g?VU?F%EDI?tKsz(*o~KD}AY!U(|kx?{LH(-ek{
zctaZ2=#`b}<6d2kChRva&Vt9ORvVxYQbPa_3A^Ua&DxlVc=B9Q7o{9y+rP41-hNwU
zq^5W+$rPk=as6E@jL!I<>t%~);PHf&28n-w{Z+TqqrF5*j6g@jm{RliSgvHDM9N;r
zxvz}EM2K$%!W+tEWQ$_LgAVGEm7;x|MdVUGt!`56`r>!@C+{%UJ9=yH{U=ku1M;7B
zg;fvqi~2fJexm)2`~;z*^(>0?i}@AQ2Px|?nErhdOq1psw<l{dps`r~WxncN?fvpj
zWKB0YEGXog>hx9a;^?7{@b!P@$bdlnun!T+P|c2u1$C7RzPvJ1>RUg8bH+Z}@dUE3
z0&>o>`<Uq_F273$4K_sRw7*|9F%m{&*9H(om})E*afU;ZVy092WtW0Vb$nV8<Ergn
zI;S6E+^Iyl`SVaI$YXPkSPgox*ak2xqAI~zxk(VI@6m$Mwy4=Zr10f%%h>O9{3Mlt
z3}-!W{>NQUC1_3b<s=4Z6<zOMu97+(K1EYy$_*Rtz8MNoAZ|#Xx4G}|ov1e24)DVk
zNqQIg2FJdIQuzN$Li_<Jhmbd9mXjSb_+NSJ=U}Q1xn|A#jfAcXiMwP)W4{6RZ0Yc0
zv+}QvE9h6G1k>J-=08xLKuUNFA4PX|0o9K;&u++iH}t8%X3Y{P6gVPrlN$I^0Y+Lo
zPx(t3%9ac5#v%taVT*LDl{Z-u;Pa2teXvc1OhC)(9UWC2Y|Wgr0A(B9_Z$uwM@b{?
zfA$waz*qsei4nExhH?_ItESxJy^d2kO(xb5w9YaxKmIFi26*GREFBiYN5#DHmvyaV
zrg=xNEC+h%>|F?2@|eoABar-!gf`ESM%wutDj3I`kC!&LFasdqn;cT-tHfil9GCgG
z@((U;TuS_iD}Z`qIaJ=$=0vGqpL-l-)878~MNjcw1PuyJj(;|lF=tK$ojv=L@#1<r
zsvx*ukS#v(byLYg(&8^s%<02IIK=GqV62s2dUg!L!Rw*zGr|GXr26(w#~KiI?oR=x
z8kueR=eP85`9T<>%(Hq>(P>#9n3$1LRu8^X$a1(~hF*Auc7#JU|7ZGrj1x=cWTXVW
zO(Ou6HS1C9$U3&{$~CiP9V0}*rC@K!grt{@yc4dlKPn?U$UB|F3fa8ve;>oJlwn97
z^M|9H)}px}-1`GoD=XnUqM8Ht9tYQi#!7Zt%9QeQOJV3;?)~As?&mb5Jo|sAE0F|1
zyWB6MP67cXL<!)<#mkm%FCt9?vabV*q0WN-6st`~cWMYQ5g*+VZ~u@hHfHlfBSw9#
z`!<M6j>GcpNBs3w@oA{SZ~iY2WeZCCYgpAxzhCgbNE8_BLJC0upPr$Bo>~_2^faN-
zK_VsIu@hki!&)IlPow1fY@(pn@2h?S^i{BOHZTeUegNd)N(SL)>{(pz{3(Mq^b@q5
z<85M5EZE_o1;XqTep>SZvl?Q2jF%muyO*Jc_OG_ROv2!*rWSgJhss&yjdTAYfe&sY
zZeEZ;3Goy50(W?tbEyrHB+1L}i@PM@&Jn>|j5nlo!3x;qC&%^l8=F`6)(Kblst&<k
za{+r)zWV{M`No^V&T+*Y*3-O^cFa#P4KKZ;y<<0wnAD#>%psA5Y+!gROZer+hzca?
zVtO8YrNyKiEx%#NC;+~cI|_xwinGOFNrAd>t7v)S2C-=2QWtV4@oE8a>F)d=T<-|=
z!=0<;nj5E!uZp`bw`tzZs&i&!BW01|GU;IDMpLPX5l`At6!d5NE{sz>7~qa@54ay{
z@O@0Hwb|V;Nf>w>0uV|!`y%JTh=R5qtrzy+;bScX>L%@!MrLpCkj!a)?~;wcds}&P
zIZAriF)X1d0dJzNUyj>4Y0U<4p;}LNwfTHF5OpIiY?S*z1rw+GQ$LZ}-fz+d1VTbA
z5KO}sL(CVtTY$OEZ)*9Xm1{)4Yv7FA`-fU+p`OGWldT=OHtF84-AmwfF+Xs{dUrv~
z#){mS;xE`=p<zCqTl(9Y<8BMld}DxpuEUX)O0bYx`2t&tu}L#$>*#ym;Y01|!G5`=
z4=r3OSbi_9%%m=Utd~)utqp&IxioWUBhgdWEJK0=&nV4=GF0vK69QWzx8o3w_N9Ol
z`!7jCL%yZgKHX0v7I$o#yMPNHs@-T7{6p2X0L2Tr^cXd0(~PN8OJ6<~O<;?(%Ut&z
z3chBMZ;<b<2?)5od*ox+<cqX$!SbcT59gD|fsnLCL=6ZVOC<XtXbk?gB6CRIIBX<-
z{ax{?K?R*od19fyLxy>VP0cXMgb`p`bU@Jd%kET$^SX&0S~+*!&nex3LM8dHwt-;i
z+yK$4Pum}I;-9A-8}9v7-kX=qO+s(Pv_K!oqn9$ZKFEzBpH9Be%it7_geMBO$(yOm
z_uVP#vVg~S#gi2zE9#lNdoOxHDAY)yr|jgVW6Flv#g``5S|F_>xGDWqKtSe~tgY!P
zpt}!B4#IwB1~BGkKYTiiq4fWWVO<o>3WCx{@LM=bBvTPR=n8VEE?-Y98;qzqgT>0Y
zzMu7B9Ba?BdLVD4bh+-<=PGsKYd8eCo6#4aSOXyC6YU3G;(+Y^#-Ygqp{Z>G?a1zt
zL0EthdQ2fVaxZ-J(*;aYjezWhpjK=v=F;b(p8LP9O0CdBuJDo@fOC|oF^qzdy87og
zO%`=_WJz`CWG>pY0>YPyE136=ae6Z=1!q;T;F|`gEKAmscrtz`qo&`w)~6d>j}J&a
ze|h4w9oM%hDVw1!bnf+t<}fAk8A+r_*~JLt$ia%p>3<eIIxVsGc!`~}v?Vhm(+@jJ
zTH`A7R4eCk!&u#=Rt=XO&*#!7jidNP04w)uZ2CUkQR_RG!b+7_B-c~ut_y4n-gn?X
z!Ya!21gRe;K3zP=|315W_NuMMROA3~#4n8NJ1{;ci7a6LOIOnaPwLkS`pvMJSrkgL
zV{BBk-K5j}qz3QW$F=^}xs0g^w_~Mll!#Mx_qH5A-7EQ-bHK7-%PBT~&a~5nCRu$Y
z)UL)n&eIEl7klLMX>%`5a{)2Y_MF|>yWtQDNzGQ39@V+$J1sg4-{ye|_u7KTh4q_L
z_$Ppc#VTXRSobMU=@o8VKDy1(lr(yT6twj#YgO~@t4_U=CnKz|pL^&0t$Fh&xywQL
zcEc1`Ar-Iirn#&41yry9xv?$qljpw&<Cf-&Ie-YA=90tqy~AMEiN5jN*e=EGt3W;n
zx4qzu09w-S7n~o2tnxT4hw6fr#B%+U+Mz~whdPf*ic&@+U%`L#Z2NL@^CbHWJCa3g
zTQq1=;$L-m^^~omYY^wGhip#?ynN?bC%k|v?xSvje>o|l?D$7-D{OUqj{n?ryZY%)
z{m&D_ZI-3kHm$RubD^J`9M3YM#iM*xzCY$7-?&Oq^8ZVIZ#TYwa!K(V|B#xscXUoW
z!0yT%24G@VT~?acN)<W5Dq@&c1y75IQZd(j&FJob)d%VCt@bq2x5M2)47}yOC(~_P
zJ4^d~Fp9LZ!N<dyBxB)uCtGcDq4_i<y=7&-_B^1y=l&;}a`#j<y;Jh#AJ&|nM}=C9
zhY%H~=Rrpih1a_NADA}qarSpTK9Q1E%iAg9dx6$crhSFRIC9H@%@?&O6PzMfHnJb1
z>i@(OrzvpFdhw4LgDo*3>?uM&Ts1~J>z4NZraL!+7|*A8uC<ia%6P^n;z!GR>lS}@
z;r@NIuc<`2ZX9M4(+HB%yAeaRO7)Hm9pq-6ps6%5){EE7g%oddntONWR<(n2P0x=d
z4rK42WhT|cWcAZn`0q@jh-sTem?sLCtIzv&znEC^%DK`u>#xua*VAUs-h8I`V;XQW
zn24Y`xh1$15X<dL8kFuoEwgamm0F(W82v<%q;!pEP#^?J#&c64!X2BSk|=PJr~q>R
zoJgP$SibnER6_wuRjDFO=OKC9(H)lVJ?(Bx8tv%rJ$^gfw97|<M3(SvznF}`o7lg;
zNwr-urt<onA66K2H_6GQO^tokwJ<Eet#?bC+zWj^dcARJzUb;x&OrwcX|6G(oS7fJ
zE&B7443}~ii6xRESERGb2k;BrZAU#@&V1MK4Rb(HZs!bdazf*`eOSrm$llGIICc40
zktVAfOl7iSS`B77>(8hR%FP!i0l_JS#@?8UXN>>!=+YdPamSKTr(9AWki&QwaD@z;
z;c{a=u0DP(YPs0?7t`j50Ar%>>P@qR<>2Or4EaqyFEe($aAsbN0;~KIdF&w4c}Kk`
z*QMwe5NDX=jW0r<Syz_RVAV>~95<D{N^Sb=Xd>N%>scvqf!-HU00cQa$)e+P6xuF9
zWaLg{u-w^v%bIbc|IhAcgriZTT{mUK_2fgo!vg<7Q<7tk2tRWWhG(hI%OJR{&5sD$
zYkA=UA%k2gPdJvcJ?%Ku)A{dV#UDE17d)wk79T83dn#hpYLH=cX)>!K$I^UYpfd3B
zqo5X#4xA??Wu1G(JX2&Z+5UM5DDc<QQwUs`m$!EkT%W%e!%)9X316hz1)*&v4vU^t
z^OQ1=C6M#f{u7I=VtsXimP#e!WHdG}+&2U8GDwGPQ|R3mbpJP7huf^x4AdtE^Af0c
zGkJ{Tym{f<-`m1%k(n*bKGQtg#Y=OBM=eAc&-eFTlTjvh-AVQ?&-6$j0Y;d%)8)A|
z=Fm@*MJ9I#hAt>6II3hm^-E2ZyOvu{xG@*1rpay`rEE|_l(6Qetc*BL7Sb;M6(Y72
znp+dehEoZ@a=0Y4$<?-&Y<Tt|=Z%j0Hz8vNz;%8riYIxm=NM7SN;g{Y5xwyE?}2cR
zN6E(qQ+1ZQENJ9Lb+)1A-JCd6OY{6Y1s|uRO`U6j>V{K&%br3UDoiXhnK2;kL;8DX
zb|AE%gs_ZhRwe+UXLFh~?mBp)IqLJvSn0lqDO+`2xU}%JZEMPPM<AO0qS*T}(0;Za
z$PXKgyi@Wgm&+z3Ot?``o8|p;w(+wO{#Ek!{+OeR#P4R<e#BYKZ!2s<q~y8a?>f2g
z@^5hAR+$bE!WemSCkFadr6?e`41pUwu{jlBfIbcEkF~EY2g7!fM)+(sT@W{|0T~$?
zOezX|TN}lxVcFFt4D}9b*e3pQrcGLO_j8h@x#q8xdkv=!9$akL3RFBZF}|xP64BK?
z@U<)<LXzaS%vxSPD`tI60K-dy#WS>{r$j7ArhdN}2Z!Iv1O6388DjYPvu50*hK_;P
zfYg&$<!TGyQmQSV;09t&8@8H1Rr&pS-f9yBq2*SGBd!0m#y}f|`kssEG5k%-`n_V@
zl*7ZDaZl)?6QD0rSkBt`Yks|BTm?XNP}s)mGK=SaY}?+j+Ug_-!A*hzTUKc>{b|p1
zWV@R9k5lO7uZMn}<3uw4KmujhXk3@^)WlkINb_fpj+$cbii=u3TrqM-<{a+RH|*q&
zlql-S3wgP-m?3Yq-``mNz;#AVhS;vv&&w2t)f|UDYf>e3&o2j-6dP>S1M-%zDe1!d
zRONpMXlvVp$Bd2#Ds3YXjz0hoqMAq4UhJ1gKWgXI<Xi;lD7|dM^>MWj62uG<q1drv
zc7M5gnh0TKwO8vEDhP&I?;V+=Y2+-SI{nwH+QRP}=vD-&E%8Ra^|fveftY@55dMAi
ze_DGJc&Og?e;korBxF~TLdh~@C!q*gW{iCcWfu~%Zy}UIc9CsnFvz})eHq!3k*wKw
zSqH=TpYiGWe4p?7`+c9^zn7PebMAAW`@YU~-`D!SP6=;c4;f<HOg32R?$jPXD7I>_
z)5kw_lN7odoi%L9j$m!Bu=j9vP$j$K*b3T>;lAis*_=Xbf<tfR1)X8u9ZKqo>(>+c
zG#Z?MVi6Y*G+>Oj@AXPQoKZlkl*xJ!5D{BhPybQrQHbj0C{BQn9c1Yet$!nCN*T1R
zuhne0zJg@(dbIc>3RqONBg1!vC6Q=cI^*m0X0}c%eb;6I!wvIZ`r=#7Kcv{d0-)2T
zikg*}e%B3{O10K*d0sb^6-J|b9u_R1ApO2nRNs(BpA78p!Dnq#P<FY13U>VTinYx!
z8^veIbBmxP5G>Nj2JtB;j8+V?>7Ov<>|vl;KG^rrIP~=V^P~lz)s_tU*X!Qf0daQ$
z*eH|~(THfWXDtRZ1(lJ)ZK^Bv8@5=LhNVpszU@Z~WEln8OZXwE3YI^mXmZ0z?0pI#
zb_h^j@f{CA98{wL)@H%X8#Zjg*Z2Y%Su47LzHXlp?ck&BqgE0{<N%1}^|UV*Cvi;;
zje3g*UK$@^v*s5Wz{y0I8Nfj#8y2p1e0`768t2$l!F$>FV)fP~Hm<GI@7n89PtO(K
zVhX~MVXa$Z@&|sup8D*6KuhfkCV}z`LsyxMZx~qB){66fZ2lSQz&G7MQ!5A!HSf?V
z=3I->m-womaDVR$yM%VRw@Zxsx8S|6O(zhH6uyL{Q$cqY8dzZgc-yedw`kR`C|AEA
zwbmx70({DFZYT{az~NV2xtvmooRd)Yd>(q$N2NJ8Uv5i~MbMt7T2-U%zIx&~*b*h_
zmg42~)s*&qLB@;L#)dwrXU#_=*=!4^MzaShLDm8KXHOwUbU&d)M2cbnf5{UnB^tB%
zt>k-mBAPW2$iZeB1Hbj*8_1tGzH-|s#>d!e=v)L|){jp^j$dY-gxI~jrZX<QRp5Hg
z!Sd!ZEeFm81V}w*#Cdxvt>MlUeZ4yl0w6N$+L*c_r{He}Z*-=0Sqn{e>!}>mz&-=>
zdq&o`gSkvB<fsq{ydPSdQV{a4Ph^L4oR#xOpLUWrqj^@Ne*wDXvBPx6n#eXbRDpI0
zKDQac(VFmSQioRpAW?#-+4u38>D)w%wTDgiR?#6zDe%dID<ZbOP4UheAxRy;@>sX7
zaJ=*y`J)pCpWJ2R4rFxrg3g_&g;@wLwg^m@F<oobxOuTjFiWe1@AIK-!20kC1G+K~
z{~G;F^4-}yZ?Ur=3{3iICR6r;i7_+n$rk4n6Vk_IAw7?KJ-Og21yR@8cYt^ZtNGTQ
z7&6S~-&Dq8U|M@B2~IdnvtpqTkS|m%!>k@;Z+smgK^GZ^oUc;PJ9PdeSxxOWXp_ad
zZ7a0BrafbGAZ1{fkTM`vQ2&G-RwM;6E29CwP?It{v!jSHZ~gTrA;nA_mxI_TyI<QH
zdlnV=F>M+?9V!o4FE|)_@aR!pWSVUbC%oy%<DS|rcC5=>X8eUPqJ&L%*2C(L3Y{_}
z*f-P=&sTEDm67vM-uu&R?w4U}8^~(lkxXey4_jjgB;^3d8tVsf$D5t21S!VR1jE>Y
z{W2|cJVRV3%p0J!uUEv<q5HR91$my->hOk@!;bGyr3PFLF#P_}mhmp$>3Xqy?}d2d
z?tJvim%G2~X#Ep^U>`ky^=(zlCPB!+9GyiGP&Dk6I7;epUgdz0e$#V;NR0j+2mVWJ
zax}5&w>_ASGHMnr=g{}dk@d@;jQ5ak+PiLgA<u|7isCN6S@-$iZAka?EB-w_9Wmbl
zakTA&NKA?u1LR;;Jr{i5W>x@RLr@+nD3IZo;(m*cDw;q2C;*o@40&%qDfn4iBH9~H
z{~<{|QG?ycWU2nI?1xm>is}JxAag0=e);->MKpE#KSVi6labtvWSx9Jk|s&)*JnL%
zo-QUgcep0fNECYli8)V)eu1&?CiuR34B>oU2JOoP(gAmkeq9Z@ZU0cRVceoYG{nDx
ze_gtHgcX~A@3C1~dWDhef5>;ZIV4p?DYwvm=?s8RO$2ADOS_uGkq9_AtOS~&;YAXg
z3FZ9--iS{iz*j*Hs-}3-%h$sjs#h)iaE-L=8C{dU)bonM$Fz|(bVT5qTjHu`UI9`}
zR3@+0W8IgP4|!;Xe{&DlkLTKTK7$~Fc#`HGymv)hpU$Fq>dqM`VAmIE&7XD4od`DZ
zZi_&`VPa%iaQkn5RV-#TdboV-Xa{=bsc2*tM(2)xesYJ_<JH^rFzYlacCrmgN*5t|
z7`t+6;F;5Zg#y};x%hK-vP5{9x$<6YW>EN(G9W5vfiVKbF$G^wRZm>3Tp$ML22b15
zfpcf3jo4vl0as~K%pEYZ$M40waH5fO1(I>#K11+Hv0)pjQgPu2OU_>adgg<eiJGo5
z_+~)${&1K*FW{QMoLjX_N?YB${&wQtfc}5$9YPl*x;AlQX2Stw!^(ej0hJq?#Rg6M
zdk@g%U>*tqRX)`2r<j^zAbu_c#LpQ>jfIF40dLPkz}u5SB6dwxh{*HvO?zogIjMmX
zqw=_l{6)yGxA2*sQf<CicPFZFo`Obo{40a=vmK#Rc6~l$+obl7i}0^T`Y=yy=sTah
zcQMv+^W7Hvu@U-~^WEZ?&$U3t-C2+|<>LQC;QK#>t9hPopZRbAKdur0T>kTf;H++5
z0+*bXKzpzDC&oe%d_C?@=w{#p;E5XYx$6DS<3deRJ+v{S6&D>V_UL(SFU`NX8KT#o
ztZ6D+v3WBC?MlA*$o0r{B>tm^&k27S`q<<k8MywdAd2&gt}Rg-au>g}Ga<MyiglUJ
z4U&>wRh^d-)14Um6OPlAPB^|t-@x2Bl5_EEuXp=xYNcJH8_(_vl#j}4usz?Ga{To9
z7t-q%<DbA))<a%`sr>uIw&^xn^u-@j85E*#a>z&HL<FKi-iowx`xC`~e~&L<w0iIj
zYB9v{NlDqYUr*0Jrj=l@D|H;7p$TN$o%ykKEo|ziCp#gVyr4|bVtw6|?>za4!6*}w
zP!W!hS_G#7A|clBxeM~>)y${iRlQ+-b)x5C8<q~Bu#>Ppa`!;kwuN3=Sl|1WO`sqW
zBap$QI}gN$d~dTMT3d}(J`&QR+y^Zh{Kkq04s3UwcL*KMMmGAI0-%Zr2aTUU+{0m$
z;%Rinhsq#%6V0Zd@+dhVAmL|V<_Z2~F;Q-({j>v(t8@vdbVWK($#A8VZa4a7PMrg~
zIafGW^7y@^e$kU+G9{3lNpy(4Y;{U-LgrN2lR~V~VQ}>A-7*7z@vmk81Siu4NX5q*
zc>{@5Nu1j`mis_8r{m+4PX-MmXze%aJ2SItt!o635(juY$y<;LCT+rqHLg6;XkY>W
zY)U!uBUc9Xc=Qu|uM#q;{b?MSZFd?0jhLEDP(d{kTVyz7egk?aqF%rGhCGuTdZkMz
z;dl`B-)FeGD_fHiQVfFQ;s1q&NY?ZIkA+D68HmPfHq(>x=>Y+GJ@E%2vBUpt?p=s<
zCbwYoAY`Ojv`^=5vwWpMT&^coih=8HZ-;u<0Q-JXcMs#jJdpH;8?_&#k9qE{g1Am7
zlocfmwL*qd4mt4@i0E%?Ffr2(+!*=G>{2-=jt&7$y_75;{*3_LJbuiRy`qu06cR_m
zK>z(m_NHM~H+CmSFk&b8EIv-#!<6yGSxC5ALalKt+z+m%kU$Mp6SS%zy>Hi)QmXTf
zJ~*#h{XB0FD-1?`BLa19!qScLORQ+v3N?-{(#2&Wl^hBLymqgM3|)d5cZS_PX*Zev
zsryf1YxVHnCK^aCxw-#@Lk;@(rs7jV_&e_=G(qAGC%w7%ZiP_u&$HmSmL5`IqR!y;
ztePm9gWX?>#Ti&GdlRZ=gcR^}VeKvRt_ExkxTO*WCqi8#b1cbl$CY6B9DNH0FK-)&
zIdE+Vp6LdErFQ0CI)PiFk>1sOmu2iiDx1)RW577j9z?O_y-A7SKQjC)dl5iNzizbl
zlW2y0P}*??tMH6jfYDjr)j(KUGSu`EGyx%b;oq`LA44p_Wj|!c8Qx4>^4M#FJt+lR
zUUfxH`(FnxU}O>hNTFf7XBd)TQ|Mg{sOK098$)|8=R%4!wJ}>7NMi1SrNWCpo7;DK
z5-2sX!vZTDg#1UW8vxy5EGmHXeq(O9uB~RXkT}^nLSlucRsszRNZ8`HuEw2xL{m!h
zbnXHS$kBac1GqZQ^vb_e59sZJC7M%yd89sCEG;Wbab`T~Fiz`4qo3Al0zuTjpPjw=
zL)_S+7pd6x0J>JhEFgT-2FjByyc<*X*!$tlRuTpvEcy>JwZ3k&vwqf;qWrLxpqlA@
zr-GnAeYR9vO3lcIAa&{ZXpPHo-whN09l(z-fd(c#ZxV{atVr}cYD%$Yz%O)3PG)6-
zI<FpEzjGthlBxi!>%3MVFNh_mOs;a6w8S%&Nzx<^ly5UD?a)C7l*Jr|bi4l4q}wQ9
zks)@xM*bkBy2y4~Ia`WcF{QTVDxso@!+t5(*y%%pfRk~?3jKOpBtbT`Y0c(M=gr_P
zQj;{!XI`E^T5s;?#5~mH-WA;y-Q6&E`_SiI6^dt&JL1`#)SSv(dlA0no9Q;F4*BDQ
zI-V%)?A)B$^Q2e3w`EmF+Ix%W6vdxz;ELF2IX*nYq?D>zHEe|&I&^FlM*)aG5(HgP
zf<Jlh#q3s*0K3-hgM}~H;=<lt?oSs6Ez4g2vh;pc=?3x+C`jSEA7PDWU`_0_<4V1F
z((IH-&l!8D<^$!*G=39voxB_aB+I*(18$SE^dA(}`@uBK8`*#8V4OsP4Oq2qNAcdx
zk{)Rb$)N~Lzv^t0INH>ZsB)OwW;9{@g1SLs;5?10ZO${ig%>e$IQ|rIjq6I<J6wF*
zZDUAOIFL1p@BTZwxI|D5gPYYiec8Rg&uoeuw<hYRE-Tj=zR3%PIm@_#5>kg$Z{gia
znNu&?-I*J_Dw<uG9S=kjOH%?vviryXQy`Hbv2W2Mj87WB3Hc{Qzwgk!f-3pW{Ma);
z8s3cy`EnyiLA20XPvFom*YKF3ih1@4Ljyk$JshsqPLp?^AiL*@820!YG<B`MRI$LB
z#)$-S7X47Nm`G_{uF9y3Z_|Su<xL%FwuaklPVE}^ca+{t_$GORabLO2pQ?V|-57u;
z=qkB_B4E01u0^z9fHBFS)I_Tg)S+bD)HAj5kFtloD8qYTDMJ&@n%KNY9I3k9F8JQr
zxLUV2@4<Yn(k&|Yz&GuxV?P5O;a%6^)PMEieqOMl|CZFL8Lwco{?qcO-IM_MVa9$N
z|NG0_F}L3uz&YVz)Vg<pUQGE={h(E1O<6W6Z`2dc?f{NXQM`%!JpXE`BrE2k*3zGd
zASeJyw|MN!8M|lsMj@diakhPU?qra)j}=i0kf=RV-MS~zI*m%;khe6+=0h%|sN7z!
z2>)FqXMTR=<G<4l^}b0r5lG+5fH0;_35+oR!Qf!b>GhrFYZm3f6924|#@My-6eQ(c
z#Br+S!|GaqXf!E-t?Fy6A10zXXZ7{EU6hc22Mu!}sIZRn7OVxF$xjM(W^Ue5wrV4J
ztd^3UH}w5Ifu1{L4%v>LxLAYsgXRz>p83W47%X2kv-V;n{yE=QNF4Wmw8QE@oi04g
z)s8RPMsu4WO~?xctelYoT~Egq9y}}uo0*11x2*Dj!)6$Z>qS!*xsO%#|Bf~G%qcty
zYe4<2oU-Qii1t5T?e4dzW4!m`e#TJz%H-L!DG|H)zDHEU$`N$F8n+v29lX3{6zsMd
zLtSY%-_JJog+89}9x$g`8RujiJCusX@`XAS4J%reSawg3`!xli{E_Q>+b{h4X8Zt9
z^;n#t`rV}X<{F@&F3S**%9U8P<IcRPL1D04(V^e%a^3k|mW`KsAZ&!@TVnPsjUIgJ
z(fC!d0XoWYo1YHOqi*FKdFFO6^G38+>WqyVGDa^Uu&JtN<Gg@Kzy5d+|6{|ip*}8C
z5EzEnQ;SrUd`f*o$v0YSvy1AKzu348-eWsIi`~>W^lJEmBD7;|0*OlS9d=5I=o?nK
zjDaUR`+HEEPh5-Gc}X>IjuOqx8mr3IQDGP{{urRNgB*}alHpFY>S|Pw7rOfNsf9>t
zkb@EcRBxTNj~bydp@uO}v$3Y?j@wQf5uoa|BKHP9#M2@x`(3a=C5%j<ju}uHVsBJg
zMs|@1B1mYmg1@Rk_<z7(i2ZQ|(MXD)V<iFazGN51!w2Lt2YSL$_A#J>yg&yH6$?BJ
zgvm-F0X%frNBcJogY4C-A?<nB$UC4R_EZ3XpF&Abi)i%&u|sb*{q@HH79F_9GwR+)
z#bJV14~wW!)uCV{^aXZQ&y`lW@+ixmVx;Txm8WP*pga%(#sTCNMXOUOaDD!)2z#|)
zX!nxNS@QD02R4N4gNH%--XlR186jh|=f!i+3trIG<pEE6zKmO(ei1^fS<xh2G>J2R
ztoK_yA~o2d*l_s)a41fu{MMQTntvWTi!T;=S*UxtKD1eb{sZ)3Gn=hAS>4nnp@0$V
z%4vJ)B#=0=*Xk>?Nz7uIY5_=9XZub5*!_+?{V2m-xz=R~PwUXEn*d4FgDPY;Hm~N8
zF!bCzH%me*g3}Zepl9GR&^w<0A}U1B0K9;k%|=<QOs@;hUL!F=j|!oZB<@H}i#Ui6
z|K$df0_up0O62Np@zJglXr>O(jAT{E*jj>o)wM!DG?R1kLgz`UNNR{@wUIyz_b3WI
zgYUiD+bnHz3-D}@q0j<{dv=UP#P+2W3P%Q4ZrotEP<hzu(Fgzh>DbTf+DQY{NTRsh
z)}sEEvFPQW!0`(cO)e9e_@;rGGB;1cHcd9pNIdwh%&n9#D_(Ysil>);^>ZO2%OTVY
zxZyr~nlcDA7d)XzfUno+mbZ{rCG1Ijh0*WJWnc=bGo#L(6n>n}Z?-0zD`Vw%nU+~b
zd-<gsh|hd&JlMK3PhS)YTw&}4CU@^_fv_UBv0T2PuIgU=M~c@kUrGDcJ!2oGaPLPj
zBhXs?&b_<2F~CqBo<;M441>eEsgGNm?@Kc43th{9d=$}_?07~($Ef6D-SK$h<7djd
zk4PJ0Sd~3_Qv$CPgcD3aBMxW{%F|F4)g#YaP<D*R*sv;9^k0GrjZW1H@fPgoh6!lw
zSKaQRfcXUqkPe?sf|>-r&${&G*mq4LGDlt3s%jd*d@~Tqm_EbDTqH&^_M+(Z1J63Y
z1D#*YQn5{b<{!Xo9HO#6gf>6P6XpXp&wEj8`CvHeNYh+BEA|WKMp-6=FJLdV@q;4g
z%}-tOr0oE}j||F51mE|bW@vqgGdnz}1k{L|0d20|8b@L@K`?<)UAThP-DgvR+?n2v
z>U?Kc4CLjjfQ9kx%$TMN0^>|L_^yoI5;IKbg)L4z4=6A4?TDW`{fU{2<JuT1Gu*2;
z-sqPs&U=0;s9b4mTPBbS?ysB2k6Y`-pOnyyIwyC-93gU>i8$(LhF~@`!b|a_KPyQ7
z>5l;o=x*NKe|#J!ZJR(*hJXH9oL5BI_sU~3GK|BNi=%{Rzqvh($+G~G*0TwLS%RAW
zFPi@Jq?%lRtZN`$TJ|iJn@~Ib-%{ZJw;ewsdI{inth@nu`aMFWA^F4+#Ii6cB1wM#
zxlkqm5F$7y9_QS=sqeD3!3<c;7sr5VTWBVPw!GA}_@z$~TwP3v31d~pcCX2Bma}5)
zs=B&JGv5i%4Azh9J7db0K3g_PQ9upcmpCc+UPgkYEhlydyEe*51t(xu0B}zINm|VU
zCFZOYanpFCm#larU^|%-!dq3DVg>|y6$AlAWPn1#%Hx2!{PI=LYpfA5c*=hsY~Vc>
zMYMWw;9vS|D8~vw8%;X!`Qi50`+W%Ki?@_#0JFJW&4A9gBw=?QE5CWFM|4*I^&?R6
zM-koc&2Cph^NrvIAb`_*Ixi7J`273E?)uuiEjIB^S{xiqpSO-8f&(S<oYERZ9{?3_
zcaGbBG;WKWQ6}UjEficX-1-5#Wx>~Hw0EKs3<lvuA9-_MfXpDk2JbAuKt`9|WM@di
zU58<^zn=UpIHA|C5Gaoj3Zu5LaWfZ?Bqsl~LIO1$PXaQ;lnTyVKeWJ3Rb<1`WTbIB
zup;rSIPLN9;GjtF!Q5wpL9EV4CYU#-NKcx}s8k|6yQ<AQWl1yg*}^7Au`M({I3WhG
zeo2)U&=-Ny<yF7s=B%Fsz&wz0&Sy*Ma{x1I`q+>`$iOFDs%J6qGuPB5V?#-@{KkmC
zJyAbM&Lj<hfy_mKhB{E@nOoh2<v>P&V633gP1y(76*2kIKOQ2b$3nRoRE($cejWUO
zAapzwQALPPDMo+a^|u@A|ALn(&>H^?Hu&>d0l+2#ex!uYYB@&96RP(9A3SFN7mxba
zTyg)qj^FBCy!Qy8)}`R8TPS4{V2ONM@KXu#baidG%r(hoKWQKi74}=RA;1NID`)&w
zP2uCmY97FLNM}v(77-Jw&z;?sK+MKRxPdiGXXZ~+AQ%_Aa_iNF!;c)rK<#m0kw8(;
z+zY(T2Q5rXt!kh(+r^J}8nc^^0C1)ifRK2+BTrabH%tr(z)MsFgNbG{p>$WapTF<f
zT@zoHbxQ5}GtTbv=^cPu;U>5K?JfeZkT;!uvjG%;{T6ia(i%0v`J;4b|1B7(RQf8J
z@Eh0~zluL=j#`#zeAFz>nm_hBC~TAY-1?~=!p!vp_Q)<%`X0jUV5+_8c!~*Ig(~m*
z!9!v1Xvhw|bm|W<Qfe@WH%IZl^dc3c6yI_R@t;Ix-KReh-afIiXs&8o*;iop+sS8i
z3{WiD{Cr{%nczN|YWE6wGq(+s0bVrw!;2NoO#(+_ad|?!<)nieZ7GL#Q6Osh2fx=C
z9Qv3t41{GLl%TX9ud~1pD|U&RE3jz_j3*v_O~Ey!Q;cm*Ql~|DPJriM<=&p8|C_%n
z2Aiaj(;mT#ca(PDLd#uQh<CM0eel#)>)sa;T=%QKH8$A%C?jW<*KADfn_tJZt&m|O
zabu@f<33&iwr?~Wtne&T=R6Vo^2Za1+o{1M?@`~&swMN^=1ff{<*si65AWCj)i6u+
zRO>#zDoJb?b>z<Vb9r5{>r*t2Q8+bkM^{!w;VY|bm}G!$`mFpEfUaVi`NT`{nfv;U
z+dE|gcrvenS^MC5;#-WI7aJB|g_dEow)-gxsN02qPVxCHCN2G7@AmtUZl(^@4#wR6
zT@K|&_%8i$9-L}St1MzZp<ay6=x-R_?<Z2C{{SZlz!gzw(&>&d<r|IbqW$g{hE_F6
zht#@VUTU^DEM_in;-cLrZ(=GlAC<^Ze%xt;9d2Hfd^N2(W0&7(Jnp`*840#KxouN0
zGUz?~#F=WrK~`-<?t%Q8(`x1^-<X0jCPm)wh+(ekUBLS^jZBe=Ma{XXxA+R#4N9fQ
zkIq6MI>^br3T=)nkY1b<$@FYc-qcw8xgCWY=YJZvrI3lW|MU*H#wB|qxm4ZH$YFjP
zTfQ$`tvWv9f7K?t>f62@Ws6sIkUL)3>6Bd>dw+YeVV!YA{=Q-(pOz!(`-|Q|yDY4Z
zp0NS^haT%`ainG=JNdyxIU_Dt0@98>xBI)W@h(^UubkGrFcI@M3-%>5{Z`!0bHcw}
zF_-y%^SW2OU3`Gt^5*5>ESfWq7<sb*Bz@-v$pU4z%jA^zkj-^bNbpo}Pa9fnN)XbI
zifXD3nXV1VI+F8g{C*B*zrqQ<b1&;S7i*G^dV!}J4A_4+DF?~KU6HoSIggQC+5^wv
z$pU!%-6mb4$NFQx;;)(P$6t77KJbgt?RYBQ3q9M}Ro<<<?a49q*)C`I_(J#8b(8>>
z8}sVz@r}br$-Sblu-B@SHqOn}Y-e=7b$L4?&GFkoG-Ik_k2R2|>+H)4o-~M=+5m4c
zr7fz`7tPU=6q7+@V>fzCG~(bldg|}(W_n*Dc4uB6E3ql1`DRCv=rgtY-m3T5K%jhr
z40V+!Amdf-QjWuJmGExfJR%tt#KnD0QGxG#A7|dGQ2wfRT+}<FZSpyOKK;w`cHfVZ
zpPm|kh@5#&`3?=P1V(N50@WE0%(mmsDau_7VhiQ8D+v%jrF`vM!t;3%{b(<|NuJF7
z1Y}p@Qo1Ge_lRi`4Lf*AB`xw9|3TF6)S1Te*h}Zkz2mBP)^b!%k4wDuY<I2CGkY-5
zC%w(wJF>tn1_X^iEWviwAR=Uc6r0_h33|EL;`a0O96CxtaS<<7gSuL`zF31?-=vCm
ztDT~$yC0&iqRM(V5vP#k&?%ag0zz`dBO6M>`{!4CXm+h=pB^7jZ%baQce$pJKjH8o
zc&qQN16@}D)pt)!7)N>3tBZ%_LxN(%!*d#4N$&y*ow)e|zI7}T1@kDMF*OLe-+y{p
z$@Njlf)dHho|VNU|MC|92k@jO>!K5BOYakqi)Y1>!eU6a7am9Pnw#-tCl*`m>4NiJ
z_F);Q<bID*S@Z-yLBd%Y1t5%2U(~jii$^IPCMe8{A&@s!!bYN?tgW+qGy3jEz`KZf
zH(a;V+-YIZ9_=<t3ro(eawz%5VLADB>xuRk->t0d{&$(ffi<s>_uo2jsrjpNb+WGK
z^KP6-P&#_{`^y{DEt+fGfS*L?TPre>GM%MS*Ph2z*x~7#-IJl^)3l={(hnZXcDj@$
z^fsnB(FrYG3%tGEJc_?Ecyd84)NHd@xB)yaxjB*Tg4gj#7whpu;y<MFxBo1U+lpN^
z|J@s@u1T$SGu++2{o(I}JKhnY-Ok(jS7ULq-kGwoO8bjfEKWM_ZpM7&7_PW0b9}!`
zByISGz2SP)@|6(y(=l$crlYObzKzkx)4P#*zuc8$2g{dm-J7p>b`<Hw$$(9FHE0j1
zp|xWc?P>m!x_LX3GOGs=K$>&@B;$^y3u%n^r-D(u)9Z*E2LqC)Rw8$>>ofRr>wdXh
z_tSwodF({7Jl3Xm$_Vwbtv-OI!Tr<(k$h_NbN?K`d<@&VCFmhjyHndA6%<@*+SpV*
zu<c8?E)kT(1owA$Xvnw=fPu~61HONw#?jeZ#XEEo1eSe{ow(B3Mh53vU7bt5(wQbZ
z(cf|SF=p<RVR11CkfEX<US^$?++_FrBD)u+adA@Nl)K*VWM@)a(PY);y@QQsZsUGG
z<<|QFA&~l%>C0~nq=TnQtd5bQ6VWF+?TZ`OBM0&YbB)o}x~F4IT-7y{K6}A_q`$*v
zenrFb;=8{7W;e>K6#ZBzGLWaetF-OL(zTvvA*XRp(5@$d(TxL3e44zQd7p!k1u@QD
zufkQuzgE4Bzws>Lp@OQvc3LJmU;?2ZlU5E<*jh9BW%;dBw?$p3e~5Ut_^$p`#Xm~4
zo17wwx~<kdriVVt(|uBPbg9?O@^z&AFsId?RDj07M&`$iR(f;fJ%pT~J^fIAzV@5y
zc_rl`65Oe6tpZ;-c1Jw*l(!1VeCM9uqWV5X=dcjteGAZEuIF$p85E6n`Z%8Q6U?p6
z>WT7DWv!7*<EY=K^xyq+LD&ucA9!}+&AKOsn_j=NmW+SD6UT0CRP0Xqo9+r96eDUs
zH`QwH_Tn_6EDgz^<jnX7<1z{!at0(_o7z~lN!T;Ve6s!i5z(&^-Kbl@5EAkaWu^VH
zpLwSpYc`sF!x90JxQAzj4r@s;o_5?ShI1;UW$R`tpNY}xzAR}Eve-*57uEUTy=Ml?
z_4*SoVS95N^!Do(#wR>b4W#=jGvDGkt{jaitTXMIH~glJT4X?{C|tp$pXMPQx~`9K
zJ7nSH4>g}p8FyDb!!?ST#wOARdYYKcX0v4!ru$CrqNU(zHN|gTqfZ)%5cJ{?&&*8n
zCP4BWIgpk!2ajGX^=W1%`N=ucS3bpizV8;p!3$0C9v_h3Vq`B1YIN6(32QopA0b`A
zHIzmAQ8PylyEohvv)Zc{ehu0QP;x`ipIhe!_?&lBjs7s|e63m+iofdg-T7-=KX%C0
zIXDqMrD3%RNlRM~wga?EimTglLQD8N(My0qnDUumroyQ$OvO(9NK5DE<3sV|-(8|A
z+$WWiS4RST?0Sl|$H%Y9<8rFj8-8OJYVxp!wVO>X<?ShC!uHtX(#s#QEMJ_$pyj_^
zYa*)y@M>*2i%I0_6_ek0!Lj*!3wcffz8#wZ;fmYeb|dZ8xLz)8W#((|Mr>1<`ZYeI
zN0bT*ckcu^)J~Ds%eZp1?nf^BJ53KPIIOb~LQAS=+b<b%U-*ECc<r4iR4(gQwMN=O
z5bym{sQ_%u*y)_%`Q%OBjluq0Cv(fD?i2VaK0=c}d?F;a=7>=e6!Va0@&=b<fXsxu
zO_su*O7K#>pv!5w->Y$yuy@r|Rh>_>NomFG$QK8>yqRYWzk1EDzumRBm<^_pwK@>E
z1)oD}pg#3o2n2)WYV*SvwJ+$u$R2UY*kDOry3lP_<DD!h+n}%_r%j9*%EMJedG-U=
zR~N&dQ5TyXa0UOo(4eI5uQ}z0*6(M5|GfD=Jzyl@wv4k$(3)6Py-kR89I+I!31w|+
z>IR)zX5}qfE^IfqgelJvi+}#}C%=Qq>k|DA;74xQ$-T&sORaY8#U)8%n5fn9aq(!y
z=QZc6>bf?0O9q<`!EzbP!y!p{n_BZ<H_-3gJ^6TQ6hmMepK-o(ISy$+KJME3oD;D^
z$vO~JE_iS@Mj&D3hVcm_nx^DhH9nrJgyBN(!c7q|DQlDQogmS!pGo*hznMa@fS9s=
zjS!?hrUahi)Ji0DzE3JP>(D&_*4ttR=+qB0>knUZf4JhmV@&5QQe^sjYR@4&(6eJV
z@|h%!pxMO@o5K`?io*hbe+sB|3{`CW*SFqe=@xGIkU27j#gD-i82~E^=$`p<$Pn1R
zQ>Q_NQ+Cpt#ctuZ{Vaae@_l=Oi^6^`tWT0A_d6y1Ru*`FW@n-Cr(<<2JcTeB;@JYk
z=<7H~D@e}6nopRgW$YvjBh||>5KL#(!PR1_Z4Y|dM^CbR!!LV`zMk&5!Q4V}mHEa6
zHzEe_oAe9qJQtdE87?sp8@}m6U+m}%e7=9|f?clh%U|@w?T?EkZ5nvOQa5DeG?ClG
zQdpbBkdpL?jaTKztDF;d8P&p`0{zaMBec?46Vje59xZ!f+CQBuy`MIRZ5Ae|>?P{S
zStht^^hfhyol<OmtUxD-HQ9F$jIsUXoRE=4f8#iXHqkh?M4JWoa>t%GOs}s}Td6~x
zC>?CNdwnoRpBw`6O=t`2U^kM#dG$S8etTkxkK1rv*8^YFicH0Ul2y=l(m3$yRVW|M
zdP3)ssb}|b<2R99PGL6`%4;uOy%Vnh_Pp9~X|?UAm`p4m)~nB>y?xE)!)VU<rE%Z)
z+x4NKz0v$-k=8xaxj<MzZ&~`3A0k9oVU=smn#|Es=@BIyWO<7#j~8p$u@@*f(=aE;
zSQ^xi*Idt`KHcKod?Qk!nIMB;EeD@GwJqJqEb>3Rj-7DaZ_AWf9NhhSa7g_XKWVpz
zeZXzG8dL6V+WEv4u_58O(KNYnQg=k@AmknMOJ?_SBAdbTyS@0>qdoKX73ZDnQ-v;x
zPIm<^|4j~+nI!2ao+DJihi?#(=0cmvulLg3eHP+3#MV1LW@5vK<%|;+i`Ty?psYqg
z3mr@5Fi@m-)z_od{I9;ziDvJluigbdTfnYuF7bH3SArfBZPgt;S=TB+e#vwR7zhnK
z&8l3g;;Z1SRPs$pWYPG82@`dl7NfT|>@8IH-;s&%Au2=nw8QcXqGpWsRl3vW8Xy{w
z)gMfglAHB|qx<jnGu=DbVXxX)?bj9Uk};eRY>;NzeW6X%v0^{t?qd3sZ(kw#S6_FQ
z)9CR_ent3nZTRpO+_!fF*<4@sWI5q9XUf+EOuPBCF~{!NsG*s}W_vt~^TB(5M1N-)
z$Ka|MBEK!(04kb!izVmj5*Jdk))w(xEoHUbQ5hO^ql_mnbT}T#CjBJc6FO1|W2ks;
zwwld{8vhluQevC&YHdBCs(+}w`zB0uE6b;5DPl7Di8P}Bi@TPm4m+-DWDGB_<KsMm
z|4F7Wo{OGMA4X5T(n#P}r4f|l_cQAM9A;_@OYo9e%s`htKbL7fkKd5KVQuB9HjlP`
zSc%HXMCSQ#_>V01JQ5#k(BW&+uB{wn?Rg$Spq)OwQW~i0J8Nb5-n;anbV~<l=SZS-
zYYMVB5<9F^B!ZJS5JD{!NIunW9N3d<=xv_U>{okLXji-Ak~ZvL=2e$!TQOCDj;8i3
z;MPyr!uy;*+V<N)W%{G4ck2Rl1OxmMVfBkLM-8SMIdR-ZuD`;47yRnpyVu6zx~xXr
zu@}n+l$N>Rb!_ozwmZ>|0czU7=ZoUn;}^>$#QiglYBY2|iI+p9au?<0q=B=2W+_KP
z*haG&RX3c_R1lIx=hA)XY-F{VBkgKNzk)}2k>$xW{G<<g9WlR^>Un2~T%-uP?^3Y=
zHB;DW^OSBB&J$jHE1T_g%FS|IAT;ZdVyAW2q!NJ>B}{D)#fQ^ZnMr>re7viHeL+@^
z8q@^S$!T|b)o~y{IAK=lo^?D&I&hafAamCcxKq+rHf}Lqk&cTGuh4w6Tw3cu7Wc*`
zLyNb6{?bP;>uwFf+J5VaOAgaNn?spi-)K>XHhj<aojYop9ZqSptZ998Shm4kH;b`*
z5z*YI!k(7;scs|J$gqAWR7b1duyJ?AU~iS&#H-`oxopfM=#N7_>|*y`MAGdB-TiWB
z-)E!45$qHzsS8Wi*m$H=QRmx(_W1nT2jd-`viYOcl{<b#)6i`XwwmT6yBJ4dl)1AW
zc9ZsG^AR-Y^;JYDh<$I3)?9DCwHCJhYh<;n(LT{-Gu>;FfpY*46PQ#1^Div1E)jd1
zgD*{$@YWY?=yNV^hk~`BtHorm^gE9pf^fy}#ri^qtvjL>WERGsG>D4$++W7pqT6{N
zJ?@n^;+=gpI=bG6_4ndTsI%%$O_{<BOlhOArgCNvR0^bKo1qIT2lFpH&slYcB;(Vl
zazfW13wa0pp!7LLl%B>|cl*}e*7j>OX`9(TU->@Ty#C`)XTQqzU55$Xa_doBGa=6@
zL!v7@h|mfV`+2$NZur(^Lp#xraj=S3X;@jCw&#sHSW<X;E`-^0prqep(#u)cKsN_H
z>$Q^EU=SCVzGE$Tadmg!pl~nDZa>-GzJ#k>3*VMjQd_mAb$FcfoEYEH828m^qWp*B
z*iu0ns|HuX*!KyWKKtea+jE(2wOppV)v9r;dk0}$oYsZDEfVcJGG%?mspY2jc^Q*=
zQYd!CjDwhIW0@DA%Mh%uW!T=#iZMG49M^zs@iFY3KHs|HFT9H^=6q3^p;GK_Dn5h6
zyC?XM!<2m<D>NbmqHlXv7P0w%id`ZF>y$n2x1jd4(AHD-O)EI}s?bR8SfHY|I@<qK
z2Mn$^J{>=QBBils$K`s9|5OFc=j^nGd)XJ0&b&LtLiBurKXAzQ>tkgqayU3)c&|mE
zq}#Vl6Ka`WYnLJIv5RE;ebnV+nJ_XZH+mg`)G9H}rsIU`cm?dcHUJ==?F>h2WoQ`P
z0&U;=gg~@pA^PCe$$^%1csEZU1U_r3uX2pi_ujIWhRJ=$$oyPgWLd@fmsABj=r=3D
z1aQrn{J!Ehv^#U+Gp1XS_au7Kxz7D(U$mEB&Zo^^4I9YOMJgi579)gFo6&#~vbky*
zHrzJUHXJ&P^MP7|w#3~)mV1rP8qhG<(O$B>&7hb5;cqSJ*j2GsBSa3gY}D}l3)Sx1
z;CDALar51R{0R?U%~!0vK^EV{L%}o+stFfx5u?$<>xoge;L4M{7BS<A^b(XH(Olc6
zE>b3Y@|PGa=r&m$?+T}U4%^Z{PI=S9KcT~43@E*N1Wx*%*Jml0m2((Ow;<9#h;mu(
z)E2|`UdODizsPgRGc&B$SKHg1bDzLz@gXnjVBdWAjh5ad)+Dl^MOk`wR%BTOiamd0
zp9LHbcZtA)!iPCWcCkITU_}=pp9G@&zzJJdIU$Do>pAEsVQ>QPi|YMWuE*fW{JmK<
zR+in8N0$oGmIljNS_8Ahc7-q3H@}e|KB;5%QO=+I(lNzI^s1W=F`5|Weq7%aM@46G
zDCuI^TPc(_yI7$P4KsqgEE5ox0yi9_zV~>d{q4$nzFpz4PyNmOuLYn!GVZ9owS7%F
z<%vS`%+DE{Ug10C3Ch}fOj~+oe#K&9PSf}zTZx`VFcG8&gt%Tzd><ri338+5fq7HH
zBOQozoQ9D;g`O(>@G{>%2vg){VOcY0+K51SfF_v5>$}(xcfoL^UMkM8FyuqW%iAl$
zJ*~M57<VFzBAynu>FKM-PT~lnz)J*`ic*m1egr{|hcXdmw+4T_2x*}r8YCz<f|g`~
zwtDJJ6)l@fYq*G8uWwrNA&3SXrG4hT@yC5WLi?Nse|iu%mTygoS`j+rEbL6|9RAZw
zZ(<2DrJyz-qNLi0UJuxXiL*wx8!n~oY$5@<oPZ=zEN6faPV*>YB8Fcuw|yx@a+N;|
z-Etu%DvCss5Yh7hV^IvG5ClFZT_%rU=0JX5YSy4;>C<D5@tG=F{f7OZ65@v-x*CT(
z8@3eH+6-;)so#8Kz>hy;(4?As9@2Yi`cJ2N<9EomQ%`--ey7Mk6HmD{rK5R5cUqNK
z{%2$!(7#5^BQ5mTyy-ca+dcq~A$m>s-;?c~1I?na5#qX52Ew-YR)r{{q@nU*!ztd^
zz9&%<L9_Z%QUTJxDgXI;{RxUd?<Q>`NvF|7y2ASeZjIufS;j)ZkO(#mP&_<WSwM#g
z1OhE%F^ED65JK|9x>kgKw!pr>&$W}u={+1kmM>ucYyk#N-Mi2jE}4!<7%T54s^8l*
zyuW&Z145a9f4A$MQANP18hU-YSvzgS=HQJ(pJjrp`uz)>hw4SA2jy=ztM*PCUCoky
zi4_9_YFV(eJ?yG>V^!LtqlA;*MX;_;HgFeoJb>~wS@uE=HsH^8aSwq%fVMw*6f8kK
zDA6Yv0i0oe@5f)H!(UBWO{gS#Q1@($$}#~Xp(;HqCE4MlMzigqK^FqNU*7k_ZGaM%
zTvK+5hR8`@qowLeJ8W0fwK7oMMAOwqhMQb`{t||k-Rz<8IXmitw&AzyuQ&!i=s^SO
z4*QpFrX7hBs@clY<Ibf3a}O=z`}ID#(6`&bw)mE}!jxq~a$)LM6XR|F##R9_J;~&n
z$~ixPf1DIGS_~T8${97ptoJrFJh{JK8+-WFSPWrf15bmdu)@8}VK|HHqgwaIQY_cY
zZA<=rLtuS;5%J#-LtiYxDe^@Y2vOHz>%wc|z=<zuBjNY;6T>EOrmf?h0vh!j=Mt`E
zmkF&+ZldKOL{D>!*c9ArHTBfUaP=1VE%L|2RjpQcf*FF+orf+*7WGrB(nE+SQZtit
z)10m8w4Mu7_k10$XW3ttSeU+sEkk}a>GieD{HIHu%MwHbs)r_Jnh`_3^Lzx+29SJy
z@IM`&y&aS#NSW?we8`76{WKE=!7gOV6>{-zCH3b5TE&@6PoTYT&!x=q@JTW8kMv(f
z5LpBfSzVr+-jE>NEb-s7_&;`rrGKp9|IJDnFcNzGOwUrzc8FqjiURm7Jn%1YPv}R<
z&n0;bwLmfWY+d*K@<(Sk>)s&>?fvKd$l<l+`cQt{%2-`h?P}%Nccihi&N<(G{cR%$
zTGZ(TNnizGsnUudE)GYInC4fSd%S}U&vMFjnEMv3V2a{ukGK6-(1K!WRqW)28Oi}k
zB0d)`KY$W95oQ8vLr#vulYBHf^=mrl<Qj)917j!CeQ3~^S;l2GC+=WlYDL_Yr4c!5
zaW7P@`zZwjy9iqaa2wt7sGi?1%GIF0)6b2Edq<W|0qUPt_P=+$K~8QrJ>h?Qj+{<k
zFJH@(i`_>HO3cCXXOv#!{&hYRjF<~n3OaU~lT~KWldll97`EYQM__Awir$#0Gu}OA
zyfq;&{EvB6sg=}eISnbvUDatg?p&GZUWBD<^gUL<<G6ZLiuO0B6yyZ=<TJ&e#R~`t
zT|*GPa&Q(ZdJQ|9-y9PC*00F;bQY)Hds3^*K6Z1@UIyg%{Q_G?(TW=`>q=jLEQge?
z-0|<$y^OfaB3Dn+kR)9ydV^oC!&(Thfx1OtHnQ||jdb`;hz&nnOlv*Kv(jgWd-1a!
z+!nHu{z)ExFe|_n#|R+`dU_)Rq5>vtq4p1<HsAG6!Kx-|w6z6;qcC5{ivMk;1myEt
z+CUy}UVBshFv2Fx9JY5DnZD9%#GX>*W0$+JINK59@VpWb4hNQ2_BMYvDh@UlYZ0(M
z{x-;Jxej{rvca$rS0hB$6OR<41)h9p;q;HDVAXjsPO+AwLBYk(IX`DnN#at*oH8#E
z?)2|vH+5u9O!2#y?7G}rsCW$CrI$MYEbCoCnw2&-tsq~Vid#BCBWN27ClQ`=+4*Tm
zG#`ykYIb(^F3s@CxUUigrTxfud*9o|P$tFOR~zCyXXd)?cYlZ|kxL+v@>MQ1F#KFa
z);V@4l!fD_-fH9cMGuQ}l<+r2!f6Q%7)f}o?N`V=51*Kzrvlcj@hy^sLVYfdDiO(i
ziRMgMd?sdFQ1xQ1>^5R%V6fGGCBu6KP+^Ox;X5a>!v)I~8sBX|Aw^WHAE(R=T`)eI
zU1odxpK3Gfgy}5hBXTW>l<wZ{vj$m$cr#wZ52KllSs>Q^i`+0=l{WG=qJ!Lg-5>|`
z(ODB}vt~YVg%j-UZ05D8?5W^o&XHZyx*1SK6wBS&n~+ow^w2r~t3GVF%gy_)izVo}
z2^XC>VuM<>%Y9Q`e-r;b@3uLxfWCZp^DMGxNx3u+@ECCM?T~9d?(sx_DnKcKyxUN!
zN?wG-ZL%K1#i#a_Kht_x072RrX3~mo)~E>^#)Kq&eVYtRE~<4QUi9CPp9n{i+})VJ
z2+;yu$N6Ks8xvy&^dW5ir*&jR4u>&3EUzDIvnv_jrY9z%fO5?|Re|n^U-f#ZOr+TK
zzmeAe%2t+D0i_?xYw`J-$IyXd_-h9Pe!I$+P6zVQnaxb|{f`R5zw*fcK|Ncd5Pjpa
z{v(&5Y)Bwj45naQqf!$;k!BDvXiUj1g1VMS#){E2t}F}=CMK|GpZi#gPx}!GA56i!
z*W1|`S{IPw+Bj7!Ty+=N)QG+))!f&&&1dA-?z?;u!U|X}xa5ZO%z!TORV#C>O4j;v
zL@d|7m@lmm;-Xe^`t7^Ai6Y;oHlZ<@qXcykc^J6@L)-JGUC*YCd54`E`IhX!W6AmZ
z=mCG4=IHZ-iNrpWbCjzSnR08P<u{E{KB!zV13*Sw?uh9n6m&4U@gukG#9)%nTKy0}
zrC>noB13hvYZrGeq&J~6dzVU|J@u)S_Ux~JoEXga;o|Ux#-E#{5WJ&miMCp<9el_k
z2}#f_bTnr9n?Jl%zhACmU|Tpk=}?4JzY}&}+}Oh=F=f30Lj@<*d+?8oya16@zli&n
zaf5B){@C6H8N`2a2=FU1Efa~>ElD%7c7WOx8fX=jf)Hij1@ke07=N9W*x}M01@6;D
z_WKohUsxR|x*(-dB#-^HAcx?~)b?o11kMAZ)p3zOFzyX|lKjeuZ>?sm*r;MGm02T7
z!0&qr)+3d}t}KXyseWcDd{+lGIpp*_ts8hSMd}m<S_)QHGVJ>^rk`4wlnuiAJQlX*
zu$S>-cBh3tC>$J~mLq^OYRI2BsJ}yMNk(KmSNlp(Odoqw(o&erH{$E#iTv@<hD&Rl
zqRO6`&szc6`o+!rhqgT!>NM7wvZw^;;Ew+n`t85MzW>vT$yEiuuFhhbEyT8mGDi`l
zKA<>Jr2e<&$iJj?{Aa7?zv$*z73ni;3kn#tS}ZLcxkv5b!kHp+fsdQr_Z9*f%a;3n
zce%T>!;HWzl?Sw|ZQbv|O3g%nwOtJkLtlxDX<&vxd(iPyDqQToF@SM1c8_3O@hB23
z9U_wZ|EE9vThU}!b*K7Wpf!r5MEBoMAs3#xK5QL7Pgqxm|B5y8zj#}U4y8PKnqhk%
zHF@6z@czB6{r_}8FQP5G)utq;&pT`JV~T+&P{JDh;iiJiwPNx;oB}0IhJ<J!?}2Q2
zTS5T|(R31j@qH$uK$F~=BQhPb|A!%TR-KaH5R@9+$jYB1bn{R}>wfV)i{Sqc(tjX@


From 39745fd25af17fa28d79ae7dae2b282a2155e29f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 21:54:20 +0200
Subject: [PATCH 1927/2300] Update styles.min.css, new sprite.png query number

---
 web/css/styles.min.css | 32 ++++++++++++++++----------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/web/css/styles.min.css b/web/css/styles.min.css
index 5f63b030..99026f65 100644
--- a/web/css/styles.min.css
+++ b/web/css/styles.min.css
@@ -599,7 +599,7 @@ a {
     left: 0;
     top: 0;
     display: inline-block;
-    background-image: url("/images/sprite.png?1446554103");
+    background-image: url("/images/sprite.png?1446554104");
     background-size: 450px auto;
     background-repeat: no-repeat;
     background-position: -232px -9px;
@@ -626,7 +626,7 @@ input[type=checkbox] {
 }
 
 .l-logo {
-    background-image: url("/images/sprite.png?1446554103");
+    background-image: url("/images/sprite.png?1446554104");
     background-position: -117px -7px;
     /*  background-position: -125px -478px; */
     background-repeat: no-repeat;
@@ -751,7 +751,7 @@ input[type=checkbox] {
 }
 
 .l-profile__notifications {
-    background: url("/images/sprite.png?1446554103") no-repeat scroll -129px -135px;
+    background: url("/images/sprite.png?1446554104") no-repeat scroll -129px -135px;
     border-radius: 30px;
     color: #fff;
     cursor: pointer;
@@ -867,7 +867,7 @@ input[type=checkbox] {
 .notification-container .icon.starred {
     display: inline-block;
     width: 21px;
-    background: url("/images/sprite.png?1446554103") repeat scroll -184px 556px;
+    background: url("/images/sprite.png?1446554104") repeat scroll -184px 556px;
 }
 
 .l-stat {
@@ -982,7 +982,7 @@ div.l-content > div.l-separator:nth-of-type(4) {
 }
 
 .l-sort__create-btn {
-    background-image: url("/images/sprite.png?1446554103");
+    background-image: url("/images/sprite.png?1446554104");
     background-position: -331px -107px;
     background-repeat: no-repeat;
     bottom: -23px;
@@ -1047,7 +1047,7 @@ div.l-content > div.l-separator:nth-of-type(4) {
     padding: 12px;
 }
 .context-menu.sort-order span.name {
-    background: url("/images/sprite.png?1446554103") no-repeat scroll -292px -361px rgba(0, 0, 0, 0);
+    background: url("/images/sprite.png?1446554104") no-repeat scroll -292px -361px rgba(0, 0, 0, 0);
     display: inline-block;
     padding: 12px 28px 12px 12px;
     width: 117px;
@@ -1055,7 +1055,7 @@ div.l-content > div.l-separator:nth-of-type(4) {
     font-weight: bold;
 }
 .context-menu.sort-order span.up {
-    background: url("/images/sprite.png?1446554103") no-repeat scroll -434px -417px rgba(0, 0, 0, 0);
+    background: url("/images/sprite.png?1446554104") no-repeat scroll -434px -417px rgba(0, 0, 0, 0);
     display: inline-block;
     padding: 12px 14px;
     width: 16px;
@@ -1139,7 +1139,7 @@ div.l-content > div.l-separator:nth-of-type(4) {
     float: left;
     width: 30px;
     height: 30px;
-    background-image: url("/images/sprite.png?1446554103");
+    background-image: url("/images/sprite.png?1446554104");
     background-position: -333px -1px;
     border: none;
 }
@@ -1161,7 +1161,7 @@ div.l-content > div.l-separator:nth-of-type(4) {
     float: left;
     width: 25px;
     height: 25px;
-    background-image: url("/images/sprite.png?1446554103");
+    background-image: url("/images/sprite.png?1446554104");
     background-position: -333px -37px;
     border: none;
 }
@@ -1214,7 +1214,7 @@ div.l-content > div.l-separator:nth-of-type(4) {
 
 .l-select:after {
     pointer-events: none;
-    background-image: url("/images/sprite.png?1446554103");
+    background-image: url("/images/sprite.png?1446554104");
     background-position: -245px -175px;
     width: 7px;
     height: 4px;
@@ -1645,7 +1645,7 @@ body.mobile .l-unit-toolbar__col--right {
 }
 
 .actions-panel__col i {
-    background-image: url("/images/sprite.png?1446554103");
+    background-image: url("/images/sprite.png?1446554104");
     background-repeat: no-repeat;
     display: inline-block;
     float: right;
@@ -2087,7 +2087,7 @@ body.mobile .l-unit-toolbar__col--right {
 .l-icon-up-arrow, .l-icon-down-arrow, .l-icon-star, .l-icon-to-top, .l-icon-shortcuts, .l-icon-star-orange, .l-icon-star-blue {
     display: inline-block;
     vertical-align: middle;
-    background-image: url("/images/sprite.png?1446554103");
+    background-image: url("/images/sprite.png?1446554104");
 }
 
 .l-icon-down-arrow {
@@ -2463,7 +2463,7 @@ label:hover {
     margin: 2px 6px 0 0;
     min-width: 138px;
     padding: 8px 1px 6px 10px;
-    background-image: url("/images/sprite.png?1446554103");
+    background-image: url("/images/sprite.png?1446554104");
     background-position: -185px -604px;
     width: 270px;
     appearance: none;
@@ -2969,7 +2969,7 @@ form#vstobjects.suspended {
 #add-icon {
     width: 45px;
     height: 45px;
-    background-image: url("/images/sprite.png?1446554103");
+    background-image: url("/images/sprite.png?1446554104");
     background-position: -378px -107px;
     background-repeat: no-repeat;
     display: inline-block;
@@ -3112,7 +3112,7 @@ form#vstobjects.suspended {
     letter-spacing: 3px;
 }
 .shortcuts .close {
-    background: url("/images/sprite.png?1446554103") repeat scroll -408px -469px;
+    background: url("/images/sprite.png?1446554104") repeat scroll -408px -469px;
     cursor: pointer;
     display: inline-block;
     float: right;
@@ -3316,7 +3316,7 @@ form#vstobjects.suspended {
 }
 
 .context-helper-close {
-    background: rgba(0, 0, 0, 0) url("/images/sprite.png?1446554103") repeat scroll -408px -469px;
+    background: rgba(0, 0, 0, 0) url("/images/sprite.png?1446554104") repeat scroll -408px -469px;
     cursor: pointer;
     display: inline-block;
     float: right;

From bf56cdc40f268118853631c32ff2b0f6165079bf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 22:03:41 +0200
Subject: [PATCH 1928/2300] smtputf8_advertise_hosts patch fix

---
 src/deb/vesta/postinst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 97df816e..28222d48 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -30,7 +30,7 @@ if [ "$release" -gt 8 ]; then
     if [ -f "/etc/exim4/exim4.conf.template" ]; then
         if ! grep -q 'smtputf8_advertise_hosts' /etc/exim4/exim4.conf.template; then
             echo 'Patching exim4.conf for: smtputf8_advertise_hosts'
-            sed -i  "/^domainlist local_domains = dsearch;\/etc\/exim4\/domains\//i smtputf8_advertise_hosts =" /etc/exim4/exim4.conf.template
+            sed -i  "/^domainlist local_domains/i smtputf8_advertise_hosts =" /etc/exim4/exim4.conf.template
             systemctl restart exim4
         fi
     fi

From fcdd2a552c37957004262f3e98a3c2f52004fb83 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 22:12:08 +0200
Subject: [PATCH 1929/2300] smtputf8_advertise_hosts patch fix 2

---
 src/deb/vesta/postinst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 28222d48..2f15e60f 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -26,7 +26,7 @@ echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
 # Patching exim4.conf for: smtputf8_advertise_hosts
-if [ "$release" -gt 8 ]; then
+if [ "$release" -gt 10 ]; then
     if [ -f "/etc/exim4/exim4.conf.template" ]; then
         if ! grep -q 'smtputf8_advertise_hosts' /etc/exim4/exim4.conf.template; then
             echo 'Patching exim4.conf for: smtputf8_advertise_hosts'

From b670feea43464f55754628a8a675ce6f71ffe898 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 22:21:06 +0200
Subject: [PATCH 1930/2300] Removing smtputf8_advertise_hosts from Deb 9 and 10

---
 install/debian/10/exim/exim4.conf.template    | 1 -
 install/debian/11/exim/exim4.conf.template-RC | 1 +
 install/debian/9/exim/exim4.conf.template     | 1 -
 3 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/install/debian/10/exim/exim4.conf.template b/install/debian/10/exim/exim4.conf.template
index 8fa12c2d..0e5afaac 100644
--- a/install/debian/10/exim/exim4.conf.template
+++ b/install/debian/10/exim/exim4.conf.template
@@ -11,7 +11,6 @@
 disable_ipv6=true
 add_environment=<; PATH=/bin:/usr/bin
 keep_environment=
-smtputf8_advertise_hosts =
 
 domainlist local_domains = dsearch;/etc/exim4/domains/
 domainlist relay_to_domains = dsearch;/etc/exim4/domains/
diff --git a/install/debian/11/exim/exim4.conf.template-RC b/install/debian/11/exim/exim4.conf.template-RC
index e5ba36ab..e16099bd 100644
--- a/install/debian/11/exim/exim4.conf.template-RC
+++ b/install/debian/11/exim/exim4.conf.template-RC
@@ -11,6 +11,7 @@
 disable_ipv6=true
 add_environment=<; PATH=/bin:/usr/bin
 keep_environment=
+smtputf8_advertise_hosts =
 
 #local_interfaces =  0.0.0.0
 #smtp_active_hostname = ${lookup{$interface_address}lsearch{/etc/exim4/virtual/helo_data}{$value}}
diff --git a/install/debian/9/exim/exim4.conf.template b/install/debian/9/exim/exim4.conf.template
index c9344903..261947d2 100644
--- a/install/debian/9/exim/exim4.conf.template
+++ b/install/debian/9/exim/exim4.conf.template
@@ -11,7 +11,6 @@
 disable_ipv6=true
 add_environment=<; PATH=/bin:/usr/bin
 keep_environment=
-smtputf8_advertise_hosts =
 
 domainlist local_domains = dsearch;/etc/exim4/domains/
 domainlist relay_to_domains = dsearch;/etc/exim4/domains/

From 4683c08e1b7190be57d68d0c799f052c74d20b19 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 23:17:38 +0200
Subject: [PATCH 1931/2300] Update Changelog.md

---
 Changelog.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 87f48b62..b2dae100 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,10 @@
+Version 0.9.9-0 [05-Jun-2023]
+==================================================
+* Redesign of hosting panel
+* Fix for WP_CACHE_KEY_SALTs in v-clone-website command
+* Fix for "Helo name contains a ip address" in Exim4
+* Fix for Exim4 for punycode domains (in collaboration with @HestiaCP )
+
 Version 0.9.8-26-62 [05-Apr-2023]
 ==================================================
 * Fix for LetsEncrypt Asynchronous Order Finalization (in collaboration with @HestiaCP )

From 1120629026f6455ea9601ec695b3a66c66072ccc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 23:20:13 +0200
Subject: [PATCH 1932/2300] Update latest.txt - version 0.9.9-0

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 5e8393bb..d9d5584e 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.8-26-62
+vesta-0.9.9-0

From eccd4a99ba22460816a4de48b6837953d1675531 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 4 Jun 2023 23:28:07 +0200
Subject: [PATCH 1933/2300] Update styles.fix.css

---
 web/css/styles.fix.css | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/css/styles.fix.css b/web/css/styles.fix.css
index 6c7a54c4..b00d7365 100644
--- a/web/css/styles.fix.css
+++ b/web/css/styles.fix.css
@@ -700,7 +700,7 @@ b, strong {
   background: #fff;
   word-break: break-word;
   overflow: hidden;
-  border-right: 10px solid #e3e3e3;
+  border-right: 8px solid #e3e3e3;
   box-sizing: border-box;
   /* Firefox */
   /* width */

From b41131f7ba080ddcf557e4017271a3f83d90921a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 5 Jun 2023 10:04:25 +0200
Subject: [PATCH 1934/2300] backup details css fix

---
 web/templates/admin/list_backup_detail.html | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/web/templates/admin/list_backup_detail.html b/web/templates/admin/list_backup_detail.html
index b2f378d0..cc0a9311 100644
--- a/web/templates/admin/list_backup_detail.html
+++ b/web/templates/admin/list_backup_detail.html
@@ -6,7 +6,7 @@ input[type="checkbox"] {
 </style>
 <br /><br />
 <form action="/bulk/restore/" method="post" id="objects">
-    <div class="l-center">
+    <div class="l-center" style="margin-left: 240px; padding-right: 30px;">
       <div class="l-sort clearfix noselect">
         <a href="/schedule/restore/?backup=<?=htmlentities($_GET['backup'])?>" class="l-sort__create-btn restore" style="bottom: 0" title="<?=__('Restore All')?>"></a>
         <div class="l-sort-toolbar clearfix">
@@ -34,7 +34,7 @@ input[type="checkbox"] {
     <!-- /.l-separator -->
 
 
-    <div class="l-center units" style="margin-top:240px">
+    <div class="l-center units" style="margin-top:250px; margin-left: 240px; padding-right: 20px;">
     <div class="l-unit header">
       <div class="subtitle" style="color: black;"><?=__('Listing')?>  <?=htmlentities($_GET['backup'])?></div>
       <div class="subtitle"><?=__('First select what to restore')?>:</div>
@@ -50,7 +50,7 @@ input[type="checkbox"] {
 
       <div>
         <div class="l-unit-toolbar clearfix">
-          <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
+          <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check<?=$i?>" class="ch-toggle" type="checkbox" name="web[]" value="<?=$key?>">
             
           </div>
@@ -101,7 +101,7 @@ input[type="checkbox"] {
 
       <div>
         <div class="l-unit-toolbar clearfix">
-          <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
+          <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check2<?=$i?>" type="checkbox" name="mail[]" value="<?=$key?>">
             
           </div>
@@ -149,7 +149,7 @@ input[type="checkbox"] {
 
       <div>
         <div class="l-unit-toolbar clearfix">
-          <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
+          <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check3<?=$i?>" type="checkbox" name="dns[]" value="<?=$key?>">
             
           </div>
@@ -196,7 +196,7 @@ input[type="checkbox"] {
 
       <div>
         <div class="l-unit-toolbar clearfix">
-          <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
+          <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check4<?=$i?>" type="checkbox" name="db[]" value="<?=$key?>">
             
           </div>
@@ -244,7 +244,7 @@ input[type="checkbox"] {
 
       <div>
         <div class="l-unit-toolbar clearfix">
-          <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
+          <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check5<?=$i?>" type="checkbox" name="check" value="<?=$key?>">
             
           </div>
@@ -292,7 +292,7 @@ input[type="checkbox"] {
 
       <div>
         <div class="l-unit-toolbar clearfix">
-          <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
+          <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check6<?=$i?>" type="checkbox" name="udir[]" value="<?=$key?>">
             
           </div>
@@ -331,7 +331,7 @@ input[type="checkbox"] {
 
       <div>
         <div class="l-unit-toolbar clearfix">
-          <div class="l-unit-toolbar__col l-unit-toolbar__col--left">
+          <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check7<?=$i?>" type="checkbox" name="cron" value="<?=$i?>">
             
           </div>

From 0a5faad911299d87f8de23614fdce3f217d78541 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 5 Jun 2023 10:05:18 +0200
Subject: [PATCH 1935/2300] Update latest.txt

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index d9d5584e..208690c9 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0
+vesta-0.9.9-0-1

From 7875aaf58ec9b96ca75a686969d7b342418e8489 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 5 Jun 2023 10:24:27 +0200
Subject: [PATCH 1936/2300] Update list_backup_detail.html

---
 web/templates/admin/list_backup_detail.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_backup_detail.html b/web/templates/admin/list_backup_detail.html
index cc0a9311..30e41642 100644
--- a/web/templates/admin/list_backup_detail.html
+++ b/web/templates/admin/list_backup_detail.html
@@ -34,7 +34,7 @@ input[type="checkbox"] {
     <!-- /.l-separator -->
 
 
-    <div class="l-center units" style="margin-top:250px; margin-left: 240px; padding-right: 20px;">
+    <div class="l-center units" style="margin-left: 240px; padding-right: 20px;">
     <div class="l-unit header">
       <div class="subtitle" style="color: black;"><?=__('Listing')?>  <?=htmlentities($_GET['backup'])?></div>
       <div class="subtitle"><?=__('First select what to restore')?>:</div>

From d9a68455a8303f38a161ea3dbeb9660125387639 Mon Sep 17 00:00:00 2001
From: Jaap Marcus <9754650+jaapmarcus@users.noreply.github.com>
Date: Wed, 7 Jun 2023 22:59:31 +0200
Subject: [PATCH 1937/2300] Update urls due to moved download locations

Update names


Fix pcre url


Please not configs are not tested


Revert changes
---
 install/debian/12/apache2/apache2.conf        |  95 ++
 install/debian/12/apache2/status.conf         |   8 +
 install/debian/12/bind/named.conf             |  12 +
 install/debian/12/clamav/clamd.conf           |  61 ++
 install/debian/12/deb_signing.key             |  41 +
 install/debian/12/dovecot/conf.d/10-auth.conf |   4 +
 .../debian/12/dovecot/conf.d/10-logging.conf  |   1 +
 install/debian/12/dovecot/conf.d/10-mail.conf |   4 +
 .../debian/12/dovecot/conf.d/10-master.conf   |  29 +
 install/debian/12/dovecot/conf.d/10-ssl.conf  |   3 +
 .../12/dovecot/conf.d/15-mailboxes.conf       |  30 +
 install/debian/12/dovecot/conf.d/20-imap.conf |  58 ++
 install/debian/12/dovecot/conf.d/20-pop3.conf |  91 ++
 .../dovecot/conf.d/auth-passwdfile.conf.ext   |   9 +
 install/debian/12/dovecot/dovecot.conf        |   4 +
 install/debian/12/exim/deny_senders           |   1 +
 install/debian/12/exim/dnsbl.conf             |   2 +
 install/debian/12/exim/exim4.conf.template    | 415 +++++++++
 install/debian/12/exim/exim4.conf.template-RC | 446 +++++++++
 install/debian/12/exim/spam-blocks.conf       |   0
 .../debian/12/fail2ban/action.d/vesta.conf    |   9 +
 .../debian/12/fail2ban/filter.d/vesta.conf    |  10 +
 install/debian/12/fail2ban/jail.local         |  39 +
 install/debian/12/firewall/ports.conf         |  17 +
 install/debian/12/firewall/rules.conf         |  11 +
 install/debian/12/logrotate/apache2           |  19 +
 install/debian/12/logrotate/dovecot           |  12 +
 install/debian/12/logrotate/nginx             |  13 +
 install/debian/12/logrotate/vesta             |   7 +
 install/debian/12/mysql/my-large.cnf          |  51 ++
 install/debian/12/mysql/my-medium.cnf         |  49 +
 install/debian/12/mysql/my-small.cnf          |  49 +
 install/debian/12/nginx/nginx.conf            | 140 +++
 install/debian/12/nginx/phpmyadmin.inc        |  18 +
 install/debian/12/nginx/phppgadmin.inc        |  11 +
 install/debian/12/nginx/status.conf           |   9 +
 install/debian/12/nginx/webmail.inc           |  15 +
 install/debian/12/packages/default.pkg        |  18 +
 install/debian/12/pga/config.inc.php          | 159 ++++
 install/debian/12/pga/phppgadmin.conf         |  31 +
 install/debian/12/php-fpm/www.conf            |  11 +
 install/debian/12/php/php7.3-dedi.patch       |  78 ++
 install/debian/12/php/php7.3-vps.patch        |  78 ++
 install/debian/12/php/php7.4-dedi.patch       |  78 ++
 install/debian/12/php/php7.4-vps.patch        |  78 ++
 install/debian/12/pma/apache.conf             |  42 +
 install/debian/12/pma/config.inc.php          | 146 +++
 install/debian/12/pma/create_tables.sql       | 385 ++++++++
 install/debian/12/pma/pma.sh                  | 167 ++++
 install/debian/12/postgresql/pg_hba.conf      |  11 +
 install/debian/12/proftpd/proftpd.conf        |  38 +
 install/debian/12/proftpd/tls.conf            |  63 ++
 install/debian/12/roundcube/apache.conf       |  40 +
 install/debian/12/roundcube/config.inc.php    |  33 +
 install/debian/12/roundcube/db.inc.php        |  66 ++
 install/debian/12/roundcube/main.inc.php      | 850 ++++++++++++++++++
 install/debian/12/roundcube/vesta.php         |  73 ++
 install/debian/12/sudo/admin                  |   8 +
 install/debian/12/templates/dns/child-ns.tpl  |  14 +
 install/debian/12/templates/dns/default.tpl   |  18 +
 install/debian/12/templates/dns/gmail.tpl     |  12 +
 install/debian/12/templates/dns/office365.tpl |  22 +
 install/debian/12/templates/dns/yandex.tpl    |  16 +
 .../web/apache2/PHP-FPM-74-public.sh          | 105 +++
 .../web/apache2/PHP-FPM-74-public.stpl        |  44 +
 .../web/apache2/PHP-FPM-74-public.tpl         |  38 +
 .../12/templates/web/apache2/PHP-FPM-74.sh    | 105 +++
 .../12/templates/web/apache2/PHP-FPM-74.stpl  |  44 +
 .../12/templates/web/apache2/PHP-FPM-74.tpl   |  38 +
 .../12/templates/web/awstats/awstats.tpl      | 133 +++
 .../debian/12/templates/web/awstats/index.tpl |  10 +
 .../debian/12/templates/web/awstats/nav.tpl   |  23 +
 .../debian/12/templates/web/nginx/caching.sh  |  19 +
 .../12/templates/web/nginx/caching.stpl       |  44 +
 .../debian/12/templates/web/nginx/caching.tpl |  42 +
 .../web/nginx/force-https-legacy.stpl         |  39 +
 .../web/nginx/force-https-legacy.tpl          |   8 +
 .../web/nginx/force-https-public.stpl         |  39 +
 .../web/nginx/force-https-public.tpl          |   8 +
 .../nginx/force-https-webmail-phpmyadmin.stpl |  63 ++
 .../nginx/force-https-webmail-phpmyadmin.tpl  |   8 +
 .../12/templates/web/nginx/force-https.stpl   |  39 +
 .../12/templates/web/nginx/force-https.tpl    |   8 +
 .../12/templates/web/nginx/hosting-legacy.sh  |  11 +
 .../templates/web/nginx/hosting-legacy.stpl   |  39 +
 .../12/templates/web/nginx/hosting-legacy.tpl |  36 +
 .../templates/web/nginx/hosting-public.stpl   |  39 +
 .../12/templates/web/nginx/hosting-public.tpl |  36 +
 .../web/nginx/hosting-webmail-phpmyadmin.stpl |  63 ++
 .../web/nginx/hosting-webmail-phpmyadmin.tpl  |  60 ++
 .../debian/12/templates/web/nginx/hosting.sh  |  11 +
 .../12/templates/web/nginx/hosting.stpl       |  39 +
 .../debian/12/templates/web/nginx/hosting.tpl |  36 +
 .../web/nginx/php-fpm/cms_made_simple.stpl    |  55 ++
 .../web/nginx/php-fpm/cms_made_simple.tpl     |  52 ++
 .../web/nginx/php-fpm/codeigniter2.stpl       |  60 ++
 .../web/nginx/php-fpm/codeigniter2.tpl        |  57 ++
 .../web/nginx/php-fpm/codeigniter3.stpl       |  55 ++
 .../web/nginx/php-fpm/codeigniter3.tpl        |  52 ++
 .../web/nginx/php-fpm/datalife_engine.stpl    | 126 +++
 .../web/nginx/php-fpm/datalife_engine.tpl     | 123 +++
 .../templates/web/nginx/php-fpm/default.stpl  |  54 ++
 .../templates/web/nginx/php-fpm/default.tpl   |  51 ++
 .../templates/web/nginx/php-fpm/dokuwiki.stpl |  71 ++
 .../templates/web/nginx/php-fpm/dokuwiki.tpl  |  67 ++
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  94 ++
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  91 ++
 .../templates/web/nginx/php-fpm/drupal7.stpl  |  94 ++
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  91 ++
 .../templates/web/nginx/php-fpm/drupal8.stpl  |  94 ++
 .../templates/web/nginx/php-fpm/drupal8.tpl   |  91 ++
 .../templates/web/nginx/php-fpm/joomla.stpl   |  62 ++
 .../12/templates/web/nginx/php-fpm/joomla.tpl |  59 ++
 .../templates/web/nginx/php-fpm/laravel.stpl  |  54 ++
 .../templates/web/nginx/php-fpm/laravel.tpl   |  50 ++
 .../templates/web/nginx/php-fpm/magento.stpl  | 197 ++++
 .../templates/web/nginx/php-fpm/magento.tpl   | 194 ++++
 .../12/templates/web/nginx/php-fpm/modx.stpl  |  68 ++
 .../12/templates/web/nginx/php-fpm/modx.tpl   |  65 ++
 .../templates/web/nginx/php-fpm/moodle.stpl   |  89 ++
 .../12/templates/web/nginx/php-fpm/moodle.tpl |  87 ++
 .../templates/web/nginx/php-fpm/no-php.stpl   |  46 +
 .../12/templates/web/nginx/php-fpm/no-php.tpl |  43 +
 .../12/templates/web/nginx/php-fpm/odoo.stpl  |  69 ++
 .../12/templates/web/nginx/php-fpm/odoo.tpl   |  66 ++
 .../templates/web/nginx/php-fpm/opencart.stpl |  58 ++
 .../templates/web/nginx/php-fpm/opencart.tpl  |  54 ++
 .../templates/web/nginx/php-fpm/owncloud.stpl |  84 ++
 .../templates/web/nginx/php-fpm/owncloud.tpl  |  81 ++
 .../12/templates/web/nginx/php-fpm/piwik.stpl |  72 ++
 .../12/templates/web/nginx/php-fpm/piwik.tpl  |  69 ++
 .../templates/web/nginx/php-fpm/pyrocms.stpl  |  65 ++
 .../templates/web/nginx/php-fpm/pyrocms.tpl   |  62 ++
 .../12/templates/web/nginx/php-fpm/sendy.stpl |  88 ++
 .../12/templates/web/nginx/php-fpm/sendy.tpl  |  86 ++
 .../web/nginx/php-fpm/wordpress.stpl          |  54 ++
 .../templates/web/nginx/php-fpm/wordpress.tpl |  51 ++
 .../web/nginx/php-fpm/wordpress2.stpl         |  66 ++
 .../web/nginx/php-fpm/wordpress2.tpl          |  63 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.stpl |  71 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.tpl  |  67 ++
 .../web/nginx/private-force-https.stpl        |  39 +
 .../web/nginx/private-force-https.tpl         |   8 +
 .../12/templates/web/nginx/private-hosting.sh |  11 +
 .../templates/web/nginx/private-hosting.stpl  |  41 +
 .../templates/web/nginx/private-hosting.tpl   |  38 +
 .../12/templates/web/nginx/proxy_ip.tpl       |   9 +
 .../12/templates/web/php-fpm/default.tpl      |  21 +
 .../12/templates/web/php-fpm/no-php.tpl       |  20 +
 .../12/templates/web/php-fpm/socket.tpl       |  24 +
 .../web/skel/document_errors/403.html         |  29 +
 .../web/skel/document_errors/404.html         |  28 +
 .../web/skel/document_errors/50x.html         |  29 +
 .../templates/web/skel/public_html/index.html |  26 +
 .../templates/web/skel/public_html/robots.txt |   3 +
 .../web/skel/public_shtml/index.html          |  26 +
 .../web/skel/public_shtml/robots.txt          |   3 +
 .../debian/12/templates/web/suspend/.htaccess |   2 +
 .../12/templates/web/suspend/index.html       |  25 +
 .../12/templates/web/webalizer/webalizer.tpl  | 110 +++
 install/debian/12/vsftpd/vsftpd.conf          |  26 +
 src/deb/vesta_compile.sh                      |  44 +-
 162 files changed, 9729 insertions(+), 6 deletions(-)
 create mode 100644 install/debian/12/apache2/apache2.conf
 create mode 100644 install/debian/12/apache2/status.conf
 create mode 100644 install/debian/12/bind/named.conf
 create mode 100644 install/debian/12/clamav/clamd.conf
 create mode 100644 install/debian/12/deb_signing.key
 create mode 100644 install/debian/12/dovecot/conf.d/10-auth.conf
 create mode 100644 install/debian/12/dovecot/conf.d/10-logging.conf
 create mode 100644 install/debian/12/dovecot/conf.d/10-mail.conf
 create mode 100644 install/debian/12/dovecot/conf.d/10-master.conf
 create mode 100644 install/debian/12/dovecot/conf.d/10-ssl.conf
 create mode 100644 install/debian/12/dovecot/conf.d/15-mailboxes.conf
 create mode 100644 install/debian/12/dovecot/conf.d/20-imap.conf
 create mode 100644 install/debian/12/dovecot/conf.d/20-pop3.conf
 create mode 100644 install/debian/12/dovecot/conf.d/auth-passwdfile.conf.ext
 create mode 100644 install/debian/12/dovecot/dovecot.conf
 create mode 100644 install/debian/12/exim/deny_senders
 create mode 100644 install/debian/12/exim/dnsbl.conf
 create mode 100644 install/debian/12/exim/exim4.conf.template
 create mode 100644 install/debian/12/exim/exim4.conf.template-RC
 create mode 100644 install/debian/12/exim/spam-blocks.conf
 create mode 100644 install/debian/12/fail2ban/action.d/vesta.conf
 create mode 100644 install/debian/12/fail2ban/filter.d/vesta.conf
 create mode 100644 install/debian/12/fail2ban/jail.local
 create mode 100644 install/debian/12/firewall/ports.conf
 create mode 100644 install/debian/12/firewall/rules.conf
 create mode 100644 install/debian/12/logrotate/apache2
 create mode 100644 install/debian/12/logrotate/dovecot
 create mode 100644 install/debian/12/logrotate/nginx
 create mode 100644 install/debian/12/logrotate/vesta
 create mode 100644 install/debian/12/mysql/my-large.cnf
 create mode 100644 install/debian/12/mysql/my-medium.cnf
 create mode 100644 install/debian/12/mysql/my-small.cnf
 create mode 100644 install/debian/12/nginx/nginx.conf
 create mode 100644 install/debian/12/nginx/phpmyadmin.inc
 create mode 100644 install/debian/12/nginx/phppgadmin.inc
 create mode 100644 install/debian/12/nginx/status.conf
 create mode 100644 install/debian/12/nginx/webmail.inc
 create mode 100644 install/debian/12/packages/default.pkg
 create mode 100644 install/debian/12/pga/config.inc.php
 create mode 100644 install/debian/12/pga/phppgadmin.conf
 create mode 100644 install/debian/12/php-fpm/www.conf
 create mode 100644 install/debian/12/php/php7.3-dedi.patch
 create mode 100644 install/debian/12/php/php7.3-vps.patch
 create mode 100644 install/debian/12/php/php7.4-dedi.patch
 create mode 100644 install/debian/12/php/php7.4-vps.patch
 create mode 100644 install/debian/12/pma/apache.conf
 create mode 100644 install/debian/12/pma/config.inc.php
 create mode 100644 install/debian/12/pma/create_tables.sql
 create mode 100644 install/debian/12/pma/pma.sh
 create mode 100644 install/debian/12/postgresql/pg_hba.conf
 create mode 100644 install/debian/12/proftpd/proftpd.conf
 create mode 100644 install/debian/12/proftpd/tls.conf
 create mode 100644 install/debian/12/roundcube/apache.conf
 create mode 100644 install/debian/12/roundcube/config.inc.php
 create mode 100644 install/debian/12/roundcube/db.inc.php
 create mode 100644 install/debian/12/roundcube/main.inc.php
 create mode 100644 install/debian/12/roundcube/vesta.php
 create mode 100644 install/debian/12/sudo/admin
 create mode 100755 install/debian/12/templates/dns/child-ns.tpl
 create mode 100755 install/debian/12/templates/dns/default.tpl
 create mode 100755 install/debian/12/templates/dns/gmail.tpl
 create mode 100644 install/debian/12/templates/dns/office365.tpl
 create mode 100644 install/debian/12/templates/dns/yandex.tpl
 create mode 100755 install/debian/12/templates/web/apache2/PHP-FPM-74-public.sh
 create mode 100644 install/debian/12/templates/web/apache2/PHP-FPM-74-public.stpl
 create mode 100644 install/debian/12/templates/web/apache2/PHP-FPM-74-public.tpl
 create mode 100755 install/debian/12/templates/web/apache2/PHP-FPM-74.sh
 create mode 100644 install/debian/12/templates/web/apache2/PHP-FPM-74.stpl
 create mode 100644 install/debian/12/templates/web/apache2/PHP-FPM-74.tpl
 create mode 100755 install/debian/12/templates/web/awstats/awstats.tpl
 create mode 100755 install/debian/12/templates/web/awstats/index.tpl
 create mode 100755 install/debian/12/templates/web/awstats/nav.tpl
 create mode 100755 install/debian/12/templates/web/nginx/caching.sh
 create mode 100644 install/debian/12/templates/web/nginx/caching.stpl
 create mode 100644 install/debian/12/templates/web/nginx/caching.tpl
 create mode 100644 install/debian/12/templates/web/nginx/force-https-legacy.stpl
 create mode 100644 install/debian/12/templates/web/nginx/force-https-legacy.tpl
 create mode 100644 install/debian/12/templates/web/nginx/force-https-public.stpl
 create mode 100644 install/debian/12/templates/web/nginx/force-https-public.tpl
 create mode 100644 install/debian/12/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
 create mode 100644 install/debian/12/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
 create mode 100644 install/debian/12/templates/web/nginx/force-https.stpl
 create mode 100644 install/debian/12/templates/web/nginx/force-https.tpl
 create mode 100755 install/debian/12/templates/web/nginx/hosting-legacy.sh
 create mode 100644 install/debian/12/templates/web/nginx/hosting-legacy.stpl
 create mode 100644 install/debian/12/templates/web/nginx/hosting-legacy.tpl
 create mode 100644 install/debian/12/templates/web/nginx/hosting-public.stpl
 create mode 100644 install/debian/12/templates/web/nginx/hosting-public.tpl
 create mode 100644 install/debian/12/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
 create mode 100644 install/debian/12/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
 create mode 100755 install/debian/12/templates/web/nginx/hosting.sh
 create mode 100644 install/debian/12/templates/web/nginx/hosting.stpl
 create mode 100644 install/debian/12/templates/web/nginx/hosting.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/cms_made_simple.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/cms_made_simple.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/codeigniter2.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/codeigniter2.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/codeigniter3.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/codeigniter3.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/datalife_engine.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/datalife_engine.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/default.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/default.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/dokuwiki.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/dokuwiki.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/drupal6.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/drupal6.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/drupal7.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/drupal7.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/drupal8.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/drupal8.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/joomla.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/joomla.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/laravel.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/laravel.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/magento.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/magento.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/modx.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/modx.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/moodle.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/moodle.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/no-php.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/no-php.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/odoo.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/odoo.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/opencart.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/opencart.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/owncloud.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/owncloud.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/piwik.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/piwik.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/pyrocms.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/pyrocms.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/sendy.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/sendy.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/wordpress.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/wordpress.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/wordpress2.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/wordpress2.tpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
 create mode 100644 install/debian/12/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
 create mode 100644 install/debian/12/templates/web/nginx/private-force-https.stpl
 create mode 100644 install/debian/12/templates/web/nginx/private-force-https.tpl
 create mode 100755 install/debian/12/templates/web/nginx/private-hosting.sh
 create mode 100644 install/debian/12/templates/web/nginx/private-hosting.stpl
 create mode 100644 install/debian/12/templates/web/nginx/private-hosting.tpl
 create mode 100644 install/debian/12/templates/web/nginx/proxy_ip.tpl
 create mode 100644 install/debian/12/templates/web/php-fpm/default.tpl
 create mode 100644 install/debian/12/templates/web/php-fpm/no-php.tpl
 create mode 100644 install/debian/12/templates/web/php-fpm/socket.tpl
 create mode 100755 install/debian/12/templates/web/skel/document_errors/403.html
 create mode 100755 install/debian/12/templates/web/skel/document_errors/404.html
 create mode 100755 install/debian/12/templates/web/skel/document_errors/50x.html
 create mode 100755 install/debian/12/templates/web/skel/public_html/index.html
 create mode 100755 install/debian/12/templates/web/skel/public_html/robots.txt
 create mode 100755 install/debian/12/templates/web/skel/public_shtml/index.html
 create mode 100755 install/debian/12/templates/web/skel/public_shtml/robots.txt
 create mode 100755 install/debian/12/templates/web/suspend/.htaccess
 create mode 100755 install/debian/12/templates/web/suspend/index.html
 create mode 100755 install/debian/12/templates/web/webalizer/webalizer.tpl
 create mode 100644 install/debian/12/vsftpd/vsftpd.conf

diff --git a/install/debian/12/apache2/apache2.conf b/install/debian/12/apache2/apache2.conf
new file mode 100644
index 00000000..2be3e50d
--- /dev/null
+++ b/install/debian/12/apache2/apache2.conf
@@ -0,0 +1,95 @@
+# It is split into several files forming the configuration hierarchy outlined
+# below, all located in the /etc/apache2/ directory:
+#
+#	/etc/apache2/
+#	|-- apache2.conf
+#	|	`--  ports.conf
+#	|-- mods-enabled
+#	|	|-- *.load
+#	|	`-- *.conf
+#	|-- conf.d
+#	|	`-- *
+
+# Global configuration
+PidFile ${APACHE_PID_FILE}
+Timeout 900
+ProxyTimeout 900
+KeepAlive Off
+MaxKeepAliveRequests 100
+KeepAliveTimeout 10
+
+<IfModule mpm_prefork_module>
+    StartServers          8
+    MinSpareServers       5
+    MaxSpareServers      20
+    ServerLimit         256
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_worker_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_event_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+# These need to be set in /etc/apache2/envvars
+User ${APACHE_RUN_USER}
+Group ${APACHE_RUN_GROUP}
+#User www-data
+#Group www-data
+
+AccessFileName .htaccess
+
+<Files ~ "^\.ht">
+    Order allow,deny
+    Deny from all
+    Satisfy all
+</Files>
+
+DefaultType None
+HostnameLookups Off
+
+ErrorLog ${APACHE_LOG_DIR}/error.log
+LogLevel warn
+
+# Include module configuration:
+Include mods-enabled/*.load
+Include mods-enabled/*.conf
+
+# Include list of ports to listen on and which to use for name based vhosts
+Include ports.conf
+
+LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
+LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
+LogFormat "%h %l %u %t \"%r\" %>s %O" common
+LogFormat "%{Referer}i -> %U" referer
+LogFormat "%{User-agent}i" agent
+LogFormat "%b" bytes
+
+Include conf.d/
+
+# Include the virtual host configurations:
+#Include sites-enabled/
+
+ErrorDocument 403 /error/403.html
+ErrorDocument 404 /error/404.html
+ErrorDocument 500 /error/50x.html
+ErrorDocument 501 /error/50x.html
+ErrorDocument 502 /error/50x.html
+ErrorDocument 503 /error/50x.html
+ErrorDocument 506 /error/50x.html
diff --git a/install/debian/12/apache2/status.conf b/install/debian/12/apache2/status.conf
new file mode 100644
index 00000000..0d82a356
--- /dev/null
+++ b/install/debian/12/apache2/status.conf
@@ -0,0 +1,8 @@
+Listen 127.0.0.1:8081
+<Location /server-status>
+    SetHandler server-status
+    Order deny,allow
+    Deny from all
+    Allow from 127.0.0.1
+    # Allow from all
+</Location>
diff --git a/install/debian/12/bind/named.conf b/install/debian/12/bind/named.conf
new file mode 100644
index 00000000..ed6ece88
--- /dev/null
+++ b/install/debian/12/bind/named.conf
@@ -0,0 +1,12 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
+
diff --git a/install/debian/12/clamav/clamd.conf b/install/debian/12/clamav/clamd.conf
new file mode 100644
index 00000000..c636b6d3
--- /dev/null
+++ b/install/debian/12/clamav/clamd.conf
@@ -0,0 +1,61 @@
+#Automatically Generated by clamav-base postinst
+#To reconfigure clamd run #dpkg-reconfigure clamav-base
+#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
+LocalSocket /var/run/clamav/clamd.ctl
+FixStaleSocket true
+LocalSocketGroup clamav
+LocalSocketMode 666
+# TemporaryDirectory is not set to its default /tmp here to make overriding
+# the default with environment variables TMPDIR/TMP/TEMP possible
+User clamav
+# AllowSupplementaryGroups true
+ScanMail true
+ScanArchive true
+ArchiveBlockEncrypted false
+MaxDirectoryRecursion 15
+FollowDirectorySymlinks false
+FollowFileSymlinks false
+ReadTimeout 180
+MaxThreads 12
+MaxConnectionQueueLength 15
+LogSyslog false
+LogFacility LOG_LOCAL6
+LogClean true
+LogVerbose true
+PidFile /var/run/clamav/clamd.pid
+DatabaseDirectory /var/lib/clamav
+SelfCheck 3600
+Foreground false
+Debug false
+ScanPE true
+ScanOLE2 true
+ScanHTML true
+ExitOnOOM false
+LeaveTemporaryFiles false
+AlgorithmicDetection true
+ScanELF true
+IdleTimeout 30
+PhishingSignatures true
+PhishingScanURLs true
+PhishingAlwaysBlockSSLMismatch false
+PhishingAlwaysBlockCloak false
+DetectPUA false
+ScanPartialMessages false
+HeuristicScanPrecedence false
+StructuredDataDetection false
+CommandReadTimeout 5
+SendBufTimeout 200
+MaxQueue 100
+ExtendedDetectionInfo true
+OLE2BlockMacros false
+StreamMaxLength 2M
+MaxFileSize 2M
+LogFile /var/log/clamav/clamav.log
+LogTime true
+LogFileUnlock false
+LogFileMaxSize 0
+Bytecode true
+BytecodeSecurity TrustSigned
+BytecodeTimeout 60000
+OfficialDatabaseOnly false
+CrossFilesystems true
diff --git a/install/debian/12/deb_signing.key b/install/debian/12/deb_signing.key
new file mode 100644
index 00000000..d279abbd
--- /dev/null
+++ b/install/debian/12/deb_signing.key
@@ -0,0 +1,41 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=RAbI
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/install/debian/12/dovecot/conf.d/10-auth.conf b/install/debian/12/dovecot/conf.d/10-auth.conf
new file mode 100644
index 00000000..dfcc8311
--- /dev/null
+++ b/install/debian/12/dovecot/conf.d/10-auth.conf
@@ -0,0 +1,4 @@
+disable_plaintext_auth = no
+auth_verbose = yes
+auth_mechanisms = plain login
+!include auth-passwdfile.conf.ext
diff --git a/install/debian/12/dovecot/conf.d/10-logging.conf b/install/debian/12/dovecot/conf.d/10-logging.conf
new file mode 100644
index 00000000..a5f207d5
--- /dev/null
+++ b/install/debian/12/dovecot/conf.d/10-logging.conf
@@ -0,0 +1 @@
+log_path = /var/log/dovecot.log
diff --git a/install/debian/12/dovecot/conf.d/10-mail.conf b/install/debian/12/dovecot/conf.d/10-mail.conf
new file mode 100644
index 00000000..55313419
--- /dev/null
+++ b/install/debian/12/dovecot/conf.d/10-mail.conf
@@ -0,0 +1,4 @@
+mail_privileged_group = mail
+mail_access_groups = mail
+mail_location = maildir:%h/mail/%d/%n
+pop3_uidl_format = %08Xu%08Xv
diff --git a/install/debian/12/dovecot/conf.d/10-master.conf b/install/debian/12/dovecot/conf.d/10-master.conf
new file mode 100644
index 00000000..a75a9aaa
--- /dev/null
+++ b/install/debian/12/dovecot/conf.d/10-master.conf
@@ -0,0 +1,29 @@
+service imap-login {
+  inet_listener imap {
+  }
+  inet_listener imaps {
+  }
+}
+
+service pop3-login {
+  inet_listener pop3 {
+  }
+  inet_listener pop3s {
+  }
+}
+
+
+service imap {
+}
+
+service pop3 {
+}
+
+service auth {
+  unix_listener auth-client {
+    group = mail
+    mode = 0660
+    user = dovecot
+  }
+  user = dovecot
+}
diff --git a/install/debian/12/dovecot/conf.d/10-ssl.conf b/install/debian/12/dovecot/conf.d/10-ssl.conf
new file mode 100644
index 00000000..3aaff6ee
--- /dev/null
+++ b/install/debian/12/dovecot/conf.d/10-ssl.conf
@@ -0,0 +1,3 @@
+ssl = yes
+ssl_cert = </usr/local/vesta/ssl/certificate.crt
+ssl_key = </usr/local/vesta/ssl/certificate.key
diff --git a/install/debian/12/dovecot/conf.d/15-mailboxes.conf b/install/debian/12/dovecot/conf.d/15-mailboxes.conf
new file mode 100644
index 00000000..9014bdab
--- /dev/null
+++ b/install/debian/12/dovecot/conf.d/15-mailboxes.conf
@@ -0,0 +1,30 @@
+## Mailbox definitions
+##
+
+
+# NOTE: Assumes "namespace inbox" has been defined in 10-mail.conf.
+namespace inbox {
+  inbox = yes
+  mailbox Drafts {
+    special_use = \Drafts
+    auto = subscribe
+  }
+
+  mailbox Junk {
+    special_use = \Junk
+    auto = subscribe
+  }
+
+  mailbox Trash {
+    special_use = \Trash
+    auto = subscribe
+  }
+
+  mailbox Sent {
+    special_use = \Sent
+    auto = subscribe
+  }
+  mailbox "Sent Messages" {
+    special_use = \Sent
+  }
+}
diff --git a/install/debian/12/dovecot/conf.d/20-imap.conf b/install/debian/12/dovecot/conf.d/20-imap.conf
new file mode 100644
index 00000000..4f6e058b
--- /dev/null
+++ b/install/debian/12/dovecot/conf.d/20-imap.conf
@@ -0,0 +1,58 @@
+##
+## IMAP specific settings
+##
+
+protocol imap {
+  # Maximum IMAP command line length. Some clients generate very long command
+  # lines with huge mailboxes, so you may need to raise this if you get
+  # "Too long argument" or "IMAP command line too large" errors often.
+  #imap_max_line_length = 64k
+
+  # Maximum number of IMAP connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  mail_max_userip_connections = 50
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # IMAP logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #imap_logout_format = bytes=%i/%o
+
+  # Override the IMAP CAPABILITY response. If the value begins with '+',
+  # add the given capabilities on top of the defaults (e.g. +XFOO XBAR).
+  #imap_capability = 
+
+  # How long to wait between "OK Still here" notifications when client is
+  # IDLEing.
+  #imap_idle_notify_interval = 2 mins
+
+  # ID field names and values to send to clients. Using * as the value makes
+  # Dovecot use the default value. The following fields have default values
+  # currently: name, version, os, os-version, support-url, support-email.
+  #imap_id_send = 
+
+  # ID fields sent by client to log. * means everything.
+  #imap_id_log =
+
+  # Workarounds for various client bugs:
+  #   delay-newmail:
+  #     Send EXISTS/RECENT new mail notifications only when replying to NOOP
+  #     and CHECK commands. Some clients ignore them otherwise, for example OSX
+  #     Mail (<v2.1). Outlook Express breaks more badly though, without this it
+  #     may show user "Message no longer in server" errors. Note that OE6 still
+  #     breaks even with this workaround if synchronization is set to
+  #     "Headers Only".
+  #   tb-extra-mailbox-sep:
+  #     Thunderbird gets somehow confused with LAYOUT=fs (mbox and dbox) and
+  #     adds extra '/' suffixes to mailbox names. This option causes Dovecot to
+  #     ignore the extra '/' instead of treating it as invalid mailbox name.
+  #   tb-lsub-flags:
+  #     Show \Noselect flags for LSUB replies with LAYOUT=fs (e.g. mbox).
+  #     This makes Thunderbird realize they aren't selectable and show them
+  #     greyed out, instead of only later giving "not selectable" popup error.
+  #
+  # The list is space-separated.
+  #imap_client_workarounds = 
+}
diff --git a/install/debian/12/dovecot/conf.d/20-pop3.conf b/install/debian/12/dovecot/conf.d/20-pop3.conf
new file mode 100644
index 00000000..8c376996
--- /dev/null
+++ b/install/debian/12/dovecot/conf.d/20-pop3.conf
@@ -0,0 +1,91 @@
+##
+## POP3 specific settings
+##
+
+protocol pop3 {
+  # Don't try to set mails non-recent or seen with POP3 sessions. This is
+  # mostly intended to reduce disk I/O. With maildir it doesn't move files
+  # from new/ to cur/, with mbox it doesn't write Status-header.
+  #pop3_no_flag_updates = no
+
+  # Support LAST command which exists in old POP3 specs, but has been removed
+  # from new ones. Some clients still wish to use this though. Enabling this
+  # makes RSET command clear all \Seen flags from messages.
+  #pop3_enable_last = no
+
+  # If mail has X-UIDL header, use it as the mail's UIDL.
+  #pop3_reuse_xuidl = no
+
+  # Keep the mailbox locked for the entire POP3 session.
+  #pop3_lock_session = no
+
+  # POP3 requires message sizes to be listed as if they had CR+LF linefeeds.
+  # Many POP3 servers violate this by returning the sizes with LF linefeeds,
+  # because it's faster to get. When this setting is enabled, Dovecot still
+  # tries to do the right thing first, but if that requires opening the
+  # message, it fallbacks to the easier (but incorrect) size.
+  #pop3_fast_size_lookups = no
+
+  # POP3 UIDL (unique mail identifier) format to use. You can use following
+  # variables, along with the variable modifiers described in
+  # doc/wiki/Variables.txt (e.g. %Uf for the filename in uppercase)
+  #
+  #  %v - Mailbox's IMAP UIDVALIDITY
+  #  %u - Mail's IMAP UID
+  #  %m - MD5 sum of the mailbox headers in hex (mbox only)
+  #  %f - filename (maildir only)
+  #  %g - Mail's GUID
+  #
+  # If you want UIDL compatibility with other POP3 servers, use:
+  #  UW's ipop3d         : %08Xv%08Xu
+  #  Courier             : %f or %v-%u (both might be used simultaneosly)
+  #  Cyrus (<= 2.1.3)    : %u
+  #  Cyrus (>= 2.1.4)    : %v.%u
+  #  Dovecot v0.99.x     : %v.%u
+  #  tpop3d              : %Mf
+  #
+  # Note that Outlook 2003 seems to have problems with %v.%u format which was
+  # Dovecot's default, so if you're building a new server it would be a good
+  # idea to change this. %08Xu%08Xv should be pretty fail-safe.
+  #
+  #pop3_uidl_format = %08Xu%08Xv
+
+  # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes
+  # won't change those UIDLs. Currently this works only with Maildir.
+  #pop3_save_uidl = no
+
+  # What to do about duplicate UIDLs if they exist?
+  #   allow: Show duplicates to clients.
+  #   rename: Append a temporary -2, -3, etc. counter after the UIDL.
+  #pop3_uidl_duplicates = allow
+
+  # POP3 logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #  %t - number of TOP commands
+  #  %p - number of bytes sent to client as a result of TOP command
+  #  %r - number of RETR commands
+  #  %b - number of bytes sent to client as a result of RETR command
+  #  %d - number of deleted messages
+  #  %m - number of messages (before deletion)
+  #  %s - mailbox size in bytes (before deletion)
+  #  %u - old/new UIDL hash. may help finding out if UIDLs changed unexpectedly
+  #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
+
+  # Maximum number of POP3 connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  mail_max_userip_connections = 50
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # Workarounds for various client bugs:
+  #   outlook-no-nuls:
+  #     Outlook and Outlook Express hang if mails contain NUL characters.
+  #     This setting replaces them with 0x80 character.
+  #   oe-ns-eoh:
+  #     Outlook Express and Netscape Mail breaks if end of headers-line is
+  #     missing. This option simply sends it if it's missing.
+  # The list is space-separated.
+  #pop3_client_workarounds = 
+}
diff --git a/install/debian/12/dovecot/conf.d/auth-passwdfile.conf.ext b/install/debian/12/dovecot/conf.d/auth-passwdfile.conf.ext
new file mode 100644
index 00000000..75e6e115
--- /dev/null
+++ b/install/debian/12/dovecot/conf.d/auth-passwdfile.conf.ext
@@ -0,0 +1,9 @@
+passdb {
+  driver = passwd-file
+  args = scheme=MD5-CRYPT username_format=%n /etc/exim4/domains/%d/passwd
+}
+
+userdb {
+  driver = passwd-file
+  args = username_format=%n /etc/exim4/domains/%d/passwd
+}
diff --git a/install/debian/12/dovecot/dovecot.conf b/install/debian/12/dovecot/dovecot.conf
new file mode 100644
index 00000000..0a855351
--- /dev/null
+++ b/install/debian/12/dovecot/dovecot.conf
@@ -0,0 +1,4 @@
+protocols = imap pop3
+listen = *, ::
+base_dir = /var/run/dovecot/
+!include conf.d/*.conf
diff --git a/install/debian/12/exim/deny_senders b/install/debian/12/exim/deny_senders
new file mode 100644
index 00000000..8b137891
--- /dev/null
+++ b/install/debian/12/exim/deny_senders
@@ -0,0 +1 @@
+
diff --git a/install/debian/12/exim/dnsbl.conf b/install/debian/12/exim/dnsbl.conf
new file mode 100644
index 00000000..5166b255
--- /dev/null
+++ b/install/debian/12/exim/dnsbl.conf
@@ -0,0 +1,2 @@
+bl.spamcop.net
+zen.spamhaus.org
diff --git a/install/debian/12/exim/exim4.conf.template b/install/debian/12/exim/exim4.conf.template
new file mode 100644
index 00000000..4b3c0dd9
--- /dev/null
+++ b/install/debian/12/exim/exim4.conf.template
@@ -0,0 +1,415 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+disable_ipv6=true
+add_environment=<; PATH=/bin:/usr/bin
+keep_environment=
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+recipients_max = 15
+recipients_max_reject = true
+
+# log_selector = +smtp_connection
+smtp_accept_max = 50
+smtp_accept_max_per_host = 4
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/certificate.crt
+tls_privatekey = /usr/local/vesta/ssl/certificate.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 0s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lookup{${lc:${domain:$h_from:}}}dsearch{/etc/exim4/domains/}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+
+acl_not_smtp = acl_not_smtp
+
+begin acl
+
+acl_not_smtp:
+  deny message = Web site is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period
+  ratelimit = 40 / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period
+
+  accept
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period
+  ratelimit = 40 / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth requried
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+
+  deny senders = /etc/exim4/deny_senders
+
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = */defer_ok
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{600K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = nobody:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh|\.jar)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{yes}{no_such_user}}}}
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  require_files = ${local_part}:+${home}/.forward
+  domains = +local_domains
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/fwd_only}{true}{false}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #helo_data = $sender_address_domain
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+  hosts_try_fastopen = !*.l.google.com
+  hosts_try_chunking = !93.188.3.0/24
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}.msg
+  from = "${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################
diff --git a/install/debian/12/exim/exim4.conf.template-RC b/install/debian/12/exim/exim4.conf.template-RC
new file mode 100644
index 00000000..36ba2a0d
--- /dev/null
+++ b/install/debian/12/exim/exim4.conf.template-RC
@@ -0,0 +1,446 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+disable_ipv6=true
+add_environment=<; PATH=/bin:/usr/bin
+keep_environment=
+
+#local_interfaces =  0.0.0.0
+#smtp_active_hostname = ${lookup{$interface_address}lsearch{/etc/exim4/virtual/helo_data}{$value}}
+#smtp_banner = "$smtp_active_hostname ESMTP $tod_full"
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS = 15
+LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS = 5
+LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
+LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
+
+recipients_max = 150
+recipients_max_reject = true
+
+# log_selector = +smtp_connection
+smtp_accept_max = 50
+smtp_accept_max_per_host = 4
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/$received_ip_address.crt
+tls_privatekey = /usr/local/vesta/ssl/$received_ip_address.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 0s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lookup{${lc:${domain:$h_from:}}}dsearch{/etc/exim4/domains/}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+
+acl_not_smtp = acl_not_smtp
+
+begin acl
+
+acl_not_smtp:
+  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
+  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_recipients}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS}}
+  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
+
+  deny message = Hosting account is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+
+  warn    set acl_m3    = yes
+
+  accept
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
+  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_recipients}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS}}
+  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
+
+  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+
+  warn    set acl_m3    = no
+  
+  warn    !authenticated = *
+          hosts          = !+relay_from_hosts
+          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+          set acl_m3    = yes
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth requried
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+
+  deny senders = /etc/exim4/deny_senders
+
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = */defer_ok
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{600K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = nobody:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh|\.jar)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{yes}{no_such_user}}}}
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  require_files = ${local_part}:+${home}/.forward
+  domains = +local_domains
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/fwd_only}{true}{false}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #interface = ${if eq{$acl_m3}{yes}{FIRSTIP}{${lookup{$sender_address_domain}lsearch{/etc/exim4/virtual/interfaces} {$value}{SECONDIP}}}}
+  #helo_data = "${if eq{$acl_m3}{yes}{FIRSTHOST}{${lookup{$sending_ip_address}lsearch{/etc/exim4/virtual/helo_data}{$value}{SECONDHOST}}}}"
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+  hosts_try_fastopen = !*.l.google.com
+  hosts_try_chunking = !93.188.3.0/24
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}.msg
+  from = "${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################
diff --git a/install/debian/12/exim/spam-blocks.conf b/install/debian/12/exim/spam-blocks.conf
new file mode 100644
index 00000000..e69de29b
diff --git a/install/debian/12/fail2ban/action.d/vesta.conf b/install/debian/12/fail2ban/action.d/vesta.conf
new file mode 100644
index 00000000..0edfc349
--- /dev/null
+++ b/install/debian/12/fail2ban/action.d/vesta.conf
@@ -0,0 +1,9 @@
+# Fail2Ban configuration file for vesta
+
+[Definition]
+
+actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
+actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
+actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
+actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
+actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>
diff --git a/install/debian/12/fail2ban/filter.d/vesta.conf b/install/debian/12/fail2ban/filter.d/vesta.conf
new file mode 100644
index 00000000..36ec1001
--- /dev/null
+++ b/install/debian/12/fail2ban/filter.d/vesta.conf
@@ -0,0 +1,10 @@
+# Fail2Ban filter for unsuccessful Vesta authentication attempts
+#
+
+[INCLUDES]
+before = common.conf
+
+[Definition]
+failregex =  .* <HOST> failed to login
+ignoreregex =
+
diff --git a/install/debian/12/fail2ban/jail.local b/install/debian/12/fail2ban/jail.local
new file mode 100644
index 00000000..eccea068
--- /dev/null
+++ b/install/debian/12/fail2ban/jail.local
@@ -0,0 +1,39 @@
+[ssh-iptables]
+enabled  = true
+filter   = sshd
+action   = vesta[name=SSH]
+logpath  = /var/log/auth.log
+maxretry = 5
+
+[vsftpd-iptables]
+enabled  = false
+filter   = vsftpd
+action   = vesta[name=FTP]
+logpath  = /var/log/vsftpd.log
+maxretry = 5
+
+[exim-iptables]
+enabled = true
+filter  = exim
+action  = vesta[name=MAIL]
+logpath = /var/log/exim4/mainlog
+
+[dovecot-iptables]
+enabled = true
+filter  = dovecot
+action  = vesta[name=MAIL]
+logpath = /var/log/dovecot.log
+
+[mysqld-iptables]
+enabled  = false
+filter   = mysqld-auth
+action   = vesta[name=DB]
+logpath  = /var/log/mysql.log
+maxretry = 5
+
+[vesta-iptables]
+enabled = true
+filter  = vesta
+action  = vesta[name=VESTA]
+logpath = /var/log/vesta/auth.log
+maxretry = 5
diff --git a/install/debian/12/firewall/ports.conf b/install/debian/12/firewall/ports.conf
new file mode 100644
index 00000000..b730d012
--- /dev/null
+++ b/install/debian/12/firewall/ports.conf
@@ -0,0 +1,17 @@
+PROTOCOL='TCP' PORT='20'
+PROTOCOL='TCP' PORT='21'
+PROTOCOL='TCP' PORT='22'
+PROTOCOL='TCP' PORT='25'
+PROTOCOL='TCP' PORT='53'
+PROTOCOL='UDP' PORT='53'
+PROTOCOL='TCP' PORT='80'
+PROTOCOL='TCP' PORT='443'
+PROTOCOL='TCP' PORT='110'
+PROTOCOL='UDP' PORT='123'
+PROTOCOL='TCP' PORT='143'
+PROTOCOL='TCP' PORT='3306'
+PROTOCOL='TCP' PORT='5432'
+PROTOCOL='TCP' PORT='8080'
+PROTOCOL='TCP' PORT='8433'
+PROTOCOL='TCP' PORT='8083'
+PROTOCOL='TCP' PORT='12000:12100'
diff --git a/install/debian/12/firewall/rules.conf b/install/debian/12/firewall/rules.conf
new file mode 100644
index 00000000..6da5a1c4
--- /dev/null
+++ b/install/debian/12/firewall/rules.conf
@@ -0,0 +1,11 @@
+RULE='1' ACTION='ACCEPT' PROTOCOL='ICMP' PORT='0' IP='0.0.0.0/0' COMMENT='PING' SUSPENDED='no' TIME='17:13:48' DATE='2014-09-16'
+RULE='2' ACTION='ACCEPT' PROTOCOL='TCP' PORT='8083' IP='0.0.0.0/0' COMMENT='VESTA' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='3' ACTION='ACCEPT' PROTOCOL='TCP' PORT='3306,5432' IP='0.0.0.0/0' COMMENT='DB' SUSPENDED='yes' TIME='07:40:16' DATE='2014-05-25'
+RULE='4' ACTION='ACCEPT' PROTOCOL='TCP' PORT='143,993' IP='0.0.0.0/0' COMMENT='IMAP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='5' ACTION='ACCEPT' PROTOCOL='TCP' PORT='110,995' IP='0.0.0.0/0' COMMENT='POP3' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='6' ACTION='ACCEPT' PROTOCOL='TCP' PORT='25,465,587,2525' IP='0.0.0.0/0' COMMENT='SMTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='7' ACTION='ACCEPT' PROTOCOL='TCP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='8' ACTION='ACCEPT' PROTOCOL='UDP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='9' ACTION='ACCEPT' PROTOCOL='TCP' PORT='21,12000-12100' IP='0.0.0.0/0' COMMENT='FTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='10' ACTION='ACCEPT' PROTOCOL='TCP' PORT='80,443' IP='0.0.0.0/0' COMMENT='WEB' SUSPENDED='no' TIME='17:04:27' DATE='2014-09-24'
+RULE='11' ACTION='ACCEPT' PROTOCOL='TCP' PORT='22' IP='0.0.0.0/0' COMMENT='SSH' SUSPENDED='no' TIME='17:14:41' DATE='2014-09-16'
diff --git a/install/debian/12/logrotate/apache2 b/install/debian/12/logrotate/apache2
new file mode 100644
index 00000000..27629d0d
--- /dev/null
+++ b/install/debian/12/logrotate/apache2
@@ -0,0 +1,19 @@
+/var/log/apache2/*.log /var/log/apache2/domains/*log {
+        weekly
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 root adm
+        sharedscripts
+        postrotate
+                /etc/init.d/apache2 reload > /dev/null || true
+                [ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+        prerotate
+                if [ -d /etc/logrotate.d/httpd-prerotate ]; then \
+                        run-parts /etc/logrotate.d/httpd-prerotate; \
+                fi; \
+        endscript
+}
diff --git a/install/debian/12/logrotate/dovecot b/install/debian/12/logrotate/dovecot
new file mode 100644
index 00000000..ac4fd6e9
--- /dev/null
+++ b/install/debian/12/logrotate/dovecot
@@ -0,0 +1,12 @@
+/var/log/dovecot*.log {
+  weekly
+  rotate 4
+  missingok
+  notifempty
+  compress
+  delaycompress
+  sharedscripts
+  postrotate
+    doveadm log reopen
+  endscript
+}
diff --git a/install/debian/12/logrotate/nginx b/install/debian/12/logrotate/nginx
new file mode 100644
index 00000000..d667f213
--- /dev/null
+++ b/install/debian/12/logrotate/nginx
@@ -0,0 +1,13 @@
+/var/log/nginx/*log /var/log/nginx/domains/*log {
+        daily
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 nginx adm
+        sharedscripts
+        postrotate
+                [ -f /var/run/nginx.pid ] && kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+}
diff --git a/install/debian/12/logrotate/vesta b/install/debian/12/logrotate/vesta
new file mode 100644
index 00000000..027a3439
--- /dev/null
+++ b/install/debian/12/logrotate/vesta
@@ -0,0 +1,7 @@
+/usr/local/vesta/log/*.log {
+    missingok
+    notifempty
+    size 30k
+    yearly
+    create 0600 root root
+}
diff --git a/install/debian/12/mysql/my-large.cnf b/install/debian/12/mysql/my-large.cnf
new file mode 100644
index 00000000..b056c316
--- /dev/null
+++ b/install/debian/12/mysql/my-large.cnf
@@ -0,0 +1,51 @@
+[client]
+default-character-set=utf8mb4
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysql]
+default-character-set=utf8mb4
+
+[mysqld]
+collation-server = utf8mb4_unicode_520_ci
+init-connect='SET NAMES utf8mb4'
+character-set-server = utf8mb4
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 256M
+max_allowed_packet = 32M
+table_open_cache = 256
+sort_buffer_size = 1M
+read_buffer_size = 1M
+read_rnd_buffer_size = 4M
+myisam_sort_buffer_size = 64M
+thread_cache_size = 8
+query_cache_size= 16M
+thread_concurrency = 8
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=200
+max_user_connections=50
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+sql_mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/12/mysql/my-medium.cnf b/install/debian/12/mysql/my-medium.cnf
new file mode 100644
index 00000000..33aa04c2
--- /dev/null
+++ b/install/debian/12/mysql/my-medium.cnf
@@ -0,0 +1,49 @@
+[client]
+default-character-set=utf8mb4
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysql]
+default-character-set=utf8mb4
+
+[mysqld]
+collation-server = utf8mb4_unicode_520_ci
+init-connect='SET NAMES utf8mb4'
+character-set-server = utf8mb4
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+  
+skip-external-locking
+key_buffer_size = 16M
+max_allowed_packet = 16M
+table_open_cache = 64
+sort_buffer_size = 512K
+net_buffer_length = 8K
+read_buffer_size = 256K
+read_rnd_buffer_size = 512K
+myisam_sort_buffer_size = 8M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=70
+max_user_connections=30
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+sql_mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/12/mysql/my-small.cnf b/install/debian/12/mysql/my-small.cnf
new file mode 100644
index 00000000..857f48ce
--- /dev/null
+++ b/install/debian/12/mysql/my-small.cnf
@@ -0,0 +1,49 @@
+[client]
+default-character-set=utf8mb4
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysql]
+default-character-set=utf8mb4
+
+[mysqld]
+collation-server = utf8mb4_unicode_520_ci
+init-connect='SET NAMES utf8mb4'
+character-set-server = utf8mb4
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 16K
+max_allowed_packet = 1M
+table_open_cache = 4
+sort_buffer_size = 64K
+read_buffer_size = 256K
+read_rnd_buffer_size = 256K
+net_buffer_length = 2K
+thread_stack = 240K
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=30
+max_user_connections=20
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+sql_mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/12/nginx/nginx.conf b/install/debian/12/nginx/nginx.conf
new file mode 100644
index 00000000..6d5e36ba
--- /dev/null
+++ b/install/debian/12/nginx/nginx.conf
@@ -0,0 +1,140 @@
+# Server globals
+user                    www-data;
+worker_processes        auto;
+worker_rlimit_nofile    65535;
+timer_resolution         50ms; #In order to free some CPU cycles
+error_log               /var/log/nginx/error.log crit;
+pid                     /var/run/nginx.pid;
+
+
+# Worker config
+events {
+        worker_connections  1024;
+        use                 epoll;
+        multi_accept        on;
+}
+
+
+http {
+    # Main settings
+    sendfile                        on;
+    tcp_nopush                      on;
+    tcp_nodelay                     on;
+    client_header_timeout           1m;
+    client_body_timeout             1m;
+    client_header_buffer_size       2k;
+    client_body_buffer_size         256k;
+    client_max_body_size            256m;
+    large_client_header_buffers     4   8k;
+    send_timeout                    30;
+    keepalive_timeout               60 60;
+    reset_timedout_connection       on;
+    server_tokens                   off;
+    server_name_in_redirect         off;
+    server_names_hash_max_size      512;
+    server_names_hash_bucket_size   512;
+
+
+    # Log format
+    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
+                        '"$status" $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  bytes   '$body_bytes_sent';
+    #access_log          /var/log/nginx/access.log main;
+    access_log off;
+
+
+    # Mime settings
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+
+    # Compression
+    gzip                on;
+    gzip_comp_level     9;
+    gzip_min_length     512;
+    gzip_buffers        8 64k;
+    gzip_types          text/plain text/css text/javascript text/js text/xml application/json application/javascript application/x-javascript application/xml application/xml+rss application/x-font-ttf image/svg+xml font/opentype;
+    gzip_proxied        any;
+    gzip_disable        "MSIE [1-6]\.";
+
+    # Proxy settings
+    proxy_redirect      off;
+    proxy_set_header    Host            $host;
+    proxy_set_header    X-Real-IP       $remote_addr;
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_header   Set-Cookie;
+    proxy_connect_timeout   900;
+    proxy_send_timeout  900;
+    proxy_read_timeout  900;
+    proxy_buffer_size   128k;
+    proxy_buffers   4 256k;
+    proxy_busy_buffers_size   256k;
+
+
+    # Cloudflare https://www.cloudflare.com/ips
+    set_real_ip_from 173.245.48.0/20;
+    set_real_ip_from 103.21.244.0/22;
+    set_real_ip_from 103.22.200.0/22;
+    set_real_ip_from 103.31.4.0/22;
+    set_real_ip_from 104.16.0.0/13;
+    set_real_ip_from 104.24.0.0/14;
+    set_real_ip_from 141.101.64.0/18;
+    set_real_ip_from 108.162.192.0/18;
+    set_real_ip_from 190.93.240.0/20;
+    set_real_ip_from 188.114.96.0/20;
+    set_real_ip_from 197.234.240.0/22;
+    set_real_ip_from 198.41.128.0/17;
+    set_real_ip_from 162.158.0.0/15;
+    set_real_ip_from 172.64.0.0/13;
+    set_real_ip_from 131.0.72.0/22;
+    set_real_ip_from 2400:cb00::/32;
+    set_real_ip_from 2606:4700::/32;
+    set_real_ip_from 2803:f800::/32;
+    set_real_ip_from 2405:b500::/32;
+    set_real_ip_from 2405:8100::/32;
+    set_real_ip_from 2a06:98c0::/29;
+    set_real_ip_from 2c0f:f248::/32;
+    real_ip_header     CF-Connecting-IP;
+
+
+    # SSL PCI Compliance
+    ssl_session_cache   shared:SSL:10m;
+    ssl_protocols       TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
+
+
+    # Error pages
+    error_page          403          /error/403.html;
+    error_page          404          /error/404.html;
+    error_page          502 503 504  /error/50x.html;
+
+
+    # Cache settings
+    proxy_cache_path /var/cache/nginx levels=2 keys_zone=cache:10m inactive=60m max_size=1024m;
+    proxy_cache_key "$host$request_uri $cookie_user";
+    proxy_temp_path  /var/cache/nginx/temp;
+    proxy_ignore_headers Expires Cache-Control;
+    proxy_cache_use_stale error timeout invalid_header http_502;
+    proxy_cache_valid any 1d;
+
+
+    # Cache bypass
+    map $http_cookie $no_cache {
+        default 0;
+        ~SESS 1;
+        ~wordpress_logged_in 1;
+    }
+
+
+    # File cache settings
+    open_file_cache          max=10000 inactive=30s;
+    open_file_cache_valid    60s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors   off;
+
+
+    # Wildcard include
+    include             /etc/nginx/conf.d/*.conf;
+}
diff --git a/install/debian/12/nginx/phpmyadmin.inc b/install/debian/12/nginx/phpmyadmin.inc
new file mode 100644
index 00000000..cdfc93c4
--- /dev/null
+++ b/install/debian/12/nginx/phpmyadmin.inc
@@ -0,0 +1,18 @@
+location /phpmyadmin {
+    alias /usr/share/phpmyadmin;
+
+    location ~ /(libraries|setup) {
+        return 404;
+    }
+
+    location ~ ^/phpmyadmin/(.*\.php)$ {
+        alias /usr/share/phpmyadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+    location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
+        root /usr/share/;
+    }
+}
diff --git a/install/debian/12/nginx/phppgadmin.inc b/install/debian/12/nginx/phppgadmin.inc
new file mode 100644
index 00000000..47cfcf4e
--- /dev/null
+++ b/install/debian/12/nginx/phppgadmin.inc
@@ -0,0 +1,11 @@
+location /phppgadmin {
+    alias /usr/share/phppgadmin;
+
+    location ~ ^/phppgadmin/(.*\.php)$ {
+        alias /usr/share/phppgadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/debian/12/nginx/status.conf b/install/debian/12/nginx/status.conf
new file mode 100644
index 00000000..c0bcd069
--- /dev/null
+++ b/install/debian/12/nginx/status.conf
@@ -0,0 +1,9 @@
+server {
+    listen       127.0.0.1:8084 default;
+    server_name  _;
+    server_name_in_redirect  off;
+    location / {
+        stub_status on;
+        access_log   off;
+   }
+}
diff --git a/install/debian/12/nginx/webmail.inc b/install/debian/12/nginx/webmail.inc
new file mode 100644
index 00000000..768c9049
--- /dev/null
+++ b/install/debian/12/nginx/webmail.inc
@@ -0,0 +1,15 @@
+location /webmail {
+    alias /var/lib/roundcube;
+
+    location ~ /(config|temp|logs) {
+        return 404;
+    }
+
+    location ~ ^/webmail/(.*\.php)$ {
+        alias /var/lib/roundcube/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/debian/12/packages/default.pkg b/install/debian/12/packages/default.pkg
new file mode 100644
index 00000000..45a34c96
--- /dev/null
+++ b/install/debian/12/packages/default.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='PHP-FPM-74'
+PROXY_TEMPLATE='hosting'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='unlimited'
+WEB_ALIASES='unlimited'
+DNS_DOMAINS='unlimited'
+DNS_RECORDS='unlimited'
+MAIL_DOMAINS='unlimited'
+MAIL_ACCOUNTS='unlimited'
+DATABASES='unlimited'
+CRON_JOBS='unlimited'
+DISK_QUOTA='unlimited'
+BANDWIDTH='unlimited'
+NS='YOURHOSTNAME1,YOURHOSTNAME2'
+SHELL='nologin'
+BACKUPS='2'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/debian/12/pga/config.inc.php b/install/debian/12/pga/config.inc.php
new file mode 100644
index 00000000..1eec9776
--- /dev/null
+++ b/install/debian/12/pga/config.inc.php
@@ -0,0 +1,159 @@
+<?php
+
+    /**
+     * Central phpPgAdmin configuration.  As a user you may modify the
+     * settings here for your particular configuration.
+     *
+     * $Id: config.inc.php-dist,v 1.55 2008/02/18 21:10:31 xzilla Exp $
+     */
+
+    // An example server.  Create as many of these as you wish,
+    // indexed from zero upwards.
+
+    // Display name for the server on the login screen
+    $conf['servers'][0]['desc'] = 'PostgreSQL';
+
+    // Hostname or IP address for server.  Use '' for UNIX domain socket.
+    // use 'localhost' for TCP/IP connection on this computer
+    $conf['servers'][0]['host'] = 'localhost';
+
+    // Database port on server (5432 is the PostgreSQL default)
+    $conf['servers'][0]['port'] = 5432;
+
+    // Database SSL mode
+    // Possible options: disable, allow, prefer, require
+    // To require SSL on older servers use option: legacy
+    // To ignore the SSL mode, use option: unspecified
+    $conf['servers'][0]['sslmode'] = 'allow';
+
+    // Change the default database only if you cannot connect to template1.
+    // For a PostgreSQL 8.1+ server, you can set this to 'postgres'.
+    $conf['servers'][0]['defaultdb'] = 'template1';
+
+    // Specify the path to the database dump utilities for this server.
+    // You can set these to '' if no dumper is available.
+    $conf['servers'][0]['pg_dump_path'] = '/usr/bin/pg_dump';
+    $conf['servers'][0]['pg_dumpall_path'] = '/usr/bin/pg_dumpall';
+
+    // Slony (www.slony.info) support?
+    $conf['servers'][0]['slony_support'] = false;
+    // Specify the path to the Slony SQL scripts (where slony1_base.sql is located, etc.)
+    // No trailing slash.
+    $conf['servers'][0]['slony_sql'] = '/usr/share/pgsql';
+
+    // Example for a second server (PostgreSQL for Windows)
+    //$conf['servers'][1]['desc'] = 'Test Server';
+    //$conf['servers'][1]['host'] = '127.0.0.1';
+    //$conf['servers'][1]['port'] = 5432;
+    //$conf['servers'][1]['sslmode'] = 'allow';
+    //$conf['servers'][1]['defaultdb'] = 'template1';
+    //$conf['servers'][1]['pg_dump_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dump.exe';
+    //$conf['servers'][1]['pg_dumpall_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dumpall.exe';
+    //$conf['servers'][1]['slony_support'] = false;
+    //$conf['servers'][1]['slony_sql'] = 'C:\\Program Files\\PostgreSQL\\8.0\\share';
+
+
+    // Example of groups definition.
+    // Groups allow administrators to logicaly group servers together under group nodes in the left browser tree
+    //
+    // The group '0' description
+    //$conf['srv_groups'][0]['desc'] = 'group one';
+    //
+    // Add here servers indexes belonging to the group '0' seperated by comma
+    //$conf['srv_groups'][0]['servers'] = '0,1,2'; 
+    //
+    // A server can belong to multi groups
+    //$conf['srv_groups'][1]['desc'] = 'group two';
+    //$conf['srv_groups'][1]['servers'] = '3,1';
+
+
+    // Default language. E.g.: 'english', 'polish', etc.  See lang/ directory
+    // for all possibilities. If you specify 'auto' (the default) it will use 
+    // your browser preference.
+    $conf['default_lang'] = 'auto';
+
+    // AutoComplete uses AJAX interaction to list foreign key values 
+    // on insert fields. It currently only works on single column 
+    // foreign keys. You can choose one of the following values:
+    // 'default on' enables AutoComplete and turns it on by default.
+    // 'default off' enables AutoComplete but turns it off by default.
+    // 'disable' disables AutoComplete.
+    $conf['autocomplete'] = 'default on';
+
+    // If extra login security is true, then logins via phpPgAdmin with no
+    // password or certain usernames (pgsql, postgres, root, administrator)
+    // will be denied. Only set this false once you have read the FAQ and
+    // understand how to change PostgreSQL's pg_hba.conf to enable
+    // passworded local connections.
+    $conf['extra_login_security'] = true;
+
+    // Only show owned databases?
+    // Note: This will simply hide other databases in the list - this does
+    // not in any way prevent your users from seeing other database by
+    // other means. (e.g. Run 'SELECT * FROM pg_database' in the SQL area.)
+    $conf['owned_only'] = false;
+
+    // Display comments on objects?  Comments are a good way of documenting
+    // a database, but they do take up space in the interface.
+    $conf['show_comments'] = true;
+
+    // Display "advanced" objects? Setting this to true will show 
+    // aggregates, types, operators, operator classes, conversions, 
+    // languages and casts in phpPgAdmin. These objects are rarely 
+    // administered and can clutter the interface.
+    $conf['show_advanced'] = false;
+
+    // Display "system" objects?
+    $conf['show_system'] = false;
+
+    // Display reports feature?  For this feature to work, you must
+    // install the reports database as explained in the INSTALL file.
+    $conf['show_reports'] = true;
+
+    // Database and table for reports
+    $conf['reports_db'] = 'phppgadmin';
+    $conf['reports_schema'] = 'public';
+    $conf['reports_table'] = 'ppa_reports';
+
+    // Only show owned reports?
+    // Note: This does not prevent people from accessing other reports by
+    // other means.
+    $conf['owned_reports_only'] = false;
+
+    // Minimum length users can set their password to.
+    $conf['min_password_length'] = 1;
+
+    // Width of the left frame in pixels (object browser)
+    $conf['left_width'] = 200;
+
+    // Which look & feel theme to use
+    $conf['theme'] = 'default';
+
+    // Show OIDs when browsing tables?
+    $conf['show_oids'] = false;
+
+    // Max rows to show on a page when browsing record sets
+    $conf['max_rows'] = 30;
+
+    // Max chars of each field to display by default in browse mode
+    $conf['max_chars'] = 50;
+
+    // Send XHTML strict headers?
+    $conf['use_xhtml_strict'] = false;
+
+    // Base URL for PostgreSQL documentation.
+    // '%s', if present, will be replaced with the PostgreSQL version
+    // (e.g. 8.4 )
+    $conf['help_base'] = 'http://www.postgresql.org/docs/%s/interactive/';
+
+    // Configuration for ajax scripts
+    // Time in seconds. If set to 0, refreshing data using ajax will be disabled (locks and activity pages)
+    $conf['ajax_refresh'] = 3;
+
+    /*****************************************
+     * Don't modify anything below this line *
+     *****************************************/
+
+    $conf['version'] = 19;
+
+?>
diff --git a/install/debian/12/pga/phppgadmin.conf b/install/debian/12/pga/phppgadmin.conf
new file mode 100644
index 00000000..f39247d6
--- /dev/null
+++ b/install/debian/12/pga/phppgadmin.conf
@@ -0,0 +1,31 @@
+Alias /phppgadmin /usr/share/phppgadmin
+
+<Directory /usr/share/phppgadmin>
+
+DirectoryIndex index.php
+AllowOverride None
+
+order deny,allow
+deny from all
+allow from 127.0.0.0/255.0.0.0 ::1/128
+allow from all
+
+<IfModule mod_php5.c>
+  php_flag magic_quotes_gpc Off
+  php_flag track_vars On
+  php_value include_path .
+</IfModule>
+<IfModule !mod_php5.c>
+  <IfModule mod_actions.c>
+    <IfModule mod_cgi.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+    <IfModule mod_cgid.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+  </IfModule>
+</IfModule>
+
+</Directory>
diff --git a/install/debian/12/php-fpm/www.conf b/install/debian/12/php-fpm/www.conf
new file mode 100644
index 00000000..3c87f33c
--- /dev/null
+++ b/install/debian/12/php-fpm/www.conf
@@ -0,0 +1,11 @@
+[www]
+listen = 127.0.0.1:9000
+listen.allowed_clients = 127.0.0.1
+
+user = www-data
+group = www-data
+
+pm = ondemand
+pm.max_children = 2
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
diff --git a/install/debian/12/php/php7.3-dedi.patch b/install/debian/12/php/php7.3-dedi.patch
new file mode 100644
index 00000000..c044e002
--- /dev/null
+++ b/install/debian/12/php/php7.3-dedi.patch
@@ -0,0 +1,78 @@
+--- /etc/php/7.3/fpm/php.ini.orig	2019-07-18 16:11:18.856589963 +0200
++++ /etc/php/7.3/fpm/php.ini	2019-07-18 17:45:51.000000000 +0200
+@@ -312,7 +312,8 @@
+ ; This directive allows you to disable certain functions for security reasons.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes for security reasons.
+ ; It receives a comma-delimited list of class names.
+@@ -399,11 +400,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume (128MB)
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -690,7 +691,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -842,7 +843,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1087,7 +1088,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1791,20 +1792,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=2048
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5
diff --git a/install/debian/12/php/php7.3-vps.patch b/install/debian/12/php/php7.3-vps.patch
new file mode 100644
index 00000000..803b93e8
--- /dev/null
+++ b/install/debian/12/php/php7.3-vps.patch
@@ -0,0 +1,78 @@
+--- /etc/php/7.3/fpm/php.ini.orig	2019-07-18 16:11:18.856589963 +0200
++++ /etc/php/7.3/fpm/php.ini	2019-07-18 17:45:51.000000000 +0200
+@@ -312,7 +312,8 @@
+ ; This directive allows you to disable certain functions for security reasons.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes for security reasons.
+ ; It receives a comma-delimited list of class names.
+@@ -399,11 +400,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume (128MB)
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -690,7 +691,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -842,7 +843,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1087,7 +1088,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1791,20 +1792,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=512
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5
diff --git a/install/debian/12/php/php7.4-dedi.patch b/install/debian/12/php/php7.4-dedi.patch
new file mode 100644
index 00000000..3e5bd2fb
--- /dev/null
+++ b/install/debian/12/php/php7.4-dedi.patch
@@ -0,0 +1,78 @@
+--- /etc/php/7.4/fpm/php.ini.orig	2021-07-16 16:12:30.027464762 +0200
++++ /etc/php/7.4/fpm/php.ini	2021-07-16 16:25:15.000000000 +0200
+@@ -309,7 +309,8 @@
+ ; This directive allows you to disable certain functions.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes.
+ ; It receives a comma-delimited list of class names.
+@@ -402,11 +403,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -691,7 +692,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -843,7 +844,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1089,7 +1090,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1766,20 +1767,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=2048
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5
diff --git a/install/debian/12/php/php7.4-vps.patch b/install/debian/12/php/php7.4-vps.patch
new file mode 100644
index 00000000..7c52d402
--- /dev/null
+++ b/install/debian/12/php/php7.4-vps.patch
@@ -0,0 +1,78 @@
+--- /etc/php/7.4/fpm/php.ini.orig	2021-07-16 16:12:30.027464762 +0200
++++ /etc/php/7.4/fpm/php.ini	2021-07-16 16:24:26.000000000 +0200
+@@ -309,7 +309,8 @@
+ ; This directive allows you to disable certain functions.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes.
+ ; It receives a comma-delimited list of class names.
+@@ -402,11 +403,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -691,7 +692,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -843,7 +844,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1089,7 +1090,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1766,20 +1767,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=512
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5
diff --git a/install/debian/12/pma/apache.conf b/install/debian/12/pma/apache.conf
new file mode 100644
index 00000000..2a8f69e2
--- /dev/null
+++ b/install/debian/12/pma/apache.conf
@@ -0,0 +1,42 @@
+# phpMyAdmin default Apache configuration
+
+Alias /phpmyadmin /usr/share/phpmyadmin
+
+<Directory /usr/share/phpmyadmin>
+	Options FollowSymLinks
+	DirectoryIndex index.php
+
+	<IfModule mod_php5.c>
+		AddType application/x-httpd-php .php
+
+		php_flag magic_quotes_gpc Off
+		php_flag track_vars On
+		php_flag register_globals Off
+		php_admin_flag allow_url_fopen Off
+		php_value include_path .
+		php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp
+		php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/:/usr/share/php/php-gettext
+	</IfModule>
+
+</Directory>
+
+# Authorize for setup
+<Directory /usr/share/phpmyadmin/setup>
+    <IfModule mod_authn_file.c>
+    AuthType Basic
+    AuthName "phpMyAdmin Setup"
+    AuthUserFile /etc/phpmyadmin/htpasswd.setup
+    </IfModule>
+    Require valid-user
+</Directory>
+
+# Disallow web access to directories that don't need it
+<Directory /usr/share/phpmyadmin/libraries>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+<Directory /usr/share/phpmyadmin/setup/lib>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+
diff --git a/install/debian/12/pma/config.inc.php b/install/debian/12/pma/config.inc.php
new file mode 100644
index 00000000..eafc6d67
--- /dev/null
+++ b/install/debian/12/pma/config.inc.php
@@ -0,0 +1,146 @@
+<?php
+/**
+ * Debian local configuration file
+ *
+ * This file overrides the settings made by phpMyAdmin interactive setup
+ * utility.
+ *
+ * For example configuration see
+ *   /usr/share/doc/phpmyadmin/examples/config.sample.inc.php
+ * or
+ *   /usr/share/doc/phpmyadmin/examples/config.manyhosts.inc.php
+ *
+ * NOTE: do not add security sensitive data to this file (like passwords)
+ * unless you really know what you're doing. If you do, any user that can
+ * run PHP or CGI on your webserver will be able to read them. If you still
+ * want to do this, make sure to properly secure the access to this file
+ * (also on the filesystem level).
+ */
+
+function check_file_access($path)
+{
+    if (is_readable($path)) {
+        return true;
+    } else {
+        error_log(
+            'phpmyadmin: Failed to load ' . $path
+            . ' Check group www-data has read access and open_basedir restrictions.'
+        );
+        return false;
+    }
+}
+
+// Load secret generated on postinst
+if (check_file_access('/var/lib/phpmyadmin/blowfish_secret.inc.php')) {
+    require('/var/lib/phpmyadmin/blowfish_secret.inc.php');
+}
+
+// Load autoconf local config
+if (check_file_access('/var/lib/phpmyadmin/config.inc.php')) {
+    require('/var/lib/phpmyadmin/config.inc.php');
+}
+
+/**
+ * Server(s) configuration
+ */
+$i = 0;
+// The $cfg['Servers'] array starts with $cfg['Servers'][1].  Do not use $cfg['Servers'][0].
+// You can disable a server config entry by setting host to ''.
+$i++;
+
+/**
+ * Read configuration from dbconfig-common
+ * You can regenerate it using: dpkg-reconfigure -plow phpmyadmin
+ */
+if (check_file_access('/etc/phpmyadmin/config-db.php')) {
+    require('/etc/phpmyadmin/config-db.php');
+}
+
+/* Configure according to dbconfig-common if enabled */
+if (!empty($dbname)) {
+    /* Authentication type */
+    $cfg['Servers'][$i]['auth_type'] = 'cookie';
+    /* Server parameters */
+    if (empty($dbserver)) $dbserver = 'localhost';
+    $cfg['Servers'][$i]['host'] = $dbserver;
+
+    if (!empty($dbport) || $dbserver != 'localhost') {
+        $cfg['Servers'][$i]['connect_type'] = 'tcp';
+        $cfg['Servers'][$i]['port'] = $dbport;
+    }
+    //$cfg['Servers'][$i]['compress'] = false;
+    /* Select mysqli if your server has it */
+    $cfg['Servers'][$i]['extension'] = 'mysqli';
+    /* Optional: User for advanced features */
+    $cfg['Servers'][$i]['controluser'] = $dbuser;
+    $cfg['Servers'][$i]['controlpass'] = $dbpass;
+    /* Optional: Advanced phpMyAdmin features */
+    $cfg['Servers'][$i]['pmadb'] = $dbname;
+    $cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
+    $cfg['Servers'][$i]['relation'] = 'pma__relation';
+    $cfg['Servers'][$i]['table_info'] = 'pma__table_info';
+    $cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
+    $cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
+    $cfg['Servers'][$i]['column_info'] = 'pma__column_info';
+    $cfg['Servers'][$i]['history'] = 'pma__history';
+    $cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
+    $cfg['Servers'][$i]['designer_coords'] = 'pma__designer_coords';
+    $cfg['Servers'][$i]['tracking'] = 'pma__tracking';
+    $cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
+    $cfg['Servers'][$i]['recent'] = 'pma__recent';
+
+    /* Uncomment the following to enable logging in to passwordless accounts,
+     * after taking note of the associated security risks. */
+    // $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+    /* Advance to next server for rest of config */
+    $i++;
+}
+
+/* Authentication type */
+//$cfg['Servers'][$i]['auth_type'] = 'cookie';
+/* Server parameters */
+//$cfg['Servers'][$i]['host'] = 'localhost';
+//$cfg['Servers'][$i]['connect_type'] = 'tcp';
+//$cfg['Servers'][$i]['compress'] = false;
+/* Select mysqli if your server has it */
+//$cfg['Servers'][$i]['extension'] = 'mysql';
+/* Optional: User for advanced features */
+// $cfg['Servers'][$i]['controluser'] = 'pma';
+// $cfg['Servers'][$i]['controlpass'] = 'pmapass';
+
+/* Storage database and tables */
+// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
+// $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+// $cfg['Servers'][$i]['relation'] = 'pma_relation';
+// $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+// $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+// $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+// $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+// $cfg['Servers'][$i]['history'] = 'pma_history';
+// $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+// $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+// $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+// $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+// $cfg['Servers'][$i]['recent'] = 'pma_recent';
+/* Uncomment the following to enable logging in to passwordless accounts,
+ * after taking note of the associated security risks. */
+// $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+/*
+ * End of servers configuration
+ */
+
+/*
+ * Directories for saving/loading files from server
+ */
+$cfg['UploadDir'] = '';
+$cfg['SaveDir'] = '';
+
+/* Support additional configurations */
+foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
+{
+    include($filename);
+}
+
+
diff --git a/install/debian/12/pma/create_tables.sql b/install/debian/12/pma/create_tables.sql
new file mode 100644
index 00000000..3583a6ed
--- /dev/null
+++ b/install/debian/12/pma/create_tables.sql
@@ -0,0 +1,385 @@
+-- --------------------------------------------------------
+-- SQL Commands to set up the pmadb as described in the documentation.
+--
+-- This file is meant for use with MySQL 5 and above!
+--
+-- This script expects the user pma to already be existing. If we would put a
+-- line here to create him too many users might just use this script and end
+-- up with having the same password for the controluser.
+--
+-- This user "pma" must be defined in config.inc.php (controluser/controlpass)
+--
+-- Please don't forget to set up the tablenames in config.inc.php
+--
+
+-- --------------------------------------------------------
+
+--
+-- Database : `phpmyadmin`
+--
+CREATE DATABASE IF NOT EXISTS `phpmyadmin`
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+USE phpmyadmin;
+
+-- --------------------------------------------------------
+
+--
+-- Privileges
+--
+-- (activate this statement if necessary)
+-- GRANT SELECT, INSERT, DELETE, UPDATE, ALTER ON `phpmyadmin`.* TO
+--    'pma'@localhost;
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__usergroups`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__usergroups` (
+  `usergroup` varchar(64) NOT NULL,
+  `tab` varchar(64) NOT NULL,
+  `allowed` enum('Y','N') NOT NULL DEFAULT 'N',
+  PRIMARY KEY (`usergroup`,`tab`,`allowed`)
+)
+  COMMENT='User groups with configured menu items'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__designer_coords`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__designer_coords` (
+  `db_name` varchar(64) COLLATE utf8_bin NOT NULL DEFAULT '',
+  `table_name` varchar(64) COLLATE utf8_bin NOT NULL DEFAULT '',
+  `x` int(11) DEFAULT NULL,
+  `y` int(11) DEFAULT NULL,
+  `v` tinyint(4) DEFAULT NULL,
+  `h` tinyint(4) DEFAULT NULL,
+  PRIMARY KEY (`db_name`,`table_name`)
+) ENGINE=MyISAM DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='Table coordinates for Designer';
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__bookmark`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__bookmark` (
+  `id` int(11) NOT NULL auto_increment,
+  `dbase` varchar(255) NOT NULL default '',
+  `user` varchar(255) NOT NULL default '',
+  `label` varchar(255) COLLATE utf8_general_ci NOT NULL default '',
+  `query` text NOT NULL,
+  PRIMARY KEY  (`id`)
+)
+  COMMENT='Bookmarks'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__column_info`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__column_info` (
+  `id` int(5) unsigned NOT NULL auto_increment,
+  `db_name` varchar(64) NOT NULL default '',
+  `table_name` varchar(64) NOT NULL default '',
+  `column_name` varchar(64) NOT NULL default '',
+  `comment` varchar(255) COLLATE utf8_general_ci NOT NULL default '',
+  `mimetype` varchar(255) COLLATE utf8_general_ci NOT NULL default '',
+  `transformation` varchar(255) NOT NULL default '',
+  `transformation_options` varchar(255) NOT NULL default '',
+  `input_transformation` varchar(255) NOT NULL default '',
+  `input_transformation_options` varchar(255) NOT NULL default '',
+  PRIMARY KEY  (`id`),
+  UNIQUE KEY `db_name` (`db_name`,`table_name`,`column_name`)
+)
+  COMMENT='Column information for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__history`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__history` (
+  `id` bigint(20) unsigned NOT NULL auto_increment,
+  `username` varchar(64) NOT NULL default '',
+  `db` varchar(64) NOT NULL default '',
+  `table` varchar(64) NOT NULL default '',
+  `timevalue` timestamp NOT NULL default CURRENT_TIMESTAMP,
+  `sqlquery` text NOT NULL,
+  PRIMARY KEY  (`id`),
+  KEY `username` (`username`,`db`,`table`,`timevalue`)
+)
+  COMMENT='SQL history for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__pdf_pages`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__pdf_pages` (
+  `db_name` varchar(64) NOT NULL default '',
+  `page_nr` int(10) unsigned NOT NULL auto_increment,
+  `page_descr` varchar(50) COLLATE utf8_general_ci NOT NULL default '',
+  PRIMARY KEY  (`page_nr`),
+  KEY `db_name` (`db_name`)
+)
+  COMMENT='PDF relation pages for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__recent`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__recent` (
+  `username` varchar(64) NOT NULL,
+  `tables` text NOT NULL,
+  PRIMARY KEY (`username`)
+)
+  COMMENT='Recently accessed tables'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__favorite`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__favorite` (
+  `username` varchar(64) NOT NULL,
+  `tables` text NOT NULL,
+  PRIMARY KEY (`username`)
+)
+  COMMENT='Favorite tables'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__table_uiprefs`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__table_uiprefs` (
+  `username` varchar(64) NOT NULL,
+  `db_name` varchar(64) NOT NULL,
+  `table_name` varchar(64) NOT NULL,
+  `prefs` text NOT NULL,
+  `last_update` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY (`username`,`db_name`,`table_name`)
+)
+  COMMENT='Tables'' UI preferences'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__relation`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__relation` (
+  `master_db` varchar(64) NOT NULL default '',
+  `master_table` varchar(64) NOT NULL default '',
+  `master_field` varchar(64) NOT NULL default '',
+  `foreign_db` varchar(64) NOT NULL default '',
+  `foreign_table` varchar(64) NOT NULL default '',
+  `foreign_field` varchar(64) NOT NULL default '',
+  PRIMARY KEY  (`master_db`,`master_table`,`master_field`),
+  KEY `foreign_field` (`foreign_db`,`foreign_table`)
+)
+  COMMENT='Relation table'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__table_coords`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__table_coords` (
+  `db_name` varchar(64) NOT NULL default '',
+  `table_name` varchar(64) NOT NULL default '',
+  `pdf_page_number` int(11) NOT NULL default '0',
+  `x` float unsigned NOT NULL default '0',
+  `y` float unsigned NOT NULL default '0',
+  PRIMARY KEY  (`db_name`,`table_name`,`pdf_page_number`)
+)
+  COMMENT='Table coordinates for phpMyAdmin PDF output'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__table_info`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__table_info` (
+  `db_name` varchar(64) NOT NULL default '',
+  `table_name` varchar(64) NOT NULL default '',
+  `display_field` varchar(64) NOT NULL default '',
+  PRIMARY KEY  (`db_name`,`table_name`)
+)
+  COMMENT='Table information for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__tracking`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__tracking` (
+  `db_name` varchar(64) NOT NULL,
+  `table_name` varchar(64) NOT NULL,
+  `version` int(10) unsigned NOT NULL,
+  `date_created` datetime NOT NULL,
+  `date_updated` datetime NOT NULL,
+  `schema_snapshot` text NOT NULL,
+  `schema_sql` text,
+  `data_sql` longtext,
+  `tracking` set('UPDATE','REPLACE','INSERT','DELETE','TRUNCATE','CREATE DATABASE','ALTER DATABASE','DROP DATABASE','CREATE TABLE','ALTER TABLE','RENAME TABLE','DROP TABLE','CREATE INDEX','DROP INDEX','CREATE VIEW','ALTER VIEW','DROP VIEW') default NULL,
+  `tracking_active` int(1) unsigned NOT NULL default '1',
+  PRIMARY KEY  (`db_name`,`table_name`,`version`)
+)
+  COMMENT='Database changes tracking for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__userconfig`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__userconfig` (
+  `username` varchar(64) NOT NULL,
+  `timevalue` timestamp NOT NULL default CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  `config_data` text NOT NULL,
+  PRIMARY KEY  (`username`)
+)
+  COMMENT='User preferences storage for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__users`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__users` (
+  `username` varchar(64) NOT NULL,
+  `usergroup` varchar(64) NOT NULL,
+  PRIMARY KEY (`username`,`usergroup`)
+)
+  COMMENT='Users and their assignments to user groups'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__usergroups`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__usergroups` (
+  `usergroup` varchar(64) NOT NULL,
+  `tab` varchar(64) NOT NULL,
+  `allowed` enum('Y','N') NOT NULL DEFAULT 'N',
+  PRIMARY KEY (`usergroup`,`tab`,`allowed`)
+)
+  COMMENT='User groups with configured menu items'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__navigationhiding`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__navigationhiding` (
+  `username` varchar(64) NOT NULL,
+  `item_name` varchar(64) NOT NULL,
+  `item_type` varchar(64) NOT NULL,
+  `db_name` varchar(64) NOT NULL,
+  `table_name` varchar(64) NOT NULL,
+  PRIMARY KEY (`username`,`item_name`,`item_type`,`db_name`,`table_name`)
+)
+  COMMENT='Hidden items of navigation tree'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__savedsearches`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__savedsearches` (
+  `id` int(5) unsigned NOT NULL auto_increment,
+  `username` varchar(64) NOT NULL default '',
+  `db_name` varchar(64) NOT NULL default '',
+  `search_name` varchar(64) NOT NULL default '',
+  `search_data` text NOT NULL,
+  PRIMARY KEY  (`id`),
+  UNIQUE KEY `u_savedsearches_username_dbname` (`username`,`db_name`,`search_name`)
+)
+  COMMENT='Saved searches'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__central_columns`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__central_columns` (
+  `db_name` varchar(64) NOT NULL,
+  `col_name` varchar(64) NOT NULL,
+  `col_type` varchar(64) NOT NULL,
+  `col_length` text,
+  `col_collation` varchar(64) NOT NULL,
+  `col_isNull` boolean NOT NULL,
+  `col_extra` varchar(255) default '',
+  `col_default` text,
+  PRIMARY KEY (`db_name`,`col_name`)
+)
+  COMMENT='Central list of columns'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__designer_settings`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__designer_settings` (
+  `username` varchar(64) NOT NULL,
+  `settings_data` text NOT NULL,
+  PRIMARY KEY (`username`)
+)
+  COMMENT='Settings related to Designer'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__export_templates`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__export_templates` (
+  `id` int(5) unsigned NOT NULL AUTO_INCREMENT,
+  `username` varchar(64) NOT NULL,
+  `export_type` varchar(10) NOT NULL,
+  `template_name` varchar(64) NOT NULL,
+  `template_data` text NOT NULL,
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `u_user_type_template` (`username`,`export_type`,`template_name`)
+)
+  COMMENT='Saved export templates'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
\ No newline at end of file
diff --git a/install/debian/12/pma/pma.sh b/install/debian/12/pma/pma.sh
new file mode 100644
index 00000000..f04f3f8e
--- /dev/null
+++ b/install/debian/12/pma/pma.sh
@@ -0,0 +1,167 @@
+#!/bin/bash
+# 
+# phpmyadmin-fixer
+#
+# Fixes for phpmyadmin (configuration storage and some extended features)
+#
+# Original Version by Pavel Galkin (https://skurudo.ru)
+# https://github.com/skurudo/phpmyadmin-fixer
+#
+# Changed some lines to fit to Hestia Configuration.
+#
+
+# Defining password-gen function
+gen_pass() {
+    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
+    LENGTH=10
+    while [ ${n:=1} -le $LENGTH ]; do
+        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
+        let n+=1
+    done
+    echo "$PASS"
+}
+
+PASS=$(gen_pass)
+
+#ubuntu phpmyadmin path
+pmapath1="/etc/phpmyadmin/config.inc.php"
+pmapath2="/usr/share/phpmyadmin/config.sample.inc.php"
+
+#delete old and paste new value 
+sed -i '/pmadb/d' $pmapath1
+sed -i '/controluser/d' $pmapath1
+sed -i '/bookmarktable/d' $pmapath1
+sed -i '/relation/d' $pmapath1
+sed -i '/userconfig/d' $pmapath1
+sed -i '/table_info/d' $pmapath1
+sed -i '/column_info/d' $pmapath1
+sed -i '/history/d' $pmapath1
+sed -i '/recent/d' $pmapath1
+sed -i '/table_uiprefs/d' $pmapath1
+sed -i '/tracking/d' $pmapath1
+sed -i '/table_coords/d' $pmapath1
+sed -i '/pdf_pages/d' $pmapath1
+sed -i '/designer_coords/d' $pmapath1
+sed -i '/controlpass/d' $pmapath1
+sed -i '/\$i = 1; /d' $pmapath1
+echo "\$i = 1;" >> $pmapath1
+sed -i '/savedsearches/d' $pmapath1
+sed -i '/navigationhiding/d' $pmapath1
+sed -i '/users/d' $pmapath1
+sed -i '/controlpass/d' $pmapath1
+sed -i '/favorite/d' $pmapath1
+sed -i '/usergroups/d' $pmapath1
+sed -i '/central_columns/d' $pmapath1
+sed -i '/designer_settings/d' $pmapath1
+sed -i '/export_templates/d' $pmapath1
+echo "\$cfg['Servers'][\$i]['favorite'] = 'pma__favorite';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['central_columns'] = 'pma__central_columns';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['designer_settings'] = 'pma__designer_settings';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['export_templates'] = 'pma__export_templates';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['savedsearches'] = 'pma__savedsearches';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['navigationhiding'] = 'pma__navigationhiding';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['users'] = 'pma__users';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['pmadb'] = 'phpmyadmin';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['controluser'] = 'pma';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['controlpass'] = '$PASS';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['bookmarktable'] = 'pma__bookmark';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['relation'] = 'pma__relation';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['userconfig'] = 'pma__userconfig';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['table_info'] = 'pma__table_info';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['column_info'] = 'pma__column_info';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['history'] = 'pma__history';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['recent'] = 'pma__recent';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['table_uiprefs'] = 'pma__table_uiprefs';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['tracking'] = 'pma__tracking';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['table_coords'] = 'pma__table_coords';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['pdf_pages'] = 'pma__pdf_pages';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['designer_coords'] = 'pma__designer_coords';" >> $pmapath1
+
+sed -i '/pmadb/d' $pmapath2
+sed -i '/controluser/d' $pmapath2
+sed -i '/bookmarktable/d' $pmapath2
+sed -i '/relation/d' $pmapath2
+sed -i '/userconfig/d' $pmapath2
+sed -i '/table_info/d' $pmapath2
+sed -i '/column_info/d' $pmapath2
+sed -i '/history/d' $pmapath2
+sed -i '/recent/d' $pmapath2
+sed -i '/table_uiprefs/d' $pmapath2
+sed -i '/tracking/d' $pmapath2
+sed -i '/table_coords/d' $pmapath2
+sed -i '/pdf_pages/d' $pmapath2
+sed -i '/designer_coords/d' $pmapath2
+sed -i '/controlpass/d' $pmapath2
+sed -i '/savedsearches/d' $pmapath2
+sed -i '/navigationhiding/d' $pmapath2
+sed -i '/users/d' $pmapath2
+sed -i '/controlpass/d' $pmapath2
+sed -i '/favorite/d' $pmapath2
+sed -i '/usergroups/d' $pmapath2
+sed -i '/central_columns/d' $pmapath2
+sed -i '/designer_settings/d' $pmapath2
+sed -i '/export_templates/d' $pmapath2
+echo "\$cfg['Servers'][\$i]['favorite'] = 'pma__favorite';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['central_columns'] = 'pma__central_columns';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['designer_settings'] = 'pma__designer_settings';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['export_templates'] = 'pma__export_templates';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['savedsearches'] = 'pma__savedsearches';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['navigationhiding'] = 'pma__navigationhiding';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['users'] = 'pma__users';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['pmadb'] = 'phpmyadmin';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['controluser'] = 'pma';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['controlpass'] = '$PASS';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['bookmarktable'] = 'pma__bookmark';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['relation'] = 'pma__relation';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['userconfig'] = 'pma__userconfig';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['table_info'] = 'pma__table_info';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['column_info'] = 'pma__column_info';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['history'] = 'pma__history';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['recent'] = 'pma__recent';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['table_uiprefs'] = 'pma__table_uiprefs';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['tracking'] = 'pma__tracking';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['table_coords'] = 'pma__table_coords';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['pdf_pages'] = 'pma__pdf_pages';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['designer_coords'] = 'pma__designer_coords';" >> $pmapath2
+
+#SOME WORK with DATABASE (table / user)
+PMADB=phpmyadmin
+PMAUSER=pma
+
+#DROP USER and TABLE
+mysql -uroot <<MYSQL_PMA1
+DROP USER IF EXISTS '$PMAUSER'@'localhost';
+DROP DATABASE IF EXISTS $PMADB;
+FLUSH PRIVILEGES;
+MYSQL_PMA1
+
+#CREATE PMA USER
+mysql -uroot <<MYSQL_PMA2
+CREATE USER '$PMAUSER'@'localhost' IDENTIFIED BY '$PASS';
+CREATE DATABASE $PMADB;
+MYSQL_PMA2
+
+#GRANT PMA USE SOME RIGHTS
+if [ ! -f "/etc/apt/sources.list.d/mysql.list" ]; then
+# MariaDB
+mysql -uroot <<MYSQL_PMA3
+USE $PMADB;
+GRANT USAGE ON $PMADB.* TO '$PMAUSER'@'localhost' IDENTIFIED BY '$PASS';
+GRANT ALL PRIVILEGES ON $PMADB.* TO '$PMAUSER'@'localhost';
+FLUSH PRIVILEGES;
+MYSQL_PMA3
+else
+# MySQL8
+mysql -uroot <<MYSQL_PMA3
+USE $PMADB;
+GRANT ALL ON $PMADB.* TO '$PMAUSER'@'localhost';
+FLUSH PRIVILEGES;
+MYSQL_PMA3
+fi
+
+#MYSQL DB and TABLES ADDITION
+mysql -uroot < /root/phpmyadmin/create_tables.sql
diff --git a/install/debian/12/postgresql/pg_hba.conf b/install/debian/12/postgresql/pg_hba.conf
new file mode 100644
index 00000000..1ba43941
--- /dev/null
+++ b/install/debian/12/postgresql/pg_hba.conf
@@ -0,0 +1,11 @@
+# "local" is for Unix domain socket connections only
+local   all         all                               ident
+
+# IPv4 local connections:
+host    all         all         127.0.0.1/32          md5
+
+# IPv6 local connections:
+host    all         all         ::1/128               md5
+
+# Others
+host    all         all         0.0.0.0/0             md5
diff --git a/install/debian/12/proftpd/proftpd.conf b/install/debian/12/proftpd/proftpd.conf
new file mode 100644
index 00000000..4e7f798f
--- /dev/null
+++ b/install/debian/12/proftpd/proftpd.conf
@@ -0,0 +1,38 @@
+ServerName                      "FTP"
+ServerIdent                     on "FTP Server ready."
+ServerAdmin                     root@localhost
+DefaultServer                   on
+DefaultRoot                  ~ !adm
+
+Include /etc/proftpd/tls.conf
+
+<IfModule mod_vroot.c>
+    VRootEngine                 on
+    VRootAlias                  /etc/security/pam_env.conf etc/security/pam_env.conf
+</IfModule>
+
+AuthPAMConfig                   proftpd
+AuthOrder                       mod_auth_pam.c* mod_auth_unix.c
+UseReverseDNS                   off
+User                            proftpd
+Group                           nogroup
+MaxInstances                    100
+UseSendfile                     off
+LogFormat                       default "%h %l %u %t \"%r\" %s %b"
+LogFormat                       auth    "%v [%P] %h %t \"%r\" %s"
+ListOptions                     -a
+RequireValidShell               off
+PassivePorts                    12000 12100
+TransferLog                     /var/log/proftpd/xferlog
+SystemLog                       /var/log/proftpd/proftpd.log
+
+<Global>
+  Umask                         002
+  <IfModule mod_ident.c>
+    IdentLookups                  off
+  </IfModule>
+  AllowOverwrite                yes
+  <Limit ALL SITE_CHMOD>
+    AllowAll
+  </Limit>
+</Global>
diff --git a/install/debian/12/proftpd/tls.conf b/install/debian/12/proftpd/tls.conf
new file mode 100644
index 00000000..9da0017b
--- /dev/null
+++ b/install/debian/12/proftpd/tls.conf
@@ -0,0 +1,63 @@
+#
+# Proftpd sample configuration for FTPS connections.
+#
+# Note that FTPS impose some limitations in NAT traversing.
+# See http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-TLS.html
+# for more information.
+#
+<IfModule mod_dso.c>
+    # If mod_tls was built as a shared/DSO module, load it
+    LoadModule mod_tls.c
+</IfModule>
+<IfModule mod_tls.c>
+TLSEngine                               on
+TLSLog                                  /var/log/proftpd/tls.log
+# this is an example of protocols, proftp works witl all, but use only the most secure ones like TLSv1.1 and TLSv1.2
+TLSProtocol                             TLSv1.1 TLSv1.2
+#
+# Server SSL certificate. You can generate a self-signed certificate using
+# a command like:
+#
+# openssl req -x509 -newkey rsa:1024 \
+#          -keyout /etc/ssl/private/proftpd.key -out /etc/ssl/certs/proftpd.crt \
+#          -nodes -days 365
+#
+# The proftpd.key file must be readable by root only. The other file can be
+# readable by anyone.
+#
+# chmod 0600 /etc/ssl/private/proftpd.key
+# chmod 0640 /etc/ssl/private/proftpd.key
+#
+TLSRSACertificateFile                   /usr/local/vesta/ssl/certificate.crt
+TLSRSACertificateKeyFile                /usr/local/vesta/ssl/certificate.key
+#
+# CA the server trusts...
+#TLSCACertificateFile                    /etc/ssl/certs/CA.pem
+# ...or avoid CA cert and be verbose
+#TLSOptions                      NoCertRequest EnableDiags
+# ... or the same with relaxed session use for some clients (e.g. FireFtp)
+#TLSOptions                      NoCertRequest EnableDiags NoSessionReuseRequired
+#
+#
+# Per default drop connection if client tries to start a renegotiate
+# This is a fix for CVE-2009-3555 but could break some clients.
+#
+#TLSOptions                                                     AllowClientRenegotiations
+#
+TLSOptions                       NoSessionReuseRequired AllowClientRenegotiations
+# Authenticate clients that want to use FTP over TLS?
+#
+#TLSVerifyClient                         off
+#
+# Are clients required to use FTP over TLS when talking to this server?
+#
+TLSRequired                             off
+#
+# Allow SSL/TLS renegotiations when the client requests them, but
+# do not force the renegotations.  Some clients do not support
+# SSL/TLS renegotiations; when mod_tls forces a renegotiation, these
+# clients will close the data connection, or there will be a timeout
+# on an idle data connection.
+#
+TLSRenegotiate                          required off
+</IfModule>
diff --git a/install/debian/12/roundcube/apache.conf b/install/debian/12/roundcube/apache.conf
new file mode 100644
index 00000000..a0c87bcc
--- /dev/null
+++ b/install/debian/12/roundcube/apache.conf
@@ -0,0 +1,40 @@
+Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/
+Alias /roundcube /var/lib/roundcube
+Alias /webmail /var/lib/roundcube
+
+# Access to tinymce files
+<Directory "/usr/share/tinymce/www/">
+      Options Indexes MultiViews FollowSymLinks
+      AllowOverride None
+      Order allow,deny
+      allow from all
+</Directory>
+
+<Directory /var/lib/roundcube/>
+  Options +FollowSymLinks
+  # This is needed to parse /var/lib/roundcube/.htaccess. See its
+  # content before setting AllowOverride to None.
+  AllowOverride All
+  order allow,deny
+  allow from all
+</Directory>
+
+# Protecting basic directories:
+<Directory /var/lib/roundcube/config>
+        Options -FollowSymLinks
+        AllowOverride None
+</Directory>
+
+<Directory /var/lib/roundcube/temp>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
+
+<Directory /var/lib/roundcube/logs>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
diff --git a/install/debian/12/roundcube/config.inc.php b/install/debian/12/roundcube/config.inc.php
new file mode 100644
index 00000000..0c82b1bc
--- /dev/null
+++ b/install/debian/12/roundcube/config.inc.php
@@ -0,0 +1,33 @@
+<?php
+
+// Password Plugin options
+// -----------------------
+// A driver to use for password change. Default: "sql".
+// See README file for list of supported driver names.
+$rcmail_config['password_driver'] = 'vesta';
+
+// Require the new password to be a certain length.
+// set to blank to allow passwords of any length
+$rcmail_config['password_minimum_length'] = 6;
+
+// Require the new password to contain a letter and punctuation character
+// Change to false to remove this check.
+$rcmail_config['password_require_nonalpha'] = false;
+
+// Enables logging of password changes into logs/password
+$rcmail_config['password_log'] = false;
+
+// Comma-separated list of login exceptions for which password change
+// will be not available (no Password tab in Settings)
+$rcmail_config['password_login_exceptions'] = null;
+
+
+// By default domains in variables are using unicode.
+// Enable this option to use punycoded names
+$rcmail_config['password_idn_ascii'] = false;
+
+// Vesta Driver options
+// -----------------------
+// Control Panel host
+$rcmail_config['password_vesta_host'] = 'localhost';
+$rcmail_config['password_vesta_port'] = '8083';
diff --git a/install/debian/12/roundcube/db.inc.php b/install/debian/12/roundcube/db.inc.php
new file mode 100644
index 00000000..5268a309
--- /dev/null
+++ b/install/debian/12/roundcube/db.inc.php
@@ -0,0 +1,66 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Configuration file for database access                                |
+ |                                                                       |
+ | This file is part of the RoundCube Webmail client                     |
+ | Copyright (C) 2005-2008, RoundCube Dev. - Switzerland                 |
+ | Licensed under the GNU GPL                                            |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// PEAR database DSN for read/write operations
+// format is db_provider://user:password@host/database 
+
+$rcmail_config['db_dsnw'] = 'mysql://roundcube:%password%@localhost/roundcube';
+// postgres example: 'pgsql://roundcube:pass@localhost/roundcubemail';
+
+// PEAR database DSN for read only operations (if empty write database will be used)
+// useful for database replication
+$rcmail_config['db_dsnr'] = '';
+
+// database backend to use (only db or mdb2 are supported)
+//$rcmail_config['db_backend'] = 'mdb2';
+
+// maximum length of a query in bytes
+$rcmail_config['db_max_length'] = 512000;  // 500K
+
+// use persistent db-connections
+// beware this will not "always" work as expected
+// see: http://www.php.net/manual/en/features.persistent-connections.php
+$rcmail_config['db_persistent'] = FALSE;
+
+
+// you can define specific table names used to store webmail data
+$rcmail_config['db_table_users'] = 'users';
+
+$rcmail_config['db_table_identities'] = 'identities';
+
+$rcmail_config['db_table_contacts'] = 'contacts';
+
+$rcmail_config['db_table_session'] = 'session';
+
+$rcmail_config['db_table_cache'] = 'cache';
+
+$rcmail_config['db_table_messages'] = 'messages';
+
+
+// you can define specific sequence names used in PostgreSQL
+$rcmail_config['db_sequence_users'] = 'user_ids';
+
+$rcmail_config['db_sequence_identities'] = 'identity_ids';
+
+$rcmail_config['db_sequence_contacts'] = 'contact_ids';
+
+$rcmail_config['db_sequence_cache'] = 'cache_ids';
+
+$rcmail_config['db_sequence_messages'] = 'message_ids';
+
+
+// end db config file
+?>
diff --git a/install/debian/12/roundcube/main.inc.php b/install/debian/12/roundcube/main.inc.php
new file mode 100644
index 00000000..91f32000
--- /dev/null
+++ b/install/debian/12/roundcube/main.inc.php
@@ -0,0 +1,850 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Main configuration file                                               |
+ |                                                                       |
+ | This file is part of the Roundcube Webmail client                     |
+ | Copyright (C) 2005-2011, The Roundcube Dev Team                       |
+ |                                                                       |
+ | Licensed under the GNU General Public License version 3 or            |
+ | any later version with exceptions for skins & plugins.                |
+ | See the README file for a full license statement.                     |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// ----------------------------------
+// LOGGING/DEBUGGING
+// ----------------------------------
+
+// system error reporting: 1 = log; 2 = report (not implemented yet), 4 = show, 8 = trace
+$rcmail_config['debug_level'] = 1;
+
+// log driver:  'syslog' or 'file'.
+$rcmail_config['log_driver'] = 'file';
+
+// date format for log entries
+// (read http://php.net/manual/en/function.date.php for all format characters)  
+$rcmail_config['log_date_format'] = 'd-M-Y H:i:s O';
+
+// Syslog ident string to use, if using the 'syslog' log driver.
+$rcmail_config['syslog_id'] = 'roundcube';
+
+// Syslog facility to use, if using the 'syslog' log driver.
+// For possible values see installer or http://php.net/manual/en/function.openlog.php
+$rcmail_config['syslog_facility'] = LOG_USER;
+
+// Log sent messages to <log_dir>/sendmail or to syslog
+$rcmail_config['smtp_log'] = true;
+
+// Log successful logins to <log_dir>/userlogins or to syslog
+$rcmail_config['log_logins'] = false;
+
+// Log session authentication errors to <log_dir>/session or to syslog
+$rcmail_config['log_session'] = false;
+
+// Log SQL queries to <log_dir>/sql or to syslog
+$rcmail_config['sql_debug'] = false;
+
+// Log IMAP conversation to <log_dir>/imap or to syslog
+$rcmail_config['imap_debug'] = false;
+
+// Log LDAP conversation to <log_dir>/ldap or to syslog
+$rcmail_config['ldap_debug'] = false;
+
+// Log SMTP conversation to <log_dir>/smtp or to syslog
+$rcmail_config['smtp_debug'] = false;
+
+// ----------------------------------
+// IMAP
+// ----------------------------------
+
+// the mail host chosen to perform the log-in
+// leave blank to show a textbox at login, give a list of hosts
+// to display a pulldown menu or set one host as string.
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// Supported replacement variables:
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %s - domain name after the '@' from e-mail address provided at login screen
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['default_host'] = 'localhost';
+
+// TCP port used for IMAP connections
+$rcmail_config['default_port'] = 143;
+
+// IMAP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['imap_auth_type'] = null;
+
+// If you know your imap's folder delimiter, you can specify it here.
+// Otherwise it will be determined automatically
+$rcmail_config['imap_delimiter'] = null;
+
+// If IMAP server doesn't support NAMESPACE extension, but you're
+// using shared folders or personal root folder is non-empty, you'll need to
+// set these options. All can be strings or arrays of strings.
+// Folders need to be ended with directory separator, e.g. "INBOX."
+// (special directory "~" is an exception to this rule)
+// These can be used also to overwrite server's namespaces
+$rcmail_config['imap_ns_personal'] = null;
+$rcmail_config['imap_ns_other']    = null;
+$rcmail_config['imap_ns_shared']   = null;
+
+// By default IMAP capabilities are readed after connection to IMAP server
+// In some cases, e.g. when using IMAP proxy, there's a need to refresh the list
+// after login. Set to True if you've got this case.
+$rcmail_config['imap_force_caps'] = false;
+
+// By default list of subscribed folders is determined using LIST-EXTENDED
+// extension if available. Some servers (dovecot 1.x) returns wrong results
+// for shared namespaces in this case. http://trac.roundcube.net/ticket/1486225
+// Enable this option to force LSUB command usage instead.
+$rcmail_config['imap_force_lsub'] = false;
+
+// Some server configurations (e.g. Courier) doesn't list folders in all namespaces
+// Enable this option to force listing of folders in all namespaces
+$rcmail_config['imap_force_ns'] = false;
+
+// IMAP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['imap_timeout'] = 0;
+
+// Optional IMAP authentication identifier to be used as authorization proxy
+$rcmail_config['imap_auth_cid'] = null;
+
+// Optional IMAP authentication password to be used for imap_auth_cid
+$rcmail_config['imap_auth_pw'] = null;
+
+// Type of IMAP indexes cache. Supported values: 'db', 'apc' and 'memcache'.
+$rcmail_config['imap_cache'] = null;
+
+// Enables messages cache. Only 'db' cache is supported.
+$rcmail_config['messages_cache'] = false;
+
+
+// ----------------------------------
+// SMTP
+// ----------------------------------
+
+// SMTP server host (for sending mails).
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// If left blank, the PHP mail() function is used
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['smtp_server'] = '';
+
+// SMTP port (default is 25; use 587 for STARTTLS or 465 for the
+// deprecated SSL over SMTP (aka SMTPS))
+$rcmail_config['smtp_port'] = 25;
+
+// SMTP username (if required) if you use %u as the username Roundcube
+// will use the current username for login
+$rcmail_config['smtp_user'] = '';
+
+// SMTP password (if required) if you use %p as the password Roundcube
+// will use the current user's password for login
+$rcmail_config['smtp_pass'] = '';
+
+// SMTP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['smtp_auth_type'] = '';
+
+// Optional SMTP authentication identifier to be used as authorization proxy
+$rcmail_config['smtp_auth_cid'] = null;
+
+// Optional SMTP authentication password to be used for smtp_auth_cid
+$rcmail_config['smtp_auth_pw'] = null;
+
+// SMTP HELO host 
+// Hostname to give to the remote server for SMTP 'HELO' or 'EHLO' messages 
+// Leave this blank and you will get the server variable 'server_name' or 
+// localhost if that isn't defined. 
+$rcmail_config['smtp_helo_host'] = '';
+
+// SMTP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['smtp_timeout'] = 0;
+
+// ----------------------------------
+// SYSTEM
+// ----------------------------------
+include_once("/etc/roundcube/debian-db-roundcube.php");
+
+
+// THIS OPTION WILL ALLOW THE INSTALLER TO RUN AND CAN EXPOSE SENSITIVE CONFIG DATA.
+// ONLY ENABLE IT IF YOU'RE REALLY SURE WHAT YOU'RE DOING!
+$rcmail_config['enable_installer'] = false;
+
+// provide an URL where a user can get support for this Roundcube installation
+// PLEASE DO NOT LINK TO THE ROUNDCUBE.NET WEBSITE HERE!
+$rcmail_config['support_url'] = '';
+
+// replace Roundcube logo with this image
+// specify an URL relative to the document root of this Roundcube installation
+$rcmail_config['skin_logo'] = null;
+
+// automatically create a new Roundcube user when log-in the first time.
+// a new user will be created once the IMAP login succeeds.
+// set to false if only registered users can use this service
+$rcmail_config['auto_create_user'] = true;
+
+// use this folder to store log files (must be writeable for apache user)
+// This is used by the 'file' log driver.
+$rcmail_config['log_dir'] = '/var/log/roundcubemail/';
+
+// use this folder to store temp files (must be writeable for apache user)
+$rcmail_config['temp_dir'] = '/tmp';
+
+// lifetime of message cache
+// possible units: s, m, h, d, w
+$rcmail_config['message_cache_lifetime'] = '10d';
+
+// enforce connections over https
+// with this option enabled, all non-secure connections will be redirected.
+// set the port for the ssl connection as value of this option if it differs from the default 443
+$rcmail_config['force_https'] = true;
+
+// tell PHP that it should work as under secure connection
+// even if it doesn't recognize it as secure ($_SERVER['HTTPS'] is not set)
+// e.g. when you're running Roundcube behind a https proxy
+// this option is mutually exclusive to 'force_https' and only either one of them should be set to true.
+$rcmail_config['use_https'] = false;
+
+// Allow browser-autocompletion on login form.
+// 0 - disabled, 1 - username and host only, 2 - username, host, password
+$rcmail_config['login_autocomplete'] = 0;
+
+// Forces conversion of logins to lower case.
+// 0 - disabled, 1 - only domain part, 2 - domain and local part.
+// If users authentication is not case-sensitive this must be enabled.
+// After enabling it all user records need to be updated, e.g. with query:
+// UPDATE users SET username = LOWER(username);
+$rcmail_config['login_lc'] = 0;
+
+// Includes should be interpreted as PHP files
+$rcmail_config['skin_include_php'] = false;
+
+// display software version on login screen
+$rcmail_config['display_version'] = false;
+
+// Session lifetime in minutes
+// must be greater than 'keep_alive'/60
+$rcmail_config['session_lifetime'] = 10;
+
+// session domain: .example.org
+$rcmail_config['session_domain'] = '';
+
+// session name. Default: 'roundcube_sessid'
+$rcmail_config['session_name'] = null;
+
+// Backend to use for session storage. Can either be 'db' (default) or 'memcache'
+// If set to memcache, a list of servers need to be specified in 'memcache_hosts'
+// Make sure the Memcache extension (http://pecl.php.net/package/memcache) version >= 2.0.0 is installed
+$rcmail_config['session_storage'] = 'db';
+
+// Use these hosts for accessing memcached
+// Define any number of hosts in the form of hostname:port or unix:///path/to/sock.file
+$rcmail_config['memcache_hosts'] = null; // e.g. array( 'localhost:11211', '192.168.1.12:11211', 'unix:///var/tmp/memcached.sock' );
+
+// check client IP in session athorization
+$rcmail_config['ip_check'] = false;
+
+// check referer of incoming requests
+$rcmail_config['referer_check'] = false;
+
+// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
+// Possible values: sameorigin|deny. Set to false in order to disable sending them
+$rcmail_config['x_frame_options'] = 'sameorigin';
+
+// this key is used to encrypt the users imap password which is stored
+// in the session record (and the client cookie if remember password is enabled).
+// please provide a string of exactly 24 chars.
+$rcmail_config['des_key'] = 'vtIOjLZo9kffJoqzpSbm5r1r';
+
+// Automatically add this domain to user names for login
+// Only for IMAP servers that require full e-mail addresses for login
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['username_domain'] = '';
+
+// This domain will be used to form e-mail addresses of new users
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['mail_domain'] = '';
+
+// Password charset.
+// Use it if your authentication backend doesn't support UTF-8.
+// Defaults to ISO-8859-1 for backward compatibility
+$rcmail_config['password_charset'] = 'ISO-8859-1';
+
+// How many seconds must pass between emails sent by a user
+$rcmail_config['sendmail_delay'] = 0;
+
+// Maximum number of recipients per message. Default: 0 (no limit)
+$rcmail_config['max_recipients'] = 0; 
+
+// Maximum allowednumber of members of an address group. Default: 0 (no limit)
+// If 'max_recipients' is set this value should be less or equal
+$rcmail_config['max_group_members'] = 0; 
+
+// add this user-agent to message headers when sending
+$rcmail_config['useragent'] = 'Roundcube Webmail/'.RCMAIL_VERSION;
+
+// use this name to compose page titles
+$rcmail_config['product_name'] = 'Roundcube Webmail';
+
+// try to load host-specific configuration
+// see http://trac.roundcube.net/wiki/Howto_Config for more details
+$rcmail_config['include_host_config'] = false;
+
+// path to a text file which will be added to each sent message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer'] = '';
+
+// path to a text file which will be added to each sent HTML message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer_html'] = '';
+
+// add a received header to outgoing mails containing the creators IP and hostname
+$rcmail_config['http_received_header'] = false;
+
+// Whether or not to encrypt the IP address and the host name
+// these could, in some circles, be considered as sensitive information;
+// however, for the administrator, these could be invaluable help
+// when tracking down issues.
+$rcmail_config['http_received_header_encrypt'] = false;
+
+// This string is used as a delimiter for message headers when sending
+// a message via mail() function. Leave empty for auto-detection
+$rcmail_config['mail_header_delimiter'] = NULL;
+
+// number of chars allowed for line when wrapping text.
+// text wrapping is done when composing/sending messages
+$rcmail_config['line_length'] = 72;
+
+// send plaintext messages as format=flowed
+$rcmail_config['send_format_flowed'] = true;
+
+// don't allow these settings to be overriden by the user
+$rcmail_config['dont_override'] = array();
+
+// Set identities access level:
+// 0 - many identities with possibility to edit all params
+// 1 - many identities with possibility to edit all params but not email address
+// 2 - one identity with possibility to edit all params
+// 3 - one identity with possibility to edit all params but not email address
+$rcmail_config['identities_level'] = 0;
+
+// Mimetypes supported by the browser.
+// attachments of these types will open in a preview window
+// either a comma-separated list or an array: 'text/plain,text/html,text/xml,image/jpeg,image/gif,image/png,application/pdf'
+$rcmail_config['client_mimetypes'] = null;  # null == default
+
+// mime magic database
+$rcmail_config['mime_magic'] = null;
+
+// path to imagemagick identify binary
+$rcmail_config['im_identify_path'] = null;
+
+// path to imagemagick convert binary
+$rcmail_config['im_convert_path'] = null;
+
+// maximum size of uploaded contact photos in pixel
+$rcmail_config['contact_photo_size'] = 160;
+
+// Enable DNS checking for e-mail address validation
+$rcmail_config['email_dns_check'] = false;
+
+// ----------------------------------
+// PLUGINS
+// ----------------------------------
+
+// List of active plugins (in plugins/ directory)
+$rcmail_config['plugins'] = array('password');
+
+// ----------------------------------
+// USER INTERFACE
+// ----------------------------------
+
+// default messages sort column. Use empty value for default server's sorting, 
+// or 'arrival', 'date', 'subject', 'from', 'to', 'fromto', 'size', 'cc'
+$rcmail_config['message_sort_col'] = '';
+
+// default messages sort order
+$rcmail_config['message_sort_order'] = 'DESC';
+
+// These cols are shown in the message list. Available cols are:
+// subject, from, to, fromto, cc, replyto, date, size, status, flag, attachment, 'priority'
+$rcmail_config['list_cols'] = array('subject', 'status', 'fromto', 'date', 'size', 'flag', 'attachment');
+
+// the default locale setting (leave empty for auto-detection)
+// RFC1766 formatted language name like en_US, de_DE, de_CH, fr_FR, pt_BR
+$rcmail_config['language'] = null;
+
+// use this format for date display (date or strftime format)
+$rcmail_config['date_format'] = 'Y-m-d';
+
+// give this choice of date formats to the user to select from
+$rcmail_config['date_formats'] = array('Y-m-d', 'd-m-Y', 'Y/m/d', 'm/d/Y', 'd/m/Y', 'd.m.Y', 'j.n.Y');
+
+// use this format for time display (date or strftime format)
+$rcmail_config['time_format'] = 'H:i';
+
+// give this choice of time formats to the user to select from
+$rcmail_config['time_formats'] = array('G:i', 'H:i', 'g:i a', 'h:i A');
+
+// use this format for short date display (derived from date_format and time_format)
+$rcmail_config['date_short'] = 'D H:i';
+
+// use this format for detailed date/time formatting (derived from date_format and time_format)
+$rcmail_config['date_long'] = 'Y-m-d H:i';
+
+// store draft message is this mailbox
+// leave blank if draft messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['drafts_mbox'] = 'Drafts';
+
+// store spam messages in this mailbox
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['junk_mbox'] = 'Spam';
+
+// store sent message is this mailbox
+// leave blank if sent messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['sent_mbox'] = 'Sent';
+
+// move messages to this folder when deleting them
+// leave blank if they should be deleted directly
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['trash_mbox'] = 'Trash';
+
+// display these folders separately in the mailbox list.
+// these folders will also be displayed with localized names
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['default_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+$rcmail_config['default_imap_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+
+// automatically create the above listed default folders on first login
+$rcmail_config['create_default_folders'] = true;
+
+// protect the default folders from renames, deletes, and subscription changes
+$rcmail_config['protect_default_folders'] = true;
+
+// if in your system 0 quota means no limit set this option to true 
+$rcmail_config['quota_zero_as_unlimited'] = false;
+
+// Make use of the built-in spell checker. It is based on GoogieSpell.
+// Since Google only accepts connections over https your PHP installatation
+// requires to be compiled with Open SSL support
+$rcmail_config['enable_spellcheck'] = true;
+
+// Enables spellchecker exceptions dictionary.
+// Setting it to 'shared' will make the dictionary shared by all users.
+$rcmail_config['spellcheck_dictionary'] = false;
+
+// Set the spell checking engine. 'googie' is the default. 'pspell' is also available,
+// but requires the Pspell extensions. When using Nox Spell Server, also set 'googie' here.
+$rcmail_config['spellcheck_engine'] = 'googie';
+
+// For a locally installed Nox Spell Server, please specify the URI to call it.
+// Get Nox Spell Server from http://orangoo.com/labs/?page_id=72
+// Leave empty to use the Google spell checking service, what means
+// that the message content will be sent to Google in order to check spelling
+$rcmail_config['spellcheck_uri'] = '';
+
+// These languages can be selected for spell checking.
+// Configure as a PHP style hash array: array('en'=>'English', 'de'=>'Deutsch');
+// Leave empty for default set of available language.
+$rcmail_config['spellcheck_languages'] = NULL;
+
+// Makes that words with all letters capitalized will be ignored (e.g. GOOGLE)
+$rcmail_config['spellcheck_ignore_caps'] = false;
+
+// Makes that words with numbers will be ignored (e.g. g00gle)
+$rcmail_config['spellcheck_ignore_nums'] = false;
+
+// Makes that words with symbols will be ignored (e.g. g@@gle)
+$rcmail_config['spellcheck_ignore_syms'] = false;
+
+// Use this char/string to separate recipients when composing a new message
+$rcmail_config['recipients_separator'] = ',';
+
+// don't let users set pagesize to more than this value if set
+$rcmail_config['max_pagesize'] = 200;
+
+// Minimal value of user's 'keep_alive' setting (in seconds)
+// Must be less than 'session_lifetime'
+$rcmail_config['min_keep_alive'] = 60;
+
+// Enables files upload indicator. Requires APC installed and enabled apc.rfc1867 option.
+// By default refresh time is set to 1 second. You can set this value to true
+// or any integer value indicating number of seconds.
+$rcmail_config['upload_progress'] = false;
+
+// Specifies for how many seconds the Undo button will be available
+// after object delete action. Currently used with supporting address book sources.
+// Setting it to 0, disables the feature.
+$rcmail_config['undo_timeout'] = 0;
+
+// ----------------------------------
+// ADDRESSBOOK SETTINGS
+// ----------------------------------
+
+// This indicates which type of address book to use. Possible choises:
+// 'sql' (default) and 'ldap'.
+// If set to 'ldap' then it will look at using the first writable LDAP
+// address book as the primary address book and it will not display the
+// SQL address book in the 'Address Book' view.
+$rcmail_config['address_book_type'] = 'sql';
+
+// In order to enable public ldap search, configure an array like the Verisign
+// example further below. if you would like to test, simply uncomment the example.
+// Array key must contain only safe characters, ie. a-zA-Z0-9_
+$rcmail_config['ldap_public'] = array();
+
+// If you are going to use LDAP for individual address books, you will need to 
+// set 'user_specific' to true and use the variables to generate the appropriate DNs to access it.
+//
+// The recommended directory structure for LDAP is to store all the address book entries
+// under the users main entry, e.g.:
+//
+//  o=root
+//   ou=people
+//    uid=user@domain
+//  mail=contact@contactdomain
+//
+// So the base_dn would be uid=%fu,ou=people,o=root
+// The bind_dn would be the same as based_dn or some super user login.
+/* 
+ * example config for Verisign directory
+ *
+$rcmail_config['ldap_public']['Verisign'] = array(
+  'name'          => 'Verisign.com',
+  // Replacement variables supported in host names:
+  // %h - user's IMAP hostname
+  // %n - http hostname ($_SERVER['SERVER_NAME'])
+  // %d - domain (http hostname without the first part)
+  // %z - IMAP domain (IMAP hostname without the first part)
+  // For example %n = mail.domain.tld, %d = domain.tld
+  'hosts'         => array('directory.verisign.com'),
+  'port'          => 389,
+  'use_tls'	      => false,
+  'ldap_version'  => 3,       // using LDAPv3
+  'user_specific' => false,   // If true the base_dn, bind_dn and bind_pass default to the user's IMAP login.
+  // %fu - The full username provided, assumes the username is an email
+  //       address, uses the username_domain value if not an email address.
+  // %u  - The username prior to the '@'.
+  // %d  - The domain name after the '@'.
+  // %dc - The domain name hierarchal string e.g. "dc=test,dc=domain,dc=com"
+  // %dn - DN found by ldap search when search_filter/search_base_dn are used
+  'base_dn'       => '',
+  'bind_dn'       => '',
+  'bind_pass'     => '',
+  // It's possible to bind for an individual address book
+  // The login name is used to search for the DN to bind with
+  'search_base_dn' => '',
+  'search_filter'  => '',   // e.g. '(&(objectClass=posixAccount)(uid=%u))'
+  // DN and password to bind as before searching for bind DN, if anonymous search is not allowed
+  'search_bind_dn' => '',
+  'search_bind_pw' => '',
+  // Default for %dn variable if search doesn't return DN value
+  'search_dn_default' => '',
+  // Optional authentication identifier to be used as SASL authorization proxy
+  // bind_dn need to be empty
+  'auth_cid'       => '',
+  // SASL authentication method (for proxy auth), e.g. DIGEST-MD5
+  'auth_method'    => '',
+  // Indicates if the addressbook shall be hidden from the list.
+  // With this option enabled you can still search/view contacts.
+  'hidden'        => false,
+  // Indicates if the addressbook shall not list contacts but only allows searching.
+  'searchonly'    => false,
+  // Indicates if we can write to the LDAP directory or not.
+  // If writable is true then these fields need to be populated:
+  // LDAP_Object_Classes, required_fields, LDAP_rdn
+  'writable'       => false,
+  // To create a new contact these are the object classes to specify
+  // (or any other classes you wish to use).
+  'LDAP_Object_Classes' => array('top', 'inetOrgPerson'),
+  // The RDN field that is used for new entries, this field needs
+  // to be one of the search_fields, the base of base_dn is appended
+  // to the RDN to insert into the LDAP directory.
+  'LDAP_rdn'       => 'cn',
+  // The required fields needed to build a new contact as required by
+  // the object classes (can include additional fields not required by the object classes).
+  'required_fields' => array('cn', 'sn', 'mail'),
+  'search_fields'   => array('mail', 'cn'),  // fields to search in
+  // mapping of contact fields to directory attributes
+  //   for every attribute one can specify the number of values (limit) allowed.
+  //   default is 1, a wildcard * means unlimited
+  'fieldmap' => array(
+    // Roundcube  => LDAP:limit
+    'name'        => 'cn',
+    'surname'     => 'sn',
+    'firstname'   => 'givenName',
+    'title'       => 'title',
+    'email'       => 'mail:*',
+    'phone:home'  => 'homePhone',
+    'phone:work'  => 'telephoneNumber',
+    'phone:mobile' => 'mobile',
+    'phone:pager' => 'pager',
+    'street'      => 'street',
+    'zipcode'     => 'postalCode',
+    'region'      => 'st',
+    'locality'    => 'l',
+// if you uncomment country, you need to modify 'sub_fields' above
+//    'country'     => 'c',
+    'department'  => 'departmentNumber',
+    'notes'       => 'description',
+// these currently don't work:
+//    'phone:workfax' => 'facsimileTelephoneNumber',
+//    'photo'        => 'jpegPhoto',
+//    'organization' => 'o',
+//    'manager'      => 'manager',
+//    'assistant'    => 'secretary',
+  ),
+  // Map of contact sub-objects (attribute name => objectClass(es)), e.g. 'c' => 'country'
+  'sub_fields' => array(),
+  'sort'          => 'cn',    // The field to sort the listing by.
+  'scope'         => 'sub',   // search mode: sub|base|list
+  'filter'        => '(objectClass=inetOrgPerson)',      // used for basic listing (if not empty) and will be &'d with search queries. example: status=act
+  'fuzzy_search'  => true,    // server allows wildcard search
+  'vlv'           => false,   // Enable Virtual List View to more efficiently fetch paginated data (if server supports it)
+  'numsub_filter' => '(objectClass=organizationalUnit)',   // with VLV, we also use numSubOrdinates to query the total number of records. Set this filter to get all numSubOrdinates attributes for counting
+  'sizelimit'     => '0',     // Enables you to limit the count of entries fetched. Setting this to 0 means no limit.
+  'timelimit'     => '0',     // Sets the number of seconds how long is spend on the search. Setting this to 0 means no limit.
+  'referrals'     => true|false,  // Sets the LDAP_OPT_REFERRALS option. Mostly used in multi-domain Active Directory setups
+
+  // definition for contact groups (uncomment if no groups are supported)
+  // for the groups base_dn, the user replacements %fu, %u, $d and %dc work as for base_dn (see above)
+  // if the groups base_dn is empty, the contact base_dn is used for the groups as well
+  // -> in this case, assure that groups and contacts are separated due to the concernig filters! 
+  'groups'        => array(
+    'base_dn'     => '',
+    'scope'       => 'sub',   // search mode: sub|base|list
+    'filter'      => '(objectClass=groupOfNames)',
+    'object_classes' => array("top", "groupOfNames"),
+    'member_attr'  => 'member',   // name of the member attribute, e.g. uniqueMember
+    'name_attr'    => 'cn',       // attribute to be used as group name
+  ),
+);
+*/
+
+// An ordered array of the ids of the addressbooks that should be searched
+// when populating address autocomplete fields server-side. ex: array('sql','Verisign');
+$rcmail_config['autocomplete_addressbooks'] = array('sql');
+
+// The minimum number of characters required to be typed in an autocomplete field
+// before address books will be searched. Most useful for LDAP directories that
+// may need to do lengthy results building given overly-broad searches
+$rcmail_config['autocomplete_min_length'] = 1;
+
+// Number of parallel autocomplete requests.
+// If there's more than one address book, n parallel (async) requests will be created,
+// where each request will search in one address book. By default (0), all address
+// books are searched in one request.
+$rcmail_config['autocomplete_threads'] = 0;
+
+// Max. numer of entries in autocomplete popup. Default: 15.
+$rcmail_config['autocomplete_max'] = 15;
+
+// show address fields in this order
+// available placeholders: {street}, {locality}, {zipcode}, {country}, {region}
+$rcmail_config['address_template'] = '{street}<br/>{locality} {zipcode}<br/>{country} {region}';
+
+// Matching mode for addressbook search (including autocompletion)
+// 0 - partial (*abc*), default
+// 1 - strict (abc)
+// 2 - prefix (abc*)
+// Note: For LDAP sources fuzzy_search must be enabled to use 'partial' or 'prefix' mode
+$rcmail_config['addressbook_search_mode'] = 0;
+
+// ----------------------------------
+// USER PREFERENCES
+// ----------------------------------
+
+// Use this charset as fallback for message decoding
+//$rcmail_config['default_charset'] = 'ISO-8859-1';
+$rcmail_config['default_charset'] = 'UTF-8';
+
+// skin name: folder from skins/
+$rcmail_config['skin'] = 'elastic';
+
+// show up to X items in messages list view
+$rcmail_config['mail_pagesize'] = 50;
+
+// show up to X items in contacts list view
+$rcmail_config['addressbook_pagesize'] = 50;
+
+// sort contacts by this col (preferably either one of name, firstname, surname)
+$rcmail_config['addressbook_sort_col'] = 'surname';
+
+// the way how contact names are displayed in the list
+// 0: display name
+// 1: (prefix) firstname middlename surname (suffix)
+// 2: (prefix) surname firstname middlename (suffix)
+// 3: (prefix) surname, firstname middlename (suffix)
+$rcmail_config['addressbook_name_listing'] = 0;
+
+// use this timezone to display date/time
+// valid timezone identifers are listed here: php.net/manual/en/timezones.php
+// 'auto' will use the browser's timezone settings
+$rcmail_config['timezone'] = 'auto';
+
+// prefer displaying HTML messages
+$rcmail_config['prefer_html'] = true;
+
+// display remote inline images
+// 0 - Never, always ask
+// 1 - Ask if sender is not in address book
+// 2 - Always show inline images
+$rcmail_config['show_images'] = 0;
+
+// compose html formatted messages by default
+// 0 - never, 1 - always, 2 - on reply to HTML message only 
+$rcmail_config['htmleditor'] = 0;
+
+// show pretty dates as standard
+$rcmail_config['prettydate'] = true;
+
+// save compose message every 300 seconds (5min)
+$rcmail_config['draft_autosave'] = 300;
+
+// default setting if preview pane is enabled
+$rcmail_config['preview_pane'] = false;
+
+// Mark as read when viewed in preview pane (delay in seconds)
+// Set to -1 if messages in preview pane should not be marked as read
+$rcmail_config['preview_pane_mark_read'] = 0;
+
+// Clear Trash on logout
+$rcmail_config['logout_purge'] = false;
+
+// Compact INBOX on logout
+$rcmail_config['logout_expunge'] = false;
+
+// Display attached images below the message body 
+$rcmail_config['inline_images'] = true;
+
+// Encoding of long/non-ascii attachment names:
+// 0 - Full RFC 2231 compatible
+// 1 - RFC 2047 for 'name' and RFC 2231 for 'filename' parameter (Thunderbird's default)
+// 2 - Full 2047 compatible
+$rcmail_config['mime_param_folding'] = 1;
+
+// Set true if deleted messages should not be displayed
+// This will make the application run slower
+$rcmail_config['skip_deleted'] = false;
+
+// Set true to Mark deleted messages as read as well as deleted
+// False means that a message's read status is not affected by marking it as deleted
+$rcmail_config['read_when_deleted'] = true;
+
+// Set to true to never delete messages immediately
+// Use 'Purge' to remove messages marked as deleted
+$rcmail_config['flag_for_deletion'] = false;
+
+// Default interval for keep-alive/check-recent requests (in seconds)
+// Must be greater than or equal to 'min_keep_alive' and less than 'session_lifetime'
+$rcmail_config['keep_alive'] = 60;
+
+// If true all folders will be checked for recent messages
+$rcmail_config['check_all_folders'] = false;
+
+// If true, after message delete/move, the next message will be displayed
+$rcmail_config['display_next'] = false;
+
+// 0 - Do not expand threads 
+// 1 - Expand all threads automatically 
+// 2 - Expand only threads with unread messages 
+$rcmail_config['autoexpand_threads'] = 0;
+
+// When replying place cursor above original message (top posting)
+$rcmail_config['top_posting'] = false;
+
+// When replying strip original signature from message
+$rcmail_config['strip_existing_sig'] = true;
+
+// Show signature:
+// 0 - Never
+// 1 - Always
+// 2 - New messages only
+// 3 - Forwards and Replies only
+$rcmail_config['show_sig'] = 1;
+
+// When replying or forwarding place sender's signature above existing message
+$rcmail_config['sig_above'] = false;
+
+// Use MIME encoding (quoted-printable) for 8bit characters in message body
+$rcmail_config['force_7bit'] = false;
+
+// Defaults of the search field configuration.
+// The array can contain a per-folder list of header fields which should be considered when searching
+// The entry with key '*' stands for all folders which do not have a specific list set.
+// Please note that folder names should to be in sync with $rcmail_config['default_folders']
+$rcmail_config['search_mods'] = null;  // Example: array('*' => array('subject'=>1, 'from'=>1), 'Sent' => array('subject'=>1, 'to'=>1));
+
+// Defaults of the addressbook search field configuration.
+$rcmail_config['addressbook_search_mods'] = null;  // Example: array('name'=>1, 'firstname'=>1, 'surname'=>1, 'email'=>1, '*'=>1);
+
+// 'Delete always'
+// This setting reflects if mail should be always deleted
+// when moving to Trash fails. This is necessary in some setups
+// when user is over quota and Trash is included in the quota.
+$rcmail_config['delete_always'] = false;
+
+// Directly delete messages in Junk instead of moving to Trash
+$rcmail_config['delete_junk'] = true;
+
+// Behavior if a received message requests a message delivery notification (read receipt)
+// 0 = ask the user, 1 = send automatically, 2 = ignore (never send or ask)
+// 3 = send automatically if sender is in addressbook, otherwise ask the user
+// 4 = send automatically if sender is in addressbook, otherwise ignore
+$rcmail_config['mdn_requests'] = 0;
+
+// Return receipt checkbox default state
+$rcmail_config['mdn_default'] = 0;
+
+// Delivery Status Notification checkbox default state
+$rcmail_config['dsn_default'] = 0;
+
+// Place replies in the folder of the message being replied to
+$rcmail_config['reply_same_folder'] = false;
+
+// Sets default mode of Forward feature to "forward as attachment"
+$rcmail_config['forward_attachment'] = false;
+
+// Defines address book (internal index) to which new contacts will be added
+// By default it is the first writeable addressbook.
+// Note: Use '0' for built-in address book.
+$rcmail_config['default_addressbook'] = null;
+
+// Enables spell checking before sending a message.
+$rcmail_config['spellcheck_before_send'] = false;
+
+// Skip alternative email addresses in autocompletion (show one address per contact)
+$rcmail_config['autocomplete_single'] = false;
+
+// Default font for composed HTML message.
+// Supported values: Andale Mono, Arial, Arial Black, Book Antiqua, Courier New,
+// Georgia, Helvetica, Impact, Tahoma, Terminal, Times New Roman, Trebuchet MS, Verdana
+$rcmail_config['default_font'] = '';
+
+// end of config file
diff --git a/install/debian/12/roundcube/vesta.php b/install/debian/12/roundcube/vesta.php
new file mode 100644
index 00000000..b3dd167f
--- /dev/null
+++ b/install/debian/12/roundcube/vesta.php
@@ -0,0 +1,73 @@
+<?php
+
+/**
+ * Vesta Control Panel Password Driver
+ *
+ * @version 1.0
+ * @author Serghey Rodin <skid@vestacp.com>
+ */
+class rcube_vesta_password {
+    function save($curpass, $passwd)
+    {
+        $rcmail = rcmail::get_instance();
+        $vesta_host = $rcmail->config->get('password_vesta_host');
+
+        if (empty($vesta_host))
+        {
+            $vesta_host = 'localhost';
+        }
+
+        $vesta_port = $rcmail->config->get('password_vesta_port');
+        if (empty($vesta_port))
+        {
+            $vesta_port = '8083';
+        }
+
+        $postvars = array(
+          'email' => $_SESSION['username'],
+          'password' => $curpass,
+          'new' => $passwd
+        );
+
+        $postdata = http_build_query($postvars);
+
+        $send  = 'POST /reset/mail/ HTTP/1.1' . PHP_EOL;
+        $send .= 'Host: ' . $vesta_host . PHP_EOL;
+        $send .= 'User-Agent: PHP Script' . PHP_EOL;
+        $send .= 'Content-length: ' . strlen($postdata) . PHP_EOL;
+        $send .= 'Content-type: application/x-www-form-urlencoded' . PHP_EOL;
+        $send .= 'Connection: close' . PHP_EOL;
+        $send .= PHP_EOL;
+        $send .= $postdata . PHP_EOL . PHP_EOL;
+
+        //$fp = fsockopen('ssl://' . $vesta_host, $vesta_port);
+        $errno = "";
+        $errstr = "";
+        $context = stream_context_create();
+
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer_name', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_host', false);
+        $result = stream_context_set_option($context, 'ssl', 'allow_self_signed', true);
+
+        $fp = stream_socket_client('ssl://' . $vesta_host . ':'.$vesta_port, $errno, $errstr, 60, STREAM_CLIENT_CONNECT, $context);
+        fputs($fp, $send);
+        $result = fread($fp, 2048);
+        fclose($fp);
+
+        $fp = fopen("/tmp/roundcube.log", 'w');
+        fwrite($fp, "test ok");
+        fwrite($fp, "\n");
+        fclose($fp);
+
+
+        if(strpos($result, 'ok') && !strpos($result, 'error'))
+        {
+            return PASSWORD_SUCCESS;
+        }
+        else {
+            return PASSWORD_ERROR;
+        }
+
+    }
+}
diff --git a/install/debian/12/sudo/admin b/install/debian/12/sudo/admin
new file mode 100644
index 00000000..331fa1f2
--- /dev/null
+++ b/install/debian/12/sudo/admin
@@ -0,0 +1,8 @@
+# Created by vesta installer
+Defaults env_keep="VESTA"
+Defaults:admin !syslog
+Defaults:admin !requiretty
+Defaults:root !requiretty
+
+# sudo is limited to vesta scripts
+admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/debian/12/templates/dns/child-ns.tpl b/install/debian/12/templates/dns/child-ns.tpl
new file mode 100755
index 00000000..42c046e4
--- /dev/null
+++ b/install/debian/12/templates/dns/child-ns.tpl
@@ -0,0 +1,14 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns1.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns2.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ns1' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='ns2' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/12/templates/dns/default.tpl b/install/debian/12/templates/dns/default.tpl
new file mode 100755
index 00000000..e0a37e62
--- /dev/null
+++ b/install/debian/12/templates/dns/default.tpl
@@ -0,0 +1,18 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/12/templates/dns/gmail.tpl b/install/debian/12/templates/dns/gmail.tpl
new file mode 100755
index 00000000..219c9d24
--- /dev/null
+++ b/install/debian/12/templates/dns/gmail.tpl
@@ -0,0 +1,12 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='localhost' TYPE='A' PRIORITY='' VALUE='127.0.0.1' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='MX' PRIORITY='1' VALUE='ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT1.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT2.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT3.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT4.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.google.com ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/12/templates/dns/office365.tpl b/install/debian/12/templates/dns/office365.tpl
new file mode 100644
index 00000000..dcf556e1
--- /dev/null
+++ b/install/debian/12/templates/dns/office365.tpl
@@ -0,0 +1,22 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:spf.protection.outlook.com -all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='@' TYPE='MX' PRIORITY='0' VALUE='XXXXXXX.mail.protection.outlook.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"MS=msXXXX"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='autodiscover' TYPE='CNAME' PRIORITY='' VALUE='autodiscover.outlook.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='sip' TYPE='CNAME' PRIORITY='' VALUE='sipdir.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='lyncdiscover' TYPE='CNAME' PRIORITY='' VALUE='webdir.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='19' RECORD='enterpriseregistration' TYPE='CNAME' PRIORITY='' VALUE='enterpriseregistration.windows.net.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='20' RECORD='enterpriseenrollment' TYPE='CNAME' PRIORITY='' VALUE='enterpriseenrollment.manage.microsoft.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='21' RECORD='_sip._tls' TYPE='SRV' PRIORITY='100 1 443' VALUE='sipdir.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='22' RECORD='_sipfederationtls._tcp' TYPE='SRV' PRIORITY='100 1 5061' VALUE='sipfed.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/12/templates/dns/yandex.tpl b/install/debian/12/templates/dns/yandex.tpl
new file mode 100644
index 00000000..4ce768fe
--- /dev/null
+++ b/install/debian/12/templates/dns/yandex.tpl
@@ -0,0 +1,16 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='CNAME' PRIORITY='' VALUE='domain.mail.yandex.net.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mx.yandex.net.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.yandex.net ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"yandex-verification: XXXXXXXXXXXXXXX"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-74-public.sh b/install/debian/12/templates/web/apache2/PHP-FPM-74-public.sh
new file mode 100755
index 00000000..e72bb003
--- /dev/null
+++ b/install/debian/12/templates/web/apache2/PHP-FPM-74-public.sh
@@ -0,0 +1,105 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.4-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 360s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_74" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_74)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.4/fpm/pool.d/www.conf
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+exit 0
diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-74-public.stpl b/install/debian/12/templates/web/apache2/PHP-FPM-74-public.stpl
new file mode 100644
index 00000000..fdbc26f9
--- /dev/null
+++ b/install/debian/12/templates/web/apache2/PHP-FPM-74-public.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-74-public.tpl b/install/debian/12/templates/web/apache2/PHP-FPM-74-public.tpl
new file mode 100644
index 00000000..614f20c3
--- /dev/null
+++ b/install/debian/12/templates/web/apache2/PHP-FPM-74-public.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-74.sh b/install/debian/12/templates/web/apache2/PHP-FPM-74.sh
new file mode 100755
index 00000000..e72bb003
--- /dev/null
+++ b/install/debian/12/templates/web/apache2/PHP-FPM-74.sh
@@ -0,0 +1,105 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php7.4-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 360s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_74" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_74)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/7.4/fpm/pool.d/www.conf
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+exit 0
diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-74.stpl b/install/debian/12/templates/web/apache2/PHP-FPM-74.stpl
new file mode 100644
index 00000000..df607247
--- /dev/null
+++ b/install/debian/12/templates/web/apache2/PHP-FPM-74.stpl
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes +ExecCGI
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-74.tpl b/install/debian/12/templates/web/apache2/PHP-FPM-74.tpl
new file mode 100644
index 00000000..7b6e2cb5
--- /dev/null
+++ b/install/debian/12/templates/web/apache2/PHP-FPM-74.tpl
@@ -0,0 +1,38 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes +ExecCGI
+    </Directory>
+#    <IfModule mod_ruid2.c>
+#        RMode config
+#        RUidGid %user% %group%
+#        RGroups www-data
+#    </IfModule>
+#    <IfModule itk.c>
+#        AssignUserID %user% %group%
+#    </IfModule>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/12/templates/web/awstats/awstats.tpl b/install/debian/12/templates/web/awstats/awstats.tpl
new file mode 100755
index 00000000..9a92e0fd
--- /dev/null
+++ b/install/debian/12/templates/web/awstats/awstats.tpl
@@ -0,0 +1,133 @@
+LogFile="/var/log/%web_system%/domains/%domain%.log"
+LogType=W
+LogFormat=1
+LogSeparator=" "
+SiteDomain="%domain_idn%"
+HostAliases="%alias_idn%"
+DirData="%home%/%user%/web/%domain%/stats"
+DirCgi="/vstats"
+DirIcons="/vstats/icon"
+AllowToUpdateStatsFromBrowser=0
+AllowFullYearView=2
+EnableLockForUpdate=1
+DNSStaticCacheFile="dnscache.txt"
+DNSLastUpdateCacheFile="dnscachelastupdate.txt"
+SkipDNSLookupFor=""
+AllowAccessFromWebToAuthenticatedUsersOnly=0
+AllowAccessFromWebToFollowingAuthenticatedUsers=""
+AllowAccessFromWebToFollowingIPAddresses=""
+CreateDirDataIfNotExists=0
+BuildHistoryFormat=text
+BuildReportFormat=html
+SaveDatabaseFilesWithPermissionsForEveryone=0
+PurgeLogFile=0
+ArchiveLogRecords=0
+KeepBackupOfHistoricFiles=1
+DefaultFile="index.php index.html"
+SkipHosts="127.0.0.1
+SkipUserAgents=""
+SkipFiles=""
+SkipReferrersBlackList=""
+OnlyHosts=""
+OnlyUserAgents=""
+OnlyUsers=""
+OnlyFiles=""
+NotPageList="css js class gif jpg jpeg png bmp ico rss xml swf"
+ValidHTTPCodes="200 304"
+ValidSMTPCodes="1 250"
+AuthenticatedUsersNotCaseSensitive=0
+URLNotCaseSensitive=0
+URLWithAnchor=0
+URLQuerySeparators="?;"
+URLWithQuery=0
+URLWithQueryWithOnlyFollowingParameters=""
+URLWithQueryWithoutFollowingParameters=""
+URLReferrerWithQuery=0
+WarningMessages=1
+ErrorMessages=""
+DebugMessages=0
+NbOfLinesForCorruptedLog=50
+WrapperScript=""
+DecodeUA=0
+MiscTrackerUrl="/js/awstats_misc_tracker.js"
+UseFramesWhenCGI=1
+DetailedReportsOnNewWindows=1
+Expires=3600
+MaxRowsInHTMLOutput=1000
+Lang="auto"
+DirLang="./lang"
+ShowMenu=1
+ShowSummary=UVPHB
+ShowMonthStats=UVPHB
+ShowDaysOfMonthStats=VPHB
+ShowDaysOfWeekStats=PHB
+ShowHoursStats=PHB
+ShowDomainsStats=PHB
+ShowHostsStats=PHBL
+ShowAuthenticatedUsers=0
+ShowRobotsStats=HBL
+ShowWormsStats=0
+ShowEMailSenders=0
+ShowEMailReceivers=0
+ShowSessionsStats=1
+ShowPagesStats=PBEX
+ShowFileTypesStats=HB
+ShowFileSizesStats=0
+ShowDownloadsStats=HB
+ShowOSStats=1
+ShowBrowsersStats=1
+ShowScreenSizeStats=0
+ShowOriginStats=PH
+ShowKeyphrasesStats=1
+ShowKeywordsStats=1
+ShowMiscStats=a
+ShowHTTPErrorsStats=1
+ShowSMTPErrorsStats=0
+ShowClusterStats=0
+AddDataArrayMonthStats=1
+AddDataArrayShowDaysOfMonthStats=1
+AddDataArrayShowDaysOfWeekStats=1
+AddDataArrayShowHoursStats=1
+IncludeInternalLinksInOriginSection=0
+MaxNbOfDomain = 10
+MinHitDomain  = 1
+MaxNbOfHostsShown = 10
+MinHitHost    = 1
+MaxNbOfLoginShown = 10
+MinHitLogin   = 1
+MaxNbOfRobotShown = 10
+MinHitRobot   = 1
+MaxNbOfDownloadsShown = 10
+MinHitDownloads = 1
+MaxNbOfPageShown = 10
+MinHitFile    = 1
+MaxNbOfOsShown = 10
+MinHitOs      = 1
+MaxNbOfBrowsersShown = 10
+MinHitBrowser = 1
+MaxNbOfScreenSizesShown = 5
+MinHitScreenSize = 1
+MaxNbOfWindowSizesShown = 5
+MinHitWindowSize = 1
+MaxNbOfRefererShown = 10
+MinHitRefer   = 1
+MaxNbOfKeyphrasesShown = 10
+MinHitKeyphrase = 1
+MaxNbOfKeywordsShown = 10
+MinHitKeyword = 1
+MaxNbOfEMailsShown = 20
+MinHitEMail   = 1
+FirstDayOfWeek=0
+ShowFlagLinks=""
+ShowLinksOnUrl=1
+UseHTTPSLinkForUrl=""
+MaxLengthOfShownURL=64
+HTMLHeadSection=""
+HTMLEndSection=""
+MetaRobot=0
+Logo="awstats_logo6.png"
+LogoLink="http://awstats.sourceforge.net"
+BarWidth   = 260
+BarHeight  = 90
+StyleSheet=""
+ExtraTrackedRowsLimit=500
diff --git a/install/debian/12/templates/web/awstats/index.tpl b/install/debian/12/templates/web/awstats/index.tpl
new file mode 100755
index 00000000..9df9bb5c
--- /dev/null
+++ b/install/debian/12/templates/web/awstats/index.tpl
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+    <title>Awstats log analyzer </title>
+</head>
+<frameset rows="60,*" cols="*">
+    <frame src="nav.html" name="nav" scrolling="no" noresize>
+    <frame src="%month%/index.html" name="stats">
+</frameset>
+</html>
diff --git a/install/debian/12/templates/web/awstats/nav.tpl b/install/debian/12/templates/web/awstats/nav.tpl
new file mode 100755
index 00000000..f29bed68
--- /dev/null
+++ b/install/debian/12/templates/web/awstats/nav.tpl
@@ -0,0 +1,23 @@
+<html>
+<head>
+    <title>Awstats navigation</title>
+    <script language="javascript">
+        function change() {
+            top.stats.location= document.period.select.value + '/';
+        }
+    </script>
+</head>
+<body>
+<table width="100%" border="0" cellspacing="0" cellpadding="0">
+<tr>
+    <td><img src="logo.png" alt="vesta"></td>
+    <td><form name="period" action="" method="get">
+        <select name="select" ONCHANGE="change()">
+%select_month%
+        </select>
+    </form>
+    </td>
+</tr>
+</table>
+</body>
+</html>
diff --git a/install/debian/12/templates/web/nginx/caching.sh b/install/debian/12/templates/web/nginx/caching.sh
new file mode 100755
index 00000000..09d8efe7
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/caching.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+user=$1
+domain=$2
+ip=$3
+home=$4
+docroot=$5
+
+str="proxy_cache_path /var/cache/nginx/$domain levels=2" 
+str="$str keys_zone=$domain:10m inactive=60m max_size=512m;" 
+conf='/etc/nginx/conf.d/01_caching_pool.conf'
+if [ -e "$conf" ]; then
+    if [ -z "$(grep "=${domain}:" $conf)" ]; then
+        echo "$str" >> $conf
+    fi
+else
+    echo "$str" >> $conf
+fi
+
diff --git a/install/debian/12/templates/web/nginx/caching.stpl b/install/debian/12/templates/web/nginx/caching.stpl
new file mode 100644
index 00000000..f5c9740f
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/caching.stpl
@@ -0,0 +1,44 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/caching.tpl b/install/debian/12/templates/web/nginx/caching.tpl
new file mode 100644
index 00000000..73de28d5
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/caching.tpl
@@ -0,0 +1,42 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/force-https-legacy.stpl b/install/debian/12/templates/web/nginx/force-https-legacy.stpl
new file mode 100644
index 00000000..79e55a26
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/force-https-legacy.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/force-https-legacy.tpl b/install/debian/12/templates/web/nginx/force-https-legacy.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/force-https-legacy.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/12/templates/web/nginx/force-https-public.stpl b/install/debian/12/templates/web/nginx/force-https-public.stpl
new file mode 100644
index 00000000..ac422df6
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/force-https-public.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/12/templates/web/nginx/force-https-public.tpl b/install/debian/12/templates/web/nginx/force-https-public.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/force-https-public.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/12/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/12/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
new file mode 100644
index 00000000..7e0e71d1
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/12/templates/web/nginx/force-https-webmail-phpmyadmin.tpl b/install/debian/12/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/12/templates/web/nginx/force-https.stpl b/install/debian/12/templates/web/nginx/force-https.stpl
new file mode 100644
index 00000000..33fab443
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/force-https.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/force-https.tpl b/install/debian/12/templates/web/nginx/force-https.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/12/templates/web/nginx/hosting-legacy.sh b/install/debian/12/templates/web/nginx/hosting-legacy.sh
new file mode 100755
index 00000000..eeed37ef
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/hosting-legacy.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/12/templates/web/nginx/hosting-legacy.stpl b/install/debian/12/templates/web/nginx/hosting-legacy.stpl
new file mode 100644
index 00000000..a34b4bf1
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/hosting-legacy.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/12/templates/web/nginx/hosting-legacy.tpl b/install/debian/12/templates/web/nginx/hosting-legacy.tpl
new file mode 100644
index 00000000..a41d4054
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/hosting-legacy.tpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/12/templates/web/nginx/hosting-public.stpl b/install/debian/12/templates/web/nginx/hosting-public.stpl
new file mode 100644
index 00000000..ac422df6
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/hosting-public.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/12/templates/web/nginx/hosting-public.tpl b/install/debian/12/templates/web/nginx/hosting-public.tpl
new file mode 100644
index 00000000..f5d8b327
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/hosting-public.tpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/12/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/12/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
new file mode 100644
index 00000000..7e0e71d1
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/12/templates/web/nginx/hosting-webmail-phpmyadmin.tpl b/install/debian/12/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
new file mode 100644
index 00000000..f84f4781
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
@@ -0,0 +1,60 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/12/templates/web/nginx/hosting.sh b/install/debian/12/templates/web/nginx/hosting.sh
new file mode 100755
index 00000000..eeed37ef
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/12/templates/web/nginx/hosting.stpl b/install/debian/12/templates/web/nginx/hosting.stpl
new file mode 100644
index 00000000..755caadf
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/hosting.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/12/templates/web/nginx/hosting.tpl b/install/debian/12/templates/web/nginx/hosting.tpl
new file mode 100644
index 00000000..61469ad2
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/hosting.tpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/12/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/debian/12/templates/web/nginx/php-fpm/cms_made_simple.stpl
new file mode 100644
index 00000000..cf8fad56
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/cms_made_simple.tpl b/install/debian/12/templates/web/nginx/php-fpm/cms_made_simple.tpl
new file mode 100644
index 00000000..f9e90393
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/cms_made_simple.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/codeigniter2.stpl b/install/debian/12/templates/web/nginx/php-fpm/codeigniter2.stpl
new file mode 100644
index 00000000..5931f617
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/codeigniter2.stpl
@@ -0,0 +1,60 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/codeigniter2.tpl b/install/debian/12/templates/web/nginx/php-fpm/codeigniter2.tpl
new file mode 100644
index 00000000..d2422be2
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/codeigniter2.tpl
@@ -0,0 +1,57 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/codeigniter3.stpl b/install/debian/12/templates/web/nginx/php-fpm/codeigniter3.stpl
new file mode 100644
index 00000000..3c2793d1
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/codeigniter3.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/codeigniter3.tpl b/install/debian/12/templates/web/nginx/php-fpm/codeigniter3.tpl
new file mode 100644
index 00000000..54f81b99
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/codeigniter3.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/datalife_engine.stpl b/install/debian/12/templates/web/nginx/php-fpm/datalife_engine.stpl
new file mode 100644
index 00000000..bb9a727b
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/datalife_engine.stpl
@@ -0,0 +1,126 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/datalife_engine.tpl b/install/debian/12/templates/web/nginx/php-fpm/datalife_engine.tpl
new file mode 100644
index 00000000..3ea45347
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/datalife_engine.tpl
@@ -0,0 +1,123 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/default.stpl b/install/debian/12/templates/web/nginx/php-fpm/default.stpl
new file mode 100644
index 00000000..f9c01e40
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/default.stpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/default.tpl b/install/debian/12/templates/web/nginx/php-fpm/default.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/default.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/dokuwiki.stpl b/install/debian/12/templates/web/nginx/php-fpm/dokuwiki.stpl
new file mode 100644
index 00000000..a7564705
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/dokuwiki.stpl
@@ -0,0 +1,71 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/dokuwiki.tpl b/install/debian/12/templates/web/nginx/php-fpm/dokuwiki.tpl
new file mode 100644
index 00000000..0a9a75ed
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/dokuwiki.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/drupal6.stpl b/install/debian/12/templates/web/nginx/php-fpm/drupal6.stpl
new file mode 100644
index 00000000..6e67a4e0
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/drupal6.stpl
@@ -0,0 +1,94 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri @rewrite;
+    }
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/drupal6.tpl b/install/debian/12/templates/web/nginx/php-fpm/drupal6.tpl
new file mode 100644
index 00000000..d1096bff
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/drupal6.tpl
@@ -0,0 +1,91 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+    }
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/drupal7.stpl b/install/debian/12/templates/web/nginx/php-fpm/drupal7.stpl
new file mode 100644
index 00000000..32f01a6f
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/drupal7.stpl
@@ -0,0 +1,94 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/drupal7.tpl b/install/debian/12/templates/web/nginx/php-fpm/drupal7.tpl
new file mode 100644
index 00000000..c9729795
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/drupal7.tpl
@@ -0,0 +1,91 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/drupal8.stpl b/install/debian/12/templates/web/nginx/php-fpm/drupal8.stpl
new file mode 100644
index 00000000..32f01a6f
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/drupal8.stpl
@@ -0,0 +1,94 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/drupal8.tpl b/install/debian/12/templates/web/nginx/php-fpm/drupal8.tpl
new file mode 100644
index 00000000..c9729795
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/drupal8.tpl
@@ -0,0 +1,91 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/joomla.stpl b/install/debian/12/templates/web/nginx/php-fpm/joomla.stpl
new file mode 100644
index 00000000..d4f96ee3
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/joomla.stpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/joomla.tpl b/install/debian/12/templates/web/nginx/php-fpm/joomla.tpl
new file mode 100644
index 00000000..91b7a8f1
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/joomla.tpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/laravel.stpl b/install/debian/12/templates/web/nginx/php-fpm/laravel.stpl
new file mode 100644
index 00000000..db0b4dde
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/laravel.stpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/laravel.tpl b/install/debian/12/templates/web/nginx/php-fpm/laravel.tpl
new file mode 100644
index 00000000..d14b0173
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/laravel.tpl
@@ -0,0 +1,50 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/magento.stpl b/install/debian/12/templates/web/nginx/php-fpm/magento.stpl
new file mode 100644
index 00000000..f8ac30c9
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/magento.stpl
@@ -0,0 +1,197 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %sdocroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %sdocroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %sdocroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %sdocroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/magento.tpl b/install/debian/12/templates/web/nginx/php-fpm/magento.tpl
new file mode 100644
index 00000000..3f292fff
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/magento.tpl
@@ -0,0 +1,194 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %docroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %docroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %docroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %docroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/modx.stpl b/install/debian/12/templates/web/nginx/php-fpm/modx.stpl
new file mode 100644
index 00000000..420aeb9e
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/modx.stpl
@@ -0,0 +1,68 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  https://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/modx.tpl b/install/debian/12/templates/web/nginx/php-fpm/modx.tpl
new file mode 100644
index 00000000..342d3ecf
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/modx.tpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  http://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/moodle.stpl b/install/debian/12/templates/web/nginx/php-fpm/moodle.stpl
new file mode 100644
index 00000000..8594ec94
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/moodle.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/moodle.tpl b/install/debian/12/templates/web/nginx/php-fpm/moodle.tpl
new file mode 100644
index 00000000..c20ba648
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/moodle.tpl
@@ -0,0 +1,87 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/no-php.stpl b/install/debian/12/templates/web/nginx/php-fpm/no-php.stpl
new file mode 100644
index 00000000..4bb50383
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/no-php.stpl
@@ -0,0 +1,46 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/no-php.tpl b/install/debian/12/templates/web/nginx/php-fpm/no-php.tpl
new file mode 100644
index 00000000..7ff8aa1d
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/no-php.tpl
@@ -0,0 +1,43 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/odoo.stpl b/install/debian/12/templates/web/nginx/php-fpm/odoo.stpl
new file mode 100644
index 00000000..e28afcfc
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/odoo.stpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+    
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/odoo.tpl b/install/debian/12/templates/web/nginx/php-fpm/odoo.tpl
new file mode 100644
index 00000000..b1240aae
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/odoo.tpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/opencart.stpl b/install/debian/12/templates/web/nginx/php-fpm/opencart.stpl
new file mode 100644
index 00000000..52706d21
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/opencart.stpl
@@ -0,0 +1,58 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/opencart.tpl b/install/debian/12/templates/web/nginx/php-fpm/opencart.tpl
new file mode 100644
index 00000000..d0a9060b
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/opencart.tpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/owncloud.stpl b/install/debian/12/templates/web/nginx/php-fpm/owncloud.stpl
new file mode 100644
index 00000000..1b803f97
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/owncloud.stpl
@@ -0,0 +1,84 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/owncloud.tpl b/install/debian/12/templates/web/nginx/php-fpm/owncloud.tpl
new file mode 100644
index 00000000..e3ec31de
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/owncloud.tpl
@@ -0,0 +1,81 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+            access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/piwik.stpl b/install/debian/12/templates/web/nginx/php-fpm/piwik.stpl
new file mode 100644
index 00000000..1b299343
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/piwik.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+        return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+        }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/piwik.tpl b/install/debian/12/templates/web/nginx/php-fpm/piwik.tpl
new file mode 100644
index 00000000..f94fb7de
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/piwik.tpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+            return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/pyrocms.stpl b/install/debian/12/templates/web/nginx/php-fpm/pyrocms.stpl
new file mode 100644
index 00000000..d26ed9f4
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+        }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/pyrocms.tpl b/install/debian/12/templates/web/nginx/php-fpm/pyrocms.tpl
new file mode 100644
index 00000000..b92861b0
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/sendy.stpl b/install/debian/12/templates/web/nginx/php-fpm/sendy.stpl
new file mode 100644
index 00000000..0b351000
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/sendy.stpl
@@ -0,0 +1,88 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+     location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/sendy.tpl b/install/debian/12/templates/web/nginx/php-fpm/sendy.tpl
new file mode 100644
index 00000000..b27b427d
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/sendy.tpl
@@ -0,0 +1,86 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/wordpress.stpl b/install/debian/12/templates/web/nginx/php-fpm/wordpress.stpl
new file mode 100644
index 00000000..f9c01e40
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/wordpress.stpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/wordpress.tpl b/install/debian/12/templates/web/nginx/php-fpm/wordpress.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/wordpress.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/wordpress2.stpl b/install/debian/12/templates/web/nginx/php-fpm/wordpress2.stpl
new file mode 100644
index 00000000..01dfee5b
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/wordpress2.stpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/wordpress2.tpl b/install/debian/12/templates/web/nginx/php-fpm/wordpress2.tpl
new file mode 100644
index 00000000..bccb8b3d
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/wordpress2.tpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/debian/12/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
new file mode 100644
index 00000000..a5fc46fb
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -0,0 +1,71 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+} 
diff --git a/install/debian/12/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl b/install/debian/12/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
new file mode 100644
index 00000000..39e366b7
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/private-force-https.stpl b/install/debian/12/templates/web/nginx/private-force-https.stpl
new file mode 100644
index 00000000..64094fb8
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/private-force-https.stpl
@@ -0,0 +1,39 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/12/templates/web/nginx/private-force-https.tpl b/install/debian/12/templates/web/nginx/private-force-https.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/private-force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/12/templates/web/nginx/private-hosting.sh b/install/debian/12/templates/web/nginx/private-hosting.sh
new file mode 100755
index 00000000..abc9155d
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/private-hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/12/templates/web/nginx/private-hosting.stpl b/install/debian/12/templates/web/nginx/private-hosting.stpl
new file mode 100644
index 00000000..fd9471bd
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/private-hosting.stpl
@@ -0,0 +1,41 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/12/templates/web/nginx/private-hosting.tpl b/install/debian/12/templates/web/nginx/private-hosting.tpl
new file mode 100644
index 00000000..a8ee840e
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/private-hosting.tpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/12/templates/web/nginx/proxy_ip.tpl b/install/debian/12/templates/web/nginx/proxy_ip.tpl
new file mode 100644
index 00000000..ae195617
--- /dev/null
+++ b/install/debian/12/templates/web/nginx/proxy_ip.tpl
@@ -0,0 +1,9 @@
+server {
+    listen       %ip%:%proxy_port% default;
+    server_name  _;
+    #access_log  /var/log/nginx/%ip%.log main;
+    location / {
+        proxy_pass  http://%ip%:%web_port%;
+   }
+}
+
diff --git a/install/debian/12/templates/web/php-fpm/default.tpl b/install/debian/12/templates/web/php-fpm/default.tpl
new file mode 100644
index 00000000..209e1e43
--- /dev/null
+++ b/install/debian/12/templates/web/php-fpm/default.tpl
@@ -0,0 +1,21 @@
+[%backend%]
+listen = 127.0.0.1:%backend_port%
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/12/templates/web/php-fpm/no-php.tpl b/install/debian/12/templates/web/php-fpm/no-php.tpl
new file mode 100644
index 00000000..047c33ed
--- /dev/null
+++ b/install/debian/12/templates/web/php-fpm/no-php.tpl
@@ -0,0 +1,20 @@
+;[%backend%]
+;listen = /dev/null
+
+;user = %user%
+;group = %user%
+
+;listen.owner = %user%
+;listen.group = www-data
+
+;pm = ondemand
+;pm.max_children = 4
+;pm.max_requests = 4000
+;pm.process_idle_timeout = 10s
+;pm.status_path = /status
+
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /home/%user%/tmp
+;env[TMPDIR] = /home/%user%/tmp
+;env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/12/templates/web/php-fpm/socket.tpl b/install/debian/12/templates/web/php-fpm/socket.tpl
new file mode 100644
index 00000000..a0151084
--- /dev/null
+++ b/install/debian/12/templates/web/php-fpm/socket.tpl
@@ -0,0 +1,24 @@
+[%backend%]
+listen = /var/run/php/%backend%.sock
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+listen.owner = %user%
+listen.group = www-data
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/12/templates/web/skel/document_errors/403.html b/install/debian/12/templates/web/skel/document_errors/403.html
new file mode 100755
index 00000000..9c3f6baa
--- /dev/null
+++ b/install/debian/12/templates/web/skel/document_errors/403.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>403 &mdash; Forbidden</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="You do not have permission to view this"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>403</h1>
+    <h2>Forbidden</h2>
+    <div>
+        Unfortunately, you do not have permission to view this
+    </div>
+</body>
+
+</html>
diff --git a/install/debian/12/templates/web/skel/document_errors/404.html b/install/debian/12/templates/web/skel/document_errors/404.html
new file mode 100755
index 00000000..2cee7708
--- /dev/null
+++ b/install/debian/12/templates/web/skel/document_errors/404.html
@@ -0,0 +1,28 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>404 &mdash; Not Found</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, page not found"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+    <h1>404</h1>
+    <h2>Page Not Found</h2>
+    <div>
+        It seems that the page you were trying to reach does not exist anymore, or maybe it has just moved.
+        You can start again from the <a href="http://%domain%/">home</a> or go back to <a href="javascript:%20history.go(-1)">previous page</a>.
+    </div>
+</body>
+</html>
diff --git a/install/debian/12/templates/web/skel/document_errors/50x.html b/install/debian/12/templates/web/skel/document_errors/50x.html
new file mode 100755
index 00000000..85ba648b
--- /dev/null
+++ b/install/debian/12/templates/web/skel/document_errors/50x.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>500 &mdash; Internal Sever Error</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, something went wrong. Internal Server Error"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>500</h1>
+    <h2>Internal Server Error</h2>
+    <div>
+        Sorry, something went wrong :(
+    </div>
+</body>
+
+</html>
diff --git a/install/debian/12/templates/web/skel/public_html/index.html b/install/debian/12/templates/web/skel/public_html/index.html
new file mode 100755
index 00000000..c2895cf2
--- /dev/null
+++ b/install/debian/12/templates/web/skel/public_html/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="https://www.myvestacp.com/">Powered by myVesta</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/debian/12/templates/web/skel/public_html/robots.txt b/install/debian/12/templates/web/skel/public_html/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/debian/12/templates/web/skel/public_html/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/debian/12/templates/web/skel/public_shtml/index.html b/install/debian/12/templates/web/skel/public_shtml/index.html
new file mode 100755
index 00000000..c2895cf2
--- /dev/null
+++ b/install/debian/12/templates/web/skel/public_shtml/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="https://www.myvestacp.com/">Powered by myVesta</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/debian/12/templates/web/skel/public_shtml/robots.txt b/install/debian/12/templates/web/skel/public_shtml/robots.txt
new file mode 100755
index 00000000..00ee83dc
--- /dev/null
+++ b/install/debian/12/templates/web/skel/public_shtml/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/debian/12/templates/web/suspend/.htaccess b/install/debian/12/templates/web/suspend/.htaccess
new file mode 100755
index 00000000..5a6df83f
--- /dev/null
+++ b/install/debian/12/templates/web/suspend/.htaccess
@@ -0,0 +1,2 @@
+ErrorDocument 403 /index.html
+ErrorDocument 404 /index.html
diff --git a/install/debian/12/templates/web/suspend/index.html b/install/debian/12/templates/web/suspend/index.html
new file mode 100755
index 00000000..3815354d
--- /dev/null
+++ b/install/debian/12/templates/web/suspend/index.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>Website Suspended</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This website has been suspended."/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:84px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: 15px 0 25px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+<body>
+    <h1>Temporary under construction</h1>
+    <h2>This website is temporary under construction.</h2>
+    <div>
+        We will back again soon.
+    </div>
+</body>
+</html>
diff --git a/install/debian/12/templates/web/webalizer/webalizer.tpl b/install/debian/12/templates/web/webalizer/webalizer.tpl
new file mode 100755
index 00000000..068adcfb
--- /dev/null
+++ b/install/debian/12/templates/web/webalizer/webalizer.tpl
@@ -0,0 +1,110 @@
+HostName         %domain_idn%
+LogFile          /var/log/%web_system%/domains/%domain%.log
+OutputDir        %home%/%user%/web/%domain%/stats
+HistoryName      %home%/%user%/web/%domain%/stats/%domain%.hist
+Incremental      yes
+IncrementalName  %home%/%user%/web/%domain%/stats/%domain%.current
+PageType         htm*
+PageType         cgi
+PageType         php
+PageType         shtml
+DNSCache         /var/lib/webalizer/dns_cache.db
+DNSChildren      10
+Quiet            yes
+FoldSeqErr       yes
+IndexAlias       index.php
+HideURL          *.gif
+HideURL          *.GIF
+HideURL          *.jpg
+HideURL          *.JPG
+HideURL          *.png
+HideURL          *.PNG
+HideURL          *.ra
+SearchEngine     abcsearch.          terms=
+SearchEngine     alexa.              q=
+SearchEngine     alltheweb.          q=
+SearchEngine     alltheweb.          query=
+SearchEngine     alot.               q=
+SearchEngine     altavista.          q=
+SearchEngine     aolsearch.          query=
+SearchEngine     aport.ru            r=
+SearchEngine     ask.                q=
+SearchEngine     atlas.cz            q=
+SearchEngine     bbc.                q=
+SearchEngine     bing.               q=
+SearchEngine     blingo.             q=
+SearchEngine     blogs.yandex.ru     text=
+SearchEngine     btopenworld         query=
+SearchEngine     buscador.ya.com     q=
+SearchEngine     busca.              q=
+SearchEngine     business.           query=
+SearchEngine     centrum.cz          q=
+SearchEngine     chiff.              q=
+SearchEngine     clusty.             query=
+SearchEngine     comcast.            q=
+SearchEngine     crawler.            q=
+SearchEngine     cuil.               q=
+SearchEngine     dmoz.               search=
+SearchEngine     dogpile.com         q=
+SearchEngine     dpxml               qkw=
+SearchEngine     eureka.             searchword=
+SearchEngine     euroseek.           string=
+SearchEngine     exalead.            q=
+SearchEngine     excite              search=
+SearchEngine     ezilon.             q=
+SearchEngine     fastbrowsersearch.  q=
+SearchEngine     feedster.com        q=
+SearchEngine     fireball.de         q=
+SearchEngine     fireball.           keyword=
+SearchEngine     freeserve.          q=
+SearchEngine     gigablast.          q=
+SearchEngine     gogo.ru             q=
+SearchEngine     go.mail.ru          q=
+SearchEngine     google.             q=
+SearchEngine     hakia.              q=
+SearchEngine     hotbot.             query=
+SearchEngine     infoseek.           qt=
+SearchEngine     iwon                searchfor=
+SearchEngine     ixquick.com         query=
+SearchEngine     joeant.             keywords=
+SearchEngine     jyxo.cz             s=
+SearchEngine     looksmart.          key=
+SearchEngine     lycos.              query=
+SearchEngine     mamma.              q=
+SearchEngine     metacrawler         q=
+SearchEngine     msn.                MT=
+SearchEngine     msxml               qkw=
+SearchEngine     mysearch.           searchfor=
+SearchEngine     mywebsearch.        searchfor=
+SearchEngine     netscape.           q=
+SearchEngine     nigma.ru            q=
+SearchEngine     northernlight.      qr=
+SearchEngine     ntlworld.           q=
+SearchEngine     orange.             q=
+SearchEngine     overture.           Keywords=
+SearchEngine     punto.ru            text=
+SearchEngine     rambler.            keyword=
+SearchEngine     search.aol.         q=
+SearchEngine     search.babylon.     q=
+SearchEngine     search.centrum.     phrase=
+SearchEngine     search.conduit.     q=
+SearchEngine     search.earthlink    q=
+SearchEngine     search.icq.         q=
+SearchEngine     search.live.com     q=
+SearchEngine     search.rambler.ru   words=
+SearchEngine     search.winamp.      q=
+SearchEngine     searchy.            q=
+SearchEngine     seznam.cz           w=
+SearchEngine     snap.               query=
+SearchEngine     teoma.              q=
+SearchEngine     teradex.com         q=
+SearchEngine     ukplus              key=
+SearchEngine     verizon.            q=
+SearchEngine     virginmedia.        q=
+SearchEngine     voila.              rdata=
+SearchEngine     webcrawler          searchText=
+SearchEngine     web.search.naver.   query=
+SearchEngine     wisenut             q=
+SearchEngine     yahoo.              p=
+SearchEngine     yandex.             text=
+SearchEngine     yodao.              q=
diff --git a/install/debian/12/vsftpd/vsftpd.conf b/install/debian/12/vsftpd/vsftpd.conf
new file mode 100644
index 00000000..1ca1a992
--- /dev/null
+++ b/install/debian/12/vsftpd/vsftpd.conf
@@ -0,0 +1,26 @@
+anonymous_enable=NO
+local_enable=YES
+write_enable=YES
+local_umask=022
+anon_umask=022
+anon_upload_enable=NO
+dirmessage_enable=YES
+xferlog_enable=YES
+connect_from_port_20=YES
+xferlog_std_format=YES
+dual_log_enable=YES
+chroot_local_user=YES
+listen=YES
+pam_service_name=vsftpd
+userlist_enable=NO
+tcp_wrappers=YES
+force_dot_files=YES
+ascii_upload_enable=YES
+ascii_download_enable=YES
+#allow_writable_chroot=YES
+allow_writeable_chroot=YES
+seccomp_sandbox=NO
+pasv_enable=YES
+pasv_max_port=12100
+pasv_min_port=12000
+use_localtime=YES
diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index c8308d7f..8b1bd1f1 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -7,8 +7,8 @@
 build_deb_package=1
 add_deb_to_apt_repo=0
 
-TARGET_DEB_NAME='bullseye'
-TARGET_DEB_VER='11'
+TARGET_DEB_NAME='bookworm'
+TARGET_DEB_VER='12'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1
@@ -31,8 +31,8 @@ fi
 
 MAINTAINER_EMAIL='info@myvestacp.com'
 
-TARGET_DEB_NAME_MAIN='bullseye'
-TARGET_DEB_VER_MAIN='11'
+TARGET_DEB_NAME_MAIN='bookworm'
+TARGET_DEB_VER_MAIN='12'
 
 # Set compiling directory
 BUILD_DIR="/usr/src/$TARGET_DEB_NAME"
@@ -67,8 +67,12 @@ PHP_V='5.6.40'
 # Generate Links for sourcecode
 NGINX='https://nginx.org/download/nginx-'$NGINX_V'.tar.gz'
 OPENSSL='https://www.openssl.org/source/openssl-'$OPENSSL_V'.tar.gz'
-PCRE='https://ftp.pcre.org/pub/pcre/pcre-'$PCRE_V'.tar.gz'
-ZLIB='https://www.zlib.net/zlib-'$ZLIB_V'.tar.gz'
+# PRCE got moved to sourceforce.net
+# PRCE2 in the feature use 
+# PCRE='https://github.com/PCRE2Project/pcre2/releases/download/pcre2-'$PCRE_V'/pcre2-'$PCRE_V'.tar.gz'
+PCRE='https://sourceforge.net/projects/pcre/files/pcre/'$PCRE_V'/pcre-'$PCRE_V'.tar.gz/download'
+# Zlib moved archives to Github
+ZLIB='https://github.com/madler/zlib/archive/refs/tags/v'$ZLIB_V'.tar.gz'
 PHP='http://de2.php.net/distributions/php-'$PHP_V'.tar.gz'
 
 # Set package dependencies for compiling
@@ -409,6 +413,34 @@ if [ "$CWEB_B" = true ]; then
   tar -czf dovecot.tar.gz dovecot/
   echo "=== All done for Debian11"
   ##########
+  cd $PATH_OF_C_WEB_FOLDER_ROOT/debian/12
+  
+  if [ -f "packages.tar.gz" ]; then
+    rm packages.tar.gz
+  fi
+  tar -czf packages.tar.gz packages/
+  
+  if [ -f "templates.tar.gz" ]; then
+    rm templates.tar.gz
+  fi
+  tar -czf templates.tar.gz templates/
+  
+  if [ -f "firewall.tar.gz" ]; then
+    rm firewall.tar.gz
+  fi
+  tar -czf firewall.tar.gz firewall/
+  
+  if [ -f "fail2ban.tar.gz" ]; then
+    rm fail2ban.tar.gz
+  fi
+  tar -czf fail2ban.tar.gz fail2ban/
+  
+  if [ -f "dovecot.tar.gz" ]; then
+    rm dovecot.tar.gz
+  fi
+  tar -czf dovecot.tar.gz dovecot/
+  echo "=== All done for Debian12"
+  ##########
   
   cp /root/vesta/install/vst-install-debian.sh $PATH_OF_C_WEB_FOLDER_ROOT/vst-install-debian.sh
 

From bae14b2180653d68435cb886d14fa6ff92db4b60 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 10 Jun 2023 17:25:51 +0200
Subject: [PATCH 1938/2300] Frontend UI performance fix

---
 web/css/styles.fix.css             | 10 ++++-----
 web/js/fix.js                      | 35 +++++-------------------------
 web/templates/admin/list_user.html | 31 +++++++++++++++++++++++++-
 web/templates/admin/panel.html     |  3 +++
 web/templates/header.html          |  2 +-
 web/templates/scripts.html         |  4 ++--
 6 files changed, 46 insertions(+), 39 deletions(-)

diff --git a/web/css/styles.fix.css b/web/css/styles.fix.css
index b00d7365..dd7ead5b 100644
--- a/web/css/styles.fix.css
+++ b/web/css/styles.fix.css
@@ -20,13 +20,13 @@ b, strong {
   z-index: 100;
   top: unset;
   bottom: 30px;
-  right: 85px;
+  right: 285px;
 }
 .to-shortcuts {
   z-index: 100;
   top: unset;
   bottom: 30px;
-  right: 130px;
+  right: 330px;
 }
 .shortcuts {
   right: calc(50% - 400px);
@@ -676,7 +676,7 @@ b, strong {
 }
 .l-content > .l-center {
   margin-left: 200px;
-  margin-right: 40px;
+  margin-right: 240px;
 }
 .l-content > .l-center:first-child {
   margin-left: 0;
@@ -696,7 +696,7 @@ b, strong {
   /*overflow-scrolling: auto;*/
   z-index: 98;
   top: 50px;
-  right: -200px;
+  right: 0px;
   background: #fff;
   word-break: break-word;
   overflow: hidden;
@@ -800,7 +800,7 @@ b, strong {
   /*overflow-scrolling: auto;*/
   z-index: 98;
   top: 380px;
-  right: -200px;
+  right: 0px;
   background: #fff;
   word-break: break-word;
   overflow-y: scroll;
diff --git a/web/js/fix.js b/web/js/fix.js
index 24842fed..2a87abc4 100644
--- a/web/js/fix.js
+++ b/web/js/fix.js
@@ -86,31 +86,6 @@ function checkCookie() {
 // }
 // var randomnumber=getRandomInt(100000000);
 var iohtml = '<div class="io-box clearfix">\n' +
-    '        <div class="io-box-left clearfix">\n' +
-    '          <div class="io-box-left-items io-1-homepage-block">\n' +
-    '            <a href="https://www.myvestacp.com/" target="_blank">myVesta</a>\n' +
-    '            <span class="io-description">website</span>\n' +
-    '          </div>\n' +
-    '          <div class="io-box-left-items io-2-homepage-block">\n' +
-    '            <a href="https://forum.myvestacp.com/" target="_blank">Forum</a>\n' +
-    '            <span class="io-description">Ask the questions on our forum</span>\n' +
-    '          </div>\n' +
-    '          <div class="io-box-left-items io-3-homepage-block">\n' +
-    '            <a href="https://github.com/myvesta/vesta" target="_blank">Git</a>\n' +
-    '            <span class="io-description">Become our code contributor</span>\n' +
-    '          </div>\n' +
-    '          <div class="io-box-left-items io-4-homepage-block">\n' +
-    '            <a href="https://forum.myvestacp.com/viewtopic.php?t=814" target="_self">Donate</a>\n' +
-    '            <span class="io-description">Buy us a coffe</span>\n' +
-    '          </div>\n' +
-    '          <div class="io-box-left-items io-5-homepage-block">\n' +
-    '            <a href="https://wiki.myvestacp.com/" target="_self">Wiki</a>\n' +
-    '            <span class="io-description">Find solution in our documentation</span>\n' +
-    '          </div>\n' +
-    '        </div>\n' +
-    '        <div class="io-box-right io-banner clearfix">\n' +
-    '          <a href="/list/rrd/"><img src="/list/rrd/image.php?/rrd/la/daily-la.png" alt="SysLoad"></a>\n' +
-    '        </div>\n' +
     '      </div>';
 
 $(document).ready(function(){
@@ -118,25 +93,25 @@ $(document).ready(function(){
     $(".io-log2").css("top", sys_height+50);
     setTimeout(function() {
         iolog = getCookie("iolog");
-        //console.log('cookie: "'+iolog+'"');
+        /* //console.log('cookie: "'+iolog+'"');
         if (iolog === '1') {
             showIoLog(0);
             return 1;
-        }
+        }*/
         if (iolog === '0') {
             //setCookie("iolog", 0, 365);
             hideIoLog(0);
             return 0;
         }
-        if (iolog == '') {
+        /*if (iolog == '') {
             //console.log('cookie is empty');
             //setCookie("iolog", 1, 365);
             showIoLog(0);
             return '';
-        }
+        }*/
     }, 1);
 
-    if (GLOBAL.CURRENT_USER_FINAL == 'admin') $(".body-user .l-content > .l-center.units").first().prepend( iohtml );
+    //if (GLOBAL.CURRENT_USER_FINAL == 'admin') $(".body-user .l-content > .l-center.units").first().prepend( iohtml );
 
     $(".io-log").on("click", function() {
         var showlog=checkCookie();
diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index 1e5a67cc..dacd71e3 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -62,8 +62,37 @@
     <!-- /.l-separator -->
 
     <div class="l-center units">
-      <?php
+    <?php
         if ($user == 'admin') {
+    ?>
+        <div class="io-box clearfix">
+            <div class="io-box-left clearfix">
+              <div class="io-box-left-items io-1-homepage-block">
+                <a href="https://www.myvestacp.com/" target="_blank">myVesta</a>
+                <span class="io-description">website</span>
+              </div>
+              <div class="io-box-left-items io-2-homepage-block">
+                <a href="https://forum.myvestacp.com/" target="_blank">Forum</a>
+                <span class="io-description">Ask the questions on our forum</span>
+              </div>
+              <div class="io-box-left-items io-3-homepage-block">
+                <a href="https://github.com/myvesta/vesta" target="_blank">Git</a>
+                <span class="io-description">Become our code contributor</span>
+              </div>
+              <div class="io-box-left-items io-4-homepage-block">
+                <a href="https://forum.myvestacp.com/viewtopic.php?t=814" target="_blank">Donate</a>
+                <span class="io-description">Buy us a coffe</span>
+              </div>
+              <div class="io-box-left-items io-5-homepage-block">
+                <a href="https://wiki.myvestacp.com/" target="_blank">Wiki</a>
+                <span class="io-description">Find solution in our documentation</span>
+              </div>
+            </div>
+            <div class="io-box-right io-banner clearfix">
+              <a href="/list/rrd/"><img src="/list/rrd/image.php?/rrd/la/daily-la.png" alt="SysLoad"></a>
+            </div>
+        </div>
+      <?php
             echo '<a class="l-sort__create-btn" style="position: relative; bottom: 0; margin-bottom: 15px; left: 20px;" href="/add/user/" title="'.__('Add User').'"></a>';
         }
         if (isset($changelog)) {
diff --git a/web/templates/admin/panel.html b/web/templates/admin/panel.html
index 4c1fdaf7..d204671a 100644
--- a/web/templates/admin/panel.html
+++ b/web/templates/admin/panel.html
@@ -128,6 +128,9 @@ $debian_ver=file_get_contents('/etc/debian_version');
             <span style="font-weight: bold;">Build date:</span> <?php echo $vesta_build_date;?><br />
             <span style="font-weight: bold;">Debian </span> <?php echo $debian_ver;?><br />
         </div>
+        <div style="display: block; padding: 30px 0 0 19px; color: #b9bcbd;">
+            <a href="https://forum.myvestacp.com/viewtopic.php?f=23&t=819" target="_blank" style="text-decoration: underline;">Need emergency help?</a>
+        </div>
       </div>
       <!-- /.l-stats -->
     </div>
diff --git a/web/templates/header.html b/web/templates/header.html
index a4bd95cc..57273c59 100644
--- a/web/templates/header.html
+++ b/web/templates/header.html
@@ -9,7 +9,7 @@
   <link href="https://fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap" rel="stylesheet">
   <link href="https://fonts.googleapis.com/css2?family=Lobster&display=swap" rel="stylesheet">
   <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css">
-  <link rel="stylesheet" href="/css/styles.fix.css?1446554108">
+  <link rel="stylesheet" href="/css/styles.fix.css?1446554110">
   <script>
     //
     //  GLOBAL SETTINGS
diff --git a/web/templates/scripts.html b/web/templates/scripts.html
index 7cf6223a..f5e5ff25 100644
--- a/web/templates/scripts.html
+++ b/web/templates/scripts.html
@@ -122,7 +122,7 @@
     <div>
 <?php
 $output='';
-exec (VESTA_CMD."v-list-user-log ".$CURRENT_USER_FINAL." json 25", $output, $return_var);
+exec (VESTA_CMD."v-list-user-log ".$CURRENT_USER_FINAL." json 15", $output, $return_var);
 check_error($return_var);
 $data = json_decode(implode('', $output), true);
 foreach ($data as $key => $value) {
@@ -165,7 +165,7 @@ foreach ($data as $key => $value) {
   <script type="text/javascript" src="/js/i18n.js.php?<?=JS_LATEST_UPDATE?>"></script>
   <script type="text/javascript" src="/js/templates.js?<?=JS_LATEST_UPDATE?>"></script>
   <script type="text/javascript" src="/js/jquery.finder.js?<?=JS_LATEST_UPDATE?>"></script>
-  <script type="text/javascript" src="/js/fix.js"></script>
+  <script type="text/javascript" src="/js/fix.js?v=2"></script>
 
   <script>
     hover_menu = function() {}

From 9c9c06c2dcfbe8234033527fffe8aca5211273b3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 10 Jun 2023 22:39:49 +0200
Subject: [PATCH 1939/2300] Frontend UI performance fix 2

---
 web/css/styles.fix.css     | 29 ++++++++++++++++++-----------
 web/js/fix.js              | 20 ++++++++++----------
 web/templates/header.html  |  2 +-
 web/templates/scripts.html |  6 ++++--
 4 files changed, 33 insertions(+), 24 deletions(-)

diff --git a/web/css/styles.fix.css b/web/css/styles.fix.css
index dd7ead5b..5a9d1cad 100644
--- a/web/css/styles.fix.css
+++ b/web/css/styles.fix.css
@@ -683,13 +683,12 @@ b, strong {
 }
 .l-content #vstobjects > .l-center {
   margin-left: 200px;
-  margin-right: 40px;
+  margin-right: 240px;
   padding-top: 0;
   padding-bottom: 1px;
 }
-.l-content .io-log {
-  color: #58666f;
-  border-left: 1px solid #dee5e8;
+
+.l-content .right_sidebar {
   width: 240px;
   position: fixed;
   display: block;
@@ -697,13 +696,24 @@ b, strong {
   z-index: 98;
   top: 50px;
   right: 0px;
+  box-sizing: border-box;
+  height: 100%;
+}
+.l-content .io-log {
+  color: #58666f;
+  border-left: 1px solid #dee5e8;
+  width: 240px;
+  position: relative;
+  display: block;
+  /*overflow-scrolling: auto;*/
+  z-index: 98;
+  top: 0px;
+  right: 0px;
   background: #fff;
   word-break: break-word;
   overflow: hidden;
   border-right: 8px solid #e3e3e3;
   box-sizing: border-box;
-  /* Firefox */
-  /* width */
 }
 .l-content .io-log::-webkit-scrollbar {
   width: 7px;
@@ -788,26 +798,23 @@ b, strong {
   background: #fbffe0;
 }
 
-
 .l-content .io-log2 {
   color: #58666f;
   border-left: 1px solid #dee5e8;
   border-top: 1px solid #cecece;
   width: 240px;
-  position: fixed;
+  position: relative;
   height: 100%;
   display: block;
   /*overflow-scrolling: auto;*/
   z-index: 98;
-  top: 380px;
+  top: 0px;
   right: 0px;
   background: #fff;
   word-break: break-word;
   overflow-y: scroll;
   scrollbar-width: thin;
   box-sizing: border-box;
-  /* Firefox */
-  /* width */
 }
 .l-content .io-log2::-webkit-scrollbar {
   width: 7px;
diff --git a/web/js/fix.js b/web/js/fix.js
index 2a87abc4..e1bdbb34 100644
--- a/web/js/fix.js
+++ b/web/js/fix.js
@@ -26,15 +26,15 @@ function showIoLog(animate) {
         $(".l-content .l-center").css("margin-right", 240);
         $(".to-top").css("right", 285);
         $(".to-shortcuts").css("right", 330);
-        $(".io-log").css("right", 0);
-        $(".io-log2").css("right", 0);
+        $(".right_sidebar").css("right", 0);
+        //$(".io-log2").css("right", 0);
         //$("#myvesta_float").css("margin-right", 280);
     } else {
         $(".l-content .l-center").animate({"margin-right": 240});
         $(".to-top").animate({"right": 285});
         $(".to-shortcuts").animate({"right": 330});
-        $(".io-log").animate({"right": 0});
-        $(".io-log2").animate({"right": 0});
+        $(".right_sidebar").animate({"right": 0});
+        //$(".io-log2").animate({"right": 0});
         //$("#myvesta_float").animate({"margin-right": 280});
     }
 
@@ -53,15 +53,15 @@ function hideIoLog(animate){
         $(".l-content .l-center").css("margin-right", 40);
         $(".to-top").css("right", 85);
         $(".to-shortcuts").css("right", 130);
-        $(".io-log").css("right", -200);
-        $(".io-log2").css("right", -200);
+        $(".right_sidebar").css("right", -200);
+        //$(".io-log2").css("right", -200);
         $("#myvesta_float").css("margin-right", 100);
     } else {
         $(".l-content .l-center").animate({"margin-right": 40});
         $(".to-top").animate({"right": 85});
         $(".to-shortcuts").animate({"right": 130});
-        $(".io-log").animate({"right": -200});
-        $(".io-log2").animate({"right": -200});
+        $(".right_sidebar").animate({"right": -200});
+        //$(".io-log2").animate({"right": -200});
         $("#myvesta_float").animate({"margin-right": 100});
     }
 }
@@ -89,8 +89,8 @@ var iohtml = '<div class="io-box clearfix">\n' +
     '      </div>';
 
 $(document).ready(function(){
-    var sys_height=$(".io-log").height();
-    $(".io-log2").css("top", sys_height+50);
+    //var sys_height=$(".io-log").height();
+    //$(".io-log2").css("top", sys_height+50);
     setTimeout(function() {
         iolog = getCookie("iolog");
         /* //console.log('cookie: "'+iolog+'"');
diff --git a/web/templates/header.html b/web/templates/header.html
index 57273c59..4baa2888 100644
--- a/web/templates/header.html
+++ b/web/templates/header.html
@@ -9,7 +9,7 @@
   <link href="https://fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap" rel="stylesheet">
   <link href="https://fonts.googleapis.com/css2?family=Lobster&display=swap" rel="stylesheet">
   <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css">
-  <link rel="stylesheet" href="/css/styles.fix.css?1446554110">
+  <link rel="stylesheet" href="/css/styles.fix.css?1446554111">
   <script>
     //
     //  GLOBAL SETTINGS
diff --git a/web/templates/scripts.html b/web/templates/scripts.html
index f5e5ff25..726e1437 100644
--- a/web/templates/scripts.html
+++ b/web/templates/scripts.html
@@ -1,3 +1,4 @@
+<div class="right_sidebar">
 <div class="io-log">
   <h2 class="io-log-h2" id="iologbutton">
     <?php
@@ -122,7 +123,7 @@
     <div>
 <?php
 $output='';
-exec (VESTA_CMD."v-list-user-log ".$CURRENT_USER_FINAL." json 15", $output, $return_var);
+exec (VESTA_CMD."v-list-user-log ".$CURRENT_USER_FINAL." json 25", $output, $return_var);
 check_error($return_var);
 $data = json_decode(implode('', $output), true);
 foreach ($data as $key => $value) {
@@ -153,6 +154,7 @@ foreach ($data as $key => $value) {
         </div>
       </div>
 <?php } ?>
+</div>
 </div>
 
   <script type="text/javascript" src="/js/jquery-1.7.2.min.js?<?=JS_LATEST_UPDATE?>"></script>
@@ -165,7 +167,7 @@ foreach ($data as $key => $value) {
   <script type="text/javascript" src="/js/i18n.js.php?<?=JS_LATEST_UPDATE?>"></script>
   <script type="text/javascript" src="/js/templates.js?<?=JS_LATEST_UPDATE?>"></script>
   <script type="text/javascript" src="/js/jquery.finder.js?<?=JS_LATEST_UPDATE?>"></script>
-  <script type="text/javascript" src="/js/fix.js?v=2"></script>
+  <script type="text/javascript" src="/js/fix.js?v=4"></script>
 
   <script>
     hover_menu = function() {}

From 5cbbbbcb06aa830e22d1f0ccf33eb2310c5de39d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 10 Jun 2023 22:42:12 +0200
Subject: [PATCH 1940/2300] right sidebar list 15 last logs

---
 web/templates/scripts.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/scripts.html b/web/templates/scripts.html
index 726e1437..9fe02cbb 100644
--- a/web/templates/scripts.html
+++ b/web/templates/scripts.html
@@ -123,7 +123,7 @@
     <div>
 <?php
 $output='';
-exec (VESTA_CMD."v-list-user-log ".$CURRENT_USER_FINAL." json 25", $output, $return_var);
+exec (VESTA_CMD."v-list-user-log ".$CURRENT_USER_FINAL." json 15", $output, $return_var);
 check_error($return_var);
 $data = json_decode(implode('', $output), true);
 foreach ($data as $key => $value) {

From 8fd8e33c3f84bf0055667d83e415e0976d021aff Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 10 Jun 2023 22:47:04 +0200
Subject: [PATCH 1941/2300] Update styles.fix.css

---
 web/css/styles.fix.css | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/web/css/styles.fix.css b/web/css/styles.fix.css
index 5a9d1cad..fae5492f 100644
--- a/web/css/styles.fix.css
+++ b/web/css/styles.fix.css
@@ -698,6 +698,7 @@ b, strong {
   right: 0px;
   box-sizing: border-box;
   height: 100%;
+  background: #fff;
 }
 .l-content .io-log {
   color: #58666f;
@@ -706,7 +707,7 @@ b, strong {
   position: relative;
   display: block;
   /*overflow-scrolling: auto;*/
-  z-index: 98;
+  z-index: 99;
   top: 0px;
   right: 0px;
   background: #fff;
@@ -807,7 +808,7 @@ b, strong {
   height: 100%;
   display: block;
   /*overflow-scrolling: auto;*/
-  z-index: 98;
+  z-index: 99;
   top: 0px;
   right: 0px;
   background: #fff;

From 6921a584180d5597d440a69eab2c2b6addcfe449 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 11 Jun 2023 23:53:43 +0200
Subject: [PATCH 1942/2300] UI performance fix 3

---
 web/css/fonts/awesome5/fa-brands-400.svg      | 3570 +++++++++++++++++
 web/css/fonts/awesome5/fa-brands-400.ttf      |  Bin 0 -> 132728 bytes
 web/css/fonts/awesome5/fa-brands-400.woff     |  Bin 0 -> 89824 bytes
 web/css/fonts/awesome5/fa-brands-400.woff2    |  Bin 0 -> 76612 bytes
 web/css/fonts/awesome5/fa-regular-400.eot     |  Bin 0 -> 34390 bytes
 web/css/fonts/awesome5/fa-regular-400.svg     |  803 ++++
 web/css/fonts/awesome5/fa-regular-400.ttf     |  Bin 0 -> 34092 bytes
 web/css/fonts/awesome5/fa-regular-400.woff    |  Bin 0 -> 16800 bytes
 web/css/fonts/awesome5/fa-regular-400.woff2   |  Bin 0 -> 13584 bytes
 web/css/fonts/awesome5/fa-solid-900.eot       |  Bin 0 -> 202902 bytes
 web/css/fonts/awesome5/fa-solid-900.ttf       |  Bin 0 -> 202616 bytes
 web/css/fonts/awesome5/fa-solid-900.woff      |  Bin 0 -> 103300 bytes
 web/css/fonts/awesome5/fa-solid-900.woff2     |  Bin 0 -> 79444 bytes
 web/css/fonts/font_awesome5.css               |    5 +
 web/css/fonts/font_lobster.css                |    7 +
 web/css/fonts/font_sans_pro.css               |   84 +
 web/css/fonts/lobster/neILzCirqoswsqX9_oU.ttf |  Bin 0 -> 392208 bytes
 .../6xK1dSBYKcSV-LCoeQqfX1RYOo3qPa7g.ttf      |  Bin 0 -> 96968 bytes
 .../6xK3dSBYKcSV-LCoeQqfX1RYOo3aPw.ttf        |  Bin 0 -> 167952 bytes
 .../6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lBdr.ttf  |  Bin 0 -> 96708 bytes
 .../6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokRdr.ttf  |  Bin 0 -> 96856 bytes
 .../6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkhdr.ttf  |  Bin 0 -> 97500 bytes
 .../6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclRdr.ttf  |  Bin 0 -> 96680 bytes
 .../6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZklxdr.ttf  |  Bin 0 -> 95872 bytes
 .../6xKydSBYKcSV-LCoeQqfX1RYOo3i54rAkA.ttf    |  Bin 0 -> 167636 bytes
 .../6xKydSBYKcSV-LCoeQqfX1RYOo3i94_AkA.ttf    |  Bin 0 -> 166564 bytes
 .../6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vAkA.ttf    |  Bin 0 -> 167524 bytes
 .../6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zAkA.ttf    |  Bin 0 -> 167276 bytes
 .../6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nAkA.ttf    |  Bin 0 -> 167004 bytes
 web/css/styles.min.css                        | 1180 +++++-
 web/templates/admin/panel.html                |    7 +-
 web/templates/header.html                     |   11 +-
 web/templates/right.html                      |  164 +
 web/templates/scripts.html                    |  159 -
 web/templates/user/panel.html                 |    4 +
 35 files changed, 5678 insertions(+), 316 deletions(-)
 create mode 100644 web/css/fonts/awesome5/fa-brands-400.svg
 create mode 100644 web/css/fonts/awesome5/fa-brands-400.ttf
 create mode 100644 web/css/fonts/awesome5/fa-brands-400.woff
 create mode 100644 web/css/fonts/awesome5/fa-brands-400.woff2
 create mode 100644 web/css/fonts/awesome5/fa-regular-400.eot
 create mode 100644 web/css/fonts/awesome5/fa-regular-400.svg
 create mode 100644 web/css/fonts/awesome5/fa-regular-400.ttf
 create mode 100644 web/css/fonts/awesome5/fa-regular-400.woff
 create mode 100644 web/css/fonts/awesome5/fa-regular-400.woff2
 create mode 100644 web/css/fonts/awesome5/fa-solid-900.eot
 create mode 100644 web/css/fonts/awesome5/fa-solid-900.ttf
 create mode 100644 web/css/fonts/awesome5/fa-solid-900.woff
 create mode 100644 web/css/fonts/awesome5/fa-solid-900.woff2
 create mode 100644 web/css/fonts/font_awesome5.css
 create mode 100644 web/css/fonts/font_lobster.css
 create mode 100644 web/css/fonts/font_sans_pro.css
 create mode 100644 web/css/fonts/lobster/neILzCirqoswsqX9_oU.ttf
 create mode 100644 web/css/fonts/sanspro/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPa7g.ttf
 create mode 100644 web/css/fonts/sanspro/6xK3dSBYKcSV-LCoeQqfX1RYOo3aPw.ttf
 create mode 100644 web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lBdr.ttf
 create mode 100644 web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokRdr.ttf
 create mode 100644 web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkhdr.ttf
 create mode 100644 web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclRdr.ttf
 create mode 100644 web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZklxdr.ttf
 create mode 100644 web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rAkA.ttf
 create mode 100644 web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3i94_AkA.ttf
 create mode 100644 web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vAkA.ttf
 create mode 100644 web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zAkA.ttf
 create mode 100644 web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nAkA.ttf
 create mode 100644 web/templates/right.html

diff --git a/web/css/fonts/awesome5/fa-brands-400.svg b/web/css/fonts/awesome5/fa-brands-400.svg
new file mode 100644
index 00000000..46ad237a
--- /dev/null
+++ b/web/css/fonts/awesome5/fa-brands-400.svg
@@ -0,0 +1,3570 @@
+<?xml version="1.0" standalone="no"?>
+<!--
+Font Awesome Free 5.13.0 by @fontawesome - https://fontawesome.com
+License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License)
+-->
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" >
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1">
+<metadata>
+Created by FontForge 20190801 at Mon Mar 23 10:45:51 2020
+ By Robert Madole
+Copyright (c) Font Awesome
+</metadata>
+<defs>
+<font id="FontAwesome5Brands-Regular" horiz-adv-x="448" >
+  <font-face 
+    font-family="Font Awesome 5 Brands Regular"
+    font-weight="400"
+    font-stretch="normal"
+    units-per-em="512"
+    panose-1="2 0 5 3 0 0 0 0 0 0"
+    ascent="448"
+    descent="-64"
+    bbox="-0.200195 -66.9505 641.5 448.3"
+    underline-thickness="25"
+    underline-position="-50"
+    unicode-range="U+0020-F957"
+  />
+    <missing-glyph />
+    <glyph glyph-name="twitter-square" unicode="&#xf081;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM351.1 257.2c12.8008 9.2998 24 20.8994 32.9004 34c-11.7998 -5.10059 -24.5996 -8.7998 -37.7998 -10.2002
+c13.5996 8.09961 23.8994 20.9004 28.7998 36.0996c-12.5996 -7.5 -26.7998 -13 -41.5996 -15.7998c-12 12.7998 -29 20.7002 -47.9004 20.7002c-40 0 -73.2998 -36.0996 -64 -80.5996c-54.4004 2.7998 -102.9 28.7998 -135.2 68.5996
+c-5.7002 -9.7002 -8.89941 -20.9004 -8.89941 -33.0996v-0.107422c0 -19.3584 13.0811 -43.7715 29.1992 -54.4932c-10.6992 0.400391 -20.8994 3.40039 -29.5996 8.2998v-0.799805c0 -31.8994 22.5 -58.2998 52.5 -64.3994
+c-10.4004 -2.7002 -19.5 -2.7002 -29.5996 -1.2002c8.2998 -26 32.5 -44.9004 61.2998 -45.5c-22.5 -17.6006 -50.7002 -28 -81.4004 -28c-5.39941 0 -10.5 0.200195 -15.7998 0.799805c29 -18.5996 63.5 -29.4004 100.7 -29.4004c120.6 0 186.6 99.9004 186.6 186.601
+c0 2.7998 0 5.7002 -0.200195 8.5z" />
+    <glyph glyph-name="facebook-square" unicode="&#xf082;" 
+d="M400 416c26.4961 0 48 -21.5039 48 -48v-352c0 -26.4961 -21.5039 -48 -48 -48h-137.25v152.31h57.7803l11 71.6904h-68.7803v46.5498c0 19.6104 9.61035 38.7305 40.4199 38.7305h31.2705v61s-28.3809 4.83984 -55.5205 4.83984
+c-56.6699 0 -93.6699 -34.3301 -93.6699 -96.4805v-54.6396h-63v-71.6904h63v-152.31h-137.25c-26.4961 0 -48 21.5039 -48 48v352c0 26.4961 21.5039 48 48 48h352z" />
+    <glyph glyph-name="linkedin" unicode="&#xf08c;" 
+d="M416 416c17.5996 0 32 -14.5 32 -32.2998v-383.4c0 -17.7998 -14.4004 -32.2998 -32 -32.2998h-384.1c-17.6006 0 -31.9004 14.5 -31.9004 32.2998v383.4c0 17.7998 14.2998 32.2998 31.9004 32.2998h384.1zM135.4 32h0.0996094v213.8h-66.5v-213.8h66.4004zM102.2 275
+c21.2998 0 38.5 17.2002 38.5 38.5c0 21.2002 -17.2998 38.5 -38.5 38.5c-21.2998 0 -38.5 -17.2998 -38.5 -38.5s17.2002 -38.5 38.5 -38.5zM384.3 32v117.2c0 57.5996 -12.5 101.899 -79.7002 101.899c-32.2998 0 -54 -17.6992 -62.8994 -34.5h-0.900391v29.2002h-63.7002
+v-213.8h66.4004v105.8c0 27.9004 5.2998 54.9004 39.9004 54.9004c34 0 34.5 -31.9004 34.5 -56.7002v-104h66.3994z" />
+    <glyph glyph-name="github-square" unicode="&#xf092;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM277.3 32.2998c66 22 110.8 84.9004 110.7 158.3c0 91.8008 -74.4004 161.5 -166.2 161.5s-162 -69.6992 -162 -161.5
+c0 -73.3994 46.2002 -136.199 112.2 -158.3c8.5 -1.5 11.5 3.7002 11.5 8c0 4.10059 -0.200195 26.7002 -0.200195 40.6006c0 0 -46.3994 -10 -56.0996 19.6992c0 0 -7.60059 19.2002 -18.4004 24.2002c0 0 -15.0996 10.4004 1.10059 10.2002
+c0 0 16.3994 -1.2998 25.5 -17.0996c14.5 -25.6006 38.7998 -18.2002 48.2998 -13.9004c1.5 10.5996 5.7998 18 10.5996 22.2998c-37 4.10059 -74.2998 9.5 -74.2998 73.1006c0 18.1992 5 27.2998 15.5996 39c-1.7998 4.39941 -7.39941 22.0996 1.7002 45
+c13.9004 4.2998 45.7002 -17.9004 45.7002 -17.9004c13.2002 3.7002 27.5 5.59961 41.5996 5.59961c14.1006 0 28.4004 -1.89941 41.6006 -5.59961c0 0 31.7998 22.2002 45.7002 17.9004c9.09961 -23 3.39941 -40.7002 1.69922 -45
+c10.6006 -11.7002 17.1006 -20.8008 17.1006 -39c0 -63.9004 -39 -69 -76 -73.1006c6.09961 -5.2002 11.2998 -15.0996 11.2998 -30.7002c0 -22.2998 -0.200195 -49.8994 -0.200195 -55.2998c0 -4.2998 3.10059 -9.5 11.5 -8zM179.2 93.4004
+c-1.90039 -0.400391 -3.7002 0.399414 -3.90039 1.69922c-0.200195 1.5 1.10059 2.80078 3 3.2002c1.90039 0.200195 3.7002 -0.599609 3.90039 -1.89941c0.299805 -1.30078 -1 -2.60059 -3 -3zM169.7 94.2998c0 1.5 -1.7998 2.60059 -3.7002 2.40039
+c-2 0 -3.5 -1.10059 -3.5 -2.40039c0 -1.5 1.5 -2.59961 3.7002 -2.39941c2 0 3.5 1.09961 3.5 2.39941zM156 95.4004c-0.400391 -1.30078 -2.40039 -1.90039 -4.09961 -1.30078c-1.90039 0.400391 -3.2002 1.90039 -2.80078 3.2002
+c0.400391 1.2998 2.40039 1.90039 4.10059 1.5c2 -0.599609 3.2998 -2.09961 2.7998 -3.39941zM143.7 100.8c0.899414 0.799805 0.399414 2.7998 -0.900391 4.10059c-1.5 1.5 -3.39941 1.69922 -4.2998 0.599609c-1 -0.900391 -0.599609 -2.7998 0.900391 -4.09961
+c1.5 -1.5 3.39941 -1.7002 4.2998 -0.600586zM134.6 109.9c1.10059 0.799805 1.10059 2.59961 0 4.09961c-0.899414 1.5 -2.59961 2.2002 -3.69922 1.2998c-1.10059 -0.700195 -1.10059 -2.39941 0 -3.89941c1.09961 -1.5 2.7998 -2.10059 3.69922 -1.5zM128.1 119.6
+c0.900391 0.700195 0.700195 2.2002 -0.399414 3.5c-1.10059 1 -2.60059 1.5 -3.5 0.600586c-0.900391 -0.700195 -0.700195 -2.2002 0.399414 -3.5c1.10059 -1 2.60059 -1.5 3.5 -0.600586zM121.4 127c0.399414 0.799805 -0.200195 1.90039 -1.5 2.59961
+c-1.30078 0.5 -2.40039 0.200195 -2.80078 -0.399414c-0.399414 -0.900391 0.200195 -2 1.5 -2.60059c1.10059 -0.699219 2.40039 -0.5 2.80078 0.400391z" />
+    <glyph glyph-name="twitter" unicode="&#xf099;" horiz-adv-x="512" 
+d="M459.37 296.284c0.325195 -4.54785 0.325195 -9.09766 0.325195 -13.6455c0 -138.72 -105.583 -298.558 -298.559 -298.558c-59.4521 0 -114.68 17.2188 -161.137 47.1055c8.44727 -0.973633 16.5684 -1.29883 25.3398 -1.29883
+c49.0547 0 94.2129 16.5684 130.274 44.832c-46.1318 0.975586 -84.792 31.1885 -98.1123 72.7725c6.49805 -0.974609 12.9951 -1.62402 19.8184 -1.62402c9.4209 0 18.8428 1.2998 27.6133 3.57324c-48.0811 9.74707 -84.1426 51.9795 -84.1426 102.984v1.29883
+c13.9688 -7.79688 30.2139 -12.6699 47.4307 -13.3184c-28.2637 18.8428 -46.7803 51.0049 -46.7803 87.3906c0 19.4922 5.19629 37.3604 14.2939 52.9541c51.6543 -63.6748 129.3 -105.258 216.364 -109.807c-1.62402 7.79688 -2.59863 15.918 -2.59863 24.04
+c0 57.8271 46.7822 104.934 104.934 104.934c30.2139 0 57.502 -12.6699 76.6709 -33.1367c23.7148 4.54785 46.4551 13.3193 66.5986 25.3398c-7.79785 -24.3662 -24.3662 -44.833 -46.1318 -57.8271c21.1172 2.27344 41.584 8.12207 60.4258 16.2432
+c-14.292 -20.791 -32.1611 -39.3086 -52.6279 -54.2529z" />
+    <glyph glyph-name="facebook" unicode="&#xf09a;" horiz-adv-x="512" 
+d="M504 192c0 -123.78 -90.6904 -226.38 -209.25 -245v173.31h57.7803l11 71.6904h-68.7803v46.5498c0 19.6104 9.61035 38.7305 40.4102 38.7305h31.2803v61s-28.3809 4.83984 -55.5205 4.83984c-56.6699 0 -93.6699 -34.3301 -93.6699 -96.4805v-54.6396h-63v-71.6904h63
+v-173.31c-118.56 18.6201 -209.25 121.22 -209.25 245c0 137 111 248 248 248s248 -111 248 -248z" />
+    <glyph glyph-name="github" unicode="&#xf09b;" horiz-adv-x="496" 
+d="M165.9 50.5996c0 -2 -2.30078 -3.59961 -5.2002 -3.59961c-3.2998 -0.299805 -5.60059 1.2998 -5.60059 3.59961c0 2 2.30078 3.60059 5.2002 3.60059c3 0.299805 5.60059 -1.2998 5.60059 -3.60059zM134.8 55.0996c0.700195 2 3.60059 3 6.2002 2.30078
+c3 -0.900391 4.90039 -3.2002 4.2998 -5.2002c-0.599609 -2 -3.59961 -3 -6.2002 -2c-3 0.599609 -5 2.89941 -4.2998 4.89941zM179 56.7998c2.90039 0.299805 5.59961 -1 5.90039 -2.89941c0.299805 -2 -1.7002 -3.90039 -4.60059 -4.60059
+c-3 -0.700195 -5.59961 0.600586 -5.89941 2.60059c-0.300781 2.2998 1.69922 4.19922 4.59961 4.89941zM244.8 440c138.7 0 251.2 -105.3 251.2 -244c0 -110.9 -67.7998 -205.8 -167.8 -239c-12.7002 -2.2998 -17.2998 5.59961 -17.2998 12.0996
+c0 8.2002 0.299805 49.9004 0.299805 83.6006c0 23.5 -7.7998 38.5 -17 46.3994c55.8994 6.30078 114.8 14 114.8 110.5c0 27.4004 -9.7998 41.2002 -25.7998 58.9004c2.59961 6.5 11.0996 33.2002 -2.60059 67.9004c-20.8994 6.59961 -69 -27 -69 -27
+c-20 5.59961 -41.5 8.5 -62.7998 8.5s-42.7998 -2.90039 -62.7998 -8.5c0 0 -48.0996 33.5 -69 27c-13.7002 -34.6006 -5.2002 -61.4004 -2.59961 -67.9004c-16 -17.5996 -23.6006 -31.4004 -23.6006 -58.9004c0 -96.1992 56.4004 -104.3 112.3 -110.5
+c-7.19922 -6.59961 -13.6992 -17.6992 -16 -33.6992c-14.2998 -6.60059 -51 -17.7002 -72.8994 20.8994c-13.7002 23.7998 -38.6006 25.7998 -38.6006 25.7998c-24.5 0.300781 -1.59961 -15.3994 -1.59961 -15.3994c16.4004 -7.5 27.7998 -36.6006 27.7998 -36.6006
+c14.7002 -44.7998 84.7002 -29.7998 84.7002 -29.7998c0 -21 0.299805 -55.2002 0.299805 -61.3994c0 -6.5 -4.5 -14.4004 -17.2998 -12.1006c-99.7002 33.4004 -169.5 128.3 -169.5 239.2c0 138.7 106.1 244 244.8 244zM97.2002 95.0996
+c1.2998 1.30078 3.59961 0.600586 5.2002 -1c1.69922 -1.89941 2 -4.19922 0.699219 -5.19922c-1.2998 -1.30078 -3.59961 -0.600586 -5.19922 1c-1.7002 1.89941 -2 4.19922 -0.700195 5.19922zM86.4004 103.2c0.699219 1 2.2998 1.2998 4.2998 0.700195
+c2 -1 3 -2.60059 2.2998 -3.90039c-0.700195 -1.40039 -2.7002 -1.7002 -4.2998 -0.700195c-2 1 -3 2.60059 -2.2998 3.90039zM118.8 67.5996c1.2998 1.60059 4.2998 1.30078 6.5 -1c2 -1.89941 2.60059 -4.89941 1.2998 -6.19922
+c-1.2998 -1.60059 -4.19922 -1.30078 -6.5 1c-2.2998 1.89941 -2.89941 4.89941 -1.2998 6.19922zM107.4 82.2998c1.59961 1.2998 4.19922 0.299805 5.59961 -2c1.59961 -2.2998 1.59961 -4.89941 0 -6.2002c-1.2998 -1 -4 0 -5.59961 2.30078
+c-1.60059 2.2998 -1.60059 4.89941 0 5.89941z" />
+    <glyph glyph-name="pinterest" unicode="&#xf0d2;" horiz-adv-x="496" 
+d="M496 192c0 -137 -111 -248 -248 -248c-25.5996 0 -50.2002 3.90039 -73.4004 11.0996c10.1006 16.5 25.2002 43.5 30.8008 65c3 11.6006 15.3994 59 15.3994 59c8.10059 -15.3994 31.7002 -28.5 56.7998 -28.5c74.8008 0 128.7 68.8008 128.7 154.301
+c0 81.8994 -66.8994 143.199 -152.899 143.199c-107 0 -163.9 -71.7998 -163.9 -150.1c0 -36.4004 19.4004 -81.7002 50.2998 -96.0996c4.7002 -2.2002 7.2002 -1.2002 8.2998 3.2998c0.800781 3.39941 5 20.2998 6.90039 28.0996
+c0.599609 2.5 0.299805 4.7002 -1.7002 7.10059c-10.0996 12.5 -18.2998 35.2998 -18.2998 56.5996c0 54.7002 41.4004 107.6 112 107.6c60.9004 0 103.6 -41.5 103.6 -100.899c0 -67.1006 -33.8994 -113.601 -78 -113.601c-24.2998 0 -42.5996 20.1006 -36.6992 44.8008
+c7 29.5 20.5 61.2998 20.5 82.5996c0 19 -10.2002 34.9004 -31.4004 34.9004c-24.9004 0 -44.9004 -25.7002 -44.9004 -60.2002c0 -22 7.40039 -36.7998 7.40039 -36.7998s-24.5 -103.801 -29 -123.2c-5 -21.4004 -3 -51.6006 -0.900391 -71.2002
+c-92.1992 36.0996 -157.6 125.9 -157.6 231c0 137 111 248 248 248s248 -111 248 -248z" />
+    <glyph glyph-name="pinterest-square" unicode="&#xf0d3;" 
+d="M448 368v-352c0 -26.5 -21.5 -48 -48 -48h-245.6c9.7998 16.4004 22.3994 40 27.3994 59.2998c3 11.5 15.2998 58.4004 15.2998 58.4004c8 -15.2998 31.4004 -28.2002 56.3008 -28.2002c74.0996 0 127.399 68.0996 127.399 152.7
+c0 81.0996 -66.2002 141.8 -151.399 141.8c-106 0 -162.2 -71.0996 -162.2 -148.6c0 -36 19.2002 -80.8008 49.7998 -95.1006c4.7002 -2.2002 7.09961 -1.2002 8.2002 3.2998c0.799805 3.40039 5 20.1006 6.7998 27.8008c0.599609 2.5 0.299805 4.59961 -1.7002 7
+c-10.0996 12.2998 -18.2998 34.8994 -18.2998 56c0 54.1992 41 106.6 110.9 106.6c60.2998 0 102.6 -41.0996 102.6 -99.9004c0 -66.3994 -33.5 -112.399 -77.2002 -112.399c-24.0996 0 -42.0996 19.8994 -36.3994 44.3994c6.89941 29.2002 20.2998 60.7002 20.2998 81.8008
+c0 53 -75.5 45.6992 -75.5 -25c0 -21.7002 7.2998 -36.5 7.2998 -36.5c-31.4004 -132.801 -36.0996 -134.5 -29.5996 -192.601l2.19922 -0.799805h-88.5996c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352c26.5 0 48 -21.5 48 -48z" />
+    <glyph glyph-name="google-plus-square" unicode="&#xf0d4;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM164 92c57.7002 0 96 40.5 96 97.5996c0 6.5 -0.599609 11.6006 -1.59961 16.6006h-94.4004v-34.4004h56.9004
+c-2.40039 -14.5996 -17.2002 -43.0996 -56.8008 -43.0996c-34.0996 0 -61.8994 28.2998 -61.8994 63.2002c0 35 27.7998 63.1992 61.8994 63.1992c19.5 0 32.4004 -8.2998 39.8008 -15.3994l27.0996 26.0996c-17.5 16.4004 -40 26.2002 -67 26.2002
+c-55.2998 0 -100 -44.7002 -100 -100s44.7002 -100 100 -100zM384 173.8v29.2002h-29v29h-29.2002v-29h-29v-29.2002h29v-29h29.2002v29h29z" />
+    <glyph glyph-name="google-plus-g" unicode="&#xf0d5;" horiz-adv-x="640" 
+d="M386.061 219.504c1.83398 -9.69238 3.14355 -19.3838 3.14355 -31.9561c0 -109.753 -73.6055 -187.548 -184.404 -187.548c-106.084 0 -192 85.915 -192 192s85.916 192 192 192c51.8643 0 95.083 -18.8594 128.611 -50.292l-52.126 -50.0303
+c-14.1455 13.6211 -39.0283 29.5996 -76.4854 29.5996c-65.4834 0 -118.92 -54.2217 -118.92 -121.277s53.4365 -121.277 118.92 -121.277c75.9609 0 104.514 54.7451 108.965 82.7734h-108.965v66.0088h181.261v-0.000976562zM571.467 213.067h55.7334v-56.001h-55.7334
+v-55.7334h-56.001v55.7334h-55.7324v56.001h55.7324v55.7324h56.001v-55.7324z" />
+    <glyph glyph-name="linkedin-in" unicode="&#xf0e1;" 
+d="M100.28 0h-92.8799v299.1h92.8799v-299.1zM53.79 339.9c-29.7002 0 -53.79 24.5996 -53.79 54.2998c0 29.6914 24.0977 53.79 53.79 53.79s53.79 -24.0986 53.79 -53.79c0 -29.7002 -24.0996 -54.2998 -53.79 -54.2998zM447.9 0h-92.6807v145.6
+c0 34.7002 -0.700195 79.2002 -48.29 79.2002c-48.29 0 -55.6895 -37.7002 -55.6895 -76.7002v-148.1h-92.7803v299.1h89.0801v-40.7998h1.2998c12.4004 23.5 42.6904 48.2998 87.8799 48.2998c94 0 111.28 -61.8994 111.28 -142.3v-164.3h-0.0996094z" />
+    <glyph glyph-name="github-alt" unicode="&#xf113;" horiz-adv-x="480" 
+d="M186.1 119.3c0 -20.8994 -10.8994 -55.0996 -36.6992 -55.0996c-25.8008 0 -36.7002 34.2002 -36.7002 55.0996c0 20.9004 10.8994 55.1006 36.7002 55.1006c25.7998 0 36.6992 -34.2002 36.6992 -55.1006zM480 169.8c0 -31.8994 -3.2002 -65.7002 -17.5 -95
+c-37.9004 -76.5996 -142.1 -74.7998 -216.7 -74.7998c-75.7998 0 -186.2 -2.7002 -225.6 74.7998c-14.6006 29 -20.2002 63.1006 -20.2002 95c0 41.9004 13.9004 81.5 41.5 113.601c-5.2002 15.7998 -7.7002 32.3994 -7.7002 48.7998
+c0 21.5 4.90039 32.2998 14.6006 51.7998c45.2998 0 74.2998 -9 108.8 -36c29 6.90039 58.7998 10 88.7002 10c27 0 54.1992 -2.90039 80.3994 -9.2002c34 26.7002 63 35.2002 107.8 35.2002c9.80078 -19.5 14.6006 -30.2998 14.6006 -51.7998
+c0 -16.4004 -2.60059 -32.7002 -7.7002 -48.2002c27.5 -32.4004 39 -72.2998 39 -114.2zM415.7 119.3c0 43.9004 -26.7002 82.6006 -73.5 82.6006c-18.9004 0 -37 -3.40039 -56 -6c-14.9004 -2.30078 -29.7998 -3.2002 -45.1006 -3.2002
+c-15.1992 0 -30.0996 0.899414 -45.0996 3.2002c-18.7002 2.59961 -37 6 -56 6c-46.7998 0 -73.5 -38.7002 -73.5 -82.6006c0 -87.7998 80.4004 -101.3 150.4 -101.3h48.1992c70.3008 0 150.601 13.4004 150.601 101.3zM333.1 174.4
+c25.8008 0 36.7002 -34.2002 36.7002 -55.1006c0 -20.8994 -10.8994 -55.0996 -36.7002 -55.0996c-25.7998 0 -36.6992 34.2002 -36.6992 55.0996c0 20.9004 10.8994 55.1006 36.6992 55.1006z" />
+    <glyph glyph-name="maxcdn" unicode="&#xf136;" horiz-adv-x="512" 
+d="M461.1 5.2998h-97.3994l51.8994 242.7c2.30078 10.2002 0.900391 19.5 -4.39941 25.7002c-5 6.09961 -13.7002 9.59961 -24.2002 9.59961h-49.2998l-59.5 -278h-97.4004l59.5 278h-83.3994l-59.5 -278h-97.4004l59.5 278l-44.5996 95.4004h372.1
+c39.4004 0 75.2998 -16.2998 98.2998 -44.9004c23.2998 -28.5996 31.7998 -67.3994 23.6006 -105.899z" />
+    <glyph glyph-name="html5" unicode="&#xf13b;" horiz-adv-x="384" 
+d="M0 416h384l-34.9004 -395.8l-157.6 -52.2002l-156.6 52.2002zM308.2 288.1l4.39941 47.7002h-241.1l12.7998 -145.6h166.9l-6 -62.2002l-53.7002 -14.5l-53.5 14.5l-3.5 38.0996h-47.7002l6 -75.7998l98.7002 -27.2998h1.09961v0.299805l97.9004 27l13.5996 148.4h-175.6
+l-4.09961 49.3994h183.8z" />
+    <glyph glyph-name="css3" unicode="&#xf13c;" horiz-adv-x="512" 
+d="M480 416l-64 -368l-223.3 -80l-192.7 80l19.5996 94.7998h82l-8 -40.5996l116.4 -44.4004l134.1 44.4004l18.8008 97.0996h-333.4l16 82h333.7l10.5 52.7002h-333.4l16.2998 82h407.4z" />
+    <glyph glyph-name="btc" unicode="&#xf15a;" horiz-adv-x="384" 
+d="M310.204 205.362c46.0059 -11.0283 74.9971 -38.4443 69.3262 -99.8906c-7.24805 -76.5723 -61.5967 -97.0547 -142.896 -101.467v-68.0049h-48.5273v66.7451c-12.29 0 -25.21 0 -38.4443 0.314453v-67.0596h-48.5283v68.0049s-8.88867 0.31543 -97.3701 0.31543
+l9.76758 57.666c34.7305 -0.614258 50.3301 -3.4209 53.2549 16.0703v217.43c-4.60645 24.5664 -24.709 22.1045 -63.0234 21.4268v51.6777c58.748 -0.275391 79.5283 -0.539062 97.3701 0v79.4092h48.5283v-77.833c12.9189 0.31543 25.8389 0.629883 38.4443 0.629883
+v77.2031h48.5273v-79.4092c62.3926 -5.35547 109.492 -24.5781 114.851 -81.9287c4.09668 -41.9102 -13.5508 -67.1201 -41.2803 -81.2998zM150.608 313.447v-96.7402c27.416 0 113.126 -6.30273 113.126 48.2119c0 57.0352 -85.7109 48.5283 -113.126 48.5283z
+M150.608 61.6709c32.7715 0 133.126 -6.93262 133.127 53.2529c0 62.3936 -100.355 53.2549 -133.127 53.2549v-106.508z" />
+    <glyph glyph-name="youtube" unicode="&#xf167;" horiz-adv-x="576" 
+d="M549.655 323.917c11.4121 -42.8672 11.4121 -132.305 11.4121 -132.305s0 -89.4385 -11.4121 -132.306c-6.28125 -23.6494 -24.7871 -41.5 -48.2842 -47.8203c-42.5908 -11.4863 -213.371 -11.4863 -213.371 -11.4863s-170.78 0 -213.371 11.4863
+c-23.4971 6.32031 -42.0029 24.1709 -48.2842 47.8203c-11.4121 42.8672 -11.4121 132.306 -11.4121 132.306s0 89.4375 11.4121 132.305c6.28125 23.6504 24.7871 42.2754 48.2842 48.5967c42.5908 11.4863 213.371 11.4863 213.371 11.4863s170.781 0 213.371 -11.4863
+c23.4971 -6.32031 42.0029 -24.9463 48.2842 -48.5967zM232.145 110.409l142.739 81.2012l-142.739 81.2051v-162.406z" />
+    <glyph glyph-name="xing" unicode="&#xf168;" horiz-adv-x="384" 
+d="M162.7 238c-1.7998 -3.2998 -25.2002 -44.4004 -70.1006 -123.5c-4.89941 -8.2998 -10.7998 -12.5 -17.6992 -12.5h-65.1006c-7.7002 0 -12.0996 7.5 -8.5 14.4004l69 121.3c0.200195 0 0.200195 0.0996094 0 0.299805l-43.8994 75.5996
+c-4.30078 7.80078 0.299805 14.1006 8.5 14.1006h65.0996c7.2998 0 13.2998 -4.10059 18 -12.2002zM382.6 401.9l-144 -253v-0.300781l91.6006 -166.6c3.89941 -7.09961 0.200195 -14.0996 -8.5 -14.0996h-65.2002c-7.59961 0 -13.5996 4 -18 12.1992l-92.4004 168.5
+c3.30078 5.80078 51.5 90.8008 144.801 255.2c4.59961 8.10059 10.3994 12.2002 17.5 12.2002h65.6992c8 0 12.3008 -6.7002 8.5 -14.0996z" />
+    <glyph glyph-name="xing-square" unicode="&#xf169;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM140.4 127.8c4.89941 0 9.09961 2.90039 12.5996 9.10059c32.0996 56.5 48.7998 85.8994 50.0996 88.1992l-31.8994 55.3008
+c-3.40039 5.7998 -7.7002 8.69922 -12.9004 8.69922h-46.5996c-5.7998 0 -9 -4.5 -6 -10.0996l31.3994 -54c0.100586 -0.0996094 0.100586 -0.200195 0 -0.200195l-49.2998 -86.7002c-2.7002 -5 0.5 -10.2998 6 -10.2998h46.6006zM360.1 341.9
+c2.80078 5.2998 -0.299805 10.0996 -6 10h-46.8994c-5.10059 0 -9.2002 -2.90039 -12.5 -8.7002c-66.6006 -117.4 -101.101 -178.2 -103.4 -182.3l66 -120.301c3.2002 -5.7998 7.40039 -8.69922 12.9004 -8.69922h46.5996c6.10059 0 8.7998 5 6 10.0996l-65.5 119v0.200195z
+" />
+    <glyph glyph-name="dropbox" unicode="&#xf16b;" horiz-adv-x="528" 
+d="M264.4 331.7l-132 -84.2998l132 -84.3008l-132 -84.2998l-132.4 85.1006l132.3 84.2998l-132.3 83.5l132.3 84.2998zM131.6 52.2998l132 84.2998l132 -84.2998l-132 -84.2998zM264.4 163.9l132 84.2998l-132 83.5996l131.3 84.2002l132.3 -84.2998l-132.3 -84.2998
+l132.3 -84.2002l-132.3 -84.2998z" />
+    <glyph glyph-name="stack-overflow" unicode="&#xf16c;" horiz-adv-x="384" 
+d="M290.7 137l-8.2002 -39l-195.7 41l8.2002 39.2998zM341.7 224l-25.5 -30.7998l-153.5 128.3l25.5 30.7998zM310.5 184.3l-16.7998 -36.2998l-181.2 84.5l16.7002 36.5zM262 416l119.3 -160.3l-32 -24l-119.3 160.3zM282.5 88v-39.7002h-200v39.7002h200zM322.2 8v120h40
+v-160h-359.5v160h40v-120h279.5z" />
+    <glyph glyph-name="instagram" unicode="&#xf16d;" 
+d="M224.1 307c63.6006 0 114.9 -51.2998 114.9 -114.9c0 -63.5996 -51.2998 -114.899 -114.9 -114.899c-63.5996 0 -114.899 51.2998 -114.899 114.899c0 63.6006 51.2998 114.9 114.899 114.9zM224.1 117.4c41.1006 0 74.7002 33.5 74.7002 74.6992
+c0 41.2002 -33.5 74.7002 -74.7002 74.7002c-41.1992 0 -74.6992 -33.5 -74.6992 -74.7002c0 -41.1992 33.5996 -74.6992 74.6992 -74.6992zM370.5 311.7c0 -14.9004 -12 -26.7998 -26.7998 -26.7998c-14.9004 0 -26.7998 12 -26.7998 26.7998s12 26.7998 26.7998 26.7998
+s26.7998 -12 26.7998 -26.7998zM446.6 284.5c2.10059 -37 2.10059 -147.8 0 -184.8c-1.7998 -35.9004 -10 -67.7002 -36.1992 -93.9004c-26.2002 -26.2998 -58 -34.5 -93.9004 -36.2002c-37 -2.09961 -147.9 -2.09961 -184.9 0
+c-35.8994 1.80078 -67.5996 10 -93.8994 36.2002s-34.5 58 -36.2002 93.9004c-2.09961 37 -2.09961 147.899 0 184.899c1.7998 35.9004 9.90039 67.7002 36.2002 93.9004s58.0996 34.4004 93.8994 36.0996c37 2.10059 147.9 2.10059 184.9 0
+c35.9004 -1.7998 67.7002 -10 93.9004 -36.1992c26.2998 -26.2002 34.5 -58 36.1992 -93.9004zM398.8 60c11.7002 29.4004 9 99.5 9 132.1c0 32.6006 2.7002 102.601 -9 132.101c-7.89941 19.7002 -23 34.7998 -42.5996 42.5996c-29.4004 11.6006 -99.5 9 -132.101 9
+c-32.5996 0 -102.6 2.7002 -132.1 -9c-19.7002 -7.89941 -34.7998 -23 -42.5996 -42.5996c-11.6006 -29.4004 -9 -99.5 -9 -132.101c0 -32.5996 -2.7002 -102.6 9 -132.1c7.89941 -19.7002 23 -34.7998 42.5996 -42.5996c29.4004 -11.6006 99.5 -9 132.1 -9
+c32.6006 0 102.601 -2.7002 132.101 9c19.7002 7.89941 34.7998 23 42.5996 42.5996z" />
+    <glyph glyph-name="flickr" unicode="&#xf16e;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM144.5 129c35.0996 0 63.5 28.4004 63.5 63.5s-28.4004 63.5 -63.5 63.5s-63.5 -28.4004 -63.5 -63.5s28.4004 -63.5 63.5 -63.5z
+M303.5 129c35.0996 0 63.5 28.4004 63.5 63.5s-28.4004 63.5 -63.5 63.5s-63.5 -28.4004 -63.5 -63.5s28.4004 -63.5 63.5 -63.5z" />
+    <glyph glyph-name="adn" unicode="&#xf170;" horiz-adv-x="496" 
+d="M248 280.5l64.9004 -98.7998h-129.801zM496 192c0 -136.9 -111.1 -248 -248 -248s-248 111.1 -248 248s111.1 248 248 248s248 -111.1 248 -248zM396.2 109.3l-148.2 223.2l-148.2 -223.2h30.4004l33.5996 51.7002h168.601l33.5996 -51.7002h30.2002z" />
+    <glyph glyph-name="bitbucket" unicode="&#xf171;" horiz-adv-x="512" 
+d="M22.2002 416l466.8 -0.200195c0.776367 -0.0107422 2.03027 -0.100586 2.7998 -0.200195c7.39648 -1.21875 13.3984 -8.29102 13.3984 -15.7871c0 -0.697266 -0.0888672 -1.82324 -0.198242 -2.5127l-67.9004 -416.8
+c-1.2168 -7.39746 -8.29004 -13.4014 -15.7871 -13.4014c-0.0585938 0 -0.154297 0.000976562 -0.212891 0.000976562h-325.699c-10.1016 0.0820312 -19.6445 8.23535 -21.3008 18.2002l-67.8994 412.101c-0.0966797 0.769531 -0.186523 2.02344 -0.200195 2.7998
+c0.108398 8.72168 7.27539 15.8008 15.999 15.8008c0.0556641 0 0.145508 0 0.201172 -0.000976562zM308.1 118.2l25.2002 147h-157.3l28.0996 -147h104z" />
+    <glyph glyph-name="tumblr" unicode="&#xf173;" horiz-adv-x="320" 
+d="M309.8 -32.2998c-13.5996 -14.5 -50 -31.7002 -97.3994 -31.7002c-120.801 0 -147 88.7998 -147 140.6v144h-47.5c-5.5 0 -10 4.5 -10 10v68c0 7.2002 4.5 13.6006 11.2998 16c62 21.8008 81.5 76 84.2998 117.101c0.799805 11 6.5 16.2998 16.0996 16.2998h70.9004
+c5.5 0 10 -4.5 10 -10v-115.2h83c5.5 0 10 -4.39941 10 -9.89941v-81.7002c0 -5.5 -4.5 -10 -10 -10h-83.4004v-133.2c0 -34.2002 23.7002 -53.5996 68 -35.7998c4.80078 1.89941 9 3.2002 12.7002 2.2002c3.5 -0.900391 5.7998 -3.40039 7.40039 -7.90039l22 -64.2998
+c1.7998 -5 3.2998 -10.6006 -0.400391 -14.5z" />
+    <glyph glyph-name="tumblr-square" unicode="&#xf174;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM317.7 51.7998c2.2998 2.40039 1.2998 5.90039 0.299805 9.10059l-13.7998 40.1992c-1 2.80078 -2.40039 4.40039 -4.60059 4.90039
+c-2.39941 0.599609 -5 -0.200195 -8 -1.40039c-27.6992 -11.0996 -42.5 1 -42.5 22.4004v83.2998h52.1006c3.39941 0 6.2002 2.7998 6.2002 6.2002v51.0996c0 3.40039 -2.80078 6.2002 -6.2002 6.2002h-51.9004v72c0 3.40039 -2.7998 6.2002 -6.2002 6.2002h-44.2998
+c-5.89941 0 -9.5 -3.2998 -10 -10.2002c-1.7998 -25.7002 -13.8994 -59.5 -52.7002 -73.2002c-4.2998 -1.5 -7.09961 -5.5 -7.09961 -10v-42.5c0 -3.39941 2.7998 -6.19922 6.2002 -6.19922h29.7002v-90c0 -32.4004 16.3994 -87.9004 91.8994 -87.9004
+c29.7002 0 52.4004 10.7002 60.9004 19.7998z" />
+    <glyph glyph-name="apple" unicode="&#xf179;" horiz-adv-x="384" 
+d="M318.7 179.3c0 -1.89941 -3.5 -61.2002 61.7002 -91.8994c-12.2002 -36.8008 -54 -118.601 -102.601 -119.301c-28.0996 0 -44.5996 17.9004 -76.3994 17.9004c-32.8008 0 -50.6006 -17.2998 -75.8008 -17.9004c-48.1992 -1.5 -94.3994 88.5 -107.199 125.2
+c-9.60059 27.9336 -14.4004 55 -14.4004 81.2002c0 88.7002 59.2998 132.3 115.1 133.2c27 0 61.4004 -19.7002 76.4004 -19.7002c14.2002 0 53 23.5 88.5 20.7002c37.5 -2.90039 65.9004 -17.7002 84.7002 -44.6006c-33.6006 -20.3994 -50.2002 -48.0996 -50 -84.7998z
+M262.1 343.5c-19.5996 -22.9004 -43.3994 -36.2998 -69.5 -34.2998c-2.19922 27.5996 8.10059 52.0996 25.6006 71.8994c15.8994 18.5 43.7998 33.5 67.8994 34.9004c0.800781 -10.5996 3.30078 -40.0996 -24 -72.5z" />
+    <glyph glyph-name="windows" unicode="&#xf17a;" 
+d="M0 354.3l183.6 25.2998v-177.399h-183.6v152.1zM0 29.7002v149.899h183.6v-175.199zM203.8 1.7002v177.899h244.2v-211.6zM203.8 382.3l244.2 33.7002v-213.8h-244.2v180.1z" />
+    <glyph glyph-name="android" unicode="&#xf17b;" horiz-adv-x="576" 
+d="M420.55 146.07c-13.248 0 -24 10.752 -24 24s10.752 24 24 24s24 -10.752 24 -24s-10.752 -24 -24 -24zM155.45 146.07c-13.248 0 -24 10.752 -24 24s10.752 24 24 24s24 -10.752 24 -24s-10.752 -24 -24 -24zM429.15 290.55l47.9395 83
+c0.936523 1.39551 1.69629 3.8916 1.69629 5.57227c0 5.51953 -4.47949 10 -10 10c-3.43066 0 -7.44727 -2.49609 -8.96582 -5.57227v0l-48.54 -84.0693c-32.4678 14.5615 -87.6973 26.3789 -123.28 26.3789s-90.8125 -11.8174 -123.28 -26.3789l-48.54 84.0693
+c-1.51855 3.07617 -5.53516 5.57227 -8.96582 5.57227c-5.52051 0 -10 -4.48047 -10 -10c0 -1.68066 0.759766 -4.17676 1.69629 -5.57227v0l47.9395 -83c-82.3193 -44.7695 -138.609 -128.1 -146.85 -226.55h576c-8.24023 98.4502 -64.54 181.78 -146.85 226.55z" />
+    <glyph glyph-name="linux" unicode="&#xf17c;" 
+d="M220.8 324.7c-1.09961 0.599609 -3.09961 0.399414 -3.39941 1.7002c-0.200195 0.399414 0.199219 0.899414 0.599609 1.09961c1.59961 0.900391 3.7998 0.599609 5.5 -0.0996094c1.2998 -0.600586 3.40039 -1.5 3.2002 -2.90039
+c-0.100586 -1.09961 -1.7998 -1.5 -2.90039 -1.5c-1.2002 0 -2 1.2002 -3 1.7002zM198.9 323c-1 -0.0996094 -2.7002 0.400391 -2.80078 1.40039c-0.199219 1.39941 1.90039 2.2998 3.2002 2.89941c1.7002 0.700195 3.90039 1 5.5 0.100586
+c0.400391 -0.200195 0.799805 -0.700195 0.600586 -1.10059c-0.400391 -1.2002 -2.40039 -1 -3.5 -1.59961c-1 -0.5 -1.80078 -1.7002 -3 -1.7002zM420 44.2002c11.0996 -12.4004 15.9004 -21.5 15.5 -29.7002c-0.5 -8.2002 -6.5 -13.7998 -13.9004 -18.2998
+c-14.8994 -9 -37.2998 -15.7998 -50.8994 -32.2002c-14.2002 -16.9004 -31.7002 -26.5996 -48.2998 -27.9004c-16.5 -1.2998 -32 6.30078 -40.3008 23v0.100586c-1.09961 2.09961 -1.89941 4.39941 -2.5 6.7002c-21.5 -1.2002 -40.1992 5.2998 -55.0996 4.09961
+c-22 -1.2002 -35.7998 -6.5 -48.2998 -6.59961c-4.7998 -10.6006 -14.2998 -17.6006 -25.9004 -20.2002c-16 -3.7002 -36.0996 0 -55.8994 10.3994c-18.5 9.80078 -42 8.90039 -59.3008 12.5c-8.69922 1.80078 -16.2998 5 -20.0996 12.3008
+c-3.7002 7.2998 -3 17.2998 2.2002 31.6992c1.7002 5.10059 0.399414 12.7002 -0.799805 20.8008c-0.600586 3.89941 -1.2002 7.89941 -1.2002 11.7998c0 4.2998 0.700195 8.5 2.7998 12.3994c4.5 8.5 11.7998 12.1006 18.5 14.5c6.7002 2.40039 12.7998 4 17 8.30078
+c5.2002 5.5 10.0996 14.3994 16.5996 20.1992c-2.59961 17.2002 0.200195 35.4004 6.2002 53.3008c12.6006 37.8994 39.2002 74.1992 58.1006 96.6992c16.0996 22.9004 20.7998 41.3008 22.5 64.7002c1.09961 31.7998 -24.5 135.4 77.8994 135.2
+c80.9004 -0.0996094 76.2998 -85.4004 75.7998 -131.3c-0.299805 -30.1006 16.3008 -50.5 33.4004 -72c15.2002 -18 35.0996 -44.2998 46.5 -74.4004c9.2998 -24.5996 12.9004 -51.7998 3.7002 -79.0996c1.39941 -0.5 2.7998 -1.2002 4.09961 -2
+c1.40039 -0.799805 2.7002 -1.7998 4 -2.90039c6.60059 -5.59961 8.7002 -14.2998 10.5 -22.3994c1.90039 -8.10059 3.60059 -15.7002 7.2002 -19.7002zM223.7 360.7c-3.2002 -7.2002 -3.90039 -14.9004 -2.90039 -21.7998c3.60059 -0.900391 8.90039 -2.40039 13 -4.40039
+c-2.09961 12.2002 4.5 23.5 11.7998 23c8.90039 -0.299805 13.9004 -15.5 9.10059 -27.2998c-0.799805 -1.90039 -2.7998 -3.40039 -3.90039 -4.60059c6.7002 -2.2998 11 -4.09961 12.6006 -4.89941c7.89941 9.5 10.7998 26.2002 4.2998 40.3994
+c-9.7998 21.4004 -34.2002 21.8008 -44 -0.399414zM183 372.2c-18.9004 0 -24 -37.5 -8.40039 -52.1006c7.80078 5.7002 6.90039 4.7002 5.90039 5.5c-8 6.90039 -6.59961 27.4004 1.7998 28.1006c6.2998 0.5 10.7998 -10.7002 9.60059 -19.6006
+c3.09961 2.10059 6.69922 3.60059 10.1992 4.60059c1.7002 19.2998 -9 33.5 -19.0996 33.5zM169.4 311.5c-4.2002 -3.2998 -5.60059 -7.40039 -4.2002 -12.2998c1.5 -4.90039 6.09961 -10.5 14.7002 -15.2998c7.7998 -4.60059 12 -11.5 20 -15
+c2.59961 -1.10059 5.69922 -1.90039 9.59961 -2.10059c18.4004 -1.09961 27.0996 11.2998 38.2002 14.9004c11.7002 3.7002 20.0996 11 22.7002 18.0996c3.19922 8.5 -2.10059 14.7002 -10.5 18.2002c-11.3008 4.90039 -16.3008 5.2002 -22.6006 9.2998
+c-10.2998 6.60059 -18.7998 8.90039 -25.8994 8.90039c-14.4004 0 -23.2002 -9.7998 -27.9004 -14.2002c-0.5 -0.5 -7.90039 -5.90039 -14.0996 -10.5zM172.7 -22.5c2.09961 20.5 -31.5 49 -41 68.9004l-19.6006 35.5996c-6.7998 9.2002 -13.7998 14.7998 -21.8994 16
+c-7.7002 1.2002 -12.6006 -1.40039 -17.7002 -6.90039c-4.7998 -5.09961 -8.7998 -12.2998 -14.2998 -18c-7.7998 -6.5 -9.2998 -6.19922 -19.6006 -9.89941c-6.2998 -2.2002 -11.2998 -4.60059 -14.7998 -11.2998c-2.7002 -5 -2.09961 -12.2002 -0.899414 -20
+c1.19922 -7.90039 3 -16.3008 0.599609 -23.9004v-0.200195c-5 -13.7002 -5 -21.7002 -2.59961 -26.3994c7.89941 -15.4004 46.5996 -6.10059 76.5 -21.9004c31.3994 -16.4004 72.5996 -17.0996 75.2998 18zM171.3 3.40039c37.6006 -25.7002 82.2002 -15.7002 114.3 7.19922
+c3.2002 11 6.30078 21.3008 6.80078 29c0.799805 15.2002 1.59961 28.7002 4.39941 39.9004c3.10059 12.5996 9.2998 23.0996 21.4004 27.2998c2.2998 21.1006 18.7002 21.1006 38.2998 12.5c18.9004 -8.5 26 -16 22.7998 -26.0996c1 0 2 0.0996094 4.2002 0
+c5.2002 16.8994 -14.2998 28 -30.7002 34.7998c2.90039 12 2.40039 24.0996 -0.399414 35.7002c-6 25.2998 -22.6006 47.7998 -35.2002 59c-2.2998 0.0996094 -2.10059 -1.90039 2.59961 -6.5c11.6006 -10.7002 37.1006 -49.2002 23.2998 -84.9004
+c-3.89941 1 -7.59961 1.5 -10.8994 1.40039c-5.2998 29.0996 -17.5 53.2002 -23.6006 64.5996c-11.5 21.4004 -29.5 65.2998 -37.1992 95.7002c-4.5 -6.40039 -12.4004 -11.9004 -22.3008 -15c-4.69922 -1.5 -9.69922 -5.5 -15.8994 -9
+c-13.9004 -8 -30 -8.7998 -42.4004 1.2002c-4.5 3.59961 -8 7.59961 -12.5996 10.2998c-1.60059 0.900391 -5.10059 3.2998 -6.2002 4.09961c-2 -37.7998 -27.2998 -85.2998 -39.2998 -112.699c-8.2998 -19.7002 -13.2002 -40.8008 -13.7998 -61.5
+c-21.8008 29.0996 -5.90039 66.2998 2.59961 82.3994c9.5 17.6006 11 22.5 8.7002 20.7998c-8.60059 -14 -22 -36.2998 -27.2002 -59.1992c-2.7002 -11.9004 -3.2002 -24 0.299805 -35.2002s11.1006 -21.5 24.6006 -29.9004c0 0 24.7998 -14.2998 38.2998 -32.5
+c7.39941 -10 9.7002 -18.7002 7.39941 -24.8994c-2.5 -6.7002 -9.59961 -8.90039 -16.6992 -8.90039c4.7998 -6 10.2998 -13 14.3994 -19.5996zM428.7 14.9004c0.299805 5.09961 -3.10059 13 -13.7002 24.5996c-10 11.2998 -7.2002 33.0996 -17.0996 41.5996
+c-6.90039 6 -13.6006 5.40039 -22.6006 5.10059c-7.7002 -8.7998 -25.7998 -19.6006 -38.3994 -16.2998c-11.5 2.89941 -18 16.2998 -18.8008 29.5c-0.299805 -0.200195 -0.699219 -0.300781 -1 -0.5c-7.09961 -3.90039 -11.0996 -10.8008 -13.6992 -21.1006
+c-2.5 -10.2002 -3.40039 -23.5 -4.2002 -38.7002c-0.700195 -11.7998 -6.2002 -26.3994 -9.90039 -40.5996c-3.5 -13.2002 -5.7998 -25.2002 -1.09961 -36.2998c7.2002 -14.5 19.5 -20.4004 33.7002 -19.2998c14.1992 1.09961 30.3994 9.7998 43.5996 25.5
+c22 26.5996 62.2998 29.6992 63.2002 46.5zM173.3 299.3c-3.5 2.7998 -3.09961 6.60059 -1.7002 6.5c2.40039 -0.299805 2.80078 -3.5 4.30078 -4.89941c2 -1.90039 4.59961 -4.40039 7.69922 -6.90039c6.2002 -4.90039 14.5 -9.7002 24.9004 -9.7002
+s22.5 6 29.9004 10.2002c4.19922 2.40039 9.5 6.59961 13.8994 9.7998c3.40039 2.5 3.2002 5.40039 6 5.10059c2.7998 -0.300781 0.799805 -3.2002 -3.09961 -6.60059c-3.90039 -3.39941 -9.90039 -7.7998 -14.7998 -10.3994
+c-9.30078 -4.90039 -20.2002 -10.8008 -31.8008 -10.8008c-11.5 0 -20.6992 5.40039 -27.2998 10.6006c-3.2998 2.59961 -6 5.2002 -8 7.09961z" />
+    <glyph glyph-name="dribbble" unicode="&#xf17d;" horiz-adv-x="512" 
+d="M256 440c136.748 0 248 -111.252 248 -248s-111.252 -248 -248 -248s-248 111.252 -248 248s111.252 248 248 248zM419.97 325.634c-4.46582 -6.04102 -39.9629 -51.5459 -118.284 -83.5225c7.43652 -15.2217 12.8652 -27.5732 18.6172 -41.6143
+c70.4844 8.86426 140.519 -5.34082 147.502 -6.81836c-0.46582 49.998 -18.332 95.9092 -47.835 131.955zM396.421 350.13c-52.0947 46.2188 -122.885 63.6816 -190.061 47.4893c5.85449 -7.83984 44.3281 -60.2324 79.04 -124.008
+c75.3232 28.2324 107.211 71.0918 111.021 76.5186zM165.941 383.38c-59.2637 -27.9531 -103.562 -82.585 -117.298 -148.318c9.47461 -0.125 96.7471 -0.503906 195.834 25.8096c-35.0986 62.3926 -72.9512 114.85 -78.5361 122.509zM44.1699 191.677
+c0 -54.4072 20.624 -104.082 54.457 -141.636c34.3369 58.7793 103.932 120.731 180.531 142.306c-5.31738 12.0342 -11.1104 24.0811 -17.1738 35.9492c-105.786 -31.6592 -208.438 -30.3359 -217.706 -30.1455c-0.0654297 -2.15137 -0.108398 -4.30762 -0.108398 -6.47363
+zM125.977 24.5645c62.7539 -48.9355 144.656 -56.8955 212.769 -27.8828c-3.15039 18.585 -15.4492 83.3555 -45.1895 160.639c-85.4004 -29.1348 -145.452 -87.5234 -167.579 -132.756zM374.357 16.0752c47.5215 32.1338 81.3525 83.0371 90.7949 141.978
+c-7.24707 2.28711 -65.5674 19.6816 -131.947 9.05566c27.7061 -76.1367 38.9805 -138.147 41.1523 -151.033z" />
+    <glyph glyph-name="skype" unicode="&#xf17e;" 
+d="M424.7 148.2c14.5996 -18.9004 23.2998 -42.5 23.2002 -68.1006c0 -61.7998 -50.2002 -112 -112 -112c-25.6006 0 -49.2002 8.7002 -68.2002 23.3008c-14.1006 -3 -28.9004 -4.7002 -43.7998 -4.7002c-113.4 0 -205.301 91.7998 -205.301 205.3
+c0 14.9004 1.80078 29.7998 4.7002 43.7998c-14.5996 18.9004 -23.2998 42.5 -23.2998 68.2002c0 61.7998 50.2002 112 112 112c25.7002 0 49.2998 -8.7002 68.2998 -23.4004c14.1006 3 28.9004 4.7002 43.7998 4.7002c113.4 0 205.301 -91.7998 205.301 -205.3
+c0 -14.9004 -1.80078 -29.7998 -4.7002 -43.7998zM230.1 56.7002c54.9004 0 112 27.3994 112 86.5c0 50.7998 -49.2998 68.2998 -90.6992 77.5996c-48.3008 11.2002 -69.1006 13.2002 -69.1006 33c0 15.5 16.2998 22.5 42 22.5c45.7998 0 46.7002 -33.5 75 -33.5
+c18.9004 0 30.2998 14.9004 30.2998 31.7998c0 33.5 -55.6992 55.4004 -110.8 55.4004c-50.5 0 -109.1 -21.9004 -109.1 -81.0996c0 -65.2002 55.2998 -71.8008 117.8 -87.2002c26 -6.40039 42 -9.2998 42 -28c0 -14.9004 -16.5996 -26.2998 -42.2998 -26.2998
+c-54 0 -56.9004 44.8994 -88.1006 44.8994c-20.5 0 -29.5 -14.5996 -29.5 -30.5996c0 -35.7998 54.9004 -65 120.5 -65z" />
+    <glyph glyph-name="foursquare" unicode="&#xf180;" horiz-adv-x="368" 
+d="M323.1 445c40 0 50.7002 -22.7998 42.2002 -65.2002l-48.5996 -243c-3.7002 -14.5 -9.2002 -39.7002 -44.2998 -39.7002h-83.4004c-3.40039 0 -3.7002 0.300781 -6.7998 -3.09961c0 0 -2.2002 -2.5 -131.101 -151.9
+c-10.0996 -11.6992 -26.6992 -9.59961 -32.8994 -7.09961c-6.10059 2.40039 -18.2002 9.7998 -18.2002 30.0996v433.801c0 17.7998 12.4004 46.0996 49.9004 46.0996h273.199zM306.8 371.2c2.10059 9.7998 -5.2998 17.5 -13.5 17.5h-219
+c-9.7998 0 -16.5996 -8.90039 -16.5996 -16.6006v-338.8c0 -0.899414 0.899414 -1.2002 1.7998 -0.299805c80.5996 96.9004 89.5 108.3 89.5 108.3c9.2998 10.7998 13 12.6006 26.5 12.6006h73.5c10.0996 0 16 8.59961 16.9004 13.5
+c0.899414 5 9.59961 49.8994 11.3994 58.7998c1.7998 9 -6.5 18.2002 -14.7998 18.2002h-90.4004c-12 0 -20.5996 8.59961 -20.5996 20.5996v13c0 12 8.59961 20.2998 20.5996 20.2998h106.4c7.40039 0 15.7002 6.7002 16.9004 13.2002z" />
+    <glyph glyph-name="trello" unicode="&#xf181;" 
+d="M392.3 416c30.7998 -0.200195 55.7002 -25.2002 55.6006 -56v-336c0 -30.7998 -24.9004 -55.7998 -55.7002 -56h-336.2c-30.9004 0 -56 25.0996 -56 56c0 340 -0.0996094 336 0 336c0 30.9004 25.0996 56 56.0996 56h336.2zM197 76.7002h0.0996094v254.2
+c0 14.8994 -12.0996 26.8994 -26.8994 26.8994h-82.9004c-14.8994 0 -26.8994 -12.0996 -26.8994 -26.8994v-254.2c0.0996094 -14.7998 12.1992 -26.7002 27 -26.6006h82.6992c14.8008 0 26.7002 11.9004 26.9004 26.6006zM390.1 188.7v142.1
+c0 14.9004 -12.0996 26.9004 -26.8994 26.9004h-81.1006c-14.7998 0 -26.7998 -12.1006 -26.7998 -26.9004v-142.1c0 -14.9004 12.1006 -26.9004 26.9004 -26.9004h81c14.8994 0 26.8994 12.1006 26.8994 26.9004z" />
+    <glyph glyph-name="gratipay" unicode="&#xf184;" horiz-adv-x="496" 
+d="M248 440c136.9 0 248 -111.1 248 -248s-111.1 -248 -248 -248s-248 111.1 -248 248s111.1 248 248 248zM362.6 213.6c8.80078 12 19.1006 50.4004 -13.7998 72c-27.7002 18.1006 -54.2002 4.2002 -68.0996 -11.8994c-15.1006 -16.9004 -45.7998 -17.9004 -61.7002 0
+c-13.9004 16.0996 -40.4004 30 -68.5 11.8994c-32.7002 -21.5996 -22.2998 -60.0996 -13.5996 -72l112.699 -152.699z" />
+    <glyph glyph-name="vk" unicode="&#xf189;" horiz-adv-x="576" 
+d="M545 330.3c-7.40039 -34.2998 -79.2998 -135.5 -79.4004 -135.6c-6.19922 -10 -8.69922 -15 0 -26.2002c3.40039 -4.7998 79.1006 -76.5996 90.3008 -111.5c4.89941 -16.5996 -3.60059 -25 -20.4004 -25h-58.9004c-22.3994 0 -29 17.9004 -69 57.9004
+c-35 33.6992 -50 38.0996 -58.6992 38.0996c-18.8008 0 -15.4004 -6.2998 -15.4004 -73.0996c0 -14.5 -4.59961 -22.9004 -42.0996 -22.9004c-62.4004 0 -131 37.9004 -179.7 107.8c-73.1006 102.4 -93.1006 179.9 -93.1006 195.5c0 8.7998 3.40039 16.7002 20.2002 16.7002
+h58.9004c15.0996 0 20.7998 -6.59961 26.5996 -22.9004c28.7998 -84 77.4004 -157.399 97.4004 -157.399c7.5 0 10.8994 3.5 10.8994 22.5v86.7998c-2.19922 40 -23.3994 43.2998 -23.3994 57.5c0 6.5 5.59961 13.5 15 13.5h92.5996
+c12.4004 0 16.6006 -6.7002 16.6006 -21.7002v-116.7c0 -12.5 5.69922 -16.8994 9.39941 -16.8994c7.5 0 13.7998 4.39941 27.5 18.0996c42.4004 47.4004 72.4004 120.5 72.4004 120.5c3.7002 8.7998 10.5996 16.7002 25.5996 16.7002h58.9004
+c17.7998 0 21.5 -9.2002 17.7998 -21.7002z" />
+    <glyph glyph-name="weibo" unicode="&#xf18a;" horiz-adv-x="512" 
+d="M407 270.4c7.59961 24 -13.4004 46.7998 -37.4004 41.6992c-22 -4.7998 -28.7998 28.1006 -7.09961 32.8008c50.0996 10.8994 92.2998 -37.1006 76.5 -84.8008c-6.7998 -21.1992 -38.7998 -10.7998 -32 10.3008zM214.8 1.2998c-106.3 0 -214.8 51.4004 -214.8 136.3
+c0 44.3008 28 95.4004 76.2998 143.7c99.7002 99.7002 203.2 100.9 173.601 5.7002c-4 -13.0996 12.2998 -5.7002 12.2998 -6c79.5 33.5996 140.5 16.7998 114 -51.4004c-3.7002 -9.39941 1.09961 -10.8994 8.2998 -13.0996c135.7 -42.2998 34.7998 -215.2 -169.7 -215.2z
+M358.5 147.6c-5.40039 55.7002 -78.5 94 -163.4 85.7002c-84.7998 -8.59961 -148.8 -60.2998 -143.399 -116c5.39941 -55.7002 78.5 -94 163.399 -85.7002c84.8008 8.60059 148.801 60.3008 143.4 116zM347.9 412.9c102.3 21.5996 189.3 -74.5 157.399 -174.301
+c-8.2998 -25 -44.7998 -12.1992 -37.3994 12c23.0996 71.2002 -39.4004 139.2 -111.7 124c-25.1006 -5.39941 -34.2002 32.7002 -8.2998 38.3008zM269.4 101.9c-17.1006 -38.8008 -66.8008 -60 -109.101 -46.3008c-40.7998 13.1006 -58 53.4004 -40.2998 89.7002
+c17.7002 35.4004 63.0996 55.4004 103.4 45.1006c42 -10.8008 63.0996 -50.2002 46 -88.5zM183.1 131.9c-12.8994 5.39941 -30 -0.300781 -38 -12.9004c-8.2998 -12.9004 -4.2998 -28 8.60059 -34c13.0996 -6 30.7998 -0.299805 39.0996 12.9004
+c8 13.0996 3.7002 28.2998 -9.7002 34zM215.7 145.3c-5.10059 1.7002 -11.4004 -0.599609 -14.2998 -5.39941c-2.90039 -5.10059 -1.40039 -10.6006 3.69922 -12.9004c5.10059 -2 11.7002 0.299805 14.6006 5.40039c2.7998 5.19922 1.09961 10.8994 -4 12.8994z" />
+    <glyph glyph-name="renren" unicode="&#xf18b;" horiz-adv-x="512" 
+d="M214 278.9c0 -110.4 -61 -205.4 -147.6 -247.4c-36.4004 43.2998 -58.4004 98.7998 -58.4004 159.9c0 122.699 89.0996 224.399 206 244.1v-156.6zM255 -56c-42.9004 0 -83.2998 11 -118.5 30.4004c57.2002 36.0996 103.4 90.6992 118.5 154.6
+c15.5 -63.9004 61.7002 -118.5 118.8 -154.7c-35.0996 -19.2998 -75.5 -30.2998 -118.8 -30.2998zM445.6 31.5c-86.5996 42 -147.6 136.9 -147.6 247.4v156.6c116.9 -19.7002 206 -121.4 206 -244.1c0 -61.1006 -22 -116.601 -58.4004 -159.9z" />
+    <glyph glyph-name="pagelines" unicode="&#xf18c;" horiz-adv-x="384" 
+d="M384 135.3c-55.0996 -136.7 -187.1 -54 -187.1 -54c-40.5 -81.7998 -107.4 -134.399 -184.601 -134.7c-16.0996 0 -16.5996 24.4004 0 24.4004c64.4004 0.299805 120.5 42.7002 157.2 110.1c-41.0996 -15.8994 -118.6 -27.8994 -161.6 82.2002
+c109 44.9004 159.1 -11.2002 178.3 -45.5c9.89941 24.4004 17 50.9004 21.5996 79.7002c0 0 -139.7 -21.9004 -149.5 98.0996c119.101 47.9004 152.601 -76.6992 152.601 -76.6992c1.59961 16.6992 3.2998 52.5996 3.2998 53.3994c0 0 -106.3 73.7002 -38.1006 165.2
+c124.601 -43 61.4004 -162.4 61.4004 -162.4c0.5 -1.59961 0.5 -23.7998 0 -33.3994c0 0 45.2002 89 136.4 57.5c-4.2002 -134 -141.9 -106.4 -141.9 -106.4c-4.40039 -27.3994 -11.2002 -53.3994 -20 -77.5c0 0 83 91.7998 172 20z" />
+    <glyph glyph-name="stack-exchange" unicode="&#xf18d;" 
+d="M17.7002 115.7h412.7v-22c0 -37.7002 -29.3008 -68 -65.3008 -68h-19l-86.7998 -89.7002v89.7002h-176.3c-36 0 -65.2998 30.2998 -65.2998 68v22zM17.7002 139.3v85h412.7v-85h-412.7zM17.7002 248.7v85h412.7v-85h-412.7zM365 448
+c36 0 65.2998 -30.2998 65.4004 -67.7002v-22.2998h-412.7v22.2998c0 37.4004 29.2998 67.7002 65.2998 67.7002h282z" />
+    <glyph glyph-name="vimeo-square" unicode="&#xf194;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM383.8 266.4c1.90039 41.5996 -13.5996 63 -46.5 64c-44.2998 1.39941 -74.3994 -23.6006 -90.0996 -75.1006
+c19.5996 8.40039 48.5996 10.6006 45.2002 -22.2002c-0.900391 -11.0996 -8.10059 -27.0996 -21.5 -48.2998c-37.2002 -58.7002 -46.3008 -39.0996 -66.8008 90.5c-5.7998 36.5 -21.0996 53.5 -46 51.1006c-22 -2 -57.1992 -38 -94.0996 -70.4004l15 -19.4004
+c14.2998 10.1006 22.7002 15.1006 25.0996 15.1006c20.8008 0 31.5 -54.1006 56.7002 -146.4c12.9004 -34.3994 28.6006 -51.5996 47.2998 -51.5996c30.1006 0 66.9004 28.2998 110.4 84.7998c42.0996 54.0996 63.9004 96.7998 65.2998 127.9z" />
+    <glyph glyph-name="slack" unicode="&#xf198;" 
+d="M94.1201 132.9c0 -25.9004 -21.1602 -47.0605 -47.0605 -47.0605c-25.8994 0 -47.0596 21.1602 -47.0596 47.0605c0 25.8994 21.1602 47.0596 47.0596 47.0596h47.0605v-47.0596zM117.84 132.9c0 25.8994 21.1602 47.0596 47.0605 47.0596
+c25.8994 0 47.0596 -21.1602 47.0596 -47.0596v-117.841c0 -25.8994 -21.1602 -47.0596 -47.0596 -47.0596c-25.9004 0 -47.0605 21.1602 -47.0605 47.0596v117.841zM164.9 321.88c-25.9004 0 -47.0605 21.1602 -47.0605 47.0605c0 25.8994 21.1602 47.0596 47.0605 47.0596
+c25.8994 0 47.0596 -21.1602 47.0596 -47.0596v-47.0605h-47.0596zM164.9 298.16c25.8994 0 47.0596 -21.1602 47.0596 -47.0605c0 -25.8994 -21.1602 -47.0596 -47.0596 -47.0596h-117.841c-25.8994 0 -47.0596 21.1602 -47.0596 47.0596
+c0 25.9004 21.1602 47.0605 47.0596 47.0605h117.841zM353.88 251.1c0 25.9004 21.1602 47.0605 47.0605 47.0605c25.8994 0 47.0596 -21.1602 47.0596 -47.0605c0 -25.8994 -21.1602 -47.0596 -47.0596 -47.0596h-47.0605v47.0596zM330.16 251.1
+c0 -25.8994 -21.1602 -47.0596 -47.0605 -47.0596c-25.8994 0 -47.0596 21.1602 -47.0596 47.0596v117.841c0 25.8994 21.1602 47.0596 47.0596 47.0596c25.9004 0 47.0605 -21.1602 47.0605 -47.0596v-117.841zM283.1 62.1201c25.9004 0 47.0605 -21.1602 47.0605 -47.0605
+c0 -25.8994 -21.1602 -47.0596 -47.0605 -47.0596c-25.8994 0 -47.0596 21.1602 -47.0596 47.0596v47.0605h47.0596zM283.1 85.8398c-25.8994 0 -47.0596 21.1602 -47.0596 47.0605c0 25.8994 21.1602 47.0596 47.0596 47.0596h117.841
+c25.8994 0 47.0596 -21.1602 47.0596 -47.0596c0 -25.9004 -21.1602 -47.0605 -47.0596 -47.0605h-117.841z" />
+    <glyph glyph-name="wordpress" unicode="&#xf19a;" horiz-adv-x="512" 
+d="M61.7002 278.6l101.5 -278c-71 34.4004 -119.9 107.2 -119.9 191.4c0 30.9004 6.60059 60.0996 18.4004 86.5996zM399.6 202.7c0 -18.2002 -7 -39.2998 -16 -68.7002l-21.1992 -70.9004l-76.9004 228.7c12.7998 0.700195 24.2998 2 24.2998 2
+c11.4004 1.2998 10.1006 18.2002 -1.39941 17.5c0 0 -34.5 -2.7002 -56.7002 -2.7002c-20.9004 0 -56 2.7002 -56 2.7002c-11.4004 0.700195 -12.7998 -16.7998 -1.2998 -17.5c0 0 10.7998 -1.2998 22.2998 -2l33.0996 -90.7998l-46.5996 -139.6l-77.5 230.399
+c12.7998 0.700195 24.2998 2 24.2998 2c11.4004 1.2998 10.0996 18.2002 -1.40039 17.5c0 0 -34.5 -2.7002 -56.6992 -2.7002c-4 0 -8.7002 0.100586 -13.7002 0.300781c38.0996 57.7998 103.5 95.8994 177.8 95.8994c55.4004 0 105.8 -21.2002 143.7 -55.8994
+c-1 0.0996094 -1.90039 0.199219 -2.7998 0.199219c-20.9004 0 -35.7002 -18.1992 -35.7002 -37.7998c0 -17.5 10.0996 -32.3994 20.8994 -49.8994c8.10059 -14.2002 17.5 -32.4004 17.5 -58.7002zM259.7 173.4l65.3994 -179.2c0.400391 -1 0.900391 -2 1.5 -2.90039
+c-22.0996 -7.7998 -45.7998 -12.0996 -70.5996 -12.0996c-20.9004 0 -41 3.09961 -60.0996 8.7002zM442.7 294.1c16.5996 -30.2998 26 -65.0996 26 -102.1c0 -78.5 -42.5 -147 -105.8 -183.9l65 187.9c12.1992 30.4004 16.1992 54.5996 16.1992 76.2002
+c0 7.89941 -0.5 15.0996 -1.39941 21.8994zM504 192c0 -136.8 -111.3 -248 -248 -248c-136.8 0 -248 111.3 -248 248c0 136.8 111.2 248 248 248c136.7 0 248 -111.2 248 -248zM492.6 192c0 130.5 -106.199 236.6 -236.6 236.6c-130.5 0 -236.6 -106.1 -236.6 -236.6
+s106.199 -236.6 236.6 -236.6c130.5 0 236.6 106.1 236.6 236.6z" />
+    <glyph glyph-name="openid" unicode="&#xf19b;" 
+d="M271.5 16l-68 -32c-115 10.2998 -203.5 71.5 -203.5 145.8c0 71.5 82.5 131 191.7 144.3v-43c-71.5 -12.5 -124 -53 -124 -101.3c0 -51 58.5 -93.2998 135.7 -103v340l68 33.2002v-384h0.0996094zM448 157l-131.3 28.5l36.7998 20.7002c-19.5 11.5 -43.5 20 -70 24.7998
+v43c46.2002 -5.5 87.7002 -19.5 120.3 -39.2998l35 19.7998z" />
+    <glyph glyph-name="yahoo" unicode="&#xf19e;" 
+d="M252 156l4 -220c-12.7002 2.2002 -23.5 3.90039 -32.2998 3.90039c-8.40039 0 -19.2002 -1.7002 -32.2998 -3.90039l4 220c-55 94.7998 -110.4 196.8 -174 292c11.8994 -3.09961 23 -3.90039 33.1992 -3.90039c9 0 20.4004 0.800781 34.1006 3.90039
+c40.8994 -72.2002 82.0996 -138.7 135 -225.5c37.2998 61.5996 91.0996 144.1 134.899 225.5c11.1006 -2.90039 22 -3.90039 32.9004 -3.90039c11.5 0 23.2002 1 35 3.90039c-34.4004 -47.9004 -131.6 -216.9 -174.5 -292z" />
+    <glyph glyph-name="google" unicode="&#xf1a0;" horiz-adv-x="488" 
+d="M488 186.2c0 -141.5 -96.9004 -242.2 -240 -242.2c-137.2 0 -248 110.8 -248 248s110.8 248 248 248c66.7998 0 123 -24.5 166.3 -64.9004l-67.5 -64.8994c-88.2998 85.2002 -252.5 21.2002 -252.5 -118.2c0 -86.5 69.1006 -156.6 153.7 -156.6
+c98.2002 0 135 70.3994 140.8 106.899h-140.8v85.2998h236.1c2.30078 -12.6992 3.90039 -24.8994 3.90039 -41.3994z" />
+    <glyph glyph-name="reddit" unicode="&#xf1a1;" horiz-adv-x="512" 
+d="M201.5 142.5c-13.7998 0 -24.9004 11.0996 -24.9004 24.5996c0 13.8008 11.1006 24.9004 24.9004 24.9004c13.5996 0 24.5996 -11.0996 24.5996 -24.9004c0 -13.5996 -11.0996 -24.5996 -24.5996 -24.5996zM504 192c0 -137 -111 -248 -248 -248s-248 111 -248 248
+s111 248 248 248s248 -111 248 -248zM371.7 233.2c-9.40039 0 -17.7002 -3.90039 -23.7998 -10c-22.4004 15.5 -52.6006 25.5 -86.1006 26.5996l17.4004 78.2998l55.3994 -12.5c0 -13.5996 11.1006 -24.5996 24.6006 -24.5996c13.7998 0 24.8994 11.2998 24.8994 24.9004
+c0 13.5996 -11.0996 24.8994 -24.8994 24.8994c-9.7002 0 -18 -5.7998 -22.1006 -13.7998l-61.1992 13.5996c-3 0.800781 -6.10059 -1.39941 -6.90039 -4.39941l-19.0996 -86.4004c-33.2002 -1.39941 -63.1006 -11.2998 -85.5 -26.7998
+c-6.10059 6.40039 -14.7002 10.2002 -24.1006 10.2002c-34.8994 0 -46.2998 -46.9004 -14.3994 -62.7998c-1.10059 -5 -1.7002 -10.2002 -1.7002 -15.5c0 -52.6006 59.2002 -95.2002 132 -95.2002c73.0996 0 132.3 42.5996 132.3 95.2002
+c0 5.2998 -0.599609 10.7998 -1.90039 15.7998c31.3008 16 19.8008 62.5 -14.8994 62.5zM302.8 117c2.2002 2.2002 6.10059 2.2002 8.2998 0c2.5 -2.5 2.5 -6.40039 0 -8.59961c-22.8994 -22.8008 -87.3994 -22.8008 -110.199 0c-2.5 2.19922 -2.5 6.09961 0 8.59961
+c2.19922 2.2002 6.09961 2.2002 8.2998 0c17.5 -17.9004 75.3994 -18.2002 93.5996 0zM310.5 192c13.9004 0 24.9004 -11.0996 24.9004 -24.9004c0 -13.5 -11.1006 -24.5996 -24.9004 -24.5996c-13.5 0 -24.5996 11 -24.5996 24.5996c0 13.8008 11 24.9004 24.5996 24.9004z
+" />
+    <glyph glyph-name="reddit-square" unicode="&#xf1a2;" 
+d="M283.2 102.5c2.7002 -2.7002 2.7002 -6.7998 0 -9.2002c-24.5 -24.5 -93.7998 -24.5996 -118.4 0c-2.7002 2.40039 -2.7002 6.5 0 9.2002c2.40039 2.40039 6.5 2.40039 8.90039 0c18.7002 -19.2002 81 -19.5996 100.5 0c2.39941 2.2998 6.59961 2.2998 9 0zM191.9 156.3
+c0 -14.5996 -11.9004 -26.5 -26.5 -26.5c-14.9004 0 -26.8008 11.9004 -26.8008 26.5c0 14.9004 11.9004 26.7998 26.8008 26.7998c14.5996 0 26.5 -11.8994 26.5 -26.7998zM282.6 183.1c14.9004 0 26.8008 -11.8994 26.8008 -26.7998
+c0 -14.5996 -11.9004 -26.5 -26.8008 -26.5c-14.5996 0 -26.5 11.9004 -26.5 26.5c0 14.9004 11.9004 26.7998 26.5 26.7998zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352c26.5 0 48 -21.5 48 -48zM348.3 227.4
+c-10.0996 0 -19 -4.2002 -25.5996 -10.7002c-24.1006 16.7002 -56.5 27.3994 -92.5 28.5996l18.7002 84.2002l59.5 -13.4004c0 -14.5996 11.8994 -26.5 26.5 -26.5c14.8994 0 26.7998 12.2002 26.7998 26.8008c0 14.5996 -11.9004 26.7998 -26.7998 26.7998
+c-10.4004 0 -19.3008 -6.2002 -23.8008 -14.9004l-65.6992 14.6006c-3.30078 0.899414 -6.5 -1.5 -7.40039 -4.80078l-20.5 -92.7998c-35.7002 -1.5 -67.7998 -12.2002 -91.9004 -28.8994c-6.5 6.7998 -15.7998 11 -25.8994 11c-37.5 0 -49.7998 -50.4004 -15.5 -67.5
+c-1.2002 -5.40039 -1.7998 -11 -1.7998 -16.7002c0 -56.5 63.6992 -102.3 141.899 -102.3c78.5 0 142.2 45.7998 142.2 102.3c0 5.7002 -0.599609 11.5996 -2.09961 17c33.5996 17.2002 21.1992 67.2002 -16.1006 67.2002z" />
+    <glyph glyph-name="stumbleupon-circle" unicode="&#xf1a3;" horiz-adv-x="496" 
+d="M256 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM256 262.5c9.7998 0 17.7998 -8 17.7002 -17.5996v-20.6006l22.8994 -10.7002l34.1006 10.1006v23.7002c0 40.2998 -34 72.5996 -74.7002 72.5996
+c-40.5 0 -74.7002 -32.0996 -74.7002 -72.0996v-108.4c0 -9.90039 -8 -17.7998 -17.7998 -17.7998s-17.7998 7.7998 -17.7998 17.7998v45.7998h-57.2998v-46.5c0 -41.3994 33.5 -74.8994 74.8994 -74.8994c41 0 74.9004 33 74.9004 73.8994v106.9
+c0 9.7998 8 17.7998 17.7998 17.7998zM423.6 138.9c0 0 0 0.5 0.100586 46.3994h-57.2998v-48c0 -9.7002 -8 -17.5996 -17.8008 -17.5996c-9.7998 0 -17.7998 7.7998 -17.7998 17.5996v47.1006l-34.0996 -10.1006l-22.9004 10.7002v-46.7998
+c0 -41 33.7002 -74.2002 74.9004 -74.2002c41.3994 0 74.8994 33.5 74.8994 74.9004z" />
+    <glyph glyph-name="stumbleupon" unicode="&#xf1a4;" horiz-adv-x="512" 
+d="M502.9 182v-69.7002c0 -62.0996 -50.3008 -112.399 -112.4 -112.399c-61.7998 0 -112.4 49.7998 -112.4 111.3v70.2002l34.3008 -16l51.0996 15.1992v-70.5996c0 -14.7002 12 -26.5 26.7002 -26.5s26.7998 11.7998 26.7998 26.5v72h85.9004zM278.2 240.2v30.8994
+c0 14.7002 -12 26.7002 -26.7002 26.7002s-26.7002 -12 -26.7002 -26.7002v-160.3c0 -61.2998 -50.7998 -110.8 -112.399 -110.8c-62.1006 0 -112.4 50.2998 -112.4 112.3v69.7002h86v-68.5996c0 -14.9004 12 -26.7002 26.7002 -26.7002s26.7002 11.7998 26.7002 26.7002
+v162.399c0 60 51.2998 108.2 112.1 108.2c61 0 112.1 -48.5 112.1 -109v-35.5996l-51.0996 -15.2002z" />
+    <glyph glyph-name="delicious" unicode="&#xf1a5;" 
+d="M446.5 380c1 -3.7998 1.5 -7.90039 1.59961 -12v-352.1c0 -26.5 -21.5 -48 -48 -48h-352c-4.09961 0 -8.19922 0.5 -12 1.5c-7.69922 2 -14.5996 5.7998 -20.2998 11c-1.2002 1.09961 -2.2998 2.19922 -3.2998 3.2998c-5.2002 5.7002 -9 12.5996 -11 20.2998
+c-1 3.7998 -1.5 7.90039 -1.5 12v352c0 26.5 21.5 48 48 47.9004h352c4.09961 0 8.2002 -0.5 12 -1.5c1.90039 -0.400391 3.7002 -1 5.40039 -1.7002c1.89941 -0.700195 3.69922 -1.5 5.5 -2.5c1.39941 -0.700195 2.69922 -1.5 4 -2.40039
+c1.09961 -0.799805 2.19922 -1.59961 3.2998 -2.5c2.5 -2 4.7998 -4.2998 6.89941 -6.7998c1.7002 -2.09961 3.30078 -4.5 4.7002 -6.90039c1.2998 -2.2998 2.40039 -4.59961 3.2998 -7.09961c0.5 -1.5 1 -3 1.40039 -4.5zM416 16v176h-192v192h-176
+c-8.7998 0 -16 -7.2002 -16 -16v-176h192v-192h176c8.7998 0 16 7.2002 16 16z" />
+    <glyph glyph-name="digg" unicode="&#xf1a6;" horiz-adv-x="512" 
+d="M81.7002 275.7v76.2998h51v-250.7h-132.7v174.4h81.7002zM81.7002 142.3v92.2998h-30.7998v-92.2998h30.7998zM378.9 275.7h133.1v-243.7h-133.1v40.7998h81.7998v28.5h-81.7998v174.4zM460.7 142.3v92.2998h-30.7998v-92.2998h30.7998zM225.1 101.3v174.4h133.301
+v-243.7h-133.301v40.7998h82.1006v28.5h-82.1006zM276.3 234.6v-92.2998h30.7998v92.2998h-30.7998zM153.3 352h51.2998v-51h-51.2998v51zM153.3 275.7h51.2998v-174.4h-51.2998v174.4z" />
+    <glyph glyph-name="pied-piper-pp" unicode="&#xf1a7;" 
+d="M205.3 273.4c0 -21.1006 -14.2002 -38.1006 -31.7002 -38.1006c-7.09961 0 -12.7998 1.2002 -17.1992 3.7002v68c4.39941 2.7002 10.0996 4.2002 17.1992 4.2002c17.5 0 31.7002 -16.9004 31.7002 -37.7998zM257.9 206.4c17.3994 0 31.6992 -17 31.6992 -38.1006
+c0 -20.8994 -14.2998 -37.7998 -31.6992 -37.7998c-7.10059 0 -12.8008 1.2002 -17.2002 3.7002v68c4.39941 2.7002 10.0996 4.2002 17.2002 4.2002zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352
+c26.5 0 48 -21.5 48 -48zM185 192.9c41 0 74.2002 35.5996 74.2002 79.5996s-33.2002 79.5996 -74.2002 79.5996c-12 0 -24.0996 -3.19922 -34.5996 -8.7998h-45.7002v-206.3l51.7998 10.0996v50.6006c8.59961 -3.10059 18.0996 -4.7998 28.5 -4.7998zM343.4 167.6
+c0 44 -33.2002 79.6006 -73.9004 79.6006c-3.2002 0 -6.40039 -0.200195 -9.59961 -0.700195c-3.7002 -12.5 -10.1006 -23.7998 -19.2002 -33.4004c-13.7998 -15 -32.2002 -23.7998 -51.7998 -24.7998v-156.3l51.7998 10.0996v50.6006
+c8.59961 -3.2002 18.2002 -4.7002 28.7002 -4.7002c40.7998 0 74 35.5996 74 79.5996z" />
+    <glyph glyph-name="pied-piper-alt" unicode="&#xf1a8;" horiz-adv-x="576" 
+d="M244 202l-27.7002 -5.7002l-1.7002 4.90039c6.7002 0.5 12.7002 3.7002 19.3008 3.7002c3.7998 0 6.89941 -0.900391 10.0996 -2.90039zM379.9 4.09961c9.5 0 28.1992 -45.0996 33 -55.0996c-35.9004 -13.4004 -70.3008 -15.9004 -106 -9.7998l-6.90039 45.0996
+c15.7998 10.2998 60.9004 19.7998 79.9004 19.7998zM340.8 271c-7.59961 3.5 -63.8994 6.40039 -98.7998 -10c6.2998 11.7998 13.2002 17 25.9004 21.7998c27.2998 10.2998 40.1992 30.5 58.8994 51.1006c11.9004 -8.40039 12 -24.6006 31.6006 -23v-21.8008
+l6.2998 -0.299805c37.3994 14.4004 74.7002 30.2002 106.6 54.6006c48.2998 36.7998 52.9004 50 81.2998 100l2 2.59961c-0.599609 -14.0996 -6.2998 -27.2998 -12.3994 -39.9004c-30.5 -63.7998 -78.7002 -100.3 -146.8 -116.699
+c-12.4004 -2.90039 -26.4004 -3.2002 -37.6006 -8.90039c1.40039 -9.7998 13.2002 -18.0996 13.2002 -23c0 -3.40039 -5.5 -7.2002 -7.5 -8.59961c-11.2002 12.8994 -16.0996 19.2998 -22.7002 22.0996zM555.5 448l-0.299805 -1.40039l-0.600586 -0.599609
+l0.300781 0.900391zM496.3 65.9004c20.1006 -34.2002 43.7002 -54.3008 72.7002 -79.9004c-31 -19.2998 -70.4004 -32.2002 -103.5 -47.2002c-55.2002 46.2998 -23 229.9 -111.5 229.9c-3.5 -0.700195 -2.40039 -0.299805 -4.59961 -1.7002
+c1.09961 -1.40039 2.59961 -2.90039 3.69922 -4c23.9004 -20.0996 33.4004 -24.4004 34.8008 -58.5996l0.299805 -9.5c0.799805 -21.6006 -5.5 -42.5 -9.7998 -63.5c-25.9004 0.699219 -51.2002 -11 -77.9004 -2.90039c-0.700195 5.90039 -1.09961 30.9004 0.299805 41.0996
+c1.40039 9.5 33.6006 29.9004 33 43.7002c-5.5 0.600586 -9.2002 -2.59961 -12.3994 -6.89941c-13.3008 -19.5 -47.2002 -41.9004 -71.3008 -41.9004c-16.5996 0 -56.2998 71.5 -76.3994 85.9004c-3.2002 2.2998 -5.2002 5.39941 -7.7998 8.59961
+c-16.1006 -3.7998 -139.4 -32.2002 -147.4 -32.2002c-6 0 -11.5 4.90039 -11.5 10.9004c0 5.5 3.40039 10.7002 8.90039 11.7998l139.6 30.4004c-9.5 17.1992 12.2998 17.5 21.5 20.0996c3.2002 0.799805 6.2998 4 9.5 4c6.2998 0 11.7998 -8.90039 13.7998 -14.0996
+c6.2998 1.39941 45.7002 10.5996 49.4004 10.5996c15.2002 0 15.8994 -20.0996 2.89941 -22.7002l-52.2998 -11.5l-0.299805 -4.59961c-0.299805 -10.1006 45.4004 -60.1006 53.4004 -60.1006c18.0996 0 54.8994 41.7002 54.8994 60.1006
+c0 30.7002 -42.7998 12.5996 -42.7998 33.5996c0 3.5 1.2002 6.60059 2.90039 9.7998l-19.5 5.5c13.0996 13.6006 13.7998 31.7002 10.8994 50.3008c14.7002 2.89941 26.7002 4.59961 41.4004 4.59961c56.8994 0 45.7002 -8.59961 65.5 -54.2998l14.3994 7.2002
+c-2.2998 -34.2002 -36.1992 -17.5 -35.0996 -31l0.299805 -6c74.7002 2.89941 116.101 -58.6006 150 -115.5zM300.1 19.7998h8.90039l2.90039 -23.7998l-11.8008 -3.40039v27.2002zM231.4 170.2l13.7998 3.5l31.2998 -50.9004l-21 -13.7998zM315.8 15.2998
+c22.6006 2.5 32.7002 6.2998 59.5 6.2998c0.299805 -1.39941 0.900391 -3.19922 0.900391 -4.59961c0 -7.5 -49.4004 -12.5996 -58.4004 -14.0996z" />
+    <glyph glyph-name="drupal" unicode="&#xf1a9;" 
+d="M319.5 333.3c13.5 -8.2998 96.5 -67 96.5 -179.3c0 -112 -88.5 -186 -190.2 -186c-102 0 -193.8 80.2998 -193.8 189.5c0 109 85 167.5 100.8 175.8c18.7002 10.1006 32.2002 15.2998 53.5 32.2998c10.5 8.30078 19.2998 20.2002 22 49.5
+c15.2002 -18.2998 33.5 -39.5 46.5 -48.2998c21.2002 -14 42.5 -19.5 64.7002 -33.5zM322 7.7002c4.2002 4.2002 1.90039 13.0996 -4.2002 8.5c-8.5 -6.2998 -27.5 -14 -54.5 -14c-34.5 0 -51.5 13.2998 -51.5 13.2998c-6.2002 0 -11.2998 -7.2002 -6.5 -12
+c26.6006 -24.5 96.6006 -15.9004 116.7 4.2002zM267.5 60.2998c-6.5 -2.7002 -28.4004 -16.7998 -22.4004 -25c2.40039 -3.2998 5.2002 -1.2998 12.2002 4.7002c7.2002 5.7998 12 11 26.7002 11c25.2998 0 18.0996 -19.9004 26.5 -15.7002
+c9.90039 4.90039 -2.09961 20.9004 -6.2002 23.7002c-7.7998 5.09961 -28.0996 4.90039 -36.7998 1.2998zM360 43c39.0996 -3.2998 64.5 106 15.7998 106c-20 0 -60.5 -41.5 -81.7998 -41.7998c-24.7002 -0.5 -59 49 -108.5 48.5
+c-66.4004 -0.400391 -90.5996 -78.6006 -51.7998 -105.2c57.2002 -38.7002 130.399 42.9004 161.3 42c19.5 -0.700195 49.7998 -48.5 65 -49.5z" />
+    <glyph glyph-name="joomla" unicode="&#xf1aa;" 
+d="M0.599609 355.9c0 33.2998 26.8008 60.0996 59.8008 60.0996c30 0 54.5 -21.9004 59.1992 -50.2002c32.6006 7.60059 67.1006 -0.599609 96.5 -30l-44.2998 -44.2998c-20.5 20.5 -42.5996 16.2998 -55.3994 3.5c-14.3008 -14.2998 -14.3008 -37.9004 0 -52.2002
+l99.5 -99.5l-44 -44.2998c-87.7002 87.2002 -49.7002 49.7002 -99.8008 99.7002c-26.7998 26.5 -35 64.7998 -24.7998 98.8994c-26.8994 5.80078 -46.7002 29.7002 -46.7002 58.3008zM130.1 239.5c28.5 28.4004 81.3008 80.7998 99.6006 99.9004
+c26.5996 26.5996 64.5 35 98.2998 25.0996c4.09961 29.0996 29.2002 51.5996 59.5 51.5996c33 0 59.7998 -26.8994 59.7998 -60.0996c0 -30.2998 -22.7002 -55.4004 -51.8994 -59.5c9.59961 -33.5996 2.2998 -70 -28.9004 -101.2l-44 44.2998
+c20.5 20.4004 16.2998 42.6006 3.5 55.4004c-14.2998 14.2998 -37.5996 14.2998 -51.9004 0c-10 -10.0996 -89.6992 -89.7998 -99.6992 -99.7998zM396.4 87.2998c29.0996 -4.09961 51.5996 -28.8994 51.5996 -59.0996c0 -33.2998 -26.7998 -60.1006 -59.7998 -60.1006
+c-29.2002 0 -53.4004 20.7002 -58.9004 48.1006c-34.7002 -10.7998 -75.0996 -2.2002 -102.7 28l44 44.2998c20.4004 -20.5 42.6006 -16.2998 55.4004 -3.5c14.2998 14.2998 14.2998 37.5996 0 51.9004l-99.7002 99.6992l44.2998 44.3008
+c104.5 -104.4 87.7002 -87.5 99.5 -99.7002c25.4004 -25.4004 34.5 -61.2002 26.3008 -93.9004zM312.1 140.4c-87.2998 -87.3008 -67.3994 -67.7002 -99.5 -99.7002c-25.6992 -25.4004 -61.5 -34.2002 -94.1992 -26c-6.10059 -26.9004 -30 -46.7002 -58.6006 -46.7002
+c-33 0 -59.7998 26.7998 -59.7998 60.0996c0 28.3008 19.5 52.2002 46.2002 58.2002c-8.5 33.1006 -0.700195 68.1006 29.5 98.2998l44 -44.2998c-20.1006 -20.0996 -16.2998 -42 -3.2002 -55.3994c14.2998 -14.3008 37.5996 -14.3008 51.9004 0
+c49.2998 49.3994 12.6992 13.3994 99.6992 99.7998z" />
+    <glyph glyph-name="behance" unicode="&#xf1b4;" horiz-adv-x="576" 
+d="M232 210.8c43.5996 -12.2998 64.7002 -45.2002 64.7002 -89.7002c0 -72 -60.5 -102.899 -124.9 -102.899h-171.8v354.399h167.1c60.7002 0 113.301 -17.1992 113.301 -87.7998c0 -35.7998 -16.6006 -58.7998 -48.4004 -74zM77.9004 312.1v-82.6992h79
+c27.7998 0 47.5 12.0996 47.5 42.1992c0 32.6006 -25.3008 40.5 -53.4004 40.5h-73.0996zM161.2 78.4004c31.7002 0 57.5996 11.1992 57.5996 47c0 36.2998 -21.7002 50.5996 -56 50.5996h-84.8994v-97.5996h83.2998zM519.7 319.1h-143.7v34.9004h143.7v-34.9004zM576 142.8
+c0 -4.5 -0.299805 -9 -0.599609 -13.2002h-185.101c0 -41.0996 21.7002 -65.2998 63 -65.2998c21.4004 0 49 11.6006 55.7002 33.5h62.2002c-19.1006 -58.7002 -58.7998 -86.2998 -120.101 -86.2998c-81 0 -131.3 54.7998 -131.3 134.7c0 77 53.1006 135.8 131.3 135.8
+c80.5 0 124.9 -63.2998 124.9 -139.2zM390.4 174h114.699c-3 34 -20.7998 54.7998 -56.1992 54.7998c-33.8008 0 -56.2002 -21.0996 -58.5 -54.7998z" />
+    <glyph glyph-name="behance-square" unicode="&#xf1b5;" 
+d="M186.5 155c0 -19.2998 -14 -25.4004 -31.2002 -25.4004h-45.0996v52.9004h46c18.5996 -0.0996094 30.2998 -7.7998 30.2998 -27.5zM178.8 237.3c0 -16.2998 -10.7002 -22.8994 -25.7998 -22.8994h-42.7002v44.7998h39.6006c15.1992 0 28.8994 -4.2002 28.8994 -21.9004z
+M311.1 214.1c19.2002 0 28.8008 -11.1992 30.5 -29.6992h-62.1992c1.19922 18.2998 13.3994 29.6992 31.6992 29.6992zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352c26.5 0 48 -21.5 48 -48zM271.7 263h77.7998
+v18.9004h-77.7998v-18.9004zM228.7 152.7c0 24.0996 -11.4004 44.8994 -35 51.5996c17.2002 8.2002 26.2002 17.7002 26.2002 37c0 38.2002 -28.5 47.5 -61.4004 47.5h-90.5v-192h93.0996c34.9004 0.200195 67.6006 16.9004 67.6006 55.9004zM380 167.5
+c0 41.0996 -24.0996 75.4004 -67.5996 75.4004c-42.4004 0 -71.1006 -31.8008 -71.1006 -73.6006c0 -43.2998 27.2998 -73 71.1006 -73c33.1992 0 54.6992 14.9004 65.0996 46.7998h-33.7002c-3.7002 -11.8994 -18.5996 -18.0996 -30.2002 -18.0996
+c-22.3994 0 -34.0996 13.0996 -34.0996 35.2998h100.2c0.0996094 2.2998 0.299805 4.7998 0.299805 7.2002z" />
+    <glyph glyph-name="steam" unicode="&#xf1b6;" horiz-adv-x="496" 
+d="M496 192c0 -137 -111.2 -248 -248.4 -248c-113.8 0 -209.6 76.2998 -239 180.4l95.2002 -39.3008c6.40039 -32.0996 34.9004 -56.3994 68.9004 -56.3994c39.2002 0 71.8994 32.3994 70.2002 73.5l84.5 60.2002c52.0996 -1.30078 95.7998 40.8994 95.7998 93.5
+c0 51.5996 -42 93.5 -93.7002 93.5s-93.7002 -42 -93.7002 -93.5v-1.2002l-59.2002 -85.7002c-15.5 0.900391 -30.6992 -3.40039 -43.5 -12.0996l-133.1 55c10.2002 127.699 117.1 228.1 247.6 228.1c137.2 0 248.4 -111 248.4 -248zM155.7 63.7002
+c19.7998 -8.2002 42.5 1.09961 50.7998 21c8.2998 19.7998 -1.09961 42.5 -20.9004 50.7002l-31.5 13c12.2002 4.59961 26 4.7998 38.9004 -0.600586c13 -5.39941 23.0996 -15.5996 28.5 -28.5996s5.2998 -27.2998 -0.0996094 -40.2998
+c-11.2002 -26.8008 -42.1006 -39.6006 -69 -28.4004c-10.2119 4.26953 -22.3975 15.8281 -27.2002 25.7998zM329.5 193.6c-34.4004 0 -62.4004 28 -62.4004 62.3008c0 34.2998 28 62.2998 62.4004 62.2998s62.4004 -28 62.4004 -62.2998
+c0 -34.3008 -27.9004 -62.3008 -62.4004 -62.3008zM329.6 209.2c25.9004 0 46.9004 21 46.9004 46.7998c0 25.9004 -21 46.7998 -46.9004 46.7998c-25.8994 0 -46.8994 -21 -46.8994 -46.7998c0.0996094 -25.7998 21.0996 -46.7998 46.8994 -46.7998z" />
+    <glyph glyph-name="steam-square" unicode="&#xf1b7;" 
+d="M185.2 91.5c7.7002 18.5 -1 39.7002 -19.6006 47.4004l-29.5 12.1992c11.4004 4.30078 24.3008 4.5 36.4004 -0.5c12.2002 -5.09961 21.5996 -14.5996 26.7002 -26.6992c5 -12.2002 5 -25.6006 -0.100586 -37.7002c-10.5 -25.1006 -39.3994 -37 -64.5996 -26.5
+c-11.5996 4.7998 -20.4004 13.5996 -25.4004 24.2002l28.5 -11.8008c18.6006 -7.7998 39.9004 0.900391 47.6006 19.4004zM400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v112.8l89.0996 -36.8994
+c6 -30 32.7002 -52.7002 64.5 -52.7002c36.6006 0 67.3008 30.2998 65.7002 68.7998l79 56.2998c48.7002 -1.2002 89.6006 38.2998 89.6006 87.5c0 48.2002 -39.3008 87.5 -87.6006 87.5s-87.5996 -39.2998 -87.5996 -87.5v-1.09961l-55.4004 -80.2002
+c-14.5 0.799805 -28.7002 -3.09961 -40.7002 -11.2998l-116.6 48.0996v160.7c0 26.5 21.5 48 48 48h352zM300.3 193.5c-32.2002 0 -58.3994 26.0996 -58.3994 58.2998s26.1992 58.2998 58.3994 58.2998s58.4004 -26.1992 58.4004 -58.2998
+c0 -32.0996 -26.2002 -58.2998 -58.4004 -58.2998zM300.4 208.1c24.1992 0 43.8994 19.6006 43.8994 43.8008c0 24.1992 -19.5996 43.7998 -43.8994 43.7998c-24.2002 0 -43.9004 -19.6006 -43.9004 -43.7998c0 -24.2002 19.7002 -43.8008 43.9004 -43.8008z" />
+    <glyph glyph-name="spotify" unicode="&#xf1bc;" horiz-adv-x="496" 
+d="M248 440c136.9 0 248 -111.1 248 -248s-111.1 -248 -248 -248s-248 111.1 -248 248s111.1 248 248 248zM348.7 75.0996c8.09961 0 15.2002 6.30078 15.2002 15.4004s-3.60059 12.5996 -9.7002 16.5c-71.4004 42.7002 -155.101 44.2998 -237 26.2002
+c-7.5 -1.60059 -13.6006 -6.5 -13.6006 -16.7998c0 -8.10059 6.10059 -15.8008 15.8008 -15.8008c2.89941 0 8 1.60059 11.8994 2.60059c71.7002 14.7002 144.3 13.0996 206.7 -24.5c3.90039 -2.2998 6.5 -3.60059 10.7002 -3.60059zM375.6 140.7
+c10.9004 0 19.3008 8.7002 19.4004 19.5c0 8.7002 -3.2002 14.8994 -11.2998 19.7002c-49.4004 29.3994 -112.101 45.5 -177 45.5c-41.6006 0 -70 -5.80078 -97.7998 -13.6006c-10.3008 -2.89941 -15.5 -10 -15.5 -20.7002c0 -10.6992 8.69922 -19.3994 19.3994 -19.3994
+c4.5 0 7.10059 1.2998 11.9004 2.59961c82.8994 22.5 176.1 7.60059 238.6 -29.3994c3.60059 -1.90039 7.10059 -4.2002 12.2998 -4.2002zM406.6 216.9c12.2002 0 23.2002 9.69922 23.2002 23.2998c0 11.8994 -5.09961 18.0996 -12.8994 22.5996
+c-55.9004 32.6006 -132.4 47.7998 -205.4 47.7998c-42.9004 0 -82.2998 -4.89941 -117.5 -15.1992c-9 -2.60059 -17.4004 -10.3008 -17.4004 -23.9004c0 -13.2998 10.1006 -23.5996 23.3008 -23.5996c4.7998 0 9.2998 1.59961 12.8994 2.59961
+c82.4004 23 209.7 12.7998 280.9 -29.7002c4.5 -2.59961 7.7002 -3.89941 12.8994 -3.89941z" />
+    <glyph glyph-name="deviantart" unicode="&#xf1bd;" horiz-adv-x="320" 
+d="M320 354.8l-98.2002 -179.1l7.40039 -9.5h90.7998v-127.7h-160.9l-13.5 -9.2002l-43.6992 -84c-0.300781 0 -8.60059 -8.59961 -9.2002 -9.2002h-92.7002v93.2002l93.2002 179.4l-7.40039 9.2002h-85.7998v127.6h156l13.5 9.2002l43.7002 84
+c0.299805 0 8.59961 8.59961 9.2002 9.2002h97.5996v-93.1006z" />
+    <glyph glyph-name="soundcloud" unicode="&#xf1be;" horiz-adv-x="640" 
+d="M111.4 191.7l5.7998 -65l-5.7998 -68.2998c-0.300781 -2.5 -2.2002 -4.40039 -4.40039 -4.40039s-4.2002 1.90039 -4.2002 4.40039l-5.59961 68.2998l5.59961 65c0 2.2002 1.90039 4.2002 4.2002 4.2002c2.2002 0 4.09961 -2 4.40039 -4.2002zM132.8 237.3
+c2.5 0 4.7002 -2.2002 4.7002 -5l5.7998 -105.6l-5.7998 -68.2998c0 -2.80078 -2.2002 -5 -4.7002 -5c-2.7998 0 -4.7002 2.19922 -5 5l-5 68.2998l5 105.6c0.299805 2.7998 2.2002 5 5 5zM158.3 261.4c2.7998 0 5.2998 -2.2002 5.2998 -5.30078l5.30078 -130
+l-5.30078 -67.7998c0 -3.09961 -2.5 -5.2998 -5.2998 -5.2998c-3.09961 0 -5.2998 2.2002 -5.59961 5.2998l-4.40039 67.7998l4.40039 130c0.299805 3.10059 2.5 5.30078 5.59961 5.30078zM7.2002 164.8c1.39941 0 2.2002 -1.09961 2.5 -2.5l5.59961 -35.5996l-5.59961 -35
+c-0.299805 -1.40039 -1.10059 -2.5 -2.5 -2.5c-1.40039 0 -2.2002 1.09961 -2.5 2.5l-4.7002 35l4.7002 35.5996c0.299805 1.40039 1.09961 2.5 2.5 2.5zM30.7998 186.7c1.40039 0 2.5 -1.10059 2.7998 -2.5l7.2002 -57.5l-7.2002 -56.4004
+c-0.299805 -1.39941 -1.39941 -2.5 -2.7998 -2.5c-1.39941 0 -2.5 1.10059 -2.5 2.7998l-6.39941 56.1006l6.39941 57.5c0 1.39941 1.10059 2.5 2.5 2.5zM56.0996 198.1c1.7002 0 3.10059 -1.39941 3.10059 -3.2998l6.89941 -68.0996l-6.89941 -65.7998
+c0 -1.7002 -1.40039 -3.10059 -3.10059 -3.10059c-1.59961 0 -3 1.40039 -3.2998 3.10059l-5.7998 65.7998l5.7998 68.0996c0.200195 1.90039 1.60059 3.2998 3.2998 3.2998zM81.4004 200.3c1.89941 0 3.59961 -1.39941 3.89941 -3.59961l6.40039 -70l-6.40039 -67.7998
+c-0.299805 -2.2002 -2 -3.60059 -3.89941 -3.60059c-1.90039 0 -3.60059 1.40039 -3.60059 3.60059l-5.7998 67.7998l5.7998 70c0 2.2002 1.7002 3.59961 3.60059 3.59961zM322.8 311.2c2.5 -1.40039 4.10059 -4.2002 4.5 -7.2002l3.90039 -177.5l-3.90039 -64.2002
+c0 -4.7002 -3.89941 -8.59961 -8.59961 -8.59961s-8.60059 3.89941 -8.90039 8.59961l-1.7002 31.7002l-1.69922 32.5l3.2998 176.7v0.799805c0.200195 2.5 1.39941 5 3.2998 6.7002c1.40039 1.09961 3.40039 1.89941 5.59961 1.89941
+c1.40039 0 3.10059 -0.599609 4.2002 -1.39941zM296.1 295.9c2.2002 -1.40039 3.60059 -3.90039 3.90039 -6.7002l3.2998 -162.8l-3.09961 -58.6006l-0.299805 -6.7002c0 -2.2998 -0.800781 -4.19922 -2.5 -5.59961c-1.40039 -1.40039 -3.40039 -2.5 -5.60059 -2.5
+c-2.5 0 -4.7002 1.2002 -6.39941 3.09961c-1.10059 1.40039 -1.7002 3 -1.7002 4.7002v0.299805c-3.10059 65.3008 -3.10059 65.6006 -3.10059 65.6006l2.80078 160.8l0.299805 1.7002c0 2.7998 1.39941 5.2998 3.59961 6.7002
+c1.2998 0.799805 2.7998 1.39941 4.40039 1.39941c1.59961 0 3 -0.599609 4.39941 -1.39941zM184.7 273.4c3.39941 0 5.89941 -2.80078 6.09961 -6.10059l5 -140.6l-5 -67.2002c-0.299805 -3.2998 -2.7998 -5.7998 -6.09961 -5.7998c-3 0 -5.5 2.5 -5.7998 5.7998
+l-4.40039 67.2002l4.40039 140.6c0 3.2998 2.69922 6.10059 5.7998 6.10059zM561.4 210.6c43.2998 0 78.5996 -35.2998 78.5 -78.8994c0 -43.2998 -35.3008 -78.2998 -78.6006 -78.2998h-218.3c-4.7002 0.599609 -8.59961 4.19922 -8.59961 9.19922v249.7
+c0 4.7998 1.69922 7 7.7998 9.2002c15.2998 6.09961 32.5 9.40039 50.2998 9.40039c72.5 0 131.9 -55.6006 138.3 -126.4c9.5 3.90039 19.7998 6.09961 30.6006 6.09961zM264.7 270.9c4.2002 0 7.2002 -3.30078 7.5 -7.80078l3.89941 -136.699l-3.89941 -65.6006
+c0 -4.2002 -3.2998 -7.5 -7.5 -7.5s-7.5 3.2998 -7.7998 7.5l-3.30078 65.6006l3.30078 136.699c0.299805 4.5 3.59961 7.80078 7.7998 7.80078zM211.1 278.7c3.60059 0 6.40039 -3.10059 6.7002 -6.7002l4.40039 -145.3l-4.40039 -66.9004
+c-0.299805 -3.59961 -3.09961 -6.39941 -6.7002 -6.39941c-3.2998 0 -6.09961 2.7998 -6.39941 6.39941l-3.90039 66.9004l3.90039 145.3c0 3.59961 3.09961 6.7002 6.39941 6.7002zM237.8 275.3c3.90039 0 6.90039 -3 6.90039 -6.89941l4.2002 -141.7l-4.2002 -66.4004
+c0 -3.7998 -3.10059 -6.89941 -6.90039 -6.89941s-6.59961 3 -6.89941 6.89941l-3.90039 66.4004l3.90039 141.7c0 3.7998 3 6.89941 6.89941 6.89941z" />
+    <glyph glyph-name="vine" unicode="&#xf1ca;" horiz-adv-x="384" 
+d="M384 193.3v-52.0996c-18.4004 -4.2002 -36.9004 -6.10059 -52.0996 -6.10059c-36.9004 -77.3994 -103 -143.8 -125.101 -156.199c-14 -7.90039 -27.0996 -8.40039 -42.7002 0.799805c-27.0996 16.2998 -129.899 100.6 -164.1 365.6h74.5
+c18.7002 -159.1 64.5 -240.7 114.8 -301.8c27.9004 27.9004 54.7998 65.0996 75.6006 106.9c-49.8008 25.2998 -80.1006 80.8994 -80.1006 145.6c0 65.5996 37.7002 115.1 102.2 115.1c114.9 0 106.2 -127.899 81.5996 -181.5c0 0 -46.3994 -9.19922 -63.5 20.5
+c3.40039 11.3008 8.2002 30.8008 8.2002 48.5c0 31.3008 -11.2998 46.6006 -28.3994 46.6006c-18.2002 0 -30.8008 -17.1006 -30.8008 -50c0.100586 -79.2002 59.4004 -118.7 129.9 -101.9z" />
+    <glyph glyph-name="codepen" unicode="&#xf1cb;" horiz-adv-x="512" 
+d="M502.285 288.296c6.00098 -3.99902 9.71484 -11.1426 9.71582 -18.2852v-155.999c0 -7.14258 -3.71484 -14.2871 -9.71484 -18.2861l-234 -156.021c-8.06055 -4.95996 -16.584 -4.91504 -24.5713 0l-234 156.021c-6.00098 4 -9.71484 11.1436 -9.71484 18.2861v155.999
+c0 7.14258 3.71387 14.2861 9.71387 18.2852l234 156c8.06055 4.95996 16.584 4.91504 24.5713 0zM278 384.869v-102.572l95.4287 -63.7148l76.8574 51.4287zM234 384.869l-172.286 -114.858l76.8574 -51.4287l95.4287 63.7148v102.572zM44 228.868v-73.7139
+l55.1426 36.8564zM234 -0.84668v102.571l-95.4287 63.7158l-76.8574 -51.4297zM256 140.011l77.7148 52l-77.7148 52l-77.7148 -52zM278 -0.84668l172.286 114.857l-76.8574 51.4297l-95.4287 -63.7158v-102.571zM468 155.154v73.7139l-55.1426 -36.8574z" />
+    <glyph glyph-name="jsfiddle" unicode="&#xf1cc;" horiz-adv-x="576" 
+d="M510.634 210.538c45.6885 -25.334 68.3721 -74.5605 56.832 -122.634c-12.1035 -50.4199 -55.5479 -86.6592 -108.212 -87.293c-84.0303 -1.01172 -168.079 -0.458984 -252.12 -0.480469c-30.3223 -0.00683594 -60.668 -0.492188 -90.959 0.539062
+c-48.0938 1.63672 -91.7764 35.8643 -105.607 81.4326c-14.1289 46.5508 2.18945 94.623 41.9014 124.615c2.54688 1.92383 4.86914 6.52051 4.51465 9.54492c-3.74609 31.8604 7.14453 57.6709 32.6758 76.4082c26.2822 19.2881 55.2285 21.5879 85.3311 9.16699
+c2.36621 -0.975586 4.63965 -2.17773 7.82422 -3.68555c16.5215 27.5332 38.1221 48.6523 65.4922 63.9023c92.8594 51.7402 210.954 8.31152 246.85 -91.6455c5.55762 -15.4766 6.74512 -32.6074 9.09668 -49.0947c0.716797 -5.02832 1.6543 -8.15527 6.38086 -10.7764z
+M531.741 53.6582c39.3135 48.375 22.418 117.668 -35.1426 144.497c-7.43555 3.46582 -9.72559 7.74414 -9.84766 15.8936c-1.87012 125.129 -132.78 187.063 -230.24 132.697c-26.1133 -14.5674 -46.4492 -34.8955 -60.6709 -61.2939
+c-7.59082 -14.0908 -11.9287 -7.97754 -22.1982 -2.52734c-24.6113 13.0635 -49.0469 12.6406 -72.0332 -3.08301c-21.9678 -15.0244 -31.9102 -36.6201 -26.4199 -62.9805c2.4082 -11.5703 -0.914062 -17.0635 -10.0967 -23.1367
+c-38.1895 -25.2578 -53.0879 -74.8604 -34.1855 -116.105c18.4355 -40.2295 51.3135 -59.6631 95.1748 -59.9951c0.700195 -0.00488281 163.728 -0.545898 163.728 0.154297c56.8857 0 113.778 -0.551758 170.652 0.229492
+c28.9375 0.397461 53.0498 13.2178 71.2803 35.6504zM443.952 134.157c-5.84863 -31.1572 -34.6221 -55.0967 -66.666 -55.0957c-16.9531 0.00195312 -32.0586 6.5459 -44.0791 17.7051c-27.6973 25.7139 -71.1406 74.9805 -95.9375 93.3877
+c-20.0557 14.8877 -41.9893 12.333 -60.2715 -3.78223c-49.9961 -44.0713 15.8594 -121.775 67.0625 -77.1885c4.54883 3.95996 7.84082 9.54297 12.7441 12.8447c8.18457 5.50879 20.7666 0.883789 13.168 -10.6221c-17.3574 -26.2842 -49.3301 -38.1973 -78.8623 -29.3008
+c-28.8975 8.70312 -48.8408 35.9678 -48.626 70.1787c1.22461 22.4844 12.3633 43.0596 35.4141 55.9648c22.5742 12.6377 46.3682 13.1455 66.9902 -2.47363c50.791 -38.4756 75.5781 -81.7451 107.296 -101.245c24.5586 -15.0996 54.2549 -7.36328 68.8232 17.5059
+c28.8301 49.209 -34.5918 105.016 -78.8682 63.46c-3.98828 -3.74414 -6.91699 -8.93164 -11.4092 -11.7197c-10.9756 -6.81152 -17.333 4.1123 -12.8096 10.3525c20.7031 28.5537 50.4639 40.4404 83.2715 28.2139c31.4287 -11.7139 49.1074 -44.3662 42.7598 -78.1855z
+" />
+    <glyph glyph-name="rebel" unicode="&#xf1d0;" horiz-adv-x="512" 
+d="M256.5 -56c-139.3 0 -247.5 116.2 -243.3 254.1c2.7998 79.2002 43.2002 152.2 116.5 200.4c0.299805 0 1.89941 0.599609 1.09961 -0.799805c-5.7998 -5.5 -111.3 -129.8 -14.0996 -226.4c49.7998 -49.5 90 -2.5 90 -2.5c38.5 50.1006 -0.600586 125.9 -0.600586 125.9
+c-10 24.8994 -45.6992 40.0996 -45.6992 40.0996l28.7998 31.7998c24.3994 -10.5 43.2002 -38.6992 43.2002 -38.6992c0.799805 29.5996 -21.9004 61.3994 -21.9004 61.3994l44.5996 50.7002l44.3008 -50.0996c-20.5 -28.8008 -21.9004 -62.6006 -21.9004 -62.6006
+c13.7998 23 43.5 39.2998 43.5 39.2998l28.5 -31.7998c-27.4004 -8.89941 -45.4004 -39.8994 -45.4004 -39.8994c-15.7998 -28.5 -27.0996 -89.4004 0.600586 -127.301c32.3994 -44.5996 87.7002 2.80078 87.7002 2.80078c102.699 91.8994 -10.5 225 -10.5 225
+c-6.10059 5.5 0.799805 2.7998 0.799805 2.7998c50.0996 -36.5 114.6 -84.4004 116.2 -204.8c2 -145.601 -99.9004 -249.4 -242.4 -249.4z" />
+    <glyph glyph-name="empire" unicode="&#xf1d1;" horiz-adv-x="496" 
+d="M287.6 393.8c-10.7998 2.2002 -22.0996 3.2998 -33.5 3.60059v18.1992c78.1006 -2.19922 146.101 -44 184.601 -106.6l-15.7998 -9.09961c-6.10059 9.69922 -12.7002 18.7998 -20.2002 27.0996l-18 -15.5c-26 29.5996 -61.4004 50.7002 -101.9 58.4004zM53.4004 125.6
+c3.89941 -10.7998 8.2998 -21.0996 13.5996 -31.0996l-15.7998 -9.09961c-17.1006 31.5996 -27.1006 68.0996 -27.1006 106.6s9.90039 75 27.1006 106.5l15.7998 -9.09961c-5.2998 -9.7002 -10 -20.2002 -13.5996 -31l22.6992 -7.7002
+c-6.39941 -18.2998 -9.69922 -38.2002 -9.69922 -58.7002s3.59961 -40.4004 10 -58.7002zM213.1 14l-4.69922 -23.7998c10.7998 -1.90039 22.1992 -3.2998 33.5 -3.60059v-18.2998c-78.1006 2.2998 -146.4 44.2998 -184.9 106.601l16 9.39941
+c5.7998 -9.7002 12.7002 -18.7998 20.2002 -27.3994l18 15.7998c26.0996 -29.6006 61.5 -50.7002 101.899 -58.7002zM93.2998 327.1c-7.5 -8.2998 -14.0996 -17.5 -20.0996 -27.1992l-15.7998 9.09961c38.5 62.5996 106.5 104.4 184.6 106.6v-18.1992
+c-11.4004 -0.300781 -22.7002 -1.40039 -33.5 -3.60059l4.7002 -23.7998c-40.5 -7.7002 -75.9004 -28.7998 -101.9 -58.4004zM402.7 56.9004c7.5 8.59961 14.3994 17.6992 20.0996 27.3994l16.1006 -9.39941c-38.5 -62.3008 -106.801 -104.4 -184.9 -106.601v18.2998
+c11.4004 0.300781 22.7002 1.7002 33.5 3.60059l-4.7002 23.7998c40.5 8 75.9004 29.0996 101.9 58.7002zM496 192c0 -137 -111 -248 -248 -248s-248 111 -248 248s111 248 248 248s248 -111 248 -248zM483.8 192c0 130.1 -105.7 235.8 -235.8 235.8
+s-235.8 -105.7 -235.8 -235.8s105.7 -235.8 235.8 -235.8s235.8 105.7 235.8 235.8zM444.8 298.6c17.2002 -31.5996 27.1006 -68.0996 27.1006 -106.6s-9.90039 -75 -27.1006 -106.4l-15.7998 9.10059c5.2998 10 9.7002 20.2002 13.5996 31l-23 7.7002
+c6.40039 18.2998 10 38.1992 10 58.6992s-3.2998 40.4004 -9.69922 58.7002l22.6992 7.7002c-3.59961 10.7998 -8.2998 21.2998 -13.5996 31zM261.8 120.9l13.2998 -66.7002c-8.59961 -1.7002 -17.6992 -2.7998 -27.0996 -2.7998s-18.5 1.09961 -27.0996 2.7998
+l13.2998 66.7002c-16.2998 3.2998 -30.5 11.5996 -40.7002 23.5l-51.2002 -44.8008c-11.8994 13.6006 -21.2998 29.4004 -27.0996 46.8008l64.2002 22.0996c-2.5 7.40039 -3.90039 15.2002 -3.90039 23.5s1.40039 16 3.90039 23.5l-64.5 22.0996
+c6.09961 17.5 15.5 33.2002 27.3994 46.8008l51.2002 -44.8008c10.2998 11.9004 24.4004 20.5 40.7002 23.8008l-13.2998 66.3994c8.59961 2 17.6992 2.7998 27.0996 2.7998s18.5 -0.899414 27.0996 -2.7998l-13.2998 -66.3994
+c16.2998 -3.30078 30.5 -11.9004 40.7002 -23.8008l51.2002 44.8008c11.8994 -13.6006 21.2998 -29.4004 27.3994 -46.8008l-64.5 -22.0996c2.5 -7.40039 3.90039 -15.2002 3.90039 -23.5s-1.40039 -16 -3.90039 -23.5l64.2002 -22.0996
+c-5.7998 -17.5 -15.2002 -33.2002 -27.0996 -46.8008l-51.2002 44.8008c-10.2998 -11.9004 -24.4004 -20.2002 -40.7002 -23.5z" />
+    <glyph glyph-name="git-square" unicode="&#xf1d2;" 
+d="M100.59 113.76c48.5703 -3.30957 58.9502 -2.10938 58.9502 -11.9395c0 -20 -65.5498 -20.0605 -65.5498 -1.52051c0.00976562 5.08984 3.29004 9.40039 6.59961 13.46zM128.54 230.4c30.96 0 31.7598 -44.4707 -0.75 -44.4707c-33 0 -31.54 44.4707 0.75 44.4707z
+M448 368v-352c0 -26.4961 -21.5039 -48 -48 -48h-352c-26.4961 0 -48 21.5039 -48 48v352c0 26.4961 21.5039 48 48 48h352c26.4961 0 48 -21.5039 48 -48zM221 298.69c0 -14.4902 8.37988 -22.8809 22.8604 -22.8809c14.7393 0 23.1299 8.39062 23.1299 22.8809
+c0 14.4893 -8.37012 22.3096 -23.1104 22.3096c-14.4795 0 -22.8799 -7.83984 -22.8799 -22.3096zM199.18 253h-49.5498c-25 6.5498 -81.5596 4.84961 -81.5596 -46.75c0 -18.7998 9.39941 -32 21.8496 -38.1104c-15.6895 -14.3701 -23.1201 -21.1396 -23.1201 -30.7393
+c0 -6.87012 2.79004 -13.2207 11.1807 -16.7607c-8.90039 -8.39941 -14 -14.4795 -14 -25.9199c0.0195312 -20.0693 17.5498 -31.7197 63.5391 -31.7197c44.2207 0 69.8701 16.5098 69.8701 45.7305c0 36.6699 -28.2295 35.3193 -94.7695 39.3799l8.37988 13.4297
+c17 -4.74023 74.1904 -6.23047 74.1904 42.4297c0 11.6904 -4.83008 19.8203 -9.40039 25.6699l23.3799 1.78027zM283.52 143.16l-13 1.78027c-3.81934 0.509766 -4.06934 1 -4.06934 5.08984v105.45h-52.6006l-2.79004 -20.5703c15.75 -5.5498 17 -4.86035 17 -10.1699
+v-74.7402c0 -5.62012 -0.30957 -4.58008 -17 -6.87012v-20.0596h72.4209zM384 133l-6.87012 22.3701c-40.9297 -15.3701 -37.8496 12.4102 -37.8496 16.7295v60.7207h37.8496v25.4102h-35.8203c-2.86914 0 -2 -2.52051 -2 38.6299h-24.1797
+c-2.79004 -27.7002 -11.6797 -38.8799 -34 -41.4199v-22.6201c20.4697 0 19.8203 0.849609 19.8203 -2.54004v-66.5703c0 -28.7197 11.4297 -40.9102 41.6699 -40.9102c14.4502 0 30.4502 4.83008 41.3799 10.2002z" />
+    <glyph glyph-name="git" unicode="&#xf1d3;" horiz-adv-x="512" 
+d="M216.29 289.61l0.0400391 -34.5508l-37.4102 -2.83984c7.27051 -9.35938 15 -22.3701 15 -41.0693c0 -77.8906 -91.4297 -75.4707 -118.7 -67.8906l-13.4297 -21.5498c106.47 -6.5 151.63 -4.33984 151.63 -63c0 -46.7598 -41.04 -73.1797 -111.79 -73.1797
+c-73.5801 0 -101.63 18.71 -101.63 50.8193c0 18.3008 8.12988 28.04 22.4004 41.4502c-13.4199 5.66992 -17.8906 15.8105 -17.8906 26.8105c0 15.3594 11.9004 26.21 37 49.21c-20 9.76953 -35 30.9102 -35 61c0 82.5498 90.4902 85.2793 130.49 74.79h79.29z
+M152.87 47.71c0 15.7402 -16.6104 13.8096 -94.3203 19.1104c-5.2998 -6.54004 -10.5693 -13.4004 -10.5693 -21.54c0 -29.6699 104.89 -29.6299 104.89 2.42969zM102.06 182.29c52.0205 0 50.7402 71.1602 1.2002 71.1602c-51.6602 0 -54 -71.1602 -1.2002 -71.1602z
+M235.36 81.7803v32.0996c26.75 3.66016 27.2393 2 27.2393 11v119.51c0 8.5 -2.0498 7.37988 -27.2393 16.2607l4.46973 32.9199h84.1699v-168.71c0 -6.51074 0.400391 -7.32031 6.50977 -8.14062l20.7305 -2.83984v-32.0996h-115.88zM287.81 326.09
+c-23.1699 0 -36.5898 13.4297 -36.5898 36.6104c0 23.1797 13.4199 35.7695 36.5898 35.7695c23.5801 0 37 -12.6201 37 -35.7695c0 -23.1504 -13.4199 -36.6104 -37 -36.6104zM512 97.54c-17.4902 -8.53027 -43.0996 -16.2598 -66.2803 -16.2598
+c-48.3799 0 -66.6699 19.5 -66.6699 65.46v106.51c0 5.41992 1.0498 4.05957 -31.71 4.05957v36.1904c35.7803 4.07031 50 22 54.4697 66.2695h38.6309c0 -65.8291 -1.34082 -61.8096 3.25977 -61.8096h57.2998v-40.6504h-60.5596v-97.1494
+c0 -6.91992 -4.9209 -51.4102 60.5693 -26.8398z" />
+    <glyph glyph-name="hacker-news" unicode="&#xf1d4;" 
+d="M0 416h448v-448h-448v448zM21.2002 218.8h-0.200195c0.0996094 0.100586 0.200195 0.299805 0.299805 0.400391c0 -0.100586 0 -0.299805 -0.0996094 -0.400391zM239.2 164.9l80.7998 155.1h-34.7998c-54.7998 -101.2 -48.2998 -98.5996 -60.6006 -125.6
+c-10.0996 24.3994 -6.7998 27.2998 -59.2998 125.6h-37.2998l79.7998 -153.3v-102.7h31.4004v100.9z" />
+    <glyph glyph-name="tencent-weibo" unicode="&#xf1d5;" horiz-adv-x="384" 
+d="M72.2998 -47.7998c1.40039 -19.9004 -27.5996 -22.2002 -29.7002 -2.90039c-11.5996 129.9 31.1006 239.5 101.4 313.2c-15.5996 34 9.2002 77.0996 50.5996 77.0996c30.3008 0 55.1006 -24.5996 55.1006 -55.0996c0 -44 -49.5 -70.7998 -86.9004 -45.0996
+c-65.7002 -71.3008 -101.399 -169.801 -90.5 -287.2zM192 447.9c92 0 166.6 -74.6006 166.6 -166.5c0 -102.301 -93.2998 -185.5 -204 -162.301c-19 4.7002 -12.5 33.2002 6.60059 29.1006c80.7998 -20.7998 167.7 42.2998 167.7 133.1c0 75.5 -61.5 136.9 -136.9 136.9
+c-101 0 -168.3 -106.601 -122 -199.2c9 -17.9004 -17.5996 -30.7998 -26.2998 -13.4004c-56 108.101 22.3994 242.301 148.3 242.301z" />
+    <glyph glyph-name="qq" unicode="&#xf1d6;" 
+d="M433.754 27.5547c-11.5264 -1.39258 -44.8604 52.7412 -44.8604 52.7412c0 -31.3447 -16.1357 -72.2471 -51.0508 -101.786c16.8418 -5.19141 54.8428 -19.167 45.8037 -34.4209c-7.31641 -12.3428 -125.511 -7.88086 -159.633 -4.03711
+c-34.1221 -3.84375 -152.315 -8.30566 -159.632 4.03711c-9.04492 15.25 28.918 29.2139 45.7832 34.415c-34.9199 29.5391 -51.0586 70.4453 -51.0586 101.792c0 0 -33.334 -54.1338 -44.8594 -52.7412c-5.37012 0.650391 -12.4238 29.6445 9.34668 99.7041
+c10.2617 33.0244 21.9951 60.4785 40.1445 105.779c-3.05566 116.898 45.2441 214.956 160.262 214.962c113.737 -0.00585938 163.156 -96.1328 160.264 -214.963c18.1182 -45.2227 29.9121 -72.8506 40.1445 -105.778c21.7676 -70.0596 14.7158 -99.0527 9.3457 -99.7041z
+" />
+    <glyph glyph-name="weixin" unicode="&#xf1d7;" horiz-adv-x="576" 
+d="M385.2 280.4c-92.4004 0 -165.4 -69.1006 -165.3 -154c0 -14.2002 2.19922 -27.9004 6.19922 -40.8008c-6.19922 -0.5 -12.0996 -0.799805 -18.2998 -0.799805c-24.3994 0 -43.7998 4.90039 -68.2002 9.7002l-68 -34.0996l19.3008 58.5996
+c-48.6006 34.0996 -77.9004 78.2002 -77.9004 131.6c0 92.6006 87.5 165.4 194.7 165.4c95.5996 0 179.7 -58.2998 196.3 -136.7c-6.2002 0.799805 -12.4004 1.10059 -18.7998 1.10059zM280.7 333.3c-14.7002 0 -29.2002 -9.7002 -29.2998 -24.3994
+c0 -14.5 14.5 -24.2002 29.2998 -24.2002c14.5 0 24.2002 9.7002 24.2002 24.2002c0 14.6992 -9.7002 24.3994 -24.2002 24.3994zM144.3 284.7c14.7998 0 24.4004 9.59961 24.4004 24.2002c0 14.6992 -9.60059 24.3994 -24.4004 24.3994
+c-14.5 0 -29.2998 -9.59961 -29.2998 -24.3994c0 -14.5 14.7998 -24.2002 29.2998 -24.2002zM563 128.6c0 -43.7998 -29 -82.6992 -68.2002 -112.1l14.7998 -48.5996l-53.3994 29.2998c-19.7002 -4.7998 -39.2998 -9.90039 -58.6006 -9.90039
+c-92.5996 0 -165.399 63.4004 -165.399 141.3c0 77.9004 72.7002 141.301 165.399 141.301c87.5 0 165.4 -63.4004 165.4 -141.301zM343.9 153.1c14.6992 0 24.3994 9.60059 24.3994 19.6006c0 9.59961 -9.59961 19.2998 -24.3994 19.2998
+c-9.60059 0 -19.3008 -9.59961 -19.3008 -19.2998c0 -9.90039 9.60059 -19.6006 19.3008 -19.6006zM451 153.1c14.5 0 24.5 9.60059 24.4004 19.6006c0 9.59961 -9.90039 19.2998 -24.4004 19.2998c-9.59961 0 -19.2998 -9.59961 -19.2998 -19.2998
+c0 -9.90039 9.59961 -19.6006 19.2998 -19.6006z" />
+    <glyph glyph-name="slideshare" unicode="&#xf1e7;" horiz-adv-x="512" 
+d="M187.7 294.3c34 0 61.7002 -25.7002 61.7002 -57.7002c0 -31.6992 -27.7002 -57.6992 -61.7002 -57.6992s-61.7002 26 -61.7002 57.6992c0 32 27.7002 57.7002 61.7002 57.7002zM331.1 294.3c34.3008 0 61.8008 -25.7002 61.7002 -57.7002
+c0 -31.6992 -27.3994 -57.6992 -61.7002 -57.6992c-34 0 -61.6992 26 -61.6992 57.6992c0 32 27.6992 57.7002 61.6992 57.7002zM487.7 204.3c15.2002 10.5 25.2002 -4 16.0996 -17.7998c-18.2998 -22.5996 -53.2002 -50.2998 -106.3 -72
+c56.2998 -191.7 -137.4 -222.3 -134.3 -124c0 0.700195 -0.299805 53.7998 -0.299805 93.5c-4.30078 0.799805 -8.60059 2 -13.7002 3.09961c0 -40 -0.299805 -95.8994 -0.299805 -96.5996c3.09961 -98.2002 -190.601 -67.5996 -134.301 124.1
+c-53.1992 21.7002 -88 49.4004 -106.3 72c-9.09961 13.7002 0.900391 28.3008 16 17.7002c2 -1.39941 4.2998 -2.89941 6.2998 -4.2998v198.3c0 27.4004 20.6006 49.7002 46 49.7002h359.101c25.3994 0 46 -22.2998 46 -49.7002v-198.3zM457.2 185.1h0.0996094v190.601
+c0 32.7998 -10.5996 45.7002 -40.8994 45.7002h-317.7c-31.7002 0 -40.6006 -10.8008 -40.6006 -45.7002v-192.4c67.7002 -35.3994 125.7 -29.0996 157.4 -28c13.4004 0.299805 22 -2.2998 27.0996 -7.7002c1.7002 -1.59961 10 -9.39941 20.3008 -17.0996
+c1.09961 15.7998 10 25.7998 33.6992 24.9004c32.3008 -1.40039 91.7002 -7.7002 160.601 29.6992z" />
+    <glyph glyph-name="twitch" unicode="&#xf1e8;" horiz-adv-x="512" 
+d="M391.17 344.53v-109.7h-38.6299v109.7h38.6299zM285 345v-109.75h-38.6299v109.75h38.6299zM120.83 448h366.86v-256l-173.771 -164.58h-77.25l-96.5303 -91.4199v91.4199h-115.83v329.16zM449.07 210.25v201.17h-308.931v-274.29h86.8701v-64l67.6006 64h77.2393z" />
+    <glyph glyph-name="yelp" unicode="&#xf1e9;" horiz-adv-x="384" 
+d="M42.9004 207.68l99.6191 -48.6094c19.2002 -9.40039 16.2002 -37.5107 -4.5 -42.71l-107.52 -26.8105c-1.51074 -0.379883 -4 -0.6875 -5.55762 -0.6875c-11.2676 0 -21.415 9.08887 -22.6523 20.2881c-0.708984 6.18164 -1.28516 16.25 -1.28516 22.4727
+c0 17.8105 4.60742 45.9658 10.2852 62.8467c2.88574 8.56836 12.5664 15.5215 21.6074 15.5215c2.9082 0 7.38867 -1.03516 10.0029 -2.31152zM86.9004 -31.5703c-5.48535 3.75195 -9.92773 12.1904 -9.92773 18.8359c0 4.8291 2.61914 11.6631 5.84766 15.2539
+l74.21 82.4004c14.3096 15.8105 40.5098 5.2002 39.8096 -16.0996l-3.89941 -110.82c-0.412109 -12.1484 -10.6123 -22.0078 -22.7676 -22.0078c-1.07129 0 -2.79688 0.146484 -3.85254 0.328125c-23.8691 4.04199 -59.4492 18.4277 -79.4199 32.1094zM232.24 78.3496
+c-11.2998 18.1104 6.2002 40.4102 26.5098 33.9102l105.42 -34.2598c8.69043 -2.88965 15.7422 -12.667 15.7422 -21.8252c0 -2.8125 -0.963867 -7.16504 -2.15234 -9.71484c-10.418 -21.8799 -34.0322 -52.1689 -52.71 -67.6104
+c-3.50586 -2.88867 -10.0391 -5.2334 -14.582 -5.2334c-6.99707 0 -15.6963 4.80859 -19.418 10.7334zM380.57 210.58c1.04688 -2.41602 1.93652 -6.5127 1.93652 -9.14551c0 -9.49805 -7.39551 -19.3828 -16.5068 -22.0645l-106.64 -30.5098
+c-20.5 -5.90039 -37.1006 17.0098 -25.2002 34.71l62 91.9199c3.75 5.55664 12.2354 10.0654 18.9385 10.0654c4.74512 0 11.4932 -2.53809 15.0615 -5.66602c18.166 -16.0361 40.75 -47.0869 50.4102 -69.3096zM62.1104 417.82
+c29.4697 14.0293 79.793 27.5137 112.33 30.0996c0.503906 0.0410156 1.32422 0.0742188 1.83008 0.0742188c12.5146 0 22.6709 -10.1562 22.6709 -22.6699c0 -0.0566406 -0.000976562 -0.147461 -0.000976562 -0.204102v-208.34
+c0 -23.2998 -30.9102 -31.6006 -42.6104 -11.4004l-104.12 180.44c-1.68164 2.92188 -3.0459 8.0293 -3.0459 11.4014c0 7.93066 5.7998 17.1592 12.9463 20.5986z" />
+    <glyph glyph-name="paypal" unicode="&#xf1ed;" horiz-adv-x="384" 
+d="M111.4 152.1c-3.5 -19.1992 -17.4004 -108.699 -21.5 -134c-0.300781 -1.7998 -1 -2.5 -3 -2.5h-74.6006c-7.59961 0 -13.0996 6.60059 -12.0996 13.9004l58.5996 371.9c1.5 9.59961 10.1006 16.8994 20 16.8994c152.3 0 165.101 3.7002 204 -11.3994
+c60.1006 -23.3008 65.6006 -79.5 44 -140.301c-21.5 -62.5996 -72.5 -89.5 -140.1 -90.2998c-43.4004 -0.700195 -69.5 7 -75.2998 -24.2002zM357.1 296c28.4004 -21.2002 30.3008 -57.7998 23.8008 -92.5996c-16.5 -83.5 -71.9004 -112.301 -142.9 -112.301
+c-15 0 -24.7002 2.30078 -29.2998 -19.6992c-15.5 -97.4004 -13.7002 -85.9004 -14.4004 -91.3008c-1.7002 -8.59961 -8.7998 -14.8994 -17.3994 -14.8994h-63.5c-7.10059 0 -11.6006 5.7998 -10.6006 12.8994c0 0 4.5 29.3008 27.1006 169.7
+c0.799805 6.10059 4.7998 9.40039 10.8994 9.40039c54 0 164.601 -9.90039 204.5 103.899c3.7002 11.1006 6.7998 22.2002 8.7998 33.6006c0.5 3.09961 1.2002 2.59961 3 1.2998z" />
+    <glyph glyph-name="google-wallet" unicode="&#xf1ee;" 
+d="M156.8 321.2c37.6006 -60.6006 64.2002 -113.101 84.2998 -162.5c-8.2998 -33.7998 -18.7998 -66.5 -31.2998 -98.2998c-13.2002 52.2998 -26.5 101.3 -56 148.5c6.5 36.3994 2.2998 73.5996 3 112.3zM109.3 248c5 0 10 -2.5 13 -6.5
+c43.7998 -59.7998 66.2998 -123.8 82.5 -193.5h-103.5c-20 69.5 -49.5 133 -91.7002 187.3c-4 5.2002 0 12.7002 6.5 12.7002h93.2002zM157.1 336h108.7c74.7998 -103 131.2 -230 143.2 -368h-113.7c-8.2002 133.5 -69.7002 260 -138.2 368zM408.9 404.5
+c19 -67.5 31.0996 -139 31.0996 -212.6c0 -69.5 -9.5 -142.5 -25.2998 -203c-10.9004 92.5 -42.4004 184.6 -90.6006 270.8c-4.19922 50.5 -13.2998 99.5 -26.5 146c-1.19922 5.2998 2.5 10.2998 7.80078 10.2998h88.2998c7 0 13.3994 -4.7002 15.2002 -11.5z" />
+    <glyph glyph-name="cc-visa" unicode="&#xf1f0;" horiz-adv-x="576" 
+d="M470.1 216.7c0 0 7.60059 -37.2002 9.30078 -45h-33.4004c3.2998 8.89941 16 43.5 16 43.5c-0.200195 -0.299805 3.2998 9.09961 5.2998 14.8994zM576 368v-352c0 -26.5 -21.5 -48 -48 -48h-480c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h480
+c26.5 0 48 -21.5 48 -48zM152.5 116.8l63.2002 155.2h-42.5l-39.2998 -106l-4.30078 21.5l-14 71.4004c-2.2998 9.89941 -9.39941 12.6992 -18.1992 13.0996h-64.7002l-0.700195 -3.09961c15.7998 -4 29.9004 -9.80078 42.2002 -17.1006l35.7998 -135h42.5zM246.9 116.6
+l25.1992 155.4h-40.1992l-25.1006 -155.4h40.1006zM386.8 167.4c0.200195 17.6992 -10.5996 31.1992 -33.7002 42.2998c-14.0996 7.09961 -22.6992 11.8994 -22.6992 19.2002c0.199219 6.59961 7.2998 13.3994 23.0996 13.3994
+c13.0996 0.299805 22.7002 -2.7998 29.9004 -5.89941l3.59961 -1.7002l5.5 33.5996c-7.90039 3.10059 -20.5 6.60059 -36 6.60059c-39.7002 0 -67.5996 -21.2002 -67.7998 -51.4004c-0.299805 -22.2998 20 -34.7002 35.2002 -42.2002
+c15.5 -7.59961 20.7998 -12.5996 20.7998 -19.2998c-0.200195 -10.4004 -12.6006 -15.2002 -24.1006 -15.2002c-16 0 -24.5996 2.5 -37.6992 8.2998l-5.30078 2.5l-5.59961 -34.8994c9.40039 -4.2998 26.7998 -8.10059 44.7998 -8.2998
+c42.2002 -0.100586 69.7002 20.7998 70 53zM528 116.6l-32.4004 155.4h-31.0996c-9.59961 0 -16.9004 -2.7998 -21 -12.9004l-59.7002 -142.5h42.2002s6.90039 19.2002 8.40039 23.3008h51.5996c1.2002 -5.5 4.7998 -23.3008 4.7998 -23.3008h37.2002z" />
+    <glyph glyph-name="cc-mastercard" unicode="&#xf1f1;" horiz-adv-x="576" 
+d="M482.9 37.7002c0 -6.7998 -4.60059 -11.7002 -11.2002 -11.7002c-6.7998 0 -11.2002 5.2002 -11.2002 11.7002s4.40039 11.7002 11.2002 11.7002c6.59961 0 11.2002 -5.2002 11.2002 -11.7002zM172.1 49.4004c6.5 0 10.8008 -5.2002 10.9004 -11.7002
+c0 -6.7998 -4.40039 -11.7002 -10.9004 -11.7002c-7.09961 0 -11.1992 5.2002 -11.1992 11.7002s4.09961 11.7002 11.1992 11.7002zM289.6 49.7002c5.2002 0 8.7002 -3 9.60059 -8.7002h-19.1006c0.800781 5.2002 4.10059 8.7002 9.5 8.7002zM397.4 49.4004
+c6.7998 0 11.1992 -5.2002 11.1992 -11.7002c0 -6.7998 -4.39941 -11.7002 -11.1992 -11.7002c-6.80078 0 -10.9004 5.2002 -10.9004 11.7002s4.09961 11.7002 10.9004 11.7002zM503.3 23.2998c0 -0.299805 0.299805 -0.5 0.299805 -1.09961
+c0 -0.299805 -0.299805 -0.5 -0.299805 -1.10059c-0.299805 -0.299805 -0.299805 -0.5 -0.5 -0.799805c-0.299805 -0.299805 -0.5 -0.5 -1.09961 -0.5c-0.299805 -0.299805 -0.5 -0.299805 -1.10059 -0.299805c-0.299805 0 -0.5 0 -1.09961 0.299805
+c-0.299805 0 -0.5 0.299805 -0.799805 0.5c-0.299805 0.299805 -0.5 0.5 -0.5 0.799805c-0.299805 0.5 -0.299805 0.800781 -0.299805 1.10059c0 0.5 0 0.799805 0.299805 1.09961c0 0.5 0.299805 0.799805 0.5 1.10059c0.299805 0.299805 0.5 0.299805 0.799805 0.5
+c0.5 0.299805 0.799805 0.299805 1.09961 0.299805c0.5 0 0.800781 0 1.10059 -0.299805c0.5 -0.300781 0.799805 -0.300781 1.09961 -0.5c0.299805 -0.200195 0.200195 -0.600586 0.5 -1.10059zM501.1 21.9004c0.5 0 0.5 0.299805 0.800781 0.299805
+c0.299805 0.299805 0.299805 0.5 0.299805 0.799805s0 0.5 -0.299805 0.799805c-0.300781 0 -0.5 0.299805 -1.10059 0.299805h-1.59961v-3.5h0.799805v1.40039h0.299805l1.10059 -1.40039h0.799805zM576 367v-352c0 -26.5 -21.5 -48 -48 -48h-480c-26.5 0 -48 21.5 -48 48
+v352c0 26.5 21.5 48 48 48h480c26.5 0 48 -21.5 48 -48zM64 227.4c0 -76.5 62.0996 -138.5 138.5 -138.5c27.2002 0 53.9004 8.19922 76.5 23.0996c-72.9004 59.2998 -72.4004 171.2 0 230.5c-22.5996 15 -49.2998 23.0996 -76.5 23.0996
+c-76.4004 0.100586 -138.5 -62 -138.5 -138.199zM288 118.6c70.5 55 70.2002 162.2 0 217.5c-70.2002 -55.2998 -70.5 -162.6 0 -217.5zM145.7 42.2998c0 8.7002 -5.7002 14.4004 -14.7002 14.7002c-4.59961 0 -9.5 -1.40039 -12.7998 -6.5
+c-2.40039 4.09961 -6.5 6.5 -12.2002 6.5c-3.7998 0 -7.59961 -1.40039 -10.5996 -5.40039v4.40039h-8.2002v-36.7002h8.2002c0 18.9004 -2.5 30.2002 9 30.2002c10.1992 0 8.19922 -10.2002 8.19922 -30.2002h7.90039c0 18.2998 -2.5 30.2002 9 30.2002
+c10.2002 0 8.2002 -10 8.2002 -30.2002h8.2002v23h-0.200195zM190.6 56h-7.89941v-4.40039c-2.7002 3.30078 -6.5 5.40039 -11.7002 5.40039c-10.2998 0 -18.2002 -8.2002 -18.2002 -19.2998c0 -11.2002 7.90039 -19.2998 18.2002 -19.2998
+c5.2002 0 9 1.89941 11.7002 5.39941v-4.59961h7.89941v36.7998zM231.1 30.4004c0 15 -22.8994 8.19922 -22.8994 15.1992c0 5.7002 11.8994 4.80078 18.5 1.10059l3.2998 6.5c-9.40039 6.09961 -30.2002 6 -30.2002 -8.2002c0 -14.2998 22.9004 -8.2998 22.9004 -15
+c0 -6.2998 -13.5 -5.7998 -20.7002 -0.799805l-3.5 -6.2998c11.2002 -7.60059 32.5996 -6 32.5996 7.5zM266.5 21.0996l-2.2002 6.80078c-3.7998 -2.10059 -12.2002 -4.40039 -12.2002 4.09961v16.5996h13.1006v7.40039h-13.1006v11.2002h-8.19922v-11.2002h-7.60059
+v-7.2998h7.60059v-16.7002c0 -17.5996 17.2998 -14.4004 22.5996 -10.9004zM279.8 34.5h27.5c0 16.2002 -7.39941 22.5996 -17.3994 22.5996c-10.6006 0 -18.2002 -7.89941 -18.2002 -19.2998c0 -20.5 22.5996 -23.8994 33.7998 -14.2002l-3.7998 6
+c-7.7998 -6.39941 -19.6006 -5.7998 -21.9004 4.90039zM338.9 56c-4.60059 2 -11.6006 1.7998 -15.2002 -4.40039v4.40039h-8.2002v-36.7002h8.2002v20.7002c0 11.5996 9.5 10.0996 12.7998 8.40039zM349.5 37.7002c0 11.3994 11.5996 15.0996 20.7002 8.39941l3.7998 6.5
+c-11.5996 9.10059 -32.7002 4.10059 -32.7002 -15c0 -19.7998 22.4004 -23.7998 32.7002 -15l-3.7998 6.5c-9.2002 -6.5 -20.7002 -2.59961 -20.7002 8.60059zM416.2 56h-8.2002v-4.40039c-8.2998 11 -29.9004 4.80078 -29.9004 -13.8994
+c0 -19.2002 22.4004 -24.7002 29.9004 -13.9004v-4.59961h8.2002v36.7998zM449.9 56c-2.40039 1.2002 -11 2.90039 -15.2002 -4.40039v4.40039h-7.90039v-36.7002h7.90039v20.7002c0 11 9 10.2998 12.7998 8.40039zM490.2 70.9004h-7.90039v-19.3008
+c-8.2002 10.9004 -29.8994 5.10059 -29.8994 -13.8994c0 -19.4004 22.5 -24.6006 29.8994 -13.9004v-4.59961h7.90039v51.7002zM497.8 146v-4.59961h0.799805v4.59961h1.90039v0.799805h-4.59961v-0.799805h1.89941zM504.4 22.2002c0 0.5 0 1.09961 -0.300781 1.59961
+c-0.299805 0.299805 -0.5 0.799805 -0.799805 1.10059c-0.299805 0.299805 -0.799805 0.5 -1.09961 0.799805c-0.5 0 -1.10059 0.299805 -1.60059 0.299805c-0.299805 0 -0.799805 -0.299805 -1.39941 -0.299805c-0.5 -0.299805 -0.799805 -0.5 -1.10059 -0.799805
+c-0.5 -0.300781 -0.799805 -0.800781 -0.799805 -1.10059c-0.299805 -0.5 -0.299805 -1.09961 -0.299805 -1.59961c0 -0.299805 0 -0.799805 0.299805 -1.40039c0 -0.299805 0.299805 -0.799805 0.799805 -1.09961c0.300781 -0.299805 0.5 -0.5 1.10059 -0.799805
+c0.5 -0.300781 1.09961 -0.300781 1.39941 -0.300781c0.5 0 1.10059 0 1.60059 0.300781c0.299805 0.299805 0.799805 0.5 1.09961 0.799805s0.5 0.799805 0.799805 1.09961c0.300781 0.600586 0.300781 1.10059 0.300781 1.40039zM507.6 146.9h-1.39941l-1.60059 -3.5
+l-1.59961 3.5h-1.40039v-5.40039h0.800781v4.09961l1.59961 -3.5h1.09961l1.40039 3.5v-4.09961h1.09961v5.40039zM512 227.4c0 76.1992 -62.0996 138.3 -138.5 138.3c-27.2002 0 -53.9004 -8.2002 -76.5 -23.1006c72.0996 -59.2998 73.2002 -171.5 0 -230.5
+c22.5996 -15 49.5 -23.0996 76.5 -23.0996c76.4004 -0.0996094 138.5 61.9004 138.5 138.4z" />
+    <glyph glyph-name="cc-discover" unicode="&#xf1f2;" horiz-adv-x="576" 
+d="M520.4 251.9c0 -8.40039 -5.5 -12.8008 -15.8008 -12.8008h-4.69922v24.9004h4.89941c10.1006 0 15.6006 -4.2002 15.6006 -12.0996zM528 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-480c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h480z
+M483.9 277.1v-82h16v32.8008h2.19922l22.2002 -32.8008h19.6006l-25.8008 34.4004c12.1006 2.5 18.7002 10.5996 18.7002 23.2002c0 28.5 -30.2998 24.3994 -52.8994 24.3994zM428 277v-82h45.2998v13.7998h-29.2998v22.2002h28.2998v13.7998h-28.2998v18.2002h29.2998v14
+h-45.2998zM359.3 277h-17.5l35 -84.2002h8.60059l35.5 84.2002h-17.5l-22.2002 -55.2002zM303.4 280c-24.6006 0 -44.6006 -19.9004 -44.6006 -44.5996c0 -24.6006 19.9004 -44.6006 44.6006 -44.6006c24.5996 0 44.5996 19.9004 44.5996 44.6006
+c0 24.5996 -19.9004 44.5996 -44.5996 44.5996zM254.1 273.9c-30.1992 15 -63.2998 -6.80078 -63.2998 -38c0 -32.5 33.6006 -52.5 63.2998 -38.2002v19c-19.2998 -19.2998 -46.7998 -5.7998 -46.7998 19.2002c0 23.6992 26.7002 39.0996 46.7998 19v19zM156.9 207.6
+c-7.60059 0 -13.8008 3.7002 -17.5 10.8008l-10.3008 -9.90039c17.8008 -26.0996 56.6006 -18.2002 56.6006 11.2998c0 13.1006 -5.40039 19 -23.6006 25.6006c-9.59961 3.39941 -12.2998 5.89941 -12.2998 10.2998c0 8.7002 14.5 14.0996 24.9004 2.5l8.39941 10.7998
+c-19.0996 17.0996 -49.6992 8.90039 -49.6992 -14.2998c0 -11.2998 5.19922 -17.2002 20.1992 -22.7002c25.7002 -9.09961 14.7002 -24.4004 3.30078 -24.4004zM55.4004 195c30.8994 0 44.0996 22.4004 44.0996 40.9004c0 24.0996 -18 41.0996 -44.0996 41.0996h-23.4004
+v-82h23.4004zM122.9 195v82h-16v-82h16zM544 15v145c-33.2998 -20.7998 -226.4 -124.4 -416 -160h401c8.2002 0 15 6.7998 15 15zM74.0996 256.4c5.7002 -5 8.90039 -12.6006 8.90039 -20.5c0 -7.90039 -3.2002 -15.5 -8.90039 -20.7002
+c-4.89941 -4.40039 -11.5996 -6.40039 -21.8994 -6.40039h-4.2002v54.2002h4.2002c10.2998 0 16.7002 -1.7002 21.8994 -6.59961z" />
+    <glyph glyph-name="cc-amex" unicode="&#xf1f3;" horiz-adv-x="576" 
+d="M325.1 280.2c0.100586 -8 -4.2998 -15.7002 -11.6992 -18.7002c9.5 -3.2998 11 -9.2002 11 -18.4004v-13.5h-16.6006c-0.299805 14.8008 3.60059 25.1006 -14.7998 25.1006h-18v-25.1006h-16.4004v69.3008l39.1006 -0.300781c13.2998 0 27.3994 -2 27.3994 -18.3994z
+M295.7 268.9c5.7002 0 11 1.2998 11 7.89941c0 6.40039 -5.60059 7.40039 -10.7002 7.40039h-21v-15.2998h20.7002zM279 179.4c15.5996 0 27.9004 -5.40039 27.9004 -22.7002c0 -27.9004 -30.4004 -23.2998 -49.3008 -23.2998l-0.0996094 -23.3008h-32.2002l-20.3994 23
+l-21.3008 -23h-65.3994l0.0996094 69.3008h66.5l20.5 -22.8008l21 22.8008h52.7002zM175.2 124.7l19 20.2002l-17.9004 20.1992h-41.7002v-12.5h36.3008v-14.0996h-36.3008v-13.7998h40.6006zM241 116.5v55.5l-25.2998 -27.4004zM278.8 147.5
+c5.90039 0 10.5 2.7998 10.5 9.2002c0 6.09961 -4.59961 8.39941 -10.2002 8.39941h-21.5v-17.5996h21.2002zM247.2 284.2h-38.9004v-12.5h37.7998v-14.1006h-37.7998v-13.7998h38.9004v-14.2998h-55.5v69.2998h55.5v-14.5996zM576 192.6h-0.200195h0.200195zM381.4 160.7
+c-0.100586 -7.60059 -4.2002 -15.2998 -11.9004 -18.4004c9.2002 -3.2998 11 -9.5 11 -18.3994l-0.0996094 -13.8008h-16.6006l0.100586 11.5c0 11.8008 -3.80078 13.8008 -14.8008 13.8008h-17.5996l-0.0996094 -25.3008h-16.6006l0.100586 69.3008h39.3994
+c13 0 27.1006 -2.30078 27.1006 -18.7002zM352.2 149.5c5.59961 0 11 1.2998 11 8.2002c0 6.39941 -5.60059 7.39941 -10.7002 7.39941h-21v-15.5996h20.7002zM179.4 229.5h-16.8008v54.2002l-24 -54.2002h-14.5996l-24 54.2002v-54.2002h-33.7998l-6.40039 15.2998h-34.5
+l-6.39941 -15.2998h-17.9004l29.7002 69.2998h24.5l28.0996 -65.7002v65.7002h27.1006l21.6992 -47l19.7002 47h27.6006v-69.2998zM31.2002 259.2h22.7002l-11.5 27.5996zM508.6 100.3c34.8008 0 54.8008 -2.2002 67.5 6.10059v-90.4004c0 -26.5 -21.5 -48 -48 -48h-480.1
+c-26.5 0 -48 21.5 -48 48v203.7h26.5996c4.2002 10.0996 2.2002 5.2998 6.40039 15.2998h19.2002c4.2002 -10 2.2002 -5.2002 6.39941 -15.2998h52.9004v11.3994c2.2002 -5 1.09961 -2.5 5.09961 -11.3994h29.5c2.40039 5.5 2.60059 5.7998 5.10059 11.3994v-11.3994h135.5
+v25.0996c6.39941 0 8 0.100586 9.7998 -0.200195c0 0 -0.200195 -10.8994 0.0996094 -24.7998h66.5v8.90039c7.40039 -5.90039 17.4004 -8.90039 29.7002 -8.90039h26.7998c4.2002 10.1006 2.2002 5.2998 6.40039 15.2998h19c6.5 -15 0.200195 -0.5 6.59961 -15.2998
+h52.8008v21.9004c11.7998 -19.7002 7.7998 -12.9004 13.1992 -21.9004h41.6006v92h-39.9004v-18.3994c-12.2002 20.1992 -6.2998 10.3994 -11.2002 18.3994h-43.2998v-20.5996c-6.2002 14.5996 -4.59961 10.7998 -8.7998 20.5996h-32.4004
+c-0.399414 0 -2.2998 -0.200195 -2.2998 0.299805h-27.5996c-12.7998 0 -23.1006 -3.19922 -30.7002 -9.2998v9.2998h-39.9004v-5.2998c-10.7998 6.10059 -20.6992 5.10059 -64.3994 5.2998c-0.100586 0 -11.6006 0.100586 -11.6006 0h-103
+c-2.5 -6.09961 -6.7998 -16.3994 -12.5996 -30c-2.7998 6 -11 23.8008 -13.9004 30h-46v-21.0996c-7.39941 17.4004 -4.69922 11 -9 21.0996h-39.6992c-3.40039 -7.89941 -13.7002 -32 -23.1006 -53.8994v109.8c0 26.5 21.5 48 48 48h480c26.5 0 48 -21.5 48 -48v-175.4
+c-37.7002 0.200195 -44 0.900391 -54.2998 -5v5c-45.2998 0 -53.5 1.7002 -64.9004 -5.19922v5.19922h-78.1992v-5.09961c-11.4004 6.5 -21.4004 5.09961 -75.7002 5.09961v-5.59961c-6.2998 3.7002 -14.5 5.59961 -24.2998 5.59961h-58
+c-3.5 -3.7998 -12.5 -13.6992 -15.7002 -17.1992c-12.7002 14.0996 -10.5 11.5996 -15.5 17.1992h-83.1006v-92.2998h82c3.30078 3.5 12.9004 13.9004 16.1006 17.4004c12.7002 -14.2998 10.2998 -11.7002 15.3994 -17.4004h48.9004
+c0 14.7002 0.0996094 8.2998 0.0996094 23c11.5 -0.200195 24.3008 0.200195 34.3008 6.2002c0 -13.9004 -0.100586 -17.0996 -0.100586 -29.2002h39.6006c0 18.5 0.0996094 7.40039 0.0996094 25.2998c6.2002 0 7.7002 0 9.40039 -0.0996094
+c0.0996094 -1.2998 0 0 0 -25.2002c152.8 0 145.899 -1.09961 156.699 4.5v-4.5zM544.9 164.8c-4.60059 0 -9.2002 -0.700195 -9.2002 -6.5c0 -12.2002 28.7998 0.299805 39.2998 -13.5v-25.7998c-4.90039 -7.09961 -14.0996 -8.90039 -22.5 -8.90039h-32l0.0996094 14.8008
+h32c4.10059 0 8.40039 1.2998 8.40039 6.39941c0 14.6006 -42.7002 -5.59961 -42.7002 27.4004c0 14.0996 11 20.7002 23.7998 20.7002h32.9004v-14.6006h-30.0996zM487.9 125c4.09961 0 8.69922 1 8.7998 6.40039c0 14.8994 -42.7002 -5.60059 -42.7002 27.3994
+c0 14.1006 10.7002 20.7002 23.5 20.7002h33.2002v-14.5996h-30.4004c-4.2998 0 -9.2002 -0.800781 -9.2002 -6.40039c0 -15.0996 42.9004 6.90039 42.9004 -26.2998c0 -16.4004 -11.4004 -22 -26.2002 -22h-32.2002l0.100586 14.7998h32.2002zM445.7 165.1h-38.5v-12.5
+h37.7998v-14.0996h-37.9004v-13.7998l38.6006 -0.299805l-0.100586 -14.3008h-55.1992l0.0996094 69.3008h55.2002v-14.3008zM389.4 273.2c0.299805 0.299805 1.69922 1 7.2998 1c1 0 2 -0.100586 3.09961 -0.100586l-7.2998 -16.8994
+c-2.2998 0 -3.2002 0.399414 -3.40039 0.5c-0.199219 0.200195 -1.09961 1.89941 -1.09961 7.89941c0 5.40039 1.09961 7.40039 1.40039 7.60059zM409.8 283.7h-0.0996094h0.0996094zM393.6 298.9h16.1006v-15.2002c-17.4004 0.299805 -33.1006 4.09961 -33.1006 -19.7002
+c0 -11.7998 2.80078 -19.9004 16.1006 -19.9004h7.39941l23.5 54.5h24.8008l27.8994 -65.3994v65.3994h25.2998l29.1006 -48.0996v48.0996h16.8994v-69h-23.5996l-31.2002 51.9004v-51.9004h-33.7002l-6.59961 15.3008h-34.2998l-6.40039 -15.3008h-19.2002
+c-22.7998 0 -33 11.8008 -33 34c0 23.3008 10.5 35.3008 34 35.3008zM435.7 286.8l-11.6006 -27.5996h22.8008zM334.6 298.8h16.9004v-69.2998h-16.9004v69.2998z" />
+    <glyph glyph-name="cc-paypal" unicode="&#xf1f4;" horiz-adv-x="576" 
+d="M186.3 189.8c0 -12.2002 -9.7002 -21.5 -22 -21.5c-9.2002 0 -16 5.2002 -16 15c0 12.2002 9.5 22 21.7002 22c9.2998 0 16.2998 -5.7002 16.2998 -15.5zM80.5 238.3c11.2998 0 19.7998 -1.5 17.5 -14.8994c-2 -12.7002 -10.5 -14.2002 -21.5 -14.2002l-8.2002 -0.299805
+l4.2998 26.6992c0.200195 1.7002 1.7002 2.7002 3.2002 2.7002h4.7002zM364.5 238.3c8.5 0 18 -0.5 18.0996 -11.0996c0 -15 -9 -18 -22 -18l-8 -0.299805l4.2002 26.6992c0.200195 1.7002 1.40039 2.7002 3.2002 2.7002h4.5zM576 368v-352c0 -26.5 -21.5 -48 -48 -48h-480
+c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h480c26.5 0 48 -21.5 48 -48zM128.3 232.6c0 21 -16.2002 28 -34.7002 28h-40c-2.5 0 -5 -2 -5.19922 -4.69922l-16.4004 -102.101c-0.299805 -2 1.2002 -4 3.2002 -4h19c2.7002 0 5.2002 2.90039 5.5 5.7002l4.5 26.5996
+c1 7.2002 13.2002 4.7002 18 4.7002c28.5996 0 46.0996 17 46.0996 45.7998zM212.5 223.8h-19c-3.7998 0 -4 -5.5 -4.2002 -8.2002c-5.7998 8.5 -14.2002 10 -23.7002 10c-24.5 0 -43.1992 -21.5 -43.1992 -45.1992c0 -19.5 12.1992 -32.2002 31.6992 -32.2002
+c9 0 20.2002 4.89941 26.5 11.8994c-0.5 -1.5 -1 -4.69922 -1 -6.19922c0 -2.30078 1 -4 3.2002 -4h17.2002c2.7002 0 5 2.89941 5.5 5.69922l10.2002 64.3008c0.299805 1.89941 -1.2002 3.89941 -3.2002 3.89941zM253 125.9l63.7002 92.5996c0.5 0.5 0.5 1 0.5 1.7002
+c0 1.7002 -1.5 3.5 -3.2002 3.5h-19.2002c-1.7002 0 -3.5 -1 -4.5 -2.5l-26.5 -39l-11 37.5c-0.799805 2.2002 -3 4 -5.5 4h-18.7002c-1.69922 0 -3.19922 -1.7998 -3.19922 -3.5c0 -1.2002 19.5 -56.7998 21.1992 -62.1006c-2.69922 -3.7998 -20.5 -28.5996 -20.5 -31.5996
+c0 -1.7998 1.5 -3.2002 3.2002 -3.2002h19.2002c1.7998 0.100586 3.5 1.10059 4.5 2.60059zM412.3 232.6c0 21 -16.2002 28 -34.7002 28h-39.6992c-2.7002 0 -5.2002 -2 -5.5 -4.69922l-16.2002 -102c-0.200195 -2 1.2998 -4 3.2002 -4h20.5c2 0 3.5 1.5 4 3.19922l4.5 29
+c1 7.2002 13.1992 4.7002 18 4.7002c28.3994 0 45.8994 17 45.8994 45.7998zM496.5 223.8h-19c-3.7998 0 -4 -5.5 -4.2998 -8.2002c-5.5 8.5 -14 10 -23.7002 10c-24.5 0 -43.2002 -21.5 -43.2002 -45.1992c0 -19.5 12.2002 -32.2002 31.7002 -32.2002
+c9.2998 0 20.5 4.89941 26.5 11.8994c-0.299805 -1.5 -1 -4.69922 -1 -6.19922c0 -2.30078 1 -4 3.2002 -4h17.2998c2.7002 0 5 2.89941 5.5 5.69922l10.2002 64.3008c0.299805 1.89941 -1.2002 3.89941 -3.2002 3.89941zM544 257.1c0 2 -1.5 3.5 -3.2002 3.5h-18.5
+c-1.5 0 -3 -1.19922 -3.2002 -2.69922l-16.1992 -104l-0.300781 -0.5c0 -1.80078 1.5 -3.5 3.5 -3.5h16.5c2.5 0 5 2.89941 5.2002 5.69922l16.2002 101.2v0.299805zM454 205.3c9.2998 0 16.2998 -5.7002 16.2002 -15.5c0 -12.2998 -9.7002 -21.5 -21.7002 -21.5
+c-9.2002 0 -16.2002 5.2998 -16.2002 15c0 12.2998 9.5 22 21.7002 22z" />
+    <glyph glyph-name="cc-stripe" unicode="&#xf1f5;" horiz-adv-x="576" 
+d="M492.4 227.2c8.69922 0 18 -6.7002 18 -22.7002h-36.7002c0 16 9.7998 22.7002 18.7002 22.7002zM375 224.6c12.9004 0.100586 21.9004 -14.5 21.9004 -33.0996c0 -19.0996 -8.80078 -33.4004 -21.9004 -33.4004c-8.2998 0 -13.2998 3 -16.7998 6.7002l-0.200195 52.7998
+c3.7002 4.10059 8.7998 7 17 7zM528 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-480c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h480zM122.2 166.9c0 42.2998 -54.2998 34.6992 -54.2998 50.6992c0 5.5 4.59961 7.7002 12.0996 7.7002
+c10.7998 0 24.5 -3.2998 35.2998 -9.09961v33.3994c-11.7998 4.7002 -23.5 6.5 -35.2998 6.5c-28.7998 0 -48 -15 -48 -40.1992c0 -39.3008 54 -32.9004 54 -49.9004c0 -6.59961 -5.7002 -8.7002 -13.5996 -8.7002c-11.8008 0 -26.9004 4.90039 -38.9004 11.2998v-33.8994
+c13.2002 -5.7002 26.5996 -8.10059 38.7998 -8.10059c29.6006 0.200195 49.9004 14.7002 49.9004 40.3008zM191 223.5v30.2998h-26.9004v30.7998l-34.6992 -7.39941l-0.200195 -113.9c0 -21 15.7998 -36.5 36.8994 -36.5c11.6006 0 20.2002 2.10059 24.9004 4.7002v28.9004
+c-4.5 -1.80078 -27 -8.30078 -27 12.5996v50.5h27zM265 221.1v32.7002h-0.0996094c-4.7002 1.7002 -21.3008 4.7998 -29.6006 -10.5l-2.2002 10.5h-30.6992v-124.5h35.5v84.4004c8.39941 11 22.5996 8.89941 27.0996 7.39941zM309.1 129.3v124.5h-35.6992v-124.5h35.6992z
+M309.1 272.2v28.8994l-35.6992 -7.59961v-28.9004zM383.2 126.7c25.3994 0.0996094 48.5996 20.5 48.5996 65.5996c0 41.2998 -23.5 63.7998 -48.3994 63.7998c-13.9004 0 -22.9004 -6.59961 -27.8008 -11.0996l-1.7998 8.7998h-31.2998v-165.8l35.5 7.5l0.0996094 40.2002
+c5.10059 -3.7002 12.7002 -9 25.1006 -9zM543.6 178.2c0.100586 2 0.400391 9.39941 0.400391 12.8994c0 36.4004 -17.5996 65.1006 -51.2998 65.1006c-33.7998 0 -54.2998 -28.7002 -54.2998 -64.9004c0 -42.7998 24.1992 -64.5 58.7998 -64.5
+c17 0 29.7002 3.90039 39.3994 9.2002v28.5996c-9.69922 -4.89941 -20.7998 -7.89941 -34.8994 -7.89941c-13.7998 0 -26 4.89941 -27.6006 21.5h69.5z" />
+    <glyph glyph-name="lastfm" unicode="&#xf202;" horiz-adv-x="512" 
+d="M225.8 80.9004c0 0 -31.7002 -31.1006 -97.8994 -31.1006c-82.2002 0 -127.9 48.1006 -127.9 137.2c0 92.7002 45.7002 147.2 131.8 147.2c117.7 0 129.3 -66.2002 161.3 -163c14 -42.7998 38.7002 -73.9004 97.9004 -73.9004c39.9004 0 61 8.7998 61 30.5
+c0 31.9004 -34.9004 35.1006 -79.7998 45.7002c-48.6006 11.7002 -68 36.9004 -68 76.7998c0 64 51.5996 83.9004 104.399 83.9004c59.8008 0 96.2002 -21.7002 100.9 -74.5l-58.5996 -7c-2.30078 25.2002 -17.5 35.7998 -45.7002 35.7998
+c-25.7998 0 -41.6006 -11.7998 -41.6006 -31.7002c0 -17.5996 7.60059 -28.0996 33.4004 -34c52.2998 -11.5 115 -19.2002 115 -92.0996c0 -58.6006 -49.2998 -80.9004 -122 -80.9004c-101.4 0 -136.6 45.7002 -155.4 102.601
+c-26.0996 81.5996 -34.3994 134.899 -100.899 134.899c-35.7002 0 -72.1006 -25.7998 -72.1006 -97.8994c0 -56.3008 28.7002 -91.5 69.2002 -91.5c45.7002 0 76.2002 34 76.2002 34z" />
+    <glyph glyph-name="lastfm-square" unicode="&#xf203;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM307.8 103.1c45.4004 0 76.2002 13.9004 76.1006 50.6006c0 45.5 -39.1006 50.3994 -71.8008 57.5
+c-16.0996 3.7002 -20.8994 10.2998 -20.8994 21.2998c0 12.5 9.89941 19.7998 26 19.7998c17.5996 0 27.0996 -6.59961 28.5996 -22.3994l36.7002 4.39941c-2.90039 33 -25.5996 46.6006 -63 46.6006c-32.9004 0 -65.2002 -12.4004 -65.2002 -52.4004
+c0 -24.9004 12.1006 -40.7002 42.5 -48c28.1006 -6.59961 49.9004 -8.7002 49.9004 -28.5996c0 -13.6006 -13.2002 -19.1006 -38.1006 -19.1006c-37 0 -52.3994 19.4004 -61.1992 46.2002c-20 60.5 -27.3008 101.9 -100.801 101.9c-53.8994 0 -82.5 -34.1006 -82.5 -92
+c0 -55.7002 28.6006 -85.8008 79.9004 -85.8008c41.4004 0 61.2002 19.4004 61.2002 19.4004l-11.7002 31.9004s-19 -21.3008 -47.5996 -21.3008c-25.3008 0 -43.3008 22 -43.3008 57.2002c0 45.1006 22.7002 61.2002 45.1006 61.2002c41.5 0 46.7002 -33.2998 63 -84.2998
+c11.7002 -35.5 33.7002 -64.1006 97.0996 -64.1006z" />
+    <glyph glyph-name="ioxhost" unicode="&#xf208;" horiz-adv-x="640" 
+d="M616 288c13.2998 0 24 -10.7002 24 -24c0 -13.2002 -10.7002 -24 -24 -24h-52.7002c3.10059 -15.5 4.7002 -31.5996 4.7002 -48c0 -137 -111 -248 -248 -248c-102.9 0 -191.2 62.7002 -228.7 152h-67.2998c-13.2998 0 -24 10.7002 -24 24c0 13.2002 10.7002 24 24 24
+h52.7002c-3.10059 15.5 -4.7002 31.5996 -4.7002 48c0 137 111 248 248 248c102.9 0 191.2 -62.7002 228.7 -152h67.2998zM520 192c0 16.5996 -2 32.5996 -5.7998 48h-298.2c-13.2998 0 -24 10.7002 -24 24c0 13.2002 10.7002 24 24 24h279.5
+c-33.9004 62 -99.7998 104 -175.5 104c-110.5 0 -200 -89.5 -200 -200c0 -16.5996 2 -32.5996 5.7998 -48h298.2c13.2998 0 24 -10.7002 24 -24c0 -13.2002 -10.7002 -24 -24 -24h-279.5c33.9004 -62 99.7998 -104 175.5 -104c110.5 0 200 89.5 200 200zM216 216h208
+c13.2998 0 24 -10.7002 24 -24c0 -13.2002 -10.7002 -24 -24 -24h-208c-13.2998 0 -24 10.7002 -24 24c0 13.2002 10.7002 24 24 24z" />
+    <glyph glyph-name="angellist" unicode="&#xf209;" 
+d="M347.1 232.6c48 -11.6992 54.9004 -50.5996 54.9004 -93.6992c0 -114.301 -73.4004 -202.9 -191.4 -202.9c-96.1992 0 -164.6 76.4004 -164.5 148.6c0 37.1006 14.2002 61.7002 51.1006 71.7002c-3.10059 8.2998 -8 20.7998 -8 29.7002
+c0 23.5 24.8994 52.5996 48.2998 52.5996c6.90039 0 13.7002 -2 20 -4.2998c-12.4004 35.2002 -46.5996 126.7 -46.5996 162c0 28.7998 14.5996 51.7002 45.6992 51.7002c40 0 85.4004 -144 95.1006 -172.5c12.5 31.4004 52.5 163.1 97.0996 163.1
+c28 0 43.7002 -22.2998 43.7002 -48.8994c0 -30.2002 -33.7002 -124.5 -45.4004 -157.101zM311.7 340l-33.1006 -93.7002l34 -6c8.5 23.4004 47.1006 128.9 47.1006 148c0 7.10059 -2.2998 16 -10.9004 16c-16 0 -33.0996 -52 -37.0996 -64.2998zM142.3 399.7
+c0 -29.1006 34.6006 -120 45.5 -148.8c7.7002 4.39941 19.7998 2.69922 35.4004 1.39941l-34.6006 100.3c-31.7998 92.8008 -46.2998 59 -46.2998 47.1006zM140 204c-7.7002 0 -20.2998 -13.4004 -20.4004 -21.0996c0 -20.8008 56 -97.7002 76.9004 -97.7002
+c5.7002 0 10.5996 6.2998 10.5996 11.3994c0 12.8008 -37.7998 107.4 -67.0996 107.4zM324.3 17.7002c55.2998 61.5 49.1006 158.6 31 174.7c-24 21.0996 -106 29.0996 -138.3 29.0996c-17.2998 0 -17.4004 -6.40039 -17.4004 -13.0996
+c0 -43.7002 92.9004 -39.7002 120.601 -39.7002c11.2002 0 15.7998 -9.90039 16.8994 -21.1006c-7.39941 -7.39941 -17.6992 -11.6992 -27.3994 -15.3994c-9.40039 -3.40039 -19.1006 -7.10059 -27.1006 -13.1006c-22 -16 -43.6992 -43.3994 -43.6992 -71.6992
+c0 -17.7002 10.5996 -32.9004 10.5996 -50.3008c0 -0.299805 -2 -6.5 -2 -7.39941c-32.5996 2.2998 -40.5996 34.5996 -41.7002 61.7002c-3.39941 -0.900391 -8 -0.600586 -11.7002 -0.600586c5.10059 -17.7998 -11.8994 -42 -38 -42
+c-37.7998 0 -88 57.2002 -58.2998 86.9004c28.7002 -35.9004 35 -51.4004 51.1006 -51.4004c4 0 11.6992 3.40039 11.6992 8.2998c0 12.8008 -42.8994 73.1006 -54.2998 73.1006c-16.7998 0 -37.7002 -24.9004 -20.5996 -68.2998
+c22.5996 -55.7002 69.5 -88.3008 128.899 -88.3008c43.4004 0 80.6006 16.6006 109.7 48.6006zM225.7 143.7c3.2002 -8.2998 6.59961 -16.6006 9.39941 -25.1006c6.30078 7.10059 12.9004 13.7002 20.3008 19.1006c-10 2 -20 2.89941 -29.7002 6z" />
+    <glyph glyph-name="buysellads" unicode="&#xf20d;" 
+d="M224 297.3l42.9004 -160.7h-85.8008zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352c26.5 0 48 -21.5 48 -48zM382.7 42.7002l-94.5 298.7h-128.4l-94.5 -298.7h90.7002l111.7 91.5996l24.2002 -91.5996h90.7998z
+" />
+    <glyph glyph-name="connectdevelop" unicode="&#xf20e;" horiz-adv-x="576" 
+d="M550.5 207c6.69629 -1.33887 11.7861 -7.5 11.7881 -14.7324c0 -7.5 -5.3584 -13.6602 -12.3223 -15l-54.9111 -95.3574c0.536133 -1.60742 0.804688 -3.21387 0.804688 -4.82129c0 -7.23145 -5.09082 -13.3926 -12.0547 -14.7314l-51.6963 -90.2686
+c0.535156 -1.33887 0.802734 -2.67773 0.802734 -4.28516c0 -8.30371 -6.69727 -15.2676 -15.2686 -15.2676c-4.28516 0 -8.30371 1.875 -10.9814 4.82129h-107.144c-2.67871 -3.21484 -6.96484 -5.35742 -11.5176 -5.35742s-8.83887 2.14258 -11.5166 5.35645h-106.875
+c-2.67969 -3.21484 -6.69727 -5.35742 -11.5186 -5.35742c-8.30371 0 -15.2676 6.69727 -15.2676 15.2676c0 1.875 0.535156 3.75 1.07031 5.35742l-51.6963 89.7324c-6.96484 1.33887 -12.0547 7.5 -12.0547 14.7314c0 1.875 0.268555 3.21387 0.804688 4.82129
+l-55.1797 95.3574c-6.96484 1.60742 -12.0537 7.76855 -12.0537 15c0 7.5 5.3584 13.6611 12.5898 15l53.3047 92.1436c0 0.536133 -0.268555 1.07227 -0.268555 1.60645c0 6.16113 3.75098 11.251 9.10742 13.6611l55.9824 97.2334
+c-0.536133 1.33887 -1.07129 3.21387 -1.07129 4.82129c0 8.57129 6.96484 15.2676 15.2676 15.2676c4.82227 0 8.83887 -2.14258 11.7861 -5.625h106.071c2.67871 3.48242 6.69629 5.625 11.5176 5.625s8.83887 -2.14258 11.5176 -5.62402h106.606
+c2.94727 3.48242 6.96484 5.625 11.7861 5.625c8.30371 0 15.2676 -6.69727 15.2676 -15.2676c0 -1.60742 -0.535156 -3.21484 -1.07031 -4.82129l55.4463 -95.8936c8.03613 -0.267578 14.7324 -6.96484 14.7324 -15.001c0 -2.67871 -0.803711 -5.08984 -1.875 -7.23145z
+M153.535 -2.73242v75.8037h-43.6602zM153.535 81.1074v50.624l-44.999 -47.4102c0.535156 -1.07227 1.07129 -2.14355 1.33887 -3.21387h43.6602zM153.535 143.518l0.000976562 92.9463l-50.0889 51.9648c-2.41113 -1.60645 -5.08887 -2.41113 -7.76855 -2.67871
+l-51.9648 -90c0.268555 -1.07227 0.268555 -2.14258 0.268555 -3.48242c0 -1.33887 0 -2.67871 -0.535156 -4.01758l55.7129 -96.4287c1.33887 -0.267578 2.67871 -1.07129 4.01758 -1.60742zM153.535 245.84v72.0527l-43.9277 -15.8037
+c0 -0.267578 0.267578 -0.803711 0.267578 -1.07227c0 -2.94531 -0.803711 -5.62402 -2.14258 -7.7666zM153.535 326.465v59.7324l-43.6602 -75.5361zM480.054 287.357l-0.267578 0.267578l-98.0361 -101.518l63.75 -67.2324l35.3584 167.143zM291.75 92.8926
+l-11.25 -11.7852h22.7676zM291.482 104.143l79.2852 82.2324l-83.0352 87.5889l-79.5537 -84.375zM296.839 98.25l16.875 -17.1426h124.02l5.8916 28.125l-67.5 71.25zM410.411 403.607l-117.053 -124.019l83.0342 -87.5889l97.5 101.25
+c-1.33984 2.14258 -2.14258 4.82129 -2.14258 7.7666v0.536133l-57.8574 100.714c-1.33984 0.268555 -2.41016 0.804688 -3.48145 1.34082zM401.304 405.75h-4.28711l-166.339 -60l57.0547 -60.2676zM277.821 405.75h-103.929l50.8936 -53.5713l148.393 53.5713h-75
+c-2.67871 -2.67773 -6.16016 -4.28516 -10.1787 -4.28516s-7.50098 1.60742 -10.1787 4.28516zM161.572 400.125v-70.7148l54.9111 19.8213l-51.1611 53.8398c-0.730469 -0.25293 -1.93066 -0.613281 -2.67969 -0.804688zM161.572 320.839v-83.3037l40.9814 -42.0527
+l79.5537 84.1064l-59.7324 63.2139zM161.572 228.161v-76.0723l36.4277 38.3037zM161.572 140.303v-59.1953h107.678l17.1426 17.6777l-82.7676 85.9814zM168.536 -21.75h1.33887l91.6074 94.8213h-99.9102v-89.7324l1.07031 -1.60645
+c2.41113 -0.804688 4.28613 -1.875 5.89355 -3.48242zM298.447 -21.75h104.194l-91.6064 94.8213h-38.3037l-91.6074 -94.8213h96.4287c2.68066 2.41016 6.42871 4.28516 10.4473 4.28516s7.76758 -1.875 10.4473 -4.28516zM418.447 -9.96387l17.4121 83.0361h-114.376
+l89.1953 -91.875c1.07227 0.536133 2.14355 1.07031 3.48242 1.33887zM431.303 12.2676l34.8223 60.8037h-21.9639zM466.125 81.1074c0.267578 1.07129 0.803711 2.14258 1.33887 2.94531l-17.1426 18.2139l-4.55371 -21.1592h20.3574zM532.286 188.518
+c-0.268555 1.33984 -0.536133 2.41113 -0.536133 3.75c0 1.60742 0.536133 2.94629 0.802734 4.28516l-45.8027 79.2861l-34.5537 -163.928l20.625 -21.9639c1.33887 0.802734 2.67871 1.33887 4.01758 1.87402z" />
+    <glyph glyph-name="dashcube" unicode="&#xf210;" 
+d="M326.6 344l102.2 104v-427c0 -50.5 -40.0996 -85 -91.2002 -85h-227.199c-51.1006 0 -91.2002 34.5 -91.2002 85v229.5c0 50.2002 40.0996 93.5 91.2002 93.5h216.199zM153.9 31.5v-0.0996094h223.8l-51.1006 52.2998v123.5c0 17.7002 -14.2998 32.5 -32 32.5h-140.699
+c-17.7002 0 -32.4004 -14.7998 -32.4004 -32.5v-142.9c0 -17.7002 14.7002 -32.7998 32.4004 -32.7998z" />
+    <glyph glyph-name="forumbee" unicode="&#xf211;" 
+d="M5.7998 138.3c-3.7998 17 -5.7998 34.2002 -5.7998 51.4004c0 123.3 99.7998 223.3 223.1 223.3c16.6006 0 33.3008 -2 49.3008 -5.5c-123.4 -47 -220.5 -145.5 -266.601 -269.2zM398.7 327.5c-151.101 -44 -269.2 -164.4 -312.3 -315.7
+c-17.2002 13.4004 -32.7002 30.9004 -45.2002 49c43.3994 149.9 160.1 267.7 309.7 312c18.0996 -12.5996 34.0996 -27.7998 47.7998 -45.2998zM414.5 74.7998c13.0996 -35.2998 24.2002 -73.2998 33.5 -109.8c-36.0996 9.2998 -72 20.5 -107 33.5996
+c-25.7002 -16 -54.5996 -26.8994 -84.5996 -31.2998c42.5996 79.7002 108.199 147.4 187.6 190.3c-4.09961 -29.0996 -14.2998 -57.6992 -29.5 -82.7998zM444.2 220.3c-113.7 -46.7002 -204.2 -139.399 -250.5 -253.5c-19.6006 2.7002 -38.5 7.60059 -56.6006 15.2002
+c44.9004 138.5 153.4 249.3 291.301 295.1c7.89941 -18.0996 13.1992 -37.2998 15.7998 -56.7998z" />
+    <glyph glyph-name="leanpub" unicode="&#xf212;" horiz-adv-x="576" 
+d="M386.539 336.515l15.0957 -248.955l-10.9785 0.275391c-36.2324 0.824219 -71.6406 -8.7832 -102.657 -27.9971c-31.0156 19.2139 -66.4238 27.9971 -102.657 27.9971c-45.5635 0 -82.0693 -10.7051 -123.516 -27.7227l31.291 258.288
+c28.5459 11.8027 61.4834 18.1143 92.2256 18.1143c41.1729 0 73.8359 -13.1748 102.657 -42.5439c27.7227 28.2715 59.0127 41.7217 98.5391 42.5439zM569.07 0c-25.5264 0 -47.4854 5.21484 -70.542 15.6445c-34.3105 15.6455 -69.9932 24.9785 -107.871 24.9785
+c-38.9775 0 -74.9346 -12.9014 -102.657 -40.623c-27.7227 27.7227 -63.6797 40.623 -102.657 40.623c-37.8779 0 -73.5605 -9.33301 -107.871 -24.9785c-22.2324 -9.88086 -44.7402 -15.6445 -69.1689 -15.6445h-1.37305l42.5449 349.141
+c39.251 22.2334 87.0117 34.8594 132.301 34.8594c37.0547 0 75.209 -7.68457 106.225 -29.0947c31.0156 21.4102 69.1699 29.0947 106.225 29.0947c45.2891 0 93.0498 -12.626 132.301 -34.8594zM525.702 44.7412l-34.0361 280.246
+c-30.7422 13.999 -67.248 21.4102 -101.009 21.4102c-38.4287 0 -74.3848 -12.0771 -102.657 -38.7021c-28.2725 26.625 -64.2275 38.7021 -102.657 38.7021c-33.7607 0 -70.2666 -7.41113 -101.009 -21.4102l-34.0361 -280.246
+c47.2109 19.4863 82.8945 33.4854 135.045 33.4854c37.6045 0 70.8174 -9.60547 102.657 -29.6436c31.8398 20.0381 65.0518 29.6436 102.657 29.6436c52.1504 0 87.834 -13.999 135.045 -33.4854z" />
+    <glyph glyph-name="sellsy" unicode="&#xf213;" horiz-adv-x="640" 
+d="M539.71 210.692c55.1572 -13.4834 94.0742 -63.124 94.0732 -119.509c0 -68.0264 -55.4639 -123.184 -123.185 -123.184h-381.197c-67.7217 0 -123.186 55.1572 -123.185 123.185c0 47.4961 27.8848 91.0098 70.7852 111.234
+c-2.14453 7.35449 -3.06543 15.0146 -3.06543 22.3691c0 46.2705 37.6914 83.9609 83.9629 83.9609c20.2227 0 39.835 -7.35449 55.1562 -20.5303c18.3867 74.7695 85.8008 127.781 163.021 127.781c92.542 0 167.924 -75.3818 167.924 -167.924
+c0 -12.5635 -1.22559 -25.127 -4.29004 -37.3838zM199.88 46.4463v110.928c0 8.27344 -7.04688 15.3213 -15.3213 15.3213h-30.9482c-8.27344 0 -15.3213 -7.04785 -15.3213 -15.3213v-110.928c0 -8.27344 7.04688 -15.3213 15.3213 -15.3213h30.9482
+c8.27344 0 15.3213 7.04688 15.3213 15.3213zM289.357 46.4463v131.458c0 8.27246 -7.04883 15.3203 -15.3223 15.3203h-30.9492c-8.27246 0 -15.3213 -7.04688 -15.3213 -15.3203v-131.458c0 -8.27344 7.04688 -15.3213 15.3213 -15.3213h30.9492
+c8.27344 0 15.3223 7.04688 15.3223 15.3213zM378.834 46.4463v162.714c0 8.27246 -7.04688 15.3213 -15.3213 15.3213h-30.9482c-8.27441 0 -15.3223 -7.04785 -15.3223 -15.3213v-162.714c0 -8.27344 7.04785 -15.3213 15.3223 -15.3213h30.9482
+c8.27441 0 15.3213 7.04688 15.3213 15.3213zM465.861 46.4463v224.612c0 8.58008 -7.04785 15.6279 -15.3223 15.6279h-28.4971c-8.27441 0 -15.3213 -7.04883 -15.3213 -15.6279v-224.612c0 -8.27344 7.04688 -15.3213 15.3213 -15.3213h28.4971
+c8.27441 0 15.3223 7.04688 15.3223 15.3213z" />
+    <glyph glyph-name="shirtsinbulk" unicode="&#xf214;" 
+d="M100 37.7002l4.40039 9.89941l30.5996 -13.3994l-4.40039 -9.90039zM139.4 20.2002l4.39941 9.89941l30.6006 -13.3994l-4.40039 -9.90039zM311.5 34.2002l30.5996 13.3994l4.40039 -9.89941l-30.5996 -13.4004zM179.1 3l4.40039 9.59961l30.2998 -13.3994
+l-4.39941 -9.90039zM60.4004 55.2002l4.39941 9.89941l30.6006 -13.6992l-4.40039 -9.60059zM271.8 16.7002l30.6006 13.3994l4.39941 -9.89941l-30.5996 -13.4004zM232.5 -0.799805l30.5996 13.3994l4.40039 -9.59961l-30.5996 -13.7002zM350.9 51.4004l30.5996 13.6992
+l4.40039 -9.89941l-30.6006 -13.4004zM170 401.4v-10.5h-33.5v10.5h33.5zM122.8 401.4l-0.0996094 -10.5h-33.5v10.5h33.5996zM75.5 401.4l0.0996094 -10.5h-33.2998v10.5h33.2002zM217 401.4v-10.5h-33.2002v10.5h33.2002zM311.5 401.4v-10.5h-33.5v10.5h33.5zM358.8 401.4
+v-10.5h-33.5v10.5h33.5zM264.2 401.4v-10.5h-33.2002v10.5h33.2002zM405.7 401.4v-10.5h-33.2998v10.5h33.2998zM52.7998 96.9004v-33.5h-10.7998v33.5h10.7998zM122.8 312.8l-0.0996094 -10.5h-33.5v10.5h33.5996zM52.7998 302.2v-23h-10.7998v33.5h33.5996v-10.5h-22.7998
+zM221.7 73.5996c-50.2002 0 -91.2998 40.8008 -91.2998 91.3008c0 50.1992 41.0996 91.2998 91.2998 91.2998c50.5 0 91.2998 -41.1006 91.2998 -91.2998c0 -50.5 -40.7998 -91.3008 -91.2998 -91.3008zM173.5 184.7c0 -44.2998 77.5996 -11.9004 77.5996 -38
+c0 -13.1006 -24 -14.2998 -32.6992 -14.2998c-12.3008 0 -29.8008 2.69922 -35.9004 14.8994h-0.900391l-9 -18.3994c14.8008 -9.30078 29.1006 -12.2002 47.2002 -12.2002c19.5 0 51 5.7998 51 31.2002c0 48.0996 -78.5 16.2998 -78.5 37.8994
+c0 13.1006 20.7998 14.9004 29.7998 14.9004c10.8008 0 29.2002 -3.2002 35.6006 -13.1006h0.899414l8.80078 16.9004c-15.1006 6.2002 -27.4004 12 -44.3008 12c-20.0996 0 -49.5996 -6.40039 -49.5996 -31.7998zM52.7998 269.6v-33.5996h-10.7998v33.5996h10.7998z
+M395.2 63.4004v33.5h10.7998v-33.5h-10.7998zM52.7998 140.1v-33.5h-10.7998v33.5h10.7998zM0 444.3h448v-406l-226.3 -98.5996l-221.7 98.5996v406zM418.8 57.2002h0.100586v270.1h-389.7v-270.1l192.8 -85.7002zM418.8 356.5h0.100586v58.5996h-389.7v-58.5996h389.6z
+M52.7998 226.4v-33.5h-10.7998v33.5h10.7998zM52.7998 183.2v-33.5h-10.7998v33.5h10.7998zM170 312.8v-10.5h-33.5v10.5h33.5zM395.2 149.7v33.5h10.7998v-33.5h-10.7998zM395.2 192.9v33.5h10.7998v-33.5h-10.7998zM217 312.8v-10.5h-33.2002v10.5h33.2002zM395.2 236
+v33.5h10.7998v-33.5h-10.7998zM395.2 106.5v33.5h10.7998v-33.5h-10.7998zM264.2 312.8v-10.5h-33.2002v10.5h33.2002zM311.5 312.8v-10.5h-33.5v10.5h33.5zM395.2 279.2l0.0996094 23h-22.7998v10.5h33.5v-33.5h-10.7998zM358.8 312.8v-10.5h-33.5v10.5h33.5z" />
+    <glyph glyph-name="simplybuilt" unicode="&#xf215;" horiz-adv-x="512" 
+d="M481.2 384c14.7002 0 26.5 -11.7998 26.7002 -26.2998v-331.4c0 -14.5 -11.8008 -26.2998 -26.6006 -26.2998h-450.399c-14.8008 0 -26.6006 11.7998 -26.6006 26.2998v331.4c0 14.5 11.7998 26.2998 26.4004 26.2998h106c14.5996 0 26.5996 -11.7998 26.5996 -26.2998
+v-39.6006h185.3v39.6006c0 14.5 12.1006 26.2998 26.6006 26.2998h106zM149.8 92.2002c36.9004 0 66.6006 29.7002 66.6006 66.3994c0 36.9004 -29.7002 66.6006 -66.6006 66.6006c-36.7002 0 -66.3994 -29.7002 -66.3994 -66.6006
+c0 -36.6992 29.7998 -66.3994 66.3994 -66.3994zM362.2 92.2002c36.5996 0 66.3994 29.7002 66.3994 66.5996c0 36.7002 -29.7998 66.4004 -66.3994 66.4004c-36.9004 0 -66.6006 -29.7998 -66.6006 -66.4004c0 -36.8994 29.7002 -66.5996 66.6006 -66.5996z" />
+    <glyph glyph-name="skyatlas" unicode="&#xf216;" horiz-adv-x="640" 
+d="M640 118.7c0 -65.9004 -52.5 -114.4 -117.5 -114.4c-165.9 0 -196.6 249.7 -359.7 249.7c-146.899 0 -147.1 -212.2 5.60059 -212.2c42.5 0 90.8994 17.7998 125.3 42.5c5.59961 4.10059 16.8994 16.2998 22.7998 16.2998s10.9004 -5 10.9004 -10.8994
+c0 -7.7998 -13.1006 -19.1006 -18.7002 -24.1006c-40.9004 -35.5996 -100.3 -61.1992 -154.7 -61.1992c-83.4004 -0.100586 -154 59 -154 144.899c0 85.9004 67.5 149.101 152.8 149.101c185.3 0 222.5 -245.9 361.9 -245.9c99.8994 0 94.7998 139.7 3.39941 139.7
+c-17.5 0 -35 -11.6006 -46.8994 -11.6006c-8.40039 0 -15.9004 7.2002 -15.9004 15.6006c0 11.5996 5.2998 23.7002 5.2998 36.2998c0 66.5996 -50.8994 114.7 -116.899 114.7c-53.1006 0 -80 -36.9004 -88.7998 -36.9004c-6.2002 0 -11.2002 5 -11.2002 11.2002
+c0 5.59961 4.09961 10.2998 7.7998 14.4004c25.2998 28.7998 64.7002 43.6992 102.8 43.6992c79.4004 0 139.101 -58.3994 139.101 -137.8c0 -6.89941 -0.300781 -13.7002 -1.2002 -20.5996c11.8994 3.09961 24.0996 4.7002 35.8994 4.7002
+c60.7002 0 111.9 -45.3008 111.9 -107.2z" />
+    <glyph glyph-name="pinterest-p" unicode="&#xf231;" horiz-adv-x="384" 
+d="M204 441.5c94.2002 0 180 -64.7998 180 -164.1c0 -93.3008 -47.7002 -196.801 -153.9 -196.801c-25.1992 0 -57 12.6006 -69.2998 36c-22.7998 -90.2998 -21 -103.8 -71.3994 -172.8c-5.2002 -1.89941 -3.5 -2.2998 -6.90039 1.5c-1.7998 18.9004 -4.5 37.5 -4.5 56.4004
+c0 61.2002 28.2002 149.7 42 209.1c-7.5 15.2998 -9.59961 33.9004 -9.59961 50.7002c0 80 93.8994 92 93.8994 25.7998c0 -39 -26.3994 -75.5996 -26.3994 -113.399c0 -25.8008 21.2998 -43.8008 46.1992 -43.8008c69 0 90.3008 99.6006 90.3008 152.7
+c0 71.1006 -50.4004 109.8 -118.5 109.8c-79.2002 0 -140.4 -57 -140.4 -137.399c0 -38.7002 23.7002 -58.5 23.7002 -67.7998c0 -7.80078 -5.7002 -35.4004 -15.6006 -35.4004c-24 0 -63.5996 40 -63.5996 110.4c0 110.699 101.4 179.1 204 179.1z" />
+    <glyph glyph-name="whatsapp" unicode="&#xf232;" 
+d="M380.9 350.9c41.8994 -42 67.0996 -97.7002 67.0996 -157c0 -122.4 -101.8 -222 -224.1 -222h-0.100586c-37.2002 0 -73.7002 9.2998 -106.1 27l-117.7 -30.9004l31.5 115c-19.4004 33.7002 -29.5996 71.9004 -29.5996 111c0 122.4 99.5996 222 222 222
+c59.2998 0 115.1 -23.0996 157 -65.0996zM223.9 9.2998c101.699 0 186.6 82.7998 186.6 184.601c0.0996094 49.2998 -21.2998 95.5996 -56.0996 130.5c-34.8008 34.8994 -81.1006 54.0996 -130.4 54.0996c-101.8 0 -184.6 -82.7998 -184.6 -184.5
+c0 -34.9004 9.69922 -68.7998 28.1992 -98.2002l4.40039 -7l-18.5996 -68.0996l69.7998 18.2998l6.7002 -4c28.2998 -16.7998 60.7998 -25.7002 94 -25.7002zM325.1 147.5c5.5 -2.7002 9.2002 -4.09961 10.5 -6.59961c1.40039 -2.30078 1.40039 -13.4004 -3.19922 -26.4004
+c-4.60059 -13 -26.7002 -24.7998 -37.4004 -26.4004c-17.5996 -2.59961 -31.4004 -1.2998 -66.5996 13.9004c-55.7002 24.0996 -92 80.0996 -94.8008 83.7998c-2.69922 3.7002 -22.5996 30.1006 -22.5996 57.4004s14.2998 40.7002 19.4004 46.2998
+c5.09961 5.5 11.0996 6.90039 14.7998 6.90039s7.39941 0 10.5996 -0.200195c3.40039 -0.200195 8 1.2998 12.5 -9.5c4.60059 -11.1006 15.7002 -38.4004 17.1006 -41.2002c1.39941 -2.7998 2.2998 -6 0.5 -9.7002c-10.6006 -21.2002 -22 -20.5 -16.3008 -30.2998
+c21.5 -36.9004 42.9004 -49.7002 75.5 -66c5.5 -2.7998 8.80078 -2.2998 12 1.40039c3.30078 3.7998 13.9004 16.1992 17.6006 21.7998c3.7002 5.59961 7.39941 4.7002 12.5 2.7998c5.09961 -1.7998 32.3994 -15.2002 37.8994 -18z" />
+    <glyph glyph-name="viacoin" unicode="&#xf237;" horiz-adv-x="384" 
+d="M384 416l-48 -112h48v-48h-68.5l-13.7998 -32h82.2998v-48h-102.8l-89.2002 -208l-89.2002 208h-102.8v48h82.2998l-13.7998 32h-68.5v48h48l-48 112h64l80.7998 -192h94.5l80.7002 192h64zM192 112l27 64h-54z" />
+    <glyph glyph-name="medium" unicode="&#xf23a;" 
+d="M0 416h448v-448h-448v448zM372.2 309.9v5h-83.2002l-59.2998 -147.9l-67.4004 148h-87.2998v-5.09961l28.0996 -33.9004c2.80078 -2.5 4.2002 -6.09961 3.80078 -9.7998v-133c0.799805 -4.7998 -0.700195 -9.7002 -4.10059 -13.2002l-31.5996 -38.2998v-5.10059h89.7998
+v5.10059l-31.5996 38.2998c-3.40039 3.5 -5.10059 8.40039 -4.40039 13.2002v115l78.7002 -171.601h9.09961l67.6006 171.601v-136.9c0 -3.59961 0 -4.2998 -2.40039 -6.7002l-24.2998 -23.5996v-4.90039h118v5.10059l-23.5 23
+c-2.10059 1.5 -3.10059 4.09961 -2.7002 6.7002v169.3c-0.400391 2.5 0.599609 5.09961 2.7002 6.7002z" />
+    <glyph glyph-name="y-combinator" unicode="&#xf23b;" 
+d="M448 416v-448h-448v448h448zM236 160.5l77.5 145.5h-32.7002l-45.7998 -91c-4.7002 -9.2998 -9 -18.2998 -12.7998 -26.7998l-12.2002 26.7998l-45.2002 91h-35l76.7002 -143.8v-94.5h29.5v92.7998z" />
+    <glyph glyph-name="optin-monster" unicode="&#xf23c;" horiz-adv-x="576" 
+d="M572.6 26.5996c1 -3.5 1.90039 -7 1.7002 -10.6992c0.799805 -31.6006 -44.2998 -64 -73.5 -65.1006c-17.2998 -0.799805 -34.5996 8.40039 -42.7002 23.5c-113.5 -4.09961 -227 -4.89941 -340.199 0c-8.40039 -15.0996 -25.7002 -24 -43 -23.5
+c-28.9004 1.10059 -74 33.5 -73.5 65.1006c0.299805 3.7998 0.799805 7.2998 1.89941 10.7998c-5.59961 9.39941 -4.7998 15.2998 5.40039 11.5996c3.2998 5.2002 7 9.5 11.0996 13.7998c-2.5 10.9004 1.2998 14.1006 11.1006 9.2002c4.5 3.2998 10 6.5 15.8994 9.2002
+c0 15.7998 11.7998 11.2002 17.2998 5.7002c12.5 1.7998 20.2002 -0.700195 26.8008 -5.7002v19.7002c-12.9004 0 -40.6006 11.3994 -45.9004 36.2002c-5 20.7998 2.59961 38.0996 25.0996 47.5996c0.800781 5.90039 8.10059 14 14.9004 15.9004
+c7.59961 1.89941 12.5 -4.60059 14.0996 -10.3008c7.40039 0 17.8008 -1.5 21.1006 -8.09961c5.39941 0.5 11.0996 1.40039 16.5 1.90039c-2.40039 1.89941 -5.10059 3.5 -8.10059 4.59961c-5.09961 8.90039 -13.7998 11.0996 -24.5996 11.5996
+c0 0.800781 0 1.60059 0.299805 2.7002c-19.7998 0.5 -44.0996 5.60059 -54.8994 17.7998c-21.3008 23.6006 -15.9004 83.6006 12.1992 103.5c8.40039 5.7002 21.6006 0.800781 22.7002 -9.69922c2.40039 -20.6006 0.400391 -26.8008 26.2002 -25.9004
+c8.09961 7.7998 16.7998 14.5996 26.5 20c-14.9004 1.2998 -28.9004 -1.59961 -43.7998 -3.7998c12.7002 12.5 23.8994 25.3994 56.7002 42.3994c23.5 11.9004 50 20.8008 76.1992 23.2002c-18.5996 7.90039 -40 11.9004 -59.6992 16.5
+c76.5 16.2002 174.6 22.1006 244.199 -37.5996c18.1006 -15.4004 32.4004 -36.2002 42.7002 -60c39.7998 -4.90039 36.4004 5.5 38.6006 25.0996c1.09961 10.2998 14.2998 15.4004 22.6992 9.5c14.9004 -10.5 22.2002 -30.7998 24.6006 -48.0996
+c2.2002 -17.7998 0.299805 -41.2998 -12.4004 -55.1006c-10.7998 -12.1992 -34.2998 -17.5996 -53.7998 -18.0996v-2.7998c-11.0996 -0.200195 -20.2998 -2.40039 -25.7002 -11.6006c-3 -1.09961 -5.7002 -2.69922 -8.39941 -4.59961
+c5.69922 -0.5 11.3994 -1.40039 16.7998 -1.90039c1.89941 5.60059 12.5996 8.40039 21.0996 8.40039c1.7002 5.40039 6.7998 11.9004 14.1006 10.2998c7.2998 -1.59961 14.0996 -10 14.8994 -15.8994c10.7998 -4.40039 22.1006 -12.2002 25.1006 -25.7002
+c1.89941 -8.10059 1.69922 -15.1006 0.299805 -21.9004c-5.7002 -25.2002 -33.2998 -36.2002 -45.9004 -36.2002c0 -6.69922 0 -13.1992 -0.299805 -19.6992c8.09961 6 16.4004 7.19922 26.7998 5.69922c6 5.90039 17.6006 9.40039 17.6006 -5.69922
+c5.59961 -2.7002 11.2998 -6 15.8994 -9.2002c10.1006 5 13.7002 0.5 10.7998 -9.2002c4.10059 -4.2998 8.10059 -8.90039 11.1006 -13.7998c10.0996 3.59961 11 -2.10059 5.39941 -11.6006zM498.8 280.6c17.2998 -6.69922 26.2002 -22.0996 30.2998 -35.6992
+c1.10059 10.5996 -2.69922 39.5 -13.7998 51.0996c-7.2998 7.2998 -14.0996 5.09961 -14.0996 -0.799805c0 -6.2002 -1.2998 -11.6006 -2.40039 -14.6006zM494.2 273.9c-3.2002 -3.30078 -9.2002 -4.90039 -14.1006 -5.7002c13 -15.7002 17 -41.7002 12.7002 -63
+c10.7998 2.2002 20.5 6.2998 26.2002 12.2002c1.90039 2.19922 3.7998 4.89941 4.90039 7.59961c-1.10059 21.2998 -10.2002 42.7002 -29.7002 48.9004zM470.1 267.1c-3.69922 0 -8.09961 0 -11.7998 0.300781c7.5 -20.6006 12.4004 -42.7002 14.2998 -64.6006
+c3.5 0 7.5 0.299805 11.6006 0.799805c5.89941 24.3008 -0.299805 51.6006 -14.1006 63.5zM47.5 245c4.09961 13.5 13 28.9004 30.2998 35.7002c-1 3 -2.39941 8.39941 -2.39941 14.5996c0 5.90039 -7.10059 8.10059 -14.1006 0.799805
+c-11.3994 -11.5996 -14.8994 -40.5996 -13.7998 -51.0996zM57.2002 217.4c5.7002 -6.2002 15.3994 -10 26.2002 -12.2002c-4.30078 21.3994 -0.300781 47.2998 12.6992 63c-4.89941 0.799805 -10.8994 2.5 -14.0996 5.7002
+c-19.4004 -6.2002 -28.2998 -27.6006 -29.7002 -48.9004c1.40039 -2.7002 3 -5.40039 4.90039 -7.59961zM105.1 202.8c2.40039 22.2002 9.10059 43.7998 19.8008 63.5c-5.2002 -1.09961 -10 -3 -14.9004 -4.89941l-12.2002 -5.10059v0.299805
+c-7.2998 -14.0996 -10 -34.3994 -5.39941 -53c4.59961 -0.5 8.59961 -0.799805 12.6992 -0.799805zM289.1 365.5c-41.8994 0 -76.1992 -34.0996 -76.1992 -75.9004c0 -42.1992 34.2998 -76.1992 76.1992 -76.1992c41.9004 0 76.2002 34 76.2002 76.1992
+c0 41.9004 -34.2998 75.9004 -76.2002 75.9004zM404.7 191.2c-12.9004 0.799805 -26.2002 0.799805 -39.5 1.09961c10 -50.5996 3.2998 -64.7002 16.5 -58.0996c16 8.09961 22.7002 39.2002 23 57zM350.7 192.8c-18.9004 0.299805 -38.1006 0.299805 -57 0v0.299805
+c-0.299805 -5.19922 0.200195 -38.0996 4.2998 -41.0996c11.0996 -5.40039 39.5 -4.59961 51.0996 -1.09961c5.40039 1.59961 2.40039 37 1.60059 41.8994zM278.3 139c4.60059 2.5 2.40039 45.4004 1.2998 53.7002v0.299805
+c-19.3994 -0.299805 -38.5996 -0.299805 -57.7998 -0.799805c-1.89941 -9.2002 -4.59961 -48.9004 1.90039 -51.6006c13 -5.69922 41.5996 -5.09961 54.5996 -1.59961zM171.8 190.1c-5.39941 -19.6992 0.299805 -45.0996 22.2002 -54.8994
+c5.40039 -2.5 8.59961 -2.5 9.7002 4.2998c1.89941 8.7002 2.5 36.7998 4.89941 52.2002c-12.1992 -0.200195 -24.5996 -0.799805 -36.7998 -1.60059zM136.4 158.8c2.39941 -3.7002 1.59961 -9.09961 -8 -12.5c43.7998 -47 92.6992 -85.7002 155.899 -106.5
+c67.5 19.2002 115.601 60 163.2 107c-11.0996 4.2998 -7.7002 10.2998 -7.2998 11.6006c-8.90039 0.799805 -17.9004 1.89941 -26.5 2.69922c-9.5 -33 -36 -52.8994 -46.7998 -31.5996c-2.7002 5.2002 -3.5 11.7002 -4.60059 16.7998
+c-3.7998 -8.39941 -13.2998 -8.09961 -24.5996 -8.89941c-13.2002 -1.10059 -31.6006 -1.30078 -44 3c-3 -12.9004 -11.1006 -12.9004 -26.7998 -14.3008c-14.1006 -1.39941 -48.7002 -4.09961 -54.9004 10.8008c-1.09961 -28.7002 -35.0996 -10 -45.0996 7
+c-3.2002 5.69922 -5.40039 11.3994 -7 17.5996c-7.80078 -0.799805 -15.7002 -1.59961 -23.5 -2.7002zM114.8 -13.7002c0.5 2.5 0.799805 5.2002 0.799805 8.2002c-5.69922 23.2002 -18.5996 49.7002 -33.5 54c-22.3994 6.7002 -68.8994 -23.5 -66.1992 -54.5996
+c12.6992 -19.5 40 -35.7002 59.1992 -36.5c17.8008 -0.800781 35.9004 11.0996 39.7002 28.8994zM106.1 52.2998c9 -16 15.5 -33.2998 16.7002 -51.8994c33.5 19.3994 69.1006 35.6992 105.9 47c-38.7002 20.5 -68.1006 47.7998 -97.2998 77
+c-2.10059 -1.30078 -5.10059 -2.40039 -7.80078 -3.5c-1.59961 -4.90039 8.7002 -5.30078 5.40039 -12.4004c-2.09961 -4.09961 -8.59961 -7.59961 -15.0996 -9.2002c-2.10059 -2.7002 -5.10059 -4.89941 -7.80078 -6.5h-0.299805
+c-0.200195 -13.5 -0.200195 -27 0.299805 -40.5zM443.7 -12.2998c-36.7998 21.2998 -74.1006 41.2998 -115.601 53c-13.7998 -6.2002 -27.8994 -11.2998 -42.1992 -15.4004c-2.10059 -0.799805 -2.10059 -0.799805 -4.30078 0
+c-11.8994 3.7002 -23.2998 8.10059 -34.8994 13.2002c-40.2002 -11.5996 -77.2998 -29.2002 -112.4 -50.7998h-0.299805v-0.299805c0.299805 0 0.299805 0 0.299805 0.299805c103.2 -4.10059 206.4 -3.5 309.4 0zM454.2 0.0996094c1 14.7002 7.2002 35.8008 16.5 51.7002
+l-0.299805 -0.299805c0.5 13.7002 0.799805 27.5 0.799805 41.2998c-3 1.7002 -5.7002 4.10059 -8.10059 6.7998c-6.5 1.30078 -12.8994 5.10059 -15.0996 8.90039c-1.90039 4.09961 1.2998 7.59961 5.90039 10.2998c-0.200195 0.5 -0.5 1.60059 -0.5 2.40039
+c-3 0.799805 -5.40039 1.7998 -7.60059 3.2002c-31.5996 -29.4004 -65.3994 -56.7002 -103.5 -76.7002c38.9004 -11.7002 76 -28.1006 111.9 -47.6006zM560.1 -6.09961c3 31.0996 -43.5 61.3994 -66.1992 54.5c-14.6006 -4.30078 -27.8008 -30.8008 -33.5 -54
+c0 -23.8008 21.1992 -37.9004 40.5 -37c19.1992 0.799805 46.5 17 59.1992 36.5zM372.9 372.8c-35.7002 39.2002 -81.4004 47.7998 -126 23.5c25.1992 56.2002 122.199 48.6006 126 -23.5zM74.7998 40.9004c14.9004 1.89941 24.6006 -19.2002 18.6006 -30.8008
+c-4.80078 -9.69922 -23.7002 -24.0996 -35.9004 -27.2998c-16.5 -4.59961 -32.2002 3.2998 -32.2002 14.9004c0 17.7998 33.7998 41.5996 49.5 43.2002zM290.7 217.1c-30.9004 0 -57.6006 25.7002 -50.2998 59.8008c13.1992 -20.7002 46.5 -12 46.5 11.2998
+c0 10 -7 18.5996 -16.5 21.5996c31.6992 13.7998 72.1992 -8.2002 72.1992 -44.2998c0 -26.7998 -23.2998 -48.4004 -51.8994 -48.4004zM68 -26.0996c-0.5 8.39941 20.2998 23.5 29.2002 25.0996c8.59961 1.59961 12.7002 -11.4004 9.7002 -18.4004
+c-2.7002 -5.69922 -10.5 -13.5 -17.3008 -16.1992c-9.39941 -3.2002 -21.0996 3 -21.5996 9.5zM501.2 40.9004c15.7002 -1.60059 49.5 -25.4004 49.5 -43.2002c0 -11.7002 -15.7002 -19.5 -32.2002 -14.9004c-12.0996 3.2002 -31.2998 17.6006 -36.2002 27.2998
+c-5.7002 11.6006 4 32.7002 18.9004 30.8008zM478.8 -1c8.90039 -1.59961 30 -16.7002 29.1006 -25.0996c-0.200195 -6.5 -12.1006 -12.7002 -21.3008 -9.5c-7 2.69922 -14.8994 10.5 -17.2998 16.1992c-2.89941 7.10059 1.10059 20 9.5 18.4004z" />
+    <glyph glyph-name="opencart" unicode="&#xf23d;" horiz-adv-x="640" 
+d="M423.3 7.2998c0 -25.2998 -20.2998 -45.5996 -45.5996 -45.5996s-45.7998 20.2998 -45.7998 45.5996s20.5996 45.7998 45.7998 45.7998c25.3994 0 45.5996 -20.5 45.5996 -45.7998zM169.4 53.0996c25.2998 0 45.7998 -20.5 45.7998 -45.7998
+s-20.5 -45.5996 -45.7998 -45.5996c-25.3008 0 -45.6006 20.3994 -45.6006 45.5996s20.2998 45.7998 45.6006 45.7998zM461.1 323.1c302.2 0 169.5 -67.1992 -17.1992 -233.899c59.1992 102.8 262.5 193.899 -70.8008 188.899c-319.8 -4.69922 -338.699 92.5 -373.1 144.2
+c81.9004 -86.3994 158.9 -99.2002 461.1 -99.2002z" />
+    <glyph glyph-name="expeditedssl" unicode="&#xf23e;" horiz-adv-x="496" 
+d="M248 404.6c117.4 0 212.6 -95.1992 212.6 -212.6s-95.1992 -212.6 -212.6 -212.6s-212.6 95.1992 -212.6 212.6s95.1992 212.6 212.6 212.6zM150.6 271.7h-0.199219v-26.6006c0 -5 3.89941 -8.89941 8.89941 -8.89941h17.7002c5 0 8.90039 3.89941 8.90039 8.89941
+v26.6006c0 82.0996 124 82.0996 124 0v-26.6006c0 -5 3.89941 -8.89941 8.89941 -8.89941h17.7002c5 0 8.90039 3.89941 8.90039 8.89941v26.6006c0 53.7002 -43.7002 97.3994 -97.4004 97.3994s-97.4004 -43.6992 -97.4004 -97.3994zM389.7 68v141.7
+c0 9.7002 -8 17.7002 -17.7002 17.7002h-248c-9.7002 0 -17.7002 -8 -17.7002 -17.7002v-141.7c0 -9.7002 8 -17.7002 17.7002 -17.7002h248c9.7002 0 17.7002 8 17.7002 17.7002zM141.7 205.3v-132.899c0 -2.5 -1.90039 -4.40039 -4.40039 -4.40039h-8.89941
+c-2.5 0 -4.40039 1.90039 -4.40039 4.40039v132.899c0 2.5 1.90039 4.40039 4.40039 4.40039h8.89941c2.5 0 4.40039 -1.90039 4.40039 -4.40039zM283.4 156.6c0 -13 -7.2002 -24.3994 -17.7002 -30.3994v-31.6006c0 -5 -3.90039 -8.89941 -8.90039 -8.89941h-17.7002
+c-5 0 -8.89941 3.89941 -8.89941 8.89941v31.6006c-10.5 6.09961 -17.7002 17.3994 -17.7002 30.3994c0 19.7002 15.7998 35.4004 35.4004 35.4004c19.5996 0 35.5 -15.7998 35.5 -35.4004zM248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248
+s111 248 248 248zM248 -38.2998c127 0 230.3 103.3 230.3 230.3s-103.3 230.3 -230.3 230.3s-230.3 -103.3 -230.3 -230.3s103.3 -230.3 230.3 -230.3z" />
+    <glyph glyph-name="cc-jcb" unicode="&#xf24b;" horiz-adv-x="576" 
+d="M431.5 203.7v32.2998c41.2002 0 38.5 -0.200195 38.5 -0.200195c7.2998 -1.2998 13.2998 -7.2998 13.2998 -16c0 -8.7998 -6 -14.5 -13.2998 -15.7998c-1.2002 -0.400391 -3.2998 -0.299805 -38.5 -0.299805zM474.3 183.5c7.5 -1.5 13.5 -8.2998 13.5 -17
+c0 -9 -6 -15.5 -13.5 -17c-2.7998 -0.700195 -3.2002 -0.5 -42.7998 -0.5v35c39.5 0 40 0.200195 42.7998 -0.5zM576 368v-352c0 -26.5 -21.5 -48 -48 -48h-480c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h480c26.5 0 48 -21.5 48 -48zM182 255.7h-57
+c0 -67.1006 10.7002 -109.7 -35.7998 -109.7c-19.5 0 -38.7998 5.7002 -57.2002 14.7998v-28c30 -8.2998 68 -8.2998 68 -8.2998c97.9004 0 82 47.7002 82 131.2zM360.5 251.2c-63.4004 16 -165 14.8994 -165 -59.2998c0 -77.1006 108.2 -73.6006 165 -59.2002v28.2998
+c-47.5996 -24.7002 -107.5 -22 -107.5 31s59.7998 55.5996 107.5 31.2002v28zM544 161.5c0 18.5 -16.5 30.5 -38 32v0.799805c19.5 2.7002 30.2998 15.5 30.2998 30.2002c0 19 -15.7002 30 -37 31c0 0 6.2998 0.299805 -120.3 0.299805v-127.5h122.7
+c24.2998 -0.0996094 42.2998 12.9004 42.2998 33.2002z" />
+    <glyph glyph-name="cc-diners-club" unicode="&#xf24c;" horiz-adv-x="576" 
+d="M239.7 368.1c97.2002 0 175.8 -78.5996 175.8 -175.8c0 -96.8994 -78.5996 -175.8 -175.8 -175.8c-96.9004 0 -175.8 78.9004 -175.8 175.8c0 97.2002 78.8994 175.8 175.8 175.8zM199.8 88.5v207.9c-41.7002 -16.2002 -71.3994 -56.7002 -71.3994 -104.101
+c0 -47.3994 29.6992 -87.8994 71.3994 -103.8zM279.6 88.2002c41.7002 16.2002 71.4004 56.7002 71.4004 104.1c0 47.4004 -29.7002 87.9004 -71.4004 104.101v-208.2zM528 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-480c-26.5 0 -48 21.5 -48 48v352
+c0 26.5 21.5 48 48 48h480zM329.7 0c105 0 200.7 85.5 200.7 190.2c0 114.6 -95.7002 193.8 -200.7 193.8h-90.2998c-106.2 0 -193.801 -79.2002 -193.801 -193.8c0 -104.7 87.6006 -190.2 193.801 -190.2h90.2998z" />
+    <glyph glyph-name="creative-commons" unicode="&#xf25e;" horiz-adv-x="496" 
+d="M245.83 233.13l-33.2197 -17.2803c-9.43066 19.5801 -25.2402 19.9307 -27.46 19.9307c-22.1309 0 -33.2207 -14.6104 -33.2207 -43.8398c0 -23.5703 9.20996 -43.8408 33.2207 -43.8408c14.4697 0 24.6494 7.09082 30.5693 21.2607l30.5498 -15.5
+c-6.16992 -11.5107 -25.6895 -38.9805 -65.0996 -38.9805c-22.5996 0 -73.96 10.3203 -73.96 77.0498c0 58.6904 43 77.0605 72.6299 77.0605c30.7197 0.00976562 52.7002 -11.9502 65.9902 -35.8604zM388.88 233.13l-32.7803 -17.2803
+c-9.5 19.7705 -25.7197 19.9307 -27.8994 19.9307c-22.1406 0 -33.2197 -14.6104 -33.2197 -43.8398c0 -23.5508 9.22949 -43.8408 33.2197 -43.8408c14.4502 0 24.6494 7.09082 30.54 21.2607l31 -15.5c-2.10059 -3.75 -21.3906 -38.9805 -65.0898 -38.9805
+c-22.6904 0 -73.96 9.87012 -73.96 77.0498c0 58.6699 42.9697 77.0605 72.6299 77.0605c30.71 0.00976562 52.5801 -11.9502 65.5596 -35.8604zM247.56 439.95c141.82 0 248.44 -110.13 248.44 -248c0 -147.13 -118.51 -248 -248.44 -248
+c-133.96 0 -247.56 109.51 -247.56 248c0 132.939 104.74 248 247.56 248zM248.43 -10.8604c103.16 0 202.83 81.1299 202.84 202.82c0 113.8 -90.2891 203.26 -202.819 203.26c-118.29 0 -203.72 -97.8496 -203.72 -203.27c0 -109.771 91.1592 -202.811 203.699 -202.811z
+" />
+    <glyph glyph-name="gg" unicode="&#xf260;" horiz-adv-x="512" 
+d="M179.2 217.6l102.399 -102.399l-102.399 -102.4l-179.2 179.2l179.2 179.2l44.7998 -44.7998l-25.5996 -25.6006l-19.2002 19.2002l-128 -128l128 -128l51.5 51.5l-77.1006 76.5zM332.8 371.2l179.2 -179.2l-179.2 -179.2l-44.7998 44.7998l25.5996 25.6006
+l19.2002 -19.2002l128 128l-128 128l-51.5 -51.5l77.1006 -76.5l-25.6006 -25.5996l-102.399 102.399z" />
+    <glyph glyph-name="gg-circle" unicode="&#xf261;" horiz-adv-x="512" 
+d="M257 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM207.5 65.2002l75 75.2002l-77.2002 77.1992l-24.3994 -24.3994l53.0996 -52.9004l-26.5996 -26.5996l-77.2002 77.2002l77.2002 77.1992l11.0996 -11.0996l24.2002 24.2002
+l-35.2002 35.3994l-125.7 -125.699zM306.5 67.4004l125.7 125.6l-125.7 125.7l-75 -75l77.2002 -77.2002l24.3994 24.4004l-53.0996 52.8994l26.5 26.5l77.2002 -77.2002l-77.2002 -77.1992l-11.0996 11.0996l-24.1006 -24.4004z" />
+    <glyph glyph-name="tripadvisor" unicode="&#xf262;" horiz-adv-x="576" 
+d="M166.4 167.479c0 -13.2354 -10.7305 -23.9658 -23.9668 -23.9658c-13.2354 0 -23.9658 10.7305 -23.9658 23.9658c0 13.2363 10.7305 23.9668 23.9658 23.9668c13.2363 0 23.9668 -10.7295 23.9668 -23.9668zM431.362 191.435
+c13.2295 0 23.9551 -10.7246 23.9561 -23.9561c0 -13.2305 -10.7266 -23.9551 -23.9561 -23.9551c-13.2314 0 -23.9561 10.7256 -23.9561 23.9551c0 13.2314 10.7256 23.9561 23.9561 23.9561zM520.75 51.9453c-62.667 -49.1045 -153.276 -38.1094 -202.379 24.5586
+l-30.9795 -46.3252l-30.6826 45.9395c-48.2773 -60.3906 -135.622 -71.8916 -197.885 -26.0547c-64.0586 47.1572 -77.7588 137.315 -30.6016 201.373c-5.05762 17.1221 -17.7021 42.7236 -28.2227 57.1475l90.2861 0.0498047
+c48.0039 29.8701 132.851 54.1123 189.389 54.1123c2.11914 0 5.55762 -0.0371094 7.67578 -0.0820312c1.72363 0.0302734 4.52246 0.0556641 6.24609 0.0556641c55.5518 0 138.851 -23.9258 185.936 -53.4043l96.2178 -0.0742188
+c-10.6191 -14.5371 -23.3213 -40.3643 -28.3516 -57.6494c46.793 -62.7471 34.9639 -151.37 -26.6484 -199.646zM259.366 166.239c-0.00683594 63.5566 -51.5352 115.075 -115.092 115.067c-63.5576 -0.00683594 -115.074 -51.5342 -115.068 -115.092
+c0.00683594 -63.5566 51.5352 -115.075 115.092 -115.067c63.5127 0.0742188 114.984 51.5381 115.068 115.052v0.0400391zM287.957 176.694c5.43262 73.4395 65.5098 130.884 139.12 133.021c-35.5576 15.374 -95.8555 27.8506 -134.594 27.8506
+c-1.41699 0 -3.7168 -0.0166016 -5.13379 -0.0380859c-0.953125 0.00878906 -2.50098 0.0166016 -3.45508 0.0166016c-39.2324 0 -100.479 -12.2168 -136.709 -27.2695c74.3447 -1.58203 135.3 -59.4248 140.771 -133.581zM539.663 205.461
+c-21.9922 59.6338 -88.1621 90.1484 -147.795 68.1572c-59.6338 -21.9922 -90.1484 -88.1621 -68.1572 -147.795v-0.0322266c22.0381 -59.6074 88.1982 -90.0908 147.827 -68.1133c59.6152 22.0039 90.1133 88.1621 68.125 147.783zM213.624 167.486v-0.115234
+c-0.0566406 -39.3281 -31.9863 -71.1631 -71.3145 -71.1064c-39.3271 0.0576172 -71.1621 31.9863 -71.1055 71.3145s31.9863 71.1631 71.3135 71.1055c39.2598 -0.115234 71.042 -31.9395 71.1064 -71.1982zM189.112 167.486v0.0839844
+c-0.0517578 25.7832 -20.9941 46.6445 -46.7783 46.5938s-46.6445 -20.9941 -46.5938 -46.7773c0.0507812 -25.7842 20.9941 -46.6445 46.7764 -46.5938c25.7266 0.113281 46.5371 20.9678 46.5957 46.6934zM502.535 167.486
+c-0.0205078 -39.3281 -31.918 -71.2422 -71.2471 -71.2217c-39.3291 0.0214844 -71.1943 31.918 -71.1729 71.2471c0.0195312 39.3281 31.918 71.1943 71.2471 71.1729c39.29 -0.0654297 71.1211 -31.9082 71.1729 -71.1982zM478.031 167.494
+c-0.00878906 25.7842 -20.918 46.6787 -46.7021 46.6699s-46.6787 -20.918 -46.6699 -46.7021s20.918 -46.6777 46.7021 -46.6699c25.7646 0.0458984 46.6357 20.9277 46.6699 46.6934v0.00878906z" />
+    <glyph glyph-name="odnoklassniki" unicode="&#xf263;" horiz-adv-x="320" 
+d="M275.1 114c-27.3994 -17.4004 -65.0996 -24.2998 -90 -26.9004l20.9004 -20.5996l76.2998 -76.2998c27.9004 -28.6006 -17.5 -73.2998 -45.7002 -45.7002c-19.0996 19.4004 -47.0996 47.4004 -76.2998 76.5996l-76.2998 -76.5
+c-28.2002 -27.5 -73.5996 17.6006 -45.4004 45.7002c19.4004 19.4004 47.1006 47.4004 76.3008 76.2998l20.5996 20.6006c-24.5996 2.59961 -62.9004 9.09961 -90.5996 26.8994c-32.6006 21 -46.9004 33.3008 -34.3008 59c7.40039 14.6006 27.7002 26.9004 54.6006 5.7002
+c0 0 36.2998 -28.8994 94.8994 -28.8994c58.6006 0 94.9004 28.8994 94.9004 28.8994c26.9004 21.1006 47.0996 8.90039 54.5996 -5.7002c12.4004 -25.6992 -1.89941 -38 -34.5 -59.0996zM30.2998 318.3c0 71.7002 58.2998 129.7 129.7 129.7s129.7 -58 129.7 -129.7
+c0 -71.3994 -58.2998 -129.399 -129.7 -129.399s-129.7 58 -129.7 129.399zM96.2998 318.3c0 -35.0996 28.6006 -63.7002 63.7002 -63.7002s63.7002 28.6006 63.7002 63.7002c0 35.4004 -28.6006 64 -63.7002 64s-63.7002 -28.5996 -63.7002 -64z" />
+    <glyph glyph-name="odnoklassniki-square" unicode="&#xf264;" 
+d="M184.2 270.9c0 22.0996 17.8994 40 39.7998 40s39.7998 -17.9004 39.7998 -40c0 -22 -17.8994 -39.8008 -39.7998 -39.8008s-39.7998 17.9004 -39.7998 39.8008zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352
+c26.5 0 48 -21.5 48 -48zM142.9 270.9c0 -44.6006 36.3994 -80.9004 81.0996 -80.9004s81.0996 36.2002 81.0996 80.9004c0 44.7998 -36.3994 81.0996 -81.0996 81.0996s-81.0996 -36.2002 -81.0996 -81.0996zM317.4 180.2
+c-4.60059 9.09961 -17.3008 16.7998 -34.1006 3.59961c0 0 -22.7002 -18 -59.2998 -18s-59.2998 18 -59.2998 18c-16.7998 13.2002 -29.5 5.5 -34.1006 -3.59961c-7.89941 -16.1006 1.10059 -23.7002 21.4004 -37c17.2998 -11.1006 41.2002 -15.2002 56.5996 -16.7998
+l-12.8994 -12.9004c-18.2002 -18 -35.5 -35.5 -47.7002 -47.7002c-17.5996 -17.5996 10.7002 -45.7998 28.4004 -28.5996l47.6992 47.8994c18.2002 -18.1992 35.7002 -35.6992 47.7002 -47.8994c17.6006 -17.2002 46 10.7002 28.6006 28.5996l-47.7002 47.7002l-13 12.9004
+c15.5 1.59961 39.0996 5.89941 56.2002 16.7998c20.3994 13.2998 29.2998 21 21.5 37z" />
+    <glyph glyph-name="get-pocket" unicode="&#xf265;" 
+d="M407.6 384c22.7002 0 40.4004 -18.2002 40.4004 -40.5996v-135.2c0 -124.7 -99.7998 -224.2 -223.8 -224.2c-124.5 0 -224.2 99.5 -224.2 224.2v135.2c0 22.0996 18.5 40.5996 40.5996 40.5996h367zM245.6 115.5c111.9 107.5 114.801 105.4 114.801 123.2
+c0 16.8994 -13.8008 30.7002 -30.7002 30.7002c-16.9004 0 -14.9004 -2.40039 -105.5 -89.3008c-89.1006 85.5 -88.2002 89.3008 -105.2 89.3008c-16.9004 0 -30.7002 -13.8008 -30.7002 -30.7002c0 -18.1006 1.2002 -14.2998 114.9 -123.2
+c11 -11.0996 30 -11.7998 42.3994 0z" />
+    <glyph glyph-name="wikipedia-w" unicode="&#xf266;" horiz-adv-x="640" 
+d="M640 396.8l-0.299805 -12.2002c-28.1006 -0.799805 -45 -15.7998 -55.7998 -40.2998c-25 -57.7998 -103.301 -240 -155.301 -358.6h-13.5996l-81.9004 193.1c-32.5 -63.5996 -68.2998 -130 -99.1992 -193.1c-0.300781 -0.299805 -15 0 -15 0.299805
+c-46.9004 109.7 -96.1006 218.6 -143.101 328.6c-11.3994 26.7002 -49.3994 70 -75.5996 69.7002c0 3.10059 -0.299805 10 -0.299805 14.2002h161.899v-13.9004c-19.2002 -1.09961 -52.7998 -13.2998 -43.2998 -34.1992c21.9004 -49.7002 103.6 -240.301 125.6 -288.601
+c15 29.7002 57.8008 109.2 75.3008 142.8c-13.9004 28.3008 -58.6006 133.9 -72.8008 160c-9.69922 17.8008 -36.0996 19.4004 -55.7998 19.7002v13.9004l142.5 -0.299805v-13.1006c-19.3994 -0.599609 -38.0996 -7.7998 -29.3994 -26.0996
+c18.8994 -40 30.5996 -68.1006 48.0996 -104.7c5.59961 10.7998 34.7002 69.4004 48.0996 100.8c8.90039 20.6006 -3.89941 28.6006 -38.5996 29.4004c0.299805 3.59961 0 10.2998 0.299805 13.5996c44.4004 0.299805 111.101 0.299805 123.101 0.600586v-13.6006
+c-22.5 -0.799805 -45.8008 -12.7998 -58.1006 -31.7002l-59.2002 -122.8c6.40039 -16.0996 63.3008 -142.8 69.2002 -156.7l122.4 282.601c-8.60059 23.0996 -36.4004 28.0996 -47.2002 28.2998v13.9004l127.8 -1.10059z" />
+    <glyph glyph-name="safari" unicode="&#xf267;" horiz-adv-x="512" 
+d="M274.69 173.31l-108.69 -71.3096l71.3096 108.69zM256 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM411.85 265.21c-2.71094 -1.13477 -4.91211 -4.44043 -4.91211 -7.37988c0 -0.880859 0.274414 -2.25684 0.612305 -3.07031
+v0c1.12988 -2.72559 4.44043 -4.9375 7.39062 -4.9375c0.87793 0 2.24902 0.272461 3.05957 0.607422l14.75 6.11035c2.72754 1.12891 4.94141 4.44043 4.94141 7.39258c0 0.879883 -0.273438 2.25391 -0.611328 3.06738v0
+c-1.12793 2.73047 -4.44043 4.94629 -7.39453 4.94629c-0.876953 0 -2.24512 -0.271484 -3.05566 -0.606445zM314.43 354c-0.341797 -0.818359 -0.620117 -2.20117 -0.620117 -3.08789c0 -2.95215 2.21387 -6.26367 4.94043 -7.39258v0
+c0.810547 -0.334961 2.18164 -0.607422 3.05957 -0.607422c2.9502 0 6.26074 2.21191 7.39062 4.9375l6.12988 14.7803c0.335938 0.811523 0.608398 2.18164 0.608398 3.05957c0 2.9502 -2.21289 6.26172 -4.93848 7.39062v0
+c-0.813477 0.337891 -2.18848 0.612305 -3.07031 0.612305c-2.93848 0 -6.24512 -2.20117 -7.37988 -4.91211zM256 388c-4.41602 0 -8 -3.58398 -8 -8v-16c0 -4.41602 3.58398 -8 8 -8v0c4.41602 0 8 3.58398 8 8v16c0 4.41602 -3.58398 8 -8 8v0zM181 373.08
+c-2.72461 -1.12988 -4.93555 -4.44043 -4.93555 -7.38965c0 -0.869141 0.266602 -2.22656 0.595703 -3.03027l6.12988 -14.7803c1.09863 -2.80664 4.43555 -5.08398 7.44922 -5.08398c4.41602 0 8 3.58398 8 8c0 0.922852 -0.299805 2.3584 -0.668945 3.2041l-6.11035 14.75
+c-1.12891 2.72754 -4.44043 4.94141 -7.39258 4.94141c-0.879883 0 -2.25391 -0.273438 -3.06738 -0.611328zM117.42 330.59c-1.29297 -1.29297 -2.35156 -3.82617 -2.35156 -5.65527c0 -1.81445 1.03613 -4.33398 2.31152 -5.625l11.3105 -11.3096
+c1.29297 -1.29199 3.82617 -2.34082 5.6543 -2.34082s4.3623 1.04883 5.65527 2.34082v0c1.28418 1.29199 2.32617 3.81836 2.32617 5.63965c0 1.82227 -1.04199 4.34863 -2.32617 5.64062l-11.2695 11.3096c-1.29395 1.29297 -3.82715 2.3418 -5.65527 2.3418
+s-4.3623 -1.04883 -5.65527 -2.3418v0zM60 192c0 -4.41602 3.58398 -8 8 -8h16c4.41602 0 8 3.58398 8 8v0c0 4.41602 -3.58398 8 -8 8h-16c-4.41602 0 -8 -3.58398 -8 -8v0zM100.15 118.79c2.71094 1.13477 4.91211 4.44043 4.91211 7.37988
+c0 0.880859 -0.274414 2.25684 -0.612305 3.07031v0c-1.12988 2.72559 -4.44043 4.9375 -7.39062 4.9375c-0.87793 0 -2.24902 -0.272461 -3.05957 -0.607422l-14.75 -6.11035c-2.72754 -1.12891 -4.94141 -4.44043 -4.94141 -7.39258
+c0 -0.879883 0.273438 -2.25391 0.611328 -3.06738v0c1.12793 -2.73047 4.44043 -4.94629 7.39453 -4.94629c0.876953 0 2.24512 0.271484 3.05566 0.606445zM104.48 254.79c0.333008 0.80957 0.604492 2.14551 0.604492 3.02051
+c0 2.94922 -2.21094 6.25977 -4.93457 7.38965l-14.7803 6.12988c-0.811523 0.335938 -2.18164 0.608398 -3.05957 0.608398c-2.9502 0 -6.26172 -2.21289 -7.39062 -4.93848v0c-0.337891 -0.813477 -0.612305 -2.18848 -0.612305 -3.07031
+c0 -2.93848 2.20117 -6.24512 4.91211 -7.37988l14.7803 -6.12012c0.814453 -0.338867 2.19141 -0.614258 3.07422 -0.614258c2.96582 0 6.28418 2.22852 7.40625 4.97461v0zM197.57 30c0.369141 0.845703 0.668945 2.28125 0.668945 3.2041c0 4.41602 -3.58398 8 -8 8
+c-3.01367 0 -6.35059 -2.27734 -7.44922 -5.08398l-6.12988 -14.7803c-0.335938 -0.811523 -0.608398 -2.18164 -0.608398 -3.05957c0 -4.41797 3.58594 -8.00293 8.00293 -8.00293c2.95312 0 6.2666 2.21387 7.39551 4.94238zM264 4v16c0 4.41602 -3.58398 8 -8 8v0
+c-4.41602 0 -8 -3.58398 -8 -8v-16c0 -4.41602 3.58398 -8 8 -8v0c4.41602 0 8 3.58398 8 8zM331 10.9199c2.72461 1.12988 4.93555 4.44043 4.93555 7.38965c0 0.869141 -0.266602 2.22656 -0.595703 3.03027l-6.12988 14.7803
+c-1.12891 2.72559 -4.44043 4.9375 -7.39062 4.9375c-0.87793 0 -2.24805 -0.272461 -3.05957 -0.607422v0c-2.72559 -1.12988 -4.9375 -4.44043 -4.9375 -7.39062c0 -0.87793 0.272461 -2.24902 0.607422 -3.05957l6.11035 -14.75
+c1.12891 -2.72754 4.44043 -4.94141 7.39258 -4.94141c0.879883 0 2.25391 0.273438 3.06738 0.611328v0zM394.58 53.4102c1.29297 1.29297 2.35156 3.82617 2.35156 5.65527c0 1.81445 -1.03613 4.33398 -2.31152 5.625l-11.3105 11.3096
+c-1.29297 1.29199 -3.82617 2.34082 -5.6543 2.34082s-4.3623 -1.04883 -5.65527 -2.34082v0c-1.28418 -1.29199 -2.32617 -3.81836 -2.32617 -5.63965c0 -1.82227 1.04199 -4.34863 2.32617 -5.64062l11.2695 -11.3096c1.29395 -1.29297 3.82715 -2.3418 5.65527 -2.3418
+s4.3623 1.04883 5.65527 2.3418v0zM286.25 161.75l115.41 175.91l-175.91 -115.41l-115.41 -175.91zM437.08 117c0.337891 0.813477 0.612305 2.18848 0.612305 3.07031c0 2.93848 -2.20117 6.24512 -4.91211 7.37988l-14.7803 6.12012
+c-0.818359 0.341797 -2.20117 0.620117 -3.08789 0.620117c-2.95215 0 -6.26367 -2.21387 -7.39258 -4.94043v0c-0.334961 -0.810547 -0.607422 -2.18164 -0.607422 -3.05957c0 -2.9502 2.21191 -6.26074 4.9375 -7.39062l14.7803 -6.12988
+c0.811523 -0.335938 2.18164 -0.608398 3.05957 -0.608398c2.9502 0 6.26172 2.21289 7.39062 4.93848v0zM444 184c4.41602 0 8 3.58398 8 8v0c0 4.41602 -3.58398 8 -8 8h-16c-4.41602 0 -8 -3.58398 -8 -8v0c0 -4.41602 3.58398 -8 8 -8h16z" />
+    <glyph glyph-name="chrome" unicode="&#xf268;" horiz-adv-x="496" 
+d="M131.5 230.5l-76.4004 117.4c47.6006 59.1992 119 91.7998 192 92.0996c42.3008 0.299805 85.5 -10.5 124.801 -33.2002c43.3994 -25.2002 76.3994 -61.3994 97.3994 -103l-205.3 10.7998c-58.0996 3.40039 -113.4 -29.2998 -132.5 -84.0996zM164.4 192
+c0 46.2998 37.3994 83.5996 83.5996 83.5996s83.5996 -37.3994 83.5996 -83.5996s-37.3994 -83.5996 -83.5996 -83.5996s-83.5996 37.3994 -83.5996 83.5996zM479.3 281.2c43.5 -111.9 0 -241.9 -107.399 -303.9c-43.4004 -25.2002 -91.3008 -35.3994 -137.801 -32.8994
+l112.101 172.399c31.8994 49 31.2998 112.9 -6.60059 157.2zM133.7 144.4c26.2998 -51.7002 81.8994 -83.3008 139.5 -72.5l-63.7002 -124.801c-118.7 18.2002 -209.5 120.9 -209.5 244.9c0 50.0996 14.9004 96.9004 40.4004 135.9z" />
+    <glyph glyph-name="firefox" unicode="&#xf269;" horiz-adv-x="512" 
+d="M503.52 206.52c0.240234 -4.43945 0.360352 -9 0.480469 -13.5195c0 -137.19 -111.23 -248.42 -248.32 -248.42c-122.779 0 -224.859 89.2695 -244.779 206.38c-0.360352 3.24023 -0.720703 6.36035 -1.08008 9.59961c-4.91992 42.6006 0.479492 87.3604 16.0801 124.79
+c10.7998 25.8809 32.6396 54 49.7998 62.8809c-16.2002 -31.8008 -24.1201 -63 -25.7998 -83.8809c11.2793 37.2002 32.6299 68.3604 62.5098 90.3604c51.2402 37.6699 120.229 39.3604 147.71 15.3604c-51 -17.5107 -106.55 -87.96 -94.3105 -170.511
+c1.65137 -11.3535 7.08105 -28.9326 12.1201 -39.2393c-9.51953 25.0801 -10.3594 60.3594 5 83.2793c17.1602 25.5508 41.6299 30.9502 54.71 28.1904c-5.15918 1.08008 -16.5596 -20.75 -18.2393 -24.5898c-3.4502 -7.85645 -6.25098 -21.1953 -6.25098 -29.7754
+c0 -0.337891 0.00488281 -0.886719 0.0107422 -1.22461c0.326172 -19.1992 11.7773 -45.6309 25.5596 -59c47.6504 -46.4307 124.561 -28.1602 159 24.8398c23.6406 36.4795 26.5205 98.3896 -3.83984 147.59c-6.29297 9.96582 -18.335 24.6416 -26.8799 32.7598
+c-47.6602 45.4707 -116.06 64.6699 -180.24 52.9902c-0.240234 0 -0.599609 -0.120117 -0.839844 -0.120117c-1.7998 -0.359375 -3.47949 -0.719727 -5.16016 -1.08008c-0.359375 -0.120117 -0.839844 -0.120117 -1.2002 -0.239258l-5.87988 -1.44043
+c-14.5195 -3.55957 -34.7998 -10.7998 -49.4395 -19.5596c-0.078125 -0.0107422 -0.185547 -0.0654297 -0.240234 -0.120117l0.120117 0.120117c0 -0.0664062 -0.0537109 -0.120117 -0.120117 -0.120117v0l-0.120117 -0.120117l0.120117 0.120117h-0.129883
+l0.479492 0.479492c0.480469 0.480469 1.32031 1.16016 2.40039 2.16016c19.6797 17.7598 49.3203 31.9199 82.9102 39c12.417 2.60938 32.792 4.84961 45.4795 5h10.6299c10.5781 -0.25293 27.6016 -2.04492 38 -4c0.960938 -0.120117 1.76074 -0.360352 2.76074 -0.479492
+h0.120117c1.7998 -0.360352 3.71973 -0.84082 5.63965 -1.2002c15.9277 -3.61621 40.7598 -12.3799 55.4297 -19.5605c2.40039 -1.2002 4.7998 -2.39941 7.2002 -3.71973c7.16211 -3.56738 18.1826 -10.3408 24.5996 -15.1201
+c4.32031 -3.12012 8.48047 -6.36035 12.4805 -9.83984c5.35449 -4.27344 13.5479 -11.7559 18.29 -16.7002c7.01562 -6.8877 17.5479 -18.8223 23.5098 -26.6396c0.959961 -1.2002 1.75977 -2.40039 2.75977 -3.71973c0.400391 -0.480469 0.640625 -0.84082 1 -1.32031
+l1.80078 -2.52051c0.359375 -0.479492 0.719727 -1.08008 1.08008 -1.55957c0.479492 -0.719727 1.0791 -1.56055 1.55957 -2.28027c0.365234 -0.473633 0.90332 -1.28027 1.2002 -1.7998l1.43945 -2.12988c0.366211 -0.473633 0.90332 -1.28027 1.2002 -1.7998
+c0.480469 -0.720703 0.959961 -1.56055 1.32031 -2.16016c0.359375 -0.600586 0.839844 -1.24023 1.2002 -1.91992c0.359375 -0.680664 0.839844 -1.32031 1.19922 -2c0.360352 -0.680664 0.84082 -1.28027 1.2002 -2c0.367188 -0.53125 0.904297 -1.42676 1.2002 -2
+c0.360352 -0.720703 0.839844 -1.56055 1.2002 -2.16016c0.359375 -0.599609 0.719727 -1.32031 1.08008 -1.91992c0.359375 -0.839844 0.799805 -1.67969 1.2002 -2.28027c0.399414 -0.599609 0.639648 -1.2002 1 -1.7998
+c0.359375 -0.839844 0.839844 -1.56055 1.19922 -2.40039c0.240234 -0.479492 0.480469 -1.08008 0.720703 -1.55957c0.479492 -0.839844 0.839844 -1.63965 1.31934 -2.63965l0.360352 -0.720703c1.75977 -3.71973 3.44043 -7.55957 5 -11.3994
+c0 -0.120117 0.120117 -0.240234 0.120117 -0.360352c0.439453 -1.2002 0.959961 -2.28027 1.43945 -3.48047c0.120117 -0.239258 0.240234 -0.599609 0.360352 -0.839844c0.480469 -1.08008 0.839844 -2.2793 1.32031 -3.35938
+c0.117188 -0.269531 0.27832 -0.717773 0.359375 -1c0.360352 -1.08008 0.84082 -2.28027 1.2002 -3.36035l0.360352 -1.08008c0.479492 -1.2002 0.839844 -2.28027 1.2002 -3.47949c0.119141 -0.400391 0.239258 -0.640625 0.359375 -1
+c0.360352 -1.08008 0.720703 -2.28027 1.08008 -3.48047c0.120117 -0.240234 0.120117 -0.599609 0.240234 -0.839844c0.360352 -1.2002 0.719727 -2.52051 1.08008 -3.71973c0.120117 -0.120117 0.120117 -0.360352 0.240234 -0.600586l1.08008 -4
+c0.119141 -0.120117 0.119141 -0.120117 0.119141 -0.240234c2.98926 -11.1846 6.26855 -29.6201 7.32031 -41.1494v-0.120117l0.360352 -4.67969v-0.120117c0 -1.56055 0.120117 -3.12012 0.239258 -4.68066z" />
+    <glyph glyph-name="opera" unicode="&#xf26a;" horiz-adv-x="496" 
+d="M313.9 415.3c-170.2 0 -252.601 -223.8 -147.5 -355.1c36.5 -45.4004 88.5996 -75.6006 147.5 -75.6006c36.2998 0 70.2998 11.1006 99.3994 30.4004c-43.7998 -39.2002 -101.899 -63 -165.3 -63c-3.90039 0 -8 0 -11.9004 0.299805
+c-131.5 6.10059 -236.1 114.601 -236.1 247.7c0 137 111 248 248 248h0.799805c63.1006 -0.299805 120.7 -24.0996 164.4 -63.0996c-29 19.3994 -63.1006 30.3994 -99.2998 30.3994zM415.7 17.5996c-40.9004 -24.6992 -90.7002 -23.5996 -132 5.80078
+c56.2002 20.5 97.7002 91.5996 97.7002 176.6c0 84.7002 -41.2002 155.8 -97.4004 176.6c41.7998 29.2002 91.2002 30.3008 132.9 5c105.899 -98.6992 105.5 -265.699 -1.2002 -364z" />
+    <glyph glyph-name="internet-explorer" unicode="&#xf26b;" horiz-adv-x="512" 
+d="M483.049 288.294c25.1963 -45.4473 33.2578 -97.5811 26.8516 -141.162h-328.792c0 -100.432 144.31 -136.029 196.818 -47.4355h120.833c-32.5645 -91.7285 -119.689 -146.022 -216.813 -146.022c-35.1367 0 -70.2725 0.143555 -101.695 15.5732
+c-87.3975 -44.4941 -180.251 -56.5693 -180.251 42.0059c0 45.8066 23.2461 107.096 43.9922 145.022c35.1357 63.7227 81.4121 124.875 135.687 173.168c-43.7061 -18.8604 -91.125 -66.2959 -121.977 -101.158c25.877 112.787 129.466 193.638 237.098 186.457
+c130.032 59.7939 209.673 34.1445 209.673 -38.5771c0 -27.4326 -10.5684 -63.2959 -21.4238 -87.8711zM64.5586 101.123c-73.001 -152.4 11.5254 -172.244 100.267 -123.304c-46.5635 27.4326 -82.5557 72.1533 -100.267 123.304zM180.536 209.996h207.961
+c-2 55.1514 -50.5635 94.8711 -103.981 94.8711c-53.7041 0 -101.979 -39.7197 -103.979 -94.8711zM365.072 397.596c46.2764 -18.002 85.9824 -57.2939 112.263 -99.5859c7.1416 18.8604 14.5693 47.8643 14.5693 67.8672c0 32.0049 -22.8525 53.7217 -54.2744 53.7217
+c-23.9951 0 -51.1328 -11.7158 -72.5576 -22.0029z" />
+    <glyph glyph-name="contao" unicode="&#xf26d;" horiz-adv-x="512" 
+d="M45.4004 143c14.3994 -67.0996 26.3994 -129 68.1992 -175h-79.5996c-18.7002 0 -34 15.2002 -34 34v380c0 18.7002 15.2002 34 34 34h57.7002c-13.7998 -12.5996 -26.1006 -27.2002 -36.9004 -43.5996c-45.3994 -70 -27 -146.801 -9.39941 -229.4zM478 416
+c18.7998 0 34 -15.2002 34 -34v-380.1c0 -18.8008 -15.2998 -34 -34 -34h-52.0996c38.6992 38.3994 60.5996 92.0996 57.3994 163.6l-137.399 -29.5996c-1.7002 -32.5 -12.9004 -63.8008 -57.4004 -73.2002c-24.9004 -5.2998 -45.4004 0.599609 -58.2998 11.7002
+c-15.7998 13.5 -28.4004 31 -49.5 131.199c-21.4004 100.5 -17 121.601 -8.2002 140.301c7.2998 15.2998 23.7002 29.2998 48.2998 34.5996c44.7998 9.40039 67.7002 -14.9004 82.6006 -43.9004l137.1 29.3008c-13.5 34.5996 -31.2998 62.6992 -52.7002 84.0996h90.2002z
+" />
+    <glyph glyph-name="500px" unicode="&#xf26e;" 
+d="M103.3 103.7c-6.5 14.2002 -6.89941 18.2998 7.40039 23.0996c25.5996 8 8 -9.2002 43.2002 -49.2002h0.299805v93.9004c1.2002 50.2002 44 92.2002 97.7002 92.2002c53.8994 0 97.6992 -43.5 97.6992 -96.7998c0 -63.4004 -60.7998 -113.2 -128.5 -93.3008
+c-10.5 4.2002 -2.09961 31.7002 8.5 28.6006c53 0 89.4004 10.0996 89.4004 64.3994c0 61 -77.0996 89.6006 -116.9 44.6006c-23.5 -26.4004 -17.5996 -42.1006 -17.5996 -157.601c50.7002 -31 118.3 -22 160.4 20.1006c24.7998 24.7998 38.5 58 38.5 93
+c0 35.2002 -13.8008 68.2002 -38.8008 93.2998c-24.7998 24.7998 -57.7998 38.5 -93.2998 38.5s-68.7998 -13.7998 -93.5 -38.5c-0.299805 -0.299805 -16 -16.5 -21.2002 -23.9004l-0.5 -0.599609c-3.2998 -4.7002 -6.2998 -9.09961 -20.0996 -6.09961
+c-6.90039 1.69922 -14.2998 5.7998 -14.2998 11.7998v186.8c0 5 3.89941 10.5 10.5 10.5h241.3c8.2998 0 8.2998 -11.5996 8.2998 -15.0996c0 -3.90039 0 -15.1006 -8.2998 -15.1006h-223.2v-132.899h0.299805c104.2 109.8 282.801 36 282.801 -108.9
+c0 -178.1 -244.801 -220.3 -310.101 -62.7998zM166.6 364.5c3.80078 18.7998 145.101 50.7998 238.301 -38.2002c8.5 -7.5 -9.5 -22.7998 -14.3008 -22.7998c-6.59961 0 -84.5996 87.9004 -209.399 40.4004c-10 -3.90039 -15.1006 16.3994 -14.6006 20.5996zM393 33.2998
+c8.09961 8 27.5996 -12.5996 20.7002 -20.3994c-135.601 -135.601 -357.601 -52.1006 -381.601 121.3c-1.5 10.7002 28.9004 15.5 28.9004 3.2998c33 -165 222 -214.1 332 -104.2zM213.6 141.4c0 3.39941 2.30078 4.69922 20.4004 22.5996l-18.2002 18.2002
+c-5.59961 5.59961 7.40039 17.2998 12.4004 17.2998c3.09961 0 2.89941 -0.700195 21.5 -19.5l17.8994 17.9004c6.10059 6.09961 22.5 -8.90039 16.2002 -15.7002l-18.2002 -18.2002l17.3008 -17.2998c7.7998 -7.7998 -5.30078 -18.2002 -10.7002 -18.2002
+c-3.2002 0 -2.7002 0.200195 -22.2998 19.5c-19.7002 -19.7002 -18.5 -19.5 -22.3008 -19.5c-2.39941 0 -5.5 1.40039 -8.5 4.40039c-1.19922 1.19922 -5.5 4.5 -5.5 8.5z" />
+    <glyph glyph-name="amazon" unicode="&#xf270;" 
+d="M257.2 285.3c0 39.2998 5.2002 69.2002 -35.5 69.1006c0 0 -37.9004 0 -54.2002 -49.5l-73.5 6.7998c0 49.2998 46.7002 104.3 134.7 104.3c87.7998 0 112.3 -57 112.3 -82.2998v-147.101c0 -27.5 32.2998 -52.7998 32.2998 -52.7998l-56.7998 -56
+c-9.90039 9.2998 -38.7998 36.6006 -45.2998 46.7998c-45.2002 -70.7998 -183.5 -66.2998 -183.5 43.2002c0 102 120.8 115.7 169.5 117.5zM257.2 198.5v40.5996c-33.7002 -1.09961 -84.2002 -10.5996 -84.2002 -57.7998c0 -50.7998 84.2002 -62.7998 84.2002 17.2002z
+M393.2 35c-7.7002 -10 -70 -67 -174.5 -67s-184.5 71.5 -209 101c-6.7998 7.7002 1 11.2998 5.5 8.2998c73.2998 -44.5 187.8 -117.8 372.5 -30.2998c7.5 3.7002 13.2998 -2 5.5 -12zM433 32.7998c-6.5 -15.7998 -16 -26.7998 -21.2002 -31
+c-5.5 -4.5 -9.5 -2.7002 -6.5 3.7998s19.2998 46.5 12.7002 55c-6.5 8.30078 -37 4.30078 -48 3.2002c-10.7998 -1 -13 -2 -14 0.299805c-2.2998 5.7002 21.7002 15.5 37.5 17.5c15.7002 1.80078 41 0.800781 46 -5.69922c3.7002 -5.10059 0 -27.1006 -6.5 -43.1006z" />
+    <glyph glyph-name="houzz" unicode="&#xf27c;" 
+d="M275.9 117.3h-104.601v-149.3h-154.3v448h109.5v-104.5l305.1 -85.5996v-257.9h-155.699v149.3z" />
+    <glyph glyph-name="vimeo-v" unicode="&#xf27d;" 
+d="M447.8 294.4c-2 -43.6006 -32.3994 -103.301 -91.3994 -179.101c-60.9004 -79.2002 -112.4 -118.8 -154.601 -118.8c-26.0996 0 -48.2002 24.0996 -66.2998 72.2998c-35.2002 129.2 -50.2002 204.9 -79.2998 204.9c-3.40039 0 -15.1006 -7.10059 -35.2002 -21.1006
+l-21 27.2002c51.5996 45.2998 100.9 95.7002 131.8 98.5c34.9004 3.40039 56.2998 -20.5 64.4004 -71.5c28.7002 -181.5 41.3994 -208.899 93.5996 -126.7c18.7002 29.6006 28.7998 52.1006 30.2002 67.6006c4.7998 45.8994 -35.7998 42.7998 -63.2998 31
+c22 72.0996 64.0996 107.1 126.2 105.1c45.7998 -1.2002 67.5 -31.0996 64.8994 -89.3994z" />
+    <glyph glyph-name="black-tie" unicode="&#xf27e;" 
+d="M0 416h448v-448h-448v448zM316.5 90.7998l-64.5 184l64.4004 86.6006h-184.9l64.5 -86.6006l-64.5 -184l92.5 -88.7002z" />
+    <glyph glyph-name="fonticons" unicode="&#xf280;" 
+d="M0 416h448v-448h-448v448zM187 275.1c11.9004 0 16.5996 -4.2998 16.2998 -23l50.7002 6.10059c0 44.5996 -30.5996 52.7998 -64.7002 52.7998c-50.7998 0 -77.2998 -20.4004 -77.2998 -70v-21h-28v-37.4004h22.2002c2.89941 0 5.7998 0 5.7998 -2.2998v-111.399
+c0 -5.60059 -1.5 -7.30078 -6.7002 -7.90039l-21.2998 -2v-25.7002h130.7v25.1006l-43.5 4.09961c-5.2002 0.599609 -3.2002 1.5 -3.2002 7.2998v112.9h55.7002l11.0996 37.2998h-67.3994c-2.90039 0 0.599609 2 0.599609 4.40039v23.2998
+c0 17.5 0.599609 27.3994 19 27.3994zM261.3 33.2998h102.601v25.1006l-15.7002 2.59961c-5.5 0.900391 -2.90039 1.5 -2.90039 7.2998v151.7h-80.2002l-6.69922 -29.5l24.1992 -6.40039c3.80078 -1.19922 6.7002 -3.7998 6.7002 -7.89941v-107.9
+c0 -5.59961 -2.39941 -6.7002 -7.59961 -7.2998l-20.4004 -2.59961v-25.1006zM342.1 288.8l21.9004 24.2002l-3.5 9.59961h-27.7002l-15.5 28h-9.2998l-15.5 -28h-27.7002l-3.5 -9.59961l21.7998 -24.2002l-9 -33.2002l7.30078 -7.2998l31.1992 16.6006l31.2002 -16.6006
+l7.2998 7.2998z" />
+    <glyph glyph-name="reddit-alien" unicode="&#xf281;" horiz-adv-x="512" 
+d="M440.3 244.5c55.2998 0 73.7002 -74.0996 23.7998 -99.7002c2.2002 -7.89941 3.10059 -16.7002 3.10059 -25.0996c0 -83.7998 -94.4004 -151.7 -210.8 -151.7c-115.9 0 -210.301 67.9004 -210.301 151.7c0 8.39941 0.800781 16.7998 2.60059 24.7002
+c-50.9004 25.5 -32.7002 100.1 22.8994 100.1c15 0 28.7002 -6.2002 38.4004 -16.2998c35.7998 24.7002 83.4004 40.5996 136.3 42.7998l30.4004 137.6c1.2998 4.90039 6.09961 8.40039 11 7.10059l97.3994 -21.6006c6.60059 12.7002 19.9004 22 35.3008 22
+c22.0996 0 39.6992 -18.0996 39.6992 -39.6992c0 -21.6006 -17.6992 -39.7002 -39.6992 -39.7002c-21.6006 0 -39.2002 17.5996 -39.2002 39.2002l-88.2002 19.7998l-27.7002 -124.8c53.2998 -1.7002 101.4 -17.6006 137.101 -42.3008
+c9.69922 9.7002 22.8994 15.9004 37.8994 15.9004zM129.4 139.1c0 -21.5996 17.6992 -39.2998 39.6992 -39.1992c21.6006 0 39.2002 17.5996 39.2002 39.1992c0 22.1006 -17.5996 39.7002 -39.2002 39.7002c-22.0996 0 -39.6992 -17.7002 -39.6992 -39.7002zM343.7 45.5996
+c4 3.5 4 9.7002 -0.100586 13.7002c-3.5 3.5 -9.69922 3.5 -13.1992 0c-29 -29 -121.2 -28.5 -149 0c-3.5 3.5 -9.7002 3.5 -13.2002 0c-4 -4 -4 -10.2002 0 -13.7002c36.3994 -36.3994 139.1 -36.3994 175.5 0zM342.9 99.7998c22 0 39.5996 17.7002 39.6992 39.2002
+c0 22.0996 -17.6992 39.7002 -39.6992 39.7002c-21.6006 0 -39.2002 -17.7002 -39.2002 -39.7002c0 -21.5996 17.5996 -39.2002 39.2002 -39.2002z" />
+    <glyph glyph-name="edge" unicode="&#xf282;" horiz-adv-x="512" 
+d="M481.92 313.52c6.46973 -12.7793 22.4697 -41.6494 21.9697 -85.0791c-0.0791016 -37.5908 -26.4893 -83.4844 -58.9492 -102.44c-14.957 -8.88379 -41.2148 -16.1318 -58.6104 -16.1797c-0.139648 0 -52.6504 -2.56055 -80.5098 16.8096
+c-5.85059 4.08008 -9.14062 8.94043 -9.14062 14c0 6.16016 4.82031 9 6.39062 11c9.7998 12.75 15.1094 28.1699 15.1094 38.5703c0 32.71 -11 59.2998 -33 83.0996c-1.16016 1.25 -42.9795 50.1807 -122.25 50.1807c-63.2393 0 -123.46 -32.6504 -149.46 -79.1406
+c24.04 111.98 123.58 195.66 242.44 195.66c96.3496 0 184.96 -46.1797 226.01 -126.48zM212.77 -27.6699c1.28027 -0.570312 29.0107 -20.5898 67.1309 -27.21c-6.53809 -0.628906 -17.1748 -1.13965 -23.7422 -1.13965c-87.0234 0 -187.626 63.9521 -224.559 142.75
+c-25.75 55.4697 -24.0801 105.96 -23 118.27c4.16992 34.2803 27.0801 59.7002 46.8408 74.7998c29.6299 22.6904 68.8193 35.6904 107.529 35.6904c7.0498 0 43.9199 -0.900391 77.6406 -18.5898c32.5596 -17.1006 47.3193 -37.5801 56.5596 -53.5107
+c1.54688 -2.70312 3.73828 -7.24609 4.88965 -10.1396c-4.21973 4.65039 -40.0596 44.2002 -99.0596 -1c-22.9014 -16.6006 -48.4238 -51.957 -56.9697 -78.9199c-14.1406 -40.4004 -12.8398 -88.5801 20.0996 -136c10.2158 -15.1748 31.1104 -35.334 46.6396 -45z
+M463.49 70.6602c1.99316 -1.25879 3.6123 -4.19531 3.6123 -6.55273c0 -1.25195 -0.547852 -3.12305 -1.22266 -4.17773c-47.5703 -75.4297 -127.86 -108.87 -163 -108.87c-22.7002 0 -48.1299 6.95996 -71.7002 19.6104c-33 17.6699 -49.4893 38.7598 -56 47.6699
+c-46.3301 63.5303 -28.25 122.29 -13.3301 151.66c8.06445 15.8418 25.4287 38.2422 38.7607 50c-3.50684 -6.9668 -6.42773 -18.9512 -6.52051 -26.75c0 -80.9404 79.8506 -144 171.521 -144h0.341797c19.7266 0 50.7314 5.6084 69.208 12.5195
+c5.78809 2.16992 14.9316 6.25586 20.4102 9.12012c0.969727 0.539062 2.65723 0.975586 3.76562 0.975586c1.24316 0 3.10449 -0.540039 4.1543 -1.20508z" />
+    <glyph glyph-name="codiepie" unicode="&#xf284;" horiz-adv-x="472" 
+d="M422.5 245.1c30.7002 0 33.5 -53.0996 -0.299805 -53.0996h-10.7998v-44.2998h-26.6006v97.3994h37.7002zM472 95.4004c-42.0996 -91.9004 -121.6 -151.4 -224 -151.4c-137 0 -248 111 -248 248s111 248 248 248c97.4004 0 172.8 -53.7002 218.2 -138.4l-186 -108.8z
+M433.5 82.9004l-60.2998 30.6992c-27.1006 -44.2998 -70.4004 -71.3994 -122.4 -71.3994c-82.5 0 -149.2 66.7002 -149.2 148.899c0 82.5 66.7002 149.2 149.2 149.2c48.4004 0 88.9004 -23.5 116.9 -63.3994l59.5 34.5996c-40.7002 62.5996 -104.7 100 -179.2 100
+c-121.2 0 -219.5 -98.2998 -219.5 -219.5s98.2998 -219.5 219.5 -219.5c78.5996 0 146.5 42.0996 185.5 110.4z" />
+    <glyph glyph-name="modx" unicode="&#xf285;" 
+d="M356 206.2l36.7002 -23.7002v-214.5l-133 83.7998zM440 373l-83.2002 -134.3l-153.5 96.5l23 37.7998h213.7zM351 230.2l-249.8 -57.7002l-46 29v214.5zM97 153.8l249.7 57.7002l-125 -200.5h-213.7z" />
+    <glyph glyph-name="fort-awesome" unicode="&#xf286;" horiz-adv-x="512" 
+d="M489.2 160.1c2.59961 0 4.59961 -2 4.5 -4.59961v-219.5h-182.9v96c0 72.5996 -109.7 72.5996 -109.7 0v-96h-182.899v219.5c0 2.59961 2 4.59961 4.59961 4.59961h27.4004c2.59961 0 4.59961 -2 4.59961 -4.59961v-32h36.6006v178.3
+c0 2.60059 2 4.60059 4.59961 4.60059h27.4004c2.59961 0 4.59961 -2 4.59961 -4.60059v-32h36.2998v32c0 2.60059 2 4.60059 4.60059 4.60059h27.3994c2.60059 0 4.60059 -2 4.60059 -4.60059v-32h36.5996v32c0 6 8 4.60059 11.7002 4.60059v111.699
+c-5.40039 2.60059 -9.10059 8.30078 -9.10059 14.3008c0 20.7998 31.4004 20.6992 31.4004 0c0 -6 -3.7002 -11.7002 -9.09961 -14.3008v-4.89941c7.69922 1.7998 15.6992 2.89941 23.6992 2.89941c11.7002 0 22.9004 -4.2998 32.6006 -4.2998
+c8.89941 0 18.8994 4.2998 24 4.2998c2.59961 0 4.59961 -2 4.59961 -4.59961v-60c0 -6.90039 -23.0996 -8 -27.7002 -8c-10.5 0 -20.5 4.2998 -31.3994 4.2998c-8.60059 0 -17.4004 -1.39941 -25.7002 -3.39941v-38c3.7002 0 11.7002 1.39941 11.7002 -4.60059v-32h36.5996
+v32c0 2.60059 2 4.60059 4.60059 4.60059h27.3994c2.60059 0 4.60059 -2 4.60059 -4.60059v-32h36.5996v32c0 2.60059 2 4.60059 4.59961 4.60059h27.4004c2.59961 0 4.59961 -2 4.59961 -4.60059v-178.3h36.6006v32c0 2.59961 2 4.59961 4.59961 4.59961h27.4004z
+M201.1 164.6v64c0 2.60059 -2 4.60059 -4.59961 4.60059h-27.4004c-2.59961 0 -4.59961 -2 -4.59961 -4.60059v-64c0 -2.59961 2 -4.59961 4.59961 -4.59961h27.4004c2.59961 0 4.59961 2 4.59961 4.59961zM347.5 164.6v64c0 2.60059 -2 4.60059 -4.59961 4.60059h-27.4004
+c-2.59961 0 -4.59961 -2 -4.59961 -4.60059v-64c0 -2.59961 2 -4.59961 4.59961 -4.59961h27.4004c2.59961 0 4.59961 2 4.59961 4.59961z" />
+    <glyph glyph-name="usb" unicode="&#xf287;" horiz-adv-x="640" 
+d="M641.5 192c0 -3.09961 -1.7002 -6.09961 -4.5 -7.5l-89.0996 -53.5c-1.40039 -0.799805 -2.80078 -1.40039 -4.5 -1.40039c-1.40039 0 -3.10059 0.300781 -4.5 1.10059c-2.80078 1.7002 -4.5 4.5 -4.5 7.7998v35.5996h-238.7
+c25.2998 -39.5996 40.5 -106.899 69.5996 -106.899h26.7002v26.7998c0 5 3.90039 8.90039 8.90039 8.90039h89.0996c5 0 8.90039 -3.90039 8.90039 -8.90039v-89.0996c0 -5 -3.90039 -8.90039 -8.90039 -8.90039h-89.0996c-5 0 -8.90039 3.90039 -8.90039 8.90039v26.6992
+h-26.7002c-75.3994 0 -81.0996 142.5 -124.7 142.5h-100.3c-8.09961 -30.5996 -35.8994 -53.5 -69 -53.5c-39.2998 0.100586 -71.2998 32.1006 -71.2998 71.4004s32 71.2998 71.2998 71.2998c33.1006 0 61 -22.7998 69 -53.5c39.1006 0 43.9004 -9.5 74.6006 60.4004
+c40.0996 89.0996 58.0996 82.0996 108.899 82.0996c7.5 20.9004 27 35.6006 50.4004 35.6006c29.5 0 53.5 -23.9004 53.5 -53.5c0 -29.6006 -23.9004 -53.5 -53.5 -53.5c-23.4004 0 -42.9004 14.7998 -50.4004 35.5996h-29.7998
+c-29.0996 0 -44.2998 -67.4004 -69.5996 -106.9h310.1v35.6006c0 3.2998 1.7002 6.09961 4.5 7.7998s6.40039 1.40039 8.90039 -0.299805l89.0996 -53.5c2.7998 -1.10059 4.5 -4.10059 4.5 -7.2002z" />
+    <glyph glyph-name="product-hunt" unicode="&#xf288;" horiz-adv-x="512" 
+d="M326.3 229.2c0 -20.5 -16.7002 -37.2002 -37.2002 -37.2002h-70.2998v74.4004h70.2998c20.5 0 37.2002 -16.7002 37.2002 -37.2002zM504 192c0 -137 -111 -248 -248 -248s-248 111 -248 248s111 248 248 248s248 -111 248 -248zM375.9 229.2
+c0 47.8994 -38.9004 86.7998 -86.8008 86.7998h-119.899v-248h49.5996v74.4004h70.2998c47.9004 0 86.8008 38.8994 86.8008 86.7998z" />
+    <glyph glyph-name="mixcloud" unicode="&#xf289;" horiz-adv-x="640" 
+d="M424.43 228.271c42.3623 -9.1377 74.4805 -47.0693 74.4805 -92.2002c0 -52.3311 -42.6406 -94.6934 -94.9688 -94.6934h-289.614c-62.5752 0 -113.243 50.668 -113.243 112.966c0 56.7598 42.085 103.554 96.6299 111.582
+c22.9814 67.5586 86.9395 114.074 159.205 114.074c87.2158 0 159.205 -66.7266 167.511 -151.729zM403.941 83.7412c29.0713 0 52.6064 23.5352 52.6064 52.3301c0 22.1494 -14.1211 40.9766 -33.502 48.4531c-1.38477 -8.58301 -3.59961 -17.166 -6.36914 -25.4727
+c-8.01367 -25.6484 -49.0898 -14.2266 -40.1465 13.29c4.15332 12.7373 6.36914 26.0264 6.36914 39.5938c0 69.2197 -56.4834 125.702 -125.979 125.702c-49.8379 0 -94.6934 -29.626 -114.628 -73.9258c19.3809 -4.98438 37.3779 -14.9512 52.0527 -29.3486
+c19.9531 -19.9531 -10.2168 -50.1436 -30.1797 -30.1807c-13.29 13.291 -31.0107 20.7666 -49.8379 20.7666c-39.04 0 -70.8809 -31.5645 -70.8809 -70.6045s31.8408 -70.6035 70.8809 -70.6035h289.614zM639.01 136.071c0 -44.0244 -12.7363 -86.3867 -37.1016 -122.657
+c-4.15332 -6.0918 -10.7979 -9.41406 -17.7197 -9.41406c-16.3174 0 -27.1279 18.8262 -17.4434 32.9492c19.3809 29.3486 29.9033 63.6816 29.9033 99.1221c0 35.4395 -10.5215 69.7725 -29.9033 98.8447c-15.6553 22.8311 19.3613 47.2402 35.1631 23.5342
+c24.3662 -35.9932 37.1016 -78.3564 37.1016 -122.379zM568.13 136.071c0 -31.5654 -9.13672 -62.0215 -26.8564 -88.3252c-4.15332 -6.09082 -10.7988 -9.13574 -17.7207 -9.13574c-17.2012 0 -27.0215 18.9785 -17.4424 32.9473
+c13.0127 19.1045 19.6572 41.2559 19.6572 64.5137c0 22.9805 -6.64453 45.4072 -19.6572 64.5117c-15.7617 22.9863 19.0078 47.0947 35.1631 23.5352c17.7188 -26.0264 26.8564 -56.4834 26.8564 -88.0469z" />
+    <glyph glyph-name="scribd" unicode="&#xf28a;" horiz-adv-x="384" 
+d="M42.2998 195.3c-16.0996 19 -24.7002 45.9004 -24.7998 79.9004c0 100.399 75.2002 153.1 167.2 153.1c98.5996 1.60059 156.8 -49 184.3 -70.5996l-50.5 -72.1006l-37.2998 24.6006l26.8994 38.5996c-36.5 24 -79.3994 36.5 -123 35.7998
+c-50.6992 0.800781 -111.699 -27.1992 -111.699 -76.1992c0 -18.7002 11.1992 -20.7002 28.5996 -15.6006c23.2998 5.2998 41.9004 -0.599609 55.7998 -14c26.4004 -24.2998 23.2002 -67.5996 -0.700195 -91.8994c-29.1992 -29.5 -85.1992 -27.3008 -114.8 8.39941z
+M360 189.4c33.9004 -40.4004 36.7998 -138.2 -20.2998 -189.601c-39.2002 -33.5996 -82.2002 -44.0996 -133.601 -44.0996c-70.2998 -0.299805 -138.199 25.3994 -190.699 72.2002l-15.4004 13.7998l60.7998 71.7998l35.6006 -27.4004l-33.7002 -39.3994
+c41.7002 -30.9004 92.2002 -47.5 144.1 -47.2998c61.9004 0 104.7 23.5 121.4 64.3994c0.899414 4.2002 1.39941 8.40039 1.39941 12.7002c0 18.7002 -11.1992 20.7002 -28.5996 15.5996c-23.2998 -5.2998 -42.2002 0.5 -56.2998 14.4004
+c-12.4004 11.2998 -19.1006 27.5 -18.4004 44.2998c-0.599609 39.2002 32.4004 69.2002 70.5 67.2002c24.2998 0.799805 47.7002 -9.7998 63.2002 -28.5996z" />
+    <glyph glyph-name="bluetooth" unicode="&#xf293;" 
+d="M292.6 276.9l-42.8994 -42.9004l-0.299805 86zM249.4 57.0996l0.199219 86l42.9004 -42.8994zM416 188.6c0 -205.6 -71.9004 -252.6 -185.1 -252.6c-113.2 0 -198.9 47 -198.9 252.6c0 205.601 83.4004 259.4 196.6 259.4c113.2 0 187.4 -53.9004 187.4 -259.4z
+M257.5 188.6l79.4004 88.6006l-125.101 134.3v-176.9l-73.7998 73.8008l-27 -26.9004l92.7002 -93l-92.7002 -93l26.9004 -26.9004l73.7998 73.8008l2.2998 -170l127.4 127.5z" />
+    <glyph glyph-name="bluetooth-b" unicode="&#xf294;" horiz-adv-x="320" 
+d="M196.48 187.977l97.9111 -103.333l-148.552 -148.644l-2.71484 198.284l-86.1113 -86.1113l-31.4053 31.4053l108.061 108.398l-108.061 108.399l31.4053 31.4053l86.1113 -86.1113v206.33l145.981 -156.69zM237.34 290.973l-50.3145 50.3174l0.337891 -100.295z
+M187.363 134.96l-0.337891 -100.294l50.3145 50.3164z" />
+    <glyph glyph-name="gitlab" unicode="&#xf296;" horiz-adv-x="512" 
+d="M105.2 423.1c0 0 56.5 -174.8 56.5996 -174.8h-132l56.5 174.8c3.2002 8.90039 15.7998 8.90039 18.9004 0zM0.900391 160.3l28.7998 88l226.2 -294l-247.9 184c-6.7998 5.10059 -9.7002 14 -7.09961 22zM161.7 248.3h188.6l-94.2998 -294zM511.1 160.3
+c2.5 -8 -0.299805 -16.8994 -7.19922 -22l-247.9 -184l226.3 294zM425.7 423.1l56.5 -174.8h-132l56.5996 174.8c3.2002 8.90039 15.7998 8.90039 18.9004 0z" />
+    <glyph glyph-name="wpbeginner" unicode="&#xf297;" horiz-adv-x="512" 
+d="M462.799 125.626c56.2109 -64.3076 4.16211 -157.626 -91.8545 -157.626c-39.6025 0 -78.8242 17.6865 -100.143 50.04c-6.88672 -0.356445 -22.7021 -0.356445 -29.5898 0c-21.3643 -32.4209 -60.624 -50.04 -100.143 -50.04
+c-95.4902 0 -148.349 92.9961 -91.8555 157.626c-79.1387 131.851 31.2646 290.374 206.792 290.374c175.632 0 285.87 -158.626 206.793 -290.374zM123.152 208.598h41.5283v58.0752h-41.5283v-58.0752zM340.332 122.526v23.8389
+c-60.5059 -20.915 -132.355 -9.19824 -187.589 33.9707l0.246094 -24.8965c51.1006 -46.3672 131.746 -57.875 187.343 -32.9131zM189.579 208.598h166.058v58.0752h-166.058v-58.0752z" />
+    <glyph glyph-name="wpforms" unicode="&#xf298;" 
+d="M448 372.8v-361.7c0 -24.2998 -19 -43.1992 -43.2002 -43.1992h-361.6c-23.9004 0.0996094 -43.2002 18.6992 -43.2002 43.2998v361.6c0 24.1006 18.7998 43.2002 43.2002 43.2002h361.7c24 0 43.0996 -18.7998 43.0996 -43.2002zM410.7 11.2002v361.6
+c0 3 -2.60059 5.7998 -5.7998 5.7998h-9.30078l-110.3 -74.5996l-61.2998 49.9004l-61.2002 -49.9004l-110.3 74.7002h-9.2998c-3.2002 0 -5.7998 -2.7998 -5.7998 -5.7998v-361.7c0 -3 2.59961 -5.7998 5.7998 -5.7998h361.7
+c3.19922 -0.100586 5.7998 2.69922 5.7998 5.7998zM150.2 262v-37h-73.5v37h73.5zM150.2 187.6v-37.2998h-73.5v37.2998h73.5zM161.3 334.9l54 43.6992h-118.5zM371.3 262v-37h-196v37h196zM371.3 187.6v-37.2998h-196v37.2998h196zM286.7 334.9l64.5 43.6992h-118.4z
+M371.3 113v-37.2998h-99.3994v37.2998h99.3994z" />
+    <glyph glyph-name="envira" unicode="&#xf299;" 
+d="M0 416c477.6 0 366.6 -317.3 367.1 -366.3l80.9004 -81.7002h-26l-70.4004 71.2002c-39 -4.2002 -124.399 -34.5 -214.399 37c-90.2002 71.5 -85.2002 157.1 -137.2 339.8zM79.7002 370c-49.7002 23.5 -5.2002 -9.2002 -5.2002 -9.2002
+c45.2002 -31.2002 66 -73.7002 90.2002 -119.899c31.5 -60.2002 79 -139.7 144.2 -167.7c65 -28 34.1992 -12.5 6 8.5c-28.2002 21.2002 -68.2002 87 -91 130.2c-31.7002 60 -61 118.6 -144.2 158.1z" />
+    <glyph glyph-name="glide" unicode="&#xf2a5;" 
+d="M252.8 299.4c0 -8.80078 -1.59961 -17.7002 -3.39941 -26.4004c-5.80078 -27.7998 -11.6006 -55.7998 -17.3008 -83.5996c-1.39941 -6.30078 -8.2998 -4.90039 -13.6992 -4.90039c-23.8008 0 -30.5 26 -30.5 45.5c0 29.2998 11.1992 68.0996 38.5 83.0996
+c4.2998 2.5 9.19922 4.2002 14.0996 4.2002c11.4004 0 12.2998 -8.2998 12.2998 -17.8994zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352c26.5 0 48 -21.5 48 -48zM384 181c0 5.09961 -20.7998 37.7002 -25.5 39.5
+c-2.2002 0.900391 -7.2002 2.2998 -9.59961 2.2998c-23.1006 0 -38.7002 -10.5 -58.2002 -21.5l-0.5 0.5c4.2998 29.4004 14.5996 57.2002 14.5996 87.4004c0 44.5996 -23.7998 62.7002 -67.5 62.7002c-71.7002 0 -108 -70.8008 -108 -123.5c0 -54.7002 32 -85 86.2998 -85
+c7.5 0 6.90039 0.599609 6.90039 -2.30078c-10.5 -80.2998 -56.5 -82.8994 -56.5 -58.8994c0 24.3994 28 36.5 28.2998 38c-0.200195 7.59961 -29.2998 17.2002 -36.7002 17.2002c-21.0996 0 -32.6992 -33 -32.6992 -50.6006c0 -32.2998 20.3994 -54.7002 53.2998 -54.7002
+c48.2002 0 83.3994 49.7002 94.2998 91.7002c9.40039 37.7002 7 39.4004 12.2998 42.1006c20 10.0996 35.7998 16.7998 58.4004 16.7998c11.0996 0 19 -2.2998 36.7002 -5.2002c1.7998 -0.0996094 4.09961 1.7002 4.09961 3.5z" />
+    <glyph glyph-name="glide-g" unicode="&#xf2a6;" 
+d="M407.1 236.8c7.5 -2.89941 40.9004 -55.3994 40.9004 -63.3994c0 -2.90039 -3.7998 -5.80078 -6.7002 -5.80078c-28.3994 4.7002 -41.0996 8.40039 -58.8994 8.40039c-36.3008 0 -61.6006 -10.7998 -93.8008 -27c-8.5 -4.2998 -4.59961 -7.09961 -19.6992 -67.5996
+c-17.4004 -67.6006 -74 -145.4 -151.4 -145.4c-52.7002 0 -85.5 36 -85.5 87.9004c0 28.0996 18.5 79.1992 52.4004 79.2998c11.8994 0 58.5996 -15.4004 58.8994 -27.6006c-0.5 -2.39941 -45.5 -21.7998 -45.5 -61c0 -38.5 73.9004 -34.2998 90.7998 94.6006
+c0 4.7998 1 3.7998 -11 3.7998c-87.2998 0 -138.6 48.7002 -138.6 136.6c0 84.7002 58.2998 198.4 173.4 198.4c70.1992 0 108.399 -29.0996 108.399 -100.6c0 -48.5 -16.5 -93.1006 -23.5 -140.4l0.900391 -0.900391c31.2998 17.7002 56.3994 34.5 93.5 34.5
+c3.7998 0 11.8994 -2.39941 15.3994 -3.7998zM231.8 321.2c2.90039 13.8994 5.5 28.0996 5.60059 42.3994c0 15.4004 -1.40039 28.7002 -20 28.7002c-7.80078 0 -15.6006 -2.59961 -22.6006 -6.7002c-43.7998 -24.0996 -61.7998 -86.3994 -61.7998 -133.399
+c0 -31.2998 10.7002 -73.1006 49 -73.1006c8.7002 0 19.7002 -2.39941 22 7.80078c9.2002 44.6992 18.5 89.5996 27.7998 134.3z" />
+    <glyph glyph-name="viadeo" unicode="&#xf2a9;" 
+d="M276.2 297.5v-0.700195c-17.9004 52.6006 -42.6006 103.4 -70.7998 151.2c43.2998 -29.2002 67 -100 70.7998 -150.5zM308.9 175.8c15.0996 3.10059 29.5 9 42.1992 17c24.5 -58.5996 20.2002 -139.7 -36.3994 -201c-67.7998 -73.8994 -191.9 -74.5996 -259.8 0
+c-108.801 117.8 -31.6006 313.7 129.899 313.7c21.2998 0 42.6006 -3.5 62.5 -10.7002c-6.89941 -13.3994 -11.7002 -28.2002 -13.3994 -43.2998c-15.4004 6.5 -32.3008 9.59961 -49.1006 9.59961c-78 0 -135.399 -66.6992 -135.399 -142.3
+c0 -68.7998 45.5996 -126 111.3 -137.399c98.5 38.3994 116.6 188.199 116.6 280c0 11.6992 0 23.6992 -1 35.3994c12.4004 -36.0996 18.9004 -73.8994 18.9004 -112c0 -86.5 -35.1006 -158.399 -109.3 -205.1l-3.80078 -0.299805
+c80 -1.60059 137.801 61.6992 137.801 139.399c0 19.5 -3.40039 38.7998 -11 57zM418.1 436.3c52 -74 20.9004 -208.6 -58.0996 -208.6c-21.2998 0 -40.2002 11.3994 -55 25.7998c35.0996 19.2998 79.4004 49.2002 99.7002 84.9004
+c2.39941 4.7998 6.5 13.6992 7.2002 19.1992c-19.9004 -44.6992 -70.8008 -79.6992 -118.2 -90.6992c-7.5 11.6992 -12 24.6992 -12 38.7998c0 16.5 8.2002 38.5 20.5996 50.5c34.5 32.8994 84.7998 13.5996 115.8 80.0996z" />
+    <glyph glyph-name="viadeo-square" unicode="&#xf2aa;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM280.7 66.7998c35.3994 38.2998 38.0996 89 22.7998 125.601c-7.90039 -4.90039 -16.9004 -8.60059 -26.4004 -10.5
+c4.80078 -11.4004 6.90039 -23.5 6.90039 -35.7002c0 -48.6006 -36.2002 -88.2002 -86.2002 -87.2002l2.40039 0.200195c46.3994 29.2002 68.2998 74.0996 68.2998 128.2c0 23.7998 -4.09961 47.5 -11.7998 70v0.399414c-2.2998 31.6006 -17.1006 75.7998 -44.2002 94.1006
+c17.5996 -29.9004 33 -61.6006 44.2002 -94.5c0.599609 -7.30078 0.599609 -14.8008 0.599609 -22.1006c0 -57.3994 -11.3994 -151 -72.8994 -175c-41 7.2002 -69.5 42.9004 -69.5 85.9004c0 47.2002 35.7998 88.8994 84.5996 88.8994c10.5 0 21 -1.89941 30.7002 -6
+c1.09961 9.5 4.09961 18.7002 8.39941 27.1006c-12.5 4.59961 -25.7998 6.7002 -39.0996 6.7002c-101 0 -149.2 -122.5 -81.2002 -196.101c42.4004 -46.5996 120 -46.2002 162.4 0zM309 214.3c49.4004 0 68.7998 84.1006 36.2998 130.3
+c-19.3994 -41.5 -50.7998 -29.5 -72.3994 -50c-7.7002 -7.5 -12.9004 -21.2998 -12.9004 -31.5996c0 -8.7998 2.7998 -17 7.5 -24.2998c29.7002 6.89941 61.4004 28.7998 73.9004 56.7002c-0.400391 -3.40039 -3 -9 -4.5 -12c-12.7002 -22.3008 -40.4004 -41 -62.3008 -53
+c9.30078 -9 21.1006 -16.1006 34.4004 -16.1006z" />
+    <glyph glyph-name="snapchat" unicode="&#xf2ab;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM417.5 101.1c2.2002 5.30078 -0.900391 9.80078 -4.90039 10.8008c-46.2998 7.59961 -67.0996 55.0996 -68 57.0996
+c-0.0996094 0.0996094 -0.0996094 0.200195 -0.199219 0.299805c-2.40039 5 -3 9.2002 -1.60059 12.5c2.60059 6.2998 12.5 9.40039 19 11.5c1.7998 0.600586 3.5 1.10059 4.90039 1.7002c11.5 4.5 17.2998 10.0996 17.2002 16.5996
+c-0.100586 5.10059 -4.10059 9.60059 -10.4004 11.9004c-4 1.59961 -9.59961 1.90039 -13.5996 0c-5.5 -2.59961 -10.4004 -4 -14.7002 -4.2002c-2.7998 0.100586 -4.60059 0.799805 -5.7002 1.40039c1.40039 24 4.7002 58 -3.7998 77.0996
+c-16.2998 36.5 -49.6006 54.2998 -84.2998 54.2998c-0.600586 0 -6.10059 -0.0996094 -6.7002 -0.0996094c-14 0 -61.6006 -4 -84.1006 -54.2998c-8.5 -19.1006 -5.19922 -53.2002 -3.7998 -77.1006c-1.09961 -0.599609 -3.2998 -1.39941 -6.59961 -1.39941
+c-4.5 0 -9.7998 1.39941 -15.7002 4.2002c-7.5 3.5 -20.2998 -1.80078 -21.9004 -10.3008c-1 -4.89941 1.2002 -12.0996 17 -18.2998c6.10059 -2.5 20.6006 -5.2998 24 -13.2002c1.40039 -3.2998 0.900391 -7.5 -1.59961 -12.5
+c-0.0996094 -0.0996094 -0.200195 -0.199219 -0.200195 -0.299805c-0.899414 -2 -21.7002 -49.5 -68 -57.0996c-3.59961 -0.600586 -6.09961 -3.7998 -5.89941 -7.40039c0.699219 -13.8994 31.6992 -19.2998 45.5 -21.3994c1.39941 -1.90039 2.5 -9.90039 4.2998 -16
+c0.799805 -2.7002 2.89941 -6 8.2998 -6s13.2998 3.09961 25.7998 3.09961c17.6006 0 23.6006 -4 37.4004 -13.7002c9.89941 -7 27.5 -19.7998 48.5 -18.2002c20.7998 -0.899414 34.7002 7.90039 49.2002 18.2002c13.6992 9.7002 19.7998 13.7002 37.3994 13.7002
+c13 0 19.6006 -2.90039 25.7998 -2.90039h0.200195c4.40039 0 7 2.2002 8.10059 5.90039c1.7998 6.09961 2.89941 14 4.2998 15.9004c26.7002 4.19922 41.2998 10.0996 44.7998 18.1992z" />
+    <glyph glyph-name="snapchat-ghost" unicode="&#xf2ac;" horiz-adv-x="512" 
+d="M510.846 55.3271c-5.21094 -12.1572 -27.2383 -21.0889 -67.3594 -27.3184c-2.06445 -2.78613 -3.77539 -14.6855 -6.50781 -23.9561c-1.625 -5.56543 -5.62207 -8.86914 -12.1279 -8.86914l-0.296875 0.00585938c-9.39453 0 -19.2031 4.32227 -38.8516 4.32227
+c-26.5215 0 -35.6621 -6.04297 -56.2539 -20.5879c-21.832 -15.4375 -42.7715 -28.7637 -74.0273 -27.3984c-31.6455 -2.33398 -58.0244 16.9072 -72.8711 27.4033c-20.7139 14.6436 -29.8281 20.582 -56.2412 20.582c-18.8633 0 -30.7354 -4.71973 -38.8516 -4.71973
+c-8.07324 0 -11.2129 4.92188 -12.4219 9.04004c-2.70312 9.18848 -4.4043 21.2627 -6.52344 24.1299c-20.6787 3.20898 -67.3096 11.3438 -68.498 32.1504c-0.00878906 0.161133 -0.015625 0.422852 -0.015625 0.583984c0 4.97559 3.98438 9.67285 8.89258 10.4844
+c69.583 11.4551 100.925 82.9014 102.228 85.9346c0.0742188 0.175781 0.155273 0.34375 0.237305 0.514648c3.71289 7.53711 4.54395 13.8486 2.46289 18.7529c-5.05078 11.8965 -26.8721 16.1641 -36.0537 19.7959c-23.7148 9.36621 -27.0146 20.1279 -25.6113 27.5039
+c2.43652 12.8359 21.7246 20.7354 33.002 15.4531c8.91895 -4.18066 16.8428 -6.29688 23.5469 -6.29688c5.02148 0 8.21191 1.2041 9.95996 2.1709c-2.04297 35.9365 -7.10156 87.29 5.68652 115.969c33.7734 75.7188 105.356 81.6025 126.478 81.6025
+c0.943359 0 9.14062 0.0888672 10.1094 0.0888672c52.1484 0 102.255 -26.7803 126.724 -81.6426c12.7764 -28.6504 7.74902 -79.792 5.69434 -116.01c1.58203 -0.87207 4.35742 -1.94141 8.59961 -2.13867c6.39648 0.286133 13.8145 2.38867 22.0693 6.25684
+c6.08496 2.84668 14.4053 2.46094 20.4795 -0.0576172l0.0292969 -0.00976562c9.47559 -3.38574 15.4385 -10.2158 15.5889 -17.8701c0.183594 -9.74707 -8.52246 -18.165 -25.8779 -25.0186c-2.11816 -0.834961 -4.69434 -1.6543 -7.43457 -2.52441
+c-9.79688 -3.10645 -24.5996 -7.80566 -28.6152 -17.2715c-2.0791 -4.9043 -1.25684 -11.2109 2.45996 -18.748c0.0869141 -0.167969 0.166016 -0.341797 0.238281 -0.514648c1.30176 -3.03027 32.6152 -74.46 102.23 -85.9346
+c6.42676 -1.05762 11.1631 -7.87695 7.72461 -15.8584z" />
+    <glyph glyph-name="snapchat-square" unicode="&#xf2ad;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM393.5 101.1c2.2002 5.30078 -0.900391 9.80078 -4.90039 10.8008c-46.2998 7.59961 -67.0996 55.0996 -68 57.0996
+c-0.0996094 0.0996094 -0.0996094 0.200195 -0.199219 0.299805c-2.40039 5 -3 9.2002 -1.60059 12.5c2.60059 6.2998 12.5 9.40039 19 11.5c1.7998 0.600586 3.5 1.10059 4.90039 1.7002c11.5 4.5 17.2998 10.0996 17.2002 16.5996
+c-0.100586 5.10059 -4.10059 9.60059 -10.4004 11.9004c-4 1.59961 -9.59961 1.90039 -13.5996 0c-5.5 -2.59961 -10.4004 -4 -14.7002 -4.2002c-2.7998 0.100586 -4.60059 0.799805 -5.7002 1.40039c1.40039 24 4.7002 58 -3.7998 77.0996
+c-16.2998 36.5 -49.6006 54.2998 -84.2998 54.2998c-0.600586 0 -6.10059 -0.0996094 -6.7002 -0.0996094c-14 0 -61.6006 -4 -84.1006 -54.2998c-8.5 -19.1006 -5.19922 -53.2002 -3.7998 -77.1006c-1.09961 -0.599609 -3.2998 -1.39941 -6.59961 -1.39941
+c-4.5 0 -9.7998 1.39941 -15.7002 4.2002c-7.5 3.5 -20.2998 -1.80078 -21.9004 -10.3008c-1 -4.89941 1.2002 -12.0996 17 -18.2998c6.10059 -2.5 20.6006 -5.2998 24 -13.2002c1.40039 -3.2998 0.900391 -7.5 -1.59961 -12.5
+c-0.0996094 -0.0996094 -0.200195 -0.199219 -0.200195 -0.299805c-0.899414 -2 -21.7002 -49.5 -68 -57.0996c-3.59961 -0.600586 -6.09961 -3.7998 -5.89941 -7.40039c0.699219 -13.8994 31.6992 -19.2998 45.5 -21.3994c1.39941 -1.90039 2.5 -9.90039 4.2998 -16
+c0.799805 -2.7002 2.89941 -6 8.2998 -6s13.2998 3.09961 25.7998 3.09961c17.6006 0 23.6006 -4 37.4004 -13.7002c9.89941 -7 27.5 -19.7998 48.5 -18.2002c20.7998 -0.899414 34.7002 7.90039 49.2002 18.2002c13.6992 9.7002 19.7998 13.7002 37.3994 13.7002
+c13 0 19.6006 -2.90039 25.7998 -2.90039h0.200195c4.40039 0 7 2.2002 8.10059 5.90039c1.7998 6.09961 2.89941 14 4.2998 15.9004c26.7002 4.19922 41.2998 10.0996 44.7998 18.1992z" />
+    <glyph glyph-name="pied-piper" unicode="&#xf2ae;" horiz-adv-x="480" 
+d="M455.93 424.8c9.41992 2.40039 15.0703 -10.25 6.99023 -15.6797c-98.2295 -65.9199 -120.439 -127.561 -126.229 -160.18c-33.5205 -188.881 -101.37 -119.32 -184.311 -226.65c22.4619 -12.916 61.7197 -23.3984 87.6299 -23.4004
+c97.6504 0 177.09 79.4502 177.09 177.11c-0.00390625 37.1318 -20.0967 89.7314 -44.8496 117.41c3.90332 8.05176 11.5186 20.3271 17 27.3994c32.4297 -33.3115 58.75 -98.0781 58.75 -144.569v-0.240234c0 -114.87 -93.1299 -208 -208 -208s-208 93.1201 -208 208
+s93.1299 208 208 208c29.9082 -0.000976562 75.3125 -11.9443 101.35 -26.6602c46.4404 38.9697 87.8809 60.6602 114.58 67.46zM125 41.5996c64.7695 140.881 125.64 231.641 191.63 293.75c-19.9951 9.79883 -54.2959 17.75 -76.5635 17.75h-0.0664062
+c-97.6504 0 -177.1 -79.4395 -177.1 -177.1c0.0195312 -45.0049 27.8408 -105.216 62.0996 -134.4z" />
+    <glyph glyph-name="first-order" unicode="&#xf2b0;" 
+d="M12.9004 218.8c0.0996094 0.100586 0.199219 0.299805 0.299805 0.400391c0 -0.100586 0 -0.299805 -0.100586 -0.400391h-0.199219zM224 351.4c7.40039 0 14.5996 -0.5 21.7002 -1.7002l-4 -67.7002l22.2998 64.2998c14.2998 -3.7998 27.7002 -9.5 40 -16.8994
+l-29.4004 -61.1006l45.1006 50.9004c11.5 -8.90039 21.7002 -19.2002 30.5996 -30.9004l-50.5996 -45.3994l60.8994 29.6992c7.5 -12.2998 12.9004 -26 16.6006 -40.2998l-64 -22.2998l67.7002 4c1.09961 -7.09961 1.39941 -14.5996 1.39941 -22
+s-0.299805 -14.5996 -1.39941 -21.7002l-67.4004 4l64 -22.2998c-3.7002 -14.5996 -9.5 -28 -16.5996 -40.2998l-61.1006 29.3994l50.6006 -45.0996c-8.60059 -11.7998 -18.9004 -22 -30.6006 -30.9004l-44.8994 50.9004l29.3994 -61.2998
+c-12.2998 -7.5 -25.7002 -12.9004 -40 -16.9004l-22.5996 65.1006l4 -68.6006c-7.10059 -1.09961 -14.2998 -1.7002 -21.7002 -1.7002c-7.09961 0 -14.5996 0.600586 -21.7002 1.7002l4 68l-22.2998 -64.5996c-14.2998 3.7998 -27.7002 9.5 -40 16.8994l29.5 61.4004
+l-44.9004 -50.9004c-11.7998 8.60059 -22 19.2002 -30.8994 30.9004l50.8994 45.0996l-61.0996 -29.6992c-7.2002 12.5996 -12.9004 26 -16.5996 40.2998l64 22.5996l-67.7002 -4c-0.799805 7.10059 -1.40039 14.2998 -1.40039 21.7002s0.5 14.9004 1.40039 22l68 -4
+l-64.2998 22.5996c3.69922 14.3008 9.5 27.7002 16.5996 40l61.0996 -29.6992l-50.5996 45.3994c8.90039 11.7998 19.2002 22 30.5996 30.9004l45.1006 -50.9004l-29.4004 61.4004c12.2998 7.2002 25.7002 12.8994 40 16.5996l22 -64l-3.7002 67.4004
+c6.80078 1.09961 14.3008 1.7002 21.4004 1.7002zM443.4 320v-256l-219.4 -128l-219.4 128v256l219.4 128zM426.3 309.7l-202.3 117.399l-202.3 -117.399v-235.101l202.3 -117.699l202.3 117.699v235.101zM224 410.9l187.7 -109.4v-218.9l-187.7 -109.5l-187.7 109.5
+v218.801zM224 360c-92.2998 0 -166.9 -75.0996 -166.9 -168c0 -92.5996 74.6006 -167.7 166.9 -167.7c92 0 166.9 75.1006 166.9 167.7c0 92.9004 -74.9004 168 -166.9 168z" />
+    <glyph glyph-name="yoast" unicode="&#xf2b1;" 
+d="M91.2998 372h186l-7 -18.9004h-179c-39.7002 0 -71.8994 -31.5996 -71.8994 -70.2998v-205.399c0 -35.4004 24.8994 -70.3008 84 -70.3008v-19.0996h-12.1006c-50.0996 0 -91.2998 40.2002 -91.2998 89.5v205.3c0 49.2998 40.7002 89.2002 91.2998 89.2002zM320.4 428
+h66.5c-143.801 -378.1 -145.7 -398.9 -184.7 -439.3c-20.7998 -21.6006 -49.2998 -31.7002 -78.2998 -32.7002v51.0996c49.1992 7.7002 64.5996 49.9004 64.5996 75.3008c0 20.0996 0.599609 12.5996 -82.0996 223.199h61.3994l50.4004 -156.6zM448 286.5v-298.5h-214
+c6.59961 9.59961 10.7002 16.2998 12.0996 19.4004h182.5v279.1c0 32.5 -17.0996 51.9004 -48.1992 62.9004l6.69922 17.5996c41.7002 -13.5996 60.9004 -43.0996 60.9004 -80.5z" />
+    <glyph glyph-name="themeisle" unicode="&#xf2b2;" horiz-adv-x="512" 
+d="M208 359.714c0 10 6.28613 21.7139 17.7148 21.7139c11.1426 0 17.7139 -11.7139 17.7139 -21.7139c0 -10.2852 -6.57129 -21.7139 -17.7139 -21.7139c-11.4287 0 -17.7148 11.4287 -17.7148 21.7139zM512 199.714c0 -36.001 -11.4287 -102.286 -36.2861 -129.714
+c-22.8574 -24.8584 -87.4277 -61.1426 -120.856 -70.5723l-1.14355 -0.286133v-32.5703c0 -16.2861 -12.5723 -30.5713 -29.1426 -30.5713c-10 0 -19.4297 5.71387 -24.5723 14.2861c-5.42676 -8.57227 -14.8564 -14.2861 -24.8564 -14.2861
+s-19.4287 5.71387 -24.8574 14.2861c-5.14258 -8.57227 -14.5713 -14.2861 -24.5703 -14.2861c-10.2861 0 -19.4287 5.71387 -24.8574 14.2861c-5.14355 -8.57227 -14.5713 -14.2861 -24.5713 -14.2861c-18.8574 0 -29.4287 15.7139 -29.4287 32.8574
+c-16.2861 -12.2852 -35.7158 -19.4287 -56.5713 -19.4287c-22 0 -43.4287 8.28516 -60.2861 22.8574c10.2852 0.286133 20.5713 2.28613 30.2852 5.71387c-20.8574 5.71387 -39.4277 18.8574 -52 36.2861c21.3701 -4.64551 46.209 -1.67285 67.1426 11.1426
+c-22 22 -56.5703 58.8574 -68.5713 87.4287c-5.71387 13.4287 -6.85645 31.4287 -6.85645 45.7139c0 49.7139 20.2861 160 86.2861 160c10.5713 0 18.8564 -4.8584 23.1426 -14.8574c3.0498 4.46289 8.42578 11.374 12 15.4277c2 2.57227 5.71387 5.42969 7.14355 8.28613
+c7.99902 12.5713 11.7139 21.1426 21.7139 34c32.2852 41.1445 81.7139 69.4297 134.856 69.4297c6 0 12 -0.285156 17.7148 -1.14355c10.8564 11.7148 26 18.2861 41.7148 18.2861c14.5703 0 29.7139 -6 40 -16.2861c0.856445 -0.857422 1.42773 -2.28613 1.42773 -3.42773
+c0 -3.71387 -10.2852 -13.4287 -12.8574 -16.2861c4.28613 -1.42871 15.7148 -6.8584 15.7148 -12c0 -2.85742 -2.85742 -5.14258 -4.57129 -7.14258c31.4287 -27.7148 49.4287 -67.1436 56.2861 -108c4.28613 5.14258 10.2852 8.57129 17.1426 8.57129
+c10.5713 0 20.8574 -7.14355 28.5713 -14.001c20.8564 -18.5703 25.7139 -53.1416 25.7139 -79.7139zM188 358.572c0 -18.2861 12.5713 -37.1436 32.2861 -37.1436c19.7139 0 32.2852 18.8574 32.2852 37.1436c0 18 -12.5713 36.8564 -32.2852 36.8564
+c-19.7148 0 -32.2861 -18.8574 -32.2861 -36.8564zM237.714 254c0 19.7139 3.71387 39.1426 8.57129 58.2861c-52.0391 -79.5342 -13.5312 -184.571 68.8574 -184.571c21.4287 0 42.5713 7.71387 60 20c2 7.42871 3.71484 14.8574 3.71484 22.5723
+c0 14.2861 -6.28613 21.4277 -20.5723 21.4277c-4.57129 0 -9.14355 -0.856445 -13.4287 -1.71387c-63.3438 -12.668 -107.143 -3.66895 -107.143 63.999zM196.572 -0.858398c0 11.1436 -8.8584 20.8574 -20.2861 20.8574c-11.4287 0 -20 -9.71484 -20 -20.8574v-32.5703
+c0 -11.1436 8.57129 -21.1426 20 -21.1426c11.4277 0 20.2861 9.71484 20.2861 21.1426v32.5703zM245.715 -0.858398c0 11.1436 -8.57227 20.8574 -20 20.8574c-11.4287 0 -20.2861 -9.71484 -20.2861 -20.8574v-32.5703c0 -11.1436 8.85742 -21.1426 20.2861 -21.1426
+c11.4277 0 20 10 20 21.1426v32.5703zM295.428 -0.858398c0 11.1436 -8.85645 20.8574 -20.2852 20.8574s-20.2852 -9.71484 -20.2852 -20.8574v-32.5703c0 -11.1436 8.85645 -21.1426 20.2852 -21.1426s20.2852 9.71484 20.2852 21.1426v32.5703zM345.143 -0.858398
+c0 11.1436 -8.85645 20.8574 -20.2852 20.8574s-20.2861 -9.71484 -20.2861 -20.8574v-32.5703c0 -11.1436 8.85742 -21.1426 20.2861 -21.1426s20.2852 10 20.2852 21.1426v32.5703zM421.714 162c-30.8564 -59.1416 -90.2852 -102.572 -158.571 -102.572
+c-96.5703 0 -160.57 84.5723 -160.57 176.572c0 16.8574 2 33.4287 6 49.7139c-20 -33.7148 -29.7139 -72.5723 -29.7139 -111.429c0 -60.2861 24.8564 -121.715 71.4287 -160.857c5.14258 9.71387 14.8564 16.2861 26 16.2861c10 0 19.4277 -5.71387 24.5713 -14.2861
+c5.42871 8.57129 14.5703 14.2861 24.8574 14.2861c10 0 19.4277 -5.71387 24.5713 -14.2861c5.42871 8.57129 14.8564 14.2861 24.8574 14.2861c10 0 19.4287 -5.71387 24.8574 -14.2861c5.14258 8.57129 14.5713 14.2861 24.5723 14.2861
+c10.8564 0 20.8564 -6.57227 25.7139 -16c43.4268 36.2861 68.5693 92 71.4258 148.286zM432.286 261.714c0 53.7139 -34.5713 105.714 -92.5723 105.714c-30.2852 0 -58.5713 -15.1426 -78.8564 -36.8564c-19.9951 -66.3828 -27.4473 -136.571 41.4287 -136.571
+c28.8047 0 97.3564 28.5381 84.2861 -36.8574c28.8564 26 45.7139 65.7148 45.7139 104.571z" />
+    <glyph glyph-name="google-plus" unicode="&#xf2b3;" horiz-adv-x="496" 
+d="M248 440c136.9 0 248 -111.1 248 -248s-111.1 -248 -248 -248s-248 111.1 -248 248s111.1 248 248 248zM177.3 68c71.2998 0 118.8 50.4004 118.8 121.2c0 7.09961 -0.599609 13.8994 -1.89941 20.7002h-116.9v-42.6006h70.1006
+c-5.2002 -34.2002 -37.5 -53.2998 -70.1006 -53.2998c-43 0 -77.2002 35.5 -77.2002 78.0996c0 42.6006 34.3008 78.1006 77.2002 78.1006c18.1006 0 36.2002 -6.2002 49.4004 -19.1006l33.5996 32.6006c-22.8994 21.2998 -51.7002 32.2998 -83 32.2998
+c-68.7998 0 -124 -55.5 -124 -124s55.2002 -124 124 -124zM407.5 174.2h35.2002v35.5h-35.2002v35.5h-35.5v-35.5h-35.5v-35.5h35.5v-35.5h35.5v35.5z" />
+    <glyph glyph-name="font-awesome" unicode="&#xf2b4;" 
+d="M397.8 416c27.5 0 50.2002 -22.7002 50.2002 -50.2002v-347.6c0 -27.5 -22.7002 -50.2002 -50.2002 -50.2002h-347.6c-27.5 0 -50.2002 22.7002 -50.2002 50.2002v347.6c0 27.5 22.7002 50.2002 50.2002 50.2002h347.6zM352.4 131.7h0.0996094v140.3
+c0 4.2002 -4.2002 7.7998 -9 7.7998c-6 0 -31.0996 -16.0996 -53.7998 -16.0996c-4.7002 0 -8.90039 0.599609 -13.1006 2.39941c-20.2998 7.7002 -38.1992 13.7002 -60.8994 13.7002c-20.9004 0 -43 -6.5 -61.5 -14.2998
+c-1.7998 -1.2002 -3.60059 -1.7998 -5.40039 -2.40039v18.5c8.2998 6 13.1006 15.5 13.1006 26.3008c0 18.5996 -15 33.5 -33.5 33.5c-18.6006 0 -33.5 -15 -33.5 -33.5c0 -10.8008 5.2998 -20.3008 13.0996 -26.3008v-218.6c0 -11.2998 9 -20.2998 20.2998 -20.2998
+c8.90039 0 16.7002 5.89941 19.1006 14.2998v1.2002c0.599609 1.2002 0.599609 3 0.599609 4.7998v45.4004c1.2002 0.599609 2.40039 0.599609 3.59961 1.19922c19.7002 8.90039 44.2002 17.3008 67.5 17.3008c32.3008 0 44.8008 -16.7002 71.7002 -16.7002
+c19.2002 0 37.1006 6.5 53.7998 13.7002c4.2002 1.7998 7.80078 3.59961 7.80078 7.7998z" />
+    <glyph glyph-name="linode" unicode="&#xf2b8;" 
+d="M437.4 221.7c0.599609 -2 -8.80078 -66.2998 -9.7002 -72.7998c0 -0.900391 -0.5 -1.7002 -1.10059 -2l-54.5996 -43.7002c-1.09961 -0.900391 -2.59961 -0.900391 -3.7002 0l-20.2998 14l-2.2998 -33.4004c0 -0.899414 -0.200195 -1.7002 -1.10059 -2.2998
+l-66.8994 -53.4004c-1.10059 -0.899414 -2.90039 -0.899414 -4 0l-28 23.7002l2 -46c0 -0.899414 -0.200195 -1.7002 -1.10059 -2.2998l-83.6992 -66.9004c-0.600586 -0.299805 -1.10059 -0.599609 -1.7002 -0.599609c-0.900391 0.299805 -1.7002 0.299805 -2.2998 0.900391
+l-65.1006 69.0996c-1.5 1.40039 -15.5 72 -16.8994 79.0996c-0.300781 1.10059 0.5 2.5 1.39941 3.10059l17.4004 10.5996c-3.40039 3.2002 -26.5 23.4004 -27.1006 26.2998l-20.5996 100.301c-0.299805 1.09961 0.299805 2.5 1.7002 3.39941l26.8994 12.9004
+c-4.59961 3.5 -37.6992 27.5 -38.5996 30.8994l-27.4004 133.101c-0.299805 1.7002 0.600586 3.09961 2 3.7002l123.7 38.5996c0.600586 0 1.40039 0 2.2998 -0.299805l90.6006 -43.7002c0.799805 -0.599609 1.7002 -1.7002 1.7002 -2.59961l5.69922 -132.301
+c0 -1.19922 -0.599609 -2.2998 -1.69922 -2.89941l-33.7002 -17.4004l36 -24.2998c0.799805 -0.299805 1.39941 -1.40039 1.39941 -2.2998l1.40039 -35.1006l34.5996 21.2002c0.800781 0.600586 2.2002 0.600586 3.10059 0l24 -16l0.899414 31.4004
+c0 0.899414 0.5 2 1.40039 2.59961l58.9004 36c1.09961 0.600586 2.19922 0.600586 3.09961 0l70 -38.5996c0.5 -0.600586 1.09961 -1.10059 1.40039 -2zM232.6 216.9l-100.6 -57.2002l14 -96.6006l90.5996 61.2002zM224.9 396.9l-120.9 -46.6006l19.7002 -134.8
+l106.6 55.4004zM44 274.9l73.0996 -57.2002l-19.3994 132.899l-79.7002 49.4004zM74.5996 127.1l64.8008 -60.7998l-13.7002 93.4004l-70 58.2998zM98.9004 9.40039l57.6992 -61.2002l-9.69922 67.3994l-61.7002 60.9004zM163.4 -55.0996l78.1992 62.2998l-3.09961 70
+l-85.7002 -61.4004zM245.4 60l27.0996 -22.9004l-0.599609 68.3008l-29.4004 22.5996c0 -2.2998 1.2002 -6.2998 -1.09961 -8l-22.3008 -14.9004l24.3008 -20c2.89941 -2.19922 2 -21.6992 2 -25.0996zM339.7 85.4004l4.2002 66.8994l-65.7002 -46.8994l0.599609 -68.6006z
+M367.4 111.1l5.7998 66.6006l-64.6006 40.5996l-0.599609 -30l41.2002 -27.2002c0.799805 -0.599609 1.39941 -1.69922 1.09961 -2.59961l-2 -34zM422 150.9l8.5 63.3994l-51.0996 -36.5996l-5.7002 -65.1006z" />
+    <glyph glyph-name="quora" unicode="&#xf2c4;" 
+d="M440.5 61.2998c1.7998 -18 -7.2002 -93.2998 -89 -93.2998c-49.5 0 -75.5 28.7002 -95.2002 62.2998c-117.7 -32.5996 -249 54.9004 -249 189c0 117 98 196.7 197.7 196.7c101.8 0 198.5 -79.2002 198.4 -196.7c0 -65.5 -30.5 -118.8 -74.7002 -153
+c14.2002 -21.5996 29 -35.7998 49.5 -35.7998c22.5 0 31.5 17.2998 33 30.7998h29.2998zM297 118.8c11.2998 24.9004 16.7998 58.7002 16.7002 100.5c0 104.2 -32.5 157.7 -108.7 157.7c-75 0 -107.5 -53.5 -107.5 -157.9c0 -103.699 32.5 -156.699 107.5 -156.699
+c12 0 22.7002 1.19922 32.7002 4.19922c-15.5 30.5 -33.7002 61.3008 -69.2002 61.3008c-6.7998 0 -13.5996 -1 -19.7998 -4l-12.2002 24.2998c14.7002 12.7998 38.5 22.7998 69 22.7998c47.7998 0 72 -23 91.5 -52.2002z" />
+    <glyph glyph-name="free-code-camp" unicode="&#xf2c5;" horiz-adv-x="576" 
+d="M97.2197 351.79c-43.2197 -41.6201 -64.9697 -92.5898 -64.8193 -154.021c0.15918 -68 23.0293 -122.67 67.4795 -165c9.33984 -8.34961 13.2002 -14.9199 13.2002 -20.5498c0 -2.75 -1.90039 -5.62012 -3.81055 -8.37988
+c-1.92676 -1.89453 -5.67676 -3.61426 -8.36914 -3.83984c-10.2803 0 -24.6807 12.1396 -43.4707 35.79c-36.5898 44.8701 -53.1992 94.3398 -54.0596 161.87s20.3096 113.34 61.79 160.6c14.9199 16.9004 27.3594 25.6904 35.8398 25.6904
+c2.56152 -0.0585938 6.32031 -1.33105 8.38965 -2.83984c1.91016 -1.91016 3.83008 -4.66016 3.83008 -7.41992c0 -4.78027 -5.63965 -11.25 -16 -21.9004zM239.47 27.9297c0.580078 -0.370117 0.910156 -0.549805 0.910156 -0.549805zM333.26 27.3799l0.169922 0.129883
+c-0.189453 -0.129883 -0.259766 -0.179688 -0.169922 -0.129883zM336.39 185.56c16.2305 -4.14941 24.04 24.04 30.0303 30.0508c84.71 -110.101 -27.5098 -184.45 -33 -188.101c3.86035 3.04004 44.3301 49.7705 21.5801 76.5498
+c-1 1.03027 -67.2998 -20.0596 -54.8398 53.54c8.30957 48.6807 -7.60059 71.1309 -7.60059 71.1309c-17.9697 -37.29 -32.5 -53.8604 -43.5 -72.1602c-56.9492 -92.9404 -16.2793 -124.29 -9.5498 -128.641c-10.54 6.5 -108.27 70.8799 -34 175.23
+c78.3701 110.189 62.8301 159.57 62.8301 159.57c118.46 -94.2803 51.8105 -173.021 68.0498 -177.171zM510.88 358.31c41.4404 -47.3096 62.6699 -93.1592 61.75 -160.649s-17.4697 -117.021 -54.0596 -161.87c-18.79 -23.6602 -33.1904 -35.79 -43.4707 -35.79
+c-2.69238 0.231445 -6.44141 1.95605 -8.36914 3.84961c-1.91016 2.76074 -3.81055 5.63086 -3.81055 8.38086c0.0205078 5.62988 3.86035 12.1992 13.2002 20.5498c44.4795 42.3701 67.3203 97 67.4795 165c0.180664 61.4697 -21.5898 112.45 -64.8193 154.06
+c-10.4004 10.6406 -16 17.1201 -16 21.9004c0 2.75977 1.91992 5.50977 3.83008 7.41992c2.06934 1.50977 5.82812 2.78125 8.38965 2.83984c8.51953 0 21 -8.79004 35.8799 -25.6904z" />
+    <glyph glyph-name="telegram" unicode="&#xf2c6;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM369.8 270.1c3.60059 16.8008 -6.09961 23.5 -17.2002 19.5l-239.1 -92.1992c-16.4004 -6.40039 -16.0996 -15.5 -2.7998 -19.7002l61.2002 -19.1006l142 89.4004
+c6.59961 4.40039 12.6992 1.90039 7.69922 -2.5l-114.899 -103.8l-4.40039 -63.1006c6.40039 0 9.2002 2.80078 12.5 6.10059l29.9004 28.7998l62 -45.7002c11.2998 -6.39941 19.3994 -3.09961 22.3994 10.5z" />
+    <glyph glyph-name="bandcamp" unicode="&#xf2d5;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM296.2 113.9l84.7002 156.1h-181l-84.7002 -156.1h181z" />
+    <glyph glyph-name="grav" unicode="&#xf2d6;" horiz-adv-x="512" 
+d="M301.1 236c4.40039 -4.40039 4.40039 -11.9004 0 -16.2998l-9.69922 -9.7002c-4.40039 -4.7002 -11.9004 -4.7002 -16.6006 0l-10.5 10.5c-4.39941 4.7002 -4.39941 11.9004 0 16.5996l9.7002 9.7002c4.40039 4.40039 11.9004 4.40039 16.5996 0zM270.9 255.7
+c-2.7002 -2.7998 -7.40039 -2.7998 -10.5 0c-2.80078 3 -2.80078 7.7002 0 10.5c3 3 7.69922 3 10.5 0c3 -2.7002 3 -7.5 0 -10.5zM244.9 250.4c2.7998 3 7.5 3 10.5 0c2.7998 -2.7002 2.7998 -7.40039 0 -10.2002c-3 -3 -7.7002 -3 -10.5 0c-3 2.7002 -3 7.39941 0 10.2002
+zM317.4 263.7c-19.9004 14.3994 -33.8008 43.2002 -11.9004 68.0996c21.5996 24.9004 40.7002 17.2002 59.7998 -0.799805c11.9004 -11.2998 29.2998 -24.9004 17.2002 -48.2002c-12.5 -23.5 -45.0996 -33.2002 -65.0996 -19.0996zM365.1 308.2
+c-8.89941 10 -23.2998 -6.90039 -15.5 -16.1006c7.40039 -9 32.1006 -2.39941 15.5 16.1006zM504 192c0 -137 -111 -248 -248 -248s-248 111 -248 248s111 248 248 248s248 -111 248 -248zM437.8 149.4c2.5 16.0996 -20.2002 16.5996 -25.2002 25.6992
+c-13.5996 24.1006 -27.6992 36.8008 -54.5 30.4004c11.6006 8 23.5 6.09961 23.5 6.09961c0.300781 6.40039 0 13 -9.39941 24.9004c3.89941 12.5 0.299805 22.4004 0.299805 22.4004c15.5 8.59961 26.7998 24.3994 29.0996 43.1992
+c3.60059 31 -18.7998 59.2002 -49.7998 62.8008c-22.0996 2.5 -43.7002 -7.7002 -54.2998 -25.7002c-23.2002 -40.1006 1.40039 -70.9004 22.4004 -81.4004c-14.4004 1.40039 -34.3008 11.9004 -40.1006 34.2998c-6.59961 25.7002 2.7998 49.8008 8.90039 61.4004
+c0 0 -4.40039 5.7998 -8 8.90039c0 0 -13.7998 0 -24.6006 -5.30078c11.9004 15.2002 25.2002 14.4004 25.2002 14.4004c0 6.40039 -0.599609 14.9004 -3.59961 21.5996c-5.40039 11 -23.7998 12.9004 -31.7002 -2.7998c0.0996094 0.200195 0.299805 0.400391 0.400391 0.5
+c-5 -11.8994 -1.10059 -55.8994 16.8994 -87.2002c-2.5 -1.39941 -9.09961 -6.09961 -13 -10c-21.5996 -9.69922 -56.2002 -60.2998 -56.2002 -60.2998c-28.1992 -10.7998 -77.1992 -50.8994 -70.5996 -79.7002c0.299805 -3 1.40039 -5.5 3 -7.5
+c-2.7998 -2.19922 -5.5 -5 -8.2998 -8.2998c-11.9004 -13.7998 -5.2998 -35.2002 17.7002 -24.3994c15.7998 7.19922 29.5996 20.1992 36.2998 30.3994c0 0 -5.5 5 -16.2998 4.40039c27.6992 6.59961 34.2998 9.39941 46.1992 9.09961c8 -3.89941 8 34.2998 8 34.2998
+c0 14.7002 -2.19922 31 -11.0996 41.5c12.5 -12.1992 29.0996 -32.6992 28 -60.5996c-0.799805 -18.2998 -15.2002 -23 -15.2002 -23c-9.09961 -16.5996 -43.2002 -65.9004 -30.3994 -106c0 0 -9.7002 14.9004 -10.2002 22.0996
+c-17.4004 -19.3994 -46.5 -52.2998 -24.6006 -64.5c26.6006 -14.6992 108.801 88.6006 126.2 142.301c34.6006 20.7998 55.4004 47.2998 63.9004 65c22 -43.5 95.2998 -94.5 101.1 -59z" />
+    <glyph glyph-name="etsy" unicode="&#xf2d7;" horiz-adv-x="384" 
+d="M384 100c-1.75 -10.75 -13.75 -110 -15.5 -132c-117.879 4.29883 -219.895 4.74316 -368.5 0v25.5c45.457 8.94824 60.627 8.01855 61 35.25c1.79297 72.3223 3.52441 244.143 0 322c-1.0293 28.46 -12.1299 26.7646 -61 36v25.5
+c73.8857 -2.3584 255.933 -8.55078 362.999 3.75c-3.5 -38.25 -7.75 -126.5 -7.75 -126.5h-23.249c-11.0527 42.835 -18.7588 90.5 -54.75 90.5h-137c-10.25 0 -10.75 -3.5 -10.75 -9.75v-163.75c58 -0.5 88.5 2.5 88.5 2.5c29.7695 0.951172 27.5596 8.50195 40.75 65.251
+h25.75c-4.40723 -101.351 -3.91016 -61.8291 -1.75 -160.25h-25.75c-9.15527 40.0859 -9.06543 61.0449 -39.501 61.5c0 0 -21.5 2 -88 2v-139c0 -26 14.25 -38.25 44.25 -38.25h89.251c63.6357 0 66.5645 24.9961 98.751 99.75h22.249v-0.000976562z" />
+    <glyph glyph-name="imdb" unicode="&#xf2d8;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM21.2998 218.8h-0.299805c0.0996094 0.100586 0.200195 0.299805 0.299805 0.400391v-0.400391zM97 128.2v127.8h-33v-127.8h33z
+M210.2 128.2v127.8h-43l-7.60059 -59.9004c-2.69922 20 -5.39941 40.1006 -8.69922 59.9004h-42.8008v-127.8h29v84.5l12.2002 -84.5h20.6006l11.5996 86.3994v-86.3994h28.7002zM221.6 128.2c86.1006 -0.100586 75 -6 75 82.5c0 8.09961 0.300781 16.7998 -1.39941 24.3994
+c-4.2998 22.5 -31.4004 20.9004 -49 20.9004h-24.6006v-127.8zM382.5 157.4v36c0 17.2998 -0.799805 30.0996 -22.2002 30.0996c-8.89941 0 -14.8994 -2.7002 -20.8994 -9.2002v41.7002h-31.7002v-127.8h29.7998l1.90039 8.09961
+c5.69922 -6.7998 11.8994 -9.7998 20.8994 -9.7998c19.7998 0 22.2002 15.2002 22.2002 30.9004zM265 218.1v-49.2998c0 -9.7002 1.90039 -18.7002 -10.2998 -18.3994v83.6992c11.8994 0 10.2998 -6.2998 10.2998 -16zM350.5 192v-32.7002
+c0 -5.39941 1.59961 -14.3994 -6.2002 -14.3994c-1.59961 0 -3 0.799805 -3.7998 2.39941c-2.2002 5.10059 -1.09961 44.1006 -1.09961 44.7002c0 3.7998 -1.10059 12.7002 4.89941 12.7002c7.2998 0 6.2002 -7.2998 6.2002 -12.7002z" />
+    <glyph glyph-name="ravelry" unicode="&#xf2d9;" horiz-adv-x="512" 
+d="M407.4 386.5c72.6992 -37.9004 112 -117.2 103.3 -199.5c-1.7002 -16.7002 -4.40039 -36.2002 -9.7998 -52.2002c-22.2002 -65.7002 -52.9004 -108.6 -123.101 -147.7c-6.39941 -4.39941 -13.2998 -8.59961 -20.2002 -10.7998
+c-12.5 -4.39941 -26.0996 -5.39941 -40.0996 -3.89941c-5.90039 -0.5 -11.7998 -0.700195 -18 -0.700195c-93.7002 0 -173 64 -196.9 151.399c-0.699219 0 -1.5 0.200195 -2.19922 0.200195c-5.60059 -44.2998 27.0996 -104.1 27.0996 -104.1s2 -3 13.2998 -20.2002
+c-62.7998 33.2002 -64.5 131.2 -64.5 131.2c-15 5.59961 -67.2002 23.3994 -76.2998 37.8994c0 0 40.9004 -22.3994 76.2002 -27c-0.200195 0.300781 0.5 7.90039 0.5 7.90039c2.2002 30 12.5 53.4004 23.0996 71.4004c6.90039 33.7998 22.1006 64.2998 43.2998 89.8994
+c3.7002 15.2998 9.60059 33.5 19.9004 52.7002c4.40039 8.40039 8.59961 13.7998 19.9004 19c74.8994 35 148.699 43.9004 224.5 4.5zM138.8 284.8c-7.59961 -11.2998 -13.7002 -23.5996 -18.8994 -36.3994c8.09961 8.59961 14.7998 14.1992 18.1992 16.6992
+c-0.5 7.40039 0.700195 19.7002 0.700195 19.7002zM107.6 162.9c0.700195 -9.60059 2 -18.9004 4.2002 -28.1006l41.4004 -6.89941c-14.1006 42.0996 -15.7998 90.0996 -15.7998 90.0996c-16.5 -16 -25.4004 -37.9004 -29.8008 -55.0996zM115.5 120.1
+c21.4004 -69.6992 81 -122.8 154.1 -134.399c-1 0.299805 -1.69922 0.5 -2.69922 1c0 0 -81 47.5 -108.301 124.3c-9.09961 1.5 -28.2998 5.90039 -43.0996 9.09961zM386 3.90039c63 32 106.6 98 106.8 174c0 107.399 -86.5996 194.5 -193 194.5
+c-49.2998 0 -94.0996 -18.7002 -128.3 -49.5c-5.2002 -10.1006 -8.59961 -22.9004 -11.0996 -39.4004c52.5 44.5996 146 33.5 146 33.5c23.3994 -1 20.5996 -21.7002 20.3994 -28.0996c-85.2002 7.19922 -127 -17.2002 -168.399 -52.4004
+c0 0 8.09961 -78.7998 26.7998 -110.8c107.8 -4.90039 189.8 53.7002 189.8 53.7002c10.2998 7.39941 19.4004 8.09961 21.4004 -4.7002c1.5 -10.4004 2.19922 -24.4004 -9.60059 -29.7998c-36 -16.8008 -75.5996 -27.3008 -115 -33
+c-25.5996 -3.7002 -39.7998 -4.60059 -78 -3.90039c36.4004 -84.7002 127.5 -107.8 127.5 -107.8c28.5 -4.7002 50.2002 -1 64.7002 3.7002z" />
+    <glyph glyph-name="sellcast" unicode="&#xf2da;" 
+d="M353.4 416c52.0996 0 94.6992 -42.5996 94.6992 -94.5996v-258.801c0 -52 -42.5996 -94.5996 -94.6992 -94.5996h-258.7c-52.1006 0 -94.7002 42.5996 -94.7002 94.7002v258.7c0 52 42.5996 94.5996 94.7002 94.5996h258.7zM303.4 99.5996
+c27.8994 48.2002 11.1992 110.5 -37.2002 138.5c-18.6006 10.8008 0.0996094 -0.0996094 -18.5 10.7002c-25 14.4004 -46.2002 -23.2998 -21.6006 -37.5c18 -10.2002 0.800781 -0.399414 18.6006 -10.5996c27.5996 -16 37.2002 -51.7998 21.2998 -79.4004
+c-16 -27.5996 -51.7998 -37.2002 -79.4004 -21.2998c-18.5996 10.7998 0.100586 -0.0996094 -18.5 10.7002c-10.2998 6 -23.5996 2.39941 -29.5 -7.90039l-15.6992 -27.2002c-12.6006 -21.7998 19.3994 -53 42.2998 -13.1992c48.2998 -27.7002 110.3 -11 138.2 37.1992z
+M325.2 308.4c14.2998 24.7998 -23.4004 46.3994 -37.7002 21.5l-4.7998 -8.40039c-48.2998 27.7002 -110.3 11 -138.2 -37.2002c-27.7998 -48.2998 -11.0996 -110.6 37.0996 -138.399c18.6006 -10.8008 -0.0996094 0.0996094 18.5 -10.7002
+c25 -14.4004 46.2002 23.2998 21.6006 37.5c-0.100586 0 -18.6006 10.5996 -18.6006 10.5996c-27.5996 16 -37.2998 51.7998 -21.2998 79.4004c16 27.5996 51.7998 37.2002 79.4004 21.2998c18.5996 -10.7998 -0.100586 0.0996094 18.5 -10.7002
+c10.2002 -5.09961 20 -2.89941 26.5 3.60059c2.7002 2.69922 2 2 19 31.5z" />
+    <glyph glyph-name="superpowers" unicode="&#xf2dd;" 
+d="M448 416l-87.2002 -87c39.7002 -38.7002 61.2002 -92.7002 57.7002 -148.2c-5.40039 -93 -76.9004 -167.3 -168.7 -179.8c-83.2998 -11 -166.5 -22 -249.8 -33l86.7998 86.7998c-39.7998 38.7002 -61.0996 92.7002 -57.7998 148.2c5.7002 93.2998 77 167.5 169 180
+c83.2002 11 166.7 22 250 33zM368.3 183.7c4.40039 80 -56.7998 146.3 -136.1 151c-78.7002 4.7998 -148.5 -55.2998 -153 -134.5c-4.40039 -80 56.7998 -146.3 136.3 -151c78.7998 -4.7002 148.6 55 152.8 134.5z" />
+    <glyph glyph-name="wpexplorer" unicode="&#xf2de;" horiz-adv-x="512" 
+d="M512 192c0 -141.2 -114.7 -256 -256 -256c-141.2 0 -256 114.7 -256 256s114.7 256 256 256s256 -114.7 256 -256zM480 192c0 123.2 -100.3 224 -224 224c-123.5 0 -224 -100.5 -224 -224s100.5 -224 224 -224s224 100.5 224 224zM160.9 323.4l86.8994 -37.1006
+l-37.0996 -86.8994l-86.9004 37.0996zM270.9 154.3l46.5996 -94h-14.5996l-50 100l-48.9004 -100h-14l51.0996 106.9l-22.2998 9.39941l6 14l68.6006 -29.0996l-6 -14.2998zM259.1 270.6l68.6006 -29.3994l-29.4004 -68.2998l-68.2998 29.0996zM339.4 227.7
+l54.5996 -23.1006l-23.4004 -54.2998l-54.2998 23.1006z" />
+    <glyph glyph-name="meetup" unicode="&#xf2e0;" horiz-adv-x="512" 
+d="M99 33.7002c1.09961 -5.7002 -2.2998 -11.1006 -8 -12.2998c-5.40039 -1.10059 -10.9004 2.2998 -12 8c-1.09961 5.39941 2.2998 11.0996 7.7002 12.2998c5.39941 1.2002 11.0996 -2.2998 12.2998 -8zM242.1 -37.7002c6.60059 4.60059 15.5 2.7998 19.7002 -3.7002
+c4.60059 -6.59961 2.90039 -15.3994 -3.39941 -20c-6.60059 -4.59961 -15.4004 -2.89941 -20 3.7002c-4.30078 6.60059 -2.60059 15.4004 3.69922 20zM156.1 424.6c-6.2998 -1.5 -12.5 2.5 -13.8994 9.10059c-1.2002 6.2998 2.7998 12.5996 9.09961 14
+c6.2998 1.5 12.6006 -2.5 13.7002 -9.10059c1.40039 -6.2998 -2.59961 -12.5996 -8.90039 -14zM34.4004 221.7c10 -7.10059 12.5996 -20.7998 5.69922 -31.2002c-6.89941 -10.2998 -20.5996 -12.7998 -30.5996 -5.7002c-10 6.90039 -12.5996 20.9004 -5.7002 30.9004
+c6.90039 10.2998 20.6006 12.8994 30.6006 6zM306.4 392.6c-10.3008 -6.2998 -23.7002 -2.89941 -29.7002 7.40039c-6.2998 10.5996 -2.90039 24.2998 7.39941 30.5996c10.3008 6.30078 23.7002 2.90039 30 -7.69922c6 -10.3008 2.90039 -24 -7.69922 -30.3008zM115.3 334.6
+c-7.5 -5.19922 -18 -3.5 -23.0996 4.30078c-5.10059 7.69922 -3.40039 18.2998 4.2998 23.6992c7.40039 5.10059 18 3.40039 23.0996 -4.2998c5.10059 -7.7002 3.40039 -18.2998 -4.2998 -23.7002zM487.6 178.6c7.40039 1.40039 14.8008 -3.5 16.3008 -10.8994
+c1.69922 -7.7002 -3.2002 -15.2002 -10.6006 -16.6006c-7.39941 -1.69922 -14.8994 3.2002 -16.2998 10.6006c-1.7002 7.7998 3.2002 15.2002 10.5996 16.8994zM527.3 235.4c1.40039 -5.7002 -2.2998 -11.1006 -7.7002 -12.6006
+c-5.69922 -1.09961 -11.1992 2.60059 -12.2998 8c-1.09961 5.7002 2.2998 11.5 8 12.6006c5.40039 1.09961 10.9004 -2.30078 12 -8zM447 309.1c8.2998 6 20 3.80078 25.7002 -4.89941c5.7002 -8.60059 3.7002 -20.2998 -4.60059 -26.2998
+c-8.59961 -5.7002 -20.2998 -3.7002 -26 4.89941c-5.69922 8.60059 -3.69922 20.2998 4.90039 26.2998zM440.7 169.7c26.2998 -43.1006 15.0996 -100 -26.2998 -129.101c-17.4004 -12.2998 -37.1006 -17.6992 -56.9004 -17.0996
+c-12 -47.0996 -69.4004 -64.5996 -105.1 -32.5996c-1.10059 -0.900391 -2.60059 -1.7002 -3.7002 -2.90039c-39.1006 -27.0996 -92.2998 -17.4004 -119.4 22.2998c-9.7002 14.2998 -14.5996 30.6006 -15.0996 46.9004c-65.4004 10.8994 -90 94 -41.1006 139.7
+c-28.2998 46.8994 0.600586 107.399 53.4004 114.899c25.0996 66.2002 107.6 97.6006 163.6 54.2002c67.4004 22.2998 136.301 -29.4004 130.9 -101.1c41.0996 -12.6006 52.7998 -66.9004 19.7002 -95.2002zM370.7 95.4004
+c-3.10059 20.5996 -40.9004 4.59961 -43.1006 27.0996c-3.09961 32 43.7002 101.1 40 128c-3.39941 24 -19.3994 29.0996 -33.3994 29.4004c-13.4004 0.299805 -16.9004 -2 -21.4004 -4.60059c-2.89941 -1.7002 -6.59961 -4.89941 -11.7002 0.299805
+c-6.2998 6 -11.0996 11.7002 -19.3994 12.9004c-12.2998 2 -17.7002 -2 -26.6006 -9.7002c-3.39941 -2.89941 -12 -12.8994 -20 -9.09961c-3.39941 1.7002 -15.3994 7.7002 -24 11.3994c-16.2998 7.10059 -40 -4.59961 -48.5996 -20
+c-12.9004 -22.8994 -38 -113.1 -41.7002 -125.1c-8.59961 -26.5996 10.9004 -48.5996 36.9004 -47.0996c11.0996 0.599609 18.2998 4.59961 25.3994 17.3994c4 7.40039 41.7002 107.7 44.6006 112.601c2 3.39941 8.89941 8 14.5996 5.09961
+c5.7002 -3.09961 6.90039 -9.40039 6 -15.0996c-1.09961 -9.7002 -28 -70.9004 -28.8994 -77.7002c-3.40039 -22.9004 26.8994 -26.6006 38.5996 -4c3.7002 7.09961 45.7002 92.5996 49.4004 98.2998c4.2998 6.2998 7.39941 8.2998 11.6992 8
+c3.10059 0 8.30078 -0.900391 7.10059 -10.9004c-1.40039 -9.39941 -35.1006 -72.2998 -38.9004 -87.6992c-4.59961 -20.6006 6.60059 -41.4004 24.9004 -50.6006c11.3994 -5.7002 62.5 -15.7002 58.5 11.1006zM376.4 3.09961c10.5996 7.5 24.8994 4.60059 32.2998 -6
+c7.09961 -10.5996 4.59961 -25.1992 -6 -32.5996c-10.6006 -7.09961 -24.9004 -4.59961 -32 6c-7.2002 10.5996 -4.60059 25.2002 5.7002 32.5996z" />
+    <glyph glyph-name="font-awesome-alt" unicode="&#xf35c;" 
+d="M339.3 276.8c5.40039 0 9.5 -3 7.7002 -7.09961v-134.4c0 -4.2002 -3 -6 -7.2002 -7.7998c-15.5996 -7.09961 -33.5 -13.7002 -52 -13.7002c-26.2998 0 -38.2002 16.1006 -69.2998 16.1006c-22.7002 0 -46 -8.30078 -65.7002 -16.7002
+c-0.599609 -0.600586 -1.7998 -1.2002 -3 -1.2002v-44.2002c0 -1.7998 0 -3 -0.599609 -4.7998v-1.2998c-2.40039 -7.7002 -9.5 -13.7002 -18.5 -13.7002c-10.7002 0 -19.7002 8.90039 -19.7002 19.7002v212.1c-7.7002 6 -12.5 15.5 -12.5 25.7002
+c0 18 14.2998 32.2998 32.2998 32.2998s32.2998 -14.3994 32.2998 -32.2998c0 -10.7998 -4.69922 -19.7002 -12.5 -25.7002v-17.8994c1.2002 0.599609 3 1.19922 4.80078 1.7998c17.8994 7.09961 39.3994 13.7002 59.6992 13.7002
+c22.1006 0 39.4004 -5.90039 59.1006 -13.7002c4.09961 -1.7998 8.2998 -2.40039 12.5 -2.40039c22.7002 0 46.5996 15.5 52.5996 15.5zM397.8 416c27.5 0 50.2002 -22.7002 50.2002 -50.2002v-347.6c0 -27.5 -22.7002 -50.2002 -50.2002 -50.2002h-347.6
+c-27.5 0 -50.2002 22.7002 -50.2002 50.2002v347.6c0 27.5 22.7002 50.2002 50.2002 50.2002h347.6zM412.1 18.2998v347.601c0 7.69922 -6.5 14.2998 -14.2998 14.2998v-0.100586h-347.6c-7.7002 0 -14.2998 -6.5 -14.2998 -14.2998v-347.5
+c0 -7.7002 6.5 -14.2998 14.2998 -14.2998h347.6c7.7002 0 14.2998 6.5 14.2998 14.2998z" />
+    <glyph glyph-name="accessible-icon" unicode="&#xf368;" 
+d="M423.9 192.2l-12.9004 -157.3c-3.2998 -40.7002 -63.9004 -35.1006 -60.5996 4.89941l10 122.5l-41.1006 -2.2998c10.1006 -20.7002 15.7998 -43.9004 15.7998 -68.5c0 -41.2002 -16.0996 -78.7002 -42.2998 -106.5l-39.2998 39.2998
+c57.9004 63.7002 13.0996 167.2 -74 167.2c-25.9004 0 -49.5 -9.90039 -67.2002 -26l-39.2998 39.2998c22 20.7002 50.0996 35.1006 81.4004 40.2002l75.2998 85.7002l-42.6006 24.7998l-51.5996 -46c-30 -26.7998 -70.5996 18.5 -40.5 45.4004l68 60.6992
+c9.7998 8.80078 24.0996 10.2002 35.5 3.60059c0 0 139.3 -80.9004 139.5 -81.1006c16.2002 -10.0996 20.7002 -36 6.09961 -52.5996l-58.3994 -66.5l106.1 5.90039c18.5 1.09961 33.6006 -14.4004 32.1006 -32.7002zM359 346.2
+c-28.0996 0 -50.9004 22.7998 -50.9004 50.8994c0 28.1006 22.8008 50.9004 50.9004 50.9004s50.9004 -22.7998 50.9004 -50.9004c0 -28.0996 -22.8008 -50.8994 -50.9004 -50.8994zM179.6 -8.5c20.8008 0 40.1006 6.40039 56.1006 17.2998l39.7002 -39.7002
+c-100.7 -78.8994 -251.4 -8.19922 -251.4 122.5c0 36.1006 12.4004 69.4004 33.2002 95.7002l39.7002 -39.7002c-44.7002 -65.5 2.09961 -156.1 82.6992 -156.1z" />
+    <glyph glyph-name="accusoft" unicode="&#xf369;" horiz-adv-x="640" 
+d="M322.1 196c-1.69922 -1.59961 -89.5996 -82.5 -90.1992 -83.2998l-92.6006 -33.7998c-4.7998 -2 -7.59961 -3.7002 -7 -8.90039c0.200195 -1.5 0.600586 -22.5996 1 -27.7002c-0.700195 -0.5 -0.0996094 0 -0.599609 -0.599609c0 0 -113.7 -36.6006 -114.5 -36.6006
+c-14.1006 -5.09961 -22.7002 -8.2998 -15.7002 1.7002c1.2998 1.7998 234.4 231.601 243.4 240.9c13 13.5 25 15.0996 25 15.0996l51.1992 -65.7998v-1zM482.2 75.9004c-5.7002 6.89941 -232.2 297.1 -239.9 306.6c-13.7002 17.2002 0 16.7998 19.2002 16.9004
+c9.7002 0.0996094 106.3 0.599609 116.5 0.599609c24.0996 0.0996094 28.7002 -0.599609 38.4004 -12.7998c2.09961 -2.7002 205.1 -245.8 207.199 -248.3c5.5 -6.7002 15.2002 -19.1006 7.2002 -23.4004c-2.39941 -1.2998 -114.6 -47.7002 -117.8 -48.9004
+c-10.0996 -4 -17.5 -6.7998 -30.7998 9.30078zM634.9 74.2998c6 -1.39941 7.09961 -4.2002 1.69922 -8.2002c-2 -1.39941 -123.699 -76.5996 -125.8 -77.7998c-15.0996 -8.7998 -38 -1.59961 -53.5996 1.7002c-7.10059 1.5 -305.3 68.2998 -308 69.0996
+c-2.60059 0.900391 -4.40039 1 -4.60059 3.5c-0.299805 4 6 5.60059 11.1006 7.60059c5 1.89941 145.3 52.5996 150.2 54.7002c4.7998 2.09961 11.2998 2.69922 14.3994 2.89941c4.90039 0.299805 59.9004 -8.39941 65.2998 -9.2998l57.1006 -74
+c9.7998 -11.4004 20.7002 -21.9004 36.7002 -14.5996c2.5 1.19922 117.5 51.5996 117.5 51.5996c13.3994 -2.5 35.6992 -6.90039 38 -7.2002z" />
+    <glyph glyph-name="adversal" unicode="&#xf36a;" horiz-adv-x="512" 
+d="M482.1 416c24.5 0 29.9004 -5.59961 29.9004 -30.2002v-388.1c0 -24.5 -5.5 -29.7002 -29.9004 -29.7002h-453.399c-22.9004 0 -28.7002 5.59961 -28.7002 28.9004v390.199c0 23 5.7998 28.9004 28.7002 28.9004h453.399zM178.4 227.7
+c9.39941 -7.2002 12.3994 -17.1006 11.2998 -27.2998c-1.7998 -19.1006 -75.7998 -11.4004 -114 -30.9004c-27.2002 -13.9004 -42.7002 -41.7002 -39.6006 -71c6.7002 -64.7002 89.6006 -79.7002 147 -43.2998c4.60059 3.2002 8.30078 4.89941 11.9004 1
+c2.09961 -2.60059 2 -4 3.90039 -6.2002c7.2998 -9.59961 38.1992 -14.0996 46.5996 -7.40039c3.09961 2.80078 4.59961 6.30078 2.7002 10.7002c-13.6006 30.5 -6.60059 63 -9.2998 88.7998c0 69.3008 6.39941 111.7 -34.5 128.5
+c-41.9004 17.4004 -84.2002 16.6006 -125.301 -4.7998c-16.2998 -9 -53.6992 -52.8994 -24.8994 -64.2998c5.2998 -2.2998 12.7998 -4 22.5 -5.5c8.2002 -1.2002 13.2002 -2.7998 17.5 8.2998c12.0996 32.1006 56.7002 43.6006 84.2002 23.4004zM465.1 5.7002
+c0 14.2998 -9.7998 9.89941 -16.5996 9.89941c-132.3 0.400391 -264.5 0.400391 -396.8 0c-6.60059 0 -16.7002 4.80078 -17.1006 -9.09961c-0.399414 -15.5 10.4004 -10.7002 17.8008 -10.7002h394.899c6.7002 0 17.7998 -5.2002 17.7998 9.90039zM468.9 346.2
+c0 0.200195 0 0.299805 0.0996094 0.5c0 9.89941 -3.5 15.0996 -13.5996 14.2998c-3.10059 -0.400391 -6.60059 0 -9.7002 0c-26.1006 0 -26 0 -26 -26.2002v-71c-79.2002 45.6006 -124.3 -6.59961 -136.101 -30.5c-16.3994 -32.8994 -21.7998 -66.5996 -15.6992 -100
+c16.2998 -92.2998 91 -114.899 144.399 -85.2002c4.60059 2.80078 6.60059 7.5 12.4004 -1.19922c8.59961 -12.7002 23.7002 -5.2002 36.0996 -5.60059c7.40039 0 8.10059 8.2002 8.10059 13.9004v291zM417.4 113.9c-19.5 -47.6006 -72.9004 -43.3008 -90 -5.2002
+c-15.1006 33.2998 -15.5 68.2002 0.399414 101.5c16.2998 34.0996 59.7002 35.7002 81.5 4.7998c20.6006 -28.7998 14.9004 -84.5996 8.10059 -101.1zM122.6 78.5996c-7.5 1.30078 -33 3.30078 -33.6992 27.8008c-0.400391 13.8994 7.7998 23 19.7998 25.7998
+c24.3994 5.89941 49.2998 9.89941 73.7002 14.7002c8.89941 2 7.39941 -4.40039 7.7998 -9.5c1.39941 -33 -26.1006 -59.2002 -67.6006 -58.8008z" />
+    <glyph glyph-name="affiliatetheme" unicode="&#xf36b;" horiz-adv-x="512" 
+d="M159.7 210.6c-51.2998 -70.8994 -116.601 -110.8 -145.7 -89.1992c-29.2002 21.6992 -11.2002 96.5996 40.2002 167.5c51.2998 70.8994 116.6 110.8 145.7 89.1992c29.0996 -21.5996 11.0996 -96.5996 -40.2002 -167.5zM510.9 267.9
+c0.699219 -8.2002 1.09961 -16.5 1 -25c0 -151.801 -121.601 -274.9 -271.601 -274.9c-82.8994 0 -157.2 37.5996 -207 96.9004c71.2998 19.3994 130.5 68.3994 164.101 133.199c7.69922 -32.5996 24 -58.5996 49 -73.7998c72.5996 -44.0996 190.699 20.2002 264.5 143.601z
+" />
+    <glyph glyph-name="algolia" unicode="&#xf36c;" 
+d="M229.3 265.4c49.2002 0 89.2002 -39.9004 89.2002 -89.2002s-39.9004 -89.2002 -89.2002 -89.2002s-89.2002 39.9004 -89.2002 89.2002s39.9004 89.2002 89.2002 89.2002zM292 208.8c1.2998 0.700195 1.7998 2.40039 1.09961 3.7002
+c-12.1992 21.4004 -34.8994 36.0996 -61.0996 37.0996c-1.40039 0.100586 -2.7002 -1.09961 -2.7002 -2.59961v-66.5c0 -1.90039 2 -3.2002 3.7998 -2.2998zM389.1 416c32.5 0 58.9004 -26.4004 58.8008 -58.9004v-330.199c0 -32.5 -26.3008 -58.9004 -58.9004 -58.9004
+h-330.1c-32.5 0 -58.9004 26.4004 -58.9004 59v330.1c0 32.5 26.4004 58.9004 58.9004 58.9004h330.199zM186.5 331.3h0.0996094v-15.7998c0 -1.7002 1.7002 -3 3.40039 -2.5c12.7002 3.7002 25.9004 5.5 39.4004 5.5c13 0 25.7998 -1.7002 38.0996 -5.09961
+c1.59961 -0.5 3.2998 0.699219 3.2998 2.5v15.3994c0 10.7998 -8.7002 19.5 -19.5 19.5h-45.2998c-10.7998 0 -19.5 -8.7002 -19.5 -19.5zM102.1 294.3c-7.59961 -7.59961 -7.59961 -19.8994 0 -27.3994l7.7002 -7.7002c1.10059 -1.2002 3 -1 4 0.299805
+c4.40039 6.09961 9.40039 12 14.7998 17.4004c5.5 5.5 11.4004 10.3994 17.6006 14.8994c1.2998 1 1.39941 2.90039 0.299805 4l-7.7002 7.7002c-7.59961 7.59961 -19.8994 7.59961 -27.5 0zM229.3 49.5c69.9004 0 126.601 56.7998 126.601 126.6
+c0 70 -56.6006 126.601 -126.601 126.601c-69.8994 0 -126.6 -56.7002 -126.6 -126.601c0 -69.8994 56.5996 -126.6 126.6 -126.6z" />
+    <glyph glyph-name="amilia" unicode="&#xf36d;" 
+d="M240.1 416c134.101 0 191.9 -55.7002 192 -136v-296.6c0 -3 -1 -8.10059 -5.09961 -9.10059c-4 -1 -57.2998 -0.700195 -66.5 -0.700195s-56.7998 1 -59.9004 2c-4 0.900391 -6.09961 6.10059 -6.09961 9.10059v25.3994
+c-39.5996 -21.3994 -105.5 -42.0996 -153.3 -42.0996c-109.7 0 -124.9 85.7002 -124.9 104s-5.09961 95.5 30.4004 111.8c31.5 13.2002 156.3 36.5 243.7 47.7998v38.5c0 44.7002 -1 73.1006 -58.9004 73.1006c-55.7998 0 -119.8 -25.4004 -152.3 -47.7002
+c-6.10059 -4.09961 -16.2002 -4.09961 -20.2998 6.09961c-5.10059 12.2002 -9.10059 34.5 -10.2002 39.6006c-1.90039 10.2002 2.09961 16.2998 7.2002 19.3994c52.6992 38.5 122.3 55.4004 184.199 55.4004zM290.3 68v106.7c-44.7002 -4.10059 -95.5 -20.2998 -119.8 -33.5
+c-21.2998 -10.2002 -18.2998 -40.7002 -18.2998 -52.9004c0.0996094 -11.2002 6.2002 -44.7002 59 -44.7002c30.3994 0 57.7002 11.2002 79.0996 24.4004z" />
+    <glyph glyph-name="angrycreative" unicode="&#xf36e;" horiz-adv-x="640" 
+d="M640 209.8l-3.2002 -28.2002l-34.5 -2.2998l-2 -18.0996l34.5 2.2998l-3.2002 -28.2002l-34.3994 -2.2002l-2.2998 -20.0996l34.3994 2.2002l-3 -26.1006l-64.7002 -4.09961l12.7002 113.2l-47.2998 -115.4l-31.9004 -2l-23.7998 117.8l30.2998 2l13.6006 -79.3994
+l31.7002 82.3994zM426.8 76.5l12.7998 120l28.4004 1.90039l-12.9004 -120.101zM162 59.9004l-19.4004 36l-3.5 -37.4004l-28.1992 -1.7002l2.69922 29.1006c-11 -18 -32 -34.3008 -56.8994 -35.8008c-32.7998 -2 -59.7002 20.9004 -56.4004 58.2002
+c2.60059 29.2998 26.7002 62.7998 67.5 65.4004c37.7002 2.39941 47.6006 -23.2002 51.2998 -28.7998l2.80078 30.7998l38.8994 2.5c20.1006 1.2998 38.7002 -3.7002 42.5 -23.7002l2.60059 26.5996l64.7998 4.2002l-2.7002 -27.8994l-36.4004 -2.40039l-1.69922 -17.9004
+l36.3994 2.30078l-2.7002 -27.9004l-36.3994 -2.2998l-1.90039 -19.9004l36.2998 2.2998l-2.09961 -20.7998l55 117.2l23.7998 1.59961l32.1006 -110.6l8.89941 85.5996l-22.2998 -1.39941l2.90039 27.8994l75 4.90039l-3 -28l-24.3008 -1.59961l-9.69922 -91.9004
+l-58 -3.7002l-4.30078 15.6006l-39.3994 -2.5l-8 -16.3008zM117.7 130.1l-26.4004 -1.69922c-6.7002 12.3994 -14.3994 16.5996 -26.2998 15.7998c-19 -1.2002 -33.2998 -17.5 -34.5996 -33.2998c-1.40039 -16 7.2998 -32.5 28.6992 -31.2002
+c12.8008 0.799805 21.3008 8.59961 28.9004 18.8994l27 1.7002zM173.8 137.8c1.2002 12.9004 -7.59961 13.6006 -26.0996 12.4004l-2.7002 -28.5c14.2002 0.899414 27.5 2.09961 28.7998 16.0996zM194.9 67l5.7998 60c-5 -13.5 -14.7002 -21.0996 -27.9004 -26.5996z
+M330.3 112l-7.89941 37.7998l-15.8008 -39.2998zM160.2 186.6l-4.2998 17.5l-39.6006 -2.59961l-8.09961 -18.2002l-31.9004 -2.09961l57 121.899l23.9004 1.60059l30.7002 -102l9.89941 104.7l27 1.7998l37.7998 -63.6006l6.5 66.6006l28.5 1.89941l-4 -41.1992
+c7.40039 13.5 22.9004 44.6992 63.6006 47.5c40.5 2.7998 52.3994 -29.3008 53.3994 -30.3008l3.30078 32l39.2998 2.7002c12.7002 0.900391 27.7998 -0.299805 36.2998 -9.7002l-4.40039 11.9004l32.2002 2.2002l12.9004 -43.2002l23 45.7002l31 2.2002l-43.6006 -78.4004
+l-4.7998 -44.2998l-28.3994 -1.90039l4.7998 44.2998l-15.7998 43c1 -22.2998 -9.2002 -40.0996 -32 -49.5996l25.1992 -38.7998l-36.3994 -2.40039l-19.2002 36.7998l-4 -38.2998l-28.4004 -1.89941l3.30078 31.5c-6.7002 -9.30078 -19.7002 -35.4004 -59.6006 -38
+c-26.2002 -1.7002 -45.5996 10.2998 -55.3994 39.1992l-4 -40.2998l-25 -1.59961l-37.6006 63.2998l-6.2998 -66.2002zM436.8 268.7c10.2002 0.700195 17.5 2.09961 21.6006 4.2998c4.5 2.40039 7 6.40039 7.59961 12.0996
+c0.599609 5.30078 -0.599609 8.80078 -3.40039 10.4004c-3.59961 2.09961 -10.5996 2.7998 -22.8994 2zM327.7 234c5.59961 -5.90039 12.7002 -8.5 21.2998 -7.90039c4.7002 0.300781 9.09961 1.80078 13.2998 4.10059c5.5 3 10.6006 8 15.1006 14.2998l-34.2002 -2.2998
+l2.39941 23.8994l63.1006 4.30078l1.2002 12l-31.2002 -2.10059c-4.10059 3.7002 -7.7998 6.60059 -11.1006 8.10059c-4 1.69922 -8.09961 2.7998 -12.1992 2.5c-8 -0.5 -15.3008 -3.60059 -22 -9.2002c-7.7002 -6.40039 -12 -14.5 -12.9004 -24.4004
+c-1.09961 -9.59961 1.40039 -17.2998 7.2002 -23.2998zM126.4 225.8l23.7998 1.60059l-8.2998 37.5996z" />
+    <glyph glyph-name="app-store" unicode="&#xf36f;" horiz-adv-x="512" 
+d="M255.9 327.1l9.09961 15.7002c5.59961 9.7998 18.0996 13.1006 27.9004 7.5c9.7998 -5.59961 13.0996 -18.0996 7.5 -27.8994l-87.5 -151.5h63.2998c20.5 0 32 -24.1006 23.0996 -40.8008h-185.5c-11.2998 0 -20.3994 9.10059 -20.3994 20.4004
+s9.09961 20.4004 20.3994 20.4004h52l66.6006 115.399l-20.8008 36.1006c-5.59961 9.7998 -2.2998 22.1992 7.5 27.8994c9.80078 5.60059 22.2002 2.2998 27.9004 -7.5zM177.2 109.1l-19.6006 -34c-5.59961 -9.7998 -18.0996 -13.0996 -27.8994 -7.5
+c-9.7998 5.60059 -13.1006 18.1006 -7.5 27.9004l14.5996 25.2002c16.4004 5.09961 29.7998 1.2002 40.4004 -11.6006zM346.1 170.8h53.1006c11.2998 0 20.3994 -9.09961 20.3994 -20.3994c0 -11.3008 -9.09961 -20.4004 -20.3994 -20.4004h-29.5l19.8994 -34.5
+c5.60059 -9.7998 2.30078 -22.2002 -7.5 -27.9004c-9.7998 -5.59961 -22.1992 -2.2998 -27.8994 7.5c-33.5 58.1006 -58.7002 101.601 -75.4004 130.601c-17.0996 29.5 -4.89941 59.0996 7.2002 69.0996c13.4004 -23 33.4004 -57.7002 60.0996 -104zM256 440
+c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM472 192c0 119.9 -97.2998 216 -216 216c-119.9 0 -216 -97.2998 -216 -216c0 -119.9 97.2998 -216 216 -216c119.9 0 216 97.2998 216 216z" />
+    <glyph glyph-name="app-store-ios" unicode="&#xf370;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM127 63.5l19.2998 33.2998c-10.2998 12.5 -23.5 16.2998 -39.5996 11.4004l-14.2998 -24.7002
+c-5.5 -9.5 -2.30078 -21.7998 7.2998 -27.2998c9.5 -5.5 21.7998 -2.2998 27.2998 7.2998zM265.9 117.4c8.7998 16.2998 -2.5 40 -22.7002 40h-62.1006l85.8008 148.6c5.5 9.5 2.2998 21.7998 -7.30078 27.2998c-9.5 5.5 -21.7998 2.2998 -27.2998 -7.2998
+l-8.89941 -15.4004l-8.90039 15.4004c-5.5 9.5 -17.7002 12.7998 -27.2998 7.2998c-9.5 -5.5 -12.7998 -17.7002 -7.2998 -27.2998l20.5 -35.4004l-65.4004 -113.199h-51c-11 0 -20 -9 -20 -20s9 -20 20 -20h181.9zM364 117.4c11 0 20 8.89941 20 20c0 11 -9 20 -20 20h-52
+c-26.2002 45.2998 -45.7998 79.2998 -58.9004 102c-11.8994 -9.80078 -23.7998 -38.8008 -7.09961 -67.8008c16.5 -28.3994 41.0996 -71.1992 74 -128.1c5.5 -9.5 17.7002 -12.7998 27.2998 -7.2998c9.5 5.5 12.7998 17.7002 7.2998 27.2998l-19.5996 33.9004h29z" />
+    <glyph glyph-name="apper" unicode="&#xf371;" horiz-adv-x="640" 
+d="M42.0996 208.9c22.2002 0 29 -2.80078 33.5 -14.6006h0.800781v22.9004c0 11.2998 -4.80078 15.3994 -17.9004 15.3994c-11.2998 0 -14.4004 -2.5 -15.0996 -12.7998h-38.6006c0.299805 13.9004 1.5 19.1006 5.7998 24.4004
+c7.30078 8.7998 18.9004 11.7998 46.1006 11.7998c33 0 47.0996 -5 53.8994 -18.9004c2 -4.2998 4 -15.5996 4 -23.6992v-76.3008h-38.2998l1.2998 19.1006h-1c-5.2998 -15.6006 -13.5996 -20.4004 -35.5 -20.4004c-30.2998 0 -41.0996 10.1006 -41.0996 37.2998
+c0 25.2002 12.2998 35.8008 42.0996 35.8008zM59.2002 160.8c13.0996 0 16.8994 3 16.8994 13.4004c0 9.09961 -4.2998 11.5996 -19.5996 11.5996c-13.0996 0 -17.9004 -3 -17.9004 -12.0996c-0.0996094 -10.4004 3.7002 -12.9004 20.6006 -12.9004zM137 255.7h38.2998
+l-1.5 -20.6006h0.799805c9.10059 17.1006 15.9004 20.9004 37.5 20.9004c14.4004 0 24.7002 -3 31.5 -9.09961c9.80078 -8.60059 12.8008 -20.4004 12.8008 -48.1006c0 -30 -3 -43.0996 -12.1006 -52.8994c-6.7998 -7.30078 -16.3994 -10.1006 -33.2002 -10.1006
+c-20.3994 0 -29.1992 5.5 -33.7998 21.2002h-0.799805v-70.2998h-39.5v169zM217.9 195c0 27.5 -3.30078 32.5 -20.7002 32.5c-16.9004 0 -20.7002 -5 -20.7002 -28.7002c0 -28 3.5 -33.5 21.2002 -33.5c16.3994 0 20.2002 5.60059 20.2002 29.7002zM275.8 255.7h38.2998
+l-1.5 -20.6006h0.800781c9.09961 17.1006 15.8994 20.9004 37.5 20.9004c14.3994 0 24.6992 -3 31.5 -9.09961c9.7998 -8.60059 12.7998 -20.4004 12.7998 -48.1006c0 -30 -3 -43.0996 -12.1006 -52.8994c-6.7998 -7.30078 -16.3994 -10.1006 -33.2998 -10.1006
+c-20.3994 0 -29.2002 5.5 -33.7998 21.2002h-0.799805v-70.2998h-39.5v169h0.0996094zM356.7 195c0 27.5 -3.2998 32.5 -20.7002 32.5c-16.9004 0 -20.7002 -5 -20.7002 -28.7002c0 -28 3.5 -33.5 21.2002 -33.5c16.4004 0 20.2002 5.60059 20.2002 29.7002zM410.5 198.8
+c0 25.4004 3.2998 37.7998 12.2998 45.7998c8.7998 8.10059 22.2002 11.3008 45.1006 11.3008c42.7998 0 55.6992 -12.8008 55.6992 -55.7002v-11.1006h-75.2998c-0.299805 -2 -0.299805 -4 -0.299805 -4.7998c0 -16.8994 4.5 -21.8994 20.0996 -21.8994
+c13.9004 0 17.9004 3 17.9004 13.8994h37.5v-2.2998c0 -9.7998 -2.5 -18.9004 -6.7998 -24.7002c-7.2998 -9.7998 -19.6006 -13.5996 -44.2998 -13.5996c-27.5 0 -41.6006 3.2998 -50.6006 12.2998c-8.5 8.5 -11.2998 21.2998 -11.2998 50.7998zM486.9 210.4
+c-0.300781 1.7998 -0.300781 3.2998 -0.300781 3.7998c0 12.2998 -3.2998 14.5996 -19.5996 14.5996c-14.4004 0 -17.0996 -3 -18.0996 -15.0996l-0.300781 -3.2998h38.3008zM542.5 255.7h38.2998l-1.7998 -19.9004h0.700195
+c6.7998 14.9004 14.3994 20.2002 29.7002 20.2002c10.7998 0 19.0996 -3.2998 23.3994 -9.2998c5.2998 -7.2998 6.7998 -14.4004 6.7998 -34c0 -1.5 0 -5 0.200195 -9.2998h-35c0.299805 1.7998 0.299805 3.2998 0.299805 4c0 15.3994 -2 19.3994 -10.2998 19.3994
+c-6.2998 0 -10.7998 -3.2998 -13.0996 -9.2998c-1 -3 -1 -4.2998 -1 -12.2998v-68h-38.2998v118.5h0.0996094z" />
+    <glyph glyph-name="asymmetrik" unicode="&#xf372;" horiz-adv-x="576" 
+d="M517.5 138.8c-13.9004 -14.2998 -30.4004 -27.7002 -48.9004 -39.7998l73.4004 -110.4h-101.6l-45.9004 71.8008c-17.5996 -7.2002 -35.9004 -13.4004 -54.5 -18.7002l32.5996 -53.1006h-135.5l22.8008 37.1006c-23.3008 -2.7002 -46.4004 -3.7002 -68.6006 -2.7002
+l-22 -34.4004h-101.6l34.5 51.7002c-45 17.9004 -68.9004 47.9004 -68.4004 83c0.299805 25.7998 14 54.2998 41.7002 82.9004c38.9004 40 96.5 72.5996 161.6 92.8994c-22.2998 -8.09961 -42 -18.5 -62 -30.6992c-31.1992 -16.2002 -58.6992 -35.9004 -79.5 -58.1006
+c-57.3994 -61 -46.5 -121.8 19.1006 -151.2l190.2 285.5l150.899 -226.399c13 9.5 24.7998 19.7998 35 30.5996c98 104.2 53.7002 207.9 -98.7998 231.7c-68.2998 10.5996 -146.8 5.7002 -221.3 -14.7998c-60.1006 -10 -118.7 -31.7002 -170.7 -58.2002
+c118.1 66.9004 277.9 102.1 406.6 82.4004c110 -16.8008 170.2 -69.5 169.4 -135c-0.400391 -36.1006 -19.7002 -76.1006 -58.5 -116.101zM329.9 58.2998c18.3994 5.2998 36.5 11.7998 53.6992 19.2002l-78.6992 123l-101.9 -159.3
+c22.5 -0.700195 45.7998 0.899414 69.2002 4.39941l32.7002 53.3008z" />
+    <glyph glyph-name="audible" unicode="&#xf373;" horiz-adv-x="640" 
+d="M640 248.1v-54l-320 -200l-320 199.9v54l320 -200zM445.5 176.1c-70.7998 94.4004 -200.5 110.7 -290.2 36.3008c-2.59961 -2.2002 -5.2002 -4.40039 -7.7002 -6.7002h-0.299805c37.1006 55.7002 100.601 92.3994 172.601 92.3994s135.5 -36.7998 172.699 -92.5996z
+M225.4 157.3c21 29.6006 55.5 49 94.3994 49c39.2002 0 73.9004 -19.5996 94.7998 -49.5l-45.3994 -28.3994c-21.2002 29.1992 -52 47.5996 -86.4004 47.5996c-20.8994 0 -40.5 -6.7998 -57.3994 -18.7002zM103.6 286.9c-11.5 -9.10059 -24.2998 -22.1006 -34.1992 -32.6006
+c53.8994 82.1006 147 135.601 250.5 135.601c104.899 0 197.199 -54 250.699 -135.7l-48.7998 -30.4004l-0.700195 1c-99.2998 138.5 -285.699 166.4 -417.5 62.1006zM570.6 254.2z" />
+    <glyph glyph-name="avianex" unicode="&#xf374;" horiz-adv-x="512" 
+d="M453.1 416c39 0 64.8008 -31.2002 57.8008 -69.7998l-56.7002 -308.5c-7.10059 -38.5 -44.4004 -69.7002 -83.2998 -69.7002h-312c-39 0 -64.8008 31.2002 -57.7002 69.7002l56.5996 308.6c7.10059 38.5 44.4004 69.7002 83.2998 69.7002h312zM394.9 68.7002
+l6.2998 7.89941l-94.9004 119.4l-4.5 7.2998c19.7998 14.2002 33.5 24.2998 35.2998 25.6006c7.90039 6.59961 6.30078 20.7998 -2.69922 31.2998c-9.2002 10.7998 -23 14.3994 -30.7002 7.89941c0 0 -14.4004 -13.5996 -33.7998 -32.3994l-4.90039 4.5l-103.1 112.399
+l-8.90039 -4.7998l-18.7998 -28.8994l68.7998 -99.8008l20.5 -29.5996c-12 -12.2998 -23.5 -24.4004 -32.7998 -34.9004l-58 31.1006l-15.7002 -15.4004l52.4004 -48.0996l40.5996 -61l17.9004 12.7002l-22.1006 64.1992c12.5 7.60059 27 17.1006 41.7002 27.1006
+l115.4 -110z" />
+    <glyph glyph-name="aws" unicode="&#xf375;" horiz-adv-x="640" 
+d="M180.41 244.99c-0.719727 -22.6504 10.5996 -32.6807 10.8799 -39.0498c-0.238281 -2.31543 -2.0752 -5.12402 -4.09961 -6.27051l-12.8008 -8.95996c-1.39941 -0.981445 -3.92188 -1.8418 -5.62988 -1.91992c-0.429688 0.0195312 -8.18945 -1.83008 -20.4795 25.6104
+c-13.0283 -16.2627 -40.5127 -29.4609 -61.3496 -29.4609c-0.347656 0 -0.913086 0.00488281 -1.26074 0.0107422c-16.2803 -0.890625 -60.4004 9.24023 -58.1299 56.21c-1.58984 38.2803 34.0596 62.0596 70.9297 60.0498
+c7.10059 -0.0195312 21.6006 -0.370117 46.9902 -6.26953v15.6191c2.69043 26.46 -14.7002 46.9902 -44.8096 43.9102c-2.40039 -0.00976562 -19.4004 0.5 -45.8408 -10.1094c-7.35938 -3.37988 -8.2998 -2.82031 -10.75 -2.82031
+c-7.40918 0 -4.35938 21.4795 -2.93945 24.2002c5.20996 6.39941 35.8604 18.3496 65.9395 18.1797c1.86523 0.165039 4.89844 0.298828 6.77148 0.298828c15.2451 0 37.1611 -7.875 48.9189 -17.5791c9.87305 -11.0439 17.8867 -32.0303 17.8867 -46.8438
+c0 -1.52539 -0.0966797 -3.99609 -0.216797 -5.51562zM93.9902 212.6c32.4297 0.470703 46.1602 19.9707 49.29 30.4707c2.45996 10.0498 2.0498 16.4102 2.0498 27.3994c-9.66992 2.32031 -23.5898 4.85059 -39.5605 4.87012
+c-15.1494 1.14062 -42.8193 -5.62988 -41.7393 -32.2598c-1.24023 -16.79 11.1201 -31.4004 29.96 -30.4805zM264.91 189.55c-7.86035 -0.719727 -11.5205 4.86035 -12.6797 10.3701l-49.8008 164.65c-0.969727 2.7793 -1.60938 5.64941 -1.91992 8.58008
+c-0.0283203 0.189453 -0.0517578 0.5 -0.0517578 0.692383c0 2.18555 1.75195 4.22656 3.91211 4.55762h22.25c8.78027 0.879883 11.6396 -6.03027 12.5498 -10.3701l35.7197 -140.83l33.1602 140.83c0.530273 3.21973 2.94043 11.0693 12.7998 10.2393h17.1602
+c2.16992 0.180664 11.1104 0.5 12.6807 -10.3691l33.4199 -142.631l36.8701 142.631c0.479492 2.17969 2.71973 11.3691 12.6797 10.3691h19.7197c0.850586 0.130859 6.15039 0.810547 5.25 -8.5791c-0.429688 -1.85059 3.41016 10.6592 -52.75 -169.9
+c-1.14941 -5.50977 -4.82031 -11.0898 -12.6797 -10.3701h-18.6904c-10.9395 -1.15039 -12.5098 9.66016 -12.6797 10.75l-33.1602 137.13l-32.7803 -136.99c-0.15918 -1.08984 -1.72949 -11.8994 -12.6797 -10.75h-18.2998v-0.00976562zM538.39 183.92
+c-5.87988 -0.00976562 -33.9199 0.299805 -57.3594 12.29c-4.31152 1.8252 -7.81055 7.10645 -7.81055 11.7891v0.121094v10.75c0 8.4502 6.2002 6.89941 8.83008 5.88965c10.04 -4.05957 16.4805 -7.13965 28.8105 -9.59961
+c36.6494 -7.53027 52.7695 2.2998 56.7197 4.47949c13.1504 7.81055 14.1895 25.6807 5.25 34.9502c-10.4805 8.79004 -15.4805 9.12012 -53.1299 21c-4.64062 1.29004 -43.7002 13.6104 -43.79 52.3604c-0.610352 28.2402 25.0498 56.1797 69.5195 55.9502
+c12.6699 0.00976562 46.4307 -4.13086 55.5703 -15.6201c1.34961 -2.08984 2.01953 -4.5498 1.91992 -7.04004v-10.1104c0 -4.43945 -1.62012 -6.66016 -4.87012 -6.66016c-7.70996 0.860352 -21.3896 11.1699 -49.1602 10.75
+c-6.88965 0.360352 -39.8896 -0.910156 -38.4092 -24.9697c-0.430664 -18.96 26.6094 -26.0703 29.6992 -26.8896c36.46 -10.9707 48.6504 -12.79 63.1201 -29.5801c17.1406 -22.25 7.90039 -48.2998 4.35059 -55.4404
+c-19.0801 -37.4902 -68.4199 -34.4395 -69.2607 -34.4199zM578.59 79.0596c-70.0303 -51.7197 -171.689 -79.25 -258.49 -79.25c-0.853516 -0.00488281 -2.23926 -0.00976562 -3.09277 -0.00976562c-99.5195 0 -240.271 54.0918 -314.177 120.74
+c-6.53027 5.88965 -0.770508 13.96 7.16992 9.46973c81.1748 -46.4336 222.955 -84.1201 316.473 -84.1201h0.407227c69.4072 0.373047 177.64 22.5713 241.59 49.5508c11.7803 5 21.7705 -7.80078 10.1201 -16.3809zM607.78 112.35
+c-8.95996 11.5205 -59.2803 5.38086 -81.8105 2.69043c-6.79004 -0.770508 -7.93945 5.12012 -1.79004 9.46973c40.0703 28.1699 105.88 20.1006 113.44 10.6299c7.5498 -9.46973 -2.0498 -75.4092 -39.5605 -106.909c-5.75977 -4.87012 -11.2695 -2.30078 -8.70996 4.09961
+c8.44043 21.25 27.3906 68.4902 18.4307 80.0195z" />
+    <glyph glyph-name="bimobject" unicode="&#xf378;" 
+d="M416 416c17.5996 0 32 -14.4004 32 -32v-384c0 -17.5996 -14.4004 -32 -32 -32h-384c-17.5996 0 -32 14.4004 -32 32v384c0 17.5996 14.4004 32 32 32h384zM352 158.6h-0.0996094v35c0 49.4004 -11.4004 82.5 -103.801 82.5h-17.2998
+c-30 0 -65.0996 -8.2998 -69.7002 -38.7998h-1.09961v74.7002h-64v-232h64v34.7998h0.900391c8 -23.8994 26.2998 -38.7998 70.3994 -38.7998h16.9004c92.3994 0 103.8 33.2002 103.8 82.5996zM288 187.5v-22.9004c0 -21.6992 -3.40039 -33.7998 -38.4004 -33.7998h-45.2998
+c-28.8994 0 -44.0996 6.5 -44.0996 35.7002v19c0 29.2998 15.2002 35.7002 44.0996 35.7002h45.2998c35 0.200195 38.4004 -12 38.4004 -33.7002z" />
+    <glyph glyph-name="bitcoin" unicode="&#xf379;" horiz-adv-x="512" 
+d="M504 192c0 -136.967 -111.033 -248 -248 -248s-248 111.033 -248 248s111.033 248 248 248s248 -111.033 248 -248zM362.349 227.33c4.9375 32.999 -20.1904 50.7393 -54.5498 62.5732l11.1465 44.7021l-27.2129 6.78027l-10.8516 -43.5234
+c-7.1543 1.78223 -14.502 3.46387 -21.8027 5.12988l10.9287 43.8096l-27.1982 6.78125l-11.1523 -44.6855c-5.92188 1.34863 -11.7354 2.68164 -17.377 4.08398l0.0302734 0.139648l-37.5293 9.37012l-7.23926 -29.0625s20.1914 -4.62695 19.7646 -4.91309
+c11.0225 -2.75098 13.0146 -10.0439 12.6807 -15.8242l-12.6963 -50.9258c0.759766 -0.193359 1.74414 -0.472656 2.8291 -0.90625c-0.907227 0.224609 -1.87598 0.472656 -2.87598 0.712891l-17.7959 -71.3379c-1.34961 -3.34863 -4.76758 -8.37012 -12.4717 -6.46484
+c0.271484 -0.394531 -19.7793 4.9375 -19.7793 4.9375l-13.5107 -31.1475l35.4141 -8.82617c6.58887 -1.65137 13.0449 -3.37988 19.4004 -5.00684l-11.2617 -45.2129l27.1816 -6.78027l11.1533 44.7324c5.96875 -1.61719 15.6846 -4.13867 21.6865 -5.62695
+l-11.1152 -44.5225l27.2139 -6.78125l11.2617 45.1279c46.4043 -8.78125 81.2988 -5.23926 95.9863 36.7266c11.8359 33.79 -0.589844 53.2812 -25.0049 65.9912c17.7803 4.09766 31.1748 15.792 34.7471 39.9492zM300.172 140.151
+c-8.41016 -33.79 -65.3076 -15.5234 -83.7549 -10.9434l14.9443 59.8994c18.4453 -4.60352 77.5996 -13.7178 68.8105 -48.9561zM308.589 227.818c-7.67285 -30.7363 -55.0312 -15.1201 -70.3926 -11.292l13.5479 54.3262
+c15.3633 -3.82715 64.8359 -10.9727 56.8447 -43.0342z" />
+    <glyph glyph-name="bity" unicode="&#xf37a;" horiz-adv-x="496" 
+d="M78.4004 380.8c95.3994 89.2002 246.1 91.2002 343.1 -3.7998c14.2998 -14.0996 -6.40039 -37.0996 -22.4004 -21.5c-84.7998 82.4004 -215.8 80.2998 -298.899 3.2002c-16.2998 -15.1006 -36.5 8.2998 -21.7998 22.0996zM177.3 -37.7998
+c-128.7 38.2998 -201.899 170.7 -169.8 298.1c5.2998 21 35.2002 12.5 30.2002 -7.09961c-28.2998 -111.3 35.2998 -227.101 147.5 -261c21.3994 -6.40039 11.3994 -35.7002 -7.90039 -30zM325.4 -35.7998c-19.2002 -6.2998 -30 22.7002 -8.80078 29.7002
+c106.101 35.5 167.4 145.699 143.2 253.399c-4.89941 21.7002 25.5 27.6006 30 7.90039c28.5 -124.101 -42.5 -250.8 -164.399 -291zM262.5 43.2002c0 -8.2002 -6.59961 -14.7998 -14.7998 -14.7998s-14.7998 6.59961 -14.7998 14.7998l0.199219 71.7998
+c0 8.09961 6.60059 14.7998 14.8008 14.7998c8.19922 0 14.7998 -6.59961 14.7998 -14.7998zM333.5 312.2c0 21.7998 32.5 19.5996 32.5 0v-71.6006c0 -69.2998 -60.7002 -90.8994 -118 -90.0996c-57.2998 -0.799805 -118 20.7998 -118 90.0996v71.6006
+c0 19.5996 32.5 21.7998 32.5 0c-1.40039 -88.2002 -7 -131.8 85.5 -132.5c90.2002 0.599609 87.5996 41.5996 85.5 132.5z" />
+    <glyph glyph-name="blackberry" unicode="&#xf37b;" horiz-adv-x="512" 
+d="M166 331.1c0 -23.3994 -16.4004 -49.0996 -72.5 -49.0996h-70.0996l21 88.7998h67.7998c42.0996 0 53.7998 -23.2998 53.7998 -39.7002zM292.2 370.8c42.0996 0 53.7998 -23.2998 53.7002 -39.7002c0 -23.3994 -16.3008 -49.0996 -70.1006 -49.0996h-70.0996
+l18.7002 88.7998h67.7998zM88.7998 239.9c42.1006 0 53.7998 -23.4004 53.7998 -39.7002c0 -25.7002 -16.3994 -49.1006 -72.5 -49.1006h-70.0996l21 88.8008h67.7998zM268.9 239.9c42 0 53.6992 -23.4004 53.6992 -39.7002c0 -25.7002 -16.2998 -49.1006 -70.0996 -49.1006
+h-70.0996l18.6992 88.8008h67.8008zM458.2 293.7c42.0996 0 53.7998 -23.4004 53.7002 -39.7002c0 -25.7002 -16.3008 -49.0996 -70.1006 -49.0996h-70.0996l18.7002 88.7998h67.7998zM430.2 155.8c42.0996 0 53.7002 -23.3994 53.7002 -39.7002
+c0 -25.6992 -14 -49.0996 -70.1006 -49.0996h-70.0996l18.7002 88.7998h67.7998zM240.8 102c42.1006 0 53.7998 -23.4004 53.7002 -39.7002c0 -23.3994 -14 -49.0996 -70.0996 -49.0996h-70.1006l18.7002 88.7998h67.7998z" />
+    <glyph glyph-name="blogger" unicode="&#xf37c;" 
+d="M162.4 252c4.7998 4.90039 6.19922 5.09961 36.3994 5.09961c27.2002 0 28.1006 -0.0996094 32.1006 -2.09961c5.7998 -2.90039 8.2998 -7 8.2998 -13.5996c0 -5.90039 -2.40039 -10 -7.60059 -13.4004c-2.7998 -1.7998 -4.5 -1.90039 -31.0996 -2.09961
+c-16.4004 -0.100586 -29.5 0.199219 -31.5 0.799805c-10.2998 2.89941 -14.0996 17.7002 -6.59961 25.2998zM223.8 157.5c55.4004 0 55.1006 0 60.4004 -4.7002c7.39941 -7 5.89941 -19.2998 -3.10059 -24.3994l-9.19922 -1.5l-47.9004 -0.600586
+c-42.2002 -0.5 -54.0996 0.200195 -56.2998 1.2002c-4.40039 1.90039 -8.5 7.2998 -9.2002 12c-0.599609 4.5 1.59961 10.7998 5.09961 13.9004c4.40039 3.89941 6.30078 4.09961 60.2002 4.09961zM447.2 27.4004c-3.5 -28.4004 -23 -50.4004 -51.1006 -57.5
+c-7.19922 -1.80078 -9.69922 -1.90039 -172.899 -1.80078c-157.8 0 -165.9 0.100586 -172 1.80078c-8.40039 2.19922 -15.6006 5.5 -22.2998 10c-5.60059 3.7998 -13.9004 11.7998 -17 16.3994c-3.80078 5.60059 -8.2002 15.2998 -10 22
+c-1.80078 6.7002 -1.90039 9.40039 -1.90039 173.4c0 163.1 0 166.6 1.7998 173.7c6.2998 24.6992 25.9004 43.5996 51.2002 49.1992c7.2998 1.60059 332.1 1.90039 340 0.300781c21.2002 -4.30078 37.9004 -17.1006 47.5996 -36.4004c7.7002 -15.2998 7 1.5 7.30078 -180.6
+c0.199219 -115.801 0 -164.5 -0.700195 -170.5zM361.8 212.6c-1.09961 5 -4.2002 9.60059 -7.7002 11.5c-1.09961 0.600586 -8 1.30078 -15.5 1.7002c-12.3994 0.600586 -13.7998 0.799805 -17.7998 3.10059c-6.2002 3.59961 -7.89941 7.59961 -8 18.2998
+c0 20.3994 -8.5 39.3994 -25.2998 56.5c-12 12.2002 -25.2998 20.5 -40.5996 25.0996c-3.60059 1.10059 -11.8008 1.5 -39.2002 1.7998c-42.9004 0.5 -52.5 -0.399414 -67.1006 -6.19922c-27 -10.7002 -46.2998 -33.4004 -53.3994 -62.4004
+c-1.2998 -5.40039 -1.60059 -14.2002 -1.90039 -64.2998c-0.399414 -62.7998 0 -72.1006 4 -84.5c9.7002 -30.7002 37.1006 -53.4004 64.6006 -58.4004c9.19922 -1.7002 122.199 -2.09961 133.699 -0.5c20.1006 2.7002 35.9004 10.7998 50.7002 25.9004
+c10.7002 10.8994 17.4004 22.7998 21.7998 38.5c3.2002 10.8994 2.90039 88.3994 1.7002 93.8994z" />
+    <glyph glyph-name="blogger-b" unicode="&#xf37d;" 
+d="M446.6 225.3c2 -8.89941 2.40039 -134.1 -2.5 -151.7c-7.09961 -25.2998 -17.8994 -44.3994 -35.1992 -62.0996c-23.9004 -24.4004 -49.4004 -37.5 -81.9004 -41.9004c-18.7002 -2.5 -201.2 -1.89941 -216 0.800781c-44.5 8 -88.7998 44.6992 -104.4 94.2998
+c-6.2998 20.0996 -7 35 -6.39941 136.5c0.5 81 1 95.0996 3.09961 103.899c11.4004 46.8008 42.6006 83.4004 86.1006 100.601c23.5996 9.39941 39 10.7998 108.399 10c44.2002 -0.5 57.4004 -1.10059 63.2998 -2.90039c24.6006 -7.5 46.2002 -20.7998 65.5 -40.5
+c27.1006 -27.5996 40.8008 -58.2998 40.9004 -91.2998c0.0996094 -17.2002 2.7998 -23.5996 12.9004 -29.5c6.39941 -3.7002 8.59961 -4.09961 28.6992 -5c12 -0.5 23.2002 -1.7002 25 -2.7002c5.7002 -3.09961 10.7002 -10.5 12.5 -18.5zM124.5 288.9
+c-12.2002 -12.3008 -6 -36.1006 10.5996 -40.8008c3.10059 -0.799805 24.3008 -1.39941 50.8008 -1.19922c43 0.199219 45.6992 0.399414 50.2998 3.2998c8.5 5.39941 12.2998 12.0996 12.2998 21.5996c0 10.6006 -4.09961 17.2002 -13.4004 21.9004
+c-6.39941 3.2998 -7.89941 3.39941 -51.7998 3.39941c-48.7998 0 -51 -0.299805 -58.7998 -8.19922zM316.3 89.0996c14.4004 8.2002 17 28.1006 4.90039 39.4004c-8.5 7.90039 -8 7.90039 -97.6006 7.7998c-87.0996 -0.0996094 -90.1992 -0.299805 -97.2998 -6.7002
+c-5.59961 -5.09961 -9.2998 -15.0996 -8.2002 -22.3994c1.10059 -7.7002 7.80078 -16.2998 14.9004 -19.4004c3.59961 -1.59961 22.7998 -2.7998 90.9004 -2l77.5 0.900391z" />
+    <glyph glyph-name="buromobelexperte" unicode="&#xf37f;" 
+d="M0 416h128v-128h-128v128zM120 296v112h-112v-112h112zM160 416h128v-128h-128v128zM280 296v112h-112v-112h112zM320 416h128v-128h-128v128zM440 296v112h-112v-112h112zM0 256h128v-128h-128v128zM120 136v112h-112v-112h112zM160 256h128v-128h-128v128zM280 136v112
+h-112v-112h112zM320 256h128v-128h-128v128zM440 136v112h-112v-112h112zM0 96h128v-128h-128v128zM120 -24v112h-112v-112h112zM160 96h128v-128h-128v128zM280 -24v112h-112v-112h112zM320 96h128v-128h-128v128z" />
+    <glyph glyph-name="centercode" unicode="&#xf380;" horiz-adv-x="512" 
+d="M329.2 179.4c-3.7998 -35.2002 -35.4004 -60.6006 -70.6006 -56.8008c-35.1992 3.80078 -60.5996 35.4004 -56.7998 70.6006s35.4004 60.5996 70.6006 56.7998c35.0996 -3.7998 60.5996 -35.4004 56.7998 -70.5996zM243.4 -55.7002
+c-146.7 7.7002 -251.601 138.2 -233.301 279.4c11.2002 86.5996 65.8008 156.899 139.101 192c161 77.0996 349.7 -37.4004 354.7 -216.601c4.09961 -147 -118.4 -262.199 -260.5 -254.8zM423.3 124.3c27.9004 118 -160.5 205.9 -237.2 234.2
+c-57.5 -56.2998 -69.0996 -188.6 -33.7998 -344.4c68.7998 -15.7998 169.101 26.4004 271 110.2z" />
+    <glyph glyph-name="cloudscale" unicode="&#xf383;" 
+d="M318.1 294c6.2002 6.2998 15.8008 -3.09961 9.5 -9.59961l-75.1992 -88.8008c0.899414 -8.19922 -1.80078 -16.7998 -8.10059 -23.0996c-11.0996 -11 -28.8994 -11 -40 0c-11.0996 11.0996 -11.0996 29 0 40c6.2998 6.2998 14.7998 9 23.1006 8.09961l25.1992 20.4004
+c-16.3994 15.2998 -38.3994 24.7002 -62.5996 24.7002c-50.7998 0 -94.5996 -41.4004 -92.5996 -97.4004c-1 6.2998 -1.40039 12.7998 -1.40039 19.4004c0 71.5 57.7998 132.3 129.4 132.3c31.7998 0 60.7998 -14.2998 83.2998 -33.5996zM234.3 182.5
+c5.60059 5.5 5.60059 14.5996 0 20.2002c-5.59961 5.59961 -14.5996 5.59961 -20.2002 0c-5.59961 -5.60059 -5.59961 -14.6006 0 -20.2002c5.60059 -5.5 14.6006 -5.5 20.2002 0zM224 416c123.5 0 224 -100.5 224 -224s-100.5 -224 -224 -224s-224 100.5 -224 224
+s100.5 224 224 224zM224 32c88.2002 0 160 71.7998 160 160s-71.7998 160 -160 160s-160 -71.7998 -160 -160s71.7998 -160 160 -160z" />
+    <glyph glyph-name="cloudsmith" unicode="&#xf384;" horiz-adv-x="332" 
+d="M332.5 28.0996c0 -46.3994 -37.5996 -84.0996 -84 -84.0996s-84 37.7002 -84 84.0996c0 46.4004 37.5996 84 84 84s84 -37.5996 84 -84zM248.5 272c-46.4004 0 -80 -33.5996 -80 -80s-37.5996 -80 -84 -80s-84 33.5996 -84 80s37.5996 88 84 88s76 29.5996 76 76
+s41.5996 84 88 84s80 -37.5996 80 -84s-33.5996 -84 -80 -84z" />
+    <glyph glyph-name="cloudversify" unicode="&#xf385;" horiz-adv-x="616" 
+d="M148.6 144v-0.0996094h-48.8994c-6.40039 0 -11.7002 5.39941 -11.7002 11.7998v40.3994c0 7.60059 7 11.9004 10.7998 11.9004h46.7998v-6.59961c0 -10.7002 8.80078 -16.7002 19.5 -16.7002h20.2002c10.7998 0 19.5 8.7998 19.5 19.5v20.3994
+c0 10.6006 -3.5 19.5 -15.2002 19.5c18.5 15.2002 37.2002 21.4004 45 24.1006c15 56.5 42 92.3994 99.3008 109.7c55.0996 16.5 153.5 3.09961 186.5 -85c73.8994 -22.6006 106.899 -92.6006 92.0996 -155.101c-13 -54.8994 -62.2998 -100.6 -131.5 -99.5
+c-49.5996 -51.3994 -135.2 -48.8994 -186.4 -5.59961c-78.5996 -4.2002 -137.8 42.7998 -146 111.3zM376 136c8.7002 -54.0996 59.7002 -65.5 91.7998 -59.2002c39.1006 7.7002 70.5 37.5 79.7002 76.5c5.7998 24.4004 2.40039 50 -9.40039 72l-10.5 19.6006
+c1.2002 -22.5 -12.5 -60.6006 -47.5 -76.9004c65.5 67.7002 2.10059 141.2 -67.6992 150.5c-49.8008 6.59961 -83.3008 -13 -114.2 -43.7002c48 -4.7002 87.7002 -26.7998 101.8 -74.7998c-30.0996 49.2998 -103 56.5996 -133.6 40.7998
+c-35.5 -18.2002 -60 -54 -57 -93.8994c3.59961 -47.4004 39.5 -67.4004 57.3994 -79.8008c-4.5 21.7002 -4 71.3008 29.2002 92.9004c-36.2998 -60 28.0996 -144.6 135.3 -110.8c-33.5996 14.3994 -66 40.5 -55.2998 86.7998zM128 240h-39.7998
+c-8.90039 0 -16.2002 7.2998 -16.2002 16.2002v39.5996c0 8.90039 7.2998 16.2002 16.2002 16.2002h39.7998c8.90039 0 16.2002 -7.2998 16.2002 -16.2002v-39.5996c0 -8.90039 -7.2998 -16.2002 -16.2002 -16.2002zM10.0996 280c-5.59961 0 -10.0996 4.5 -10.0996 10.0996
+v27.8008c0 5.59961 4.5 10.0996 10.0996 10.0996h27.7002c5.5 0 10.1006 -4.5 10.1006 -10.0996v-27.8008c0 -5.59961 -4.5 -10.0996 -10.1006 -10.0996h-27.7002zM168 305.3v21.4004c0 5.09961 4.2002 9.2998 9.2998 9.2998h21.4004
+c5.09961 0 9.2998 -4.2002 9.2998 -9.2998v-21.4004c0 -5.09961 -4.2002 -9.2998 -9.2998 -9.2998h-21.4004c-5.09961 0 -9.2998 4.2002 -9.2998 9.2998zM56 212.5v-25c0 -6.2998 -5.09961 -11.5 -11.4004 -11.5h-25.1992c-6.30078 0 -11.4004 5.2002 -11.4004 11.5v25
+c0 6.2998 5.09961 11.5 11.4004 11.5h25.0996c6.40039 0 11.5 -5.2002 11.5 -11.5z" />
+    <glyph glyph-name="cpanel" unicode="&#xf388;" horiz-adv-x="640" 
+d="M210.3 227.8c6.60059 -29.0996 -14.5 -65.2998 -51.7002 -65.2998h-32l6.40039 23.7998c1.7998 6.2002 7.2998 10.7998 14.2998 10.7998h10.2998c12.4004 0 20.8008 11.7002 18.3008 22.6006c-2.10059 9.2002 -9.90039 14.7998 -18.3008 14.7998h-19.7998
+l-25.7998 -95.7002c-1.90039 -6.2002 -7.40039 -10.7002 -14.2002 -10.7002l-24.7002 -0.0996094l34.9004 130.1c1.7998 6.40039 7.2002 10.9004 14.2998 10.9004h37c24.1006 0 45.4004 -16.4004 51 -41.2002zM53.7998 199.8c-24.8994 0 -24.7002 -37.3994 0 -37.3994
+h11.2998c4.2002 0 7.60059 -3.90039 6.40039 -8.30078l-7.09961 -26.0996h-12.4004c-33.5 0 -59 31.4004 -50.2998 65.2002c7.2998 27 28.2998 41.0996 51.2002 41.0996h40l-6.2002 -23.5996c-1.90039 -6.5 -7.40039 -10.9004 -14.2998 -10.9004h-18.6006zM301.3 234.6
+c18.7998 0 33.2998 -17.5996 28.5 -36.7998l-14 -51.7998c-2.7998 -10.5996 -12.2002 -17.7998 -23.3994 -17.7998l-57.5 0.200195c-42.9004 0 -38.5 63.7998 0.699219 63.7998h48.4004l-3.5 -13.2002c-1.90039 -6.2002 -7.40039 -10.7998 -14.2002 -10.7998h-21.5996
+c-5.2998 0 -5.2998 -7.90039 0 -7.90039h34.8994c4.60059 0 5.10059 3.90039 5.5 5.2998l8.60059 31.8008c0.299805 1 1.89941 5.2998 -2.10059 5.2998h-57.5c-9.69922 0 -16.5996 8.89941 -14.1992 18.5l3.5 13.3994h77.8994zM633.1 269c4.5 0 7.7002 -4 6.5 -8.2998
+l-26.5 -98.2002c-5.09961 -20.7002 -24.1992 -34.5 -44.8994 -34.5l35.5996 133.1c1.2002 4.7002 5.5 7.90039 10.4004 7.90039h18.8994zM396.8 234.3c34.4004 0 59.2998 -32.2998 50.2998 -65.3994l-8.7998 -33.1006c-1.2002 -4.89941 -5.7002 -7.7998 -10.2998 -7.7998
+h-19.0996c-4.5 0 -7.60059 4 -6.40039 8.2998l10.5996 40c3.30078 11.6006 -5.59961 23.4004 -18.0996 23.4004h-19.7998l-17.2002 -64c-1.2002 -4.7998 -5.59961 -7.7998 -10.4004 -7.7998h-18.8994c-4.2002 0 -7.60059 3.89941 -6.40039 8.2998l26.2002 98h48.2998
+v0.0996094zM495.1 159.7h73.3008l-5.7002 -21c-1.90039 -6.2002 -7.40039 -10.7002 -14.2002 -10.7002h-66.7002c-20 0 -33.2998 19 -28.2998 36.7002l10.7998 40c4.7998 17.5996 20.7002 29.5996 38.6006 29.5996h47.2998c19 0 33.2002 -17.7002 28.2998 -36.7998
+l-3.2002 -12c-2.89941 -11 -12.7002 -17.5996 -23.2002 -17.5996h-53.3994l3.5 13c1.59961 6.19922 7.2002 10.7998 14.2002 10.7998h21.5996c2 0 3.2998 1 3.90039 3l0.699219 2.59961c0.700195 2.7002 -1.2998 5.10059 -3.89941 5.10059h-32.9004
+c-4.09961 0 -6.89941 -2.10059 -7.7998 -6l-8 -30c-0.900391 -3.30078 1.5 -6.7002 5.09961 -6.7002z" />
+    <glyph glyph-name="css3-alt" unicode="&#xf38b;" horiz-adv-x="384" 
+d="M0 416h384l-34.9004 -395.8l-157.1 -52.2002l-157.1 52.2002zM313.1 336h-242.199l5.7998 -47.2998h122.899l-6.5 -2.7002l-112.1 -46.7002l3.59961 -46.2998l0.200195 0.0996094v-0.0996094l166.3 -0.5l-3.69922 -61.5996l-54.7002 -15.4004l-52.6006 13.2998
+l-3.19922 38.2998h-48.9004l6.40039 -73.8994l98.7998 -29.2002l98.2002 28.7002l12.7998 146.6h-111.5l0.299805 0.100586l115.3 49.2998z" />
+    <glyph glyph-name="cuttlefish" unicode="&#xf38c;" horiz-adv-x="440" 
+d="M344 142.5c13.7002 -50.9004 41.7002 -93.2998 87 -117.8c-45.2998 -49.6006 -110.5 -80.7002 -183 -80.7002c-137 0 -248 111 -248 248s111 248 248 248c72.5 0 137.7 -31.0996 183 -80.7002c-45.2998 -24.5 -73.2998 -66.8994 -87 -117.8
+c-17.5 31.5996 -57.4004 54.5 -96 54.5c-56.5996 0 -104 -47.4004 -104 -104s47.4004 -104 104 -104c38.5996 0 78.5 22.9004 96 54.5z" />
+    <glyph glyph-name="d-and-d" unicode="&#xf38d;" horiz-adv-x="576" 
+d="M82.5 349.1c-0.599609 17.2002 2 33.8008 12.7002 48.2002c0.299805 -7.39941 1.2002 -14.5 4.2002 -21.5996c5.89941 27.5 19.6992 49.2998 42.2998 65.5c-1.90039 -5.90039 -3.5 -11.7998 -3 -17.7002c8.7002 7.40039 18.7998 17.7998 44.3994 22.7002
+c14.7002 2.7998 29.7002 2 42.1006 -1c38.5 -9.2998 61 -34.2998 69.7002 -72.2998c5.2998 -23.1006 0.699219 -45 -8.30078 -66.4004c-5.19922 -12.4004 -12 -24.4004 -20.6992 -35.0996c-2 1.89941 -3.90039 3.7998 -5.80078 5.59961
+c-42.7998 40.7998 -26.7998 25.2002 -37.3994 37.4004c-1.10059 1.19922 -1 2.19922 -0.100586 3.59961c8.30078 13.5 11.8008 28.2002 10 44c-1.09961 9.7998 -4.2998 18.9004 -11.2998 26.2002c-14.5 15.2998 -39.2002 15 -53.5 -0.600586
+c-11.3994 -12.5 -14.0996 -27.3994 -10.8994 -43.5996c0.199219 -1.2998 0.399414 -2.7002 0 -3.90039c-3.40039 -13.6992 -4.60059 -27.5996 -2.5 -41.5996c0.0996094 -0.5 0.0996094 -1.09961 0.0996094 -1.59961c0 -0.300781 -0.0996094 -0.5 -0.200195 -1.10059
+c-21.7998 11 -36 28.2998 -43.2002 52.2002c-8.2998 -17.7998 -11.0996 -35.5 -6.59961 -54.0996c-15.5996 15.1992 -21.2998 34.2998 -22 55.1992zM552.1 225.9c0.5 -0.600586 1.2002 -1 1.7002 -1.40039v-0.5c-15 3.59961 -29.7998 1.7998 -44.5 -1.2998
+c-9.2998 -2 -18.2998 -4.7002 -26.7002 -9c-2.89941 -1.5 -5.69922 -3.2998 -8 -4.7002c-5.7998 2.40039 -11.2998 5.5 -17.1992 6.7998c-24.5 5.2998 -45.8008 -1.2002 -62.5 -20c-19.7002 -22.2002 -34.5 -47.5996 -46.7002 -74.5l-1.2002 -2.7002
+c-0.0996094 -0.199219 -0.200195 -0.299805 -0.400391 -0.399414c-12.0996 8.2998 -21.5996 20.2998 -36.0996 25.5996c0.299805 0.400391 0.400391 0.900391 0.700195 1.2998c20.5996 28.2002 44.8994 52.5 75.0996 70.4004c16 9.5 33 16.0996 51.5 18.5
+c1.7998 0.200195 3.5 0.400391 5.2998 1.09961c-4.39941 0 -8.7998 0.300781 -13.0996 -0.0996094c-21.2002 -1.90039 -40.5 -9.59961 -58.7002 -20.2002c-13.7998 -8 -26.2002 -17.7002 -36.5996 -29.7998c-0.400391 -0.5 -0.600586 -1.09961 -0.900391 -1.7002
+c-0.299805 0.299805 -0.700195 0.600586 -1 0.900391c11 30.8994 30.7002 55 57.7002 73.2998c0.200195 -0.200195 0.5 -0.299805 0.700195 -0.5c-1.2002 -1.7002 -2.5 -3.2998 -3.5 -5.09961c-1.7998 -3.30078 -3.7002 -6.5 -5.10059 -10
+c-1.7998 -4.30078 1.60059 -8.60059 12 -0.5c18.2002 14.0996 29.6006 26.2998 48.9004 29.5996c0.700195 0.0996094 1.2998 0.299805 1.90039 0.299805h2.5c-1 -0.700195 -1.60059 -1.09961 -2.2002 -1.5c-11.6006 -7.7998 -11.7998 -7.39941 -15 -12
+c-2.60059 -3.7002 -0.200195 -8 4.7002 -6.7998c2.59961 0.599609 5.19922 1.2998 7.69922 2.2002c9.40039 3.2998 19 5.7998 29 6.39941c13.9004 0.800781 27.1006 -1.89941 39.9004 -7.09961c15.0996 -6.2002 28.5 -15 40.0996 -26.5996zM316.7 50.4004
+c1.5 -1.30078 1.89941 -2.40039 0.899414 -4.2002c-25.2998 -50.2002 -61.0996 -89.1006 -116 -98.7998c-26.7998 -4.7002 -52.8994 -2.7002 -77.8994 8.59961c-18.5 8.2002 -34.6006 19.5996 -47.2002 35.5996c-2 2.60059 -3.7002 5.40039 -5.90039 8.60059
+c-0.699219 -7.7998 0.100586 -14.9004 1.5 -21.9004c-0.199219 -0.200195 -0.399414 -0.299805 -0.599609 -0.5c-3.2002 3.40039 -6.59961 6.60059 -9.5 10.2998c-12.2002 15.5 -19.5 33.3008 -24.0996 52.3008c-11.8008 48.2998 -0.5 78.7998 7.7998 101.1
+c-8.7002 -4.7998 -16.2002 -10.2998 -23.6006 -16.2002c11.6006 32.7998 31.9004 59.9004 56.1006 84.6006c2.39941 -2.10059 3.2998 -4.7002 3 -7.40039c-0.200195 -1 -5.90039 -38.9004 -5.60059 -44.7002c18.9004 18.9004 40.5 33.2998 64.8008 43.9004
+c-7.5 -11.1006 -11 -23.4004 -11.8008 -37.2998c13.4004 12.1992 27.7002 20.0996 46.4004 13.8994c-8.5 -9.09961 -30.7998 -30.5 -38.5996 -64.2998c-5.10059 -21.9004 -3.80078 -43.0996 8.19922 -62.5996c11.2002 -18.3008 27.8008 -27.8008 49.4004 -27.8008
+c12.5996 0 23.7998 5 34.0996 11.8008c18.5 12.2998 32.8008 28.5 44 47.5996c1.90039 3.2002 1.10059 2.09961 1.90039 3c19.9004 -16.0996 3.2998 -2.59961 42.7002 -35.5996zM488.7 96.7998c20.2002 -6.59961 35.5 -18.7998 43.7998 -38.8994
+c9.2002 -23.1006 2.09961 -49.4004 -17.4004 -66c-16.3994 -14 -35.6992 -19.2002 -57 -17.4004c-0.599609 0 -1.19922 0 -1.89941 -0.299805c15.0996 -10.7002 31.5996 -15.2002 50.8994 -10.6006c-2.19922 -2.39941 -3.89941 -4.69922 -5.89941 -6.5
+c-12.2998 -10.8994 -26.9004 -16.8994 -42.9004 -19.7998c-39.5996 -7.2998 -75.5996 12.7998 -85 56.9004c-0.5 2.09961 -0.599609 4.2002 -0.899414 6.39941c-10.8008 -8.19922 -16.4004 -34.0996 -0.700195 -52.2998c-1.60059 0.5 -2.60059 0.700195 -3.60059 1.10059
+c-21.2998 8.2998 -34.3994 28.2998 -33.5 51.1992c0.900391 23.2002 4.90039 41 -13 56c-16.5 13.8008 -33 27.4004 -49.5 41.1006c-8.09961 6.7002 -14.7998 14.5 -17 25.0996c-1 4.60059 -1.39941 9.40039 -1.7998 14.1006c-0.5 6.09961 -3.2998 11 -7.89941 14.7998
+c-4.5 3.89941 -9.30078 7.39941 -13.8008 11.2002c-8.89941 7.5 -12.2998 18.8994 -7.2998 29.8994c2.7998 -12.8994 9.60059 -18.8994 22.6006 -20.2998c4.39941 -0.5 8.89941 -0.799805 13.2998 -1.5c8.09961 -1.2002 12.7998 -6.09961 14.2998 -14.2002
+c0.700195 -3.39941 1.2998 -6.7998 2.2002 -10.2002c1.59961 -5.59961 4.5 -8 10.3994 -8.39941c4.60059 -0.299805 9.30078 -0.5 13.9004 -0.900391c7.59961 -0.599609 14.2002 -3.7998 20.0996 -8.7002c19.4004 -16.1992 39 -32.1992 58.5 -48.2998
+c5.7002 -4.7002 12 -8.2002 19.6006 -8.5c16.7002 -0.599609 29 15.2002 24.7998 31.7998c-0.200195 0.700195 -0.400391 1.5 -0.0996094 2.80078c2.39941 -2 4.89941 -3.80078 7 -5.90039c14.0996 -14 18.0996 -39.2998 8.69922 -56.0996
+c-2.09961 -3.80078 -5.2998 -7.10059 -8.09961 -10.8008c0.700195 -0.199219 1.7998 -0.5 3 -0.599609c14 -1.40039 27.2002 1 38.9004 9.09961c15.7998 10.9004 18 31.2002 5.39941 45.6006c-4.7002 5.39941 -8.89941 8 -18.7998 12
+c6.5 1.2998 19.2002 0.200195 28.7002 -2.90039zM99.4004 268.7c-5.30078 9.2002 -13.2002 15.5996 -22.1006 21.2998c13.7002 0.5 26.6006 -0.200195 39.6006 -3.7002c-7 12.2002 -8.5 24.7002 -5 38.7002c5.2998 -11.9004 13.6992 -20.0996 23.5996 -26.7998
+c19.7002 -13.2002 35.7002 -19.6006 46.7002 -30.2002c3.39941 -3.2998 6.2998 -7.09961 9.59961 -10.9004c-0.799805 2.10059 -1.39941 4.10059 -2.2002 6c-5 10.6006 -13 18.6006 -22.5996 25c-1.7998 1.2002 -2.7998 2.5 -3.40039 4.5
+c-3.2998 12.5 -3 25.1006 -0.699219 37.6006c1 5.5 2.7998 10.8994 4.5 16.2998c0.799805 2.40039 2.2998 4.59961 4 6.59961c0.599609 -6.89941 0 -25.5 19.5996 -46c10.7998 -11.2998 22.4004 -21.8994 33.9004 -32.6992c9 -8.5 18.2998 -16.7002 25.5 -26.8008
+c1.09961 -1.59961 2.19922 -3.2998 3.7998 -4.69922c-5 13 -14.2002 24.0996 -24.2002 33.7998c-9.59961 9.2998 -19.4004 18.3994 -29.2002 27.3994c-3.2998 3 -4.59961 6.7002 -5.09961 10.9004c-1.2002 10.4004 0 20.5996 4.2998 30.2002c0.5 1 1.09961 2 1.90039 3.2998
+c0.5 -4.2002 0.599609 -7.90039 1.39941 -11.5996c4.7998 -23.1006 20.4004 -36.3008 49.2998 -63.5c10 -9.40039 19.3008 -19.2002 25.6006 -31.6006c4.7998 -9.2998 7.2998 -19 5.7002 -29.5996c-0.100586 -0.600586 0.5 -1.7002 1.09961 -2
+c6.2002 -2.60059 10 -6.90039 9.7002 -14.2998c7.7002 2.59961 12.5 8 16.3994 14.5c4.2002 -20.2002 -9.09961 -50.3008 -27.1992 -58.7002c0.399414 4.5 5 23.3994 -16.5 27.7002c-6.80078 1.2998 -12.8008 1.2998 -22.9004 2.09961c4.7002 9 10.4004 20.5996 0.5 22.4004
+c-24.9004 4.59961 -52.7998 -1.90039 -57.7998 -4.60059c8.2002 -0.399414 16.2998 -1 23.5 -3.2998c-2 -6.5 -4 -12.7002 -5.7998 -18.9004c-1.90039 -6.5 2.09961 -14.5996 9.2998 -9.59961c1.2002 0.900391 2.2998 1.90039 3.2998 2.7002
+c-3.09961 -17.9004 -2.90039 -15.9004 -2.7998 -18.2998c0.299805 -10.2002 9.5 -7.80078 15.7002 -7.30078c-2.5 -11.7998 -29.5 -27.2998 -45.4004 -25.7998c7 4.7002 12.7002 10.2998 15.9004 17.9004c-6.5 -0.799805 -12.9004 -1.60059 -19.2002 -2.40039
+l-0.299805 0.900391c4.69922 3.39941 8 7.7998 10.1992 13.0996c8.7002 21.1006 -3.59961 38 -25 39.9004c-9.09961 0.799805 -17.7998 -0.799805 -25.8994 -5.5c6.2002 15.5996 17.2002 26.5996 32.5996 34.5c-15.2002 4.2998 -8.89941 2.7002 -24.5996 6.2998
+c14.5996 9.2998 30.2002 13.2002 46.5 14.5996c-5.2002 3.2002 -48.1006 3.60059 -70.2002 -20.8994c7.90039 -1.40039 15.5 -2.7998 23.2002 -4.2002c-23.7998 -7 -44 -19.7002 -62.4004 -35.5996c1.10059 4.7998 2.7002 9.5 3.2998 14.2998
+c0.600586 4.5 0.800781 9.2002 0.100586 13.5996c-1.5 9.40039 -8.90039 15.1006 -19.7002 16.2998c-7.90039 0.900391 -15.5996 -0.0996094 -23.2998 -1.2998c-0.900391 -0.0996094 -1.7002 -0.299805 -2.90039 0c15.7998 14.7998 36 21.7002 53.1006 33.5
+c6 4.5 6.7998 8.2002 3 14.9004zM227.8 241.9c3.2998 -16 12.6006 -25.5 23.7998 -24.3008c-4.59961 11.3008 -12.0996 19.5 -23.7998 24.3008z" />
+    <glyph glyph-name="deploydog" unicode="&#xf38e;" horiz-adv-x="512" 
+d="M382.2 312h51.7002v-239.6h-51.7002v20.6992c-19.7998 -24.7998 -52.7998 -24.0996 -73.7998 -14.6992c-26.2002 11.6992 -44.3008 38.0996 -44.3008 71.7998c0 29.7998 14.8008 57.8994 43.3008 70.7998c20.1992 9.09961 52.6992 10.5996 74.7998 -12.9004v103.9z
+M317.5 150.2c0 -18.2002 13.5996 -33.5 33.2002 -33.5c19.7998 0 33.2002 16.3994 33.2002 32.8994c0 17.1006 -13.7002 33.2002 -33.2002 33.2002c-19.6006 0 -33.2002 -16.3994 -33.2002 -32.5996zM188.5 312h51.7002v-239.6h-51.7002v20.6992
+c-19.7998 -24.7998 -52.7998 -24.0996 -73.7998 -14.6992c-26.2002 11.6992 -44.2998 38.0996 -44.2998 71.7998c0 29.7998 14.7998 57.8994 43.2998 70.7998c20.2002 9.09961 52.7002 10.5996 74.7998 -12.9004v103.9zM123.8 150.2c0 -18.2002 13.6006 -33.5 33.2002 -33.5
+c19.7998 0 33.2002 16.3994 33.2002 32.8994c0 17.1006 -13.7002 33.2002 -33.2002 33.2002c-19.7002 0 -33.2002 -16.3994 -33.2002 -32.5996zM448 352h-384c-17.5996 0 -32 -14.5 -32 -32v-256c0 -17.5996 14.5 -32 32 -32h384c17.5996 0 32 14.5 32 32v256
+c0 17.5996 -14.5 32 -32 32zM448 384c35.2002 0 64 -28.7998 64 -64v-256c0 -35.2002 -28.7998 -64 -64 -64h-384c-35.2002 0 -64 28.7998 -64 64v256c0 35.2002 28.7998 64 64 64h384z" />
+    <glyph glyph-name="deskpro" unicode="&#xf38f;" horiz-adv-x="480" 
+d="M205.9 -64l31.0996 38.4004c12.2998 0.199219 25.5996 1.39941 36.5 6.59961c38.9004 18.5996 38.4004 61.9004 38.2998 63.7998c-0.0996094 5 -0.799805 4.40039 -28.8994 37.4004h79.0996c-0.200195 -50.1006 -7.2998 -68.5 -10.2002 -75.7002
+c-9.39941 -23.7002 -43.8994 -62.7998 -95.2002 -69.4004c-8.69922 -1.09961 -32.7998 -1.19922 -50.6992 -1.09961zM406.3 103.7l-119.2 -0.100586l17.4004 31.3008l175.5 -0.300781c-15.2002 -17.2998 -35.0996 -30.8994 -73.7002 -30.8994zM362.7 327.6v-168.3h-73.5
+l-32.7002 -55.5h-6.5c-52.2998 0 -58.0996 56.5 -58.2998 58.9004c-1.2002 13.2002 -21.2998 11.5996 -20.1006 -1.7998c1.40039 -15.8008 8.80078 -40 26.4004 -57.1006h-91c-25.5 0 -110.8 26.7998 -107 114v213.3c0 16 9.7002 16.6006 15 16.8008h82
+c0.200195 0 0.299805 -0.100586 0.5 -0.100586c4.2998 0.400391 50.0996 2.10059 50.0996 -43.7002c0 -13.2998 20.2002 -13.3994 20.2002 0c0 18.2002 -5.5 32.8008 -15.7998 43.7002h84.2002c108.7 0.400391 126.5 -79.3994 126.5 -120.2zM230.2 271.6l64 -29.2998
+c13.2998 45.5 -42.2002 71.7002 -64 29.2998z" />
+    <glyph glyph-name="digital-ocean" unicode="&#xf391;" horiz-adv-x="512" 
+d="M87 -33.7998v73.5996h73.7002v-73.5996h-73.7002zM25.4004 101.4h61.5996v-61.6006h-61.5996v61.6006zM491.6 271.1c53.2002 -170.3 -73 -327.1 -235.6 -327.1v95.7998h0.299805v0.299805c101.7 0.200195 180.5 101 141.4 208
+c-14.2998 39.6006 -46.1006 71.4004 -85.7998 85.7002c-107.101 38.7998 -208.101 -39.8994 -208.101 -141.7h-95.7998c0 162.2 156.9 288.7 327 235.601c74.2002 -23.2998 133.6 -82.4004 156.6 -156.601zM256.3 40.0996h-0.299805v-0.299805h-95.2998v95.6006h95.5996
+v-95.3008z" />
+    <glyph glyph-name="discord" unicode="&#xf392;" 
+d="M297.216 204.8c0 -15.6162 -11.5195 -28.416 -26.1123 -28.416c-14.3359 0 -26.1113 12.7998 -26.1113 28.416s11.5195 28.416 26.1113 28.416c14.5928 0 26.1123 -12.7998 26.1123 -28.416zM177.664 233.216c14.5918 0 26.3682 -12.7998 26.1123 -28.416
+c0 -15.6162 -11.5205 -28.416 -26.1123 -28.416c-14.3359 0 -26.1123 12.7998 -26.1123 28.416s11.5205 28.416 26.1123 28.416zM448 395.264v-459.264c-64.4941 56.9941 -43.8682 38.1279 -118.784 107.776l13.5684 -47.3604h-290.304
+c-28.9287 0 -52.4805 23.5518 -52.4805 52.7363v346.111c0 29.1846 23.5518 52.7363 52.4805 52.7363h343.039c28.9287 0 52.4805 -23.5518 52.4805 -52.7363zM375.04 152.576c0 82.4316 -36.8643 149.248 -36.8643 149.248
+c-36.8643 27.6475 -71.9355 26.8799 -71.9355 26.8799l-3.58398 -4.0957c43.5195 -13.3125 63.7441 -32.5127 63.7441 -32.5127c-60.8115 33.3291 -132.244 33.335 -191.232 7.42383c-9.47168 -4.35156 -15.1035 -7.42383 -15.1035 -7.42383
+s21.2471 20.2246 67.3271 33.5361l-2.55957 3.07227s-35.0723 0.767578 -71.9355 -26.8799c0 0 -36.8643 -66.8164 -36.8643 -149.248c0 0 21.5039 -37.1201 78.0801 -38.9121c0 0 9.47168 11.5195 17.1514 21.248c-32.5117 9.72754 -44.7998 30.208 -44.7998 30.208
+c3.7666 -2.63574 9.97656 -6.05273 10.4961 -6.40039c43.21 -24.1973 104.588 -32.126 159.744 -8.95996c8.95996 3.32812 18.9443 8.19238 29.4395 15.1045c0 0 -12.7998 -20.9922 -46.3359 -30.4639c7.68066 -9.72852 16.8965 -20.7363 16.8965 -20.7363
+c56.5762 1.79199 78.3359 38.9121 78.3359 38.9121z" />
+    <glyph glyph-name="discourse" unicode="&#xf393;" 
+d="M225.9 416c122.699 0 222.1 -102.3 222.1 -223.9c0 -121.6 -99.4004 -223.899 -222.1 -223.899l-225.801 -0.200195s-0.0996094 224 -0.0996094 227.9c0 121.6 103.3 220.1 225.9 220.1zM224 64c70.7002 0 128 57.2998 128 128s-57.2998 128 -128 128
+s-128 -57.2998 -128 -128c0 -22.0996 5.59961 -42.9004 15.4004 -61l-22.9004 -75l81.0996 20.0996c16.5 -7.7998 35 -12.0996 54.4004 -12.0996z" />
+    <glyph glyph-name="dochub" unicode="&#xf394;" horiz-adv-x="416" 
+d="M397.9 288h-141.9v140.4zM304 256h96v-126.1c0 -129.301 -70.2998 -193.9 -210.8 -193.9h-189.2v512h189.2c12.2002 0 23.7002 -1.09961 34.5996 -3.2998v-84c-10 1.7002 -21.0996 2.5 -33.0996 2.5h-94.7002v-337.3h94.7002c76.7998 0 113.3 33.2998 113.3 100.1v130z
+" />
+    <glyph glyph-name="docker" unicode="&#xf395;" horiz-adv-x="640" 
+d="M349.9 211.7h-66.1006v59.3994h66.1006v-59.3994zM349.9 416v-60.7002h-66.1006v60.7002h66.1006zM428.1 271.2v-59.4004h-66.0996v59.4004h66.0996zM271.8 343.3v-60.0996h-66.0996v60.0996h66.0996zM349.9 343.3v-60.0996h-66.1006v60.0996h66.1006zM626.7 243.3
+l13.2998 -8.89941c-1.90039 -3.90039 -7 -14.6006 -8.5 -17.1006c-23.7002 -45.2998 -69.9004 -45.5996 -91.2998 -45.2002c-54.5 -131.699 -171 -204.199 -328.4 -204.199c-72.7002 0 -128.3 22.2998 -165.399 66.1992c-38.2002 45.3008 -52.7002 111.301 -44 162.101
+h434.699c22.6006 -0.400391 39.7002 6 48.4004 10.7002c-19.7002 30.1992 -14.7002 76 3.7002 103.8l9.2998 14l14 -9.2998c24.4004 -18.8008 37.7998 -39.7002 41.0996 -63.7002c25.5 4.7998 58.7002 1.2998 73.1006 -8.40039zM115.6 271.2h0.100586v-59.4004h-66.1006
+v59.4004h66zM193.7 271.2v-59.4004h-66.1006v59.4004h66.1006zM271.8 271.2v-59.4004h-66.0996v59.4004h66.0996zM193.7 343.3v-60.0996h-66.1006v60.0996h66.1006z" />
+    <glyph glyph-name="draft2digital" unicode="&#xf396;" horiz-adv-x="480" 
+d="M480 49.9004l-144 -81.9004v64.2002l-336 -0.100586c18.2998 19.1006 84.5 87.8008 161.1 174.801c32.6006 37.1992 78 83.2998 69.7002 127.6c-5.2998 28.2998 -42.2002 50.7998 -83.2998 33.5c-8.59961 -3.59961 -24.5 -17.4004 -26.2998 -24.7002
+c28.2998 -4.7002 48 -29.7002 48 -56.7998c0 -31.7002 -25.6006 -57.4004 -57.2998 -57.4004c-37.3008 0 -62.2002 34.1006 -56.7002 67.1006c1.2002 7.89941 5.09961 26.7998 18.2002 47.7002c14.8994 23.8994 45.1992 54.8994 104.3 67.2998
+c103.8 21.7002 161.6 -36.6006 166 -41.2002c28.8994 -29.9004 48 -90.7002 12.7998 -153.3c-30 -53.4004 -81 -114.3 -111.8 -149.3h91.2998v64.6992zM369.9 77v-54.4004l47.0996 27.2002zM134.2 286.6c0 12.3008 -10 22.4004 -22.4004 22.4004
+c-12.3994 0 -22.3994 -10 -22.3994 -22.4004c0 -12.3994 10 -22.3994 22.3994 -22.3994c12.4004 0 22.4004 10 22.4004 22.3994zM82.5 67.5h114.4c17.5996 19.2002 91.5 100.8 128.5 166.7c36.5996 65.0996 -5.80078 113.3 -5.80078 113.3
+c-14.1992 14.9004 -36.8994 36.2002 -82.1992 38.2998c6.7998 -5.5 16.8994 -16.8994 24.2998 -35.7002c11.8994 -30.2998 6.7002 -69.5996 -28.4004 -112.699c-53.0996 -65.2002 -125.2 -142.5 -150.8 -169.9z" />
+    <glyph glyph-name="dribbble-square" unicode="&#xf397;" 
+d="M90.2002 219.8c8.89941 42.4004 37.3994 77.7002 75.7002 95.7002c3.59961 -4.90039 28 -38.7998 50.6992 -79c-64 -17 -120.3 -16.7998 -126.399 -16.7002zM314.6 294c-2.5 -3.5 -23 -31.0996 -71.5996 -49.4004c-22.4004 41.1006 -47.2002 74.9004 -51 80
+c43.2998 10.5 89 -0.799805 122.6 -30.5996zM140.1 84c14.3008 29.2002 53 66.7998 108.101 85.5996c19.2002 -49.7998 27.2002 -91.5996 29.2002 -103.6c-44 -18.7002 -96.8008 -13.5996 -137.301 18zM238.9 192.2c-49.4004 -13.9004 -94.3008 -53.9004 -116.5 -91.7998
+c-21.8008 24.2998 -35.1006 56.2998 -35.1006 91.3994c0 1.40039 0.100586 2.7998 0.100586 4.2002c6 -0.200195 72.1992 -1 140.399 19.4004c3.90039 -7.7002 7.7002 -15.4004 11.1006 -23.2002zM273.8 175.9c42.7998 6.89941 80.5 -4.30078 85.1006 -5.80078
+c-6.10059 -38 -27.9004 -70.8994 -58.6006 -91.5996c-1.39941 8.2998 -8.59961 48.2998 -26.5 97.4004zM253.5 224.3c50.5 20.7002 73.4004 50 76.2998 53.9004c19.1006 -23.2002 30.6006 -52.7998 30.9004 -85.1006c-4.5 1 -49.7002 10.1006 -95.2002 4.40039
+c-3.7002 9 -7.2002 17 -12 26.7998zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352c26.5 0 48 -21.5 48 -48zM384 192c0 88.2002 -71.7998 160 -160 160s-160 -71.7998 -160 -160s71.7998 -160 160 -160
+s160 71.7998 160 160z" />
+    <glyph glyph-name="dyalog" unicode="&#xf399;" horiz-adv-x="416" 
+d="M0 416h171.2c74.5 0 137.7 -24 182.5 -69.5996c40.2002 -40.9004 62.2998 -95.6006 62.2998 -154.301c0 -111.399 -84.0996 -224.1 -244.8 -224.1h-171.2v64h171.2c122.2 0 180.8 84 180.8 160.1c0 79.7002 -67.4004 159.9 -180.8 159.9h-107.2v-55.2002h-64v119.2z" />
+    <glyph glyph-name="earlybirds" unicode="&#xf39a;" horiz-adv-x="480" 
+d="M313.2 400.5c1.2002 13 21.2998 14 36.5996 8.7002c0.900391 -0.299805 26.2002 -9.7002 19 -15.2002c-27.8994 7.40039 -56.3994 -18.2002 -55.5996 6.5zM112.2 393.6c-7.7998 6.2002 19.8994 16.4004 20.8994 16.7002c16.8008 5.7002 38.9004 4.60059 40.2002 -9.59961
+c0.900391 -27.1006 -30.3994 1 -61.0996 -7.10059zM319.4 288c8.7998 0 16 -7.2002 16 -16s-7.2002 -16 -16 -16c-8.80078 0 -16 7.2002 -16 16s7.19922 16 16 16zM159.7 288c8.7998 0 16 -7.2002 16 -16s-7.2002 -16 -16 -16s-16 7.2002 -16 16s7.2002 16 16 16z
+M478.2 124.8c-9.90039 -24 -40.7002 -11 -63.9004 1.2002c-13.5 -69.0996 -58.0996 -111.4 -126.3 -124.2c0.299805 -0.899414 -2 0.100586 24 -1c33.5996 -1.39941 63.7998 3.10059 97.4004 8c-19.8008 13.7998 -11.4004 37.1006 -9.80078 38.1006
+c1.40039 0.899414 14.7002 -1.7002 21.6006 -11.5c8.59961 12.5 28.3994 14.7998 30.2002 13.5996c1.59961 -1.09961 6.59961 -20.9004 -6.90039 -34.5996c4.7002 0.899414 8.2002 1.59961 9.7998 2.09961c2.60059 0.799805 17.7002 -11.2998 3.10059 -13.2998
+c-14.3008 -2.2998 -22.6006 -5.10059 -47.1006 -10.7998c-45.8994 -10.7002 -85.8994 -11.8008 -117.7 -12.8008l1 -11.5996c3.80078 -18.0996 -23.3994 -24.2998 -27.5996 -6.2002c0.799805 -17.8994 -27.0996 -21.7998 -28.4004 1l-0.5 -5.2998
+c-0.699219 -18.4004 -28.3994 -17.9004 -28.2998 0.599609c-7.5 -13.5 -28.0996 -6.7998 -26.3994 8.5l1.19922 12.4004c-36.6992 -0.900391 -59.6992 -3.09961 -61.7998 -3.09961c-20.8994 0 -20.8994 31.5996 0 31.5996c2.40039 0 27.7002 -1.2998 63.2002 -2.7998
+c-61.0996 15.5 -103.7 55 -114.9 118.2c-25 -12.8008 -57.5 -26.8008 -68.1992 -0.800781c-10.5 25.4004 21.5 42.6006 66.7998 73.4004c0.700195 6.59961 1.59961 13.2998 2.7002 19.7998c-14.4004 19.6006 -11.6006 36.2998 -16.1006 60.4004
+c-16.7998 -2.40039 -23.2002 9.09961 -23.5996 23.0996c0.299805 7.2998 2.09961 14.9004 2.39941 15.4004c1.10059 1.7998 10.1006 2 12.7002 2.59961c6 31.7002 50.6006 33.2002 90.9004 34.5c19.7002 21.7998 45.2002 41.5 80.8994 48.2998
+c-15.2998 19.4004 -3.39941 39.9004 -2.39941 40.4004c1.7002 0.799805 21.2002 -4.2998 26.2998 -23.2002c5.2002 8.7998 18.2998 11.4004 19.5996 10.7002c1.10059 -0.599609 6.40039 -15 -4.89941 -25.9004c40.2998 -3.5 72.2002 -24.6992 96 -50.6992
+c36.0996 -1.5 71.7998 -5.90039 77.0996 -34c2.7002 -0.600586 11.6006 -0.800781 12.7002 -2.60059c0.299805 -0.5 2.09961 -8.09961 2.40039 -15.3994c-0.5 -13.9004 -6.80078 -25.4004 -23.6006 -23.1006c-3.2002 -17.2998 -2.7002 -32.8994 -8.7002 -47.7002
+c2.40039 -11.6992 4 -23.7998 4.80078 -36.3994c37 -25.4004 70.2998 -42.5 60.2998 -66.9004zM207.4 288.1c0.899414 44 -37.9004 42.2002 -78.6006 40.3008c-21.7002 -1 -38.8994 -1.90039 -45.5 -13.9004c-11.3994 -20.9004 5.90039 -92.9004 23.2002 -101.2
+c9.7998 -4.7002 73.4004 -7.89941 86.2998 7.10059c8.2002 9.39941 15 49.3994 14.6006 67.6992zM259.4 229.8c-4.30078 12.4004 -6 30.1006 -15.3008 32.7002c-2 0.5 -9 0.5 -11 0c-10 -2.7998 -10.7998 -22.0996 -17 -37.2002c15.4004 0 19.3008 -9.7002 23.7002 -9.7002
+c4.2998 0 6.2998 11.3008 19.6006 14.2002zM395.1 314.5c-6.59961 12.0996 -24.7998 12.9004 -46.5 13.9004c-40.1992 1.89941 -78.1992 3.7998 -77.2998 -40.3008c-0.5 -18.2998 5 -58.2998 13.2002 -67.7998c13 -14.8994 76.5996 -11.7998 86.2998 -7.09961
+c15.7998 7.59961 36.5 78.8994 24.2998 101.3z" />
+    <glyph glyph-name="erlang" unicode="&#xf39d;" horiz-adv-x="640" 
+d="M87.2002 394.5c-41.5 -50.2002 -65.6006 -116.2 -65.5 -192.9c-0.100586 -86.7998 29 -159.5 78.7002 -212.1h-100.4v405h87.2002zM325.4 384.8c46.1992 -0.0996094 79.5996 -33.5 80.6992 -83.2002h-169.899c4.09961 49.7002 43.2998 83.1006 89.2002 83.2002z
+M556.1 394.4h0.300781l-0.100586 0.0996094zM556.4 394.4h83.5996v-405h-80.7998c21.3994 23 40.5 49.8994 57.8994 80.7998l-96.3994 48.2002c-33.9004 -55.1006 -83.4004 -105.801 -151.9 -106.101c-99.7002 0.400391 -138.8 85.6006 -138.6 195.3h372.399
+c0.5 12.4004 0.5 18.1006 0 24.1006c2.5 65.2002 -14.7998 120 -46.1992 162.7z" />
+    <glyph glyph-name="facebook-f" unicode="&#xf39e;" horiz-adv-x="320" 
+d="M279.14 160h-74.6895v-224h-100.17v224h-81.3906v92.6602h81.3906v70.6201c0 80.3398 47.8594 124.72 121.08 124.72c35.0693 0 71.75 -6.25977 71.75 -6.25977v-78.8906h-40.4199c-39.8203 0 -52.2402 -24.71 -52.2402 -50.0596v-60.1299h88.9102z" />
+    <glyph glyph-name="facebook-messenger" unicode="&#xf39f;" horiz-adv-x="512" 
+d="M256.55 440c140.04 0 247.45 -102.34 247.45 -240.57c0 -175.13 -166.15 -273.229 -319.44 -231.04c-8.96973 2.44043 -9.64941 0.600586 -62.5596 -22.6992c-2.10449 -0.918945 -5.67578 -1.66504 -7.97168 -1.66504c-10.624 0 -19.543 8.61719 -19.9082 19.2344
+c-1.41992 46.3701 0.299805 50.7207 -8.0498 58.2305c-48.3604 43.1602 -78.0703 105.64 -78.0703 177.939c0 138.23 108.52 240.57 248.55 240.57zM405.79 254.87c7.0498 11.0801 -6.65039 23.5996 -17.0898 15.6201l-78.4102 -59.3799
+c-2.20801 -1.65625 -6.24023 -3 -9 -3s-6.79199 1.34375 -9 3l-58.0596 43.46c-5.48926 4.09961 -15.5049 7.42676 -22.3564 7.42676c-11.3438 0 -25.4805 -7.77637 -31.5537 -17.3574l-73 -115.569c-7.05078 -11.0703 6.64941 -23.6006 17.1094 -15.6699l78.3701 59.4395
+c2.20801 1.65625 6.24023 3 9 3s6.79199 -1.34375 9 -3l58.0801 -43.4697c5.48926 -4.09766 15.5039 -7.42285 22.3535 -7.42285c11.3428 0 25.4805 7.77441 31.5566 17.3525z" />
+    <glyph glyph-name="firstdraft" unicode="&#xf3a1;" horiz-adv-x="384" 
+d="M384 256h-64v-128h-128v-128h-192v25.5996h166.4v128h128v128h89.5996v-25.5996zM358.4 217.6h25.5996v-153.6h-128v-128h-192v25.5996h166.4v128h128v128zM384 25.5996v-25.5996h-64v-64h-25.5996v89.5996h89.5996zM0 448h384v-128h-128v-128h-128v-128h-128v384z" />
+    <glyph glyph-name="fonticons-fi" unicode="&#xf3a2;" horiz-adv-x="384" 
+d="M114.4 224h92.3994l-15.2002 -51.2002h-76.3994v-157.8c0 -8 -2.7998 -9.2002 4.39941 -10l59.6006 -5.59961v-34.4004h-179.2v35.2002l29.2002 2.7998c7.2002 0.799805 9.2002 3.2002 9.2002 10.7998v155.8c0 3.2002 -4 3.2002 -8 3.2002h-30.4004v51.2002h38.4004
+v28.7998c0 68 36.3994 96 106 96c46.7998 0 88.7998 -11.2002 88.7998 -72.3994l-69.6006 -8.40039c0.400391 25.5996 -6 31.5996 -22.3994 31.5996c-25.2002 0 -26 -13.5996 -26 -37.5996v-32c0 -3.2002 -4.7998 -6 -0.799805 -6zM384 -35h-140.8v34.4004l28 3.59961
+c7.2002 0.799805 10.3994 2.40039 10.3994 10v148c0 5.59961 -4 9.2002 -9.19922 10.7998l-33.2002 8.7998l9.2002 40.4004h110v-208c0 -8 -3.60059 -8.7998 4 -10l21.5996 -3.59961v-34.4004zM354 312.2l12.4004 -45.6006l-10 -10l-42.8008 22.8008l-42.7998 -22.8008
+l-10 10l12.4004 45.6006l-30 36.3994l4.7998 10h38l21.2002 38.4004h12.7998l21.2002 -38.4004h38l4.7998 -13.1992z" />
+    <glyph glyph-name="fort-awesome-alt" unicode="&#xf3a3;" horiz-adv-x="512" 
+d="M208 210.6c2.09961 0 3.7002 -1.59961 3.7002 -3.69922v-51.7002c0 -2.10059 -1.60059 -3.7002 -3.7002 -3.7002h-22.2002c-2.09961 0 -3.7002 1.59961 -3.7002 3.7002v51.7002c0 2.09961 1.60059 3.69922 3.7002 3.69922h22.2002zM326.2 210.6
+c2 0 3.59961 -1.59961 3.7002 -3.69922v-51.7002c0 -2.10059 -1.60059 -3.7002 -3.7002 -3.7002h-22.2002c-2.09961 0 -3.7002 1.59961 -3.7002 3.7002v51.7002c0 2.09961 1.60059 3.69922 3.7002 3.69922h22.2002zM458.2 335.7
+c28.8994 -40.7002 45.7998 -90.2002 45.7998 -143.7c0 -2 0 -4 -0.0996094 -6c0 -0.700195 0 -1.2998 -0.100586 -2c0 -1.2998 -0.0996094 -2.7002 -0.200195 -4c0 -0.799805 -0.0996094 -1.5 -0.0996094 -2.2998
+c-0.0996094 -1.2002 -0.0996094 -2.40039 -0.200195 -0.700195c-0.0996094 -0.799805 -0.0996094 -1.59961 -0.200195 -2.40039c-0.0996094 -1.19922 -0.199219 -2.39941 -0.299805 -3.5c-0.0996094 -0.799805 -0.200195 -1.59961 -0.200195 -2.39941
+c-0.0996094 -1.2002 -0.299805 -2.40039 -0.399414 -3.60059c-0.100586 -0.799805 -0.200195 -1.5 -0.299805 -2.2998c-0.200195 -1.2998 -0.400391 -2.59961 -0.5 -3.89941c-0.100586 -0.600586 -0.200195 -1.30078 -0.300781 -1.90039l-0.899414 -5.7002
+c-0.100586 -0.599609 -0.200195 -1.09961 -0.299805 -1.7002c-0.200195 -1.2998 -0.5 -2.69922 -0.800781 -4c-0.199219 -0.799805 -0.299805 -1.59961 -0.5 -2.39941c-0.199219 -1.10059 -0.5 -2.2002 -0.699219 -3.2002
+c-0.200195 -0.900391 -0.400391 -1.7002 -0.600586 -2.59961c-0.200195 -1 -0.5 -2 -0.700195 -3c-0.199219 -0.900391 -0.5 -1.80078 -0.699219 -2.7002c-0.300781 -1 -0.5 -1.90039 -0.800781 -2.90039c-0.199219 -0.899414 -0.5 -1.7998 -0.799805 -2.7002
+c-0.299805 -0.899414 -0.599609 -1.89941 -0.799805 -2.7998c-0.299805 -0.899414 -0.5 -1.7998 -0.799805 -2.7002c-0.299805 -0.899414 -0.600586 -1.7998 -0.900391 -2.7998c-0.5 -1.59961 -1.09961 -3.2998 -1.7002 -4.89941
+c-0.299805 -0.900391 -0.599609 -1.80078 -1 -2.80078c-0.399414 -1 -0.699219 -2 -1.09961 -3c-0.299805 -0.799805 -0.599609 -1.5 -0.900391 -2.2998l-1.19922 -3c-0.300781 -0.700195 -0.600586 -1.5 -0.900391 -2.2002c-0.400391 -1 -0.799805 -2 -1.2998 -3
+l-0.900391 -2.09961c-0.399414 -1 -0.899414 -2 -1.39941 -3c-0.300781 -0.700195 -0.600586 -1.2998 -0.900391 -2c-0.5 -1 -1 -2.09961 -1.5 -3.09961c-0.299805 -0.600586 -0.599609 -1.10059 -0.799805 -1.7002c-0.600586 -1.10059 -1.10059 -2.2002 -1.7002 -3.2998
+c-0.0996094 -0.200195 -0.200195 -0.300781 -0.299805 -0.5c-2.2002 -4.10059 -4.40039 -8.2002 -6.7998 -12.2002c-0.200195 -0.400391 -0.5 -0.799805 -0.700195 -1.2002c-0.700195 -1.09961 -1.2998 -2.2002 -2 -3.2998
+c-0.299805 -0.5 -0.600586 -0.900391 -0.900391 -1.40039c-0.700195 -1.09961 -1.39941 -2.09961 -2 -3.2002c-0.299805 -0.5 -0.599609 -0.899414 -0.899414 -1.39941c-0.700195 -1.10059 -1.40039 -2.10059 -2.10059 -3.2002
+c-0.299805 -0.400391 -0.599609 -0.799805 -0.799805 -1.2002c-0.799805 -1.09961 -1.5 -2.2002 -2.2998 -3.2998c-0.200195 -0.200195 -0.299805 -0.5 -0.5 -0.700195c-37.6006 -54.7002 -94.5 -91.3994 -160.101 -102.399
+c-0.899414 -0.100586 -1.69922 -0.300781 -2.59961 -0.400391c-1 -0.200195 -2.09961 -0.299805 -3.09961 -0.5c-0.900391 -0.0996094 -1.80078 -0.299805 -2.80078 -0.400391c-1 -0.0996094 -2 -0.299805 -3 -0.399414c-1 -0.100586 -2 -0.200195 -2.89941 -0.299805
+c-1 -0.100586 -1.90039 -0.200195 -2.90039 -0.300781c-1 -0.0996094 -2.09961 -0.199219 -3.09961 -0.299805c-0.900391 -0.0996094 -1.7998 -0.200195 -2.7002 -0.200195c-1.09961 -0.0996094 -2.2998 -0.0996094 -3.40039 -0.199219
+c-0.799805 0 -1.69922 -0.100586 -2.5 -0.100586c-1.2998 -0.0996094 -2.59961 -0.0996094 -3.89941 -0.0996094c-0.700195 0 -1.40039 -0.100586 -2.10059 -0.100586c-2 0 -4 -0.0996094 -6 -0.0996094s-4 0 -6 0.0996094c-0.699219 0 -1.39941 0 -2.09961 0.100586
+c-1.2998 0 -2.59961 0.0996094 -3.90039 0.0996094c-0.799805 0 -1.69922 0.100586 -2.5 0.100586c-1.09961 0.0996094 -2.2998 0.0996094 -3.39941 0.199219c-0.900391 0.100586 -1.7998 0.100586 -2.7002 0.200195c-1 0.100586 -2.09961 0.200195 -3.09961 0.299805
+c-1 0.100586 -1.90039 0.200195 -2.90039 0.300781c-1 0.0996094 -2 0.199219 -2.90039 0.299805c-1 0.0996094 -2 0.200195 -3 0.399414c-0.899414 0.100586 -1.7998 0.300781 -2.7998 0.400391s-2.09961 0.299805 -3.09961 0.5
+c-0.900391 0.0996094 -1.7002 0.299805 -2.60059 0.400391c-65.5996 10.8994 -122.5 47.6992 -160 99.3994c-0.199219 0.200195 -0.299805 0.5 -0.5 0.700195c-0.799805 1.09961 -1.59961 2.2002 -2.2998 3.2998c-0.299805 0.400391 -0.599609 0.799805 -0.799805 1.2002
+c-0.700195 1.09961 -1.40039 2.09961 -2.09961 3.2002c-0.300781 0.5 -0.600586 0.899414 -0.900391 1.39941c-0.700195 1.10059 -1.40039 2.10059 -2 3.2002c-0.299805 0.5 -0.599609 0.900391 -0.900391 1.40039c-0.699219 1.09961 -1.2998 2.2002 -2 3.2998
+c-0.199219 0.400391 -0.5 0.799805 -0.699219 1.2002c-2.40039 4 -4.60059 8.09961 -6.80078 12.2002c-0.0996094 0.199219 -0.199219 0.299805 -0.299805 0.5c-0.599609 1.09961 -1.09961 2.19922 -1.7002 3.2998c-0.299805 0.599609 -0.599609 1.09961 -0.799805 1.7002
+c-0.5 1 -1 2.09961 -1.5 3.09961c-0.299805 0.700195 -0.599609 1.2998 -0.899414 2c-0.5 1 -0.900391 2 -1.40039 3l-0.900391 2.09961c-0.399414 1 -0.899414 2 -1.2998 3c-0.299805 0.700195 -0.599609 1.5 -0.899414 2.2002l-1.2002 3
+c-0.299805 0.799805 -0.600586 1.5 -0.900391 2.2998c-0.399414 1 -0.799805 2 -1.09961 3c-0.299805 0.900391 -0.600586 1.80078 -1 2.80078c-0.600586 1.59961 -1.10059 3.2998 -1.7002 4.89941c-0.299805 0.900391 -0.599609 1.7998 -0.900391 2.7998
+c-0.299805 0.900391 -0.5 1.80078 -0.799805 2.7002c-0.299805 0.900391 -0.599609 1.90039 -0.799805 2.7998c-0.299805 0.900391 -0.5 1.80078 -0.799805 2.7002c-0.299805 1 -0.5 1.90039 -0.799805 2.90039c-0.200195 0.899414 -0.5 1.7998 -0.700195 2.7002
+c-0.299805 1 -0.5 2 -0.700195 3c-0.200195 0.899414 -0.400391 1.69922 -0.599609 2.59961c-0.200195 1.09961 -0.5 2.2002 -0.700195 3.2002c-0.200195 0.799805 -0.299805 1.59961 -0.5 2.39941c-0.299805 1.30078 -0.5 2.7002 -0.799805 4
+c-0.100586 0.600586 -0.200195 1.10059 -0.300781 1.7002l-0.899414 5.7002c-0.100586 0.599609 -0.200195 1.2998 -0.299805 1.90039c-0.200195 1.2998 -0.400391 2.59961 -0.5 3.89941c-0.100586 0.799805 -0.200195 1.5 -0.300781 2.2998
+c-0.0996094 1.2002 -0.299805 2.40039 -0.399414 3.60059c-0.100586 0.799805 -0.200195 1.59961 -0.200195 2.39941c-0.0996094 1.2002 -0.200195 2.40039 -0.299805 3.5c-0.100586 0.800781 -0.100586 1.60059 -0.200195 2.40039
+c-0.0996094 1.2002 -0.200195 2.40039 -0.200195 3.7002c0 0.799805 -0.0996094 1.5 -0.0996094 2.2998c-0.100586 1.2998 -0.100586 2.7002 -0.200195 4c0 0.700195 0 1.2998 -0.0996094 2c0 2 -0.100586 4 -0.100586 6c0 53.5 16.9004 103 45.7998 143.6
+c2.30078 3.2002 4.7002 6.40039 7.10059 9.5c4.89941 6.2002 10.0996 12.3008 15.5996 18c2.7002 2.90039 5.5 5.7002 8.40039 8.40039c2.89941 2.7002 5.7998 5.40039 8.7998 8c4.5 3.90039 9.09961 7.59961 13.9004 11.2002c1.59961 1.2002 3.19922 2.39941 4.7998 3.5
+c27.2998 19.5996 59 33.7002 93.2998 40.7998c16.0996 3.2998 32.9004 5 50 5s33.7998 -1.7002 50 -5c34.2998 -7 66 -21.0996 93.5996 -40.7002c1.60059 -1.2002 3.2002 -2.2998 4.80078 -3.5c4.7998 -3.59961 9.39941 -7.2998 13.8994 -11.2002
+c12 -10.3994 23 -21.8994 32.7998 -34.3994c2.5 -3.10059 4.80078 -6.2998 7.10059 -9.5zM448 76.5v71.2998c0 2.10059 -1.59961 3.7002 -3.7002 3.7002h-22.2002c-2.09961 0 -3.69922 -1.59961 -3.69922 -3.7002v-25.7998h-29.5v144
+c0 2.09961 -1.60059 3.7002 -3.7002 3.7002h-22.1006c-2.09961 0 -3.69922 -1.60059 -3.69922 -3.7002v-25.9004h-29.5v25.9004c0 2.09961 -1.60059 3.7002 -3.7002 3.7002h-22.2002c-2.09961 0 -3.7002 -1.60059 -3.7002 -3.7002v-25.9004h-29.5v25.9004
+c0 4.7998 -6.5 3.7002 -9.5 3.7002v30.7002c6.7002 1.59961 13.7998 2.7998 20.7998 2.7998c8.80078 0 16.8008 -3.5 25.4004 -3.5c3.7002 0 22.4004 0.899414 22.4004 6.5v48.3994c0 2.10059 -1.60059 3.7002 -3.7002 3.7002c-4.2002 0 -12.2002 -3.5 -19.4004 -3.5
+c-7.89941 0 -16.8994 3.5 -26.2998 3.5c-6.5 0 -12.9004 -0.899414 -19.2002 -2.2998v3.90039c4.40039 2.09961 7.40039 6.69922 7.40039 11.5c0 16.7998 -25.4004 16.7998 -25.4004 0c0 -4.80078 3 -9.5 7.40039 -11.5v-90.2002c-3 0 -9.5 1.09961 -9.5 -3.7002v-25.9004
+h-29.5v25.9004c0 2.09961 -1.60059 3.7002 -3.7002 3.7002h-22.2002c-2.09961 0 -3.7002 -1.60059 -3.7002 -3.7002v-25.9004h-29.5v25.9004c0 2.09961 -1.59961 3.7002 -3.69922 3.7002h-22.1006c-2.09961 0 -3.7002 -1.60059 -3.7002 -3.7002v-144h-29.5996v25.7998
+c0 2.10059 -1.59961 3.7002 -3.7002 3.7002h-22.0996c-2.10059 0 -3.7002 -1.59961 -3.7002 -3.7002v-71.2998c9.40039 -15.5 20.5996 -29.9004 33.5996 -42.9004c20.6006 -20.5996 44.5 -36.6992 71.2002 -48c13.9004 -5.89941 28.2002 -10.2998 42.9004 -13.1992v75.7998
+c0 58.5996 88.5996 58.5996 88.5996 0v-75.7998c14.7002 2.89941 29 7.39941 42.9004 13.1992c26.7002 11.3008 50.5996 27.4004 71.2002 48c13 13 24.1992 27.4004 33.5996 42.9004z" />
+    <glyph glyph-name="freebsd" unicode="&#xf3a4;" 
+d="M303.7 351.8c11.0996 11.1006 115.5 77 139.2 53.2002c23.6992 -23.7002 -42.1006 -128.1 -53.2002 -139.2c-11.1006 -11.0996 -39.4004 -0.899414 -63.1006 22.9004c-23.7998 23.7002 -34.0996 52 -22.8994 63.0996zM109.9 379.9
+c-31.6006 -19.4004 -57.9004 -46.5 -76.4004 -78.7002c-20.7998 36.2998 -44.5 89.0996 -27.9004 105.7c16.4004 16.5 68 -6.40039 104.301 -27zM406.7 274c3.2998 5.5 7 11.7998 10.8994 18.7998c17.6006 -31.2998 27.7002 -67.3994 27.7002 -105.8
+c0 -119.1 -96.5 -215.6 -215.6 -215.6c-119.101 0 -215.601 96.5996 -215.601 215.6c0 119.1 96.5 215.6 215.601 215.6c35.8994 0 69.7002 -8.7998 99.5 -24.2998c-7.2998 -4 -13.9004 -8 -19.6006 -11.5996c-26 4.7002 -32.8994 -16.4004 -14.8994 -48.7002
+c21.7998 -43.0996 89 -90.4004 109.3 -70.0996c5.40039 5.39941 6 14.7998 2.7002 26.0996z" />
+    <glyph glyph-name="gitkraken" unicode="&#xf3a6;" horiz-adv-x="592" 
+d="M565.7 329.9c11.7998 -31.6006 18.2998 -65.7002 18.2998 -101.4c0 -155.1 -122.6 -281.6 -276.3 -287.7v145.8c-8.40039 -0.5 -16.6006 -0.399414 -23.4004 0v-145.899c-153.7 6.2002 -276.3 132.7 -276.3 287.8c0 35.7002 6.5 69.7998 18.2998 101.3
+c2.2998 6.2002 9.2998 9.2002 15.2998 6.60059c5.7002 -2.40039 8.5 -8.80078 6.30078 -14.6006c-10.9004 -29 -16.9004 -60.5 -16.9004 -93.2998c0 -134.6 100.4 -245.7 230.2 -262.7v123.7c-7.90039 1.59961 -15.4004 3.7002 -23 6.2002v-104
+c-106.7 26 -185.9 122.1 -185.9 236.8c0 91.7998 50.7998 171.8 125.8 213.3c5.80078 3.2002 13 0.900391 15.9004 -5c2.7002 -5.5 0.700195 -12.0996 -4.7002 -15.0996c-67.8994 -37.7002 -113.899 -110.101 -113.899 -193.2c0 -93.4004 57.8994 -173.2 139.8 -205.4
+v92.2002c-14.2002 4.5 -24.7998 17.7002 -24.7998 33.5c0 13.1006 6.69922 24.4004 17.2998 30.5c-8.2002 79.6006 -44.5 58.6006 -44.5 83.9004v14.7998c0 38 87.8994 161.7 129.1 164.7c2.60059 0.200195 5.10059 0.200195 7.60059 0
+c41.0996 -2.90039 129 -126.7 129 -164.7v-14.7002c0 -25.2998 -36.2002 -4.39941 -44.5 -83.8994c10.5 -6.10059 17.2998 -17.4004 17.2998 -30.5c0 -15.8008 -10.7002 -29 -24.9004 -33.5v-92.2002c81.9004 32.2998 139.8 112.1 139.8 205.399
+c0 83.2002 -46 155.601 -113.899 193.2c-5.2998 2.90039 -7.40039 9.60059 -4.7002 15.1006c2.90039 5.89941 10.2002 8.19922 15.9004 5c75 -41.5 125.8 -121.5 125.8 -213.301c0 -114.699 -79.2002 -210.899 -185.9 -236.8v104
+c-7.5 -2.59961 -15.0996 -4.7002 -23 -6.2002v-123.699c129.9 17 230.2 128.1 230.2 262.699c0 32.8008 -6 64.3008 -16.9004 93.3008c-2.19922 5.69922 0.600586 12.1992 6.30078 14.5996c6 2.59961 13 -0.5 15.2998 -6.59961zM365.9 172.5
+c-13.1006 0 -23.7002 -10.5996 -23.7002 -23.7002c0 -13.2002 10.7002 -23.7002 23.7002 -23.7002c13.0996 0 23.6992 10.6006 23.6992 23.7002c0 13.2002 -10.6992 23.7002 -23.6992 23.7002zM226.1 125.2c13.2002 0 23.7002 10.7002 23.7002 23.7002
+c0 13.0996 -10.5996 23.6992 -23.7002 23.6992c-13.1992 0 -23.6992 -10.6992 -23.6992 -23.6992s10.5 -23.7002 23.6992 -23.7002z" />
+    <glyph glyph-name="gofore" unicode="&#xf3a7;" horiz-adv-x="400" 
+d="M324 128.2c54.2998 0 65.7002 -50.1006 67.7002 -77.7002c-46.5 -56.2998 -107.8 -82.5 -171 -82.5c-123.7 0 -220.7 101.5 -220.7 224c0 123.4 98 224 220.7 224c59 0 114.3 -23.2998 156.1 -65.5996l-62.2998 -63.3008c-25 25.4004 -58.2998 39.4004 -93.5996 39.4004
+c-73.2002 0 -132.4 -60.2998 -132.4 -134.4c0 -74.1992 59.2002 -134.399 132.4 -134.399c33.5996 0 65.3994 12.7002 89.8994 35.7998v34.7002h13.2002zM311.9 240.7c47.6992 0 88.0996 -35 88.0996 -100.2v-30.5996c-15.5 26.6992 -42.5 41.7998 -76 41.7998h-118.4v89
+h106.301z" />
+    <glyph glyph-name="goodreads" unicode="&#xf3a8;" 
+d="M299.9 256.8c5.09961 -37.2998 -4.7002 -79 -35.9004 -100.7c-22.2998 -15.5 -52.7998 -14.0996 -70.7998 -5.69922c-37.1006 17.2998 -49.5 58.5996 -46.7998 97.1992c4.2998 60.9004 40.8994 87.9004 75.2998 87.5c46.8994 0.200195 71.7998 -31.7998 78.2002 -78.2998
+zM448 360v-336c0 -30.9004 -25.0996 -56 -56 -56h-336c-30.9004 0 -56 25.0996 -56 56v336c0 30.9004 25.0996 56 56 56h336c30.9004 0 56 -25.0996 56 -56zM330 134.8c0 0 -0.0996094 34 -0.0996094 217.3h-29v-40.2998c-0.800781 -0.299805 -1.2002 0.5 -1.60059 1.2002
+c-9.59961 20.7002 -35.8994 46.2998 -76 46c-51.8994 -0.400391 -87.2002 -31.2002 -100.6 -77.7998c-4.2998 -14.9004 -5.7998 -30.1006 -5.5 -45.6006c1.7002 -77.8994 45.0996 -117.8 112.399 -115.199c28.9004 1.09961 54.5 17 69 45.1992
+c0.5 1 1.10059 1.90039 1.7002 2.90039c0.200195 -0.0996094 0.400391 -0.0996094 0.600586 -0.200195c0.299805 -3.7998 0.199219 -30.7002 0.0996094 -34.5c-0.200195 -14.7998 -2 -29.5 -7.2002 -43.5c-7.7998 -21 -22.2998 -34.7002 -44.5 -39.5
+c-17.7998 -3.89941 -35.5996 -3.7998 -53.2002 1.2002c-21.5 6.09961 -36.5 19 -41.0996 41.7998c-0.299805 1.60059 -1.2998 1.2998 -2.2998 1.2998h-26.7998c0.799805 -10.5996 3.19922 -20.2998 8.5 -29.1992c24.1992 -40.5 82.6992 -48.5 128.199 -37.4004
+c49.9004 12.2998 67.3008 54.9004 67.4004 106.3z" />
+    <glyph glyph-name="goodreads-g" unicode="&#xf3a9;" horiz-adv-x="384" 
+d="M42.5996 44.7002h2.80078c12.6992 0 25.5 0 38.1992 -0.100586c1.60059 0 3.10059 0.400391 3.60059 -2.09961c7.09961 -34.9004 30 -54.5996 62.8994 -63.9004c26.9004 -7.59961 54.1006 -7.7998 81.3008 -1.7998c33.7998 7.40039 56 28.2998 68 60.4004
+c8 21.5 10.6992 43.7998 11 66.5c0.0996094 5.7998 0.299805 47 -0.200195 52.7998l-0.900391 0.299805c-0.799805 -1.5 -1.7002 -2.89941 -2.5 -4.39941c-22.0996 -43.1006 -61.2998 -67.4004 -105.399 -69.1006c-103 -4 -169.4 57 -172 176.2
+c-0.5 23.7002 1.7998 46.9004 8.2998 69.7002c20.5996 71.0996 74.5996 118.2 153.899 118.8c61.3008 0.400391 101.5 -38.7002 116.2 -70.2998c0.5 -1.10059 1.2998 -2.2998 2.40039 -1.90039v61.6006h44.2998c0 -280.301 0.0996094 -332.2 0.0996094 -332.2
+c-0.0996094 -78.5 -26.6992 -143.7 -103 -162.2c-69.5 -16.9004 -159 -4.7998 -196 57.2002c-8 13.5 -11.7998 28.2998 -13 44.5zM188.9 411.5c-52.5 0.5 -108.5 -40.7002 -115 -133.8c-4.10059 -59 14.7998 -122.2 71.5 -148.601
+c27.5996 -12.8994 74.2998 -15 108.3 8.7002c47.5996 33.2002 62.7002 97 54.7998 154c-9.7002 71.1006 -47.7998 120 -119.6 119.7z" />
+    <glyph glyph-name="google-drive" unicode="&#xf3aa;" horiz-adv-x="512" 
+d="M339 133.1l-163.6 282.9h161.199l163.601 -282.9h-161.2zM201.5 109.5h310.5l-80.5996 -141.5h-310.5zM154.1 380.6l82.9004 -141.399l-156.4 -271.2l-80.5996 141.5z" />
+    <glyph glyph-name="google-play" unicode="&#xf3ab;" horiz-adv-x="512" 
+d="M325.3 213.7l-220.7 221.3l280.801 -161.2zM47 448l256.6 -255.9l-256.6 -256c-13 6.80078 -21.7002 19.2002 -21.7002 35.3008v441.3c0 16.0996 8.7002 28.5 21.7002 35.2998zM472.2 222.4c19.2002 -14.3008 19.2002 -46.5 1.2002 -60.8008l-60.1006 -34.0996
+l-65.7002 64.5l65.7002 64.5zM104.6 -51l220.7 221.3l60.1006 -60.0996z" />
+    <glyph glyph-name="gripfire" unicode="&#xf3ac;" horiz-adv-x="384" 
+d="M112.5 146.6c0 -26.8994 16.5996 -47.1992 32.5996 -69.5c22.5 -30.1992 44.2002 -56.8994 44.2002 -86.5c-0.0996094 -14.5 -4.39941 -29.6992 -17.5 -46.3994c0 5.2998 4.7998 12.2002 4.7998 22.2998c0 15.2002 -13 39.9004 -78.0996 86.5996
+c-34.2998 29.1006 -66.5 58.5 -66.5 108.301c0 114.699 147.1 176.5 147.1 268.6c0 3.2998 -0.199219 6.7002 -0.599609 10c5.09961 -2.40039 39.0996 -43.2998 39.0996 -90.4004c0 -80.5 -105.1 -129.199 -105.1 -203zM317.8 185.6
+c1.5 -8.39941 2.2002 -16.5996 2.2002 -24.5996c0 -51.7998 -29.4004 -97.5 -67.2998 -136.8c-1 -1 -2.2002 -2.40039 -3.2002 -2.40039c-3.59961 0 -35.5 41.6006 -35.5 53.2002c0 0 41.7998 55.7002 41.7998 96.9004c0 10.7998 -2.7002 21.6992 -9.09961 33.3994
+c-1.5 -32.2998 -55.7002 -87.7002 -58.1006 -87.7002c-2.69922 0 -17.8994 22 -17.8994 42.1006c0 5.2998 1 10.7002 3.2002 15.7998c2.39941 5.5 56.5996 72 56.5996 116.7c0 6.2002 -1 12 -3.40039 17.0996l-4 7.2002c16.7002 -6.5 82.6006 -64.0996 94.7002 -130.9z" />
+    <glyph glyph-name="grunt" unicode="&#xf3ad;" horiz-adv-x="384" 
+d="M61.2998 258.7c0.5 4.89941 2.7998 10 7 12h0.100586c-4.60059 1.7002 -9.2002 3.09961 -13.5 4.09961c42.1992 10.2002 73.3994 -20.5996 83.0996 -31.7998c16.5996 -19.2002 35.5 -8.7998 35.5 -8.7998c0.299805 -11.1006 -10.2998 -19 -21.0996 -19.5
+c1.19922 -15.4004 -13.9004 -32.5 -13.9004 -32.5s5.59961 15 2.7002 25.2998c-0.900391 3.2002 -2 6.09961 -3 8.5c-19.2998 -17.2002 -48 -1.5 -54.9004 6.09961c-9.59961 10.6006 -12.3994 23.8008 -12.7998 34.1006c-1.7998 -3.7998 -3.2998 -9.10059 -4 -16.6006
+c0 0 -6.2998 9.10059 -5.2002 19.1006zM89.5996 260.5c-2.89941 -9.09961 -3.39941 -27.7002 6.90039 -35.2998c16.2998 -12.1006 32.2998 -5 38 -1.7002c-7.5 11.2998 -25.4004 26 -44.9004 37zM231.7 214.7c-10.7998 0.399414 -21.4004 8.39941 -21.2002 19.2998
+c0 0 18.7998 -10.4004 35.5 8.7998c9.7002 11.2002 40.7998 42 83.0996 31.7998c-4.2998 -0.899414 -8.89941 -2.2998 -13.5 -4.09961h0.100586c4.09961 -1.7998 6.39941 -6.7998 7 -11.7998c1.2002 -10 -5.2002 -19.1006 -5.2002 -19.1006
+c-0.599609 7.5 -2.2002 12.8008 -4 16.6006c-0.5 -10.2998 -3.2002 -23.5 -12.7998 -34.1006c-6.7998 -7.59961 -35.5 -23.3994 -54.7998 -6.09961c-1 -2.5 -2.10059 -5.2998 -3 -8.5c-2.90039 -10.2998 2.69922 -25.2998 2.69922 -25.2998s-15.0996 17 -13.8994 32.5z
+M294.4 260.5c-19.5 -11 -37.4004 -25.5996 -44.9004 -37c5.7002 -3.40039 21.5996 -10.5 37.9004 1.59961c10.3994 7.7002 10 26.3008 7 35.4004zM160 29.5c4.09961 0 7 -0.900391 8.7998 -2.7002c2.2002 -2.2998 1.5 -5.2998 0.900391 -6.7998
+c-1.10059 -2.7002 -5.5 -11.5996 -13 -19.7998c-2.7002 -2.90039 -6.60059 -4.60059 -11 -4.60059c-4.2998 0 -8.7002 1.60059 -11.7998 4.30078c-2.30078 2.09961 -10.2002 9.5 -13.7002 18.5996c-1.2998 3.40039 -1 6.09961 0.899414 8.09961
+c1.30078 1.30078 4 2.90039 9.5 2.90039h29.4004zM349.2 130.7c0 0 29.2998 -22.5 21.0996 -70.9004c-5.2998 -29.5 -23.2002 -46 -47 -54.7002c-8.7998 -19.0996 -29.3994 -45.6992 -67.2998 -49.5996c-14.5 -11.7998 -34.5 -19.5 -63.5996 -19.5h-0.200195
+c-29.2002 0 -49.2002 7.7002 -63.6006 19.5c-37.8994 3.90039 -58.5 30.5 -67.2998 49.5996c-23.7998 8.60059 -41.7998 25.2002 -47 54.7002c-8.59961 48.2002 20.6006 70.7998 20.6006 70.7998c2.39941 -17.8994 13 -33.8994 24.5996 -43.7998
+c3.09961 22.7002 3.7002 55.5 3.7002 62.4004c0 14.7002 -9.5 24.5 -12.2002 26.0996c-2.5 1.5 -5.2998 3 -8.2998 4.60059c-18 9.59961 -40.4004 21.5996 -40.4004 43.6992c0 16.1006 9.2998 23.2002 15.4004 27.8008c0.799805 0.599609 1.5 1.19922 2.2002 1.69922
+c2.09961 1.7002 3.69922 3 4.2998 4.40039c4.39941 9.7998 3.59961 34.2002 1.7002 37.5996c-0.600586 0.700195 -16.8008 21 -11.8008 39.2002c2 7.40039 6.90039 13.2998 14.1006 17c5.2998 2.7002 11.7998 4.2002 19.5 4.5c0.0996094 2 0.5 4 0.899414 5.90039
+c0.5 2.59961 1.10059 5.2998 0.900391 8.09961c-0.400391 4.7002 -0.799805 9.10059 -2.2002 11.2998c-8.39941 13.3008 -28.7998 17.6006 -29 17.6006l-12.2998 2.39941l8.09961 9.40039c0.200195 0.200195 17.3008 17.5 46.3008 17.5c7.89941 0 16 -1.2998 23.8994 -3.5
+c24.2998 -7.7998 42.9004 -30.5 49.4004 -39.2998c2 0.599609 3.89941 1.2002 5.89941 1.7002c-1 26.3994 20.7002 47.3994 28.2002 48.2998c0.5 -4.5 -0.399414 -22.2002 7.2002 -27.6006c2.2002 14.4004 9.59961 30.3008 39.0996 40.7002
+c-6.2998 -16.7002 -0.799805 -30.7002 1.80078 -37.2002c20.0996 18.2002 33.6992 15.2002 33.6992 15.2002s-13.1992 -22.7002 -9 -38.5c3.30078 -0.799805 6.5 -1.7002 9.60059 -2.7002c6.5 8.80078 25.2002 31.5 49.3994 39.3008
+c8.10059 2.59961 16.2002 3.89941 24.1006 3.89941c29 0 46.2002 -17.2998 46.2998 -17.5l8.09961 -9.5l-12.2998 -2.39941c-0.200195 0 -20.5996 -4.30078 -29 -17.6006c-1.39941 -2.2998 -1.7998 -6.59961 -2.2002 -11.2998
+c-0.199219 -2.7998 0.300781 -5.5 0.900391 -8.09961c0.400391 -2 0.799805 -3.90039 0.900391 -5.90039c7.59961 -0.299805 14.1992 -1.7998 19.5 -4.5c7.19922 -3.7002 12.0996 -9.59961 14.0996 -17c4.90039 -18.2998 -11.2002 -38.5996 -11.7998 -39.2002
+c-1.90039 -3.39941 -2.7002 -27.7998 1.7002 -37.5996c0.599609 -1.40039 2.19922 -2.7002 4.2998 -4.40039c0.700195 -0.599609 1.39941 -1.09961 2.2002 -1.7002c6.09961 -4.59961 15.3994 -11.5996 15.3994 -27.7998c0 -22.0996 -22.3994 -34.0996 -40.3994 -43.7002
+c-2.90039 -1.59961 -5.80078 -3.09961 -8.30078 -4.59961c-2.69922 -1.59961 -12.1992 -11.4004 -12.1992 -26.0996c0 -6.90039 0.599609 -39.7002 3.69922 -62.4004c11.6006 9.90039 22.2002 25.7998 24.6006 43.7002zM305.7 410.3
+c-17.7998 -5.7002 -31.6006 -23.0996 -37.7002 -32.2002c1.59961 -0.699219 3.09961 -1.39941 4.7002 -2.19922c2.59961 -1.2002 4.89941 -2.40039 7.09961 -3.7002c2.7002 5.5 8.40039 13.7002 20.7002 22.3994c8.2002 5.80078 18.2002 8.90039 28.7002 8.90039
+c3.59961 0 6.7998 -0.400391 9.2002 -0.799805c3.2998 2.09961 6.59961 3.89941 9.69922 5.2998c-4.7998 2 -13.6992 5 -24.6992 5c-6.10059 0 -12.1006 -0.900391 -17.7002 -2.7002zM326.7 392.1c-7.40039 -0.299805 -14 -2.69922 -19.6006 -7
+c-8 -6.39941 -12.0996 -17.6992 -13.5 -22.5c4.90039 -4.19922 8.2002 -8.09961 10.5 -11.1992c3.40039 1 7.30078 1.89941 11.5 2.69922c3.30078 4.5 3.90039 10.6006 4.40039 17c0.5 6.2002 1.09961 12.6006 4.40039 17.8008c0.699219 1.09961 1.5 2.19922 2.2998 3.19922
+zM45.5996 402.7c2.40039 0.399414 5.60059 0.799805 9 0.899414c10.6006 0 20.5 -3.09961 28.8008 -8.89941c12.3994 -8.7002 18.0996 -17 20.6992 -22.4004c2.2002 1.2002 4.60059 2.5 7.10059 3.7002c1.59961 0.799805 3.2002 1.5 4.7998 2.2002
+c-6.09961 8.89941 -19.9004 26.2998 -37.7002 32.0996c-5.7002 1.7998 -11.5996 2.7002 -17.7002 2.7002c-11 0 -19.8994 -3 -24.6992 -5c3.09961 -1.2998 6.39941 -3.09961 9.69922 -5.2998zM90.2998 362.6c-1.39941 4.80078 -5.5 16.1006 -13.5 22.4004
+c-5.5 4.40039 -12.0996 6.7002 -19.5 7c0.799805 -1 1.60059 -2.09961 2.2998 -3.2002c3.30078 -5.2002 3.90039 -11.5996 4.40039 -17.7998c0.5 -6.40039 1 -12.5 4.2998 -16.9004c4.2002 -0.799805 8.10059 -1.7998 11.5 -2.69922c2.2002 3.19922 5.60059 7 10.5 11.1992z
+M58.0996 188.1c8.7002 -5 18.1006 -16.7998 19 -34.1992c0.900391 -14.7002 -0.899414 -49.9004 -3.39941 -75.9004c12.5 -4.7998 26.7002 -6.40039 39.7002 -6.7998c2 4.09961 3.89941 8.5 5.5 13.0996c0.699219 1.90039 19.5996 51 26.3994 62.2002
+c-5.39941 -39 -17.5 -73.7002 -23.5 -89.5996c3.40039 0.399414 7.2998 0.699219 11.7002 0.699219h117c4.40039 0 8.2002 -0.199219 11.7002 -0.699219c-6 15.8994 -18 50.5996 -23.5 89.5996c6.7998 -11.0996 25.7002 -60.2002 26.3994 -62.2002
+c1.60059 -4.59961 3.5 -9 5.5 -13.0996c13 0.399414 27.3008 2 39.7002 6.7998c-2.5 26 -4.2998 61.2998 -3.39941 75.9004c1.09961 17.5 10.3994 29.1992 19.0996 34.1992c2.7002 1.5 5.5 3.10059 8.40039 4.60059c14.7998 8 30.1992 16.2998 30.1992 30.5
+c0 11.0996 -4.2998 14.5 -8.89941 18.2002l-0.5 0.399414c-0.700195 0.600586 -1.5 1.2002 -2.2002 1.7998c0.900391 -7.19922 1.90039 -13.2998 2.7002 -14.8994c0 0 -12.1006 15 -15.7002 44.2998c-1.40039 11.5 1.09961 34.2002 5.09961 43
+c-0.199219 -4.90039 0 -9.7998 0.300781 -14.4004c0.399414 0.900391 0.799805 1.60059 1.2998 2.2002c3.2998 4 11.8994 17.5 9.39941 26.6006c-1 3.39941 -3.19922 6 -6.69922 7.7998c-3.80078 1.89941 -8.80078 2.89941 -15.1006 2.89941
+c-12.2998 0 -25.8994 -3.7998 -32.8994 -6c-25.1006 -7.89941 -55.4004 -30.8994 -64.1006 -37.6992c-0.200195 -0.200195 -0.399414 -0.300781 -0.399414 -0.300781l-5.60059 -3.89941l3.5 5.7998c0.200195 0.299805 19.1006 31.4004 53.1006 46.5
+c-2 2.90039 -7.40039 8.2002 -21.6006 15.0996c-21.3994 10.5 -46.3994 15.8008 -74.2998 15.8008c-27.7998 0 -52.9004 -5.30078 -74.2998 -15.8008c-14.2002 -7 -19.6006 -12.1992 -21.6006 -15.0996c34.1006 -15.0996 53 -46.2002 53.2002 -46.5l3.5 -5.7998
+l-5.59961 3.89941s-0.200195 0.100586 -0.400391 0.300781c-8.7002 6.7998 -39 29.6992 -64.0996 37.6992c-7 2.30078 -20.6006 6 -32.9004 6c-6.2998 0 -11.2998 -1 -15.0996 -2.89941c-3.60059 -1.7998 -5.7998 -4.2998 -6.7002 -7.7998
+c-2.40039 -9.10059 6.2002 -22.6006 9.40039 -26.6006c0.5 -0.599609 0.899414 -1.39941 1.2998 -2.2002c0.299805 4.60059 0.5 9.5 0.299805 14.4004c4 -8.7002 6.5 -31.5 5.09961 -43c-3.59961 -29.2998 -15.6992 -44.2998 -15.6992 -44.2998
+c0.799805 1.59961 1.7998 7.7002 2.69922 14.8994c-0.799805 -0.599609 -1.5 -1.19922 -2.19922 -1.7998l-0.5 -0.399414c-4.60059 -3.60059 -8.90039 -7.10059 -8.90039 -18.2002c0 -14.2002 15.2998 -22.5 30.2002 -30.5c2.7998 -1.5 5.7002 -3 8.39941 -4.60059z
+M34.7998 43.4004c11.9004 -19.7002 35.5 -29.4004 58.2002 -29.5c-4.5 13.2998 -3.09961 24 4.09961 31.7998l1.40039 1.39941c1.7998 2.40039 4.2998 5.80078 7 10c-27.2002 1.10059 -63.5 11 -74.4004 45.4004c-5 -5 -8.39941 -39.0996 3.7002 -59.0996zM80.5 -0.0996094
+c6.5 -9.5 16.5 -19.6006 30.9004 -25.5c-4.90039 7.19922 -8.80078 15.0996 -12.3008 23.0996c-6.39941 0.5 -12.5996 1.2998 -18.5996 2.40039zM192 -50.2002c60.5996 0.100586 78.2998 45.9004 84.9004 64.7002c3.59961 10.5 3.2998 18.2998 -0.900391 23.0996
+c-2.7998 3.30078 -9.5 7.2002 -24.5996 7.2002h-118.801c-15.0996 0 -21.6992 -3.89941 -24.5996 -7.2002c-4.2998 -4.89941 -4.59961 -12.5996 -0.900391 -23.0996c6.60059 -18.9004 24.3008 -64.5996 84.9004 -64.7002zM272.6 -25.5996
+c14.4004 5.89941 24.4004 16 30.9004 25.5c-6 -1.10059 -12.2002 -1.90039 -18.5996 -2.40039c-3.5 -8 -7.40039 -15.9004 -12.3008 -23.0996zM349.2 43.4004c12.2002 19.8994 8.7998 54 3.7998 59c-10.9004 -34.4004 -47.2002 -44.2002 -74.4004 -45.4004
+c2.7002 -4.2002 5.2002 -7.59961 7 -10c0.5 -0.5 1 -1 1.40039 -1.5c7.2002 -7.7002 8.59961 -18.5 4.09961 -31.7998c22.5 0.399414 46.1006 10 58.1006 29.7002zM191.9 260.3c-12.7002 0.200195 -27.2002 17.7998 -27.2002 17.7998
+c9.89941 -6 18.7998 -8.09961 27.2998 -8.2998c8.5 0.200195 17.4004 2.2998 27.2998 8.2998c0 0 -14.5 -17.6992 -27.2002 -17.7998h-0.199219zM253.6 29.5996c5.40039 -0.0996094 8.10059 -1.69922 9.40039 -3c1.90039 -1.89941 2.2002 -4.59961 0.900391 -7.89941
+c-3.5 -8.90039 -11.4004 -16.1006 -13.7002 -18.1006c-3.10059 -2.59961 -7.40039 -4.19922 -11.7998 -4.19922c-4.40039 0 -8.30078 1.59961 -11 4.5c-7.5 8 -12 16.6992 -13 19.2998c-0.600586 1.5 -1.30078 4.39941 0.899414 6.7002
+c1.7002 1.7998 4.7002 2.69922 8.90039 2.69922h29.3994z" />
+    <glyph glyph-name="gulp" unicode="&#xf3ae;" horiz-adv-x="256" 
+d="M209.8 56.9004l-14.0996 -24.6006l-4.60059 -80.2002c0 -8.89941 -28.2998 -16.0996 -63.0996 -16.0996s-63.0996 7.2002 -63.0996 16.0996l-5.80078 79.4004l-14.8994 25.4004c41.2002 -17.3008 126 -16.7002 165.6 0zM13.7998 310.2
+c30.7002 -17 197.8 -16.9004 228.3 0.200195l-14.7998 -136.801c-4.7998 -4.19922 -11.5996 -10.1992 -16.5996 -14.0996c-1.60059 -1.2002 -6 -4.7002 -8 -4.7002c-1.2998 0 -2.2002 0.5 -2.2002 1.7998c0.0996094 1 3.40039 4.5 5 6.40039
+c4.90039 5.7002 13.7998 16 13.7998 23.4004c0 7 -10.7002 14.0996 -25.7002 0.199219c-1.59961 -1.5 -3.09961 -3 -4.5 -4.5c0.400391 1.10059 1.10059 5.10059 1.10059 6.2002c0 2.7998 -1.40039 4 -4.2002 4c-1 0 -1.90039 -0.599609 -2.7002 -1.59961
+c-2.59961 -3.10059 -3.89941 -7.5 -5.2998 -11.2998c-0.5 -1.80078 -1.09961 -3.60059 -1.7002 -5.5c-0.399414 -0.200195 -0.700195 -0.300781 -0.899414 -0.600586c-3.80078 -3.89941 -17.7002 -17 -23.1006 -17c-2.2998 0 -1.59961 3.60059 -1 5.7998
+c1 3.40039 6.7998 17.7002 8.7002 22.3008c4.59961 11.0996 8 19.7998 13.2002 31.8994c3.89941 9.2002 3.7998 8.60059 4.5 10.5c0.700195 2.10059 0.700195 4.90039 -1 6.2002c-1 0.700195 -2 1.09961 -3.2002 1.09961c-2.40039 0 -4.7998 -1.39941 -6.09961 -4.69922
+c-25.5 -64.4004 -25.2002 -63.3008 -26.4004 -68.2002c-2 -1.7002 -4.40039 -3.40039 -6.7998 -4.5c-3.10059 -1.40039 -6.7998 -2.2002 -6.7998 1.2002c0 3.69922 1.39941 8.19922 2.69922 11.6992c2.2002 6.10059 4.90039 11.1006 6.90039 16.7002
+c0.900391 2.40039 1.2998 4.7002 -0.400391 6.90039c-0.799805 1 -1.89941 1.5 -3.19922 1.5c-2.60059 0 -4.10059 -2.60059 -5.2002 -5.10059c-0.700195 -1.5 -1.2998 -3.09961 -1.7998 -4.7998c-1.2002 -4 -3.60059 -8.7002 -5.60059 -12.2998
+c-2.7998 -5 -6.5 -10.0996 -11.0996 -13.5c-2.2002 -1.59961 -4.5 -2.40039 -6.90039 -2.40039c-3.5 0 -2.39941 5.7002 -1.5 9c2.2002 7.80078 5.5 13.3008 9.2998 20.8008c1.30078 2.69922 2.30078 5.39941 -0.299805 7.19922c-0.5 0.300781 -1 0.5 -1.59961 0.700195
+c-3.40039 0.900391 -6 -1.09961 -7.60059 -4.5c-3.09961 -6.2998 -5.39941 -11.7002 -7.09961 -16.2002c-3.2998 -8.89941 -6.90039 -18.2998 -4.59961 -23.7998c1.5 -3.7002 4.5 -5.09961 8.59961 -5.09961c9.7998 0 17.7998 6.7002 22.4004 14.8994
+c-4.30078 -19.7998 8.19922 -17.2998 20 -8.09961c0.0996094 -0.400391 0.0996094 -0.799805 0.199219 -1.2002c1.5 -6.7002 8.7002 -6.7002 14.5 -4.09961c3.5 1.59961 8.2002 4.5 14.4004 10.5c0.200195 0.299805 0.799805 1.39941 -0.799805 -2.2998
+c-7.2002 -16.2002 -13.5 -28.2002 -15 -34.3008c-0.200195 -0.899414 -0.299805 -1.7998 -0.299805 -2.69922c0 -1.80078 0.399414 -3.10059 1.2998 -3.7002c1.59961 -1.2002 4.2002 -1.2998 6.09961 -0.299805c1.7998 1 3.10059 2.59961 4 4.5
+c1 2.19922 0.200195 0.699219 5.2002 14c5 13.3994 2.90039 7.7998 9.09961 22c1.90039 4.2998 4.2002 9.5 8.5 15.5c2.5 3.39941 5.5 7 8.7002 9.69922c5.7002 4.7002 11.7002 5.40039 11.7002 2.5c0 -2.19922 -3.2998 -6.39941 -4.7002 -8.09961
+c-5.2998 -6.7002 -14.3994 -16.2998 -14.3994 -21.5c0 -9.5 12 -8 17.3994 -5.7002c7.2998 3.2002 13.9004 9.60059 19.6006 14.7998l-10.9004 -94.5996c-1.90039 -4.90039 -39.0996 -17.0996 -88.2002 -17.0996c-49 0 -86.2002 12.0996 -88.2002 17.0996l-7.59961 79.5996
+c2.09961 -1.5 4.2998 -2.39941 7.7002 -2.39941c7.39941 0 16.0996 6.7002 21.5 11.7998c2.2998 2.2002 4.39941 4.40039 6.39941 6.59961c-1 -3 -7.09961 -22 -7.2998 -25.1992c-0.0996094 -1 -0.200195 -4.90039 0.799805 -6.30078
+c0.5 -0.799805 1.40039 -1.19922 2.60059 -1.19922c2.89941 0 5.59961 4.69922 6.2998 7.5c0 0 1.7998 6.2998 7.59961 25.7998c6.30078 21.0996 10 24.5 10 34.7002c0 5.59961 -7.2998 6.7998 -9.89941 0l-5.2002 -15.5c-2.2002 -4.5 -8 -11.5 -12.5 -16
+c-3.5 -3.5 -10.7998 -10.1006 -15.7998 -10.1006c-2.40039 0 -3.90039 1.40039 -4.90039 3.60059c-2.2998 5.2998 -0.899414 14.2998 0.600586 19.8994c2.59961 9.7002 6.89941 19.4004 12 28.2002c4.19922 7.2998 10.1992 15.7002 17.0996 20.7002
+c6.59961 4.7998 12.7998 4.5 16.9004 -2.7998c1.5 -2.7002 3.7998 -7.30078 6.7998 -7.30078c2.5 0 5.7002 2.60059 4.5 9.10059c-0.5 2.5 -4.90039 8.7998 -10.1006 11.7998c-6 3.59961 -12.3994 3.59961 -18.6992 0.900391
+c-19.2002 -8.2002 -34.1006 -35.2002 -40 -55.2002zM243.5 318.7c0 -21 -231.2 -21 -231.2 0c0 8.7998 51.7998 15.8994 115.601 15.8994c9 0 17.7998 -0.0996094 26.2998 -0.399414l12.5996 48.7002l61.2998 64.5c1.40039 1.39941 5.80078 0.199219 9.90039 -3.5
+c4.09961 -3.7002 6.59961 -7.90039 5.2998 -9.30078l-0.0996094 -0.0996094l-57.2998 -60.5l-10 -40.7002c39.8994 -2.59961 67.5996 -8.09961 67.5996 -14.5996zM174.1 314.1c0 0.800781 -0.899414 1.5 -2.5 2.10059l-0.199219 -0.799805
+c0 -1.30078 -5 -2.40039 -11.1006 -2.40039c-6.09961 0 -11.0996 1.09961 -11.0996 2.40039c0 0.0996094 0 0.199219 0.0996094 0.299805l0.200195 0.700195c-1.7998 -0.600586 -3 -1.40039 -3 -2.30078c0 -2.09961 6.2002 -3.69922 13.7002 -3.69922
+c7.7002 -0.100586 13.8994 1.59961 13.8994 3.69922z" />
+    <glyph glyph-name="hacker-news-square" unicode="&#xf3af;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM21.2002 218.8h-0.200195c0.0996094 0.100586 0.200195 0.299805 0.299805 0.400391c0 -0.100586 0 -0.299805 -0.0996094 -0.400391z
+M239.2 164.9l80.7998 155.1h-34.7998c-54.7998 -101.2 -48.2998 -98.5996 -60.6006 -125.6c-10.0996 24.3994 -6.7998 27.2998 -59.2998 125.6h-37.2998l79.7998 -153.3v-102.7h31.4004v100.9z" />
+    <glyph glyph-name="hire-a-helper" unicode="&#xf3b0;" horiz-adv-x="512" 
+d="M443.1 448c3.90039 -36.4004 32.5 -65.7998 68.9004 -71.7002v-370.5c-35.4004 -4 -64.9004 -33.3994 -67.9004 -69.7998h-372.199c-5.90039 36.4004 -34.5 63.9004 -71.9004 68.7998v371.5c37.4004 3.90039 67.9004 34.4004 71.9004 71.7002h371.199zM406.1 43.0996
+c7.80078 0 5.80078 10.8008 0 10.8008c-10.2998 3.39941 -13.5 3.59961 -21.6992 13.7998c-7.80078 12.8994 -7.90039 44.3994 -7.90039 127.8v101.2c0 22.0996 12.2002 28.2998 28.5996 32.3994c8.90039 2.2002 3.90039 11.8008 -1 11.8008
+c-36.5 0 -20.5996 -2 -57.0996 -2c-32.7002 0 -16.5 2 -49.2002 2c-3.2998 0 -8.5 -8.30078 -1 -10.8008c4.90039 -1.59961 27.6006 -3.69922 27.6006 -39.2998c0 -45.5996 0.199219 -55.7998 -1 -68.7998c0 -1.2998 -2.30078 -12.7998 -12.8008 -12.7998h-109.199
+c-10.5 0 -12.8008 11.5 -12.8008 12.7998c-1.19922 13 -1 23.2002 -1 68.7998c0 35.6006 22.7002 37.7002 27.6006 39.2998c7.5 2.5 2.2998 10.8008 -1 10.8008c-32.7002 0 -16.5 -2 -49.2002 -2c-36.5 0 -20.5996 2 -57.0996 2c-5 0 -9.80078 -9.60059 -1 -11.8008
+c16.3994 -4.09961 28.5996 -10.1992 28.5996 -32.3994v-101.2c0 -83.4004 -0.200195 -114.9 -7.90039 -127.8c-8.19922 -10.2998 -11.5 -10.4004 -21.6992 -13.7998c-5.80078 0 -7.90039 -10.8008 0 -10.8008c36.2998 0 18.7998 2 55.0996 2c35.7998 0 21 -2 56.0996 -2
+c6 0 4.90039 8.2002 0 9.80078c-22.7998 7.59961 -22.8994 10.2998 -24.5996 12.7998c-10.4004 15.5996 -5.90039 83 -5.90039 113c0 5.2998 6.40039 12.7998 13.8008 12.7998h111.199c7.40039 0 13.8008 -7.5 13.8008 -12.7998c0 -30 4.5 -97.4004 -5.90039 -113
+c-1.7002 -2.60059 -1.7998 -5.2002 -24.5996 -12.7998c-4.90039 -1.60059 -5.90039 -9.80078 0 -9.80078c35.0996 0 20.2998 2 56.0996 2c36.2998 0 18.7998 -2 55.0996 -2z" />
+    <glyph glyph-name="hotjar" unicode="&#xf3b1;" 
+d="M414.9 286.5c30 -53 41.7998 -121.6 26.2998 -180.9c-14.7002 -56.6992 -68.2998 -120.3 -148.8 -145.6c54.5 76.9004 43.8994 200.1 -27.1006 215.5c54.2002 -93.9004 -53.7002 -180.3 -110.8 -93.9004c-2.5 -7.19922 -25.0996 -74.5 4.09961 -129.6
+c-61.0996 9.09961 -117.8 33.5 -144.6 93.4004c-35 78.1992 -2.7002 149.8 79 204.899c129.2 87.2998 28.0996 197.7 28.0996 197.7s219.101 -29 293.801 -161.5z" />
+    <glyph glyph-name="hubspot" unicode="&#xf3b2;" horiz-adv-x="512" 
+d="M267.4 236.4l-163.2 114.699c-7.90039 -4.69922 -17 -7.59961 -26.7998 -7.59961c-28.8008 0 -52.2002 23.4004 -52.2002 52.2998c0 28.7998 23.3994 52.2002 52.2002 52.2002c28.8994 0 52.3994 -23.4004 52.3994 -52.2002c0 -4.7998 -0.799805 -9.39941 -2 -13.7998
+c51.4004 -39.0996 141.3 -103.9 168.9 -124.8c13.0996 6.89941 27.5 11.5 42.7002 13.5996v61.2002c-17.5 7.40039 -28.2002 23.7998 -28.2002 42.9004c0 26.0996 20.5996 47.8994 46.7002 47.8994c26.0996 0 47 -21.7998 47 -47.8994
+c0 -19.1006 -10.7002 -35.5 -28.2002 -42.9004v-61.5996c62.5 -9.5 110.2 -63.5 110.2 -128.7c0 -71.9004 -58.1006 -130.2 -130 -130.2c-29.9004 0 -57.3008 10 -79.3008 26.9004l-50 -50.2002c1.30078 -3.90039 1.90039 -7.90039 1.90039 -12.1006
+c0 -10.6992 -4.2002 -20.8994 -11.7998 -28.5c-7.7002 -7.69922 -17.7998 -11.5996 -28.6006 -11.5996c-10.6992 0 -20.8994 4 -28.5 11.5996c-7.59961 7.60059 -11.7998 17.7002 -11.7998 28.5c0 10.8008 4.2002 21 11.7998 28.6006
+c7.60059 7.59961 17.7002 11.7998 28.5 11.7998c4.90039 0 9.60059 -0.900391 14 -2.5l49.5 49.7998c-16.2998 21.7002 -26 48.7002 -26 78c0 37.2998 15.7002 70.9004 40.8008 94.6006zM356.9 72.7998c38.0996 0 69 30.9004 69 69c0 38.1006 -30.9004 69 -69 69
+c-38.1006 0 -69 -30.8994 -69 -69c0 -38.0996 30.8994 -69 69 -69z" />
+    <glyph glyph-name="itunes" unicode="&#xf3b4;" 
+d="M223.6 367.7c94.5 0 171.2 -76.7002 171.2 -171.3c0 -94.5 -76.5996 -171.2 -171.2 -171.2c-94.5996 0 -171.1 76.7998 -171.1 171.3s76.5 171.2 171.1 171.2zM303 127.7c1.40039 6.2002 0.900391 -3 1 167.6c0 5.7002 -3.2998 9.10059 -9 8.7002
+c-1.7998 0 -14.0996 -2.40039 -115.1 -21.4004c-0.900391 0 -4.60059 -1 -6.7002 -2.69922c-2 -1.60059 -3.10059 -3.80078 -3.5 -6.40039c-1.7002 -6.7002 2.39941 -128 -2.60059 -133.7c-2.09961 -2.5 -4.69922 -3.2002 -7.69922 -3.7002
+c-17.7002 -3.19922 -29.6006 -4.7998 -38 -12.7998c-14.5 -14.2002 -7 -38.8994 14.3994 -42.8994c8 -1.40039 23.1006 0.599609 31.4004 5.19922c7.2998 3.80078 12.7998 10.6006 14.8994 19.6006c1.7002 7.7002 1.2002 2.39941 1.2002 118.5
+c0 5.7002 1.7002 7.2002 6.7002 8.2998c0 0 87.9004 16.4004 91.9004 17.0996c5.69922 1 8.39941 -0.5 8.39941 -6.09961c0 -78.7998 1 -77.2002 -2.2002 -80.7998c-2.09961 -2.5 -4.69922 -3.2002 -7.69922 -3.7002c-17.7002 -3.2002 -29.6006 -4.7998 -38 -12.7998
+c-10.6006 -10.4004 -10.4004 -26.7998 1.39941 -36.7998c9.7002 -7.80078 19.7998 -7.2002 31.9004 -5c13.7998 2.59961 24.0996 10.1992 27.2998 23.7998zM345.2 416c56.8994 0 102.8 -45.9004 102.8 -102.8v-242.4c0 -56.8994 -45.7998 -102.8 -102.8 -102.8h-242.4
+c-56.8994 0 -102.8 45.9004 -102.8 102.8v242.4c0 56.8994 45.9004 102.8 102.8 102.8h242.4zM223.6 4c106.301 0 192.5 86.2002 192.5 192.5s-86.1992 192.5 -192.5 192.5c-106.3 0 -192.5 -86.2002 -192.5 -192.5s86.2002 -192.5 192.5 -192.5z" />
+    <glyph glyph-name="itunes-note" unicode="&#xf3b5;" horiz-adv-x="384" 
+d="M381.9 59.7998c-6.40039 -27.3994 -27.2002 -42.7998 -55.1006 -48c-24.5 -4.5 -44.8994 -5.59961 -64.5 10.2002c-23.8994 20.0996 -24.2002 53.4004 -2.7002 74.4004c17 16.1992 40.9004 19.5 76.8008 25.7998c6 1.09961 11.1992 2.5 15.5996 7.39941
+c6.40039 7.2002 4.40039 4.10059 4.40039 163.2c0 11.2002 -5.5 14.2998 -17 12.2998c-8.2002 -1.39941 -185.7 -34.5996 -185.7 -34.5996c-10.2002 -2.2002 -13.4004 -5.2002 -13.4004 -16.7002c0 -234.7 1.10059 -223.899 -2.5 -239.5
+c-4.2002 -18.2002 -15.3994 -31.8994 -30.2002 -39.5c-16.7998 -9.2998 -47.1992 -13.3994 -63.3994 -10.3994c-43.2002 8.09961 -58.4004 58 -29.1006 86.5996c17 16.2002 40.9004 19.5 76.8008 25.7998c6 1.10059 11.1992 2.5 15.5996 7.40039
+c10.0996 11.5 1.7998 256.6 5.2002 270.2c0.799805 5.19922 3 9.59961 7.09961 12.8994c4.2002 3.5 11.7998 5.5 13.4004 5.5c204 38.2002 228.899 43.1006 232.399 43.1006c11.5 0.799805 18.1006 -6 18.1006 -17.6006c0.200195 -344.5 1.09961 -326 -1.7998 -338.5z" />
+    <glyph glyph-name="jenkins" unicode="&#xf3b6;" horiz-adv-x="512" 
+d="M487.1 23c1.5 -11.9004 -5.2998 -28.2998 -8.69922 -39.7002c-4.90039 -16.2998 -9.7002 -31.8994 -14.6006 -47.2002h-422c-0.700195 1.90039 -1.39941 4 -2.09961 6c-4.60059 14.2002 -12.6006 31.7002 -14.7002 45.8008
+c-3.09961 20.8994 16.5996 22.0996 29.2002 31.0996c19.5 14 34.7998 21.7998 55.8994 34.2998c6.30078 3.7998 25.1006 13.2002 27.3008 17.6006c4.2998 8.69922 -7.30078 20.8994 -10.4004 27.6992c-4.90039 10.7002 -7.5 19.8008 -8.2002 30.4004
+c-17.7002 2.7998 -31.0996 13.2998 -39.2002 25.2002c-13.3994 19.7002 -22.6992 56 -11.0996 83.7002c0.900391 2.19922 5.40039 6.5 6.09961 9.7998c1.40039 6.59961 -2.5 15.3994 -2.69922 22.3994c-1.2002 36 6.09961 67 30.2998 77.8008
+c9.7998 39.0996 45 52.1992 78.0996 71.5996c12.2998 7.2998 26 11.9004 40.1006 17.0996c50.5 18.7002 128.1 15.1006 170.1 -16.5996c17.7998 -13.5 46.2002 -41.9004 56.4004 -62.5c26.8994 -54.2998 25 -145.1 6.19922 -211.2
+c-2.5 -8.89941 -6.19922 -21.8994 -11.2998 -32.5996c-3.59961 -7.40039 -14.7002 -22.2998 -13.2998 -28.9004c1.40039 -6.7998 25.2998 -24.8994 30.4004 -29.8994c9.19922 -8.80078 26.7998 -20.7002 28.1992 -31.9004zM205.9 414.3
+c-33.2002 -9.39941 -75.7002 -33.5 -89.3008 -63.3994c10.6006 1.5 17.9004 6.7998 28.3008 7.5c3.89941 0.299805 9.09961 -1.60059 13.5996 -0.5c9 2.2998 16.5996 22.5 23.4004 30c6.59961 7.39941 14.5996 10.5 20 17.1992c3.5 1.7002 8.69922 1.60059 8.89941 6.80078
+c-1.5 1.69922 -3.09961 2.89941 -4.89941 2.39941zM101.1 320.7c-14.6992 -16.1006 -11.5996 -46.2998 -9.7998 -67.7998c26.5 16.6992 61.6006 -1.30078 61.2998 -29.6006c12.6006 0.299805 4.7002 15.7998 2.40039 25.7002c-7.5 32.5996 12.5996 67.9004 0.900391 97.5996
+c-22.7002 -1.7998 -41.3008 -11 -54.8008 -25.8994zM137.8 120.5c4.90039 -20 15.7002 -46 26.2998 -61.4004c13.6006 -19.3994 40.1006 -22.2998 68.7002 -24.1992c5.10059 11 23.9004 10.0996 36.2002 7.19922c-14.7002 5.80078 -28.4004 19.9004 -39.7002 32.4004
+c-13 14.2998 -26.0996 29.7002 -26.7998 48.4004c24.5 -34 44.7998 -63.8008 89.5 -78.8008c33.7998 -11.2998 73.2002 5.2002 99.2002 23.4004c10.7998 7.59961 17.2002 19.5996 24.8994 30.5996c28.7002 41.2002 42 100.101 39.1006 157.101
+c-1.2002 23.5 -1.10059 47 -9 62.7998c-8.2998 16.5996 -36.2002 31.2998 -52.5 16.4004c-3 16.0996 13.5996 26.0996 33.0996 20.2998c-13.8994 18 -28.5996 39.5996 -48.2998 50.7002c-34.4004 19.5 -92.7002 34.0996 -129.3 15.7998
+c-29.6006 -14.7002 -69.5 -39.1006 -83.1006 -70c12.7002 -29.7998 -3.7998 -57.1006 -4.7998 -87.4004c-0.599609 -16.0996 7.60059 -30.2002 8.2002 -47.7002c-4.40039 -7.19922 -17.7002 -8.09961 -26.9004 -7.59961c-3.09961 15.5 -8.5 32.9004 -24.5 34.7002
+c-22.5 2.39941 -39.0996 -16.2998 -40.0996 -35.7998c-1.2002 -23 17.7002 -61 44.4004 -58.4004c10.2998 1.09961 12.7998 11.4004 24.0996 11.2998c6.09961 -12.2002 -9.40039 -16 -11 -24.7002c-0.400391 -2.19922 1.2998 -11 2.2998 -15.0996zM359.8 -3.59961
+c-1.59961 -4.40039 0.299805 -10.4004 -0.599609 -16.5c14.8994 -4.2002 31.8994 -6.40039 50.7002 -7c3.69922 4.7998 4.89941 13.7998 4.5 22.7998c-0.600586 10.7998 -3.40039 33.0996 -10.1006 37c-14.0996 8.2002 -39 -16.5 -49.5996 -20.2998
+c1.2002 -3.40039 3.09961 -6 3.2002 -10.2002c6.2998 1.5 13.8994 0.5 19.2998 -2.2002c-6.2998 -0.700195 -13.2998 -0.599609 -17.4004 -3.59961zM342.6 16.4004c7.60059 5.5 14.3008 12 22.2002 17.0996c-18.2002 -1.59961 -41 -12.9004 -59 -4.90039
+c-0.0996094 -0.899414 -1.2998 -0.599609 -1.5 -1.39941c12.2998 -9.60059 21.5 -11.6006 38.2998 -10.7998zM330.5 -16.7998c26.9004 -8.40039 22.2002 36.7998 -2.7998 20.2002c-0.700195 -8.2002 1.2002 -10.8008 2.7998 -20.2002zM226 9.40039
+c0 6.19922 3.59961 12 2.7998 16.3994c-13.7998 2.40039 -31.8994 0.799805 -41.2998 7.2998c-9.59961 -9.69922 26.9004 -23 38.5 -23.6992zM57.7002 -49.0996v-0.100586h180.7c-0.800781 2.5 -1.5 4.90039 -2.2002 7.2002c-4.7998 15.2998 -7.5 26.7002 -8.7002 35.5
+c-19.2002 9.2002 -39.7002 18.5 -56.2002 30.2002c-3 2.2002 -23.3994 28.7002 -26.2002 27.5996c-36.8994 -14.5996 -71.3994 -39.7002 -102.199 -63.5c5.59961 -11.7998 10.5 -24.2002 14.7998 -36.8994zM298.3 -54.7998h-0.799805
+c0.299805 0.200195 0.5 0.399414 0.799805 0.5v-0.5zM305.8 -49.0996h9.60059c-1 1.5 -2.10059 2.89941 -3.2002 4.2998c-2.10059 -1.5 -4.2998 -2.90039 -6.40039 -4.2998zM320.9 -24.4004c0.0996094 3.60059 0.299805 7.2002 0.399414 10.6006
+c-6.5 3.2002 -14 5.5 -23.5 5.89941c6.5 3.30078 15.9004 3.2002 21.7998 7.10059c0.100586 1.5 0.100586 2.89941 0.200195 4.2998c-10.7998 0.900391 -14.7998 5.59961 -21.8994 9.5c-11.6006 6.40039 -29 13.2002 -43.9004 16.0996
+c-18.5 3.60059 -16.7998 -25.1992 -16 -42.3994c0.700195 -13.6006 7.7002 -28 10.7998 -37c1.5 -4.2002 1.7998 -8.7002 5.40039 -9.5c6.39941 -1.5 27.3994 6.89941 33.3994 10.2002c12.7002 6.89941 22.5 17.8994 33.3008 25.1992zM374.3 -49.0996l0.600586 12.5996
+c-11.2002 -0.700195 -17.5 10.2002 -25.4004 11c-6.90039 0.700195 -12.7002 -7.90039 -21.7002 -4.2002c-2 -2.2002 -3.89941 -4.7002 -6 -6.89941c3.2002 -3.90039 6.10059 -8.10059 8.90039 -12.5h17.3994c0.200195 3.19922 2.80078 5.7998 6.10059 5.7998
+s6 -2.60059 6.09961 -5.7998h14zM383 -49.0996h36.2998c-6.7002 10.1992 -20.0996 18.7998 -35.7002 11.5c-0.199219 -3.7002 -0.399414 -7.5 -0.599609 -11.5zM466.4 -12.0996c1.19922 6.19922 4.59961 19.5996 3.7998 25.0996
+c-1.40039 9.7998 -14.6006 17.0996 -21.4004 23.0996c-12.3994 11.1006 -20.2002 21 -33.2002 31.4004c-5.19922 -7.7998 -16.5 -13 -20.7998 -19.2998c30.7002 14.8994 36.2998 -55.7998 24.2002 -78.5c1.90039 -6.7998 8.2998 -9.40039 10.9004 -15.5
+c-0.700195 -1.10059 -1.30078 -2.2002 -1.90039 -3.2998h27.9004c0.199219 0 0.399414 0 0.599609 -0.100586c4.09961 13.1006 7.59961 25.9004 9.90039 37.1006zM222.2 317.5c5.39941 14.9004 27.2002 34.7002 45 32c7.7002 -1.2002 18 -8.2002 12.2002 -17.7002
+c-30.2002 7 -45.2002 -12.5996 -54.4004 -33.0996c-8.09961 2 -4.90039 13.0996 -2.7998 18.7998zM406.3 254.4c8.2002 3.59961 22.4004 0.699219 29.6006 5.2998c-4.2002 11.5 -10.3008 21.3994 -9.30078 37.7002c0.5 0 1 0 1.40039 -0.100586
+c6.7998 -14.2002 12.7002 -29.2002 21.4004 -41.7002c-5.7002 -13.5 -43.6006 -25.3994 -43.1006 -1.19922zM309.5 251.7c-6.7998 10.8994 -19 32.5 -14.5 45.2998c6.5 -11.9004 8.59961 -24.4004 17.7998 -33.2998c4.10059 -4 12.2002 -9 8.2002 -20.2002
+c-0.900391 -2.7002 -7.7998 -8.59961 -11.7002 -9.7002c-14.3994 -4.2998 -47.8994 -0.899414 -36.5996 17.1006c11.8994 -0.700195 27.8994 -7.80078 36.7998 0.799805zM336.8 181.7c3.7998 -6.60059 1.40039 -18.7002 12.1006 -20.6006
+c20.1992 -3.39941 43.5996 12.3008 58.0996 17.8008c9 15.1992 -0.799805 20.6992 -8.90039 30.5c-16.5996 20 -38.7998 44.7998 -38 74.6992c6.7002 4.90039 7.30078 -7.39941 8.2002 -9.69922c8.7002 -20.3008 30.4004 -46.2002 46.2998 -63.5
+c3.90039 -4.30078 10.3008 -8.40039 11 -11.2002c2.10059 -8.2002 -5.39941 -18 -4.5 -23.5c-21.6992 -13.9004 -45.7998 -29.1006 -81.3994 -25.6006c-7.40039 6.7002 -10.2998 21.4004 -2.90039 31.1006zM135.5 190.9c-6.7998 3.89941 -8.40039 21 -16.4004 21.3994
+c-11.3994 0.700195 -9.2998 -22.2002 -9.2998 -35.5c-7.7998 7.10059 -9.2002 29.1006 -3.5 40.2998c-6.59961 3.2002 -9.5 -3.59961 -13.0996 -5.89941c4.7002 34.0996 49.7998 15.7998 42.2998 -20.2998zM435.1 162.1c-10.0996 -19.1992 -24.3994 -40.3994 -54 -41
+c-0.599609 6.2002 -1.09961 15.6006 0 19.4004c22.7002 2.2002 36.6006 13.7002 54 21.5996zM293.2 149.7c18.8994 -9.90039 53.5996 -11 79.2998 -10.2002c1.40039 -5.59961 1.2998 -12.5996 1.40039 -19.4004c-33 -1.7998 -72 6.40039 -80.7002 29.6006zM385.4 103
+c-1.7002 -4.2998 -5.30078 -9.2998 -9.80078 -11.0996c-12.0996 -4.90039 -45.5996 -8.7002 -62.3994 0.299805c-10.7002 5.7002 -17.5 18.5 -23.4004 26c-2.7998 3.59961 -16.8994 12.8994 -0.200195 12.8994c13.1006 -32.6992 58 -29 95.8008 -28.0996z" />
+    <glyph glyph-name="joget" unicode="&#xf3b7;" horiz-adv-x="496" 
+d="M378.1 403c116.601 -71.7998 152.9 -224.6 81 -341.2c-71.8994 -116.5 -224.6 -152.8 -341.199 -80.8994c-116.601 71.8994 -152.9 224.6 -81 341.199c46.8994 76 128.1 117.9 211.3 117.9c44.3994 0 89.3994 -11.9004 129.899 -37zM429.9 79.7998
+c5.2998 8.7002 9.89941 17.6006 13.8994 26.6006c-32.0996 -1.10059 -157.1 1.5 -208.8 -17.6006c-58.4004 -21.5 -36.9004 -53.3994 -31.2002 -67.0996c3.7998 -9.10059 14.7002 -28.7998 23.7002 -42.4004c6.7998 -0.599609 13.5996 -1 20.4004 -1
+c71.5996 0 141.6 36 182 101.5zM229.1 166.1c51 -1.2998 205.4 -4.39941 230.301 -4.89941c11.8994 81.7998 -24.5 166.6 -99.3008 212.7c-100.5 61.8994 -232.1 30.6992 -294 -69.8008c-28.5996 -46.3994 -37.2998 -99.3994 -28.5 -149.1
+c11 40.9004 49.7002 131.5 178.301 140.2c50.8994 4 41.5 -19.2002 23.5996 -29.7002c-17.7998 -10.5 -45.7002 -23.7998 -68.9004 -51.2002c-23.1992 -27.3994 3 -46.7998 58.5 -48.2002zM412.9 220.9c22.6992 -6 19.0996 -15.5 19.0996 -15.5l-46.5 -23.4004
+l-169.5 -1.59961s33.7998 10.7998 65.2998 31.2998c26 16.8994 49.7002 35.5996 67.5 35.5996c3.7002 0 7.2002 -0.899414 10.4004 -2.7002c18.5 -10.5996 -2.90039 -18.1992 -13.4004 -24.5996s-50.7002 -34.5 -50.7002 -34.5s1.40039 -7.59961 31.1006 8.2002
+c29.7002 15.8994 64 33.2002 86.7002 27.2002z" />
+    <glyph glyph-name="js" unicode="&#xf3b8;" 
+d="M0 416h448v-448h-448v448zM243.8 66.5996v143.7h-42.0996v-143.1c0 -21.1006 -8.7998 -26.5 -22.6006 -26.5c-14.5 0 -20.5 9.89941 -27.0996 21.5996l-34.2998 -20.7002c10 -21.0996 29.5 -38.5 63.2002 -38.5c37.2998 0 62.8994 19.9004 62.8994 63.5zM343.4 3.09961
+c39.8994 0 69.6992 20.8008 69.6992 58.6006c0 35.2002 -20.0996 50.8994 -55.8994 66.2002l-10.5 4.5c-18.1006 7.89941 -25.9004 13 -25.9004 25.5996c0 10.2002 7.7998 18 20.1006 18c12.0996 0 19.8994 -5.09961 27.0996 -18l32.7998 21
+c-13.7998 24.4004 -33 33.7002 -59.7998 33.7002c-37.5 0 -61.5996 -24 -61.5996 -55.6006c0 -34.2998 20.0996 -50.5996 50.5 -63.5l10.5 -4.5c19.2998 -8.5 30.6992 -13.5996 30.6992 -28c0 -12.0996 -11.1992 -20.7998 -28.5996 -20.7998
+c-20.7002 0 -32.5 10.9004 -41.5 25.6006l-34.2998 -19.8008c12.2998 -24.3994 37.5996 -43 76.7002 -43z" />
+    <glyph glyph-name="js-square" unicode="&#xf3b9;" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM243.8 66.5996v143.7h-42.0996v-143.1c0 -21.1006 -8.7998 -26.5 -22.6006 -26.5c-14.5 0 -20.5 9.89941 -27.0996 21.5996
+l-34.2998 -20.7002c10 -21.0996 29.5 -38.5 63.2002 -38.5c37.2998 0 62.8994 19.9004 62.8994 63.5zM343.4 3.09961c39.8994 0 69.6992 20.8008 69.6992 58.6006c0 35.2002 -20.0996 50.8994 -55.8994 66.2002l-10.5 4.5c-18.1006 7.89941 -25.9004 13 -25.9004 25.5996
+c0 10.2002 7.7998 18 20.1006 18c12.0996 0 19.8994 -5.09961 27.0996 -18l32.7998 21c-13.7998 24.4004 -33 33.7002 -59.7998 33.7002c-37.5 0 -61.5996 -24 -61.5996 -55.6006c0 -34.2998 20.0996 -50.5996 50.5 -63.5l10.5 -4.5
+c19.2998 -8.5 30.6992 -13.5996 30.6992 -28c0 -12.0996 -11.1992 -20.7998 -28.5996 -20.7998c-20.7002 0 -32.5 10.9004 -41.5 25.6006l-34.2998 -19.8008c12.2998 -24.3994 37.5996 -43 76.7002 -43z" />
+    <glyph glyph-name="keycdn" unicode="&#xf3ba;" horiz-adv-x="512" 
+d="M63.7998 38.7002l60.5 59c32.1006 -42.7998 71.1006 -66 126.601 -67.4004c30.5 -0.700195 60.2998 7 86.3994 22.4004c5.10059 -5.2998 18.5 -19.5 20.9004 -22c-32.2002 -20.7002 -69.6006 -31.1006 -108.101 -30.2002
+c-43.2998 1.09961 -84.5996 16.7002 -117.699 44.4004c0.299805 0.599609 -38.2002 -37.5 -38.6006 -37.9004c9.5 -29.7998 -13.0996 -62.4004 -46.2998 -62.4004c-26.7998 0.100586 -47.5 21.7002 -47.5 48.5c0 34.3008 33.0996 56.6006 63.7998 45.6006zM418.7 291.1
+c19.0996 -31.2998 29.5996 -67.3994 28.7002 -104c-1.10059 -44.7998 -19 -87.5 -48.6006 -121c0.299805 -0.299805 23.7998 -25.1992 24.1006 -25.5c9.59961 1.30078 19.1992 -2 25.8994 -9.09961c11.2998 -12 10.9004 -30.9004 -1.09961 -42.4004
+c-12 -11.2998 -30.9004 -10.8994 -42.4004 1.10059c-6.7002 7 -9.39941 16.7998 -7.59961 26.2998c-24.9004 26.5996 -44.4004 47.2002 -44.4004 47.2002c42.7002 34.0996 63.2998 79.5996 64.4004 124.2c0.700195 28.8994 -7.2002 57.1992 -21.1006 82.1992zM104 394.9
+c6.7002 -7 9.40039 -16.8008 7.59961 -26.3008l45.9004 -48.0996c-4.7002 -3.7998 -13.2998 -10.4004 -22.7998 -21.2998c-25.4004 -28.5 -39.6006 -64.7998 -40.7002 -102.9c-0.700195 -28.8994 6.09961 -57.2002 20 -82.3994l-22 -21.5
+c-19.2998 31.5996 -28.9004 67.6992 -27.7998 104.699c1 44.6006 18.2998 87.6006 47.5 121.101l-25.2998 26.3994c-9.60059 -1.2998 -19.2002 2 -25.9004 9.10059c-11.2998 12 -10.9004 30.8994 1.09961 42.3994c11.9004 11.2002 30.6006 10.9004 42.4004 -1.19922z
+M464.9 440c26 0 47.0996 -22.4004 47.0996 -48.2998c0 -25.9004 -21.0996 -47.7002 -47.0996 -47.7002c-6.30078 -0.0996094 -14 1.09961 -15.9004 1.7998l-62.9004 -59.7002c-32.6992 43.6006 -76.6992 65.9004 -126.899 67.2002
+c-30.5 0.700195 -60.2998 -6.7998 -86.2002 -22.3994l-21.0996 22c32.1992 20.7998 69.5996 31.0996 108.1 30.1992c43.2998 -1.09961 84.5996 -16.6992 117.7 -44.5996l41.0996 38.5996c-1.5 4.7002 -2.2002 9.60059 -2.2002 14.5
+c-0.0996094 26.7002 22.3008 48.4004 48.3008 48.4004zM256.7 334.6c5.5 0 10.8994 -0.399414 16.3994 -1.09961c78.1006 -9.7998 133.4 -81.0996 123.801 -159.1c-9.80078 -78.1006 -81.1006 -133.4 -159.101 -123.801c-78.0996 9.80078 -133.399 81.1006 -123.8 159.2
+c9.2998 72.4004 70.0996 124.601 142.7 124.8zM197.7 215.2c0.599609 -22.7002 12.2002 -41.7998 32.3994 -52.2002l-11 -51.7002h73.7002l-11 51.7002c20.1006 10.9004 32.1006 29 32.4004 52.2002c-0.400391 32.7998 -25.7998 57.5 -58.2998 58.2998
+c-32.1006 -0.799805 -57.3008 -24.7998 -58.2002 -58.2998zM256 288z" />
+    <glyph glyph-name="kickstarter" unicode="&#xf3bb;" 
+d="M400 -32h-352c-26.4004 0 -48 21.5996 -48 48v352c0 26.4004 21.5996 48 48 48h352c26.4004 0 48 -21.5996 48 -48v-352c0 -26.4004 -21.5996 -48 -48 -48zM199.6 269.5c0 30.7002 -17.5996 45.0996 -39.6992 45.0996c-25.8008 0 -40 -19.7998 -40 -44.5v-154.8
+c0 -25.7998 13.6992 -45.5996 40.5 -45.5996c21.5 0 39.1992 14 39.1992 45.5996v41.7998l60.6006 -75.6992c12.2998 -14.9004 39 -16.8008 55.7998 0c14.5996 15.0996 14.7998 36.7998 4 50.3994l-49.0996 62.7998l40.5 58.7002c9.39941 13.5 9.5 34.5 -5.60059 49.1006
+c-16.3994 15.8994 -44.5996 17.2998 -61.3994 -7l-44.8008 -64.7002v38.7998z" />
+    <glyph glyph-name="kickstarter-k" unicode="&#xf3bc;" horiz-adv-x="384" 
+d="M147.3 333.6v-70.5996l82.7998 118.2c31.2002 44.3994 83.3008 41.7998 113.601 12.7998c27.8994 -26.7002 27.7998 -65.0996 10.3994 -89.7998l-74.8994 -107.4l90.7998 -114.8c19.9004 -24.7998 19.5996 -64.5996 -7.40039 -92.2002
+c-31.0996 -30.7002 -80.5 -27.2002 -103.199 0l-112.101 138.3v-76.5c0 -57.7998 -32.5996 -83.3994 -72.3994 -83.3994c-49.6006 0 -74.9004 36.0996 -74.9004 83.3994v283c0 45.2002 26.2002 81.4004 73.9004 81.4004c40.8994 0 73.3994 -26.2002 73.3994 -82.4004z" />
+    <glyph glyph-name="laravel" unicode="&#xf3bd;" horiz-adv-x="512" 
+d="M504.4 332.17c0.131836 -0.549805 0.240234 -1.45605 0.240234 -2.02246c0 -0.0185547 0 -0.0488281 -0.000976562 -0.0673828v-109.85c0.000976562 -0.0205078 0.000976562 -0.0527344 0.000976562 -0.0722656c0 -2.5498 -1.79199 -5.65332 -4.00098 -6.92773
+l-92.2393 -53.1104v-105.26v-0.0224609c0 -2.54883 -1.79199 -5.65332 -4 -6.92773l-192.561 -110.84c-0.37207 -0.194336 -0.999023 -0.454102 -1.39941 -0.580078c-0.180664 -0.0605469 -0.350586 -0.169922 -0.550781 -0.220703
+c-0.555664 -0.148438 -1.47363 -0.269531 -2.0498 -0.269531c-0.575195 0 -1.49414 0.121094 -2.0498 0.269531c-0.219727 0.0605469 -0.419922 0.180664 -0.629883 0.260742c-0.378906 0.119141 -0.975586 0.360352 -1.33008 0.540039l-192.5 110.84
+c-2.20801 1.27441 -4 4.37891 -4 6.92773v0.0224609v329.699c0.00195312 0.589844 0.126953 1.53125 0.280273 2.10059c0.0693359 0.189453 0.199219 0.489258 0.290039 0.669922c0.111328 0.354492 0.339844 0.910156 0.509766 1.24023
+c0.149414 0.259766 0.370117 0.469727 0.549805 0.719727c0.177734 0.270508 0.496094 0.6875 0.709961 0.929688c0.208008 0.179688 0.561523 0.448242 0.790039 0.600586c0.226562 0.210938 0.621094 0.520508 0.879883 0.689453v0l96.2705 55.4199
+c1.02441 0.591797 2.81641 1.07227 4 1.07227c1.18262 0 2.97461 -0.480469 4 -1.07227l96.29 -55.4199v0c0.25293 -0.173828 0.647461 -0.478516 0.879883 -0.679688c0.223633 -0.154297 0.573242 -0.422852 0.779297 -0.599609
+c0.21582 -0.24707 0.538086 -0.667969 0.720703 -0.94043c0.169922 -0.25 0.399414 -0.459961 0.540039 -0.719727c0.170898 -0.331055 0.404297 -0.886719 0.519531 -1.24023c0.0800781 -0.230469 0.219727 -0.44043 0.280273 -0.679688
+c0.154297 -0.561523 0.280273 -1.48926 0.280273 -2.07129v-0.0195312v-205.93l80.2197 46.1904v105.239c0.00195312 0.584961 0.126953 1.5166 0.280273 2.08008c0.0693359 0.240234 0.199219 0.450195 0.279297 0.680664
+c0.120117 0.354492 0.352539 0.915039 0.520508 1.25c0.149414 0.259766 0.370117 0.469727 0.540039 0.709961c0.179688 0.270508 0.50293 0.6875 0.719727 0.929688c0.205078 0.179688 0.553711 0.448242 0.780273 0.599609
+c0.229492 0.208008 0.624023 0.516602 0.879883 0.69043v0l96.2803 55.4502c1.02441 0.591797 2.81641 1.07129 4 1.07129c1.18262 0 2.97461 -0.479492 4 -1.07129l96.2598 -55.4199c0.259766 -0.171875 0.663086 -0.476562 0.899414 -0.680664
+c0.25 -0.199219 0.540039 -0.379883 0.770508 -0.599609c0.214844 -0.24707 0.538086 -0.667969 0.719727 -0.94043c0.164062 -0.18457 0.40625 -0.50293 0.540039 -0.709961c0.173828 -0.333008 0.411133 -0.892578 0.530273 -1.25
+c0.0888672 -0.182617 0.214844 -0.487305 0.280273 -0.679688zM111.6 430.72l-80.1895 -46.1602l80.1797 -46.1699l80.2002 46.1807l-80.1904 46.1494v0zM199.85 370.72l-33.6895 -19.4297l-46.5303 -26.79v-201.29l33.6904 19.4004l46.5293 26.79v201.319zM199.85 -42.0596
+l-0.109375 92.3594l-92.1904 52.1807v0v0c-0.248047 0.166992 -0.633789 0.462891 -0.859375 0.65918c-0.25 0.200195 -0.540039 0.360352 -0.770508 0.580078v0c-0.198242 0.219727 -0.494141 0.595703 -0.660156 0.839844
+c-0.177734 0.206055 -0.446289 0.555664 -0.599609 0.780273v0c-0.139648 0.266602 -0.328125 0.713867 -0.419922 1c-0.125977 0.240234 -0.295898 0.643555 -0.379883 0.900391v0c-0.0683594 0.322266 -0.140625 0.850586 -0.160156 1.17969
+c-0.0498047 0.246094 -0.103516 0.649414 -0.120117 0.900391v215.18l-46.5205 26.7998l-33.6895 19.3799v-311.18zM207.85 64.1104l117.62 67.1494l58.7998 33.5605l-80.1299 46.1299l-92.2598 -53.1104l-84.0898 -48.4102zM392.37 59.54v91.4102l-45.7705 -26.1504
+l-130.72 -74.5996v-92.3105zM392.37 178.67v91.3301l-46.5303 26.8096l-33.6895 19.4004v-91.4199l46.5293 -26.79zM400.37 283.95l80.1797 46.1797l-80.1797 46.1504l-80.2002 -46.1602zM408.37 178.67l80.3096 46.1504v0v91.3896l-33.6797 -19.4004l-46.6299 -26.8096
+v-91.3301z" />
+    <glyph glyph-name="line" unicode="&#xf3c0;" 
+d="M272.1 243.8v-71.0996c0 -1.7998 -1.39941 -3.2002 -3.19922 -3.2002h-11.4004c-1.09961 0 -2.09961 0.599609 -2.59961 1.2998l-32.6006 44v-42.2002c0 -1.7998 -1.39941 -3.19922 -3.2002 -3.19922h-11.3994c-1.7998 0 -3.2002 1.39941 -3.2002 3.19922v71.1006
+c0 1.7998 1.40039 3.2002 3.2002 3.2002h11.2998c1 0 2.09961 -0.5 2.59961 -1.40039l32.6006 -44v42.2002c0 1.7998 1.39941 3.2002 3.2002 3.2002h11.3994c1.7998 0.0996094 3.2998 -1.40039 3.2998 -3.10059zM190.1 247c1.80078 0 3.2002 -1.5 3.2002 -3.2002v-71.0996
+c0 -1.7998 -1.39941 -3.2002 -3.2002 -3.2002h-11.3994c-1.7998 0 -3.2002 1.40039 -3.2002 3.2002v71.0996c0 1.7998 1.40039 3.2002 3.2002 3.2002h11.3994zM162.6 187.4c1.7002 0 3.10059 -1.5 3.10059 -3.2002v-11.4004c0 -1.7998 -1.40039 -3.2002 -3.2002 -3.2002
+h-45.7002c-0.899414 0 -1.59961 0.400391 -2.2002 0.900391c-0.599609 0.599609 -0.899414 1.2998 -0.899414 2.2002v71.0996c0 1.7998 1.39941 3.2002 3.2002 3.2002h11.3994c1.7998 0 3.2002 -1.40039 3.2002 -3.2002v-56.3994h31.0996zM332.1 247
+c1.7002 0 3.10059 -1.5 3.2002 -3.2002v-11.3994c0 -1.80078 -1.39941 -3.2002 -3.2002 -3.2002h-31.0996v-12h31.0996c1.80078 0 3.2002 -1.40039 3.2002 -3.2002v-11.5c0 -1.7998 -1.39941 -3.2002 -3.2002 -3.2002h-31.0996v-12h31.0996
+c1.80078 0 3.2002 -1.39941 3.2002 -3.2002v-11.3994c0 -1.7998 -1.39941 -3.2002 -3.2002 -3.2002h-45.6992c-1.80078 0 -3.2002 1.5 -3.2002 3.2002v71.0996c0 1.7998 1.5 3.2002 3.2002 3.2002h45.6992zM448 334.3v-285.3
+c-0.0996094 -44.7998 -36.7998 -81.0996 -81.7002 -81h-285.3c-44.7998 0.0996094 -81.0996 36.9004 -81 81.7002v285.3c0.0996094 44.7998 36.9004 81.0996 81.7002 81h285.3c44.7998 -0.0996094 81.0996 -36.7998 81 -81.7002zM386.4 211.7
+c0 73 -73.2002 132.399 -163.101 132.399c-89.8994 0 -163.1 -59.3994 -163.1 -132.399c0 -65.4004 58 -120.2 136.399 -130.601c19.1006 -4.09961 16.9004 -11.0996 12.6006 -36.7998c-0.700195 -4.09961 -3.2998 -16.0996 14.0996 -8.7998
+c17.4004 7.2998 93.9004 55.2998 128.2 94.7002c23.5996 26 34.9004 52.2998 34.9004 81.5z" />
+    <glyph glyph-name="lyft" unicode="&#xf3c3;" horiz-adv-x="512" 
+d="M0 366.9h77.7998v-208.7c0 -33.1006 15 -52.7998 27.2002 -61c-12.7002 -11.1006 -51.2002 -20.9004 -80.2002 2.7998c-17 14 -24.7998 37.2998 -24.7998 59v207.9zM485.9 193.4c0 -14.2002 11.5996 -25.9004 26.0996 -25.9004v-76.5
+c-56.7002 0 -102.7 46.0996 -102.7 102.7v77.0996c0 34.6006 -52.2002 34.6006 -52.2002 0v-23.2998h38.8008v-76.7998h-38.8008v-6.7002c0 -21.7998 -7.69922 -45 -24.7998 -59c-16.2998 -13.7002 -35.7002 -16.2998 -51.7002 -14v179.2
+c0 56.7002 46.1006 102.7 102.7 102.7c49.1006 0 90.2002 -34.4004 100.3 -80.7002h26.1006v-76.7998h-23.7998v-22zM191.6 292.4v0.5h77.1006v-178.2c0 -52.4004 -29.7002 -91.7002 -76.7998 -100.8c-26.1006 -5.10059 -52.5 -2.80078 -77.6006 4.69922v70.3008
+c9.7998 -4.2002 29.5 -9.40039 45 -7.80078c20.4004 2 32.7998 11.9004 34.9004 25.3008c0 0 -21.2002 -20.4004 -58.2002 -10.6006c-37 9.90039 -45 40.1006 -45 63.9004v132.7h76.7998v-113c0 -15.4004 23.7998 -15.4004 23.7998 0v113z" />
+    <glyph glyph-name="magento" unicode="&#xf3c4;" 
+d="M445.7 320.1v-256.1l-63.4004 -36.5v255.8l-158.5 91.6006l-158.6 -91.6006l0.399414 -255.899l-63.2998 36.5996v255.9l221.9 128.1zM255.6 27.5v255.9l63.4004 -36.6006v-256l-95.0996 -54.8994l-94.9004 54.8994l-0.0996094 255.9l63.2998 36.5996v-256
+l31.7998 -18.2002z" />
+    <glyph glyph-name="medapps" unicode="&#xf3c6;" horiz-adv-x="320" 
+d="M118.3 209.6c3.5 12.5 6.90039 33.6006 13.2002 33.6006c8.2998 -1.7998 9.59961 -23.4004 18.5996 -36.6006c4.60059 23.5 5.30078 85.1006 14.1006 86.7002c9 0.700195 19.7002 -66.5 22 -77.5c9.89941 -4.09961 48.8994 -6.59961 48.8994 -6.59961
+c1.90039 -7.2998 -24 -7.60059 -40 -7.7998c-4.59961 -14.8008 -5.39941 -27.7002 -11.3994 -28c-4.7002 -0.200195 -8.2002 28.7998 -17.5 49.5996l-9.40039 -65.5c-4.39941 -13 -15.5 22.5 -21.8994 39.2998c-3.30078 0.100586 -62.4004 1.60059 -47.6006 7.7998zM228 0
+h-136c-21.2002 0 -21.2002 32 0 32h136c21.2002 0 21.2002 -32 0 -32zM204 -64h-88c-21.2002 0 -21.2002 32 0 32h88c21.2002 0 21.2002 -32 0 -32zM238.2 77.5c-3.60059 -21.2998 -36 -15.5 -32.6006 5.09961c3.60059 21.2002 5.60059 40.6006 15.3008 58.6006
+c32.5996 60.2998 66.0996 95.5 66.0996 151.6c0 67.9004 -57 123.2 -127 123.2s-127 -55.2998 -127 -123.2c0 -56.0996 33.5 -91.2998 66.0996 -151.7c9.7002 -17.8994 11.7002 -36.8994 15.3008 -58.5996c3.5 -20.7998 -29.1006 -26.0996 -32.6006 -5.09961
+c-3.2002 19.0996 -5.2002 36.3994 -11.8994 48.8994c-8 14.7002 -16.1006 28.1006 -24 41c-24.6006 40.4004 -45.9004 75.2998 -45.9004 125.5c0 85.6006 71.7998 155.2 160 155.2s160 -69.5996 160 -155.2c0 -50.2998 -21.2998 -85.0996 -45.9004 -125.5
+c-7.89941 -12.8994 -16.0996 -26.2998 -24 -41c-6.69922 -12.3994 -8.69922 -29.8994 -11.8994 -48.7998z" />
+    <glyph glyph-name="medium-m" unicode="&#xf3c7;" horiz-adv-x="512" 
+d="M71.5 305.7c0.599609 5.89941 -1.7002 11.7998 -6.09961 15.7998l-45.1006 54.4004v8.09961h140.2l108.4 -237.7l95.2998 237.7h133.7v-8.09961l-38.6006 -37c-3.2998 -2.5 -5 -6.7002 -4.2998 -10.8008v-272c-0.700195 -4.09961 1 -8.2998 4.2998 -10.7998l37.7002 -37
+v-8.09961h-189.7v8.09961l39.1006 37.9004c3.7998 3.7998 3.7998 5 3.7998 10.7998v219.8l-108.7 -275.899h-14.7002l-126.399 275.899v-184.899c-1.10059 -7.80078 1.5 -15.6006 7 -21.2002l50.7998 -61.6006v-8.09961h-144v8l50.7998 61.7002
+c5.40039 5.59961 7.90039 13.5 6.5 21.2002v213.8z" />
+    <glyph glyph-name="medrt" unicode="&#xf3c8;" horiz-adv-x="544" 
+d="M113.7 192c0 -121.8 83.8994 -222.8 193.5 -241.1c-18.7002 -4.5 -38.2002 -6.90039 -58.2002 -6.90039c-137.6 0 -249 111 -249 248s111.4 248 248.9 248c20.0996 0 39.5996 -2.40039 58.1992 -6.90039c-109.6 -18.2998 -193.399 -119.3 -193.399 -241.1zM411.1 91.7002
+c77.7002 55.3994 104.4 155.1 67 233.899c11.2002 -9.89941 21.5 -21.2998 30.5 -34.1992c61.6006 -88.3008 40.8008 -210.301 -46.5 -272.601c-87.2998 -62.2998 -208.1 -41.2002 -269.699 47c-9 12.7998 -16.2002 26.4004 -21.7002 40.5
+c60.7998 -62.0996 162.7 -70 240.399 -14.5996zM192.3 335.7c72.5 54.5996 171.601 45.7002 221.601 -19.7998c45.2998 -59.7002 34.3994 -145.601 -22.3008 -201.801c18.5 51.4004 11.3008 111 -24.3994 158c-43 56.5 -114.601 78.3008 -178.9 60.5
+c1.2998 1 2.60059 2.10059 4 3.10059zM296 224h40c4.40039 0 8 -3.59961 8 -8v-48c0 -4.40039 -3.59961 -8 -8 -8h-40c-4.40039 0 -8 -3.59961 -8 -8v-40c0 -4.40039 -3.59961 -8 -8 -8h-48c-4.40039 0 -8 3.59961 -8 8v40c0 4.40039 -3.59961 8 -8 8h-40
+c-4.40039 0 -8 3.59961 -8 8v48c0 4.40039 3.59961 8 8 8h40c4.40039 0 8 3.59961 8 8v40c0 4.40039 3.59961 8 8 8h48c4.40039 0 8 -3.59961 8 -8v-40c0 -4.40039 3.59961 -8 8 -8z" />
+    <glyph glyph-name="microsoft" unicode="&#xf3ca;" 
+d="M0 416h214.6v-214.6h-214.6v214.6zM233.4 416h214.6v-214.6h-214.6v214.6zM0 182.6h214.6v-214.6h-214.6v214.6zM233.4 182.6h214.6v-214.6h-214.6v214.6z" />
+    <glyph glyph-name="mix" unicode="&#xf3cb;" 
+d="M0 384h448v-204.1c0 -56.6006 -88 -59.9004 -88 0v23.7998c0 56.7998 -82.7002 59 -88 4.2998v-116.1c0 -58 -96 -57.9004 -96 0v175.3c0 56.8994 -80.0996 59.3994 -88 6.5v-238.601c0 -58.0996 -88 -56.1992 -88 0v348.9z" />
+    <glyph glyph-name="mizuni" unicode="&#xf3cc;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111.1 248 -248c0 -137 -111 -248 -248 -248s-248 111 -248 248c0 136.9 111 248 248 248zM168 88.0996v223.9c0 22.0996 -17.9004 40 -40 40s-40 -17.9004 -40 -40v-272.1c21.2002 20.8994 48.5996 37.5996 80 48.1992zM288 98v214
+c0 22.0996 -17.9004 40 -40 40s-40 -17.9004 -40 -40v-214c13 2 26.4004 3.09961 40.2002 3.09961c13.5996 0 26.8994 -1.09961 39.7998 -3.09961zM408 40.2998v271.7c0 22.0996 -17.9004 40 -40 40s-40 -17.9004 -40 -40v-223.7c31.4004 -10.5996 58.7998 -27.2002 80 -48z
+" />
+    <glyph glyph-name="monero" unicode="&#xf3d0;" horiz-adv-x="496" 
+d="M352 64h108.4c-43.4004 -71.9004 -122.301 -120 -212.4 -120s-169 48.0996 -212.4 120h108.4v127.8l104 -104.8l104 105v-128zM88 112h-74.7998c-8.60059 25.0996 -13.2002 52 -13.2002 80c0 137 111 248 248 248s248 -111 248 -248c0 -28 -4.7002 -54.9004 -13.2002 -80
+h-74.7998v208l-160.6 -159.4l-159.4 159.4v-208z" />
+    <glyph glyph-name="napster" unicode="&#xf3d2;" horiz-adv-x="496" 
+d="M298.3 74.4004c-14.2002 -13.6006 -31.2998 -24.1006 -50.3994 -30.5c-19 6.39941 -36.2002 16.8994 -50.3008 30.5h100.7zM342.3 274c-56.3994 39.7998 -132.1 39.9004 -188.899 -0.0996094c-19.9004 16.7998 -43.6006 29.5 -69.5 36.3994v-161.6
+c0 -217.3 328 -219.101 328 0.299805v161.2c-26 -7 -49.6006 -19.2998 -69.6006 -36.2002zM133.5 332.5c6.5 -3.2002 14.0996 -7.40039 20.4004 -11.4004c58.6992 30.5 129.199 30.6006 187.899 0.100586c6.7002 4.2002 13.5 8 20.6006 11.5
+c-64.6006 59.8994 -164.5 59.7998 -228.9 -0.200195zM43.7998 354.8c17.5 -0.5 34.2998 -3.09961 50.6006 -7.5c82 91.6006 225.5 91.6006 307.5 0.100586c16.0996 4.39941 32.7998 6.89941 50.0996 7.39941v-69.2002c58.7002 -36.5 58.5 -121.899 -0.200195 -158.199
+l-0.299805 -1.7002c-25.9004 -238.8 -381.2 -243.601 -407.6 1.5c-58.5 37.2002 -58.5 121.8 -0.100586 158.3v69.2998zM259.2 96c13.0996 59.2998 33.5 56 113 55.4004c-0.799805 -8.2002 0.0996094 -32.3008 -26.2002 -47.4004c-4.40039 -2.5 -15.2998 -6 -25.5 -6.5
+c-25.2998 -1.2002 -61.2998 -1.5 -61.2998 -1.5zM123.7 151.3c79.2998 0.700195 99.7998 4 113 -55.3994c0 0 -36 0.399414 -61.2998 1.5c-10.3008 0.5 -21.1006 4 -25.5 6.5c-26.3008 15.0996 -25.4004 39.1992 -26.2002 47.3994zM292.8 27.9004
+c3 -4.90039 3.2002 -8.80078 3.2998 -8.90039c-29.0996 -17.5996 -67.0996 -17.5996 -96.1992 0c0 0 0.899414 5.5 3.69922 9.59961c3.5 5.10059 6.40039 6.60059 6.40039 6.60059c23.7002 -6.90039 51.0996 -7.2998 75.9004 0c0 0 3.69922 -2 6.89941 -7.2998z" />
+    <glyph glyph-name="node-js" unicode="&#xf3d3;" 
+d="M224 -60c-6.7002 0 -13.5 1.7998 -19.4004 5.2002l-61.6992 36.5c-9.2002 5.2002 -4.7002 7 -1.7002 8c12.2998 4.2998 14.7998 5.2002 27.8994 12.7002c1.40039 0.799805 3.2002 0.5 4.60059 -0.400391l47.3994 -28.0996c1.7002 -1 4.10059 -1 5.7002 0l184.7 106.6
+c1.7002 1 2.7998 3 2.7998 5v213.2c0 2.09961 -1.09961 4 -2.89941 5.09961l-184.601 106.5c-1.7002 1 -4 1 -5.7002 0l-184.5 -106.6c-1.7998 -1 -2.89941 -3 -2.89941 -5.10059v-213.1c0 -2 1.09961 -4 2.89941 -4.90039l50.6006 -29.1992
+c27.5 -13.7002 44.2998 2.39941 44.2998 18.6992v210.4c0 3 2.40039 5.2998 5.40039 5.2998h23.3994c2.90039 0 5.40039 -2.2998 5.40039 -5.2998v-210.5c0 -36.5996 -20 -57.5996 -54.7002 -57.5996c-10.7002 0 -19.0996 0 -42.5 11.5996l-48.4004 27.9004
+c-12 6.89941 -19.3994 19.7998 -19.3994 33.6992v213.101c0 13.7998 7.39941 26.7998 19.3994 33.7002l184.5 106.6c11.7002 6.59961 27.2002 6.59961 38.8008 0l184.699 -106.7c12 -6.89941 19.4004 -19.7998 19.4004 -33.7002v-213.1
+c0 -13.7998 -7.40039 -26.7002 -19.4004 -33.7002l-184.699 -106.6c-5.90039 -3.40039 -12.6006 -5.2002 -19.4004 -5.2002zM373.1 150.1c0 -40.1992 -33.5996 -63.2998 -92 -63.3994c-80.8994 0 -97.7998 37.0996 -97.7998 68.2002c0 2.89941 2.2998 5.2998 5.2998 5.2998
+h23.9004c2.7002 0 4.90039 -1.90039 5.2998 -4.5c3.60059 -24.2998 14.2998 -36.6006 63.2002 -36.6006c38.9004 0 55.5 8.80078 55.5 29.4004c0 11.9004 -4.7002 20.7998 -65.2002 26.7002c-50.5 5 -81.7998 16.2002 -81.7998 56.5996c0 37.2998 31.4004 59.5 84.0996 59.5
+c59.2002 0 88.5 -20.5 92.2002 -64.5996c0.100586 -1.5 -0.399414 -3 -1.39941 -4.10059c-1 -1.09961 -2.40039 -1.69922 -3.90039 -1.69922h-24c-2.5 0 -4.7002 1.7998 -5.2002 4.19922c-5.7998 25.6006 -19.7998 33.8008 -57.7002 33.8008
+c-42.5 0 -47.3994 -14.8008 -47.3994 -25.9004c0 -13.4004 5.7998 -17.2998 63.2002 -24.9004c56.6992 -7.5 83.6992 -18.0996 83.6992 -58z" />
+    <glyph glyph-name="npm" unicode="&#xf3d4;" horiz-adv-x="576" 
+d="M288 160h-32v64h32v-64zM576 288v-192h-288v-32h-128v32h-160v192h576zM160 256h-128v-128h64v96h32v-96h32v128zM320 256h-128v-160h64v32h64v128zM544 256h-192v-128h64v96h32v-96h32v96h32v-96h32v128z" />
+    <glyph glyph-name="ns8" unicode="&#xf3d5;" horiz-adv-x="640" 
+d="M187.1 288.1h44.9004l-48.5 -160.1h-56.9004l-50.5996 106.5l-31.0996 -106.5h-44.9004l49 160.1h49.4004l54.5 -113.699zM639.6 289c4.60059 -28.5996 -36.0996 -44.7002 -65.6992 -50.5996h-0.100586c17.5 -29.3008 22.1006 -69.3008 3.40039 -105.5
+c-26.4004 -51.2002 -86.5 -79.9004 -135.101 -68c-29.3994 7.19922 -51.3994 29 -56.7998 59.5c-0.700195 3.5 -1 7.09961 -1.2002 10.7998c-5.5 -2.7998 -11.8994 -4.2002 -18.5 -4.90039c-15.5996 -1.7002 -21 -2.2998 -160.899 -2.2998l11.5996 39.5h126.8
+c9.10059 0 12.2002 3.2002 13.8008 7.40039c1.69922 4.59961 3.39941 10.1992 4.5 14.5996c1.09961 3.90039 0.0996094 6.59961 -7.7002 6.59961h-87.2998c-33.4004 0 -38.2002 9.2002 -32.8008 28.6006c3.2002 11.5 10.8008 37.2002 17.6006 47.0996
+c7.09961 10.2002 18.2998 13.7002 30.5996 15c15.6006 1.7002 20.4004 1.2002 160.101 1.2002l-9.7002 -31.5h-133.5c-5.5 0 -11.2002 -0.700195 -13.2998 -7.09961c-1.80078 -5.40039 -2.10059 -6.7002 -3.7002 -12.2002c-1.40039 -5.10059 2.2002 -7.40039 11.5 -7.40039
+h87.5996c20.4004 0 31 -6.7998 34 -16.5996c19.9004 21.3994 50.4004 39.5 94.2002 48.2002v0.0996094c-13.4004 42.5 43.9004 66.5996 88.5 58.7998c18.2002 -3.2002 39.2002 -13.2998 42.0996 -31.2998zM530.7 184.3c3.09961 15.7998 -0.5 33.7002 -7.2002 47.7998
+c-23.2998 -2.89941 -52.2998 -10.0996 -68.5 -26.8994c-24.4004 -25.2998 -16.7998 -60 14.0996 -64.7998c25 -3.90039 55.7002 14.3994 61.6006 43.8994zM552.5 267.4c10.5996 1.5 23.5 3.5 34.2002 9.59961c14.7998 8.5 10.3994 21 -4.90039 24.4004
+c-10.8994 2.39941 -25.0996 -0.5 -31.7998 -7.7002c-7.2998 -7.7998 -1.7002 -20.2998 2.5 -26.2998z" />
+    <glyph glyph-name="nutritionix" unicode="&#xf3d6;" horiz-adv-x="400" 
+d="M88 439.9c0 0 133.4 8.19922 121 -104.4c0 0 19.0996 74.9004 103 40.5996c0 0 -17.7002 -74 -88 -56c0 0 14.5996 54.6006 66.0996 56.6006c0 0 -39.8994 10.2998 -82.0996 -48.7998c0 0 -19.7998 94.5 -93.5996 99.6992c0 0 75.1992 -19.3994 77.5996 -107.5
+c0 -0.0996094 -106.4 -7 -104 119.801zM400 124.3c0 -48.5 -9.7002 -95.2998 -32 -132.3c-42.2002 -30.9004 -105 -48 -168 -48c-62.9004 0 -125.8 17.0996 -168 48c-22.2998 37 -32 83.7998 -32 132.3c0 48.4004 17.7002 94.7002 40 131.7
+c42.2002 30.9004 97.0996 48.5996 160 48.5996c63 0 117.8 -17.5996 160 -48.5996c22.2998 -37 40 -83.2998 40 -131.7zM120 20c0 15.5 -12.5 28 -28 28s-28 -12.5 -28 -28s12.5 -28 28 -28s28 12.5 28 28zM120 86.2002c0 15.5 -12.5 28 -28 28s-28 -12.5 -28 -28
+s12.5 -28 28 -28s28 12.5 28 28zM120 152.4c0 15.5 -12.5 28 -28 28s-28 -12.5 -28 -28s12.5 -28 28 -28s28 12.5 28 28zM192 20c0 15.5 -12.5 28 -28 28s-28 -12.5 -28 -28s12.5 -28 28 -28s28 12.5 28 28zM192 86.2002c0 15.5 -12.5 28 -28 28s-28 -12.5 -28 -28
+s12.5 -28 28 -28s28 12.5 28 28zM192 152.4c0 15.5 -12.5 28 -28 28s-28 -12.5 -28 -28s12.5 -28 28 -28s28 12.5 28 28zM264 20c0 15.5 -12.5 28 -28 28s-28 -12.5 -28 -28s12.5 -28 28 -28s28 12.5 28 28zM264 86.2002c0 15.5 -12.5 28 -28 28s-28 -12.5 -28 -28
+s12.5 -28 28 -28s28 12.5 28 28zM264 152.4c0 15.5 -12.5 28 -28 28s-28 -12.5 -28 -28s12.5 -28 28 -28s28 12.5 28 28zM336 20c0 15.5 -12.5 28 -28 28s-28 -12.5 -28 -28s12.5 -28 28 -28s28 12.5 28 28zM336 86.2002c0 15.5 -12.5 28 -28 28s-28 -12.5 -28 -28
+s12.5 -28 28 -28s28 12.5 28 28zM336 152.4c0 15.5 -12.5 28 -28 28s-28 -12.5 -28 -28s12.5 -28 28 -28s28 12.5 28 28zM360 192c-4.7998 22.2998 -7.40039 36.9004 -16 56c-38.7998 19.9004 -90.5 32 -144 32s-105.2 -12.0996 -144 -32
+c-8.7998 -19.5 -11.2002 -33.9004 -16 -56c42.2002 7.90039 98.7002 14.7998 160 14.7998s117.8 -6.89941 160 -14.7998z" />
+    <glyph glyph-name="page4" unicode="&#xf3d7;" horiz-adv-x="496" 
+d="M248 -56c-137 0 -248 111 -248 248s111 248 248 248c20.9004 0 41.2998 -2.59961 60.7002 -7.5l-266.4 -376.5h205.7v-112zM248 87.5996h-149.4l149.4 213.601v-213.601zM344 56h111.4c-26.9004 -41 -65.7002 -73.5 -111.4 -92.7002v92.7002zM401.4 194.2v-16.7002
+l-21.2002 8.2998zM381.1 139.7c5.90039 0 8.2002 -4.7002 8.2002 -10.6006v-10h-16.2002v7.7002c0 6.60059 1.30078 12.9004 8 12.9004zM496 192c0 -37.2998 -8.2002 -72.7002 -23 -104.4h-129v333.101c89.2998 -37.5 152 -125.8 152 -228.7zM360.4 304.4h68.1992v47.5996
+h-13.8994v-32.5996h-13.9004v29.5996h-13.8994v-29.5996h-12.7002v32.5996h-13.9004v-47.5996h0.100586zM428.5 119.1h-26.5v11c0 15.4004 -5.59961 25.2002 -20.9004 25.2002c-15.3994 0 -20.6992 -10.5996 -20.6992 -25.8994v-25.3008h68.1992v15h-0.0996094zM428.5 222.1
+l-68.2002 -29.6992v-12.4004l68.2002 -29.5v16.5996l-14.4004 5.7002v26.5l14.4004 5.90039v16.8994zM423.7 290.6h-35.6006v-26.5996h13.9004v12.2002h11c8.59961 -15.7998 1.2998 -35.2998 -18.5996 -35.2998c-22.5 0 -28.3008 25.2998 -15.5 37.6992l-11.6006 10.6006
+c-16.2002 -17.5 -12.2002 -63.9004 27.1006 -63.9004c34 0 44.6992 35.9004 29.2998 65.2998z" />
+    <glyph glyph-name="palfed" unicode="&#xf3d8;" horiz-adv-x="576" 
+d="M384.9 254.1c0.0996094 -53.3994 -46.5 -96.1992 -83.3008 -96.1992c-12.5 0 -14.3994 3.39941 -15.0996 6.19922c0.5 39.1006 1.7002 80.4004 3 119.801c40.2002 14.3994 95.4004 17.5996 95.4004 -29.8008zM190.4 181.9
+c-0.200195 0.599609 -0.400391 2.09961 -0.600586 4.59961c0 25.5996 37 60.9004 58.5 75.9004c-1.2002 -36.4004 -5.5 -198.101 -1.39941 -242.5c3 -32.3008 26.7998 -32.9004 36.3994 -22.3008c5.90039 6.60059 5.5 15.7002 5.2998 19.1006v0.200195
+c-1.7998 25.5996 -2.7998 60.5996 -2.69922 100c60.7998 -14.4004 140.1 60.2998 140.1 138.199c0 71 -63 94.2002 -135.2 72c-2.89941 14.6006 -18.2998 20.1006 -29.5 11.1006c-7.5 -6.2002 -9.5 -15.7998 -10.5 -28.2002c-57.7998 -30.9004 -100.7 -84.5 -100.7 -126.5
+c0 -24.9004 15.6006 -43 37.1006 -43c35.0996 0 41 44.0996 14.3994 44.0996c-4.69922 0 -11 -2.69922 -11.1992 -2.69922zM8 266.9c0 38.5996 38.4004 37.3994 38.4004 37.3994h29c15.5 70.1006 120.5 74.2998 120.5 74.2998h28.0996v19.1006
+c0 18.3994 21.0996 18.3994 21.0996 18.3994h85.8008c18.3994 0 21.0996 -18.3994 21.0996 -18.3994v-19.1006h28c89.2002 0 112.1 -48.6992 119.4 -74.2998h30.0996c38.5 0 38.4004 -37.3994 38.4004 -37.3994c0 -38.6006 -38.4004 -37.4004 -38.4004 -37.4004h-30
+l-22.4004 -217.2c0 -43.8994 -44.6992 -44.2998 -44.6992 -44.2998h-288.9c-44.7002 0 -44.7002 44.2998 -44.7002 44.2998l-22.3994 217.2h-30c-38.5 0 -38.4004 37.4004 -38.4004 37.4004z" />
+    <glyph glyph-name="patreon" unicode="&#xf3d9;" horiz-adv-x="512" 
+d="M512 253.2c0 -101.3 -82.4004 -183.8 -183.8 -183.8c-101.7 0 -184.4 82.3994 -184.4 183.8c0 101.6 82.7002 184.3 184.4 184.3c101.399 0 183.8 -82.7002 183.8 -184.3zM0 -53.5v491h90v-491h-90z" />
+    <glyph glyph-name="periscope" unicode="&#xf3da;" 
+d="M370 384.4c38.4004 -40.7002 59.5 -94.3008 59.5 -150.801c0 -74.2998 -57.4004 -159.5 -82 -192.6c-8 -10.7998 -79.2998 -105 -120.9 -105c-34 0 -88.7998 56.5 -125.399 104.9c-24.9004 32.8994 -82.7002 117.6 -82.7002 192.699c0 118.2 93.4004 214.4 208.1 214.4
+c53.9004 0 104.801 -22.5996 143.4 -63.5996zM226.6 -45.9004c37.3008 0 184.801 167.301 184.7 279.4c0 107.3 -83.8994 196.3 -184.7 196.3c-106.1 0 -190 -88.8994 -190 -196.3c0 -112.1 147.5 -279.4 190 -279.4zM338 241.2c0 -59.1006 -51.0996 -109.7 -110.8 -109.7
+c-100.601 0 -150.7 108.2 -92.9004 181.8v-0.399414c0 -24.5 20.1006 -44.4004 44.7998 -44.4004c24.7002 0 44.8008 19.9004 44.8008 44.4004c0 18.1992 -11.1006 33.7998 -26.9004 40.6992c76.5996 19.2002 141 -39.2998 141 -112.399z" />
+    <glyph glyph-name="phabricator" unicode="&#xf3db;" horiz-adv-x="496" 
+d="M323 185.9c0 0 21.5996 -19.6006 20.9004 -20.7002l-8.10059 -19.7998c-0.5 -1.40039 -29.7002 -0.5 -29.7002 -0.5l-9.09961 -9.10059s1.59961 -31.5 0.200195 -32.0996l-20 -7.5c-1.2998 -0.5 -21.7998 23.2998 -21.7998 23.2998l-13.1006 0.200195
+s-19.2998 -24.1006 -20.7002 -23.5l-20.0996 8.2998c-1.40039 0.5 -1.2002 32.2998 -1.2002 32.2998l-9.39941 9.2998s-28.9004 -0.899414 -29.5 0.5l-9.5 20c-0.600586 1.40039 21.0996 21.2002 21.0996 21.2002l-0.0996094 12.9004s-21.6006 19.5996 -21 21
+l8.09961 19.7998c0.5 1.2998 29.7002 0.400391 29.7002 0.400391l9.09961 9.09961s-1.59961 28.4004 -0.200195 28.9004l20 8.2998c1.40039 0.599609 21.9004 -20.7998 21.9004 -20.7998l13.0996 -0.200195s19.3008 21.5996 20.7002 21l20.1006 -9.2002
+c1.39941 -0.599609 1.19922 -29.0996 1.19922 -29.0996l9.40039 -9.30078s28.9004 0.900391 29.5 -0.5l9.5 -20c0.599609 -1.39941 -21.0996 -21.1992 -21.0996 -21.1992zM278.1 194.6c-0.699219 17 -15.5 30.3008 -32.7998 29.5
+c-17.2998 -0.699219 -30.7998 -15.1992 -30.0996 -32.2998c0.700195 -17.0996 15.5 -30.3994 32.7998 -29.5996s30.7998 15.2998 30.0996 32.3994zM479.3 232.5c22.2998 -22.2998 22.2998 -58.7002 0 -81c-67.3994 -67.4004 -44.2998 -44.4004 -95.2998 -95.2998
+c-74.4004 -74.5 -194.7 -74.9004 -269.8 -1.60059l-0.100586 -0.0996094c-51 51 -27.5 27.5996 -97.3994 97c-22.2998 22.2998 -22.2998 58.7002 0 81c67.8994 67.4004 44.7998 44.2998 95.7002 95.2998c74.3994 74.4004 194.699 74.9004 269.8 1.60059l0.0996094 0.0996094
+zM140.4 84.2002c59.5996 -59.5 156 -59.6006 215.6 -0.100586c59.5996 59.6006 59.5 156.101 0 215.601c-59.5996 59.5 -156.1 59.5996 -215.6 0c-59.6006 -59.5 -59.6006 -156 0 -215.5z" />
+    <glyph glyph-name="phoenix-framework" unicode="&#xf3dc;" horiz-adv-x="640" 
+d="M212.9 103.7c-36.7002 -1.2002 -108.7 29.2998 -127.7 106.399c-8.7002 35.3008 -2.7002 51.8008 -8 86.1006c-8.2002 53.3994 -32.1006 72.2002 -55.9004 76.5c-6.2002 1.09961 -12.3994 1.2998 -18.7002 0.299805
+c-0.799805 -0.0996094 -1.59961 -0.200195 -2.39941 -0.200195c-0.100586 0.200195 -0.100586 0.299805 -0.200195 0.5c0.700195 0.600586 1.40039 1.2002 2.2002 1.7998c36.8994 26.9004 92 38.4004 136.3 35c123.6 -9.5 141.3 -156.6 252.5 -173.1
+c6.09961 -0.900391 12.2998 -1.09961 18.5 -1.7002c0.700195 -0.0996094 1.40039 -0.0996094 2.5 -0.200195c-2.09961 -2.19922 -21.5996 -11.7998 -36.5 -14.5c-18.4004 -3.39941 -35.7002 -0.0996094 -51.2998 10.3008c-14.5 9.7998 -24.5 23.5 -38.9004 27.3994
+c-13 3.60059 -34.0996 1.7002 -35.8994 -19.5996c-1.30078 -15.9004 14.1992 -51.7998 51.7998 -74.6006c40.3994 -24.5 101.399 -26.8994 134.7 -14.7998c0.299805 0.100586 0.699219 0.200195 1.09961 0.299805c0.200195 0.100586 0.400391 0 1 -0.0996094
+c-23.5996 -28.4004 -71.2002 -49.9004 -108.2 -45.4004c-50.3994 6.2002 -77.7002 75.9004 -113.7 97.5c-19.0996 11.5 -49.0996 7 -52 -18.5c-1.09961 -10 2.10059 -19 6.40039 -27.5996c24.4004 -48.5996 65.5996 -47 68 -49.5996
+c-2.7998 -0.800781 -21.7998 -2.10059 -25.5996 -2.2002zM75.2998 383.1c13.1006 -14.5 34.2002 -7.89941 35.2998 6.80078c-12.3994 -0.700195 -24.5 -2.2002 -36.5996 -4.80078c0.400391 -0.799805 0.400391 -1 1.2998 -2zM272.2 32.5996
+c-42.7998 -1.19922 -92 26.7002 -123.5 61.4004c-4.60059 5 -16.7998 20.2002 -18.6006 23.4004l0.400391 0.399414c6.59961 -4.09961 25.7002 -18.5996 54.7998 -27c24.2002 -7 48.1006 -6.2998 71.6006 3.2998c22.6992 9.30078 41 0.5 43.0996 -2.89941
+c-18.5 -3.7998 -20.0996 -4.40039 -24 -7.90039c-5.09961 -4.39941 -4.59961 -11.7002 7 -17.2002c26.2002 -12.3994 63 2.80078 97.2002 -25.3994c2.39941 -2 8.09961 -7.7998 10.0996 -10.7002c-0.0996094 -0.200195 -0.299805 -0.299805 -0.399414 -0.5
+c-4.80078 1.5 -16.4004 7.5 -40.2002 9.2998c-24.7002 2 -46.2998 -5.2998 -77.5 -6.2002zM447 284.6c16.4004 5.2002 41.2998 13.4004 66.5 3.30078c16.0996 -6.5 26.2002 -18.7002 32.0996 -34.6006c3.5 -9.39941 5.10059 -19.7002 5.10059 -28.7002
+c-0.200195 0 -0.400391 0 -0.600586 -0.0996094c-0.199219 0.400391 -0.399414 0.900391 -0.5 1.2998c-5 22 -29.8994 43.7998 -67.5996 29.9004c-50.2002 -18.6006 -130.4 -9.7002 -176.9 48c-0.699219 0.899414 -2.39941 1.7002 -1.2998 3.2002
+c0.100586 0.199219 2.10059 -0.600586 3 -1.30078c18.1006 -13.3994 38.2998 -21.8994 60.2998 -26.1992c30.5 -6.10059 54.6006 -2.90039 79.9004 5.19922zM549.7 167.1c-32.4004 -0.199219 -33.7998 -50.0996 -103.601 -64.3994
+c-18.1992 -3.7002 -38.6992 -4.60059 -44.8994 -4.2002v0.400391c2.7998 1.5 14.7002 2.59961 29.7002 16.5996c7.89941 7.2998 15.2998 15.0996 22.7998 22.9004c19.5 20.1992 41.3994 42.1992 81.8994 39c23.1006 -1.80078 29.3008 -8.2002 36.1006 -12.7002
+c0.299805 -0.200195 0.399414 -0.5 0.700195 -0.900391c-0.5 0 -0.700195 -0.0996094 -0.900391 0c-7 2.7002 -14.2998 3.2998 -21.7998 3.2998zM537.4 191.2c-0.100586 -0.200195 -0.100586 -0.400391 -0.200195 -0.600586c-28.9004 4.40039 -48 7.90039 -68.5 -4
+c-17 -9.89941 -31.4004 -20.5 -62 -24.3994c-27.1006 -3.40039 -45.1006 -2.40039 -66.1006 8c-0.299805 0.200195 -0.599609 0.399414 -1 0.599609c0 0.200195 0.100586 0.299805 0.100586 0.5c24.8994 -3.7998 36.3994 -5.09961 55.5 5.7998
+c22.2998 12.9004 40.0996 26.6006 71.2998 31c29.5996 4.10059 51.2998 -2.5 70.9004 -16.8994zM268.6 350.7c-0.599609 0.599609 -1.09961 1.2002 -2.09961 2.2998c7.59961 0 29.7002 1.2002 53.4004 -8.40039c19.6992 -8 32.1992 -21 50.1992 -32.8994
+c11.1006 -7.2998 23.4004 -9.2998 36.4004 -8.10059c4.2998 0.400391 8.5 1.2002 12.7998 1.7002c0.400391 0.100586 0.900391 0 1.5 -0.299805c-0.599609 -0.400391 -1.2002 -0.900391 -1.7998 -1.2002c-8.09961 -4 -16.7002 -6.2998 -25.5996 -7.09961
+c-26.1006 -2.60059 -50.3008 3.7002 -73.4004 15.3994c-19.2998 9.90039 -36.4004 22.9004 -51.4004 38.6006zM640 112.3c-3.5 -3.09961 -22.7002 -11.5996 -42.7002 -5.2998c-12.2998 3.90039 -19.5 14.9004 -31.5996 24.0996
+c-10 7.60059 -20.9004 7.90039 -28.1006 8.40039c0.600586 0.799805 0.900391 1.2002 1.2002 1.40039c14.7998 9.19922 30.5 12.1992 47.2998 6.5c12.5 -4.2002 19.2002 -13.5 30.4004 -24.2002c10.7998 -10.4004 21 -9.90039 23.0996 -10.5
+c0.100586 0.0996094 0.200195 0 0.400391 -0.400391zM427.5 -24.7002c2.2002 -1.2002 1.59961 -1.5 1.5 -2c-18.5 1.40039 -33.9004 7.60059 -46.7998 22.2002c-21.7998 24.7002 -41.7002 27.9004 -48.6006 29.7002c0.5 0.200195 0.800781 0.399414 1.10059 0.399414
+c13.0996 -0.0996094 26.0996 -0.699219 38.8994 -3.89941c25.3008 -6.40039 35 -25.4004 41.6006 -35.2998c3.2002 -4.80078 7.2998 -8.30078 12.2998 -11.1006z" />
+    <glyph glyph-name="playstation" unicode="&#xf3df;" horiz-adv-x="576" 
+d="M570.9 75.7002c-11.3008 -14.2002 -38.8008 -24.2998 -38.8008 -24.2998l-205.1 -73.6006v54.2998l150.9 53.8008c17.0996 6.09961 19.7998 14.7998 5.7998 19.3994c-13.9004 4.60059 -39.1006 3.2998 -56.2002 -2.89941l-100.5 -35.5v56.3994
+c23.2002 7.7998 47.0996 13.6006 75.7002 16.7998c40.8994 4.5 90.8994 -0.599609 130.2 -15.5c44.1992 -14 49.1992 -34.6992 38 -48.8994zM346.5 168.2v139c0 16.2998 -3 31.2998 -18.2998 35.5996c-11.7002 3.7998 -19 -7.09961 -19 -23.3994v-347.9l-93.7998 29.7998
+v414.7c39.8994 -7.40039 98 -24.9004 129.199 -35.4004c79.5 -27.2998 106.4 -61.2998 106.4 -137.8c0 -74.5 -46 -102.8 -104.5 -74.5996zM43.2002 37.7998c-45.4004 12.7998 -53 39.5 -32.2998 54.7998c19.0996 14.2002 51.6992 24.9004 51.6992 24.9004l134.5 47.7998
+v-54.5l-96.7998 -34.5996c-17.0996 -6.10059 -19.7002 -14.7998 -5.7998 -19.4004c13.9004 -4.59961 39.0996 -3.2998 56.2002 2.90039l46.3994 16.8994v-48.7998c-51.5996 -9.2998 -101.399 -7.2998 -153.899 10z" />
+    <glyph glyph-name="pushed" unicode="&#xf3e1;" horiz-adv-x="432" 
+d="M407 336.1c21.7002 -1.89941 33.7998 -28 17.4004 -44.7998l-235.2 -231.3l-35.2998 -80.7998c-11 -17.2002 -41.2002 -14.2998 -47.7002 7l-105.101 348.3c-4.59961 18.2998 6.30078 33.9004 21.4004 36.5996l271.3 44.4004c17.9004 3.40039 39.1006 -13.5 28.7002 -37
+l-14 -33.4004zM297.6 394.4l-189 -31l177.4 -16.3008l16.7998 39.9004c2.2998 4.90039 -0.0996094 8.09961 -5.2002 7.40039zM22.7002 340.1l157.899 -244.3l96.9004 230.7l-248.7 22.7002c-5.09961 0.899414 -9.2002 -4 -6.09961 -9.10059zM136 -8.40039
+c0 0 28.2002 64.1006 35.2002 79.1006l-127.7 197.6l83.0996 -275.5c1.5 -4.2998 6.80078 -5.2002 9.40039 -1.2002zM408.8 306.1c3.10059 3.30078 1.40039 7.5 -2.59961 8.60059l-106.4 9.7002l-89.7002 -213.7z" />
+    <glyph glyph-name="python" unicode="&#xf3e2;" 
+d="M439.8 247.5c10.7002 -42.9004 11.2002 -75.0996 0 -108.6c-10.7998 -32.5 -22.2998 -54.2002 -53.3994 -54.2002h-160.2v-13.6006h106.7v-40.6992c0 -30.8008 -26.5 -46.5 -53.4004 -54.3008c-40.5 -11.6992 -73 -9.89941 -106.8 0
+c-28.2002 8.30078 -53.4004 25.3008 -53.4004 54.3008v101.8c0 29.2998 24.2002 54.2998 53.4004 54.2998h106.8c35.5996 0 66.7998 31 66.7998 67.7998v47.4004h40.1006c31.0996 0 45.6992 -23.2998 53.3994 -54.2002zM286.2 44c-11 0 -20 -9 -20.1006 -20.2998
+c0 -11.2002 9.10059 -20.4004 20.1006 -20.4004c11.0996 0 20.0996 9.10059 20.0996 20.4004c0 11.2002 -9 20.2998 -20.0996 20.2998zM167.8 199.9c-36.2998 0 -66.7998 -31.1006 -66.7998 -66.4004v-48.7998h-36.7002c-31.0996 0 -49.2002 22.5996 -56.7998 54.2002
+c-10.2002 42.5 -9.7998 67.8994 0 108.6c8.5 35.5 35.7002 54.2002 66.7998 54.2002h147v13.5996h-106.899v40.7002c0 30.9004 8.19922 47.5996 53.3994 55.5996c32.1006 5.7002 71 6 106.8 0.100586c29 -4.90039 53.4004 -26.6006 53.4004 -55.6006v-101.899
+c0 -29.7998 -23.7002 -54.2998 -53.4004 -54.2998h-106.8zM161.1 342.5c11.1006 0 20.1006 9.09961 20.1006 20.2998s-9.10059 20.4004 -20.1006 20.4004c-11.0996 0 -20 -9.10059 -20.0996 -20.4004c0 -11.2002 9 -20.2998 20.0996 -20.2998z" />
+    <glyph glyph-name="red-river" unicode="&#xf3e3;" 
+d="M353.2 416c52.3994 0 94.7998 -42.4004 94.7998 -94.7998v-258.4c0 -52.3994 -42.4004 -94.7998 -94.7998 -94.7998h-258.4c-52.3994 0 -94.7998 42.4004 -94.7998 94.7998v258.4c0 52.3994 42.4004 94.7998 94.7998 94.7998h258.4zM144.9 247.1
+c-0.600586 12.4004 11.6992 24.6006 24 24h56.2998c27 0 48.8994 21.9004 48.8994 48.9004h-154.199c-13.2002 0 -23.9004 -10.7002 -23.9004 -23.9004v-154.199c27 0 48.9004 21.8994 48.9004 48.8994v56.2998zM321.2 175.1c27 0 48.8994 21.9004 48.8994 48.9004h-154.199
+c-13.2002 0 -23.9004 -10.7002 -23.9004 -23.9004v-154.199c27 0 48.9004 21.8994 48.9004 48.8994v56.2998c-0.600586 12.4004 11.6992 24.6006 24 24h56.2998z" />
+    <glyph glyph-name="wpressr" unicode="&#xf3e4;" horiz-adv-x="496" 
+d="M248 440c136.97 0 248 -111.03 248 -248s-111.03 -248 -248 -248s-248 111.03 -248 248s111.03 248 248 248zM419.33 281.4c2.41016 5.47949 0.459961 8.2793 -5.62012 8.26953c-104.8 0.00976562 -107.69 -0.0302734 -130.78 0.0302734
+c-4.31934 0.00976562 -7.10938 -1.82031 -8.83984 -5.78027c-5.70996 -13.0996 -11.5195 -26.1504 -17.2998 -39.21c-2.57031 -5.7998 -1 -8.26953 5.26953 -8.26953c25.2607 0 50.5205 -0.0107422 75.7803 0.0195312
+c10.0303 0.00976562 8.54004 -13.6602 -3.89941 -13.6396c-26.4307 0.0498047 -52.8604 0 -79.29 0.0498047c-4.91016 0.00976562 -8.33008 -1.88965 -10.3506 -6.5c-4.2998 -9.83008 -32.1494 -73.0801 -32.1895 -73.1602
+c-3.2002 -7.16016 -16.2607 -6.09961 -11.2803 5.33008c8.26953 18.9902 16.6504 37.9297 24.9795 56.8896c2.25 5.11035 -0.0996094 8.74023 -5.65918 8.75c-15.21 0.0205078 -30.4307 -0.0400391 -45.6406 0.0400391
+c-3.35938 0.0107422 -5.41016 -1.29004 -6.76953 -4.38965c-31.4307 -71.8701 -29.7803 -67.3203 -30.0098 -67.6904c-3.87012 -6.37012 -14.8604 -3.34961 -10.9502 5.60059c5.66992 13.0098 11.3701 26.0098 17.0898 39c13.5703 30.7793 27.1396 61.5596 40.7402 92.3301
+c2.54004 5.75 -0.419922 10.5801 -6.66016 10.5898c-14.2402 0.0302734 -28.4805 -0.0498047 -42.7197 0.0498047c-4.26074 0.0302734 -6.84082 -1.76953 -8.54004 -5.65039c-12.8604 -29.3896 -25.8203 -58.7295 -38.75 -88.0791
+c-8.62012 -19.5605 -17.2305 -39.1201 -25.8906 -58.6602c-1.58008 -3.55078 -1.47949 -6.78027 1.20996 -9.73047c11.2207 -12.3096 22.4707 -24.6094 33.6807 -36.9395c2.08984 -2.30078 4.58984 -3.4502 7.71973 -3.4502c45.9395 0.0195312 91.8701 0.00976562 137.81 0
+c3.86035 0 6.37988 1.78027 7.91992 5.29004c10.3203 23.5 20.7607 46.9395 30.9502 70.5c2.08984 4.83008 5.21973 6.75 10.3398 6.71973c23.0205 -0.110352 46.0303 -0.0400391 69.0508 -0.0498047c6.0791 0 10.5293 2.72949 12.9697 8.24023
+c15.2598 34.4795 30.4502 68.9893 45.6299 103.5z" />
+    <glyph glyph-name="replyd" unicode="&#xf3e6;" 
+d="M320 -32h-192c-70.4004 0 -128 57.5996 -128 128v192c0 70.4004 57.5996 128 128 128h192c70.4004 0 128 -57.5996 128 -128v-192c0 -70.4004 -57.5996 -128 -128 -128zM193.4 174.8c-6.10059 2 -11.6006 3.10059 -16.4004 3.10059
+c-7.2002 0 -13.5 -1.90039 -18.9004 -5.60059c-5.39941 -3.7002 -9.59961 -9 -12.7998 -15.7998h-1.09961l-4.2002 18.2998h-28v-138.899h36.0996v89.6992c1.5 5.40039 4.40039 9.80078 8.7002 13.2002c4.2998 3.40039 9.7998 5.10059 16.2002 5.10059
+c4.59961 0 9.7998 -1 15.5996 -3.10059zM308.6 71.4004c-3.19922 -2.40039 -7.69922 -4.80078 -13.6992 -7.10059s-12.8008 -3.5 -20.4004 -3.5c-12.2002 0 -21.0996 3 -26.5 8.90039c-5.5 5.89941 -8.5 14.7002 -9 26.3994h83.2998
+c0.900391 4.80078 1.60059 9.40039 2.10059 13.9004c0.5 4.40039 0.699219 8.59961 0.699219 12.5c0 10.7002 -1.59961 19.7002 -4.69922 26.9004c-3.2002 7.19922 -7.30078 13 -12.5 17.1992c-5.2002 4.30078 -11.1006 7.30078 -17.8008 9.2002
+c-6.69922 1.7998 -13.5 2.7998 -20.5996 2.7998c-21.0996 0 -37.5 -6.09961 -49.2002 -18.2998s-17.5 -30.5 -17.5 -55c0 -22.7998 5.2002 -40.7002 15.6006 -53.7002c10.3994 -13.0996 26.7998 -19.5996 49.1992 -19.5996c10.7002 0 20.9004 1.5 30.4004 4.59961
+c9.5 3.10059 17.0996 6.80078 22.5996 11.2002zM286.8 141.7c3.7998 -5.40039 5.2998 -13.1006 4.60059 -23.1006h-51.7002c0.899414 9.40039 3.7002 17 8.2002 22.6006c4.5 5.59961 11.5 8.5 21 8.5c8.19922 0.0996094 14.0996 -2.60059 17.8994 -8zM366.7 139.2
+c4.09961 -3.90039 9.39941 -5.7998 16.0996 -5.7998c7 0 12.6006 1.89941 16.7002 5.7998c4.09961 3.89941 6.09961 9.09961 6.09961 15.5996s-2 11.6006 -6.09961 15.4004s-9.59961 5.7002 -16.7002 5.7002c-6.7002 0 -12 -1.90039 -16.0996 -5.7002
+c-4.10059 -3.7998 -6.10059 -8.90039 -6.10059 -15.4004s2 -11.7002 6.10059 -15.5996zM366.7 38.7002c4.09961 -3.90039 9.39941 -5.7998 16.0996 -5.7998c7 0 12.6006 1.89941 16.7002 5.7998c4.09961 3.89941 6.09961 9.09961 6.09961 15.5996
+s-2 11.6006 -6.09961 15.4004s-9.59961 5.7002 -16.7002 5.7002c-6.7002 0 -12 -1.90039 -16.0996 -5.7002c-4.10059 -3.7998 -6.10059 -8.90039 -6.10059 -15.4004c0 -6.59961 2 -11.7002 6.10059 -15.5996z" />
+    <glyph glyph-name="resolving" unicode="&#xf3e7;" horiz-adv-x="496" 
+d="M281.2 169.8l-197.9 -57.2002l-28.5996 98.6006l188.2 54.0996c52.6992 15.2998 65 8.10059 71.0996 -12.7998l11.2002 -39.2998c5.59961 -19.9004 2 -30.1006 -44 -43.4004zM248.5 440c137 0 248.5 -111.4 247.5 -247.7c0 -136.899 -111.5 -248.3 -248.5 -248.3
+c-46 0 -89.5 12.7002 -126.3 34.7002l-23 80.2002l286.8 -37.3008l48.0996 13.3008l-9.69922 34.1992l-220.4 27.1006l92.5996 26.5996c30.2002 8.7002 42 15.7998 61.4004 33.2002c24.5 23 31.7002 45.5 23.5 73.5996l-10.7002 37.8008
+c-8.7002 30.1992 -25.0996 49.0996 -61.3994 55.1992c-25.1006 3.5 -44.5 2 -79.3008 -8.19922l-221.899 -63.9004c26 108.8 124.2 189.5 241.3 189.5zM38.2998 59.4004c-24 38.3994 -38.2998 83.2998 -38.2998 131.8z" />
+    <glyph glyph-name="rocketchat" unicode="&#xf3e8;" horiz-adv-x="576" 
+d="M486.41 340.43c119.649 -76.54 119.26 -221 0 -297.14c-77.1201 -50.9199 -179.37 -62.3896 -264.12 -47.1602c-95.5205 -91.1895 -201.72 -49.1602 -222.29 -37c0 0 73.0801 62.1006 61.21 116.49c-45.3896 46.3701 -86.5195 144.57 0 232.77
+c11.8701 54.3906 -61.21 116.49 -61.21 116.49c20.7695 12.1201 127.26 54.2803 222.29 -37.3799c84.9404 15.3301 187.19 3.75977 264.12 -47.0703zM294.18 43.7803c126.67 0 229.409 66.2197 229.409 148.22s-102.74 148.43 -229.41 148.43
+s-229.41 -66.4297 -229.41 -148.43c0 -35.79 19.4707 -68.5195 52 -94.1299c9.11426 -29.127 3.78125 -62.0234 -15.999 -98.6904c-0.889648 -1.67969 -1.76953 -3.45996 -2.76953 -5.23926c15.0498 1.33594 38.2158 7.93555 51.71 14.7295
+c11.0684 6.26562 27.46 18.5361 36.5898 27.3896l19.7705 19.0908c23.6396 -6.27734 62.6758 -11.3721 87.1348 -11.3721c0.269531 0 0.706055 0.000976562 0.974609 0.00195312zM184.119 156.7c-0.133789 -0.00195312 -0.351562 -0.00390625 -0.485352 -0.00390625
+c-18.6182 0 -33.9912 15.1084 -34.3145 33.7236c-0.700195 45.3896 67.8301 46.3799 68.5195 1.08984v-0.509766c0.000976562 -0.0888672 0.00195312 -0.232422 0.00195312 -0.321289c0 -18.6152 -15.1074 -33.8467 -33.7217 -33.999v0.0205078zM257.889 190.42
+c-0.790039 45.3896 67.7402 46.4805 68.5303 1.19043v-0.610352c0.389648 -45.0801 -67.7402 -45.5703 -68.5303 -0.580078zM401.269 156.7c-0.133789 -0.00195312 -0.350586 -0.00390625 -0.485352 -0.00390625c-18.6182 0 -33.9951 15.1084 -34.3242 33.7236
+c-0.69043 45.3896 67.8398 46.3799 68.5303 1.08984v-0.509766c0.000976562 -0.119141 0.00292969 -0.311523 0.00292969 -0.430664c0 -18.6152 -15.1084 -33.7979 -33.7236 -33.8896v0.0205078z" />
+    <glyph glyph-name="rockrms" unicode="&#xf3e9;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM405.4 20.5l-101.5 118.9s73.5996 0.199219 74.1992 0.199219c29.6006 -1.09961 46.6006 33.3008 27.6006 56.1006l-157.7 185.1c-13.2002 17.2998 -40.0996 18.4004 -54.5 0
+l-147.1 -172.5h90l84.2998 98.9004l84.5996 -99.2998h-75.2998c-30.5 0 -44.5 -35.7002 -26.5996 -56.1006l112 -131.3h90z" />
+    <glyph glyph-name="schlix" unicode="&#xf3ea;" 
+d="M350.5 290.3l-54.2002 46.1006l73.4004 39l78.2998 -44.2002zM192 325.9l45.7002 28.1992l34.7002 -34.5996l-55.4004 -29zM126.9 319.3l31.8994 22.1006l17.2002 -28.4004l-36.7002 -22.5zM103.6 231.1l-8.7998 34.8008l29.6006 18.2998l13.0996 -35.2998z
+M82.4004 314.8l23.8994 18.1006l8.90039 -24l-26.7002 -18.3008zM59 241.5l-3.59961 28.4004l22.2998 15.5l6.09961 -28.7002zM28.4004 224.9l20.7998 12.7998l3.2998 -33.4004l-22.9004 -12zM1.40039 180l19.1992 10.2002l0.400391 -38.2002l-21 -8.7998zM60.5 120.7
+l-28.2998 -8.2998l-1.60059 46.7998l25.1006 10.7002zM99 184.8l-31.0996 -13l-5.2002 40.7998l27.3994 14.4004zM123.2 71l-41.6006 -5.90039l-8.09961 63.5l35.2002 10.8008zM151.7 210.9l21.2002 -57.1006l-46.2002 -13.5996l-13.7002 54.0996zM237.4 -19.5996
+l-70.9004 3.2998l-24.2998 95.7998l55.2002 8.59961zM152.5 260.1l42.2002 22.4004l28 -45.9004l-50.7998 -21.2998zM193.5 165.2l61.2998 18.7002l52.7998 -86.6006l-79.7998 -11.2998zM244.9 250.8l67.2998 28.7998l65.5 -65.3994l-88.6006 -26.2002z" />
+    <glyph glyph-name="searchengin" unicode="&#xf3eb;" horiz-adv-x="460" 
+d="M220.6 317.7l-67.1992 -209.3v130.3l-54.7002 -24.2002l54.7002 190.3v-115.3zM137.4 414.4l-1.30078 -4.7002l-15.1992 -52.9004c-40.3008 -15.5 -68.9004 -54.5996 -68.9004 -100.3c0 -52.2998 34.2998 -95.9004 83.4004 -105.5v-53.5996
+c-77.9004 10.5 -135.4 78.1992 -135.4 159c0 80.5 59.7998 147.199 137.4 158zM448.8 -32.7998c-11.2002 -11.2002 -23.0996 -12.2998 -28.5996 -10.5c-5.40039 1.7998 -27.1006 19.8994 -60.4004 44.3994c-33.2998 24.6006 -33.5996 35.7002 -43 56.7002
+c-9.39941 20.9004 -30.3994 42.6006 -57.5 52.4004l-9.7002 14.7002c-24.6992 -16.9004 -53 -26.9004 -81.2998 -28.7002l2.10059 6.59961l15.8994 49.5c46.5 11.9004 80.9004 54 80.9004 104.2c0 54.5 -38.4004 102.1 -96 107.1v52.1006
+c83.2002 -5.10059 148.8 -74.5 148.8 -159.3c0 -33.6006 -11.2002 -64.7002 -29 -90.4004l14.5996 -9.59961c9.80078 -27.1006 31.5 -48 52.4004 -57.4004s32.2002 -9.7002 56.7998 -43c24.6006 -33.2002 42.7002 -54.9004 44.5 -60.2998
+c1.7998 -5.40039 0.700195 -17.2998 -10.5 -28.5zM438.9 -14.9004c0 4.40039 -3.60059 8 -8 8c-4.40039 0 -8 -3.59961 -8 -8c0 -4.39941 3.59961 -8 8 -8c4.39941 0 8 3.60059 8 8z" />
+    <glyph glyph-name="servicestack" unicode="&#xf3ec;" horiz-adv-x="496" 
+d="M88 232c81.7002 -10.2002 273.7 -102.3 304 -232h-392c99.5 8.09961 184.5 137 88 232zM120 384c102.8 -15.5 335.3 -167.9 376 -384h-96c-26.2998 126.7 -150.7 216.7 -233.6 250.4c1.2998 49.6992 -14.1006 98 -46.4004 133.6z" />
+    <glyph glyph-name="sistrix" unicode="&#xf3ee;" 
+d="M448 -1l-30.5 -31l-146 148.1c-28.7002 -23.6992 -65.2002 -37.8994 -105 -37.8994c-91.7998 0 -166.5 75.7998 -166.5 168.899c0 93.1006 74.7002 168.9 166.6 168.801c91.8008 0 166.5 -75.8008 166.5 -168.9c0 -37 -11.8994 -71.2998 -31.8994 -99.2002zM166.5 117.2
+c70.7002 0 128.1 58.2998 128.1 129.899c0 71.6006 -57.5 129.9 -128.1 129.9s-128.1 -58.2998 -128.1 -129.9c0 -71.5996 57.5 -129.899 128.1 -129.899z" />
+    <glyph glyph-name="slack-hash" unicode="&#xf3ef;" 
+d="M446.2 177.6c6.2002 -19 -3.90039 -39.6992 -22.9004 -45.6992l-45.3994 -15.1006l15.6992 -47c6.10059 -19.0996 -3.89941 -39.7002 -23 -45.8994c-21.2998 -6.10059 -40.0996 6 -46 22.8994l-15.6992 47l-93.6006 -31.2998l15.7002 -47
+c6.09961 -19.0996 -3.90039 -39.7002 -23 -45.9004c-21.2998 -6.09961 -40.0996 6 -46 22.9004l-15.7002 47c-45.7002 -15.2002 -50.8994 -17.7998 -57.7002 -16.7998c-14.5 0.599609 -28.5996 10.0996 -33.5996 24.5996c-6.09961 19 4 39.7002 23 45.9004l45.4004 15.0996
+l-30.3008 90c-45.6992 -15.2002 -50.8994 -17.7998 -57.6992 -16.7998c-14.5 0.599609 -28.6006 10.0996 -33.6006 24.5996c-6.09961 19.1006 3.90039 39.7002 23 45.9004l45.2998 15l-15.6992 47c-6.10059 19.0996 3.89941 39.7002 23 45.9004
+c19.0996 6.19922 39.7998 -3.90039 46 -22.9004l15.6992 -47l93.4004 31.2002l-15.7002 47c-6.09961 19.0996 3.90039 39.7002 23 45.8994c19.1006 6.2002 39.7998 -3.89941 46 -22.8994l15.7002 -47l45.4004 15.0996c19.0996 6.2002 39.7998 -3.89941 46 -22.8994
+c6.09961 -19.1006 -3.90039 -39.7002 -23 -45.9004l-45.4004 -15.0996l30.2998 -90l45.4004 15.0996c19.0996 6.2002 39.7998 -3.90039 46 -22.9004zM192.1 130.4l93.5 31.2998l-30.2998 90.2002l-93.5 -31.3008z" />
+    <glyph glyph-name="speakap" unicode="&#xf3f3;" 
+d="M64 56.2197c-79.4102 88.1904 -72 224.36 16.6396 304.141c88.6406 79.7793 224.801 73 304.21 -15.2402c79.4102 -88.2402 72 -224.36 -16.6396 -304.14c-18.7402 -16.8701 64 -43.0908 42 -52.2607c-82.0596 -34.21 -253.91 -35 -346.229 67.5h0.0195312z
+M277.31 267.82l38.5 40.8594c-9.60938 8.89062 -32 26.8301 -76.1699 27.6006c-52.3301 0.910156 -95.8594 -28.2998 -96.7695 -80c-0.200195 -11.3301 0.290039 -36.7207 29.4199 -54.8301c34.46 -21.4199 86.5195 -21.5098 86 -52.2598
+c-0.370117 -21.2803 -26.4199 -25.8105 -38.5898 -25.6006c-3 0.0498047 -30.2305 0.459961 -47.6104 24.6201l-40 -42.6104c28.1602 -27 59 -32.6191 83.4902 -33.0498c10.2295 -0.179688 96.4199 -0.330078 97.8398 81
+c0.280273 15.8105 -2.07031 39.7197 -28.8604 56.5898c-34.3594 21.6406 -85 19.4502 -84.4297 49.75c0.410156 23.25 31 25.3701 37.5303 25.2607c0.429688 0 26.6201 -0.260742 39.6201 -17.3701z" />
+    <glyph glyph-name="staylinked" unicode="&#xf3f5;" horiz-adv-x="440" 
+d="M382.7 155.5l44.2998 -41.2998c3.7002 -3.5 3.2998 -9 -0.700195 -12.2002l-198 -163.9c-9.89941 -7.59961 -17.2998 -0.799805 -17.2998 -0.799805l-208.7 196.101c-3.5 3.5 -3 9 1.2002 12.1992l45.7998 34.9004c4.2002 3.2002 10.4004 3 13.9004 -0.5l151.899 -147.5
+c3.7002 -3.5 10 -3.7002 14.2002 -0.400391l93.2002 74c4.09961 3.2002 4.5 8.7002 0.900391 12.2002l-84 81.2998c-3.60059 3.5 -9.90039 3.7002 -14 0.5l-0.100586 -0.0996094c-4.09961 -3.2002 -10.3994 -3 -14 0.5l-68.0996 64.2998
+c-3.5 3.5 -3.10059 9 1.09961 12.2002l57.2998 43.5996c4.10059 3.2002 10.3008 3 13.8008 -0.5l170 -167.3zM437.2 238.9c3.7002 -3.5 3.39941 -9 -0.700195 -12.2002l-45.7998 -35.7998c-4.10059 -3.2002 -10.4004 -3 -14.1006 0.5l-160.399 159
+c-3.60059 3.5 -9.7998 3.69922 -13.9004 0.5l-92.2002 -71.5c-4.19922 -3.30078 -4.69922 -8.7002 -1.09961 -12.2002l94.5996 -91.7998c3.7002 -3.5 10 -3.60059 14.2002 -0.400391l0.100586 0.0996094c4.19922 3.2002 10.5996 3 14.1992 -0.5l57.1006 -54.3994
+c3.7002 -3.5 3.2998 -9 -0.900391 -12.2002l-7.7002 -6l0.300781 -0.299805l-50.2002 -38.7998c-4.2002 -3.30078 -10.6006 -3.10059 -14.2998 0.399414l-171.7 165.101l-42.2998 41.6992c-3.60059 3.5 -3 9 1.19922 12.2002l206.801 162.101
+c8.2998 6.59961 14.7998 2.2998 16.2998 1.09961z" />
+    <glyph glyph-name="steam-symbol" unicode="&#xf3f6;" 
+d="M395.5 270.5c0 -33.7998 -27.5 -61 -61 -61c-33.7998 0 -61 27.2998 -61 61s27.2998 61 61 61c33.5 0 61 -27.2002 61 -61zM448 270.3c0 -63 -51 -113.8 -113.7 -113.8l-109.3 -79.7998c-4 -43 -40.5 -76.7998 -84.5 -76.7998c-40.5 0 -74.7002 28.7998 -83 67
+l-57.5 23.0996v107.3l97.2002 -39.2998c15.0996 9.2002 32.2002 13.2998 52 11.5l71 101.7c0.5 62.2998 51.5 112.8 114 112.8c62.7998 0 113.8 -51 113.8 -113.7zM203 85c0 34.7002 -27.7998 62.5 -62.5 62.5c-4.5 0 -9 -0.5 -13.5 -1.5l26 -10.5
+c25.5 -10.2002 38 -39 27.7002 -64.5c-10.2002 -25.5 -39.2002 -38 -64.7002 -27.5c-10.2002 4 -20.5 8.2998 -30.7002 12.2002c10.5 -19.7002 31.2002 -33.2002 55.2002 -33.2002c34.7002 0 62.5 27.7998 62.5 62.5zM410.5 270.3c0 42 -34.2998 76.2002 -76.2002 76.2002
+c-42.2998 0 -76.5 -34.2002 -76.5 -76.2002c0 -42.2002 34.2998 -76.2002 76.5 -76.2002c41.9004 -0.0996094 76.2002 33.9004 76.2002 76.2002z" />
+    <glyph glyph-name="sticker-mule" unicode="&#xf3f7;" horiz-adv-x="576" 
+d="M561.7 248.4c-1.2998 -0.300781 0.299805 0 0 0zM555.5 325.8c20.2002 -50.0996 20.5996 -45.2002 20.5996 -52.8994c0 -7.5 -4.09961 -11 -7.19922 -16.5c-1.5 -3 -4.60059 -7.5 -7.2002 -8c-0.400391 0 -3 -0.5 -13.4004 -2.5c-7.2002 -1 -13.3994 4.5 -14.8994 9.5
+c-1.60059 4.69922 2.7998 10.0996 -11.8008 22.8994c-10.2998 10 -21.0996 11.2998 -31.8994 17c-9.7998 5.7002 -11.9004 -1 -18 -8c-18 -22.8994 -34 -46.8994 -52 -69.7998c-11.7998 -15 -24.2002 -30.4004 -33.5 -47.4004
+c-3.90039 -6.7998 -9.5 -28.0996 -10.2998 -29.8994c-6.2002 -17.7002 -5.5 -25.7998 -16.5 -68.2998c-3.10059 -10 -5.7002 -21.4004 -8.7002 -32.4004c-2.2002 -6.7998 -7.40039 -49.2998 -0.5 -59.4004c2.09961 -3.5 8.7002 -4.5 11.2998 -8
+c0.0996094 -0.0996094 9.59961 -18.1992 9.2998 -20c0 -6.09961 -9.39941 -5.59961 -11.2998 -6.5c-4.7998 -2.89941 -3.7998 -5.89941 -6.40039 -7.39941c-5.89941 -2.90039 -32.0996 -3.2002 -36.5 0.5c-4.09961 3 -2.19922 11.8994 -1.5 15
+c2.2002 15 -2.5 7.89941 -9.7998 11.5c-3.09961 1.5 -4.09961 5.5 -4.59961 10c-0.5 1.5 -1 2.5 -1.5 3.5c-1.7002 10.7002 6.7998 33.5996 8.2002 43.3994c4.89941 23.7002 -0.700195 37.2002 1.5 46.9004c3.69922 16.2002 4.09961 3.5 4.09961 29.9004
+c-1.40039 25.8994 3.2998 36.8994 0.5 38.8994c-14.7998 0 -64.2998 -10.7002 -112.2 -2c-46.0996 8.90039 -59.3994 29 -65.3994 30.9004c-10.3008 4.5 -23.2002 -0.5 -27.3008 -7c-0.0996094 -0.100586 -35 -70.6006 -39.5996 -87.7998
+c-6.2002 -20.5 -0.5 -47.4004 4.09961 -66.8008c0 -0.0996094 4.5 -14.5996 10.3008 -19.5c2.09961 -1.5 5.09961 -2.5 7.19922 -4.5c2.80078 -2.69922 9.40039 -15.1992 9.80078 -16c2.59961 -4.5 3.59961 -8 -1.5 -10.5c-3.60059 -2 -9.30078 -2.5 -14.4004 -2.5
+c-2.59961 -0.5 -1.5 -3.5 -3.09961 -5c-2.90039 -2.7998 -20.7002 -6.09961 -29.9004 -2.5c-2.59961 1 -5.7002 3 -6.2002 5c-1.5 4 2.10059 9 -1 12.5c-4.5 2.90039 -13.0996 2 -17 12c-2.2002 5.40039 -2.59961 7.60059 -2.59961 49.4004
+c0 9.7002 -5.90039 38.7002 -8.2002 46.9004c-1.5 5.5 -1.5 11.5 0 16c0.299805 0.899414 4.09961 4.59961 4.09961 13c-1 1.5 -4.59961 0.5 -5.09961 1.5c-10.4004 80.5996 -5.90039 79 -7.7002 98.2998c-1.5 16 -10.8994 43.8994 -6.7002 64.2998
+c0.5 2.40039 3.40039 21 24.2002 38.9004c31 26.6992 48.4004 38.2998 159 11.5c1.10059 -0.400391 66.2998 -21.1006 110.7 9c15.5 11.2998 28.7998 11.2998 35.5 16c0.0996094 0.0996094 61.7002 52.0996 87 65.2998c47.2002 29.3994 69.9004 16.7002 75.0996 18
+c4.7002 1 13.4004 25.7998 17 25.7998c5.5 0 1.60059 -20.2002 3.60059 -25.9004c0.5 -2 3.59961 -5 6.2002 -5c2.2998 0 1.69922 0.800781 10.2998 5c8.39941 5.40039 14.8994 17.6006 20.5996 17c11.7002 -1.59961 -19 -41.5996 -19 -46.8994
+c0 -2 0.200195 -0.799805 4.60059 -9.5c2.59961 -5.5 4.59961 -13.5 6.19922 -20c8.30078 -29.7002 5.7002 -14.6006 13.4004 -36.9004z" />
+    <glyph glyph-name="studiovinari" unicode="&#xf3f8;" horiz-adv-x="512" 
+d="M480.3 260.3l4.2002 -28v-28l-25.0996 -44.0996l-39.8008 -78.4004l-56.0996 -67.5l-79.0996 -37.7998l-17.7002 -24.5l-7.7002 -12l-9.59961 -4s17.2998 63.5996 19.3994 63.5996c2.10059 0 20.2998 -0.699219 20.2998 -0.699219l66.7002 38.5996l-92.5 -26.0996
+l-55.8994 -36.8008l-22.8008 -28l-6.59961 -1.39941l20.7998 73.5996l6.90039 5.5l20.7002 -12.8994l88.2998 45.1992l56.7998 51.5l14.7998 68.4004l-125.399 -23.2998l15.1992 18.2002l-173.399 53.2998l81.8994 10.5l-166 122.899l114.9 -18.0996l-101.3 108
+l252.899 -126.6l-31.5 38l124.4 -74.4004l-143.3 99l18.7002 -38.4004l-49.6006 18.1006l-45.5 84.2998l194.601 -122l-42.9004 55.7998l108 -96.3994l12 8.89941l-21 16.4004l4.2002 37.7998l37.7998 10.4004l29.2002 -24.7002l11.5 -4.2002l-7 -6.2002l8.5 -12
+l-13.1006 -7.39941l-10.2998 -20.2002z" />
+    <glyph glyph-name="supple" unicode="&#xf3f9;" horiz-adv-x="640" 
+d="M640 185.5c0 -64.0996 -109 -116.1 -243.5 -116.1c-24.7998 0 -48.5996 1.7998 -71.0996 5c7.69922 -0.400391 15.5 -0.600586 23.3994 -0.600586c134.5 0 243.5 56.9004 243.5 127.101c0 29.3994 -19.0996 56.3994 -51.2002 78
+c60 -21.1006 98.9004 -55.1006 98.9004 -93.4004zM47.7002 220.1c0.0996094 -29.3994 19.2998 -56.5 51.5996 -78c-60.2002 21 -99.2002 55 -99.2998 93.3008c-0.0996094 64.0996 108.8 116.3 243.3 116.699c24.7002 0 48.5 -1.69922 71 -4.89941
+c-7.7002 0.299805 -15.3994 0.5 -23.2998 0.5c-134.5 -0.299805 -243.4 -57.4004 -243.3 -127.601zM107.9 180.2l8.7998 10.8994s8.7998 -10.0996 20.7002 -10.0996c6.5 0 12.2998 3.5 12.2998 10.0996c0 14.5 -40.2002 13.3008 -40.2002 39.9004
+c0 13.9004 12 24.0996 28.5 24.0996c10 0 25.4004 -4.69922 25.4004 -16.7998v-7.89941h-14.2002v3.89941c0 4 -5.60059 6.60059 -11.2998 6.60059c-7.2002 0 -12.5 -3.7002 -12.5 -9.10059c0 -14.5996 40.1992 -11.7002 40.1992 -39.7002
+c0 -13.5996 -10.5 -25.0996 -28.3994 -25.0996c-18.7998 0 -29.2998 13.2002 -29.2998 13.2002zM228.7 253.8h15.7002v-55c0 -18.8994 -13.3008 -31.8994 -33.4004 -31.8994c-20.2998 0 -33.7002 13 -33.7002 31.8994v55h15.7998v-54.5
+c0 -11.2002 7.10059 -17.7002 17.8008 -17.7002c10.6992 0 17.7998 6.5 17.7998 17.8008v54.3994zM263.1 168.4v72h-7.7998v13.3994h39.1006c16 0 27.1992 -11.2002 27.1992 -27.7998s-11.1992 -28.0996 -27.1992 -28.0996h-15.5v-29.5h-15.8008zM278.9 211.4h12.5996
+c8.90039 0 14 5.7998 14 14.6992c0 8.7002 -5 14.4004 -13.7002 14.4004h-12.8994v-29.0996zM335.9 168.4v72h-7.80078v13.3994h39.1006c16 0 27.2002 -11.2002 27.2002 -27.7998s-11.2002 -28.0996 -27.2002 -28.0996h-15.5v-29.5h-15.7998zM351.6 211.4h12.6006
+c9 0 14 5.7998 14 14.6992c0 8.7002 -5 14.4004 -13.7002 14.4004h-12.9004v-29.0996zM408.7 176.6h0.0996094v61.2002c0 1.60059 -0.899414 2.60059 -2.59961 2.60059h-5.2002v13.3994h15.4004c5.7998 0 8.19922 -2.5 8.19922 -8.2002v-61.1992
+c0 -1.60059 0.900391 -2.60059 2.60059 -2.60059h18.5996c1.60059 0 2.60059 0.900391 2.60059 2.60059v5.19922h14.2998v-13c0 -5.7998 -2.40039 -8.19922 -8.2002 -8.19922h-37.5996c-5.80078 0 -8.2002 2.39941 -8.2002 8.19922zM472.1 176.6h-0.0996094v63.9004h-7.7998
+v13.4004h51.5996c5.7002 0 8.2002 -2.5 8.2002 -8.2002v-13h-14.2002v5.2002c0 1.59961 -0.899414 2.59961 -2.59961 2.59961h-19.2002v-22.4004h27.7002v-13.3994h-27.7002v-20.2998c0 -1.60059 0.900391 -2.60059 2.59961 -2.60059h19.7002
+c1.60059 0 2.60059 0.900391 2.60059 2.60059v5.19922h14.2998v-13c0 -5.7998 -2.5 -8.19922 -8.2002 -8.19922h-38.7002c-5.7998 0 -8.2002 2.39941 -8.2002 8.19922zM531 252.6h-2.7002v1.2002h7v-1.2002h-2.7002v-5.89941h-1.59961v5.89941zM536.7 253.8h2.39941
+l2.10059 -5.09961l2.09961 5.09961h2.2998v-7.09961h-1.5v5.7002l-2.2998 -5.7002h-1.2998l-2.2998 5.7002v-5.7002h-1.5v7.09961z" />
+    <glyph glyph-name="telegram-plane" unicode="&#xf3fe;" 
+d="M446.7 349.4l-67.6006 -318.801c-5.09961 -22.5 -18.3994 -28.0996 -37.2998 -17.5l-103 75.9004l-49.7002 -47.7998c-5.5 -5.5 -10.0996 -10.1006 -20.6992 -10.1006l7.39941 104.9l190.9 172.5c8.2998 7.40039 -1.7998 11.5 -12.9004 4.09961l-236 -148.6
+l-101.6 31.7998c-22.1006 6.90039 -22.5 22.1006 4.59961 32.7002l397.4 153.1c18.3994 6.90039 34.5 -4.09961 28.5 -32.1992z" />
+    <glyph glyph-name="uber" unicode="&#xf402;" 
+d="M414.1 416c18.7002 0 33.9004 -15.2002 33.8008 -33.9004v-380.199c0 -18.7002 -15.2002 -33.9004 -33.9004 -33.9004h-380.1c-18.7002 0 -33.9004 15.2002 -33.9004 34v380.1c0 18.7002 15.2002 33.9004 33.9004 33.9004h380.199zM237.6 56.9004
+c74.6006 7.5 129 74.0996 121.5 148.6c-7 69.4004 -65.3994 122.2 -135.1 122.2s-128.1 -52.7998 -135.1 -122.2h94.3994v20.4004c0 3.7998 3.10059 6.7998 6.7998 6.7998h67.9004c3.7998 0 6.7998 -3.10059 6.7998 -6.7998v-67.9004
+c0 -3.7998 -3.09961 -6.7998 -6.7998 -6.7998h-67.9004c-3.7998 0 -6.7998 3.09961 -6.7998 6.7998v20.4004h-94.3994c7.5 -74.6006 74.0996 -129 148.699 -121.5z" />
+    <glyph glyph-name="uikit" unicode="&#xf403;" 
+d="M443.9 320v-256l-225.9 -128l-218 128v214.3l87.5996 -45.0996v-117l133.5 -75.5l135.801 75.5v151l-101.101 57.5996l87.6006 53.1006zM308.6 398.9l-87.3994 -53l-86 47.2998l88.5996 54.7998z" />
+    <glyph glyph-name="uniregistry" unicode="&#xf404;" horiz-adv-x="384" 
+d="M192 -32c-39.5 0 -76.2002 11.7998 -106.7 32.2002h213.5c-30.5996 -20.4004 -67.2998 -32.2002 -106.8 -32.2002zM102.9 161.1c0 -2.5 0.0996094 -5 0.299805 -7.39941h-103.101c-0.0996094 2.39941 -0.0996094 4.89941 -0.0996094 7.39941v12.4004h102.9v-12.4004z
+M123.4 104.1c8.89941 -10.5996 20.0996 -19.0996 33 -24.7998h-138.301c-3.7998 8 -7 16.2998 -9.59961 24.7998h114.9zM105.7 138.8c2 -7.89941 5.2002 -15.3994 9.2002 -22.2998h-109.7c-1.7002 7.2998 -3 14.7002 -3.90039 22.2998h104.4zM102.9 208.1v-17.2998h-102.9
+v17.2998h102.9zM102.9 381.3v-4.89941h-102.9v4.89941h102.9zM102.9 416v-2.5h-102.9v2.5h102.9zM102.9 346.7v-7.40039h-102.9v7.40039h102.9zM102.9 242.7v-14.7998h-102.9v14.7998h102.9zM102.9 312v-9.90039h-102.9v9.90039h102.9zM102.9 277.4v-12.4004h-102.9v12.4004
+h102.9zM269.1 116.5c4 6.90039 7.10059 14.4004 9.2002 22.2998h104.4c-0.799805 -7.59961 -2.10059 -15 -3.90039 -22.2998h-109.7zM281.1 302.2v9.7998h102.9v-9.7998h-102.9zM281.1 265v12.4004h102.9v-12.4004h-102.9zM281.1 339.3v7.40039h102.9v-7.40039h-102.9z
+M281.1 416h102.9v-2.5h-102.9v2.5zM78.0996 5.09961c-11.7998 8.7002 -23.5996 18.7002 -33.1992 29.7002h293.1c-9.5 -11.0996 -20.4004 -21 -32.2002 -29.7002h-227.7zM281.1 376.4v4.89941h102.9v-4.89941h-102.9zM281.1 227.9v14.7998h102.9v-14.7998h-102.9z
+M38.7998 42.2998c-6.59961 8.5 -10.5996 17.6006 -15.7998 27.2002h338.9c-5.2002 -9.59961 -11.1006 -18.7002 -17.8008 -27.2002h-305.3zM227.6 79.4004c12.8008 5.59961 24.1006 14.0996 32.9004 24.7998h115c-2.7002 -8.60059 -4.7998 -16.7998 -8.5 -24.7998h-139.4z
+M281.1 161.1v12.4004h102.9v-12.4004c0 -2.5 -0.0996094 -4.89941 -0.200195 -7.39941h-103.1c0.299805 2.39941 0.399414 4.89941 0.399414 7.39941zM281.1 190.8v17.2998h102.9v-17.2998h-102.9z" />
+    <glyph glyph-name="untappd" unicode="&#xf405;" horiz-adv-x="640" 
+d="M401.3 398.1c-79.7998 -160.1 -84.5996 -152.5 -87.8994 -173.199l-5.2002 -32.8008c-1.90039 -12 -6.60059 -23.5 -13.7002 -33.3994l-148.9 -207.8c-7.59961 -10.6006 -20.3994 -16.2002 -33.3994 -14.6006c-40.2998 5 -77.7998 32.2002 -95.2998 68.5
+c-5.7002 11.7998 -4.5 25.7998 3.09961 36.4004l148.9 207.899c7.09961 9.90039 16.3994 18 27.1992 23.7002l29.3008 15.5c18.5 9.7998 9.69922 11.9004 135.6 138.9c1 4.7998 1 7.2998 3.59961 8c3 0.700195 6.60059 1 6.30078 4.59961l-0.400391 4.60059
+c-0.200195 1.89941 1.2998 3.59961 3.2002 3.59961c4.5 0.0996094 13.2002 -1.2002 25.5996 -10c12.2998 -8.90039 16.4004 -16.7998 17.7002 -21.0996c0.599609 -1.80078 -0.599609 -3.7002 -2.40039 -4.2002l-4.5 -1.10059
+c-3.39941 -0.899414 -2.5 -4.39941 -2.2998 -7.39941c0.100586 -2.7998 -2.2998 -3.60059 -6.5 -6.10059zM230.1 411.6c-3.19922 0.800781 -8.19922 1.2002 -6.7998 5.40039c1.2998 4.2998 5.40039 12.2002 17.7002 21.0996c12.4004 8.90039 21.0996 10.1006 25.5996 10
+c4.2002 -0.0996094 3.10059 -4.89941 2.80078 -8.19922c-0.300781 -3.60059 3.2998 -3.80078 6.2998 -4.60059c2.59961 -0.700195 2.59961 -3.2998 3.59961 -8c9.10059 -9.2002 17.6006 -17.8994 25.6006 -26.0996c1.2998 -1.40039 1.19922 -3.5 -0.100586 -4.90039
+c-15.8994 -16.3994 -29.2998 -30.5996 -40.5 -42.5996c-1 -1 -2.59961 -0.799805 -3.2998 0.5c-6.90039 13.5 -14.2998 28.0996 -22.2002 44c-4.2998 2.5 -6.59961 3.2998 -6.39941 6c0.199219 3 1.09961 6.5 -2.30078 7.39941zM620 41.2998
+c7.7002 -10.7002 8.7998 -24.7002 3.40039 -36.5996c-17.7002 -36.6006 -55.4004 -63.7002 -95.7002 -68.6006c-12.9004 -1.5 -25.5 4.10059 -33.1006 14.7002l-148.899 207.9c-7.10059 9.89941 -11.7998 21.3994 -13.7002 33.3994
+c-1.59961 9.80078 -2 19.1006 -0.299805 29.8008c1.89941 12 2.7002 6 49 94.7998c0.700195 1.39941 2.59961 1.59961 3.59961 0.5c16.2998 -18 19.2998 -23 30.5 -28.9004c29.7998 -15.7002 43.2002 -20.5996 56.4004 -39.0996z" />
+    <glyph glyph-name="ussunnah" unicode="&#xf407;" horiz-adv-x="512" 
+d="M156.8 162.9l5.7002 -14.4004h-8.2002c-1.2998 3.2002 -3.09961 7.7002 -3.7998 9.5c-2.5 6.2998 -1.09961 8.40039 0 10c1.90039 2.7002 3.2002 4.40039 3.59961 5.2002c0 -2.2002 0.800781 -5.7002 2.7002 -10.2998zM454.1 144.1
+c-2.09961 -13.7998 -5.69922 -27.0996 -10.5 -39.6992l43 -23.4004l-44.7998 18.7998c-5.2998 -13.2002 -12 -25.5996 -19.8994 -37.2002l34.1992 -30.1992l-36.7998 26.3994c-8.39941 -11.7998 -18 -22.5996 -28.7002 -32.2998l24.9004 -34.7002l-28.0996 31.7998
+c-11 -9.59961 -23.1006 -18 -36.1006 -25.0996l15.7002 -37.2002l-19.2998 35.2998c-13.1006 -6.7998 -27 -12.0996 -41.6006 -15.8994l6.7002 -38.4004l-10.5 37.4004c-14.2998 -3.40039 -29.2002 -5.2998 -44.5 -5.40039l-1.7998 -38.2998l-1.90039 38.4004
+c-15.2998 0.0996094 -30.1992 2 -44.5 5.2998l-10.5996 -37.2998l6.7002 38.1992c-14.6006 3.7002 -28.6006 9.10059 -41.7002 15.8008l-19.2002 -35.1006l15.6006 37c-13 7 -25.2002 15.4004 -36.2002 25.1006l-27.9004 -31.6006l24.7002 34.4004
+c-10.7002 9.7002 -20.4004 20.5 -28.7998 32.2998l-36.5 -26.2002l33.8994 29.9004c-7.89941 11.5996 -14.5996 24.0996 -20 37.2998l-44.3994 -18.7002l42.5996 23.2002c-4.7998 12.7002 -8.39941 26.0996 -10.5 39.9004l-51 -9l50.2998 14.1992
+c-1.09961 8.5 -1.69922 17.1006 -1.69922 25.9004c0 4.7002 0.199219 9.40039 0.5 14.0996l-55.4004 2.90039l56 2.7998c1.2998 13.1006 3.7998 25.7998 7.5 38.1006l-57.0996 16.0996l58.8994 -10.4004c4 12 9.10059 23.5 15.2002 34.4004l-55.0996 30l58.2998 -24.5996
+c6.2998 10.5996 13.5 20.3994 21.5996 29.5996l-49.5 43.5996l53.9004 -38.6992c8.09961 8.59961 17 16.5 26.5996 23.5996l-40 55.5996l45.6006 -51.5996c9.5 6.59961 19.6992 12.2998 30.2998 17.2002l-27.2998 64.8994l33.7998 -62.0996
+c10.5 4.40039 21.3994 7.90039 32.7002 10.4004l-12.4004 70.6992l19.5 -69.1992c11 2.09961 22.2998 3.19922 33.7998 3.39941l3.7002 72.2002l3.59961 -72.2002c11.5 -0.200195 22.8008 -1.39941 33.8008 -3.5l19.5996 69.2998l-12.4004 -70.6992
+c11.3008 -2.60059 22.2002 -6.10059 32.6006 -10.5l33.8994 62.1992l-27.3994 -65.0996c10.5996 -4.90039 20.7002 -10.7002 30.2002 -17.2002l45.7998 51.7998l-40.1006 -55.8994c9.5 -7.10059 18.4004 -15 26.5 -23.6006l54.2002 38.9004l-49.7002 -43.9004
+c8 -9.09961 15.2002 -18.8994 21.5 -29.3994l58.7002 24.7002l-55.5 -30.2002c6.10059 -10.9004 11.1006 -22.2998 15.1006 -34.2998l59.2998 10.3994l-57.5 -16.2002c3.7002 -12.1992 6.2002 -24.8994 7.5 -37.8994l56.2998 -2.7002l-56 -2.7998
+c0.299805 -4.60059 0.5 -9.2998 0.5 -14.1006c0 -8.69922 -0.599609 -17.2998 -1.59961 -25.7998l50.6992 -14.2998zM432.3 175.1c0 97.5 -79 176.5 -176.5 176.5s-176.5 -79 -176.5 -176.5s79 -176.5 176.5 -176.5s176.5 79 176.5 176.5zM408.3 175.1
+c0 -84.2998 -68.2998 -152.6 -152.6 -152.6s-152.601 68.2998 -152.601 152.6c0 84.3008 68.3008 152.601 152.601 152.601s152.6 -68.2998 152.6 -152.601zM195 207c0 -2.09961 1.2998 -3.7998 3.59961 -5.09961c3.30078 -1.90039 6.2002 -4.60059 8.2002 -8.2002
+c2.7998 5.7002 4.2998 9.5 4.2998 11.2002c0 2.19922 -1.09961 4.39941 -3.19922 7c-2.10059 2.5 -3.2002 5.19922 -3.30078 7.69922c-6.5 -6.7998 -9.59961 -10.8994 -9.59961 -12.5996zM154.3 226c0 -2.09961 1.2998 -3.7998 3.60059 -5.09961
+c3.5 -1.90039 6.19922 -4.60059 8.19922 -8.2002c2.80078 5.7002 4.30078 9.5 4.30078 11.2002c0 2.19922 -1.10059 4.39941 -3.2002 7c-2.10059 2.5 -3.2002 5.19922 -3.2998 7.69922c-6.5 -6.7998 -9.60059 -10.8994 -9.60059 -12.5996zM135.3 226
+c0 -2.09961 1.2998 -3.7998 3.60059 -5.09961c3.2998 -1.90039 6.19922 -4.60059 8.19922 -8.2002c2.80078 5.7002 4.30078 9.5 4.30078 11.2002c0 2.19922 -1.10059 4.39941 -3.2002 7c-2.10059 2.5 -3.2002 5.19922 -3.2998 7.69922
+c-6.40039 -6.7998 -9.60059 -10.8994 -9.60059 -12.5996zM340.2 138.1c-8.40039 3 -8.7002 6.80078 -8.7002 15.6006v112.3c-8.2002 -12.5 -14.2002 -18.5996 -18 -18.5996c6.2998 -14.4004 9.5 -23.9004 9.5 -28.3008v-64.2998c0 -2.2002 -2.2002 -6.5 -4.7002 -6.5h-18
+c-2.7998 7.5 -10.2002 26.9004 -15.2998 40.2998c-2 -2.5 -7.2002 -9.19922 -10.7002 -13.6992c2.40039 -1.60059 4.10059 -3.60059 5.2002 -6.30078c2.59961 -6.69922 6.40039 -16.5 7.90039 -20.1992h-9.2002c-3.90039 10.3994 -9.60059 25.3994 -11.7998 31.0996
+c-2 -2.5 -7.2002 -9.2002 -10.7002 -13.7002c2.39941 -1.59961 4.09961 -3.59961 5.2002 -6.2998c0.799805 -2 2.7998 -7.2998 4.2998 -10.9004h-9.2002c-1.5 4.10059 -5.59961 14.6006 -8.40039 22c-2 -2.5 -7.19922 -9.19922 -10.6992 -13.6992
+c2.5 -1.60059 4.2998 -3.60059 5.19922 -6.30078c0.200195 -0.599609 0.5 -1.39941 0.600586 -1.69922h-17.7002c-4.59961 13.8994 -11.4004 27.6992 -11.4004 34.0996c0 2.2002 0.300781 5.09961 1.10059 8.2002c-8.7998 -10.7998 -14 -15.9004 -14 -25
+c0 -7.5 10.3994 -28.2998 10.3994 -33.2998c0 -1.7002 -0.5 -3.30078 -1.39941 -4.90039c-9.60059 12.7002 -15.5 20.7002 -18.7998 20.7002h-12l-11.2002 28c-3.7998 9.59961 -5.7002 16 -5.7002 18.7998c0 3.7998 0.5 7.7002 1.7002 12.2002
+c-1 -1.2998 -3.7002 -4.7002 -5.5 -7.10059c-0.799805 2.10059 -3.10059 7.7002 -4.60059 11.5c-2.09961 -2.5 -7.5 -9.09961 -11.1992 -13.5996c0.899414 -2.2998 3.2998 -8.09961 4.89941 -12.2002c-2.5 -3.2998 -9.09961 -11.7998 -13.5996 -17.7002
+c-4 -5.2998 -5.7998 -13.2998 -2.7002 -21.7998c2.5 -6.7002 2 -7.89941 -1.7002 -14.0996h61.7002c5.5 0 14.2998 -14 15.5 -22c13.2002 16 15.4004 19.5996 16.7998 21.5996h107c3.90039 0 7.2002 1.90039 9.90039 5.7998zM360.3 164.7v101.6
+c-9 -12.5 -15.8994 -18.5996 -20.7002 -18.5996c7.10059 -14.4004 10.7002 -23.9004 10.7002 -28.2998v-66.3008c0 -17.5 8.60059 -20.3994 24 -20.3994c8.10059 0 12.5 0.799805 13.7002 2.7002c-4.2998 1.59961 -7.59961 2.5 -9.90039 3.2998
+c-8.09961 3.2002 -17.7998 7.39941 -17.7998 26z" />
+    <glyph glyph-name="vaadin" unicode="&#xf408;" 
+d="M224.5 307.3c1.5 17.6006 4.90039 52.7002 49.7998 52.7002h98.6006c20.6992 0 32.0996 7.7998 32.0996 21.5996v12.3008c0 12.1992 9.2998 22.0996 21.5 22.0996s21.5 -9.90039 21.5 -22.0996v-36.5c0 -42.9004 -21.5 -62 -66.7998 -62h-100.5
+c-30.1006 0 -33 -14.7002 -33 -27.1006c0 -1.2998 -0.100586 -2.5 -0.200195 -3.7002c-0.700195 -12.2998 -10.9004 -22.1992 -23.4004 -22.1992s-22.6992 9.7998 -23.3994 22.1992c-0.100586 1.2002 -0.200195 2.40039 -0.200195 3.7002c0 12.2998 -3 27.1006 -33 27.1006
+h-100.7c-45.2998 0 -66.7998 19.0996 -66.7998 62v36.5c0 12.1992 9.40039 22.0996 21.5996 22.0996c12.2002 0 21.5 -9.90039 21.5 -22.0996v-12.3008c0 -13.7998 11.4004 -21.5996 32.1006 -21.5996h98.5996c44.7998 0 48.2998 -35.0996 49.7998 -52.7002h0.900391z
+M224 -8c-11.5 0 -21.4004 7 -25.7002 16.2998c-1.09961 1.7998 -97.0996 169.5 -98.2002 171.4c-11.8994 19.7002 3.2002 44.2998 27.2002 44.2998c13.9004 0 23.4004 -6.40039 29.7998 -20.2998l66.9004 -117.7l66.9004 117.7c6.5 13.8994 15.8994 20.2998 29.7998 20.2998
+c24 0 39.0996 -24.7002 27.2002 -44.2998c-1.10059 -1.7998 -97.1006 -169.601 -98.2002 -171.4c-4.2998 -9.2998 -14.2002 -16.2998 -25.7002 -16.2998z" />
+    <glyph glyph-name="viber" unicode="&#xf409;" horiz-adv-x="512" 
+d="M444 398.1c42.2002 -36.6992 65.5996 -117.899 49.7998 -246.5c-15.2002 -124.6 -109.1 -136.6 -125.7 -142c-7.19922 -2.2998 -70.2998 -18.0996 -152.5 -11.1992c-9.09961 -10.5 -21.0996 -24.3008 -29.7998 -33.7002
+c-15.8994 -17.1006 -25.7002 -33 -42.2998 -27.7998c-13.7998 4.19922 -13 25.0996 -13 25.0996l0.0996094 51.5996h-0.0996094c-120.1 33.8008 -118.4 158.4 -117 224.9s14.2998 120.2 50.9004 156.8c65.7998 60.4004 200.899 52.2998 200.899 52.2998
+c114.601 -0.5 166 -37.7998 178.7 -49.5zM457.9 161c13.2998 107.3 -4.90039 180.5 -40.6006 211.1c-10.7998 9.80078 -57.2002 39 -154.1 39.4004c0 0 -114.7 7.5 -170.4 -43c-31 -30.5996 -41.5 -76.0996 -42.5996 -131.6
+c-1.10059 -55.5 -7.10059 -161.601 94.7002 -189.801c-0.100586 0 -0.100586 0 0 0c0 0 -0.400391 -78.7998 -0.400391 -85.6992c-0.0996094 -10.5 5.7002 -11 11 -5.7002c16.2002 16.2998 68.2002 79 68.2002 79c69.7002 -4.5 125.2 9.2998 131.2 11.2002
+c14 4.5 90.0996 11.0996 103 115.1zM318.9 241.8c0.399414 -8.59961 -12.5 -9.2002 -12.9004 -0.599609c-1.09961 22 -11.4004 32.7002 -32.5996 33.8994c-8.60059 0.5 -7.80078 13.4004 0.699219 12.9004c27.9004 -1.5 43.4004 -17.5 44.8008 -46.2002zM339.2 230.5
+c1 42.4004 -25.5 75.5996 -75.7998 79.2998c-8.5 0.600586 -7.60059 13.5 0.899414 12.9004c58 -4.2002 88.9004 -44.1006 87.7998 -92.5c-0.0996094 -8.60059 -13.0996 -8.2002 -12.8994 0.299805zM386.2 217.1c0.0996094 -8.59961 -12.9004 -8.69922 -12.9004 -0.0996094
+c-0.599609 81.5 -54.8994 125.9 -120.8 126.4c-8.5 0.0996094 -8.5 12.8994 0 12.8994c73.7002 -0.5 133 -51.3994 133.7 -139.2zM374.9 119v-0.200195c-10.8008 -19 -31 -40 -51.8008 -33.2998l-0.199219 0.299805c-21.1006 5.90039 -70.8008 31.5 -102.2 56.5
+c-16.2002 12.7998 -31 27.9004 -42.4004 42.4004c-10.2998 12.8994 -20.7002 28.2002 -30.7998 46.5996c-21.2998 38.5 -26 55.7002 -26 55.7002c-6.7002 20.7998 14.2002 41 33.2998 51.7998h0.200195c9.2002 4.7998 18 3.2002 23.9004 -3.89941
+c0 0 12.3994 -14.8008 17.6992 -22.1006c5 -6.7998 11.7002 -17.7002 15.2002 -23.7998c6.10059 -10.9004 2.2998 -22 -3.7002 -26.5996l-12 -9.60059c-6.09961 -4.89941 -5.2998 -14 -5.2998 -14s17.7998 -67.2998 84.2998 -84.2998c0 0 9.10059 -0.799805 14 5.2998
+l9.60059 12c4.59961 6 15.7002 9.7998 26.5996 3.7002c14.7002 -8.2998 33.4004 -21.2002 45.7998 -32.9004c7 -5.69922 8.60059 -14.3994 3.80078 -23.5996z" />
+    <glyph glyph-name="vimeo" unicode="&#xf40a;" 
+d="M403.2 416c24.7002 0 44.7998 -20.0996 44.7998 -44.7998v-358.4c0 -24.7002 -20.0996 -44.7998 -44.7998 -44.7998h-358.4c-24.7002 0 -44.7998 20.0996 -44.7998 44.7998v358.4c0 24.7002 20.0996 44.7998 44.7998 44.7998h358.4zM377 267.2
+c1.90039 42.2002 -13.7998 63.7998 -47.0996 64.7002c-44.9004 1.39941 -75.3008 -23.9004 -91.2002 -76c19.8994 8.5 49.2998 10.7998 45.7998 -22.4004c-1 -11.2002 -8.2998 -27.5 -21.7998 -48.9004c-37.7002 -59.3994 -46.9004 -39.5996 -67.6006 91.6006
+c-5.7998 36.8994 -21.2998 54.0996 -46.5 51.7002c-22.2998 -2 -57.8994 -38.4004 -95.1992 -71.2002l15.1992 -19.6006c14.5 10.1006 23 15.2002 25.4004 15.2002c21 0 31.9004 -54.7002 57.4004 -148c13.0996 -34.8994 29 -52.2998 47.8994 -52.2998
+c30.4004 0 67.7002 28.5996 111.7 85.7998c42.5996 54.7002 64.5996 97.9004 66 129.4z" />
+    <glyph glyph-name="vnv" unicode="&#xf40b;" horiz-adv-x="640" 
+d="M104.9 96c-34.1006 0 -46.4004 30.4004 -46.4004 30.4004l-55.9004 111.5s-10.3994 18.0996 10.4004 18.0996h32.7998c10.4004 0 13.2002 -8.7002 18.7998 -18.0996l36.7002 -74.5s5.2002 -13.1006 21.1006 -13.1006c15.8994 0 21.0996 13.1006 21.0996 13.1006
+l36.7002 74.5c5.59961 9.5 8.39941 18.0996 18.7998 18.0996h32.7998c20.7998 0 10.4004 -18.0996 10.4004 -18.0996l-55.7998 -111.5s-12.2002 -30.4004 -46.4004 -30.4004h-35.0996zM499.9 96c-34.1006 0 -46.4004 30.4004 -46.4004 30.4004l-55.9004 111.5
+s-10.3994 18.0996 10.4004 18.0996h32.7998c10.4004 0 13.2002 -8.7002 18.7998 -18.0996l36.7002 -74.5s5.2002 -13.1006 21.1006 -13.1006c15.8994 0 21.0996 13.1006 21.0996 13.1006l36.7998 74.5c5.60059 9.5 8.40039 18.0996 18.7998 18.0996h32.9004
+c20.7998 0 10.4004 -18.0996 10.4004 -18.0996l-55.9004 -111.5s-12.2002 -30.4004 -46.4004 -30.4004h-35.1992zM337.6 256c34.1006 0 46.4004 -30.4004 46.4004 -30.4004l55.9004 -111.5s10.3994 -18.0996 -10.4004 -18.0996h-32.7998
+c-10.4004 0 -13.2002 8.7002 -18.7998 18.0996l-36.7002 74.5s-5.2002 13.1006 -21.1006 13.1006c-15.8994 0 -21.0996 -13.1006 -21.0996 -13.1006l-36.7002 -74.5c-5.59961 -9.39941 -8.39941 -18.0996 -18.7998 -18.0996h-32.9004
+c-20.7998 0 -10.3994 18.0996 -10.3994 18.0996l55.8994 111.5s12.2002 30.4004 46.4004 30.4004h35.0996z" />
+    <glyph glyph-name="whatsapp-square" unicode="&#xf40c;" 
+d="M224 325.2c35.2002 0 68.2002 -13.7002 93.2002 -38.7002c24.8994 -24.9004 40.0996 -58 40.0996 -93.2002c0 -72.7002 -60.7002 -131.8 -133.3 -131.8h-0.0996094c-23.7002 0 -46.9004 6.40039 -67.1006 18.4004l-4.7998 2.89941l-49.9004 -13.0996l13.3008 48.5996
+l-3.10059 5c-13.2002 20.9004 -20.2002 45.2002 -20.2002 70.1006c0.100586 72.6992 59.2002 131.8 131.9 131.8zM301.5 136.8c3.2998 9.2002 3.2998 17.2002 2.40039 19.1006c-1 1.59961 -3.60059 2.59961 -7.60059 4.59961s-23.5 11.5996 -27.0996 12.9004
+c-3.60059 1.2998 -6.2998 2 -8.90039 -2c-2.59961 -3.90039 -10.2002 -12.9004 -12.5 -15.5c-2.2998 -2.7002 -4.59961 -3 -8.59961 -1c-23.2998 11.6992 -38.6006 20.7998 -53.9004 47.0996c-4.09961 7 4 6.40039 11.6006 21.5996
+c1.39941 2.60059 0.699219 4.90039 -0.300781 6.90039s-8.89941 21.5 -12.1992 29.4004c-3.2002 7.69922 -6.5 6.69922 -8.90039 6.7998c-2.2998 0.0996094 -5 0.0996094 -7.59961 0.0996094c-2.7002 0 -7 -1 -10.6006 -5c-3.7002 -4 -13.8994 -13.5996 -13.8994 -33.0996
+s14.1992 -38.4004 16.1992 -41c2 -2.60059 28 -42.6006 67.7002 -59.7998c25.1006 -10.8008 34.9004 -11.8008 47.5 -9.90039c7.60059 1.09961 23.4004 9.5 26.7002 18.7998zM400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48
+v352c0 26.5 21.5 48 48 48h352zM223.9 34.7998c87.3994 0 160.1 71.1006 160.1 158.5c0 42.4004 -18 82.2002 -47.9004 112.2c-30 30 -69.7998 46.5 -112.199 46.5c-87.4004 0 -158.5 -71.0996 -158.601 -158.5c0 -28 7.2998 -55.2998 21.2002 -79.2998l-22.5 -82.2002
+l84.0996 22.0996c23.1006 -12.5996 49.2002 -19.2998 75.8008 -19.2998z" />
+    <glyph glyph-name="whmcs" unicode="&#xf40d;" 
+d="M448 287l-29.0996 -7l-2.2002 -12.0996l20.8994 -18.8008l-10.2998 -20.0996l-28.7998 8.7998l-7.7998 -8.09961l8.7998 -28l-20.4004 -12.1006l-20.6992 21.6006l-11.6006 -3.5l-6.7002 -28.7998l-22.5996 0.299805l-6.7002 28.5l-11.5996 2.89941l-19.4004 -20.3994
+l-19.8994 11.5996l8.09961 26.9004l-7.2002 8.59961l-29.5996 -7.5l-10.4004 18.5l20.1006 19.9004l-2.40039 12.0996l-28.7998 7.5l0.299805 21.7002l28.5 7.7998l2.90039 10.4004l-20.7002 21l11 19.0996l28.5 -7.5l8.09961 8.40039l-8.09961 27.7002l19.3994 11
+l19.7002 -21l12.1006 3.19922l6.19922 26.4004h22.6006l7 -26.4004l10.7002 -3.19922l21.2998 21l19.0996 -11.6006l-7.5 -28.2002l7.2002 -7.5l29 7.5l10.4004 -19.3994l-20.1006 -20.7002l2.2002 -10.4004l28.5 -8.7998v-21.2998zM328.8 241.8
+c31.4004 0 56.7998 25.2998 56.7998 56.7998c0 31.4004 -25.3994 56.8008 -56.7998 56.8008c-31.3994 0 -56.7998 -25.4004 -56.7998 -56.8008c0 -31.3994 25.5 -56.7998 56.7998 -56.7998zM401.1 225.4l46.9004 -14.5v-39.9004l-55.0996 -13.4004l-4.10059 -22.6992
+l38.9004 -35.3008l-19.2002 -37.8994l-54 16.7002l-14.5996 -15.2002l16.6992 -52.5l-38.2998 -22.7002l-38.8994 40.5l-21.7002 -6.59961l-12.6006 -54l-42.3994 0.5l-12.6006 53.5996l-21.6992 5.59961l-36.4004 -38.3994l-37.4004 21.7002l15.2002 50.5l-13.7002 16.0996
+l-55.5 -14.0996l-19.6992 34.7998l37.8994 37.3994l-4.7998 22.8008l-54 14.0996l0.5 40.9004l53.5 14.6992l5.7002 19.7002l-38.9004 39.4004l20.7002 35.7998l53.5996 -14.0996l15.2002 15.6992l-15.2002 52l36.4004 20.7002l36.7998 -39.3994l22.7002 6.09961l11.5996 52
+h42.4004l11.5996 -45.9004l-22.5996 5.90039l-6.2998 1.7002l-3.2998 -5.7002l-11 -19.0996l-3.30078 -5.60059l4.60059 -4.59961l17.2002 -17.4004l-0.300781 -1l-23.7998 -6.5l-6.2002 -1.7002l-0.0996094 -6.39941l-0.200195 -12.9004
+c-47.5 -10.3994 -83.2998 -52.7998 -83.2998 -103.5c0 -58.2998 47.2998 -105.7 105.7 -105.7c50.5 0 92.7002 35.4004 103.2 82.8008l13.1992 -0.200195l6.90039 -0.100586l1.59961 6.7002l5.60059 24l1.89941 0.600586l17.1006 -17.8008l4.7002 -4.89941l5.7998 3.39941
+l20.3994 12.1006l5.80078 3.5l-2 6.5z" />
+    <glyph glyph-name="wordpress-simple" unicode="&#xf411;" horiz-adv-x="512" 
+d="M256 440c136.7 0 248 -111.2 248 -248c0 -136.7 -111.3 -248 -248 -248s-248 111.3 -248 248c0 136.8 111.3 248 248 248zM33 192c0 -88.2002 51.2998 -164.5 125.7 -200.7l-106.4 291.4c-12.3994 -27.7002 -19.2998 -58.4004 -19.2998 -90.7002zM256 -31
+c26 0 50.9004 4.5 74 12.5996c-0.599609 1 -1.09961 2 -1.59961 3.10059l-68.5 187.8l-66.9004 -194.4c20 -5.89941 41.0996 -9.09961 63 -9.09961zM286.7 296.5l80.7002 -239.6l22.1992 74.2998c9.7002 30.8994 17 53 17 72.0996c0 27.6006 -9.89941 46.7002 -18.3994 61.5
+c-11.2998 18.4004 -21.9004 33.9004 -21.9004 52.2998c0 20.5 15.5 39.6006 37.4004 39.6006c1 0 1.89941 -0.100586 2.89941 -0.200195c-39.6992 36.2998 -92.5996 58.5 -150.6 58.5c-77.9004 0 -146.4 -40 -186.3 -100.5
+c5.2998 -0.200195 10.2002 -0.299805 14.3994 -0.299805c23.3008 0 59.4004 2.7998 59.4004 2.7998c12 0.700195 13.4004 -17 1.40039 -18.4004c0 0 -12.1006 -1.39941 -25.5 -2.09961l81.1992 -241.5l48.8008 146.3l-34.7002 95.2002
+c-12 0.700195 -23.4004 2.09961 -23.4004 2.09961c-12 0.700195 -10.5996 19.1006 1.40039 18.4004c0 0 36.7998 -2.7998 58.7002 -2.7998c23.2998 0 59.3994 2.7998 59.3994 2.7998c12 0.700195 13.4004 -17 1.40039 -18.4004c0 0 -12.1006 -1.39941 -25.5 -2.09961z
+M368.1 -0.700195c66.3008 38.6006 110.9 110.4 110.9 192.7c0 38.7998 -9.90039 75.2002 -27.2998 107c1 -7.09961 1.5 -14.7002 1.5 -22.9004c0 -22.6992 -4.2998 -48.0996 -17 -79.8994z" />
+    <glyph glyph-name="xbox" unicode="&#xf412;" horiz-adv-x="512" 
+d="M369.9 129.8c44.2998 -54.2998 64.6992 -98.7998 54.3994 -118.7c-7.89941 -15.0996 -56.7002 -44.5996 -92.5996 -55.8994c-29.6006 -9.2998 -68.4004 -13.2998 -100.4 -10.2002c-38.2002 3.7002 -76.8994 17.4004 -110.1 39
+c-27.9004 18.2002 -34.2002 25.7002 -34.2002 40.5996c0 29.9004 32.9004 82.3008 89.2002 142.101c32 33.8994 76.5 73.7002 81.3994 72.5996c9.40039 -2.09961 84.3008 -75.0996 112.301 -109.5zM188.6 304.2c-66.3994 -81.5 -106 -155.4 -120.3 -194.4
+c-9.7998 -26.5 -13.7002 -53 -9.5 -64c2.7998 -7.39941 0.200195 -4.7002 -9.2998 9.90039c-23.2002 35.5 -34.9004 70.3994 -40.5 120.899c-1.90039 16.7002 -1.2002 26.3008 4.2002 60.5c6.7998 42.7002 31.0996 92 60.2998 122.4
+c12.4004 12.9004 13.5 13.2002 28.7002 8.09961c28.2998 -9.5 56.7002 -36.5 86.3994 -63.3994zM500.2 240.7c4.7002 -22.6006 5.09961 -70.9004 0.799805 -93.4004c-3.59961 -18.5 -11.2002 -42.5 -18.5996 -58.7002c-5.5 -12.1992 -19.3008 -35.7998 -25.4004 -43.5
+c-3.09961 -3.89941 -3.09961 -3.89941 -1.40039 4.60059c2.30078 11.2002 -0.599609 31.5996 -7.39941 52.2998c-20.7002 62.9004 -80.5 149 -122.9 202.3c23.2998 21.4004 41 38.2998 64.2998 52.7998c11.8008 7.40039 28.7002 13.9004 36 13.9004
+c7.10059 0 57.7002 -50.2998 74.6006 -130.3zM141.3 405c-14.5996 -0.700195 -14 0.0996094 9.40039 11.2002c81.2002 38.2998 170 27.5996 233.899 -11.7002c-13.3994 0.599609 -43.5 5.90039 -107.399 -25.2002c-11.2002 -5.5 -20.9004 -9.7998 -21.6006 -9.7002
+c-4.59961 0.900391 -66.5996 37.9004 -114.3 35.4004z" />
+    <glyph glyph-name="yandex" unicode="&#xf413;" horiz-adv-x="256" 
+d="M153.1 132.2l-87.3994 -196.2h-63.7002l96 209.8c-45.0996 22.9004 -75.2002 64.4004 -75.2002 141.101c-0.0996094 107.399 68 161.1 148.9 161.1h82.2998v-512h-55.0996v196.2h-45.8008zM198.9 401.5h-29.4004c-44.4004 0 -87.4004 -29.4004 -87.4004 -114.6
+c0 -82.3008 39.4004 -108.801 87.4004 -108.801h29.4004v223.4z" />
+    <glyph glyph-name="yandex-international" unicode="&#xf414;" horiz-adv-x="320" 
+d="M129.5 -64v166.1l-111 297.9h55.7998l81.7998 -229.7l94.1006 277.7h51.2998l-120.7 -347.8v-164.2h-51.2998z" />
+    <glyph glyph-name="apple-pay" unicode="&#xf415;" horiz-adv-x="640" 
+d="M116.9 289.5c-7.5 -8.90039 -19.5 -15.9004 -31.5 -14.9004c-1.5 12 4.39941 24.8008 11.2998 32.6006c7.5 9.09961 20.5996 15.5996 31.2998 16.0996c1.2002 -12.3994 -3.7002 -24.7002 -11.0996 -33.7998zM127.8 272.3c6.7998 -0.5 26.2998 -2.5 38.7998 -21.0996
+c-1 -0.799805 -23.1992 -13.5 -22.8994 -40.2998c0.299805 -32 28 -42.6006 28.2998 -42.9004c-0.200195 -0.799805 -4.40039 -15.0996 -14.5 -29.9004c-8.90039 -13 -18 -25.6992 -32.5 -26c-14 -0.199219 -18.7002 8.40039 -34.7998 8.40039
+c-16 0 -21.2002 -8.09961 -34.5 -8.59961c-14 -0.5 -24.6006 13.7998 -33.5 26.7998c-18.2002 26.2998 -32.1006 74 -13.2998 106.3c9.09961 16.0996 25.6992 26.2002 43.5996 26.5c13.7998 0.299805 26.4004 -9.09961 34.7998 -9.09961
+c8.2002 0 23.1006 10.8994 40.5 9.89941zM228.2 308.5h73.2002c37.6992 0 64.0996 -26 64.0996 -64s-26.7998 -64.2998 -65.0996 -64.2998h-41.9004v-66.6006h-30.2998v194.9zM258.5 283v-77.4004h34.7998c26.4004 0 41.4004 14.2002 41.4004 38.8008
+c0 24.5996 -15 38.5996 -41.2998 38.5996h-34.9004zM420.7 112.1c-28.1006 0 -47.7002 16.8008 -47.7998 42c0 25 19 39.4004 54.0996 41.5l37.7998 2.30078v10.7998c0 15.8994 -10.3994 24.5 -28.8994 24.5c-15.2002 0 -26.3008 -7.90039 -28.6006 -19.9004h-27.2998
+c0.900391 25.2002 24.7002 43.6006 56.7998 43.6006c34.6006 0 57.1006 -18.2002 57.1006 -46.3008v-97h-28v23.4004h-0.600586c-8 -15.2998 -25.5996 -24.9004 -44.5996 -24.9004zM428.9 135.2c20.5 0 36 13 36 31.2002v11l-33.6006 -2.10059
+c-18.8994 -1.09961 -28.7998 -8.2002 -28.7998 -20.5c0 -11.7998 10.2998 -19.5996 26.4004 -19.5996zM531.4 60.5996c-2.30078 0 -9.80078 0.300781 -11.6006 0.700195v23.4004c1.90039 -0.200195 6.5 -0.5 8.90039 -0.5c13.3994 0 20.8994 5.7002 25.5 20.2998
+l2.7998 8.59961l-51.2002 141.9h31.6006l35.5996 -115.1h0.599609l35.6006 115.1h30.7998l-53.0996 -149c-12.1006 -34.0996 -26 -45.4004 -55.5 -45.4004z" />
+    <glyph glyph-name="cc-apple-pay" unicode="&#xf416;" horiz-adv-x="576" 
+d="M302.2 229.6c0 -17.1992 -10.5 -27.0996 -29 -27.0996h-24.2998v54.2002h24.3994c18.4004 0 28.9004 -9.7998 28.9004 -27.1006zM349.7 167c0 8.59961 6.89941 13.5 20.2002 14.4004l23.5 1.5v-7.7002c0 -12.7998 -10.8008 -21.9004 -25.2002 -21.9004
+c-11.2998 0 -18.5 5.40039 -18.5 13.7002zM576 369v-352c0 -26.5 -21.5 -48 -48 -48h-480c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h480c26.5 0 48 -21.5 48 -48zM127.8 250.8c8.40039 -0.700195 16.7998 4.2002 22.1006 10.4004
+c5.19922 6.39941 8.59961 15 7.69922 23.7002c-7.39941 -0.300781 -16.5996 -4.90039 -21.8994 -11.3008c-4.7998 -5.5 -8.90039 -14.3994 -7.90039 -22.7998zM188.4 176.3c-0.200195 0.200195 -19.6006 7.60059 -19.8008 30c-0.199219 18.7002 15.3008 27.7002 16 28.2002
+c-8.7998 13 -22.3994 14.4004 -27.0996 14.7002c-12.2002 0.700195 -22.5996 -6.90039 -28.4004 -6.90039c-5.89941 0 -14.6992 6.60059 -24.2998 6.40039c-12.5 -0.200195 -24.2002 -7.2998 -30.5 -18.6006c-13.0996 -22.5996 -3.39941 -56 9.2998 -74.3994
+c6.2002 -9.10059 13.7002 -19.1006 23.5 -18.7002c9.30078 0.400391 13 6 24.2002 6c11.2998 0 14.5 -6 24.2998 -5.90039c10.2002 0.200195 16.5 9.10059 22.8008 18.2002c6.89941 10.4004 9.7998 20.4004 10 21zM323.8 229.7c0 26.5996 -18.5 44.7998 -44.8994 44.7998
+h-51.2002v-136.4h21.2002v46.6006h29.2998c26.7998 0 45.5996 18.3994 45.5996 45zM413.8 206c0 19.7002 -15.7998 32.4004 -40 32.4004c-22.5 0 -39.0996 -12.9004 -39.7002 -30.5h19.1006c1.59961 8.39941 9.39941 13.8994 20 13.8994c13 0 20.2002 -6 20.2002 -17.2002
+v-7.5l-26.4004 -1.59961c-24.5996 -1.5 -37.9004 -11.5996 -37.9004 -29.0996c0 -17.7002 13.7002 -29.4004 33.4004 -29.4004c13.2998 0 25.5996 6.7002 31.2002 17.4004h0.399414v-16.4004h19.6006v68h0.0996094zM516 237.1h-21.5l-24.9004 -80.5996h-0.399414
+l-24.9004 80.5996h-22.2998l35.9004 -99.2998l-1.90039 -6c-3.2002 -10.2002 -8.5 -14.2002 -17.9004 -14.2002c-1.69922 0 -4.89941 0.200195 -6.19922 0.300781v-16.4004c1.19922 -0.400391 6.5 -0.5 8.09961 -0.5c20.7002 0 30.4004 7.90039 38.9004 31.7998z" />
+    <glyph glyph-name="fly" unicode="&#xf417;" horiz-adv-x="384" 
+d="M197.8 20.2002c12.9004 -11.7002 33.7002 -33.2998 33.2002 -50.7002c0 -0.799805 -0.0996094 -1.59961 -0.0996094 -2.5c-1.80078 -19.7998 -18.8008 -31.0996 -39.1006 -31c-25 0.0996094 -39.8994 16.7998 -38.7002 35.7998c1 16.2002 20.5 36.7002 32.4004 47.6006
+c2.2998 2.09961 2.7002 2.69922 5.59961 3.59961c3.40039 0 3.90039 -0.299805 6.7002 -2.7998zM331.9 380.7c23.8994 -40 27.7998 -73.2998 20.7998 -112.5c-15.2002 -69.9004 -103.601 -166.5 -155.9 -215.7c-1.7002 -1.59961 -1.39941 -1.40039 -3.5 -2.09961
+l-3.2998 0.0996094c-1.7002 0.599609 -4.5 3.5 -6.2002 5.09961c-58.7998 57.8008 -148.7 151.601 -155.8 233.801c-1.5 71.3994 29.2998 113.399 82.9004 141.3c9.89941 4.09961 37 17.2998 81.0996 17.2998c22 0.200195 51.0996 -4.5 76.5996 -15.2002
+c24.7002 -11.5 47 -26.3994 63.3008 -52.0996zM186.8 96.0996v325.7c-57.8994 -5.5 -72.7002 -89.2002 -69.2998 -136.7c4.09961 -58.2998 41.2998 -137.899 69.2998 -189zM328.7 268c15.7998 54.9004 -10.9004 134.7 -99.7002 153
+c38.2002 -25.5996 49.5996 -85.5 48 -131.4c-2 -58.5996 -39.4004 -140 -67.2002 -191.899c41.6006 42.2998 102.5 113.5 118.9 170.3z" />
+    <glyph glyph-name="node" unicode="&#xf419;" horiz-adv-x="640" 
+d="M316.3 -4c-2.09961 0 -4.2002 0.599609 -6.09961 1.59961l-19.2002 11.4004c-2.90039 1.59961 -1.5 2.2002 -0.5 2.5c3.7998 1.2998 4.59961 1.59961 8.7002 4c0.399414 0.200195 1 0.0996094 1.39941 -0.0996094l14.8008 -8.80078
+c0.5 -0.299805 1.2998 -0.299805 1.7998 0l57.7998 33.4004c0.5 0.299805 0.900391 0.900391 0.900391 1.59961v66.7002c0 0.700195 -0.300781 1.2998 -0.900391 1.60059l-57.7998 33.2998c-0.5 0.299805 -1.2002 0.299805 -1.7998 0l-57.8008 -33.2998
+c-0.599609 -0.300781 -0.899414 -1 -0.899414 -1.60059v-66.7002c0 -0.599609 0.399414 -1.19922 0.899414 -1.5l15.8008 -9.09961c8.59961 -4.2998 13.8994 0.799805 13.8994 5.7998v65.9004c0 0.899414 0.700195 1.7002 1.7002 1.7002h7.2998
+c0.900391 0 1.7002 -0.700195 1.7002 -1.7002v-65.9004c0 -11.5 -6.2002 -18 -17.0996 -18c-3.30078 0 -6 0 -13.3008 3.60059l-15.1992 8.69922c-3.7002 2.2002 -6.10059 6.2002 -6.10059 10.5v66.7002c0 4.2998 2.2998 8.40039 6.10059 10.5l57.7998 33.4004
+c3.7002 2.09961 8.5 2.09961 12.0996 0l57.7998 -33.4004c3.7002 -2.2002 6.10059 -6.2002 6.10059 -10.5v-66.7002c0 -4.2998 -2.2998 -8.39941 -6.10059 -10.5l-57.7998 -33.3994c-1.7002 -1.10059 -3.7998 -1.7002 -6 -1.7002zM363 61.7998
+c0 -12.5996 -10.5 -19.7998 -29 -19.7998c-25.2998 0 -30.5996 11.5996 -30.5996 21.2998c0 1 0.799805 1.7002 1.69922 1.7002h7.5c0.900391 0 1.60059 -0.599609 1.7002 -1.40039c1.10059 -7.59961 4.5 -11.3994 19.7998 -11.3994
+c12.2002 0 17.4004 2.7002 17.4004 9.2002c0 3.69922 -1.5 6.39941 -20.4004 8.2998c-15.7998 1.59961 -25.5996 5 -25.5996 17.7002c0 11.5996 9.7998 18.5996 26.2998 18.5996c18.5 0 27.6006 -6.40039 28.7998 -20.2002
+c0.100586 -0.5 -0.0996094 -0.899414 -0.399414 -1.2998c-0.299805 -0.299805 -0.700195 -0.5 -1.2002 -0.5h-7.5c-0.799805 0 -1.40039 0.5 -1.59961 1.2998c-1.80078 8 -6.2002 10.6006 -18.1006 10.6006c-13.2998 0 -14.7998 -4.60059 -14.7998 -8.10059
+c0 -4.2002 1.7998 -5.39941 19.7998 -7.7998c17.7998 -2.40039 26.2002 -5.7002 26.2002 -18.2002zM417.5 111.9c0 -6.10059 -5 -11.1006 -11.0996 -11.1006c-6.10059 0 -11.1006 5 -11.1006 11.1006c0 6.2998 5.2002 11.0996 11.1006 11.0996
+c6 0.0996094 11.0996 -4.7998 11.0996 -11.0996zM415.7 111.9c0 5.19922 -4.2002 9.2998 -9.40039 9.2998c-5.09961 0 -9.2998 -4.10059 -9.2998 -9.2998c0 -5.2002 4.2002 -9.40039 9.2998 -9.40039c5.2002 0.0996094 9.40039 4.2998 9.40039 9.40039zM411.2 105.7
+h-2.60059c-0.0996094 0.599609 -0.5 3.7998 -0.5 3.89941c-0.199219 0.700195 -0.399414 1.10059 -1.2998 1.10059h-2.2002v-5h-2.39941v12.5h4.2998c1.5 0 4.40039 0 4.40039 -3.2998c0 -2.30078 -1.5 -2.80078 -2.40039 -3.10059
+c1.7002 -0.0996094 1.7998 -1.2002 2.09961 -2.7998c0.100586 -1 0.300781 -2.7002 0.600586 -3.2998zM408.4 114.5c0 1.7002 -1.2002 1.7002 -1.80078 1.7002h-2v-3.5h1.90039c1.59961 0 1.90039 1.09961 1.90039 1.7998zM137.3 257l-0.200195 -95
+c0 -1.2998 -0.699219 -2.59961 -1.7998 -3.2002c-1.09961 -0.700195 -2.59961 -0.700195 -3.7002 0l-36.3994 20.9004c-2.2998 1.2998 -3.7002 3.7998 -3.7002 6.39941v44.4004c0 2.59961 -1.40039 5.09961 -3.7002 6.40039l-15.5 8.89941
+c-1.09961 0.700195 -2.39941 1 -3.7002 1c-1.2998 0 -2.5 -0.299805 -3.69922 -1l-15.5 -8.89941c-2.30078 -1.30078 -3.7002 -3.80078 -3.7002 -6.40039v-44.4004c0 -2.59961 -1.40039 -5 -3.7002 -6.39941l-36.4004 -20.9004
+c-1.19922 -0.700195 -2.59961 -0.700195 -3.69922 0c-1.10059 0.700195 -1.80078 1.90039 -1.80078 3.2002l-0.0996094 95c0 2.59961 1.40039 5.09961 3.7002 6.40039l61.2002 35.2998c1.09961 0.599609 2.19922 1 3.39941 1h0.600586
+c1.19922 -0.100586 2.39941 -0.400391 3.39941 -1l61.2998 -35.2998c2.30078 -1.30078 3.7002 -3.7002 3.7002 -6.40039zM472.5 360.7v-176.4c0 -2.59961 -1.40039 -5.09961 -3.7002 -6.39941l-61.2998 -35.4004c-2.2998 -1.2998 -5.09961 -1.2998 -7.40039 0
+l-61.2998 35.4004c-2.2998 1.2998 -3.7002 3.7998 -3.7002 6.39941v70.7998c0 2.60059 1.40039 5.10059 3.7002 6.40039l61.2998 35.4004c2.30078 1.2998 5.10059 1.2998 7.40039 0l15.2998 -8.80078c1.7002 -1 3.90039 0.300781 3.90039 2.2002v94
+c0 2.7998 3 4.60059 5.5 3.2002l36.5 -20.4004c2.2998 -1.19922 3.7998 -3.69922 3.7998 -6.39941zM426.5 231.8c0 0.700195 -0.400391 1.2998 -0.900391 1.60059l-21 12.1992c-0.599609 0.300781 -1.2998 0.300781 -1.89941 0l-21 -12.1992
+c-0.600586 -0.300781 -0.900391 -0.900391 -0.900391 -1.60059v-24.2998c0 -0.700195 0.400391 -1.2998 0.900391 -1.59961l21 -12.1006c0.599609 -0.299805 1.2998 -0.299805 1.7998 0l21 12.1006c0.599609 0.299805 0.900391 0.899414 0.900391 1.59961v24.2998h0.0996094
+zM636.3 232.5l-36.7002 -21.2998c-2.5 -1.40039 -5.59961 0.399414 -5.59961 3.2002v17.3994c0 1.2998 -0.799805 2.5 -1.90039 3.2002l-19.1992 11.0996c-1.10059 0.700195 -2.60059 0.700195 -3.7002 0l-19.2002 -11.0996
+c-1.2002 -0.700195 -1.90039 -1.90039 -1.90039 -3.2002v-22.2002c0 -1.2998 0.700195 -2.5 1.90039 -3.19922l61.7002 -35.4004c2.5 -1.40039 2.5 -5 0 -6.40039l-36.7998 -20.5c-2.30078 -1.2998 -5.10059 -1.2998 -7.30078 0l-60.8994 34.7002
+c-2.2998 1.2998 -3.7002 3.7002 -3.7002 6.40039v70.7998c0 2.59961 1.40039 5.09961 3.7002 6.40039l61.2998 35.3994c2.2998 1.2998 5.09961 1.2998 7.40039 0l60.8994 -35.3994c2.2998 -1.30078 3.7002 -3.80078 3.7002 -6.40039v-17.0996
+c0 -2.60059 -1.40039 -5.10059 -3.7002 -6.40039zM559 229l11.7998 6.7998c0.400391 0.299805 1 0.299805 1.40039 0l11.7998 -6.7998c0.400391 -0.200195 0.700195 -0.700195 0.700195 -1.2002v-13.5996c0 -0.5 -0.299805 -0.900391 -0.700195 -1.2002l-11.7998 -6.7998
+c-0.400391 -0.299805 -1 -0.299805 -1.40039 0l-11.7998 6.7998c-0.400391 0.200195 -0.700195 0.700195 -0.700195 1.2002v13.5996c0 0.5 0.299805 0.900391 0.700195 1.2002zM304.8 185.5c0 -0.599609 -0.0996094 -1.2002 -0.200195 -1.7002
+c-0.5 -2 -1.7998 -3.7002 -3.59961 -4.7002l-61 -35.1992c-2.2002 -1.30078 -5 -1.40039 -7.40039 0l-61.1992 35.1992c-2.10059 1.2002 -4 3.60059 -4 6.40039v70.4004c0 2.69922 1.59961 5.09961 3.89941 6.39941l61.1006 35.2002
+c2.39941 1.40039 5.2998 1.2002 7.39941 0l61.1006 -35.2002c2.2998 -1.2998 3.89941 -3.7998 3.89941 -6.39941v-70.4004zM230.5 310.4l-0.799805 -0.5h1.09961zM306.7 180.2l-0.400391 0.700195v-0.900391z" />
+    <glyph glyph-name="osi" unicode="&#xf41a;" horiz-adv-x="512" 
+d="M8 181.56c2.2998 135.801 97.3994 232.441 213.799 248.102c138.8 18.5996 255.601 -75.7998 278 -201.101c21.2998 -118.8 -44 -230 -151.6 -274c-9.2998 -3.7998 -14.4004 -1.69922 -18 7.7002c-17.7998 46.2998 -35.5996 92.6328 -53.3994 138.999
+c-3.09961 8.10059 -1 13.2002 7 16.7998c24.2002 11 39.2998 29.4004 43.2998 55.8008c0.469727 3.01562 0.850586 7.94043 0.850586 10.9922c0 36.2061 -29.2764 68.1074 -65.3506 71.207c-39 3.40039 -71.7998 -23.6992 -77.5 -59.6992
+c-5.19922 -33 11.1006 -63.7002 41.9004 -77.7002c9.59961 -4.40039 11.5 -8.60059 7.7998 -18.4004c-17.8994 -46.5996 -35.7998 -93.2324 -53.7002 -139.899c-2.59961 -6.90039 -8.2998 -9.30078 -15.5 -6.5c-52.5996 20.2998 -101.399 61 -130.8 119
+c-24.8994 49.1992 -25.2002 87.6992 -26.7998 108.699zM28.8994 183.461c0.399414 -6.59961 0.599609 -14.3008 1.2998 -22.1006c6.2998 -71.9004 49.5996 -143.5 131 -183.101c3.2002 -1.5 4.39941 -0.799805 5.59961 2.2998c14.9004 39.1006 29.9004 78.2012 45 117.302
+c1.2998 3.2998 0.600586 4.7998 -2.39941 6.69922c-31.6006 19.9004 -47.3008 48.5 -45.6006 86c1 21.6006 9.2998 40.5 23.7998 56.3008c30 32.6992 77 39.7998 115.5 17.5996c25.3174 -14.5977 45.8643 -50.1641 45.8643 -79.3877
+c0 -3.05078 -0.296875 -7.98438 -0.664062 -11.0127c-3.59961 -30.5996 -19.2998 -53.8994 -45.7002 -69.7998c-2.69922 -1.59961 -3.5 -2.89941 -2.2998 -6c15.2002 -39.2002 30.2666 -78.4336 45.2002 -117.7c1.2002 -3.09961 2.40039 -3.7998 5.59961 -2.2998
+c35.5 16.6006 65.2002 40.2998 88.1006 72c34.7998 48.2002 49.0996 101.9 42.2998 161c-13.7002 117.5 -119.4 214.8 -255.5 198c-106.1 -13 -195.3 -102.5 -197.1 -225.8z" />
+    <glyph glyph-name="react" unicode="&#xf41b;" horiz-adv-x="512" 
+d="M418.2 270.8c54.3994 -18.7002 93.7998 -48.0996 93.7998 -78.3994c0 -31.7002 -41.7998 -62.6006 -99.5 -81.7002c-3.09961 -1 -6.2002 -2 -9.40039 -2.90039c1.10059 -4.59961 2.10059 -9.09961 3 -13.5c11.4004 -57.5996 2.60059 -104.899 -24.3994 -120.5
+c-26.1006 -15.0996 -68.4004 -0.200195 -111.2 36.6006c-4.59961 4 -9.2002 8.09961 -13.5996 12.3994c-3.5 -3.39941 -7 -6.59961 -10.5 -9.7002c-44.2002 -38.6992 -89.6006 -54.6992 -116.601 -39.0996c-26.2002 15.0996 -34.3994 59.0996 -23.8994 114.6
+c1.19922 6.10059 2.5 12 4 18c-4.60059 1.30078 -9.10059 2.80078 -13.6006 4.30078c-55.5 19 -96.2998 50.2998 -96.2998 81.5c0 30.1992 38.2998 59.3994 91.7002 77.8994c5.89941 2.10059 12.2002 4.10059 18.5996 5.90039
+c-1.39941 5.59961 -2.59961 11.0996 -3.7002 16.7002c-11 56.3994 -3.19922 101.5 23 116.699c27.3008 15.9004 72.9004 -1.09961 118.4 -41.5c2.7998 -2.5 5.59961 -5.09961 8.2998 -7.69922c4 3.89941 8.2002 7.7998 12.5 11.5
+c43.4004 37.7998 86.2998 53.5 112.601 38.3994c27.2998 -15.7998 35.3994 -63.7002 23.0996 -123.3c-0.799805 -3.7002 -1.59961 -7.40039 -2.5 -11.0996c5.40039 -1.60059 10.7998 -3.30078 16.2002 -5.10059zM282.9 355.7c-4 -3.5 -7.80078 -7 -11.7002 -10.7002
+c15.3994 -16.7002 29.5996 -34.5 42.5996 -53.0996c22.6006 -2 45.1006 -5.60059 67.2998 -10.6006c0.900391 3.2998 1.60059 6.60059 2.30078 10c10.5996 51.5 4.09961 90.7002 -12.8008 100.4c-15.7998 9.09961 -50.5 -3.60059 -87.6992 -36zM167.2 140.5
+c-5 8.59961 -9.7002 17.2998 -14.2998 26.0996c-6.40039 -15.1992 -11.9004 -30.0996 -16.3008 -44.5c15.3008 -3.2998 30.8008 -5.7998 46.4004 -7.5c-5.5 8.5 -10.7002 17.2002 -15.7998 25.9004zM136.9 260.8c4.39941 -14.0996 9.69922 -28.7002 16 -43.5996
+c4.5 8.7998 9.2998 17.5 14.1992 26c4.90039 8.59961 10.1006 17.0996 15.4004 25.3994c-15.9004 -2 -31.2002 -4.59961 -45.5996 -7.7998zM164.3 191.9c6.7002 -13.8008 13.7998 -27.3008 21.5 -40.6006s15.9004 -26.2998 24.6006 -39
+c14.6992 -0.899414 29.8994 -1.39941 45.5996 -1.39941s31.2002 0.5 46.0996 1.59961c8.5 12.7998 16.6006 25.7002 24.2002 39c7.7002 13.4004 14.9004 27 21.6006 40.7998c-6.80078 13.7002 -14 27.2002 -21.7002 40.4004s-15.7998 26.0996 -24.2998 38.7002
+c-14.9004 1.09961 -30.3008 1.69922 -45.9004 1.69922s-30.9004 -0.599609 -45.9004 -1.69922c-8.59961 -12.7002 -16.7998 -25.6006 -24.3994 -38.9004c-7.60059 -13.2998 -14.7998 -26.7998 -21.4004 -40.5996zM344.9 140.7c-5 -8.60059 -10.1006 -17.2002 -15.5 -25.6006
+c15.7998 1.80078 31.5 4.5 47 8c-4.90039 15.1006 -10.5 29.8008 -16.9004 44.3008c-4.7002 -9 -9.5 -17.9004 -14.5996 -26.7002zM359.3 217.2c6.10059 14.2002 11.5 28.5996 16.1006 43.3994c-14.4004 3.30078 -29.8008 6 -45.9004 8
+c5.2998 -8.2998 10.4004 -16.6992 15.2998 -25.1992c5 -8.60059 9.7998 -17.4004 14.5 -26.2002zM256.2 329.7c-10 -10.9004 -20.1006 -22.9004 -29.9004 -35.7998c19.7998 0.899414 39.7002 0.899414 59.5 0c-9.2002 12.3994 -19.0996 24.3994 -29.5996 35.7998zM140.2 391
+c-15.7998 -9.09961 -22 -45.5996 -12.6006 -94c1.10059 -5.2002 2.2002 -10.4004 3.5 -15.5c22.2002 4.90039 44.6006 8.40039 67.2002 10.4004c13.1006 18.5996 27.4004 36.3994 42.9004 53.0996c-2.60059 2.40039 -5.10059 4.7998 -7.60059 7
+c-39.2998 34.7998 -76.5996 48.7998 -93.3994 39zM115.7 127.4c6.89941 22 15.2002 43.5996 24.7998 64.5c-9.5 20.5996 -17.7002 41.8994 -24.5 63.5996c-5.7998 -1.7002 -11.5996 -3.5 -17.2998 -5.5c-45.6006 -15.9004 -77.2002 -39.2998 -77.2002 -57.5996
+c1.90039 -12.1006 8.7002 -22.9004 18.7998 -29.9004c17.5 -13.9004 41.7002 -24.5 63 -31.2002c4.10059 -1.39941 8.2002 -2.7002 12.4004 -3.89941zM232.3 29.4004c3.2002 2.7998 6.40039 5.7998 9.60059 8.89941c-15.5 16.7998 -30 34.7002 -43.2002 53.4004
+c-22.9004 1.7002 -45.5 5 -67.9004 9.7998c-1.39941 -5.5 -2.59961 -11.0996 -3.7002 -16.7002c-9 -47.5 -2.39941 -82.7998 13.5 -92c11.4004 -4.5 24.2002 -4 35.3008 1.2998c20.7998 8.2002 39.8994 20.2002 56.3994 35.3008zM256.8 53.7002
+c10.5 11.5996 20.4004 23.7002 29.6006 36.3994c-10 -0.5 -20.1006 -0.699219 -30.4004 -0.699219c-10 0 -19.9004 0.199219 -29.5 0.599609c9.90039 -13.0996 20.0996 -25.2998 30.2998 -36.2998zM387.5 23.7002c3.2002 22.2002 2.40039 44.7002 -2.5 66.2998
+c-0.799805 4 -1.7002 8.09961 -2.7002 12.2002c-22.5 -5.10059 -45.2998 -8.60059 -68.2002 -10.5c-12.7998 -18.7998 -26.8994 -36.7002 -42.1992 -53.6006c4.2998 -4 8.5 -7.89941 12.6992 -11.5c36.6006 -31.3994 70.5 -43.3994 86.4004 -34.1992
+c9.59961 7.69922 15.5996 19.0996 16.5 31.2998zM405.7 131.2c49.8994 16.5 84.7998 41.7998 84.7998 61.3994c0 18.2002 -32.7002 42 -79.2998 58c-4.7998 1.60059 -9.7998 3.2002 -15 4.7002c-6.7998 -21.5 -14.9004 -42.5 -24.5 -62.8994
+c9.89941 -20.7002 18.5 -42 25.5 -63.8008c2.89941 0.800781 5.7002 1.7002 8.5 2.60059zM256 146.2c-25.2998 0 -45.7998 20.5 -45.7998 45.7998s20.5 45.7998 45.7998 45.7998s45.7998 -20.5 45.7998 -45.7998s-20.5 -45.7998 -45.7998 -45.7998z" />
+    <glyph glyph-name="autoprefixer" unicode="&#xf41c;" horiz-adv-x="640" 
+d="M318.4 432l164.1 -480h-77.5l-25.2002 81.4004h-119.5l-25.3994 -81.4004h-77.5zM278.1 90.0996h83.6006l-40.9004 130.4h-1.5zM640 43l-158.5 -9.5l-19.4004 56.5l167.9 -15.5996zM177.9 90l-19.4004 -56.4004l-158.5 9.40039l10 31.2998z" />
+    <glyph glyph-name="less" unicode="&#xf41d;" horiz-adv-x="640" 
+d="M612.7 229c0 -11 6.7998 -22.5996 27.2998 -23.2998v-27.2998c-20.5 -1 -27.2998 -12.6006 -27.2998 -23.6006c0 -20.3994 3.2002 -32 3.2002 -54.5996c0 -34.2002 -12.7002 -45.2002 -40.5 -45.2002h-20.5v25.2002h6.2998v0.5c13.5996 0 17.2998 4.7002 17.2998 22.5996
+c0 17.2998 -1.59961 32.6006 -1.59961 51.5c0 24.2002 7.7998 33.6006 23.5996 37.2998v1.60059c-15.7002 3.7002 -23.5996 13.0996 -23.5996 37.2998c0 18.9004 1.59961 35.2002 1.59961 51.5c0 17.4004 -3.09961 22.0996 -17.2998 22.0996h-6.2998v24.2002h20.5
+c27.8994 0 40.5 -11 40.5 -45.2002c0 -22 -3.2002 -34.0996 -3.2002 -54.5996zM507.1 197c20.5 -6.7998 43 -18.9004 43 -47.7998c0 -28.9004 -22.5996 -51 -64.5996 -51c-20 0 -44.0996 9 -59.9004 22.0996l21 30.5c14.2002 -11 27.4004 -16.2998 40.5 -16.2998
+c14.2002 0 20.5 5.2002 20.5 13.0996c0 10.5 -15.7998 15.8008 -32.0996 22.1006c-18.9004 7.2998 -41.5 20.5 -41.5 46.2002c0 28.8994 24.2002 49.3994 59.9004 49.3994c24.1992 0 42.0996 -10.5 55.1992 -20.5l-21 -27.7998c-11.5 8.40039 -22 13.0996 -33.5996 13.0996
+s-17.9004 -4.69922 -17.9004 -12.5996c0 -10.5 14.7002 -14.2002 30.5 -20.5zM148.2 137.6c1.59961 0 3.09961 0 6.2002 0.800781l5.2998 -34.2002c-5.7002 -2.10059 -13.6006 -3.7002 -23.6006 -3.7002c-32.0996 0 -43.0996 21 -43.0996 53.0996v150.801h-14.0996
+c-13.6006 0 -17.3008 -4.80078 -17.3008 -22.1006s1.60059 -32.5996 1.60059 -51.5c0 -24.2002 -7.7998 -33.5996 -23.6006 -37.2998v-1.59961c15.7002 -3.7002 23.6006 -13.1006 23.6006 -37.3008c0 -19.3994 -1.60059 -34.1992 -1.60059 -51.5
+c0 -17.2998 4.2002 -22.5996 17.3008 -22.5996h6.2998v-24.2002h-20.5c-27.9004 0 -40.5 11 -40.5 45.2002c0 22.5996 3.2002 34.2002 3.2002 53.5996c0 11 -6.80078 22.6006 -27.3008 23.1006v27.2998c20.5 1 27.3008 12.5996 27.3008 23.5996
+c0 19.4004 -3.2002 32 -3.2002 54.6006c0 34.2002 12.5996 45.2002 41 45.2002h74.5996v-178.2c0 -9.90039 4.7002 -13.1006 8.40039 -13.1006zM379.9 197c20.5 -6.7998 43.0996 -18.9004 43 -47.7998c0 -28.9004 -22.6006 -51 -64.6006 -51
+c-20 0 -44.0996 9 -59.8994 22.0996l20.5 30.5c14.1992 -11 27.3994 -16.2998 40.5 -16.2998c14.1992 0 20.5 5.2002 20.5 13.0996c0 10.5 -15.8008 15.8008 -32.1006 22.1006c-18.8994 7.2998 -41.5 20.5 -41.5 46.2002c0 28.8994 24.2002 49.3994 59.9004 49.3994
+c24.2002 0 42.0996 -10.5 55.2002 -20.5l-21 -27.7998c-11.5 8.40039 -22 13.0996 -33.6006 13.0996c-11.5996 0 -17.8994 -4.69922 -17.8994 -12.5996c0 -10.5 14.6992 -14.2002 31 -20.5zM224.9 265.8c44.0996 0 67.2998 -33.0996 66.6992 -75.7002
+c0 -8.39941 -1.09961 -15.6992 -1.59961 -19.3994h-95.2002c4.2002 -24.2002 20.5 -34.2002 41.5 -34.2002c11.6006 0 22.6006 3.2002 34.2002 10l15.7998 -27.7998c-16.2998 -11.1006 -37.2998 -17.9004 -56.2002 -17.9004c-45.0996 0 -79.2998 30.5 -79.2998 82.5
+c-1 50.4004 35.7002 82.5 74.1006 82.5zM194.9 199.6h56.7998c0 17.9004 -7.40039 31 -26.2998 31c-14.7002 0 -27.3008 -10 -30.5 -31z" />
+    <glyph glyph-name="sass" unicode="&#xf41e;" horiz-adv-x="640" 
+d="M301.84 69.0801c-0.299805 -0.599609 -0.599609 -1.08008 0 0zM550.97 156.08c57.9092 0.300781 90.5703 -37.0801 88.9707 -71.0801c-1.10059 -26.9004 -25.6904 -37.9004 -30.29 -38.7002c-3.30078 -0.599609 -5.10059 -0.700195 -5.60059 1.90039
+c-0.299805 1.7998 0.900391 2.7002 4.7998 5.09961c3.90039 2.40039 15.6006 10.5 17.7002 25c2.10059 14.5 -8.7998 49.2998 -64.4795 55.7998c-26 3 -46.3906 -0.599609 -62.0898 -7.19922c2.89941 -7.60059 5.09961 -15.5 5.39941 -23.4004
+c0.799805 -17.5 -11.29 -30.4004 -23.79 -39.5996c-5.48535 -3.98535 -15.1572 -8.95801 -21.5898 -11.1006c-5.2002 -2.2002 -12.2002 -4.5 -17.0996 -3.5c-10.9004 2.2002 -16.7002 11.7998 -9.30078 33.1006c4 11.5 15.5 29 34.0908 44.0996
+c-4.30078 8.7002 -8.99023 17.5996 -11.3906 25.7002c-2.18164 7.00781 -4.95898 18.5664 -6.2002 25.7998c0 0 -15.2998 -31.7197 -35.0898 -60.6201c-1.09961 -1.7002 -2.2998 -3.39941 -3.39941 -5c3.7998 -9 6.89941 -18.5996 7.2998 -28.2002
+c0.700195 -17.3994 -6.90039 -30.5996 -19.4004 -39.7998c-5.16211 -3.70605 -14.208 -8.45508 -20.1895 -10.5996c-3.90039 -1.7998 -12 -4.60059 -23.5 -5.40039c-6.29004 -0.5 -12.29 -0.0996094 -15.6904 2.5c-4.59961 3.40039 -5.2002 7.7998 -2.7998 13.7002
+c2 5 17.21 22.4004 30 37.5996c3.5 4.2002 6.90039 8.5 9.90039 12.5c-0.0498047 0.0449219 -0.09375 0.134766 -0.100586 0.200195c0 0 2.2998 3 6.10059 8.2002c-4.7002 10.0996 -10.6006 20.5 -13.4004 30c-2.18164 7.00781 -4.95898 18.5664 -6.2002 25.7998
+c0 0 -15.4902 -39.7002 -31.6895 -71.5c-12.4902 -24.5996 -20.79 -39.5 -24.5908 -46v-0.299805s-0.5 -0.900391 -1.5 -2.40039c-0.5 -0.799805 -0.699219 -1.19922 -0.699219 -1.19922v0.0996094c-4.20996 -6.2002 -13.6104 -18.2998 -23 -18.2998
+c-25.7002 0 -16.3008 52.2002 -16.3008 52.2002s-7.5 -19.3008 -16 -35.9004c-6.88965 -13.5996 -13.0898 -25 -26.8896 -25c-3.90039 0 -10.1904 0.0996094 -15.3896 5c-11.8008 11.2002 -20.9004 39.7002 -19.1006 61.7002c1.5 18.7998 4.40039 31.7998 8.40039 42.5996
+c-7.10059 -3.89941 -15.2002 -8.39941 -23.4902 -13.2998c-4.2998 -2.5 -8.59961 -5 -12.7998 -7.5c0.0996094 -0.299805 0.299805 -0.5 0.400391 -0.799805c10.5996 -20.4004 13.3896 -65.2002 -9.60059 -99.5s-65.7803 -55.2002 -107.57 -43.6006
+c-13.3896 3.80078 -33.79 31.6006 -16.29 70.4004c15.4902 34.2002 77.3809 66.5996 93.6709 74.7002c1.39941 0.799805 2.89941 1.59961 4.5 2.5c-32.4902 28.3994 -113.671 66.7998 -125.061 125.7c-3.2002 16.5996 4.58984 56.2998 53.2803 101.899
+c40.9902 38.2998 97.9697 67.7002 150.66 86.4004c88.4297 31.3994 181.949 12.8994 196.31 -43.5c14.1006 -55.5 -33.9902 -121.8 -95.7695 -145.601c-54.9902 -21.2998 -100.471 -17.8994 -119.17 -11.7998c-21.29 7 -33.79 21 -36.79 28.9004
+c-1.2002 3.09961 -3.30078 8.2998 0 10.0996c2 1.10059 2.7998 0.799805 8.09961 -5.09961c5.09961 -5.60059 25.4902 -20.6006 64.2803 -16.2998c101.77 11.3994 163.06 90.5 143.66 133c-13.4902 29.7998 -91.8408 43.1992 -189.841 -5.60059
+c-119.569 -59.5996 -126.069 -108.7 -127.069 -127.399c-2.7998 -51.3008 63.2793 -78.3008 99.0693 -116.5c0.5 -0.5 0.900391 -1 1.40039 -1.5c6.7002 3.69922 13.7998 7.59961 20.7002 11.3994c18 9.90039 35.0996 19.2002 43 23.5
+c12.5801 18.2998 38.1797 38.5 56.5801 38.5c29.4893 0 19.3896 -42.3994 19.3896 -42.3994s0.599609 2 1.40039 2c0.799805 0 4.09961 5.5 13.1992 2.19922c9.40039 -3.5 7.2002 -10 7.30078 -10.6992c0.0996094 -1.30078 -11 -38.9004 -15.7002 -63.1006
+c-2.2002 -11.5 -0.900391 -19.8994 -0.299805 -19.8994c0.899414 0 2.7998 2.89941 4.5 6.09961v0.0996094s1.2998 2.40039 3.5 6.7002c0 0.200195 -0.200195 -0.299805 -0.5 -0.799805c0.199219 0.400391 0.5 0.900391 0.899414 1.7002
+c2.60059 5 6.2002 12.3994 10.4004 21.5996c8.18945 18.1006 39.4795 87.7002 42.0801 95.4004c2.59961 7.7002 4 15.7002 5.2998 19.0996c1.2998 3.40039 12.4102 6 25.2998 5.90039c12.8906 -0.100586 14.1904 -5.60059 14.29 -6.7002
+c0.100586 -1.09961 -6.2002 -16.4004 -7.59961 -27.2002c-1.40039 -10.7998 -0.100586 -16.2002 1.09961 -25.2998c0.799805 -6 4.5 -13.5 8.90039 -22c13.2998 21.7998 36.79 63.5996 39.0898 75.2998c1.03613 5.38965 3.41016 13.9473 5.2998 19.1006
+c1.29004 3.39941 12.3896 6 25.29 5.89941c12.9004 -0.0996094 14.2002 -5.59961 14.2998 -6.7002c0.100586 -1.09961 -6.2002 -16.3994 -7.59961 -27.1992c-1.40039 -10.8008 -0.100586 -16.2002 1.09961 -25.3008c1 -7.7998 7.10059 -18.1992 13 -30.0996
+c15.1289 7.45215 41.0938 13.5 57.958 13.5h0.0419922zM121.79 11.3799c19.4004 21.0996 27.3896 47.9199 19.0996 78.3203c-1 -0.600586 -2 -1.10059 -2.89941 -1.7002c0 0 -0.400391 -0.200195 -1.2002 -0.700195c-4.7998 -2.89941 -8.7002 -5.2998 -11.4004 -6.89941
+c-11.7998 -7.40039 -29.5898 -19.4004 -43.3896 -32.4004c-22.6904 -21.4199 -27.3896 -51 -15.4902 -57.9199c11.0898 -6.40039 36.8906 1.2002 55.2803 21.2998zM256.15 102.78c4 9.7998 19.6992 53.2998 16.1992 59.2002c-2.59961 4.5 -13.6992 0.899414 -23.79 -10.4004
+c-6.2998 -7 -16.8994 -25 -21.8994 -40.0996c-9.90039 -30 -5.60059 -60.5 1.39941 -62.3008c8.2002 -2.09961 21.6904 37.9004 28.0908 53.6006zM367.15 49.7803c7.7998 4.7998 24.96 16.8994 25.0898 34.7998c0 0.599609 -0.100586 1.09961 -0.100586 1.59961
+c-3.98926 -5.19922 -7.68945 -9.89941 -10.8896 -13.8994c-5.5 -6.7998 -19.4004 -21.7002 -19.4004 -21.7002s-2 -1.90039 -1.09961 -2.40039c1.2002 -0.699219 3.7002 0.200195 6.40039 1.60059zM452.73 69.2803c9.68945 3.5 25.7998 11.8994 25.8994 34.3994
+c-0.0673828 3.06152 -0.918945 7.90039 -1.89941 10.8008c-10.4102 -9.2002 -16.4004 -18.8008 -19 -24.5c-6.7002 -14.6006 -7 -19.3008 -5 -20.7002z" />
+    <glyph glyph-name="vuejs" unicode="&#xf41f;" 
+d="M356.9 383.7h91.0996l-224 -383.7l-224 383.7h176l48 -88.6006l56 88.6006h76.9004zM55.7002 351.7l168.3 -288.2l168.2 288.2h-53.7998l-114.4 -198.2l-114.5 198.2h-53.7998z" />
+    <glyph glyph-name="angular" unicode="&#xf420;" 
+d="M185.7 179.9l38.0996 91.5996l38.1006 -91.5996h-76.2002zM223.8 416l207.8 -74.4004l-31.7998 -275.699l-176 -97.9004l-176 97.9004l-31.7998 275.699zM354 74.2002l-130.2 292.3l-130.1 -292.3h48.7002l26.1992 65.3994h110.601l26.2002 -65.3994h48.5996z" />
+    <glyph glyph-name="aviato" unicode="&#xf421;" horiz-adv-x="640" 
+d="M107.2 164.5l-19 41.7998h-52.1006l-19 -41.7998h-17.0996l62.2002 131.4l62.2002 -131.4h-17.2002zM62.2002 262.6l-19.6006 -42.5h39.2002zM174.9 160.2l-62.2002 131.399h17.0996l45.1006 -96l45.0996 96h17zM255.5 164.5v127.1h15.5v-127.1h-15.5zM464.6 280.1
+v-115.6h-17.2998v115.6h-41.2002v11.5h99.6006v-11.5h-41.1006zM640 229.2c0 -9.2002 -1.7002 -17.7998 -5.09961 -25.7998c-3.40039 -8 -8.2002 -15.1006 -14.2002 -21.1006s-13.1006 -10.7998 -21.1006 -14.2002c-8 -3.39941 -16.5996 -5.09961 -25.7998 -5.09961
+s-17.7998 1.7002 -25.7998 5.09961c-8 3.40039 -15.0996 8.2002 -21.0996 14.2002s-10.8008 13 -14.2002 21.1006c-3.40039 8 -5.10059 16.5996 -5.10059 25.7998s1.7002 17.7998 5.10059 25.7998c3.39941 8 8.2002 15.0996 14.2002 21.0996s13 8.40039 21.0996 11.9004
+c8 3.40039 16.5996 5.09961 25.7998 5.09961s17.7998 -1.69922 25.7998 -5.09961s15.1006 -5.7998 21.1006 -11.9004c6 -6 10.7002 -13.0996 14.2002 -21.0996c3.39941 -8 5.09961 -16.5996 5.09961 -25.7998zM624.5 229.2c0 7.2998 -1.2998 14 -3.90039 20.2998
+c-2.59961 6.2998 -6.19922 11.7002 -10.7998 16.2998c-4.59961 4.60059 -10 8.2002 -16.2002 10.9004c-6.19922 2.7002 -12.7998 4 -19.7998 4s-13.5996 -1.2998 -19.7998 -4s-11.5996 -6.2998 -16.2002 -10.9004c-4.59961 -4.59961 -8.2002 -10 -10.7998 -16.2998
+s-3.90039 -13.0996 -3.90039 -20.2998c0 -7.2998 1.30078 -14 3.90039 -20.2998c2.59961 -6.30078 6.2002 -11.7002 10.7998 -16.3008c4.60059 -4.59961 10 -8.19922 16.2002 -10.8994s12.7998 -4 19.7998 -4s13.6006 1.2998 19.7998 4
+c6.2002 2.7002 11.6006 6.2998 16.2002 10.8994c4.60059 4.60059 8.2002 10 10.7998 16.3008c2.60059 6.2998 3.90039 13.0996 3.90039 20.2998zM529.7 132.5c6 -0.900391 10.5 -6 10.7002 -12.2998c0 -6.7998 -5.60059 -12.4004 -12.4004 -12.4004
+s-12.4004 5.60059 -12.4004 12.4004c0 6.2002 4.60059 11.2998 10.5 12.2002v5.7998l-80.2998 -9v-5.40039c5.60059 -1.09961 9.90039 -6.09961 9.90039 -12.0996c0 -6.7998 -5.60059 -10.2002 -12.4004 -10.2002s-12.3994 3.40039 -12.3994 10.2002
+c0 5.89941 4.19922 11 9.89941 12.0996v4.90039l-28.3994 -3.2002v-23.7002h5.89941v-13.7998h-5.89941v6.59961h-5v-6.59961h-5.90039v13.7998h5.90039v23.2002l-38.3008 -4.2998c-8.09961 -11.5 -19 -13.6006 -19 -13.6006l0.100586 -6.69922l5.09961 -0.200195
+l0.100586 -12.1006h-4.10059l-0.0996094 5h-5.2002l-0.0996094 -5h-4.10059l0.100586 12.1006l5.09961 0.200195l0.0996094 6.69922s-10.8994 2.2002 -19 13.6006l-38.2998 4.2998v-23.2002h5.90039v-13.7998h-5.90039v6.59961h-5v-6.59961h-5.89941v13.9004h5.89941
+v23.6992l-28.3994 3.2002v-4.89941c5.59961 -1.10059 9.89941 -6.10059 9.89941 -12.1006c0 -6.7998 -5.59961 -10.2002 -12.3994 -10.2002c-6.80078 0 -12.4004 3.40039 -12.4004 10.2002c0 5.90039 4.2002 11 9.90039 12.1006v5.39941l-80.3008 9v-5.7998
+c5.90039 -0.900391 10.5 -6 10.5 -12.2002c0 -6.7998 -5.59961 -12.3994 -12.3994 -12.3994s-12.4004 5.59961 -12.4004 12.3994c0 6.2002 4.60059 11.2998 10.5 12.2002v6.2998l-88.8994 10l242.899 -13.5c-0.599609 2.2002 -1.09961 4.60059 -1.39941 7.2002
+c-0.300781 2.09961 -0.5 4.2002 -0.600586 6.5l-64.7998 8.09961l64.9004 -1.89941c0 0.399414 0 0.799805 0.0996094 1.09961c2.7998 17.2002 25.5 23.7002 25.5 23.7002l1.09961 26.4004h-23.5996l-19 -41.8008h-17.0996l62.1992 131.4l62.2002 -131.4h-17.0996
+l-19 41.8008h-23.7998l1.09961 -26.3008s22.7002 -6.5 25.5 -23.6992c0 -0.400391 0.0996094 -0.700195 0.0996094 -1.10059l64.9004 1.90039l-64.7998 -8.10059c-0.100586 -2.2998 -0.299805 -4.5 -0.600586 -6.5c-0.299805 -2.59961 -0.799805 -5 -1.39941 -7.19922
+l242.899 13.3994l-88.8994 -10v-6.2998zM328.9 220.1h17.8994l1.7002 40.3008l1.7002 -40.3008h17.8994l-19.5996 42.5z" />
+    <glyph glyph-name="ember" unicode="&#xf423;" horiz-adv-x="640" 
+d="M639.9 193.4c1.09961 -10.8008 -5.30078 -14.3008 -5.30078 -14.3008s-26.5996 -19.5996 -47 -13.6992c-20.3994 5.89941 -21.5 43.1992 -21.5 43.1992h-1.89941l-20.7002 -57.1992s-8.2998 -27.9004 -20.7002 -22.8008
+c-12.3994 5.10059 -12.0996 18.6006 -12.0996 18.6006s-19.2998 -21.2998 -54.7998 -18.6006c-31.1006 2.30078 -41.1006 26.7002 -41.1006 26.7002s-20.7998 -14.3994 -79.0996 -25.8994c-26.1006 -2.90039 -44.6006 12.8994 -44.6006 12.8994
+c-2.39941 -2.39941 -18 -10.2002 -18 -10.2002s-22.2998 -10.2998 -30.8994 5.30078c-8.60059 15.5996 -3 63.6992 -3 63.6992h-1.60059s-12.8994 -26.2998 -19.5996 -49.8994c-6.7002 -23.6006 -15 -21.2002 -15 -21.2002s-15.2998 -1.40039 -18.7998 11.4004
+c-3.5 12.8994 5.59961 59.6992 5.59961 59.6992l-1.2998 -0.299805s-0.799805 1.40039 -12.5996 -23.5996c-20.1006 -48.9004 -24.9004 -50 -36.5 -47.9004c-11.6006 2.10059 -12.1006 16.7002 -12.1006 16.7002l-15.8994 -8.7998s-38.6006 -16.6006 -58.8008 -1.2998
+c-13.3994 10.1992 -18 22.1992 -19.5996 29.6992c0 0 -17 1.80078 -28.0996 6.10059c-11.1006 4.2998 0.0996094 18.2998 0.0996094 18.2998s3.5 5.2998 10 0s18.7998 -2.90039 18.7998 -2.90039c1 8.5 2.5 19.7002 7.7998 31.5c11 24.7002 27.6006 33 41.3008 33.3008
+c13.6992 0.199219 23.3994 -3.5 31.6992 -15.3008c18.6006 -45.8994 -49.3994 -69.1992 -49.3994 -69.1992s-1.7998 -12.1006 16.7002 -11.8008c18.5996 0.200195 46.7998 20.4004 46.7998 20.4004c1.2998 15.4004 12.0996 63.5 15 70.7002
+c2.89941 7.2002 14.2002 5.89941 14.2002 5.89941s8.89941 1.90039 10.5 -7.5c1.69922 -9.39941 -6.40039 -47.5996 -6.40039 -47.5996l1.2998 -1.59961c0.799805 3.69922 20.4004 36.5 20.4004 36.5s11.2998 19.5996 28.5 18.7998s-0.799805 -53.5 -0.799805 -53.5
+l1.2998 -1.60059l1.2998 2.40039c2.2002 5.90039 27.7002 44.5996 27.7002 44.5996s9.59961 11.3008 18.5 8.60059c8.7998 -2.60059 9.39941 -6.7002 9.89941 -14.2002s-7 -52.0996 -7 -52.0996s-4.2998 -29.2002 5.40039 -28.7002s20.2002 10.7002 20.2002 10.7002
+s7.5 57.5996 12.5996 105.1c5.10059 47.5 27.1006 79.5 27.1006 79.5s6.5 10 23.5 16.7002c11.1992 4 23.3994 1.2998 29.1992 -23.1006c9.5 -41 -23.2998 -87.8994 -36.8994 -105.199c5.89941 5.7998 15.7998 12.0996 27.2002 5.2998
+c40.2998 -25.2998 7.2998 -80.9004 7.2998 -80.9004c11.7998 3.7998 33 18 33 18s0.5 6.10059 0.700195 7.5c7.19922 41.2998 32 56.2002 36.5996 59.7002c4.7998 3.59961 47.0996 19.7998 49 -24s-52.9004 -59.0996 -52.9004 -59.0996s4.80078 -12.6006 25 -9.40039
+c20.2002 3.2002 43.3008 22.7998 43.3008 22.7998c0.799805 18 12.5996 61 15 67.2002c2.39941 6.2002 17.1992 6.5 18.7998 3c2.2002 -7 0.299805 -37.5996 0.299805 -37.5996l1.59961 0.5c5.90039 17.5 18.3008 31.1992 18.3008 31.1992s9.89941 9.7002 18 7.30078
+c8.09961 -2.30078 5.09961 -30.4004 5.09961 -30.4004s-4.2998 -30.7002 9.40039 -32c13.6992 -1.40039 29.2998 10.7002 29.2998 10.7002s9.59961 3.89941 10.7002 -6.7998zM61.9004 188.1c0 0 6.19922 -1.89941 19.8994 7.60059
+c13.7002 9.39941 16.4004 24.3994 9.10059 31.3994c-7.2002 6.90039 -28.2002 -7 -29 -39zM334.7 311.9c0 0 -15.9004 -54.5 -16.4004 -70.7002c0 0 44.5 72 40 96.2002c-4.5 24.1992 -23.5996 -25.5 -23.5996 -25.5zM357.5 173.5
+c12.5996 33.0996 -3.59961 45.5 -3.59961 45.5s-23.4004 12.9004 -33.3008 -20.2002c-9.89941 -33.0996 -6.39941 -44.8994 -6.39941 -44.8994s30.7002 -13.4004 43.2998 19.5996zM442.1 188.1c0 0 15.7002 -1.09961 26.4004 14.2002s1.2998 25.5 1.2998 25.5
+s-8.59961 11.1006 -19.5996 -9.09961c-11.1006 -20.1006 -8.10059 -30.6006 -8.10059 -30.6006z" />
+    <glyph glyph-name="font-awesome-flag" unicode="&#xf425;" 
+d="M444.373 88.5762c0 -7.16797 -6.14453 -10.2402 -13.3125 -13.3125c-28.6719 -12.2881 -59.3916 -23.5518 -92.1592 -23.5518c-46.0801 0 -67.584 28.6719 -122.88 28.6719c-39.9365 0 -81.9209 -14.3359 -115.713 -29.6953
+c-2.04785 -1.02441 -4.0957 -1.02441 -6.14355 -2.04883v-77.8232c0 -21.4053 -16.1221 -34.8164 -33.792 -34.8164c-19.4561 0 -34.8164 15.3604 -34.8164 34.8164v374.783c-13.3115 10.2402 -22.5273 26.624 -22.5273 45.0566c0 31.7441 25.5996 57.3438 57.3438 57.3438
+s57.3438 -25.5996 57.3438 -57.3438c0 -18.4326 -8.19141 -34.8164 -22.5273 -45.0566v-31.7432c4.12402 1.37402 58.7676 28.6719 114.688 28.6719c65.2705 0 97.6758 -27.6484 126.976 -27.6484c38.9121 0 81.9209 27.6484 92.1602 27.6484
+c8.19238 0 15.3604 -6.14453 15.3604 -13.3125v-240.64z" />
+    <glyph glyph-name="gitter" unicode="&#xf426;" horiz-adv-x="384" 
+d="M66.4004 125.5h-50.4004v322.5h50.4004v-322.5zM166.9 371.9v-435.9h-50.4004v435.9h50.4004zM267.5 371.9v-435.9h-50.4004v435.9h50.4004zM368 372v-247h-50.4004v247h50.4004z" />
+    <glyph glyph-name="hooli" unicode="&#xf427;" horiz-adv-x="640" 
+d="M144.5 96v16c12.2998 -6.59961 25.0996 -12.2002 38.2998 -16.7998zM202.2 101.3c29.5 -10.7002 55.3994 -13.5 75.2998 -13.2998c-24.7998 -7 -58.2002 -5.2998 -94.7002 7.2002l19.4004 0.799805v5.2998zM611.1 216.5c-16 0 -28.8994 13 -28.8994 28.9004
+c0 15.8994 13 24.5 28.8994 24.5c16 0 28.9004 -8.5 28.9004 -24.5s-13 -28.9004 -28.9004 -28.9004zM582.1 96v110.5h57.9004v-110.5h-57.9004zM508.4 96v168l57.8994 27.2998v-195.3h-57.8994zM477.4 215.4c18.0996 -18.1006 16.6992 -33.8008 16.7998 -52.6006
+c0 -18.7002 1.39941 -34.2998 -16.7998 -52.5c-18.1006 -18.2002 -50.4004 -17.0996 -50.4004 -17.0996s-32.2002 -1.10059 -50.4004 17.0996c-18.1992 18.2002 -16.7998 33.7998 -16.7998 52.5s-1.39941 34.4004 16.7998 52.6006
+c18.1006 18.1992 50.4004 17.0996 50.4004 17.0996s32.2002 1.09961 50.4004 -17.0996zM437.6 143.5v40.4004c0 8.7998 -7.2998 10.8994 -10.6992 10.8994c-3.40039 0 -10.7002 -2.2002 -10.7002 -10.8994v-40.4004c0 -3.59961 1.7998 -12.5 10.7002 -12.5
+c8.89941 0 10.6992 8.90039 10.6992 12.5zM331.4 215.4c18.1992 -18.1006 16.6992 -33.8008 16.6992 -52.3008c0 -18.6992 1.5 -34.2998 -16.6992 -52.5c-18.1006 -18.1992 -50.4004 -17.0996 -50.4004 -17.0996s-32.2002 -1.09961 -50.4004 17.0996
+c-18.1992 18.2002 -16.7998 33.8008 -16.7998 52.5c0 15.6006 -0.899414 29.1006 9.2998 43.7002c-16 11.7998 -58 37.4004 -99.8994 58.2998v-54.2998c8 13.7002 22.7002 22 38.5 21.9004c27.2002 0 40.5996 -18.7002 40.5996 -37.4004v-93.8994
+c-20.3994 7.5 -39.7002 17.3994 -57.7002 29.5996v48.7002c0 8.09961 -1.5 15 -10.5996 15s-10.7998 -11.2998 -10.7998 -18.2002v-29.7998l-4.5 3.59961c-22.9004 18.9004 -40.2998 35.6006 -53.4004 50.2998v-31c11 -9.7998 23.6006 -20.1992 38.4004 -31.3994
+c6.39941 -4.90039 12.8994 -9.40039 19.3994 -13.6006v-28.5996h-57.8994v73.7002c-86.7002 78 -61.7998 110.8 -61.7998 110.8c8.2998 18.2998 42.8994 22.2002 97.2998 0.0996094l22.5 10.6006v-20.7002c29.5996 -14.5996 63.8994 -31.5 102.1 -61.0996
+c1.60059 2.09961 3.40039 4.09961 5.2998 6c18.2002 18.1992 50.4004 17.0996 50.4004 17.0996s32.2002 1.09961 50.4004 -17.0996zM65.2002 264l29.2002 13.7002c-26.9004 10.0996 -50.9004 13.5 -64.4004 2.09961c-3.7002 -3.09961 -13.5 -24.5996 35.2002 -79.0996
+v63.2998zM291.7 143.5v40.4004c0 8.7998 -7.2998 10.8994 -10.7002 10.8994s-10.7002 -2.2002 -10.7002 -10.8994v-40.4004c0 -3.59961 1.7998 -12.5 10.7002 -12.5s10.7002 8.90039 10.7002 12.5z" />
+    <glyph glyph-name="strava" unicode="&#xf428;" horiz-adv-x="384" 
+d="M158.4 448l150.199 -292h-88.5l-61.6992 116.1l-62.2002 -116.1h-89.2002zM308.6 156h67.6006l-111.5 -220l-112.2 220h67.5996l44.6006 -88.2002z" />
+    <glyph glyph-name="stripe" unicode="&#xf429;" horiz-adv-x="640" 
+d="M165 303.3l0.0996094 -38.5h33.7002v-37.7998h-33.7002v-63.2002c0 -26.2002 28 -18 33.7002 -15.7002v-33.7998c-5.89941 -3.2002 -16.5996 -5.89941 -31.2002 -5.89941c-26.2998 0 -46.0996 17 -46.0996 43.2998l0.200195 142.399zM254.1 251.7
+c10.4004 19.0996 31.1006 15.2002 37.1006 13.0996v-40.7998c-5.7002 1.7998 -23.4004 4.5 -33.9004 -9.2998v-103.101h-44.2998v153.2h38.4004zM346.4 324v-36.2002l-44.6006 -9.5v36.2002zM44.9004 219.7c0 -20 67.8994 -10.5 67.8994 -63.4004
+c0 -32 -25.3994 -47.7998 -62.2998 -47.7998c-15.2998 0 -32 3 -48.5 10.0996v40c14.9004 -8.09961 33.9004 -14.1992 48.5996 -14.1992c9.90039 0 17 2.69922 17 10.8994c0 21.2002 -67.5 13.2002 -67.5 62.4004c0 31.3994 24 50.2002 60 50.2002
+c14.7002 0 29.4004 -2.30078 44.1006 -8.10059v-41.7998c-13.5 7.2998 -30.7002 11.4004 -44.2002 11.4004c-9.2998 -0.100586 -15.0996 -2.80078 -15.0996 -9.7002zM640 186.4c0 -4.30078 -0.400391 -13.6006 -0.599609 -15.9004h-86.9004
+c2 -20.7998 17.2002 -26.9004 34.5 -26.9004c17.5996 0 31.5 3.7002 43.5996 9.80078v-33.4004c-12.0996 -6.7002 -28 -11.5 -49.1992 -11.5c-43.2002 0 -73.5 24.7002 -73.5 78.2002c0 45.2002 25.6992 81.0996 67.8994 81.0996s64.2002 -35.8994 64.2002 -81.3994z
+M552.1 203.2h45.9004c0 20 -11.5996 28.3994 -22.5 28.3994c-11.0996 0 -23.4004 -8.39941 -23.4004 -28.3994zM439.2 267.8c31.2002 0 60.5996 -28.0996 60.5 -79.7002c0 -56.3994 -29 -79.5996 -60.7998 -79.5996c-15.5 0 -25 6.5 -31.4004 11.2002l-0.0996094 -50.2002
+l-44.4004 -9.40039v204.801h39.0996l2.30078 -11c6.19922 5.69922 17.3994 13.8994 34.7998 13.8994zM428.6 145.3c16.5 0 27.5 17.9004 27.4004 41.7998c0 23.2002 -11.2002 41.4004 -27.4004 41.4004c-10.1992 0 -16.5996 -3.7002 -21.1992 -8.7998l0.299805 -66
+c4.2998 -4.60059 10.5 -8.40039 20.8994 -8.40039zM301.9 111.6v153.2h44.5996v-153.2h-44.5996z" />
+    <glyph glyph-name="stripe-s" unicode="&#xf42a;" horiz-adv-x="384" 
+d="M155.3 293.4c0 -64.2002 218 -33.7002 218 -203.9c0 -102.6 -81.7002 -153.6 -200.3 -153.6c-44.8916 0.101562 -114.78 14.6172 -156 32.3994v128.5c47.9004 -26 108.9 -45.5 156.1 -45.5c31.8008 0 54.7002 8.5 54.7002 34.9004c0 68.0996 -216.8 42.5 -216.8 200.399
+c0 101 77.0996 161.4 192.8 161.4c47.2998 0 94.5 -7.2002 141.8 -26.0996v-134.301c-43.3994 23.4004 -98.5 36.7002 -141.899 36.7002c-29.7998 0 -48.4004 -8.59961 -48.4004 -30.8994z" />
+    <glyph glyph-name="typo3" unicode="&#xf42b;" 
+d="M178.7 369.6c0 -66.3994 83.3994 -264.899 140.6 -264.899c6.90039 0 11.5 0 18.5 2.2998c-49.3994 -79.5 -110.399 -139 -146.7 -139c-77.2998 0 -184.1 234 -184.1 337.5c0 16.2998 3.90039 29.4004 9.2998 37.0996c27 32.4004 106.8 57.9004 176.3 66.4004
+c-8.5 -7 -13.8994 -14.7002 -13.8994 -39.4004zM301.5 416c71.7998 0 138.8 -11.5996 138.8 -52.5c0 -82.5996 -52.5 -182.3 -78.7998 -182.3c-47.9004 0 -101.7 132.1 -101.7 198.5c0 30.8994 11.6006 36.2998 41.7002 36.2998z" />
+    <glyph glyph-name="amazon-pay" unicode="&#xf42c;" horiz-adv-x="640" 
+d="M14 122.7c2.2998 4.2002 5.2002 4.89941 9.7002 2.5c10.3994 -5.60059 20.5996 -11.4004 31.2002 -16.7002c33.6992 -16.8047 90.7744 -37.5469 127.399 -46.2998c17.2734 -4.16797 45.5869 -9.4541 63.2002 -11.7998c22.083 -2.96875 58.0898 -5.37793 80.3721 -5.37793
+c4.03809 0 10.5908 0.0800781 14.6279 0.177734c17.4004 0.399414 34.7998 1.7998 52.0996 3.7998c46.7393 5.44824 119.897 24.623 163.301 42.7998c2.89941 1.2002 5.89941 2 9.09961 1.2002c6.7002 -1.7998 9 -9 4.09961 -13.9004
+c-2.47168 -2.27246 -6.77246 -5.58789 -9.59961 -7.39941c-30.7002 -21.1006 -64.2002 -36.4004 -99.5996 -47.9004c-20.3311 -6.55176 -53.9756 -14.4365 -75.1006 -17.5996c-14.6006 -2.23633 -38.4346 -4.38672 -53.2002 -4.7998
+c-0.694336 -0.0419922 -1.81445 -0.176758 -2.5 -0.300781h-21.0996c-0.685547 0.124023 -1.80469 0.258789 -2.5 0.300781c-3.59961 0.199219 -7.2002 0.299805 -10.7002 0.399414c-13.9971 0.634766 -36.5762 3.00879 -50.3994 5.2998
+c-22.7275 3.7041 -58.7471 13.0674 -80.4004 20.9004c-44.8652 16.1797 -110.094 55.1562 -145.6 87c-1.80078 1.59961 -3 3.7998 -4.40039 5.7002v2zM172 382.9c2.7998 0 5.5 0 8.2998 -0.100586c3.2998 -0.5 6.60059 -0.799805 9.7998 -1.5
+c21.3008 -4.39941 35.4004 -17.2998 43.9004 -36.8994c6.90039 -15.9004 8.59961 -32.7002 8.09961 -49.8008c-0.399414 -15.3994 -3.2998 -30.1992 -10.2998 -44.0996c-9.2002 -18.4004 -23.3994 -30.9004 -43.7998 -34.9004c-22.5 -4.39941 -43.0996 0.5 -61 15.4004
+c-0.5 0.5 -1.09961 1 -2.2002 1.90039v-72.4004c0 -1 0 -2 -0.0996094 -3c-0.299805 -3 -2.10059 -5 -5 -5c-7 -0.0996094 -14.1006 -0.0996094 -21.1006 0c-2.89941 0.0996094 -4.69922 2 -4.89941 5c-0.100586 1 -0.100586 2 -0.100586 3v209.3
+c0 6.90039 1.30078 8.2002 8.2002 8.2002h11.5c4.60059 0 6.90039 -2 7.60059 -6.59961c0.5 -2.7002 0.899414 -5.5 1.2998 -8.2002c0.0439453 -0.405273 0.222656 -1.0332 0.399414 -1.40039c2.5 1.90039 4.7002 3.7002 7.10059 5.40039
+c9.39941 6.90625 26.4238 13.6709 38 15.0996zM124.6 341c0.100586 -14.0996 0 -28 0 -42.0996c0 -14.1006 0.100586 -28.1006 0 -42.2002c-0.00488281 -0.0703125 -0.00878906 -0.183594 -0.00878906 -0.253906c0 -1.10547 0.765625 -2.46973 1.70898 -3.0459
+c11.2002 -7.90039 23.4004 -13.3008 37.4004 -13.9004c20.2002 -0.900391 35.7998 7.2002 42.5996 28.5c3.2002 10 4 20.2002 4 30.5996c0 11.2002 -1 22.3008 -4.89941 33c-6.40039 17.5 -18.6006 24.8008 -33.5 25.9004
+c-16.8008 1.2998 -31.9004 -3.7002 -45.6006 -13.2002c-0.945312 -0.556641 -1.71289 -1.90039 -1.71289 -2.99805c0 -0.0830078 0.00585938 -0.21875 0.0126953 -0.301758zM330.3 382.9c4 0 8 0 11.9004 0.0996094c3.59961 -0.5 7.2002 -0.799805 10.7998 -1.2998
+c7.7002 -1.10059 15.0996 -3.10059 21.7998 -7.10059c11.6006 -6.89941 17.1006 -17.5 19 -30.3994c0.5 -3.29297 0.905273 -8.66895 0.905273 -12c0 -0.248047 -0.00195312 -0.651367 -0.00488281 -0.900391v-106
+c0.00195312 -0.128906 0.00390625 -0.336914 0.00390625 -0.46582c0 -0.645508 -0.046875 -1.69141 -0.104492 -2.33398c-0.0742188 -2.57422 -2.22461 -4.67969 -4.7998 -4.7002c-5.39941 -0.0996094 -10.8994 -0.0996094 -16.2998 0
+c-2.90039 0.100586 -4.7998 2.10059 -5.40039 5.2002c-0.699219 3.59961 -1.19922 7.2002 -1.7998 11c-0.481445 -0.245117 -1.19824 -0.737305 -1.59961 -1.09961c-11.7998 -9.7002 -25.2002 -16.1006 -40.2998 -18.4004c-13.1006 -2 -26 -1.2002 -37.9004 5.40039
+c-12.4004 6.89941 -19.4004 17.6992 -21.4004 31.6992c-1.5 10.5 -0.799805 20.9004 3.90039 30.7002c6.09961 12.6006 16.5 20.4004 29.4004 24.9004c10.7998 3.7998 22 4.5 33.2998 3.89941c8.95312 -0.556641 23.2891 -2.75195 32 -4.89941
+c0.399414 -0.100586 0.799805 0 1.2998 -0.100586c0.0898438 0.381836 0.179688 1.00879 0.200195 1.40039c-0.100586 8.2998 0 16.5996 -0.299805 24.9004c-0.200195 5.89941 -1.60059 11.5996 -5.30078 16.3994c-4.19922 5.5 -10.2998 7.40039 -16.7998 8.40039
+c-12.5 1.89941 -24.8994 0.899414 -37.2002 -1.40039c-7.89941 -1.5 -15.6992 -3.7002 -23.5 -5.7002c-4.69922 -1.19922 -6.69922 0.100586 -6.7998 4.90039c-0.0996094 3.2998 0.100586 6.59961 0 9.90039c-0.0996094 3.89941 1.7002 6.5 5.2998 7.69922
+c5.90039 2 11.8008 4.2002 17.9004 5.80078c7.86426 1.92188 20.8115 3.75879 28.9004 4.09961c0.899414 0.0996094 1.89941 0.299805 2.89941 0.400391zM365.3 255.2c-0.0996094 4.7002 0.100586 9.2998 0.100586 14.0996s-0.100586 9.5 0 14.2998
+c0 1.60059 -0.5 2.40039 -2.10059 2.60059c-8.39941 1.09961 -16.5996 2.7002 -25 3.39941c-1.95117 0.227539 -5.12891 0.412109 -7.09375 0.412109c-4.99316 0 -12.9258 -1.16992 -17.7061 -2.61133c-8 -2.60059 -13.9004 -7.30078 -16.4004 -15.6006
+c-0.779297 -2.57422 -1.41211 -6.84766 -1.41211 -9.53809c0 -2.78613 0.677734 -7.2041 1.5127 -9.86133c1.55762 -5.40918 7.11328 -11.3672 12.3994 -13.3008c5.40039 -2.19922 11.1006 -2.39941 16.8008 -1.7998c13.8994 1.40039 26.1992 6.7998 37.3994 14.9004
+c0.832031 0.543945 1.50684 1.79199 1.50684 2.78613c0 0.0595703 -0.00292969 0.155273 -0.00683594 0.213867zM625.2 125.8v-17.2998c-0.700195 -3.59961 -1.2998 -7.2998 -2.10059 -10.9004c-4.39941 -20.2998 -11.8994 -39.1992 -24.6992 -55.5996
+c-3.27148 -3.9209 -8.96094 -9.92383 -12.7002 -13.4004c-1.1416 -1.04102 -3.29199 -2.16113 -4.7998 -2.5c-2.90039 -0.699219 -4.60059 1.2002 -4.10059 4.10059c0.201172 0.852539 0.649414 2.19629 1 3c5.7998 14.7998 11.7002 29.7002 15.7998 45.0996
+c2.10059 7.60059 3.90039 15.2998 3.5 23.2998c-0.199219 5.2002 -2.5 9 -7.59961 10.4004c-3.89746 1.15332 -10.3486 2.36328 -14.4004 2.7002c-11.3994 0.899414 -22.8994 0.200195 -34.2998 -0.900391c-7.7998 -0.799805 -15.5 -1.7002 -23.2998 -2.5
+c-0.504883 -0.0576172 -1.32617 -0.103516 -1.83398 -0.103516c-0.100586 0 -0.264648 0.000976562 -0.366211 0.00390625c-1.5 -0.100586 -3.2002 0.299805 -3.59961 1.7998c-0.111328 0.383789 -0.201172 1.01855 -0.201172 1.41797
+c0 0.764648 0.314453 1.92188 0.701172 2.58203c0.838867 1.1582 2.49609 2.72656 3.7002 3.5c12.0996 8.2998 25.6992 12.9004 40 15.5996c7.29883 1.34375 19.2461 2.43457 26.668 2.43457c3.46484 0 9.0791 -0.239258 12.5312 -0.53418
+c5.92773 -0.371094 15.335 -2.11816 21 -3.90039c4.30078 -1.39941 8.10059 -3.2998 9.10059 -8.2998zM493.1 249c0.300781 -0.700195 0.501953 -1.2998 0.902344 -2.40039c2.59961 7.7002 5.2002 15 7.7002 22.2002l34.7998 100
+c0.5 1.40039 1.09961 2.7002 1.59961 4.10059c0.932617 2.87988 4.14648 5.21777 7.17383 5.21777c0.145508 0 0.381836 -0.0078125 0.526367 -0.0185547c6.60059 0 13.2998 0.100586 19.9004 0c2.7998 0 4.09961 -1.59961 3.7002 -4.39941
+c-0.277344 -1.56641 -0.994141 -4.03027 -1.60059 -5.5c-23.3662 -59.9336 -46.8994 -119.801 -70.5996 -179.601c-2.1416 -5.27734 -6.2627 -13.5205 -9.2002 -18.3994c-8.7998 -14.9004 -22.4004 -21.7998 -39.5 -21.4004c-4.70801 0.18457 -12.2793 1.08008 -16.9004 2
+c-5.39941 0.900391 -7.2998 3.40039 -7.39941 8.90039c-0.100586 3.2666 -0.100586 6.56641 0 9.89941c0.0996094 3.5 1.7998 5 5.2002 4.80078c2.5 -0.200195 5 -0.800781 7.5 -1c1.30664 -0.148438 3.43359 -0.268555 4.74902 -0.268555
+c2.98828 0 7.75977 0.612305 10.6504 1.36816c7.2002 1.90039 12.2002 6.7998 15.2002 13.2998c3.40039 7.2998 6 15 9.2998 22.2998c1.90039 4.2002 1.5 7.7002 -0.200195 11.8008c-19.7998 48.5 -39.5 97 -59.1006 145.5
+c-0.649414 1.64453 -1.50098 4.37695 -1.90039 6.09961c-0.5 2.5 0.700195 4.5 3.2002 4.5c7.7002 0.0996094 15.2998 0 22.9004 -0.0996094c3.2002 0 5.2998 -1.90039 6.39941 -4.80078c2.10059 -5.59961 4.30078 -11.1992 6.30078 -16.8994
+c12.8994 -35.7666 25.7988 -71.5 38.6982 -107.2z" />
+    <glyph glyph-name="cc-amazon-pay" unicode="&#xf42d;" horiz-adv-x="576" 
+d="M124.7 246.2c0.0996094 11.7998 0 23.5 0 35.2998v35.2998c0 1.2998 0.399414 2 1.39941 2.7002c11.5 8 24.1006 12.0996 38.2002 11.0996c12.5 -0.899414 22.7002 -7 28.1006 -21.6992c3.2998 -8.90039 4.09961 -18.2002 4.09961 -27.7002
+c0 -8.7002 -0.700195 -17.2998 -3.40039 -25.6006c-5.69922 -17.7998 -18.6992 -24.6992 -35.6992 -23.8994c-11.7002 0.5 -21.9004 5 -31.4004 11.7002c-0.900391 0.799805 -1.40039 1.59961 -1.2998 2.7998zM279.6 231.6c-5.19922 2 -8.7998 5.7002 -10.3994 11.2002
+c-1.7002 5.40039 -1.7002 10.7998 -0.100586 16.2002c2 6.90039 7 10.9004 13.7002 13.0996c6.7998 2.2002 13.7998 2.5 20.7998 1.90039c7 -0.700195 13.9004 -2 20.9004 -2.90039c1.40039 -0.199219 1.7998 -0.799805 1.7998 -2.19922c-0.0996094 -4 0 -8 0 -12
+c0 -3.90039 -0.0996094 -7.90039 0 -11.8008c0 -1.19922 -0.399414 -1.89941 -1.2998 -2.5c-9.40039 -6.7998 -19.7002 -11.2998 -31.2998 -12.5c-4.7998 -0.5 -9.5 -0.299805 -14.1006 1.5zM576 368v-352c0 -26.5 -21.5 -48 -48 -48h-480c-26.5 0 -48 21.5 -48 48v352
+c0 26.5 21.5 48 48 48h480c26.5 0 48 -21.5 48 -48zM368.5 344.1c0.400391 -1.69922 0.900391 -3.39941 1.59961 -5.09961c16.5 -40.5996 32.9004 -81.2998 49.5 -121.9c1.40039 -3.5 1.7002 -6.39941 0.200195 -9.89941
+c-2.7998 -6.2002 -4.89941 -12.6006 -7.7998 -18.7002c-2.59961 -5.5 -6.7002 -9.5 -12.7002 -11.2002c-4.2002 -1.09961 -8.5 -1.2998 -12.8994 -0.899414c-2.10059 0.199219 -4.2002 0.699219 -6.30078 0.799805c-2.7998 0.200195 -4.19922 -1.10059 -4.2998 -4
+c-0.0996094 -2.7998 -0.0996094 -5.60059 0 -8.2998c0.100586 -4.60059 1.60059 -6.7002 6.2002 -7.5c4.7002 -0.800781 9.40039 -1.60059 14.2002 -1.7002c14.2998 -0.299805 25.7002 5.39941 33.0996 17.8994c2.90039 4.90039 5.60059 10.1006 7.7002 15.4004
+c19.7998 50.0996 39.5 100.3 59.2002 150.5c0.599609 1.5 1.09961 3 1.2998 4.59961c0.400391 2.40039 -0.700195 3.60059 -3.09961 3.7002c-5.60059 0.100586 -11.1006 0 -16.7002 0c-3.10059 0 -5.2998 -1.39941 -6.40039 -4.2998
+c-0.399414 -1.09961 -0.899414 -2.2998 -1.2998 -3.40039l-29.0996 -83.6992c-2.10059 -6.10059 -4.2002 -12.1006 -6.5 -18.6006c-0.400391 0.900391 -0.600586 1.40039 -0.800781 1.90039c-10.7998 29.8994 -21.5996 59.8994 -32.3994 89.7998
+c-1.7002 4.7002 -3.5 9.5 -5.2998 14.2002c-0.900391 2.5 -2.7002 4 -5.40039 4c-6.40039 0.0996094 -12.7998 0.200195 -19.2002 0.0996094c-2.2002 0 -3.2998 -1.59961 -2.7998 -3.7002zM242.4 242c1.69922 -11.7002 7.59961 -20.7998 18 -26.5996
+c9.89941 -5.5 20.6992 -6.2002 31.6992 -4.60059c12.7002 1.90039 23.9004 7.2998 33.8008 15.5c0.399414 0.299805 0.799805 0.600586 1.39941 1c0.5 -3.2002 0.900391 -6.2002 1.5 -9.2002c0.5 -2.59961 2.10059 -4.2998 4.5 -4.39941
+c4.60059 -0.100586 9.10059 -0.100586 13.7002 0c2.2998 0.0996094 3.7998 1.59961 4 3.89941c0.0996094 0.800781 0.0996094 1.60059 0.0996094 2.30078v88.7998c0 3.59961 -0.199219 7.2002 -0.699219 10.7998c-1.60059 10.7998 -6.2002 19.7002 -15.9004 25.4004
+c-5.59961 3.2998 -11.7998 5 -18.2002 5.89941c-3 0.400391 -6 0.700195 -9.09961 1.10059h-10c-0.799805 -0.100586 -1.60059 -0.300781 -2.5 -0.300781c-8.2002 -0.399414 -16.2998 -1.39941 -24.2002 -3.5c-5.09961 -1.2998 -10 -3.19922 -15 -4.89941
+c-3 -1 -4.5 -3.2002 -4.40039 -6.5c0.100586 -2.7998 -0.0996094 -5.60059 0 -8.2998c0.100586 -4.10059 1.80078 -5.2002 5.7002 -4.10059c6.5 1.7002 13.1006 3.5 19.7002 4.7998c10.2998 1.90039 20.7002 2.7002 31.0996 1.2002
+c5.40039 -0.799805 10.5 -2.39941 14.1006 -7c3.09961 -4 4.2002 -8.7998 4.39941 -13.7002c0.300781 -6.89941 0.200195 -13.8994 0.300781 -20.7998c0 -0.399414 -0.100586 -0.700195 -0.200195 -1.2002c-0.400391 0 -0.799805 0 -1.10059 0.100586
+c-8.7998 2.09961 -17.6992 3.59961 -26.7998 4.09961c-9.5 0.5 -18.8994 -0.0996094 -27.8994 -3.2002c-10.8008 -3.7998 -19.5 -10.2998 -24.6006 -20.7998c-4.09961 -8.2998 -4.59961 -17 -3.39941 -25.7998zM98.7002 341.1v-175.3c0 -0.799805 0 -1.7002 0.0996094 -2.5
+c0.200195 -2.5 1.7002 -4.09961 4.10059 -4.2002c5.89941 -0.0996094 11.7998 -0.0996094 17.6992 0c2.5 0 4 1.7002 4.10059 4.10059c0.0996094 0.799805 0.0996094 1.7002 0.0996094 2.5v60.7002c0.900391 -0.700195 1.40039 -1.2002 1.90039 -1.60059
+c15 -12.5 32.2002 -16.5996 51.0996 -12.8994c17.1006 3.39941 28.9004 13.8994 36.7002 29.1992c5.7998 11.6006 8.2998 24.1006 8.7002 37c0.5 14.3008 -1 28.4004 -6.7998 41.7002c-7.10059 16.4004 -18.9004 27.2998 -36.7002 30.9004
+c-2.7002 0.599609 -5.5 0.799805 -8.2002 1.2002h-7c-1.2002 -0.200195 -2.40039 -0.300781 -3.59961 -0.5c-11.7002 -1.40039 -22.3008 -5.80078 -31.8008 -12.7002c-2 -1.40039 -3.89941 -3 -5.89941 -4.5c-0.100586 0.5 -0.299805 0.799805 -0.400391 1.2002
+c-0.399414 2.2998 -0.700195 4.59961 -1.09961 6.89941c-0.600586 3.90039 -2.5 5.5 -6.40039 5.60059h-9.7002c-5.89941 0.0996094 -6.89941 -1 -6.89941 -6.80078zM493.6 109c-2.69922 0.700195 -5.09961 0 -7.59961 -1c-43.9004 -18.4004 -89.5 -30.2002 -136.8 -35.7998
+c-14.5 -1.7002 -29.1006 -2.7998 -43.7002 -3.2002c-26.5996 -0.700195 -53.2002 0.799805 -79.5996 4.2998c-17.8008 2.40039 -35.5 5.7002 -53 9.90039c-37 8.89941 -72.7002 21.7002 -106.7 38.7998c-8.7998 4.40039 -17.4004 9.2998 -26.1006 14
+c-3.7998 2.09961 -6.19922 1.5 -8.19922 -2.09961v-1.7002c1.19922 -1.60059 2.19922 -3.40039 3.69922 -4.7998c36 -32.2002 76.6006 -56.5 122 -72.9004c21.9004 -7.90039 44.4004 -13.7002 67.3008 -17.5c14 -2.2998 28 -3.7998 42.1992 -4.5
+c3 -0.0996094 6 -0.200195 9 -0.400391c0.700195 0 1.40039 -0.199219 2.10059 -0.299805h17.7002c0.699219 0.100586 1.39941 0.299805 2.09961 0.299805c14.9004 0.400391 29.7998 1.80078 44.5996 4c21.4004 3.2002 42.4004 8.10059 62.9004 14.7002
+c29.5996 9.60059 57.7002 22.4004 83.4004 40.1006c2.7998 1.89941 5.69922 3.7998 8 6.19922c4.2998 4.40039 2.2998 10.4004 -3.30078 11.9004zM544 136.7c-0.799805 4.2002 -4 5.7998 -7.59961 7c-5.7002 1.89941 -11.6006 2.7998 -17.6006 3.2998
+c-11 0.900391 -22 0.400391 -32.7998 -1.59961c-12 -2.2002 -23.4004 -6.10059 -33.5 -13.1006c-1.2002 -0.799805 -2.40039 -1.7998 -3.09961 -3c-0.600586 -0.899414 -0.700195 -2.2998 -0.5 -3.39941c0.299805 -1.30078 1.69922 -1.60059 3 -1.5
+c0.599609 0 1.19922 0 1.7998 0.0996094l19.5 2.09961c9.59961 0.900391 19.2002 1.5 28.7998 0.800781c4.09961 -0.300781 8.09961 -1.2002 12 -2.2002c4.2998 -1.10059 6.2002 -4.40039 6.40039 -8.7002c0.299805 -6.7002 -1.2002 -13.0996 -2.90039 -19.5
+c-3.5 -12.9004 -8.2998 -25.4004 -13.2998 -37.7998c-0.299805 -0.799805 -0.700195 -1.7002 -0.799805 -2.5c-0.400391 -2.5 1 -4 3.39941 -3.5c1.40039 0.299805 3 1.09961 4 2.09961c3.7002 3.60059 7.5 7.2002 10.6006 11.2002
+c10.6992 13.7998 17 29.5996 20.6992 46.5996c0.700195 3 1.2002 6.10059 1.7002 9.10059c0.200195 4.7002 0.200195 9.59961 0.200195 14.5z" />
+    <glyph glyph-name="ethereum" unicode="&#xf42e;" horiz-adv-x="320" 
+d="M311.9 187.2l-151.9 -92.7998l-152 92.7998l152 260.8zM160 64.5996l152 92.8008l-152 -221.4l-152 221.4z" />
+    <glyph glyph-name="korvue" unicode="&#xf42f;" horiz-adv-x="446" 
+d="M386.5 414c32.7002 0 59.5 -26.7998 59.5996 -59.5v-327c0 -32.7002 -26.5 -59.5 -59.5 -59.5h-327.1c-32.7002 0 -59.5 26.7998 -59.5 59.4004v327.1c0 32.7002 26.7998 59.5 59.5 59.5h327zM87.0996 327.2v-132h187.5l81.2002 132h-110.899l-61.8008 -116v116h-96z
+M248.9 55.0996h118.399l-88.5996 130.801h-191.5v-130.801h96v113.601z" />
+    <glyph glyph-name="elementor" unicode="&#xf430;" 
+d="M425.6 416c12.4004 0 22.4004 -10 22.4004 -22.4004v-403.199c0 -12.4004 -10 -22.4004 -22.4004 -22.4004h-403.199c-12.4004 0 -22.4004 10 -22.4004 22.4004v403.199c0 12.4004 10 22.4004 22.4004 22.4004h403.199zM164.3 92.5v199h-39.7998v-199h39.7998z
+M323.6 92.5v39.7998h-119.5v-39.7998h119.5zM323.6 172.1v39.8008h-119.5v-39.8008h119.5zM323.6 251.8v39.7998h-119.5v-39.7998h119.5z" />
+    <glyph glyph-name="youtube-square" unicode="&#xf431;" 
+d="M186.8 245.9l95.2002 -54.1006l-95.2002 -54.0996v108.2zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352c26.5 0 48 -21.5 48 -48zM406 191.7c0 0 0 59.5996 -7.59961 88.2002
+c-4.2002 15.7998 -16.5 28.1992 -32.2002 32.3994c-28.2998 7.7002 -142.2 7.7002 -142.2 7.7002s-113.9 0 -142.2 -7.7002c-15.7002 -4.2002 -28 -16.5996 -32.2002 -32.3994c-7.59961 -28.5 -7.59961 -88.2002 -7.59961 -88.2002s0 -59.6006 7.59961 -88.2002
+c4.2002 -15.7998 16.5 -27.7002 32.2002 -31.9004c28.2998 -7.59961 142.2 -7.59961 142.2 -7.59961s113.9 0 142.2 7.7002c15.7002 4.2002 28 16.0996 32.2002 31.8994c7.59961 28.5 7.59961 88.1006 7.59961 88.1006z" />
+    <glyph glyph-name="flipboard" unicode="&#xf44d;" 
+d="M0 416h448v-448h-448v448zM358.4 236.8v89.6006h-268.801v-268.801h89.6006v89.6006h89.5996v89.5996h89.6006z" />
+    <glyph glyph-name="hips" unicode="&#xf452;" horiz-adv-x="640" 
+d="M251.6 290.4v-201.801c0 -1.89941 -0.899414 -2.7998 -2.7998 -2.7998h-40.8994c-1.60059 0 -2.7002 1.40039 -2.7002 2.7998v201.801c0 1.39941 1.09961 2.7998 2.7002 2.7998h40.8994c1.90039 0 2.7998 -0.900391 2.7998 -2.7998zM156.5 280
+c18.7002 -13.5 28 -31.9004 28 -55.2998v-136.101c0 -1.89941 -0.900391 -2.7998 -2.7002 -2.7998h-27.2998c-9.09961 0 -16.4004 7.2998 -16.4004 16.2998v122.601c0 0.899414 2.7002 27 -45.7998 27c-48.5996 0 -45.7998 -26.2002 -45.7998 -27v-136.101
+c0 -1.89941 -0.900391 -2.7998 -2.7998 -2.7998h-41c-1.7998 0 -2.7002 0.900391 -2.7002 2.7998v279.2c0 1.7998 0.900391 2.7002 2.7002 2.7002h40.8994c1.90039 0 2.80078 -0.900391 2.80078 -2.7002v-81.2002c15.1992 7.7002 31.6992 11.5 49.7998 11.4004
+c24 -0.0996094 44.2002 -6.2002 60.2998 -18zM634.9 169.9c5.5 -12.6006 6.59961 -25.6006 3.09961 -39.1006c-9.59961 -36.8994 -44.9004 -45.5 -45.5996 -45.7998c-10.5 -3.09961 -23.6006 -4.2998 -36.3008 -4.2998c-16.5996 0 -32.5996 2.7002 -48.1992 8.2002
+c-9.7002 3.39941 -14.6006 10.2998 -14.6006 20.6992v34.4004c0 2.09961 2.2998 3.7002 4.40039 2.2998c13.7002 -10.2002 34.0996 -19.0996 58.3994 -19.0996c23.3008 0 32.8008 4.5 36.5 13.5996c3 7.90039 -0.599609 16.1006 -12.1992 21.2002l-53.6006 23.5
+c-21.3994 9.40039 -33.7998 24 -37.2002 43.5996c-5.69922 33.7002 22.2002 53.3008 22.7002 53.7002c13.2002 9.60059 32 15.4004 58.5 15.4004c19 0 37.4004 -3.2998 55.1006 -9.90039c1.2998 -0.5 1.89941 -1.2998 1.89941 -2.59961v-44.7002
+c0 -2.09961 -2.2998 -3.40039 -4 -2.40039c-39.7002 20.7002 -76.5996 12.3008 -84 6.80078c-6.59961 -4.90039 -6 -12.5 2.60059 -16.1006l57.5996 -25.2998c16.5 -7.09961 28.0996 -18.4004 34.9004 -34.0996zM376.2 298.2c60.3994 0 108.7 -48.2998 108.6 -108.601
+c0 -60.1992 -48.2002 -108.699 -108.7 -108.699c-21.8994 0 -41.1992 6.39941 -57.6992 19.0996v-88.7998c0 -1.7998 -0.900391 -2.7002 -2.80078 -2.7002h-40.8994c-2.10059 0 -2.7002 1.90039 -2.7002 2.7002v183.5c0 83.3994 72.5 103.5 104.2 103.5zM376.2 127.3
+c34.8994 0 62.2998 27.9004 62.2002 62.2002c0 34.5996 -27.7002 62.2002 -62.2002 62.2002c-34.6006 0 -62.2002 -27.7002 -62.2002 -62.2002c0 -17.2002 6 -31.7998 18.2002 -44c12.0996 -12.0996 26.7998 -18.2002 44 -18.2002zM228.3 375.5
+c15.9004 0 28.9004 -12.7002 28.9004 -28.9004c0 -15.7998 -12.7002 -28.8994 -28.9004 -28.8994s-28.8994 13.2998 -28.8994 28.8994c0.0996094 16 13 28.9004 28.8994 28.9004z" />
+    <glyph glyph-name="php" unicode="&#xf457;" horiz-adv-x="640" 
+d="M320 343.5c-171.3 0 -303.2 -72.2002 -303.2 -151.5s131.8 -151.5 303.2 -151.5c171.3 0 303.2 72.2002 303.2 151.5s-131.8 151.5 -303.2 151.5zM320 360.3c176.7 0 320 -75.2998 320 -168.3s-143.3 -168.3 -320 -168.3s-320 75.2998 -320 168.3s143.3 168.3 320 168.3z
+M218.2 205.5c7.39941 38.4004 -18.4004 34.2998 -56.4004 34.2998l-13.7002 -70.5996c34.3008 0 62.2002 -4.2002 70.1006 36.2998zM97.4004 97.7002l32.6992 168.7h70.7002c21.2002 0 36.7998 -5.5 46.5 -16.7002c18.6006 -21.4004 11.7998 -64.1006 -14.2998 -88.1006
+c-23.5996 -22.0996 -49.0996 -19.0996 -90.2002 -19.0996l-8.7002 -44.7998h-36.6992zM283.1 311.3h36.5l-8.69922 -44.7998c31.5 0 60.6992 2.2998 74.7998 -10.7002c14.7998 -13.5996 7.7002 -31 -8.2998 -113.1h-37c15.3994 79.3994 18.2998 86 12.6992 92
+c-5.39941 5.7998 -17.6992 4.59961 -47.3994 4.59961l-18.7998 -96.5996h-36.5zM505 205.5c7.40039 38.4004 -18.2002 34.2998 -56.4004 34.2998l-13.6992 -70.5996c33.3994 0 62.0996 -4.7998 70.0996 36.2998zM384.2 97.7002l32.7998 168.7h70.7002
+c21.2002 0 36.7998 -5.5 46.5 -16.7002c18.5996 -21.4004 11.7998 -64.1006 -14.2998 -88.1006c-23.1006 -21.5996 -47 -19.0996 -90.2002 -19.0996l-8.7002 -44.7998h-36.7998z" />
+    <glyph glyph-name="quinscape" unicode="&#xf459;" horiz-adv-x="512" 
+d="M313.6 -26.5996c4.40039 -4.40039 8.10059 -9 13.3008 -12.5c-18.5029 -5.58008 -49.2031 -10.1074 -68.5283 -10.1074c-0.516602 0 -1.35547 0.00292969 -1.87207 0.00683594c-135 0 -244.5 109.5 -244.5 244.601c0 135.1 109.4 244.6 244.5 244.6
+s244.6 -109.5 244.6 -244.6c0 -35.3008 -6.89941 -67.4004 -20.2998 -97.7002c-3 5.7002 -7.2002 10.2002 -11.2002 15.2998c11.2002 93.5 -62.0996 176.6 -157 176.6c-87.2705 0 -158.1 -70.8281 -158.1 -158.1s70.8291 -158.1 158.1 -158.1h1zM313.5 -26.5
+l0.400391 -0.0996094zM391.9 142.4c54.7471 0 99.1992 -44.4326 99.1992 -99.1807v-0.0195312c0 -54.7588 -44.4414 -99.2002 -99.1992 -99.2002c-54.7588 0 -99.2002 44.4414 -99.2002 99.2002c0 54.7578 44.4414 99.2002 99.2002 99.2002z" />
+    <glyph glyph-name="readme" unicode="&#xf4d5;" horiz-adv-x="576" 
+d="M528.3 401.5c26.4004 -0.200195 47.7002 -21.7002 47.7002 -48.0996v-245.7c0 -26.5 -21.5 -48 -48 -48h-89.7002c-102.1 0 -132.6 -24.4004 -147.3 -75c-0.799805 -2.7998 -5.2998 -2.7998 -6 0c-14.5996 50.5996 -45.0996 75 -147.3 75h-89.7002
+c-26.5 0 -48 21.5 -48 48v245.8c0 26.5 21.5 48 48 48h139.7c48.0996 0 89.7998 -33.2998 100.399 -80.2998c10.5 47 52.3008 80.2998 100.4 80.2998h139.8zM242 136.1h0.0996094v22.9004c0 2 -1.59961 3.5 -3.5 3.5h-160.399c-2 0 -3.5 -1.59961 -3.5 -3.5v-22.9004
+c0 -2 1.59961 -3.5 3.5 -3.5h160.3c2 0 3.5 1.60059 3.5 3.5zM242 197h0.0996094v22.9004c0 2 -1.59961 3.5 -3.5 3.5h-160.399c-2 0 -3.5 -1.60059 -3.5 -3.5v-22.9004c0 -2 1.59961 -3.5 3.5 -3.5h160.3c2 0 3.5 1.59961 3.5 3.5zM242 257.9h0.0996094v22.8994
+c0 2 -1.59961 3.5 -3.5 3.5h-160.399c-2 0 -3.5 -1.59961 -3.5 -3.5v-22.8994c0 -2 1.59961 -3.5 3.5 -3.5h160.3c2 0 3.5 1.59961 3.5 3.5zM501.3 136.2h0.100586v22.8994c0 2 -1.60059 3.5 -3.5 3.5h-160.4c-2 0 -3.5 -1.59961 -3.5 -3.5v-22.8994
+c0 -2 1.59961 -3.5 3.5 -3.5h160.3c2 0 3.5 1.59961 3.5 3.5zM501.3 197.1h0.100586v22.9004c0 2 -1.60059 3.5 -3.5 3.5h-160.4c-2 0 -3.5 -1.59961 -3.5 -3.5v-22.9004c0 -2 1.59961 -3.5 3.5 -3.5h160.3c2 0 3.5 1.60059 3.5 3.5zM501.3 258h0.100586v22.7998
+c0 2 -1.60059 3.5 -3.5 3.5h-160.4c-2 0 -3.5 -1.59961 -3.5 -3.5v-22.7998c0 -2 1.59961 -3.5 3.5 -3.5h160.3c2 0 3.5 1.59961 3.5 3.5z" />
+    <glyph glyph-name="java" unicode="&#xf4e4;" horiz-adv-x="384" 
+d="M277.74 135.1c-94.5 -24.8994 -277 -13.2998 -224.5 12.1006c44.5 21.3994 80.5996 19 80.5996 19s-93.0996 -22.1006 -33 -30.1006c25.4004 -3.39941 76 -2.59961 123.101 1.30078c38.5 3.19922 77.1992 10.1992 77.1992 10.1992s-13.5996 -5.7998 -23.3994 -12.5z
+M192.34 167.2c-48.5 43.7998 -84.0996 82.2998 -60.2002 118.2c35.1006 52.5 132.2 78.0996 110.7 162.6c0 0 53.1602 -53.2002 -50.5 -135c-83.0996 -65.5996 -19 -103.1 0 -145.8zM306.94 343.4c-111.601 -64.7002 -91 -83.5 -64.1006 -121.301
+c28.7998 -40.5 -33.8994 -72.8994 -33.8994 -72.8994s31.1992 25.5996 6.5 54c-83.7002 96.3994 91.5996 140.2 91.5 140.2zM300.84 72.9004c96.1006 49.8994 51.6006 97.8994 20.6006 91.3994c-3.10352 -0.581055 -8.03125 -1.92578 -11 -3
+c1.71973 2.44629 5.39258 5.26855 8.19922 6.2998c61.3008 21.6006 108.5 -63.5996 -19.7998 -97.2998c0.649414 0.642578 1.5459 1.80762 2 2.60059zM348 10.5996c53 -23.8994 -115.16 -72 -319.4 -38.7998c-74.8994 12.1006 36.1006 54.5 56.4004 40.2002
+c0 0 -6.5 0.400391 -17.7002 -2c-10.7998 -2.2998 -45.0996 -13.4004 -26.7998 -21.2998c50.7998 -22.1006 233.7 -16.7998 291.6 0.700195c30.4004 9.2998 15.9004 21.1992 15.9004 21.1992zM124.44 52c0 0 -19.6006 -11.4004 13.8994 -15.2002
+c40.6006 -4.59961 61.2998 -4 106 4.5c7.46094 -4.46777 20.0938 -10.6504 28.2002 -13.7998c-100.2 -42.9004 -226.8 2.5 -148.1 24.5zM304.24 -45.2002c69.7998 13.2002 76.2002 29.7002 76.2002 29.7002c-3.30078 -43.5996 -144.9 -52.7998 -237.101 -46.9004
+c-60.5996 3.90039 -72.3994 13.7002 -72.3994 13.6006c57.5 -9.5 154.6 -11.2002 233.3 3.59961zM260.64 95c5.08594 -4.74902 14.5391 -10.4834 21.1006 -12.7998c-121.3 -35.5 -256.3 -2.90039 -169.5 25.8994c0 0 -21.9004 -16.1992 11.5996 -19.6992
+c43.2998 -4.5 77.6006 -4.80078 136.8 6.59961z" />
+    <glyph glyph-name="pied-piper-hat" unicode="&#xf4e5;" horiz-adv-x="640" 
+d="M640 423.1c-80.7998 -53.5996 -89.4004 -92.5 -96.4004 -104.399c-6.69922 -12.2002 -11.6992 -60.2998 -23.2998 -83.6006c-11.7002 -23.5996 -54.2002 -42.1992 -66.0996 -50c-11.7002 -7.7998 -28.2998 -38.0996 -41.9004 -64.1992
+c-108.1 4.39941 -167.399 -38.8008 -259.2 -93.6006c29.4004 9.7002 43.3008 16.7002 43.3008 16.7002c94.1992 36 139.3 68.2998 281.1 49.2002c1.09961 0 1.90039 -0.600586 2.7998 -0.799805c3.90039 -2.2002 5.2998 -6.90039 3.10059 -10.8008l-53.9004 -95.7998
+c-2.5 -4.7002 -7.7998 -7.2002 -13.0996 -6.09961c-126.801 23.7998 -226.9 -17.2998 -318.9 -18.6006c-73.4004 -1.09961 -97.5 33.5 -97.5 35.1006c0 1.09961 0.599609 1.7002 1.7002 1.7002c0 0 38.2998 0 103.1 15.2998c73.6006 140.3 139.2 189.399 210.601 189.399
+c0 0 71.6992 0 90.5996 -61.8994c22.7998 39.7002 28.2998 49.2002 28.2998 49.2002c5.2998 9.39941 35 77.1992 86.4004 141.399c51.5 64 90.3994 79.9004 119.3 91.7998z" />
+    <glyph glyph-name="creative-commons-by" unicode="&#xf4e7;" horiz-adv-x="496" 
+d="M314.9 253.6v-101.399h-28.3008v-120.5h-77.0996v120.399h-28.2998v101.5c0 4.40039 1.59961 8.2002 4.59961 11.3008c3.10059 3.09961 6.90039 4.69922 11.2998 4.69922h101.9c4.09961 0 7.7998 -1.59961 11.0996 -4.69922
+c3.10059 -3.2002 4.80078 -6.90039 4.80078 -11.3008zM213.4 317.3c0 23.2998 11.5 35 34.5 35s34.5 -11.7002 34.5 -35c0 -23 -11.5 -34.5 -34.5 -34.5s-34.5 11.5 -34.5 34.5zM247.6 440c141.801 0 248.4 -110.1 248.4 -248c0 -147.1 -118.5 -248 -248.4 -248
+c-134 0 -247.6 109.5 -247.6 248c0 132.9 104.7 248 247.6 248zM248.4 395.3c-118.2 0 -203.7 -97.8994 -203.7 -203.3c0 -109.8 91.2002 -202.8 203.7 -202.8c103.199 0 202.8 81.0996 202.8 202.8c0.0996094 113.8 -90.2002 203.3 -202.8 203.3z" />
+    <glyph glyph-name="creative-commons-nc" unicode="&#xf4e8;" horiz-adv-x="496" 
+d="M247.6 440c139.801 0 248.4 -107.9 248.4 -248c0 -147.2 -118.5 -248 -248.4 -248c-134.5 0 -247.6 110.8 -247.6 248c0 132.9 104.7 248 247.6 248zM55.7998 258.9c-7.39941 -20.4004 -11.0996 -42.7002 -11.0996 -66.9004c0 -110.9 92.0996 -202.4 203.7 -202.4
+c122.399 0 177.199 101.801 178.5 104.101l-93.4004 41.5996c-7.7002 -37.0996 -41.2002 -53 -68.2002 -55.3994v-38.1006h-28.7998v38.2002c-27.5 0.299805 -52.5996 10.2002 -75.2998 29.7002l34.0996 34.5c31.7002 -29.4004 86.4004 -31.7998 86.4004 2.2002
+c0 6.19922 -2.2002 11.1992 -6.60059 15.0996c-14.1992 6 -1.7998 0.0996094 -219.3 97.4004zM248.4 395.7c-38.4004 0 -112.4 -8.7002 -170.5 -93l94.7998 -42.5c10 31.2998 40.3994 42.8994 63.7998 44.2998v38.0996h28.7998v-38.0996
+c22.7002 -1.2002 43.4004 -8.90039 62 -23l-32.2998 -33.2002c-42.7002 29.9004 -83.5 8 -70 -11.0996c53.4004 -24.1006 43.7998 -19.7998 93 -41.6006l127.1 -56.6992c4.10059 17.3994 6.2002 35.0996 6.2002 53.0996c0 57 -19.7998 105 -59.2998 143.9
+c-39.2998 39.8994 -87.2002 59.7998 -143.6 59.7998z" />
+    <glyph glyph-name="creative-commons-nc-eu" unicode="&#xf4e9;" horiz-adv-x="496" 
+d="M247.7 440c140.7 0 248.3 -109 248.3 -248c0 -147.1 -118.1 -248 -248.3 -248c-136 0 -247.7 111.7 -247.7 248c0 131.2 103.6 248 247.7 248zM248.3 -10.7002c122.601 0 177.3 102.2 178.8 104.3l-128.3 56.8008h-90.2998
+c9.2002 -39.3008 39.0996 -50.2002 67.2998 -50.2002c19.1006 0 38.6006 6.2002 47.2998 10.7998l10 -46.0996c-14.1992 -7.90039 -38.1992 -15.8008 -64.7998 -15.8008c-57.3994 0 -113.2 34.3008 -124.6 101.301h-27v29.5h22.7998
+c0 16.2998 0.400391 13.2998 0.400391 19.5h-23.3008v29.5h4.7002l-65.7002 29.0996c-7.19922 -20.7998 -10.8994 -42.7998 -10.8994 -66c0 -110.2 91.5996 -202.7 203.6 -202.7zM231.6 179.9l-0.5 0.399414l0.900391 -0.399414h-0.400391zM308.8 199.4l136.101 -60.5
+c4.19922 16.5996 6.2998 34.1992 6.2998 52.8994c0 113.2 -90 203.4 -203 203.4c-13 0 -106.101 3.2002 -170.7 -93.6006l81.5996 -36.0996c4.10059 7.2002 8.60059 14 13.9004 20.0996c23.7002 26.5 56.9004 42.3008 95.9004 42.3008
+c25.2998 0 47.2998 -5.80078 62.2998 -12.4004l-11.6006 -47.2998c-10.7998 4.59961 -27.7998 10 -46.0996 10c-20 0 -38.2002 -6.60059 -51.0996 -22.4004c-3.40039 -3.7998 -6.30078 -8.7998 -8.80078 -14.2998l28.6006 -12.5996h70.2998v-29.5h-3.7002z" />
+    <glyph glyph-name="creative-commons-nc-jp" unicode="&#xf4ea;" horiz-adv-x="496" 
+d="M247.7 440c140.8 0 248.3 -109.2 248.3 -248c0 -147.2 -118.1 -248 -248.3 -248c-135.9 0 -247.7 111.6 -247.7 248c0 131.2 103.6 248 247.7 248zM248.3 -10.7002c118.101 0 173.7 96.1006 175.2 98.2998l-81 36.1006v-35.7002h-64.2002v-56h-61.7002v56h-63.7998
+v38.7002h63.7998v18.7002l-5.69922 11.7998h-58.1006v38.5996h27.9004l-127 56.5c-6 -19.0996 -9 -39.2002 -9 -60.2998c0 -110.2 91.5996 -202.7 203.6 -202.7zM335.9 126.6l-54.7002 24.3008l-2.90039 -5.60059v-18.7002h57.6006zM342.4 178l101 -45.0996
+c5.19922 18.3994 7.89941 38 7.89941 59c0 113.399 -90.2002 203.399 -203 203.399c-91.0996 0 -145.899 -54 -173.7 -98.0996l81.9004 -36.5l-27.2998 51h65.7998l39.5996 -85.7002l23 -10.2002l43.4004 96h65.7998l-63 -116h38.6006v-17.7998z" />
+    <glyph glyph-name="creative-commons-nd" unicode="&#xf4eb;" horiz-adv-x="496" 
+d="M247.6 440c141.801 0 248.4 -110.1 248.4 -248c0 -147.1 -118.5 -248 -248.4 -248c-134 0 -247.6 109.5 -247.6 248c0 132.9 104.7 248 247.6 248zM248.4 395.3c-118.2 0 -203.7 -97.8994 -203.7 -203.3c0 -109.8 91.2002 -202.8 203.7 -202.8
+c103.199 0 202.8 81.0996 202.8 202.8c0.0996094 113.8 -90.2002 203.3 -202.8 203.3zM342.4 251v-42.5h-180.301v42.5h180.301zM342.4 171.2v-42.5h-180.301v42.5h180.301z" />
+    <glyph glyph-name="creative-commons-pd" unicode="&#xf4ec;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111.1 248 -248c0 -137 -111 -248 -248 -248s-248 111 -248 248c0 136.9 111 248 248 248zM248 -9.5c76.0996 0 142.4 42.4004 176.7 104.8c-1.40039 0.299805 12.5 -5.7998 -217.9 96.7998c0.200195 -32 16.1006 -71.8994 53.9004 -71.8994
+c18.7002 0 30.7998 10.3994 36.2998 16.7002l36.0996 -43.9004c-25.8994 -22.7998 -56.5 -29.5 -79.3994 -29.5c-46.5 0 -120.4 27.9004 -120.4 126.9c0 11.3994 1.2002 22.3994 3.2998 32.8994l-78.7998 35.1006c-45.5996 -129.9 51 -267.9 190.2 -267.9zM442.2 140.5
+c0.200195 -0.200195 0.299805 -0.299805 0.599609 -0.400391c4.40039 16.6006 6.7998 34 6.7998 52c0 111.101 -90.3994 201.5 -201.5 201.5c-70.3994 0 -132.399 -36.2998 -168.5 -91.1992l74.9004 -33.4004c19.7998 31.0996 53.2998 51.5996 100.7 51.5996
+c20.0996 0 51 -4.19922 78.0996 -27.5l-40.3994 -41.5996c-19.8008 19.7002 -55.9004 23 -74.7002 -11z" />
+    <glyph glyph-name="creative-commons-pd-alt" unicode="&#xf4ed;" horiz-adv-x="496" 
+d="M247.6 440c141.801 0 248.4 -110.1 248.4 -248c0 -147.1 -118.5 -248 -248.4 -248c-134 0 -247.6 109.5 -247.6 248c0 132.9 104.7 248 247.6 248zM248.4 -10.7998c103.199 0 202.8 81.0996 202.8 202.8c0.0996094 113.8 -90.2002 203.3 -202.8 203.3
+c-118.2 0 -203.7 -97.8994 -203.7 -203.3c0 -109.8 91.2002 -202.8 203.7 -202.8zM316.7 262c21.3994 0 70 -5.2002 70 -68.5996c0 -63.5 -48.6006 -68.6006 -70 -68.6006h-53.2002v137.2h53.2002zM317.5 153.5c24 0 34.5 15.2998 34.5 39.9004
+c0 42 -31.2002 39.8994 -35 39.8994l-19.4004 -0.0996094v-79.7002h19.9004zM203.7 262c33.7002 0 50.5 -15.5 50.5 -46.5c0 -9 -3 -46.5 -57.1006 -46.5h-27v-44.2998h-34.5996v137.3h68.2002zM198.8 194.7c27.9004 0 30 41.5996 -0.899414 41.5996h-28.3008v-41.5996
+h29.2002z" />
+    <glyph glyph-name="creative-commons-remix" unicode="&#xf4ee;" horiz-adv-x="496" 
+d="M247.6 440c141.801 0 248.4 -110.1 248.4 -248c0 -147.1 -118.5 -248 -248.4 -248c-134 0 -247.6 109.5 -247.6 248c0 132.9 104.7 248 247.6 248zM248.4 395.3c-118.2 0 -203.7 -97.8994 -203.7 -203.3c0 -109.8 91.2002 -202.8 203.7 -202.8
+c103.199 0 202.8 81.0996 202.8 202.8c0.0996094 113.8 -90.2002 203.3 -202.8 203.3zM410.1 187.6l4.90039 -2.19922v-70c-7.2002 -3.60059 -63.4004 -27.5 -67.2998 -28.8008c-6.5 1.80078 -113.7 46.8008 -137.3 56.2002l-64.2002 -26.5996l-63.2998 27.5v63.7998
+l59.2998 24.7998c-0.700195 0.700195 -0.400391 -5 -0.400391 70.4004l67.2998 29.7002l151.9 -62.9004v-61.5996zM339.7 106.1v43.8008h-0.400391v1.7998l-113.8 46.5v-45.2002l113.8 -46.9004v0.400391zM347.2 163.7l39.8994 16.3994l-36.7998 15.5l-39 -16.3994z
+M399.5 125.6v43l-44.2998 -18.5996v-43.4004z" />
+    <glyph glyph-name="creative-commons-sa" unicode="&#xf4ef;" horiz-adv-x="496" 
+d="M247.6 440c141.801 0 248.4 -110.1 248.4 -248c0 -147.1 -118.5 -248 -248.4 -248c-134 0 -247.6 109.5 -247.6 248c0 132.9 104.7 248 247.6 248zM248.4 395.3c-118.2 0 -203.7 -97.8994 -203.7 -203.3c0 -109.8 91.2002 -202.8 203.7 -202.8
+c103.199 0 202.8 81.0996 202.8 202.8c0.0996094 113.8 -90.2002 203.3 -202.8 203.3zM137.7 227c13 83.9004 80.5 95.7002 108.899 95.7002c99.8008 0 127.5 -82.5 127.5 -134.2c0 -63.5996 -41 -132.9 -128.899 -132.9c-38.9004 0 -99.1006 20 -109.4 97h62.5
+c1.5 -30.0996 19.6006 -45.1992 54.5 -45.1992c23.2998 0 58 18.1992 58 82.7998c0 82.5 -49.0996 80.5996 -56.7002 80.5996c-33.0996 0 -51.6992 -14.5996 -55.7998 -43.7998h18.2002l-49.2002 -49.2002l-49 49.2002h19.4004z" />
+    <glyph glyph-name="creative-commons-sampling" unicode="&#xf4f0;" horiz-adv-x="496" 
+d="M247.6 440c141.801 0 248.4 -110.1 248.4 -248c0 -147.1 -118.5 -248 -248.4 -248c-134 0 -247.6 109.5 -247.6 248c0 132.9 104.7 248 247.6 248zM248.4 395.3c-118.2 0 -203.7 -97.8994 -203.7 -203.3c0 -109.8 91.2002 -202.8 203.7 -202.8
+c103.199 0 202.8 81.0996 202.8 202.8c0.0996094 113.8 -90.2002 203.3 -202.8 203.3zM252 342.1c2.7998 0.300781 11.5 -1 11.5 -11.5l6.59961 -107.199l4.90039 59.2998c0 6 4.7002 10.5996 10.5996 10.5996c5.90039 0 10.6006 -4.7002 10.6006 -10.5996
+c0 -2.5 -0.5 5.7002 5.7002 -81.5l5.7998 64.2002c0.299805 2.89941 2.89941 9.2998 10.2002 9.2998c3.7998 0 9.89941 -2.2998 10.5996 -8.90039l11.5 -96.5l5.2998 12.7998c1.7998 4.40039 5.2002 6.60059 10.2002 6.60059h58v-21.2998h-50.9004l-18.1992 -44.3008
+c-3.90039 -9.89941 -19.5 -9.09961 -20.8008 3.10059l-4 31.8994l-7.5 -92.5996c-0.299805 -3 -3 -9.2998 -10.1992 -9.2998c-3 0 -9.80078 2.09961 -10.6006 9.2998c0 1.90039 0.600586 -5.7998 -6.2002 77.9004l-5.2998 -72.2002
+c-1.09961 -4.7998 -4.7998 -9.2998 -10.5996 -9.2998c-2.90039 0 -9.7998 2 -10.6006 9.2998c0 1.89941 0.5 -6.7002 -5.7998 87.7002l-5.7998 -94.8008c0 -6.2998 -3.59961 -12.3994 -10.5996 -12.3994c-5.2002 0 -10.6006 4.09961 -10.6006 12l-5.7998 87.7002
+c-5.7998 -92.5 -5.2998 -84 -5.2998 -85.9004c-1.10059 -4.7998 -4.7998 -9.2998 -10.6006 -9.2998c-3 0 -9.7998 2.09961 -10.5996 9.2998c0 0.700195 -0.400391 1.09961 -0.400391 2.59961l-6.19922 88.6006l-4.90039 -56.7002
+c-0.700195 -6.5 -6.7002 -9.2998 -10.5996 -9.2998c-5.80078 0 -9.60059 4.09961 -10.6006 8.89941l-11.0996 76.4004c-2 -4 -3.5 -8.40039 -11.1006 -8.40039h-51.3994v21.3008h44.7998l13.7002 27.8994c4.39941 9.90039 18.2002 7.2002 19.8994 -2.7002l3.10059 -20.3994
+l8.39941 97.8994c0 6 4.80078 10.6006 10.6006 10.6006c0.5 0 10.5996 0.200195 10.5996 -12.4004l4.90039 -69.0996l6.59961 92.5996c0 10.1006 9.5 10.6006 10.2002 10.6006c0.599609 0 10.5996 -0.700195 10.5996 -10.6006l5.30078 -80.5996l6.19922 97.8994
+c0.100586 1.10059 -0.599609 10.3008 9.90039 11.5z" />
+    <glyph glyph-name="creative-commons-sampling-plus" unicode="&#xf4f1;" horiz-adv-x="496" 
+d="M247.6 440c141.801 0 248.4 -110.1 248.4 -248c0 -147.1 -118.5 -248 -248.4 -248c-134 0 -247.6 109.5 -247.6 248c0 132.9 104.7 248 247.6 248zM248.4 395.3c-118.2 0 -203.7 -97.8994 -203.7 -203.3c0 -109.8 91.2002 -202.8 203.7 -202.8
+c103.199 0 202.8 81.0996 202.8 202.8c0.0996094 113.8 -90.2002 203.3 -202.8 203.3zM355.4 189.7l58.3994 0.299805v-23.2002h-50.5l-18 -43.3994c-4.59961 -11 -20.8994 -8.7002 -22.2998 3.09961l-2.7002 22.2998l-6.7998 -83
+c-1.09961 -14.0996 -22 -14.2002 -23.0996 0.100586l-4.90039 64.3994l-4.59961 -58.5996c-1.10059 -14.2998 -22.3008 -14.1006 -23.2002 0.200195l-4.5 71.7998l-4.90039 -80.5c-0.899414 -14.5 -22.2998 -14.5 -23.2002 -0.100586l-4.7998 73.3008l-4.59961 -70.4004
+c-0.900391 -14.2998 -22.1006 -14.5 -23.2002 -0.0996094l-5.7002 78.2998l-3.7998 -43.6006c-1.2002 -13.6992 -21.0996 -14.1992 -23.0996 -0.699219l-10.7002 73.0996c-2 -3.90039 -6 -6.40039 -10.4004 -6.40039h-51.2998v23.2002h43.9004l13.1992 27.7002
+c4.90039 10.2998 20.3008 8.09961 22 -3.2998l1.80078 -12.2002l7.69922 89.7998c1.2002 14.1006 22.1006 14.1006 23.2002 -0.200195l4.10059 -57l5.2998 80.2002c1 14.4004 22.2998 14.4004 23.2002 0l4.2998 -66.2998l5.09961 83.7002
+c0.900391 14.3994 22.2998 14.5 23.2002 0l5.90039 -94.2998l3.5 44.8994c1.09961 14.2002 22.0996 14.2998 23.1992 0l5.2002 -68.7998l4.2998 51.4004c1.10059 13.7998 21.4004 14.2998 23.1006 0.399414l11 -92.7998l4 9.5c1.7002 4.40039 6 7.2002 10.7002 7.2002z
+M277.4 184.5c4.09961 0 7.5 3.40039 7.5 7.5c0 4.2002 -3.40039 7.5 -7.5 7.5h-21.9004v21.9004c0 4.19922 -3.40039 7.5 -7.5 7.5s-7.5 -3.40039 -7.5 -7.5v-21.9004h-21.9004c-4.09961 0 -7.5 -3.40039 -7.5 -7.5c0 -4.2002 3.40039 -7.5 7.5 -7.5h21.9004v-21.9004
+c0 -4.19922 3.40039 -7.5 7.5 -7.5c4.2002 0 7.5 3.40039 7.5 7.5v21.9004h21.9004z" />
+    <glyph glyph-name="creative-commons-share" unicode="&#xf4f2;" horiz-adv-x="496" 
+d="M247.6 440c141.801 0 248.4 -110.1 248.4 -248c0 -147.1 -118.5 -248 -248.4 -248c-134 0 -247.6 109.5 -247.6 248c0 132.9 104.7 248 247.6 248zM248.4 395.3c-118.2 0 -203.7 -97.8994 -203.7 -203.3c0 -109.8 91.2002 -202.8 203.7 -202.8
+c103.199 0 202.8 81.0996 202.8 202.8c0.0996094 113.8 -90.2002 203.3 -202.8 203.3zM349.4 262.9c7.7998 0 13.6992 -6.10059 13.6992 -13.7002v-182.5c0 -7.7002 -6.09961 -13.7002 -13.6992 -13.7002h-135.101c-7.7002 0 -13.7002 6 -13.7002 13.7002v54h-54
+c-7.7998 0 -13.6992 6 -13.6992 13.7002v182.5c0 8.19922 6.59961 12.6992 12.3994 13.6992h136.4c7.7002 0 13.7002 -6 13.7002 -13.6992v-54h54zM159.9 147.7h40.6992v101.399c0 7.40039 5.80078 12.6006 12 13.7002h55.8008v40.2998h-108.5v-155.399zM336.1 235.8h-108.5
+v-155.399h108.5v155.399z" />
+    <glyph glyph-name="creative-commons-zero" unicode="&#xf4f3;" horiz-adv-x="496" 
+d="M247.6 440c141.801 0 248.4 -110.1 248.4 -248c0 -147.1 -118.5 -248 -248.4 -248c-134 0 -247.6 109.5 -247.6 248c0 132.9 104.7 248 247.6 248zM248.4 395.3c-118.2 0 -203.7 -97.8994 -203.7 -203.3c0 -109.8 91.2002 -202.8 203.7 -202.8
+c103.199 0 202.8 81.0996 202.8 202.8c0.0996094 113.8 -90.2002 203.3 -202.8 203.3zM248 334.8c81.9004 0 102.5 -77.2998 102.5 -142.8s-20.5996 -142.8 -102.5 -142.8s-102.5 77.2998 -102.5 142.8s20.5996 142.8 102.5 142.8zM248 280.9
+c-42.0996 0 -44.0996 -60.1006 -44.0996 -88.9004c0 -9.2998 0.199219 -21.7002 1.89941 -34.4004l54.5 100.2c5.7002 9.7998 2.7998 16.7998 -3.09961 21.9004c-2.7998 0.700195 -5.90039 1.2002 -9.2002 1.2002zM288.8 234.7l-60.8994 -105.2
+c-12.5 -18.7002 6.59961 -26.4004 20.0996 -26.4004c42.0996 0 44.0996 60 44.0996 88.9004c0 11.2998 -0.399414 27.2998 -3.2998 42.7002z" />
+    <glyph glyph-name="ebay" unicode="&#xf4f4;" horiz-adv-x="640" 
+d="M606 258.5h34l-99.2002 -194.8h-35.8994l28.5 54.0996l-61.5 116.101c3.09961 -6.60059 4.7998 -14.5 4.7998 -23.8008v-65.5996c0 -9.2998 0.299805 -18.5996 1 -26.7998h-29.7998c-0.800781 6.89941 -1.10059 13.5996 -1.10059 20.2002
+c-16.0996 -19.8008 -35.2998 -25.5 -61.8994 -25.5c-39.5 0 -60.6006 20.8994 -60.6006 45c0 3.19922 0.200195 6.19922 0.700195 9c-8.40039 -32.3008 -36.4004 -54.2002 -73.2998 -54.2002c-23.2998 0 -45.1006 8.2998 -58.7002 24.8994
+c0 -6.59961 -0.400391 -13.1992 -1.09961 -19.5h-31.5c0.5 10.2002 1.09961 22.8008 1.09961 33.1006v169.5h32.0996v-80.6006c15.7002 18.7002 37.4004 24.2002 58.7002 24.2002c35.7002 0 75.4004 -24.0996 75.4004 -76.2002c0 -5.59961 -0.5 -11 -1.5 -16.1992
+c7.09961 24.3994 34.2998 33.5 76.7002 34.3994c13.6992 0.299805 29 0.400391 41.6992 0.400391v3.39941c0 23.4004 -15 33 -41 33c-19.2998 0 -33.5996 -8 -35 -21.7998h-33.6992c3.59961 34.4004 39.6992 43.1006 71.5 43.1006c27.3994 0 51.7998 -7 63.2998 -26
+l-10.9004 20.5996h37.5l54.9004 -109.9zM243.7 134.2c29.7998 0 50.2002 21.5 50.2002 53.7998c0 32.4004 -20.4004 53.7998 -50.2002 53.7998c-29.6006 0 -50.2002 -21.3994 -50.2002 -53.7998c0 -32.2998 20.5996 -53.7998 50.2002 -53.7998zM444.6 181.5v3.2998
+c-11.7998 0 -26.2998 -0.0996094 -39.3994 -0.599609c-29.1006 -0.900391 -47.2002 -6.2002 -47.2002 -25.2998c0 -12.4004 9.90039 -25.8008 35 -25.8008c33.7002 0 51.5996 18.4004 51.5996 48.4004zM32.7002 179.9c3.5 -58.3008 79.2002 -57.4004 91.2002 -21.6006
+h33.0996c-6.40039 -34.3994 -43 -46.0996 -74.4004 -46.0996c-57.1992 0 -82.5 31.5 -82.5 74c0 46.7998 26.2002 77.5996 83 77.5996c45.3008 0 78.4004 -23.7002 78.4004 -75.3994v-8.5h-128.8zM127.7 201.3c-2.2998 54.7002 -87.5 56.6006 -94.4004 0h94.4004z" />
+    <glyph glyph-name="keybase" unicode="&#xf4f5;" 
+d="M286.17 29c9.93652 0 18 -8.06445 18 -18s-8.06348 -18 -18 -18c-9.93555 0 -18 8.06445 -18 18s8.06445 18 18 18zM398.09 176.6c22.9102 -33.46 35.9102 -72.3398 35.9102 -110.92c0 -31.6797 -5 -60.6797 -14.5996 -86.2295
+c-3.04004 -8.0498 -10.9502 -12.7197 -18.3701 -11.1504c-6.83984 1.24023 -11.1201 9.28027 -8.60059 15.7402c11.1904 28.71 14.8799 58.3398 14.8799 81.6396c-0.0517578 7.91797 -1.30566 20.6543 -2.7998 28.4307
+c-0.649414 -1.06055 -1.12988 -2.2207 -1.84961 -3.2207c-17.29 -24.5293 -50.54 -33.8896 -84.7402 -23.8398c-78.8701 23.1699 -178.02 3.81055 -236.25 -38.5898l24.6602 74.1104l-46.8203 -59.8301c2.04297 -15.3486 9.10352 -39.1504 15.7598 -53.1299
+c6.25 -13.1904 0.460938 -18.2402 -3.75 -20.1104c-4.76953 -2.12012 -13.8594 -2.7998 -19.6396 7.33008c-5.43652 9.81641 -11.96 26.6436 -14.5596 37.5596l-23.3203 -29.7998v33.6406c0 55.7695 0 125.109 62.6504 188.409c11.4258 11.5684 32.1631 27.4902 46.29 35.54
+l-8.93066 0.540039c-27.8799 1.64062 -49.2402 24.8506 -47.6299 51.8506l2.36035 36.6797c0 -6.24023 0.139648 45.8799 50.75 45.8799c2.05957 0 -0.470703 0.120117 41.0596 -2.33008c2.31641 -0.15625 6.03027 -0.71582 8.29004 -1.25
+c7.41992 11.3398 15.6504 22.8301 24.3398 34.8906l5.48047 7.55957l22.8994 -13.5195c-11.29 -24 -10 -33 -9.39941 -35c9.08008 0.229492 20 -1.6709 32.4102 -5.77051c29.6523 -9.84375 53.7188 -43.1914 53.7188 -74.4355
+c0 -8.5127 -2.61621 -21.8154 -5.83887 -29.6943c6.18652 -2.13965 12.3135 -4.56348 18.3799 -7.27051c47.8896 -21.2598 77.7598 -59.0898 87.2598 -73.71zM142.37 319.42c1.55664 5.42773 4.69336 14.0156 7 19.1699l-29.1104 1.73047
+c0.610352 -0.0507812 -12.2598 0.849609 -13.2598 -11.3203l-2.41016 -36.6602c-0.00585938 -0.143555 -0.0107422 -0.376953 -0.0107422 -0.520508c0 -6.50293 5.27344 -12 11.7705 -12.2695l22.3809 -1.33984c-0.380859 3.10645 -0.689453 8.16797 -0.689453 11.2969
+c0 2.28809 0.165039 5.99414 0.369141 8.27344l-13.1299 0.779297l1.38965 21.79zM290.79 147.24c2.06152 1.58789 3.73438 4.9873 3.73438 7.58887c0 1.80273 -0.893555 4.42383 -1.99414 5.85059l-81.0898 96.3203c-1.71484 1.99023 -5.23828 3.60547 -7.86523 3.60547
+c-1.99023 0 -4.87305 -1.00098 -6.43555 -2.23535c-2.05957 -1.58398 -3.73242 -4.97949 -3.73242 -7.57812c0 -1.7998 0.892578 -4.41699 1.99316 -5.8418c0.0898438 -0.140625 18.5996 -22.1406 18.5996 -22.1406l-16.9102 -13.29
+c-1.59473 -1.22266 -2.88867 -3.8457 -2.88867 -5.85547c0 -1.37988 0.680664 -3.38867 1.51855 -4.48438c0.0800781 -0.109375 2.52246 -3.07324 3.7998 -4.5293c1.27832 -1.45703 3.8877 -2.63867 5.8252 -2.63867c1.4707 0 3.60547 0.734375 4.76562 1.63867
+l17.0898 13.4492l14.1396 -16.7393l-34.5703 -27.1807c-1.58398 -1.22266 -2.86914 -3.83984 -2.86914 -5.84082c0 -1.38574 0.685547 -3.40039 1.5293 -4.49902l15.7803 -18.6396c1.33594 -1.55176 4.08203 -2.81055 6.12988 -2.81055
+c1.54492 0 3.78516 0.775391 5 1.73047l34.4199 27l9.68066 -11.4902c1.7334 -1.98242 5.27832 -3.5918 7.91211 -3.5918c1.98438 0 4.86816 0.986328 6.4375 2.20215zM187.44 29c9.93555 0 18 -8.06445 18 -18s-8.06445 -18 -18 -18c-9.93652 0 -18 8.06445 -18 18
+s8.06348 18 18 18z" />
+    <glyph glyph-name="mastodon" unicode="&#xf4f6;" 
+d="M433 268.89c0 0 0.799805 -71.6992 -9 -121.5c-6.23047 -31.5996 -55.1104 -66.1992 -111.23 -72.8994c-20.0996 -2.40039 -93.1191 -14.2002 -178.75 6.7002v-0.339844c0 -3.75977 0.40332 -9.83496 0.900391 -13.5605c6.62988 -49.5996 49.2197 -52.5996 89.6299 -54
+c40.8105 -1.2998 77.1201 10.0996 77.1201 10.0996l1.7002 -36.8994s-28.5098 -15.2998 -79.3203 -18.1006c-28.0098 -1.59961 -62.8193 0.700195 -103.33 11.4004c-112.229 29.7002 -105.63 173.4 -105.63 289.1c0 97.2002 63.7197 125.7 63.7197 125.7
+c61.9209 28.4004 227.96 28.7002 290.48 0c0 0 63.71 -28.5 63.71 -125.7zM357.88 143.69c0 122 5.29004 147.71 -18.4199 175.01c-25.71 28.7002 -79.7197 31 -103.83 -6.10059l-11.5996 -19.5l-11.6006 19.5c-24.0098 36.9004 -77.9297 35 -103.83 6.10059
+c-23.6094 -27.1006 -18.4092 -52.9004 -18.4092 -175h46.7295v114.2c0 49.6992 64 51.5996 64 -6.90039v-62.5098h46.3301v62.5c0 58.5 64 56.5996 64 6.89941v-114.199h46.6299z" />
+    <glyph glyph-name="r-project" unicode="&#xf4f7;" horiz-adv-x="581" 
+d="M581 221.4c0 -54.8008 -33.9004 -104.301 -88.4004 -139.7l67.4004 -113.7h-112l-40.0996 75.4004c-21.8008 -6.5 -45.1006 -11.2002 -69.4004 -13.9004v-61.5h-99.0996v61.9004c-136.101 16.0996 -239.4 95.6992 -239.4 191.5c0 107.5 130.1 194.6 290.5 194.6
+s290.5 -87.0996 290.5 -194.6zM114.2 206.9c0 -52.8008 51.0996 -98.4004 125.2 -119.9v208.3h199s90.5996 -1.59961 90.5996 -87.8994c0 -86.3008 -86.5996 -92.7002 -86.5996 -92.7002s17.5996 -5.2998 27.7998 -10.5c1.7002 -0.799805 4 -2.10059 6.39941 -3.7002
+c43.8008 21.4004 70.3008 56.2998 70.3008 106.4c0 92.2998 -90 133 -211.9 133s-220.8 -59.5 -220.8 -133zM339.3 168.6c49.6006 0 87.7998 -8.19922 87.7998 28.3008c0 34.0996 -30 27.2998 -87.7998 27.2998v-55.6006zM338.4 96.0996v-22.0996
+c17.5996 0.0996094 34.5 1 50.5996 2.90039c-5.09961 7.5 -13.2002 19.1992 -24 19.1992h-26.5996z" />
+    <glyph glyph-name="researchgate" unicode="&#xf4f8;" 
+d="M0 416h448v-448h-448v448zM262.2 81.5996v7.30078c-10 0 -20 6.89941 -27.2002 14.6992c-12.2002 13.3008 -28.5996 34.7002 -42.2002 58.9004c22.5 5.2998 39.2002 26.4004 39.2002 47.5c0 31.2002 -24.2002 45.5996 -55.9004 45.5996
+c-17.7998 0 -45.0996 -1.59961 -70.8994 -0.599609v-8.09961c15.5996 -2.90039 22 -1.30078 22 -23.9004v-109.4c0 -22.5996 -6.5 -21 -22 -23.8994v-8.10059c7.5 0.200195 20.5 0.800781 33.5996 0.800781c12.5 0 28.7002 -0.5 35.6006 -0.800781v8.10059
+c-19.8008 2.7002 -25.8008 0.399414 -25.8008 23.8994v46.4004c6.7002 -0.599609 12.5 -0.599609 21.4004 -0.599609c16.9004 -30.3008 33 -53 42.2002 -63.6006c16.7998 -20.2002 43.3994 -17.2002 50 -14.2002zM285.1 216.6c38.7002 0 34 29.4004 34 49.9004h-30.3994
+v-10.7002h17.8994c0 -15.8994 -7.39941 -26.7998 -21.5 -26.7998c-11.2998 0 -17.8994 9.90039 -17.8994 23.2998v26.7998c0 12.4004 11.7998 19.7002 19.7002 19.7002c14.1992 0 19.6992 -12.5 19.6992 -12.5l10.7002 7.2002s-5.2002 17.9004 -30.3994 17.9004
+c-25.2002 0 -34 -18.2002 -34 -30.4004v-32.2002c0 -16.5 8.89941 -32.2002 32.1992 -32.2002zM168.6 171.9c-9.39941 0 -13.5996 0.299805 -20 0.799805v69.7002c6.40039 0.599609 15 0.599609 22.5 0.599609c23.3008 0 37.2002 -12.2002 37.2002 -34.5
+c0 -21.9004 -15 -36.5996 -39.7002 -36.5996z" />
+    <glyph glyph-name="teamspeak" unicode="&#xf4f9;" horiz-adv-x="512" 
+d="M244.2 101.21c-2.40039 -12.5 -10.6006 -20 -22.5 -24.2998c-9.2002 -3.2002 -50.1006 -1.60059 -61.7002 -1c-18 1.2998 -33.2002 8.5 -43.4004 24c-14.5 22.5 -19.5 47.7002 -14.5 73.8994c4.60059 24.5 24.6006 34.7002 46.3008 22.7002
+c15.1992 -7.5 42.5 -27.3994 63.3994 -46.5996c20.4004 -18.7002 34.7998 -36.4004 32.4004 -48.7002zM449.2 80.4102c6.7002 -5.41016 11.2002 -22 11.5996 -32.1006c1 -50.3994 -23.8994 -68 -46.5996 -85.3994c-65.1006 -50 -295.101 -16.9004 -145.4 -6.40039
+c127.4 9 164.101 96.1006 172.101 121.5c0.647461 1.99023 2.87109 3.60547 4.96387 3.60547c1.04102 0 2.53516 -0.540039 3.33594 -1.20508zM511.2 202.81c0 -17.1992 1.89941 -34.5996 -1 -51.6992c-4 -24.7002 -29.1006 -41.7002 -53.2002 -36.7002
+c-7.2002 1.7002 -9.40039 7.2002 -9.40039 14.2002c0 28.0996 0.800781 56.3994 0 84.5996c-1.89941 75.79 -36.1992 132.79 -102.3 169.4c-111 60.3896 -253.2 -7 -277.8 -131.5c-6.09961 -30.4004 -1.7002 -48.3008 -3.7002 -125.801
+c-0.299805 -7.19922 -4.2998 -11.1992 -12 -11.5c-30.7998 -1.39941 -51.7998 18.2002 -51.7998 49v20.9004l0.799805 26.4902c2.40039 15.5 10.7002 27 24.9004 34c3.5 1.7998 5.7002 3.5 6.39941 7.7998c6.10059 33.4102 19.5 64 39.3008 91.71
+c2.2998 3.09961 4 5.2998 1 9.2998c-3.7002 5.40039 -1 10.2002 3 14.5c28.0996 31.7998 61.8994 55.1006 102 67.4004c96 29.4668 180.1 9.29688 252.3 -60.5098c6.7002 -6.40039 15.5 -12.9004 7 -24.4004c-1.2998 -1.7998 1.09961 -3.5 2.2002 -5
+c17.2246 -23.209 35.3242 -65.1367 40.3994 -93.5898c0.900391 -3.7002 3 -5.10059 5.90039 -6.40039c17.3994 -8.7998 25.7002 -23.2998 26 -42.2002zM351.6 71.3096l-51.5996 7.7002c-22.7998 5.90039 -51 32.7002 22.2002 60.7998
+c21.5996 8.5 85.7002 37.2002 87.7998 -8c0.900391 -32 -21.9004 -63.2998 -58.4004 -60.5z" />
+    <glyph glyph-name="first-order-alt" unicode="&#xf50a;" horiz-adv-x="496" 
+d="M248 440c136.97 0 248 -111.03 248 -248s-111.03 -248 -248 -248s-248 111.03 -248 248s111.03 248 248 248zM248 -48.21c132.66 0 240.21 107.55 240.21 240.21s-107.55 240.21 -240.21 240.21s-240.21 -107.55 -240.21 -240.21s107.55 -240.21 240.21 -240.21z
+M248 411.71c121.34 0 219.71 -98.3701 219.71 -219.71s-98.3701 -219.71 -219.71 -219.71s-219.71 98.3701 -219.71 219.71s98.3701 219.71 219.71 219.71zM248 -19.5098c116.81 0 211.51 94.7002 211.51 211.51s-94.7002 211.51 -211.51 211.51
+s-211.51 -94.6895 -211.51 -211.51s94.7002 -211.51 211.51 -211.51zM434.23 143.47c-3.69141 -14.209 -12.709 -36.0225 -20.1309 -48.6895l-74.1299 35.8799l61.4805 -54.8203c-8.85352 -11.7021 -25.5195 -28.4082 -37.2002 -37.29l-54.7998 61.5703l35.8799 -74.2705
+c-12.6445 -7.45215 -34.4307 -16.5156 -48.6299 -20.2295l-27.29 78.4697l4.79004 -82.9297c-8.61035 -1.17969 -17.4004 -1.7998 -26.3301 -1.7998s-17.7197 0.620117 -26.3301 1.7998l4.75977 82.46l-27.1494 -78.0303c-14.2021 3.70996 -35.998 12.7588 -48.6504 20.2002
+l35.9297 74.3398l-54.8701 -61.6396c-11.6836 8.87988 -28.3584 25.582 -37.2197 37.2793l61.5898 54.9004l-74.2598 -35.9297c-7.42383 12.667 -16.4463 34.4795 -20.1396 48.6895l77.8398 27.1104l-82.2305 -4.75977c-1.15918 8.56934 -1.7793 17.3193 -1.7793 26.21
+c0 9 0.629883 17.8398 1.81934 26.5098l82.3799 -4.76953l-77.9395 27.1592c3.71973 14.208 12.7822 36.0127 20.2295 48.6699l74.2207 -35.9199l-61.5205 54.8604c8.88086 11.6836 25.582 28.3584 37.2803 37.2197l54.7598 -61.5293l-35.8301 74.1699
+c12.6562 7.41895 34.4521 16.4375 48.6504 20.1299l26.8701 -77.25l-4.70996 81.6094c8.60938 1.18066 17.3896 1.80078 26.3193 1.80078c8.93066 0 17.71 -0.620117 26.3203 -1.80078l-4.74023 -82.1592l27.0498 77.7598c17.2705 -4.5 33.6006 -11.3506 48.6309 -20.1699
+l-35.8203 -74.1201l54.7197 61.4697c11.6924 -8.86133 28.376 -25.54 37.2402 -37.2295l-61.4502 -54.7705l74.1201 35.8604c7.43945 -12.6533 16.4893 -34.4492 20.2002 -48.6504l-77.8105 -27.0996l82.2402 4.75c1.19043 -8.66016 1.82031 -17.5 1.82031 -26.4902
+c0 -8.87988 -0.610352 -17.6299 -1.78027 -26.1904l-82.1201 4.75z" />
+    <glyph glyph-name="fulcrum" unicode="&#xf50b;" horiz-adv-x="320" 
+d="M95.75 283.86l-35.3799 -43.5508l-35.3701 43.5508l35.3799 43.5498zM144.23 448v-211.11l-41.0801 -44.8896l41.0801 -44.8896v-211.11l-20.5107 198.18l-51 57.8203l50.9707 57.8203zM223.9 283.86l35.3799 43.5498l35.3799 -43.5498l-35.3799 -43.5508zM175.42 236.86
+v211.14l20.5801 -198.18l51 -57.8203l-51 -57.8203l-20.5801 -198.18v211.11l41.0801 44.8896z" />
+    <glyph glyph-name="galactic-republic" unicode="&#xf50c;" horiz-adv-x="496" 
+d="M248 -56c-136.75 0 -248 111.25 -248 248s111.25 248 248 248s248 -111.25 248 -248s-111.25 -248 -248 -248zM248 423.47c-127.63 0 -231.47 -103.84 -231.47 -231.47s103.84 -231.47 231.47 -231.47s231.47 103.84 231.47 231.47s-103.84 231.47 -231.47 231.47z
+M275.62 401.66c37.6602 -4.91016 72.21 -19.7402 100.96 -41.7998l-17.3896 -17.3604c-20.6758 15.3154 -58.1152 30.7891 -83.5703 34.54v24.6201zM220.25 401.59v-24.54c-30.9697 -4.60938 -59.4502 -16.8301 -83.5195 -34.6699h-0.0800781l-17.2803 17.3604
+c28.7197 22.0498 63.2402 36.9102 100.88 41.8496zM232.5 351.42h31v-82.8604c10.0498 -2.0293 19.3701 -6.00977 27.6201 -11.5l58.6699 58.6709l21.9297 -21.9307l-58.6699 -58.6699c5.46973 -8.24023 9.48047 -17.5996 11.5 -27.6201h82.8701v-31h-82.8701
+c-2.03027 -10.0195 -6.04004 -19.3096 -11.5 -27.54l58.6699 -58.6895l-21.9297 -21.9307l-58.6699 58.6904c-8.25 -5.49023 -17.5703 -9.52051 -27.6201 -11.5498v-82.9004h-31v82.9004c-8.25781 1.66895 -20.6533 6.80762 -27.6699 11.4697l-58.6201 -58.6201
+l-21.9297 21.9297l58.6699 58.6904c-5.45996 8.23047 -9.4502 17.5205 -11.4697 27.54h-82.9004v31h82.9004c2.01953 10.0303 6 19.3896 11.4697 27.6201l-58.6699 58.6699l21.9297 21.9297l58.6201 -58.5898c8.25 5.48047 17.6299 9.38965 27.6699 11.4199v82.8701z
+M415.74 320.7c22.0996 -28.7402 36.9795 -63.3398 41.9297 -101.03h-24.6201c-3.7832 25.4902 -19.3154 62.9746 -34.6699 83.6699zM80.1904 320.57l17.3896 -17.3906c-17.8301 -24.0693 -29.9902 -52.5596 -34.5898 -83.5195h-24.6504
+c4.94043 37.6494 19.79 72.1895 41.8506 100.91zM38.3398 164.33l24.6504 0.00976562c4.58984 -30.9502 16.7002 -59.4502 34.5098 -83.5195l-17.3604 -17.3906c-22.0498 28.7207 -36.8799 63.2607 -41.7998 100.9zM433.04 164.33h24.6201
+c-4.9502 -37.6699 -19.8506 -72.2197 -41.9297 -100.96l-17.3604 17.3604c17.8701 24.0996 30.0596 52.6094 34.6699 83.5996zM136.66 41.6201c24.0703 -17.8604 52.6094 -30.0205 83.5996 -34.6504v-24.6396c-37.6602 4.9502 -72.2295 19.8398 -100.96 41.9297z
+M359.19 41.5703h0.0791016l17.3105 -17.3906c-28.75 -22.0596 -63.29 -36.9297 -100.96 -41.8496v24.5703c30.9902 4.58984 59.4795 16.8301 83.5703 34.6699z" />
+    <glyph glyph-name="galactic-senate" unicode="&#xf50d;" horiz-adv-x="512" 
+d="M249.86 414.52h12.2793v-26.0693c13.5801 -20.6201 23.8604 -108.59 24.4902 -215.351c-11.7402 15.6201 -19.1299 33.3301 -19.1299 48.2402v16.8799c0.0302734 5.32031 -0.75 10.5303 -2.19043 15.6504c-0.649414 2.13965 -1.38965 4.07031 -2.61914 5.82031
+c-1.23047 1.73926 -3.44043 3.79004 -6.68066 3.79004c-3.25 0 -5.4502 -2.04004 -6.67969 -3.79004c-1.23047 -1.74023 -1.96973 -3.68066 -2.62012 -5.82031c-1.44043 -5.12012 -2.21973 -10.3301 -2.19043 -15.6504v-16.8799
+c0 -14.9102 -7.38965 -32.6201 -19.1299 -48.2402c0.610352 106.761 10.8906 194.73 24.4707 215.351v26.0693zM223.52 266.75c-1.59961 -22.4004 -2.75 -46.5195 -3.47949 -72.0703c-23.2998 -11.2793 -40.7705 -33.1602 -46.3203 -59.5098
+c-7.71973 -2.25977 -22.71 -3.91992 -40.4893 -4.21973c-7.51074 3.66016 -16.5 5.85938 -26.1807 6.04004c1.90039 14.9102 5.87012 29.1699 11.6504 42.4199c15.4395 -8.10059 30.9297 -8.66016 35.4697 -0.959961c4.57031 7.74023 -3.58984 21.04 -18.3203 30.6602
+c8.68066 11.7695 18.9805 22.2998 30.5605 31.0898c9.50977 -15.5898 23.3594 -24.4404 31.3594 -19.8203c8.05078 4.65039 7.19043 21.1699 -1.70996 37.29c8.76074 3.88965 17.9404 6.92969 27.46 9.08008zM288.48 266.75
+c7.82227 -1.75977 20.1201 -5.82812 27.4492 -9.08008c-8.89941 -16.1299 -9.75977 -32.6396 -1.70996 -37.29c8 -4.62012 21.8506 4.23047 31.3604 19.8203c11.5801 -8.79004 21.8799 -19.3203 30.5596 -31.0898c-14.7197 -9.61035 -22.8896 -22.9199 -18.3193 -30.6602
+c4.54004 -7.7002 20.0293 -7.14062 35.4697 0.959961c5.79004 -13.25 9.75 -27.5098 11.6504 -42.4199c-9.68066 -0.19043 -18.6709 -2.37988 -26.1807 -6.04004c-17.7793 0.299805 -32.7695 1.95996 -40.4902 4.21973c-5.5498 26.3496 -23.0293 48.2305 -46.3193 59.5098
+c-0.719727 25.5508 -1.87988 49.6699 -3.46973 72.0703zM256 258.15c3.23047 0 5.86035 -8.81055 6.08984 -19.9307h0.0498047v-16.8799c0 -41.4199 49.0107 -95.04 93.4902 -95.04c52 0 122.76 1.4502 156.37 -29.1699v-2.50977
+c-9.41992 -17.1104 -20.5801 -33.1699 -33.1797 -47.9697c-12.5303 21.0898 -51.5898 40.96 -108.021 41.3496c-45.6797 -1.01953 -79.0195 -20.3301 -90.7598 -40.8701c-0.00976562 -0.00976562 0.00976562 -0.0400391 0 -0.0498047
+c-7.66992 -2.13965 -15.8496 -3.23047 -24.04 -3.20996c-8.19043 -0.0205078 -16.3701 1.07031 -24.04 3.20996c-0.00976562 0.00976562 0.00976562 0.0400391 0 0.0498047c-11.7295 20.54 -45.0801 39.8506 -90.7598 40.8701
+c-56.4307 -0.400391 -95.5 -20.2598 -108.021 -41.3496c-12.5996 14.7998 -23.7598 30.8496 -33.1797 47.9697v2.50977c33.6201 30.6201 104.37 29.1699 156.37 29.1699c44.4795 0 93.4902 53.6201 93.4902 95.04v16.8799h0.0498047
+c0.229492 11.1201 2.85938 19.9307 6.08984 19.9307zM256 161.56c-22.4199 0 -40.5996 -18.1797 -40.5996 -40.5996s18.1797 -40.6504 40.5996 -40.6504s40.5996 18.2305 40.5996 40.6504s-18.1797 40.5996 -40.5996 40.5996zM256 153.92
+c18.1904 0 32.96 -14.7695 32.96 -32.96s-14.7695 -32.96 -32.96 -32.96s-32.96 14.7695 -32.96 32.96s14.7695 32.96 32.96 32.96zM256 147.78c-14.8096 0 -26.8203 -12.0107 -26.8203 -26.8203s12.0107 -26.8203 26.8203 -26.8203s26.8203 12.0107 26.8203 26.8203
+s-12.0107 26.8203 -26.8203 26.8203zM141.2 81.1104c18.75 -0.419922 35.1895 -4.18066 48.6094 -9.66992c12.5508 -16.0303 29.1602 -30.04 49.5801 -33.0703c0.100586 -0.00976562 0.169922 -0.0302734 0.270508 -0.0498047
+c0.0498047 -0.0107422 0.109375 -0.0400391 0.160156 -0.0507812c5.23926 -1.06934 10.6396 -1.59961 16.1895 -1.59961c5.56055 0 10.9502 0.530273 16.1904 1.59961c0.0498047 0.0107422 0.109375 0.0400391 0.160156 0.0507812
+c0.0996094 0.00976562 0.179688 0.0292969 0.269531 0.0498047c20.4199 3.04004 37.04 17.04 49.5801 33.0703c13.4199 5.5 29.8496 9.25 48.6104 9.66992c10.1797 -0.0800781 21.5996 -0.360352 30.5 -1.66016c-0.430664 -4.41992 -1.51074 -18.6299 -7.11035 -29.7598
+c-9.11035 2.55957 -18.3604 3.89941 -27.6201 3.89941c-41.2803 -0.939453 -71.4795 -34.3496 -78.2598 -74.4697l-0.110352 -4.7002c-10.3994 -1.91992 -21.1797 -2.93945 -32.21 -2.93945c-11.0195 0 -21.8096 1.0293 -32.21 2.93945l-0.109375 4.7002
+c-6.78027 40.1201 -36.9805 73.5303 -78.2607 74.4697c-9.25977 0 -18.5098 -1.33984 -27.6201 -3.89941c-5.59961 11.1299 -6.67969 25.3398 -7.10938 29.7598c8.89941 1.2998 20.3096 1.58984 30.5 1.66016z" />
+    <glyph glyph-name="jedi-order" unicode="&#xf50e;" 
+d="M398.5 74.4004c0 0 26.2998 16.1992 49.9004 77.6992c0 0 -17 -183.3 -222 -185.699h-4.10059c-205.1 2.39941 -222 185.699 -222 185.699c23.2002 -61.5996 49.4004 -77.6992 49.4004 -77.6992c-95.9004 122.1 -17.2002 233.1 -17.2002 233.1
+c-45.4004 -85.7002 41.4004 -170.5 41.4004 -170.5c-105 171.6 60.5 271.5 60.5 271.5c-96.9004 -72.5996 10.0996 -190.7 10.0996 -190.7c-85.7998 -158.399 68.5996 -230.1 68.5996 -230.1s0.400391 16.8994 2.2002 85.7002l-34.5 -36.2002l24.2002 47.3994
+l-62.5996 9.10059l62.5996 9.09961l-20.2002 55.5l31.4004 -45.8994c2.2998 87.8994 7.89941 305.899 7.89941 306.899v2.40039v-1v1v-2.40039c0.100586 -1.7998 5.7002 -219.2 7.90039 -306.899l31.4004 45.8994l-20.2002 -55.5l62.5996 -9.09961l-62.5996 -9.10059
+l24.2002 -47.3994s-30.2002 31.7002 -34.5 36.2002c1.7998 -68.8008 2.19922 -85.7002 2.19922 -85.7002s154.4 71.7002 68.6006 230.1c0 0 107 118 10.0996 190.7c0 0 165.5 -100 60.5 -271.5c0 0 86.7998 84.7002 41.4004 170.5c0 0 78.7002 -111 -17.2002 -233.1z" />
+    <glyph glyph-name="mandalorian" unicode="&#xf50f;" 
+d="M232.27 -63.8896c-1 3.25977 -1.68945 15.8301 -1.38965 24.5801c0.549805 15.8896 1 24.7197 1.40039 28.7598c0.639648 6.2002 2.87012 20.7197 3.2793 21.3799c0.600586 1 0.400391 27.8701 -0.239258 33.1299c-0.310547 2.58008 -0.629883 11.9004 -0.69043 20.7305
+c-0.129883 16.4697 -0.530273 20.1191 -2.72949 24.7598c-1.10059 2.31934 -1.23047 3.83984 -1 11.4297c0.0449219 1.07324 0.0820312 2.81641 0.0820312 3.89062c0 2.43945 -0.189453 6.39062 -0.422852 8.81934c-2 13 -3.45996 27.7002 -3.25 33.9004
+s0.430664 7.14941 2.06055 9.66992c3.0498 4.70996 6.50977 14 8.62012 23.2695c2.25977 9.86035 3.87988 17.1807 4.58984 20.7402c0.921875 4.24121 2.90137 10.9834 4.41992 15.0498c2.26953 6.25 2.49023 15.3906 0.370117 15.3906
+c-0.299805 0 -1.37988 -1.2207 -2.41016 -2.70996c-1.03027 -1.49023 -4.75977 -4.80078 -8.29004 -7.36035c-8.37012 -6.08008 -11.7002 -9.38965 -12.6602 -12.5801s-1 -7.22949 -0.160156 -7.75977c0.34082 -0.209961 1.29004 -2.40039 2.11035 -4.87988
+c0.791992 -2.41602 1.43457 -6.43945 1.43457 -8.98145c0 -1.78223 -0.320312 -4.64062 -0.714844 -6.37891c-0.389648 -1.76953 -1 -5.46973 -1.45996 -8.22949c-0.459961 -2.76074 -1 -6.46094 -1.25 -8.2207c-0.149414 -1.27637 -0.84375 -3.18555 -1.5498 -4.25977
+c-1 -1 -1.13965 -0.910156 -2.0498 0.530273c-0.619141 1.24316 -1.26465 3.37109 -1.44043 4.75c-0.25 1.73926 -1.62988 7.10938 -3.08008 11.9297c-3.2793 10.9004 -3.51953 16.1504 -1 21c0.683594 1.19141 1.43164 3.25684 1.66992 4.61035
+c0 2.38965 -2.19922 5.31934 -7.40918 9.88965c-7 6.17969 -8.62988 7.91992 -10.2305 11.2998c-1.70996 3.60059 -3.05957 4.06055 -4.54004 1.54004c-1.78027 -3 -2.59961 -9.10938 -3 -22l-0.339844 -12.1895l2 -2.25c3.20996 -3.7002 12.0703 -16.4502 13.7803 -19.8301
+c3.41016 -6.74023 4.33984 -11.6904 4.41016 -23.5605c0.0693359 -11.8701 0.949219 -22.75 2 -24.71c0.359375 -0.660156 0.509766 -1.34961 0.339844 -1.51953s0.410156 -2.08984 1.29004 -4.27051c0.871094 -2.41406 1.79395 -6.44629 2.05957 -9
+c0.306641 -2.88867 1.07227 -7.53516 1.70996 -10.3701c2.23047 -9.55957 2.77051 -14.0801 2.39062 -20.1396c-0.200195 -3.26953 -0.530273 -11.0703 -0.730469 -17.3203c-1.30957 -41.7598 -1.84961 -58 -2 -61.21c-0.120117 -2 -0.389648 -11.5098 -0.599609 -21.0693
+c-0.360352 -16.3008 -1.30078 -27.3701 -2.41992 -28.6504c-0.640625 -0.729492 -8.07031 4.91016 -12.5205 9.49023c-3.75 3.87012 -4 4.79004 -2.83008 9.9502c0.700195 3 2.25977 18.29 3.33008 32.6191c0.360352 4.78027 0.80957 10.5 1 12.7109
+c0.830078 9.36914 1.66016 20.3496 2.61035 34.7793c0.55957 8.45996 1.33008 16.4404 1.71973 17.7305s0.889648 9.88965 1.12988 19.1094l0.429688 16.7705l-2.25977 4.2998c-1.71973 3.28027 -4.87012 6.94043 -13.2197 15.3398
+c-6 6.07031 -11.8398 12.2998 -12.9102 13.8506l-1.9502 2.80957l0.75 10.9004c1.08984 15.71 1.10059 48.5693 0 59.0596l-0.889648 8.7002l-3.28027 4.51953c-5.85938 8.08008 -5.7998 7.75 -6.21973 33.2705c-0.100586 6.07031 -0.379883 11.5 -0.629883 12.0596
+c-0.830078 1.87012 -3.0498 2.66016 -8.54004 3.05078c-8.86035 0.619141 -11 1.89941 -23.8506 14.5498c-6.14941 6 -12.3398 12 -13.75 13.1895c-2.80957 2.41992 -2.79004 2 -0.55957 9.62988l1.34961 4.65039l-1.68945 3c-0.630859 1.17676 -1.79102 3 -2.58984 4.07031
+c-1.33008 1.50977 -5.5 10.8896 -6 13.4893c-0.0859375 0.307617 -0.155273 0.816406 -0.155273 1.13574c0 0.868164 0.458984 2.10645 1.02539 2.76465c2.22949 2.86035 3.39941 5.67969 4.44922 10.7305c2.33008 11.1895 7.74023 26.0898 10.6006 29.2197
+c3.17969 3.46973 7.7002 1 9.41016 -5c1.33984 -4.79004 1.36914 -9.79004 0.0996094 -18.5498c-0.445312 -3.05176 -0.893555 -8.02832 -1 -11.1104c0 -4 0.19043 -4.69043 2.25 -7.38965c3.33008 -4.37012 7.72949 -7.41016 15.2002 -10.5205
+c1.41992 -0.591797 3.53418 -1.86914 4.71973 -2.84961c11.1699 -10.7207 18.6201 -16.1807 22.9502 -16.8506c5.17969 -0.799805 8 -4.54004 10 -13.3896c1.30957 -5.65039 4 -11.1396 5.45996 -11.1396c0.994141 0.203125 2.48633 0.826172 3.33008 1.38965
+c2 1.21973 2.25 1.73047 2.25 4.17969c-0.21875 4.96191 -1.11523 12.9541 -2 17.8398c-0.370117 1.66016 -0.780273 4.06055 -0.930664 5.35059c-0.149414 1.29004 -0.609375 3.84961 -1 5.68945c-2.5498 11.1602 -3.64941 15.46 -4.09961 16
+c-1.5498 2 -4.08008 10.2002 -4.92969 15.9209c-1.64062 11.1094 -4 14.2295 -12.9102 17.3896c-4.0791 1.50293 -10.0547 5.0332 -13.3398 7.87988c-1.15039 1 -4 3.21973 -6.35059 5.05957c-2.34961 1.84082 -4.40918 3.53027 -4.59961 3.76074
+c-0.701172 0.606445 -1.90625 1.50293 -2.69043 2c-6.23926 4.21973 -8.83984 7 -11.2598 12l-2.43945 5l-0.220703 13l-0.219727 13l6.91016 6.5498c3.9502 3.75 8.47949 7.34961 10.5898 8.42969c3.30957 1.69043 4.4502 1.89062 11.3701 2
+c8.53027 0.19043 10.1201 0 11.6602 -1.55957c1.54004 -1.56055 1.35938 -6.40039 -0.290039 -8.5c-0.501953 -0.564453 -1.10156 -1.60352 -1.33984 -2.32031c0 -0.580078 -2.61035 -4.91016 -5.41992 -9c-0.879883 -1.80371 -1.94141 -4.85938 -2.37012 -6.82031
+c20.4395 -13.3896 21.5498 -3.76953 14.0693 -29l11.3604 -2.51953c3.11035 8.66016 6.46973 17.2598 8.61035 26.2197c0.290039 7.62988 -12 4.19043 -15.4004 8.68066c-2.33008 5.92969 3.12988 14.1797 6.05957 19.1992c1.60059 2.33984 6.62012 4.7002 8.82031 4.15039
+c0.879883 -0.219727 4.16016 0.349609 7.37012 1.28027c2.04395 0.641602 5.42676 1.39453 7.5498 1.67969c1.69336 0.183594 4.38184 0.760742 6 1.29004c3.65039 1.11035 4.5 1.16992 6.35059 0.400391c1.56738 -0.539062 4.1748 -1.14844 5.81934 -1.36035
+c1.74902 -0.236328 4.43652 -1.0918 6 -1.91016c1.30762 -0.765625 3.54785 -1.73828 5 -2.16992c2.51074 -0.679688 3 -0.570312 7.05078 1.66992l4.34961 2.40039l10.7402 0.389648c10.4395 0.400391 10.8096 0.469727 15.2598 2.67969l4.58008 2.32031l2.45996 -1.42969
+c1.75977 -1 3.13965 -2.73047 4.84961 -6c2.36035 -4.51074 2.37988 -4.58008 1.37012 -7.37012c-0.879883 -2.44043 -0.889648 -3.2998 -0.0996094 -6.39062c0.435547 -1.68164 1.37695 -4.3291 2.09961 -5.90918c0.535156 -1.04785 1.12207 -2.83984 1.31055 -4
+c0.30957 -4.33008 0 -5.30078 -2.41016 -6.91992c-2.16992 -1.4707 -7 -7.91016 -7 -9.34082c-0.206055 -0.859375 -0.685547 -2.2041 -1.07031 -3c-5 -11.5098 -6.75977 -13.5596 -14.2598 -17c-9.2002 -4.19922 -12.2998 -5.18945 -16.21 -5.18945
+c-3.10059 0 -4 -0.25 -4.54004 -1.25977c-0.972656 -1.19629 -2.80566 -2.8584 -4.08984 -3.70996c-1.53223 -1.02344 -3.49512 -3.16504 -4.37988 -4.78027c-0.411133 -1.04004 -1.52734 -2.34375 -2.49023 -2.91016
+c-0.78125 -0.321289 -1.87891 -1.08789 -2.4502 -1.70996c-1.83496 -1.61133 -4.9707 -4.02148 -7 -5.37988c-3.33008 -2.33984 -6.87012 -5 -7.87012 -6c-0.560547 -0.604492 -1.62695 -1.36621 -2.37988 -1.7002c-0.697266 -0.314453 -1.65137 -1.05273 -2.12988 -1.65039
+c-1.31055 -1.38965 -1.49023 -2.10938 -1.13965 -4.59961c0.255859 -1.65527 0.892578 -4.29004 1.41992 -5.87988c1.31934 -3.7998 1.30957 -7.86035 0 -10.5703c-1.31055 -2.70996 -0.890625 -6.64941 1.34961 -9.58984c2 -2.62988 2.16016 -4.55957 0.709961 -8.83984
+c-0.587891 -2.27344 -1.06445 -6.02344 -1.06445 -8.37109c0 -0.148438 0.00195312 -0.390625 0.00488281 -0.539062c0 -4.87988 0.219727 -6.28027 1.45996 -8.37988c1.23926 -2.09961 1.81934 -2.48047 3.23926 -2.32031c2 0.230469 2.30078 1.0498 4.70996 12.1201
+c2.18066 10 3.70996 11.9199 13.7607 17.0801c2.93945 1.50977 7.45996 4 10 5.44043c2.54004 1.43945 6.79004 3.68945 9.37012 4.90918c4.99414 2.18652 11.8125 7.41504 15.2197 11.6709c7.10938 8.78906 10 16.2197 12.8496 33.2998
+c0.298828 2.31445 1.58008 5.77832 2.86035 7.72949c1.19434 1.86133 2.48828 5.13574 2.88965 7.31055c1 5.2998 2.85059 9.08008 5.58008 11.5098c4.7002 4.17969 6 1.08984 4.58984 -10.8701c-0.459961 -3.86035 -1.09961 -10.3301 -1.43945 -14.3799l-0.610352 -7.36035
+l4.4502 -4.08984l4.4502 -4.08984l0.109375 -8.41992c0.0605469 -4.62988 0.470703 -9.53027 0.919922 -10.8896l0.820312 -2.4707l-6.42969 -6.2793c-8.54004 -8.33008 -12.8799 -13.9307 -16.7598 -21.6104c-1.77051 -3.49023 -3.74023 -7.11035 -4.38086 -8
+c-2.17969 -3.11035 -6.45996 -13 -8.75977 -20.2598l-2.29004 -7.2207l-7 -6.48926c-3.83008 -3.57031 -8 -7.25 -9.16992 -8.16992c-3.0498 -2.32031 -4.25977 -5.15039 -4.25977 -10c-0.00683594 -0.166992 -0.0126953 -0.438477 -0.0126953 -0.605469
+c0 -1.94336 0.717773 -4.9248 1.60254 -6.65527c0.660156 -1.29688 1.59668 -3.45996 2.08984 -4.83008c0.290039 -0.875 0.993164 -2.16992 1.57031 -2.88965c1.40039 -1.58984 1.91992 -16.1201 0.830078 -23.2197c-0.679688 -4.48047 -3.62988 -12 -4.7002 -12
+c-1.79004 0 -4.05957 -9.27051 -5.07031 -20.7402c-0.179688 -2 -0.620117 -5.94043 -1 -8.7002s-1 -10 -1.34961 -16.0498c-0.770508 -12.2197 -0.19043 -18.7705 2 -23.1504c3.41016 -6.68945 0.519531 -12.6895 -11 -22.8398l-4 -3.49023l0.0703125 -5.18945
+c0.0439453 -2.4834 0.554688 -6.45703 1.13965 -8.87012c4.61035 -16 4.73047 -16.9199 4.37988 -37.1299c-0.459961 -26.4004 -0.259766 -40.2705 0.629883 -44.1504c0.410156 -1.91406 0.893555 -5.05078 1.08008 -7c0.169922 -2 0.660156 -5.33008 1.08008 -7.35938
+c0.469727 -2.26074 0.780273 -11 0.790039 -22.7402v-19.0605l-1.80957 -2.62988c-2.70996 -3.91016 -15.1104 -13.54 -15.4902 -12.29zM261.8 -18.7803c-0.179688 0.299805 -0.330078 6.87012 -0.330078 14.5898c0 14.0605 -0.889648 27.54 -2.25977 34.4502
+c-0.400391 2 -0.80957 9.7002 -0.900391 17.0605c-0.149414 11.9297 -1.39941 24.3701 -2.63965 26.3799c-0.660156 1.06934 -3 17.6602 -3 21.2998c0 4.23047 1 6 5.28027 9.12988s4.85938 3.13965 5.47949 0.719727c0.280273 -1.09961 1.4502 -5.61914 2.60059 -10
+c3.92969 -15.1191 4.13965 -16.2695 4.0498 -21.7393c-0.0996094 -5.78027 -0.129883 -6.12988 -1.74023 -17.7305c-1 -7.07031 -1.16992 -12.3896 -1 -28.4297c0.169922 -19.4004 -0.639648 -35.7305 -2 -41.2705c-0.709961 -2.7793 -2.7998 -5.47949 -3.42969 -4.42969z
+M190.8 18.7998c-0.638672 2.95215 -1.41406 7.78613 -1.72949 10.79s-1.09082 7.83789 -1.73047 10.79c-0.433594 1.76758 -0.880859 4.6748 -1 6.49023c-0.30957 3.18945 -0.910156 7.45996 -1.33008 9.47949c-1 4.79004 -3.34961 19.3506 -3.41992 21.0703
+c0 0.740234 -0.339844 4.0498 -0.700195 7.36035c-0.669922 6.20996 -0.839844 27.6699 -0.219727 28.29c1 1 6.62988 -2.76074 11.3301 -7.43066l5.28027 -5.25l-0.450195 -6.46973c-0.25 -3.55957 -0.599609 -10.2295 -0.780273 -14.8301
+c-0.179688 -4.59961 -0.490234 -9.87012 -0.669922 -11.71s-0.610352 -9.36035 -0.939453 -16.7197c-0.790039 -17.4102 -1.94043 -31.29 -2.65039 -32c-0.101562 -0.107422 -0.302734 -0.193359 -0.450195 -0.193359c-0.208008 0 -0.454102 0.149414 -0.549805 0.333008
+h0.00976562zM103.62 285.39c21.0703 -12.79 17.8398 -14.1494 28.4902 -17.6592c13 -4.29004 18.8701 -7.13086 23.1494 -16.8701c-43.6602 -36.1406 -69.0098 -57.8604 -76.71 -70.8604c-31 -52 -6 -101.59 62.75 -87.21c-14.1797 -29.2305 -78 -28.6299 -98.6797 4.90039
+c-24.6797 39.9492 -22.0898 118.3 61 187.659v0.0400391zM314.41 106.39c56.6602 -6.87988 82.3203 37.7402 46.54 89.2305c0 0 -26.8701 29.3398 -64.2803 68c3 15.4502 9.49023 32.1201 30.5703 53.8203c89.2002 -63.5107 92 -141.61 92.46 -149.36
+c4.2998 -70.6396 -78.7002 -91.1797 -105.29 -61.71v0.0195312z" />
+    <glyph glyph-name="old-republic" unicode="&#xf510;" horiz-adv-x="496" 
+d="M235.76 437.77c7.5 0.310547 15 0.280273 22.5 0.0908203c3.61035 -0.140625 7.2002 -0.400391 10.79 -0.730469c4.91992 -0.269531 9.79004 -1.03027 14.6699 -1.62012c2.93066 -0.429688 5.83008 -0.979492 8.75 -1.45996
+c7.90039 -1.33008 15.6699 -3.28027 23.3906 -5.39941c12.2393 -3.4707 24.1895 -7.91992 35.7598 -13.21c26.5596 -12.2402 50.9395 -29.21 71.6299 -49.8809c20.0303 -20.0898 36.7197 -43.5498 48.8896 -69.1895c1.12988 -2.58984 2.44043 -5.10059 3.4707 -7.74023
+c2.80957 -6.42969 5.38965 -12.9697 7.58008 -19.6299c4.13965 -12.3301 7.33984 -24.9902 9.41992 -37.8301c0.569336 -3.13965 1.04004 -6.2998 1.39941 -9.46973c0.549805 -3.83008 0.94043 -7.69043 1.18066 -11.5605
+c0.829102 -8.33984 0.839844 -16.7295 0.769531 -25.0996c-0.0703125 -4.96973 -0.259766 -9.94043 -0.75 -14.8896c-0.240234 -3.38086 -0.509766 -6.76074 -0.979492 -10.1201c-0.390625 -2.7207 -0.630859 -5.45996 -1.11035 -8.16992
+c-0.900391 -5.15039 -1.7002 -10.3105 -2.87012 -15.4102c-4.09961 -18.5 -10.2998 -36.5498 -18.5098 -53.6299c-15.7705 -32.8301 -38.8301 -62.1699 -67.1201 -85.1201c-14.3926 -11.7676 -39.8887 -27.3848 -56.9102 -34.8604
+c-6.20996 -2.67969 -12.46 -5.25 -18.8701 -7.41016c-3.50977 -1.16016 -7.00977 -2.37988 -10.5703 -3.38965c-6.61914 -1.87988 -13.2891 -3.63965 -20.0391 -5c-4.66016 -0.910156 -9.34082 -1.73047 -14.0303 -2.48047c-5.25 -0.65918 -10.5 -1.43945 -15.79 -1.73926
+c-6.69043 -0.660156 -13.4102 -0.839844 -20.1201 -0.810547c-6.82031 -0.0292969 -13.6504 0.120117 -20.4502 0.790039c-3.29004 0.230469 -6.57031 0.5 -9.83008 0.950195c-2.71973 0.389648 -5.45996 0.629883 -8.16992 1.11035
+c-4.12012 0.719727 -8.25 1.37012 -12.3496 2.21973c-4.25 0.939453 -8.49023 1.88965 -12.6904 3.01953c-8.62988 2.16992 -17.0801 5.01074 -25.4102 8.13086c-10.4893 4.11914 -20.79 8.75 -30.6396 14.25c-2.13965 1.14941 -4.28027 2.28906 -6.34961 3.56934
+c-11.2207 6.58008 -21.8604 14.1006 -31.9199 22.3398c-34.6807 28.4102 -61.4102 66.4307 -76.3506 108.7c-3.08984 8.74023 -5.70996 17.6504 -7.7998 26.6797c-1.48047 6.16016 -2.52051 12.4209 -3.58008 18.6602
+c-0.400391 2.35059 -0.610352 4.73047 -0.950195 7.08984c-0.599609 3.96094 -0.75 7.96094 -1.16992 11.9404c-0.799805 9.46973 -0.709961 18.9902 -0.509766 28.4902c0.139648 3.50977 0.339844 7.00977 0.700195 10.5098
+c0.30957 3.16992 0.459961 6.37012 0.919922 9.52051c0.410156 2.80957 0.649414 5.64941 1.16016 8.43945c0.699219 3.94043 1.2998 7.90039 2.11914 11.8203c3.43066 16.5195 8.4707 32.7295 15.2607 48.1797c1.14941 2.91992 2.58984 5.71973 3.85938 8.58984
+c8.05078 16.71 17.9004 32.5605 29.4902 47.0605c20 25.3799 45.1006 46.6797 73.2705 62.4697c7.5 4.15039 15.1592 8.0498 23.0693 11.3701c15.8203 6.87988 32.4102 11.9502 49.3105 15.3799c3.50977 0.669922 7.04004 1.24023 10.5596 1.84961
+c2.62012 0.470703 5.28027 0.700195 7.91016 1.08008c3.53027 0.530273 7.09961 0.680664 10.6504 1.04004c2.45996 0.240234 4.90918 0.360352 7.35938 0.509766zM244.4 413.36c-9.23047 -0.100586 -18.4307 -0.990234 -27.5703 -2.23047
+c-7.2998 -1.08008 -14.5303 -2.59961 -21.71 -4.2998c-13.9102 -3.5 -27.4805 -8.33984 -40.46 -14.4199c-10.46 -4.99023 -20.5898 -10.7002 -30.1797 -17.2197c-4.18066 -2.9209 -8.40039 -5.80078 -12.3408 -9.03027
+c-5.08008 -3.96973 -9.97949 -8.16992 -14.6797 -12.5898c-2.50977 -2.24023 -4.80957 -4.7002 -7.21973 -7.06055c-28.2207 -28.79 -48.4404 -65.3896 -57.5 -104.689c-2.04004 -8.44043 -3.54004 -17.0205 -4.44043 -25.6504
+c-1.09961 -8.88965 -1.43945 -17.8496 -1.41016 -26.7998c0.110352 -7.13965 0.379883 -14.2803 1.2207 -21.3701c0.620117 -7.12012 1.87012 -14.1602 3.19922 -21.1797c1.07031 -4.65039 2.03027 -9.32031 3.33008 -13.9102
+c6.29004 -23.3799 16.5 -45.7002 30.0703 -65.75c8.63965 -12.9805 18.7803 -24.9297 29.9805 -35.7705c16.2793 -15.8193 35.0498 -29.04 55.3398 -39.2197c7.2793 -3.51953 14.6602 -6.87012 22.2695 -9.62988c5.04004 -1.75977 10.0605 -3.57031 15.2197 -4.98047
+c11.2607 -3.22949 22.7705 -5.59961 34.3906 -7.05957c2.91016 -0.290039 5.80957 -0.610352 8.71973 -0.900391c13.8203 -1.08008 27.7402 -1 41.54 0.430664c4.4502 0.599609 8.91992 0.989258 13.3496 1.7793c3.63086 0.670898 7.28027 1.25 10.8701 2.10059
+c4.12988 0.979492 8.28027 1.91016 12.3604 3.07031c26.5 7.33984 51.5801 19.71 73.5801 36.1992c15.7803 11.8203 29.96 25.7607 42.1201 41.2803c3.25977 4.02051 6.16992 8.30957 9.12988 12.5498c3.38965 5.06055 6.58008 10.25 9.59961 15.54
+c2.40039 4.44043 4.74023 8.91016 6.9502 13.4502c5.69043 12.0498 10.2803 24.6201 13.75 37.4902c2.58984 10.0098 4.75 20.1602 5.90039 30.4502c1.76953 13.4697 1.93945 27.0996 1.29004 40.6494c-0.290039 3.89062 -0.669922 7.77051 -1 11.6602
+c-2.23047 19.0801 -6.79004 37.9102 -13.8203 55.7998c-5.9502 15.1299 -13.5303 29.6299 -22.6104 43.1299c-12.6895 18.8008 -28.2393 35.6807 -45.9697 49.8301c-25.0498 20 -54.4697 34.5498 -85.6504 42.0801c-7.7793 1.92969 -15.6895 3.33984 -23.6299 4.4502
+c-3.90918 0.589844 -7.84961 0.820312 -11.7695 1.24023c-7.38965 0.569336 -14.8105 0.719727 -22.2197 0.580078zM139.26 364.47c13.2998 8.89062 28.0801 15.3799 43.2998 20.1807c-3.16992 -1.77051 -6.43945 -3.38086 -9.5293 -5.29004
+c-11.21 -6.68066 -21.5205 -14.9004 -30.3799 -24.4902c-6.80078 -7.42969 -12.7607 -15.7305 -17.0107 -24.8896c-3.29004 -6.86035 -5.63965 -14.1904 -6.85938 -21.7109c-0.930664 -4.84961 -1.2998 -9.80957 -1.16992 -14.75
+c0.129883 -13.6592 4.43945 -27.0791 11.29 -38.8193c5.91992 -10.2197 13.6299 -19.3301 22.3594 -27.2598c4.85059 -4.36035 10.2402 -8.09082 14.9502 -12.6006c2.25977 -2.18945 4.49023 -4.41992 6.42969 -6.91016c2.62012 -3.30957 4.89062 -6.98926 5.99023 -11.0996
+c0.900391 -3.02051 0.660156 -6.2002 0.69043 -9.31055c0.0195312 -4.09961 -0.0400391 -8.19922 0.0292969 -12.2998c0.140625 -3.54004 -0.0195312 -7.08984 0.110352 -10.6299c0.0800781 -2.37988 0.0205078 -4.75977 0.0498047 -7.13965
+c0.160156 -5.77051 0.0605469 -11.5303 0.150391 -17.2998c0.109375 -2.91016 0.0195312 -5.82031 0.129883 -8.74023c0.0302734 -1.62988 0.129883 -3.28027 -0.0302734 -4.91016c-0.910156 -0.120117 -1.81934 -0.179688 -2.72949 -0.160156
+c-10.9902 0 -21.8799 2.62988 -31.9502 6.92969c-6 2.7002 -11.8105 5.89062 -17.0898 9.83008c-5.75 4.19043 -11.0898 8.95996 -15.79 14.3105c-6.53027 7.24023 -11.9805 15.3896 -16.6201 23.9502c-1.07031 2.0293 -2.24023 4.01953 -3.17969 6.12012
+c-1.16016 2.63965 -2.62012 5.13965 -3.66992 7.81934c-4.05078 9.68066 -6.57031 19.9404 -8.08008 30.3105c-0.490234 4.43945 -1.09082 8.87988 -1.2002 13.3496c-0.700195 15.7305 0.839844 31.5498 4.66992 46.8203c2.12012 8.14941 4.76953 16.1797 8.30957 23.8301
+c6.32031 14.1992 15.3398 27.1797 26.3008 38.1895c6.2793 6.2002 13.1299 11.8398 20.5293 16.6699zM314.63 384.59c2.74023 -0.740234 5.41016 -1.74023 8.08984 -2.67969c6.36035 -2.33008 12.6807 -4.83984 18.71 -7.95996
+c13.1104 -6.44043 25.3105 -14.8105 35.8203 -24.9697c10.2002 -9.9502 18.7402 -21.6006 25.1396 -34.3408c1.28027 -2.75 2.64062 -5.45996 3.81055 -8.25977c6.30957 -15.0996 10 -31.2598 11.2295 -47.5703c0.410156 -4.54004 0.44043 -9.08984 0.450195 -13.6396
+c0.0703125 -11.6396 -1.49023 -23.25 -4.2998 -34.5303c-1.96973 -7.26953 -4.34961 -14.4893 -7.86035 -21.1797c-3.17969 -6.63965 -6.67969 -13.1602 -10.8398 -19.2402c-6.93945 -10.4697 -15.5996 -19.8701 -25.8203 -27.2197
+c-10.4795 -7.63965 -22.6396 -13.0195 -35.3994 -15.3799c-3.50977 -0.69043 -7.08008 -1.08008 -10.6602 -1.20996c-1.84961 -0.0605469 -3.71973 -0.160156 -5.55957 0.0996094c-0.280273 2.15039 0 4.31055 -0.0107422 6.45996
+c-0.0292969 3.73047 0.140625 7.4502 0.100586 11.1699c0.189453 7.02051 0.0195312 14.0508 0.209961 21.0703c0.0292969 2.37988 -0.0302734 4.75977 0.0292969 7.13965c0.170898 5.07031 -0.0390625 10.1406 0.140625 15.21
+c0.0996094 2.99023 -0.240234 6.04004 0.509766 8.95996c0.660156 2.5 1.78027 4.86035 3.08984 7.08008c4.45996 7.31055 11.0605 12.96 17.6807 18.2607c5.37988 4.17969 10.4697 8.76953 15.0195 13.8398c7.67969 8.37012 14.1699 17.8799 18.7803 28.2695
+c2.5 5.93066 4.51953 12.1006 5.5498 18.46c0.860352 4.37012 1.05957 8.83008 1.00977 13.2705c-0.0195312 7.84961 -1.39941 15.6494 -3.63965 23.1699c-1.75 5.72949 -4.27051 11.1797 -7.08984 16.4502c-3.87012 6.92969 -8.65039 13.3096 -13.96 19.1992
+c-9.94043 10.8506 -21.75 19.9404 -34.6006 27.1006c-1.84961 1.01953 -3.83984 1.82031 -5.62988 2.96973zM213.83 326.14c0.979492 1.18066 1.99023 2.33008 3.12012 3.37988c-0.610352 -0.929688 -1.27051 -1.80957 -1.9502 -2.67969
+c-3.09961 -3.87988 -5.54004 -8.30957 -7.03027 -13.0596c-0.870117 -3.27051 -1.67969 -6.60059 -1.72949 -10c-0.0703125 -2.52051 -0.0800781 -5.07031 0.319336 -7.57031c1.13086 -7.62988 4.33008 -14.8496 8.77051 -21.1201c2 -2.7002 4.25 -5.26953 6.91992 -7.33008
+c1.62012 -1.26953 3.53027 -2.08984 5.33984 -3.0498c3.11035 -1.67969 6.32031 -3.22949 9.07031 -5.47949c2.66992 -2.09082 4.5498 -5.33008 4.39941 -8.79004c-0.00976562 -73.6709 0 -147.341 -0.00976562 -221.021c0 -1.34961 -0.0800781 -2.7002 0.0400391 -4.04004
+c0.129883 -1.47949 0.820312 -2.83008 1.46973 -4.14941c0.860352 -1.66016 1.78027 -3.34082 3.18066 -4.62012c0.849609 -0.770508 1.96973 -1.40039 3.14941 -1.24023c1.5 0.200195 2.66016 1.34961 3.4502 2.57031c0.959961 1.50977 1.67969 3.15918 2.28027 4.84961
+c0.759766 2.12988 0.439453 4.41992 0.540039 6.62988c0.139648 4.03027 -0.0205078 8.06055 0.139648 12.0898c0.0302734 5.89062 0.0302734 11.7705 0.0605469 17.6602c0.139648 3.62012 0.0292969 7.24023 0.109375 10.8604
+c0.150391 4.0293 -0.0195312 8.05957 0.140625 12.0898c0.0292969 5.99023 0.0292969 11.9795 0.0693359 17.9697c0.140625 3.62012 0.0205078 7.24023 0.110352 10.8604c0.139648 3.92969 -0.0205078 7.85938 0.139648 11.7803
+c0.0302734 5.98926 0.0302734 11.9795 0.0605469 17.9697c0.160156 3.93945 -0.00976562 7.87988 0.189453 11.8193c0.290039 -1.43945 0.129883 -2.91992 0.220703 -4.37988c0.189453 -3.60938 0.419922 -7.22949 0.759766 -10.8398
+c0.320312 -3.43945 0.439453 -6.88965 0.859375 -10.3193c0.370117 -3.10059 0.510742 -6.2207 0.950195 -9.31055c0.570312 -4.08984 0.870117 -8.20996 1.54004 -12.29c1.45996 -9.04004 2.83008 -18.1104 5.08984 -26.9902c1.13086 -4.81934 2.40039 -9.60938 4 -14.2998
+c2.54004 -7.89941 5.7207 -15.6699 10.3105 -22.6201c1.72949 -2.63965 3.87012 -4.97949 6.09961 -7.20996c0.270508 -0.25 0.549805 -0.509766 0.879883 -0.709961c0.600586 -0.25 1.31055 0.0703125 1.7002 0.570312c0.709961 0.879883 1.16992 1.93945 1.7002 2.92969
+c4.0498 7.7998 8.17969 15.5605 12.3398 23.3105c0.700195 1.30957 1.44043 2.62012 2.56055 3.60938c1.75 1.57031 3.83984 2.69043 5.97949 3.62988c2.87988 1.2207 5.90039 2.19043 9.03027 2.41992c6.58008 0.620117 13.1094 -0.75 19.5596 -1.84961
+c3.69043 -0.580078 7.40039 -1.16992 11.1299 -1.41016c3.74023 -0.0996094 7.48047 -0.0498047 11.21 0.280273c8.55078 0.919922 16.9902 2.95996 24.9404 6.25c5.2998 2.24023 10.46 4.83008 15.3096 7.92969c11.46 7.20996 21.46 16.5703 30.04 27.0107
+c1.16992 1.41992 2.25 2.89941 3.45996 4.2793c-1.19922 -3.24023 -2.66992 -6.37012 -4.15918 -9.47949c-1.25 -2.90039 -2.84082 -5.61035 -4.27051 -8.41992c-5.16016 -9.62988 -11.0195 -18.9102 -17.75 -27.5205
+c-4.03027 -5.20996 -8.53027 -10.0498 -13.3301 -14.5703c-6.63965 -6.0498 -14.0703 -11.3691 -22.4297 -14.7598c-8.20996 -3.37012 -17.3105 -4.62988 -26.0898 -3.29004c-3.56055 0.580078 -7.01074 1.69043 -10.4102 2.87988
+c-2.79004 0.970703 -5.39062 2.38086 -8.03027 3.69043c-3.42969 1.70996 -6.63965 3.80957 -9.70996 6.08008c2.70996 -3.06055 5.69043 -5.86035 8.7002 -8.61035c4.26953 -3.75977 8.74023 -7.30957 13.6299 -10.2295c3.98047 -2.4502 8.29004 -4.40039 12.8398 -5.51074
+c1.45996 -0.369141 2.95996 -0.459961 4.4502 -0.599609c-1.25 -1.09961 -2.62988 -2.04004 -3.99023 -2.97949c-9.60938 -6.54004 -20.0098 -11.8604 -30.6895 -16.4307c-20.8604 -8.7002 -43.1699 -13.9697 -65.7402 -15.3398
+c-4.66016 -0.240234 -9.32031 -0.360352 -13.9805 -0.360352c-4.97949 0.110352 -9.96973 0.130859 -14.9199 0.650391c-11.2002 0.759766 -22.29 2.73047 -33.1699 5.42969c-10.3496 2.70996 -20.5498 6.12012 -30.2998 10.5508
+c-8.70996 3.85938 -17.1201 8.41992 -24.9902 13.79c-1.83008 1.30957 -3.74023 2.5293 -5.37012 4.0791c6.60059 1.19043 13.0303 3.39062 18.9902 6.48047c5.74023 2.86035 10.9902 6.66016 15.6299 11.0703c2.24023 2.18945 4.29004 4.58984 6.19043 7.08984
+c-3.43066 -2.12988 -6.93066 -4.15039 -10.6201 -5.78027c-4.41016 -2.16016 -9.07031 -3.76953 -13.8105 -5.01953c-5.72949 -1.52051 -11.7393 -1.73047 -17.6094 -1.14062c-8.12988 0.950195 -15.8604 4.27051 -22.5098 8.98047
+c-4.32031 2.93945 -8.2207 6.42969 -11.96 10.0596c-9.93066 10.1602 -18.2002 21.8105 -25.6602 33.8604c-3.94043 6.26953 -7.53027 12.75 -11.1201 19.2197c-1.0498 2.04004 -2.15039 4.0498 -3.17969 6.10059c2.84961 -2.9209 5.56934 -5.9707 8.42969 -8.88086
+c8.99023 -8.96973 18.5596 -17.4395 29.1602 -24.4795c7.5498 -4.90039 15.6699 -9.23047 24.5596 -11.0303c3.11035 -0.729492 6.32031 -0.469727 9.46973 -0.80957c2.77051 -0.280273 5.56055 -0.200195 8.34082 -0.299805
+c5.0498 -0.0605469 10.1094 -0.0400391 15.1592 0.15918c3.65039 0.160156 7.27051 0.660156 10.8906 1.09082c2.06934 0.25 4.10938 0.709961 6.13965 1.19922c3.87988 0.950195 8.11035 0.959961 11.8301 -0.609375c4.75977 -1.85059 8.44043 -5.64062 11.3799 -9.70996
+c2.16016 -3.02051 4.06055 -6.2207 5.66016 -9.58008c1.16016 -2.43066 2.45996 -4.79004 3.5498 -7.26074c1 -2.23926 2.15039 -4.41992 3.41992 -6.51953c0.669922 -1.01953 1.40039 -2.15039 2.62012 -2.5498c1.06055 0.75 1.70996 1.91016 2.28027 3.03027
+c2.09961 4.15918 3.41992 8.64941 4.88965 13.0498c2.02051 6.58984 3.78027 13.2695 5.19043 20.0195c2.20996 9.25 3.25 18.7197 4.54004 28.1299c0.55957 3.98047 0.830078 7.99023 1.30957 11.9707c0.870117 10.6396 1.90039 21.2695 2.24023 31.9395
+c0.0800781 1.86035 0.240234 3.70996 0.25 5.57031c0.00976562 4.34961 0.25 8.68945 0.219727 13.0303c-0.00976562 2.37988 -0.00976562 4.75977 0 7.12988c0.0498047 5.06934 -0.200195 10.1396 -0.219727 15.21c-0.200195 6.60938 -0.709961 13.2002 -1.29004 19.7793
+c-0.730469 5.88086 -1.5498 11.7803 -3.12012 17.5107c-2.0498 7.75 -5.58984 15.0293 -9.7998 21.8193c-3.16016 5.07031 -6.79004 9.87988 -11.0898 14.0303c-3.87988 3.86035 -8.58008 7.08008 -13.9404 8.4502c-1.5 0.410156 -3.05957 0.450195 -4.58984 0.639648
+c0.0703125 2.99023 0.700195 5.93066 1.25977 8.85059c1.58984 7.70996 3.7998 15.2998 6.76074 22.5996c1.51953 4.03027 3.40918 7.90039 5.38965 11.7197c3.4502 6.56055 7.62012 12.79 12.46 18.46zM245.1 324.44
+c0.350586 0.0595703 0.709961 0.119141 1.07031 0.189453c0.19043 -1.79004 0.0898438 -3.58008 0.0996094 -5.37012v-38.1299c-0.00976562 -1.74023 0.130859 -3.49023 -0.149414 -5.21973c-0.360352 0.0302734 -0.709961 0.0498047 -1.06055 0.0498047
+c-0.949219 3.75 -1.71973 7.5498 -2.61914 11.3096c-0.380859 1.53027 -0.580078 3.09082 -1.07031 4.59082c-1.7002 0.239258 -3.42969 0.169922 -5.15039 0.199219c-5.05957 0.0107422 -10.1299 0 -15.1895 0.0107422
+c-1.66016 0.00976562 -3.32031 -0.0898438 -4.98047 0.0292969c-0.0302734 0.390625 -0.259766 0.910156 0.160156 1.18066c1.28027 0.649414 2.71973 0.879883 4.05957 1.34961c3.43066 1.13965 6.88086 2.16016 10.3105 3.31055
+c1.38965 0.479492 2.90039 0.719727 4.16016 1.54004c0.0400391 0.55957 0.0195312 1.12988 -0.0498047 1.67969c-1.23047 0.549805 -2.53027 0.870117 -3.81055 1.28027c-3.12988 1.0293 -6.29004 1.95996 -9.41016 3.01953c-1.79004 0.620117 -3.66992 1 -5.41016 1.79004
+c-0.0292969 0.370117 -0.0693359 0.730469 -0.109375 1.08984c5.08984 0.19043 10.2002 -0.0595703 15.2998 0.120117c3.36035 0.129883 6.73047 -0.0800781 10.0898 0.0703125c0.120117 0.389648 0.259766 0.769531 0.370117 1.16016
+c1.08008 4.93945 2.33008 9.8291 3.38965 14.75zM251.07 324.64c0.359375 -0.0498047 0.719727 -0.120117 1.08008 -0.199219c0.979492 -3.85059 1.72949 -7.76074 2.70996 -11.6104c0.359375 -1.41992 0.55957 -2.87988 1.0293 -4.27051
+c2.53027 -0.179688 5.07031 0.0107422 7.61035 -0.0498047c5.16016 -0.120117 10.3301 -0.120117 15.4902 -0.0693359c0.759766 0.00976562 1.51953 -0.0302734 2.2793 -0.0800781c-0.0390625 -0.360352 -0.0693359 -0.720703 -0.0996094 -1.08008
+c-1.82031 -0.830078 -3.78027 -1.25 -5.66992 -1.89062c-3.73047 -1.22949 -7.48047 -2.38965 -11.2197 -3.56934c-0.570312 -0.169922 -1.12012 -0.419922 -1.66992 -0.640625c-0.150391 -0.549805 -0.180664 -1.12012 -0.120117 -1.68945
+c0.870117 -0.480469 1.81934 -0.810547 2.76953 -1.08984c4.87988 -1.52051 9.73047 -3.14062 14.6299 -4.60059c0.379883 -0.129883 0.780273 -0.269531 1.12988 -0.490234c0.400391 -0.269531 0.230469 -0.790039 0.150391 -1.17969
+c-1.66016 -0.129883 -3.30957 -0.0302734 -4.96973 -0.0400391c-5.16992 -0.00976562 -10.3301 0.00976562 -15.5 -0.00976562c-1.61035 -0.0302734 -3.21973 0.0195312 -4.82031 -0.209961c-0.519531 -1.66992 -0.719727 -3.41992 -1.16992 -5.11035
+c-0.94043 -3.56934 -1.51953 -7.24023 -2.54004 -10.7793c-0.360352 -0.0107422 -0.709961 -0.0205078 -1.05957 -0.0605469c-0.290039 1.73047 -0.150391 3.48047 -0.150391 5.21973v38.1299c0.0205078 1.78027 -0.0800781 3.58008 0.110352 5.37012zM65.0498 279.67
+c1.12012 2.15039 2.08008 4.40039 3.37012 6.45996c-1.82031 -7.55957 -2.91016 -15.2695 -3.62012 -23c-0.799805 -7.70996 -0.849609 -15.4902 -0.540039 -23.2295c1.0498 -19.9404 5.54004 -39.8301 14.2305 -57.8809c2.99023 -5.98926 6.34961 -11.8291 10.5 -17.1094
+c6.12012 -7.46973 12.5293 -14.7598 19.8398 -21.0898c4.7998 -4.10059 9.99023 -7.78027 15.54 -10.8008c3.26953 -1.64941 6.50977 -3.38965 9.93945 -4.67969c5.01074 -2.03027 10.1904 -3.60938 15.4209 -4.93945c3.8291 -0.959961 7.7793 -1.41016 11.5195 -2.70996
+c5 -1.57031 9.46973 -4.61035 13.0303 -8.43066c4.92969 -5.22949 8.08984 -11.8701 10.2002 -18.6699c0.989258 -2.89941 1.58984 -5.91016 2.16992 -8.91992c0.149414 -0.75 0.219727 -1.51953 0.15918 -2.29004c-6.5 -2.78027 -13.2598 -5.05957 -20.2598 -6.17969
+c-4.10938 -0.780273 -8.29004 -0.990234 -12.46 -1.08008c-10.25 -0.240234 -20.4697 1.75977 -30.1201 5.12012c-3.73926 1.41992 -7.48926 2.84961 -11.0293 4.71973c-8.06055 3.83984 -15.6406 8.7002 -22.46 14.46c-2.9209 2.5498 -5.83008 5.12988 -8.40039 8.03027
+c-9.16016 9.83008 -16.2998 21.4102 -21.79 33.6494c-2.38965 5.55078 -4.61035 11.1807 -6.37012 16.96c-1.16992 3.94043 -2.36035 7.89062 -3.25977 11.9102c-0.75 2.94043 -1.21973 5.9502 -1.87012 8.91992c-0.459961 2.14062 -0.69043 4.32031 -1.03027 6.48047
+c-0.849609 5.42969 -1.2793 10.9297 -1.33008 16.4297c0.110352 6.18066 0.25 12.3701 1.07031 18.5c0.400391 2.86035 0.669922 5.74023 1.15039 8.60059c0.979492 5.69922 2.13965 11.3691 3.70996 16.9297c3.08984 11.6504 7.47949 22.9502 12.6895 33.8398z
+M428.78 286.11c1.09961 -1.66016 1.91016 -3.48047 2.7793 -5.26074c2.10059 -4.44922 4.24023 -8.89941 6.02051 -13.4893c7.61035 -18.7607 12.2998 -38.79 13.04 -59.0508c0.0195312 -1.75977 0.0703125 -3.51953 0.110352 -5.29004
+c0.129883 -9.56934 -1.27051 -19.0898 -3.18066 -28.4492c-0.729492 -3.58984 -1.54004 -7.16992 -2.58008 -10.6904c-4.04004 -14.7197 -10 -29 -18.4102 -41.7803c-8.20996 -12.5693 -19.0098 -23.5498 -31.8398 -31.4092
+c-5.72949 -3.59082 -11.79 -6.64062 -18.0498 -9.19043c-5.78027 -2.19043 -11.71 -4.03027 -17.7998 -5.11035c-6.40039 -1.0498 -12.9102 -1.51953 -19.4004 -1.22949c-7.91992 0.479492 -15.7793 2.07031 -23.21 4.84961
+c-1.93945 0.799805 -3.93945 1.45996 -5.83984 2.33008c-0.209961 1.50977 0.25 2.99023 0.530273 4.45996c1.16016 5.74023 3.03027 11.3604 5.7002 16.5801c2.36914 4.50977 5.51953 8.65039 9.45996 11.9004c2.42969 2.0498 5.23926 3.60938 8.15918 4.83008
+c3.58008 1.5 7.4707 1.96973 11.2402 2.83008c7.23047 1.70996 14.3701 3.92969 21.1504 7c10.3496 4.64941 19.71 11.3799 27.6494 19.46c1.59082 1.60938 3.23047 3.17969 4.74023 4.86914c3.37012 3.76074 6.70996 7.57031 9.85059 11.5303
+c7.47949 10.0703 12.8193 21.5898 16.71 33.4805c1.58008 5.2998 3.20996 10.5996 4.20996 16.0498c0.629883 2.87012 1.04004 5.78027 1.51953 8.67969c0.870117 6.08984 1.58984 12.2207 1.67969 18.3799c0.120117 6.65039 0.140625 13.3203 -0.529297 19.9404
+c-0.730469 7.99023 -1.87012 15.96 -3.70996 23.7803z" />
+    <glyph glyph-name="phoenix-squadron" unicode="&#xf511;" horiz-adv-x="512" 
+d="M96 384.62c46.4902 36.1299 105.55 56.0703 164.51 54.5703c29.5801 0.379883 59.1104 -5.37012 86.9102 -15.3301c-24.1299 4.62988 -49 6.33984 -73.3799 2.44922c-42.8701 -5.30957 -83.04 -27.1494 -111.83 -59.1797c5.66992 1 10.7803 3.66992 16 5.86035
+c18.1396 7.87012 37.4902 13.2598 57.2305 14.8301c19.7393 2.12988 39.6396 0.429688 59.2793 -1.91992c-14.4199 -2.79004 -29.1201 -4.57031 -43 -9.59082c-34.4297 -11.0693 -65.2695 -33.1592 -86.2998 -62.6299c-13.7998 -19.71 -23.6299 -42.8594 -24.6699 -67.1299
+c-0.349609 -16.4902 5.21973 -34.8096 19.8301 -44c7.01465 -4.23926 19.3594 -7.67969 27.5547 -7.67969c2.77539 0 7.23926 0.420898 9.96484 0.939453c15.4502 2.45996 30.0703 8.64062 43.6006 16.3301c11.5195 6.82031 22.6699 14.5508 32 24.25
+c3.79004 3.2207 2.53027 8.4502 2.62012 12.79c-2.12012 0.339844 -4.37988 1.11035 -6.30078 -0.299805c-9.47656 -5.19531 -25.5244 -12.0811 -35.8193 -15.3701c-20 -6.16992 -42.1602 -8.45996 -62.1006 -0.779297c12.79 -1.73047 26.0605 -0.310547 37.7402 5.43945
+c20.2305 9.71973 36.8105 25.2002 54.4404 38.7705c23.0107 17.7168 62.8379 42.4951 88.8994 55.3096c25.71 12 52.9404 22.7803 81.5703 24.1201c-15.6299 -13.7197 -32.1504 -26.5205 -46.7803 -41.3799c-14.5098 -14 -27.46 -29.5 -40.1094 -45.1807
+c-3.52051 -4.59961 -8.9502 -6.93945 -13.5801 -10.1592c-18.8516 -12.6768 -42.0986 -39.6016 -51.8906 -60.1006c-9.33008 -19.6797 -14.5 -41.8496 -11.7695 -63.6494c1.93945 -13.6904 8.70996 -27.5908 20.8994 -34.9102c12.9004 -8 29.0508 -8.07031 43.4805 -5.10059
+c32.7998 7.4502 61.4297 28.8906 81 55.8408c20.4404 27.5195 30.5195 62.1992 29.1602 96.3496c-0.520508 7.5 -1.57031 15 -1.66016 22.4902c8 -19.4805 14.8203 -39.71 16.6504 -60.8301c2 -14.2803 0.75 -28.7598 -1.62012 -42.9004
+c-1.91016 -11 -5.66992 -21.5098 -7.78027 -32.4297c17.209 19.293 34.833 55.6123 39.3398 81.0703c1.24121 7.8584 2.24902 20.6953 2.24902 28.6514c0 21.957 -7.37305 55.999 -16.459 75.9883c20.7803 -32 32.3398 -69.5801 35.71 -107.48
+c0.490234 -12.7295 0.490234 -25.5098 0 -38.2295c-2.37305 -28.7334 -15.6289 -72.5254 -29.5898 -97.75c-26.1201 -47.3398 -68 -85.6299 -117.19 -108c-78.29 -36.2305 -174.68 -31.3203 -248 14.6797c-32.9014 20.1289 -73.8711 64.3281 -91.4492 98.6602
+c-12.291 24.2021 -23.6523 65.8301 -25.3604 92.9199v31.3398c3.92969 69.7402 40.8701 135.92 96 178.36zM318 304.29c4.54688 0.770508 11.7148 2.77734 16 4.47949c5 1.77051 9.24023 5.94043 10.3203 11.2207c-8.95996 -4.99023 -17.9805 -9.91992 -26.3203 -15.7002z
+" />
+    <glyph glyph-name="sith" unicode="&#xf512;" 
+d="M0 416l118.75 -69.71l-11.5195 58.9004l91.0596 -69.8701c8.5 1.50977 17.0996 2.29004 25.71 2.29004s17.21 -0.770508 25.71 -2.29004l91.0596 69.8701l-11.5195 -58.9004l118.75 69.71l-69.71 -118.75l58.8604 11.5195l-69.8408 -91.0293
+c3.04004 -17.0098 3.03027 -34.4404 0 -51.4502l69.8408 -91.0303l-58.8604 11.5205l69.71 -118.78l-118.75 69.71l11.5195 -58.8604l-91.0293 69.8408c-17.0098 -3.04004 -34.46 -3.04004 -51.4805 0l-91.0293 -69.8408l11.5195 58.8604l-118.75 -69.71l69.71 118.78
+l-58.8604 -11.5205l69.8408 91.0303c-1.25488 7.04492 -2.27246 18.5693 -2.27246 25.7246c0 7.15625 1.01758 18.6807 2.27246 25.7256l-69.8408 91.0293l58.8604 -11.5195zM224 316.22c-31.7998 0 -63.6104 -12.0898 -87.8496 -36.3398
+c-48.4902 -48.4902 -48.5 -127.2 0 -175.7c48.5 -48.4893 127.21 -48.5195 175.699 -0.0292969c48.4902 48.4893 48.5 127.199 0 175.699c-24.25 24.25 -56.0498 36.3701 -87.8496 36.3701zM224 279.56c22.4199 0 44.8301 -8.51953 61.9199 -25.6094
+c34.1904 -34.1904 34.1797 -89.6904 0 -123.87c-34.1895 -34.1797 -89.6504 -34.1904 -123.84 0c-34.1904 34.1895 -34.1797 89.6895 0 123.87c17.0898 17.0898 39.5 25.6094 61.9199 25.6094z" />
+    <glyph glyph-name="trade-federation" unicode="&#xf513;" horiz-adv-x="496" 
+d="M248 439.2c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -43.5996c129.7 0 234.8 105.1 234.8 234.8s-105.1 234.8 -234.8 234.8s-234.8 -105.1 -234.8 -234.8s105.1 -234.8 234.8 -234.8zM403.1 284.9v-0.100586h-145.699
+v-34.7998h83.2998v-47h-83.2998v-195.8h-48.8008v196.8h-117.699l-36.7002 46h155.1v81.7002h193.8v-46.7998zM329.8 239.8h-82.8994v56.2002h145v24.4004h-171.801v-80.6006h-143.899l20.0996 -23.8994h123.8v-197.4h26.8008v197.4h82.8994v23.8994zM168.5 308.8l22 9.2998
+l-15.7998 -18.0996l15.7002 -18.0996l-22.2002 9.5l-12.2998 -20.5l2.09961 24l-23.2998 5.39941l23.5 5.40039l-2.10059 23.7998zM138.9 328.5l9.5 -10.2002l-13.8008 5.2998l-6.7998 -12.1992l0.799805 14.6992l-13.6992 2.7002l14.2998 3.7998l-1.7002 13.9004
+l8 -12.4004l12.7002 5.90039zM304.3 183.3l-9.2998 -10.7998l9.40039 -10.7002l-13.1006 5.5l-7.2998 -12.2002l1.2002 14.2002l-13.9004 3.2002l13.9004 3.2002l-1.2998 14.2002l7.2998 -12.2002zM411.2 260.5l-15 -17.5996l15.0996 -17l-21.2002 8.7998l-11.5 -19.6006
+l1.80078 22.9004l-22.2002 4.90039l22.2998 5.39941l-2.2002 22.7002l12 -19.5996zM248 418.1c125.3 0 226.9 -101.6 226.9 -226.899s-101.601 -226.9 -226.9 -226.9s-226.9 101.601 -226.9 226.9s101.601 226.899 226.9 226.899zM342.6 252h-83.1992v30.9004h145.699
+v50.6992h-197.8v-81.5996h-157.399l40 -49.9004h116.699v-196.8h52.7002v195.7h83.2998v51zM248 404.8c-94.5996 0 -174.9 -61.5996 -202.9 -146.8h157.4v81.5996h199.1c-38.7998 40.2002 -93.2998 65.2002 -153.6 65.2002zM248 -22.2998c117.9 0 213.5 95.5996 213.4 213.5
+c0 51.8994 -18.5 99.5 -49.3008 136.5v-50.7998h-145.6v-19.2002h83.2002v-62.7002h-83.2998v-195.8h-64.6006v196.8h-114.7l-43.7998 56.2998c-5.7998 -19.2998 -8.89941 -39.8994 -8.89941 -61.0996c0 -117.9 95.6992 -213.5 213.6 -213.5zM178.8 173l22.7002 9.2998
+l-16.9004 -17.0996l15.8008 -18.7998l-21.5 10.7998l-13 -20.9004l3.69922 23.7998l-23.7998 5.90039l23.7002 3.90039l-1.7002 24.5z" />
+    <glyph glyph-name="wolf-pack-battalion" unicode="&#xf514;" horiz-adv-x="512" 
+d="M267.73 -23.5303l-11.4404 -21.1396l-11.4404 21.1104l-10.5596 -15.8408l-5.28027 12.3203l-5.2793 -7v-29.8301c-21.0605 7.91992 -21.1104 66.8604 -25.5107 97.21c-4.62012 31.8799 0.879883 92.8105 -81.3701 149.11c8.88086 23.5996 12 49.4297 2.64062 80.0498
+c-27.8701 -3.33008 -53.9404 -10.5801 -63.3398 -54.0996l30.3496 -8.36035c-11.2002 -23.04 -17.0195 -46.7598 -13.2002 -72.1396l27.2705 7l6.16016 -33.4307l18.4697 7l8.7998 -33.4297l19.3496 7l-26.4297 -21.0596l-8.7998 28.1494l-24.6299 -5.28027l-7 35.6309
+l-26.3906 -14.5205c-0.25 20.0205 -6.95996 58.0605 8.80078 84.4502l-26.3906 -5.28027c-3.99023 22.0703 2.37988 39.21 7.91992 56.7402l-22.4297 -9.67969c0.44043 25.0693 29.9404 56.79 61.5898 58.5098c20.2197 1.08984 56.7305 25.1602 54.1006 51.8994
+c-1.95996 19.8701 -17.4502 42.6201 -43.1104 49.7002c43.9795 -36.5098 9.71973 -67.2998 -5.28027 -73.46c-4.39941 11.4404 -17.54 69.0801 0 130.2c40.4697 -22.8701 89.7002 -65.0996 93.21 -147.86l58.0605 -38.71l3.51953 -93.25l-107.33 59.8203l-7 -7
+l17.5801 -3.50977l44 -38.71l15.8398 5.2793l28.1504 -49.2598l3.51953 -119.64l-21.1094 -15.8398l32.5498 -15.8398l32.5498 15.8398l-21.1094 15.8398l3.51953 119.64l28.0996 49.25l15.8408 -5.28027l44 38.7109l17.5898 3.51953l-7 7l-107.3 -59.7695l3.51953 93.25
+l58 38.71c3.5498 82.6895 52.8096 124.92 93.2002 147.79c17.54 -61.1201 4.39941 -118.761 0 -130.2c-14.96 6.16016 -49.2803 36.9502 -5.28027 73.46c-25.6602 -7.08008 -41.1104 -29.8301 -43.1104 -49.7002c-2.63965 -26.7305 33.8809 -50.8096 54.1006 -51.9004
+c31.6396 -1.70996 61.1396 -33.4297 61.5801 -58.5l-22.4307 9.68066c5.54004 -17.5303 11.9209 -34.6699 7.9209 -56.7402l-26.3906 5.28027c15.7998 -26.3906 9.0498 -64.4502 8.7998 -84.4502l-26.3896 14.5195l-7 -35.6299l-24.5898 5.24023l-8.7998 -28.1504
+l-26.3906 21.1104l19.3506 -7l8.7998 33.3896l18.4697 -7l6.16016 33.4307l27.2803 -7.05078c3.7998 25.3809 -2.0498 49.1406 -13.2002 72.1406l30.3496 8.35938c-9.42969 43.5205 -35.4297 50.7305 -63.3398 54.1006
+c-9.35938 -30.6201 -6.24023 -56.4404 2.64062 -80.0498c-82.25 -56.3008 -76.75 -117.221 -81.3701 -149.11c-4.40039 -30.3496 -4.4502 -89.29 -25.5107 -97.21v29.9502l-5.2793 7l-5.28027 -12.3203zM346.9 71.4697l-15.8408 10.5303
+c7.4707 4.36035 13.7607 8.41992 19.3506 12.3203c-0.600586 -7.2207 -0.270508 -13.8398 -3.50977 -22.8398v-0.0107422zM375.05 120.73c-0.399414 -10.9404 -0.899414 -21.6602 -1.75977 -31.6709c-7.84961 1.86035 -15.5703 3.80078 -21.1104 7
+c8.24023 7.94043 15.5508 16.3203 22.8701 24.6807v-0.00976562zM399.68 115.45l-23.75 6.16016c5.62695 7.16797 13.9014 19.3848 18.4707 27.2695c3.22949 -9.21973 5.2793 -20 5.2793 -33.4297zM403.2 196.39c19.4395 -12.8096 27.7998 -33.6592 29.9102 -56.2998
+c-12.3203 4.53027 -24.6299 9.31055 -36.9502 10.5605c5.05957 12 6.64941 28.1396 7 45.7393h0.0400391zM401.44 242.13c18.5596 -2.62988 35.1494 -9.18945 45.7598 -28.1494c-14.2197 -4.36035 -24.7803 -5.9707 -44 -14.0801
+c0.0800781 13.4092 -0.950195 27.9297 -1.75977 42.2295zM165.68 71.4805c-3.23926 9 -2.91016 15.5791 -3.50977 22.8398c5.58984 -3.90039 11.8799 -7.95996 19.3496 -12.3203zM137.53 120.74c7.31934 -8.36035 14.6299 -16.7402 22.8701 -24.6699
+c-5.54004 -3.2002 -13.2607 -5.14062 -21.1104 -7c-0.860352 10.0098 -1.36035 20.7295 -1.75977 31.6699zM112.89 115.46c0 13.4297 2 24.21 5.28027 33.4297c4.56934 -7.88477 12.8438 -20.1016 18.4697 -27.2695zM109.37 196.4h0.0898438
+c0.349609 -17.6006 2 -33.7402 7 -45.7402c-12.3701 -1.25 -24.6797 -6.03027 -37 -10.5605c2.11035 22.6406 10.4697 43.4902 29.9102 56.3008zM111.13 242.14c-0.80957 -14.2998 -1.83984 -28.8193 -1.75977 -42.2295c-19.2197 8.10938 -29.7803 9.71973 -44 14.0801
+c10.6299 18.9502 27.2295 25.5195 45.7598 28.1494z" />
+    <glyph glyph-name="hornbill" unicode="&#xf592;" horiz-adv-x="512" 
+d="M76.3799 77.7002c0.182617 -1.37207 0.331055 -3.6084 0.331055 -4.99219c0 -20.8662 -16.9346 -37.8008 -37.7998 -37.8008s-37.7998 16.9346 -37.7998 37.8008c0 20.8652 16.9346 37.7998 37.7998 37.7998c1.49805 0 3.91602 -0.173828 5.39844 -0.387695
+c-78.2793 111.35 52 190.53 52 190.53c-5.85938 -43 -8.23926 -91.1602 -8.23926 -91.1602c-67.3105 -41.4902 0.929688 -64.0605 39.8096 -72.8701c18.6445 -50.7129 77.6279 -91.9023 131.66 -91.9404c1.91992 0 3.76953 0.209961 5.66992 0.280273l0.110352 -18.8604
+c-99.2207 -1.38965 -158.7 29.1406 -188.94 51.6006zM184.38 405.4c109.75 73.9395 187.601 -54.0605 187.601 -54.0605c-43.04 5.86035 -91.1807 8.24023 -91.1807 8.24023c-43.0996 70.0098 -65.7998 -6.58008 -73.7998 -44.29
+c-48.4805 -19.5557 -87.8545 -77.8545 -87.8896 -130.13c0 -0.910156 0.139648 -1.78027 0.139648 -2.67969l-21.8398 -0.150391c-1.41016 100.43 29.8701 160.09 52.4199 190c-0.842773 -0.0683594 -2.21191 -0.123047 -3.05664 -0.123047
+c-20.9482 0 -37.9502 17.001 -37.9502 37.9492c0 20.9492 17.002 37.9502 37.9502 37.9502c13.1934 0 28.5273 -9.65723 34.2266 -21.5566c2.04199 -4.25488 3.7002 -11.5381 3.7002 -16.2578c0 -1.35547 -0.143555 -3.54785 -0.320312 -4.8916zM488.57 271.23
+c-4.21777 -2.00879 -11.3906 -3.63867 -16.0615 -3.63867c-0.886719 0 -2.32422 0.0625 -3.20898 0.138672c84.4502 -113.45 -49 -194.61 -49 -194.61c5.87012 43.0303 8.20996 91.1602 8.20996 91.1602c66.6006 40.96 0.640625 63.54 -38.46 72.54
+c-19.3633 48.9775 -77.8232 88.7422 -130.49 88.7598c-2.75 0 -5.43945 -0.259766 -8.13965 -0.410156l-0.139648 22.5c93.6094 1.33008 151.72 -25.7998 183.45 -47.7402c-0.226562 1.52539 -0.40918 4.01465 -0.40918 5.55566c0 20.9434 16.9971 37.9404 37.9395 37.9404
+c20.9434 0 37.9404 -16.9971 37.9404 -37.9404c0 -13.2236 -9.69043 -28.5703 -21.6309 -34.2549zM374.06 11.7598v-0.0595703c0.0917969 0.000976562 0.239258 0.000976562 0.330078 0.000976562c20.9375 0 37.9297 -16.9922 37.9297 -37.9297
+s-16.9922 -37.9297 -37.9297 -37.9297c-13.1963 0 -28.5273 9.66211 -34.2197 21.5684c-1.76367 3.66602 -3.39453 9.93848 -3.63965 14c-111.98 -80.3398 -191.9 51 -191.9 51c43.0703 -5.87988 91.1904 -8.21973 91.1904 -8.21973
+c41.3301 -67.1709 63.9199 0.540039 72.7695 39.4893c50.418 18.7646 91.3604 77.6543 91.3906 131.45c0 2.08008 -0.220703 4.08984 -0.300781 6.15039l19.5205 0.139648c1.28027 -89.9697 -23.71 -147.2 -45.1406 -179.66z" />
+    <glyph glyph-name="mailchimp" unicode="&#xf59e;" 
+d="M330.61 204.48c-2.50977 3.17969 -4.70996 8.31934 -5.9707 14.3193c-2.22949 10.6807 -1.98926 18.4102 4.24023 19.4199c6.23047 1.01074 9.25 -5.45996 11.4805 -16.1299c1.5 -7.17969 1.20996 -13.7803 -0.450195 -17.6094
+c-1.27832 0.165039 -3.36133 0.299805 -4.65039 0.299805c-1.28809 0 -3.37207 -0.134766 -4.64941 -0.299805zM277.05 196c-4.45996 1.95996 -10.2598 4.13965 -17.2598 3.7002c-12.5996 -0.770508 -21.75 -7.21973 -22.5996 -3.48047
+c-0.400391 1.83984 2.40918 4.87988 5.40918 7.06055c4.5791 3.35254 12.9014 6.07422 18.5762 6.07422c3.45312 0 8.84473 -1.07324 12.0342 -2.39453c8.63965 -3.7002 14.0098 -11.1504 12.1201 -13.0898c-1.08008 -1.12988 -3.81055 0.129883 -8.28027 2.12988z
+M268.05 190.87c9.68066 1.14941 16.8604 -4.62988 15.4004 -6.85059c-0.629883 -1.00977 -2.02051 -0.829102 -4.94043 -0.489258c-1.55078 0.239258 -4.08301 0.433594 -5.65234 0.433594c-3.72656 0 -9.58105 -1.06738 -13.0674 -2.38379
+c-4.04004 -1.62012 -4.30957 -1.15039 -5.20996 -0.810547c-1.53027 3.57031 4.40039 8.68066 13.4697 10.1006zM322.22 173.77c-3.40039 -6.91016 -17.7002 0.0703125 -14.2998 7c3.40039 6.93066 17.6797 -0.129883 14.2998 -7zM337.88 194.24
+c7.69922 -0.149414 7.42969 -16.0605 -0.259766 -15.9307c-7.69043 0.130859 -7.40039 16.0605 0.259766 15.9307zM119.09 115.34c4.0293 0.910156 3.40039 -1.25 3.37012 -0.359375c0.256836 -0.317383 0.46582 -0.904297 0.46582 -1.3125
+c0 -0.299805 -0.119141 -0.755859 -0.265625 -1.01758c-3.16016 -7.37012 -20.1904 -7.68066 -21.5801 9c-0.910156 10.8594 9.30957 21.0293 -2.28027 28.6191c-1.77734 1.17773 -4.95117 2.13281 -7.08301 2.13281c-3.84961 0 -8.67285 -2.62207 -10.7666 -5.85254
+c-3.2998 -5.16016 -3.11035 -12.2002 -7.37988 -11.6299c-3.7207 0.540039 -3.70996 14.4805 5 24.0801c7.22949 8 25.9492 11.9297 35.0498 -5.54004c8.11035 -15.3896 -8.2002 -27.7695 -3 -35.7695c2.46973 -3.80078 7.14941 -2.66016 8.46973 -2.35059zM418.81 132.41
+c6.44043 0 16.5605 -7.5 16.5605 -25.2705c0 -17.7695 -7.37012 -37.9092 -9.11035 -42.3799c-54.3896 -130.279 -264.56 -130.06 -322.29 3c-31.5293 -0.0400391 -64.1699 26.9805 -67.5293 60.3799c-0.256836 2.25195 -0.463867 5.91992 -0.463867 8.18652
+c0 7.21289 2.04395 18.5537 4.56348 25.3135l-14.7598 12.5107c-67.5498 57.04 143.72 291.85 211.27 232.93c0.339844 -0.299805 22.9902 -22.5205 23.0498 -22.5703l12.5508 5.33008c59.2695 24.5303 107.359 12.6904 107.42 -26.4697
+c0.0292969 -20.3604 -12.9404 -44.1006 -33.7305 -65.6504c26.1699 -24.2998 20.0205 -71.6094 21.5205 -83c7.19922 -2 30.6992 -7.62012 41.0996 -18.54c18.3604 -19.25 5.52051 -39.5801 3.07031 -43.25c4.20996 -11.2998 3.42969 -8.79004 6.7793 -20.5195z
+M102.81 84.25c29.4502 -0.680664 38.6309 28.2002 34.0908 57.8398c-9.74023 62.9404 -90.1699 48.9805 -84 -12.3301c2.44922 -24.3594 27.0898 -44.8994 49.9092 -45.5098zM84.2998 198.45c19.3105 51.8096 51.54 99.5498 94.2002 132.399
+c31.6504 26.4102 65.7998 45.3506 65.7998 45.3506s-18.3896 21.3193 -23.9395 22.8896c-34.1699 9.23047 -107.94 -41.6494 -155.051 -108.88c-19.0596 -27.21 -46.3096 -75.3604 -33.2998 -100.21c1.58984 -3 10.71 -10.9297 15.5898 -15
+c8.18066 11.9102 21.54 20.5 36.7002 23.4502zM323.18 97.2998c2.58984 0.259766 0.560547 -2.53027 0.560547 -2.53027s-27.4004 -12.75 -71 0.740234c1.20996 -10.2295 11.1699 -14.8193 15.9395 -16.6699c31.4004 -12.21 86.6904 -2.58008 128.46 26
+c0.850586 0.589844 1.41992 0 0.730469 -1c-28.9697 -41.3496 -128.73 -54.7598 -151.37 -21.3496c-12.0801 17.8301 -0.599609 43.8594 19.5498 41.1494c6.7998 -0.769531 53.7705 -8 100.48 13.6807c27.4893 12.7598 37.8701 26.79 36.3096 38.1602
+c-0.447266 3.00293 -2.57031 7.16504 -4.74023 9.28906c-5 4.83008 -12.79 8.60059 -26 12.3105c-4.35938 1.22949 -7.31934 2.00977 -10.5098 3.05957c-5.67969 1.83008 -8.47949 3.33008 -9.10938 14c-0.280273 4.62988 -1.09082 20.9102 -1.38086 27.6299
+c-0.519531 11.7607 -1.91992 27.8506 -11.9199 34.4902c-2.37305 1.51953 -6.58691 2.75195 -9.40527 2.75195c-1.1748 0 -3.05371 -0.229492 -4.19434 -0.511719c-5.69043 -0.969727 -9.06055 -4.00977 -13.2598 -7.50977
+c-12.4404 -10.3701 -22.9502 -12.0605 -34.6406 -11.5605c-6.98926 0.290039 -14.3994 1.37988 -22.8799 1.87988l-5 0.290039c-19.5801 1 -40.5693 -15.9092 -44.0693 -39.9092c-4.86035 -33.4307 19.3291 -50.7002 26.3291 -60.8301
+c0.912109 -1.0918 1.77246 -3.12598 1.9209 -4.54004c0 -1.94043 -1.25 -3.48047 -2.48047 -4.79004c-19.9805 -20.54 -26.3701 -53.1699 -18.8398 -80.3701c0.768555 -2.76562 2.35938 -7.12891 3.5498 -9.74023c17.7002 -41.2598 72.4902 -60.4795 126 -43
+c5.81152 1.89844 14.9238 5.74219 20.3398 8.58008c9.78906 4.8418 23.7441 15.2852 31.1504 23.3096c14.2002 14.8408 22.6396 30.9707 25.9297 50.8408c2.81055 18.6191 -7.78027 18.7598 -11.4395 18.0996c-1.13477 6.94531 -4.32422 17.8223 -7.12012 24.2803
+c-15.6299 -12.3506 -35.71 -20.9707 -51 -25.3506c-69.4004 -19.9102 -90.1904 6.35059 -96.4004 -13.8096c33.7705 -12.3701 69.5098 -7.07031 69.5098 -7.07031zM171.31 290.5l0.0605469 0.00976562c-0.0947266 -0.115234 -0.171875 -0.331055 -0.171875 -0.481445
+c0 -0.418945 0.34082 -0.759766 0.759766 -0.759766c0.124023 0 0.308594 0.0546875 0.412109 0.121094c11.4199 8.30078 64.9502 42.7705 134.5 26.8301c0.860352 -0.189453 1.39941 1.29004 0.639648 1.7207c-11.3398 6.33984 -28.6895 10.6494 -41 10.7393
+c-0.404297 0.00976562 -0.732422 0.345703 -0.732422 0.75c0 0.134766 0.0634766 0.332031 0.142578 0.44043c1.84668 2.41602 5.30078 5.88379 7.70996 7.74023c0.166992 0.126953 0.302734 0.401367 0.302734 0.611328c0 0.424805 -0.344727 0.770508 -0.770508 0.770508
+c-0.0146484 0 -0.0380859 -0.000976562 -0.0517578 -0.00195312c-17.5205 -1.08008 -37.5107 -9.4707 -49 -17.2998c-0.107422 -0.0751953 -0.300781 -0.136719 -0.431641 -0.136719c-0.414062 0 -0.75 0.335938 -0.75 0.75
+c0 0.0498047 0.00976562 0.12793 0.0214844 0.176758c0.899414 4.30957 3.72949 9.98926 5.18945 12.6494c0.0566406 0.0947266 0.102539 0.261719 0.102539 0.37207c0 0.402344 -0.327148 0.729492 -0.730469 0.729492
+c-0.110352 0 -0.276367 -0.0449219 -0.37207 -0.101562c-18.4697 -9.4502 -39.0898 -26.2803 -55.8301 -45.6299z" />
+    <glyph glyph-name="megaport" unicode="&#xf5a3;" horiz-adv-x="496" 
+d="M214.5 238.4l33.4004 33.3994l33.3994 -33.3994v-66.4004l-33.2998 -33.2998l-33.5 33.5v66.2002zM248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM393.1 25.5996h0.100586v87.1006l-59.7002 59.7002v87.5996l-59.5 59.5
+v75.5996l-26.0996 19.2002l-26.1006 -19.2002v-75.5996l-59.5 -59.5v-87.9004l-59.5 -59.5v-87l26.1006 -19.1992l26.0996 19.1992v65.5l33.5 33.4004l33.4004 -33.4004v-65.5l26.0996 -19.1992l26.2002 19.1992v65.5l33.3994 33.4004l33.4004 -33.4004v-65.5l26 -19.1992z
+" />
+    <glyph glyph-name="nimblr" unicode="&#xf5a8;" horiz-adv-x="384" 
+d="M246.6 148.71c15.5703 0 27.1504 -11.46 27.1504 -27s-11.6201 -27 -27.1504 -27c-15.6992 0 -27.1494 11.5703 -27.1494 27s11.5498 27 27.1494 27zM113 121.75c0 15.6104 11.6797 27 27.1504 27c15.4697 0 27.1494 -11.46 27.1494 -27s-11.4697 -27 -27.1494 -27
+c-15.4404 0 -27.1504 11.3096 -27.1504 27zM191.76 289c98.3701 0 177.76 -78.9102 177.76 -176.48c0 -97.5693 -79.6094 -176.52 -177.76 -176.52c-98.1494 0 -177.76 78.8701 -177.76 176.52v335.48l45.25 -227c30.2002 48.2305 97.75 68 132.51 68zM191.76 -19.1201
+c73.2402 0 132.51 58.96 132.51 131.64c0 72.6807 -59.2393 131.54 -132.51 131.54c-73.2695 0 -132.51 -58.8994 -132.51 -131.59c0 -72.6895 59.2402 -131.59 132.51 -131.59z" />
+    <glyph glyph-name="rev" unicode="&#xf5b2;" 
+d="M289.67 173.11c0 -36.1943 -29.375 -65.5801 -65.5703 -65.5801c-36.1943 0 -65.5693 29.375 -65.5693 65.5693c0 36.1953 29.375 65.5703 65.5693 65.5703h0.0107422c36.1445 -0.0439453 65.5156 -29.415 65.5596 -65.5596zM429.22 178.16v-210.16h-210.16v0.110352
+c-110.939 2.70996 -200.06 93.4092 -200.06 205c0 108.569 84.2998 197.319 191 204.569v38.3203l108.77 -62.7803l-108.77 -62.79v39.1201c-80 -7.16016 -143 -74.5498 -143 -156.43c0 -86.6201 70.4902 -157.12 157.11 -157.12s157.09 70.5 157.09 157.12
+c-0.0224609 47.1709 -32.1934 106.235 -71.8105 131.84l45.3799 26.2002c39.8018 -32.8584 73.0977 -101.402 74.3203 -153h0.129883z" />
+    <glyph glyph-name="shopware" unicode="&#xf5b5;" horiz-adv-x="512" 
+d="M403.5 -7.41016c-36.0898 -26.8223 -101.875 -48.5908 -146.841 -48.5908c-0.181641 0 -0.477539 0.000976562 -0.65918 0.000976562c-137.19 0 -248 111 -248 248c0 137.19 111 248 248 248h0.211914c52.3994 0 126.538 -28.4482 165.488 -63.5
+c0.643555 -0.585938 1.16602 -1.76855 1.16602 -2.63965c0 -1.9707 -1.59961 -3.56934 -3.57031 -3.56934c-0.125977 0 -0.330078 0.0126953 -0.456055 0.0292969c-15.2227 2.03223 -40.042 3.68164 -55.4004 3.68164
+c-0.361328 0 -0.948242 -0.000976562 -1.30957 -0.00195312c-129.36 0 -222.399 -53.4697 -222.399 -155.35c0 -109 92.1299 -145.881 176.829 -178.73c33.6406 -13 65.4004 -25.3604 87 -41.5898c0.788086 -0.592773 1.42676 -1.87402 1.42676 -2.86035
+c0 -0.985352 -0.638672 -2.2666 -1.42676 -2.85938zM503 214.91c0.578125 -6.2832 1.04688 -16.5039 1.04688 -22.8135c0 -25.8613 -7.62793 -66.4043 -17.0273 -90.4971c-0.495117 -1.2373 -1.98047 -2.24316 -3.31348 -2.24316
+c-0.495117 0 -1.25 0.19043 -1.68652 0.423828c-29.4893 16.3594 -61.6094 28.3398 -92.6797 39.9297c-60.2803 22.4902 -112.34 41.8896 -112.34 84.4902c0 1.45996 -3.87988 53.6299 80.25 53.6299c50.8604 0 92.7197 -17.4805 144.48 -60.4805
+c0.625 -0.530273 1.19336 -1.62305 1.26953 -2.43945z" />
+    <glyph glyph-name="squarespace" unicode="&#xf5be;" horiz-adv-x="512" 
+d="M186.12 104.66l157.22 157.2c38.5703 38.5898 101.13 38.5898 139.72 0c38.5908 -38.5801 38.5908 -101.13 0 -139.721l-119.25 -119.239l-0.0400391 -0.0400391c-19.2891 -19.2705 -50.5498 -19.25 -69.8193 0.0400391l154.149 154.14
+c19.29 19.29 19.29 50.5703 0 69.8604s-50.5693 19.29 -69.8594 0l-157.181 -157.181c-9.64941 -9.64941 -25.29 -9.64941 -34.9395 0c-9.65039 9.65039 -9.65039 25.29 0 34.9404zM430.65 209.46c9.63965 -9.63965 9.63965 -25.2803 -0.0107422 -34.9297l-157.199 -157.2
+c-38.5801 -38.5703 -101.141 -38.5703 -139.721 0l-0.0195312 0.0195312c-9.64062 9.65039 -9.62988 25.29 0.0195312 34.9307l0.0107422 0.00976562c9.64941 9.63965 25.2793 9.62988 34.9199 -0.00976562l0.0498047 -0.0498047
+c19.29 -19.2607 50.5498 -19.2402 69.8193 0.0498047l157.2 157.18c9.64062 9.65039 25.2803 9.65039 34.9307 0zM168.66 122.13c-38.6006 -38.5801 -101.13 -38.5801 -139.73 0.00976562c-38.5801 38.5801 -38.5801 101.13 0 139.721l119.23 119.25l0.0195312 0.0195312
+c19.3008 19.2803 50.5703 19.2705 69.8506 -0.0195312l-154.17 -154.17l-0.0302734 -0.0302734c-19.2803 -19.2998 -19.2598 -50.5605 0.0302734 -69.8398l0.00976562 -0.0107422c19.29 -19.29 50.5703 -19.2793 69.8496 0.0107422l157.21 157.18
+c9.64062 9.63965 25.2705 9.63965 34.9102 0c9.64062 -9.65039 9.64062 -25.29 0 -34.9404zM81.3301 174.53c-9.64062 9.64941 -9.65039 25.29 0 34.9297l157.189 157.19c38.5908 38.5898 101.131 38.5898 139.721 0c9.64941 -9.64062 9.64941 -25.2803 0 -34.9307
+c-9.64062 -9.64941 -25.2803 -9.64941 -34.9307 0l-0.0195312 0.0205078c-19.29 19.2793 -50.5596 19.2695 -69.8398 -0.0205078l-157.21 -157.189c-9.64062 -9.64062 -25.2705 -9.64062 -34.9102 0z" />
+    <glyph glyph-name="themeco" unicode="&#xf5c6;" 
+d="M202.9 439.57c9.89941 5.72949 26 5.81934 35.9492 0.209961l191.15 -107.63c10 -5.60059 18 -19.4404 18 -30.8604v-217.29c0 -11.4404 -8.05957 -25.29 -18 -31l-191.19 -108.74c-9.92969 -5.66016 -26 -5.56934 -35.8496 0.209961l-185.1 108.41
+c-9.86035 5.78027 -17.8604 19.7402 -17.8604 31.1201v217.29c0 11.4404 8 25.3604 17.9102 31.0801zM125.5 239.74c-15.9404 0 -31.8896 -0.140625 -47.8301 -0.140625v-101.449h19.1299v29.8496h28.7002c49.71 0 49.5596 71.7402 0 71.7402zM265.64 139.45
+l-30.7295 34.6396c37 7.50977 34.7998 65.2305 -10.8701 65.5098c-16.0898 0 -32.1699 0.140625 -48.2598 0.140625v-101.59h19.1299v33.9092h18.4102l29.5596 -33.9092h22.7598v1.2998zM224.05 221.77c23.3398 0 23.2598 -32.46 0 -32.46h-29.1299v32.46h29.1299z
+M128.49 223.37c21.1797 0 21.1094 -38.8506 0 -38.8506h-32.3105v38.8408zM321.14 241.62c-68.46 0 -71 -105.8 0 -105.8c69.4805 0.00976562 69.4102 105.8 0 105.8zM321.14 224.23c44.1201 0 44.8008 -70.8604 0 -70.8604c-44.7998 0 -44.4297 70.8604 0 70.8604z" />
+    <glyph glyph-name="weebly" unicode="&#xf5cc;" horiz-adv-x="512" 
+d="M425.09 382.17c50.9102 0 87.5498 -35.1504 86.9199 -83.4697c0 -21.6201 -0.950195 -18.5498 -77.5 -227.2c-22.3799 -60.5703 -67.7695 -69.6699 -92.7402 -69.6699c-39.2393 0 -70.0391 19.46 -85.9297 54.29c-15.8896 -34.5205 -46.7002 -53.9805 -85.9297 -53.9805
+c-24.9697 0 -70.3701 8.78027 -92.7402 69.3506c-72.9902 200.21 -77.1699 204.52 -77.1699 233.479c0 43.3105 38.5898 77.2002 87.54 77.2002c40.21 0 73.2803 -25.7295 83.6602 -64.3301c18.4795 58.0498 65.5 64.3301 85.2803 64.3301
+c19.4492 0 66.7891 -6.26953 84.9492 -64.3301c10.3799 38.6006 43.7803 64.3301 83.6602 64.3301zM451.43 267.36c3.49023 11.1992 7.29004 19.3701 7.61035 27.2393c0 22.3906 -16.1602 35.71 -38.3301 35.71c-18.6904 0 -31.9902 -11.7998 -36.1104 -29.0498
+l-44.0293 -139.819h-0.950195l-44.6602 136.79c-6.01953 19.9697 -16.4697 32.0791 -38.96 32.0791s-32.9404 -12.4092 -38.96 -32.0791l-44.6602 -136.79h-0.950195l-44.0293 139.819c-4.12012 17.25 -17.4199 29.0498 -36.1104 29.0498
+c-22.4902 0 -38.3301 -13.0195 -38.3301 -29.3594c0 -10.5898 2.54004 -19.6699 7.91992 -34.5l64.9404 -175.23c7.91016 -21.4795 21.2197 -37.2197 46.2393 -37.2197c23.1201 0 37.0605 12.0996 44.0205 33.5996l39.2803 117.42h0.949219l39.2803 -117.42
+c6.65039 -21.4893 20.5898 -33.8994 44.0303 -33.8994c25.0195 0 38.3203 15.7295 46.2402 37.2197z" />
+    <glyph glyph-name="wix" unicode="&#xf5cf;" horiz-adv-x="640" 
+d="M393.38 316.31c0 -13.0293 2.08008 -32.6895 -28.6797 -43.8291c-9.52051 -3.4502 -15.9502 -9.66016 -15.9502 -9.66016c0 31 4.71973 42.2197 17.4004 48.8594c9.75 5.11035 27.2295 4.62988 27.2295 4.62988zM277.58 280.77
+c5.47949 26.3408 30.8799 38.3408 55.2998 35.2705l-65.5703 -247.93s-21.6396 -1.56055 -32.46 3.95996c-14.2197 7.25 -20.9893 12.8398 -29.5898 46.5693c-7.66992 30.0703 -29.1494 118.4 -31.1201 124.7c-4.30957 13.8105 -10.6396 14.9404 -15.3994 0
+c-2.00977 -6.29004 -23.4502 -94.6299 -31.1201 -124.7c-8.61035 -33.7295 -15.3701 -39.3193 -29.5898 -46.5693c-10.8301 -5.52051 -32.46 -3.95996 -32.46 -3.95996l-65.5703 247.93c23.8604 3 49.7305 -8.5498 55.2803 -35.2705l34.2393 -132.659l28.4805 108.569
+c7.76953 32.3506 21.0596 48.5303 48.4297 48.5303c27.6201 0 40.7402 -16.54 48.4307 -48.5303l28.4795 -108.569zM393.36 275.56v-8.97949l0.0195312 0.00976562v-150.27c-0.129883 -30.8301 -3.33008 -37.6807 -17.2598 -44.7803
+c-10.8203 -5.52051 -27.3701 -3.42969 -27.3701 -3.42969v152.069c0 21.25 -1.95996 27.9404 13.1797 35.2002c6.19043 2.96973 11.96 5.25 17.9707 8.61035c9.35938 5.22949 13.46 11.5693 13.46 11.5693zM556.8 191.48l82.9902 -123.36s-35.9297 -4.62012 -53.3203 11.21
+c-13.9102 12.6602 -23.7393 28.3398 -53.1396 70.7197c-0.5 0.770508 -6.25977 10.5205 -13.0703 0c-34.9297 -50.3496 -41.0195 -60.2598 -52.5098 -70.7197c-17.3799 -15.8301 -53.9502 -11.21 -53.9502 -11.21l82.9697 123.36l-83.1992 123.739
+s35.1094 5.98047 52.5 -9.84961c13.3799 -12.1797 24.8896 -30.2402 54.1797 -72.4697c6.82031 -10.54 12.5996 -0.730469 13.0703 0c29.7695 42.9199 40.8799 60.3691 54.1797 72.4697c17.3896 15.8301 52.5 9.84961 52.5 9.84961z" />
+    <glyph glyph-name="ello" unicode="&#xf5f1;" horiz-adv-x="496" 
+d="M248 440c136.97 0 248 -111.03 248 -248s-111.03 -248 -248 -248s-248 111.03 -248 248s111.03 248 248 248zM391.84 154.8c2.48047 7.44043 -2.47949 15.71 -9.91992 17.3604c-7.43945 2.47949 -15.71 -2.48047 -17.3604 -9.91992
+c-14.0498 -52.9102 -62 -90.1104 -116.56 -90.1104s-102.51 37.2002 -116.56 90.1104c-1.65039 7.43945 -9.9209 11.5693 -17.3604 9.91992c-7.44043 -1.65039 -11.5703 -9.91992 -9.91992 -17.3604c16.5303 -65.3096 76.0498 -111.6 143.84 -111.6
+s127.31 46.29 143.84 111.6z" />
+    <glyph glyph-name="hackerrank" unicode="&#xf5f7;" horiz-adv-x="512" 
+d="M477.5 320c14.5 -25 14.4805 -230.92 -0.00976562 -256s-192.391 -128 -221.33 -128c-28.9404 0 -206.83 102.8 -221.32 128s-14.4102 230.79 0 256s192.351 128 221.32 128s206.84 -103.05 221.34 -128zM316.13 33.7803c3.95996 0 40.4404 35.7793 37.5605 38.6895
+c-0.870117 0.839844 -8.82031 1.49023 -17.6904 1.83984c0 32.4004 -3 19.0508 0.679688 210.341c0.0703125 3.65918 -1.04004 5.37988 -4.5 5.37988c-11.0801 0.0693359 -22.1602 0.0195312 -33.2295 -0.0605469c-3.25977 -0.0292969 -4.31055 -1.80957 -4.20996 -5.2002
+c1.58984 -48.8994 1.2002 -79.0898 1.2002 -83.6396h-80.2607c0.629883 25.7998 0.209961 79.6396 2.62988 105.39v3.16016c8.87012 0.350586 15.9004 0.970703 16.7705 1.83984c2.90039 2.91016 -34.3203 38.6904 -38.2705 38.6904
+c-3.94922 0 -41.4092 -35.7695 -38.4893 -38.6904c0.879883 -0.839844 7.58984 -1.48926 17.2598 -1.83984v-3.16992c3.15039 -128.67 1.07031 -179.229 0.150391 -212.67c-0.130859 -4.58008 1.63965 -6.10938 5.73926 -6.10938
+c10.1406 0.0292969 20.2803 -0.0800781 30.4102 -0.0800781c4.16016 -0.0605469 5.96973 1.39941 5.74023 5.93945c-1.83008 36.6797 -1.37012 65.7803 -1.37012 72.8799h79.9297c0 -2.41992 0.44043 -3.84961 0.44043 -5.84961
+c-0.350586 -17.7305 -0.94043 -60.0898 -0.94043 -86.3203c-11.29 -0.349609 -16.6797 -0.959961 -17.5498 -1.83008c-2.91016 -2.91992 34 -38.6895 38 -38.6895z" />
+    <glyph glyph-name="kaggle" unicode="&#xf5fa;" horiz-adv-x="320" 
+d="M304.2 -53.5l1.39941 -7.59961c-0.5 -2 -2.5 -3 -6 -3h-66.8994c-4 0 -7.5 1.7998 -10.5 5.2998l-110.5 140.6l-30.7998 -29.2998v-109c0 -5 -2.5 -7.5 -7.5 -7.5h-51.9004c-5 0 -7.5 2.5 -7.5 7.5v497c0 5 2.5 7.5 7.5 7.5h51.9004c5 0 7.5 -2.5 7.5 -7.5v-306
+l132.3 133.7c3.5 3.5 7 5.2998 10.5 5.2998h69.2002c7 0 7.89941 -7.7998 5.2998 -10.5l-139.8 -135.3z" />
+    <glyph glyph-name="markdown" unicode="&#xf60f;" horiz-adv-x="640" 
+d="M593.8 388.9c25.5 0 46.2002 -20.7002 46.2002 -46.1006v-301.6c0.0996094 -25.4004 -20.5996 -46.1006 -46.0996 -46.1006h-547.7c-25.5 0 -46.2002 20.7002 -46.2002 46.2002v301.5c0 25.4004 20.7002 46.1006 46.2002 46.1006h547.6zM338.5 87.4004h-0.200195v209.199
+h-61.5l-61.5 -76.8994l-61.5 76.8994h-61.5v-209.199h61.7002v120l61.5 -76.9004l61.5 76.9004v-120h61.5zM473.8 84.2998l92.2002 107.7h-61.5v104.6h-61.5v-104.6h-61.5z" />
+    <glyph glyph-name="neos" unicode="&#xf612;" horiz-adv-x="512" 
+d="M415.44 -64h-95.1104l-108.21 154.54v-91.0996l-86.4297 -63.4404h-97.6904v482.18l40.4697 29.8203h108.05l123.74 -176.13v112.68l86.4307 63.4502h97.6895v-461.5zM38.7695 412.73v-460.73l72 52.8799v249.12l215.5 -307.64h84.79l52.3506 38.1699h-78.2705
+l-316.14 450.47zM121.31 -53.8799l80 58.7803v101l-79.7598 114.399v-220.939l-72.5498 -53.25h72.3398zM80.6299 437.23l310.601 -442.57h82.3691v442.57h-79.75v-317.561l-222.939 317.561h-90.2803zM311 256.35l72 -102.81v278.53l-72 -53v-122.721z" />
+    <glyph glyph-name="zhihu" unicode="&#xf63f;" horiz-adv-x="640" 
+d="M170.54 299.87h122.68v-217.55h-49.5293l-42.0107 -26.3701l-7.70996 26.3701l-23.4297 0.00976562v217.54zM268.29 105.94v170.31h-72.8203v-170.31l11.9004 -0.0400391l5.08008 -17.4707l27.8994 17.5107h27.9404zM149.83 200.33
+c7.5 0 7.58984 -23.6104 7.58984 -23.6104h-61.6504c-0.879883 -13.1201 -3.50977 -26.6895 -7.86914 -40.6699l14.6191 11.6201c8.73047 -8.75 29.2109 -32.8896 36.79 -41.8096c9.15039 -13.1006 1.24023 -39.9902 1.24023 -39.9902l-53.96 64.9395
+c-12.6094 -48.3496 -35.5898 -69.25 -35.5898 -69.25c-10.0898 -8.96973 -30.5098 -15.75 -51 -9.89941c42.8301 33.2197 66.4502 75.2402 70.8496 125.1h-65.5801s3.82031 23.6201 15.5605 23.6201h52.2695c0.480469 6.56055 1.68066 62.9404 1.68066 73.4404h-28.8701
+c-2.62988 -7.87012 -3.03027 -8.64062 -5.14062 -14.5303c-11.4697 -21.0303 -30.9492 -21.5703 -36.8398 -22.21c17.4902 34.9795 27.3105 69.2197 30.7002 78.1201c8.2002 21.5693 32.2705 21.5693 32.2705 21.5693c-5.25 -14.0098 -9.63086 -27.5498 -13.1201 -40.6699
+h88.5c10.5498 0.25 8.58008 -22.3096 8.58008 -22.3096h-51.1602c0 -21.8701 -0.459961 -46.3604 -2.2002 -73.46h52.3301zM561.85 201.93l-19.2295 14.4307s30.8301 40.0498 36.8301 48.1992c8.72949 10.7402 27.3799 -4.05957 27.3799 -4.05957
+s-24.1504 -32.9297 -44.9805 -58.5703zM411.76 261.02l0.00976562 0.0107422c8.99023 -8.25 34.6602 -45.8604 34.6602 -45.8604l-19.46 -13.7295c-1.59961 2.40918 -41.1201 57.4492 -41.1201 57.4492s16.9004 10.3799 25.9102 2.12988zM640 189.65
+c0 0 0.950195 -23.79 -8.73047 -23.79h-122.359v-73.3203c0.780273 -28.0303 -15.3301 -45.3096 -44.8906 -45.3096c-9.84961 0 -16.1396 1.75977 -26.0195 6.56934c-12.9805 7.4502 -17.3203 17.8701 -19.3096 21.8398c15.6094 -0.65918 27.6094 -1.91992 41.6895 -1.80957
+c13.29 -0.870117 24.4805 7.15039 24.4805 21.1201v70.9199h-107.94c-22.6895 0.540039 -25.5098 22.8496 -25.5098 22.8496h133.47v99.8105c-12.8301 0 -31.6797 -0.830078 -56.5098 -2.43066c-26.46 -0.80957 -35.8398 -2.58984 -49.1504 0.890625
+c-8.16016 2.46973 -14.1797 10.7295 -15.7793 19.5498c67.1396 1.55957 232.359 18.0498 232.359 18.0498s20.1006 5.75977 23.1699 4.58008c12.8105 -6.25 0.589844 -33.4395 0.589844 -33.4395c-17.6396 -0.810547 -46.8896 -2.40039 -87.7695 -4.81055
+c-10.4297 -0.799805 -18.04 -1.2002 -22.8496 -1.2002v-101c0.149414 0 111.279 0.930664 131.06 0.930664z" />
+    <glyph glyph-name="alipay" unicode="&#xf642;" 
+d="M377.74 416c38.6895 0 70.0898 -31.5703 69.9297 -70.2598v-234.41c-48.6104 16.7002 -99.6895 36.04 -148.62 52.7402c23.1406 44.2998 38.3506 90.9199 38.3506 90.9199h-88.7705v31.2402h109.45v19.0098h-109.44v50.4199h-50.9199v-50.4199h-109.439v-19.0098h109.439
+v-31.2402h-92.0801v-16.7002h178.2s-9.91992 -30.25 -26.4502 -60.3398c-47.7793 14.71 -91.75 24.96 -127.13 24.96c-84.6396 0 -103.49 -42.4902 -99.5195 -81.5c3.30957 -31.0703 26.4502 -76.3701 97.04 -76.3701c64.4795 0 116.55 37.0303 148.62 81
+c61.0098 -28.0996 125.64 -62.8203 171.6 -88.4404c-0.5 -38.5195 -31.7402 -69.5996 -70.2598 -69.5996h-307.48c-38.8496 0 -70.2598 31.4102 -70.2598 70.2598v307.48c0 38.8496 31.4102 70.2598 70.2598 70.2598h307.48zM47.2803 125.05
+c-0.990234 17.5205 10.9102 50.5801 78.3594 50.5801c24.96 0 64.8105 -12.7295 109.44 -31.4102c-25.29 -33.2197 -65.7998 -72.8994 -117.87 -72.8994c-59.6797 0 -68.9404 33.5596 -69.9297 53.7295z" />
+    <glyph glyph-name="the-red-yeti" unicode="&#xf69d;" horiz-adv-x="512" 
+d="M488.23 206.3c2.49805 -3.35254 5.51465 -9.31152 6.76953 -13.2998c3.37793 -9.19922 7.36523 -24.5205 8.90039 -34.2002l-2.5 -0.5l-13 14.2998c-17.9004 -28.0996 -9.90039 -15.3994 -16.7002 -25.0996c0 -124.2 -101.3 -211.5 -223 -211.5
+c-61.5 0 -113.9 20.2002 -157.5 60.2002c-64.5 60.8994 -64.9004 125 -64.9004 150.5c-0.5 1.7998 -0.700195 3.5 -1.2002 5.2002l-20.1992 -22.4004c-6.80078 43 25.6992 74.2998 33 80.7002c0.5 1 0.699219 2.2002 1.19922 3.2002l-28.7998 1l-3 3.39941
+c8.5 3.5 25.2998 13.2998 40.2998 14.2998c6.30273 12.0684 18.7568 30.123 27.8008 40.3008c1.2998 6.39941 3.2998 14.1992 6.59961 25.7998l-7.59961 -4.7002l-1.7002 1.7002l1.7002 8.39941c8.87207 21.3857 29.7939 51.5811 46.6992 67.4004l-33 14.2998h3.7002
+c20.9004 4.90039 33.2002 3.2998 49.2002 0c-2.5 4.10059 -5.40039 10.5 -8.40039 18.9004c-1.16699 3.20996 -2.11426 8.58691 -2.11426 12.0029c0 3.81152 1.1709 9.76855 2.61426 13.2969c8.90039 -7.40039 14.3008 -24.5996 15.2002 -27
+c0.700195 3.59961 2.10059 21.2998 33.7002 45.5l1.83008 -0.5l-12 -44.2002c30 17.7002 63 21.9004 97.9004 11.7998c-12.7002 -12.1992 -24.3008 -28.8994 -42.5 -33c7.39941 -2.2998 28.6992 -9.69922 34.1992 -15.1992l-24.7998 7.09961
+c6.5 -6 19.6006 -16.4004 25.1006 -25.0996c19.418 -0.893555 50.0615 -6.85254 68.3994 -13.3008l-0.5 0.5c29.4004 14.7002 37.7002 27.3008 74.7998 3c0 -30.1992 -2.2998 -23.3994 3 -29.7998c6.41602 5.42383 17.75 12.8154 25.3008 16.5
+c13 6.40039 23.0996 4.7002 30.6992 -5.89941c11.8008 0 17.8008 -15.7002 18.4004 -27c14.7998 -2.90039 2.7002 -30.7002 2.5 -30.7002l-7.09961 -18.2002c7.7998 -7.7998 22.0996 -20.9004 31.6992 -44.7998zM398 336.8c-13.0996 8.90039 -22.7002 11.9004 -28.2998 8.5
+c8.09961 -7.2002 13 -14.2998 13.5 -20.7002c1.2002 -7.59961 -2.2002 -14.7998 -10.6006 -21.8994l-4.19922 -3.40039c3.60059 -5.90918 7.36328 -16.2578 8.39941 -23.0996h2.5c-2.09961 13.8994 -2.5 11 0.700195 14.7998c11 -6.40039 14.9004 -14.5 16 -19.9004
+c21.7998 10.1006 29.5 12.7002 54.7998 20.9004l-18.2002 -16c11.4004 0 25.6006 0.299805 46.5 -8.40039c7 24.3008 7.10059 20.7002 2.5 20.7002l-4.69922 -11.2998c-1.7002 10.5 -2.90039 18.9004 -3.40039 25.2998c-0.5 6.7002 -3.90039 9.60059 -9.2998 10.1006
+c-0.00976562 -0.384766 -0.0175781 -1.00781 -0.0175781 -1.3916c0 -3.87012 0.769531 -10.0566 1.71777 -13.8086l-1.7002 -5.90039c-2.90039 10.6006 -5.90039 20.2002 -9.2998 27.7998c-9.7002 17.7002 -30.2002 -9.19922 -43 -11.2998
+c3.72266 -0.207031 9.77051 -0.375977 13.5 -0.375977c3.72852 0 9.77637 0.168945 13.5 0.375977l-22.4004 -5.39941l3.40039 -4.7002c-5.5 0 -16.9004 -0.900391 -22.4004 17.2002zM358.4 346.9l-20.3008 -11.8008c11.3008 -7.59961 20.2002 -18.1992 27.8008 -31.1992
+c6.39941 2.89941 10.0996 5.09961 11.7998 7.59961c2.5 2.7998 2.5 4.7002 3 7.09961c0.599609 1.30078 0.799805 2.7002 -3.40039 11.1006c-7.5 11.7998 -16.2002 15.2998 -18.8994 17.2002zM91 304.9c-7.7998 -24.1006 -11.7002 -49.4004 -13.2002 -74.6006l13.2002 -5
+l1.2002 27c9.5 -16.3994 11.2002 -23.2998 12.2998 -28.7998c2.7998 2.09961 7.7002 7 22.5996 11.2998l1.2002 -1.7002l-7.59961 -10.5996c10.0996 3.5 19.5 3.5 28.2998 0.5l-10.5996 -8.40039c22.7998 -8.39941 26.5996 -7.59961 38.3994 -26.0996l-11.7998 1.2002
+c34.9297 -20.5 66 -47.9004 141.2 -63.2002c15.5996 24.0996 14 21.0996 14 22.9004l0.200195 0.199219l-0.200195 0.200195c-0.700195 1.90039 -14.1006 16.6006 -18.2002 20.7002c7.2998 -1.7998 6 -0.900391 10.7998 -3.7002
+c1.7002 -0.899414 -5.39941 5.40039 -21.8994 20.2002c16.5 -6.7002 27.5996 -15.5 33 -27.7998l1.69922 30.7002l-22.3994 17.6992l6.39941 5.90039c-7.2998 0 -31 3.7002 -49.1992 -16l-2.5 0.5c5.89844 12.1807 13.0664 32.7881 16 46
+c1.61914 7.72656 2.96289 20.4053 3 28.2998c0 19.5 -4.7002 38.4004 -13.5 56.6006c-6.40039 13.5 -16.5 25.2998 -30 35.3994c-5.4707 4.09961 -14.7441 10.1475 -20.7002 13.5c3 0.700195 1 1.2002 -5.40039 1.2002c-6.39941 0.200195 -13 0.700195 -19.3994 1.2002v-3
+c-8.67773 -1.375 -20.0127 -8.18457 -25.3008 -15.2002h-1.19922l-5.40039 -3.40039c-1.2002 2.90039 0 6.30078 4.2002 9.30078l10.5996 11.2998l-3.39941 -0.5l2 3.39941c-2.30078 0.200195 -4.2002 0.5 -6.2002 0.700195l-0.5 1.2002l2.5 1.7002
+c2.2002 -0.200195 4.59961 -0.5 7.09961 -0.700195c2.52539 1.3457 6.89746 2.43848 9.75879 2.43848c1.18359 0 3.08301 -0.196289 4.24121 -0.438477l2.5 -1.2002l0.200195 -0.5c6.50488 0.421875 16.9883 1.7207 23.4004 2.90039
+c20.6992 2.89941 36.6992 11.2998 48.5 24.7998l-21.1006 0.5c-25.7998 0.5 -49.3994 -5.40039 -71.2998 -18.9004l-2.5 2.5l0.5 4.7002l1.7002 7.10059c1.37695 7.08105 4.24414 18.415 6.39941 25.2998c-1.69922 -0.700195 -4.59961 -4.90039 -9.2998 -11.2998
+c-4.7002 -6.40039 -8.39941 -13 -10.0996 -19.4004c-0.905273 -4.24512 -3.54785 -10.6514 -5.90039 -14.2998l-13.5 29l8.40039 -35.7998l-0.5 -1.7002h-0.015625c-4.51953 0 -11.6807 1.12012 -15.9844 2.5c-3.40039 0.700195 -10.6006 1.2002 -20.9004 1.2002
+c0.5 0 -0.700195 0 -3.2002 -0.5c5.40039 -1.30078 13.5 -4.2002 24.8008 -8.40039l6.39941 1.2002c-4.2002 -3.40039 -10.8994 -10.1006 -20.2002 -19.4004c-9.39941 -8.89941 -20.1992 -26.0996 -32.5 -50.2002l4.2002 1.2002l10.1006 9.2998l-5.40039 -4.69922
+l13 12.2998l-2.5 -3.40039c-5.09961 -7.59961 -8.09961 -12.2998 -9.2998 -15.2002zM367.5 -25.0996c8.2998 40.2998 3.59961 55.1992 -0.700195 89.5c-35.5 -11.8008 -20.2998 -6 -32 -10.8008l10.5 -14.1992l-1.2002 -1.2002c-20.1992 6 -23.1992 10.7998 -27.7998 15
+c6 -22.2002 13.9004 -26.4004 29.5 -31.7002c-9.5 -9.59961 -25.3994 4 -34.3994 13l2.5 -23.5996l-4.2002 -3c-5 22.0996 -22 39.0996 -25.2998 39.0996c-44 -13 -79.1006 -5.7998 -113.9 10.5996c-1.59961 -0.399414 -70.5996 -18 -120.5 37.1006
+c13.7002 -35 32.2998 -63.7002 71.2998 -82.6006c-4.13574 8.56934 -13.4102 20.4863 -20.7002 26.6006c0 0 0.700195 3.7002 1.2002 10.0996c19.4004 -19.3994 50.7002 -39.5 93.2002 -60.2002c-59.5996 24.5 -59.9004 24.8008 -69.0996 29l16 -20.6992
+c-3 -1.30078 -6.7002 -0.5 -10.1006 1.19922c-10.3359 6.03809 -26.1943 17.1484 -35.3994 24.8008c1.89941 -2.2002 80.0996 -98.5 200.899 -74.3008c-43.0996 21.8008 -52.3994 52.4004 -66.5996 73.5l17.7002 -7.59961l-11.8008 23.0996
+c20.1006 -27.7998 28.6006 -35 38.4004 -44.2998l-30 16.5c12.5996 -27.0996 33.7002 -47 63.5 -58.7998c2.90039 1.5 9.09961 -1.09961 59 23.9004zM482.8 189.3l8.93066 -12.7998l-12.3008 32.5c10.9004 0 10 -0.0996094 21.2002 -3.40039
+c-6.72168 9.44824 -18.8184 23.7842 -27 32l-26.5996 23.1006l1.2002 3l23.5996 2.5c-9.00293 1.98535 -23.7871 3.86719 -33 4.2002l-17.7002 -0.5l-0.5 2.89941l14.7998 13l-41.7998 -20.2002l-12.2998 18.9004l3.40039 -16l-2.5 -1.2002l-5.90039 4.2002h-10.0996
+l5.39941 -4.2002v-2l-13.5 -27.7998c-10.0996 -31.2002 -21.8994 -67.9004 -35.3994 -109.7l1.19922 16l-1.19922 -3v-0.5c-6.40039 -16 -13.6006 -29.5 -21.2002 -39.5996l9.2998 21.8994l-46.7002 -20.1992c11.7998 13.5 23.6006 19.3994 34.9004 18.8994
+c-71.2002 11.4004 -106.2 41 -110.4 46c3.60059 -6.2002 13.2002 -17.7998 16 -40.0996l-1.7002 -1.2002c-4.2998 15.5996 -16.3994 46.5996 -55.7998 69.5996l23.6006 -2.5c-10.5 12.6006 -36.3008 17.8008 -40.8008 16l-2.5 2.5l8.40039 8.40039l-22.2998 -5.7998
+l5.39941 13.5c-8.09961 -4.40039 -4.2998 -2.40039 -17 -8.90039l-1.69922 0.5c0.599609 0.600586 0.899414 -0.700195 -3 9.2998c-0.600586 -11 -0.400391 -8.59961 -1 -11.7998c-1.07324 -0.355469 -2.73145 -1.11719 -3.7002 -1.7002c-40 20.6006 -57.2002 11 -73 5.2002
+c36.7998 -6 29.2998 -4 38.3994 -9.2998c-25.7998 -12.2002 -31.8994 -12.5996 -51.3994 -70.0996l22.2695 22.2998l2.5 -16.4004c13.4004 -58 68.7002 -92.5 126.4 -83.3994l-26.1006 22.3994l44.8008 -22.3994l-1.2002 -3c4.59961 -1.7002 9.2998 -3 13.5 -4.2002
+c16.4727 -4.87598 43.7852 -8.83203 60.9648 -8.83203c8.94727 0 23.3887 1.08887 32.2354 2.43164l-32.5 21.2002c35.7998 -7 50.6992 -31.4004 56.7998 -39.5996l-7.60059 29l1.2002 2.5l19 -27.9004l-9.2998 26.5996l21.9004 -13.5h1.19922l-3.39941 4.2002
+l7.09961 -4.7002l-14.2998 16l1.2002 3l7.59961 -7.09961c4.2998 1.2002 41.4004 10.5 80.9004 40.2998c47.8994 35.4004 68.0996 73.7998 71.5996 79.7002l-3 9.2998zM476.7 260.6l-18.2002 -1.19922l14.2998 -11.8008zM221.9 253.5
+c2.69922 -5.09961 5.69922 -12.4004 18.3994 -18.7998c-7.5 -10.9004 -8.2998 -10.5 -20.2002 -16c-7.59961 -7.7002 -13.5 -13.1006 -17.6992 -14.7998l7.09961 13c-4.61914 -1.69336 -12.3604 -3.06641 -17.2793 -3.06641c-2.08789 0 -5.45703 0.25293 -7.52051 0.566406
+l-0.5 1.19922c19 2.10059 37.2002 9.40039 46.5 16c-4.10059 4.2002 -7.10059 11.3008 -8.7998 21.9004zM225.6 355.8c4.92578 -2.78809 11.3486 -8.9707 14.3008 -13.7998c14.6992 -24.0996 19.1992 -40.0996 11.2998 -47.7002
+c-7.90039 -7.59961 -16.7998 -7.09961 -26.1006 3c-9.2998 10.1006 -13.5 23.7002 -11.7998 39.6006c1.7002 15.8994 5.90039 22.2998 12.2998 18.8994zM220.9 309.5c7.09961 -21.2998 33.3994 -23.0996 26.8994 4.90039c-3.89941 16.5 -8.7998 27.0996 -15.2002 32.5
+c-6.59961 5.39941 -10.0996 6.69922 -11.2998 4.19922c-2.5 -2.89941 -3.5 -11.2998 -3 -24.7998c7.5 12.7998 11.6006 5.90039 12.5 4.7002l-0.5 -0.5c-0.799805 -1.7002 -2.59961 -3.09961 1.7002 -6.2002l1.2002 0.5v-4.7002
+c-1.7998 -12.5 -6.90039 -12.7998 -12.2998 -10.5996zM175.9 315c-2.09375 0.388672 -4.49707 2.27051 -5.40039 4.2002c-3.5 8.5 0 21.2002 8.09961 21.2002c2 -0.5 3.7002 -1.7002 5.40039 -4.7002c-1.5 -0.400391 -4.7002 -4.7998 0.700195 -5.90039h0.5
+c0 -13.7002 -7.7002 -15.0996 -9.2998 -14.7998zM216 365.1l-3.7002 2.40039l-0.5 2.5c18.2998 0 25.7998 -8.7998 28.2998 -14.2998c-6.0459 3.29688 -16.542 5.97266 -23.4297 5.97266c-0.737305 0 -1.93359 -0.0322266 -2.66992 -0.0732422l-0.5 3zM144.2 315.7
+c1.59961 -1.60059 0.599609 -0.299805 4.89941 -6.60059c-25.3994 -4.69922 -23.1992 -12.2998 -30 -12.2998c0.300781 0.600586 7.10059 16 23.6006 16l-7.10059 7.60059c9.40039 0.5 15.2002 2.09961 19.9004 -5.90039c0.0175781 6.60938 1.31641 17.1826 2.90039 23.5996
+c2 7.60059 3.69922 11.8008 5.39941 13.5c1 1.5 16.2998 15.7002 29 22.4004c2.05469 1.48047 5.77637 2.68262 8.30859 2.68262c1.48438 0 3.81055 -0.44043 5.19141 -0.982422c0.285156 -0.345703 0.515625 -0.989258 0.515625 -1.43652
+c0 -0.0732422 -0.00683594 -0.191406 -0.015625 -0.263672l-13 -7.59961c7.60059 -11.8008 10.5 -25.3008 8.7998 -41.3008c-0.932617 -9.45898 -7.5625 -22.1377 -14.7998 -28.2998l2.90039 -4.7002c-30 2.2002 -24.7998 6.80078 -46.5 23.6006zM162.9 334.4
+c-1.80078 -7.2002 -2.30078 -16 -3.10059 -26l5.40039 -6.40039l7.09961 -3.40039c2.01465 -0.384766 5.31445 -0.697266 7.36523 -0.697266c1.08887 0 2.85156 0.0888672 3.93457 0.197266c1 1.7002 3.5 4.2002 6.40039 7.60059c5 5.89941 7.90039 13.7998 8.40039 23.0996
+c0.0703125 1.18262 0.126953 3.10449 0.126953 4.28906c0 5.92773 -1.40137 15.3408 -3.12695 21.0107c-3 8.10059 -5.90039 11 -10.1006 9.30078c-5.39941 -1.7002 -10.5996 -5.40039 -16 -11.8008c-3 -4.19922 -5.2002 -9.59961 -6.39941 -17.1992zM204.9 278.3
+l-3.10059 -6.5c7.10059 4.2002 13.5 7.2002 19.4004 8.40039l7.09961 0.5l11.7998 -7.60059h-2.5c-8.7998 3.7002 -19.3994 1.2002 -30.6992 -7.59961c-0.5 -4.7002 1.69922 -14.7002 5.89941 -29.5l9.2002 0.5c-21.9004 -6.59961 -37.5996 -8.40039 -48.9004 -5.40039
+c-24.8994 6.7002 -27.3994 23.6006 -27.5 24.1006c-1.47754 5.69238 -2.67676 15.0869 -2.67676 20.9688c0 3.53418 0.438477 9.23828 0.977539 12.7314c-6.40039 -0.5 -11 -4.2002 -15.2002 -10.6006c-2.90039 5.90039 -5.40039 8.7998 -5.90039 9.2998
+c1.5 0.700195 12.2998 7.5 32.5 4.90039l0.5 -2.5l-5.89941 -1.2002c-0.100586 -0.399414 -1.90039 -29.5 18.8994 -24.7998c1.40039 0.299805 1.2998 -0.0996094 36.1006 14.2998z" />
+    <glyph glyph-name="acquisitions-incorporated" unicode="&#xf6af;" horiz-adv-x="384" 
+d="M357.45 -20.2002c2.2002 -14.2998 4.09961 -28.7002 6.59961 -43.7002h-337.1c-4 0 -6.10059 0.700195 -5.2998 5.7002c2.09961 12.9004 3.5 25.9004 5 38.7998c0.5 4.80078 2.2998 6.80078 7.59961 6.80078c118.1 -1 114.9 -0.300781 121.4 2.39941
+c9.39941 4 14.8994 12.9004 14.8994 23.1006c-0.0996094 42.8994 -0.299805 85.8994 -0.200195 128.8c0 3.7998 -1.19922 5.89941 -4.59961 6.7998c-15.7002 3.90039 -31.2998 7.7002 -47.5996 11.7002c-5.30078 -12.2998 -10.4004 -24.4004 -15.7002 -36.7002
+c1.7998 -3.2998 28.3994 -2.90039 35.2998 -2.90039v-27.5996h-114.3c1 8.59961 1.7002 16.7998 3.2002 24.9004c0.299805 1.39941 3.59961 3.09961 5.5 3.19922c8.39941 0.400391 16.8994 0.300781 25.3994 0.100586c4 0 5.90039 1.09961 7.60059 5.2002
+c16.5996 40.6992 13.5 31.1992 67.2998 161c31.5 76.0996 33 76 32.5996 87.3994c-0.700195 18.6006 -25.3994 22.2998 -37.7002 22.1006c-30 -0.400391 -38.3994 0.5 -101.8 0.5c-7.2002 44.5 -4.2002 32.0996 -6.39941 45.2998c-0.700195 4.2002 1 5.2998 4.59961 5.2998
+l339.1 -0.200195c-0.799805 -5.39941 -1.59961 -10.7998 -2.39941 -16.0996c-1.2998 -9.7002 -2.7998 -19.4004 -4 -29.2002c-0.299805 -2.90039 -1.2002 -4.2998 -4.2998 -4.2998c-20.6006 -0.100586 -41.2002 -0.100586 -61.8008 -0.5
+c-18.6992 -0.400391 -37.5996 -0.299805 -56.1992 -2c-13.4004 -1.2002 -23.3008 -12.6006 -18.9004 -26.6006c8.59961 -27.0996 27.7002 -69.0996 36.5 -89.1992c65.7002 -154.2 61.4004 -157 84 -158.601c6.59961 -0.5 13.4004 -0.0996094 20.4004 -0.0996094
+c1.2998 -9.40039 2.59961 -18 4 -27.5h-116v27c10.3994 0 20.3994 0.0996094 30.3994 -0.100586c3.5 0 5 0.700195 3.40039 4.40039c-4.40039 10.2998 -8.7002 20.5996 -13.2002 30.9004c-1.59961 3.69922 -4.09961 4.7998 -8.40039 3.5
+c-12.3994 -3.60059 -24.7998 -6.7002 -37.2998 -9.7002c-4.2998 -1.10059 -6 -2.7998 -5.89941 -7.5c0.799805 -57.5 0.899414 -127.5 1 -129.101c0.399414 -12.5996 8.69922 -21.3994 21 -23.0996c0.899414 -0.200195 12.8994 -2.7998 112.699 -2.59961
+c8.30078 0 8.40039 0.0996094 9.60059 -7.60059zM182.55 185.5c2.46484 -0.869141 6.58691 -1.5752 9.2002 -1.5752s6.73535 0.706055 9.2002 1.5752c13 4.2002 26.2998 7.7998 39.3994 11.7002c1.1123 0.512695 2.86035 1.45312 3.90039 2.09961
+c-6.7002 17.4004 -13.0996 34.2002 -19.7002 50.9004c-8.89941 22.7002 -17.7002 60.2998 -27 82.7998c-1.5 0.799805 -1.89941 -2.40039 -9.39941 0c-17.1006 -44 -34.1006 -87.7998 -51.3008 -132.1c1.54297 -0.917969 4.1416 -2.2168 5.80078 -2.90039
+c13.2998 -4.2998 26.5996 -8.2998 39.8994 -12.5z" />
+    <glyph glyph-name="critical-role" unicode="&#xf6c9;" 
+d="M225.82 448c0.259766 -0.150391 216.569 -124.51 217.12 -124.72c3 -1.18066 3.69922 -3.45996 3.69922 -6.56055c-0.0732422 -83.4463 -0.0732422 -166.899 0 -250.359c0.00976562 -0.124023 0.0175781 -0.326172 0.0175781 -0.450195
+c0 -2.06836 -1.52148 -4.45703 -3.39746 -5.33008c-21.3701 -12 -207.859 -118.29 -218.93 -124.58h-3c-79.3301 45.6602 -218.25 125.44 -218.4 125.52c-1.04297 0.491211 -1.89062 1.8252 -1.89062 2.97754c0 0.0732422 0.00488281 0.19043 0.0107422 0.262695
+c0 0.870117 0 225.94 -0.0498047 253.101c-0.0078125 0.102539 -0.0136719 0.269531 -0.0136719 0.37207c0 1.78223 1.31836 3.82422 2.94336 4.55762c23.2607 13.0996 209.271 119.21 220.141 125.21h1.75zM215.4 427.58l-0.219727 0.158203
+c-64.7471 -36.8604 -129.474 -73.7305 -194.18 -110.61c0 -0.120117 0.0800781 -0.229492 0.129883 -0.349609l30.8604 -11.6406c-7.70996 -6 -8.32031 -6 -10.6504 -5.12988c-0.0996094 0 -24.1699 9.28027 -26.7998 10v-230.43
+c0.879883 1.41016 64.0703 110.91 64.1299 111c1.62012 2.82031 3 1.91992 9.12012 1.51953c1.40039 -0.0898438 1.47949 -0.219727 0.780273 -1.41992c-41.1904 -71.3301 -36.4004 -63 -67.4805 -116.939c-0.80957 -1.40039 -0.609375 -1.12988 1.25 -1.12988h186.5
+c1.44043 0 1.69043 0.229492 1.7002 1.63965v8.87988c0 1.33984 2.36035 0.810547 -18.3701 1c-7.45996 0.0703125 -14.1396 3.21973 -21.3799 12.7002c-7.37988 9.66016 -14.6201 19.4297 -21.8496 29.21c-2.28027 3.08008 -3.4502 2.37988 -16.7607 2.37988
+c-1.75 0 -1.7793 0 -1.75977 -1.82031c0.290039 -26.21 0.150391 -25.2695 1 -32.6592c0.520508 -4.37012 2.16016 -4.2002 9.69043 -4.81055c3.13965 -0.259766 3.87988 -4.08008 0.519531 -4.91992c-1.57031 -0.389648 -31.5996 -0.509766 -33.6699 0.0996094
+c-0.982422 0.269531 -1.78027 1.31543 -1.78027 2.33398c0 1.16016 0.931641 2.2334 2.08008 2.39648c3.29004 0.759766 6.16016 -0.80957 6.66016 4.44043c1.2998 13.6592 1.16992 9 1.09961 79.4199c0 10.8193 -0.349609 12.5801 -5.35938 13.5498
+c-1.21973 0.240234 -3.54004 0.160156 -4.69043 0.549805c-2.87988 1 -2 4.83984 1.77051 4.84961c33.6699 0 46.0801 1.07031 56.0596 -4.85938c7.74023 -4.61035 12 -11.4805 12.5098 -20.4004c0.880859 -14.5898 -6.50977 -22.3496 -15 -32.5898
+c-0.282227 -0.241211 -0.510742 -0.738281 -0.510742 -1.11035c0 -0.371094 0.228516 -0.868164 0.510742 -1.10938c2.60059 -3.25 5 -6.62988 7.70996 -9.83008c27.5605 -33.2305 24.1104 -30.54 41.2803 -33.0605c0.890625 -0.129883 1 0.419922 1 1.15039v11
+c0 1 0.320312 1.42969 1.41016 1.25977c2.98633 -0.454102 7.86133 -0.822266 10.8818 -0.822266c3.53223 0 9.2207 0.50293 12.6982 1.12207c1.08008 0.150391 1.5 -0.199219 1.47949 -1.33008c0 -0.109375 0.880859 -26.6895 0.870117 -26.7998
+c-0.0498047 -1.51953 0.669922 -1.62012 1.89062 -1.62012h186.71c-27.1533 47.0342 -54.2334 93.9746 -81.2402 140.821c2.25977 0.660156 -0.400391 0 6.69043 1.38965c2 0.390625 2.0498 0.410156 3.10938 -1.43945c7.31055 -12.6396 77.3105 -134 77.3701 -134.061
+v230.44c-1.71973 -0.5 -103.3 -38.7197 -105.76 -39.6797c-1.08008 -0.419922 -1.5498 -0.200195 -1.91016 0.879883c-0.629883 1.89941 -1.33984 3.75977 -2.08984 5.62012c-0.320312 0.790039 -0.0898438 1.12988 0.649414 1.38965
+c0.100586 0 95.5303 35.8496 103 38.7705c-65.4199 37.5693 -130.56 75 -196 112.6l86.8203 -150.39l-0.280273 -0.330078c-9.56934 0.899414 -10.46 1.59961 -11.7998 3.93945c-1 1.69043 -73.5 127.71 -82 142.16c-9.09961 -14.6699 -83.5596 -146.21 -85.3701 -146.32
+c-2.92969 -0.169922 -5.87988 -0.0800781 -9.25 -0.0800781c28.833 49.8271 57.5596 99.4941 86.1797 149.001zM267.331 297.658c1.54688 0.120117 4.02832 0.500977 5.54004 0.849609c1.68945 0.299805 2.53027 -0.200195 2.59961 -1.91992
+c0 -0.109375 0.0703125 -19.0596 -0.859375 -20.4502c-0.930664 -1.38965 -1.87988 -1.21973 -2.60059 0.19043c-5 9.68945 6.2207 9.66016 -39.1201 12c-0.699219 0 -1 -0.230469 -1 -0.929688c0 -0.130859 3.7207 -122 3.73047 -122.11
+c0 -0.889648 0.519531 -1.2002 1.20996 -1.50977c2.46484 -0.980469 6.3623 -2.79492 8.7002 -4.0498c7.30957 -4.33008 11.3799 -10.8408 12.4102 -19.3105c1.43945 -11.7998 -2.77051 -35.7695 -32.21 -37.1396c-2.75 -0.129883 -28.2607 -1.08008 -34.1406 23.25
+c-4.66016 19.2598 8.25977 32.7002 19.8906 36.3994c1.11035 0.202148 2.0127 1.28223 2.0127 2.41113c0 0.0683594 -0.00585938 0.180664 -0.0126953 0.249023c0.0996094 5.62988 3 107.101 3.70996 121.351c0.0498047 1.0791 -0.620117 1.15918 -1.35059 1.14941
+c-32.3496 -0.519531 -36.75 0.339844 -40.2197 -8.51953c-2.41992 -6.18066 -4.13965 -1.32031 -3.9502 -0.230469c1.05957 6 2.16309 12 3.31055 18c0.399414 2.11035 1.42969 2.61035 3.42969 1.86035c5.58984 -2.11035 6.71973 -1.7002 37.25 -1.91992
+c1.72949 0 1.78027 0.0800781 1.82031 1.84961c0.679688 27.4902 0.579102 22.5898 1 29.5498c0.00976562 0.0878906 0.0185547 0.231445 0.0185547 0.320312c0 0.986328 -0.738281 2.09766 -1.64941 2.48047c-5.59961 2.90918 -8.75 7.5498 -8.89941 13.8691
+c-0.350586 14.8105 17.7197 21.6699 27.3799 11.5107c6.83984 -7.19043 5.7998 -18.9102 -2.4502 -24.1504c-1.24316 -0.68457 -2.25195 -2.3916 -2.25195 -3.81055c0 -0.146484 0.0146484 -0.383789 0.0322266 -0.529297c0 -0.589844 -0.110352 4.30957 1 -30.0498
+c0 -0.900391 0.429688 -1.12012 1.24023 -1.11035c0.0996094 0 23 0.0898438 34.4697 0.370117zM68.2705 306.298c19.8408 4.50977 32.6807 0.560547 52.4902 -1.68945c2.75977 -0.310547 3.74023 -1.2207 3.62012 -4c-0.209961 -5 -1.16016 -22.3301 -1.24023 -23.1504
+c-0.0371094 -0.932617 -0.767578 -1.98145 -1.62988 -2.33984c-4.05957 -1.7002 -3.60938 4.4502 -4 7.29004c-3.12988 22.4297 -73.8701 32.7002 -74.6299 -25.4004c-0.30957 -23.9199 17 -53.6299 54.0801 -50.8799c27.2402 2 19 20.1904 24.8398 20.4697
+c0.0996094 0.0136719 0.261719 0.0244141 0.362305 0.0244141c1.50195 0 2.7207 -1.21875 2.7207 -2.71973c0 -0.186523 -0.0371094 -0.483398 -0.0830078 -0.664062c-1.83008 -10.8506 -3.41992 -18.9502 -3.4502 -19.1504
+c-1.54004 -9.16992 -86.6992 -22.0898 -93.3496 42.0605c-2.70996 25.8496 10.4404 53.3691 40.2695 60.1494zM148.271 218.628h-19.4893c-0.0576172 -0.00488281 -0.151367 -0.00878906 -0.208984 -0.00878906c-1.04102 0 -2.13867 0.805664 -2.45117 1.79883
+c2.37988 3.75 5.88965 -0.919922 5.86035 6.13965c-0.0800781 25.75 0.209961 38 0.229492 40.1006c0 3.41992 -0.530273 4.64941 -3.32031 4.93945c-7 0.720703 -3.10938 3.37012 -1.10938 3.38086c11.8398 0.0996094 22.6201 0.179688 30.0498 -0.720703
+c8.76953 -1.06934 16.71 -12.6299 7.92969 -22.6201c-2 -2.25 -4 -4.41992 -6.13965 -6.72949c0.950195 -1.15039 6.89941 -8.82031 17.2803 -19.6797c2.65918 -2.78027 6.14941 -3.51074 9.87988 -3.13086h0.0214844c1.1709 0 2.16016 0.950195 2.20801 2.12012
+c0.299805 3.41992 0.259766 -4.72949 0.450195 40.5801c0 5.65039 -0.339844 6.58008 -3.22949 6.83008c-3.9502 0.350586 -4 2.25977 -0.69043 3.37012l19.0898 0.0898438c0.320312 0 4.49023 -0.530273 1 -3.37988c0 -0.0498047 -0.160156 0 -0.240234 0
+c-3.60938 -0.259766 -3.93945 -1 -4 -4.62012c-0.269531 -43.9297 0.0703125 -40.2295 0.410156 -42.8203c0.110352 -0.839844 0.270508 -2.22949 5.10059 -2.13965c2.48926 0 3.85938 -3.37012 0 -3.39941c-10.3701 -0.0800781 -20.7402 0 -31.1104 -0.0703125
+c-10.6699 0 -13.4697 6.2002 -24.21 20.8203c-1.59961 2.17969 -8.31055 2.35938 -8.2002 0.369141c0.879883 -16.4697 0 -17.7793 4 -17.6699c4.75 0.100586 4.73047 -3.56934 0.830078 -3.5498h0.0595703zM423.271 228.778
+c-1.20996 -7.12988 0.170898 -10.3799 -5.2998 -10.3398c-61.5498 0.419922 -47.8193 0.219727 -50.7197 0.30957c-1.02246 0.100586 -2.64844 0.426758 -3.62988 0.730469c-2.53027 0.599609 1.47949 1.22949 -0.379883 5.59961
+c-1.43066 3.37012 -2.78027 6.78027 -4.11035 10.1895c-0.210938 0.797852 -1.05078 1.44434 -1.875 1.44434c-0.0351562 0 -0.0908203 -0.00195312 -0.125 -0.00390625c-1.82812 0.0878906 -4.79785 0.15918 -6.62793 0.15918
+c-2.19727 0 -5.75879 -0.102539 -7.95215 -0.229492c-0.587891 -0.0771484 -1.31348 -0.551758 -1.62012 -1.05957c-1.58008 -3.62012 -3.06934 -7.29004 -4.50977 -11c-1.26953 -3.23047 7.86035 -1.32031 12.1904 -2.16016c3 -0.570312 4.5293 -3.71973 0.65918 -3.72949
+h-26.3691c-2.91992 0 -3.09082 3.14941 -0.740234 3.20996c0.0791016 -0.00390625 0.208008 -0.00683594 0.288086 -0.00683594c2.14648 0 4.66992 1.55762 5.63184 3.47656c1.5 3 2.7998 6 4.11035 9.08984c18.1797 42.1396 17.0596 40.1699 18.4199 41.6104
+c0.300781 0.431641 0.973633 0.78125 1.5 0.78125s1.19824 -0.349609 1.5 -0.78125c2.92969 -3.33984 18.3994 -44.71 23.6201 -51.9199c2 -2.7002 5.73926 -2 6.35938 -2c3.61035 -0.130859 4 1.10938 4.12988 4.29004
+c0.0898438 1.86914 0.0800781 -1.1709 0.0703125 41.2393c0 4.45996 -2.36035 3.74023 -5.5498 4.27051c-0.259766 0 -2.56055 0.629883 -0.0800781 3.05957c0.209961 0.200195 -0.890625 0.240234 21.7002 0.150391c2.31934 0 5.31934 -2.75 -1.20996 -3.4502
+c-0.0322266 0.000976562 -0.0830078 0.00292969 -0.115234 0.00292969c-1.41309 0 -2.55957 -1.14746 -2.55957 -2.56055c0 -0.0751953 0.00683594 -0.197266 0.0146484 -0.272461c-0.0703125 -1.62988 -0.19043 -38.8896 0.290039 -41.21
+c0.27832 -1.34668 1.62109 -2.43848 2.99609 -2.43848c0.0644531 0 0.168945 0.00390625 0.233398 0.00878906c13.25 -0.430664 14.9199 -0.44043 16 3.41016c1.66992 5.7793 4.12988 2.51953 3.73047 0.189453zM318.551 164.408
+c-4.24023 0 -4.41992 3.38965 -0.609375 3.41016c35.9092 0.160156 28.1094 -0.379883 37.1895 0.649414c1.67969 0.19043 2.37988 -0.239258 2.25 -1.88965c-0.259766 -3.38965 -0.639648 -6.78027 -1 -10.1602c-0.25 -2.16016 -3.2002 -2.61035 -3.39941 0.150391
+c-0.380859 5.30957 -2.15039 4.44922 -15.6309 5.08008c-1.58008 0.0693359 -1.63965 0 -1.63965 -1.52051v-16.1299c0 -1.65039 0 -1.59961 1.62012 -1.46973c3.12012 0.25 10.3096 -0.339844 15.6895 1.51953c0.470703 0.160156 3.30078 1.79004 3.07031 -1.75977
+c0 -0.209961 -0.759766 -10.3496 -1.17969 -11.3896c-0.530273 -1.29004 -1.87988 -1.51074 -2.58008 -0.320312c-1.16992 2 0 5.08008 -3.70996 5.2998c-15.4199 0.900391 -12.9102 2.5498 -12.9102 -6c0 -12.25 -0.759766 -16.1104 3.88965 -16.2402
+c16.6406 -0.479492 14.4004 0 16.4307 5.70996c0.839844 2.37012 3.5 1.77051 3.17969 -0.580078c-0.44043 -3.20996 -0.849609 -6.42969 -1.22949 -9.63965c0 -0.360352 -0.160156 -2.39941 -4.66016 -2.38965c-37.1602 0.0800781 -34.54 0.189453 -35.21 0.30957
+c-2.7207 0.509766 -2.2002 3 0.219727 3.4502c1.09961 0.19043 4 -0.540039 4.16016 2.55957c2.43945 56.2207 -0.0703125 51.3408 -3.91016 51.3301zM318.141 273.928c2.45996 -0.609375 3.12988 -1.75977 2.9502 -4.64941
+c-0.330078 -5.2998 -0.339844 -9 -0.549805 -9.69043c-0.660156 -2.22949 -3.15039 -2.12012 -3.33984 0.270508c-0.379883 4.80957 -3.0498 7.81934 -7.57031 9.14941c-26.2803 7.73047 -32.8096 -15.46 -27.1699 -30.2197c5.87988 -15.4102 22 -15.9199 28.8604 -13.7803
+c5.91992 1.85059 5.87988 6.5 6.91016 7.58008c1.22949 1.2998 2.25 1.83984 3.11914 -1.09961c0 -0.100586 0.570312 -11.8906 -6 -12.75c-1.59961 -0.209961 -19.3799 -3.69043 -32.6797 3.38965c-21 11.1904 -16.7402 35.4697 -6.87988 45.3301
+c14 14.0596 39.9102 7.05957 42.3203 6.46973h0.0292969zM289.801 167.858c3.28027 0 3.66016 -3 0.160156 -3.43066c-2.61035 -0.319336 -5 0.419922 -5 -5.45996c0 -2 -0.19043 -29.0498 0.400391 -41.4502c0.109375 -2.28906 1.14941 -3.51953 3.43945 -3.64941
+c22 -1.20996 14.9502 1.64941 18.79 6.33984c1.83008 2.24023 2.75977 -0.839844 2.75977 -1.08008c0.350586 -13.6201 -4 -12.3896 -5.18945 -12.3994l-38.1602 0.189453c-1.92969 0.230469 -2.05957 3 -0.419922 3.37988c2 0.480469 4.93945 -0.399414 5.12988 2.7998
+c1 15.8701 0.570312 44.6504 0.339844 47.8105c-0.269531 3.76953 -2.7998 3.26953 -5.67969 3.70996c-2.46973 0.379883 -2 3.21973 0.339844 3.21973c1.4502 0.0205078 17.9697 0.0302734 23.0898 0.0205078zM258.171 225.648
+c0.0703125 -4.08008 2.86035 -3.45996 6 -3.58008c2.61035 -0.100586 2.53027 -3.41016 -0.0703125 -3.43066c-6.47949 0 -13.6992 0 -21.6094 0.0605469c-3.83984 0 -3.37988 3.34961 0 3.37012c4.49023 0 3.24023 -1.61035 3.41016 45.54
+c0 5.08008 -3.27051 3.54004 -4.7207 4.22949c-2.58008 1.23047 -1.35938 3.08984 0.410156 3.15039c1.29004 0 20.1904 0.410156 21.1699 -0.209961c0.980469 -0.620117 1.87012 -1.65039 -0.419922 -2.86035c-1 -0.519531 -3.85938 0.280273 -4.14941 -2.46973
+c0 -0.209961 -0.820312 -1.62988 -0.0703125 -43.7998h0.0498047zM221.261 -48.6221c0.408203 -0.273438 1.13867 -0.495117 1.62988 -0.495117c0.492188 0 1.22168 0.22168 1.62988 0.495117c17 9.79004 182 103.57 197.421 112.51
+c-0.140625 0.430664 11.2598 0.180664 -181.521 0.270508c-1.21973 0 -1.57031 -0.370117 -1.53027 -1.56055c0 -0.0996094 1.25 -44.5098 1.2207 -50.3799c-0.0791016 -2.17969 -0.688477 -5.63379 -1.36035 -7.70996c-0.549805 -1.83008 0.379883 0.5 -13.5 -32.2295
+c-0.730469 -1.7207 -1 -2.20996 -2 0.0800781c-4.19043 10.3398 -8.28027 20.7197 -12.5703 31c-1.12109 2.52441 -2.03125 6.81543 -2.03125 9.57812c0 0.333984 0.0146484 0.876953 0.03125 1.21191c0.160156 2.45996 0.800781 16.1191 1.51074 48c0 1.94922 0 2 -2 2
+h-183c2.5791 -1.63086 178.319 -102.57 196 -112.761zM130.361 140.128c0 -2.39941 0.359375 -2.79004 2.75977 -3c11.54 -1.16992 21 -3.74023 25.6396 7.32031c6 14.46 2.66016 34.4102 -12.4795 38.8398c-2 0.589844 -16 2.75977 -15.9404 -1.50977
+c0.0498047 -8.04004 0.00976562 -11.6104 0.0205078 -41.6504zM236.111 155.178c0 -2.12988 1.06934 -38.6797 1.08984 -39.1299c0.339844 -9.93945 -25.5801 -5.76953 -25.2305 2.58984c0.0800781 2 1.37012 37.4199 1.10059 39.4307
+c-14.1006 -7.44043 -14.4199 -40.21 6.43945 -48.8008c1.88184 -0.816406 5.0752 -1.47949 7.12695 -1.47949c5.53418 0 12.3721 3.83008 15.2637 8.5498c4.90918 7.75977 6.83984 29.4697 -5.43066 39c-0.0966797 -0.0400391 -0.257812 -0.09375 -0.359375 -0.120117
+v-0.0400391zM223.831 353.178c-9.83008 0 -9.73047 -14.75 -0.0703125 -14.8701c9.66016 -0.119141 10.1006 14.8809 0.0703125 14.9102v-0.0400391zM143.681 249.348c0 -1.7998 0.410156 -2.39941 2.16992 -2.58008c13.6201 -1.38965 12.5107 11 12.1602 13.3604
+c-1.68945 11.2197 -14.3799 10.2002 -14.3496 7.81055c0.0498047 -4.5 -0.0302734 -13.6807 0.0195312 -18.5908zM356.001 242.948l-6.09961 15.8398c-2.16016 -5.48047 -4.16016 -10.5703 -6.23047 -15.8398h12.3301z" />
+    <glyph glyph-name="d-and-d-beyond" unicode="&#xf6ca;" horiz-adv-x="640" 
+d="M313.8 206.5c-9.89941 0 -16 7 -15.7002 7.09961c-4.2998 5.7002 -3 -0.299805 -2.39941 -1.89941c-10.9004 10.2998 -5.2998 25.3994 -5.10059 26c0.700195 1.89941 0 2.2002 -0.599609 1.89941c-1 -0.299805 -2.09961 -1.89941 -2.09961 -1.89941
+c0.799805 9.09961 9.2998 14.7002 9.2998 14.7002l0.200195 -0.200195c1 -1.5 -0.400391 -3.2002 -0.600586 -9c1.60059 2.2998 7.90039 6.59961 11.4004 7.89941c-1.10059 -1.5 -2.10059 -3.59961 -2.10059 -6.59961c3.7002 4.2002 7.5 2.59961 8 2.40039
+c-12.1992 -11.9004 -7 -26.6006 3.2002 -26.6006c5.7002 0 11.5 6.40039 13.9004 10.7002c2.39941 -2.40039 6.39941 -5.5 7.39941 -6.59961c-3.7998 -7.80078 -11 -17.9004 -24.7998 -17.9004zM366.2 227.6c0 -2.89941 -2.90039 -4.09961 -5.40039 -4.5
+c0.700195 1.5 1.7998 5.10059 -0.200195 9c0.700195 -0.0996094 5.60059 -0.5 5.60059 -4.5zM376.5 222.4c-0.400391 -6.5 -6.90039 -11.6006 -14.5996 -10.6006c2 -1.7002 6.59961 -3 9 -1.89941c-3.90039 -6.90039 -23.1006 -7.5 -23.1006 6.39941
+c-2.89941 -2.89941 -2.09961 -7.39941 0 -9.2998c-2.2002 0.700195 -5.7998 3.09961 -6.39941 7.40039c-1.30078 10.0996 4.39941 6.5 -10.4004 18.0996c-4.7998 3.7002 -3 6.59961 -4 8.5c-1.09961 2.2002 -7 4.09961 -4.5 8.5
+c-0.0996094 -1.59961 1 -2.90039 2.59961 -3.5c1.80078 -0.700195 3.2002 -0.200195 4.80078 -1c1.69922 -1.2002 0.899414 -3.90039 2.19922 -5c1.10059 -0.799805 4.2002 0.299805 6.60059 -1.7998c2.59961 -2 8.2002 -6.7002 10.5996 -8.60059
+c4.40039 -3.59961 8.7998 0.400391 7.40039 4.60059c4.5 -2.60059 5 -9.90039 1.2998 -12.5c10.5996 -2.40039 13 10.0996 5 11.3994c7.2998 0.700195 13.5 -4.2998 13.5 -10.6992zM337.1 240.8c4.30078 6.10059 13.3008 15.2998 23.8008 15.7998
+c-5.90039 0.800781 -15.1006 -3.19922 -19.7002 -9c0.899414 3.90039 5.09961 10.1006 10.2002 13c0 0 -2.5 -3.19922 -1.40039 -3.69922c1.59961 -0.800781 5.7998 5.69922 11.2002 5.89941c0 0 -4 -2 -3.2002 -3.39941c0.599609 -0.900391 3.2998 1.2998 8 1.2998
+c5.7998 0 10.9004 -3.5 13.2998 -6.2002c-4 1.09961 -11.5996 -0.799805 -13.7998 -2.7002c-0.299805 0.200195 -11.7998 9 -22 -15.5c-4.7998 3.7998 -4.40039 3.7002 -6.40039 4.5zM579.6 188.9c37.2002 0 60.4004 -19.6006 60.4004 -48.9004
+c0 -28.2002 -17 -48.9004 -59.0996 -48.9004c-20.7002 0 -41.2002 1.30078 -51.6006 2.10059l7.40039 8.2002v77.1992l-7.40039 8.2002c10.2998 0.799805 29.6006 2.10059 50.2998 2.10059zM564.5 113.3c25.4004 -3.2002 46.7998 1.40039 46.7998 27
+c0 22.5 -16.7002 29.6006 -46.7998 26.2998v-53.2998zM301.6 267c0.100586 -0.299805 -2.7998 2.2998 -3.2998 7.5c-0.200195 2.2998 0 19.7998 20 18.9004c11.2002 -0.600586 16.7002 -8.30078 16.7002 -16.5c0 -4.30078 -2.2998 -10.1006 -5.5 -13.8008
+c-2.2002 2.2002 -5.59961 4.60059 -7.7002 7.80078c3.7998 5.59961 2.2002 14.3994 -4.7002 14.3994c-4.2998 0 -7.7998 -4.5 -6.39941 -9.89941c-0.700195 -2.40039 -1 -5.60059 -0.5 -8c-4.90039 2.59961 -6.5 6 -7.5 9c-1.2998 -2.5 -2.10059 -6 -1.10059 -9.40039z
+M301.2 261c0.299805 1.7002 -3.10059 4.59961 -4.7998 5.2002c4.7998 0.200195 7 -0.600586 7 -0.600586c-1.30078 1.7002 -1.60059 4.5 -1 6.7002c2.5 -6.09961 11.6992 -7.09961 13.8994 -12.2002c-0.299805 2.30078 -2.39941 4.7002 -4.7998 6.10059
+c-1.2998 3.2002 -0.299805 9.39941 1.2998 11c-0.5 -8.7998 12 -13.7998 14.6006 -20.2002c-1.40039 5.5 -7.40039 9 -10.1006 12.2002c-1 2.09961 -0.200195 5.7998 0.799805 7.09961c-0.5 -9.7002 15.8008 -14.2998 14.1006 -23.8994
+c0.899414 -0.400391 2.09961 -1.2002 1.89941 -2.60059c1.30078 0.299805 2.60059 1.7002 2.90039 2.7002c0.700195 -4.5 -1.90039 -9 -4.7998 -10.4004c1.59961 4 -2.7002 5.60059 -6.7002 5.10059c0 0 1.59961 2.2998 1 3.39941
+c-0.799805 1.5 -8 0.800781 -11.2002 -0.299805c1.10059 0.100586 3.60059 -0.200195 4.60059 -0.5c-2.10059 -2.89941 -1 -7.09961 1.2998 -4.2002c0 0 -1.10059 -3.5 -0.299805 -4.2998c0.799805 -0.799805 2.59961 -0.200195 2.59961 -0.200195
+c-1.2002 -2.69922 -5.2998 -4.59961 -8.2002 -4.59961c1.10059 0.400391 2.7002 2.2998 3 3.40039c-0.799805 -0.5 -2.7002 -0.700195 -3.5 -0.5c6.10059 3 0 13.1992 -7 8.19922c1 2.7002 3.7002 5.30078 5.7998 6.10059c-1.2998 0.5 -2.69922 0.799805 -4.2998 1.09961
+c1.7998 1.5 6.2998 2.7998 8.5 2.60059c-3.5 0.799805 -9.89941 -0.300781 -12.7998 -3.7002c0.900391 0 3.2998 -0.5 4.2998 -0.799805c-4 -0.700195 -9.39941 -4.40039 -11 -6.2002c0.299805 2.2002 1 4.2002 0.5 5.59961c-0.799805 2 -3 2.7998 -7.7998 1.7998
+c3.2002 3.2002 9.7002 5.10059 10.2002 6.90039zM327.1 253.6c0 0 -0.899414 3 -4.19922 4.30078c0.699219 -2.2002 1.5 -4.30078 4.19922 -4.30078zM366 249.9l0.700195 0.699219c0.5 0.400391 1.59961 0.900391 2.7002 1.40039v-18.4004
+c-1.7002 0.800781 -3.5 1.10059 -5.60059 1.10059c-2.39941 0 -5 -0.5 -5 -0.5c-0.5 0.5 -3.59961 2.89941 -5.09961 3.2002c4.09961 -4.30078 0.5 -9.80078 -3 -7.2002v15.7002c0.700195 0.799805 1.2998 1.7998 2.09961 2.59961
+c1.7002 2.09961 4.60059 3.40039 7.5 3.40039c1.7998 0 3.60059 -0.400391 4.7002 -1.40039zM79.9004 142.1c22 -6.39941 19.3994 -20.0996 19.3994 -25.1992c0 -7.80078 -3.2002 -13.6006 -9.89941 -17.6006c-12.6006 -7.39941 -24.7002 -5.89941 -86.4004 -5.89941
+l8.40039 8.59961v32.2998l-11.4004 14.6006h11.2998v29.5l-8.2998 8.59961h56.0996c12.9004 0 37 -4.40039 37 -25c0 -1.90039 1 -15.2998 -16.1992 -19.9004zM38.5996 169.6v-20.8994c10.6006 0 29.6006 -3.2998 29.6006 8.7998v3
+c0 9.90039 -9.60059 9.09961 -29.6006 9.09961zM38.5996 110.4c20.4004 0 32.9004 -1.90039 32.9004 9.2998h-0.200195v4.5c0 11.0996 -20.5 8.7998 -32.7002 8.7998v-22.5996zM139.8 129.7v-15.4004l60.1006 0.200195l-14.1006 -21.2002h-81.2002l7.40039 8.2002v77.0996
+l-7.40039 8.2002l73.5 0.200195v-0.200195l14.1006 -21h-52.4004v-14.8994h37.2002l-14.0996 -21.2002v-0.200195zM354.5 189.8c73.7998 0 77.5996 -99.2998 -0.299805 -99.2998c-77.2002 0 -73.6006 99.2998 0.299805 99.2998zM354.2 112.3
+c39 0 37 55.2002 0.200195 55.2998c-37.1006 0 -37.6006 -55.2998 -0.200195 -55.2998zM262.9 120.6l0.199219 -19l7.2002 -8.19922h-42.5996l7.7002 8.19922l-0.200195 19.4004l-44.1006 65.7998h44.9004l-6.40039 -7.2002l21 -37.1992h0.300781l20.5 37.1992
+l-6.10059 7.2002h41.7002zM234.5 271.9c-9.09961 6.69922 -9.5 14.0996 -9.59961 14.8994c7.2998 -4.2998 9 -4 39.8994 -4c-5.7998 0 24 3.10059 32.2002 -22.8994c-0.400391 0 -8.40039 -4.80078 -10.4004 -7.90039c5.30078 1.90039 8.90039 1.09961 9 1.09961
+c-8 -5.09961 -9.59961 -14.7998 -9.59961 -20.5c0.900391 2.10059 2.7002 3.7002 2.7002 3.5c-0.600586 -2.5 -1.40039 -7 -0.799805 -12c-8.60059 -7.09961 -16 -8.59961 -26 -8.59961h-35.1006c0.400391 0.0996094 7.7998 4.5 7.90039 4.59961
+c1.89941 1.10059 2.7002 2.2002 2.7002 6.40039v38.7998c0 4.2002 -1.30078 5.2998 -2.90039 6.60059zM256 266.4v-34.6006c4.7002 0 23.0996 -3.39941 23.0996 17.2998c0 20.6006 -18.5 17.3008 -23.0996 17.3008zM484.9 186.8l39.1992 -0.0996094l-7.39941 -8.2998
+v-85.2002h-21.2998c-4 12.7002 -44.8008 45 -48.5 55.5996h-0.300781v-47.3994l7.40039 -8.2002h-39l7.2002 8.2998v76.9004l-7.40039 8.5h31.6006c2.89941 -9.40039 39.7998 -36.5 45.1992 -50.9004h0.300781v42.5zM378.2 282.9
+c32.7002 -1.60059 33.7998 -29.8008 33.7998 -33.6006c0 -6.7002 -3.2998 -34 -36.7002 -34h-0.299805c3.59961 4.2998 3.5 11.9004 -2.2002 16.2998c1.2002 0 19.7002 -3.19922 19.7002 17.3008c0 20.6992 -18.4004 17.2998 -23.0996 17.2998v-4.2998
+c-5.40039 0.799805 -7.40039 -0.300781 -7.5 -0.300781c2.09961 1.80078 4.5 2.60059 6.09961 2.90039c-7.09961 1.59961 -13.5996 -2.40039 -14.5996 -3.5c0.799805 1.7998 2.39941 3.40039 3.5 4.5c-2.30078 -0.799805 -4.30078 -1.90039 -6.10059 -3
+c0 5.2002 0.200195 7.5 -2.89941 9.5c-9.10059 6.59961 -9.5 14.2002 -9.60059 14.9004c7.10059 -4.2002 7.7002 -4 39.9004 -4z" />
+    <glyph glyph-name="dev" unicode="&#xf6cc;" 
+d="M120.12 239.71c3.87012 -2.90039 5.82031 -7.25977 5.83008 -13.0596v-69.6504c0 -5.80957 -1.94043 -10.1602 -5.82031 -13.0596c-3.87988 -2.90039 -7.76953 -4.35059 -11.6494 -4.35059h-17.4502v104.47h17.4395c3.87988 0 7.77051 -1.44922 11.6504 -4.34961z
+M404.1 416c24.2002 0 43.8408 -19.5898 43.9004 -43.7998v-360.4c-0.0595703 -24.21 -19.6904 -43.7998 -43.9004 -43.7998h-360.199c-24.2002 0 -43.8408 19.5898 -43.9004 43.7998v360.4c0.0595703 24.21 19.7002 43.7998 43.9004 43.7998h360.199zM154.2 156.81
+l-0.00976562 70.9307c-0.0107422 18.8193 -11.9307 47.2793 -47.3701 47.2793h-47.3799v-165.46h46.3994c36.75 -0.0595703 48.3604 28.4404 48.3604 47.25zM254.88 245.47l0.00976562 29.5205h-63.1895c-11.1504 -0.280273 -19.9805 -9.54004 -19.71 -20.6904v-125.109
+c0.279297 -11.1602 9.55957 -19.9805 20.7197 -19.6904h62.1797v29.5703h-53.29v38.4102h32.5703v29.5693h-32.5703v38.4199h53.2803zM358.52 130.18l38.4609 144.801h-32.5801l-29.5703 -113.721l-29.71 113.721h-32.5703l38.5303 -144.801
+c10.5898 -24.6299 34.2402 -30.75 47.4395 0z" />
+    <glyph glyph-name="fantasy-flight-games" unicode="&#xf6dc;" horiz-adv-x="512" 
+d="M256 415.14l223.14 -223.14l-223.14 -223.14l-223.14 223.14zM88.3398 192.17c11.3447 -11.2461 29.7705 -29.4893 41.1299 -40.7197c20.1602 19.8799 40.46 39.8994 61.8506 60.9902c12.0596 -12.5801 24.5195 -25.5703 36.54 -38.1104
+c12.0293 11.6895 23.7393 23.0596 35.6895 34.6602c-6.99023 7.4502 -32.1494 32.8301 -35.0898 35.7793c-1.91016 1.9209 -2.29004 3.2207 -0.120117 5.35059c15.5801 15.2295 39.21 17.79 56.9805 5.09961c7.98926 -5.70996 14.2998 -11.6396 48.5098 -43.9502
+c10.8203 11.1504 22.2295 22.8506 33.5 34.6904c0.490234 0.520508 0.0996094 2.63965 -0.580078 3.37988c-0.0898438 0.100586 -37.5195 40.6006 -62.1504 59c-33.5801 25.0801 -78.3193 23.0605 -119.77 -18.6895c-84.5703 -85.1807 -94.5303 -95.4805 -96.4902 -97.4805z
+M323.16 90.5703c18.8203 18.79 80.3301 80.6396 100.5 101.5c-13.7305 13.4492 -27.1797 26.6299 -40.8604 40.0293c-20.0098 -19.7393 -40.2402 -39.6895 -61.25 -60.4199c-12.3301 12.8301 -24.8799 25.8799 -37.25 38.75
+c-1.25977 -0.689453 -1.64941 -0.80957 -1.91016 -1.06934c-10.7295 -10.7705 -21.4199 -21.5801 -32.21 -32.29c-2.22949 -2.20996 -0.519531 -3.35059 0.800781 -4.69043c10.5791 -10.7402 21.1797 -21.4502 31.7695 -32.1797
+c3.5498 -3.60059 3.54004 -3.85059 -0.139648 -7.24023c-16.8008 -15.4697 -40.8408 -16.54 -59.3203 -1.7998c-7.62012 6.08008 -11.6602 10.1797 -44.6797 42.0898c-11.5801 -11.8896 -23.3203 -23.9404 -35.3701 -36.3096
+c33.5498 -34.7607 50.8496 -53.3408 72.9297 -66.8408c28.9004 -17.6699 71.5 -14.96 106.99 20.4707zM256 448l256 -256l-256 -256l-256 256zM16 192l240 -240l240 240l-240 240z" />
+    <glyph glyph-name="penny-arcade" unicode="&#xf704;" horiz-adv-x="640" 
+d="M421.91 283.73c7.33984 -16.2705 2.29004 -5.07031 24.6299 -54.6807l-39.7305 -10.6094c13.7002 59.2295 10.6104 45.8398 15.1006 65.29zM215.82 232.62c32.5 8.99023 41.9492 -37.6396 -0.350586 -47.4297c-14.2002 -3.77051 -6.64941 -1.75 -34.8193 -9.34082
+l-4.45996 46.1904c28.3193 7.5498 19.4395 5.17969 39.6299 10.5801zM541.98 258.81c75.7998 -37.9092 98 -76.3193 97.9893 -104.47c2.10059 -78.8496 -183.3 -130.33 -399.89 -84.8301c0.540039 -13 -8.00977 -24.6494 -20.5801 -28.0195
+c-125.54 -33.54 -117.35 -31.75 -122.53 -31.7598c-14.3701 -0.0107422 -26.4102 10.8896 -27.7998 25.1992l-4.2998 44.4805c-0.0683594 0.724609 -0.125 1.90332 -0.125 2.63184c0 10.5811 8.01758 22.2461 17.8945 26.0381l-1.73926 17.8799
+c-50.2305 28.2598 -80.9004 61.8701 -80.9004 95.3701c0 72.9199 144.26 113.4 309.41 98.3701c2.68945 7.54395 11.1514 15.3438 18.8896 17.4102c96.8701 25.9092 65.3203 17.4795 135.59 36.2295c13.1602 3.50977 26.9307 -2.95996 32.6201 -15.3301zM255.14 149.7
+c17.5 4.0498 40.2363 19.1562 50.75 33.7197c21.6006 32.5898 14.1104 105.561 -42.5498 104.43c-16.04 -0.229492 -8.07031 0.890625 -186.22 -46.6494l4.34961 -44.5l20.1201 5.38965l11.1104 -114.64l-20.0205 -5.35059l4.30078 -44.5195l115.31 30.7803
+l-4.50977 44.5098l-20.5303 -5.50977l-2.45996 23.5498l48.4404 12.9102zM454.32 133.08l108.55 28.96l-4.2998 44.4795l-20.79 -5.55957l-66.6699 145.47c-70.5801 -18.8301 -42.2305 -11.25 -135.591 -36.2393l4.2002 -44.4805l17.1504 4.55957l-33.0801 -126.47
+l-20.9902 -5.58984l4.45996 -44.4297l112.851 30.0693l-4.05078 39.54l-19.1992 -5.12012l4.09961 17.54l57.7598 15.4209l6.61035 -14.6807l-14.9004 -3.97949z" />
+    <glyph glyph-name="wizards-of-the-coast" unicode="&#xf730;" horiz-adv-x="640" 
+d="M219.19 102.31c7.44922 5.80078 16.2598 0.680664 21.7295 -7.0791c7.08984 -10.1201 6.24023 -18.1602 -0.259766 -23.04c-7.62012 -6.24023 -17.0898 0.129883 -21.7305 6.5498c-10.8096 15.1299 -1.63965 22.1895 0.260742 23.5693zM555.94 26.3701
+c1.30957 4.4502 3.92969 10.21 3.93945 20.1699c0 34.04 -41.6299 64.4102 -100.03 68.0801c-53.1592 3.39941 -120.46 -15.4502 -184.35 -73.8506l-0.790039 0.260742c1.58008 10.4697 -0.780273 16.2295 -3.40039 21.21l0.260742 1.56934
+c64.4199 51.3203 134.069 66.5107 188.8 60.4902c61.0098 -6.54004 104.479 -39.54 101.34 -78.0303c-0.790039 -9.68945 -2.88965 -15.71 -4.97949 -19.8994c-1.34082 -1.66992 -1.13086 -1.7002 -0.790039 0zM392.28 207.58
+c-0.530273 7.07031 3.13965 11.7803 6.7998 15.46c3.66992 3.91992 14.9297 10.4697 14.9297 10.4697s-1.2998 -26.4502 -2.08984 -29.8496c-1.04004 -3.92969 -4.96973 -6.81055 -10.4697 -6.5498c-4.98047 0.259766 -8.37988 3.39941 -9.16992 10.4697zM342.26 358.68
+c147.17 0 275.48 -86.6797 291.21 -196.939c0 0 -3.66992 -1.31055 -9.68945 -4.4502c0 -0.259766 1.0498 -10.7402 0.259766 -16.5c-0.259766 -1.83008 -1.0498 -1.0498 -1.0498 0c-0.270508 5.24023 -1.57031 11.5303 -2.36035 14.9297
+c-4.70996 -2.60938 -10.21 -6.54004 -15.9697 -11.7793c0 0 4.70996 -10.21 4.70996 -25.9209c0 -21.21 -8.37988 -32.9893 -16.5 -37.9697l-0.259766 0.520508c9.16992 9.16992 12.5693 21.4795 12.5693 31.9492c0 13.8701 -6.80957 33.25 -14.3994 41.3701
+c0 0 4.4502 -8.12012 6.80957 -17.8096c0 0 -21.21 -21.4697 -26.9697 -62.3203c0 0 -3.66992 9.16992 -10.7402 16.2402c0 0 12.0498 -15.4502 12.0498 -38.2305c0 -19.3799 -12.8398 -37.4395 -27.5 -48.1797c-0.989258 0 -0.790039 -0.169922 -0.790039 0.790039
+c15.71 12.8301 22.2607 28.0205 22.2607 46.3506c0 38.2295 -49.2305 80.3896 -130.15 80.3896c-96.1104 0 -181.74 -58.1299 -236.99 -128.05l-1.0498 0.259766c-40.3203 120.979 -135.64 185.66 -196.13 202.16c-2.09961 0.519531 -1.83984 0.790039 -0.790039 1.30957
+c12.3096 14.4004 136.96 151.88 341.47 151.88zM243.02 69.0596c16.8408 14.5908 4.99023 30.7705 4.71094 31.1602c-4.08008 5.99023 -16.3105 16.8506 -31.1602 5.5c-10.9502 -8.37988 -11.6406 -22.8896 -4.19043 -32.4697
+c6.44043 -8.26953 19.5801 -13.1797 30.6396 -4.19043zM245.11 205.49l1.83008 -8.11035l-3.6709 4.4502l-14.1396 -26.71l24.6201 -28.7998l12.5703 6.01953l-11.7803 70.96zM263.7 87.9102c3.41016 2.35938 7.33984 4.97949 9.67969 6.57031l-0.259766 0.259766
+c-1.56055 -0.780273 -3.11035 -1.0498 -12.5703 15.9697v0.259766c6.87012 5.16016 8.45996 4.89062 11.5205 5.5l0.259766 0.260742c-1.31055 3.66992 -1.31055 3.66992 -1.83008 5.5h-0.259766c-3.95996 -3.31055 -1.4707 -1.58008 -11.5205 -7.86035h-0.259766
+c-1.83008 3.13965 -4.19043 7.33008 -5.75977 9.68945v1.31055c4.4502 3.91992 10.2197 6.7998 12.3096 7.58984c2.87988 1.0498 4.19043 0.520508 5.24023 0.259766l0.259766 0.520508c-1.30957 1.83008 -2.08984 2.87988 -3.39941 4.70996l-0.520508 0.259766
+c-9.9502 -5.5 -17.54 -9.9502 -25.3994 -15.71l0.259766 -0.519531c1.30957 0.259766 3.13965 -0.260742 4.4502 -2.62012c15.04 -25.0801 19.5898 -27.5908 17.54 -31.6904zM318.96 120.38v0.25c-1.99023 0 -2.34961 -1.37012 -14.6602 30.6396v0.260742
+c4.95996 1.85938 8.78027 4.37988 12.3105 2.62012l0.259766 0.519531l-3.13965 4.98047l-0.520508 0.259766c-2.22949 -0.929688 -20.4697 -8.00977 -27.7598 -12.5703l-0.259766 -0.519531l1.0498 -5.76074h0.519531c1.0498 3.68066 9.7998 7.33008 9.9502 7.33008
+l0.259766 -0.259766c12.9404 -29.7598 13.0703 -29.8799 11.7803 -32.4697l0.259766 -0.259766c3.93066 2.09961 6.81055 3.40918 9.9502 4.97949zM363.73 136.88c-0.780273 0.520508 -2.09082 1.31055 -2.63086 3.92969c-1.56934 6.02051 -4.70996 20.1709 -6.2793 26.4502
+c-0.530273 1.57031 -0.530273 3.14062 0.519531 4.4502l-0.259766 0.259766c-3.41016 -0.529297 -6.29004 -1.30957 -10.7402 -2.35938v-0.260742c1.57031 -0.529297 2.10059 -2.09961 2.62012 -3.92969l2.62012 -9.42969l-0.259766 -0.259766
+c-3.40039 -1.05078 -8.90039 -2.62012 -12.8301 -3.93066h-0.259766c-0.780273 2.10059 -1.83008 5.75977 -3.14062 9.69043l0.259766 4.70996l-0.259766 0.259766c-4.71973 -1.30957 -7.59961 -2.34961 -10.7402 -3.40039v-0.519531
+c1.05078 0 2.10059 -1.30957 2.62012 -3.13965c1.0498 -3.40039 8.12012 -24.0908 9.16992 -27.2305c0.790039 -2.09961 0.790039 -3.66992 -0.259766 -4.97949l0.259766 -0.260742c3.14062 1.31055 6.54004 2.87988 10.21 3.93066v0.519531
+c-1.0498 0.259766 -2.08984 0.780273 -2.87988 3.13965c-1.0498 3.93066 -3.39941 11.2607 -4.18945 13.8809l0.259766 0.259766c3.92969 1.30957 9.42969 3.13965 12.8301 3.92969l0.259766 -0.259766c0.530273 -2.09961 2.62012 -10.2197 3.66992 -13.6201
+l-0.519531 -4.4502l0.259766 -0.259766c4.4502 1.57031 5.5 1.83008 9.69043 2.87988zM395.94 143.69c0.529297 1.8291 1.0498 3.65918 1.5791 6.04004h-0.259766c-2.0293 -4.06055 -15.0898 -5.09082 -16.2402 -4.71094l-0.259766 0.260742
+c-0.519531 3.13965 -1.83008 10.4795 -2.08984 12.5693l0.259766 0.260742c8.06055 0.899414 5.40039 1.0293 10.21 0h0.260742c0 3.40918 0.259766 3.66992 0.259766 5.23926h-0.259766c-5.98047 -2.2998 -1.2207 -0.679688 -10.7402 -2.35938l-0.259766 0.259766
+c-0.520508 3.40039 -1.31055 8.37988 -1.57031 9.9502l0.259766 0.259766c12.9004 2.41016 15.1006 0.349609 16.2402 -0.790039l0.259766 0.259766c-0.780273 2.36035 -1.0498 3.14062 -1.57031 5.5l-0.259766 0.260742
+c-4.71973 -0.260742 -15.71 -1.05078 -24.8799 -2.62012l-0.790039 -0.520508c1.83008 -0.790039 2.36035 -1.83984 2.62012 -3.66992c1.58008 -7.59961 3.41016 -18.3301 4.98047 -26.1895l-0.790039 -4.19043l0.259766 -0.259766
+c8.37988 1.83008 17.8096 3.66992 22.5195 4.18945zM406.68 188.2c3.14062 1.56934 7.33008 5.5 7.33008 5.50977c1.95996 -4.58008 0.970703 -2.70996 4.19043 -7.86035c10.1494 -0.459961 8.60938 0.0205078 20.4297 -1.0498l0.790039 4.70996
+s-4.18945 0 -5.75977 1.83008c-1.0498 1.31055 -1.31055 3.14062 -1.57031 5.5c0 2.36035 0.270508 16.5 0.790039 20.6904c0.259766 4.18945 2.08984 20.4199 2.08984 23.04c0.260742 2.62012 1.0498 8.91016 0.260742 12.0498
+c-4.82031 19.2803 -24.4307 17.8096 -50.0205 16.2402l-5.24023 -16.2402l2.62012 -2.87988c16.5498 16.5498 37.6201 4.56934 29.5898 -5.75977c-5.18945 -6.9209 -19.7393 -8.90039 -28.54 -17.0205c-6.47949 -6.49023 -12.2393 -20.9004 -5.5 -31.6904
+c6.12988 -11.0391 17.29 -9.96973 17.54 -9.94922c2.87988 0 6.55078 0.519531 11 2.87988zM443.86 166.99c0 1.83984 0.269531 4.18945 0.269531 5.25l-0.259766 0.519531c-14.3604 8.98047 -26.8604 0.919922 -28.7998 -9.9502
+c-2.83984 -16.0898 15.3594 -25.46 25.6602 -18.5898l0.519531 0.520508c0 0.259766 1.30957 4.4502 1.83008 6.2793l-0.259766 0.260742c-6.39062 -9.58008 -23.3203 -6.87012 -20.6904 10.21c1.91016 12.6602 15.3799 16.0801 21.7305 5.5zM449.63 254.72
+c0 0 4.96973 -0.790039 4.99023 -3.66016c0 -2.08984 -4.98047 -55.25 -4.98047 -55.25c-0.109375 -1.48926 -0.339844 -6.80957 -7.58984 -6.80957l-0.790039 -4.70996c18.3906 -2.83008 19.3701 -3.04004 36.9199 -7.33008l0.520508 4.70996
+c-13.0498 3.91992 -9.74023 7.37012 -4.4502 46.0898c1.09961 0.870117 8.62012 7.14062 20.6904 0.790039l11.2598 11.2598s-9.69043 8.90039 -14.9307 7.33008c-5.23926 -1.30957 -15.4492 -10.7393 -15.4492 -10.7393l1.56934 17.54
+c-8.10938 4.0498 -27.0693 7.3291 -27.7598 7.3291v-6.5498zM460.62 140.28c9.42969 -2.35059 16.2402 2.62012 18.8496 11.5195c2.08984 7.60059 -1.56934 16.7598 -10.7393 19.3799c-6.54004 2.10059 -15.7109 -0.779297 -18.8506 -10.21
+c-3.39941 -9.68945 2.62012 -18.5996 10.7402 -20.6895zM502.78 130.59c-0.780273 1.31055 -1.04004 2.10059 -0.799805 3.91016c1.22949 27.0098 1.5293 24.6602 1.0498 25.1396c-2.08984 0.790039 -5.5 2.09082 -7.58984 2.87988l-0.520508 -0.259766v-2.08984
+c-3.92969 -6.01953 -10.4795 -15.4502 -13.8799 -20.1602l-2.62012 -1.83008v-0.259766c2.08984 -0.259766 4.70996 -1.30957 6.02051 -1.57031v0.260742l0.790039 3.39941c0.789062 1.0498 2.35938 3.66992 3.66992 5.5c0.40918 0 2.25 -0.549805 7.06934 -2.35938
+c0.330078 -0.320312 0.330078 0.649414 -0.259766 -7.59082l-1.57031 -1.8291v-0.260742c1.57031 -0.519531 6.28027 -2.35938 8.64062 -2.87988zM498.07 220.41c-13.2207 -21.1504 -9.39062 -51.6006 9.66992 -52.9004c5.75977 -0.259766 9.42969 3.93066 9.68945 3.66992
+l-2.08984 -6.80957c8.91016 -4.21973 11.4404 -5.29004 17.8105 -8.63965l1.83008 4.44922c-6.14062 3.51074 -1.29004 11.25 24.6191 84.3203c-6.13965 6.45996 -10.2998 10.0596 -22.5195 20.4297l-1.83008 -3.66992c1.62988 -1.35938 6.79004 -5.00977 4.4502 -11.2598
+l-7.58984 -26.1904c-3.28027 12.79 -22.79 14.8701 -34.04 -3.39941zM527.4 141.07l2.35938 3.39941v0.520508c-3.41016 6.83008 -11.9395 7.41992 -14.6602 2.35938c-1.83984 -3.40918 0.260742 -7.06934 1.83008 -9.68945
+c1.57031 -2.87988 3.14062 -6.29004 2.08984 -8.37988c-2.31934 -4.62988 -8.94922 -0.680664 -8.37988 4.97949l-0.790039 -0.259766c-2.09961 -4.7998 -1.83008 -4.00977 -1.83008 -4.70996c3.05078 -6.09961 12.8105 -7.12988 15.4502 -0.790039
+c1.57031 3.15039 0.520508 6.80957 -1.0498 9.42969c-1.83008 3.40039 -4.18945 6.29004 -2.87988 8.37988c1.51953 2.65039 7.86035 0.470703 7.86035 -5.23926zM548.61 127.71l1.30957 3.91016l-0.259766 0.259766c-2.36035 2.08984 -8.64062 6.54004 -12.3105 8.90039
+h-0.259766l-3.13965 -3.40039v-0.259766c4.7998 -0.320312 3.37988 0.149414 6.01953 -1.83008v-0.259766c-2.62012 -4.9707 -6.0293 -11.2607 -9.16992 -17.0205l-2.08984 -1.30957l-0.259766 -0.259766l5.75977 -4.4502l0.259766 0.259766
+c-0.259766 0.530273 -0.519531 1.57031 0.790039 3.92969c2.87988 5.77051 6.28027 12.0508 8.64062 16.2402h0.259766c3.54004 -2.57031 2.49023 -1.43945 4.4502 -4.70996zM575.84 171.97l7.85059 10.46s-9.4209 18.8604 -23.04 16.5
+c-20.8408 -4.0293 -3.15039 -34.21 -2.09082 -38.2295c4.33008 -15.1299 -16.3193 -12.5605 -13.3496 5.24023l-2.87988 2.08984l-4.98047 -14.4004s11.7803 -11.2598 20.1602 -10.4697c8.12012 0.790039 13.8799 6.29004 13.8799 16.5
+c0 8.37988 -7.85938 22.7803 -7.85938 27.7598c0 6.86035 12.2695 4.75977 11.5195 -4.97949c-0.259766 -2.61035 -1.2998 -5.23047 -2.08984 -7.59082zM611.46 182.18c0.780273 -2.35938 1.57031 -1.83008 0.790039 0.270508
+c-32.4697 98.9795 -132.76 138.78 -199.8 139.83c-50.54 0.779297 -89.5605 -11.79 -131.98 -35.8799l20.6904 61.0098l-33.7803 -65.7305l-8.89941 20.9502c3.13965 1.04004 6.2793 2.08984 6.2793 2.08984l-2.62012 8.64062s-3.13965 -0.780273 -7.33008 -2.09082
+l-12.0498 28.2803l13.6201 -61.0098c-5.12012 2.55957 -19.0996 6.83008 -6.5498 19.3799l-2.62012 11c-6.97949 -2.21973 -13.2295 -3.62012 -32.21 -9.68945l-23.0801 11.5l59.1797 -42.6807l-4.70996 -2.08984l-17.2793 13.8799
+c2.23926 -5.13965 3.2998 -12.1699 4.70996 -19.6396l-28.54 -13.0898l-30.1104 36.1396l-17.2803 -9.16992l13.6201 -42.4199l-11.2598 -4.98047l94.2695 29.3301l-3.66992 -10.4697l-0.519531 3.13965l-13.0898 -3.39941l4.97949 -24.6201l-4.4502 -12.3105
+l-25.6592 30.6406l-39.8008 -10.21l18.8506 -58.9199c-60.1299 62.3994 -67.7002 66.3994 -61.7998 75.6797c2.09961 2.87988 7.85938 7.07031 7.85938 7.07031l-4.18945 7.06934c-26.7803 -18.3496 -27.8398 -19.1494 -58.4004 -42.6797l4.98047 -6.01953
+s8.12012 5.75977 13.6201 5.5c7.81934 -0.350586 1.76953 2.93945 113.659 -98.7305l11.7803 8.37988l-27.7598 93.4805l35.8799 -42.1602l-4.70996 -13.8799l41.9004 88.5098c34.6699 -80.5098 29.1494 -66.9502 32.9893 -78.8203l-33.5195 67.2998l-2.36035 -4.44922
+c1.2998 -1.30078 -0.919922 3.05957 22.7803 -59.4404c3.22949 -8.88965 -1.10059 -9.88965 -5.5 -12.8301l2.36035 -4.70996c15.3594 6.79004 22.9395 9.54004 39.0195 14.4004l-1.0498 4.97949c-8.89062 -1.33008 -10.1006 0.169922 -12.0498 4.4502
+c-1.05078 2.09961 -14.1504 40.0703 -20.4307 58.6602l-10.21 4.97949l-2.35938 8.12012l61.54 -36.6602l-13.0908 -43.21c12.1904 3.26074 27.0303 6.74023 49.4902 9.9502l-0.259766 26.71l-4.98047 -1.0498c-0.669922 -13.7998 -6.0293 -22.0801 -19.6396 -22.7803
+l22.2598 80.3906c-27.6201 -0.450195 -59.2695 -7.19043 -66.7695 -8.90039l3.92969 -16.5l-25.1396 19.6396l91.3896 20.6904l-85.6299 -9.16992c38.4902 22.5195 79.3398 39.0195 132.76 37.9697c131.46 -2.08984 180.95 -99.2402 191.95 -129.62zM203.48 295.57
+l2.35938 -8.64062c7.82031 2.61035 10.8604 2.36035 11.2598 2.36035l-9.42969 7.58984c-2.36035 -0.790039 -4.18945 -1.30957 -4.18945 -1.30957zM347.24 257.07l-11.5303 -37.71l-21.7295 17.0195c6.7998 25.5 31.6895 21.29 33.2598 20.6904zM318.43 380.93
+c224.94 0 321.83 -143.76 321.57 -227.55c0 -11 -0.269531 -17.5498 -0.790039 -19.6396c-0.259766 -2.10059 -1.0498 -0.790039 -1.0498 0.519531v9.9502c0 106.58 -121.51 223.37 -301.67 223.37c-61.2705 0 -103.69 -12.0498 -110.24 -13.8799l-1.57031 0.259766
+c-6.80957 7.58984 -12.8301 9.69043 -21.21 11.7803v0.790039c8.91016 2.34961 56.5605 14.3994 114.96 14.3994zM529.49 211.25c-8.61035 -34.4502 -13.6504 -35.3496 -18.3301 -35.3604c-7.33008 0 -6.81055 9.43066 -6.02051 14.9307
+c0.879883 9.72949 7.40039 34.6494 17.0205 33.5195c7.33008 -0.780273 8.63965 -7.33008 7.33008 -13.0898zM467.96 168.3c3.40039 -0.780273 7.84961 -4.4502 5.23047 -14.3896c-2.88086 -11.2598 -8.11035 -11.79 -11.7803 -10.7402
+c-5.5 1.31055 -7.85059 7.84961 -6.02051 14.6602c3.14062 11.2598 9.9502 11.2598 12.5703 10.4697zM491 147.35v0.270508c1.0498 1.83008 5.5 8.63965 6.5498 9.9502c-0.269531 -3.66992 -0.790039 -10.2207 -0.790039 -12.0508
+c-2.62012 0.780273 -3.92969 1.31055 -5.75977 1.83008z" />
+    <glyph glyph-name="think-peaks" unicode="&#xf731;" horiz-adv-x="576" 
+d="M465.4 38.5996l-206.2 353.801l-204.2 -352.101l-32 0.299805l236.2 407.4l206.2 -353.9l55.0996 95l32 -0.299805zM110.1 82.7002l149.601 257.899l235.8 -404.6l-32.5 0.0996094l-203.4 349.101l-117.399 -202.5h-32.1006z" />
+    <glyph glyph-name="reacteurope" unicode="&#xf75d;" horiz-adv-x="576" 
+d="M250.6 236.26l2 6.7998l-5.69922 4.30078l7.19922 0.0996094l2.30078 6.7998l2.2998 -6.7998l7.09961 -0.0996094l-5.7002 -4.30078l2.10059 -6.7998l-5.7998 4.10059zM314.3 236.26l1.90039 6.7998l-5.7002 4.30078l7.2002 0.0996094l2.2998 6.7998l2.2998 -6.7998
+l7.2002 -0.0996094l-5.7002 -4.30078l2.10059 -6.7998l-5.80078 4.10059zM223 185.76c4.90039 0 3.7998 -3.89941 3.7998 -13.7598c0 -10.2998 -6.7002 -14.0996 -16.7998 -14.0996h-0.200195c-10.0996 0 -16.7998 3.69922 -16.7998 14.0996v40.0596
+c0 9.90039 6.7002 14.1006 16.7998 14.1006h0.200195c10.0996 0 16.7998 -4.2002 16.7998 -14.1006c0 -8.39941 0.900391 -12.1992 -3.7998 -12.2998h-3.40039c-4.5 0 -3.7998 3.2998 -3.7998 10.5c0 4.7002 -2.2998 6.10059 -5.7998 6.10059
+s-5.7998 -1.40039 -5.7998 -6.10059v-36.5996c0 -4.7002 2.2998 -6.10059 5.7998 -6.10059s5.7998 1.40039 5.7998 6.10059c0 8.09961 -1 12.0996 3.7998 12.0996h3.40039zM142.3 168.36c2.5 0 3.7998 -1.30078 3.7998 -3.80078v-2.09961
+c0 -2.5 -1.2998 -3.7998 -3.7998 -3.7998h-21.8994c-2.5 0 -3.80078 1.2998 -3.80078 3.7998v59.0996c0 2.5 1.30078 3.90039 3.7002 3.80078h21.7002c2.5 0 3.7998 -1.30078 3.7998 -3.80078v-2.09961c0 -2.5 -1.2998 -3.7998 -3.7998 -3.7998h-14.4004v-18.2998h11.4004
+c2.5 0 3.7998 -1.30078 3.7998 -3.80078v-2.09961c0 -2.5 -1.2998 -3.7998 -3.7998 -3.7998h-11.4004v-19.2998h14.7002zM100.3 186.86l8.10059 -23.9004c0.799805 -2.59961 -0.400391 -4.40039 -3.2002 -4.40039h-3.2998
+c-0.0820312 -0.00585938 -0.21582 -0.0107422 -0.297852 -0.0107422c-1.81543 0 -3.6084 1.43848 -4.00293 3.21094l-7.39941 23.5h-5.60059v-22.8994c0 -2.5 -1.2998 -3.80078 -3.7998 -3.80078h-3.39941c-2.5 0 -3.80078 1.30078 -3.80078 3.80078v59.0996
+c0 2.5 1.30078 3.7998 3.80078 3.7998h13.3994c10.1006 0 16.7998 -4 16.7998 -14.0996v-11.9004c0 -6.39941 -2.69922 -10.3994 -7.2998 -12.3994zM96.5 200.86v8.69922c0 4.80078 -2.5 6.10059 -6.09961 6.10059h-5.80078v-20.9004h5.80078
+c3.59961 0 6.09961 1.2998 6.09961 6.10059zM176 222l11.2002 -59.2002c0.5 -2.7002 -0.799805 -4.09961 -3.40039 -4.09961h-3.5c-0.100586 -0.00976562 -0.264648 -0.0185547 -0.366211 -0.0185547c-1.94531 0 -3.61816 1.57617 -3.7334 3.51855l-1.7998 11.2998h-12.2002
+l-1.7998 -11.2998c-0.116211 -1.94238 -1.78809 -3.51855 -3.7334 -3.51855c-0.101562 0 -0.265625 0.00878906 -0.367188 0.0185547h-3c-2.5 0 -3.89941 1.39941 -3.39941 4.09961l11 59.2002c0.135742 1.88477 1.78027 3.41504 3.66992 3.41504
+c0.0908203 0 0.239258 -0.00683594 0.330078 -0.0146484h6.89941c0.110352 0.0117188 0.290039 0.0205078 0.401367 0.0205078c1.89844 0 3.60059 -1.53223 3.79883 -3.4209zM163.7 182.7h9.39941l-4.69922 29.7002zM253 162.5c0 -2.45996 -1.2998 -3.83984 -3.7998 -3.7998
+h-3.40039c-2.5 0 -3.7998 1.2998 -3.7998 3.7998v53.2002h-7.2998c-2.5 0 -3.7998 1.2998 -3.7998 3.7998v2.09961c0 2.5 1.2998 3.80078 3.7998 3.80078h25.7998c2.5 0 3.7998 -1.30078 3.7998 -3.80078v-2.09961c0 -2.5 -1.2998 -3.7998 -3.7998 -3.7998h-7.5v-53.2002z
+M501 163.3c0.0449219 0.00390625 0.119141 -0.0322266 0.164062 -0.0322266c1.01562 0 1.84082 -0.824219 1.84082 -1.83984c0 -0.0351562 -0.00292969 -0.0927734 -0.00488281 -0.12793v-0.799805c0.00195312 -0.0273438 0.00292969 -0.0722656 0.00292969 -0.100586
+c0 -0.999023 -0.810547 -1.80957 -1.81055 -1.80957c-0.0527344 0 -0.139648 0.00488281 -0.192383 0.00976562h-22.5c-0.0527344 -0.00488281 -0.139648 -0.00976562 -0.192383 -0.00976562c-1 0 -1.81055 0.810547 -1.81055 1.80957
+c0 0.0283203 0.000976562 0.0732422 0.00292969 0.100586v63c-0.00878906 0.0625 -0.0166016 0.166016 -0.0166016 0.229492c0 0.893555 0.725586 1.62012 1.62012 1.62012c0.111328 0 0.289062 -0.0224609 0.396484 -0.0498047h22.2002
+c0.0644531 0.00878906 0.169922 0.015625 0.235352 0.015625c0.977539 0 1.77051 -0.792969 1.77051 -1.76953c0 -0.0400391 -0.00292969 -0.105469 -0.00585938 -0.145508v-0.800781c0.00195312 -0.03125 0.00292969 -0.0820312 0.00292969 -0.113281
+c0 -1.04297 -0.84668 -1.88965 -1.88965 -1.88965c-0.03125 0 -0.0820312 0.000976562 -0.113281 0.00292969h-19.1006v-25.7998h16.1006c0.03125 0.00195312 0.0820312 0.00390625 0.113281 0.00390625c1.04297 0 1.88965 -0.84668 1.88965 -1.89062
+c0 -0.03125 -0.000976562 -0.0820312 -0.00292969 -0.113281v-0.799805c0.00195312 -0.03125 0.00292969 -0.0820312 0.00292969 -0.113281c0 -1.04297 -0.84668 -1.88965 -1.88965 -1.88965c-0.03125 0 -0.0820312 0.000976562 -0.113281 0.00292969h-16.1006v-26.7002
+h19.4004zM407.9 226.2c10.0996 0 15.2998 -4.74023 15.2998 -14.1006v-40.0996c0 -9.2998 -5.2002 -14.0996 -15.2998 -14.0996h-0.800781c-10.0996 0 -15.2998 4.7998 -15.2998 14.0996v40.0996c0 9.40039 5.2002 14.1006 15.2998 14.1006h0.800781zM418.1 173.8v36.6006
+c0 7.89941 -3 11.0996 -10.5 11.0996s-10.5 -3.2002 -10.5 -11.0996v-36.6006c0 -8 3 -11.0996 10.5 -11.0996s10.4004 3.09961 10.5 11.0996zM371.6 188.3l10.6006 -27.2998c0.5 -1.2998 -0.100586 -2.2998 -1.5 -2.2998h-1.5
+c-0.0351562 -0.00195312 -0.0927734 -0.00390625 -0.128906 -0.00390625c-0.886719 0 -1.85938 0.673828 -2.1709 1.50391l-10.4004 27.2002h-11.5996v-26.9004c0.00390625 -0.0458984 0.0078125 -0.12207 0.0078125 -0.167969
+c0 -0.960938 -0.779297 -1.74023 -1.74023 -1.74023c-0.0458984 0 -0.12207 0.00390625 -0.167969 0.0078125h-1.2002c-0.0527344 -0.00488281 -0.139648 -0.00976562 -0.192383 -0.00976562c-0.999023 0 -1.81055 0.810547 -1.81055 1.80957
+c0 0.0283203 0.00195312 0.0732422 0.00292969 0.100586v63c-0.000976562 0.0273438 -0.00292969 0.0722656 -0.00292969 0.100586c0 0.999023 0.811523 1.80957 1.81055 1.80957c0.0527344 0 0.139648 -0.00488281 0.192383 -0.00976562h13.7002
+c10.0996 0 15.2998 -4.7002 15.2998 -14.1006v-9.7002c0 -7.19922 -3.09961 -11.6992 -9.2002 -13.2998zM365.2 192.2c7.5 0 10.5 3.16016 10.5 11v6.39941c0 8 -3 11.1006 -10.5 11.1006h-10.2002v-28.5h10.2002zM451.1 225.3c10.1006 0 15.3008 -4.7002 15.3008 -14.0996
+v-10.5c0 -9.2998 -5.2002 -14.1006 -15.3008 -14.1006h-10.5996v-26.0996c0.00488281 -0.0458984 0.0078125 -0.12207 0.0078125 -0.167969c0 -0.960938 -0.779297 -1.74023 -1.73926 -1.74023c-0.046875 0 -0.12207 0.00390625 -0.168945 0.0078125h-1.19922
+c-0.0537109 -0.00488281 -0.139648 -0.00976562 -0.193359 -0.00976562c-0.999023 0 -1.80957 0.810547 -1.80957 1.80957c0 0.0283203 0.000976562 0.0732422 0.00292969 0.100586v63c-0.00976562 0.0625 -0.0166016 0.166016 -0.0166016 0.229492
+c0 0.893555 0.725586 1.62012 1.62012 1.62012c0.111328 0 0.288086 -0.0224609 0.396484 -0.0498047h13.6992zM461.3 202.5v7.09961c0 7.90039 -3 11.1006 -10.5 11h-10.2002v-29.1992h10.2002c7.5 0 10.5 3.19922 10.5 11.0996zM259.5 140l7.09961 -0.0996094
+l-5.69922 -4.30078l2.09961 -6.7998l-5.7998 4.10059l-5.7998 -4.10059l2.09961 6.7998l-5.7002 4.30078l7.10059 0.0996094l2.2998 6.7998zM487.1 276.1c122.301 -46.0996 118.401 -132.54 -33.8984 -176.34c13.3994 -49.7002 18.0996 -101.899 0.0996094 -133.8
+c-3.7998 -6.7002 -16.7998 -27.7002 -47.5996 -27.7002c-41.5 0 -110.2 41.6006 -182.101 142c-42.7998 3.5 -72.1992 10.1006 -84.5996 13c-20.5 -82.2998 -6.7998 -125.3 15.5 -137.899c1.2002 -0.700195 38.4004 -27.2002 120.9 52.7998
+c3.39941 -3.5 6.79883 -6.90039 10.1982 -10.2002c-63.0996 -61.2002 -110.199 -71 -138.199 -55.2002c-32.4004 18.2998 -42.8008 72 -22.3008 153.9c-18.8994 5 -121.6 33.2002 -122.1 92.7998c-0.400391 40.9004 49.7998 74.7002 120.3 95
+c-13.3994 49.5996 -18.2002 101.8 -0.0996094 133.8c3.7998 6.74023 16.7998 27.7402 47.5996 27.7402c41.6006 0 110.3 -41.6396 182.2 -142.14c23.6113 -1.88379 61.5127 -7.70801 84.5996 -13c20.5 82 6.90039 125.1 -15.5 137.8
+c-1.2998 0.700195 -38.3994 27.2002 -120.899 -52.7998c-3.40039 3.5 -6.80078 6.89941 -10.2002 10.1992c52.2998 50.9404 103.7 74.6006 138.2 55.2402c33.8994 -19.2002 41.8994 -75.8994 22.2998 -153.899c9.98535 -2.61523 25.9346 -7.67773 35.5996 -11.3008z
+M135.901 411.16c-23.1006 -40.7998 1 -121.562 1.19922 -122.961c22.9912 5.78516 60.8018 12.3262 84.4004 14.5996c12.7793 18.6787 35.4922 47.4404 50.7002 64.2002c3.39941 -3.33301 6.7998 -6.74609 10.2002 -10.2393
+c-12.5371 -13.7451 -31.4434 -37.2207 -42.2002 -52.3994c14.8213 1.11914 38.9141 2.02734 53.7783 2.02734c11.082 0 29.0566 -0.504883 40.1211 -1.12793c-64.5 86.6006 -126.5 126.2 -163.3 126.2c-23 0 -32 -15.2002 -34.8994 -20.2998zM440.701 -27.1406
+c3.2998 6 21.5 38.5996 -1.2002 123c-4.09961 -1.10059 -37.0996 -9.90039 -84.4004 -14.6006c-12.7578 -18.6943 -35.4717 -47.4551 -50.6992 -64.2002c-3.40039 3.2998 -6.80078 6.7002 -10.2002 10.2002c12.5371 13.7461 31.4424 37.2207 42.2002 52.4004
+c-14.7715 -1.14258 -38.7842 -2.06934 -53.5996 -2.06934c-11.1328 0 -29.1875 0.524414 -40.3008 1.16895c64.5996 -86.7998 126.6 -126.2 163.3 -126.2c23.1006 0 32 15.2002 34.9004 20.3008zM449.801 111.459c25.6006 7.2998 85.9004 27.4004 105.7 62.5
+c1.40039 2.5 33.5 50.5 -72.5996 90.4004c-9.36914 3.51562 -24.8252 8.44336 -34.5 11c-3.60059 -12.9004 -7.90039 -26.1006 -12.8008 -39.5c-3.15723 -0.430664 -7.14453 -2.93945 -8.89941 -5.60059l-0.100586 0.100586
+c-1.6416 1.55762 -4.68848 3.48438 -6.7998 4.2998c5.7002 15 10.6006 29.7998 14.6006 44.2002c-7.2002 1.69922 -31.8008 7.59961 -72.2002 11.6992c16.7002 -24.5 27.8994 -44.0996 34.2998 -55.5c-3.50781 -1.14648 -8.16699 -4.46094 -10.4004 -7.39941
+c-13.5996 16.3994 -11 19.8994 -42.5 64.5c-13.752 0.96582 -36.1016 1.75 -49.8877 1.75c-17.2871 0 -45.292 -1.23145 -62.5117 -2.75c-16.9004 -25 -28.2998 -45.2002 -34.7998 -56.9004c-3.49707 -1.49023 -8.06738 -5.25391 -10.2002 -8.39941
+c-0.914062 2.88965 -3.78125 6.47363 -6.40039 8c6.10059 11.3994 16.9004 31 32.7998 55.2998c-39.5996 -4.60059 -65 -11.2002 -72 -13c4.30078 -14.1006 9.40039 -28.6006 15.2002 -43.2998c-0.71582 -0.522461 -1.74609 -1.50781 -2.2998 -2.2002
+c-1.5 1.89941 -4 5.2998 -14.4004 5.2998c-4.69922 12.2998 -8.7998 24.5 -12.3994 36.4004c-138.8 -40.3604 -158.4 -121.36 1.5 -164c3.59961 12.8994 7.7998 26 12.7002 39.3994c0.269531 -0.0146484 0.708008 -0.0273438 0.978516 -0.0273438
+c1.68359 0 4.33594 0.460938 5.9209 1.02734c3 -1.2002 5.2002 -1 8.40039 -1c-5.5 -14.5996 -10.2002 -28.8994 -14.1006 -42.8994c19.7119 -4.56055 52.0576 -9.80176 72.2002 -11.7002c-16.2998 23.8994 -27.5 43.3994 -33.7998 54.5996
+c8.7002 0 10.7002 1.60059 12.5996 3.2002c0.794922 -0.480469 2.13965 -1.15234 3 -1.5c15.3008 -26.7002 28.9004 -46.5996 36.8008 -57.7998c13.751 -0.96582 36.1006 -1.75 49.8857 -1.75c17.2871 0 45.2939 1.23145 62.5137 2.75
+c16.5 24.2998 27.7002 44 33.9004 55.2002c7.2998 0 9.7998 3 10.8994 4.19922c1.5332 -1.11426 4.2207 -2.54785 6 -3.19922c-15 -28 -28.6992 -48.9004 -32.1992 -54.2002c20.1172 2.22656 52.373 8.05078 72 13c-4.10059 13.7998 -9 27.8994 -14.7002 42.2002
+c1.65723 0.743164 4.07617 2.35645 5.39941 3.59961l0.100586 0.0996094c2.07227 -3.14648 6.8125 -5.7002 10.5811 -5.7002c0.0322266 0 0.0859375 0 0.119141 0.000976562c4.69922 -12.3008 8.7998 -24.5 12.3994 -36.4004zM335.401 225.459
+c0.0556641 0.00585938 0.145508 0.0107422 0.201172 0.0107422c1.05566 0 1.95117 -0.856445 1.99805 -1.91113v-51.5c0 -9.5 -5 -14.0996 -15.0996 -14.0996h-0.400391c-10.0996 0 -15.0996 4.5 -15.0996 14.0996v51.5
+c-0.00195312 0.0283203 -0.00292969 0.0732422 -0.00292969 0.100586c0 0.999023 0.810547 1.81055 1.81055 1.81055c0.0527344 0 0.139648 -0.00488281 0.192383 -0.0107422h1.2002c0.0615234 0.00878906 0.162109 0.0146484 0.224609 0.0146484
+c0.933594 0 1.69043 -0.756836 1.69043 -1.68945c0 -0.0625 -0.00683594 -0.163086 -0.015625 -0.225586v-49.7998c0 -8 2.60059 -11.0996 10.1006 -11.0996s10.0996 3.2002 10.0996 11.0996v49.7998c-0.00390625 0.046875 -0.0078125 0.12207 -0.0078125 0.168945
+c0 0.959961 0.779297 1.73926 1.74023 1.73926c0.0458984 0 0.121094 -0.00292969 0.167969 -0.0078125h1.2002zM321.701 139.999l7.09961 -0.0996094l-5.7002 -4.30078l2.10059 -6.7998l-5.7998 4.10059l-5.80078 -4.10059l2.10059 6.7998l-5.7002 4.30078
+l7.09961 0.0996094l2.30078 6.7998zM290.601 132.599l7.10059 -0.0996094l-5.7002 -4.2998l2.09961 -6.7998l-5.7998 4.09961l-5.7998 -4.09961l2.09961 6.7998l-5.69922 4.2998l7.09961 0.0996094l2.2998 6.80078zM295.701 163.399
+c0.0507812 0.00488281 0.133789 -0.03125 0.185547 -0.03125c1.00977 0 1.83008 -0.819336 1.83008 -1.83008c0 -0.0664062 -0.00683594 -0.172852 -0.015625 -0.239258v-0.799805c0.00292969 -0.0400391 0.00585938 -0.105469 0.00585938 -0.145508
+c0 -0.977539 -0.792969 -1.77051 -1.77051 -1.77051c-0.0654297 0 -0.170898 0.00683594 -0.235352 0.015625h-22.5c-0.0537109 -0.00488281 -0.139648 -0.00976562 -0.193359 -0.00976562c-0.999023 0 -1.80957 0.810547 -1.80957 1.80957
+c0 0.0283203 0.000976562 0.0732422 0.00292969 0.100586v63c-0.00195312 0.0273438 -0.00292969 0.0722656 -0.00292969 0.100586c0 0.999023 0.810547 1.80957 1.80957 1.80957c0.0537109 0 0.139648 -0.00488281 0.193359 -0.00976562h22.2002
+c0.0644531 0.00878906 0.169922 0.015625 0.235352 0.015625c0.977539 0 1.77051 -0.792969 1.77051 -1.77051c0 -0.0400391 -0.00292969 -0.105469 -0.00585938 -0.145508v-0.799805c0.00195312 -0.03125 0.00292969 -0.0820312 0.00292969 -0.113281
+c0 -1.04395 -0.84668 -1.89062 -1.88965 -1.89062c-0.03125 0 -0.0820312 0.00195312 -0.113281 0.00390625h-19.1006v-25.7998h16.1006c0.03125 0.00195312 0.0820312 0.00292969 0.113281 0.00292969c1.04297 0 1.88965 -0.84668 1.88965 -1.88965
+c0 -0.03125 -0.000976562 -0.0820312 -0.00292969 -0.113281v-0.800781c0.00195312 -0.03125 0.00292969 -0.0820312 0.00292969 -0.113281c0 -1.04297 -0.84668 -1.88965 -1.88965 -1.88965c-0.03125 0 -0.0820312 0.000976562 -0.113281 0.00292969h-16.1006v-26.6992
+h19.4004zM288.301 262.799l2.2998 -6.7998l7.10059 -0.0996094l-5.7002 -4.30078l2.09961 -6.7998l-5.7998 4.10059l-5.7998 -4.10059l2.09961 6.7998l-5.69922 4.30078l7.09961 0.0996094z" />
+    <glyph glyph-name="adobe" unicode="&#xf778;" horiz-adv-x="512" 
+d="M315.5 384h170.9v-384zM196.5 384l-170.9 -384v384h170.9zM256 241.9l107.5 -241.9h-73l-30.7002 76.7998h-78.7002z" />
+    <glyph glyph-name="artstation" unicode="&#xf77a;" horiz-adv-x="512" 
+d="M2 70.5996h315.1l59.2002 -102.6h-285.399h-0.0146484c-17.4814 0 -38.0381 12.6787 -45.8857 28.2998zM501.8 98c19 -29.4004 -0.0996094 -55.9004 -2 -59.0996l-40.7002 -70.5l-257.3 447.6h88.4004h0.0117188c17.0596 0 37.3936 -12.2305 45.3877 -27.2998zM275 143.5
+h-231l115.5 200z" />
+    <glyph glyph-name="atlassian" unicode="&#xf77b;" horiz-adv-x="512" 
+d="M152.2 211.6c66.2998 -70.7998 89.0996 -189.3 51.2002 -267.1c-2.40039 -5.2002 -7.60059 -8.5 -13.4004 -8.40039h-175c-11 0 -18.4004 11.7002 -13.4004 21.7002l125.801 251c5.09961 10.5 17.0996 11 24.7998 2.7998zM244.4 439.9
+c6.7998 10.8994 20.2998 10.6992 25.5996 0.0996094c5.90039 -11.7002 240.4 -482.3 240.4 -482.3c5 -9.90039 -2.2002 -21.7002 -13.4004 -21.7002h-174.2c-5.7002 0 -10.8994 3.2998 -13.3994 8.40039c-73.5 146.899 -187.301 302.1 -65 495.5z" />
+    <glyph glyph-name="canadian-maple-leaf" unicode="&#xf785;" horiz-adv-x="512" 
+d="M383.8 96.2998c-5 -5 -10 -7.5 -5 -22.5s10 -35.0996 10 -35.0996s-95.2002 20.0996 -105.2 22.5996c-8.89941 0.900391 -18.3994 -2.39941 -18.3994 -12.5c0 -10.0996 5.7998 -112.8 5.7998 -112.8h-30s5.7998 102.8 5.7998 112.8s-9.59961 13.4004 -18.2998 12.5
+c-10.0996 -2.5 -105.3 -22.5996 -105.3 -22.5996s5 20.0996 10.0996 35.0996c4.90039 15 0 17.5 -5.09961 22.5c-2.60059 2.5 -105.2 92.4004 -105.2 92.4004l17.5 7.59961c10 4.90039 7.40039 11.4004 5 17.4004c-2.5 7.59961 -20.0996 67.2998 -20.0996 67.2998
+s47.5996 -10 57.6992 -12.5c7.5 -2.40039 10 2.5 12.5 7.5s15 32.2998 15 32.2998s52.6006 -59.7998 55.1006 -62.2998c10.0996 -7.5 20.0996 0 17.5996 10c0 10 -27.5996 129.6 -27.5996 129.6s30.0996 -17.3994 40.0996 -22.3994c7.60059 -5 12.6006 -5 17.6006 5
+c5 7.5 42.5 79.7998 42.5 79.7998s37.5996 -72.2998 42.6992 -79.7998c5 -10 10.1006 -10 17.6006 -5c10 5 40.0996 22.3994 40.0996 22.3994s-27.5996 -119.6 -27.5996 -129.6c-2.5 -10 7.59961 -17.5 17.5996 -10c2.5 2.40039 55.1006 62.2998 55.1006 62.2998
+s12.5 -27.3994 15 -32.3994s5 -9.90039 12.5 -7.5c10 2.5 57.6992 12.5 57.6992 12.5s-17.6992 -59.7002 -20.0996 -67.3008c-2.40039 -5.89941 -5 -12.5 5 -17.3994l17.5 -7.5s-102.7 -89.9004 -105.2 -92.4004z" />
+    <glyph glyph-name="centos" unicode="&#xf789;" 
+d="M289.6 350.5l31.6006 -31.7002l-76.2998 -76.5v108.2h44.6992zM127.2 318.8l31.5996 31.7002h44.7002v-108.2zM168.7 360.4l55.5 55.5996l55.5 -55.5996h-44.7002v-127.9l-10.7998 -10.7998l-10.7998 10.7998v127.9h-44.7002zM194.9 192.3l-10.8008 -10.7998h-128.6
+v-44.7998l-55.5 55.5996l55.5 55.6006v-44.8008h128.6zM274.2 213l76.2998 76.5l31.5996 -31.7002v-44.7998h-107.899zM447.5 192.3l-55.5 -55.5996v44.7998h-127.7l-10.7998 10.7998l10.7998 10.7998h127.7v44.8008zM65.4004 271.8v78.7002h79.3994l-31.5996 -31.7002
+l90.2998 -90.5v-15.2998h-15.2998l-90.2998 90.5zM382.1 350.5v-78.7002l-31.5996 31.7002l-90.2998 -90.5h-15.2998v15.2998l90.2998 90.5l-31.6006 31.7002h78.5zM203.5 34.0996v-0.0996094h-44.7002l-31.5996 31.7002l76.2998 76.5v-108.101zM65.4004 213v44.7998
+l32.5 31.7002l76.2998 -76.5h-108.8zM382.1 112.8v-78.7002h-78.5l31.6006 31.7002l-90.2998 90.5v15.2998h15.2998l90.2998 -90.5zM382.1 171.6v-44.7998l-31.5996 -31.7002l-76.2998 76.5h107.899zM321.2 65.7998l-31.6006 -31.5996h-44.6992v108.1zM97.9004 95.0996
+l-32.5 31.7002v44.7998h108.8zM279.7 24.2002l-55.5 -55.6006l-55.5 55.6006h44.7002v127.899l10.7998 10.8008l10.7998 -10.8008v-127.899h44.7002zM113.2 65.7998l31.5996 -31.7002h-79.3994v78.7002l32.5 -31.7002l90.2998 90.5h15.2998v-15.2998z" />
+    <glyph glyph-name="confluence" unicode="&#xf78d;" horiz-adv-x="512" 
+d="M2.2998 35.7998c42.2998 66.9004 125.2 233.2 373.101 112.601c39.6992 -19.1006 83.6992 -39.9004 105.899 -50.3008c8 -3.69922 11.7002 -13.1992 8.10059 -21.2998l-50.4004 -114.1c-0.0996094 -0.100586 -0.0996094 -0.299805 -0.200195 -0.400391
+c-3.89941 -8.09961 -13.5996 -11.5996 -21.7002 -7.7002c-200.399 95.2002 -213.8 111.5 -280.899 -0.699219c0 0 -0.100586 -0.100586 -0.100586 -0.200195c-4.69922 -7.7002 -14.6992 -10 -22.3994 -5.2998l-105.9 65.1992c-7.59961 4.7002 -10 14.6006 -5.5 22.2002z
+M509.7 347.9c-42.6006 -67.5 -125.4 -232.9 -373.4 -112.9c-39.7002 19.2002 -83.7998 40 -106 50.4004c-8 3.69922 -11.7002 13.1992 -8.09961 21.2998l50.5 114.1c0.0996094 0.100586 0.0996094 0.299805 0.200195 0.400391
+c3.89941 8.09961 13.5996 11.5996 21.6992 7.7002c199.5 -94.7002 213.301 -111.7 280.601 0.899414c0.200195 0.400391 0.399414 0.700195 0.599609 1c5 7.5 15.1006 9.40039 22.6006 4.40039l105.8 -65.1006c7.59961 -4.69922 10 -14.5996 5.5 -22.1992z" />
+    <glyph glyph-name="dhl" unicode="&#xf790;" horiz-adv-x="640" 
+d="M238 146.8l22.2998 30.2002h58.7002l-22.2998 -30.2002h-58.7002zM0 165.1h86.5l-4.7002 -6.39941h-81.7998v6.39941zM172.9 177h68.1992c-5.69922 -7.7998 -24.0996 -30.2998 -57.1992 -30.2998h-100.101l41.1006 55.7998h51c5.59961 0 5.59961 -2.2002 2.7998 -5.90039
+c-2.7998 -3.69922 -7.60059 -10.2998 -10.4004 -14.0996c-1.39941 -1.90039 -4.09961 -5.5 4.60059 -5.5zM490.4 183.9h-62.2002l39.2998 53.3994h62.2002zM95.2998 177l-4.7002 -6.40039h-90.5996v6.40039h95.2998zM206.3 203.6
+c2.7998 3.7002 2.90039 5.90039 -2.7002 5.90039h-111.399l20.3994 27.7998h117.9c29.9004 0 37.5996 -23.5996 29.2002 -35c-6.2002 -8.39941 -13.5 -18.3994 -13.5 -18.3994h-45.6006c-8.69922 0 -6 3.5 -4.59961 5.5c2.7998 3.7998 7.5 10.3994 10.2998 14.1992zM0 146.8
+v6.40039h77.7998l-4.7002 -6.40039h-73.0996zM323 146.8c0 0 22.2002 30.2002 22.2998 30.2002h58.7002l-22.2998 -30.2002h-58.7002zM545 146.7l4.7002 6.39941h90.2998v-6.39941h-95zM567.3 177h72.7002v-6.40039h-77.4004zM553.8 158.7l4.7002 6.39941h81.5v-6.39941
+h-86.2002zM389.6 237.3h58.7002l-39.2998 -53.3994h-143.6l39.2998 53.3994h58.7002l-22.5 -30.5996h26.1992zM423.1 177h133.4l-22.2998 -30.2998h-94.2998c-24.1006 0 -30.6006 11.5996 -23.2002 21.5996c2.09961 2.7998 6.39941 8.7002 6.39941 8.7002z" />
+    <glyph glyph-name="diaspora" unicode="&#xf791;" horiz-adv-x="512" 
+d="M251.64 93.4502c-1.39941 0 -88 -119.9 -88.6992 -119.9c-0.700195 0 -86.6006 60.4502 -86.9404 61.2002s86.5996 125.7 86.5996 127.4c0 2.19922 -129.6 44 -137.6 47.0996c-1.2998 0.5 31.4004 101.8 31.7002 102.1c0.599609 0.700195 144.399 -47 145.5 -47
+c0.399414 0 0.899414 0.600586 1 1.30078c0.399414 2 1 148.6 1.7002 149.6c0.799805 1.2002 104.5 0.700195 105.1 0.299805c1.5 -1 3.5 -156.1 6.09961 -156.1c1.40039 0 138.7 47 139.301 46.2998c0.799805 -0.900391 31.8994 -102.2 31.5 -102.6
+c-0.900391 -0.900391 -140.2 -47.1006 -140.601 -48.8008c-0.299805 -1.39941 82.7998 -122.1 82.5 -122.899s-85.5 -63.5 -86.2998 -63.5c-1 0.200195 -89 125.5 -90.9004 125.5h0.0400391z" />
+    <glyph glyph-name="fedex" unicode="&#xf797;" horiz-adv-x="640" 
+d="M586 163.5l54 -60.5h-64.4004l-22.2998 25l-22.0996 -25h-212.2v11.9004h-0.5c-7.90039 -11.7002 -20.7998 -18.6006 -34.9004 -18.6006c-32.6992 0 -56.3994 26.4004 -60.0996 56.9004h-85.5c0 -23.5 31.0996 -35.5 45.7998 -14.6006h42
+c-27.5996 -67.6992 -130.2 -49.3994 -130.2 23.7002c0 6.40039 0.800781 12.5 2.30078 18.2002h-48.9004v-77.5h-49v184.4h109v-41.1006h-60v-26.2002h54.7998v-24.1992c24.5 43.5996 103.9 45.3994 121.9 -14c7.5 25.5 28.8994 44.8994 57.2998 44.8994
+c13.9004 0 25.7998 -3.7998 35.4004 -14.7998h0.5v75.5h151.199v-48.0996h-56.0996v-16h118.7l22.5 -24.8008l21.7002 24.8008h62.3994zM139.3 180.1h46.5c-4.7998 25.6006 -40.3994 26.3008 -46.5 0zM292.7 131.2c34.5 0 32.5996 62.7998 0 62.7998
+c-34 0 -34.6006 -62.7998 0 -62.7998zM460.5 112.1v29.6006h-56.0996v44.7002h56.0996v28.0996h-55.5v33.9004h56.0996v30.1992h-95v-166.5h94.4004zM414.6 151.9h56.1006v-45.6006l50.7002 57l-50.7002 57v-44h-56.1006v-24.3994zM553.2 141.6l26.2998 -29.5h40.5
+l-46 51.4004l45.4004 51h-38.5l-25.6006 -29.2998l-26.5996 29.2998h-39.7002l45.5996 -51.2002l-45.5996 -51.2002h38.0996z" />
+    <glyph glyph-name="fedora" unicode="&#xf798;" 
+d="M225 416c123.7 -0.299805 223.7 -100.9 223.4 -224.6c-0.300781 -123.7 -100.9 -223.7 -224.601 -223.4l-170.2 0.400391v0c-29.5879 0 -53.6006 24.0127 -53.6006 53.5996c0 0.0830078 0.000976562 0.216797 0.000976562 0.299805l0.400391 170.3
+c0.399414 123.7 100.899 223.7 224.6 223.4zM394.8 258.8c-0.0771484 6.26953 -1.33203 16.3047 -2.7998 22.4004l-55.2002 56.0996v-1.59961c0 -5.10059 -1.5 -9.60059 -3.7998 -14.2998zM331 353.7c1.65332 -2.31348 3.53516 -6.43555 4.2002 -9.2002l54.2998 -54.5996
+c-8.27539 24.8252 -34.4834 53.4082 -58.5 63.7998zM118.1 200.8c-4.54785 -0.369141 -11.8057 -1.66895 -16.1992 -2.89941l8.5 -8.5c1.68457 3.44336 5.13477 8.55078 7.69922 11.3994zM97 196.6c-3.91211 -1.08984 -10.0498 -3.41895 -13.7002 -5.19922l27 -27.2002
+c-1.30469 3.32617 -2.37988 8.92676 -2.39941 12.5l0.899414 8zM78.7998 189.2c-3.21484 -1.79492 -8.23242 -5.02051 -11.2002 -7.2002l35.3008 -35.9004c3.70801 1.84668 10.0254 3.95215 14.0996 4.7002zM63.5996 179.4
+c-3.06738 -2.29395 -7.5918 -6.50488 -10.0996 -9.40039l34.9004 -34.5996c2.66113 2.6377 7.36523 6.44629 10.5 8.5zM50.2998 167.1c-2.89941 -3.2998 -5.7998 -6.69922 -8.59961 -10.5l35.7998 -35.8994c1.74121 3.40527 5.19141 8.5127 7.7002 11.3994zM39.2998 152.8
+c-2.07715 -3.18457 -5.0791 -8.56055 -6.7002 -12l39.5 -39.7998c0.306641 4.3584 1.91895 11.168 3.60059 15.2002zM30.5 136.5c-1.7998 -4.90039 -3.2998 -9.59961 -4.7002 -14.5l52.7002 -53.5c-3.42578 6.82812 -6.42773 18.5654 -6.7002 26.2002zM22.5996 93.5
+c0.0380859 -6.14551 1.33789 -15.957 2.90039 -21.9004l55.4004 -55.6992v1.09961c0.0341797 4.18848 1.64746 10.5947 3.59961 14.2998zM27.9004 62.7998c8.29785 -24.8047 34.5059 -53.3867 58.5 -63.7998c-1.61816 2.33008 -3.5 6.45117 -4.2002 9.2002zM22.5996 99.7998
+l64.4004 -64.2002c2.30469 2.8877 6.74023 6.78613 9.90039 8.7002l-72.2002 72.5c-1.08105 -4.62988 -2.02148 -12.2461 -2.10059 -17zM275.9 151.6c32.5996 -0.0996094 32.6992 49.2002 0.199219 49.4004l-33.5996 0.0996094
+c-4.91309 0.0224609 -8.90039 4.02734 -8.90039 8.94043v0.0595703l0.100586 47c0.0996094 40.5 38.5996 60.8008 66 54.9004c15.3994 -3.90039 30.2998 8.40039 30.2998 23.9004c0 12.0996 -8.7002 22.1992 -19.9004 24
+c-5.39062 1.26953 -14.2617 2.30078 -19.8008 2.30078c-0.110352 0 -0.289062 -0.000976562 -0.398438 -0.000976562c-0.116211 0 -0.304688 0.000976562 -0.420898 0.000976562c-57.96 0 -105.081 -47.041 -105.18 -105.001l-0.0996094 -56l-42.6006 0.0996094
+c-32.5996 0.100586 -32.6992 -49.2002 -0.0996094 -49.2998l33.5996 -0.0996094c4.40039 0 8.90039 -4.5 8.90039 -9l-0.0996094 -47c-0.00585938 -30.8574 -25.0537 -55.9004 -55.9102 -55.9004h-0.19043c-9.39941 0 -9.39941 1.59961 -15.7002 1.59961
+c-13.3691 -0.208008 -24.3457 -11.2295 -24.5 -24.5996c0 -15.5 14.2002 -24.2002 19.9004 -24.2002c61.2998 -12.8994 125.5 33.6006 125.7 102.9l0.0996094 56zM299.4 151.9c4.50781 0.442383 11.7207 1.74219 16.0996 2.89941l-8.5 8.5
+c-1.48047 -3.55762 -4.88477 -8.66504 -7.59961 -11.3994zM320.4 156.1c3.9248 1.09082 10.0625 3.46484 13.6992 5.30078l-27 27.1992c1.30566 -3.32617 2.38086 -8.92578 2.40039 -12.5l-0.900391 -8.09961zM338.4 163.5c4 2.2002 8.09961 4.7002 11.8994 7.2002
+l-36.2002 35.8994c-4.09961 -2.2998 -8.7998 -3.59961 -13.6992 -4.69922zM353.9 173.3c2.92188 2.33301 7.44727 6.36426 10.0996 9l-34.9004 35c-2.63672 -2.66797 -7.34082 -6.47656 -10.5 -8.5zM367.1 185.6c2.52539 2.77441 6.37793 7.47852 8.60059 10.5
+l-35.7998 35.9004c-1.78125 -3.37891 -5.23047 -8.48633 -7.7002 -11.4004zM378.1 199.9c2.10938 3.16602 5.11133 8.54199 6.7002 12l-39.5 39.7998c-0.305664 -4.3584 -1.91895 -11.168 -3.59961 -15.2002zM391.6 230.8l-53.0996 53.4004
+c3.69434 -6.76172 6.875 -18.499 7.09961 -26.2002l41.3008 -41.5c1.50879 3.87695 3.61426 10.2832 4.69922 14.2998zM392.6 236.4c1.05957 4.52246 2.08984 11.959 2.30078 16.5996l-64.3008 64.7002c-2.18359 -3.12988 -6.61816 -7.25098 -9.89941 -9.2002z" />
+    <glyph glyph-name="figma" unicode="&#xf799;" horiz-adv-x="384" 
+d="M277 277.3h-85.4004v-256c-0.0273438 -47.085 -38.2637 -85.2998 -85.3496 -85.2998c-47.1133 0 -85.3496 38.2363 -85.3496 85.3496s38.2363 85.3506 85.3496 85.3506h0.0498047c-47.1133 0 -85.3496 38.2363 -85.3496 85.3496s38.2363 85.3506 85.3496 85.3506
+c-47.085 0 -85.2998 38.2139 -85.2998 85.2998c0 47.085 38.2148 85.2998 85.2998 85.2998h170.7c47.1133 0 85.3496 -38.2363 85.3496 -85.3496s-38.2363 -85.3506 -85.3496 -85.3506zM277 277.3c47.0801 -0.00488281 85.2949 -38.2197 85.2998 -85.2998
+c0 -47.0859 -38.2139 -85.2998 -85.2998 -85.2998s-85.2998 38.2139 -85.2998 85.2998s38.2139 85.2998 85.2998 85.2998z" />
+    <glyph glyph-name="intercom" unicode="&#xf7af;" 
+d="M392 416c30.9004 0 56 -25.0996 56 -56v-336c0 -30.9004 -25.0996 -56 -56 -56h-336c-30.9004 0 -56 25.0996 -56 56v336c0 30.9004 25.0996 56 56 56h336zM283.7 333.9v-199.5c0 -19.8008 29.8994 -19.8008 29.8994 0v199.5c0 19.7998 -29.8994 19.7998 -29.8994 0z
+M209.1 341.4v-216.5c0 -19.8008 29.9004 -19.8008 29.9004 0v216.5c0 19.7998 -29.9004 19.7998 -29.9004 0zM134.4 333.9v-199.5c0 -19.8008 29.8994 -19.8008 29.8994 0v199.5c0 19.7998 -29.8994 19.7998 -29.8994 0zM59.7002 304v-134.3
+c0 -19.7998 29.8994 -19.7998 29.8994 0v134.3c0 19.7998 -29.8994 19.7998 -29.8994 0zM383.1 76.2002c14.9004 12.8994 -4.5 35.5996 -19.3994 22.7002c-63.2002 -53.9004 -213.4 -55.3008 -279.3 0c-15 12.7998 -34.4004 -9.90039 -19.4004 -22.7002
+c76.4004 -65.4004 245.3 -63 318.1 0zM388.3 169.7v134.3c0 19.7998 -29.8994 19.7998 -29.8994 0v-134.3c0 -19.7998 29.8994 -19.7998 29.8994 0z" />
+    <glyph glyph-name="invision" unicode="&#xf7b0;" 
+d="M407.4 416c22.3994 0 40.5996 -18.2002 40.5996 -40.5996v-366.801c0 -22.3994 -18.2002 -40.5996 -40.5996 -40.5996h-366.801c-22.3994 0 -40.5996 18.2002 -40.5996 40.5996v366.801c0 22.3994 18.2002 40.5996 40.5996 40.5996h366.801zM176.1 302.4
+c-0.599609 35.0996 -53.5996 34.7998 -53.6992 -0.400391c0 -15 12.1992 -27 27.0996 -27c4.2002 0.0996094 27 4 26.5996 27.4004zM332.8 71c23.7998 0 42.7002 15.2998 53.2002 52l-17.9004 6.7002c-14.2998 -39.5 -31.7998 -32.4004 -31.7998 -16.9004
+c0.299805 8.10059 0.700195 7.7002 14.9004 58.7998c26.0996 85.8008 -61.2998 113.5 -101.8 38l8.89941 40.5h-68.7998l-9.7002 -35.5996h32.2998l-19.7998 -79.4004c-16.5 -36.6992 -57.3994 -44.0996 -57.3994 -23.1992c0.299805 11.2998 -0.700195 4.5 32.8994 138.199
+h-76.3994l-9.7002 -35.5996h31.7998c-22.0996 -90.0996 -22.9004 -89.7998 -23 -104.1c0 -48.7002 63.0996 -56.1006 94.5996 -4.30078l-8.09961 -32.5h45.0996l25.8008 103.301c14.6992 59.6992 74 47.0996 59.8994 0.699219c-9.09961 -32.5996 -40.5996 -106.6 25 -106.6z
+" />
+    <glyph glyph-name="jira" unicode="&#xf7b1;" horiz-adv-x="496" 
+d="M490 206.3c8 -7.89941 8 -20.7002 0 -28.5996c-225.8 -225 137.9 136.3 -241.5 -241.7c-180.7 180.1 -109.7 109.3 -242.5 241.6c-7.90039 8 -7.90039 20.8008 0 28.7002c0 0 77 76.7998 242.5 241.7c72.0996 -71.7998 168.6 -169 241.5 -241.7zM248.5 116.3l76 75.7002
+l-76 75.7002l-76 -75.7002z" />
+    <glyph glyph-name="mendeley" unicode="&#xf7b3;" horiz-adv-x="640" 
+d="M624.6 122.8c23.1006 -22.7002 17.8008 -73.5 0 -88.2998c-36.1992 -38.9004 -100 -18.2002 -104.899 35.2002c-1 11.7002 1.09961 23 5.7002 33c47.2998 103.7 -185.9 106.1 -146.5 8.2002c0.0996094 -0.100586 0.199219 -0.200195 0.299805 -0.400391
+c26.5996 -42.5996 -6.7002 -97.2998 -58.7998 -95.2002c-52 -2.2002 -85.6006 52.4004 -58.8008 95.2002c0.100586 0.200195 0.200195 0.299805 0.300781 0.400391c39.3994 97.8994 -193.801 95.5 -146.5 -8.2002c20.3994 -44.9004 -14.1006 -93.7002 -61.2002 -87.7998
+c-61.9004 7.7998 -62.5 82.8994 -42.6006 102.6c16 16 31.8008 24.7998 53 22.5c43.3008 1 49.7002 34.9004 37.5 98.7998c-22.6992 57.5 14.5 131.601 87.4004 130.8c76.9004 -0.699219 82.7998 -82 130.9 -82c49.1992 0 53.5 81.3008 130.899 82
+c72.5 0.700195 110.2 -73.2998 87.4004 -130.8c-12.2002 -63.8994 -5.7998 -97.7998 37.5 -98.7998c18.7002 2 36.0996 -4.7998 48.3994 -17.2002zM320.7 141.9c43.5996 0 62.7998 37.7998 62.7998 62.7998c0 34.7002 -28.0996 62.7998 -62.7998 62.7998h-0.600586
+c-34.5996 0 -62.7998 -28.0996 -62.7998 -62.7998c0 -25.2998 19.4004 -62.7998 62.7998 -62.7998h0.600586z" />
+    <glyph glyph-name="raspberry-pi" unicode="&#xf7bb;" horiz-adv-x="407" 
+d="M372 215.5c28.7002 -17.2002 54.5996 -72.5996 14 -117.7c-2.59961 -14.0996 -7.09961 -24.2002 -11 -35.3994c-5.90039 -45.2002 -44.4004 -66.3008 -54.5996 -68.8008c-14.9004 -11.1992 -30.7002 -21.7998 -52.2002 -29.1992
+c-20.2002 -20.6006 -42.1006 -28.4004 -64.2002 -28.4004h-1c-22 0 -44 7.7998 -64.2998 28.4004c-21.4004 7.39941 -37.2998 18 -52.2002 29.1992c-10.0996 2.5 -48.7002 23.6006 -54.5996 68.8008c-3.90039 11.1992 -8.40039 21.2998 -11 35.3994
+c-40.5 45 -14.6006 100.5 14.1992 117.7l3.7002 6.5c-0.0996094 46.4004 21.4004 65.2998 46.5 79.7002c-7.59961 2 -15.3994 3.7002 -17.5996 13.2002c-13.1006 3.39941 -15.7998 9.39941 -17.1006 15.7998c-3.39941 2.2998 -14.7998 8.7002 -13.5996 19.7002
+c-6.2998 4.39941 -9.90039 10.0996 -8.09961 18.0996c-6.90039 7.5 -8.7002 13.7002 -5.80078 19.4004c-8.2998 10.1992 -4.59961 15.5 -1.09961 20.8994c-6.2002 11.2002 -0.799805 23.2002 16.5 21.2002c6.90039 10.0996 21.9004 7.7998 24.2002 7.7998
+c2.5 3.2998 6 6 16.5 4.7002c6.7998 6.09961 14.3994 5.09961 22.2998 2.09961c3.2002 2.5 6.09961 3.40039 8.7002 3.5c5 0.100586 9.2998 -2.89941 13.8994 -4.2998c11.3008 3.60059 13.8008 -1.39941 19.4004 -3.39941c12.2998 2.59961 16.0996 -3 22 -8.90039
+l6.90039 0.0996094c18.5996 -10.7998 27.7998 -32.7998 31.0996 -44.0996c3.2998 11.2998 12.5 33.2998 31.0996 44.0996l6.90039 -0.0996094c5.90039 5.90039 9.7002 11.5 22 8.90039c5.5 2.09961 8.09961 7 19.4004 3.39941
+c7.09961 2.2002 13.2998 8.10059 22.5996 0.799805c7.90039 2.90039 15.5 4 22.2998 -2.09961c10.5 1.2998 13.9004 -1.5 16.5 -4.7002c2.2998 0 17.2998 2.2998 24.2002 -7.7998c17.2998 2 22.7998 -10 16.5996 -21.2002c3.5 -5.2998 7.2002 -10.5996 -1.09961 -20.8994
+c2.90039 -5.7002 1.09961 -11.9004 -5.7998 -19.4004c1.89941 -8 -1.7002 -13.7002 -8.10059 -18.0996c1.2002 -11 -10.1992 -17.4004 -13.5996 -19.7002c-1.2998 -6.40039 -4 -12.5 -17.0996 -15.7998c-2.2002 -9.60059 -10 -11.2002 -17.6006 -13.2002
+c25.1006 -14.4004 46.6006 -33.2998 46.5 -79.7002zM349.8 223.5c1.5 48.7002 -36.3994 75.4004 -82.0996 67.9004c-16.7998 -2.80078 80.5996 -86.6006 82.0996 -67.9004zM306.8 130.4c24.5 15.7998 28.9004 51.5996 9.90039 80
+c-19 28.3994 -54.2998 38.5996 -78.7998 22.7998s-28.9004 -51.6006 -9.90039 -80c19 -28.4004 54.2998 -38.6006 78.7998 -22.7998zM238.9 418.7c-16.6006 -15.9004 -40.1006 -55.9004 -5.80078 -71.7998c29 23.5 63.6006 40.6992 102 53.5
+c-49.2998 -25.1006 -78 -45.3008 -93.6992 -62.6006c8.09961 -31.7002 50 -33.2002 65.3994 -32.2998c-3.09961 1.40039 -5.7998 3.09961 -6.7002 5.7998c3.80078 2.7002 17.5 0.299805 27 5.60059c-3.69922 0.699219 -5.39941 1.39941 -7.09961 4.09961
+c9 2.90039 18.7002 5.2998 24.4004 10c-3.10059 0 -6 -0.599609 -10 2.09961c8.09961 4.30078 16.6992 7.7002 23.3994 14.2002c-4.2002 0.100586 -8.7002 0.100586 -10 1.60059c7.40039 4.5 13.6006 9.5 18.7998 15c-5.7998 -0.700195 -8.2998 -0.100586 -9.69922 0.899414
+c5.59961 5.60059 12.5996 10.4004 16 17.2998c-4.40039 -1.5 -8.30078 -2.09961 -11.2002 0.100586c1.89941 4.2998 10 6.7002 14.7002 16.5996c-4.60059 -0.399414 -9.40039 -1 -10.4004 0c2.09961 8.5 5.7002 13.2002 9.2998 18.2002
+c-9.7998 0.200195 -24.5996 0 -23.8994 0.799805l6 6.10059c-9.5 2.5 -19.3008 -0.400391 -26.4004 -2.60059c-3.2002 2.5 0 5.60059 3.90039 8.7998c-8.10059 -1 -15.5 -2.89941 -22.1006 -5.39941c-3.59961 3.09961 2.2998 6.2998 5.10059 9.39941
+c-12.5 -2.2998 -17.8008 -5.59961 -23.1006 -8.89941c-3.7998 3.59961 -0.200195 6.7002 2.40039 9.7998c-9.40039 -3.5 -14.2998 -7.90039 -19.4004 -12.2998c-1.7998 2.2998 -4.39941 4 -1.2002 9.59961c-6.69922 -3.7998 -11.7998 -8.2998 -15.5 -13.2998
+c-4.19922 2.59961 -2.5 6.09961 -2.5 9.40039c-7 -5.60059 -11.3994 -11.5 -16.7998 -17.3008c-1.09961 0.800781 -2.09961 3.40039 -2.89941 7.60059zM204.5 304.1c-27.2002 0.700195 -53.4004 -19.8994 -53.4004 -31.7998
+c-0.0996094 -14.5996 21.5 -29.3994 53.6006 -29.7998c32.7998 -0.200195 53.7002 11.9004 53.7998 26.9004c0.0996094 16.8994 -29.7998 35 -54 34.6992zM81.5 316.9c9.59961 -5.2002 23.2002 -2.80078 27.2002 -5.60059
+c-0.900391 -2.59961 -3.60059 -4.39941 -6.7002 -5.7998c15.4004 -0.900391 57.4004 0.5 65.4004 32.2998c-15.7002 17.2998 -44.4004 37.6006 -93.7002 62.6006c38.3994 -12.8008 73 -30 102 -53.5c34.0996 15.8994 10.5996 55.8994 -6 71.7998
+c-0.900391 -4.2002 -1.7998 -6.7998 -2.90039 -7.60059c-5.39941 5.80078 -9.7998 11.7002 -16.7998 17.3008c0 -3.2002 1.59961 -6.80078 -2.5 -9.40039c-3.7002 5 -8.7998 9.5 -15.5 13.2998c3.2002 -5.59961 0.5 -7.2998 -1.2002 -9.59961
+c-5.09961 4.39941 -10 8.89941 -19.3994 12.2998c2.59961 -3.09961 6.19922 -6.2002 2.39941 -9.7998c-5.2998 3.2998 -10.5996 6.59961 -23.0996 8.89941c2.7998 -3.09961 8.59961 -6.2998 5.09961 -9.39941c-6.7002 2.5 -14 4.2998 -22.0996 5.39941
+c3.7998 -3.19922 7.09961 -6.2998 3.89941 -8.7998c-7.09961 2.2002 -16.8994 5.10059 -26.3994 2.60059l6 -6.10059c0.700195 -0.799805 -14.1006 -0.700195 -23.9004 -0.799805c3.5 -4.90039 7.2002 -9.7002 9.2998 -18.2002c-1 -1 -5.7998 -0.399414 -10.3994 0
+c4.7002 -9.89941 12.7998 -12.3994 14.7002 -16.5996c-2.90039 -2.10059 -6.90039 -1.60059 -11.2002 -0.100586c3.2998 -6.89941 10.3994 -11.6992 16 -17.2998c-1.40039 -1 -3.90039 -1.59961 -9.7002 -0.899414c5.2002 -5.5 11.4004 -10.5 18.7998 -15
+c-1.2998 -1.60059 -5.7998 -1.5 -10 -1.60059c6.7002 -6.5 15.2998 -9.89941 23.4004 -14.2002c-4 -2.7998 -6.90039 -2.09961 -10 -2.09961c5.7002 -4.7002 15.3994 -7.2002 24.3994 -10c-1.69922 -2.59961 -3.39941 -3.40039 -7.09961 -4.09961zM141.6 292.8
+c-45.5996 7.60059 -83.5996 -19.2002 -82.0996 -67.8994c1.5 -18.6006 98.9004 65.0996 82.0996 67.8994zM38.2002 106c21.5996 -9.5 39.0996 105.3 12.5996 98.2998c-43.8994 -24.5996 -36.2998 -79.5 -12.5996 -98.2998zM129.2 7.7998
+c14.0996 10.4004 6.39941 45.7002 -10.5 65.7002c-19.4004 22.2002 -44.6006 35.4004 -60.9004 25.5996c-10.8994 -8.19922 -12.8994 -36 2.60059 -63.3994c23 -32.6006 55.5 -35.7998 68.7998 -27.9004zM102.8 127.5c24.4004 -15.7998 59.7002 -5.59961 78.7998 22.7998
+c19 28.4004 14.6006 64.2002 -9.89941 80s-59.7998 5.60059 -78.7998 -22.7998s-14.6006 -64.2002 9.89941 -80zM205 -48c28.4004 -0.5 57.7002 24.4004 57.2002 35.4004c-0.100586 11.3994 -32 19.8994 -55.7002 18.8994c-23.5 0.600586 -59.7002 -9.2998 -59.2998 -22
+c-0.400391 -8.59961 28.3994 -33.5 57.7998 -32.2998zM263.9 76.9004v0.599609c-0.200195 29.5996 -26.8008 53.5996 -59.4004 53.4004c-32.5996 -0.200195 -59 -24.3008 -58.7998 -54v-0.600586c0.200195 -29.5996 26.7998 -53.5996 59.3994 -53.3994
+c32.6006 0.199219 59 24.2998 58.8008 54zM346.1 34.2002c18.4004 23.2002 12.2002 62 1.7002 72.2998c-15.5996 11.9004 -38 -3.2998 -58.8994 -26.5996c-18.3008 -21.1006 -28.4004 -59.6006 -15.1006 -72c12.7002 -9.60059 47 -8.30078 72.2998 26.2998zM369 107.4
+c23.7002 18.6992 31.2998 73.5996 -12.5996 98.2998c-26.4004 7 -8.90039 -107.7 12.5996 -98.2998z" />
+    <glyph glyph-name="redhat" unicode="&#xf7bc;" horiz-adv-x="512" 
+d="M341.52 162.59v-0.149414c33.6504 0 82.3408 6.93945 82.3408 47c0.219727 6.73926 0.859375 1.81934 -20.8799 96.2393c-4.62012 19.1504 -8.68066 27.8398 -42.3105 44.6504c-26.0898 13.3398 -82.9199 35.3701 -99.7295 35.3701
+c-15.6602 0 -20.2002 -20.1699 -38.8701 -20.1699c-18 0 -31.3105 15.0596 -48.1201 15.0596c-16.1406 0 -26.6602 -11 -34.7803 -33.6201c-27.5 -77.5498 -26.2803 -74.2695 -26.1201 -78.2695c0 -24.7998 97.6406 -106.11 228.47 -106.11zM429.07 193.19
+l-0.0703125 -0.0302734c4.65039 -22 4.65039 -24.3506 4.65039 -27.25c0 -37.6602 -42.3301 -58.5605 -98 -58.5605c-125.74 -0.0800781 -235.91 73.6504 -235.91 122.33v0.0771484c0 5.65332 1.81836 14.4531 4.05957 19.6436
+c-45.2402 -2.26074 -103.8 -10.3301 -103.8 -62.0303c0 -84.6699 200.63 -189 359.49 -189c121.79 0 152.51 55.0801 152.51 98.5801c0 34.21 -29.5898 73.0498 -82.9297 96.2402z" />
+    <glyph glyph-name="sketch" unicode="&#xf7c6;" horiz-adv-x="512" 
+d="M27.5 285.8l78.9004 105.8l-6.90039 -130.699h-90.5zM396.3 402.3l7.10059 -133.5l-135.7 147.2zM112.2 229.7l122.6 -239.7l-224.899 261.7h91.0996zM114.2 260.9l142.1 154.1l60.4004 -65.5996l81.5 -88.5h-284zM411.5 251.8v-0.0996094h90.9004l-224.801 -261.7z
+M415.4 379l87.8994 -118.1h-90.2998l-6.09961 113.399l-0.900391 17.2998zM113.5 354.5l2.59961 47.7998l128.601 13.7002l-135.8 -147.1zM401.2 251.8l-144.9 -283.8l-102.7 200.9l-42.3994 82.8994h290z" />
+    <glyph glyph-name="sourcetree" unicode="&#xf7d3;" 
+d="M427.2 245c-0.0947266 -81.5225 -63.1279 -168.031 -140.7 -193.1v-101.601c0 -7.89355 -6.40625 -14.2998 -14.2998 -14.2998v0h-96.4004c-7.89355 0 -14.2998 6.40625 -14.2998 14.2998v101.7c-77.5566 25.0537 -140.5 111.535 -140.5 193.037v0.363281
+c0.200195 112 91.0996 202.8 203.2 202.6c112.1 0 203 -90.9004 203 -203zM155.6 245c0 -91 137.2 -89.9004 137.301 0c0 90.7998 -137.301 90.7998 -137.301 0z" />
+    <glyph glyph-name="suse" unicode="&#xf7d6;" horiz-adv-x="640" 
+d="M471.08 345.34c0 1 1.01953 0.759766 0.919922 0.660156c4.2002 -0.599609 92.2002 -13.7002 129.2 -35.2998c12.0996 -6.90039 20.7002 -21.5 34.5 -69.6006c0.700195 -2.7998 -2.7998 -5.09961 -3.60059 -5.69922
+c-26.8994 -18.8008 -56.7998 -36.6006 -145.199 21.6992c11.0996 -26.6992 10.6992 -25.0996 11 -25.5c5.39941 -2.7998 56.2998 -28.6992 81.5996 -28.1992c20.4004 0.399414 42.2002 10.3994 50.9004 15.5996c0 0 4.5 2.7002 3.19922 -2.40039
+c-0.5 -1.89941 -3.2998 -14.5996 -7 -17.6992c-1 -1 -36.5996 -28.4004 -103.1 -28c-42.7002 1 -76.7998 16.3994 -82.4004 -17.4004c-2.7998 -17.0996 6.10059 -37.5 18.9004 -55.7998h-48.5996c-15.9004 28.3994 -23.1006 68.2998 -79.8008 68.2998
+c-51.5996 0 -48.3994 -50.7002 -42.6992 -68.2998h-45.9004c-18.7998 68.7998 -69.2002 98.5996 -102.4 104.3c-74.2998 12.7998 -113 -49.2002 -87 -98.4004c23.1006 -43.5996 81.4004 -44.0996 99.7002 -20.3994c19.2002 25 3.7998 62.8994 -28.5 65.7002
+c-12.2998 1.09961 -25.2998 -4.60059 -25.5 -16.9004v-0.0595703c0 -10.9004 10 -13.8008 12 -14c7.2998 0.399414 8.90039 1.89941 11.7998 2.39941c5.2002 0.900391 16.8008 -1.7998 16.8008 -13.8994c0 -8.40039 -6.80078 -13.1006 -13.3008 -14.9004
+c-4.2373 -1.46777 -11.3154 -2.67773 -15.7998 -2.7002c-17.2002 0 -41.2002 14.7998 -41.5 42.6006c-0.200195 15.6992 7.7002 30 21.6006 39.1992c15.8994 10.5 43.5996 14.1006 69.1992 -1.59961c31.5 -19.2998 39.7002 -57.0996 31.5 -82.9004
+c-11.8994 -37.2998 -45.5996 -57.1992 -90 -53.2998c-31.5 2.7998 -60.6992 19.4004 -78.0996 44.4004c-6.32715 9.0332 -13.7197 25.0264 -16.5 35.7002c-7.12012 28.0596 0 58.0596 5.48047 71.3994c25.6992 63.6006 80.1992 97.2998 99.5996 109.7
+c100.2 61.5996 171.1 59.0996 223 57.2998c61.2998 -2.2002 126.6 -23.2998 135.7 -26.2998c0 2 0.299805 20.2998 0.299805 20.2998zM531.48 272.54c-1.10059 -33.5 39.0996 -51.5996 63.2998 -28.9004c24.3994 22.9004 9 64 -24.4004 65.2002
+c-0.380859 0.0136719 -0.999023 0.0253906 -1.37988 0.0253906c-20.0615 0 -36.8711 -16.2734 -37.5195 -36.3252zM570.08 297.84c14.0312 -0.413086 25.4199 -12.1406 25.4199 -26.1787c0 -0.282227 -0.00878906 -0.739258 -0.0195312 -1.02148
+c-0.50293 -13.9795 -12.2646 -25.3262 -26.2539 -25.3262c-14.501 0 -26.2695 11.7695 -26.2695 26.2705s11.7686 26.2695 26.2695 26.2695c0.236328 0 0.618164 -0.00585938 0.853516 -0.0136719zM574.38 269.04c15.4004 0 15.4004 15.5996 0 15.5996
+c-15.3994 0 -15.3994 -15.5996 0 -15.5996z" />
+    <glyph glyph-name="ubuntu" unicode="&#xf7df;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM300.7 347c-8.7998 -15.2002 -3.60059 -34.7002 11.7002 -43.5996c15.1992 -8.80078 34.6992 -3.5 43.5 11.6992c8.7998 15.3008 3.59961 34.8008 -11.7002 43.6006
+c-15.2002 8.7998 -34.7002 3.5 -43.5 -11.7002zM87.4004 160.1c17.5996 0 31.8994 14.3008 31.8994 31.9004s-14.2998 31.9004 -31.8994 31.9004c-17.6006 0 -31.9004 -14.3008 -31.9004 -31.9004s14.2998 -31.9004 31.9004 -31.9004zM115.5 157
+c8.7002 -32.7002 29.0996 -60.7002 56.5 -79l23.7002 39.5996c-51.5 36.3008 -51.5 112.5 0 148.801l-23.7002 39.5996c-27.4004 -18.4004 -47.9004 -46.2998 -56.5 -79.0996c22.4004 -18 22.2998 -52 0 -69.9004zM344.2 25.2998
+c15.2998 8.7998 20.5 28.2998 11.7002 43.6006c-8.80078 15.2998 -28.3008 20.5 -43.5 11.6992c-15.3008 -8.7998 -20.5 -28.2998 -11.7002 -43.5996s28.2002 -20.5 43.5 -11.7002zM344.5 94.7998c23 22.9004 38 53.9004 40.2998 88.4004l-46.0996 0.700195
+c-5.5 -62.7002 -71.9004 -100.9 -128.9 -74.4004l-22.5 -40.2998c47.7998 -23.7002 91.5 -10.7998 96.7002 -9.40039c4.40039 28.4004 33.7998 45.2998 60.5 35zM338.6 200.1l46 0.600586c-2.19922 34.5996 -17.0996 65.5996 -40.1992 88.5
+c-26.7002 -10.2998 -56.1006 6.7002 -60.5 35c-5.2002 1.39941 -48.8008 14.2998 -96.7002 -9.40039l22.5 -40.2998c57.5996 26.7998 123.5 -12.4004 128.899 -74.4004z" />
+    <glyph glyph-name="ups" unicode="&#xf7e0;" horiz-adv-x="384" 
+d="M103.2 145v123h32.5996v-141.6c-17.7002 -12.1006 -97.8994 -35.9004 -97.8994 39v102.6h32.6992v-104c0 -32.0996 27.4004 -22.5996 32.6006 -19zM4 373.18c93.5996 49.6006 259.1 61.6006 375.4 0v-220.899c0 -103.9 -75.3008 -135.2 -187.7 -184.101
+c-112.8 48.9004 -187.7 80.4004 -187.7 184.101v220.899zM362.1 152.28v216.2c-109.3 10.1992 -238.6 4 -340.899 -89.8008v-126.399c0 -86.6006 53 -113.5 170.5 -165.3c117.2 51.6992 170.399 78.6992 170.399 165.3zM152.5 259.68
+c23.7002 15.3203 104.4 31.8008 104.4 -65.5996c0 -75.9004 -47.3008 -85.7998 -71.7002 -78.5v-68.7002h-32.7002v212.8zM185.2 142.38c2 -0.799805 38.3994 -16.8994 38.3994 51c0 62 -30 53.5 -38.3994 49.2998v-100.3zM264.3 228.78
+c-0.200195 41.0996 51.2002 53.8994 79.7002 31.8994v-28.3994c-17.9004 18.2998 -47.9004 18.0996 -48.5 -2.2002c-0.700195 -26.5996 55.0996 -21.7002 53.4004 -73.2002c-1.30078 -41.5996 -47 -55 -83.2002 -33.5v30.1006
+c20.3994 -18.1006 51.3994 -18.6006 50.7998 4.89941c-0.599609 27.9004 -52.0996 23.1006 -52.2002 70.4004z" />
+    <glyph glyph-name="usps" unicode="&#xf7e1;" horiz-adv-x="576" 
+d="M460.3 206.3c-1.39941 -2.2002 -4.2998 -4.39941 -3.7998 0.100586c2.90039 11.5996 13.9004 30.5 4.40039 32c-17.8008 3.09961 -88.1006 -4.5 -88.1006 0c0 2.39941 26.7002 3.09961 37.9004 8.69922c9.39941 9.40039 10.7998 8 10.8994 8h27
+c26.9004 0 37.5 -7.5 11.7002 -48.7998zM348.2 183.7c-62.2998 -21.2002 -124.8 -54.2002 -321.2 -151.5l52.4004 245.5c185 0 335.199 5.59961 337.899 -22.6006h-196.6l30.7002 -93.2998c35 16.7998 120.899 51.7002 172.6 53.9004
+c21.7998 0.799805 30.5996 -2.90039 26.2002 -5.7998c-4.7002 -2.30078 -38 -4.90039 -102 -26.2002zM94.7002 352h454.3l-67.7002 -319.7h-423.1s402 157.3 406.399 160.2c0 0 35.7002 48 14.6006 67.7002c-6.5 6.59961 -16 6.59961 -52.4004 6.59961
+c-2.09961 19.5 -78.7998 31.5 -332.1 85.2002z" />
+    <glyph glyph-name="yarn" unicode="&#xf7e3;" horiz-adv-x="496" 
+d="M393.9 102.8c-39 -9.2998 -48.4004 -32.0996 -104 -47.3994c0 0 -2.7002 -4 -10.4004 -5.80078c-13.4004 -3.2998 -63.9004 -6 -68.5 -6.09961c-12.4004 -0.0996094 -19.9004 3.2002 -22 8.2002c-6.40039 15.2998 9.2002 22 9.2002 22
+c-8.10059 5 -9 9.89941 -9.7998 8.09961c-2.40039 -5.7998 -3.60059 -20.0996 -10.1006 -26.5c-8.7998 -8.89941 -25.5 -5.89941 -35.2998 -0.799805c-10.7998 5.7002 0.799805 19.2002 0.799805 19.2002s-5.7998 -3.40039 -10.5 3.59961
+c-6 9.2998 -17.0996 37.2998 11.5 62c-1.2998 10.1006 -4.59961 53.7002 40.6006 85.6006c0 0 -20.6006 22.7998 -12.9004 43.2998c5 13.3994 7 13.2998 8.59961 13.8994c5.7002 2.2002 11.3008 4.60059 15.4004 9.10059c20.5996 22.2002 46.7998 18 46.7998 18
+s12.4004 37.7998 23.9004 30.3994c3.5 -2.2998 16.2998 -30.5996 16.2998 -30.5996s13.5996 7.90039 15.0996 5c8.2002 -16 9.2002 -46.5 5.60059 -65.0996c-6.10059 -30.6006 -21.4004 -47.1006 -27.6006 -57.5c-1.39941 -2.40039 16.5 -10 27.8008 -41.3008
+c10.3994 -28.5996 1.09961 -52.6992 2.7998 -55.2998c0.799805 -1.39941 13.7002 -0.799805 36.3994 13.2002c12.8008 7.90039 28.1006 16.9004 45.4004 17c16.7002 0.5 17.5996 -19.2002 4.90039 -22.2002zM496 192c0 -136.9 -111.1 -248 -248 -248s-248 111.1 -248 248
+s111.1 248 248 248s248 -111.1 248 -248zM416.7 116.8c-1.7002 13.6006 -13.2002 23 -28 22.7998c-22 -0.299805 -40.5 -11.6992 -52.7998 -19.1992c-4.80078 -3 -8.90039 -5.2002 -12.4004 -6.80078c3.09961 44.5 -22.5 73.1006 -28.7002 79.4004
+c7.7998 11.2998 18.4004 27.7998 23.4004 53.2002c4.2998 21.7002 3 55.5 -6.90039 74.5c-1.59961 3.09961 -7.39941 11.2002 -21 7.39941c-9.7002 20 -13 22.1006 -15.5996 23.8008c-1.10059 0.699219 -23.6006 16.3994 -41.4004 -28
+c-12.2002 -0.900391 -31.2998 -5.30078 -47.5 -22.8008c-2 -2.19922 -5.89941 -3.7998 -10.0996 -5.39941h0.0996094c-8.39941 -3 -12.2998 -9.90039 -16.8994 -22.2998c-6.5 -17.4004 0.199219 -34.6006 6.7998 -45.7002c-17.7998 -15.9004 -37 -39.7998 -35.7002 -82.5
+c-34 -36 -11.7998 -73 -5.59961 -79.6006c-1.60059 -11.0996 3.69922 -19.3994 12 -23.7998c12.5996 -6.7002 30.2998 -9.59961 43.8994 -2.7998c4.90039 -5.2002 13.7998 -10.0996 30 -10.0996c6.7998 0 58 2.89941 72.6006 6.5c6.7998 1.59961 11.5 4.5 14.5996 7.09961
+c9.7998 3.09961 36.7998 12.2998 62.2002 28.7002c18 11.7002 24.2002 14.2002 37.5996 17.3994c12.9004 3.2002 21 15.1006 19.4004 28.2002z" />
+    <glyph glyph-name="airbnb" unicode="&#xf834;" 
+d="M224 74.8799h0.0595703c24.71 31.1797 39.5508 58.9297 45 83.1797c22.5508 88 -112.609 88 -90.0596 0c4.91992 -23.75 19.7598 -51.5098 45 -83.1797zM362.15 1.65039c35.6396 15.3496 50.1797 53.5693 37.0098 86.6396
+c-25.4902 61.6104 -78.8398 168.47 -114.84 239.09c-16.9707 33.9297 -28.0303 59.8701 -60.3701 59.8701c-33.8203 0 -43.6299 -27.3301 -59.3799 -57.4004c-4.15039 -10.3799 -100.771 -202.399 -115.87 -241.56c-17.8105 -50.0303 21.2998 -98.5205 71.2998 -91.0898
+c24.5996 2.22949 52.6201 18.8701 85.1504 54.9199c-29.2002 37.1104 -47.5 70.3096 -54.4307 99.5c-11.8799 53.9902 18.3604 100.5 73.2803 100.5c64.96 0 122.75 -69.9297 18.8496 -200c35.6309 -39.5898 77.2402 -68.7803 119.301 -50.4697zM409.15 137.77
+c0 -0.679688 16.8496 -35.6895 16.8301 -39.5791c25.2393 -69.3301 -26.7207 -130.24 -89.6104 -130.19c-11.1104 0 -53.6904 -1.37988 -112.37 62.4004c-51.7598 -56.3408 -90.6602 -62.4004 -112.37 -62.4004c-62.8896 0 -114.85 60.8604 -89.6299 130.19
+c0.889648 2.61914 11.1797 32.71 117.34 245.02c19.79 41.1201 39.1406 72.79 84.6602 72.79c49.1299 0 56.2695 -3.92969 185.15 -278.23z" />
+    <glyph glyph-name="battle-net" unicode="&#xf835;" horiz-adv-x="512" 
+d="M448.61 222.38c60.75 -36.25 71.9893 -73.8096 57.3193 -93.6895c-4.70996 -6.88086 -25.1797 -36.2402 -148 -31.6406c-21.8193 -30.3994 -45.25 -53.2695 -67.4697 -69.2695c28.54 -53.7803 54.2998 -85.0303 62.54 -91.7803c0 0 -3.44043 0.160156 -8.58008 3.37012
+c-2.69434 1.61133 -6.61426 4.78809 -8.75 7.08984c-15.6299 16.1797 -35.5195 41.9404 -55.7002 74.1201c-43.9502 -28.1104 -81.1299 -29.0996 -88.4395 -9.4502c-4.83984 10.8301 1.5293 26.5 9.05957 39.3398c-31.3203 -17.5098 -61.7002 -26.8496 -86.7002 -21.1396
+c-6.79004 1.54004 -17.6299 5.50977 -23.1992 18.2598c-4.52051 9.53027 -6.02051 24.2598 -0.150391 47.1406c9.07031 35.3398 37.5801 82.2998 47.3096 97.6992c3.75 -8.62988 -20.7793 40.1904 -26 93.1904c-89.1592 0 -110.56 -8.83984 -111.56 -9.21973
+c1.54004 2.44922 7.86035 7.26953 17.7598 9.71973c22 5.47949 54.6406 9.84961 93 11.2295c-2.38965 52.0703 15.3398 84.7705 36 81.29h0.180664c11.3291 -1.2998 21.2598 -13.5801 28.5 -25.9297c0.669922 35.2002 7.7998 65.54 25 84.0703
+c4.72949 5.14941 13.5693 12.5498 27.3994 11h0.0498047c10.5205 -0.850586 24 -6.91992 40.8398 -23.4707c25.6006 -25.0693 51.54 -71.9893 60.4805 -88.9297c37.25 -3.7002 68.7695 -12.5801 93.7695 -23.7998c32.3506 51.5898 46.4805 89.5303 48.2002 100.05
+c0.640625 -1.25 2.93066 -8.41992 -0.450195 -20.25c-6.22949 -21.6201 -18.5791 -51.7197 -36.3398 -85.2998c45.79 -23.7305 65.3203 -55.0098 52.8506 -71.3301c-3.35059 -4.94043 -12.0498 -12.5498 -38.9199 -12.3701zM370.76 116.16
+c70.4102 4.37988 79.6504 20.5703 78.5098 33.5c-1.87988 21.25 -21.1992 41.2598 -49.0596 58.8301c0.889648 -24.5605 -5.63965 -54.6201 -29.4502 -92.3301zM216.9 60.3096c-19.04 -30.46 9.19922 -39.5596 49.7998 -17.6992
+c-7 12.0898 -13.9199 24.8594 -20.6006 38.1895c-9.66992 -7.37012 -19.4395 -14.2598 -29.1992 -20.4902zM431.9 231.66c36.2598 -1.23047 29.4199 27.8496 -9.64062 51.9502c-5.9707 -10.373 -16.1582 -26.9043 -22.7402 -36.9004
+c11.2207 -4.70996 22.0908 -9.70996 32.3809 -15.0498zM279.18 50c28.3799 18.2002 60.1689 48.1201 84.7695 85.4297c18.46 27.96 26.1494 56.0205 25.4102 79.5703c-30.5801 17.3203 -89.3604 42.7197 -167.23 57.21c0.350586 18.4805 2.08984 19.8799 2.16016 20.3301
+c10.9229 -1.33496 28.5693 -4.04492 39.3896 -6.0498c32.5664 -6.08984 84.2383 -20.2959 115.34 -31.71c-15.6191 33.1494 -41.4092 47.2197 -41.5195 47.2197c1.59961 0.160156 28.1299 -6 48.8604 -43.7197c8.42676 11.2061 16.2031 22.0293 23.3301 32.4697
+c-29.96 15.46 -71.75 28.04 -116.32 30.71c-33.4502 1.99023 -61.6299 -5.38965 -81.6299 -17.8096c0.240234 -35.2607 7.66992 -98.96 34 -173.431c-16.8301 -9.12988 -17.7402 -7.87012 -18.6699 -8.25c-17.1924 40.7627 -37.2041 109.235 -44.6699 152.84
+c-21.0908 -30.3994 -20.1406 -59.5 -20.1406 -59.5693c-0.919922 1.22949 -8.81934 27.4297 13.4707 64.2295c-13.5801 1.70996 -26.5508 2.9707 -38.8506 3.87988c1.57031 -33.6797 11.5703 -76.1494 31.5703 -116.069c14.8701 -29.71 35.1201 -50.3105 55.71 -61.4902
+c30.4102 17.9199 81.0498 55.6504 132.75 115.92c14.9697 -9 16.1494 -11.71 16.5098 -12c-7.91309 -10.5332 -16.2227 -20.9033 -24.9287 -31.1104c-21.542 -25.1426 -59.6494 -62.7744 -85.0605 -84c37.5303 -3.38965 62.5303 12.1807 62.5303 12.25
+c-0.860352 -1.67969 -20.0303 -21.6797 -63.2803 -20.4092c5.5 -12.9404 10.9902 -25.0908 16.5 -36.4404zM306.579 337c-1.58008 2.4502 -39.5801 58.8496 -56.4805 54.6104c-16.8994 1.09961 -36.21 -22.9805 -38.21 -75.2803
+c21.1104 13.2402 50.1299 22.3301 94.6904 20.6699zM175.929 333.9c-3.7998 6.68945 -8.66992 12.4795 -14.4297 13.5693h-0.0898438c-24.79 1.41016 -24.75 -52.8301 -24.6699 -49.5898c13.6602 -0.00976562 27.8496 -0.410156 42.3994 -1.25977
+c-1.62012 12.6602 -2.72949 25.1699 -3.20996 37.2803zM147.869 171.9c-30.7998 -61.5098 -19.8701 -76.6104 -19.6699 -76.8203c7.38965 -15.4902 38.1299 -20.25 84.9199 4.50977c-21.9502 11.7402 -44.4902 32.6104 -65.25 72.3105zM357.929 97.0996z" />
+    <glyph glyph-name="bootstrap" unicode="&#xf836;" 
+d="M292.3 136.07c0 -42.4102 -39.7197 -41.4307 -43.9199 -41.4307h-80.8896v81.6904h80.8896c42.5605 0 43.9199 -31.9004 43.9199 -40.2598zM242.15 209.2h-74.6602v72.1797h74.6602c34.9297 0 38.4395 -20.3496 38.4395 -35.8701
+c0 -37.3096 -37.7695 -36.3096 -38.4395 -36.3096zM448 341.33v-298.66c-0.120117 -41.0977 -33.5723 -74.5498 -74.6699 -74.6699h-298.66c-41.0977 0.120117 -74.5498 33.5723 -74.6699 74.6699v298.66c0.120117 41.0977 33.5723 74.5498 74.6699 74.6699h298.66
+c41.0977 -0.120117 74.5498 -33.5723 74.6699 -74.6699zM338.05 130.14c0 21.5703 -6.64941 58.29 -49.0498 67.3506v0.729492c22.9102 9.78027 37.3398 28.25 37.3398 55.6406c0 7 2 64.7793 -77.5996 64.7793h-127v-261.33c128.229 0 139.87 -1.67969 163.6 5.70996
+c14.21 4.4209 52.71 17.9805 52.71 67.1201z" />
+    <glyph glyph-name="buffer" unicode="&#xf837;" 
+d="M427.84 67.3301l-196.5 -97.8203c-1.93848 -0.832031 -5.22461 -1.50684 -7.33496 -1.50684c-2.10938 0 -5.39551 0.674805 -7.33496 1.50684l-196.51 97.8203c-4 2 -4 5.28027 0 7.29004l47.0596 23.3799c1.94238 0.832031 5.23242 1.50684 7.3457 1.50684
+c2.1123 0 5.40234 -0.674805 7.34473 -1.50684l134.76 -67c1.93848 -0.836914 5.22461 -1.51562 7.33496 -1.51562c2.11133 0 5.39746 0.678711 7.33496 1.51562l134.76 67c1.94043 0.832031 5.22949 1.50781 7.34082 1.50781s5.39941 -0.675781 7.33984 -1.50781
+l47.0596 -23.4297c4.0498 -1.95996 4.0498 -5.24023 0 -7.24023zM427.84 203.86c4.0498 -2.01074 4.0498 -5.29004 0 -7.31055l-196.5 -97.7998c-1.93848 -0.832031 -5.22461 -1.50781 -7.33496 -1.50781c-2.10938 0 -5.39551 0.675781 -7.33496 1.50781l-196.51 97.7998
+c-4 2.02051 -4 5.31055 0 7.31055l47.0596 23.4297c1.94238 0.832031 5.23242 1.50684 7.3457 1.50684c2.1123 0 5.40234 -0.674805 7.34473 -1.50684l134.76 -67.0801c1.93945 -0.828125 5.22559 -1.5 7.33496 -1.5s5.39551 0.671875 7.33496 1.5l134.76 67.0801
+c1.94043 0.832031 5.22949 1.50781 7.34082 1.50781s5.39941 -0.675781 7.33984 -1.50781zM20.1602 317.58c-4.0498 1.86035 -4.0498 4.88965 0 6.74023l196.5 90.2793c1.9502 0.774414 5.23633 1.40332 7.33496 1.40332s5.38477 -0.628906 7.33496 -1.40332
+l196.51 -90.2793c4 -1.85059 4 -4.87988 0 -6.74023l-196.51 -90.29c-1.95215 -0.765625 -5.23828 -1.3877 -7.33496 -1.3877s-5.38281 0.62207 -7.33496 1.3877z" />
+    <glyph glyph-name="chromecast" unicode="&#xf838;" horiz-adv-x="512" 
+d="M447.83 384h0.169922c23.5811 0 42.7197 -19.1387 42.7197 -42.7197v-298.561c0 -23.5811 -19.1387 -42.7197 -42.7197 -42.7197v0h-149.36v42.7197h149.19v298.561h-383.83v-63.9199h-42.7197v63.9199c0 23.5811 19.1387 42.7197 42.7197 42.7197h383.83z
+M21.2803 64.4199c35.2783 0 63.9102 -28.6318 63.9102 -63.9102v-0.00976562h-63.9102v63.9199zM21.2803 149.7l0.0292969 -0.339844h0.330078c82.248 -0.105469 149 -66.9424 149 -149.19v-0.169922h-42.7197v0.339844v0.0302734c0 58.8594 -47.7705 106.63 -106.63 106.63
+h-0.00976562v42.7002zM21.2803 234.97v-0.330078c129.46 -0.370117 234.34 -105.18 234.8 -234.64h-42.7197v0.5c-0.0800781 106 -86.0801 191.85 -192.08 191.75v42.7197z" />
+    <glyph glyph-name="evernote" unicode="&#xf839;" horiz-adv-x="384" 
+d="M120.82 315.79c1.59961 -22.3096 -17.5508 -21.5898 -21.6104 -21.5898c-68.9297 0 -73.6396 1 -83.5801 -3.33984c-0.55957 -0.220703 -0.740234 0 -0.370117 0.370117l108.53 110.319c0.379883 0.370117 0.599609 0.219727 0.379883 -0.370117
+c-4.34961 -9.98926 -3.34961 -15.0898 -3.34961 -85.3896zM199.82 7.79004c-14.6807 37.0801 13 76.9297 52.5195 76.6201c17.4902 0 22.6006 -23.21 7.9502 -31.4199c-6.19043 -3.2998 -24.9502 -1.74023 -25.1396 -19.2002
+c-0.0507812 -17.0898 19.6699 -25 31.1992 -24.8896h0.0107422c25.1934 0 45.6396 20.4463 45.6396 45.6396v0.00976562v0.0800781c0 11.6299 -7.79004 47.2197 -47.54 55.3398c-7.71973 1.54004 -65 6.35059 -68.3496 50.5205
+c-3.74023 -16.9307 -17.4004 -63.4902 -43.1104 -69.0898c-8.74023 -1.94043 -69.6797 -7.64062 -112.92 36.7695c0 0 -18.5703 15.2305 -28.2305 57.9502c-3.37988 15.75 -9.2793 39.7002 -11.1396 62c0 18 11.1396 30.4502 25.0703 32.2002c81 0 90 -2.32031 101 7.7998
+c9.81934 9.24023 7.7998 15.5 7.7998 102.78c1 8.2998 7.79004 30.8096 53.4102 24.1396c6 -0.860352 31.9102 -4.17969 37.4795 -30.6396l64.2607 -11.1504c20.4297 -3.70996 70.9395 -7 80.5996 -57.9404c22.6602 -121.09 8.91016 -238.46 7.7998 -238.46
+c-15.9795 -114.38 -111.07 -108.85 -111.07 -108.85c-18.9492 0.230469 -54.25 9.40039 -67.2695 39.8301zM280.76 212.63c-1 -1.91992 -2.2002 -6 0.850586 -7c14.0898 -4.92969 39.75 -6.83984 45.8799 -5.53027c3.10938 0.25 3.0498 4.43066 2.47949 6.65039
+c-3.5293 21.8496 -40.8301 26.5 -49.2393 5.91992z" />
+    <glyph glyph-name="itch-io" unicode="&#xf83a;" horiz-adv-x="512" 
+d="M71.9199 413.23c19.2197 1.66992 114.32 2.76953 184.08 2.76953s116.56 -0.400391 184 -2.73047c21.7197 -12.9297 64.5195 -62.0996 64.9199 -75v-21.3398c0 -27.0596 -25.25 -50.8398 -48.25 -50.8398c-27.54 0 -50.54 22.8799 -50.54 50
+c0 -27.1494 -22.2295 -50 -49.7598 -50s-49 22.8799 -49 50c0 -27.1494 -23.5898 -50 -51.1602 -50h-0.5c-27.5703 0 -51.1602 22.8799 -51.1602 50c0 -27.1494 -21.4199 -50 -49 -50s-49.7598 22.8799 -49.7598 50c0 -27.1494 -22.9697 -50 -50.54 -50
+c-22.96 0 -48.25 23.7803 -48.25 50.8398v21.3398c0.400391 12.8906 43.2002 62.0605 64.9199 74.9609zM204.24 278.84c9.14844 -15.9902 31.5527 -28.9785 49.9746 -28.9785c0.498047 0 1.30664 0.0126953 1.80469 0.0283203c28.7109 0 44.6602 16.4502 51.7607 28.9404
+c22 -38.3398 77.8496 -38.7598 99.8496 -0.240234c13.1201 -23.0596 43.0801 -32.0996 56 -27.6602c3.57031 -37.1494 13.9004 -236.88 -17.75 -269.149c-77.6797 -18.1201 -299.76 -18.6699 -379.76 0c-31.4004 32.0195 -21.6006 229 -17.7305 269.149
+c12.8301 -4.41016 42.8301 4.52051 56 27.6602c21.9502 -38.46 77.8506 -38.1494 99.8506 0.25zM162.66 225.07l-0.0205078 -0.0703125c-52.3193 0 -65.21 -77.4502 -83.8799 -144.45c-17.2598 -62.1494 5.52051 -63.6699 33.9404 -63.7295
+c42.1494 1.56934 65.4902 32.1797 65.4902 62.79c53.6191 -8.79004 116.3 -6.43066 155.55 0c0 -30.6104 23.3398 -61.2207 65.4902 -62.79c28.4297 0.0595703 51.21 1.58008 33.9492 63.7295c-18.6494 66.9199 -31.54 144.45 -83.8701 144.45
+c-16.46 0 -31.0898 0 -49.25 -19.71c-12.1377 1.23145 -31.8896 2.23047 -44.0898 2.23047c-12.1992 0 -31.9521 -0.999023 -44.0898 -2.23047c-18.1299 19.7803 -32.75 19.7803 -49.2197 19.7803zM256 177.21l-0.0595703 -0.00976562s44.3496 -40.7598 52.3496 -55.2402
+l-29 1.16992v-25.2803c0 -1.15918 -11.6602 -0.699219 -23.3096 -0.15918c-1.99023 0 -23.3301 -1.39062 -23.3301 0.15918v25.3203l-29 -1.16992c7.96973 14.4404 52.3496 55.21 52.3496 55.21z" />
+    <glyph glyph-name="salesforce" unicode="&#xf83b;" horiz-adv-x="640" 
+d="M248.89 202.36h-26.3496c0.69043 5.15918 3.32031 14.1201 13.6396 14.1201c6.75 0 11.9707 -3.82031 12.71 -14.1201zM385.55 216.24c0.450195 0 14.1104 1.75977 14.1104 -20c0 -6.45996 -1.11035 -20 -14.1104 -20c-0.479492 0 -14.1094 -1.77051 -14.1094 20
+c0 21.7695 13.6396 20 14.1094 20zM142.33 192.48c4.2002 3.60938 15.6104 2.71973 20.9297 1.64941v-16.9395c-5.85938 -1.1709 -16.2295 -2.75 -20.9297 0.949219c-1.20996 1 -3.29004 2.27051 -3.29004 7.05078
+c-0.0078125 0.137695 -0.0146484 0.361328 -0.0146484 0.499023c0 2.31738 1.48047 5.36035 3.30469 6.79102zM640 216c0 -87.5801 -80 -154.39 -165.36 -136.43c-18.3701 -33 -70.7295 -70.75 -132.199 -41.6299c-41.1602 -96.0508 -177.891 -92.1807 -213.811 5.16992
+c-119.72 -23.8906 -178.82 138.37 -75.2695 199.279c-34.75 79.4307 22.6396 173.61 114.31 173.61c33.834 -0.0214844 77.9883 -21.8389 98.5605 -48.7002c20.6992 21.4004 49.3994 34.8105 81.1494 34.8105c42.3398 0 79 -23.5205 98.7998 -58.5703
+c92.8203 40.6797 193.82 -28.2305 193.82 -127.54zM120.45 184.2c0 11.7598 -11.6904 15.1699 -17.8701 17.1699c-5.27051 2.11035 -13.4102 3.50977 -13.4102 8.93945c0 9.45996 17 6.66016 25.1699 2.12012c0 0 1.16992 -0.709961 1.64062 0.470703
+c0.239258 0.699219 2.35938 6.58008 2.58984 7.29004c0.0292969 0.0927734 0.0537109 0.24707 0.0537109 0.34375c0 0.441406 -0.337891 0.918945 -0.753906 1.06543c-12.3301 7.63086 -40.7002 8.51074 -40.7002 -12.6992c0 -12.46 11.4902 -15.4404 17.8799 -17.1699
+c4.71973 -1.58008 13.1699 -3 13.1699 -8.7002c0 -4 -3.5293 -7.06055 -9.16992 -7.06055c-5.82617 0.00976562 -14.3379 2.85449 -19 6.35059c-0.469727 0.229492 -1.41992 0.709961 -1.64941 -0.709961l-2.40039 -7.4707
+c-0.469727 -0.939453 0.230469 -1.17969 0.230469 -1.40918c1.75 -1.40039 10.2998 -6.59082 22.8193 -6.59082c13.1699 0 21.4004 7.06055 21.4004 18.1104v-0.0498047zM152.45 226.78c-10.1299 0 -18.6602 -3.16992 -21.4004 -5.18066
+c-0.237305 -0.164062 -0.430664 -0.532227 -0.430664 -0.822266c0 -0.178711 0.0859375 -0.442383 0.19043 -0.586914l2.59082 -7.06055c0.114258 -0.399414 0.544922 -0.723633 0.960938 -0.723633c0.0605469 0 0.15918 0.0107422 0.21875 0.0234375
+c0.650391 0 6.7998 4 16.9297 4c4 0 7.06055 -0.709961 9.18066 -2.35938c3.59961 -2.80078 3.05957 -8.29004 3.05957 -10.5801c-4.79004 0.299805 -19.1104 3.43945 -29.4102 -3.75977c-4.05762 -2.7832 -7.34961 -9.03418 -7.34961 -13.9541
+c0 -0.162109 0.00390625 -0.424805 0.00976562 -0.585938c0 -5.90039 1.50977 -10.4004 6.58984 -14.3506c12.2402 -8.16016 36.2803 -2 38.1006 -1.41016c1.5791 0.320312 3.5293 0.660156 3.5293 1.87988v33.8809c0.0400391 4.60938 0.320312 21.6396 -22.7793 21.6396z
+M199 247.76c0.000976562 0.0205078 0.00195312 0.0527344 0.00195312 0.0722656c0 0.613281 -0.49707 1.11035 -1.10938 1.11035c-0.0205078 0 -0.0527344 -0.000976562 -0.0722656 -0.00195312h-9.82031
+c-0.0175781 0.000976562 -0.0449219 0.000976562 -0.0625 0.000976562c-0.612305 0 -1.10938 -0.49707 -1.10938 -1.10938c0 -0.0205078 0.000976562 -0.0527344 0.00195312 -0.0722656v-79c-0.000976562 -0.0195312 -0.00195312 -0.0517578 -0.00195312 -0.0712891
+c0 -0.613281 0.49707 -1.11035 1.10938 -1.11035c0.0175781 0 0.0449219 0.000976562 0.0625 0.00195312h9.87988c0.0205078 -0.000976562 0.0527344 -0.00195312 0.0722656 -0.00195312c0.613281 0 1.11035 0.49707 1.11035 1.10938
+c0 0.0205078 -0.000976562 0.0527344 -0.00292969 0.0722656zM254.75 218.83c-2.09961 2.30957 -6.79004 7.53027 -17.6504 7.53027c-3.50977 0 -14.1592 -0.230469 -20.6992 -8.94043c-6.35059 -7.62988 -6.58008 -18.1104 -6.58008 -21.4102
+c0 -3.12012 0.149414 -14.2598 7.05957 -21.1699c2.63965 -2.91016 9.06055 -8.22949 22.8105 -8.22949c10.8193 0 16.4697 2.34961 18.5791 3.75977c0.470703 0.240234 0.710938 0.709961 0.240234 1.87988l-2.34961 6.83008
+c-0.1875 0.402344 -0.699219 0.728516 -1.14258 0.728516c-0.0751953 0 -0.194336 -0.0126953 -0.267578 -0.0283203c-2.58984 -0.94043 -6.34961 -2.82031 -15.29 -2.82031c-17.4199 0 -16.8496 14.7402 -16.9404 16.7002h37.1709
+c0.522461 0.0107422 1.04688 0.431641 1.16992 0.939453c-0.290039 0 2.06934 14.7002 -6.09082 24.2305h-0.0195312zM291.44 166.14c13.1699 0 21.4092 7.06055 21.4092 18.1104c0 11.7598 -11.6992 15.1699 -17.8799 17.1699
+c-4.13965 1.66016 -13.4102 3.37988 -13.4102 8.94043c0 3.75977 3.29004 6.34961 8.4707 6.34961c4.87988 -0.0976562 12.3613 -1.99316 16.7002 -4.22949c4.33789 -2.2373 1.17969 -0.710938 1.64941 0.469727c0.230469 0.700195 2.35059 6.58008 2.58008 7.29004
+c0.0292969 0.0927734 0.0537109 0.24707 0.0537109 0.34375c0 0.441406 -0.337891 0.918945 -0.753906 1.06641c-7.91016 4.89941 -16.7402 4.93945 -20.2295 4.93945c-12 0 -20.46 -7.29004 -20.46 -17.6396c0 -12.46 11.4795 -15.4404 17.8701 -17.1699
+c6.10938 -2 13.1699 -3.26074 13.1699 -8.7002c0 -4 -3.52051 -7.06055 -9.16992 -7.06055c-5.82617 0.0126953 -14.3379 2.85742 -19 6.35059c-0.155273 0.132812 -0.447266 0.241211 -0.651367 0.241211c-0.526367 0 -0.973633 -0.426758 -0.999023 -0.951172
+l-2.34961 -7.52051c-0.470703 -0.939453 0.229492 -1.17969 0.229492 -1.40918c1.71973 -1.40039 10.3301 -6.59082 22.79 -6.59082h-0.0195312zM357.09 224c0 0.709961 -0.240234 1.17969 -1.17969 1.17969h-11.7598c0 0.140625 0.939453 8.94043 4.46973 12.4707
+c4.16016 4.14941 11.7598 1.63965 12 1.63965c1.16992 -0.469727 1.41016 0 1.63965 0.469727l2.83008 7.77051c0.700195 0.939453 0 1.16992 -0.240234 1.41016c-5.08984 2 -17.3496 2.86914 -24.46 -4.24023c-5.47949 -5.48047 -7 -13.9199 -8 -19.5205h-8.46973
+c-0.600586 -0.0498047 -1.125 -0.578125 -1.16992 -1.17969l-1.41992 -7.75977c0 -0.700195 0.240234 -1.16992 1.17969 -1.16992h8.23047c-8.50977 -47.9004 -8.75 -50.21 -10.3506 -55.5205c-1.08008 -3.62012 -3.29004 -6.89941 -5.87988 -7.75977
+c-0.0898438 0 -3.87988 -1.67969 -9.63965 0.240234c0 0 -0.94043 0.469727 -1.41016 -0.709961c-0.240234 -0.709961 -2.58984 -6.82031 -2.83008 -7.53027s0 -1.41016 0.469727 -1.41016c5.11035 -2 13 -1.76953 17.8809 0
+c6.2793 2.28027 9.71973 7.88965 11.5293 12.9404c2.75 7.70996 2.81055 9.79004 11.7598 59.7393h12.2305c0.601562 0.0498047 1.13086 0.578125 1.17969 1.18066zM410.48 208c-0.560547 1.67969 -5.10059 18.1104 -25.1709 18.1104c-15.25 0 -23 -10 -25.1592 -18.1104
+c-1 -3 -3.18066 -14 0 -23.5195c0.0898438 -0.300781 4.40918 -18.1201 25.1592 -18.1201c14.9502 0 22.9004 9.60938 25.1709 18.1201c3.20996 9.60938 1.00977 20.5195 0 23.5195zM455.88 224.7c-5 1.64941 -16.6201 1.89941 -22.1104 -5.41016v4.46973
+c0.000976562 0.0175781 0.00195312 0.0449219 0.00195312 0.0625c0 0.612305 -0.49707 1.11035 -1.10938 1.11035c-0.0205078 0 -0.0527344 -0.000976562 -0.0722656 -0.00292969h-9.39941c-0.0205078 0.00195312 -0.0527344 0.00292969 -0.0722656 0.00292969
+c-0.612305 0 -1.11035 -0.498047 -1.11035 -1.11035c0 -0.0175781 0.000976562 -0.0449219 0.00195312 -0.0625v-55.2793c-0.000976562 -0.0175781 -0.00195312 -0.0449219 -0.00195312 -0.0625c0 -0.618164 0.501953 -1.12012 1.12012 -1.12012
+c0.0175781 0 0.0449219 0.000976562 0.0625 0.00195312h9.63965c0.0166016 -0.000976562 0.0449219 -0.00195312 0.0615234 -0.00195312c0.618164 0 1.12012 0.501953 1.12012 1.12012c0 0.0175781 -0.000976562 0.0449219 -0.00195312 0.0625v27.7695
+c0 2.91016 0.0498047 11.3701 4.45996 15.0498c4.90039 4.90039 12 3.36035 13.4102 3.06055c0.555664 0.00976562 1.1875 0.430664 1.41016 0.939453c0.972656 2.15918 2.34375 5.74316 3.05957 8c0.0449219 0.113281 0.0800781 0.302734 0.0800781 0.423828
+c0 0.356445 -0.246094 0.798828 -0.549805 0.986328v-0.00976562zM502.69 170.6l-2.12012 7.29004c-0.470703 1.18066 -1.41016 0.709961 -1.41016 0.709961c-4.23047 -1.81934 -10.1504 -1.88965 -11.29 -1.88965c-4.63965 0 -17.1699 1.12988 -17.1699 19.7598
+c0 6.23047 1.84961 19.7607 16.4697 19.7607c0.245117 0.00585938 0.643555 0.0107422 0.888672 0.0107422c3.00586 0 7.76855 -0.744141 10.6318 -1.66113c2.8623 -0.916992 0.939453 -0.469727 1.17969 0.709961c0.939453 2.58984 1.63965 4.46973 2.58984 7.53027
+c0.230469 0.939453 -0.469727 1.16992 -0.709961 1.16992c-11.5898 3.87012 -22.3398 2.5293 -27.7598 0c-1.58984 -0.740234 -16.2305 -6.49023 -16.2305 -27.5205c0 -2.89941 -0.580078 -30.1094 28.9404 -30.1094c4.42383 0.00878906 11.377 1.27637 15.5195 2.83008
+c0.290039 0.214844 0.525391 0.682617 0.525391 1.04395c0 0.105469 -0.0244141 0.274414 -0.0546875 0.375977v-0.0107422zM556.56 210.12c-0.799805 3 -5.36914 16.2295 -22.3496 16.2295c-16 0 -23.5195 -10.1094 -25.6396 -18.5898
+c-0.913086 -3.0166 -1.6543 -8.02441 -1.6543 -11.1768c0 -0.161133 0.00195312 -0.421875 0.00390625 -0.583008c0 -25.8701 18.8398 -29.4004 29.8799 -29.4004c10.8203 0 16.46 2.35059 18.5801 3.76074c0.469727 0.239258 0.709961 0.709961 0.240234 1.87988
+l-2.36035 6.83008c-0.186523 0.402344 -0.698242 0.728516 -1.14258 0.728516c-0.0742188 0 -0.194336 -0.0126953 -0.267578 -0.0292969c-2.58984 -0.939453 -6.34961 -2.81934 -15.29 -2.81934c-17.4199 0 -16.8496 14.7402 -16.9297 16.7002h37.1602
+c0.522461 0.0126953 1.05078 0.433594 1.17969 0.939453c-0.239258 0.00976562 0.94043 7.07031 -1.41016 15.54v-0.00976562zM533.27 216.47c5.11035 0 11.8506 -2.2002 12.7305 -14.1201h-26.3701c0.639648 5.12012 3.31055 14.1201 13.6396 14.1201z" />
+    <glyph glyph-name="speaker-deck" unicode="&#xf83c;" horiz-adv-x="512" 
+d="M213.86 152h-113.86c-55.2002 0 -100 44.7998 -100 100s44.7998 100 100 100h132.84c22.0801 0 40 -17.9199 40 -40s-17.9199 -40 -40 -40h-134.84c-26.4697 0 -26.4502 -40 0 -40h113.82c55.1992 0 100 -44.7998 100 -100s-44.8008 -100 -100 -100h-171.82
+c-22.0801 0 -40 17.9199 -40 40s17.9199 40 40 40h173.86c26.4795 0 26.46 40 0 40zM298 32c23.5957 16.0176 46.4932 51.8574 51.1104 80h64.5498c10.8525 0.0927734 19.6602 8.97656 19.6602 19.8291v0.170898v120v0.170898c0 10.8525 -8.80762 19.7363 -19.6602 19.8291
+h-117.24c8.29199 9.4834 15.0205 27.4033 15.0205 40s-6.72852 30.5166 -15.0205 40h136.93c43.4404 0 78.6504 -35.8203 78.6504 -80v-160c0 -44.1797 -35.21 -80 -78.6504 -80h-135.35z" />
+    <glyph glyph-name="symfony" unicode="&#xf83d;" horiz-adv-x="512" 
+d="M256 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM389.74 296.46c15.3496 0.540039 19.7695 15.4404 19.5195 23.1299c-0.639648 18.0605 -19.6699 29.46 -44.8301 28.6504
+c-1.89941 -0.0703125 -65.2598 3.46973 -102.43 -105.53c-10.0596 8.29004 -57.7695 65.1602 -110.58 25.8096c-18.9502 -14.1797 -31.4199 -47.9199 -2.9502 -79.6699c16.9502 -18.1396 26.7207 -25.3301 22.25 -39.8496c-9.14941 -29.79 -55.5596 -16.1602 -51 -1.38965
+c1.36035 4.38965 3.49023 4.46973 6.28027 13.0693c7.74023 25.3203 -27.1104 37.75 -34.6201 13.6006c-4.32031 -14.0605 2.37988 -39.5107 38.3799 -50.6201c42.1602 -12.96 77.8203 10.0098 82.8799 39.9395c3.2002 18.75 -5.29004 32.6904 -20.7998 50.6201l-12.6299 14
+c-7.66016 7.7002 -10.29 20.7002 -2.37012 30.7002c6.69043 8.45996 16.2002 12.0605 31.8105 7.83008c22.7695 -6.16992 32.9199 -21.9697 49.8496 -34.7197c-1.23047 -4 -10.04 -32.3398 -18.2305 -82c-12.1094 -63.4902 -21.3496 -98.3506 -45.3496 -118.351
+c-4.83984 -3.48926 -11.7598 -8.63965 -22.1797 -9c-1.94043 -0.0595703 -14.1406 2.83984 -2.0498 12.5508c15.2393 8.3291 7.00977 34.75 -14.8809 34c-9.85938 -0.330078 -24.8691 -9.59082 -24.3096 -26.5908c0.580078 -17.5293 16.9297 -30.6895 41.5801 -29.8398
+c13.1797 0.44043 42.5801 5.7998 71.5801 40.2598c39.8496 46.7207 47.4395 102.2 58.2002 161.721c51.6797 -6.11035 77.2393 17.8398 77.5996 35.7002c0.549805 24.2998 -28 23.46 -32 5.2998c-1.91992 -8.83984 13.4199 -16.8105 1.41992 -24.5605
+c-8.49023 -5.5 -23.71 -9.37012 -45.1396 -6.21973c10.2998 56.8496 19.1094 112.56 58.8896 113.85c2.70996 0.150391 12.6396 -0.119141 12.8701 -6.66992c0.150391 -5.41016 -6.7998 -9.66992 -6.53027 -18.8496c0.370117 -10.4199 8.2998 -17.2803 19.7705 -16.8701z
+" />
+    <glyph glyph-name="waze" unicode="&#xf83f;" horiz-adv-x="512" 
+d="M502.17 246.33c14.5205 -85.8604 -30.9395 -167.92 -113.17 -208.13c13 -34.1006 -12.4004 -70.2002 -48.3203 -70.2002c-27.0625 0.0214844 -50.166 21.9736 -51.5693 49c-6.44043 -0.19043 -64.2002 0 -76.3301 0.639648
+c-1.10645 -27.3809 -24.2441 -49.6035 -51.6484 -49.6035c-0.588867 0 -1.54395 0.0195312 -2.13184 0.0439453c-33.8604 1.36035 -57.9502 34.8398 -47 67.9199c-37.21 13.1104 -72.54 34.8701 -99.6201 70.7998c-13 17.2803 -0.479492 41.7998 20.8398 41.7998
+c46.3105 0 32.2207 54.1699 43.1504 110.261c18.4297 93.9395 116.75 157.14 211.72 157.14c102.48 0 197.15 -70.6699 214.08 -169.67zM373.51 59.7197c42 19.1807 81.3301 56.71 96.29 102.141c40.4805 123.09 -64.1494 228 -181.71 228
+c-83.4502 0 -170.32 -55.4199 -186.07 -136c-9.5293 -48.9102 5 -131.351 -68.75 -131.351c24.9404 -33.1094 58.3301 -52.6201 93.7305 -64.0498c24.6602 21.7998 63.8701 15.4697 79.8301 -14.3398c14.2197 -1 79.1895 -1.17969 87.9004 -0.820312
+c7.9502 15.5303 28.5635 28.1348 46.0107 28.1348c10.2002 0 24.8799 -5.24805 32.7686 -11.7148zM205.12 260.87c0 34.7402 50.8398 34.75 50.8398 0s-50.8398 -34.7402 -50.8398 0zM321.69 260.87c0 34.7402 50.8594 34.75 50.8594 0s-50.8594 -34.75 -50.8594 0z
+M199.08 190.18c-3.44043 16.9404 22.1797 22.1807 25.6201 5.20996l0.0595703 -0.279297c4.14062 -21.4199 29.8506 -44 64.1201 -43.0703c35.6797 0.94043 59.25 22.21 64.1104 42.7695c4.45996 16.0508 28.5996 10.3604 25.4697 -6
+c-5.22949 -22.1797 -31.21 -62 -91.46 -62.8994c-42.5498 0 -80.8799 27.8398 -87.9004 64.25z" />
+    <glyph glyph-name="yammer" unicode="&#xf840;" horiz-adv-x="512" 
+d="M421.78 295.83c-48.1602 -26.3896 -118.561 -58.1504 -130.2 -50s91.4395 80.3701 106.689 88.7695c0.920898 0.5 1.80078 0.970703 2.63086 1.40039c1.76562 0.521484 4.69336 0.945312 6.53516 0.945312c12.7295 0 23.0605 -10.3311 23.0605 -23.0596
+c0 -6.14453 -3.90527 -14.2334 -8.71582 -18.0557zM421.78 78.6602c4.76855 -3.82324 8.63965 -11.8877 8.63965 -18c0 -12.7344 -10.335 -23.0703 -23.0703 -23.0703c-1.81641 0 -4.70605 0.412109 -6.44922 0.919922
+c-0.830078 0.410156 -1.70996 0.900391 -2.63086 1.41016c-15.2695 8.38965 -118.25 80.6396 -106.689 88.7402c11.5596 8.09961 82.04 -23.6201 130.2 -50zM464.21 211c10.0947 -2.11328 18.2559 -12.1992 18.2559 -22.5117
+c0 -10.7881 -8.63965 -20.9561 -19.2861 -22.6982c-54.9102 0.0195312 -131.93 6.00977 -138.21 18.7598c-6.2793 12.75 118.84 26.5098 136.24 26.5098c1.0498 0 2.0498 -0.0595703 3 -0.0595703zM31 351.35c-0.699219 2.10742 -1.2666 5.61914 -1.2666 7.83887
+c0 13.7334 11.1455 24.8799 24.8799 24.8799c8.72949 0 18.8213 -6.41504 22.5264 -14.3184l81 -205.06h1.20996l77 203.529c3.22559 8.26074 13.041 14.9648 21.9092 14.9648c12.9834 0 23.5205 -10.5371 23.5205 -23.5195
+c0 -1.89258 -0.438477 -4.90137 -0.979492 -6.71484l-109.6 -273.391c-18.5498 -47.2197 -37.1201 -79.5596 -93.29 -79.5596c-0.151367 -0.000976562 -0.395508 -0.000976562 -0.545898 -0.000976562c-6.4668 0 -16.8887 0.874023 -23.2646 1.95117
+c-8.52051 2.44238 -15.4365 11.6201 -15.4365 20.4844c0 11.7637 9.54688 21.3105 21.3096 21.3105c0.28418 0 0.744141 -0.0117188 1.02734 -0.0253906c0.660156 -0.0595703 10.9102 -0.660156 13.8604 -0.660156c30.4697 0 43.7393 18.9404 58.0693 59.4102z" />
+    <glyph glyph-name="git-alt" unicode="&#xf841;" 
+d="M439.55 211.95c4.66504 -4.66602 8.45117 -13.8076 8.45117 -20.4053s-3.78613 -15.7393 -8.45117 -20.4053l-194.689 -194.689c-4.66602 -4.66211 -13.8047 -8.44629 -20.4004 -8.44629s-15.7344 3.78418 -20.4004 8.44629l-195.609 195.6
+c-4.66504 4.66602 -8.45117 13.8076 -8.45117 20.4053s3.78613 15.7393 8.45117 20.4053l134.12 134.14l50.79 -50.8496c-5.95996 -14.2607 -2.16016 -36.4902 18.6396 -45v-123c-22.3203 -9.09082 -28.8203 -38.4004 -11.25 -56
+c5.55176 -5.54883 16.4268 -10.0518 24.2754 -10.0518c7.84766 0 18.7236 4.50293 24.2744 10.0518c13.1807 13.1494 16.2197 42.46 -9.08008 55v121.85l46.3506 -46.29c-14.21 -34.4697 29.5098 -63.8301 56 -37.3398c25.71 25.6895 -1.24023 68.4902 -35.4707 56.6895
+l-49.6592 49.6602c9.29004 26.9102 -16.3301 52.8203 -43.3906 43.6807l-51.5195 51.5195l40.6602 40.6299c4.66602 4.66309 13.8076 8.44727 20.4043 8.44727s15.7383 -3.78418 20.4053 -8.44727z" />
+    <glyph glyph-name="stackpath" unicode="&#xf842;" 
+d="M244.6 215.6c0 -8.5 -4.25977 -20.4893 -21.3398 -20.4893h-19.6094v41.4697h19.6094c17.1299 0 21.3398 -12.3604 21.3398 -20.9805zM448 416v-448h-448v448h448zM151.3 160.16c0 21.2402 -12.1201 34.54 -46.7197 44.8496c-20.5703 7.41016 -26 10.9102 -26 18.6299
+c0 7.7207 7 14.6104 20.4102 14.6104c14.0898 0 20.79 -8.4502 20.79 -18.3496h30.7002l0.189453 0.569336c0.5 19.5703 -15.0596 41.6504 -51.1201 41.6504c-23.3701 0 -52.5498 -10.75 -52.5498 -38.29c0 -19.4004 9.25 -31.29 50.7402 -44.3701
+c17.2598 -6.15039 21.9102 -10.4004 21.9102 -19.4795c0 -15.2002 -19.1309 -14.2305 -19.4707 -14.2305c-20.3994 0 -25.6494 9.09961 -25.6494 21.9004h-30.7998l-0.180664 -0.560547c-0.679688 -31.3203 28.3799 -45.2197 56.6299 -45.2197
+c29.9805 0 51.1201 13.5498 51.1201 38.29zM276.68 215.79c0 25.2998 -18.4297 45.46 -53.4199 45.46h-51.7793v-138.18h32.1699v47.3594h19.6094c30.25 0 53.4199 15.9502 53.4199 45.3604zM297.94 123l49.0596 138.22h-31.0898l-47.9102 -138.22h29.9404zM404.46 261.22
+h-31.0898l-47.9102 -138.22h29.9404z" />
+    <glyph glyph-name="cotton-bureau" unicode="&#xf89e;" horiz-adv-x="512" 
+d="M474.31 117.59h25.1807c-25.7998 -109.78 -111.4 -173.59 -239.67 -173.59c-154.63 -0.339844 -247.82 92.8604 -247.82 248.18c0 154.63 93 247.82 247.82 247.82c128.399 0 214.06 -63.5098 240.18 -173.61h-25.2598
+c-24.8506 95.6104 -99.9199 148.811 -214.69 148.811c-141.85 0 -223.2 -81.3799 -223.2 -223.2c0 -137.93 76.6699 -218 211.101 -223v49.2002c0 48.1602 -26.5498 74.3896 -74.5498 74.3896c-62.1309 0 -99.4004 37.2803 -99.4004 99.4102
+c0 61.3701 36.5195 98.2803 97.3799 99.0596c30.7402 64.6504 144.24 69.3203 177.24 0c60.8496 -0.779297 97.3799 -37.6895 97.3799 -99.0596c0 -62.0098 -37.2002 -99.21 -99.2002 -99.21c-47.9795 0 -74.3896 -26.3896 -74.3896 -74.3896v-49.1602
+c107.67 3.75977 178.24 56.5 201.899 148.35zM357 265.67c3.7998 -21.0801 11.2695 -104.2 -71.79 -120.75c12.2598 -17.7402 32.9805 -27.3301 61.5898 -27.3301c47.9697 0 74.4004 26.4102 74.4004 74.4102c0 44.6699 -22.8301 70.2197 -64.2002 73.6699zM275.32 168.31
+c72.7803 9.89062 58.5 86.9102 56.2295 97c-72.5596 -10 -58.6895 -86.6592 -56.2295 -97zM260 316l-0.179688 -0.259766c-28.3008 0 -49.1602 -9.66016 -61.5703 -27.3506c28.3701 -5.44922 49.3701 -20.5898 61.5996 -43.4492
+c12.2305 22.8594 33.2305 37.9697 61.5908 43.4492c-12.4404 17.9404 -32.8301 27.6104 -61.4404 27.6104zM188.48 265.28h0.239258c-2.75 -10.0498 -16.1602 -87.1602 56.25 -97c2.41992 10.1895 16.6807 86.4297 -56.4893 97zM173.2 117.59l0.330078 0.0302734
+c28.2998 0 49 9.66992 61.1396 27.2998c-73.0303 14.2197 -78.4004 83.5498 -71.6504 120.75c-41.3594 -3.66992 -64.2197 -29.3096 -64.2197 -73.6699c0 -48.0098 26.4004 -74.4102 74.4004 -74.4102zM226.41 105.2h0.269531
+c14.4902 -7.60059 25.5605 -19.3301 33.5605 -33.8301c6.36523 12.2188 21.4092 27.374 33.5801 33.8301c-14.4902 8.00977 -26.0508 19.0596 -33.8203 33.5498c-6.4248 -12.1094 -21.4736 -27.1396 -33.5898 -33.5498z" />
+    <glyph glyph-name="buy-n-large" unicode="&#xf8a6;" horiz-adv-x="576" 
+d="M288 416c154.73 0 280.21 -100.32 280.21 -224s-125.479 -224 -280.21 -224s-280.21 100.32 -280.21 224s125.479 224 280.21 224zM202.61 58.8096c61.5498 0.600586 99.4697 24.3604 117.71 61.5205c-35.79 6.4502 -62.9307 37.3096 -62.9307 74.4502
+c0 41.7695 34.3408 75.6494 76.6904 75.6494h0.0341797c4.80078 0 12.4951 -0.864258 17.1758 -1.92969c0.524414 1.86621 1.19629 4.93555 1.5 6.84961c6.92969 44.1904 -14.8496 72.8408 -78 72.8408h-133.44l-77.25 -290.74zM358 240.89l-9.4502 -36.75l-15 36.75
+h-31.3398l-26.6299 -90.3096h37.8301l7.83008 35.6299l11.1895 -35.6299h35.4102l22.1602 90.3096h-32zM503.86 58.8096l21.1992 84.0605h-103.869l53.0498 205.36h-92.5l-21.3301 -82.3506c29.3799 -10.5996 50.3799 -38.4102 50.3799 -71.0596
+c0 -41.7803 -34.3496 -75.6504 -76.6904 -75.6504h-0.0625c-3.16504 0 -8.27539 0.37207 -11.4072 0.830078l-15.8398 -61.1904h197.07zM211.7 178.61c16.1494 0 29.7002 -7.51074 24.1396 -29.8203c-5.83008 -23.4697 -21.7998 -26.6504 -37.9395 -26.6504h-24.7002
+l13.7998 56.4707h24.7002zM233 278c18.0703 0 32.2305 1.29004 27.5801 -17.5703c-3.83008 -15.5 -21.21 -30.1396 -39.21 -30.1396h-21.3701l11.6602 47.71h21.3398z" />
+    <glyph glyph-name="mdb" unicode="&#xf8ca;" horiz-adv-x="576" 
+d="M17.3701 287.59h46.2998l42.3301 -117.33l40.7002 117.33h45.5098l12.79 -191.59h-45.5303l-4.79004 77.4297l-25.54 -77.4297h-44.71l-27.9297 79.8301l-5.58984 -79.8301h-43.9102zM298.37 287.59c0 0 93.4199 -1.58984 94.2002 -95.7998
+c0.799805 -96.5898 -94.2002 -95.79 -94.2002 -95.79h-47.9004v191.59h47.9004zM297.17 141.13c0 0 47.5996 5.21973 46.7998 51.5205c-0.799805 46.2998 -46.7998 50.5693 -46.7998 50.5693v-102.09zM535.46 215.37c0 0 33.54 -11.96 33.54 -55.1006
+c0 -68.6396 -87 -63.8496 -87 -63.8496h-45.5195v191.58h51.8994s49.7402 1.44043 55.0801 -34.3203c0.348633 -2.30371 0.630859 -6.06445 0.630859 -8.39453c0 -8.94336 -3.86621 -22.3457 -8.63086 -29.915zM483.56 247.31v-21.5898h12s5.43066 5.33984 4 12
+c-2.42969 11.1807 -16 9.58984 -16 9.58984zM483.46 137.85c0 0 41.04 -4.92969 41.3701 20.7207c0.389648 27.1602 -41.1904 22.4297 -41.1904 22.4297h-0.0800781v-18.2305z" />
+    <glyph glyph-name="orcid" unicode="&#xf8d2;" horiz-adv-x="512" 
+d="M294.75 259.81c58.1299 0 84.6699 -35.2598 84.6699 -76.8994c0 -25.5703 -15.5 -76.9102 -83.1201 -76.9102h-47.4697v153.81h45.9199zM256 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM175.21 79.2402v207.5h-29.8398v-207.5
+h29.8398zM160.29 310.38c10.7646 0.0380859 19.5312 8.80566 19.5703 19.5703c0 10.8027 -8.76758 19.5693 -19.5703 19.5693s-19.5703 -8.7666 -19.5703 -19.5693s8.76758 -19.5703 19.5703 -19.5703v0zM300 79c68.3799 0 110 50.6104 110.04 103.89
+c0 49.0205 -33.71 103.851 -110.44 103.851h-80.5996v-207.74h81z" />
+    <glyph glyph-name="swift" unicode="&#xf8e1;" 
+d="M448 291.91c0 -5.35059 -0.000976562 -10.7002 0.00878906 -16.0498v-183.771c-0.0292969 -4.50977 -0.0800781 -9.00977 -0.200195 -13.5098c-0.0966797 -8.1748 -1.25781 -21.3545 -2.58984 -29.4199c-1.38477 -8.11035 -5.51465 -20.6543 -9.21973 -28
+c-7.66406 -15.0459 -26.0898 -33.4854 -41.1299 -41.1602c-7.34766 -3.69824 -19.8916 -7.82422 -28 -9.20996c-8.07129 -1.32715 -21.2607 -2.4873 -29.4404 -2.58984c-4.51953 -0.120117 -9.00977 -0.200195 -13.5195 -0.200195h-199.79
+c-4.52051 0.0302734 -9.02051 0.0800781 -13.5205 0.200195c-8.17676 0.0976562 -21.3613 1.25781 -29.4297 2.58984c-8.1084 1.38379 -20.6523 5.50977 -28 9.20996c-15.0342 7.67676 -33.4609 26.1113 -41.1299 41.1504c-3.70508 7.3457 -7.83496 19.8896 -9.21973 28
+c-1.3252 8.06543 -2.48145 21.2461 -2.58008 29.4199c-0.129883 4.50977 -0.209961 9 -0.209961 13.5098v199.83c0.0292969 4.51953 0.0800781 9.00977 0.209961 13.5195c0.0888672 8.16797 1.22754 21.3389 2.54004 29.4004c1.38672 8.10938 5.5166 20.6533 9.21973 28
+c3.74121 7.34473 11.5146 18.0293 17.3496 23.8496c1.74023 1.7207 3.55078 3.39062 5.43066 5c4.6748 3.99805 12.9141 9.51758 18.3896 12.3203c2.2334 1.11328 4.50391 2.15332 6.81152 3.12012c5.67188 2.31348 15.1738 5.04688 21.21 6.09961
+c6.04688 1.03516 15.9297 2.07422 22.0596 2.32031c2.45996 0.120117 4.91992 0.200195 7.37012 0.269531c4.51953 0.120117 9.00977 0.200195 13.5195 0.200195h199.75c4.52051 -0.0292969 9.01074 -0.0800781 13.5205 -0.200195
+c8.17676 -0.0976562 21.3613 -1.25781 29.4297 -2.58984c8.11035 -1.38281 20.6543 -5.51367 28 -9.21973c15.0547 -7.66211 33.4941 -26.0977 41.1602 -41.1504c3.70117 -7.34668 7.83105 -19.8906 9.21973 -28c1.3252 -8.06543 2.48047 -21.2461 2.58008 -29.4199
+c0.120117 -4.51953 0.200195 -9.00977 0.200195 -13.5195zM378.119 50.9102c4.91016 -9.58008 15.3604 41.1797 -23.1602 88.5801c0.490234 1.68945 1 3.35938 1.44043 5.08984c18.5996 74.0801 -26.79 161.67 -103.58 207.75
+c33.6494 -45.6201 48.5293 -100.87 35.3096 -149.2c-0.970703 -3.50098 -2.83398 -9.08789 -4.16016 -12.4697c-1.72949 1.14941 -3.84961 2.41992 -6.72949 4c0 0 -76.3906 47.1699 -159.181 130.59c-2.16992 2.2002 44.1504 -66.25 96.7207 -121.74
+c-24.7803 13.9004 -93.7803 64.1201 -137.48 104.12c4.60156 -7.57031 13.0146 -19.1738 18.7803 -25.8994c36.4902 -46.2207 84.0898 -103.37 141.09 -147.221c-40 -24.4902 -96.6396 -26.3994 -153 0c-11.4521 5.37598 -29 15.8457 -39.1699 23.3701
+c21.3398 -33.9365 68.5098 -74.4219 105.29 -90.3701c53.3203 -22.9199 106.35 -21.3799 145.85 -0.379883l0.419922 0.25c1.77051 1 3.53027 2 5.25 3c19.0801 9.7998 56.3105 19.46 76.3105 -19.4697z" />
+    <glyph glyph-name="umbraco" unicode="&#xf8e8;" horiz-adv-x="510" 
+d="M255.35 440c136.99 -0.169922 247.83 -111.31 247.65 -248.28c-0.179688 -136.97 -111.15 -247.67 -248 -247.67c-137 0.0703125 -248.07 111.271 -248 248.271c0.139648 136.96 111.36 247.85 248.35 247.68zM400.35 174
+c0.296875 4.31738 0.518555 11.3311 0.518555 15.6582c0 4.16406 -0.222656 10.9141 -0.498047 15.0693c-0.354492 12.1631 -1.97168 31.8213 -3.61035 43.8799c-1.87012 13.2197 -3.56934 22.3799 -5.38965 32c-1.02051 4.87988 -1.28027 6.39941 -1.83008 8.44922
+c-0.489258 2.14746 -2.67285 3.89062 -4.875 3.89062h-0.0253906h-0.819336l-32 -5c-2.31934 -0.375977 -4.20117 -2.58691 -4.20117 -4.93555c0 -0.0175781 0.000976562 -0.046875 0.000976562 -0.0644531c-0.00878906 -0.106445 -0.0146484 -0.27832 -0.0146484 -0.384766
+s0.00585938 -0.279297 0.0146484 -0.385742l1.68945 -8.7793c1.60645 -8.86719 3.23633 -20.0938 4.88965 -33.6807c1.35156 -11.5938 2.5166 -30.4775 2.59961 -42.1494c0.266602 -26.9072 -2.44336 -46.834 -8.12988 -59.7803
+c-5.01953 -11.3809 -18.9746 -22.6836 -31.1504 -25.2305c-13.7178 -2.9043 -36.2324 -5.26074 -50.2549 -5.26074c-1.93652 0 -5.0791 0.0449219 -7.01465 0.101562h-10.25c-1.9668 -0.0576172 -5.15918 -0.104492 -7.12695 -0.104492
+c-14.0098 0 -36.5059 2.34863 -50.2129 5.24414c-12.2217 2.49805 -26.248 13.7793 -31.3105 25.1797c-5.60645 12.9336 -8.31641 32.877 -8.12988 59.8301c0.0820312 11.6738 1.26562 30.5576 2.64062 42.1504c1.62012 13.6201 3.2334 24.8467 4.83984 33.6797
+l1.7002 8.78027c0.0078125 0.105469 0.0146484 0.27832 0.0146484 0.384766s-0.00683594 0.279297 -0.0146484 0.384766v0.0126953c0 2.33398 -1.86426 4.56836 -4.16016 4.9873l-32 5h-0.69043c-2.18848 -0.0195312 -4.38379 -1.7627 -4.89941 -3.88965
+c-0.540039 -2.03027 -0.820312 -3.57031 -1.82031 -8.4502c-1.83008 -9.41992 -3.52051 -18.6094 -5.40039 -32c-1.63184 -12.0586 -3.24414 -31.7168 -3.59961 -43.8799c-0.290039 -4.2334 -0.525391 -11.1123 -0.525391 -15.3545
+c0 -4.24316 0.235352 -11.1221 0.525391 -15.3555c0.766602 -27.0928 5.43359 -48.7598 14 -65c8.57324 -16.2061 23.0801 -27.873 43.5195 -35c20.4404 -7.12695 48.9209 -10.6172 85.4414 -10.4697h4.59961c36.5605 -0.15332 65.0439 3.33691 85.4502 10.4707
+c20.4336 7.12012 34.9365 18.7871 43.5098 35.001s13.2402 37.8809 14 65.001z" />
+    <glyph glyph-name="firefox-browser" unicode="&#xf907;" horiz-adv-x="512" 
+d="M130.63 324.51c0.160156 -0.00976562 0.0800781 -0.00976562 0 0zM482.05 279.16c15.2803 -36.7598 20.6709 -80.748 15.8213 -122.578c-0.370117 -3.15039 -0.700195 -6.29004 -1.11035 -9.41016c-19.6094 -115.04 -119.79 -202.62 -240.43 -202.62
+c-134.71 0 -243.92 109.19 -243.92 243.891v1.23926c0.149414 2.70996 0.30957 5.41016 0.490234 8.12012c0.0498047 0.240234 0.0498047 0.480469 0.0498047 0.719727c0.439453 6.29004 0.870117 10.3105 1.43945 14c0.240234 1.91309 0.5 3.82617 0.780273 5.73926
+c1.66992 12.2705 3.94043 22.21 4 22.4805c4.9502 22.2051 19.6123 55.3125 32.7305 73.8994v0c5.65527 8.06738 15.8564 20.3115 22.7695 27.3301c6.08203 6.21973 16.7627 15.3721 23.8398 20.4307c0.930664 0.629883 8.03027 4.83984 8.15039 4.30957
+c-0.570312 -8.42969 -1.24023 -48.8301 8.42969 -61.0801h0.120117c14.1602 15.9199 33.6504 33.96 58.71 45.3701c-2.02344 -7.75098 -3.66504 -20.543 -3.66504 -28.5537c0 -8.74512 1.95117 -22.668 4.35547 -31.0762
+c1.81641 -1.21777 4.64258 -3.35449 6.30957 -4.77051c3.71973 -3.14941 7.91992 -7.34961 16.7705 -16.0596c16.5498 -16.3096 59 -33.1797 59.0898 -35.1797c-0.400391 -6.08008 -21.8301 -27 -29.3301 -27c-69.3701 0 -80.6201 -41.9502 -80.6201 -41.9502
+c3.07031 -35.3301 27.6699 -64.4102 57.5098 -79.75c1.36035 -0.730469 2.74023 -1.37012 4.12012 -2c2.36035 -1.04004 4.74023 -2.02051 7.16016 -2.92969c8.50586 -3.00977 22.7246 -5.75195 31.7402 -6.12012c121.569 -5.7002 145.13 145.34 57.3896 189.199
+c22.4697 3.91016 45.8203 -5.12988 58.8203 -14.2793c-8.68652 15.1641 -27.7988 34.9346 -42.6602 44.1299c-0.993164 0.620117 -1.99316 1.21973 -3 1.7998c-1.55957 0.913086 -3.13965 1.79004 -4.74023 2.62988c-0.75 0.390625 -1.5 0.759766 -2.25 1.12988
+c-1.65332 0.813477 -3.32031 1.59668 -5.00098 2.34961c-1.07031 0.469727 -2.16016 0.910156 -3.25 1.34961c-1.33984 0.580078 -2.68945 1.08008 -4.0498 1.58008c-1.86035 0.669922 -3.73047 1.2998 -5.62012 1.87012c-0.679688 0.209961 -1.33008 0.429688 -2 0.629883
+c-9.20996 2.66309 -24.4668 4.82422 -34.0537 4.82422c-0.275391 0 -0.72168 -0.00195312 -0.996094 -0.00390625c-2 -0.0205078 -4 -0.100586 -6 -0.220703l-1.41992 -0.0996094c-12.1934 -0.852539 -31.0586 -5.78027 -42.1104 -11l-0.519531 -0.209961
+c-0.536133 -0.18457 -1.43066 -0.334961 -1.99805 -0.334961c-2.40918 0 -5.00391 1.84863 -5.79199 4.125c-0.210938 0.575195 -0.381836 1.53906 -0.381836 2.15137c0 2.13965 1.55469 4.64746 3.47168 5.59863c12.6738 6.01074 34.3252 11.5342 48.3301 12.3301
+c5.7793 35.3994 28.2695 91.0098 82.5 122.78l-0.100586 -0.140625l0.180664 0.100586l0.120117 0.0693359c0.0615234 0.0166016 0.165039 0.0302734 0.229492 0.0302734s0.167969 -0.0136719 0.230469 -0.0302734c0.303711 -0.0380859 0.550781 -0.318359 0.550781 -0.625
+c0 -0.00976562 -0.000976562 -0.0253906 -0.000976562 -0.0351562c0.698242 -2.77051 2.3291 -7.08008 3.63965 -9.61914c0.830078 -1.70996 1.69043 -3.40039 2.69043 -5.05078c1.87988 -3.21973 3.80957 -6.2793 5.73926 -9.33008
+c38.2002 -60.3594 84.9707 -88.0791 112.551 -156.829c-0.0507812 0.269531 -0.0507812 0.40918 -0.0507812 0.40918c-3.0293 20.1201 -10.9795 47.1104 -24.6992 74c16.8594 -8.72949 38.3301 -36.2295 48.9395 -61.7295z" />
+    <glyph glyph-name="ideal" unicode="&#xf913;" horiz-adv-x="576" 
+d="M125.61 282.52c27.0693 -0.0107422 49.0488 -21.9893 49.0596 -49.0596v-0.00976562c0 -27.0869 -21.9834 -49.0703 -49.0703 -49.0703c-27.0859 0 -49.0693 21.9834 -49.0693 49.0703s21.9834 49.0693 49.0693 49.0693h0.0107422zM86.1504 22.1602v140.52h78.9395
+v-140.52h-78.9395zM237.61 233.76c0 -20.4502 -8.99023 -23.2598 -18.7402 -23.2598h-14.0498v45.79h14.0498c8.74023 0 18.7402 -2.53027 18.7402 -22.5303zM439.3 187.76h57.0898c-1.7793 -98.4795 -52.1094 -165.64 -196.72 -165.64h-94.8301v165.62h14
+c25.9805 0 41.5 17.1895 41.5 46c0 27.9102 -15.8994 45.2598 -41.5 45.2598h-14v82.8096h94.8301c88.9404 0 186.83 -26.8896 196.07 -151.31h-33.6904v68.5703h-22.75v-91.3105zM329.55 187.76l-0.0400391 22.7402h-33.5098v12.5h30v22.6904h-30v10.5791h31.7305v22.7305
+h-54.4307v-91.2402h56.25zM404.21 187.76l23.6699 -0.0195312l-27.5303 91.3398h-32.3496l-27.5303 -91.3203h23.6602l5.17969 17.6699h29.7402zM299.65 416c218.35 0 250.97 -140 251 -223.48c0 -144.789 -89.1504 -224.52 -251 -224.52h-267.65v448h267.65z
+M299.65 -10.9199c148.899 0 229.899 69.3496 229.899 203.439c0 137.801 -87.7998 202.41 -229.899 202.41h-246.58v-405.85h246.58zM383.51 253.93h1.37012l7.52051 -25.8096h-16.4004z" />
+    <glyph glyph-name="microblog" unicode="&#xf91a;" 
+d="M399.36 85.7695l0.149414 0.0605469c-12.0234 -13.6182 -21.7812 -39.4141 -21.7812 -57.5811c0 -16.3584 8.10547 -40.1514 18.0918 -53.1094c0.521484 -0.658203 0.944336 -1.87402 0.944336 -2.71387c0 -0.25293 -0.0419922 -0.658203 -0.0947266 -0.90625
+c-0.40332 -1.94336 -2.34277 -3.52051 -4.32715 -3.52051c-0.249023 0 -0.649414 0.0410156 -0.892578 0.0908203c-32.2803 7.17969 -61.3105 24.8301 -79.8906 49.9199c-1.18652 1.62598 -3.78516 2.94629 -5.79785 2.94629
+c-0.658203 0 -1.69824 -0.172852 -2.32129 -0.385742c-21.1924 -7.41895 -56.6133 -13.4404 -79.0654 -13.4404h-0.375c-122.86 0 -222.46 91.4805 -222.46 204.43c0 112.95 99.5996 204.44 222.46 204.44s222.46 -91.4902 222.46 -204.44
+c0 -47.4492 -17.6104 -91.0996 -47.0996 -125.79zM329.52 235.6c1.4209 1.07617 2.57422 3.36816 2.57422 5.15039c0 3.5625 -2.8916 6.47461 -6.4541 6.5l-71.8799 1.50977l-23.6602 67.9199c-0.836914 2.41113 -3.58789 4.36719 -6.13965 4.36719
+s-5.30273 -1.95605 -6.13965 -4.36719l-23.6602 -67.9199l-71.8799 -1.50977c-3.51953 -0.0673828 -6.375 -2.97949 -6.375 -6.49902c0 -1.7832 1.15332 -4.10449 2.5752 -5.18066l57.2998 -43.4902l-20.79 -68.8604
+c-0.152344 -0.505859 -0.276367 -1.3457 -0.276367 -1.87402c0 -3.59375 2.91699 -6.51074 6.51074 -6.51074c1.12598 0 2.79102 0.522461 3.71582 1.16504l59.0596 41.0801l59.0596 -41.0498c0.925781 -0.646484 2.59277 -1.1709 3.72168 -1.1709
+c3.58789 0 6.5 2.91211 6.5 6.5c0 0.533203 -0.125977 1.38086 -0.28125 1.89062l-20.7803 68.8604z" />
+    <glyph glyph-name="pied-piper-square" unicode="&#xf91e;" 
+d="M32 29l-32 -60.2002l0.799805 328c0 65.9004 53.2002 119.2 119.2 119.2h327.2c-93 -28.9004 -189.9 -94.2002 -253.9 -168.6c-70.5996 -81.4004 -110.7 -137.4 -161.3 -218.4zM448 416c0 0 0 -328.8 0.0996094 -328.8c0 -65.9004 -53.2998 -119.2 -119.3 -119.2
+h-328.399c18.5 25.5 61.6992 54 84.8994 66c35.5 18.0996 76.4004 28.5 105.3 56.2998c42.1006 40.5 47.8008 105 71 158.601c43.6006 100.3 186.4 167.1 186.4 167.1z" />
+    <glyph glyph-name="unity" unicode="&#xf949;" horiz-adv-x="576" 
+d="M498.11 241.6l-30 -49.5996l30 -49.6299l-52.8008 -191.62l-197.079 51.3604l-29.2402 50l-59.1699 -0.430664l-144.28 140.32l144.26 140.29l59.2002 -0.429688l29.2002 50.0596l197.109 51.3604zM223.77 323.8l-108.899 -108.13h173.13l86.5498 145.82zM223.77 60.1699
+l150.78 -37.6895l-86.5498 145.81h-173.13zM416.77 46.1699l41.79 145.83l-41.8096 145.84l-86.5801 -145.84z" />
+    <glyph glyph-name="dailymotion" unicode="&#xf952;" 
+d="M298.93 181c6.01074 -3.36719 13.6152 -10.9834 16.9727 -17c3.36719 -5.95801 6.10059 -16.3477 6.10059 -23.1914c0 -0.0771484 -0.000976562 -0.202148 -0.000976562 -0.27832c-0.0332031 -13.6602 -4.58691 -25.084 -13.6602 -34.2705
+s-20.4434 -13.7793 -34.1104 -13.7793c-13.4336 0 -24.5771 4.47949 -33.4307 13.4395s-13.2803 20.4932 -13.2803 34.5996c0 13.4336 4.53711 24.5742 13.6104 33.4209s20.2197 13.2695 33.4395 13.2695c0.174805 0.00195312 0.458984 0.00390625 0.633789 0.00390625
+c6.99805 0 17.627 -2.7832 23.7256 -6.21387zM0.00195312 416h448v-448h-448v448zM374.712 42.7402l-0.0302734 264.349l-55.79 -12.0898v-77.9199c-7.81348 7.86035 -16.1465 13.5273 -25 17.001c-7.625 2.88086 -20.4277 5.21777 -28.5791 5.21777
+c-0.320312 0 -0.839844 -0.00292969 -1.16016 -0.0078125c-17.6934 -0.00683594 -33.6006 -4.37305 -47.7207 -13.0996c-11.8623 -7.32227 -26.6152 -23.3516 -32.9297 -35.7803c-7.83984 -15.1064 -11.7598 -31.8467 -11.7598 -50.2197
+c-0.00683594 -18.8066 3.85645 -35.7705 11.5898 -50.8906c6.26367 -12.4766 21.0205 -28.502 32.9395 -35.7695c14.2197 -8.7334 30.5166 -13.1006 48.8906 -13.1006c26.6602 0 45.2539 8.7334 55.7803 26.2002h0.669922v-23.8896h53.0996z" />
+    <glyph glyph-name="instagram-square" unicode="&#xf955;" 
+d="M224 245.34c29.4326 -0.0107422 53.3379 -23.9072 53.3604 -53.3398c0 -29.4434 -23.8965 -53.3398 -53.3408 -53.3398c-29.4434 0 -53.3398 23.8965 -53.3398 53.3398c0 29.4326 23.8877 53.3291 53.3203 53.3398zM348.71 286.34
+c8.34961 -21.0703 6.46973 -71.0596 6.46973 -94.3398s1.91992 -73.3301 -6.42969 -94.3301c-4.75 -12.0371 -18.373 -25.6602 -30.4102 -30.4102c-21.0596 -8.35938 -70.9902 -6.42969 -94.2998 -6.42969s-73.3096 -1.86035 -94.3096 6.42969
+c-12.0371 4.75 -25.6611 18.373 -30.4102 30.4102c-8.32031 21.0703 -6.4707 71.0605 -6.4707 94.3398c0 23.2803 -1.84961 73.3301 6.43066 94.3301c4.74902 12.0371 18.373 25.6602 30.4102 30.4102c21.0596 8.36035 71.0098 6.42969 94.3096 6.42969
+s73.2998 1.86035 94.2998 -6.42969c12.0371 -4.75 25.6602 -18.373 30.4102 -30.4102zM224 110h0.0996094c45.209 0 81.9004 36.6914 81.9004 81.9004v0.0996094c0 45.2637 -36.7363 82 -82 82s-82 -36.7363 -82 -82s36.7363 -82 82 -82zM309.38 258.3
+c10.5381 0.00585938 19.1299 8.52246 19.1299 19.0605v0.0800781c0 10.5645 -8.57422 19.1396 -19.1396 19.1396s-19.1396 -8.5752 -19.1396 -19.1396c0 -10.5654 8.57422 -19.1406 19.1396 -19.1406h0.00976562zM400 416c26.4961 0 48 -21.5039 48 -48v-352
+c0 -26.4961 -21.5039 -48 -48 -48h-352c-26.4961 0 -48 21.5039 -48 48v352c0 26.4961 21.5039 48 48 48h352zM382.88 126c1.49023 26.4404 1.49023 105.56 0 131.88c-1.21973 25.6299 -7.17969 48.3506 -25.8496 67.0498c-18.6699 18.7002 -41.3701 24.5605 -67 25.8506
+c-26.4102 1.48926 -105.59 1.48926 -132 0c-25.5303 -1.2207 -48.2207 -7.12012 -67 -25.7803c-18.7803 -18.6602 -24.5605 -41.3701 -25.8506 -67c-1.48926 -26.3896 -1.48926 -105.58 0 -132c1.2207 -25.5801 7.11035 -48.2998 25.8506 -67
+c18.7393 -18.7002 41.3701 -24.5596 67 -25.8496c26.4102 -1.49023 105.59 -1.49023 132 0c25.5996 1.21973 48.29 7.18945 67 25.8496s24.5596 41.3701 25.8496 67z" />
+    <glyph glyph-name="mixer" unicode="&#xf956;" horiz-adv-x="512" 
+d="M114.57 371.93l128.319 -172.399c1.27148 -1.75781 2.30371 -4.94531 2.30371 -7.11523s-1.03223 -5.35742 -2.30371 -7.11523l-128.89 -173.24c-7.56738 -10.1514 -23.9863 -18.3916 -36.6484 -18.3916c-9.7998 0 -23.6211 5.36816 -30.8516 11.9824
+c-17.8496 16.1797 -18.9697 43.5195 -4.74023 62.7695l92.3301 124.15l-91.7803 123c-14.25 19.25 -12.8291 46.5898 4.75 62.7695c7.23145 6.61719 21.0557 11.9873 30.8574 11.9873c12.665 0 29.0859 -8.24219 36.6533 -18.3975zM470.24 68.4199
+c14.2295 -19.25 13.1094 -46.5898 -4.73047 -62.7695c-7.23145 -6.61719 -21.0557 -11.9873 -30.8574 -11.9873c-12.6641 0 -29.085 8.24121 -36.6523 18.3965l-128.57 173.5c-1.27148 1.75879 -2.30273 4.94629 -2.30273 7.11523
+c0 2.16992 1.03125 5.35742 2.30273 7.11523l128 172.12c7.56738 10.1553 23.9883 18.3975 36.6533 18.3975c9.80176 0 23.626 -5.37109 30.8574 -11.9873c17.5791 -16.1807 18.9697 -43.5205 4.75 -62.7705l-91.7803 -123z" />
+    <glyph glyph-name="shopify" unicode="&#xf957;" 
+d="M388.32 343.9c0.399414 -2.40039 54.4395 -367.9 54.4395 -367.9l-125.689 -31.2002v432.73c8.00977 -8.01074 29.6201 -28.8301 29.6201 -28.8301s35.2295 -0.799805 37.2295 -0.799805c2.12891 -0.0986328 4.10059 -1.89062 4.40039 -4zM288.65 377.53
+c9.20996 2.7998 13.6006 4.22461 14.8096 4.39941s3.17969 0.354492 4.40039 0.400391v-438.33l-302.58 52.4805s36.7998 281.819 38 291.819c1.58984 13.2002 2 13.6006 16 18c0.399414 0.400391 19.6094 6.41016 47.2295 14.8105
+c2.82031 21.2197 13.21 48.4395 26.8203 70.0596c19.25 30.8301 43.25 48.0303 67.25 48.8301c12.4199 0.370117 22.8203 -3.62988 30.8203 -12.4004c0.399414 -0.799805 1.19922 -1.19922 1.59961 -2c0.947266 0.226562 2.50586 0.40918 3.47949 0.40918
+c0.143555 0 0.376953 -0.00390625 0.520508 -0.00878906c18.4199 0 34 -10.8496 44.4404 -30.8604c2.3877 -4.69727 5.61719 -12.5869 7.20996 -17.6094zM233.41 360.31c0.399414 13.21 -1.2002 32.8301 -8.00977 47.2002
+c-6.80078 -3.2002 -12.8105 -8.41016 -17.21 -12.8096c-11.21 -12.3701 -20.8203 -31.1807 -25.6201 -50c17.21 5.20996 34.8398 10.8096 50.8398 15.6094zM200.58 423.56c-36.8301 -0.799805 -69.25 -58.8398 -78.0098 -97.2295c13.1699 4 27.5801 8.40039 42 12.8096
+c4.7998 24.4502 16.4102 50.0303 31.6201 66.4502c6 6 12.4092 11.21 18.8096 14.4102c-3.48047 1.97266 -9.55273 3.57324 -13.5537 3.57324c-0.239258 0 -0.626953 -0.00585938 -0.866211 -0.0136719zM154.15 203.39c-0.400391 4.81055 0 23.6104 29.6191 25.6201
+c20.4209 1.60059 37.6309 -6.39941 37.6309 -6.39941l15.21 57.5996s-13.2305 6.41016 -39.2305 4.80957c-67.25 -4.40918 -97.6699 -51.2393 -94.4697 -97.6797c3.59961 -55.2402 58.8398 -53.2402 60.8398 -86.8594
+c0.410156 -8.01074 -4.80957 -19.6201 -18.8096 -20.4209c-21.6201 -1.59961 -48.4404 18.8203 -48.4404 18.8203l-10.4004 -44s26.8203 -28.8203 75.6504 -25.6201c40.4297 2.41016 68.4502 34.8301 65.6504 82.4707c-4 60.4395 -71.6504 66.0498 -73.25 91.6592z
+M249.42 365.12c8.80664 2.7998 16.8135 5.2002 24.0205 7.2002c-4.01074 12.4297 -12.8105 32.8301 -31.2305 36.4297c5.61035 -14.4102 7.20996 -31.6299 7.20996 -43.6299z" />
+  </font>
+</defs></svg>
diff --git a/web/css/fonts/awesome5/fa-brands-400.ttf b/web/css/fonts/awesome5/fa-brands-400.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..948a2a6cc76a4d7cb692d0d08e352f126ec48a9d
GIT binary patch
literal 132728
zcmeFad7K?pnLk{o_Py%fs#|sUed&F<x9`2(old9Iot-3PPY6j!LLlt21VjW35s+O_
zR8YjQ2#5=)$RHya)Sohl$WI)`VNk-jAu<l>1OhtKdB3M_cL<E{=l#9^zMuD|>)tx2
zPMtc-bDrh<Jg34ChG7h5H^VV27A#n^?4}2XS2C=)3AxFI^X4yLI>--^9zi;N{OaE7
zxV7#9h9Mh}-g@%c+s^%uAO6{782M`qBfP$I+Xd$yIf9y4aRArloo9XI)HB!rbc|ub
zE<^tH<<m~twj&x__cpG*jH7WHGWZ7fpQz78x_H{zyDnaJkN8=nA7dEt&{-ckdD{b-
zsLC+rZ4AR*diJ)9&t=Qp@wh&S^4W8?oqfu+H$MIxL;n0Go`2Q3AG%<d{>8*O3^{Ny
z!?@pL&^K}%tN-`@@tr4GBX2Ppi`y9Hr8}={oBr)R@|PozvR9G)NXty?GH$}(z9ah>
zhTV<p2iU7<&aofzL{R1lZYfg<^68x<C^a@+jwgR6H!}jVmy%PFw{ZIREhffXiJBRK
zn=bi*pB1Oh-@)vD^NM%Z2W{vf&oXOJBxnH{CSS&RmLW4uWgf((eeXZ$H5@X*s07FK
zb#^zS2W9sM*BP?==r6~PF(%o4<Osda+PH5w!yc^{^`JhHj4@J>2Wkn*jRntDf@k4A
za&C|go{9RxN87PG$PdlbceMOICPH2d>Xw6RZ!$8yC#ZYoxAn~IG0%IiPqcqyxS!UK
zBX}N7GmJXZ@0t2=J%TzUc8oEQN5?OUJVNh7zKDG0?;cEWz4eTJOwV*X4E#FN=OUgj
z2ImaJ&$NZ6r|WL@XY9z4;2IsvvDQJ`NZW@)VaJZVi@uQHzJ18s9pnddi0kYzWodmG
z9Q2t-$CTcOawZOr{3>WO9n0`cJ@}pJYZlLmvCNVG#&wt8cg&Fm%>^_t^St2Neg^pr
zPtS4Bd*i<k<J=n4pncQ#$TR&8%1+l$&+*Jw-TRp6bh~KYyTLQ|F*a7)6v_p(5L_R_
zJ-dVZ{)=9lem=(J$eYL3J)PegyQL_98olqxe+BJ$4CiBv7nI+RIhd|Lc;?>ea{H&p
z0BN%S2%d%C);+DhAl<qTykG^|ck^`l-At0!iz9|-WpS`rrokGc`54Q$f@}M5zWd0#
zIQP-^|D5hGy{|R)yMsD{wKbi`26Rp5Gdo>|)<Nlg=0KVq!?7EAv^~g2dS?BEgEX#z
zuKr3Mrek;HZ^3iv{rirVe{U|IZRO3h4Zl2j3}cA0>==$|S~})>Yt8M(nqpdY;<wfJ
z-P6z57u-kNBw}1>pFoeGyD?nf4H`r_TnpM9oYVC5JmWc_2bvD*;!r+F<5vpub~75v
z&~uX=LmBj)Jo(;pgLY5fPumrg*?r_-aPQ0*{=fL0Zik6_O?H0kIjFZaeppYzc+>R0
z;7GhLP3H#k6bGeIjb1}PXk8BSX67uQhne;v-$$QJnhx&8FRdHvWeWF(gY%<#t#Jy<
zjxjzv#;~{tYn=WDYs#O#_ixkn1?!LIp|1CM0Bt87|IY>Mgg#e6nMjb=YBP_zgT5i3
z!}Xc|>Nt;}E_x5<B;YOdoc4{jB^5ji&%-&L3n@5oJ;<K||83=Gkq*`|u3N|4lg7Eg
zfVWK_$(B6ie}^0@8IugpKaJM(AR#e5Z|-^XhBrU;<`>@l=Qm$H;2dZi7&)-<!089h
zIdI;AT?Z~daK(Wu58Qa*)&sX4_`-oZ4?K9_9}YZu;MoKJa^Oz~{&L{0Np4b^G$*~u
z>SS|rbaLtBmdP_G&zU@T^76?&lh;k&I(hr#eUsmqd}Q*m$sbR?H2Is!{RcN4yzt;<
z2X`O5>fkj8KY8$T2S0!CO9$^g_^pFa9Nc&CM+cui`0T;w559cxm4m-K_{PEiJb3Wn
zy9cKZ35SeB{-NBV!lC{{%MPtNwEoZuhyMA{?+?BEmiyMH-n#Rxd)|8Bt#7^cowuHR
z>&I_B`_|9jI`G!vxBmLJ^>+B}Id6}@{l&K*di$BTpMCq~!~Eg?!<!FZeE6e>uR46~
z;TsR%a`^Vc-#q;7!{0mn<HIi;e(~_DhkyId?03fBx$~X--g)MoU%d0`JFmSfz3aRi
ze>eT^;&)fQyB-=F^X3)7c-{WyFQ&(97RGDmfin-Bd*FftA33la<8^H?UZ2N!?LF|w
zf$tr7=D_m@{&?U&4!k+ZPRf(Uq&?Y>@fw~y4&$|T@@$OPrIWiSublk!<Yy<pJo%N$
zhcRA1n*8U<UkBrL+QEwte(d1KF<#dnyyf8S2fujmu7md-d<5h5!-GFQ_zcGD7Z|Ts
z5B}lcUoc*8VZ7Kw(xK3y7{;q~%y|9o&>!DY{}0FOpQgvFFBq>&rpN2%!=F3+5XS2t
zr^o9RjMu<BbN+9~YweLE)*kC4)-LNDYtZU8|I2*Ie9`=_`E~Pa=2y)J&HKzRoA;Ps
zGH*9OYktQ3wD~FXTJtLN67$36Y33>B4s(OK#$0KxFdJso>@$m|V}{L;X`6z{o1F1C
z<FCel8vkLuVf@MXjq$wkobfYbm9fy6Z_G2sjWJ`?m~D(0!^V&?Xf%zwQ8TJWztLlK
z8=Xdn(QdREC8KC$jg*lzVn)>P4Nw1@epo-KPwF4mPuEY=H)#K+J+D2hJ*|CTdqVq;
z_6_YT+Wp$q+7;Tzv@^BSwb|M%^;PwG^&iwn)%(@m>RPo!wN*<MRZeA;Ddk<|cgk;-
zmz5WkpD6!Jc|!S~a+Y$YVk?UL2l*BGf6G6Wzb@Y`-yz>Fe@NabpVC^VSfT&_=l^g7
zhzLG5T{ckj!5ZK9nYsAB%>U0OHZnIcFO$9GHP&Tc;>Nj0d7dBPFXrD6Y++E?AUq?g
z;<$LT_?Y;Hv|D;adQs-(G5IF>dHFBOfTnBbYy0&P{TlsoBX4}qc+)%;>+&^ghqd1}
z?GgJl`wyXWLr;d;@QUzF;lH?|dvzooIXCi4Z`gal*ZrPoNA#@dW3h|lO#H>f?qo-D
zMe?@fA5vRVze&sKYtnCK8kt9O3-V%7El!pmEGNr*D}3e2${X!=`)K=>?Z4^R*m-g1
zV_iL6S9cxiPIqtVzPvBmx4mzF|5^P{R@2ob)jhT0+MNUPz><N->c4EH8-Hy!nxAd{
zVelJ6qeH8PZXSAYI68dmtn{qyv#uPGM=l?^Z+3C^<+Gohy?-=3x^eW;IqaO9$Lz67
z$KIKH-FSNZu?c=+@5JQ%`24N&A6;<Hg2xwbS@@}iUt9FZ;_~9Vm#kRw(sAx_8<$?W
z^vz|Pmc6+AvE{!ze%<kpulU2tjVqs7_26oL^@`Pd*F3tGS^KGV`nv7w4z1s@{+SK(
zhBX_mK4Hnm^u{F{FWU5j&GR-ty!kI%F4}VEmVGCsPr7-lxV3HDu5Ax&dv<%*_O08W
z+3}4Xlc(Hw%1fs%IrVF&K6C2ZJGY-vJagBX51h5}tlQ2yboN<iKYi|%=b7hiIq%8y
zcb&iQ{6iPqw`*kA-d#^$c*ceIUgTcXchRPcK6}v*KD_b6uV0+K_`Z+aafy4$*DiVH
zqw$Ykcj;d)TYA~v%cGZXx%|bCt^3#=yUV-R?SAfxfh#s%v3n1@XTzTFeLQ~Uyen_L
z>e8$3yXxPsX0Lwm6HBl8_iI;Nx8S<ZUO#sIb2ohIM)AgLZhY{@CvV#E$?zx7x_R=J
zi$3+MPcxr>=QB5a=E2WA_t|G}+i}~yxBcMu2X6nt=TH6oZJ&Scj&tr*@66u0;?6yH
zK7Z%yU;6CcReNu`%f4&!?sa$HcK2WJIrW~$?|I|iv3qa5_b*?b_vQWfU4Gw-_jld@
z_yae6CH$339~2+F`>P{gJ?(4u*Y&SI{P6fA_kL%^clJJd);~P(*sjN;k8gPVj>lj6
z$DV(@_j~U5u6d&Gi5*Wo`@}m>_B^@k`{UpL{11D6`1((-dxm*t!!s}a^qil&KX3d(
z|3%v`mj7bUFJ61$@)utJ<&Iz8{m;c0$6vho#r^-X=3g%Tmv>%@zO>_|yI=anzkUAY
z@XHVU+WYn7Z??a3=_|k5Kd}G&SL3h#^0#;YcJg-*{C?#3kNtk?4_p7J|M8MPzVTYe
zYrp){($~e;FMs{TKihvE{qycO%r}<4@fWJ39obLzk-dz?%mO#6dXbPT7IOJ=Jv7j$
z35}*G(W6|*i+;HxM%*;PZ^ZR{v63b=v5>ELwdyFT50IPPWYV45OTS64V>(Vmc0DJV
zX_Hph71@++GwqwUn2!{@6{)8=w4t5sJ$l1dH~A&gm082r`AA<*7_-7^BrFn{M2iB)
zy0Iil53lK_njyI2beoGuTii+NwPv9{FpJdDRFkAgAySJJrn}K<+O@;l{I*Ook!p|5
znR9K>%<1Rfwy3u}TkyKl%|*AN@n{QWvi#BKSd0t3vwrkxN5{vh)eDhEwJ}i6i!R2X
zhs8Ka1!UIh7`|$nO%bx!a2#W5H~rp8CPG=?&w6A`v~y8ECy}uU+t+P@C3|NI5fq);
z{o;!U{fzHtrry3Vnon7-nR@YzSXy;09X2nc9MiUS%!$m&%<0Uz%!irFn5+IyE9vym
z8Kl$Z;k0g&d=IIVD}9xL8nVEMdbs*Pv)pWW8Pcfwqpa^qUc@z7d?!i7EsNz^LmDXL
zBW|r)7Axh3Uul#j(f2Bi3VyvZenjL|@-*{UTKIi+_O|)+H;-0z!ipi&<Rnd!Z6%at
z<**ymY(*7)MRq$~UW<vU9Ma=%SX(U-j@Kaoc!TA5mQx5uh~*@fet3~%S&roi%M!w2
z<c_7HsokOV&3T(Q&ugv^u`0>RD55HkAaTS_S(d~KX4>;YZj4m~d{{|kqmgjLOPd0#
zM9g-gjuC+f9LI_R!5K?L`Y??khX_jWWC^(>kl2(Kfl$CM@58tUBi33G&3u_IjAjoz
zn|OX1gG(1qKotJ;q9Q*fZHsp;*sxeL7Y`Tes;Zb~wCs7YUaNB67(2VOCsWMm`E=SN
zZM;%HeSM>sbhl>+C!{-LtU<Da$yom|r|X@gIVoI<@J1GELq76T@(xhdG{cl!QTlt!
zq6g&AsCwj`i%&RqNt|%;EzjMuZ`1YW*WX(XUpKGcwDXo*fS58zULbFxUWqZW8ct!(
zW-bJ^UCA&_w;<LBY7Magnh`6_D!$83H4Ul}aaJF}(<-Ap$c~bVXpwSW>R~}8l$mh8
zD4C>O=^?!&@25$Iq}l2m;$kF4WTKs1t6JO~RA2VrmoDEYh=Q2o1Ugr3m^XneoVROY
z^Kr5g@}fn@)bUTv8+vALS_qdEOZUxiJ{B=JHIh|D2bAkdCdcz`)RQEl$V<1}*u`S1
zaVR)IJba$zL4iE4aP%Y8cu)u7WtJdY5?QdQ-DBs@TmA7ED~n`~n?-e|*OqjmR;I)m
zvZ5%wW^tuVESGHaKxMke^Lj`#2(kFEB<nU$h~7s;nT>sX^=UUu-9P<&6%-H3V{>>m
zha<!ZJj*Hp|9d)^izVO$;MVy{V-5i`t~QQY=FL&k#CQi3N9mG)88$~*@F<+oq30tQ
zd(m$Z19|h7o#jGQw8gB`T)biK()CGCqU2Aw@a$U8aHJS<Jf77>(Ndi_XdnM#SUwBa
z-|`%(Ja>!M7MrEpC(NC_YQt!1NaaM<=XlP~cg`K^$_=CvVYQf0VLRmGydp_Fdc4z(
z^&~D|zVnu2`1vZVA&8$&GToo|@vY`S<L`Hf@*nhv%@9)n`<h|;IZ*h%r2DofT4FX_
z8qTesdtA^fG3ZpadpJ_?!swJH#S)erFcZNL&}&>jArKD`1ms*Q(TYBL*S4Tz_R966
z$w7^i2<DLUbDd*@UD<(TJggNGN}A`BmMiKC7)GS&W_2%Qkd`<J<OvXsqq4S>Y5pBP
zO((Dd*+C~On3r1BZ&JqXdZjv*DpaV|>c?`|U7dAy%Mh20hmxUUJZdMBmG)V)h>)V6
z4{*lsHM(RuZzV&iP`qTt<Fi)HS{0N_K@ZS@*z5wXlVB>~9CZC*AgK)Vsqi<kn!(N*
zkg)>fY6Oj`*XlL0hdXuEigV9haa?^M-IHx*7xY&f!rA1U!NI|1bMWPmwfgjP_nup=
zrm};%>cU2HLc*27!2sQ1pmzXUg67f2FttLcR%tyjO+c*#!aR_skmMnBdKBcHW+OW`
zZ|?E3S<j4FR*YP_nUy1<oWFS^QG2raZeJmt?b)uZ8B4{isjq!16iJvJg<Fy7rXuZq
zxj?34-1noODpO;YQh!T>_O!JM1n>f(&_Q~5x^SBGsCqsf13Vr>B6$*(qmr1f;3wc;
zvq*K6Emu8PMB^WK!g@$@3S=m(B-*phXfkOvqTSJ?>~_dzp+DBq+fk17=PkK1)|S`1
zB7KogBj4sEJIc|%bYE|LN5OFl?ses&8`Yd5Kda~@Y=r|4((IVs)|}fHjrl3tRTbAt
z`7yue!-YPP<HWu~tQ;|T$?aTMEEkJqbP=3EfcX0;<6t%m%|^MCa0RD;qmrwFlailp
z8{llae`MRN)g#+Ry2-B5V#yE=+RoJL#G}X7?(W&s`r&TqhddKum{5+BDx_KPYZe%G
zAwz0&NTEV@7ryvK5)uyR_lxxg-z%O>wwVv}Wbf3jfdR0#PmP*pd1)f?nf~duz902j
zXe26Y)+B!p$u;RevVZKAr`%QYuB)A?Z`)*<HubF#D!F;Zij&&Ay0)#VuL8AjNA{5`
zK{q|jTsnIt5As6-J?1G<<_pbg%>(DF_Yf&xsC&(NEz$s?M$$Y~l}OcVRH-QH;YF$H
zjY4kWtUwyeByr(*f6VAtHmIBwGIYZEDS=yK&^#xbat$IrM;tX`I=Ut*;ZVW?6ZG|%
z?U{z8MVy?SB|i(Vs(118CMM<$6C%t1YD;8*kmHw=WyiCU9!}W9YqnB(BCDnX{twAP
z{ziEXuK;#291RkMP8-G?epa>$8ZFYbNYY%2fG`RD1FxsTvI5FPFYyQ3OcSA5fwvSI
zk|xB%&KX@@U+t)<5QXn0!||z~eDafIo?a}ZRb^vmC=TXLG_B-J_|X$O!>yzce{B_f
z!bhf#yh8S1j%=m?`Q9giBj?L=pfEN-?tV$~J(|-?M%gCK@$Ok5t8+zxo!`ZY;#>`K
z^yU*eK^)hlO(e6ZT~fzI;V+l!ig3wNLDAR!_x<?(3fuVDA{}}x<poFiVwUMgk3V3A
zI8`X96;N<q%n(TIT8WY~mLVE~$3rbTmLqPGg+4Yb$UQI{GX0R<M8#LHB%I2Q3vw@n
z_V@?*;(lc<*HlElv7Q%S<VEG%+{H+Jn9fDeHrB>iNQ_3;5|MlmZKWA%`cfUgKGH<K
z@`E3;bnTio_**k|>)N$zeuNX6f_DU?yPsT+`naG*3w0(y#ZqMsLA|JZ4#AfLTJ}M;
zIUJ;*{7^m|zdd$|{b=Z_4`)9-@bsH)Q@6KWTWPQKWUfd*P+U{`^xo*+sps3;R$RPy
zFC5}n`$vx8IZu(h@Dz*j!RyXsnD8{4@}><Ia6Za$!43lQqFk-g!`90K7;gNdl*Ns*
zBYa>g^spVI(7}QRp|P>B36g9YR)U{qhe>UirP{{BTPG&APOKU2>Kg6(wdL8iw+ZAu
zF*~s*F*|426116IE=WyuL#bzZPS41(LZqE#+q^<d&gjS`EYBM0RyJ1&vPliqPHg=s
zs_h!Ro7QVJXq^+V1-P7^O}mLb$&p;1YHJfyzs0>?o6x$I)_BZw_>_~5cvA2nWE=0J
zJ)g<^PudGlkJZeW9ZP8o>ZMY>^rPVW10?k-F3kMR&{0cgV<CA$4CDBP;`H!46{*&&
z`R~l#Lx!M%-|}4dt+%H059CR7`*}2Z%hY#Xd1YV#d_lyz{43_vr!?c_s<kv1aU&em
z1sLoVZUD+2WzHUX0k#qdeI8N7smCRQ%u`4y_QfQ?HI9e!%1)gm$XKR#utZX(Ui|c@
z!IvfQ)nV|}b`VdXf531l<Y$wB(a=?%f&>O5>ZF=L6H0i7c%-4%a~-2;qgT~B+Bjk@
zP}ivHnnF(D1=i!UhLh~+@^4n>>AX2!vegUJRq9oVh>ls7#t`fgIEjv~{lB9T5v=Vp
z)$hu)@pLo>c0LZe^hLB~7TS_#Yt>^Xg_tae6nc8Z8xX|-u}dL*za*w*r<~~cz%1R$
zN^MX@S=k7!M$tv0IvC=lPI04|OolPu9LD=Htkn$FP)e>3;?GmTUl8e%z-U7~0Qf<d
zfmnf2Oc}CA=FHZIvt~~y)T?>@DcPLgV-1RY#7pTz$=YDH#HaLfnEUpeRCxsnhrz$R
zj>?<`VDX9w8zy~DnQP0MF2N%MePw!lX7~jYYC``4U!eSf!}(*6J?0+5his33>uaBV
znElo-$({KZaW8lmGscdQs{<a;jj)?wwR<i<{X2(1-z?-U(t<6hP7`sVMH4C4L&!HA
z({!w<*Br}o%)j=rs>t=*UESftqG&%Ss%+n!<sv&KF8`G2nlpbNU(Ir=uvXS3TU#rr
z9J@My@#4kcNN^||d4hb0JOwTq124LqxtV!@`4Le`JDC727b;*n;6u<kr96aN!>@``
zzQ0d&ya?qtbi%=%L|ir50!{R=NCU74G&RbvF!o5|A1s_v5Jj4Wi3y|IgSLZ%{^I~m
z_~k||jd?^K?#)ZUwHkepY)xvh;&u=l3W2ITT33S#Ta1g8=Njb}Ee0GAEuiKo%K2WS
zPK(xq;>fHusGVD()+{t<w6W6aKu}Y~<k1zhlXj@pC`l}MrGcP7knr@*eq57WdYyKQ
z<;ozlel#C&0_~<>r8iSe;MV{^z{aqkJs5~kACP?6CWhdLL@$wmg{hY$$x?M*a$*@d
z5)~~$kXR^`f?@JR<9XHUbb)KgRxaje4PYfiSM{6`GAPahJMAffmGLKvB5qPROO;c7
zrl^BZi3o**7m4nPET_ZH71cN!<^_wlcvIIcOl=$Ms=6w(3MU#G&%u_JcrI4dqt(n%
z0(S{ES4awiSmFga!Apjth=LG~8Ir}KmC-N(+5%%+lXajS(S*)>P+CMMW@sF5s6;e*
zf#)R~@KJ~*Dj2;g3Ys5vm2Bh)Pdf>0L=Uq%I?PLw>}mj?$b4$wv4D-J35zc<!#{;-
zD>Yq;vuupxiAb;7ycmLwhhA$D!IpVRfJVi!78gzR)RHA38_WB)lY(hvCT+8=&{3lG
z3L%>eX&L}4i-Z;QIpo_yy9QvwBcg))O=m=qWr@{zViCd6MHaA=IrV^6=ZoN63Tpt%
z0F9Vo(UC=75G}bH5&@+q^@y0Xb<?#%P9ZAk{ZTfP>#3?hs03nKKp|L8i^bgppUGrv
z9w|m0JFJ^wOI37UvH7sgiA2&^J|@^&k}La0gk^m#q>}=VN3yEQ%5+vGUR5ctk&iqb
z;7AgrRh-E~-)=C74V=*-N)#Fd7DKgBoQ$#+n$avvF3y{v`HG7LfD@DW4P<+_2cnGJ
zAv(haMOl0tSy<Uo>n!G*p;yy=IdRJ=#e18f#-fs>o^{Tuo?SH~JNtw`EHmfKPm#w0
zshEKgWxAefFIiQH=|dBG*=aMohH@k^_v%$6>A@Z~9L}=bgC)~nw%R?eXJDhNtpE!I
zAE)}|Q{dwXW;L}K0^7EN6+{g@%EqBY<Ddp!V1c7gKtsVnAaf{U0&o{{M#5qb?hLpk
zgdq8fKi*RYn7H<0{^;3Hx+hK)w2&DRI^39}NxCG=TR)dm<ggM`GeSr=qE0wzII3wa
zyft0!8Ta{%*GBxKXXkgf4@I!3c}bQ$J0vKY6wS1?YhhDWMG3%zz-fwZ!I2y?66K(8
zkCI)8QuLTPf%ak%lbe>1V2v#hKTw?k?9U;i1d^QUYJo+VhgcmLWoZ^$Cle`G>SK8&
zWUL0^USYW5SPV2ROaCS*><N;hEfypmD~VO5jf%zzGJggqLYsIZn>(n;w#0Ftv1G|7
z-wLIcNSY>2eVt{`lCff0uOw-@V(>CxRjf+P2^Z+6`!FYA*ceBV^_C`6A3(DjH3uV4
zb$$r?G;MaH*~*~k{&Wtx#?M)CYwBS?m-BD5wbhyp*@N$=Y;C1v09=z+YS7+u{?x-L
zm-D}RS(~4m`udb++u9TrQy;x4xaB5#K20kvJx!uI)(o`^u<?OiQvM8bHwl!VfF^Gt
zXL173H9x28WnItvCRosU(*(Oxup^$VDW*Y8Q_<9{FWpY*k)Y36c7SYUmLWl9o9p*c
z`xKq+;i$9`Bh&Z`Rmb7e00<Gld$S28%wP^N1Xaiah;UqHb6k6#h@uhp9E+0@vn23c
zS8a22p4f@rt;Kw|>CVzLJ~G<|stx|bOZ;Zr2|Gnak;1d0WQjGe2J}-k!%;sf$9Pru
z)UuhgRb3k#=sB@Z4XMWLt%|YUbQP87Mc&&L3P(m<2db<@`@|~b0Yn#<frF1SOJJFA
zLM9cakgN@AqnEj0xgkXbC(RQf(x@bB1VajD(Qq1&nIfcPa3Azqj5ZZ`X^2G>OoM#O
z;3a`zB%c#wVNDm*a!uzP<B7F<mM$9U;vkl+k;M)q(>TwK%^Ofo8XH?J<7<9(ZP^w}
zVrWTIH^m8kZZ_>3#z;DwI9c^XQE+`7f<zP)YB-zWBo9{2%0oq!Gp7D~>FkN6i+HYL
zx|)zk^+Sxg^?GN|>8op!IFEjj534;J`yAb=uhO_sWa`;eQd8=QL|m3@z={>sQDxT+
zak2s&8JaIQ&0imZC&!^!y#ufutO!ff$ye|V#YKcuW;Sr$i2LHI@!`gn;r2O$-E%Z;
zPIvQTxkkm?a1rrWU6q}`arWu+)hRcfT-npJGMV0B)#fZ~|Dtu>rj3{atg~mxZt^Gt
zY!y5kIt*3r!Q2{66EReH6jT^`p6?MV4GN+*>OEYe3GK-uu<`~*`KoVny$}qeoJV$B
z)&6eN%xoLd^}dxUr_|eJWtyc-NP=fYbey>Fhjq3%P>8_J;LVgJIE6A;fWRA8G+uB>
zx})7RC4)1{<>n{K6;_p{(M8c&HHlZcD~6~>B6_h4T!)u!H{%*&GGpj@htrD1M%?J=
zY|{-A!;?amElVXxMwV?a@w%^JOnD{*8|ER{FglP6myT*P2aerIq&j&0Y&I7u)pL<b
z)k~2a<@#ZAM>*lFe>hPlcTDXdcg#(cr*@PRyS!9o<Hky=d+pkD)~@|YThjBAR2e_k
zS2}>9{QycKK<kqzS%ZQpm&n7@Ma4>BB?r3O`^=OTTy;EZ<v8LdqBie4q8+hPk`>{x
zb`>m8C)quB?EUu2XXg-ZxuSS>wj+IN67GhO5f>dxFC=p@v$h5^9QbMW2mV|cBamV`
znE_^;IgVLR{WO8KKa2R(`2+reWZh|*0x1GGjE)ptqrf@^T7;%6v{b;2sd~({0EF2D
z-mQTE`2lviC0R};o!)4ol1x?-y>0?0y$-T2a*{^GAhlzzI|x#Ge~F}X)%)&9I{yzh
zpvtMA9aCimY?|UKGy00a^a5L-%PeMAG6-O#z^>q0q!KWd0{Dnm^J;)tTIqZNy{-EB
z0L=wEf=W&`Ygipvk5K9dW-yX);NtbFqo*{+$tkwCG%6D%?+t>o1x?TOE{iIxT<}CW
zwWYawHcPBXBz(hMz}Urf`fz->Z>~KONQ|qm|Izi=|A_cgug7<ecIQI_3xCg&5LHAK
zg+1|xKL&}efkEH0^XcJl6ING9wYNFEJ^8)1qOP^@fct12*VBGentT)UeRH6t0Y?ge
z>}Dju>-`X5stR<ly5~2EJ#YPmXRmI~Up74Nn;$Qw+ve8_c2-_BSYN4jDuc!Hute76
zrgq<$a>G)moN*whB3Msf#d?DKqUl2}Nlh>bO3GB>Ytj?(zj$9!qP&)kW)oT4g3g)U
zsm$tit*~R2?s%E!Uv`E%n%y;@=ZC&xZ9Tro^H@6p4*WEE4gN&b4L>E;XUo^n1O61a
z8t?$P7(DXYRcFEhxpUk6iR=l>nj6Oo%}j{9@eTg*Gp@ma&Yhdla?7f7H~Fw**LjE>
zouLC6JYW{6U@Z`SO4XF0XAl=ZFO>ndxdEtyZdJ+__!||xnEvUfQ>P`tf~GPGrWV8&
zBox&V>9WBZ`DMg3G0a{ttA?o-tD!+;n3^Tc7FefRR4m&OEp~Y$(O+~47~xu;7lhE#
z5cGTAn25j{iNKV)$x>Cza<2<!_UCGhU9M}U<yxjm#C2>;jb>y?Zfjbxq64{|iS9xz
zd?-XsAA_6_+^oW*jxiOE;;05}>=Lx9tyJ5cX}$;R5z9Hydcl^wR%cqt=CMH^Ie2iV
z2Pn`w0++}C93twg!U&NBY_?TlbV@K6nZkNo(=1EV>=Ro*_QS_I=XaP|rQytivPBgz
zTOJo!w^7!ta741%HN&%3v$hmDl^4QcR416G&_7)ZO1I9wI~`yG*Ie>0H9^*zP_cnE
zTA0DjY(k6YWLfDL8R<|ZITt@FXQ|)1#0<Ts(Rq{w`c$I~6wH9j6@sa6fZh3haJIEr
zpG1RQXoO44fH`1lejY$1;v|Q=GMTQ&hjEtoyE1OUo!0wusuWRGKi%1pK1)_rxw|LR
z)tNa{I<KcsQdJ39S#PG(Ed*=#2ssR#-=?T{Y5IYF6A!GS6#)6C8%L!VsZA3m<;Jw}
z5;;7+c|1RW&R=i&)_8Bv_&Qq?REeKBabn=n1wG?)dluOCLOO1XhBI`)_x8*k?^!Tk
zvmj)Id%EY0br<1=p*-Z3z&<JgC#F#hEouN10YSzFHUxY|ffCw+EP$lI|A*xQOfUjf
zf;`F6Sr$c20U|4M)aePt0Ol_21?o&EB)#upNudY1RFLQ#5>5s(s{%^ER03=uFtvHu
zJv=w{>4*0z5)RO`j3bNqimjk-1w1YSnU=#$0;P0-e^HdY5Gm0UMB+4Yj(~?CQGuVd
zg3}0&Rkf>DWyqqdu3EKfRpw{-$z(o1fDdt({_UZwH*dcBP<yg{^XB%4@QdVywb(;=
z>@n+!>SzU~3Q3CnZCF8-Iu;NHWcvJrt4E+#WDnFVsSs(_)1>7ygkpdcNa<%`Lz5&8
zvA&21(nRU$V^_%3yP%D{8xD2X%&&K*MP4+#^nh+>NG{{^^Z3)f;OFjRmcb8uvtB8p
zJg3%#;qe~gm_B<4&M|h<k?*oY;NK!FjxlB)^C<H;^Ca_AaC50r4Z4s<00#UxgoAz!
zY>9*3*NoI~CeHy!1Ox{qhH9XItfWYtgDwMmrH2Co2a`le5l<?Ml@S8pe7y`MAC6QC
z%e9!y90*?u#L)-g@T?YNr(*-FrU{e`xoAMsM3ht`%}Ie+hC>B6dHt@*6%K()bY8fT
z12ig;T2s;*QEss>ht;s`QoorjEiA}}E~&f<42mUs*G^6bo8*Wtg?~Y2sqv6&7P{1M
zM9HT?hX7a*JcMWtXqcKbM<zK*RJ%gp`M$`C*J`|^+`t0y(g>E90zZ<*s`XycY&UF!
zb!@>8hr<XR;Y|{@y-F(OJf?8^d^6*YNM2Ycs%_ci8K?yRq}Y0hI7+vy17+hN6F5`$
zIiO?&xSXVFlEH@rkLT>@rWjTS#|jq93+}hkuBngP87r*7_P16XH-ZenW>`}qg|I}$
zfSD$U357%Gm~17Y$uxpcvZA1}X=vG4QKss$Ixi3O05Bke1l`-t1Kp7lie##+AQHnZ
zBqpNVH~E^mh46r%=nAFu&NEryBzs|#M}c<_Q|~H#kKjsyjDS3b?FPx8CJxnfX)a=R
zV2d>>z<9hSolKMg)5z0QV8>F&It?Cxr8mlA!H_W}T8^E&eEF_;IjOW64wtpGP6Kf*
zoKv)@6H?$JE6TFNb1<6~6_BBbF2vUPhGk2-I$Kloosnq4luW1A)}g3<WEtZ2=2upo
zcJ|8BybfRRG_z1vC3or(0r6p`1S;Xe;ylh4IT>pWaH7reE?eq|$Q{vGJYQ5z)sGVJ
zU-ZA_hrA2@?}rV03U~}vN+`@FffEB7hk8X#(jJOw!7in`W1uN|Qia9<V!>c|f)PVO
zm;p_yVf4Z&04>6VX$z1n7)&5yO&?}ImB~#~Kp-IB=;#V1BkGQ>TF!P2*^OVZ&U6|v
zF7HPRY0vKNvb?mWZv2gxF2u}Oh>H!mU3Svbc66U8w{7pM=xt5T#+5?cHM_b@Rm-R+
zXk<sMkc#LXT_$ec(N)dcP9x6ePFic?5ws>ec(A*h)}wAbi_7`3g5epm=}q5oqS8ia
z)lgORLM)Qwn_VcZY1#&aiy(R(`)tR^g~0T~&^S_%9+0q2IwGAURI5f@aN#Ok3_iZ#
zH!6Wk`>s@I$<rnc9;J#I#!#x2Ax&PJyQu!P`_Fsk_};oYJh+xTe)G+P<h!}F<~!VI
za?{Ad#lyoBk6$3vV%ZnMi)sVp<PEjut2^6X@2zb=P<TO*vw7Ll)-4&CwQNPQ3G*+&
zCZ_!-BG3uS#Vcs#B5DoMkkM+T_2XB47y=*U;}T?wG*AJ<LgT5$OyzOQ<J2rrW>>Eb
zJf7+9NlWq0w$znLZVm~3?pS92@bcxIh4|>k&8f=gigVgj!~j(7JQr5-JH8MbX!_mV
zY197vF|7PD=ZbdKi1zJEc4j*}vUbAJdS$gB1+>}1rE-u%!&DNLS}|P}P#oF@QbRif
zeL*TqP|Pr@f(QMqmq3N}Jzyyap__L6h|^9@^5*yj6Kk*ZP7=!TR0mnpHrQO&oE3Gi
zl5g6+^OmWvSt-LXv##SRa;Pm5R{l^cm1?C`6_|L5eG?aqpK^R9n(a)Fkikl&(WsDh
z#At54@|Hh}dO9T<P{drfEhNj~i;4rq;y{F2ZHP^oS!Xl`qye;OF~dx^GY#b*&GbFz
zJ==OV;2$bPKF~o*H#2@LptjR9L%t2=IUNo=wq15Ya>{&%#&OXBK7k7-?L>tfU#iy@
z*9N`tg-}x5zI?u~Fw2R>N^#v?o=A#1m~6QW7&8RLWXsH4o>#J>W?O2I43vtsT9K?|
zjlR3w<Ztryem7o>$HTgd718S341O2`W)9!hQ4Fz#Ez?*vk9u;zBwIPq6K3)-QGYjc
z8f@GwD(co74Y&`~OIM3oS<{y7sP@^q%&K!f)+ZOiGgp0dd>~|C2hYd@b#YoDeOVDT
zaVW!?qQb_j{J16?Qnvx8hQ`{VB)`;9ExFGY!m7!J?F^=;WuNUMW6&L3BqSeNltuaw
z+1#vP5zk?3WNf>1;$23UvU#(#?hdn4*-lRWwz^wcqilXep+5|bVqxm+ZgL#>gO8Qh
z4el_HSq`h@LS{GfY357JSD}%>vXtQVt5=!;rJB{q(bTc$VwDDdpwJu=oVCg~-YeZY
z4GMVERe<eMM`Ept5N2P33IlcnL>yHhx7w;Ps7DBRcqgGa2Q3eNUwW_RfyyyY^xn(=
zkSGEN#X+4?^pl433V*__kTC**`4Weh8<E1CD8@ty=s12Qd_?grXt^>pWuWXl8-w_T
zYm9oDpaXOK1sc7b)<iDP_4MRkQsij7dAwjv{Sp2+N#?j75s{}rdwD)?A_uwq=FaE&
z`E&Vp;q>`}F#mKRD(smj2=n#`Te(7k!x7_#hFETJh|{=v;~Y0WPv92J<N0|D&S!;h
zjmdI0`%P%-Y={-^8J5r-{Egp5W3Hp(4HKd`al>G57EWR1U5Qf`H>45y+PShk_gbi0
zw@gUV#4P}nZ=@$TPSehB5I=MW&?i_mV!>o9h^T|t6;g9LtT7GklE(dlX9ds;ki|qS
zc6^7YB|1w*b%`;nvpZAjZ1%SGVLuvF7+Fr5p`}j^hy$CVh8Uf7+~voeeSN)a)LGtN
zo!dS#>=9Nq5?)U{It&>U;9%c_V)diIW{3f0$Re7mjkbtT><iW+yt$Zg0O%PK@tYON
zhlbnq>lF!sPDoUwW?dq0tLp2z{(A7Op0w;&Ut4z4lg&?@wCo4VmoMKDBuG}&@6g3N
zWciMnlUY0G)GoN7HmAO%^b}6xFg2cPC8^&72G?A&2d!Dmd<^3Q#2cC}rA?>|6f6(0
zhQ2_-z=(k(_*AE=(~vbfW*x17h(Mu$OW3Pd;c%wHD7YU5(uC?J6krE4#c-oahzO`@
z%|;K4JiwDd4mpy~C_G|Y-NL^v2^D9lnx7JhSSk0)v9|oOc};^CNFo*KR7oV?TW$Dl
z5vZte5|;A?nKM$3nV5I)=k3l}d?gxl<i%DxZHiVjXR$IT>Vnbbc?m98O2@}7r=qEH
zvKS&V3jjRdAC11?%qu!sA0BGblP^s8ywDHCkZ<=LA=W4<ZSt3j8(cw4H%c)@F}yZ_
z9>n#d6-#!;Gb6ATFYvQrX{qWb^jyLr1{|k?q&Oi-D#yy<i0>{^bk(6j@gah}1FF#L
z$Xx+#s_<*R1>EUG7<e=y8lX<U$w94UM_KsC*dDeQb_<wCngbRN@!6zdACXZ3fmtSe
zwp5v&E*q3<)M3JS*!8~ilN>wJB)k*TLP<3evULQI%QD>10I7kJsVOMnuz86lirrm`
zhOiS^f#-lt8J;M}s%VHIJ7j7choSW}jl|MzE+N+pe)hDH(+hm8))-Hy@GOgP;HxpX
zxh)`%E-z#`RYPdHkx}GY72m1=_!!DB$?~o&+nu$LiVzqHdnV#@hx$#ECE-N>yw0<4
zz;M8(W-uN!u3yI*X@@+X09w47+0I;#l~OLidWG&=p?@Auz)*eYxDZ$1$6hT0l7(*D
zL|_F~Ihv6?u1VN5M2D<ig^AbvAb#o~)(qKn;ZtN1<@3QWbY;Yy;R*<!+J!!zhpHtM
zN0k+kWbN?qwzRFP;r7{okR&^iuw~I#)oTUE8s46Q-!I%gOI7Xkw&AcX%x)(|UA9x(
zhb;$*4+R4Bs_TAq-E}`YdFD=El<zmpxM{?!fv_^habrq&z>XU5t{O(vJ|>S`$2sg!
zpJHoPkA5g*Db=B&e&BmjGLueyING{sm^SujU_VRW5bJPJz2^ulnCbK0-^>8FXux%3
zef9i)#SBTQbS5d;_E#o2ZbArmMPi;F)xB7xD=hraEb3>Q)@4=b+j*t~Gqo9eFraa_
ztPVOoRgY@bjnW4JJ#5>dtX3-Y5X>H(L3*@yZh^fNnqV7rO8g39z6u!pH1)CqvZyt|
zT`1S?rw|KbbLvoirAQUQU@TQ+PLYh5nadSu%!du{%<(fy6UB9Y>*M3~Tg8m$Yv!1j
zv9o;&Xg!xv{I!NK0C@+&Xf8TMG7&9XF0xV93h|=q`0n}C^2L52Sr#w#@VV|7HTeWo
zI*%psXhMr1xW&}7nrrzwhsB9_98)J7SmAW69Z0d`U<JCWhYdU;PiDt#Lyb7B$C7am
z!JL5&gExIJ<dd)q1`yw{3L^@x>_l3-p8~Q^3xP$4!KKy;{ThXv4BJ`q<$MK$2m`p<
zp!SRBgXTwhNEJ|X0N44E3M^n6OMoh<X8~TQ0mLvB>VR5m2wnw1)kiIgM)OxC%T4AJ
zsv%oRMCXTu;rgjw$npxQ_HN7e+C<q9w1Ijp<~Y%4#JN*|0zfyt_`(`iaOdc@QYyJW
z&*h34UWcjg7!q4%*`e7))M8<hFK~|MWw85%jbLC|K{gztP_9NIlB+sys4G=gIbjkJ
zDuft{sTrRs77E23S(K%lP(BRnIrkNK@3V)1Y!nJ%=Xaq@;S6AQq(l_k4~@2OBZ6!~
zegtu6({#!~*N6TX%7t=GA0`upjw%H|QX~7O#v(7RgyE|Jl97C;v?7B@@3Fr%zR=y9
z6a_ETm%n`{=7)t3;z_a-dZ-QkkpZKnG7=$NfzDPDsiA<KLgfbJ8_XYI4IluD*N?J`
zK)_0~sb@1@ZdUTlYvynN=t@g6N6%O>R2t1oVP1vXO{pyFvsm+_yM_|AoS(}$7m#_|
z=Py4c#3wm>)x^+>;t&ufQ)yeb5RV5-1g7?V@?Es2ig-Ga3JWX}U{`o1eQcoMm?B66
ztgqG1U@ejFh`J6WC?1oou*_NK6bff!uZ<gv6IPPJu<1%rr5v|%)yh@Cc2p@zGz-r9
zSTn+jijH6l#Eplcp~MKU!9yq#r!N~@x#c4lpR_WT#pW|g%f^vcpqcLte4lOL<qK)N
z3oshG*r6au)4?u?fveCxC9tYMjPwh{>w4Jz;0MrM%OnTnO_91lJ);)b%w`+}zFaYX
zD^{k{KhIfy{>p{t>B{+fIIL@iaVwk}nuegpZ_KkAZQ%u5w=Nhz`QIcB@Rce^IwwdU
zLc&xfT_@3vW3CGy+N|cX`CFG`<0g;?{Pned?wCE$mr_?>xOz>F#!W$d>CiDzkAix1
ziyB)zyxadk=zE4}jPn9!%X_v~;Jt*g>j(Z=xImy(jfiywZzd625hTI%5M+oYi{9qo
z+ytN=fVMe`YJ(ZpKvF&}(YU)-EY^yT(C^Z}Axf;UFx|+vl@S@nl5$(Vky%ubbZG4a
zipWkqV#MT-J@vzAC^O#fI&c86S*K$jDd(uMm<zs#08_w)JCM`V4y;cz6n11zcEVu`
zR%g4W<py@9I$@M?<j0Ye;hR6UzHhsV6MxEv^p;gQ!Lq>Zc_s?~+-vARjn}e)S~1`!
zz`zUjN-iW7;Pnm(^&EE3G;8D&<$0CM$cMhMY}+pKm8qYupSO&ha1K5@k1$_8@kFxZ
z)BiN}m$5Nm-URghG1N&VObw&Dj#_BgLq#a}f*wlafgzr80@c|A`#^pHQ5jI91E82H
zn4mR^0+}rC!oC42&eNoX5KAmuDpjC*15?>ya`st>l!FqevW6t|tKt$Z#hb8<I?t9}
z>vV)2$r%`}y0j6&f+BaO<tU>PXx~gt{ZoAwZZq=AY25SuQkIVsUDgl^E-8~JA+6GN
z`$LK$Uv0*OJgr=?+u$4dE$~GN5in^XZl0)#di(cdf}uViR;=$J(hfAmB3|Ox<T`Q>
zdVd^6iD<kgb&EG0+U*AQ=F=DzDPK0>0Yz6kIFm<+YO4?yJ&lDIvGyAuf|W-%y0OOz
zGQyWMIk_lS#IEKJH=H?J&S)X&P*L|jLL^p%8HmV0!kJ^hXL%o?lUXfmr^7KjL<28x
z<0G+D90)b`7hWJMkZafsczo9huy1(n6N&M2X|%V<ujegUNZ+8ayrfx?L<kXopb-(g
z_%ZMV6~2>1;5UJf6Z#w=mjMZ(|2_>-Z6E-ho>9LyuF)KX6@9Uu(GfQam9<Y6n#t2L
zBZwZq@$Ab(=c|`yVxcA2^33xm=w$BNW!3(Zt42DS9~GBgbj~tf+3<}Y+(*oFPCaAW
zbyqD}#8aq{;)O@{vtwwB3|gf=oJFm8JipNFqoGV6&{+`5F42%%Xd~EYghX=y^oNC+
zL0ln4l_R2$=->i2qJYQ3K&jAJW;icuK6w$)zKw>T4Q(VF?B(0<CZ{%xbyo216?=^M
zPVw4UTkMg%Pkak;q_*p1LZleM1xFA=$xP+OY}OJ+I<SXF_}8-3Dah=x8pzavFPz~m
z#5N&O`@|Q%P>qLxsla8BlZ>bt3#$s&Zb2rg_!o?u9NvfELf>CO-@k;lssu<RjmuaC
zp0$Iyk@*7i5VMc@8S^XV_spBj-@r-?(oKfQ0>~IQKai^eAc4~l;}o3v)kvS%@Al`X
z|CRekNdG`>pug6Ke_nr|gx`VwK8jk_{hITEapeR2iHgxe-fs+4M3-*trtWWWj7V(+
zdp-j3ic@x!n?7w8A}A0D4LFE^gw_YD*qcbzpNI?5;x%d&5l+f_z<}U&bG>G5+O}^3
z3P;!$tsLCe_i(iC#06R}t%O$kUXdWTm5F;$X~Z9>m;1|o1>kjJKRO?A``wxchSJ~H
z=xg-%fjqEt61{D;4t>Egr4o+()}PuB#QI|RV=jaYzL2UkGasxV{E;Q^qY`H2P)DIj
z8ikIbPuA=86D-7RAs|PF?FM%QLNKx1;M<hDWkI6;UA%^*%{ReVe8l?lO0>Z02Eb3*
z2_-_Z8iU8l8deeXtFqWDhU+l|6W3)i8WrVykk54>6+;Oc_B7M9)-Qs(=|2R7(nitU
z9UVg}`>9rqXg%M@Cba1f+J>`@$0*6CUa->dzOgHMxcw9D?Vq^Fl3)~;I5>|0?!fJe
z{mn;D5rC~>Lz<u=Vwnd{#j6PV7AU#}KV=B9oPa~Qkgv&>tbie<c$qInfJ8ZnWsoGr
zFcn!8vcR-(rU)fL!DYnA`Hrk4knu5KS>)20mIl9<(<laf)(+D~cKe9cp*v8g`GbgP
zR*KV8oO?BP3tY&2gt>xRq@@;I4=d;Wuc@F!;@7BA*~4L*5|V*K7?jgVKoW((eM5aQ
zl`;)4fuE|5o#~)MDIi^Fj#RQulO-5Db_deBNU(wm5upyLma8^Outve?;WuDqMABPw
zfG)TA%Of`Hxp9Y+MIfug-Kk_Ub$+NI7sKAHQaoOYZ?Th(7KRm+%UauXQ8l_$QwKP1
z79*M{pXK?wYxpPH<U6&4mylaTWvT<AnHJAm|7FDRQi}H`_WD(@wm4UmAsJSg9$qT7
zW=(S#Pl%V$x~QeQDkAZ)cOz_>y{hUco{Er0QG)-=P(!xF>#`BEbw`Ca{E=I-r~Arb
zDK3i*Xxi8_25f3C{3LN;*G-K7T*RnS#C9k1QRZ^ePZpDH<ZN;=`3Sj#d<jw#?{k$P
z(hDQNO)yv(^{Uiz_JB#jg-a)+PyudS^P3W|W9p8_&K0TIDm0ye%z910mIqo@YuxEA
zGgSd{mI@WrQ;-T^?zFC&RI3QVt}|+zVfPbQ4;a7a*XlUns{{#DYc5UB0v=ZLu=NuO
zpc#~zK&H?m-``?+J$wh(2}dK)i~@x;sDay33(=lDErWe;EahK4Y`)yV;^t07SqH`p
zb(Ygw;Q+5T5ieQ8>kjZ>Y|8?eJ%?aJ4X#E&G}x(0{WBmlSbcPi%9H}B1&A^pG$~5j
zGXq4&11LyewFUyExJWGmJp;bjS*V8&0F82(9ub)2K1Kr>WWKK10EiIlUrD4iEdnD3
z3s^MRoEsURa3eJ*++Hl65u2l`5v@{&mD(hWf2gV08X$&9>n8VhJ8DJg9;a|RnoM|Z
z;#OZLFNjg-qkM}`CRiR0+B)G=lr>!gmNl+9G!ra{9gqaJy-g51IWfy69K8*y8z%{x
zWDELEZ0pbnHfCaLh%LYY1EGxlw+LyJbzC|g_@X2lsw=D3Fc5SEj{rJjSFaLPN#y#7
zuT^CB)7YJX*eVy>GqNNr8@3tEtyfIjhyql=PduyAo(&ETL9+tjNC-9z!tF27{js(b
zjV9x%P&7j~{y4d%x_@pcM54gaEntX<S!HAM)3Ri3^r+QAz-Q-sUc+^D%TNXr2;&c3
zqnoBV|BS3D@TRE)+l$Rl;f56rd@O7J_;_z`Tk;<PJ#3`R;aO3E^9AT6f)2Ep2KFc_
z5|DOJm$*%iqDEu`3^HJedYFrH5rpsXW&Ip_??aSrvcYRe@DdVi6v1vAJda~HOBxJD
zVDEU33Wi33C1L=3lu%rZD;B~4RLwQpXl%Z!MJx$IMAba24V@t7{4EGKBmlWAv`OOK
z=J<Gj|NMag%gPt@WZQiBbdU038uyZ9y1)fCFy}L$VD5y+<~vj?hSEhBNENZPlp(@(
zg8(5AFit+`L>1sXg<2*;pM>Y7F-(1VO{^)ZO@Q!e3?U_JdeLuU2V+n=*z6nW!_sM8
zY__sn<wnUci`NXizY?stRwY5v2>d-rHY*f&3EKL&uG)rTpFty(T<k+2*)Z{Bp8M7N
zME_VG?+~$p;lhD~w`~Z-i>?XtM6$#2uxaBRFd?2*OJke^Fcn*AfFWpzigmcVg8R4#
zHX2doTx{JYhMX7zmDS*`E)=tIMwZyLDNibfr5HIuH505BPOy94WAMo@B!yFXG0t*P
zLsk=bZJ-WxKpf+@V>>N^(91lZ%CISpJBOCzQpc1-vr#U`bEiQw?Z*SK_Y0c;j9irh
z5BM0fg4qbob31b$=9DQxm=+MwDA5RCI$DTs`k;XIAqy#r<<~K7fdoZSl#Eaf3t?Av
zj5nQ1NLBc25eh^ZS-nAnv*1OEKsgV<8Jdj{C_2rw9&D$fzH8its>mC%S`?J?;O)^7
zB`4ndo@`x`Na*2^4OCoDB+O7G?D~oMi9*B<$z1dlh`UTton0&z&xs^ccs~-GEgD}>
zL=6|OoQj8h+!$wntHC_vS;bN;N2*KTKUSc=3+r2yl)R`odMJzqs^{g%(sV{X---xH
zAnP>%GGXnqwZ`_#F8gFkN?n)Brt_L|pWLR@WFb{lLs2u5GL@8!S0q3r;^+sacsy1O
z(=>V5&B0<x3$V5*k^%`Q1o{Srxu*vdR}?y=h`5tlkP9}v%pw0y#IRckkB-k9^Gk8O
zK1-t8@gnWX*_?_nsJJk1q<f1ri|aJty>-~65Q9OEc$!NV%(poMq8_27dZs;;Z7VCv
zN;pDfX~D#TWs>HHN?sH(Nf|dIYBDrIfwf1vD@&vTyc8y0NrTN|ydoQ>qpoc9DQ#v(
zbwshZmgw+8vJ%7$?hoS3E$9Z!2V>z0?W5d}exr-j&cHJEt7$nPnjU4kgP<Mw+A#Uk
z<Ad##{QF|$`K26~vd-I_6Nx9-B0roeb#khR_F{K4Tkf%mf&!{+nqjT2(<#Km83ZA^
zc=t}+ktk;cn}oN-ihS@@C_ky;JuRq)1}MV#^Z4FavIHy=AFMTjb9%U>=nEmlm2rJt
z$+D{od^VDaXYrC3U2^2OpoK$-y5+F8o`#S6F+{)20^UYPf=0hUoYQ_m#|Q%DTOEWu
zW1s?Eg(6NgE{YCHE{Gz`(RI)$!PcTT(-Q1ys%ffq;g+3CFHKDxbDk2XUZhD9jc*xT
zeW6G?Xlm-UAT{;;^E5@j2=)-0er)G0Yvvt2*&2=Fym#or)iWn&ws!8qHtzwJ^eNyz
z6~xaEGV`HtQ{FJm643r>?2rOK)IJ0$kMe<SXu+);xE5T%WtDOeGzjiMIRlnCVx;J9
zh!)qN01&_j>c&I?YQzGFM9@4&shLJ?EiM5vz-Ux}zBS9_#GH5fx&<fI<V;xBdqwP5
zEHxq1!?qtcTz^F_->cc*?-5hjj45O9nl#%I#J(@bBcf`bfKXs^KF`7-={Pdna%>y6
zh+?Znx<4Y?fLH}i>46tV3r%#-Z9p?oQh$>B${Q}&G&E#-a=0K|mC_tjz7Jb0Yo*?J
zGLmt&h<m~|pSqamPMHwc|Bb-I&`O!NHa(tPF)W)f|AaOYfn*kqiYw<7iJfI8=Xy#+
z0lLnsbBek4-iKU4mna}YX{WV@*dTt2z7ybsejAMxxLVWS-?@%x$MUSXC+$Az#B-yh
zeeWNS5gb$Zla8quPlRjJ2NwKuV8P!+9NRMB3@0(C;tg@<fa71tT*7=Db9)nWD|0(@
z2XhzpVLyyGjPD{c^l8jEDA%Io8+-+R<pO|h>Y%1X5CDMm3*x%mk8es2m@U5sc%s&z
zdnSP(`4p9x2#v^vAEjBx8kZoTCBM%{4lH--TNmn*-vnNRw`oWe->Ec_hWG&bQ~(fN
zfWtt{1Msdudx-cb6oG>t#qhEOm=MtBQ4CMT3uyet9JbIz<A4y+He%aNlf`ztCea7r
z`NY371yeW!x}`z}bkfxI22lnP9EmGuw65Tc4B`!3Q}=asb(5|d#}AM}zShO|bdmG7
zj}@NKeSO916(@u)73bwIT)iDHz0mplhSbw)w;spq7dL89;o6TM87UUe46Q1V6Hg}G
zm8WkiZ`#J|mxeFch+Q28&m$pz9qB1V2={Z=(7BU1R_8XtHw={zaU*zb6n_GT&B`Zn
zy1_!!tNb<uh)6KQsUZ%CaI1pY)v143D%bj0GH25OyAf(8yOq6T5mXjFH*#E*oH}v;
zQ@X!u!<tQ@<ih=zZa4)9<PO4(%>GEDA&`Y`gRETLxpvM4OUu<+;dMVhX(PbIlTH$(
z)p%ZNHnin%<SZ;N{`h;n;AJ!{<A5)G9elw6hhu^eIm)1D5PHpt)DWXit>hqv-XjZ7
zt(SjSuGh<5`)h!}ZbX1H*>Kv_+EQO%>Gzf9)YGK?QHWsI_@n{v8xQ*bHDt&afrvS%
zy#i?oasm;-eO!VKMnTG^=Xid(LZg$#=FvP+{P?D5Y|{;7=Xv+%qLJK}&rKA=c5|Su
zd*UOaxOPt=6VHEsr+!^LzUkva@y2brubl6s&%HnAO#P{E)O2IgW#ipv7Oq^!Yo~oN
zPd5;86rIGR?ncy733e|-fQAN;m_yssz^1%%OKGM0ZYvM@8eHTp<SYQqe3bRb$1QEJ
zw|jVSBGc73yQBS0>~XG-wzrSgp|O&V(S>6j9b*ee@&23!&29ANQ@Q@=U~lhWVTi1J
zmjF2+tkc;(^-Vk0-X62b=0Yk}n0lT>Bjs{r>NQ<gQYpGuRiM}|dkO4ys-ur!oo_zM
zu_0wJl5{wO)k(jwBn2?!naP5B49)F-q~Dv(zgK`ww$~R|r}k7ASF)T}@iS5L#NqiT
zPd%WB83}krMpRC~DK&cVwGmW1lf7OMQ#2c2FQ^lpwMC0+#Su%>{jwh!Ty*k$_t6j0
z3O+>3TzT~C9@L<S_t5mKA~rz3iZe<lM}7#pc>=RW-^xSZp+nz@k_n<aJ0ZVnz%FKC
zKlB77@-plIqWIBekZ4x}L;55l&prpl^-Ih>%>A%u9%8=D`~&j@^Ay9-SMT@;N5ij$
zu#ez<JV*!U^cn}VoO)O25kMBxzcXoyf8d22P<ZKekBV^!^h(RRhl(5Ekr;An_*0hI
zLa|}S*9DX>;g^Horc#2x)OWB`(MJwFXq~h~g&s5yzjU7iJ*Vw}nmwJ`!Dq0^I?dmd
z=F`^-Y2h<C|4v%SbY+Ch`58X*-8|lnoPQ{{JHIkNJNHn2>M3nyzNqCNTiR$WtzREa
zMRQ46agt6JZ%|7o6e6d9Cxt$uk!{-4m$VMD@85qz?wPvessA-~Nfe;!?mXe}^F;0i
zeBYE?nZMA__vXupspeHfO+b^3;Cvh}yowp{Y$H8tss`Dqe&93pd_MmxRN?2f-_@7a
z>r02B#tX7#;SB~MIK4Q@GHji<7U%On&*zura-?tSjP2VUVopu2CA(+M+LOz5=5l*9
z?VjM|Vnjyf^LtPlm1=ok%jY$iwRD|>>k#_?h0u2zbOid^u}~t2p1J~qx3{v?GfE-v
z>0k0{uxosjexHF|M~_?De>W=-U;h<+V{fcB^$6W<LzW`oUzgh2H0%GO>pcJ@InO%p
zc`H|USEuTn!*uuL)HB^XJG-;9d1p4SR+|)7c_mr0WF<$*YXu8A$g&(U#)xDC25e&v
z%K<DO#+duS7;HFf!y#<&!FSx5;{#4dnEifF^^CNVVS2i|s=9K$@AE$4|NNizKjrt$
ze~vG<0hMFan}*KPS4Bsh;w_*p?4S*2JK9k&*h;6ZSQ2;*l*M4#KttMCLBNW_NnnfE
z(Jt<pEB8i5>!Y28^4Ovm-8Q~^iAWWG11nj(Vr1pq=)SS~wuy;Gr!|!?wOzMWaO)=K
z*6z97NS3vn_DZGOO2bJrwd=LByE4tm>51X=#PagQn8J6A2RvSCoY*n8x1DZGOiwg2
z<<Ze{7>97qn%kN5iLtp8<l>a!`C68H&9z?o3c1Ih8(INTA@V0czjvZ&fQVBOO(LNB
zL<G>51C23YTL=_mSv0uf-(7u`KfJx28gT(Hy0#Y!1C=zqB8GS+=@yE9uI;-!7q%TE
zdpkY;M)kR?SBLj(ZTN}Egjex$8T=eGZgKCeu3wvplYg4@5Bh$-HaDA@-+E+Qc0xJD
z<(XqQU9OMChH8Ql-_YV;jGOBysKE0?ZwLNFRJ5PTZs7U@|FJv|`ZZiFFxH^NvI22H
z=$Ibd{pi(;vk%lN4_|%t)rVfK7JDDOvuybL?C}qVAi>k~ZeetGGV9xp1IbE)Q9q(-
zQM#gmDTfk!e)qYnA1+q!?QXmJ;q}|@JhZl@cgLZHNqbMyD7@X&thAF*Ml!vlTFB$K
z8nq19)2ssMP&0<(3_WwhUc1OxkpZa>q8GUlyamo1yz!s+^?p-boSE4ZJ#pde*$XG4
zduC=<j$eEHVzH;5xqGHI^YyRuarbl2t$&>-dYKKV3qO*eJW%<>#^<i2CEbS<tad+$
z$)HYd%(eRh{!sT_v9#xO36GUoJ6AK+QFphNdmx7cQ5PJDI%U51y=KF(9s{jtnr+Lz
z_v0Ub!q9T239snS8*)i6J3g^n#R>Sh`YnQnn;4V7JyM^tt;l5aP$k&ybC-smzAEY!
zuX+lwKn|X}--8V9St4*B9QvuixAn!L-x>O&q34JG$IuJ-Halty9`CEvtJNFSThx>I
zynjyps`{d6$##ZT+>uuRv26FyIorGmBH;D_^uv|Yz5x*6{OHm=I`a#B(jGEd!TaFx
z4K_iqVZ#osB%9f);3ixSFrQonU^*cwM5*otZ7FDK%~YDrGU*H-wtRH>5Ce-g$?BPn
z-C<N^fta^};?ct-GmHHbgX^#gCrLDaf!Jw3aOEK0SS8zLlZ*%<g-HgKNm5hhZ6YQh
z6mW=h3LRN07bVBR{1d(<@F8*^WXF=+!iUVrEHnaIr;RPAa|7fogQHvc3*}`32;ST<
zjYkM?9vNh^DJQ&fnsVAUb|l$pQ_5Zzx-sckb`ZHC1HCVhpAI(z1dhlOer1>Kfz8S-
z;ciP1Fcq9pPa`Q?b+Z-kvp*IsXVKRUjX0bUBYb7V!?vH)oI0sh7<A-o;ls0&BXA6)
zxmEI~;~_V^Xt-V~cUs=`Po6A*p2v;IK2^;2$?J`EeDruW)$t0Nu1X8>Tm^@`;kkj+
z22aG1jH5tsi`{|e7aWkL%{vCL7-%Qfk2x8FM>e}ng2^(9x;|&b%}@julV49aQ<FO;
zCQe!n*(*dp;e|3<qV9miUDLtm!<-H|_3-s(B*v7cCAOH}!Q;~h$KXE1_6((<o7DAm
z8C%#6&02W8@e;?&P-92!<Q$yX@q``ClCBJ`MIYY}UK37BsVh8)k@JyMhFvBXx4i39
z8u!C6aHTo8BKx!bpVsD*AwawF=<u%;chw`?=GXrORt^nHb1&8Ut6a?twG#Q6>OX{|
z7&4j_wqxp3UMuCfWQ0e;(8a{?S7}z!HnO8i%QKo_No6hKio`Awj%kFU^l(#7BHV}?
zB!rPd2bfQuNg}yFW?-|Sr6}=^YY_;HN->{cW@CT0g(M*_LL=-MZ4CPf6ct?OZUkSr
z=_bPA1PD1tvq;awuTEy2ZvP**7^?G3blvd~H65ay#t0-!Dmm<tJ%@YUbn0yfxHI>3
z#7s2G_>L6B^gqqxsZCDSs*|5k$y|c|lC*1}`_1x{)eb4#nuhAdYpAluh(pZ6JX-YT
z#|#3=s&4W4f$A~*LQ8CdKE<~m(terb?o2|n+BA5eUh$*Fd^Mi!@nA6rbzRS%fKVso
z;_qN1C*HvEpDgCnDYE&XGGV`3H;;p_ZRs_l|0=ECR)&i&R$G5sWnD8IQU<J0l}|PE
z@lYaRhDwEW>HjmrAWNbq&(1!eDiLU2w5083$5oPtp|M=@ImBo2E$vbDF*NU(aGr0b
z)HlR+g~p5i1j2%jxGbI4nxaa8rao3^7mMxxBOe8Iyt6b?ajaydlPh*hk#0McJ#&2P
z^}80Um58s8-TaY4yAZ6;ry2$Gk_Z>#j42cO%$8P1AmdIXo2(>i=ESI+5@)iBVYaaV
zy6F8!;k!6L^kU{smRxQWJ8V|iP6XCEm}!gR1^(-0CK1`*SV*kOI^?Qt%ppWk<+Y7#
z+~kCO=93RT_{j(FQ!d<2t>J>3a2H1klZ79I?H43w&c_Rc!VTAaXM$Cd>B>fy|BwF0
z<B$Kw<LZ5E{NN`YBILzvjTDTmOpPoSCcpor<cUAYKAw8aFdj1((xIyBR$-q_r<E5#
znb$wf9v=UVmtkt+Xe~=bYj0$HTIkLq7i}^z85Wv^CSQR8F-gLc4BJL04dHq>3oGtC
z(mWtvkOTq(-dHc-ZXn3T3KuKCBf)U+6rXH+o+3A28yUIvWx<mN77-2T_(lA@aU$2r
zViI~Y^(*;)x8CS2WOK6(p#RSjbpoRvr2;_se*KNf-0#+OFRG=8W2ok{mpQW@4cCAi
zgv}T(c!__-BgI4u@Vi?t6zQf`$uk&S4R1T(3`=kli7>)UT}(=wFliIdYl1bh@myrF
z8GDzt2d<7v2*G9PLRf#f1<=JV9<+(TN!k6_(-$s0ec?xHBO`ZH$s&@>L<Tu!gQ$Pu
z=<8p5{HldB^Y<K8cVBq-t+&4WQ(uoP?%U#dTbj{gHWfEsce&ec{kqp2KKbgIb6bww
zJ@9}0c7VN4frZ*aZWMXhG|CjCu;4W%OB#(b2obzu8F9A_ZCbQwf75Y_4*gH{P_kan
zxRvxoC{u_}mZpBX?)tK%ni&sg^6|;y)a!41*XZ7JGq*gw<KBJ8-|)bdr|y64-y~9J
z(y@*eZDdDU!<#ep+(_%=Pu<$Pc1P>o7k1sVXMOv<XRdtU4acttIA%5OGu7bKeL;Sg
z<Z*T6ZR4vOO!t|#JD<LA;nSa<Ech2M&L95ti&Oav-@b4Qb9q^QNR|(#3Kx(uE;$MR
z7rjj4Rn^O$+hB)%4j>2FJdpjN09^muYlm|S#lwfg`Q}5<KlG5y6^<MU=QfhyzJKsY
zexbn6x#5T2^w2{u&cRK2>4l+~wqLy}z{qv!L*g^IX6SbO27<01<XMUUXbnPSV%TS`
zcE|2SgLL3_2OULJf6TCK7wyOz-Y^_RTN2|<UMO=F4KCdvLuXTLiuf7$#!<sIGCJi*
z*2WG#%7Ez#0jF{WI1AI}P1CP!RV%~yPR}Hpu77U$u5pwVee}-Z>-<nNw*I@j&+plD
z{yO7Wzj&kqCP=FsE0*S3ITfv+IyX{3eRlm1$Ck#%mJ-EOgm7A?sJ5nRsWMAOVelcb
z^JC-+QmQN(l_P^9iN3uRo1UJUBs~1UOtmQF>xJs{{nhikInqP@Lt2<jmrQeZ{Om|@
zgg46G#||jJ7|D2kvFQ7CUye8%WQ|JSq>kUE&#P_fIjn|xu?^|fkjZi{xuq8A)xFui
zsI=TX!etU8LT8rL(3W(EAR>YCCuaG^%~O7TF@1;{53$tZA+PC14yBiB5T{$kv=N`3
zpCJfdB&jVDg~+Sd+}1pF$Dv*A`F6XIs3h)5TWs2N!?G!RIE*El%qBgOvO@8wW5ZPy
zj>N;i**nx+8eTYbXra(*6^g9{&QL>SOb`RJkuX*1zrDcYV?k<&^(sC%;ol>~1LQ7n
zB4lMu#H<C@h^i_UBI%B{mDwQ~^1W%&0G8FWxmqq)`@5Hkjo+W%Gd;cM%|<+$X~iqH
zMS#vCPMK-}mo9lT!x28Gy=FQQTCeAF_3RUu$<Zs=bob0Jf>MK!5*#_#<e=b0)HJo@
zf=#0{5yJ}${57ztgilEPpySw71H3M0JaG8R`2{zfv$y3L4QzEWUgp#X6WK?ux#p2v
z;`efmQ9L)Hc!Q^3szGj^jEyyNE@gOgiN~*b<dJJ0PvqABAzSM};FgTk;Vds!nFuFF
zYFX-AfJ6G<_(<LbKR<|OqD4CJAF&16vkXJrLNGSnbYPPR4-v~qRN7pCJ;iCU21o<Z
z-nq#>3rIxmB&_lFTrzsXUQ5QZ*JndB$)8HrEc<rPF4rw{$q7$B31yE9uLT&;R3fo$
z)NH4g^cC$5W+kHD8BrtNjpyzi{ZjPFmQww1Z^_J%bO<#mz4D(*-j?lN=y7_g2e=}&
z%kNKxJWGDoDsOb(WvD{TLt9C_$WJ6Z(4~M?b06`Ub3=E)iTe&>G9MlK6{0a;9r`-`
z0>J);%3(^Z5c8}noK%4;x<f!kme4ykmb6hwQ)oGoO-z51I5YOQNEex<{Yk46-3Ks*
zgzV%u%;n2=!wR^wgU!W}K`=!Swam+iv@jp+Uryk~^|18CKP3xrlyQ^}5uH}B1`_YZ
z6Y0w#8P}A5=l+v{uvYIC-co3?24AlUzJyhlg^Tg{6%di)|3mH6ma!$!dbO~=%ZZcE
zhO^+Z4Si+Cg8AU<I)dZaE~d5`kM9n4fmQVKo!oTaC+}1HU$&LYULEI`_TTwefofHe
z-3ME7I#;~3a~Ar+8ORPfaR^sq<|vVKfFL&K_*guC{PInolub7-$^KKINOFo$i^xSd
zFx<X)@h{uUU7x(~llx^$%#C3C199>7i>&!F#^z_yW^#BgCm5H|%f#D6%oT4FY5=2;
zsNk)@GlB8n!TRmn0^I07dboK@fA`jv`tM~%o5eg%_vY;EzFD<Y-*#+e?e4r@`daGn
z*p73r8~OeN6EpSJuCNNH>r1T1TC;Du;uBLX<Clid)F1AQIuBA3XiXe^3bg!yBlZ_*
zt2D=`_$@p081ORgNyr8XK5#t*lMI2Dq&tbM!?}RCr!NEP<&8L5)VTzfi{cINZ6*Vn
z@1@sFCObp>N(mD(>77IpXR@g|nN6XkrtyfN&}LIYlMJs{b|yWO0bDZ64>PR7JU`E}
zgKRpbUV!!B>bF6en{&vn&=ZrbtNpR<F6b^ufU6NKGAkAyzOIO_7i(TmCx=zCENN5K
zdD7T?pUOX~Tr`Q{S){>uVQ~V;-{$vV4yVE83ry|zO&89D`_F>+-@TY>Sra3RjiT*G
zZ`hjlld}mpmwg1giZ(;_#AxBva5CB`xzx<U;wb|^P&TB@pwa@Etsw0#{|`XIo5$q`
ztjWReXaJil8Y-1Gamu2%UHZEE-;BRmVqHTD0l{6Pi!(AcrMU!;pzWjK(6!|QD?)AE
ze%+YY-hO&vYTtRsxbca1Ur^WXo1CfcuZ;D3<JJAuqv|KtUiHw-!O9NvT{m5L_m0Z?
zy}q7~-|)~4aUfD_-wN9BZ(yze7Z{wz$e)5u82+F-j|qULv>jx8aCp2y*pJ94lw7#z
zB|EMSm>enIu=;qC#2O)#_Pus^{WH@$_V};Qy>@M1t+BjNEhHC@F6{N6IDY-z>#Iq8
z49(H(>e=6~Oc%zse`fb&jIuFBRok;V+>PgIdyd2s3BBE{9j{&3mpOXntIYBIV&`vL
zi*+9a_t<X~Cvv^_6xQ06crLIr<-Ywn`mW?xk^R*t6+}GL4Dm~n&90H+GB72mUxXrK
zTQqO}Y0|g>(P$>ap;GEtG?j{OO~*YklGU>^H@|E?f#)>~9b5>MqBq<tJ&~%tYkF*_
zbg4H*Q+_@*(_Ak8Z7RC{Xf(C`LS;GZ_>u13>7{JAXh-_xZe7N1W2k!ROX{c9XNdWq
zC(=(YK504q9wQ)LMWh3cGJIm#dNPK~uv*g68$D5kwcX_Bf#r)0EG2hD*NSRTN&)%c
zYEjX|D&fl7eoq|VGV=0}DtZt4c5?1S9^r-q5h9q54lDB6zF=yYab8p{j*M(QI!Cr!
zc{n$=g)!FDI_GL_fuXizqz-~y`FqECUbSw%a;dd=V9&OhWVtmlIpvcPs;NwCW_Qza
zzh|Y)*|*$v(p9loXkqoliT9+Eko<t^OB%3TC(JOMauo3Z#be%zi$u37@oQWC#gW;i
zm|oJ|N}=3Vc*$dtVrJUUMQZIkJ1~CWBr}}PhboVa_>JQWV|zPZbXJWq1nFiZ?*lPP
zq!Vy+C)Yn`rL5UP`}_{DMdr*}%c;CW=L{S>m84E-GGTcf9l*6b56QjxJndx?>+=Yi
z9z$xIJ|zW)@M3lXWftZukzeRia-T8g^z1?~BGY6fS`yr0vZsu|zeyS&_a3P#Fq<|h
zq&;r52p;r0-~(pNiy3RH%hjozj53RD+nbu3EEnKxNuDf~6QLimhfhw=T-%N7P&?!@
z{r1Y@T1U5rVF+ia3LDm#$EX_$n{BW(s*H2gL*RhHwcJ$H9$872^5OS*1>4>-98Tx8
z_;{^6k&Bt9NA-T$4HaT<cZ=20Q5<k8>J=cl@{{mrL57DbEKGw7u#pg57<e~>@gu?g
z`6Ty;Ec6yZR5I1fL{p`1`_P?g?!))LPd#_*srB_Bj`XkU%jyx>g@=TdOd3^Z3g-n$
z=Z4&aEDAIYokK9Ap3~1>wWCu+KaP;9ZC28uk#r^F&PQ^|cteA04mW81n!T#M^PbnP
z`pwDF8R|qitz-_qtV17&#}>57Y}(hYJD|mqK0na$b-__ejHA_|uj03qD8{yxm1kF0
zu9n!s8=pOO>REz%m)iw8<Ma-me6XD_rb~Zd?g4Yhm%_8(42!^c4XkCJfIM=Kut@{m
zYdd+^S;?1+ksH+s(C^sO**;vJ9Q*T@t#_N1LOoexz)wFi0e~gE2Myzj3vvCJ4dqDs
zc*ejAiWiNHYuBoF5CQ4p`Ln8-Xf>a1>32a-QpodIH0?DlP0QhR`un`lkf;w<@YUV{
z)cU{YLZwnDS9cN#C%CpK_v7!?Pa(k<iLS#DhS0<04Z?MSu7Siu42acMl__)*k&?n6
z&@%-Uwh`k)FX%}#=2_arB0$S;nidSz>e*t&&FODEvv~a$qGOd}Ccb#Is=3!kvWYB+
z&g_}evBmiMpXbn|C?6RQC&T~M<}dv!%mv#nzP`wkTs)r5{zH2fN}wHQNB53-VQ;1r
zAJO0DYMD&7PPR_!LA?{ZEuJL>)4|u2yj3<PCEB*F(uq(qoXE;P<e5s{soxHK5=C-S
z2p$Eo!9i1$5avLemQjl<)@Oiva@Ep#Mfe9=S|&RMO9EC57b_quCWCe?YtZAlF@sgr
zcQeggv9=}WTCw`nq3J79{^Ms?-}nPW8aa&))gI5SCaIb*I=y{tc$nf1x}8eZ5{ZVD
zpY$n9r)oFWn)IfHk!aq&W#2G4rlP=Xog6J~!^<!Ja^Ih6&P_D0yleORU5F0;lxpwl
zY}-0sBeS~+l_&Bx<VB{^`*#+PgIw3TTT{vM>d|tVu<}Xa1sU8E@w@&Bej10UBI(i6
z5`rX<Ky=|G;a<>SJ3#}Gxh%FCV|aiKR3D9b7}kZ;>78fhgyD7n-ObN^X#4ol<<qB^
z4@@pqujya)mbYBB^@e{e6eq5K|J3d_+WG3vJ6~NraC&+9^p58A!drgrElWY0bZC>3
z<G6_j8ETPu?+@Hj3x3~js+(Gm{puAT%0BqdQ)B=9;2(c2_s1vI&bMCIe%IE@AFu!O
z*56^vBsi!4rGAsR{LPG=TuYFOf>{%Mqm%}yfLDHZsg~5k$C{RF#XA~wYT7%pDg7U8
z(F!o`bZhoSf5$KyOsl^!Khqd%e8w!A!yE5b*o|X7hb=gU5}HwD=n2OnEu&<#f;HCv
zg)jc!Gx&PO_|xkO<#ORVXm@MB!n+o{?-m{qh(hoa8QX|yv^Re+ex+uZD~7RR4nDb;
zJlISBsy(b86@0=ll80v}N<p(im4JYXo|6q6<e~|X1;g{)c+hj1WfKTPb}n#+2`(Y{
z5eO`ezK&K|RocVmS!9i7{x7GHA*OQH<-eHkqzciSt#%$SR5{<a%!EnB3I?=jI-g7t
z@F*roXK-V=SfXfEyiCDWJ=Z+@TOm?Vu#twnZ4Er<?5jA@o5)tiwvJV@42sYZ_+GUU
zqwZ_Ug}6PMr*=kto7co-!x=1ndXp<yVi`omamoeBUA-WZffr6f1B9(9Ftjfd+qW<F
z)xbbZbcbIzw{Q3#tC_WOV9frX1Kk(aMDD8%Y=;m2XrC|-w+1C6HqcmsaIgmg5akFL
zy9f^23i4BwD>2BWa}0~m9v7FGNDK$$XI?(5elFceZRxE4x9MH|vBa6)&g-I}R9zne
zNh6mqt+n~qj#woVa?;^+S#GK3N%@6{U8y*cjN2$$VHh)0DLayO|I#RSGMz2Er^a_!
z-5qDX&Mgbai<aksx%N`2`L)rylW`$RNslg#zV7iYZYDf=$7DFIg;%d1VWxDT9LgvL
zMj0o+p&nMh1P%-IoJ5^_UFhWT|MuIY+N4u~u7cLWEfFEuBnccZF?~kvfsN)FgwDru
z*RD3UEhJLiR&mSj(f#Fm)>nRJzZwa7)E9}*pSbfxY<si5a_oFTD>tx9#>(yAEO%Fr
zDX$ud9msWBYOI-a?X=(Xvt}wXJT^WWn^3FK1EtQ)PNIvBlSvlKBO1>NzRTy}yL^tb
zH^Bpmc42oY>?T>?(!2wpb49cJowRtegORs2uGH9@!nw-CRAp-SV!7PkGdZ!VTlmP)
z2iJ<%TvJ@r-mKE&r`G@PsqwSjqy2W;&Gc@0-)&oRxy1_y&piIA)xxz`7gvAbV$lBb
z9KXZy!+6^g+%@hN_Y3d&Lbll{YyB_Z@Lv5?^^QBLr=FgloBP6r_kHD5?T$NYr@r>%
zb2r_76E+BS-v0H{AEK-MGLazJi!bfi&&)QVIMe$+ceSgxP{{ob$-}+5+ZG?)qDOBj
zfA@v(&wk<Bp-V>ih3{_J^5`Ou<YS-sguVXvXV$;{tb6nNx4-7O&#Lw(SSIZ{g?#;6
z<g0M+js}um+_5xKzyVE}5GzN>Uh!~SEi&v-V%tQPREKHx`zfQ)Z&vy-GiAp5m1e(S
zq_Spx`?*`rZLgc_?;9KY*5u8j?K|%L=tmy{2U#uTa(I}x<k~0KmYU6_wUd)upUT23
zo^K>?r)>qCMSmXnT?MBzVD%ErUoXIIzQXgWCy=mmTS>E{Rn_MNq$i*{aKq+HlRlH`
zxqNc{{S-Y(s@s$KmgU~HefwR&o7C;r`oFBMuAb~Yppswy@|W*kdEjj~s{3DBHNXBS
z>l~b$J7}%HAAP*lT5Gr8GjadM_xeAzFtZ1JWS~pth3`2bky4P&%?_C`U?rxEY}=Ch
z$D+>)&WP8Paq6*S3u)W3j~Dh?#caLSYWsy|E?U@=)k1CtK7swKZRL4(s~3%w^CJ`t
zm{{JvcXq}+u^+k?gF>O{shx{=z*$R@+C-`TL^ZBR9kz-W3h9YF!4;8%n>ua`FZOM;
z9|TSya_GdOy}Z(!O>iRcE1Kxv3<?N%EhxhV%MH2NHa#0VW;W1tH&T3X{}^btfhzQG
z$aY2A9+-T~`_0SU+$$Mk@g`W$Fx2M6qW9#-3(-iXCiQTXUB+s$U;`@Kjt4L*7jJY)
zs~fmE>Up!K#zXOm5wn!c&xDNbWe)IfIG_~Kaiy5NvUenQ<XU5+wRA+OZG<|gJ0*3N
z@Kz^m_*1tGTM_0ZnL2?Drv)<NIr`{<q3cDSV-YtI)A-N>1ul?tK`_n`KPoERJdRJ6
zimVSp6?S&nCYwQ=7T9xa6eK;7x(Zh=HB6fJoIA2G@X<(;VC+P1WU8EvOiKwD%P(c(
zmgeqSZJp>1&*b4P(i2pK0!L|Eq$L1{3x}&!C!17U0*br$KefJ1F)i^u;hTyiLR-$x
zcJe(Rv<729!cA#vtTJir-!*w=XKHe|bPLL%YdB>8XvYc((6yvh9v(?nDEy=AJ7^nV
zq`s(ro$EJgv-^;c>2?Q)f+W52q=j@Yu=<GxFm?sWuFI6D>7d|}K)^-&tcMCgI||U-
z=*r8QqV#jMHJnL#dcN5GNOvUOKD$&ehqY{B>yc8o-khb7uYaepbo7S2Hr*~259Tcu
z+tngNdS(m)ytTurGe2W^)!l35EnCL!zIInQopDcYZ7g-HC|nesT%^DF#2%$iEKyK=
z_{P=3=(tDvw&SNNsYnz7`SLcuA|o}Cj+aG&eT?jZS<~rq86810;aL=ah#feo#Ksu_
zc<HWKFZf#pn?x(1ol6JGT%OAGH+g_OQG2$f?SWD{<(1=Bw3?}OW`{wy+J36FB^S=s
zZrqkDtGH9B(89B$t`R4}>E*@kf4X>}VC(TztE<MZ9Bz<SP<Lmi>{x!fH{x0|wc!N|
zl7Z2seTC+)O)Y2r7=TGg#?5NVaEgU^FivmslivDLWR=<_#QC9dk^U~1i%n+p)S!QF
z&OkFES0)xskUk$^x^Vx%i~<g=0{dN{_|p1m|A89JGw$~SUFqHGr$E!>qMji8zz`WK
z5ppcNDwr)!v6i%)L@{rZhY2VExu8P`1WJhRZbV{P&r(tfhCf?N*h#;X&J_Km6W4@-
zK{0X;3WNP;oIg=7NvfB4l<bfr7%8P~OC)m<J(MGk17u3G3<_StvyFp8x06v1a!$|!
zQu)l%qrQSRoucIqL4zRv^n3KkPZ5)m*d%&vAPq%NvpV9{V~Tr0e4a)zBTd@s&mgg<
zbjDj0Hc@Iw+6K;x9~&tkAPiZCb0R?Lu^T+qRD7x^b;;R=5Yt_Qg3qbsNTV{AO!=V#
zFi=i5o+~Lg$~8mq2MP*_PwgvR%OU^}QBI^aQlLCYae6f3;O;_TgkuHGgi#b{nx7s9
zmex;#jtT=oaU<l3g6c6LEGKed#awt1Atp~kG6f}}jW^3skcfpyxz4Tnh2fZ)Y!&_0
z9Qns4&N~oS4s|9VoGGM9bH!s5w57p#79+Fhhk6iB&?#%--)mFq6>UoHhvfRc)TS5%
z|J^oqd6!b>bQrPFYf1BdWz&jG6)$gDL|$~VL0{gkXhHu$vwC@#`z>gm9J#kT&Ew?_
ztWer)UpRBQhbBeQE^AzH#=Np^$$0X-`Xlvmv`x@cM7HT@^rQ;I1^o^nC~jqZDFdTQ
z1TC7?K(uDmS8dC>D;6pZx4W6dyuW%YNsgg-G5&^Me8U?~#agY%uJ!L<eN$^>_10na
z^IFtcJJs7!PBhDI^w!nV-c-y>5XL+823EHtPJjK$-@Z0^>uTeu$U|$$Ko|W2a(*bt
znYaS`4;&G6yIH%B5&zPg7Tm!NdD$DXC%b+5n;wznLN0q}Nozo{?vM)H*RyH6voI{9
zMG(UGz7Yu-nY3S?On7tKL)HqCd-sYJ-aZ#ePL>ndj1kU+WrfOQBHG;^F=d54D`sSS
z*Go=T{B%YSeg8Y(`Obd{{=V>qFDUi48*X^p4c~e6vbB=z#`QdR<3Q{uZ0+2;xu1wX
zSxKccAT_CxmQAICBQ1yJNYzV27cZ)zi*LLC{{Qj71M1kF-+A?`zrA$BzP&fzxR>Ej
zbf<5ki~b^-_mr@o`&}F9fRPM4CW=6SIU~9O(Wi|QegXd<Y8?a?i6%jh#C)fpx$1NF
zr_1BxqmfoGH@3dpAITNS84r;RLtVtG0-WbB&wc-oL)vF%?d|G5f3*Cy@~FSi`n}v}
zZp++lD|_1`=`^9Js@659aw=ThzjOA-pIHCnsHw73iDW9s|9+0R#dA!Z;i=v~^ytvj
z<nsRlSm!@s3=qu1z*sjy(jx4D%ZXCoVR)B+QSTQ-;L#F0IE_1^-bf0l1oZ%G1PTCx
zKM->?4;+0mGdy^_A}zD?4F1x@#nwX!vf8%bTewS-4&CFf1Tt0bS}-^G?T4ntA<nS_
zcUf=@at`I6qj4glZ`wh+1fbvE*F$mi8iKU&fG3U=6eDWfb!)CubKSV>*@bGO5R27P
z!_{8Yc9X+YOhwbTR64)EgR?)MO`xNila!Y5VukfDBuhS?#%Rs)?bKwYRx;A2Gv6PL
zz>9-l+l|aZF)RM&$SfJE6nCHF&D7!e^p5(zb5^C*a1(NThf|=mgHvlqx}%eg(GylB
zoptm{bv^-S5Zn-Ns~z=|lbmIgq-Ob(e7P*x-lF68>+wo@ZebXDa?Z3-Ym){`!3T*|
zkL-c8|GsiI8-t|uo%wosSFef0%V?p(?{i*mjpRp~cg=Fid#*`Os0E8(KJ}ZGsp4%1
z^7*;tsZ-@dEclBTkGyMa$M6#joGE`)WQDZ(O&y{omdqx@`5>|+ssGY^HsNc5_)2BO
zER@WtG!<h8s==q4{jzrdK7F(hFQp@sl<}@NX1lAas?cnb%|E;`ynnCSZ-ztTxw4lo
z#cNZ3y|#MG>g_^L*?jpJwEf>1gQU4h(+%2&y&xi11P@VQ2AKW=Rd#wb%7N0-Q%|NU
zmDKvr$fufefO|M*D_3d&Iwqyui#Rc%b5redV$93b@Tb4H^3|!z`d_{S%|z&ReK&z|
z6OD(y<3yrBA}28=5>XxdJcNw>HTvN$H0d?s0w-YCJ4cVaFm%_@z33Vln9#+1+W5-K
zT(dnZrl4fn2A@DJkjh<Di7YC17DDnqp0&QP@e$r;NngiP(aBCLpLZ1|W9DpJ3LROU
zK#83V2(DRm2Xw~NWDco5(KAi$)(DQMlU(9XP~KXyNTMpG@rp`+qo&RgwQdXp(Nr1$
z?Ilg^Q@?w2^s30~Q@4L^)jzhl;_VyX8d^Sb)VT8MVg=p|?Yyx|ov~Jc@G5Q1>6-sd
z9netcqIIoDs9{Rmt<+w11l=RAZqhWbtUX4;#e~uxC0RBP$Bt5Q=tqZfO>5@j_1jfq
z`mKFq@v+(UA8fyN>mO|2v+a@PecLCpd$P8Q!S%X(de7SKkxEf%jpB~sowQR8uFmJx
z=kQw;z?pG(MSgUw4eec2G1>sp2(is*A2J@%CI)dOX%e`UVGS%TwYJ`O@O4LyzIH8J
zfH>d0C$X?)OSiklr}9)H?Lquj9IuaVcZ-eea(v{bombv{*QxVche=m7x3+d1J96aM
z(Icjp1k#_&O4tia3U8UVtS*A&D1ZSvJp>rk7hO6~52dvd9F$fm3w**s{S5LAmy1Sx
zp)*6=RY&p)Ni|DA_n;<7$;M@KntCnJ5@L6vQptW0mRO{N@9y07JJoKFSX`_;uT>!5
z#v}ZYx&~e-$OOXCDk<@Ws1uGxD7%bG1*8@tOFa&`mtiML5a)tUC%HhWTs;D}jQ;6b
zMVqI>Bgt61)y_CO_SAJduDW@J9hk=O&g*B_S_R<~TmMC+KB7^Hxw<^kp%(Q#1T@Nu
z5Cn&ZO4AdCoLQVGrinRv&DLT$J60`HWk>f%Yc&!ZexbECd&9~w_N^OPx%sLcRC0MK
z|7TMU0ms{vLT0ZmEZy`8^zE1iKnlxb!x*_o3p+pXRCxQ7kY{Q4A`~mj@VgA`h<qfh
zUjz8VKa2UV-MYgnPlaHw4fNd2<B&x7;&I3|+Su*LmH+9=jh+0b4}Vym@k{lS!)OM@
z0Oz#~vWr%TPd(_vJpv=x3!J1xEwL;Ff6Xj8e~iIVvTFo7LpXiI8|`CZPDvijl9Iw}
zz-$<hS;lItEp0%;O%N)uN>?6w!=9fdWrrbMmm30ThE~B2`!kHTJ?fjIoOBR5G@@qI
z46>{PU=F%oMoq$3=Qz}<3Q@%awO9VDe9F|3cqmq=3qlJ!3vr>jqjge3h#EN$2Y2MC
z%G0fVGol+IR!{{)D`&%Lsu^pff_hoQNtk*ROaQeHj11{&5F%J{j6@?pXTld1io~-X
z=3Ix2nlM=wkbOuUV*D~vXLdU4UlW~5CPzAd%SpO!h`O~<sY@J-(}P`Irc6IFoT^lb
zVrn+@Q?{Or^i8k<WY}l}F77|0+yxx!Iz_@M?o9}cw4fG&ap;drELX``rG`RJ2?x({
zBg$S%lX?-0$4$%a`ZRwtoVLR$E?y<vP{}LRO`#RiAazS5lTOrGh=g7}R%%gWhxQ<G
zmFLNYd`387uqmNBTy`)SVM*yM7(}S19HJ^{M1(;dD&wTGO;RV?gTw{QOLZ}1ef+n~
zgz#ih@14`tbYazU;&_2>bx;uKazH{u))TgVM(zWk`JlW6Ohp9yrQn2}-aUCX;(HVw
zG-LWr+YVS(A#jY*MQ!uz_iz`4RYjNt^G@U;BSq4JXJZ#yKZEry=~AAPv<^mA&9sBb
zf>?ih$Iv`8=MLM_=7|q;jd;|Frbzu&;g8)-70#=EcwDxH83=^{yFtE5JtQ2CCP<Rp
zy!ad%AQT5EpMW*8k6<P-BVEFmv=F$}7{CKvkkHIi0a4I1@>x7oe|nsZ$MJF`9T_o0
zQw(ETA__5h?inSl$<>N-BbobY9)`M-j40?<UuNw6)>RiTUfee7U%c|l)2E|jiBJ+T
zu5KI-huzTFMJIIitauE}lMps&#d_2n^SEx@gqOaHckx-G{j>O>_lrEILyBc5AFx4l
zuHq`UGJ-%8!Hpu#xV`yerCwiHPUR=)q*WI0g3%H3lwfG$_hkfH#%>3ZB8jbw#9+@-
zq#&a{(Az?xxJ17jagrI=-FGLr3#HL)wQ#AXYkQnghV66+c2e7W<Htxaaw<w6wQz@~
zRQw9~RP;!-P`1s#o>_X$v9+FK<W}>!j9OY7c9S#bb6LtMd)<}#WT;WEhTLKGaOuwF
zx<9|CL>h*6<t~4oaUv1hS;!Y68PjPs=0?gC=~(<w9BRW`VxH|!dS2?t{2Go2J6{~l
zs5^4kZaH?(Y&1_^mPQ51V)aN(D^T+?nX_{6q2)T+I4O6Ve!4HwrsBlZu9lX>=yth}
zKN*O{*?I18o6tHw6#{8fsxc#$7WiM5aho$pPoS*GN?D_u0!|3tn)|&hnT@k^f=R?5
zdwpRdPiSo&`nb;L$1)5$2p^xyN4V^A(<xdF@VkT&ccV$hu;Dk^@Why{<D=;oJR7F0
z>8B%u70JB?82C(nqA=K<(mGq#e`57`8aFKoeC@DlMy5xh0g+j{CqYh}H$0F~Bpr5A
znFBAa8G30&JA64NB`Mhv(40y;LyCivLr;LoYhzSE_-A_Rxzjr=<NV&{xpU3aJ51xc
zy)(Z&Zyej!*)yT($F?n<Q_q}UKDF;=*NlYC)7wuoWo7?z>5QQ@Ryx~G8#?fn0eA1f
zh7_jh6vvfHT0=vdW79^uLa#*#tEz<YagYSUtVFf6q4$6D{qO(g1CM;}5&qY|bh>r=
zJ=2tuj&?KF9;>vsvggh|u$D1d>HU|6u6|Tje7<$Mb>iBaZhBRSI?`{d?12KgFS0a(
zPx^COQhkZYRD^R8=8&18?cnbZ58Vly!>@zG&j6Fk2A!nS))1r&qghLuh77U87EObE
zQi-_+_`HfT`CV|c!4LglH14%~fscENQCPYf&1%L<%NjH<OyL01ivNa=E+el5Y_LC(
z*=_k849hS>OY0LenGTC}ZDp7Pw*|MQ%+b?9H)iGF!Kqwtq>RvyMI0v*cI_Qm5*@K%
z-xkwD$ry4+&Bl^MNT>{Geg(t|(hCpfohCyp@}5r((nTtSXsMHtn5#3Q;!llN^Hq0W
zQLpR;FkfvOId~&ew~Td98ddLFZA1~nH!4(=f|JN2=OgAqTWd;15y#G@;;uHTQBFiF
zF*>I3!6)cX6p;ce#4u^5(ow_l8EWEw*qBHgY3&$BC4*%|eT&v4!_+s!$(RvNI`%JP
zjY|T8;~a9x#Guwt_?KZ7u!56k<XJ@N426tsuI|Mdg}m3+52lk4GUw<LUO8Pb=XPY8
zYu4OwEwOVUv~pbtDySR0GMx@BBN8E}mVw-{N{v!cqqwMw8?Vv;&4$f=dYE;!YNMh#
zVe_C9O2tKOaj&pA7tT8-D&A!=ut{3d;b6of`A@Xyz;t9Fw$n1RT^Nr7hY0|WfsW3&
z^+P#i2`mbj<dIYvVvap^1(L+BWW13?p@YOTqE3Y57#{-ZW<HN!*=ujR%=Wz9vDSY^
zVqNNLgml`_A2)QcJ8A-95sf(Cgg=ndp(GV*o~Os({xUQ49@$2==efys<;b=91#Hey
zY@og99>@v|NC9j~^iKRPc839_V_Q=ggf!FH3T7ewrM>BcOs91GhO|%e(c~Mi_0M@)
zwX8y;@iAzwGPBiAxzn6FG~SKXY;RB8e@Da&Z@oS0PmWb8>1a0k{Ys%z-nX+?uaCsF
z-1Kul?t4l94e<0WPj<4~=9-00%{i5y^1Nzvdo+C9sYP~MD)o-aScQ$#>lYL7D<?ZU
z+Y4iz+?J_|JTG!YexN<3-i-w{8?cCD7R^fdCBtK~I8l_QZWY^6Ix8iTu;&;Y0!fKz
z7)VU6sL8+J)n|HiQwn`yACs@TYii;eTiv6QntI^%WEX<f?>?jd4bKpTbL&<=Vkf>x
zp7m>>C3%XHK5w9p#H^&!fAj+&!z1s}P1jyp^b-%5zW3#^(FX4LoZiCXFw}joLp|XD
zuh-Q$<jO2^)8F$AhJDN%bcjO%T-#8M25Oi=!mkRgWgJ+naJn!YlG8X8=vTtX`KF;C
z!HdU;`0~h=T%?$VjB8vJpZxdn#p92Mr5CM&pXFAFSTg6^s3oGF5SK(61<6WtJs(5{
zG`FIUlCLJQAHiVr5*~kU<pRPG3C9kYH)q<7DU*B1@3g8kh}7@mmQSuPk=>Jc9}bbu
z64lT(eRem57F?0pgn5m-fxt4!c3;^J{cF^YTX0|WRhP=2>MLJS;CC5%$w+>?B88Sf
zIrEfI0U+cVdDp6qPNuk3*q&jqxAShR>1K10g?Lo0e}hzRIB>bkX=5)Md0Rch$-K#@
zE`@q)BJu@l$J&k^?qsTUDuXh>BZknOqxb{eYLwzl1VIZ`vrr_dRMYKT?0<@JASMN8
zY^rng4%^>P@^~WQ&dt@Qe91;9f14oGQkDwn-MNC6^$$#PdIV)GJcSH9V!`Aa*pioC
z;2CmNSco}nN$%saMxn+{uoNSOJesc@zH%bRTh-O-gKOLGXfK?~d&B)7Q_idA>o?p!
zU%S?e9DHbPelogmwwtY=9JGx<_qIWjG=jd46x*~_1!~z5oEfg8SLjca_5+(Ez6Q)e
z@J<rsl1v_XoPAUz%t#!u!TA2%+Wh?5{0EW9qq^~70uRmH`mg1h&D@)n?x#{d0+@og
zCoM3B6g9D-PPDDKwd=OEwcFN|%ck>dJpW-$-)(6Bi_HfctF>J7O6)D}F9i%Dkx7%L
zKv@V_^rRH8xz5&Wpc1gd<JcFUqWyQJW~3jqdz;290JXs5s4u`+Z^&>vh_-VnG*cP<
z{RL5xECBC;%lYrFKX2+Q3*;T1X;f$O7*RaHke&I_Jz6-I9ywJsuthCBbm$}1y(##M
zX-pFNN`kLg-Ld{(IWgtr6ZvGJnz2<pk|OOZ0<_$1<63mfNrT`fg)92&Kl3U*MP(4i
zH+kVg_2QwS@TGqnnjydKNKl(@KR&?o_yBJq^Xn5sUmp5xWOPjH%fI3u^{Edbm2GyI
zmFtnKo2!_!BCB!W1#1dpm8=y5&Wa>&+d;sVN4P^1X9!NNEZgD+oMr>o4gPHj(pKzX
zM;s;C7w!PGHI5WThz9!_Gy|#rK4=m44$bC{3hM{2en-2gH?=13hQ1P+uH~v;?R6w0
zu7Aged^$Z`sB2oQ?07=p40UbG)OYH`G=UbcUasb5^n-dXv=v^2Unsf>sqF!uMl9|X
zmsBLC<9)zAV5fiFiM@waYKysQsMxm3U|}msR)%$6r<ZjKVYB9CtK(+bjBAZTOO7p?
zI?gP2G-`k;{L>f(q#?&m+>Hy5_;Z6=tyOq9Ea;&$^`)Hihb28p3VKQ_7_Yfkdq6vO
z#l_cYuS*WMRk@+5S}_NAB<$2CVHUkuG)h`hE9xmdeZO|sDQH(q+SPhYi!W=iKZIc1
zCZL>DZP!p#u(o$?OS+Nv$l-+MGgjPktF~j8HX8BpaEgRL_~;mEk%%@vr5%~nCdY@P
z9j(>TYNU)g(2nS1BW!UL2?#xqP6=f~>3C9dkOX1E5}S-g6RItC=q8>qj|Aw0JU__j
zKzoq^o$-&r6i`hV#0Sc+_=JKXA7*lVOjz9LprYHN%l0!bCLX@z8tthe*GNQ7^Yo5b
z%>Jyz59W8JOf#A=_W7n{{Ks;iU693P(55U+%;7)^M>d>fUw`x2a}UW|?T_208+SfX
z@(7sRJ4|54wEy2muq<znv#b#;s-B8wTW<Pu!S)vh+rAk&U|i;B$dQS&|A)swpM(-6
z<5|ClNRy0Ei;f|=*W_9-t_`#@5qF?AWDw(jnL+q+XTnh*#3|Pif0rGLEuZ4*;s!%Q
z9Io)x&Mtz=Q91dXkB@VeZa2zLrjdHNLt*`yx=)%}+%dL$#rN5Kvom4RvYYn|B1NS&
zXE+-_lOr)V?$o(F!M6>aLOu+EwiE8{!yu1dJ@htmLq85i5Itr9xw1(Y2;?>ZWvQ*j
z(?v6dY$tFTpa=;`eh`}zT~BmZd@ao&Og3<J6M(e;!{0HIQEP)E2q{0nmtYBLw!yxT
zskmy|+)8LUIgaR8jQ!2QLL0@QIhODs$i`$=ZOd&<gp3Y;1}7TMCR3e|?NIyRTpP<J
zhLeCMlZ!C~bdEbxIRh1UYg^g;0tnsB#ewh+ev#BSXTgiqYq>+xyODIECPbfyv6n1$
z4F_;jiD(l?BwPG}<!0mb6eDRxd^dK;r%*>C<tJuH>M<jZc|MJUB-|SDphDSqM>-Nt
z5=A}wLknY`MS6P}bPoJ64)6#^BYqeOck%pT3mH=ke9%&9u+M;C*~7CFEbKpMJJtJO
zBJ2m=J}`ck4FJ>XU>9@e5UPRv%w+wnG*NUi@$jH!;kfT1r%^*SD_vT>Wh!5;|44SY
zp1HZPSB)**0##&XJTmtiAMoR=Tkm<*Jtt3}`?KqMhui8Oi^Ze2)Q9VD&m>>HKjbX5
z&>_2}{^;2DS}2{bPhF8wmG8ykM}8!cs75E|rlL-#UtfHO6M4f=C~G0`Vf{00?yXD-
z=lj^8cB|Q1F#A*D#G*WQ0A(?y$=N)3u1FST7%%8urgm}tx%KDN%0s=M--EhbzG|Vl
zYr$Xthvv3z&8fzG^}W&b=wpWuKQ=n6W}p6udd~~JuYR@n)r<SnTMTV%E<0M9ot-Vu
z+!fC3SY6#wQG0f#NG%b4>0i*7%s}TAyaZBAXQ&5I9Ta5p`_l@jp%gY1+OHVh+p>jD
zw%_UXv+B3X4Rg_)Ew6udbHX|=ct6|HqDhm=kQZEkZ#o^>8lN9cW)k^()ia~z_1_g<
zJ2hV(UH@6<wYC|;pG-wbGnzDBW0r3!XS`~BX1li%jstqJF8$l3OV}ZA!3tSs4FBn&
zXN5(#Pj3+f9Oa=z!q7Ko8M)i^&g?>u;hF9z03q(*AjrcQO*>e?cL2;PleJL07GT(?
zbVU%x2udFHvfZs@ozQS#<0VFDb<9BXnHOcAeSx+SNK%^zggleHAu(>y1kgz;c)_?s
zq9lnN;6y5f5#*Q|PA5<**a^FC_kR_Y)zfs1f{9j|lqi2x(<Vykf}YQ$^V|wz&1u~z
zW|HbuCZ}sDKZdoP_-sg@V|>kqwBb685Miy}(!xIDo0^B-o>`U-U8?6Gmkc#Cu5N3h
zUZEY@v5e|eopjb9nn0C#BOG%pMvBk?^%qjHWVrjz-I_Z1Y#*QY_RsE9^G{BP82ndJ
z7XA6QX=n0yqW>`zCkdM>3&d#QhbmNw*;?^bK__jHY&0*Cf=%mYpR7q!#gbk!qryLn
z!_H9QcfJ$lJ^ZeB0c<j~p92yadEyC%)rjE$xpFi+VrEhH#Fb8?b_$711D%$rh8?J@
zVHaQ}Dc&fLdcNAcwLQ9j4lreNmH{vt2gFFR6&G%=!)f9im-!fCc+ZGPzS43NXD<r4
zEpc+P4l?qDaC<W}gTO#Lm%QAJdPZ#j^^5YURz_A5E0$VWQQl&LnP_f`Tb9mF<)Z4D
z7uRCl^-ImMk<P)tZgxfvfC@C@B%a1#d@x?r8Eo{06T;=b>C?kzKoSA$;e+Nj1GXE^
zMD)P!Ort~VYtPz%|GEU5kpX<rm^wXTO${QbqM^ckk7206uT!zq3&9|++uOs%Fk?V5
z9I;x!7HCdUiuYm^CgJ$<nxOPZ7A*p{;-k?G$41JFil~MM;MJphCqqeaSkibf#O)A#
z&QXQqN-7JgP7v1lqp|d)HLmFs_9OzjjEZGMAbUIDXl50~NokWde$Pp3(v6oV({>L+
z3_;rI+aw6$ddCIfg?_~u^$4Fx{Ub2;Ke+T?vAe%S?!8n{TYz6`$j25&Uy>-BMS^U=
zRzepO@3Pgm0_PyzOgdFZe5CU97$M1Vkd7&Xu`HoC3jk(WJF@?)s}=>>cl`3QoiJ{@
z4%{p0;F&8=h79lRE-1#MCz5(Jp{1|=F(=}>5qEz)zL&Bc@i+meR-=x^0LkQjwzao!
zwXN9t&E;RZE=1!y`GJC-Aka&3k;2o*sg)YK=I3UGPWOO({1$Pu(Ege6@fn5;s<O`3
z6Y-j)6=0nX4S8Jiy+m~q<P-?*e@^iAzBEVC7{%okOxrRsSQdOs612<{$V3J*!3wr~
zf3(rwpWai>KUB`wTl<oamkO)<(l3+>`}d(Om-GAfB}Y<um#^2C3Tht<52ngz^Z9&?
zuSfE+*|YNQ$;aEG375%SeD*BoDf-}_t1qda#4}w*3SWo(B^6;HSqB*9tayK5w<D~A
zHfV}VL(Im(OPob4tszI{j9Dl;uz+BB@pyS5K}AIjjG<-qQ&^`VuLPoAU(_9A_b4=U
zn(fZa)Avbo&1zmI>iq1_+B9Peq^o8YkvpqaJ!WdBP}z%yllL=bV=gg{@G)#^Wj)}Q
z(}KhNR}4!nsJ;cA)fwVb6k<S#;_!VWnuQls!z6M;5&L5wwfzGA2)h!lJ@HeYqEIB(
zL6r1&j2t^YWo_Lb&D10|Yh>bCn<Aj%FB{yWc2F0TIJ8`s+z7cR{8RLUyTFjdo#GW-
zai%39gaK>|o3CMIWtd?QVOv>ihf-hU$f0~BUyet=7;Y?)d`*aUvX<=3Z?RkD5qjr@
z9$J6Sbt2Z}q#5z7so})u;BmEbyLS~xGo&`-$-{qPzBSUydkJPWyW5IQ9=bNvT<~y@
zY2nH!%}4C>Ik!ZnDg`aLrC+o14h|PchN-)z(3HuZ*@!)E<^cZ3oX|t$8N*CZDUw%w
zo3EJP{Qcise(~b#?*8D5AM4M)I2kN_`Mi4OqI37%uY2)h<i)9A+2yk|XT}M2=|8J~
zQJ<$5W*I4lhQ&}LUZGEEgJ&c;A{JJSF2)NXo<r8?LY?=P{r7Hhor7DZZ#jDa8TjD?
zPG#ZXQfWL<=)UV~3w3jhwbuW@IQG!Km79whV|e+R`8z-G*~ad<sbXmKbN5G<F0-wK
zPg`n1fKe6u5!r_Ih(9rab7jTUpo3YxwzX*~ZhDDO$QUvYX(1;|`8%&r9Pad$g08l6
zWh#|g4I)4vdGy+AAH7z!b(mewP!&CqbwXqXY#DRIy(5j+u-=~sp`w3dt!p3Uo`_EU
zRdtvcYiOv3PCdvi6q(u);11^&oDjATr-e1E4rMyo#@yWA*^`Z_nf<eKjppb=vpG3g
z+Tb+#gGmr-l%8K0Z8qj0IpG-MU%jNgMm>zIJ2P}EILWsRJ%udU5Z09Hl9bJ58HoXJ
zipbzO5dA@`Vjw_uLO{sUY3K!POir|V3HFNGm902g#ss8&A1iDi{ADngu|NuLqv-`R
zG)tLevFHJVp+6WYSopqKun5L90@yWU$zphFEY)9_4)^9Fq5X5iuW2nE|1*nxv<aKK
zFe;y`I{o40`4g#VZzfr+VR{iF0{?(F3SKU!y*#q#e~bvF`Ute^4~9b2;R-$M5<Jeh
zciTpRfzQZCp0dpm4jMOIGfgVN!~%&ovGHo+?Ckhr3y;t8M5|<3qvduZm6{4SSEdbj
z-r1ckXjZga#*Ab47`!S&IgRdc%&Yt)hYOBrg+@XpFzlsJJ~-sb9EUOa;4z?6|I5&u
zwYMk_J7f;u{<TA|g|B_64}ObLM3f-BnIv_|KqPZy=uvxHCMc}N&E+8o@ij__U~K~B
zX|RMzd4hP(m?8)wBb7Wo%xJjTXymeTdm-={$lhh0Y<F{NnGD#CJqCvz?1qj0P&cC)
zuLcoN*u_SSp?AVTr-xf^!V7(fn-D=cg|sqXv&l{xp_1`m#S(hd^cN#>-H1nKV2w>1
zMw6hF(zjCdR#zWF!#48qVa@qgq7cE^<M?>G^$6xIlc=tR_pB1!+C{PSkWR_@X(n{T
zU(oe%MjY#A-G==1FT+{i1KH(9&xaollRDgjyT;H8Bl%Q18-{RXJ{e8=9uPLz`ong#
zVd^)={KuSTvKp@gW*Ko~D}3FsmJVm5Blzekt)BG2!JAfv&LVyC`2f>GC1T+?(CrS)
z%UxiGv)LHllxCHP5|uPBHh=ubRp#%lH`;d_A2oUl`mA;14c=W?TkH4D&#P_I`ZW4&
z%xkZe%TLb*SedV?Ptey3^z;l7Cmw3hud|jNj6MR?TUP2!W@q#Kg5-`boNw;Tc)jx2
z^75G9t~`07*&avZ9B(&IWUI?3mxH7qs!Cq^yf#LT_Z0O2KCU9_{R*&_PdErG+!9M%
z1~rC7>AT`JmQNY#QfU$t%2;w%wr$R2+ksBNZ)jR7C7fh)^RsN-pX)aQ$0!9@u|G4j
zgo_1{O!8ZQZnhh!5}81U;6Oy}`H>@leTIyAhEh1Z`eOg{i=2?%<9ZoqW&8zZo#8ZP
z&<0JCp#qz1-R{iD2+&}W=rt%VWT40{F$CFHCX2ziF`mz$uHs){Zy7<^K-!`(Lz$zu
zutl%MJ1d)r?U)q~CsZJA0WS_4yn+*y+rpIvYq1#3D3fLZiiF%P-q0LUw9P_4>~+P@
z)JHbT#qbe0I(kUJ9zF#N;b_6ztPN5f@#Bj>np5nzPoUN7Zo?osGM(NMwPV1q@T8LF
z11)+eTn&T4(raOl`orG@rV7r&ifgTWk%$nv;f>Kk0e7k@!E!+ycofYDoeFc)gH;tq
z3yR;NN8!|$4Cm~(H8pWyyje-o>jcVWM^a%gHY)Y6imi~!W@{4YsYwAi&H96yurcQ9
zKp=~zN)#$HHU+3q;y6x{gGg!fm>J~|U>Tw9bqt@xJUMH4Il_9_b^RRrn}=sRgg+W(
zEgL6pV0n@Cw_EXSf*R=wt6{NEJC5T@z*&02Dfk4-;L9a>iU=Y4RuW@533;&!QDDfh
zAzAgcbU2i%5%CA`hO$IvkD+P++d^W4;$w@2-E1V{7tM4dWcW2gxcq4e7rVjs)0Xol
z#Thy3no81hMsr~+3Bt)+s<eD6%cvrHSvngJMN~Lh&>`XCa)(QW)EPYDf{-DxvQ(MG
zY(n--<?+^GawIf03387cfqOfQPl2pcZaPQh5?uF7N<Zb<aWBhV1Mvb~c6D~a3XhNJ
zX4Naj<C%<8uMQWX@u;8#hf4{P|HuI&{zl!^O3k*bMB$3bcm*Q|GDFCvp*0a3-b*BT
zknB(j=~5rj=c-a<lbR}2_egdOJ4GBD+Q-1Wn#puLY@jPZhpb{yOD9rh*w9N!C!Zux
z8BfC9Z4*({!m$i&-ic^TxUZ47b~52nt5FdxfaO_FLN#D$WTjznCUM70h|`HfL11Mf
z1_ga^Do{Dlr9dW_T0{m<hqO(qGB`LbQCtzFB22*p#{)*dtzg5?p?9H;615W5T+qN6
z*@J`%^l+AL{wN%=m;D%s$JS-Y1L&#R9mcuKAyew1`T6K%ES1ZqqEoSzWEr$N)jc1c
zpZBJsUMiAJ^Xm##Kybs88n<V|*$}uK3eaY*UzAU^<?qtaiMZ{2wnHhk_|~YO0_GKp
zeJEINrOWZlejs}y_3OTOX(;ep@L6jYE)50y;gjqm$uoT(8#@P{XTLB%W)U>Y<^T}b
z=?Y(pO|@vSk(51Qn4i)YaF$WD93KN(Q$J7y(kVy}J2=2JJKJkpU#n*E8;GS41x=<O
z4Y~7;@H4MXe6o0Mt!~9A!YP0&J$qH8-p;Go2?fwUnu?!n_wu2~R_xsHN}K*0rfx2n
zG^)^1M6{bvkDKb}s@3Ozz8{IDTwF{zw7`5-|A@qDJ4NPBF_9k~UaMrP#OwqA3N7GE
zX!SNxnGV;54_zK#fJa}LWgz1b3tUL5Fp5H{&%$PTdhJJ+m(@4Y`CYef>mDm5!jqN$
zHQTQ1UG>1qmMgw}{(NI??eXpZedU3xde?2creB#1CrZcXw%xufpH5z}{uk$^Nr_$j
z95G?3-IRvu?V5n$g8M~-lKh=b%I;R8-O1un-6Sj3=kfPU>1bG_&tiGR2%}&J<4D9=
zA)*_YxyA^<^RX!Ph1gc3u`mTs3>yve-b^fp-ZipydvyKJ($#8Ook>?$DTyA+CJ3GA
ze$BEbZXG8rU2C?C2viay`4HUm^j*_vTrnPtdUzp<xIey?OW@4|RBXga;>`WZ`a*Yc
zrkYXbGS%w(3&T|L0MJ927V9{#`3`i}MW=9d82vUJGN^)zTgSIyH&2IBlGnANuRN!o
z!G-`w<`1G?G_amO2yo*lwfmXxUj6XHSAX}d=N1kgy!~J-dm^u%dGs@nJ#Sp~mi1>?
za&VzuI+%(CU3Q2z`xN(A1BEsO$Ed{8$5jHuDBTXe7u1ta&RqA6U;p)FB9=UV{xz!h
zj$eG}KWjt!Np1ZTH?fZp{_Q`<@BU2CJ_fanCh;XNkV{5BON*AUu)$KWS?vdEp|r)Y
zj{}22zfP(t@EtlrFC!I%L@vl%)>hZ<+O_McUFUeK)1H&xJ^J$xyn0J9YpG9{(lG<Q
zux0w=>k)o`YFA{}H<#YMefztYmJV#=?<R(ZDRtv*yXxmU;oQ~?wBEzIky;A=SYxAo
zJx`zgNvuTi4H1)X*$Z`18J0E9O?qra$A}S~JXlJ40_|H=7cjr+{w7N@;Ujc|0Vo#T
zM?L@4`X|pG&@D1tbYrG!`;0pgyPhjH0D{yH6h}vL<V=BuOEeB&)tFxYD=!Ihv~%yd
zcAOO1<_w}{wl{ZT<(d<~H%imVY&N3DVfv5x6c`%I=d<%M24y!+BK6dAdHKxFey{jF
z^kC3BH|(i*W3gc^lAGVYi)(xd(`?a;GFaoIJe{3#tzzq;!q5j$XfhH_XRh5x6KXHa
zpkXoFL&Fhm2W-9FekF^7wt<;EXOEN%`Q1O8nah^yEAMkkQ-!osJGeJD)r>UvtlFK)
z5qA!{xLid|&sbl08DT<T9{*{z8y%iV9IPhCTXy`fW3`IgpN+bY*yZ8W$UMVT8YU=j
zYh&uBOszG8j`HEl$Pw26IWWb!)D4XKGqlAF+Wf$MCMFmBHxg46W~Yzevv;|+?flk{
zfBe+>n~uL~MLn}`$5ms;R@y7q?^wBxV3$LC{%!Ra0Z(ZjZjK4+1%GAeTSI@%?w83{
zLNK?Z8gY(b(8^d-T1L9zKqzf`5=^Uu%Z=Db24O?G0?H=*gS4Aow};9pdNi6ae$_U`
z1RGF|P-h$T*Ct+#YAY7L*PzLv5L@Ek)4F71i|mqU_{QD>T~~}o+_3BneY9eyT7y`U
z_`ReVOW|Ab@e)SCjVV?K>Z{0V0K-T?jF3f@ixBfC`VfzXt=}Pq(kn0!MB<4rQh*eh
zXujVIg*;as2`{8>*PLj5g<=z$1K(g2h$Ki6(U4qia`J!zQsBi@$;zObm0|Fs^iQl7
zyCJa{wsMUS%9F$ywJiDt^q%o*Iz2o|F=<FkaY&+l=w@%MF+w>IoNyVi{IK+sS%HIl
z{Rhg+lw%!S1D?H~TG&R{LcIiKgZ$J;Do0^?r!|spf@XFPkeQ>N3XyLU91Uwvj{v3!
zL91(Mceqh7oFwb>?M6RTEZvII4NnD;6U!vELJP<F0Js<qf%3G-9kRpJ3JBT28_@I6
zjq=x&OR++R3Mj4}4@2)%1fEX}CTeRVu9L!4jyMDXNZ2$?0`|CuL8qh8V@><if^#jZ
zUfVwr_qh|wiyg(^8Zrx|SuG{rea;DAg>$9QhxqB(lpVrWl>}#lvG5;}vu{V+^5Dq<
zLrBIISr!Qs*D%4&)@)Z&a%p%BkM;S5-szo3Zc=-jlj;}rt_qzzUMpO;^Ys2b>V93l
z?dWUXa)o-YJJlMVcGq9kn4Y;!soT%So%8ge3}Y^J(qx1YPQwL}-~k&*2AWztr_hM0
z?7^FkAFuR><HMoQNGX5zndhIsX5YvbQu`GgYa&~<7vnM=vIT=k5iYL|#pg-)v=FEZ
z+f;iSqqI1xX{G}6u^NcbfUvnDNKQdBVmc~y+mqM5=Me3N1TE_Sf<7=D9v51wcBHfG
z>fbS=&QTZ{w+iljmE0Ti#X0rt6Stmx<KzIRf&qo{OgRz~Z3GXs?~d-d9j(tgp0%VC
zZAsi`Qu=0FFu8HRpTjpG+(v1lCU`NSJe2!EU~2)uz~(emJTg+%<%<gT7gsJm_tA^z
z3I+KptQ6M2t;om#3vuyc;o`-W5AnHDSUIOY%0dnk#MJ(b<Gd5OyiM>ffDypzrY*VI
zcye&9i2xh81=F@57NAgou^YW_<M(O88L|b>N6*?Fn}Aop+ov2>_MU5EhbdhC>9Xro
zsA@Sjy%#)!=<_P}&Qds3cVCTfK2wQ=#>PXDirG$k>9+ZN_amTsco<EpuYXwYmglCb
zV~$S*D_Rq9=lZ{4*t+ip>^SmuIusU#TAU1JGNH*<sNIeR_ihu%6CTQ{<4P*7Z@2^p
zp2C59km+t;Ko|0wNzK~4gA^H=foEBk0M;le=)z_!QfK(5@@k6Nz%h}sXN1ZW21+Z9
zOf6w_L*IiOgu*8^%ghWwKx<Yo?<`H@*q9m9tTAntpte3s9N7w>qtJr{-{3_dXK9a_
zv)p6C-h8nf4+WkCglKaHr-WLVQe<kdWCnU5sPlpsY?n0UX*JW9g3%r9mHCCnyiBvW
zEfYaomr=DdKiip+C44~fKEDu5%@1bTOqK<5e<1yXPZ`LvkU$4c47h3V>w!-B;qT@`
z57%*5%EWMObTN?8k}%vrOr-z)O@dto`vsFDk-gx6UpI`5VZ0;w{LmDw<v;u*^ceI*
z`r^{f^hbHoA~rwyk&Z^3I#>|=I{0m{4nN<tO<Lo|AEJD7@`t~t1U)8R5S#GHST|S5
z=ey$uWq4v>Wiv*3^NlSIjco=)ngT8Y&n-Bi7k^}>XsSAr&P+^X(j(Q>H;j2*pEm}d
z5AHk~oB*dRz7%=!#Xu!zB?~uSEFhjf_?=HC<&x!%)h$!pmBIWeNfhNT0S!A}yf?lK
zGKmHY_}(~x>@f)32J^Cf;}z^skaEEqtS*1d@Mox_J0VVCz+to_{#GF?Csf5%9{2V2
ze>z|og{OEIf_DWIa+cal$WcKl>E||oFrH!sqUzOzYaS|Pv!z26n5z23-2U#;_tgIb
zH-t+@+(@7Si31Pc9BLt9NEE}3(1jpDL|2s3*Q6oM#O|yt!~iu%KRZ*Jg|YlW%Pc<h
z>4&!7xHLaaE|MEf9F95ay4XVH&X^l*wpx|hE7PeT4Y{+6XW#thvr9K_&Ep~~<?8b>
z2N~(W9e)5>d<UNNM>r2Tti6CCEvBG&Jp<r;mVSv<7C01GG*EJ&xM7tkonC=|vm2C8
zis}L1tDO$g(>h#=AeVw&vW)d*5q_)<%-H+}<)Ogtv|jQj?~O$6{mCR%sEov;H-sY#
zCujFA%6*?-KC*1%T+w5($W3L#DBt9S$s$Qc!~8H0rE<8vrFPr#NO<M8?fAXJpM{ec
z5I~en2a9$|$@8_@h5J5cJgwBz#>ehkm<^+~OwQi)KJQJMajUoI#w~m9safHWS-!Bm
z_pbcaIvfkBP!UcBCsuh((;lnDK!!%jnNTW{G_KCyy?6VCvPld#y>i9msYm@=4ed?N
z+C95xCQ*)l9!M*ybgBUs)kL<Zq8s+*Q|Qlvzl1>)cdN*e|DUz@0F&e_?|u8L*s(fP
zRafUY-90(a^z6*+%<OEEcD2%Km3CLsY86%i1tcMah*~6pC4#^L4q$8{q6rS9hf78_
z*bmqSW9|WbxM0h0jqP(d7~2?Q8)onCt)7(@%sG$meeQ$~mAb3y``-9}|8J;#0=pZ+
z4j~;NFF`CBwWRjA6~|J0Zo2yPORu_e*LwGk3oq=?cU5PuFn{mqOeshmdFZOEAKYB;
zU3lk(L#?|OrfZ`lya_98=Q^e16Oj_>ox<%xzG9FH`sWv24SRl}?Tfn@W^M`nA|t2!
z({tzs(0qd^G(GDFgKu0%C}c)cr2rH~HE6nTYzA8&2%6169S)lJ0;z}&SGx0rQdj3E
ziE`P=X1UZRt*z|rMa|vR6n2_`YVFiQV|2o6UG&Vp&7ZXXk71Roj8fLKyb7#HBhgfJ
z8+?U$LuHdyH%>T=>sZ0BzMh!LG?)}LI;ngqju*kcAYClbMiLCdG9O^5BpBUam~&-r
zVI#Sco@RUOcey5GS}CQ+7kZ<!If>M2*?w#8f-%hXi&iSLHNu4BO5NBwe{VMN+Oa)`
z-Wv9H72xH!S10so!lsFtO3xleB<ZTr*0kQmE1gDvBdBF{wR7tuj}&dxiK`yjyKClR
zH=$>P%O;mLw(k)!y(hN)`bbBoXt-%N-9YcDOWyhRcWixKEnd9!N6kxq{o<FY^44Dm
zkE-8zbn71;6<bw!A^$dvE5wKi(ki>tGdnRbVcB_8@>C>LLAUMwmMU!hj#67^^6ImW
za#nZk+WM1kt$zL6Z~L7ykuwoGAAO?m4H9jwjg74@eS4Mb+8~FzL0)B)s$9XSh5TL2
zTzeipC*U!7`*<Of85#kkgl*wfEre6r(QwiXWWlt&B?P4I)BrQkG68xFik{7j{DNN_
zAFC-Nmun6;zpU-njfUxff})`{L3jc@R0(8BQ|)=331Zev3Co0$^J+<m?b2p_DOVf~
z8f!Dt3q?GSVB9b77+HiQc=tYSB5L{bIXVH4S9L;;RK-CaHkyvxwtYB~110#RdI{sD
z3peFO;OTFO{3D`03t7c<*t7F@V1am2eMx;o{WW%fn1NuduL}@|%mwi+40M5egu@5n
zjJ?vA5!CMnoIV2&*$gCtY!BNI2$M&#7l}Nwf?*~Q7Z!z(lEt|`UM}ypF(xu3iO>)Y
zz@XtnLV-HJIJ3AQnU~O7K?Wmx35fLuh~9vXq0CS~gn=ZcnA9*TW5qB5WP1An{wNcG
ztd!@AbtCg%zAx}XZkoIyBaPXz2&PFEhx_q}NfU_oEKAl90v&kk2CK!Z#oi%M!LtYg
zSuFd8+lI*~0<5eZ9B%Nn2LoZ6D<r%1X-zsvnQ<U4RbQ^Nz@wzFne&$8b4@rf!4brj
zgcaFLazyemb9nKxM|d9KZUVAilI8_;!VTzKZA+$ecs}&koyBG(&yIg1DpQWTeeHKj
zcxkd@=S&Nqn^Cu|>a`f$xRl#rdQ?&5IWKufEahf9lWZPZ5O_B_PCF4{5fW4;tv8Y`
zq;ii)iBQZ;(HT^;>~HE|sO({HsxUkpO!;mBf&wh6JbZ1?U!>CT@$eB;P$mXGmY$9)
zin1%oWSOLm@@ZbF8*PSgmT!ieYZ^g0nM?(7Hjg`E=p{)MX=ErcjQCZVG~}Mb59bfl
zfPfkb`28|uU4YWWQY4fN5Ocz&r?x0h%OnYV5(mio0Hu@W42*iXE39P`SWRgVP#}*H
zv*0?q$2PNMgf#>He$aQeic|9`7lM=pG7+B~yny4Dx>$#GGuybdku@7IAaqM`4a1Z~
zOhC~q6Lx^`g3+p*zFEUI@B)1&%u@@g9N_31*8*Uh?!7KB%GczGqFeiD(dn$>A0_OO
zS6SGY6rIv(f%BzlYKm@&658Nm5=a<}aqo!m5<-xBNL3MclT5go@~IjHJZcrpR1zRW
zH13Wegf!u{(_lGBL5zS2r(5WM&Cbr}a!E)Ep0W(;OF{5k)+s&S@rTnBhUXa*c9}4W
zZI^Q8HiQrWtfJ(7P!!w*%0c+%l06KI^W^9`BU;yTls?*swPY4zZL)?QH2U?ZG~*<R
zL>~sBKOz5@jC!Ojt73U3GjTUciK-KCmvd?c-UTi-HNJd`>DzXi^H*lkR4ElpgyE2q
zrJLGV+GaR%nw<T6<Avg!#Ymra#_%a7$FdV-5UsglAuiV}MgE>~i%6{&Ayvdfm4>fY
zv}RaMhh`UP*tDCLLElZzD?uI$%fFZ+NJRT8RCoehz42JpBhX{&quSVxTr`%R-pIfi
zo7pHtb6R@U8PiD4nJVf1SbESzbKhfIf<h)eHeipVD*MUEkIAj4B7YkBZsdpP7jolP
z7}#T?&g!URnWpU)%_v0@@|qsOxLQ2pipm<Mxg@g$AAeR_*wz4?_ssk44HtXU?XDa!
z%#T}S#PRUhcN)op<dc{4bYtTw{H2v=n2hF2I2sv{f$R{u#<pRCU4&W47a$*iG!ywK
ztFRzAq)o<s+mJ&{A+P*2kf`|{@kcs0aOl~uI%cPotwPUQzvbP*M}stSf(dL=KEV7$
z9Wk~vMRW`fggE0{MgYj+BBh<++_=U3gsza(3^J?GtSn~2+ZxrJQQcv763jzv63LMX
z!R;meN=sbRNdan4sQlQ(Xr4(45gC~(kz#B|KA7Q4{0?dm1c3o}L4xBm-g0s7|9`vZ
zo;_GOshx~_eMfxHJ|c(8sO%^nhL1C994@9*Jf)HkCm4=a#ztbvQJB9}X`*2*BL~Gd
zQ$&1JNaPV&)F>qYOA|FjhBAc#D<RBaHiL~a?XVk7mi4IK9Qa_IBg2obp~Us1hTEj?
z24|MMhCanaMh}xaH+;T7Aw^F@SK@xrvN^6(tzNaL0Etl|W;L=e7yK$>VP*rBr>WHu
zgE7uE;(^fLxi+(KlQgiIe<3Go2U0_06Hp6#ho4I-^399eg@Cg9m>syC!}Xsp@cDzq
zw@ge`EHj^-ZoT=Y&<A)DyYERpMLaEBfGne@i4l-xM5$Rq-;5}{DH&f~?C~(rApDmm
z<`%jejfYppSX(n^&fOsNykyd}K$L)co0}DjWfHdx|3Z*S=uuoSeu<p3UVTz?Yq@ey
z+j^DRt5imGbs<P~2Ru(K5d*@W^K%(!J8*ls?x+Cn!W}YdP)W8(Po1@FBMJxZfhaQF
z%DF>6ddp)arD=CUO~6P1xs-)!R6Uuid-~R+`Y=s?4fPy-q_TA@!aFvz?^N93o`NBO
zNRzP`P1?)!bmm7TmLZ}<1|dUb1KmlV+BZXhQ7$&3&a79)AO}Lej8*DHm%&AVIRYK|
zBl=hU0oQm)u5dU#*Raem!MGyA@PV-*22Pl%G}K!ICy~5pxtwaW8}(wh;xnaE&u$e*
z*M^!FjHj{MrRQC!YQxt|OdiQ~PacT&C)$=#PgHjmGly1h8Z9o*j6!K(6`Ep0i*5cl
zeD)$)AnbCvf7^Tjp|vJ=j;qhT#LdDdMwW!N_F|uekV&D&2P!#Ww*kSDct^@1O*&TB
zst?4ye5K6Inp(eLalAcCO<*fQ#}nJ0EuGpi;?~{j@b{l%*T%@I+IIdLEQOuPx)9&g
zlWX?*(~B3BW<iipPL*f{+H7ll>BYlU_8Qp{#=oE1t`A;-2LSv3nc85gy~%KhJsDcD
zp(!b1a}Y}-x+qbL?WJT*1+>U04RMKcE-4WS?}>B!=2xG(;n7q74vg(?<W{IcYmkd&
zLIxiDC_x*5V`$76e9cp1tE*%GC=bt{KQ=daZ2s_Fcd0v1z53LtSHIGDM_fUZVrUPF
z0FB0pynvCh?xNHdLEyrdK!3hy9tmZr`R$`{sI433kKS^0{;s#)C1d0#XTGUkN}n3Z
zqKZY#R3V?kX%V#G7D)A@oEb4v0cbwGc2PDV&os9vaaG$>FEOkBXpq&w;be<g6jJO$
zenYnkscx#_<{@rjaR_X&?C<G0ZPhE#YBN2ardSM<(a6oub<=tqFiQWx^$Asm>q@g$
zeG)*Je|F>yLXykrUUJ(jqKd3R!1($*^?CgI>){0ac;riD&;Ba%KO+AY`57^*hMGl+
z9Ht8WCeH3X>i5(isXtTS;T+}GH6?T^IROza+`kZn8cGQ{b#9Y%<}+m#CcdO%*@wPm
zfDUvnhtzW|;>`du*1~Q)UBRK{{aI3Cloj>FbjK@@*@cT3s#x?iSI*}10;xWd;|a+M
zNR>e5q9}O|2&NqHfK)b#Hz5JuF57?`V<Wz)qxHPjz`^hFk#OG;bixm?=ceTtJ>((B
z#ci1BliF+bSNS$%Z2AOyL!%$p2qn(<;agC8(e7G3BsraU=V$#D#St+lICs9DEEna?
zOeF=qsIvptplb`!5_Nf$w*WTeBl~RN)${@8gypqxOHNs?4PKx4aEtg}TtyZVjbI7K
z$3u3YP$a4bcN?F?cS34$$%&WYO<P?)Rfd`-r$s1j5kUeQ_SW%G>M~($PmfQQDKi8b
zR&>a=U>}MWYfx{HOXST&wR2O=&ZZs1)db)GU3C%yB`A=${-!b?qta1P$OMhHWEC+U
z^jjUn8%0|qs1tUJmfPt?+MyLn5K^}NiA6g%4q>+4ND&Q*V_6F`w^`X&-%Z(pkX_)M
z**QTnm2)OQdoln13XPhtVo;bcOzV0)mUe-%T4g7xW#So#jZ9meLXBgRw0`3wFm;cn
z6~c35XY^m9STHJ%eM`AS1|L>jEqt8>T|g-EK^386(Ab8VO$I}buV?~F(GT`9Hiedl
z&K|*{RK@-Wvyx=)x82xh2uMR9lQp!wd(tx%mQASgqk5_i_cFeRX;ww&*Z|VRG1DP)
zOQ4MsL(plHvUGAy$}T?7iD9r~YV*La(&2$qqka=J8LGQSf+ejobvgb-hpwM|2aQ8C
zU^;4+V93P4aN>9_2|#;g+`o8Iqm<RpPUP`Exs_3UJx!}~%s@lhOa*2-o3n>sH0>ue
zSiB(!)x?*0Fxv7##>o{)<DOzX@p~dOpY-wu1!P)!UrK*!s7P6vZI!BC!K>Kmo>5vq
zF-z<P=TRIcY%D|z;=kF67jh*!#`9&dv+@~g_*9%sH0SrQhP_0MNFvawr9jOhg>pJR
z2Z?0dJ_0tBW0_hs#I0dsW>-M{0_sYs%v2U8Ii>r+?6^{lOlZK9WRX);@zumSHQYSh
zim+-+<exO9<;Sf?p2PzHJ6QfGoJ({YByqVBzB*2pnapu?M4RGB<v97JxB&qNY+#If
zEI~e;u`HQNt~k65*d{cGpk9XYpfXO~F{s=x^e{9P&5>g8u+V)^aT~C8+0HD(Lc#aQ
zM}2E(SP8*|1&ud8uySfKZnMStb7ZRL6*0FnKREMI#?HscSGK4j63)79x+n>$5;GD6
zfMWoBVpd~d^^j!DVgy{U2A`7%Qcf_B<Pg^YEn^VT=LkfXrUL}7dco1D+rIF-Q;Y4p
z*7w~BByIoP?i{s_;una{j`gp7|J;XT3;lz?H8n=3l<vNX5m2leA<?vzZGHzDy2<yo
z>ZV5nDB&U@0+7J*h-KE*>lQigZC|)zX>IFGGM=DGjAI#7N|`IF#g{8%?YXVVk%M~=
zd)=u9b{$XwV%NmJ%Zrpa>VcN<!N%g<>XyYdZ&5|v{CS&M$C{;Ol61e5x*4eVFlx96
zgJN@`Q5&SVgRnS68XDFHxF0r?UUfej#T{zF=H0r!-YZw*X$(Uv8*jQJl~$=J6pny#
ziy5W>jr6X6&1*_jVKo}{O0j|%0ecq(s@ZBxOBYnb2BMHGd1F6s(^t-B$<M_(y8o}g
z>p5os=l}EH`CLfO);s>QUq50K$NvJp!pFcoPQqSxRakR!uduF*Hbb>oD2iEBpBR~#
zm7$I&lZgtW;srGYv}m!%QuK-pL{!aUzsFA03Q^lIFg_WiV6V}SVtB3*sgzO49Yc|!
zBkj46{T8dazp*-V;ZzUa6*aT6drl4McD3M_N7M@-M4Bq36VY6e`!unRhq(2BCG^R3
zv`0V-Yfzgku@=%^b+=ooxCwJz4&=*GMks~*oE=*^&pGkj^KAQKL)8-p5{*`&&|2=T
zY%+iKSPY{^8*A%9ui}*|Kbq<9Stx3WSTP$*q^D;Oj1Ipzk)BD!$5+O?`I)6X3uRUo
zpa!e<D%$EUjYuVp#m2z4r1Gg-RP^fSo}a#YWpUs0hBEW>*>({j-kc8ovVr}Z2CEh^
z&w)D%G*%Crvw+PQ5R&f<i~WQUq90Cje970IgPHo44O-UqO(@25`BiYm2^F0gmgd3T
z<andvsgq|ZDb*yk&{oNPODvlNvov}^0xWPXzP=o<($6Zl5n`_XQaym33X`AfiwPqE
zevAs+BET6s5EAwmA(VgJCHZ}MRKUS2)4E$&%iTHL80uwPL1RQ+xc}aU5x5JvTc49#
z^a9O)#Ra3IQyo<fhVr9K<``VaPtw2e_o%120wn0&k^3Sq#zXxTdXAGn;>5uL@J}yh
zN#~P_Z$UfF2Sf8PJ%>jFmI6Qt{g(adIYKQSOr@mXrx%IV&n--^shMy+U72U{-kdix
z-LZo{MIipV@)vqD-5HKJ&GV`@voNKy>sl|Z%mvm{!bChfWTfu%Uj0NFR~t`?$mjp}
zP)SN%i#|FjFAmGYN!S3c<$3GAi!VMLZA~_(u9C%5t&cx<<?vOPs_4XnADC=Sjj;CU
z#UNrXQ0fjtU%188o~_ig+4+EM&JV~K{=%OxPXgcxe_+B67hX3xHRX8aFM6f_^Q!sn
zb>Ap^TVFJGw<Z^6X09w9yz1Lmmfb7MmrqVkzH#zOw@lsA*&53tXxl}qsjuTIM>>KD
z<%@(*IR5zRb>t;a?PpLO6d(;y9pY87N{C>?1@NN&+_Mym&Hcyx9?8W4Bn=!#9_@n{
zqcQ|yRFg^oQIrjI{1L1`<i8FhIfk0?1zoS#2mh10{`TqC)^~w2wIIBiTD#^~PF}bI
z2NITdd~!#o^`rf|8Xq-`@JZMA%ik(TQyMRKta9+dFUQ}nU-8U=rhk3$!V4E?4glA5
zi53&Os*LA)q3n)W$iC+?GDqpHBsG~H#y4ZGLv@dj&CiKK^&=>F$wT#!e@p=ow(X9P
zkT5@bl9}mGQ)Vs%P%N8WxUifYFBH}H(uvAcrBv$mihgZ%w6hc~6}G;4XtdoOF8FZm
zSkV4B(TPI^_3S?z%b|R{UMrqH#6E{I4u$)N>>k~OKRmWN**<hgeQ0>mwv+paPY@at
zV_HkjKXg|jAvzK^PI8r>As!HuJRS8T*`Dpv>%z?rdR}A$^_h*w->NqLqOpF>HR}zv
zafYzPnX9fk6X}3z+PW%oX6Q_$-&YZya-pC8Bssb#LqzRn<R0Rvm=fp$L2RQ{1(Hp=
zN8s2t82BES0XZ=$0v#y43?0wjex~w96oRDm!r>vl3W9~J#c!DG6QMH57unXmSY22}
zk}BYVun)S{q$4amEEJJQ9z~*ugysn_Qod4(o3DO2lX*BZd^D3eO7%-F4d++1mQEeK
z`CuxIn{R9B98km<#V6^p17n*f;C0GG&98zY1Lu(hTr$~6<z29j*w7f=%E;1yAwddb
zSBysJl)>p=YBV+)jYp|kjE_5+newnVciwq(-f(#)lO87v81Kcig>q%8FuH&A%8kNQ
zrCdtKk*T1l=uvxG;zREI6!@<Ih!+Yn`wT2hZ|hHk#Cqr16R*1cnwR$kVcGpm&$ump
zzlzSimi}UDHfAqIfAE87$FR44Xd9hqv}@Sk+WNloKAw!NMWbsmfr5wk?F(RKKgMTQ
z;Z6Z_m=h;>ptuFx;gY@L@`wIq50JljheW_b|G6J*&vKz?Ls&5M2anv&v+}^Z`;JR0
zwVNJ$?50}fl20zvgut0BKlu1mDmwY_+xjo<wwzHXS#Df6qdjXl8s%>~d<<Wx@<$(b
z>|ed<reC$4t&fkqd?n*<zV$?9)Agrfsy33GnYeqbds%z5ky3Y@yPq6p7zp&>{092-
zY<=~hikj&tSUxUq`y1c*yR(1liEn)48#(?%{YIyG?nOoHN9L^vILu~Vg%Knv1e2w7
z-y0tv9n)(=wPK^9kB_U<e^L(el|ni2O859d;Qy{yARqJh<$OR{AVJ-ydr)M+7jmbc
zj%N*qdv*~8#kdEQ#pS08MqcIzTvYD~T0!$Sd7#kvRXj~?lehorQ_@{{>xYff*X706
zLA_+;#Zwu%2E-n>KQqZEMmlqn5~rEVLeMuMk=zdZwHNH3I(eJF>&W=#UCrBWzIp2>
z2UC1(>fqbnx-qm^+tojP%Pog{BT}|F()-F=-->2FbLNZcAHdNYU?uBeeZJU&5#b4^
zeP)YCp{-lfNN$SXA)QxPy8X(R_Op&o0D}5#0vU4<ba)|3v^Pr&PMz{V2AMU_<i}`~
zOmsi5M)Q@b|Ju=;$Ligo<$e2>hkAb>kB{Fl9*<8y^on9}?PF_&()hT&cKP*}ty|;c
z--xxBLE47lTg;x%8+IvQp{8Pp`G$2aIl%W~7tZ7JTHUU3zz3xCg<7o?f7`^qPBuHV
zf8uTNhG_+XWlaRi-n-XUdn-3p)bgcW)xB(mm!BEVC>%Qr7go3E>uM%_z+b#(0jvry
zq#P{;$2Gu`@IHK=G4=bAmB_Oqk-WfOk#ma(MshO@FW!?^W-75n-iP{BtYKF0mW^1!
zYI4-FG}OhIUGQ4YBT+>%%8&_zoWyl#9LY?sssHZ9)_~8#jWea|AJ_Dc>GC)07bwW6
zmfXU$>wcU+&-?fT)8p4!0d8!O;@4=Zm@Buu@!`uYT`v$<DORTQBa_`#vjgS~jabpN
zXKBXQbRPNBzh)@fzd2vEtgn{q$x0&lT0U`Wg1`LNg2b&~sx|jOGM23pf8nyze#)!V
zHweSK=@RKxi#pth$^VA7p&DRMr2BwaBVi>;#|LJ+K$%KNFXPj2+y{$0c$8QEoN6>0
zs<HLd=_j5zjpXHF<EbZk!OM+}CmW3?8>dg6JpDxDG*2f_M#6a*=@X~jkN(?3N0Td%
zxFB$Q@LbIW!ZCqAydCmdKxMNuEM}Fwet6FawW6-XdkG1N7}!J_iO>;k3<J*G*3bmE
ztxrx&@0hDk%*^!F-;i8zXxesBCk;(F*~|PZ6Zd0z5au$E7Rc1ww5EMS{AFUEkUBMv
zR_Qhx+u7;fVkBm~TrBW9r9vXE19-;yc;Z>ldgAWqxFuqpm2MA$H!|YVXkeHGlnxv5
zP=bg^!v>;H!fPn0YHizkAShbCJ8I~qn_=D0Xta-vfbkRg@LFmgr2FrM;80G$2z5u~
z-pETLFONJL`7f}wzB}>(uF$foN$INrro=IOWP1872^d1oN>ezG^ezSuvsU8o48*)4
z!b^((e&Lz^#Q(o62XztRG!|!%YE~{AxE>{?WGS;=ElcJOQuZ`3`b5el*XZU-peWLA
z+t(8%FN-0ob~HBsWV126dE&(8@YdgEXqo<Ve@B1*Eo=WXOVB)P?_9HE7rmV}ERd`4
zU8u86!y7~lkBU$z1i@t_DXbtaq(_5{k!qIck7;D`!$m#1vh~x87N(~cF529jnc4hk
z_=PSBXy%?BJl^yFX~~{mw$aE8bECQ4+qxhI2f1LhN?_clsM^{Ufw&CVP$)wbJq}Rr
zmfiPz0fs!VV|qijvo&2h<H}@||A579RR7#U&-Q85v(OK_BEXG~e(B?z=ZUraL=;B7
zw)M|ne#0A1K6_-}4xixU3xk(7mqzjr@1;>x%GpC}zP)PC9>+0;91vD%l3U5B=H`mo
zB{WcU>*2=N{&~IjH<{>UA|6f6_h-~0XKMMp1Jlh~t@(F}VyT$Esg|r|t&(*)u#})e
z8?st)oOv!7(x<c~bW|Mn)!UILVRQlOQqtfE%n*meTqU<6Z9ltq7_^rhiwIW26kUQw
zR4S}!YbNM=*#ohR>yCqi^}`EHdP)ujWYwgkbEoQwa#b%~tim9y=SLc!>w1K|(@ai%
z^29|;noHzhd`CPRFIZL<)Ach^6cRw@OuiVnmQ^7sb9odXN98)do~4Y$<y?Y%BDwWc
zDi<>W@VRQMyKGIJAJyFx6jhHqpI%6(@eNYLtBEU@=Q~-DJ=~A;>M1wr!_j;sK>|8W
zB#R`FOK24sgnN*}Mh^5%m!U^5Ez|gBj-fHI75)hS=A&FMtkLjlg+n4wd0<wH+;+hQ
zx5@uj<oM5c^`_fz-+HO~{uX6~a;>Eo{qNud<cLKsh<}a;<mhre#LSqR)hW8<8k2Mr
zy8uQIfmtj9fsnjnZ;|TmyH}6ces9<*>}y=|!pkqY#M!wvb^F1?cTBBs+`l<7w4-GD
z<xZ*G+3c#*>sMTIN31wjSs%Uq(xWfg%I&!L#^J;F+;e#N#*25T`uMJ)g<a)bxtyye
zW91dTpMkw{27BeDk!HwGDRqB=-L`$2EZb9>Mbu<LN+=c>`Te>^hpIFtU)TT+zZ7c)
z(cbF$oDA|!IHea1av>ti)NVgoi+Onp^M$)B=7(>6xXO4N_b0qkR=M<NvA>wjo={7V
zFO4i^v+E6BY<=h0OO79Z$+1uP9!=H?g=mw2v`0aP7pq2nKUR$?&o`1e<#LFaGntvr
zT%(rgIIzU4^(L>rcucXs@JYp(+kZ{1&~G5c4}qC}S>!ih_4_k&aA)ww@SnugBC6I3
zSzrQ0HbZ=xW(GLR;krSSi4bACt@}7*IQV8PLBSBub3-Q#*j%3Z6DFes#fE_vvOrjU
zG$25}mQON|W6Evsi}{uhBnXY)OT2|Ew<iAFG}n>6@COOF!^tMjzrl2y?h)wI`G94y
zf9Jx!%)PF;{e61C4}%($K%XWL$MIQ!jRPL^Ypsh@q+#NdF`OR~KL=awrIFrz4NgE!
zE5@pUUZ#VJUMW_O&<8BHUd|799cKs{0l-+oBw{`uFDewnAJq309JA$j+R+TLd-@t=
zqx)Q2FQ=Tjw~rR{l(PYtDev6P%+X7&-fI(Xrd24paazt~QrV{KW@9A}oTEeEI>#O+
zX9e|lE`|>|@&mmIaZ4<1rhPc%_?pz34RtE&DkD$5FRTYS6%;~v3>lA@Y5iAK&AC;D
zVy93YWR-a{4b!}NXOAS5l$X=>*3?vo1Ht8hHV@dTI!>3qxXMEu*qtUoolB<UnYb-j
z1r@|W5*ljjZK_=chVPTt!Dl9ELFx?<o&_*M**^vDR-&2@!Q;hZRXVFNAZ`1Wj89S!
zm4#hPtO3&kZU7R-;CA?~z=d$bZE5>Jj^z>3Fm!kp7DIAFn0Vj7^@fuW{DN`>d;x7a
zzB>IbIi3d-wIohVT9A^s6FG9`U(b9OJMamz%EQ>o<iX)6USP-xo$~@yk3r`VSRsw!
zXM0&Oa&g6|x?_`dO{j5%;>)+R6?!NDaQxC60a6$1r#ij8JN^9k;4e6_c)`ll&aHPf
zvZTjjv6o-V2BrGsVc1#4ggSq5k$zgSWP2%PL<49OE_-F2#!soOcU9F}<3)dUM}PFT
zSUX_>SRykLZkwG!y~4Tovon7|Z@PED>=ocq4@=j1rV8@8+tWdJbQUQx@7V#?p&7tv
zjDKzPdoH4H5wb${M!GQmk9M?e-l7wo&CsUBiGTWoS<Tq`?~h;muZDRKbl$Ybx&IO_
ztZT)db)4X0J@q#ir;Loc%JH=ca68SJdS=)#`ak+!pscMYK#;n=@dsP~6FYOKrN_R;
z*F+Zn+nGOCUr_Ht|99XmxSXpj;8u!d2}sF|#Nh}ji-=IoYGSTQ5h>R^tV0V$I#+u|
zVU`2F4sQvbiPi40)c{u^B3^wA1YeMU;#LZh7906nOT)v%4|0lhj5J@7tLHlTibeO1
zp~CBKg<HaP=9Z|D&)>~j5-ns0E&C_yla-P)(j^#^>E4)cjFhLhwxC+3pfdWNTs=Ee
zEiU$p)znDb!K5N8Z`6G@d(?_iFhNBoPM(~vj%+*|N3VzMU__A4&A9}a?^r7f=%y+}
zO$(AD+I~&zjKx4*E4_6FEpcX5Cbr~Ne=Y8K)emexvq(L0b^}GvocG2us_HrMU#ohV
z?dK&H@m-$r$8G80eb)as7u&6YOCf~=_#9H6hRzv8!xqoJrBs_4!0>r`fyih^yzC{|
ziNW(AV4&V%#9oAFsyjw(HAAW_nt}^U=f=SNp$d?K^hj7%p<U6Vu}X?rXuv|OMeD9j
zqO@r1=H!)@R);Kb7Zlpt(FQPY(K-Uj-iPc!EG@*0O+jDf{Pili#N56yfWCSebk<%%
zYu%8a?CiB~Mm892VQ(#yL9{){LTHXyTAXe>v>^!x5N$^N$Vj8Jx7Y_F?gzF5=gKAM
z!VJ!KVyB^nLnP1HS8C%)Xb=|U;Uh?*D1ZZ_GNe)a61xv<S2CATmyj+7jT4W@8|`{4
z<D{d*Bqo*PTm|!0iqhxg+2_XKKytJ{CA^q$UwIr5%s!w(IUr8BQHg|H;!da4<0{;k
zf!5qiLdTQ159S)etupq$fZg#iG;~MmsXEkZE@C<6EnQIYVg}Jiqc2&TuycWkxizH|
zTPprx<x|5Y=+82nd+y$R?8d#zfvQi(zjgIcv7L-N)2)fW@LvAH?)!FJx0oP;OE}Zq
ze9rD0A8Q}(q*~>2JZO$|rs;pSamlS)w4Drn>@!co@%$uK|1x;0!`m5Sj965x<kxy@
z2B8EQU{Dlm#A@>T(<~F9jtKoh&o7oeNOmAE;jJ6cgAya0gw*NjrRsa*lau59*Y9jz
zur`b~C}a~xu9PU$%~~#(7+ycvTzlOk*Zj(_eCFlzbkS7hqL=Z;#?>8;r&?`qwb`b3
zkMF!@@K#+~IehWq%1|NIsL=5MTAFe@1Bh#1y||psLIPB+rwUsizTyQ}T(NUuWW0|Q
zPbKK@bC>Jnb6KB5HN)o=3_&^n>4hR2&Yh3M$Ii}2=%27k2))pMYfggH1Yx&l)f-M7
z$a~J?@mBox$1l6|U_O_+b9-)V{m<tqHJtr;D)rmfUq6z5NRCes?#%az``pJ!u!(G>
z@wx&caf4n|V@RVpJnt2$8IraMrZk?C925^{pKW>H_oc}JJr!6g&pZ$Tr0Q2_Yy(>s
zs1u6^E<6*NZ1s;fvh)_II!lFExoQN~lCS5hp1)dA#j(0sZjMCTWB#P`qWy*b#8_o6
zzjNVmcK7BnK%BjCv(l<n^OazwoojFA3b~m|y3$Csm=IlP_NEf))QI!z)<*oi9nRv{
zjg!&e%1`8H-76CBs%{eE3}c*MQC~rSoA8Tl5MPP7_JX*Q1Mpft0BM9j5V5fKCQZo$
zSbY0IQQm@N;7K`(c?uEPe9Qaxp2fwCO4qwnL(7LQQZKDJt5FmP_Ct0g)*aU}LlX;Q
z_5N^BO*>sEM^jLDdKtC$)d!28ea?%Fg=D|gTOk;J<?8D3t)n$_+yZ%TrSz_oF6s76
zY`HVKX3T5l(H)KH(fDvyV7;mMs+*DEDPx1X@<ZalQDU4CNp3eG3Bf{b6LMQTI`NX{
zIa~M59<ov+cRuHYb27HDcW+DkTWiPdtHz;Ie`KwleC-7jm#$Bw04~Zn8^}T7wTYN^
zPo&#+_|@8ulBg$Zk4>)bx$e40u4{bqSqCq;<pNcIefRoTU4Q+){&@WY@xA0LX}B`q
zR-ePKJtUY&B392NU%7f>(#vI)IZC4z(v;gTDISsqq4>f2U@q4*q3VXEf&<92-S64z
zGjJbF5Snl@B_nf!%v&m!E}5BmgdchX%>G1ef!D<ElJSX5xFlURGFL+)=Gaauu4N{i
zaxCRc)+cBI_U|X^SAU50=_w9krc+am$++vlKA4)$DL59=$+(t2PUGr?^b1Q*g$p>+
zR9$uu;J-bUHdEEInLZB6D7B+;oUAj~(>U`j^=WJv>9H5-10M)US{OWnfa}ssVE}ZY
ztO<Z}uO;A*JZUAG3gL!|irH9=zwATLi|vj#Ns*1e;F0(Bs#7B*QfsNHvPx&{dUm)q
zYh@Y*S5;F}#hhc6mNq~9yx2n@T8$9`)0Jz|hirthh_UXFOVNRY6|V}TP0-@$R?wxN
zCL|IN5(^*vXXsP^d1k#JJL&KWnqf+l;vp0Pj|duz|L}dEwep5XR>}t0kAsZ^bw5m*
ze@H=z_GcDtYpgff_SI4QQY&rmv1~Y$-#2f|;<s7Rt8D8UD`V||cVaebzkke%emNHX
z^-;@ur^FXOkAr4eueYoNmUYBRTDzb(GOgdd+_Hu&>#a6K%hpva?pv1Cv#fWq+uLn3
zoZDx@yoeoXkn3CHK1fD{QB2^u&1J`>*GOFjivjkbRDD^Zo1xt1e8tN|bA;MjLM*&i
zuNs<bx95)Tp1NJ1X*!jBT3^04sP0#rQ}u<~KM$2HyX0olU6+=0xlZ|?#%X=-P1GA|
zSaus)o7#O*b3C3aI>D`=Bu`Ck))xM8z5|JCx0?a6tF`{y`ncEj>zLs(XFeP1zDVT1
zat{bv3RD(kI`%G{6d}S9>JIQyn%G_N&qxrMN3pM9bCHzejI0w3%OV}91||vCiIiPX
zwz0qv6a$&@B_mHZmHk4rCBb2)d#GkbLx!7(Q6qWIZVQK57GVGonBwE)S+e14#G2;h
zI_9NdWST`_QlU5y0jX=V^nwE(NO=Ks2PX_{75#^$LQ6$+u3aSbOH~xGIs7ZG1wIy4
z5F{+C;*V)mSl|*cQbVvNZXRpKI#sWlCPJsHtf%3_fv_h)joA}+>JwKGClK?IKr2I#
zy#@Fvhhan0b&G2YR%M45D`;A6JejFxQt07uI|a`MxmEJ205UNg^`Bgr%we$;0i#e1
z7$7F3)Uyje3eYkwRw~9C8Qn>$7$i3ZEjk(}%^RbFN?>~OuLCFpHO6@i0ga<0ji9R&
zp!_lR4E7V)=g?R*KLMMHd{3P&(4@h|<AvgaCAgvE*(!lpxfHa;9HmPw>B)QsR{j+6
z_Y^%dRIv&3D^CRJ_-<4n(Bzw<B=CBYU{qnu>jz=pJE8(VZ7q_tP1B_(py3d@xfcw6
zrxY*xXl)v~pv%=$MzOba7*{=~dAqM(qA<tyj_q(>oc`@2?|#mWKdZm!HMyC|&yC%d
z^o?$n`WZL?jY?(w!adzW(%4YF@=!%PV5TPL_5``b_zQEl-QPWMeK&XM3zn{pWjl#t
zSjHtiC(lIo5)-->tD}Z4z7U4KYl(y2LtmEn5YzuO^MFxJj1%ucjO?1~ctNP1iEnn>
zjQu{dR8aq61P^mB4El<57aFc4`UKS=rhJHGpg}IYOJKP0BzYlp6~A;5%UO-f7^aHZ
zmCOnly>J<y5c;72D9&BWN-!0Yppmrg0-l23)=uxbb9Z|vnLPFA+~mT~KET7Hr#h`v
z{M4hXu~>qDTn54{Cqap0DwB$)^?TE~nwuGFMSIB%WrtG6w}aP|?x&NEliWd<@ffs}
zkQhYQqw`Tm2O6dW6^{0zD^k+LxM%e7qdw7CteXcG#@d+~YrK`2sZ8%Bq;cTt1Z<r#
zClPn3&xde`@D_aPj;$Z+JGq?G@6*WSJcryu4a&Ilo_@8yQ*)wg93S$fbtjrKwS3AC
z-(E%#g`@$0rb&IknKM5{?>{6K1k+ObX|&N9;xdRjC%m9OyC+(`X*QmSeirY<{{D?w
z%~P)i({T0H@3%4+Ovi8eEk?ZghKA|czh-97wMzzU55M3U=a6air3H9?4#)FO)y}KO
z32-`F56R=}@7!;h7v6lKdBWaf^LK&<#b?*47dhV6>ylS2&F|YcPbi5Eyroco3(w!D
zm^)$<3kIbJyILSY*d8{n`qX#6dGuuupSq%T^zvf@KRJE+>l4pCc<_zO3;x0s3LmDT
zZ606A7fQV4=WS|XqT7X!b3Uks0ebBE$gPoQOXjsV*OR6{j9COJl}-J@BcrOn{SUtn
zUuN)Lo*}&;9nxb6+WgD2a3Sj5UemJm?WJb;uJ`no+aKZo`@Pd&|NKoid5-%E%eYRr
z?$ERwZ#wr!r7ZmxrC)b;*&oCF*>Q43-f#V;kyMvN<M+6!du;7;mNXh~qe-Bd+LwtX
zQ|)9Tk=&cj{<dkhHEnM+dUHCxHy&>%lW&u9noq>zon-PrG<rzex`_yiqn=}$uTQ5x
zVFu|`CzkQdBdHWf<W`n(fOm4{)7taF+D&lH?%<9%fR3>X2hm|h8AduWTKLF%^OD~a
zBZg9Lg8SH!(iv9jxJA!N{0LW_<z!hz3u4PiELipq!?$LjewE-24IV)ICtjcOYxAjC
z@(qbh6?fWSXrTa5MhPmokm9=fkZmwGQFOq;GxUk|DfdNyv(1AvQ>%46pM6ECkZ^-6
z0ra}CfKe+($8dTKJla{QQ>kn=bLp=TO6!*0>{rq;2xPK_ev4vYiV^9~fer&;46Z*O
zXIWH=0^t473J`5-_SU0WH&@H)8hhq44(yG|Ov~dVV|)^y3%rOKI*7qPN&ZA|RWBw2
z|LVw_BkziQkYFh|5}Zi642v@~rniIMfB0|PTsFEP|FVBTiv$f&C%^O`bu%0E?fftM
zN8yN>6JUo8vaZ|qnpBVmVO(Va8o6g)pSwIjtiv^cn3j%XWB}NVbC4Hc3)+}WgO@XH
zv8elk<>RBsl7~rPf(5W8L9C4FBpwMvLx5Y%57<Nohefya#aQ|cQ&8_%DdW05Ml;4%
zCz+u)gO_oM4=3{6hkQO^=jqzxW-G-^YN$oe#<8eAH>dTNG;4XqiuG4w$(hBZGd$^J
z$}NPuo2BS4oAHv_bgP_BPYyfD#hGMmWhrK@E?e5tlA1ek(_=T^{Mbdu?mu?y{ugm4
zsnd*)Y(LY0Cw%`UgmKKIWvxb4C>+PODHano1XA|^4xVnS)MPkuaEo;FV&GCFjzyv3
z^a#++H6xKUZ>8wUCZGhNGNxMY9khaw8rUK{&M-^V%ei!`kxq1m5;((Fw+oo7XU5x|
zgi~*&VQbELZs0+l1CoTyzUyY<*=(%{sYEXoUz(3ccdgsT{(ZVS?>uAQe#2hh6^+j?
zC6Ya`XT@5UvTzqq4Je@FH05+}`g=(^9e+M2!R)|XG~$_aUW<9Oy*zPTPu=PI_J(aj
zEeWTy;id$N2?L)-R}Ypj2{SMP8ri5p{g38XXtO64B8F26b4d|br^+W|rJ~JKxxBqe
zT9<jIY{Y-)5B~&T;t66O_^|Gp9%_3@6b_0;F$plji2(t+klHsmQ3mCESjFKMY+uuI
z<Y%!?y6h&NEF(;e_NS=y&8M$#(8nllHCs1G^^9`pTMA<TR12Gq6^-jNeoS|VqBAqG
zT+WZ}-W~IExtO|E&BY-E&L?9jcJ4H4<VU#I5*5VqB^}%7u$(^_TWMDG$&9+}GAvN<
z-g~{8L(^i;&BF5fjQTfZ=^Pf<DJtSlM}8ZLDzFlpf?ehf9fuICI@7v6X@`dYij>_7
zvQF!bhV5%X(6dBl6%jWag4s2blCuSh$v9gk@8AW;^sFxK7ncZE3(+iBU_0B#6T%ny
zERuQPbygLz73n4*3)H8Yl>}%J-_6sF(QX~+a7id=p+1{Hu-q$uC~yU=ptR}Q4MXku
z%Nm7vP_b+0j~m&Ek?HgZws<@{TqUHur@leYq--jm%_SeE)iS74V=S+RJ0O0H(JAbh
zDa+nFZ&}M1B;pk(yPhw&xXe<y<7aW5EnD~>Fz)pfL{#t-#WNM;`J>erUlnxA`4n{&
zqy*^J1qwLEOtNe&vU$rd)f=rwEqVKNxukse#~0pSu<0<Q+irUJ%G}7*NIQCwO)UE&
zqSZJ-@odn((Y6}sC2gsRzyU_zW#)54-B{V3I{5aiZ<?*FTkwlnN~E0%WhZF}o3e3g
zrI;PDqU6FLvdCm5Y5q)HC&cJWN%Ogx1ry`UUVK_BO1(`Wqg1ZG#Ie=u+)~Ni`Zak}
z7wEIQ3+bk=Ja7!z7`&){y2b-3;H<5CmB~%=Voz^<qg#5z26TvYzsNR5o%GF1IDXkw
z$@0=uYei@N@*^_O=%EuisXf5394Fs!KYFOuozf;XN#6j?CAxs=zfJ>M-V$hlkGM^l
z0pW&Uy4o?w@#O1Tp1C+_Ft*w)sKMDu=B6BF?v`|5m?0Y7vYO(J;)W5Ppg4Mna(kp|
zGlrA5Bq}zpZf0X+DdGRzhN^>Z=U#^!_VMx9@(;od;~pD^4qV5~*vQ!q?4G99jLQ+(
zFqVy-Oh@fIflmQ56H1VSwBykalBSfBe&bGv&>@Fli`@Tm?GuC5thavY-f~Tir(<~;
zDtM0IQxP{N_dST^<M=Tb18%(h+F}o(DhUpd;1+GyYe}jD;P`ZnU>#1r`wL^n4Sg~6
zHQU(z{CjWj4PV$Fs++SZ-TNvLIGgdufYmK804ahx!VAYUAt=gl%~FU5)j&LD)pAzu
z)Y+PjiuZxd6VsCqUG3*DZL7V#;f2LRIXyLPHoE<1Q^E){3LbOZ(Bp0n)_IOEHGPyU
zr*ob!%o+GIww_|Cs{LH$(1Ta++L)QVde>OzNFFSCnD6+@P_9prV|W0mM`+O|=V|xS
zs*T4ou<r>H5sd8P6iX9ddY*5`v9VXeOk-%RfV26}>`WXyO&pVLCHor&mIS909+sL7
z^<<Ss163Pf21bOPbiJrui+eh*otLOYqtK<WIN`gtU6sYpOP4aOsb=%!RNv@%i%z!J
z^HZa#{7@(D^u4aRxM=l!KsTMCAUT>0pjy|>Y{61PQ*@SDrc*ERi>wI?rAD(}J}nll
zBz?VF)%|2SYQy0}5jdX~jg@Jj0!^PEehDuT+vI~`ESqX(o#7OgRwg|k3|sPX`Ppo`
z-OW2AX|FfrWahn|H9tu~wo9QlRgEav<?h(pRNICwNT+0z`|wO(T{~n_-+-V0>FkEs
zZ@T5e!p#lIyM%rv7!~^Xxc$Vi?Af_~D7AwA6f+xrGkEWYSzs~q-W)crEAHKKtNWMT
zA*J^0uCE^svTi<4x%<Wy-TgbfsI>~-DCr!TZWSo~vpRnGe$U)$8Jeq)h3S-=cHLGX
zPP6q7go-}-`!Tiu?++~IYK?X_Q&20#i8=-o!JB`0>>850j7i>XeZ6+$&K<LfWQS@x
znTyt$&ru`vDe@{~czj_zoM8}pAriM>f)P?f<zj&jrX)c(S%?HS2e=;FqELu+p(8^K
zL=tqQvSj8G&s2Bs&sr<xnfaADKXt6IXxNuNal8&E3Q&e71-rDe;pRmX<wZzQ5gQ;%
zP!oyr$+3LiF)Hn?Ct~jU^Jk&=uF`{|SRZ-dibi6HNEjqH>EzTk#c8FEy#DsfCR`YR
zVzc|*kxZ)rYzb8}W9-VVVj`B|ZL@Q&BliuboZ7}|6|cnVS_-QZ@Cw&JBFs-lw(vWW
z!s*_Zey!Zh6_sr-WRcJkNqO@X8z&E5wsE9i?am&pKJ@voc5ga#=~m?P%2`?g8MhtF
zn&cQnwt@wHE^y~`|A9M~j+~f({>Ho2==Z3gd*?gx5`P+5C8o58Y}ORE+iofVZ=y2|
z%*5i|^rc#Ux{YH<lWr~`IS#%+TSOo$G2GBLcmQGIQ@FYNJ_|5hxZDe1oI`3IItob4
zQ-V$GI13nB#3hkb8egHUkQ?yaLYeER=Q=sfNxB+jd5WeSL;+DST>D(whU5rTo|}#*
z)1VA6Rx5X$?^d&&>S(Rj_VRh}v|nEAR*OcNSx4_pl?u`jrrOCnC>1eiUNTo7QtkRe
zte{%(D9}YC*VNo}5u7g6F^F8UBd|hL@;fj)2)(v5Rkt#<`QAfb$9sR^b|JVfcquPY
z^sfzy0S$;~>It&pKtXx2N1yYYH<S>TT<J4^rEQSMF^PfH>9eqhob0nAFXDdSb5Q}p
zC6Tx@EJNoS70p>jE+baPG`2B5V^_B6wpkF`6>xcoaRDu(gwhDBG2AheWoG-ZL=br!
zTv0X>K((aZ1G!giU#x+?nyeNIhr9q1pxk$m_6^Y@>M5_XwUMN(CKZdXxhflniVJ>}
ztm&gv={7;s)d9z3y{hQV`PG!4JP!VdHmWWyN=n@rP>`5+W4@q@`6114@b>HswKJ;U
zKhE5zV}kYP=Ts}cLeap2y8A0)el|hHvjNLX&K*vJk<7(5y~4v&37W?^LhbBiK^2v0
z^pwq9fAPiFTTTX3AGuJZ#_2X}@C?^=GD6IWu~{L6FIS3d!)SEHR7OGL)K2O$dL^!*
zXN9$n2tUzK)-C>F3+{jn-B%SgSjHpuc>Ef=C=<G<jLp?`?XuC{aA)kr<rXmGFQ?|#
zN{qu@*LyV>#+|I6cIoM^Zd_QMx^D&}+AL3Q?y6opkxhGBpHutv*&XHc`jaP8xdXlZ
z&%Z%1muG&;+<F=F>SP$LdMUMz?~i;w^7Y71$)L2<km@1Yw`&LRcqDfOjAD>2!ck|*
zGqnT1q;$aQQwAMI^5jkrggz%7Rt+pLQ&FA>%YHcI!sMjnVEe>!Bql5IStLK3cf$}Z
zHG&e`8GJr@aw%TmQ5NvEupjw0Y{R0#RxD(RpgwrAAw_PrZK)k147bpqUg+E5uIHZ1
zFYe36HiQ=fN}i@fy)9knrU`IJnCjfmAUqfJd<C&L^?Sm8!U$Rp|8_t!hTmXoSqsP1
zS|0pqW7WC_DH?uYu~f$Ku{AA|hOH^trvr;Y`$}7LLG*?qMm!XB($+s2szWC<tXfi}
z3~6JhY(OJHb&<Z4ci~@}XkAC2gpEA>%YT&(i7?9_@!pOx*pkPKleG5YFR6Z}c&o2%
zAK@UipvV#qjpI#Kuu_}h<KTsmw()+GMzn^#X&X(0KYKH(H?_?$P$mrfX&1et5_tQB
z$VLc_iT_FuHGC*4R^)Ub^U_~?4MNS=49GPA7(z%eZa{dTY1bH7?rKQ8;e))uir0+&
zhTfJ0ka2=(;A<~asgx?vyGkXsg6xqKc%Xzq2;8&@h!Dwc%U;{NXAR4?xg+v0D(F8B
z*4E5@XV))2pp@ve=$S7eBtAtv5_}p8Ta>a?7>g2@`HR0Rc{Y)F%u`uRy->G5EnUK7
z0*gu)xT)wG*+3M2xO7qydr|EL$8UUVHgoxrlvysB$&RJE<?4iC1OW@mM&jrg+!F|T
zE{ZaDufWz3C}Ubz6B|{xtju9rrsg%H-&{z<AG`j@-5<UFk!0%LlgHlFv{L)_Ce3UQ
zevwg4Z&wOq01o!;OPH<8q7WnE@q!%8noHMJHFJ5z&}&PLX#n9<SoIS{%~)ABwbJDI
zN3Xmu6@T%dKI5Cj6yFU~`~iH8<B_}2wjvka5P4_h!;w!${y6f@$ahfSp-$yQIZcsj
zT%2B*a11ps7e{h9oIlHXVxvIPj9eYrg)Ik55PMux*;5FqWE%m=%R1x*ufzQZg%?oc
z*z(p27qS663D1rIFoSSQn#}3p7F=&=XXJOV|KP5%9|tG<#NzPF%7@m%G^hZ@!$q)z
zb_XyCPrZF~zCR&3OiN3rycL@LVM48Y7}P|JV`B@mqXPepB|UGWg}$(wD};uL6i4s3
zut%CLUfHSC^lM<$u<`}FX9H!kqXo*d5~(04&@Dz<IP-ck;N|;cb|J9wdg62xx1-iI
z8K+ir9wMNnsa6xutUBL;LOC9{+oM{h(6e7)ngzE-^xCrN=T)E00H8>x)2~BwY0b79
zL`@3&V>Gbp`QvR4>!joQi@Oky0X9gF1i?501{Y*{$WC}=&J7BuL}HC|qH<+CpC5JL
zK8cO4ClmQPXJ=NynC+eb+k3>ciWP$1R&OzCdw-uy7kpETKb+4eQONp%yz5a%;Jcoe
zcj=_4d9J^YsGUi=a#ucY>cq9K4J!>UwC9HC<pxUHF8NzOY}M;cvaAiqP2^JA4F>%x
zG`zr}87hpD)43cF<jGdUA^}n<MfD8*9h3J*=?IW&66kE!8uct^R_<cTg#PkZ&}$zc
zGA5M;IYz6C%^~$xy*5yoKtOS7?VX2;_Z2UE{-p$!c0KOBXKU4aJgz>l)wuZLS3K~+
z*it656cgx&U<#?<I<3y9f5KsW%=bk;6ZxFvG6T8-ND!L*BL)5gM-mS}!iOR*!mOjL
z7IHJO1A2q>CL@h4q*ghwLnT-<&DlArgC)}y)~F*vXt)A}vzMo%Dh5P&K*;wwYG`Tu
zUSE!>{qK%R<b>n2Wg^M3!?2}4M-h#7s$AAx(x$|zXx<0J2E?taKWmJzVvF(^*9Rdt
z8cPSMN?8c-gniM7ZM_9oKkkfyp^=>!r?OLcq=P>ki;-k(!V<c@Zzi9rmi!!vK<M<%
z*qa+|?Ha3{&1On93hUIwj&kv@^NKS3cr#h_;CGD0Voj<aHM0>1rXMSK#bk5TX*q$D
zuV<YY0zOk?VAx)Tm>uC2%<k2evG`x$<ZQ**&#K2;<gE){Dbb7t95~kEz#mGjIITp^
ziT*DSvS+MmC)@FI&g~XElbeJ44X*l+h+%!4`~H7NegslFtBTxjILSi;E@af^9&%f^
zRRMx!AU{N;gv&%hgaYT8HCPuUB8XcNN(}E@C@GOmwl{;K38SdtE@UY%4@FuHRM2*O
zwZ9mKZ;-4ZjSgC8)(fOML~t9>>C92_AUUyVN9SPq8Ihm<^uly_OdM%3H>X8Z!vq!{
z9P?@xNh$Icp8ejm#g*sSn4_!?bsg`;5t?1oC3!PL>@6Sq?tE!A`L83`n9_FIOq;b%
z8%m-AU0f}Xb_jx=NMn*>Z+lSYIyCarwF<;j<QK7DG7$d4@c|zSQ=EELD-K-^1#C1q
zhWIFxU9F{@MCK6IjfzdQ8-^Y<cbwRKULw9S)j2N?NdiBnH*ww-nZ(TpTQky4QPtr~
zq@;q|&!@8^c?IH0m`Rvp@{WTcvKTgcK=}X*_2>|VrW$+-Y(kE&ymfb7`j!ClC^ukA
zYQ4^<l1f-b*-50VY2Qi10EF9>B`sye_Fgew2DXAhp~ve(@JFQL`5ZW85HA5!H<fD8
z+A)(XrpdnGP{6y}LU@^UFG>wJYV^UwLo3lwD?<Y$Gup|NvIt?YHEV@(F=}*bLtVbN
z-6)QD*?w(-s*ll;%cT*8nHAnL%Qs@jTP2dI?NWvD-5V1UC@wYPnEGF?0Mgrms+nFj
zn3SxGrY?_DphC2c6jR1dFB4(jenZCSS6dUDyQwnuF0{$dn&Y-aGes!+z{}Wlw4LR4
zQs@O$R2<^*L<*TIv1lagli(G}K=5h~Omon;%Zl8hI(6k!Pkmr|>8ba;XYua4)#<I%
z>h!T=RL!c!AO0b`!Infm{R8A<u)HKAPgb!P=yp#+et6r#C%WD4R~jGqKtmmQ;DPD#
z9i@+4b=CI|Y<>T_>y)?kBQ>=3t<6o2Lmg7&D6)B&?;sr{T=MeM__ZI8d={Y{%KV^b
zW1b6;L%Iq|&RxJAU~1vG)j}HuJee2^1i1*DG6^&p^m$s+3IU&FFh!^%k-b*<EPxQH
zNt|0?eh>wG<~{MPbKdo~_u%>Iqx8gsUg!n$b5cGcDk%_eSZb8|Q2gR=*gXKibG=*L
zc{jVZw&wP(Udv8QWZm@d=SFULc|2FB6mpat!ed=YO4Dh2635~`O`W0;#K!!1%(;Sw
z4|e=;ycj3LjbiUIsW9C6O+>pav8-ym5IYPq)s7$gC#81nVm87wTFB+r*T_VuK;PI<
z>Yt8%k@#26d*|rrLl0d)w)zlN&8JV_bI(1=WGDO%Zcr%zIT5%>EZNDsbS?x7<>qsP
z7kd;ucQy=M#33}Q(@eeK*wVxh_B$FPFwAV|&}cqsI|ZO$vIXr)xA(zbF$lgh(qZS;
zN+S<GI8w6sI$;jciC;WCJVyP?naK0Cm#XK(rTqQKPq6Vp1XD!_+7Yfny|(~FP!o<6
zc}r#rsl^RKGEWk$C3qnfD2Qp02C|`8tUa3~ph$9l#i<nM6a)gkdmx}!$mUVnf=rO=
zpA|`Ju@vl~7R+J<^O99ka0X!}mLwY@oK1OTON>=vE#kJTc`ytDy_3B$Kq*w*K4e|Z
ztpVqfMsB#6$YJ&+^diMbj_O!8aQQAC$bhwVl7^iX`ZU!5(91S>q?}TqotDWTFVY5#
z;5~30dUHazUCB6}q5I3pyk+L{l1hdN+r|^qV0{w-m!u39_B-f9Eh#F<7+D%el9!WI
zm1a3*KM^fvs3C;`5&INULXdvKRLrj8vZRS7%3(CLy5#imY3Y-NtA{|8GJI}%mO%8h
z11O$RfirB^3_qZHE(IN13hq*>rx3$<!hAElXoMz`6$=IKKr2n&_-CJ`b1+rssievh
z^tIsAqBDY$>JfG%1sf%0hld%zAw%699-|PE{vK6hY>UZGO58A(b&-CY5E&wXFhuG&
z3lJG;_#Km_LLBO;XgQfG6nwsLOlRUibSNc}u>C>xB6vYJ)lh`)5W*Zr8m=r#_9A8!
zNZ1X*f2b0fkYIj-^QP8iA&-L8wdJX}WFKw5haIg?>~x~ZVMz60XSGx((9NXhVg*Wi
z$+AeUBxhif&^vI43*RC34pD?U@)^^I_Kna)YexR|enyX1f|8XV*I!Sb9!G&6qLEp=
z@bF~|{RKud;l(o4g%ESq!9abQnCqm>lkI3JV+QP-7$yr@F)l-^(VrD=K1@f9hP<yn
zmFjo$=T&Dnaj)qi;{~m$RzSuk2&$>h;dro{3ixADE2z-;<U(K+Y4yBpC1|yRY6eCN
zNQx_!sPLa>`20Kh{Ij(Qk$yWn7i4*me?;o$?ChzzH_g3q_9bfbf~^bGN96xs{w1s>
zk6eJ9A7Ni%5fc2>I@LXIiM)e|RisayD8{wb>koy-a(EI*dBIe{!wM$Fm)>3E!DY%L
z_JO!iO2!nnX<kK~XExlb0==db5%;#Y!K(A+3P@Y?LHRk7A#^P{@}v<;f}qa=<})Ge
zMTkhaoOz+H3J>~PoS|-aWYJacqC0Cbv%LJ!@-eJ#aIyf>>7(4pi488AHrDX-`CH{3
zLl-3NIqPHXU8$1m*UG>`n?Bfq_;R-7NS2($$w+>qi*z3x?I+bqU_-h5ck}s^3<xWg
z$f^4%flJYn?U6g~cu)Cr&$H-4Lh=pcAZZDW5p4|yOA?7(CZ-)9P9%m?mkzc9c8Y+Y
zH#RKgY^k~7;+j)xERuIQk<87c-Kt(L)H4~|svgKxDNey9PSYsbuR};Y*sJDb(|W2`
z*byF@aj1nnYtLsKm|*E5*b7i$H0Mx!!Q*c{wzhUmP40g7U3(^AMf}!1_k8PHN4NF-
zAP<lYk#}pvCXT`X@*KJ~!3oEm##bVi?8`ugnr<=hySC_P3RxD+5I`DwU=q;>+=0W-
zePx?=3uI#GBgvj&(1QDI&ygblF(Jc<#XT%{?(Trek!&i$oU!$;Rx6eS9pHJThmu7<
zHQv2ueCv!~@-r2;7?gr6FPr6pM`^cqiMm2>@Uoh3xSe{fb##)bwsTi;s9nmW)p$<>
zUk5Cdg4O8V<7%qgU5^3(XjujC(b0Tt#LnFG=9QuN&<P@gK`x!=9??uV9`&<9IXX%g
z2)h((CbL7O_T;2X3+}nG&hT(@HvXlA^Fp+G5Z#P5-~47SBQhXCocdm_eT(bnA%erH
z4^3EjUFcnN_PV^KIlW`Laobg`E9;k@*Kf$1TaI3^x#z$PaKXG&sI3eiyvR+xbg~T@
zNTIsaIe2;L<wNora(|yvAIG-yrKcgEg4Tp+YjAx9X>Rq2?1l^EMtrz3GUp}j?ve7)
zv6WbAdEb!p!dFx}sa&Uu-+y=U*cBVv>P0VkVm@%v6&J?N`QFi`@tu2%d55f!6H(gT
z>V9O}mBgw(68W-<s2xZIRPNxH8bwjJEC_>7h$DVmAPCx^2AR(oee*q+MykSE8m_ct
zmeT;R%_a-e5<w=qjMwCei-k3SdZ%-sbWoTZ_(L4V=A1-gh9BxrBT{5QF?Oh8_3_}?
zggxa;&CW<KzA)k>pZ0V=zB$a$Rbg~v1QV+!X>XHq=XkQ8=>u>Z{E|)(uMfUvIVc4J
zgR@!a&V-8xX$8V#@C;&VP%yBf0hio9u@<3+RTV7b)P(^yIUhO9LRU&T0Ttx&9xM9J
z%|>Gwa+gB2eN9ucTqwV>9i48uB+6bvZB!iTwJs|gk6T*2P7@hQP^zsm63L(xR>vsi
zC2BG2!`kgO0WL<1g}nL_m7ws-qmI~63MEme;~7MjMTLt8j3!RI5Yx3Sim<T?+N|cI
zW3)NtXw*}Bgn`78pl^yq05Dte-6%P6JhVS=30fmPGli4`dtE&Gpo+FJC8(=csyzfd
zQYprVvH;VBI!6L~R1Og9FrxH2w!9ZwMp~<dq$#>ll=wU9S+C`ilxfR3JIT2ME)ogw
zx>qfFRTJV?bv{n6seKi?H(v1ZDQ#qQl=DhywInU$3nC7O`4Vv-3;S6@4n@3Mx-;an
zsT{_UoR4b)OTyAHxi}o1Ftnjg>v3QPKvE4T+{9$TNK*IbqFReFiY&$wsZsBYVZ$l&
z^;pC&jcK?D+H<x14ZH)@q8~pNk3k;?4K_YE)`5WwX`O$b+)(P=!<^t#+6HqqN44k@
zoR=Std>2g#<hd^+e=v<CqD@It7qEUfh{ZCfs){Zdz|JqE3MHtD_k<plAqPulyM_84
zOcmL=Ki{SuW(yb@Y;(|}h|kqyBL+NUoegFfgfbYznJ4Q&pfOt|y-ONV+OdV-fsK85
z#Han%OgIhrhQdZ4?g`jhnpw(r3o^W0y)iW%(mQaBX$hjq5zVd~k^ST|<QSo5=eW#`
zX=eP4eB1Ch%z4UO<9F~GTo)mUl_fKj7M<O4{>2Ia3s}r(C7n@kVX)~5_@C*SLxopV
zwa(3MeuaBKB(VyNIXrRfWE`bDMz_~vO$I<?73eR_0$Aa+M|lZTqC;a7VMV}VcWfLh
z`aw7eEooYgnR7rKDf%8Iv$pkWX$Ya^tA%7tMH58%QRG=^ioy_p0b9LNH+P*!cgo>%
zX~(Qqz^qh@dm3%uCrpzg^U$bI4aw(D;`7HrwK5kNS8fjHj6n{aIKz)PNt*c1kB6A0
z1aG`VHXSdKIZEjnDwY|zq-dZ=#Lj-@If>SB`U4#+5a>u6GGQrN;49JgXZDm>J)GU8
z5K5@@DqRMRXHl|aVW6`@J7!wIKKcGSbAu@yLSL~-;E~X6Yz~ga1WjD}yUb<|vr6{c
zEM$BrzQvE=3(FLNF5>U$AI;``Gs`K080Ffl>0&~{{J1OWB9X;t6~mqnVgkxM<H+2+
zWIB*32egY6t7S^m0$X-z+m@9oYd4GQu9n^u{(SQ4tChL+(yPAxZS*0wH~R3i>T%)|
zd3YKkzlhok!mRj$OLUs_xq6`3ZWp#b&SSCssf(Yzwt4T-Cr_%!+r_O<$Qrf3*uLVS
zhwiy&>xU0McsIuf3eNGLWDY-5?fV}-LwKHrPD!|_<zKxIDxTQZZSwf&@E7irAN9o9
zB{XhMZGGwsUl<-f9R6*egM5aDq?koI1onTJ`J#|Q+$_@~>>$ik3MtE&MFb!}dCfJX
zvAt(T!)VkhCHL2=cUMXl4VTY-^W(+E?>)0&<?}1m?M+hSne^&ld%Kt%->#e8K7Xmr
z2pPC(Pn`vb0Ab?RhPrX<N5_r}Yqm-qlb2kwFs2{X9->Y<0j}gqDiB^E=rQ*k0$O_j
zMHh3Dg2|SnqtlTZ@ckkiLdHZ>%!M{;e!yUXj3efX8!oCIWy(fgn7hIu$YV=}rsUZV
zkeC56)k%r?d-=0n-G8c&==`0m5G{?XLXh&{IMHO87L<q7zrgEF{Tbv<X&4ilbzJ!c
z9IT4pt&}yRIfh2HmW%&7xxO*cEV5hBZaAf(Of_2?8hSY%NFl3QU)1$4>M5`NFtjNz
z%vopy!i5hrVHw~TCr-OwI{}eJro~`)om8~oRO>-Hu1%1-vGurKOx&`5<+^(eV!!HG
zKK6e4IaRWqxz4|G@N5Bl3^)&d+AX{i#_o04-Cjs#LL@S%2bibhr*xJMP3<+qUZfV%
zfPBJUhV#k>szXo&njTX1AZ}>UQ=<b1gc5d0BScVV)F5WoS)89Vw|6q0-pOcL?4~~R
z(+_^|rytz<vnyVA`Q@+so!4C+jI8WGvW)8-HIr6acQk3!AaR8In)@3L4DTr4sB4w<
z*c&=@hoEP>lw^p;C+}g><$!P%%2&WXphgV06FDPm&K}Jp`b~IyaIlzb#O;)ovjQR`
zN3VRrl~=yt)`>$`9h#UpG#QK!HT>kSnM8X<j_v1=mYq2Do=j#jX9{PI8voh^A1c9Z
zvWdx<n=a#Fx6%kOrB1Fty`#jUlQ)F>ky}A14Y<dW@IL$)-iK<4?1`AfGexO(w>|o9
zj}9e_H9<Dv6yfHFr5S2DuD9AsoqEk{{`fU8NE!Lj_15OqW9N^l&XMKiBg^Hu7H8FK
zZk(IcldWCTHL#bgRPSZo@)5b;XMTYF@EAN-6EM3;*PN>(w;<!5hSj4YTe#dz9f4|y
zDV+~MT<HSx5HFbpEdQmi&HuzUT1MbP$Io9Ax}j)g=j?HL|Ei&-Xmn}lG5u}2{)BPv
zBNzAy!+7H79@S&2;{CH%X%A~!xt^_fKX$8=?e^r>kLdtGH1wHA<6a=dvSjecS_4h+
zk7qum9zhr6!2ax{0_<k^3?GO*MwG=0&3*|M(!EWXf`}}Tq+Zi8&&5U}{6}*cNnuMc
za7_<oha1`~$QI0s&?N~U#Y91n&W7D7F{nhQP7My*=Vr@FuIoC+8(Xq=dl|<EWs_I=
zi*DS(1@eXy@sVn0<jA4a$xPlSPM4U5jVJCOA)A@ZKd;frQrIMLTrg-9$r|>~QzdUV
zDQv0eHO!{x6@5Oo+}r=~?Ce;n*i0C9qNbT6Uz#LW@?BH&=NFyy-hD%w`r|rKckNA=
z%zML+P;zzb;1E&^H5`j?{)!(13u446E90;UtC-H0@<BW^T$!zA`WtSm7S!IIt9n5S
zbfe#ZV%Y$r9^F5i-1^sco3sliwU#Ud6}oAxCNmWpRoK}aMu+rh$Y{)Po!)<%MI}}(
z8%@QIO9-(VSb99F-WW4V1jZoo2e?iD6wwDjK+gO*a_c?Bl&D2BaM_3nV{>*L%Z4qC
z06hjJL0KZP8l=)hco6mi97IA%yI0&=?R3y0`=vX!SsY4Ly>6xFjwctaF=zSzVeZYt
zB)Q5n--<mVBQtV|jELO#%&2|Ks?1h(RrTKLZmC<XZtc5-)Iy>KXhD)efY?`I1lV9~
z0p87Gn`>jhT>F9<kg*L6gBdS#hsDcakIneO9(x{)uZ#QpBCEBq%-_@1m6c26i4!Nz
zIp6kv?^hnin_Y5r)(vOowu4vJ+ABGAaA5u1SW8vIl2OYSI)!MpqWm(Y3G;cyIG9P1
zgfnKJ$(kjrrRR;3;{gIgN4&*mmAc{s1!{Bd8tz{uztZlkg^g(dT{_qCIXEPQW4Soh
z5=N+gkPs+hXtUC=3#s^1>=4V`b^5K1q9o=#p<Eg$duu1_Df1j7bMDBI?p;6rj@!?@
z?Jaj-^`eKaSi5oK!JTstKYWgOopDjO+j-)x&wbuwkKcL6+ZSGZ`Pqk8Z`yk$g&8LL
z&ZG}65p$w6{xeP{NI>M|wlR(wVmvfN#Tzh<F@15YV2<Kh!GVshEj0^}kn!L<yPdeo
zefVs7snhhSWpkq$m+CW}P8qajO}Tsj%~r2i@6=k|TFzNsc)7WEuk!I9zw3FAz3to`
zZ~v`k@9aZvzT^X*o+;PV!JyFzl`<(cU%PP*?`9k;L8qLxA;P<;QoU+plWTb9IIfUa
zb8`185{5yB5;hoZ45sX<@cJOe*+jJ^9%H%0F_9e!*NeM|WsG2xSU+nz8U|cYWqJF=
zKnAwG+3%!`N3T!ssTNbU{=&s}HH!2D?!$+aQ?EB4yz>0^<(4(r=+xX&*ar1bJ1Q48
zcWQG!l55-93d&vh)%L8qi#cjv1K()Wo87Yyf70J9*RFi<#-8iUrk7Kp;ba=mx-OR;
zyANjmS$D@@9h2zHU6JUPT+!rOVk@|CHOzj3X#nVl*6_lOx%>R#GyAvp?>9GUFLxgP
z;8@##hyCD{t&Q1+dwKQXbToHx-$41eOqNNPpVRBXZ&gUgdupw-55KWw7KRJ8=9LfT
zn@ztryef6e1J4+L7d@iJOnz2BpEYGKq|ZLpoePuI`N&5;GCA+FC+S<~=1$MfCOYk8
zo?7^+uy`-9@o;mgP8Ex!+{I4drW(iOM^O)aa#OjFlY44f6P}*$^pC6;ls|XNg&^B&
zFBS)JNx#hZhu8dzVm)+r?b_;z_Tk0Ww6~nOz~1v8t4mGgmV7J9&)3t{H8AMi<y$UY
z{>e(^>_e-w?X}uWP8X_T(N%ZXw2VaqJADnr=Cj5_dYnu)nR@;zdMc!1;^zcM8H=w?
zo{(g`I>PXk`8QeBvZAkKw0`R7(e+WsA#UN{v`XyAuXgs~GWKdukKWE!vc6@ZEBQCP
z;e4E>kk)1A7tM6Roqxljpg8k={hZ%r8hTbgpLO5Jp%5Gd4ghkUsi85B@YQzL<K0ph
zL|mWh=!H9a($HEBRogi1?BBQd(7OWV-h1uoethl1(;a<!FZz$#Q4HczO|RDWmz1OR
z?d@~(>f*xEMlP3MpY!KrY{fRauveA9y#46jT6p-$0NnLk0t#mr69rylRpYz<fv)}s
z9ohu1yIxIKH)q4S*x1(ALU@vkwy|m!R#tvkkAI~;Td=Bgb76b$bat_~I6a5{XDjn7
zD?ixR`~P=+Wy6ieve8Gf_3)g%9~Sya{4;S%;+hfPq(zD!Yg}GXqdJy%36u(QX)LT^
zV{r#dQ%M%2wDSYkc{ysa5#Zc{M;9e~W9VyuRG~vjVVtY%M<&fDPk2o!Hx+$hZ9!NT
zB?<xp40RYi7FR;DLp*z>t{dk0O(-!=?@u|mW~^`?;n%tWZQ#;lw0!l=>GaiCP?cFx
zuD!@{F13T2rP{^YNSHoy1Ckw}{OQ|L-?x|COw8a%-(_~^3&X@fpt&+8#mTee<+BDy
zs=YAEJd9+Jw&B~@eQB+t&?Z43yk87`5f%3bMlRetENJK~rj(O4l+Z9j{1Uw2At1nN
z4d*;9kL!+Cx;Z%pS0uq!BVZKOqqZI70(tmhL-&Pf9+J!Gtn2RIaNT2<yYBI$u6t_E
zO&uptXQ>W=`P4<HLG@kXx;HJP6!*x`P2EWL>7-3*c;Z`ldVQ?1LiYdfM(>%0FIm|z
z6t5-e7i0jy=m4cLJkG(>a^tF9ts-aIw)r~49syHO({CW?^tze!`22^@pZ{T3_G;Vw
zsC;3B1*Lw>#Yv`*?!P0gP9OT2#24~(f2XHbut|RO-8Na!yEu?-@;#E}f|rvJyF^2N
z;D+6|K`_P%XD5Fyo>xbd-tKQXxy<|z>*r==ZfUeMSDE~&U0d{S$5Xy|SH`;*I9W2b
zQ~S_44<wA(C&}wOhwcg2`#2WYLqza_<tX5jBy>fb3b6e!2}t6Q#S&mh*?hVzQNg$9
zyR2U0b<~W+%v&Axh23XTg8`)_iDcrTK{39m^PFC7%McXrOueO;)77}BwA5B{&{$Mc
zhYF>cw%XATE$7_+c;}-Fwc0}U-%7b93qVtK=XPagj%>?vJwH1$JJXx%C<_a?DLy@V
zAmts*x{gbBsiBt|)WQng_n$6J_Z+*8e<GZ#6z|D4mK%-b0&cYuWQmoaT1w}0p*_>?
z%?<{3PzeKg@wks3d|SVPzsbU$x@GE3Q*WP|>g^h>f_=noE6!;2!%kq5Wg&PqAtk^i
zgZV>L7nOW8<``li6K_mJxHd8)!axuUaUl6u!eoLr3MOZb)M(My@ZN})7LeK?k7Ace
z3J_C5-kLn;(Y#<j;~Jq-+berehOyyfu}d<GmCaYrm#~&CXnIoyrQ@VLhlA%@%Vt6q
zwp2T3Mj5#Iy|QPfobfj_y^aUfgs38;{sIVFob!bIeX`y$XaG0ly^co4KhL^EB&fV1
z=d8OP1$y4QzOfvW)0{E}^By4+k_+=u`;tv~3v@FBp>Mn1881heGfE@q0q4S53(sp=
zHs?}<`ha@rM%h2peabADc;S@bSMhpiw@7}nriH)<q!*f+$>U)nkw8<cuKqxBZkfX>
z_vx$Lr=LY9xrN!gi;yhhwE;G$gSo=|7o>a=a0ll?kgK6vo0>ozv3R*b1l;lC%l0se
znD<XTQT{Kk>cGr7aDcgbRJ1ASDV`anHe4AMn_)I(su|xmt;NqSX?B?RF2N+kA$FK}
zcm6ODB12s&!C$mkiJ+^>99u2T8)=d*^JH{mJ&HHCj~C4|{6=k|Ij+~!W_7XZQ>+=j
z<YHy<U4?~G-7C0QzDkuCFV!^xpthp5;(gRvF1wk1`+95?c3NDpiH!M%dW8Av;~hOR
zbxDG-0NZ7Xjk6n9ZYTz(`1+922E<*Z>><-@*Ge#f5MfiGP~Z+TyH-H9WLG_M&7l`g
zxBJgI_l6HVeA#PH?JOMG^ZTmhlj#Eu8DzrLWzvs6aLe_t{0qCB@tqX;&xY${(*dbs
zQO5o1nTzhb#L>66)8{X~{Jyp84#fv@Uy^xIFO>QuyNg8Dy2lP4I&~wCC%6htD2W-E
zM?;N#F|mQZk@%H0_Whg1t0UD7`<QG4YSK>h%{ZXntSH&B%pwWf0im1WdS}rf2qWQ8
zj61GtQ(0l-FABst*@r|@CcaO;7FwNnoy`e@H1XG(887nlVY94mk^?^ptC3g3(}tce
zkO?AOVrDk--Cl)4*@oIE06d@w7vLH#=Ylf69a^MZKdF>>pOr1Q^;#|@5=XEMKc1!E
zgCj#6ZVDN7Oa)0~UZj+1#(XpACPZ$k8dZ}D@RZ9;`EJWAEGS2mZjNL}8I#{3KjItM
z*IoR^cj5_`89u;%MTE%xl!6s(9=t^|C~U>p5JC}1j8%&A;t&?s0t<ySMI2&mQppeB
z=Wirlp<SNy&|-10%geGb|5@|hVciQYy^^c-x_<~?b2c}9ZcSO8Khn?R7hq|DCULae
zr*Am5H;IKRZUosb@FS<ec4EzMy!D=h5jztRL8-iV&C3?rihjAOwC~6hu~Ng%bRlDV
z?RMWTQCl_*qXLm8tuf#5^dDO^3nB1)r&CYgKMwmBFJ_u^F@>6=0MwLbtjrk{om?r*
z-vzFhB30v1S2I6r>p6ISTeFq^Gvu;Glp?}M`JAWit-`M4x?q1@cn#t$X8+jz#Zh1l
zp82~rj@ZMW@r#W;#&_`aZ_$b;*4a-y`PgGmKK2tIeZ?z2`ifV7_>o6G{D|@v(>t-1
z3&y>uTq81^(W{lHHwtsxCp`1y8C5-d>gfZjItLiFa?~3Kxvdi!>(p72XfGIY@2Ba<
zo>cbH_A5TR^Pgz^kq^fgj`hq_XLlRh&j0AMojJ+bwsYaA8&)P~les2!)JZ7EN)gto
z2u((~SfOUc1Gi6w+HJi_czJz%ORw9#VrHf|9NymT^{xnp!(c|K&Ck#M*dH$}{PB|;
z8=bkic}<=?`Ns<qBiXfi<X(hW*N3U3eP-$!YO&ld)q?ch6c}~aXCE`D0-y}I7cf@`
zVMO#N6jj-jMEhimL*{~h5|;sD6;Zm6y$zzCxX%sjjx06;YtSD`19+wb?j!F**>rP~
z*Zr<fz3z3NdfgxGStw*z{5^~P!ouN}m)RTcb+j{QG>0b{@B7|JXFuMt%T%VdcRpRH
zS!LTUTeU(*c~#l&6lyzP?=S9I_;z7o&!SZIc>IgXDNgXZPu<6d>7rInj-9*EbTfP5
zT)O?NbFD4xNw?~$LV?y^DBapa7yFmW={ki1=TCfxl2`jz><RCM-+Yy<sr!j|yb6uw
z*STLq$qp00x9kw&{xJcETj(b8lr3ODU<2F|-g&%W$sZ}Nop^8gv&vNNusaUe2_%|?
z=0S7Z2DVPwW5lnHPoHJ6F6ktwhvDumyAV(s?Y<_Bk{d>Y5~@aD<U7(rKob&y@6g2P
zyRbYfKEjdmbv!6VAz!U%%D~RlNbR8_y+yiG-YyW6&0HqP@N@wN5E!Yc5d?W+En^Rq
zne<kBday6+`KgWR_KK4(rOomnoZf(iHM?&x-QJ3%vT12t^ZlAX5C379dyCX70|jR*
zl_<mwrUGYc&O(KnGiRF_kMtttz18f)rz>Hed;!sj0FUIu%KG(NsUK^{{tVVp5$S9d
zGHEy$D1W2j%C_7z2#bOwx8V09zXSH8{cvupGy}#N<_fovF42sN;<Ue+zm#5;Iyrjf
z*D~}f7Y<W(;y`*mMTKEqfyx+2TN4h}l&^}+7oYLhl;0y)4i%u!J(Y@L-9=*wt-47C
zbb<9sMGu}Qu;0mZ9yJ`BV|Y7Y*eYy6T^JPoF$*ag#F0b*<hKEA5{CigzozmQoWv<L
zo$t;coz-WLEOdl+%q@|96)`j^GNHiP*cAV$4|2I`!3$C;Y9$BN2oJZ?Dec==Y}$6S
zxNl#nAuyNuvRcwJ)l|N!r5mNt%7waHCS~2pYtaeSnP&SLbmtmiTY`2Rw^ONVY?|fu
z`Po+4v`XtUUB_9zetX$<i=*YaOuD_f5La+a<`4I%0Wn@w7Rh2jnb`T`#W6>=^eZ)Y
zcIEVfky}|97gf93Tp1qjY8mEi8J6F*6Uc@tn6zI)(|C#U4srrMtNbZJMC2hb=}o{{
zA~Z#P1UNqdav^C4-3cBFA04O<P#J=7;xG<HjwY*(^%XGbu@#V?JmHU+4awmg$~u@d
zw=PQ)Zfl&kRB0AyC~wG`BU48n<FyOGDjJjTOQVw?Sxg)*J(B~U@v{V&oNh`ylXFVv
z*fj+&5=4?GFTISA?9u>l^B?*Uu`{5sm8K=Jh~zTaAuw+ydqwgnt3K(*q$`3v!B<Hu
z$<HL4A-Tc;?-~heldr<)D;-~vt`mNhR;7J5BSIQ-K_me&l33}UI%ce8yybU1qStZ(
z(jWF997emJtqn(<fHr9aV7w*_+H5LRC>xuyTaAcMF&^w{d;mZ4-%7+reg*G@sUd(3
zmKN|1*=gi`dBE|3P9`vN*v^tL>EvqyZNlM^d|%p;3>UsFIy{MJ9-whKf;VUj+9fd4
zJOg?{+BL0VGw>QbHTofVYB`C}*nn*zEt0R%A<B!R2`eu3ILR>pqXlv$Ni$<B0sfW(
zN-i3x91H#i3=MCfOY(-CNbp#4e!3x@<UDjE;m{NizF@p2zc2&>UqO)-&K6qYH%ZOm
z4|scG&dHmW)sW_dQI_Upc#bC@B*Ww+(O^ZnS|DM%=Ie(kP(Ra79nX@u@UL?X$`u*q
z@*t0Huavv}{Z=6~iI&wUxdN097G2$l0M*+~1AZOqyg+RQl*VCagM*f9<QhOHXTigW
z@(1{?kk+U@o)tX20N^QeVY+)vtx(}E=;^AXWs9T=Kz^5Y!8)a58w*u+EVMv4D*zfx
zS^)52UO`1AqY2Nm32g}%3(!BE+<&-M=osO~bcT>SK`%Pb_(4G@adA9@sP2h53ik~~
zTqNjiK(QvHmHd;@lCDFT%U{M;rcMTAeR4B6gnO5aHfRU#ru<;|VC`@?vcyV<7zOZf
z@ShZ2sZb*c0^~WGo(<BFhA_wZ2XZ=K4BR}Nt3s-m3kIfU*)ZNgi@czC7@8>81{Eoo
zJh)2IcCqE?eeeNXu$Cj#sF&!ZX_Drf0nU$)kAdb2-HW{HJOV%~2OF2Z-PjXTx4WF5
zZ}rnwnSwOP8V4@c&r;XnV{mHyu~JoTQg2e<t$tZ6Xjq!QKsVWGF2GM&ip#89eq?F0
z>zTyJlJ)+KorJ}jKvz2OzYTVwu+P}QV#zce$j-LL&Nu=z%617NP7(>9+HXh?7_F{M
zBGR;%{K$64&oj5lq$?qyQ{b{-w13DCXA>0P?oX#153CVhuiYjkV^KD)$t4K{kpH1T
z`UL@43_5tPcfZ@ks+{b_yQh&+kZ;OHCfom0KRCSE*yX}@|F1pc!em#Uw74ui`GG5v
zQwyq*2$5XP+EcB-%PkFR@+cw;1`tk5U-=E?DkeXxfD_qWCqKiHIGK`$phg3rc%hHG
zUD*8+%Cr1TE|$Gmc31gH-o9}CvPm~21ql!%9NvP46e*LuAus@bcF#H%4sj8%ldejC
zpK652z@%%!ABx@?EO(Jv$l^{?2&UWVuB}kcT<+y?4R-)qD3Q*!74GmT953TLMJTO`
z>Ps2)a3rCUAwW&5!!K7CFk9)LGz*G{`Ww_{MJjbxa2c#wBSCt~?Rx6xsd+7u9@+I&
zKjjv2znA&Lm59S{)SrB9`C0cGJv+vU|I|fIE^ad7av$W<zeV^0j}pEvB?Wo%bhC+%
z5)(KPRI+=R>C#-KDHV}isTZW%Qd$V9g4jT0xLFuxNo`$^*yDG1CcFnQofR5$nH2gh
zE;mUo^(c}>sl2>Ly&%iN!=G&WWDo`ELJ26fYXAT+nbt}Q5K&5-ZkGz|qHHN55k(%j
zPNrCimngYu=<bXBG6+euaM=~v(>x%U;yt7fIZ{9zexyH$D7-ynQRSWgTWTBxO;{IY
zODFU~4MZPFAWc(y0Tv#fA{9(KTh!0V_oU^7_#MH`XR>9<+wza+?2i+;l$7*BzJRPG
zWrWfgj+qxacJ@`q3(Fy+<IF*(7;LJ7se*X1)v+vB&*k$~;Mm9+Qey}OQ7I=4)D&p|
zmx1i<O4jpS@~~|(n;_RCaYY1{d`1^!??>P!FI9`()e>2cnP3i*O`mH?Jbuzya>e+=
zZKcPQ3{wStin@^eqp-G=I-_6wp*6l_$Y4%B{e;{nm7E#Zp@cUu6TC^#@ba$f7`B(Q
z5P(4B5T_T0hVLPE9uOgp97NrqI4DKZr~-s=q>IA&2mUnWrn1y=FhP#dH~I2M<&4OG
zr_gN1WJEeX-gJaUPH^xHMq00xSGysE#&Rzv-$_Ir>6T31^!x$v?`aWv=pAl>J1bg-
ze39axrcwz8WlJYTj(<4CfW4B-uMxmA7dA;0%EEG-NvmC87Ew-8hed!VJyHm6N4m@?
zv%vf<M5@!MM8$g0bfp`s8Jnv@8xxDrf;~4QWdOLJj5<(SZY3Qd!<yU0jUa230YQjE
zXPZxHKpov6@6<R*Pc?j73Co6)&$Aq;j0YPtlb2@n1Oo#K5eg=q^i?a9MWeIbv``Rc
z)9MDZk?00#))Zqy#ga3cy?6BGrgQy?UM8gkV4*?at6-IrzZ$Pmrcg&wJ{T&#kNcen
zlPCFq3~&l2LTQ?IScs`SN0S~6H-|gX{g_U`1m&wJA?VOD@+>1cn)E_C!FM^6nF-7c
zV<h*2v~L+zx+FQ{;KY+VsgW&j!HQ!jWtqjodIJtwwJ~e?MD%9Wl%<hk&XU*5ej*cA
z+L4E6{KF5-`=rk%pY9$sIg$lS7xV$eX;PU~rd3Hn6Dyskn*vEBs3w{;x81ZUL{}tX
zQMiar+euSkj|pZ$mZzumdc#OF?MsCs@M+mS<noywREeOQcpTF#Q|LUn|E`s>GQ<j|
zzV}&<`vg9w7oxR{BKTX7Xo)})<3WBVAX?d=*X1+F2$Nckypep2=Twe~LOBAhVQrn~
z@}^ipY~!dr6MIPn17cx)TY*iTFW++fhS~Y)_Q6FxU9Uy`o;7Ndd>W*)1XH7;td_jr
ztp<>cr2*{EF0Hf|)I0$huR(GM#kVTU?Is$nEF}~2Hb7<#(<o1$-22*bdELV|I>d6J
z;Aug5#YNm*X62AVg^abO<rmtWR+=dbq=Mp!L^Y_Z3~b#7C*OifgY2(5w4>c@yID@T
zrn@jZ0-LM%$^{B2o7p8l>rMBTHvQt-!trj+?qoMA^DE7@o0ge0Hl(oVhr53IHh3$b
z0(nyDiL>BhkdPR79r-ci<mH%xqI~*&ZlZ_M*W=;5KK;<qy+;j$2i~YuCa*Q^=-w~f
zdF=SP<L^7Rwsveyc^{w4o6kJx!k3a({9|_>KYp&yv1`ZBT{HCW_Y+K-_#5l+Ca!}E
zJ`PX*^~4nJg}MC4f6y1)CtNT=BE<l?Ex{v!OTy>KE1bX)S0mJ(yMH4bl21K->e&S+
znDOjy<1nL<ftv81a*hk<L1*1Z!Hh}E6Tk60KmEoxe)^5dYu|Ro70VCyfBMtM&p!U4
zw-z6%p8dHnn+?-y6sdU!M;IO?JN+}x?o;dGY&LKen8efH`kmLj=67DB9K7OfPd+jI
zqO~h-KKjDoiO=o(%@4nHg*Nx!Kkqyq<+DLXFR>MWEIH}UuW`yZe)^N$rO$kJ@yrc-
zN~cRtK6xXg(N3{sP@DvMr!0axZ9XAY2cd`e(r5B{2WOBG6@Qttz2<k?&Ec8V&wl3f
zXAYb>uyf^0uQ|Cn^!I({vwP~TYmQQi*9}T0&?0xLhJX3L;a~nq@@RjSy4xR``i-fN
zQK#e6Q=gmqB0*Ry<|m-!Hc_c~6tm1ClcDA(`Gn<%A8RnS_>&ZFfWuCFlejdSYD~iN
zm?&yeh$O<5LfI{Ga!wAAWsG931~Fj{ToPs=r;3xtM=@Tc*o-6>SGU&Xez1U9|Dxsb
zKO75L)QGiC{t$15QSwycExS)SJm3h-OP31A!asmi*W7Fap;T^Kje=2w*Uzswa1WvA
zRCG6tqkOEYQK1OaAU-$yT4O_do|T`^)%2j%4zyZszF?i#H}q>M9I7D#iiMJ*#`$bL
zAEtFmO{o>U!qp;B@~Tm2n9WK$Tdc!;#HNcZ2kK%T$-!nw`6hB(rc1~zt)iFVKxk)T
z<9|rH`n(73UMU;4i?!xf^qOkKUMUE&X{({;BFa~44a!3`Gt<*r(6DhQcdWJ*)Qm0>
z)I!BEiv3ivuPQA+TL-}J>vnsqwt8E9<EF)Kzw&U7e-E!9HmuDX<J(qiTWwqSJ2|7C
z^;>}bE16WkXgHMuS<qdh7SJ|l7}$+Ko1V@zORXHv$a+AX^9Hn)E(N9Mi{zWxZ0=rm
zJ0Cl0_ENo+R#R^>^QIZ+QPk2NdspT}Bdet1eJy;L37$=-vdAZu@4=PW1y^~mME1vG
zq)OBQLv~T2b^{Ah+@)e*Z73@Nl}i&xDw{g_iICPTQ||)AXabK&Qq{$}Gq4T1Qu`?@
z{0syiB*I9PLE`%(!Jxv(zB0+f5aF;cH3XOB9QbarYl%?~!%LO06^3xsr-_B-@&w53
zl3lJBypuDE{-R!U3o<R|dMH2B#GiX>p)x|z4v}_F%19NFqRVK9YKa<D8PD<4PE_)|
zld)pI@R$-cLo@Yoj@BvZqiL<}g&s|%gDm=Tf8?vD5GrBVjFdvJ(TIW^$K2pmC}cR`
zL*=D`UaFI<lk*I(R7}&TsyuXYn1dq#Z8(GMQQx4o_AU0DNt?FTUxTG|C23U7xbxkl
z1L$42LmL^A9@0)pdN-{Y_lQ5+B{%r%%15Xtn@)D=A-I&ArrtXB?x_!Byv*R^#@-r_
z#G1C4d;}0wu@kvv4Xjoo6DIZ{jzxT{5jRtgWYl>^^rr|!g9S>2W56MTqLtf>#fJDs
zp7-VMpg3{QIvj@20S0SB>RGLD2p=`HqL_qmQLjR4jgu6PT{a!aHE3~HCm0zK>H?0(
z@#-=LrE~)|A?ASOCoyk1IX$G9L^nnZ2;+TnVsS0tx)e=;pGCzQ#FD}^fTThN5{rj^
zxUFKfuC37h70l)}LSG%+AyCFDm*Bc%vdb2u8ha>Kidre8ZzlGRn!~Gv)}&eD@v^sI
z9wl=QSUP&2_7${BwggeJaX=*&jHqzvVR{J-9W`ndd`M=vb!2<ZD?z15Qfy^<b#>lL
zyP5fY9eiy{%kgvi&hH0#-IyO}q!P5YDT<dCBF2K5+p`&gH1{&-EVVf$8=U~da&I1%
zpo`{Xx@Gy`={O_hrpPL>v%a1sEwn1nAxTw%SdeIVjEsT22N@D7rD_C?XxdM!@T7YB
zI~2>GhK%12u_B1whzeN$yy-}mu7#0F{;cSq;vhvI6-yDt5S7%-;XNaSPc+BAm}9Bj
zisd8@R<Sh_k1OUv+AiUK%%uIOwGb%5Qmb3mbzw4?ACBkSsKKsL$il8`6^n%&#k!y;
z-{_PY`9{4^z4wY03^g&&1x{BTwU0J**S{4KW5}kmfzr&CJ*m`JC~}i96g1b(S23O}
z@kd7abdV-xlfL8@iiXjorncdDVI9b!l7T5-)Lry?h1d^jcna4oF>mf)7Sj_dBhkku
z7&HUjCr-GH0xMQ8V20LX`Jo6GKU5$B_PYD{C!Kb?b0mp~DsR}kS*dL9tyJ2bN~P1T
z{6nX6u-#VD6BXfqUcL94%}ad$lFe)OUR^96XtxjSKC+H=Fgc%6?nACyWTdoV;-6w2
zCi|;-VIPFzHvzM<I@j}&kisW`4p9sLKFZ~y+}*h-Yo%>>U+>^j{jRq^cOf|4>TPvT
zKL6CIpWq{?KRC<<e(~wr(!uVDJMTQ9T=rM(?#}1CTfNcAllK6aSEqdR(q97;lS(Sl
zvi-7OOAkP7Cy<!&dStN+3s@~VKfCgn>eL;o-&6;KQT(PapMB8_PTzCS=GocfS00=7
z+r`Dk+^-fIc|ME7FRKrqz5GFQuy5bAdEM6R@mc;yYx9{(={nABqjUZ%c@Q1JN>kIl
zyPTXH44f=^9G<*J<7-g=oe;-ZwgEG7EiD>w9Lug2D(|RW)mH9&{P8=dZ)r$LH0Aae
zhxKv4b0Ac1gA@*1roO-Ew{itb85GLLjuTL=afA9K!t46wCt7Rmb}m!SE817x^wJz=
z0n9ltn-x->jI~Ahkb8w+_n&F!&2S}5a))5TlDkE!34n(Yb#&wzqqh5&j31s}4kG-U
zkQ9M>;I7F#d<}@N5En_<iSH+0{=^gYGaL1XvNPVhv-O$m6FA%cIcvSAcBYPl$A;wn
z3G45E;0Wt~Ob#KnesaiNPt-Tg&`S2*+3C9X1YdnPTeRL&uiM2eg(sh|Z+_P2^1T;6
z`+y`@4E7o2(_CwdtjiI(Qb$1^U<o!!gu>6rr4oV@4usJ-!Zj$$KEd$_w9x=Jb@Cc+
zEQAW^+TA~6@HF@rM*}c<jL07q3ZFD=qwvW>;kR+M*yrt*?bjpUe^IlL_CtA9XhgFv
z1>5R}@HnMfe^II_wQ{>!9nI$RvoOV{Qs=28WBz%Nx+j&ohm^oScMAFq=Ni4<9bLUu
zSI%`hSLE_-hz$mQd%C^8Ug-9E+)D`x%bXA{inBaTvR)8s$-I)ewP=Y`ov9T@60S%1
zY{OJCNdl!>L2|ozOy=b-*buT}Jh;mH2P-K`3S_Oyp{;Ux>kx3lbOt|%t_=H)1!yv>
zBn(v|(_Y+T6a1}P^U6YMBekH+TXn#d2fS9>jg{$Cr{yUxTk2(6r~GKnKROy6siH&`
zp^QU`Xf1T>l_rj?TCv`}zoff4yZ+`kv|4X?b3LEVgumYJyy!)pzU(h-Y2a25vb$_h
z<>Owi6@M#ISTrxO1=Q6c208N*QH^t$3zK0;4xn690xTEOLJS0Mx(HfuBbypvsYDUO
zYA{7&Tk=U4D-Ss?l6))xYx3;8jKq_y6cH**y-#oX2LtMlnOYV%8<}fq7!J~D7^aMa
zeoODx%y1?&Yd>kaKs3e4fqQ}~EVveb@ocZ)&YISoV^>qo*|XieJ7<~mU>*?4n<(Vq
zs*nv4qEA)2enI^X!Nq(jy|p3%$dzrklt-|AM=kiTxu+aO<$E4=-WgI6K~>&`^H5@Z
z2tNrNnd;e>=-Jd(Dzz;YonG>YnRE7~Qv2iuyMXvbCi23P?C=XHC_|Jb83HsSG?Jt;
z=;|oh{~uRguj1$gvyFl0Qa=OueCG7I)4PbIH$%F{=kbvA9nO$4SN82o=4XUl`0vPt
zysSC}3OqJs?$7{ty&y}lh?#wBgH6DBXwn@*M*=w}g20^gjFk}Rk5xn=2OT|FA3}X<
z;?Oshucd<D4ZS;WrFhow@b|X&n0=w~qHY|_8>i(N9ykMGPqd4yH3RZOQ$4LDJLrD@
zzYOkK-<O{J+4++m>QSkB)j`APFHxpWReQMFn4GHiz^$fPT|l8&j#XJ|;4eJvh*hqK
zQA775g%pf_l3+ba(hl;H_aNk$$}$eEL#FZkraiRz|7xr;T*z-8;p%&=aULAtw{3gp
zi?1~u^>vB-{x|g%@S<no8tP0|@-ta3$nvt1RQ+g-=uXH0)iZvz>i_$Hl}DwwwY>#(
z-_~bu*xuSwUQ_jVzMQ<j=vQ~X{N<A;zx?pYlMid>?*dS1JY|Dt5+qhv^aZ0E2Ua&P
zgoWc_UdfN41{il0f4t87z9M8<KuGeI^4^=zUv=B`JukWX)}2Gg{`AVVQ#+qoJAK*l
zmNGhf`s;5#c5MGo->^^l%f^TA-M6!<d~j#D{;xZqkCjjFM0@YJ@2l&|-|rk%J^?fQ
z)^D9t!u2F4eva$DoM##GAg`FZMQk%LOmewG8UTqRyDpUyz*>v-?y+gdvgl2e@h)RM
zLLX+?%1S277(YvLbkXXIvYr56Odu_I1>$WqZ&HzxDac|+0T>FGJTiI-2r#pXH>FZg
zBKFup12V5Z_~MmWJG%9F+NfQp!GCUM?Hc+d|3>6on?Ym0bx=>Q(J9@npnnp#g_z1V
zt}*nXs(i_BKx8G*PyF5=L}4V#>(8i0?r)UTi&Mocs-<P*Gp6gEPoe$3)*sB+8Ljca
z{2Xy>wYEtKju$BN|D{qXec%Iy!c7>!@I5<i{CM!$smg(nPW#TvrBO80(!Q3i6$&`_
zxkN%UaaZ-GaXh08^V@2xZU*WaZv&Iz($aB{N--9bltP0S6NI`Qvp~-Q9MI{$L@e%5
zl09OA#a)*=$V}=wf)cq1d7-$*#5tBYvWOCj0Ku9;CUTQxfZL+vA$K&XTPA7Y%8TnW
zrQ6G5uU>P{J;Uce|Aya4<u6~{SkSe_<%N@#OK$aB{?6y?Gc)x_=`M6G8Sgu!yl<xd
z_jb=IE@U!Ie>n7;`9`C>)U7Wq^g1JspQ$Tr^_iWo7TT@jQ&~84KLxk^r$7|Ged;|*
zS9v}=&$pBvy!d4`R#((3)#s^i#-?Ozk1VXMgdG9#I9SJ{v^H8<A{#o1(19z&?K2dv
zZ$9Rd$Y`)ek*8USw+C6OVUpH#0;~bXn}ilIMZ5CpfCpAT$Tz&6@<m{9qpk&7r;EUf
zELtQ34OE;3qa9?Q9KlaKAOsa9$48vVqHYqCHez;)uW5-~U|f&0urCTLK@vM;t}^H`
zo@W~8j!^Up<~hQajQ22-UXA09B)N^oVs+x@3Q*42VrfcV<LwYYASkgl^kS3h7_uU;
zX2D%*U6Umy+q8JS<T8MX$?6z3%#kn!i}#EFl8_q3s}bu5qZs{Y%xPG+V1SUlW1xOK
zj3T5l<4qHYlo<aoT^_{}7nigURFc(jnSqStD`FAT1Ve}l5;yE1<^-r;5r5^97_o`x
z&6NFsY1L(w59pwPg$5(OE~YxMT*lC3tCUVBGZ0b6w8X5Yw|r}zQ!q<MLo|a(Vzd%H
zmYEs`7EM{vqDD6pg@~%uzz`%{%ljsG2gp>H=MmI@G|u!$yo78prkL}}-@>Oz5qHOW
z<&8HSJV1<j8d4n<55MW=1eF5cZCj5j30}iC>S}sn9al=)s+pxw>$degw3JzgxF2y0
zNo6BUU`5UgiZ=Nggg02w?153MP(jcUaAAeBXn|4c1Uw?Lwx^{euq=5)-}xroI239m
zb=xAENf3+ZABJSwm<g9Eo`Sy&yBXAutwwO}int`0NKDa#)D<_PnSq{<%K--^ks&Es
zhDl8s$Yvp!Zt)C~NTh6r7%7M>)r5;U=fOuo5P~pJk*?|u;&8Z=G8q@k8tP?A(rsv|
zMz!Zf%T@+kW>1E!5g)_GC=}|oco1bHH>>8|Lb2h`W7DU@S2&qeI^$K9QZ8TcX29!E
z-ND1rCwhkKEaeNWQ2@z?nw~E~@JU@nvim0;_FGPd?hq`N@Ryr)LN#@KzCydH1`L92
zlh7AoLD9^7hZq<dk3Bb-t5H=W`)`DhfNG@)LJ1XCy+HmNTuD@!<O?{;Odo#=F)?<|
zF&dZ9O><IRk9D#(h&dirbW&ezqyZ@s(3W}=uoGo+hyl78BQ0eCiGiW35yTXYL!Z{r
ziPKb7Q7osGFVSa*NNSeYJXh*yUo<V^^jXin;o;4#>o{?^(B-Z$4Rk#$IC*NI59-j6
zS-_ppQ-e~tP=y8&+EBzrQ3A`5WNT!p2yGM7h_ITI%~RNuxN7*u4Bm@$N>626z_@8Q
zm9ybjf*Hvo^a{}@(Psk2`Bpj=&}Wh>tyX*1sODWl_edLw!%9SxD5h2+01T9q!XbjU
zqU(hwiMuKem=NDzy@vHB<Hj&R4=lcFet6Ua#Rn9ZAz8?_>OFaz;9o91AbOQ1Ub^#<
zbfIWh^;8xI2=Qw-ihzx!%sdfX!_RF-+!PDu7&8DB23RVe@lycAtPqMNy95+>1~Okg
z_0>!pVk)9(I+QepoJ{Ge*PG8l5Le1#k}F1-)k`^L9(ookR1uLSG%D1H03(Q<%LVbz
zwyL!-H@9Tc2{8dkmjvM@XaiPzt%?sfr&;M*YuP!*@K9&dAkj*yW@XF=4X5v>v$^FV
zbjTT!rt}~UHi3l%M>(Emp<-i7tdb~XYAg7spw4FO2`u0&lIo<K9p)R*3*ZeSs<6T4
z=`j7>6ftGTI>e?<{dzV73Z~?Nl$qRTJbw(QOgYj03&_cPkdrT*dOeySyMDVPTOd#=
zBA^K-hrJlh8(9PB63{4{<2Df&f}et(5%qo8Mtn*tHT!T<4nrg$BxWG+*8u>L**n=U
zgHUi&vYm$mNjBm<m=+r3Xr}D)=oyBx^Xp6p-MY^Pj%Uq~l%}bj`x%ZDgk)BuA%P68
znvpMOvg4+J2u$T{GHLW>Zypk1&1z%{6-a%3MSDQvBHVT}8`5eqbGxbiCQSci2(r>h
zXtPa*!gi-|j~4YN)l=(CGBf`?l2)MB&46&I6(x>s<c=S6i=Z0F{h^QPR3#6`Am|qi
zHTLjSaJad!83J*u>Sgc-cr(rN{#c=AvI5<ag#Hy}CS~Jjvun?#vr|-Ql6v5uOl*gr
zo%)tiR<2WiUimA0egpMl^}F1niq_T^G@_|KLnB}>5u@EjeO*$R5H#Edkxgd2yoh50
zV#pP4j>Mi5KARYIfKg9uC}eZd0%Qke$cCWk<fe9rUL*u^5J@(qXiOv|IEkcP4X7zY
z(lGk39HOqQ<7!?<^dp6l+XFdaoZM}h4P;Fvf)#vLhcB)ax$FF3Ya<cyghO66G3MwQ
z;(5e}tI`E2vcwDCts{+@B&g@=5c7^7t}vM~fYz|cNzB5Xt`;TBlD9_@mnP0aE~A5z
zL*E$(PB{klCGSbbuhkU*Ak9*(1f5=nVwR~V^n8)oM@D0-F#@Psabjt9g`BS#(jjY^
zk0vO=HECOhWYR9&3ox@XqB4mY<nf5i2(A#w88?SKb`}H!jz<CIVMIJBUPjLw&=F9A
zWTJ8L43<R>T9>-D+=o~Q1XoD$=6;C6EX$5y5y}v13nRtZ<jZ`Odp!#9F446?@=du+
zZf4B&OxmMA460myS5zDZlB#sj>0vAL<+;bWHx#81w4x|3F=$8XDXfjj5^t!qBAsK5
zU_}&~Q4^s1y2+3Vcn^K9!)ZnXQx02OM^9sDW7GP}uOMoiJMU7paBB~fNOS+lbZ))1
zX=~|>(rS@5z6kLnXfL7xz``Uq6;*^BI;51S4{VjjGKvhvYpJV*{6}npc2(3*OwR~j
zOpCj@>qH>v&slrx)hTsA=IU(Bb~bl2fezVwQ&o0H(9s-{%TV5dlEu7_Fiwf*gO-do
zM>$2@9JHtSA2(Aj1+KBbh=`OsDN4CeFh`E%-`pZZKX(x5l4yt)A|=rj9O@7tuQdQr
ziD*T%2ZkeZ3M(#I)+EW!B`7gzgDqX)Hi$lP(W{V^@(Mx2xrr|DrWVpGPAEtY^-lTQ
zmfmnYLxLSE*9BUO{adzZ#pv)f(d;y<kTrA&J2}7%+^pg-UJ~_ymQ*g4rUv|FKSa1H
zg&K|_k2qlR2@lY)b5@OlYT&>=YEMgN|4;eHg%j4m_@tX3Q?9+^Dg-%bCRcOSyQ%mH
zNEx_+P^&v>)FNHG64w$-{wsp|`_xMqq?f)78M(2kWV)@IIK}_6O8n~qt+;0lV8}4O
zxo6BNE@OD8<wxp_QY9?Is54j8%pn3UgvYHa?{iDb%o8a-#=TRNqZc!phqk_HbmdmZ
zjkE7mv;!BL=81zRsME`cCQ7fOyqIU`+XTlDN=0tmu@&x&0SBhcEHxyH6Okjj12?3B
zk}mHm%qh89TwBAU(k}`afIrkCuughZ4?1T!Mt3Cvh~qt6t!bg+)BAFN37rk_NC|U3
zXJQIV3bpiF;9zLD$qPW6GxB7K@Sr+P+w#4bxuzdU4nVU@<~}YljzShPd+8CAS0*;!
zk(e3tYWRHCt3=Q6C{mVM&LAJ78Jc#}^zN0GiR80xSc@jDz-7jJ8#H6&Ff^oJ@`arz
zjXN<KY=M}u{?w+bHpwwa4OC+6z#D;Sm1RX#vL)oF-qVZ$I0&<9K1q$@J6OUNH<N}y
z1*Y)ePfcBi4|sroEC$DO-_*;<d3!gN!M;iDKrl_prgB2LM!8uzue@G)m-0d7OW68Y
zvFn3kG#JMyFk}b<`w*zcC=$YjF`K<Pg4iHt2L$%TE=aw}BxbxwYkalHmONy$7j(M_
zs}V-B6_V{U3dQoY#J<PxWWjrkWohxl7l`!`NLi1OE$eGIqA)Iz(?x5rB3@0Zig6Az
z8pXqbbO2E>#*e^WoIIia$Lct=Mgt2p8r=kbWOmt`v6<y`$REywNCUJyAghn2u;`b^
z!Jummx?%>eFC&W(dMI{@3Zc)cc+!A0#R#*Ym}F0H3rz+P>W;NR9X@<Hyx=fcL7{@+
zK%vZ_4xzZ)#9b@>9}PNY7za`ExrIMsNQW6i3jC-LM3}*t3!6jq<Fr_df@RnhRa)&J
z=Y}Mtqd@F_mrGs;FrN6~Mlq5$Id#Cr4dns>*hs_52F4LMXXd_afJ{~}gs_WXI>7tV
z<2|ehEMJ19iS{U)CR31UjgHQ;Mrr4z!~C&hH{-%9Pa8~btSw?S8OQj?YI|>q;>cBd
zX=&%Xph%rOadWYcnUJyyn0;(dgjs<*CBj4!b?C_ik;vplNT7R*`7KU+j2XCh(Ov;_
zVv$ui{Vd1RAVN+Sr9=UC{wjqjVL+_trOA~e2C~PCE@H|{HZ-N$Xb$lsN6PX6%xEij
zY<kdf9rxDy-Y21%HqCT77uHRy9+2JG&1O$nv)23q0@|ECZYx&144_#|WSVfZUG^4|
za1znPo0{?8Vk=bVRV${r18kl5W%CrYfE(Ip%z#OAv6!kjG5H7L_>0^D#v_FX9n*$u
z;8JNF>yLauLn(k5HN?JVx1eYTwjZ3-GRSNzJaD{xC%JODJeIo*j)&V3jy$#~HV_WC
zOZu=HuBi4YTfNk5w~X6K6LJzfqn=`Oq~9dr(1YYMfUagl+m_oRJe5SnITJ7F9D4=*
z<$fSp<;E}<M3v{Ba|8$A>_{xQ96Q~4sUnTAkRCd%Y~69a9JL)8bu2@U-Q<0)LN-!d
zx`A`j4zj_fTL^-J8`SH;sT%(r(AEAyYcQ~`B<l(`Q<*iGo|tcZH8%7PW(HYLynUH-
zr8ST8<6P?Ku|0d2lA|0A{uMh9TvK|F$->teby`Yt*C)PLXQ~WlDe=IL62b!^N)qhK
zGou4OiYT6Kalfv!!Jv<ZWAV_+FVO;V$u*Sw2w34im@ZT*g`IcF<MX4^@=`gvW1j;8
zb$h+ldScM7H(CR`{?Cqm)UluYp$kVU&n;AT{{7;7;}`39H`2~a(c$WY#^C<P@4N4D
zAMk<j0e^~oWXT(E<Hx@Q29+tIaZpx8g23ZJb~pABdA*us-k_B79F!kM4!c9bl}$I%
z$2|;8v`w^8P^s#Wy+)b(`q#fc4*d<?ESuQ?)@L={%GfhyR&}RVKF~PvmBVdRH?#$-
z6gU<_y(U0xSTwav+cO7Fb-fsD%_>vh<0tp+Z+}~PFD=5pM}t<jn5y8S(^BT3;%I}Q
zXg4l-g!X8T_9EJY(s{Q%d~FmA>O0jDU@PV2(ws6yd&w9~IqECn_tlBwtTF~SF$N(X
zL$+~oDw<YIt_XDZDDk}NO56eceFX4GvR4=kemEZOUCQkUT7d6F<4AT}D;_70@`e-u
z5^N(*yI<0SY3~aGkqFaDm7sIE`ZnbSzxe{!d5BmlZZ2EB{Hn*!7~W+Ur3%JBWg1)%
zh(X1@X0=CI_M(2j9;nM-y+;oYZJp5b?Lfa*_w^0Dc{OLz-Ci>CMV6jsE}G4iJ@Fnl
zOy#tu=gyNIm(>ajtG%IbW%MA6tK>`2MPz#IsFX>~8}}RYjRk6ax%CC}@mz6Uf0;So
zhyl-dIvMNWRn%7~FD2$vgAed(ScslG_4w5Lr~aJPI7=x0O63;i<;uI2-%_4b{#LzO
zy+OTA{W0~`>YLSffZIz3lOpxZc_boYk#`b<u(PrpgG7*_#gGjVk=Sl)F@KP~i4838
zAzOGU-)5y?T?5D4)-@5XNw{+y#WLJP%Q1qPmaHh5i?q1T-HFEB7mQ={2at)dT8on$
z0}kRsZp=`EnxPdeGue3`uppc&O>QJIjqKbGVq21j5$+s-+Z~|Um<54CLMV$_A)feA
zL?D93FqYvx;H*3)q{6!3q%fqdvnmKyu|P28#G=GF>spZv3ef>^#b6%;D_kEi4&j(u
ze5S0sF^=sdK*0qhmw_;Y?S-So2o%>fh{e$gao;*TCqmk}vMygkyaO2`P#dE!g?JpS
zFdAdz6Ez<oO0o*#eT;#~T4suaz{3P>a0V_OYzT+OqN`-p#K|7+10e~<QjC5R$XyK7
zEg?5t#|?oKU_3-68CYZHy2LK1vX0t@TS0;ftP5_8e8wZcGQuEyO^Z7fiJ8toa@!<G
z7+X-9@WE&to1|Ie+vb^NTEg}jk6DZjtsmj~ryWXS#n7oTArcjc1()1tL)4yRw_*y>
z1|!DZC-OY_e_c0~azo_?{i3;BuNDRP+UG28AdQq?kZ_vn*uxjRALp=057t^PO--?o
zl#FyOJbuxUN9L8<eIvy#A3FYmSpW{yRxr#Q2|r#r?Sjff^^inS#FY3`O;M~_5_xQB
zR38oQckCd%kV+(?4Td2_%p7EgWNjevuqJR=(iuKZEJ13;@)ni@hv0t{aV!1eIe!)M
zn^16gH;1bm?4C#=IUfOr06&<Q!9t}lv=}I)5zi66P>Xc9fa(Rr87;>zU|&&)O+3aL
zCD1Z1_Krzq03`h)O`+2h@Jvhru`<LC!E-PA9LE8UW@8~|6(hr@tg<AXAbb-un_lsu
zyuf@W!2^LVDI(|@hE`{2z*>l2Li6ZX*d;o^6#RDsC421B{-FawN3yy|?ZxL$z}1cR
z8syK^8+k8%Goyxb2A(iqAtOSs;!gxOL6hxXEnVvwvkk4IQsLat3IU-LXc*M3Ohh?k
zr4TmydinY*4;@^%WG>pdM=F%Q$)%dQTRrgn<3pf`^C#~=xVfs>-dM?ku9RDmGE@7x
zb=ZYEMJ2gC=bT*DcAAGht30ilr>QT0v1`D_X@8Uw^HmbPfA;<}_*Dc!Zl!Xyl#(u%
zscsO=I94{Q75!Rs<>HIZ-sP!Id3Dg(`5K9I8MA0v+FNX+S~o9#9p_-^nR}x6piCqq
z&pQMYa2w#1mLz4s*Qj9}2x&2DhuTm9EovH`bM6-7Eq6gQVTLd<5kXF(6rw4id2u<S
z(1@a&oC{nf3ZG0IZXx7QioTHOc9Kg@$tW1Usgwej7}X*OW{GZ^r?@I*TG^=`xsxzJ
z5qLPQXk$>toFH2V$tm|2dW|20jo4KoJST5n5$}o^zC6+y^!-F9y*ArtzKH8aPd6+A
zF1XME*r${m@FAla$}(b-a6Ag43_(sbN}^g^B*+h2on;KL4~VuAcEiDr(Zir*k&MhD
z%nfVlU{&dF9SE4G^(~Zk)?Rv!Ih@P%oLQsJHJ38Y)ZTQVO8U6vml$9cW20TRZ<@=H
z{&3jXD-%^9C8j>6^5&eWS1CPy+R6EW6H`fase2nem>%RwX@8`-y0y1Tp|$DL`=?3S
zRJ;!moXDn13d<cAzM9FD2*uES@#TZBQD@M*EXjH4yGmSzC)c3B6;tUyeev_HZ+&sx
z+By1@-)jHSgRye!&ifSQojdQj`EEtsd7g6P9}1?WGNpd+lj;HGb4iu6)u~fccTC*_
zm-uU@eroEY<YoNf)L%^f_o?r4f78n4*w!ys{!;l@CQ3$KR^jqx6CRE+@uHahclVh!
zv4JrJg<=aA=5BE^+?6DC!?KTt%DZAHN>vx0qq|Q2#)8p+0+ZrelOu3*@(H!jl7o<!
zlaH<9oZ5kCkB=?3^2xyo*Vp6=bC|48okiYKpLLd}KLhcyTaN8Q)8BVy@se}y@ooo)
zlT)q9_mVC_#fr$`+V|n<L0Ta(y2w$q25}jP=mj_+;)=+*XnRPLiMT@YE>h${u?EN?
zaVzwt45*&efDuhajCj<I4l!+HIY%Laa4ZPS0)=5)6&2&DPf%<43Xv7m8V=q)9BIun
zWSU2bm65o!$CRw&UGemb$i#rBEqTuQ#&U{v<UF2&XN?`j>f~NNb)|q8CfB@AoeXSe
zOI@SpQ(al%wgkI(Kn*7ILdNFbRIF*@rK-6hyS8A`&08tf#6Qe6lGM~w1Top|fvC8Y
zaH%0^$hVXnWX;Qy18cBXvMCX~7AuLpfekk87+3Obf~df>t?!Uall=D)RJjvy$!D`}
z5G=B9AWm@cA$GDk<o7MSFYl?P6#xD}I%R5f@0$w?*4CbKIos;owz@Fwxr8I5@@xb}
zF(}2rDP^)=ZKZi&Tq@;Som+=<v-lQ?FP3M>gPJ}*biKmPZ_q=`KvkWci>k1z7ON2X
zEnZVEDT5&FFGn>pru+);EnGvs#T6mjZMxUUQ;q>oF|@X==>p7XTzEEBF1MP6JdR5v
zTbORiMo!wSv9_UKw1HoYZHj%f*URUmMoqq0E|Wb@ZltDV^Sz$wuqRvAJpjaoAyO@>
zX}L`HA4{!0^^E(#h!LvAS)D{`bA-}%5Bruy%}g2E-M=H9Qt;EBM-GbFLl}siTo6gH
zDPD0+3M3c(5_OX?x%QGDhWnG)*j~&fIQREzv-MR?8;R6c^>x|5_sdxoHgvVRPuiXK
z)_Uo5&n;K+)&gdRHVG-=T5i4Vr3n7>Mr6B<;ck~+kzZb3%3VKKJ9boe_U%VpC{7hR
z+d{>|jp3cz*4(gHY^-KE<l>8UXB*6-X3G(AqjvdT{ZUL|KQHAmUA;pYOgP$=?fpBW
z_==SA^y~MOV%?1VDnV|az%Yb$Au2;12acPf#GY1ZO0=?8)t!J*G^m(6x3G{a7D)jJ
zY`s!POg5?<R_7Mg%N!N3i<*U-l{L>>BYoL*SCuPwuZW`1$!IGk8$JK_$%9BdwR-#R
zjS!qaG_K0uQ2$uP<|YvnWS*ksu`%MVviX6XuYKT~=T9^)n-o8m0?2RqCs6V7J@tFv
zK=FGYHdhu5?bNtU(035`1*j;y5pF+K*}He=uQF9r`GdSav-7=cc)ImB4_tg_-aS`s
zU95a6=l;v*XiEiW^+^`t?~$`Z@p7zt3%{Qf8E3Bp2JQ<~8sxFDt-NcsQP-Vc2UYS?
zJ$sv()4z?4{%elm#6dIdIOVU5etNI%+5cuMUjqx-;A!E+?6Kj+o5wkiBC;*Pj)ElZ
zdjN6SRPiBVx>0(3EKw>ceZwAxTNhWs(@(Jh19S3jVh%RZ93N%MrfyF8X2bOF!pp6g
zcM(DlmhnVo*U*a8YJ)`BIdE9+bd}XIhU&oHC=m0_-+7CnXD9%ndiUO$Vj~5&ryDmy
z7IO$ETdK7QXu*CZD>!}n7&xBjVabl#t`eilY+4z^lHxxS`<?i6qz-8|sU_MaD|HA5
z{NAZUyB?FPVZ5Be&|Ak6668}iu;O)4+B^@CF2s@{E06K)^hr-8p&{-EF^0=H)_51F
z7xYLF`BFEM3Y1tkpq%6dPMCEPK4K#C5$!6S=A{pUyB_aZp#G-&=$<`~UUzBh;GRcQ
zsYiEy`*iDiB5<|Vb=m8hw=c9#zNvlbmrgZ#)oNY3)LeLb`<}b^jOShV#jVrr>vGCX
z&6DSw&GQe^2w(q|)B>%hPLez`UP!qMrBlu8v)3=4YVp|I`AqB5i)r!p%UajvuD_mV
zcel<jwHDqn9zW{3kIuF(<J1fl^Xt3c`ws-&e|M@2Rv&wxoGTGkQlL1%N=9l@-OMuK
z%|$o!U=EbGSTDFx5{V0C{up?Fh|1;Vr+b_Gu3jDwS*NRjFESBfRKM+&^5ojx?Xim)
znL={R%F0D(g+n=}G@RK8IzgU@+udGIx5LU}xug_Jm6Db=??d;3x75#pze*LWfoC7I
zm7|k`%EhQup@sW68{8emf}U^Im5g%$zCO{<rrxGLI`t2%Mr*g8>>N1>Yt+CKj_YIM
zGlP@M>WdS8$Rd)cHln=GD_Guu@+EJvWW_jDDF|u}M=LzYY!Sq4@>jlV4N=HYLdO3P
z?hSYT^eX+#uO1G&x6ceo`GQvN==SvX&Po0HFH&DVcu|nEyam#xbo~pbjPLS=pEs^M
ze*C1PpZV@a{MPA>u(Ibh;Z6CB_4Y=iU=|u<Lm^FeeG_Q3SuNvM!iF82W~0HcFfE;0
zUvD%To+bBEnJSUr_qTBMQvVkqA`S+^6ZkpEwL|4uq2eA4Kg1b^L{U~6RLrwLA}pKK
z@caJ=<y>|3fs0k8rI6;LDt97S73IhgrTJ#%>{ZIOH$JqfybQHQ0YpM7^G{F*_*5xU
z&Mgz2+xOC>hCvc9Y9%AQ4}aVl@yPXI$Yn6QiIUbW;wS}U0JuU*P)J(#FpxUgIC54a
zQbFVmR*f-Sgc@-Yz1j7vN^&>@KBjmDHMHZ2m(?1oCr10D@GDRrmpbZIU3WIKe_dT!
zxo2~n9<DlOBcOWBJNG;khTA*oC4KPfHkqtB@3VXMjQ8BUvS)R5&l{`LiwlEFWqNUO
z@C#&Kr2S4*NaxzQem7;G{P;|z6yz`j%h^j;a;4IouN-MLo5RL@t<(JF>BWmKn(s8$
zR_pcQP{uzb*XQfX?=k)^yM77OdT(l$YV{*#+(Gi;FC&-Y4O4HK`iUeP`<JJFm0FCy
zo#X>ZrShZ>nStvH|42;ggt&QdtHeAE*mdOjk9Y)83wJf6Dwt9>>f}Hm7I>*e>mNn9
zk`n(NuW?u7i4%B5;@@W4;tK-@G8Aw&a9jzMjnQs@#Mz2yqVx@cuuhL&{fSp8ue$LA
z5m_5=)WGFwKxR6BgCAFL&8QYID0D4r-PAjVxngKNO<&YBBBYC|x@N9uV{MPwfrMx8
ze%(B#{yPBeY{#C9sCVx|_o2*f&*n0jTw62S5y2ufB6IPwgO2S`fY79MrH*oBI3vU8
z8pg7r_cUWs*QT}Ak)=>kO{G=keXsuQSGB?q-cWJfJrojc>*mPsKQ1I5=u}mRXwYbT
zfWLLx&?z6&OG+I~L%nF)_?$r^?IB)7O<y?UZrE>V$DR37*;%SLQSQ<J!4!3Ceov`v
zYD-ZY%t0#UrM8E7j-;%&R(q=bx}kRs4aN0B`?j&3_GWE>8wX5Dw?V@wB7dKUZCPX1
zOetL=4w4l%oIK#GoK)75KwjrUqG535>cy+8-7dcvgsa^Tb|H%2IJ&xebX5tyH^uvW
zd~`LMj^vOMhsbB_hZp3d$i^n|-KD7m%+DmF>6wuZs7%Ea!Lj<o|DtqYQ{jn>h4fg|
zg7L0-r@TIDx1*g8%i~`+8kZ#hPc$0JA-ok<N?-oyDttIR-}u5N@4oNCvC8SFedcqX
z_qnY7XW8tZWy9q8!fUhH*Jl4G-+<^7GEiwic`SKT#!m7vC-OdveSPYOT*umgkR8?+
zLTi;NF7Dnj<<js{b}_Tq^<_)4u+@MljoIS)G!hpto|<>&OQrnI+vM?e)har>n|@-D
zEfB*2G+<R4owRc})hcExh4x9O6#?YV+6xd5fDNJ=7ZE(GpuF!w3(E8JrTg-kOy0#q
z^VK!00pfMNJSd=TO!qDWPV3pP?A_=_VXoY|vq!uYxLw67Q(AN~M+DRMZRSW`;`4n;
zo!F;hssetOxDTeErTiV$U(sbhRQnUtJo$@*4}9s;OE3MRnKMtI-+rk6pLr(lKEk`A
zTTZ2jq1=y7bVk|}bfHL#u{h|3lnqQ&j7J;Cx4b5rVj}xxaA1P~2GyWq3MfOtQDN|s
zxt&DDlB`Q*sNPFrve#|GqF_ZUa|<gur8phO(?MZnZhpmAax=YJO>@h&W-e7&UoX!T
z>sc@KQ3Xi2a}nh`e_ikND@vuGX%t^l*h}&3RIQlLEr))tKuknw9>7j%DGPqS5G+wl
zd#|C*F9^h8b$Q_`rQ9sDW9OBt7M54BSEi#%zhCicf@|=;x5GI86nTp0ryiJkWa`PO
zFM|(k5e*rk)?A`otvpA$hw%_D3mFobAfjZ8;*&g#aD||Liz+n0!;t)paB}m@BmR3>
z^B9mQiN^_~oiGE*<s$0j5ONek92b)xIR#+~s`n*seN&bcYe|#!B=Px%#(9#HC2#~@
z@NV*pcSD|Zx}fw1)_`N#FQlTGJd<Cd83QYs`2Y&maeyEma7QGKiO>~)#(>-aycxT{
z%c1aU@XCrp0wHGd4e@ozFOCdT-i!uJh4BbrhD?j3pE5F*DRg-QnwJaUjPcs!><wyu
zk>;8NN>{ml290lVEV||dhX^$Ffo!1ps7rmXTCVk!Uaefq^kFdbwIHi|1uqM}EeljB
z1*sZNaMK5_L&Z0V_G7Q%aWF&bAd`^}93LJr@LnFZJAA<&u*p-!9m|}bu*6#HN9nnx
zjlNl5?3p#>ikh3*I$Y86A#w%l9ebt7_lvp%-5N!3S;geTGmBL#YeJ%HfoUUc0RFC&
zP83rG4d0`lU8z)8dXE{9ahh&a)5?dpX0lqAPyq~Z#1V8%boLJL!PNTAlXy=a05JsI
zEaa3Ew{~&&;@{x=<L-*8EY7_UAGE34ftR|Inv=OUMt*Lg-(Reo{l(hLiUXzZ`_sAF
z@$O28|7S9!><>JOVuy_`2?_z|jjZ!$ss3tU*Xlhja0s9WTCZNSgVjDY4_bK#ZqRhf
z5xfwvJ;3-TglD*W@ZCa))ohZ?kobMsI1B>iHstc)aXABpfcPqCFg5BBTj<9(MN4y;
z($cKbOqCl}yV#|$B}O0m0RP4PiyDmd#Xll02@nqoP<L@p3zmT=7C;674V*>zS<fp`
z$}JF0$WWaEKQ|5Kvb9dJZ8ge(@v;)a;9%}EE@_doAPx}6z#Q<C10vT13Tfke)<NK#
zTG<@*yy^Z&^<ux}Deg?~ygi%CXDuW4qs*J4%-murGxvAYTENHaIk=f$ri9HF^%R?}
zz+bR)v$;ib3Ub$`dNXM?(~OJA>Z$MT5PyFq*@Nrs69KRq$$}O4p(wiI6O_br!hn+W
zB(i(#5%v;aqHK}MRc8YH^11L}+741q(~cl+n;jj0sWG10eBpjQXmtF0-+%J#(fOZO
zmW&&y0z!@FVzzTaw=4BZz7ZO==FCN9u+c`k?9W`gckgtCeo*V%K@NTgzk`P7Aw>m)
zJUNFIDvC|PKi%y|MDjFD+a`vWA9a@$*fj_OEGe~9=Jm>}tk?a_Oa9{e%v-iD_pbZK
z8?L#|RCfNW`ij>py~odiV!iuSkG<yYpZGQ-{O*I-I6L1}Ui09+g~77-_WaIY|G`<t
zBw$bd5Pk|@&etdA&c#o(+C+I-4GjihmxMt1;F-O)d5dZ9J@e47JhbzVwdtAK+;Hw+
zw(j-MN#&n&{=HjQJoL~Nm9A}fE3JN?Jo<m1YN#(&Zku}E)I%WY$t)9JFTq-1+v1K5
zQC``jCJ-vwvtg&#Mb%AM>e;enzmdI1ZVfjAn`0!g>BKS-v^NLvZQ0Ue1R#|iq&^|~
z0C?<f2ioMs%YNa0vdf#RYaQiJmFowEyq@tp%gvNBu9oqQ;-6cCt2>v6+$~xm87WuF
zm2mwnI{iUmGzwC)11Ia3QY0{A1`;-biN?-WlrYmPLLFmPdf~8|hLECiqIY;W%<ntC
zx!5bf0_g#n0GXO~t+a(x)q+~=S|t;vHo?(a@TZg@c+P@0l!OeNuuiF^SD<sRHBzmm
zP;-t9f`Xa$7l>0POmng%3BW`?r4bd^TMh~pf}_)Uzt`Pf4q?l{XS-IB;#ly=6>=ma
z3t>bmR~N^D=#Uq3nuYUAc*(Zm#(yfixkr>+M1dt!K3N$u?%c41pbTMB+?5oF5s5p;
z$P*z{M<|JaKt%3lLJvu<D0^1)zq|rF8d2PAKQmW~<I-Fv_XijY<;cqP`}(4OW-eM<
zRsD*+sP~I~ZFMP{yHLVmUs#b=GGFjB)c;K$wAK1_^``1{ebt+LXGR*SghzU7%F<GC
zCi1+Zafh<jv%|oPW`bq0Z*|tzBg)UQs$#rIM_~YX9#%F+D+)OU0EQ@-BLp=%GkW2o
zz206Y_mD+EX5qGx#2f^&j?YNwhy;gcTBrq4z=VXRMtm*nG{F0Jw(Ul@-1fYiPki}$
z(=KM(5HVHQA^aw!3#M`|zTt{%``KV+ezp@YM1lQfx7DjGmD_FHE4afPm<cc28)Uk$
z#^;!m*`AW~^N+veErwmG-1%G(qkl84&wn+K#L9t6A)=frx&g{kBmZZno}FvIyfR&D
zhJ~zO4(pv)kiryqhF$x}&8U@5$uC3%Y89_u%-6{bCS9zQZx-_n527?uzC=&e*cV%B
zU%4gOACIvcn1F7!O=iJ>%M{g#RARJ7DZRQn>_uIakufjzep_qzSbCyQ02YY{%IC#>
zjRfG42WzRJdp^csHMCxtsq||b@wLsh+8X(@pK0{Zb?{uLD37%BkIIvWcdk|522_w-
zAXE42%H^*;_C<tE67!eHM)D6MP_+x|B)??p{(SC#DWx0pUBTbt&2oNj=Tq-dDaHeN
zDoHM34d$1LtudMRmrq?g1ww`}lIVv5Tu7$xl2pG=U<@V~ApxkxgtwL*W*CVoDCyC1
zv6|IkJ)mR4SjEnSUwAYz`Br@{UYZ=C-6h%*3!;OCwR<AAHn`Jp=<p{b!Xz;z`Po*L
zH|FZSNCOj7;8F#c$AuCDP9so(Z%WeQl1g3;i8XpEg58pIC6dUH%Na>qBk19fZ->M+
z3vLx+@EejPcn}0a*hEmY3etv|MS$ap7r0i<hu6?zMMCByIe8FQrHV@x+v=dHTaJFG
zo-g7BBX~`E6u7_yN03gD)CgGHvT`+dy{$SW$cV@?aFj@rt{~^uj7sblT`sujrK>qK
zlYH_2NoaF+ewWm3Ussn}m1=H*;1zyBmDEW`C7Q1LL8-F>_=6HZR)!Kms*#4pNO35L
zqD^V|W_}mh=&)14sVzgsKEn_)`PlQx!|gC1<=%yS#*m99&mx8ISYSlR2@FSJy^=e*
z+R(qzx6@tfD>&ANDQVHT5;oi%X{R=9u>eYxyB%+dR_9X=bz3@tT5BA<-LVUMSH>4z
zG+x<TaPKbknpv-07))QX*k8zbMZed3*j+83_(h-E7Lq%ahDS;H^HP5=>Fs;wXZGeg
zi--Eh-|PG8>gnz6)2prj-0!J={m7NfONagVQ|Kh0hI#Q~JWW^QWBR43UxV%M<IGX1
zh-RYgQ*9&>aI8Wsgk4ED0RAKMXMoKc@q|bD88J!4G~r=e#3HYlZfwuvkXN)NU*ef$
zEQh2Wcd>i;5(7t)ix?JWkj#IP&C(d}@uk&m(u~w@=r5|4%;*sZ3c`9~NRX*Lh?L(8
z8q^edNwXi9P#y^ZwbpbiM*&q-17{HGSC@6Kzef#opejmk&JSztwV65QW~$PL!|8mx
zkG8&~{&p^eb~u&&gNmv(;eUGLO0TLOevVo!?%iVrU@bBwC*!UiSZ;R=kF6CAKUMU#
zTG%;!fJ7D#Iv1C;0wz9T!=`Wd^jw`(KWMLd$1FS0s3TVQ(C^K;-r!?j%hXDN)i>rU
z$H+?4YfFL7&8^#dHrE{NU7aT@&`}3CzDgSvPz7Oin@VOa%j>P=XVaOxRk)_>^|`w$
zL=+3f^v^4~g6|jX-)*hW#Bl+d0^KcUBT`~1epMy-ciGLVdE&BqQ}tTRk&TVHLVS|4
zbJ<0}M@d8!7gx$xJd=z-r_k^tgQS<C;=i>Tr<6>gNU5QO=VjM#k|xqMBbA){q!|k4
zm6;#oq2-n$&eYEMnO>nbJNFtmJkSM;+MJT#&_-xeBxCnn-!U$~99AH8^^!|+J_#D0
z@%j1Y&Yv{r=bOrGbN=}&*mSv?|8jpZs-}VF=<Bb~`lfQZlS>^wmd5dywe(j%ef<1C
zT|~z0G&#!|>HvX?fQwJoa+-dB1V3v)ROcdkjSGqZh43N~iAb1|_#5N9|AF_T{)NNj
z!&v#yXF*ea*0PrV|Ju$x%#pLc^Lk(1XX{p<YV|!mGwN%myX_f!JhsQi2HT8}*v8{v
zm!#@eO-m}ds?^;Y18ZZ0!Qn6lVs1=AI1-x#NP-P{5+{b;BrI975FQ{QVUx`+&+aC9
zLO8;PwD<Ft)Z;OR{bTpZ9MY>&sgAdP@9+2h-S`6^V)zj6i$VVUl<j+uo!_j!y;74>
zqfNY&SGxZSzSsG@6)7uTcbgDwKI8SC5u*1>q$<`2@jvk=D(kTFNbOtP)RYqsN?064
z9Ndx`tHfwfon@K8$yFYLD!(qCNe>OB-}%nH`wk7I4~@*66qnw9=(5Aw!-v|Z#eGBR
zy|1N*4vB*&Po{_Vp22YPi{iEu<rDXbH)^Nb%$W!NcR#iNhCRE)n~?Q5bua*Q!Gn>b
zubUY4XJ7zID3dIJP+41DR-S{U1*#KZV+ycL)nZ>;Kj!0cOPHWahXe0`l2?ifUI(TU
zK?V5N-CVmBq+eGQD3M4`v;xI~ELbA5qmyHl-~c$}BAF4~y%eL4QfD21aW)njU(3?u
zj##-!AwdCUm2yCFo#0Te<iA`D1SxDsC6@>hcQTqFm|-AF<=z9=czt0KU8MJbAV*XP
z6EQ<vIxQGt*}Z2+mq|JzcqtT%k7PnP%@K+OdnJOgAw0(3Om^VVLNZRUIs#J!G6xET
zK%v_YBZ|l{iVj59b}r8p^C?xmJM-7bOGH%C&$A3NpFcvL%;QVydLCj%5g1GZu^dWH
ztSVu?%EY<~VDE$4?i%Ek0-~ZrR89>4RDg2HMGGK-{7QgYJP0DJYfN%}J*zq^&?^XO
z!Z!r4Oa>Peke(yGgj$6`*4{OxcNs5FE{~^j#j*LZ1o*X(U{K7Z#+Tm_1gBw7PF|S`
zPve)5Mvw3P%OwdS8>7?V)RhCdH1+EJZc%yQW4JhV!wpkJc0~e&ka($25Q_|?DP14V
zAI^u<FF70<D-_1O!!hxG0_`q}&^5D|%@&K<xH@TEjk3k@Y%X%qt7ECLv9V;*mwCyV
z>!XQ8;@*v-Zy+@`6v`wg)AONZo|1q<%nZfjL&TJkL=jKNLi1@lG^ysogtvtk=Mxy_
z_!k&Ogi~|m$Ity0IZ2O0%>!_(tB7QNBi@uxd;Ws@m3grwuET<EBHO3d$QpGMgK##j
ztq_H(a%h=)^is%~f2iw$1&O#ifj12K1gpdIQIvl2VOG~v4lRj2s__8oB8E?uV>C-I
zQA#AO5ZOwnon?Y{kB}9tmZ{oF_1<x_aR@ykR7s_&f^o6T^{fHC*q>FhVIcw->*|uq
zc;Ynbd<1S4j<eR*mem<iTF;;J=<;NaicI7{9qP3?B_UU#7L_I&<OE8lPI87N0{T@(
zIe$5J!98g|+-R0wspqeUDL}xJAWW=s0mV*b%Blt*dD!{d6bDuryflT_ziiTt`FP=F
z)8vp|Wre994U55tRh<irZT}b;prefVzJ4+?yEYz~nlB%i3{4#y504@six*7}9UGWj
z3?&o9tVY7VsjDuU{MUa@Q4u4ke2n2zT2+B(0fq*0rG$zyBqApe$PWbL7;~f3JX`)<
z6pSXg*<dmbKqcZbIm0raq%UMhb-_}bFp#D2z=YNKv>?<`#i@vah+pO5Ny?{6Rrp`2
z5@FI#>5nYe0+}qZA&{ZU!oh)H??hOZ*k@5C;iQr(@RA=SV~GBsSo5cIK3VKtK`_M?
zOb?3TKUNMjs{KSr3Gk+X+jw_}uec>aB+EcyA|aBLdl_23_*klVVx=^eox&&;A_pXp
zj7(j2igG~MD}BWG0<;ojseqF)kBK0?d)dfUgjESqqBz)N62?W=%*zR8p-6usp;DOG
z$xBoU6>V11?!i>7FltZef@2*MA&y2}V*-MCBLah;vAVHd5+9vT$71{+BezHp^(;nX
zDsPAI=vB@?$BbbVB(V!cRvbvCnGh9e<DQkt#AugLSOS|EI-dufuSCr_R-p1*DJ9P}
z0;#3Y8}+uX%>ufi)Dx-{Aa2UFqbgmFB?G(snl*p?`26e8N0Sd_v+jo{QiVe56BGo!
zCSCMiPDPDqXnSDbjS~yG>HNEn-*mh%Svb&p%Vu|Di)0W7c0;k$LTYj1@%#)zS6yES
zd&NIfFEZ%4?|Cc54A>tt^+AwQaA|?KG-a6fE3m9;6rp{wz`(DJz!yq+lgh@#qf%U*
zuY)8Q;?-8lm#S*Bnn$%~E0zupal#K1!lItdzq?oS^EG%ihqBmb!UIINB?1HSLUtsc
z3}mQjL7cWwS+e-VXv^VC4;7bvUV`9gn-EE+d7hDUDn>RNwJD;>a8eY~a}%k8q6!Lr
zL=YCF;wHxkgAS_xBh;?w*NS5WgyIwjp^|(uJH`TuLE!O&L!6R^1vn+?c!3o#mL#j3
zMA_lN{3t$hBGRKN-^B9Kqaa+u0WmBgaRs?F>vPj83>-Bw5lj=7OKrM{FQ1sA)Fff>
zF?xXzE2ZL}Bz$_-?UZ{XHKJVaQl4p}&ZBouNk#PgzLurXgyO<p26*M*f0zRBG{A=Q
zE6BhjD^LyOv*x}AXW5R}gn)3P@GK^0#Sfw<PDI8>a+J8s4-Wchg-o>DSm?5uFeRRe
zK=y{Oc*W8UuX1v;Me>hUPai(nBC?V8R=LSb(krpZHH25h)9)D`8agvHJp2yI0ZH%l
z(9jfF>^PMVl#cx1q*WX$k7Y$}OdK4_FUQBSLn{O2Yv=CX`*FB9pI^B7#LV@_qX&y6
zD$1t9c@axKi3MjOPCgW`^B~<&3hTrW(Ur0M0YQ~Tg}=w1drtg~xF4HRkvM@{!GlUO
zQz4=VBxRlCznZH#BD~b?f)&(;;3VP;{q&faQS$8ws287Q?-w|Z;P&jUzF1P7dDhm&
zM-HA2h3+B+n<bC2F#wpsHlMjG6gquND8houl@E?e-!}CG_FfMB8VKGfu7^P-L@PNv
zCtz0iRVYrAABy5hn+W)?b&ciGZ>zFB@T=%G0sllx#zTHpQCMYCrr!iZ97ufWiv!ry
zy?g&~aF!&p07>;DC8~oz2Y&y3=mP}odNEy?PBu}2#fBw}$F2+?t9(>zY)<`G!EWNI
zQ0UokA^iDJ=%E!q<#f>UM{$v+7o&^W%-HZsu$Vn^0DHn$+3DF(=<~e2o+gihdxO*1
z1Hv=ma|^@cne0M%C0h(0oezbu>+SoFmBoCSilvuBv!3;=s|Bso4>_Y?@B$V)qN|U?
ztz7Y}C{Td{!cs`pQR+`GClJXFB*vGl+{xe1XEOOO?wx!roJ~bBRY0D@K-pX|9?lMp
zi%F_4#a}Zzd~_m1!QI^Q_|hB3mx^D{9sKm(N%72co+ztOmAOfzQ$rc7P|Ed{z%Nk<
zr%q*u9$t)QZ+MtL$`%`=7Vh`pZEJXPZ-9<8PYWx#XNG7SR-8*B$_~y4xDjePPKcgg
zLK!mvJL+awo2uL&3^5PjcW;V(>Ju2(6W%-~0@fpLMvlnuUBfQOKo#zSz4aWOX#C=v
zLz!3I?L7FPbN8#VLz&jCXFJPxT{$;hEDs(n4_y1wWbtrebs;^PiQHJPVN04G%N!b<
zNIg0<hUm%BY)&Q)We#OB2QwC8*FQF-UgpKY%<v=v_T=m<Xy_5k7oxH4o6kJxI1iq=
z`I_rHXRoTP$>r&}LV0}Qs2Cp}oER(@7mr3Vqv>Vub>9q4&rAkJQWJxx?(~h!;1|md
zjt#tJG&D688YQrAdW2}Q>Cs0<{9{-r1E;2E<J3Be#&daSBM2Y67&;AN$(+I0a|u}g
zyoH<jP-LO_6GIhk<DCi4@!Sc-UWW!Cf!=au{RZa<E;~fn9I#*c8Caw1PkiUYAO6mV
zpS^u7HI^dsNx>NZ%);xh7q|yX!!x1ibl%F<SMSUhM)^A6Pu?|79`R6O0quwK-`+wZ
z7ZZ;^@Yx3*`0QVcOXy;d&Js82^G?m~ee0>2nLDPY?)dFnzI0P)ZZJ2M6_@T7M=q{X
zyeOK%oUQK7b2s-kL0stweEJeB+NaTBRQ#12vqjj}49Qv)a+7FvtE&7QRHLftOJyUF
zZkKbny82vB;ow!ME4Y?d{;l9tF12`Yz8qih4VOp#hsBgHUK+}Z%;;z&va~4aoEI64
z#{Qm)-ENcfg`+Z<riQt=L^XP((z;CNDTyXZ+uP4vfBosx&&X(cZg}JXV(yu@<4eua
z9!pAkD2&aH!~)OIj|!DAnN}GjeqR#}hw4p&uv`CmnIA#p&ckC5^fd0Ckz>DmNP$JX
z*6&cQ9ObNcQVqo1{GniKYH;yxS9X82sQUdSqaR$pG=FsZM&Ua=5gi;(zUMbx6Y1B#
z{N?{1Q{Vs7iG#xnr7yd9$mMY#f}5}sh1+EfJrCxs)+8)ii9*F$VAOyhMMvvU5q}v#
zB_JjkdV$)6iiog6Dq9;MU3u}r!AcoN2Sg4i^O}+x%2!W(oq{5i*nWl>_rYkqI1mi{
zAwjoAO2P#wzNXZ^kaAn+qZH-nf2CS-5%UiS^<Ry_dkFnHas1dY$ymt9>ux?gIuu{L
zI2VrGa9Q#6p<Ft7V&ullm614+P9`z>_@BDq1TQ=*4kcXLE|?@4h>Rf46Y#35`k^mW
zI=}^q_3g>28&r(Dck$*+riOzP<xC=0UCM|o4zShe)TC>~_N#bK=?S<P?rCWDHg_E&
z3^Ciz9##3Ns&gs26w44TW;w^KC;<wPfU&vLt!5iuxK8v2whgN8Fpd1h`T<R^t9;9M
zf9Y*Q3zuGZVDoKMA?6P8TKhzakb9Nr2f_|{hlVMY;`7oIJx!7z-fa@il=h*_8)Ep<
zb>I4>!{Vt&H|Ae<>B7*XU+Pj^EtJnEs2|RxVu_AtbGi8p&AwE_FN`3W`CKj=cUuH7
z{iy*$-UmYSOPDe8OWbda`~Ba<`*_F?@?`v&V3Cg8Fh!qMmz2t;;+XnGv#cWb;Ku64
zxgmE)ssbr?t+o*1r=l&^3QQ6yD#{M5{!=KE{BU|6OinQwZl^_Pu}6g$3!3`5zl8=1
ztBS%N5O)oR#K0Tw(BG<5DQx$Yu#1!F7#$rahmG`+AdQ6!fy_9GmO_>=j`=Ww9=<p+
zJU%{}Bx;X2V?Oz*vM!Jz&&(AF;m1!=81^5)5TL&E#%}=?$4A9g3m07x7Pr}N(N&!Q
zA{1~P9GFCpWXcvX+9n1D$UmW^W0F9M0)5SV{-J}a<P1>-3zuDy^k+s?#Tr-Z;}t2R
z=9;rb#l$H(2dMf3fvk2wOwR_VnP%+hC3yav%kxzf=R92hQexw7Qs`{Ia&rN%Umqb*
zn9@ZG%B2VCA^(Z|o+5JGEeD{&R#EJgOrWZ{N_`DXO{CmXQtX_<BQ#~qkB!ZbhF^Yd
zCXvYe(Z$~1zbg?T<1?R0-1T&Hve29?7E9|7433sY2mQtBiC3<cBCqZ4eNV*N+ui05
z#mlfpi4kl)WAop6^P9gqxNzzt9|^=#bO5^fU00pS#|x3dnKNfnUm0IGxi;E##4~$8
zx2fy;-dPbIR`-j_h8^qoxZiQlNf$9-{$u436bzL>7;5<dzk8-&7|>DT1}Hl(C$ap9
zAT>|iw#L8(%z<;_txCtlm`2@l>N=7nI)CSDUwh{zo5vj)xMmOqd+?foJeCVcdHlGP
zf!wV`+=a>4k-pfhH?jNi-St<lzvM1SM&K!*?-YR@^6*teb%=Q?RuPW;JYQ8k2d2Pj
z!3@`il8x4!TvoFS_jL6M;@H<Il6Cd6c*#|7Sbl}L{p#ht&%}@9qKi}U^k9yL*^@I9
zBcZWNs3vrE{*H?`#K7KXmak6DM*Z1LEPeEvRCc~JmP`5+P9J#gPsBfoPZ8HU;Kq_;
zaV`WG$pcv@oMHg*?Jdkr`PT`*`);wg`h~IMk34dG><iy&K6%??kKOj9SU7m_w(qX2
z{N9n3H@#`)NVD;_y|2tZdhXFjAMN=QdssL|-oinTXS$EYT+}u*k(!uE1&PUGohm~T
z48UFBU@wvjN_jMxED26~f5(G8DRwTRbmxE=&QmWv8q4KJ4kX3rV)<BZbR?f0{@cBi
zFT+Z5gDQm)r`ynIAy1)CI`%w|fg@D=IS7ipTIEJikw(En_4L>Ca8l-2=@ly4P{}G~
z>kRb8CgM|xO{|l-tO}I4&|RREd-bb6yH!DA3g4d)-%boA#t)B=znw-Z>2UIWNviNa
zKYZ`0rKM9#AH=0buBgA29UaZ?J+5Ar`9m%p%HEkhq<U)YkC(pB;qv1gaQ-I`<sS8E
zj<$5FMpIzAQ&Ixv(euZ<J3G4fm+ElT5Eqgt@AG4TlJpdx`w=;q55Wsi+A;;VUbO<x
zs(HA=eu5GcQ_B6I`ZB0xG9c{xq`W^-NR7zoop(m$aJnGwiOP{wA#uNy_azE6SB~5%
zoF@<=Po@W_6R*BEF+I5VyS$`7fn(tbwe4Q@T>S9=&xxnOYEyLixX4qbpPENxf+=O&
zn_F96Ig*-5p9c<WOzpA)4h4L3b4s`Y=9Q1ll@PN*7h+(p2e$GwaYU;sy+AtZxbiqi
z^k6^yeB#0N*A%f*Rf!_m`_mcK<dmAo#n}uxA2T$X^sfq{u+zcN<Y0O-?@JDc3XyPN
zooLT6b=;D)ppPxCU@gy+v7V(PMug(5$>BtCMv8%4F7Zl?bh)6oeeaQR@yRh!^zFU$
zs2EmtAQMwlOKz#M@zBT^?xSo`Mz0VPhjRYV{BXqQ`<9<lC`b=*s|qZ;cs4x}%McAi
zElE%&;lUW|%G0S~!p1-5^G^6Oio=bHTgi;*{TYU~dt*V&%A5OR$^3q<KlXa2MZ7;o
zKNqe3*zcJY-|UYAo?*G(A4fcg<rDpJ)Kl<=`{Sf1=e@o^PI-b}yFX5Q#=M{Dk8>Wn
zZuiG|PtZ4qU7LJxF7+t?dt-q$?Z*CCVkh{u{@9Bq@@#+X^BfZ^{juM39lb_+zYTbf
zQi8NMj(BdDH}%I+&w~6$e+<v@PV~nqPr_U6kLmp2y|+KkvCp6N$9Ye}S3t`&sb|`y
zDwyHf#0u|V^*aD{&hvgX-?iK=mxFwDkIm;M@185ocGogC>rUxFb-r}9*>Xyk@94JK
z<h!5sqY~n`gk#cjRoWT{D<O(?PTC=OS7W>9!UL67OIKK0t7eyO(l<K|jjw-V@AKRL
z-_Ka)nien>9N`rX@qaykd39m=$b#DIXUxj~{|z4DLYCc2S%O2T=kT-7wawI7Orqgl
z%`x`A@K)wMo+C$=7nYVTDjj&iU2W@@ZJ4cNrQY4J-~K6H_=s0u@TAH=Irr+A{U^TK
zdral?kK-1oNauPK#Z-u}QV+VxRoX5kwHdX~Kk^dSUv=-G#P_<phq8Fo_>IGM6VljX
zA4lau-BQ;}J9=f#E;UWtDYebEqKlGIHCrWHcS=x8$uZ5wmf^6sB4vkD*(|$7{%*LZ
zaiFvdNqNCNJt5+C$7$Qg78f_TGp$F<3ssXZ_UEUBIqAY*zW8zfbo%+Xpxd8*rsr46
zzuh&%&6IzDKhOQS%Bg+vAMy_oY#y*bJ{uJ<L|8YT3i@N?#fedSMKz&Ff|%2k9mWca
zx33@u@eB@&5iu&ph~O`hvsw}pVv=42(_)5vMH=D=j7Mnmbj!ipwupytnSLTi#8I(I
ztp7URj*G=Hah&>Nmty$3Oq>*#iz~#H;*_{bTrFNAt`XN#<?v<r6|WaJ06b1pli?<D
zv$%z-Nw<<Ga618*cZf6MPVw{NmEtaOx6njIR7H&}xec)?>cS9b@kuuDeYbE-x5Yj5
z?Xqba-4WYjN9^JvKPT=buJG03HPm{zPuwqFi<0%Ac%68?c!<i1Zxj!UUl4B+Zx(L>
zTt6b-CLR@U7w-`7#J&F*br;`F<)-(F_lft54~P$n$Hj-lFNt3k9~QqNJ|aFUJ|;dc
zewEscPlzY!)Aj4(H^e8!r^Kg;o%k)fP=7`|C7u?a1!4RSkx{>^swHEU{R8o=_`LXn
z`1j&Jh(8p6B>q@@QT#{oCGjWXKZ!4kKNbI3d_{a!{F(R~!LMHz-w@vve=hz)d`tYL
z_$%>k@n677e<S{@_*?Pc$ejKT8O8sDh=>0r{!aY8_y=-V{!x4vB>g?{eenbFL;Nv6
zLcjeN@ni9?Voy9L6#<~m;RGR|Tg7=(YKMyYlp%;qRpB-%Q!*_xWZ36qo^<*_dQA+=
z5jiTysH!q9OL9U^$|*T5XXLD$lLzEHl@<?CgRhLocaa(z%W}m-{IfhNSLK>qmlw&4
z=_-9(ULr50gyLoLq`X{SK|seTd6m4HO3~NIYvoJj%j9+PdU=C<xjZdzlsCzn<t_BL
zxRq*Ix64<^JLDOvX8pW;rMyetEj3w@Rauj|+>o2HE)98>P8bc@lr3q>w!BAL(w2_w
z$ZfeJcd4~?PTnhDC0{LHBmbSePu?$ID<6;#%Gb%)%ZKC}<QwI~@)xMa^=A1N`BwRe
ze4Bh!zFodUzEl39d`!MezFWRWzE{3azF&Soeo#IxKO}!i{<8eA{1y2T`BC{X`EmKH
z^4H`O@=5s#`RnpG<R|5)<fr9t%HNW|Ek7fll20d`9m8>St8CxX(JXynL#yf))7<KR
z4mFI{mR>Vj@lC_2cPjnO!Tzs8`@08vUx(X9i-YO5lRQ7_|0KO>nwt&1+-`L2{-*ea
zn>M5Srz#t*NdIhF!wEFC-D<7nuRG1gs;_F>N4yoM8tj@Kr&G~=yGCm>s$TZ5tY(?*
zin*Jx9j&@mHj!Q%4Ra@KwAip|Y0bb!!>DdqUai&&R}81pscz{`!09wA4J+Pz+dtHf
z(W;p{b`U9HnMTde1$K5rHOr_}Dh=IlZ*|*xWW(%Oy}1iGmfmQXA<p6$ZLKS}xBNT0
zQ85FS-r`@lt!?TYL$~`Er|(wlT5D5}Z5vJ9?4Q+dH@NWdj%n4}Or#w!+j@(WceT1{
z26{8b0c$nGiTB?6KTO;1)$5(M*(z5JtJ=_`7i<dGICs@BJGQT8Y;MNehF&YTjW&<I
z-A-KaNzHl9>a?{+;H+sj8(OfUbD32=(SJXGp^mOKW43zTpE0{_I>tsfQq#8$4XJ23
z5!>vvYSo6>srk0K_h8km>D*E1ti55>YD}Z0SM)|eZ?+9fSI@nFEHA@oovGjgTl$V2
zcXY0y<&@nimG|5eV8DZq*bSqm+jWRHps2E1_jUC~JHP|r7WPSOM{6{6Cs?hPw+&m1
z^WN0Ba;vIYwJ4uzhFw*(qV~|5`fix_-VxNub}S|;(BLN<&3Nx^|CSANw+^-ls|VR=
z7`79sbh<V}t!5{{87;l)FdcfsY=>%^U9Up5p$*f5;B-CM(6v^(QwgXa*xi_2H!R0C
zT9r;?D{33fcB5PA7!4-`t!WM?jy}Jv+M%7g=Ga=h9b~errqK#CS*e|7tXl?#RE(D9
zm{#0uJ4UPAG@*ap3MpdZo}HM!+h%7+ui17Zz%8DwRua6i(t&&BYNJz0RxKSu-qzL8
z)bHiyW_WXRpS0AJXf<Y2ouk$=x41gHWo#MQ7kuhZQ)E+j%577vwdf8zsgrBvoq(-v
zXqFME)-5!F;07eHVeb05N=r+*tfa;7xYmYg=~jU0bTreyy0p~Z4QNg6oC#krJLk?Z
z18N0rhbwCFlpRA4D^#X%o*nD260KqAEuUW7)I-pqp+oY%rdivK@i3fnAHaD#b|u!f
z%vz`Fl<S?A6KWc}F7*cNDht2H89F+U(WytzkIEIr{u){(veT~Un+DI^3huNyZqp9v
zt!=~7{F{nOgYIj2Gr$9@>1Mq5)}Nw~-O}1H1ShdSC~qpt8aV&4$7UkWuhl3MW;<nA
zg>Lz~Cgd4*>UvW*Y}Wn-%#~YY;q-4Y01ILb`tRwOmX_GCboGF1ylBmK$k7|R;*y~X
zOiyj`@oC$qJ9gJ+G;5V0pY(>+4Jm@Ha>A(H;bFDS9ms~;KmVwjy6$w^$qP?hhO-Q4
z)hbNQfPa?N(+TmpW1AaJ2wLJ0S|g!tY#0qgb9DDsf?8wK<Rgz;ZH=?ctnNN#h9Q0y
zC$teiKPnrh?dOwjMKrtHZ0Zo|R#5BI)H#Ei;!FCjSKG1S{!O!TmgN~l4yg6x<GmYk
zNvNV*RySB_n46or#WQ!`%avrM1EHEQEVX_tM~^6$1RG%jBQBZPRjsi<Y$7sa?p9Za
z+UN$VZO+~ZDJiCABU0@+PD9@??0T?PX2#1k*fhl6t(luaxY`z^7>8XOj@BrfRhUK4
z<y02?DUOBc(E~NJiey%A@XC12(l(rx{%;2Mg;k%%0=2Hjy+m})g0mP_4f?bi%xPp_
zke4^o=Z8(6lnz_7A}*b|M|MfcU03A|gU9>)(or`QROD2#Ycwu!wk&N+Zy~YRNe@Gf
zHTX%*R&?1Ll{aI38s#dtFCbX0iwrf|iW~ShEf%2<b-taxKp6CICl0&R%UZb(!-qZ8
zP3Np;1(^&bhXRJvLDoilZ{?Qh=)tpkYYQacKWoB|<XJm>b{~rbw)8GABf14R04eZj
zt@s7w@>USVQPI9nNpN4IyWs?z$n%zC24TApoE_@1-*VH>z;eP(qiUIow!QF>K+`za
zX&C_+scxA;mb&7{LA4UgXKin*-SoEXi=wR#<m#Yq8@ql57mgyw8XI~o*w#Q7CKy7u
z)Pry9(RN*{SVmPb`Bb}Z0upx18!TNN=&%)SH?%JIp$-*jckH@e3$(jVog=^w%WA$A
zi&6l?0!<)iYJ6dv4P^9Y#Bv$6;zdC<RBX(y)*Hrd)P{1Zb%?@f#cbW$HdxIHXa#K~
zpJnVKjTHl~Bj|#5Ti3R<c7z?eOd2q9A1rj66|=zy<{IhV>@;*futH7FuEYU6rQOgI
z`^*T;$g=SvI4yq%;o(G?Nef2HDZ4@FgW0czI=0<uwX}L*ThkC@{%u3;?+OO*c58cJ
zUt0EQ$G=l=R_)|@oK<$kEr1g680fMV_1$dm4Lr)DLYgv{T0`+11!J{t40(C}gLk9R
z^{J=nHEjb-qg9=l)^SXxc*EG$EuW2e^lx|cvkFhT=Ba>UMvm#%K>}9l1)OrDp=~Oe
z!g&#J@V@}Js%>lP4cQs$y_Idh(`}naB0W*4u1O)A=RbuM54H48Gq7b^oI4EPYATYo
z5`FyKpNue|7}N|H^3{#D?QPfF;d?r)l&S{qQR}v;`_6I!7Xn4dBeTzm_c21b(tYu^
zRyF^k{aV$s-ubDU&$fTc5o#~q)~*#^bksInwBfw?u$ImeeDNV{ZRkaZun~Gt>t^w1
ze&ebzFFuD0L31zq)j5{CPp@d*ARMNm*?LGJPqU_0Vj1?X1P~CVx3D%5dtn8r-L*4t
zfq3t6*G{7fa7=A#tTI+lnU&kA0P6?NZ-HTRjL2E=RSy?Lo6s^$-$L-k%m!<}|C{7K
z(@?Mi1*he+kylCR43-4T0fH%t&+M3u4M>YsUC|um5Zgj^(`r?WMkCzRj7GH%P=)zz
zYHh?ppk*jk%4_M{A-it2cL3(m9&)iciXL>udesEJ>y<{=yJPJ7z!GMp$KEmEZUwfq
zO;klD%GyE!Yx!C_GW}fLsCNRKUoAZj!j06*UEMK;v?{d9#dBpgi?wQkN4R*s76-C1
zO~_8mgrD?9Y`LO$%~s6|D$i~xEyeDZp?_@C<xSY99Rnk`x@8z0Gm+gf&ao`)vbj-K
zC#@=!6?N+Hv$EoEcGO+#I=G;%`?VU_AcFMhv)-@^+HIyjQ`K6qB@HO9DgFWQ-v}u1
zVA>II&<3ay^~PJPH$v=%`~owohp-#q)%{>>Hnot;iooLxfZp7&?=0w&$%kJx^lr@J
zr!ICuwPW4ZSfc?O&|R%7Ma-&#hIHL$cYqC@3Y@d!?X+!Q$L6K0S*?I(Sd~^KqMkGt
z3HT0U4B&1otsSUzHa5TlJ*=*<UkJ6va^<R0y8vDh@SAQU@2fC$H9K(kny#cnw+Vmi
z`gXK)I?NSRW(8qyim1b`{6M_b<5kmf&|Se;y4H!JMwMG-r0%Bf1$p{8Dr&I3V<34^
zo-9-zwLp}@P_9_$>F`Q0HXPa&yb80Wo`=f&Tp!8dbfY!Mw%bHkHCxH^mVy0UU=>`R
zqFq#3Wtn{LIpry56yv{2a#f$a;&*t*LA-C>?D=xOu{HA}wt2q!frp7Va^DyK54>La
A-~a#s

literal 0
HcmV?d00001

diff --git a/web/css/fonts/awesome5/fa-brands-400.woff b/web/css/fonts/awesome5/fa-brands-400.woff
new file mode 100644
index 0000000000000000000000000000000000000000..2a89d521e3fadb6ad3bc1738830a2c039bc57272
GIT binary patch
literal 89824
zcmZUZV~l1^w}zkYp0;gG+qP}nwr$(CZQJ&=ZBE;EpLxH(r;@v>?yJ_?E4z}~NhRA&
zPE-^C1ONblboT(T|3+XicOWTXn18eX*F;5?W&Q=y|69QRC!E-FP6aVx5z&84`k%-9
zpD2Nb<do<b|1s--{y(lS2(MahWMg3ekF^5;AR+(&==s&q1)Q0I(?16KF9ZPbpMHJ-
zAZFGcrvDfO07zI30JOekr8dQHZem~z0Fu!E7sK>VtQeT8&*uN&KbHK@6aEwNFIJEn
za~o&(f9zikU{3%5>`}1@EY;f1=wF;P^S`>@|EU}w1Iot0-5vlWSN|^$|DOneNkQan
z4Qx#QvAKV_i2v$`M8tH?*xNZd1Ar8c005W|005;MCI{QrJ=;iMU*8xIn6+NXC-7L~
zp@Su_i4TyB2kZOydjFpG-_D`^6YxI=0@VF){PjQgulq08z<ZiKARr|mU_Oi?CLmw{
zSJKZU-q_qgU*AyQ#Izp@ctKkU1B;jW8^(<L_6HDzcZeB^kWWt}9y=fDKoPH~um20+
zBLOGuo_)3GW1ixI0)Bg9tM<~p<#g>_fQcpoWx~Ei$>M@l6keV$S|}poM{HZ2ny@cb
zvgtTaNl|98nx>J#v^!;rW`kC4Rim{{%2fZivz>V$?Iinwd-leIS(~qx=r_b?)%O|n
zNk6);9}e#=6AaOAJ9AM?`i^L~UYmOD*kMj6BGpPsKe_A0_UbmNTh8X8X+=2c0<&j&
zWqD|B!CQ0ixj80HnaU$;O_Aw_=!ZF9$(b0Zh}p!6cPoa+ue5vO+?khqBkgGx?zl92
zp1#Q{_7R%yD6Kc8>%AiHXukxpBMuJ*%Mt<I1UBQC>XexK-pd5nH$^zfvSJdVo&~Zm
zN6ncCabolyLOge(o{R2_9;6%Iy1}f!JV#INeVz$^A-hLxA6cL9pFH2Xeto<9WnVWw
z_bGn7;$TBTm;xU4glo9YplA7NBPtP|$~4NeRbb2Isa2?yCA^CGRjkVea8*Q<Rk2|v
z1|DlTt-(45Zt1XoQBZ}2r<JFfr`P4bGg;{MF>G~asQ$Xbd&(^9I#pyI&o?!PTehef
z%~;hudxmLN#B`Dik)6SGWRH=8pgTr9XAZuY*NweVTs;A=-ZSb>RCzGj{e^E?6}aBd
zbJ9&|luw<M+PGlRAf#9)xRH!%wyXnLAk^8Y((*F-8=SqY+xtBE0M%`<Lw?2bOsD&`
zBeB~nT~`O*LweMW2JhKZu~NRhaq%Ef$9v@>#eRt2V+sdDe32BD_>jahF)?xX%7r&V
z^on^sjN6XeW&mwFD$|ar)Q+_~n6efev*sV=0Hk_=;|*+f81xF*i9>EcA=|^C9^7Y#
zfp&lxWx%KH_h1J%+hfiSG>Q+n+0!cb@7j}X2btV=O@}j~hb`^5p~oa0sIg~C7KB6@
za&Lzm9f+|9i4I|~r_qKjGC<LWBr*^_5ELXK9*6*qs1!CaY<);da#)Zpdk9&)zI1Wr
z(8{5inUc+ETB>lZ%w{yJ%xPhI=KVnSiqf%~Z5~?>ab3W(JlPC&nUAdYy=Y&y!fows
zgwwcE&3Y<Uu|d^L^%%Tl@}uu#aLc^OxR_3UYvx$Zb~?-Z&YP06F25twq?W7e?&Et+
zgMWv=2M@r&6#RE4|23e0-yLB0?BH(5Y+Nx9x($_Oo#hWlPp*#@v#hH>f7U%&r=v|p
zQ;nq>nG>z89&D$eSx2EU>IE>cgJOV!lKANdf`1JW4V(6i()s%gNsSNQ<GtLC!$QtX
zi{9UN#Sw4u+d7K9RPmY_OW6C}{K@9sUfy0_R?+j>{rOo|BheRN|A6v@<RMZYEF{R6
z-Q&WGp<EW-J%jCBASjLY!&XQMjUj#N`5maY3oW=oT}T^KIi0_$A^L^qnU^-}r8Rp?
zlj$n6`eZ_9|4@R)wWVgP)H-cwzR`TXT8gp~ds2rbG@ISEuSxf#u$a_<cwWe-l%QIZ
zd|pPLsL)A@cxiH9-fnL!iIg9IGO5j_b^y6_Gpf+n7XB`;jEpLO<o0F$h&5E$V<oV;
zO!?O-q~URLvMaGHHuq<MXE6p>kzOPE#oJyT%{`hRSB)(<9{rt9kI%LZ|1D@Hf3;i@
z{yaaXAXoiY#5QmCHHrgJff>vyOY6+-l|}P)@=!fazKW&Vf<Z{ZvJ2Oe4P=p7E1h8d
zHs?dn&6krp)X>68-&R^J8ucu-_f4y`!V~ou8hMtZ?s_ePECd@w8<ZQQ9ReN--WzDi
z(e#j3JewAv%LiFyvwYorhS^I;JQCa?>(R@B2=5mO^J(xDJB<3C7ip*s-kWX^YbVG`
zRAuk#6|;F014LF3SdqaT4)Z>nc|UwevuO%hE*-Sr_PWD%txj1g7w6y-gUlc^>1L$T
zsN>|6d28W<d_oVT+!CX53NFt@N%Ig4q5}H9k^XPPLV|KaX^dn11f*z4G{jK|MDGF=
zn;eJQXg1lLjqp0>`p8K}?Lx}hVTeZP)RB5)w4nYwM)icfpp3{x-%0q$(qPnG9HDc{
z#CTzdQlvnhXmY>wPy$d1$$Mk43W)s#>Te9_Q=dT?9AXyMOGJm3gwN(XIFw-6a_t=l
zqyh-B9H=iu%d4K3#Hwe@<DHQ5y2?n4Qfz_vjMmILtr0HLjS@|XI<zPt%LvJz6)NyW
zbIa=BaOLcAeUOxs`;2wa!VBan)YQt4LWR)#akC$YFPI(z6wrceh3BYF5$s`uImo%$
zYd%-sG<MgYq+QSZlBBq-JdYMG?@{m1qcgHR6l3?<n?ih{UTOLQwk_f<!Y%NH=X!!+
zUEz<OYkxR?Q*);4{?>ihNCFm==Xa^w=Ho^P!!eN%&2j}38yLmG6i7%4CWWGP(ZzBs
zGzCah2QyF)`K0EI<RqA;kgTx2ebBKOIdSDe)ZcflmI7T8<}af?7iF|bsAS@++Dc)3
zEtaPxIU*D)YScW;O3Tr92+MR;OP~`^=@P>8QsB{qB0FwR$Vut9s-#ff0`9|<Xac|@
z3WT3TE+X-8#FH2Tj71pAOBu^utZ;oiK_-!^-HgU&U^U%Yt&%Q=<B^5onIh*U(j>c3
z{F9ITC@x}52#v!iNiJH#;&}qfqZw`Zy??j0W@B^f0*8a@_o2A6`d0}P!y6LEx7ZR}
z+fj(;4k_L11NkxCz)oBq+%ZSwcO!-!I)w9K4ozS<p-9qDMDWjZLxl|Z`F!u4i6oV>
zQn%f2RJdMrGT<@L{e%^{I<G+cj=KWFT_kCirvopC^uRi2uc`7r(JXy0Bx+JLmadGr
z+^lt5wA0lfM+gxm)N|H2_%zN?9VuE;l~A=ROhrN%5O-di(=1MQ9QPiRPR<@=PK6>E
z@q1=LJ*lo?eea+hzCdn*q{fr^eQc<{pu}ILJZ|)WE$1C8d*wSEPfRAX=8sA^m7sl5
ziuX#GQztYW3#EyL0^33###)ylJEN*nH6iR)JB_`^3aHW^oUjZaHsXU*B9=QQ9O?38
zEEHrZA`N%$%WM4yZ;k4z!D9nLJBXiyv&)*uf?v^3Eq456P76M_6J3E!5Fem!13mM!
zP<On#z8+dGdXRm*pSUN?a=MkKO0TqgIa=Gpi-CW%i!uGo=qaXDsBTcQt+yvl(b>@1
zk}jZt(VPYPUkaH7Wz7SR_rBmM87Y9Il);;UATY?0AulW8L(bejbRH2pJRbIR+;F?A
zcd1&Z9NrSwXZSlowmI0?(8rwk?5l^`cAoy|<j59qtDRlq9j&h8{M>f>zxYA+{PIej
zLkhM%a?Tn8M?++$jTBu$QBDP+>xph>d9vensl-j53dm@vhVk4(N%bj1%H@n*a_!(m
zr8GCJ=GI_k3W;uc(z<c`%;v!30gccdz|X26X2s3@fa)%zbPn+uL=?cdWy5_2hI9@<
zi79Fw|4V(mD~oW?=|3ivQt$8JVcfid6KRq_T{y#N>kJ$xxUc7|)H$>TF<q9trOqLH
z@~}d{lQJ{4({3%=lyP@<Cu-ViIWfJgs*?9;_6b?E;rMVE^C<0L%IRfv)S2+2UUXc-
z(nd<VvXxzfFei|i)1Y-Xli^HCy_Q?)u1feP_=-)KDH(wi*#xVXkkRfSQnN_air7^m
zzW=jF!@hu}$bBxIpV*P;m6Zy2F8efV^(owDmR6_D-Tkbygu?m8vBp;X$GS_)FAn&-
z$JNp@jD9%GjNepb0R2~)pgQu1!deTzff&h>j(`GkP6Y2g;*t1IIiJ)Ah(qR%e=SoU
z`aF}?%d=<x#!jDgW{gkA7Tt90`#Y5cJ_3R<nwv&@ASJ_(P+j%+t%;pd?+fnr%85<0
z-sXEYNJjU~-hkC8DOug-rCnfid=p(kn1JoZpzMz46W|gY#G_htg7n%MWX}7G)o{5S
zfB37G4<PUq^_w5H4;hAY3#CP5l5>Dj=J_}C+U)6d%X&0Jm39fzF$U*v1A*USFuBL6
z(76GpZShs_rBznS5*!@R$@=AHm;KD?$6csh(Y+ZPmvWKV7Z=#j5EJ)#YcNj;ou7aW
zKMqq*N;5i~j?_(L4Hne7AAOFwJ_j8l%E}t7S}?Q_HteMi$Sk;V^OzSAWn$2yyS8Az
zxu-34RsqI+ntgoZrtsqS2<%@7iKHe<*EUH>d3bh}`cQg2(k5-bKRq`h*q$_$m6Lan
zWK?$#n%g??i({mULqZfEMbkpSyj?EOVW))VL|Wnfy|eUl<IAH^fKi}uFLg76ex=fR
z##j%@+dC;^7qXPwS_#23S=h_d4_SnWT8m3!$}3ExbF7r_3y{v=Jr;Szr)r;ZW(FS=
z-0l~6IvwJ4sUhon#ppo!tO9{m&B6VKZWr3w1=xZDdv}1SnbmMI6AQ33k`CDB0%qt|
z?27sf(}ihwnZ&XI^E#bkbUlUGMD>D$J;?-Lx#G!_i7)%dP$y38O?g&Q^KLpqw7@x5
zBQiJ*d|x4U(fc8Ezq#HbvDp5fgqpHgJf3@(wSBQb{sLD$0lR=t@x&rfk7NEw4JS~B
zT<p)mQBVyy0ZXb|k%arMd$}h3$?l2o#D{V0NxM^@!?Btg_?Dez9II9-J1XBs*W&L0
zvxQk}pR#36_aCO&t=TD>93JRd4@@7JTti60)6Pv$LKa1(f$(~mL?ZtWf#15!2{c=F
zkNKVZaZ+d+qf&-~s2lD$B8TaEW706$1aVRQNQ1w1`L{v;%#S{-*4F8D`5JpTI(ppC
zR`<6CB@ygga5=*NbybGJ?&qpdPAqz&06eJ^drHg*e`Ac+5KNAf;3^`bH7MYaCYdHi
zcV2Lxu*uzL`{kTi!6s_c&nnQN_iPEhl}M%(wLI1I1$zahE^((Fddwn1+s?zUxi&fk
zT!sjqotV(ER90Paa_KG5o~>Sdy{{%+iTr*-e<Egi+f6MZG#%3Sz!9(?Drc?qZJX$H
zVEbI337g|4xFzdjd0J8$IVY<k_xZYb-A~fe``m~3;%QG3?EAc#D<w?BY+E=(i@16F
zwFivSCgG_+)b0p3=Y|Mg?G8fWd?8|*4-2}?gg;Sa#=i-0AJJMBXLMdHV=$atdEvbU
znwx@oJO@5qW<bdO<p*$xsN|9_G<T<?^9KbJVID}}huP~224<f7NV)r4$WUW>NE28s
zwM10uNnA-@7!1;2-TwA${L1Shgg)KUS+i4QTN!ucjjNeaQz@kLV)^w0EF7F~$Hv}k
zb?ILwWZ-}D5~_pmAJ7)getqFeYtNI85sYHriT_A`H7@}g(G-nl(w2bTSDunPSPd$V
zG8O8CLAx!q%n?=(>ACgiL`j|%`00xvxn>wqavNIUwQB2DEZGgR+{Pc=U(tgtUuKWE
zyArs$QAm$G%VsQNC2&2^`r1;<N%=7-kT>sUCgs9Vz^-`wL=7q?h&%=O3pJWejTQ*C
zPJWMmgbTY^g_UQia}K<rhVB;`*e9rGzy&z)2VM7V;0y9={zX&XM~$8@p5HZJfnJrb
z9l6sWrLM@0xO0Cp!4i@KG`GWJS0KPnR0SG#8x3di6))d>n9?TLcaueCb>lt3N~88|
z*Q{Q0qMC;zW%5d57OC<eBLxJdZUN+mjmPQZ=PHarp`@sB#`>zf7|FZc^Jk|gKS5c5
z;{)|k<dLyk2+Vn2EBFO652ZI&nK^VtAhpOeZYmi(JxS%myH7~N#Wl1uVD<^t&R$*+
zWd?ZY7~BSCEQXLs{1J7@hiDxrv?-cH^H(HfG1p#gH2oV9N^6Wj8^jfag}q&hiUoT*
z&=i`}C{!DnEbN@+Hi1Im)|%tE8cEQoJQ_0Wcn0#^Y<yL}K%U-)9BtU}wg1BwsacbM
zHg@;Y1T--Riwxp*h$EbnIFwjX{*KfR`2Dfl%>5^iZ*CtNDJ(*hMtkF?gf7$NZ59X8
zE7PB4l6qwvgj!AxnvZ}O7z$_e_$i>FrHg2dN?JxXrNl4h7UBp4Kyso%q&Tw3a^@|B
zyn0n4<Wwk(y|CI-<UYpMEHL+#3FOqR97RYLieZJL!Dulj1Z5$BT{!a5->?v5w!{*x
zOn3r`W`4;9I<qx|M@7w~8o|>1_kJvLg0ZD%r&8wZfKH-JVK?!7C;0?N0%ols2}KG+
zdPqU?8H!?ilGuVVE;f12;s`(<%7rOZR9Hx4357(#m=zWkoCuY<Q<8*6+DmeskLo^+
zxU;sb9*&Nhk<=^G0;xIbfh!uKt~2;yzot*>PSKKc$}pSoH-a#`Rn!uq2W{lBR4X+j
zBm(LHngsgBwzm$YS!KZ$nm<;C$ELN&p-XPv(VDsLBE152vf^G&&Rps!Go%DiA=H*#
zr&J;}Q+32RaA$=QwZX{Nd+`doRelGGHG%{%CWF#aN(H%s)HVCk)8Fpv#qOG{+`sJ#
znP*KF+Lg^*mA~LcN<;knk!X^h91Sa!uffVwU9XaDOQ}`nMMlt+SPQ}})c=ULrjo_X
z-7>(jh>0aY#0^(Qn(S0cE34F68P}`vNqzFf#-mpHw}B5XRACg(=mhN(9GRoIraB~%
z4Z|J}_`)#mKIVh;$3_eS5rgAPN@IFvc0wl<UiQFT+3u|6l&ct>&_yz#dOpdt?1twI
z<Z>$MIh~k(?9?jkI9%F2XHj)QorVlkruqwK=;m*v*@|NN`0CiT(>OWy20C)>HgqUw
zTUAvkV<!F7*oJ<<d!@B_jqzOVRk0qM%oT9#-*VV)9(}rs-y`K|A1LcXf`qyK{=y?G
z)b4oc*aqhs%5NfbBi%rXCU{qFU$I3A+B^L^=;+za)8r$xh&>ZO)E!+;pDB)^azhf4
zrNC?<=IBgtRq_~8k+FJF8WHuPLAl{O4?B6j&c(`lDNu@%HVwEEj~rbnSxHZ2R7qhR
zj2C7WX_IyjOt2!pc_wkDdyhnbpo;ivj+YQcYwWlhmdj_tSV3)$W;YPgR=E?Vuj(<$
zwqN7bq;t0hi;6VD0UPki+Am?mjJL@6qENbJC^h#YAr+Jxq~xkK7fu}6gaBo}OL6?0
zhq`VW{FzA7gy1tnp*_hQW9tKUxH>*(<REXBS&LCf?EsF|CPh3@wpCl=Z<PH|4WA(0
z2R;J42G24J4Hw!w9>o(L2Duf(At`VJL#4X1;mKRAJV<7JRc{(}6>v4x>Kcv-0|#f}
zzeBaZ@?ft+^7$B4Q{VWMK{MUjLStLH^O<{;`f~e~Q0;AWbn>T%@(RiR(=@1yvZFl<
zqJK6?$fGw$TzqvfvX;%c2P-o_P?rs9O(^jSys<PLj8R5JX^QYe{=nDYjrI_)Q*{j<
ze2dwAALgX&*4BpckvjU54kz}7eFzHqWe08;l*vM<JP>XTn10{hpUSv8lAJ{`zzQ){
z%Q)YSr{(YY??$J^)s;%6(zbGo!oHzWBzq-N#=GRJ(yh$G`Xxgw9ZMVM1mHi+DR7I9
zqRLPFHtDEZ%Pk$cAH&h-<)g7ysE3k^O3DhwhW2$y_i5bd`P7Fu!KjZC0|;1y(e>2Y
zP=7v&i5-ogQeFBvJcE?QQZuu-b48I4$4&_<6y?!C+yJaetOxr(#1%HSw~^s$yciEA
zOX1i;L*c$5riz)g6*0B4+J{tP_#16z7K#2Ejj7L_`WY+2jh*vKwHi7+)I+9fC+0(?
zF6Y`<7o<9?ZmCfP2Gpoi9oS3$iWAT-^u)@F><+9-9*D{;sV7#H46WZ|y|@=2&*8-u
zo|(y1e*!Td-oGNAYr?vsZEs;cgEn}156^A=l!#*cp2kADOCOy&s;S))$f+u;CUZ{^
zG!O%>ovc}x>hus$^!-Kn`SJRJcUl{?YzEQ%p<_0U!4G^NZ)|F5U}|+Sv@)_Z=bKY1
zUTabWnA*>u$hW+UyDwg2wcIMSbQ%20w|SH4bWL2;p5uImJui<O%z;nM{K9AQ=^S<`
zPp$juakgICsb+=!#ZwXaF?#iEq^5z~3gO;u7{h^hG$7P<?KCcfNi)EP>ZO65N6-Jr
zW|*FJdg$bFDBE8wCaF@?rs0?}Nb9g+hf?6KdM3bg3o%2d9*M%r10|ZPpIILj9=xVo
zFa}}7h<=(EMW|%Z+(^*5W|T{_z*fHZ>Sq0_A)0JeyNAi7!}MGx(X3$|$2vr&+2+S|
zPc&L*tO_z2cCV&AFDP}az66AMz_CZut_6-+vDCh9<@|Y{OLN_e)VoppG$kX?hgyB7
zcyuN@(S7r-4anW;MC9pVT3zdGNa$iCXO6?SLo1EN>v=ex-?jT2M6lZ#UiIiZuTBAI
z7x+CNp-`O}95R8S&pv32K9?L++?3i%`OBlDnI@FB#iy#DS}(Y_iXYtNL5WL^?ue?d
zJ8&FG1oHCU{qEQsY$`UPq_#xtO>*=SF91z;)FRX*xd04m@K>_4OuKY@V%#FJvlC(n
z&S%iK|4=ViF)-+Gd+8xsz?8n4<SP&k+nY)R>+x+m%<?`Q3cS-n*!=RFDDRDInbWj)
zZ${R$V?EQA;KIdr_da&H*N(?3#3OXwcvqaZ^XHEfh;hf$G&J6X3nfpO8nFRZ`jM<b
zoxM1MV>p*9$*kbCaD{NbSfK6PU*7Dab}WZ6M|Bx$&T^ueBLH^0_75ZAsmBIi!tw}I
zz1N~X)V49m#{!dLSs#vAYvFP7@w++jFL}P>{`u=ITr~BrT#px-phAuMr-iG5X<1J)
zMu;2t_tO~u4<}UHH?NncN9FmW>ko@49C%@5pj`KdT~g4*j<)&w^1<K<;tJ|gMl5>m
z?2l|!sg;mlKbbpToSjh?zK~ZRoq&a44oU3gn%w780Wy~ZGQBz<gpskGw#P1R*rCn`
zIxFwTvu8s~752J`hf}Sec#izBWejL&ta9rNx5BNWwIFSWewp{FTwdsRGWZ!J2Xv%>
zguTMCKix6c<L-#O!a|{{Y?_nFCh#8(-WqCIFV)GGbGaXW6u-ThxG|+|d6W}A6CE!P
z85FM~hef-5d;zb&Ne+`vMzA)_SeE|a!an^Ce4a<oi*mdk@0~gqe~ms4533Zk9mkP>
z2zuQ&xe6#<uc<9kzH)NNg!UTLe$BmaIuZoIssEy2r-T5ZUDnQT<DoT3Vaar0cRug8
zV!=kk8fE|Gt;~oq$U7G^SI`kt=~y_iPdygyye9UYWS1#FEwE4-TCu`8gF~F2IpQk5
zcC~~u<ysK}598Rx0w3_3n=&%-=+X(W8#UTlclS~8jVGl-Gv!5Xv2Is|>CL|?J=G+Q
zJWpjWDwAeR+Ga?l<TPNLw(ufITX<-HZj^5{F-^JH4x2jj<O9O)iYvd|65;2q{0U%|
zU&Jodjdcy9W8#jURWnYJ?H5H&&X4^OL4^%v33lvXXH~jYOzap-u5D(SZe*V3W%z8!
z<I@Y;Hn*G(=z`FX0-@K^O{!-zH&>lBW94nEcgNWL)2ETFNHH$UC}ZK89MzL^m8LgM
z{lmZ#7MlrZsOfLbcQ3P-ol-T{z|_;kQp?bu$ZcxEnOzQfd+^E6e;i~7dJ)oT2N4;1
z0d_&3c_i{nAI}sD;1>dZh$}@?B}*eyk<v-0P9fFP_V2M|*SP;}7yLm<`Jlo=EgOxl
zM^shGy-X`3n`~=VXEjT&VzOAts*`zJSbUQ!!Y5+JuV_|KA_@;<lm~qbcYTD98mmRO
zgbPW!IvO!5%BRECqIxwj#b+C`vf=D?1*MgwOj?_#e&chN_`EUmOw!tuwYr%bf>d{F
zw!yW!k#@O2P0zS6R;H?2X1O9C_DR1l=2DO)%m7mo@S(;Iz?~FM_n))hOd1R$^4Ra>
zUBY;$Jg$+hDAkuH-@g)~An?h*`HlZawET79L3&^B(SO(-`}c1n81|(5(qVf@{A1u9
zqQn|_?w`cLJ+5Xm{}j;vNhAUivD<-CmHccY|Md6mVJW;fm)^xIF^0>g@7w&dp|&iT
zbkVGBF;*$_S)w>=TieuLNWPMVy63&1Zl9m$EiTy{&oQ~td!sVh7#{FGdv`syhirQR
zzXJ>!Bu;&a5amJK4{bG)mAD(dEid97wpV(tsLysi;UNa0*B~PELAz3z7>4P!=^!8G
z$zF#5xqCeU)=J&UjPuOA406Q;EP;lyO%i2_kb_WntN72)caQBox3VdLZMEJK*OHJH
zR>x@sKG+X=x68}4JML3EsAwaVHH2Q`ZgOvxSE9M&>U9a-0C0V2kZMv`yu?Onz{`j)
z`tuR$u+$#`7_t0nM5aDDz!X5wA}JjBgpLvvr5?<NwxFHu)aeG5Y;0>k#XJR-*?HJz
z(F)q;0(Qpo;5dIm0Tj{*8GSBaT-`8L2&}aP`;RASgfFmSVblV0Fhz2K?Vo0W%uCq6
z$(e~fytbrG+X>dE(x@th$kC4zi^5<m67e&NKj@muP5l%_5-fkImVfW_(ufpu=RzQq
zj;b0f8z|>Ew_lZ|_evpW+}lQ*NC?gKpjd!esb9${IsK`Jz1&btmn?xPj3kv@7if~V
z*OL$Louc-Tq82|BZ=u2dBIFO`legX$sAVL%5J!ew`(-#uNEjL&s2y8@#Uv~SC2UwG
zXPQVrIx$#y<byZa^5oiOT!OOqy)rPB`U)U4ohu`EGf)@-WRlKj3sS;NsM6-pMW&}z
z6d(M~w?0)UJvY!v_Oek@Nf-urZK^<$d&wG<Mv_Fr&`s8qO_+_;daxih4C98opIXrd
zb@PGT=b~v20^{q5c>5cyWqMb`f43vqC&kl==YYB5fq`5f0*Q_m(B@Z~7EQ(>;Z1?B
zc-#WaqfKCN!D=YaM2~Ahz^|uS?<J?~CDs>6VIVb!Yc#wO6n}pYgkDDeGH)t045a85
zJdT{Jw=S*XVs7EwFC$9Iux(?hEoU<CLy^9=wB2zWD|jDuCkM^MWKll0@ex2mWW^MR
zl$eJ#RQfHX_wSa7JU{g0pob@C*0`K$S!sYZoqJ;SgVFs%ZNHYqKSrF&h!Y%L)Q1G@
zK1gAa_0jB~=6IP-Fyhbhc8h?YAbpVg>ctiSHjHB+U6jtGbIoRZe_KDi$9jNZ&et}<
z5V>F=f)g#r>7m!-(5ThGBlO&8*EQ%2j;RQ{sK8KPMp~0!UNQE=O)iSbbQu4qo6X_`
z<Z846+415%qjV=S0@kds+Duk9vr<(t&f;`bTKV?rP6FAs*P&6VWm`bCTH9$USnM`?
zZ@@`Oi5vgv)k>V?kFcozxG8<-e(-`Ix0OGoXYw7DAvYwtRi<mo3_}}%xjX7MnR&h*
zV}3^0*5IhXU`Mv?*b6_j+j|fB<*fpCA6z8IqdIeQnZt_;^<byArf;*8+)rDs&o;g;
z@3tEHacm*_?n^Jn<6lVyXr0DvzK&+Eo58{Ns2A~V>9?*5o^8C&{mScrA>^9AyldT`
zxOq2{4($}0t4OIdv={t8V<NPRm)US-{*moyc7hZy_N>D~qFmGaa%+$Q5T7_uz*&Qy
z(*la_GwEWv{Bsr#!zns_n_dmf%e0M`!d18Sxzz+GYBOrbv-s@vh$d-qd6dk4C9MmJ
zN*rBAY7&waJFolFbZ}**k)>Z%Cl&YL+ifuwqMpYkpTZu7-PR}CHkztLspH3UbSgkx
z&HXeAJ{Z8uIGv&VOJGFZ{aDo*;-x46-YiiN+xn!0kOA|(Fk5)jZ}+R*ry_XpRq+^W
z0~}n7>5-4ak>;21&)f?+zK$m?)dBiHjVGRwm(8Ea_iWpqJzBfg!1z-=&Azi6GHGm!
ze<Kc%GObv_gGf7pG4ER7`QF-;>Cno7`2Rd;#!{E*>Rl{b^5iwOj)pk2fEZxXchXau
zA(D*1fV`;K!up4+y^he0|26f(iGtM&8zc3@>vv*EakS~$=X4zSTxUJx6;<@$S`|)P
z{n+l=?jUf%SMFd_s+kdvvL#iTJ>Ln?&OOgJ#)g$Lg##p2wQb(JxKP=&LOGSI)wy)B
zI747F;XmB_>HdB3TGwRFTHx{V>bBkVOGn%oeD~lTF0jjhoo50+x}y&X3R2L#?Gwl0
zz?M@G>3N0}GFA84qo<k5Z2cLXiLRMa*YUWB)&|Mxcsp*%H7Xa@c{k3B1)Ra7RL;L4
zF;oOL;X249!Lpi&w^kc$PDFjcEGL>-Q<P+~o1}#jD&FGJ6{z&X=^{M<$R`DvsL#h_
zPKT-5qg3n6$aqbqDa&LVsB&4!k}u|A^VDX^#gdiu<X_|Zi`0X8d4p&{z7Pawvw*Ma
z32^|bj(PT?ul~0R`-}eK{u+$%or+A?15>V_PGToFi*WFt{@bX@m#|9Ub-D~&GPDq)
z5&5nieGQui+@J)~jK-sN{!4H^Ecg{nOX^#*i11H7U)^SGvtEX`mhV;+s3PBggA_lN
zinnG-B;+Evp-@ky(1=D6_6#x$q7lER_Jq#-K$5AbxB);>>>$T!`h#Mb01)ImyqMh?
zCqcW4=FOC!>hUvc?+#;|FPg(5;NWHoB#~kK92P=QMZJv<DHOLWl(AwhH;IK>t&--)
zxlm#oZeks&!tj1Jq2m*Vj4U#&b#)?R8=>E6*5L=EByL7$PF0QCw0>xJ^OV#+-T{bs
z{*o)aqeiuhkJ}f?wS8W;o!S;efAugGp5fLKKWlRuyB~A_ExFoe)?X5&jbyJg$VBUJ
zPLBwln(2Ghp`xU=ts|yw<2A?R)eYgH4t)~<XU23#(zFR}UOe-T2v3=wCH3rd%4M>H
zvz2H`6@U81Y_=R9x)<{s<Bj~Yk*OWWb=<fYvb1fGrkorjDQKX<$^__*^~b@_arkF0
zKy`1feQ0z%`lKMN{PeFAHvS5K8d);f-as&tqcDf05P$o_`dwqHaC~NsEwfWS<)<5$
zubZSA&*|@*pOtT`UM#+U(;xS}{s8PG5arVMMNS{h)V!S?4ep+Wo|D{b$)APysroF?
z%Dem9_&6`X{ze2|;KC*94%Cy9FibpcnhY;*c5r*3ZMp<tG~CWXdijLVs(WTM3<wc2
zA0o(h?#7t|fW4i^zL3;#JA5`HR1O|-@%zYV$tF8LzJLiNrzRC;ermP*RF2lgGO7{{
zjl6Jrv^m>C<;89|l)ONDAWuF)FXtL&FclsFb*fw;#@G-=o2l&%yU$XNI&#{1H04Ee
zq)?*9d1R2Wpwn0yOdwYIeB?6oFDr}6%qkACkp^N_)7hijc1)%g9ISuam1Q$t<bpNt
zO{7r)l?j+j35j2`YYLgghyYI!x#%2H0kv+rt!87FswQx&yPUdggO6qUA{7TZruqPq
zl6F{wXlcT|kX>A16)k+ETYMm~N~Y`I31L>1x!E7s#|KCP_hn+kA|@*&-h;kqHUGNi
zJLZG=Q-_3P1pJ3MkF~Hq>KcNz1_bb?BCDheFrR#SAd$hd7o=_!qWNiaS=}dGEj9Xh
zL}6km9UkQ+V1WHzw|J4WrQ$pS7{~<qASh9OVzpurXRDEAF#j@GW+>xGYS<jtiSJu#
zi53yVB5w6xW!NRiA>rv@i&-R+Y2*?{1s2e95s8E@+_lQY-%NnMa%#^;YdL3J6@lMH
zzs%fbW;01eE4D62hjDMvL?6UMpC!Y18Nr_2b=sxbskQ02;Zl~v{d<6)ZSH>vjzCZV
zT9|Ht09lw<X<+&(104Q>*ZdH@5GQFYVwIH}z(^F`b6%%@En$Y6_jN|_Mb!kI{$H?@
zV25!zM>&F7^j5stMhS&=SsHD%W)&8e)<ZjtCMOQ9(t^rfDaV?S3+UGBvQadZWm?^~
z_{I`kqw>-z*Zp_UsgR&mQrFvrvEJ`BBfUO@kD2(%SuE2PW=2)Il4_*J%3@E~jX9b{
z`h{l?i&KV!gE!2PmFm`S<S|9ghleI8`b6&vb$208_XYYZ3+9sb$v@n#5}I~-pkPcJ
zdEXB<V>Bpx49+Ge*BT?v>ILePOq<_JoP-yOmJ74LJT>7Nzl|l|--;jVtD)SxD5Hg>
za**(j!o9{hL+>VWRN&9ig*51Z4ph)u6b4<xb``>T`eWL|6G<VnmT}1sE_34=6_4Ex
zOEcW(%{rn=Hg2AXcJMj3Wr3W$9g&$BO-qpO(&4q(=Kh|5?DfIyBmdECQADsjwv=z2
zVuBj?EGZ5agRKC6hJz{UI3YFNfMKy@kD(DOuEh3qb2^q%(SLXh0Px1;fG5QXlwxC;
zEOJb%xy&z3WtxR>2FyeNou8jlQg5F-981%Jpq*9#4Pc?p$41+f_eOz4uK>HT+Y)4d
ziBadj0Mng9N)3`Ok(-;W;?MX>4)>CiMBAcJA&_ae2j{O;#!%)Vg8yn~!tfLoI8GbE
z{nXBGzYy%p2u^jP6&@On3-f}-%jlLqu&odO9M9X2Hbn62v-Nnhlw~od%B#_eZJz7n
zu&*YdjF!=Gohxi4wCM3=JM27bzWL7l1@M>ige)OazgKnEs#xu@Q=@E2EC*S3gAK*T
zn7!dwo+_4S`E84kEDdSI7on5@yBdy#yK9zv?m1&zP=IunhY~?xOkQgGsYnxP$(EX=
zk14$axa_#6h={+JL(z&WO#V=lrRanmSavC1D`?_&#Z5Fuz8rhI>;83HKUOrFBZ&iS
za!^}jit?`WxUf?BlLrrUw@k09e!2pmI>)3{^~3slyX2fJ8Nj6UHFsw0J;e8+;*4cq
zK25a7KktaWjv;C_N9q#R7bAcHL)Mp00NC2^iGJ}1P&rhmNeP%R_<eA>>HHiEp)sY|
zak1;^)ix%VZ{(+BeV9>O>pnERX}2M%N?!ArAHM5=+d2+&H?Xaqz^@#;i8WR<*RJuf
z43Au1uFj<uaN`P;E7(%!C!s*PH9m}y0>+97u(mW3lbOz>PNS4pSrUwy8dDM@T+C3m
z4Hg^ICVu}hmS5{8E3X!Wv%%XSMqQgGnr^H}j_?sg)ky?mtfb&4$0W9_td&2SNoESG
z^*#Jr#hFYt3vIN{{vsrJFiUKhMLWIU=H3A%5z@lZuUDv-LI}KE7)A#lWOu$DD)?2|
z+QEZ_TrbQLZK%TzvY8tVqJCx5RU49fHe=fke$Ctb;nL~YmMeLdX~12QQCeD}c-qER
zEkNZm(Xy)B=sJ|g7$Yc`nl4NHtjSKVQhGt|<GuV4uc#CKa?|<T|N9&}0O*HlD6h=z
z(G==@{{s%c;<lZFUXSxo6b5e3R7$QLjq?M4PQx4;Z`VD-{;5jaivAro>2A%qSG`;K
zV_7u0?EAKUAOx(kFppfk_DcPrxyC*ea<YEPf~n8&_F`MJM(YE3cjZTUQKPwwy}T7G
zoE(Eib6LPbZrGXs3c`QfVw;Vz(a7%0c7viO#-p~nvi&mFE?+bxX+*LyCymCY+uf<I
zu;OrzPloL8q_C?J1+@A}dZ~(M88kBgB*Z&UpMLQ1jfP$m&&YJIb<k6)3P)JO$Sxl&
z&Xw2%4i?xK5v<J>SyS-)bmY+Ql{lOVJ%>);Es;1@)=c=q)$ix;i))d*jrSrdw&x-v
zx51M~jeRz`Z2mOgJ^0q|i}OkXfgE4h9@P6Iv{L96Pf#;+Akh9lIj}Lt2SDj3!+l&3
z{64n=%H^{D^ASaB(&LIuvX5k2%l=b|5>QV9Frq}5?qH|eH!@r1NFOZe<N#n5YkCXS
zk~B-u`Cq2Y4q=xXZH%B(Bm^~_T(LkR37a%(8m0svrUn=A?@{(y3M#gQyBQ`X3{lP+
zi&G+{pUBz+tS;NWHHPCi^h}B=X0+=xGKxQn2Zh81g~=>(=F0dVnxc$LH^nFyQAjQA
zy&PW8mw5$ab7T8gbcedX@#-eRMvT(>p8eyFA23i=ZPM9~8?p|EQG7T%Avk&BLdv{P
zTD+er<7j)O6X$;~9DU|WPfJ!D>Q*|3X)oYBCuQPwBQi(_fFa>ETh~hVUkMf$HmbHp
zRYYIi_D{h_`j*DSQsn8m$5r1_5EVMT9Wm^&6+WBWUeV%R$&65mNTo*JsMe1&Pt9^r
zWL@Y%b-srDVtN&%#bkp7$g{l8>BPD4k9vfk=R>bRJioTH9S-qMNXNxJN_A#Y02${b
zl(73rSww^{AiH&sbZGhHCp*xV;33Q#ac+1x`<Xq5#wtjwrJePz?sn)Y*S=r<yh0l9
zcs$sw@;r~1cnNpfSm_N^NmvVVVh*h{MUO!jxrc@^>I7@Z<1pYkLYo%{ciIEAyXV7V
zH3aYMC9&!W^3#?r@B$!yl}s3AbOp6z7v4;i8ww5F0GJhJ?T4szeJ?7PBT69@+ad+q
zo@=G49zra`1*cF*Hl3v4D&On}Q_7R*Sn|lzXe=zU3vwUHU|9(#UcG-cKE>hp(yY~h
z2+reu-G*^#h$X=e%ZFfEFeNFXo^~ZfL#@MO-#CmQz@XzB1-bo@KdO-23E#Iz%gkx8
zLCHbjqvay&BK1;u>%Cg-j}7((P%_M+WQwKv$J|x+NRCBSdarRtCiT=G&dzDrwQ{~&
z{h=*b*KK3l%n9hzcMTn|vvUpgqWLgb?J3tC8Lk<gHdluI_sjUx>#!|v>(uM;6UiXB
z4L^cDI$hGdEzX<JU--5`1$a*SysYv4xSIeANU&|v?SRgcQVLIjEnJ6>b_tKQ6?0W@
zjD9zFvh2M#(ysWksx;z?Az|^oq{|`QK8DToh)O2JoRGAa9*sI|f5D6#%s()uX8hcl
z3GjAY)VSSJ2~5c|fG?Bwr^r%^7q0Ohc<WoA({4E=#+bPhbnys#b6@Vrc>=6FKfAtN
zK2r*PuMF}jZ&q3onCpFo==)@92Hsw(C`T%0frj7$ng~hG!A=8!txHZeQ5B|0@k$`&
zL}R2((7;<Xbz`seq6MW|k~1Tm80Olcf!t|eT)HsD5VD9aId7Md_xBvN*s^%S5dFt_
z7O|1$*evpV)(r=WEDuA*_t{#Jkx^Xljv+tPg)k70WPRn(^YS()y@Xg%VrjTAF@Rb{
zV-V@ZmI2IDaxuLKnQX~eN|m1wRam3?gORY7NFo~OLBW_ZMI_^fLQzL?j~Q9wbW#!y
zX=l>RjL&|+t0zQ^q5tF*nC?i~9pW*_SC&tnQ2g_8Yt~1-U8h~nz37&8M*Kp^&Bxo}
z6cs(OeoDe5EBb-sdg4*}JBOc84R=$?JrkBGg9+({LklaI8gV-q_^EA#@o1)EAHjAZ
z=(pba0|#P`0PdQ3<B~A=R4TEC<ADyI<P5qsj=M(M_)`33NQEG;Ui)UmktU^jwOP~C
z<+AI}vSNQArO5?nPUUE^<#{Z17K>idy;Y$6OZ07UOz+y)30nbKMI%cs`5z>ai`|$%
z;Ik*nadyC)zwuHA7_Bn{G8p4<BG4N@3FSMROS~vcy{|<l8Ov0bRe)7eh$q9VF)NLj
z6w+d%Yr4*lkB`xFsdup``Ajr2-~bkRA@948Pd88+1vJC*KU^VS5o6EIx2F3v=4e+U
zs|8$hU#Bsr7LN+`iNN<5>5t}+ZFj%K@VDWx;hy~y@Bb7t6p|i-@G(SXP1twiKWlJz
zn<vM^tV>y^FW2v^duXr}@kV9F%MJgQzvix^y<jadUdia=k?u$JLva1L)j1AY`;uKf
z42ufSyXE@SMl1%}K(>bZQ8f#rtfPrdf|P#S(;e2q%HD%BAWSZstiv4Z*Lh88-@q8N
zfB3~HA!z!l&oSG=2DnZGchC_09LQ%BkW`ar(V!mzFNoj(vbzPM)A#ut!E$b&CENbx
zU)*kPr-o1$cbw0)coyjI*eAXUo-N>QhX_mMFUApV`77K4q6G-jJgs&;U7o>&%?VWI
zAz+vvycDd~{d<Gc+<}cnwQ4(6LqSE)iq*el)coegvJ%#3M_?$c8-Cq_YWjq|B=XFg
z_SR7@g!7$N1_Tc^Y$123kSdWE30j+_2U&R~^Y~s^UZ8!9n0qDh^jCpNqSF%^KieR2
z%zC1)rlGo!4M7HtwUm$x)q=PJutu0tnvsIxl01(_3mO7B1hHcD-M&mE@O_>@!AkNS
zIQeguk$d6uWCaaYYbKozMFtxp9g4d=YmL8ltZZ!X<4|`TEde%0BF5gn)zb@S-mQDZ
zQr-t~TI*$DZX9ruS#z^6?c%@Lo2tl}F5LSyz=3(Xs35>{%d|on(}*H3yOr2voK|g2
zl#pbU(#W^u{juTT_KY;TR#r;OwBCMj5xukB*7!;z1zD<ZMWmaf!OjyXVIqj<FgeaB
zE9tQF36N9D%fvHZDUnA)eaZS>IBHoP8et$slO02%_dI^(8Db%bYM4s57FeR_{{|b7
zf}t(e7%4<jWtp|UTk}?VpaByVUIwlLr3?6@qecYI-fOENPfF@}x3O_~S*ttSSecM(
zcZKxpDjV<EfzHDKskvWeaC@+5unsa0tv6jb(Xj$VefKEJ$KU$J-9J9<@>820Ca(^h
z8*qCBbq<SW-x$dc%q9w=ogBr&hdJ8weS2=)SjRUMl%JGzNAKaj&8XSmgl=|VW0t6W
z-n4HsJu~jY<gTD*Bh+Abh$xv0!=fZxz>hZZLP!5qwVWDkP27ppoIor|E{-n|5x!nw
zJ=x46jDuM9q;i0iy<DG;qyqb9|JZQEdw@*rXfGSqrZ6_mo?1idCNpTldRZW4qnlhu
z8CrsYD#7BUF7@|T=tSch{-h*JBy)t=X54ayMTry0yN^=W4+#Kd!7AJ!KL{##eYBb|
z=&>r$u-_ReZVP102@PMbj2r*s>eXoc%Ugw=90&Z!qvw{>T&VzVl=+;7XazHb_BOmU
z3dVX3+p}Tt+nff%mqPoD%u3L|z+_1E^dTbC9&yZY``aJfY{Z@xr$%}(>Cm@7i^F00
zRl=We3sj@PFMc_*xI4B|S*@V&XSAyIX+c|7j-%BI%#+rP({~cusmn3Jj*C%Z_t$Z)
zvXa}9WeeAr_dt`gb}eS!L<#I{@>MnRV2s9R8rGZ;B2}tkNA+y4Yp=kUn*MGwg-T_6
zXHp<srJ9MKUIX#2&6{E_LXi|DbqSCAQv3G+_^y_I$Qb2cLlq@n!nWjEYE;Y0B-XFM
z3KU~MW>?BThCn)SJ)+?<4qTH3<gjFDf!B6YMIq9<I@(0kl--ip)2!H?+VW=gf#1-D
z6m*g_bvD(ZPuAue(Q;!CWA|L)lx0iR%?->hELz0KqLM5+*=daY<FFFmizHpvhW-_7
zG;(w?9Dh}X6yOLYQr1Z>(k{(3PnUw4DZ)tVgjqBWlHM*$DvnF24NEOIypeG9Ro3Zs
zp62vLEiy=!OPo8iu;FnuItb9dAL-KDrgjx_ZHO6>;k_)@C?+H3np5VXUEi=-XGH=~
zEYwlx!V}P65alO3&5>7UkL_i&$(P8&B@4O>!ySrjh(KxOO%|msY9QGrOC^&nb$4XU
zbVgaI$|a<gr~2F}l6P+ubpov2{eQ>z@n_E*U1&CTqU<XbZ?jG;$~y|D#Ai%+4=Ir}
zT&6YtEhInxlhTx!>d4HRy&5x{j~*OYPkt$D85l=mH@h1V8gReq%eG>riu9vt(hMc1
zE>Q?UC1JAEwJGr01Jo<RBGW?0<Kejr67ux$4DEd3^@&i@q&AD&8&~My+x%2?WPZW5
zyD#P)G+AmEnz1N{x6a<?WWx#jvH0+UyR*~b!|sHR;P!DTb^3Km(!aepm|YKj`&=|}
zdgS`K`YhZr{I&fzHpqlwKNJlrNkRKKgns~AVs5WPyic?}yZV|L#qk;d6*iQf%?2D{
z!(64nXo!eD;&g#df=Dy%KZ`9)MmbQUrtK)BMq6U+lW7^N8#ho|c1dsLzCR%8qS@59
zQW|1uKBca_1}9a>)R*y8VToS_DC*Q2MoZOEb7jJ^HK>j((8_+Qm{ul5EU8g%J+79!
z!T~TUK>3l)GS_yV9DR0Uj#r3#7Uy@AenLX-+xl>3y+~azKNcj@pk1R+$Xp<O^JP$S
zh8fRuz8QY+1zH1tC25X>Pf5p=lBuDDqECO$@ZX`L{)y;RtcsT5JCWclLa+7;NP4B{
zCG8(MWW|aUXM@wrXa}}9fxexwn$dPTsAb0TI<}jAk>rjVZR>SA`1QhuVb&MZb=ovo
z;=jihVilYfq7}j=aJWm>E#c19eB~8f77Pz52aS)+OTkU&E%DlTtFn(hw4Q*ru|s?~
ziTHQ70D-xUP2U2$sUCL*{VaGJ=!djPm>Z4Mi2^Zh+yuzn`}FY7;TaQQF~I4>=t40s
zq#>kpx_zSEuMBgDAw7=t<u!PkJbHiNPh6J%YZ8zrpR8yR#*2vmtIIy4`#DtP-~d$Y
z0Umzi&D{Y*JkHkK6UG@2@qLGFn^dVYw!ReTlQYW2JAlGT{J_i>J2!xbS<IySDPm%R
zf_a_95PmvhTVg9$*iEkw%SQzMDJTpc&j~Ldd-(%SFAhDP*4I$Cr{rVFq|leooI7}w
zR!_5X+18Df$oT+F7_axq`0&W3@SFcU_Yi|a0f9iQ8@PoCKf%sOh-?+1I_VH&s7XX3
z5k+2fEIgJ_hmAhnQ>8ohHYwThH?5&#jbKFk)6Zp67ZXNJ_T~Pecj0}@>lqI~V|a4G
z#KQUEy@~E(|5!y#mh)}9j@y1&rZC)A*w|tW8yp1k>KW{GZa<=k>gCeP8BIye`y=xZ
zBEhOQVa>o@*8n{KZ}Jb;wQBb#Tc9xm7Ik|*IxmRl005SZn9#AvqbR8M!YxavH8r>b
z-27$wYgCWr{cH4yN@pZ7k6s&H$7O0|{{4^iS6$ZK3Y+}Tw0<DZVNWPmbjmwZ{7)P)
zdsF{v=ejB*X(b5wq3k5P{hPf=qrR>;ZOlSjp0t^4FLsXac2i2T-rIDSV@opbi>A_r
zUGd|okOGC)*Ye`K(fZ{?n^X%~ZI$=AZJYaQ6RO+AjcKY3-4LF3Rws|=E0jXlU!rC0
z1@r<j!J=G5=>oWJHGYF7acx6eq~1$XDqa%E+wW`gVveObSIYxtsln{|O&S|pPfG*a
z9%havBk#+x7RxO?JZ!CN5JQo}sV=p#F*P^3qVq@pGPu&JkV$J#TTf5gOtG+URMdNq
z;O&Tpn%RwvhKA@ES&<OI<|o|bXKYx%3$e~x6ew4uJXxUC9>_=Vu~VtJS-G6WwUqOY
z21#b^-bgozvt`Vd0S{!$Sw7zu7QcB=cD|L}&2`W6rZx>y0Ve8_X=Law+qL&%K`Chk
z^$5x_{j?;!H5~AYZP{MM0?=HTteeUU<ZT|W&K44>#Uatt*{cqNw3m|Adn&!DI*-?_
z<HL9m>$ht?d6kfuLVFI5k1hf>Jq|lq+}_`k6cN|ifRANV!}?LGK~D9fufh3YzefV~
zW;cj9=o?gCg3riXgZ-kxu@JL>S#C0K-B<WQwcs?+0J<LJQNkcS=#e7*NB8#G*@XF1
zs2|ta4_kbvAF)d(`af|&^X$q_<JWJmo8zPlgtX^yJ!|}jA4uAIVS0)V>P^?m*>hKF
zNNoJ<lSz8>{|7xl!oTF-(aJz<v_F~yF*>?YEQzvI6yH-6i|>+((l5dO7mHG9vLu!6
zE{UZtR}J`ku5zY&sJf%_Ty^VZ?NGI*RbSXQ80_mmo-U*-d0BDuZaGuP6mtra3zqIV
zZ`9Cr+SW(4arDxE`E&H~tv9{=e{8)et!dhsDkAXnmCAQv`<}|7>V08#y4p}pRa6Z%
z2T0O~{WaB8GKOl%aJ+1)20E=?^x67OwfcR?BCKkE)!*0e?^^&EFUgjb(oM%UF=3Wr
z>!P){TK#sly1!CEGh4S^f4z&$t$#X-&MYoIRH;l<Di3Me$CI7=HEn;j`Vd?VnQGNg
zt5!8_xDF3!9rW+e&$CGc#l^@Kgq#lrCabsNi<kcSi)7aLGT+|DboQd9{g1c_=Ih^+
zEjnXqTVLR_ZO}f=g7dAGW^MhTnVd}iN8CUJy!e1{Y&7q!O}P*xJZR)>Pv%jKdTx>O
zf!72q4q@_;ISnruhTOvqT<zd98=b<SHC7pG_6y_lhPgDczK9t28_-nwaBKDW*d^nY
zrOC-^v)<0+fezHON<{*?wcbg$Lbyt9tQNa<AEi?5wKvSJ1<};>WX+#kUY;CBOoE;$
z+xhC|%J{B^U!9zutOkX#v4W;hnx>tdDVKo>oAm45g04u*+cBiSht8lEfpH4SKz$PZ
z-ZW`4B`ulkoV-QI(ek-zcOy=JZf@Ei@4elv?Pz!{g=j=!hNbbDLPidVcrm49b8fof
zDm(j22SbJW6K_T@p4?m8Sg5*=K4}z<bYNjJqvUqoqPXQ5+X(cOdztHI%AMJuw{T!7
zoJ4YNdFJ4a7q3IMXSkm0`QzpUdM{ryW*Ghyhrz3H{lk$_xP~L+SxCf5%-wLhJ9=>a
z;gj>TuP+xLI(hQszB|$U;DdJ*ME4Rl@j(?4MlwovY<4PinJg29IAHa4j7{i@B2YO1
zvDd60KlxCubWeBb<U?Dx-m&k}xxs7p^{3cIO3XekVd~2c5>x(4DVqtXGDbzkz%-jR
zMag26kaKgF`8s|9N1BL%-blVYoHzM)K_8JgLT6@XHq6b_$Bv!eG&g2uRu5f$=uB>a
zp1EtLJoBCJz~-)(UfTN3>IL(m311(HM|l9`;~XDq#ply~y8UJ&PR3-sb4QJs2Y;Y@
z4=-+9ndbp4<>O@uU9PO-^y|}n1uq^4g07IBdP=H_^btlIlGLE=o=<=JT_R3PQb@#4
ziA1>Q`Fu4&D1aMBz%HiIc8tkC9H_Jz)u*C;#U$I8&I<28VH&v;@4H$M(r35MeiN?&
zcY8wkpz!O7Z|iHq9|-@q@QU#N3O_>_HPIZ}i%y_B(VNiQ(0kC+=#%IR=xfQW%78Dh
z!T*vF%f^7S75MgGC+sJyD<@HyVJGYix_n5r*KZ{8ok7UseZVFpx3DBmq?yF%FQ8?y
zzdT&Ah%%o~C+P%T9*Hno#t8bo=fiD*AMnTqzG)`mp-E6z66r9^4oFqli3bfSfdGvp
zR5au<4}9JhASny=`63EKqBi7djc7PaeHp>sd}#)_zsCl><~X8}nXJJ;N6X6c=K%fV
z>n*j1i!t$x`Q(<QN`^}w4f=d47;rfP6)+@o{GwpEc#_l>o7*?~ecn%^K|dLIh60a@
znJl#gT45QHHe$<sxv?NwNhyIgKpFYKO>>Y;!08PmUisYnAp#mk)AB(;FDcOg?*Lre
z4U5K?KWrAlE+1NxL8n<vF+^KqZVJm4q)0&MM9?#$$WkrKmVKzIWI<RyDrT5kC0}UP
zjp>ga$=b3eON5UeTFjLs$7;HO<Kb445>-h-K3`$3sB5-pD2daC$oN1YBPJ8hHdJ3u
z$$;K_vZxb@O3KzjIUq7+kZp>2s+c3BBifRx8%+L+A9+(NlaohimFJ4V=JpGK5{Vqi
z<WhoI=*fI>>e_XZZpnOEBWF%BE;}@R*|-X%SS6~bQA~(m04~hbS&Gsom9SkvL^WBe
zgC)~;m>E(F_xlquqDbazIzjI|Y<TG)qk92lnVO$_?`JX8hbU@Lc}OJjZ2WQDNvW=s
zvCZ1&a%&ZRskilgO_#84ONLkf>vUOC>rQ5-^b^elB7>>MEc98U?iorbin_)^WKjcD
zSdNL|7{VE_CcvaZDltYFb7V=>5G9HyJ6hEgRm`W*@zuED<D_<5B5*c9DTsT=u`VMi
zZ@HqRRd<JV&?GWeF=LWht+@^W6-=<AV+5_^Xqw|f#bSyyQ4*onDPccVa%x59!SAvG
zs-`K*qS(Tv3QE<CoC5hENv<?xv6+TCZAnhGfJ6yp^62BxJmsmWa%t*0luA3$Us9}$
zMIsg2w4oxkCW&ZZmjTL(Eg6+%>GGV>8yERX!xak6Z!iqzmx3;|(+1OI75}y<8i9jp
z0|Z{7$i6(6DcRuw@in<Xp_6cvX}YS23SXmHwyOxyR4(It7;2J_7a-itIQ5`GN!fKg
z<fF$5hMTv_Tkl7qB55iTRYfm;Hp<wl<49^g>*xPj)D(nF3EGbBK}B6rMVw+vIDt~o
z7#Pyck<a2!@WbfYB<5;{$0rQqt*WDlE5J{pNf=)(1UfBk(`FH)XS0o5uJKd8$)ZEe
z#a2<KDZQD_b@O_+;e}TnTDWd)zEsp*GJeyqWgFS#df1{dEK^6z+F(;AGr?TF$wS6v
zJxmpyvNSnnZqM=Bo^ulc_FoY$7p@epc{Lg=jFQm+zSa>+!diz136KgeVmM7c4#$^0
z<SU(eY;-hSKLC&N+g=m$ndcvT@c9StMM_G^)N5JAQRZ9OsqFu!v7hlVbJ+Y$;_JOg
zPdIQ%$}f&)`G4rEk3Ra<N6{}m$nTePijoV<vRn@NUTZ!(^*8U~^Tgi+dA#otQG7(|
z`)Wy1N~&-AJ~EO}=B>{^$}_njrp5-;vM3x7ZUFn#@6K{0S>;Q6(x~70xlx(O3-}D%
zYSS;`PB-i<i#^chXz1Gq-e)3c)u4oWps15TK-3&gf<w<Y3<F7~iCe8(E*Ly{{XCCf
zFx6a9_H9cPQ@NB*G5TC4?pCUUewd!ER%g>M5RoY=C>-d7_mMZJ(tlhghKW5=z$kj*
zJZIL!TG<ITO|tTQ<$X$RJ?GRZ!%8KagKkRmh6u)0G<JwGqdZQ+(LkA@|4G?<fLV4`
zXQFrSlXE`j<{T>Cy7^Xh#m-&Txz*|<wYnv>)RIt6h$I>XKtv%CYz$boLD+x|n6VMT
zMwsY%HpT|q1K5KMHe<i>3?6^BA7f1QTWg<N-PHo-eXqhj_vEzqTK`&mt$$r`FXe8J
z#ykwL4jYNVruG1L=c59{aDm2)$2thphm2<mG3f`NI)DDD^RF+Cjon=slXN%Kf3#`T
zKYj3JFFkxs|3vTJgXHe>Z@cA|w|)HU`rNKr!<em@naH>KhpzBDpS@@Q(K}nGW)IvQ
z`#-+I+O3}$Ps}EEU|u#fN*}av#CXOo4-vd*S>qC#MilLBB7Xn3lIoU9p^^`#)G%#N
zXPduPQaoHz2q(2LWlv|CFT3@v<2z5aZhmU{zFmi3{@~Te9(d_LIR1&iYKUez8mm<|
zW=hGi+J~RKWpLec?QQ3`-MeFb@xBvRKlt*)S3NYsUkRNi$o(w8D={*dS?)~y9X)YU
z;}hr4f8rC<Y45^?-u_Qq`j$HX?ejOoTngv*ed5x$^m&Ysg8ux!S%3DBll9Vjiw_td
zczEeV(z{u&`pVk=WIwZizm}>z{KCTz<6Qc{0WCR7g8RYV1F3!*Rwt_uzw+USFU=(q
z>ct-=EV`S#gvH2pp%0<Y;B?|PR^b3+07)gb<!kW}8O}svy&*MXhN^ml(UaqE7<B==
zh}Dtdh-e9oH~a-Km!~{-G3a2Im`FzU9D`xC%V!ct2Y40~rh){VM8UvW-!#w7ytG!x
zSMQr?xfR7bRlREx%L9zxQ9bLa6>I&Ewx8Lt<IGw9&@gi#PdP&KhcektElJGMu~TEE
z<0seuY+`<5V&2L4dZ=d_8M4JM`Z-uKp3Gok=LbbNk7t@Dp4o(NZ>(7}GtFtMTzRln
z$RPQ8x-j!V;mme8)5F7kRC8=Sth6Ujj<GYm0*^kihj<x1G`vj4^GY6`vCXnZV;h`Y
z{0vzj&x6&_L)#E~b%Degs-Q6d$hC*{4dyS3V?=|HrH0l<G(`C9h9lgH507}IxnQ56
z7c75npHWfteZhP&V=H1N;O%y=rD{P&;;3$}|772wvQXJ~`@U`UUcH`n^3J`17~nn{
z?g~fP50<DKxrStNs%^@WDH)n>YhM`btISvX`}XzIwOTq;b8?&WSS7|C4E=X7iadU?
zxaCJqgs4eIiSsd^8K80``V5ybLw+zrF>~v=WHFg6{?ip=<4<OG%*^a~HE)|?&CW}r
zX#<#2biZb_jI7bB>hL*ZR02m`FC~+u=!s2o^eWhOd+Q@IFS`maz(g`-0603CF>>*)
zW=rP{&DzW-gnrOT<{i1jKY|WlyuMh}Ad6{ZG>F9*K|16YoaoWhryor^f1E6jTduC!
zWqAA9qOBUPHBn9~Npd0Syzca)kDh*=lU)CosMv5d-PKEJ*UJ>(i{^|KBZYC6{V#ff
zyfv{8Bbr5c6;h>vwm`kj^6#Yu((eY$CP5w|#?X3c0j9Z;3T&~3b`ib9A`cey>4k<P
zPS!iFc|=-st?2qlZMnbd7DeecL&}vzVP4jz-(q{Bl2>w`Ao`B8FfP>nd2WTiT*&L>
z%{mz~Zaj70_~*^H)Cd`Vdp2wl0GI}WUioiXV|LL{Uk5$aAcpR5^M*~;5OFolze0H{
zPtukFXvMk2M}s`jS;nflD{&-oDsg+_;l!H~Z%;g%`0d2+Ccc{ZI<h$pH!2GVjGhW4
z%y1(+xZ%f37>RG}oGv3N;3AQje<H+j=6-{95S(R11a%RyPj8Y9+2Oj1ByKv)3>oDe
z7YI5sdNDgN%M%)cq+-V(Zr(14SSmj*VEhPSV`z~Y+oHU2Bs41Vl%T_icgOCdaVqoM
zk++l*E1ulLCdeualR4YIN<c&}1MH+rU`qh%r5d+Qwq@BaUa_M`1dDxPle01&1U^=6
zdpkP>thn+Z=kEX5{bctQdnqy=_&0ao@pnv7<S*?7mvhzS&0ylOE0E&z%Y<6OxFCXE
z!Ao%X$8G!Y=3U>i>6WCwqHtMo6j{*l5VE!D9<DgbT_3yuW4qZdqersGwnus8Uj$?G
zQ-EfYiE?5J^b$+*hpyMCn>1qHLe^Gl%rk*R9ANzp86nv4vHg{shugQTl>RszuVhkD
zJ*u?ZyV_*Fv~Xx;?d}wp{hGgjV)@iVV?TIss#U6O(})(7=3zV7s{P8VKH9ADzgay|
zdZaNfzsh{$wQEbvzeh)H`6KAd9F=5g^uU0Ry#$OSBX&KouP8Mz-6>?rsElWoNG)h5
zE%e&VaZ4D($4U&eI^9;-4WrAyE%<}B<RcSu5cyFHe*F&4`hZe{FbDzAMn2LcM{t5x
z&<X*_wqZpJHi_`8ej5%D1wQ%Fw)?hU`v!~1NjYakoHJd!)|*&VI0Z?73p!Y2qNP>O
zW&rD1mFuCCb41Kx+Ek$zMw;hQ!joJ^poT7rs%&WVay0Q3KiuX80{s&~*?!-)2ToFv
zZlCjO;?&q&IU{-I4O;@wZ99%ZJrL}~tf(btJbkR{n&qrQs0bEMP6ZQEGAI=lfrZ&}
z8?noyKYHcK!3rF$;bM+s{Nsrq2qc#AUnl<y^ly}?VSW(fXTd-$kOwS38(%@)6LGAq
zhaX@?kS&X6Cye^y@qTmH8JWNFiMO36*X^2a6?W$*hJ(q%?!rOx%WE%rxV1OGEWGvH
z`L`|S*YESVz`o((8|;Ad*1pBs@b81Q{+|=2#6+TlY{DdzO3dD1C2vNFhUmfq`;nlZ
z%NGDHQKU=h#)XT9VKgFFBHyoT>z|xi-r>D0`O>vr#qv_Wkap(|_IG+u9KQbU^;OqU
zqRM!*dh$>5GwF%NPi~*K%#@WO#T~2FuAMCIIAA#rSFaQg7tiks4_^HeVKOz>_{Z8@
z$)mb4@%x#n<lyP_T0L(k%?;i7UBJ7TU)6#Bm#0x>W7GgCzVoEEQH*ZTVEnsGTgANK
zfM}*QHR~TTec#*?*ajNO<T;${EeTI>!%AcZrYdoQQ5|HT@QZJqnb?Y5>XoMNrTkW9
zDf5rMx&D~xFP_gYX|ktxch1a5T1L``xo#=uo+w=WJoz>9$;291zxO2GjN_?rZqR`J
z4W=5F^u%;Hs?{tFMm>=cR8?SgZ22O~e|L!`^q90syxtNk_7D?1p_9#H>E+DF76y54
z(7>nwCXa@L(1HfT7?xwoh4TUhGtMx{+}PNbgB@9sbJgU;tcQF>jZ;MyhFZ5oBATZ9
z&$9disoiw-d~I&ej)j(+t4&QeJzi8P32UwG6;b)V=nL)F+;vnTmZkPrj~sd0cR3!T
z`dr@TT}RLa>hq$)@q%!Rs_>kcx38-W=f>Le7MJCed^%Srp{Q7TCY<q-da-^-qh7ZZ
zmE+~lsQJgoyz=4x#Lk9cw#fvjAWqOz9<Rzy;825e*FP=#Vmn<wvn;@>)>=)@zlnn@
zkR{(0Y{7Lz1J14rLSmGA^BHI_)1c)KB+fy5U*MWpV92CWW1~JG$}hlD_?*F*<Dx#(
z$k1fazGF|g6Xkj4-}Etf28AmtiLk`s;DU(V9dMlj+Rid8er<KB&`hG1nX5}ivooDb
z*Sa<LXg24lua~MvXIj^FZ4SgyG91=d=GGdVSXFc$RE@@q69#BqRTJtm1rf(vk^uro
zM6u(W(%6cdO=(XXX-S%`YC($Hlf~Rr(h`o3bHkjXrmZ(BnZo$E#|y+X(kePt36Z2g
z<vBsCBl!}C{BDF-`3%z^4m_Wau{hI2trB3JC&8%@|JHZkK|1ew;2q@oTaK--vvH*V
zAYUYpCa|#4s8KbV9D<-Fe#l(s%h=73!z>EP^W4d6mKzzs$GT%FLOxK(f_$j-^rUN-
zX_nF;XO&LxB=xQLzI4^AOpmvmAS2h@q)LQ+@3O5vosI&J6L06}6=Mu)JjPLLKwp(2
zHj1&Zvhv)@%C$JQ@QUY-9eeKNi)%JaC6?jMv;9~}ykYNh9lj3Zp@@e?dW)Fh)ElBX
zAHkAx4@s~qQWTR_ERzO{^_JLxG#f$rj3{y4N<Lk3v!L*UN2ho)tL*@Uan*U7J0zuG
z+2N1}E6C39p&}Iv5*q>O@~R>hLbH$xYTR8Cq3INlQ6%@&C{3!W^v@}zAtAqz7pZu=
zNVxx&RI^z%S&|(`X7^^oz5O%!RgmCwiQTLM6IiQK7;IG00yxg1BN(y9pc|9q)%%!8
zJrFjH@gXlfHsf;4W&s#+Q?)npTqdt1xmTQ+yMC5SDfvuj&mAmK<$67GqR6qM6WK#^
z_WE~|fTUD0vNc!xOXOAwUIONVBxPQffh9@Xj-r35w{^{2J~_T~!qALX!ye<_pwKXk
zN>OC{ui_fkt#%}8rtCzTdkgLy1W3}7J)*jr6X7vpo0Yrx73P!3B(`CuDH|IcQOfi-
zKsjnHxMQxB7owO0EKUjRFbLD+L^fC$g|&@Q-nfLtaD(XwHznT-E6Gf8HmQhKskv|F
zD&KqE$<<f<kjM6H%ep>!YSqmO!uZVMM78R3l#_hF=s0CDHSLj*C&e3!73fX<F*7CI
zysKK$R0J?vrpL1jrtP4=-1AzM&Q#^<ySA_2MKSb9Af&#nv9M*bSaH3IAfUWe4ZRuc
z-kLd#rE<Dkd^fjxFc%o+!cpV}xm?rczc8-V5VNzfC9otACc5gQkjLn9glEK@A#vt0
zdDb$(uudNjww~x9!|U$5E1!P%;^e`l<HwiwOwSii53hO6Yp&UH!@s68Q`f(<xxEhP
ze0A#`cNX>>Us^i8T$$;==67E+&)TFs%5l6@Bc&Dv4KH>_^}V4~A?Iq3|EH_o9lh$`
zn-l;3s=xSJ@-L2(t*<>>f9sa~U#$Q8mOq3&-HXqY|4F`(IGMN!bSK;kOGROPQ>=hy
zheZXvc-rlwo79&AyjMnb2>rE!MPj7j=j>5qG48P!dbsI3`3K>X<%#kqg^W-g{ns?b
z2J2Z9LqTvTp8?gQS$d7n@-?=_`j24(e^1AgXZXK5o6hCZXa9=li@y#3MfQI;@__ir
z$IbH#GSAmHR`9=F<b@TUUlHQZ(U|>z&_~E)7@tt}S=KLtf=ZswlhIAYE^$NxlVs$u
z!WZ2MmxLkcug*rTzL7nEU0p)H?E;~X2q%$+QTU&7Iy5rMNd^8gsfM36ZxZXN+{8pK
zRTl+E(0K(Eni-^AU*g4#qxq&{B`qf-=8Z6|kbxqc{F2J`k;$NHER-{NASE+3n2Pcf
zTPE@m0&dy#j6&Jsi0vz;ubC;+w@M2}1&pmh+<q@}!&*2hUXAMrcQ!anLUaRTYFUTu
z3awqctgkWy(dkwn>g=liYav|AF=O`s+0*^e8p}r?#ddg!Az1ZSV>A}s6ph7%gA@zE
z2ID^(jvTkrh@ma+9970uRcF8q)PZ>AEcx}I?9VpV|Le@Q;e>Nyu=T8|d8Xo7l;@L<
zAg=Xl%T_*A<v<H^_(-XN<rj1*pO^JeDQ85@&_QNMdZ7F*pJ{}R+3n5AWwE<_;_L9p
zG&>_2hR)lD@AuZmOLC}0q8yCRk3aOfStZn_Z=cozs;yo>1~b_`IW;6|jE%oR9wEO8
z@^Q;X9Nz#iBXq*Lgfg9B6*fG}YKT=tWY&?G*z5OLMm`RmPb9BfEid#Pzgx@9ZXe&B
zD@7jh!rf#{HK-KYy(4!Vu@)<(l|yIJG*<?@WFlApLaw`dh!_Rk+LLV5$V4TnNP#!-
zBEi?I6O-fC6j?R*WE-umqL`HB(9Pt=C}Dh;pryeMq6s09X6Qm{IG|sB4BBtfUR*{<
z8a9H)hUTqJ5;E~hEt#Kc=9}B+a=GD->8Wkq^!pCJYAtj6bY_jdngo-_*8lgh$&=lK
z!+M~EgPY%R>ufSPcYg1Q*L{37eciR0)el`@?JouAZ@~Grgo!o5m@^xT%SHXD(#X-_
z7jJkwcdT&x?S*4c^*Wu;o`1)ej}>pfy?E?v@9mts?Ocb|dHauxe+F3Xw-O>dipS!J
z!**pj=x{?1o@$q?0U-Ap5iYuQ?y*_UygB#1A88->>~)EYy!NB-&CWhH2e0IVAN{Db
z{?8}Yzx|wY)B3l+W+=~*`bS|Iwrd~c>py~gMef~kCh7BW&u>hSN?fcIi7%EY7G0`!
z`xOAO^+u2<4fsy}#OKq)N`7bwzF-aWm0_CqBcZf->gH36C1L#?6BFN>zG=LE`yJ0d
z`*3o0rjSl1(}kJYWc}#ce5EqKc655nlacKfQ)TzIEhEmN?_P@2iCMic=5N5_Hecj<
z<s6W(_*g4tFwI~I83olXlZtTpD;C@%&!^n=ce<&ROKx*hHBq^1aq%t%Ea}_C^&hXU
zt{xpcNZc=e@r!q_Jotti$pe=+O|3r$+wARh_KNH81Uz1=t<~#KPdzZ2uK!!Dc4fRu
z3i+NL94RFMyy-Gvf22r@>LS)ZMzDZ!MhJ5GV~-!|2Vk2WPVW*kQK?v~d+AEjOz()O
zs)SX`-Mv~Th9T7krk+cUk!P|~ON%?(E#b&+fdjk9w}R%@x!XCFmnCZ|TY92k6Qams
z=6pJsN);~EI2=9CLgH4eMG+U6VnPdK`-{EVB4Z3Hn}WoK1~HR|F@$tGfrz!MW(e3Z
z?ae7ZAp3Y0q5&A-Cm`F2VVj;Oi^dl=ySZ0FUf=~xnB$Qc%-oThOq+UG#CkYH%7N7)
z%CeY~WJBhSq+RYRIKY9fjZ#V|l1bH`8WXZ^s-^PXO%CvH$Yms#M$aIaBg@WmvNkbZ
z40J*kG|}WG1M4j5s_jU2%ABo=I?Q7-wIkp=Lm7c}YWF0rA4S(zP`l&M0J+3p3c8Mu
zt+rvWd^vcJmB5acq;7|$CR5yx4X`3f1Z6c$DpE%o>&HGCOcJz?491$dNT0zHE~1wW
zZILS5R%=HF)mAD5Xzqv>#!*V*vjX81Nz)1iIdX}Jxr@a3A9N@Qat3`*qNwVQI(xF+
zNDVxh@Sp=6#iwK<Kh5vnHhp5NKV8k<4B$}VWlo^<P}&g{g%_RuV{Sf$Aur2Vr)T}*
z=g9BD{R_}$ccDMN-e6vKOp+FnbdFj5;wTjlJ@OoY;W&W+ZraN;2!T!zjNV525K8=1
zvrwyszQLt3-S>6J?E1<1Qcj~$ddq=qw^V6I3i0mX=MUbHqBHeuW^YO)*0!4N8?6a4
zLDu&BC*IE+h3#v(+1ZJ^uiK^tp>lLfdA=c<Td&^VNb1A6Cw35WWIj&{)f-pS<CBI|
z>d2m-_jNP%;x@m6n);_|j)IXLn>CFtqI-;H3L|uKQfZ?!^B@l3WwBD7L7l}vK`VfE
z&SJ4Pr!xIRO4SWhYS-uvjjFzpvqiHI<{Ry*4SRWhZ8oVTi#IMLbHtX@d1&F$xWd~_
z`$c(6zn0mPmN?t5b;;z_)iQA^C8gbztkle4Oc7hfYF{)BX?%WHy7IftrO2}s$?yzK
zDEPdbN!wS{H@amLH|YQw8Y{82GNLJ!;H@>F&9=(zvdQYTBNSw;8_0MkAu~!4vhOj+
zcQ|Au&@6}y8uy5^^jA6ANSX#l_EGBa#8G8YMv6&E&J<lyb}}hR<}oM$<O1gt5V#bx
zvUDplL^2ioGbQRsu9pqMjOWTWm6%7fF&f$Z1BFu4a3xMgkCLRy7$ZgKg5xH2PE9(_
z0)-_auSv+WO$C{gT+^ULGGT!rP?0k|LOhcbsVoqYjX(V{^vI7VZf9eYeoSc-k9x6y
zKNgLP)cDXSTG*t;VGATS7H>j7H>20+VK{HAgHiy4Fh-QGEJ_bc|M~4a&qx^M1+2%X
z@JY?{-LZ0h!u35h&0*DNYA3TqG2xyy1q&O2#5YNfqY(%I5K*#T8%yg7$;^!FGRF%b
zFf=Pog%r<;MD&8HCkR7VA+p9Rf}-arm)GG7r^|$jmO>Q5X_jk&fFYVBNE}aeTTywD
zCRe?5)e_uV##>EN<TN!*jSyLtG{S4?AmE7dqIx)Y{;b-aji%WDS#65Es7>MXz+B(U
zZHoS!Hg!dI;3-a4UBI;x{i&v<H#3`CmS7RiH{~na75%x*>dG$nB?UQ`;MsEY#SJW-
z-DqE&B*HTkxGNf$Apca`qKsqx&&h{brK|*DF^h25Oi7|yfR&d<AqK4J49H-(;S~9*
zB#L)gYPMSMhEC60y(R5Qs-3Z4{*jlz{Fqg%>D$(SaP7I;*y=4+@*C9T*NzRAb513v
zn76EEclws$bcWHfm&4|gE)Un=@|Ek{TUN^lV{RTE^xS7b&L>#T#8qJb-G~_xok&6&
z#>@ZEf*Z)lc=^BF7$SY+<$q*}L?*|}|B=IhbwdiGAr}Q;l~>s<;XNDQ&{aMRyxg>7
zbQV={1tj<O6;WI4=<amRi9%irHQXRS?U>y~UBC@?tO)vI*KnuvUJ!EX55DuA@BC->
z^V!dSmXJ5xaKjsJ_|9XSwsPSxieV_D6TxvbaqG^F<LKUW-VZ|FP&AE?e4m|ZNy9T0
zE+#HqAc+fac;JEm{@{b;&>i2o^UiP2->_@vjW_Px73-02LLc}DAnzu!pL<=Y5=WDD
zgLv2+na)iGUUMJ7(h#9jqZ<vK%3#=adW~Ut&8MYL<R&M__1YjgvA*3KOQtPbRTV|b
zw@L+~X4BqM=LdhG(oeRfMRLD4p8HyE-0Ro=I60o2?cBPuvpyCChAtLpS7;`Qmf5|v
z{oW_m|H2eV)O1{*<$pg<6Yy@;#0hw-4<sH-Je7D~;zNl)O#Bzn0ch#Q#=77$4^?H9
z_!o29#eTh5iPsz9kcGO(*-k9Nxy=9o>#RO1Omy_&Of`PJC@rJjaFpT@XNrn-X;j*T
zQG54?@z@SNH8xlO+22P2Pt0A$&M}DpSb|eb`oq#C@<bYZU9|z%2r{XAj&mSQK%?4<
zQdH!kqS%Tdr3>Y>WflEuVPHy%Ta6qMkiJNQ)b55VJE_P4j4Dj)l4@A#_0PIlPqtLE
zD0`AWoiAqjK#+UGaoy25QQ{T7EvN$eoAtKlz(nil7-FjLw`Z11yH1JuT3K=M{IY`Q
zcjRJS?~YHG$B&5lAd<Oha>g+Lhbqz=iU&P+8m`imP4<KNauE@fjO-0dc0TCztClRm
zm6nTj;@Xrqalm<Ohir!T=c33`Z0*gdQf}Lz0unEzYWh#$x|E_IiO{@@q9Vc!_Jkr^
zeC4+<<eQmW_oPytrRK4mW3eAQbKtEL%he}9ar)l)WxwA)jcV$&H^pZ$7cQp$#{)$p
zpI_|Ns9mOp>c-IE<CS5KKCp`$Putl*pDyP8Qn}q-T_x#Cr3ybI_5S_Bu%fAx$(#{n
z?PAj_6<2Rwy$$IpD_82E#h;;r7`=3*JR0EY4@Sj2qY+)fV37<u8wzGX-s0!;{`&jz
zlQd;AX2?P<nJrV!@Uxzw%NEkPk$TRVFv6llp1HK~wSIp6Z{Gwe1nG4>#R22SwAJs(
zx=9E>4W@)+a$ujUAY*?Q`r$S}(rbwWi6e<)iBr%c&nNCm+{dyC{0f>+qe+C5O1+Jy
zAZFUK&lv)roo<Aq;1-EGAW@MJEhe(Yp|>H2fpO6c@!-Ee;4qjN8}%EwdALlZh!I?e
zII3U~@;gK&LrTFg*iLDdlA~~oTd75;n+XV)sgn%hUO~wzD$;V5k_w?oLgp#iMgHg}
z^BVnS{%xOL^$yLg7`rC7s7nV9@>gG*$&)Zi&+yyG32}vtgJH8KcZL5-_E1o}W{D0c
zO*ZLvLUxh^fIU*=9HmB%K2AwviqOX>aZ<Dr5MmbzsS;AB!rb+X#F=^Rke_?Jz5c_+
z>$d#q;*Nz!mv${qMLQyiSU#wXnH_7}$MP9M%bDfsR)$X`Xd9n~wvonqeYFtfM?)N;
zcP6RWXhh?3^dz)`cwC7kay~}{dn`L&+j9TjhYlQk=~|SQ4N17y>Cet~yR)7t=}us1
zvXPlAjV~&ha<pWRo!ff#-FF>3v!yDks<5TDeCWV|LkABChU=?*GRnlUsnBZa61k8_
z!j)wc#}jvh-ay<FZm`rhdZS^3!1tnVe;Bfgkbs!LDruRd$qi%jX%h*((dfdGjZ4A|
z$#W)!ErU%%6O1*F<tAOfm25Y7POx%4nlDC%!0`{0)10iSB&nGNTT;`eteLuk6`Qc0
zwCvcNZ7MP^Iaxyu?4*HwIwV=rMS<f!QOwg`&Vr*D+sRfN4s4LK%h%kr0tXQI>elPq
zYqd1;iLHNxkoQsDrG=%jhR#bp2M!|YfsH&=lylNaAv2W;WXc<r+FUN0C}doN<Gk@=
zG4kaP)z;cKtW?3iRrHmcu35H4?sERmh8)Umwq@$b(p|vho6w@2Wz54G86)>nP5z-l
zw8giG9HIAtP|Pp6{7BHGbd5XB>zsEI%zt{zvY2bC{)^6|Z931eB8?6^cJ=REJvzwm
zyyrb}O!|gzSp#H{VR2qdiQmRn7*o$fca2!dcq}l-ip(`I{u&d8@}h|aQHS-otj-3b
zsmJnsB&`10V}Ticw5sc9k}=lzhz&Q@8)Y1X!k1o_dTp%MCYc;Qkcf>Qql=;i+IG+l
zvCvrqL=H5fiYc%xYZjP;S#4xmmQ`8SBtW~0FT|w{3h;^F4%n)dF0t?`o>9*!<0W3>
zc~O-gVGrRTNkO;v1fAnmG~d!Z%|%+^2ntnA#fW&>5jay5pfPfMD1!b3WNU+w$fr62
z<-n4$BLmF2hQ#w)j_^FzHkTz?<gw1|Oyr$5o31<7_(!-%MNt*JR0YSe;PN!QMELRa
zs-G{2Ahsk9ts7S#3W6rcqC{gZ?!Q(|>RWIHIy6Zf0yA?_jU$4gm|0j(Tq|D$Krcze
zkQJRs^8qh%mTe27()FPE3tAv)KHNNU6g6vPO9IjgQB!vu*Og7Vud8=XWNVdFG#Xcl
z^Y2bDo3ajQPzIB+*OVK5ekfI%a-4-Q>@3N{uINXVCbWn+aRJOrazPb8{3XFbo-B^T
z3K5h;RxQ~U2zQGN0D(ikK1CIukhl~09I%7~mY3jYn!tPFWkm|MPoLC1!xVMF;?6DX
z5ydofj6oNbgs<NVPXSp~kV!Bl>ksq3;sQ_tyHI>T7pF@ZvMcV@SA{?ZlLf^38yh?|
zgrri%@`Iadk6Nt$D)Pr}PaH<3{TJ(HDPl~I6{*gMf*5OK2aCM)06(CgY!VYQSP3=U
z5KB!q0zb$S%w<5gTEw_=FpYY%NtoGJdTLS<xyhU!=wpJ~v@jLQ)H#xTh9GNlAx{)N
zd;ppUPp-xa^x~Dq-j}YqaN)wjxOd^|tB)TyCmhuUF-~r*YMP=>T#(gk+vqV6j`F-f
zGbK})Fh;os-=iY*^(jC@Tflz08!KlKDIV^Ho?RZf%Eb^P&`@v#kd9bAE%qy6tQ@kO
z;wll0!KjS>n0hoC6328J5NKFz4M&P_Y&|ZW+`u9QA$iweR^&xz*wtk>RFqwJxY#YB
z*-|ZA<me809MpE8mLx+mUhzQ<x=WsL<DyK6PwcCPAnf%*IwuK#-<rSY(Aq%eldGv@
zNaok7irYGqj69Ic-Ida`S}qk-rAi*j-mz5jdONZ**tJ)0^Ln5s9BXSjmDWQ+u9Z7u
zxuhY^z1t2n@n*}AylKPm5A@b#LZwt@JS4X#ubVw|Z`(|H4gji*kSQD}(zIooZc<Dt
z0!cO^o8vBViDPX-J27N6rSbJ|Zb~i_i|rng6N^zCC=LtCEwr?dwwQTkLy(?ji_}^5
z2GaFgEZ!Om)M3zYyMr-_006H~Po-uX>+6l#*~VukLQpy&e7wL_RNqL>_|R$ukX^j3
zm@eqB>MJEP1c-QeJgD)w3bynDJ>HNPERB+9Qd8;paD+By*ME8SaKNFXSF3A+pwEmO
zI-7;=nQ_p01206?15NhBJ(sssFK;Mmn`2U3%#I)u%RvSyK4fv1OJM!PS^@Jl2juzV
z%OZbfXXVtX%JF4^KfAN_TRr~JLSx4i<qj>(pCZp3UpltyCPmOS;rQZl_$EewJAZ<w
z<(0<5ah^M{!QC6%kP_?LG1o#Ov7wtb66I@=)F=>Se2jB5MmZrg@y>6)^PS&(@X=2{
z3V-XLKVCcj^o-SMo83^{A!c{xcie%4YZJK9J1-`#eGE5zp?17><hpa`UZR>g>y`N(
zxpXu{S*l-LzxZkDlFujjgwCoQHxeyC|2q=<6L%y&k@&qtVi1b;VKh>!l&M)zgxEAt
z#a6{Sj-;|NR~Da_CjwSkVwIcg$S;Ds4eA5t<8BhR26H`HVj!|%8Fb39kk&znDW)t+
ztAVN)Wp+Kz2gi592Tb9zL}1XgsDD|NMXXBX#~A>5iV3}=OSzu+dG(icS=Kd0T8=mh
z3X8nK;#AiHxkK8P%L}~i2*Q^&QwHf}O5_d!R4mAQ6{9{UIaLEJe^j>=4m7IF`F0^y
zP<Caw{LTO{QJqf)m4<)wME59PFs`FxgiaDZZ^)9MONMERmLhwgn^jGbrKE2wbR6TO
zX%@7jFA~dv{v;~2Mk%OC!4FJc_CVFxp2klFd_WI@DGAC_C*OkBglg)WnrrczD@(rx
z);K00$nrj!>Lw4j_FF^}M0W9@dFB9gsw%&raE1+9$araKZ{U(@kc2K_<bt%&Sq>{}
zVy9Ykw)WMPv#O{$HyAnSbbvB+os&?J%VM^i%}^gM*XCbBRe{%pU7QBn(n2{;Wlh*C
ztG<n}MY&3ZYk}*w{42);rlBS6XBul%Gm6PyP{dLY=Rw4|fH>cYF**)!z1Z$_Kx~)5
zq;SBdD0K$pDv%^nJ~YOhbOS?iO<6a*jHeT>l1i0D$*3=EvORB;#r5~&SQoh#gml1j
zuj4t>cE}XS08^L0soGdN)KOe&7@YmaE6mV)aUa|t-W%Rm^5SR6hoIk%gAKG3a|%oZ
zpUhFyh?yn8+ChsD8amS}?L3%;&|m5sKFGl5I#|(#Rqc!rYLZ_!Xdy?`aeJcS%VE3F
z$Tcd>eUn|QC>c9!?@hX(ZMn_#rYG|Gz>Lfv<kOAZuC0SoY0Rd{ndjf@8LszoTC6Tj
zH=>13CEX~>$5KthD42_;c33Xz+ePBPDL;{iorCoY&RAr+jji?mL?b!d#KL~u#fukz
zNFOI}0}HCnSj53BYO|7Q@S4QfC*LiA?TDSV(`6AV8*B~rVJtD>jw<kn@#-zq!yVA2
z%Op?9w&v7niQG$EN*;WfEQtao-DkLefOiOhbITS_mz>X8GQEeBtS42Oz8w09CAx(B
z#di^&=udNkBF)cv&Vzzyd~ssD%!wq))kGwRy#FCA#6z~dj3bjgU@O8a!S_8L)IOLu
zfFbs=aBZHH%K*dp0W=kLEtGo%EuJ{nGr{l`GIG8$@%qI3ei~avEJ>av!;DHl<>7VW
zV`wZ;L={L*!9wtth|sG~u=F%Gu7gz%N*$2mUcV<zQ09?q66UAJ7;N}O9)Eb0{RY<V
zVq+a3I$QN}Q|L24KT?H<BKe-H>+brztLe@=Ot9+btstOWdwW&}08fO9Byb`Zmm$&Q
zl|?0#P01EzP8pIe&ne`~UnU9%DwJ0Uc_UE(|C?Zs5?_oaaw&sPDPnPa+J{F4wx{ND
za!;vMlqjk9ZIi5jL*yh*1OWpbXD1-?I(Y^z=9QkNx#YEu{#g~Ikt}JAuu$S$5fnU#
zA;8XNIc+HgGo?9-!lw&DIwJxY=A@+cKhQXcqvVJ{PC@UGyxoQ*JC4%nl$su9qf?BM
zHRmJS^17Wgjl4b6NXg9$A|D8#cF=-Jm9f6SkKi4`U4b4=f-MQpafyaPxDhP1#A<~O
zzP$hHsU-Z95?OuK+T!i?{;`x%9sUxLU(zexa9gi<ouTi2c&#^W?rL|V($TnWjB?Q&
zK;GEb_iysdG3}Hi{_;=Zr>KjuIVi_4B^r$oiDmM{$P^QMqzwX`=hu3@wcam)L>}k(
z_t+V`l3f4YWTldPHQ_wp_dozo%lc7KlqrQrtb&Ci+Tylb*Vb-bBT5hVhWB5k+;*P+
zPuM-)nXDx%S6gw>JWJN~X#tu7<rG<#uoSPbzJ>>2cDN1q_;I+$F4l~UYeY)rI6#eg
z9J&4iUE)#Qjw+Whg^t?aLk4eC%+k1)$v<6xM&MTZqEt9hF0@iM=Gus=6#n84swIQ5
zV;LT7QIS*ky|1v-=g^kIQVVH!j6Acty#AMPVMI<jDK}jRC1UHo<$;l*<dr&DCQ8ob
zISC6_4A<ZP63*8^M}Yx~rFcPW+G;|(_>)A7ULXfpZMxlwV~I0~8xuDto=to-@x{bf
zK$cl_h<^nBFxyoEc`Y<7OsNs$ie-7Bjk0=~#9Jae6@FM8Y}Ekck`1oGD_o}N4CyS<
z2=*N|q#4)&wq<`34yffNb|5$lJ60pa1Y0<h2||<|D{cl@{XK3G(lW&Y5fwIy35TQ?
zxC*Vnf0<j+XNt*!QGCeA8tdQj_$(Jx(<Mr4IoUu0XP#@+1a2!=g(gsg-$Amdgxp>(
zsczxN<PT*O2Wxu}Vp+D4nJ2o%Ns`KAaPxa*>uK1eIF~G_nYx(cMJ4aT#xh_J=w*$x
zCKQdRFe&5&o0iixJU1eBSu>S!lTX#fzp_LLUZLpREgO<3OJ#1E6tJL-rU6R-d{X|i
zEa!4L>eDoT&wcbkdg!VP57CF*YMtcDloT_`F^cTef>@wjCc|f`OEa9$1rN}>j?t`;
zrPp#6wU?+vL{$?Fj}VvC6`o`XCv97B6}>*T-=QApikokt%iHL<ZUk6J0K;#24vaKi
zr;|;3V46-(R?P;jHE5B@f(+n@n;3&V4uS-fWw8BMumFgl&?K)@Fky+TTBbwlXoqh2
zoKheGhKXgYU_w|KL5oEmj>t%dG5EC@8pgo+5$z~q(E6wfVR$L=@Um-kKoSb?n1XP8
z*|MZh;iy4xn=c5a!|(D0%=ovGpX%e{oX_J@rz2~UrjMLtUw`$<QxD@m*=<XLV$1K!
z8oHz3SCwr=kpAy7Tb7b0VOg0iDjYMTni71P?SDSr_tl9j>&GS&oe}HmmC+kRXs{wv
zfFRN^BNQybMw7V(r8vm4ghFi+Za7XG&4VR4LpD1T4tiG7g8Q)FDp}UjF}ORM2i0Jk
zJnwJqf}oN~5<h$PB;2LaHDQ&&`!5<jex~HfN!gb9MI-YL38ru`WYUr<_r@bd*)_Qu
z*(Z`RER;*5ntX|4ARiKm664<9pSV78XW|Wsw<kWFNDNuYB8;q(D!o{4=ST%>YsJAx
z8&u1z{)W_zQv^pqwowTx!%goKHu$;g<EX8;9%>G0hvFsu?uLtcMB<D^?cqGJLp`YU
zM*a%eWx_FdG*<|zi%M-u<r|c6vZ+O`-%ur4cjQxb0RNU9XwYPm7N~&6VHqoD0L0x=
zClaht4OnAa+-MD^zR7(<FBOyfuy=!`Q!8~{-w*bZNKV5E6yGr`yr{w+e<~`G4LyZ-
zMcq@ZeV#1yj_)}w0j(WbI1?DMqSeL>Rnd3d9_X4I82Z7VT4))f9#%9hS=1;et4KIw
zD~7IhDOJE0;+vrOk|5eC7(TqRW8^RX7rK?aBQXQL5WRg-rGXzq5$)nSKGh+UpJC)h
zu@9GdcmQPu=m}~_07I!5WLIx)rgEj%N7YhzQ+X$un7=t!YUd~Q&hNj=vsbs=`;vQ)
z9zXThX9xT1<X<zHgEyC|r8kD|ox4@JUjq!;%?`&W7K>_-DmAYPN&fqmec<(uQ!uAG
zO;c_ROLK3M^_TxL5&O)C_3zN;UJKul^L-+&-73`j!Vq)TrAi#o76}`S6pc}`1LzCr
zT>`zZ{`~s$WaZ((Z|nfLoV%u9+1B^g|E039P-&KXg}0l*_~ZNcKR(_j?Wf*Hp8nC`
zt6v>_^}_C8mZuY)Xgu3)w{xw#v~YQKbvaLVZ1s;aAOFQ416~qXUvI@$8E0aVuDBqR
zH=H3$TpJ6UBJGz2-CLB9PL@@YBwxyvg*l;}TmS0D7x4_n`$-}-UBU8%^NP1K2=py>
zZ`=)?)P3Zc@!a|!A+H_j<;K@PAiq=+R8bII8^oN;-y`JC<wB!iw-${R&At;b`Nf}H
zya;y4YrqOw0v-NqiRX|-cgP6RF?t@$wPN3FV+kB&1M3e!J>#%mTu3YKeim|V4*K;<
zU5wCWj|H;I7;Zmc!x-JsWD5y#WT%0_(=ZVj^65n}Emxx{Vn|XwjvK+eAvA7S2xgQQ
znZMACu|6gN<_Y8X9E5{<3@S$ckKum;$ZAkftC}bVNtJlxlul)XG?xm4l!zE+Ea3P|
z=#pb$lB2$7fwk>?O65ABUn7-POH^|-TB=da!^D#w)m)f`rHPBBq^x*qB~&<xBD?~0
zC|MzC6yzY{sX)y@=QT^o^S)s4iop4nt99SJoszxJ4FyqL{M0Ved&`Up%6}EWqSvbn
zQkdc;`md_3QJyN)&}Bm==|Z+lMcYqvDkUB-7>=LexSKpp_5@<Nh8q&?13cIlM0@j_
z0laH(eXE8D{nvFu^e3JGwW{;7rf@QqbRm+k><<Qx5jpLIWh_O<s}h5&n&QbsB=Af`
zE>)=9QXk*l;bpGU1_fx^kwPRM5RIVh4>*p$BIdAyBa%O3v>E}pRAJ8X?gk$b67Dt$
z5-`AmkUWF7|M~^|Br9Vp&WcD@R){g@z>Jw}!Xpc!X3`|jT-pjg*DqEk#u|J7zS0=m
z6M2?ko4#*Zaqi4U4#aZe2y(e^`1HVL7_z#o@Bz)O)ydONI|LlqZIv77;%ZA#p6g1i
zOe=gKOdLoi2Qa*X2z6-kU>MQ{d>6@&m=fotMJ=O&4#;S_Sd%DVA8HZ<lb2mi@r?=<
zd4XyfUDe>D+|{hH+#C@V)lf~zfbQ+8uBx%d1BSSyiVA3ST{5t;AZaj|@#ho4v^Yt*
zDQOx6bPjVP^)4ZMWGWOCG&!fGDauWY(~6y&4y1t~v&!4t0uF*G#$k-`Vp-E<z)`HO
zttEtuKfL&tV0V8$VXz8n{lr1AKHvedl#MbvPCUj|5~4)U6LBaq=OE_BV!=v$p7{3Q
zZ4Y~c&4e1zn^|Q=dSLfgS4F{=mw#(Xa`;=%-jJe>LBp$$s=V<=Md#FmM_kTyXmH&x
z$-1KG%5K}<*>3N&Z9>gjxdavidDZsau&=bZMG~#`n{vN-R)xlQ^j&GrF$7L`x%5+q
zRh?H)|9Ttgbob!LmsEI+yIYf!t=;&o)Gj%8u`}Y-N*Hj@_a$VoQc^7Lzk~7ho*&n;
z35TPq=|ic*YS#?AqiJn4jhO2w-ax|Xv*r5kU`H<Xa4uD<?Q&n2O|R|>ew0n`-UVnm
zm)f<<9rIHPOkS2vlU=ZIub(@aN~J8AJesoFC-HxPA8#-n1->Tj_Q??*{4V)C`IUs7
zD1a0`3-Wh~b~b<w#wcT<$56B=ejg45w2tEByT(RI!{MM9#btCGF$Ttf#n`0_zy5|B
zg*kJ76|7U$$nvtp&2cineca+jDk-fVkKBGFqDE-SANYU-%~+H`k_s7+JF8;J66i62
z>=|B8d7)75IFlfJc&Qdh4=T9;<1qgN6Zu*7Ekd0WloM=>IN=;Yc+`v>v~?s&QFZBq
z&q`ieAVkV*#V3CC<1$9q@@66Jf{`QHO>xU^Gc4lREFapDbXDvxi=R=Q)dfv3mI%hC
zSdP=w`-6D!V8pt>?l`Q8F*CqMeq)4chA_iA&blR^gEOlsJ(aV~&uQg(4X<38F1n50
ztW?X5LGPU6)b-~TSr@0L1>F#vRp-+hr-;ez+tQ*+sUaQR|2M*G^;*hsV3tbVnl-)e
zI<?X_B<O}(ejJ()+UFf5%Oila;E{e!OvxA~tQsa(tVLdx%Q?6IU!2ehrwce2OOw24
zD*XRge&NDHcmKkrkM-yNPxIuN3-aA}KXmD1?B~yJ@FV>J`7!wn;}xnT5>=B8RE1oV
z#_tH@V@0rPI5b|u0of;x_e=0UyZgRbMcz9*bMwhPAOqjCN6z>6&Sxi`boZ@a>z9NH
z*lPVx`9lxyTDd6`^3|o&y*u9Zsq*$tGoy}w`T>1@lWm314r@Uq$N=p}kZqt97?A<C
zgHb-GIH-#omf|Iv<RuW$bRSja$dOeeovAj4gzW22H?H=5f0c~@z3;K>u6yh{Qs=0|
zpD<O~iDZ@dso4od8yqO#1KWL<4Hf<5I^6J5490%YQ);4!Y$KPLvKnZuh@(V|K^)rS
zi)3Heh{~PL&i2uAv$eb3DObk(mCE#VcEoA&r_+^kvste6$1CLyEEtV(U8MJrM?lt{
zNZgWmAn}^SlORh*!g`*>gYl?|EAg04TnyC294IVtm?v!M41vBiKp7(8V6Vu0u`+U?
zfV3a7njjm>9Cbls#5Twf+i+8kr4(G|+J}YjXbY0W&wv0{1k256%?W?lpV0;#UESTO
z-cy@D{MX`KE;l8~u1ZqLf;_A)^^W-Fpyg(YV0wvyDrka61U)q5`qJ2r|2~G4>SL0k
zyh>HGU^G3VgbMuKE%9kke0)lOQWD1Cq_&_4foCaGeK5hS$%1pTJvmpSWo~JzmKDYE
zT)pi3O|7yr!z(>`dz7Z4+0B6&2ZslPmxOa>*sWSd{#W31?3|)Hre;-<&#EbQ%A-j*
zjQ}5PtnuQH6R)PPAqLnXoy1j%>k=<b{1R3GF+k40IX5ZV@(dLLPGW_p7-2V+%3{cv
zy94xb3^7Co1UzUcK;R5K#Y>Qbh!u$%;A358bRGEiz{thoNAbq>KJyvG1znd()ZO^D
zMDZoDjo4}9!@&HXae^5dMUm4q1#CnMaHp24a9T}q4E5dc5Oe^iMAlP9NyxfmBB%eI
z<#49p&FMDB+j@)Vw1DR;JVxYikua(0-GH$9lwGCrx16*tC{*@1UgLByZ{aII*Ywk?
z0<Ueeut1GwD>Lwg<Gnt|X(2k+g_1;M`nOu-8A;7l%rn{}ny6Vd&jXm89!vQ_q*Wrb
z=bEl(7@8~=L`^cw0(Yb3JuX+=f?bjYZcMROU~<D+phf1GY)YZ2yM_i>Sj>x?Ii-2@
zWjiHKYLH6QwMf*CEHXnX1+olJmt3g4_q`<iXYm!%-TbrspwG3%8*eb~0&8pi{$7tP
z%y2V+Z!M#~mdicWVX-n_B_D;po@UiyH{}>(jlNL=`4S-~!mX7veas#2pQ&sOjX`c=
zX=%c%=ihRqQlA7cI9ab8i3&?cmsrw|m<TU^hE9+#B$|nrB|c1a@=o#|Ks5Cs<3x@I
zF_nbG3IQ^&F@CaSjX;cAIf4OFb)gm2rI`K<rWWy$ldRKgvjL=GnK?#VQVZ<Quq~ps
zhN%nuu+#1`C^7P@!)f9Gj(P)2Yr)~$v8NjCe^`STBn={_XJcl7He(x)qe;S{&-@4V
zMhi7Sxq-Yr=tsZ|6g*@DxtC#kFc?Sryw!<Dc@-f>*@OWIuCfGk45&5+HRPbiT^K1H
zayT{W@tDqVgMw)UmvBitCZxtOZ2(yV?3xljtpPqSPzyNh-5GRQVONlicr&A5HHooZ
z4^b@Q>+CJjIMq=qSI{3Fp@cjFsGd{GJPD#8m^CF!(ZN>BDwOJ!s#-y_!QLur2I!h^
zQa591VC>OaD&rHHR!Dg~o#v=cvIW5B#2&|yBS7*ZXGkD=uw=bKSpiqfaE`uB$<&_7
zO5Vj(LWMYz?rVlMj`goHHI+nB5eIsTSOAWSe_BK~#$<_*WJVxPI^U9r5|a_zE}R5Q
zn_B{sGs$405L@OwBJz0EgvuJHDT<c_{AO4j*e((Quol@mU?D?af1_wejw(owSQg=!
zlFbP`24``Ooc2VHh_3FyeIVNl=SE1)D^sE>U<ygPNIe>8s$UdsKt&>eCBkVuDe3_C
z(FPSQ+tQRs*S(AolvUm<=3|y9M*+J*@&ZwQC4noF$?3dn$m2;(ba^nF=kqnsh9{o^
zToy#OsuRskb0qZPcB|R6e}ZDZCV@MZv-xSPw8)WW%7UwQ42P2G9PA5r7l=1O1Td;_
z$S4gDmMF^S33tqpY$L+dPE}V(P-yo>ZE}JW3P#qp!%!|2s+o-D<^cq2S*ND^)B&rT
zSb~r*N>afhQpUCODwZ?lH4|w~(1tf07ha@}oX`M;W!r<h@(mogQ%i;lcv8-2qDVie
zsYGxCTjK#MsBoQ@3NYIjG@i@4a>|u?c%z!lOSTF7SYg0Z$Fz|98sx3yItG`7)A#^E
zInE_uL{ggq>QP(*K!zeGa|Cx9>O7~zbI~<u&l%X32fPiBoRc(oB(AK9#9_Dtg(<lJ
z_6srsZb_^qP66)1(jF|9iKXEpQ{-jJ%f`k^dgV$c9&4K-5Bg58-gvQ};o)A-oVNUA
z<eN=v#m#vhv|IU+Ue9QnhOb8ftX=W4o@^_oM|NCxBX~x-UQe%Iz)v#!Pk|%KN<9@d
z6j`vhn4WJKzG}UjEf<5Fy=jGPss8VI#>E6X6nqxz>5B<=9QaJ|EYI`>u(6Yg9M~uO
z5($itTN2`cz(zMNEI+IayJ922s;5n^&*Hr>(Ew1>kO6_f@4)sfX+HvJ`n5u2VtOy7
zCdY}~K~?FMwP#-Hd@OTntt48ZE@8kG7hR*5>M3F!A)MixzJ0VlNU4vnNXhC-9r~}P
z8L9%!9F(=hbyLBlKz_YYc;PpOy5%dJO4UlJCua(OZbO6fZB@-UsqyMsJ}ht}{|dB#
z&ojHEj4@MKy#-$%i%0LbJIthFiIo+Qh9G~rcBS7vzV`a1CGw3Rwe7Zr?xC!sP3MQF
z7tRi@d2nU+s&Ah;Q(jwp-Qs^+dGMOS*@e@?{Iup|4|f)B+m;I4tJeSK%mxopoV#o!
zf<z6g164OzdN6-ygR;Bk)Em*}l=)tLhBP_AKzV{8i53|Q!45WQkf&V~-7{c-w3#(5
zN>K;IHW{}xNtbvD5axZMWdTYW+p=h`|8-C(1mr|eSanrJjU1EbIj<;+Q@2c7L6cT$
zydF?(ETu|j1btWF%U4ZWrcrY2jAPJmB^?=Fo+|Tp(s7c%z25K6wF)6Q6&4EXKdSEa
zJXsSsUIgnnMLpR!xs04XSOt8msk{YZkfWaD2x_4EnAf!_ZcatMVlN)`f(AD5V$&t?
zF~RM7*FN&dwcmT~ss7%*x9zo}BPsICW1oEd1^$}XtUm)w_V!EJy}mxONj^uOWc(36
z^w&xs$I>T>1BMY+2!?5&yyY#ev)}l=-*X+yJ#*$BQhd`#9{vNG;EvMukDf~)_wbJ|
zewSXj!fu^Tv=jZr9Okpsu!Qx9rC_7lkAUj6!4kAU>6fsQJBGMNgRr)#CJ}B;uG_Y4
z+mqW)!9O`}$f@n)zwzLmvzbUFpU4Il54f-<c$4cotbcNwzU`ayZ(Ce^+x+~V1^77!
zs-a14ymedYR6|Q{2~9Oq<#>Od{lFHN#^GKdzXDbw`i539x~N}bJ`xPO!5*9E;yNxP
z&q<zR#kEDL3%4}fU`dvc_OTuZ#RB#rFFd*av6Fi^F^GJQZxtjD^o}l-l9@8ko25OO
z@v&qibC%0H<^9)`XV(ADa81)~+;^&OQ&p+7K-9Dcog*u!k8n~lJL5)?&e<Z-EKiHd
z6RA|xvp^{;w#3=ZrQFhqt;0d)`+$Qz<BK=!D0MBXO7&!KaoZI!%_8)o5UlZWcspD1
zUWY7JLmVO!9E3QU4s-P(AfbA{1qcgKWyDs(x4Kk+F^d8n-Tf(PESFAg|3KJ@vZa-G
z$k}E(kc)eFCYu$#vSU?hOphrYsnJX3$xKW9>=lFw%sl?9Lf5QLIeQE4WKFXF-YVvm
zVcS$5m2y>otOsf;FjJDTrQAFh7HciQDDT-^GVtG-DZWv!=LPZ%s}YlMV)q%ET>b8d
z5k07U_}-mM#f39lKK$WhXU-jd$qIR9*YY(JhgRw<*DtS}9m4a1_WTv{H;kt=m8d4B
z62Fu9a^hQwzlXywkq8BI-K6zOTnHr;n>36W!cZt(CcABjlHctBIK@cI7Nhyac7vr*
zLL5DjV!vv=FZt!Z2*w$x#P&wKTDOjg6>(@a0AdylM!QQKlU+C(J~|r1x@a_p0UiwJ
zCBGJrC5dr>6ve`~=;Oul)(*2ehV{6HJnjumfXtDkPDGWbifwA*9}2!`q(Kqrw(~hd
zQ9vdN?=)1^P{;wT@83pcv$P_M9F<j$H?fkD#1N7~r>FN2n&AwKWW^AmS<aT>hge1H
z24_walVz1fAyG;rz!xH+b|DC=(-PsSrc+MAVG3a|Q6A%nBv29x7?Er$I;KFc|Bx7A
z&T2@qYe>5lUgEo=fY=OBFkHBaWJzxp$AU^I3(6i*56F`$FL3N^VC``_5tvhwr?)Gn
z!h=n(z*I5coypz;pj#C^9ng*-!Zm0%M(sdnQ>ku>rXow4V4A9=W8n=Quu<xCE^DPj
z2>_d9Yre#1bhKDCQ=(&v?1QPS%RCOY7`)IVm_1E69RNL8(;lygiYQ64^vkvf*G3HM
zpak$yNN3yBNAEsdlb{Il)kq)W1y)m1!B#yul2!i-a`ug^ADf9h%eeBRiX(toSy>{r
zb{A7}8)*FXOTGT!_|^mG$j-_%`4HD7>e0i+^x3V)ckdt%aO4dK?|IEt<n2ncR-IAS
zUs9fF-Ac%9CvEu*^q~-R?gZmjWt@gsnk{AnL7G|?Qr9KX-gAc!=Z96hs;Xnz)X8UF
zc;WP}vDq9)$-!K(z;w&TxJ)ClEgmWIakOEAnnFy?vOww!1noUk<`IVZh-Jph%mN>l
z$)FQcFB5X>Th2bck0MkR1XZ>qo|kpTR!a{wwq5&&f+-*5RelS`ov(6&DqNZ)&pmO=
z(N|2zaVlUy0eF_+wF@jBYS-=EQ_Hna$%Z)3aZ{3Wzo2p40{eOidt6}LMnNKjUQB|?
zpZGN37fVmY-y`;glmfPvTv)mA{IeHMrPDY`ucX(%O)gwu3D_6X7cQ*48$MUkE2qe_
zuy7-8_pjkRZw9%%fblNFE~YOBVu2Oo!xSeJV55vbX@h+co~2Jl>u1QYi+jNP;Wh}E
zy2EbNjqW{d?I+^=Cvu9MulM^CGdooS+c6>5o3ol)QtpHY6XtbwVp7%fLOn2oy6{5x
zeeks4WmGt#zK84PI?cj_>=~+Q7BRSU{U>19DsPuLW$f#eXThFx(`p#1(>1kTHxrx3
z<g`RY4il`neu;K%GX-0(i|P36x8=7b_-83HI3vbO0$<9KpzOCqSPp+}U-Ds=IVOCm
zg;b^%3B&+oY8GpMzy_k!hIMV2X-T*qW8PtDP!Xlp1QjP}TdYiQZ7gWOLPuNWHk(e+
zN^64DCxkZAicb)j!18*d)n_h_N~?#K49nDjC9O8P7<%lt-zY;<o*}I|7L0E6uvAvL
zhu>jw9lx-)j#{<RYd2cB1U?o(WAxd#UOWrC;j+tVHSsTFUu=bp89L-fgnN~ro>uyC
z9x%Fh%cHn&Oc*X>w$abtg-v7UNS}@Du@ios=R=-<6Z?F3ll&ik7|jr6zw<Z6(-9L8
z9kEGsNZZWQnBe)+7V$Q)`rN`M+Gotz{JB3(j2^>IEJ+-l=qA&tRCkh>Mc3j)xX|3j
zKiJ}eErei5^Sq1UxoKI=ZQ8)}3u8ezH5CS91^*j-kK=lL{Q0V_2iXO%JeBxLIdoXi
zjfI!4AJ>f5qpO0F_+~-o^CQmc(flzdzIf-V(SnT$FO$oAjZQ#Ebl36x<<k*%Kyh?U
zn660a246N$4sPW^DDp_%AySgpKtvWeQLsI3{onTReELcFPqY6#n2>Fb!*n@}MdD6v
ztl*!7|2>gca1>!*Hj1+Q1jQ+M3GU)QUHm@zzsN@t3gG%NhJet42j(om!r?#|VD}X_
z*rE_CifoXPw5&VweM_lT%ultl?Z79m5{1mepLlr7jq|-31<V=K*>B0@tkuuoVJT*%
zR?D}q4*XwKmG<1pSHJq?{Eb^ug2-i)rJf}-p2IKFJs^v3PrNko=mvLb9}H<m*vism
z5YRxs3`PzG7Aen`v8ewhhl3EqPM4KWGC4+!Bn2!zjpeX1(h@i%ETcG9I2?$VqR4t9
z%0ooEbm0EVeY$?%uebsjY0hIeXnOx>d*>WJ_ukThB}tQ9&a(7#IiAm*lQmuATvLM;
zJyj62`fTym!@9O|>!QP}+NXR|QYF=Vzo3XbmPR3K?f(5A<ewtsDgJ}^_uCqvmg)An
zcNnjv{4K_g8)tXiTNE`_$emx>c~|OMPBCR)%@k!tw(^ft`gq<FWl7J4s;|5JwW+&z
zE}qW`swM_2S4|&#%)5oBuawvB-QJo8aP%97$_lcSc~KEmRzp3uFP~)mZe?T;&C}>I
z^{G^k{no?&5QlmIPWQ<UFKdcq$NAG2UUTg=TbJv19yl=U)k&?J>^*qFPDjR($F4p7
z=(gp?fx8b>%lGtK`H7R8b5*e76V}KGSvEslG6fOvi%kuw*RKTSjgi}cneMG&tD7Y;
z9}&8YCs}43G`=Yggn~U`q$A2r<)V`Ju2QuAv8Ysv$f2n8V2%)ZEL-oXB3bA)BZRu8
zOu8b{43V6JrR{|HwUVY$>HlTzP2l9Z$~)0}&bjxTyYEZwRbACp)q7WWbyc;bR(Gql
z*hpSvd6Q&Y-jEl(;EjE;unjQ;3}G2U7BE{vAjuHm@h}iDf#e67KnQPu36CTWc_GP!
zNgyE!$%NK?-?`PY>@aWg=J%wos#|wCb(eF#<$T}w|2u=m%zWIu^yy<Ke$@Owr$|_t
znM?}1*C?H%YDq0d4LAj}K?1uPnSr!@D&SY&Og^XdlnvDA2rQT8WSRqHu>fs^lR;pa
zuZ%AkHV*ocEY|9FqUJgK9q-93Eji2_bZ3@BOHO)@n*EDr!Cb#|Pi48L6T||#rTv_P
zf%T@@11f7y#rq1)vJh+Ytmj#VwN&Yf8A(jpXi?g|Y)`u}+RSPJBYU?$_S&KV9T1V%
z9^AKdS!A&wyK-T5bNq~Ctw!$GD{a<~v<Wd0Wvojsf8TrFyZsF^ylne-Cocbm%U(^&
z+kc)tMt<?J?H@db`X6y2|5DB?81RfEIJ&E~4T8^8!#GuUL`E4o_-#_y{&hmO&!*(F
zE^*iP?c4snZ?AphkKX<3XO**xRUn@%eAApVo12^4U;d*ti9Pg1vI%y@jB=UGQOmKG
zpbsFgtei`f;B6ASl}e}|4qnwj4rz%-u7WJ+;nziQqwb-UQ=M9rIj$XOmnMazHaA-%
zY8XyTO?-v!XKF)pGlNtrL?VAv7R3QmqXTczEN}}PM43>-xMmkq>S^`WusD-7)|YyN
zB6uFzTvFaOJ@g!V{~<cB^JFCqe0Q$OxNcaQu9q7#o+*Sls)P!K`}IobFCArGxm3AI
zd9LzzAld`cB0b63`RnA9FkZe)zDfQZGj}B4Cfdj_N>UfjVh92l(>-MO0pSex%1Dx3
zb~3np#9~M9Fy<bSxUDp2vaFK@id>jjak(s`IWnbW*dNtsj`EcQm180h68uPfr;fbM
zqm|*(aIikchsK1^0d8n@$L7kg5B_T}mOy)$bkWab&5pEYz+ue<V(Nlnmc@z0mL3;-
zX1ULf!B3Rl*^tS4;rzH9t}a9GIUPgyw3kQA`R0*CbQChk(;5eXhIp*VH-qmjNg=v<
zbL06O*%5khhw!jboDB1j872T@2^lsjf38k;R?EDRl>urOoL1zLT}J*)A0ZKtBQy^+
zHIcuxE9+6@$mcCS$|3nAzwUAuNt7gMMJ6k)ckcaOS+dy{p~k`IW?0akYki{-Xg1mh
ztO|-ejP1J(CkomNu)DMvz`J4Kw2Rz$pqjqXu%l40*J6o~p*b43_*{I8nYJpX;>E($
zRJNEz1y!}cqDmPCHyp?FDPl(i8nbdAi+Luo^{`^w<qWK&L??`?E$G4loEf;enwphu
z+sRDW-E`5=vvmux8xes6?H1p29D(?7$y5?hMAL8`Ujuu^b_~Ztyhc?+$TPD2SE}aQ
z9tXde1&MArwzi}ix{U@FgI$Utp_*4vX<+bx^9O_$aLc1=!2@SI6vQ+w18;;4<_#g>
zlXFmOQK<vgVO<LvS2O~xk*K^=id@7*WpH^qqhf4y>Ym4wa7tK2V|!hV44ja2<CgVI
z<2-s{WNX<QL&r4uA)RRM8u&++n0`G68`E)J$6bQ!RZY0ZhKf@g3;{^2Sp%M(ZfOSA
z0U@J_4o}mdy5=O@B+TTzpgDF}wsbR^mE4{h9A}8cVOU=Vf1v-V2v)+-cC^A%Ts2K-
z08aiiGuz3OH?PLAIxoseGATqUEVoP-6Rh;m@+}FVS*0<YIYtj<aUQlFs(PJ<RbmPd
zYjzOpV2B#AAhfO{8K+5^!70L@P?g(yY*1Q7%hUGFNEa$|%~m-iOT2_#%!V7zsFn!f
z!SxfZs1b)4mYfbLai-B(53%jwGU4if#Vi#29C~`sodus_VK$iOg7AK^VB$S<xP^40
zAX2Nv5DWV~Bz)z1P303VH$2ba?gUqBIQ0aN9Ud4Di%tsXiBl!QG8|ofb2YXJ7{W7j
zc2}qyUT@Rah39V;^pJXM?kt_b8e}{EN93T<!|xKDPJkEmL9E0+`=s)Z<nxN7{J!#M
z%J)IPcw{`W2LpAPfjZ7b;y|X8VO(8|(ZJ9Z#Vsfa$Kr5DS_qye=RN&>yyLLjYjwm<
ze4MAF7{mgaHPUX)kywW-=bXSSmL@J1FuAmeA&fk%j;Ve5k~C3K9*xTz@|x}b@^~V9
z6!WnmmxC`Pm=d+p6*2hX80TL8nya--K{eoB{q|qVKAw3XCkVoca9c<(4yV$HkFXiS
zWHcx3(P$BzK*5kDO3t;RPoi-Q6oO`j)iB_p_X}5NE{slF=ma4xq)>y$t7@uhQq6T#
z;aDV{ou5fzP-=$FB)P1Fy@da&Ml{th;nBkg@(l~xhyE6t@cjSqfd>wNmE-J%e$RH9
z2M$q^61B3ccvRp#-_fE&Oo!NyTF@Q2FOVh#3362!qo`rI8q!Q)jR%MUZ4*;zb)8vM
z!_rKUp)iCE&65NoNRsTia2PQ(rn8CM2SXQ-2vrA}BCv*Ai{R8Kv#+PR5IQ|dZK@`4
z{#55NPF<n<<q5-N!f~ryw}c@~l{bRdVE!tIg{4hUd6cY8tDY3&ct4+w_lj2YPe3HW
z8XB>{x{^Emd{B{ZUDhgO76s9gMeU>YXCa0Re|~<k!nHK$HQ#Zo^Z|051Ydeu-~t2)
ze-B1L06mH<cUou><gkFl&dx*w;$LcDZh`KW`AP%y3ALs3caWYJ_Wvdap9&``asn+h
z-DEBqGF-{=5zFo5Q#7iD<u2WRz1FQ%rWv_}gY4BolvxI6YM6w6;DgrU3?C~#g}brW
zfJzc5JsE6;eNf?eOw&Q8^DvrBKySsck?7hznp9?qss_nqM4k-mG24EOO_j?XmE6y!
zE8BN~@HUnXoi<%~rY77#Dw%3*vD+dX;r6WE!qzp^dIs*mT<`RuCBxA0W`n5H>XliJ
zHCKGLQr9@<S|H~rIs3!2UnRc{_joeLS#c2+2}~2|$RNUpBwEiAvT7=MSLRywrMt^c
zqt&PvJCy{6l=J*%ab|sTg8PPP)ULSj5>lJGetzLt*ty}bKALZFwQg1S75$6XZk;La
zUYfCOki!#bL!)i}7x3FdWgpt*e4K^|4^LWagQwvEB>XeT5;0Cg?u_B^1}jg8>SJQP
z*Kw12eYQ@k51DaVDZ|5B+_-2s*IK5w-L&j15MsG>de?MRkE&DOyI<61>vd2X>GfbK
z?6vFI6YKW6cusG4QE6Edfo0oPGo#DRxz$%pRpF@VUC-dE94H6T{(rhQc(5Xx7*$Dj
z*x7fSEjgDaOS;dkjq;?$oxH?;g!F&oq^x(m;q-GKJN@5@LGEL!1pMVS-7<ZNz$1>U
zp!;Ek4mvJL7iZVjX8#V~Ub1qc-#@W(^xk{PJ*VGr`t%!qT79oc5(F=L7zL<q))?l<
z@OuUEK@dd6CUj(>ry!wJvNCQ3-nO5+a{Tt=EBC(ZUhE@3I{Pj1D)Jr~MMaBPddE~o
zA@Lb`lIl1~MGpxk$+@jVn&Z{>@w#C^l2>ZgWF`w}pqGN8g`zHaLI)d#7o3jMh*G_b
zt7T#f7vE(eU5g8<9(r@04(0|03Axhmc&tT)K017}Mas4SnY@<hCWur`C}(x--z2*H
z&e!Qg$&?KG*I$t@fM0*Ja=-F~@@3@@l|NPfTKN~{#~?2oWErH$QF4;p3Rm|5@;UOm
z<PXSqBz7Pd6F7B>F@bfGJIi?@+xX%z(G2vOCJXg58H$xD;F!hAh#W-yVTyagA3`}I
zG0!kfmWQ&es4G*xv!Tob!%VWgFc|eC(o$gc5w?dQD*{Y<K2DxXWlp(E6Rd1PZvrQH
z5ga8=z^%f9cb9hKX71o)N?jKu8cva=qTkC?@MXK;HY|<$@NKjPXVZe?*2q8_{ooqK
z;~J=J#Ic47k+{>Wzp|X{A<*IoakgZZ1*WNG2-yM-U4O_Veu3x+1X=>0W_byd4bhc>
z9pV~`$7m7DHMu8TGTs}4Sp9SWCdC-3m?tikIrOsHszMW_1jb*2bJB38Z=HdYm?pfF
z<z0>9S@&yX2!h1a`SwXEbs46QFms_y!2lPe=vumvlcSV2m|=!is#(?ctu+yNt{PEH
zaL~aV3(zbO+ka76G1L%5DnS@+j4Fch!0vF>cm}jJ2x?0-eIxLOyyh25BnVo`{7{5*
z8Wp19P{TJVRvYU=s~oED_YuE{=-`}*5Hp#|q2?mwnMVE;I(k|KgF@p`!kB4z5py+O
zc5UjLK4q3B$Z1gHV3IU{@nckw8IOSQoZhSdlWriK1=zQq%6;%*(bWQ9$I3*yi*Qgy
zE?PnG!-1Vmx(T^lBf=qIAA?OnQx4i4LwptS1Fd4i*l$I~XVeq{<^q+b(G9UiEQD-8
zZ-hB@opOm*S4Ev80w+Mnj0xgcppC3af&diU4JUj~zW^7eVk`zsCHzlV8#c})6VQ@x
zdaun^X=U*$@F&_Hm^AP}povC16BDHbT{P7-!E><;D$3ygnKt!2H3{ZZoRCLzXu~rC
z3(P<jX{IvG3qmpV@?K(5*W|WKDEbl)>&=8n&PK~)sD82L?3BM^$EnISgL;P?_S9rC
zR$akM)wmE>gx6I|8>f~X*9PZN*6SGpL<@-jiMCk?ONLR0lLb2~^`mLH@v6|^`W~fV
zFA?Ee8DqK&Y8IqW$WT6mJxA<@hTzp2)n(oqn3%yHk-D+zImBNKN?@n5gn-!PRMLbQ
zwn}uzhf$B#sT!pYbU-1^I!$n%n7olPRW}Ku{0YviP9stcOi3Uo?F1vo`ZQgHmda*}
zgC%FwT~gL0B%KC74t?3qGZha|^lwxRtWI#Zb>h2qSG6c9bivRhT0jj`r&<^gcnliC
zofECBODMZkPx#~%L4XOa!^6=)^4AP_%p9&CS~fkGD2jUaZ_a)k`VPk2n##JwtQ*5c
z;S6Im9AO54tJdg}tcV$QL6VKLgAvauNAU(>2l6DrnT>U|k6<Y{yVS!O6!OyJi+6tU
zKQ0bi_ih}zN9Xi{{{GPN4D<_7XB(p%Kh*!IF&G{B)x}v)i#vzrrx{qkkr{YAnD~xq
zl7$a8>soAiHe!*enr4CHVfY*5EkkJc&M#iQy1xCh*q?Opbip#VRVyr#;cJMx{(|Ph
z^pS%{<IZ9O>^eh0mxHbtmxm0TjEq_da|C#|jB~i>O-hW3XWGmRtl44CVu$rFu{3Jn
zCgjEDi;}f7Cx6Vbe(PkM_XE2jSKSY1z#VFa^VR0f^=`RpdSDpxz?_JtE6q|7AsiWE
zfx-}Ye0%feH@>ly#N9@tUMW^UjF^U|YhluC^pFKr6*~AgrFiz4HhpC$O8yKKfd9|u
zdY;+;g@6A!Ka-*1-+TI4V|Vt8;46GWDJTod0p(g*bMit&T}N$((F0Hv%g866M-ils
z@1;wi!eX>1vB-JYg|%7EDS$zx5$3+EleC?u)pTW=dKVMhM>5VNWUtKoHRwpum*}@(
zHIFvemM&TBGD9azd-nIqBooy_Ql2I+tx>XA@GLzn!ZputfQPvKe_L$9)4P-;U=7lR
z5^N<wk=z$mDv_maU_%MEGEJTI^TOD3p?m5D7YcEiO6t~OtI;eJn!CGuwqX1+!vLd(
z&bC<At;D6u50^#<21RNa#lWz<-tys@saIIul4Z{And_uWs|N;U*jNb3WVKtNYx^k4
z;1SZ<uF##-xt-|Oz2G_Cb$f<~UNq^itOTth2=R&DGjO7p6-7HQID%b<<!~`OfaH5g
zp4_u2lj?C+fV}CvoT+aM)6=6wGkqgW*USm<z4fIjBoFS`bB*y%vQLl&E3kMe`gtR;
zMV8K7WD(n{nH#&!s_D>hQ|4U#33&+Y)ViWXNsg%G<%o08S@YyMI8&KG@|MffLn)|$
zBiDE=Dy)b1Of@FEK{IPilS?jmVMEQLL3qdg;V{l<^16#=W)|C|oK2=P5>rBeUHQ-C
zbIRq))yj3seaefKSAd85Q_AZxev~s&!mBBI7|!o?mYPdl{Nd5cpw|bFW-!8pk{E7R
zuOFvNaTPIk2EE}@Z_pp~*2$9G-phJRY21&OdTpf3f;KluGUzUKmY~HRe6G=@!6FGZ
zXxAg!0Je|dYmy^UkKjA`5mB#GpB%?_KZhlZ<VMg(H{ilie7k{au!fNB7hiVSQN6h^
zv3M=6UTi+`f;~sCy@KfT4}W-}xi}45k6+eYBo`5Kx5@^$YxMbqJRc4|JdTKu<e&Wa
zm4(}PR#GZg-n6i|=*HzQ#ijr2+LiIPZ<gcjFRA;R3xlPlYf4A1{iAEj(KY3(78VxX
zzHm)cR`|IZ%c9Z-d3j8^3GTAe#+=aRqO64-CvenrD!tZunH*xg+}TO-7^i&XG@(y_
z=4l`QCcY=LS8?86RESJm1C8S|P>>VMQc+PhK*t{gD-h&AQ|A#^QvD)h^?LqVVC+4;
z=Jua87kf=oZ7!}~|5G<yvd00-QE+o%m*4#11&qwisH*&6>;n8-gVqRz#a(OAc>dqQ
z4Oc(iQ12Ipms~PjI;=CW6EQ<xt;~g8DZ3R8vhM}ZGiQ_wWld(BVTRM7jnoNw!Fva@
zr4q#6<J~-kC&R>P1R=qw<v>pOxoQVt5c-(=eM#A#D-_9hJ*%=<DV4h2Vp3b1X|L*~
z!uGc=o@sTa3P}T}*DcV0^A{J$^Z#Hr1VJ8mo2GX$9CNYnx_)-C=*FS?(b=_y*2Nc-
zk4z1Pun(D(r9?$zn%XOm+-q5R+CDw|S@Ie3BwR;?>|-M6il`fmq9EtI2r}}S&3C?w
zZ2oa$<NE728f5dVGO3)s_S&;bn<!_tuT{=Yo>fL8qQFNu&YRkV_AsM%OL+kEOw~T<
z0?9?k5=_ZXU4rS@q6w}Z&Uq}785HPQt0}pg#rSh12?j?P(v#gIXBNv5vGQPFP70la
z)V>f?C{!6LfHxIvP*v3mV0H-4G>8NSW~#~zrZbHRvt(*-c+~eF^{0;e{&7Dfp+|+T
z*F5LQZATohhUi^hNQ7p1zUR#zp4~d-dA_e}U!#_;tHcg9eWBr`QJSZL;1puO3Ab#I
z?=vFq8kDgwHyWFb#$%QS;@|a`%2RRw!VCNHRC&qw<_t?SyJk=*R~8F17tCC<Sy-%;
zOP&cb)rBYVcjOGt4@E1BWYEt>{R9+b@N`-jYq4`lV%-bH{Oj+!{xx09u<U%MtKR87
zNc8@j`UWM-h8XI9^EY~172DqzYFpPks`&Qy_elJNZLI71x?%6++JBMGf-ZNJsxpfR
z0U<iU=feLS38m5;VhI_vSPnRvV|tIWozZ=6jGvPg=Tg4zyZiD=?bbKH`PN$H@=xvV
zR0DUR{O~&$9ev@^caL7xX}UA6U2fd8M4vaM>+si;?{a~ZKmMpIe&*I&e@3|5PfWjN
zj~{Kl>r`bcN)`=Lo3@wc@0;yh*_vrM<nHs2%NL%_X*}jwl~vU6664Qre)F$({>bCs
z{N^`9cuD>C132ysSZH8B!np0oaV?TDDgqXQ;o1Rta&B&BmenR}#YTnA&5<*|SI*K(
zp`68~2a+sH{$pIAarC$4G%Jno_ZXAiSIYRL&&_A$-8~qN#`LXt`-6Nj&9SIHkTtW3
zUxv3hj$aQSi(~Ni-+v0(g}1-oD18GLzQOhq9~YkTpNThb!!IiBzQkPW_6ONWYn_|+
zYYjw~+;C^I@7Ubdy%TrdcH8!kjyTY|bL8Fc+MFEL_KnWme*4kxG?pz+cfb0scY$U;
zd-hA@2cS1pB>_7C>+{hTlsMttQKt#-IC|IVUc%AukfB@**2<*>>1SPrQ#~sqj1{N-
zUM#ajyUYDyjb$<j%@HOBj7E$^k5V#|R;tOHW^S9UcP4iqI<$MT`?sb!_uM(t>^<_j
zVsZTw>xI(XoLIl=<|{Y&+}t;f)^4HZMB`xgd_fhZv|?H6B#bvr&ft<?0lRPod|uw^
zsD~57jK5f`mCSd~A8H4|<OTEZHX9nxGS25SA`TuD<Y4923fX-{hjgyo1B;)T@(DP0
z99&q&2QUupBmf7U;R>CJm#LcLaPXkV_{U#>KJ{D59_4w8l49B`&P7S|&OD<NvteP#
zz?$K?@dINKHo(`MDMOk(BU~$WF`_~*4^}{;?(mk#NluwFlWW%h8XN1T?m3h#GWG;z
zpJ4d6oD{T-S4&Z$7e!CNUmQR2P;c%go`D-%Y>mJ@E{5f1JU4X}XRM$SwOHw;(+iz7
zt&QmN$hkqEN7b)0c!xjsb(Pd~$Nd`TUn|$`ij{pmweGOsFa3IE-SOqx!~so>gDL{@
zgS0jaaizY=m>PK{)8M?2<B=<ybdxj`CfNtj8j+PG?PNkGBxe#{Ch3pl=V<&5U!>7!
zkjC~?XC8n23`kyh+kEOtSb)XN%_kd;CmUyOxZ%v>jWh6Z!wtDyP)77&aslYS1Ii^}
zTS^8b#JTEch%r$kJ5yc*jI53FVpfdncgE?NB9H7zKq5JTE*TNJJ2^Z%_*kEs@9pZ>
z=a-g7<S*EC#bs`EY1_+uMue6AwDllZ9*B!~yx?f2FjDJn=Bq84^2gQVRc&IgvA5m1
zUA30t(8%I;sbHDRPAqUf9)I5R9>4GYsKm2jrPDQ3zu;lHBApUKXUy>@EeFge!3@w*
z!K6)UEx{kkiad#CR93o8<=m&5Z7L`eK|Z{RJR#YCFHx>iPARu2cY{awO64`mW6FO}
z-l_bO@?p3`yGad8U)3~&f!bYJ*G5g8FkDc(H8qPD2+89GgE7FHx`VF$tk3lSr}aB|
z8pGw|l!rkU#Wtr@m_b|%C^y`&;8BfRPGnLo3QINtW3H7js}u)d$dX-+t>4>fOl_Sy
zwKcW<mwv&2=HK!Etu>%|*59`-j7#4`K0&B3;9NqYd6vzYAewLaNZFv;reg?r?0V*_
z&O|AtMD^3DBGdP5|LdiLUT<*e*4EO}*2iU|muJ481^N2}|66Mgbc062pMnQ%p3?;e
zXamgADk&{xQQ4*JQ?5{yEU!h$NPo}*<<7+@>1H{j_y|-)P-Do9o3!#*hS|qWWCurr
zv_W?;>gE7YvT_O|THurZ2o*-Xw*3!ZdE47=c>eUET?x_smu0V-Se;HEJ?LT@#eq_i
z93%%0xUM?sTEg;t!?bl8g~ebMG?2diXyfbuuu=O9Uth3H-B}qek&E5M-4`D2P1I@=
ze`OU*Meo*{T?=@LUsbm4tYVr*tvEO4%6^Kjf{rqkzH%2LaO8|&h<b!2bTSV|Vweq(
z_Ol}va{hxn2Q&}hLr<rB=(^S)VM0DuY+_9W+$LEZ0Ve${5tw8((Odvkhd3Es@~UCg
zrG%x^jn8*tt`QFgCtEmm=_-v3gUszR1GB(+0H*6_bWliY6*@pMi#V@Xns$|L5mLD+
zsRu~H2iKCNmc9Ly6B=4pgLT`T-F)#mI*U#b7S6f9Iq*F24V<Yp>zdsw?Z6TOp2vlC
zC$f`BCC4mJs9xq_N=T#|#L(2}NN5_+(6=J!dWPd@>bF93$5!}V@NYg2_sbpMtsKLE
z1pR<2cV2YSo%q^TPW~8{e)g`rwqHfQw>`!pM=ttb2Ol6*n#v&0*A*_4$Zb+Lu{@zR
z2Wq5Io@Ox|<t4z~VU3Xc){cp!JLMJ*H7<YIRhM7x?p<HJ>&Vf&7dJK^+?t=<Rnn4j
zyHsv(b;y~Gt1rLXD9%<kX70M;_$#-=U6<W5b@YJ;j!xZj*)CF_+c!DbR}RbNuxcCS
zJt*_RUO5Z)%B#lslvwwdiIzx2w<Q)S5_=D@gkk_ae^jT-N#=pcCkf!NNG{H^wUQ3n
zD-u(BphDL{Sw!|Hdd-MaCyo)j%Shzc#FbyoWIiqhBytQ_d?^S{k=1vuPOk>RMgtbM
zzjNZ1Cr`fe#3z&3Xy}E4K4B0VCk}kA>Pcc$4H74+9g+x|Fx&;d=U-1&M`UIdmNq6}
z=}RXF9DicWFa78A4EaTn;ukA-Dz8?4QTc@O2g+Y7XF=KVJflw{7Dx&J$>Z7YEia9u
zjNLKGgv_uV>pq;FtMMg{Suk9rk#xcadCW=%qj;WjCs81Hjzf_&la&FEB7E#4iSn08
zT;DFvx5$hYJR-qj3J~9D@pU^(==`gg9n)Qw)U2c3X#e&lFLSq}?S!9(OT(-NgMjr!
zicbPoz&Z0I{d)5<M<di+Fbtf5DIaOJR;RlwHPrzJuxL~>RyORERf^SP1wz7&ayr#<
z-AM|bo?|1Di1tpiNI)_CcKtxX)tX7WrTdm3v1$hTp-8Z@<M!V(Q%p^bXwU=q?nhGN
zQnULeEApF#Qe-+p_)ahpMS)R@n=WxxeBx6j5)>UZG{A?P{u?%t2-om5FQGE@N^N(t
zT_M-1X`ms<SxB;iOpoDIH8lR8Ni~eB1QffWgZR+2+sJ4oUU3g#K#9a5W6j0IwuX@%
z0@^%-gQ|0WpqnHuGuG)Dh8fzP>6-#`6-Z`k2uQL0Zqh1yI!U<YVp0rMRYO-bpKHi7
z{jZK`lpM@LiDJX3Rxq3r3vs)jq#6g61$M3PVz9*`U>52GsZ>;=IRvLkEDc;_{#vRd
z!!x275>CLx`zE;FRM<>V;$rdzULRsAybjunQ&fatpldqQ36~i8|9tk(zz%#|$&@Lu
zm6f*3JUWnoA0Fa;VG?ZI#dLjem%2d?f5tUAH@ra+8V4c15>EFp%QV0pf4jrXV*PZx
zdvI@(emB&uQ^Sk)EbiTYe<KL=l3~2&M%bZLUpRV^D!H1TGaRZmGwjx?qw1LmgDZc!
zt})lyet(s`%Pb~qyGAp28ZC?4OkEtd<i5d@Cwc9EeD;sY|3TiX1aS6MIRAMWkpcPK
z>9Wpn)E=guoHQJEv}^=d5J9)^Mj-lzi$svO2e$p!Exo1P&K!&QZmPTHZ~jI=)$RZK
z&Kv(()gB<Kr5p6Y%i+dG+<4wea+K7azqrg%eR8dv(0Q5#6H9e}N>xWc{BB10_T$tj
zM2Y&_+y4#h%)Oi$UzdLI*?&3vU&t59`$7M=C6+fv;xUUSkx04S9rPyfL;A~f2f7CC
zxvWEzB3<GYfmyzSfuwPs5BP37c@-$)$tOI|$kNB}7z_u)MtVnSYHI3XxI~>B+Uvr4
z*iI|lb@^oBEq5?sMQ(pJt=H50V5??u9XTq0w6Rbrxzior^Zd>&X=A$F+upVVo5S`G
zg!N#lS{#mwRcG3C!K7k_q1F@F?J;gx(A#wtoV<U_6~Fis*ayIT$9iEon+~7Z)607a
zY$G=!8BR`#vrK$rHLm`g>BiL$k3V4*d3<LF<jnaM!zb0)HGi%e`{U15SoJJkwkyx)
ze?yQ{A(40b%K{--<=1>RY`F84kNuC%xfNp}j7MSaME*GjuYRv;yc|4J=Bmb;Z!oGm
z14m~yELozYpqi}9G+HIhV!Bar5ErEdV^gn3f-+hZOk22y(>l}DeTEv0XB%9&^>q+P
z;t)efB{neBEzG_OlZ~n>cz9^m*Hl&(s&<eHy>lMMzXzIk6MCEE*3zDhCzhv5wxkV-
zQ+)M2r?G=X=EE_p;nRGF!%-)d=)QTaPG=0SlrNFZCkIE44Djt^Ac=GxZ0^b=b-=@V
zv1S-{=#$GS(KMl(rrBuKo4)JmQx@qH*S*#@O~)}!d*`!}H-vA$&$wnqKYda+*&(K~
zFc3%pXIXfQ+wEo-?!qm;=LVW>$CmYC+m0-2%scu6X>+%+o~kXnqajjiake~8wpt|G
zXpxMW3sB6h6V@4!;_p;GJyp^y&EGn3-`1ONIk-C`^`80d>n4jW+jM))`9F?d^Rmtd
zcil9!M9}rY)!4d!|1EEB9c??!a@ou#rrSMTbv7@*WBcLtLpkTylXM^0Xf0*8a!@%s
zju=Y<-7d!0y6Y;a+8o$mogzE~JBKoniXP%T;ap4~GugXiSkN3ER8j$DPp>84om*I#
z8@+Y!#6{~<7BWs-YFM%gb*&bL*3`z4iS@U<_WGatsn5J-#i>$KF2;U5J4fzzW72HJ
zYZEQvf(`Y?{42Sla`dvJmC1tBsBjYodb!;4qviEO_2TXz5GJqIox=7<uYT#(SMME6
z&y7HeJC+|=_eO3S1_?AZAwQi^Rm0@m%4hR2mY*Jv1Z@jRB;k=hPEzwa8IP*Boj#n#
z?mNw<`PP$HUU4K1oqNV(WBb3oh>)q^3CH=hn{S@>5CRaqEamL?p#Q)4e~Iy^AZ>y+
zlH^m8LSg4q;O8hol7kJBQ&Vjaq^W{FgWocE;R<qUc=(dD%0hE=vJtdfM%7&{80D&(
z@zsQ-)i_zJkm77zD^E=8t=VM3efb52(fn+spY9zT4fb!HAkBsDoK|Vps%a(L(+XQ#
zVIf?qc$J3JgaOepQe)BboN4zL_@;T`E_e71^#=V{)A@8cy4rewb*nU<bNwp$DvWnc
ziDA4SP?Sgv(3Q-S*V0VZ?+q0W*4~1KaR3fypBLo~FsdyO^GnUrCBD*(|LDMQ=o7Er
zS)AN`@ulQdHFr%11p@X%Fl}_^s6RPBn5~bdva08HSODgnn2UX~{<VjTpS}O(>cAc~
zyL-e?zh-Ui<o5BJHpea9<PPh&UWth%V|ROIU0tE&nO%+Ej5!rxTCZcSMZTZ+4R|Ww
zCubC0Nx+J((QIO!cELhzEwJwJ`1~th<Zi!s`C{%&-*f*d_XcBd@L-evCEs<|ntJi+
z-{tE!yy>F(D>mkx%g*QgMO+(26Xz#k@*Nb)Cu?tBSUYgjO|QMF@u}w>x#;$bNd2vy
zn_qwP&4)&F^^4H=%JId|p8X^8dGKp5#+=A@%AXFtioC7{Z!3<`&N|&7-SHxU#STW<
zQp6fZu!$N)jP4o|4P^L<bQ|O|n(NN{s^j`4)j#DkFlD`x=C6S8!*nA{%-066%$RDM
z^S)f;l~w;b4~`SAV^V+KEgO!zP@gwL@4ug_U-uE%?kz$in&&Jw7R<<Hn(OpJ;+n#<
zP3oNth+`pNn71fbKue2tJOC5_#iFM<)w1TD^cZt?HBQ#$vr*4}oBSr&Fvzi|j5_F(
z<dr&@0oRE}<3yJl#RTQ9OsGiL*<g4sinO_AzWO6CGWMGjDN*NM`q~e6tBcbkLTb)p
znRvda2UE>u?l%e%sXB|r(B-Aot&hIQc;q8%MvM@ykv2=z=@KEcoykaez6(}7Da=d|
zVtCE06CxS5=}?IW{~7XW@&y?6nAwRm#x7Z;oqSSv1FgT#m|qp1$Czvt-f=1z`H{gr
zl{;tT!8xJ-j%rZ)2V9@m`OgY*oi486o;bk8ZoxmeB5?J)xqhwS*K?om61rH{#fN6O
z{uM+2g&B^tn3Q}095l|~%K2f=k8zvt<9trzzkC(vlbpXx@C!M=7FLfq=UvX<4~M-+
zXmV_ym2nZFG?Zm!{XE=l&|@Me&|V~iY?zH}9Jypx*x@(q?&xSK3Hr<A^^^TptABj|
z;$3WM!mXqp+kInJy?|^j)(5qJm@IQqihQpVsR<9;<-eb6#FO!Sy+Nk%u*vns{g+P6
znPJh*?&!Mo^x{@+@OLY1YU-ViuM>kd|8Qe2ZYA~ke9U}S>OMvJ&zJ*UQ)5|2iu8AD
zL}o&EC2tgZtB4yV%Ttq_XrqUk+9gXl^e`A<otZpIwFA}(+QKWtl>u}?G?2%>vt*#^
z)$$ZfELO%cR*V&chRmmyvEmpyWT!bmnyZC8%{P@ZQtLAJbsdZ&NrsVP!AK7QVN!%R
zKmp0<GFK4>T)@k*kcmjM9EP=HD$&D86b*3gn9hk{$Q*}07MF}bRrJTGWMLtQZ%21(
z)YaK`HLiL@_ZbOdDzJP4{51q&l}vr;3UXQT&M_@MuVYs=3Ec_yR1_802fVT?HVTy1
z=4`*}JD`X2!gdX8Oo5DJ8pCRI_M=Pe&_I}J)e(eJ3rt9?XV+wnh(?W4(P;S0wTaP<
zd4cLPCPL+#d7VDKn2mI@I$Xyjacc~#MTBm}8bk6+I1bZ3Cuj9^UYPRgn4=@Y1$w-U
zm@;>j&jnQjf1Se~lQX)lRRcHmeG5*Ss}9#GDNb+`jxSmkoE$Yc3ySdWS_ai6_7Ki_
z{f&%!D<n%i4z9$=W5`rQL6nZVS^j^Kz}pD4b{*t1c-K#<#qR1+aMeQ^@4s#}6^V#X
z>~de>{o1i#y8o6R*I)j|aB1Q5vv=Bw+Ns(CG!j^_mAOj}bPBe*NxJ393O%ej3;hFG
zI5b}t-uYnX@Xej@ikGh5XasGmD9gBzbMmZmke(qog4Iz2U3`ghQn^vNOL;(fo$>+Y
z!^k<AV-k0lC0bIqM%r;UrW(&WE$I75VvAY-c_Kp&InhMtE>H65A_|F&iONid41r^E
zgtBCS2O=ZxPgo`4O)$JAL&Xw*tT~c9ju9#nnLu&=RtXS>F<Xp^w+7%TBrSSo-#z<V
zleT^OvHrr~#~+5b$4<AKj(PgAHN&u+IQDG>IC31%@g3b`FZ9A%<WDyBuI>A_hh==b
zVA=C*&vspV7t=h0M$|Lf`i8!uyDX|ySj1ettM9>*CN9gJun6drjbU9oJeY0yOMI^B
zFI9R6H9`(wXPG89T+4KIBp^35!EMuW1-p3UhM_we1ws8n*Dv_BS<k)j+|tHg>gwyz
zzGE00uI^|wbrSjYN&-qvLmDnkQwYege+9k&2wD&@ERj#61!@6ZhHgH+Kt6jwuim<B
zTKZ?fI}zWzC7>~RgBOzPwtuVXU(_>i|5fPm+S?jhEPhT4lxO6aP5oQXIF!}sO~gJs
zAH=1Vl6Sgs>~24T?{B^50<K+h+a=m5aX`S|DNY{W*+yRO#@lbPuU=g_bZ8~Uts-6>
z+ucusPJA+t%acHK2U(KgBrKxYkWYW-TgPAh=;^DQ$FDkp=_hB-d}ICvM~=LG_aGT8
zg2K<v;rL>_F!(n%H6qdN10Ux(%BAD%v741Ul;>mQwcGC^=?`=*L}G+KoWEmM#rTzt
zUpvd%aMb5;g8f7w4&oRKk#)KgT(I$4O@8a1+jIOA$$x)g?;BsZ_14&pUdPp&7{8m+
zTW&r7A8|Olov@pBzW=A#A#FD-!s7NXt2Vh@Hy?<c2L!ze)-)RLR>ALf4*7=dv~0_=
z4+g=nX<CcYgSvj3=N&Z7mTkWq%V|Donr+)Ytm_xk?OQ!CPssh6_EyjPq?UP3+wf!U
znB!25HG=@>NW|ISq%R?#Q|95G-3?E~)jYHd^VwnOWniSMSY$HluE=t4G*hw|^w=<G
zhRv48K*X|$q6O=TBz5G{sU5B0(Q^7$%gE1!btHHo8nfQ&B()XCu-|6+RdA=1K@$`J
z64$wi$qM^?M5wN;#i7LXDUB0KY!k6j$-}mx*V=Ic$D&f9!U!#p@H(P^F=SBEbVeR)
z@2O{|u1$pAR|Bec%2DuD&+r%z3Ztfu^Pi?^$$~y=G795YN1QXCvN)x*5aZ0|_G3X5
z)<Q<%$k2Bgh*!TE!%rG2qDoPN=`cd`IrzMe&QM;VyjppK@($(w%5M;hRKP;TP6n34
zQmk>2b^pz)CE&J+(NBC0R$y4bjn97K3)IbWHWKMidV#`0GbiIa(bKWLh83iloL3p}
z?s?1Sug^fN^HwUyd?znr$7_(N0<g3|#*0fWi4GuXOk>fRl{^%q9v3UvAWm|iM*>{~
z6St7KZ8XT6#hDzmgnm)Otaq?d=9rkB*X?H8_KQ_N_M<ozRtnD{O)ZhekrxG(qVG&L
zZGC=LXZ=1Mtx~>w4>v}840~y4yHg9UUv7eMkAgr|13$I{uUYoIg(=q_F4@MORfDhX
z=5%$H^bg<q=G$(2^Q9*qJaOW|m#bK{%FOBUXEgr&G5}XVsJ{qfLkqzoFjUHkAvCm@
z7%{N!!B7baDQDou5TDr=r%23cVLgaRu`YC7wQTJUUT}nI+ctukk?_5qkdyqyIL@Lt
zsFy>p+3>9Pqy^3}?{o+V63uM2Ew|qEf>JGvqb!aM*8zisu_*G*AgC36cdqN0t1G6y
zZ$qdT9Af0c3)MpxsA6NEZmz6ac6ZM8i?txM{0KZXAwa)P;N{->w-|Cd`4Y^R)6ra1
zP5-=Q_VluKk~#N8iP#j{B()g})X2e9NdgZmV7LYbp>M*jfv%Q8FD4ZiG!;i2Y2tvn
zL>y+?LipU#Cr*c{*s^tL3yPh2mmf*Jvj=_HXr1M0V-hQ3T&#yIP|$Zk6?M=C87G>q
zlY9?}of|eK6gl!op(l%kfnXs&MVOI#H#cm9n|z}AT&$iUZs-!`JExmq)4_(u&3<CA
zXi{HVGQu!1_U|{6Ff_=Gq;ER0nc9W}2e%tF)c_-!;%p#TzNS%Yv|&B`*{Kyd+n@5u
zl~;lV8o%&`am^(kBoedT27m8gK$iBw;ySI|ubfeSZCv#!S}r0fxvU9-mBFxXEeL7&
z@4>QL%&eo`8A)F&QjXd5Fse34iu{@DS~o@*vL;-uEabq28b+TxnJn}M$7&_N1Ko2q
zbRc}k5b?R!StT_!TbAYESxP=VQL&igCsFDKL^Kb#;g*=Hp@Ox|<+DmAv&fKT*}d9x
zCtE95HVS4|5w+*csloho&zlBY+zh6wL{|^gH*1^(P8x*vqYkaB&@*OJGSybW@SeeG
zo<%MWu5iBlBFn6}!A4q$eDsfrmIUBBbAk8|SfS$t^~lgn)31O$f2{h7YqL%{bxh3f
z6l!KN3(k;1dti~R@T634G#fShu3ouBlIR~VxvL<2pD+=5Q`dyki_<OrQX!ajDYD(F
zni*uRTLf>w4W_FTb4ZM}(os>AL#N-f-#PN0AknmD5EYVQP~n<eF@@y`(+y06VwR~<
z#8{Z^7=B<X%CmFypKU*BSRFV#rxmf@CflKP#(8Y=mZ(&Uwto)a$wh2=f5DqzBre-_
zV6=swcr|!a?Jy85t}JYAlE=^OeM?k&+a{rx7)Ba2W?b*KRdD<Qr^I7#alPoSTy;#z
zIj5By=tIyg=aegz2SE=tJBxIIVuxF<F$uRg+@R~K<cXlM%kbP6Y3C<ycGXsQIjz$a
z3%*r}+{ooYl5GNZ>)-BWswT71IiEmp6x=ZG35(K6g5V)+!T=|46;-TBZiAiGRV#VM
zj-*Yn^grKmMC6{oEq65I2^7j8e%qQaK+d)`gd>?Su|?R?2#gy%UED(`rkNom$Pq^{
zc7*5%7^<oF5Y^NL?h*b^w?3Y4hVA?(ZhvN8sjqA)$H1pjLJ49c=kmevgRv;di*t^|
z+=7yT5HgG{13gKc^=d-K(xYcr07+l$9JKSV+|`}BWHedVmK_#<O{GLY|AP+8c$`_%
zfd?-f(Fz#2>2AP~63jFmUJH46`svc34{x37Ej)5vl3vjw2fI^);l&|ydRn71dcLb6
zG7181s-XEojhN6r*7R|rd10I&at8P_f;q63)Sgi}^ze22HkTHz+c(=jmPX@P+n>mL
zv#9J=9)c0!;aqjj(A!$X`D?WA7s+5l(gaHq-#*Chd>$L@6&Y#l<W)||zvti#34-Om
zi5O2TVV;g`c7t}wlU15nRbeCv7!ksbVqMhCn1O2-TNPc8BO6v*NhCxSSHH+B`OU?N
zi5nJ2YBwIbLARSYGfq0$_S{k2(S}3bO$MIVp3LkSJL9Uww4lJr<l_2Vd$;Zgs?k8>
zF$mB){+gjz?1WXTEV0YF2xD89zor{yD?uc_M4m)!8C&qf*~G-+MBq+2U}^c@N;bvu
z=hEfCYjsk0+KaoBuD=p@`N{&PJmP9d;M37}cV^cYTcQwX%vQN_KCiBjGtQgJ;q$VM
z!G2>rS{~tqaT;YgRo0H%k1$Qk{gISf8Qg5CZ}RVvi~^&X_YN5hDIVN)NAxG1NkR_n
zuWua9f+$UWLN~AOT(B$F`I<ot+dbB67Bp4k?L>Y*&|fQ)op9o<`|hle$=U56ID~%c
zw+wQ@-yR-@wMHxO3uI4mz77Txq2vc|zMdHdlV7&KQM+aDu4T(^&*o#1pZz@fXYy$!
z0?%(>J|8Yipr!hgG-+84O;xZ!$6O%m3|C^IbDq~D_&^qgkCCd{7@*6V9Z6fVK*@a<
z1bk0<X=P78aZVJ5s<`6ulXYJp9mj+Y!_M;I;ptX+sFGbEHXPdl5oMKcm`zhxt+ciu
zH=>P~ESvFCH72B3pML1-hBaw;8lP}Id-3{WkC0<;z3a;PNNCJhz95?Rn~kb%fT~$i
z_XTTUB9;Sif5PUm7f(5EZSxE<D@L6<V0GG#HLmA)QrQN-!$wT^5%RT4e2t(r2xQE3
z4|&Jcn>QS}a`V`z+F3qcedG&Y>)d+r72C=eh`YMyu5)u)3($s+X#cFAMSYe$bkFLs
zQ!6jo{3SB;U6O9U?|tAU{;RS^&yWMquNJ{}+pk=!+^W0;k%@Db6>tf9EpQBL2+2Ce
z0clAfgW+g7C+O|xfltKd9wqsVFhZ8CY!C^p)5>c+a4HB6#1OoYsEk>&HGr`VL%*N(
zM}2t6FK|QZ+7YEChh&nMTE!w{EA&JRV~Tr`XWCwcgZs!TcRwep2JPxht=5XuG(MA*
zhn;FsEyJiQ)hoowyrfwb_T4(u)QGcweUh~51EWBi0S!ElgcCIKikc~eh6UTMU($6_
zNq2$Sp=nmjuSS*0tzWq~ZpR<WqK-<fLhQs=F}X1-W}yRmE#iiDxIkj#vHS0TTPezM
z+W(Ypl6S*s^(1rI0p+OjJmuv$uZ~k>8QhXY&d@!(cuGUu0qoPrcO#(*@J{FH$77@w
z1QSC1^Zo#nH!_)*0pbx^kE`Q53Oiv!HHO_Yd{(VQ%1*LSEfg+}Gj5CUJ0R^FQrbTS
z(tgu64dNK)dPD*<;FbxlfR=z-v>a1)ZC3*`?)AmEpH!X1K52%w6<QGs;!?-(jLe8{
zNeiTyPEyqcZ%_CEI18iENe9b+P5xibt5$p+u`Gv}*40K5SS}%|Do7Yjc@gKKu@x5{
zU9=LMWfQL920CG7-4%g<^JSOa%v~Q$eThf-S#l@X;6B{f1!WbvxI~34$vY*pD3+sK
zP>5E}L6qk$v%r-w5m@hn>BYa(Bqa62l#m9a>TBz!d3_&Cw6)4?zs~5DGu^57>?_Jm
zlWJda`s*d=hx=}hYcZj2ka$rAyrf$OYl|;l!ddY0!q&d(jq`yQZ-1T~V#~YA7mgNA
zIpN{%1uuCn=3JirR~TEbhH-U+oUMA5@>9x(lrJdXQ2rHc_a>PnT@dZ#+JWW&MeV>(
zC>`LVcw9P=$cbGP`a4wvgU(LT!02hBI*h@NuucRAD|94~{IGjRPSLhu4ClX)$H{sA
z6XTzh6@zJ85(=Mx9_ZuMG5>Z63?YHFL;WlrjCzBS;GJh(%d?M#wPLiqgh|OgkMvr|
zLe~><!k@KY0urK|kTvj^8AbFH=s~;X-!4KBpG?qzgJa5f=YMpzTBkap;0G2<WrP)?
z)c1tr+9Sr9Duf|u<VtJ-6fhF7cl+;E(q^g;R;|xe=+f$58E9B%<Wja5zR5pNWwgx}
z67Zz(FZ~+qNI_u1-#VpjHQy87FS7{}`NIDn6Zp#3$1NNo7a>@_L<!ajnIL3KzUK=F
z+6Et6A^0z1OQ;hn{E00@s@jqhWr(ovMWA<xrOPR@X{IssU)?Z5@D5EnTny~oH(d`x
zEure1MiK6cYI7=02&LDnV7Ze?`rO}u1+e0&dV$JX7ywdF!7xbZtBK=~0>!hZ1w10e
z^gx^jNhxg+6?UO5JZgM+pn~Uycq{NWgV}#A+^!wk**<&-xiJw-{>vaFKCR4Sewsu!
z8&iqpbY3|yWiIi??$rWc>5O{F61Ic$GLqahIbLiw1_;Wr(RBLKlefGp@UJ@NXyuY-
zw>jyQtMjUwWw4^GTE}NqDd^#*5N-b+m8Ka{dyLF)R--b}rd0S5s*WZGmigwJkKOn2
zn_p`?FTCNz&rWdX&_P=Zx*9LfP}ZsxW=&Xi$kLiu>b?hB+u=3~wAGucRNK8rWwq5t
z&kW2(u<GZFRNb>%qosxC9KYtpj`@nbKI2<dA-|-ofdzL=IjP(W+7{))+m!byA5}i3
z{3qpG%6H`Kf-Eo<V`R;a1O?4Of)Ju|%*Zs7FjK=E5i^I9fkV3IAUEYb%_sQ~H&eoB
zX6M}1{P?`^f@fUvqH(zrcIYDcTSu~c=IESD3xvr%&@9gp$MfT#Mr#^jLVhZprTpA$
zbO+Y1o1evUCznJqdC$zsXdYvjoO({YXF}J&gxZL~pr%waW(UhNnEq?nalF|CeZeR8
z#0kz6>ko3UM<zgy>%wt*Z{)hk(*n2^2G@mN;1;NwEGwk0i4@MTypX}-hYV531b96r
zPYOck*ZXd*=00L00!(uPJhSRb+jL#i6s;NR7rNr5npTLKO>o476NL3;-*J7<^WFlQ
zi%ztnOxJ=|(eUCzH<@cev#w{dS9HqdPMLV#be7G5fB_ezHz};R4A-Vr6U$nMYa+~>
zOVb&bG2NKiu&uNXSEp5D%i2FLRC-L~#R}6^-W}>9{#)BCBpNjzO;Z~bGCQ0`aRj0#
zisLkjK<va(a>zHCmL=Z4G}V~nm^aEwgG)qz($oa26h$f7{(iGwpJ2>xxRDh)^tq~5
zs!;F(CzpiK?OqrX5-&6xoWlVno%xZf+7Ie!YC01(r4zMAJt*VF?fA=I1-<rRh0Dr<
z5PE9_HV4*Qbz7R~W|$O5*57w=@x{eUUUJ1WCHvkPe_(qpey2%3yxq9$ve!NI8^)^d
zuNrkF=R8$L(B5;DX|R_bQa-4BM)^F(GP5L~gyxbyA$KIf1Ca1$k_=`bYlpc=bE~R5
z8f(FvkU|1p%kZYAE%&hwc5j}`Dv{CfKv>*^gcx~)EzC^JE$t*8N#dFRw>G<ZsU;4i
zEXSDa43j=sy!3Rr%pwHB6O3dT;TAZ*5qsXOTZ@~eB#DwLB{PPXIh8U3;34{=YHa^J
zxca6$>zV=&f_{nz$(D|Mf7b8|{zUoQv3}}QOG)U3U`cV!ct@i}ujj2G@JqF<m5}*e
z<>H^Gq(V}2!Y;-|q8f%VVKy|XHOwX$S%tW0Pt3SYH*?c^;2I#{{Tg%(5my{Au2n?-
zS!=4p|6n+J(}3f6-E8WPS%^#4gponRMiUzTh_lCSTA{1|Pa8QfJ0a|rSq`I4vAwXB
zKku_YKKr}$A@T$)|3AtPi2(Pp2+w=8Jofa^$-}vpG#RUc(K$II#_D0bc6i<vur3DZ
zpll%9EzOy!u+jmUB+{ovCo*KBc{m)6>3??SS8-Z3N9&d_I>^ftXDf0t7b#bV{T?h}
zwS&vxkaP*<XVM$=#<WtHtP9&PG!kcH(uZUj`7BUQYQt`iH}Ue&9F@vUa$gg4gqGJC
z25FYKM^ov$BOdU=KTm^=iL}$2r`6i6vPKG~4PD97OPD?3#gd6JHZ8-oFc+l4RjS%(
zzxbYse18_0KspE#i<_EZ6DnL&R}JO|Yc<EU{EIP3#F%e2RF+NbI<@s8%iOcrzR>g{
z%<0hL`3tZ1t=o<?myk`7)OW+<jRSc6@axia0>cA2EhRjLBsKt%g(V1?LnPXlK8dUm
znTt?OV7ipI@2g8ZC!LlXhN(B-l4xMOxoF2Ql(L$*r>JodUDuST!;OPi&y|B%A_trG
zNmT`xBn<^pJytUqx{lMR64keh9#=Jq%EX!=ytFb%z^O*fN82qbIZosohS2o3UkX47
zGvcfl%0*pm*Csm{yJ!@r<6u-9Gz+Df>8p^4LJJVLj3=sbvRPuypjE0s|L)Er2o&6E
z5XY8<W&}uY*AIkd!oA0PpgUKYssq<yIGW)LZ+BoC<1f76{7e(MDK+BPJDO%cuMdw!
z_ltVyIRd(b9WKM;6e3|TVvCsh6Q0Xg#QZF-*vQ3bk$yH3WzrH|a{8L5p89Za^{Eeh
zV0hns<jnRNa^}Q|#`aUB@jJgG=k5HnPmvFk$I<dat78LmR+#AGlpiw7e6rK&e6{i6
z4>!oMhaT#c?=F4p+H1dec>8-d-9+N;ACk%KZ*Ohobx6u_kj+zY4u;HjEh|0nYoAa)
z3qo7U{H!a$JjX;1WEC9cbVErRBgQSw(QjoaIpbp<E0<!YPnRY7&zO8-GysVlH|1x4
zT$9)zNQCb5z9SmV)8D$|Bf81ct#r|YhWC{|mXFBOLvI*sltv<k|0B`ukFtLEj%Xzc
z*4Njg?se<I{Cp63zZFhD_cdl%s1!oeG&J9?*ho5Ufw(ji!*F%oHH^eG+^bEbd^l<r
z%_@SsX&n`Tw{fz<(mNax->PQ8IBMyz*NML;WZym*jhvH07;dZwQGsM^bCZz2Kk=my
ze3bZoGc%7oa`WukBRAY|=FFJ~9(cgE+wvTutWq#EnJ!}3?KE;>u&Hj8hWWw)Vj*F*
zMYy5SIHnpaxB^KGHGzZ((9Hz3)eP4aSiXnBca8yjMP(|3p00y_FHJxE@N|j8>Bv~2
zYhE@rHLGZ6&nhpWuOcr|{!ICv@*}YEOR|d4BZxJ~x`P%xO2kN!(1REek{PQwIkZ7q
zTvniPi93%wqQ%-p4zn?ZFZy=qoc5(i&M@h<mm?ox`ml_k4dvPlt^VZ{yF!Kx*zhn#
z5A09e5!pHMU6yN0)FRA^T^Z!5cX)ISVI=9e$vWw;Gi*Z=ZG#+!W3`-p*d=W))>WM0
zPjl4P1?sX22H5Culu96`4pt-4GdTFoqQMO;#EOY(S)3Xb-;Gt4?6y;`g{dK>q9ec)
zqaLQIQEHpEE;LSj!m+5pR|5-tPnBb+igLG{SbEV9C?X(&eM&4wz>70-QW<brJR$M;
z;7f&IOb>iorkUXCX$aPgPO%75Vf9=m1P50GXIRwK1Yr{$mr%#xj)}Q}@UVR%)8(+z
zjG01W2XaqU%^!c3yCBR|$0mUfy2Z0}s)husM=+_78M+BSquJ(jeG@?v4Fn?noC;nn
z<zTX#wymnW845hOAPoFC;Fj8O6{=}^qT$%3f@u+3FWXL`kVr0G7&s~@3p+%#KUJ0a
zf|1i8UeW|149y_n$`GR$hFUNUI?1?2EMEf5&m%e{vj!<BNJe)rnizcq_t+GAeSWX2
z+f$wkhpC*jGp5;b1Xdu1mpJ0u+e-ow7Bv%N!HALQ2~j7AR;l{XLIiuJca3~zR<aUL
z=h#~#-^@|@nH2`cc(Dok%VErl4WG$5S9bPE@|)yIWdX;@c(xSNXm=pAp2p=}Mr=Nu
zokI(jeA*ec(+jK1Ti{;Dt{Z2~#b!n<FUzV<`>2`ir`$N9^Q=-O<PtvuOXo#FC2Kab
zs^8FH*lCrDj`-(3{Qf=g`{(dcMy;Tq1@MM15Sm-d%cuK4+kgA=E6LVH+ZU0K;p?CN
zN!F4p7lE9ghGUI!O~ZzAf%5apdzBACJA)K+2YGii**td<lH+rfbZZpZzmU62VB`?S
zKV2EDU?~|4VKG?2Nug!ASB1G677=&H`+)71<cWx#ZeD&4l0mwb(DH&RB|$byq;Jdm
z;8u=s2&M>KB^!McI76Mz^e`gtF9bo+-@W^h-6z26W;)kg$5L4%L>nA6t<gx*^bY)n
z*ySoaZ@baj=aizPR<<m4A_)`2+#Qr$A#)p+r_;?2+u8d^)rFAJF#WSMy#YD|cdU@S
zIIwNUvF+F1efI~-pMMdzCB*|62R26-BNB>yjb(+tK~GLu)|7KazLx>w77@oe)pX2)
zjpXW@TWSo`)IVj1OI}oE<wD)}1+O0Vt7+(fOY9NPOzJhp@}p{Q;4!CL*d?2mb_3$9
zy#)G!hO94OFLXs~q7RBMd*|CvtgoLS3;Umc?}2&p<o358c;MULK0em-c^n{+nRn~T
zG3A7En{vPMBE*D~`J3r77`$9odS$~b=?K)qqeKienLsK%utA<+I)*Pvp#N)QA1N6V
zY|5mLzO3w$9u&?PcsMyeMn}Z_@)Y~l`<qR}HeqzdrAO>y;>>lfpW8m0loG!Z6|+(n
zz~V%?5GR>OFDF;C1}s+7M%1p?n#UI$!*uU0PPR(EN9MZJH!v;K)ro%J99isiHVhN|
zeqM+ln@Npn;otg>J(K3-DPf2#^isHyo+V5@39_<2W6c_(WK7t>WT~~V5V@Y$pKVV~
z*~{jaE%#-h)iZs|n0UuKa{f~5>}Saf;odjlzQrJd^TgWmeNmsjFF!xg+tq8_d2REW
z`V|+B8u;b*;}>lmIJ`vKZt50ld!~+D8ac08X!!-NP+e^wxvKP<NoD+epCV6yZI>XY
zVI;NYNM`HH02v+e(Q^Jg<b(KVWx5~RqI0Y~d18;@>^?N<zU+0CwiC9i;P>BGJaP3V
zUAy#^kFR8|SBX?BT<IQPo!fh`n7SZGT!qm4$b%r$u2Jq)KBjzyC}bB%gmDsztX0gJ
zT*f3Q@_%!dG+T%>FDunoy3ul9vfu6aZrvna!U#oY&>Pncg4Y!H^P+N4@4a{lYt;I=
zKO_V1qh*ws@+XrXjDGA;i09C4CNd9S`h&<nBf0qGjFXH7?(p&T!3<p^l38yYv==<y
znMKr+-nmonjO6~^@$WYCs~L2bR?Z{yOS`?Sw}Hs_!##9aj02BdL`+#D*=}&^az+P|
z)6on%Sjq`!o`UySVSBe4jj1Ui3f0#26By<CAI!aXyk%E)CU|!^d!HQcNjJy$?s+-f
zSbFtB1*w9hDwV2~vxHPaqC}8{C=-mx2oTvejhi&x?Ka@Hal#nm0b{_}U>ajj_qeA4
z+x!~4$Fzs`*dD<4t66KG`$|;^^P4}XUcLLyz4x4b_StEL{jG0-@LRlMwpXp7uqRwr
z%JW(0#wvfmpk~uS53X15R56o)Wok@Qi8eqi2Js>Z!?wXSy<AGjAL^V+5cWPwbqtgQ
zak}Kgk|hkxDee=~4k9g-!et;FX&1hRTN}EA_L?b;sEFz4h%5@^)`dbqq!X!2Hv;L;
z@+5YkK$IL;2+P!8L-a1F5+s6ax-(pJDhAvXJ^<B3vowPE>P8(5L*3(4L@yKEqYXux
z!gv||?;xI8qi74%mN=L}gA&23L^G<Fqq-&&LXLxxtI@A%Ou_-f>>~3E3-DYHZP;Px
zmT)<ogG!h&XxI-UITSSrW@ktOrzkb`JfUVf7%iYd<EUH|@ZpopBpy5>;})232tc9^
zd1X<j9T=l|g20C78Twup#5|3kom0xcm?rnbJB>4T+pVUNU=W20sbCfd6H**Mh8^nB
zQJ%Y5#lIH|bA^3{M+?7N_!dY?jB&z|Kc!iS@}ZOF9*Pt-gF2}(+yR{ZVV=c2Gg7|Q
zCAw>{ltg<|B~Rpp=`cGo5;2^B><xLSt;(!~o`>}$R`JDZ=H=w(NQJbn25^k&*rpRH
ziEA`oi#zLkxEExjS62?V$XcH21cpBrkS&rmk(VIX(20g6YQ2lIJ;%;WoyIUl2Wv3n
z*Dq#9=}j(zYh->8Y=r50vK}Ray)%ceAjK$_V7SygpZqKgHf9+%ccGU&UniYQcQ?NZ
zeLrKW1ScFUanO^&P)b1QjxzYh*C?qoE@B+%+?MPoVM@$;s0~Wc4XG=^u%ae)Eoy7R
z)rzhG>aOefb|A&mm=J;{^^$E6-6~TKf;{l@R3E~S<jqVwcr1zM=Bkw|`m}_(D#ll~
zx^XN(d!R|$YOc=UeOJKdHv>OHb{QC^MGNtkpf9ULEIRcBA^$J~v(yGV!wNjJLM`er
zUpFy~hhj!#q}6=$B^#|vj2gF=G=z=dgw<6JmQa`d2T<#Qr@KLiaq4Y)Lgx<`4JklD
zhcD=@ng}qA9O{AdL{rdL^v#2gAq`bMn4s1TzeJTgXOo0NEBSG$SV23&%%=z^;{PJF
ziliMH7jBt2V0Ut|R<_X159W$jMmF*~SM~%mRh~?hXw$R36sH`~Sy*F2Q~O1qA^WDf
zEJj&}0hsP&-+R=*-@5ZoqV2xwj<0|HA|Jq~$@@X$O$zlN!3Usr#Yf>lg`<;Km%H84
z?r*|tx%#Q=U$A}XiCaE%4|#vLy!%P~h8!(-Z+`7-AAfxJyRUi8qdAw^MNHscwC|7P
zc}6;=$@G_e#BdyA_Z+^yb?%Gj@gMo%-Y4YUhO_&rFMe@u?v(m}38w*tm7<UMa`~*8
zpC?;^nWa33AObOR41s^S1M;`-zME*5qPZ4yQL&FU>W|hcg7eGX{KI(s?MsHu=l0j9
zr#MT#x0#<W%l49g872~AGZX_i8MOmUqKw4a<m~R>-Fh3cW)tUDJlyl?>-4qcJY2B~
zn#1!8FGciNcnJZmOfIs`j#o*?W%*lpTD9K|Vpc<Sp{r6Mp^}jAS>@peD1>oST<u+9
z_<c6zn%=ts`V1~6I7#-hy8jcKXYl`?8m$SFlu{?sVKn1sG_B5%|3}x18R918)MK>V
zZh|R40t2fS_i9zj+lwGk#YXx2D?104+hw>c?Y7*?j9(8bGc&IT3#1f~&hIn!`^<^D
zZ)ApiSy6yAuqb^aOjsD;*IQ49QP<+S=67JQhpwZS+<G(hOuDQwM>3O@t%r7Q-wAJJ
z>=X6H#Q5lJC8!0ngW2x~SU%2$LJE5NLvVzQ-8+S|g_jkchEJz#YP0<YW|mf};5L`z
zO|rrlNLOyqZB0&41%a`nb-HjY`{O=l;9xG7-8@kxTi{*UogEKXwCP3s;zhh8;4<>R
z{?jl2@<09Z?jPO!uA6Rp*Dt>7rgVP)(bF4XI_sJ(JmykN(|~@2^X;Q8*VQ8szIrGs
z%=oEUgBK0gz>o~(9|0?j%`#1@jCfpw;b-!2wr~Nz*()v5JWwS>UYHSbQ#zt3Qf81_
zZhz_Rx4-mx%O~zQvAld@C0&|n#rAtOLn<oBqnJ2AS`YlZ?~jWba^{ew|7}@mO<?51
zx@Ux56)fzIrzu9~or@QuFWSCeUB}VUKyvOe`@$E=Kafwr`hv)wf~JU7pNaYIWn)F(
zt#CM#c)UkEuwk-JmyieE_O>s*Euscb7Ir#^?p!>+NM=uOY@FVxn$(1^-gb7d!tBn$
zwZ@$X@k{dI4g6a1v;Pg~5AQ6r3(JKoRMwn33lFLN;VG<MF<Gt9y=*v$>_rC7y)4st
z*xipl*8V@7Lw#H&Zacn>bVGV=tA885f6L51UEeqJPWB<jKFBY9CHTTWc-bp?C#gk$
zAJw{ZlvbNTE&7MBzS8Zk?EXW_SjrAO^U9w{ImhGt6+Zz<@V6H}MV?YzWLaUWa2?pC
zPrz#OPGl!lYCk#)*ANo0gWd;*-U3k1QAcXfiAxo&6*>dAnOZwSrL#yyf1ykg^*S{n
z`YJnRl&5Z8&5NC=R5EZfdKZ<k0pCtPgYq$XBuTD2dj&L5G-sLf_1XE;C!BlyBsPe&
z)@BoF#;4O**vU&;vjLR`!f`zh6l2ci)&rI3uqhIZ=;c~FipnwEwwfJ%W52&xDYq>y
ztp?TR|8T|C*|#(r567-|)sY!WzSQi2D1FbFVKn!YW7xM|GXtv@h+)G#^oH2bY|tbO
z+ks*&QTCEblA8WptzY*i2f|JxZTwuZ9;J@MXxuVQ!fiXykM`}|?{~WqD!m%DOKB}}
z$foVr1k+_u#ONu5QJ=yLXUhV#X;ar4f$kW$p$oB|3TEo$XAEBPq+{p^+}85=5ai(f
z-(lVQ`NC0*MdK<Qn}WvJbA_BB3neO)7@pQsq|yX|OnJ~bOEKLmn6>oDv=do6bEQ_E
zaq3a8mW509NG!S=<w3UDrIL>{WB$HFH`dzgKJ6VGot-eVnv}F!Q0x@beueyduU-xU
zq8)O~C^9Cn&Um6ETRhN8hKm{SxVT4$S!$sVlv3~PEzp0JV7=WLCXG4wQqEtu5EWX;
z2sIlk0>wN78rX$Hu)RBzscQqBW$BdWM(tmd{k0QyQ=EmCIeXPr-G|=x?)%Ta^Q{lx
z^x~J?FuZf)iQTj3&z}{hrd`qPcHZ~)=RWW0cRcvOyOv*i{h9OqyY}Ds#2)`qUI(i%
zk2xp8OKv8o_tKEF5j`}WY|<bT3{LMzOfiIeGpWS1N+33sas9n%C2q3LpDC|)nqk1{
zogypM=R2M97P7fNeBf?56V*GlR=4IGYs;?``}dPiyzQaqJ^jwJ54`Kwn=@x#Vg;oz
z6@0#2qrG0ElaR70>~Gw;n8YN@NZcuVx)VoNRH`>^Y!)tW$MwRXaANutieV5QBkXUp
z$#6ZpxV_%Xx}(7+QdA8xl|`{TN%!1ExlJx}&Y^S=!vj^;wy*AC!?rhPJEr#J?e@NE
zWY%VvkLuMl<p-_vhsnt|iYIP7w|%{oy^T)IDkbfZ^V$)7u*H*`ODR6v?p9pxdOF$H
zw^sboTEj3%qu%VEIsfT!vs}CJi92U3W5HfC6U}fMmpzvSEB0(*<MQ4K`;%-sTn3};
z;<IEj-g_Dt{b_~(`hgtmb<D%(t~`BU>%alAQG2Cv{-YCi-~s)K8(SL-4eR>qp}BPN
z&`yth0tZW8<>$=I?Aw<W?QCDIb>{q=N}@Pet~GCbB4{?lnZZrwJ&#{j&r+d=*$Bgb
zX~^z{&wlTR2dnXGzxHeSeJ>xRZ(m$IwXkr>IF*GivU=>{)iGZiSbRBRRbeME;4l-g
zSg#H8W)Lc_2KrRUoTuk|vsaCZ<WH?~G4^KKD^V{i@$15HaLeBl`I0lkTdP;MuUu)(
zxogfId(VHYt~SX%K`RZG>UMS54gBufJ=d=Nbft3UCH;l=ur}}W(o|Qyq%9g?rw@^-
z?(%+9Es>)~!akyTQ|0GeByonmHmU%XpmHKa_hLg~Bi#tC^{<W`8I3!JC$#XcJ~PW<
zwX@^cwp)9q^>(*Z(_tHu;Hjt1WnNK`>&~qRyJ#&vbvTaZf2f{IQ>LMRx!;;3Rtd97
zCbQ9GIGUufgn^e$Q(cT?{Hz{5p|MtjvW+W^13UW<zb7UydXYXio87wnqq_M&vLj#+
zmukFPJ5VA=>f76Am*~p!>W1$Jqs4IXhu5l7Ve`k-R&Fy`?5BQYsPiCEBnB(6AjpBt
zo>kS~<<*&*+Z|Qy>gGbSm}%Q=n9Nw9(QAECTwniDHU9bfLQz&17nAn>Id5fVWo{Al
zKb<VCuRpu4kNvp1!WZcT7y4AeJm3{^MAQ9G<&@m}6Lm%~$MMZtZ=^n5B?`}!)AkJW
z%kwBmEazFzc|EAb8alTO(*`AbV-PYQ6bE<<#yN%cNI>!G0NxW*r=Twkmyu-=cR@@|
zsyx6*_xK|kWTc66o2E%m9Waf19hoeF@N3-x+Q7BPpun5&w(Xm5An=yldWB(JtH(7-
z_2@n>?5plT&Pz=@b)We|YsuX|w&gH)#<ZC_>ScsY^vv7K8V9qvKr5@GI92<%)3>sZ
zoD;YS)a^tF*8-LGSuL0B9~2qrECSQXY9!ILglL?omzY>g4i;S&P@=;-F7k5(ex+$K
zv?4vC>#-l>%a3ZhKTMZ&rl)5t>%fL(9lPGLjvukClZ%#lT%^!WhJBl9UUAB@4&Pu|
zcP*R5x@usVcN)6L%fy%5xA08c4Pk~H_;IawY2wSSVkjO?@(5dGbeIf~$2lH6t0jD)
z>*5WXKE|Zb_ESu<H_Y3Ub00f*?ngb@YjyE)ykHC#6#Wg0alyxrJz&$h!~gn+>N^Lr
z`-&e^UjY+(iUZjuX-7?$te1ktj!wj9RrAq}g~TwDh5XOaB|6qEZFbA>ouwaD&&|r>
z>UedrlK-jQ8oBp723dK?ac?abrX2J;pmQEnjMyg%_kyilAOqQ*WY~;pw>Qcwt@ci`
z2#jE4cu-ri5!eR(K_0(?f+!oLe9G!I8Flu;EylCR?vv+W*rQa*Fq;IutMi<h+LneW
z-uZfqh`DMOkrr)5y~YYP4;M@GZQ9|7*L-VsvitGnT5Y-dk0pOq`gXaxdq0_96m3?n
z2MhBH^D~Pbvb@X*{p|R0(>>%_hE=JA8ZR}<hM8C&K2@5VG4wX&?PReMJ>oUi8jZCg
zBcvoPy%JYTcHk%ae0yf0*VE%l5?58*xEKB_`4yFm^}516g*O-8RVd6%<?|$WNTV|v
zNkU_>jy4bI={foii4717i4+D1^~f3G`--_hq~jF&98b*P>z;?S0BO#6fEtd9F~#O<
zs+g60{|MRc)JOR-yox>ZIrU7_vtB*pX<)|?59|_WrLy_jr4m@n(sZP$rPRXo97bFt
z%ySYt$GPr{)M0MumR(^QlRsm;Zlf)d5{Ld<PETVF8BW81DRdd5f!krkN6v|^!8t#t
z?pe27%W^+3+E~jRN=&V{<hq20whYqtHJi1v&xKPA>+O1HvX+85LmKf+(SuX%M0d-$
zIF}ktm-Et{xPIER8dyt$!}9VUn8w&W7@y2o;^1AuWTs9~#Z=iLqg9JPuI`=h^|=?m
z4*m2YSR3v^7VaD&86mH7f16JRsR~FH`Gz~)A>)49;Bu28#1SlBg=S<m8sqW+W-b!E
zPY=j1!&4ocKYM~uzn(^V;JN6TA+^E!IBF)IDX0^MLauy%mFY>~UIQkf(27?EU?^T$
z6d-d}OC_7HR8or*=UBhAq}ic_<}uYS5v63-V_+$UjoNZ^Qm@;hx>5}pk7KGum6i7t
zmrHfGXo2NRs!>#-iLi=JD;-9UHZ@VUoSmH+SSWP+(Tg#<^ePyyVWD5Rs&I`$Sft%d
zpp7%#S8fmuO!3iRgW$d^raeq@`U{o3x}Wqh4H3G-L|4ZBNv}(<y5;Z-=i0N+Is4Q{
z&R_TXle^1T?fX3{!yxv|V!2`%MU(L(kKc3qtN&atJE386s%e(t*|AP)sbhWp^c9a@
zWAN>5``pp%A06IyI6LTn6~{%rSeh+bN+PrFu|tPX-bp|XS-Q|wcF-pi7G9puW)tM*
zL%DBtR%Mjk(>Jpi>J2kWE&P$oyK#R23sYxB8*UNY4s9Tn0NW(%u<%C+aaQXPN=oJX
zL|zWr$q=0iYqav$3dc>uAZeEAra`CMYK-FMSc3;eYA7x-;iaK9Q_*dy(MB;TI#QUF
zn#{L?z`x%#g+Hq@B|a*>a+}xuq(q5IcF84wM1z5@a-ix88>%6n^Fr*1w@_UJk!x1d
zs>%SbQ_T#mmRnpVSCOtC<!$mQS|EQ0c44=0d*MN3JD>Vy@*q!S1f0f$4l(o-9&8dR
zCbkhK<;{8>#q@>@Z5V*Gx5YHw9!9Uwl;=E=84}j_aW;s*W1%&uyNTo#zc$nT1B>{c
zKX-OW`b$^M1{&cowOFfYu>0rkIJsZ#g%T^R6P9SiXuxtJmp0!1h+@QcQckqW2ZpX!
zY!iMxCG7_S$r(*Lb45pY+wEDsl+L(zljBYkYb-Tf{u3*rm@sA=ox1(lB$++B;xrdC
zi&WFNQZkvgzNm4juNRjdBDO_%FiALdKBRNM=FrwcW%d%eEDK&CEi?<ydB)x<P9@h5
zzn>K{OE3O*vI(a8dFFRGNns7Y<hPIU>zDpUGRv*ApZdbnPk-U*pZfT#UiI-;z4l`-
zfBDB=PTnfqtGE1kGLx2Tnp1IjwUW+^6My?^SDZLa>6w$yoKWR(f>tZ1Gn3fgy4sN^
z&k%BY&yf4@(^xv$c@-AF`$sRw^0U2jU2*cvw6N{qU%uPv6L^B3jJruCzgt1Y6n=(e
zYLCfMtyTz;i#3*Myh?Ux>XA{Cz{}*GnQr%n`T1xtxW79yb3;5B#Pg)Kw6ypWf4sc>
z$6wgk=qxTSF+BLfA1~t`$t8V}fOUOk;o8FK!Yzfn3io5SAU+L&p;MoI291e`!x#yt
zQuNPEQmN9+35=CjOI!~l<&_g;jB)Zv+naV*Xf_L-*B#3N`gCTIt7@zzX$<`bpO41m
zZq+^S`OF*M@R>J!Y2R|uTMzfG%odlgY`M<<WWT{qpJoOeIPMR9V0)kF=w)hp`tE0o
zHCfj6vaA(5<TYizQ>^WNb9QCl@^_2N`&Ra;P9i7YfcJP5zO*A&R_8A672Wjqist%d
z_Zlwmvs-nuScKAEh}GH$Rh+#RZ`Uan;r_~Zh<oVYf;Hg-g$k_wSA%`=vchXXWBDb_
z^Mlc0z3E1F9>xT^3+N{K)^oSl9Z#T%F&G?FHT;9=wUg<eKK$uOm77Y1SSBb#Qs@R)
zI&qEZsC?QOKsDOVb8;qoNo%H4X*_)|5fd_i0tdM>3a-HtVkiQ4;4yvH_y@M>k`NbL
zTt66zkZQHUNKbcaw#y7FmX_rNdeJ7*xek%xc2N%;%aXBWFxRd*dXLQ8TkW~tj^~Ev
z#$0>duuHZm_ma5{GjzS3-duYt#muIqNi7U(;ZoxJiT_s2S4MPSCzUj*M##tNG#7;5
z^2I{aaW!g^4^+MLrz%OH>s)0K(DfjxjBejDf1;g*^I#oCAf08=u`QX{f-zwy(y|@+
z2!mS$pAUQGC}<uau1leq5=jHbtfF0lVkjt12b#gPC9IeqV#ORED>g9em~yXf($M5&
zv5DEen~Q{-A>H#Ce}nuE`MCn90JG4im{F{|qOB54K)6Ct-Es3{k~`+{7+zTu*7cmQ
zvA9LzQ5=O6m`G_aOK}GPe;b;R+iaLMz&d;@Gpi=GgYMFi1-@|AatCS0tdcIH6q?55
z+$KS+8+EhZ^ZjbkjZHJKjJTQ_Al^Eqot>zu>&<9qr_?~0%Tk$^xKlNQDzh7<MEVK0
z%C60ffTdScV-A*|UU#vP5E8eutZkarOo;MmX`xjXvNW3S8phh~+iR8;jn@_(yS=%b
zRYJ~#D`(aWW3ob4kfM``-9KKLz?m(6BeNFPPc3Wy`tl^AdbPPexU$O}7_()~9}ceu
z*-*XkY4UTRX}pZQn|zFXp8V%RA?+b{W3oxI;Yh_c!B20L1C}uSrkmrTA`C->34zdg
zfiNZ|N2kar8Ry`YG*LXgIgUl0E>wI?Ufc*zUL|m=5rV3R3eSaeuD6r38V&b=Rm!@^
zje;q(OvQy_4M)A~vY%A~28BwYtT-R=zAE#mh*OM{SDQ6`MQ?|&H2A+mlx@)<D*O=x
zi((NgMuT_{_>~9bOe0Y9sw7ir+aCNx{ZUUCH=$wDIKRxJ2%U-6^9^~0{FSP7Bx%A2
zijhG9t#p@8dU>37o>~hbF{<)8t;{f+em5M9;RZs5fO=$&A%k|RGL+@XUqENcDK78}
zm-PM$cWe|?31$?S8boO*T-Z5iOW`w!ik;SVgpm`Zz?o9T=FldKUxYeQjBtUg6(U2L
zu1(cB@Bx&i3D6i30?*;3K<Ek`j+`}!R7X5D-bC@xN~tThR^*e_Bxu6KlAx1Qox^+1
zRfL#OkrSq+Aq}EBmoP~LV#|@6Q&GJlcNNWRiY5}?2UEKvhbDsXRrHVg6*f!_C|t_C
zEJT^`yiCnUB3<>NlnpEn8D(jXcsZ`VP|aj$d7j;y5fa8($gk90I^Q;rdoJyLf3Z=i
z&T8dyF96-1l)JMBWHAvD*i2mWLyZ|wK`k{U)0>(Oub>AT$b@7duOR5es-+myJppzn
zD1S(6Xfx9=JjBBz0A90oVeJ#FSb<*PcGX~B<Z~pyvn|RjJJZ2JrG^A8kP_s@#jpUX
z>Dciy#nu!yn3)VSpZH*Qs{S{SRET?o+YU!UT}AOLF_|Imi{~7`${ghuBP_yAZ_O1s
z(=W-fZ>p0Gp?Ddw_b73AJ`7aTA;lwAsS;Hj3`QgnuyzzVFqd`$MuCoSWliW3Gt^*!
zfC>HV>OxSCm?tzC1I>;xr+gp`7fJQ}xF?v@!w_kamx&98CMegMuLh6wZCj682A|b%
z^a$o_a8?N_DTJX*r->Rmd`ywi{0g_a1OkAS<Be<IrR~e=S*;u_wPtNuo^=tsZ(O)=
z;q&BwlHVx2vhc^GO75a}(f87?u_C(${aebvk?g@wF`Q^>iQrO#le9*}W$Q?;eW2U7
zlP$n%nnPhP{lQ4n9<FRdSQ*D7{2j07frJ;=n?8b8*Yh3ey`L%4^wMQ=`m;d>30yMy
z5kGLZ^=EF~=^~5S#JvdDP4k5-e<Xwe!v7>cK+Zmd*-o$RDtf*>v@H_EOs|ZmFve#P
zz}Xrs?D$~Q|HDfj>|zR#Yz=GjtS3@1MEIaV6!dR+v6OLs$npY*qZ(O<+d^I8H+iOj
z{(3SQ?%iuJo`RGy+XbxDYkPH^R$))rOzYjv^}(D#Xc|F!5yOaI<P6{l(p<~)vkY=9
zbhH-}zb7n)O2Fn-#g}I~AiG#O%witJYh938Ad5RH5e)nc*SE<!_T^wWQd;N`ntmO6
zc$`eu`bc;`>7(i!CF=>&IrRr?F=(>z3r`orXodP=v8p)C%?eVfvpxhxS&k8>8DBbZ
zE{^Lcmxz~*Q|RwC)fSuR@Egxg$Ny!04SIIgStY~E2i+94Im~<eJEjey!$H)t=@yG~
z&1R8d<TKk_V}xB=tTZtrl7;z#xQ?lX5KclY5E+&iI2!f+QK~UAU74t65@r`0i;fBU
zt%)3-I(2Q&wBs;vb*@Xf=&A(@DL!MnSZX>TS%QEF7}msO2K>&oOGQ{kF|D*B0wT;Z
zoT!qmS`Msp){Db3krcFW1qHG|8dwy)hfoLKH>CkTSRX~N2rIl97{7%%4&tW4O<dBs
z&@2yRgHWP|JBF}v(FLg>bT8s(sS=MUXE_Qrlt?U>wz=R!nJ03%6sGjTtUkh(P^x1a
zB0xHJSXZIFz;bZ71R<lrdm#{0#hjqkk<#LR5L7LVfSi#G+25sZ+Lk6k8pwQYC!XtC
zL=xSQR0nwr!a*(gxxi#f;HtM&3M?Cgwm^3Ga(#hQ<?$mbYnZZZI0C$w38&-rB7YPC
zVqJ+@jA}!kNqAmt%>3I=Dq(L!YZ($$6loBh>MDT7GBn-wB?v%`IR<}5Ea3nkkE0N`
zQ4C4T2@S*4O?WtjeIw@|0|nkPJ)1+{s8~0=_~UuRvSt*U%}hY~VF-;X3?Fgu&=@wa
zmHXYqQPePWPj|wG#_%E2UOMQw!lt>-VHE`uVk$JgT}j|!D{-$Zxv3P1l7hWT6JdZv
zEN?oF?b(Lz*tFXWgVe{+VHDu`46w?@l;emJMHs)ulp2jn8r9>bh1KXgIy@C<V`ve|
zDD)gm0|5OAt!{!^gAKuK<xGZ-(4exGBe3V(z+|P=vEsm}VZ^rC2z8Q_H6sXMI_SP-
z;~W%F3|AN!W-=W*SU06~JkaQL%SH-9&!!uw2qLY4#w-(5EWD$bdG{<+usQ|i)i9NS
z4He)zrB42r!Fy0IKpjOke;Dex4HfFTa1EuOQPW`xagPi(IEUbDq5C$DU8VcMaDv8H
zq2{3bVB`STY|I6%afw`$YR15%aAM(*yf6GbcOX;=W5%^ShLJK8hF1)eh?H>@BkK)=
zajJt^3*VsLOa)F2Q(zW$I6=?#LUPHVn~prR!t|-0Jv}KuQvt0B?`ccIbWEpJF{LZ9
z@)%MfB<LhK{juAHt}!<<rH)+0LN{!Ix|u2c64=1J-q36q_N8KE30!c9ijsiYq0~qQ
zY86aVH?*MtE$K){;dDO_=Y6v9aN&iZwT#no+RIUHU<K`o`aR;8@hAuNCn{Ito}808
zxAT-*2Njegk2ToNH-n}!Lhfat9BmU#U3|~+I~JDa+J{!SU9Y9HGjiNc!NRpYO^eeA
zXG;)vt8pMK+pzh<>Uw*b1}SmehVEhVt;$-v2^uX<B|)5&QNJOy^4y92ub-4hZo=4r
zAZsNll2=^;y$hpqKr~qXU;qTm?M}-^&#P@ynEIw>!3YM$Q8!sDO-V-mI@Qgt*KU?g
zOIXVbV`fM`Q!bW4Y4cV?&z+lD-3+7Q^6_p>?|2)PrS<0Ut~FHE%}evmwF~ow^+F*?
zGfaCvk@%CyJS&9A)Z0mKh$P-W<R*HFeY;a}Zns}@Wd9LOgBSRqQpw*lc4Yq_K6vc-
z+2bEPHXI%sk`GQly!52Ki&QD$u?LSIKRY|b(?NH2pnku1(cf4vEEYzEox<_LnZoUb
zhYBw$ysq%JXZwO@yDF%!JL+bG(Lf>|3ErhD2X{7sXHx!?y}#&?ym)x=Xz%H?%db}H
z1qMB;cu(VJ?gJX$4%xdn_Z$DrXW#Uu&%TMg{+&16u=d34&wlp!nRooc+oP9P&-^cm
z=Os2xQyLhKB(6(z`(GQ=LwVlwVv8gRwZHSJ*S+pjuOo+Uc;^@1H}~S<4R;@TVf?-?
z?)>V<Ua<~k9(ZiYct;v|vBOKS6#qu<PyWR>;axx7UH#nWS5DutuXL*Pg)iJ`6pKbw
z(nN`x!tp>*+v0tgb<kzpwND3u5v7`zM*seGc*AycaJv8b&wcsy!P5tKZ+yiqCpHJ+
z&gVYAuim=lh!KQVToSxgunM&cpCSK^e5UZzg`X{asPJ=zUnu-a;WrAuUHEL_i-oVK
ztWoe2ukdULzheaKr2?87e$+QG{l*j7o5*2~&IZ+!pl=ei?k3G-lT0uH2__;@h#m}t
z-#a1qV>D=-B{IX5a4{B`slvzE1j*i0jK$@0g#7^%c!F-uF&-k^6%I3WI1DA~$LbLG
zTc(F_dJJcPd1+aihWrB{)tTirKq!@)vQgA(qG*H_qbw_+=v26sWNDC5nieAh(nt{f
zR&9elPX<eVjmNEa%xeBpQJ&)){8k;zNDu*0u|#MVc=aH$c}3G`MV9qyq=%xa6&s>i
zvAwA7V<Zg9avju~t9;WS6+%3r&y_%Ku?jESlD3^p`yUvtzU1nfPs*BZfwg8;c#UeA
zTZ&`PmJRBsNlmbZ-vS+RZjQwby$AZVY|FT&bzN2~RtzngHKSQdTA^3h{7%UA_ExQb
zUv}rFgw=liybu4*uY=f-n|EgS^=n&gorfJ?t9xOKAQ_1{8)-(RSYvKitHn?@+@Ys8
zVm3GDG)pbN!9+bSd9)$z=UYMqOOef)4vV|%Z3me_y=!^NrskVPAVd~`qGr3Wb~#r!
zJYr@$EtA@%e6N&T_%yjdey7kaoPhcNF62s#b9XfuvMXe`&3AB*OgY8|8)Q93CRlWy
zV#*|Bw~5!HxZ9g_6s|#qs-tzMA>ti#KY2)|pb{)~J90Em_d>#5!q)RR3=|F{SMeyo
zJyh}|FoD(w$+aYDC5g|d?SNJnxSZ=Hy<9K4C*}!%@l11TsjC~eTSd<{1)UitWDJUS
z0@BVfH8TP!x(3=IEy=XuxJGCjX~}g@WJG`AF_JbDVV?J)bm3ZzwYHaMpeQ@`Kwq96
zhx8-}l_Y7Vq&U-Pq_Gd@+~HONi}&D5@`{+3>W*XhuI82^8w#c5B}WrqGj-609gscr
zDc0IqnKAM*bv8RBDOp#A;vIK?peg`*S0bQxjt;deVeRIKhLo(Z9#|K?Nq&v|n}V%Y
zY0PSJSK;l2_ZB_|#>;%6FssaJ72OAeuZPs~IkuufRpJGahplEkkmenACQ>?fdUB9N
z>n_1mR4UX@<>|(5ra8k=n#?Lli%X%;FsCD;EqmJ<=CfLdQ{bxxi_j#LiPlF(J=`MA
za&isDMk;d>qf}%nhOob;LT-^TY5a^sBabu03|w6p7$^pi@m}4SC@;aDVYotM&LY<n
zF!TD8Y!pX>Z3<TFa2-lmA7Kz9SmNvB$*3#HHJoxC^+!xmy3f!x2URCi2#&mtm=pxv
zLFn<)w<spF(uE01r(}NuS|uzAsA6-B=>Tg$l)sy5aTxGd0u3G1sJ<`_XRvkE_RuZO
zGtF~JWv<^}a&605+Ue*9CoLoN`R?z<0oRs#j5bJXTe^-SVk`=O-)6e*Q`Z5VrM5`C
z^y(%_UKALvcg0c$)smr(?2E+WVB&$j7jlnlUKNiWP!v5-GpT!Q&N2fx1|=0#LM?8j
zbD>R*7^cR%i45oF>Lg6SiXfE~Rlxd}g@IAJ5{yg&^+VMg>B5ma1C2-2qJ_@{GU^AQ
zF&#zwOzL1cp@S7|4drnKbHUb2j29g{Ok2w_iC0_QGUv!-ur!z~wFNHiMX%B5$|x%O
z)G(ve+US%TL8D%*zUYQ^Fx1dIM>t(|+&<FaR(LOUTuYc<Oqzb##Y}z02s#PVj#*Yv
z1>;GgKQayM*mhOwC4V{6v}W1in&BpO#4tK`V4%7y(K7fQw0cdSgI0(7vj?W9cPUO&
z1KlT6+(xm?=pJThl;Mwz@h8O$@O!WSsnc$EuFBJXKDB?dQrX;JskA$lN~c}<n@;CY
zyG`s|MfksO-ha#HHDP$o<}Legj-rF@_QC0^T3=m|>yLt5mxZFrKVR4j_Yr&RV7D_-
zU{<6h3Q{D6zet1r*QxKP{=<IiNn5veW)7{^A9~kwm*Z2dnXT@L=bt?JQ}C6Srf{02
z+w!xu)kEE@AAIm?a^1Ju-Q6#Dw`RsCPCRk~u|Xl|rN0Pzsi`v2K11`G#@(DBa+Jyu
za;P_mx<9PSpdpY>u~Dq{dgJWPUpw>S7o2+Jk<Bv;$8S8g5VoV0#^Qe{HUjuAOTI?W
zpSk`C(c9UX6Sr+G9AAL{>2S%Zlx|b;nZHNA4}H)<46+8dUhC!pMv01U58oq9j-fRX
z<&d)6wWf`x+`Q!7wVT@H!FRml!MS@Hm=cZL|I(yBne7}*$bBTh=~_P!g)P4*Nv~Kw
zcAS7Th7OvoqG#p$t6Rf%+jq(VVPCiG)kQE1N>X<%zi4(Gxkd8a*cUGR9hCEyLOhKf
zDj-HmQPFm?3F^Xl1Qnltq_Q6-m{9|h-VYU^N}@8KUj~Lx{u%anrY`>E`|77R>M!x;
z-S>L+dGCEPcK^<k@2{P%>t3Y0_{snItTW{Q$WM{(^puC*SKl}d=Xme+=IZYI;L`J6
zB;Q}J>yf9s@WI`eeUI0@@bVK>tk`dZo$^_D)>dJ)Fox$nQn(f^!6s?YoX&TZAY&5@
zjdX!@6`Az7muASfH+`QDG7u_@FpKg(la8yhM)ZV|HD4+gKdtFn@zcfPZ|bJ0pVM1<
zSWm<7#m%A}Cit${NEa-_u<D0R!!TQaUaFB=xm~S}7lL3RAfGVJbIi2GpT_1Rruhgj
z8h>gO`5k8)Gcyl#d8<y&b~-osL7RkOFKo}XN26kQW@gHVhGPP`D9+>&xKW;%5yln%
zuE^mOhMD4aJqVv|l1_s_J&;Jf{8f$1DcEqJ>|yfZ-nv<rh9@hBx60+M!xba89f@nu
zV79TW8#7hMj4G+nSN7><VAbUkSvEJ!WwIpeexe_ATWu>Nb7rUIlAm0iaat$CbTK?K
z9$!@jB`S(73zUe~a<^V-N^aMpdiSvsw|u?+mZw^+r`}QzY$y4p+0Kh!+?iDvD1}=+
z1gpzN;YQHl3S<oz6-9@JwgBx9z#vcaJwr@Ffuw4RT#zh++(z^lk`}_B`ZODKceKfn
zCm$6tuo}d40~e+(*ka?U!H)oI@)U6$+)t7wlTy-0c`G~=TedBjXA@>HVtY*3w&n}%
zP}t(#nn>moQTu6OX^w_Y4rG5qmSytq&de081tAv=y=od~&U6E7QHmu?RzN6kf<hjk
zV+Pi4<f-U}MfyFWiJ)X}t>Xsd`nFXHK(Kv}7Q@#)QclzIBTpJXlLY9Mdk=-mQM5YL
zCZ(WfUdBCh%QUw!qtnY?E_`FhG<Wa~xjZLy{n8xmiX0ac66GAiprQ2la;?7+d7?~W
zfq`cc6XEmDsk5i1h@`h@7J=`x!5|ZG2UD!??5OdXf?W9TAQu9hbtKsfW#|p_?5SW8
z;|@x1lYo8$s$87J2s!R!0{D)rttW#xkr625gZ`*D8bnDfV$i0@H_Z6A6ZgS;rImaN
z{@(X~F^e=_RC6LuPT|okBN_;Mfw6gDaK)ezoFZxkJrMqv-Xo(OJO8u$pJqTkDphYf
zq-nFO521T`h6^1ACuNV{D@1h}6pA%4)N=fV3wA^wo(EbDbiYM{82$K}AniDqsBlw{
zkTpuQ!$Nz0Qy=K?|FvL^X^g#PESdIn<D9OO@9O&QS6(j+`UWMx|B=3mysqFCs>qY`
z!?E;a)Rih!Kb?T+R&;;#bXcv1|NLL^mCS5yZ*6aHZ+-rb?X4~Hx@x%lHTC&QSl#{F
z*G`=H+W8YF&a-n5J%l*tJsaFnNUW}k-R)+v>;_0!I2i;an2f@~q)S4i5|kl9vMkml
zfg~Te``k_U%{}t6oA2E{eC$8pI6S%gx#6knj<?A8%&Bj_<=C+UKYPax`HRNKUbM5@
zCm-D%jK077<&1oGH{JihqhBA9zurAUKDqn5Wb4<@l4PV};uqn$uZJV2aI|nk;U2Wj
zLJWz>x=0!@0ApTdN)QOJYfu*!?F=Wq0A;)jZ9N_#C5TiRF9u+-=Xn((Ig84=0=|e0
zUuA|od5hC*0~wOv_Xo%&4>Ed{3`WX|$S@U<5__<M#%qJ|M_;<Wpr`j9x3$`BjBiol
z>9yQ9Jr+eF;>H1ah}%P`6t^m%e+t5UDRk`?jSndKYS<7IV^~3PD}9uzFz;}lYW`mm
z^QC6wfodtWz!8>v&IIlE^<i&bcUa@`rNtE4OE-N<UqF`rOQll!$VZCByTAaBV%uml
zsY_HL4<=CQ&{)4VO$W>lnO!RuscFF@T0+aZ)SXi~Y|+izYE#RxId?a}WVp6;+>I?M
zVUQBrJZfv=elQETZ*Yx6^>N4I0dfh)!3gsp6Kq$Qxd<y#&Mh2+%8@ldWLF36BTTKJ
zu&5WuE$b=hSGPl6TAwf7Uq*ZNmPZ~LJpcK3{E8V|zp}B+*~;4TiOMzihOKb-%k}yB
zdP=&>oogmLhsg)$>wm4!7}2uhG{eClYzB=+d9_<#U7qQT;r#hJ8P?}_zg}#&ju*TO
z{|w{$pJ80z4`b;4q)VO;E6;bxE|s)QGrCT1q|c*o!R#r>mk8FDVn@I|=aKA9hU4{B
zvdz>Eom9C92gvn}o6)#|IgsPjWm0*2K$bEvNozcbFx?-L(;$kbi{JL7N<)^UgI<22
z?5E?d?2SPC!)!-rJJN2_pU4!Kj_KZL*29#E>iiULBpWitB<wIc(bu%f6U+p(K%oNN
zOLmHp+d)Vu9C~EZ>2*hweuBv_1}WBRl65f1Z9GA%Q)X%0QJgnW6u#df5&?l^o8b1f
z=wi*_nM9V#71kA*;!DWT>oruqFO2NY1`RPrrr<PpfMGytn)OqdKVTH2Vg$E=c?+fo
z$li&JF+O6Pf;2`bW|ppCdLubObY_Nor5F|hDoH<CgN97;610dj1bU(hk~Q==gByVQ
zl_I_q9tE?%D|ef~^#FY@Fw1+BX$%J9niToHh@lMyER{;A;|K&%2E!7}YL)({JCX=?
z?2ZSZ87M+y+&xwbcq~;?pcMwyR0`2x4N+Uz<Z7=#Vn|09V}%DIXTZ+Agc!Vm<~;c;
zjS2>~rF`|BcN{uMA~{FujM|1REFV!R#Ba8FT2XinU8_@jdBhwrYHFgCux^_N!ZAIA
zP}>bH3}vGlJhSnFNVnlLP2#qWOVd`d5}^@KV1~n_wM~~xN2WZ`<}f8NQ+zYK-?pej
zOlsL6%Uz3^xcdi&q^->-s}+|7IxFH*R@P}Mi9~T}fMKaI*N9D%G2!?Is1(A&-B~1e
zB4|=G+iDi$xfTN3sRvTl(G5goQBjoKcSCM!4%I1%5CPSoCJ8LCp)IhiDTrgbZ-beQ
z>WrJNNe671eU8sX2x3_)7VEXFmwKt?(ZDK3jc|z|Q07&JW7>{eB_%&7y7Lal><%us
zUDPuyV>KwY#xVoq*<LEi24_a12`jH~*fJcbj=(J~;#;1PQ1kdw1<ExWP2X<|%YcOx
zT_GeiV#+aV!eVc+##re6qqGpJWeeRvDy(`@QshdqT^BC!Eha+BFcl=MoD+^3hRRaL
zdBziA*_0e1+=F%iX<#CL)NpgKlVjl?pyg;brUjIoqvr!D%XOX4G0=%^iirx1R!~BY
zPXSFFARfsy*jI!M0^+&W9p^W<Zi5>q%Uy+T(>PCxM!<>DtGhx-8-AsXOUZK8V~*4*
zh>Hj}mQCCo6&lhuq36d0^*%6(?-tYKO^#+6w#iM$B22d})7K*_&`lzxD4G&?pNZf>
z%Qj=oWJe9zYA<Njz>+Xxgr+O78#0zqR<VjAK|U#kw}Pq{n?-@#BRna&ZoLM^8MYfV
z1J^7@_V(0yOhT$j$4)@`s?XrZ0_m)K#MEqNv)x~_i;-UCrbjf~zqZnp>7FTq8VsJ$
z-%O!XWWAY+m@>;{B5*>}f<8*TGS^GxD3~w8P0X)5Z5DVb?w>kQ(Z?ZOb!V1*pOKOW
z<`dBpkC%M1RAGjJ0i!P02vQ>wm=W6Erl&5ewZvas6;KH@0b+!zq4!O|Y_C;a&V45B
zT5HWX2F>FLQzH)U{W3>9p&7H5?fGj1OE;ae&v|T1+@IAvlQ8Kb6&nnRKBKN+>r`Wg
zFQM&i8~JZBJ1N{fC<PW$##yO|1S7fu!{0J(2HkQP7ImTvSPTp<1IvUlYAVuQSUzCL
zp-zr@upR+9`NF~*LGy!EzumzlP%#TCsAUFgF=*ah{18E-$P_GxxcQ0b8C2f~Z4jRr
z<fllD(<$T$6soj4>JR$a+LXI2PHHMK254nH3^r2a^dLbNiQ=sXJwqeAza-Fm_o(i{
z>pT@;&U7AQ=;hL=Y&38qgDHSZ+3_Y#P2nca<mk&acgcpwmJO#^aa<A-_Bif~K(`Ao
zK`MCXe!+g#0L$AzFsF|+sL&L;H3zG2#G8gN>oCYf@Vo>pE?Br6jnyJe<$XPV%!(Wr
z)N=uKw9QJu5LIWH=)LsK_{!$;W<o?<<z<nx=#~#;B!Zg$K4Sc^o90bDjZ?k$T&QfJ
z;H!M#pH{ZRhYH^zWpW$&H{@HC(H=cYe*j%nVQsd|)<OSO4kP8BmfaOT!Vo5v=M6<R
zNa8gx-{ZAyvJRbtd(VoWCd*Mu%7#LylUyK}`)Gqq#aE}>n<xUgwP?LTRd+$LO49b@
zwFFbBf&Po9(Djj!n1>Y!M?h}(@P?V{Z5$1KMEfeZUe<vN*P|RNl}8|rCs67*H|B6J
zeM&%yRp_c<SWIwJ2Wbq01k`gnNEDE|v!&7-DC!4vRK#nsOCzCN_#oHe(Y6)3E$fUX
zQx-fl(EIsk81XB+2$zfSU?ErVdkX}Sh^T+g3e4J!Er8B>Rk<#b^F;~r+^oS@IZANY
zSIE7=wA{%WGP6R9;viO}VzQHA6s+1Hh&mXL)<cfo2%%kZ1U&<KUJn7^HJS{NS`hO|
zMR-4$NuzOw1cK|LgZ&|L_y2G-PWM7fL6KBwakv!qkvI`Zv)NNu;$uQ*X7D_Dc~GBm
zUd=A5IM9%5&;){ktqd10J`H_SBMG7vbF|(%H2?Z=GF*gKhf=U|DnKMcno-e%9um_W
zIH1pUBIV!0(~vI_n-&!2zxWdnHO7MvQI>4&gF(csFA3w`dz(759nxwMovb8;{uULE
zZRjq=*i^*XHh2#2K%kSh28xW2%UuleAH=3WILjyJ<`FN(vaWxdLTo>0`1YGk+MDBi
zA%o>?@ottwg3Kzcj$DJ~nEOsmaK}_284;Q}YaZ3waF!8CP2tbNPYBb}9fiN<tlTkK
ztzw&qeZzl?D~!eugs3Yq&JvK4peYzS7a*@$sBtA)LA1x3fpUr~C=?+9ql<EH>ja}^
zQHV2+E_zx)9e`p+N1_sQfhw5flzxchpbz5THr571$l)X}hql>>Fjw$0t%GFDsM#@D
z^fX?S2!#`|<q^X{+z*10qym8x+EaKh1o@F-O;GCU3MZGhM1+sY2ntg9aea>b|LC7;
zIS12e5&9eC)(36^LC!P~ZWeu*z)-T7$2d}}8#bs#oZU!;fGPhci2D1?%b<~7@sl7U
zH#UjWZPn1F^A}Y{#p5j6H?d*0*1o-O0=Kvhn#UlH2_0M&*qJH>*Ewvf?QvNR6>(!3
z#)+kn^c6ym9EH|Ay!CCZi(Q>H&io8v2agJI^`WaLszsI3OUO$R_vc8@MWGZy#~oY8
z?6TZ26l6ZpDGV6{bq6F(B{}Yjz?j0$f@f<;GirkZW<n2PV5s0}J?@;wk#AuD5S;Hy
z#%-kH<Fks89pO`yA#*<B=RjDQswGt#Yb{S@4a$x-j|Z!qayo~Em~dSNV~t-m4J6Rj
z*r&dNsH1a?A<PYd?x=yOJu?_rgXbd}6CPGlEpbe|1AYyfq0pPceG!)2))8!mO#8@W
zS&QJa4JbzQU8U1ui}KwsXb*zXpd-W#5s*zvo0>+<9wmc~Phzq*tBf<E;*~&t@)@S}
z1n4eR@dZzp55N?b1UWTm>I<_F7Yc>j=#!*Z=oGTT?S)4RKUsK9;k|{wD15u{Pb7us
z+$2|%Tgcty9C;&o5BVthD%koe2~m{xCK)I&J0yv~Hk_b+h=dChw0Osn9A~fsX2}Fr
zL6PQr#w$=7TpB4PFs3p_=M$`km@_e%48d+h%TuC#zfA^mZHItmDd8tYA3P>W8le+;
zG?cR$GCiOi=&g^HqXh3E(s4HEVFi$fDoWxUK^`SCiTjg8j(c(h#iwEr4@4K%=B~=K
zJpuUx_rYko@p?~gQ<cMPvNnl(UD@lR89Z7WqZ1$n#ZIXZe1UeMG6VRJRa4Q^+enjv
zfqZg<ZF6MmTA^@S8Y2}1oQRYe61VGewj8YgxYrR$7N_cagxCxaC$19w(0Du$@kF3M
z6r>7j74g~z-KJ1#2jtv9;^y1lweZNJY|3gg&id0^$MA529Qck3XhJqLg#TIsS=Z2s
zrBlvz1{NgDAY%qT11kb7-$>Jx_K1rnQ*c8~O>3^@uv$&iGt03I1zUu{jR-?sa}4c&
zR@?haHC?ajtE;;|;9y_{n$FNZ##LC&3&cKJFmAc4gbB^*Y;#1S+BF7y8Y769LQ`@m
z7mPU=uP|zP1#Z893qS5)E4VN20_=Xv1XDuO4C&gbp<9-|&rPp@A&=3}y3`ql0tu$r
zU_qw@lbk%T>0U48ad$ZDe%dcNLfB<LsS8<;L)Yti-qmtJE-hnN)WUI{$aYy`+={@h
ze9P;?+7fC^i6({p{co8}=n|EglubI%9`ypsi=H$>v|m&p44A4yF+%E8egzQ*&@?`R
z3Kgyyi5iekx@f`NFP8C1!M=voLMW`b23o8FmZDhPTj=r0@$q1~W8=6Uh;bb$cyipU
zUgCplvQG7rI=xo3TiX4S>4w5HauXIujNGwUUVly{*BsQgv0IR*l1kLIIc|+}E!Qv<
z7M&@{s357(=S+cYi)sjf_6{rEIm{w$3spm-<<$+#^-D3fI#U(fBsnTVq0jx;IHAX0
zylEBVxM;=odVI15|BTQu!b7sxlQ#;3r;52(fawY58(f-cyn{|2iA`~xaid%U<;S?z
z;F-Sg5b<qIb9_S&ICdD`3^@j%)uE(I_;rm!xzNo$u;VGy&1f+DET-K&4{jgPAvwVT
z65l8<Z8||$I_R2@+O`M+GFPlrio5T@*XO6DwbgR^z>Z<r#`dVydS9<yZ?t-P{qGF@
zh@n6C7xvC1&n;GV|M_Up_;>Y(8@BNZ(BbO6M(?qAJo@N6LY8y(e1;ZO+<3civ~UgX
zDq~{v0lG9{#;crUIb8wh&nof;y=mjg3P)oT!FL#gvB%?`<(UzaF*7Lc0Fc5rzxmBc
z5^iu&7G7*tD79OTK3~Rg(^~mp<LW=TvJI*mXbZ9w8xn+i4T0Dx3=XI5ik?v&Me)`G
zDO`Xb|GVG)F8KhI7)Mt?fzpf23ZphNMXzG8UL5I-YhDiJ>8iXG%ByH(S{`RMv9wvE
zI(A%xyb_Be1t>4))-mX-$@u~=c!fT+!CkoHmCA8Wrio72@hsBagA%WTN<hyZA|yfO
z(Ie?J;8Uu+JSz%4faadc8;_yx>J>l01VD&wOeOg_9?!Xd7$f18G)r1aZoZGa;8$N@
z886|MPq?Ym>u-AcwB}xSg;~`8)@i^4>D7o>xAbRtY(@Mr9@Dk2Kf>d~TUYa-9rG9Q
zkZ%Z&)QlBtdsPb}3nAJoqPe~=+h--F&zi2aL<uNt#pV9YAe0V|J!TkRWufKFw9}Gf
zE@_WxOO0hwa;*BYc!wV?@t+h+jZ7<gE-zG&SB$=jyrLiqwZd%S=EA*&=N8^k_;BG*
zVKy$1Epj8dhrE)!m;5^U0{JU?Grfb}M}LC8mcE6)JI}HpMNiAKqoON$FU>+{eJvaA
zkUaLLk6vQ1-7s^U%FL2Owb56rsEnqRdR>I$ZF7dgRc&`-?k;HEbQ_J}6-0cEa4bTJ
z7^{^|pkKf^2K}MIK;(_kNe%|wC_`R?0d8t0GG3eHQ1D4d#{DM2xZ&X{8FetRa04t!
zl~i=Nf<UtgCU(J&@4~1+Py9F?j@P?*LpU73UEwgn%Tl=MU@}JV`9RU3fGLM|;R<d%
zq}V75rieyyx=GeYDsk*&v<6BIIu4Rpstt;XvNI<uAj~GcZk`6Zr&9aD4c9xptWKc!
z`)RU1!plIs$M6uCUS1ic>sUk&_uJtSWa1GJ?~~CA$)kfiy$P704U%(<^zqaTbrp{)
zCwsDk8KiQfUu45kCgCtoFqxtoU@`!eq=)&))ZRt92KG84fN@g+cWh*e-$`}UQ#?yJ
z9Y6<KQxF^MHryo4<QjSzU_NDF_O4QxfiPW!M7GZiHzXQtHXRSJ)NN$RZZJ$*Im-1R
z)zKQNJ!-X*NuE|Q9ii6P>HQy;Wtvt(?%-D}-g`4Dz_&hUWdohC{}#8?sG$#D@L`Lg
zz{f;`zU_ixsc~u7lH*rg_3|ZBdvr|n^5NqzSO{#V2zG+-Ey~@pZ5ayCg@K|<PX_}>
z<e@f!f$ReyME2npJHmTY6m1+VsL3=2f+{|G6G@|Ws$zeYB}l>iMw_Ci>@AF_Le(7B
zOb3OtYpM7pkcZMj>|P!ijJI@SM`Nx77OIp68Ysfn7A?>MBB*c?R4)rjY)M!I`${ux
z^cXXbxQ+$(ju0-WL9n8uCMI;1pGyV8V%RbWbQkqG7hU4$rDM_uBSWX97=unI&&_PK
zhE;eBC?W~LlvpSoQS;JRT}NJCbbhKNTS%vGaYuq`0p_rG?AqDG2jdP#b#X8xeOSFh
zE8VXJl+_!7Yu^p62Flr7Xa^OO>Ac#6l0dcLc6+8~*JiYZ2J6ri`hgW=0yPRvy5*!*
z)OM1_EHB@F<KaWg*DR*Hk6?z<H(Ln{tm?t%A0MQIES-4l&}N_L?u2+;s#J2OFb_c2
zfnCU3m{5bAHGEGunpe8AJjcW-%cMswZK-bSAJ?T-Ws-d8vD1`Uh#;4yUo(jvm3`fe
z=MCwlwJ5AL*N<Lt<{_6F<$kZR`wh<z9T7>%-l}WWx;XlV+_|Bnb%r@44Uz}q!SDbZ
z44&1-AmtYHzNcb~OjJ8)gOUW=I#yvr+)%xMnlLmW%j4IC;zTk)^U`zgCMvq>UV<|=
z4NGTW(1Pl{taLk!C3hu>sKE@K_{=rHOhreF2n-8!F&N;|z@8MkuuXo7u!+=Ax%BE%
zSlGW-QT_z;ghe$^(<Ruv6}*jU=Ar3absQnLdb27D5AJC<r0z>Fc{EWm$sLNlnBg?i
zRDu&w5U~k-)F`R26jDal=>oI?*awzj7@+UNv$#0gJdlhS8wj;rJya#LTL)tpr}ZsR
z+F|b5i!g?LXU162>hR1Zr)loDi&aNR8J2LfgP4tWS-)%1x#fs)rM4djDnd#GpJ@8*
zqTp2;lT(Ht#zsa+bG3UP)L^a`*cN?xv%j^!>N9ih)PXq{`qBM}?=#OV5t#0_L#gAG
zpwX=y$CHBIHLq}&4p_Su$*N>B(5j>hL+Ovc^5xcdzA|a;9{K6-w7>L3M(*AHAR#}q
z`~JHhCUp0C<jy}pOiQIeFMOIFBwtin&iaLug$D|c6kc6;UEyC9K3@22;SUObUij~Y
zA7H8%ay{7AuOxp#z7GS%p=)#lv4bjmB!>J<_Ksw31A`%m6k7<6$&-_*px^O8_Vc_3
zXebWy<9P3Hh8T?w$kR*GB4APjq-Bqh8+ZD(j23BUC(oJyOL=~B_n8Y8N&3uP@FRNJ
zU7q=FknW{p`xow<Q@_WPy^3CPohnfd@&KN}4#7YGlo-g(3|a%a3{do@E<<rOSz)N{
zDWs>0ipCF-nhUAT(5*0wX+ZgU9zzZWzKTrfcF0&I^TkjU1S}|uV3fcsxtg4R(^JX~
zQrzWfobuD9(s;VKp@WJy$Vp6Dr!t@SC&|T}=l%SC6TD^way}be-gX4ZM2CZmPpYV6
z@MwqT4cpnG!~Jkf)}dSCX%EnNIvU`Lf23edGnk}eL#0O4;pkpQ0{92!nr%~hlJf*s
zd(K^pbE~G~QlTqa12?b*Sox<A@yw~MG87RD7FgTRZbY6j&dZ$3?@^kn{~-t}|7y=8
zo@d4Jib@@0St#mU&j<N^4}7j%fh80E{XSMoFsR<QmzU+%zH-@Xb?)mg&$(7ewY0pD
z3N7r`E3r{>Jh!&qJUA(p{8s1Q!Qz5rhD;{q`Bc;9jt?xixce*U3&vG+VKJ?0S`t;O
zQM7VPy+nF(GP{=6G%XD)@Y(V$jWoU?f#ueoX#_=03XoX3Xw4M^cphEz%yPNaECvD=
zQm;7I!i8Kjr8eB)S8QM`GkP+_%uL{8j+!7Umz&L^4?>4|!OV;>U`>|t5%gJj=nJMc
zKBk7fP`h}ftL92jI)rMc*0<T-m*0_GN^IKc-!V5`cg}TfQ-~QMl$~5eNwA4tafS(!
zqp-wT3MSWn?%IZBh`72R%q5%g{cNG$XKb7kDUEQ|KA=1Uu%OfG4wgIT4rgq8#wu4S
zsaElO%${vYtKN1^SACG`R%0-&(yM~CwN?N2#oDnW+}Jr_p?Iq%npUj18q?g9+ssO4
zqDJ3?Q;r_x#`Zx}Qt*tdQM-OWe-cdLFu?Sf7Vk7Ptz4sI`@rrvyTR0+dH?=W#zh)d
zEy=?O!&8$4RE9b-9-65~S*3})m9;82VrWGz2))JSWj~4tNn)K>>L48(RXD8<T~sf_
zSuw`N7w;xR*Buhlx2!(7ar#6q$q$GqsixUc%9v`P`==d&IR7%(lz&N{gq2^z43%UM
z5Eg)qk#))DM|QvQk#C>7x^Z2e{1|`V`nM-?9%p*t&p`3}AlO_UW~ZOD(>5$pvj|kg
z)kt<hmE6C7_ghX?klzo&`P~b*z~R<kK7RDUz&cxP9VMUft-t>wVmdGUGsp`@ey3n#
z)}IO5Ubsu863UMIX^0r<PPU?LllSx+b#DBUZtz!d?>^!4?}Cl~i-u-oanm-8@}G=<
zcE9fG|EQC1==yF04vSYW92*?nJg%^od)Uz(kZdk#;#OdscEMoq(9MVhO5;`Jvqa*z
z<dVZ3WFEPAC`A)A$0uRPns=L_Xo&D3O@nTDD6q76&4j5o1g(fx8>S@|dz!H3sxVt7
z4%PIHBGatk!Fx3BbR$?kUi6^pB0SLH+MQB!4x5actxc*){napo?Ni5eTc+nRI%>PB
znbg^ojwUhrkADfTWzI%eEp%196Y`ZGo_b7fF5IoWCL^$f5c$-NWj69i7mnirMs&be
z-E1-#&5mGQjl0=woPpso$rwVGN0TOryYP3APGYo~x+95iWH!K1k1R!B&>$wA=Cx0>
zmb;UE%a&ENp4_+Z$=j}N9oqM#X+F98o2Od0`?rx=>o)JU=Kag96K`%``_+?8c-LxO
zyV_iSSNoBN_f3{8>!qzz?c02ESM$WVX7k(=`_$z>Z!SZr=84vFJXtoa<<iOK?cVJx
zCtL8^-2GhZ+M`h7{nxc_^KZW$jvj8ETWu}Bdop>_vYuRMT?e;T{H_;%aN&2UAioVQ
zbOi1F$+ni`3p|piHC*9{a9<@oqH^%$lpHECs*<>LvNjnvNdhXD8_dmY?%cdK8NfX4
zGe<aS))|Ivw-h+K`>=~a^iENov%Y=>XoUkjr!<(~h&ypW4Ci5YhU-aXrCcIWsZwIL
zcoY?0VTFFgi5XR6S3jhaBl$_?C@oc>gh%0S!Y)Nc9yII3F%If^Omg9!^vS~Cs4<Xd
z%~~w17KVj=isSlN9*Hsdf9v`dXvxaz%(KtyKkxUWo~Pbbx9+2!x2n4PcHeHG8@hpR
zng)4wOM?g~3IRnxLBmrXqXtk1HOWY#(IkQ^GiE86Wzs~==p?utV+@lOqvJSBS7uEn
zYBcJY+q3sybsJ-x?s}X$x9Xg#|NQ^IzrFvxzmK&j2tUR_M622)cZaVOy3SL+3x_N@
zry|2nFrE(afqDyN%<^aYEE}WYMG!Lkhh!t!`s>T&W6$nS8n5n-ae6UiICpbtbL+5t
z{7VYEHGWg<F=tIjbS%GkMENOx;6ut)hYlUq<zqkH)p>krS5nyVP;#|zvv+4%pa$7Y
z0Y_nz-Kttti+LkZ(1)F=YL?-hn3j%ACRvs_3yqW9>2JVy;kQWtcUD)2_4Z^i<)Y^V
zd4?l=HJpw}t#cEG84Of5Na6u$`27s7fXgmF>pT&vaFFPzZseZifdf!^2V8O)T=~j7
zcf;Ed)&N`&xt#c3fFnn8DcmrCx4_=F&h@rvy{O7tcrT8yV-%5VrKJ5jY0L#QC{XH9
zp2Um`sPl|g(#hsLYUBA195u?g2gI33t2c|dDpxie$0S}+fpKRZWo2XW{OP_l`6^gR
zt}b5IFqiFp6LC1adH2j3k90MQ6C0k|ac7cjZdrY~{b0>TP~v=k$Bx;KlfxaO(T>N8
zOTD#rp|I5JwLiQkpSQw#8dzS<Yc&k*@N?ZlF80t7%)1v3y<Bc3gag$|Wt^>+>XnZ!
z^>*%Dt!L|_a(O(a_D@cq#`b>!+uy`lKPQxhrm!pwgems8vxP(0<6a>=D!fa0FR#Y_
zsPL@t3E_EO4?txTT!&0q??W81PC}f56pth{nznJ)S%g@A*<*XcB9bJYQBEmN)O`1h
zOF`7<x@Elft3$6<Vysswy@JQLNg<l*vl5=1P1K$gCZ_n$FF#vE8KJ~(IGy002S5D)
zJn+ijPb&bANi)P7Fk|)aXqrZO%?K?rRcSCbQRTX#4i%{>$vsKxfYcMkb#*Asq#bHK
zkYHn<tR58q#kFm>uC1gDv50OMu(G-A*|t}c)LN=&5+WkCchT9prc0it7O6H1!I7d*
z6{Vpl1BDhed$P17jiwB`2z~IV@brVvKTu6RcA{XKJAi35S)GQhCy2xYF;!6|E(`pe
zSd#G=a;nNrE_JY^u}IaXwgZ;20}v;MElpNV>{Fye`f4t(_sbPTZI-4xAnsY+k;|)6
zKdp)27=~kPj(31avffhZ%<;>L+)yM0uG`1gl!@gmYnHB^rOI=j?FjAf>(Ks|u-6FC
z@E7&c^9No{w*m9ozWR2dVf>2Gd81LIfp>HWM~#m)Mrmi)xuem!BZyB6xc@xbPM1=8
zOAg;cf8%vp+j@d2R}<?CXJP;RCAx*&6{)lT&$B|2^E%^&Xby)3vxR#HkEFF)y7dS2
z`0XsafZxu~GB`&TWoF2OPmW}R;r6Z<cjMltx8Dm#)7r5wIL;Sb?IqWJ$xZn7+S^_C
z?d}io6RO<p$|@ZI-pO}v>t<~Ko&tK*|MqvRx3@(B(h+uL3ir;YJp|r3k&J29rzwez
zd5Y2ur}()pmm_5&Jmu$d{??Q9_;9g^nBBB~v+V|^rGvv*A*);Zexn-Mg`jp=uclD%
zx!PJm&&Ncqqe+Uy0(g4+2yly^dxLM=zUfKM*VkDFmO9C|14J83&5JTwa<u!KuQb!d
z%U5q~%2H%lQo+f)o+d1G5KqBB^7@{bGV3E3_KK9`PVrtuhO-WXzgN{mh-IHCeN9yl
z|4#e&zkK0^7k)|g)bkPFK2!cH+@ihr;9kO(f+5}yZ$wOVjE+ayg*=o_0eT{3ixah@
zwr7+1>x5nsxdZ8tQKok$jVa5J@~Egfo6Bd@9K*#4#M?a4aT=8zh%6nhtPMSgmO7oK
zI2f+14ny#|%~DA+^QDSs1d~a=8<kxr2@wiRCV`2jeCylgdaD41mYqd+2OE~78Kubg
z21)1zt2q2CXQ7``g|*NR;=Ty=4MkdAqZEhHVC^!<SMnaU_+@K@5&A1jX`$6BI3>z!
za87SwJH8+ORCv8`yKs;2XTnz?kA`m<rU+{;fXm@JxEb4nxGdC#&MkrL1?3F3z+PDA
z3PQBZw)j6yiH40HM?@NjD1Vyr^*BmtPpPPLM5d13GD@cu>Yo3nQ)Cc#rt`4AN<#|A
zl0@T)VhWiwqlg8M7SucQsDaAw>+_9zqdu9nS(`HB*NIz=Z_$0CQi=rie3GJ^&Pxth
z!VgA9m*N@i4oL?li~ArUUJcx0Y0@BlIbNiY%<mN5pq*)(6zQgn*WNS!J$V6}N_2Vc
zWc~y2jGguQ*)y2&%41q69Zgfd1j1K;IM3_6XTj}mEQJV{T23)vYC^M=FWD{GfKZBE
z*$Et1#Q$JQhKzV$x71L!G?#LtRX~4DG)*-z^n`(K=@J7?R%J&sm5_1|a1u5o6ZjF5
z9FDbCYOVBlwbXL2sg}^Lh+cQk{(|Hu9!=X3`YREBK9Y4XH4V?INtUQ%FBX}r>OQ(J
z2B@|nDY_v`hAK*q*bM7gE?0);JC%s&9@CPP-@m8pO0JGpK@wF%lF>!SxkClRVv=vD
zR0ja`y<`Ti#55ChIg}WFe%2U@&|A4x$J5DL>=-v149y@q`QBQq)hny5Ug>R78(Lww
z<dqIJhIPChvqe2_JEox}S;I1%Sd%nYf5~W#Vy#qeO0ixl>9N!-m$Z1)GSsB%>#{Ce
zhEDlHhN(Gd=R}P%;V7BkuqzdtmN<BUKRRcWH;*l9=y(R*u<)aHqbjC#M;2S1tJD69
zo$D_{#mHx@7Bz~dOYB?{Pl`jJZ&31q26zR~F6%0QW>Bq#M7az^{3S6;Xuz`&KkMru
zHOv4!(@yL;1Dfc$rFv9jS>C|Lq9qJ`GhSz|$xT@%5}IQ$G!j3iGq@sX3_vzSS(Wl?
zyXh>oJ}F17ssm=X`Fd^H^IfKN!qonEslC$6*(-lv&~+2Q(Phtm8zhx#LJx7crg_U=
z&yYp$N~77eM7z?7_&mHN3UELA6cf_l8%@?b3pNstsOI`C(rm6uL$-V7NDIXllHj}S
zSS+c&mz-^Bv7uMA)G8#)(?f4nW-GgI-6zLcJ-qGr4qtNa>W84OoG?vn_<ZEn&zH4A
zx!`AsQmS-!<_#SbD<5{R+}KzuOgK-uj&|_J-0xKdLvYYeBxn&cK?rB8(W1px30>O?
zI$mMg=!3Esm?HI|bVNN453q-S<L>`{+<w=di=C^!`REl_sj&68;(d=m^NAZ)AiL>-
zcRuv)PyZvf@CVMmLf`r+JaorxL3`l5+u!>37cap!iE&PS23|m4D<dud6+yy6D2RiX
zQKDc2EJz68W5+f$^%_;%ICkgn-nsR?(o(myGG6)Np4-A3Ncrc6@U}gd-g)Pxg@&dz
z3e{FikkM9U;#=WW!s~=Pg-3*Upq1w_RZ83D6q*QLQ>w<M2Iqt!jh;+Um$TIK{NH&F
z?m{|e6Xtov+%utUZ(7!N#LhOi=%z&agop=lRwPwCE~wbpzMfN(h*_`0U&HZs;LCPc
zA5;vO74vzDp@!>aqwM**D5pcw(!HFQOGUA#x7xvU8XL=P-3@bw$Jyv4yok1@xdlk<
zW|VlUT4*NYqNV6g;r!<Q@z~#cXm_s}<nh}XYTI<dHJQa+6IhzUm0%~vZc)~m6va6x
z<LK~sL53)rdaf!LY+oy7Mzx<v`hj*Fs8+Zpg3g)dXh@opl!kd%1JfDALBSN|B|mI7
zHU~+O;W2XS1ro<n4Lk4*Fo`h2@X8c8VE;;Epv-y6Hih$Fu5NCsbhXheoKZohcBge?
zA}B*+5-ltR6@GUd=rGDfC%PAvYyz6dMJ4puW@+AG>5rTMXEYlhTJ}n=)5)#a-WSnX
z$fwM1wd9_BY$ffF#IT_C<W|&@M*VbUTf$*)QlO*QFNU`6==?z%m6wWF7njN-XXPoI
z4pK-CG}ocukGiSjM9THB-qe!VNxSiY{975v);;jsII23rhH$QM3HC&R)GQs|$;W7B
zr)a1VGb1kSX_MN7lteiJ#iqj794KWyZp?^|h}OT+qe9;-#tx}wBE?!JcmUjgV@=B%
z`I_ULJpU`lRV}h>{%Taf86vDW5n8AlIwvl@vgO9Z)#Z9;EseFWnAK*XpRd&<#Wpmi
zTTH%aBeomh#~$`cw+UY8KXLcF6s=IW@imSqeP>Bt{ko49%ZtrOw@f24V+2c?|B@=Z
zE45!OER`xr;D-66T)$6Ml}>%!&<>oW<gHv7q@-!@lq0|F0A3Iy=T{;>b3|Wv^<<96
zi$Yaw!8Lq-JUCa$oouSu3)+-;L6J-HWf)1Xj>gTjLAs#$Qf}3xT64C^7jSsx3;e}A
znRh`@$@-b>gy;+w6L!B{Xq9$#uB@z=)<F<Im$h!F7Xb`Et!;e|{%rr&mGGnjilKli
zhh@0<?FYZa3CD>Zny(vhQgK<-f{9{yb~#-2egwH!`VGpzC3eo=-a7RkM3IGFNJTD5
z>5Q*2@AnrAR|@Z;SgE*8=F7Wp9~SB`vpH67&w8A<mI|g*f`U{YJ>&T!b<TgK4o3;s
zY)Gbamv0pIfLB>hJM$Tf5PrQ~-#!teoK{Yr#g&1#=@fDFz++yynMy1k1e8c8^YnO1
zqC$hJ;;&{l>x+u1D6%OVDPvSYEmL`#Yg5^pj@Q?rv_4S{%wk|kC-~qwTXfB&f`+0R
z&@ogO4Y;UM{i0k7Ma^J1BEizACeO)5M$|88td2;X>GF-TA2C{-MsUMaP89^AWk{B(
zIx=Hk$(+<gJ*U}JWuQY!MOQlIg%&zyWa1Bw9INOdGV!B7=Ci@pXAB!cS?pH}MQ_b9
z5v5TspRJ2A{?IVa)rVFoaU`GF20}B%@*Np;ldhX|`Wx^Wp5r$p^`?0tFz1!p<fvZ4
zS$@I4&+DeB%!7EZlG%XLh!z|lbG2vui~P-&W;L>0qO(6JMn?7u9WA=0nwpN?6OqVG
zy3@y_t{Qr`8`Wd6l%4%*T?;mbvz<F<!;QeaDQH$)Cm*zzF6gz^JSPg9&AZG|{`}tw
zt%OnSl%;wS{I^_dLy^ZjR=XQsy?0LQ&<Dd%939=<JUXiWRjVn6<pZyvT)0I};GYV6
zh4XlH``3k!2p<<dB|Jx-j7UW<gy84g$`sh0Z3|A56gBl9qSH#}6-09y>4du`RPIk^
zk!up*o7Gt|PZ(s=d3_Hz!#%Mv+Ri*=5zqWmW8VKei-U0j&}6i!4yhzN?1_we^prX`
zqik*-Kp4&1DZCJ8mYTo2((2?W9i~{WuFK3@Z}<oe^mZa&o|m204l(f@7jmW-CZ*bX
zcZG;s3$?PYzrNN&wB8q=_Y%Ko8txYhqEs<W|FL1SDDJ;bjG~PlEVe<ibGmJ=pEan}
z6$htQq8y1rsg%_BpQRe6)9EqO)QNme1gjEiP1!4Js%<i89%Nc9#j#j+5Z|jS&Gx7M
z&MxI*)>2jq2O~+6OZ`~Ji(A%Y*Q>NQMym!QT(R9lle(*5i(*pTRD%6g<}`=?vSr^S
zT9#HWue`P(Np28X9|A83!$A8?b<*v00?kJEA#zh)NqpZcN>X&uNl`ujqH;xas@O+%
z?OF*shh@!kdu>iR%k>qE5F9lrfgWUGs#qY7A$+{pF~AO@^o*t%kDFLRey-%);!3g;
z>iHz~Lz<wZpE&#ZXi5!d?)A=unALmI3i!LEDe37>p=pM?a`DA(#Kh4B7kHtp<8<;D
ztCg*<RaRFkuv}TaWr#kVR|<bM?4?D^)pU9Ch#RVKvF;iB4_c0n5JP_O<@c|Cf2RT7
zlB|Zdt0CsZ-{sL*w(xuZA^esQ3oE4m*y6&SZQ@0$z?>-wpF1Sy{fqn4*7i%zwgk_7
zUect`GuD@x{4j1ljL&_B|9;8-t*6fHrl)hR6~$|1N<=<~-%|M@S$dTyzDnZz0C3-N
zNjeTNf5i5V5w-p=xR*zVX+>%~QbkSf*J9G}9!s23V-i#SKx4SxZcOkZ5dAuw3iA2j
zz3<(+cO@UJ6kGdX&lM|sSFe3+<<_HcZ$8-iT999X<$e2t{MM;f0scK)zPYw}FFbnf
z(ObFQ`UczwA3}fNF5!NvdTcDK2whlX7OQBoN=n$~C2@|(LuJ#+kX8-`J(W_1+v<X2
zZ#vs0<K^ajit9X)7E$sjQ#mDr!wB%tc&*(Ct>2p=)kDi>R8@qN|IKK_FEZ<8TSaeN
zkBzXXrlGFcriG|R(jrT%OruaY0NvQs@pPR^4n%Yh^Kn%<3tZ;wj;4VjqkT3V-}hZp
zmV%{&lB`##lx7Kb)AIVSP$HWmYs|Kyt<RQ*kjJAl&9aN37Usw(D$H=0l`o@n8b<C)
z&$EMhjh7lOrLJnCZ(l%Dq{!GGjp?0dg<0Ygdw2LPUXH*#1+OK;_WTKsoh~ArHwzCF
z%M~#t!Xm6b;nZsj2A;(W+Rp>><bY6i2-U>Qh#i%wRgM-&7;2=}i5V3#X^f4W%py`&
z*p$}Mny5U1rOtW;q&socsShWV!F;g#zSmyl4J&?}mAhpJ@oVbfMi%>(;d>b3G-&wV
zIlkUBi3x9G>;LX{3`sJZx_^!v2d-f$oKzm+qn<U69BE`sGbn{b5>3T2+#t3BJy}ik
z;Jj6>oTg=|V8L%nlD@-;qe>P<Sr*xJQk%A-tP;h>j<;HVxm@-<IXv(9VbgJ(yKl&3
z*DvR_(5nYs%}Z=beQV`yJKrKBj!uT9b%VMWlDM!W8G66#Kpya>me7O??&+VM{)Tuj
z_itUCu?`5Y5grxZD||xuTQDGj0bB^LgI_`0-k6T4LUc|zG9595*=X&s>CrF6?%d%-
zlxj~z^F;Np36I*T=`<4+(!ZHf4eek$CgA}t3o$>G3(=6^R-Hw|XqYC$@qnN}LJ*#7
z@9=7z9#GXMMZpo{PG*Z}z&!V7(pjgaFq~K?1FCo;4R892*l{*+tWAe>M(!#t&bdCU
z$1EBrbVyFcIl+NNwcZWdzX1!u2sTiM>X>t8&+t7dKj|XfsLduXe;?B8ol=4DY%)mE
zv7<^^68K1PI-fRpNicnAxc#+<(Jy}O$!@U+qqOmp0^}Yeo(s_A@2Ref=<bKt?=#xd
ziqYt<E!DNgu8Lkl1DWlp=XbgFzUDcOZ5q1VIIyGsFF*Dj@QGgo^lCsX@RTa+##M(L
zQyIaenz+o)OJFwf+Tv{oGadY~%(JQPMAN($4)b~v*cz!|(Jo6jeaAo;iQ7lPQh@SQ
zz%>-A!xJ?f?V>(Uxz%+|7IjOUs$qn%K@DSBUUu31M6!bD0s2&g<9n2NNjbX~ntldT
zC5UA)n|}l5<2PvLpzvR40nI}6VdNCar}7(+3uj;IghkU$YYupgl;wvzclp`os9KI1
zqO5AViQvv??A>o6Y$hgnhTgd9SP0FD=0XFuhnF_tx6p|~R97gUw2l*3jB_Z!i0RC6
zsDugMB>5mIDjNm-V3aG2ZjbhJ$JzxNB`E_@dEnE!L}#OlDnp%u76g`s_cE6Z*a1+o
zq<K}>1kc~0%wmZOyU>w^B`?4RDQ};ZmrZF4omc^VJ^_8cs<4YjAbB$6<nbU-bY^S5
zciJY8kAg7RA=@i3UGH!vDVi?7_J;1pM)x7~N4<xmh`)HoPgDQnmT4XgGU+TuS4`~=
z*L}3si<`;&HjZti^>k_e6h(Jg{aDe}yEM!1`Tg3{Nh_XzKMno1AM<#{y)Q>8T8RDE
z+iV$;5*zd+POp$DTxyJqZSlN*TGyH)jv(hvOy@oV&Fc7PR#(%AQ`d>aYBNdDwa2{?
z!RF4UGN!6>G^g*Mhcez~7?6)d$<$rjbsW{T)2L{BYAERv)!k8*tSriIB+EfQ8_H77
zc5O2@ya2DK5%`uNlE{?l=^ms(r{<^BD}qX30O`mnURjnjM*1Vb%thz}M}TH~l&Wrc
zQ5gq_g&o{p&f_Ub#Y0L}#RR5Uo@Ch>GYYw+<hVG<B-58`!}WDUxQe2d!9|M;(1~W9
zCZ&O+8|kn>bYw$S3^{QcZlr-GT8gF%3eSHMah`5-rQC~!SI<|M5*}<@mO5k=(Z64K
zS%fBN7M6%FcrJM8$PJv7$srii6wB!`)hT~u?J4K-CCJH@0qSk|k-52PRElv1Vv@_r
zkl`pPl(oGr-SK=6!H0hKm4hSq+#a_x=0=mFtNU)T&|kEQaea3%vW$bOTC{@?6!Q7w
z`9k46qUDHEGoNqBQeIMeOV#m@_Prs?uazT+%dnhJhITp1kKDCGoolv!rf1!xcgbe!
z@P@gZRlT*y*AuY3XKRjAvu*y^MWn0wMKoo;rCP}nwC4D`eEKx}54cZogiII+mmwbH
zw8o?fI~M_8aJhEsoUtI8aXgMcnL?V=@h)i1`6eqc-u{Hda|t^0AmxCRd8RY?$nsH5
zI~nq%aa+?=gR11j@T8_4y;L)BK*ejzB~iX30deahgkLVZ7!KnE<-jdoy8}2`>6Q+R
zC3zE;(weFq;=ywBn?&1#bBuXVRcg10wx$rHFjZ0p@4yMsbzb~)*U@EZ>;EjbMG=o;
zL$NBr>C=ecU%>vcvRK9BFnyimyAzVKCO>f6?o3j0#oMeycS?4H=QQoJda8d;(;glv
zx=UVu$*`oLZ}y|GTo|z|8ZYTN?W_2v&uZG|@agSiqpaS|nl@U7mj0Grp%O+teH3ME
zy{l=Ix3choC}KVo_6TQTpA}{i_kw1A%@5Z($0Zr*cmvkw=9zjR8R$tPR{6T}Y+e&M
z;cLvZ247hIVG@SPpKtAZN{@Wglq2k(1%$G3X6sSD0`=5Q?YET*>$T8J-FR3TJW?5C
zFU8BB*xCoDP75ZELZZ2G0zV&yUPwz{PJ&*t?(dKCkM+&y$Yc1AVzJig{|x_xbK6un
zM>vB0=vv_x;ZAJZF=ymmP?9!Yj>7VKtT{t3ElP4XPo*e#8E`^OI3W!u>_ykV-EpL(
zQ|IJqZ8qkCCmz_v<{{!PY7D;6i5@@vO+LKmn%f_I@b+u&iSpqsm)-QH;mLD4&1@~V
zzUCe}-^*6hNiQgc#>KCBwJft{Ib6xr{3r8eG(B-qmqceJTnWSF@C{TKT+Y)&7nZ|9
z9S!Wh_LUG@R+5_59hV$`@b=puJbuZ+!*9Cjz^kU>u-Qr1D!p~66mqrPTGn4T!cs7l
zF8mv<*{Z8Wzn0s7LN2yqO^R}5_gy8e(a=g`mNtvBmNZL`7nO3O?Wp^kZQD#!(~cAD
z5e(<Com`{7D71u$u$!Wp+qQ%1Da8q=)}*irUVo{@I(Xe@Dc)uc>;l;~0V3;+XbpKU
zjL4_vG^w*^zWd=1fA_<my`t=w{kRbmj8R&>w;zVK?p6ye&1@!bh+i`~k)$R3v#NL}
zD~wh0P7l2w9nE*@#1=gLz^5O0;M3oN-Ev$FqDF);zR}+L`T;r}#o}|V)>VzhRiC`{
z#ba707dIl<b5~Z}c^x3~2nPbivzc%W{<a$W{zaUpcMInVM~MqEosD_U7T#K;OiI!H
zN3U*@a_w?TF3LoT5r|ynoU^NUV#2`_>|Jb{(E1i@#D0IdyJq*~!dgjLg@$Zb^AUul
zl3@(`BJ(UGXIlRtn;{oD@2!h0aBP6xB=o3BvKS;Wn#$@OcbqzW_~_A7q8W4w#U(Uz
zr`|29Mr=m~Q7nO4ZWk@}l&m`F5_$nukSOxa=;2tF2?5oJZrgkVJ?;eO*rf$)FAs8T
ztB0gGh^Grxl61aWfkPQO-4*6Ha{X(#?fz&+dVikz!Qq}{y?HUnt2HxM@ILT|+{nK4
z<u8B7qQC!ObGgu~epy)XIZ`gz0UC+GRn|BaE^*!x(M*HWzVeBh6Aqn``J_U?@o0m(
z3QjYO&ouMJ_ReAzpBEgoJ3Q>h!)rWIlU7$q{&!Q%08S}P&6#%QGW83Z;%2s)Q<<WW
z+o#d8bz(}&_Mb?SOGUJZFyLGfy>0ZbosC_E&>;Se3oltM<?a5?ST~OB&5o|bfwx(_
z_$&$%JAvmx(^Q`OxfA^BvlfUFYz`(BMioJL9#x{h|Ff)Bm+<{CyQAJXLOJeI|B~H}
z0;{csj&<E2gh+P^6SGn0L2Sk57*6Ha^LgyEm-BImS5j(lD&5KYod17<!w?;p;X)af
zfP}heZl1kCnx}hVGF<P&Lewy(yajPa^_K5{@ritI&xK1jJ^_zXK^K*|LzQ!_QSBhY
z?R-I!vH1!)Bak&J){?87UxwG;7xv8L*`5MC_v8)T3-<K#PrmqOO=DV;I05~5JeF=p
zaoi1MYzDl8tB2h<j%+RwfX(l_Nus%0caQ)i1N^-f{@$O$Dg5mZ;n-A&uZYj+dti#5
z7*S14&vcq0W$tZ@81e-rn$TTX$SU%J(sqZlY&Pclw{r%oL7QtH)ElIyOU*>&SG*VQ
zgz;dZ(?>Rgde{SSGN*z2$W_<>8s|gNbB1l&z$CL&kriwPhh+(x@v!1i4M;U5F)G(v
z-RTr6m6BKFNdbIGpBNoP-zVmmG@{}#DJ>{VEv^PDO7^9QitQ2{=<PULhs)piuIs7D
zO;d>vajA}eBsN*!sW^`7dh~Y9GeJ%@8^LXU+2U$`VsG!+o)Q*)5YKQU&_V>2a1x<^
zZGQq3Uy{}6+9hbV8Bu%-x=_VAzr*Kz%Hr(etiMM%Bpf4jc4p?EjN=7DNXI;QH=-rI
z_Iyuc(qKQAwu+8D*@W@D^i^%td{`t(`G8aHYrExgx1?WmD0H0gi#w$kPCABbDoN;^
zeBP|5H`lYQI(r~js+Mv}cHQRHld5t5o45W6tXuDR^UePZ7Xb61Sf+z~_nq(jYOc5c
zBOg&M-;8sYyzjvA#7>R$`0?ZZUsihirlp&2hf`axxbgbyuiv@}^upXPg45rCKf&Ky
z5%zJ!AkOuI8-oVtH{+?h>(hBCxI@HZ2-WJYSSJc|7E!!l?>3272Y!uwOp=Fyafu*i
zyL;mP`%mn?apQJTJ(xr9I(JYNcg3nGZfuC68ehhuL@(#ikF?s7bJy?PHM@Ft-btzm
z+%L=fMO6}44-g4Rw@b8)2VS06NpqlqIE{rAktUA}ydkwN)$@z|rp&5UIClu=9e8AT
zC0udtaO+d{I5ztYJIKYFR;jmYMXkIW4i3*vuG)D6xLcnZp6j<wB?_%z{h%LptL4~}
z38%ZKzXU&k|Aall<+<cSi>0hj+~woF;3D{z(oRF6^t<n8+2r%(jmIC~D1ZLzH$Qv%
zQ%_y~EcBL_FaQ2%^e5xdJKixG-~9R~w*IpH<XfJ6^2zPo#TR%C-V>Gup}D|f9JRG-
zey!!Rn2*zWso8vhBla4{P)*Q-i3-JN>wn{g-3NE>ux!VLLK2&nX~ju#$%8+#5-Tnh
zlc?}NxAt8CnstPzFzhrbmD0p^iaFuuFt8!i@jFZr3!KEZox?)9`m-cr3q5*b6Q9j%
zPcl#!W^+0>n{|qW%zlwf8=ZUl)MC1gIO_zl9DdWuJC)T+<=v_(2fFtgo*u|AZ~prJ
z!C?R3gPx^ormox)l}gdp)AUH;4{@*(orqRQQ)_#B@IyRYQo#dufALU!^Z5ZC@YSZK
zYAW8?lV^^1O;p<YJAMc{S}wP8W_v*WEj#@a_!c~ja{)SSVanYV0?&JSTK#wg3C*-~
z|Ah||7v6ZUDBkC!eo-_}oG`>fkiu=ISoBlpK2f~aNrQrDoPgV(K@;+9kZU?`z1wN#
zw*D9&f{#m@^bGC0o34w3^Zy^Ay<^zdSA`wIb;4^AON7j)9?+Q%M`OPgysQtNQj-4$
z@d>bb72_rm3C{KR5W91TL8SaWk;gd*+|hzH%VaL^CG*9=1Rk8dEo+GKb&e!%{nr+W
zoc84;YlkMEMoXSD0bSDrrqy#nJ(0bFmKwS`6CFnn71<Nj$m)+I2$KNxD91Dd&;%5m
ztR;dQ$IjJ`VZ;os*m}GI|FI02ymkIM6o?1XX*33$s;r_F%b~1CnP{F3wUt=Wx&=d)
zzpiK&FSOpt6U%nCgQ69h%n}VnA(~k#OJ8gH1<$sBSC(pWDEvS31)HA$c${NkWME+Q
zX5#sK=llD3ew(ih+)NB0aBE(d29(zS|L*@brdGxWKrROZSQ-GdzYjJ5c${NkWME)C
z@c#e<15?BQcmF>!wK4!jkOAXf0J+TwCjbBdc$}3~J(5!~47Qz+m)*^VkR>FU4UiLX
z1~+sR9D|Z0_y}~g)KrvPF*yJSpiD`}V;G9CAx8Qv`RQe7crzON$+CVveR6Q}eRR(6
z`Vt&u>|6S8jXt>v_WNSvQ(Xrkx~We&!)^v$s6JcRjeK+s{>dJ85$6|(#rn6#KDv3$
zBSHVj<TsZ6!hbXWts5gBsX=0J%&m#n)x>K=U9}drq4iR2)DN96Xl>~HnslCIMLI9J
zjd1T@;wpB$zK}ewX}yvCh|We5YpA(M%ntjQGtS!1x8TZhLFWgm#hYH$9?}|&EuTN<
zoGqpje@Zg&U-8da&ec!oYTZ(tb#VC)=^vkQhj1<&(0IZZ#(!Ax>^OBPm<HvV>34U(
za#DQn+$yB1JBV%;Qa&jca2^$heB`sroi?}Dx9AIYuW0{<@8u)%xPzZ3u-{V;I_^3D
zLG1S3KiM47r*fy%qP^JVAK^8v?`nTH(vvmqx0o4MW~}6wf8h+a`9S+6<^J7bqCBB}
zV|2ks>F3te*&5k(_#mIcE1jP?{()is?LRSg`Tl%%l!N&H(tj(^?>oXq;|P~}d`XDW
zn3<iJS*f#*x5J?(@<F_dxVx_0bdoEi^tte%`Wle^OlGT*^$Ofegi%Dl#{TmeC)6k9
zRbu9!I)nc!lE;)KyfpnQZ_v6oFFSYJ`!D;AaP$gy5`5ig{dGoCwO^9ospP*=OlcNQ
zba!rX?%@~RlIM|m$L|K)!&kX`FaB1wN6EYat>FJ2bAoq?-)QJc&O`EjD?AyPdMC7B
zD38%&S9{C3JT-jaUNjJ$#S^`uMbGby7tTF2cb?Ju;4ik4Cw%|_000000000009pW!
z0Neqf0q6o00@?#Y1GWSN1Uv+I1ndP61vmv*1<D2r20{jq2Dk?72Y?5(2i6D#2tWvq
z2+#=b2{a1~3vvtK3_J{o47v>>4ZIET4rUIP4(JbL58x0E5IhiQ5atnZ5xx=v5>OJ3
z67CcR6owTZ6>t^Q7CIKF7Yr9J7%CWS7`PdD8UPyB8-N@t98esX9OfNf9o`-Y9*7?B
zA2uJfAx0twBnl+*C8{PICZHz-C%z}_DG(_>DTFEBDq1UeE4VB!EQT!fEgmgiEq*W<
zFk&#^F>EouG9EHYGJ-QYGoCaEG)gqMHPkj9Hu^U<H<mZ%IIcN9IZ`>0IjTAsI+Qye
zJ7PP8JP15~Jf=M)J$^mDJ>WhPK3YDuKLS6HKoCHDK=?t5LLNf6Lj*&hL-Iu$MPNm?
zMs7yBM_xygN32M+NhV36N>EDLOB735OoUAEO<YaZPPk6wPgYO5Q07ruQOZ)PQv_2`
zQ=n9~RRC3zRt#2RR`ge7SISrjSX5YsSxQ<ST1r}WT*6&MU9es5UUpudUcg@-Uyxu1
zU?^d9VW?ruVk}}{V#;K$Wb$REW!h#+W~^q)X7*=dY9woPYp85mY?y5HZES7GaD;IV
zab9u0a&&UQa`bbibUbvRbjWpTb)<F_b})8ac9wR+cUpJqcp!MDd7OF_daQcNdm4L+
zeC~ZreV~3AeqMgoe^!5-fF^)efX;z5fm(rpf&zkAg1mzoghYgtg?xpkh2n++hN_25
zh~kM*ibjf-i$IIcjFOE8jfjn^jlPa#j}nh;kn)jslGu{~llYa4m8zA_mdu!Bn53A(
znW&k<nr51qn$DbVo(i5Io=~2Gp3t7^pO&CfppKysq4J_uqL`xkqh_PJqwJ(Wq?DxY
zr9`FRrhcZ@r!1$ssE(-;seGyis-mkrt7xnctqiTOutKz?wNSO7wrsbkxOBQ0x>&lL
zy4t%gyQI7nyokLpy=1-2z4*Q^zI4Arzna4?!|KP1$^gn(%G%3r&lJx#(hSll(oWKX
z(&*EE)9Tb@)S}fS)<V{J*5KDv*L>Ib+8Eko+M?Rh+nU@G+^F3a-SXaI-+bTL;56WJ
z;Tqx8<D%p8<f!F5<+$bk=3wUx=X&St=ql*c=}hVd>VE3h>k#Wc>wxSI>`d(Lc${Nk
zWME+2%k0CT&Hw^TK+Fh)3=9rnJ_7(De*t;`c$~G8!A{#i5QhJ?4H2M5fE18WBW<Os
zNvg(i2x*aTfP{Kz4~<aOYcM9Uh`p9~AwqqH@+9=$Lyvui9@?krWHW`P0-;ulSGK?1
z8P7kzcL6*W?;$X~w(yc!po%MI2PJ%EcJWj^V)jrK8S?_3iJ#1i*m7PmFXM&tnRx}9
z?h^AVD(+k6HI!V<ypF2-g}H)?Czv--@@k|myd|3L*iI%a5aJ!PgEFp}UA)FOW)Gp*
zW?sM>@rij6JC0yp#s{azyaM0(!Muv+?i1!Ul--DV9ijV?xk5SLnKw}OHgN!j9G57N
zV1OYEB<hIJp!XrgGP|;eF=A+%r}V~w$}fv#Ff_6rHRPenjNBW?TBQ`b?<0vW-TNfe
zr}zo2OY~@cfOCv!t)Nf;C?vabzvyQtTK3|>`KV9fzp`)E|6j3589v(R&@*^IzuEQM
z9Y2_-!48eKZ6(02-G}?NF6dd%Jh2&}Rll{;pkkf29|XIyJ|lV&7dlZ{D5q{3w{~U)
zx-&+acNyW5-KmS_jf*2XMUxIE<&IIa{~@Ka+WN@tdHY>RQvZ={KvF!m8B<Y7tZ0mI
zMmdID;b<7kaeQ3UGF95hT;&r%nM5j+IyREpkVdJ|Sz;)Aa+D28Y5F-W8mH{DKjYK4
z@+qYolk2e6IwfcQsWU%P>A!6E-P=2lbNkRinp@Am079z*?*IS*c${@u1+?SHmF@Rz
zOQsLq(=(F}%!FCVWFVO^Gc!X;Dogb(snk^^+xlT<W@cul%`)?5d9%#SOvx?T{`uMN
z{ilx#EET-E@7`N|f=_gR-~QH#GbhgTN8j*|6HH7!>eGM%3Ta3q8q<WPv_reJNBeY=
zPSFK)nl7Y^=wiACouO;ewdmS(ofF@rOXyO%E?tkVPdA_&(v9fGbQ8KM-HdKdx1d{6
zM7N?_(`9rUx}2_{E9ok_E!~c;rrXmU=#F$Jx-;E{?n-x~yVE`Bo^&s|H{FNsOZTJu
z(*x*%^dNdLJ%k=g52J_EBj}OzD0(zKh8|0gqsP+|=!x_sdNMtQo=Q(6K`|wilB5}B
zl#`+Zno~g~Rivq=vt-DUqlOl=q!qPvNKdC{&@<^-^lW+#J(r$G&!-pA3+YAlVtNU^
zlwL+Jr&rJ`=~eV<dJVmnUPrH|H_#jDP4s4Z3%!-zMsKHg&^zf}^lo|&y_eoc@23yY
z2kArfVfqMtls-lur%%u)=~MJ+`V4)RK1ZLYFVGk1OY~*>3VoHnMqj7zqi@jn(+|)O
z(ht!O(~r=P(vQ)P(@)S((ofM()6dY)($CS)(=X63(l60B>6htO=vV32=-25t=r`%N
z=v(yL^gHys^n3LC^au2Z^hfl^^e6PE^k?+v^cVD(^jGxP^f&ak^mp|4^bhop^iTB9
z^e^<U^l$X<^dIz}^k4Mf^gr~!^lkP4VD53B2OMz7Lmu&%Cp_gH-sL^s=aYPjFW}RB
zAz#E7^ELPkUz4xJ*XHZ+C44Dgm#@dy=Ns@1`9^$Wz6sxyZ^k$0TktJ8;#={p`7*u@
zUw-0JzJjmhtN6BjJHDE4&v)QE@}2n3d>6he-;M9i_uzZ-z4+dIAHFZ&kMGY9;0N-9
z_`&=TekebTAI^{9NAjci(fk;GEI*DP&rjed@{{<<{1kpFKaB;)oN&sLXPj})iVt|s
z1(#g0=9<s4VatviUhtAv-0~qmou9$a<Y)1-`8oVtejY!cU%)Tq7x9bvCHzu;8NZxg
z!LQ_3@vHeY{91k;zn<T~Z{#=eoB1vLR(>15o!`Ol<ahDA`91tzejmS|KfoX45Alcj
zBm7bR7=N5U!Jp($@u&GS{8|1Sf1ba<U*s?Gm-#FF)m^t#&Pfy5vyCuvZzd8MYdznz
zhlQ%<GF8=1rd-~{o9=M))o}ZIu>N^es|wxHy8WZt=95#I)>$E=x@hdCYv*`ZHrY-U
zscO8LO%yID#VSdwLGH@ps(xba6}{LcVXGV0#InCqRW|XD?aET4>sYULtrN*S(hF&3
zg<g(Sg^tXKGME)AnVX(St5K|6+$3}90@svrVRqKVcBrMQQoXdHs4%EX2UuXU8m30Y
zaa_oOowv0d&vawf?+4DvqR>Ok;#4hKUd#tesbU=%S>fNP7Ma8t(ry+fS4l3aOimZ7
zlzKDkz!vyzwA3c85k4E}T2`366}i^II${_wO_keO7ux{aZuPRMbrmJbB!!$D>l&q)
zJ5jo^{ZwVyPOW4b)vCtP*Y)nPmXCRAnpzaWf!1Xq!dPONiQL_kM+<dQl+*6HjhL;q
zQ?quQ%7qe@6UL3LZmKjXbd&ZM*n61hRANWN13Ob`iZB`(%Oa3vt&H^Nz8R~B>Lf=f
zu%t>Z?T(X}yK+$%Qa*b&Km`XswuMTi&AS5tDwDk5%AyW%0NBD7VoOmJ(uGM9EtC~I
zC`*Brn?#s&f>x?*;<4i25T#s=P_9StHR}vQ6BPJlR_?5e?Ut2Z<=VQDKggm`){Wz)
zwWx~J?k2jbWa1DGS?GG03Y#ZD?Qo_I4o1qbkfN%aIPf3Xc4~8FoK;oa6!VEyWnHv!
zqY5_!)`Y{vlkcWgJzVC(Sy9&^f}Lnp1trp_DW`3e=rUH7aN6wX+99P%UHR<}J(#d(
zH<hazFFTo9TLjqRK@#tFaj2xRQBpMVeqtnmypVo0|2=2fD9g6c@*xo^qUq;ID?P{R
zY^CPv^!KzjVH#%=E7m^OCQEet$wjmbte6R-f+RP(l;I2znCaC3t2E+dx6=yWVXcKW
z(gX;n6MAsfWtY{fK$PN8gBNsjco?oTXfcX?@<dL_(G2e@d|;=WED?p0RbQr=90G$%
z0`mP*r>iLr1HUe%#S(grji<HIX_L4pZz?w|)v7~pU=t*MiWwT|w08OAs20VZ{t6L~
zmvt;Ng)=wdvc|Zj4P>=YMhr5K(y)6*S%3perQTT=TdK8{s6hyBcUy@vkF33;<|dTi
z&D9A41|)zgq#3jtxE#4$mQq<9&@pnI`e1Cg7=VJ1gM+h;Hez>Xq(5M+DiLKpbh411
zC5JIc&-e7vTJ)u}ZC{mX9HJ!)(+)jg6HGX<4Hi=CC18W?A01UGrEBW_;}d&k*%L_u
zQd1zM$e+#-?Z)bv8v;uhLKM4VHdBQXPIg-fMUiPVaooOl2We*7Eiy*{Kavv@?i|%3
zrR@MMX~x2~WhnvFc_^CH&lw8OOLEl{OAGcdb$o#I450%)fBGofaR;GT8q<bxp|eby
z(WZ>z{kQ>8H3-Y+k8yJBDG4-!0FFDD*hCcDY6%gWc2&PM@M4hEn7tT!74y*;CyjH3
zoGF`!X@rPJDQFrIY*U?uV6{1*xC6RYP85+&Ko()gR0i+)64E1sR433%Uw|ujQX^*W
z^36AUTd~?;CrDd?y^N(WU>0Rk;L{X{>G(+ZXQz&;B~D6$*37uWSvT_ZD6gWK+CQE;
zenX*$Q*6@_W}h1|mlYHXFUb+mnBvq@J2|RF*>r<Zta5P-u%d;As@k)`ATvn9e%2KA
zsbgZWH4van%p2t(d|)ou?m(Cj!SFg1DAz!1C+i}rw3Fe1tmbe6g98md;sZN6*bWuU
zWeb}znZq1dFI))av3fKQ3(;Y}?-jgXv@;i$(DTaa5VQ-x+2NXgqjG?XaidZtMtf}c
zz#&1Y4x35^AW~^`h?Mqx9QsU*4s5Tg%U)%#o>UFs>Xfe3YT)g{mC&(bCeyGMa2HT<
z?9(57Ehlv@VxtmI@+a$D!z8St8B$lmI?N|NidefJDySQq%QUE4mtzFbVdUfODasoR
z12+MkN%4c#1vEMvn~tbG=Y+oMY0M^hp;i+M<Rm#jp{l8sW}%SH-phnmd68U=JNFXh
z5IUFvDdwUc<ArwZ?Y3s2En{7vp}GStn?j<24Aq$3%K<p0F68c(j65U|a|ovyG!PFr
zK_m@`7E`t%@PX*3!^YaCsze?vgn*0<7RtZh2}5sDE%vr*xwS9LyiDx=k<W@cxrL#G
zc???QqFkL`7tvaXx>&*w2){OO4yN8KY#Y5<(f0jm_Ow;-G$L_R(KwB<XKE!)-$D=v
zi$)%JKM6bw6L>OmdLZEh%*pRz%2^>YuPK-p0tfyJuvM`T!P<!o*F|IpuC4VI<Fyp}
zW$bkRW!oBh4mGkVgSj@CdxU_N9<pY4<DWOd7{L_7HNy<`b5+}3o!6tY4KgJWwRf8$
zEoJ`z3pj2R5zh<$uSbaD_T0WIx#&E7k!;S}eNdlgg!J6LI=%QjeV&ER9o9&s;JHIs
zappXIfB}-=lK=OYPEyaEqqCqFp3{AZbnnYpv>_NK7FG_u^VF%&#0d261qc>pomd%U
zZ{%~N%bmSr^1f!*rbu8MPi6vHhU~$<U>;%X_l|l%*cfAc04iF4I4J>QkiLQNO?8nT
zeY3wM4G#faaH_tAUhM;Cpd?U^G#%nESn6U1Fd?gB;h-t#8|K<nu_}sDDO8c<$Q+Pg
zCThq*P$_?h>KVBh+FaL5L}ju@nZ+o$I(k`8H0-;Ki?+8^tG>TBjo0*UL^TiQB7+hj
zP-cz`Sk<p2H2pAFc@toMpL!T1@<i53r_P83ShXE(S|lsv5eq>S(w)SUDHJ&}8ho;m
z*eI5*uF@V{`RSRzrPvk;r?MP|3-oEH@W@pg;XDwD(@S-Tw6Kw$MSjx6yR3=J!Do>_
zBRlDGUBVaCav)N8gE16iL%pNUv|EJ!f<#oHB>^igJY~T6&jN2Av>iiDXYi7^-t^ME
z7~(DKH!$#runO?(8Y(NrP_5lYi3+SYX6PTlT_X4(szSC?gHJo}f*kd?MC52-J1+MZ
zF_XXzN!hmzY(o=+Ih$Tn+kRv5XoaZ)p-f!GV}H_EB+T~+PQZEcse`zg&EN&rUfp}Y
zA+9y1(^Y@%g7F%|zex+dPeABCI>2ozy*jid_^s_P#i0bb!j+jY>pZy|b@~B$%Xbp(
z9Eb}ZONwTKYgAN4;K@w(;5-Ky71v<9R8U@Ao(!%$dz%YG6dT;r!If~=VCYVGy=Oal
njIB1T59M&}Bn52SQu`y?Kl-16?JK3{>(FBtmhC&i79<k@=U^wX

literal 0
HcmV?d00001

diff --git a/web/css/fonts/awesome5/fa-brands-400.woff2 b/web/css/fonts/awesome5/fa-brands-400.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..141a90a9e0a4b5a794557efa098a5c52320fb226
GIT binary patch
literal 76612
zcmV(_K-9l?Pew8T0RR910V_lR4FCWD0tR>h0V?SMO9Bi400000000000000000000
z0000#Mn+Uk92y=5U;vA15eN#0vs{Jdd;vBBBm<3f3x<3E1Rw>A1qZ1-Teh2VMdmgQ
zUYvB30mQLfUUz2%GaC`R9ppkUVokv~W(8~<z!>lL&;I}ae@B8Zp0PEv=-d6s7a_@v
ztm?Y%B2pP4tcak5AOvsYsTxc{_p{C2F4o)Sa#l^s1zXEXrKhqgPs?kmY+K4JSbZ7t
zyp4K3qZXtQ+>8Jtz-W4*4X7b`!)Ci5UEac31QT9h2!s#-D=9#CEXN$y!u9wGHts?#
zQ?J6xc4f9P=w9C9)(GBa!|}WCiEf@s($gQ<+u`Ob(GmjzfWZJ5kOVVIihUj5g*82<
z)P#L}hF{&<hn-8WKJ8^#+7j>;cYWJq*eRnw;y^i|;-9~t(dGK{yZ`&OEuN2Oo}%p8
zyDg_NCgyM);Qz}OY#G<FtgtD=y+ot)HtPHH{B-`Y`z&dDpCl<Q@{$V0lhnXdF*HSN
zhUm12Pm0-8Vf)ODsrnzDpIh%QqS#<b#YV-F$Q4<mCDK4fl%i4w7+^$VV4i_hcSfF`
z)mIAt-{1SLv+wKuSBo_&ef)Dw10KOln1j(fJij*I`%zc_-!*x`ad6ZfchKqu2Q5dG
zAQGjZ5@mxJprQgsPsONBteDZ83v1!jX)krUa%=zJwf?`=os(oIIZ2%qc6C<+UU&>2
znB5RM1Up8J`oawfHA15Ma@4FpxXq9=Lqvz_5dUA|1K_Zq+RxY@XOf#CP=Y{#F_kn<
ze2L@T^|6Pmbd|1pPj=jLU<nG#aN7NW4_x^F?_U4R0Sa-jPq>N(yI-(?h5}sLT^@mF
zUkB)Kvvg*E(-r}e0)(e|w+stkboh2_l{8`jD<IKM6!HK?G@hG%yEk{g4$cdC#6f_<
zj<+2Y1Bo=k=BuUtf7QFYs=q845IAx7^nh*I*8<BB2h2APHpI~;iq3ud{AjW1-cFyt
zD;N+MW>~Te0*iy!iDPs3^n=}dXaE1KX}xrnuI+9I(11w>j3IJ7fRdgwUdr@rc?k}e
z_SL<|K?K1P{@?QW1KR!nU#qN_aqmw@byqEeQ1M6&3u^iJ2vgVIYd<tBr)dH_I|(Z~
zewS5*3d+F(McJE>|Nm>LeO0`xisw^-2_<s~Ovwxfupsc+Gbfwvdw==f_Ci5RZ766E
zL~(;GumX}X;f4=Oj0Tgb)qTiS9b#DwAV4-kS_Ec&4UjRj9sc{Dd;j#xn@R?uyJ`XD
zL*pv!9-G*iK=A{h@r9#YR%LuM_Zbmcu*(HK<0XJnX}Z08cinY!ejYtO(pUN>NGijC
zpujNTw##<IFc=O23%Knn;5fEY49va*1OWb5Ks_RijgK}^zjw|k`CU5-49M~G6RvOt
zy3nWr=-$vqKnM(Mw|684=cTrix_prPwygfW4wx;es-F4Fez^HB`|T=h0qPjZBZ(B$
z{HtoNpewISmsXW3r}Ve`GE8-t^D<|`2aEAZ%STYwMIe1SmMethLJ0CbQgT|aQ(mV3
zNhtv+JHaPRA0YYO1E?#Ylmc7@Q%alUODSzDeONM%V5*eX)*<V3Wy`_$bE5uARv3Fd
z3gvM`mrs};A!=%JTJPsowQ4C(k}rDZQu18XWna;yqTHgqrosCkp!oj>C?QA|08$nJ
zN+XbxM*t{W0Aw$vNwmGen`g2w`*Icl$redzMkJkRPgsXdxw;Um5OUXD(bh+ho?0p4
zfk>r!fu_KfCIuQTK9nWP1cx>r2n_Pwi@t;HZ&Pgpq-oMheY5W~%Pgn;@yRR=k4&(s
zSZhVZhJU$q2HP}(&X3g)U(sNJ60ynSbAxQ_-vRaoFiOe6CX6yb8zhap_kJwlW-q{t
zF=d#PwZJy^YyBj-OHN=Brvm+)e$P6f0)|Tv6j^o}0ssU6c(Y9QCjju)id|JLK4hpR
z3IK5cAV6Te2MDBV1VHd>JQWlGj>km+&{p2=zrqSz01zmK=RL|VYFPl?AKagU5B#6q
z@fk347>C30004xwkB{{|$9ee#;P1ZL6GWZ>fP)dhgczUy(AN6eU|ZU5w#TB&SHVhC
ziKeMqb(*bKb!eW3wM0v`LYuT-M>VC}`b+QhH5TUZ<otw+%_^H#HM>ngS}pZf@BRMZ
zkxIy*o@T6c(!&B4Gs+li*u@bhImKC~xWYXi@{BjUN56?Cn>@^zU5ZkYUKy9hOwQE2
zna}g@x~joiQLAf1?W(<Xw9eF2U9OMiTJ+Oi_OPz*%lr0zzEAagM);C5-Q=0>bg$=m
zz$4!2-9GFyzV2Io?587SsK<)2Zk!+2#^dpFqGvUE({@Hp<4oStpw-1j+O<Fsu1IC7
zQmv-TnwIwlM#;yuM~8J@SM)+}^&$2G5ktZ&bq7XFcTQ9&%?fLD#851XwXrdFq${6_
zn{j{5Vwz~79Y2==Mp({D*0Cq`oa7AW1J`;U^C#~DwdP*h%*kC_cFTB{FABHv-13Vn
zXY}-YvE#73ay{_y7V|EQO8m1r(Ddq>mVbl%<Nj`2ZL!%V>#Vifm=TLCG-Ob(PBSzr
zR;WM<GXp(eS!v~b9+#%9$s@#n7yobH{Pp0<rHjT0omQ<3eeUzvw`CfKwyDY@PhxMh
z;Oscc_cxp2;MbL`cq#qSp-qdZBkgTl8(Uvjt+iBENg>7g*n>^?xn8S@I?F1`qReHu
z+D-R|!G|+*rt~>XIb~3w=c@G?^^m$rU8mlqwo)6YwbWFqma2~EFU{qsE}{W{u}w&@
zRqyo6Uw+Ca{6C_13-1L0;Pn93Sbzhk0Ni~g9ma%|uP9&x_QMT>%Xl?bG#Y26PWMY0
z-89f$(e!qvg1w@A(irB{BfY@*;ah{qWay<wiBc<%v(+e=37X)a>9`4=6a`2}-uh_q
zV!6f>g@R_$$_vq5vLJOPc7`PBk`c_Plboy{$uW4(INYNvR)9seVJJ$zjuCL8SDSR5
zDwD;ir3Ss!xIGy%z}g&#;#5R=Hn&ZqZjLQ+ifS0TFn-vY3K=MN7Hk3foMU0(7i$<+
zp}IJEL+ND~9H2yDo~O6FdymLJ;MUt>c&UbE3;<CYpjK^8^h?I$r71w8ZR!}#QJf)>
z{$xagVYJ86Al=jZF}1gZXaX%eR3^FCSZ4B4&I$<4YHCUI7+)}EW!p|Sh@&>TPtNW|
zqn9T%jI{=rmayg}7=nuIGp`7rt(LeCCp~JN<w8~MRjwpwP%$8YoeehyP_Pp^mE)Bw
zGhxB$<%%{L9$)g{9T;Y~*_~9mME!i~ePUmDA6|(>UiOY%GBa#W0Rp9)&mGPrW<r)T
zSk!raNQU64@LmeBe4f5V6niPBy++K~T54x5C&bMr19F6bvVme{&%u{XsF=gql1S0H
zc)!2?Zj^{MKyeZvSeL8gh&F6!Bzb<N@jhh+ZcK<A7E4FZ_9O(8oJ3j%GGx|C*qo#~
z$6%9#$BLts%ocg#3BI<qQ<g`it<~p~g~Mp8$a^PEH>EYvgJmwBsA%7kl!YxH!^OKs
ziG4=tXq8r^9a*E5wlGTjB;LREi>{fAWFg*Qb$t-6^CUC_-hN1^$DN`*@gIVB-A&{W
zqTlCSR%~Np4!|0NumBD+s~Q+DMbi}AA-=+d1xg?WoMiEWeKCJdp)4VMwK}0>Dv^Ts
zf0|Sq2j487X=uZFH);J5SvskTGewHS(cn@?7TMd(Zv(#G6~(Yrs$o{jE>UV01d_Zv
z8Aa0xYMy?oN1bitQiG4aD%nT4(G#X?^Ytu*=R;W}=4F8e%lSvhFwYTaHtombJ3U$u
z0~PR{w*;b;CHZsO#glxruOiN-K%@cZU9@iXxIZs)8uF~$$mMRwEi!yAGp@EJT`nA{
z2VJA4t^tdiHk;6J9S7fCgh?)qWPLdv-)ltbjGI-HxFS!T!$^l*EH_8%xpQD{AUqHd
z+S3aXxtO=>(C>6TyYS5A+}}i*OBU(%sV17~1i2ZaD#?gVFGLp=3Ts_75Oj$Hex3Uq
z;YcROGxi3jRl)q_Yx1W5YM6)0EN3qjM5L@$XO52S#-=}%rMteu#*XMy`m;33Nb<M$
zegWr&??2a39<K@Th0=>s_dZUKdS^3t!<^zlVp-p|6OJR<u3jb67;Q*TIS<nM^}_or
zz~y~Wq#gMSI)@7`7CQSbH+=U30fzk@?`{?_NW531tYeQVoZJpnNwvjl@q}IWlUYBl
zC%Gz(33?Vbh0q(%3vFrr6$iEJ!h=Um3p$Fk<YL0}l#f;m^d*n}VUc2!*!tzS3&d7>
zCW0}P622gf0i7TA{yPB6fp6#F_Uchc@tkbWot);&Qd|sA!r+XrC#^&{95eb*8ZVgh
zw9K9LclUuxv+K)4S&!BElY0s10F#OWl9R*|(dp6U<64jY$yOfLC}XWMgr@$k`6s=W
zFHDE>v$eykfH9?~Wo?T<+csS|*FG|p->O=<{m@016C$ye8)#LsBJl2P#XxTJQBy9)
z*sx`C)wE@wSe`5lM_%;Bc0A>l8jeI5YL3RU<yc!Hj=N611D~ki2BZy%!)<V_@nm+v
zwX^lIGIVR}i{>W7%05b<+mJQKFyM-_$>aotyKjH_6~8HeWR85~OZRf~!CPf!1EV`7
zPg8{2|4|#q&Bf5}bhn8)!R#;l_U$DKQ-mUf#kOxt5DUlM!{)-iI-U(^%R38Uo1C#^
z?d`}{uDj1J;D7$iOjWuv`CYsI=EU}AF>b1-9$ZP*pA##~wAEKT*4>lT&ZJ4n#zCsR
z7hgJB9Efz-_LXhjWp7U=7f+6>Nm$NidGmE`x&Y0V@qRgUXjDCCbja|J&FG(WIKTBu
zY3o$19wY)9KoFy(!fs2%L_+$x$X>WcmQ5#UG~<J7-_=+!a|lfBB_v!e>Cxh=z|;JM
z^^C~uhbd32sEO+E70v{t(waqIhd3Fg)yuf!kEahl2=@oLQH;{JZK_Pb?0tW_yp)Lj
z+3lJaC+B%OENMN(50C7OsR}6%XDuBu(Tx}oqC@S)ax6mYeE`8fewp~p=;t8YG1$?H
zQ6-qvq)5{+0ZU(17#yE5`SmjZTA?eF?Z{2vgALbLm*%sDan{vA-22dE6#%L^5i{&+
zA6UArenMnxs}h6JtwBc?LWcv+AwJm^%D_Oq-Pztr&NC7$`~7&4%%X=)w^SUp=tc|Q
z#^~xwGPgnw{AH}t0bzuQ%Lu9lQ6$cB#-vMdqHT+LC7lHzn`OC4ZaeI=ZYWK)0hO}s
zA;6EZ!Fr_%k%#~+WtcR1S|Lzm%mPk28;W9*DF@DXU?X7&UBvoay==af^J-@wY}Q<Z
zlle+b5%14;RL6&<#+lk`&54L10=J|w5<dokVmYR)dqM*2rSK|J>pE7b3xs~yAfjB|
zK3?vuZeBPap>=dx<sP+;u#s*77U#FCKBS;gcc{f)*~BWjvRS3t_ZJ0%$5>w(cz{^2
z^1|{Aum0a#%pFWFXOGLK(uNj2>?7xTIM(SbqI!dP@Q`cuy1YCEC?~lhkp3t!9R-u&
z#l+_ye59XyedVl_H}+jVSET@ykz2W)WhR?`6i=wmoqxuJcNok9j-3XeH|nqgJ=;Tk
z?Y(hLi~%0-xMpYjQiOwvb6>u95C7X~Kuq<n#li;HfK(I1$V^2(=6i$kYUWrm@?i^I
zt*F-qRgMSl?ka8XZHXsu1sYWlucbG|v7~cYzOWy${L;bAdcjK&7XdD-e@zUrCb~~4
zY`N5?Ee|Bei}GNAxL4C!o!`E#LfASxxb#<}-DE$WSdwbeYg9iQGri%$=8;{!HDy|>
zk>)jLuB<{@vk0wgl^}#yXis{icRkgbi|l&D3__1CWJd#DXs^w@)l<k89g|@m8|<vm
z^PFzDMriufH@?8y*c#rIqrzGZb)+ai%@((EA%>DpuZS{7LSZnH4Vq0in)iowl3&&|
z%I;spMw|`Ez0$FpYZU^$X6wux!6N<m3Y_~Ocda&`I?pQPUeGhPkm^cG31no2vZ+XO
zG_UmfXbT0=3InLKrOg%YsF!z34ufN!^ILuk2sJYFoQ?j&kG-fdsK@?cd@s2ZU3nsL
zu}_24Z(WZjQI5YiOtk{0LHE|ht*g{Oaz|CTz7zYxcEMSWh%!kc3G%SSA_bMrC=wKv
zBPcboc{@#&>d78Ax?V}&v+<(i=GQ}dF_G$te=Aaanorhy1EviDFpi>?I>ny^5c=Vm
zbR+&o`0V5o7$c!MK1@2cD+zS&0{M%-{S~H2pV>f}Yl$6Fj7ZS}<G`T~x!}q5YtSx;
zgWl@=L}^Z3Z$x3WBl$$m-=59PLnL|qJ5^hRwA1rIEKJUqcy~DWrx6e!!$uQMB=HyM
zJJLq~5i~c969gg&)aH?76pj=kfQHW{`>Q2gwJMG?MPE|&6f}7)FubI=o`NhiO2nd)
z3^CY5C4`XCD2mjonVicqqs9!NV=T)yKk1IjTCp=dR_f+kn*>!$o5PDkNI^D@-$G!B
zv`SS}1Zke3@)y+tallm9T3Rtgvi8{;EQ(WU#~>dZKq*Hg>Kp#azL4Yz2>cXiN)o!i
zI4Ymwt*5CR&Nv{OD2d&j%ro;vMe$*a(DcO8`weNOu*eO=GpGOzCaKQpoGhdg9I0BS
zkpN0_l2L7NQG=_Df*wo}QC&2(>Js;x8^pDQL=nqcEKiyYcPt{KBRpSo(0L=1rl))&
z?hYou;=@<R++y#U)-g<&__F)X<g?632xl{1JP{8hpTZ+HcH1lt76<w1$^awFsJAcF
zSTVxZ35H9oQjP(znsX&ej}96UqH1jgJXA_6=t^50&#DMwe4F}UAhby--4n1OS7`y5
zRwF_r%VVvd9k27zl0^mPwC#Gh5%z0@Dy7`?2Y~X0Lv<cqOIt|mN@1?S$)lj%EbD2(
z)jGmD(`HW=Y#9DajBZ=tlazA-T_Si~GZuWezperxBnRVn2Rk8f2$ELfCm&c|b8b$U
zszQWo-Je_b*Hi80^Ii|sR1e>@Lc=|Tv}^XJrQtB9fIn9AK+?GL`llnK_2jlxs&v14
zf8BU%ve~^on1tH&p(Kh{kGlCEk@De~8VJ>@nHFmrgOBr!h?pGg#gsnwH`bGmxw!ZM
z25;|bY$AQ|xyJMR7n%1UA`Fz0g~j^Oy${z<FLdYB90ifo{`+-NbcVlP>5{t)v)bQ&
ze67E~wTX`J3)55IG-<!_V0Fme!Vv4T;}>B!*gfeA$sa)Jy)bq5nXoT3iT3rCxjj6-
zGGV;Yg8V{nob`H2%-j#|ZDYx;{6i^S!SbdcI`Ys8TV1~^Ra$|IdGu1)1$rCu1E@FX
z9c9_J2BL{kMT{+EiH8Tl_pkio_|F<+RvZc3&ANs?^m;C=N_b!zMBfPOM1|N99B<oU
zMoYHLeYy&W3h^?;Qw~f24TEc5?9T;ihXKa7YGAihyQCoIaBtFFEMN4TIYc9_J=*_7
zYMR$taX2x3(GmWos~H5G;Pru&cFG^8*0hD(Ng9V{I<*l$@6u6Z?Mi&s%GAeBlKftg
z;Fm(=baH}r-8{Xv24GxYjF=*6l^-M?8ZqdjiTgUsPpZCgsM!@lmXu@zK7C5KQ*)ir
z9l@Qj%DXSRXNxA_tmTC;^hu%ZDJYdh0Xy9Y?7q?=m~&(bm#BL-Iri?s#AsE;w)Z?(
zUjWRYQ>2PENXN!yJYi#<brI>Hm0=WO<D5AObFEP=3Ar`04t!%08lq632fYsbgc=E&
zVUCGBYYH9Nz!_p_CeuIq4U(A&%fT6xtcw)#7b{7{{ZmQ9g7cWgdX`KQS%WeGEbjyh
zyB4In$mzlKA^mg>MPatM?U%YFpbcIgU{IJkq<xVZF(p9vh*Cg0o&&I!b*l$peTCIP
z-zAlYDT1~_afE)cWuWCDWCH3ehr`51yExBdr986IDTNNPs`y)Ae?&jUMn%DA^hk}>
zoY_FWXc(cl8}q&S$nGz>{FLG7cB2w(g}+SR$hvng9z#1MxB7aW*Q1LRx39Avpdc##
zenIU-K!X8Myx<-*E2eT#jy5xd_?&P@6OcEzq@C~DF6keuYV&n$x9<;KYL#aZh3DVi
zWSzU+>V7bFx=$lIZ`!_KrFY}}6&)<3fDz8FvY7$cT5$2V<W(6iV~#GyflYg34>ztr
zWfmz1fVJVxi<gCu;pWtd=REF3QUI>O0Rjy!DGp6S)|Ob<H`{Ksy|SIDVrD-=?1Tb2
za(MstGj?>^N^Qaj+DOVx*1b6#cEjV|it4;l8nt3W5(Y=+$mvytoo%JVPQ39B<89+L
zQh&~f5@_;A$h~!*Y0L55(v{Vq%1j#v@%{8}bpDf6y823A+&r|Od{WLZRKs)zYu#QK
zq3f&v`ndb2FsZRh#Kp7*un7aITHsTTUZG4l?mg+gDmtHWsd%3~R%M(I${47m0%D<5
z5OP&G7OgBI9E!sl(;(Aaa$80|Jvb!FaA0*Qq(_g4igS*v588M67}>*;(KRL2Jp&$e
z$BE`YLckJ0WOSEQD@Zt)8QQTMZ5$PMPkIiUBJJbJUHtvHpnIBZ^gymzwR=sNLElD~
zbJTlIYhf>{v8~f<I8bf>(MMV!jyQ)91=Zpj0zm@7qT#i~njQsOjMAdux<;cU1%fPI
zX?`TGbDi0t6diJdm+kXOirLL`>(i1huR@~Uw4vw5SswHgoIbjD`qKUI>M;;W;&|=M
z>M)X4)U<*hVc{J&c_LY)f!)c&LOws%RI@BG!4Z@1!<}>Mg?1b$x4QY#;^-O(1f{pG
zm#cvqz^!DthOzU+BNqv5R$hwQ*Y#;pIQCSJy^=JlldEg&eezMPpplGP+AoL>I%46`
zHa2aO`<|?y?0v+ZhFjfdRohtB2-$b4$5HIW!IhvxoktL-T|rJ(0O>H*#MSq@*Ozp5
z|63s5T2eAR+55}jzi95RM3ZK)_B|b$%FypAXIA{rdOAB(hsew-7C5oYaVzsyFY~4f
z^c(fk+jT3_STty+-|eRVD1H1>CI3#vLt09~`Vqj>)l9NBoe-$sBoibbrfub$Gl6*?
zrT{Mhsh8H52{qZq62N91R)$7>47NKV1R5*@LO2J2#z;O`>Fr9-2v|U^=qk+^d#Zp=
zd02BBw`|_FRhB-l*P>KG)YsM^){c)U9HU325(dDpkAz;^mt5Hk%)r?XfH^fdEZ^+o
zU_3M#t4|uRa|(C1M};i4{j_U8!~qCg6{K#s8Sd&W^oSOEb0tHn75ksIG_cMZJTa@Y
z$IP?(TXIy@3~)hEop$~X+2HwY*@GhCrKBJDXT7>q_WTFeP*xV9{N-MmsXy#If@s88
z)pokMH(`srj+@fO4HY5MfOsX?%`Sso<f=wgsR!anM}YLQo5DVLV_nA~aTW7|N0a=s
zMN~O(w~FjP`}@(I<X(IgY#y-04ST#|V{$Mm{jUZp*`|q`@!khN!(^DWuxI8j1KP*6
zMZdLLZu*YU>-Z90QKY%4H?C^N?=pj-=`AQyNW}*B6c~g>XB7+tqT-i8mbH>2IbGcp
zeOnbo4?OBqD34WG;XEWxkc`#?(QDEci{k37$0dy=g;?hdHat=Bp>EZ^(x3JzCq8Dh
zraN(Z#8k_aCcI;h2(5i)LfkjopL-k!8sA*!blJ^0&y4x?lamEpFXHcNI_B1rAgx9m
z1*>C(JrRXJ&JgD2sI}T@uVqw=zl=!@xQbb&Su@0`G;wDuSa6~4=sw-XnP{g=;D|YI
zsA=lmAR<o!+~s!v3$Gl1K)z&f<x@+d69WxQKnwZFLncaSVZb1{I6)8<Y`-Gpz*y$`
z3+ehlyqN0T_h$JTqVq%jvu{0HA`*hGNx+WBQi~}CbKlOFjuRA>DJ4$7`&|nVlCK(q
zrl8D@Y^yp}Q~`yn+2)$<a$B&eJ)wR<>AUDOrI3FXIF|lm!32VD*i0`XaL*9n00#i=
zV1_x63}l26wgA}T6e>;9V-N7GQUw8)nH(Kv_L=Y0lB#L(YZ2nKo+gB7I$L?$e5ue~
zlCWhYyrYy&nLB=KbfS5>jK|byzY{8L#!Wz*g48<IEkM2{?Udx!gC<Hd()}`kv*`d0
z{86&qLEl0j;RII93xYt|Dd!C7U>EZOk*Y(!rY06TjSLNI!=qo6iURQhXdF7fi)a=A
zR*)MiErQ&WrT6t(8Nwa33#dXR64t3)x*aPXXoQ;cUK_GYh!eLnY9pixRb>pgH8cE2
z1=SBEIRrVo(>yFDVt&S8>~o4Ks(HY$5*N_SXNFKo#8)sO@xBBWFh>qB0mcSSoPNM*
z5En%b#bF)*D(>EYQwGS2jEKC-0YW7XfCDJ~ZbQlY3%wO+xaz&xxA(<N!U)wa&nOsr
z7%F>JfWz($GPe^M-l234;q1YNfy4@vPb;}vW|=bR?rfNNT3-#p@Y@D~z#;JcflgIX
z>WAftby_LLj}-{~c;LjP()Hxrh*Df&)ttO@SoAWu%ipKJQ@B^qixUm>XUkCtUg%B}
zEk$<PkF>Ociq5oNes48!y&8aJnmJ-43p7#*5Oc<Cj4LMLp6^jJw!k#brFM)LlVcJH
zI-<iG;J)NBX6%RAnt;h@WZ7XcuVk5#V>7W3WqByf%Ntc)o|Ctc!jia>6>1Z9$-UB@
z-`-nw!3bm@j4D_aa=@S4PD`#3q#8K?-qSPfW1)On_^VpOTawc+1$N#O!Gu=R;De2P
zrv(Y06~x1CYd_P3fbj~1RmfeSz~R08@3oAKbOXX_VR;pM6{cI-8V_9N$tA7xwsk{I
z?@p?0zEu*}*4ld_&*@2jRcE7D+YNLjx=gJ5M#(|Sk9Q6t4R!@~us4y9HWLn;(ZB**
z3B5k2<pIC>a~KWCvh3;g>lTcH6f1&7VFDh!uTbhp4pOnlZMq-u6XC*#;_@qXQ_8%W
z2}vZo@I#+ajYZ$i03^8g3nR&_2zd>5Ec&9xL7#`yY*9NwhI5%g!jNtEXGr_;NCx(C
zETX<e$pPJ8q87H~DpU<Dq#GqXP(XKw@u2a(jU3uF@u0eC=;pP=^2oS6=1BmKdS59x
z{vqH|W3v#H>D4x*IE7(MI`Olgpv{h-NqIri+StRIf94hJbK?FbZegmN2Oet->wQOv
zZuqgym?P<?3)U%44YY49zISiY>i85Io_&9n8#J8{>HESOqW$S7SQoZ#smVu#=kFq3
z>mjf2t7IBgx%tt=$Ag74AGNn$?wP-S-Pd#J=8o2Xj?oYhO5xVt@?^w!=;xZ=n)%1D
z(eh0~q3c=HuvOv$;^<@?AiMOfbcL92&-wYGmxko7J(-J*xAk}a8_yNZrtI%$dunY!
zt1LmSsa>5zY?Nbzuz?IyDw!y@?Pi+Ao`SAp4`?7<nH};Zt3D-TnUT~~fO_C_=vcKC
zq)10d%`4b&1|rppR{pK2r=}G8*T;+U>?RMJ{`lv+@4QL%xd<|0v~U6#D!<?0Jts=L
zJKNd8)(b4FOW5j@*^I)s2<(RfQX=K$aC*Bc#MglZlbIVtqs;S^LQV!TRTt0|*MHNy
zPd{$HWUCD+`H4WRfiTXEK;AD*{%>@GpRD>B<JynAwpZTvkYWltSe$({-hn7F78YHE
ziGU1Bw;NSChbYbm4Acj|o-%|y5HYM-YP-=Lh0;RQJZzQ3Na!43+?I3G%>qkKnTAHV
z*4<}+*HhF&Dw2IJ(!jSfl0I*1X*Ci_u6l_JCr!*VNTjAvv)0C#pW?9hrm5B{Gs;Q$
zAd@9AmL#O87l3pp8t+=`Q#3i{?O_a46{+W<sT`imC*y`EK(tf^7mAWvKis4vTi{EV
zBBXtoG%nM;#H5S>S8os1>zq1&MWM;C=K0cJ<cCM^3Sr?xXwH|26+?KvnFZp&b{f5A
z@_yM*?*k43LX&ig#d-PX3dJgP+AbJzz^YuzxInluMu6AGy10g9%!kPcagtZwG=LF1
zQI0dfhue0NBlAW!!(1!4dftR|sz|rTY5H+#?JFQ4O+!{POD!OC;Wxd?Z7(r!5%R3n
zg&YJ6YX3jZJmmSyFmzg?tIF<;&Y+M#eX@?LmZCIh0d_-mzl&SV_jTKX&Paj=;G(Mu
z+GwK&z)$rLVi!dmOQioBa@W!XH-9h08~WD^&D_q+o!PZ-<N3Q=Yl};^t@YERy<)+e
zu|kqm$C3h0g68_ix94I;eoHpt>4I8B9~;&P9`I3igwZE+tCiFFKV@b9o1b6;8FMCM
z1|TXexW07@QqL00R-?=a-8|fZtZ7r#3+=}HX}ld)f4hGju>aztm^t&y)!^*KNZ3s;
zWv&BM&BFv7`Y%6X&ivs0$m^dQ-@o@o&2c-A6=%&oP~UNMpoZuxWlydkw(4ybz!{wt
z%q{Ol*<3Wu5*(BmTAO`G^F`aaH5z%WRPfvzdi3RF#AfKryz7-qAAm}6J^EG2u`7A6
zmBiLjHtGDRF!T~^42I90*o%hm4o0$~{YgS4oDdi7S5uqO-zZDOyOorx0U=PL@M$Uj
zpIS?)l=)lhUUokXOxF|3g6VQ1R%UXQdiMz&@<T9BC##oEJ944q&R0R)Ec6tg{XW^L
zb-CR~`J%t2{dSX38gok~R4?uT`w~>71<B6r%3Sl-lTaxH?^t{<2}ofJQKsr}=+RO+
z;rQpFtFP`;?DG}2W!3sNEN>ftS?&BA=eFu6T`#`b%6Ez#iFL#3x9$`${CnfcF^Dvi
zwoIIZ2?gH|7GwuK89;!U4q@EHkDqsFU}wnog|R{D2Disp)e-@yg;n(=AILcHDL86P
zB})iuCIBd6;U+;?d9}#@avzUAY5);}DKa!PAmB)OzTT*ZK3>BUBM*lVNY{Hzpl+(4
z#$(*a`{u%&L-2*n;AMu;WxX~D1*@@FnX>W`YHqAlb8E4j2>|Ma*N6Aj$b6Ad-TaP6
zbL*?!&&dq^yzyQ)-nwJSz7_F1gWg~@&Re-=Ke=WBmOYSE@OWXqrWb~8UtCWTy{Icq
zXZN~!n^c8<TLUc8X42OUKAo|<gG`J)5_M+`lfR0j)fZQ59D*rB1*sOMy+)=|Oroyz
zQws@9`-Wjj(YQ@3$psk*-$o=L8GP#!7$;kBB<2oga7%|?xtccYyo#h6s%daWgvd&F
zeKZ7T?N)1$947TauA3yr-u#$7X@7iRQg*7`-0E)+Phv$=Q+U9phEEGl^1|(YPPOCV
z1Z;Cp?KO;fQ@=ij-rV9vf-D3F*)hq&=A-$9h1Tm|MDXBJuSk!^^LM8@pSnLkesm&M
zC*ev?=6xnoi)fnaq_>uUgBRk!=c1j(|0J~)eETlqc_3C~R9gmp>A+tk>@3f7soz%R
zM817{|GoxcBzvc)=NYJ7=Pv#zweBWu#Z9c1M#$0`rM*(&td@9+up(Im7+sr}AOM>B
zSvDra=#ZV+p67zJD!E@Au;j@L7w;D(+q`_qF&7YKSz-sC>;YZ8Y$lyj*?jfFuaC?C
z%jiqlPSj=4!!!=c^FckNSeaN%CQqY4tp(=i`rT|~erdmu%%9PR%VneQ^Kk?}@z=6>
zuf!=I7eD+>BczpH`s+bjaqJ3LY(`%jGyp+P0LFbem(X}MIc_@b0~;$o0INfN8|4m{
z=9L&4pgt-M57APA&xNax^sv#$X@gfwcSQ9+K%8h;HxXZeJs7IRrTm?sE8wQk37C=j
zG(dp1!w@?bdwOwbV-fH}xIiut9H0Upd`%doEjwmK%ArCK*@)gRjyBJ2^*DX!I8st|
zUG|E-)`+*~5I`E`>(8zgCy<v^FaH#C#+s|vKGuOyzZuz#NxWIcE*Y%UkKR=S5q>|3
z`wB31Wwtx^Avi9IngN<IcaqhJXZbwR=QPU$ZzD7k){Qt%1o}B)OOhCg*<~1k@9LYq
zsrvstJQcWOjIxJ&DmmZH`^g_XwJ*I*Lp(458oKFuI6C}mP1D!7wBK_mg66#B9$S9p
z3EYiNQ+RuV@vFS;K#%KhKZaPJE4O!m_*(ZVz02Q*o0YcTLG=s-8nu?mBhOpQ0#-`y
zP1;{{SN-pO2#7Vk9DJJU4UN2Gvk!EG2U$#Kxm`QIJ~?0pXUASL6(Ou)p?&*WYvAJI
z*5)pLOCAc(n?C=7Ho(0Zy<#UT5BtOUOYYyvQO}P~udM1J$lIinci-*eH;Tmu%#dRb
zdyZWHH&P>>JL*79W1#JN^+oKG!iVB<lY92|Wh9s}+G<bQcXqpNRhv~=jy3n>y|twQ
zMZ~p`Yi%TrPX_(QXR**v+tRj^cRA#0?1mu^lC{yl-<trQBiE@h85(a<46%B1Cf>au
z24s9a%0Tte>7a9Pxp%-TL2h$D|J0cGVPVA9+(rlg;&fe*#?V$njjwN=v6NPKUcb+T
zfNsA*Pu~L+48=`DX$BT>c-H{tA-x8mg(u)S#=8#Y0lBMQ$1<<U9}(zp!fWu^$?$rl
z8C4!DZG)FIJ3~D@mXFG^nuhX*8Cfpf5T>(AZf=UuNh^vZH^*8=Px{upu_W3tudOte
z@gEys-5vO?m`SSQlFq!D9VUukuoZyqG^n(jS&SuNaoWec5oNM6*IVB@qaP-{ku(EA
z!0Vh%-g(5FUfSoCVF6fpWVcrxFjG-YNk_!zr{lz880xjhI!UAKtbd7mw<}0;21!bT
zGitfQv6XYS7_T505g>})%4EG-q6|9?E=KIVN>~#{xLF7JkbuZcfLcr};F9i|ZL2J)
zU}C(^uFWNvglHj9Io#J<oh;5)3q*+%g)Vdv3BkGDEJ>-{6M&VuvSPWVk1XishsTXV
zsI+~zo%*e8DJ?(CKte|sa7)hTCrNrFlA%E@$Da}2+Ua+C-v@#z2al?^!#qnIvFi_3
zt2g51ubkuhB=hv)qoP*Xf@<S7P1j9fO-jEFaiGEJrup<I&GcJ;>7@VYWdIUgZ>Qe4
z**1QCs$oRt$`8fKR_?hETbXySO=sS;a|j;Z=w|=)S=V~~&u!}&S36HAQxt6!XqnKU
z48F)3MefYleZ-dW@2iUZTYR;h3GH_yzelz&WSKG88aJP>LE~!U$pTwTffBci?#BM#
zf2r#fIa@U=qIfF`TXPzN+Yq91utr?J%&OQg{oGCv_ny9=*SxItGW;UZ{aq{*eOxPj
z(_xF!{?FTgo@~8|BS%}&nSG@a8?(Iql<{)}ypO%J3tr&AKk}e5YVW;56hxh&m0}(~
ze~Uhp1WJq-IX|LmH&x!+Qi4kQk8_-Bbj2`Ri{h73xSBENc(H5$T0a+|n5L~uvH{{a
z5c5KgF4rREGJx5z6rNLh+*Y!94sC(njcjJfNBzjo3@h^}!(ncl&-S3ae}@eehj@^I
zfh8|bhhX`frYExje^=8`+CioQ9AUIE<2Q4fjS&J8hT(`MCkoPwJzB}NzG+Dgct=0A
zn^|QuMdgpTwIQ{Fuoq>H!^3yfM4O7!A#IWD>&LWieS{u3QX#Ap6CsP(3f57z$6GE&
z$@EmW?`-ZG<i{N;j8k%<x$Yc$l}?7q8P~Q%t&V+D`P#H~_Uv`{^E}H;xEQ1R6${<A
z4}1#JRiDIIb<R~O41}ORd5Izkj)eT|&1QCs9Mifa5=SskabMFJ!2*_K@cobRXsO$s
zM#W>sV6y%L60F5y%w6u8Tb#9etW|J~b?l&?&*t|BbPlAIB=_0ltVB!^)~a!g$|zyH
z)27IV3_6Y1O@bPFsp>i_m6JO-)xjKV4+$?~Nrg;TloPQpBW2RDKDIc0XYRT^VP>cB
zkcTG%(O>S^{2v5_+voAo@+j!x@~O5LJjdFiafN~)Do;Q4JGKI~ukDI9t+|&`ss4%t
zEd5~#akAqmA=gz6TOh})8FAOJ0N+T{@(T_aQcS~|f2cYesn4UCj=|^>_u&(&EXQ}+
zu1r^h=6wVE&V;`_cI#rEWj<w)Vjf8PLT!n?j(sDZQjFAMvELzQ9gMgIUqGsxL{2tS
z_hez5=qIt+b~+^wCVP|V{z*md#{A`zCGm>9U6Z7D^qJB9qyXi0zQ&b4(sFV4a6l@F
zW5?9MJr!D(nBSS<8cEJhBvlcmY6C2NZ7@^hjvV(<f_%H{U;TXWD;r7Hi)1E#3sVEb
zgxwlU52D+x*W;-j^M4wo0AaLF)`rSxO-7My;tp|*hsebpH<B%lLda{%zwgg`eo3PZ
zRa55w?EhNdVygR!Fj}uvFxlSp%0Pjjn6&@FK63jKg{-;@7SE*KTq8<KA?_EgEK~hd
z*dj^6a>L?d)mh#d(I#g}l$`RTpe&25kizL&5$!WT3MYGin25*%*=Ro4(6NN)m8yMI
zM)5&xx~rJlO*gbe!;%7VQ}PTTof%dTVk6Y?70gQD&v$(9h_wYzag!(m5e}(Rb%LG*
z?Z%=T_fL7%=dbkdJ@po0{>tuDeD+h(Ds-&PF-}zsywtsPKj~NSjV@j8MEa%1xOlm8
zd+%f-_wFDU2dm<q%w5ij*~H(Fwzbax-6rKz^$(S#wv!TwEKnhi{w)gUYMBR`WSF^3
z9On9R_?i{Vrp4hq46+ogzhD(B?ev97A-WsjhGs@fQ<fc<JTE_*flfxqnAZ8zIjIu-
z3QIM*v_7>Fnfi6p5#`uU2))@XXBmF}-rVZRaTfF+63Rvie%xL^>U?oJf7+DBA4!$C
z;r1}K*kdUG-QGV-c{8c<m01KjRuA7d3vWz+XMO=iQtJ-0rAY+@k2jc^>>kscY>eaq
zBT#W;0wL<jM)(WwWw4BSs*Gc36Ey^oG~=}-@@gncb{0he(D>AQ(d#+^PoN#6I4GtJ
z@#(BN6NTYRF3J>0TPgj+p7GSwU3Zr}wZXL<PswKcyKO^8c4fTSDS}DE8uxhEyMHUa
z-%Cn7GP1#(Vc3@{<HR*;hM9b0sA|s6ey$bn3AIv#;}s(w8FDk@DT8=?^GA8TA+47~
zmNv__ZR%OWW0pN+jE*dhpC6A{6vHX`<H)V_u`O@EL`HBf;?HNVazimf{t&y_vm-NH
zx2?qhhbkI8cb9ES`-*~NLO7@Qw>{J5#kXd{)Z7`^*|JW-xQ4d!^oi&l+g>yF2x+~)
zQ%I6>1|23>44t<LC2+i;-L-Vug@rc82}tkxg2ygm=$tUC8;qq9C=XJ^TNVKQZ)pxw
z4mhFR$F@nKTVAf%0usk}f)Thr${qsj7wMBOC)uS*2$V<FlgD^Kps}ipRTY4|LMDLU
z`u3~&5Sba{b+rA-<T-SDshPf)U!XYiAiWWnKh^Vms>Otj>a_abQFqWYyS5_x>C|uj
z0Vb!gAxoM8p})6{UnKtdXR420K0tIK|BbcH*dHqcE$2Q9`>l^E&vX0g?x*!v^nBH2
zwwZ2fu13gvF3CHE4tayz{AhE5*9<*tphfWymmNc+l!W_Zui0T=n`XDyQwE?MXx>u7
zDxBXs1Yut@T%z1)LpLB>UWgDlBpP~&K88bRh1<X^R{$>-mU9Hn(USHpu5;VX(P078
zL#1X#2m~^|WAX)R>_>cr+NlNmTS=~;(N(1BJ4HjN$kLm|h=WHX6p9DmnY3KFa3I|e
zIf}}BcNOz+Y}nmtD;}h68I!G6uzBNfZb-5F`4>|`Xw@-=M2<*|G6#ZHaF;ITQTsNI
zO3H*bp0+g4)?WaFo2QaI8n_8c2n?>ZCi%D^Mb?AAQ&=(lbK?tWx$6@R+_pGU9IGY-
zHPuriNLMtLf_abig>yzuTL>NW9<J|fohWThA72+wqzi}c6$XE%O5>OD=$<CiT?W5#
zAC5~>F)iMKGE*(k-K*k^8|pOALS>el`I|%tp7)3R|EQnFIdQGDHO(w`ax|%o-VhuS
zR?GIWQ<pf)iHnid$U~<LS{}UZrO^dEahgBJ>MiwGpkLU0Pf*-p=J!xlLIp%!X#{zK
zv^0h;S~V{&GVuRTC!;sj<hryMyZ2tYdGG#<m5J_dOBQ$R<>YpaB{XY$qEDk65#KR2
zKB29W1j>t8v#+SyMw0%~3!`JbS>2Uy6&B{i%1WBYV?yl-_L8@N0e1K>`=j>*I6SE;
zh?+1@H-}bM^XGj1>w_EVLZKXyR-jkAtzqu>Sbf-Sp4eAi=`G)VD|c_jm}k$<8^wb*
z4&#*F8zy(|zL=+(@Tp=Z<AfMn>5$=UG=lI%yNKs^jCfedO6h~TM>8Q;9#lT-o7Rq0
zB{#MAFo*p8Zr)d+FQQTC;*pAfxtMa8`zR2PkV91abD<Rd*a@PpAG$dnI2iW#l6E+M
zQisZd`<_1R{H1r%3655mI`{RgMD_@8))QzYm((!S9<9JVEX_r}0j1W4Ml5^g!+XP2
zTg&w<i?n$TXxFOEovw5!A*8s&i02u>b|y&+Fy<xDn~{C9JF}8j1`r^`2Km-8$A`Jc
zI)FdV)t2T8&GSV{63Lq95JrF{VcxH+H4NU52(4jPwOQIoMyxkk6{T_zsf1yE*fTdz
z18H7FlF;rHq`Kxps!?cTS=|!D<dx}k0b7#_ZCOHKVH7(Z$)G}tDU^F%u7NU0P$e5L
z&!(mhtunUIP|=%nvb3wSgbBnVDuQ^y4;C-u?}^ps#xP9W#*HY*jNmjITPrPKVI`YV
zk=nJv=0%vg4<MboL{J2?n^DOO<~hpctZJa932>>kRuLdIbeK612_;Y`xfM=^MXf_b
zv&hR1g)pic5QR#+(d?iybvADUVSAmc`#@u9gWiKEmh~is8E<$R>J@#Ta*~}%zhF1n
zuIgBw4cF^93N}h^+V=K;g?Vj^Q!i}WRPsCno;Av^x(1yfU*pyX<Oa<ZEWdfW-!&b#
zIncg)2mu*8{C;9_^rvp`FfbY7qBP%Y`gILMVwxOR3?4~|vP+azeyA!YA;0h{;0#ZB
z{iBsr8)ZomPoDT~)j{Z%$U8c(YSm79X-Dnd-5C^|{*+ff1C?_W@<bI*E%v0M@N+!C
zJQ+XT4zB1=Pb^j94x-%|eZOKvI`C%aEz}Ga`R_THMvlC|0bU_w#DVklnLwi~z$Z86
zfM;pYu{&5Td_T2Mw}<PETO=PunAB9*vkc6;{e$|sS`QkC5Po=1@}Qe%zk!CTkB6$V
zgsYES`;yss5)S`oT_q;6>BwG&=3Vv<CNaJ8#R&4BV~fW}(7LvCV)!fL{@HNly<z~x
zlRK@u{9O#-5#aQ2;`*oa?&H+r@L-(4X6YZ4MEg%6I1OytYiTsV2K*I3t<)whbpT0p
za5A?wHwlGv^@VJSKMFcn?lp1o&E&?22`s#Qm1<r~X^FdItwH)p|3r=VY*#i|2nStT
zhS<`6xnV$hwInO`w5;At{T(vJoTL`4LU9xnZqukgrvhy9y_en@>Tk5Qv?4&86APHu
z(ruz!T&rvB5r_krJjo&dP7X~fqh!i7oxU2<WVQZgh5-p<hm-0E;aJ5+*#D4q|CMWU
zf!-O5A~rhOaqx*7h9K@9zfQG5E?}!^MT@a8DTtj;3|B`52%M>qF{G{<js^8r=64ig
zDiG4@Scmks#L5N>V-64|ckq<$d{SQNRX7ra*AQ6X^mh(ya~p<Fgubf9XMI8U1S5nn
z(Zkym_Tpm_R|j0u$!~|r*)weP1jpNXE0@K(w8qk8IXqe<B1M8_K6D|jN<juJC3YQv
z2w#+bY)~*IU<MAKq-8-6D-3i?Ac85t1DF}u3PdLY8Wba+BG{_P3rub-fCN5}k|P)k
z5`r(Jf&(zP2Qo}m$X29uQI?N|gqca@BmyP{B7w8TB!qzlf(5l#9@MjOfC4~apo0^0
z8XkfINUe4@ED8(WD6-0j&gz(OqpV*owbpiuQUaw)`o^AjraV$DVd(@eMcM~2uu99L
zN3%Op?@U){PnV|Yc29)fTI;3mJSRsY3pVd<k5^AlQr%hRE3Tl}Vv{xvq^h(RV~796
z$zf(>p-bAGW{PA15OXtU#`jhwSv+J9;<1dIxm<vi)f7P1Vj3^vA`~}Ss{~Zgh~Bbl
z5pkw>-l$A1V*Fqb<ODYs>0(+uGXLT_>bQw+<~dnhOU`?r50WpM65b$vL5{6Xd!P>M
z{CqZTHf+AdUf8vycEbKhLI=;Xoo2`zPQddwrQw+561Tn}m5dj;K}I6)&~}`kj+n(-
z-CXWZ-Cvl)60qkB@r*v%ZrN94wqIxH_akZKCXW{v$e?mco>5I2gT=)%Nv$XCH{ZIS
z@c3k}>Z$9RX`04VV{$GIo6q7RzU9hGa#O4vexV4Oh6H)30dAdO74Z1^TlMV<cH6bv
zT>k+OU<2fRD0LKtK0#FR7J$pMJ=pv3nsJpmvEc=5YTp+!!LjcK9e5uzF=*9H86Z-*
zAylcfGDj&`l(r_&kqV-D#S#MQt7ae|$yKWOLn~EUTpwxH8dew5v>Ih{tJN4^7;nzV
z9Gs|nooreA)k5wFLD(uNIkE=9taC?5u_b4Sw4JQ0)#TSy78p<aTKd*fK9!`ot$I;p
zgtTkXT1_jaNm&>K;8cKWBxA)ysv68b4KRhGz)g3*E%F|WTIoUd5n@`AwE<gwUGw*v
z>rFcE<VH&g-Xul{iUG-N7u@1U&}6>M8^<D<WG#)P!$@m>Gn>b0z@(k5KtZCE$+7~#
zCoLEu8pRohuUV9<mLo`c++{lqiIPC|5D6zKsG!4uDb%+lwA*;fea-K+!{YB!lbCY!
zX;HnU7qsHlSwPX_Wo}%;{8Ph}(ymhMNi3c?c=r3~v;B3+Rt>{}W_Y7aVnNryprS>T
zE)ok7Zai0$1d(%A);|IiZ-snL2@I0{A;Jy90^9u(WtM1eevn#7Nd8pP;6$P2VI9|5
zJ}O88Ktu!4I82Uej{H=ZCxk$yaklcJZNTfC_`ibCn=oo2bXu_=Rc4(Y{~Go8fEYJc
z#7r{BFN1LegdqNU9(SHrr#tUI(T#&VS-2y+?zYnY5-OP)-34<g1dcTt$Z0{+Bfug;
zm>E-zIMc&ZU?=Q@cxAT{h!RTev{DMVVpNNFw6i#iQHEfEzpcf_V%*w@W|kA3TRFB+
ze%J$4E}ACdi)8uw&wH2Hlg$gwx=}<?6qZBUaiF${mlc6w(8s5F_C2*7(&-od@IFLb
z@?<@}#Hc|on<0p@6#?L}WzB^H8fC^75Pa$|0Nkvx(W+-ojwN0bt0wf0uM3H(547=4
zPC8vCeAUvB+f9D&qYn2Wj6ethc(5dBjoMUN+e8QSE&PP8z~&G!heJu~$(%{3;zV?#
z`CJXlxXP+bwzTVWI^y8I#dY6!Dc10TSUt~abK&~Nw6=1rPx-6jd63(xNWB7rIh_I7
zhWF}iQE97po5b!pbA|LWn^f#%8n6BR&$;xCxVa}SkoH8wYvax!JZi;imZ7K;<mPkK
z!DMyFS|w4L!X1!Un#^R)V9*PKhC-3GhK6BL7Lmpy<K08Rl^Sx(F>H@)$1=9Ylycbn
zG<76wIA<y=n*kZ6aYX=RRgMI$Nu-gY#r>c8Ldh%`v_+)03q`@x26#D>+lTd5-nx1?
zO`#+pcK2KE6G|K$BZu2M;~IWNp;3=J9IGTg)d&g3iq;0^RWg<Etcn_Mixp6)0NsU^
zazz}I6{gzQ@skIwjk=~|7{`30jk62mq;kba<y8c)HUkK~!t1N4I5m$q#!5=9p$>A{
zE#@k^4}ce}dWJ~>u@bSvZw;1BBpdO3?fzAMc$|}lkc6%65G5K1?5*4*dgK+iN`bcm
z%KQfh+KrLGB4%D*#o7(B2<Q#G&@G!OeepixlW5*|%PbQ+tq(0f&ing5|8SA_&uyOg
zgXsV-K+wO*GQEfC3Yh#J-kq!*8I8&=6pH>VVd7WbLG#4FO7glO8%G+)Pdz$1oj4;H
z)tA*IIz?aa4aDHgnLnn+ORp-3dNa~==Zr-|w-PpI9>ME67oI;T_I~p(8WM`Xc|+Fp
zVkRQ;5cOr7&NlA*yZhjiRAX9iy*2~#Mv`dXX$4NF+f(Up$w;AtAW%<HY2Pg#!4_pA
zA<Gg92#2{V<9?xC>J&yPq|gtoFx*OLfkx;|v_yg;`fdFNRKnz|7UKIrOZm(haQGZR
zBik+kFf$L-3hdCKzZ1D`lxpAsMT2|Sz(LP@4)wsC)PFX+q6nz;{9`lH2&6;PqEZzE
z)nPOM)>`#pefbTm(0h)jP_~3`z2@DwTekibz!qSA(5b4Gs`78;b6u+xn#o`r5ixWp
zzi2bcQ%IKfL#8)r&RTU=3f^`+fKHweZWOLyN_^LfGLBb!i&U={hDEbMm1Iu59Fvfv
zgNP=%QkVpxVo(xm$AQQY^UCGg=@9vJP59p(Z5l$u=_cpL(;YbZofq>b35QYCJkPRB
zR@)Z1w~rAESt}thBiXMZYhmVypiiXLWk7g5L95XOMEbtzq+5yomlyLw9FCZy*&ob;
zGM(?PNMxDKc+C%LY%>~c4tkdclfLtgj=ry>AJ3@Dh7nnSk{Wr6y<nf5y3OvaT1J2$
zr&rHfYZ|EgnA1^8pLkDodW+@k`d0cqXLBa~<2GuUq%}mN56X~*$~0d!s$#rT{%U8^
zu<;9JUKwmpT%_ya*O=cek4kguJGEte<bTz85FJey?OqGM5iW13gyHMO7aRt>YF0LH
zs~i~~+Qb3UqC8;kZ%koaLdLQReFeNEG{+)E0s#d5Q?vcrJsrv1t1Y9)irZ$`oEk>p
z9cg?ao=m&`i^ibZJW+74_h4Ac8VR!j%`f%0Cl+!OdbE0`?Gh%ijQ9us&aAUCo%hSS
z*?H1S@3a=89JLB27)gN+icfrOEtF#l7UC`$t$S%z2<fe>=Jcy<-_A4J@z!F$+zo3&
znJZS;Va1P_=XpzNr)jGGInv6K*>?+kqm?Sl8IsywoDNV{^S!qC+uM)D$x*}o0>Ud-
zO^p9Uh1k{TzWo2f#k$SH`OKrnH5i)u4*a`=`DctIn!jW*Y#Jua#yoM-Dn5O2hfJAw
zZ_8=JAu@5JKw|}~=A7QTtRh*{o~X=~)+XXLA!~Z|)_f!(4u_*IlwLEu4Y$jkbf(Z*
zO07oxMkSk<3q&`BnZ>Ez@B!5@I*lu~CKqsU?9e6G@1R9W{=+%{&9|HbGvs?5OR7b@
zZWk9?zanht+*vtH^iG__&U$COP7L*?N?dt)Hc26)H#0Yk@3^N^s015|XlT<2Yp{JK
zI5LQ<xOo_lZcNh<%;(30UOC(Q;L{V9es5&;jO=85{#6wWf9d<h|I+-gQs`nFdV}ul
zE>Ci(?JeZpB-?*+WB<(vN`(+&1B)E>m>St$za7UUmw5eKv^uzVp(#Ruqm~fA#kMXC
zyj2X6#LQbPHieNbDF~PtCrTw;GWrFEFTis_2@F;^%0(G-2QF!QqVK3iw(1o*>6<fY
zV;wXlsEg%g87r-)mm|1nyI@k_tSgzONQNyPdL<m8w{^Cfh4^v`Fy$Dowjvf7Hy$B)
z(@HhXaB<S6h<`};<JPgEB+Zo(z~@uba@mc>rpu8K$rQii5APtJe^lKca$EZzP*G56
zT?7lYvWkHnH~AA)*VlBnb>My5*{;=Jgko}Wo%OUY(b26;ZqPZhn-7PQj&xwKm$s+x
z`N7~ITO|(v8YCf6dw{DtGokET5n@O4T@{e9Tsr#xR2f@MmP3-JI4;LiH}o5tk3GmW
z6$+3Sk=i_%5<@po!x(Ze38VlE%iIe_OaysI^J)IPO6fd%JIm@@EU^~|Q0)5A)WoN_
zjI`xhlcbW+%Mp%Wf*T)Z5vQ;a$3kVUR_oXaTKIUS7(H8!>#ma~8;F(a>QUe_{%qj!
zW|P3k^Je>?tlWrp>m~dwYV03Dv@C6n99o(jj0cISe2s5>l&%2^-^%IL=;1}idb!-;
z&ZEb!Qu(6?&*-gJBylNLK=nRu&YhG3YpdpGH?UmQW0cFJ^PAC65tXtof;IVb_JR9r
zw2T*Pok*22z@o{oP&j{0v^sp@nmbxJ^WjKo*e#{=Co@+1nl)?~7T9pz7_p|{5@-DV
zDeu%wbzF1a96o;S)L$Icqr81x;ROLxI@0(7@nhEb{v5FQ-(e;{(@Z)oO?pqp{i9ny
zW4z6ovkt1xF?Vs=z8t2n@H$AMu-}mBKKX+&LYr6Ix;IdLZaR0$-9y}az%Pz0mM&KC
z`C-Y079X-TX8OM0Y}H~qvb2}nKcvpFk)?TV(m@ZSt~osS;FNCW{)wZ00@zV()U73B
zl#&dlODf1}q^nnZlY{52jRI~|D1>2EytI##ZkhwQQ>4ur(Dq7mmn8{2BA%=GRZYWd
zElj8|54~%98M!n8433c0^u8p{rxy7Gg*8e4-v=%rBGSL}oNF54H=v$3<K@~m^-L7!
zjSt18Q;YK%O>Ed*)KU6}$OWE7E~hm`fJqGt-=Xgr=*-Yq_p=sSP?2kdlB7zY8rX`_
zi3yb$$GcmGQq!zsA49HtR_lj@sx<|yx|Ll_hGio}NI(YyIFZIGn$*WDL1gqQ59Bi3
zUP7eS3Y}YZ`^712zI@`j1n%G0+)k}3btP#Cv0<VvRWf0;ft%mh3%1zW>kuK2@o}-Q
z3=xl;-q)fAUC(H5yUlU8-f;CPT`i7I6(}h+^$)ZubyC|~VxRTjd?juU-nK)*2|^Dg
z_x<3sRvmwkM~4|}9zGCZnPV*JVR?A=6(pqn5YT=U2;_QEylFfr2LDrR+$#C2<}wOi
zbV<B%3-LIxx>V(Ib=EzWr~=fg-N{9tMl_Pdhy?CjeRv*TKL+ow$e8Y%gGSWp-6B7n
zFR*t;4O-C1A={P3##!6&bkdA<W?DImC6xvDbp-Fx`RTEZ#O+8TXLiAmxV$#Uc1Por
zHP&RF+3oGLx!q1Aq@ND0Hy_M0WAH$Q1P@|ErC}ej=CfK)m+y}-F5C;S3d<@-P~j3R
zghY|92(|LSvJ9cA``0v;bgrO*Or$czg}1qbF4NABH6Llb9vQ?LwzEm<m9uw;kn=@h
z96ZrDbfkgyt!m{Cj1Haq#;3+q=H+v>4S#zzhk&o2?`D60xkkKkJ@I#L4*&Y2ebF|~
zycIiv#`Y}zjh$8Q!{K*79r5P1PWlg*l;2%C!X|$g@j(TeP0bb*X<P7Q7$>LS-UvDb
zt&JuhR$4v+1ZhgGX{J$;DfvkbFuI+V0IC9#As;X%N`X>ABwAWA-x??qJ4n%RJB(%N
zNF`1OUYKD$ZIl~6SOuoi@cbhOxJaNs%qm7D98LSpfZe{C+kb2@InX%wmC~X2Y?_4-
zq03PRmMmnmvNWZP>*u+q#59RfIuf8>kLGq3i(>mI?_xUAO=$Q|9dV{QNv+GAI(Kxv
z!VNoJ*xI|>A0ecUn@<mM-S*98t<zYPVVYCQtL;<GgD*dMery%OeF<XGQ4f?N_IJ2?
znd}rxi~;skf5<d~Xi6L*ghJMY{u*iSYg!gC{A(`xR*c-6<1o4Uxq+fuCvHxd(1G*U
z@=#)F?W@4xP(sHJP02btzQMJf?h?y}p-HY2x|b6KegsjZf%zu*8Fh_%;a}K{YHWFz
zM%g6bFe6qupVR@XdL06-F*+sq)0PWT4u8f}THIa_K3+>OKE4~I;X@L5AI+a2g;b8D
zjUq{*fl5A?Wk#mNa&U9Cm^FFED)21sFPF>|wbFTN+OCG^#S|a3yTJ?KOy7lLSIDU|
z9~ei_x=rWL9?e`jaWQiRo*(>R>@t7<+y(0>Ub%^p6rlyMfq>Hb52#a%^{T^Wn#T>7
zxy6~<3~gooeDdZkJw+_CXJ<nB0HU}AVc(s9CXAlPHGU&i5lHBne8JD-D<CBO83D(x
z#c_BZE_&XyWt9SW-B$sO#fUZ1$cTL{vQb{1E;VZ^zr@+pZzV!&fK7K~BDSm=tNZL)
z&w8)q4yyG+xL~SPAB6#lukL&1cZ5aquMs$CoM2t&8r0jljI)&vm1&9QX(5LyM5l4T
zWJAVc)_9VorB!N&c4*E+Lso$V_+6N7<-qp<S6_k-F=e@W0&YMkBejdV54L9pAZ?(K
zWms81E(YN|zsdi5$dR?PX1#0Hk4DfAIWr*ORB&ohj=WP_a-K>SDaFz$C7Hdjd5^_v
zdm2cU)J=>i5*E<by3Mg|)?gt;hIC0FqG}C--FQ1Ce7NjDNarQydS<1QmuCeKD`!vU
z4Xm3du#Pox=bK$KKkQDAp*fgt$E_naol|T^aqJp(C4U!p$h~vdTVLQxZ6Y!^WAIk#
z+jt(wgePDJ6nzOI7vTuQ4GPTMd6H26CK^G|#7U&Byq(2uZUCaGP(OTAU<JQQ9h0CH
zN6aT)7Kej5eBU((NfTZI2XLsuBxp-`!lPsUrS-=%c+$bqez0CDIq^1>w`EWb&%-aj
zmF<VH7l4d70jj<8_p}A@?17{@WL*Id9T-!^Z#N@sB8ab#a)qg0?X~VwCy=b-hrPva
zD68UmTt<HTG_$p%`Qgin*VFb-8fSp6oI?J1WGW__jbyF=0`WZ4!6YqgV)3k>7?9QS
zZtC5SFef&6iSa7G7-;_9u>QS>l==D}kuq)tf-aDDp+CXAYs}v0$%t5zDot|JG;`*K
zlcrfxVp)0Ca3;1gRk?R$QKtlQ6SE9>dA7<SMK?*+X6C}}4<Q{+bxQ<4e^zN`vk@S@
zC!)JkzLn@O?-U1<KpJ<bwCd0EEFiMfX=aG^##?!$<#wgnt9L7rSAUsUBbBE0z>f6t
zqK%KqkRoA24YkYpeuta=2j4Vi0E@z3m!TGFE&+^9Y?&C(kVjft81>zJ&EnZ^{(`L`
zM5rnkPPGI=m|B0K@%}M`S|_5Z8^)|pa1+(VT@XbR+58bm->z6M&^OZb+l=+TfLM32
zti2snX`6KWP!tYvE)Fk>KAjMl<XqqX^1wjQ<y(MIHZNt2SYk4frp!O==|sn}1R-OM
zR6+!CAR@$k3zJ8Z(URV(fawaDZnvsDx}c?Q(_^kV?VRp+vd7=}CI1E5=AuF`iq3Ld
zIn(yk)U;;<w)*^V#bC1fW<dKSt=i(<G)G5cXrB^N=?EJKVL_a^;hK4XPaPWymPZhQ
z3i?fppf>_k!Uzwi>+hCFq)2ccD>|EmTj6cR!b(9U8jWkM#A#4Nz(`IJ=`C{1O6Kj_
ziMTsa<8@L-L>paGX5!_E8jF*)4Q-*x_!d0C#HE4^LNd}}(Yt9u_fyywj9+pYX@kQ=
zAi7+B42GKZC~mozn+h^NQ4eo`cv3$l?ui1O`6uV>#euXb@mU5kaE;DkmV*u#t^Mrj
zT^DVm{@Jty$7d`NB(@E&UWvEe_60iP9t!w_Y|@VCI0v@qX|dP11TrxU8`ZRr+9?py
zV-3~yzIJ6{DyaEbsIvpWOA55FDN1d3d2VT%uHcElXOgs$o_m_L3a(2k=+H4OgS1SU
zO8HC`>5%|rL7n#RjdDFeZ>qNH^xTI`%SCj!jRSb6#O<n`cF>X1v`&D6Ez?1qoWpM|
zIu(ir^?xI^vnI01bpj}*aCQvhZQ40b^Gai~EQ*9evJdfyM)*@8=$cO+-mE9ILC7jn
zLSZB5<uK@AG=lckmabx|WaJeiDzYv}2(|!1!C7;51OIqq_P<uDLp!yC@ay%L!DKRz
zJl%LtzM%A(BB_F}MD-C{4)b=f6CoM!dGsB?q^y(H_?l~UJ9F(#5va9ic8bO;Ms$O4
zzf%gA{=n1hEcmHt;@#S--n=`zV}RIuAk2RA^^eIY>SbkE*HuQJOuaVZ`YtuyHH|sK
zX2=42;G}I<^9JmJoH?ttYGfV=k`VuoAXW#<GQ3d7n!usb{>TQQaI@3fo+LXm4!N8h
zT?f=8Nhr5Tecf)~e)Y;jdcF}g7pYcyN3UIt{N;0uCBm7i+&L=#WjG5j|6%grX>xk|
zJquv%r5!RY=|f(ceJs4PhDm;391wx5Uh9n)hC=R9M$6n_axh3r_GyR{%t`1b4O-=W
z#0(3g`ve5pdz=anilM!(txEwgA1X^ryq#qTmgOn~JUwUXvMD}bKmflHGRYKpwcaET
zM*-oikTe-hR=fgdJVmU9OBjF!bBHbR+92ScCm^z6o~5GqKRASx(vs(#sTRn(0c9%|
zOZYT2i*?*oS5ldc0}Ta-A-ay6B+2=>)&-<P(zXtmqRV>;X6(J7eD|V9ow8vaL=tNb
z*>F@X1t#FXcNq!9oQ4R?aT8wdg`#Zc0|UhuS?0Gr=8_J$84*JCBatva0xmNV?Udq{
zW|#mLir;UUWgZ8Vk_=`g112_SUZ)HUfk+rA;dOab0`8)t`z1-(vg$0uStd)kYmpP+
z4FXRobdmd6+7xnO^f>P$cW)8ph!`3Dj+Yaqsj*p3URnDK>bk0`ZxAX_2qNh@C+Dfo
zN1hbGRw{3q=c)T+lyiZp7etvByBZ6%CXTbcWL+mf@w{*BB*@)c*Xlhbavg?g(B2zG
z3KoP&rzXZUgf-NbA#~kO-BVy>tlNJN+ihd-l5TFM+%V!7AW$s%x^J;&(=KHtD<U_d
zu%<Q^=iD26Dk*s+nHmT-C?m+$I_f?LI89hgfA!i~6X-)gEvSfe89+_^e^??`|6a$+
zi)7^-Ub|m5jAQOBCW-8a0C$ET#d(h1jsbMB(j;=9;1!{rni{5z$-ID8$~HqS(1c%*
zeUg;Y+Wwl)ib()#T+E~ax3!5i2k$q;_MlnXz_N3r^e-j>)IaeAD09|(jrf&SQ0w)%
z%~$kXtd}<gPT$zs?e^SA+}no>TXf;Zi;2D$N0)kwVygM@?8)_Px?;Ch@_Zh)p3HK5
zfmW_|oIC|jpuSZkqPg>e%>0ck-h6AEKPtzmwU{21x>K4eQV>D=XSyymM*#tIr-XDQ
z2ArLGOZyd~*=Rq3<#7wN*T~ZN`{Kzg%Y;W3bXE{gR_mqrxH7L;7xf>9o?iMjD<vcn
z2sVf?!|ItUw&G2%b#MXLs{LHBcJO?v`|8l#HQxBz@|QwahJtdaFQZZ9ev0QCj6rp!
z%97sH*4a|J*HH^r_XeRqd$s#(i)59j?6A8#G#Q>2&Rwofrgx^pI>c8$N0t;aXg#a{
zxOV8ZghP6WWgToddD|^y7l2F+eFH364PDCrbYbFKSmuEiVjjpz3@7u@toEWS){Rx3
zIr~Nl-1_zx=(o$AR`_SEH+ooc{T1f%%{=Z9yrq*@DRLvP7}?8D9;P5qaZ}MstP)6^
z?jJ{#4u7U9TvF?;m(ys>w5r;dj2a-3MRf>BtYu}yBt6s%?NOeP>H?3%{{Ww9`;Ry9
zvV$WH3JDG9^;45)9C+Y)GRu#7?CxO+9=wrs=iZ0yyIxvs$(R58Ib`1$+f&vu_?aLS
ztPvUu463mJv?VIu7d&ZFx{m={hT#I5u@wy0XxWiKjy#wo?e&6vfyKz-vm8izr8xC{
zEw{|ajtH6%u)>k?Nzsr<GqFjor$ajG1tA6I55-`$Zc|+26mo6rK)Q^CJ+^*~U_-Fu
z@s4DC%?lEz3Yg<KsM6=<j}b`|<QXb||ImsycUR@Ij@$9hL7)IM){HI$0+I0ji>+w4
zi9n@RloO{1;8)Ga5X9<2V|WAWca^56G2C;)eXR68tp9s`mD$kr1b128zm;wuckS4@
zm<%eWSwefYt|!ueJA+(L_!VLZ7%AO^U<x=KuMZx{!T7_@)xI;!GN+(he*9pqYk93+
z_pm?jZJE%Nv%XoOY+^T$5a~m~d`6K2zEsC^2v`qB|0_nZ{*=>(j3e0Cd^UZ?K=*R=
zqD_ikhPyHDOrrChBIsMASwHTC>$SadrY)FN2rzq0cy^bUOYL`P@uHm1w?>l39`%t<
z6yKBS4dNG-Lewl#petAKQE~aF3td<{B=cn4APi3uR3C|W%4Cwq)_E>inU&}?Dbmtt
za@~9hMd;jOrR+nnG8EIT4n6CfsGYTz{$d+JrdBM<AG{>LTvh=Kn^*qo7%anI6>uZs
zMlg=Sfo*roG%w;X54daM=#ov>4d{f40avQb(rDhM^1`NrX|Z5%)xBrStHU2K0-Tke
zAW3IH5ZVYHi?#B(Y=z3!sG)fejCno4tubcAzgaxxk|F_`K5Qc`?ce9>(xUTe+j|1m
zi&wht{K<1kD*Cc*eBgu!%Go30FJ8}lXy;<!a_(^W)$sdnF1)iL1>UR~d_9|f&+DWE
zFY_^)Ir70p4;;Aw%-AhCe&M_g_01a!kN>X=pYZ-&zWBs*cZN=>XVEvnlQU-y9UC(G
zVc`o&ZJ<cr&wnL|L721mieD>cAt(Mp=}XPy{r9ZAR`9<TR)(y{wte^bse?KD!TB?5
z-`#03-f1{4>|HXS&)AT~yaNsFJik22u=!ibJ{~L#t!}U6jAmI3eZjefO(lsvq)@Sq
zF4Kb!sZP_1C^mm~ekT<`^qw|e3>fWv_Kf`aTM)`jy(7tU%TC5jPcLD;!?t+U1L-9(
ziXC%!(tSMAX4|y0P}}pjWG+nzp<dUn5zB1$y!I(V8J=sR8cc}I-8-xEjP-1A^I(6Q
zz3M8ty+_+S)2a5~YXPS4{lU3I?ROq*jo=NBw{CAfC%5ih8oP3J*YW?r1_<`nQztK9
z+S+5GZr^|UvX}MKJ5N1$1X)i$dY%r$-HAIW*&wHE4rko0#+ovM(-NFQ2Y>))?Ifgj
z><N$EiX1_JIZ}cbKBpA|DMOamDT-rG10@0=*8!j%&eC0mkP9`33^0!e0Tk0&yhNz#
zp>n@BpM!!>ag8v)15s${GmOnPnS_C^?NmHisX}8FAERahh_m`BFkJ_S(WaX7*x&?H
zkM?okzQ#<5(MTZJ1Q7j(OAv7w_;BFBM}hllRzBj)SZ<Ulu+$hwbn-X~Y_Cvc48+v5
zs|iKoB*p;OG#i1GllmE|)58x6=O_>Pg^pz|DVD5vI8cSUAOa}N5-0e!q2_kck(Df-
zd?gt)XLql7|M90gALOO>{(Q?)x^j55uCb`5n3oNf=AA<OxI77^=@8JEkt+O1J)HXd
ze9MTliy|Tu?k_vZHyr^`z85}|WG(c~;xh1@*F%A`EK5dd`COhl&RlC%LJ*TgD~#eA
z5uJa>U}*;C3TdHjF4uZfhiYNzG_4HJbxY6DJe%`8BNbE&@7O7>O%hY6&h6R)fzuN}
z;!OTvB3D`VMLdCW7AR@@NeIe8&JfG8bZKe(hG^Yx8$kyrNX5Hgz#&RxZ!!4S3~6S0
zoX)bGR3qkv*-`md^n(aNqnMi<9e*P5-Td@iz}5#`A~_<32};L5s$t?XAclD!csj?{
zS)U6cmyeJnVV)F+TP?<u%5oa9{Me1dkqn$wj4}XID!`QRA6|@B-~kCMHjDQL4V=5t
z4Xvb@ymY4+wtx*8f?^qP#4rWH16VX@W@12dd$NQWhYD4ZT84-=LxY&34N0rSxd0_m
z5Iz{NgGlu(@vLGkF`|f2l?NC$!_0>48vQ*=1sBEUn-3++_;}NqVa%mabj7)KpGkZR
zsvhE3c9KW=I5lK@iF1~Fl|yu9%7+t!@zLnoonBA$$b-R!p~OV2_bz9cNgafpD=qd~
z>GgAu^Bbhd1A!H6+~a4K*6`x;`%=YlD@|=eK!jc)Mi$=_;MuVed!Uz9Z=09iHy<Z+
z^L~#Me;TZFbV%_L&pxj@sql(6Yu!dJIBI)mBoB0SdHKL84f4I~AG~?A$U#Cn#!Ok|
zF@c5wv{z_0r_#ApHfLoF$_QtiQSOkJqSt3EZJI`y@a~hkkC^g$OF#Mv##crV%TKid
z-fVu%4Q5jr!U)J!A)RH7O<N3_BSoima%Fh7(<+}aMvR~qPxXn~=!u{)^%G~eL%l({
zI73=`ygTM^Yf~~W@KcUqPUXDQ^rFRV@A@*NcQ%oFJHw)b$#x&RbFs6SnvvBg6FWn>
zRM8v-`tpg{(1shs^I2vx3@A4r%}U8*nkQokA;wcPn&Z*-aK+f|r+Y-&ltFr>N`X*L
za-`96E2DWj0rh0=A+YSaL^NB9ry8vB+P52(dDWkbsY0k0s@<now#ju>%S4rhy$G2v
z@)D?XdO^B#WRnmu3k1Cp)w_$1*RH$c^`!X$Au*S^SXM=thfI0|Mnb)t*1ufcVb7^H
z{dB5_2}S^6(Iu8~mX?rE`G<s}7@w|>Qv?G%L{t9gXQY1wWjC5WP3>Z{k)8Pvg=498
zo(b@1K2i*A^I?T>PVW{IlIM^0)0fTapfl--dusXV=U=_LM5VOQeDW*eJeq$v64iDJ
zztiOTV^{68JD#q#$#)$+M!&sIkD8F?vu<M&X_=&SAl^kuT{kkY!x<A`aG1<w(SUIZ
z%1YM0(}HTkTmXRuzkQ~0o_Wo?Sym2-wTxoDHfXiK`v`)?rG1?CbpT65Xo*WSH<X$)
zq2M_Uj(lLEU;nE)CVbJz5V)Zam!ON_OG(b8>D(x#>FL;lC~*3Qe&^1;^y(f4?M%C(
zV_seh42kX<m|CGdU8V|u7kYGWaIqWDwITwHvoC=Fw0sXZ?!&z|FHC$>f7S9I14LHc
z(3r2)1>BypbfbIm8wYnFABZx?YND|4yZCB@kAXSoaNtwIP{-P2y;m>ALpu=u{Cg<0
z5so$ndSwV4W|Y3wW@<B(D4orXpplDI4b0VbsNb~(hqe9SLc6{gywBLmCdf=W8X4zn
zM)50~drFU=dc|MeP4+kR3q)m<R5n{9!asjrS#I`dd%Gx{iyaf**l*`m45(_!%nt+g
zf_lkRfXuXyO;E?u;Ud;(j31rP0zgCH5_E#PX8BXq@Amsajg`}(yN{j0+qWOVWN=lw
zneU>Dlz#e1AR&M#vxSz}G_N22MRn*r$<fC|zO<krYjK~O_!07N9BvZ;7$Xx&Ll3o+
zLJ)K#1D#sx?>0`Db{5D>5%rTRAtr=c9Ea?M5y1_}%h&?v10%sN0}`$lnZOE_;1mWc
z#Wg4i%(}MzPsvx_ib?msjKRO$-}AC~&60`CxK><n{onu%GN7n<m^BI)UMUEU^L2V<
zToAQE{bepvVM6QTtHwYF1`Pc;+&}7q6y0{pm&Z9=dED2qy@F0B_X}8E9J<gWNep;)
zkhN;sDSKqs4qeNw*?7H8t>boO<6}?>QshlWaYhWAsY<$f#LFH=Ki+c)>m>h@C4F>S
z9IL2u_(^&CFReF&XuhU>q;v-#Mms-ok|L7sD<yqnzER~%-RU_4SXF04ICt1~9VUn{
zv~njH3Qpa-C^ej@XnqGZ%W~FXe7W=@o;RhL!kErW_KHs~14zM=&U9&ig4;<^NL==3
zBP$wSQ(YyLM(%no9kmFu@Y*D`^FSl5trMY{qwX}!2mtET7zwtNDby!uIrFL^)537O
zeb*RrvsKF6C7L?&vL$(PyE^IT(DEG888%pKruP@QG=+>-f*EWS7-l3h!`4eF=RT@>
zC9N8yDp<G|!X8R9<-7;0iK_|%**6UQ$cZSKz94YS=Y%_T_ZMA{T>*2{E43I(g5qAH
z_-m8@E&`F%r@S&vO!D^iNA_O9s+^t4d1d&0fNiMf3O<?X7S60rYu!Etn$R5yX~xcQ
zOCiVVfea-Km7z~8Y@$y<o9sW+H>+m{SxTLyvnN#xJ#KJ8ti%KXQnd~~uga!2wvi<e
zS?erajPqxviKHbKe^p-gD;9VmW8zAgak_PGeav$W>Pngqk%>R0NLVN8AzdWEXqk)B
ziL(|0Xs9Eo58@SKcQ2wKNC@)-4+ctz$W)LqS#X^sN#?cakBk8@RZS&?>*{nN<(^^Z
zz~k`IuTGAmxld7UK-!+kRk+DRfe>TUB_gPK7OV6mGu($CISe0<H9iT7BjSp>T;k%U
zmOzs?*ZPP(%a&wWPHRlK6Nxz3_KAKZASiXx<11CtIHfHNSftt%0tSH2k3@HhS&^3;
z!hM;^=h^90mPKtFDb9=o$R+Lok+iJ2mrtJ_g@l%i?mKbzMC_zsQaM?<$4^6{8r-L$
z9^(=!<QZiM5p*D^_EDK;mBKXGxGXc*6ss-iL(&pzOVSWrqW6UwSoI5WSQ0tiI=+J~
z+6rbSvAjnj)bxS26H_HbPxz=NzzdG`0|hL`?fH7PFj!=$t~Ipf&~DTb2&{-6oX~Iv
zfviJv#1VkzeJpo3q^eW`LDlwD9i#w2OFrn8fN`{o48--*PPP_Up0Un^3RAGD>8m41
zk?YT%K-+;>t147HNj|UWmJ<=cmQG;~$N;%VnRB#p&Sq(ZkqGJ8l}O~CYps{L3<+2D
zQL?}kmsk=lpBIIX49>P<%r!2&`9K+<WUfQ%#2FWWU<otILKIp3Rwb=D90|?MAE*L9
zbFrrkakT)eDum5qrBkRNC=QbyT{%I)WB@`SL?Yd*nKH}7a=B9Yd4V;xi4ao6hq6|}
ziTMAH2>crzs**UC7x2LR$QI;-1X92<ST+?OmB_PL36V`Z*O<yE9FZ2n!5tVEg%eV0
z9F=_~?aqfWV#t|0fa3{rt*jhmpNM-T(At;25e<hrh3ZO|g_4rp2${LQVC2w(NY9aV
z6~~{fEpE;NsBACA2TwCfL@pW2FEb~?+zGW;UB~^95}_11dRu^)^I>J)=|hbFD+{!z
zB^)7Gl%$|J_<%CA^T6vRBQB({nbp0Jh@j#~SfQB{rhqGss6a^BywVh7N<>p2Jc!dP
z=@Y{VKj21=x;aV&nCY}CSoELS9q2NbxU#_tizkGp;D!;TqXGrh<|L2krdSpHBO28i
z0QZd{_tOFykX7@{(uGk>mrYfBPqKV$lu;E8m$r^EY;uNJX(^O08XUo_pnyE_07|Ce
zW{#(v;Y?tcfbs*L^eQTx?UQM;rWJ@%7N&!DtDG=~CvqT?5yPZ`=IN1}#C9I7imh|<
zX55QfrPiZ`l%cz+&g-Ev{954`2fM^2Dv}C7=t7rk1%DLV7^)*a9U+f0|798V7~q=o
zg}MHb4<P?jq<p$&7Fk+MD?9%DJ-bfh>iRbhwdcm@CXzx391$u$6hLUb&qUB5ocXlG
zO$u~h^YZpW0@2>i9JCzc*&@rxOgZwD`wRQH%XYF?DG@Jk0lk|H@iI4IR$_j|U;IT7
zh=On>S}z%8SH~O(63a2g1dtuN2We}Fm{H4jYdcnsT1$G`)BP*;QK?yGK!s3-E=v`-
z>#PU4xIHsBa|Xo9nVC3KzZRs;5Q9nKGvXY*`ue)5S)m!?VyC^D5X1e27}c1#B1WJt
za*L|wK~HqmXWv1X6O+n8lejCXk*1hiQGE0jDmD20VEILM&P<w(6CnpAd@#ZDhd#_R
zVv@@`6h^9)-Ez7BPcaE0uBT-HmYce1YSVFOY1ScvHG#Ub<`?V6qu!yDRcPS!!GHv$
z{Sv_$q+$b{I3Y!7)ugqi5_}~}JBCG-w1;ly6U(#gpouw>>`{%thq<aMKBVll6+y^h
zMsjGQVr=W=gik{h9GkCZ%%RK&Ov1YKnp_}i0E$GAm+%v7dnAw9b9RQaGTHZDfHL<)
z17~jLS|mMj!WbqVVI)n8<EK=yqqNUDc~{Fz5=(w<Gy4)R5HAiyBshfvi?J&`!RXH(
zyE*hq+D9rzTpo9eo}G6(#Wz-Oxf<7csHod^tf8_LKrD0v#R)H2IWvElJ6-W{t`mL{
z-8~WKf|)pgQcXUoZJN0yJUL&2CX`eeu9k7B%q~Ay>`;oDFAXc_!vocD)#8)9>KiOL
z9W`QL!$?~8d@FlMB28khE2!Sle)rc@vdQz~w{t`GfY$736jeK&HnX-ih-TAAIvln)
z<m<umIFJV6h5P{Nbci(DE=#**xGLNGn{P~x(+T203?{GN>7%Tgvo)lxCuLc4H3(7b
zHQlamOOw7FE9U))TZ1U6q+DGiww1gQRVlwmG?IK&wXid_JQ>Y{dOTli!oM!JZ;}Nf
zrCS2<4S%J&^`?ESr^V@@$|Wfv#PV!4*)A+N#R{$vjaL4v2TMI8O?%Nav;BPgi^rG}
zB^F0KPW2}`8P=ff0zg~oW`F+~CHdi0mSJvYc;ecbs1RN^#97-wFUy=~vsm?TG;~WQ
zjFSWlWR5_}laN-4HlbG3nhZ&=K8L?3U+d<Bzvs}T0EzsnjHixk9Xq6t<=dOdvcbv0
z-od`a1wjV~b_E8sj9~<I&Wa;TvuJ}N-~T3n%b~6u$Mczs5pwo_Sp7u!!vg~JWK=tC
zLp6%Q+`36nVo;S3jNJkj83y_WQl*M<3VBEaGEEq<5z5FnXhd8*tnIBv4P-4a<T^tL
z)uGRBZ;UZk%fJjHJSZ4eYo7P-pS}Lz?cN@iQDOk1V9Kp+zIJfa%w{b-k@^=P$<yz-
zSDZzU7EvN^4x#z*%I}AEmur$U4W)M$4^80`3BQW`GzS6%=CnObmJmupKFXnrdywZW
z&&cEwzmZ&xt0X*D>XH+<wIRO9Ln&#NBMe+XXY5`|HpL3dw17)!FJKIvQe2NL86%4b
z24BB#UwwCKBOY`tyP@qnzr4iY_HqHh&w182<$Wb;fB2IOkK#$5-n{VZg=8hriSG)o
zGu#>j(!==FX&M?qCr@xyj3y;y>tB9(PO=YxC5I$^zjiPJ;%Wxuw1UkhK`v|lhJWv?
zy}qyDtCqeG9e<;`-zOG*nRq0;VDYMI?)I^9UuH7TzDCLtzf3?`O(kPZ-@)w!8+Y^s
zWqw9d$JG3aAb;}jd&T3E-+h(QC}RwVk$i><<?z}&`d{DK2L&tTl~-0t75yWC3h`$1
z_LN86%el$gxdb=LzoxP=mcBEvUs{)(Hal>wvb8CL1p4Sq1!Y){=1Yru)jEt;uxc9x
zgtyQaEYV5C-h<^nN@9vY#Vf6?Cg@|p6}5XV1$qjbw!Zx8cIP(2x=dYbzI<bC{6U+b
z#%oco_fyI=->EYXdJx?FkgM+R=&o7c`|wgi7u)l>QhT{P8|paSc-XJM)6W#$!4O4V
zF`*iQRI-OHqlMVLSQY7@ld;a-1MLU(rPhk&JC-KK5M-~URVB2#&z?=^mc1ePrA|p}
z|Aom^+s_p`L$FP`Dt7Akk9u%nGrG3?>~6KWcLORpZT)2w$7W?UF>XtG%@qWL%HdL!
zPpuRpY;uD*5DGlV62C&P1KQOSLAS5lP<F=HBp}#sbjN)-#Pxz*WhR(=(3aAO=U7Et
zi4uj18HrszNYDiIk+?p1-i8;qY|J(@M2dy2fR{MiMDW|`#^sf*gYDD9-9YcM-0W5B
z0$GLXc&*t^&w_l3tMjlx*lfaE$u<Kb$#6Pn1PGVZQAQ)An8`z<MEg%(RgeM@@v*lU
zyl5QGkd)&}c%S@KjTJSuQF?-_;^;E2)is%c??yelQ8T7#qZw3`__Ir1fse%M?c)QY
z-_i{~E|#YRiH*b42UGfxt}IuW$O{n%Txl>VSfycgD{xY+>4Ve3J=v3PA8WOoyzxrW
z=a%mfAoe=a;;nwU*h)HwgL}PMW`6Xxx1KzD6xreL+wJ@N1C;~zjT4N#1n#j~sglM?
z*{=Fuo81jMT#pPYqq(Gi>BjU^JHa<DJUN2?MZX&>vpn27`r<;=e{TCK_nYvgyB`!g
zoqL7zyD@023cT)Zq#sWWH*6)FnN{iZUe!9S7j97$&_Q@59dt9y_v)4D;qDnbRpGWp
z`;5JTL6S-Dr*OZQZ7>Y}NErFL@Me{Z_P3;&ZFQuo7ZYFvi<jY?%<Cmf-N=K}s#sv>
z@|DX`I1cfXCQE;k<V)f>falikTF(oIGRhP0*phi5CN6YVJs`z+A!XqBig_%BtQ>J*
zq^A1jMU^GgnQg0{qey$n<<%jm5HV%j-)lg!(cQ4~WM%snDOtlAZWg;)UScBADP^}1
z_-4;qDoJm=r+idNXlb?IX=+%i7pJQUw?><jRlYSm=hTlo6OpNf#vb^()lsnVV}AI_
z*X{E^Q*G>Rou|hjtGW0d5q|X};b39zEgve$`TRn;B_vH>a2J02r-fp~IwxAc*pz*c
zt7K2}lP^Y;5oP4+{2F2UR*Bbp1MQD?iqjS(jgxm)5$xfX=j`m9otP!@tf!J?#UxeQ
zk0+K#CPMPk+$l#5!m`>qfAq4lh;V>RL<?kGq{`hmwKzS6ZFphhJci!8QxHWdCo@!A
zpb}ZuTDOT+N3@yQ$$}*ezp>_Avz4-46P2d5<1Q9@JwqbeRlQ<9hge(OT6!VyL7#fB
z@4MK?pyC&GNMS9|&n~1_q>H4N`mgFy4Er>?9H$q1U~Kf&xzc%GM&J;CD7=L%YV~eF
zE_M*TmBu7!2}B<jUDmE=KS#9XZd1?{V4HKb#lQyDi!)SaNR8K$)yO=Pb*&?f4JGD4
zH9MgkhLVgQxDiV-uCT*98tHx~1d2_q8EvjNgiX9bv>j|*0oOfDw2C*l*M{caaqKE#
zmC_{RhE8KIvbKM?LW7;%a;w`8v!u+-X10k?vHWVaI)q0c_WRWwo5uyyQnBrdIx%I7
z;ra?T=?t(r1#Ls>>lmd_6}stag3#%RsbS-`*EtbQCr@68CVPiRNB26tXJ_v|y_VfG
zO|AUiw4U<b%b{WX;?5T`N3b+WLuh4=QA1$j48z3nVZu7C)LILB8O%-3N{Tm-BGD?J
zY5oQ%z4!_2lD8S*tsRPp&=D)-vhUFcdFKQSuDEeUCYK`wx0!?lQ$9|fL^?4PX17Ct
zSiM*f@{A!8DIj9Ge{$6O&*HUd#1zmJE6eAIfaJ3|Qw<9@-A5i1%=;~%D8d2@$_mgn
z!w>R_QG(VDGrkWTrDO@6M@hkPD(e5mQk=YNRLkl`P_K1$Bmzo$H|RiKkrj$j_rR91
zX4&eAfx}_Qq<U=)Vc`MvIKoM;;!<l?i2l0$@{g9h=qb)7$~iTTTz}9zoP;&kPze&<
zo*XN>k9R&IwFhpn@i1$lkQO1A>m5J!s(=szIk^$dm_?L3icjXGBZ-#xyN|}Hp6JT-
zaox1CYuCF6UCj-PFzU>geP*Tn{d)J;CJa?+D-G)HDk`u18yb<elx`2}-7YsV+54h;
zSzC>4N@AL?A7i*8!8uqB9F74$xTrRdYLW_7c<ZoOp&^#xUGmYwp5*xBWe_-F^}A<+
zc>j?R==jT6C1YlR+qm)4z&zUCUhCfPeNgX>*^4@)_9juUO$Cci)dOk=&Sb$V!&)B;
z{=ck4dt0eJWs&PKDe)X`@`58v)7)B;`(j*s9iK<n<?}?fX|>!z*qCKPPe$Ov=AB*}
zYxe+P*ZrM>kzHhVtn&Ti%TpcOj+L!>pKpRYjO<XVcDA?mHex?Gfjm-W5>o;T(}h)U
z(e{WW%Dj0Xz1CbYk|=BSN-PNk4soPmugV}h;)baN`Fg5Y%p!E8uddTY4KnJV)(ocM
z5WE<p`!((D`C6VM<$i3IrA#rj+gAuHUePAr2C|a<)NBAPv>=~AxZMG);!+5)%ZE&x
zfeQut9mf6F2#ZlzGL<B7Q5%vHr?N%CWi`;$97KJJYVx$T#=_#5jDFdcu)5lKd47Tz
z!<UiLMgH~x#3thPw+eLdRubuWX)Efla_O7M80^9My0P}3NgK3Y89BpbhMWj9@(mG8
zKv||~Dk<=aGD^to5PUe<ocjd$`7!~L_!5BoG`IR{$^P!yshNLy&jzq6Se76lFeYz~
zh5k4VH)+=b-F0eK!aI@;W6-It_CM=*`&Io(U0ukEgwUnv!65_%45<-yXAEp$2MNJz
ztC<X#$PP@l1x@2N^WF(u{b%ehW&rc6x9QjmU4A+8AJ4UrRAH8}vmJp!HX(jtlXaSG
z79B9?vC!gvYI3Y(f&v0ZK!5jA9bg_A0^2g+G6Wi$(^70N44~R}SE;>wvwq1Mj-H$$
zi*y#`ic#&~;MBM2zKZegneINmYRT8mbUlr}cJh?%?m|X*x7doMrVTa3s25rvdB;uY
zWkkDKJOi16IcY4pL!y3=UKU0}J6SVCf3;%e)kz6-S@qG7uzTKqKx{=!a!!`4XK4yf
z$NK!imoKC3d->K-;<xAazf^|9;o*9?dm)u%ByQ{2&6k%-f5nAlvCRGkQD7rm7|f5W
z;;=cg2t(nQrv9-Fb{J}oEl<@HrB%7)LrCMbJOiYa;;nJ9x4TDK%@T8R8UouS_oz}e
z_FlK8t=#1#L|L;pB>9hUrR&2FXSKR^A@liM8YQq`j4{E;*)4#lzWWNd>kgvWh9Hxa
zZ`YDzL}V_d;aYFjzrGDAZx`J9XyPz~+^}U2`~s2#98GRW;JeY@C4smkmxsNhUC16A
zLFY_czp%)#CA}Um9E^<-wSq3@b9l`h=yT2Iluts7okf^r7lv(98vY|G74XT>+jdJc
ziTgjB@Mn`Pp$^3GwD_!r4NmgY=49w}85vr?kR-}Z928Nkn|kf8W8NBIfm5$fA^g|7
zf$BYPD~t7^eTkvCqt4sK+iP8~VR0QKlOI{`P2IpG1wtl!Ob!Ay9sWx@DI{~5A@q!j
zR-mIoVofQ9Mx#=^Q^ZtiegEVOs4xIRDmd=|ry~r-kx8{a;VF^s<D`@glE@YPSmCX@
z@o8LGN!NRS{>z-kfKN7rppRYLANfAs!?=Dg8+<>O(KsiC`0f@$Y)v6{EXpYA@4rL|
zSSv^1ZX6v5)L>V_QF}WQKThN5#5vm9Fm<KYl+hN=sqRL>F;XEhyCp<+n@`{W;OLD(
z{%;3fs=m~C#J4>=S}fw<W(qn~7i2@4fBVy1bM&mx{HykUL1DG5oE(A(5(}$iIGJsx
z;=Z{qDO7Rl<ix#Hp$I}WW(rNApotsCDwaw_qDb)GK0&9cB75h?lz-BH(W4?$R3XU*
zRcumnsNg_q9ug)Zs8%j^305lHm$-^F!AyFZ7k76Wj-K!>PBOqlP=p+nKu~PaM8<{l
zlA7b!F$IoQ?nFc1Oi8cO|EK8}3w6#RNqSXGQc@^?e_9?2=AjfnV?-{O<!*~zg&G$Y
zE!B&+sub(fv-<UHDT=3*K``NpW-1;BQFT$ixC{Hqg4JqVbgmdhsW`xWf=As!;5@u}
zoSz#HIyh}IZbD>v^Jviehmf38U2N1>R*pxbK1Str&s|vgT_o3qd&v`HDl`?SXaM~L
zAMghSnJ$@kSic7T9~bt&6ug{2)08<#Wz2}9ib^EInJ#Hg(9k`h_*C&S5jfauFQF08
zTAoBF@rTDr+BPltkypj%le1gSw;XTr^HYsAa@qGJ<em`^=ahDm_D43ip(3n7(jq1t
zQG2S_618(AT-lywCXT1=x2L1|i4uu@BT(3bDMY#DlgB5DR}eEdkZF=>WL&fBLW5(c
zz_?XBcbTI9p{3w6-{1$<XU1jvcp%d%cu<)Kam5Z#@Ng`w@<GD61WA^$sn(^_g_aXX
z&dOL5PcZ<WsaOt`l^gD&f+v_YT%yyg#TKrGli-2<=(`@4NhE5`0h0;lcq=i(oFMvk
z!RtJ^=wnkEq+ZUvCfUC+6U*=7A-6p02me52Bi2u*JLf7H!PaO8==Bc}sL;4*Xhen{
zw?{d`kd`1uTsM!F4yzFkLRqv)W&L`=81a8G-!NYfR=owfnKN;AB3Y`P?h+$SLD_lr
zRNk`x($+~MQ4U^x@doI5#B9fiGMs}*&VIslJ4|wznf5Ib6N>94&pngqJ_!0Vi8PE%
zuHHpcHAZ5>un38&0ie@*%<U#NEOVxE4UE^HnnqEofw-sZgk!@uw-rmQ^QN!=yw`-7
zH`p-tJq;;59M3wwPv~?UFB*4j0^8*|YV{y*nh`o7xZ~bR)_c~k_<yW)AKYAAutR-(
zW!uUV;KHv82CvP=1wa?Z+s03*9j<%_e;UgXX^_+W9ge=P=@BuVU`T*m)L!%Ys53C_
zh<Qth(g@b2KR)+I4fo+q>hn5VAFVKOQmTyy-`UFCHvg(iCmcr3xJC~>=yJC74RpX9
zyAC1ha0LUt?Qm{J%$5s@MDjzzxgLS$4nHU5;BuQm5aD}TtufwvaDlzt1IIM;hc`N?
z{6wNwhFOt2*vY&-rq1`2@_Nil`GlCH)Fjq(@-I-e+Mbj_&9M@M$R>A}4W#LMP=O92
zh~DFbGlH@_jbQY_u&E<439p4WIqosf4KKIdbr_T2x<YOtu-3xUJLc_o^PBve!|&7g
zb65kY*st1kV9TNdJG^#%dF5}DS4!Uc6}&q@zb}0tc_~#0B>2*x>d!V0BZo4MQEtk8
zd+LnXGf6c4l<^}NhuyI3$8jCVWLxO11nz4Q76R6+Mp1OLHUuA<IWygz2B`PsW(^++
z^i|a)e16f&m1kk-h%N{HWMC&^s;=`<t+Ph|Br>&t;ep0Tzm!uq<j{L^zh!S%1xb;<
zRMQKxO7Ur`1_}hH#*UybU@uW*m|EZ&Ht8SDt5$Pnqug1JkZ!K%(V`Z?7gFI#GXUBv
z!MQ${5*eOFJeY1~JM0skuO*hRpfG}Co_js>x<lZ<gy;gMRiaqFbD)XZCpMp2?JE<A
zn0bD(cJIBj+44u7tIQbBAnjKdkBK;B&R9=%&3Z)5bz!#wIhLJwyyO{0RX}OB1>Hib
z9GASi_7MFNY0lQYo~8(Og283p@oi52#Pvv&eyC7|$qPRumA1l_5S$stvw^Qnid~ai
z?K|f~%ulgG4EX`A=pccw;`URd08w328-N$y6@w-F_p<N(mf9vuM%>yvBeAI>&=GFP
z%jdXkkf?16VUHZ{|BG>t2L(Kda&@P%j98H57L_|tW>*2BS-Wr43jF!$zQ&U&sn6YF
z6~v;aTE;6AY#6GrcUP(0?QfaniH(hkOkZ=yIa3{?c6AC!V<=a`Z=;e(xskCzh$jyh
zN28Ta+hnDK6JFClo!i+p_@@#(cpl52EukHmbi)ZB5j_)SKz&#cmgDh><F^1M$icK?
z>+mH%7JC=9j|-wu)5&}2MW`HvD=aJOz^C9<5l}=GYZN_>-isArhJ+f#BsAM0g@f&5
zY{1r&zgt0eYy9SBM_Jrw{E7b`p96*etQkkq3_m$zscA$Od9{pOYNfIs81!$p-;AYh
zX#(QN`clmMhxJE}a7yovC52Zl0m3MEM-2_6V2Z#+YO?(chhm!`^w7bjJ|p#X!YB=y
z;r~_Yk?p4txTZbCand0C?%>$qYzit_P#|dOEJ0uqm5A{ytBy*iN`u<la%e#uu!xwo
zn7;CedLY?xx0874Ff6Y-CPWhx6A`g{mpw7Z`0P+5U&vAzRdjFZKN>ehF($iI{_U$#
zgI1lTZQz>SWU0T5F-Am6R_U%QW{2Xi(&nE#1s|S2c>DXRJTR1;lBy0U+HJ~dOO9+G
zii`p`Sw=&L$}T{g7UEN!sU2~A9oBpyRKIoWKwYSqolMG}!i;rVPW!d>Wu$?YuIDW1
zgWI>><|G9Wlzfvr@PxhQ<>5cy6s9~w)ITj_^>pD-Q6>E-J=n)3J~&21m;Zk9sV>kp
zH98_a7E+N&#JP7Zt0ne`oBf?vuNGgDTu2&M0;sjiSb`)QdQxiI4x1!_TjH|Br4`cK
zLwUv~na^6r;wRgj%UYMP(4C@!DKcJS^rA7lo5|I2#Uj+(+?#WSPvS9h{jRxH#UWz8
zo6;0!0GS<(L-vOpCg>is>6?{G4fF|z&2)D;W3#>SXpa~4Lx>ljPP`l=2oEKEPIO|)
zVdD5Zl*0f<K)JsmItXDEFjG~QP`3gR^)oX(=2>+kuu@so`bdA|7J_=5``p++tGg&w
zA{L6eo@wzj{RV@gL=kHj%neZP0#J~j?VWF4EBpcja{pCMe3ueV?sr={Q%}vABbpD$
zBByT>x;4w+r(AEu2Gwc(r1r4^i_99Kbw^(tUvsq~NQ(~Df`6C7@8#2U%i8NzKc;`%
z^6A@CI)(njvSEH;wtKwdDUJSA16~{~?dUGM^);g?SF2Pjf2QEl)xNQERcg9YVtE3E
z_9wmZ0oUg-AK;j;=OZzgy>Y@3J|V63r&8i(;vXPiB@ghT$sa3av_z_ZFPSxDy<lMi
zGJJh)NYNHLhI|okFxM&+S`CN=8m&Sxr3Q=?e1Ljz<hY}NSE$iaja041TYEq9fi~Y0
z|6hdnD%4M@|I^3{Fa-X4G~18oWIrZ<oV2@CPcv^tAF`j7y#M0ABJ6Ax$tI&`7}7S8
z#VI-8*;r#vP+*WT$QdVpn-g_9wCID7v>Pp($Yt9e3O#6Bj#*1yiwTK!x0|rDJ7iae
zK2ZhS13l3Q0Uf3)^%#j65;^#`H~buDBvYky54Q`8z`tVs#3wHbu*3hvevjYmu2On<
zWZlD)bg|Wh4_N|`!*1%(baj}UG!z_}$w0??0+f4eH<c<$bwL?-Hw(3EC~_c|i0E`U
z;@z-ga&iZ{7p)Kj13gypZ|8PHXQo|dL}%xhPA4PZXmFfunsVIE#B9+zN9w#4-dykP
z-e5{-$0G776Y}wb#5$th*Ph7B`Fn7`t=w|$gt}n2O~~?QFld;NPn;AtwgjlR+M-O^
z7n5!-3sCH#*n!XI_9D<j2z<#|c-^w}93U<(U!Ts#>5^fSX0rwbjlN=e-{LA3I?=<q
z;oKq1GDW|1uY^WE=8|sVz?&MY@<fO;Fsw>)bq{Y77&~)p1<CxS$BtoJMgk_)(^g2K
z(5PMVM6nOu9z_x~e{0UmI>M7efmv3t;t&;;6jx!QCiU3iv1**@o-1H5>r^WtSPAKj
zKVdw{Kn#L<iW2sdm=8XjLgP~XuZDt>qrK<sNBwURRd0}lyW!*s=lyD|;h=WM^(P@g
znK>pZ0RuGj>B&b3jEU{2Pv>YIjFm<4@wMd!8CR3K@AKErc{lObzt*iLq$MaQA~z{{
zm0E*L)~XVadS{J?kGT7HBE6C&p_nVx8g3#z_talsiU`aHct){{$#J@xf7i{aVX+nW
z8bCf*%wZF(#Um3$FPH6Te*T0A`d@x|x~1Qmm1w>%$>^2|*c>sJeZ};4>hODhqV1-U
z)YSWB*;m+HF_*Li8N6_w&&2;Ig8cjoY2%t2bHOjmL}P{9m$@X*AGDbLidz$hAM!^x
z*^Q<oZw4=}DY-~Rgu-V_{`%?^#kshg1P>QSAMAI59t!`&yn`S5CH;QakmLy=<io2C
zbq=*j%m@yT3J!{l4GdH#9JHwoS8)Fa2S>SfZr<*;7B<ht%~8<q%6AJRidK!}99M3i
z6;F?MwmLa2<9LRqO=fzREpiqHhD{ezMroTU@}FV{E>^26K!fj(X;d{eDotX00W&_!
zJ|deZ7$xS!RW&*|6vh=gK(TpM!5zNn3H|MPXCh+LpU*E`oVxj+pM!sUExIv@-TJ)V
zqVd+il!4)J=B4?Ff?aWkHsAb%#d7%iHOm3jc>U)0%$OOfPLaB^k5Fui2xFs^8ktla
zC6+=_ZUev0W2IY`e&3TSy!9f_)%0FzuWW=yI23fLZ=;NRs9qFrWww8x?FkamNg@L?
zxkfLOoeHxDBiIq^S|I=L3k7o$gABZ%&Hh^}iNW5-iLM&LW~##wV&-EUI<Rv+d29{{
z%gfzWl5Smj*2M&RGBY!F7bjVl-ElVc<bi3&3afIeS$KMJDmN^fsgx{{X2sAAD@)Yt
zhLVlaqzp6LbRyIlM<A%Nk%TAFxkO8rATiIF$-4|Tnv4eKounF6(-xDB7Nbc_QBA7l
zm+B18H;u6@+v?MYZ$wGCLfsifm-aI`>9M4csR8$aN`|sL!BetZ8kI7PWwz`_O0%En
zflzc`^t%=Nr`g=e^NWwv{mBVJQ)n;TMv)YS*pOb#7bpT<4tG?LAaUq&^bm<em%tq)
z0A@!l0WFi>Yq{<5>5DVguHPh$mNa8iQwa^RbJkpVt2V}Y$$ga`jz5;BF4TYI&YHn;
z=aXn<Y>YqnYPXQEfw1zgrTh1fbxXu(QC4WI{C3UWnnj<IBi_*kU6a<_ac-PKc%b}A
z=Oq#Nd5vbPX_trX3uXxKMgz~S1FKl-GbYSkpZ)~Y_B7C95l&^{DgOwx$EK5v<kiD?
zflK<5lTuzEL02G=R$yW|G`RnEf~I<~S-ToS)=|a-YkVs?Tv0=0%wM;D|3m+M4R}Ls
z5}Ef!p4gF;w3aJ_5<VYNMZ9z=Sv63%M*%<+rLNc87S=HX{PL@vzYtdI8C0AHfojLL
zwG`E%k!a}W+q$UY=}jnuGmFj$%x@pQoOgG$iAE#5my&#9XWupqBkgSLDlh@c<&&m@
zh?Y^~WGeNVKVK^roueu56wh1;!S3IyBpMtzx_d4-K(6-_?Q$T;|6ya_w(~ALC+FqI
z%KL!vAG04VOYLlz^)y6?$&#Dvf4NydcJl*WN5_6Vd@2mkX`do~=ShAZ`TBAB*%%~i
zA8G!y`$xl;j?`1Vy`tJYv9f0TNArVanXTPYOLoh;4FvV)y`AdL;~>)W)#c9RYtL2C
z$GRi+BO^d~;rBsWKRSKPfr9FsN$WKfLy{Dsok2RXm&_hH9p86i;h&@^c$Sq#4^!jy
z*z+%rO<DntKYX8{wy|D)CM*8_WJS(e4!vNJ7U!6gk0bGkR*BFvPXtfH)HfNC1=#9a
zA4`!K1f%S^QWz^>l+q`V93vP6I^<$D1Kbu#)K6Hf&?AhM1E;DU?HJI$AUFiNl|B|Z
z(~OcbPfTi8!Rg);&&Y4=+-6jxz_t%7j7^shb0uO9M=e>NFGRZCo=OO!9fYG+Y2Jtw
z<KgPi&xAitA?Wln2~B?KDG*8DNlGEqG=e4dHykfpSbG61CNLxyKsY&myOjyXC+X;n
zfA0F|M<uhSZDuk$b1Fr$ge66GAi{%mo=BBOju#*LWXA$*(Y9TsHQgFrZmuqVMuDF4
zwCvWyk}OR?LPCJ-ItP^~_FGQzFT&*chsU~tJvRD7N4NV(xr;h#o^xhOUrf_UD!!+F
z^zB&01@sXYlcvq>tQMl-Q{SmmyOHtkCZoa72rE^)>&B*nE`@GFs*;hjoRUyZjWHuK
z!&RMah^UG?)KzWed&#}{yl3Pe4Ta(F%kT4eX7syDLo}A3N~X~gCm8Enz2WLS)9*rZ
zdm)Zi<_+THK@zKURaDNkkZ&{OLD4C&MXxZK%oelhkWlN`cGFkUJCBwICVG2U=TN2>
zVWANzbj1=1-GorSSS;cjXw9BZ$?>U4;u|NP*$Fwo73MyA5kLJ3>B`cxlv;`%r9?c=
z|D+OhONAY4SMxs72Q)&kpm2))l!R#xQ)XH!!Moey%F@#7qBjhlix3ysG+`OQ_-Uo-
z^RQpaxGYLPO)}ANBkL@Qr{63h(9=^4o3FFz6#71m&=n2yXGK4&)08hE@nFt3znf|P
z(xNAfwev?;u5gm~v%vn4v`GYd+P$;BXCk*j=sd&R5G$7!9ri<sV9H|58XX@Ki9;HP
zci^$j<Sxo938+j@Bt!l5cu$|g28jA#Gdk&)1%Y_GZ0a<KBtx6UIvFOIj)n?tcmXy_
zz8J$`$b0ko7H{bn$DQSYfDJZlu21>_HK*b+-<#C_i*ZG!dA8NrPL500MdM2fCO2<o
zk2llXX9zxLR#VC;WBa1!;VF_NGy*H)gU{~N6Pmw(Q~?_fyOocCs&YMP%sLnQi4lUt
zpw~)RwNbaAmow@Z>vwzc*hv&W@#u3;+wW5PkEGDbq|m~I#NfzAkNB1^QQ55%lGEe*
zo%2v@B6#9?@MhFJ1&=8^07pq$Nq&OQOSGyW{71P&1)u}&p70w|7Z5=tiMa>YQ4}{-
zzY1&h`T(PU16WdQFvcwX*4~{QLxpW*kzE%_ku?}qL7}!XJh28L`tb=iO+iKbqj(do
zM<}eBq|WC?F;p#1t*0wdtgumEU5TR>Ah>o$%&*nSkK#E2`8WF4X_=PG*8)!kN3Eko
z+k1TypDY`S2%bzv4T`UEm#QKcGzo+|IwGnvG1!cybZsG$3RXnA%acReMHopzr%i7p
zPMIg-(8DNbZdm(Jn#1Y_On;c45`F@L`Vbc%qCz}1Hmy`iu)+T=bGrfgH&LW|;3D&!
z4H8mkarYb}t3lk-K{10cv}I2s+1Tt5p|{*i=q2_RHgnn>N|z(f->n}J+9gx+`(6h!
z|1wqXcFBE#MEu{|oKSwz+6%|!xV3i<6C|yfelLJy6NigC$_Vm0mVYpYsK_ohQnC*p
z8u0j3Je@Uw>iz8ZE?#$`2&=<HkiZrm8YT-gLQ9~{!o(`pW$^rX``HkQiO^YIaw4Fr
zVw@0ALKB(j&}n>JdYvSY?<evTOr)Y0Jz;3eiE+$A1HoTNod#i)D=K;72|MAoA(Bw@
z@ro>hqo^(W=wu2+Ycko$Hc?xowp3Rt_D)cG+8s8fqdkWl*r%?YB$UjfX7jiWGo2|<
zS+pctAHjn|y`dO|ksT@wj1)A|yCle0n?Ho?S>^SKw7`-8Npg{k%uu36fv4m+HUMYU
zHgy@!Gd0d%oR&-52@92__@e=m-(sdwZoBOWqHG?Lj#DGHaw?IDvnD&~7BB%toF$5d
zR%ZmT=5b;!XS^|Kv^HOCqDV8b1H%#qhO{k0whPY4hMG8<R3DfkJPJ9rP)!l)LG~_B
zs?-Sc4K$%%dVLNrQ))!MG$}9Yg4{zbTD^^kMgD>^VYDkcdORQj!7c;<;vxUB<gH)9
zOgbb47O-UdRx!dmXXaeWr&jG0ZK*_~)ur)HDJl(|ivuVANkZo=h85Az(CkDtZ=OmZ
zrBV?z6f<Hu6^o#+cOQDwKQ_u22h?3j(LxqqsbQ2-qA<QDC+dm0REy8||8+)ITth7E
zO6(FTpF5@)qOi~2*#~^_MBu`0IG))yu<w{)CKZk`jl`6Q0fS4<awWU24U6;z3S&1?
z5V&YDvYA&M=@>JKJ|{U(!|NwFKU!{$-P{Ek?9VNwMK?3dqKN$AGslLlQGbY6tw)hj
zkJA1|Clwy#b6Yl`=t4J5tB@+TY13>yeGSc`1eR;{(l!e$Rfr~XU{mASHA@qh1?R2{
z7MdmV1-^ocUgi#=?QsVABuBW;&++UQIR^J0<`83UGzw+^ET^(D-f!tV26(IoX0D$-
zEmWn`gll4z?C?>`l`n;jaqNcpc7BK*%DB3YIXJA+kmE!4xn-eJc8Fbw@{Ks*LkVTC
zvMb*|c`7a(mo+_H>+`GXYRJ*)*Pi<je3vS0u)kI5yL;-v+5#S(u0RDTyS?{%eHKc9
zmcroKFcqPJf=Iq>6MVo>tun~vbOv1F@BTk*F|*6NzxM7m8a`mZD_<tz(f%^$Z1?8V
zXY+*1>FA5?bHno-rZb!e9z|aPMRvFcjQhBVMDCs0i(eEw)5O<kY{UF)PO>xNrB!aq
z^!GOrn5}iDS=wXL4K5^~Uk1j#L{IQ9tgA^1&q@!732CFmPsG&W&<+7U`(2V>5xJcK
zp!e&v5rMQ`=9?*2kC%mZ(<nUl4BR`UBj<#uO78fz3A%wTn22%lZV^5M6AdZec48?b
zp=j~HGszmN6~(KX07gYYhrz!scmV^mnFeyu#6y@-^%5VG&6V<{ZlnT7w_wbBwCLw?
zj3YF}9`RnjbZ^&b@X*otP7?E?Kw3~1W;u05ws>k9dmPYzazMbpIWh}D8mT1}B2rh0
zk=6AHq=ZRYG_iv~xO)G}AXHb1lHjI@bO-=$b5st3NGn#Mc9M(a8ivr={74L;`UylQ
zf%-)O>A}Yomm$2bM5n<5v;ifop8(9^>m$!XfcZD#gHoH=u)I3Vq1|zK@|0p<LY6T(
z!IY8?W~OVxMGsqN-0jURpkr`YB{+y}kL$yB*2#u^VyyfQkYtiU0Q9CgV{?zj)uj8F
z<LY5np7;|ut~5UlsC!@&i?i&r7|HeK&mg$$meh0#;184+AOP0n)x#k2pt0Iv9Z-YB
z<ieuO`UL-H{+aschD86MDEP>42EFuKs$ZZJEE8w}zO%@qWbWJy<-By=;yz1Rm2k%f
zVRdtyaO$=lmFle$mhZn6iq0$QnN6w;<fL42ce^<8>8Pe??FNhHB$(?K{(*1&@j_s<
z!_x;IG=;3|c|X?Aw=QCIZ%?RCU6>XImfVW4E!&_>x(32Dif56d=XZwsKGP_!^QhwJ
zAAj`MEd!pn`mE|8OLCHYcKFn#@T>pNNKoX}uzg#<NJ|QIRpjXy1xKcmy@c=RBBv6R
zZ?+JhM_2%esHq}+I75N^fyA&lAAd~r5#B6(3@C4vpi&m|GNvWvUO+$Ze$0bjY1D(L
z753Sf|6$I(lppuMOnF&7>SfH2$7>iZBVdI6jE3n_VHSX+^uYe&(P3Ji*8K$qUaW$r
zC41~?dagjCjhz!io^ig85+%K6cL(t$|56)`l;)D6-kwXKIoHYjYGG%xuVmRLl7Vy)
zPZJn+Zq?)R2f16tqy@rrxtChv76h@o9pN6x&FKz&0J+p8KHbRE@NT91;+SrU>%U}#
zS+1#8jUsyZcqs;tT6q8A(_!BQb*f3^(RwoAq$B<n?;nX@jWF=Hz2-JBr@_l<mwV?m
z_X!tQCJ2m+FFu$E((DE`W)lpbj!}L7Hi`mlMTRhAK!QtV)EwS9VOwUu$@MDf?Tz)I
z8D*SH5HpByhfS_*s=#kKj;}3N+WI9p1biwGhuTMh>jzUNrAJA{&Y1K5(&nz9&93vx
zuRh<VfwW_2Pkw?&t#VN4nR%bNm_}EnN*Yzo<xJ3YvAk_D5%HNB!HRlF?IL9Fdg`a=
zgPB=sby`MycSa1;=HuIZE4ZZla#~6HqV&n-u^^>8Z%spetj|Z0VyBB*xqJ1TVMt$P
z=&}yAB0iboq0(1V6x&r4&`Y9EQ<-<^_gk!=Bt|qhgE?bil_pcdL!+s-@UqcGrtF7W
zlPPSfO@FL3`8i?xeM^02)aD^`Vuv(C1^59cKA&*?hL6L4)1g|%ZlWD~`Vd?P-rmZz
z=x$UC&b~wXcZk=&;s!Ks<0fYu3Qp6dEi3f_@g8!Ns4Ba8_5i*P|KeOufC9(r<js*a
zrf;fxc;_O1-oQW`SdS(Fy3;-wPmMx1qv7UBEQDQ;KB5!Hnx3N(3rNswa&x?{e=&}o
z`lP~n>eaZ$l(^{EE<Dw!RzRAJ&#FS~PS~R|R5HmNj&4B%#Bl@4J}lYf;bFSP7noPP
zsh#BYRJG_>9r|W@#_xqQuw@<M@^F+o+A<K)PVdl36lMy$PmOfj+xHWu7uu6}S8h?&
z+73xg)PQ1xgOoM@qZ~R6U8`?Ayp<^pm#RM+b6RM3+Vq}VYgVur5^i6m^7bNpH7&Yk
zKkt+fy+2JROq2>u=rQF)WS)J|qC^!6Fel<v^jJOb$5hMOA(m%XKYV$_>U43izy16(
zW?NZ5Hi4Y^d0G<p4Sy>f8@TdHxlC?IeDDKVCY*|o{hl*6b6qvag4!kegJLz2opmN~
zMp4fp|0I^h6w9h1JQ*M1c;7-SFk83yFk1mkYbvO+t$q|-KIoz5dMH<{2YR=t_{hOC
zVGffwAB~ir{5y9tfaXtlwnO<Tax8`8u)e=bm_PjT39;u(lY2a)cw7049ZBcn`1G)g
z-Q|(dM>pk^Bk|9&F2zX4gB>dSwe}nBH`#xOaHD=Q>jMm18b7NV$32_Zx-RIzUI%kz
zO##6TmY0!s-h#&uc7#dS7X)l1f_GNzm^D-E-9o}rn)bw{ie(W|@37|q7a!2;$opW!
ztLO8{-Q*uEzm(jgYT5JlluiV0i)_U)TkWwjX<vUYsgFt~Oz^Sx5h{bWtVut!piBJN
z0{gG4{lNvI@ImOjCAi53=mKhw-7-3^w><zaa*5dKcW|Cxdo?>gim<eJJM&n&2ZtTN
z7nBD84^OthQOKW(%ERU8%wzEgLu7T&fb!-CJhPYB+=h0|5I2DxQwM8m25M>t`Pdp*
zxZ}#-P2r7|gdaO}!bwLZ*@pmrZ!GN1K6fmksVdIgP+>^-N%l~r`o~vSCV;Om!4OT9
zB4Tws2oJ{PZT!e~JjHikB?0Yp#Pz&O3c~00f8dyG<KDEXWd4F;U&l;sXsXoHGSFY7
z4y~@y=uQ}>)ubfW*C!^`O*fbt8o{o+7VTHK>rzuo#4XQ85gW5>m-(4{Efz3R$Ba4i
zJSsIdu1U*&V>)wvn-)r%XFZ%bD~w2tWGos~2iU#?HEugee=G5r2b91(Fpi{qRn+~U
za?!JP;n-LAgPVnqf2P)lEp<+dnBp7Mold!5gKtDx;3jtxwcl#7%~q?kHR7ylva_3g
z6Jl~V#ZhcwC`5cR$$R-sbrsR5PDyk~6*?peQ<EH0gl;o}Mpy(T0+Q@u5Q>iw_gIHb
z0W`YjCx*Z=-&^IdiBSNwYQ%hPOw81-m#-8(sydhXM`L1vX6=`i-&!-)#mWCBTmM~L
z^6Sc-ZI1m8yWkrW<15+aEcGe2JlCW0=9#_CJe&6w^$G#p@xQ21*eGfczVEr=%6J;J
z@A{l*e$vj~?DzS$K~K4ppL_eWUs7iG{$R}o=)Y$UPyJGynwq%y{(>YHw+Sq6p%ziQ
zGuzrSVY_rw8>v(HcHgeYcs|Ex{?;2s;zK|G#R)h*@6lqrh8_-R=_8bpCB{5is#gt%
zly$BmWgY{11S~msi&p+(5eC^xWPi!5DEWG!{3@X&C9rGuDmT(n;_HFw?E+QX8Mmkm
zA1c9uaPdw^LDs0i8IED|>C?IK_XtAZZ7B~AFE>5Q?#YG(DkK5|Bm!S(lY=fJgy41n
z!=<HQke*Ay2+3>|M%m#EBt=1F3g#}p)Dq&8RJ4WU_KH*;^9S#%r<e5R1rvKdWEl8@
zx@5vV7^J8vqYNbDW(PS)90Ig^3qOnUr`2xXUOSEm4-aI6G}w()l5b-a*!(=U&85)8
zPt*TJsG7pL7fHwGunUve5)dv-BXFkB7_=?H?MoDV>b`bZ!N|o{-&n`Rp|esuUyhD$
z2H!6s>Gq-1Lq=~MsSv>t($QIa>U5a_b3VElrQH~u+beCWri|}+vlDSpmPrAS@X1Ec
zY{~|1l4<8#QI5?I03m7sWnGR1{9Zvn2AJ7+i4MRZNJCe)sHmq8m`#hDrnUlF)e{X+
zVw?oTjS#7Txsy7nBO$%aMiV3Vb=6cf(`L}bKteEVMM!p(Qz>EAgy868pZmJe*%+(>
z>z!Y4Pt?9psVnrNN8gih<j$CH?rfjj?a#uIC-EtF!4o@~2A7;7eezzT@R-ilG{i-R
z|D;?|KbHu(dOLqhyiTW$r<r?7^@uWKB`3gP-)qKMYo2Isd8AXyk;^uJyx=*X-Z!Y`
zx<);>rQDuJ_5`l;w~g2+z4auEa3-82*74)yLvcmg{?`^Cwcbb6^a|Wc9rFHA3lcV!
z+DD)FP2bnUmwy13qA1SlRl180v#<q@j!PW9;sb4K=GF-On|XqTRWe;lyp0XZgI<)1
z|39%JsnE|a@m&fmx^*3M3dj6x`B0BKp`<FBSrn-Eah7VkA_z{wh=&tWaYcRj!X2?9
zbukRO6F#V+;Oy2Xx;%vrSh>?=rmXph7f+Dyct=G_4d^WI!MSh?C-&=tA^SJI_pcfb
z=(ZpcizTrajwK`jz(<Hk0j{*_s#{SA{`~CIkSJ6@a#*O{)tS5SL&QH<H*}jyPu-zj
zJ}(q3jd0gelblSjDDMO3u$#K)6bG7YJv=iV9Y0ABI6Et&B=w)JC|a&ikB*#oP@!g|
zt@TM7nxtuJhgK;~)9HbLURSbkbh4t(D-pH<9FxIph1F>dVGg`VW82{a<VRTiPW0+J
z)$P<SZ+x0!k=;)Q^)QQ}KJi>wmH|tE#k%648Daaw5)XuK{pl$-ormP8%0R5%S7ys2
z`ly(E84HC@CClu*cJ6LZm^|AQy+#XzN=DUg{8+^O1V<nW*XS!c4X6g9%%T4?ImYH+
z?BAsU$=0F|kBY$l&o(!$Go49erl+I?<T(0ior%UJ3vSu4er+EM^XcQX<}mlNsTPri
zO0iIq={B<xU<-Z<izy8h%=6Jq3|B+Jdu+K?RBfrOwoIFJ-9m4k&NJXuTku>vg;JE?
z1s3o)Aj668(!5>hU)7003ZKwDVK-yLj4pDTxocW#)C~2ze&A*5*t6$L)eb^Xkt|Zh
znuv;C@Fc|9OD>l(B!vN9e-n7#xtwrUr8846M<DR$c>zL+MilEE=@5Ufqns39Z3>qX
zhKB(R1qZ&6KR86e2YciuEsRsDlV$RLDYYXiBgM*t<s%iBoFfuKlafLqD)Q2*cNtc{
zbgOk=(~%yS8wm0*Mtt63+O0Hpj${|kn*Vpe{aa4Rbz)|ny#-#5A+h`Wb9j7bJ}+ng
zJp}HFV`{%$>IxyHuf=QZVSNA27(!ma6FE5EExk%S<w;lw-cx&mXBzXu7=}1@&{rD6
zYzEGT%l9$}_84qDg>w{o3t<RrNBX^*wcbGV^u*FdBF%RUZkf+gQgwbNS1=MdBH(5w
zAwh13cXxAJ#sk$-nkO2YFigcqKWN7bzik$A!&$aO_xe6x339$V#RurV*d>w^Q^Uzu
z`BxU_Q@%xtrA<HN(cx0C{;9^pm*vptAoftH-Cd?FgcXeTRb?j=KgAm!wBcFfbAE78
zEjc}h;T;v_EqnRscH)`_-FmG+uq0@SfY7lpq8QIVQhKla{*1$hIikqi^(lD4!<j*m
z!6kc@y};?jEK5{oLKNk2JbrX|M8vu}HE;@dl5ozVs<cRLemKG)S$dLNn({NqSPl%4
zZ-XOTQ2*<*xk@HVd6k{$h4Ws0To0s-O&}57TRu87MS&aJesj+qTX!|HlV7-yUtFYN
zySb{^j$F&~==kJWT|1*9H)dpJq;HCfgm%wv0VgMNEknbw%ZYjK%Xs$vVbZ06W!}_+
z(gG?dUgy6JbogzvCshl)3LeY8@87Vd;Bcnw=f&U+SLU(IZ<|f&@ZZKFf#;f|{8mhp
z*p|FNO7U+>d?eFW`1utga@0}hQ?-^X{CQy%B4?7TbD;B`1?<ZO+ybtlj9Ol@E^r+<
zR#!^vp+SUnW+{rGr=%V~UO6m5OadhssECq9M%nitoJ@o14b(c>DcQ*=|5Nsrga0=4
zV)d0WFrL(5li(5;i%M`;BHdX$T{vo69_*KPll!n6TX~0Drh!eAEbht*dQA!MiL}jz
zz!Sd}ruta!?zzx28~o>t8?(3(Az<&(xE@ZmD8U7J;pxICVb?HOCN%=@YBQ|${0#uq
z*VHgAcm42Pr(@=SnGk|O0A=UDy1~hkj(QV7UPn_Ow3yKBwPsfA(9U#0%TN?(0Jz9s
zVbL3dKN=?$bU-SF0)sMK739f%VJP%<yyCz;%_cm-z{*vJmg=!m&5qRnGY|;vNDf!K
zNs|pqU+L#QDW6%$1tLt&H#K(#uA+(U2{=lj5>!<Wns?xlPkMlORvirzl2eP3Pk<y4
zDpNwzpGpgK!>0I85Qj2lpJ9c=bkS7(_(D~X=EH5WVvpF2oIveKdt`{oCeNkP4N9JW
zOkcUvb8~!FkWaZ!4^$DF?C-TZI$%)-@yKpYIw-ZZT>p1T<>~hjFH08DNhhw{s+8&x
z8{#zP`E7yNLC>@2{zr>?lz#Ri<+Dn)ALhq?=H1{g)pt(Exu$)p3_8NODEPf*#h2|L
z(FN11=Jz0?{<_<5^g>5l&IdG|Z@z!r9)W$OGRzDK$2y}at2PJD1(h|e|JwruP;}M8
zoW>vxMs7B@)?>y<FgGigDvd%S54>$SuO|h!14IOsNo0B<2bJzsAvEe|7^yIUfokxd
zZ}oAgFroo8wvs1__MFMx+UV&oVOF4Y6%wR?Z|aXy0NUNR_JmU3TOfk~ob4}N)pi|R
z_fSr3xrrk(hLq-m&e_9!Kx66Sc_(X99LzX#+ln>M1j6%K<-!>IaS))h0~4%TTPOdw
zXKHLflR*9KgA*mCv=ly?gMZj?y!uZh_oz4O#N0!NP;j&I+lJgs)3hj3-pZrFdT|D3
zlq9OCD2mV3N~SIQu<{!_Y5MdnVyz@{V%mO{FSk1VO#XP4Bf&g~CGmjp)wOoQa=3GX
z)@AAh;XME1K+;zYoDv8q2m0I8Ra5*Of)i7?YMBzAu$eVJzP@`W@V8tq?$&1bG>=(D
zzc=l^=sF4VzOyzP=3M^V7X02~AZ0%2Jy%Ef59jK8C7de%W1<4_I|!VUn;Wjn&D-ca
zT{uXqJ(Rawut9KXIM@WviO$#O>OWR?uKu@PqcPOY;U+x)K0MqvxA5za3dBn#;GORo
zuCl2|n>Re~HQw4N-OqLh<tM?XS=<InABGs(j#CwVLfTjaP6%ENsp(l)F>L=l;k@Rw
zb{++LZ3;c)D_-^J*^fZKC;2xjePrDXg@P+BNCJ7l4wfbA4NN0cDMV17{S}QgU&T9X
zae{AGI$IhEt@jtvCw-3-_F2NM3MT9k7kt!*LNIa}-V`%2;1l{3H-S~-{&|%M`W{+j
zw6DZz3w=Ruyve?X1N;`OFBaSk;69Z4^b7yLeI-gPDvsn9-V6=(%k%1@QkKpa&JMjk
z+7#-Xzw~jurAGI_5J^C<k+@^8suf>5a`cWo(M`D`;i=k!5)Dgul+)T%tng#CPdM;3
zTauG4t%o~N=cnWR{NSwy{qHdDOH0}y#B&LT!jlA4Lk7pon^Q}!al&vft&siT9_AD!
z8U+D12q54VaLbAEfAhfM2Y_xv;883)ibY^!1jii{z~B@IfEw7e6k!HrJ$6CTN~qbF
z0X^nH>gmTcYE}@7;F}SajYibo<$#?df-uYimkeIVs-gvD<AQl?XQ*U;N#qH5a<q6}
zf+?E)hcMn1V7#$`cHWDdJ9ZT6$_*|K+M)d%4N7Y%r2uWTy8~x(6w>ilu!x1Y6pz_D
z%m$9dV^ZI=^W!q!X)&Z$suCM3;}aUDC1pniRC-XCC#GZ)3LE3LW<*DaXSfskdCq9b
zorVKwih#G`>bfA&B2bpC3@rv#>agoHTBE~74_j=o%<P@=>qH`+vY^BXIbb}5T-3C8
z0Gj>o7cc(JUo><DG>+dmvRG>8MTNz2NF)7L`p+LW^BT>S{DYU)r2jtc(hQD|&~obR
zghYwq;Knb#qRg;-%taAiW<}|z9b-UMx-#^C)T*_(AY1oglhSif&8v)y_^lWE3v<MP
zYp#t)=iR^0wcun8ht2E%fEEKF_=k>;k<QMIb+scM3!}BUT5Y0E`%33BFBZxiNBeu|
z=|&-(#<{pigpjzndoIelEzrAQWqUUasB?_f(*1CFsYHDc#iAFWgc5{}@vKV~n-loS
z{hmV)dd`)Po+V1q3b!R*L8t|WXn8RNk&E`^=NW%Kyey6ArKxeTHeuc2Z%3X4nkKxC
zG?{3o=e`R7ueXM?5S~z9rT2o0e)O~Yz>>*#|6qtaYrvfRrFhaF{1WbALmCg-E5-Uq
zEqoqp!iYepE4Qy~`q{=s$i+PJ1O@60ut%5VcMYQYNFA}Q0KxO_bHwKZNwC5!Qz5B*
z*zSQPC`MV@yUXmFxdyi)zV7^e^ReWo_9tae@h+u}vudn^R+q9uaZr~ak(Vpu<rg^O
z%;1+a$B1Pr`UW4x;&<}=c+8ayf2Yx|%NE_om$w#sK~$+`JQug1I8F7?2ni}T3UC8f
zb*D!)jQ7k&Bb`CVYGhe7-P&NL+M(LeyV$r)Jbu(p8K`usX3Y0POYH+>!`1T3Gop8l
zY_D6_=3OleUSOO_;8%l;&)HE$FrYd5a^1CR+l#Wdv6<2C#%g`EzS+MynbKA5#%)XS
z7)@pPzRBXwp6td&T{irIIJa7k`e|^k4=5Y+I53w7yRnVJxjvZ_m@IQ!!|ecKCfw-q
zm^U1Bsq@DmhZzFc5Z;1D{bl{#hlXI8LD%15O;6J3nE^>scY@puA=ru2foW$r#&_27
zViQ;6PM(zi7MX{-N(;0Yzam}{<CmZR29b}tCRk3)Z(CW4r?Hs@yUU%Tvn-d){M}nq
zGr<2&H&(6`Z=~)2jJBRbZEe}mhxvYfiKK&u(D5R3rKwUFKB*{E!!PxmQQQ`sPJV-`
zB&HXXxmYdMfzgEHGiL1HHMeZ^msLR?Ta~SdzT4l6HqpobM<peCzWY)Vm1O<{o|JSt
zX6MZrA<pcpr43tct1x_)Te%QN<GH&623K;qmYlfbPnLw4az4(4wVOn#&srb#xTHIQ
z2HsBKr{BRo%NpJ05T{goRqNgnnrz<ReVRFe+s3fQa(?^`L2IRUg1m6=595pWW-TvC
zzkcQ18A#;}&({m+j+3~Qc`Y8erwd`;j2H)B!I!Xrpi6MSRE5g<X@}in`x2hrCMie~
z|0UU`0ND)8i7dn_9<T&+IFB-b3`8N05>f}LJ0DO4T2HNjJ5GZ%!77zkHYqqFZqXTB
zGO@pe=paB6?^NvqJI@j}h~J!t(d)YZmxgYzM9#>9`5Hc`3Hu@~Z$rqNf2Lj3#Q*C&
zR}YS5?u}7TMBdN^FLu7~C4@{k`E!!&`5d3+MOSnJ8<(%P`A5+0Zxziif&C=7djOP(
zDhO!uGCwFop%2<>n;IJmjVcNZx4+Y={nltnB$_Ga)L8nVV(iS5C$(&2sJiOO0&1X*
zot8$icRzAVpn8pHkq9y)$Sq(nLTK+IcSlF*$u^5kcL6*e6Hm}O=!a;h#d~O7)CubF
z#9fZ8+4&+hkr@gcumf#YAOVTeDyM9`h8Eg=gj9*Gb3@CYpL7&WznT9gtHyrewD2GC
z6RT(Nu`5uQ+8f7eOkL1o*o9fqA}D$RqJlxbB&lK1)vj~V-L3k6=N^v*EQk9=Y@x!b
z!r==NLg(f+9kl;`3naM)12?=}lWp;nVOX;%L15Ei2wI)sGCF;dSuw)SO)uFqJ1flO
z^T#DO&x(o;skfA5B<ideBFon0fU{Jph1s*!C<`s!aI^_CuYb$#|3^nFwMvMeoePO1
z^pi^c)R-v4*$^7d3C?BnI;i5hj-o{xQEe_I*Z%*+s3_5c;HR<j(#Wtt(vI39vdS>3
zM+Hi)@0;GAEoi9uXm7{(r4@xsyfu`+OtPa%7Lez)MRCGEsx)L}OytJ&`X^dRtU5vG
zFC{QjDN-Z%kI)>!oU1NcP8+O|aDl(z8$+AlDC!>*GJUf<S_mBns?+&#x`+{1m3cYY
zLy>eIbAG5QUm5{I%N^0qHZ;i0nLQj5hcu$K$!-djm*tX*1vSydgQKhGY#g=H3dq~~
z(s2Gqk3Jk9-;O!-D2OZ@jAYu2b0e4W+P)b~H#IeXjGo?PTTRz)DaGyQ{fn2}VapE8
zt<BX+C1Ma(F|ar0&4(3_oioyp$NnV|tWx<!9`FE3-W_dgZ_{({Ms@p`mwWM#jFo6I
zn+>Lhb)L(~t}CV*p7I`7n=6RTJ2%=A&#{ed;Q#Oik%%udladyVA^*^DqQIunYHwB~
zW!^zVy1o-7{`zfL)VJ-&jXusPZ*$b>EfAXXX05B*b-4fFb#jtVE#qc4r=~T}PF3&1
z#ieEO6NFDXzVXZa;`99A^6$x`^HxNLee;X&{Q170Z-+&O+nN;ANp1q8q)u^%FxJ1F
zqjpyASSC;Yq7vW52~j2xc!RqftzgBNEgVBD#d(YMu7m#Mbb}ZgI&R|?tW;u}%2ZM0
zN<PP@Ru*O1WAM;#D6(CLWR9nMIplBSV4}fY&zvC;tQX5>3i%si#`<Foo(HTsf0LAN
zgW5(E-$n~IxFjE*)CfD&ymSP$hP6<<g_J+S)@{()pE?v9jv)3bK5rU@9U5Ygz#b{}
zmJ-Ly5F}bpFjXksYykK!*Ma287PrK{t5|Q91!NV{5<H2(wOa~(KftIL-sNTgdkBp#
zdJ_77WL&_)YIYLa<dY-F4=OU>51Ak+NVm_|P`|#e5FJ0Qa0Q6Kz?|=qVOI?#vu4fl
zN!%sXL^(P5!8mh-&Mr?5;+fR(@#_1&R^Op%U+I?4i_C}{d%9ErOwIw@M#-QFTpIJ{
zq(@uQDeq{_7yeC4&T8<j`k=lF<We6>6JCm(HB}wK+R9kn;Z487`uN$*vgXO)(63JB
zI2e|>#-RvZTU-#^h=ZW+v$Z*}lev&0=`+gu47g1qNtnq*u~N6h6Gf&~v6_tviB<CG
z4CLdTvVLc;ZEy@xB(a<)St9J?jZ?>Y!llyrB}a#lG7MJlv>B(3+X#ER$Y$kFrJ1p<
ze;BYg83ydr=lNSWbGByC@M~7ii&PFT_oW;)K4Oe9mA;d}$M!v4L`%LfMc6KR&C_Y4
zUx}Go{SrqF0>>RoEY~C(PaH6XLu)_(=}`Yec`{`qEJ4wE3B}CxdEt4IS6+MujR87i
zhmC5>htg~>l{$DOhO>2qB`G9dD?>%n{UoV$tRhtTHF#^k?{`e(&csVwwr{GwwRy*u
zordIcfaGi{7`TnUz(Rlkmt^Sn2A?>xZj&9^w_{>p)t0q~IUf7ov|j1N3VH^K%Wsum
zfPR1yGlD_pq7AMnx75d6UDb~s)VG40(81i3`A6-eLENlx_1Vb8B<1IZH{0%7@X>Xn
z+5FrsoNO-qI)`a8FEVilJ*Va%=1zzP<GF?bs@~}jxJsIlxqj3W)yeNgB@?|eGVv1b
z?eDlGlh)bGYa~4*OlpC?qST5K-c!NaXa?Utf{~&X^fYs*gDmCi6R9a(ZTux<b4oZP
z<%cFp3a6z29}mu)$VnV}8S|{zWv<DGzt{n|Icep;RFM@Y@G{rps47i>u-a3d?DSY}
zw#&DE@b;<^7I?GT1ZVWOs<*Gr-L+_4N{I_={W_L<qf{BCN4<>p?Om0)gKeaY%WFxO
zw?s)wiX63nE0RtcRhXd3sR!1Ry8n|{zzB{$LV&F<!##(s=RRINwvx4KO*}sqWOCb1
z{m07luF8$R*aYQA3wDTx!@PQC?$*1xsrQpaSB#-j=)}dfj@^mX8ufr_gfBRimjhw}
z7`Ljc5#9I@7B?;){t*ry#USRQxl4;34%GR%hr^pQ{hBeZInf0(o)@Bpx`+_x3_7e~
z{i28i)dICD+HKRp4U~i2I+yu@AVen4Wzl1j1tX1Yz-}Cw9NHjtD8f>_$h0^gw_J0T
zqTeR+!7bx<hnD}>k(nu`K#WZXCKX~zI7J6cSH$-u;{PLvS{(!V9*I~bkxYi41H%iv
zkTrO~IK5+GBr9Q{=0zf960*;(%{P|$<;TC;ruRzOF&geK_pXBMTlFFLT+DM%pFU7t
zPaT5y&v?=@MR7-AKua9AQr|GQe&VA;ilat!>ox0u?m*`0nw$r-oPt;5j;OV$0Y~<!
zqP|%UIL3?Nu{=!K+Rb5MX~0j-;UpsGfz{xuE)^fV_|!T4T82Pf;Ed<d?{eJ8QdO2S
zUZriFF4fcchbu;;guy`q4>6<2G`{L>v1Sj=G0B<mOiU(1ZmT2#gnyIr{|KgdXS@uf
zFdc?3MWV6fB9_~T2yR6^Dni>Rk`6ZJOEGoeXo8iEksw4n9gkwABK=gvtca?7Fe*wL
zh<AvHQL7!ce#3@|@KHftbRSn|yc|U!hHFTCmh2rKCl@p5Q`XG9O7{@376fO-%Dj*%
z75rR2VW6_c3nb5D8kAyLma|Vo1?%&2t4t|o8qQ>SJKr}yaHeP80fr3XO@g799f-77
zYP7R{uXxsW3@E^%UMh7D%Wh=zqfH;9;4n`IAo&04>#3IO$$&~<^K=cx^pz4ZcWW>N
zfnL}qd#_i|ia|KbhX)^J+yD@O|M~!sKv7VNVL96K1uKX25MT(NpwXm4rSR*dr+@L?
zNeV0|FM_bc;~op*bP(+cKo3An8S!3w{#CCWQOe(&FovwI{V=T-$EaD}fPe<fSIB=|
zlhg6K7OImq?tl^iX~m8ID*<YO?KTJ?{JjM79ktQ)$Kp4duiW4?-Nq_R&_7*XVu&yy
z2W&WiT?O#!&0XCdHHF={b5C6%SOwSW%b|$?D*tQ0^PI%fJL}e^{hfmt&{pDdB#EFG
zlE5i{ir_X2!iZ{vppG@7WC_To9wJ)^-|+xqz+h&9f=a2FZ3}@jaC1vpUO9)2hd@hI
zs|UP38!0sgNLrwQI2eYITf8uDZrmTx-wF!+vj6<>Xl-ZN?p-b`l}ejYPw|i6VW==S
z1nvX7p1@#@G1^=|lZu|SQeOp{{k%VTGq0R};a|^XTl{a|c>gy^>@6V*bVBC4+1(=^
z*vXr>PkSGxuq~0dPYr`wuQAl@Ke0lc^Y9g>4_s-0DtyXI<N?@c1r7xl!=C4SmjB_5
z5-tY`v4>(wk~l%Jq$7|qKDNG*G_o!A;l^kbAu2wT&w<lsT3ek?;1w(-eMWg?gy=cn
z>lB=n@qBHzPw5%zi2A>9wj3mhqGft_S7=D+wLcS-^{TWIpWqyzNC>jYK)pNldrpZ>
zkY1h>>{F7as^@&EHX85Rg6uL2INsqr!js3!F+@!55R%s-f6sZudc<+qd13JELkaU8
zD~<JznL=wLNk1-nux)WE;uZqa=|7mw2a2GrFEkHml4!q!jCd(yb3J#o<odJ-Z;ILr
z(2S_f&+eYWqU<i*hxB_KEg7xt`&&CQo;*Sn&$p&#`$R{VimmYxy=Fxl=ySn5yZL<{
zn{#HLxPAm2p}}$=)3OcO)de8)x;joh5TXuQ&>y4@N{t9s2lqn@lJd{aM*7vjF>gb0
z!!$qDI4d=2H$VDCz|DDgqn+Z_pXr2s{UC<-alRyY=(WJ0)Td-b7{o~tWuYS9Z?E&h
zkehi&^Y99&^yK>c--0Izhg)YhRW^v<3qlCq>B;FTmhUUx6Z#bG9{nE8{$y=Yu1xcR
zwqm~I<Lku=LWCWp{xPlj;?P_*WleMzwR8{a|KV?DpS`~%yz2jGOv2oTdy?G_-T)4r
zFj-nrd}dZ3wZcB%r{xCu`>&Z3OWS4c8F^-R(fH;Xt?og((JtXwmMn0ya&uBvPM9)3
z+fe4G1pW)KEr+4(72ed=kJnb3&#B||r-ra()q&5@nKEK8sTYk^CLzd`7{MCS8uNcC
zGS+U2p%<0VA%qgbKUW!DD4=Sg)aTYp5iYEz8fK4@Sz#ZZi-0`u?QYnsf8sHrm#`=w
z@5vqi05H?|(<u1pBe`5j$>`ghHJ!OggQXHPd30934M7Z)ddTD7KUFfnvqfkuw|ast
z>Byz9T{Y(Alx8thW`o3hIvYud_JldV>^xA|;Ol^9H<2%x&p*y-m`#m8lb;BBy-R|G
zu$*L1fML<(fDi`uO9&=(^qDiNltLquJS(v`0?IwYhzCi%%J}NmIAg)E7Nh$Zu}9*L
zrNGpMhL0<<J(R^sARK5)QtK%gq!h5mVjdMdGK@EbJKiq$qsRyP6CC+{%-~c2_Lt1-
zDK=-%7<7$cP+$nAwyTF~pXZqo)JY5}q-Y#N#E{L<l`HI1RiWw9vj-yX)sGF7<HFZ3
zBFHvJ)=HxX)$u`tENJ<qECBG6ymj(1X=A)mojyk^mAo|BS}SiMsD7CFByJN7Mcv!Q
zyCo;AxD9a1$6_y#$N4zFbJn6I8;JZ90+JdIED|F9;@#ue6_`QH!f97v7-ZEZf&bx=
zg=<F+--z<p5ncXq;PQd^7FtnEj-gfzTf&yCo#m!X=q*Cn2sDQO2LXlA1RNzvRq%=2
z6hu2g6=sZ-5&@85dl9?B0Gy~V(})K&aJ$R|arm?<4T#3)66hRFXpGuIL9r8>!5kJC
zhtQY;7svTJZZbd@q8Jr8sb%%Fg(sqThW{@GASh${BDsJrLF5)7Ff6Kc@+0J`5*df!
z<_J#LofKlzS*LX<thw5%Y7x89xz0m1&uJS72W@7%Ct93t$F}1vR^q)}z0X6X_A%4@
zAQt}#DJRS*Mh{__hg18pW=c>Zpq7ur;W1$4sW!BKE`QaSY>wq0-N%p3jjVbn2VoOl
zm0KTJ8(#HfXzv{N`+tY0IYBXVO;PfAOzN!JyQ4ofD5jz!AkO;jyp{5~w?Vq%RR@Sj
zVIx{M@2EisM|KP@`n0t!f=%5v6hJUn^{mL{&)jmTINhZ2tcXrXs9vx=I%POMq-L}$
zW7?gJiVc$~sml1%HwP$D@5*`SG3-HF;6o<X>^QYW#+CAK4wrlxH&quhswRF#RO;H?
zId<70`E~7XaowRUv)<N41vfc8`7uL(>jlra$6O?FB=fFxScL4!i^f?X=mO3b`q{hr
zd}mfsW=ng?c<bDZVx{U`(v-Nksx-sTnxh4cGCz~gG;4bi2m-oX_WQpE&TOdi4LmJi
zqncImFXg#o=tFJawfhB*5H!u?`^OBKmGmj|)p`H{N(rW_I7@6_<&+JPQczDAE2bSR
z*oSxsP`+gBq$M7dy$&cN0-y&)^EgeKztQcXU-oTcSe%#qK_dc21%ouuTdhn?1_>hm
z)@3~|ngqB_t#LO8+K@)MNABdJV<5X@n73*b&q*HX?vE61F!rw}Jy9Ux<{$Uin+@-R
z|BX!Joa7w6br*g2fNe}AEa6}OPCEgn4&om2anhOGdl08PfBOhug(DMj-?35l&M3C}
z!N~p_DjdtmJ!PI$C;qX}i|=&kL;(8-<GPbC=9UpporYj4A}ZPgr}_fp7+U01M*2H5
zK|DfDE;sxhT}QWPVLqg>s;Eeg14s;~i2dGbGT}6)r=b^kS#QYoiaSu@L4QaEBB@^)
zDhwFBSPZF3=|1tkFH|i>a7TPDvGM80oi6+;L+?Yvg~s%01kN?l%sldLm3HkO@1ohk
zPg?>4Dxb#sPq$i!Ej3PAMjg|y5jn2>_88Cp1+gF;(epXf5wxv#1VM!@SO4uGJkZH`
z@el2sW=7!nM!*<V>bM|xOE-z7xoD@{W}dS15J9kH6`Xbe4t^QI(MW(H(G}Z+*g1t%
zj<1JW2>zzvo?JbX54HU`U98<;a?z~XtSSELECn|??0W?CBfJF*LK7qGWm2Udkn^z|
zd;C?ggTkt5S2I>{tDPCWpn=Z;y~58{E>rH}qLq&4Rgp4L|2To0XeDieahrdXMK(TH
zD@j!)Sg~>oink2_3iN_!;vJg^3cyh#GRuJzR;<p<@o~S@QU95LQm%h(J~`tT>q+$F
zETr)a02pIgfLFDjh2sNt&;~sH%{M0L0N=54FG!GHxT|84&$A0lvDIOtr)DN6(c2|w
z5~j{qu+I<BrLLe^jQ#E|KW_jwR|YQrYFx8gt_p>Z-}HR$&Sk``)(R5(qTwzA-1Pqv
z%OsOMxQisFCVl&+WINq(1k{rjp5&fg0GY7mc~hp|v{1|ui=g(Z&<FUzl=9~yXIBP3
z0=pVja0+L`c~oB-i-Ak#69J*rx94O~DGpAQX#g84qATY~rDoxYgKq6WfZ|){H3EHr
zMA}We9s<UF8p<#}+7%hTiVjb>1t%UfS6s)H!h#(ki;^KZNrTe|HHs<}2S}2T<tR$!
z7@D=CV<US<P^jl0KkA>(^=XkPQB0_YPEWAi>10~S{&C9~O|(h0`P`@C>UI%ayhek%
zgir${jzCO9tY-_>U3@s+T_?{{-EWJVx7K>JrWWpQIRG(0&cE2}61Re2)GM9I!o+G^
z|MpfxASSkpS;(RRcHkCOT9Z7<SO%(v*c7Z9ht6=)Gs#-1aRa*}N&v__hXrQcdP}ZO
z6ef4xKr)7>@w0OnosM+*g?cfBti>DgPK<DRhWbS$nrO_m`)R-??;=6zzW3v^2DTF>
z_@)?sf76zCXsodT+OAC#Y0?)5TJHMO?mrhVwcgB8B&jpv0Q2?M<|`!G%b-`TTSm$+
zcbBe?HI6!E$JpyI!LU0O`se6mQ!i-?g9AA!$(@`KZ$2cpaAY|*;ObvBGhm^B9{NP$
z-5CScOzp3#npashU;c{yYZrW&>4HsCG+cv0n5(9_?=<e-_=&ze5{zsj%L>S*CQ71$
zF87Uw4&;JenjCja&?%Qsu%v0dHN_HMFfsHlSlx|PV=TqNtRUxA&FXTYr?6u!+OtJx
zfmXy{gxsmE%Ev^df(mB<XU{m3c>b%4xnm<TZ;Lh&{D-Ed<e{G%QC5=EFh>D_7c64=
zwA^(7LG&|Xf-&mIXw9nM_al<P8E}fQ=g#Jt)j%tOsF^^0{&TdB^4F$2*M68$gZ{iq
z_~@pu0nYfzoC?iKL7ox-?u4a|Gk3pNhbNN&TYzcNY^}Dsl?LrvL_2BxLq*&W3vR)&
zDkPL~HPA#4d#I;5<8OVPz6>RKK;kD!mE1Fk@m#~?e?MR^{&X63hN~&5p-{EM#r)t<
z{~CZcr%?2XWT7pG`lgVKT*)c#B6a==E*Sd3LP+zpbKxRhtHbD!p$UM4^B!xo_Z;qZ
zHx5Ar{~r6&%XN#g3aX02`-n|_KD?UU5V!}(s|7>f!8519vQHX+S3#f^3&d~*!~_rU
zHBZbCMdOc{{G1}b2sf__plm6tG<Ndcf1&En?SK;lYa&PRjfCHw6g=D4g<y+608U+@
zq`i$cE-!l!?L`3WS@pUoX3t1&UxY(I_Yrq5clbJN=|gJeMY;*p=nSwY7lv~Z1V>t>
zzWD7-#BI~#NfqA-JtA#o@Jp0QN659c;M1*N3v)aWcts?Xs|8pd`BFu`F;g$H>eOTe
zl98gcvT>?M6ldnbfj-F(57Z?AA$R?{@<lIQ-^37&yv*|s$QrgkS9i<<fV!Jh`mYU4
z8!U(jy;}d?)zJ6Kj@Ofjd_&`?F^N-)W@f??fyP0~hW}a^i}IADf^y7eI;t#UPp5Df
zyx&?^9__Z*(LL3eAk1|7l)CIL%njolr8=#`y(~bP4<iN_L+ER}p~o{v{En9galFCd
z<8rJ88jxlE<AaX2t@xa`z_@_N79EzbLcDz|e0`^QsrF6{z1U6TZSx3j0HF!=@-=Pf
z9d2)5<bb6ACaV5Sz@0zqJls!~1mTw74|%FGphvaZ-X<X0=YU2SuC2Mkk?m#h7Ek}>
z1`9Z!fllyvQ>Thm^^Uq<ehj711%5O4gkJf6dOeTl%9}*PraPmqN+j%V(n(G`OwjT6
zA3SXVrfOWIiJAp0jNs9d3&mvD&WI9X>-fkz((y4?TBz5-+tHtfQ-@!daoNU3$~$10
z@4cpVe}wSL);*^rDU$VA+xp*aalYIbm$nXE-z1nOoHmWW`>^4_SumK9^dgVh*1_|`
ztv6FArPVx^>Dq5HruL;9r>Xs>=sgvvOrh=rZ({&F77H)2PQ=Y;r@hA^PV#neZkicS
zeWw8cqvu2dTu+F+%@36&wmp{_G7-M}0PwkNUk)c(XFVa^<!(23XlCdv$yXo1zq_4L
ztN;w-YV?a&^r++TR>#WBkYa0&i8K{|(3V=V{eJORwBqj_^HwZ`WQG*1T7<>o?}6y&
z2sj!c;PuDQh)5fX8OHwY3`e6p8AZ_{Cib^BB!eJ}Scim%U5#^pBJRWYRRLan@U&=u
zzPI*2@fi3?%X)j%df%*!?g<&b=8Tl}7ed2P#F(2kbZ_ySIG7rL)n&`UT`fI^=Nje}
zFT?AHGhT7*#^n^YA;Ul#dQ`V}2Tkk{!&%l`!;9m{Vxf$KjtlLRW`<8!eUbr+$+&v_
zO7(T`j<{;Pk_YY$1D}7v;uY!O*B9=$_^$r-6lD3D1-rE$LH$+8s9-B#>a<)b+bscs
zmbm0TkiEITAF6zW>w=piC@`5ZC{%{A1=Psm9MR0cpt^6Wha#k~TuTZIfIM{`PWnB!
zthwdNtKS%k=!oK+#ubd;UR`OKUB-FEz}BQ#U;Oj>9mm-@Jj%&MotdWOynFr6-?O7Y
zgcr8vGG<Bn+pL#em?|fVC7ijKGni@%`hJ;&JX>-Q-x-2gjtS|t0oA;H72QVSQQM+{
z{vu$D?LH&%WcU(U=XvriHx+M1Tjp{bch!lyue&ju1;tjp+l$z=?j}BW>)*L{1a@MD
zBZe}uJm9X;2Eo4DO1``$ZJ;jpF|bZf+3efP=h!S-?NrCSCB4Pm&glNQTm0T;?>=6?
zBVqleM^wv|cbG!n!M(*uZ^;>qxxtjN_|bci9agSsokj>;)m2JVLswC;x1clA&N$Ts
z7df4YxiP*%>VQ*}`M^2Nvfq{$Z~ZHEi<?9@tfMs5Ly~Z}l_l@&h8OND*tc-ue;vIn
zYgdT&Ku8+;brVGs(8N)uL|Gm%%R<d*W@~O8>GlZBK>!mWWs%|a>V=e(-UxEJe$VDL
zp3?qD3)S`EzD$=U?V3SHlvp#6y1cYBFYs3oqvOVK&9gI9(QA?DKnWG`8C-L$L<Eh&
zKSQX!BW96qp>PF3+_JgEqtE=;nSGPxe4x~MPzYq*WCw1Cv`*Q6aLv;q2?dVox+H!A
zB-VDRow|za$KW4zOv;99Q6+|kFXemkaE0@4CIh=Mp;BlUHYpTZh2xWBc2=u0N9YO0
zTCC$rq4HtNIWq%%5gf8}^B4<|m)MrLd5(GcR{vR}?cIAz_J=IqKJsbhTXzIex!Evx
zeGA^-AB|}7LgiG#P-&lGeBoFp-XBpyi5pSqt%P5P`cH)C6}S3sKw8DU`SK`kQSI7=
z9y_(0dqMJk7{S7t0MFf-R7g5y6d!R51*H?_JY>~9gCuFGTh7||!)#jiqGRyjM@}-8
zaP^oEnnIIe{o$FvsywDr`Xxc_pi+5eWetggioKWfi{VAt3gv+kueD#L<XY!lIcOTH
z9<F&<xiFrz6@2&0Rp#2=#&vumTsV9q``60(I)VS6ln5flV^~Ts-Qt(i8b_Sn$BgKX
z(s`0JLLak&CF}f_hgZp%Jg$xm7HI^8c#3+HcN3oHXG7xi>UWUY#Ulrs1dcQ=9(4b2
zpDG~9gh+Bh+ouzm5EU1PAWv&auO932h=%yzGsgvb$4jet_FY|wqy7<g#6dix%r(MU
z1bg3rpS@!>0`ngIEo*Lp1m*UkV|FQ#`BNtXm3ZYbqV1?6EX8U2u|D#<^u(1rghb_%
zSR{6XwvJ-(|Nky!WwDT7QdX{*U;b<Mo3tN6b<5FYlcAzGvUDa%=?eYZSZ+?4(VS#5
zz9n4?(YqHq>dR|m^cA&w$IH@C{g2tUt}3OQw0#(1OQmg+jnV|0BUQXKpgyRrwe1o5
zB@?5fC_R%<Pk9SiiUodJk~Nxt7=nhhCkf`|Fj_6>x>Iq@jcgK)F9nS&8lb*LHu>rU
zhxERdQrHYqQ)j29%>JnbZWOV4-;)~Dn|6L_wO;sSR!385;_CU+yl;3;!hi|fIo8va
znsu$aQ(Pw&Od7~(;FFhqzv|j*$DKO?RQ!~b%LmV_uGRz9a@I%(-h_fjvL0!)Gaf`h
zsVmy8=Hse7$YNQ7ZgC;Ps-@u9PhPQK`R}scl#y66<Q?g7F4+*G=BHBuq#0sa78K*d
zer47z6hh$iGnVRK7m0k08V7LhVgMB4+u*kRbnEq;)@1;|y3cs=I=+9d>U`S+M52hi
zJ6*5T->DGX2CH3Ju=k2WeKh@++zhj?nvgG|0#MN?G|IJ#M5??)sR!440d#>bI|D$~
z6ID;0Hd!12xj<lyWc|W+p=c^Ha*@wTm%*Ob1zP{ud@cG)coy}!d9fX%W-GCHJbx@T
zhO_2%fZw^a`X4Z+ZGBsNr@L>CnAj^zUSIJ_Ac3<Jz|q66{uJwHNfL_F-A=6}2j5I;
zywZQzb_bc1SeU-cKj%FE!SdAAW<$|CYdYw&PZ`B9w>UVltprna2kig;?(N(X);Os?
z&^{q6KHJ{H`W3I|HQ9JNI<`UFDO-sl=0~EazV)=nwp1?}>u}1=TPg9JA!2<XE~H_D
z{WZrX(>tbx^`2EdkLW$br_4i9r!bfyHy`ATbvk6Ag4YJj|JG>66k`<k0Jlzk;O%4s
z^mn<_D+*#2F`Ax95_-df?xuJaYmj0D5dzBJTStR6S(&ibXdG%lafz1-@*B3V?l?L{
z_eEkljF2_i>YOVX651S#1Q}Y4lKN<2{uE}Xqi`_BZnAOZ-uOsP*nO!D&1-9ohQht(
zO4HcqaOB)Zow~h^AbtZ(EHqBAsnM4D!9kqbPbU6TOu6y2!BDuJWD(pT6=SDx%yq{3
zN}g<5ETh{GI2%v<+vHC8%vhvcm+(=ANN7^2YBZLC0gG;sm0&CVZ{QDJ1}~sXcwqS9
zcly-*FuJj`bjGaAaPZu8$}PbV6DRVA*i+;*&zsYCh?mU3Z4ILhY-Q`-Mc$=Q)=hsN
z?M1pj$nJ^F?n;_b798zN3i0v3a0bx9%D%u~**&h%<VI4sK+Xx7kkB&1g47qrzp2n%
zozHN()6MMT!?c2iC;;?+SC$`GCSEqQCC!{?%8OxfE>-q`Oi^Z(eVofLxks%?<$uK|
z8rzOv^HWuKubd2;mfjL8O1}_bAG!AcY0<Vfk?#tZcD6V<M?~JgIrFn{R578*b@ST8
zGQ$b)qy!whP0d%SQn=t=h~{d0iqFwn@(lFZ>m;qiD_`Hmv1!4<@u}AJ_iuoS`a_MW
zvRD}2KR<OB>x2I}nRDD~@5iOniiMu%{<^JKqnuX{mrMXTMdpL#7pI$}8_NIap~uD|
ztN0&uR)*AMXD%S7mGya>w4qv8KI8_+z=MIIo59-LyuMJqBg6gvJ!D%N{d6^3!hDp2
zBRk`Nzkcaw=(!tTRs{ddwEN#lezEP@^4MQqHhf47i&VTj_mUu0sl*2xoxF|?UixYE
z$!A+berDLdi@$p#@8;=I*3U~fw)CC9@xV6q(je{4KmM6^wy7Dm;Cqk?d$6NnC#Jmz
zb3h%m1U?=^O$VnVdYw1I>ppm7Ek&ZY&b-@BWPbRZV~3u`%Jm<9%oeec=YM-UkHmQ0
zM0tSOOAi*-pI$AuQYlwXCbb=}&s#iHSeOx2UuZHUzAkhs6APCXByL=%NGz;BS)Vt)
zBB?$-qA)QlJ@Mbfu1XZLaP+1%8x!j<uI#D<a~%|Ng;*g`B!_sY)gI;XLcB(J!tl~<
zQCW_C#qsbelHKm1aNmqOUp{(!dlKbq4PT#U8%)VrRK4fVcfw8y8J2LF??=9BV1A3t
zh--@WN7R0Dbfg-d-x3SMxy`9vb4jBynK>)$R0Y&6TSg0sg8}V1$Xdjpih(^Gh)#iM
zgBxhX5SYESjv%QNA+&~ss5Zk8Zv+h>W?GJqA@V=lMa9QIfaWiL03EKV-Us|sIH1-5
zZ9}Dxt8tKl3$Mt6L0f|+GhG(UE#a^L#25lFYzicKGM*K<!on6^P0!lf6WrOzv0siH
z`TI%AdB|Qv5XWIruuaoc4RdsTi-2TVh%taOfQRrnuf_IpQO-;mIb+BdW^(wKc(fGf
zGE%C73q$4-oikaF_eB`!?bDm7)%E|)em*m0euWH%<Xo7(v%c(r%{uPd?&=x84S_ia
z)yjyeK2DvL&tKS|5)q_*Xv;(fYnD5_O#Rwwne-e}1^QFsN*47!jG{L;?*;#VcK>ro
zWJ7fN@6Rvb`hUc~wcmZVxRLT=oo>jDyvvIxk&gJbr|Rm(nV5={;>{=Qhkl{_Vj0Wu
zAMQ!%R5;upkE@WIB09Inf5#wQ1!B@;RkcGL8dZ-Pn-m?6uo^Np7Y<2?5J)~EmBL8`
zm)6OGLvUY)CZzhZCCzRGPu88;Y{@YcydEyJLr5a~MxIf?^0CLKqYyPzUWrf4Pu9fg
ziu-kFvKVMG!HLq+WH1p19=F_W`8+wez9YIjdT~KOk~bsSJJCJG7yM(_@axveaRge6
z;DTC-?xEwH^x#~vOWHJ^O`(=rM73-|*5Wl<SS?bMfT^WwYRRsrCIMH=)MyE{eE#M%
zmlC|O{GcV^m#j&_sGME|tNn0E=q1@h0jI_<9P&Y2c*1+1Y4);OspI9kN=BlASSvvA
zT2vc?wV;0<;}z*jlmTJWY#X{fsk-fRzHP_w<!wJM8S_3wgj3lt2ShQ9clR%6*e$#X
zDC7XP0*SqQmw=LJIYO@e#fcR<Ds*fJKn{eMTfHN>`>Jr&>fRQ4xWOf|vIW%DFtN5t
zp%tq|UL50oZG#jnTNRIyi<xw9fCy4b^4FcH9kGqx`Lp%%&%iH|K(l3SB8$n?o7Y;*
z0pe%Q#51iwCj$gKYfr4Jl{mWbi3C;AOf!yc)LSbyEI5MCKYh3H_TBG1rR}%R_(ZV|
z1~|zX?lWEYW)1qnmZyC2*Y(D)CX(>)FWAs*H5?i<(rRkZBwrAcA{?|74HmK2V;PKp
zH@h&kg^}OGnN4uBL+S@dbvne_1^QZIOV&-LHWM2!Am^cNBrcYoq|TMo^l-W&9kxhJ
zgA9;{Zp7|F7z99LWIMqz^aci72Seen%-@@d#N|K-peO`f3rVFga3QTE$UZz2u^)9h
zq72noeH^_K?cg6H@Hy5~2w32u92?w|O0HD12v1wtM666j>D5GS75;XL0tFHJKJ6Y3
zLMreNVzrj2)}xA666U9(_;PhVCA!U(rj@oprd(eS)Gweh+tu|QrkzO>%mX<aA#iXW
z!E+|A*#GoDI@i=2a9AOWLOBzA#iNQI#1PFhk%dAa3SHI`_XW9R0S`9(|9ielD)BTk
zKC!=IGvwv_Ee|6_BM9z7*Qa;g&^V~vglWDC;?ZQYRTKaC%S{7BFQo$3uI@s#fbe~c
z@Q*-jNd`032)Q0H_!Nm{SG<H@@rbwtwKqyY#HK~#w)F40fq1NMcKC9q{{j<{k%s+z
z^k`B^v-R8o5etqW0oM@ErC8VcWj~HlHiE%1`Uu@Jki-moP}I=xKu}=KBS$Gk-I|=P
zyM@1C_&$QV5Cz{|l{nH@oK2n*74BOJARNmfG^p7^ivW`73^KWcMmvarA5EcxYv^Pt
z-LDdoOk4a7SBK5|-X6?KCT0-kci9M-(+mO&fsL2OhWiaL&>9I%2Bguk6!Z?5_~4)<
zx)*_I7=ZgdRX2(TS86LPjXu6{v3}CWYOl-EFnhnN(?&5sUb@mKmG(-E0eLGCV5f{m
z1A$pIrXG$H318C~2v9CbF6v&g_>A#BP0uS3R9m99&r)Y*sFWY>cVuiQxM-OM6H^S1
z*`BdcuRdF}I7YjwoK?O{8Z@Km)_}rgKWm?}_p1F(GXkZ%OIRhVwa#TlzYQsz4>YLA
zoBpP-DIUPzJ+moq9m{?5e6k<FYif0;olhr5>K<R27M`ffbjmVWG;!~rY9b4FJ0B@D
z_^gs?AlR0L;zxaF?{eQ&wxWhe%9CKA*%)ME{`|uHb1W)t+1yfz^8=E9Jb;`h)yH3k
zh9|sZMIpsL9!4r9nF6tYCEJH{`a&_pK`Yd?^NQiM$ABoS1{s}<a>%THr*U!%Dhvr&
ziR0@Tu&gyai9Bw21IfBw7<Y*fR+!b4?U`dTj18rh+nWE&V@bu45Sb`W@mTpQes53p
zsttODztS^Un05Zpq!^NGR`Lwljq5WqN!a@y*)3M5*G-fUW9EMx0HDQh=71&bNhg&P
zu14#N;>;$c5%`@VdHb`2DpCZXHEdm_lfU74rp&u3eGRA+U7=DQ92L&<83#@PXbOd^
z{C%|wm52h|wsXm36h%c5k6fNFIrP^K)SW$W^kjuNihh|O@zMyK)wY5SaT10}W@5B#
zVy>gxn+$lRH&<apd^$?uy=3O{+0ZqM$S&Y<=jf=q!xd2&RB1y<avbIJ>?Adiw%N{m
zxVHwl0Y3r9j}x0pG?inBq9bVW<J<4^?EJkuM&}UD^^S%lIWhrmBharNf*}NM8>lJT
zb^?ceM)(ZL97vg~VstYUJxmV)G4*gNj@ig2@Z|4eB_UJ>6|>xEgX#YhtLUOI3iDWO
zJ*0HABzepb5`wV+%?h%>X}SOo5m4Y}X=W1gcZ!1OEqu0gMOLGbLV<(kLtEu4Tcs;h
zmh0N@;26JpR&e+#>JlCz>0{rE^2~b!tSA&rv^C}BgCIDnF^VWkIRst@pdUaEDE9-a
zM*2lw6~X}#5`hje6;<(v3GE<rmYYNxgH-l%s<VnAuw%jy3PMjY4NKa)$r2A6Is_13
zmj_Fx(2Da{_Z7qavf)@YQ%zTU)9Cafzf6R}lj5i-rjUp$(?Lg1^pqoD8E8&o16Ae^
z2=pIGHBd4&IzvZn?qQ9Of|o@TD{qqI!<kGYl{U#fl*xRNk;5san>8U@5XK`8Disrs
z13U!i#e`46Bi&zviWDdJB`vzyta%6k|1dc%b|tTFN9coC2&*5UmiVV1kZ^{QFJ)Bg
z6inwp#@51d8vy|U<`Jl3T2Cszn!l-@l1(nmTWk=Xj`h%SwK02?NeIHTXyu6$L4Ktr
z4z&F?a80tv+3Z&tA1vVVQ9K6#$RtPZ7B5C>DLnjN2lA(XPdaU5A@TH1FZiS)hF1yE
znv5%;#|<>*5whr}nP4SplRukXcF~|_p-Oz8o(Wuy>qyX=3C{upk4)!qlx^E$SS;@H
zwl+4V?`TlqS6hX`VkQg+M&lhDP-xR^gE_G{2&O>s_Uhlxe4hU<efDCrxw^!@yRb98
zxvaScnX-M=>JvE%j{e5r?xE}Td)0~D(A?{Tdp7A7l++YhI%cD6D-*Rf<+D<=az0$U
za^+fk+`hbgE<%pP)mgwfZz*};!Gr$6JeM(&_^;~n-0Arm?Q|C^o6RxhoIxpmu={xY
z3WfaW>7bieB~nIcgGw6JWNlCTYx?ZQLLE*p;!>U4fB*do_)OM*6DS2C+gCq~Q|g-{
zAK%n#c5H>&MwVluc9JiWqYjsD0weLOp0PIb$5}WvU!{{vRRlEW2hcPyVHHxPW}sO(
zlSdRw<vJB#Ju&cIG3oOM4DHHz8(k)(pJKr~KKSk*YXn}yF<vakN2yv<VV+xX5a2t9
zgh7$3NX!xeg*KgFweMxDf~AbegQunyo)PYk)x4K!2L(UHzAMIe|GS2w*-rP0|4b)(
z5A81!FFDNF_O>+|wNXQQPRN#U^j`zEY^_U$ee8(w^;Ch7gg^3~cnsv^Dq%?Dck#D1
zx;?QBzHHT@HG0dwh8081V6UIzfn)-Y8ohFL$Cb^_Tu1SN#7MFABrM+R?XS1@A%J)@
zkGGER)jY?)a0kIOFFZ_Em3=YX8V<pdkngzTUtGMg^_TH7z(TO#(||t|!WzN6@fy3L
zUA22jVB+KWB-qMlYJY=9?Xq4>qVkJA?k+-7H7wHiLkNj~wr(#30S>1&zK8Z$!Q&a~
z;WW59n*_>HV@w2Q3m_H9;qDOtekJ~Sfs$ZEuMiLr5RXwq$k{O_I$EX>k~lOTr~2T>
z_RZ^md>U{Nu&wO=pIe9PJO@i05%A}=51R}ck(WP<<WG*tt@K*TfIwoB6anLyYq?12
zhb7&hswMqli?44aEG4S&q210d-=@nw;KU(WdhZ`Tjq;W3&!tx;i`T6~$<xC=g=+_s
zRtI_qa-(_%g*>C7B<>ibx=uhnC!W(K>N?-jN^1?|SMlfj@mEu)drcFsLT!)s_rv@>
z-<o^Uw#oAzv=1@c+wV8ao6fEt=8&#@XFm^L#MI!tQ;AFpKTXP&4j?Zm387)CR#K=E
zIo1V2A%js-+Cieq+&?3S?Ez%2_yTb?j<g$@NfG;a_-Yy=vXK6ni1L@rkv8~`BJ*HY
z7FMYgkDeRSMs-xu)fxbQ{0>Kie<Bvr*W6-KA&v!eCJ_o2XjXQ&8v5dFP>hBl(fih<
zV5qy`(8m{oBlH>TN0PEN+@htCWPSvntPPxmA|J$&9zkBnvDJHO%akc_^baWe=@pps
zZ!_3tr*sl)uBO`)E-raEF56bu{ksVeU)+RK>#FK-+x4&t6z!(azA7bjBChXqaHDUi
zOv=I2K)1rP4Oa!^QZ>FpE1EbK8=g5n$``_=M8T9T|GfK~P1Kah${#r<6kPDRJfR+r
zTzBaXB)Qa0TwXa}MCFah>91iJ1}RZ40JU}~H<Tbo-*7*ZhYu-5S$7vXa=k7dVatCP
ziHm+%H%%7diHL{td;|SC0EAsN>+B|)Bm~=z!F<i@72$lbc+u*}F$g$SNL{Yc%ac64
z!|h(c1jn-BLSeP2ql~ZM!Z?NZR5jf8yr%jTQJ?9_C>)*$v7G?+X1OE0Ds7Kt&l0F^
z@%QX^uxtVw7^yGuUt~~kYg7V0i5~y3*TZ_J#ZH;GYxHDcdtsRn=ObJ8pc#4ETPIdx
z=nqtjeRm?xvj2NP|Hw!U;K_Lb0{NsILaa>|8J^q{p-K3HIIVs|L!Ios`<;}&k(WIr
zF1GaEN;8=k@x8;DBwydm1uF%CsiF;^mGdctDU_wDvi~y0+7&1JF1UEZR_i4%c;X*L
z3D|gcktB6gi{*;kom2j(x~B~;0NX<Cwbd45=sx~{TD+aXSk0K<?zFeZDg4u-;I;Ny
zv3@6{U_3f`Riaq*+aWr4QotrQl}C20PT&-br!vZzst{!xX<|m8S{bcL^OnDs@N^lz
zKHdf5P~j&u^Il`PDpnt0@L+#<Y>3`Vkbg1L`QM1eFZjYWz}{3XT<bal*7=d}f4l$x
z%Q2=tK0`cC{9|`cNOF{pefzWfzu#psb%`mlD((V}F4YVUHmN)d1M<V9{PJQ$yp3Ps
ztiX4?+5MN+yTq2SrgMwD9Xtz?h~l)5s0k{$HxR7XSDw*aw2OZKQs+pLT^A&!N`c*E
z3$R!m?{>%JtzHg;F$mM-@}8~=&)o2xkaZ)HpwqzfOYMAW^N*KU+X0Az0bC+Z4hP6f
zxEAM`1}Q|)ssX=Y7cesO2MK~Dus@D2$>?ZpECnAqP#DcY&d>X^97zB?5+W>?rG$zh
z9DMXg4;fq19eKm_`g21)T7okd9)MYFe&r-$V0q_l;Zq?%QgcuSi-<5~Los{##XyXa
zs-e6tGasNQiUEmpW%+qjHKGYw?)}lB6g9Ug=Zcq_Zd5~&GXa1B$NpV=f<)vu4_41@
z1rXZAmFPr(#~6k(rHXWgG0B(v>83^u?&J_05LUUZsb~pEEb~tGN)lrUHmgX2Qp5^o
zeg%Fy1bCY4m4TcnaM}UUU(h;!b0#}*YugUQEktjtC@K;B>P?ksQNh>L%RvYnsw-SA
zWguyisJVI)*dWXjGv9@~w<h_U{i`4p0T$ps#AwePLkxt6r)4n>5{z&12@^%%ey;lg
z02YF>X=0Hfvv6F0QMm=W5r*K#Dt5OLM}*4x+e-1xE|--;O`A3<?$+do-Kfdq`f~Oo
zfpfN<G>%3_L6UvC?$|OWx@q@3m<gdk4d9pCDg0{~bE*v6-1SOrxABswEL&CG>Xq|2
zl$j1Gq5~5&oWEphI|>EFLx4N)%Xjbmb2zQyK3Y-U4}O;4EsBEG4PuJjj4XGPf<~``
z0OBGn+aZ2ZjNl5QPA<+6dSP=`7q7lw47xXR#j3<{pfYJ8RUY~CPV0N7j%sODk=qN}
z&h?ZvgWd07KcZI*3jNM&j@NQ*XFx}$Q~)P`JKU!~IP7^xloRH3GHzzk!b9Pxk9YI2
zm8tP@tSEklrE676T&OEgrjTF6527e74g4)Shob!|B$G|xAJX-}k)FgFat3UxAV##s
zLWBig!2~kD2+}#p#_#u*8cka)bX%^feMZqDYId&3ZhSgB>EHCMePjK-cEgZCcsM_(
z-GR+sv*^bX_gBULg^1>+QjodRyHx)NagT?$2lw|Rb&s-G=l>`MLecvL|BR$f4<nbj
zPbwG;PE5~$-mz^9x40|nd-jJ*vv@IU5wzK?YqISiL|o8{i18ctL05iYN0o4Ag!<vb
zdUL|6i%n{`2fBF04gC@XOW)|yH3n<MGzALhQQ_U6K5{bm@LZA~pa?yY7)3Ccc!KO_
zD1s)e^mdfuk5${l(;M?SM5joxu;92stY=dl1n@>gTnPlLm(IT+R<tNWXmh=o%CWa%
zb*(@(=g3HB7XbO~GL8shKpya%V0_IQY+BT{{SXGHpP7`W8Rfsx4>S6t%{4X6(gCaj
zMYjaVk7+Z)rU$Toq)mCzm;%K%!)<`U0~ml=dVpA0JfjdZF9_BW(}ZWh?kVj&12Ubt
zoUQzs7}bfIxc_^Mp&X2b8^ZEbnfo#u)_#nI%NzQ{(6;w~{RI>=gFK6Z!wbBY(oqiW
zpvi!+*$mz)d{pFI-5c=l=E`uJZlqYTuD=!F!^thTIB@&2Dd@qC>Dni*K*v(~q~3m}
z_101R_?Qn<pJ!Pl{KYIIGCZcS2M|{E>`viElOlsT-GJ(YoY${Hfs@uv<NJ?SL4E>z
zLsYv0oIT@d+BHqKe_w)W{Kn!Qx4a#hqz2^scxOkn_T<9tOfGLk1b)F}iocCytu9RV
zgD+o~HeI;`04kkX!Cnpm|F`g);+g~&)LPW2l#o#9FVRWFI`Ohs4(G~-`U+k*yrpp7
zV2SHXhIelE&hQGz3`(r82jBOX%%5L^vEP8@)ttCzo7B|UVB)@_ybz-zBpHq=W!3fq
zdnW<4a}vW;p91$w$7EzV7kYa-2plMTJ~|%#-uLC??C4aRq>Y<t-Hr=4?%zM6<o5Ke
zFF7IF6G>YU0fCeJ(s%mX1TH@&a|`!wv9V=iX{hi)*u1t$OpT4|qfmypJ1B*pD2<8b
zAsKo}X>n?xcw+l>mPqF9e>mKhb~Hs1x`gG<JcC54^bhe@Iw)!Bfe!rHeshIERoK*9
zB%^&QaGhy4{3r_hS3Fpym#k7dB$ha5t3zw;CwJA>c`Gr?T=ux^PH^7i+#dM#?7OE-
z%Zs-Kce1(dT{PySAVR1#y|h+B4T~3h(6Z$*$sS)80%)R#siDE-o#M4IN(fH~{kQ4i
z=ikCS{6tvM_dtKKzJwCq8}8HVQzmvGcR$zTlFZC9xjQOoU=H2JRook@CLZ2R@(PUq
z7xS@~)QQ6X@4?X38k_ciUMqJ(i4OkakWfaUD}*$LxK+7NZ%N2W@pd`kLhFn36YGOF
zdhH|WQa2r9i8k$bW^Jp`glb(OR(VvAV#}qdMm)S&3;>lT=)JL40zWDZCu0ybX#$pZ
z?8uySdn#6L2{OFFj3JAy@~FmPNlKcwP))~6`7-`4U^!4l>x+8;keZo{VXR^%EsC_t
zLhkuLR_MrbEDvX*(o7WN2`0ppi(`}Uayl{c%#Y#}7Egni^vAOqIWs0@VtH5_=H|&6
ztQ~b(4PX;u85zyA>q(0u=$=1R^2k}VjE=@Ly)TJ2VmTi(Jp8bD+Qwkb4!lgolte3B
zIHf6>jJeyBA|m$?9mG)>T!?>?kBmg^;WFeH?_eLiQjbM0s0pm*ABb{n*zagq)<A2L
z>Y&)QX-gyLr>#}x6K#Tvq}~ygGdI{Wg6o$2TX6Ri6&Md`E6z)g1lOjJ93rMS#p?+4
z{*#VGXUwuOMALLA<Ly@Kqx^lo@S_#W)ljU&G=UnKHr8qSbG6L3A%zt3zUL9Qt)Bl-
z;mX&KIOL?aeAVuy4BW!KdQI5;-#BBhNV?WZy4@Zlr7vF!1adFYI^jCe9%1(;??BUw
z^z+IT#PeXGH&pB4!XJx9+F3i;(f3@AR}Nin7;rR*yty6QE!K@z<@=aU{OThX(uA32
z{8mtL*6D`+&cX-2<A-{R9%cl_oEzau_ZP$EI3e<Yba;y#iF#QRBp8+o$52nt*P^Hk
zv|>5Ozu}>IuPkHR-ndACz>aE(Psaiye2_GdWOJEU$V(TKg#P_po{0jFuMRY+5$rxK
zG~W7T{13}Y<=)<WqV!{<HoNl1>1U$W9PESC)nYfLw}4A6(lMQYx#bYn31xZXRD89<
zDh+G)ZEZUcOB@qA#&1>O_9#L#NVsP#@OLy-Iiym~(UqgCdA;>XhK)^~37wX>qHAhH
zg01DsZ!oe9Pk+2jT#^RQ3eFyLSSWXClO46{ob=X=M;TO?Ks|S1Acjb|oGZJ@{2T@5
zu)HcR;EO+2Bb!LUdv$8Gn3aE{LJo9ckhw?})MA7jgX2=h+1N6K>Wy(?3h8F`oa6Z`
zYOq^0(Qls*cQNKbZGr&hfDa?~l#3Of^oJyImV~w%=JzL_LwKR^O};C$+~ua|b*vNo
zQXupn79ao2Q0ukf`@NpR5Bzqb6~DawcXlB>oFM&!TJJPL28z+>&QM(Q8?B8%r@Z;d
z@=D*fk~nE>;w)DoV>ppHAF^e%p~!*g`pT+{tQ{Fx;8I=(z#lV!?p#d-YTvMF-0%8N
zHhh?I`>JTH$Hp=FSNfKS=@p~*z2BDsS8aFSF>{9DetS8l+=|kj`I1mBiK^(di9=+c
z=N*S<d&DiQkVIwbzqlyeN=dgdAiO;IMtFutswH>&YeEI#rFgOMtRX~}XKW|1F5&Cx
zDDCNz44x6r_uyw?;0T)_7iUw`^}fFA^wUmG`6B1QAQS91L#M|xUGD=~elgv$IBv45
zOEh@Cy5l(YHC)@ty%ob9*BFJyYiBnlZt8P0+8N#Z7NgHzGpdc(f3wrX+<++up6plf
z8@V=PZ>Eo;QukDF8_`o$6?>@sHa~77pSnjF6LYJ)eEdC?dc09}3;ex;;JJy|0TP^8
zREz<IT1pF11Ift)5cs%#CEO+<D!cO}e=kYjvzA%9a@}#l43B-t`pfailhbARQQl0#
z`E@HxnQPl+q$B*3P1(p^f|Rp`@28po_sh4iyZYse9RbmOkh3eTyI3Bux?gq|`Bp_A
zp!w97lc#Argo{k|(q7~=>z9}3$!&@nhF~Mx2!|SqY@`FUsN2Lx>q_yTg`be6>mCVi
zr-%nYe~M<!`cZ_}5t#9PooqQ`d4lwuT)r8r+SAZh=wFq_eP@Y}?=b|`*xB<bJ?`V|
zzy4aye3-gnJ=nV>e0N1p3jiAWoNr(Hz9d6%6p;;c;LFH&ceXrKz})P>6ILj5ruV0t
zH=u?!`+uM9&Lcas<@-8sMI4tdfa~Nb;F~acnL=gwF7{-lDIl9jRGni`+pz&zNv0sw
zPC3q~ph~e4laoscB2!{w1cKLBulD^sAEVyRc7IXK2k==`P-+=Y!eGyK@#^Z*5{nD{
zA_mv@uesXwoM>Oms`lMtGa3P$<Gg!NdvWm)YZ3?qWk%~XFB^-MDnnAWmua^s-&GpK
z8Z_I*OemwFthDDD%gxY~1+sUGeNYfxxM+pxxL^Pvws~mNyhiR%c<Fp5{vie@MA(sr
zG!}+w9p=@VoY}!d8Z&CQU4|4ANs<dN#6ve9P?+Jmp@*O$m6^%{7qp^S;Me#8E2Err
zf3sy?Bjz=1o<6r$TG`AtQ>>I}RyWZW(e%4J>_P1WMRm37BoNrgI@)z5^4}(gcc7yE
zU%4T{n3#%XkBz=hdQs&&KuVNwLBcQBs;P-7J|<df21QleUXGQBkU>Kf8eEL-juw=%
zEhAb8%{|kd#;w_8CX|*w))_tPE1LzVRmsS=cewhrKL*#_UbQbgt*0wpw2entTSC;}
zhrJA6<&kp$4dK8osj}(SI~LG`*nkQxo+b+{P4O9-uoNvm-n4b)n{CbA?5b9M<4&xR
z&+j5k(2v?JNRw&nGvbPa{qx@#mMz^4_e3y6#-rmAC^4gN9|9>0p&p))-rRL%XyOX6
z9J(P(0pxZ5<K+jnfyCXm@V08Gdf&ZZFP<oBnLUHx+_4AQhM!Ki4J$DO4QepM<!UP!
zP|u*6<hr^<|44ne+T_g<hy@|LyH3WhnD+gu^9Y{aTxSkm2r4P`$9qdsd2&L!b@qMA
zE~-KsAwWPTIY=g=5J%|{%)~^fe>-zQ*P=N`%OJUghiRJ3=_6y$gdK-Ub?5N>sBbsb
z<5`y2ZhGX<*-1Bi_4m4*TQnFz21y~KLU!0fDyx5T+w{Z71}Kyj84+(UTKC-u$SjQE
z5TPY5XGPA^8Vxkecf*bHGb<R;qZDb3E~p4YQ6`fuq5_o?$YwDMqksy0r-Ep(2=YrQ
z6tYo;V#^PJc8-pjFu<AZnEO@^MyLl4_n7E&oEX)Eq?Wn)?VE;ApZ6?hv&~LzLc7V7
z15nUhBmSkL$w>M&9J^+R1}vY~Zqe#;?8e;c{sZeY)rT)dGyn-;wOa7gojWVx;T#0Z
zHmNJbIveJ-mib|T9=QPM_3K|8FDF)5Y@lG$%Z1q?tJI0VyIjT8>2onnYQXTIa#kJy
zs!ApXqy!)X3OW4C5fTW2=IUqo#UZ3a!ZZLBQhE-UbxSarGQ|Xt$GmL-SUE)Al=3VA
zoz4s)D2n8^VI*XE;CT)zl^jk4$$*Ma7xX!inz(g=rKOfqJ{LA2%`S_x7)S83ZY3rB
zCC}@~dad^3o*0%Q`xX~~n^r`jFwpVL7B-N?NKO+09vvb_Yqwl9&Tkv4Ue1gRL%;;l
z;z&b|*3J&B8v65;70S16%rjz$Q9=rgC`_;>M;9Z@&o<(A@|NlF)PZuRZ-tvs21VnJ
ziSV4GJm?e^Zv%9>akrYx-f^t^pnU940$ibr8sOEt*JeKo4Nx&F|B8MmLn%{UR%)X0
zT>O(MS|4G+FAvfsQs)vwWV(27C%SxT%H4FeuP%H%8P?R?MykN(Jv<G%LutAbyc20h
zX@gGJuvwQD6*cG`Z*Y8|;bD$<<+%dM6s;&CqUeRd!<I2=q(XQk(7*30y=9T%L~pNX
zW9QL9iP^(^%JXzX#!};n$YPWK0B4K7-*46#n=_^@87Yq+ryODz6tbbd)8)cj*9kL@
zEL}FI_f(nSYJgbZVR-Z?au}7H%i8^V-QkW7U`!=6+YKtt7&lhepY}dwF1-*w)xc0L
zH=Yeu?%MQIOa@Zo@RmWkIm~=YdAasjpD?9gR}7v+U-GNZo_|c>6^GYsiwU<iEC^@1
zAkmPp?Jpj<zWA-}S;ZGj)jk8uYCk-;BX2p}Qyi5ttXPxED98nsG~04U7=#Qt=m|3l
zy%6QAU?r1+Ebt>=cECF_e~~khj*%~W>6Wq}c*!bwd7;-#g4-|z<Hj&%k;GHMqZ3#`
z(P71KWE9N?zA>+3<{IBBd&4>v^LFO5!Tm3SFMS{LaD(Aqei5?`w&Cg8ihmY%f~9cY
zQ)9=BhGorJZvDPJJEuWu=+!bi?#DSyO6S^rR~j9k@%{Ap<}Ef+#L~?pzDMnF_WIi(
zCJu(MdBQ}yBnq58aMHH<))(?uayhzq)^zK6`pwt~CkO+69i*H2?BsseS$%1k{eovl
z7MpBB6tNBf2IZi^CmaUZJPI-}%F;22Wa6Xzut->M4F*BxOsTkj_6}xT(4P4fjn{6(
zS{$H8MJ0&vjILs}T_OcFeqAFH=%i)&XB(yV=-*yF6GGoc^ud^yw~I!_`NTRxIPjqc
z5PiW%)k<@t+TxEJ{aL)Thq7G|vS>~lj_5R3Nx3)3CLJ`PsQEArh}%A;QF#(^V_rX{
zFp!4Zi70>|8R$ZzBPoXlBWs`(;h>fX#NzvLk&X3!tHpFPM{M9r7F-U#lmPC8K2*+i
zL|_HufA|AG*zU<5`2(EX11{}+<>Mo6@3BBE@<*@aTcCf83`S*)j1T6%0*!V#HwwNw
zyMKN@%gWrpPTyN*a{Vj${Q|NKo_-hid}0de83gd~Ml!Yc!Q-w&xjNiZ<JZK_#qof-
zJRFH=qWuTD=@DiV?O<(kXIz9h6mfsrkb_CTPEyVsUV(YwO2;JIgkEX3JB7`X1FSX;
z5T=JF;ovi3LExN#ix2^$90FM8gz&T}5a4wXJ_kN~ON9==Ch!h5qF#Q%p2AaUgM%@r
z3ilKY4XFTYmxC-2gYSnGzt}$ou0*bx_?|}{b(G?bKJRDueC1`=*(kc$GE`)VPH=sq
z%oN)xq$gaZzOk{>;$kbJ6Nt9Z1XpM_iM~m`mO0F8*Nm{W!(^CNpMdml2yJM`y~flK
zXQ#+Wr^E=S-GDP&f{(v@+c^~sp$;e7hye8TOiLZJrN09R!w&HQR5eW>Ei_H$Wb&09
zJ%E?r$MM4$1cBiB@4gQI|6`YngC%lqWMnV^2aA_2o2nz#JJrzs&gsF($UDa=r?<<N
z6)_($J~zH&Se7q8Y@BM8p8bvYQ4i^_EW+bknD-e)Zz_iuFOoh$gY)~j+@odc=`pCg
z%qLrZo6&*t+5zlc>_BZ<I`xE6Q#BGFZ-q|RTJ?l})>UtDgI0V~5tzeU)`j=hH~_P0
zE>7+LNUR(|kElf3))<Tk+8+hGX88;K1n+poRdjt{p>jDx=68l@R0)d`4_v6Ma=za*
zMTNn7p9?elMz13>)$7Z0W?l1Z?m+M^A$h$Tf)+!;y<>r6lZ9SRE%#>Ke8DQ)wmWLg
z7W+DAXdTcB?||MofY{Cpmz1p#tEgI`&MiYD%e3KdM5?#8HAi+N2mLq#jkFPtyfhY!
z98tX?@P@aVk8<%moASaWr~JZg>dHCvYPo)!<Gd1EgD`Ajpb1yAm02QlHQbh+JwxHM
zds*tlt-TG~n6Ag$#yC?Z+Vx&Z(a~L&70Vy3KrUR&NOKz&;yY~N*+K0<u5jB@k>@f;
z*OV6UAZ+k=*Xahiu*O<8x_;|dd8c#-mXF@(gmQ8mOOd7d(2nB;0fx&EH>`uGhMW_H
zO>K>hNm9VEC|m){2;7Kagi#XWh6on*<sb*bBIF3(L?le^d)Yuy)x>|039>z%I>Lnq
zXcl*YtPaU0x;yNXsud+6w?>Uhk53<cYjo$Jr1KQ4xIT2^C@-48rZL&|qa}Hv6;GNc
z&)D9SA6ov&;XN0Vtbg88<VB8+J8$_mGq!qc_5Dbz@AnZWOefu=zK&nKC!(5_WCeSI
zW_;zfcDkZWu_tN|-+rKIJUo^lMoDsiXc`f-NWu`pT3a49KTmz<11ino%eTrc-bmcm
z!Suc5Sy13#Xm_h71sO}=)dumWFyxCu&TiAo%>cA)Qd1W#o2iq8^ikA5zlb53^(mwk
zv1GwxN2l0;z}R<>Nov4d$7Bl%B-vd}7d?Dhs6*TGvnl@a1G_$$)c`pbfazo2J%ZOA
zm6G0}VD&2Woh+GbF*-#u#kYhzxSZ%#hQ@vp9{jZ_Bt3X2T2mGw3HzDujn6;>EG<-r
zXj6S7lgBv0Hy3qsw_5#4|D=-Ej-HO4JjfP54kB3F&<sI1Ct(k_??!EZQ><(O)UR)d
z*us^OL3)C$tZ9un4LkkeSnWsc$I6f8x0|FI#!P2j9DF_>r<EY03r~C=@E*2{cKc?)
z@|w;meercCDbEv{iF|}X?+edKfBN#GEHG6~(KbLcF0;q@A6Rq;D-)DeD>&Pnpg;Gt
zOQ;xZk5u_?=AL4fd#u|HP5SJ{di9XdsB!45k^}0#agP^%1|b)9X?y|OwB9D4@@j}w
zT}?He7TETr5TW<Ip0TS}3gN^9=$k&6Lz24(6GKzn{^++sJC0BYN47kb+5&#2BIUtx
z$a4dk_)#sS=eo&|I%Q>+|Nq!%TC2TIn<18@d2&)R7Q2gV0@zifFI?Qz?jNq0JuMN|
zxL!SAyGH)7{`aZp;lwllHJtw9Wi$$)=VHAsoS2lA_h;dI-%7}xO2v(U1CXiwP*K<Y
zCFhuf=e}NtH2uQS(EB~-$Eb6eT;!`!hyKVEA$ZPvozGDA*Ti_q7ryMNgEe(`ytE4w
zGfZm`5Y0dh0)K8hg$>x;FcVNiHF&%3)#5zgb&;V*7VU$X2JiT?KO@}3Jq6X8a8U$o
zK!O&<A(qOAu=c&h`_DSUk~H7{g>2Y9aRm#V&YIaqV~h`ZRl~M<$+??OJ$RVlaDKbd
zH6=`<lhx+~Bn9x^6HQ`y27&r4Y9gXc<>82Y{PugL#Y~F{TAy5l&0%ZY{SgFDqZTgs
zDmxrQHGq$AR!~0l+kC=#@`?;~Rd`|uK|vD<Qe;?Mc2kqD!J*$#Rkk1bj8810|A4ov
zjSQ)}iz3A@5SWL&3%iA&ijIz@vIyKBNs!Ax%X2E2#KKMGebS6{saWgPqQg*i>T4yP
z>YePJlv<k+Ckucwhyj16KveIW0uV8#cwkrwO-WifGSYv{sleO$34i_R8;}I|YxVTN
zaUblGNwc1svrtsd0MYD)Dnfnm>|A>8R(r>j!v5jp(4K2?K&WdBMH+QEczo>kbh{@$
zYc|3(-x5<7$D$<{T6i}gLimv<s@Z<NCA+;Wsx0z{HZ?eW3BCYtzX8|<;h?d306B<2
zJ1^kxnRbgRYWE~`4DM#p)H_YR6QQ^iZHnfAG1+KpJ?i`f1W;B6?F%17jF8R|Mkf*2
zh;(<~mViW<C#a}w3<jTl8BakZ4^ie-jyh#>(%GkaP?0kvMnv@M@V7&>`gfGpp&?O#
zE+WZk`w)TG0b-_MRZnB|zYn09!52>_LTu9z+3-&f%GoN8ZjJzwvIw`>k)exS1yfuE
z3lRM~tj<&Sbsbk}@&!Q*9K6ZDsL}~;JnhEwY-08S8F`vem%TPHXsGJ+5x|^8dPyjl
zjCYkCGu^Z7UZZd$Bo#);6#6QQX{i)a;*p9e`}#6K5hUeMYO%Ka>3t>=YCz-)B4!Z{
zK?SArYLg38LL_xTF(3g9E_0O#RdJqE5GT}xNbHM5Sm^tU5*VG36aZusnK*5v2}u)t
z0EKMDJRr&62nMk*YucCekw}46DI}&eksK46x(Kkf=G@@<_yE~lTL97JNWSsF=Y?CJ
zg({-35lLFir_MouuT%w6B@#7YggK8)=-nj-;0i6NB9iFB2#1Iov*v#nAz(;cHVg?D
z+_tE$3i3mQ2<pGb(KRLt;d6-hL7)&EMRW(u%vQzZonT(}VddDmOT&nZOM8e+b<?B5
z{J)A%Lvh+_nXQpWts+b6E2mZ|%1@)Q*jSK9dO3cCECz->tLA56O5mz&$dy)?1!OK?
zF2-syYc-TL8>YfWe=`?IzErF7O&NXGZf@!nHnIyiF;f<qLktlJ0dg8-t1;VzB+cYT
zL*;U-kGcMVeLE8?QA{==WuWs^>+<Huw>N!|mpbvxh~k^p#IM<Jj{7tjexl~rq2{^W
zuC`j%Kv_S<wd`|aOy^Li>9Ti#BvV<f-XWgq0`}xP(MV`arfev5Mu_FCxZDUCsIf-Z
zh&E7|%{4WX&L;@a9B9m}q>#@5(4OX83Tf_K`ZFMw3A;Uy8r&^L^eo+A>z+f3ChWE0
zdy!siqlHHn>g_S?GUjA-OyYNySsWotj4&O#L@4BEa-_0w0qK#ibQVuo-0@0HQN=6w
zjnM1QPc`4POUEBMwEU4^g5=)U+poWV3ga&^)=7dILh@a;`NrhjRo48ZY7s~#vltp@
z6{ce9ilVY~)|I}hECq^<R5otKvneCYJ)7uImlu~G4AP6AU+L*f`bf6*?Z2$<gQ8NU
zM)oOMvfX#Z$YvEQlysQnP1B%Mn6i?ql$F48)92%uMEV%P)p3Tsv=Le{G_3+j;wCFi
z+da4qRVB7#=)LqT>QvWO8Y=Ly7upK#m(|GnMf_?(weXPCoB+Q8b1ID0R(#Ey=4X~H
zQ6%;xz0<56p;0G3ovWYU+XNvXwx?Z*eh`&<eWp_b6y1$AbA_cr+hgf9Q^16RDo(VB
zCE^R<cXMvfCS7pcS*O{*1_#Jb9sp}?{NrZapK{mgP0_~O!TPwuB->n1f7FzyUAQSS
z-2S!(TLkZ4Ck}zsrW&f=RW41G_t6Zf^xN^$`GcIukC#ten=w;SwT=NGUV(xi5TwO5
zTZ3u@!8-PT_iznfEQQqlm!l*>aP=%*P?f+}>a`;CDfqo`*Y*{QH)N%2LeQ#(t8$R}
znGll#3lsBjcb4+;Q4qlDy_lNsafqC53?HxDP=m|T7;zXRl&uW`6#n1PDF*kUpOZP#
z-*S}A-)-dEMS2G4W`-YtJhQ8dGoj92wO6EUn!rg!I(vd&PY+M}gzIN}|K7J3mq;xD
zUVUR05OiCV(~X45Rd6Waw9b$P@DQzS7<zRZbb6qZ5cOfDczTHCxU^9rHD=(mh_Fy2
zRD*=H5s9l1T;<qTyqp+EjE98Fbs5E23}BNGidki5AcXXgMkP2WL<mrK>8*Vzg@pLR
ze$>Q0dJyB!=->G;-`A`JkP8j;$s#-|zfcM?wfE1OBd7&=?czjF|Fj**EzsNv+rM#a
zg6bd;i(uMtpW-rY@I->dv=T%&DSg4-O+Z{Ld<A_@WIAt!GSdt<;-zfMT>zs2+F1xG
znkIs=EJhLF11KAyISADzc;O~9iM3M!>!uf7;<A<H@cjE?|9^S`b2_(*kuHY(meXlI
zG8n|H5K5qAGhOO!4**;{0UkbIg5dON6kvkEs3g(3=}5%!oe{WzXh`X<=D|@-235Wm
zah{A-A!LOE31#`vs|b4xPo@S+X{<=uk?R0ApPmBH+pC=^($!^~R76SG)OF0=Jz4w!
z*u{wW71Nz3pmob+4Zf>h=zu7X0wC-J(R6&jO=e)MQ?fwkDAF)MDVlRg+2M!*Cf$CR
zed>JSFwTy#vIN`6u(mXY8RPI*fyro}ZFz&aj=6}1a~#&{U2t1?GgTF~kzTH)HWV0S
z0)i4^!)hGV!2+n`HZ)ndJFHR;r+nzu`u=a#F0QSuuEF1-2ptY0YH-E=V$SvK*RK~{
z%#F+v9xPc1{V*&#pV4*>{PUV+Ld*TpIh*A?lq?mGTZ;;1wJ1A<u3K0ol}CleF``B}
zL?8*fG{MDKsBwwojFd30n}vQv9T5p`UPH${yjmq#tkwwOLjQ^O-L_$<m@+1n>_N>7
zmqtq=hy_NkDR<f9r)EYRg*s|NEIs~k#!T~fZz4oW5awjyE%HmWgO^DAa>g?%lpH@*
z1lfdPDM7~f<H^1pMK3|%9=s<6`&lUz32ENz2#-vd@tz<g3mKuv1LMGaNjt@37@w|O
zlWzgpWWOzbOFy?xUatJ4MVU6|wNRWJ;iWs-^!0XUiaMufw9u>-Ib9r9cQg|+US2zd
ze9Ev@dQD@e&G=U+&Iy-?uU>KyYcmS-Slx39wc3VAfeX(46+N!S$CE;**tv08V03lv
zR;@NAXr&Fq^M3Le0Y`Q&TxN>;l6yp}Ep{0|<SzcsvSl-to7hQoChB0|?<k2QUoRDV
z)hB+h<q^uQ-ZP^9T+zxEKH-wGA`p%rc(p&wod9TYWscC%;Jz_aK7dd)i)zdDQ(*tG
z!dXC!?dIA&;r@rVXoPPtmS}T_Pz348@`fx3f!583PZB9GoG0alLxh*R9jIo%(B98k
zlyaDj+ul+jaEwCb2K?4L(c}HNFq-qkSNg9clb?eTEt{;OmW?ge=kv-wMhjvS0F)RP
zXb})Mr=2Zi!UDp<u@vI|wBRo<YOjLD*O`LR^M2U<n0~)m|M)%1eUQxhy?^XC5Az;2
zsoOp($~IybCUG$*60~HS;a-DT^Z^kGZ}dUdFhWfoQxngJ=hkJQw#72ke-Bniy$=!<
z>|^s<uMV$EcTSK+M5M24;5FhDM++*>Goq@O+1SUfLDduiQRcgt^zwS!pKj&i`l3cR
z>&A^%>iWUCHRz?O*tGOtZgxh)kD8HDt6MlbUjH*Kjm#FM*|^33S_!hKlfBE2bNe+u
zW=^;pIW7HierEjp)FKMXpk12VuW_;NCGXwJ2i?gblS_sgEUwl~o2=8Fe&rKf|5Tt*
z09_Js6FVz<|Dz<y_YwzVjLfSV(qA-QF0HUrNWk4%=2G()CHC8JmoDNox7q(dSP~sY
z_8Ehj@@m;B<K>x#_5lqgo&cclY>DkQcsrOGl<7!K@-c3qYBMDTT?(`nEce!-Mz@CU
z3i3%ueazFL8&m6<KT58;VXe>_G3ARI>-r}X1ZA$)rJ<6&qfi-(eT=9-Cj=Js*9B(s
znmaSIs245Z-wddr9YA?;5SZQ!v&q6)6kt~XBG{4amk*0q08m7MG6avo1cjCbfNdd|
z>j8jqIs~SLLSW`B5Vbl(S)6i%01vV_R8|trWxMm_FRcWpFvocvsBjAA`EmAmu;!ZX
zFj<$N^wnPel*Z)b(9g~ua(%m2bol|9{rZ&L*5B2i?<e-R%U+L;4&`v(e56;j)$#gq
z`(?`<uU)eT?PG`9+QEUgw#-fJ_pHqzy_btO)<R?yD?wIQF#hbXs&2CXkek1Wi6(Cw
zoszuV7?U?mYeKnn3Yqr}nXCxyf1Ann$smDfU@b)H=NK7m2_m-mmv?qVB<DXD^3}6s
zEk%cUZ!5^XITu5}YaPJBp!=@=&XljNqln;nXqW=9kxl6G`#9zS>Tdifg}>Tb-7Wi2
zZQRU6kr$0Q3UzCSRwLG`ziGV{GVKi?StG_EHJ1_l99%e<F*Y9)U@#Jagc`xHlFf$C
z0^3r=mH;<H3CCgy45tc_zy0ry8RS#LHIk3;8rdfm{pExrFp$c$b*H#?0nni1lY;A8
zh_n2$kE6g<M{*ToQy{3%<%NSqW7J0KG~mvzYU-9PRQ&%0bnB62_w1jtwi3Ds_?_bF
zfh(*%-P$1`J^tbljYO%t<JyI+44gvt@MTK~*V5juHaP{sriDbhSF*uh7ZcgU$S44y
zy_*l;ykV#k8@pyr;>L}aXQuHE097+S^8UE*@YhU~omz?9dKvng0FE{&b8=b|ATMO|
zPDCh#Z+3a_nsD9Jv+L2vF}`=AkF_WCELk|g5J6G;{44OcLyu0_00EoL)AAs;y-3$@
zFhK3?zqA@DdVR3w+M1pTDdcymXU_>u{8F@^M*Ei!>mlXNQ_fSHzc4$UM*XLkM$Frh
zO!wK@_)LyKY}rs5R>`j1h$`7MKLZV*cNf$HFN4h{z1NM#EjoI{<h+Q|>Hecm>oMQi
zQ23K9qghBrm1pGdT=Qo@W_Z^5dwy95VLof`2)<cQYP6%yq}(@E1{iBrD``FolsQIW
z1?w8CsPCX=E$lec3fLtuQUvq55!&h<LlDdZ#}|pi+m?7shLfpi&DRu3nUIC!-K<hx
z#`7bV5FBO-ENgS_G55I|(Mju{ZZCUT;DHFu6%0$fH?$>**X;y}05-U@P>dKz1l;Lt
z&@bBng;zkYL^+M?fK}lnLOUa9#WJKs@Wq<Sz3utWvPV@#-x;!$EiSqIfpoOPVb!-O
z>74L;=QES;9cuoIk&2;H)xu^h_W$AJW=J0DWyg{`nt^eG-<^>9aO+5|;h{L?;Lx3z
zCfC`2wu8h~P<9wnTI`%gd^=mkAy7_+euYsS;6@>+q7A8$lvx5D(rb!KaHZo9E-u=3
z!^V;BRF$$JFwUe4bmZ*;HiEbk<lOYOKGeLf!KDXhynlo&zBX?pSfx+CllBnV+mT$K
zhHQj7y`7b~a8N?&w<$d9Yy_LWgczz;Sx_BB8I!2ldMkvO8yYs`G)T(v*wxs*izi&8
zSOadQfHXp$3XfQ>+0#BhTMWu=tn<CXL}KR<0q(*_Xc5P+(u;nu??WSnQzqcLFNja1
zrTA!d!vl$PpSV`{|G?t;_WLOgvNi5}cf3$TiB`c>rN4OwX8tl8Mgk3z^*hw<*Oo_l
z_-J_cV(4+CVmI%)m#q~*<Yyxp2K-Mr2zjsY<k2z=^AjF6C@AcDel7CQ(<KdEw~8CS
zPLad{de*mCf#S>R^IIBAvq~Gc9RJ_t?4t7GTV3TPr=?nr;!3E&eRc7l0)b>0U3EjD
z@zY5Ke->{ucmPZPOws(h+mc>hk*JvT)wQe_QHHDVaY6T~nT>vz5zHa~rK71s&d(nD
zHD*#RcM6N)Il@AtvW52|MtEevHt%d<di7Q7+OOV=#EK`~I*~9-sGMBVNT*qPcjkJ=
z6TOF(f{Q{j#ZP%lB~@;=ed`6V|5YKu(--LwKqy5`>og2GSpN8`7j#piYJ_{rb6dSn
zjU*gimY3r4Uh$Rh{R`Nq1R2UgF?AdPPJ>lZ!YyYsW7ZEWS3!w`39wwNNPu(8I&C6I
zV5jBtq{1S}(SD%#(^2~HT7|DX3M?o_JW;xEt0~+!tn7TjBWmROh*;0n-Xq26GO(`H
z2z(>`VB%-z8a!%C=Rt76^|&-#7=XDIYsYB>UGb5P?h2KI`v&iRl5cna)gv`5xFYRo
zy9vOu@aDEz{yU}AnxVY97b-9@Q<o{G+?o|L!thvFU0|~#1YXt~2p&df)E)M?U)gAL
z{`SUAUP}Z~<~42U$ls&H)|zhJOj!#IEWOix<CVGc+Ww_IbDS7<DuIpqhAKIK1!${*
zaj^+re)Hz}c^$uwsoP6#Fcfy=n{9lV*1-%W@5kQT&rIr=f%rbkKcW_%9j@4X>5C$?
z;zzIpymZd&&NM?%a<A{T$R=jy$Ez=})AoH7B_1MLyPY)&z9B>X;N0B4vJxn5G1}`#
z-htx3jj;Dt4!u6Rs^3oZWYtP^-(j+K7fWNGN5y!BD>l_m3qK2?m+HGFw+AX=KXaxg
zOLfyWia0jj4)UHlCKoy#OrvV-m9eJ9+aFYXmc!fJTAlakzuD07zvwj*V#IG3s)%bV
zD`1gHi26pAn5m@k7yRDE1sN`0rhP0R=_YTLS&>=#h?AqIa=kP$kuemP5G-$L*LCFe
zc4xZ@J7_}1#{ewM3_uX!8-DJmx1c1UY?~eArf$y!uvvX7M}yJKvda8Fz0l?bY6A^e
zjCqky%*)R^mFsd)ZpB4}7`3P_Eidm>nrXu&O$?5;(0XXjaLhuNh0a!`i_&OWn2nYP
z*;YYtR6$ax3vheuYRv(?J-IIW%1S+G3PLJq312``XMmA#fDKb1P-gkfLy-c$bZqcu
z$|SLHJ9yHC;iof_J#>J{u9bk+s*`K>P0vIHbq4RMdSbM=&sk0u+#JU#ge={KvYW(|
zM4BU;Oib!ie~D7!;FBDz=gy4T*p={h%m&5p-UL|U$v6TPH%B~{dA2`M;_|RM5V7pj
zl9G7XA0{J{zN0elGZ+`0E;5LpR|tiZKPMU-z_`z(zGE<P<j}0LNfLxQ{y$BGWnrsf
zNMbQAea}|p`}eWak?N4up;m(PTPFL-*iO|3c9<+U@<c!OhLjseupg=XuAr#_V<DHQ
z31V+h?Hqf;X71qh8eNUOoN)I8&68ZHOaZu)vZaT>k8?bta?uqggTxC$F=iU}I$?f7
zePYrgAognyb%E*s!L+n@i-hwgTf`0aOCI$coV-8pYKxY;>?zFy^XBE7zik+u>*Jxt
zHv6EReC#tg0p`OXh(i!S*H;o>dI>?&yf$!b2&^W{{vlOC;0A#-qf9lD$f2{o!$M$J
zUF#A;TAbMJ4M7IN%whAIYVg9ke3G!HmO^v@$REOHisfVw1dQYU9E(PfUWStt-5L^S
z4;Zy|1bR1ykKI9#3^N}B2n`UnX9m;|pGp9DV{P#1h|UcIp#maQ4~-?n`lDF#aBf>o
z0JD>Tz=A9~LlqRXq)e}%Wlu}+c*LWDIbQtmgjNVjPzXL@QM}NcfdT=;1|TU4@Yh?v
zGi(Kz3SL%n0*&d#L_*NZHpvH&9EUL1jfqkcJ;2SyHGhThL{6QQ25|$Wo8ibX$G5!H
zbzg5I46lx8w0R&^A?HP+I;p*w_DAlIdPNUJ<1DQ=>*Xbjz-G|D0xekP2}8HEy*T&&
z`aL~(d#=o~=Ino|j^ZA1IGu?^YPL&xP^2{Iy*wyb&~+CZrJs56-Q_LX!G9>4{;DB5
z@i-2#W4TARe8B$a2+P<U6k4+&ABJEE_l&n34R5+3itvO#Px`pkOxyheH-drnIJFCW
z{klD*`u>tPHq3i)M6Tp`BJMLGxcpqxbLEnI6zXSxk$ayiGR59Aer9$pJbC<`!k2Vo
zT!Pe9SrL1P=M-{mJCnbg!r9v&i7MVt6tCSPT0T$ImqyU^FBdHva%3O4&K3q*t&W~9
zoi4iDRca|%>#!(6SYMYF=?nuQocS2bBOf*lONv&aQ8i?ZSrPSh2|`mv^)d{eGGEC&
zKD>|NS5IX@$jID1oB0btEp|^q=^tjXxCdAanauv3=m7B!80Mnr(^!CIq<qnKu>X3K
zqUpqmZg%&{lM8dZI%!dT&u0>qAC2%w4oEpO-fny+mt0&z&A;y}Y3k-Qf-kq3EV?tD
zb$-{R=62C9-m+lC@ERY4P%5L@LfjfI^Anw-zI(D8EtINQb`UOCkn7GhI~fOf-g87A
zbV}({Mx1A_okwrCRKphBtyj^EGt+YF+S}_On{)XA-N>ayRKzBg*435jJae;r)R5WF
zBDFm;%hz2o`7Tlw#r|NszueYC<4!v$UP|-Q!)nv=@A@eUyiPm2Z~)+F2h!WmYcbL>
z-0f;h?00clFBUI$sg^@>!uer48|l36xBxO5hxxmFLcVIHi75n_dURh}`I^08^VrMP
zZHL0hEjaNw8C-y0B8#PJ2@~6dA`X{(SFBjJzvG#Zn<}eWC1s{o?`4>Zy{9r{hN68O
zCds)2l<l9aM!SkqJMJB~JP6@+6>*&NNV2nlV&~yh?^y3fIO`5iSH-&7Bp@<_#m5lm
z|7rEbdKz{f?8lkTxevn1e>*r#lulc@^R12NT337C+=W;=^qe=0lzes(i{k77CIPrC
zxU>b1Hn6lb0zY**P7LhffqO;xS~^VWF`B*mXenQJ`-<%q)C<alV0<%W#V4<e&b-Vp
zso@GZCc)#!F}NtBA+2%knHyx1xMsTcJ7?B5rj^INf{eSPB5}j8mvG254#z#SLX+0~
zQ}9V27)dK#zth>3-M(4`{5-IJV2~C!#AFKPG44j=#ID{mkNVW}md541zm@=2M+*MF
zu}LphiXaVZx=#J_-(iiu*gs%#;zZxO7^8G7x-7Za(}bo-Qmz+xp&*LEU(*PHRIo(K
zbgH525({eK^LhJqt1;B0t>4za#)&DVyJ8>^)2|2=80t_N3oRn4cTVSEWtYc5n>Nd>
z5pAcSFn?i9TH*Y8g)kHYNCs=ar$=}7@~KT{K|XNbdh~4wS(K>}iSHFXOoM0*A^GON
z&2)tF&oT<d%kw#9=e!48)%$0={u!r0oEicl6=EePgaZu_90ZJlIsQ;_m;@TuOzKxU
zXmkKT0HqQbCy|{rm3@bD^k;U1VxH5KVCP{c%s2BA=0#rT&`F^}$u&(3Z2R%-9VF)Y
zW+h%$Kquu)IEY&<*0IaeSYo1&!WO4i_@%dVY|@08WscG|?^<Z4ZQQSgUKOpi(+TJB
zd#dU!g@sK872g*{W8g#<%uj^!hZ3>g3b3waK}W=Jh>Q>Hv%zj`>N0{YzJZy35w%%V
zI6)*qg%i%86B7Xu1j?;vXdz7zVRvnyzz70DX#)7~Ur^UrL+2HtWp<}x3agVzDZs2h
zYEl-x=BfAswU!Z4Rr}H|7O}q;eEfLzs`t@T^5a1Z<~k8{{8VwTyrFDsQvV{?MY5!U
zt!~qu2B4o~fZd_=y#(3be{@+9V<Ut1Y*H#3QZX~ePMo?y2Ix@|yKXO^Ka^uLZ5;oB
zl;GhPQvV&2{FSTl9u7KYFU$6)wtrprwVmp(=SL4{e}VVqihRl;3{lXApC5rDClCCF
z@_QhHm!Ka1?>A+5u54`N8O;6#YHC|H(=p<%Emzsp_4KXjv(jfQr!S_lt5jR*>#6Lk
z)~z&*c+TdlY}#V_^6zd2?a98C&9*!531L`;_jLeAj=C$PT)K7;yp<at>eX8S05Ax>
z{)>nv%&qOAS5))ZDhegd`^(~{l96_k?>(gA-W97@<@JMNknecHkwL~{8jf7-^*W9A
zT?!O`eH*@VHC6)tN=Uz#x%2v9za|d=gxAN@zSP8%Lz_g7god+SaZe&mg<I~Ht;p|6
ziqFO#K5*ry%(%<<*=&Gwem(n_1@H4)7Y9vTi8d)j$E+NzqjM@zpLO+>wl))DcH@I8
z9B-wl-AC}BTpq&$O>(`q=ElJXWnEJGj&vSSP$j;hwIi!=vMP0Z@|FY4HeOkjR;(S>
zo^9`(u?04-iHH83HLfs(n07G*o^yO0lfhD633BJEhyQ77LnZ44@sU9Tn$;#_;j04)
z=LI?&KTunR7;>WYl&BQYdTP#227JwFScEtr8PxJ|a2IF|4eX^mMWO+>YGacfS^aHl
z3gKBtJ9BF8L$5$#=(u!bw^ddy(iN}8%i1#dNf6#eEc{qaAAFR4r9m`41u~8F^r6)q
z;{+#ipb|b=#Zd(QR_e~)b&~0FcQeaO&f0p{dgfqq<xe5-dc(yV?E(spb54`@xm4Q*
z!<z)K!`f66huTb{iNy4OC~hH3!AiAGV#h7-+Ot~h)Y-sNL_xS)lc}B9RrAc+Sn%0!
z06t9B!WEDha>gAi((XCG2Ry@Ay=mppreKWxYXW{Dj#>_X)wQiyi`E2iS3aYY5&$a>
zm0#XD>~58nrhM*k2jQb0E`|n~+~nLFF0@6$q{!mzSJIUo*NS>6BG~Lo72N)@h42Tb
ztG4tnt!*`*{ne@2Z-j74F9MB;OnhrJj{4hi3DqGobRx(ZYb$vsvkqALIOF`Jjz0nJ
zYcEOa`2J2vko>iPfJj@H-AJif^`E^BFaN{Y)<WYSsneVaJ76}}B;eyn+gE(xbeG^k
z87D~CGd+`orkkpKK<Q*1V){*!o*MW|!tt~mZGmE`h_SyNUb*0`C0I`yIxb-w0`Gx;
z1-h>KYGwS1L7T3%X*(uxgojIx2WoV?)0>n-+C3LID6N#2*Wxv$V{HP7x6}#dDxIic
z;hWTIcFG3lzo$<!eAJ#@;9Y80@wH3a;a;F_M~pq*I=hn{^_5`iqy6yHAiO)W!v5@e
z37GJ|eq3HA-qW!DVq2RfkrQLf0bvmCf$v+lXhuAVT5@<KIH`h!b30np+I(zzRgwO;
zfK|-0*s;!m)SILd2c@$x_UFW8S*NqsvA?W@gz-X|LU(R%a>VkFLnVN3b@^LL^UFwi
zhO@G$zs+#oRLknDkuFFPKaB5SeM{$OUfY_>6O7obU85^U3MqQFM^g^BwPA5v_}lo(
z$YD-7*a;4Y{<PL>2U>CGzBrKQr2yl|`kEx#Dd^gQb|5=wE&E6NvT|(Kqt)YUc0SwH
z|Jyh|^Q3MjHa`e!etG{E9C!kJ7xXx$tLFCzB>F1J#Bw|oH#u+J?<)QC?S1?RKVW$X
z|LyczQhpf7`H>llPqCXHwrB^Pb1HR!u-<u0cz3m0RC3~M23J{~v6Kdt<}LI{)p20m
zrMczC*YnfpWq)29#=u{|M|90+ss=fzu_|d)230>T**uT&MHa^0W9O6xX0Wg_UMyO9
z#A8gl4Iy1~7%HXyb1`zah^83u5a=3oH|sENYPf=?E|PS1en!b`8ny3SiD0PG6W=v@
z3e?}YGH~UMqlrO>(PWv!XTP#Fuqt5iP3dgX{ydf76&M{BXxZQ=DbuqkpEX+DusZ5T
z0k@nMPK!v(&belCwGZ%2u+^4Ujz@j-lppTm3L|DYYXNPbSjmCiFxUirayR&{j9nm2
zk9wE`O$i3)W#nyeADEZEjh$+(w6~+SvO32_gn04X)J0=l{|L(hW*_e8k@tuu#Y#Ar
zRdQA~hZ39H(UjU?F1)Am(P3RrBiqaE(Cw|Rh)v#qxIfKrPhhK$+_{oM@X=bYu)uGQ
z<Jw%rWHjb@Z!nMp>*^}XBVqNW1U&J<Tg-c56sP1$cTbIqZ!Gtn*{#C*k*cKJ=Z8FA
zNea5j1@U`a4}k-%^4V^&j^970u2Fev+V%XWwD%{=;Vf{9z4Xy|j0JRYrc`k+?)Cg-
zq}8lCjn`_YSMw2-!5Sba#^Kkb0_)xd%BjPSN7}Q+5qS_v%EmL#w-h)h>s(7t>e0er
z^f0z}4A^?U3=UpEHn8}}$FTfA)Tnee8DaQruHmt9%;%vJd!Om9=HK9~gpcyv_X<7z
zI@wB~u0rSqdl8s$5JNc@5a@-+Qc#I+F`$I%IWUl}6@diXG{krU7ffEkgI;`x7{mnc
z;$TW&U_h|}poT@s5Qal1f<m|kLpwZ7U^r$e7>|1xP(#RpnKW4h2Gg4~^yefO3VA*c
zhVzDq&GV}%{)i-gqBqR?^IEk=1gXLdJhACCUVM>o_jw~CG`D}>)=flO%<$wX;_{`y
zBZ;55h8?)_GLup$>kFy94fh96{E`=9hpW$~GT=q^d&s;1*3m{}>&lK~Y%Y5=_1~^`
z(rl#u<3jOb#LVx(!HyO@N*eOXH7{tV>`dGs`7-{<GeR*VwLT(+xcWmrv^<^huW9D2
z<DR-(#CN$8Y;ot_w=&I|*`dD7T(SkV5esWz7T5B<)Sy*B*CDv*E)UU#h(E7y&}&7K
zFpu!1JP8;%L|C@a63`YrAyC8=G7y=EzKv2G<8WjJXUdYQ_fs>IN!WA5jzn?MhO<(Y
zxjwU>ZnEI<-(9h{KXW*HHyxs%(fLMxlsu<jk01KxrzIyqQq$5iGPAP(Z=td$Z%)4a
zZQVIQ2u4s0CrFBB_5sHWgd(v-Dw8XeDz!$d(;JK?v&Cw&JDe`J$LsS0AOs^Qh7%-3
zGc3moq9p%1{YQtU8>VGDuIC3~6enqx7iCp9ZPyRuG%xG6ALn&H@AqQ>CrFBBSdJG&
zNmf)%H%!ZRT+a_+7{y7N<waT5P22UuIH7r2xBWP;`*}a#-}iVwfCv-HxR6R4>pVXQ
zqc};kyeO->X}f+Hr+Hbo{W!1tdB0ylR`-~T<!Zgzh6MUgQPp(Av}~8#<8^#~0EA!!
z#c+b8Xolr@flwrtNM&+`Ql-{tb$WxbxXEm>+UyRe%kA;{`~V2S2#VnZNzn|;@q#GH
zimK^`Y1xkJ`9T=PNt)$FS=CM3^}{&L%ew8ydEL+Z{V)KIK%&qXEDlc~lE@S)jm}`Q
z*c>j8F93xiu|z79E0ij=Myt~sj3&rzvD)kor^|gZ(P@)AYV=<YP<+owIEy^9yX+hD
z6EpFnuy4m)*4K5|(AQlbzDf)RC_4_#KcYzeNq;ILYr$ycu>4^jN0bT9F_C$EZWf9M
z!I?6*b?)Uq?~~iV-pw<0w;q1X*gTon=@Ok4c^Xn@Ip2IjdPaSrE=4{E?zz2R750!D
zrKjGIcnIwCk)G&bu6-{0xJCOZ-OO1&tpjo@l-tI9oP8QJYvO{fpI5~(>!D4Jg*mVk
z>B|783fH&mY&X#?VGy4t84N2HVzi0vg3h!7uXw+BM;VcCy;Um>TQyfjv!I3ydDM+f
zBy83WVNlNGk6RSEai95Hjz<-aku(*Y@(Vm9DwIeLYZ9;P!x(cks;JTGTZY;02Gcky
zlyIo*1-d{RaKg7>-6V%6!hXL-H%o_`I4#$h=taN|>Z9wyITf0cn~NE{s2MAAfA~T<
z7i<U3SOQ5U#YY|)2Hs+AQ$>2B#*Ux%n8XR$BRaF+9*+<fPU6v_a(qMn;3h}Z+*E1+
zx2;f)m(qq((7PDpMFx)mCt!}6K=YKzC9;Gk%-tUBcn;ytOtcesrHY}!eAyqj=yJ!f
zo|~8tyND@;%*U`Ui<=AC-l8&N@{BJmQu_qk(lKM7RgZl}>>2^rV-B@d+I9Cz>P9>t
z<vBU;wOqVqRJ`}|0xw__Nj2U2UBL}%?JkBS#6c+2vET3SQTCY_T=b#l#8HHoO4_R-
zCs4oBvtlO4Y*vDsKhpfR1$8j0#aNE{BPxQ^3kPDlX1<j&BzmkEbPPd$kq!UWCzfXc
zGo~l~DicA`$gz+|6FTFjUB*D3F~l7l3n+zHRd(z$D=u=jYN+sil|jang3ek*QA1RA
zkoLd+WoLlEmvCG4`1<OoCv^>ha71wu4!Iem+5>i{5JM=0+)!GvkD3W9VI!K)dse*@
zR%Eo@md|$^l8@xE9_+pFiMit7QEASD-@$<{;@cD@V_<#C1?F+vj4LstcH4%Wa<@SJ
zMG9?cl(D-`5KFiiGRnh=vf11B4mEAyZ(%YPtUCNX9YNzA(doiYnbkb1X4LjpFdt^c
z9mxt#j1??zH4}x#EE(I!5{0)s5M#{N6C>=kpHy&F*!uv^9&FyQuZE^w4NIOogB*)q
zy;CU(%qL$JwaO=|Eq&cSy(l5{qkcfG8BzQlF`*gF1>=K(eOB{fvUrd5LNzFF$O{z$
z$7Ki|+A1%p0I4|M1AWyCD=oU%0IShm6d#crS**>pM;+nUzN0HWJFGn3pdBs(#`A`4
zL*QNJADFxg>`925K)uG}v&)RCR~MSBE9wBeF?@tWr9(GZ@T{ngV<dLeBsoS$WX=*4
z@KrnccE{hIQkE-31IE%zun*aH6d&VqFSw9xUHT5rF%5}okt@sEC9-E#c_d!Rp+rpx
z+;J(QO;C__s9{K&wqv%pc%nYifW`mWy!bAt1iX0-A>B}99SK^lnKWCVQGnM`<{!>K
z#TkNT$SdlIV|dW9J57C$nCXLT&|<pl@<5y|4~6}y@I($pYg`nEqLLLM+Z2^!x#Q=#
zN$GW1|EA&U%b>cDVq3<+-jr49Pl6z?Jlv7WiV?A5si>i<{{Zdknyrclo(H2%w=0fa
z9J_<~No?(*EBd#?hohgr(Qwk0GEXO`r#YyjK9X8Iy9T^}IZb26rrnEof)&}N6UtDl
z^{iKq(uVIA^+7nPm@Ix1K7;Vr!4yOpRl1I9UK@5@GseSi-S+VT_Wyt5<w{P%bhd^S
z|NXI|ESNikD+&)rN|vPJWEEzm1TOmBHo^L7F)Qr&Df*l?&@hL75`!(<FbBJR>ue9o
zajOw~N>nt{FsPO*m&Q%Xi+CLeldh%>yo;xFH~NoTp>uKqO&jt`e0S0pCDdc$owK>p
zIchGK5G&Z$xgk8Ejy~bi>+*_%d+oE76r<g=<R}QP;K(E|Vo(acYAyK2hzgP3fU#Kt
zwO#xqpH?Tu72b7S-Rcgt=6<;y%&>(Ekcr!in_{7G^mg^vyQIvkF30V<C;QN`SQNE8
zVDk)eh8vvm{MAj2LI`i80)^jPq+m3-?lH#HZNBApHC;2_)Ttc=$?sS$RdJycwQ-oW
z*TNsxq5mZQQwCfFE-lH7`khPKxxgw<+B#}mRSE^43NN^QDOK!OM{nm{<zHXLAesWw
zY8o=Hq^G%|;<1NQ^>yGt4R>T0ebb!<MEvg=a-%v6Xl^Q3yIHNnV-Z_|ieV7s9h(C$
zP!hk_3jVWx@C-3r#n;u-Z=N~Q@%*-q+W8FGd|j4*`+Y<d@AJDExYPMe4!;LKcY7_w
z>t8CdIDLfSvHE%XUxS`sQKg{(S9j7igJCZ)mrRA>@22ttliyuTRPhxYhe@#0P4l~G
z=Q-=uuaflGzZWQwoKhTEkGW8KFKp(>;5Z(XsnttP0?trG3HYupH!prL47C6KWfg9m
zefyXS8DqwbitX;tTgvhjPR|&?9ZK=e_f?f=DrFE*NgM687h0i;dg#2*MQ?*%y;rH9
zpg3Vzz$zr{MEa#937c>(*KPCJP%ARB_7nwvh7;>rkkp$#vwU*XNvwUXv>gGB$gZDR
zF%Hb}MyKB+{c@18%+?l}lV}wM$NY$+;=}|c4k`F1UO#v-;3b@IiC(|Tzz%lBTxi`q
z7TD45M$A`)Cdl}!O<$ndqAn3)Y7{V^W+i^c$D`Ur=ey#eQn5vn8Al9fyKGR{6O4d=
zj=+$^TNwpv!PpR%5Q$xEjLJ(nkQ3fgEq!9JDhllm$Y;3XR2{E7^sH%+J?#HQM#9a(
z3cV0#EO^}qtm-Y9(I^bc8+dR&J~g`1eL`2n#+PAO;b1>*%dA;`Nxh*Qz&i6hKIBU-
z7(4n9RNP#lhOm|eb=1@23Cw%CP-W^iJku6gMn^$gFcaRfw~87QN`}7feG$HzjV}y0
z_8qk=`nc@F>qjm<EBN+^>Mk6^p$Nwm))jkfpex=a&8?0^x%EwpcS~l4B=6rAJTa(z
unzg_Qp$J{1uQh+?R07Apiq*-lDS^thi<9ujp91->(}hpe&Z|^fE&u>g+})@E

literal 0
HcmV?d00001

diff --git a/web/css/fonts/awesome5/fa-regular-400.eot b/web/css/fonts/awesome5/fa-regular-400.eot
new file mode 100644
index 0000000000000000000000000000000000000000..38cf2517a4da71a05f8e83723cdffce45ebc3319
GIT binary patch
literal 34390
zcmdtLd3YShc_-Y}clY%4+|vVK01Rd@Gq`WekOT>WhbT&<NLZq1S|>mPJS32S0Z^A^
z8?k9cmSu%fXh%_;m_FB^k3?%bUPV5ZcCxnO*k0LjyouJk;iDXn*PoMsl$FSiJ^X%e
zb<bc104XQW?jQRBGu>6y)!lDZz4hKzbMO&C=z5nRFhLaPPZSi1Cs1;hQEKnFn_oHd
zVr0+1@9e>q(sHUG>=I^$Q^KN<61EBV3)8{^@+Wal3B&mA66TSn+|4*16HW^=!X(NB
z!Cq6cR~W>9ztAJ};eP|}X}iYL@5A%v@wOBE{hRpvdT{q3zrP)C`1iwxn;E`-VM&mL
z@m;$P-1NjJHoZX*-W5b?^7@_E?GieK^MY_@8TqFDxAYEdd+L@3+;j-}i6bW`=e}|N
zg`Wz7Yzcz&(y_^fxhq%jB;m}Da9uw(^Wf2)FMZ~(1i?rN!l?_#rzfWpbq8O@wIAYJ
zIF15&So|)Y7e&7H_{qfw!q1|M1@;`q?7+<Ik;xyiKiee;8lJ}rCnq166MiiG0n!^#
zKXq#I<n+j2_B08?{TBs6xqWVSVeuCywtZ0$-ntq0e2Ut}_K4QOv+p~9cVP3Yg3rZ<
zmwxZDHry}Z+<WCGSN=%+b@r#o>K?M-CVVbjxd0fJuKWbYU+29<x0L_R@{(tSPh)uL
zj~>i;*%)Q<C$oQGX9Wetd)ZOsulLTc3U$I6x}l7bymr-L{OEO4!qT$*>I)o(9`-Ha
z04~!w32YPl7)~jHxh+BZlk}`B|0<3N0d|1{qSG}F(2{$`HOf=D`=vatx%IF7g4cKJ
z2;vy>cov@dOPrDSo*}sP>7ME@f6v64GMxcq%3pEJy-x2h-^<IW&V{P)64Ll`c!bK?
zp*od&y*gCyYG0}g_^+_#EB_#l;ohYyKX=Q#XQIq|X61e8>tFKsQhkB0U->1z|4R4O
zz<2@I$Gqp1`*W#$k9&=`o65#2^~%ruSN>j<d+l5q6MELzl@g5$heNpXi*o<{s%N*&
zxF65B>OHTy*M#-|h)U8o>EfICedGx9l7cK^P6FGO1Xbu*R+hD8XF0vxy4<roy1aAw
zP0Od2=av_iPcJ{bytMqt^1GMME&uNF`Q`tx{9l$|SiZRY|1Q6>{MvHqQs`3srR1f-
zOFJ*^x^&~EeV1;&bjPLXOOIT7>e6Q}{pqD|U;4{Se{<=_m;U+E&n}ynZ@7HZ<=Zdc
zd3o{jLzmxk`MsCFaQTlefAR8{FMsXw_b&hN@;|&HzS8!}?XP_7mGAyE_|wn)^rcr1
zzIyD{hhBaB)epS-u~$F;>T|Dt?bR1Rjf7=+6|8Tp!1|UNSU(C_zfl8gq6*fVE{$Kh
z{nFH>cU^iCuzqzFtk(n91Az6-mmlP?{-Fo!S1-R<f%VWTSRZ`#?XSN7)sMdVxiYMQ
zD}hqrp8|gu_}jpL4}2@|jldrUJ`^|~_`SgI2A&SQFK{;SMBq%|;lM+I`vbQH-W1p#
z*bwLsbO+i3@jx&TuzzO%FZ)OK-`Rg-zihu`|GE8n`;+!r`>pmv_MCmxp0IDVZ?SjS
znl1ZF{$Kik?EicJ5Bz`O|9$_b{h#uG(*Ga)&-kD8|C;}#f49HRdeQorb<Fo?z7P6Z
zeNmreUNQgK{3r8e^RLYxnBR4A1K99?#UE3F@gAg{Y|`|q{wrUsF8lv)dQ5m&_!HqZ
zc8Yz4y)1T!XT<MFvUFJbv|KNLSiY!O%5LQgYKOW{{gzg*9oAmf59==*cNx!_wz<iC
z)clcelkYoL!YWwruwL{>{eN#a+57BA?XL%R0z1DJ6oR9{Q^Ds$8$w?Qw}p>}KN|i{
zWN+j<(Vfvx#Dv)1*jM7o_)Pq7ogQb#c_Fbg@$tk@>yFkf*FRnV&4y^hZ4Ez39#8(b
zacAQXo6a>SnvXVrDJ7<krk-ojTXwfR(Q+X@mHtU)Z{{nlcI)xh@3;OU8_n*^jpaU?
z*Yo@GXY$YIm)mk}_q2VpJ>9<4{=<&F9e>g})cJ7dFS>SjeY88+{dAAoGu5m1KGN6G
z_e_6N|K|tHfl~wjIQYci4~8}jJvH>>;iloU1)*@L@b#ixoB$e#SAKrwuSFGnH!QRQ
zlbV<sU~0OT^{_&*5O+qIQy9wUP?+ywni_3p@gn<XYa-t82f?o3A2h@ht(~VkI!;F$
zTbuSLGnwT6rq;%1C5bIH-?}gP*<kRq$^8eKTaAtm<6_er(+RaPlW9~F={GigR+j1g
zLg32tVn6$;kPy=R{Q>60)n2?Sx0U5{g{@*?pjj;TGL&mYM+`<S`<^-}6?*48Ln*25
z9@~mOwasWVwrNxE86ADkl=JYzEGp*gV^2jKW9LpY5qavEofG3{!r?O?J{*19+oFfx
zvwgdOcVD@{@GnI0-VR|v5V8aDMix~wE$Q4AHdGiKhz}H;;h|h6t!C16Y-ELWZm2L2
zkLJ>96jz7XrsDo&v~)h2++Xw$4h<b1%t#xXnl?(A!Jj;E;J^b1j*oBHFuvjJ{$hPJ
znT*yK_XmUL>obGF;9#cySzJHxzz1-B!#Mbme&q%B8YDwa2nfxB5XNg%ye^E_(Cd^u
zK{dh#8qq%(qTl|`lTUu<$&Y>f^y!bEX6mhqm9lmiT3BPxq4>$~l)j7d(;xSb%IZfg
z>xn+itT$=a>uC2yQDEosmIfgYF?*|Uy|7<+Bl><I9t*kc9}c1YYyc<p1_}qWv1lht
zy8sMdC9QIJse1_Sl{0&h+FqKVBYQ?wOEap<?y+95R(*aEYl_u=*m<{eaUbq3&8h4F
zZvV7;N5aAsJy3Nt_^qd_jvTiz#%Sx;pnyQ4W&=QIjIiborxuH<Xj5)Dlp7u@I8Drn
z#-bVxdt|s=gK~odY`kk*qBFi_NA_5J+g3vhYDS_d7OEG;e0%oT`>z{mI@+|cduT76
z*j&;~)-TuFZK=jvG{ex?`|V^b$yg#JNxBwDT@jX3snm}WDJ}>B2bX|@Ca}=$|GdV#
z-s|`x8;>S0TtNF%YUwBHS%ze(Z*Gpdv~+;ohu(PX0O2w{3^EsuX$FeZHOI0%GR|<Z
z(9Gx?TW^RqrX45k=xw^*_JFP*VoP}SMLvcpy!=@eQ-xr94V9eqf9xyQ8;5Q{b4%QY
zIi1AJ>J^HZTW;6$$;FYYWq^>llZ9G_hl=iGXPD?L9@X*zR*d9xnD4~`dnzTH6(k5N
zvYZm7%WUF<rJvmvO^PPdLVe-R(Bh`&wQc{}scX%fnzdsoSyrFqkOFH=+)+9|FMX@@
zGgC}PZ^Ip-&QO2frsub5%<R<oEhH6I&%aJ#&HT%1eA*FV>SdfXZDn5f#cSqb&*-SG
zJGwDCYT%^T<Z379lj~LSZlEEpg{g`rw0h)6qdw%&a7Y{%4z`CAh0TWXX+yu=FaXQQ
z6T0EOd(x!~hW;tTxSd0|<-NLrF{^I>24QTS9*Ei^5lEUepai30aa7{u(RTZ!NVBC(
z1Zuiu5KK{1dK66$o0hH{QeD6ovJA~g8ftbdw{=@xx~?u=+c}RpDLbgEil!-s6%A^t
zg4-1<s98Qki)m(I=!<ky9q%U`#4+H12-x4tv7cxVFblJ{Fg%nmD8MV5Wzs!hDMQ6k
zkUDLkQ0!r8RcjJis(0JAJGaSx+iB4PtXq;gp1yta?7<`@zVP%bH@-caefzn$XA?Kx
z&iYVsTTd{cwK%q4nFK8upX}a0%+HhmbkmL<H{G<OYg<N8u3W(!_%+U7>Ojv2VFD49
zcr1z$%cS!RzyW^-2ONcZ&EYgDUrcLxWI>7mu8K4ulm?0pkt2e;fTY&M#D`Sblyz19
z<tM!aQ+!tUHt|jTIM>kJJ3QpVA8*dphqG_Lkr&<mbcZB)C60m~wN#n?xtDlC+}b^l
z?>VhC;x?!~-PF*s<EGL@luVAJg<b*YAujLq2@db^5%7>>FyIKqjK?H^D8&_)5p$~2
z+Evokb&6GtXoL;Bd~dLP9*9e!7I3AOfpcw^)n-lLd$rRA?^>CN^dY~5Z(lUoS2|A|
z<-A+NqDOe2N6U#y$q$LiyL@QKvWDoJEIq|KN<UB`L;b7AQzJson>QF^8nq&335Hs6
znRpE16UMc$6$AYK@4x^3_w@E`yD?~)V!+XcnQ-u-hd%vKTh!F8riQ4KW9N~zdm4RW
zC>!3e>)=1%b>^<Swhwm1lhK$N^=mLnaUSB){s?G4(fzUvLu3}>LNkjDXCTjILe)h6
zH~mKO!Z&buoQ)-;6|!y=OUoB=xCq)q58sVB6@z?)RzW%<)P->5KG*@;HnMCCvmPY8
zljSpMR&3G4U@{pPw;M`x)LrMt&}*gft#$)TsJ}n<h|126m)>>L#s0*SLrg82#M}Gs
z`CrGK4t1<_acN0V+(vO;){MElldMBoS0Y1ec<Vd@M6GjMJ6L-?<E-fgNH)b)mDqa~
zU033C_(3IgV<q(&V&0`be}wb<EtT>KUHN;;@Wa<B#Sf2A3Wq*kJ>qBM{Qe7ly0VKd
z;UGvHPp*UPm4Q+7CbX+bgskhKN<QaeOo0%F6NM%gi)NiTNEk_gW#lO;plG=~ND1gJ
zE)p_1xn3qlwTO?IR$$xarlzrDiGV$_Jz$x!P}f5T$BrlVOqcdV6Ls6}zWW__HzfkH
z9FMUFn#THB@67}KH`gVip;%m&1EY3>pZSt`t<WV(`J^wJ=`3!)tI%b<X>+k(R=3}=
zeS1%)F_F?V&F*c?w2t_6vF*ApWk8jEHVRW1KSnY=OL5vKWMfs5{9ufvc$TUb-J>M5
zZ!PXLoamE~)TP*&@J<ra!T+xO;>wpqnf(d+YnuSOt<c0k#pAY`Q#G{*{D<X6)j0GN
zr;x*ioGr(3A&&C+z$nAq%N24cK|k5hXHX1*;=gwI{IaOaW`1<%h7E05JziK-GHiB*
zLW70PyLP4|mHChhbhHf)j5MYxe_k|=_6ddgLl8d}i#q$GjzV0|wr$w3b2R6Zby4>F
z)|8wGcbYz?N~xW@HWvm%$QiP#wItI#8}c({qTMh>zg}F_NMpx508JSKt^}bOrGze5
zf(1%cQN}?h-N-QeGNFMjtR)s5ELMr;PE}eA`s033KuowK#5Q&jqFYLR%-U_?bHM_+
zd(>j*QD=q9^{E{lDhT8!KdDYts9+nXIqn=Kej9_ew^7In-N5Av;el+hm5nk`=Qy}b
zOFlB(5^MEzg0grZ77Z61<Amy%%r+gh^k@6nC-<Ew0dFGpkx2bb{P=w<@NNS7-2v;j
z49hYa=H`e_+(b3J578=*{tgJY3U_iUh}j`_GF6LX=!sq+T}3uPyo&t=$S)vb5c(Yw
z5>RCbr%al}8T`kZL=c$#D5H<cb+GsV`%Jpu?=*#4MOBWn;htFf7E?0(WBy142SYMq
zAwv#Z^}&t-@t_@x*&l4^lFgvvi>4Yv9UYO_7Sl3xo0&hiqqZGoh5mG?$?;oey0LAr
zO%GXrZ-w+k#8z7);oerucVEo5V_H`<6KdAO@mBd+F&f^Yr2_t(`4~Nbo9C<Be^9tf
z5I{dhNWvgl0u;vSkB=~-mQ7{(4aAyvM?P1~A)PBmQA3S8^g+EsaTxMOzDLZYW6^jF
zT_Vb!$l0GhC=PT4>#eYCgkos0e@yckiraegmUOIVm_=n(Y)$v~#q8TLw7OxLTVjd5
z(S}sirvy#8tKoy1-%!~zya9ic?)O=(z2Qi!YDW^fqWM(n1N25?+O+!9cFfHA11W7w
zPJC8wjfeH-P$t@?DW?A^-i4Se)P7eU8Fa@#!duQ7S==GTjyNLHIJvk01T8`+>_-b_
z-bqf8Yx#}96KXNZU-%y!WvHq3F#5#3_TST=j_2d$@zVXeH(*+QC}OTZV!4_DV<*%7
zc*1G~GHjy?gZyS7=3fVeqI(moFbK`BYJb0Qi*UOjIK=8m{1_e@l^`|t7q&1G*$D@z
z8=(5~*{Z2|;CWQd51<0*D1A^3C_xjz7C})43WKN|=GKl}`pfQMnUPSvMx*88>+6kG
z?6>(yjk&nvj|EJB1$oL7=T}A@JLVydr)P2-P6PDJjly=!d~U+%1mooR?TRXVIt(}x
zh$Q-i4&0<sn~e+)L6gFr?6Y<<I_?QYIDa~7FRByK<c*-42h>BReUGZXB=(6=KHp|X
zOFxAi$tA-vp0G=!Y6ossOW#r_)Nk76Axbg96miR#N7n)KdFU!Jp%Z$+NEzy~Yz4yU
zXqnhxgzPW9<))OuE^F^(ej>XN2iGIpR@C0NwDgcF?z7EjO}j%?AK5)Lw0r1!uFA7f
z7hG40wbSFJWtGXIxNpj|ZSy!8R$f5mq1}7AO3!7>D;GJeWLF^BvWEFo+lSa$>H`mq
z+qjVijIvUK?pv|mc(SFyWxNzw-c~<ZX^F+1Xp=ZNFe(lgib~5cuu)F;NFYkpQY<@P
zn#fEgZK&Cfot(;)CfNDRF0sz8PbBK<>^gB*rq*oH*Ph(R9O5Gm+n4;8=aWSiHv^g$
zG-IroT$xJ~kX-`cY`~}p*|R_{fl)M{3eqqp1UFqksLtUk_y;&fhO{%{BD^Zmk65Nh
z%+npuk|bE4!wlchc3w&-#y&$yNaHsg>$01*J~7gn+A}<~H`N&t`;<sj@0w<FsGF;&
z+uAmi-qqQu$XQLx%Iw8sH*6mW4m+B*rN6arc+ZW6zSjON06*Jk4s5^v1knQ0JK0wO
ze-^m4k@zwo2Ws^|ivoz~&>@g_GS4-#Cd_amc1jE2?B_yeA7(q+IT&UC$q3t}B_jaK
zffxuycW(g0&2DOmh5};g3AUjNqTpjgxut`q1sOS@TPBkNi5*>=4*Fs=slm0j=el+z
z0+Kc|#d;t%vZ+7IHUN(VtwOKM`r{r16TB7Lqo?4Jf;hOMNM@=vMyIOWi9z@oVO-Hc
zlU(XXEIl+hkgaHop^QfjFolX4(p4ZeW$=xTU~=K6Eo>0qA<_!*d7SHhi*9Bw&pcil
z!_+bl+2)*Sg91dY(%Cswm>c6IW6#$^uBlh?q0_gj#H9oL{vr2a54W~j>@9}XM)R%B
zGD`1aJ1lDlyE{PziN4Ac_=8-!?#{mkPzti5kx1u>b)KSKQHiTHW)i)mitV;#fK6D3
zU>`nYd8di$iP=XJpGez_RW+<b=T<~PQgmIzE762%JJA{|S&iAJ#uANjCz<vIw(Qxs
z9au$Rt66R5E}Phah1`a$jlw6Psp)(UQoR!&;MQ%=?)@$<0=}0YlWH^|s=eoWRWT4%
zTaMORla5rR#Yp`fy6BH;8#iiEzo_Teg{$xCaFyw=IsnxTs!cwZcD0MOfGu#qX5ZGX
zikc40xEc5X7}tZWo5OdqUyG`ms5dur5CPgceYTEmvfO87*r5Nq{10-_)xhFN2qs~h
zSBK}VoNsd(lOIHq`B(e~d*C%V0;|tkgkKkaQ~03pskM|GbJO!6v<zfvT4SDJ#?{z^
zs_j12X{D-ub^71>oa$#*Qxdq6h-Yz~i2X<}rF5NL)JsoUNeiEe^-iT{-BPyXo=e_&
z-O66!Ve2m~d}<j{=~;%?l`iU!(Yx09oT@5(v?{%}^7EDzw92+1PY!N|XJ<86U1LTg
z`GTxy)x5iG9pkDW2l+e~Zot6HW-nso-0THDUZw?>5QVKDyoNYq4~fkMNA^@c*^?dF
zqGdg61bqpM4OP3SzNaO%X<70cFWR;iukvbfxz?qBKJKd$idD4#TJ&zlvVLS)GwV{h
zkAe{5^R4yCTh%)Q@X2J>^x_~q7NM-?11Q`7t9y`5l+LrwHJ10dv04<ON|#p*@Q)it
z-0<Xh_)Y#4eK{b!3Ge3p35nHaQBWIrU^x%x{M(U=`B>VPV^ODvjVeWl+_j|Xl*LF)
zGZOVdqcH7A;B6r$Cl1*5S!blbQ}-2;ZQZR+!+kf5IO(%zTlzM4<RYV*tOx6x+uQ5w
ze5PuZd+>~<N5hhIkn;(aw%hQGx>P}qq!Ow2P~D#Hk+zmlK-!o}#7kc}d-k}bhw9qv
zx8>v6WISMMBKwl0%9_?$#wANOB;6D_=cz}_U0L4c4SvYQWK%#y99bOkfwzTp6ITTn
zSNTQR9adD`uK3Qnr;Xewa9b4`u~9W@o%Jc(-P0W|Ct!(c9IWQGrch7z&LZRpyc;rJ
zAzN*7S;bo4`gL7ZkLdalbj_Y}cagWU!d9093SCzMOIJa;DxCA)orRjhy-RWRT4>I8
zti1g6y6-+)e)q*+`Q0QN!VO2=&aTn!XUk7!!FAt!=L%@7;VLh8_4XzB2}7VCjfC&j
z3I-6kndM_rOUTvQ*gO<7*9G~lsNJ*oMV2~l+UMC_P-{NVF$=WHp5MEdh$|Et&O0w~
z|0>Cu?XaN@doq+qM>LutE>jw;9%TOJcpfU4_v#Q!S)Z`z!w)Q41;_z=X|GIxyufMm
z0hgG6sS2b6_U1B7r3v7=+ip-ccxn#_cM#nqJC&H};2x?>#YzE*mb`4xgGkFD#}H1i
zMpc=sdL&fWYzcDV0Bks9uae8Qs_$t*CC;3|oD`J0uj>s-As;tX9nljFrerlXbPpP>
ziMIHj0P|^qc<^{5Q;dkM+d(ZEZ!mpzCv({`(=tn6<Z{4=TAEs$lO1)@sA)(1%l?R#
z${6yd-l1W~smsUf_XXO`gl#9n8zZJKZ0h>;K`q;ucs{pXOW#^HR#msXK(-35pLAm6
zNy~zJ4xbFy-HC~yK`_<9mbeKbI;1}>E|<e0P)gcXA(y8Q22q8|Os+G0NNpU-4YTjr
z1FfybV0S~KCHeYH%?!JSI?M0{damzAw`|zJ;!3b|CkKxmHp9>ceJr4()nnP*$vU5v
zZqtLd9*XH=<6kH0(?gB}L%}B5x77&pPSB&#!LH`krsKSintfrzPMGb1U|QRrdp=Xp
zgV*b3)b>X<hT&r+zc>TFQ#`_$u-oI9Xcy=VWZX*B3k;|TeIe&OrU2-AKrH5qT3*XL
z8U?`=ot#GnD^`Gi42L({av%`9zRllhwOt=;lI_jBtO-R{msd1=(@o*qhlXwsd*|m5
zZrO5h%Nu%HT6$VuwmPl$>tlgH<<9u7cDIZk77F17c-Y&AE4SZ4kNFooV9UWHct8sR
z4@AL%4DwUpcATiFLQ*`uoCqs|lnmVxjX^>pYZ`1zMU@ofVvafYz#EouVsRtVoShs+
z&`Im@5%|Ln_TAce;LJcrWDNc?S<bYX;nCKu<CeOyzI%YZ2nShvYw+Z)0|yd7EW#~U
zUhwEBUPuHSq%?j_IvOk!vuD?(Wh}Eo%&xmCEi21H6u;wOmU{-n*2+k^aWU)`?wv1v
zm$Rt<w!OD^doO#GJLNydS(1Z-UKk$SSe*;pzE#$f$<O*G1k4MtR$*?q)T>5Qu9A>y
z%By7Q^)+bH8CU7e*&2-)#IKDMNII^k9kcN&#kh2lb)jDQGf_z)u~sKW@SSazcDvf}
z@9}^|ic=!mUFHo%VGDeLH<B0V+FT;yI@Dm=%)#6N+ycfC;cyCC6b>M@n2sVnq~S_l
zCBIP<D_(`O{M<A{b<Kf7zQGceo?z6kO0AM&T6Keeqy_Z)eIk>jrfxHA`5#bV>W_$5
zWkscBn60JI&XDGhCz3sVk$@PnJDLO9?Mw;Tb)UE4lu17t68%ml01p$~@-+UOUR3qL
z&9B#X&`PifSK`aVCFt3yV8{nGAzBJ5>%a=clTMPs1yZ<5+kY5@5#Ov6&4ejxK1m9T
zMx7~2ep?cCC1i>bmVoWw6di_WyQ{YQMOl+`hYh2#Go%~44Z~O5V5^2XAu&ls@g$um
zd0g7+wpMJpRpM-oGyokJvaJ&*UO}!?F6Q#M9Itt3+u&6i_kB&1Grk^3q>Y*+HdrAE
z2~F;COJpNrL?!L2je6Enw}keomMRq+nsM4k>2O=TRmGT*jiVZG3&QB@jhZ``F*LRc
z0l>9YLHdNe+sUrdfZf)0$&9S}jDQ)`1EQuRtiFWL@AoCH3U%oNpRlrxzOdh?DkAGu
zv?BorO8shh+puKk^=8;g+*p|nT?Nb(1%(~b^~9gFC6jH*tHXA7tXy+x85NUlh=?oq
zqa<j84>Yv}@u~gbntO$D(7(Z0rWnf%YdGUGTwE<VI@*f#hU=M7(TP(45HJJ=+`$2r
zWGKY{5L2QDEu~Uph|9y_d(~2A6Bq6JQsYmBC4YUeu33qs;%0XPES_Q87)!BK3U|_9
zQ;igwD+_$VU}@s(Zwxku^NGn+>XD#N^K1C{zK}{)`u>6^|Mr5$y<XoFL*wEw2}dAp
zF&>^f3L`F5y`HP#3-o~2B!yBXTa`e&rkO^<ibj3)S4Z;Fr=i!hYRU##Z&g+OO<Ghl
z8&os4Ddy7?RkW!LJFJt}rpu12omTlX$_Cr3AkW`v(Wo|T>Bn`8AFhf$-_~{CoKM$>
zvR+L~&terv8Gk6QIS;JfOc57F9>hYHd#+!_ki91A5Zbs}AnH5rO>V(3GVfQ_5TeVa
zjhePmQ$woS^2@czbN<5#Ln?{}Kepfw6_v~NkEj~->Vm2kG%d_jwef$hk4B}5pKGG=
zB}1a4z8`mKTGd?w+Pflu*pR&%(P~%<WzUML#0QFbHSg)r1B5hCImmVi4=KXB9q>tZ
zjEf|t5B1LV4i5~xgUcb0H8u{%Vga}4fAGu(E~f0{>07z{;#6Pu>H<fkE2S%65f#`o
zVu)dA0fs>MlR&8{9tlz)3>y&lA<pKVh~fa51B^XaKOk?Gqdv<t<~r^6)O=E||3o(X
z7bB&KnLqc%^vBurc1u&~VaKORJtHAG89&hH+Z=dlAkfO*x!nCnM#TCiUM;9t`St>0
zN1j9cM4gZV2K12j$H-=j`2&7P;fk;<lZ=q3Skqiyivbi>gTy^76#-!!dN2g>jK=;p
zb=PDrzyC}fKM&o#dy}QaSpNFDuA%If-m&X{usLU5KXzwl;`%(xPH!5EckS<F{=@$%
zW!-fX9Xs~D8Z<k4v+=!KE)PZPZ|se~H99mL@4c~far8zfyLIS>NThEIX1~CVA>tTY
zg7t~w20LLRC#mli;ch@rB3iYD2bz%-B|j!vrJ`E3eGJ;`uvR4{R{K_5BdjYu#;WRw
z+$dZMIxV)@sni9=f<bl>PPHu*A7agnKR~BP5ioMxTJ>Q|5a3`<ZgE%;!d$rYoUXri
zMPRAYk7W4)7*p{XZ)<y;hioHu8=nvG<7R#YqF(tKU#a*F(E28>9U)p0GY^rHH1i^Z
zP7Ar;Fj%AVumdTMq9d!^SPr?`;KGu)^U6kyq-C0>^~+E4)6y44OFy#1@MP&m&@g(8
zhtrL@<{V5x@Mzg1()OPE+!6vYOuq#`)}QlJ>0Dm~ff-CR%=-F{L}usTMH=h$72j4d
z*XzXL*eXqA8$wMXjNOVolyrchwLS!eP!B$ND6=GrQS)*XZvwpt0VxH-w^+2sg)-Q_
zb<6(Nv9^(%EQU2-vL(?P?r3doLi{Jht{MkRu>B32^JCeJtVmL$&xpse@$^80%;W|c
zD=i>jk#YvSBK!TIuxAZ6)x`T3NlOE$Bs+63;s1<NsQCKjPK{UAi}C-eB-h_Ow(aIR
zNeszq)7X|~MgE>7HMnIgEGx}pqfL-?m&(=@3J6?@EI%mANu|)+GbGhP&Q|3_ES+^4
z6cz1Rx18pV7Y9VMW)L2;5v*)D;zp(-0CKQm?rB+xje>=zJRP_*k?PRgX~8!%oPmci
z6U*~T{3iYoR2<A#9=7rTy3av<C|fc1Q!*Cqwn`T$%F0c%F{H;*rLk0sT}bH`UBn-X
zF$-QG#png=xw8`+ti5dPicoc5RT}rEQl%w2jxm95M@{@)AnVi+KP2Yno}Jrk5u4_6
z)J4#f^TG~Lkv-^-ThJf(!ejFu;WuD^Afrjy2*v?-d&6x+IbG?YvQL#7SV>c>C43d!
zgjmy<!>=Id6m*Gq#UT7WD9?ID)i0zpst?k2x>p>cw(Pbp^2Q%p>4KGli)eZ20yY04
z)#Zn!6x+acQ`~Tf%7$?L;`x=^(Z9&7El6QK2C8B_gjDJ;E!4o@dFvdWj->m3x)-Cy
zt5n$-Jey^frg2$G;Yzer%tTs3XcZ(hcELVS9d)s^ckg)V{6$zNr=qyxhGGEyKf0F%
zOXp!lq%q?*GR)Nr-~eqzM?AVuzTe8L$emL_j0ifpI;I67Bc8*}osxZc_ysbKBJq-X
zF`7hB2s?)Wjc?(6!M#`=zfwZnUnP8n4e^Q<n7A!93!c;unBb{|vdIS%Z{%|brX08^
z_<TT50If1D<op3l6u-*m26}r3WMKW%mL+>>23At~)}DLz;KR;tU1(}r*y{3!>h#{3
znZ2b6Iub0RH_tx=o9-MS;gTgr!Bw4d!<&`d5VT(&@#H`>E<oOi!)%u;*8s3NM1)nA
zGOUv!5rrPWFM;fFGzBMOzumgS=#(S=U-%=8vBUWd8S#eJ_*gu#X?K0Sp=p}2_Jmao
zN`1XE8U3N&sjxQ(yV~Xxu_>d4;v{5U0l|h<klmUd+L-Cm+uNcJ))xHN`Jmq);GrWS
zzdzW(qd|hUKiFO=ThtIkD(mf3abr{T)=<5vMZ;6BFA%Y_{~5NUuR;<ePm<S1+_a3A
zLFz$=6nO7IhoHW>c7H(2u5<@fkREbLHM2q34^B7sC{0qx`kx{5{-7RjY#B_2$D_?d
z4Pk^%tC|rBqgPZj95z*SP9z-H8f44V<b`j7Iqg^4o6b1#clvDq{}V3;W7gYR+Voa2
ztGBm&_Y7FKe=oK68Ovu{zeA}nQR>T-`fW;m$I^_PD#?bWe)xW3!4=&2IAp#%x&09+
ziB$<?hIAlpj<RN2w!=MTG;#A3K#k}(3jU%z4ZEf~#EQKRQR6U|tj!?KC(eX)n;8sA
zhnhP(oA27+n22v^e6q9uaJtdCU(<K(62<!i#^Hb&S2RibxMTVvlK27B(7q6~?cf)v
z6-l(wN>U1mR3T+%qMe&Njfii<hJ<g!a1sllzU^d{2C<JdNP%zrl%j4msBFxL#w;d|
z$UaLo>*{#VR=V5k1ETp!#7)D(j&PUZJgf;Me3076DF!+Ofo2gN_J#?J*7Al17zNH!
zyc3$;jM$4tCU!?IPRa5ar)8*hKKv&wy^!*9`PhBdQ<}f@k{<E@MI^2zWXM<ZAxA&s
z_aCuCzuVaQ@a~-0;<OI+^|t6vOH1j=y|M7i(9`^p=J1$d>rO~l@=7AW`4r7*vW@>S
z`1Ud2D;JM|tzx=I1iHbV4~*sER6IPsSZKmPa@PnVTnk!(R;Y4EAx~fwdzgwb<fuvs
z*Ai^wrY1Hb!t%^s^@*E|8#?Y~R#URxxI^`+(PUdff|;VliRJ2LTfthHpc+WTl+J)0
zPs(*tgV-p=lTu2mmwTak$emJBPRWfir4`ZKL%yVH-tO-Vv3u)#RJJ!9(~Zk*n>1g*
zIH*RVMq{i=zu9LdJ0(d@bf}6y87erzhM;8Bg~XeK5iNM!*8J}YMfBkB`2EiXv}oXC
z@Wq@6D$&40=~hLS`Yd0)b<hg6)&a3Gzg^pK6C!@+geBqetIl%5-U3LVlB4$1D7z?6
z^swS<st^F~zUR4B*YZR$yt%+}Bv)K1ATu20aUGb13_IGgQEX7M&S%rnlbkN(i+S{H
zcj;$XzNMa2jn4+81{RLUno_0`vMz_iiUzwJrxQD2f>04ouShuUMMg0U1<5_OYU9KF
zR$JzPuHEl6CZFNN<3q`OK6#^(Fn#x%a@c%E58N+`2WX1n$yhZ;sThc+E@vp2;iZ2-
z$x9$4H&4(!oPeiV!ilH(AsCzp@^#W~e`hGdngRdNPD~bxE(gsha*dLZGVjLL{fZo?
zjHp~2s0<FfC)QTSd+*!%NHICQ!Iwxzv&~w>0Ck9F`YLmslU5=CmQNm0lM!`{sSTE1
zRD9p2-erPjXX3kfAEgiXcRty;!KW#8k^OfO#X2N~-oJ}lPt9DRL}lt^ejp&lgCCb9
zO+k?4VFR5>Ht7{RL%{W@u8!csT05^-JYyzj#6S!<FXQ<EGP^;NsZnzZqNGZln$(xl
zl)S9#^8TZ3;--`m4mQ*(IT-*Wska><Th?oecI#kVYHu<9`WVrE*SCmKf`&5!dG}Y2
zms=AW17~A-g&7;SAWGxwo#r4j!OskV3a$)tkU)C!7Lq}utyHu2eqzN_1fjNe#aK10
zKFCvpuuN5i>}aOiS#>Sg9_CA^AHF(754fV#UtSZGb^6WqM*^+M4+&yHPDmgp%p^6A
zv}?h}HiQhlP|%H#PA9!4M;hN%I`M|}>U(#We${qR{1aIuSKCWG`ot9!(5Z3+)V1Py
z%ERnNL^VHQ=zI8*+OAn0K|9wDk@{0CyWPXr*mj?CLwraN_ty2aAjXAOM|)7(*x-PR
zAKX3#k$IG%;|IC_R|z>GRvZjzN=VCu#6HzjOyz0VH_T6eQj%(NrOz#uUVJ+Q^^0$3
z>^xSmeO$%*!eL3;vXx;m`fV$@O{JH6SX1fmds$OgiM8~WUZy$Z@?p|F;()H)gPrhB
zbA1jHgttCD2bn>IH45w`wiO1A0=rP3%hjKKt0Y?!lwxP`_9Y@MXLtC|YX-ZJt1n%w
z&)p?j2XHl2pF^NjimqdYsj+#$^x}Z3>C3tiqKJa!+y+7$XGi6Q{N;QNWoa|CK6(cZ
zb1TVOqVf?yXK1wt>Wf-?4%S}_t3uka#Ht1o_F8pN(dSm4$?{bJNe@)sgeQ{!<%+lj
zyG#ajV6Si#o3IINkm62;GmvR)tUaOyg3xC&oUDc*bAy&TLOBqk;M!8bf3`vuR5P@6
zz=`uUrnEE={*DZn{eWHwB13t3CL@^EwFisZgNTdRB<b~5CKPFkN1PGoRs%8UWB2t1
zoxgEHr8n4=W$#zi86(`?Xhg+$ej}6EXh(9=YB7UZ!)QvV%9-vhl5`+oZPPV1rWGxp
z&u96M$?_@pcGxr`e!rOt7+NA25+i%*nL;02B+I7XF#MqHZ`49kz=)5;GUDjcAyf88
zQkvNsQPdljMn&IdHL7b&9rQsVH?3P_xsTuHjupv|gtv{b^G=`-t4*b3HdF?hWCwdY
z48dCnp%QDFXq5|?IK<#Q`4Vjf0VuS@fLk2n4wg$H_C&_L1&94p2qbGFnhdwyErqRE
zC{BxFtgtkth;JBT4Ym_>u*kLdAi{gksVUto2Hk4#7GpUA3l>csk@UqNRn=9$74Z3`
zVA0SiU-~(ZUczermOWCyv?1x}0V5#oFMYWrird>A6AKm+*<DO3sb4d-Zp*Dis}@A7
z8&NHW*5yYftew&=(ch(ECJ~)+<&`|=FNigPHO4c&RL(2r1atzVM1Gw(Upb;!<60lc
z5Db)bM0cqf_W5Ykg8v9#bjk$|{1}qfc<I9PLpdnl&lvtZ4EKRRy`0SZ4VD@Mqol8E
zYN(L@(u=f&<3-$&8~V6Uk0jE%o=!w`pP*IfB*kGiaR1G2S_{02rt^5rYeHMiSo2j(
zwmMxC3VgAYTDKM0)?u#pvtC%|vuhhOrU!L=YERzWua1XLSKExsle6q%4G&Pj0+9kO
zOY2NXLvv_IXk1?8+sy3cUe+QfHNSsuL!zgtsj<1cj%Bk5FUhu#N!iw{G{z3`9cK=4
zKkN5Bg4LH3O_SwYhsJI>efpNMp&=6vSfWiAxXp*gfOzWW_4_|U>NRNwKn|>uapU&a
z#hh_Mmhv_trHd0pc=;i|F5ZxV3X=|IGN4SUkC25;fNJ2gPCpYJAiv*5k#yexJYeMY
z+fDxB^{{4;wBZV7Lpc3aFs0nQ)fm&lRuG<TtVI)GO^G*e4ZfsG7v->v^kI2?Jv5o%
z=(J+jpmrg;Xia-yuO>oPV~0m?5j9%%*86_^V{{VZ{UpFj;=@3<aQjFL4ImsoJV=gR
zfORV62Fs#ft8J2v6xroLu%1m4uw+B9pA)%QYlXa6x`1)Ka50)(-~RaGixX@N*2;?l
z!`@UE*w;bRKMYyEi3Frxa5OF{<$A@K=bEiBVIGx@(79n^o1|E6h1dedNm49j$o5mr
zyG7uGo@C1zCwwm=OeCB+R+L&#=7o4echdV^9}UD{%FsJB$1MV<X3weE;YYXg@G_}#
zK()l!?h!CRpRdkPgPKtXZYax}cE?1Y8qieH$g6%{AA699G786c?;cluNYZK-Tj!4w
zRSi#KvE7?iJ;~>*dQzKm^(WmaThNwuC#~qT+D}v8&~ab{Kv`B@56!-wdZcAr-h80r
z4IUsF2SO#?V~B_g)l?Sm=!heL522AFc9XIB<B-1E(|o>P^<iZi15O1zq|IV!zGA-z
z$a1bFAro<#4t5GEGb_(}1v}O#LnW?rYlB?IiGX!g&te8a0p|P1si8ra@L(hi?dG(a
zu%-~$DW^XhempEncS&C>U4-(6$|-NX#yH=}q4X>#KW=8DVZ%(cv9YmH0wEeNJ=^Ej
z#rz;z>C&A9=*|$@aXr^RtL*hyN9{@*TUdnK+c00z&f!`mWzY>1EDUIbe)NsCu#13w
zi2w<jFxxMxx0N2}XHHG|g$MYW&3+1_Ij-xwOBYi?4!A&(=s#6ela15qrz&RF6%>M`
z;&?Y-82V`WE)YsrhhD;XP!vAd`D?)&fzXW-uphpxBN7@S3IH1j`61j@2DE2YnaGcW
zd=+?b?E`8DoKxg|0F9~We-tTC%0hxi&z5Ge&aBn4T4`axYWX`YtXV5obddyvhLZ-0
zajO>oKLLSb2euHJ()B4t)pyiN{og<sW5B%@Sm#{@&c)Pps~1hpw^jhD;pBv@>4O70
zXP&H=2XA(-JZ;f>Q<b>?!&)FXEv?pZ(5}^b1^3&73~`lPh4}<~tJJ6#H7~1CE>^#-
zR)@j6$`K)=H-eg{*SUHD)R|b+3j}fZmiv4y_-^or*XBR3ZZp<(Uisyf|19nR?vT9T
zKx%6eC~6BhgqA>Xr+tq|sZ}!0U=~w0qYV}{CqL*EwPJ?7sLB|o(oZBy!oFh46hiQB
z+Bmec^e;nS8~WzfokLR(>>Qk&3_UQ!E-2?Tt@J5bX18kEIi+uc|D8R5{*_nGpXahK
z7$)gd8g%So;X3rN7ljKGW+xnHz*k@l?Whum<K3N@ASIwR)$tXBY#3Tt3+N7F>tiiL
z1(x7))}vt5wx$NKjR>NDL<o0d`fKFN`6cm8zu4E1rJ#U@EIXfNeY9oD9Y=%uA?!IK
zVY#&}u_7M8pbM3FeFlD8T0T!V@B^QN7op1#uWwk#jscms?Bs*$a*ch-YNY{p<Gpk0
z%$6-MM(74kdfcGXN^Z5R;H~@ohxO`ucY^j+_CIoCpF1h$vAh;>^_k1F-j+A8-(O{S
zq<8YAlhw!PUw6NxWmj0KI{xwNZ=ghUdqoB(85e7&S6eh&YgV8Z3pr25Ez+6<q6mad
zwAT|S2<1%~3pMLeTh!m>ZCZ+EB^FRkU(PZhHHeY=TC&tywKg@cZ{w|LPlU0BkbysJ
zC1gb*nsa`$0(S})MDWekaKrIgvqp6*XfOGIik>5knpKDc3UZI&0s?7AMNH7@X8h(o
zX?OW*WHiE;ujT=gk~B;;WR4rAq<mI2jiiFYup){u=8vyhP}<P$E^3X(`J&c0(-fgS
z;ILnYl#oJZXe<(vbOUaoh(DwlQ1B_1zjj<Y!A<wC(>`~}1V)3TIS_1On3(Bgr!2T9
zv<p%iN$pitRF4`|xAW6hPz{IGAVPV=YIXYDniBWwJ6w^zCI;u;tJK|F{lMz<8Be_D
zu`4U%No%9?uniWmJ0~J_R*&n-ngZ8=Q=Vfv8bx#if?GM)DwkhvJuuUF_}*r&H|98-
zKE$K`hO0_=aQ@QTg~ET#YrcW2kzJg9JN#)&RVDA><rLIVJD$`&>>0GWT?H5ZO`<CU
zVVHow6r_mBRfCjI^J(!2pHTZYZ^2$nM*mR1fnAhpC(~J8gIB&Y-C)3Q5|FTm5a99G
z%zJk&dI9mb+rTYuK&0paTAQ>6K5yPv)~1(bQ%~3Bu|M&_B0?ZwSfU(~Jocr0h7|=O
zUk+Th8uzN#v2(HQ0!dH_*e(+Z%{boI*Efgn@it^oRNKVrmF<~iG(~sfFp<zTqb*@*
zdRrn<`6Tp&(Tod;Rpa4e+nV-f3l#3<?wVMDxiGh?{nc$?0~%II+|*uQXp=-sYk$WX
z-uLd}{92IHlBuVAqPe(kO8$L(blk0+YVgDl-bXf3(BmR4|3|zZ(KAPNYH};~5f|rO
zn0bUJAbvrKk!lujPj9ZteZ5LZ^Ps=^CWXWP0$5@?4d%G&_!4iix3{j_jGi>LVoiSz
zk<_soe^&P=mZ*%%kX~1q2*Pk_bIO&1Yj*J;YmDhWJD^1}BJ*QCMh;t0J)<!(ldCGY
zM&}<CH7g#*Xf<iF8j8n5swiqr?JL<zyS{-)vU-fhb;4~JCC)^E5wWO5YxZ)498iRT
zEQK;Vq_$B@5MJ%hYQ#LMS`IUVhXf7f2U>}1)^q{;PFHh}ruDp9U&zaRAlf-nO_bZF
zdTpDss9%ol*knrsn_#i}_-S8#=_k~B)TrqamP*$puk-n?OV*YC5xeQpVEHAVmhSna
zq*S-KE8BLAc2rI$!zmKzZ)s_k-2SNQp=vtj2Mr@VZzuFT-t;ogk>vqx2QNbG5w}_t
ziN{jM0EJ0i#Zg?1x9l))Y8eCPb_H!kskdPoNZ7#;qCNjmv4gvGF)D|GM%a>|$=jBB
zxeAAWgHJ0LA4kJ-W57?f?4T&s<HntVMma3%yMpx+Q*A>-tc7YmTaC|^u`cgH-6d>#
zeH<pk3J?I2G}tb*aPV1R194#Wnz;KVzt+;C+4{Juj{hwk41@=v#D5KR?G5N{ZF)fI
zlWeJvAFwAZFM{q-g6<(A-pL2Om13rEMBLMH&<>0Z?EIiyFysRPF$85y1iEGm7#s3!
zfx3_?KwG_m*KjF9Q)SXCI~i<EXr%}mM9K>+MKq}JD3C2mMB9sn(~8EdNU%2@jI=jI
zo0G-e$2JdZN^jwoO+8Wemd0pnV&e_R2KzL%z5A9;{lOh8^-KSVMO31}Or{K(qIuhp
zAt@+;HJ0adJrOw|N1~e!G^<R@jWJERITB3w1|tPk+xc|ihK5)&Inw?1Gpc&shd163
zizK5XeeXW7Qf<N1Zo|`u6s*&7;*zqGo9oR&Cu=^iDHg>mqSd%fa(pB9sDwdaeHvEA
zb;NX(w`iwM;dBe!nj7oLQb)2EncuuhY#o#+WBeD@dP!0;0TJ7wW)KoruQFY3ZkBaM
z5zWXUM1W_j>aB+>?gY3#laLLjG%NTpLr!EAMGOW-WgpK-3S*R0R%(H&Y1ljI1?<`T
z9B|0tn&S@00Vis42+<9k{}9c?szMuKFTkB9Y?_zNX`>>oK+b8ju`q-LG}|ML>KeMp
zb%q-1SA|64O?-$g8pau4I5YFMnM~MMclZ3=rH}aX>UAgIcJewkXZhyN&HYWe|2V0P
ztfrLzWj&&JVFf*0q`jH&aXb|m7#SG|r20ojKEw3Uqa!0nw;F8s#KdcEpK`kSa4p$P
zUz0{^z#@vosFGn7m|2M$@(`^6tPPlUm`Qv!H~BQ;4(uJ(JqP!0nO2tNSr?1ghOjRt
zN}?@_Qp^|5)`y!y$^H=#?~#7lS>YeD^JOlIe2yPIl)2JnC@_3#*iPD~7@hU`P@`6N
z_eS!5Y`nY9_H{)QWmb`hcKKeZmQt!^S!&;I>^fMPC;y)Ig<X0H1_A1+xto6QN#p!m
zTMC9jG}Iu1dX9*yM`izgt!Cl11lKFUbm2ZaS7!+!Qn>}uxc$)6rm;GYW<iZ&>?vGj
zr&f6&%LDuG>9nW)^;mJsHEC>B5@1sHBWtvo4|4YSt0M}t%qTV}=c=}9=;6fB8YSl|
zd`SL{=u=Hw$$vvTreZY`tWwq8RB*MoIQ)7fN|ouynjKGu+R7#bx8b*O#D1nme)vR{
zV8ATc4-A#;2dZv_TRAQtsFD^ujo*`NYvceL(~T5GTIK@|g18{j!EDIcA;rxS%cnE^
z<W16QXv@0l?{FYLk;$}UF94CLp;#;=%XC!XF9|k;eePg+zi8oeCu@+y`sTQ8#}Nvq
zsuKJtkX?Kt!mM>&)FAB{R)A&spm^|qgx`bSU74rkLC!#S#XN<L&*4^F&t@Z+aj^VD
z8`;-sAaJ+(0fkRM__id|B0}qTh0kDh=L^?pvI04M<zA7sRU~gkawYS#)h%m&oql*<
z_3cew`+os`*1{##{rJ&7;hN1GY?6v)V;1d=3+&`}72<hHS%{@=l;b4C690qf1d9Wz
z!hf2}fE9ArG!b>yca4Vc^5r=0idHacx)!n5_^`3tv``p(>N=7Zwn9l+(u2((@`=4e
z5YCSsdotw1Z)liYKJR`!9<bwq2Dr$us;i6@IFk+lq}XekWG=&wQz|!~Sq+g$L-@nt
z79}nkw^&Y46eB@HR092N8rQ~;^>j&oUvrA<6GY!u@W-`l*4QirSKW-4V-G5G7wgj9
zz*%sAZ}&B}hg6i)&vKmp96x?o)0ui*kKJ<}#GF+>+H(3wyenLt_!dL$-n_Y6MNCI6
zJQN#+6@%q@S%wGs8uTRF30K5iq{m*zSB39vEjIop(3xwJ7S}9az81u+52)u#2Eg1V
z$ZxJ1$%}4UX~L>DB*8Nfr?<Kd5tk|wT_FkF6(C8&xEA!ED{B+5&A(FSd*FlTt_inX
z(I=FEei+}1f^l;N>e_xMKDQ3c;nh43B90pgag82-e|?3AdDh^W*T)Xly27NmJ$Qhl
z%L<~%YiwJU9xfBPG6OE3T{*+0z4un3X{~_mQr3#CMqBkB;uSmAv(uJ&0N6jmuUvxw
ztk975$`(t_GYYI+yQ<An+}zQzxuckN!Xm7TVt5R>j?KH^|MUtjkgakZgXI^!ilL|_
z%Tz~}t!Sv1KW=x(ajMJDl?|8GW8VTRd#x;63B-Z3j%<Ojg78!<S2lxS^3nE9Sc9~R
z)z_Gy*`pgkAU5Eo-AB7|{9HgaERRA)>ir;)bE|m%DBrTj8=gy>#z}A;-!xCn`mMUU
z-=gz?$MOww86?6T)lP))PS5a6@iHrR=O#pU^sMIrDONlQoZja=)Gnis20h1hA-G%n
zc`lF_H|Ic`^@y6t0ibOhuNL_65o|7iA8)BeuS^ei$%M0^5j`-*aoXJ$b6nT^BcVhh
zgda(&9uNARto7||tM&}d^W9*oO>H&90WGY?y3AJZCHj%Ib|ruAe6@{@3{$m@sjt~(
z^u64&R%J<wXDhs#+uYXYH~AIXxMt?o+RCdZ@b7cagey9^Hu74~M)=sjg%1Sp<~6*I
z=rVpWt4x>6?{2NuQ{W6*A<e2ME5K9_<5z8O?%+CztCKvjqLPe@yLTwe)H3r}hoP*t
z+<&c#688<l+*2XVHx}~TkT1%nivAIj>>x!m@xOZ5EZj7M#P@D5EkaZILoY1}Y3Bas
zC;5pR*j-+^BIMW$URo6rVvCnHg)Z@&mxfh9yyT^WLPYBK(jh^UZuQb(p+S0|myV&%
zUwP>`>iiO(T_%H(18XVbfYJ;Qzrjn3__f`Sd1(oD#V>nlStziamsW(m>>)3$3VrOK
zytFAC5;u8ipU@+I)k_D3oMd?EkYG#KdFilFknZ%-G1U2wUOJ9C{{SjCi#0_L;)j_}
zU^Uip{<F|+SV`TEc(JSfP_(dPcJ9IX6UUA(rrM6Qr*_SrT1;)be|ll|<g{?rn_lPF
zrK=y38cyw+pPo+LJbmo+%p`t#detvcSIVyj;I-dH3fao<P7Bv~bN6sh|6otw|CvVp
zZ~f`)!NLBXzP=5qwwl)5H$A^_V)oRgl-rK>m4?**^7k-C&HdHy?$v!w&-2E1m<FZ0
z()kB~E%Y<t^b_KT;lo@&`XsPvf#c8|$E)&>ho^vDw14m^)LB4%`tk8e<fd?5MENZA
zm3vWV5d$L}I6j@afBJBKA$1bJgPoe2og*wroj5XkDzz}Zn3_B_m0Fygow@hKB5D)L
zE&_!YV8ZUj|55&$MLfRxx6OO_>rbNk;^N%GrrzG8XxF5Rvpq*<ap70PrS-7oe>Z-v
z_l}jh@P7hML3D}gmH!Uw&U$~(pb$Sn56&ks83Y^#YNj(XW&4=L{0NW?upkSuFpID#
zc0|Bllq|vOSUqcCNi3fuS4fJrV69+=wX!VBu{>*I?W_aq!@5{E+$g=QkM*+wHpqt9
zFcx1I*#@=|zY;#eHe-`vS|KyWwz2JO2iwW6W4qY(Y&W}s-6*_=?ZNMn-^BK@{cN1Q
zf!)k*VF%c)>>zui@EAM9-o$QWx3fFgo$M}lH=AIS>@YjRrr0z)%8s$)>;$`q-OFa!
zNp_0OvN`r<HqRE=B0J6QWB0QM*n{jL_7?Uqdn<bzqs2DA#@@l+$<DBMu}9divq#yx
z*<<WI>~Z#9_5}M4c9uQKo?^er&awAl2?c%?etuD2Se%@fPcKZ*D@X7<@b~I7Cl(gF
zCubJrqcfAo^ux2W_nw@bzgIbNa`M=;JUw+{(ONula(bcr$cgzQGt<_Q<I_j(^)i7s
zpPpV=#Ekax()5GV2EN@3Gm{I)ts|2&)2F5;=jrJhkox5GsYUhZ?99~kyw5##&(2Ms
zGL9SvT-}E!=XI~rf<ZubAD^5#s?1EEoIT|`GEb0nADNt=l8#SJ1&?FWb<fS7IJMZ#
z34frfU}pO0qQ5GCdanBF)a?DI<Rf4h^1|eO)9S*TPfyNI>(i(1o1OtM#tgBM!>4Bs
z%ZI0DX7uB;3v(wHCue+fGp852-O8%l6UxHL6EoAw(Rn;jIyrq@zjyk<!?OTTFSi>v
zO+Hxex05GMRi5B=qWd^&0nJC3aX_e><|Y>wLTKsqqF2~WFb8T%PS1sF^1Kt|qX0;!
z1NFGEc>MIq!wcP~=X_p@9wRNBJ|&-=ojq0i2I@0&Y8E}rM_E67`ozrCiBreir_D_r
zHTYxipPipFd20HBBhxbho}8P#e|nyeg?ou(j^%<ef8_Xy`=;IU$<tFOX5Hj{C#I%n
z-A5jootj3kADzZPo;v26o1B}T??%U+npTgVUOYTIW1O14e}Na9G$bx=g@C&Y(^Ei*
zIl@2OY0VzKXZpxu_p$le({r|$Iem&}eL&J9_deKtYIbp&u>RDvaeVgl{4rqZg26Fm
z9y7soafSeJ(P!bviG_vP`2`=pFmvJ|46a*gVGi}J6&#zM_imn^JTmPsk3X7mdcm&b
zI0md_`K(&W@_8kloSgG{lYqw1nw!K-^#%p4n4R;|9BLrWz0>|O>hif{O-@bCPcJNV
z(>$(ZXxjK_%9n@t#1y96)Ujy|3Az}#|HLU^NB7Ce2Tq(k@z8W7f8rF++un6NdU1As
z+E_R>dq2p<z0=0xJZ3t9s`6o9FpkWenB&tRHaU-}L6^L@ax`9BN~jlKQ<o!jWKHqu
zIqBH+NgE_#`oZqQCx8yrOCEF_C#-V!0h<?0K1aK8{a$4fxbUDdb>g9i9@LIvV2)1%
zm1*+wj?<3KqX9>zWt>mxbf702JaKq>@?@Zr>Rz~idUDan^PHkCxM@sakfRVUchlXA
zAh-*rTLOaSC3&fP&*JQ<W2dLXyoQ^mDUZhltBVMH7ZOUz_W~;oI&^cuc#1A`b7+*A
z$<xP<oBYTtSZ>mNu2;^V2%6P>7!&Q@Af@JKXJ#;sx<S4dw1r9F#r%Uhoe5m8AL)Ji
z!s+?B`4bD%%HjzSW#Z24$`x>Ih7@f8633TvlJMI&!y;7X=DddRSNCRrhBD!$-+Qdh
HJNN#7)2yBs

literal 0
HcmV?d00001

diff --git a/web/css/fonts/awesome5/fa-regular-400.svg b/web/css/fonts/awesome5/fa-regular-400.svg
new file mode 100644
index 00000000..48634a9a
--- /dev/null
+++ b/web/css/fonts/awesome5/fa-regular-400.svg
@@ -0,0 +1,803 @@
+<?xml version="1.0" standalone="no"?>
+<!--
+Font Awesome Free 5.13.0 by @fontawesome - https://fontawesome.com
+License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License)
+-->
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" >
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1">
+<metadata>
+Created by FontForge 20190801 at Mon Mar 23 10:45:51 2020
+ By Robert Madole
+Copyright (c) Font Awesome
+</metadata>
+<defs>
+<font id="FontAwesome5Free-Regular" horiz-adv-x="512" >
+  <font-face 
+    font-family="Font Awesome 5 Free Regular"
+    font-weight="400"
+    font-stretch="normal"
+    units-per-em="512"
+    panose-1="2 0 5 3 0 0 0 0 0 0"
+    ascent="448"
+    descent="-64"
+    bbox="-0.0663408 -64.0662 640.01 448.1"
+    underline-thickness="25"
+    underline-position="-50"
+    unicode-range="U+0020-F5C8"
+  />
+    <missing-glyph />
+    <glyph glyph-name="heart" unicode="&#xf004;" 
+d="M458.4 383.7c75.2998 -63.4004 64.0996 -166.601 10.5996 -221.3l-175.4 -178.7c-10 -10.2002 -23.2998 -15.7998 -37.5996 -15.7998c-14.2002 0 -27.5996 5.69922 -37.5996 15.8994l-175.4 178.7c-53.5996 54.7002 -64.5996 157.9 10.5996 221.2
+c57.8008 48.7002 147.101 41.2998 202.4 -15c55.2998 56.2998 144.6 63.5996 202.4 15zM434.8 196.2c36.2002 36.8994 43.7998 107.7 -7.2998 150.8c-38.7002 32.5996 -98.7002 27.9004 -136.5 -10.5996l-35 -35.7002l-35 35.7002
+c-37.5996 38.2998 -97.5996 43.1992 -136.5 10.5c-51.2002 -43.1006 -43.7998 -113.5 -7.2998 -150.7l175.399 -178.7c2.40039 -2.40039 4.40039 -2.40039 6.80078 0z" />
+    <glyph glyph-name="star" unicode="&#xf005;" horiz-adv-x="576" 
+d="M528.1 276.5c26.2002 -3.7998 36.7002 -36.0996 17.7002 -54.5996l-105.7 -103l25 -145.5c4.5 -26.3008 -23.1992 -45.9004 -46.3994 -33.7002l-130.7 68.7002l-130.7 -68.7002c-23.2002 -12.2998 -50.8994 7.39941 -46.3994 33.7002l25 145.5l-105.7 103
+c-19 18.5 -8.5 50.7998 17.7002 54.5996l146.1 21.2998l65.2998 132.4c11.7998 23.8994 45.7002 23.5996 57.4004 0l65.2998 -132.4zM388.6 135.7l100.601 98l-139 20.2002l-62.2002 126l-62.2002 -126l-139 -20.2002l100.601 -98l-23.7002 -138.4l124.3 65.2998
+l124.3 -65.2998z" />
+    <glyph glyph-name="user" unicode="&#xf007;" horiz-adv-x="448" 
+d="M313.6 144c74.2002 0 134.4 -60.2002 134.4 -134.4v-25.5996c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v25.5996c0 74.2002 60.2002 134.4 134.4 134.4c28.7998 0 42.5 -16 89.5996 -16s60.9004 16 89.5996 16zM400 -16v25.5996
+c0 47.6006 -38.7998 86.4004 -86.4004 86.4004c-14.6992 0 -37.8994 -16 -89.5996 -16c-51.2998 0 -75 16 -89.5996 16c-47.6006 0 -86.4004 -38.7998 -86.4004 -86.4004v-25.5996h352zM224 160c-79.5 0 -144 64.5 -144 144s64.5 144 144 144s144 -64.5 144 -144
+s-64.5 -144 -144 -144zM224 400c-52.9004 0 -96 -43.0996 -96 -96s43.0996 -96 96 -96s96 43.0996 96 96s-43.0996 96 -96 96z" />
+    <glyph glyph-name="clock" unicode="&#xf017;" 
+d="M256 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM256 -8c110.5 0 200 89.5 200 200s-89.5 200 -200 200s-200 -89.5 -200 -200s89.5 -200 200 -200zM317.8 96.4004l-84.8994 61.6992
+c-3.10059 2.30078 -4.90039 5.90039 -4.90039 9.7002v164.2c0 6.59961 5.40039 12 12 12h32c6.59961 0 12 -5.40039 12 -12v-141.7l66.7998 -48.5996c5.40039 -3.90039 6.5 -11.4004 2.60059 -16.7998l-18.8008 -25.9004c-3.89941 -5.2998 -11.3994 -6.5 -16.7998 -2.59961z
+" />
+    <glyph glyph-name="list-alt" unicode="&#xf022;" 
+d="M464 416c26.5098 0 48 -21.4902 48 -48v-352c0 -26.5098 -21.4902 -48 -48 -48h-416c-26.5098 0 -48 21.4902 -48 48v352c0 26.5098 21.4902 48 48 48h416zM458 16c3.31152 0 6 2.68848 6 6v340c0 3.31152 -2.68848 6 -6 6h-404c-3.31152 0 -6 -2.68848 -6 -6v-340
+c0 -3.31152 2.68848 -6 6 -6h404zM416 108v-24c0 -6.62695 -5.37305 -12 -12 -12h-200c-6.62695 0 -12 5.37305 -12 12v24c0 6.62695 5.37305 12 12 12h200c6.62695 0 12 -5.37305 12 -12zM416 204v-24c0 -6.62695 -5.37305 -12 -12 -12h-200c-6.62695 0 -12 5.37305 -12 12
+v24c0 6.62695 5.37305 12 12 12h200c6.62695 0 12 -5.37305 12 -12zM416 300v-24c0 -6.62695 -5.37305 -12 -12 -12h-200c-6.62695 0 -12 5.37305 -12 12v24c0 6.62695 5.37305 12 12 12h200c6.62695 0 12 -5.37305 12 -12zM164 288c0 -19.8818 -16.1182 -36 -36 -36
+s-36 16.1182 -36 36s16.1182 36 36 36s36 -16.1182 36 -36zM164 192c0 -19.8818 -16.1182 -36 -36 -36s-36 16.1182 -36 36s16.1182 36 36 36s36 -16.1182 36 -36zM164 96c0 -19.8818 -16.1182 -36 -36 -36s-36 16.1182 -36 36s16.1182 36 36 36s36 -16.1182 36 -36z" />
+    <glyph glyph-name="flag" unicode="&#xf024;" 
+d="M336.174 368c35.4668 0 73.0195 12.6914 108.922 28.1797c31.6406 13.6514 66.9043 -9.65723 66.9043 -44.1162v-239.919c0 -16.1953 -8.1543 -31.3057 -21.7129 -40.1631c-26.5762 -17.3643 -70.0693 -39.9814 -128.548 -39.9814c-68.6084 0 -112.781 32 -161.913 32
+c-56.5674 0 -89.957 -11.2803 -127.826 -28.5566v-83.4434c0 -8.83691 -7.16309 -16 -16 -16h-16c-8.83691 0 -16 7.16309 -16 16v406.438c-14.3428 8.2998 -24 23.7979 -24 41.5615c0 27.5693 23.2422 49.71 51.2012 47.8965
+c22.9658 -1.49023 41.8662 -19.4717 44.4805 -42.3379c0.177734 -1.52441 0.321289 -4.00781 0.321289 -5.54199c0 -4.30176 -1.10352 -11.1035 -2.46289 -15.1846c22.418 8.68555 49.4199 15.168 80.7207 15.168c68.6084 0 112.781 -32 161.913 -32zM464 112v240
+c-31.5059 -14.6338 -84.5547 -32 -127.826 -32c-59.9111 0 -101.968 32 -161.913 32c-41.4365 0 -80.4766 -16.5879 -102.261 -32v-232c31.4473 14.5967 84.4648 24 127.826 24c59.9111 0 101.968 -32 161.913 -32c41.4365 0 80.4775 16.5879 102.261 32z" />
+    <glyph glyph-name="bookmark" unicode="&#xf02e;" horiz-adv-x="384" 
+d="M336 448c26.5098 0 48 -21.4902 48 -48v-464l-192 112l-192 -112v464c0 26.5098 21.4902 48 48 48h288zM336 19.5703v374.434c0 3.31348 -2.68555 5.99609 -6 5.99609h-276c-3.31152 0 -6 -2.68848 -6 -6v-374.43l144 84z" />
+    <glyph glyph-name="image" unicode="&#xf03e;" 
+d="M464 384c26.5098 0 48 -21.4902 48 -48v-288c0 -26.5098 -21.4902 -48 -48 -48h-416c-26.5098 0 -48 21.4902 -48 48v288c0 26.5098 21.4902 48 48 48h416zM458 48c3.31152 0 6 2.68848 6 6v276c0 3.31152 -2.68848 6 -6 6h-404c-3.31152 0 -6 -2.68848 -6 -6v-276
+c0 -3.31152 2.68848 -6 6 -6h404zM128 296c22.0908 0 40 -17.9092 40 -40s-17.9092 -40 -40 -40s-40 17.9092 -40 40s17.9092 40 40 40zM96 96v48l39.5137 39.5146c4.6875 4.68652 12.2852 4.68652 16.9717 0l39.5146 -39.5146l119.514 119.515
+c4.6875 4.68652 12.2852 4.68652 16.9717 0l87.5146 -87.5146v-80h-320z" />
+    <glyph glyph-name="edit" unicode="&#xf044;" horiz-adv-x="576" 
+d="M402.3 103.1l32 32c5 5 13.7002 1.5 13.7002 -5.69922v-145.4c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h273.5c7.09961 0 10.7002 -8.59961 5.7002 -13.7002l-32 -32c-1.5 -1.5 -3.5 -2.2998 -5.7002 -2.2998h-241.5v-352h352
+v113.5c0 2.09961 0.799805 4.09961 2.2998 5.59961zM558.9 304.9l-262.601 -262.601l-90.3994 -10c-26.2002 -2.89941 -48.5 19.2002 -45.6006 45.6006l10 90.3994l262.601 262.601c22.8994 22.8994 59.8994 22.8994 82.6992 0l43.2002 -43.2002
+c22.9004 -22.9004 22.9004 -60 0.100586 -82.7998zM460.1 274l-58.0996 58.0996l-185.8 -185.899l-7.2998 -65.2998l65.2998 7.2998zM524.9 353.7l-43.2002 43.2002c-4.10059 4.09961 -10.7998 4.09961 -14.7998 0l-30.9004 -30.9004l58.0996 -58.0996l30.9004 30.8994
+c4 4.2002 4 10.7998 -0.0996094 14.9004z" />
+    <glyph glyph-name="times-circle" unicode="&#xf057;" 
+d="M256 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM256 -8c110.5 0 200 89.5 200 200s-89.5 200 -200 200s-200 -89.5 -200 -200s89.5 -200 200 -200zM357.8 254.2l-62.2002 -62.2002l62.2002 -62.2002
+c4.7002 -4.7002 4.7002 -12.2998 0 -17l-22.5996 -22.5996c-4.7002 -4.7002 -12.2998 -4.7002 -17 0l-62.2002 62.2002l-62.2002 -62.2002c-4.7002 -4.7002 -12.2998 -4.7002 -17 0l-22.5996 22.5996c-4.7002 4.7002 -4.7002 12.2998 0 17l62.2002 62.2002l-62.2002 62.2002
+c-4.7002 4.7002 -4.7002 12.2998 0 17l22.5996 22.5996c4.7002 4.7002 12.2998 4.7002 17 0l62.2002 -62.2002l62.2002 62.2002c4.7002 4.7002 12.2998 4.7002 17 0l22.5996 -22.5996c4.7002 -4.7002 4.7002 -12.2998 0 -17z" />
+    <glyph glyph-name="check-circle" unicode="&#xf058;" 
+d="M256 440c136.967 0 248 -111.033 248 -248s-111.033 -248 -248 -248s-248 111.033 -248 248s111.033 248 248 248zM256 392c-110.549 0 -200 -89.4678 -200 -200c0 -110.549 89.4678 -200 200 -200c110.549 0 200 89.4678 200 200c0 110.549 -89.4678 200 -200 200z
+M396.204 261.733c4.66699 -4.70508 4.63672 -12.3037 -0.0673828 -16.9717l-172.589 -171.204c-4.70508 -4.66797 -12.3027 -4.63672 -16.9697 0.0683594l-90.7812 91.5156c-4.66797 4.70605 -4.63672 12.3047 0.0683594 16.9717l22.7188 22.5361
+c4.70508 4.66699 12.3027 4.63574 16.9697 -0.0693359l59.792 -60.2773l141.353 140.216c4.70508 4.66797 12.3027 4.6377 16.9697 -0.0673828z" />
+    <glyph glyph-name="question-circle" unicode="&#xf059;" 
+d="M256 440c136.957 0 248 -111.083 248 -248c0 -136.997 -111.043 -248 -248 -248s-248 111.003 -248 248c0 136.917 111.043 248 248 248zM256 -8c110.569 0 200 89.4697 200 200c0 110.529 -89.5088 200 -200 200c-110.528 0 -200 -89.5049 -200 -200
+c0 -110.569 89.4678 -200 200 -200zM363.244 247.2c0 -67.0518 -72.4209 -68.084 -72.4209 -92.8633v-6.33691c0 -6.62695 -5.37305 -12 -12 -12h-45.6475c-6.62695 0 -12 5.37305 -12 12v8.65918c0 35.7451 27.1006 50.0342 47.5791 61.5156
+c17.5615 9.84473 28.3242 16.541 28.3242 29.5791c0 17.2461 -21.999 28.6934 -39.7842 28.6934c-23.1885 0 -33.8936 -10.9775 -48.9424 -29.9697c-4.05664 -5.11914 -11.46 -6.07031 -16.666 -2.12402l-27.8232 21.0986
+c-5.10742 3.87207 -6.25098 11.0654 -2.64453 16.3633c23.627 34.6934 53.7217 54.1846 100.575 54.1846c49.0713 0 101.45 -38.3037 101.45 -88.7998zM298 80c0 -23.1592 -18.8408 -42 -42 -42s-42 18.8408 -42 42s18.8408 42 42 42s42 -18.8408 42 -42z" />
+    <glyph glyph-name="eye" unicode="&#xf06e;" horiz-adv-x="576" 
+d="M288 304c0.0927734 0 0.244141 0.000976562 0.336914 0.000976562c61.6641 0 111.71 -50.0469 111.71 -111.711c0 -61.6631 -50.0459 -111.71 -111.71 -111.71s-111.71 50.0469 -111.71 111.71c0 8.71289 1.95898 22.5781 4.37305 30.9502
+c6.93066 -3.94141 19.0273 -7.18457 27 -7.24023c30.9121 0 56 25.0879 56 56c-0.0556641 7.97266 -3.29883 20.0693 -7.24023 27c8.42383 2.62207 22.4189 4.8623 31.2402 5zM572.52 206.6c1.9209 -3.79883 3.47949 -10.3379 3.47949 -14.5947
+s-1.55859 -10.7959 -3.47949 -14.5947c-54.1992 -105.771 -161.59 -177.41 -284.52 -177.41s-230.29 71.5898 -284.52 177.4c-1.9209 3.79883 -3.47949 10.3379 -3.47949 14.5947s1.55859 10.7959 3.47949 14.5947c54.1992 105.771 161.59 177.41 284.52 177.41
+s230.29 -71.5898 284.52 -177.4zM288 48c98.6602 0 189.1 55 237.93 144c-48.8398 89 -139.27 144 -237.93 144s-189.09 -55 -237.93 -144c48.8398 -89 139.279 -144 237.93 -144z" />
+    <glyph glyph-name="eye-slash" unicode="&#xf070;" horiz-adv-x="640" 
+d="M634 -23c3.31738 -2.65137 6.00977 -8.25098 6.00977 -12.498c0 -3.10449 -1.57715 -7.58984 -3.51953 -10.0117l-10 -12.4902c-2.65234 -3.31152 -8.24707 -6 -12.4902 -6c-3.09961 0 -7.58008 1.57227 -10 3.50977l-598 467.49
+c-3.31738 2.65137 -6.00977 8.25098 -6.00977 12.498c0 3.10449 1.57715 7.58984 3.51953 10.0117l10 12.4902c2.65234 3.31152 8.24707 6 12.4902 6c3.09961 0 7.58008 -1.57227 10 -3.50977zM296.79 301.53c6.33496 1.35059 16.7324 2.45801 23.21 2.46973
+c60.4805 0 109.36 -47.9102 111.58 -107.85zM343.21 82.46c-6.33496 -1.34375 -16.7334 -2.44629 -23.21 -2.45996c-60.4697 0 -109.35 47.9102 -111.58 107.84zM320 336c-19.8799 0 -39.2803 -2.7998 -58.2197 -7.09961l-46.4102 36.29
+c32.9199 11.8096 67.9297 18.8096 104.63 18.8096c122.93 0 230.29 -71.5898 284.57 -177.4c1.91992 -3.79883 3.47949 -10.3379 3.47949 -14.5947s-1.55957 -10.7959 -3.47949 -14.5947c-11.7197 -22.7598 -35.4189 -56.4092 -52.9004 -75.1104l-37.7402 29.5
+c14.333 15.0156 34.0449 41.9854 44 60.2002c-48.8398 89 -139.279 144 -237.93 144zM320 48c19.8896 0 39.2803 2.7998 58.2197 7.08984l46.4102 -36.2803c-32.9199 -11.7598 -67.9297 -18.8096 -104.63 -18.8096c-122.92 0 -230.28 71.5898 -284.51 177.4
+c-1.9209 3.79883 -3.47949 10.3379 -3.47949 14.5947s1.55859 10.7959 3.47949 14.5947c11.7168 22.7568 35.4111 56.4014 52.8896 75.1006l37.7402 -29.5c-14.3467 -15.0107 -34.0811 -41.9756 -44.0498 -60.1904c48.8496 -89 139.279 -144 237.93 -144z" />
+    <glyph glyph-name="calendar-alt" unicode="&#xf073;" horiz-adv-x="448" 
+d="M148 160h-40c-6.59961 0 -12 5.40039 -12 12v40c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-40c0 -6.59961 -5.40039 -12 -12 -12zM256 172c0 -6.59961 -5.40039 -12 -12 -12h-40c-6.59961 0 -12 5.40039 -12 12v40c0 6.59961 5.40039 12 12 12h40
+c6.59961 0 12 -5.40039 12 -12v-40zM352 172c0 -6.59961 -5.40039 -12 -12 -12h-40c-6.59961 0 -12 5.40039 -12 12v40c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-40zM256 76c0 -6.59961 -5.40039 -12 -12 -12h-40c-6.59961 0 -12 5.40039 -12 12v40
+c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-40zM160 76c0 -6.59961 -5.40039 -12 -12 -12h-40c-6.59961 0 -12 5.40039 -12 12v40c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-40zM352 76c0 -6.59961 -5.40039 -12 -12 -12h-40
+c-6.59961 0 -12 5.40039 -12 12v40c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-40zM448 336v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h48v52c0 6.59961 5.40039 12 12 12h40
+c6.59961 0 12 -5.40039 12 -12v-52h128v52c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-52h48c26.5 0 48 -21.5 48 -48zM400 -10v298h-352v-298c0 -3.2998 2.7002 -6 6 -6h340c3.2998 0 6 2.7002 6 6z" />
+    <glyph glyph-name="comment" unicode="&#xf075;" 
+d="M256 416c141.4 0 256 -93.0996 256 -208s-114.6 -208 -256 -208c-32.7998 0 -64 5.2002 -92.9004 14.2998c-29.0996 -20.5996 -77.5996 -46.2998 -139.1 -46.2998c-9.59961 0 -18.2998 5.7002 -22.0996 14.5c-3.80078 8.7998 -2 19 4.59961 26
+c0.5 0.400391 31.5 33.7998 46.4004 73.2002c-33 35.0996 -52.9004 78.7002 -52.9004 126.3c0 114.9 114.6 208 256 208zM256 48c114.7 0 208 71.7998 208 160s-93.2998 160 -208 160s-208 -71.7998 -208 -160c0 -42.2002 21.7002 -74.0996 39.7998 -93.4004
+l20.6006 -21.7998l-10.6006 -28.0996c-5.5 -14.5 -12.5996 -28.1006 -19.8994 -40.2002c23.5996 7.59961 43.1992 18.9004 57.5 29l19.5 13.7998l22.6992 -7.2002c25.3008 -8 51.7002 -12.0996 78.4004 -12.0996z" />
+    <glyph glyph-name="folder" unicode="&#xf07b;" 
+d="M464 320c26.5098 0 48 -21.4902 48 -48v-224c0 -26.5098 -21.4902 -48 -48 -48h-416c-26.5098 0 -48 21.4902 -48 48v288c0 26.5098 21.4902 48 48 48h146.74c8.49023 0 16.6299 -3.37012 22.6299 -9.37012l54.6299 -54.6299h192zM464 48v224h-198.62
+c-8.49023 0 -16.6299 3.37012 -22.6299 9.37012l-54.6299 54.6299h-140.12v-288h416z" />
+    <glyph glyph-name="folder-open" unicode="&#xf07c;" horiz-adv-x="576" 
+d="M527.9 224c37.6992 0 60.6992 -41.5 40.6992 -73.4004l-79.8994 -128c-8.7998 -14.0996 -24.2002 -22.5996 -40.7002 -22.5996h-400c-26.5 0 -48 21.5 -48 48v288c0 26.5 21.5 48 48 48h160l64 -64h160c26.5 0 48 -21.5 48 -48v-48h47.9004zM48 330v-233.4l62.9004 104.2
+c8.69922 14.4004 24.2998 23.2002 41.0996 23.2002h280v42c0 3.2998 -2.7002 6 -6 6h-173.9l-64 64h-134.1c-3.2998 0 -6 -2.7002 -6 -6zM448 48l80 128h-378.8l-77.2002 -128h376z" />
+    <glyph glyph-name="chart-bar" unicode="&#xf080;" 
+d="M396.8 96c-6.39941 0 -12.7998 6.40039 -12.7998 12.7998v230.4c0 6.39941 6.40039 12.7998 12.7998 12.7998h22.4004c6.39941 0 12.7998 -6.40039 12.7998 -12.7998v-230.4c0 -6.39941 -6.40039 -12.7998 -12.7998 -12.7998h-22.4004zM204.8 96
+c-6.39941 0 -12.7998 6.40039 -12.7998 12.7998v198.4c0 6.39941 6.40039 12.7998 12.7998 12.7998h22.4004c6.39941 0 12.7998 -6.40039 12.7998 -12.7998v-198.4c0 -6.39941 -6.40039 -12.7998 -12.7998 -12.7998h-22.4004zM300.8 96
+c-6.39941 0 -12.7998 6.40039 -12.7998 12.7998v134.4c0 6.39941 6.40039 12.7998 12.7998 12.7998h22.4004c6.39941 0 12.7998 -6.40039 12.7998 -12.7998v-134.4c0 -6.39941 -6.40039 -12.7998 -12.7998 -12.7998h-22.4004zM496 48c8.83984 0 16 -7.16016 16 -16v-16
+c0 -8.83984 -7.16016 -16 -16 -16h-464c-17.6699 0 -32 14.3301 -32 32v336c0 8.83984 7.16016 16 16 16h16c8.83984 0 16 -7.16016 16 -16v-320h448zM108.8 96c-6.39941 0 -12.7998 6.40039 -12.7998 12.7998v70.4004c0 6.39941 6.40039 12.7998 12.7998 12.7998h22.4004
+c6.39941 0 12.7998 -6.40039 12.7998 -12.7998v-70.4004c0 -6.39941 -6.40039 -12.7998 -12.7998 -12.7998h-22.4004z" />
+    <glyph glyph-name="comments" unicode="&#xf086;" horiz-adv-x="576" 
+d="M532 61.7998c15.2998 -30.7002 37.4004 -54.5 37.7998 -54.7998c6.2998 -6.7002 8 -16.5 4.40039 -25c-3.7002 -8.5 -12 -14 -21.2002 -14c-53.5996 0 -96.7002 20.2998 -125.2 38.7998c-19 -4.39941 -39 -6.7998 -59.7998 -6.7998
+c-86.2002 0 -159.9 40.4004 -191.3 97.7998c-9.7002 1.2002 -19.2002 2.7998 -28.4004 4.90039c-28.5 -18.6006 -71.7002 -38.7998 -125.2 -38.7998c-9.19922 0 -17.5996 5.5 -21.1992 14c-3.7002 8.5 -1.90039 18.2998 4.39941 25
+c0.400391 0.399414 22.4004 24.1992 37.7002 54.8994c-27.5 27.2002 -44 61.2002 -44 98.2002c0 88.4004 93.0996 160 208 160c86.2998 0 160.3 -40.5 191.8 -98.0996c99.7002 -11.8008 176.2 -77.9004 176.2 -157.9c0 -37.0996 -16.5 -71.0996 -44 -98.2002zM139.2 154.1
+l19.7998 -4.5c16 -3.69922 32.5 -5.59961 49 -5.59961c86.7002 0 160 51.2998 160 112s-73.2998 112 -160 112s-160 -51.2998 -160 -112c0 -28.7002 16.2002 -50.5996 29.7002 -64l24.7998 -24.5l-15.5 -31.0996c-2.59961 -5.10059 -5.2998 -10.1006 -8 -14.8008
+c14.5996 5.10059 29 12.3008 43.0996 21.4004zM498.3 96c13.5 13.4004 29.7002 35.2998 29.7002 64c0 49.2002 -48.2998 91.5 -112.7 106c0.299805 -3.2998 0.700195 -6.59961 0.700195 -10c0 -80.9004 -78 -147.5 -179.3 -158.3
+c29.0996 -29.6006 77.2998 -49.7002 131.3 -49.7002c16.5 0 33 1.90039 49 5.59961l19.9004 4.60059l17.0996 -11.1006c14.0996 -9.09961 28.5 -16.2998 43.0996 -21.3994c-2.69922 4.7002 -5.39941 9.7002 -8 14.7998l-15.5 31.0996z" />
+    <glyph glyph-name="star-half" unicode="&#xf089;" horiz-adv-x="576" 
+d="M288 62.7002v-54.2998l-130.7 -68.6006c-23.3994 -12.2998 -50.8994 7.60059 -46.3994 33.7002l25 145.5l-105.7 103c-19 18.5 -8.5 50.7998 17.7002 54.5996l146.1 21.2002l65.2998 132.4c5.90039 11.8994 17.2998 17.7998 28.7002 17.7998v-68.0996l-62.2002 -126
+l-139 -20.2002l100.601 -98l-23.7002 -138.4z" />
+    <glyph glyph-name="lemon" unicode="&#xf094;" 
+d="M484.112 420.111c28.1221 -28.123 35.9434 -68.0039 19.0215 -97.0547c-23.0576 -39.584 50.1436 -163.384 -82.3311 -295.86c-132.301 -132.298 -256.435 -59.3594 -295.857 -82.3291c-29.0459 -16.917 -68.9219 -9.11426 -97.0576 19.0205
+c-28.1221 28.1221 -35.9434 68.0029 -19.0215 97.0547c23.0566 39.5859 -50.1436 163.386 82.3301 295.86c132.308 132.309 256.407 59.3496 295.862 82.332c29.0498 16.9219 68.9307 9.09863 97.0537 -19.0234zM461.707 347.217
+c13.5166 23.2031 -27.7578 63.7314 -50.4883 50.4912c-66.6025 -38.7939 -165.646 45.5898 -286.081 -74.8457c-120.444 -120.445 -36.0449 -219.472 -74.8447 -286.08c-13.542 -23.2471 27.8145 -63.6953 50.4932 -50.4883
+c66.6006 38.7949 165.636 -45.5996 286.076 74.8428c120.444 120.445 36.0449 219.472 74.8447 286.08zM291.846 338.481c1.37012 -10.96 -6.40332 -20.957 -17.3643 -22.3271c-54.8467 -6.85547 -135.779 -87.7871 -142.636 -142.636
+c-1.37305 -10.9883 -11.3984 -18.7334 -22.3262 -17.3643c-10.9609 1.37012 -18.7344 11.3652 -17.3643 22.3262c9.16211 73.2852 104.167 168.215 177.364 177.364c10.9531 1.36816 20.9561 -6.40234 22.3262 -17.3633z" />
+    <glyph glyph-name="credit-card" unicode="&#xf09d;" horiz-adv-x="576" 
+d="M527.9 416c26.5996 0 48.0996 -21.5 48.0996 -48v-352c0 -26.5 -21.5 -48 -48.0996 -48h-479.801c-26.5996 0 -48.0996 21.5 -48.0996 48v352c0 26.5 21.5 48 48.0996 48h479.801zM54.0996 368c-3.2998 0 -6 -2.7002 -6 -6v-42h479.801v42c0 3.2998 -2.7002 6 -6 6
+h-467.801zM521.9 16c3.2998 0 6 2.7002 6 6v170h-479.801v-170c0 -3.2998 2.7002 -6 6 -6h467.801zM192 116v-40c0 -6.59961 -5.40039 -12 -12 -12h-72c-6.59961 0 -12 5.40039 -12 12v40c0 6.59961 5.40039 12 12 12h72c6.59961 0 12 -5.40039 12 -12zM384 116v-40
+c0 -6.59961 -5.40039 -12 -12 -12h-136c-6.59961 0 -12 5.40039 -12 12v40c0 6.59961 5.40039 12 12 12h136c6.59961 0 12 -5.40039 12 -12z" />
+    <glyph glyph-name="hdd" unicode="&#xf0a0;" horiz-adv-x="576" 
+d="M567.403 212.358c5.59668 -8.04688 8.59668 -17.6113 8.59668 -27.4121v-136.946c0 -26.5098 -21.4902 -48 -48 -48h-480c-26.5098 0 -48 21.4902 -48 48v136.946c0 8.30957 3.85156 20.5898 8.59668 27.4121l105.08 151.053
+c7.90625 11.3652 25.5596 20.5889 39.4033 20.5889h0.000976562h269.838h0.000976562c13.8438 0 31.4971 -9.22363 39.4033 -20.5889zM153.081 336l-77.9131 -112h425.664l-77.9131 112h-269.838zM528 48v128h-480v-128h480zM496 112c0 -17.6729 -14.3271 -32 -32 -32
+s-32 14.3271 -32 32s14.3271 32 32 32s32 -14.3271 32 -32zM400 112c0 -17.6729 -14.3271 -32 -32 -32s-32 14.3271 -32 32s14.3271 32 32 32s32 -14.3271 32 -32z" />
+    <glyph glyph-name="hand-point-right" unicode="&#xf0a4;" 
+d="M428.8 310.4c45.0996 0 83.2002 -38.1016 83.2002 -83.2002c0 -45.6162 -37.7646 -83.2002 -83.2002 -83.2002h-35.6475c-1.41602 -6.36719 -4.96875 -16.252 -7.92969 -22.0645c2.50586 -22.0059 -3.50293 -44.9775 -15.9844 -62.791
+c-1.14062 -52.4863 -37.3984 -91.1445 -99.9404 -91.1445h-21.2988c-60.0635 0 -98.5117 40 -127.2 40h-2.67871c-5.74707 -4.95215 -13.5361 -8 -22.1201 -8h-64c-17.6729 0 -32 12.8936 -32 28.7998v230.4c0 15.9062 14.3271 28.7998 32 28.7998h64.001
+c8.58398 0 16.373 -3.04785 22.1201 -8h2.67871c6.96387 0 14.8623 6.19336 30.1816 23.6689l0.128906 0.148438l0.130859 0.145508c8.85645 9.93652 18.1162 20.8398 25.8506 33.2529c18.7051 30.2471 30.3936 78.7842 75.707 78.7842c56.9277 0 92 -35.2861 92 -83.2002
+v-0.0839844c0 -6.21777 -0.974609 -16.2148 -2.17578 -22.3154h86.1768zM428.8 192c18.9756 0 35.2002 16.2246 35.2002 35.2002c0 18.7002 -16.7754 35.2002 -35.2002 35.2002h-158.399c0 17.3242 26.3994 35.1992 26.3994 70.3994c0 26.4004 -20.625 35.2002 -44 35.2002
+c-8.79395 0 -20.4443 -32.7119 -34.9258 -56.0996c-9.07422 -14.5752 -19.5244 -27.2256 -30.7988 -39.875c-16.1094 -18.374 -33.8359 -36.6328 -59.0752 -39.5967v-176.753c42.79 -3.7627 74.5088 -39.6758 120 -39.6758h21.2988
+c40.5244 0 57.124 22.1973 50.6006 61.3252c14.6113 8.00098 24.1514 33.9785 12.9248 53.625c19.3652 18.2246 17.7871 46.3809 4.9502 61.0498h91.0254zM88 64c0 13.2549 -10.7451 24 -24 24s-24 -10.7451 -24 -24s10.7451 -24 24 -24s24 10.7451 24 24z" />
+    <glyph glyph-name="hand-point-left" unicode="&#xf0a5;" 
+d="M0 227.2c0 45.0986 38.1006 83.2002 83.2002 83.2002h86.1758c-1.3623 6.91016 -2.17578 14.374 -2.17578 22.3994c0 47.9141 35.0723 83.2002 92 83.2002c45.3135 0 57.002 -48.5371 75.7061 -78.7852c7.73438 -12.4121 16.9951 -23.3154 25.8506 -33.2529
+l0.130859 -0.145508l0.128906 -0.148438c15.3213 -17.4746 23.2197 -23.668 30.1836 -23.668h2.67871c5.74707 4.95215 13.5361 8 22.1201 8h64c17.6729 0 32 -12.8936 32 -28.7998v-230.4c0 -15.9062 -14.3271 -28.7998 -32 -28.7998h-64
+c-8.58398 0 -16.373 3.04785 -22.1201 8h-2.67871c-28.6885 0 -67.1367 -40 -127.2 -40h-21.2988c-62.542 0 -98.8008 38.6582 -99.9404 91.1445c-12.4814 17.8135 -18.4922 40.7852 -15.9844 62.791c-2.96094 5.8125 -6.51367 15.6973 -7.92969 22.0645h-35.6465
+c-45.4355 0 -83.2002 37.584 -83.2002 83.2002zM48 227.2c0 -18.9756 16.2246 -35.2002 35.2002 -35.2002h91.0244c-12.8369 -14.6689 -14.415 -42.8252 4.9502 -61.0498c-11.2256 -19.6465 -1.68652 -45.624 12.9248 -53.625
+c-6.52246 -39.1279 10.0771 -61.3252 50.6016 -61.3252h21.2988c45.4912 0 77.21 35.9131 120 39.6768v176.752c-25.2393 2.96289 -42.9658 21.2227 -59.0752 39.5967c-11.2744 12.6494 -21.7246 25.2998 -30.7988 39.875
+c-14.4814 23.3877 -26.1318 56.0996 -34.9258 56.0996c-23.375 0 -44 -8.7998 -44 -35.2002c0 -35.2002 26.3994 -53.0752 26.3994 -70.3994h-158.399c-18.4248 0 -35.2002 -16.5 -35.2002 -35.2002zM448 88c-13.2549 0 -24 -10.7451 -24 -24s10.7451 -24 24 -24
+s24 10.7451 24 24s-10.7451 24 -24 24z" />
+    <glyph glyph-name="hand-point-up" unicode="&#xf0a6;" horiz-adv-x="448" 
+d="M105.6 364.8c0 45.0996 38.1016 83.2002 83.2002 83.2002c45.6162 0 83.2002 -37.7646 83.2002 -83.2002v-35.6465c6.36719 -1.41602 16.252 -4.96875 22.0645 -7.92969c22.0059 2.50684 44.9775 -3.50293 62.791 -15.9844
+c52.4863 -1.14062 91.1445 -37.3984 91.1445 -99.9404v-21.2988c0 -60.0635 -40 -98.5117 -40 -127.2v-2.67871c4.95215 -5.74707 8 -13.5361 8 -22.1201v-64c0 -17.6729 -12.8936 -32 -28.7998 -32h-230.4c-15.9062 0 -28.7998 14.3271 -28.7998 32v64
+c0 8.58398 3.04785 16.373 8 22.1201v2.67871c0 6.96387 -6.19336 14.8623 -23.6689 30.1816l-0.148438 0.128906l-0.145508 0.130859c-9.93652 8.85645 -20.8398 18.1162 -33.2529 25.8506c-30.2471 18.7051 -78.7842 30.3936 -78.7842 75.707
+c0 56.9277 35.2861 92 83.2002 92h0.0839844c6.21777 0 16.2148 -0.974609 22.3154 -2.17578v86.1768zM224 364.8c0 18.9756 -16.2246 35.2002 -35.2002 35.2002c-18.7002 0 -35.2002 -16.7754 -35.2002 -35.2002v-158.399c-17.3242 0 -35.1992 26.3994 -70.3994 26.3994
+c-26.4004 0 -35.2002 -20.625 -35.2002 -44c0 -8.79395 32.7119 -20.4443 56.0996 -34.9258c14.5752 -9.07422 27.2256 -19.5244 39.875 -30.7988c18.374 -16.1094 36.6328 -33.8359 39.5967 -59.0752h176.753c3.7627 42.79 39.6758 74.5088 39.6758 120v21.2988
+c0 40.5244 -22.1973 57.124 -61.3252 50.6006c-8.00098 14.6113 -33.9785 24.1514 -53.625 12.9248c-18.2246 19.3652 -46.3809 17.7871 -61.0498 4.9502v91.0254zM352 24c-13.2549 0 -24 -10.7451 -24 -24s10.7451 -24 24 -24s24 10.7451 24 24s-10.7451 24 -24 24z" />
+    <glyph glyph-name="hand-point-down" unicode="&#xf0a7;" horiz-adv-x="448" 
+d="M188.8 -64c-45.0986 0 -83.2002 38.1006 -83.2002 83.2002v86.1758c-6.91016 -1.3623 -14.374 -2.17578 -22.3994 -2.17578c-47.9141 0 -83.2002 35.0723 -83.2002 92c0 45.3135 48.5371 57.002 78.7852 75.707c12.4121 7.73438 23.3154 16.9951 33.2529 25.8506
+l0.145508 0.130859l0.148438 0.128906c17.4746 15.3213 23.668 23.2197 23.668 30.1836v2.67871c-4.95215 5.74707 -8 13.5361 -8 22.1201v64c0 17.6729 12.8936 32 28.7998 32h230.4c15.9062 0 28.7998 -14.3271 28.7998 -32v-64.001
+c0 -8.58398 -3.04785 -16.373 -8 -22.1201v-2.67871c0 -28.6885 40 -67.1367 40 -127.2v-21.2988c0 -62.542 -38.6582 -98.8008 -91.1445 -99.9404c-17.8135 -12.4814 -40.7852 -18.4922 -62.791 -15.9844c-5.8125 -2.96094 -15.6973 -6.51367 -22.0645 -7.92969v-35.6465
+c0 -45.4355 -37.584 -83.2002 -83.2002 -83.2002zM188.8 -16c18.9756 0 35.2002 16.2246 35.2002 35.2002v91.0244c14.6689 -12.8369 42.8252 -14.415 61.0498 4.9502c19.6465 -11.2256 45.624 -1.68652 53.625 12.9248c39.1279 -6.52246 61.3252 10.0771 61.3252 50.6016
+v21.2988c0 45.4912 -35.9131 77.21 -39.6768 120h-176.752c-2.96289 -25.2393 -21.2227 -42.9658 -39.5967 -59.0752c-12.6494 -11.2744 -25.2998 -21.7246 -39.875 -30.7988c-23.3877 -14.4814 -56.0996 -26.1318 -56.0996 -34.9258c0 -23.375 8.7998 -44 35.2002 -44
+c35.2002 0 53.0752 26.3994 70.3994 26.3994v-158.399c0 -18.4248 16.5 -35.2002 35.2002 -35.2002zM328 384c0 -13.2549 10.7451 -24 24 -24s24 10.7451 24 24s-10.7451 24 -24 24s-24 -10.7451 -24 -24z" />
+    <glyph glyph-name="copy" unicode="&#xf0c5;" horiz-adv-x="448" 
+d="M433.941 382.059c7.75977 -7.75977 14.0586 -22.9658 14.0586 -33.9404v-268.118c0 -26.5098 -21.4902 -48 -48 -48h-80v-48c0 -26.5098 -21.4902 -48 -48 -48h-224c-26.5098 0 -48 21.4902 -48 48v320c0 26.5098 21.4902 48 48 48h80v48c0 26.5098 21.4902 48 48 48
+h172.118c10.9746 0 26.1807 -6.29883 33.9404 -14.0586zM266 -16c3.31152 0 6 2.68848 6 6v42h-96c-26.5098 0 -48 21.4902 -48 48v224h-74c-3.31152 0 -6 -2.68848 -6 -6v-308c0 -3.31152 2.68848 -6 6 -6h212zM394 80c3.31152 0 6 2.68848 6 6v202h-88
+c-13.2549 0 -24 10.7451 -24 24v88h-106c-3.31152 0 -6 -2.68848 -6 -6v-308c0 -3.31152 2.68848 -6 6 -6h212zM400 336v9.63184v0.000976562c0 1.37207 -0.787109 3.27246 -1.75684 4.24219l-48.3682 48.3682c-1.12598 1.125 -2.65234 1.75684 -4.24316 1.75684h-9.63184
+v-64h64z" />
+    <glyph glyph-name="save" unicode="&#xf0c7;" horiz-adv-x="448" 
+d="M433.941 318.059c7.75977 -7.75977 14.0586 -22.9658 14.0586 -33.9404v-268.118c0 -26.5098 -21.4902 -48 -48 -48h-352c-26.5098 0 -48 21.4902 -48 48v352c0 26.5098 21.4902 48 48 48h268.118c10.9746 0 26.1807 -6.29883 33.9404 -14.0586zM272 368h-128v-80h128v80
+zM394 16c3.31152 0 6 2.68848 6 6v259.632v0.000976562c0 1.37207 -0.787109 3.27246 -1.75684 4.24219l-78.2432 78.2432v-100.118c0 -13.2549 -10.7451 -24 -24 -24h-176c-13.2549 0 -24 10.7451 -24 24v104h-42c-3.31152 0 -6 -2.68848 -6 -6v-340
+c0 -3.31152 2.68848 -6 6 -6h340zM224 216c48.5234 0 88 -39.4766 88 -88s-39.4766 -88 -88 -88s-88 39.4766 -88 88s39.4766 88 88 88zM224 88c22.0557 0 40 17.9443 40 40s-17.9443 40 -40 40s-40 -17.9443 -40 -40s17.9443 -40 40 -40z" />
+    <glyph glyph-name="square" unicode="&#xf0c8;" horiz-adv-x="448" 
+d="M400 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352zM394 16c3.2998 0 6 2.7002 6 6v340c0 3.2998 -2.7002 6 -6 6h-340c-3.2998 0 -6 -2.7002 -6 -6v-340c0 -3.2998 2.7002 -6 6 -6h340z" />
+    <glyph glyph-name="envelope" unicode="&#xf0e0;" 
+d="M464 384c26.5098 0 48 -21.4902 48 -48v-288c0 -26.5098 -21.4902 -48 -48 -48h-416c-26.5098 0 -48 21.4902 -48 48v288c0 26.5098 21.4902 48 48 48h416zM464 336h-416v-40.8047c22.4248 -18.2627 58.1797 -46.6602 134.587 -106.49
+c16.834 -13.2422 50.2051 -45.0762 73.4131 -44.7012c23.2119 -0.371094 56.5723 31.4541 73.4131 44.7012c76.4189 59.8389 112.165 88.2305 134.587 106.49v40.8047zM48 48h416v185.601c-22.915 -18.252 -55.4189 -43.8691 -104.947 -82.6523
+c-22.5439 -17.748 -60.3359 -55.1787 -103.053 -54.9473c-42.9277 -0.231445 -81.2051 37.75 -103.062 54.9551c-49.5293 38.7842 -82.0244 64.3945 -104.938 82.6455v-185.602z" />
+    <glyph glyph-name="lightbulb" unicode="&#xf0eb;" horiz-adv-x="352" 
+d="M176 368c8.83984 0 16 -7.16016 16 -16s-7.16016 -16 -16 -16c-35.2803 0 -64 -28.7002 -64 -64c0 -8.83984 -7.16016 -16 -16 -16s-16 7.16016 -16 16c0 52.9404 43.0596 96 96 96zM96.0596 -11.1699l-0.0400391 43.1797h159.961l-0.0507812 -43.1797
+c-0.00976562 -3.13965 -0.939453 -6.21973 -2.67969 -8.83984l-24.5098 -36.8398c-2.95996 -4.45996 -7.95996 -7.14062 -13.3203 -7.14062h-78.8496c-5.35059 0 -10.3506 2.68066 -13.3203 7.14062l-24.5098 36.8398c-1.75 2.62012 -2.68066 5.68945 -2.68066 8.83984z
+M176 448c97.2002 0 176 -78.7998 176 -176c0 -44.3701 -16.4502 -84.8496 -43.5498 -115.79c-16.6406 -18.9795 -42.7402 -58.79 -52.4199 -92.1602v-0.0498047h-48v0.0996094c0.00390625 4.04199 0.999023 10.4482 2.21973 14.3008
+c5.67969 17.9893 22.9902 64.8496 62.0996 109.46c20.4102 23.29 31.6504 53.1699 31.6504 84.1396c0 70.5801 -57.4199 128 -128 128c-68.2803 0 -128.15 -54.3604 -127.95 -128c0.0898438 -30.9902 11.0703 -60.71 31.6104 -84.1396
+c39.3496 -44.9004 56.5801 -91.8604 62.1699 -109.67c1.42969 -4.56055 2.13965 -9.30078 2.15039 -14.0703v-0.120117h-48v0.0595703c-9.68066 33.3604 -35.7803 73.1709 -52.4209 92.1602c-27.1094 30.9307 -43.5596 71.4102 -43.5596 115.78
+c0 93.0303 73.7197 176 176 176z" />
+    <glyph glyph-name="bell" unicode="&#xf0f3;" horiz-adv-x="448" 
+d="M439.39 85.71c6 -6.44043 8.66016 -14.1602 8.61035 -21.71c-0.0996094 -16.4004 -12.9805 -32 -32.0996 -32h-383.801c-19.1191 0 -31.9893 15.5996 -32.0996 32c-0.0498047 7.5498 2.61035 15.2598 8.61035 21.71c19.3193 20.7598 55.4697 51.9902 55.4697 154.29
+c0 77.7002 54.4795 139.9 127.939 155.16v20.8398c0 17.6699 14.3203 32 31.9805 32s31.9805 -14.3301 31.9805 -32v-20.8398c73.46 -15.2598 127.939 -77.46 127.939 -155.16c0 -102.3 36.1504 -133.53 55.4697 -154.29zM67.5303 80h312.939
+c-21.2197 27.96 -44.4199 74.3203 -44.5293 159.42c0 0.200195 0.0595703 0.379883 0.0595703 0.580078c0 61.8604 -50.1396 112 -112 112s-112 -50.1396 -112 -112c0 -0.200195 0.0595703 -0.379883 0.0595703 -0.580078
+c-0.109375 -85.0898 -23.3096 -131.45 -44.5293 -159.42zM224 -64c-35.3203 0 -63.9697 28.6504 -63.9697 64h127.939c0 -35.3496 -28.6494 -64 -63.9697 -64z" />
+    <glyph glyph-name="hospital" unicode="&#xf0f8;" horiz-adv-x="448" 
+d="M128 204v40c0 6.62695 5.37305 12 12 12h40c6.62695 0 12 -5.37305 12 -12v-40c0 -6.62695 -5.37305 -12 -12 -12h-40c-6.62695 0 -12 5.37305 -12 12zM268 192c-6.62695 0 -12 5.37305 -12 12v40c0 6.62695 5.37305 12 12 12h40c6.62695 0 12 -5.37305 12 -12v-40
+c0 -6.62695 -5.37305 -12 -12 -12h-40zM192 108c0 -6.62695 -5.37305 -12 -12 -12h-40c-6.62695 0 -12 5.37305 -12 12v40c0 6.62695 5.37305 12 12 12h40c6.62695 0 12 -5.37305 12 -12v-40zM268 96c-6.62695 0 -12 5.37305 -12 12v40c0 6.62695 5.37305 12 12 12h40
+c6.62695 0 12 -5.37305 12 -12v-40c0 -6.62695 -5.37305 -12 -12 -12h-40zM448 -28v-36h-448v36c0 6.62695 5.37305 12 12 12h19.5v378.965c0 11.6172 10.7451 21.0352 24 21.0352h88.5v40c0 13.2549 10.7451 24 24 24h112c13.2549 0 24 -10.7451 24 -24v-40h88.5
+c13.2549 0 24 -9.41797 24 -21.0352v-378.965h19.5c6.62695 0 12 -5.37305 12 -12zM79.5 -15h112.5v67c0 6.62695 5.37305 12 12 12h40c6.62695 0 12 -5.37305 12 -12v-67h112.5v351h-64.5v-24c0 -13.2549 -10.7451 -24 -24 -24h-112c-13.2549 0 -24 10.7451 -24 24v24
+h-64.5v-351zM266 384h-26v26c0 3.31152 -2.68848 6 -6 6h-20c-3.31152 0 -6 -2.68848 -6 -6v-26h-26c-3.31152 0 -6 -2.68848 -6 -6v-20c0 -3.31152 2.68848 -6 6 -6h26v-26c0 -3.31152 2.68848 -6 6 -6h20c3.31152 0 6 2.68848 6 6v26h26c3.31152 0 6 2.68848 6 6v20
+c0 3.31152 -2.68848 6 -6 6z" />
+    <glyph glyph-name="plus-square" unicode="&#xf0fe;" horiz-adv-x="448" 
+d="M352 208v-32c0 -6.59961 -5.40039 -12 -12 -12h-88v-88c0 -6.59961 -5.40039 -12 -12 -12h-32c-6.59961 0 -12 5.40039 -12 12v88h-88c-6.59961 0 -12 5.40039 -12 12v32c0 6.59961 5.40039 12 12 12h88v88c0 6.59961 5.40039 12 12 12h32c6.59961 0 12 -5.40039 12 -12
+v-88h88c6.59961 0 12 -5.40039 12 -12zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352c26.5 0 48 -21.5 48 -48zM400 22v340c0 3.2998 -2.7002 6 -6 6h-340c-3.2998 0 -6 -2.7002 -6 -6v-340
+c0 -3.2998 2.7002 -6 6 -6h340c3.2998 0 6 2.7002 6 6z" />
+    <glyph glyph-name="circle" unicode="&#xf111;" 
+d="M256 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM256 -8c110.5 0 200 89.5 200 200s-89.5 200 -200 200s-200 -89.5 -200 -200s89.5 -200 200 -200z" />
+    <glyph glyph-name="smile" unicode="&#xf118;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM168 208c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32
+s32 -14.2998 32 -32s-14.2998 -32 -32 -32zM328 208c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32s32 -14.2998 32 -32s-14.2998 -32 -32 -32zM332 135.4c8.5 10.1992 23.7002 11.5 33.7998 3.09961c10.2002 -8.5 11.6006 -23.5996 3.10059 -33.7998
+c-30 -36 -74.1006 -56.6006 -120.9 -56.6006s-90.9004 20.6006 -120.9 56.6006c-8.39941 10.2002 -7.09961 25.2998 3.10059 33.7998c10.0996 8.40039 25.2998 7.09961 33.7998 -3.09961c20.7998 -25.1006 51.5 -39.4004 84 -39.4004s63.2002 14.4004 84 39.4004z" />
+    <glyph glyph-name="frown" unicode="&#xf119;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM168 208c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32
+s32 -14.2998 32 -32s-14.2998 -32 -32 -32zM328 272c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32s-32 14.2998 -32 32s14.2998 32 32 32zM248 144c40.2002 0 78 -17.7002 103.8 -48.5996c8.40039 -10.2002 7.10059 -25.3008 -3.09961 -33.8008
+c-10.7002 -8.7998 -25.7002 -6.59961 -33.7998 3.10059c-16.6006 20 -41 31.3994 -66.9004 31.3994s-50.2998 -11.5 -66.9004 -31.3994c-8.5 -10.2002 -23.5996 -11.5 -33.7998 -3.10059c-10.2002 8.5 -11.5996 23.6006 -3.09961 33.8008
+c25.7998 30.8994 63.5996 48.5996 103.8 48.5996z" />
+    <glyph glyph-name="meh" unicode="&#xf11a;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM168 208c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32
+s32 -14.2998 32 -32s-14.2998 -32 -32 -32zM328 272c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32s-32 14.2998 -32 32s14.2998 32 32 32zM336 128c13.2002 0 24 -10.7998 24 -24s-10.7998 -24 -24 -24h-176c-13.2002 0 -24 10.7998 -24 24s10.7998 24 24 24h176z
+" />
+    <glyph glyph-name="keyboard" unicode="&#xf11c;" horiz-adv-x="576" 
+d="M528 384c26.5098 0 48 -21.4902 48 -48v-288c0 -26.5098 -21.4902 -48 -48 -48h-480c-26.5098 0 -48 21.4902 -48 48v288c0 26.5098 21.4902 48 48 48h480zM536 48v288c0 4.41113 -3.58887 8 -8 8h-480c-4.41113 0 -8 -3.58887 -8 -8v-288c0 -4.41113 3.58887 -8 8 -8
+h480c4.41113 0 8 3.58887 8 8zM170 178c0 -6.62695 -5.37305 -12 -12 -12h-28c-6.62695 0 -12 5.37305 -12 12v28c0 6.62695 5.37305 12 12 12h28c6.62695 0 12 -5.37305 12 -12v-28zM266 178c0 -6.62695 -5.37305 -12 -12 -12h-28c-6.62695 0 -12 5.37305 -12 12v28
+c0 6.62695 5.37305 12 12 12h28c6.62695 0 12 -5.37305 12 -12v-28zM362 178c0 -6.62695 -5.37305 -12 -12 -12h-28c-6.62695 0 -12 5.37305 -12 12v28c0 6.62695 5.37305 12 12 12h28c6.62695 0 12 -5.37305 12 -12v-28zM458 178c0 -6.62695 -5.37305 -12 -12 -12h-28
+c-6.62695 0 -12 5.37305 -12 12v28c0 6.62695 5.37305 12 12 12h28c6.62695 0 12 -5.37305 12 -12v-28zM122 96c0 -6.62695 -5.37305 -12 -12 -12h-28c-6.62695 0 -12 5.37305 -12 12v28c0 6.62695 5.37305 12 12 12h28c6.62695 0 12 -5.37305 12 -12v-28zM506 96
+c0 -6.62695 -5.37305 -12 -12 -12h-28c-6.62695 0 -12 5.37305 -12 12v28c0 6.62695 5.37305 12 12 12h28c6.62695 0 12 -5.37305 12 -12v-28zM122 260c0 -6.62695 -5.37305 -12 -12 -12h-28c-6.62695 0 -12 5.37305 -12 12v28c0 6.62695 5.37305 12 12 12h28
+c6.62695 0 12 -5.37305 12 -12v-28zM218 260c0 -6.62695 -5.37305 -12 -12 -12h-28c-6.62695 0 -12 5.37305 -12 12v28c0 6.62695 5.37305 12 12 12h28c6.62695 0 12 -5.37305 12 -12v-28zM314 260c0 -6.62695 -5.37305 -12 -12 -12h-28c-6.62695 0 -12 5.37305 -12 12v28
+c0 6.62695 5.37305 12 12 12h28c6.62695 0 12 -5.37305 12 -12v-28zM410 260c0 -6.62695 -5.37305 -12 -12 -12h-28c-6.62695 0 -12 5.37305 -12 12v28c0 6.62695 5.37305 12 12 12h28c6.62695 0 12 -5.37305 12 -12v-28zM506 260c0 -6.62695 -5.37305 -12 -12 -12h-28
+c-6.62695 0 -12 5.37305 -12 12v28c0 6.62695 5.37305 12 12 12h28c6.62695 0 12 -5.37305 12 -12v-28zM408 102c0 -6.62695 -5.37305 -12 -12 -12h-216c-6.62695 0 -12 5.37305 -12 12v16c0 6.62695 5.37305 12 12 12h216c6.62695 0 12 -5.37305 12 -12v-16z" />
+    <glyph glyph-name="calendar" unicode="&#xf133;" horiz-adv-x="448" 
+d="M400 384c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h48v52c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-52h128v52c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12
+v-52h48zM394 -16c3.2998 0 6 2.7002 6 6v298h-352v-298c0 -3.2998 2.7002 -6 6 -6h340z" />
+    <glyph glyph-name="play-circle" unicode="&#xf144;" 
+d="M371.7 210c16.3994 -9.2002 16.3994 -32.9004 0 -42l-176 -101c-15.9004 -8.7998 -35.7002 2.59961 -35.7002 21v208c0 18.5 19.9004 29.7998 35.7002 21zM504 192c0 -137 -111 -248 -248 -248s-248 111 -248 248s111 248 248 248s248 -111 248 -248zM56 192
+c0 -110.5 89.5 -200 200 -200s200 89.5 200 200s-89.5 200 -200 200s-200 -89.5 -200 -200z" />
+    <glyph glyph-name="minus-square" unicode="&#xf146;" horiz-adv-x="448" 
+d="M108 164c-6.59961 0 -12 5.40039 -12 12v32c0 6.59961 5.40039 12 12 12h232c6.59961 0 12 -5.40039 12 -12v-32c0 -6.59961 -5.40039 -12 -12 -12h-232zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h352
+c26.5 0 48 -21.5 48 -48zM400 22v340c0 3.2998 -2.7002 6 -6 6h-340c-3.2998 0 -6 -2.7002 -6 -6v-340c0 -3.2998 2.7002 -6 6 -6h340c3.2998 0 6 2.7002 6 6z" />
+    <glyph glyph-name="check-square" unicode="&#xf14a;" horiz-adv-x="448" 
+d="M400 416c26.5098 0 48 -21.4902 48 -48v-352c0 -26.5098 -21.4902 -48 -48 -48h-352c-26.5098 0 -48 21.4902 -48 48v352c0 26.5098 21.4902 48 48 48h352zM400 16v352h-352v-352h352zM364.136 257.724l-172.589 -171.204
+c-4.70508 -4.66699 -12.3027 -4.63672 -16.9697 0.0683594l-90.7812 91.5156c-4.66699 4.70508 -4.63672 12.3037 0.0693359 16.9717l22.7188 22.5361c4.70508 4.66699 12.3027 4.63672 16.9697 -0.0693359l59.792 -60.2773l141.353 140.217
+c4.70508 4.66699 12.3027 4.63672 16.9697 -0.0683594l22.5361 -22.7178c4.66699 -4.70605 4.63672 -12.3047 -0.0683594 -16.9717z" />
+    <glyph glyph-name="share-square" unicode="&#xf14d;" horiz-adv-x="576" 
+d="M561.938 289.94c18.75 -18.7402 18.75 -49.1406 0 -67.8809l-143.998 -144c-29.9727 -29.9727 -81.9404 -9.05273 -81.9404 33.9404v53.7998c-101.266 -7.83691 -99.625 -31.6406 -84.1104 -78.7598c14.2285 -43.0889 -33.4736 -79.248 -71.0195 -55.7402
+c-51.6924 32.3057 -84.8701 83.0635 -84.8701 144.76c0 39.3408 12.2197 72.7402 36.3301 99.3008c19.8398 21.8398 47.7402 38.4697 82.9102 49.4199c36.7295 11.4395 78.3096 16.1094 120.76 17.9893v57.1982c0 42.9355 51.9258 63.9541 81.9404 33.9404zM384 112l144 144
+l-144 144v-104.09c-110.86 -0.90332 -240 -10.5166 -240 -119.851c0 -52.1396 32.79 -85.6094 62.3096 -104.06c-39.8174 120.65 48.999 141.918 177.69 143.84v-103.84zM408.74 27.5068c6.14844 1.75684 15.5449 5.92383 20.9736 9.30273
+c7.97656 4.95215 18.2861 -0.825195 18.2861 -10.2139v-42.5957c0 -26.5098 -21.4902 -48 -48 -48h-352c-26.5098 0 -48 21.4902 -48 48v352c0 26.5098 21.4902 48 48 48h132c6.62695 0 12 -5.37305 12 -12v-4.48633c0 -4.91699 -2.9873 -9.36914 -7.56934 -11.1514
+c-13.7021 -5.33105 -26.3955 -11.5371 -38.0498 -18.585c-1.59668 -0.974609 -4.41016 -1.77051 -6.28027 -1.77734h-86.1006c-3.31152 0 -6 -2.68848 -6 -6v-340c0 -3.31152 2.68848 -6 6 -6h340c3.31152 0 6 2.68848 6 6v25.9658c0 5.37012 3.5791 10.0596 8.74023 11.541
+z" />
+    <glyph glyph-name="compass" unicode="&#xf14e;" horiz-adv-x="496" 
+d="M347.94 318.14c16.6592 7.61035 33.8096 -9.54004 26.1992 -26.1992l-65.9697 -144.341c-2.73047 -5.97363 -9.7959 -13.0391 -15.7695 -15.7695l-144.341 -65.9697c-16.6592 -7.61035 -33.8096 9.5498 -26.1992 26.1992l65.9697 144.341
+c2.73047 5.97363 9.7959 13.0391 15.7695 15.7695zM270.58 169.42c12.4697 12.4697 12.4697 32.6904 0 45.1602s-32.6904 12.4697 -45.1602 0s-12.4697 -32.6904 0 -45.1602s32.6904 -12.4697 45.1602 0zM248 440c136.97 0 248 -111.03 248 -248s-111.03 -248 -248 -248
+s-248 111.03 -248 248s111.03 248 248 248zM248 -8c110.28 0 200 89.7197 200 200s-89.7197 200 -200 200s-200 -89.7197 -200 -200s89.7197 -200 200 -200z" />
+    <glyph glyph-name="caret-square-down" unicode="&#xf150;" horiz-adv-x="448" 
+d="M125.1 240h197.801c10.6992 0 16.0996 -13 8.5 -20.5l-98.9004 -98.2998c-4.7002 -4.7002 -12.2002 -4.7002 -16.9004 0l-98.8994 98.2998c-7.7002 7.5 -2.2998 20.5 8.39941 20.5zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352
+c0 26.5 21.5 48 48 48h352c26.5 0 48 -21.5 48 -48zM400 22v340c0 3.2998 -2.7002 6 -6 6h-340c-3.2998 0 -6 -2.7002 -6 -6v-340c0 -3.2998 2.7002 -6 6 -6h340c3.2998 0 6 2.7002 6 6z" />
+    <glyph glyph-name="caret-square-up" unicode="&#xf151;" horiz-adv-x="448" 
+d="M322.9 144h-197.801c-10.6992 0 -16.0996 13 -8.5 20.5l98.9004 98.2998c4.7002 4.7002 12.2002 4.7002 16.9004 0l98.8994 -98.2998c7.7002 -7.5 2.2998 -20.5 -8.39941 -20.5zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352
+c0 26.5 21.5 48 48 48h352c26.5 0 48 -21.5 48 -48zM400 22v340c0 3.2998 -2.7002 6 -6 6h-340c-3.2998 0 -6 -2.7002 -6 -6v-340c0 -3.2998 2.7002 -6 6 -6h340c3.2998 0 6 2.7002 6 6z" />
+    <glyph glyph-name="caret-square-right" unicode="&#xf152;" horiz-adv-x="448" 
+d="M176 93.0996v197.801c0 10.6992 13 16.0996 20.5 8.5l98.2998 -98.9004c4.7002 -4.7002 4.7002 -12.2002 0 -16.9004l-98.2998 -98.8994c-7.5 -7.7002 -20.5 -2.2998 -20.5 8.39941zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352
+c0 26.5 21.5 48 48 48h352c26.5 0 48 -21.5 48 -48zM400 22v340c0 3.2998 -2.7002 6 -6 6h-340c-3.2998 0 -6 -2.7002 -6 -6v-340c0 -3.2998 2.7002 -6 6 -6h340c3.2998 0 6 2.7002 6 6z" />
+    <glyph glyph-name="file" unicode="&#xf15b;" horiz-adv-x="384" 
+d="M369.9 350.1c9 -9 14.0996 -21.2998 14.0996 -34v-332.1c0 -26.5 -21.5 -48 -48 -48h-288c-26.5 0 -48 21.5 -48 48v416c0 26.5 21.5 48 48 48.0996h204.1c12.7002 0 24.9004 -5.09961 33.9004 -14.0996zM332.1 320l-76.0996 76.0996v-76.0996h76.0996zM48 -16h288v288
+h-104c-13.2998 0 -24 10.7002 -24 24v104h-160v-416z" />
+    <glyph glyph-name="file-alt" unicode="&#xf15c;" horiz-adv-x="384" 
+d="M288 200v-28c0 -6.59961 -5.40039 -12 -12 -12h-168c-6.59961 0 -12 5.40039 -12 12v28c0 6.59961 5.40039 12 12 12h168c6.59961 0 12 -5.40039 12 -12zM276 128c6.59961 0 12 -5.40039 12 -12v-28c0 -6.59961 -5.40039 -12 -12 -12h-168c-6.59961 0 -12 5.40039 -12 12
+v28c0 6.59961 5.40039 12 12 12h168zM384 316.1v-332.1c0 -26.5 -21.5 -48 -48 -48h-288c-26.5 0 -48 21.5 -48 48v416c0 26.5 21.5 48 48 48h204.1c12.7002 0 24.9004 -5.09961 33.9004 -14.0996l83.9004 -83.9004c9 -8.90039 14.0996 -21.2002 14.0996 -33.9004z
+M256 396.1v-76.0996h76.0996zM336 -16v288h-104c-13.2998 0 -24 10.7002 -24 24v104h-160v-416h288z" />
+    <glyph glyph-name="thumbs-up" unicode="&#xf164;" 
+d="M466.27 161.31c4.6748 -22.6465 0.864258 -44.5371 -8.98926 -62.9893c2.95898 -23.8682 -4.02148 -48.5654 -17.3398 -66.9902c-0.954102 -55.9072 -35.8232 -95.3301 -112.94 -95.3301c-7 0 -15 0.00976562 -22.2197 0.00976562
+c-102.742 0 -133.293 38.9395 -177.803 39.9404c-3.56934 -13.7764 -16.085 -23.9502 -30.9775 -23.9502h-64c-17.6729 0 -32 14.3271 -32 32v240c0 17.6729 14.3271 32 32 32h98.7598c19.1455 16.9531 46.0137 60.6533 68.7598 83.4004
+c13.667 13.667 10.1533 108.6 71.7607 108.6c57.5801 0 95.2695 -31.9355 95.2695 -104.73c0 -18.4092 -3.92969 -33.7295 -8.84961 -46.5391h36.4795c48.6025 0 85.8203 -41.5654 85.8203 -85.5801c0 -19.1504 -4.95996 -34.9902 -13.7305 -49.8408zM404.52 107.48
+c21.5811 20.3838 18.6992 51.0645 5.21094 65.6191c9.44922 0 22.3594 18.9102 22.2695 37.8105c-0.0898438 18.9102 -16.71 37.8203 -37.8203 37.8203h-103.989c0 37.8193 28.3594 55.3691 28.3594 94.5391c0 23.75 0 56.7305 -47.2695 56.7305
+c-18.9102 -18.9102 -9.45996 -66.1797 -37.8203 -94.54c-26.5596 -26.5703 -66.1797 -97.46 -94.54 -97.46h-10.9199v-186.17c53.6113 0 100.001 -37.8203 171.64 -37.8203h37.8203c35.5117 0 60.8203 17.1201 53.1201 65.9004
+c15.2002 8.16016 26.5 36.4395 13.9395 57.5703zM88 16c0 13.2549 -10.7451 24 -24 24s-24 -10.7451 -24 -24s10.7451 -24 24 -24s24 10.7451 24 24z" />
+    <glyph glyph-name="thumbs-down" unicode="&#xf165;" 
+d="M466.27 222.69c8.77051 -14.8506 13.7305 -30.6904 13.7305 -49.8408c0 -44.0146 -37.2178 -85.5801 -85.8203 -85.5801h-36.4795c4.91992 -12.8096 8.84961 -28.1299 8.84961 -46.5391c0 -72.7949 -37.6895 -104.73 -95.2695 -104.73
+c-61.6074 0 -58.0938 94.9326 -71.7607 108.6c-22.7461 22.7471 -49.6133 66.4473 -68.7598 83.4004h-7.05176c-5.5332 -9.56152 -15.8662 -16 -27.708 -16h-64c-17.6729 0 -32 14.3271 -32 32v240c0 17.6729 14.3271 32 32 32h64c8.11328 0 15.5146 -3.02539 21.1553 -8
+h10.8447c40.9971 0 73.1953 39.9902 176.78 39.9902c7.21973 0 15.2197 0.00976562 22.2197 0.00976562c77.1172 0 111.986 -39.4229 112.94 -95.3301c13.3184 -18.4248 20.2979 -43.1221 17.3398 -66.9902c9.85352 -18.4521 13.6641 -40.3428 8.98926 -62.9893zM64 152
+c13.2549 0 24 10.7451 24 24s-10.7451 24 -24 24s-24 -10.7451 -24 -24s10.7451 -24 24 -24zM394.18 135.27c21.1104 0 37.7305 18.9102 37.8203 37.8203c0.0898438 18.9004 -12.8203 37.8105 -22.2695 37.8105c13.4883 14.5547 16.3701 45.2354 -5.21094 65.6191
+c12.5605 21.1309 1.26074 49.4102 -13.9395 57.5703c7.7002 48.7803 -17.6084 65.9004 -53.1201 65.9004h-37.8203c-71.6387 0 -118.028 -37.8203 -171.64 -37.8203v-186.17h10.9199c28.3604 0 67.9805 -70.8896 94.54 -97.46
+c28.3604 -28.3604 18.9102 -75.6299 37.8203 -94.54c47.2695 0 47.2695 32.9805 47.2695 56.7305c0 39.1699 -28.3594 56.7197 -28.3594 94.5391h103.989z" />
+    <glyph glyph-name="sun" unicode="&#xf185;" 
+d="M494.2 226.1c11.2002 -7.59961 17.7998 -20.0996 17.8994 -33.6992c0 -13.4004 -6.69922 -26 -17.7998 -33.5l-59.7998 -40.5l13.7002 -71c2.5 -13.2002 -1.60059 -26.8008 -11.1006 -36.3008s-22.8994 -13.7998 -36.2998 -11.0996l-70.8994 13.7002l-40.4004 -59.9004
+c-7.5 -11.0996 -20.0996 -17.7998 -33.5 -17.7998s-26 6.7002 -33.5 17.9004l-40.4004 59.8994l-70.7998 -13.7002c-13.3994 -2.59961 -26.7998 1.60059 -36.2998 11.1006s-13.7002 23.0996 -11.0996 36.2998l13.6992 71l-59.7998 40.5
+c-11.0996 7.5 -17.7998 20 -17.7998 33.5s6.59961 26 17.7998 33.5996l59.7998 40.5l-13.6992 71c-2.60059 13.2002 1.59961 26.7002 11.0996 36.3008c9.5 9.59961 23 13.6992 36.2998 11.1992l70.7998 -13.6992l40.4004 59.8994c15.0996 22.2998 51.9004 22.2998 67 0
+l40.4004 -59.8994l70.8994 13.6992c13 2.60059 26.6006 -1.59961 36.2002 -11.0996c9.5 -9.59961 13.7002 -23.2002 11.0996 -36.4004l-13.6992 -71zM381.3 140.5l76.7998 52.0996l-76.7998 52l17.6006 91.1006l-91 -17.6006l-51.9004 76.9004l-51.7998 -76.7998
+l-91 17.5996l17.5996 -91.2002l-76.7998 -52l76.7998 -52l-17.5996 -91.1992l90.8994 17.5996l51.9004 -77l51.9004 76.9004l91 -17.6006zM256 296c57.2998 0 104 -46.7002 104 -104s-46.7002 -104 -104 -104s-104 46.7002 -104 104s46.7002 104 104 104zM256 136
+c30.9004 0 56 25.0996 56 56s-25.0996 56 -56 56s-56 -25.0996 -56 -56s25.0996 -56 56 -56z" />
+    <glyph glyph-name="moon" unicode="&#xf186;" 
+d="M279.135 -64c-141.424 0 -256 114.64 -256 256c0 141.425 114.641 256 256 256c13.0068 -0.00195312 33.9443 -1.91797 46.7354 -4.27734c44.0205 -8.13086 53.7666 -66.8691 15.0215 -88.9189c-41.374 -23.5439 -67.4336 -67.4121 -67.4336 -115.836
+c0 -83.5234 75.9238 -146.475 158.272 -130.792c43.6904 8.32129 74.5186 -42.5693 46.248 -77.4004c-47.8613 -58.9717 -120.088 -94.7754 -198.844 -94.7754zM279.135 400c-114.875 0 -208 -93.125 -208 -208s93.125 -208 208 -208
+c65.2314 0 123.439 30.0361 161.575 77.0244c-111.611 -21.2568 -215.252 64.0957 -215.252 177.943c0 67.5127 36.9326 126.392 91.6934 157.555c-12.3271 2.27637 -25.0312 3.47754 -38.0166 3.47754z" />
+    <glyph glyph-name="caret-square-left" unicode="&#xf191;" horiz-adv-x="448" 
+d="M272 290.9v-197.801c0 -10.6992 -13 -16.0996 -20.5 -8.5l-98.2998 98.9004c-4.7002 4.7002 -4.7002 12.2002 0 16.9004l98.2998 98.8994c7.5 7.7002 20.5 2.2998 20.5 -8.39941zM448 368v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352
+c0 26.5 21.5 48 48 48h352c26.5 0 48 -21.5 48 -48zM400 22v340c0 3.2998 -2.7002 6 -6 6h-340c-3.2998 0 -6 -2.7002 -6 -6v-340c0 -3.2998 2.7002 -6 6 -6h340c3.2998 0 6 2.7002 6 6z" />
+    <glyph glyph-name="dot-circle" unicode="&#xf192;" 
+d="M256 392c-110.549 0 -200 -89.4678 -200 -200c0 -110.549 89.4678 -200 200 -200c110.549 0 200 89.4678 200 200c0 110.549 -89.4678 200 -200 200zM256 440c136.967 0 248 -111.033 248 -248s-111.033 -248 -248 -248s-248 111.033 -248 248s111.033 248 248 248z
+M256 272c44.1826 0 80 -35.8174 80 -80s-35.8174 -80 -80 -80s-80 35.8174 -80 80s35.8174 80 80 80z" />
+    <glyph glyph-name="building" unicode="&#xf1ad;" horiz-adv-x="448" 
+d="M128 300v40c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-40c0 -6.59961 -5.40039 -12 -12 -12h-40c-6.59961 0 -12 5.40039 -12 12zM268 288c-6.59961 0 -12 5.40039 -12 12v40c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-40
+c0 -6.59961 -5.40039 -12 -12 -12h-40zM140 192c-6.59961 0 -12 5.40039 -12 12v40c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-40c0 -6.59961 -5.40039 -12 -12 -12h-40zM268 192c-6.59961 0 -12 5.40039 -12 12v40c0 6.59961 5.40039 12 12 12h40
+c6.59961 0 12 -5.40039 12 -12v-40c0 -6.59961 -5.40039 -12 -12 -12h-40zM192 108c0 -6.59961 -5.40039 -12 -12 -12h-40c-6.59961 0 -12 5.40039 -12 12v40c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-40zM268 96c-6.59961 0 -12 5.40039 -12 12v40
+c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-40c0 -6.59961 -5.40039 -12 -12 -12h-40zM448 -28v-36h-448v36c0 6.59961 5.40039 12 12 12h19.5v440c0 13.2998 10.7002 24 24 24h337c13.2998 0 24 -10.7002 24 -24v-440h19.5
+c6.59961 0 12 -5.40039 12 -12zM79.5 -15h112.5v67c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-67h112.5v414l-288.5 1z" />
+    <glyph glyph-name="file-pdf" unicode="&#xf1c1;" horiz-adv-x="384" 
+d="M369.9 350.1c9 -9 14.0996 -21.2998 14.0996 -34v-332.1c0 -26.5 -21.5 -48 -48 -48h-288c-26.5 0 -48 21.5 -48 48v416c0 26.5 21.5 48 48 48.0996h204.1c12.7002 0 24.9004 -5.09961 33.9004 -14.0996zM332.1 320l-76.0996 76.0996v-76.0996h76.0996zM48 -16h288v288
+h-104c-13.2998 0 -24 10.7002 -24 24v104h-160v-416zM298.2 127.7c10.5 -10.5 8 -38.7002 -17.5 -38.7002c-14.7998 0 -36.9004 6.7998 -55.7998 17c-21.6006 -3.59961 -46 -12.7002 -68.4004 -20.0996c-50.0996 -86.4004 -79.4004 -47 -76.0996 -31.2002
+c4 20 31 35.8994 51 46.2002c10.5 18.3994 25.3994 50.5 35.3994 74.3994c-7.39941 28.6006 -11.3994 51 -7 67.1006c4.7998 17.6992 38.4004 20.2998 42.6006 -5.90039c4.69922 -15.4004 -1.5 -39.9004 -5.40039 -56c8.09961 -21.2998 19.5996 -35.7998 36.7998 -46.2998
+c17.4004 2.2002 52.2002 5.5 64.4004 -6.5zM100.1 49.9004c0 -0.700195 11.4004 4.69922 30.4004 35c-5.90039 -5.5 -25.2998 -21.3008 -30.4004 -35zM181.7 240.5c-2.5 0 -2.60059 -26.9004 1.7998 -40.7998c4.90039 8.7002 5.59961 40.7998 -1.7998 40.7998zM157.3 103.9
+c15.9004 6.09961 34 14.8994 54.7998 19.1992c-11.1992 8.30078 -21.7998 20.4004 -30.0996 35.5c-6.7002 -17.6992 -15 -37.7998 -24.7002 -54.6992zM288.9 108.9c3.59961 2.39941 -2.2002 10.3994 -37.3008 7.7998c32.3008 -13.7998 37.3008 -7.7998 37.3008 -7.7998z" />
+    <glyph glyph-name="file-word" unicode="&#xf1c2;" horiz-adv-x="384" 
+d="M369.9 350.1c9 -9 14.0996 -21.2998 14.0996 -34v-332.1c0 -26.5 -21.5 -48 -48 -48h-288c-26.5 0 -48 21.5 -48 48v416c0 26.5 21.5 48 48 48.0996h204.1c12.7002 0 24.9004 -5.09961 33.9004 -14.0996zM332.1 320l-76.0996 76.0996v-76.0996h76.0996zM48 -16h288v288
+h-104c-13.2998 0 -24 10.7002 -24 24v104h-160v-416zM268.1 192v0.200195h15.8008c7.7998 0 13.5 -7.2998 11.5996 -14.9004c-4.2998 -17 -13.7002 -54.0996 -34.5 -136c-1.2998 -5.39941 -6.09961 -9.09961 -11.5996 -9.09961h-24.7002
+c-5.5 0 -10.2998 3.7998 -11.6006 9.09961c-5.2998 20.9004 -17.7998 71 -17.8994 71.4004l-2.90039 17.2998c-0.5 -5.2998 -1.5 -11.0996 -3 -17.2998l-17.8994 -71.4004c-1.30078 -5.39941 -6.10059 -9.09961 -11.6006 -9.09961h-25.2002
+c-5.59961 0 -10.3994 3.7002 -11.6992 9.09961c-6.5 26.5 -25.2002 103.4 -33.2002 136c-1.7998 7.5 3.89941 14.7998 11.7002 14.7998h16.7998c5.7998 0 10.7002 -4.09961 11.7998 -9.69922c5 -25.7002 18.4004 -93.8008 19.0996 -99
+c0.300781 -1.7002 0.400391 -3.10059 0.5 -4.2002c0.800781 7.5 0.400391 4.7002 24.8008 103.7c1.39941 5.2998 6.19922 9.09961 11.6992 9.09961h13.3008c5.59961 0 10.3994 -3.7998 11.6992 -9.2002c23.9004 -99.7002 22.8008 -94.3994 23.6006 -99.5
+c0.299805 -1.7002 0.5 -3.09961 0.700195 -4.2998c0.599609 8.09961 0.399414 5.7998 21 103.5c1.09961 5.5 6 9.5 11.6992 9.5z" />
+    <glyph glyph-name="file-excel" unicode="&#xf1c3;" horiz-adv-x="384" 
+d="M369.9 350.1c9 -9 14.0996 -21.2998 14.0996 -34v-332.1c0 -26.5 -21.5 -48 -48 -48h-288c-26.5 0 -48 21.5 -48 48v416c0 26.5 21.5 48 48 48.0996h204.1c12.7002 0 24.9004 -5.09961 33.9004 -14.0996zM332.1 320l-76.0996 76.0996v-76.0996h76.0996zM48 -16h288v288
+h-104c-13.2998 0 -24 10.7002 -24 24v104h-160v-416zM260 224c9.2002 0 15 -10 10.2998 -18c-16 -27.5 -45.5996 -76.9004 -46.2998 -78l46.4004 -78c4.59961 -8 -1.10059 -18 -10.4004 -18h-28.7998c-4.40039 0 -8.5 2.40039 -10.6006 6.2998
+c-22.6992 41.7998 -13.6992 27.5 -28.5996 57.7002c-5.59961 -12.7002 -6.90039 -17.7002 -28.5996 -57.7002c-2.10059 -3.89941 -6.10059 -6.2998 -10.5 -6.2998h-28.9004c-9.2998 0 -15.0996 10 -10.4004 18l46.3008 78l-46.3008 78c-4.59961 8 1.10059 18 10.4004 18
+h28.9004c4.39941 0 8.5 -2.40039 10.5996 -6.2998c21.7002 -40.4004 14.7002 -28.6006 28.5996 -57.7002c6.40039 15.2998 10.6006 24.5996 28.6006 57.7002c2.09961 3.89941 6.09961 6.2998 10.5 6.2998h28.7998z" />
+    <glyph glyph-name="file-powerpoint" unicode="&#xf1c4;" horiz-adv-x="384" 
+d="M369.9 350.1c9 -9 14.0996 -21.2998 14.0996 -34v-332.1c0 -26.5 -21.5 -48 -48 -48h-288c-26.5 0 -48 21.5 -48 48v416c0 26.5 21.5 48 48 48.0996h204.1c12.7002 0 24.9004 -5.09961 33.9004 -14.0996zM332.1 320l-76.0996 76.0996v-76.0996h76.0996zM48 -16h288v288
+h-104c-13.2998 0 -24 10.7002 -24 24v104h-160v-416zM120 44v168c0 6.59961 5.40039 12 12 12h69.2002c36.7002 0 62.7998 -27 62.7998 -66.2998c0 -74.2998 -68.7002 -66.5 -95.5 -66.5v-47.2002c0 -6.59961 -5.40039 -12 -12 -12h-24.5c-6.59961 0 -12 5.40039 -12 12z
+M168.5 131.4h23c7.90039 0 13.9004 2.39941 18.0996 7.19922c8.5 9.80078 8.40039 28.5 0.100586 37.8008c-4.10059 4.59961 -9.90039 7 -17.4004 7h-23.8994v-52h0.0996094z" />
+    <glyph glyph-name="file-image" unicode="&#xf1c5;" horiz-adv-x="384" 
+d="M369.9 350.1c9 -9 14.0996 -21.2998 14.0996 -34v-332.1c0 -26.5 -21.5 -48 -48 -48h-288c-26.5 0 -48 21.5 -48 48v416c0 26.5 21.5 48 48 48.0996h204.1c12.7002 0 24.9004 -5.09961 33.9004 -14.0996zM332.1 320l-76.0996 76.0996v-76.0996h76.0996zM48 -16h288v288
+h-104c-13.2998 0 -24 10.7002 -24 24v104h-160v-416zM80 32v64l39.5 39.5c4.7002 4.7002 12.2998 4.7002 17 0l39.5 -39.5l87.5 87.5c4.7002 4.7002 12.2998 4.7002 17 0l23.5 -23.5v-128h-224zM128 272c26.5 0 48 -21.5 48 -48s-21.5 -48 -48 -48s-48 21.5 -48 48
+s21.5 48 48 48z" />
+    <glyph glyph-name="file-archive" unicode="&#xf1c6;" horiz-adv-x="384" 
+d="M128.3 288h32v-32h-32v32zM192.3 384v-32h-32v32h32zM128.3 352h32v-32h-32v32zM192.3 320v-32h-32v32h32zM369.9 350.1c9 -9 14.0996 -21.2998 14.0996 -34v-332.1c0 -26.5 -21.5 -48 -48 -48h-288c-26.5 0 -48 21.5 -48 48v416c0 26.5 21.5 48 48 48.0996h204.1
+c12.7002 0 24.9004 -5.09961 33.9004 -14.0996zM256 396.1v-76.0996h76.0996zM336 -16v288h-104c-13.2998 0 -24 10.7002 -24 24v104h-48.2998v-16h-32v16h-79.7002v-416h288zM194.2 182.3l17.2998 -87.7002c6.40039 -32.3994 -18.4004 -62.5996 -51.5 -62.5996
+c-33.2002 0 -58 30.4004 -51.4004 62.9004l19.7002 97.0996v32h32v-32h22.1006c5.7998 0 10.6992 -4.09961 11.7998 -9.7002zM160.3 57.9004c17.9004 0 32.4004 12.0996 32.4004 27c0 14.8994 -14.5 27 -32.4004 27c-17.8994 0 -32.3994 -12.1006 -32.3994 -27
+c0 -14.9004 14.5 -27 32.3994 -27zM192.3 256v-32h-32v32h32z" />
+    <glyph glyph-name="file-audio" unicode="&#xf1c7;" horiz-adv-x="384" 
+d="M369.941 350.059c7.75977 -7.75977 14.0586 -22.9658 14.0586 -33.9404v-332.118c0 -26.5098 -21.4902 -48 -48 -48h-288c-26.5098 0 -48 21.4902 -48 48v416c0 26.5098 21.4902 48 48 48h204.118c10.9746 0 26.1807 -6.29883 33.9404 -14.0586zM332.118 320
+l-76.1182 76.1182v-76.1182h76.1182zM48 -16h288v288h-104c-13.2549 0 -24 10.7451 -24 24v104h-160v-416zM192 60.0244c0 -10.6914 -12.9258 -16.0459 -20.4854 -8.48535l-35.5146 35.9746h-28c-6.62695 0 -12 5.37305 -12 12v56c0 6.62695 5.37305 12 12 12h28
+l35.5146 36.9473c7.56055 7.56055 20.4854 2.20605 20.4854 -8.48535v-135.951zM233.201 107.154c9.05078 9.29688 9.05957 24.1328 0.000976562 33.4385c-22.1494 22.752 12.2344 56.2461 34.3945 33.4814c27.1982 -27.9404 27.2119 -72.4443 0.000976562 -100.401
+c-21.793 -22.3857 -56.9463 10.3154 -34.3965 33.4814z" />
+    <glyph glyph-name="file-video" unicode="&#xf1c8;" horiz-adv-x="384" 
+d="M369.941 350.059c7.75977 -7.75977 14.0586 -22.9658 14.0586 -33.9404v-332.118c0 -26.5098 -21.4902 -48 -48 -48h-288c-26.5098 0 -48 21.4902 -48 48v416c0 26.5098 21.4902 48 48 48h204.118c10.9746 0 26.1807 -6.29883 33.9404 -14.0586zM332.118 320
+l-76.1182 76.1182v-76.1182h76.1182zM48 -16h288v288h-104c-13.2549 0 -24 10.7451 -24 24v104h-160v-416zM276.687 195.303c10.0049 10.0049 27.3135 2.99707 27.3135 -11.3135v-111.976c0 -14.2939 -17.2959 -21.332 -27.3135 -11.3135l-52.6865 52.6738v-37.374
+c0 -11.0459 -8.9541 -20 -20 -20h-104c-11.0459 0 -20 8.9541 -20 20v104c0 11.0459 8.9541 20 20 20h104c11.0459 0 20 -8.9541 20 -20v-37.374z" />
+    <glyph glyph-name="file-code" unicode="&#xf1c9;" horiz-adv-x="384" 
+d="M149.9 98.9004c3.5 -3.30078 3.69922 -8.90039 0.399414 -12.4004l-17.3994 -18.5996c-1.60059 -1.80078 -4 -2.80078 -6.40039 -2.80078c-2.2002 0 -4.40039 0.900391 -6 2.40039l-57.7002 54.0996c-3.7002 3.40039 -3.7002 9.30078 0 12.8008l57.7002 54.0996
+c3.40039 3.2998 9 3.2002 12.4004 -0.400391l17.3994 -18.5996l0.200195 -0.200195c3.2002 -3.59961 2.7998 -9.2002 -0.799805 -12.3994l-32.7998 -28.9004l32.7998 -28.9004zM369.9 350.1c9 -9 14.0996 -21.2998 14.0996 -34v-332.1c0 -26.5 -21.5 -48 -48 -48h-288
+c-26.5 0 -48 21.5 -48 48v416c0 26.5 21.5 48 48 48.0996h204.1c12.7002 0 24.9004 -5.09961 33.9004 -14.0996zM256 396.1v-76.0996h76.0996zM336 -16v288h-104c-13.2998 0 -24 10.7002 -24 24v104h-160v-416h288zM209.6 234l24.4004 -7
+c4.7002 -1.2998 7.40039 -6.2002 6 -10.9004l-54.7002 -188.199c-1.2998 -4.60059 -6.2002 -7.40039 -10.8994 -6l-24.4004 7.09961c-4.7002 1.2998 -7.40039 6.2002 -6 10.9004l54.7002 188.1c1.39941 4.7002 6.2002 7.40039 10.8994 6zM234.1 157.1
+c-3.5 3.30078 -3.69922 8.90039 -0.399414 12.4004l17.3994 18.5996c3.30078 3.60059 8.90039 3.7002 12.4004 0.400391l57.7002 -54.0996c3.7002 -3.40039 3.7002 -9.30078 0 -12.8008l-57.7002 -54.0996c-3.5 -3.2998 -9.09961 -3.09961 -12.4004 0.400391
+l-17.3994 18.5996l-0.200195 0.200195c-3.2002 3.59961 -2.7998 9.2002 0.799805 12.3994l32.7998 28.9004l-32.7998 28.9004z" />
+    <glyph glyph-name="life-ring" unicode="&#xf1cd;" 
+d="M256 -56c-136.967 0 -248 111.033 -248 248s111.033 248 248 248s248 -111.033 248 -248s-111.033 -248 -248 -248zM152.602 20.7197c63.2178 -38.3184 143.579 -38.3184 206.797 0l-53.4111 53.4111c-31.8467 -13.5215 -68.168 -13.5059 -99.9746 0zM336 192
+c0 44.1123 -35.8877 80 -80 80s-80 -35.8877 -80 -80s35.8877 -80 80 -80s80 35.8877 80 80zM427.28 88.6016c38.3184 63.2178 38.3184 143.579 0 206.797l-53.4111 -53.4111c13.5215 -31.8467 13.5049 -68.168 0 -99.9746zM359.397 363.28
+c-63.2168 38.3184 -143.578 38.3184 -206.796 0l53.4111 -53.4111c31.8457 13.5215 68.167 13.5049 99.9736 0zM84.7197 295.398c-38.3184 -63.2178 -38.3184 -143.579 0 -206.797l53.4111 53.4111c-13.5215 31.8467 -13.5059 68.168 0 99.9746z" />
+    <glyph glyph-name="paper-plane" unicode="&#xf1d8;" 
+d="M440 441.5c34.5996 19.9004 77.5996 -8.7998 71.5 -48.9004l-59.4004 -387.199c-2.2998 -14.5 -11.0996 -27.3008 -23.8994 -34.5c-7.2998 -4.10059 -15.4004 -6.2002 -23.6006 -6.2002c-6.19922 0 -12.3994 1.2002 -18.2998 3.59961l-111.899 46.2002l-43.8008 -59.0996
+c-27.3994 -36.9004 -86.5996 -17.8008 -86.5996 28.5996v84.4004l-114.3 47.2998c-36.7998 15.0996 -40.1006 66 -5.7002 85.8994zM192 -16l36.5996 49.5l-36.5996 15.0996v-64.5996zM404.6 12.7002l59.4004 387.3l-416 -240l107.8 -44.5996l211.5 184.3
+c14.2002 12.2998 34.4004 -5.7002 23.7002 -21.2002l-140.2 -202.3z" />
+    <glyph glyph-name="futbol" unicode="&#xf1e3;" horiz-adv-x="496" 
+d="M483.8 268.6c42.2998 -130.199 -29 -270.1 -159.2 -312.399c-25.5 -8.2998 -51.2998 -12.2002 -76.6992 -12.2002c-104.5 0 -201.7 66.5996 -235.7 171.4c-42.2998 130.199 29 270.1 159.2 312.399c25.5 8.2998 51.2998 12.2002 76.6992 12.2002
+c104.5 0 201.7 -66.5996 235.7 -171.4zM409.3 74.9004c6.10059 8.39941 12.1006 16.8994 16.7998 26.1992c14.3008 28.1006 21.5 58.5 21.7002 89.2002l-38.8994 36.4004l-71.1006 -22.1006l-24.3994 -75.1992l43.6992 -60.9004zM409.3 310.3
+c-24.5 33.4004 -58.7002 58.4004 -97.8994 71.4004l-47.4004 -26.2002v-73.7998l64.2002 -46.5l70.7002 22zM184.9 381.6c-39.9004 -13.2998 -73.5 -38.5 -97.8008 -71.8994l10.1006 -52.5l70.5996 -22l64.2002 46.5v73.7998zM139 68.5l43.5 61.7002l-24.2998 74.2998
+l-71.1006 22.2002l-39 -36.4004c0.5 -55.7002 23.4004 -95.2002 37.8008 -115.3zM187.2 1.5c64.0996 -20.4004 115.5 -1.7998 121.7 0l22.3994 48.0996l-44.2998 61.7002h-78.5996l-43.6006 -61.7002z" />
+    <glyph glyph-name="newspaper" unicode="&#xf1ea;" horiz-adv-x="576" 
+d="M552 384c13.2549 0 24 -10.7451 24 -24v-336c0 -13.2549 -10.7451 -24 -24 -24h-496c-30.9277 0 -56 25.0723 -56 56v272c0 13.2549 10.7451 24 24 24h42.752c6.60547 18.623 24.3896 32 45.248 32h440zM48 56c0 -4.41113 3.58887 -8 8 -8s8 3.58887 8 8v248h-16v-248z
+M528 48v288h-416v-280c0 -2.7168 -0.204102 -5.38574 -0.578125 -8h416.578zM172 168c-6.62695 0 -12 5.37305 -12 12v96c0 6.62695 5.37305 12 12 12h136c6.62695 0 12 -5.37305 12 -12v-96c0 -6.62695 -5.37305 -12 -12 -12h-136zM200 248v-40h80v40h-80zM160 108v24
+c0 6.62695 5.37305 12 12 12h136c6.62695 0 12 -5.37305 12 -12v-24c0 -6.62695 -5.37305 -12 -12 -12h-136c-6.62695 0 -12 5.37305 -12 12zM352 108v24c0 6.62695 5.37305 12 12 12h104c6.62695 0 12 -5.37305 12 -12v-24c0 -6.62695 -5.37305 -12 -12 -12h-104
+c-6.62695 0 -12 5.37305 -12 12zM352 252v24c0 6.62695 5.37305 12 12 12h104c6.62695 0 12 -5.37305 12 -12v-24c0 -6.62695 -5.37305 -12 -12 -12h-104c-6.62695 0 -12 5.37305 -12 12zM352 180v24c0 6.62695 5.37305 12 12 12h104c6.62695 0 12 -5.37305 12 -12v-24
+c0 -6.62695 -5.37305 -12 -12 -12h-104c-6.62695 0 -12 5.37305 -12 12z" />
+    <glyph glyph-name="bell-slash" unicode="&#xf1f6;" horiz-adv-x="640" 
+d="M633.99 -23.0195c6.91016 -5.52051 8.01953 -15.5908 2.5 -22.4902l-10 -12.4902c-5.53027 -6.88965 -15.5898 -8.00977 -22.4902 -2.49023l-598 467.51c-6.90039 5.52051 -8.01953 15.5908 -2.49023 22.4902l10 12.4902
+c5.52051 6.90039 15.5898 8.00977 22.4902 2.49023zM163.53 80h182.84l61.3994 -48h-279.659c-19.1201 0 -31.9902 15.5996 -32.1006 32c-0.0498047 7.5498 2.61035 15.2598 8.61035 21.71c18.3701 19.7402 51.5703 49.6904 54.8398 140.42l45.4697 -35.5498
+c-6.91992 -54.7803 -24.6895 -88.5498 -41.3994 -110.58zM320 352c-23.3496 0 -45 -7.17969 -62.9404 -19.4004l-38.1699 29.8408c19.6807 15.7793 43.1104 27.3096 69.1299 32.7197v20.8398c0 17.6699 14.3203 32 31.9805 32s31.9805 -14.3301 31.9805 -32v-20.8398
+c73.46 -15.2598 127.939 -77.46 127.939 -155.16c0 -41.3604 6.03027 -70.7197 14.3398 -92.8496l-59.5293 46.54c-1.63086 13.96 -2.77051 28.8896 -2.79004 45.7295c0 0.200195 0.0595703 0.379883 0.0595703 0.580078c0 61.8604 -50.1396 112 -112 112zM320 -64
+c-35.3203 0 -63.9697 28.6504 -63.9697 64h127.939c0 -35.3496 -28.6494 -64 -63.9697 -64z" />
+    <glyph glyph-name="copyright" unicode="&#xf1f9;" 
+d="M256 440c136.967 0 248 -111.033 248 -248s-111.033 -248 -248 -248s-248 111.033 -248 248s111.033 248 248 248zM256 -8c110.549 0 200 89.4678 200 200c0 110.549 -89.4678 200 -200 200c-110.549 0 -200 -89.4688 -200 -200c0 -110.549 89.4678 -200 200 -200z
+M363.351 93.0645c-9.61328 -9.71289 -45.5293 -41.3965 -104.064 -41.3965c-82.4297 0 -140.484 61.4248 -140.484 141.567c0 79.1514 60.2754 139.4 139.763 139.4c55.5303 0 88.7373 -26.6201 97.5928 -34.7783c2.13379 -1.96289 3.86523 -5.9082 3.86523 -8.80762
+c0 -1.95508 -0.864258 -4.87402 -1.92969 -6.51465l-18.1543 -28.1133c-3.8418 -5.9502 -11.9668 -7.28223 -17.499 -2.9209c-8.5957 6.77637 -31.8145 22.5381 -61.708 22.5381c-48.3037 0 -77.916 -35.3301 -77.916 -80.082c0 -41.5889 26.8877 -83.6924 78.2764 -83.6924
+c32.6572 0 56.8428 19.0391 65.7266 27.2256c5.26953 4.85645 13.5957 4.03906 17.8193 -1.73828l19.8652 -27.1699c1.28613 -1.74512 2.33008 -4.91992 2.33008 -7.08789c0 -2.72363 -1.56055 -6.5 -3.48242 -8.42969z" />
+    <glyph glyph-name="closed-captioning" unicode="&#xf20a;" 
+d="M464 384c26.5 0 48 -21.5 48 -48v-288c0 -26.5 -21.5 -48 -48 -48h-416c-26.5 0 -48 21.5 -48 48v288c0 26.5 21.5 48 48 48h416zM458 48c3.2998 0 6 2.7002 6 6v276c0 3.2998 -2.7002 6 -6 6h-404c-3.2998 0 -6 -2.7002 -6 -6v-276c0 -3.2998 2.7002 -6 6 -6h404z
+M246.9 133.7c1.69922 -2.40039 1.5 -5.60059 -0.5 -7.7002c-53.6006 -56.7998 -172.801 -32.0996 -172.801 67.9004c0 97.2998 121.7 119.5 172.5 70.0996c2.10059 -2 2.5 -3.2002 1 -5.7002l-17.5 -30.5c-1.89941 -3.09961 -6.19922 -4 -9.09961 -1.7002
+c-40.7998 32 -94.5996 14.9004 -94.5996 -31.1992c0 -48 51 -70.5 92.1992 -32.6006c2.80078 2.5 7.10059 2.10059 9.2002 -0.899414zM437.3 133.7c1.7002 -2.40039 1.5 -5.60059 -0.5 -7.7002c-53.5996 -56.9004 -172.8 -32.0996 -172.8 67.9004
+c0 97.2998 121.7 119.5 172.5 70.0996c2.09961 -2 2.5 -3.2002 1 -5.7002l-17.5 -30.5c-1.90039 -3.09961 -6.2002 -4 -9.09961 -1.7002c-40.8008 32 -94.6006 14.9004 -94.6006 -31.1992c0 -48 51 -70.5 92.2002 -32.6006c2.7998 2.5 7.09961 2.10059 9.2002 -0.899414z
+" />
+    <glyph glyph-name="object-group" unicode="&#xf247;" 
+d="M500 320h-12v-256h12c6.62695 0 12 -5.37305 12 -12v-72c0 -6.62695 -5.37305 -12 -12 -12h-72c-6.62695 0 -12 5.37305 -12 12v12h-320v-12c0 -6.62695 -5.37305 -12 -12 -12h-72c-6.62695 0 -12 5.37305 -12 12v72c0 6.62695 5.37305 12 12 12h12v256h-12
+c-6.62695 0 -12 5.37305 -12 12v72c0 6.62695 5.37305 12 12 12h72c6.62695 0 12 -5.37305 12 -12v-12h320v12c0 6.62695 5.37305 12 12 12h72c6.62695 0 12 -5.37305 12 -12v-72c0 -6.62695 -5.37305 -12 -12 -12zM448 384v-32h32v32h-32zM32 384v-32h32v32h-32zM64 0v32
+h-32v-32h32zM480 0v32h-32v-32h32zM440 64v256h-12c-6.62695 0 -12 5.37305 -12 12v12h-320v-12c0 -6.62695 -5.37305 -12 -12 -12h-12v-256h12c6.62695 0 12 -5.37305 12 -12v-12h320v12c0 6.62695 5.37305 12 12 12h12zM404 256c6.62695 0 12 -5.37207 12 -12v-168
+c0 -6.62793 -5.37305 -12 -12 -12h-200c-6.62695 0 -12 5.37207 -12 12v52h-84c-6.62695 0 -12 5.37207 -12 12v168c0 6.62793 5.37305 12 12 12h200c6.62695 0 12 -5.37207 12 -12v-52h84zM136 280v-112h144v112h-144zM376 104v112h-56v-76
+c0 -6.62793 -5.37305 -12 -12 -12h-76v-24h144z" />
+    <glyph glyph-name="object-ungroup" unicode="&#xf248;" horiz-adv-x="576" 
+d="M564 224h-12v-160h12c6.62695 0 12 -5.37305 12 -12v-72c0 -6.62695 -5.37305 -12 -12 -12h-72c-6.62695 0 -12 5.37305 -12 12v12h-224v-12c0 -6.62695 -5.37305 -12 -12 -12h-72c-6.62695 0 -12 5.37305 -12 12v72c0 6.62695 5.37305 12 12 12h12v24h-88v-12
+c0 -6.62695 -5.37305 -12 -12 -12h-72c-6.62695 0 -12 5.37305 -12 12v72c0 6.62695 5.37305 12 12 12h12v160h-12c-6.62695 0 -12 5.37305 -12 12v72c0 6.62695 5.37305 12 12 12h72c6.62695 0 12 -5.37305 12 -12v-12h224v12c0 6.62695 5.37305 12 12 12h72
+c6.62695 0 12 -5.37305 12 -12v-72c0 -6.62695 -5.37305 -12 -12 -12h-12v-24h88v12c0 6.62695 5.37305 12 12 12h72c6.62695 0 12 -5.37305 12 -12v-72c0 -6.62695 -5.37305 -12 -12 -12zM352 384v-32h32v32h-32zM352 128v-32h32v32h-32zM64 96v32h-32v-32h32zM64 352v32
+h-32v-32h32zM96 136h224v12c0 6.62695 5.37305 12 12 12h12v160h-12c-6.62695 0 -12 5.37305 -12 12v12h-224v-12c0 -6.62695 -5.37305 -12 -12 -12h-12v-160h12c6.62695 0 12 -5.37305 12 -12v-12zM224 0v32h-32v-32h32zM504 64v160h-12c-6.62695 0 -12 5.37305 -12 12v12
+h-88v-88h12c6.62695 0 12 -5.37305 12 -12v-72c0 -6.62695 -5.37305 -12 -12 -12h-72c-6.62695 0 -12 5.37305 -12 12v12h-88v-24h12c6.62695 0 12 -5.37305 12 -12v-12h224v12c0 6.62695 5.37305 12 12 12h12zM544 0v32h-32v-32h32zM544 256v32h-32v-32h32z" />
+    <glyph glyph-name="sticky-note" unicode="&#xf249;" horiz-adv-x="448" 
+d="M448 99.8936c0 -10.9746 -6.29883 -26.1797 -14.0586 -33.9404l-83.8828 -83.8818c-7.75977 -7.76074 -22.9658 -14.0596 -33.9404 -14.0596h-268.118c-26.5098 0 -48 21.4902 -48 48v351.988c0 26.5098 21.4902 48 48 48h352c26.5098 0 48 -21.4902 48 -48v-268.106z
+M320 19.8936l76.1182 76.1182h-76.1182v-76.1182zM400 368h-352v-351.988h224v104c0 13.2549 10.7451 24 24 24h104v223.988z" />
+    <glyph glyph-name="clone" unicode="&#xf24d;" 
+d="M464 448c26.5098 0 48 -21.4902 48 -48v-320c0 -26.5098 -21.4902 -48 -48 -48h-48v-48c0 -26.5098 -21.4902 -48 -48 -48h-320c-26.5098 0 -48 21.4902 -48 48v320c0 26.5098 21.4902 48 48 48h48v48c0 26.5098 21.4902 48 48 48h320zM362 -16c3.31152 0 6 2.68848 6 6
+v42h-224c-26.5098 0 -48 21.4902 -48 48v224h-42c-3.31152 0 -6 -2.68848 -6 -6v-308c0 -3.31152 2.68848 -6 6 -6h308zM458 80c3.31152 0 6 2.68848 6 6v308c0 3.31152 -2.68848 6 -6 6h-308c-3.31152 0 -6 -2.68848 -6 -6v-308c0 -3.31152 2.68848 -6 6 -6h308z" />
+    <glyph glyph-name="hourglass" unicode="&#xf254;" horiz-adv-x="384" 
+d="M368 400c0 -80.0996 -31.8984 -165.619 -97.1797 -208c64.9912 -42.1934 97.1797 -127.436 97.1797 -208h4c6.62695 0 12 -5.37305 12 -12v-24c0 -6.62695 -5.37305 -12 -12 -12h-360c-6.62695 0 -12 5.37305 -12 12v24c0 6.62695 5.37305 12 12 12h4
+c0 80.0996 31.8994 165.619 97.1797 208c-64.9912 42.1934 -97.1797 127.436 -97.1797 208h-4c-6.62695 0 -12 5.37305 -12 12v24c0 6.62695 5.37305 12 12 12h360c6.62695 0 12 -5.37305 12 -12v-24c0 -6.62695 -5.37305 -12 -12 -12h-4zM64 400
+c0 -101.621 57.3066 -184 128 -184s128 82.3799 128 184h-256zM320 -16c0 101.62 -57.3076 184 -128 184s-128 -82.3799 -128 -184h256z" />
+    <glyph glyph-name="hand-rock" unicode="&#xf255;" 
+d="M408.864 368.948c48.8213 20.751 103.136 -15.0723 103.136 -67.9111v-114.443c0 -15.3955 -3.08887 -30.3906 -9.18262 -44.5674l-42.835 -99.6562c-4.99707 -11.625 -3.98242 -18.8574 -3.98242 -42.3701c0 -17.6729 -14.3271 -32 -32 -32h-252
+c-17.6729 0 -32 14.3271 -32 32c0 27.3301 1.1416 29.2012 -3.11035 32.9033l-97.71 85.0811c-24.8994 21.6797 -39.1797 52.8926 -39.1797 85.6338v56.9531c0 47.4277 44.8457 82.0215 91.0459 71.1807c1.96094 55.751 63.5107 87.8262 110.671 60.8057
+c29.1895 31.0713 78.8604 31.4473 108.334 -0.0214844c32.7051 18.6846 76.4121 10.3096 98.8135 -23.5879zM464 186.594v114.445c0 34.29 -52 33.8232 -52 0.676758c0 -8.83594 -7.16309 -16 -16 -16h-7c-8.83691 0 -16 7.16406 -16 16v26.751
+c0 34.457 -52 33.707 -52 0.676758v-27.4287c0 -8.83594 -7.16309 -16 -16 -16h-7c-8.83691 0 -16 7.16406 -16 16v40.4658c0 34.3525 -52 33.8115 -52 0.677734v-41.1436c0 -8.83594 -7.16406 -16 -16 -16h-7c-8.83594 0 -16 7.16406 -16 16v26.751
+c0 34.4023 -52 33.7744 -52 0.676758v-116.571c0 -8.83203 -7.16797 -16 -16 -16c-3.30664 0 -8.01367 1.7627 -10.5068 3.93359l-7 6.09473c-3.03223 2.64062 -5.49316 8.04688 -5.49316 12.0674v0v41.2275c0 34.2148 -52 33.8857 -52 0.677734v-56.9531
+c0 -18.8555 8.27441 -36.874 22.7002 -49.4365l97.71 -85.0801c12.4502 -10.8398 19.5898 -26.4463 19.5898 -42.8164v-10.2861h220v7.07617c0 13.21 2.65332 26.0791 7.88281 38.25l42.835 99.6553c2.91602 6.75391 5.28223 18.207 5.28223 25.5635v0.0488281z" />
+    <glyph glyph-name="hand-paper" unicode="&#xf256;" horiz-adv-x="448" 
+d="M372.57 335.359c39.9062 5.63281 75.4297 -25.7393 75.4297 -66.3594v-131.564c-0.00195312 -12.7666 -2.33008 -33.2246 -5.19531 -45.666l-30.1836 -130.958c-3.34668 -14.5234 -16.2783 -24.8125 -31.1816 -24.8125h-222.897
+c-9.10352 0 -20.7793 6.01758 -26.0615 13.4316l-119.97 168.415c-21.2441 29.8203 -14.8047 71.3574 14.5498 93.1533c18.7754 13.9395 42.1309 16.2979 62.083 8.87109v126.13c0 44.0547 41.125 75.5439 82.4053 64.9834c23.8926 48.1963 92.3535 50.2471 117.982 0.74707
+c42.5186 11.1445 83.0391 -21.9346 83.0391 -65.5469v-10.8242zM399.997 137.437l-0.00195312 131.563c0 24.9492 -36.5703 25.5508 -36.5703 -0.691406v-76.3086c0 -8.83691 -7.16309 -16 -16 -16h-6.85645c-8.83691 0 -16 7.16309 -16 16v154.184
+c0 25.501 -36.5703 26.3633 -36.5703 0.691406v-154.875c0 -8.83691 -7.16309 -16 -16 -16h-6.85645c-8.83691 0 -16 7.16309 -16 16v188.309c0 25.501 -36.5703 26.3545 -36.5703 0.691406v-189c0 -8.83691 -7.16309 -16 -16 -16h-6.85645c-8.83691 0 -16 7.16309 -16 16
+v153.309c0 25.501 -36.5713 26.3359 -36.5713 0.691406v-206.494c0 -15.5703 -20.0352 -21.9092 -29.0303 -9.2832l-27.1279 38.0791c-14.3711 20.1709 -43.833 -2.33496 -29.3945 -22.6045l115.196 -161.697h201.92l27.3252 118.551
+c2.63086 11.417 3.96484 23.1553 3.96484 34.8857z" />
+    <glyph glyph-name="hand-scissors" unicode="&#xf257;" 
+d="M256 -32c-44.9561 0 -77.3428 43.2627 -64.0244 85.8535c-21.6484 13.71 -34.0156 38.7617 -30.3408 65.0068h-87.6348c-40.8037 0 -74 32.8105 -74 73.1406c0 40.3291 33.1963 73.1396 74 73.1396l94 -9.14062l-78.8496 18.6787
+c-38.3076 14.7422 -57.04 57.4707 -41.9424 95.1123c15.0303 37.4736 57.7549 55.7803 95.6416 41.2012l144.929 -55.7568c24.9551 30.5566 57.8086 43.9932 92.2178 24.7324l97.999 -54.8525c20.9746 -11.7393 34.0049 -33.8457 34.0049 -57.6904v-205.702
+c0 -30.7422 -21.4404 -57.5576 -51.7979 -64.5537l-118.999 -27.4268c-4.97168 -1.14648 -10.0889 -1.72949 -15.2031 -1.72949zM256 16.0127l70 -0.000976562c1.23633 0 3.21777 0.225586 4.42285 0.501953l119.001 27.4277
+c8.58203 1.97754 14.5762 9.29102 14.5762 17.7812v205.701c0 6.4873 -3.62109 12.542 -9.44922 15.8047l-98 54.8545c-8.13965 4.55566 -18.668 2.61914 -24.4873 -4.50781l-21.7646 -26.6475c-2.65039 -3.24512 -8.20215 -5.87891 -12.3926 -5.87891
+c-1.64062 0 -4.21484 0.477539 -5.74609 1.06738l-166.549 64.0908c-32.6543 12.5664 -50.7744 -34.5771 -19.2227 -46.7168l155.357 -59.7852c5.66016 -2.17773 10.2539 -8.86816 10.2539 -14.9326v0v-11.6328c0 -8.83691 -7.16309 -16 -16 -16h-182
+c-34.375 0 -34.4297 -50.2803 0 -50.2803h182c8.83691 0 16 -7.16309 16 -16v-6.85645c0 -8.83691 -7.16309 -16 -16 -16h-28c-25.1221 0 -25.1592 -36.5674 0 -36.5674h28c8.83691 0 16 -7.16211 16 -16v-6.85547c0 -8.83691 -7.16309 -16 -16 -16
+c-25.1201 0 -25.1602 -36.5674 0 -36.5674z" />
+    <glyph glyph-name="hand-lizard" unicode="&#xf258;" horiz-adv-x="576" 
+d="M556.686 157.458c12.6357 -19.4863 19.3145 -42.0615 19.3145 -65.2871v-124.171h-224v71.582l-99.751 38.7871c-2.7832 1.08203 -5.70996 1.63086 -8.69727 1.63086h-131.552c-30.8789 0 -56 25.1211 -56 56c0 48.5234 39.4766 88 88 88h113.709l18.333 48h-196.042
+c-44.1123 0 -80 35.8877 -80 80v8c0 30.8779 25.1211 56 56 56h293.917c24.5 0 47.084 -12.2725 60.4111 -32.8291zM528 16v76.1709v0.0478516c0 11.7461 -5.19141 29.2734 -11.5879 39.124l-146.358 225.715c-4.44336 6.85254 -11.9707 10.9424 -20.1367 10.9424h-293.917
+c-4.41113 0 -8 -3.58887 -8 -8v-8c0 -17.6445 14.3555 -32 32 -32h213.471c25.2021 0 42.626 -25.293 33.6299 -48.8457l-24.5518 -64.2812c-7.05371 -18.4658 -25.0732 -30.873 -44.8398 -30.873h-113.709c-22.0557 0 -40 -17.9443 -40 -40c0 -4.41113 3.58887 -8 8 -8
+h131.552h0.0517578c7.44141 0 19.1074 -2.19238 26.041 -4.89355l99.752 -38.7881c18.5898 -7.22852 30.6035 -24.7881 30.6035 -44.7363v-23.582h128z" />
+    <glyph glyph-name="hand-spock" unicode="&#xf259;" 
+d="M501.03 331.824c6.05762 -9.77832 10.9746 -27.0498 10.9746 -38.5518c0 -4.80664 -0.915039 -12.499 -2.04297 -17.1709l-57.623 -241.963c-12.748 -54.1729 -68.2627 -98.1387 -123.915 -98.1387h-0.345703h-107.455h-0.224609
+c-33.8135 0 -81.2148 18.834 -105.807 42.041l-91.3652 85.9766c-12.8213 12.0469 -23.2266 36.1016 -23.2266 53.6943c0 16.1299 8.97266 38.7529 20.0273 50.499c5.31836 5.66406 29.875 29.3926 68.1152 21.8477l-24.3594 82.1973
+c-1.68164 5.66406 -3.0459 15.0576 -3.0459 20.9668c0 37.5938 30.417 70.502 67.8955 73.4551c-0.204102 2.03125 -0.369141 5.33691 -0.369141 7.37891c0 31.627 24.8594 63.6895 55.4902 71.5684c43.248 10.9785 80.5645 -17.7012 89.6602 -53.0723l13.6836 -53.207
+l4.64648 22.6602c6.76074 32.417 39.123 58.8115 72.2373 58.916c8.73438 0 56.625 -3.26953 70.7383 -54.0801c15.0664 0.710938 46.9199 -3.50977 66.3105 -35.0176zM463.271 287.219c7.86914 32.9844 -42.1211 45.2695 -50.0859 11.9219l-24.8008 -104.146
+c-4.38867 -18.4141 -31.7783 -11.8926 -28.0557 6.2168l28.5479 139.166c7.39844 36.0703 -43.3076 45.0703 -50.1182 11.9629l-31.791 -154.971c-3.54883 -17.3086 -28.2832 -18.0469 -32.7109 -0.804688l-47.3262 184.035
+c-8.43359 32.8105 -58.3691 20.2676 -49.8652 -12.8359l42.4414 -165.039c4.81641 -18.7207 -23.3711 -26.9121 -28.9648 -8.00781l-31.3438 105.779c-9.6875 32.6465 -59.1191 18.2578 -49.3867 -14.625l36.0137 -121.539
+c5.61816 -18.9521 10.1777 -50.377 10.1777 -70.1436v-0.00878906c0 -6.54297 -8.05664 -10.9355 -13.4824 -5.82617l-51.123 48.1074c-24.7852 23.4082 -60.0527 -14.1875 -35.2793 -37.4902l91.3691 -85.9805c16.9629 -16.0068 49.6592 -28.998 72.9824 -28.998h0.154297
+h107.455h0.216797c34.7402 0 69.3936 27.4443 77.3525 61.2598z" />
+    <glyph glyph-name="hand-pointer" unicode="&#xf25a;" horiz-adv-x="448" 
+d="M358.182 268.639c43.1934 16.6348 89.8184 -15.7949 89.8184 -62.6387v-84c-0.000976562 -4.25 -0.775391 -11.0615 -1.72754 -15.2041l-27.4297 -118.999c-6.98242 -30.2969 -33.7549 -51.7969 -64.5566 -51.7969h-178.286c-21.2588 0 -41.3682 10.4102 -53.791 27.8457
+l-109.699 154.001c-21.2432 29.8193 -14.8047 71.3574 14.5498 93.1523c18.8115 13.9658 42.1748 16.2822 62.083 8.87207v161.129c0 36.9443 29.7363 67 66.2861 67s66.2861 -30.0557 66.2861 -67v-73.6338c20.4131 2.85742 41.4678 -3.94238 56.5947 -19.6289
+c27.1934 12.8467 60.3799 5.66992 79.8721 -19.0986zM80.9854 168.303c-14.4004 20.2119 -43.8008 -2.38281 -29.3945 -22.6055l109.712 -154c3.43457 -4.81934 8.92871 -7.69727 14.6973 -7.69727h178.285c8.49219 0 15.8037 5.99414 17.7822 14.5762l27.4297 119.001
+c0.333008 1.44629 0.501953 2.93457 0.501953 4.42285v84c0 25.1602 -36.5713 25.1211 -36.5713 0c0 -8.83594 -7.16309 -16 -16 -16h-6.85645c-8.83691 0 -16 7.16406 -16 16v21c0 25.1602 -36.5713 25.1201 -36.5713 0v-21c0 -8.83594 -7.16309 -16 -16 -16h-6.85938
+c-8.83691 0 -16 7.16406 -16 16v35c0 25.1602 -36.5703 25.1201 -36.5703 0v-35c0 -8.83594 -7.16309 -16 -16 -16h-6.85742c-8.83691 0 -16 7.16406 -16 16v175c0 25.1602 -36.5713 25.1201 -36.5713 0v-241.493c0 -15.5703 -20.0352 -21.9092 -29.0303 -9.2832z
+M176.143 48v96c0 8.83691 6.26855 16 14 16h6c7.73242 0 14 -7.16309 14 -16v-96c0 -8.83691 -6.26758 -16 -14 -16h-6c-7.73242 0 -14 7.16309 -14 16zM251.571 48v96c0 8.83691 6.26758 16 14 16h6c7.73145 0 14 -7.16309 14 -16v-96c0 -8.83691 -6.26855 -16 -14 -16h-6
+c-7.73242 0 -14 7.16309 -14 16zM327 48v96c0 8.83691 6.26758 16 14 16h6c7.73242 0 14 -7.16309 14 -16v-96c0 -8.83691 -6.26758 -16 -14 -16h-6c-7.73242 0 -14 7.16309 -14 16z" />
+    <glyph glyph-name="hand-peace" unicode="&#xf25b;" horiz-adv-x="448" 
+d="M362.146 256.024c42.5908 13.3184 85.8535 -19.0684 85.8535 -64.0244l-0.0117188 -70.001c-0.000976562 -4.25 -0.775391 -11.0615 -1.72949 -15.2031l-27.4268 -118.999c-6.99707 -30.3564 -33.8105 -51.7969 -64.5547 -51.7969h-205.702
+c-23.8447 0 -45.9502 13.0303 -57.6904 34.0059l-54.8525 97.999c-19.2607 34.4092 -5.82422 67.2617 24.7324 92.2178l-55.7568 144.928c-14.5791 37.8867 3.72754 80.6113 41.2012 95.6416c37.6406 15.0977 80.3691 -3.63477 95.1123 -41.9424l18.6787 -78.8496
+l-9.14062 94c0 40.8037 32.8096 74 73.1396 74s73.1406 -33.1963 73.1406 -74v-87.6348c26.2451 3.6748 51.2959 -8.69238 65.0068 -30.3408zM399.987 122l-0.000976562 70c0 25.1602 -36.5674 25.1201 -36.5674 0c0 -8.83691 -7.16309 -16 -16 -16h-6.85547
+c-8.83789 0 -16 7.16309 -16 16v28c0 25.1592 -36.5674 25.1221 -36.5674 0v-28c0 -8.83691 -7.16309 -16 -16 -16h-6.85645c-8.83691 0 -16 7.16309 -16 16v182c0 34.4297 -50.2803 34.375 -50.2803 0v-182c0 -8.83691 -7.16309 -16 -16 -16h-11.6328v0
+c-6.06445 0 -12.7549 4.59375 -14.9326 10.2539l-59.7842 155.357c-12.1396 31.5518 -59.2842 13.4326 -46.7168 -19.2227l64.0898 -166.549c0.589844 -1.53125 1.06738 -4.10547 1.06738 -5.74609c0 -4.19043 -2.63379 -9.74219 -5.87891 -12.3926l-26.6475 -21.7646
+c-7.12695 -5.81934 -9.06445 -16.3467 -4.50781 -24.4873l54.8535 -98c3.26367 -5.82812 9.31934 -9.44922 15.8057 -9.44922h205.701c8.49121 0 15.8037 5.99414 17.7812 14.5762l27.4277 119.001c0.333008 1.44629 0.501953 2.93457 0.501953 4.42285z" />
+    <glyph glyph-name="registered" unicode="&#xf25d;" 
+d="M256 440c136.967 0 248 -111.033 248 -248s-111.033 -248 -248 -248s-248 111.033 -248 248s111.033 248 248 248zM256 -8c110.549 0 200 89.4678 200 200c0 110.549 -89.4678 200 -200 200c-110.549 0 -200 -89.4688 -200 -200c0 -110.549 89.4678 -200 200 -200z
+M366.442 73.791c4.40332 -7.99219 -1.37012 -17.791 -10.5107 -17.791h-42.8096h-0.0126953c-3.97559 0 -8.71582 2.84961 -10.5801 6.36035l-47.5156 89.3027h-31.958v-83.6631c0 -6.61719 -5.38281 -12 -12 -12h-38.5674c-6.61719 0 -12 5.38281 -12 12v248.304
+c0 6.61719 5.38281 12 12 12h78.667c71.251 0 101.498 -32.749 101.498 -85.252c0 -31.6123 -15.2148 -59.2969 -39.4824 -73.1758c3.02148 -4.61719 0.225586 0.199219 53.2715 -96.085zM256.933 208.094c20.9131 0 32.4307 11.5186 32.4316 32.4316
+c0 19.5752 -6.5127 31.709 -38.9297 31.709h-27.377v-64.1406h33.875z" />
+    <glyph glyph-name="calendar-plus" unicode="&#xf271;" horiz-adv-x="448" 
+d="M336 156v-24c0 -6.59961 -5.40039 -12 -12 -12h-76v-76c0 -6.59961 -5.40039 -12 -12 -12h-24c-6.59961 0 -12 5.40039 -12 12v76h-76c-6.59961 0 -12 5.40039 -12 12v24c0 6.59961 5.40039 12 12 12h76v76c0 6.59961 5.40039 12 12 12h24c6.59961 0 12 -5.40039 12 -12
+v-76h76c6.59961 0 12 -5.40039 12 -12zM448 336v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h48v52c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-52h128v52c0 6.59961 5.40039 12 12 12h40
+c6.59961 0 12 -5.40039 12 -12v-52h48c26.5 0 48 -21.5 48 -48zM400 -10v298h-352v-298c0 -3.2998 2.7002 -6 6 -6h340c3.2998 0 6 2.7002 6 6z" />
+    <glyph glyph-name="calendar-minus" unicode="&#xf272;" horiz-adv-x="448" 
+d="M124 120c-6.59961 0 -12 5.40039 -12 12v24c0 6.59961 5.40039 12 12 12h200c6.59961 0 12 -5.40039 12 -12v-24c0 -6.59961 -5.40039 -12 -12 -12h-200zM448 336v-352c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h48v52
+c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-52h128v52c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-52h48c26.5 0 48 -21.5 48 -48zM400 -10v298h-352v-298c0 -3.2998 2.7002 -6 6 -6h340c3.2998 0 6 2.7002 6 6z" />
+    <glyph glyph-name="calendar-times" unicode="&#xf273;" horiz-adv-x="448" 
+d="M311.7 73.2998l-17 -17c-4.7002 -4.7002 -12.2998 -4.7002 -17 0l-53.7002 53.7998l-53.7002 -53.6992c-4.7002 -4.7002 -12.2998 -4.7002 -17 0l-17 17c-4.7002 4.69922 -4.7002 12.2998 0 17l53.7002 53.6992l-53.7002 53.7002c-4.7002 4.7002 -4.7002 12.2998 0 17
+l17 17c4.7002 4.7002 12.2998 4.7002 17 0l53.7002 -53.7002l53.7002 53.7002c4.7002 4.7002 12.2998 4.7002 17 0l17 -17c4.7002 -4.7002 4.7002 -12.2998 0 -17l-53.7998 -53.7998l53.6992 -53.7002c4.80078 -4.7002 4.80078 -12.2998 0.100586 -17zM448 336v-352
+c0 -26.5 -21.5 -48 -48 -48h-352c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h48v52c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-52h128v52c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-52h48c26.5 0 48 -21.5 48 -48zM400 -10
+v298h-352v-298c0 -3.2998 2.7002 -6 6 -6h340c3.2998 0 6 2.7002 6 6z" />
+    <glyph glyph-name="calendar-check" unicode="&#xf274;" horiz-adv-x="448" 
+d="M400 384c26.5098 0 48 -21.4902 48 -48v-352c0 -26.5098 -21.4902 -48 -48 -48h-352c-26.5098 0 -48 21.4902 -48 48v352c0 26.5098 21.4902 48 48 48h48v52c0 6.62695 5.37305 12 12 12h40c6.62695 0 12 -5.37305 12 -12v-52h128v52c0 6.62695 5.37305 12 12 12h40
+c6.62695 0 12 -5.37305 12 -12v-52h48zM394 -16c3.31152 0 6 2.68848 6 6v298h-352v-298c0 -3.31152 2.68848 -6 6 -6h340zM341.151 184.65l-142.31 -141.169c-4.70508 -4.66699 -12.3027 -4.6377 -16.9707 0.0673828l-75.0908 75.6992
+c-4.66699 4.70508 -4.6377 12.3027 0.0673828 16.9707l22.7197 22.5361c4.70508 4.66699 12.3027 4.63672 16.9697 -0.0693359l44.1035 -44.4609l111.072 110.182c4.70508 4.66699 12.3027 4.63672 16.9707 -0.0683594l22.5361 -22.7178
+c4.66699 -4.70508 4.63672 -12.3027 -0.0683594 -16.9697z" />
+    <glyph glyph-name="map" unicode="&#xf279;" horiz-adv-x="576" 
+d="M560.02 416c8.4502 0 15.9805 -6.83008 15.9805 -16.0195v-346.32c0 -11.9609 -9.01367 -25.2705 -20.1201 -29.71l-151.83 -52.8105c-5.32617 -1.7334 -14.1953 -3.13965 -19.7969 -3.13965c-5.7373 0 -14.8105 1.47363 -20.2529 3.29004l-172 60.71l-170.05 -62.8398
+c-1.99023 -0.790039 -4 -1.16016 -5.95996 -1.16016c-8.45996 0 -15.9902 6.83008 -15.9902 16.0195v346.32c0.00292969 11.959 9.0166 25.2686 20.1201 29.71l151.83 52.8105c6.43945 2.08984 13.1201 3.13965 19.8096 3.13965
+c5.73242 -0.00195312 14.8008 -1.47168 20.2402 -3.28027l172 -60.7197h0.00976562l170.05 62.8398c1.98047 0.790039 4 1.16016 5.95996 1.16016zM224 357.58v-285.97l128 -45.1904v285.97zM48 29.9502l127.36 47.0801l0.639648 0.229492v286.2l-128 -44.5303v-288.979z
+M528 65.0801v288.97l-127.36 -47.0693l-0.639648 -0.240234v-286.19z" />
+    <glyph glyph-name="comment-alt" unicode="&#xf27a;" 
+d="M448 448c35.2998 0 64 -28.7002 64 -64v-288c0 -35.2998 -28.7002 -64 -64 -64h-144l-124.9 -93.5996c-2.19922 -1.7002 -4.69922 -2.40039 -7.09961 -2.40039c-6.2002 0 -12 4.90039 -12 12v84h-96c-35.2998 0 -64 28.7002 -64 64v288c0 35.2998 28.7002 64 64 64h384z
+M464 96v288c0 8.7998 -7.2002 16 -16 16h-384c-8.7998 0 -16 -7.2002 -16 -16v-288c0 -8.7998 7.2002 -16 16 -16h144v-60l67.2002 50.4004l12.7998 9.59961h160c8.7998 0 16 7.2002 16 16z" />
+    <glyph glyph-name="pause-circle" unicode="&#xf28b;" 
+d="M256 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM256 -8c110.5 0 200 89.5 200 200s-89.5 200 -200 200s-200 -89.5 -200 -200s89.5 -200 200 -200zM352 272v-160c0 -8.7998 -7.2002 -16 -16 -16h-48
+c-8.7998 0 -16 7.2002 -16 16v160c0 8.7998 7.2002 16 16 16h48c8.7998 0 16 -7.2002 16 -16zM240 272v-160c0 -8.7998 -7.2002 -16 -16 -16h-48c-8.7998 0 -16 7.2002 -16 16v160c0 8.7998 7.2002 16 16 16h48c8.7998 0 16 -7.2002 16 -16z" />
+    <glyph glyph-name="stop-circle" unicode="&#xf28d;" 
+d="M504 192c0 -137 -111 -248 -248 -248s-248 111 -248 248s111 248 248 248s248 -111 248 -248zM56 192c0 -110.5 89.5 -200 200 -200s200 89.5 200 200s-89.5 200 -200 200s-200 -89.5 -200 -200zM352 272v-160c0 -8.7998 -7.2002 -16 -16 -16h-160
+c-8.7998 0 -16 7.2002 -16 16v160c0 8.7998 7.2002 16 16 16h160c8.7998 0 16 -7.2002 16 -16z" />
+    <glyph glyph-name="handshake" unicode="&#xf2b5;" horiz-adv-x="640" 
+d="M519.2 320.1h120.8v-255.699h-64c-17.5 0 -31.7998 14.1992 -31.9004 31.6992h-57.8994c-1.7998 -8.19922 -5.2998 -16.0996 -10.9004 -23l-26.2002 -32.2998c-15.7998 -19.3994 -41.8994 -25.5 -64 -16.7998c-13.5 -16.5996 -30.5996 -24 -48.7998 -24
+c-15.0996 0 -28.5996 5.09961 -41.0996 15.9004c-31.7998 -21.9004 -74.7002 -21.3008 -105.601 3.7998l-84.5996 76.3994h-9.09961c-0.100586 -17.5 -14.3008 -31.6992 -31.9004 -31.6992h-64v255.699h118l47.5996 47.6006c10.5 10.3994 24.8008 16.2998 39.6006 16.2998
+h226.8v0c12.7812 0 30.5225 -7.30273 39.5996 -16.2998zM48 96.4004c8.7998 0 16 7.09961 16 16c0 8.7998 -7.2002 16 -16 16s-16 -7.2002 -16 -16c0 -8.80078 7.2002 -16 16 -16zM438 103.3c2.7002 3.40039 2.2002 8.5 -1.2002 11.2998l-108.2 87.8008l-8.19922 -7.5
+c-40.3008 -36.8008 -86.7002 -11.8008 -101.5 4.39941c-26.7002 29 -25 74.4004 4.39941 101.3l38.7002 35.5h-56.7002c-2 -0.799805 -3.7002 -1.5 -5.7002 -2.2998l-61.6992 -61.5996h-41.9004v-128.101h27.7002l97.2998 -88
+c16.0996 -13.0996 41.4004 -10.5 55.2998 6.60059l15.6006 19.2002l36.7998 -31.5c3 -2.40039 12 -4.90039 18 2.39941l30 36.5l23.8994 -19.3994c3.5 -2.80078 8.5 -2.2002 11.3008 1.19922zM544 144.1v128h-44.7002l-61.7002 61.6006
+c-1.39941 1.5 -3.39941 2.2998 -5.5 2.2998l-83.6992 -0.200195c-10 0 -19.6006 -3.7002 -27 -10.5l-65.6006 -60.0996c-9.7002 -8.7998 -10.5 -24 -1.2002 -33.9004c8.90039 -9.39941 25.1006 -8.7002 34.6006 0l55.2002 50.6006c6.5 5.89941 16.5996 5.5 22.5996 -1
+l10.9004 -11.7002c6 -6.5 5.5 -16.6006 -1 -22.6006l-12.5 -11.3994l102.699 -83.4004c2.80078 -2.2998 5.40039 -4.89941 7.7002 -7.7002h69.2002zM592 96.4004c8.7998 0 16 7.09961 16 16c0 8.7998 -7.2002 16 -16 16s-16 -7.2002 -16 -16c0 -8.80078 7.2002 -16 16 -16z
+" />
+    <glyph glyph-name="envelope-open" unicode="&#xf2b6;" 
+d="M494.586 283.484c9.6123 -7.94824 17.4141 -24.5205 17.4141 -36.9932v-262.491c0 -26.5098 -21.4902 -48 -48 -48h-416c-26.5098 0 -48 21.4902 -48 48v262.515c0 12.5166 7.84668 29.1279 17.5146 37.0771c4.08008 3.35449 110.688 89.0996 135.15 108.549
+c22.6992 18.1426 60.1299 55.8594 103.335 55.8594c43.4365 0 81.2314 -38.1914 103.335 -55.8594c23.5283 -18.707 130.554 -104.773 135.251 -108.656zM464 -10v253.632v0.00488281c0 1.5791 -0.996094 3.66602 -2.22363 4.6582
+c-15.8633 12.8232 -108.793 87.5752 -132.366 106.316c-17.5527 14.0195 -49.7168 45.3887 -73.4102 45.3887c-23.6016 0 -55.2451 -30.8799 -73.4102 -45.3887c-23.5713 -18.7393 -116.494 -93.4795 -132.364 -106.293
+c-1.40918 -1.13965 -2.22559 -2.85254 -2.22559 -4.66504v-253.653c0 -3.31152 2.68848 -6 6 -6h404c3.31152 0 6 2.68848 6 6zM432.009 177.704c4.24902 -5.15918 3.46484 -12.7949 -1.74512 -16.9814c-28.9746 -23.2822 -59.2734 -47.5967 -70.9287 -56.8623
+c-22.6992 -18.1436 -60.1299 -55.8604 -103.335 -55.8604c-43.4521 0 -81.2871 38.2373 -103.335 55.8604c-11.2793 8.9668 -41.7441 33.4131 -70.9268 56.8643c-5.20996 4.1875 -5.99316 11.8223 -1.74512 16.9814l15.2578 18.5283
+c4.17773 5.07227 11.6572 5.84277 16.7793 1.72559c28.6182 -23.001 58.5654 -47.0352 70.5596 -56.5713c17.5527 -14.0195 49.7168 -45.3887 73.4102 -45.3887c23.6016 0 55.2461 30.8799 73.4102 45.3887c11.9941 9.53516 41.9434 33.5703 70.5625 56.5684
+c5.12207 4.11621 12.6016 3.3457 16.7783 -1.72656z" />
+    <glyph glyph-name="address-book" unicode="&#xf2b9;" horiz-adv-x="448" 
+d="M436 288h-20v-64h20c6.59961 0 12 -5.40039 12 -12v-40c0 -6.59961 -5.40039 -12 -12 -12h-20v-64h20c6.59961 0 12 -5.40039 12 -12v-40c0 -6.59961 -5.40039 -12 -12 -12h-20v-48c0 -26.5 -21.5 -48 -48 -48h-320c-26.5 0 -48 21.5 -48 48v416c0 26.5 21.5 48 48 48
+h320c26.5 0 48 -21.5 48 -48v-48h20c6.59961 0 12 -5.40039 12 -12v-40c0 -6.59961 -5.40039 -12 -12 -12zM368 -16v416h-320v-416h320zM208 192c-35.2998 0 -64 28.7002 -64 64s28.7002 64 64 64s64 -28.7002 64 -64s-28.7002 -64 -64 -64zM118.4 64
+c-12.4004 0 -22.4004 8.59961 -22.4004 19.2002v19.2002c0 31.7998 30.0996 57.5996 67.2002 57.5996c11.3994 0 17.8994 -8 44.7998 -8c26.0996 0 34 8 44.7998 8c37.1006 0 67.2002 -25.7998 67.2002 -57.5996v-19.2002c0 -10.6006 -10 -19.2002 -22.4004 -19.2002
+h-179.199z" />
+    <glyph glyph-name="address-card" unicode="&#xf2bb;" horiz-adv-x="576" 
+d="M528 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-480c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h480zM528 16v352h-480v-352h480zM208 192c-35.2998 0 -64 28.7002 -64 64s28.7002 64 64 64s64 -28.7002 64 -64s-28.7002 -64 -64 -64z
+M118.4 64c-12.4004 0 -22.4004 8.59961 -22.4004 19.2002v19.2002c0 31.7998 30.0996 57.5996 67.2002 57.5996c11.3994 0 17.8994 -8 44.7998 -8c26.0996 0 34 8 44.7998 8c37.1006 0 67.2002 -25.7998 67.2002 -57.5996v-19.2002
+c0 -10.6006 -10 -19.2002 -22.4004 -19.2002h-179.199zM360 128c-4.40039 0 -8 3.59961 -8 8v16c0 4.40039 3.59961 8 8 8h112c4.40039 0 8 -3.59961 8 -8v-16c0 -4.40039 -3.59961 -8 -8 -8h-112zM360 192c-4.40039 0 -8 3.59961 -8 8v16c0 4.40039 3.59961 8 8 8h112
+c4.40039 0 8 -3.59961 8 -8v-16c0 -4.40039 -3.59961 -8 -8 -8h-112zM360 256c-4.40039 0 -8 3.59961 -8 8v16c0 4.40039 3.59961 8 8 8h112c4.40039 0 8 -3.59961 8 -8v-16c0 -4.40039 -3.59961 -8 -8 -8h-112z" />
+    <glyph glyph-name="user-circle" unicode="&#xf2bd;" horiz-adv-x="496" 
+d="M248 344c53 0 96 -43 96 -96s-43 -96 -96 -96s-96 43 -96 96s43 96 96 96zM248 200c26.5 0 48 21.5 48 48s-21.5 48 -48 48s-48 -21.5 -48 -48s21.5 -48 48 -48zM248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8
+c49.7002 0 95.0996 18.2998 130.1 48.4004c-14.8994 23 -40.3994 38.5 -69.5996 39.5c-20.7998 -6.5 -40.5996 -9.60059 -60.5 -9.60059s-39.7002 3.2002 -60.5 9.60059c-29.2002 -0.900391 -54.7002 -16.5 -69.5996 -39.5c35 -30.1006 80.3994 -48.4004 130.1 -48.4004z
+M410.7 76.0996c23.3994 32.7002 37.2998 72.7002 37.2998 115.9c0 110.3 -89.7002 200 -200 200s-200 -89.7002 -200 -200c0 -43.2002 13.9004 -83.2002 37.2998 -115.9c24.5 31.4004 62.2002 51.9004 105.101 51.9004c10.1992 0 26.0996 -9.59961 57.5996 -9.59961
+c31.5996 0 47.4004 9.59961 57.5996 9.59961c43 0 80.7002 -20.5 105.101 -51.9004z" />
+    <glyph glyph-name="id-badge" unicode="&#xf2c1;" horiz-adv-x="384" 
+d="M336 448c26.5 0 48 -21.5 48 -48v-416c0 -26.5 -21.5 -48 -48 -48h-288c-26.5 0 -48 21.5 -48 48v416c0 26.5 21.5 48 48 48h288zM336 -16v416h-288v-416h288zM144 336c-8.7998 0 -16 7.2002 -16 16s7.2002 16 16 16h96c8.7998 0 16 -7.2002 16 -16s-7.2002 -16 -16 -16
+h-96zM192 160c-35.2998 0 -64 28.7002 -64 64s28.7002 64 64 64s64 -28.7002 64 -64s-28.7002 -64 -64 -64zM102.4 32c-12.4004 0 -22.4004 8.59961 -22.4004 19.2002v19.2002c0 31.7998 30.0996 57.5996 67.2002 57.5996c11.3994 0 17.8994 -8 44.7998 -8
+c26.0996 0 34 8 44.7998 8c37.1006 0 67.2002 -25.7998 67.2002 -57.5996v-19.2002c0 -10.6006 -10 -19.2002 -22.4004 -19.2002h-179.199z" />
+    <glyph glyph-name="id-card" unicode="&#xf2c2;" horiz-adv-x="576" 
+d="M528 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-480c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h480zM528 16v288h-480v-288h32.7998c-1 4.5 -0.799805 -3.59961 -0.799805 22.4004c0 31.7998 30.0996 57.5996 67.2002 57.5996
+c11.3994 0 17.8994 -8 44.7998 -8c26.0996 0 34 8 44.7998 8c37.1006 0 67.2002 -25.7998 67.2002 -57.5996c0 -26 0.0996094 -17.9004 -0.799805 -22.4004h224.8zM360 96c-4.40039 0 -8 3.59961 -8 8v16c0 4.40039 3.59961 8 8 8h112c4.40039 0 8 -3.59961 8 -8v-16
+c0 -4.40039 -3.59961 -8 -8 -8h-112zM360 160c-4.40039 0 -8 3.59961 -8 8v16c0 4.40039 3.59961 8 8 8h112c4.40039 0 8 -3.59961 8 -8v-16c0 -4.40039 -3.59961 -8 -8 -8h-112zM360 224c-4.40039 0 -8 3.59961 -8 8v16c0 4.40039 3.59961 8 8 8h112
+c4.40039 0 8 -3.59961 8 -8v-16c0 -4.40039 -3.59961 -8 -8 -8h-112zM192 128c-35.2998 0 -64 28.7002 -64 64s28.7002 64 64 64s64 -28.7002 64 -64s-28.7002 -64 -64 -64z" />
+    <glyph glyph-name="window-maximize" unicode="&#xf2d0;" 
+d="M464 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-416c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h416zM464 22v234h-416v-234c0 -3.2998 2.7002 -6 6 -6h404c3.2998 0 6 2.7002 6 6z" />
+    <glyph glyph-name="window-minimize" unicode="&#xf2d1;" 
+d="M480 -32h-448c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32h448c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32z" />
+    <glyph glyph-name="window-restore" unicode="&#xf2d2;" 
+d="M464 448c26.5 0 48 -21.5 48 -48v-320c0 -26.5 -21.5 -48 -48 -48h-48v-48c0 -26.5 -21.5 -48 -48 -48h-320c-26.5 0 -48 21.5 -48 48v320c0 26.5 21.5 48 48 48h48v48c0 26.5 21.5 48 48 48h320zM368 -16v208h-320v-208h320zM464 80v320h-320v-48h224
+c26.5 0 48 -21.5 48 -48v-224h48z" />
+    <glyph glyph-name="snowflake" unicode="&#xf2dc;" horiz-adv-x="448" 
+d="M440.1 92.7998c7.60059 -4.39941 10.1006 -14.2002 5.5 -21.7002l-7.89941 -13.8994c-4.40039 -7.7002 -14 -10.2998 -21.5 -5.90039l-39.2002 23l9.09961 -34.7002c2.30078 -8.5 -2.69922 -17.2998 -11.0996 -19.5996l-15.2002 -4.09961
+c-8.39941 -2.30078 -17.0996 2.7998 -19.2998 11.2998l-21.2998 81l-71.9004 42.2002v-84.5l58.2998 -59.3008c6.10059 -6.19922 6.10059 -16.3994 0 -22.5996l-11.0996 -11.2998c-6.09961 -6.2002 -16.0996 -6.2002 -22.2002 0l-24.8994 25.3994v-46.0996
+c0 -8.7998 -7 -16 -15.7002 -16h-15.7002c-8.7002 0 -15.7002 7.2002 -15.7002 16v45.9004l-24.8994 -25.4004c-6.10059 -6.2002 -16.1006 -6.2002 -22.2002 0l-11.1006 11.2998c-6.09961 6.2002 -6.09961 16.4004 0 22.6006l58.3008 59.2998v84.5l-71.9004 -42.2002
+l-21.2998 -81c-2.2998 -8.5 -10.9004 -13.5996 -19.2998 -11.2998l-15.2002 4.09961c-8.40039 2.2998 -13.2998 11.1006 -11.1006 19.6006l9.10059 34.6992l-39.2002 -23c-7.5 -4.39941 -17.2002 -1.7998 -21.5 5.90039l-7.90039 13.9004
+c-4.2998 7.69922 -1.69922 17.5 5.80078 21.8994l39.1992 23l-34.0996 9.2998c-8.40039 2.30078 -13.2998 11.1006 -11.0996 19.6006l4.09961 15.5c2.2998 8.5 10.9004 13.5996 19.2998 11.2998l79.7002 -21.7002l71.9004 42.2002l-71.9004 42.2002l-79.7002 -21.7002
+c-8.39941 -2.2998 -17.0996 2.7998 -19.2998 11.2998l-4.09961 15.5c-2.30078 8.5 2.69922 17.2998 11.0996 19.6006l34.0996 9.09961l-39.1992 23c-7.60059 4.5 -10.1006 14.2002 -5.80078 21.9004l7.90039 13.8994c4.40039 7.7002 14 10.2998 21.5 5.90039l39.2002 -23
+l-9.10059 34.7002c-2.2998 8.5 2.7002 17.2998 11.1006 19.5996l15.2002 4.09961c8.39941 2.30078 17.0996 -2.7998 19.2998 -11.2998l21.2998 -81l71.9004 -42.2002v84.5l-58.3008 59.3008c-6.09961 6.19922 -6.09961 16.3994 0 22.5996l11.5 11.2998
+c6.10059 6.2002 16.1006 6.2002 22.2002 0l24.9004 -25.3994v46.0996c0 8.7998 7 16 15.7002 16h15.6992c8.7002 0 15.7002 -7.2002 15.7002 -16v-45.9004l24.9004 25.4004c6.09961 6.2002 16.0996 6.2002 22.2002 0l11.0996 -11.2998
+c6.09961 -6.2002 6.09961 -16.4004 0 -22.6006l-58.2998 -59.2998v-84.5l71.8994 42.2002l21.3008 81c2.2998 8.5 10.8994 13.5996 19.2998 11.2998l15.2002 -4.09961c8.39941 -2.2998 13.2998 -11.1006 11.0996 -19.6006l-9.09961 -34.6992l39.1992 23
+c7.5 4.39941 17.2002 1.7998 21.5 -5.90039l7.90039 -13.9004c4.2998 -7.69922 1.7002 -17.5 -5.7998 -21.8994l-39.2002 -23l34.0996 -9.2998c8.40039 -2.30078 13.3008 -11.1006 11.1006 -19.6006l-4.10059 -15.5c-2.2998 -8.5 -10.8994 -13.5996 -19.2998 -11.2998
+l-79.7002 21.7002l-71.8994 -42.2002l71.7998 -42.2002l79.7002 21.7002c8.39941 2.2998 17.0996 -2.7998 19.2998 -11.2998l4.09961 -15.5c2.30078 -8.5 -2.69922 -17.2998 -11.0996 -19.6006l-34.0996 -9.2998z" />
+    <glyph glyph-name="trash-alt" unicode="&#xf2ed;" horiz-adv-x="448" 
+d="M268 32c-6.62402 0 -12 5.37598 -12 12v216c0 6.62402 5.37598 12 12 12h24c6.62402 0 12 -5.37598 12 -12v-216c0 -6.62402 -5.37598 -12 -12 -12h-24zM432 368c8.83203 0 16 -7.16797 16 -16v-16c0 -8.83203 -7.16797 -16 -16 -16h-16v-336
+c0 -26.4961 -21.5039 -48 -48 -48h-288c-26.4961 0 -48 21.5039 -48 48v336h-16c-8.83203 0 -16 7.16797 -16 16v16c0 8.83203 7.16797 16 16 16h82.4102l34.0195 56.7002c7.71875 12.8613 26.1572 23.2998 41.1572 23.2998h0.00292969h100.82h0.0224609
+c15 0 33.4385 -10.4385 41.1572 -23.2998l34 -56.7002h82.4102zM171.84 397.09l-17.4502 -29.0898h139.221l-17.46 29.0898c-0.96582 1.60645 -3.26953 2.91016 -5.14355 2.91016h-0.00683594h-94h-0.0166016c-1.87402 0 -4.17871 -1.30371 -5.14355 -2.91016zM368 -16v336
+h-288v-336h288zM156 32c-6.62402 0 -12 5.37598 -12 12v216c0 6.62402 5.37598 12 12 12h24c6.62402 0 12 -5.37598 12 -12v-216c0 -6.62402 -5.37598 -12 -12 -12h-24z" />
+    <glyph glyph-name="images" unicode="&#xf302;" horiz-adv-x="576" 
+d="M480 32v-16c0 -26.5098 -21.4902 -48 -48 -48h-384c-26.5098 0 -48 21.4902 -48 48v256c0 26.5098 21.4902 48 48 48h16v-48h-10c-3.31152 0 -6 -2.68848 -6 -6v-244c0 -3.31152 2.68848 -6 6 -6h372c3.31152 0 6 2.68848 6 6v10h48zM522 368h-372
+c-3.31152 0 -6 -2.68848 -6 -6v-244c0 -3.31152 2.68848 -6 6 -6h372c3.31152 0 6 2.68848 6 6v244c0 3.31152 -2.68848 6 -6 6zM528 416c26.5098 0 48 -21.4902 48 -48v-256c0 -26.5098 -21.4902 -48 -48 -48h-384c-26.5098 0 -48 21.4902 -48 48v256
+c0 26.5098 21.4902 48 48 48h384zM264 304c0 -22.0908 -17.9092 -40 -40 -40s-40 17.9092 -40 40s17.9092 40 40 40s40 -17.9092 40 -40zM192 208l39.5146 39.5146c4.68652 4.68652 12.2842 4.68652 16.9717 0l39.5137 -39.5146l103.515 103.515
+c4.68652 4.68652 12.2842 4.68652 16.9717 0l71.5137 -71.5146v-80h-288v48z" />
+    <glyph glyph-name="clipboard" unicode="&#xf328;" horiz-adv-x="384" 
+d="M336 384c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-288c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h80c0 35.2998 28.7002 64 64 64s64 -28.7002 64 -64h80zM192 408c-13.2998 0 -24 -10.7002 -24 -24s10.7002 -24 24 -24s24 10.7002 24 24
+s-10.7002 24 -24 24zM336 -10v340c0 3.2998 -2.7002 6 -6 6h-42v-36c0 -6.59961 -5.40039 -12 -12 -12h-168c-6.59961 0 -12 5.40039 -12 12v36h-42c-3.2998 0 -6 -2.7002 -6 -6v-340c0 -3.2998 2.7002 -6 6 -6h276c3.2998 0 6 2.7002 6 6z" />
+    <glyph glyph-name="arrow-alt-circle-down" unicode="&#xf358;" 
+d="M256 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM256 -8c110.5 0 200 89.5 200 200s-89.5 200 -200 200s-200 -89.5 -200 -200s89.5 -200 200 -200zM224 308c0 6.59961 5.40039 12 12 12h40c6.59961 0 12 -5.40039 12 -12v-116
+h67c10.7002 0 16.0996 -12.9004 8.5 -20.5l-99 -99c-4.7002 -4.7002 -12.2998 -4.7002 -17 0l-99 99c-7.5 7.59961 -2.2002 20.5 8.5 20.5h67v116z" />
+    <glyph glyph-name="arrow-alt-circle-left" unicode="&#xf359;" 
+d="M8 192c0 137 111 248 248 248s248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248zM456 192c0 110.5 -89.5 200 -200 200s-200 -89.5 -200 -200s89.5 -200 200 -200s200 89.5 200 200zM384 212v-40c0 -6.59961 -5.40039 -12 -12 -12h-116v-67
+c0 -10.7002 -12.9004 -16 -20.5 -8.5l-99 99c-4.7002 4.7002 -4.7002 12.2998 0 17l99 99c7.59961 7.59961 20.5 2.2002 20.5 -8.5v-67h116c6.59961 0 12 -5.40039 12 -12z" />
+    <glyph glyph-name="arrow-alt-circle-right" unicode="&#xf35a;" 
+d="M504 192c0 -137 -111 -248 -248 -248s-248 111 -248 248s111 248 248 248s248 -111 248 -248zM56 192c0 -110.5 89.5 -200 200 -200s200 89.5 200 200s-89.5 200 -200 200s-200 -89.5 -200 -200zM128 172v40c0 6.59961 5.40039 12 12 12h116v67
+c0 10.7002 12.9004 16 20.5 8.5l99 -99c4.7002 -4.7002 4.7002 -12.2998 0 -17l-99 -99c-7.59961 -7.59961 -20.5 -2.2002 -20.5 8.5v67h-116c-6.59961 0 -12 5.40039 -12 12z" />
+    <glyph glyph-name="arrow-alt-circle-up" unicode="&#xf35b;" 
+d="M256 -56c-137 0 -248 111 -248 248s111 248 248 248s248 -111 248 -248s-111 -248 -248 -248zM256 392c-110.5 0 -200 -89.5 -200 -200s89.5 -200 200 -200s200 89.5 200 200s-89.5 200 -200 200zM276 64h-40c-6.59961 0 -12 5.40039 -12 12v116h-67
+c-10.7002 0 -16 12.9004 -8.5 20.5l99 99c4.7002 4.7002 12.2998 4.7002 17 0l99 -99c7.59961 -7.59961 2.2002 -20.5 -8.5 -20.5h-67v-116c0 -6.59961 -5.40039 -12 -12 -12z" />
+    <glyph glyph-name="gem" unicode="&#xf3a5;" horiz-adv-x="576" 
+d="M464 448c4.09961 0 7.7998 -2 10.0996 -5.40039l99.9004 -147.199c2.90039 -4.40039 2.59961 -10.1006 -0.700195 -14.2002l-276 -340.8c-4.7998 -5.90039 -13.7998 -5.90039 -18.5996 0l-276 340.8c-3.2998 4 -3.60059 9.7998 -0.700195 14.2002l100 147.199
+c2.2002 3.40039 6 5.40039 10 5.40039h352zM444.7 400h-56.7998l51.6992 -96h68.4004zM242.6 400l-51.5996 -96h194l-51.7002 96h-90.7002zM131.3 400l-63.2998 -96h68.4004l51.6992 96h-56.7998zM88.2998 256l119.7 -160l-68.2998 160h-51.4004zM191.2 256l96.7998 -243.3
+l96.7998 243.3h-193.6zM368 96l119.6 160h-51.3994z" />
+    <glyph glyph-name="money-bill-alt" unicode="&#xf3d1;" horiz-adv-x="640" 
+d="M320 304c53.0195 0 96 -50.1396 96 -112c0 -61.8701 -43 -112 -96 -112c-53.0195 0 -96 50.1504 -96 112c0 61.8604 42.9805 112 96 112zM360 136v16c0 4.41992 -3.58008 8 -8 8h-16v88c0 4.41992 -3.58008 8 -8 8h-13.5801h-0.000976562
+c-4.01074 0 -9.97266 -1.80566 -13.3086 -4.03027l-15.3301 -10.2197c-1.96777 -1.30957 -3.56445 -4.29004 -3.56445 -6.65332c0 -1.33691 0.601562 -3.32422 1.34375 -4.43652l8.88086 -13.3105c1.30859 -1.9668 4.29004 -3.56445 6.65332 -3.56445
+c1.33691 0 3.32422 0.602539 4.43652 1.34473l0.469727 0.310547v-55.4404h-16c-4.41992 0 -8 -3.58008 -8 -8v-16c0 -4.41992 3.58008 -8 8 -8h64c4.41992 0 8 3.58008 8 8zM608 384c17.6699 0 32 -14.3301 32 -32v-320c0 -17.6699 -14.3301 -32 -32 -32h-576
+c-17.6699 0 -32 14.3301 -32 32v320c0 17.6699 14.3301 32 32 32h576zM592 112v160c-35.3496 0 -64 28.6504 -64 64h-416c0 -35.3496 -28.6504 -64 -64 -64v-160c35.3496 0 64 -28.6504 64 -64h416c0 35.3496 28.6504 64 64 64z" />
+    <glyph glyph-name="window-close" unicode="&#xf410;" 
+d="M464 416c26.5 0 48 -21.5 48 -48v-352c0 -26.5 -21.5 -48 -48 -48h-416c-26.5 0 -48 21.5 -48 48v352c0 26.5 21.5 48 48 48h416zM464 22v340c0 3.2998 -2.7002 6 -6 6h-404c-3.2998 0 -6 -2.7002 -6 -6v-340c0 -3.2998 2.7002 -6 6 -6h404c3.2998 0 6 2.7002 6 6z
+M356.5 253.4l-61.4004 -61.4004l61.4004 -61.4004c4.59961 -4.59961 4.59961 -12.0996 0 -16.7998l-22.2998 -22.2998c-4.60059 -4.59961 -12.1006 -4.59961 -16.7998 0l-61.4004 61.4004l-61.4004 -61.4004c-4.59961 -4.59961 -12.0996 -4.59961 -16.7998 0
+l-22.2998 22.2998c-4.59961 4.60059 -4.59961 12.1006 0 16.7998l61.4004 61.4004l-61.4004 61.4004c-4.59961 4.59961 -4.59961 12.0996 0 16.7998l22.2998 22.2998c4.60059 4.59961 12.1006 4.59961 16.7998 0l61.4004 -61.4004l61.4004 61.4004
+c4.59961 4.59961 12.0996 4.59961 16.7998 0l22.2998 -22.2998c4.7002 -4.60059 4.7002 -12.1006 0 -16.7998z" />
+    <glyph glyph-name="comment-dots" unicode="&#xf4ad;" 
+d="M144 240c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32s-32 14.2998 -32 32s14.2998 32 32 32zM256 240c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32s-32 14.2998 -32 32s14.2998 32 32 32zM368 240c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32
+s-32 14.2998 -32 32s14.2998 32 32 32zM256 416c141.4 0 256 -93.0996 256 -208s-114.6 -208 -256 -208c-32.7998 0 -64 5.2002 -92.9004 14.2998c-29.0996 -20.5996 -77.5996 -46.2998 -139.1 -46.2998c-9.59961 0 -18.2998 5.7002 -22.0996 14.5
+c-3.80078 8.7998 -2 19 4.59961 26c0.5 0.400391 31.5 33.7998 46.4004 73.2002c-33 35.0996 -52.9004 78.7002 -52.9004 126.3c0 114.9 114.6 208 256 208zM256 48c114.7 0 208 71.7998 208 160s-93.2998 160 -208 160s-208 -71.7998 -208 -160
+c0 -42.2002 21.7002 -74.0996 39.7998 -93.4004l20.6006 -21.7998l-10.6006 -28.0996c-5.5 -14.5 -12.5996 -28.1006 -19.8994 -40.2002c23.5996 7.59961 43.1992 18.9004 57.5 29l19.5 13.7998l22.6992 -7.2002c25.3008 -8 51.7002 -12.0996 78.4004 -12.0996z" />
+    <glyph glyph-name="smile-wink" unicode="&#xf4da;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM365.8 138.4c10.2002 -8.5 11.6006 -23.6006 3.10059 -33.8008
+c-30 -36 -74.1006 -56.5996 -120.9 -56.5996s-90.9004 20.5996 -120.9 56.5996c-8.39941 10.2002 -7.09961 25.3008 3.10059 33.8008c10.0996 8.39941 25.2998 7.09961 33.7998 -3.10059c20.7998 -25.0996 51.5 -39.3994 84 -39.3994s63.2002 14.3994 84 39.3994
+c8.5 10.2002 23.5996 11.6006 33.7998 3.10059zM168 208c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32s32 -14.2998 32 -32s-14.2998 -32 -32 -32zM328 268c25.7002 0 55.9004 -16.9004 59.7002 -42.0996c1.7998 -11.1006 -11.2998 -18.2002 -19.7998 -10.8008l-9.5 8.5
+c-14.8008 13.2002 -46.2002 13.2002 -61 0l-9.5 -8.5c-8.30078 -7.39941 -21.5 -0.399414 -19.8008 10.8008c4 25.1992 34.2002 42.0996 59.9004 42.0996z" />
+    <glyph glyph-name="angry" unicode="&#xf556;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM248 136c33.5996 0 65.2002 -14.7998 86.7998 -40.5996
+c8.40039 -10.2002 7.10059 -25.3008 -3.09961 -33.8008c-10.6006 -8.89941 -25.7002 -6.69922 -33.7998 3c-24.8008 29.7002 -75 29.7002 -99.8008 0c-8.5 -10.1992 -23.5996 -11.5 -33.7998 -3s-11.5996 23.6006 -3.09961 33.8008
+c21.5996 25.7998 53.2002 40.5996 86.7998 40.5996zM200 208c0 -17.7002 -14.2998 -32.0996 -32 -32.0996s-32 14.2998 -32 32c0 6.19922 2.2002 11.6992 5.2998 16.5996l-28.2002 8.5c-12.6992 3.7998 -19.8994 17.2002 -16.0996 29.9004
+c3.7998 12.6992 17.0996 20 29.9004 16.0996l80 -24c12.6992 -3.7998 19.8994 -17.2002 16.0996 -29.9004c-3.09961 -10.3994 -12.7002 -17.0996 -23 -17.0996zM399 262.9c3.7998 -12.7002 -3.40039 -26.1006 -16.0996 -29.8008l-28.2002 -8.5
+c3.09961 -4.89941 5.2998 -10.3994 5.2998 -16.5996c0 -17.7002 -14.2998 -32 -32 -32s-32 14.2998 -32 32c-10.2998 0 -19.9004 6.7002 -23 17.0996c-3.7998 12.7002 3.40039 26.1006 16.0996 29.9004l80 24c12.8008 3.7998 26.1006 -3.40039 29.9004 -16.0996z" />
+    <glyph glyph-name="dizzy" unicode="&#xf567;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM214.2 209.9
+c-7.90039 -7.90039 -20.5 -7.90039 -28.4004 -0.200195l-17.7998 17.7998l-17.7998 -17.7998c-7.7998 -7.7998 -20.5 -7.7998 -28.2998 0c-7.80078 7.7998 -7.80078 20.5 0 28.2998l17.8994 17.9004l-17.8994 17.8994c-7.80078 7.7998 -7.80078 20.5 0 28.2998
+c7.7998 7.80078 20.5 7.80078 28.2998 0l17.7998 -17.7998l17.9004 17.9004c7.7998 7.7998 20.5 7.7998 28.2998 0s7.7998 -20.5 0 -28.2998l-17.9004 -17.9004l17.9004 -17.7998c7.7998 -7.7998 7.7998 -20.5 0 -28.2998zM374.2 302.1
+c7.7002 -7.7998 7.7002 -20.3994 0 -28.1992l-17.9004 -17.9004l17.7998 -18c7.80078 -7.7998 7.80078 -20.5 0 -28.2998c-7.7998 -7.7998 -20.5 -7.7998 -28.2998 0l-17.7998 17.7998l-17.7998 -17.7998c-7.7998 -7.7998 -20.5 -7.7998 -28.2998 0
+c-7.80078 7.7998 -7.80078 20.5 0 28.2998l17.8994 17.9004l-17.8994 17.8994c-7.80078 7.7998 -7.80078 20.5 0 28.2998c7.7998 7.80078 20.5 7.80078 28.2998 0l17.7998 -17.7998l17.9004 17.7998c7.7998 7.80078 20.5 7.80078 28.2998 0zM248 176
+c35.2998 0 64 -28.7002 64 -64s-28.7002 -64 -64 -64s-64 28.7002 -64 64s28.7002 64 64 64z" />
+    <glyph glyph-name="flushed" unicode="&#xf579;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM344 304c44.2002 0 80 -35.7998 80 -80s-35.7998 -80 -80 -80
+s-80 35.7998 -80 80s35.7998 80 80 80zM344 176c26.5 0 48 21.5 48 48s-21.5 48 -48 48s-48 -21.5 -48 -48s21.5 -48 48 -48zM344 248c13.2998 0 24 -10.7002 24 -24s-10.7002 -24 -24 -24s-24 10.7002 -24 24s10.7002 24 24 24zM232 224c0 -44.2002 -35.7998 -80 -80 -80
+s-80 35.7998 -80 80s35.7998 80 80 80s80 -35.7998 80 -80zM152 176c26.5 0 48 21.5 48 48s-21.5 48 -48 48s-48 -21.5 -48 -48s21.5 -48 48 -48zM152 248c13.2998 0 24 -10.7002 24 -24s-10.7002 -24 -24 -24s-24 10.7002 -24 24s10.7002 24 24 24zM312 104
+c13.2002 0 24 -10.7998 24 -24s-10.7998 -24 -24 -24h-128c-13.2002 0 -24 10.7998 -24 24s10.7998 24 24 24h128z" />
+    <glyph glyph-name="frown-open" unicode="&#xf57a;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM200 240c0 -17.7002 -14.2998 -32 -32 -32s-32 14.2998 -32 32
+s14.2998 32 32 32s32 -14.2998 32 -32zM328 272c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32s-32 14.2998 -32 32s14.2998 32 32 32zM248 160c35.5996 0 88.7998 -21.2998 95.7998 -61.2002c2 -11.7998 -9.09961 -21.5996 -20.5 -18.0996
+c-31.2002 9.59961 -59.3994 15.2998 -75.2998 15.2998s-44.0996 -5.7002 -75.2998 -15.2998c-11.5 -3.40039 -22.5 6.2998 -20.5 18.0996c7 39.9004 60.2002 61.2002 95.7998 61.2002z" />
+    <glyph glyph-name="grimace" unicode="&#xf57f;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM168 208c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32
+s32 -14.2998 32 -32s-14.2998 -32 -32 -32zM328 208c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32s32 -14.2998 32 -32s-14.2998 -32 -32 -32zM344 192c26.5 0 48 -21.5 48 -48v-32c0 -26.5 -21.5 -48 -48 -48h-192c-26.5 0 -48 21.5 -48 48v32c0 26.5 21.5 48 48 48
+h192zM176 96v24h-40v-8c0 -8.7998 7.2002 -16 16 -16h24zM176 136v24h-24c-8.7998 0 -16 -7.2002 -16 -16v-8h40zM240 96v24h-48v-24h48zM240 136v24h-48v-24h48zM304 96v24h-48v-24h48zM304 136v24h-48v-24h48zM360 112v8h-40v-24h24c8.7998 0 16 7.2002 16 16zM360 136v8
+c0 8.7998 -7.2002 16 -16 16h-24v-24h40z" />
+    <glyph glyph-name="grin" unicode="&#xf580;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM353.6 143.4c10 3.09961 19.3008 -5.5 17.7002 -15.3008
+c-8 -47.0996 -71.2998 -80 -123.3 -80s-115.4 32.9004 -123.3 80c-1.7002 9.90039 7.7998 18.4004 17.7002 15.3008c26 -8.30078 64.3994 -13.1006 105.6 -13.1006s79.7002 4.7998 105.6 13.1006zM168 208c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32
+s32 -14.2998 32 -32s-14.2998 -32 -32 -32zM328 208c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32s32 -14.2998 32 -32s-14.2998 -32 -32 -32z" />
+    <glyph glyph-name="grin-alt" unicode="&#xf581;" horiz-adv-x="496" 
+d="M200.3 200c-7.5 -11.4004 -24.5996 -12 -32.7002 0c-12.3994 18.7002 -15.1992 37.2998 -15.6992 56c0.599609 18.7002 3.2998 37.2998 15.6992 56c7.60059 11.4004 24.7002 12 32.7002 0c12.4004 -18.7002 15.2002 -37.2998 15.7002 -56
+c-0.599609 -18.7002 -3.2998 -37.2998 -15.7002 -56zM328.3 200c-7.5 -11.4004 -24.5996 -12 -32.7002 0c-12.3994 18.7002 -15.1992 37.2998 -15.6992 56c0.599609 18.7002 3.2998 37.2998 15.6992 56c7.60059 11.4004 24.7002 12 32.7002 0
+c12.4004 -18.7002 15.2002 -37.2998 15.7002 -56c-0.599609 -18.7002 -3.2998 -37.2998 -15.7002 -56zM248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200
+s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM353.6 143.4c10 3.09961 19.3008 -5.5 17.7002 -15.3008c-8 -47.0996 -71.2998 -80 -123.3 -80s-115.4 32.8008 -123.3 80c-1.7002 10 7.7998 18.4004 17.7002 15.3008c26 -8.30078 64.3994 -13.1006 105.6 -13.1006
+s79.7002 4.7998 105.6 13.1006z" />
+    <glyph glyph-name="grin-beam" unicode="&#xf582;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM353.6 143.4c10 3.09961 19.3008 -5.5 17.7002 -15.3008
+c-8 -47.0996 -71.2998 -80 -123.3 -80s-115.4 32.9004 -123.3 80c-1.7002 10 7.89941 18.4004 17.7002 15.3008c26 -8.30078 64.3994 -13.1006 105.6 -13.1006s79.7002 4.7998 105.6 13.1006zM117.7 216.3c-3.60059 1.10059 -6 4.60059 -5.7002 8.2998
+c3.2998 42.1006 32.2002 71.4004 56 71.4004s52.7002 -29.2998 56 -71.4004c0.299805 -3.7998 -2.09961 -7.19922 -5.7002 -8.2998c-3.09961 -1 -7.2002 0 -9.2998 3.7002l-9.5 17c-7.7002 13.7002 -19.2002 21.5996 -31.5 21.5996s-23.7998 -7.89941 -31.5 -21.5996
+l-9.5 -17c-1.90039 -3.2002 -5.7998 -4.7998 -9.2998 -3.7002zM277.7 216.3c-3.60059 1.10059 -6 4.60059 -5.7002 8.2998c3.2998 42.1006 32.2002 71.4004 56 71.4004s52.7002 -29.2998 56 -71.4004c0.299805 -3.7998 -2.09961 -7.19922 -5.7002 -8.2998
+c-3.09961 -1 -7.2002 0 -9.2998 3.7002l-9.5 17c-7.7002 13.7002 -19.2002 21.5996 -31.5 21.5996s-23.7998 -7.89941 -31.5 -21.5996l-9.5 -17c-1.90039 -3.2002 -5.7998 -4.7998 -9.2998 -3.7002z" />
+    <glyph glyph-name="grin-beam-sweat" unicode="&#xf583;" horiz-adv-x="496" 
+d="M440 288c-29.5 0 -53.2998 26.2998 -53.2998 58.7002c0 25 31.7002 75.5 46.2002 97.2998c3.5 5.2998 10.5996 5.2998 14.1992 0c14.5 -21.7998 46.2002 -72.2998 46.2002 -97.2998c0 -32.4004 -23.7998 -58.7002 -53.2998 -58.7002zM248 48
+c-51.9004 0 -115.3 32.9004 -123.3 80c-1.7002 10 7.89941 18.4004 17.7002 15.2998c26 -8.2998 64.3994 -13.0996 105.6 -13.0996s79.7002 4.7998 105.6 13.0996c10 3.2002 19.4004 -5.39941 17.7002 -15.2998c-8 -47.0996 -71.3994 -80 -123.3 -80zM378.3 216.3
+c-3.09961 -0.899414 -7.2002 0.100586 -9.2998 3.7002l-9.5 17c-7.7002 13.7002 -19.2002 21.5996 -31.5 21.5996s-23.7998 -7.89941 -31.5 -21.5996l-9.5 -17c-1.90039 -3.2002 -5.7998 -4.7998 -9.2998 -3.7002c-3.60059 1.10059 -6 4.60059 -5.7002 8.2998
+c3.2998 42.1006 32.2002 71.4004 56 71.4004s52.7002 -29.2998 56 -71.4004c0.299805 -3.7998 -2.09961 -7.19922 -5.7002 -8.2998zM483.6 269.2c8 -24.2998 12.4004 -50.2002 12.4004 -77.2002c0 -137 -111 -248 -248 -248s-248 111 -248 248s111 248 248 248
+c45.7002 0 88.4004 -12.5996 125.2 -34.2002c-10.9004 -21.5996 -15.5 -36.2002 -17.2002 -45.7002c-31.2002 20.1006 -68.2002 31.9004 -108 31.9004c-110.3 0 -200 -89.7002 -200 -200s89.7002 -200 200 -200s200 89.7002 200 200
+c0 22.5 -3.90039 44.0996 -10.7998 64.2998c0.399414 0 21.7998 -2.7998 46.3994 12.9004zM168 258.6c-12.2998 0 -23.7998 -7.7998 -31.5 -21.5996l-9.5 -17c-1.90039 -3.2002 -5.7998 -4.7998 -9.2998 -3.7002c-3.60059 1.10059 -6 4.60059 -5.7002 8.2998
+c3.2998 42.1006 32.2002 71.4004 56 71.4004s52.7002 -29.2998 56 -71.4004c0.299805 -3.7998 -2.09961 -7.19922 -5.7002 -8.2998c-3.09961 -1 -7.2002 0 -9.2998 3.7002l-9.5 17c-7.7002 13.7002 -19.2002 21.5996 -31.5 21.5996z" />
+    <glyph glyph-name="grin-hearts" unicode="&#xf584;" horiz-adv-x="496" 
+d="M353.6 143.4c10 3.09961 19.3008 -5.5 17.7002 -15.3008c-8 -47.0996 -71.2998 -80 -123.3 -80s-115.4 32.8008 -123.3 80c-1.7002 10 7.89941 18.4004 17.7002 15.3008c26 -8.30078 64.3994 -13.1006 105.6 -13.1006s79.7002 4.7998 105.6 13.1006zM200.8 192.3
+l-70.2002 18.1006c-20.3994 5.2998 -31.8994 27 -24.1992 47.1992c6.69922 17.7002 26.6992 26.7002 44.8994 22l7.10059 -1.89941l2 7.09961c5.09961 18.1006 22.8994 30.9004 41.5 27.9004c21.3994 -3.40039 34.3994 -24.2002 28.7998 -44.5l-19.4004 -69.9004
+c-1.2998 -4.5 -6 -7.2002 -10.5 -6zM389.6 257.6c7.7002 -20.1992 -3.7998 -41.7998 -24.1992 -47.0996l-70.2002 -18.2002c-4.60059 -1.2002 -9.2998 1.5 -10.5 6l-19.4004 69.9004c-5.59961 20.2998 7.40039 41.0996 28.7998 44.5c18.7002 3 36.5 -9.7998 41.5 -27.9004
+l2 -7.09961l7.10059 1.89941c18.2002 4.7002 38.2002 -4.39941 44.8994 -22zM248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200
+s89.7002 -200 200 -200z" />
+    <glyph glyph-name="grin-squint" unicode="&#xf585;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM353.6 143.4c10 3.09961 19.3008 -5.5 17.7002 -15.3008
+c-8 -47.0996 -71.2998 -80 -123.3 -80s-115.4 32.9004 -123.3 80c-1.7002 9.90039 7.7998 18.4004 17.7002 15.3008c26 -8.30078 64.3994 -13.1006 105.6 -13.1006s79.7002 4.7998 105.6 13.1006zM118.9 184.2c-3.80078 4.39941 -3.90039 11 -0.100586 15.5l33.6006 40.2998
+l-33.6006 40.2998c-3.7002 4.5 -3.7002 11 0.100586 15.5c3.89941 4.40039 10.1992 5.5 15.2998 2.5l80 -48c3.59961 -2.2002 5.7998 -6.09961 5.7998 -10.2998s-2.2002 -8.09961 -5.7998 -10.2998l-80 -48c-5.40039 -3.2002 -11.7002 -1.7002 -15.2998 2.5zM361.8 181.7
+l-80 48c-3.59961 2.2002 -5.7998 6.09961 -5.7998 10.2998s2.2002 8.09961 5.7998 10.2998l80 48c5.10059 2.90039 11.5 1.90039 15.2998 -2.5c3.80078 -4.5 3.90039 -11 0.100586 -15.5l-33.6006 -40.2998l33.6006 -40.2998c3.7002 -4.5 3.7002 -11 -0.100586 -15.5
+c-3.59961 -4.2002 -9.89941 -5.7002 -15.2998 -2.5z" />
+    <glyph glyph-name="grin-squint-tears" unicode="&#xf586;" 
+d="M117.1 63.9004c6.30078 0.899414 11.7002 -4.5 10.9004 -10.9004c-3.7002 -25.7998 -13.7002 -84 -30.5996 -100.9c-22 -21.8994 -57.9004 -21.5 -80.3008 0.900391c-22.3994 22.4004 -22.7998 58.4004 -0.899414 80.2998
+c16.8994 16.9004 75.0996 26.9004 100.899 30.6006zM75.9004 105.6c-19.6006 -3.89941 -35.1006 -8.09961 -47.3008 -12.1992c-39.2998 90.5996 -22.0996 199.899 52 274c48.5 48.3994 111.9 72.5996 175.4 72.5996c38.9004 0 77.7998 -9.2002 113.2 -27.4004
+c-4 -12.1992 -8.2002 -28 -12 -48.2998c-30.4004 17.9004 -65 27.7002 -101.2 27.7002c-53.4004 0 -103.6 -20.7998 -141.4 -58.5996c-61.5996 -61.5 -74.2998 -153.4 -38.6992 -227.801zM428.2 293.2c20.2998 3.89941 36.2002 8 48.5 12
+c47.8994 -93.2002 32.8994 -210.5 -45.2002 -288.601c-48.5 -48.3994 -111.9 -72.5996 -175.4 -72.5996c-33.6992 0 -67.2998 7 -98.6992 20.5996c4.19922 12.2002 8.2998 27.7002 12.1992 47.2002c26.6006 -12.7998 55.9004 -19.7998 86.4004 -19.7998
+c53.4004 0 103.6 20.7998 141.4 58.5996c65.6992 65.7002 75.7998 166 30.7998 242.601zM394.9 320.1c-6.30078 -0.899414 -11.7002 4.5 -10.9004 10.9004c3.7002 25.7998 13.7002 84 30.5996 100.9c22 21.8994 57.9004 21.5 80.3008 -0.900391
+c22.3994 -22.4004 22.7998 -58.4004 0.899414 -80.2998c-16.8994 -16.9004 -75.0996 -26.9004 -100.899 -30.6006zM207.9 211.8c3 -3 4.19922 -7.2998 3.19922 -11.5l-22.5996 -90.5c-1.40039 -5.39941 -6.2002 -9.09961 -11.7002 -9.09961h-0.899414
+c-5.80078 0.5 -10.5 5.09961 -11 10.8994l-4.80078 52.3008l-52.2998 4.7998c-5.7998 0.5 -10.3994 5.2002 -10.8994 11c-0.400391 5.89941 3.39941 11.2002 9.09961 12.5996l90.5 22.7002c4.2002 1 8.40039 -0.200195 11.4004 -3.2002zM247.6 236.9
+c-0.0996094 0 -6.39941 -1.80078 -11.3994 3.19922c-3 3 -4.2002 7.30078 -3.2002 11.4004l22.5996 90.5c1.40039 5.7002 7 9.2002 12.6006 9.09961c5.7998 -0.5 10.5 -5.09961 11 -10.8994l4.7998 -52.2998l52.2998 -4.80078c5.7998 -0.5 10.4004 -5.19922 10.9004 -11
+c0.399414 -5.89941 -3.40039 -11.1992 -9.10059 -12.5996zM299.6 148.4c29.1006 29.0996 53 59.5996 65.3008 83.7998c4.89941 9.2998 17.5996 9.89941 23.3994 1.7002c27.7002 -38.9004 6.10059 -106.9 -30.5996 -143.7s-104.8 -58.2998 -143.7 -30.6006
+c-8.2998 5.90039 -7.5 18.6006 1.7002 23.4004c24.2002 12.5 54.7998 36.2998 83.8994 65.4004z" />
+    <glyph glyph-name="grin-stars" unicode="&#xf587;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM353.6 143.4c10 3.09961 19.3008 -5.5 17.7002 -15.3008
+c-8 -47.0996 -71.2998 -80 -123.3 -80s-115.4 32.8008 -123.3 80c-1.7002 10 7.89941 18.4004 17.7002 15.3008c26 -8.30078 64.3994 -13.1006 105.6 -13.1006s79.7002 4.7998 105.6 13.1006zM125.7 200.9l6.09961 34.8994l-25.3994 24.6006
+c-4.60059 4.59961 -1.90039 12.2998 4.2998 13.1992l34.8994 5l15.5 31.6006c2.90039 5.7998 11 5.7998 13.9004 0l15.5 -31.6006l34.9004 -5c6.19922 -1 8.7998 -8.69922 4.2998 -13.1992l-25.4004 -24.6006l6 -34.8994c1 -6.2002 -5.39941 -11 -11 -7.90039
+l-31.2998 16.2998l-31.2998 -16.2998c-5.60059 -3.09961 -12 1.7002 -11 7.90039zM385.4 273.6c6.19922 -1 8.89941 -8.59961 4.39941 -13.1992l-25.3994 -24.6006l6 -34.8994c1 -6.2002 -5.40039 -11 -11 -7.90039l-31.3008 16.2998l-31.2998 -16.2998
+c-5.59961 -3.09961 -12 1.7002 -11 7.90039l6 34.8994l-25.3994 24.6006c-4.60059 4.59961 -1.90039 12.2998 4.2998 13.1992l34.8994 5l15.5 31.6006c2.90039 5.7998 11 5.7998 13.9004 0l15.5 -31.6006z" />
+    <glyph glyph-name="grin-tears" unicode="&#xf588;" horiz-adv-x="640" 
+d="M117.1 191.9c6.30078 0.899414 11.7002 -4.5 10.9004 -10.9004c-3.7002 -25.7998 -13.7002 -84 -30.5996 -100.9c-22 -21.8994 -57.9004 -21.5 -80.3008 0.900391c-22.3994 22.4004 -22.7998 58.4004 -0.899414 80.2998c16.8994 16.9004 75.0996 26.9004 100.899 30.6006
+zM623.8 161.3c21.9004 -21.8994 21.5 -57.8994 -0.799805 -80.2002c-22.4004 -22.3994 -58.4004 -22.7998 -80.2998 -0.899414c-16.9004 16.8994 -26.9004 75.0996 -30.6006 100.899c-0.899414 6.30078 4.5 11.7002 10.8008 10.8008
+c25.7998 -3.7002 84 -13.7002 100.899 -30.6006zM497.2 99.5996c12.3994 -37.2998 25.0996 -43.7998 28.2998 -46.5c-44.5996 -65.7998 -120 -109.1 -205.5 -109.1s-160.9 43.2998 -205.5 109.1c3.09961 2.60059 15.7998 9.10059 28.2998 46.5
+c33.4004 -63.8994 100.3 -107.6 177.2 -107.6s143.8 43.7002 177.2 107.6zM122.7 223.5c-2.40039 0.299805 -5 2.5 -49.5 -6.90039c12.3994 125.4 118.1 223.4 246.8 223.4s234.4 -98 246.8 -223.5c-44.2998 9.40039 -47.3994 7.2002 -49.5 7
+c-15.2002 95.2998 -97.7998 168.5 -197.3 168.5s-182.1 -73.2002 -197.3 -168.5zM320 48c-51.9004 0 -115.3 32.9004 -123.3 80c-1.7002 10 7.89941 18.4004 17.7002 15.2998c26 -8.2998 64.3994 -13.0996 105.6 -13.0996s79.7002 4.7998 105.6 13.0996
+c10 3.2002 19.4004 -5.39941 17.7002 -15.2998c-8 -47.0996 -71.3994 -80 -123.3 -80zM450.3 216.3c-3.09961 -0.899414 -7.2002 0.100586 -9.2998 3.7002l-9.5 17c-7.7002 13.7002 -19.2002 21.5996 -31.5 21.5996s-23.7998 -7.89941 -31.5 -21.5996l-9.5 -17
+c-1.90039 -3.2002 -5.7998 -4.7998 -9.2998 -3.7002c-3.60059 1.10059 -6 4.60059 -5.7002 8.2998c3.2998 42.1006 32.2002 71.4004 56 71.4004s52.7002 -29.2998 56 -71.4004c0.299805 -3.7998 -2.09961 -7.19922 -5.7002 -8.2998zM240 258.6
+c-12.2998 0 -23.7998 -7.7998 -31.5 -21.5996l-9.5 -17c-1.90039 -3.2002 -5.7998 -4.7998 -9.2998 -3.7002c-3.60059 1.10059 -6 4.60059 -5.7002 8.2998c3.2998 42.1006 32.2002 71.4004 56 71.4004s52.7002 -29.2998 56 -71.4004
+c0.299805 -3.7998 -2.09961 -7.19922 -5.7002 -8.2998c-3.09961 -1 -7.2002 0 -9.2998 3.7002l-9.5 17c-7.7002 13.7002 -19.2002 21.5996 -31.5 21.5996z" />
+    <glyph glyph-name="grin-tongue" unicode="&#xf589;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM312 40h0.0996094v43.7998l-17.6992 8.7998c-15.1006 7.60059 -31.5 -1.69922 -34.9004 -16.5l-2.7998 -12.0996c-2.10059 -9.2002 -15.2002 -9.2002 -17.2998 0
+l-2.80078 12.0996c-3.39941 14.8008 -19.8994 24 -34.8994 16.5l-17.7002 -8.7998v-42.7998c0 -35.2002 28 -64.5 63.0996 -65c35.8008 -0.5 64.9004 28.4004 64.9004 64zM340.2 14.7002c64 33.3994 107.8 100.3 107.8 177.3c0 110.3 -89.7002 200 -200 200
+s-200 -89.7002 -200 -200c0 -77 43.7998 -143.9 107.8 -177.3c-2.2002 8.09961 -3.7998 16.5 -3.7998 25.2998v43.5c-14.2002 12.4004 -24.4004 27.5 -27.2998 44.5c-1.7002 10 7.7998 18.4004 17.7002 15.2998c26 -8.2998 64.3994 -13.0996 105.6 -13.0996
+s79.7002 4.7998 105.6 13.0996c10 3.2002 19.4004 -5.39941 17.7002 -15.2998c-2.89941 -17 -13.0996 -32.0996 -27.2998 -44.5v-43.5c0 -8.7998 -1.59961 -17.2002 -3.7998 -25.2998zM168 272c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32s-32 14.2998 -32 32
+s14.2998 32 32 32zM328 272c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32s-32 14.2998 -32 32s14.2998 32 32 32z" />
+    <glyph glyph-name="grin-tongue-squint" unicode="&#xf58a;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM312 40h0.0996094v43.7998l-17.6992 8.7998c-15.1006 7.60059 -31.5 -1.69922 -34.9004 -16.5l-2.7998 -12.0996c-2.10059 -9.2002 -15.2002 -9.2002 -17.2998 0
+l-2.80078 12.0996c-3.39941 14.8008 -19.8994 24 -34.8994 16.5l-17.7002 -8.7998v-42.7998c0 -35.2002 28 -64.5 63.0996 -65c35.8008 -0.5 64.9004 28.4004 64.9004 64zM340.2 14.7002c64 33.3994 107.8 100.3 107.8 177.3c0 110.3 -89.7002 200 -200 200
+s-200 -89.7002 -200 -200c0 -77 43.7998 -143.9 107.8 -177.3c-2.2002 8.09961 -3.7998 16.5 -3.7998 25.2998v43.5c-14.2002 12.4004 -24.4004 27.5 -27.2998 44.5c-1.7002 10 7.7998 18.4004 17.7002 15.2998c26 -8.2998 64.3994 -13.0996 105.6 -13.0996
+s79.7002 4.7998 105.6 13.0996c10 3.2002 19.4004 -5.39941 17.7002 -15.2998c-2.89941 -17 -13.0996 -32.0996 -27.2998 -44.5v-43.5c0 -8.7998 -1.59961 -17.2002 -3.7998 -25.2998zM377.1 295.8c3.80078 -4.39941 3.90039 -11 0.100586 -15.5l-33.6006 -40.2998
+l33.6006 -40.2998c3.7002 -4.5 3.7002 -11 -0.100586 -15.5c-3.59961 -4.2002 -9.89941 -5.7002 -15.2998 -2.5l-80 48c-3.59961 2.2002 -5.7998 6.09961 -5.7998 10.2998s2.2002 8.09961 5.7998 10.2998l80 48c5 3 11.5 1.90039 15.2998 -2.5zM214.2 250.3
+c3.59961 -2.2002 5.7998 -6.09961 5.7998 -10.2998s-2.2002 -8.09961 -5.7998 -10.2998l-80 -48c-5.40039 -3.2002 -11.7002 -1.7002 -15.2998 2.5c-3.80078 4.5 -3.90039 11 -0.100586 15.5l33.6006 40.2998l-33.6006 40.2998c-3.7002 4.5 -3.7002 11 0.100586 15.5
+c3.89941 4.5 10.2998 5.5 15.2998 2.5z" />
+    <glyph glyph-name="grin-tongue-wink" unicode="&#xf58b;" horiz-adv-x="496" 
+d="M152 268c25.7002 0 55.9004 -16.9004 59.7998 -42.0996c0.799805 -5 -1.7002 -10 -6.09961 -12.4004c-5.7002 -3.09961 -11.2002 -0.599609 -13.7002 1.59961l-9.5 8.5c-14.7998 13.2002 -46.2002 13.2002 -61 0l-9.5 -8.5
+c-3.7998 -3.39941 -9.2998 -4 -13.7002 -1.59961c-4.39941 2.40039 -6.89941 7.40039 -6.09961 12.4004c3.89941 25.1992 34.0996 42.0996 59.7998 42.0996zM328 320c44.2002 0 80 -35.7998 80 -80s-35.7998 -80 -80 -80s-80 35.7998 -80 80s35.7998 80 80 80zM328 192
+c26.5 0 48 21.5 48 48s-21.5 48 -48 48s-48 -21.5 -48 -48s21.5 -48 48 -48zM328 264c13.2998 0 24 -10.7002 24 -24s-10.7002 -24 -24 -24s-24 10.7002 -24 24s10.7002 24 24 24zM248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248z
+M312 40h0.0996094v43.7998l-17.6992 8.7998c-15.1006 7.60059 -31.5 -1.69922 -34.9004 -16.5l-2.7998 -12.0996c-2.10059 -9.2002 -15.2002 -9.2002 -17.2998 0l-2.80078 12.0996c-3.39941 14.8008 -19.8994 24 -34.8994 16.5l-17.7002 -8.7998v-42.7998
+c0 -35.2002 28 -64.5 63.0996 -65c35.8008 -0.5 64.9004 28.4004 64.9004 64zM340.2 14.7002c64 33.3994 107.8 100.3 107.8 177.3c0 110.3 -89.7002 200 -200 200s-200 -89.7002 -200 -200c0 -77 43.7998 -143.9 107.8 -177.3
+c-2.2002 8.09961 -3.7998 16.5 -3.7998 25.2998v43.5c-14.2002 12.4004 -24.4004 27.5 -27.2998 44.5c-1.7002 10 7.7998 18.4004 17.7002 15.2998c26 -8.2998 64.3994 -13.0996 105.6 -13.0996s79.7002 4.7998 105.6 13.0996c10 3.2002 19.4004 -5.39941 17.7002 -15.2998
+c-2.89941 -17 -13.0996 -32.0996 -27.2998 -44.5v-43.5c0 -8.7998 -1.59961 -17.2002 -3.7998 -25.2998z" />
+    <glyph glyph-name="grin-wink" unicode="&#xf58c;" horiz-adv-x="496" 
+d="M328 268c25.6904 0 55.8799 -16.9199 59.8701 -42.1201c1.72949 -11.0898 -11.3506 -18.2695 -19.8301 -10.8398l-9.5498 8.47949c-14.8105 13.1904 -46.1602 13.1904 -60.9707 0l-9.5498 -8.47949c-8.33008 -7.40039 -21.5801 -0.379883 -19.8301 10.8398
+c3.98047 25.2002 34.1699 42.1201 59.8604 42.1201zM168 208c-17.6699 0 -32 14.3301 -32 32s14.3301 32 32 32s32 -14.3301 32 -32s-14.3301 -32 -32 -32zM353.55 143.36c10.04 3.13965 19.3906 -5.4502 17.71 -15.3408
+c-7.92969 -47.1494 -71.3193 -80.0195 -123.26 -80.0195s-115.33 32.8701 -123.26 80.0195c-1.69043 9.9707 7.76953 18.4707 17.71 15.3408c25.9297 -8.31055 64.3994 -13.0605 105.55 -13.0605s79.6201 4.75977 105.55 13.0605zM248 440c136.97 0 248 -111.03 248 -248
+s-111.03 -248 -248 -248s-248 111.03 -248 248s111.03 248 248 248zM248 -8c110.28 0 200 89.7197 200 200s-89.7197 200 -200 200s-200 -89.7197 -200 -200s89.7197 -200 200 -200z" />
+    <glyph glyph-name="kiss" unicode="&#xf596;" horiz-adv-x="496" 
+d="M168 272c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32s-32 14.2998 -32 32s14.2998 32 32 32zM304 140c0 -13 -13.4004 -27.2998 -35.0996 -36.4004c21.7998 -8.69922 35.1992 -23 35.1992 -36c0 -19.1992 -28.6992 -41.5 -71.5 -44h-0.5
+c-3.69922 0 -7 2.60059 -7.7998 6.2002c-0.899414 3.7998 1.10059 7.7002 4.7002 9.2002l17 7.2002c12.9004 5.5 20.7002 13.5 20.7002 21.5s-7.7998 16 -20.7998 21.5l-16.9004 7.2002c-6 2.59961 -5.7002 12.3994 0 14.7998l17 7.2002
+c12.9004 5.5 20.7002 13.5 20.7002 21.5s-7.7998 16 -20.7998 21.5l-16.9004 7.19922c-3.59961 1.5 -5.59961 5.40039 -4.7002 9.2002c0.799805 3.7998 4.40039 6.60059 8.2002 6.2002c42.7002 -2.5 71.5 -24.7998 71.5 -44zM248 440c137 0 248 -111 248 -248
+s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM328 272c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32s-32 14.2998 -32 32s14.2998 32 32 32z
+" />
+    <glyph glyph-name="kiss-beam" unicode="&#xf597;" horiz-adv-x="496" 
+d="M168 296c23.7998 0 52.7002 -29.2998 55.7998 -71.4004c0.299805 -3.7998 -2 -7.19922 -5.59961 -8.2998c-3.10059 -1 -7.2002 0 -9.2998 3.7002l-9.5 17c-7.7002 13.7002 -19.2002 21.5996 -31.5 21.5996c-12.3008 0 -23.8008 -7.89941 -31.5 -21.5996l-9.5 -17
+c-1.80078 -3.2002 -5.80078 -4.7002 -9.30078 -3.7002c-3.59961 1.10059 -5.89941 4.60059 -5.59961 8.2998c3.2998 42.1006 32.2002 71.4004 56 71.4004zM248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8
+c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM304 140c0 -13 -13.4004 -27.2998 -35.0996 -36.4004c21.7998 -8.69922 35.1992 -23 35.1992 -36c0 -19.1992 -28.6992 -41.5 -71.5 -44h-0.5
+c-3.69922 0 -7 2.60059 -7.7998 6.2002c-0.899414 3.7998 1.10059 7.7002 4.7002 9.2002l17 7.2002c12.9004 5.5 20.7002 13.5 20.7002 21.5s-7.7998 16 -20.7998 21.5l-16.9004 7.2002c-6 2.59961 -5.7002 12.3994 0 14.7998l17 7.2002
+c12.9004 5.5 20.7002 13.5 20.7002 21.5s-7.7998 16 -20.7998 21.5l-16.9004 7.19922c-3.59961 1.5 -5.59961 5.40039 -4.7002 9.2002c0.799805 3.7998 4.40039 6.60059 8.2002 6.2002c42.7002 -2.5 71.5 -24.7998 71.5 -44zM328 296
+c23.7998 0 52.7002 -29.2998 55.7998 -71.4004c0.299805 -3.7998 -2 -7.19922 -5.59961 -8.2998c-3.10059 -1 -7.2002 0 -9.2998 3.7002l-9.5 17c-7.7002 13.7002 -19.2002 21.5996 -31.5 21.5996c-12.3008 0 -23.8008 -7.89941 -31.5 -21.5996l-9.5 -17
+c-1.80078 -3.2002 -5.80078 -4.7002 -9.30078 -3.7002c-3.59961 1.10059 -5.89941 4.60059 -5.59961 8.2998c3.2998 42.1006 32.2002 71.4004 56 71.4004z" />
+    <glyph glyph-name="kiss-wink-heart" unicode="&#xf598;" horiz-adv-x="504" 
+d="M304 139.5c0 -13 -13.4004 -27.2998 -35.0996 -36.4004c21.7998 -8.69922 35.1992 -23 35.1992 -36c0 -19.1992 -28.6992 -41.5 -71.5 -44h-0.5c-3.69922 0 -7 2.60059 -7.7998 6.2002c-0.899414 3.7998 1.10059 7.7002 4.7002 9.2002l17 7.2002
+c12.9004 5.5 20.7002 13.5 20.7002 21.5s-7.7998 16 -20.7998 21.5l-16.9004 7.2002c-6 2.59961 -5.7002 12.3994 0 14.7998l17 7.2002c12.9004 5.5 20.7002 13.5 20.7002 21.5s-7.7998 16 -20.7998 21.5l-16.9004 7.19922c-3.59961 1.5 -5.59961 5.40039 -4.7002 9.2002
+c0.799805 3.7998 4.40039 6.60059 8.2002 6.2002c42.7002 -2.5 71.5 -24.7998 71.5 -44zM374.5 223c-14.7998 13.2002 -46.2002 13.2002 -61 0l-9.5 -8.5c-2.5 -2.2998 -7.90039 -4.7002 -13.7002 -1.59961c-4.39941 2.39941 -6.89941 7.39941 -6.09961 12.3994
+c3.89941 25.2002 34.2002 42.1006 59.7998 42.1006s55.7998 -16.9004 59.7998 -42.1006c0.799805 -5 -1.7002 -10 -6.09961 -12.3994c-4.40039 -2.40039 -9.90039 -1.7002 -13.7002 1.59961zM136 239.5c0 17.7002 14.2998 32 32 32s32 -14.2998 32 -32s-14.2998 -32 -32 -32
+s-32 14.2998 -32 32zM501.1 45.5c9.2002 -23.9004 -4.39941 -49.4004 -28.5 -55.7002l-83 -21.5c-5.39941 -1.39941 -10.8994 1.7998 -12.3994 7.10059l-22.9004 82.5996c-6.59961 24 8.7998 48.5996 34 52.5996c22 3.5 43.1006 -11.5996 49 -33l2.2998 -8.39941
+l8.40039 2.2002c21.5996 5.59961 45.0996 -5.10059 53.0996 -25.9004zM334 11.7002c17.7002 -64 10.9004 -39.5 13.4004 -46.7998c-30.5 -13.4004 -64 -20.9004 -99.4004 -20.9004c-137 0 -248 111 -248 248s111 248 248 248s248 -111 247.9 -248
+c0 -31.7998 -6.2002 -62.0996 -17.1006 -90c-6 1.5 -12.2002 2.7998 -18.5996 2.90039c-5.60059 9.69922 -13.6006 17.5 -22.6006 23.8994c6.7002 19.9004 10.4004 41.1006 10.4004 63.2002c0 110.3 -89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200
+c30.7998 0 59.9004 7.2002 86 19.7002z" />
+    <glyph glyph-name="laugh" unicode="&#xf599;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM389.4 50.5996c37.7998 37.8008 58.5996 88 58.5996 141.4s-20.7998 103.6 -58.5996 141.4c-37.8008 37.7998 -88 58.5996 -141.4 58.5996s-103.6 -20.7998 -141.4 -58.5996
+c-37.7998 -37.8008 -58.5996 -88 -58.5996 -141.4s20.7998 -103.6 58.5996 -141.4c37.8008 -37.7998 88 -58.5996 141.4 -58.5996s103.6 20.7998 141.4 58.5996zM328 224c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32s32 -14.2998 32 -32s-14.2998 -32 -32 -32zM168 224
+c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32s32 -14.2998 32 -32s-14.2998 -32 -32 -32zM362.4 160c8.19922 0 14.5 -7 13.5 -15c-7.5 -59.2002 -58.9004 -105 -121.101 -105h-13.5996c-62.2002 0 -113.601 45.7998 -121.101 105c-1 8 5.30078 15 13.5 15h228.801z" />
+    <glyph glyph-name="laugh-beam" unicode="&#xf59a;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM389.4 50.5996c37.7998 37.8008 58.5996 88 58.5996 141.4s-20.7998 103.6 -58.5996 141.4c-37.8008 37.7998 -88 58.5996 -141.4 58.5996s-103.6 -20.7998 -141.4 -58.5996
+c-37.7998 -37.8008 -58.5996 -88 -58.5996 -141.4s20.7998 -103.6 58.5996 -141.4c37.8008 -37.7998 88 -58.5996 141.4 -58.5996s103.6 20.7998 141.4 58.5996zM328 296c23.7998 0 52.7002 -29.2998 55.7998 -71.4004c0.700195 -8.5 -10.7998 -11.8994 -14.8994 -4.5
+l-9.5 17c-7.7002 13.7002 -19.2002 21.6006 -31.5 21.6006c-12.3008 0 -23.8008 -7.90039 -31.5 -21.6006l-9.5 -17c-4.10059 -7.39941 -15.6006 -4.09961 -14.9004 4.5c3.2998 42.1006 32.2002 71.4004 56 71.4004zM127 220.1c-4.2002 -7.39941 -15.7002 -4 -15.0996 4.5
+c3.2998 42.1006 32.1992 71.4004 56 71.4004c23.7998 0 52.6992 -29.2998 56 -71.4004c0.699219 -8.5 -10.8008 -11.8994 -14.9004 -4.5l-9.5 17c-7.7002 13.7002 -19.2002 21.6006 -31.5 21.6006s-23.7998 -7.90039 -31.5 -21.6006zM362.4 160c8.19922 0 14.5 -7 13.5 -15
+c-7.5 -59.2002 -58.9004 -105 -121.101 -105h-13.5996c-62.2002 0 -113.601 45.7998 -121.101 105c-1 8 5.30078 15 13.5 15h228.801z" />
+    <glyph glyph-name="laugh-squint" unicode="&#xf59b;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM389.4 50.5996c37.7998 37.8008 58.5996 88 58.5996 141.4s-20.7998 103.6 -58.5996 141.4c-37.8008 37.7998 -88 58.5996 -141.4 58.5996s-103.6 -20.7998 -141.4 -58.5996
+c-37.7998 -37.8008 -58.5996 -88 -58.5996 -141.4s20.7998 -103.6 58.5996 -141.4c37.8008 -37.7998 88 -58.5996 141.4 -58.5996s103.6 20.7998 141.4 58.5996zM343.6 252l33.6006 -40.2998c8.59961 -10.4004 -3.90039 -24.7998 -15.4004 -18l-80 48
+c-7.7998 4.7002 -7.7998 15.8994 0 20.5996l80 48c11.6006 6.7998 24 -7.7002 15.4004 -18zM134.2 193.7c-11.6006 -6.7998 -24.1006 7.59961 -15.4004 18l33.6006 40.2998l-33.6006 40.2998c-8.59961 10.2998 3.7998 24.9004 15.4004 18l80 -48
+c7.7998 -4.7002 7.7998 -15.8994 0 -20.5996zM362.4 160c8.19922 0 14.5 -7 13.5 -15c-7.5 -59.2002 -58.9004 -105 -121.101 -105h-13.5996c-62.2002 0 -113.601 45.7998 -121.101 105c-1 8 5.30078 15 13.5 15h228.801z" />
+    <glyph glyph-name="laugh-wink" unicode="&#xf59c;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM389.4 50.5996c37.7998 37.8008 58.5996 88 58.5996 141.4s-20.7998 103.6 -58.5996 141.4c-37.8008 37.7998 -88 58.5996 -141.4 58.5996s-103.6 -20.7998 -141.4 -58.5996
+c-37.7998 -37.8008 -58.5996 -88 -58.5996 -141.4s20.7998 -103.6 58.5996 -141.4c37.8008 -37.7998 88 -58.5996 141.4 -58.5996s103.6 20.7998 141.4 58.5996zM328 284c25.7002 0 55.9004 -16.9004 59.7002 -42.0996c1.7998 -11.1006 -11.2998 -18.2002 -19.7998 -10.8008
+l-9.5 8.5c-14.8008 13.2002 -46.2002 13.2002 -61 0l-9.5 -8.5c-8.30078 -7.39941 -21.5 -0.399414 -19.8008 10.8008c4 25.1992 34.2002 42.0996 59.9004 42.0996zM168 224c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32s32 -14.2998 32 -32s-14.2998 -32 -32 -32z
+M362.4 160c8.19922 0 14.5 -7 13.5 -15c-7.5 -59.2002 -58.9004 -105 -121.101 -105h-13.5996c-62.2002 0 -113.601 45.7998 -121.101 105c-1 8 5.30078 15 13.5 15h228.801z" />
+    <glyph glyph-name="meh-blank" unicode="&#xf5a4;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM168 272c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32
+s-32 14.2998 -32 32s14.2998 32 32 32zM328 272c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32s-32 14.2998 -32 32s14.2998 32 32 32z" />
+    <glyph glyph-name="meh-rolling-eyes" unicode="&#xf5a5;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM336 296c39.7998 0 72 -32.2002 72 -72s-32.2002 -72 -72 -72
+s-72 32.2002 -72 72s32.2002 72 72 72zM336 184c22.0996 0 40 17.9004 40 40c0 13.5996 -7.2998 25.0996 -17.7002 32.2998c1 -2.59961 1.7002 -5.39941 1.7002 -8.2998c0 -13.2998 -10.7002 -24 -24 -24s-24 10.7002 -24 24c0 3 0.700195 5.7002 1.7002 8.2998
+c-10.4004 -7.2002 -17.7002 -18.7002 -17.7002 -32.2998c0 -22.0996 17.9004 -40 40 -40zM232 224c0 -39.7998 -32.2002 -72 -72 -72s-72 32.2002 -72 72s32.2002 72 72 72s72 -32.2002 72 -72zM120 224c0 -22.0996 17.9004 -40 40 -40s40 17.9004 40 40
+c0 13.5996 -7.2998 25.0996 -17.7002 32.2998c1 -2.59961 1.7002 -5.39941 1.7002 -8.2998c0 -13.2998 -10.7002 -24 -24 -24s-24 10.7002 -24 24c0 3 0.700195 5.7002 1.7002 8.2998c-10.4004 -7.2002 -17.7002 -18.7002 -17.7002 -32.2998zM312 96
+c13.2002 0 24 -10.7998 24 -24s-10.7998 -24 -24 -24h-128c-13.2002 0 -24 10.7998 -24 24s10.7998 24 24 24h128z" />
+    <glyph glyph-name="sad-cry" unicode="&#xf5b3;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM392 53.5996c34.5996 35.9004 56 84.7002 56 138.4c0 110.3 -89.7002 200 -200 200s-200 -89.7002 -200 -200c0 -53.7002 21.4004 -102.4 56 -138.4v114.4
+c0 13.2002 10.7998 24 24 24s24 -10.7998 24 -24v-151.4c28.5 -15.5996 61.2002 -24.5996 96 -24.5996s67.5 9 96 24.5996v151.4c0 13.2002 10.7998 24 24 24s24 -10.7998 24 -24v-114.4zM205.8 213.5c-5.7998 -3.2002 -11.2002 -0.700195 -13.7002 1.59961l-9.5 8.5
+c-14.7998 13.2002 -46.1992 13.2002 -61 0l-9.5 -8.5c-3.7998 -3.39941 -9.2998 -4 -13.6992 -1.59961c-4.40039 2.40039 -6.90039 7.40039 -6.10059 12.4004c3.90039 25.1992 34.2002 42.0996 59.7998 42.0996c25.6006 0 55.8008 -16.9004 59.8008 -42.0996
+c0.799805 -5 -1.7002 -10 -6.10059 -12.4004zM344 268c25.7002 0 55.9004 -16.9004 59.7998 -42.0996c0.799805 -5 -1.7002 -10 -6.09961 -12.4004c-5.7002 -3.09961 -11.2002 -0.599609 -13.7002 1.59961l-9.5 8.5c-14.7998 13.2002 -46.2002 13.2002 -61 0l-9.5 -8.5
+c-3.7998 -3.39941 -9.2002 -4 -13.7002 -1.59961c-4.39941 2.40039 -6.89941 7.40039 -6.09961 12.4004c3.89941 25.1992 34.0996 42.0996 59.7998 42.0996zM248 176c30.9004 0 56 -28.7002 56 -64s-25.0996 -64 -56 -64s-56 28.7002 -56 64s25.0996 64 56 64z" />
+    <glyph glyph-name="sad-tear" unicode="&#xf5b4;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM256 144c38.0996 0 74 -16.7998 98.5 -46.0996
+c8.5 -10.2002 7.09961 -25.3008 -3.09961 -33.8008c-10.6006 -8.7998 -25.7002 -6.69922 -33.8008 3.10059c-15.2998 18.2998 -37.7998 28.7998 -61.5996 28.7998c-13.2002 0 -24 10.7998 -24 24s10.7998 24 24 24zM168 208c-17.7002 0 -32 14.2998 -32 32s14.2998 32 32 32
+s32 -14.2998 32 -32s-14.2998 -32 -32 -32zM328 272c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32s-32 14.2998 -32 32s14.2998 32 32 32zM162.4 173.2c2.7998 3.7002 8.39941 3.7002 11.1992 0c11.4004 -15.2998 36.4004 -50.6006 36.4004 -68.1006
+c0 -22.6992 -18.7998 -41.0996 -42 -41.0996s-42 18.4004 -42 41.0996c0 17.5 25 52.8008 36.4004 68.1006z" />
+    <glyph glyph-name="smile-beam" unicode="&#xf5b8;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM332 135.4c8.5 10.1992 23.5996 11.5 33.7998 3.09961
+c10.2002 -8.5 11.6006 -23.5996 3.10059 -33.7998c-30 -36 -74.1006 -56.6006 -120.9 -56.6006s-90.9004 20.6006 -120.9 56.6006c-8.39941 10.2002 -7.09961 25.2998 3.10059 33.7998c10.2002 8.40039 25.2998 7.09961 33.7998 -3.09961
+c20.7998 -25.1006 51.5 -39.4004 84 -39.4004s63.2002 14.4004 84 39.4004zM136.5 237l-9.5 -17c-1.90039 -3.2002 -5.90039 -4.7998 -9.2998 -3.7002c-3.60059 1.10059 -6 4.60059 -5.7002 8.2998c3.2998 42.1006 32.2002 71.4004 56 71.4004s52.7002 -29.2998 56 -71.4004
+c0.299805 -3.7998 -2.09961 -7.19922 -5.7002 -8.2998c-3.09961 -1 -7.2002 0 -9.2998 3.7002l-9.5 17c-7.7002 13.7002 -19.2002 21.5996 -31.5 21.5996s-23.7998 -7.89941 -31.5 -21.5996zM328 296c23.7998 0 52.7002 -29.2998 56 -71.4004
+c0.299805 -3.7998 -2.09961 -7.19922 -5.7002 -8.2998c-3.09961 -1 -7.2002 0 -9.2998 3.7002l-9.5 17c-7.7002 13.7002 -19.2002 21.5996 -31.5 21.5996s-23.7998 -7.89941 -31.5 -21.5996l-9.5 -17c-1.90039 -3.2002 -5.7998 -4.7998 -9.2998 -3.7002
+c-3.60059 1.10059 -6 4.60059 -5.7002 8.2998c3.2998 42.1006 32.2002 71.4004 56 71.4004z" />
+    <glyph glyph-name="surprise" unicode="&#xf5c2;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM248 168c35.2998 0 64 -28.7002 64 -64s-28.7002 -64 -64 -64
+s-64 28.7002 -64 64s28.7002 64 64 64zM200 240c0 -17.7002 -14.2998 -32 -32 -32s-32 14.2998 -32 32s14.2998 32 32 32s32 -14.2998 32 -32zM328 272c17.7002 0 32 -14.2998 32 -32s-14.2998 -32 -32 -32s-32 14.2998 -32 32s14.2998 32 32 32z" />
+    <glyph glyph-name="tired" unicode="&#xf5c8;" horiz-adv-x="496" 
+d="M248 440c137 0 248 -111 248 -248s-111 -248 -248 -248s-248 111 -248 248s111 248 248 248zM248 -8c110.3 0 200 89.7002 200 200s-89.7002 200 -200 200s-200 -89.7002 -200 -200s89.7002 -200 200 -200zM377.1 295.8c3.80078 -4.39941 3.90039 -11 0.100586 -15.5
+l-33.6006 -40.2998l33.6006 -40.2998c3.7998 -4.5 3.7002 -11 -0.100586 -15.5c-3.5 -4.10059 -9.89941 -5.7002 -15.2998 -2.5l-80 48c-3.59961 2.2002 -5.7998 6.09961 -5.7998 10.2998s2.2002 8.09961 5.7998 10.2998l80 48c5 2.90039 11.5 1.90039 15.2998 -2.5z
+M220 240c0 -4.2002 -2.2002 -8.09961 -5.7998 -10.2998l-80 -48c-5.40039 -3.2002 -11.7998 -1.60059 -15.2998 2.5c-3.80078 4.5 -3.90039 11 -0.100586 15.5l33.6006 40.2998l-33.6006 40.2998c-3.7998 4.5 -3.7002 11 0.100586 15.5
+c3.7998 4.40039 10.2998 5.5 15.2998 2.5l80 -48c3.59961 -2.2002 5.7998 -6.09961 5.7998 -10.2998zM248 176c45.4004 0 100.9 -38.2998 107.8 -93.2998c1.5 -11.9004 -7 -21.6006 -15.5 -17.9004c-22.7002 9.7002 -56.2998 15.2002 -92.2998 15.2002
+s-69.5996 -5.5 -92.2998 -15.2002c-8.60059 -3.7002 -17 6.10059 -15.5 17.9004c6.89941 55 62.3994 93.2998 107.8 93.2998z" />
+  </font>
+</defs></svg>
diff --git a/web/css/fonts/awesome5/fa-regular-400.ttf b/web/css/fonts/awesome5/fa-regular-400.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..abe99e20c38a23e95295917d6a5cdb49a8489eb8
GIT binary patch
literal 34092
zcmdtLd3+pKoiAFa_NuO~-n&{-OKNqiyS4A?wk=zhmpD%B*dlR^$tu~BmqfONBxfUl
z1`HEI$T%4flgTiHSuc-eCKniP2+K7L7cvZR1H<rUa(Q?B$t)i(4+hyGGl7Bj`~FT<
zx4I?SVdlN}$9r~l)u~gbPW{d~zw_JAk-!8&@C!?VB#iIcb>ODQKep+0g7A(Ya+BBZ
zyl$7!A)FV4Gt0Pd+J8&$z_urEX%GZ<2=^05PEO8!<NWhK7X;Z71nI?NlM8cKuAnC2
z%#ZL~KQ{B=(VZ`T>Td<XND0EJ3&*D?rxJAsU&6B=;#WA140%}mF6xWozV-OY#RtOA
z2#dIXRuIGkGqXn~f5iTBmmp}Uj}=Z%J}@WzSol+<H=um#)a1$Ok-zC_5`_CN3W9R`
z-0Z^QuTE_Hf*`zkGv4`xfVQzcqIK|zT^H^SY<@-XiFi#AUi{-n+q`S<m7iSsy!hMf
zFL195?qj@!<HD5-fMMy%PjLQi%BlHxmghVzd{VG^KE26!-k4WTW<O<T1qIoA*-_+O
z?_FOJ>Vz|>Q&7-P>-`%)dfk+;v@E~!Jcpr&eM>liavTD-iG2j=l)%cM3LmGsuKb%g
zCIr|8N((wY;{YwWS3E1{(=(ml<C$Cj%CC5Nw~Qc;;U0CN&R^q-d#?_`El=-M|M+(%
z*5v677*qa<WA1bMcKKbNM`bQl{g#l%kHaHWt`3!{yz7;ra##CNS-^jVEnoSmIEHtZ
zuKd!?^Xf#NS7+sW=<8qe?^1bzo?rPje*Z@A)xdZG&&Rxa_;>KFrSd!OGv02>8>^Hn
z*ZFV!yU6$2>5fOap0O*Xa$SJ`SLOcuO|Nd7@y#XFU)BFL=~vxn!utORC+U}T@lE_b
z?g;aef-GWA0^61ZRp?k&mbGPPIlbJv+_OBoymR>t%cqv-mKT;!FF(AzwEWKHcP*b=
z{-fpd%l~Qlzb!w%d~x~zTz+}^)#cKq(53oI$xDNmc3#?b>BdX@F5P_Tj!V;*-g)WC
zOP{**7ni<$>2EIm{iPpY`j<<;xNKg&;qpzFZ@+x!<;BYnU4HlF_gwzm<<DRK!sRbr
z{_5rLUH;+apS~=<-1hSAFMs6a@BTda^H2T!#a9l#a_p6dUU}@5_r3CwS3dj7v#)&h
zmFGc?gk^aZtgo-Y`lcFKKMYvEQ3GqD3f7x0jbFO`($uAQTzUeqeq|M`*8|oAfc1@+
zALOw9nFs4vF27KL_0TF<AAIGlue|q_55Mx6GOU3sfl}aSfqxAAL*Rb|z7_aJ;Lidd
z2%Hc6ao~>vPX&H2a5nIG;7s7*z(axi1Gfd<5ZE5r5a<td2igMhKrj%ne_{VG`$zUa
z+JA4qWWQ+tmHk=!<Mvtm&Gtj~oPE@uuy3_*v3J;-E&EIUU;BUT|0n+s{D1BL6aOdu
zpYVU&|DXI%`=9Xtmj9%Gx4+JM!TN}G%=eeR_xoCXQJ-X9G5^K<nfa3Wcjgbw@4C1F
zZ214gKc)iXJxDp(r0HG#ul%q&@BhE)G2vn1Yr?DS6#FuJN$e2Mh~JT9>9F)kxnBOD
zd{MEK-OA_G4t1aUEv;TVti7Zk)?YI2GM+VUbCdaq`6J&Z-*>EpRj}S>z2J}f|H*E$
z_t}rwUk~gAc78P|1V@9Xg3pCEggzH;3m*-CIQ*T+-pF^NJEI?q39-GgFUOPdnfO0A
zJ<g2td}3$fqlur_9j#lgf2#hQ4bg_%8h(;Ip8Rp+&c+`$ooh}sA8r0(N=zM1J=>zU
z>~49y<wANY{gcez%$Hm3*5j?;Z~av^n%$Qh%Y8Vn=lA8$<e$qgx8>UIY5Qh-x_znr
zhaG!6zScR^`Ecj2x^{PcxI5VWRFB#-)vNZtv#+D?>Henv&kmRarw0Cc@bSSP3~d;C
za_GmyO~YpkLg7&1>qWUZ0W=V={PN1*i7NPRSZD<%H8C~7)O0WFVTEEL?u;_0FqF?B
zGvC8BHQLPLMfT0sM7-fogI&QtZHOmYJ5P6XoQ^iOHtkPlGRgf-t&Pt}5?gA%bzkz+
z!QiKp`wuj?8XX<R#irM%6KZ27)2JrWuW$OaEYtUez?J93e)bh1A*A{D1I&r5z4%sc
zE6e8!TgAdavsmn9$k&RF7>ru>J#|tl^!B%hQc~SLwiSJHo6%-$)27}%I{NM@=i!H0
zRLt4Oo{Tug&Yfl=^5ii)C&tf&!)HEtIQo{iL=V4v`*s1}zH))#zYxK9JA?s2$PUCC
zSyaumq;p%?P+@Q&K2UImhjN*;nn}~SkrmRpp~65snoFxuJRM@2iu;q%()nm|f6+fU
zG<0|{BW-MI+9+iPfAYYA0}mWHKE7eY_=dCli}lfDGFo5U9}J$a&kP2GgPHng@ch67
z@5A#A<KRR3mFL;3kPI~;AT$d?7@tw`xiCIMpHuP#)d(ACME_uj{@^=LJn@|;KJwAi
zr$2g{skbUt%GzOQVU0bD>?gic`Y!TMf7CxJs~@(k$NMz1-lSQtqum!pft|-!8ic$s
zC~Ot37xoLUN8b;`V<ETw!y&Yv4d8;_K;~dJ7VTtd7l7fbq*V?tbq~S4a%C@2+e;I4
zW>2eXX+~AqJ=XKqs^eF&rdaL4&byt9_waUUPGtx1`X|*p5*DWDfvU5?Up-xQ=D3A1
zMq9rsv<Z-?*#Hn4Bdoc@sl}oy+LRj(<%Wj}P7`yYv8YDF9vLo|pu52VHr}-@(HY;e
zBYP~qZL6ULH6zg!3)PEazCC;Fz1NL29c|j!J+zlDY%Xag>zC{8wp8OSnqg?{y>>E|
zWGoSqBwY)nt_aJiRO&~G6c?U=gG<0c6Ikf>e_rEV?{$2UjYpFgE};D>we%D9EJL!?
zH#bLJS~|e)LvK8KfN+^AgUm%^nh|=gJ(lH>afXY9W=6l*dPB4^?Ko*iZ`1X*2Xy@q
zTf(O=@-a-|<Ikv=Dg@K3DCDI7b6>gKIMgMYTjDm%=_F=WuTaF?a=V^SE{<F+1BAq#
zEYvbQRCFgh!$fECsFn|~VkDo#d@mN*lPTG(AVFA><&-F0W)tr({o=N0QZ$(s>I-*<
z7B@YoZTq)QU2ERdtQ||qvibyv6j)>8jnesf>06~=m|`+|8{P<YhWh(9J-1C`W~atq
zA*rx>{&lXMe_4%BJ0eWIjFYCV%<H~*&0Opm9o2P5H%3PdT=bf|+R6FEdPTe!Xh>^e
zs-g+49{JIz4>>d(632yu?cqdWvtfMF&~G;kz%uf<Zg}6Gbm@Yjf5I?s=MZjrk8WVh
zs@uOo7+a?YqP9o`k|qr(!Khdql{k5{-99POY$+3gnl2dxQ`D3mMbpEkrR#=N7x0BF
zLo<?wnjOn+-By>bt4r5*&ZADs4(h6+X^LS*gPN+~b;Sy5me0^)npqh70=-nn`w1s;
z4EP@c_V;q^CmICI!t5;!59JFA@XBVHbPrg{P;nHbP8%o`dstf4nnafB-L~z{ZL;5X
zTC@P`mZXlSZr?n6FiDBeJ@xX9Z_Q@kdhV^+#ErMJJ`~*66AWlAj_p?_K?}wwyY~<C
z>*UXF+OgxNn|5?<%LvMqE0_bn#raDe==q?q3p#u}7R88V(s>5pfIou+jzYcWaGI1a
zrnNk7L5cvbiZmdU28s@mBZ9ktq}Ig5hg8{=byfcL$Grqod{*~1@eTYu*U;QMJmkV3
zZ_d?+vv0kTXWjl(ha`D9j)ESwRGIyimv~&<+C7ioIjuF~HmE(_)X=iyrqV^^Opc?4
zUIynOF7NaS4)5_1@Q`D|tRNIK9+Lo~6jxYA%&AIiS4mfwDONF}5jO1dy}|NzATEVk
zz?E7C&b3)qn>B&o)h-vjXJsPNhx;Y``l89c(s|-2=iL$(RpA|vloOSl9}<&y`OuJM
z4bd-IdXjaNexO2z`ZtfKMueO<Z!pF*YDLTv47K7i@fgG>jB8;l2Kc?-fA4$m>FwEe
zW6(0ifTImF;ow6Lee$8UsHs~`4N)h@&g0hZY4nMqY<R=2ga2~ZnY-@VKG+dYMq_5w
zufZtAd5A~*BcT1nL&`D?ky(ff%`7sUfjpN9RTKH&^&7<t-@xfHHkOQ5$huK1Enmdx
zB4`g)z8iBY2KflBf^<Zv3*pGE*a6x$vTO{q9wfYz<uhqkY|+GEG8q`R8%lH3UFXNp
zYo+n6b^}YOe=_z?m7N_gz2l~f{fQ-qm|8T6ulL>azm7W{>R9RG(vqOKjpDql8FP6j
zS%<Q&M26Pz)_DYoTIaTQu=aVzS<?%UY>KN2vG*vtuEgo|gG%bgO6pU@yi0xl2<P`(
zD)|$-@=tWbPhY1LKfRMuIQ8-35kDK}?_cQCm0k1*Cqd$Pavfx^j8G76Lc5wo$hsb?
z<Z~{@6bNBBQD|bZXx52?gpmYTMxLSqik8cRlz{HyAt95K>t$k8i};vn1-5N&Y8pG1
z2-qXr1C|*Jbv<-&?090&bZJjCQMc{xyWe(qQz9VC@fdrcX{?|1-aOEMb6p}Dip6C)
zFlsmWnJ<~w3SFX<Px_*n&f@mF3SGt<HW&M4b^9ILxA$Zk6Ddv8?B2#q>xfSm+pg<U
z22|N+BQu5ZV<gkF6sLVcHdZCc55`D}XQ^t@JxW6R*5XdXi9P{IU5cFv?<64|{O`)I
zu6$9H+1Jot+XUEcg(e0n9=Fw;s;NETKP)$@#-XP;g&ZE_Y&nhxapcDbMj7T_u8>0x
z`pJeqgKP*C|GmTKmqlGR^P@XAY-r2s@xq#%VY4d~8Z2zywKFBD%!j)`N88}QNMoAr
z&x@wfKA|vw2;#?LQD>j;D8%(_+lCE0M{_<|7iGV1P0opMr|Dy=l-jv#b73%qJ405r
zmSmdWhWt#KXg5sJuNN0J(%3N%KvTwmD?w;RDWS`iV1W`<lyT5WH!{q=OlV*WYl%e%
zi&dhzQ<WBj{<t3$5ECv5v5j4X=$29+wRT%LE?6LUk67$H%B)biKDDDm1%dqd$JMC{
z6>Q@)$DO0ZZ)33bHVRpx8@OB{Jdh2xvQY-=90!+a$w!7;Vy&J|P!<owqTzyLoKPK;
z*`}kG{&FAt_`VY*;7z1H5~;t5pTBPf-bFyaD`5S;VOd7Q+#Jz~o2Z0$5Uuj)?|^Wt
za3`mNm>ps#Q?)pTp6CVARb&IitJq(F`~o5dq2D1P0Y!#z$)rh~!T(s32m+HIWpt=q
z2a6A|Po?|)PE)8=ROKie?un&uF(t!4=8r^hG9)7wGUTvTAM6+q58APq{r-k7*$gVa
zXsRL9(GiJlF)c&4nfXgQYTHp(=ud~59KU6z8`}ok^pN#WR!C1oY_&BK?rpVv_r+{G
zrgcR#p=LcCZ<U`Bqv0)DD&WtVk5UEPJYU`ZgTh^c0QxaP5(dc<pfFB<e1s9TY%0rd
zAlAG)^0{IT>0B|25^CI`1LX?EVaOZ#9x;=SMdLAai70y_XMg&jIM5NSx5Ba!ilM>&
zG0kTvZtKlk(y^Xl7L`@8HQnDAvv0@H>V{=*i6!<%8&Xl95;WzmhWBfJLuF6%2K;@x
z-)FV<h9j-29ZBel=2NK;&>M|u)9O##F*D~6q_izL@fo=_9@d*fnP``$nEoeu7h<kZ
z`(1ft&>jB>Z#ipZafcK;;)qD&;^G1jv<RWFA1#!5Cpkr~<u?LPsKq3I;s4+$LrJZN
z(GmCBe@}lpo{yKuOZV&EfNAxih`IiV<!T0uolN(mhSdmU*hUow`OQGgzYYpT_a;_h
z5Sm}r{(j*W;dViAh}Dt!F+4OXL2B$TY+)p_6An-}K=tLbRa5i8^Qf91KmpKEI#3KK
zK@-3hK~V+@gD4#4){b2IOYUHqkx;!xqvhi3YmHUx5BNxpxwzwx1x$YhdCC*#H%1*h
z<{^%!XL1`(1N6*|!gkDjZo=pU<K+15iYk0M3^)>qB>IF-+@w)^8yOygCWSZIr|o2P
z+!Km${bbZ$R41az8$mY@sE17Z9#wr&>=U7UzQvA~ehxX3ONL`SVV6eL4!o?EzNJp6
z-?Ys`lwyJ@;*~Lvt^?-t&{bkWC-j1mGSp?+3WU?qGO@u3*<X6gO(}z2*51kdM0Oz#
zu1B`5sJ(A#=^<6zXPeKMc899IbNA5D?xE|sD$hn;a9t_ZPLG$CRVIt#zA4kT&EsTP
zc^-v_cJJjXJ(n%7T;#BlU4dlF8s<}NA7W>z4?Hk#<3<`V%1REpZ^e4!$(90_@ls@Y
zTV1o#5{o<0CUJ0JR2(i8m6l;(qnz%MK$NPbSa!ZNk(o-`P_rF7Ih83*u=AN+Vx3)|
zNYvHYb>gl}t=XclJ-LrL#77*qFZr*}C5tR>1~e^b##k}AGM6SGy9B`5fKd^$XMtP-
zqi8-Aq+v`5Zn}U_ox@Y`4{(eOX=lVmcu}Gsu}qJcr#GG<Nw7YL8NQ+Iyp&LkeTI^d
z#&0;*WjAYmVx%**XLx9Dsxu<?DUqn&HO=NwHdjxtwQVT9qq9?yvznHb*$c;R*gg;(
zb~J5Ee{0|Ho*N5&t^Hd7ezwsZ*na&9q6MUPvabOCEO2Wh@nt{`)arp21rX7pLm=;D
zo@-=HnBhe1lor6*&xOoB%yzVMFv|Xm5w=T9MgW!rF%XLG-T;Q1-P95d1;o<hY(p1B
z!AFO3O9xF0GIBt-OeO^qJGwR<^u=gWgKKTib?rz5ByD7h^+0T7Q-7Il03Hcig<hBS
z$34QN@MdU_o`OdT;^2xRnW@$oovM5%2H|IfaYYABa;Y1!^w8iywxTVDG9ER+6e?y&
zSAo=&!7n<3$%U7;utEHWNGrtg7}xz4-J8Aq=CRTkrj~igHs?$m6d-Dq&d#C0+!)Up
zd#)aGO}&bPF5jvWmk#jvhuq2@Zf&*Ln+&Us=3AR(l-|L1Sk?}9cY-n!eU%z`MJ`=;
z=U)RT1zFKZr1Qi&PtmTZ#MK%ziC$90cH1(*CagoS4<E9;%S83W?4yZKr0s>O64s$}
zE21DNx~}1sXhOA}XpNP+#_UsLiN?5-O#3`r_H5h^tRk@0thRHPP3*uzZbQ~a;gitR
zbUp{E-iZ%z>$Ye2eg_u;-^0&IH5w4r-gCXG7>KGZM{BJ~M=H`{r2Y<F^hdRg8?~rk
z)bs1Y)pvEc%Jf$qfa(U-CZ9{Y+QnMH7C2zDZ)sOWO$TP&4Ez9$>p|Ad;XB!{MO97I
zo0~a^0BxN<TgNt8?z1v%(0^V22RZ0!U~wb_ld#RJ!}Dg&x4DeTPa?_uD}IAL@ERO}
z)#pvZZwtRGykGdlT1t+&>3I-Z2C_7*G0!mLYV1MPcAx6BQdPb>{qL=(y3T4!0#_38
zEUpu=AL*r(uCt4J=}9YT;h0$OQhLVCWlQe0<XzV->}4Ld{>H*l%ZN(PFnq3bQGb-a
zwa#&>D)W)5^xDGDSys?0+k!kfxEY?E)m(Lr8I9x%vZ7V<?y_}^t9~5h^IW(A123Ds
zh>>%%7x;LY7Fa?Qwtny$;*32cHWwV(Q~6|1c4Ui|^^6hpB`h{n?V|dgmei(Y$#1-1
z+giNJtHtG7m;U*<uSzIZ(f(`EyBW*+k!8)SOXWTcLWtvA>yx*tZwBC#$*k$cL3k`e
zS<eShw*Oc6Ae$(iXPav*?{Q<bC`5%WuNdGTGmN<5$?@=;`~~`QKzIYb&HED)tIeXI
zHt@i59?to<BNg+pv@OS?P7fPZiVnGJNz*Bdk(g#A>VrmM+L6H9LQGB^u<f(XNPnm9
zD<s>xTbqXaZWwXWXV13uZSKfLMm1Rv);G7e*Vp+>)hhSk8B33bCFvmN6D)1Fp^my#
zL5`#nsrFFap6-#hmQX<2m`cP;Up{;GxTJ^b+UvLF<Jn|9U}_@!qNK{2)>+0SOEx6k
z6glUqN6TGV-sKH`$i-w+Ktvo_9C5(gLb{2of{UyCqU;VUs%}?&XWh$2ZWOq!3XRyP
z8nw>)l<n^24wn<KL^Tdp^IB7=CwpfRas<8&8LyD7Ho2@~t#AIiuBu0L{Rp~dPr19u
zTUlYN%K?R+D}kk}pj;KsdEd@LP2t|9xOy!#XFFCtetO++pDlm;;&1$Ik`3X8qi$!{
zX!kSanptq&FW<QW8f&=9$6dXB34X#5=tm>rd$ocA1a4;enA8$-wKg^n#msd<ek*GC
z?0tcyj+^#*b{Eu|&vMKHt+MC$?j_<1g@*Ia3*5g-a%MYhXv3Zi<<Sw1W{As_2CD~|
ze>t9q3g&$}#8TGBEIRm!MXLZgU@z^J36SSGZ9d=<^DkC`bim$RhN(0GTzA_I$_7vE
z0pSj!n`EaFGacMRm8n=MAkmVS4SEo18RQtk1=gr4b5)Oo;+ic%E*yXjhwN2y*;e&E
zEvUqqGnkWtQulSeAt~hJhN>faqQR7`#)j@eqczbM-xFXyEf5bLZ)A!Qv2{DBCF2dI
zukK_nJ7!vD=?h#A_&`fjYjd)rE*drMh=181(NY;h-qbrZ>^OD#c>TUWyP2@<M0jJw
z^o31bzdopC8xzmvwrlBI%f_newin1&!S$0)j67*saL?h$aNV7l2pR-a9c+o4AfiM1
z)8cYD90IwdZ548PIxvVTRAzFW;UKkfC^yW$XAiWt8iU;pjh5u=Gc_~p8tN>=7wEaZ
z8{M*D1B)xc(w!VUcGwI<8}zY&j#iIlb0_P3R=Q0O+IlFai;aJms80_$4h#jGWZzaJ
z$U8xgMhCl^TbqvaK5F)b4Lf1B2ZCvBd+xbRK@VQ9n^D^z*%*e8mHgri_)hT%W5RBa
zW1?N4GmvpBQ7<r{BJ_ov^Oypl>jANtFKT%$?`RYRQ*?436|7hR{y7}pY|DW_?D{r;
zr`2|StVy;v^SmZxSzTV%@J%;`Zyy@EJ?vedJGf=b!7Z=rX=&+cdCBUu+OLlV0+l!8
zyV~76sw@=32T<8thbyn&LDl>#D%f)H2r6hn;DIPOkU@S9+>R3!RY;15mlI({kdmQW
zqA^HFWKDx@si=~IT+A`&9(cnNPAqOjnzNIm2s&v!J_3K(!M<A?51bk3h>XEsCd-*N
zGd$Y5b=*=n)^`uE7vLakZw;Qjb>Kh(h();N$_pMH#RrLigOtXvNk@ZaV)o3sw2Wm|
zh}m^lrDbJVh~jq~%yQ3Q*jgDWH!g<V!oBmQ?{XIPzi;pD-QLR{;ZFIFaF*mCqZft;
zH&*8Yw{Mm8Wb(7VL70YB;%b_5m4x)~)1XObT%|W>YcygIzcx}J>AaqH%*Lw}<I+Xe
zg>vO%qLM;ltxk;KJKHSncD3O@<^hWor$n^7%o~cr7We{hBrnjlxkSWusKK<EgSi8^
z1&kxY;S{te96)L@9YuOb!;`#9exoK<yb5RerD=xhngfM=gC#0G!Kh!AS|!D_>IOfr
z1@!uTB9o-1ZZmB8A5dWGkBC=gMWtn!t)<Y;kmipkl0AKqfEckmngiPHObOX_pS9tX
zNk0-2{Z1wT4-?$-H2$1kRQ18luhn+YO0Wo5;>*J&=-H`Y$OkncS_&%bzzW2ZPLja|
zQn*Une;9-j->ehOgehu1NeYWboheFwTM~68WQq}%fbHKD9foMTtG4?ES(9^z4WqF$
zq#L^p!&ls3tA;rtF-b-CBwZ(YT-xfkR&2Rd;%tpH038>ytrI6+L9SCS=JL24uX$+O
z;8hy;eNB@yz8*-VjhZAjSRn}sP401XWFulkCGDz>dd5<>g!ZYHDis@=aoI=da9g}p
z#h8(eqZ)4u!su&_nmd;<G`0!>z_nFD`h>jO$*$6X-PU!<jI8>MfEm;SqNXIQzJ$;3
z_a&|hb?JQ{v$Bo8u-~UDBI{MOBLN3W{c3pI1lT@aV}`B7jg{HZRlrP9P}m_|PkgN{
znQTj59k#P$<&sOwD41+RL|nNaB|#H>ps6j0PwfZS+$)TO{td=5#aL!o!xhJHakb>=
zXe-hio@YWuCr$xCzz`U42M1J=p%DK=Oo=L5N~OjSmxt5$s-?^(F52~_#-9vJ{`z2D
zvl2<g&F%(RJj1pzmSU+C-lTs`HBxA<Ebs+`rHQY<KG+z}Cni&=cLsf$U&G=1Tq;%R
z`wO1@+Y1`^T76Fpjf=x19D%gOczEt8jJQzsdai~q&;weN6iStBRRZmrW*P}A8uis*
z9mz|dgkICCDH~+HRaNyjXi?2<P|et;m`_hs(WWx&uufhZYaCZQt@3A-4YpT7o`2M$
zQEk}LkLwmcT@`!2t?RxypRNyOy^@xm#VU?6{!m<V9$3AZA})$Nh=nZoT)&Fp_L`_e
zXya;uDDSv0xf#Q_d9SL55M3^9)U=J78dBAkU#~@;^B+tYQc*Pcxdm^iC|oXoMAe{I
z7gV*NX<??SjsJ6fG%8K}QWK3Y8WNrL{dh~$s@@XN-WB=7hV0ddR>M*#dsb8>K2Xf7
zc~6HPAf$oHLAFbHND<cUfKRexTqG%dpm(l!cwpddTn>4(v2i#S3%FVT2fx|C#gv^q
zeJht=oa)D3S>T9trF7-Xq5^wH3^5EXzz_(35-2srBS8v;VFThm#M!(PQ5+z1fU#%m
z2jtCi)MuH-T&LZhnor90AIoO{dZaWl^H;u@{uq1CZfPn#?D$lvXCx#i;|KbDn*%Qn
z1X|hKm%Bf2M67S((}IeXZ_guk<XOZ|)CnnIKo4nujBK`;Kj4QHt_aIA$q0FhHO=L<
z7(h`qNZi9x5fH|q2SX6gXzU+ScTMK<`_I(z>(Jf1H(5%I<*%>n8p>|z9lQPqn{(#%
zV|R8YuFtdV^ro?R*ZxlCKm1=()?GKzxntieL9?Sb8{fO-@=&z?#@_gwqeH{--Wy97
zM{jhpTZe9lMEbU1_6yt?B95^oSf40vuoE_NlKO5D?gsQEqE%aXpczR~@?(-!Dymi6
z$Dq9qYgJNWwQt2W!n(R|tg4L2jl!j%(_)*QN?l+q7-SdWRNF%FA=b?J19W)=0VBt)
zRR>#w00(Pwi^GBt=E9|Cb^X;V0!x*CB+C!Ln2KY(t?e-$vW?hn9Pi`j&HM~Rz48mb
zQt=z0^-WwmLbN1i9wH@a=0ygb7IME~utw!!2T~kGM^?G99CEe6g(Y$4m5mrl%QQ{v
z*B|GXrO%C)eq@K?$<mFWVe}XeryFz4Ihcar(XvOR?LGCmB?MxaehYrAzv7qDxxNSj
zGni<Y_4OTz%+7y|G}h@WzO7=e*NMZiRhq~)gqlJayA^vV=>S7(eFzGn9(?jpW=RyI
z=H)2f1bPtyQVN7`v1pA8Ww3qgmi?_`Z6i5Z3~Rn*OQJR0(c0RC_)mykH4c_w`|CF6
z$Fdn&k)%eS5szi#>465B$qh1AT0p)c<qUX5_WMC$&l+s1iT5v(mIhEscIIHh{~4!H
z@%8ha8n3Ju<Np;&uD^L~+s$>77?Rbdu`SJt{5?r(aPwGLR+`5~n;`2hm8~fh5V#Uq
zeo&T^N};!BNUDRJt;&g5I_oqjD%!JdKFu934v1#WAUtLxSlMvIjZ8%V<Y2|z)3Op9
z1q)AkI&fzqm7%%Qf?sGj0}o>+mgj}|OS}>k9L!fLTd9EFb5NeVbnNG3EZS|AE>M(}
zn`UE3kEKdusT8}A(k*(3f5^rxc%Bra=dEYYPHeFDvau^d)q7QGyqijumgqdj1bQ7M
z@$Ujzr-t|`F*o<j++K^=G?$|;f}Wfgc7TfPL4VwW{<s$&n|BMp1N#FRP0B_v4!GMJ
zZX?R+N)MHNs?@+rnp!R4r{E>Tn#LUd1VN{uOS~%v;qO6y*2}8?Af-`!ke<`K;t;iE
zw{?*>{?JMntYln7%S#ui`4_1yKP{!$2Ckdpg+r7#gy$E}ue^@_#m(A`6xL&)D8@rb
zrT)f33H&>6okQ(Ny5FaFF>1U>m5sr(S!QV(mz5N*L`%g?q$Pw_K|*5}>;u(N7fXBh
zj+f3~gmrQ%iYIO;2GIY*ds(n_9#%veGj1cpT)hAe&_;B`qx<Cht$d2yIR(Uspp&a(
zS`aegIo#YS*@wz6kZ}}=7uAc=B!WWNIRt2Y3)c(o!|M2z65{?U;VW#27p%a<ZK+xC
zq<+8zPbHL1KA89-pF=R^z(v9519}2zm1!a84`8DBRW>)!+dCiw>z}eL*-JC9lG3;K
z+_MJ<JG*tEscB)W%O9%KduL|$mL}*-u!!C~{{U>dbAW_PmKX(Bb;=EIR&qnoetE=`
z1JSquc_$9DU9MaLz~&GUR$0oh&JBquQ~`ekvd7UBoQVBF>kgw+j`)A&k1)m#=Qm`;
z8(QOI@x-Rx_4S6PX~x<MRxv2`_0DAUhkB>N-Wcp^n@_~1j24QMkaYzF8&*MfYkFv7
zrb};ci#k|a@ZaZyet&?6j)eUFU;~c^3EKW(dnIpCLky{`w^PB5P0?FJ^`;gLPr1H8
z#LoU#*p9veNsv5AULSGOGFk?y2OU!2y#pPB`sUjG0WG`I9Z*4f$R*Xx24O!q-Pofv
zNg?ZhhRpkedc3h^Fclt;HV-v~5jw4EMkI`0QO$7JRM9z+a9nGUEmM;hz6s{EUukbT
z<HX<Yv;F^DycmpGZ)s`MTg9y2-tyfuVBP+`)Y_*lpK1LerM^h1FH!0bDD@pnGjggV
z8<zUP`-uftaO0zp`R?TQN1!BDC6F1?fwVcwnrYb%_mt7Z%~Jq1qTeX^i|%RIHPs<j
z>~)A5hq+|!4dQ&_Oh~tx!H{&QxwEtRuKkUP_=d(OI{Oc&8=d<#eb+8gygy(Z4w!L8
zlcbM2rY|Ci?=ubUb3xk<evVp^L>sLnrI1J!Qf4OFxw+Gb_%>`v_%;kDu@LIpPF86U
z`&fe%__j|e>Q;lw#*AppV&aJGvsAOLj`wV(yS+Xjnx916G%V~0cNxyZnn1z_sg0as
zphFO77U5xUn80W)Z)ku~;4H;Eq1nxdy=Y`&cjV%fET3^&hFa&tUu)@wl$XoL?z5iM
z{G}K5i2tu6aV;T3zM2m?`We6fh#mT)#@2^-=foDLb*QhmMR!_SN>A*Kg<pc6=8rUo
z#|&F{Lb{Sy5&_PqXik%D{LjI+j{#q~cm!+}(>)^44fcFsEDxvR;qk>n69$sIMiAjz
z&<eCdl{*S~0;AZ&RE!}<RZ6&)U>h$ru@MoLXZDIu++^I)aWAu)lJ&+Ns!xq3+Y%DY
z6fI6HS1;QN*2)CcKq97e2IP2Bu9F(XMk$_@Qc}I#3(Z6Bl#+5vZj33dh~^&hB~|lw
ze`ko@Ti>Iyz2TT{TyEQ>`2xm4H4-%%V@>+aJ~P=VNphk?Rs6|N!3j15C8I7R-W-f*
z!Q-~(e|IRN2mjFTe>R{+10R7e=0s451|CYcDzemP`Rc8MR;aZOh>iK}+J>7D@jE9h
z36EWMmJ{|CKmwH<wVy`WMR}r!6<<?@0C4v`zgzVzPZYzO3mivs#gz;)!_hsS1CwyW
zj<#$R8<ec`>2&lYrwjRF9zEM#`URG6sV7zA(*dc0g(I@2l&OTQ%i*x1!7j(?#7>wX
zRD{zj5-xjjqZo#Q<Q`kKaWKEtmN}qn_dAWrr#bQXKr)|C-l!x@-~FZ>HlNl5_lx2I
znqsIKtHvl51JTsw3?(x>_fIK#354Y437Ur!@Kj5<@H9UKgA+l%PTKA73`JNo;2+wF
z$wJZPpczH3Q4&(--PpR{kmHmQm1_f)!D08r+Uj`keLEj1CWklp63J+`S&JB;4$(|s
zWv+A5N(8|2$s=kqqK+}O!P1M0@7vV7OwjC1d>8Md^x^)_CmJ{SG^H-G|1P3fhosPZ
zcTwx9nJbj2Or6a41*CZJqmra42$DQ(pfkxPy<%qwxE|Hj5nNbn=k<zb%;bz1hymwi
zJU>8YH%KxyYED6vRH;*w`cj&bmvvp<f3!{9lv2XMhFT>j17IZewgY6#dR5VG9gIuu
zEv8=|Biir!7BNcDa7G~S{>JfgYeHk-Y%H%ZW8)S?Y5cs)9AqZ=nITZYl|c>?NKf8E
zGHA4wV%FY|t$2zc)Yh&TtA^DFd1?@rsfv&t%~U(9t_9n}d<pf#SBK~USCsmjYl5;)
zzq$TMpf&j+K`h7#3FL&Cq{fkUE!fzGkf9d}x)IXpqSxG!#&?xYykWia-rJ?$v>g=x
zL>9@__7aaiaRmi*svH4zt$3dDFuM^^&5s-U9=@cuYgR|l&b33N{sPNx_wY5g-KX3T
zAJW6Ubv-SJaiP`G9+WmVIN;(3w@*Q29%bnGLGJ%mLQaSk2Sb_?(lQ~jPc;=&c?$Lo
z^OGN!q?)_ZXO>DYycL4_#kVqc9xK>Bs$zZNuq18S%CH#yww1e0rI&hGQ|X_2SyNYu
zwe*%=qB-R9VbVR~fUewwo$yX`eGU?Yw>~`wnL&j$3hX4d6$Xt0yHKCY)t`N{BwG`d
zVrTL7B_b_nclgh12D^}}FI}w9-6dKF@HADQL!eZOo@0fnv3bDs;()5@%eoPwh=S$Z
z20|NWN9Be5<@*}S(q?FV^bMTmR+6<u<wJnZ&}vWA7q#{rtiKjkg|uObRShKU)#{+4
z&#ctR@>Kyz4^+N{8p;21MO=biCIdRKS2!x1Laz@}+{thTGL4P3N3=i?`b>tC)evNE
z&{9Vz2SOBFTPpa^R;Yq%hL#REalXcsmIlJ#k>Ro*&<jCi$S==i1k<|qU{QMzaS@v&
zz23@%B2Dp#GveH8AO?NxzP_OI_fDwvI-73UdlhxY2zNIcQ8Aw1$Rsw}k({(z%wX0q
zni8sVrhAJd9SB(4bWM$EMa$>&S^i_Pe9C<tHjRkiZ>9o<mI#K#$X=>b=!1)7+4LKR
zAGH1TT1W~Q@sU_Y99=qO%Kk`7Gg~8ydc)GF=-aGDb&aWmJ}Bg-b&D+b@%P-ZBKeW<
zwh?yT3G`vLsg%ry%0QFsU~h*Zcncv^VoejRasd;E7@Q|xqOBkRg_am_i(}luaw)`~
z$auHlu%CrMvL>R*aNFHd*ouYXv?#_3OH+#Yx*^tJJ3$AFTzd~9y!V`%(#>MfEe3Bf
zmLsrW(bN%1Ukp-FUG-Z5pI-_V4V~^wzvR(NSk2$EM+%rWBpp3q1f>0?FO@`bd%I&|
z!9pUti%BK*tESd%xrJ!ef@pOks>RT{{3wLAQ@SPkyEM!sqBE|%lIQ#du_my_c&3-i
zb;X>3PJooipA+XRM-*#Z>jN2rfs)SXE;YkG8;x4<AK`~ixxj%RL(&>AU3hLN2j%-|
z!=H!YJ`kvvlX<_vQe$A0^m9!O71CdNftGN*fH!hOANA>xL|WI=iHPnKv<jW1ILrp_
zzu8S|fmhLV9*=oVXsa1(zKY3Kr)xriFP2j4wgTHa%+((2g>^o&wlQORP{&bw@#cPY
zJbb#^W?Y_}WfyCBfC3hX6lhsmXF?j9LqkI2@&eyxW-s@$7CEW;lXDvqJxxuG&E0h@
zn?-m@wtY;>wq~U<c8KpdbBOy{zwZ&OzMN>9EZ;gbcFXD0w~P%9nQ*`oZMwj1J~Rfz
zQ#Y^Q{}EEJNizU)V3mv;x4$mtj1#hyw-G5_oFKx>Pw{o}h744gbTE?vWlDX7ENlW)
z1IIf3Omu+!eiud3eFN}-k=JiG`HR=XnnBWrE0_)8^f$qja`RSWObc5<c($<?O@K8e
z-n=#Vk}6%4!!FW?<?;2<WP+p9id}=+h3KL+?SZ|T2w9CC9=%1>Xw_Hm`|*#_NsRZC
z04s?P1Kq;yBP}$5aQN^bId%cosgxTmi+-)PNj6esmj}UmHc7ye4Z(g+<YKKA@?z-%
z#___%XmWk~;|niLurXLGFA5BMQ(a(R2TlJVWcel%kb1$<xTKWp6=R-jw!(yYR5n8A
zhKX&GVzm`w3m7L!v2;VWpJLw40w44wTh2J)dl6wG;mon3)Os>6#2b2(zVG^IAO_P7
zeM58HEO2V}tco3ebUP0(lPU*PON{Lv0R!~;>I^lg8Fk=>vb<?`O!TP%O%;v2>gVOL
z2Z<;nbA0#ian*+;t#+|>UX`e7sENgPZ(3E8&sSAbn{xG<?vyQP%es?RbXx7Fsjure
zFan?~tFDJ;Ur#;KvMp~u(D6DCkc<PNlHM^y#D!`qi+6Oy5x|GgND;fq*t|NVuU4DS
z_nTH$rZM1Dz{5WH{b;^ozX!;2t|cK8ahVQw3Mw-z&w2$r)+j?Eu5)XHT*irjbyd$|
z20;Pl`^TuEL6`7gBn<85w3@J{5ZEcFKOKH7EJ}AtUoBmP@`l1GZ@tDi-^ro$3@1PC
z%|^q9nP_8UW1|E@G+uh9&n=7jLA27PI|<O8A++Oqu76h9>#>g7l{U7p2)DOkzM`GO
zwMxpM8zxv7&<OqL7i(b`0s9gG5;S49UsP`^J;tw`n(_w^@HLzL6h?Dg*LRmLrh*)B
zfg;g=uBs**r_0Y(%&aTO1WCpDZoV+|k@8z0l&%iFgz=y#e6sV`f;R%88#!P<d|5{%
zG(;2tHW2bdxT_3k&#E$!9|!p=@Zj19)DAeO$ol{qQ_=q@Ql6BB1dpCA&0w8bt7Wy)
z!hqHCcUoApR;=hE2?z}*4HV;6E&P8B0>=()AvC4yQ;MqZsFnJ^fiT8^`z)}|w+ft#
zsp(cPnwoE|08+!r30czz2XxLnSuYRX>|UvD(RxFbxc|diAUG|p)^X6T)p`Z@+k*^o
zm0N}R1beI0s1`LJt5Ggif2~%B!MDm0A)+^eny1&fdI8j#Skwyyarc({Y%Tb1@Q2st
zzp8FC)^%R_^_BlB?f~wPyx>4;YZ54G3pj+9Kyashk4ULiGR|NYQ#PXw7Bwe7=oGbL
zhP|N57^c!sBum1+V#*Xk@NU{Tw6pZDLth>G=GL7<QxEJMoSY0jFvKn>=QOSK30Y>h
zYT7xaZ-W0jd;a{(FP}fpWnVB%(y27)*u%ng=wUAk7beV3IL?5tz!=(5B@V~CJ262@
zKx?YwD+bvxw6GS?9mLkhT80WN!R4$+z^H9a4PYA)ME{5o?#A?2$(QqM;+cN2uOUl8
z0S#GpKFj)O%al8g2K7VOb40>&Yg=MPRKTDMm3Vmuep^~TPcQHjpMw{n%Mh<`SjUb5
znYZlZgX(gPeaUL20e9oQbLz~NEigvt1}=Kspv%hLYFWWs_xaQH%6e~t_Eq*ja$}!6
zDdw@f7IF2J%d_5=H?ZGdWp|{v^QDv3=jUE?zocbXSgAVy`D<^WM09&a1}7O8Yo=FQ
zG+S#{pcV@`PsT0MngpT<giW;96DJ7eO&JR{>rq?OKjLj#ie@DiP)%RXG9WdGk@{M)
z)LOMRHLq{ut!Yn$v4xO<f7nXMib6E!{ALC26fB6~o2%i5<FjUs>Q>NR@&Oe+M;JA$
z5C;_G9>D_y(vFIlpw-Rz-FwpR^3}*_gfCys10*GBm}<xzH%v+Sv}zhj1({(*6k*IC
zU$vmLq1|278jtfut#70$LVLhrzYHlMh0M@cBqZqu+(Hq5NHL(`Q!Ib&xO9S>?q8>U
z?ve?N21#=u*u*d~)5%U*a4%>Vq%@M+tBR-|HK=aqC#|3w4y!?g@`lyw^tm-T?$fuq
zB7IE^&b?PDySKW+>hu{;yyvkiE8|IPqw}y07O^`gB6U`e>&lt}*ML)=V>uc{bOVB0
zIoB%ZUu``w(|GvaX0A8pIGaAiqyC1ga(Hn5(%OZ>f6hz3j;oPfoP9gIwxz0^xAA-m
zYN#DgY9ICtTHUUK3;!n3m4Pr!z+Vbd#N?_$%BT3WcqgAw`!;XEUQ9;+P``m)lxio_
zSzdw{zBAomz;F_fu!j)f@z>0IcP)AW@weN+Ep9-h=mA=rv<5zJ-dEP9mt|8=*X6N4
z@xdZOAYfRcJ0yAROZf^b3PipfxNJ4<Rj*^`V%r6hpc1fMCK8%)ysxis4!`4VxItEJ
z6RTIYXOhtry@}IALf4G8grVteiA3c{=n1144-%`!!^O5W?adY_+{@iHu>f;nZdLoM
z+rS1itdh8?y}r;UiI&#>wllo%-NpH}Ag3i$PxnM~aov>s`}pX%TRGL>i66X=Y@(pY
zMOyxkct4_Nj_TCht=LCgoOfa75uSkfc_l`wS-`!#vF7gURYIBv{mnNi9QNnI64Plg
z$5rPSd5gWhb=_w4q^T8a`g4e+j@9_Hx<9c*WmJary23;dhD)1Mu4G)Zi~n3>O!wIV
zEs_zLAL}u4*n;Y5jft6DRmL?s|DdQ@@i0cKNt4x3JRVX-QEO^nxvjM88;B&U$7oz9
z+=fx&OavGai%PU+FGt7$MHt9ZD6>Oq8?^-C)$XiD%%iI1Ff({a&`^G$mAGb27qIVi
zHTP&*&nxwXyvzrpog>vmxoxV~wkeDH<=Bo*wluH_7ORh*_SKhuLaj%Mnl53fbY1c~
zpYOV4UFn~(n;s38U-D_`o{vjPb&I>QZO3Rw<#aNfB7y#vmS)NAkE$N3rel84Fw*mO
zLeJw(FXJ3p9?*91BE%kXt3{D`EOiV}nABCA#npJr4)dm#F>r2I&{mXs8>WGT9SkAb
z^UoAJxJwtKawuqoEeV>uZJC#=aQJulv~uxrG%Pm;{8Y*gic&pZ+!<(;!=k<`ST8Zv
zHZ;UqsOB@(_*@z5@*dP(!lu{8VKS@$0U$|(?LrF&p9MA$2Uf3%yI=HcEiIa@kE`nV
zKhViQco1^@*Fe|afZo=o2b4a^miqV!d&2T8=pH5L9wOqMe9&7dX8K0NJsk(_z}Udf
z56T5YJ`fN?P{u@{Yqo%~A>S6L3#kIM)f;#Xmm)M(CcUzg!PbOUil9NHyueaKg9?uV
z*`h?Wy;wM{Xv~TPd(**4dqcE2S=@bW^RTA$7H-+p6J>8|jJ75=-f(QNPgC2wZ`srz
z+_6%=^v_sCB^u0R%8)6Vw+$JRf(%$=`F*Y@A_wG1bkl)mm1(&#rYSc^g6ZC1q@Zd$
zpDNtY5KAUUy5D+6Rj>Qt#v5XhWOStOT?bZ*EtuMEsC`JmIxQzIDJyq#y;<mF%?CEc
zqWDC#8n;P~Z^RyzFbJ$q!^*ghn2z!m?bIopZh>2KV;x!QNcJN0n^%afgA!$o|AJaC
zNlGRlVms6fLgMOGrpwLEvd$=?8FvT~;I~!f*25Kd0$iU-$OcoI6&%cv6B$JjgF#W*
z$8RKsF}hP$N`b0r*gNTY?AiM)aLD1B;||CHCu(sB(G8sc5Y5A?LK|T(z?~*+nwQOK
zqav+9&S|u<FoXm&+arwX8oJ1Jh8pTug+$^_e26U?#u;BYGxL_2OxRa<_x#<Z5Bc)y
zbtm6)@;WtV`R2~e{e8LrIH`=Rrj-9}J)(GF1wCA(y_xWFJQWxi85szq`bS1S#q`mm
zBO^z*8f^E(#H((fa=Q6&E!j+8lSXR5B8tSQl3^8?S&16*5Ul{L4VZSANqjXo`847V
z>>brT2lsB7R+i;i7mL`2urDS`qAiM2%oonqhnqsl{t*!Gk$%}(;UBW|B`%75hMzr@
zxzc4QFnns*PTHp!o%Q)pqgHqKM)H1ayt~f!bwv|pR*{Hy`ChJ;QmSQHYTs_`I#`(}
z|B?2EU3v)y0qUu_n||;~<NSMD3Wh;6)F6U-j)<y9W&dNXX5qC2*UQ0l;XXQ7X9*!v
zxdqX<{m|2<u{w`tL5*VUDO_czR(T-H1N$H8w5R;_SaHiWX>3&zU{dx&YqXj7bN2X~
zBMP(3C^jhPs<vwA;l$7yCFje0NdBGZQ%zgRe?vQ_Vl@)1Qq|p5aJ9EM{CXrxmFdTt
z9Z!bZ$|eN2;kR+be!50}_*j)-z%1Ag43+E$s&0f^IW8Zlk`_FT-;--=<NzAejTA*%
z<^v9bxFFHNY{=Om#my4Srz`yAP10&;%ev|xav(pJ$+TlH0FkMoSS%#VbXMUn2{wd%
z?qGR;(Zc6W)*y%Vjd9zKBNR+kCHPSwyZA(eS?ju}LE1B{0L$`0@!<aue+Rw0GEd2a
zoPq3$c?uh!!>zcU%|<TcVEGSiWM89!z}@N!3Lk^;ZAqp@gx2p0pTX+R7p~D{1#<ez
zyCQ3=NZyL%O6F&)Th{y<{qTF$uQz$^{}uRI3zt;)3p0>auhqQ4CaG99X3^fbz)o&g
zA)cp{g;?4~IZi?>@jr-8usEP7{HM7LSRr>!6H#Y<*J$`IUykFhXa%FDYY}^u4;#Bp
z3x%<#t|Mt-E0mNaJ=pvKpV&JD;r!UKCqh2_4Goja=iQIR19m*n02dinb(OIKSJDB1
z6njmR%w^bdO6BG=t059;2!Al#qQphx7Rw2WVkBsYN}#_@<J$PKo-WDnYff=}g6P`{
z{<wC{8k>dSs+;k0>_KJjVqLl$I1BFY?Y_qLkcx8p8IIGR;pY!(I#aLfv3stAn6v7S
zww(SE?+RBZzQs_xH*fA%5z|o%55-1d#b9|}mf^vD4SJI8gezh$(qpgVtHO7-78`#T
z=*%@qi))rIT?=B?2h?*V17L0w<TqE1<XJbZG+|X6lHeJL(_7t!h)WfTu8;)o3Xr5>
zTnqZol(h-i=3g%JJ@CPE*MwWH=o3mnKa5{R!MM2sb#1>BpIZm!@M@k15yy>$xJHk^
zx4y!|JZtdGYhwp%U13t(9z4L&Wd%{>HMXrv50{BtnE{utuAJf0-g~Riv{t}&DQm@6
zqpkW5@roVm*=fr>0PG*(SFS+-R%l3jWs9Ze83k6JUDakOZtm#V+)+$BVG-6vF+7I5
zj?KH^|MW60kgakZgXI^zf}yA-%Tz{|t!Sv1SGPOlIMw;*%7)A8v2THuy;hd31meJ1
zN47v%L3k>bE1N+u`DptltU+4E>T68U?2!#15F7B(?xWo}e<q+BmPa8Y^?ne@xm7%W
zlyBMN4bP=b<0QC_Z<?oO{eE5D@6&a_WBCTT3=-jvY9~T?r)PMkc$pQua}y#vde-xR
z6f2$tPVaLbYM0SRgP!BM5ZtZ(JQv6dn{%MedPGg+0MIs$R}1|7PHZlKKi*P{UYQ>3
zk_l%+BYI$r<Fvai=D4o+M?#522!AB0dOYawWUX&!TeW9sp6>=zZEC9-4rpOD)@8PO
zFVPRJwJZ5^=c{dOWSFXLOnuERqwnFCwJJ+eJX_(_+~&4EzsaxA#x*my)>d9Uf&YYi
zCS1|UwUO6?Hp0jLO?)7DH?QG!M3?awv&wY2{O#6iJq6C771FGFvI0!?Fn-nc<_@ld
zxH`$>D=NvjxO<1fOf55ybr{NO%l%iYC~@B)%smy-d}ATc4f&#Ms^}jf$qrI96aQBa
zn}wTZkoex^rA25ef99nnA<f*s`AL4_26mU1uLwEzyq8vmgxKPxO`%IX=cQp45HES@
zpb(Mzy>v*>q+7joSZI)b&r8Qp=5M`p9A$nD&n}a}$bq#KaX@JXh+pTWMf|nhk9cVb
zcEvAwX;~<+oR?OFz3d?`tqOhYXI|PA4vCw*v`^>}zv88XLQXQgbV#tJ>%4SWC`fmD
z=@`oVXD=N`nV*8n&0<Z_gTg$lAID%tTSS~#8&*=c<GKsaPVt;=!u`<p7I1%(w7wm)
za}Um+ICgw7)pn#kwQKg&Vrtv{(+jgF@$70ZrJx2;mGh`z8mXIcJ|>)opgM^>p}LaP
zaBA25^mOXx>0_s7Ch>4p*-HL@>|3Oe^?-p5;@o%5FLw|3^bht>nXB}~|D8q+0)T!F
z0!2enuV4Ku_o1`q(f=nn9Gg(Ox(V%qFgV!X)7Q5l)mGDw_f5|)oR~eeDdn~U<;tI^
z9nj&*xOA`XYpTy1+hH1%?n>t$0JhLT5@sBR4|4(OlYno5W6T^<bCuyu0dm?u_!P=4
zpgdvOB<`kgT}1vY(BNK_Sww#b2aZpt?w>xKUr3$A-@#7J&CU@Pq)r@}J(XIRUQA7%
zno2Fs&d%I>ViBbYWf$?O1(>jV@&73Q%p$6<M%f<z`I9KVxHz}4skiqi+BNCoY|oKd
zJSg`}3Mz2*o3%r{9-jU`ji2j%V`VP<zX7Kpx<vKL|A2L8y?;+5lL;a?pTuMka2TkW
z&d8MQV;1uxKr+CBEX2Yr!lKv_0eexh1gm59tbrx5e2!cpDb|9uf*IDzvMk5)tc|s^
z4y+IBV%>0~^s+wI&j#2a8)Cy)d|hN4*hc)7@Da8dn+($mnK8DFZD%{!PIevJ#ja<&
z*$wPQ;oWQx{vP>FY#-at#@XxG&FmI-fZfUtveyfbvP0|*>^62gyMx`y?qYYd2{y?N
zvm<PZO|zry7(32RuzT3OY=)g=r`Rl;V{c^hY=JGZ)9gNWKYM^Z$R1*EVh^)7v$rr>
zZ1Y>}ZS3vr40{KAC;M&o2zwWMl)alh#@@poXTQVFvM1P+?04BY_Ip@DfxikrzbG#(
zPR`4x7pCWxBltV;_v$kz78biFXBOq7Gn2>k!?UyZo}8S&S2=NV^4PRIJ#}KyT0C)b
zdZGKsiTNWl)7FvW(?{<0ZUS#SJ-x7q8SULm(+^G?_;oMLOfDR^j!e!>pPHJSr`k0j
z^~vc|i|WzYnW^b{pL^+^otr*o961iSx(`pz>t3M+gMjQlJ~?w#nVCL0d&+lYo*?Ny
zGC4mb9iN&C9>=8Xo|`>!YO$LW{y<g6%=FPkf7Sizx$37=v-h8pkAPvw3zPRvs|#;D
zJvl$EPoKJPdIrE4GsH#?pPo4^AD*6>(T~qA%$-=Aobk=goL=a53#)EVC<`Y~%uFjs
z=TV__a{9P_@AQL*X91vIZZ}?<e6ZYaCr_NJ)ZlfZTb;Fl=A+9vAk<BBlM4$Wv~+sW
z%j_nY12s9P=fXAjyc6W307$13^|-Nk{PfAg3*D#Zd|ryGkrqy$l26Xgo~r!<^_e*}
ziyr2qtRFsoVrJ^Zsbg+!b5lnRUhVy}^HU~IO+RpCdM3b=bF=qP&-1ZxA92jFTrlR3
z96xd2w3|P9dg{cio4oJD)by-d<&oK`Y4rNhX$<74W4^h`x#{_Cblj<F_2}uv!?QES
zsp<O{c(zGH;^I~axVtbt1%#L*{KK2p?BRQ+k1Tc{o1Z;BXL~oNPw`tHko3sC4|boL
zU7RMYKQ(O}pFKT)3|P8ga7>xUOfX%XApl(TSvYcHVPSTD!N(uWoOlR>>lRv=LwRcj
z$EN4Km!~I>O#92@k7k@+uq$^Q16FSNtXjF{^GZ57Ip^~x0ga(GH;I|*4GLN@JLjc2
z)Igkjr~PHr<#WlJoSK@SURda+d0e@nY2%|QUmo5QQ<!d3$EGzT=waag6Q_V3-6tm>
zIC1jCL(`S}6Q}sS?L9};i?j37#=@!D`#~=5oi-NdG1CcDl@I%Zab)Ji9G?cU$$3l-
zdgOhTqw(5YLcRE!vK*l!YqC$zNyny7+8_zj4|X3u0d$~V@}T25VU@cN*t}r!Iogfq
z_bQXXg$I?X6AwM~pmr1kb9@@8Op}*)oOWy;4LC9_<9bS`6V+_+#Np}5lYvUAd*S}+
z$weQ(=M;6pO=ALs9EEtko9<o&!Cf%j91t`w$#dOz7H3Z#J3SrdCEPSkc~ldu&LZ$#
zNGK)W3#>Hg)Xf3oDSFV&p;2ZgPaivO@-r`Bxk<NPFQ3;4n$>+66Ybt0rRHa6W-yJq
zLB1EXg-PJW{DV4O30$uq>3jOZ>G`?&6ARPI;t3FC;?C^K6>w~Z6m0+!$B*tL;SX?y
bMX1cpc?scf@6G-KdBTf-{AinZ?ft(1jXHOb

literal 0
HcmV?d00001

diff --git a/web/css/fonts/awesome5/fa-regular-400.woff b/web/css/fonts/awesome5/fa-regular-400.woff
new file mode 100644
index 0000000000000000000000000000000000000000..24de566a5c97289a86ce0c238a195da0d3251263
GIT binary patch
literal 16800
zcmZ5{V~{9K%<kH@ZQHia+O}=mwr$(CZS$;o*514Cck$z<>Y465lccMrGSxMmiJP35
z7yux^uL$M?!2UOe&;UvU!TdM-|3yqp`40d9Aj2<@{R^DfaxMjN5mB*UPUcs~`yWsN
z<jX11GyQVbzxsc?zF?vfwvmm2{V&)4i){b^;LWl8@kcWQr(X^@`PT;GKm7av0GnBR
znErCv006ANac%oWHfuJ_O$>|y066~s+A#lu4Fgm4(EOJK0N}*<)$xBp0>TQkU~c2=
z{>yRv>a_p>K*~t<0M6ESM*rEJ{jSUQAI<=$#B2=Qf7j(E_&>e`02cstwgxsPzns9Y
z9})lns22A+9iF|NlQRGSuQC7th$H|2c-5zcV3&Kgk-omZF+gC}MkT-CV~vLnmb@lD
zfK)tK-*5Qei2pq~v|j-IYQO*)zaz;1Xup^Ld=0#(I06Dv0s<Do7-Iqg25_bPOyZ5r
z4fOR5^-WCsp@0^(l`ydQ>b-df-1mO~!FWfRVF(2b#Nu&^P>&P|O8WaD0K8b?*xa*M
z7H6cB9T33p_V{d}=9-v|5PA+Mc_ic!bhum?&S9g^c3S&|&np<HhG)j}gU>)?BExBb
z(G8~PEHDlP36-hlbxCL_yo;jkO>@5_@iwmottP&JBf(5V>8B5zFpOkkGcJLUp-LTg
zK`2?WhGfm^kxOU)W~OxeKe$8I?F;G7Ty_Lcy;7+CbKsk3(H?v94ybcLW_P0IKjQly
z*4sF}%}xwy)P^#yNgfy5pxQDH!-*eKq*p8X^L|{?ourVFY>}a$)@EKI_LQGHpRT(+
z^{$?GrgXiC=Tn0Jn05Oq>bo5G5j62>tmU|V(~!buO24tiX1irmcHQ7}-pq(I+jujh
zE;rNE3bMNEv0CD%E^X2!avYzXHrl_LW3q#y?gqMQq{(b`{c3W(8W8QGm)bI#+rVxe
z<@2~DWg)eI60?NSQ-;1Qjq4njc@D?A@TXH2);VNWfp(-k^H~WKb%{$;xT-uHO^FY2
zb|3vS`iLWvm?OHb0T+4Qzl<?dMLpoS9oy{?Y<h^HcpqG55CmpG%N+uKpN}LT)mD%=
zJA}9%GgTCf=$}N%%XZf#s%KO;4*Ruim(or6#{#Y+_^I!aUxj?_guk#XL-tirAIv-W
z6Y_^Iv(j&>0RFxUK<?QkKG4ZHYA*Uc@7-#BwKo^FwHN2V;y35#`OdxQ&GN3ET9d%i
zIx6%XXJY_q6vV*h9y5T<FbpVcT;vihoC*juCY>!}r49s!1gK#TfdDSS7B)o2_19?~
zht0v?8U~uzYp?3!<{~#YLGo{IrDvUPPv=YT$Ib1I+R5uop3OIG+`?EpL)sBXvIs}G
zy(!k80?#5_?x^t!wJ6YX8d<`?8UthY`87vIue%pv<bpl?W}}XOA7i68ZJ~}6MiJI*
z4m26qodgi(KChic5vM{0r$}R}VNR3l>5i0dl`=5!CQZT|sU9l#oC<$AVow9J<{p^O
zqO_x@>R-SUjE*ea)ePXN&@Q}QJw4LxWR^S^?O)?du-#xGC?9Zd8I%V5bwX`<8`Llr
zo)eXBHMG6wC{GK*;z!V<m*hlnj{5;w(L4^D751;i2M@&g9J`)c+cetx%=Y-;c6&S!
z2mG`_cDYAWIO+6S!{S4l&SeY$RW4H+b!xd=ED5s)Heh(+3Oq~YYtn40;s?;SYYKN_
zj3BEz3`k>Hfl@4=o~2aRQ)F(C8dLE3>O0^2FEUa#Hc~d6#;_cy6Y39Rj0)z(c(fox
zs5V|hR5t$xH8n$$+uxr+pP4*j#@Y+orXLO7VZqcv4_TdE788Y7!li`y^D&6vzn&b$
z`91uL^ZES#;P>SpT$A*a+N+Ca5X|$)-nICC`+8K>R~YWAxxA%DWUU42;KaP^9d<GY
z-enp`?SN_v>q_Jv?SV4aYb`2`@|ywqRKS##51f?Zvy3T<h8D2NvYOtn@v?WDJrj-e
za*DxQSi)ex9mUuw>C1ol^u_xl*5zkDL`ug4F2_D+*bEiNA7vML?kS`9gp2w-{MAc*
zM2lh6|0KN)!7lv|I5ZTI?8ZK^JOt3SzeT=kHHXBpx?J?EUfi+<ty!6}C?%q&!NJSG
z@4LCjElx;CB!aZaH2XBF=xs?(mocrIxx=clQ%3I0TIkQPUL-bgMZuAX0)*$Hga|Uk
zh>T#oBty$YPqI{rFM_nkU4hHKAZq)3iC+T4qF1n8J}R}tKcfA-!5RERCkVQ%k|r}s
z$*iigKLRmsb&9&BIR!3kr5d)Drw!II(Mnd!VTfN*&)9`Jm}3(h_u({gJOoqZ3tTMi
z!&t@p$LI_)s8CB&a5gV{QZ=sB+1zcfJq%^Y3{9mSVAHf|kGTGeCX>TQ<1%ZNux^dS
z>1X4u5{%(k35I|tUPZCF5)qbJkb{X7rS1pf=GVeAdAs_g?x=`OD0u9*TVFgIA3vie
zOx<4T*|HHtzTG3NR6GmY?P{-{4`oz&^|t=x(+*Ch%^z<)AQeZ!yn|2EegA46=;hX%
zivlgM7#EtsJ^nUzog6M77SeDxHnx}dOWshq$jy#@u>O;BmS{_X<dpkFKrciiiG>E|
zng+;FOEyD&6B7-nJ>4az-tDq;Iu0cIi7nh7*KNPk)d*mG=(9@Ix)27O+CRrwlmuq>
zO|YYZlHtLk`-A1&+8iu^E=lD&NVb?P^0&Tns*wl=gjGo`JW<}>x1!$cR=`xBVChe`
z8#g5}iBSZC<U$R?01^+~Ibop{R0L9s?iY@ax&K1M{SVSzALKUwOnY7+U^Zw|n{E}_
zCDL6=Kw}0aMw_J(B38U(4`T>ZI*CVe=5E)^NsnQ_{US*?8K}Wk1@@_)ACVwE-`8?n
zoi9h8-|Oel+xiN7Ari|rH!4(Ovk^$~mH=AyHk(KF=xp29L&Dcb9L@%R1N)R@Ru%)e
zZ^(HXAVwFITl^6Tx8*>%39~3j|3JCQWUNTV2}6dmwXp<ZBtayAHq078fxIop6<NPd
zm~^7ZXOOzGC}vdOYp`1Y$)CLKDZRN^Gw`r7D;0EKuXY6ZQ~cgcm7UjR^{&wb|3WUF
zH=El-pU>P0uY+5j2~q7}G3JSZ$8X{pX?dqDsj|Rx1T{Cy>>&z1aIU{BFP^bh#>}*|
zCaheQgcq;16KreWY_NHEnZm4XV^Wvet)R@Xi8MNV{Dqgq@0q<{=Y?vPkO@dAs|R()
zq*61ml?rUzXq`7X2QTHfn_oV4MPZelx+Q)QC&=d2Z)xdA>_2&BO2pa&S?mm>&dXQ~
z()#73Zcw5F-hmD^w*i2@_uO)P9&3-wyH&!Sli;|D!rKwx_}<S0h|(!ffAfz~=D|>6
zDhOlP9}YHx$iHuC<F*~AdMDF!>I*AT2|B5twHo<>8uJ``^`?P3LKTWrLA~g#-a|e=
zfTfNO)ei13G^NyS8fsZG>2(5!NbO{C1AUA1@ln%VL^RrV8k7p^CdCa_gCOw5N36kE
z7lYwRkp@tW>OE4QI~qWgt!l3r!4zPAb{D%CxY`!IPZOk>8(hYGh`W27*M9hpq7O<=
zN}gO~@6Q_z_N#%nsk*mX#!q;zcmS8_%&2)y%%D*Pu-QDZ3SOidX*M43(yptjw$%Eh
zQ{0+R!Wn$}=4<tmO8oN8TwkR=?&xmi4QGe}n+J3I)DugB9?@_(0{%^)_LFPW&f)@g
zC-SU!;#HwQ(~T`t4lxwOizrav$|Ihb<%WVF)yRV=06C)DDw;Y%Erqv9hzM8WZFA?z
z(B;H}#&q}y>cnIs!{@4VA#;CToET8E)xWH2?fF_Up`nO!N8(A)&E%h3O);;*4bw1N
zMj6^KV89U2Dv&%u>Qa!gP;>9DyGi>9b@=u&5+C}oUvIIe;6|1}5RN{|v$2;=e2$|c
zD`G}v0;cG%+J|pGQj8emr^UU~yh$Z%{-Zc%-=Vc^zO}%S$GLQ<Uk*7VJ^)^p0PpC1
zdzhJfAbK~-U(>z8I^&EGh};6B(+?~Y_{kq6Y8{YsxBzWeU=YE!U6;2@Lr0wM5$XY8
z1@p0ln#?C&$cwQ6Oh^-LX?NFmbtR$SdZJ}zbs1!#etHW6R|FEnN)9w4PPyNf4^3rv
zSHaXtlJ5t3IO+|J=HpgvJN_KMx(XNxB%AEUm~UO~CgZ8Kgn+I920y(-MV5*Tm*h$?
z5M}l+Zcz|D26jB+3j|P#*f^K&rzX6MR@@G@8UT`ho#7&94%UA*nYjm&60eaOGK=Nz
zwc<mm2WEIta#jp{@`03TL-B3%l?dAtrMkgeSpaK3m*_yk!yY0a;Qt5dJxLD1iOwds
zCnnei>)>IFG`exib1fJZp6Q-%vN$3^i#y|CDmcZnj~xjedyjQhJ}!^D{kc?hhAghP
z1kxKZOq}qF==vFp_sI&iSO@yFC-1C-$>Wte8A1G*`%=_6nbc=;!*yf2_6}-ff@5Gf
zG_T~r82f1m9IR$k3im7>(n<oyij*&jDqG75{3Dvg(@aB0^gg7rb}ZbNl>x~i$vkGX
zAk<P}e$q}w5l|vP0t7B9Usy^M`s8k2J)Or;sBk14gj|S~$U@C(9vdTC2whn_4yNd5
zsvc@k@Gdhd!v&}_0~4bxW~}rBzLRW(2z*L(aGqV;LurYjz+_-DW58*BIt<;7s!LFz
zpP%2G<*MKAY6$*=yiJRvRwU7>7%YWhHkvDpa&0{23v4hmu0X>AB}(N?V;*1=_MNZO
zqfm5c9yw=Pn2HOUcvooVIBP6>cibSa4IdSWsX}ohqC|r3_2f>*r6Qaf{-$kOio$9e
zT#$mQqZ2-wS~HMbB1x!{jq!;9NrAyTgYddF9bI}_I+TFJM#QK=gjLD{U<qTQ>_cWG
zvLZx~P6Q459hlxUbYGv*LKa>Oma9+lc;|MV5Xt?G7|Mwy)GCb29m%3SG;s{79|(pK
z!t7r#9{!i5ver+or?*`6n*Oz}F+86%L+H`W>vfMcsUgbMs{6116)Z+X7Gld!IBF*t
z%uZ590G=nN1S1MQIOwuI%Y0Z!^|3lUxP#8?oc&k_Hs@>shoXsM6&+N*yy*q>c-?3J
zlSxy`K2fQyeFF@vK<pwu3vg;aa{s<yVX~m9mTUTf?zr~=E)A>UC?qaznjSs7>H<82
ze46$yq)3ou{tQn|#6zUUSh#2O(3>Gg(7xHt;q$<>ne8oy<;QdF+xSU0fDn^3Ws-|9
z*3O7T4HO>?Ped*=(rTm`%D|h(R6Bf-KsT0>(Z6EL?T~+NZ%FX7r&};pZ^#HKGNyD5
z&_x~LWBUf%pIo{_dd$m7k5CR&@NqOAj=1`}0D7cQzNVnoX7HAIc31J%%}51&AI{Jz
zXxX&4JI~!rV726}E>j$xz25{Uaab3iD;PtsI$@P7!YkAn)NyD!_BwC2#;Te01|;{N
z3rdv+<!0vk$01ZUebd^W?0g4<SdZ3IHbziqI8C%V47U1$Slv30qrY=(dQoD#9$xA5
z@@sX;UPax%R{D3vR{b%CrcwX}%czy>=Cvkrq%ih|xWo=rTiU|d8$qA`h;bueV9|iz
z`mNm73Rr(|MB!G5;kYti+fI>TjjIHOge*~5k#ahk!FW(XX25Vz9cnxn`qITU&@E9<
zh6mCC`b5&d0b&wLb~Scl(8Oq|_zO2EdnNMP1!xD{0Zm`8#zPU3l8YiykX38Bcnx5Z
zknl0(aBEf4l#UR4NknNp4p+`-nrVm6jfk6O++yRT4RhnW!*zLlR(c)FPY@azlBieU
z^mOQtP0;{8KjSrb-Hxp&K9_Gr^gv!8`n9^sbz_+(Wd~RQ5CZa55N=s`*n<<hsjrGz
z`Z<T9r;(;z`<o04_~i%1oOB>3p$>yeUChyxZG7D}nS#6@e9T>eWCq;SpfAalajpO6
zS64|uj6Ta<@fC=k7lUE8*D*BkqoIs%Q?h`X5_3J3y$S9U$6Eixhj(gouminaaJnl$
zP(0^I+@PahP`edbdW75~Y0GfKV5L6x-qK=e%As5ySJVToE~WX@aAN4lp8?_l&Z+G}
zn>CtV?3kmaX&N+|Ax+o3kQC;v!Xf~q>G8Os+2-gPwoJ{93(`RzTj%xJF{7(#bXuY1
zNuD}CqmASfI^7DdW!Z~(zI^v}wu)9Amb%7UpIExI{)P=K&R1ZuT=X!_IW=$7ITULH
z0fg^hWnVIBF3nq3x;xET{X}m1E4!-lSy&h1d+%Ka>f+o}0ll<}Privnd;#_0JmSQY
z^$hx$_)<Oe*+t9SEOgcCMivE8?VC-B)?ev%b$`^$-kr4JcWW{R(i+H<%f}z{mLIa@
z=GylaD>0_uEqMZrw$T!$4ya4_98%THt4;eBH3jFw)-OBRzB{7YzdIgV=eI?15&?7M
zX_Gy$4&Ny0+HDr<uXu8NU;sw6hTh88FrmAS<5`LWUtN!@9t}x9KlFUpy<)zVF1B@Y
zTaAr#qC2uP(39&0{Zh64(E;z!w<Iq9+Ro7Tr`oK`$|CDhuQl)5P|iEt0_g;~0DpWY
znWjkE@d1*zV92g!ufk)1x5%ZgyI0ug*179jjqB6%=oCVCt(&Az%T4R)Tlcif*Ex&r
z=GH?8{=7y#o?I==AlP%vP#Pm<6a5@-XD2e2aV;*OoAgQ)l@r?Q?Qn_9%mK2}s@ycY
z(9~%MkylOb(OTR&uU1c9NK-~!g@4E=ie$V>lrX>B9Ao&|p-S%CBKovFRPOnf<o0Iu
z3IFVU$ERf5F33A*Z|x(BeUCdx8^l=&KUOx&<1nfdp15o3UBk*Y|E+estL8CNsCgld
z3-EOe#r$Xk?^E}YTwsdHjkg7wl2_0U6G8?``_Y+WX)ku3LX0^SVssQmGZ{;^$1Gx`
z1lh$T;8>><;OVu|AlvE0bkw9K7b9bu)T*TFBzwBU>3s21ov=|tgcAiH4>tzhoN84|
zp1*KPRUJW=0je;X5y%Io_`;9`RXQdUIE?&MY|&JHJtcBuhM&jnCYm4%xaePxD0g0c
z5Y@rLDJTsR({7<Z9aUiUy|v6C)Ui$j?J1Bx`cgVj*agd>1SCK**xs<qz#HC1nC&8M
zx7^}vN12Yy=-$4XaMb$ZoW&yFi*r&Hn0&Psr^~3$@gd9ZMtO42N{Xj1xT@EsnsM}P
z{4uvbOV|g~wzOcxZd%~wR{i#>+vxzk!M4c}?#lc3?9}b;$Bk2so1W*$ZD}_seW|fH
zclU=-l^M##$4QotGv>BI?ZVR>eIUK@K>Ew8AdS0DG?c}X%hG(0m~^o34pV8Wo=63A
zWkY~1VB3jOEjNJeOwZJma(kfgkaJmAuhjLlf^A@x2U{|^c(|FBP(|XcPm>M^`m|R|
zgyK6h*H;5@qql!G*5wot=wDE>I5nMyPY-;Fs!?y~(i2T=yL>M8ks3#Kg$~IhWpCH$
z8hMi~1t@^v+Qxsj$&sNfh0AzU?}I8zLaCwbp!LvGt=M%)S`C$U3Gv3nWr_$wgMU$%
zO7$(L_j-k6VJidqSU5Bk92*cn>=7(T%)@432qhyh8WD*gz2sNGZYckzDeKty#%=)O
z%aS_{MKl0TDaJ_bmk0zGH%7L5b!s|g2NdG+W8tV6g(5=VMwV-;ryNrYlklT>_14E3
z*IHpB`EFmbs1AH4IShBBbn<}rS<98%BC5D5HSGd2MbtP$l$Y$P_Q)6Wy8{GG$)wHh
zi|>qD7KHYiBs+1IFmZAeLu*QsTCT^ipGBf&cRC`CGjT^*Q!aOJz|L&fh7Mpa%gcjR
zr`?BmfwAy16NSNSL{EOs?+qVjR30r?E_I38#331q#M4$WF=k8W8n9rk4n`s>i3b(H
zY^b^OX{8CPO;(zK5Oodic5(pu;u}y`hw;Qfx;MBS%Wz+oOah%KcO{<>z}?3f2BAnU
z5VAm)9-w#@0sNrA&0!ldVDvbWFx19rWB!R8<*AYuO5r<DS&7Ag+*7aF#dw~b%Trh9
zXt1AA=HgBH?&YhE)5U}Z+mhP^7vJI9%&_Rp;nlX{_eJLY*#f#gie<SD+9ZIBzLnGW
zwxRk%Vj7fcAa9O==PfM&Mh7yPpW@gPP!Y6EL2z12p4Ux%B4R_zl-*~8SS)ih{ofZM
zk3y%d`BTEZy7BqMEe~bn1|n;B`c_lnk<PyfCeMEZX81TWAvYbh-B`%)<4joG4yY|X
zML4i6!5bmHjW8zMgIAF@CK-G5j`^d|7$=*=$GHm*r74+yv&zdq+w8nOc38ZV&GTdF
zQjVn-I@D@rmt2=m+f|%&jX7mkUEjw%=2FRceVlv8i2Osb<ZVx}3z2h-wz@*deC+Oj
z_7=#$VO)eW!?f*Q`|{y#aCheS(b|ExSDaDJ&1exF(3c_T(9$cE^EIpqII_7K&=i2#
znb5S=Ah#(EJ8hFiVr*EZ=9E`(FyL0Bg1G4agj55dIR+MA0H@3)=Hu{B5(`SmRvPf$
z`J=>OA^K{mEPG4hf&KI9CjsP6O{WqK^d82*hD*dwFvbGTW1@*>j?47!p8x}mt`FB_
zOUMIT(}i;jtAJQLq(&=EKrf?O6hKKTAuz$MC)g-S5?~g{x3T}xl^E{k>aSu<A<rZT
z_An7R4)G_vYc#Ip!H^F`lJ@{7wDRiKLy1st*HH)^{iDHIOrdGC+8^0TMgS=MWb^2q
zwF$rGlQz-<qnPBcGHp-WDbWQTL+9zQWrF>;S2#R<rL><2mk5ZzJPSx0!C|rnF(up(
z(pamQ?#z9FC(?z61uX2qIaxPM{0is!(}f?;#r9t#&J-DrPQ#!+Kzl<anARh%_!fb^
zL?2NCYC|c=N<7Zr2$UshMp}e<!>y)$@VtcwVNH&Fg9z~@qz>XU46Os)f`+)Mfvs6=
ztBL}fewl^h`lLpjkD~+;Ly`tw>(f+C+BH3?`Bs7fEqh1;1=jcq3%aox|5fc1Re^7n
z!VNJNEn@pny_yB+24SvM?CrTs*s)SbfqudkC=96dO?jpLN&nb<+?p~)=?WBH@2NPc
z#0=Mx<w;}%LIikN80m!M8d*58Wc_vdR7HvuO}PfY3A$}4+GU}FlT9^UR4gcTqqY*o
zTPO<>f&DTcu9W+YGP>(B!BL&qXXOGDtx?4ARto7k9cSjy($*vNJ77o1OsSM{$pHl+
zWztfuRJ6U^iLAN6$tgq&)nq4(sWs%N@*wq?n^;T7X?8vO*5ilcld8*{_f=+1z%3j7
zZ!bfQ;?gNI;~d;p&?oH1>YNqhj?5R$3&-3co9_aT8PWX<k4%RJeMy>()EB&v!`N!!
zjnW*WQ+HX+s&c^t$>=|VD8V|xS48W>9A8m2(@p;p(ur8yLvWYwK*(~Q-SmNcU2u=M
z2n~Y&&Fj6G6`gF(LDYHcBAzMmfyp5rdPM?zb3caxwyq)Q^TG}N6$K;h+NL-xJQYr(
zT=Jh1G)j}*AzXJ9kSko8Cb95!f4_3B(e~wT65i!yQH~M|vR(Nx4AC$x#nE3|WBeHT
zxA(l+*b;tnf`5<nj(m4!#NbyUE(apB4lwT>18R8_#Hr;>lqfu-9n6PJAN5dJa$f1^
zx{dK?Ckx?d?(c&i<C=EY$CjqDFAT3;anei}4lJ~iQ)zm=n)IgkUDvTbT+dO-#2gjk
zmz8qf{tUitZ-10P90GfPi9c{@`AeAfRp};bxhH^)WO<ByaYtzgQ3Mc0y1#W5B&`2@
zXaiVCBI((!V%xSV1)i6&e@;~!-e!%of^xT`eqp9wx^Cw^{VDWCiZpxNSS?NAXO$cM
z2J+ab!u~VA#CaP|!B|7l50>Is>BIB=U|gl@=Y_>bjcSXjoZe1%vwKU@o>C7L5+!Z_
z)oHS8_R0)4&P#Rg(RPgwk>@@pB%01xu>xh(>ygoZ&uaLb)MH&uv)00Rd|j@Y;DPD5
zB=$u+3xYOO$b88OmZm=Ac$XTUJ+mm?h1p{+zGm1dUAfq%AmJJD_GdIrU-v|T@&kC`
zE5N$nofamhM>MHbS08-i5f3*|k?pthL(^wnVO?OgT<2REQjWQ(+leTZY$mDmDt46N
z%m9tjVqf$z$_^<_0Ie=&xSzb5iptLj`MSl|Qq&ASh5_imMkK{#%Hx7*d4u--T60XN
z!QKjYgB=+zOMx|&M;lkmTzXL;`9oAzJp3pV_)i~WbAg*`8&;^L*qG91*0uW})5YyW
zVC9d$cV1Ta`_o*uROSgKb7B?DAfNm)JNq}&8w<S9V~*0qPM`_!$g~Nu$Ad;4+KS4e
z3|*Z-F9i!$CsERG)fA9}@ulkv-8q!-krFs4q7CHY-GjKh9=vUWJuDYl8#3Rh(CKfs
z0Q!5LWqLqw=%9?g*NeMW;2^sw4vrQE>PUU05J9%MP*IC_i-t(nJ2p&Ha^Z$Tm2z?_
zA%OKw4H!|T_p|xI;B6IUPGeI+1x=+uTo$q1qdNztrGYec%^UnXkU$wZ(JRhYRP!B4
zq5Ms$pg$DYw2fj{gsYG&)hJszE?oI@ob$Q0iv@Y}`U`|T9toxz9c$*0aMBfI>R4xn
zP$;O|!G7|%Mc4$Y=LgKEtENvT&CL^Uxeq$b)Fl(qv83f;epy%U30&qXuHiYnUI$l=
zvMVf2McX`$Uj(9Xz`U`*yt-3gR4;fpYZk?fn*~y>!YP_-F4zN7;_4#QzLt=8<O9Np
zuTJZ@&&kq}P_NnYc`ucp^wsS-syMeAy%&Za5rp22L9S(oNFzT)qCZGIBXF0LEK}Y}
z?S6@?DhJ;sF|$XEuG^XkQZ|m$-op0p)VP{wkM?+;d*(fPY$e8Jf4mvN=uI=)ye%50
zBhaumBsQz-K`opY)St|Bs_E(LSlH<T#P~&t!*mG-EWe+bpjg@aHO)^60PyudU>Sst
z!`YQIG^6}D%XA|iPnus9nbwnO1W(a>qHYb-O^h&#9@5E5^jow38oGT;HT{*=6I5BP
zPeN~)y@whdfIBsRmq+Rdg0wTnQ7nPHr0W78U5CX2223}%1mx1n&83U#f08@zJkueT
z$DgUg@4aOBobTYZlOfw{A6tR{zC7-_)wQi%FtW;tntgzGD%#dCRe@ntYfE`#rbn&Z
z|6)Q;ve5_j8Y|`QupfJ-(bpq$$OCFZ)G9H^<WV)i{5S*d_?m3Tfc)e^5QNy#&7Qee
zJH8_2ZvBwwsYMV<t|6yEq{MTxZR#bDlRkqjh)D1<T2PY8yg*V&70`c}UvtU0sJ#m2
z;WFfmMSN}Y5)KfEFNsYL5HOE72?~xDFmKjz!&eZYnJj8Ps4aHM!BmSt<vXqgwf**f
zi1U~0gW&P>2@|7fmRV!La<<Bn#=Rr7Oe+yr3%G$}q0pd;;p+4=my&`i{a!15KZ&=7
zFQKlui)7Wtg%JmEDij$M0Iv=mq9SWHP7+j5i+CNa3vlEjiy^~zxN<WW+wa?qkyrN9
z@)Vi<=i$NfbsFb?0Y{@`owv%W^7F^@$;0yr)bk0@^XX3x1t?8;WGw%^>CzlFK6uux
zDViThs<p8O#v-7V6Cx}#c5a~{xorZO{2CxLfz%W$!Fodv8B4A8$NemK2#q!|9dlu*
z%)#Hg*VjARu~5V3tNEiN<~Fm?Y<A?geZgEmC;1NE@=YYf;5hC|G{jf<N~kyIaR#Bh
zQgsplabCf?eIgaP3Joi7U+oC<rY1(4)>Lzm$UXb}MFKscAfY?#%;oqe!RS;J>Pli?
z*=6TyI2eY>)`{x{|H)5~wzZk*nbk;8Hum(bGtPLHh3P+DL69&UjNAU=?vWHz(U@W^
zUWs|p+FYcOaUAECH@kQEWn}}C)F?%Ei+KbACvL|Q`}9O?5fS=&J62rx!~y-dp>JBk
z9bs^&ugytSsijMeNwVztda<E>@V=S^OgOrVFdK{}6%-?Z4bPjb(}DCsyL>a=l4)9R
z(<ty)qe@G08}7EA-bJ~=0mjnAlDid2o&_!P>gKn4BhFvdE(c<Pup*3^M^jH=?`ko7
zHQKDtn#JVE4##BG2Gop5$YMwo*CNmk3-KUc9Kk^i<t%t8*TEbFF!#cNIS7hE+Sy=p
z!Z_$ihEh0@Qk*J?RhmFm>|mpR9yec6#HJ3)t3S<+*%tyQA#oa#3(OUJRh5vB0trS(
z>ro`qUC3E5kdgtD`q)qi3z)$myT_u(3-(|@_>f6d?~FpNyU9p22Eds)B~he0(bnY7
zOl<)$uus~sv1J|G{86+|@wQx3l|pNVc+xPwos)G^%kJxYR+n>6tlx4|Ja15QTw_tC
zYeOqmD*AOhuBG$2m%3gBDQ|hw8g2|63)U%sOvtnNNfiQb2PT~a4G=<zi4rswg_1|?
z)rktp$>GK^j55H3&}66N<55Hdr-s1T_QQbQC0td=>|8^U<d_fs9f&lfw`)dLY-Xu2
zR`bz<?@d2cIY$c4K}9T9Q9%6Bm|mQssrvHqe4{6jsMRTYu>aFv2te*S16MGw8D8{J
ztmA2B5z1QG)O-k6fjwPRETi!V@jb~R8^#}Wbp;34NzKL7U;YwfSe#HkW7!a#f=`AB
zS{#%@>k_3(1>pQAdnf`zSIAvH4Lk7}R!V0Wk=P2~m}PRCkNNv`zFMp}V7x)Ae3*+e
zT@J7Kw{BCI>a56*fpRrJ1{xsI`g<4(Xz0lM0kRQ!fkr>p%2R3FWyGrxwLZcG+Z8~%
zbbPYx0SJ90LQxW~jAEj}<9Z6w$4wd{9JC`Vi{_7b2V2FG`qU^=TeUuDt_eFXz2h+-
zr2ls7cl_qaea#?D{m#@P;C$=s`VnJ{|H!(OmbYOrmX5C)V*+TGwbh7h4d0Nn1aAYs
z09^a_sKy<*7-n1i!>87%{1$o6W<}-LLq}aIBj>1Q;o}uwcd@oh&8kO<$MRG0Z<0CR
zb@KFlHXO@0j|ks1f)}~YEP|K2RN`ym!}yp%`d@~3PS)YjVQH<cY!E5$$+apd1?=Ap
zd>TH`eLA96!Q?=ajMxY))FcVAiA-<EszfT@lEFSRenJSHk`wZ^EP6he(D#xs#7%jL
zha+{hw@d<>D?unhc4w)sti3#;i4%UAqQ4@@C1qKAw`T^iHG8pdJn&GcPOO?1KFg;4
z_V6UC&hRkaxH{43Q2(6lP(^%VbPJsBo?WQqXRqO{5kPflhO^QRL$us|P;W{PLr%b?
z8gv}f!kP3`dwBA1c;|eWL>_n%jTe<}5^0E`C>PxN53ElcwaUGngH+w{-*5U(JQX*y
zbJ>g1zIJ>YmvE`x^*#H4kUGKYC+dn^=BbaincT=<xbi(iLi4ONWS*oGYRm%plS~X(
zs@pH!w52y!chsqN^ux}|sLoaa$4tFscKS3^H+=hb(W>lbjLTAZ`jdW|QNpj#{<i0`
z5=(L)PIInNMi$WYRG>J1uQFz>VKj&5Cg1HyxjRZUxOcTfLz+9#IArCj3VVo3j@Cbp
z{|zLl27BsZ8c<lAXZ^DTTqgR@<>p8_OPd5iUP&-yScnW?qclaE62-E&7z~9Jpz%v(
z7$q>07k%bF>XKZA5kV4>6+Pij<ua<9Esi#WKzpH|Q0?icP~C9O<zrenKWWudmDqe;
zo{C&_49u%dogz>ngVDWn3UrtjqKZgInx(k9Ys6m^$EIwWjUe0^bwlvSy7QpsZoEcF
zJuZ`N2c;-1L<!074=OB{>^LLX!Xsp^=NhGkP4Kp9B_D(SutIskq@adHu(=W@_+vgA
zf)K1|>G8>2Isl<7gO55yC73#wqdX+kSf-x&{b#R&_=*c@Dt~w|*>|E8nM)huPD}q~
zk_afZJ`q3+N#O(+emX&<pPfv?d73Z_&?;0<^V|+6qOz|rZ_0j6wBh168q^Nt@+Rj8
z<<z3f^I9a`{8>Or9Sc359<BewS2Gd?*|0kU20HSHf1si?fnb_8=PjL0dtl2O(azvM
z!vMZVhd;5yOpVzQqQ)`Ti1x?E@z>U+m+WC@y8FIw>D)qFs3?0Uoz$qWip(qMQKA}r
zTVI!Hs~!f_Owx`Lp?WVBa<*=x_{_F{W`(rgS)pnv2s|>sM_M!5@hd8l^^Ef}G)$|i
zVaY6gZ$GWAsWNb|a&ZLScqDQ@&l2P3jzdVD6MY;`NVLqpV#({JKy_6V7}a#Re1E>i
z(kfL{j=e9FoMFmkb8h8+AWD94J}!jNZpS&Pqi1#N+dL|aOtyU9P7KY;;9>tLm<n1!
zC6W1@O|SZRdnY}#o0jk|quS-QK<hP|y%}d+qIve<B#GhnFVxazFB+fO9H0{fV7MN@
zM^S&R8^;uEL|9q3Z-{E$RV-Zhojcy%P*BBq?!K4$eTvJxm^Xd5qpas;C!79DV8Im-
z2qm2;h_aXQ;I{5EN))DPv;0UW=}%-|QeZpNDvD3bL<ek)>IeQhilgss4^1`ahGWdT
zq`sStoA0>~ujyJe@xHi_dr+{mXsrp(Kve?`5nmy5seYdK=30v^0mb^TK-sDE+-fw5
zY_f%aV67{>UiM_OTlPup-P0+8TqF^G!5wy}V$kUv4kVZoQxN1q3sOHV3Of-1wA}O$
z6c)h*u%U?Tf*19G1&2IIA%d%a#*}eKq*8;!)f~XmUfiJzo$fqj49Jy#oWIG<Wtmx9
z3UBt2V~^r;pK44>Fz(!n+qW83J<X@q!A~zlwxfbuD<qt)i`6;e&2{N7FP@|57TX6M
z$HQ(y6cA#;lhF%u5#Rp)cq+B1Yi>%7cKFIiVxKypPJ8*&E<xQrZ~7wpK15WQm02<O
zhiZB>qQCih&hT&OEq+mci1q+-;o6$1y$nBT7!2cs_G<$J{Wg(zg@;83tE|TdtLl0h
zP9{2rQ)h@yWB_ZomASbDfMD}tx4h$)>-BGmV7mecPmSqkiJiUBdJa>1D6V)bZAEiV
z+17_Gs=3K}@eHZIR~8Vm0;A~T4t8d2J>!q7>k(k9nNw)#LUzKj@QgGiSw4dJ1BPE<
zL!|22IXQ;uD%o163-uPpyZL1Ws$X`V>A~FNzk>4Ds8&9IG{!1E_$}$ON60r+1U;8j
z?GFIFrM!jni=dUJhF~se##G*|Zfu<X?Ap`q;z`>N?xq!F^X48|dL=)&x0oNZ{=s#6
zqw{2%yu|wMzO9R&%Gy12=UdQ^?y4J~0h-ei8J2BzA?m#3UKP`w0*loh<FdAo$4ei1
z?>g*oT3=DqD!qZ#Yi^I%<mR1P(Y2}0?5N!~8xJ*V;$S-;;mL=~?k_MDaeBnz>pP_#
z+}U@B?^b-6SmLa{^-p5oJ~Mg_{T5P<RkX3i^8x$0_Nq5j%1i$_9ZFNl62WZ45sP>+
zw4QKLchQHiKspvb2s;!AuEr|Q{5QK5dX>J`Q-P;tU~sCo9aBDeQS_3BU=}}dlm(aI
z>@+E>tG$kx82lf1qo9Y?&I&ov{;^sIHGzh&8RmVpR?y@cbU<}f3=KPGbIwN5szFgK
zszQ5Woth$yrY1bl9%}>~6b}sqP`t;-#80M`jJ|v>=KeIW2Np_whB&tSauNOv$E6&?
zw_=*g!10Grf2?^xAieU5P2%~snKZUD;H&+QTwtB5J*=^_O%=86gD&HpRsWBJo`=_)
z5Kz$u6HwX48Va2fU9ACW`)~fQO;1v+C|jSO@fM>oi`k>qTY%2fLF#v|Meg*S1Aacg
zja$;5zgtJ=-@V>%@Dwgv`^%#{Eh@8rJ6-eHE<oY)z;==ZCS*Gz3?JOp<eRMcEwO&k
zf-H9?p((;uYVxV|S??0u+terDo=ee=dtl-g)YVf-LBAy%tF<oB+Lda<+D!D!=kQi|
z$3JK?+YrPSDwVcIT;1A~P(1YU`LS;MsE=&*VrazHpI3<dNk~ypvo0bFp%$IgRgjRB
zLrHVdBbpbR3Y_hica|-;td%aYDW;a}`ZEw!!XZm7=|p7&RgE?6q@XxnS<?Ej`y8HQ
zCTm_hw8)rld?PBmGzzb5E6TgbtMrhso{q*IG<buD3~(0D7yNvDrDMFlT-S<k2cKHD
znss(-AH;bca*u1BZy#tI>B$#$TD9I9#>B1XYF5=;Julj};G-d=_p;1<jRGpplV~pM
zPO1zh-Y&J+q5Lvhx<fk>kY#+htJ_@kX12Dl!`p6*a<7<k={~#OR?)1udMF+S|6UkQ
zmaR9tqi4yBpQ4kX$eUI&O94pkFyvm22WBw`Mbd!;1=h~nA%MJJiPkwmZ|lyZsX2(Z
zt8}uTH+n5~^@)!*s?&5WmN&#r%qs?+486{#Flo61({}Cfxtg{z>QS;4#;ZqDm`Rl^
zYP@nYBNeq;S%2hQZv>CvC~{Pf7#BtlqY%Xn8(!<l#8M8~6R(QjJViA(&T!qRAzu=_
zLGix2{Zq_1>vlF~(Zxq}&x!8+Lc~|xAut0`nU&E1)lv=VSHS<&@kY|$W5O-FZx;-)
zYuL@dpB|7^tC&YOO+A1_=pzuVutIZ|vpb{mF`<53!%M)pqW3qPGQOf6yR{WHq7rUc
z7n-AL;i40tBRYd=I8-Bw0s7!DDKivD^2;C~u@Z|HY2<-|kjh7p4=#f|Yy#CAfg9!@
zK;D59R+A($Tx$I@{XoLGN!j}EooY*o6;6Fe;DxP0StfIcqB+6A&2>e~ADveQtJc<_
ztDm7DPuze~aK(^w&2p6t@cm@?4uw$Z2dfTUH1vRC$h{^6>e-&VL@8PJcFzXlcxQ~#
zrrG@=OgD-yF<;q~z#*hmCjrC!J1NDDVii!3IHN)iA`$;6;&a?W>OzJnyD*q57Y}W_
zix0}>;gsRw0nR^fZNzEmrtQSsGZ34iAGXq{p^ISd9_>Q1H_dM0S_jAdS${mfxE)Z|
zc^V?4aOB5r0s=SLLz+ccN*%rbh0Xa%obUP71)rZTbfiGvzm-X-8zBrF9wcm-fgT@b
z1T+{n<PO5%NobAiOcyVA-&HR+tU_hrnM%<|%RmeL5>88RJ;RM3pWvK@@h@t$+IK7-
zij4UmeQ?(txJhDSM|mp9P<cb}i1BJD?>MqoJf3%=vW6TKr|p&Pr)|u5To<gZG7Odr
zSbc%imup9&{e(L9?P&XW@@3TgJWr#K(Q@ap!jG84K^A!RdrVVJwJU>MILn;aTAMrT
zogd!_0$!xd*<hlgpjG=qhqFiT7>T8)qpmWV$5cXU^evZ_bE$~^g^8msGocUe>#U#R
zd$>9RR7sT-HM?@EKoHbQH98s5;e3n+*E%>O5h&?!i8V2yjC1+o*olC$3pH3V<cN-m
zF#Lhn$hfOcDlAELrxHD_YZk8}DO>;DDx^mDF|=aY^DAdO@5Y0b9R+AzgQpAgPB#ma
zu77s_JR26iMY?{bu07iNiHyH*+l%;U77kzM4%!JMHVEKPd{mKwIm8+{cxWaioTY)#
z)ECxj@$1@=_b07ol;c@w2H+_TX{aT=DTbxRH3Z`k3P~%LB7M`$otz#(ztsTzI`<Mi
zV?PGq-2bq{OD5xpqWc(fN25H6A*Ect0crd_hx-dufREOy#bPLDmk<>~yEr!{@`=di
z%7r`H)nfmA)3%cXYX#i4>t*#&q=~5KFt>Hn0fg>+ef8Glw^fLboRXj``NsbaITD5Y
zY`^D5>+>W<rJkEb4X(uO<kT1ScZB=&<Yv1lU)aiuzKg}g@u9%BA!9>93~8SzQ(?c!
zphUAFsSwp!Y0rSHVP|_89AuJ)fd5#cxd%+~wsC90T0QC>$nLHiVP){mox_66^u!<a
z#8jlLh+pIsdb;<ucn@VGTb|_4666BwAH~rlQKxX2?aruL->XiS{&})$b?D=C)`G8f
zyOPI4xA3kT{!qR3=Tf+o+~Kb?@GO>D`Y1{Y7%E{@D)~93f(ywFKm1jSZk2sc*6bHt
z`ZPGQ-`YTjf-Tr5ODA`R&*0`QhTUoXCwTa?G6CL!j+~~_fdS#q0`2Z}n6KnLp-zkQ
z+{$PqPOM5B2dCfbEn%^rEJ%iRMsbFcw%cd^?x91O^r-FIp`=SOs*pWmUjXCDlFs5I
zW?%k_kpbpify9Iq$5^}j3ONmLTwflpz?d`o43W*hHX}sKg@o!VxGK7(MrQS3$pZAv
z)VlX9m~peljRlfHo<UO<%Sa+#!{MWOef5uceB+s%YC^C}Z0n(V;UEa3019CJE^{7*
z!^UZ31nWpVk+)js*qUCE;5Q_-c@HeWOf9}ulr|28G{O4a9l<Y5gv!qR3*~t*ZBFca
zqrq$cM&&#HsiK6|V_L{s8Q#+|>sKb{*SYVpB)o5a@Xw`bMc&b!KQGi*{<@@;ESkZH
zRJkA55jqtn!*rcf`p$TpS4)p7c3;i$pepK4N5?5lRM-Bmf^lvhyv7x_B3CAC)@NXb
zp>b7##PRjEWFmrauzu=CWmWpwd3;~(6%!=oOdsC&jNIny1A@6=X`9Rb%qngI(IzS-
z2TY{J255Xs;KT_7cjAK<6DKK0oydo85)ua``_m8xyRYXJkc9cLW$FA2KU-G4>7b|A
zCDmq~M%m7Komm{vO>0rD`9sZ9AM~%w^WqQ~OlmTiN^1TYOAq`u9Y5fFHcr|DNe>T6
z>Kj;9#vdVG2aqrI<S{u6K|?hp-2HB~S=f7W@EWS(Hj%ftAdFOimmR5qCOtH~(XExS
z&hlpign;)Y4X9xfT9}P;0;rpKqq6gUjmLk+!QL7c|Iy9fLbR=`+U0N9rg^{LY_cuy
zFqC}^;oPivoT1teC;e-Mdng=m)63<SuPrK8=V{*_qBunBy++2oF;nP3x@^&^DWRL#
zj9rP(eUaB`=+nzyMXv)H+k<9P!_HsVLX<Xq+TCI^otTS@nTca%l1&E>nGQ=EH6IZy
z({XUf@;^T94lON-BI==y>@<;Wx`E4(Rr`8V-CyK?wy0e+nrcOM=%(?im$kfkFW-AD
z2yEW1y6F0|A#MgZtl@t2Hz&#d(-?uelbn$F9{|L76EBxvf=}a^@SUD(o&1!M$x9E)
z=N<;eE37A-7nNRtG+4u3x*sB;cRw`GQ7xm4BdBfV9+X5;Ph$UHA8LekL;OKQLF>Pt
zMo)*{fW}QY0}Vg`&1)}D6K)3C*yAvdByMsOXrnxsKu|Pqe8L?>Q_P6WXw1Y~Ci*`d
zT665eQ6MkDo1LLW>&QA{J$p!BXR7E_^6PhF>*ZZ5F*4nk)J3<~Pl;FFZqqe=y_7c$
zPF+UFzOR09H8R28jQ6(lC+q8dCRy!P(sXmr8DqZupjvzjSI{eR1$dS>@Xp?eFD}}N
zsNeIxkQF3ecB;uGyW?MJpSj{Ar|!wMwdfiIdFU$IpFhfP^%?)W@6K3X|IzdiGK;}Q
zkf(1(4a}Ad456L1P8wM1^2hJNk6elSNRl8e2#^LAz|tDl_kVizetmfEetQyum4<%U
z1sZbzDFT7W0081n!61L{$0!WI4l=+v-(SR$Upk|R{o|2Y2#J3e0bw{@m&An%lpr5V
ztFp>te&a+oNlY~3Di*zE0mPzg5bb8&&F9>ep?}F26p7W`$4{~1$@s=i;lFODtZC<N
z7CX%{eST4o6Q0A49cuf;W-F7>JT`2aq<u$vKmU=2K7r*khf7{}y4tbI$m@PvIz3$A
zuG8oYwb+*2iQ>_s-I0F0!(X57-LmVf8j(8%&B@l<`RyqCzajwO4KNJw3TO-13wQ`b
z1r!W43k(8m2wV+<1yTsI4+;Y+0on>i1ttqN4UPqF2!04*2yqCh3)v0@2gL;y4s{02
z1w9Lc0mB9p2s00h0(%072PX>`4mS!f0v`-NhyZ}VhhU4)iO7N2ibR2Aid2j=i!6gY
ziz0$jjtYP(gW8LRgJzBP7o85>8hso?1fvw=5z`d&4l5mN5*r0u6Z;Cs9OnX81a})R
z86N}R6u+AQh`^Mfoe+Xhf-siwcSk0=B9<ZUC4nO`Cs`)>Bt;>WB@-YkCWj!GB@ZU=
zB)_8|qp+lyq$HyBr`)EJp&F)Uq4uW!q>-R0rbVDlrvsxirU#=BWuRinWW-}^W`bg}
zWx8RGWnN|BU`b@TV8vsNX9HkUXB%Y)Vb}kExsyIp9~uw`2$Jrfo&ZR40&w!%h)NOy
znE9IrEs27*O9CjNKMhN&HYJs`mV&_}{X~CA4%eY#E3YbrRISUQ41p6bWs$2Q#v03F
zCSliy5IF##Q)$*6K;Z%qzy%IH?j;~Cse{dFX1tjnPQPy3!25Ck!2l)g**K?zR=Uqz
z=>y`Y>ue*_If1JDOZ0$a{g>f^*OuKiE!}?GZJ;~)=al<_%C;Tw0Sj%rZ2Gdi(=LNu
z;vvK%iG_b$M;XoHsozzxF+Vnsfm?lm+Y}xCUqVM<Y&qlHL4*4U54@hYk?x>V*;F^o
z+}m(>WM<cRcPQ!$;sY1g&2O?TcAM>z%&1)n5f5QHlAIX<07q~cvY6j2Xjr<rGK2~V
zULww{uWV@KK7xy_9)(_=FOTOmP(6mv(tRX}m`k4wA6v$a^2suYh<LsBgu|H7t4ZBd
zd`~bG4)HfHefd3DE>?sA*kFB8=VTS2H}n2@3bmX=T0`@-UTgJjA19AyuSTdi*W7vp
zgP~f1=ib^)y+<EcOh$>6>2OXgaKJNJA;=Q5&`0(k4>tasH2?T?(wf+r6aZT*FiMWF
z%$NjD?^fxVkhtJ!SxKHwQW0t5E?S%GCEcX6gx>4><^NU3wMKO;h9+jtNeN|&aG`=W
zF;2#lDtfx(U@WGqt0t@p)Rm6PC6>jQA$hF+3jaH5EZVlhRj9o{l7@b{u;+Ui#drSG
zo2RCiWp(yI-bM9R@n6o^D4V$*u^}vHlVl|uPdy*gbv*87?0Vhyynv9Xk;oDV0_U4>
z_K>@sUkiV0`pN+LH(T?I-$HI{_)iTOg5?n7{(QXT%|^`re0{h2Imhlpbe<K&k<t(g
zgad~Dmh`JIj9@R<`xUYSj5uPM9nfU=t+Rui9PnnxK-&?}4-B;fr5!No#!%al)DA4Q
zgRBq_xU}Q2?TKv%XWBvA4%xP2x$Vhs26x)QUk>@U<G}9-@CJw6LE;V>d1A@$NOCW-
zN0;2e<_<Y|;?VDibO)#0LF*1#yLUN5*zd@82e;h8Zx4C9<KX)dhy|erK`<TdvxiZD
zK&2#<*MkE?1!HKZ>ti@w?+Ez@$6i754w=1U>F-E;2iIP~_71td<CHjJ@b8Fy2j^Zv
z`wrPZWBKpMzb{UQlg}-Nl<QWD-y`BDe*c}w3Wr?Ef=C5zNL~u8u*gHFDZ(q+j)tL^
z5QkKY$X7^IVzL=<Zz8j4r_tIj;S71kw-|8dlS<ELGMQA-lQmY5w@4*ZEG`b6Ax=b1
zF-X+XRhU+ur&}x_#ypmhc@KorfI~h`7lBl=V3%8J$xg9QmekFZ_(#Kj<O3;)+|&ra
zw(`B9JUgjNROKPpM60=&#j1oN-yu4f2pLj^wnlU_LLw3`t>Z8>T#wWen>ivqWBSp#
z@0v}aRj(zFCu4ypEzPjL)8-Q~<MyF?=crI%V+h^6!`IT^QemiBx0RD<k(B%JDo|R>
z2B*IlygQ5pwY|@Um)T8cXp;uFHJ);Q(Rqccm<ryv@5v@nVzB|{Fe5rSRb8Q4k~9y_
zT(KAsXU<K?Xlr^Loor{ze4N5;X<klps<r%ABgb(gSc`{rBU#4yqLa_Ti=xS3go+w^
zt35H5tR<oZLORnT53ilrqPfMkrHZm8usr+wDvKC1uXtD_BhjU0GqCf~-dr?O=2U?a
zmUATy<)l$Hqo!E64%Q@x!Cd*UcX?c#T-&PRah`a<?dpIn%GqQs?pfKSgVq1{cn*4p
zd!d>xUacSRv34^^7ilL@WoQ-T21XpUN!A8_<VHx<=1N2BK*qvEt#enJIJGpgIW{{E
zy??{>jHb`4o2SK9npyLtA`fTI-C_k1)jA8^I}9y74X>_sU6ol;p<J4?Y3+Xn>;M!0
z#gsy$>}fcvOa9n(m<V2Z8ysWGTEk7XU-kMsoORMWekkh&ee_VeuDTf&tM*Euc@%Ri
z2iK*Ro!7)@w|!R4df+`8+4*UoSuM=_Dc{+dFHh{j<YcAn%<CJsoGH73gnIT_25#^k
z@<B|j7%!qo&xo0!$NomuO>CWHm9V}qj*OkwgC=7Zq0ct&7+GdDZS0HNSJ(EZ9Q}rg
zi+WS5%FqoBF(0{!hD~3vI?D%s^b1B!*wk(FzM{ReqSzX3y5=G!g|Ie??DegeHM6=<
f^T0hF-L{XeT%c=JDXyt+xV@DB10tt^kN^Mx@BjzA

literal 0
HcmV?d00001

diff --git a/web/css/fonts/awesome5/fa-regular-400.woff2 b/web/css/fonts/awesome5/fa-regular-400.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..7e0118e526eb53511cb57e7cfaf515784fee4345
GIT binary patch
literal 13584
zcmV+rHSfxIPew8T0RR9105uQ*4FCWD0EH|705rA%O9Bi400000000000000000000
z0000#Mn+Uk92y=5U;u|&5eN!_-9Uk@N&z+kBm;z03xYNP1Rw>9TL+IT8yRaC#xYae
z4xrTj=RL^&|34)`jUj`_9q62HRTU@G3g7X=Vg1b6uhqq7u2e{@>ogp;1Gm5-a0ndb
zsz<sU@;O2ckut49<wnO|?N|83oqoHTHj~o#Tc(~<5`MYy@mL}*vK2<FrOKh88HB&f
zvT$$g8{LNb8Almz+2itATU<ZgCE*OrCVwOc8%hcP&+m_K?Q`GzFh^1XOTI%?t1607
z3Q0<H0zLr(W(Mb7^)IbS&7lEIv)?;sl>Dw81qS5!`3YCJ0$ph2KdxyZy?beXaxZw$
zb^xFVm7EhZa?(t?&6iXAncv$?dlNWuVZoRbcDX<xY1*GlQ}6#iEx-Ghu9_>^R?D_!
zTY*yQu*)D=;&0Uy{d=*ymjN^Nn0a_g!*-Y6r7M|)RY0_Km&y`gX#iCi081MlgfV7A
zd~|GxbgN0*P1&TAEJ-942rVI(1O!V0q4WfjP-<uiiXMnSKvb|nupD4HM0g3Fp7m^}
zDBwM3D-=CT!_u$ewN3=IL&L#E5Owo+C}nustpY_n49*LA#6j>6w)?wi)0-QSq|~Q$
zF<Cb-&zvXt0viDBjqb9hEp4@WV}5>o9}%MD41`OdYyQ<)wJ@_GChes%)f?06@AX@h
z`u|J9Uta<XEZef2fJqo95oW-w=Sc#405kJ24ih%yM6l->PsHAkQ+p|;qThGzb<GuR
zYOiRU(=kP&-LoqMa8-7+gUneC%N9Gdh+qXJvJxPy492c^KkgPFfH#%90O0LTc3Gr9
zv|Jug0Spm11W4k#JCNwJ4w8cAXd^Hke8zvPwiS#taJWYcs;TRV-;&?aEf46|GnSAL
zqft5sG|6HxggUs_o)a$r->Z|@P2e(-3;+WO&z?)=%K0%lA674|Ti(*zzV&~ey%(cq
z|G)kF_Fp6(_z2MuLmWw@kwHG?w6dAcxXKv!dC52Y#^*87RP!vb)@5#RlY<U9;uoIt
zmXG~@u%no~*)unnv7hb3GIO@9jrFys6P@l{SAHiUbK|UoH(7Td{PIE3LaCU^ql|TQ
zy&Te6YrNIE{Sq5DJh}5(Cl4w66B}#p<97FX73}f<j`ZAd$g@x#@a+8G_HCUXtzEv%
zm75biTOFd{GU($f!0MgXUV7o7ubgl|rxli|=3r-IVFW9ZOe1Z*>27yA+@TJ3puO#=
zt5q#7A@9#h{+>PJjHh?Mk(*?u^Z)u&w_eoKx?4B-;_o78Q8mh}tVts>KKzGgbiir`
zOrgnP=O#C!-ajMlFTFiZRuZu;r>TwB1@1^Q#eNTE(z++o0dvIpv0>n8&>&rQd=Lf$
zBQbHrgsW?`Qh{M{NlK2!5jTVE@Hj28Vmaa{b|N{vj0?W2IhuIH(T%1e5|YM*Vm|N&
zj@Jc&I1SD;00yrxT-q4=d1`RjmK0#`b4a7<HY+!i@Dd8{OCSVERh6O~@@yc*gklwK
z{W5oAn|9Xd0g<8<aJ{V$+QH2huBNnX8XZ&tDD;7Dch6PP-OI9ECV^z0ClD3v22o^n
z1NJ_GimS5kfJQ_4_JpaHQ^E5+oMZQpKua$eA1QozP(M_)0}J08)?KN`Nik3dUzplP
z%my7?AROgZ@u;2Vhm@)Ix(0>aTvUA=fPh^}*PTT4r=;+1JJk}+{nbMwdsTJxW$!m1
zR=YPh>(7v~a|f*Sasx#GChdXTQnOi`N*Wl2cd$8NtvfzY$b4bS-e&@p+#szILI$OO
z#TQC?AxuF`NBqW2zG}*CutrIiGER_UL;!ru!19%mQ6&@i=B#U?=|WZRa?Yz1vp4iZ
zb|L#K)(N$%8Umk!{UGA#d`4MQ=#;EQ4sAkg{8pOa9LBAPxJpAJPn%jRgd}-fd_gb-
z9RnvZfc3tQ);8a6Xj4&GFqo@Zoj6(7i#GHUGjKL`!ovD|4C2D9T{OA=ZR3n$nAKL!
zGU}Z)vBbGNAs+2B&3-;D!!QkEmS_aBTd1%D4GGpg`oM&Ejd&OFKH^JI!q`b@WXJAH
z`xSlT{P=>y`(3`LiQ^0HVM|1_;Bi4FR|>35+hCy6Gzjn$dIm1w5sC*eB4^M{;8h#i
zEw|$YDVSK5lqvD2Kz8OSVvM*Oj4b>#1#I3x1ldNr&jyq(R%F8OzRGIw#O1=ujH@@u
zV6}{E2Gw6`C)eGC_ZD>ni3LnB3`$-_Fs!pxK4XyQ)<8Zh+i%NqK#LpNwsF)j$k0Zi
z6pjqaYHBDQJ`$&1J9;?w84&uhqx%d>^~kZ>A`gfE41=Svq1(A)FwOD>1eoLLv|IH$
zr~s|O^QA5iF%V6}I#aNB-NAYlmLAe4h0r-x4?>f}+*ZPp(!?JKM^7m1GiX9$%=wJb
zDEgcOio#6Mz7Y{Ly2Mh4Pwr@m!SuGJ#LaB1Tq$}VMZuBfYlBsBe4OStJbZvHTnmk_
zTGLt{MWj~G0<uXRXM=e?ESteUWv7)G*lbn_wT~|-dBm-%NJ0F>7^9|3Z#?}P!mO^M
zz=mR~lJW=h*$L_&v~NO4J#qp%wWBCMr&m%&#T)OU&JQ{Ts)t(x@;&qahb%lORry6F
z4sjaj+=momXE8V#Sgx@hU<%K9o2$Hnc(9HbuN2zTBB;TtdC^=+v?7XtQ`rVCjHQ^5
zDSm!9fOx%=+m{rE+h1Yj^VvpLX#FK1_D-A{{A2t7xeF<F`po(B;mh#u-5b}H`u+Kf
zX?gDKrAx`1<iUf9uI`)Oe5QW){@swjs^>49PgUmfvO7T^ycp~ymo8q4t4z5bE@rGL
z^h?Pu`7Lc!-#x1YRnojHXa(80Htl5dn)GFZ(in6i{kQQN>Pcf!e*%{DC)4Vfx7;hB
z(yAk$lrx3XFVP-c!5KzH_4lU3bPxu*9QOjOXMkeT0HT8&;}D3Iic%?zWI$tT3Wwg2
zo+i&}p(9*oa|-bW#|-fTt6d#cc@eg8&_v(_YMdH!!?Wh~(#|rWsnRC<@qL@lsI01<
z$Dt$-n=3p0qE<r$M!`Zx@;hQhIzzj1ni>UhwOgEc1+v2{INMp~BX#Huz>X%GRB8~7
zwwOws4q^-BP9wW}jfUDNPW53gfrjm(sfZg&gt@2bzJ@j--tGcuO1dnACTMe+KrVMH
zz>dzEmmjr0VTvkkqz@~&>FV6q??FS{k1DHM8P=Y}!kWR!ZvTkYE8H@ttKh}AH9b_-
z-s2P+;evPV$hnc|T_LoM0(pwA>o~Qlff7EVt~$*U8z#b6^)J1$U%IcIhz3r_ZQ1R#
zDZJvVg=xyP+q{A0%K-kmb#jq?G*~N7mATEP=xFiUA<AurI14aW&^z!rjASdzldnu$
zDTZhSY-X2J$kDHD8;6MXg20Mf?{l!sV;!w@8<P@e*iD6~k}d^_hi4Z=P|C{0vq<%|
zReo|&I06L}KX>!F^Dsuz3IZ(&w~2$$fvSf!bfCPVmcrITz|XlObgJ9SYP|g16&Ze<
zAY(fl$9957Fz~Vsk4?(fcBUb;0Uaq<y=-TyA9PIJBx#sUZ9B5QstoD#s&doaDm>Xx
z=V(~2m;Krb=@wp5SX1k`1y&a|eNRmKT~nuUB!0~r`b=kXsvk+{deHNrSHI#&s9!T>
zRnq|s3Io)&1Gg1}i4QM)_4jg66Z+ePVA<Fuypb@)%$p2An>tJ;8jAeeMDAnjF|=<V
z?Y`>Mf$11x)A+tFfp}6pPAtIduThgDz=7IXuT{B5-EQ8L`ZNe-Ls9CPFE&{XG?ZmK
z``|64qZ6q|Vw|h}L#;LutO?F=Who!-5~4tHo>h~x!Zr{He^_prmcPteB1?pr7C2ng
z2#;ZWDjH%6wX{R{4sL-sQok8_IFmY4sEj;BbP?leG}Q;B9!oH;%S+>U;3BE+Ut$b7
zHPjoFEZ545nrNaaRM<$Xg*?&deYPdf{RV<dRp2FZ^O|z(q9$%@1D<at!J^pxOWKR8
zzjfF?W)D+;@2jEZtoB_lLCz2*thrk%k5u^dB*axXH0;cNv#PM1wYlQ<ZyhTXI@omb
zhpbwVHMh+b_Sr)Gc4{86h+#P~mkcx<aT^`jbLQPydze9|f|YHIp3byx0@1GSt-@^h
z?}_Xxu##0_43VsBmcht=r<q7zkK+GFz~Udwa$7}o&YpGWouSrKf9=m!HGSKbF2*%?
z@JACf_W;`+POX1u@YZ>&&Zgx=A75O}J}_+Q=`G^gRaH91jNa@&ZOUebH*{<<9Tw-{
zHF}_i+S2}p4}T<av8H($G9&_2he+3tYTIxj65U5quG~zS+#^1y6f{ugf~8+C)fL_<
ziHnFz!#@X9*g<yPA;w8CcZ~>nRCeyvR0MICU2q5|RDs)i0Q8;PYUHHl&FKLrWS*<Z
zD=oyaG=Y(@Lh3^Z;W7pw=}YQ!ZKiD;k$(@lw{S3}qY2Mf+jfC9Yn6A4Wdmf_wWH&D
zLY93BwWEtSn77l;mDPn%bIo>ee2(P>v+Z?qW&YOzg}(0hrFG27DZ1|H!@WsEdVq7(
z9Cub8zVe<m?XEuZWREdouQ+z~!?OP@b-a>E7>Mem*E`Vq=Ec0Z?Gtn8q)FP_qU9(w
zt|P`)oRFFD;};oHA78f7Ft(7}dsl-4#Co{-ZSxR3+-6zpFKjU%?OU}K-T#*Ios|jm
zi;^NsfDdg7&98c+6lJ)%Xb-{;L@=3L4+;+oe4legVRJ~JdDIhlvy9NB=~I)QcMjh9
zPTa!U;M38Qy5wN(iyR*_<!-fB9Lmfh#t?U2U~S;Q&ZBh@2Pw@htU<|#wame!5zsHT
z6~2Z@q9Tv!e+WDp>^tJamMNp0!=#eaq$bDqMY;7I1!2Wdvbo1xPw#{X_8iF3Bhp0<
zv_Mz~9d?%VB}!=>#7(ZYXi2!FbrPZy`0`ysPsFG*aSSE_@CwrsOSgtShfv&&M@rq1
zzM~EW2SFzb^O%&Y<Q$$RHY*PB(d<Asa__Li)l*T5Ldgf{AHej3DU#57!Xdx~^AvjF
zyBmS*l)>g91cz^$aD-;fL&J-Y&n0UDTJ-Ok5Y4*KrZiVc;yPNWX{uT@+r<t^6Iu4>
z62o;(t68;6`QYOuZrAL1vci7`CQ`kQ>r0E5NHAurCa#|8-cF0LG;-&i9`3B>)oV|(
z=AAv}6v!UQ7!37TI+4(zS)#4!Z8cMsELTk~Wml@34tfVrqQ7i|ko5xLMoU_L!^W13
zw$+Lg5dGd#A&6<?P&@S=%N=RW6aaD%Gk>`XD8}g!xwA=-f#_NdVlepF5-3RiRM4Mj
z_r0B#fse(v-b!{2*{LfAYwE<aL3S0<Y-wU$iarA{?VzYv?xiU#1@zM8?lX{zRGC!l
z1C={QkIsR*MStRCKszo8RHJcJooZIu$>zEW15ZabYYc7ISxWxIC?U#9>*@%IT+3sP
zX^}H>e~PQPT%%6OM!I<mCU8<$pjl{m`TPT{<_9T+Xd+JwwnVqX5?d}L8a|WK7A01;
zFZ(5a|IBu5OOg#XFhdbsI>54lrbfU9QdS`3&b&mP{8zW&F~QBjuzV;#rE_7on?<fd
z^FEC4Ed#MoF;i~^$B~GR>3XbL-=5BJr~CihE1l`*{uXEdkbI)@yz99ZVtDTlScs|(
zP2BUZ&HgnRFE2GqX<ct>olAq8kjv1HQc=gddU_4lR~5NVpzjIfEV9Q|xj(k(rE*0v
zxf(^!E;mY3lkXAf%dMVj+Tc9iP@@wlr^N@|j%d1d)<Rzm_Lc{?vbge8VRfgcfL1|D
zh=W2;OZAybH%fRZHR$qCFSlW`Stet20l;AW^1nJRFP*cEvQT<hSe!m?BIjl^^m^%;
zc;J-%5k?}{bpKX{95E%`hsHjsm;9{j%S(4wTyDKBcd#aC7cYXz$;ttVRfHw_Jr9Fp
z4q`SnN<`vPFee0Ujw-E&Z<xv*uH70+LCA*Ef+ApEP>D~ed~26*#_S-WSr*v6bqsK5
z(e+8wgrgsW2L}6b3w_z@P*|IE;!hkgx|FI(EaP@JseigwQP(WhV|2+?(}a7vqu6GW
zL4IsI3@VWqH&+&~3j}Umt3S>PW=+*)66vf=`KVNQ`$>mu`?NKohDXxJT#&0<tO6dG
zk@G|q8_G0wC<k_JYk^kKP8R;;0<2c<xsk(oij%&yN2pa7zb({dPb@%7o50$aowRY>
zx`m44*W_Id-9H~TMwB!eZjlQEnsy<A(Ta1c6)-7o5g`6B^A!vNxOESR%~_^l+dgBi
z_Fu2{z*nfl*9Pv<0j`E=;jWqp`k&c069T!hQYs1qRFz}ttAesfDQvj%)%y~19+q(y
zB{~OI^vbJhnOe`VxD`56YYD{9WK1hM_0M(0rcE;525cjAs*f`>%-JOhT?T%v6(n@S
znj%j~h=R~_qUQNkSfZ*_l4?cCaNy}>zmS8AIg-kms|^&GD;#}rKsb`B#X(8AtrQB%
zoCmZYi{Xled45<J*Md2FG_ER~7_y=s4Q0bxr#V?HcRT1dD*voZl>6>>ZLz#fT5<6&
zVB9tmT6py2c*77G$b~oQ21~(``Z){asTcjSNv@m@5g*U@3#m@fI2|Wp+Zs22E-k5A
zU2@uV4IJZ9-FT_ir&NkrLYJN=CDvTAwf!|Wm15*ArFRqke|HRmNHrR^Y|+T4XzYo<
zs6}WbXMm`NVjZZY9wTAwfas@x1TiLNlGUD;C2G3#RrSR4HBd}=5VaF+fi4@|vx;+Z
z;th54s&or|)5eS2<hIh-ox*7ov|L%gfin{9MGOnfop<zLTRjse#}cePmDDui;n}d{
z=cDj&h`82EPhlN<kyuRV$)Kcjw$l2IuQYjP?VX+Cq3(0FR>ggzzP;o9tKR6Xl2UDl
zFT(*L^_d@O<g}Ir;6J4&-!}}5Q&_^8mdh|vaxiML9>hR&)aTrub+wL#=MhInHG4C3
z<E?)BN<@=W;-gDRLZj&I8%i9zVU!xGJ9A~gm_A&#@BT1co9l|gTul>AB?Ig^tRTof
zNhS<e5$zGsK5)h*RSLk4+p$H4NBFV6h*o=ovC7ZX>P3fWqph}Qr^%a1T8TxKcAEcp
znX(s(W~y0_>3?8M_Nhw``=be9GJ{woJnuWXoNz3+E>%7OHI235pLmD{cAH8pT};`3
z@d)NL35H>NrO-35o%9YgYkXX666e;_a)+ynY(RxJ&)5C7NQN|wGwLJ~`q&6qF3_xb
zCD~#}xC;{gR_swnYAe4P6zK3HEe@IP$85_6V^!9p4>27>{E{WP0=t1erD(!XBai{1
zx}Gxuc8@oF&4$SFC#fBJ9eDn+BExRO<9^7)Z}`-61VT;?!3HREN&S0vSZ`?)woPPc
zb&y^krIRjxayZM7>aD@vJXX5WQ_BIYE@Ziyn+zxeY6C1wlIgG<XI!Ii2a-d@V}>;9
zHrMZl`w<gDKlkW=8+AiH5RCaSIW`kKllcyMrSUBDKdB}5^h93v)3Ge|y)?oZsq{>(
z?>%+a*pXv08K9S{Pfjgxpk316h^viWPx@Wjc^5dQPO7`S3~N>?R%HY<P+Gj6J#WRJ
zi{7o=^-WQuAc*J)PfH8ub4ECJgXcTSQdL@gaX()smEk&kd^&J;82{TN4HnC{*V$`!
z9mBx(Q{$bTfZDD6w6-=60kO_ALc0+}Y~y?st!iE1y#P$~;}<>Fyq*pSvJSG<?6x2e
zMUX2%AQS7=`!~@i=9rUHYgZ0TRlx>9<3aup{DR9yUx$br^_>NF!we((;}t@$M+VT%
z_&Y#_`(eO?Rc)L30T#{iDHr)fOuP$Ekt2a=lrzGa9IbLZ3A%|6)<Y0Sn)(h4m}tHc
z#o3-ACMG!9YI<k?E_EDd!$(71hw-wq%%ICLGk6QsRZwXB_QxVbXl9tWpX~M;+|KI|
zltWUFut_-(1VR}HfO@H_XJ`mA7@)sM2kITuJ=2cTjST6Wnrd)4Ty4wRmfGMl#yCon
zJ@SmZ?cf1-LvHR51iWmAHf?mdu^0THomccl5fLId2ukC@l8~jMk5AUtw)zv04mt%I
zSzpn5qBSSh;P=unEOj4)fk>q?7z(~0j*>C|5{(CVv_-Fi?S2fu08_U;Z|;Y|wzLzj
zszG%BX*y|TiadJK#c#FmO;e&FR|*=rRv6Ou>WGlWc562Ve$xOFVwf+?UScg+wMFpe
zWwaJuTlVvU9Skh4M3Lvk^1AH-CS^XbrC)&{-&sYJ>vBkuznW1SG<7sc_9Hu0U7^~&
ztZlJ+gmOkyiv#U}eBB*v>%YCN@sQSYp=!zylEgT(gZZqiI6f|O=C|5du+}VxzM0XQ
zMqTgH6AwO_>&OEWdd>*v8LLHYp}HNT^k<jPE8i#v^iRU0Z%xg21)Utp&+MW@k1Y6l
zzVogCO|XK)Gp!jNB2#lyN;BA4L~s$_7$VoQ-W4yoA+RQitpEb~kgCaaOj4y(^HnlT
zK*hKa(0Wb)d*0%}Ltw`UJ!<f-kHMj9dVcHEX!^(wBX&4Ey0IYB;M6rG5zDgYhMx%4
z)Okl0M&--0`aUaVk6rJ>!ZK4`%EvPKUt}1oP{yPOaWEO)bsBPN=5x{aKr}ymwUPLn
z4DIZ^w*8=sQ_G3zvcA*6`01WK7sENO@NPfjl+kzDQdiW{{M`FWv=v>$B(m6cJXT~h
zieiIoSkLQ6z1vc!;d-t!A5K4m(buxJs3?JW71IYhmM(Qv1NsSS{za;t0?_gmK~Uhc
zQmwLMn*+}d1htnc5F~-lbV;KWmAD<f+z1H!Y6HDJ+QjYj4HX|}SCVPu%4{t^wd#Ok
zD?}~NT1Hd&(xaThvL6R<NGAnS=9uF#Q!dC+&xNCvUeXMIGOmqkpo)<<h*+tx4M&Ox
z*nK+o@h(Q7j~wCK>S!@E`9b%?2RX7}eCL1h1G=9-If~iR#rB%lH`uZAF`?(rcFvS6
zftT1P&Ez9;pFl>}akg#~7Q~aZPIz}~5(LVUGyJ7q%4m45I!7Rvf*+M<BCm(=cxA_6
z-#jlg*;jq^lb>}1@&9$=gJqn9a6f#ZJ-?@GCoNc{7UGs?a^=UivCmh_bFhhjhNYpE
zwBia8R_r}$z>#W!_<m_0Nx798_*{+*)Y(2}4Cf`iujO0xkw@9S$*6te)yhBKj+uMf
z|8$<wtCoS{&jYDjm88DX`(jW_lA5VlL{Z588S;n7tIxBy9h)io5cAmEKPs;l^G#+S
zjnrHCweLwUmf<<HnC(5<ILB5@aS+Z3#~fORc7r445NB%XSqKVbiw{kLAT0!0g0E$h
zr^wk0zs7zrLpJ6N6H7LLWAku`cB2A>GnFc7F}F0*AqbCUrlyuf!AAk9=py{ky2}Zg
zqa2q!m@ErA`r|@F$mube?>N2E#QiEyKu~EaX7GL`kyv?u5Yy`u)c>1jI4CxZvF^dn
zdbG9U!CJ<rWDqz~1-of(m~Z1-??Hvje_4<xh#;$tBc+kzYGtO0M290W`q<M~j!>8z
z?D;uVmz1Q_CMSl4{_F|n!l5Sl+{R<k@nscY(AJJnS+o|?yOl(w9k8Zhc64xLylt5m
zRmzuAz2bVsQGUVfXn2~n1e!fuh5^c`sC<2qN`P74eobo?v<N`+^_Dq#qjJ=xmZK(X
z_Sw)R|5C2yG?5;WvlV5CtBsP1Z1N*g69=gR)y5DV#_A#i`XC5345|419y{(i1{6(*
z5hOc%%wi5!P_)HPhm)ulTN4{XhXXo2<+UYZZ{OJbzcvMVS?cfDneVo~%VdA2&Vn5A
zwyX&*{o$gOEt%}{dUe*$jGZX@Yw!18PM+ehAuwwJouM{-*6poHOe8)Nk~$Z+BZv@;
zyhz|Us%i1jngvU^4U-XUQaoh2PZ;KkKu5Evm=4L#fR2U>^lt)KdUH@Xc%*F2Plrg8
zv=xIIuaY{7a<>X9KdF84&K!Q_^)K^=T3^&*=ioU%j<_Dj4GnIa8>l5yim8qc$3Afw
zZkO0~B>QMXa8k&e@JYje3D^kn-f~G)2l!!DNParinXTYQ-7VKP{krq()>WP8$gXXc
zK{zOhm90e(JgFw!TY}3ZWDR^0$eVXklNZ&Iw7Vn9u9=-j>(e65;W28S<?k;M3#}z3
zE?1m)YhhAzUI#^Y1U&AwPd7P|zs2j=Pd@fFoqy3K1yh`qcCGjg&Q!>f<m8kIlUQ8Q
zTE=*Q=&}$&_R)X#K7?Yip_z+460NtzGSxgMB?V_v@0SPM^w|G37E%@{{BR6hNDTWW
zGk{7lP^Hu#j90w0zIoSn+0eKkM5g1l%F%{QE<Y)Cnz$c+OQU5mDp*(8WO7uyKg~sr
zo7s3Ge=nIb?7hg>&(}bT8tjU(_96H5=97DTDO)aY<>_Q0g7G2Qf&aF{{j4OS4M-b>
z{#6`1B>7&mYbb@re|I^fJ-5X^WPTTk_7>hxoNn$KBt;o~{TBIp4^t3Uoogn4nv0pZ
zbQYC;g$2HUE(j8wrp9Tfr;Tycrn5oEnpT)`N=J=7?a5Cm+aC=+inTX+R;FlEG|b#w
zre;>9T=WJ~vxb@H_744)dE>Z;xkL%NarFzgZM&`eun;XZX0!!7PnGNKrbh%cajsJx
zIg#1ec*wp5nW0w2c?*5bBHIUQOScrzTk86_ABoAzXk))D<!-k0-sMJ5A5RNt4(c0@
zy0>V_We*v?)8r|#SxG%TP@LYKBEWio!~RL{-pTZS_QLFE^b87P@BKY*B15T`ruO{*
zBfrzRn6hUpwx@oMrQv*irL)?;>=F*1bJ3z>4R>S=#04KsFz^;Gej8ehl8?XJE;=A4
zDwy#o$(xJ@Ub+|J)j(j9y;(&#3>M-QD@ar_%C%!LI6x@1dw*2))e*Q-7wid1)m6f?
zU|-g!!!%!ecBL*P^?o1SD*ttwzT&AYzH}dg#0urJDC+zJ>t1#JK%`?;bH&e96j7C+
zlyTk|1;x-Psxr)&!O7op{=H)4*b16OVoLgE3C|c-L++ci&?Mav>PkWxVusn%b&;8=
zy3xh(eiP5KhcC}12d@*TDDcKNth*awivHw%U&)a=EW9gegvI!tI~(sL2sN><iHd9o
z$I-LCZb%!cJ<#n$@WsBm;S8r#Q^K7_U*ZU{!kEw(Y%8&4Vx)MSbX|G*I>)(=F*Y0W
z&s5P$c{~Gu)~`~8ji9T~3QwFCJv-B(Edw0kqBBmR@w@8pVmO>tRuLMbojYDV9upNs
zd+b^BnC5<k!KtDDG3L!#6BfA#A+N3qIWW2AZ?1KTYIx4hy$_<&Zp$K9_rI?UzIA$E
zbkl~b;3Xm|E*P|n^88I}3ec3-!rH=s_|%ABMiUchWpVR_h%=fWjpx5k`tLjM&hpPK
zTi4zFFDYO2880!8TShaMC2anw=#1$Q@NX7D-w!;%V@T5tN?k?Q#}gUEKNwGE#2yrn
zo9jXl`{D|iF_k8TS>f7%x)G2@DJrROEL(x}DF>YkHWY$~`g(hZY`5eeNpt1kQ<TP{
zBJF_L(Eew8J9>*~Y<eX<m;Wwn!s-vdbJ&kNRaHXz`J>d+$fQngmi&%FckAb+ndkcJ
ze^JcI&=7De;lh0<C8(Cem3GPH4>g^dNH!k7k@Um=(k9dNrsIEADGi!*tXs;W>MZwu
zk@{ZxCPsIYFOwaF?~9$KGrlcx_n}n>e%2!ZnUR9GEX42=7XpRJ`lZ-n@y!9yBL{ME
z@kR$z%auB<6?`*J@v1wki;h&!PC<|q6lk6z9@I(C_E~7Q+9%)or~P8`qU_Y^MHl{F
zFci&!NK*3_s4HCWk(`aZHX99M*T+@CXlbu+oP9~nc@5KVqTB7y)Fv=7I<u2QLv5SG
z`CwwP4<xwYw`g5kiq6b;1gPrJt82dhK4d+fx1c#7-eaCNC8=_u<P?up0oY!xj}B7Q
zplbt5XG^G3>OaQggeMXRI2;B8K(V!08zF1*M-%)tnTE_2eevTpjJ`fP?1tf&YCf}N
zhCtm$!T4WF0MuF=02#}T#DMTGV1!Sp-5Sa#KZZF=0!x!YZQ6zVK5KcgvsMREktfW)
z`hCCF7hRyNl=%P7Hes}HXG{2#YZ31NY6=Qq1nfWpy^&tzMWOBR8HDeRd;xEVQsR4{
z&+#~tS+PfVd`ktQs~Nb)uMY(?PFmOhCsvj%IxzQusDPNpy5`DqUF!_rO(_mz`H%4~
zl-2W#iLt6UEaQHXUeL!VYm39)_U6XIIPo5R#g^ScVrFmT777Bj!-I_b_Zfq5ds<;a
zq-!%G%u-ooa~BBi3zjc`mQd=e#;<KP3dl9`8qo#Gw1ns=?&oi)`!L1pSl9D~RKI^Z
z{U1?Ey~8dnZk|2GBh@e+Od@eD^+Ji?ZJ3UNUy=vBh-k!*Z3z*9l^Epi@J@H0&9=)z
znx*~1#Y+z)3zr?o;!#q0Onz_Zoj6tQdj|BPA;B;}OV?)%>QQINr$XU+amFc?Xh$%A
zuJY9ULCgHW-65yui7NCLjA^pQE;(V%2l|7<IlZ~I>mDYilK)jUC`Tx5GAohGua8UN
z9hc5o)Kd==4+tIM4q+1BnRpGVUtlcGc`J}bI!;&e>oHg>RrW*h;iZIaypVtyUX$RL
zhT~<3w>Kig$Cu)F{1G_*5p*-A+u;U?Q4O#i=cS3pU0lh~?Ir}b0=o&CCCSgAK{STh
z3oMwKwqi9mj-+Xg`Afozk0yn89&!zb#k?zFr4b8iH6Z%~v1(f!DJ(U3p)LxU#68H^
zw5ir;Oc$X<MD`XQ_bt-z!Qx=+o}rat#R-(Lyd>6vmeEOBusj171pBIT#MZv|!TRIt
z34ajk@g|2&Q^(pamXK3;41ocddQk*PNf9vf^XOFV-I$e|Tu&CDIXX@E;uH%{0BtUt
z&D91P&Z!Nq(P{n{M?WoBV|=b`+SJyNlr)Rn{>+DqB~^cUf8}za<esQ*?PfB0^TE0M
z=ZkUo`BEZ$nnQe4-Yb=ud$*vc|4OuAbd+!7i;do$%L^oU1hLxP+KwVI?1ozaw64p}
zxzXyY9{9Hc$$yuR1c%D3oU01DISt@<zxj33ahE3qE4Kk?d?T16z2+l>8~gvSfc$;9
zD*Hf*HJL=(bf07Z^)vpLJo;fet)1$oxvAT*an{PrR>rw;w~lWuiNHuOQ-Li)d)5%H
z?<Z4h`&TvA*fj|)A!8Dpl|F2kQ^#>;8p=zC53<+Lbw`Fqvsi^C3{3N>Jg8rOLSe2?
zbzzd!XDAi6acsQ#r+uWQY53^>uuOB*Y|N(*DjAjc_hMezVi~yq2JR5i*~X6-{T)^!
zBdcu1wqpKX^l{_!hSth|^l1>G3xnV6y)OBuvb6zxF5(zCw6$5>@FRKv35CU)R33w8
zXhLf{-s7G<q-#VrS}eqO)9KxKVKK@kULyhes>6oQEKkq-GyBky806`HZ$YZfVO8lJ
zO<*GHNuQjYH7d^v`>GaK{h4xWbKT7cKC{05vQ;iK8Z7i2%VIFDG2jyAi8#Y=YRR7Q
zPOxagBlZ*(tvM3AIl5j)@^&@iXJQGC73%!6aI;N?k^e19DbDYa`}Mbf<N3x5o{GL4
z10plwQ9_BQ6O)F?{vv}RbfR#7z^Qyoknf5W_Z+M6JX`3?^g%C<IX=L8;NSsXdlKAA
z*bOmYH>_+waNwYZrs=iD2XM?@pQgVo&h=XD$T$}*FPgrPJD<D9Z1Rc^aJnS(9%s<P
zbkuQg1y+TdTdd3^9NG?ACi?NHk5&PtaqEnrro6%Qyhmo3DJGj4cR$PwG<yY7M*Q`m
z4m~CmZWOX`g}Af*X0bV06&aKqX2ifPh81*UgpwiX7g=iOkaJA6SGvT|hg=}pRk-G@
zgtoa3)lO&37awmH15@X?p;$8W>rUopZIlGNwpbx3P(D5t<eTUja<*b!doMM#$XX+@
zFs8KB<%;VfrjTd^@QRkHCiqdnjb2+`53d&K#uE83EXWKQ8RGL>8j$l(j6&MdEpeG_
zs|=B4b!OaO9yy$%iqI6r5Q|WCPSw}uAG#t-J6!$7evSPnuV(a*2rb~L%;8b_f^wO*
zat4ve$R-kLu;uFyo;BbVGfgKW+=G_KK>U4X`$=z{tcvat#0cVwhV5BBUD1`_-MHay
zvo*NYvp3k<+^#0D`u(<Y&ebe?6o=0J7MfA#Bq3F{Qa&5X>N8;fZq}^e#7p3}*6sWJ
zPP?sdVS%g%!>rBxh3KmJ_P+CdU4GS#ewxJi)2ll(NSjT()tv!`WBQEF)u$4O-k)VG
z0|yOv7)-p)C~xh-g(D0blWAj|hr1>DLG7wFZBs&cW$4^eUY=v_jKw@Lkh8eZW70Oe
zPOVzmCoN`TSmo}H$`f0yuUD!0bI&Fbudk+QX{)ajlYYq%e`>1Ymr@~K5vm}<ZrFvQ
zrk3dRM?=xy4SSXCaq@@?I4=q@JQPjl+fpql8RA8ygaq&{b-uizl8vj^q$WHDxO_Rm
zEBiGD^ZGov+RHhDix1FNWr#%S{gr_q?m1gAM5!Bi^af@tW<lqDTQ2%tZ1L^E6hpHV
zes}r6m?-$Uw=g7T;lhX!djG=YTgt*>yEm2$bJ5Kz+J8<SOiYj0SsHXg;mpE9PGi?2
zi73*NjWCPkFrSSLYD|1Zp!lP_+{dbUvCN+zr=|4XD(22>zWEbL&yMAtFs42JIhMJE
z*IzI7q@P;6zEE(B&66j4emwGPR-EdXU_?3Ygkk5CT9Yb+mXYEst6^=X6ZWSz4r=uV
z2cD8Hol!AWGtzZ?!hDQ^?(+Bq=iH>S<Zr_)J07!FE?aX^CyU_?xDyhbnqNxt)`VDg
z(CO}IOSCC6YkIic9F&CVBpJ1x?5-THjwFq_70Jr?FyE>t@~~$*CEL<t;k>laN-ept
zRoR0Yj?3tlDGc&y4w*A8Hz;J?8TeZD`}gWvT&l~1m7B$CGCs_5pmvnFniQ5b5hWe(
zFr-r|O-Fnrm60p;!4jV%ErpRa5&4Ha&VrcoMGrLS6;YUdlpJ4Gv=wzPe$NDAkDRO~
zZRiUU+8c`Yu)_ZfMt3LigSa%VATVh+8pMy|vnG*2Vq{^&bge4lEI^z`2`&v!CM>)(
zm~!T)=HxgoSc@K~>dkyYe{n582wTqLT5iGM-{?2?$OJ9;ZMAQ^?Hw$M-=*pDmiEps
zh;aiAMbT%}ytAd&@s=pbk>xj6kA)kCvsWh=@(z0N-wyUxb3;P7jP;Wk$cvBxC3q)5
zYKj_4;K#%15ZC;}KEdIgas)DYm!g2Z{&e)gpZj*6tlb*<Ib|61jwmCW@kwoY{8m3)
zg=PWO2Cg!MOJ9F8!p=}S3@lFufeQgmZ1R4;{oDJ{c69VF9eGeyey0dB_n-w5e$GHK
z;AD7pDYzLy4$(2palK;6FVmjTz1&w?=NopOZ_25p>>@7uW~aE#N)2J5x+G;D&at-k
z$Xj;HH;@505b|T@C~3+(kNJcKIHI#dmA|cz%blC0rl5epCNnzEQxIhz$8}s+Q~SjE
zQ}No)Y;?AyV`<qY<Fhh59T|D0x?qO-9sa^yf@lcl#SG8wImU*?N*zp&fQ|3>!|-eY
zhxwoPImN~^9lK$TZkZy?Zu_Cp+;miPV~wA``-<aA_a)@G`kl>vT1de}3sX6yxhg<0
z0^|2_j#e_ys3d3!Mq=a^osiBgaI)*_B$><oQ06q~|4QMrZk;JBE0oP_leRJ0C~^tB
z|Au0ST^l>bvt9J-mk-IX8%+$G{8{95EEj#*=qRz^%SWFb@7e}!`aq%gi;PK3h}Ojs
zdrOoxO7+r2LL5LlKWSF7*t+h=!9F61Dd5m+%g{Lr-HL&_4IUV}W9>Upx1E*Rq+5=>
zF?909G8KlEG{J!1Cc4c^{9{X2#DN7Yl{Nb1$HDqdD(lp}NcGr(o3TR=0VH9;Q;ywt
zD-C?tZ4IvamJ|15GO3sXVnwh%n%YeSnr(U04)T+$3dj7;$~6v#|4G~BM>-*ofh-=W
zg8%*cmSfQmupR&N?^Xv5Uw-d_Bbz{>LN`O!e;r(-XaP6}V+`m9G7~o2u|KeY8{h#j
zLhd;r5Z2T{Qu@{R+h*w-E5Z0Sne!JX_!)2|M{;#WYGu5|jDRU(h%>RXn1dWviJlZ&
zT9A&0Du8ZCQv<mMvROP#Rodd~i<Bl-8;j3@{L@8xK%;qrQ#_C+hU)9H%oLZUYeHd!
ze^&g%$^;zdDg}^TbPqmRxuvdUeArZD*p(8sc2Pzq*Qh{Cfl8=tC6&_ABPv1&6f2>~
z1Y@^S6nNMlDF$HU)D#oI!A7xw0JjZ$`EU5Z$}ROT2w)Nt06<Fwlqd{gAf3WOV-JNR
z27E!`3B&kN1X3`|D2PzZdx}gpHj<*C#Ga)Xzz;{Fn1B{yDHaIB6<{xE!(&$Nlkq(;
zst>dNyjHCdL8>qVPi(r=UVM?D{nQ%~VVwQ@wr(QQVumMA5tlCo9!W${VTVrj$n~YX
zklNcI;|T;`R_yTfM0ipC9x^Y&*<gzxo#>Sv$=H~g>s0?4u6ELFq|Oo69EnMu202!E
zf+;8;q^UvcOU`NPvi~X12+c-neMFkvDL>>x%hMS}NSdi8nq!y!LtU{7ztc8esa6eH
z)~}LFb_$I0%s?zpaVY%IDw6d>K)!`ClM+NMD}(-Hs*xnD5x$fs0V9V9%Qms;qAhqr
zponZL5t)a+jZ&~Hj_<zUOdZ9la0kzbOnS8=QSoTQS*ePrm=);)kp++S8@E2+SG?H=
zmU-Wi$PVR~sssP0ci<0$f0dX*le%GAwsL#CKF1Fr!h|v|q|(MZAB0hyq*-2+Ro%2*
zKaA77tlNH^*ZsWT4*-I|5GV|eKwhHI7%UD?Ao_nA{`a6zX%}?{lf~w6d3=FTB$h~J
za)nZ*rmmr>rLCi@r*B|rWNcz;W^Q3=wcc!Z`@`{czFcqj$Mg06e1CsSJ@?NLw02fO
zyJo1pXYu>MWYq!JZe`epMPyH)drt{A>@ZNBD<w4NNj>B2Bl_LZ`|ZD>Rg(PXd&V1%
z#$?VIEY2Pna{$G>+M}10FxSH>98jn88l4o(qmQ7~EucdHr;Qn$#6{q>XH1eOuS87G
zdC>42LwJvngDXP0x-LKY?dGD4Ykg4$wc_)DgIsdwrQAA$Gal@}f#QJqj4TC5#&nmL
z#!I&#^AN=fRp6;`GZ#=e<ka0;B2!uw*;<|x#$m_XBA{U?GKf$Mw<>E%lw-3c$T}p8
zCJSI0X$qKqcpz2}L~iQa=kl$5YN!MPx|JA*6Rd3QSYu0z1rw(WL~%==t>rF>WbClI
zW}kvoLQgp?jW|%=FnLQ@N85i94JS1OuO9i$$14}ql4U*-*N_>6g8E2jd~JsoNPgPS
z6j0Drdx2+UTFHM9d7BCpR96@>9@bVD;W6XIy!canFnm?+!?PF$=b==R9BU1;EPv>$
z+f-V4b+}sI6`rh;-)}BU#a=3%ag5S*V=x=}!mr}@(*>o%u+B%DCo@r-+)Q^UI0MBc
zY|_k8GHS#w1dlH~4;jYs>O$1l?NNi$0rb)FoS;ks0O=Pt7ifkx0tz5Yxgvt+vj{uB
zuq|pvJ!c3((abern*)kW=hO_fZlfu<1;U0$8$MX)+l6wFi%W2&M0a#=PI<%EJc?FD
zakPwLE5nXsRj`;%a;Wnl8$DAI0rwB61_$13iir2(Kp@+t{{@Jd(|_$(-OBTZ=`~5l
zn_Gyvf>^>3KiKE8^9QMRYM$8nRkZhzH@)?N?)Teq<z^At7z!>bwdmufl)z(WIrDHr
z%?H_C3qpERgPmOv>f}b9sbJTWxBo`DeuTP;pmw@*R2@N>@K;?WZw)`MY_yd3TbOl*
z2zUwTb}}1JOs0?oJsCoRdxo~flZhS*^ACfQg&}NG!iUui;NLG(Q(>mOIlQ4A4TAG}
W8!VVrwhAGt$p&j$lnnbyiU9!e_&Ztv

literal 0
HcmV?d00001

diff --git a/web/css/fonts/awesome5/fa-solid-900.eot b/web/css/fonts/awesome5/fa-solid-900.eot
new file mode 100644
index 0000000000000000000000000000000000000000..d3b77c223afc9a0a1af914936219da2b001a010f
GIT binary patch
literal 202902
zcmeFadth8u)i=EMnai2WnKLt)Tke_M(<V)(x%WP#rKA^VkbnhhNukgJMFUhQP;h{%
z1yNflP!%vBO4Wi@D;7i<uqbN5sufTWqk{5aeNECd30NlYZ|!sDl5lzTdH(pmKb~~f
zIs3lX-h1t}*Is+=)4TF5v?XF8K??DoLN<$ZAY_|#t?V)U*{3j_Gs@O|IvbjHHPcf1
z7=4sBQ<P4ktLZ|z68_8Zj#3+7DO~|K`_4f4Cc2o`BdcqQZzZ+h-)w5682)u4ZQTcy
zdKF5$0<~N$>zym>X+-W8nSTaK|L@_1i~``H1X-wO>C)a)KeuP@>12tlL1^(QOHN)&
zGc8BqpAUcOsxz9J7vFT&i^#MZ{=N$?Th|}BC|XG5M-OT*Y*=??|Kub}vP4=D@7S>E
znv1G`yyjM-SqDk^?&^&fu3Mj9d)A*3_X?nWBLb|8?KLPb2!GYa%QkQMUXLXY{sTnb
zyEc97f_2uP-<3esb@1PF*}5(L)^2eI;yaN(`q6clU0D5aMIkAFDkiek_kZll&D-za
zeGe&r?IwyH<+h0xiuUPsWi!t6&Oc6Wg93hk->oQ*2=AuJqm%oUJH>PGIzSrS8_0xT
zaxw{8NlYHa^G-8dM)Je*I)_;PDtag?1G!)!Q^lp9$SVG2*+w=5uM`&{>=g5ToC;`L
zE)|;TGq0YDPF_!mA$sd7i9@3}M7@ZVn2EXKt8hn27%hSO8(h}pzu0fUWJ-yXS0vN^
zsc+FY#jh#}%11sQ@^F5K5}!OF%Q5__bQ7vin(^#rNWdS@gd24ujMK?DGU_q?c>-w_
zfb=J)zPXNcIH!^RgnT<hUnXBX7ne+WGSeq1j{cfJJw*&i>v$jF@*U~?c-t7b?3^&^
zMp(csgU~Ojbeqv<?0*X|$$2<0#$eJc!zd3kN{O3s>9<UWumr{nc@gi;lqusT-$6O=
zr13z!fd}5~MqJ9M3*iX^O#Cu!6+>p7B-0yX$!?^Vc{yKl@_4$A>2ITa#>1?e^D-bG
z1Nv5Fpd>{AG7f%E8jSpza3i1DPoi&XnX>N^lW!YuBaf^D<>ug(4|hJw=en8p@+Fvl
z1@BBAcGDDaaDSwM(<yNo?~rae4(vB*K25iH=Tnjh;G0q&@^Tw6eiCQ&qa1Uj$@IT;
zr`v0cg#+bq8yL4-x+5iS;)b|PdpV3D3Oe9-f&vmR!)=Uv60`^~=)rIsepv_ik&W?3
zeGEJoq&tlR`(>F4ypuA{r@$?N;}9m}&3-ZROWHJOJTZA9orcqW5Fju2O`4Ce+lRbS
zE>o6)y4VfiI0MfF-f;lloF?7hW}0j|jw1m2O1|T8GbGG#GV^m7Ln2e2Ic}K0QG{`L
z`aPJ<tHg8S5H6wy$hs0ndFe6@JhNdE2c$7+*1$6kf6^?U<E8<Zn;FNrk&gX<cg!|P
zx=r_6`YrQCIsN3@ikS~#+)t9;ILt^Z`^mxe$~=k5<7T<s$5=y*ah1F+ohFI2apdQD
zlrY@{_cY-0WSL3ho%S1H#`+`%WSoJMfm`nUGH4{uX?R{4fO<UXc4piOvo6G;eA&*N
z_mn=C?L(O&j(!9v>_&dk$6+W3Zb@JKCJ9WRq{K}iBOGI3%=uh?f;d?QzmtGOjvsC=
zTlU+4QAVb(iT&mr=5*|j8}CdXCyerB8A&tV40{)T$Sd<9UNPMnKZh}3T}jt32GI|h
za5Fw(_BnW4I-MK?l&9oEg43Jp5WnNH9cex&+rn)&%14<-`nSQ)PRM>vrsJl*Wt(JL
zv?Y_qz$NQ9^AO(gsrhr;lda!K!};G2()nZ^WR`2b1=?rSZMFk-$}vWH>2{^_r{6|7
zkVB9rJqGD_rr)?6GRw$)vwI`Y$y|Ak(}7PR57UWk8{9_u*>TL&$7Q4;Zpw0LKfe=Z
z8R@XNSuTeIl=xJCI!wMP9gqHq11EDXfKL9EcE9I)!l+Z?jxyvskqyh_Ng^z6)Gyl*
zHQgMR$Vs15UOKPre@@3>@QzeEE`vLvjHFp6+%jDPZ|+~b)9H<|#C%WFaa^W7p6S<o
z@JTbh43lNZa%3LxiZNLR$$Tf6_CZUK>m>Xm6NhreAg7Uejk$s__Dehy>9}ccjvq|V
zEt%JlO*y@phx;*8h8d=CSlUfynf#tYZ#<{v8cld}AB{@<*qtzejCZ<!B<&^5vXN$5
zA4AsVau9wPbdC5lj@<7uoclR$=Hqx`H~1C8I4!qTmKlfKfPR$ta2k#?L5XL}m2E`0
z42xqN*`1gi$<)m}j*xf2EI-M8$!n(sIS!e=L%MW*N<8gm`j=&9_g(OtI7*x|Z6u=(
zPS5;AmK8VKoiy_hhnsPnp5qfn8Utq;FXx-Yn^=D0xo!3f=OLrN&~M{1O?qx73|R~D
zZ>9SRY0&<38)RN{y)|%6r!(4}>HBQ^B#xXf4cJd4(r&Xp>6dviW|=sdhx;iF=`l(B
zWgil!&-PI^jk#u;{e^ZIa&R2!xef`&+yrihjL&6pIKShjThfu~PMB}*KgvnN;c+7_
zr$3~;0vtUUpJ}vA=|2k`48_Duo?M6EV^=X*UHeet9>$IK3@JmlA$=$?6dEcRDjq5w
zS~#?1=(M48ht>{#bZF~PV(3#tw+wxDXy?$KL%WCW8@hk!k)iJlJwNoTp;w0nhyF73
z_o30D)UbP4ANCIy50?&C3^xwX9&Q_+JG^js$?($Q6~m_upFO;G_`>0vhqn*kF?{Fn
z-NRoPzIXVM;eEs39sa@a&xW5Lerfpk!><nib@=G;*l=n@jHn~-k^GU;ky#_{BXdTU
zjhr^}k&#U!SC3pf@|ls(j@&+S=g1dF?i+b<WY5T>Bae;zVC07*Pmer5^6QaTMqVHJ
z+sK<E{}>q=85?<PBz4SoOgmP3tnOInv2%}o<XGRa^N-zh?5oF~JoePFXO8{s*mK8z
zb?gtv29Ldd>>tP8KK9PB$x-{LZ?s~xYP5B<eRS^V{Lw|DCyg#1J$dw$(G{bojrNS5
zF}iy6Bctbyo<Dlg=w+i<jBXyiX7m%IH;sOJ^fRNM8{IW}_vn42508F#^zqRjjXphk
zaP;}n-;BOI`p40~9CseydHmkv4;+8!__vSmKYrl&505`{{1?ZcKmP0EFCPE>@mG%j
z@%W#Pzjpj@$Nzr({~Uj3%sS>93yc+vm5r5;#l||u=8v5;wq)#-vE^f{#!eqQb8Pk4
z+OhM;E*iUZ?6R?sjcp#gYV4Y^tz(}U+ctK~*j-~^8oPh&p|P)zJv{dPu^){6Xe>E)
zaO{_3zZ(0^*l)*P9Q)nat7Cr|`|H>nWB(W%8GC!|#5j#><NA1LJThK7UNJsnylH&F
zczk^E_$lM3j-N4p*7&*O=Z#-He(Cs?<JXVhIKFLs`}l3+yT<Ptzh``4{DJYWjem3e
zk?}{zA0PkWcyj#d@n^<=KK}gp;qhOO|9<?h<44E;IX*Iee0+TTUlZztXTmp;HxZu5
zpO`t(G_i1E`NYbJo{2LiE||D%;+l!;CvKYf^u*4IyC<HSI5hFQiOIKYZ=Lkkrnjzm
z>niB;Xo!ZaL+X$Zlp2wgT0V5rQ1?&|D79~>AC!8tNvU^$QtufW82ZZ4zM<sM;h`5m
zsec~&+tAR^#4rtehJC~Npw#Ga)o^UMWw>K_!EhXux_tQ5;hy1hhx>+a8vf+)PLopa
z8U7|H^*h4{hLgk3NlJZXcyRblQ0l}8jaWxqBaxB9k@At2k<O9$$f+ZzgHkUaxkggz
z4oRu^jtq=EH1a)@QlA?6>B!-cmot<)JaSx8s&dRJDYfI+YLilL1f~Ay|4FGWpwv0<
zL#b;(sp~+g8%O&=saKC)KYHWnHc;wkM|X_gWm4*a(I1W`L8;GyQePN-b@b1pZyygG
zzvK9qk3V?)8^^zU{L$l&AAj=rPme!${IE%>ujWwdi7AxY2uhtdg;LJ|rG5mIx_<29
z45e-vyAG6k<JhM`sk_GpOiF#!q|_fzq0~Q&{aI4#(Xk<>)UnBNHz+k|Qfl3J<M_NO
zlzPtiT1lx_jBg!JjNd%|DNyPil2X46N_}wr>*EiPe{cLTQ0kMQ)Pv(c8$To|^~Lem
zawzrf2^%QY3rY=vQfIserCv92<HR;esmUBlJ@>7TzO{LB(r580KH($pq&MX~;r*BQ
zE$_H@)O*Z3>>cv{(|gqWruPl+>)t<m|K$Cn_Z9EU-rswF=RM^8h4-i4pLn0~KJERH
z_Xpm`y^nbhc)#QQws)WRTi!>!4}14|zv2D5caQh0-Uq#3@jl?a-}_1LHt$yNb>3^e
z*Lbh?UgEvjyV1Me+voj=x7T}y_e0*(y{CCk_Ac=*_MYTj<Zbn~cxQVXy!GB{Z-qDN
z&GYJBkN%E+LVsJI&`0$VeOUje{uljE`k?+t{T2Ns{YCwk`cL(r=m+(u^(XZo>OauG
zukY8ttq<sT>$m8a=ojl7^o#Uvy++q{kM7b{-Kq=Em}k^8<oPepA3QI6e(yQr`Gx0k
z&tsl%dcNV=<9W#QRnLQ-uXrBt-0!*1bC2gso-cUr^xW>*>Dl4=tmih*t)5#vpZ09?
z-0Zo@^9j!lp6fkZJy&@)dM@ys=lO_djptm?8J<<1Q#~s@%RDWfI!~>q##8O7^i+7t
zJyB1Yr_@v8DfZ-h!k&;P=m~iI9<N99xU_e)aqXz~ruMovsQpp<jrN@ObL}VELG5WR
zsXd|nKzm#}pzYVbt?knu(H_?JYJ0SYw6AGj)xM%Vpbcodv^%uVYqx5*XrIz<(5}<2
z(Y9z;X`8f5wM(>%wT;>aZN0WmJ5O7yovWR#eMmc9Tcw?>EzuTf3$;$IO^ay_TDexH
zm1u=pNb_mB=GL4VxhLIkxrg2VbpIdsKiqG+UvvM({i^#F_sj0zyI*p@=>C=am+t4>
zhupt#|J?mk_fOo<xDUFM?(e(5<KE|f#J$)3P50N`1MV-mzv%vg`)>DL?oYXIa&LBD
z?B3|U(0zfs*S*3WcQ10!ch7S-yJxv=u7A1y>H4|r8P~0@%U%7hj~P+{O9ub@_rE>x
z|LY#GD=x+l!mE^Ib8r<>pymJ;nm_1odd?3@`@eDjAN7FcXa9|gS0WGgGa?_*2Y3R+
zfOA~SdK`ZGa0IcP$j)#C>i=#4PEsBHL{6l44q;z(kjT9aFo?6`d!Wii8qZ!Ly$5H#
zF~A8N6|4pv!uc{zK>a(2@~i-a2euLgkv@ogp(x-9z#By2?L-j=0BQ4qOFq&SEFmgH
zSm6O2g>1w&4D}a3OH=|V-Az=6u(Bjkv=xB#(S1baNK=mZ3Jrkx3Y1?lL{!-W*baCF
z$JO%zz`qLkS2qB*0A3=hLEf5OfTKjUh_4+bszdk;q?rM{X23tQ7jS^6z8G+js9_V}
z5YEZ1fc->`LBL_6rf$GqoMm?s%|_Vl1fTR1wfF$QsTJv4_W@22wIOZ02G|8a-VWf`
z30yjl63syy=HWemGXUuqGyvWpTDY5N(GtKtMDaQR@}7jUPZ}WViUAH1E#6MFBn}uQ
zI(aYA(mucu9B6j~fI~OZb))`eTZxvVyyY(ut>^(v5UoW1Q}+>_<^Z7XRmFgNh<fG&
z4giLTPTxZGA>eSvA)?;>L}#u6Am3T2=ffIc7vNdI38K}gYc;}GBi-33^XyK*Mxt|k
zfZK@9h5y_gL~9WCkp=+DT)Ud+yp=?KRRF}TL)vvnd;V^s3$_xiN8Rg_L>I0H3=v&~
z_eDpEHf$l<Xa#Hs93i^67=Usw-bZvv6oCAfyg_tnCjj+qLcYsT_GPVr14JLi`=dzn
zvH3*(PY_)WxFQBX+AGn9D+h=+Bk#vi*2hubRS5vzS0ijo5CHcz-9*>s0}c>fhxqFz
zh_>z}x*p-z?;*Ou0oVvQMDz)im#72m01Oh{h`Mfkh3F=P-Gsb1p}d>75N!iq+mLqK
z38GK-0`?JosviLVr}q<Wj{{yJx@9%dt(yVQ5`AV9(QQ3MpGDr!6%&0P{qp%Cq8%uI
zC(61VINXjrcOdT_qeQ#90sD#W+zdEObe9G=LUcF$yMq9f`Gr2f1ksmJ-aYe)?ri|<
zA-WH^+=sHhd>hdK;Qn1i51?-!7$y1&@;ul}^i|~fD$4!Z7NUoM%R@-NXD`v$m%t#R
z2LQajxf1Xo(O%&4Fw#7{p6C&j{m3BEx3+?HZ33Ji`VR7a7jfT3`2Ht|zK8seZYKJE
z6mT2SffxXIK8C!H4G}$lgy;td`vGu$VhP|uz#BwA@&OS4<bI-L57AR`qNg>$A)+4x
zo*@9@elj1hkLaiQfWt)3ZX)_wAJNZ|{ufaI>N>QW=(z>}(m(G2pq^j$5+OMq-b?hW
zDgfesod66G{iY9q$RjBG$N&IgzeTzi))2iI18f5vCHfum|L!(ezBB+15WU<Acm?J-
zTZsOExIgq0y^6YCMSK3ZiD(e<gZqg7g!=yU649R#_7~Lg7sS7Y_iOhMy&eY)01)=q
zHGn-te?$5=tboHr|J6tICer>L{=dV26!4FuME`_;Xa~{oR-%!8M8~!hjlzF?HPM&`
zc!g+u3E(xNiGxIM0mru+0E0yT+C_8%xTW#|C~I;Q63P<5R=@-arJIDc6|jwj4R70C
z686m`)F@yN2}caDpM<jxaDs&E9un>bz!ty|2@UaDKi~iW@gC&Skyl6g`VkUdr1d5M
zaQje(FG<4R3PAci;E{*$0N#P!0N5b~R|60i+71{c5k5#F(hESk{P}<fNfZQ06l#E7
z0OTn`T}7z781E9ql{`VBw2DL-%7_+|C`Z{9sJmj2MCB$DRdK*;B&tzQ&9fwGk**f+
zx-9^dIU^r{a_dn>{b3Rf4S*vgW^DxQCDDldSaU>El0*#e*(j$Ob+;fL)*8{e8i4ZK
zeSm%v9l)sr<#%odjFOmxdgeL+he*sr`uPu%Sb%g3HNY+a(qNqt@s$9S(*=CG_K{fJ
z3D{3!Ne_vWfy+`WU^9tRq9nSJw)+(l%l431-Upa~In@#pr?vtPk~nP};3X2PkZ#p$
zBzo}1nj%g|{U1VmK7{(t&`9*6uHFF>XU0gJbsLEfR{@ZJbw7!-8vrQ(9K@Z2vd%>r
zYtRm?A!04^o>vU<2I>2bkXYAE;{5F-E(ij)l30&7)(&wY%DE8n7i}W30d-;B5F7WB
zxEMHGyo1CgJ%B?bE=3)e!hh)~iA|dU$aC3B5+Bt7&yx7qD<t|`0sBc@z8>%zi7SBj
z6%!<`M0%_j;^R@k8zipkBXKp{Tb2NT_cg%h8l<}x`K}!$ab1$c)?Fm7N8L9N0C?YU
zg2X5G;UK~ac#y=6-6U>888<ya;^tNW-k%&I@u~eJJ{=>mJqXxF;+B2@%D#1w#BC`5
zHk9*Oz~|7$&*ziaQA}bd-a7|K++GE^hr}IyBz7Tu7wWll4~e_BlDNB<#O?;b5fWcm
zLgI^Yz#$S}LfS8llDG%%dr|*=cz=06i2=k993*l7dJ<pp0k)BNFbLQMI7;Gc2z#i9
z#2%FW^<KbX65rTD;+ruNd#eEGr-yGN@yI?B-$I^!DEHgI<vW1yK0#vtY7*aDN#fCN
zz$l6D?}h1Mki=u~Kb|D<g9jnj!u>;(^&_PF(LoYVCUAHGe-inhLYYrD0A3>TW5oY>
zg2X|jKlloXXV9i+UL*07jU;}Gu%GTH@oX#LD2bl|-=CwNp98O7Y$tIjAAtIvL-_N+
z{dtu0%WZ%YI5c~M#IM!^@c#7xiQhN?$ae(g{q|WBFLVM1NxZn7#7lJ~euwzqp`72L
z?%&@=;$_6YvXR6e<^v9rcy$+vKceixIEg<;0f$Na1!-SfL*n&KBw#x!{`v-qza1g*
z#tsty1^<5`&6{|?IYi<p^8Mog3Gi?6&qE|emXJ7xwj4vdM*B$|uL8V8VtfmUiS;Dj
z+6F**|JqIB1j0_dLgF3NlLAcMMhf+iBI-y{c9CM8Pl~OZ6#D^ERD?UKNO6vm;yO%<
z)=7#U1Hiu1i}c=?Nbzka#jgQ|NXdJJl)!7)f}osGE8r+8;oYP}P+oqJlmdhmAWh+3
zQi|e${iGD{BBkU(QcCjyh%4JnN)&ZM{#Po30N_{IN=lUvFhEKT{Iz>XsRKSU)&o#S
z1JX92j9EKKX<SK4Qw)Ik*t4X}UJckwN;C4c^Z}Bjv?5)b1MmhZ?NL%X(4NjMq|7-)
z%G_<F%+pAj&yXNx0m2s^AY~Eq#GfFgD^AMdK~hd$Ldw!&Qcgi#-6*Sjf|TVONm<bV
zK)EY{&#676oOXniRl7;)SwqU{`$+i^$~+?<0C(>$QqHU+<*b)T`7mHL@HiXc=b*jk
zBHfzRfW4%wMVV`F0~{sgJmfiVh?I3P0P>vQ33!c^3s#b{-UrxA%7vRrfefu|0InN>
z<HmkcE(VSlBOiF6a_Iq5!26WT_K@;XKtIx4j{KJc=PQ<wa%B*Jbl`Q$#~F^0a#a;z
zBPmxm0QQoyrJIy%tbkSk%Doo2U*{lY>uOT2N4o2uCFO=Kq<lgH4B!B8CEzG2H{M3d
zO{fF>PPrNGn@33jpHsl&lv_~mt%$pIKPjKV`!?Wz8{$8Egp|)6Am#I@V+YdhM0;*u
zLkjqta>q-g?1F#S2^a|jr#ttNau@t}M@iWYe0J|5<qN>)i-V-xvxk&>QRjWTN%=Cu
zA=@hV$4GeqWqt+qJ%~JCi<9yY%HC59K;2(Q+Hbr;$~RH}-b183yp@zkR+93qd{Xuy
z&$m(bcUNN`y*-&!>^PT<5Coi1OLI6BtQQq+t?lzfTWw8yOL=oxjJ?q5k2r=L5r5|k
zK7T|!5%G&py^xIf9S(ma`GRleOu`@ZH7E=0jiT_hw=|cEkUwazsA+{e(q;=~-2T?~
z4)KD`=G2{?J)NC(KHnsn4v$m(NI`gNps2dKz1sTNiZ>01u(|RqnDaFGq^zTW%CTz>
z2fe~x(IjdX2zw>h#Q3YIuBN%YwWh)z6mO|&u^Lp@tDW6vU3=}`Ya4tn_3cYmthi)_
z4Z+1KVqCrkL|l7Tcc-c%e8nX|fAXElLB%2-B(^Cp6=p5%9qr*V(Xmj7=bP;HPq_+R
zPu1I-W?Whm4AxvKZmio{|E$aPZ2i`{N@r~_SnEWecqboMW{am_7m7Y<E>pOyNZ8&a
zRC~=LfgWBYgvD9sJn8nJre9KEiTZE8*&nqOT%v2i+r=Y!dE3HDjlSXbK*YIZi7P*F
z`v$#633GpQUnB+okxE5GRYvoJYIC?m1nrgO73dTm#&C0o2+0=LbgU{4rUrt=t2+FZ
zD=U+-v6rsum>DcC4$kaY<@0g5PNQ&<peC9}r{MCzd2}f*E8I+<M;p+=7}R>v)(SEy
z5#{C^o!^FGohL%Ud7^oNC^z5fbVjI=XS&;FmN7j%@;>2cmaLo8i#J@l?s8~#S}KW$
zBkdD$4ocuL?I(QNvs&iYKP?tsk<eYKeJ(wyX+Z|vC3>>H)FD~orkv-&K27V>_RHsO
zIpIbcsI)LngP_>~@=_W4bP;+H^Na@x&5(msIn~=@;hxNfwb{~RX^yR^OL9Z`u{7;)
z<r@JUD(W(!VnBBduy4vEHIWHIwse#n`wXs8icuGRh|b3alAGvuq5x)a8e>K;64XVm
zKh!Y|?aH98Oi5tUW;(1zotB|`T07Ng{_1Jz@6=rvazpTVRCU`gVmBVqY;e@7I&A6i
z=gqV__f<NhxH%J=4gvu@Ckv7fu^r>DyZG@oDluF}pUDWD({42bx0`Q-A4unM<pg3Z
z(q(PT#Pf8szl%mzVb)Q{v>u<{Ux6%*@LX>R82!aeTk-%7OS{1j+9K29bNVmGc|D^h
z`{H}-5=H#v9x+|7yY&2Q#2e`r>EGZ$=@Wah4Nb+fZm}nm<UlqQ?Z?`Iy*IWP6hy0Q
zYg!jEvlJct2nSX0_(vX6)oL~5=pS-~;80V)Q^U@$sbRIs!C{UnI8(oOa5=C%@QQWf
za;ijGk@OOw%5?$-zpM0P>z&T9tI)ZAy|d62cJh0QKlwi4>2#>ml3ACEaFJ^Pkl<xh
zE~N`ZWd#NY%PF9_1XDj?pfYXA;)d49H7ndKVmO720?gOX-nE3SSNHVv_w@7&%1Nem
zre2)BqODhh&vU|_930(LO|wiK4cz`coc3rqX8mAXfb|FAppZKGQ^7W_GiVMlfQW#l
zs-h8{vk;?=#WieKbxSB1ZfS0BYptnm6pO?{p-yEyA+aOYxpTwfD;5_vMx7y>&uUeD
z1%B80OHaO_DymwoK3nKK-4$hG!$aI!ap{5$JG-t}GGpb!h~4HacI4T#l8V~U$rqe|
zO6@86wme6%)AkZ4AL0k!g2;y~vk`cvdG;#M(zMw&otsss*G6M4Y(aWst$ZK<ORCeU
z#`w{baS7>{kA0cItZTrjCOH_7KBwBpPCSxMH8sd?5tZSog!JHvL@9(JW>DpIT_NA(
zQ({OwN%Nugg8Zb~RmdWC6;hME7Hd&WEx&6an$)yn9(F+DDHH7-ZLJ;c5%837gx`^{
zS0HCv#QK}l;;*qg>WeCz9qq1)qM1&6jo;#&X|c?dG0vGB)8Wj<*zK=&H8piLZL_-C
zW~kPJh&J1$Xqw`htwjo~>Wnt0t-xR9FObo;{C7pWtOb>ovrs@&7uqyAi8bpatgofq
zCdoLme6x|4D0_CXt%iUIX|9rm#)`C~&Ez*y?B!7w`BsPZfK%;Pop8jt2jLX2SS<xs
zo6Yif1peJ(wOb1;)_3#@&pE2C)250BMcMtJ>U7!r5RZ|uyPWESvyseFX0tr4C{J5#
zWt{7<+r505O;v55!H{4~9FxytP8@(7SAtWj=CBl$ZJ_@q%!?Wme@u;*=8i8szjNpF
zJ4LV6KG&&YWW9^6c866QK;X{j_rPtNxr4F2C!nEXvP}L96`TxNu0pQn7;!A&wX#rM
zgj9%a9RbK1YA_7u)ZSJL(HWg0J?J1*9cf;OjevngNDY>X7G;5&=RfFns!Ob@&3(|H
zr{3lWoNuvNN&)8w91mL|+t%4tfp?wSfv&JS?TrAqX8B6a2flXe`6WIP4@A(J)<~eW
z!RBz-8q|F@hb?AzIP5Vvq}-I0vVMr_aba~HBoHY#;Q<_Z0D(D%O!AP7xEl#KFJk%1
zZt_xN9}sSS2`kfTkIT8+?z8W9x;(3O(Trs+#uNUI+1{Dn*>||~t+4gbd@JQsBz4!G
z0;EUs0xVpq?fsk<kJ(=DZ2b~WY5p*VJdknpa~M>JUd|E0!N3$=g(Eh#CDPK-Qmb@2
zAcjYS#g0p?9-k^Scf_7La^`i>{^)gQ9@4xwvN(RDSNpQfW%oGh6Y+S0ix=RX&nf~u
z2|96zUs;;QDj#c!G-9E#OUBuO4Hw7-b6U3;%oPEpB2wEr8%f0|lisuZ5Eq8etX;NY
z!?NNfL95kft*}`28M7LLi?8gu{i3pECj~LWB55XWvZ=Oc<A&Qe6y{lw(q^}K^8GGw
z)r)SA%!qtQ*i@$F^d4{~^#V(-P_BAe25us%N>Q?{wQV5=3%FUD!D?8lWUSGWn%YQk
zw#;ShVoZsqwp576R9ll~B6SfOFn7HNoWrL2Z#jo?{^6YUy7UX*E$75OT81`clZVa{
z-vy?cY`)Q=Rh>?>QhfMIv?BGbjIX7No0OXnV}K@R<l_jW`C8EBB3gk3gT*UsfOw#p
z=@SnH7^HpL8=MrA3PXpchTg|54yXE<1O#?!#i@rYB9W=TiOlvT<A@@)%)`4ou~BAN
zmh=2_RKv>LoAWfsO70)IC4|*0hiHwN#X*%|LCiqK4#tVgFAnCPeZ$#3Gw077EDk2w
zk4N{Sv(H}C-Ca6!W@$Imszd4mo<a|SR<W|9Y?Zg@l@(ZPjIsCEVDd&V_Cbs}cJ5+r
z>|}4LK5tRg#=?cIy2}SSvmzfdfwlaUjp8FwH81a&-#Mc)vX<wexXE9VUoJ#xNKsra
zt&(L(b8KcyF3PR(iYZ$Z>?mbhB%yIU#-gT4Gz!qzT}SS6IdtWuSyHymZz{k1zRSy-
z49~2S6y4zx19x2#bNH?5tVOzOpG&V$R$YGiDy2et7R^$ven*UT2f*V5u5@oBKR8yq
zB!?!ZXoHYnbeER8&o;Is;u^Q+OYQS%?z45*4wo+H&)ecgnHSRQyK|$vf>^Q}u_m{-
zLONO~a?3jsDkum!f=-(=6v87YwoENQpv{QQ&}?>pz@{~7wtye|4#{VqSK{J3z_*qb
zLaX{7^;T!=U8op>*+K}cKn21=d&fehwNXfPB4IU~^gU1%UGtYLnePa?t<LhM!a1{@
zR(G&&)(mF=D}ggm;`NpUoK{!RF=O5IwoL1*+iGw4+zqvMn=fb!FIZkXZ)3SF=(9cD
zcSeET=5Pk=T2(`1LzQL^_-*!r_V;Kw<e|wy(Ek7=W0l;H^a9X=RiY2-i57^KP;IEC
zt)nGW+0j-R5^aXR8h&^y;pKmowSZ(Io=D=6;)jSv`=ar_cr=RNAcw@`NdO|HI}z<m
zMibF!l%%o+>sw+<{Y99I1`bW&Ege|(pf8y1Z}}hn%X2#OoK?=Eydo$673LM?@t-rV
zhy(IOB9-``KrY|+<0}Q|J<0ZYOOsxyO+Hv0JQUQA==veO4zF!>#l>~S2M+~{;i*F)
zUWXA<TnD-|_EZV1cU<O-soFkSek3h|+OVUl#e`_WTEdlzk#r5RzNck1N;6mbNMYeK
zvl)d~(-i`vV*Pem>jS{xk)q{A2N@lpV8|dQkF135rW06zj|Ev4Hgs$mrVsrlcsg31
z;qQh!P}5N^*JY7(S}ab890%&4^Az2XD3bOg_RQ}cizW3JPaxn~t*P!-x5Ewohjj6}
zPTlp<pxqv{FO|<pibey40m)~Qg8K&>mQZHxsl`$d4HhTk;;>}cvHo;Bq%6g>#h(qy
zN)WsQlhTvPqFTU}v5c_*VQDK5Rkz9T%8)fJ?<b3@v2O`@Qb|uBraG&O0v-|YI2)bu
zNg#!gq^Jq%I<!MnT?DbYj~j)ZNPkiFfG2=-p44ai`UVja8|X$dJt)U|5cmyHAtcqA
zzz%CDW5wM&4;oj6MT4>_a-E@0ZdM4ZQXe;UwPy9?xo+_0+qKof;_XY<FI~F6rnS4Z
zwOhnegPejprrfDJ{Cauu3mm=l9*%C6eAnOwv(P)~wUAc_gOqD4p;VS*o(&5u6pU0P
zP}@=~_OZ~N;72fjcYZMAi`;C<bH<!`mYd&L+Z2@|yL`msS+}^v>G3#IckQ?l{g4Nq
zv<>}GV(ihucOedCEA?mAk!I|`z@d0hD*gO~zCoN?RBW|<sQp)5e-zsTr~1=5EA5uw
ze3)CGAC2aJ_}8IDRjo_qzEc1nj8^ZQs&#!J|I}c4V>yULuA?Fj9IyhhY+Wxb?{0h!
z9s+Gy)YHVZCHawciygormCR|X*=(L$EGrHwi&4)kT9!kP+~<}4ch%^x%x>x+#7@}*
z02xDJ#Jii2v4=*@opp@P06*#=<RQeVDp9w?(PP!EJr0LE7R&XB0dq?oO&!ibIVSV<
zp&|Q%YLCs<qXq{v4znG9kn6~Mw1ZDn(t?ITN?1J%xr4neI16AF$xTKuwlusGMGl^X
z22r8*E%}Ujf*<)?Ow7c&(@}xEXlfFC{aN(;eVnZa*#GOjTa7L-b=0yAX?+KEOw$#b
zb0MQoj7*gmc|_7YQMSy(dpd!&*kMb(ops;K=%mn_&`Atr-F*&Q4JX0_vSY?=k_!*r
zBxM^V`LZ!zGx$!gf4bk)jq;S0c;?O|4lsKA-I%T6jnW%a9z1b?k$mK$CE}{Bj#J_>
zNm=*5)xV)>{g=j5vSy}~Y4LJgjV{b~qxj17{x<r4FpF?9>lBG>PfzCb`g`I#ZGX`6
zpZedge{-oI*PYYHi7d+R?UefSA*>%ea`bhqKR5a;%|2TK)BGk4XX0(s`gnSuPmjm6
za;ow7dx$|fFiC!bH1JHl%iWXB&umnt!eb!o+?Q=Ur-*VncpydE2_9t2$g*yn1=d4q
z#GcgDqf2t1j=4E{nU+uQDbt@mMQpjS&t~gWgF&%GwxdtBNfO&%nc}jKzhvXj>;s$a
z1Dj2{9ka6N<`7-3Gn?Rj+rw<K75Ye=2>egmQ-rptXp?Bm;%iKvY*VBww>?Hv9Ners
zv*_kFB0HZF*#yQKfdwxPS>Ma@G3bhw1Ze@M#g^VBwuv4ov>DRMtG<d#??*)f0!~JJ
zsd4**lN9v3SKNnkAtUobD$9*Pa-tbv(;1O8M-QQv<22ukvk$MBs$Td?V>y=njUuty
z;n?2kaC93|l2N7TMqGL0-}=*$Tph~?PfEEHHUp7HJ60;z+UP8V@6BIOSmE|q`Um<g
z9(P6If_$~Gy>fL`TezaY-_zgU<1eTPw^gmKgvgq!_w>N>oQr`>*C8buhg4{8Sh;D_
z%Cn`)Grno}CPQXOiawmD`>7oJ)KVN3z`_8h2MW%LphJQ%#9r+3afa}muf3rh3aj#2
zZ9a8Ygh#r(3C0Co;v22!wJ)n#zH#I7n(ofEt>IK0!A<3yqOl8Y<h@4{<CP>05@`n-
z4V|}wZTBLjy+f|pSgKj%h*-=8J7+Y@rEF3!{N>_~b5!-^HFmdMxL#Jj?siwHDnhE<
zQEi*G&gM<)Q$(r5Zm+Z0{tB_{GS1=>$g}2U)d#IjrOZ>QX{qnnEOmCf<31_M_63W*
zwmNGn33M?g@yXv~Ouj}TjEUbkX@b^;sjSI3hl=A;+d*%2wf7(#L4mWJec$us1yhM&
zo@f8JG-F(GyI*{YwLzdEtdu2uCL<r|g3_gFb=qEUHGb9Jz4*baiH(}J`(6~ejUTBb
z%Dv}ie%!4|S<fij&6Xw|hM2>J*5<l3O-pi-ar6C<tJF1+E^HvzBil@q2gFn2S?t}}
z5=6DxCFw`Rp8WjOKxB4H=)d%K{jgqCECxyobnYjXIsXJX=YF|PP=tv^?l6oAS)JBQ
z$?au0v;&=79OQ>E-|Q*NRkp>_gHeo=OH+1ELZ<b?Gi{dVYS6?$X6#Yo^!_pIT8!4H
zhJeUuM#Si}4*H$hCnAoHPIr*>OdC(^r@-qMu+@otaB*d<Jm&{STA_E3sMws^ojatm
z+{}<prMaB)(?z3Hk;o-Fu`9LOq&ktII*iHWIQBe0lYIs|mTJuC%(8>21e<`gY+oso
z*mWj&J1Ou?^_LZd_USYAeW8M~c$|az(K08J^!btzoG${$qRH1qwfGXBD;vd_1~{f(
zqP6mAm;r@Vp?>L0c!c43+VQKWRp~+y$Eip%y{u|^hRdgu(uBu2rxqpeQP{WMtFT<&
zhh0|Y%!f6?rdGJp&=Q+kg_dUX<Y&9K28Y6HH1lPi{M?)qq^+6CTLanhBjv21K<`4}
zHOkv89AGRHnpw{0jWcJ^WA;oc7e6Rj!1#=H#9jt!!eYD#yb)b%;&(+?m%~x#aGrFM
z6EDXUU;3Epz2eN2a*k%}2CpD<pKqC3by!TuC1TqFO$%%8yOz4~(l)w9tz0frpFH4p
zN8B9FuZ`eumYg>6c~YiiwL-Q7N(OA!Kz*vNpnpKV=qsu0Oe^utD*Kk#+ntq8)r||w
z{t~Z0&mTm$6_yotM{A0TYKlx0J_Kp4P{r2X70}%tsHjT=R&YsYp0B2G=KKjHEUEz#
zQ}FUaJCmV?DpO}B?Vz$}1tF6%(iGvWC@82X(7`*wHu-OLdNeB$UQqFRJ}x_J`H0O&
zFQnHt!rE2`UGHkvcA&ZSLRX-fmrMexT+?O&hw`S`0@U;>d}cUOm}zwZ&4|p86f$k7
z)f_SAR;6moX^mhlOD}Yn!sotlso{CFVUcTwrp<6IYCymg4|H3B!a;;Kp4OsH$z*!I
z_a2#y60YH_p!X?#>VaN2)2G%(p^A2Espt@PlVZQox4l(}n$%9bQ<F6&k%s!*HL1zg
zV!VWC<$i-*33y2oyacDT#{5s)sf2OR09J)=0PBK^UMLY}B$9Ke5%85QqKwZhQh(Z_
z3X8!}IGWkbmC{DxO37m6`tdr}G+9T$G=E8}P#1~xUa%ah_8(2JBK0SEEK-Il#PuIo
zhYkGp2Ur8qj;yVXvCK5F;*EC&ZGJw6d!J(N%c(o;K=X3yMjLFCe?<AL!=mbp{f)8Y
zm*KXHam?puGs=74r-DD{R4~2&<XB)Ge+6fuU**$QL(7bHO}9WXYe(Ne9<+dPv0zR(
z9Q(B5*-M%u9&5;587pmG+0$CA2?c$>+vV}D7Vd(X@p?^n6r9=6&^4pLDSEsfNT<1b
zU>{`7W?GD!q$pF0MVKd&{;PTI<Z+ktrm~_f!gGN;5WIsAr(0Bx;(d$E*U}u)U0XG+
z7vwFX+E$kiM=w5CV1^#e1c{96Jt8wf?}Mj#+GJJ<j10lX#0kNWyiAM@%)+6F5s+=4
z*q_EOHJHI!V#}B%;W9!6WnytyW+dQso|`CRjA9IV#L(GbMak?x!EcQY$|w|#K1QdC
z0bbH~1n`}Rz>chQXnKGV$8(2vfU6C$>}8gp5hRSV4B5dbK$gP&Cnx|r+J7KtJMyu3
zpo=E9(Pg|AvBbod23Y6~Tck3q_=e`!o3>cOp6XSn%@(i)9iOoX-Cg6>h2=AjAVO@;
z&wVZ%rMlIraaY&^&I+f^-ur-C*WC~F!Z@h{M`5R(mI+6e+z8;CyN-Ezj-^*f#au6N
za*iQx>oANq%tfnLE=}h+Adop!TO8IZ=0f>`T!@m}-R|vnRYhr1mw<i10JJI|d?tJj
zQ+^8$yf8vGyujm3JxaQF=Lu}NU}6xC@L@im;Fq_sH3BS5q&)&}%CJsElNeAzkl`?(
zhG9~`)8J~YDs3z(YAmg4b){ZAtFk=Lo#&4H(I1KUHGi}qF%Sq0B#<v2@JMw_4=5p2
z)f%m;indk-gKb4fj>HuawW?a$ZU0b-V}Dr7e1R8p98h9K#~E+OLaU)IuTU9XbP>)_
zo0W>vyFcD}Zc$snR*>(uIivB@uRn$NfnWc)0=v1URr$7nc(m)Zn;(M_OLaq|=5`fm
zp{9kg3hWqrb$d^L(+r2?+ez%d4$56=FtaT+4!&Wy17n^>E9wisR5^QgC61Om+@;lp
zMKyuKl7Kx_=&BHViklmnPi^8O<<sV9n*YqAn(88dw6M5h=7MT3IFbcpLugw9d*33q
z-{U<Gn@V6YhOyQ{Fd|hN%`q83e`9QnJB-R}+m!{d$J%}F{EwYg%#KHQADiFXyQQ~x
zK2D=n&9Q2}V6jvCrRr0A*3DYgCg1D+**jk*8bXRWwI0n`9Q0{cpaEQ9hkv8ohqusj
zo^KryKHg_c+B+hpiVdBQg{!inmWc!MA)m}i2@5L%&{k{Nz7G~FY6Om2rk+p?lq2FE
zPwR~8b9cjhOpjb_sf~;C?3N%5f~@a+*K{QE+B!lqg(ntTruWVdwfmMSkhE$$Z86IX
z*Sa2{Us!T_^@7T|$Y?9DTf|RI#|3V`5uZOlZ%#?s{N8{*$7VyTI%|a&j00_(oWS0{
z8*Ot#a)6crHd9RLFqCSJy!RYa=6Z^XQ_<og&ye1!N2X6TM}91pF9xtHeRSGn6O$=Z
z&oC48%41d!hGQ_E%CrMJ3=k_0zrc9-9IQ-;!P2g-(km{uIlCNAW%h=88;jf`8Wk*b
z+v+#W7Q$w?b~$Yq3#x6dJ>c-Dd*|9U$EHmV%|3Up#bLKN4xp`2{hN0PoX{MUgR17x
z$#gpYvjChZmO~WahGR#DTCq?7FRUdQH$=dU``-zdD`mNydKn(i=Nu@6xqZ^u5lhQ`
ztR2R0iUt1^4{OR&@#0`iD%uQn8@}O`8p4MBC7Jy;`P}?IZozr6dynyCj~P!%*Dp)C
zA^<H2EY8fGI2-XciH-=P8>u#JX0iXNEjLC<uA*$egm~6Z@{vv(-#zJZm(H_Um$tP<
zOWmmpH0@*3gOPg0YWo-#NxbHjx_e~8vmp)kz+j`!x?=8}Iv9m)z_x<jN3C!iwQ>*+
zpJW=09n;RB<kQ%l${i#on=uEW4a1~^Max~6bhezdQn5nb@fX|Yhyh%53A9)gn;M!O
zp0oTcN$;S6-=Lhmut+FlYlA>$DVCy*E;7=C9I6l>g@){G{Vxr7Gb6|bPw0sD2X~`*
zeAp^vv5T`++ip#II8=z!Hea`S6~b(4^ZaI5OscjXZz$yLvDhsdtgWPHt7>a-c5j|H
zZ}TZOn02YP)>*Civ3(h2OPUAS@?_r62c&Gti?y*vOC!$VcW<}Fg7?^#Pb<rigBJ?6
zIS-p7Sn<num$mpki^6`{g0E^`54)XmUM;8Y4sd|Z5`;nKrc7@$<qKBEaIC~VT`x3t
zEzQbR7h<e0R3QL_)Ve2}4j)Kk)TP(K>sC`kQ@lu*n|9-RzSk5)I<@{$)#onNU9Z-2
zNx^Wg2Whg&j5SQ@f*jO{7Vt)<oE4e8h_XtxqcY=yQK8htbBoG&<D)7*YasQqU3lEO
zVvj;;?EkeN&*G&^c~7#z;ZdC87EQO@5s2ow3%r$)^72T&&zH~ds9$_o8hhcCAP=fM
zmgCT&a-CzI$O1L9Awy9YG0hsJW^N$Pvv^Rd;G)6eII?lxB~l+A<#E9Jh^%Zw&Igy(
z5JSAi4kQ91E)mLtWoo%M)vxO+JH!rMPxV6TaGqQo9EcADi|^U$3FK@1=mZ&Gg{fW4
ze1ofjoMhseK7;H<joF@&c(+XR0~wwo1}&gn)8ow(scd^O)%@aA^Jvsz!+K_(F{B>P
zIJ1F&U}lzzv3P~kA)HKniWA94_FQ8rhsnoJ*o6l)6-W-Pnv}3oho{^}DaNY6cN$K`
zj6)x?(l(7=L|Rs(F=$hzjh{7GBfMaiXnac^tK%Vz7<&DhR<H-~3R4Dyem*7*98Kd5
z)oI^sw~M&lslH=TN^iB>_ecYcUTL6Ft^+%6TVc&q&1uxBy4W<P&%RuBT4vd+?5PQ9
z_;IT={AhKm=nLIhQ>Zd+m^O)qg$bHbQOj$r+=9r592}Uw^KAsshhf55Q=!m?Wqx12
z>aNyZb<zS@eZbjtdTiN-ebQ`5_?B(36glcJIhou~bEyv$6~|6*+F+B0M<5eB?pgjw
zxk>yOYszB!B<-Z<=(iyCjIliwE^KW-4|aVStNTdC)*i$PyE>o>X(?^8UmIQsxetO=
zCWH+uQ6O70)}Udg8Gp7s-Vvk7=2ED)at-+xLO5m-xm2{<GTHw72tjv<yPCSg=5X14
zZeg_wx6kf^SI=|V96sL%#unz)I6Z(36@JxO?(vuAmuilh8mGG~zr^o}x>SF;-CmyO
za7DGel7dpVv!=$X+AT<C#8%j^^IOA}v9NqX9QvQ5B82X=sG923HLp7_;PPr-r(IL6
zPOrt{bz1EnyAwgKK%U!+4KHF~<Yif?Yq<TURX*Z(1q$oDE`P{f;lN<2LU&ZSLw=XH
zwkY88N6QdjRO@y5Laqv@2k|zT$5*(6KDV!?7zxVS!m-M*%`cx{n}&!-cdD8_g9xMO
zNh5-oDTshoNqM0Q`?>&IIAYhBkryDcgXY_t1Gw6e2{ktkd_@Ox!&&oN>Kj>*u!Oud
z*X|v~>Tb0)*0;=$Z_LlrFZisO(=EETtt}{kaA6Hr%xLLao7z?pw7Lok+8dP1SGk>e
zr_W}kEBHI^#EK}^8JzkFKh|zTiLSJZX!h#sNluYWbuV#7f;(~J)e_o<i@2PZ&mM0?
z-Ujg6QpKFQriP5AG;YTtelwd*8>`d{F|(j1qPw<>e8r{Yi|sBwR-?_73Nx75>8_b?
zYSCE*E`6h-#H`ksqHNS%RrB+%(p@o*#zV@6Nrle@XG2Op3CPH`iEq%zi_>6v;EM)#
zZ);R|`k9_IBDQd(rWSTSFsZYvn2HM6#lqOavg%k-wU&BGt1gOJ^(qe1U8r9Gv(#4t
z5jR&FSKN_6C0|bM?3`7hwuZY)3t8D)SlX?)YVy^JS)H9G|East<Crna7m4_0&2V@M
zx!<s7le{kpDZdHlnUM0TWgp>@K3$QFkZ&9^cQ-J{_8rU}LLD<h$;;WMoq0O$sMYmM
zzfkdf`aZ?>@<>ml9G#qdpCUf>I)$U3I~ETI3jvO4_bDb%Og;f>I|v&zoW7E@f(z^R
z8gzD}g1v6dLVFlJ2$ggr8_3~eiV|tY{TS#JU#f6A9g3>BYP*)soj0rA<E?*J$YXZZ
z;#ONPfu6=@Q54PUS}Pu}sP}s6XU&_tw5!&I{0^t{T_G1JZV#sLC9M|KW))h)THq#t
zYZCIxL3xKBLJ~=N58a9luK@dnD<b|8NDU<eR%jFYecJ4K=N8S^)tDn79<m0KsiDBe
zfFq{r^NZHZZFc+n^H{dv^~%tfd08R@wdF3ouw}t&+9WC}`4&?sSOykeTVr}ck#O!|
zW8;=@XeSB91+}-mx^hLCO|@8-f_+V0N>hn%Y|+5cmRiubvK5upc2R0|DdHrY8t}YJ
zLiha?;mBf|ZcT1_3^9#2uAm&C@vaL4*PkQx-1Vg;Gn0_5SY*TFqWC#yF9MlE{wtkX
zU%CO!Hf*~<@&mYu&U;euDtVt=(k1BA5I0a2*1L>bgm`1g^Id^_#+Pf7+I9`Ugx0O$
zr_ej7RtyG<ef##I^3`%zXzVeCkN1JaTsP}A{s{g1{ls_bagU(gJj;j}YRWd~T1?i$
z_ZH+%JvYpfsBWvNY5T1-th8U<Yj?WT%@5vfcz>~jy=UEf<<fbasQP27%W3bu8WIn7
zpX!5~*}LNxhSze+755r_0YYG%j~ANm8Y!9Q%usG`ZFz;tM^|u`iJJ6Ll`%)#ThqN^
zv^|!J`n>BhmyXtXTjYVsmGYTA?4EDmDX$*wwD-xw7(P@9NIqi7P+&*kzpeP@K#*k)
zN$!wMLacqqxYWwsLYjx*HWn*)N`wklUm1c5B_8$p+|Dz*&MdYTVnJOIbQCBR_{u|3
z5@Ala&lfN6z4X%F<ID5D;0mit+I+tH3SXtaZLZH(UDQ`p-L^yxyS{Kx6c#S-!)A-W
z)$l`ntAS-JK5xKT3?A4NW_E_g5|cTsg+4`o#KGL_VZ(<U;4tDBjV_00QJyuZFZ5Z8
zowH^+i!Hu|deEA;$m4J|PLFjJ<-{guWxcw}iB&yaRFP}e)Yzt`oQjGvx;=bW33^L|
zJ2P$JE-e4BhndMMnw0EV(Z~0@SPaAyR_Brk4St>F(h3#jt@nsLm!?~Nm4#4gSDupR
z(2C1W#-p&<Wpmz{SCs0@E^o#1GTVf|&{OZtt9Il^y;T<BaqcbicxDAk>hm>EVP29a
zDnA~V7vGHeBKJTyf;QW6cLX=|u<QXn^rvAX&pR-QeFrqK_@Nz`s5VIvS=7_Z%B(w`
zHW%>I94D9Ik#|ZZFt4k%>zXT1c-G^-g19%vSn#7zVj-$LT7G>=V3x;IwihClrK+mZ
zQJv?l_Z0f`3i0`dG}cFC3t7K630{@}4V!%(VCrlSN8~S5%=-Zq$_=JuR;>bETzSRQ
zxP6#|v|I<<Teqh>t+J}hg6+r$^_fU!#>HM+XAFzYW&3}P3%WW7Z?mr>ZLHnK&YUR%
zoG^?|H_)%u1^?vStO)>hj^+I*GwAdJzUDvbx4?fsGQc_4j-VQ>J^hW6TI>ROp{NJu
zSj6N_Tr6RHb+f%yY>-FzFR%PQkM#FfO2vh`O~o$=9Y&`-_ZQt#XV5LRA?ha)^GQwz
z^QUQbrfn-aVC=*9fFaS~0!O;8blt{T@cUJ1o(cckb*63EYO!3I5|q4_I<>8ajobSb
zdiDo)!n^x6eF_v&p;yN^qph`5`<2^jo(8>NrRJf~`}G5V8wPikhj3Tf2I)NjTgD2k
z&$Gd^7Jv~~@)?A^wW9?Z{>tjg8eG<_wyOx`!vM7sx53n4q!K3tE%rzYw1+j3_71$O
zTf(@!Dth+0V{>B<TOPMq9v5Akyp?Tdq~5I3H-*m-mpYwSSS;^YuHbi_Ot(wMq`oZE
ziRhBv-h=Td?pzJ5Y4)u+w|Py=iu<DYD_>Y1FRj3{{1ZsBoWpP66x@H{15YY8@eCDH
z6|m<o4+!j=L8DLs;7%Ja3SL7aNT%2;PB?=_r9Cyj4YXAUe(T9ADOz5oT5QYROIFxC
zsrkmOmouuC6_@0BejBK63%pQ$dPz~xsd#KFmbjPOEUC{K7hX_5fAfQFmhXp@!}chP
z@ui&$Os%Gps}xL|0Zb3Hn>WR$$z$)b6t@|3KP}d`+~&7fmU*o%Ym?QAmn9OnxU7DQ
zwR>9F8rEKvh(Af4(jY(i`vTA}z1w|{&+4>x`z)3iit<{m;YHT3_~As6sKseT41&Hb
zwIy2CGWLB9n#JV5Aphg;G2fB{Q9)@ZZ$~TuO~Vxa4QRq2E7W>ik3lCYlBMp)Qg3@b
zj!uX6{9|rd1V}k<5Pi#gU3s6c+BmqBI~yEf%1J40oTr^f@Z~-cPnHByeSwmsybrP?
zP?DmOKu<|vAW#xd^v4iT64=2f1}`GGCr}dOfLJujvIx@@K~82_#8B;m`N}&Vrj{3c
zxP`A&fz$CFE3jl-Gt8bE@I??Tj-qcBSlTKyujRrLZI!C7(n>CD@p<5Uui$Vdh31wi
zG|$wGQ-TfJ8&neLAJvpB=TbMMU6Vg&_;h;Jz;?F1WhT_rtjl|^FHB*%;g1QJV#u|v
zHTaZ?_@aD83u^+NE=w>P3>4nJrmJgBS7mH5WOT^li(}66rR6V{*4er|fttd2;UKc5
ze@kl$aZVhWS?&%XPuH6B7spC?+fWi)?DKhib1QL<T!`(6F^{>=tJ&(^IDL_m7z?`m
zR)r2(M6N8nCvW4P54Rg<G=`3h6=}SSg8Ui@hxp?HNXHs^aY{qOl7<`3Zm3ZMLO=`T
z35if>erRzhWW#BO7Iua&`JhM_XBX<M8}K^&29)A(6%{&FJv1*AMj`V<HmlW<r-fX;
zeIFd{ltrL%;2FlaVY_1JKX_V$emYw50O3UV5eh1WC5=TZ+EP2__qNYm+tsi<lwVTU
z`3GB7duiK>-uX?-y*5kN+J-7$XB{h6l*v)ZM29fniqMPc6VF8;+{~Do@&itPSg!#s
zhAO@nuA7;9er8?x;|^Y_5A(zE=-!w;Zf~euwyg4pcgr<eKJLEwG>2<oz~wOJrg#Rl
zS1WZ9EVIj*q8bMb+>A(vJjr5mLq!pAK%_}uKuqhEMfht@Xa3Us%>}CbdYo!6FSp~S
z7d&dgW<)rhsk`OY#@NLqzvgrl6kJ*0&y#6HdAX4J^85%aa5$IBWT}6cyB*#OCb8$`
z`=^zxZz^YbihEm{F!^EH5MV}<qYs}ag<f0^ZjK13J5od3Bi-eZJyM@zc=uex9|lpO
z`hkY09~z#QBIRN=-V^DNWso8JRD+jbFZvXJxIMxaDBKJ3Xc0^hK5!3^sx-cAH3?Xf
zxe;DbUoRSdRk60by!`v&csL}&pT~zL-0mIFj;P=Fdi6T*uM1nc3--#;y|Zq}oArrV
zFIH4koLByX2->kIe23c&%gQ^D-to9^rq}Cz0TflZ5B8RBZQm?&9FrJFzMqThvN$Tr
z=?iQ~BZ|3f23W>}Oak!>l4zUwj-Ii8#s}8E(9WOw8?aie*4H)d4NYLnl^W%#&fhf9
zQ=da@b-U24NP+*m1?mW69$;+#Q#)%OQ~VFaIHxntY-suyv&=88@ot*s<;v-PpIin9
z<TBXz-fl4;*9|!ekAe4eX4n25lK)2JPUIBISSg0hl|B9bPgi)k&hpjj%uftSl#>$W
z`1`nb$mH8{p8w8TZHNBLSZim}T-bt~Lz`(gEDOzVI~n?~a7(kaU<Dn3a?@s{FqUJR
zkLk^u?l(6t83Cr&w624_9dl`r6xLKWysK0>hHZB7nF*)>aH1kVLmAX9hLvjNLS4_#
z5BZ#SyUndSbe|P>6fN-BBM!$Lw@uvtK3$X3Wdja}&*2ab#g@;GC7LgQ^6<SM2e$l$
z?ts_j(P4({a5Py1S{~TF6M7wsgLRS)71uX>4mW=x=iaOs1S*Mgy?EqamK{XWxI@9&
zs$(^r18%FoK-2IQ9fw_29RW3<yZml0+6OZZ-uLj@z%tKl{`ShWPK1pXZ)FY3HE@Wu
zb&m0UBuGSM3dC^cz?i3vI8#Sr^eyk?E$Co2)-h>FqIyw45#@6#mP8lB_{~{wfi!6^
z^mOGF=6OCGUTYPiyLCyZvD%f6w74{nifC;x+t#8IyS-vg`HWJ**~73z_aS?}wWv?i
z?Dm#rf$~5)2IoiC!aQd<-A;oq%Wo-8yVuEDY-xw^?v;yGc?-mJVv^0-A-f+Rl*;j~
z-L_WrOLFMrr$}TmA1H5XD$g0Ufv&Y{y9QD@DS#++xaN2mUzXr6JG@(q3(=6jFJUv^
zxu@Iv1_lO1f*%7Jb_s@<O7!&&q<>~TNsN0k!%Lts4K(3uLK(I%#v2M<(+%;>_;ylj
z2d^h;N3A;Oi$Wt8jSdvGwG{!x$)@9cETFsaO}sOmPO%B^c^_^$OZ3UKK3|_qTU7Kt
z^F59)=pnW9OuUiW`Se*WA0{jMAPG5>buE1EfG-!BbXgDXilwyDcp8hU!FA;)97;rb
zwNJl0+HiED$N`CA*-ij_a*c=wiyMOadOg)3`JGrJUy1b%eR9CC*4Hs$H9<<8-6Lsm
zQ-6jt7T4|9*5lec@5eBS5>nS1#EMo9ofdi$^fF~x3$#GL-G&KKnO0ia+Hl(pgBT1e
zeQc)sPLiL#cy&=xb^M?5LuUeN%Xqw6B#f^n;G{i{`z!nKL4@j}Ar?Y<HX`|8ya>V<
zzVk#M7IPr#xiOAdh_J{@1ClbK;QLiK;`>!MI$eSa;Dig;35`5`$m5iEp&+AR>dM`P
zC{Lxbnfj*Y;dLh|&X)BU`zxOE;bc0MI4L)?Q4b-{*Nr^JMIS>VNoQG<i(~FS%$Ni3
z?oEFs?93|tQ|TU5Kb__UO`>Ned5Fk^|0TOcYzN-BAJPGNH{C<>>t;sdBQyRFHi=hb
zw{*2z6JBhj(*A)`1S7QcV*U~joU;F9nKZzCky~PJDVdDi-yRwitr7=$l9uW3NV*zS
zJD9GCc{3vp+A6~uiEq>y(uLfPO7&tXY*QCnaiCSvs6cTdH&Uh$0!43yu81*<3NC>8
zuUg8lQ6hRc<ib^wJk4jh>er5lUL>w<g?T2MR5)i}FN*XCzAJ3C;@c+p1d7$76s%VA
zoE|%Dtel$V%nRMl(AjmW7U1ZBrq-Mra-!u@u6kCyh4~7~XI(9pQ@Omt9-@@Bl~C@Z
zsSzya@~WlOL9?KA1RvCbX>sMc_6<A4&JE|C;&N6voXuVQak2X41?R(zYY?C8(zMfR
z>&4FJcE)kI=5RFNa%OG0YKs}RUB<VapW+ig!|u+sjH-o=1IxWRhEiZ#xn7Qzy9Bnm
z+lsX@qT(BLr`w&*E1gC7;)s0NPshD{>?Tz8dc49oYrmZRZvn1X5sVvzoTUhfkww0c
z1#4|Y4LG)%DUbyO!~6WCSb}~sZu6=ZoPwZd*cg|;_l7<LQHna)741`X7(O*#jgxv2
z6%g%rz&le!^R?7rEl+#ep{YZ5mo4DF3H_htmtNT1oJ?n86w-TeV<*<qfsYTdLiatk
zW|#>j_+A%(p2)N#Vtp^~$<y*|#-CsoCAn31EaLrn9eZV1-Os&|STfd~i5F~eZ6xhW
zzdeDT*j#S}CfTwGJmL}W+*mBulMTtbnDnKcE8CXMlJ;?7HdBH2x}rAL2)%)H$$%PG
zW}|)Fl2Tz~`NPm+v(Y`|6VP3o5*M1Iu&txOs)53BDO>mEIm_yT7R_4F(OTrtMCkKt
zu!&pq`P6T{exI+YykMrorWHhNR=4VW2x3~XrxNCHsssP4BMeh&D_|y9r5CF%#|78A
z^0>Kqu4}jG`c36cCHbCwr>5a+hsM}o@4#p1CC0aa0wIjLu^q%(YIJ{vz1=()h_J0Z
z_qdS)atV)}T;38Jd9!zV-txTDUHbM&`An%f9KfN!+%j(0ui!mmmns}@V3*i~PZ~#g
zBYBNf9=`dk+$qLjt>DsYuvP2=MH;;JNzsS>qKEj~%@kps7p4tRfH;S5N=wZE*hwr@
z**Y6c#<*%NuS&Ck*WNc^^Sk^D{mwjF-})8HH#Agx2fWn{`&j&G?BW~J_L>@(qYy_g
z4iP=&;tk8Xn(Jdi#Oj-GM{HLkCoFF=aY0X^uUNkXDo%f$+%7dpxaD0c<o?R!fE^)u
zS3ruHwQU&ZX5hwwNCaUOEQddZ$z0RCawty^YR&JOPsnchdHeFhK<bNu!g$Odf$?ED
zPjeT~g&-k{tMoDl-i|;l7Lbmpr>fZa{P{bw=fA9+);23pSQwZ!dxhh4TS<Uz5&|W*
z4=ENGWY|VqLrH@Udj!?zP%K5!f`ZawtKz`78&$<Kv!ubs{coI&l6acB*dku=_wUW~
zQS<1IH|;p2<r7K}gFFJkG+=&F24d&_P)l(K5pCmXkQOh*lX<27=!RvdY*0FuxgCpK
zKE<NAon>?CYCFqZZeRr#vdH0H)}fTPlr(nXn|M`0-H8DaJ^qrs>b%QOzTmti?z887
z$>~uv<n*Bg`*n4lb8D})EAZG|R^d@R&M(bbtrayEE~vjeucolN2L(9!(lqm=L9AVT
z9`C`5TP|;y^R5emkp;@j2xJG`b_aFwDWyT|33<GqOyJO+57$$De8L`#MNPAWevybq
zd+;5DV$oNedIIYfoZN?!uRaC3vGEENMsY2{4&Ieu^T+qPV5!90JN_cA!6RS-#7B*9
zx7H-?cIN4j!M(7ASG@jUcPDs2_1yBH->a}Jb~&~n0mN!9Ve#fKZkT(PJH&H6q&9Tb
zG%U{dLOEcWd<$(&pslRas0H`U@=tCg@CdMe7K>k?9BU!=m*vfvQT8N%rAusYTd|@o
z+F6Ij71q>*Q&g^@&n*hn;I=|XytD2Nm%ieX6?L5=nt+-!m5Ao6B2wZ+&4ihf);ATQ
zX8ztOe|sO6_%^m}fSyTm{q$KL&t-HuOmRUs7z=QDY;p0#Y)1$VyI9W*tKFRVtN}kh
z^lBPUn0az99mDV{&fmRXEzNVFnhI)$DgAzFGy#M9c&l`o_V}(s7+@CK@#9wmzM3z<
zn7Wxs;gBx18yDSV^0@IzXuZAoV7?530TbS%nar{b^aUnV&c0y<`eF5dzH<PLyzg!5
z^yK<?cNIw-F2n%l>z;pqkMT-QHb>`>+;_+w2e;9fR~}Fs>s|2`tcd^rQuikCah>J8
zu->z8v#%PBMl%{|G?J}dnvqwH<u!3^%fU+sAraZ^gb+*?61Jj10Rt&@fTn?R8&fC^
zlwJ&_B+vq)K%pBoAHBd=Xs@^z`b+!k*M_dS_rm1+KhJy4%t*3L!nggt#5(6a?>TeM
zyT8x+e@GcXa|_*f+1aI&hOedOYw0zysNk1uu2q{|D)JO8uF@Qgf>mlZm|u!A>=&~}
z6SQ7S{|O|E!k?tg^Ou^P=S+L;^ZZlvRa+*Fm7nM~g}~C1C?ND4W_bvw>Di%KFi7~n
z4hUSF_<m+OqZF5xmM60JS5v8bqZ7OPU2CGzn6TXb-4oG!Q>p6x*@;z%%A?WudftZ@
z-MvxO8nM*qUU%`sp7-9UT$`}ZoX2eKhjk3m){<VLCAKB4mE;d}_-M9Ny$0AoOca>N
z(30Dc7H0rSnK~K>Zpr?xfm+t>CwVzNDHqkH@zO)tA!k5Z51yl8Uj61nru|g6w$}!g
zi#F{%@V>ChWsH#5d8fRX%0=W4QEh?Jw$+EN-h|`@T_}-PNg{d%LW&MigP#;<+E3*7
z0P<_GRgzY6O<AzM@)F+BOdN@$b17)W^O&CMG$@0Q&RP_L^PT1U$yzW11+h>1#7D);
zKsUk5$>)@aV23$cK-HU_9uPjYKeT#Q(&<Y}x~l5rEPdAetce3t?@LS4f%=<gC25YQ
zypRU!9`^z7gA>#Ac#LU&)Sb%l1j><Q?xw{+NL>%H%h+l<_zcb`m3F3G5c$as#n1qw
zseWSJ7cW%~5UjM=(?0jC*aiMkmZintv<g+58j_$AvW1|UCZt;E&OiAxzQRR8E3B+*
zrnP0(R8^w}U00T2?0Bu_2=vZiyfU54mY;9_^3N!VZ1*ddL$)W@5cEyg-|-l^%m^vA
z>eC(!m+E@|T~BjAchy@B+NxGMxv@Jh(RIY*bzO%(s<wTNs1;f-tW8~_D@41P!B9aH
z`|oPVcU`iDFVUDwts1vpC27otSV3!*Tl065Al^gHW7<53aVIit8W2P=g;)KRDDTI<
zMk=~O)EI!E@FvV$Tum?u9iEU<GVB1w<|@jKvFh)`ME4E0_TWGizm4r_K&mJ3CCO&0
z^vyFSTrQejxr%N6Q!=z892bAs?2^)n2B;p}jDkMOMNJ!~@DZ$B7Z~@d`F$zj@o8!1
zA0lj3yG{nz(g2>LddPL}L#*lJ`e2Qe-)a(2Dp@Xay8&Ej1>6W^M*g}N@MbMf6~S$_
zN<Y8lO0SdaDAUAwieu4|X-aBQZr{xN(b6tAB>EV!;%je8xz}<sf8&BhJBgL6T%^yh
z$w43CI-h)I;YPN6gQk3A&iXQ;j<mgXd={G?1_qU3dSjV7Zc>@r#aW~;pWl!}^0_OP
zhf9bd)Wviy+G+(UYJEaYCs}aYZ{62+fuLt=+ae!v<zEl@=Pv&&CYXq-G7a_*d~B|8
zR*Emgg3SAOdG%p=MG&X?>OaVzl49&VoRlguvA`EtJKESYEp42S6Cz_QNPbA#K*{=G
z%?xbJG@tVitZy?lz+(HtjWCGv^c35!JtB_t==xngehBdq9IbqJS%aQP8-3U}Hp}qP
zm8Q493c-c0=p!RIn66f1x~H=Yn3<O?Lz>MSOrs#Ma9`s4?=a)KKKk&e0R!Fg-Iw_K
z*DNh+)oNx;HL-th_%^f}!MD?a<YS6hjpTIA*Z<0|{vKEN9I%<9QGd3|HkDQVonmp>
zpRQdR*4`rg%a=eIOYbw9vsmF^1zRRDBn6cNJ@+%|`=A73l~gqO-H96#yYrO1&YJ-q
z&Wz`uzQz#yC;2Frp!&%tG30;o#*cSA<IOZWAoalu<3FV#$TnMYY!nILWY;a=*<RQ6
zwyyVdJ-!i-4^%r^MzU<opS*x{XPmU>^V`nn2QTwoB}%sPSS?p^Y~CQbGM_oS<f(b#
z3eN;L!SOv!ntcBacs+lFOn!vV_(}F}!|~XL9Qpjle2l{&#()XRe}*{31VjO;F#(h+
zTKg^&Z$N=52^N>>DHHaysoEeNjiK4fP^uzx>Zw{L1&d#Z>mX+^%-Pz%*i#Yw`>#=s
zPH;zeJ32u)3o);b_yoC$ANE(v;?PjJT=8~R%8B||zFKnUE9Jq#;z*BBl$g2)e_!;Y
z81$#tL@@|w!Xeiy|MvrGWMAkV`(wrd!``DL_qh6gk=hs2_Nk`4JfLOwC5`<M$`B1n
zvI@dB8^9jaB1}3c9bFOyyylm%i3)}Mmq8uA|NW9W{zFqd0Dk9UAW^&oTG<!q9>OS5
zTqG5KjGtHD3R`=LGuov?29h946iC2_NaGIj9#<gl({N?uYt|Uh6C$(2)6S|M9kn-D
z_BqEnXIq<W`z0@df-&DpZsJ>wxax^-dn!)N5$`_RdYf&(&4OUwT3od3@m2~MxI<GB
z?eTrg$KM2EBcz`|Pr@KzBo5Pnpa%Ub0hUc>HE<6!b!rldZ{ie(&H^TA`tZ)uMA=Pg
z`7Out-UaJHi@<|kVY#mL3c?H`z@Qgtso{O&n~!%}Vek5DonrtCddy7s`fx(g8_lfi
zX3ZO;5=4mX7(Wl+=Rd|8L0TVEB_tBwhY<qv^Z9Y_i&n9axzOF?Agrc04nbKgY~<n>
z21iL9!@Tv1Vv4V^P9)gTQC`~C0nx;uEVFGWV_$ZViq*kmQ|Ko2L`ud;tTO5Fo_n7T
zyu|$LZ*61bv~AKCpvnWG=RLR*7C*r`%^$sIX&VErZTlB07lxm2Lr+%!`??OJsN{SK
z=rodsAp``<h!Rp%FZjo>unswxZV=x=hBrnsys316a2D7J#r^$5EElpO6&fw(r=pIY
z$wM&@Yya*(ocp@7Te8`L>55n`g6rmYm@Cil@joPoK9L)-Msm@Fp#b#5vWL4#T_5jD
z>t8oVdMMp9VxDsiMRn~^R!<k>$Rk`(JKTIbpG4gkev+@i7l8-yCD1KwZ7|5XMjk=j
zxa0|kA)k>WA6pdIHJOHd0qF!(9KLsd2K=QdCTx3@EDA>nslysgjciYi!l0yjsqFuT
zx!T+>Cn}=em?IW`3q!$C+veYHAEDoVAJ88gvzs4;ujyyyWXC(e>4E=6pS>1z*f4oE
zC9oX8E~bM<M9(1BlMmKI&NFb=s0Ca5pDf&+8yw6*r00Y~eThU*dUJQ8HyJS!)+S3e
z=J#!_R<~Bg%Jq%nWKS~X8Z?lcbbpWMMpBV<K9q>zu@WACN%Nh<TZV^0Hv4orbkHm8
z-2~0+TCEninvU|d%92bbEzh&gSRS7r!$ocT2;$LX&v}s2;nrXJXIzLUaAO392Ne5k
zrRxIIq2K`m&n`dKW=i!Z)ddWy@rBc2ht}t?vw(0<QiZ?YiA2bx4}g9|Ytswyu0F^n
zi8kphr&P`bwn?}(6x=tZl88S=tYn)yuMhdOIrsx|Oq!O~Hf(wl1)~HjAZNm~&yi54
zboeks)$X?R#YNrPeTlqIi1H=d)YKw=cMd7M<IEX8nfKlcx3jg^tv*5BNLP)zVcWQ3
z-PGXz|7&$?+u^ipM%FoNtFr#u-!G-TJy^m)-y*EUT4geZ!Gul@q84@W&+j@1RLl<~
z!%JZVu|S}Z^Wo-~U%z<Ip8xzVkR!;gQZ{m{lW$nujYcCG=ogg+#=}A427S{v_(6sR
z_7|w{dBOAN7HKRn^#tTOv58C?xmXNIo}YvZT>;vlc|<TUpkz?Yc#qecOHRgOaRG^q
zQz{Phb%zJaJ+a<c5^lsZiFo5oaVVcF52VT?BmJ%$OAOmnk0*L#J>>z!$P0O}nN*Bu
zC^nJm?)7r<cwfc_inj)@{6mgAWlv>t1$<#59z#$s&(*ZOF9$tO;~Q(m66)iU%?|9s
ziG<*u_Vv+$%X7yN#zNo0;6jN<Qr6n^cgehEu3_3Icg@jAJx_<ZT_+&~FztoOEyrMG
zKUY0ZHah34r_pT-w*Ul<Zt|huzGDxYQ;tj@){H}Q=w*}-dYaEFZ^OPgh~1}4r&Ss2
zEE6Bxn5<4SGh70n<Bn{crBq;GRb|ouuQF50Ydt&Zct8DJKK<@oHMcpZ=b-vUQIgkm
z7JbI(8}Bj0Q}L+dgt|Rje2q`<7_H9XH|N9AWHyI#qAnv949w1|n8Ufvz1UHP45dG4
zXIlS4B$G^(2$?SsTMu^llS?ZM=mt<3GImU-u&{Yj_90e00PaD%hOxPfzX?#;U0(Ai
zOxJ7PX3rZ)=84mxKZYqr`vG@~<tuYt4GdptkAjU0#sh`UJplyphyrMD22iWj$+a(S
zPS4bX$UEXw6tC|IryA)=xE#Z3xKAq>StD+SY+X&nEv>NKEfw<p)>h{sxjlbGSo(d4
z^N?4fJz6~57iG)m|0vB`J&I~Lp@atu<%E4rq-S!pCknF_`kCKWXgS~aRHD0K&Y<gg
z=>(OB3P8syL*7X<48rk%H>l5t!a8Kn_NaTaj@>Ek=Im)(SeerZ>Z?v_;h1%L=+*<%
zMdz&K0)MA8b>P;a)1hvCQic6?2G34AJ$Bk~O+&v0@CrM2o66(N5n{fy<p$7W2L2PU
zY-hg%Ku5J*zkK($=A$Iug8}Jnw~;|<0`h9<*>>V>^7{7M<^8t-8g$+JgH0LKH~TFR
z5^u|;%@<ePx#9IbYyUjnANa2!Qmy~mRz)iP(rxV$Z;>8rV&jLY@7A<W;Hw5qU*G$$
zRS^ISJj>#OOMD=JEZo>~yl?q7CSQ{JcW7=UFM<^cY#|5>tVY<GnHq)afyvPpfsq2C
zic!@11&P~-f*^h&%h310(ihkq<?yu=JdFmnRIBxYJW#2CPc?CExZHlG7=72r-W3&H
zEbdr}$e%`rCXFv(a_Y`hUv-NRb3=Vo4k9YTB<Tyr<WTU`RVPngB?75sdwn3kdw2nC
zu<2zgx?_9BjsuA!DY{s>1ubW%+9vzr4ln#OJaRLTEuQx!eCwU@AA=o5CPs%V$$SD?
zEOrN$+Xb3cDf9XGV|M|#|IHkJ{&wjVBxOF$A0Yp($NmiJ@Pl{W&ptosL||KXJ&0JS
zR+p5m!NVME#7u3gB3~Ye0>uF)>h5EzulXl@`WrrSKGA|i^5K2i=f2+c1jklo$*(_i
zwkxu@if@jxu>QBg+V}yykNBQdUze8w9Stup>?$2=cC95#&cK)jq6qE>*v>H~=enHf
z&d!n6tKUGh%KKjgA>a1nn)?o1eDW7?ar?V9cfCQRlwO+pi|*G=t?X*Yw?jtwhEK_h
zci--=nR9T9ZLJwQq58x^Ny^W35Ks0l1OHv{ve^JS`i&}7^XkjZF!1xk5<4lVchAN;
zW8cE$f>HqQTvMk2T^z#VwssP5<8u_*8tqARM(|$H9qXfLu7eu~s73oN`5&x9{w_ky
zv_wOhp1Juc=4v0^$4u*KVx~!#5qv98n#lEEQzHW8*EH4uG!K+Cw6uaI#P!UY4}a#Y
zp_=NJvzk`dPZfy8q7*cbYf2!-&TheD1|FN!>;kwrO|NTsD(TmI1u=`i3cja-_Qc+`
zgUG}V{NlhV5Ha7$>`jWa0@8rB2*hbqlnG_-oZCA(KaujZq}{hEKf3Sg@m}|wwSpx{
zhbg@iH2!OB-72IseHxmO$XS@g9&j>4+p4h4&mI{b*;z^32VgUcedC+horMNg{>4l~
zpjG2~B<;tVpmuD_p5bjtDpH!JioXKrwJ{i*)4oh?SO2aQWbbExX7Osx4BO{ieZfe2
zIQ=;bxP{KE1w0wxm8QGryrhBCy72*;eZB4+D0=up1zeP|Rz=?Y!0RpR^;oa}-7?lF
z#?Ny;1ATUmJ-nM0W?*)L$vjB0Qe-6L&VeOvZNE9%9&h>fi`TsubEEZ6`Ud1u!R(v3
z#P8Ql^NxC;IhfB_6@=lm7rOyuY*Hf5<T*S%Xba<Aj>(>af(j5O3|r|U4U7)rKRH!E
zOt*Rsf)2$k^c^~rD8POf;=wddrSvNgboXewB0LrPx$4g7I}pv;P@MND%3EdX9xK~d
zfsEAa-|VW^iG8M?_mYtK6}-lxE;Li!47;>y**1EeM8-DqcA}UL8DJ`T4mME!8trCS
zF0g3GeL2{li4~#%<6QEv=6m+|Ub52yn=g=(yn(#u<&W&BkK1OiX%~9zSlBhSV?fk=
zovAO8mzbo57wY@VrZZp}3C)6Ej@3Z^8>h+K7&=+t_J|SCle?hxW`rR^Gm$JgK|f$<
zW!RvGaCWei`{AY~J3$B+Tu2&xFxAL>bMt7_+d3c(YbpkuwH+stSO~>Zr~1b<ZP%o-
z@s?+QCv<GIG~`EpFX&+%oR1R=rHz6!(?7XiG7;^3JF0fHArM#q(T*-fI|9F-px~(Z
z7+z>nS|VDGRy0K@69y-=M9*Ah>k#M7>ep=fRd^)5NLPOoTg|b)A^maBdv|j9I7Wd0
zLiti8hW47<r@YgMsP9wtS=}u5Ag9OFN2!HTmIT(+yV0LpQ5G6neqo3`<Wl)z0)pO!
zl!LpQ8*>UiN1)ds>$u4@)y1s{U68!X^X|glKqmxr^tLXlrn$>f>phAWsjHSa?-`FG
zD9&IH4jcue=m9*d=sgPHwO1V&EWe7n*56l_QLbU4o9bk<=NE@shy<`5qYh2Qj1^X~
zAu{eGKK-9=_@L)~&_pv4xi^D&(=*<O8b^<Q;Lt#|T3#-q_MrW6vx<+8>gHc~N0yI%
z@6q9MKRhAHmjtqT8s~c<8@(1jakqAzrrwf52Os1YQGr<mMA3m|s|4o&@t1Kufcz`*
zJ^a?y>t%|Bxf27loY{tPIRrSdOuY<Fc9Pn&oKa@xP3(NfM-*p^t!%2x^Dw5zK5M7v
zO~kR`j5tc{6-mY3>?p~*5iolUGdnTiH6QdU2v-E>fr53^cvBA6i=LuB<PCYMins;^
z^QbAhsP<3V_LKC-4N&!t>b8C2g#6QwBJ<H&ZQRQ~R4m#q?5E#YtGQV({maE7_st69
zuf!m!@4AE!ZD1w63cxlfCoYgE@$2W8VG(_^DdylR`xHy5p|p6dv5Y+5UeJGMFZz6z
zv1m4U=O#L|U}$iR1Pltyla6d4OZzt3Yrfv_p77TFTe?(%nh%rs(YuC^Xm6Z@GHSpn
zlJrLk<vW5=LAL!^LukTc2(o=A?G=*Br_Sz_yb)i^^Lm=?VR@eW5Yd68F$3T13!M=y
zdBqVh7jt*8=w-Q;dR*9Mx2Nj+HO=idZLv*rM_g^D7+vD9Xt0@*Yf|%K!#3k#XP+;0
zYbB2>Dqa=}K|G===Uw+Us9ZoFZ>%Hy^DxCpxQ3a>mcpdD(7A3uXC0#(>$uda+4HC)
zw2>714V7$OBq@!UfRLtDvyS8?E2&c*v6YeU@nGPkvCaZy8WP{j_AISHvM1MjX<!A#
zfMg;M!xQTwum24yV`F2T`Q{4UM4kNuoX3!Sj*msZ&x)qq2r3-(>Pq__>W(M)AiCOV
zMDchY^;9p}yC8X}9zRb#S2x!443%!BRmEjWU8bHeBVX6E?FwD4o-}6vMtl<e*@xcT
z!SZ}kU18M9t$yu1q|GA3@-l3=EOH`!7NQHZ4EBMKaf!aCmiLADQL4cb9imQkXJW8m
zgcL^yy#Bx@M~5$_2c)VGY;1?6K#mXjeb8f#54n>=Zh5LdqyPptqU)BnqZ04Cfw8Wv
zpfQ48=lLn?N<J)H*TE~+1!#9yY>6QzIa<?NicqG+)f=i+>f>tVFVzVDg=6t@r4Wsl
zqVs<K3blInQq8cfV=_~%u@*_&HIf$+=f8(n+cl#ykW`T75`7G3jk1rp1~n$eE|JbO
zPst?-Sd;K1S5DK$vq*=6#QM3eC~oU6CxoSi497D(XQb4tP8=x5z=tPiqhU9kbW`0C
z>?P08uW*pgD&jTW^CoueL~JaU91iE=;jmJSn)<hOHFYQw*}PSc3~Z<aB;Ecd5!7S0
zM$XQV_E2eu2y~R!4N&$Nx+K_!CYJt9lX8LNV9+}#ehpBKDqH;tC5du|^L<eefwA&|
z2{qL{kVT*X&oM%pB@*TC+e9(aog&y&zampy{pQnKH%CI%O)(V(H={+NhunBBJe)+W
z5`|3JobT=)h@dkRtR^d6{|kL#lC44@i%2m1O|Ve#;2{U~bRFH1xs72Vo>apgTq|II
zFbBW62_<B?gM%&r#l;H4LNveZ#kp5b$GsKPjm2Cd0Eq`%VZGv-@3q$37M(A97_F7A
z@8$2E0pf%c4Lc1d9CZLwfv@>rdU-yH`g0S2Dmk0X$6}1hCiTOnv}p@!rn5&P!w^cN
zQEY;2mjS|;)O)Psqh-QJW0Oh}al&zKEU6La)(I`GkKgJ<wbG50rA6FZ$MqoV7KqFa
z9u!4(9EJk>@=wYiN1a>0$a1!WXd2M$J>YwuMqgw>II&j^v0Tgmfsuir0mEPP?0xm#
zNAJvLEY%#Zzx$=Y3D54ly0Q2EeRn>pDN#LlW9`P*#FdCq7=bQT%2s$!B+Sl1#EXFy
zsNBdp5j)q(FQ<z^K)>_Ev7Poru^kwOEKuQ|^8==&RuUoJ?SO2~dOT|L6`<Je1s6%f
zhd^RT1~Cp@fKSZz55XXY6!n-A=w(Psv2ddcsOdpZv#K7%ei~MVaEDX6lA(Hdhn>hd
zwdyo1!=|e>Czr5ygzKSXA~ZM7cm9_1#^>O>{jD1oRv!<=qs89s^jy98ukd3j*6FeB
zy~Sue6i#d#<2#%;wk;tN3uC}><*^yap+Ns`kV3JC8!4_TYotzrfMKnWsY4n;ecLH#
zhs8-S8a0v!W2Nv_0|!{e?W+UMvUb}q*NURR)<ODcVr9qpgs2d$H-z@vNe25A^`S%2
zOX38E(HzRKRUTToo<<Vm2z*psJQG$mW0#jRc0TOIm14Xv-VH>@?x_AI+WlUm|DqMs
zwhS8HXL6~NvsazkF{SC<eG6kF^Ty7+5mHNr?Y%YX{y>8V9K71PqrGvZ#QQ|iHD8xd
zw0wPh>#3{iFD4A_>AtarI*c);jNu{d=io^(;^0My#hd~y(BcS8qgFyH)1+h#b~3F5
zJ3~&3`>=+;?zTm55^ltGK7cWO2p4bT!@iqMeZ|yoJ>z}J#mk2s1@Z0t#9q&vCSOHl
z779V)@k0kREKV#RVjr_<#zTNr2q->mL1B%2cWKKZZg6^59zh1e$8M^iX29yh*=(wY
zZ3*kYa&&xrW^ePqnf5oT3!6sj{n2E;i2va1(_bIiv{3y9sHDQ)*@)*wtY^|Q>8u0w
z#Xvc|ygb;`$X2sa`~h%ac{z<-%W%$AtAHEv=dv&39%NiUVoF+CN!VRtXPE-xEOdil
zluIPxPU|rJ(fY?!>_XJ{B{X5DAoxupW<{Kc6$51;-D|2Mo4!g!?Pvu5Bmb&2ERL|^
zu9biNEmV)D9-b`%nmg=t7wy=r@C;kifWR(hWACC|8uuz}J63^9cpf|bAX#K%1k$R&
z(j{i9eI7(wD@dVJZMsfP>;FMMP$DUSc*cTj_Jdy5(w~OU=+k-@5Y^2I3&7hA`ftE%
zE_nl@5yip;{w}I3*9mc*()?3w8&KRi;b&IpKM!tj+}Aif1iYa#V>qL)$tunus4HJu
zgN*@`3j_w%rural4!{-0dR5P)mAm8d=HF#9Ur8v@a1LPhb8v0Ug`+SVh{r`HlW`si
zBhqsCkrLF&{l;<2+8)k0v8Z#e>3Qb8PBd=kQW1IQKQ_OLAa-B1ncE9nGVE)Y#Zs3J
z>SzyS6t{ss%9Q6tnr005c8u*u{ngZWBQ#7b1qg%;pfm`d!PBAKQ1qj5(eVItoEpS%
zEyYSyei$5s2$>htQiuj77t_#u4AIemx$`aRx#rW*Q#U}WB5>tBb_!Zwn=m{bmvHng
z!;QzHNlL)vrs%rfPcLAIWSdVr;cY@Ow2ZCV+wq5zC|gv!Xsdr&sgzR7a(s!#gHa}e
zaY&^d;N)nUi5J;6bic0YhC?0>c)L?B-vyDv3i=o1kKNa2JH|&X%mYkS#`PwD?|{#{
zvFmP(t)PWaOG%HRAyO(P11iXB71Wy-@Xl*e%5`4T0>Ac}X_0aYtRr;*?)gp}v<-%u
zD|Gyq5DXw!+T?#b)xq7gGqGn<>@*Iz2F#HnUc)aFco|+4YW}BykFej?O1-9)YUe%B
zfGxu^{QYGy2)zWFI<gVL|FF@PGM63jU_9RSGVE!=WJ2>`EkJ!R7ttuFGpdEftCh~Q
z^Q1jD?snQXZ~TS)wfM9rom9y=zPSo{Q|lk(b-20@hvimYD^a9*DZb95Z%(|Ie|8ri
z&&y}dLuhmC;~n|(Zm>VHjLC$AsVnZQ4jD<%?=MgqK4m!@Ym*uevMTXU6ZTC&g$X61
ze7uP$g%h`*aK!bjdtAijjm>|f&N_33j>5f>$cK|BVeSIz`F}y?pu@H`j<&ACk8mDV
zIUROJqzAy}TLA-Okf<8mD9+$ouw@f2und5wm}7vXCrVHKt7~r9S?TY-CJ{f>-Cx<+
z9Zjagg^X?`H~;$hXgryX^mQBdKc<t>k<Cd<&lKL3O~yyZleQL1Wmk9KRLK?K1fQ$i
zbmz>duDac^+^Ey*Rd&@4EmBOC`t;G6US~8H>vl^<eOJY+m!dr}lj%f>k4f0Eh+Rmw
z!)&VqQp1;9BjjQ#Q=dfuPxGH*v5VnY&&5>wVlEc`0hU!lL;9Ry95%9%9~45TUH5dT
z@PkO!h#pW5A6A+_Tzu;Snv3V|_dt(+2;V5d-((Z0^J$4Ig7L%OGX3v?ARtyBQyBa7
zteG03j}NIx0b?Yi`)BcYndGg}=;_nZ=&i}j%QClyLbqo6k3Vqx?YGB|AIDLg;L{)3
z-FK&*Da)Ffv8*X4eRsD#a96io(e;YmeV4duVDB%B;bBCZee&SYkzX4c8rkQcv4=q)
z@p+W_OTeR@W8@FXKBO^OP-sk?7J@l|E$ghFM3c#l4YZ4lTS?D=6egMnLs8yG%|MOG
zbmp@#sHsjn@dW0{%s|bKPY>IwdpGve*V_Yj+;ICHGoHUQKT@^hYPaGVce|=x{hdg5
zv}Xyi$2<=q$d(dur^j^g<ma4_(S0;p!sMCQ)qganr|=uoyebmub&Ry(^p1`$bQ>Y(
zZqrn{)s&w5KxTGRp1FM2WwyT*-R!^s-+^qRiM>)0%jl<Fh)j%i1S>823P9+ne_J<G
zYH@Ew&_U;gnt`~l?<AlykfVbp#mA+!)!eG=q;;8yUyvlyv=ugX>Q*8Cl{8tZjfhyh
zJU-XOr)WB9BW#&zY>yeKo?>jde~TAuexL9O^zQI-xO<BdGF-z{`}5d>4~OINu$_sj
zCh|g{W{j*2IM{5w#*1!|j<tApqBmh@4SOWg6L%`bk@(b9C>Hw!LaAV~l;U_%J|4{=
zl8mZ=cJ0!zuC6jKMR7(LO9D|zuh0Sz`4iX791aQIh<R?IX8BFg0?!oRNawK+plE)L
zi}`fg+|=VT{)^kQ$!z`_8?MZXbWAuJEbv8$GrpmfGZO=e;da%A<AW2KvUa?upKDs|
z@A)$8dSAL5!G1m!`0|hq{1?SrFs|7@9NmfV6uiAjd{Gu`(}5fXNSBPMNNN#&NW9kZ
zB5yCisddS=wZhvYp0n5&@$4hL5yNoqR$;cF-i-)Qk=`S=7wOyQ_GBlmNW_}V_PE#Q
z+?T+s;(i49Q15p`;g`5zw<LWl_pJ!lpfb~nSU#okBEbcssX>745a}Xe&&ZTmdGkwm
zoZ2oApL_FuF}45Ad=d|g6*eVHNj|>rRACdMSWLdsKl3^ybsa{R2S1Gp`tu-U|6Pz6
z&cF%YBs!{wSTJENG2KC9lixK3i>YBCV@1b9gkeh>+d45;aJoQ0lb#}zFotTMQ4~o3
z!YOY$bVTbzm`6kXjke+h(aggh#7b$!2xsEG70(KH5A2K$<dcpQJz|m;BWnz9S}`-R
zYAqL0lGzh(uM@F#A-uMx1#*v%#|OrtX0;qpeZ_Dk>g-IaiGDlsJ%Ac5o6W~f*gUn`
zcbVye?ZlyP)bJ#L&X@uvi8%@*2ALpg67v@|BpgDdu&|AZ@}<==TO5&A@`~N-;3yJ`
z(+whUP;mxrH4DpylxkNTr2=F}?Z~CHG|zQ8x8);%dAir?xd~o(PuTV?UgkR6enK;~
zxB5CImLK{$r5WObHr6A<wg(Xb_*GhN$PCY~gRBD9+)I~#yJnhYQym;saWb{-{&l|^
zOK39ZlIpI1Haugm*n^N$FTD}T9ad=oryIZRmsqYHa=e*9&hDpDL&rqK<ZNriAPC?(
z(Aor3q8#;}iVxBi>!$XHp>QPB^DQ1A^-fLPY_)V$LD(FC3IYT<>1Cn`&-!GnC${4w
zJQ5!2)X+7*Robkmx&nMKQ{SQ(Zmb()gw{A&P76A~en=d^vH5y8bHhXc2g72{4CFTv
z5I5x0vMl@cY{xjib10u5>OBv4h*NNnsEU2uEE8+SaFora{_+eSI86^hYXx4YRhA^|
zg2rfm(w4*XOOZqtQ&;s3El2DlRNb?1V8JFNAunbb;DS)NQgF}VKhqGe;dXpH7O@jO
z2^&6Ft%9E}HkOOsQ+--oani)W`~M|$aZ=8#C(V$Fuqdt>`ist{<>#8qmF|;H@Ebb6
zjKq4aI>ow5Sa)}jmGs8(OM9aqt&gCKYs9m`B$L9*frhBdlk^;&x%5D8M07UA7|<gn
z$IgPfc5~q3jyOF4QtNS@tUKJe)C_Fib=ESB0SHtE3}epC8Fp%0(go*jChm4{${)_V
zIo%$)|MAw?ZqG*=Gi3YF8ZjIC1tU6w4UuOhmUDkpqlUA=z&YR117BY%xESGQh%3MW
zp_%=$1J=JidYXhfU$6KNg`G+r7E~C^?Y5?JO#`)Osk3YwMzdLmfdN?r(-E>9P&i~{
zi?w`W8jBuqyvM}^WhW6(M;gfbVV!7wp-4}(5d`(<oB;PGg;K35Fz^5+u}gt{nWD}@
zhOtx2^YIU47VftnyW}kSaSB_e7#P5Nl#~!V6iwM7Cbe&2X@#bPPp3FftbGu64{bZ&
z5cuXEjJ~0^9CENSL_3~ujXeabg<2gM^~w+uxb)?dA4%rs^RY+SZ=je<He&f#aLzw+
z+Lv2)^Th{Q2LA1i+wxKL3si*9eGRsxpXNOtR&>(qf~1*{QnJ<yyDIisHu!*qQxxOg
z(K{CI*?sB}amP_N5#M?ZY*eq=8W-<_>LK-(6T9!(eeTqWx2B+yh{g5j&GXmXb=NiX
zH%Ik2KF64VzmI17Y8PN?h4l3!A0JQ>iCV?fv6a`w_e0&v0VU<Uq2UyNtXf+02X}^*
zkodeAi!>4YSD!f)a$`ruAVPHgbhA-_41#64UjruNQ;<SPuX&J43>(HI0aLYsED7{5
zIGGx7p~!!$MG=y4A7<63uG<6LV%JERQw=KmRam?%_YrtEm{SLCIW=G;tz8V(K5Qw5
z82a;f*Uc0j7kU-#Fg0x^ZSxV=GN<-7KL=l~X;y`tF5*{c>p=bn6$3+o5fOzwktp;U
zXj3x4Au7HjukE!M+`&T1GLSY%LRqY^G~zsoi;JD<OJ|FvP5|ZQ4xvbAsEN*e8Ye~H
zE~A7C<}F&{mvWo2Co^Q?F9gId5;LjDf|eqAlRpC!igPGZ^Bffv7KeO30|#=uLpM^!
z+VFCgNmEOd+k8x`)~z0E*%P#Q9mv$EEvHMZXRx!&7HvJV@jU`1L&S~?T+~HMFLF{w
zdX?$s1unF_;AbxKGZ!gaCL#Vo?V^+s?MR;QNOvSJlg)E7kQohfJFuj4CII`#5-8(P
zf?~lKHz6&})Wi}zgBItM+jIToBGjL|U7<P831kuu@Lbh(8Yv`F4aeoDkw_y;%G!Nd
z_AHIe4l#BKo-F+cLq9XbG&OOFSa40O$e=c`!e+><kCv*nrlsf7(LIW?CkkOaKnDFp
zhB9$kT4QYb50POrYz{~027InLfh?1MDR~3%c`F^581qbfkS;3-yo?@4tB}%aUJ$5O
z|IBoS!~swaWGHeb@%^k*OcMc341Z0h-|(^^YapJQ=`qb%9I?M&dt!7r28-p~%png-
zE^i{69kb$g%!*mZ=@7GH+x&C$aRkjpe^=+=e<M!g6-hHTJbL1_cuhQJnmxcz$Zn^X
zWH;Gy{1SgLepkF3ufaRxE5LsV+jHc-g}#SvKkSB|Wn26~vcC?zKr-e~9lQ>m46}|C
zwmoch>G}{v88x~|ix-&>zbrQ&>mS+~K6o&^bEq7h&sD7BgN2<t3xmh4%Cm*ThYP-o
z$g}CK$JAP)Z)Bt|QB#j?O)t#!yNBY*Wc-lZKcn3+H+KW!H$c9ti$BL66~w)NY1bWH
z_jf(i^-Epv>-x>EPl9G*)KP5FEM=ITnXFgL3^424IT`8{%uK8esTZ2oU*K;$pYKd}
zeplb~<db_GYm@G(>PgpFS~A>|s_N>S)Fmn5ywWKEaJb|%!OeB(4&u5!laqU#&|XWF
zwUF3eE^ikhtt_m)utxb>TP`cVzUFxLGIuxTW3&*RCFLSEtmdad)9#}68v0&dmoe(W
zH3#z79UyuJp)+eQjbN4$j*6B{`o(ktdLMCq35Hczwa){r7DADwP(p;_@el&cCNfFE
z8O0?G;pQ_Y<PYYVhB!AdfzkXxC~^Kg$w4*`Y#SaN&Gl^=Mx+?ZIDg&_KY$GaPd(Rl
z{yd7!>;H-`H!hQxpDZ(kG#%@=iF)|J0KCc*wM_zM(P%)9Lf<r_2WK0z2cwicLzyT&
z3Y_>QUU-YO8{AuNac`&<`Er?Wu^bcxL_;h?_K;&AqMg7dJ%KW;*I`hbC=kX2j=n=A
z&wd>k-&k;9(uR`x>CSw99vU@zh9cU++n|~$air{OGzzu&V;%q@`83ygf$S#TB8AP@
zllfAH)PEKz?hDql&st<T8T?ynrI7H4Cdo?)|KcI>3CP5A6rTm|yO@?kl_HCF$!sSb
zxFkq8X}EOww`x<$>vSFdvUfMXeYflO>-xzb{_r_A01+<Vn15nk=07b4HJD|)?ya{{
zMp!$#WlQt#+4kf$WUuWwwVLDLhJKB&Gh&@c5EK4L*G+`sxvsr2{MIukYp;KnwrKtR
z7~UsUu~PdgI7k%+HX>6k`Vr$R6zx4YAU1rEY^T;_HvfvA7kEne@vwR^<`4|)Q0s?p
zX{BD*N_FIYgkC@gq2EqPI#9m_zPn{<Gqc8fmz2sF_k{i|kzF%nx->bMkzSpEkH~-*
zpN4>Yt-J0cgF7%M<_-|rtFT4$7yipX6B2CLOaE4`vK%X{anwCC8IsVi?uo68{3;wz
zsAoUS=&+IS)Q<*xVucvyF53}te=_bZdXXqDG_+6G`u5pEErH<1+^C2PG(Ve5bbQb@
zBlkqGy!;g6ij>GF{ymWwk~ZQ=nh3#;<dAq#^LKzeEb07Uf1GRcOgi(4W6;@XAn$0J
z!aV{aUt|xBVOzo;52qzqgZs?WD}eQ`LTIap;Nn^ys`d}$G*?Z7F;QJNp3H@IUOTXR
zxHuQ{`KUjEFSy#TfwR+X%a|yZHf1$MD+6#*6Dl;ahIZ|a;e|?;SY75tWEr=TM1e*%
zk!mnJ3(P-II$n-36Vn+VPD0XC68e}uR^SCAt?b!#LUi5vuB)$!L^EMEG?Lsrb9Bo{
zTzI2iSjnoomn+_Rn3$E?s1=8(QnPnled>`%j;03VvCKeHJoWlp=a0eJ$cv@7OfH;A
zdok}dp{P)&`mR0!uBBH;=yp40R6##9FAn!5(!<4sqzhLV*TW_55OfAfoIz^L&U8u3
zEm}%Qu|T>ZHrAT{h2>vJ^o-6Gi{gp7{Gkx&IZ#BuAy1)0`FrVpu{bx{BbMeC>47Ak
zzyo~31KfUCvsReqOVEl{&rHY$tjtmX0QlojgMusdsg0eG75vt9V&B$AL-7z*Ms>BE
zxHDZ0A731Eyaqgytz>d&aJ~?K=hdb%*SK!C0w7Am*(0{*(}|wPU#89`l6E-iW#Z+&
zxt^#mt5^ZeS%w5<9(w_>xd;0}`u0~alrX?>z!(F^)@d4nQC~vH3m~%bA6U6*jCDLW
zOTxwJOD5r!J~Td*9m-~^ZU`wjs7J|uf>3Ci4dnCP@u84Alx<=&EjsD=J!?*lBLBCT
z%%9``^2v)!GD|cPp>RGuSV^rv%Q;H}6?-1xa<#mSpsFVlEe3nnKGX)gLm!kt*n_e}
zgos(qRjzL?pHxHI@dgnov}HB_Y*kbBKREq}F7$h-|42vo1*HUChK0z27&#y)$PEwT
z92T--b^^5?nhVN=T$|(!DJ5z;!rS4xkN=Hrt~%z6mz#h40bLl|4=$Zk)d#LO-Se*b
zqOFem>$^;66*F%6{U6XH8iLlped&f@@?iHt>yTfk<T^iK-vWVD>~eAP5h{73^T#gA
z;lqhEVL-=gk2nXfDYv-f<eaO<*i~{5C9f(%rq%FQC&?o=FA|o>t0DUWDP&(g#txNx
zk-ECbp%#h0LD`7LaM32v>7pQ#&qr%W!EL1<^PM(0aCBmM@ywaU6*?@lQR2T5X!hjf
zq*#V63;w;6orRz4!p-`-A@GoO58l7#?Sb!c$2;Y(gLgGo_!H2d<3G>}%h0TDhX&?o
z*C{S1rW!;kFuxh1`QNdIktbacEeRU6HQ+2Y-JGt#4vU_F@ecEg&|jIPxWcN83=+p+
z{iuw?;jSPQF?&#mgR?USha)G<(2Tox^X$QEW-`gbq!Wg{%SqF|Co)YtMk8b%PB*`m
z-K1Tet=dP!VQbW~0Z#OltCzC_#!vgF#!HSfs;W=`gw)Zb5SvBUq1oB1@%EXyO7@-Z
zNbO*4=AbnJ!xn@(Fr!)g!876w*435tt8?jY?<xhhe@hQmixW%AM1N^qIe<6Wc;o(T
zU*Bdam*@3q2JLhW#gX!d6|0l|1MPloLYuFG4bk7cgLtWRXk9@ywn&peEh!<X0HI~D
zDsqL7p#-QuKw!S<58l*#GpigY5N8EM^>cI-QO=^cdNBF;h#M)=t)e`F@aF7^{;{$C
ziRLq`dwi)M(qcK3IKvrCi?`N>A+n*M1-DZu0G=9EkQPl)y+HziDU5C4a`~NcYd+Su
zqfs!ln4)%HyKDYMIZaJ!pDpZc^yyk$P+sHO9#u_fVi_dzDtp!zllj%2%wT^is~H7V
z?N(>T#%p?B(|Qd3GWj$ge0ddPkFxTnC9smb5D_Uvjm#!w^*G%!9fxp$R*mUrOPMoZ
zRZKhVJTbS(si#bPaqbBx%ok@eu(cG~OsRRE2B&z;3F9UwCqUzTcW#mFvFLgg#5=fr
zo~u|N7qGuf0|~Kfump=m2q^qb4r<FXB{AiO2pJ6E^*$X1)(nd>Yx{?=|6rvcLn_QH
z)FjQyP^p(f(P=n||Iz%OAwq6gF^Z*Zx+p~ae~Xo~sXk$Z?0x%a6rIu?6LjF)A-Nsb
z?n8Mo4^UN9td(3Y#@+5nIa4a8yJOL87J(D`QZ68^#7UNd>b5=_cP}O$BLRk4<==HA
zdD%l>1oZ_y^z+si)#ch^0l|{}f~)tMO%TIuY5`C@-+C=?_q^=^@PzEU71#u>VCL^Z
zU5Kib<ZeHxI}{PUMic_`r&#^4tB~ys(F(z+;~$W)c@W05pqggIkHb4QQ+HffcP9$V
z$#RcbzmBdq?+oqptk_5*g!z09IP0OrNX+t@Z+|tSp}+cI|1kH!wp=OF6Wb<b(*65F
zWj*|GC;=W5++`y4a9A&gK5<<|Q7XWG^mU3Wh`%uf@8Ye*<x0DW7QIeIhL`j#ra08h
zL;z58Lsd&W2Iw>tKO*Ymh$Mv544@w&giKAqcY-XaP-Db+DUeN-Sne&$P$PqdZq2c_
z#vA*>J!aa;!;8X6n?2!ujrcapQJ*emr`|C#mA%^7JTo;$1hy7VCJhBBdA(`FdN{tL
zETfJL?2K=>!hNMsA{m<Ow{<;inqghH`zOizywn%A{vK=g%1W{NDadjR1G1fNh~Q%}
z!$?J7drM=H_+h!n9l+dsg<RXx27B<-hr)0M3AQ*?y<UT;m6rwXyUf}hPP&`QRU}i>
z*KT!#WPseU!(olY3l%YQP+Wt}XEc<^c|t^-W7y|v*!T`ir4wGXI7huUx3};8$pxBD
zi(xZeG2Kzhy|$QY{)*i2%wZi7WX8phu{&ATq`%dH@a*r~B)SgH)ULr+w{0jD86M3#
zk&)V=+VlYh3bby3&4sHVR4~oG$_T7=;W1J-FZQIe-a&yq@0$K8<){vK7QFJ>OtF7L
zQ6P!|?c&qp6a&1$BL)i;6SOdFO@$F&#Mcka)+(d|0BvIis}`cv1XBb*;?@*rb{%>2
zFCRU!%d$$-d5B7POk0Oou7F)ApY&ptn3v2aLKyd<#H&4EghG0qAM<Q2qel`hg`J7^
z04m~JEMWK%L{Q1RW#yAgp#=UVAhTrbrd8NUeGn4NVU##C&B&kAb&8skz~n14bOj&E
zGHfh+oFF7^`W2rsBKl`;ENsz|+Mf+*r3dmzOm5Xv+Q984Z9uKuO*-_uD}S~bMs}Y&
z@J8Trh6eAb)@}RdH`&gK>K%j79Oiq6hNv984;5i^U7~Ve%ekD>w+{dr(1M~kKREyw
zeo)zTnw&rO;IUQdk`SFf?2=2he|yF~JiYzcv7W$1LDGVdr7gpErAQ;3#waLW+Eu7`
zNLEhNZU87L?(-sg>}VQaIJSMHych!{#AhU&-?DcED`sr5Jc2Jgcr1N1rbn79Tnv9L
z6h*9s+c;j;mFoumCDHoWqG%~06BbG{V_>E)TkB~}t?1AXRvkr)W%gxan&KeZn9wVl
zIxXAdnT^e{dy}db$92m|M3Tu!0^zI1i<+{jUp5i-$qLIF$#!gQ`&_YiF4u7Ddum-H
zuCy8vCC#Jb2$q3P+;Nv`(^a(TB4PEe>ATC84LG4hn}Y&_{}fm%Y(CVqz?b#WO*2@O
z*LL||$}V41^5S%FI-0btylp2E=x8do5lbd)s~0SEw0vyM(70@^%<8uOk#aO?;b;6J
z!#YA=OURsLG`+UUyuPf0o|bb26w&jaB|0>w7~Mp2V`TxsEtL$jWM`iS9mISFF0cY&
z@Lyq0l{)5HUoPclK=zN9`ZF#p&9@($7gw5d-|w7^W-`~8#RSO~yZer9p9bb@$NEX}
zGLa*D6@rt?PDx+089YK_J=6%c4!q97;%lOR5;c^aDvo)kqsAtK2|Pg)_)$55KMji_
zd2jpR{E${EplGSVv>H)Mz5E;`5J#X#k4*$qe3GWPoLNUry?w8L+khGo3N=f5FjXk2
zae5Nf^Xu2Zn5}djz_?vkKhOv3J42RR<4(Eks0PKvnnh?D6+lb)wU`=O+c_g;u152f
z4<1`Hm?!67DO;eketq3V?wh_`Uz$qapdQ+=mOk8G-%uCghc|&zN3EF9L$5LNN~`yX
z1C}cT=p<|+YnN8t#L$QRs}1PpaGbhmXkloi9FOqy2*)}XTQoP#I6O^rFdXMD*^cMa
z@vwy#Ad5PubNyWvCGizV$zbVIhd=?#I~LZqfdHkrRP00Q@57ia>A<D(-$ziQkwP^|
zmS@Q<K2PDB0C$p=In^QHypE55djxyKgCo6mj=|Wn5&2lSn=f<rx46m1c~9t?5I+)&
zu)m+czKcbO)*~>&a(+VM!vq5Mfaw6Ik$B0VJmUMdJ*P*qv^?6q!B=Uu%trKo;j(-^
zD4^#htA(KaxS-OX^9$16cPU1hTv22Zf_;`22MjG*6YzH4Uq2~F49#`uTppAAYA_mt
zx)o73!d>eMaF{D3$w8&$uOFs{IwqoAj#nai>_M6%VEcT%T!b~*6x)IH*e9X+=n}rD
zoV-A2ucmSZL!Zu>|BLs<Y7>MMyd_p}gjN6!&4>AT-3!bY(Est9aJWteL*e7!zo6{)
znz4*EgS35+F>JKuXz{%*&M82Q1a<&5Q(MCTazX|@mQp!rD<LLg0bTP)EGVngk4Sv4
zBlTGMn({Mzuj4V9oM1WF%a7DYNbWFFKN4kmzNCNOhO+jcv=FudQwqZx3xL1n$|=Ts
zt$D>V9tI###&yTWTsPx+qie33@4r+@FJ9_V|A#v-QCy6B3{;~1OwytPla{IRR_hW~
z9+=bwQc;NR(8SZ<^hZB}Sdtw}vx`rBSOv5M59p%{V=F8lU@3uEqV&ac5NdE6`8ptq
zTq3PVz)evn&6AYHm#moUbZ~}0*2T)<nR!h$nimaKo1Zy+WO8NdFhq21)cyCtKxC{W
zmY(Yx+A;+-jXJeuNFcrC6EH`VhKV&YA|dzTE}dz-74#X!Z>G7n|H@^;^3?K5gMz~s
zu1KTEpo{?$`z6czEZ|S695{Tvos<BC%^%7rD_1Ie%d#>Ien$pe!IA1hvSaCoXo7wi
zr1b*94q*nywoUCty*(qQDH@_uY!<~TkTSp=QNh3<HM>}#cCoo6iYtu<L~KzOEZ~uR
z62i8n<>mh;zIUd%@_+mH%2%jgboEM~`+3?k151O;w&#WA%YTmMW08GGsqdag&t3K_
zm;MG`58FJ**AQp<E3hR+ob8ra9h?BoIzZ|hV(iX2)i5W`kUD$PO2bwNwD|*P;o_D?
zu$+fpY(usCpMfac{GOHJ_kB^2kJSOZoK%<OF5{EgzC9gNq+z8c>1vbSGl<Sj5ZCa1
zhQKmICxq1K0&*IW*vE*@$P`B7@v#D6^nzR!Zau1|wr_}sb#vkjHs&*vf@usD;M;Ln
z(*p`N$j6VWWMUuOqPC!QNb(Y!p~c`i?-w1M0Tw={Lckrtu2OPIq_iV$iL0k4kwQM6
zO0i=vODxzc6R}@N1=d`~f!rf;5;BdfCkXZm@&1kh`JYqL+0uWEHDxmWY0o>0m@j9&
z15S7buFq0FpfteyZ0dR`Xt;I>LAqU{gaN;Ud-aZVN6ny<3{1Ic6~j8ws$RpGK>$+3
z5uE`m)K0H(PIHxWU~vyr53Cla`Er@>t#mxh$;SD1&H-Ls@S_9#tY0U#CuHohL0VX`
z3$QpH6b=P5gB*y;$v9=t(&q%kn*b?;j|?nbPzJij;{R;@W^xIT?_6P>ON8eUy+*Eg
z{Mr~^##@ctX3zq@&H;-WG@^kjVPc%k6giWk?f4OQDS5GkO$+-5#Dgm=-%UY!GJ~Dt
z7R)IYc1>WDB&h|-FUam<$eh+;VSy<y%eN>pee2%zP+~oi5(5NXAQZ!ct#unAr69Ds
z^Pp46B|_Un$y~3qeBhjTs()K~7MZ&4TCVQj`1-j6klh8g6BjBLLqweGKHQB>*f!r}
zRS=zXyad4R?K72Jt~$FVZHx2gqTtwMuH&Sl0QL6oM9(!PDa5<H7>W*a0&sLh0Srf*
z|2wrwTV66kG`-IUl_BmyGpw!UG@1w~{=WPhN(k642<(VqXV2{H9`4c$@~T|#qlAd=
zII%;lu<&~K%j5Bv@8)E1?adt-<#e;L?f7v32}?SI=te3_?FE%)jGP@4wb^nqbLBGW
zp{eatq0hM&-RD!X<$=wc2Sit)zaKEK>)YyQH<G0J!w{XLVB+-U+G!E3_17nMTolV!
zY9?;0bH}%#rO-4?1Ie~x4(Mlem(P7%xeU+a`@y&WE9UD5rT#GRUdAdbO@OepL0p9+
ziDnp#TPBzirJQzRrY61#OC-cBfx7k?AP$`=_9hc~YyCl-38zDENyhJsCsd%-hv6_A
zzO{GLLNec*oG<}J)SK*^pyN2EJJK9WTL9M#R3i2|SQ7yaiu@YMM;JRm1qFn4927Ln
z;L9=*t6xw$i-%P~yw6EEdXL%@{Uax1yaCCQT|`za3kjrSMP0+nL~)T74L9ySnn}GX
zn)0lVhf4`PwD}*9m5qJkyEqwc)cVdRp=66)I2p@w|E;18KTN0?X|xn^^Q=k=&H%Gw
z4GkZpPbROe{ol>RiiAsEyvXa{r@W}DSp$hLblbflM1+Zj&uaQ&%<j)v064cmZ-)2k
z$!;L^m<Rhj-E8Pd=b3O?En*1CakQ$?9#z2t$qqTxJk)vEF3HM@sAbui7(<x^no2CY
zXT0!xobX`J>#ew&MuhmkC3{D4*vT3niWGN*&HW~J8NiZS({>aBeMHQG5m+XFpB%TS
z_m?P6i12O3&>6&}Kwm}!hm&MVFb!BrIK1&SsYj7PF%2M(A>`TQWRkB*Nr&C$xjokQ
z{x_!U(Yr#KSk&F&jVPIzmr*Oiu%|@^Hr<{wr&yL!QQVjff7yr%TS%o>&4gkZG2Z+^
zX*?ad-HXLC?v~-|Io*ii=Wj3o1N{|Uk7cZ|^;eel6ii_iy(jvc!ZKbLif3YAMWA={
z$Jq+3s3(D-2f6bg8A$U;3kDj9wP5J4Ia9U{=MX|@r9X_<qM8n0OnS?5tWhU+{5{uY
zS=aHui%Yt8HXMsykYi0GX;6H<O2=xJj&yk068(p!W~^W0nc!&%5c&307!xQWI+`I9
zfDDD^URyx%w*Cy4=@}#JsSQ*2`VN}W!2xS;7=w$;_H-t;$c2IK@=U1L?*2kzAQFv#
zN{&!DT4S_+`Y{c=nR>&Fls@fDiP0dFd+4-CW6Z&Or%W~^lvK*Zl+!@0Cum&yu(?QO
zgidyPrheSiVU|L;y~=$eRCA&FcFlrnPuWUe9Kq*sS%YpNE8JbSx+w~qqD`v3%N1e?
zq~<2w{4o)%KQ{GEUh~gG?ptd8$>XMZyjIA*h0t26uJy**V(N{Si#l}L@khvxe-NZ6
ztgF*Cse_qHKq}3!F)glhM*spNdh-Qn)xO8p{IGDU+_~S5MC^<c&TTfs*>L#By>s3W
zBZW85A5pSXFAh6T(`I_$MWHOd&3h2jFlF*9!+tHHQa~?KpLWPiXhC86iDTd{(pvG%
zg%0}S8OlNQ!!9P9R)C$vgn=Xy0QlVi33Z;M;L3fO#!fFN+5PxxiO5%UL|e*-t{_H&
z%Al7zW4P!bxYt7H_&_L_-Qv^h!?rZ9X$N&V;B5yXPAYmn!RUTX6qf<O4!1(QJluW`
zDej}d&xXnjxy}nJbBCe#mCK0IJq1g-D-~^pm<k|82lUO)+m397Bb|TQ&zg1j(oW~f
zWeg$WTHdlJCRp-}Q^(a6OMd=Rzwm#L>iG0pP#=&bFQ|<JPiFGk!8UW{I=mPaxO0r<
z<k#BPFWXlv_Y%bMcaB48Y+J`H>s=7fqG&DNktD{jN$lV-Fm^F+*&$MV&x0bpIYBe-
zj1zvR*Ddl^I4q+^OTOhR*CAt1yZ%MY3!4#uAf=zGr&t#qnBCW>X4pU(J6Y`vEUMF*
zr={~OMn-_GN-bM`v#S25lCGD;U$H#d%GN5-AWGQ~?8GVd;R>w#2Uwd)t6*C)ig(JQ
zV@Fhp<>D1G(OL+wuA^bul2!aK&)bCPes83TJ;8JQePR2V2B&y^X}&RRZ{mmE*AOpv
z-OVtHS_DBxD@N3AZaH%XDUsn!do$fH7SRZ_HvEm!04?Zrg;7r6a}q3fjN}t_Y@vx7
z2-6q{!-$Asb9ne2R(NIQV}@<gg}53Bo61~sd0us_39*dG*y4+dY8lOs@C`^hsow|_
zhA^nws~zh>Tk9LVtSY&4Z!khjln^TjyuF&M+z5n$W4J8lK-sKWvq@^$LIzy#N3dQ#
zD2>XWW_vJc6xL4q2INnkr$$<Ppz+a(MVM)S5mXk@RIR<iH(S51{fZ6mZQJ$`))Z+P
z$=;ytSS>eg^0mji`;9=q5cnC3rKRywbG0<S1Xgrq8L?&_Wfj4v_=q+B8D=b_MKVM!
zqQNTf?oa@9X*_ot;y19@)w&i)%L)1hgAFj5G#VKoQEmtzR*5#74u}cRHe4cX3n&z|
zt*kc?JUY?}OrWfs5=wc^_r`nF919(Gzud~DHEZ!77A-BEvtGU%jxiECHhe~wZdIP1
z26_3U3)7MKlguK$$JL@a_Z6>jb5YHGPxy0~$8Fd4^(pQr$OTr#mp}vW=G~2IhOLY#
z4zh|RA-4}S?nAX;Qc2raO7J8^om&YuqADZ!q~aXO9EA6XC7i{Gv~39A92L$m2$9G^
z9L%5j#OE@%WQ5}^+j`YG;n@1Me4wihS)W>7CK(6CbodJ9OAu=u^j@GTK;yISDeY^u
zf^m{SZGi>E^p&Xn`V9*UH!R%1a_TpAq)!)Nj@x|1^!mf_hdg7h;;DrjZe)S>S31(-
z!#NKtC~TlEI*`@3eIBKDY(JXZFGmo}2n463oc#REPDGo)I!Z7MWSoZOgD@CKLIY?N
z1PFx9vNBr}C*aTd@z*y0n8~Fl*mn9a3aL~fbuI9TT=T#+2TT{pM6<o{2mtm=NR4Zb
z7FR=Igz_-#UU7~bLO=c+OpCpkZLjy>$Em_0frv0lET)(tSMjv*U5PA=(F}tW5QYKM
zv}|J6xW@D1^K5HEcHcdi8C^OAs^cgq+0zYW(j4M2?(1nFyT!VNMY-Hh7zQbrUXv3$
z@U=(`3+k5#P)597QFP@Emi`Ok$Md?I?bZjhfn07N_ew*tV54`tP&CoEpk=!~y#^7#
z6W(Eh6f)<9_6^m%h#!CX{a!a91g{g@@vGdxm#w6MpFRY<0x@*g?|Gh`4gJc)Ni6PR
z_ogH8Ol2kpYwU8Dfi=7UY6*P=EJQSS8X{p5TVgG5%iu_riNI?ZE|?+(1$$6{aR{?I
z#Cz{t+&*OIY=HATk?tN3e-)y-C89dTdC->swnecAEOiS4E$C{mty(jdYWD&I>dEYA
zVGB{?TgGO;StuBelk3h--h5NrVmSY=PgvFyz_wBCLc!L}V}(r_Q-4A?XTXd7E5`pr
z;*YRKPGdeJerJYZ;6P>gPOIf1BU7IuZZpV9z@&}f0xAssfju(~eLE`vgADS-HaZ@7
zSz~l;9u6p$C~C0vgHOyHz=E`*uo}8<K4Jq<4C4ikMH<G7d(-Hs<-qoFaL}@Kr_$47
z0d~<$CQTqaZfpGZZ#NvPsynKB)HSZZ-f)j1(4}5g#RsGPQN)sg!X8F_(0^;<MD5`k
z(0ULy_ddkEHSBu%x-za!E4PrdOaqh-(V1P~56-vdKWXfwj?C9c2V9Eb&$<93x4kOJ
z*%;)*l!Iqya6iZou7h)szs#0<RW?@F+4ApOoMsF3gv=50qBE=WA({U@{_zT5h<o|1
zzs488^g^;;#1B)m7}&>FSoV;BM5qA`$P%KGbir{2oDy-pn240ZG6}su#Rir$lSC8X
z=XSyr3%C4-f?5ZyDCNjAJ19;Lf#E~n0jyvh9#!9sX31gzN9<RV?>-etr6TjAUNq{Z
z3z?quzFYU<){D4_UcpDi>CHyP(T3}&ie-EH(c4Ayef^95e?Y&Xotn;=y&pMsRnMjz
zY`8|}@q<FTdoWSyp4zu>itb<a7OwXz`1lu;18=WAuS{zxSGP5x^gMh*{XM)C?V=&3
z`5z&s`R8CaysPWJt~Y_UfO`iic(E@)3O*#)t$772aDm{sOeC-{)3R(5tOy=r*Z}E?
z2c-B4j6)PW$Wsqa?c@qXHn(*$eFu?{N!PKu*WfsXi)om$L2U(b3;=#1<RKRlQ7)Et
zWX)(86sWr?cjIoTvo>3it;5bfD;-v>WT?OD#u0hmGc&2tO^&JSsX-?lNjgzG?U=Ec
zIJ53)8{Q(FPuraz$lpL8_$>d@q}QZ`8U>nIcXue0w@aFCyf|W)uD*T?wuQ7AOJsBf
z7^)##C?O}MryR%Jg<f@H7Q{X?QETm!09x&QQeXSx{rCyK7l|ZkjB3D&BcJ@QVn>;S
z75dSicYLySj^qF`Xl|_3*qDePcwWO%{DEzs1iNKfC!sj}W0)tsS94T4Subo9{+fmN
z5GQuhw&^|Ado>Nb+<S>B<JjVmcagpNJmG?50s$y<HY~sha_W@8*kPM>5_B+ihT(%z
zgwX@P2mI9`6C~6lRMZUeTMx7nOq-@&5)1A81&I6HH@+W7@BMG^;v(vOw9nDPS^M?j
zh_@JxzTAsmHE61~owY(CbohUScEn$oO3fh4$(V<=8!gqbGv-bDAx>DQgotJ0176IC
zA%X=CE~Q+Im~28du6N?U<Rz4Z7X8OD{2V`txn;*vM9i6prM>GT;obO<sXDi)uW_;_
zKJr@aW|??P#fzbIXfx%xXW?(rK%0#+_B-uMfhqbBw7>}>Krr(%m~fbGXa(BN`Unvx
zZ3ezswM^hNTbl(@qHHnE$&;IO)e3=B_(?MUg?KET9)2Jidc&)>M<VT8v(=Fo|H|3^
z#kpKIF;a<lyGbwJ9oFODb#v~qO<S!bm^wtLx(&FxKUUPOza2|_s(O1i+rD+cIr;lT
z({Q!PhmzfKFX45^b34G0%eDEZ*teF!-4tP8Mtjyt;`l%)fo7@$@ekBSiq;YMC18cg
zOcQ+0>{i4kB(heQTEc+B)rkwCEuHsuN|f=VZFGs{YF>!n4cUlA`0kvCup|0n2u|#w
zo9)n-mtg!f%t3m8y0VlALEMXf;=>NcfYpQ0BzB({kIg1u60h5#W7npYWO5tcw`|w{
zP*-1_1$>cqm2ec-E4ku&t3d#h{EA`GwHit^I1Nt6_3%Qi;%QDaWyG#st=k8a+X0}Q
z>;cah>`^(6>)fKc(3umgc2_2`NT$pR`h9|w^b9!;urF*(q`cIob|R=OVQUR3U6SC6
z55GPi&RA9^oPYgrd;$1+`{~+@#zJug(cv^(Q3v)Z=`g?|QkigC**BmnQ6|*PY`A!R
z%645lb$v0MT`;tsX<Qnv9Tw9)nh{nMP0dXyF`%FV<TR#C<q&Qgm1xThiT>Dwo&<C1
z+ZhDsR^1pPnZ$>f*g+3Uz8pLNg%Bt95o9KWM5JoxKU57eODU&Jdf%R@fUBJt%Ik@d
zgbtMbko{>pB#NY-r@x7S?36*GiyUtCYl$peEFwM8gyoW4m*|64%&qgV0L-w|a5tmT
zNEs_}x-3sk2V4raDFhUx61I4GaJZm;QCyT39PuU7vT2(|D$@JclsiAf#a^|}S?m6-
z1%+SgD1LvIO231U*R2B`N7RS<pdF{OuPuQHY@L)Tpm4&Kg*Yu#!emD15s^PIGjm|(
zlb_lWo++wYs+!W&;!M~VN=)L`%z@_j_w<y6X^IjYj5Qjw%m<ObF<a63a_Lr^VZo6-
z2%~M|3hgIYPAw^YHbCP;`ckdLV(S(=QIu1aWE+(k*|D-^&<<v+Uv2EFecZG26n%{4
zekE)+(`qYP2P7L;=sVe`!5EcbmjqGjj{{&bVBY+61*1%9V1%NN#nQU2#O0%0pWjg&
z>vI+u)Bco&Q43JgICXOrZ)lzo6U~blAV2BoQQ5n)h95CQo|WjfEEiM*?V~HO=~)2|
z2=P2!i4>8tWnk!mn#GU=X{!=dHD&}-moS)4xVQPFuY3eS3|5N=XT|K*6jx;luCa=N
z_^k+2Ud;<cK~W80;SHvCfe@$o%tf*Er-Kvl<DH!t_)|FXG*6G03=eCAt=ZzQX>k9w
zz%qxW!Zl%)zDVHvgYmy3Th+gdca%8-^h=a^eNpNgs*r+j=(-Bfnm|!-xID#n;iH!>
zx+sk!-UAimqg0HK#wR)}P=%Gu<;xEXl6E`)e^TZ<sLXf#|EtW5l|1}&m)V3w8G40)
zV|_tmVz9RN`3#7cFq4^jAp-%1!)%B4!OQa4r+|3#K-X`xrd3L|0v_6z1%c0`S(yZ%
zDenjQoQu1`^TB=p9B`YLJJUPq-H>1S6hGiQq<=qF_%hHQI~=7!5;9>3MwP6a#4uAk
z@>t)H{#DMAG)$4xcWihj!#VP|GJO^2R5a~lS{S+y%?KsJu$|DfbT8{3u9`|sMVwrZ
zhX}R?9$B{O2Y2wX&d1>mY58?olFWu@WRCo;Okc&%{CB+lV;ag3Mj^%$Jvk?)4rH3&
zAlbbbpE(5fEsO^tw856qL5KBp9m47~ONP~#LSP@0kXn+KkwS3VP`GK~ngt<Kt0(Fl
zQya8Gk)l3v^`GnF6JWP4QaPGMI!1@{UayrHErT=#7SkQ_l!xDJ+-pos#D~3MevEZ9
zxOg`^ee&V=^TQqxQSvY>!>{g;r}E|`7PjB__vsbv6E60^qg^j1c_krf&dyAsc0=s1
z$MzN^yTBDW^${gmA^zTge23b=AijcdZN}iePWS+zM)60CJvsHr@h4p4YCv``hws;o
zu&L=|CwFYQRwxrXf?peYFEGPqA*lS^oA<$T6~H@#o8zTTwft45Mg~+|8tRt4U*&l@
zoXK<_&ureDIsOS<L--tH)6N~o73JubU7HQW)6w+a>hKmtnH}6D)HlC$;jSJ9$N|ah
z;j!M?&Bges1EYttikj%wG^OXRg_riS42k=86>=a+=MfdqsSTWl#sYK;%v@*#4kVW6
z2&!u>6~=)wXsr0U#jYjt9PzF3iSnV*Fx~l<rF@d9J{;(GM4zp&Zi_IANu$G)lgUaN
zLlCo?>%^|6Bq^tfw4WF+!T6Ev8<$bcRVpl9?D2l+{RDxtkO8~L31q*weKS9Sm<RN2
z@ZbKo*Wz@&vFn$Ea!7I)TP)mwAp&MGFp=mj@|}$yp3n6lV4z_!5IFG7AnMQyx~6vL
z`r)u-#Ep>=94>cm7Or^Ph@)+mxUtUTc-RAg{)A!Newnj}dq5aBjHSybs67Q_Xe;86
zFt>gSV}K)Lk7Eu=5EKP?|Nbg~83d*PLxa`C1g<pO4qFlUoJee2ayOHLH@40JAK%AD
zI!M48N`Yk*evLc~73w6?VEfBWioys`Sdj?wumVMh>Gk<xlC>cV1rtvhsv0%JC4}lW
zA_#wxn4jeZLqp6VEJR5-i+j3Wn@=DH27(O;vlKR?R=7V0yD1IUHTxQkeWoikh#PYK
zVN1RW);JLjG3OKWH7vHS3&>o0mt6hvE<~@wyA*@oWri;Ku2X7A?*V#L&Oi)x#WeO0
z9G;bHU_zo#BxEsbhX?jUdZFQ!xuhBD30Vn~i)t!~!NCN68NnOOgoRsp8<h%zPeTjd
z=Xq=1r_cKD!#l3@KE^rzA`FWD7?^^<+@sJ0=qM7ep+g{!+9||pH90YG-QbFqv8OHj
zJE_pX<lDvhk+)9{gi_zJVHKCLRtB#dn7|ACy+)jeP232@Lrd^7i?Krk1-mzS0AqVj
z!MFe-Xf{Je5{U%FVQhi#@9Fi6(ZON}zyl2@B0{OYSX9}pKnfx>l@cbB%I4Q>?oW(t
z;b>xWF7AEuCJ52Ie{>=d=O3-!kzD^xk?6Y=#ofP6M5ESQ73E#g=C{fxu34x^yNIZR
z^^SCU|3iG1YzE1$5`!9!pd?&m@ol|E!U?|uv<UXWyrT=)(T|+EX}@DvEo)+a-^+x!
zZSTUw2;i39>VymKz<%-6!o5JAZdiE29JzV#{#yX=GvXG)&Rc=KG_aTSRG4G5e^HD@
z!YthjnPH1_LouMx#P`6SVW+-idfn>mYj68RF@U5&2ot7Qme!m^gLmg8ItHM2QL)&(
zfE7d}S1J2)hmZ33=L5mr$^H&>qIr%Q&%8JHHVMPw&CSr<GD8O?0r(h#x0Cv13^qar
zW=HUvxOZ}4>q`*3d<&GxvA17;%YlKQy_(;lRvVdIsO*`r*F7M%jqabbZT;lEdk2E{
ze@($187*xYT$4>>Gm19<4BEV(eLkgzq(*M2XlblFkadvHDGE&sjglrGFbrIhh~Tcc
z02S+P2jLX|Ago&EHuta%Qm^R0z}_B^%$x(B?ukS9d;Lh`U%x%j!v;#&S8jexvn=f~
zsnSB<{{+~%zlffn#0tv|z*<w55Yre-Cm9izx80y%Ey+wu{P+pCaF$E~&KBG!%;wj<
zV}v|$48g95uR7*^;t4dxQrKB?!b@nmC(Pu>yt(R1bq=LUgjPa{RyqEab)`L2j#AJJ
zJnm3$*(hv^H^gf`iql!lj9{`sev*rD(lk3t*7{gge*BN2@m*UmOgZ4X69(aDVHJe=
z*EwFW{tQ(Ja*MF^&?G+Cpy;}Fe`{onOf2lZO^BE6o1Z}Z2iw_y)2T<^EuLx*g^|rd
z+_Hb~%_AmmTMbBsd>IeZDif@ixQ2H*n)oCZgJ%F82wH|WBa%K64Gd73j$<Hpl0ieL
zlnCV*xaxj6R~{)e&lN_>x!#dNI9<s_OXCsSsKQ}6S3zj5k>>xw+OcJ!YZo+KSlj2e
z4|2{Ct=fZ4ztB_F(&fTPqBmC=FLkGsxoRX<$@L~i3gwru8tg%s1Zk;aafz>(9$r-%
zpaUiS1;U8zS^}XJqb^NDuNP!+Ah#frs0lATX~JfTRnT9{L{dcIh;bpf5Xfq-uzAED
zu>_mlvsn4aV-Iv%7ZYcTK{}t@!{!!C6KDMAXq`YjD9HK+=3a<xeqa;^vO#Kbc&8uY
zE=C?Ly<|j($b_?H6XCnWKabhgD{XrW5stTqf5_?P|9mY%kfv`)I`4PzHvj|5hL{?&
z?N?fO4v$r#-$A<hKhsLwdu`Ew?({?h=8e2=waR0n#kxdBewjI(A?6^<%gw*P$BT-P
z_)$2#WqAv}E^a{{B13uih+$k(W*9G1{C9l`Yk3LpqPfEFFadl`+y*HI8S%oeulVQS
zjlX~VMPKc|XB?l=>-~>qZfEem2i%f)b@2Y`F+5S%@zL@BleaekZ|geGgmLc0-LbC(
z2!a4X0^A7^Btc3P1yLKVm6p87i)_ZLyoQb)$4Rp=w%gcQ)jCZyX`8Z1)7ov*I!>CT
zX%=R8I?eog;?~VRocY@{%}i5uOVUma&HH`lUJ#^Y$MgL2{1S1Ob1yE=J?A^$zPzgE
zZ0a^d<T`-|dHo`v+J*n>`)ABKP%$O1am8f7u1t^k<R}*ZRakXb0UeB@JjZQ$oZ>7m
zkok{jzwZcWP>sJ2XpvN(Fm{n}Vd<CJZ$G>BVI(Wy`=7`6LHhf!T8K?!E)gMYggt6v
zJD#8+`zU_0`3(e=@iVkQ01dK7G#B(9>v)gfqJG4IVKDmy6QCMVAmpCOlUsjUWWAoz
zQ{^+D$H2R+l8!}sbkTDvn@Kk_q39ShncyVJrX=}IPCP@{hazc~iALXb7ts?qT!Eg`
zF=+Rt+fToYd)mM2+7ni=7N~B!D=T>ma|e0{WP{oCG_$ZCU=Umy)Dn*tp&iDW`#8J3
zE$AQ9@dqkSazH{XC356Gn44g)vRmLYlYl{h=NoIVMwv93m1$x1O_N^}uk(iYUs?wu
z)ecLWCd8Y=&tVQfPtS&<%?2ov>2qU3lh42CWA?Xxt93v$+v6`tf9CVD%p=1#RcK;7
z;re8|S>>NN0Pm9fP4j-ZnjC<=#LXf9=mTMmTD9;4F74a&TrV1)^VOm6cr>VBjqD!c
zc6P~Xf50>w7q<S=*1mc^BxwqC#0X$@fs^3ctI|!f{gJLk;^#ec%GIgW;i69uL|0RU
z+X2MpB|CM^MV+TH_2lI|<>P4MBV|;gbh^djD`HL8;_{TT2)JSa7EO&(BZD|FxUCY;
zc!p|nAR8Q3%Rd9-phCjG(E3@ij1><gnQ?5c!TFZ*KCaLr`xgUuCX9c^@{;|MYd8$c
z%f<B_c*?m@EmcKiE@g8yhm*8G3tzOXZqxcA5}JlK6>#W9iqtP!X17Jxcx3~gXe|C2
zyudrK7Kh;ROK(iC4FDi17aR|G0?l(n-n2{*By>9OEE>ilklR@lJC?r3XT3Jj5wSy6
z^awQ;aZeyp4ZV|{IybeseOPBdryTQxdE_Z;@gk@oMBGQ(WkD!}sl}DbHBeWwU89|c
zCYxtwub3LVVSe~vvZJei`faENvzz^UccaY9osRQ8t#>LvdFYDSv4devoxfqYH!|HH
zyTeFeLXd?%LHF=@yxhKQf<S;F2`rcH%X?)H?re4G(tSC~eYn%>5#bf-=hOhMRDA|?
zeNk95DJyNdR6(xCdZ}i>77OvLf~4Kh|G{|=<W~IP+FSQk_cedCZ)I`ct+)Py(8K}J
z@i-*rJ-=}4cW}10O8*M~p{R=QLh}oXGXEbJ6sWKWN4|jihWqe)Fy(_YCy)n;fPG#b
zkbVu*A-1136Xt0f`E{?*RLVp1C8Rx!1g4iwbJ^(<5kHc{K*;<g`pVB-!!tim&veNe
zOGH2l{Ak9HX|bIi7qY)Z$!%2a3OvrHUl9vV7Zt7wYtw!a>2mNBcnq)M2A&DI6;<y+
z9{7<!SR{gxCX3sMtVn`4IU(+N!?m1BZz$h2Sfy1d*Du!GHM<r`oLI~c4&@Kz5^Ho3
zoBa(uoMGZ~Y!gkx;s_r^9WY4@G3t4fdS7}i{6WXgY>yLE;d`nEot`W_p0Wu})iG5%
z**lr)$wVnla5U4Cn(T$E-+4~d;XQv%EMd&6ElVaTsNGip@$+6mmUVO~HWaml1CW+j
zUPq7I!q!{&2}*u^_3mkcb4FIvyRT*y^Zd4%D=gzQ*QUDCajx_}0;=rl{LNO+hBms#
zx??YEYzAvb{rZvVDylJ0_pg%N1#5M|{m57cnj1kdOSX5yWCS&Ge%R{nWjd}$iL&Do
z-bgSry-ovvGfM(z0?!8Ux7jq@B<o;2dySYzKI>;e$qXJq@-^v#4q=?VBln_mGq5^9
z0#C;XA!-6T4Zttg#>H=Sk)D5(o;Y3u*dQtRWXbEBHVK6|L}Ns#FPSJMZ$>EbfvNbz
z&=Hv;LQ>xgkR(z6xY5_y+1L0XkD^${VWV#q<AJ|Aq9Vzw!uFdd*W2q&H=pk8TkY$-
z;A3CwoA88nSThOMxSqh9#aAIGU@-gOek}WrwUTB}7`-BBy`<rp%xW57YKUec5RNat
z_E+Qn4lNEUAbwL*p!y5E@X>&ku!G_iUD4T)Q8nYI<G1cHoVlxUU{;OL<NlxqzZvlr
zJD3Sr%^&ynjXTlhnAYKsuddM0vR>Qu2OvKRZ!SG{t@ctL6zv`WzxVU){+BZNgJ-+&
zUC^fw`3m5T!Jnd*f*<5T3KgUNic6Brrvtf(#lz$IYRO6Z;YORxk52XE0#BPlIco>Q
zi^9qb%nuJ=nL(cB?(uS0JgAA2;h=riNYQ(eZsgPAJYY6UYn%%<gy3&p8CBses$#$q
zmjk^`MSLR^$&c=wL805hBaMoxA;tL`uvF~O&C1i_ZmlD{>;4ma1{~9j?z!>d1G;0I
zhO+4QH~05_;O>L&c&=TvHd^E9!5`KJ+5n`GRK=MMWc5K_9OqEX6tQXxKW}-^`f&YV
zg75|}BSLvzX2NC*5L609DElTS`rw!YE{#j})u*<N3NPp6l#AW^rcf544B>|EOV>y#
zu#vdWi#>Si$4^zPSaWa8s)z!VZZM2lmICj~Z*r&i@D`$`Kw(llrtZv?tb48WVLM98
zNYh8<_0^|db97HQyyxg^$aENt>p4{Jb5QJ^m%j8Dp44npSK!I@Nu@6n4Tqy$@i&EW
zUHQIL2hccUQX9YvD&`Xg|2T5-^x_R&)?z29H7$8!cZgE-RB%?5Dkii{O|FOrvf-S`
zB|s$#*Z?m<umFBa90px`ny3X;YZryJ2l{hMba@Ht0eLV@SI^OgX~!DicMUTE$)MM@
z4PPoVmYC&OvdH8i{3IT9XtItJSgRaL_Q0V@#*ertb6pYNwvOkL-RlyolH_k@k4dco
zZob7e0+8FSSmN-WJ(ksPS@ZL}+jO?sMArQNrS7rhHyCeyOMF%QE@apW)u7lcS(0c?
z`S?5<4gQjKTH4J;Psr@PIpAah;tN|_k~epIvS;z;Kp^9Yo3^&_`t{`BIN{CuC4S56
zlZ?N2vx5EQsf`Yta^U;u$Oa@P$UEKK@{6Z7I=~HgQ3G-u5Vu|A7KtaNe^vpjY#5ju
zr6D<^VnsK|hEH`NfkU86M<hl9WrF*rP!rCmBYvS=7t8VD!Y#Kf6cSz0+|*Pq(iJZ(
zJiAbccSUkj_0DMXLMGFlO8x{@>XWG}D&70{cUMBi+}=Ng=T^9!$7wlK?4;A4*pVal
zo;_!<o!^Ub0juQtjrkGP7Y3K#2~1ihn2GDC7ni1-k7*74n$obMsekBir4P+|AL_^9
z4kAH+p$s0Kykm4moY>X;z|r~<Tg;BWf5Ly$dq$^~6T8F>)YSYEH+_n36(2uRKRWzp
zqx*02PxKreRQA1h^!>X|D8pMC#Q&h%&`qDe)lV<hsTI}dVV5Z~1Hd5Qol6h5yBKLm
zEufoJ|C4;B!kFM%zWlU{6<{RC@5uGI1MwvH`+mXq1fYdbAXrg|>XKam%K#?9Gme4}
zqi~ZJJC;b7z$i$j3%qw5>j?{>)UCjPS0ScNK4(j4HJ*il95=r2#lC;AM_9&8hiP_z
zkD%QQ#75Mp2MZU8tVAMo@Ckg#R*`15?tu(!U3x~J!UyKIjQYkgLc*`XO>6R|6~j7z
zt*ROpv1{(53zng(*D{~Cd)F=qOnCBt_>uP;UrX8k0RK?rSCV#Uhs;Std5Mt3Jb8Sv
zP{2(eyy#wu^O*lDQ9e$%d&4!+9T+0rh!5Z*u?RIH)&(iMHY7}URLui}PKc8ghMaQo
zZbb<whH^{i^x8C~=7)0yy|%GB`BoH}c8Gd7QMG&L-MA^BD7VfI?THQ#M^9~-YlwSr
z=UvKCVc@AW)<QS<(+XC@7<yWV?razQ*A8%1^Aqq{z7AO*Z$@>EyWj(KKfHi`!S^Qc
z2I#N>t9KpyIQA8Ms13VG+G{wR#D~Io<JeOMCG0TYwIo^3;l5lmaLmuZzTzI!HM*aQ
zxj_$8Bg;D7Q=w;~tq*(XQcA+tSVK-Y{HHx4ZP!4l8Un}EihoUN;>HFluHoN`d!Yd@
zW<I3LtyVk_-^ah!BXHMB1I_qHUs!YZco-hd|L}W0`3yARZw;+<8GAZh<E?weg@-lJ
zz%XS3VtOkDe5??tQrPMk7R8rdg;eAP6TeDZu?)Z#2b<3yL|r@7$Ts_tb%u5uGtLZ%
zrak|>rUm0w_cC@!jO6jOtC;yQ%6kLwL{Er5@Jhvsh6;pK)^liw<(ZYbK;{#!w<}xd
z+ui_PyQn*%1m1n@zUEpW5twlzDe?*r!`Z;lBZwaexM0h@e_D-Nk7FgHGDZN!W5U6%
zwBDs<g5!?n<ionAC?CW(0+HsQZ@doSNY-0nU9AFUX<hN6BHW~tWk#YQFlQx5g)Qu~
zSqiS*k?KSqr_NM{MlsUybO$eQUQBXHt%t@shj#89>KsGajDlfli$g<;8XvB=_lCz%
z@iAYMCV9)}ayIcTzbFIqcy38*A!}BRJdS{FDfbH%BES(|0^%%mdUXgkX-**dP}_7r
zWhl2b&)tSX0|8r4*$P6=Os(Q5YOat2Z&=aHRMfB8DIMwY7K`-t=DRj}D@@Jw`=5Ib
zA%<E6aS@KlCy;X-`K=?!I3DX#g@e|1xS(98(4+G_8;NvrY7)-2+)q%2O-ESeWTQrA
zq^<A0Y*>w8^9R9(WkB#op^in~o&+g6*Y;|wmhp7qs)GlwDm+cCT#=Et&2_{t00pjW
zya+~_#$D>C(tzC)pyE=Jl}dsZ{hF$2QvL;S(4`H<W@Xd;7hR^etDPp+wQ7fmM1*Vw
z!Y_6>=M6M{ykFU9!l76KSA3o>oyH==16Je?S0dcHhU?38^yHJYmH8LwxSjUvkb098
zCxuYq3IGBY&@_yo6$oBw7?R?K$IfouOI<i;&_IC6);+Pp;=c#QZ=j%6b3*Q8(X+RI
z6QA3<a=HfBn67jVl_+#Qm+I1Z&!^f;UKNi{O#X&IAoX=}|CLw%a`;>Lh%0jL!_r-F
zZ^1)pAJFvN=4Yqc?rL3ic@+4NkbR^Ct;V!(9;>~^GfB31snsacy!ItfeWT<e0#tE=
zSO#5SDvcc+S$ILo7A&nLXds}rV5>Ct&_QQ=Q{Nq#gjN4zp?J#ZN|*~N%}EClToP~a
zISvX0gcPWO{r5U2hs&YdsXFZZ562O9lISv0V`(#(w*9HZ5qX{<JVnR~vX=obcHb;y
zXYwShP}Da74$z3A68Nis?Q3=He#VNEP=7w(e=n(%7{))NyahTC(jKAGaUY__Rag=c
zjSU<EiH7`g0O9PPNWq+O*jpf6klB%(r3i`mQ2Z?173uuNsY$<aBjSr^GhLmR=Y)l#
zN_$2Fsjm0ifgkp$etpMPs4(d7`C-uh+k5=s{@%f0GO8%)!m{5Gse^F#dW;lx#b{S5
zAa)1sj|^!65x55yN&nC@7TZ!p8*ky$iqWFtYvTPIG!7gW2mhiqaNpe|8TFOHc9Ve>
zk(LzZQ*JjbAfD2T&=u#a_x1e6^sZ-ijdlE!?hJJGUZY3#N!_@;)MX{b91q&rLShW}
z>>7LX<EdCzR?GF?ju3g=cTK75@}A$OYSN3)Aw#E2wc|g7KE!-E$VcP81|SM63IVQI
zTd4{T;p~*cVnYi@fkNY6CoK!E8!6lhic*=1Lp7g6<QBparpkXia#c87w4zIUlf82{
zX2J*dmA+B0ih5tQHZk$&;S&S>f&BhonG1~_d+=>tr^;Q2GWMTU4-F2FpseZFyOt-y
zWAOv8DvTe?-@NPcGv)5D>zz{%S3>&u+pg>v!rnHJ%nro{uRfm0^d!S$;+@gGH%>x>
z9oqK@ftSg8YT_xjV|5&a-t=1EO};yQRM?I&F=;BWLa_4P+;9LwtR2uAVme;rc&paK
z6E&t>Er@sS?Y(yKL^dw-%5{WgTDcCOc`(`S+rMIGBrq=cyX>Ol0dA37u^10Nok}44
zTtX(FEB+&`!m~(PM*B~i=2`cAA=vzX@i;4VHE$npJ09TU%Xs@5-qN@k_!MAkS%R&e
zIADUwF>t=f^#c0FVR$Zg1N#?coARu%y36}qbe>&8sura|_SU85y7291i>yrNac|o(
zC2wgWpNsI7vuoKht5?7<{*doH&f9z2j?vEz9>Zd|^@(a4d@<O?G<f2vZG;4jA}|UR
zH|0su6#wuJCl*q_^AErcnaIsv$Q(kO*5F@UTr<vwW9#QhRpULo0r*M40zHRyDd{&M
zRRRzg73=9q6qDRIae1tgtGn5Jr&1;A&5RV}q9#*#94t~RGkxAA(EBxN#AYd(TmpCC
z9`S)ZZMAv*Bt1_C8txh9N!m5nl()-eOe&Bt*jD}`DZ1MAK8v};Y9hC`QZT1Mr>Bvr
zpLe1G)zdnS5P2V0>7ZID6n@rri#ZL{M*95~jGYY_@}WwP#Of1MP+o!p0j;fFdDmUP
zch{Z6S4=G}iM1mi+J3`>58kl-L(O+g4o=^3$Mm4f#~i?Wbs<wW^mBcbQG>Pgq|$Z8
zK(hNGK6E_oWuDO>RwKv_k)O&?XQa~AJKOV!p_3AQbflpKyQrc0GYWDl9p8;;z(C9h
zyt{I$Gr8?g?eMRT;<okC`MKd@BDw8d%k+B7Bim1<tiS+#U?jZpdy!uPa;*?w+UB(F
zx+ZulAiYV$ma4aFyU9CYih=(X>;bot?~0uhG4>l?3LOmf-{$Hq8>z0)AJW~(ai;$C
zp+}R5=|4ig{+I6AR`lherzv;s#@jq80M~%v7Dj9xZ+(m3Yg@wH(a^)(a{A&>xQkz{
zdA4mu%QgNCw>00+_L0+VTgFY0(Fv|d2UG(Gz6X-{bsJjKvMXaCVF|#Zj{1}Y8+wW;
zmvo8-uLvob=$7Z8=FL{?yK<cq%AloP6F+6d`|BJh+5GJoQX)FBj`~#xXZLA^u~04@
z^cyiFYme90r?=Tz#HCYNhI@JY5&o(;PwV-GRbJJMXb*5)<@rv;-0OBC(~XjRB{dZc
zA$GnKxkU2u>#mFEb*-C+LLxn#zxcIHyuKf{kI%us==1O--VLn;Vpoy~2&N!mTJq@>
z1QXAZ)DJJ+8Ypx<FH56At6wQ%90*IrQQR|CFQSsilv+e`V_gju=0`^63n5k5MgbNo
zMNDH8DxkEhV&?~sY#Z)*Q_x@N9Gr>rEpRYbo6owp{I^~NDg18p->txR11|{841Omt
znjG7ESy$I(d&iQ7gR<wgiHr)d{#`STOsXrOMB}~JPG@lip(|F%5t&3s$LUBU(maQa
zTz7xMbrzF=@SVT~6xI(PhdLOgyaEFkIJ+|QcVKG4pp@H-EvDn-u$oG@s&Rr82;Dzd
z+*#bIQlgbvxWxZfx{2*yioGLULz+2!{WUaM%W315k=*loKxux0UG{!&)o&UiadYD4
zq!7qh{>Ml_IT;;5;-Le>)223@uS3zpQ<Q2xFM1E)kx#Nupevg*>?W97_e3tDA|M=$
zMqCjQg=1ZODGNyA)(NiAO4L`98~Os1kTccl8R}|*HYZg4nEDmoo^T65E*TaCMB&4(
zP{7dz9D#`N{e)yp(=xn0v?lUG^GqAAGhy+f{LJ8vh`7QXB?U&nC92F7#DOVZgr-c2
z*HYeZqt3~|rCH?J#ulP-HKhwT-i(}Iu;N4XJBOohZV(+DdAf}?to<>_JII2((Fyn=
zp$-|q0Wu8vBXjluPFaM(a_JvwQMvb`(CW$ll42_}scUKI<Z(jL-T_h<vY-7=+-pv2
z&V71vzu*5Vq{*{r-|q+K_Cq^#2lrdbr|SyoT`b6_1EhP|;Fic|o#TvKsW2I{w#Lh~
zG=rN0Ed@ng5zwh^8K6a)p{f8uYJvb)#agqmndGiXR|Sj?(**Q|{4@ICEwdB4ms@@J
z`QCsr+e)okoPjrcF8ABQ_3fT@+-sK}AcpuwXZ*!zhyp<oSa98d)o+D;tS|T=YPSAX
zTSqvEKtY|r$K9Q2zb2MoC}*G-%gD1pjBca(2mGYB^Y($Z<BzvJMb9?B+jhxYlRl;=
zC11;)0A7Me0LH)8NC3uo{-j`vd^1&Z2_JVS*0}w@pGU6Vlcp(m5-!$wE+}KzD8ud6
zIRH<lyVN(0M0st|<%XWB#X+nj`_`UF;LO^7HkNm74k$-OJ@Yp(v>1}jly+%p73@ZN
z;!{CGhLH!2pjcg6!qBl@WrK&9p(u-s;Dnu7JUYqq>y40vhs}`fd15lqN@j6`+gaEQ
z+2+$G{x<iP1O>_RG{3)zuY5K_E)(E;{47teVBQiK(^-~PJ<RChQ&M)8(v*gR^`0Iz
zXA_R3>qU7*n=HY(yOd;rT5dF!2^*|PEt@3S@>p5Ih2~SMVr6xW`FM#=0nRHPIt5N`
zKWyNi?CW=xy}%8!UU-G!jJn4?#tOs0!Wu*&n4AQh#C`~+^(prJm|q1-|DWG5jIjr=
zFnjbbp0G-q@tkgqiB)D*Y4d*I1u&}l=M1f6op^A}s9%AN@eTMMd3ck?sz|<b@yVi#
zx&hHLYXxw+#7MlCwP@OO*99s+Pc^9@GR=qF4-j<A#tq}ZDz8DzO~d^_msh1*u)%b-
z(ULH*67)5IFrFZf$BMV&dZ7Pt-8DD*=dQ*cnd@KD5Yy|`R$9{b)2N!W#C`knCNT13
zrWNo_C202#Y?19qU?i?+LnX>O&x#xFLE0lYUjwk{whDW|DK6isL@rTt3E=XWX}&{K
z65}X8n!Akv>~$$VKFrH_eSUP68YQ3!0yN`1;Bf_`>F>YUvM9cJnD!TZypCy1H`c&q
z9Nl|E+gq>-4P_k&!raMqJ1>zqwo=W3Wx>a!)8+NRiSoLH$0~XI`edb)l!dvf&>5}Z
zbJjG^F{YE-=6TRfh%CNDZa5LTCDa^dhDlt{yOmppmzcF6^&Nfa)wcXqna1I(iMyAX
zXOg9pJ{GuTnci3WIT9Q@m^HG+9fd}x-HWTHvf&<6hj)TfSiU9TOx*%)wB+HxgDdjh
zwp-I1PGL0#z+N@Y?txM4db_)@W#k~EKg810!p!FB(kwP7`Cd2uhp;-Y-j+Abe0e?*
z@0&BtIj8xLz$)Ys+(_hrWyE}Jrbu@TX9joA<A&iMOK}N)68~}G(+G3?5;QN+I>hU+
zg}SZ?WPc*ZUZ^-d9X2fTFh1eBEM%sV<5#yL{l3zF)_CmWo#n<ntFQMM{?6<)Yp&}f
za{q!<IgebXg92&M$539G_A?_=vn`^#AN%8+X6)hH<{L<52tQ6JtLvk@*M3#%!AA}v
zupHG6@qLZ<)A&9q%mJg6t3-Je@8W=m?4{}l@G1hI&iWWsT23WNZwSXBz@M*$`0z4}
z3#V>*=sFAW;mvcZW{ELuuA9x*2NCbCD&1EwA_QLC{~RMnoC@EO?O^ED?Kk6dB-y*I
z3-RW6F)k$3h#P?)>6GA!{KnSc>;Faa24P=jWPQalhJ_xuxNV5Np~fDup5H6wnzvkI
zBtphDBjY?8<86C-?b>MP5%CAb<GB~EF+vIBnp;O}Jb>dD?Q?)>%=Zfy{vYwz;$zU|
zv-hi<PjU^BiTY_qDL7bsU!&o5ev%&=>+aO^|AcG-I5+nnd$&N|NqMQaa6JEyn4%s{
z`|-YG@5b|`KLf2B(&kmzg6)gD=zy1it4$&M^H#j<dPlY_MT}5z-vTdws=!$V*Gu?H
zl1hPP0DRzHAPW!vIN$L3rKRSID_s=esIcW)J3ez*tH0Y_+Y&`dYn6M<o|`zHtWVVX
zNOE$QJepkV2T*st4=Qx=Gt+FIF-`Dm?R(_t{Z`&wG~=P>!=X41@*)Bcy*7pp-CmQu
ze_No?e9AO`MkEeT6IT}k_fgh}4c#MUXdb@=*F@<OSl#7OhYDv<;HLW2C{im5s5z0p
zdWE*x?0xUQFMG?QH{9^(4Xdc-fQq#}3Ic&tv4UIpM$yQYM{39JyYE<S<bn_P-SFu4
zjtCWhK!sl&phxhuG2f&k=?10*=P&Im<%!gb*<d$gNQigEC=8n5@jc$aqrrd}(C3TY
zh&k6VGs$>o62e;Ftd0L2Ye7E2+jASh!W@+gI90{BWIlG<G*5#n&<+%nPk}B$3>rib
z5)FBw!I}`6?L)kG1E!j7%oh><XQkJ12jCG8C65;V@S`a25)QZlbBXx0?<)_B4*>Fd
zNUzriX%fqVmm-<|$?{B?x6U#Czywp!tdP^(81k*u#qSyV<01Q7;m9}b(Brz13pE;{
z^M2j@N<hE<-vinUKhgsKe!U*}imCh8l*%)3MM1dy6dY5YsVM2Y?n*BsxAwH(Ia@&T
zXHhuo_@|W+At{OpT!)=(6?`sLY=<Kh$IJjX06&1l%_$U$$s@i+`wpfuK{Cmm)3x1)
zK~5ASn$u_QXJ;qaB4BoqTd@l3Uc9EFcwBN@YUbco58~41Kf+P}cHvJH@;MGu6l#5<
zPN|Q%574re+r5svIr$)*b{dx0SMH}@*Zk_RGox(Z<Zyh)WlMLyXXacs_aAn=X8R|G
zX3lK#G(JB0x~mqp6Mn?U2ffJ(A{(IHt`lrYZUs<?<z6KD89qXiXG1hf>qxq65o8yM
zzgaD33)B6g(LY@vJA+uwmJ28@iu#zqOV|}~odl<Na6OBTPxqIzjiqw7H~v}zS?N#p
z+IVlaj4JhzoTytHIKc4j_nqF*L&98!#m|n{%t``~C|@7iz<0s>g8UoGVDeqr4k(_C
z*fMMdUyW~Fj;S=SIPhp-YKCClbhBaqAcMSTy8^aRwj+APuf;no!!c~MCg$J>QQ=nM
zk9XL5z;F70LP$(jiY?@ab^+M#w(Z7nzQC!mzbtyQ$)X-tNk50D*(lf(HIVHza_I|x
zQ)~Vs27?}oO(laBhQCaO*VE?!w_k)lWPqd&nCYR21m#cHYjUcf%Ev3iT8phrc>tpg
zhQotpQ8+poEf{gd9$sE9+%SJ+w;i}^6y>nbq@q`5{YiiR4M)eaQoWjq?AX=^Me4rk
zLygt>8>UVFf)P=ABhkxG@2p$)zLVN4vf(q<Kv!6H-0fR|c7$vSm>SRxSFPqLOF64G
zPZp+TT$zMH_r0-H^VbLx>SKk$)o@%<5`m+1{$Lt@WE~ILdF!?Ch*>hMayA_bgz<Bs
zgAi5$zu+@=V=Q7M|3h<0BLRv&C-ZcGRKKiFi1<BeHJjd<bez;|x>N1AM-PeI&+ph*
zUe&RHVEI%akkS&Vg^pM03oq8yR$tek1$ZTfiZrQ+{`c%hm_MvEiuz*Z8s#--Win=z
zO{o|}Ih&NKBu$_WTMvC_^BB(wTtO>%KM-!2Dv*X*gkxD%Eo5w{)9rW!UQTh{()3=-
zn1XYGf-CUS*?Q@`(>^o7;pl2GzIkRuRm(&>`ji+=R!p&wbX*lmRQDsnx(KVGxI-7Q
zIxfEY6k>{OZ&safJg6$IiS_1{<PktP{I(?+<HcAJ{d1v8EG$l+&?4H2KmPfXxK^(W
zFYEg9aOF)eHhHo?geQAQhXWoKq?(XVg%AzU2Ai~5PfBJf*u1^MP_7XGw~#*@XR`t3
z0==7@`1(xNG9C@UBlHd%MB!S0NDJC#*;G?m@y=}Az5}kIfkzE1JA?8KDlXVTE#$xU
z+ednaASxmG{9A(2Zxeoa_uaY{w4551Y54Vc@Y~VgTj;W}Jk)c<rV0)<$AW|Z-R}-E
zx(84E8RZeInLb|wa469sWhKH3(Ff)myaTWY1?(`JwNvm~W)zCsctHcGDCb8iEdvit
zc(;_ZkKgWOjYZvX7Q1&3&JK!UIxMC?35F|NjKprI%fiR1i$*Y>Ezjcm+nlUETJ4Qj
zUPqY+ru*nLmoA<p*6WQiD{0eB=(s0Stg()ReAx|}1#fXo)R8?Dq3%juPnOc?+hmC~
zYow)0*Gm)de*w~j-{0d3u*V7j`Ed&d7ysy<fw|lRhNv!Ie#7O<Rbf1ko7;7gaPwJR
zS;4JPs4Dtd+vwdr9NK&L!^+C>d+$BIqC9-}-sBZDo|-$J(r%W8KKNd65-u<3MfS!$
z`|2(QsXZv!EZl}LgpfMf!_g?wn6s!!1{b3T?=q&4zzJ?Bg%m{|ns8gv8W<$1dQgA2
zR0Z6^yQ7)|r^l4psSMagYL6`}1WTzw6v|M8L#QMZuj$UJqt{}F5giJu@D2;A0;vq_
zJt??%<-0n2gHD7^<`E}Y>dfbj7yf2I>C`$hjwUF=!uxA32QtvP?2C`yQpg-WWunMK
zB6NKsyzM|T9xVD1V^R#plLxki6W51O8Y^(>aHg<W2nNE*N{<aR4qR^cRFdI9u<)_b
z_`ZN+XULgH#aON>4aieudt?oSyVCRxCZyD2LXgl$&bjL=jxZYNb$4K)0SOWez}eZW
z+*0W=CWs{<<hZR|k{$!wf-z=KB$EPv|Ncymszfs(<Y<CjMNz`ekaKeTiV^7=F2p;6
zcQ8#{O?L<=X&h~x)ef=X<@7>Q!E|}3Qq7h#p>zN$cFocP(fVad&*4;FGS;7<#7V^e
z2#`wR{hAj(DZT(*nMslO;DROBD@kWX9Yuj)0u%CBB8~?H6|}yLJhQJpc3mj8*HXow
z8j7_q7W_A)M%R>K-R`-o+t!DpMzZJFgui%g(f{zt+aiG+fWl1aIiz}shfAHEmU>x0
zPo?z0Ww}PWeDw}J23IjpPV`~?DOQOrz~q@h`byLbk)j6yw#-gKBZ&@yQAA)*jJCJ~
z4piJqxt3b&2FEEjf7F@$0kbpo{v#t8!D>ebc$;`oChKoL#4S!?@&t3qqzEf^12baZ
zDA1QW7IQhA3m-P|?1yDTpnO$F{{pu#ja_G+J`9}*d1tzK8aNs>qz_(v27Id2#;HeG
zv^n(%ysjU(GBOk%7~dh59ytZYAcDysIn}so#o9TR9n5pBJ-{T5iB~6%o>?MIF9-k>
znE*ke0Byb?&;uu>UAlROf2Ya-!iUiKBFi;d0zETJ+a1ld^>uF^Hu4SkkcWon#}^}&
zHijBB2nG!mqYsb=h>RO$_+_Adsti>N$6(ZXP(ET~l0+byuoHc%2<x^}{)`dRw2`-u
z*crQYuZ+<bojm3dl*F(sl;Z4&S*VJEBqsidIRzFWfZ}|TCtruWu<A3QPbs<*6F>sm
zCOIk+?}3x?0&~B@T39zJ<MOFT9{JQGd%i4#HKo4wQ~dsDe&o~*^9{^3oaRVo{4CpZ
zQ<BGp(#^9;qp+x435c|2bvtA=O$YX@_rWgc1@Mh;Q{Z)YBr}&eq8cb`I1Y`#Hw{M|
z7Ctzu>{gnuF_oZVifiMKGge#p6q1@LiR&Y$P_IB!|HN>V?I;-b#^&<q{H~F^6?4>7
zZV-Eeao7my3sM&#$AY-<8CTcs0vs&@W?D*g<cf2o^Y%2sErYqYNcxf}^;Gh(m2wZv
zc`*e#Amz7}v0{HmM}KiF4!cq?Ue3mwGSub?o-$Fren`_*K7KBqy~?mmlS*5d_*Wb&
z6p%<~k(XWk1%?MHfPTF?q{)yzn%4~(l%f=UQsx{JtP+JN&UT(O(!R4L-RPT?Y`yY2
zmO6vaG~d?8fv!jY1+@?Fjr2qVFMLnj8;p{D%4W&adaEerILdWrF7Zsq<A<DR0%i{s
z3i#LN-`JePQBb`G(T8=0WDGFYbB%ANdy_;efe4wi1^;Ixzlk!U=S)=RoM>nfgfp(|
zRzzz|L{Oa6jHX{5xVrv~ro)@ynfld%S8sa1G(qiVnHqj<^lMaDt(JDB75CM=2;R2@
zj*QP<5ih3Jsy}N!oX8!MZ{<bq-Z8fGirLO;IZ%VC*sdRw`gG2(mIof4a{VKHbq`a}
zPlCJWaV0bo0wSrvIs@7z^R5x^o*u(%gUrLZMq)83!a^)}F%F94dD&}`<(5qF6A-m6
zBNSV#c8vDrt&n@Rv>3}y_gDL2LpYPjEd-FT2%opt_T>`rbp$W8n8@v`RhPp|-mVT=
z1yD9n>7mI`rWY<3d^kCDvV)N@7_)2m0fE4;>W6D~BG(}Jg6-U{9oD<0EGP*g!IqTc
ze-ZOaF_?&ad#NbQwpts~kvMthAyir`*N;gX{IPlzQJLZj(|U(#UCz#3BX?Nl8tyrC
z=UvC@gJkCztRF*=7OX<1b=<U&1a0KBY5DvuyQTq6)DZa*fJvuiIsw_ZWpO7feFfnV
zE+Fgxvkuai*2@yJCB(-#PV}5zwga|3YoG5gH9rK1;Eo|0DmKJDUgyBk`G7rT+lTGQ
z@Zk=(UrKp_JL~r6VT_CPw0aP<mUQ#P0T8!?=x3JsXiugIN_h)~5SAlJjl>or&3Kyj
zWS&TQn8WL59HLU2n8a_90{u%;c@I5JPJH+xY2H%GO<7IY9e#*%3B6d<6Va^ZPa~Z=
zvb|<-CGFR;-j$5z@34iI^}m(T=I`^%UIxjHk~z480JN(5?Enh?ngPVH<pNRLGPOft
zRWD@xN;qWXkpUA`((*<qtoSnpU8O=kFLkxbIQIb_xaM=VW|;11!q-R%W(`z_(u_>7
zf~w4Zz#EV4=a_yNtlI<q+<>|?ernV7rt4`4(V!okI*Vv&TDWkxW8kQXbdUb#-+OO2
z_tpcC??e!b$QZ`pg4T!ZDlYVm9x<Jrw&V8fmmfdyRs*3e{|z?`F8Ira;r7d;pKgAC
zucF+gVv;xdOjLwab6_+o;50CsKjwOJrRpB(GrFg0755i~pDAl~bUv5(i0JR^@}~#W
zYck8ho@y5@j;`vSNQBbTPcNRFA4OJuzo^U%g(<6tt4{&m`l2sF`4syk=J8ZGb<}_+
z?E}a!v<}oICUF(Ykq@(yl*9n2fX+#=Yl;G?0ThR(Zu~|l^w~t>v!T#Z2vZoE4>;gR
z{OX`z1A`rSlX7GVNCfC(>WFfqSX8s>sNX;8&#38K7u8Yh%0(tAOaGi-_gmVWiIQ>%
z57OG!b0=0abE~Zp1N3iN!PT@5PIiMEbon)E@>UL36<8}|E0%L#u$q7CO?nh!RDqD(
zI&BId%cq#$Hb7D3?7wX_8unIrD1xv!x)Ga2BE^emnDV}X=`cb9T%5RqwI60&wAKHa
zl8TV1lDHI9NK^3|;r3tS<+lYpo@a(ia+SPdHsMA2+f17x?A3blELSF=_#RKssi059
zyp$_?9o7{}(joRuAVCXF>w$?|*M^3+br~I9r8v#f@SZ^K_F#N99{f%1@PtIf6Nk0i
zzFO<*s`W=YV-7kqIgnp+lXnt6{tU0t7{;KRyx?JPqEHi=02_doHYn$Vhtc2~cL|JE
z)s=f=v0QIY)Nv*kWA{6bQ{3TS`VNmwp+0QcZI}tkcf?1GSZ`yjoC4BF-hVV^jQIWk
zGkkP=Im%;o|K58_eh;~j$)}Asx)krgSz{qpXy8xk8bEGx3+wQNTAD6S9;%j`Kk2G<
zi|*zJJf6to9$r<L>c+s#2mi1z)2Dx*{Np!hRTRF*L!_r+<irVqq_6>3L1Z#TjX;*a
zDm@&9MBe#WmT4#tx8nY^@*2y&9@Ox<SS)m`Gj=^f=n-ZQN0R4DJ9-XH(&kWZdpO-T
zT+!qSeBqRZ?{ppmK<_i0prgZY_GHhF(&QoDys|&HJ?;*e94}gz3||KNzJYhQ;*xr$
zW_WlO<x*W_F$s_Nr9we2s=Jk=lM;|7k1C&gY<l`J%m;o1cAJMGgGjo0lkXQPiv0fu
z?ewrmn(!KH3Ji!>?DGzl49cS+ywhXhKsswvHKwK2k}hd!y$0Ka(Yj^){{vxdev0L$
z)zSIgr{+OzglXB)KsqRt+w==aO+IE7ODJxMnuZ{=qGS`5bt2*?`F?GlWQ0ccu9u{!
zFN@x?Kg|C5QS#i+AaMvx?U^3&1>3eI9YOw3{EHPpcdb8&Y%c*da*1H*#K``?BEEn;
z%=6HgUgv`c4g0`&LUS2<FH(7tkpg2)IyzF^v$o!dBCw8_+{r2~p#UJOKhmj6t)h{u
zITScddiW~oMvPiTi4Z<qH!MScCtQkc6!2ORW5v<*gYMa*PC*nHV(q*RYGMRugC~S|
z_RK=__Y>JJ8>`>WXXC-y+s-Vw2vl6H`m2hrcjFO5rcxa1uiz{Xhvea6sQIlkslFtH
zD>FSC2xT&%Z1#6haqP^U{gX2(OK=%rT$(_*%^7z*-i+}Wg5Sw*#I{4X#WmWZ7z8g#
zIYxmgDLd0E#07dfhDz&I3DB7E0@g%(Yin3=VTqzzoktB_wUvPWV0yGTCRXT77^eT7
zItB>?wPfcy6LJvn?$c)$gwO8EQcFCWr{O>o231r-#bK0y%_G%#rGKobm_vAGH%Par
z`qk!BH0*1_O3qC6XS2U+ARYPG*f!+M7glO!5>4fa*|bT+vF(h9*L*JBqj-Oh@_9T)
z&69`Y($f*E2}B#3Ja1nlH7}vSTG7yIm6BNP?31~j`a17tqP$?5?~lFRG#`z<$~5nY
zqA<km#9fGU(dOlsJNuFCiAi~(vrp!&5buCtt>Jx^I5wxTvI11Y`lRncANgCbkM=+X
z?N&Pnj}CMTH;5^NC1Nn>09Hu%>6DTWC8EK%AJc$ckNkoWHjlkMh@#!^LqKUP)cnIh
z%&e%2rHQ*O|Jaz{YQEdF{1r165XVC?VbO0Aev`V7DD1&A(1YILyBoSJ*c$MIBm*OV
z1Ek;*a1DTglu)fJAQBvOz?C5(HL%P~^(SRB<cA3uooWWu(ZunhmK)>%HnYdE3g=`l
z0Ia6>22|5j13jjtn5JTxHwMD~wBNEyHvF9YP6>I1%q$(~sN0y*!U4RKUUFW$<!i?u
zRuONZ2h?rv*`@|?q^S=((R@!ny1Y~sJ|{bsb%JJcIB5o-N==*^GQ-x)>u0R6PFoPC
zf$NZU%P|`5H{R0x3YKF~(ewu&M6iAkz$msy5~v7|zr-Irz;ousuR^DK>F8CGGck5A
zCuH@kb%{vT&_G+Hs;O|K>YoIyXJmNll&)wTp6c0+DDN=z4)JKoRRJY&6yMO9Nq9z<
ziKRw5D$YmKjYV2luHR2&O{_Fm#Y1EfX+8$;3#mV3EY)Zb%y2y==B3CNdIA<IR>QJ>
zl94Ox1w9EC*BG&sE0h$Y7A+=aDyDN|ySX|9Dl)66Ri;W|LWU&$tCc^z0%z3jB2q2Q
zkHw*g9h)a9PKpx3>`FGjl<WfGX^6sjY%~ed-_GZbfWK=H7sF}_=Ch%$fQ_j|Em_q=
zL(<ZUB(({U2Y4btbL+D1lj2-t3AIO-BFk+$Re9K4b<BH~4U2VW%U`o%KVG5|RZBmP
zS$k`e9i~C8@?q^;R#Y8Zvy3;J$y*F-&GUgI++<<3cf)gy@^kwpQw1nyNYe3gEI@n2
zN#tc~-z0@qhZIkjppi8mmv#z$C!CJNyWW2vc1>UY^!D<?T!NZbcNIgKQu9+>W?TGP
zpn7kuK7@bdsU#Xqbia}5bULCF)H1Nk=@_yiVdn{ogr2v0(puk8EYCdRhK`tXBeMSr
z=`%3rlt9nJr6fs^L?LtboV;QF*nMYNP&^?uh%#l*?ejMj?mM=`qG6jp{nHFr($fHt
zLv|R~AyU9fHH2jZR6>|UC&3R!Ln7v$Or=0?zjS2hfZs_4{KEpFPL;Aee#L9UT><gH
zSh12h$l+W98TlfMyKjvxJFpi!51p2~ov1(?wnSeNy37R**#cZ`tgA4%K##L%(GbKS
zv(nWlvKx)d%0Xc+nGKK1@|k2Dnow~ekmt{#)JUk>LUUz7Q$aNPbN&UVQ$HTVQS7*$
z4J^QrU7%aBLAWL&9Y6nhs_F*e)gA&r{jP9|XiX~oF5v$m+XgQW!J2uYHOSN*E>uy)
zWXORn+bdBt_$*YsVUr2(DSVpb?Tz8wm{3Z^q$j4xCgWOOXs<w#$4mIJm}RRxtf^4w
zkHY=oKa#r-bK5(4%Y#Ybboi4k!sk|p8GSsqE%iyh^x=&!;~78Vws-RORc%|@B6)N0
z{;Mq4wxXNyo*aTj;t?T0Pf5SE`&(a6tk42(uF<x}pvrP|T+(^Dl`RB3@;=e%>}#%a
z>xX%Jf7@2JNZrBumVVM~ysTb&y?(LYJ=fOLm*^LC^-#roJ(4iJ(We*fP5ZAtA(!u_
zcfa7{=lXmG$w^z@k*b%!=##zo^7dP2!)tHvL9Ojw`FG>bUDR^PF*w3^%dH%V_7*I0
z#&4VZe^Jl99&X)V+{631S8}_#KN3{hfds!zI_vh|{<*(=@h{48xYTdS*KPX^=}X%3
zBlR?bZopy-tI0ZEvdZ2Hsh66(C34s|^*6k|5)v3|sNh1kfg{;cSKQ2PzzY=%5sk@c
z*+n8!uOxYnWf_Am4YO@1?;Xi}KH0oq4%!BNCw*ZLWIYcPBi@eU0r7B^Smu@{4!;Sb
zg~VC%=gurGCvrawXPQqFR$WAe8pcNw!LBsA63vf@&-oLPW>GfX<HXdzXV@Va!8`g8
zuqPJT8}}kv!qxb-Mv%;B-mr<bAw07&Y-<~bcs7jmz}*^rGkb7Ca#;;LV=bhR_zHqr
z=X@w|<AU-BPCw$gid}r<CbROyO`Qk!ZBNaUE4%QcX2M7Ht^uPsI(*~h;)%-bGs9+O
zTejQu>+|HrF4REEd1mr~LA_^WxJb^A3gqW?r2#xT18I@+@sQ95mX#$$u>2LcI72Z8
z%9|oR8TSms4XQ^t7AaHFo$;1UKzwfdKt39L-%V2#C3x*?lxWoI+@C9<8cU&6E+pb5
zXm^m^>s+>+n_M_q)rYqapWt~AHzrb%QYdd+bw@mCSa0kYj_b)}*3MX&Y&bOES*6y#
z?6y;fXZ!qJeSLeFCb;@dAIo_S-`*BnY|I4na|p--=UayFQ4x?qqK(J>0Z4X2F5Zck
zloZgQu#!cBk>(nc>hHzJik*Eh_%+wdS-6{;y;N=>kwbw*Dopt6t8GwwWxVsh7KT)H
zxGNV;FN-B&tJWrZ3lv55TWWW5t}Kgc{SHZey!J8nPs00Q(RWJntWs?u<t5^((d~`O
zU?f7p=#IoV;C!GI8c&nOMhaM@;FyAwRK1ME39f;!Z<0<hX=LqF=9E3vzR`JA?N!zJ
z(Z1>)WyIdo8-cj3LAD9S!V!OEU|>i6V138HK*b*k#}LSkYq}ok-D5XD<u8@`dh^LX
zRH2>f?JJf1$gkCx%s*+G`^Wa|9IjM`ckUV6Z<>Ex?hDcrsb-iTI)Lc=0@-ZfeNkvk
z{CF73mML1WuiX5{fncyN+0~iu3kC<`oy^BmUh)^jo5ds0)G`lG8c$DugIT1pNQ--8
zj?w%&9D_o-75L7#gO(oBGJzkP$sX|9??PKwAfw-Q8``>X4PeeV>KxYZN0~G7#Yd6q
z7f;d%IyQb_D<Z5LwkDJSDw~PXbh`Oms1u<f!Qj)M=fJsT+KMYw(+TQ%)cSbHNJrAf
zL-6*`2Rr<G*W07#$j@L6zSrdMGR%2Mdd5@^?}yRb6HTPao**D8ml#rgj3Vg~Wa<_?
z7srwGs2Z`aS}h0*x$v~1bBxf$Dgo=$ryhYZ;0;D;;?tU51n18Xyg!(B8o~P;cbfry
zdt(D!8;_g{#y|b~?uk<K0v!JGd?iILa0Huf{+KB2T99tBWSG+>Ej=^dQ^q)f8oNjr
zQNSEF4ZvDT{MG)OZ{C0Te*DS(_r~xqQA`Yp!+}&RWDMnTE|w7YaO@aw)*B57)Y-Bg
zh$QT6xzXU?ck$96LdN8Ejo54QRU3o48BR$XK3X`f02|4rLaJ#};<4ANL`vu($_%8D
zD?(`?XQb^v7zi9b97QV42<7tYfU7kQh9`2p)vR^J{ymHK=)TtgBiS0tik^<9fAABy
zTt6<hIo1vu%WXoRqW!_lH4_7S%Q;(#S4Vdq0z&Y^%hmqfo1+%v@)yJ-E)27dO;q|=
zm4t8>SNACHaiO;PbpW%ddBA+F3$*Xr0?Zf`(4Y$vhEwD_QKu(vJdjayNK`I@;dEMz
z23^2?Iv4~5cZT+E0Pv4Cpf=E<?cM9|2of;Qw?i-UvFHH#rFH-w3eXoV0472z5KS6^
zx3CY8<GZBu6qpB?=8pykC5Ydi7=FpUvSI{~pD*;nN(dH%cu;A;`DKZdOE#Aj#O1<^
zvh5>wDpnw5hBMmDH*1-EMk^7mU0vaSYfDR=I{e-{FW$QLmA8P#PWrCIE0H)UldN}>
zFo`91Q9w+(274pfLS32xYoz3ET-1za_>3U31a9vs<j*yd%InBM#dYThd=xUSmu&ya
zfnhD{Ft{ZS6AbZ+MT-6jdv?GGjYncO`>lwt^6sr8<O2a^AxF0qLXkvAwn|^C4wj*o
z0nqY>^7R`7{WI`{tmq1u2hVQtX6O>h$7UESXgk&rXgh=s(sq-XftHOFk)X4K!(DA$
zOO8_<ikeEp(lh0<PTC~Q45|8LnVeeTDHJv}eQ4X<Pv&+_V$8kc7k=iTYL3#|neP#O
z*?-_-2&m1I_jjkWc~KB=HB-$m;=4+4E@h^~&QJ_Tx9l|Gw5>FM<fz%+DC+{Q*sgZQ
z)gNrL)sB)2@9V&s@;!cD|9u{}_oCfw{;llUCA-sH<1TEB-wJpl3%+ME`@#XAZ(A$6
z8Mr7#6jibm9Ib{^oB=9uO~!WsW3xWlZD+VC(h^Y+oASaMVpO0LTB2FR#zbV>ve{fQ
zMHL}#=O~&Uf8;v)0_K`>XaUB*SD?FT^QH)eXq@EjY2H#*8uAOJ{*%3W9cz_j<3q3j
z+{{q`#3Q?08!_Z@%r@2~_zCn0z2{&_a1(AyfX$IF%wxbHz!?H2VZO$T%9m?D#sJ8d
z#sDZwv?%E{<H0j<^D|<h5zEkW1~Rn-3^No(|6`d;G@h43v5Ig$`lEnkMD+<6d!-OU
z+%&R^1R_?rLxW>6f(cZ=V`vWUG9w}zyF_z=F1delxEM$O32MK7mArHMkbl=(*5nie
zADEW1kTSN=`mYtqAqFVJy;H2-bm+tMc0WB~1v5drR;QDP4}G0>B7GcdIA~9F;Oso?
z(1l?9PT&PAxQCA~ZsB>m@Y4&Qg8%1#MhvN!2g(<pVnZti9Hu`q2Pj~;Un~KXC-MCG
z;=8UacP^Iuqv34#*y+WAVEEoK7EEireWGnE{xq`lO-B)6+>_g(8H0;&*mLln=3lVj
za}RGvczc4kZL(xo%3*-(EpWwggS;r*MN%i$0d7z2<qg&dxiRzuo~txw)h%i0*RdWg
zG9Ll3SMcKv(mex<t%x`KTsbyIlF=0W+gRrafe#XnEZzihX*|8cl4{>~Ahh=N?YHgb
zkL|3TLby~6d(p?u-;wwHC0cM9S8)Y+*p(|*Sgz=8s~+Xy{hFFYisodx$MCE~SVO5T
zjvqBC`T=6$w6?z9=#5{tM8{~50wP}lI*@y`77C5(a=~qpck)%%QG5pPPO%g+8;oZo
zqNsAPMec@ix|`bo_R4O7N>8oDDlt?$R+7i!HZvA8%Tt=IP4T9@<(yKXZ2l9U(c$k<
zuq}OLL{;SnEn>aBrTHwcI=STBg$F?2&{I+!L79_#C#26q;At?Za=rDnAuD!xc11Q#
zsv$wLs3KCGKAT&Z86=fJp-{kJD?u4|J62o<5G@zSnm<I0NID9?&PHRY(Kx+vwuZHd
zudHK_38^;Evzi<wEgL+6WB0)<g0H?350;_5I9$b@YY?PKZuvT5T|P?QB`_`n5DB+J
zCVR0c^sViX-IUiO0Hqm5T*@K}Snr$l8$rWAJDu}WJ@#B3=h)BIbG+wsT;H(|_lpcR
z%^%=fZ*ek4<yHfVZT+_HG2U0ZZ_`!NZ(MX<!Tp#I;w#r&zjM&JdeUGhB7i0jP==As
ztP$m8MKehy6-*g<GIG%Hrv2*s6^<yJMoJ0yBOaoWY&I1AHwVlOQ|RizZ|aIzqie+M
zv@E3jb>;nS4}h5j!;4QtX@~}ob*m?grZ=*VyhyLS-clYTbj3&8YWt76$CQ|adxXtN
znGc9^0<}J}AMigR-2=S-Xc$-uA-(fU44oHt{p86Pdw!uoeUih`8Va{pOxxGkPC~p1
zW%PvBhAFt4(-YHz^^TQ}J|G_rkTbF0L_RQ=(alPJpew@N(4hf8EyB)ln$urI%nyXX
zbpSiBgjNwyUz2PTvNS<&whr<O#zj!iFjHoK!;UuJc81XO8S(0<eV3;FFE$_Hna%TL
zyJ&+ii==vlo|FtImFklQnTx=Lv-zQp0Ewl!6Gp^2v6h+}O1;|2JClxs)|C@Z#5ghc
ziPX>>TG5zyBtFDAe35BEkuY?ehyjLI;ccmh-VWLWog(KZxfU~Luw)K+R4Kv9ygtPW
z|H3*9^@UC`eA#UaM@A+}BinOB;du2MM;6A9j!jqN;i262ky1?*Kr2?7e}m21_-J`P
zYWtO7WW})p1(Au)m%E3Pg@EO(M1qRnr5^+vgUBiX4@X$c$n%>Ew1kwF6EG%+(KE0f
z)HhIYYy`7-#2oS8>A|k33In*`P>;HhfS^@jsnOx_Ut;&2AIRW`wMS0%?4C+G@p;4|
zsNTYHjQO}zxOU>yXV~P26jJ!xYKNq}qhrXh>jO)NVI=<}&&nsp>w?lC)YHg3ip-yo
zAB+u`@(OZ+z$}T^K=+XbL?8_afDa<k5=u)fJ!n`{oCaF>c8)jywfDZ)7iziQ`;P4#
zfBho_HKpMWXp&H&E@B8J=0tK)L`6h(9G_{xcf=BuJNi9;(R{vFIO98y-M3aKyps04
zujhcOweAj7vsZK{9LhvgB-RK+&ifbOvj;HtS>o;p8<V($%+&OUBMyiIlbTi$#6l)i
z;4zZop!`G)W{9&X<yzDuHjLq}{K-82x<-(yshr(y#l*W2$Aw-aSPzK`;Kh!UU{tI`
z#AW^0>Y~X1gnn)R>2SFD4@jr@WvrTz^<@=qsJGk#xVZ4|=-V%$Z$a44`@nln)>@Pf
zwI5_s6@UVFFG|-iu*jkdbVS*k8sdN1vG@yX@tAX^6&3G^T7BUB!9z7x=`!$!Z}p!d
zJw1_?P^gJ~7_<aQD1bi4%|SrfB!I85S|nTR;?J#WgAEKX?~Bk|OC=Mg1<FyN2Q={3
zJw`|P5;lt)hfi-Dq95dQB594R&k^@M?fV#DE{$Z_^oIk5*hQ>mZEAv2G=Ped^Mpq(
z-E&fUB4S}{`J=7pZoc?dKKU0pC)GB73o&tE@!LrDmh+9iAY*0P`1Hug$oui3e|Jg{
z|5HWja#O&M_8<`ta=1jj9jDoe_Q<q6x|cbAMBb*gZj)asy4iRBFFx%oy7~9`?8WDg
z@e%j&!ul0eSO5R-3}xbf83R>AKigoJctvDK^?W;As<uJj+`@lSqGc6-x&lQMQgg~h
z4p7EX3fKv<yLTjhN~tvqpmy$d)C$(vH>(!39$#5op`{*-dspeszq5iTctOZ~5|I-@
zYt&+k_@ZSs8t@#UrMR?l3;09Q|56MF);!yHSeFl?EM;=6#Wp=Y*UL~|qx;nvHK@&)
zh*_uA9X4m+;xvO~_FoL|I=m|^meipBD)>6(;4#&tpKMx|KL=N+SLs1@DVfbCvE+FC
zJ|p(vw+&FD%Rq}*Y)U17qPZ7dG;oLlgXwP<=oBSZXGB?_)4@$+vDK-d50PuOl>9Y^
zWsC-_Kqin*TUvC)@u$>aHm%0|4m|O~*#OFBc66Z1XQaoUG@@20WR#`@*4Gnee@L@-
z*x9%>j)D^8)X@JCJ%c-)Kqk6x+=*NhOzXkm!Ej(c(=+S%oe+p@CJ-uwK=M!yP7L;R
z{ig|gxF=xET5;s;wV20P2M@c-Q5Y9lQH#tA0L@bbsh18-d|lcY$>>i>If2wx7^%4h
z>=0*k!I#M4A}sy61TKZFb5aau{=@T$=|$YtF{bd0x6%}zij)c4#Ws)^_)TL#L4hck
z5F$K$FA!B55_y&UNg>NuMim-rB0aTMt|93^^B8^%xvh{q2qbY4fr6B+)}ObZ)MM}!
zy{Ujiy|AwsYI6TgFtrHX^e-A1o&avcH*L4p^3?<wAdr3?(TN=}!0>@>JxLLl<+6$i
z!VmZ}A5a{_uM6Db7>=gWw?eE>lJY?V@Y6#Xk}#G8wM3S7DpIrSp0Sz~TC(_Np1dYQ
zpjQoxMSAR^xkMpG+EXG?&`{QD84(WOeVSSdU~iE8hje5(<PEfOpdGN`tYP%Yb1DT2
zS^`8<T>xJnDw{!VQ?8^ch<7WYnt^VVrcmghMpX?ABqvM5i~@H?Z^f~HNO3%=yIw5_
zrDf<4bLL1usZ^A}$W?yZ#2N_q;M^P;F)PYp5k^TvQ~cD1DIx4MKQ&OV4~YHQ-<LrE
z&GleB7COHz*)>oY=t}0bSSgtwRJsPXy*IgSU?4weP|JJ5nl%xytw<n*FE<A2*)p79
z58c`P&y83P(b0a$lAneB;LFGtH0*oG_Xy}CF(&LmX%M3bMg{+oaik=jo9QaRsSYl;
zHbwUljOi%y0Kx}uhr+qwjtOAnyKpCm@3PW5omVLq3<HC&Va!5$S;8;za<53`W6=q4
zV|^3w@)->TRo(K7qH0?ceR@=#h{p0MaHW<4_AMAVXy*b}hZV@#Dx9?yL$%ZtQksQ9
z06_-B8uA5XOvR3-l6Eo$SF2<SS({DOZo979s-bGyll7zZ%uu#+Wzt?TRlTf)%w-!I
zZbiGsgh?FI?24Vl85RWc+u%F84v%QmZAD5D{MXY-D-unm>?Cq(St-1pDIEDL5lu5v
zVSfm}noioOR5W5G(_l7*D*W2l;HuW29Y#Di*~MLZM|5+Bcr0cTqH3t3x0w}bV;vOW
z3wQ~=BO8COWxY3^75TY2ByI^fb8`-MflX&(h3dn?wfH^IJ-sL1ywpAJH_)$k-EIZa
z-x0DKv!K4Q1}QfWOc7WE^->6N+ib4`0&iQlq|n4UXb)m;N-$nv;Sfoj6YkpO)y;Q7
z>|;3`BBDMO9d~917gZFYwdoZT1*5NZS;0$i)8gQaGajANuQUo&O-7~`A`Pyjioy8w
zLMTw#RXvum!nO{fDi!<T#zhg~mdvs0u1X-ZfP6jYH!ez9QhXJ847QO!p2lVj_<DFI
zR4IAWSR_-(D^5ZcYi)JVI0#^n26dxI0wIk2qu(vZvJ=CMhZqe-lCcW%nK({hg16RC
zXEyfTK1u`7*Rj+n4%a5G$-EE9NVj?OzCaZB<96InTWe@^vNl|NAyuiQf*=35M|;<}
z)_}#>O3oGA0aTdAxT8chc4D=ay&Ag$1JwlEQ6Si8U^oCze<r;o)({y6B-4ZxgaX7g
z;Elc`(iNhOw<eqE0%C!$_ubM49p10Wx!p)^;r=>_11(J(r@D4c7oN762ALR^)DE-|
z!!jg1|2j7{ODLeTejB|k1mnTDNoGd#;ZHx@T$2`!ove6XWtcj{+vWSY2~~>hMLYC6
zP8eUrx8)XQJ#Ma|m`_i2nzf0|r<nwwYJ(?02t9<xTjp+oGKuO5u#-9xpa5C21c;&m
zQaK_8LJD$)Ntu1x>y*6`d?Q>cKt8HCBxH#b6d_K+E=CuCAr%<7e`;B?mswUoQw_hN
zsD1sA$ou<L1!t;;#P^rYT2^5=H{__6p$MnvM6sAc#v{MqN=Aak6Fm;HxX~A#q1?zx
zEv|K^;2EKbKqs^*jhrJ;X*ind#)YU=ysG3twxw+S16fr}F82owLyL@7_ZL->9YBFJ
zO}CuVRYggsVKb+EU7rWts9-2I)ZthKPzBTbprk_UL@taT@o$FF{3e1&pEQhq>|S|Z
zPZ-U=UJe9Cw4hc$i?I5UK;WF8(um>0Hx1mFz@5hOdBgaX<$yDyY4!Ia&4Uv-2lPa^
z6Y=#5@e66foscBkBJ3$Dpg0aY3Z+LQ{8J&?2Act3i%^#6hi3LXBJQW3asp9tZ#3XM
zwKjXj6|?=N-gttn2HD}@MEIZ^f&Yf50{ML4sW*so2!l@c5{HpZ4NVfBKu3IH1zNHJ
zj0KD+#Y>`zt-OjT9KW~Oxc4|?g(YG=BIjt^WHv<Xbl!Ny6>oH)3F8~EX|_c{679YK
z8;&l%0zRMWc<dx71b+t}4=9LuLFNZZP~m(lm;<EW60IZ+p5fI~{)na#@73aIdtYVn
zNOUMr52jH1GSq7pBh)gOr-tT7cn#Hf`%&J0ez3C7PRF(0xDim3!FpgQcGz~hyY_{9
zOls4+sp&JkZr;J$CwNQ4Cf`8=|3UTfDBks@-vN9?Es^rL>Wkjsf*vpFmwtotpg1^r
zu=%Zvy1zD9eyQ$H;9K`yvhN$Z><-H31s$N|RT=k@Q?TnTD57j>xHzYZ#AN;K{jf@y
zcAd8Ugvey$5?|s5v9LsfnOJCk5(jR&DZ0Wo4%dGs47^{#DDHxN<2v8%fJLl_mdc0d
zaGQmuB30?66HKOG#xX?_<6eoCA=P?0@9C@UCRi9p*G>HWkhHc^!+y~YMKu}HvGH!F
z9Q~eJDHumR1Nyh%T2kesHnuV?Q5B2jwS3<u8L5a>2u-!8Q3Tk}VJ(0oMFLf*cgi8k
zKcVNLuy)P(R1*ZOciSb>%ghNW8J+DiqMDJ*X%KpBf0ug()M(z!iqPkBur!Cw_6vOM
zibQknRj~59&^GS%>mO#_=x?;X=sv^`eGMKcW$Dkdt;A#+i>M!B%ay4*rP`{HbPOGC
zrCtV}1EK|&PN_X*geQ2iO0}ojv&|rkN9N?bAYXcVW%0GTAwtGfefW6i;p?|ej31bS
zV5S)difL6vHYF>R*c$+H3rv)%HAUG|>Y2Hv+YIJ(|Bra_oL<_FII8rG(Kin4EX02y
zjc`r>_Sffnpa(!H%w+7rluW6Sx~4aH@_|5oENF!N!H>1pJgplkKi80v8?*z<#sF{;
zXzAVo=eDF4QVCMfHbN;m)i~t_B$*eY1`%5D$b{esr6=JmDE{bjil>;E#b%a#Cl{)7
z$4BBb^?UuA<+oJh->!OHvXXsJL(ILU7?))`u6o_{jbeY-%<5?2Hd=YF2`i^*e_9E@
zhW57=MpyGAsi0yXP>mp-qJ6oq(@sS6BdUp0QyWvt*;rT9<Ch!I3pkJ$3(&@+1`42%
zumWp9sk#$8JEW%&x<o<`#Gv{l<R>VK;A_WT5_qe03RUm%_jM>XruXjOk({0F)_ann
zOw9j=LZbk%87pru?w!tt0aB}nCf6uZeQokYSLd)@M!`Khl2H>GWI%jJP=%JHT)xLh
z=EAA6J>1zv38Pzj(IQT;B-s5I;uwXyfP<I*zi|K66`wV7=jEZu6Sr<Z)V-@Pv*G!x
z__gu9*B!fRSggI_-pNdA+cs16&$Rr0KRVh|yLx)GBSu7;<Os=^Qr!1|?+TJ5;-ngD
zLrn;VbggL8NU?#C5F<DW?JN5Q6aJApHCmzR@omWT0ZxOpY#{4#j5U{Rfj{J9Ub%s1
zJ^zkH^78mRM8%;{2$FbAH3LL#1EI7Z`E?y(`%N{Z20F*6^|CG1T&Tj#0wXlJz2MVh
zRO2f;WkOXG33Wrggcv`)181;0QFR)kZ=?(N-o1j@t4q9hd<tl_g<Ao~Kv?7TOTWrt
z({xZz8~nj;$26C;koMtA^t1UPBe6&?v6wKHG))|r-Qm6{2f!<t;Fic*0e3lGQylF?
za=|3kEl4BlC)qaH5mcHOS&<35tezArRGa4}<4*&DB_q*jfJ^%u_=2_u8w39|kotbS
z|4qi1a1-^oLA`ywVLe6*ibfI#&~bX>!#IxW@u5#`R(WqS+p7mjRVpT(6kTj(gd7oB
zUdG!ZH`(U0K`VHB?&S)q^Q<;_*gmnjZqQ>qjBYQ5DQi!lU+$c#z5x8%XdTZ(!tqhH
zY^e_hI%@Bg9HbWm;C7<hnr8{clcKPOoGY9AO}%wpk{D!#Po7!QLj~gFTBGsa%`dVQ
zJY9E)a|8v<S#DZ~RG+B~{n|Ye`|^@`>Gx?{o5?ukB6e9zjQ;<LJJ+R3J8gQ`GqDWf
zWnZ5Ambm)G#sJ21EY;=@;i6^7g6byMtqvsjzJ%)*nrXfITXP@fObmxFxnj%U705Q(
z&JF=Gx7u_7q%^b;J*cibue42w2^k{u#bRG4uhj_bd^_?;^nu1aHV*9^Sytw2a?Nej
zmg0I>U&bxPSh=&$b?>b1$g^qyLJIBa>-7TA(R+9;y6>j!#`>qI)qSK#u9Lg|C04qT
zBwgO6kZvAs@l)eeWQgB~jA$j9Vu(b(Z|jKwR-0S23%FoKe-U(>B4qoNe6OVs?)|_%
zN<Ea@n=_JThZF2?Llk3gIxe)WxE2~wUG(#d{f`gq{oucuN&YgSl$V8b#|eROqzS!0
z(+>nIdKhQZEP0rgF&QI~t(CrbHdYze0w?lpF8);FT;g>|PNurU@T1<ycLJWp)fmyZ
z#Zj#R@$BTC0JhE`x&QmQ#oViNxf`!yZQfPKDapyU5AN7u#X7AWmxnavZ_)Do9PU}f
zO|0v~O;+>os&rFl%-V50sBMgg(m)?<Xw^wlA!h}Or~%u!;S}*w9a4Ox8Y%!re}2DK
zPL)Vk6lrw4>E-oMXM2?pUx1x@1f2Wz$Tj=RK8hSmvMvR>6D03}R82||fF+$GHvuAn
z!Lsmad8$mMK%g~&+k?D=6fTf;6VStXP2d=zsUD@oqZ*9>v|uouP;%|OLba^{^8Qj8
zk0Iv?lp`jd4Ub8~>F+0SI_TD7VMl?+W@t_Xgdg_!fZ~XrbOv7cC`afhAt82L7FIx(
zgro6g8!86<@x%8BU4$GPh7lnypNU1RsODH5BBqCI8x!f+ew&nq{zyU#<a^5f$&<4)
z0+|AY9TW!+-Q7JmRsFM&{i=IoN$ZZg>?JWfc;t}ZGKCVc4=kh$qL4gt*mC?4d;etv
zvstLZN~3eLs=T2-vum5VUEFohFeWEWbTML2&(x2>kHJnv743DoVPvefDrq|kZMJ4!
zWhS6Yisn)gOU%w3?|@Y~Y$tD9I4B}rlq?guT_I~W#1ee-dqF+OA(Et#GT2sVdoY^a
zP&Tk&C8Ht4f$A$7{r!zsROgn<C#{5%$tVf?>hkj2<KZxPa6=VK1NB<ARv(xhoHrc%
z-g|BMkPOaJpf1Nbu&&Xwe^F+sZpgUsD)3^{ktL9znFJr+r&!1-_oT;(lT6g6Tq#c+
zWwquryp8^sUxswIh;+__v!6v?y-4I?Ivo5Ne%1T?FD(C|Thv}CoaUP`21Fw^`a`{G
z$(pU-PLY2N^Y?lR3*74iKk=8z))vn`X$6J0Gav8oQAN<&HZj1$l`Az4^2uMR0jsko
z*cG<|YFK`Y=Yae=bl~wc<b59)XV937)m}z1T@*ige%jM<J&(E{;?wEq!RBLC(II~6
z`8AnXa_#xZ;GhoHlyH^zUUzQ16Y>@8z%qkAQ^$A$J>icvvjTcP!kqYRGy$K=%kDK2
zd&tlTa#1Jo6n|2WOClScG5z4{lX6(ZS!4$dU9-c|Go}VpObFS&uhljDM}li-Oh-dd
z#KN7aLOMhFK%-$Z=!E>p^`^w3|1?bv@|dA2un5Ifq|8Hrz03h{z_7L-w~{dZ1yEug
zmDvp>iAT&$K#eG{=QznoXDD5;jIKD!q9h`CO3JTh{7BM)LYI0NmLC<lKuo_aX^S^T
zH*!vF7wR<d13UyY?Koif0DeV`5D^>KUx3B~XS)<^Ikbp&P#R+>$<RiF22_@m!v-8i
zK2TU&7+|EoO1T4d5S0Sp-|bK75fnu=yHy3Rqo^>tLidLXl@N3lm|Fe1ZflOy6$pgQ
zjst~^W!fSfjde#XCkSjB#mH&uja^DIsQcqcd8E1H^_K{Y!4D{TWY;k)B-rtrc>8Wx
z-|+1A2Mfi46F{K*Ksgw&0K`_*iWiWyz1!}DSPTbJ^%gVij1B6lme)gir^&S08^3Ad
zKRqoC#Cs{n0Z1@DEs-9+Ul=hO9vVk^k%1@8<BbLhb=cx-?EosjQghV?_%^;K$M5f>
zK**@YY65AhweIc{uU6*_Ev}kM+HWI>5M^<6*zT;SwE&FXu-3t34ND(t>!?bHqE>VQ
zA&f*yRUH$NDPaRz0e9>$oT}eEYWsD?Qp@(MPlTg*vha_95r^uXpL|<~;YWu2pdaF<
z64V4xZv>imlnT&vfd}GgSmvOH8|yK|e)>gddIvxwx3RW&FL^Py#t&8|_#3!(lPM1e
zq7_Z>O4+>k@Da5`KO`4sQjX4<{&>(dgYg1msmW@!y6k>rHsz&$T*NKz3;&c(r|CPt
z$~bEs)!H`yo#qEUVfM%SaBKe-{K<Tg_ZEIvMdhig5~RBVNrvHs+!kE$zmk9Gqr6?Z
z#sJ`rogLF{<ll7rl;&Rqj>X^KPr+`chLMvK)lD}2b`m;g_!xM<4XZvDAQ`uzP@}lN
zwlmnCF42!^Bzz3(NlorPwCQZ<k{yeriaklox@g-xx2cz#X$<9cMI9TjpS>_%BvJro
zLcdcmx^F%o^|y5vERj2A*C9K6K(zzqprs<;+Vk=DQ(-!xaHiE`5GHRV#XugGCfK*5
zFhS+vR<Ln~2+M%c{Gr=%P%6+t*7ZCqeg?ac16>bsbI1sS95by-7l`DP+$Y<=$O#2=
z{j%SOfIxh=KR2kD%3#%U67+VrADlDC4*ws#p9GagE}pKdYW;t+_8wr8oaMP_|CM8R
zb*#?QJsl_Pq@J0c&AmDA&T1EJ5RzI#XoUhANeBs9paEndFalX%L@;=cZMd=#_5wNt
zgJCWplN{E8VEfq2W19<p4q=ULY;4qf-|w&Lo}LY|<a4B*%2i$UhcAEc=SDY)6OA(@
z4-7?u#WAh-k&4v+$=F-_$=--s+gB+_16~9!mqk!W9G!%|!jJ+D$6{^gRQ#A62n!HX
zacR@*uG4bR*{umNDeMH32yY0cU$M4#f=*DDf`|_lq-4+uOEJLHddzMhl$9cawmXy&
z#IUUilHK{wzCL<~lnr4%fQ;K=LCl2kD@1GhWts%$1+;|jc#}Ej0lVS>Mo8E9pxKE^
zU-UKpP(uygc`c|Giz1?g{<&CGgBo%SaOmXPZ}8rC9f;tB9MbA_Nk>3Yq+ZuT@`QJ=
zbH4A*0}A&!GCsCkNPwFVi*p+C4+>;pc7hM93WO0%TyDgih1`*VzTiz<6@{;06IT-8
zrMy4J1vEKVX36r8ZW1V3ij1K62Qo0r-V0)EI>F&wFx>e?Z+j>o46}!d$)VV5p4x-T
z1Sz*~`%Nx`ykZE(w9I1HvX}tFxGM7l|7$Si$`Q%EZ4`_&zNy9LWqGd?%n#ww-|THN
zKmhM~>NT;UR3SWo>RP?+`ZbCnxI&D{(}r*!zi?VsCB_f52X82=OdGw;1^W(V*Ysln
zDBXKj`_c9M9{74U!F!WxaX_BCXhhC>hoQ}om!x~O*R|KnqKE_#RUR0SG^U{Tj$8^s
zCJ60b+q1RaiPGvFGV)aXG3p?;E>!}H42K0pDy0x_E*B)J(D|3X{{B+;sJ!-SJ`TQu
zT+L5`#<;M}?G9W`u?I-~>h--$ssKo1brw1yp({>uFmg;pPR4=2N}!^M*s3ZQk)JVG
znAeaapci#XKd9-=s{=te#yikpioEx3E6IeyJ&)c~U_#QuxG-(wvFo?qzDu!9fCaCm
zO<!EQn^@C!%e~<c4$^SjLq8~9g~zYoxpO_9eig=sAYA*<hL>-~I(y@lsa5{ReXZ%w
z@z1mKXg4q8&yyY?)~gTz`acp1FcNbw%??mEQ1vFRIgbgrrNQMg$W>bejE_@$^<l;1
z#b6-Hu)g=y`}!C)qSBF5AXPKA8#W@$j3a(32%QtC$)Eb=Ge=&RiN(e;WzMR>OUjwC
zSS<6pBWF(ZvGVr<8I<Ck%y81)szb8XR8>Q$;zi%K5%DO<xvpIKZ4vhUJfH1SFnASa
zcs~5$8-%&fqk#bOztTrMcG(8_W|tI#1`;K-b&nG6yTX^S+n=W?w)H3_DC8PC>G55!
zZ&k>MbAc9NlXAo`XvWZxpYL-?S4HR+QAd(0i1_g|H}}d7=<CwId)bd(2B%wFn!|jQ
zdrIvqwjR^C(*3#T`TF^_H9YhQ?md0%3Jr;mUqcHigA_dNl6oT-f4f>$KrLv>gFURN
zIP#fGzY3w*Og%-@7ZSzzyVuklQ59Y5D><UyKmyY2Y)wHX4}7}>6jDHZX`5sGjKgDp
zByc^aVbB0c&nCAg^zLp<!R7ZGy_kc`pTGG2Mw=w}7A+8HaLJbEe!t>rL_zU$S6D1R
z|7jm90EJ>GSDf-f{BQQ7V!Gel@Uug%xPMWb{Fm3adtZ9F7iWRzKi&7ym*1r1z3ziA
ze+7-j)tnf@Ty6FDG=~fF>VTl{dzHVCypLoj%v--9;NcGXB{QhAXP4-`9S<RNB~!tM
zLr1>)XYYh91curNuAXZnsTo@$UTe{g;tB#k0hlG0{0Iv?`HBVd5G}w7-k$R|U*Xx$
zxlfMzX*b?=^)2|2T*Zs_hG*Z4dSjM!${ED9fw!&>=h<bvFSiWa(X;$rY42a~zB83i
z5W-&}mc2QgLSaeot<NK7uacQSwCek#c6Xb#pM1rKDl;6MFctny;pzt-xEh~`JG$>(
zgnTF>VjGsRc+*w8)v#*_(43hD_CKU>fHJ!~ca%~?A1OJBkw&{=3v4MQgns+CzU+)R
zh21+!%qe|jIIP+@hcYzI(>VO)-}-G_LVfAw6bE2`i$dDp2pQ`b=I(8QdmxKKqJYqW
zc}K>aE{^S`$1ci%!u8-beX%+HPzP7q?jm=x56GDj6-D5jpwQcTWp8Ws*wfUWoki+`
zk$CvdMK7GDeYsWVGX%d@VZnN$yhSxHyTZ6%qGw_7*~dP$K%f$r{$u1fsLc9pMsa%U
z5T{0w#CM>*-bfhdNEL<s(i<l|pBgv5(_rcrqM|@Px<>AKYc6)bdHXO^CeWN+TchHx
zZsPVt!v)~~pi=4m(Aul%61rQM@Um^Zc)Rm_fbn4_P-tG~tD0PuVQ*ZsSX|w2^iDPi
z>H`kkwU_c;z~90Lj_1wO<B`RNO}~g1-(J^y`pbJ;*YvjDz52*SL@KUcvbsfMmB(Hn
zcXb&NDS7z)b_R~pC<SxDXX0zY?63rh!4Vm@d&CvZB2=h%40hkui$%!HbP4%>r~LjP
z>NL*SXQ`rnofo(7{Czoj*QqBLPqRN68pBa1AJ1X+NiFIquRcY~dl|c$9DHFrtG$|;
zemVPWx4!**l+43uv|{GOB-Oi5jn^=6x1i#^+4(0h+PBbO&;TNqt-po7v0rx$VSLT3
z>O4JB1_efV$PkHj+~q~qR5Dv9P+ZZMcRU@(lUbiCmBNE@MO4D^cvzNciJgHVlS{O|
z8so{PzY8$Zgb{^n#fG&s1(n<sP~Q>|(?KR=KFsCUHSg%+4g2-7#O%x(t>gLL6+TK_
z4TnotNpZcm{!`HsN?fnd?W%pt72bXu@^vC9i`#zaI{!NktTA+a`gy<SlejikjC8e*
z?il+D`#JQA2z;DlnB6y!j}h_`IRz-T8AcE+5EM^7H$OtHS|SOn3)AR&A1y#3^E!rG
zL;McnE@vF}<Wy+rN`n2X8jc(@L|0TJRyZq(nltcWcYK<gal)n+KkkN?cwfD{R5GF&
z2d_<?2#a^GFCD|I0V4?=M|I?E%6|%tMT&Al(2rTJgJQCdF32JCIOCSlGh?G-MJQz-
z;yucHT?@htdf9IOf{y=uiPeZ%It3T39j7j3=XGr?7u!8SwV-xT4jCqB!|P(!Z}yyP
z9wn0B`3b6hsz;lCN2-0w(sO%fRnt^w_pbTf6#8e=>hH>)$nUjn*I(5$Ey5iNnM3Zq
z2vJ7=T^xLM&zM+>TFJ<-_Z{K(L=^`?NLF9cX&&|8b9U8=m>-H1W2?K|!WJps=e_#c
zcYhIfsms3e741?WYL|P<a8KX5)H3xu-50#5UkQ~IzR7OCu4!MIwctJ6H1A%nQ7x~K
zp`~N$Agj)fRZjCE{N>BO-i)TBmLW!&u30f7Ni`&+>4*B>YnArvkW{t>4w5alSFH`$
ziV!Uk#gXV14<A{re#8s>ajPvRY+v9qE)FAV%!i$b6Mp3iNu33ff+>+=f_T|65%QV%
z2Yh)9kUMk?K}f8<44Cy;cA~uq(E;EmxPFC#emT3-G?D=+n%7$+;d_CfKs@~8tgyly
zIu1_+AJ3l`NR}`WabNP=n-Xqd@|l@dn-H4`yofX?ZqJX`W)f~?ma{b~h!_6BE&K0A
z?A+aNyH5?i1tk(Ct1}uZrkB%2Hm<-+W5{o1%loIdJfbL%Y?*%BL?ZQ%Tao{$O8=op
z9t+niKW%-YQvZa2sM-HeEJK)M1q=huYrF3i#W)xNzon7Td$TS#dJ%7U$6zWonEJaH
z^q$w@%GBV#7xcDNqxExeY?7TGFAtj_Sw2xNYzqqzUxc{qqf>d=9M>IKJTQ3oI4Z5m
zP4@Pg%m){5jGnN70c*a(ELxR#<^yy=Q)Z4eemC1WbAYahoiOQ&TTquT4so1v4VRHo
zOIY+iqJI=&%AU9kO*RDS8Q!{X^*_vEZlDAk?YBg(Y#qN7=s$Nx4E7QL0Npvhb(azO
z+7oBaJaLA>b*4@yF>RC6aJ5x+W+~(2ip6xc*%<jXE$ld9?bk+(dz>X)eddW-*=8D`
z7sfT*S(%2Wl!7Tz1zZK!fx3Q5iaF@b=x!f&*Zo4n$1fEQJRj6r+D|kBk&ay&(aquY
z+#+z4KxXYlF2MP_dOXhE9e@1GCt>;+q_kUMaD~S%Jks0u3G5z%6RJi~Mh=rxP$J(f
z6c*MTs3L=@8=LxN=;P@=oMW&ZZhdI5XfZkqZUFW`Vc8J%x{m)@wm_4*vqVc49=H$~
zVA>(mJOn{c-c8ak7XIudvG$tIvuvZK9Rwbx_E$X_7VQk%U2jZ`Kr&TJJpBnS@UBV#
z^Q5mxk(nQ6NnbT+u%F)a<R9vY5eUn?P`k5ZHio)>2$Do8zu4>!hrin!U-ljV6O|w5
zFSF@}c&4CQmRiWfZ`i~S_1+<XaT%frT__p77J!f&@7W^&lnS}HtB<1?0atcsXDHpU
z1A2zEj5ge+naW(9@3rVqC4+6oH`|<2B8#p*SK#_LU*P(veNnzKVd|6jjBt{ne@ADV
z;0O&wcEc=NYXn&hLKWqBqkgdh^U2y250Yl7tDx-6`jRauVyXIu)m&pWgn*6^bYY%g
z9HErsTj}LGT%lvU<yNTqHu7BK-=cJ6=JZmH)!}@8_!d9I_-14rGv?tIAbouiK=o||
z58z*$XBz(!vXQ&}j9LVkOQ?iO^ah_)^YgJNcHbp{4F)2O!$*$4tSE;*DqqV7Fvj_{
z@<y3Wmaa{dzkK5di!VDK!v3{1188(#D}OY^q+0%X{gXGMJN+?5v@J_9cVqzoZ9@_*
zr9zPQ$A2ukMOuwpeDjlwBLE}qd_VLq0|tArFZo@eYXwy^Om=55xPEbcupVSHBa2T4
zQ}VT;cgfrUVH)oWu_R)-bY(lv(^W{v0iEm8)(A%kKo$Uu4~S?WQp#aIU^2%RzL#9M
zv6@SicPq-#le~*C2D~sy!CToKH|hFm1knv{0aAyc3R^}yV|R_=r`83(bXVtFx0#L*
zW&hw^bJLqf=_*Cu@`pF!meV@!0t|?Nn<8`*?y2W-Q&e!w+YnYnSG@d@QMyJ^wyd@r
z)wc>kO6=y|_vQk}fF)Wmfb>OgO%oH5Yn5uv!#($4)^oP4)ig1C^MtK!)5V)^9LeVF
zdUd3;0&Im|iv3Sa`{k&(V+z`i>~CtO2+*PBjG4<%B6RgIh1yW88EC_sfyo&n+pVu~
zuD%aAhu5ZPUD~2(8-(joBp_gxF$MZxYTF^id(;6{w)d9zqloS{2}vt|{j!mfv1G~}
z?fgy9c|&OR-EKRkMBq{t%F{Qh5veGMS4|<-W3pCGyi@hY*I%+X!H!9IOH`wcYdSu^
ztaX!Jy`XSn|0pd&88`_Q<&bFvme{((JgW2XVIH@6co8{%Ad`T#s?SZ7k9$Wu&vJs%
z_OJ2pSe)l%EdYRndU;kp?j8PE3v+?`a8<|1pbuvWt$<4)y}TO8NWNW;JUn=*wZ{K0
zTSJUxzfS<yfzfSiVpfmcG=^n!+b1rqz`dTsbo_yOk@X+)EZEYS?ROQQp?7~a8hw`5
z&lK<4er8WsN%Bi`f0bMH9~b+}bz^$@aRubNB0NUIV!#OPa?q~!1XmpebRu>m9_x}m
z4+W!yIKZhjY7`(vco0E@^X#uFQ6!b_cATyz<wcPEO)o^?okVNWAK`_=3utH9?|t0U
z9Jo2f<jhcvMz^95Isa!$-jW1p1Umo%N(NFfysbonVoiw7-Nr@<xRP+M2?-j;qDA}_
zI5YX}M6h#JyM2(i>bdq0_<G`r`RzZn!*?Q(2KlM<2eyOj!*6eQ&JtCs|3$lf-roQ-
zyYMp%*hSz&BRiCF28P(yAfn!2>8Um`d%;dIcd8h|u;b8X9x-I3wC9nPg)BM1J!}z#
zJ5>YXZ*XX^ZtN(HxGDM2BZeJy<Qvsga03#*BAVUIZm34>;RE~Q(KsTe1k+5+8oM?#
z67S&%N3u^+%BQk(o8P48gFg+%wVEU<8C$P}<x(Se%br<qkz!bjxMotWQG)gASf(1w
zwf-0w#8r4xpN22AR0aAJ7ylKC;Gu(;nn)HdQBb3$pYdYxB`nvywSl;p%UMTuU!<K5
zy@v|N4`VU=G=gH*8bio7?A7Rvp(@TO<cVo`<2I4S-=|+>FoR}727f>WMI$`e7!uda
zbaabAR!$kE%EV?#1;PlB&uS$gq18mH33rxe4cIb>*u>&jn|erp?hC<alj*4A`e#<8
z^ZUkIjW3$FM&Dqx!;d~~zUx!Qnegtrqqm~{Ifwu{p-^BS?EJof2^_UWwjBvjp~-gp
zLSSKGsoh>$c${ye=?Rkp<9i$XO>pZ`8aY%AiduLK;Oo51cfv)6n25qqRSL0yu^VGa
znA4O{EqCnu$8xohqB*s#JF_FMJCfbGwbuFfXgXa?1G9fmYA~IGO*B;5xHWb3Xlm=m
z3b39-<xFjEu9hi><U4b2DthN;Ro#4NG@Za0{+A2ig5L1|z;i-%T`^P%#Rj951}(+`
zwuro9D}j~EzFkoUw`39Ew>LkVD(tQ{oU9$G#)oQqi}A74LETXYes1lEAW~+_VA`!m
z)sQ|tus)rf&aDUJPhvbBDsIl0o=oQFCWZMdpX3tRKC+=w1_YP?;4SpxjxVZe+p7oE
zwbOU?noHu9{rgv-6}Rl@KXZb#QlInEVdv@t9wg%X`ElTUfD#?z%X|8k4E+b9;i2f-
zbM+OXAb7}y00&3}>LOj-;LCgXlAg0#smGJU1IQ5&NfU5^7a@A$ZkONsMs?D#iN_Mm
z0i@wXqX5)IdRfA)nyc@y0C&H0U2X(eEb*|_YPDEku3n(GDb(k}7ONw7WOM^c3FHdd
z;j&?cX{=EWe-83@mSU-4e&%KDD2&!8PsHB^2unh9TnrDO=h<^nJ9I0u9D|zr#y0}v
zIVPrV4cXCmY}4!dw$xR3r_4s;=BR`yoNDmQ6QP6zu=zyji8H~f7=JhtdH9!)I+A;)
z^F?d+Ze&Dyv}T!OXOKN%BOzCL)Dm(;&->No>>NOYtP73)9B3TC+(w(ArE1;L0ga(F
z;}x58IFI*C{@j*<%;)o~Shr^<JmUx}@N!jL2KOPq_<?UDqsh^3;mh;$9st<<8XD=v
z#`m~lHx|9iWx5>EV}o8a`3~-ve<L4AzUt^jo}cG@_$_>lQ2P+STjq1YfCNu?0~CWw
zxDPO=G@)p8Azw;G!Ws~f+3E2;G)AIpU?-kOf9&JB{^tjnp4K0wfzkO3R51R%{|Uaw
z6{1^t1pXWiog~E6KWCwXy8h4n6p(X1!wQ{6VtX9#xN{AU8~E*3Yq8a$_k>Q%bK!4+
z=kho*Nl>`}Vm2rPB|!T$gD4f4A36(bxu?|CaFG7_1e%<9yfP(^3B}Ipy3sAE`#DwL
zX*%=u$(y1HZ7_P1szmO}xW<H$$~n1|F~Oc9lI?7$R$s;cZSZ=v5)Fl&a45R}qIIP+
z$>;i;RryB8T%R)%5`bEy1e5G}0b!$nJ}dA+RN(*d%}9_68F+tfKG(VavjU#K1m1Hi
zDCU3X3oB?K2#ScR>r;6lx8zVk<Z?$zkeDfX0{4sf-o>O5bkOnqQ!v=bTh`rnf<|)r
zdB3-y+sZ%CSn!&a#!|bzcK^Gwt+z2IgbP2r@M+;qpl?aCcde<%0QLp&6%l5-%5+mE
zfoN@Eh0lOPtW%uX(IV^ok0=XIZQplhP5Fdh-qK1WrmvsfS5?e#z53_tZdo%g$!^^j
zXZ(EeltAU-$OIIHgV0`IV!fi_`lDAJk{R;ahu$!x0?fsq!Os^_xwvJWV#<iS6K!K1
z+J#;CSLC{Woqd((1M>hn;;o*KkGxW}M;<=z*oJkGD>7)Yaf%oNA7GyiRq~34K+~|H
zTDmYOC9)W{q7x4z#8gxA;O$d`h0;wB5_LOgu!*6;Dc0UHS>JJN{UEB@80s(Ck%;|E
zhHaaJ>yPcIPi-D-XnM3IiE>Z_2``yigSRJP8h!~}IRe`V^uZ{v2aBji)unJg()*hD
zi^1uHrt_mpR=HQxRqugOaNWauYWp$+#rBA8j3qOr4O;>Db#q3Oax_&vh`1l_+q8`}
zMMs(2D7vRNn+LC#!cScD7o%_3tLb9p+Wq;?yZ9jGi?1X;hIU+~kK<^`COF7eR72pl
zq&~9|sRUi}f?Af`%0>hdRp^P_P#ww!IB#Pn3@TZ~pU-JL#slRMvytXsLkLj4d5%@J
z>?2mK*=>VJLe|3{L56e7JXU0ey6olN!#Gi)`wE5j>P_^BE{~Quk1ms*!);_uqylfG
z)E4O8R5}2q4JfM8S8;$RlS_8m$(*`R44a!2j(4VP(lAQCz&VbP8X8KmvK4fk`W&#(
zfZk?l=^oGFasfi_mLY>e@`D|&FUg7EBDoNaqhy7Mix8W?ja;X5!1Jk3w`2$U%8H^p
za%=i-^<%1!;d8HbqWLiy1_1SA%@fwWY-xTTIJrN^9C#SNLm1Z^`PYH#^VVLq1wvfs
zsuEw&C)4X7X%ijVb?QWsOu>Eu1!LZ_K!d5nO=t^mK_1g}lcu5Gtw1eP?p6(R@@mgO
zwzBe&5eJED)8$wc;>Hb8{dFdppkk)^Iz74!QC$yqUIUs18us%GpJ!jfdk%WMmm*9k
z<dsx8@G@Ev{2u*}Q&`sMWcN^GfD}4*eJz#HRLv@nY;!O&pu}w(DO)&_NY#?V<y5LX
zJP>r9Xb29EDBl3^6Wgkm2F6E5_DpOrG|kvBv1epte4wOCCi(Hrimk{j7%4|-9f~?`
zK)>(<wCP{qT@6sb5m+KNBlh4RcruT2<8>y;72JeZm~tP9^-`=slM*gL{bmsgPb5dd
z#|&1f3=<|fN<QJM1k{4Uhjqmnmw%<2sA1AW5hMVv71D1o!u~$rZ02(($`6*!czw|5
z?Vad+NUb36(oBqsls-0~stNPSLL`j;ro0v7jQF2$+!W-BmQd9JTqubqJsVRk9c>fn
z#<X$u)l7;<y4yzQ2Np}9Olj#|u^6-LlJN-AN>ruuLB2Y`8T3{h)}wLut0miFv6zmo
zB}@(<!{-RbA0QIBvkF~WtxZG0Ee-}bK8Hs#2w{;&jqz#cqWBH;#w{``Bl%-iIH9W1
z#ArTQ(-c8b;oSU@41^bnK31zG^P`EVcY%|O%ia|%f?P~sMJV3+uZxaol;c`{H0!c3
zCDsXmATy8<<z`3oTD)xZF0fsQfcy&h(IkiY7kK^!@-Yz>Y!YK25Fnut6G!Dj1$x)}
z2p6?1yw9b<%#Xnm+=eJHH@`)()!h%8p@{V;+oYiqllkB-*-(_7>``9p_n#!~rzrnk
zQdr3R4!l#EhWbw5K}@kaNEv%S)ubWc9^ArvR48K#oPit6(X`aQaJY~qj6>(}MPp)W
z64+qmcYx%NNk#0?v*92h4=4G==j1Md+JeJ*w+f)N{4h&o>RQGH8jPR}vPUurHk_AL
zwd&@Ft7$NHAzc;Rj8<pMs1osLewbgNs(L*&=7u9FKq9H>YCO|9$2a-&hV$(HOeGVq
zrV&a|PesCTL~&gO17?LSqD^NI>wF3$hPNL8D17!(>}_!#vsKt45`P(B6}5;~2M<!z
z4LAr>pqHkbD00Ij-2Fh&5jQaQ$p~lwkq4As<y69rSTP0elkno;dMnoX%NPs9<Wz7m
zm|8E`upz7BV360=Vuwi@)m;ZhCR4G0pcZ2j$q0%xdVDBq&qk6Hv7(xt3S}ZjwJ?>Q
znzF;;-vutaB87@Fj1qW2HsZKClJ5k@WqNcXzL#_}^dND{HPA7j#`Jj}bM&_QH8Vte
zt%BhDH6}cKnZ^`bp%)|N6|cvM@FHIVfQrYn!A?<!-c?8S0lp$f_bN=)1QBi@jOtOY
zn)P3+)dMnY*q;#|hE07qaC6{+z@vfpLMH(=Q+>+?hdu5YFt)%i!0i}h<ACE6sKz|^
zlWfa$WeuJTE{g&2h{Fd!w*elM|34W&@c)2-MWssi8gS#hNRWb6fbmgr0(3V-IyZq#
zmxPj+U>(KDw_CDMl1%}r9EXvr34oa?NmULZvV>XEh@x)BIiU0w%w&aq-<CiOf=DZh
z4cHLr{vAkA_COrdJSYgVY-u^&h!kYS3aMHs9Cm&o9E=AM7$rJD{(G%z8yffuBmfIk
z2}VIN$>ItV^~5hA@6uHYPv4#$LO!o1qV}OcS2OAF$DC;HlJ{Bru5+q55>(6Y9}ioS
z2;Z-RQcbR%-$AdaDRD)emgPuzEN=moctlk!WTwiD$wf&IqVVTT-ikzT5|DzaB4ir?
z#i;1bkX|*EnpM@fTog=gWbBBRL_WF#hJnNdx|Cc!0gAEkbgi;)?L%}8ABr>;*P4OJ
zVn9%Q-c0Ob*g+vyH?msKFige8F{VKM$P$bJmWfZO#ppNfoOVa&L2d)S|4{WeK6L2R
zGkk~aEAyZtzBL%Zyr4A?L=phs=$e7sUDL4d^A(5|hG50IrDv7w%E^r`3n5zK(dQ~;
zp-U>6LKE;xnbOST!cbQ;jKgm~0yO~(N)}H5*hzuot;z6`kcpOQDUe}fAT>3ZtMOW=
zaFS*!sC62%QOarn8Z($|0e_u;kW_Vpg(vJp%`K+M8_87$1gD-CiE5D*(!<*Q#W7JF
z%cpoHREkPPCDbf3+=Q_CYHc`O@S{+?soIuJL}==_$?7rScX9qe7#-9mHIn{(H(b|c
zNA^W1zL+_lac47!b8iwz#|m(CSG?6PD9TGj198eIqSrRWZ>^re1wT}j!=fb5M(ue3
zZ_Xk)9b-qOv4b3dCHyL7Y*6*|lYutgfGmPwJS8lMKh1a&wo6r5>C8k)MY5YaB`07S
z9-Jhex)J!hn9_dQujgV&Od(a29})cH-7)7CcCJMJEK<o-3I!~@P55tXnpR_-m5_F>
z%BUS#^_&(ui@wl<_wi+Cnai%!J$evOs@&5{;2^7y!RBmbTc{A)rfVSz0B(h}8~KHA
z?z?x*gSvBRna8S9+&NX7*@d=P#nt70wk8a|tA~`DZ@=k|-;I6%Z!-#PaPD<Uh}a5T
z*kD;3II2#$Oc*;Tl;~}k-U%e(>tM@)bX8Y>9J5h2kbR+p!trb=mTh$we{Z8{;vZmj
z=q?`j;%(4T`~y(0Lm?L!)@D2$Vhf$K-00W&Uo3Eez76%nF8n@^w+Z6g5M>bUjxIjh
zYTls3K!ckYh9+9jDC|36S=K+Ip5{MdWtxEte1)Bj|HDdJzmAW<QS5H`b=qa4N>;g5
z5N@RvD4&v(vAR{xDd~N(yzjl<VLHqA@qUm$FMNWx{YjbunEb?WP;3%Y7uGY%wI{C{
zI1KIMG@0HpG~ol#xX{_8h-;q<<1$YrgnA@AC><W(G*G`9+(FQp_|#J(LsX?8TwNd7
zG=5kr?qYyZkxUe}RdYi{<jA89)#6Z2wQ)=`1&i(45DJYoZAY6NIJp6~FnZF$0zJc)
z*oKn>lbT~U$3me8?hqnU2q4|EP|a>i$l8aA)_ho#6PvPCcmoWaj0kslaW8zn7kTu4
zHzv*x=zti}wR-iWD2y^}(;%Y{^JJwNE(cb6^^anuB@!Zd2@={sWJ(>OFJ%t)4+4b2
z<dB|l<gUrido<{&+9FTG!S~{$`!*Lj{=bU6!CMcs?mDusS%6T1e|#KaQ9wVnVNsgJ
z457+wpi1ZsZw7cIn-qb*TECt|L<|W^?EsT!YH@&iZ1uzagjXXG^BcO|`Jo-%ZH6$f
zMe!|jbM#hAw3u5T3Ql#FC)mFx409w^PO$=*V?-3cX+-UDONdz41G0;yCV1EJ#e|yL
zwpH75tuf*_Tii%0#mCn&Z*z=&NUN)@$z^WOh=BJb2QE=LZcFGb*%#BL;e6-u{BS9q
z8_ow4fEOx`hYYzsrzn|9BA6dOBGohb;o*FyE+tC&;b<;X884>d!dyKRu4Ho2;e5$&
zKiIJq#D=J_V}sg5jptekEE-@~V*)W~i1|<w`V6154IavJfc>YLh=0?FXo7N^6pcis
zdFp81?aTa%H$*Ci6VpFQQJ9^d_@{6lb~eN^u)hP3K};a`VUZx$8()wHG1bu}=s$V`
zK7r62dALQI+^dBN$G)wIVgY419_3@~QCQRp0PKA9(Z0hFp~c>by8)*>2VQgJ{nU@|
zKLQRk2Sx4h;lAT2@FA|A@qJ#4c+U{5Y=k?o2f36l3)~fW2xD!n+}()w1%-KO7OMeb
zfaf3yfcuF4Z=EC2Xs+IA(Gq;Wg*nAVAijwRuX$B3jur8bZ(ec$g8kZC*fO5BOiyEY
zW`}A(;S$(h-bsrX?cT-b!JJzxzWpQ??#U}0d(CC;rSWEPzscJ6JP~*~a$jB_csp-V
z8fIPY)u2{eZ9`=Kyudx*#<=D=tF2GZd0~6h!pIQ{Pz+lOjq9~+uSL5Xi``Rn9rZ^g
z)9yBIui1MWy>_SeZjn%dJI)rUi3`-?)Vgl3oxQEz**BwJ8ud^iQ<>*i)0u3N?n}~r
zy{%C1EVa9eSkuq&8aN94@UxJu$QuN22y`!C0Z{5cxvV`qH$i|A<~lis)L{sE>O>4i
zMII0fe`f+#stQF#1O<;iG-tsJXSsz9kiw`?-&9~rAT5kcSa^s#oA?v05Mja0wbJgY
zomR!tsr^bpibT%bTP~-aLJGAkM0V4u*9)jY=VS#I8HGRo*DOatg3+-XwjG&8%tS8!
zzDK<iVziLW9NTS-y>U?dTc{uYO)Nb6^$|1X<lS}2DYH~y<(<`!$7{xVMFRGK97kN<
zhylO77zKc_u7;EW;K16?4DBtN+uB1PkLShIN4yhqIHN?*g+^;xces8;kxk?wiU{uj
z%u>H^lp>0@P(&i~6h+voaTOF&7*b$CX&{NEyXXo6{DL^ba(Ku~*J9UQvqfl$F|!pO
zi0Zpvx?9gzTG=xF<JAgVPA>XRKE1t3?k!osO2)#rRE<|M%INy_qxw{#YD^B$UxDlJ
zF`THb@T+g?TVhOjHhP+i<hy(m=HE)-`=G{MQt!o#lz1)<1aD8C;id(?AoB?qbt)8$
z!AUc*R0To~m(*Z`?wVh!H9r^(1uwb}nnjcv_d}w9M7MnsE_bJdptpA$2^H=@5hx4v
z|MG)9-&{CYn@Cr8B(^7Z9Nduz(=>7b-x{^=f_`~yKUI5pxN($C5Fdd(5Gx+SEg4?q
z9-!*HeHlnwxcB)kc!+o25|3ATzUyA#gI2iG7t1<>`TXEup6`L+x9upfnh`nCZgp0O
znSl(vn76#-*XQ}5na1-GXLHGuB>9Cmi1#FK{&+S5@-FNk3s!H;kyy!fyfqmYR~~xt
zMy=~j?<#X%$4&{`U%Fk`$(K{STOoaT-Fn9ab?XNXeZ#XCZ1VbrH=rqxZQniyBn5xX
z54KQ%j9T?kwCXZ!2g|%gC@3~tC)x^|2b>XPj}yS(sO}-Y2pUUQlxkiqCJ_D^H#$=C
z1z7~3LNuURtnwu?OCgp7p<5&aejpNgCl3O6lz2p^P0O!qx-bh!u{6xo*wD4GC2G52
zC;A+hI4z5WzYq{FAx@v2nQ?erz#rr86}p>&YoK6~_C7uu-v`{dc-(X_Hg&Zu0oPAa
zV1*ZmS0g`tncEpx`=~dqdvlqz04}3~JtN=LCE#wxF-zM)qhJKv<P}+0*?;@~%C6CL
zJ_3ZfWq#t_bmHB7bK}gmBS*H)Y&<)dPp*$y#kzyIXiqocb*B=%+EkzdpUq_|NqK3o
zy<FEGhF6c%qd|LBrj~(K)?Y!Ya}EY3-qjP-0=>;2cK)7fN}ax>X4I=OsTSzch5oxb
zU-fE8kqyk#+exM-|L68qbVj$&_R1q;2GwFeO@-NrC?0|hfKo=0+0d~(151NFbN_Kv
z+Bj!a4a+b#8Lj46=iXd&J{Mhz=H{b0{gaDtQlp)}iRP9O7l$j4-@n~5W)0(@v0T9U
ziD)htoybKeS-VhJNhXJ@x#;8gVj8}vMeM&bMcMCyE$rIBD+2dIDtj#Op1=nKAH77{
z<z_C7PQ2`@qPV)%Z*Ru*g}4PWj?4SEd0SlO_=~*;a`$DQPr&t2`?+PByl^LACbYa|
z(0JSkc9yKVb<w}Yi}ta5nXA?uqS6zce<xPU@N@GtD(1cAUK-p_{RRJ#+xwQ!^lf{`
zk6&`6^Mk%aoV<`-H2~XK43e7{(*%nc1U48QV6(;ylnFbFL2a6uMv)+1vy(iAy%`V`
z;6#JLf;)|CRiZo)@%$+>L-i<cooj46s3FBOr>tj5HwSdT@RXt#m<(?jQbjqy7Fsa`
zNFV={vi1yH0$f3~p^2gdjdA_{tDg}n$#4pYa4L|u@C-}T1)iM}VUetJ*)x33uL#@m
ztr4JroWa*~>!0_nvs^!(61}m+k+%i@&D@U6znXtE9}v8_0RLoCX8AYclVK)=yPh{5
zO4e~`h8k($c=@Y0HAcoXArY)T@bt|vF+@`2ep!dghazfFz@LZEx-dT;39bd@W~YM*
z=#yh3jZLjvl9Axc9%JkGvh5FFmr9{E+<~FS_UovKhXbr_4RQYh@<ky{NTOt_GK{(2
znNU(*1J3={0U$7@QnRDNT}KQfGCzepDbIG`$L6it)-R>XJ+X??a1a&2!zueVeWZ>R
zI=Rw!5<lVVX$-Xg1SrAFKnv~!HFzx$3f@e5n$NFGH3(%q02Q%`*!1MR8Tg}Budp<^
zWl%K_6MD7*S9LGz1Dl@A7l#YmPx~OLuSUDj9aLNl`z@B<0XnEAx`Hx2Nl{U44@>?F
z3HD>vFx0SC26`mGN`taFz7gnSdDxpajstvHN=UL@*22B3aNtT8eMt)0Bl%O6{D>X8
zJ+8Dw{h$(`)WseA_!N)S*wA;@YSHQM{5OB?(pP#2zc?9J_;2Pb_|b#>$KJ#b-^Zgt
z9$!7VSE93iJP_5NB3tn~q7l8!R!^QUA!V&=kEGd9C95h1ji)2K6sfNw)&}&V=}Y8W
zWQ4CsUa{%KSt4v)Ksf8Kv9o(R{->Tm@~12pfn?N<IKgb}FdSvspsQ(aFpJH@v25`B
zobd9+JSd2_cX#N?Z;&+djVFH`Od7jC{psCCGH4s4u`FV@;<{<-acpE`qbA8BzKlhY
z$K6p+@9w3Qkb$VD)051^&aKKyORcu9F4M1K!CE|g)RTc)PxW4g%R9Z_pjb}7-7fx(
z-Vb>W5J+hKV#nIwJ!vQ{L&0yf=+}w+C`Jo4#V&b=-ud38WF!BN3!mjS=olh_3E7Y6
z83MdO?>0lR=Ec0!ZWuM<LGWgr6jC=|L<t9j0^X97La$sn(SJ_<aqSHI=+>(?Y9(jh
z`D7>@XDcw-zvkiVu6y{pvys%rgbvgXPC)<@uLHuaEUY1mEbW}xadbWKbT?VCU;SFB
zRtvoaPr2^lCoWTAfZK2_2i$~c9*V09eZ-Ku8$KaF#`fi)KCkIf9r&&hTM7B7f&US8
z?)N(o`0;-!&j0UfnX94|wz{&)W!L;5EoyN{G5nd3PyA=2mInH7o<hM2^W3uIZ}Xvy
zZl!-gh!?AW=yd%1_X$4Ky&z7E!bMeIT5Pu$m*)8cy={JYfdijli5qa^+T{X%9Ma}l
z?yvi#H(2`GXA;qMd(b}M?dVp}V#oj#tLuNWFL&|p@851rL1)^^#su<#!))W5e%W)P
ze)HVN=5E$SE#68Nk_OW0yUSL*^Uo6#mL-R$yp>m0@G%8gZm-<5>6N;z!gAsylg=ZC
z@jJBs9m9Bp*5?)r_^^1HFE{y7Z9*>xdJ6GSo+TLEc^pXfVA14cA(vlM9mI;msq+P|
zr^higLIN_gn`%w1xvHyD4f7g1Z_Cz=2lSwQJKQLmvU8`R!E<uEAXtWW;6^yoUpXwt
ztm_7)v^02~6_ba@%i}Y#b&j(xHZxwH7K%mTUs*<(Ic6lq<XxJno;szP+Fi-GacoA(
zFy|IKtZur^wr|^{hV5HkTTf|Ixke*5rKRfD?C>zs8;M6d7`qeTpTCH&qKFyTQIOY!
z@FjFjgA!J`i4Asr67tEi&ow8Q;~<%!`{+CQg3?O{SaiBEITer6O}vx2JIuR{nhBG?
z=>xh@&r{YHt$7rvt2Ppo7#Bja_{dR3J@n8(eIx3*jt}Wu%T%vPWX1+n8CpLgWDtq~
zSAT3+Rfl5?feCpFEeCi-1WNe_`4t(VGNTD*6hST<3}8X)vQ*xx4~;W<V|(vO>BO#$
z(U>e7#?Z+1NkmBj@-mg)Ga_rMTxqV`sc(xQU;sZ<)IrenBA{1UoE1=?WF^i}yLR<B
zy-Z}AI#aRiP^kbkP^3xh$s_@$i5iZn_V7?Rokn;frxU)8m=7$Wy)UOBhGS}xE7e7j
zTQlP^YB-K<hc=(|8+{X-BzSQWt7&5JWOIspf?=-)4SjM7FkT3thx@OIjzq7jwdujQ
zTEqAxZy<D2T7cA&TM(6x(F;793infQ(N8Mu6KmDa9iE!Wa?e#n4KlaB`S4~PxZ3!9
zu_DJs;BaRo2SIc}!$FpnfV3=0hrcO;dcZ7*9z@Y;#Iey44OUcCTM%%WgUjuVnnCP{
z7?*cnRQ0&?Ovpq`5rPO<K>(b2ygE5qjiZz>ezkz7MiO*iT91aMPz10<;e?fR#FCC5
zVj&UVfRdD`|GOYbck;K8a7ctp2EVTsMJH(`!Wxo{LTb(iDk>!Eh-Yv7JaVYWmqJ*q
zn_(wGtQOTft5j7ejG#pbbyQJs337=?$hglHWEgwU9}~Es+1o=dUUL=-47eIOTS4^{
zpk4Lt3B!rbzqxMb-)#K{!9s8}7-W&4`4b~y{KO0{DiW|K@%OkQwGrhbw3V~UJR(}~
z_qfu=2L9OXsyjKas`HaZSUe)jcSzDz-$ik(SwWaZ4DWXb9Z6;h2E_&|VI5XN8hZ$e
zNef{ZuM_YLh80{Pm%|8n^Y+q$4Br0F$cr=47OxDvI`BHQ0;TEVD?#$ySsqfyqs|5R
zCNXY2o7fDD%b<ghr6*8dmzz`}1)vQOGRnF844G7Eyg@X^78zo>Ymu8|<A_n|5(bq9
z`2ga=W01aSNG{DyImW<@X3povWh1Dd9J!`SLk`HaGXxM*Qf1}w+`OsH#f{YXCggal
zscP}iD6UHn<Wq<s-nbD{J(V9wqg27@!NF<@gyAI_&9;@?VopW@`V4zr{+_M1@@7LB
zjulzZKuHe~sma;A9w8khqUW;+7RFpF#)cJRTQaq4v7qXPQ6I1GPRz#2D9##c4CEUj
z7++^*VAl*a@&k<!O1PF|vx(ifOrkmluPVgC)v6U89E@7kYB)ypcvY4N!^;VuBd@a8
zbu@Y74&nqd5cwa;0Yx<9Mg~v!8jlqFDe4b*=(YYgq7S|fGi$pAcHJS_&dW%olK_FZ
zNir+6Q8A^{g7CQ|`p=7vgBZXs!Ggz2Eem903*o)iV@{yL(gqN7!Wi^Kb7(~L4hUaE
zG%p1OgDm0IR<SPOXrORD%DyVasU{aTi*ySF)L$ANDZqa~5qhn{vK>|3(IH_F7!ffx
zGzv68TfiCk7sPT3`XMW{IxDnp0f{DEEhHu$p|g)nB$iN7Scw$#3Eg42!HDeGQCx=y
zK9VXHU>|L@+Vps6nbkg965*QU@Lf~*uDw77ybgNgs{+UmfN=n?#~b+hwi>f!3kF%}
zPJ#cUO`<T6c6onZDW07)RsWhqzlCdR_Hk}KTI9=>zU|jyhG<&ho)^4A5kczzx%%>1
z8XuiDEzd4flp7ACQTZB;NwHjy<7Y2j7EoQFU|C~)+Wfb-{@i<ZeGb2aU*?O}T-`eg
zOiKP<$aRo<wm}_n%R2})DIRVh;FPq;N|8$%L~Mw`^^!Y4rO9zi;`unnuD8XH_~rmH
zFL^_txyWq~!j8^+b0>F=XxhlGlQfd3-a;!0Nz=(tHa|uga^6HO5e`C-EU;FG#@iod
z2X@Sj%oxVZ$lQ*BO*|{EMOU`=#>*-S+*jj!y?rlXu7%QB@nWP<$WFi&O*+;Eu46nK
z2qOCLVbBH7MgcCuMd^e$TrlrIi7|dC{)b~JQY@bb5XH~Y8HAQ{I0Ga=fEUp)B5VVM
z>SGVW7!|ipAR`0;sx$<HNYfsZLBDa^EPDm;6cPx#$5PbPt2S<|WNJ|ZNY|xtnCA0H
zpc_g=4$KU1D~C-)T$)aCvOob=MO|_v)VwBTH*6b5T0sm*q5`i#81W#GULztBPb&#$
zAQ885rxG=#V6`^G-iY7vei18iapTZU<!Q7VoWTg`90}<+g+S+X1I3vG0~3=jYR(8!
zEItrK8YDwNUkJ_*Q&nS9NT~vJt{ktGjnsPqLsSMqN1%^pId(`9tgt2ln;C^Wymo#A
z=-dYb9|`<V*uyFPuu78Fm<Xv@fdd+%EeZV~Z%BU#0)d%09f05HECuh9V64ETN#((}
z5b`!0(flm#LAUwWlOww^g-gf@+s#UWSmD_XiI9LP3OtM7|3N&QtbwpJ<?&z<+7J&9
z>;(&+iE3&jniz-!1kZplD`ty&Axa$4t*3&r?bvcKRd?w?w4fKWFn%iWkZHvS648iA
zFj+uD3~O2<N(FO;sOzLHgznSz-j?bPr^2Zc0t3xxW<w@wVylEB!!FE?nw5qqhf?l*
zD;YtR1x-PEr4|l8#-j&2|HfCh;2kwJ6i2mM8);;&S(*bY&919Nfg?~^m&MLp$#fMv
z1gonYM>w)B8=4A%PSj*Mq^5I0SwwjSJB}-zkcFDv;X$F2qWFZUQ_-}F6Q%7`MHmcE
z7vnZcF2sVg3L`NsmsUft5{s+`6}bBk^NV~TUEHW3?74)x*~`e4QMN4Z&Z;wNq8XoU
zie#g3{fZCl?1^o!cfWnAdQYSJo{?R37x?x({qM|<Gv<fR3_Wu9p21h#tq-!TTI2BO
z_|Tayk6%PiqYf)MQ0KfX08G;v8Dj?4E({UBU}cXwZN(q~`^S9GG2spklEp$NfPyo3
zEWlKB&S|47+RlW2&@>O~N5!yy6RJ%fR1mN|4m$laJ@TVAHA?$O5j}TLP(NT<P(1JP
zeVja&wTtac_N4wO{WZ}-L@P+J1x4j@?&bE`<J_XPL`&EMx)i&8*-f?tyBxoiwc+YJ
zyGX>GFIH%aFIu!k3-lAw_?5Nq3p~88eT~G4IIMv^6j_qRVHkYgeYX4}UcpNM$E&`8
zZzH<x`6h{;sEB8wiYheKV=x53dO&=M*f<X!1C1a{L7vy?LJThl^1VJ;dSx`8J{NY~
z@JrVfVv)&6wVtePu#o0&pR|fTOz)rMw!Jbs=?=Q3*q-7`i;|Qd8#lyM(cEi5pyclW
z``j0RcXAcp!DAKR3m9f3M|eYPqOk=@2ju9bM&nH;a}k7eK`-Hl-{_qp#?hRmO1@P4
ziizpyc=h9w<T$o|+PRmhDZ_#aPvx%I0}02Gq>op}!5pz4JcKxYBc-x?9Totyt8Fz9
zP-nKGxa5!Kl4ng>QPbud-1H&p_Idm5s@pc>Y~0vdTO@`#Plpes-8YzNMC=%6lR2O|
zc)Z`&ttU~P`fALo%X?r$pqr%oHl`X)cd9W34H=k@_@2R<@5_c+qBKE<9FX-5Y!Xy@
zx>UWQQ}!KZ3h}`aO3`A81ZlWZ1bF!=lSv!LckUdIM^W315kv+hASg=g-Ya=)?@z$0
z5Kc*!C8ff!Wh8_hJK8%`L00At&!O;l=P}Q3>*)v#V=9GOe#pyPjeOtCJJshVu&Tgr
zM)0}hrEhu~7Wb;5J|Yil@d_|gkTCHeM4!SXNASWBkuVN;sy$hK*w0YnQ;n%NsdIY)
z-2L<eqYhHjF5G{-w!OCL_=kfqzQWoX2Bw1rbyUqFHe+2dVnwZskIHyRR>gA+XB3Zl
z;Oe~yA3MIOwxfFd{#|l16iIsyCR0{X;Y-qFL$q-i6|uSBsqZkl+?V&d?J(hGfOZXw
z&(ji^fMmwvmJ|TC5{cy{$e;Hs@7gl51Cq#&{orx2pkh7Wr~K;3K>3I$9w`sZ;99Of
z^7n<Ee3{46I>5!LP%dZ_HET#<KzGnIY{X}{T7*t;6|PNjB}v2yZfNi>Y<{brNW{~H
z)R-L!=T9sxVHOFB1~GFP(&%zNeh<#AqjPW0UpEwvqT0>g#J00bE0hu}1SvfX8=doK
z&!snqPI#y3{X9Cc2jeQ^wIwASVH}Wk6Z3;CeVhY9MC9*Ag0)DRKFZ~G?bu`j#5fW*
zLh2vmSXpCZ94o7DPb4wni#I9-XCQJCWh{fn(WtTEB|^k})-o@>JmEd+yFuVH1Uqkz
z$Fjf4H^aBG9VSFJ|GfpgcNUsy0Gcp$uQz|;U%=)Bgf1SZLbXNdt8mu0+0s{eASH|)
zhpIj@b}JmrW1}dwWUIo72Om5ksK23#QWGU3BthJ{lLRGZHziR$IEeCsgArXp2~W7C
z9T{n%5B|=BKvcG**@L*MTt<zVgR_#w%w3AIi`rPDF~Giwcg?}JR0TyIg#<7~V*z+%
zXi)Bu#JltNLUsrtbU^+Kv68FS2v`XD(yH4;(zM$w!9dI2HG|mZ+vdz+bMCfy!kk&V
zyS*MO%q+~zEX=uMpNhrm_1I(X*yHus@~LR~x=7@@a`aShixrzEPo8AK>RhpSw)hZM
z-8r@hoB`62Yn0i+Unz`%*(`$em%`Y0VRMYrp(-ptbc{q57xqU83cLV3nxAMcR8^iN
z0gk*IIj7Y{Rk&MStYY*3TeRBi@@~FuEyngnqk<^bQZV<VP?1PjyZfKAJkmM;ca+Zj
zcgz`)<<H%0ggTG3b2VA2Ca+}=gp8Y=?+>65Q(X}1ve4TCVrn;bM1Z^(hU`UkICq05
zz6AL@*P#b$4VdUrpOoYu?y&;~A-IH$OcVwh;hRk9BgkwD*&NiB_y?DWAlXks+bRwA
zKR|U$z(qt;pvW|9MaoAb(ar~WAlKhSq7OzRoxcH`{1-(rmqVSAO*zG~l-wo@f#GWp
zuzUDDE0OYOG_t)|#J{U@Zyp%<N;d_PE!&;H9>9O^W=owmOQ2w(JUJ-?;9=4*Ce5|G
zzuR}$L%DQ5f9D+j>$5$1I0%pgxp`;R27#?^sARFX)tmbs!YA}2LPKz2<6-yb=hL7z
z6U4INU@EA(4;t(p0ToKm=e71yo1i$`F#Ygr&eP@Ry(K@;;wRfJ`VVtR<oJRlQ?=lW
z*-QM7Op>cFbeS!vZkSTAJ7Q#F31Z7-9YhO*VZa#Gn30P!Md3Ao1=pJVN0<7RO*(w4
zsq6P;P+9YnpHu;WcAu^{JIl)#0;J)?7O6=w@2mQkF-bGz$reBfrKy&qIMUTuOIWq0
za3IoJY2lwozy4ED*)L*D0^1`x%g0|IQI)SihM^3o-=cEkr*0-HdNZ3}XITL51r0S_
z%UZW)kG;mUoX%OtGEecaqW0x3@^A6xeODi%jDpIlHUt5XhXr%E2#>D%QZ44pv<H3i
zzj^e5hE(tR{KCR~eeM`P;HyU8gCrPD-+?sAg{6hL`A_j({3f??v>>NufPh1&0|7r8
zOD%cPSG{#HTvQqHCJJGOl8u(&j7ou-*uB^k+I?a6sHS}&@>WfIIC8h9y&~LMVT<9;
zf^5|wj_wwAYbmp4$!XbIm&vR{#o22J;gtYlD;XbYX%PZVtNX_gx%yAGnp8yX(4QRE
zWi_eVTP-H<-!C(30paf?ts?xr?SGyZ$IN9^724$lM^ymQQCBB$FE6hu9QU;6x(BTx
zi?|Oo%Dv}Afxw?ZXR0ayz&NLi_+7$WuI4UX6iN8I+s6xBrz(6=RQK$`cowxAZ-hZy
zRCn+0?fr)*souvQ!RENS{Jl$p4D;1=A!^f{1&D6?^_rN^i!cI+BO`p}?+p)&+K)+o
z^`C?9_T&xHgA0h<?BeWs#$-~9qCI(ocW<<!HoTZw53V%z;~Cvf*~ZWil22`Y=Et3X
zd=<hsKxFuW?cZ<fQQe-K<E#ChPb@8U`B{K1VWu@bZ!{xw*lMX9SiZR0L&_OqHmY0=
zphH_k9*07bPA}@aH?&HUTO4-D#E;)!MAySqnyymM+W=W>G_oIVVYs(KyeUt44H`&P
zGa>1Z>3tt>qs9(pGO_?hO&Wk~SLbR$soi>nawr~Y&38=|uvu_Ck!6l2;*y7;hiFIK
z7>*N2kO(c9fj3841wLCP*CbkSRLg~l12e6e0~2*%v)9>S8C4VdD6|t(49#V?x*BUO
zE>iy6;^LV5?74H#x}BegG7I$93*IslDkKuU{@l*xFl1AE*<!pI;pdqq138-3rA0gj
z-BE=NkE(k>Hp7N@8blcq1O_`hF)%z{JYSzH=h$35GipcD>FPHWRhl^-uHZ-%@kod@
z3j-=!E)Csry)ZUV90%s!B#Iuh`dr41RMX)a>bY-|%MRHZRaLdE`302h7Gt}Ic3*?{
zB|XZ+e9VK|K#N?P-!@%^=d|yYl?tN$iR6%I1~vjN(&yhtSQ$Qo^epcl=%(rz6Sn5c
z$h5(COjp?UvBBA(6G>ND=c-UVq#x96F?USUj^#vKKRF~v<e`%|ln<kbbMd9yvy-TF
zWNg$dJ6C%EX%aLNs<S9bEV8lf<-CExA|)Ix6iuzUz4ydZf)cZf+h00Xn#{Q6ozSLW
zYBIn(KgaXgWLT12%)A;X(FVwM2N1&;Xu35T9}2e%fXX0t2aZdn2Gb{rbP0$vT>L}#
zk+*4FL`n`OXG{g?AesjD&CNhT#=ui+4YhXL?dPD;Dol}tL)+l8{X<o{`=}s13FNEI
zcU+I}z5cZbwqysLc|lOcCs7s=7kv@oHNw5OLjOINy6L8y{_%4OO`5~;Uk9Yb*!Kh_
zu^rA!c4`tO1#c8}`8`i*+EXxz(RuNK%-i8{7j6_J*7=4aoS@3r+rRUxl9qV(>{;I5
zzYqHRbx49PQ5<eN_r7cZABQiZ?nTHF!6f6eK~!hhha~9_{y>sGR46<nX@z%d&UsDx
zlB2!5z^+0C&HL`d;^nc}6QV5tK{a|Uq6t>+kY({zD~2Io8?9oP;dcwr`wHwgK=r4o
zibsXolqSYzwmL(7D=<9r6@Hc?-0&KN%)~VSg)`m66dMMJRSV%ce3>nC8pD=AgcqS)
z&nTuY(&+_GF;-^(YIUN16N89Tmj#&Q%VY0C&`Abfd6;B4J%U^XoFblk<-mKg52Jy`
zI(0B?09+-J`Sj%0HXhAO-QArF&{;7OD6of;U`Qv#G<KU5yxWXex_)nXIC6jJJNVIS
z*h7VqAnu*$*f1{ddC6x_uWM|Qq)l58m-<7;IG~6jF{}*)^=!*AgJRH(%FB>+?hOjo
ziIL%<n7V7bv#B)Rf~i?VXs(#Qe)f(Ox*;_s8TQL`7>l!-p}Q3;rTmT+hE*AT!1!FJ
z8V0~0#>0^91=SmBAZc9W5F&FxQz0@0^_54ZLBRpA>r{gMNkbUeo6fU*ZU6<4>LFb!
zO+{R7FcERG5T_EM`qtpkSTwhry{)k?tf%rPi^fneVOptDBr&KVj~3TSdZ>Q&k*z`3
z&e53g;@AUt9|v=A0+Q@}pdDBUECwD2(#UTFo<{2vg`{Bu2?y!g%msPE_~dO%#<wXS
z=+hfWpgQg<<Kls=QT_n3?cjb&M#U#`mWnQ+Ia=eTe!OFNJdAmKQeW|TH7I)F7*5Xs
zIo8{VCNPxg$m^kEFu}e-CTx(X7*tpoMd&LM)KaMeU&}!2EDgl=+QmnJ!H#0?$EeQy
zFw$cG6$Ra78T&yz10?~5k$-fIUm};0KRdi{?d|+&OGq*xk<5x=xfmmx({rkA2ZMN(
zu@OWrKMI(eTTJs7#TF2{<5`kvhAggbvaF>6sYh){L8Y7&W%ZlEplxGUQbxv9<2RI`
z)Ids|qFJYrI+gt1>YaTL`H>)W{z}uHi&&lSY8uN}k>@mx`dTKvlgB}me18P~ySu=(
zsbJX}FdUI*2XxKq=)rDBkTr<xctnoKKIfg{`X~l2t^(m|H0g3|K)>cG{obC6m^3aH
zU`VeZGYBaFXGvA~O1oRG1;9(_7fl<Dq=E^-L?D&b+iIgN%c!?f#@caSqb>qHh0VbT
z^C@};JBO|BI~p$lh%31C&~_ciiXzhy2l_Ve*R*)ECIibqj;(=odf*w=P!`p`wlTqj
zy*Uto4y}Ut;ZuPThp7n-tq7%UGeeVksYXqY74s+>QpJ&3;5Q4&5p*LNFT2l>d)6sF
zz)Ovb_E}&;^Im_^vC0<$z%)S?D8M-jz>LVmGYA<1NDff1BgsNSvrB{wuz;|GaHzmP
zy2HnIff^FyiXTE?ML~QA?VLXuu36<)D^r;{EJD3c>ybJlQc?Lzkn~I@!q8F#98lS+
zaB=Fa@Bdh&o0t3r=Ut!182Tc32-WIZ)e<516Qd$OFINHp?*IUeu3*|-|K3%vim55f
z7%|Nu^yrXjju=)-joq$t#q1rPdbTXwb+mIHBs!v-h@BjhW!Ug0Og)0|I;PFP`frKZ
z`2QfkLtp#6;Mognq=kF00Lh5n1e}4FNr15mDjBE?EL(6dR}y3!Jk4!_X0Du`jGi8U
zczj)2&!Me5|2`?HKZ;COVu1^C$HZk+hsMh4xGWuAH;(JdIe>X+lahQPR+*0cNX7he
zdUhScn0FCZUV}~Tj==qaH-ehJFYr|0<AKiwz8d%@TCD-=HiYDozs5-6``xum=2z?#
z{qw~xNxVF&Ady)bY?yZ#n*MO3%qVg=&GtuyNUH%N6%ce>x|NtECE<3r-PO$?n_AsT
zTy}HK)tH5aIsDOjFaFvE45|)o3C;_N;Lz1{ENCf8^0|+BYlia73LOZZ^A6MveqJ$m
zc>7OytEr35B0Tbb%=OFsVa8k>z`=(*fOnQ@kT0WFD1a0lQ^^=cEoeHuEfjvyx(6qE
zM|<ay_j2jMzT5jR^kn{JZi5fOcQSg3)(LB03A}bIqyi!?rL72J53!~?fJ1<<K2NXO
zDbVt)^Z1?WK<Kk`l5+Jqr`0MHT8jn54CBwI0JyAG_z!1LzwNgGJ8ONdfJ<71WqyfM
z@a!F*=X}A0#bZDD=3Jnil0_Y{Q*aG{b#q(`(u%;G$tvmb1kZZSU2kNlBq5Bv!z8&t
zR>Xj6aJ3bV#-pX_6aoMxNkb&GV5%)-+Oo8^p{T0D_vkY)J|=7<5o6;tvrp(OBNt-H
z@OVjAU&?Kc$+yhB+_afsIe(<6h{IGg>BfOUgw-k|U0A5|x;u~i)5pl-aqMctmZaNa
zsqi?SO<)9+eM-8%mrLvAq5HsrtK#qK79_Ercucw!qTBsRh8;vrY!SLS*TSxFCPc_B
zXlaiTHy&tk8oV&SuZgGyBNz_FN@-0UNH2OicRMx^ektq}^y!7OwA|ymduV-r`*lN;
z#MgpKC=(V#x~Fr4zIb+uZIIOtAT}%jX_)83qRLf#0-lE6%XWRboKGX)2O+pkV&{IR
z;alSP5bt9k+K~+Ao6>|9N|zN;KOyRXqqJ20kz^XFvfC{&B}nN32D1X%a=M%wSvoLt
zKVmqg2<lYt@jmIELsZMmmUXkL-ptk&KSp2kF1Pgx&9ZJngp0W|Hw1e+P~PdpTzMK1
zgQy%CMHO}q)&+|K(ej@`N7;kC92YuDfUKkBbAtK4NfGPZ#tRvwOXEFC->eXY?{yC=
z{54#hm>Kn3-nr?P%C8_WL1I6(%(!WN*EGLt84!tq1CX~~&cBfz`hS`5X;p8w-h5wc
zpRRsdV0%rVAemn?jIZ&HzcY-}sP3h!k8=4P<~rDIkY7?Mtr}@~L@8)6X{XRXNI}OO
zp*Wjn&oJG$<(cY<Sys_aAi{iT@pvaL8?c3&1|OlH{KFjLgO2L}wvEDRDQH%%awJ;H
z=^1yJPCw68*{Ps+(K$~#$l!Vl)#(H+sllj{G+k%RGlpOOd^+i$Mz=sG`zLhHudqe*
z3st6rO`bej<le&j(|6!2NxWAe_Hi^>_<XxtY}>c?PYq<Y<_5M_(^kz&Ra-}Hh`M+0
zKXP4B*Ne1ZldGGHckDZ{H*e2X!{O@Oqx0?2?7u)x80!0@aYAuuug6@7;EjOC&0TFp
za$rJVqOfSV*P0FC7i39~KDVsF^Dnc4F=%9NuC`th(sWG)-ZWx*G`1WH9sIRwt80^6
z<n!wYX4nbzFb%yf&-G{?%^Sj4?sDX=4Ci?rFu8!c+&$L4CJz1`uOQh*gh`BWnFWxE
zTjq#N!K@p#=Q`*5c5b1LWy!sCW|<ay8Bj_(i;Ih`Hd}6g3SfOaIFB#t{o8zcu03!+
z(8pT%kM|+XE&4v9eTS(J`B;PM=_Rf4dA2&F$$(2zg-19rkhwHLzCh&54#3Ld#eGq&
zQ8)yfLYoRWxG!yH$?7<N;8$9-UZIZxbB)@!=O<(}UtgG?drt`Av~b9*=Y+!vp&HD6
z!JEnV0;ra$S8@~N<MVt4>jBt71)xpUF=2k;q=uv1qHrP-+?Z{WJW7NS<C1JCP-#)q
zhe#do0Ys$1Vt}!L*(O6DsSdv5uigO<DVtwfF!z0XpV|4;`VXw%@T+X`sx3EeJa%m3
zjawq)McW=8w(a6+*G>6+nk}Kt)IdD29Y5w9v{lS<t`+mh8RU2JR-$Nht{oHW1grKI
zBpQz~n&hAi(A~?Nq5ZLyHZ;3%h}vcc%h75!Z^sH-f|fj>CV_=%iP@LLLq;WJTXiGt
zh-R%ax@S0+W^K;RewGa>@f@0G5r3JX!(}}mx;Y_;N&Cc<J(f5D#In35#xq(z3))wQ
zYqu+R&=?@(1(=0+dwByE&8Bjxy+*?|Ty$wgK}{gI_`!M5(Ewbd>l_A0N@t}&h>Y9E
zI%n&16uLAIVjAl_l&nf}EyotpiMjfP04U4Y_BrrfUek<y0l!=7+Ph)IAsY?(zkM3W
zTZ`;G+)6++6h}bT`D=6om725uxFaJcsTB+*g;BE6mOt|uB*q01O!&69U2^0d1%!4S
zuND+walTG7gm-f7!E>j`Q0cR{<Me6Vn}zznYu6=5-Vxp~NXF;E4dJvA3K>tL$-Dok
zT~Q~=uMYt4uFPPsnsvD^NI3S~$1Oc(Si&J%ZDwDFm%!3H>uE)F)#G<xfLHrYil>FM
z!4sjV-~?zG8ll9i4Zx5^Ax_?8grr4XLlSv&mGMLLD)}K2AW|HzmByUVK$Ir%W+0Mz
zLlDCe<p8H#pYxDm4^ImTCD>q|%s?&^EX7e2AsHhx2z#pzGlo7fz8TONVE_At=2cB$
zKi`%&k53?R%+{xk@ZnvC3Qq{CYENx08-g0jma`#MFv^>!_|X~F*mXE;+>=D`k%OYC
zNbe9cX)@O^!bz3o!}v)VKfSlEDCv&`VUe---k|A+iGu9AFK^d3Z>|S(_i^LPVO_gn
zuZ>HBM}kR7pXXN}j7=+!8w$COG95d}&(7;oGWhgf#S(zmsz`@X;8UH|Q4j%rrgHyn
z3u7|NWpJ{Ia&KR>NCDW8uE5^FQkq*-Qlq*m?3LCOPlq0v?w(&{*+?ct3ccI;o@R(5
z!4boFj1Ve{_}q8N@+po;eT)w*wjABCf9UDdWICO&H9c)d&5#w;o}OPI0P)NH`xbnd
z3rmk9{<4CMI&SOXw4QX)JCKY1z$&Ij_YI?*R)z@FSM}sx1+&bLTvArY6>`Z})6;v*
zZPrgu_vK=49>#F=lx@hH0bi&@a0p!RKiE4xy?6RBhh@11jG>XrY%Cvz%nb9G0${0#
zA_qgZKC0WHpsYmH0Y$+X6+^FkNidX+{h}TTN^>{orI4J^HM?^shgrY*l|#2J;OWzQ
zH&L8Zj76e$!`2(tgmUG_UHXf*^^RB;H7DL!A1f<z(lEjakT4Fp{-^CW#tXNfEn~bW
zpq?>Ay%i8kNqD_#i5qK6&4f248<<Y=EL1qy&YN)r{d?@8)(cni#J^etOo_!$UlnTA
zGcP@}JvDpl0paID=X}t)adCbEY25(|@U(~TY90ZBb;gUkht<--5_@K6d31g%{znI9
zL;w`e+^33vJ2AX@XgRwRbh^EGq&XbRCep?6wga1l&m$MXBfW7>eBamMIQ|8sH*PBT
zFv`1wqX!QJwoYP-8%D9U4R%H=M3?Bu%XwfZ^H+=TP%oof!`9|pZgV*9<;0xlqY(p=
zk4f<A3x6pX>^ISF+XC=>p*hI@%cIU9Xn1kxAo*QEt6SoN05cK8gHh_q)Uby`|H7S6
zMxmyHf4~RkKL9ZS$S0`1zp`FZHjKdiC>TiikW|+QX-tS&ZzF2L1+2qX3?<q_t}0mt
zz&$e=zfxE94eKUmciQUsz{uX9XlR3mgbaQ3!mG^O@_2c4+vuQbA|o!MTVBCOPk6@U
zbQ1;~N~v1dtY^md6plCZV~R0S!+=VnS5Pq5)8AD1nKQ5r!TJw643q}Y;_mE%^_%c%
z!8(wx#{QGXtsQbg*$+f#qNk(L4`dIQ5LgXUROjapoPL1a$F~ob4&wrxpTPwo=MXn(
zb*{q&=zEFAEVnZd9au*)ZI@0VJc!e)8r)_O<sq>^<E0gfC;-lWmJ3cuBSV{`eM_hi
zf%Zq_19;9XPY!?x?0ZpFgr`n%nIy|T%Y_?gvs%Oo0}W)#QkAe3(Qu%g#9pfOYjgDx
zMUUs>oA9SABY^+Q3ERgCGr?q~IF2CJx+mXwh*4p>Cv1zZE7}q70sL9-o1e3cIR1lc
zy*@Byn8w)lVm3Dp@J4*Mht)<t;1sZtcfqD{ec*P;^J|bpDS4F?d(XMb+n`D&53oT#
zpM58AUQns4sAb5u@d9_)bvYo2UI-M&E19|aWX_4?M!y3v&5>Oql0(F3F6xYk$2Zuv
zEXe5rlrZ>M5JqlYl7d=Aw6A$#JAW&W=8EIv#oQ>^TYavs0dQH9X5ecorPPt=hIxS*
zLTDzR9?J)RUkkQ00Sj=U|7x>u+z^WAMydnKH384(cA5T{A!hT&^~Q(4$MY{~y!4+%
zafBsuA`^7xMLpm7lwhIy0fy4xhxnGAuw&hA91X@9#V=gk;XeiX$5c3;%f+1rA%RSV
z$-mXxp%ZqhfMF3(IL{AYT-ca}Ly$#x0j(u~aCfhVJ^0lAz1ixTJ>=o6UU|_u&@(>=
z;BqtMW0okksDsh|E%A;udmmr3#~xd=du+|##w#@4QN>mkGy#(90<uJ3-1bi{)21XJ
zk&fMhEhddtng_1Ut%3VUM!n)J$}?aELFY<Lf+j=zxlDM%1n|bm>xlpbL@HotVE!pw
zz<sgvtJ9rd<*YZqqJxRf>qV5P*{GR9YLBY!NkQ5_P(sF6=>QJtLZy)1m(JdpiJ&4z
z#7VQAFKm{rnT(fAxp00471ASu99#2iy%$KwT`8TN&s(WzHeEHcKmV^LU*GIR{RfKG
zeiM5Zn3MZ4QXhmT!Sis`#?)H82+0iG5`sLq1`@x>#mdzua7V7xyFk+~aSM%?Za^vF
z$OEIC{1<mzhRvg^dvtB2!fSOK1z1H5LmKuKv9mN=HEf`9hBWg4Lv|C;t7LU#7-%Jy
z6gv8Y>W+8^1zkkfKrn`x5CsA0;9@KWe1gRnb-42t*5<amCBFQ;tw;1AK#2)=N)iv>
zUec-l$IF0WDq1B7kaz_qg@;2&%Y~4jh=2%)qfn>gB6;61;81g&7jg85UXCdTEepW0
z%K7WFpeF<9qnBWoyd3g2&{wE#vTrGeCyap4n=n!Z;RZ)B<t?aB#E&4U5549eL3$S?
zBD%2eaGnZuK=T87EbAI-XMNeaE37rWeWVXiQFCsHW}{oGjm?qCV_UbKXp9_LSD{^6
zSI3TzVm)S|Z)S?Kd%MRb506dOx7EXif$8#4;-h_9hNr4P^@H946&bpT-I?Gr)H%EJ
z_f8UZe&WE0HB!6q(^osmEfF30-pIJyjQv+hLXip1z^?AWcPDH!1OP=n932Qc00OOZ
zb!J>gI;OpzFZs5D3fmBw`em3QwD2ZgTa%lu$>xU!MPvC=35kgu#RGx~ts#aBez-~v
z>Kv|uF#&an;qKyw1zf={<O(6c#2?%az>lNFqjwjRP)K(^AtD%@N!Q#Uh)7`L*xWOC
zO$ffotd%rPlXPVAvk%{J4X%P)<B6TPD_Oi7Pe=-E`$54Jok9*qXtDEwTMyv=CEQI0
zgHyN_z@Wg9^ko#%KXt_2Z-$I=3N>C(JJqvz4_2X{`Bo*w2b1bgiJMUUC#o}Km!Tbj
zoAC!=f~8MOpe!^c8iNPZ`6`KXM2G33cnMm_>VRBs@ljGBQGP=-7#~7zJLWCM52C&h
z0El;8cZ!R0XP4={Z9Br0bTBRrK-4d^2qKL?VB+lmPu+V5#&MSU<NKD`nc1D~O<J{;
zWHs9=R&}@Hk~pymPV96@w31fRMrAj<E0++0AcTYvLVy4XEdoL>2^<HZTp|d)h7Jb@
zK8}9e0e1(-9kBj>o_A)Ym2KMH{r>nR^6Wb^@65dIsqa%B!AfA1@7f=`Y?m(xMJ8Ub
zbrWM5Razc{{b9Gw(d|!_@f>A~3tNqez^lH8O}Dkh^h?aO;*phYYQpstU^->ar8+^~
z9a0H3!HkV4R)f-n(Ed7b8IU0O=oo5NxKqdjkh0bVgJ*-fF0TfK&{<*!a6^!L_M;rW
zrD;=db0Z=z_-di{NXGXEYelfHxpz|&jN2$syy>Pu@yYhQ<-Xr-y3<&hCq1V7f}Aq<
z^T*@y+E`0Gc#`)vH}&vfDA~RmJ09kLw1!FcISpF+M(msKRI#bRa;#}{;MhqiLMjLr
z-qE&Un<ELGdw2cA$_bJP0k+@<hnaQso}+4Va!04`SA|#2UG*GQ*t=!hF;%$X(#9cM
zbivH2E1TGZ?nBSN>|O%wJFmRm>w8{Cm7iC7*R@vZN>#pV;8N*+%2ri={w0O0+=;#h
zb#gCFt18{y3f~u{fA}u+56f8FE#M!Ixt72|LicTNJAo?oa%>wQMG>h{ZK6c>!+*_X
zNPkL81N>QSz*eD7yBH`I5Tx1y=czxOzJBlNz1NrTh2u<}j~UEY2S1u9GM34j8Xz_8
zp}+bD($Uv+Aygs8aST{O9l1(uqBGa%=-%tE-wbnlS&Mi+lIc8J2P;IM4;F=W(ZBLK
zCT}#+5#@4AYEzyj$PStLh$>^B&f(XWfJ<!u*^3nHD4YQemKp+kxK>w*9rD8FSJi!3
zTvka#K#jB-Ard;a&PtJwPdR2GJViy@;^fHAW5;&x+O%m`=l*a_k|F}{Y`eY<3gIBt
z!C`EzxK?@u3fb=NjV%@e52sSjnpu-on_xR}0j^Rzs<di)Rd^S|c!*{UD2Mef!2noK
z8#CBw0E-PMkDaX2t1YGQ)fB$?VpyI-ph%7R!}vkIF?fis5F32tAfdaYcvELTb!$u4
zo6w>1b9$RQYgR}Puu{|6e5qC&pfYwYzCvBB=-WuHAUXU0CvA_|ZMSg~!D^F|^$6=$
zuN<Ns%C@W7wrv{Hks8O&HIM9n&>e&K1dFNc{%I4)4k3$>5^;}*{oLb;Bblg%tw)NI
zQvQmrUt;LbHjG-sxS`9?K~2;nIFLsJ{zgaHC>+MMi0>{#KV%rsGW4WjT;HXP*r=^%
zfJdJVn~AF(Swta$RuDU-!GJ!<UhrTApiiL?1?mV1G>*lwzOwuOrY`Sy8_-s6+R!z(
z34fukn2w+W%{AVnr{U@bWO8b_rrulUscl|Yt#$MNqE^i)Gm#Mh%tSni|GYj9B<{ve
zci7}+f+Y<5XhiN_S1%5}<$qHR0ExYvKfsRgHnrB{@W|N(Ue{qi1j!v>I<OqD8Igbq
zHffU~*{RL2VWsQRVcUcapB`n=OF=b<|50giZ*TBuh{O=J`V6yY*J6)p^ugiQ>(e|9
zwJ(imeqh?=rbL%ti=_Nr9pfEcewI?o+446#e9f@E9QD?Dw+#$z!_R2Y@HG26QopHB
zdFn&nrY3Kw-jk}=%!azUhKm0_;hHA^ul;tU>`0=S6cusJUj5`_h9DbYv<R7uU~yG;
zTo5axeTXR8Kt;u!a+u5)=gzqLHo+ZUZQ=IqOtzqbviZVhiQiydXeV1jk|@WC$M(lz
z4?jFS*5YwLP0`@dLtEXO>Pe$x`ApMiQ7POUms<~wCfm#RD$GRKiA;%AZou~;?(Y-O
zM#rF2oyHE53rSAl%>bENZx^sW022(8H@CwU12)=WvKV)hv8|unt1&@3onh7>tt*h}
z0YTQ?YBQhId>9dB+dwfwfN7x@#5h1}=|~_fRa+l5JFe_7qxCOq+bq16<#!LczcA<y
zz(7uH-VmN0jtWcq1DnSBlbZrjUEeia8;#Zu?}nl#uqoL;wkhD37LN_rG<mvE&@b$7
z9!cpC8M{19Us5b6JK_n}hC;PLPx%9NM|y>}Z)0uk#(kRTJyI9`QEC^0Vg=1)-PPks
z1XuGjD;21%4Wuj-H6uBGbzRax0t@%9l;7P@w+G&cdNe$6uz71s7@gPpM(Y~fF9H!D
z`yj$E?}Z9-1>-rWY|oVv5aU5Kl6J#^K)_UxH#=E^V#PoeZS!qIxJ0Z7xVLrJh)>7G
zcWmG9Gk10!xKVix<9mkR42Ak`ei$|xAg1oS(ufD6A3biLYDc$GAe4XbPVVa3Y5K3)
z|68&N`Yll%PuMTq!G6pCkM4(W*1?CSU!W0?gU-5-9|ca)w_lEZE}7Cjsy{1=pEjWh
zg_jQYbscM8NTYFLlF>HBJ}azmGiVN%RvoFl5}jgn&3KwJl$8;g)ixqoQoRVWVELD5
z<X6Xtw$S0zsDQ1EK00?YU1IIhIRA-uk;b3e1$CqQFK!pZ2!JIyjeY7r)v{5lMThgX
zjPky$AZOSLxYjP{%PG?b<y?Ta9*fMzY{MgM2p!(uYFoVk)zQvA_$3`XV$iw>=<XqN
zseb@AXk`+(L82=Aw`A9F`5~CKdQu2J!P1CL0nLR`XW$4+IB$L1=ANg%#tOy|D(3A?
zyPDq8w6p2$_;;D#?Dkk2bg>JO8`$Kw6U|?g!C@=u{xU*T1SMh)j(C$uQN3lW4)-v9
zSNVhC4g^E!2-k%>A`cq=9-sMuKM2q>2=`G8(Z|%DKm)RhRwC)aY0nPE2-GkVQRdsd
zK+ynyJAy7PbhfdlB@ynJ+J=M=+Lq@TVJYR(02D8lHBxu<xsCg4nyzj(T4Z}ekhR9g
zdmzDXLlg<W+_G1?O%n-0`(ak^-I|I71Hp!N*<v(b-Bhz5ZSp8xBf%YMn-5`k=muc3
zXSrSgyV<vs#*64SC+#zq1!>`7gacuZ;HtvN+J-s_Y+J5d)`$W}AX{1Kt;ndd?m`F5
za$v$zfdZ;KkXWlvf@KU_ocP5pyyee^ojJpZ*`bWEtd51PE5>NOF&7=jer<*L=hj%@
z6kSwIa$kj2Hea-|(z$v$wO03=#v=y)YSyj*?kZ0m(6sAxFY!#*Y1*<CsDjebfYnf`
zW?r=RNELg2f9fY|*9kK0_bw@R?BwdhSFM(8oy-T+8j4}YMk&q-wBHyZm|U-J7K2y}
zI8n774>e*3Kz?8@q!<Hb`$2O^h*f86GOwdMroH4(dHjvurU}ibAq>+*Gn|J{pK~QR
zp=q^VYof{9==bE|3sWvvO3ic&4^J%HcUI3)cl6v#cd8FrmikbhKE&XR5LBhrMmV(h
zw2HZJz=tLX+)6m2wSx>_<8A~Mgrj}y5Dfl-8j!(sm8V$SR9{o4VnsUCrK4Hred*+c
zC2N>j{^qU8pCoTBpEgWZBdv)fdz_{Q)RxFac}4w1>*-n)iZaPkOV*fSEvf%30}%|c
z3Q%*|o;LfqtS%{WOW8l1hK&9?Nb4r{hTGtWdMU*pfI1Svq2ataqV+0M-hTI%J~Af(
z4r^cSlghTSCTv&r!rmXSWw3Z+I6>I518j-%s6@)-H#F4lntbl9N!E;k_VF5oL1io!
z)4hpuN2Rkr7~1ls^*z+v1`!*3|6pfRgx6Yrp>^!h>f!_K4eaXLCUp9sXSX#5(#;T+
z&0E)`Mj&-)<lykSo;Ng)HD2)ar(e)M-@BnR{*~~aI$iHQsx@~;I<{b58U8^Dg}w3t
zoK!eL<;Y6Ttj@p6d?`A)Ml7j%CGz!XivB-BvjaHA-)WUXmbp~Po}{Iv%H_UFJ^H-8
zcew=r^AT9;9e_SrMe`o<3&0ndz}g|)9j{~n8P*ug${^?1HbX$!v<Q`nkDFq);1OG?
z*czfHwhnC)<X?b=>1@E*s#3jm07Q*U=He=p1oqnphJWP^!>9VKB-J%Ef+scoDcI7$
zJjmkFsIn7+$xh1clO{YY8yli#S9E0=(J-ObgK`fMZUZPqWoK%n8C+eb{QXc2F$zub
zS<|v=Vnecw*nBbX=@9IvNv9Zx!H3UGG~x9y267J%yEPOnH}X1gw-3n&<Kc$#!(&U4
z$P#L^6r{%`Dp^+j=0k@z*L!_^0n>|6yogK|=;N@j`UCQ&-Uc3-VufB%**l>zQ_4}S
zX=Ue5W_!wXN{u375EG4AHAI7T<8Ykz<P-SEpC$Cy!$sW}h<8}5bB{L~_3r6pR!2PG
zgZujHb>VId#yi@gaj3_<g#u#8T@{bEb;N^><yS>+*zl?Rh8z4k(jypwCbv1mdO8jr
z0^c}ex|;&HEc76(bf=P6b-o<29QyhYx#8uVS0$%l0?b?&b&U4(jCK$WFGHWmA+v|T
z`_oF*;Tr_{2p&`b?P{>zW2XZVzLkgT1La=?>qBBItR2{^%6B!fZEQL2FTW~S>-X0N
zS;ik9UBSAO;K?en7ABBk@WpBmLup?SdCqoGv}qumYe_!@(GGtqhB~ejiB;IHpU9*l
z(@OV7xSa?CC@5;HYFM7go<ORD9c*|*<w+vJs1gCwp(IF(*<wG0$5mZubL_YdY-RB%
z(rh;f=nH}|sSAYS?gU#83$?gMA~?PvO@g}#;py6t0$QeE3yH|uLHdCYXiDl)Z~3Fn
z1>F?MXAWIe>oc@4H2j;aP|EUdiihLDDEy%+Vf2nJ#u3sHntz}ZndHoe9NtD$>a}pl
zi)cZl^khgktHCu5(eT{T6dpQ&6)=rv+4N$M8}?slfG%sx9~WD@wUDRHt0#TQnz%pY
z^#JBc_w5=3?nx;P(%D*=O8i=f2O1uzb^>9*E)|Cm8^tT!3H$;ApbqN&sWU6C)8Mg4
zL*=SSE%4H!DT+lLDW-Bhw)Sw<dlaUs{+wOL>#-((hn$I&Q)83Dp7sKvWb&XJWTvCL
z;Z8zY84^b!dt$ZVuRl={qbVbHuiMyg7(pUi5tcE^WKHYrQEzKaJB<9?ftHbI?64)Y
zUbD_D|C22lK7evBw)qZ2_16-BF4x~)+u}Vs+gc-81lC}!2sU}R4WMnB<+s{G9_3Q~
z9$@DoL}w-L7psyK7HA8BypA9_9bkId-*1r3Uv&qxuQtmKqGi0jVeH<%v6l993p?JH
z?fkZ;eY-Q;CR+9St48l#8l9=rTQLS2_}C9CJ6F;JCcqgXXJkb?(yz8?pigkLCFJpo
zLBZINAWkKi-$KNO@d=F*3F*Tqp)mk&z!^kzAPO41_KubgY<&#vgh);!NyrOo^hEq2
zH7cX3qn&n{)gVG@0zMB|j6&B(`prm!a~(VNl}p<Ojo?4&hKxtd{t^6|7*8+aO`Fl6
zF}O`fzI3{fU@rT$WS3*_=e&8>fDV@&T|})!%<W@ZgXZ;Y??>c%uFI&mCaU|~P13yE
zr*GNr^}6dd=7av$ib@fUY#JaZ4Ug7TxhQnCMrl9Q4Sd~8(yH?F01oI?{srhf=8A-C
z?1vFPA+~8ZT$3;aI^vtI>Lkj#zsK|q1U)_RnucDBnNUE8z(`A%5efg?hv=Mp`#$60
z{=QgSy?(PYNi0PJou+Tpm#W34fTd{-?VMd6Y>fCW+cSQ}j_@Jr8LpS{<|xGo^&>(y
zQ$FhC$DPE9fOZJmN@!-~ppbAgZ7*I0EyUg)7_+p{Ve<wYu9A@;TM0ziE6bbRh?)Kl
zxBK>wyWJmtCX8Xjfn);XK>Nz4`6%$a8<y<>SQ}DY=swso(Jl&ECqa!yUW|!WkoI^C
z0m|)NLqy@Q6HpF;@<Y%8?S~RvITs>8(62gfy(I9(u|~Exzvtnly^YKAA$Sp_`a|0<
z+#c#*dPpw$BELPdb%nk5)*T0ym-g*?AbG>`(yo1@{;(pqOAW294NGTSV`2YT<eghP
z$Ht&D;b(pWS^f$38MG78N|n4`wXdKoW}0bL6O%H`@(NY0(2-?2wa~%xXZ!r4rHrpJ
z7E0NYIf>`rZyAbS_2l+U-RSnES{0L==o9JeR$wdL>FDeLA^;NLFM=R@Q9$5E)(9uP
zRplZeh|rsj;z;5c&`5y=nekaN-0FspcgW9WyvZ&t&^72*tFJvs`x-$+p++1PAIp;>
zCdhhfBduF>ufHkYv>88iMv)BcQ`%-AW1SUWWSKw))2d<%eTw~x-2<s12^|APT^;NI
zu+yr>paD<;$hN*T-d{l!ZQ%KoC=RcS7(3X0864X;4?~sv*kwrIJaWqjOo}dxb_)gY
z<)45+4R40;`ep4an`@R}5|J9)s(bb?!L%JwaD471E2SVg>e083rQlDzR09u0#dq5D
zpV~&=y_BuB(msqXI3*nxtE){M!IlwWBh0Hi2KP{f-YVgMf#%dX+uFEM1l)r<gNFRw
z!41KUXmZQJ7BqRE4vhd5g<@mlo4@d4Q1*A+KR0*(+}o9gbEP%14?&bS?!{xs$+r(I
zCgOMc+^0PH-i=@e_eENNtC#`SglF)ll%q7pnu>E_>!$<I;%p=7w1R`-0IQl6Ap`=H
zYGV;V39!frIu}o1{jP13W1#@E*z8MnZCXO8{>s62itv1``q?7_7QFrXJpK_Yz<b;^
zHCt<H+~u-Efld7uq?w?=#GWG_3TIp!soBa#@qFd4{97wLLu$U6u=Rns2nI#`tre<H
zWcFU>k6Cwm{P<Ho^mj(;I1GF#R`lZvE-G=zY%BylEvT;Yu&`Cv=nUdI176?{V3(ju
zA>dgjok!ci<Z9q`*?*=%T#tA{ZsZ*ZXtPK`R|hcw#!ho!%FRSgji;;KbD3$TO&?Mo
z9O?7adwM;dzRS$=cP>6~G3!5Y@&3Egrg@pCz022}vcS;KAx;iN33!`_XSIMpGCUbF
zFT+=;TAv4x*L(Vom~}H3AGqYf0~a4a-+p`MQ3!P(frLFskzq7~53mu6J16ml02><&
zdRuf0x=Yi!s)wbp8CyUa;T@@xIKhAb?6IRYqC0Gho9o-|91k~vGh3`D+ZpO#9RqVN
zQ*Mva$-?4Au$vzy=MVwLQG;d{x-6X?Js!}4G8GxWbDPfHr8?EKB$Pgz7@l6$$|7l<
zfSwjK0+B>@3DvBJRJHEoir-#Qez!iw#n%G2+iQ<_yrIwt#jc|aP4tgp1E4*5#+7Ve
zO7$(_f3||HgeAI&z(~tu>OY%qti7`ad|oSbd_5G`QSo&MoS}RghDOwT2?I7@l)$Ll
zpCMixDKwggC=?xp!S>_|wk+tgr$?7z_>lrGQ-x9HI^!C}DMK5U$}7~6l~KAdx-?1_
zBC0qxir-P}R%qnsqV&)@xUNp@xnM3Ud%I*QWkaH3MTZBQLC~QvRa_Yue?TQ!2>^2U
zV0vwKH2}TbI>%$MZ|oL@0J{*eB|1h>heP={q^tCI`1d0s-G0r7y@JN4nJ{_iBa!y=
z$ynra#&-EJ^Or_>ECw|<y`zln7(`bf8z`l}^!xWClHGp!sA=HoNYe9VJg_Bl6i-I4
zp%)#!G`ckmOAk9HAkiotJ|)lzxg2~GrVe49w%Pk$fWi^S!zT`!h_hh;A;L@$HidON
zK`kj<!1#2qkEw2jk-WAo8Y-VO-H0dliJn6VZMGAcz_#338`aCNOd?#7X!XW+U*6EC
zhXyUvs<pO<-Fm9n8>w+T#>#j2qu5OStc<|jV(P%5MAJ~G)#|_GLT^-O=>*IZfXKZy
zO)0A(K9F?R)|l=F6TRD36N0ajO@BvK-+Eko$%AmUcWMS{+0yJpV4$S55|}#`Gl)b)
zEV4nJg3Oa{4{V$+2Gq0;C}Gcbn`4uzr>~9rH#U}$2iNb}G>p7Do=)5EZL=>DO<w5n
z|Gc*17T4i+57z9q!tqUCtZgRexm^KETkS34vo>x7!v?OAc~;%vBEGos9)GmuvQ;NJ
z$;-ccZrJ0y?h(g}?l8$>;J<DI|D`m0i0laBhwdrX0h<#l3JNivZ9~qAY!paX09*=C
zQnnMM8LOy_5P&Pw!1?CJKm4ASB?qfuQchZr^@oqs>WM|#TbgRjK<}<pEZIIrmyqdx
zWpv|kI?>+Hq4cqSgqzUezVGv#Ab&qIm}m+$Y)-T%M{zdRxfRjV2E7L`CCb<CH0S~4
zJ{^X||0zd~$Lhlh1b1ZTKm7}0xu|%e5XtQb%%FnkAEM6LnGjLNoc@_`Fso@&5ekdz
zp?deWrPZ)5YXM$JCGJ6Xd+C924Z&SSQNnNEdFnbTQw7)b*cM8e`tqvyE{R~s>qLDq
zXb-lv6~jGa82h(MxpjYaB$%q2G-fv3a<v~!*?d=5whlr_*8e!Fpy)Ob(;(9JDGcwF
z{*7Grl)oJ@xg3{CAcOv_1B*aC+&<z!apc(E!CE~g{nrLz5NIGpPb3g1zqC0hk&i&?
zfp$<y%XdlZ#!$p;aGN!??&O}@Sk4PIP|*9p&T!xg?tU8rkJ$p)`}Q<;L>i|8?iMH(
z=mmy$yVZ={BqW{H{KzqvkhMddA=t!+w|kRb!y1ek!J|f<$JgB*4c2P)z<nM{>|xt_
zbI{piuBW*s;VV(X?#msZNTf)N#-p_7s~A5}SO78hh1-Yv0M05f1UcXDro~T+o-MJ&
zu<{QfoPdW$`UVMV?7Jk)Zg94a!_IHTn6>h&l#ir`jKc-Rj`7LPKpA)klg)<N+7^sW
zgniBJn<cvgPTkBcEO$K-XRMvArY{a7p12Ps+Qfi2Coi8?rmUa}3ZJhXgXBqU$Od(T
zb-FDvf`n7t7i{V7xvbVQV*5JxY!3RY5kwI}Kqlxp8>FVe&Z390M8K+RCg#2+X$2CD
z^$=V)kY;qF`bzo7>Sv_t_|ybu1y-X$cfYy{3PJMBlESB?D`>*5*BE)JD4xcl8x=OX
z`WI1bNcTqM5p<hqr(zf&^I&rd1Fa6U5urA4fu*QSPhfUfEHTg#p<%@{(8dicDEasL
zbB;{kplNaJoV0aq^6u?9<LcQPY=}VUsgK^9vYx7qcD3Oq0{m`Bz{C9J{o6?*I-?xc
z4k{s;;*+ocYpp!7aeE|DOY&5_v(daRS`TTe;r*6xAhLa9<)iV`REixP8(l6hDT-XL
z^kc}mumrpoA^jDF%t6#CCy;z=3l<r4WVnWoQJIx2>uzf+{#k6svdZ`4H-+;bSoqs&
zE#V*j2=-|n6d%@x{oZYObE`5kBUz02NjpUt7^YS9Ps`kmq-zQt($*j>0+a~|%Lh}v
zopH$bE5V42clM^R2*E27H&XtVf$&a!#&GHK%S)HDdtVcb^dC!J6i6lm7bTDNM}n_$
z_TBJEjoNy95|}-bR5Ih^@L&BnG`+oOpVDGG3jpe%j@FJ5C`15Q9Y8qnRwY?7U@NZ`
z#Nr|}O%DIGsw4Te*E{5C@-Bu9@9gfe(WTjFUue*0UCuVvUEHP%?Go?)LmI4#qIHql
zNYj0~bxUNZEpq>&n$$sWqj$)Qhx?+lh)S?~)@y`@#pSy;)kRJ2mxuOyFVTd);gY(r
zH_~)@Q|cL!wxP%a-&M=O@xkG0-B<S5VMA2mCHe{DRN^aCXf77Dj#LOFyR;2s>sN(J
zrX64IzzOSCQsZNY@%Dp9h=7)t==jKYkj7FV84f$`E<ZNLTw_aPV-u<>BQhFE`YgWl
zX-McywQ)GQ!-ArHiI?AOv((sPP?Lc65l^t9cv!z$f2+npkOULMP+LRqpktSdGRI<<
zYyaTE+dg>P4Hs|QSm)Ug0Sey!G`+4qd<dq|FYLQ}(+zjral`QP{-N!u@+XtmbeP_K
zi$)639JVSNZpXK{0AoaUZivrMR?F1;;gLT4+wCT~n>HJvJ=AnRZ&T_+a?tZjQU#I%
z9n~b|I^V6K^0$3)<O&{Y-C#1$h7o?CUW#xq)jH5v2T{~#wl(%d;_Yooiiwe6hgBuU
z4%CBxY}?nlS_dA9p@bDiHOPOd=4fcBHSY^sQ1&&q5{DIIiA%ij^XsT@@_IaOv#ma?
zdy;MKu}C=5{LM;@KzO(V*_Q145(WVgZ^W+B95>z3=2e))Xd?p-*=PN+EE)<39Y7p#
z%oFXs`qq{|nku9Gq_Gu%xYcle{^gHl!nmiZl7Wy1cHRr@5dv?IqHUx<hGRV;;EG%o
zf|?Kbm!&Sq9qepvhy}`bBF1V>(0m<RY3kq6P}4-Y<)A@wnSrQx_pGz7h+lghc43kB
zQ90Tugigr_o7<4Rkh`#+M<Hu%zUCQa1jR9|<z@AfW$oG5eoLqEQuY%UfPM$DVh*BR
zKmw!@v;hcw8nU@jBsw4~QVIfrQ66T6z~FBJ8UpfA70U&r1tcDEbrO|mI%VK6#L?NY
ze&{}=$rxPf<qwhE?}xP0g2dq}woWCgj*6$Vf899V2U{$yMw6eB_(K7PHHfg|;CF{_
z?OVsQqA51d`lmXv%4#B@9Wk10Y<*K5#u0mi0*vGKi?3W**D8AqZ9Pf=d*MA8!&Nd%
zdJ@u-0E@zbhzRc>(vrc#QSAr<UqOaLLI5I{f2(N;SiJC&?uAI*$tjygPSxp=h3*lb
zXTQhIBS%aao%>}%LuExm|C1`~byM~mrcTyT<!4Z3^GJlYg+K%T<IFd>U~h)baH9he
zYUjcZq0x@nBMlZB201d05_r%!rCo6>6YbwscIumL?v~y4*d{yJFjAYkuzeti<fHAe
zu8xDvv7Xw)$i&=KE-NhgQg!T7Jksy2ec`4+{qB}zyepyy%)zE@$(q52ZSbXv_a+0)
zyXw406}Bv@<Gju0(4M+OUlAK44F4M}OXxQShhH@Q^nOGw=*Mo}eIpc~edIpsEA4;V
z@(aZyqZoP=A)EBd_HtIrTSbB^)Pbx_K=*8Sa#(_^xFD5ZcO_29lf<Ev$LL6zC!s!B
zPPUtRU9u+7bnDA+Z3@&RcdLFrzv^h~1M0B@79<r1X!G)5P5<7#{WXJm)xR!vOsw`b
zg}$B!9FC&Jq<|w1LNRI-YA+Tg90lzg$r6A;Is+PqDynh<(E;210A6;waj@|lkzQYu
z*D~vZ(3N4Y#0Yx8f3av?Fy`yPHjCKc4c&GW6(jy8Z{QLW3FZzP#!GPr8R(eX(vc?k
zQ-~wb5d8!~NqPh1c7VWX{ieXCv07Mww<YjX*t=>|-WgCjt@7$nN!weutK-a0mq+&w
zbt%nC*U(<Y+>}$q;w+Dj?nuWk&r>;nc|859wcSISQ`*n4<2C876vpN-s9MRj<hmPC
zDI5x}LtcQUPO)4=gIh2zTcFiP5Gjb>bRz-r+qQgIZ6O4082uwgr^0G$?3luCu+%!6
zBCKJ(YKtz+!Rqszas?dO+SjvJWxe0qgRQEKQSnjOo|0i96k94}QwkObAG12G)xSQ3
z6iK?H_@{o3tlmIjNx2nVy|;%&>gyv2n$2{bdBQttSuzIR5W$gv+F>pq@qJ4lRPVf7
z9iLbA!le5@s_xh_{$tp~{3zsx3t%sI1+Z14!072v9f48B5RG6vlZ+C90f;RiO|bI^
z{s0g{Yy=sNIDf;M(#-&I2!&X%XxUGp#*}`uyzFW5H}@jc>X@gwzPVGHu=q=)I<VVX
zIY!TOt$d3&!b4An1|r@ES4-@zi1QKD{mmY{)!*CfZ^2s;`8likJQ~tAb)*v5>a~xN
z^IUt>8yUbmxq7El!usOS`9F?0O&<Y|j3`j(cm-G3MlMPg6|k?ONSF5RP5HFK1Pl%#
z>>U%#H6cU65KGz8hGCHN2Xbt`=L=uZy<SK6MY0-YOzI*Ye1xP761G4@Db^+y*Qzwq
z1}j@E;O73gK*_QGszA{W#~g9wClv-n5h|7{y8zqE(RzgJqRo9EDCk{H{TET+E`OMv
zu4Y+`t&fx+Av4$d@^?rRi_Q89e)7gb0ctM|3Sc_`4OXjT%|!be)CvM4<kNF3AqQ-e
zMzGw&R6+%1AW1g3OzCxPHS^dJg6$`5-=k$a-iICLgRI&~MNDY}V5a^gtet=vki6dP
zGw-n1HWoPH8)yG6206>sHjr3NS_u|4F+zj^xrGqb8JiQdyG>LVMWmu*hi2O%hi-h)
z;Y4$DqG8L1hMH)Ncj&fQgM0XzLmN69>*44r5){qWW62M6v|KdW)!fq@ZQa!0z1d&W
z9@*Ovif_BLC1Gu9KnOyr>Dz$qW!fvEHqrh<$cbo+;5iY>l}TDdgn|I$L0ijY`b!*9
zg@RUoD}vvH*S>Px%iLaLo4ou*PY-ZUVBqTK9TMf+1<XWPK@rh?>i7(GWGm(k4_spe
zygc~ydyepJy5+u!U2^-CSq27yA6E49c6EG)I#OG0IhA-~6Y>X|pAgN$CNKzZPV5{G
zw*HYAffj7_ucMMGavN>-48_<|jMYbe6RAI-8{TaSRd0iO@mg>t-=<k6X3x}5ntGrR
z0M=ti%kPXNlTR42yu$A><9bbd;~Iu1Td(uAZ_U>HuWDb4ErC!2Jg@spT8D6C<wpPr
zANkX*bM)7c-#&tj11Wf6?#CKb%!mRBAj|~PClf)onLS05p}?!+lNF^{<)O*an1-9}
z89vlfQ+{tv%c0>LhHgA$nOAsfJXe_3Tfh(oNkwA+bixT_iC;Qg)6!Bid?~*ncW7t<
zdFfM9rjVO{Vdyngb+!1@;dt8HjO{(eKb=;-l*r1X(K-yRnO&~wd$4OsAy=^k)U2!B
zP4=Dp1F^AK;BI@`0_)CFu>gD8tC0a!2L;D3WR-`iP8A=v;^?O;T-ZfuPlaBSW)w&d
zyc~RzE6}R+{fdak2?wKY1w<<GW-8~*wpAJI+Od(gUoQ81^QPrBFB($B(2H0|aGRb|
zyQAe7RGm1g&zCj#*LgxqR5>^72?fkCL*It?r0~?C8yD4{>MN_tHmsk<{4WD1MnE_1
zC_JDH)mTx(J{aOv4d~eZO5h(`rZ3pa1O{8fl_mNQM+#TyTt*{C?Tbqo9<s+fD>vv<
z9c%U%xgK;q?0VewMc4OSzi^#VTAE&Lh+r?wfmPxbX$h{);`z_ljNa}0X9wN?v(KOP
zy@9jO!Hv<}R@!sU{j-DqN7mQ>v)^}U;_CYo>z_a8duO-rtn;(KH}FeZ@rpBDI#210
z>pU0FS5dv;ti$r^vuig-SFbJo$x``z53jxEe5JJ)o?gSaf4a2tr*DH<sC=lZ=J|`1
zsi0DsEv=Q$S33V2#@4D<Rj9hUcHgmka$uCaX!l^Bm^?wAdk%yQw60$<=d6IUR>;{9
za?bf#E4Z=(TghLFmZ@Tz)|S=i>O7xbEiJ8<Dnqu`w{uG6d(|a~6zAMp_w@M(t!n&O
z)eG#)<$I|i3{LrkkL>vP#N(()<Dd^v3-{V#-(hjM$F{8_#eotVhOym+FusmLJH6{#
zgL#c-_}VV$Ff3-ZZme9mY^OTkZ}T&w&gsU^1KpZ>pmL#7f4RcQXetI1$u41KV|18o
zB$ZhTX)Pd*fa9a>4I3pW%MAx7;vP*iw4P4$pc9~)=mW?i$Tr=D1+nc&LUao3;}H2=
zRLY?8i|H7L<$1*8iNF?}$I{Y&H=L*-UjK~3wfE^FU>r08+_-LYW8>yV_6kFnPm?}_
z*X(v1EX2Hr-3E_$_@l^;-BxE9dFMCa{ozD>cQmX;pwQI9(cSS0Z7k@$i&FC8#~XyA
z6~;gJ;hl|}uk>m!fTh?`U7IxxZGerzHv3*MF`f0iFFa=#X05Oi(UtxLygbEDg+(N(
z>L>%di&DfW4jHN*x(IPy1wUcG3a}ccd$g7EFJX&3!$r{D$IYFInf@(?SCdz|gM!cC
z4hybm$fQxj0(od*jV=8%iJc}_e0qgW!afZ{x{g9Jq@x0RN$zj3rlHL`b=K;5iH=m~
z-DXG33x&|Nrlt%0?HX%@X*RpSdfQ1$oRx6<^Nf2W!bi3HFKB8)qGEBO84%XVx6%HL
ztvgsk|AX*S>4Y5+WvRIuc%jm^O$;0nc{B`E%k@fG=y+`@&h0#9QaV(V|G1+p(uO*)
z^Bd!1ME#dmK<f{hjVAsetg7GY<6G8Pgs0fhfNh4<sEU)b0<G=nC|)zI9{Z#^-c)t$
z0~>LgUcgddBNU8$evBSZ5$qDr|G0{C9f4n*tp%&5%i!q~Fy(dBw;cq*&XS<fXs$+)
z$b~fmJE9|m8f-*Wx6folZp6SaH2H_WaSBBsj%5dr9pADqb-W6@92u<Nh{{?mETTT?
z6t3A!mB-W*_YICg_$L2wd;P><cl1=sCjeYbaEgTj5LJdqH14)<n1bCZo`+0DY`G<Y
zei7<L=vzC~vg#aQJb|>ck03qB5y&e?48se76DSj{_U=-_<(F1VO$fnL3(Mz=r1Zj4
zpY2eYfCf{+v8X<#X=8en^-<HyPcE5y*zdW}!Nse^f941P<n{UBNg(*L*PH1(U;iQs
z`_MKk+Pg|GkQ)R2`XBZ$cuxOLulDLM=pRc}I#_;^I>`D)|Kbi}-Dxz3z&XS#+jJNj
zCiJpuo?xtc*13(aoh=6}KbXd>tB>V)o>lNmYToGT0ey4Ur_H3%=?WdrxXu|70OKli
zg855PH5^vfis*FZYGphs6aN2AA7QF%i;wG8!e83Q^4R~bk1Lf<RwkWrhz*bLW^aLH
zGGyoXI6pj|#gjv~rIa2HU2R~(rmNr?0LV}uV)GgHE)FR^7am!V=3|Twqzgi@H&35#
z4tMU}xEW>{2=-u^8#W=|L{reRg4Q_zSv7SiN|C~Q^6Z)3Egjy0-4O(ljs`TuZQa!#
zZh9J?w@6ezUti(NTn&^qqtFkkwjPiEHGQ33Lppu-gt4x_rmyT(Ks=QxqA4pct*z6)
zxU;sOAng&`xrX+;E`sfj3oEb!bqO-tAr%LONb4X4AJluuimZM+&Wm1cGaleq?VQao
z+6+`vdMMQ|OizF#Jy9na>2)F(m*4ZX{Wh+(uC@eHI+<)gH+__5YEMsseOA++1hUR+
zS~s@5M(&5t_=<9V+}I>!G;Fr|xkzpLR39t^#^~^zufs*fv^H$8U@phM4pUs;Z3jM$
zN1xQRJbt=0ZR`D-M)c8@f{tPo`^1!ys#^045(9nsfQs}coh_ltju`tT>37S^IG#KP
zH(-zdSov-hO@xi9Xe4YDH|TF?xHk~!4evabQ`eVOC7VaWcb5?NZwO-!lYQbfNvlpj
z7<RvG=@FzBQ7TL~!e<D&$9{IvCobyP5sm~p1Cj8K_vy&#HMqBQXKC-CpOTiq%*beH
z9vnH;F+90vBqWhP`xS}APhp1Y{}}wqgx<J+Xw#;l{f*#}VCT>ENC+tcA~j7&c7w4X
zA1u-pJsWr%+M>2ZqZnwWkiO(HqNyDM1X2@<W7Ba_F$-{Z(#D&+x9x2I!*}CISQof<
z`w)wF?P@^eV<=lUHP(&~kHT(AG(;YUB}toj%@y^{O;#+Hyzt79NNwI=k*#cfB5`aJ
zzaY{qyI4~kZ6V%eMcLJu;N0NVq9SrBS!#W*ShjTiUPQ}!<PrO4Y-tIhv)JobQux`M
zTEVNJ&o<zj_*?d<%l4~+{ST~$*Xft|S?6E7a@VdaciDzbPgU*(Pbe)C>%`?<SMF2B
zD2yu~f*&hI5xztEU>ZNN-=&?_?W85FXs%Z28+}*d3rES{z$)v?R;8~+7yv)o4h{wi
zb@qVTRXk02qWlQ9gi=ajK8BEFbIR&9zn0Wv1-n7M$S>8N;<UmHWNK!s*RS8ZoL74k
zUquyFFH&5gk{Tx^Fetr$tMc7YFhJ5PHG}p(*4(tA?1$YDtcEICR#%mWBQ~DL1`t|j
zf5PVr?mE0H_;hOhi9|~()m-yq?2G6Ns&xxgyl3V5y=X@=LOwzY??;V3A^MEy81op7
zhKE_oS-swJP6HTk;_Yd?m*8>IiWN&9CzP869vhJD2t&6v+x|?B0IpctHb)1GF4$Xl
zKuu05UMWBqiheh+)LF~I4rf+=mwWfI-R^$s4|l;#oPtjUZo<Jb=5P$<a9F~>@)s4@
z+q!!jOLvWobb+B#e8n#h&l$#&Rfn*S*Rakd0}t<i)G!{Ue+pAvU`xHWeFphPn$SHG
zWH!SEgA9f#nT)+FqexP-ngw`ylWiV$U})Y(7+kJKUl{A~cSIM;qpQ{+rx8!f74dEH
zLr0GWDN5^)Evr2&%KC!YU_Pv>B?uNOuBJJPAy@i<6+Vi#v_g(r<LXxD-{HTN2AS5*
zE>@8+nk%%$mc+^QMYnw`&|KPI80cT7wt$9>BI(vzkzH*B@2GDnzmYDD^!hf3mMO*;
z154{x2_8<KMCd0L^th{^b9+YJFcTVGrm#?xQIC5JyJB8s{`P_yho>zz9X(fL2@!sv
zeH?<@m}}g1+;tE7MGgd<1R@UG4Nf>2=`^T6z<vrXtDI44l|iN;n)#>7^(^MrV*%0X
z$M#(lA}bBr5eyMDg_A+Fwgn<M;vTR2=4^}`Jhny3EtLY>(e7*fgeT#CrU73Js|L#h
ztL&_!&&>kuj3FYW!A^4CXd!>F)mSO8(Y4oA-pibiz=VITRDL4ZU>Wc5`a+3N>Q{s#
z?#HsEUo6l2opY6D=n+IOb$b~FanqvFsASKAy`lX@2D?}K^pWZ}JKrE%jTFYc8EZ)g
z1wMvoEpMQBEtNg}4x%wo=a75~jR7oY?O}$W16{}RfpKvxs#0fG>Q&CU{TxC>Hn6@H
zU<2Z2X#QxQ|NJME#v3{bOs-AWP+v)tt4|J8+`uZXCtNDr`_o`d06kkQfVj2auWbup
zQSamd6TUjE1F1@Sp%a3W(`LiXT425JHhiq*lFfTKd#mZ^e$O(Z)TsgxzzwSKWOIW%
z)EMe-ofFdI_vpQ!tlU4KGz8^WtM8sxm^`fQ1$IPQ5Fz`-m;JjNZu0p2p8m%WFb8TJ
zq>jBAYr*{rI`x}U+=Vl37UH*kI+qAs*_-S~&;#!ALu#!02_wySbB##09Y9Pnw8GCr
z&V3eCc&YqC)d1QmuIL%Il3z!g696K>E0Et(ty`cltgw6{bsO#XsGTy*OnXP$fU<k<
zRYnL9+ii5grju~YcWZUc3`v#Os~Z*(zyH|bBodBa=`%<2<T<5}%W%2IV7HoxJ>dx(
z4ahxl-E)9AeqRGqGo)B(Jae`Z;<}i5AbOc$j^Ozfw<i(!VELQyu?vDPy<CZpgd>Pw
zwsk4QLo{L^znl2w&;aFj-NY(+g%U%sPa{(}GNkBbZ37{ag0?eTA=>um2P6grQwg9^
za}e}%L{a`x7O(CQyJrjtx=Y<E|KiUL3?dAxF_egZ4|UV1ZFKaaZ&W&Y`V0txx_I{=
zADoYB;y8xT?EyEniZ3ht6z%X`h6u!~u<LdRXZtDvwfU`zb$aDG#l@pt=$N8eFmAwD
zLK#OWRsm`wYj;FMUQouv<LZc%o#4RkQAfp!`RywM0^LZB5q27bbIa+`{E>~_6G{Kj
z#}we)tLomWju)!qwd#0W9f#F%2f}LM9a!N=j{ENIR~*R?Ziqh6rdIsAbx^UTdkWdl
zv=Q45{RFIxtJG+=JOoq(DU#3&VX=x2snRNAbRb+*cY6eTw9*+g_KEkNz2ZB39i2hD
zOKv^zYQ$X*nCwP14wtH9`E;f0F}5e_W1G~~XOq5oo#w64gb5xx=J(g#h+u&c>$$4;
zm#Sl^()pgw-x%r&WaHmE_7~)Xmm&*-5H`JOu4qwjX-3uyd&YQW#uCJa0M?zUh4l<<
zNSh(Ed}nzdf~%B&@%{Mp?!A~EZ(ZF-)%-xhH}#i!UO+!f%)KG<66Ojr!|#9H6Yt)|
z;O+j<$brEP!HX_$R@3nYnkf8};p7TzJ{>ylQv7!SmaMm|ao?5oMs1}{0R^<MSyS?z
zv(h?jhDqsQR4@_6+rko%I7yIwbjQ}w+5J-bC`g8&7Q}0+-F!-RPdW|MMvM(K4SzNO
zvt1O<!=1vaBx{%akxSINyo0)G#e+mGe42qc0)DeIV36&S83@L$KYja2^@WSo@md&W
zfhihIwvWEM=I91mwz2zTf7R>G`5MMl$zkC4D7M-FSuP=J0O+Dy2cE(plJ&zbplvz@
z(4Lh{vtmW5yv5o<eaSCpfbWoui8wMhX+e7%Jcx*cTE+M`qu9SssJ(kE2>7yf!XM|W
z%I=pQ^naPa`^yk`5#htJ|8+8K8fxSIXQoaP4+0ynwx4*r0njFBlM!CaZn831R!U*A
zYN_m++i(mxU6sAiVn?@Scb00>?g_0L3XK4@co0qlXuewuOYN(kI?vTgu-TzW_w(!E
zPNi5`_D0QJ8!mr6T<g}_kk{u&R;X`fc`4$1C?d%4*{yxZG%xL-2_GB8nKWW;bb^PM
z-I^y{TO0Oh?qy6Uj0o?&m-<FD>3xcC^}-_MZr6RTSGzt3Ee5Q2oc_c_90uBcjtQgL
zA$vVTG3dZVw3;iR>5dL71-n}6itdt8Fa$p=ZkjjSZ<Y*$z~^F#tJpk>;U#lnpexh{
zs1x3zSw@Wt5~yhS2=D+zV6f04we6!6Nfduwp+z(pya0J}va8{2ri{SuL+mH1g=5Cf
z-b<x_M+37sqU0D}pWe`AA%=3mfbO6^Y8n1t{||ttYPG*a0qVu-$TrJMdw2Sp5FEGa
z3rHUpu(}#_A3l$O{}yZ5!Mb!^fp7U(0LGDC5%7)l1Ofwhbn~zbNRQBXdwrcz-wBW6
zPN+CK6ikO=_IF`t_t$~^q=IrA)|&!>o)KRFQBqiaG+KFogHc!C4zp|zz8>b?cPM?t
zih^Ao(%L3y_@<%xpvk0(!t^UFNYkyR9P64`V?cL>19$8=)(nO)Su}@;Co!PgDn2|+
zw`q5V77MKjG9>Cx+^hh2)Zedk0KNziAH~IB2ie`~4m21M$d_Pa`u+Zcuq<w+fRG1;
z2m4DNad55ZL^*h(-PflGJ3wYE*<KT*ObhoafWNRki91V*>i7BDeUwfiSaXN;$o<$p
z+^_*#g8Qpa2zJ(Tz}Azebp-p8BS0~<)(I!rdq(7qF*I^srj3+y3J0v(ETuR*uvatp
z!enpD^d`;dB&Yop-+nd;f2@sM{P&t#w$QkDZ{s$$nIo$E?-r5kkMnn+I=m4%pZm<&
z6#J#mK|Mnnk9PET056lz2J~YefuHVn@;QYCLKBHYwoM<k8<PZmMh~dnDlP-O6RBEn
z?l)3V*4o>kv<jf*P5iv3jmIE{tkku|cw5b@xzu>40SjfLQ!@;0wfF+t@nF+FOblid
z$_|!lsW~kKo^4MGak{4Eopl_(k<MdUom=m88-}}6|F!MGu*v4wl)b^4-Y)_j8vN-h
z{c@&8bt^&`L?sGVNlX4j`w>?l*-p(rT-!Q`_+5jZVEo5_tihyHQ|&$DYN@S1AmxR1
zAk8M*dsZ{0D+qhxUxKEPp07aJ5i9ycWfMqVRPb{ZfCGR8Ia>W6a~3TQgZM2QV{u<7
z*4jPLn=qor#;1&SgnTQAmuf8hY388{|D6weUT44CrO?izmh=scAHJYBg*arPeK$Pk
zB41KFBIWOK_b+Ex&i6%1+-=*@65mEr6=gHI7*tG=m(~41vU|1_TUehYsS7Zi6&||X
z!D%qTRJct8jZ>5er)%lLwstNBJlCk8I>^WY0^;$7FI2e5mZx8+c+fL0tQfUy+L;TF
zP<<Q%?Ow9P@ASrF$RcTV^(xGBvyy<N;zs{nUBNB__)y=O$Jo2kpUsdB##~wSM%jwO
zNS=I=Nc&saWg*@Y?5HxoAj(RaRAE~W#N+r`!4qK+-2sjz1AG8@90`>1G%kaP<MDz1
zcICJVi*k04KYGhmSDxa$??_LIrhkbJsl<+O4c0JXG}Jw@Mb!8`o~>IEL!Vg?n8T3}
zhoa(g^S1i>ts~nGBz-=_)7+c93VMU3D|)ZmZnP+FMjcvYGEghweB{%TAC4jtZ$oI;
zPGq#v5?+5OT3gpq3zuq-5jT>v4XHgh?)hk>6pNM!-wNcSdYnHGW1?YH;FA}@Y{Ieq
zymAv%fz31+nEk{60_YBCLnLMs|1}gEh=s4dBog-W?dPD@R<9XiFAteldcu+NN4tiW
zz-y02eB?AY%J%PX36_7=eKuOH3;O*_!Io6l#NEqv{TCAvVXkGzCoYZl`k<S-5LO5S
z<U_KH9QVOeK@(1sN!iEFBloSgUpf4{Q8zI}PYsX6ZvOsj%V}gZ#Ju?Z_28p7ZAd(?
zo_*6T$p2pc;Y&`T#Y9(@Lgud84c%^iV}1QbpY?n{VA9Y>foMNY+%F!#rgOgT97<6i
z3<PF6uXVHLW|==iJo9s${yZD~i37e45XBn-^Q;0>D3AQz+R%CXf~g=SS_1SA)SZ@L
zg|!=HY^My1kf;1(&?P2(!r=T|dN-VGW%c!`{xINYQ**NdGUf_|e%&-|`tYFOX1i7E
zi+Zj<duldzH)M8S+%d3=+`A6U_@7b91*-fN$tKOtmj!LV0xyU4q?JPa2$4GMS}3(4
zv9qL!S!HM)>P;-IVm;4cY8A{8TRTwMo~f|1><3`qLsq=K0U3Hjme&Z>U8MVhKK&w`
zd#w=88`|Ue^%?8x1Z#rTHOghB#XGJ9^zZ0C!&-Mcjw^;wU;hRRSE}C;_l82=byYSi
zjC9Nv+7;YYa@}umrIoE5q;{H642_M3&KVkT;^$up=W_n5gS5)~14niAIjW9A!1wDA
z^~3I&&l@t;&`_g!<Jo-C^+pYi<XNL+_b^c7=XZkFHT3T={qNlM5qhiBb2H@iIS>Bm
z>=ks-uqWf3VZvAZF<+LmXuWXg56Os6MZ}Xg!^-;okQ1wf8JoZTUkOJ8Zby&Rp~R#A
zgE!hk-dcgi%IdVYsQ$+)g%>OM%rwNKaAgm>t>};ywuW#L#(6Z}5Jc!*GpKI+LRGgz
zzO~!mRPV?t24d`g$067b^!J~?0qfdV-GH;&7gO|kKyflei(IaHb|ra6sQ;4KH?+$P
z-cGkWWsX(xcBd?$@A`MAEM2wipi|ad?d%b!>~_Vu=9E3I&HT7i_PP@MD^5A+iin6)
z4!JZj;FQCzS~2gGW2p16Q;ws~7omY+l2jRk_-B`q9UC0KUFOK&@t{){ux)&|Q<koN
z7In&+>o6O4%5K+Y_6?`(ab3;powC=}!{6YPgRXY|&rUhy@`w(n9Cr1KZB9AnY8Q7n
z<v8j*0Vyiy$|GJ-0sPLiYX%;gl;L^;{%$GI&zx&PUAX{RKr@IBoI{?&jLWqzmp@g=
zPS2E5ofBQD3v&yl)CDIp#oRpZ{jrBqU=it+1-u}G(owu@4j-MwBULX*4W%wDWHPCv
zxw$NERn>B?{PpiA=ClXyX9GAw;rK_t);-j-WuS*@{E>eD&$=*x4{uSQrdXadx_|ur
z$1yYojB{4CU^{A8H@(Z{8W`Bp)7Q5()w!-0$1{auHn*@nW%mH}DxX+CaYL))-(5Yj
z^e$)qhG_7+ouNL4^*~cab3YER>>|qZXjxIMi9AYqWSO4>g(~1q7ORHVOA7Zhszw@T
zlQ=KoI!*R0>Xa}Nu46Nq)QQY^M=>>@E0$9ETz+vbT}Wjoato<qrj$xAOr}b?+}v!o
zgxa(yOZZd~3}`R@pHiPG;j`6?vPXS>9@R^wd~thk?-Y8KwpV4(L=HD9W0HbGwED^Q
z(|W%3@qe=p&-doaI{&|I8}04Ue`mf8+<2b<#E)>1xi~Z~$dbyC5Rd6dkB1N-%*!n1
z!#-Gm1!4FeW)X@X#NsRgn{jwABfkY)%OMvvu@q}&Ev%JoU~R0Ob+As>#WrHIU^DB6
zvZ<H#u`R5h4X{Br#D-zeuoW@Lw?qHB6C1*0g*3`8V0+m<wx1nf7qW|>V!D`J!Va;+
z>?!P0_EdI+UB)hFN7*rU1-$ou;qtL7*;VXnb`86hUB{lrp3bgkH?T35X5(yvO|lG|
zV$*DfW!a5vmd&www!m^M&u(G`R%9i%$d0oU>?AwIZf4J5x3FijTiLUqi+MJC4l-Lk
zm)*{u$L?TvvgfnA*bCU*?1k(e_9AvKdog<ndnvn*y^Ot_y@K7(9$>FzuVSxeuVJrc
z55oWWb?o)*4eTNIM)oH5X7(2LR`xdbcJ>bTPWCSLFna_N<$KuQu=ldRW$$C}XOFTE
zun)2iu@AGqV~?@N$v2UG6p?g4#y-wI!9K}8#XikG!#>MC$3D-#z`n?yWM5)mcD1mt
zu&=VOv9Ggluy3+&vA<{EX5V4|z`o1A$4;|<WZ!51#D2hj$bQ6r%znat%6`WFnf;vo
z3;S303uruk#r}=`JNpmzYxW!VpRlO<FZSQ;ckK7<53GzRTeJ)~M<zs0arbptFPPlJ
zp)KV;4jnWP@(>U62#@j@kMjht;k7);>v%nH;ElYAr+71O;jMfFZ{zK}gLm>S*PVPL
z-^4fbZr;Otc^}`x`}qJL<U@QI`CVH12!hma<J<WTY`O2^i08~l`2~D0-^cg!1N=gM
z5kJT;=9ln8{4jqCzmz|fAK{nr%lT1$j9<a8<X7>l`8E7nejR@re>%UO-@wOsnve4d
zKFKqDicj+yp5-_4Sw6?-`2x@JJimz-coF*cyLgE&^5gsjKgmz=oB1>NE&Q4MR{ku$
z#GlQd<1+Yd{JH#g{ycsMzmq?o-^E|R@8&P$_wX0-d-;p`OZZFqef(wo<@^==e*OS|
zC4UuvHGd6%Eq{<N^Vjj$^EdE^_#63~_?!7#_*?ng_}lqA_&fQ#_{01W{%-yr{x|%+
z{BQaD`1|>z`~&=h{6qZ1{O|Z<{Bgd*Kf*uCpWq+kALpOopX8t7pXQ(8pXHz9pXXoT
zU*u2nFYzz)ukf$(uko+*Z}4yOZ}Gq9-{#-p|G>Y?zsFDWf8^ii|HOa5f5?Btf6RZv
zf69Nx|C#@s{|o<D{tNy~{ww}({NMS1@L%)a@c-n$<^RS1oBxjgp8tWD`5EC73?U^2
zoT@eCRn~<e5Y%3Hk=5BJ{30NNA|%2hBBIEq92W^uBWgub)QNi0AR0xJNWne1MYM_y
zqD{1m4$&#P#7416Y!=-DCWxX>Y!UrpKn#i@F)T*JR<TWN7dymGu}kb0dypjk0<jkf
z5%!A%u1Cd%;v#WSTr4gThs0s=6mh9|s_P}<h`3B#E{=+0;tFx4xJq0tt`XOY>%`N<
z)5Z1T1~DemVq8p!Ns$p#Vp`0IthiCkia9Ya7DP_u#Z96hilQVI#c^>$oD`?T&Egs2
z7V%7Rt9X`J63-UT5x0rwirdBW#2w;J@qBTYc!9WEyinXDUL@`nFBUHmFBSKRmx-5)
zSBU$?1LBq9RpQm+HR846L9r}eCtfe!ARZEL6mJr57H<)66>k%77w-`76z>ubi$}z}
z#e2lxi1&)W74H-87mtb$h!2Vni4Tjv6OW0<#ftcd_^5b7d`x^?d_sIud`f&;d`5g$
zd`^5`d_jCsJSn~;zAU~XzAC;ZzAnBYzA3&X{$6}rd`J9)_^$Y#I4%BBd|&*N_<{JL
z_>uUr_=)(b_?h@;@pJJn;$Out#4p9K#J`Du7yluCEq){ZQ~Xx^m-uh-JMnw*2T>Mh
zqzmbdIRe*W69-9eb;$ZA)bL&;NA|&-H-OaYAsLnt8I>{YfF)#&td&VwC+lT{Y?Mth
zC7Wf7Y?T{in{1aIvQu`+jdGLREW2fo?3I0Ti|m&Ja!?M*VL2kV%58GH+#z?$U2?bF
zBS+;0a<A(j<UYAy9&m-_h4LbKP+lxAk%#1A`4oAne5yPmFO!$cqw<)%LS8Aal2^-X
z<hAlTIBh*$UN3KuV=^tr<%FD+8961V<&4bA8|AE=lk;*x=44*pBnz@AOL9>jmnY;&
zc}m_apCNCN&y=^yXUQe`Z225{n|!XkT|Q6VA@7vWmv_k*$h+kW<vsF6@?QC3`4ah3
zd7pfle7Ssuyk9;bUnyTDUoBrFUn?J!%kp*d_3{n!A^Ar6Ci!Oh7Wr2BHu-k>4*5>`
zF8Q#0M7~?TNB)g`ul!s2KKXw6sQiHZp!|^hu>3pun0#EW$dAa6$|vN<<j3VF<R|5)
z<fjoh>9g{4^7HZw@{96G`6c;f`4#z9`8D}<-}GF%SnQrp7fRWMtTw+`%ucwAnRH=d
zMw`J;Nft}#f?O<S3UVqtH*b_?y1{NuXLxBwr*gJf(k5my6SG<=JD(|f?Pt65bBjgG
zDbHsY7K>&+cOp~h&P`3Zi`nUg^qiQ;VQj(nYZG(1iCJ05r6-Na+=+!b6twKZc<!Vu
zWF~X6cxqw7pzn02=Sou5otjHed(gbe{7h~kQ}i6q%`MJn=;dCgNG~#-@?ze7Q(+=E
znbF75FZ_y9dRpRNQI6+wvj!b70JB=YkX<ObC(`qoLRu0Fi2HMs?rbSNm!0sIGAB#j
zGZ_+HJgR&mJ6W3X;NJ8?_grSGWZA`u%t9$s@Y*Lz((&2l8yAbE?9?eqebIA^rAbtD
zXBX&4JD#1)<h1O3dOG8oPv>buW-|qMdXgTJn46N!OlC{IVkwjF9#2oqo=6uaeN$<S
zO6AO`6l8ubeM-xxF=?2+Twb5b6{xzUs#i|bo17CZb7N+rWMLkU7jkxIe3cW`124^I
z_e8cZF_*E_d{$1>tXEFdLU2w3H!Wt+U%bwK%$r@9$~k4vL?Kr!&ZM)2q8Lvvc+!PJ
z?t~gcuU%9hHSF?Y-nmb6s^O_Z#+^Bt2cK_%HP06^#bP*fa$+t$pRW3xoX$>RwPey$
zSht0Y$ehZU_}5*;dY_3_*Dn>a>4oXJjD}%b$XFBUxy-_3x<ISVUBFjz^E$pWPm_h|
zS;&+;m7!V8uMQctO)q3hCo&mK(o8O&&n`@NPXK`2Q&>Y-5B5)YE}vO2C(sF+xB|XL
zi>(_^7II=Xb4mg#iqtRqUeP4r>z+x^O_`;c#rg3PCf<#j`I%Gh#k>NPxy*cSK~r#G
zsbhEXrbQZ}MF7&otak!1lr2$9CPkrG6f={P#`xmg+)S>p;GM_-?5DC5=~5;*gRXYx
zb69EJYV-qD7ie|+s?Hbl)px1yA$zXusa7)?UU$WQ<+@9Y`SlN}>7Aa-jc42^3Yi5U
zpi;UxTXX~M0G`b8LN+rskuGNJ)lj7Q(FiXU0Z<FGghdu7HDHF~te99VVIcFT%zQeZ
z!J5tHWifp`<F<!JV&IFq!YGS#_HS+ukX6XeW=b=K+~V|%xd^Z<;Jq0%VjOD&GoPK%
zN`=LVSq}z0bE<nhJ2&USux3i#)N;cvVzJr<8Zxh4RDH)90*+cJ%3`iiGU=cm(^Y9P
zZ)6sZXXdatB)*)}rqS9t!agOvm@Q?15e!U!Au~6Z24DkpO<<jw5+-t7r!nZBpY-Bt
zX(m@hzcWU0F<YXslH+*9Jpsg+$r!kqCtPNx=kZ{AVIt$6&rCv2_D<2u@Rl1hKzW%=
z!I*JYkq!6uu!R(qpw){Q5NC=BZYo!tDXzXmQ(S#c1Ld)=sPVCj>OsRU6R<l^0H7u_
z#aSRQ_gp$pKWZufg*l9U#&gqRu4K2vYZvWtMjsazfI97^s1@f?SDONUSrGG?8GRZ6
zmj|T*tc~XY6n>&5-3oDK04fHC0r)LFhxId=F$<ae+$pTIIX{5OMlWg&OCYekm#TD+
z14m5E5V&C#N<wnpD(vDdE@A~1Ckoj-W_@woF1Z2om^CZEc=OE|z<f3{0kof`ml8n>
zt`%*3g~eqfr4Zq=ZV)11m&I&x2K_7m$}^=%1t(QOVDzkOYJ5UxU0lqc{U}Y6oBEV1
zcx)s>pr(*U5g62i6_w2wv&HV2wc>FPaLd}7NuR1v1e;da3y6^A#H>@x13c&yErrva
z6T-Dv;l+>*JNA<bR08X+Eat=O&Q<5k%wi$eP5gx?p93JNqIWU}uqoJ=3z!ZN0n{)~
zQ3I%IK`m%??F7gb6^Pf#7<8b%2NaN|=khaY)e>LT`C>k3pUvZgHcb1gF8~D8=>iy(
zLUzLL$+|0xc^kPGyBG6bh31Q@mU{|tKbMho5XHp>IiJfd=){?2k7vaA;`I6<B7pKt
z=78!ImG+#N$z<k0XtD+13XmA;mamvkPoVoVi>1<BCQ!jSl_^<Vz?-2BES>UC7t)i9
z4m}0(0k)W41aBgy(kHPJvU8JIfZ+R35c%{8Ik7knJ`RT>h~UI2a0vpl10L&SR+gX@
zG$zvkUaWb0O!JddrW)K6xx%DJl>jrDxqvDvPEk=J`<CL0EPFES-rLvHi<8-$T~zFo
z{YnM5bJ?j3$k@WP<-o&2t~4>@RpbD?Dd@aD11>CAIHeOCiHc?sI%9Ocd&abvBj!E0
zT5?7R7<qo&J+)W@W)`K=DbILzAvZz#$0C@n#c6XPa{@yQh?gfoS3wHq=q|qFAw+Bg
zGpGny5HB$!lK^;BM!SgYju#e-GrsX`p)@l|5R{(HfYl&Q0aPaKFb%*J&PAe5o>Fd_
zP%sd@St%~)<5_zO#uoubbGc$>5--aWbA*n1fi-3`XbaYZiAgFcUY&r8zC(N%AplvN
z$>zO^v=lSoAxfZn=!SYPC=I5x)O|dgIbkXxVLX!t3!4F(kJSp=ilsiWSUBZHPZx^Q
zV5c&LKvkJw%2L(wEdo9-J>`@=_6@pXU&hyRvl*YNVwby*uREJ@FJu;hw>|ck=D-j_
zgehPto2moEyLwbfF{@%cGf8uhU2p>-pGcpw#?vJ{eyV#4d{Mk|0!{#!f_N$1E3Vcd
zW-L&t<J|RC&NK7*(kUM>K@muuSSgUwY&V7i0B_~SiOKGs27{6JJ12_^>J%fIotQn<
zja90|p@j@ysVH=Jkx+kNCbw9yB{kv*Oa8TUYL9R26k~0!o|%eeBLd;EnKxRQHXm1<
z$QIG4qF3FR%iau9XjdxcQQxxb+g)%T&H#1r(s5sf7O8dPUp-Tpe(h8Z_1dXI{RV^`
zh%*2>5^+GMP5PyUSQIFMo+`FiEe|EWR73}oVk#76mAM{IPY0?_ilBn}3?K`FUC_Z~
z>ACLo#01uZHV$Z+3@MD!4X#4bW59#MGTVZp4pI)LE>j2c1LOc)sKnb0K}~n@6!@$8
zVk`0MV3=((0a4h-i`{CjA&U@UmXnY=eAKPg`<^+#)$uHCw5Uk|V!@JL#lIvJSn0`0
zl4ZI{99=yDSWentXd^NsI|;dAayp}<KsSRWFah%rqp{Z10!~(6SigwZ)un|KsjllR
z=1}!DwV>S?WytPen<4Y(bCX~!OMw#@PxNUX7=Au`b7u7%S_C@xJNMBeppA^FI2zE4
zyjfhxodC~;?gM5QidkTyJP4cNoD~gXfN2Ss3QtnWAQgbRL<`|W8mQb-!wVsrE_>BU
zc0tu8odFdD-s)DQqe#5Q1U{s$W)^f}Jy4F!<uI`}&cms~duLxGsv143p3O&{brE#l
z7E0|GD)Gc5$wP6Omimgi*gaEyay+*7eTP&L`aSn5H6(scUDcGxIhR#qupq$4VhJzI
zQg3U(HCA157%SYcKzaf0(~8vzD=|t91&NpRV9>r~%bRKpr!({ZxeO!}RgW%N_UU4t
zPD~O!m7wb<_y*#JDuZtLtN2=+f}{{5Z{Jy!sp!<}NU|iW8+ph|0L+r6m~jsXQ)W&z
z%wx*~>Ul`Uq)Q?opf?jb1%*P<P>3G|%UO|%AX>y_DrlqHm5G}x0qqtuK)rJSvbj0n
zdBQ5I=hk@c1cq~3-6XA7u}C~E!7O-j5(w-Qk}F6_fE%-@?$nuGP^u&QI+!Mi->M4q
zB$)-LdV%y&lMwZYUGPoia%&$qr*m^t>dW34V);*X=OK)mH!Wr-A>f0#ab}c=n59Oh
z8}PM|Ee3$y<{<4<dS#-JDNJWGMQDt`Bd4>I0?IZG|1!nUs+ipk*${{hQs`oVq}zOP
z5tKEsx}<HH$-j0^0<}4rg^C0mM^Q{Jq&4EaPx;ib8!%r2<+b@Z=iNcY)Hx?KTVUY|
zr0B~|S`}%PE`$ErqASqwJa{j!gZ${8kBBBTn09O3dFowB%L9=YBQ(VoR1dsLOmE^m
z*XT8#Jm_R*auH8Jf0MQKH>5Dri}N{}MZE~K1we^zueu^w^;N_xk7v_!(BY-$iY7E|
z8BpLNv=~ZPsGaOCq)$P~cv67`tvu500CY-4U*$w;rL>9MA|%Pl+yeA5ax!;3W0T<-
zD3I{wu%gM%2^5jw18k*D<<eqta(x|O%1l9{$BK&TgSpMjkz&f1PZt0%K)D!|lU6>H
z%L5KUP70?y`Rw#Gv>WM#S$82jJ`Uv)7?u)L3Yp9#Eq+PJ)}zGgZh+J*nEZUkr!*to
zgfdXYvd`vo$8q9Syt&Q#dhkG|TQM^J3S8QEoKxcO7Sf9)n_UBZfOSz70kspeHY`I!
zX7hEV*s|2!Dd>i%lj_6~T{3nhdd_}@Vo>ZNDEf_Qhr3ni#J;R%!Tt!C2&a&>Uj*%E
zZaNGgBE5;tl_?!aWc?+Dkae)M#Pga&%GIm~#!0<RgtNOuv{b`+Zk`zVxmiUZ!fQo<
zE#`(a7&D8chMxcz20TMzG1$k+Y;l6L4<|G_EJ(m;22h7KO@U!?O5hd^bq!e6E)=sT
zJ?e_$2<&U66FJDnxk9%>iIb)(6D#7*fESo6>Qi9r(GUsk$+R(@E&}7s=XEuGnW8lf
zp@i^l2@5P-ebTKShkhPf^IRTP%-QUTEO2CD(j?|wJrP(f+0~(nnuj<RT~8wH#SvK3
zxOJa^W-M~nIl-^jzNVIpQ(u+oo(U9Te?<p+$bi|$Z-IasoI!!~^$=|XKmdwCClppl
z&yygVfz}4gADBZc0Q(jE>WGyv55X@p8MIHKD9PST1|xIMeMlZ4K<PPm5kv{t3OFcp
zVzNNOHKeZ`WCPl0C~C!7;A*dfUkKzhn^{svYPcKlkV(&zz?CD$XDTzNlWhxt)?EUY
zDwOmSSV8EB8^472K*zyelac^}jg~Hff@*0}{+qNrpu~S`Jacmv^9HfxI2457fv_4O
zdFl`s>7&5)3kzvbG)G@!i)heEPt2CUANyfwGlA#9FF49YpvMe&clyC3167b7i{2ET
z%ubWSv0G7R3~GKxo6O#P^QquuAw5N`G7TkZd*ozcao$IVZm`)vQt1V+v-;>oK1C<+
zVK4#{&Ka>ugm0j{1nvR}2b*A*v-4E82~Bq4cn-i3QI(t%pk7i4L6?RHtI2_1T_OCI
zE`bo(Z?pLxQV7kFf&n}aba}W1QczIyh+7!EDF~S}87MOdDizF!)@`j(H!P*y?oI<;
zO{D$Ki7ihQJ<e${o7Sfb;9Dm$62A)u9q3_G6(DKP2Ubhn#S?%*uR2!*p=g)E3SfbS
z)OEW|NTq;}(91}Kbc*V#{Y(i9VKD<hMh&}6N)NmySbd2wzTFZkQA_gOYwO>q&MV8`
zPpTEg$*FavG%c{u^3H${QtInWL7xF+mKMh~{AT8~8%f}lvk*;zGKj6B-l`IP&8B(U
zTp9{`k2<OfmR+<P>s+Vm78Ekm0BoXb;593p=;Rtxs<=qE&7W#uAfOtDinx0mIDR%r
zr2-ZTty1V}iUtr2ba)FT$oK!Ri?hj6+lZoY;zkk})ZlJ=2{|Vdo%nc={S-(b8T1pC
zprb8h5!qKV&muB%zWYk*#+g8sx)7zR_jBL9MfZ|rI!YVVu)y7DB*ngLS;n_giE$)V
zj8<$k)t)44HHd|b)F>!b3f0YBwxO59OZT$7&Am+~9u$7)$EDu2T|^LL@3Na~R<E`?
zC1fqw+P7GDh6@#!2RuIUC`AComG1x|tcJpjt2-2rNnDb7?PkeferPlV**AKNw~9--
zEb%WD=%r8XT`NP8bpdUIX99#7;HP0%0IucZtXOE54rO|S{UF(}Paven0FKbMniKa?
zxi|p>^LJRw><APq3#j~+>jY1j<N_+KR>&&WmRbppq*=ljWKP01Ym7t}VyQ7YE42@z
z+a%AxG~~rjjGDeuZXimGv`C~^%WnuvFFev^Jhja_hz>-kyr4Z2F^#K<E|4}pu=OUk
zBrT;StGZw<I%;L$5Yo5SwmnjP9g&b=%Stq3UM(`DWK~O@wFEA(lRF~9F%}hOLQ)tT
zfv}&DR7W{;?cTY3fn}D_z5-yRgliT}=@j98aS&@e!^sffwo_NkngX5>0~Jfo0uWwc
zAbR)o9R-1X{Z8C8y)rYnG^>`P(9+`-VMR5cZkC)lcuATBUe?}4dk53J_zEO@{0jO|
z;rRkPeDTrQLHx#Np-?9tIhVgd{IF=KP-nQprtMvcs)J<|@7nrN0+%~F$+DHNqfW%r
z4j%#Iu%b}L!so0u%9dWTav{S`^`d<>yc_+-<lwt;m_s>Dc{}xHDJSxzG`|f7iP;m1
zu%8dMbt;U=+FsxwI0|2#JFx5uGQyo&VkKtI#GzpOs>)7mXnd<!TQ{FUs0EvuQZ{1b
z>4XV03y1+3!V^&^;)*h?CWkWDSqg0beJHs__`@NfYi98O0kq{`J|_m`@?RhF_7r2X
z80(`_r;&)3fs-5?Eg)4ap&k5<d<FExP2hr~6V=oZvu}9vlGVDND;}eC19)CMU|d#$
z6p^Z+mdM<D3K8Qpb2N4;pt2utP37Qv{h6?c?t%ZMDC6wSnVTpCP;3$2drXE~0fZDF
zcLsP^SIkgO3{BgKbl(iP5aqft=ZWQb_)-J&0Cgf_zPaJYOwF(|+<KF*En<Y4jv`cR
zRO3{ta;Z_R%j)TosjaQA=JT|gMrf%VayPtYUSS)(%mJdrjA3cY;MF^z=}<5su%hRd
zM4qAKI154(TMtg;z7PZNp(o(7$?TBlb$i-D7xD>15}8uo_WlBV;POV!%f`Y*R;NL)
z?Z;FvdQy!4RIK(@TRLsYVt;Aj5dg1tGy!=aeeH1M;EWYDxyAN^^DD6U1Aq4<u;RqV
z7yYwv7UoPM7R4WM9y~**Kc;ho5~44bL@9V8u%u2<0P}&66hEj*y`N4C;o0ya;{<1<
zxpjr0MJKYU@Xv3}Y{mjHawQ>gV<-is14h4r$ABInJE-h5Gt-9TNp+|YkbG1DiQ2fX
zu%srbuXuJltk9(@i`(gIOJ2L=;RKTFmB$gu+C%a9+EUR}CO#0ROJCJyONl>oBN^wp
z;w=qtaPU3;75j^-_Xl4S%V8|d@EDb-Q@duVck=2B!5vqNg9R(`T{sy=T*UQIYMB|K
z5#S1SL@79t6l;`xvN?(q61-N{7vfPGa=<iV4&8G<KJ-^oIG#@o^PFZmo#2s?@qyue
zDEe!7AhKitrnq&V6A3xBF*7G}r<fHaXslE&65Sj$o+<0|*KoFg`%x50mC|yrJK#Fn
zp=PQ)WhQ0i$%pTHdeEt~M(ilos?w%RAMY)iyx+5~+!X&LcU!X|1h6jF_QQx~2x5wK
zke}0H(!q7t-9!Z%YS0C7gF_3M&Vi}4$5;6#jxllg=h<Y{H<?zWgZLV*1$Odd81*LC
zYS`2L#W3!ZUAmWTH86a~d^L<*`%dDXm7AP7W2uzgETA4_IU|Q<kY%lD7$h=<Xanrv
z;dzo~ya>HG5M6w9*8@TZt4l~kHiR}BfWp_}qw*SiVqDO?VMgmfpp#PZ7!ztdC9*G{
zEelFz(5$C2`t6#5wXM9(CdA~x)Sv#>51%p=A4VzO-+ky-Q8wbZSXL(M0*LFF26Lph
zHkic2F(#b|rVx8LQvx&%H|GRI4MQBbyOni(>pD&Z7|Cm&=ERJy%*=oG<@5HnKn{1I
zK1O2*?Wg-(5-vf^F$s7mUc;5d+J)CI8NPkv7Y{$u(*KUv{~=ZH;o%?N`7eR<uOY(k
Vv;I2&^e@+b`1{X4exBZc`455G)u{jg

literal 0
HcmV?d00001

diff --git a/web/css/fonts/awesome5/fa-solid-900.ttf b/web/css/fonts/awesome5/fa-solid-900.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..5b979039ab28aaae305074541fe39258753ba624
GIT binary patch
literal 202616
zcmeFadth8u)i=EMnai2WnKLt)Tke_3y-k`-bMJjfOGz)#AO#E55}?omMFUhQP;h{%
z6;WF#P!%vBO4Wi@D;7i<uqbN5sufTWqk{5aeN58az%qG%Yo9ZdNoalbeg62qKb~~f
zIs3lX-h1t}*Is+=QxZhvp(I(Td+E~Er+;?O+%w4%S&Pu()0UjNlxA9v!apDW(p6_Q
zHZ8vOoR^8j8u)uIzVgD}z@^bbB7ZlL_R@w6uj!qbKuMNJ3*sFcHeG*d)sNQRPBiNv
zDc@PM@sbPI=hvL`C&ax5XxoSY>tcH~$_v6@x$(-)TfW<E$%Fp@k@ucWAG!EK>(A~<
zqUu`s@4NECExpz*aTek`kUsk13$MJS>e2E-QvO&>WUK4_$Tgd{Ke+ooQvT9K6hBI6
zn^>V}pS)y;?E>%o5ppZYM)bP}Zby0Y-8gY{V!v{?cmZAqDVzg;oG&$zB2tnQNAbMd
z440Aou)N73mcNK@ipoGPSjbcf=_j&^e_FPY4Z$nLr3gFCe2-88Z9|!4vzRHTy}B<w
zbv-2q=$&gN4h`ZEtws`wnV2iS0(X>z(Gs}7&Sg#fll=xvq?H7DMJnT;`W8J?{Hl_q
zeB|>X59fC%iHYN~9K)|lH=+8J8P9HpB>ahNxKTI4IGv0mqaM?rCy-VFNPlYTo9oDg
za~kPS%C|%GWb-9*aml79GkuB@=&y0qQ^bI@j*|eF@5toG+s43U=Y&Z&!UAR)gnmh9
z+KfJ9|2u#Q&ck^z1`}o(MtPV~O2UlGyk$CsB{5#ei+FFgOc^)v9?E$yg9qXbJn&{W
z;?hQ42u~Vd;+Ji!7%=N3ncf&nb|bya%lT3hBbhp;zm4)453_F0%Yb|g=v$S6QWOEm
zIQTsoF!E=^jeKT5iJqxt%DziZylcFTJhBdyn}b(A-1#V<>t@=^mtgu8yt8@OO;f<Z
z{gDAqrzB*&L%QWSu-~Bh4Bg_LPbngRZ%TQ{%Wc5;Nu1G-a?Ft?+yBy?X|FLB4wS=f
zVBB))j+BIn8{)F<<uHaQ=z!lz3P`*Rw=wQ1&?3N~2g7anWgXl{HpU<IG4NcF?hFp>
zmt`jLPRTf*0=EQ?Lzs*=`^CsFY15$b<iznz8cz4G0C~A@GJJ&HKIDyZnX(Mj#clw{
z8F(h~P5|)cG@1T3(@du0I0B%r<U0X3L(&W<Ge3thB(vq2<A(VgMHq)?-u;t#l|)V)
z!bQ{oSy$31FH@$0=VX|~0clK{HSkQppEAqmxM{%UX2&sMq+>teJ+n=cZZrLsdCPoJ
zPCxOkV&+2__miYI4l~lqesXZVGEZ`1#4MNl7;A_zu9CN9(xi|!f&4s=lBS#Bo(5c=
zEHh=iGkzn?Sf50nj5BaDaLb)v28|>*4bLkBP>(0m&a69W)`d8fFWZ^(p3=v%eJE2T
z(2oFx-N-L`I1J^$E$NHjB!TIZl!OUngkubhIiJf<5GTvvcM6cq@x#q!%YN%K%E<OL
zvEQ7-oR0ko<DKo}q*0zMBW1>$Vei8ad1XGtE2cZ^=P(AWE1CL5Kl&jXZpJ6gJ_m2h
zq?2QS@|0Xia(Z(e;&(!}Bf|$}Te!_e`6$y!|1S91aoNwQOx)DBY?Dljwq(;7xJ>%Z
zJcM^*YX02zOxACt;ru6qOg>o$ndO>qf%X}7o9#fIa*R=4rd^r*nYU36<PfCEj6vp|
z?Kdum%rbJ{?B2+8GFP7Cbl_9S!*n9s2DefE<Tz&Q<1#XkFlD)npWjKdj7(U<ESJLp
zN@A)%6DHr3iAR4VfRi~FKqvpqxKH>VH|mtQqYU{@PKIUkq!5-c>X&VZnr;qD=A_Rl
zFOygHKc{0bct<)Dm&Kh>M#?M`ZkaBLH}@~zne@h3V!mhSI3d%HWcxKAe9}xW!(<t<
z9GM5aVpNtvGT(8geb5r*IthQz#-Uu%&uL^{W3C{K{Swb)CT`lB<NGsnOXf9XQ%-N@
z;eO1PVTLIjmT{9=Ccmf98_#LEMibuLN5c|7b|+0B<DKarNqZ@?Y^0gi$B=co9E2YR
zT_Zk&Blo)u=YCF@`8b}~4St0%PRnhTWhNjupdTeZoQC5}P!f~n$~Gcgh9xkL>`qP$
zW$R`hN66b}mY?Fj<h4_R9EWV*Azh|EC6RG6{mU{Z_g(OtI7*zeZ6u=(PS5;AmX$Eu
zoig(fhnsPnp5v278Utq;FXx-Yn^=D0xo!3f=OLrN&~IZhO=fN;4Ot8E?_~N4Y0&;m
z8)RN{y)|&nq%+!`?fc30NgO#}2C$z<X540d(l7I3%(8JZ5BF0BGGmhQ%RVGdKiNl<
zY0Nd#>@T##kb@IQ&vi&J<|c46WPC1*!}*;s-I9(>chY=w|4~jF4o?_yIsGB!72xQ>
z_)Mc^%KTa2U??VL^5i-MAG?al>e`1A_b_g>XFwUS4d?@bfzUv~K=DB7z`}tg17{4J
zKd^4#!vk9fk^`R@_|(8>26hhIJ+OP=fq@4H9vk@fz>5RF9C&@8f8fspe;XJcNDsOP
z^+Eq&@nGp-`C!A~?7`N-xq}M_mkcf)TrqgY;JJhA1}_=BZE*YGU4wTI-aGjD!TSdv
z8{9Yeox$%9{&eug!B+-<H~9MCUj~m3jt-`W#E?4V9?Bmo9hx=NHZ*5w+0Yq79~#;;
zbluPmL!Tb{%+Q@fcMpAG=z*b!hxQCTKJ>)U_lJHk^z6`!L%$k&ZRpLRzYe`U^!K5m
zq0ymthSJAu$FyUm$7+vt96SHmhmQ3eyXe@h$G&px>0{3vd+yjzkG*j0m&bm8tpC`X
z$Nqlo-DB?^n;5na`-aPhD~DT#+lJ>3&mUeie9G|R;ZuiC8(uMd#&GxWS;K3FKQw&7
z@I}Ly4qrKZ_3-B5>xVx!eCzNhhd(|1+2LKo_YOZW{OIs^hMye%;qbG=2ZvuA{`K&y
z!+#k5^N4d~=g9pd4~;xB@~x5mBL_x)F!J2U&qrPy`PInFBflGYZR8Ile;j#Z<gX)t
z8~N{%_eQOwzR|#F!D!iNY&1UFK01H&l+h)lr;RQjT{U{<=-H!dM%RsAG<xai6{A;<
zeq?m>=(VHQk8U0P*yy&=PmSI)`o+-)M;{se+UTRB-y8k@=nqFzqX$QSG5X8VUyuG~
z^ySgtj=nzn=h456zBT&y(V@|IM~{!um^P-5g~lRdrDNq|GsYUn7K|mv7LT1acKX;^
zW9N*WKX$>`Wn)*2T{Cvm*ezq*#<q{$F}7>$p0WGJ`o<m_`|8*?#vU7ceC)}wAB?5O
zo*jE`>}O*yjvXHR)!6UG{xWuS>>p!8V<Tf@WB(ji$35e|@x1Zyc>egz@y79m<IBfa
zj(3lrHGc8<mE+fs-!y*f_$SAAj^8`}%=n@4-;PhbV|(Y6cQ(Cq^*h%>pGN~UU>#5g
ze4x~bq}15JDFa;t-JsN-fnHGRZ6>AO1xmedpl{&I1N#P21BVA*0;T?G;I9J%1LK1<
z=o$14=7UnBgO!8v!REpC!3Bc}Q0nr*(+9f;&mZg=ymj#7gF8)1y>IXvpww><9vDmw
zz91>}wZZ<uw?V1nLo{R^at%d>3Ws7t%|jhSiJ{Yn&IF}iHFUkC)E$yi?;q+LdSvLk
zCZ#?z^pl~(L$78jb#Q1zQmS&yDJix6*cy{kZvmzL@c&Aw&7jmdC!y4}pwtUNsT+rT
zL8;db-!y#7@HSBDXNGqS-(ynhf#Dwvr$DJMfKp!?etq~)!|#rSM(!H<(#XRjUmy9-
z$m1hVjyyf`laUuj4x5zvdJd%?pF*h(pwxL&DD^B*>W4t7>qjrkQtFn`8$qeJjD8Z7
zx_h+Gq}0bvO8wCkO8x!lpCqLo9UWjw9i13+gHnSgrPhu$jLn-usppNYlazY(*w(S+
z*llB<0Hxj~DfLUB)Q88uHumV)cgLOpr9KTxJvjE$u|twlUmklShf?1iw}Dc<pwtj3
zb;b!O^~UjA#<xjIP32JP`R{!Aoy`*yK8sKB2_JbUylL-o??1ioc*nfM-ecZD?|}Co
z-lN{Py>EHn^!~~FNADlJuX$hf{?7Yb?;-Ecy+85(*!!IKS?>?M-}gT0eZqUd`)%*H
zy!*W0^giZ&)VtUFb??`_d%R!qKJ5Ln_aX0t-j92?dAE9R^xojT-g}+*a_?o{jo$U%
z9`A>|tG#D=Kj1yndxrN^?-K7~?<w9z-WG4Ocec0QTj#CvmV2Y#Jg@Hc=<n&r^>_7g
zeOMpT2lapGf7bt~_v?SqU(;XFU)F!2|3v?>eo%i_e_H>6{(b#>`hNXedY^u;{we)(
z{W5)neyQH2SL?d&(OtT#TXo?X^$dFkJpbkSz2{ZW?>t95KleQ8dBXDz&(}SBJdb$3
z;(6HfWzR#N2R#pX?(=-n^LfwRo;y7|Jv%&~@!a9L-Sa8WCq3Idw|Q>$e9UvR=O)iq
z&$XV7o{K#fcs}G=>p9<ZmS>gcbk7RUGEcLo)>GrD_EdQ)JmsF4C+aEllzK`$#h!dm
z*c0*uJpqs3<Mn7Bm-e1ErXAJZ*51_mwLfUT)?Uzlru|qus6DHtw5PQ1YfowiwEfz*
zw0+uR+N0WDZIAYd_EqgG+LyJ5v_5T@c9-@!?RM=`+9$M|wHvkTwJqAU+9vG^?Q-oh
zZKJk9Td!THU7)Sg&ezV>KA@ect<p}_mS~H#g<6N!s>QW>EvA)eC0d~t(tMh(xizOo
z?g{rh?m_oI-2d(VyZdeT8}2{5Uw6Oee%1Xu_bcv~-M@7I!u^8#ko)KEpSgeH{;~Tx
z_d$2c{XO@$-TT~+x%axi;r^Pt&;3RB7u=tB-|N1|{R#K2?#=GY+#B7OxG#3EcCT<J
z+>6}v-SgZ{?pbb|>z}TFxPIn(&UL%%Dp#-TBZgGKlEMG}{cjKa|GEe4ii`1s@G2$Q
z99)GIs5yXz=704!J?Fnl`@eDjAN7Fcr~eNXuS6c~XGA`r2k;b#0q3}u^*H?W;Rs?o
zk)7cP)c;)ooTNH>iJVC99KgQlAd!0;pdV+)_d%75G@iXgdN<B`<ACEhDp&(Jg!5&b
zfcke3<yip;4{Rk0B7G3~LQ%j|fVYUk+le9$0Mh0ImwcovSVB~Yu)+g43fYKl80s&6
zo~Q&+x|^sBVPz?zXbS-8qx*<rNE1VRxduRdIm#~|AgbsFYzMrC<LdbU;9m*+tLgz;
z0Iv{LBX9LCz)_+a#McZH)gpWb(#!x}GvJ@O8gPK9t{8BTsD2aR5YEZ1fc-=bLBL_6
z#xB5KoMm?q%|_VlBvBI)HTwX-sRij<_5qF)wIXes2G|8a-ge;E0bDwc63syy=HWem
zGXUuq)C1lkTDY5N(GtLYM2T7e@}7dSPw6A-i~|l5E#6MFBmo#EI(0A6(jLGO9B6j|
zfI}D3b)o)cTZxvVyydSDt>^}f6Rkx4)Atdb;Q*lSRmFh&h`Q$k4gdy-&fG%u0pM`f
zA)?j$iOyaNK)!QO&j&TYF2M7E<3wvv*BXScLArBM=D8h!jYQ}90Cy0b5C8c)h}I(P
zL-hcZxo!>71uKbqDglVQ5NR(&+KYA*UA&cOJ?dVcBD!QfV1VdSye~aUv|$U;Mk`=D
z;0V!W#Q>Ch**>DnqX6W;{4Js@Ism9=6Y^b&vaf6b93c8I-XBJqkIX0PeTwKRz}0a8
z(q4l$T+>Ii8F@d7vObFXu1x~)z7Anqf&jR$?;^S(A8>%^M#SGZPPBC|(M<@yX%ErO
z4!}mhA)=3=yksq42cVzm7SwgiYecsq>{jHx73JNwg=ib_+J>~-juU-+HDDjnCwc+!
ze{w(3_5|P+qED?Mx_vX?d7@8mBD$lS=rhRs*<zy4p<g~XK(qtp??hR50*5=1=Pu;E
zYnW(P7hpfp-J1c2iSE$=M~Lo)e|HdoGC$t~7$^E7%DZnq(f##+Jwy)xmj_VRm+m0y
z13b8k=ppp&L&HR0MxKXP6MY4FzJhYUx`pTw;PMF4@7YWAwIwi!=mr3<Z>$77Otcrc
zJc=}rt|xj7Wk1$W^v$hcU7G;MiN1||-$C4W5WfE@qVFRA<C}@T7X{owbRZ4@o=+g}
z69Ys~9wGWZ!oCk&pIQQV81NR+4}Ac{KfRwQ)lKwFg6LTdaERzffaeH+xF634>?8U~
zKHxCX^P7l%+C%g+r2lyofVvLtCVHVBfb=gq0I25|tBH`D4(}!UWhDS{ze)lIh<@Dz
zK;#jWeWVY7u-_ovOKXW<jsvy<juQPA`G0!{EMMvY2Z&y60lWrtoGnDZN8ImwiC#xt
zucJMG*hJKi`2KxFe?)zMe1+&w2>UbY_%q_)!26B+h~7*9`Tz*~%UZx5qQ4^jTUNkf
zqW|h4dK+o~2LIpSKMMH!QKEmqKd^&na4XT!KB8mWiH6}HSwl3c0bU~-TLO54X#612
zJHYYXdO$zXKX(xw2X5(n0Lq#ehJ>;NuoW;)Lg^x5Z2@c}VZ+<DmxO&Y2{j7XL&6aU
z>?h%@1so^gx{rjr9<T*4Kte;j)(bcQK)eTebmY}hzJ7#+7iqmo0Ng&5;Y*S5w*Zhn
z4|wDuJb-s#Hvo1>!8HKHg|-8RNrVrQh^z)6UH*K)!z2oVBnmaaE&%crp{^p-U5s}L
z;!2((QCdl&3}r-%NyJcgIqEL&CsDD9L}dc-28k-vQ~f-N8l<biyLJlzWzNV4pxio?
zQFoX`eLdg^iCG%~dr34PKh_-4m?9C!dp62xLfy?shqXqutO20>HXopuL_2V5NBJF_
z0mCHbpq{x7z#$UzkbeHdBo-juLJhDBfHYWVL}DcX<#Ym{&V3{ncL4U2Skg`6RN%7I
z3fN5Iv?z%#r0sf*#IijkmiGY0VNSJ##OW=7gCx$_26%<UDx_QW28nLGv8ISKQU3?f
zo)4hDvosQ`QP=7|5@*LroO1_>4^{$@e@!ombL#;p|2)K<hqBH`8EerFtRZ3@@?KC3
z@doL8j*z&pi^N6SNn9KRY$dTCZ>$~S5|ncZ;xFAqVgu^Jx*<01C2<*WxNHZB%ew)G
zNL+zBu7LlFVG^4*1CZy+l_Wl_0iGxEk=ID{wgC2%xN1G%4H8!a@2kg2T!ZvjFT_Wq
zfVW6o+e6|yxVJ0;0PpL8&-F-m1M=N4Oyb5AiLJXx+=RMsCIIlh`8bJ>?ZZKY74R^L
zTe?WxiZX6}io|U#0K7jwK;jeoNqjO+VtWv<jl`#V0Vw<SeiC<}{5w$2X8@l?8$Xv%
zVn;EFop|r;BXMUX;64&}^^n+w@Lj0q?mZ;#*-GNx)g*S;1CEgR{1OshNB|Cz_#)DN
zahSw?aNm#mAHe%d`$_a6zV9H32iKGMvJbG0#KS?rF2GR|Uq#p>-6Zy)?60i`947Jg
zEhN4XC$YB@fPQ-P4ib;;Bk@h-*@tq!1zf%j_|8)#_OBuF-IXLB?*a^y_}*Ta9tKG~
z0soUJ65oFqVlCW1Kv_RTx*r}S@pKZ07x1T${~46|Y(3x=5<f!xkH$$HMEZlTk$4Vm
zdhQJpKi){<CkXq=eiF~O0FILQDe(On>iHS)`uTPehw=fa?*)Xv2;5&pIltHjIF3WJ
zw@CbQJpk`t^^y3s1Au%-P~LBzC-G7Tpr6Fc+ey4qOX9bP|1HY-E$aT=9VA{w{A(LY
z{C+;*Ac@y^k@y43?oW{TQxtHR#GjG&jkP4++(ZJllj1LLk@)Ko5^wDw@n7)&7t*|q
z_uB&`jw0XR50C)=7XLUzVrU78V`$4Uv}?GR#7HIJ6%u1xNQ|#1@y<2?%KPVT62}pC
z{52Bqp`J8g;to=%n-oz?in5Co>wHpdU8L9#kfI{oQAvt(m=xDxQnU_I^f&<aonEB(
zzCwy`J1Kq*FhEM)Yor9;z!n7MgjxVcNeS;JC4%zugQOH7tN>{W_mWbS0PH8Fco!)p
z50g@w4?tYmW>TW46Y{@O9s~ftiWX8TeSkhvs^PEMLrN|1nXw*#I_i<O9%anhK}y3)
zQX1m`#K)f}W%e4tUQ(Knuek@1BBcfCS{;D5NNJ0b(vJ3YY$0XNAyVdUBW0dO%6x_-
zDGLz3@Bk@`kSFmJDV+&Y7Wb2K>Jn0x7L#%s>gqySUE`!I-$=@edH~8@34BiPCgqGH
zq^#OaO7~h)&fG`J2T<l&`2e_A?;_>wT2jt=g_I8h)&P%l5q=)pdp^>wT?5!l$~u&}
z?he3FQZ7KA3kFEJFb+VTi#h;rkaF=#Qr7zbdr7%uGbxavl?}jkBXHc<OUh-y@iOEC
z4^*x=Kni%Da^)UUJ`CtZnyZliD&Tze5>l=S0+0^8PWdRq5mK(L1Z*Vbx_ZD~QnqxF
za=jJM0zkPp0QVamq-<S7%1uaj)AOX<yoHpHX@EW)0ImcaCFPboNVyetfZr*%!F}5>
zDd2Moc%1Sn)O$PPZr@MJr}4f6_}_u}&m1A;vj<4|9O~GCbUV?WJJ*r|{-)gZ3Msqb
z-*p^D!ocb7eWct2|GiOCb_1W?yGZ#w@cBYNDfjIm<$l!pz;05$gmB2V%7bxI9zvO4
zMtu(>&sP(qJc6?K6a!HA*O2z>Z;|p1)W7!-DUWU?<*}8dd^4YveaQ1Il>MDGm`CqU
zq!c^OB_jj@C)C^&4h8E(d237CJkeTH-PRmy3X9Q~I{XpGfFt7Xc**CFh^Hcc@rjpG
z5x>LXkECAm&74X2gT4l3fxS@_p0?(uQW5e8?d8=ia7S8gp{(2A($+3sve}%vv!lDC
zqt@q}Ak*P-iXSQnPxlp7Rkc-FpIGs>;Se@go&|HBCZ3jc6i^Ji=5Wv}?B$K3dV#Q4
za7~QAit4JH+FGj1?LqO5surt3b-mirb<Pbp?7gAh=ThIje8q~(SJ)6-tRlwct4G8Q
z=X7<bD#BM>4)iD9o9I_8;$dQ&@={^e($?M<E)(qwg?O>iUiXZv(Dh86y>Z4B)xlu(
z72=lKt#!}4T+i2St*vm@1cNnB^oe)kNoBTp26mz7lcq9-%Zh~UjY73oFB0hCMM7Ad
zwa!!S3~Ku21(vA)w%hzsOTp#37Q9nDmY26JtW@h8?hHhnOP09u19xuFtCcYKH}^$K
z;2)_}L{w=sKd3f^OGMCK5i3Wh@Gyp(+C@mVxVn8+aWLH%EMC>_uUJ`;l8wD$Rr}0f
zadB{F`zoK0%XJ!sizGGDJUWfeq6_E>x{hw6&!G+IU<_)VXl((Rl!%!5M(4L;Sm%jQ
zaGq#dAY$e_lg<b=@=SNz%rd5jM@|xsX34ray?D!|>n?{@tEE$TI5Iww;GiTP(|*FI
zJ+Ebdz0+dh6-nKd-sjSTnigcxU7~x^mp&v*+?4Y?*rRDZ+J5=GBPZNQ1C<uWsUI}k
zM_wvJpDsc#VxI9Jp&4?JDyDjyE!>lnVXd~zSej!iYE#@$ek{#6T=_--hl<*4sOZyO
zee9d^NRMZOkS!A>$3BZ|l;YG$AE1lqYPyx~Bnn^#XE0{;B0*i``a|v0(5?vT%9I2q
zZDzun)oB^3rnOU@=C7KT{%+lM2{#0f$5preQg-7JoeYjzRfjDT{-T*y=f28h6t`tV
zGeIDL7i2;5A+}@ubr(P0MJ0yI=rb8%bK0$D;CAzk@B^7VuAD%OMW(Ec*?69A_V>}q
zD$F`+pVs5k`ztU>BRtoe14e%_)0RAd!!mC0gVxBj_?-UBao)tJ$-ek5yF?K`xkpUb
zn=U<nGUBaFi}bH^p!A77lMPKLCf#CBHpzj>P_!Rw2ln3BVo(sRuBmQW#LQB(^CKKo
z!Q&r$L{+QQkfV3N5rRWa|5gn<zp94SN(YBID&b83&cWrt^1v%D6jxCN%8F!`2vx2V
zDENJ)A6xHqhFyiu_3NF5uCSBeQ~aruglE#BPD^%ODxy|e03>)Bl}qUYQBjV;!Ey>{
zD#6qb7^qBJvbdqua?J`ii8xLnqX6^u)Auc5>(xEoz1`itf^w2+9qE^+uW0Ml;ESBF
zI|oNMRnaUHM+3Ki52rmEj#>XTF2MR<;h>N@@e{!|t}|#3Fo1}FrK-FEowE?5jm0%=
zS9MD$7;bKAYi+5nX%LIVLZMD&JRz|o-m!DT;;R=IHbk8vo6l-heFc8kMN3b;xH76*
ztv*}m0^Jp5V#7n+UVg=b4LdupUNU3l!ie4GEOzACw370g(5V++bXv`6`L;YqvD5Yn
zCm-Mk--5`8EVB`KW_b20(9*QoHl3SQW!6SxEo?@5W34=i{}t8gRO9^U&boy3%g4TK
z;H0b1sirs>j~=Jm!%jR>PBq=nZV{E?>7?}Fi9~6HA*NsDbzLFf#4}<*JWcbV^@9AQ
z+EvIRb`?^Sy#{Mhbq&93AevOSU>>$Z;wckt?X4~CZ4vO4aD?BHuvZ{wM#TE7)8enT
zJL-zco$YO|@}iked$r%<oN2Mllrhek9MkTcjIrBa?`&-BY}{sbwa!qj1rcqwOVKpN
zHCu}mSk)P=PFsP$(qAB>ZTatuc3BH5DrTX8#!j?pVghT{DOg`ixlNLBO!CbJUZU)i
zi)|GIL`ZWLEHsv99IYn5kzy~8vdFhOtOuNGuj+&&!9574c+F}lu-a^vzaj8%7OUM_
zV6ncZmwV1rZ5=jM)GNyFhgGM`-h+6IjNRo_AD)e5mNJ{=Sw(r)Vk_fZhu!Yw%WSG@
z`!t3GW8#>29&_RV<hT-?QZ<F8plk#EH)38?oA_gDG&i+>{>7a;U)(8HTkUh5Dn{13
z*lKrJ#Q_BFd~pxlwwXH^+xr3<DkjUsKT*M{kmbtdYK{@d5?&(<)kR2!*w!9^tf2<O
zU`}nVH4vTADbj-uLe-I`h1dufScKGIsc2RfsCoW_Zl}7$s@mKK{dwvgj=)70o23+R
zQNZ!26|!xuT@`rOs_p0syVKqPfNPeo<Rai}w_a4@6Nx|sooS5(TIy{Mhpk@SXLH!%
zc89|rheOIuDJkoRsE(Q;i&8+!O?UuD9zbA@A(K2LEAB?ZO^aB*vYWir*aw80Uct(=
z#^ZACw)^b6oi5KBT{K}?i}QrPYqoc$clKQ_eJgA|G~Y`36e-=crvT}ZyZ{SVdV4RY
z#bdVDJ6pe;Q<^`FArE8%{Tv1rqL*_-a4;~1SK)|FZH_dzH`gc~4v68=V6o$JtH-Ab
z%^k6)kDPsDv^RR=*@ramEi8`T;?=%nbJ;zPx@01e<l+T*=ktmHPl8Sy;@2ciW0j9L
zM;fru*d^m^$A$~!f;p{Q4Cab}QW2?XnT@1km`U$>euzuLXV)y-uwhy8lAzUUvzA+|
z`ixl(!Nu2f-g#-+vQvT>VUaQuH`-KNv|+=Y8w&F*NNKZMJo$bXxay^MMrK4lAZ#kr
za%K-WlU4&uu28OelMLKMRF$G+YfI}w3>I*+G=bHyRLNMQCDk>N;B1-8*u|I<O--o~
zPpGy=%|z-_G+^#}4>*TS^?&L-#`y<x*6Y$Qe4jcm{^2sTVKRB>9Pu4ss>$XXEn3y#
zL@UJyuR$x)-^}`&E4fLz2{8s}VpcwmK$@=sT`r;(STI<;!Ul*3nwdWFP=G<&r@g^R
zF{v<gXlm#rZgDu>!z3WEQ!7qCS{{i^{f%e0FIh(vsbwDC-HDAd!?K*`m!cY0=G8e*
zbFAe4ky}Doy>f`wm{}ZD0T#pzRP11!xcuT^{<$}w+dXss%>LqFiv4(WEjstyMO|H`
zGiR1|F|9hJF5nsT5NH)EJIYphi(XNVwZ<5Ge>Em=1Y;k>m}BQI*2Pctmg@5sRc<U?
z*rL09kTc8kArn|*r)?A;imG{e$NbJ26_Is355=wilKhwur6EOexwHzFA<eOwEx9PS
z#w(_5QLv+wZIOh=@feHhM$sTZWA_}n$K}wKQ)WroHoq};)dN?>8V%2^Qxx6d5`Fhv
z9(VYy>a0b&YoALmS5{qh)heZ2dKS%6t$s(GbqB!XIIeVWBR@D+n<R%urf7qZUv`(4
zy3aMXB;tCv=1cGMY3_4%*AAC1=g+(17MT~)>-%$~yMkD<8?Yv~wLm&rD00g?5-KPN
zIf71`GZexjD7H*3KcLNs&(Lgkf54_SXtsbK`wq!xUsMv}+rYPm7DB6ff_kea>s_cA
zg4sd{tUv|ALR<SnrKLegbRuDOGU*9W6rJ;zESc{Jx~<MwW8s|HPOCduJ8OnBfR(@*
zDDiqr0#2(d=$LWg^tMdvt2=6L{_M>)cAGC~3olq+GjC(e7WCPk?K!K!ZgV&TcCE6$
zp}tbH2mCgBLE8x$4tZ#zAN1b`$yg;fB)tH%U=`?tI-&)lIaCvBZf$Q4RkXKOghZ?1
zuYw=m3V8WnMGYX8Oe9lyr1>GD(Vl3cClQU}*Uuq|L<)dN=}ty_Qqg2I8YQW0!TOe*
zQhyQVqJcvrcuPB0J?IN&`<wqq|MHy9JZGh|D6h!Le}#EPdHm<hE8>7WkxVE5Cy>kc
z{rE}&dQY-_-qK`NYLgEZ2M-1HBf5S_uf=OyZE<mJ@xepEVt8s1h}U6+6xV_-jXhNo
z>m8RlW2&}KmLJK8pf>ENYA_)hv6gV9VklFCtnXP_jnc%GK2})x+-yeS^-P7ps93*K
z*7^`Ic&uo7(LqKBC>Sz`$s;SEyXgQH;A26Sg$*5Bmgz&k37(FYXZgF~4pg_t<hm?U
zPK(6}k>fxube^IM5=F{>#Gd`VXR)OJ><I)sYc$o};&!;f|Bx<G+o8KY9JJem_NDSU
zLD6WSFd+F%N^t*R!xGA_JvCSgqQT-+LL8P1JKmdVhm@t5w&L6lk&z&H2PUN_lSMUy
zD`OdB0m9N63stqs@QRQ%Bk!k*s<3Yfc+x3PAg(&AiUJ-H@HiWsi3uQukd&wn>N>PT
zR8<7AxrZBtok(v{Ri7t-be{BQdV2a167TCmGCe5Ax*z!UQ6VJNnZOQfC}YLlI}aLH
zg++t1DRP~mPHs{Nt5Od)b&Y2A<hgG4=G(P3!Q$;p*DqbVzPhEWrKL;6)BT)+J0|AT
z9ezDl{1Qhmy^o_?B;Pf7!7TJnW-a8^!64<D3MiH3m`{cU779ix5~yje5&Kx^PVys|
zzdJve^+j&8<T>NcJj-owt!s=*kzGC#iAlG(-0AT+)A#JS1^ti*p0o}9P-5)S!FM4J
zO;+m9t|Lv@fq_Hupj7zz34Mb&y{On~`#{?-x&A1&2Tt`Tb5`0dzy2V%K0g}G|KP7e
ziz-`|%6+E*J{Yalb1E<F0r{u<V+}D7i(E%V0ytm=V%fS*Sl-|G96SWtvZ%X}YfJHC
z(k*rXhjc2Zsb;fzZn3P`uPjDAvuIfkJ#wE{_}^EfzhZJz2O)OK9stM~3M1a#gp55j
zYVN3Ibo%&F3n337PF0Dz9gc3RZtZqB-0^s>NA#In>S+3K4$5(vuLlj;7gW1#wr(}p
zpLLk+_`O_5PS6fMQOO7z1}S0nFys#QHsdUSStK_Z!PwI9P82zK5*kE>+PCC0=1G3!
zZ!s|w=TAok@}j9p@bylj-|ORS-N62zCvG*mz|>L8He~c2)ILpDXwHSKJ~3i6EOXAl
zBa-2XvSl9L(+RA_4qN)&N%#GXP8z)lokZWHyT@Ux=0tcvcFej>a^azypvgu_zHH3b
zEWXq0pYAtxqda9Lp1CuL1B~8&KW1xrqx9C42TvSeBp<nGiG*sa<&=0#(4_m{>fg|`
z{>$JgSu<10w0JqLMi)+Yqxkal{x<r)e-h!;q*Ej(dwL?L*H4J=wEaQzf9gM3|K?Ib
zt~;lXlanZ)*eUhr16V(H<ml^Ie{S?yhJ7{%ruj`8&c@rO_3`vRpB|5C<x~?Vdx(BH
zFe!e5H1JHn&)q$lpV_EPg-73{bKhj+IYpGq!2>BWPVgXGR+e?+EU*qzBle`G9$k|A
zbj;1s%eH)aPnrJg?7pPOX6sRdL9s-(qer$$65C&x;wB$|o{T@c2W++nY&PX~%$h_u
zhv;&hlL=1R9%hp*&`07#;D6elBD6(Cn?&m*zQ*L4Y>IT{w#R6SgPV2tB)Ykcn4C|^
z$ppq4fdwxCS>Ma@G3bhw1Q`LR*_PQQwu){kv>DRM>%Q^|?}tSa0!~(ZsdoE=6BP8j
zS3H1nAtUobD$9*Pa-tbv(^-);M-QRKaGLMM*@st5RWE$GA%<mtqe!lCIJS2<99@Q#
zWK=1-5EpCsYi}l!t7G}#X(@NYW+2jF$4bRo8=Zylz4;3Y%iSJJZ(py)<1Q~;kgpcD
zRjjFO4VM@AyL)@P{RQRW*2*;%5Lt8eo*r19b1{(V+NDI}kP6KWD>rRgd9GA>CN}Nf
zWXKFD(S!4JKgF<5EyYm*EDUgZpx~?sIwS}~?8Po0X9zF&+UjFaSjA?w`qWtw9_d&k
zj0-x&*IO=VTUNb%<HqIHT^;LM!s!Hp8)KZJp%ZQ7y+;b;l_CuiX*(JXowtH*_addO
zU9Q+zs#)ZSSj+`GXEb9{HmMW-n7HdaReg1>-E9}HSJkh%-Ic0}kV<z{+h(n`c{BPH
zQR=YUYc00FK<v7bv$zEEtbJAWL2FYX^HgYB`r9^3t=;Z;K#H<G!D6qi)|yTMU5rU$
z;&&L6uTltO;x|s3pmkv?Yc$TG61dcM&|6jIJqSlo;4Ej~cRhK*bTXLd+5b(=7+2ix
z7oT8l5NHT1WeK0j$VaB2OlexJw%1#QUzK++e(-8yqo(b?A4P8CM>>Ua@4Jm3_i9qs
zGs<?erAfOX=5V1kxo%C<Qe0%hd_UqUb@gQm>&x}XHq*ob@r-yLdv~@3QEhff`Vp}w
zKR?|UncW=vFTG7atQQrFzS07n`-x@FKSIuVP_7dcVPcUx3}Zr8Wi(TAdl?SxKqnUm
z`60|Vd&+W^ZSl-t6yxO5l$}$MX}$1Fo8`G0G|`tGdz3i6e+;`8qcy4_ATpW}F+8n<
zerxuLNT8!L9V9)|#uNJ~@cIR8bs`^JTp26R`GJvE==~!qHm7&z4yi0RJET)-E~orV
z(I{0UbBRvuO0O}gPGqSLV=^&@J<m^NpTUl$3Nt#p>|iRvCLkl*SBMmLok`wK3Ov)j
zWd)&q`b>RasGuy7;9!0<&xxdbzElL~i@>pH;!RN{zR2gwMlq%Vj;WVusdyG<Kw(v=
zU;H8-VR)W({PI~<x)8*1Dw0eut4f~X^68{B;W5ssMac;Y`{s!X%jJF8Wo6HNSR-s|
zg)0m#v8h#PZZc1Pwrgu~D7;oPU*^frZ8<^O+Nr!XFj;;i#tI7bE(Bhqyv@P^#xky%
z<$TUKa|S(5o=N562PF#_pRtbE%Ro(7j2D47qH9h3uI}t~IBFfvQ%-T><(T5j98;Yr
z&P*xi=w#jC6=d%7EmNxwi*dO`Y&)Q7Va<KdQa4`OMz^Su%SHO*2i)$6o5T6F5&X@P
z(<VMo%9gB_%XUD?fXy1HPt_Il56BmNC6%2SCB9i@&+<CEv%;ymabekC;`QhGgXp%x
zvcj%tbx~1uk%__wAgvXu*xI`Sy4wR4b!or~F6qqkRTs{jKaPY&)j(njUS4QtveZy%
z>dd4a)Z|$~$fS%6ML5d~3d##~@J_Hz{#%n7%?gAUl)sse%g$OpV)M}pnYE3uw$(z{
zyN0zLXl|X*6=>!qlYlDMv{}HRylJ)oHN6U-8IBZYT3tXhBJ(4KOdD!3M~t~usoH!-
z16a$_OWdXKxi492cpk4`<eH&rGhB=65irFA-BzHmAE6CrG^<lGnV#>SAd^wT^_&&-
zKBZ4R(CcRV)Y>3a(Pk|b?ZR$S?ALp?w+K<4-idd5qS_?VP>;JhJ<(E(mk=%7Z?G!?
zFG+!y;FQ*w{~0@#Fb*2Ps?ZH!T~N^rCBlqEat<{DzOqG>@tH;Xk6Tn>F*piGGrPG)
z+9+HjS&Upi-o%<F>j;?UFBui;B9Yk(#-M8d;q)rff0V}}WvD{j^e^kMf!}@~YarS&
zX=`IFGmWfx<6S|kpO4{AQp^K6b%z~jUQXR;gKgpuD4%s$RF$>AF_!!?+;%aJ`TT4~
zdH+c&_)|^=)B8`31=jJ`a2EO%K5aF$%vjfS3ly_<^bO=e3kVkr=D5SLPb;3iq$%RD
zhTIkL(x#Q&EybEp(D%Dt9`73AE|{69({x9{+4c3EGYXud+v|aJn!5+~LDp=d#kfg|
zGNo9Ac_Qh*iq}pacR6n=%3C8m7q|n#JNR(AS>-6+x5#|WO(EU2Rnu03yhT*o>eAs@
zjn5UBp+~bpBI`OqWH#s|c$%k8W|hFm5Nu4G5Ddx7#Mr<r9EunLlkF4xGuWm3vp7p^
z8M72zMyQ}{EDp<z1ia336J?B1j3JL0IvcDg+5IQ@t<gbQg`&~N=v2|iOZtugz7rAH
zG3gwb9$>`r+@T%dY6C2LndN5%38O4Sb}$N%rEvcV3c!x`@5tGPd@LU5qLFQM8Lvew
zF|nlq7J9=LsSGQ=q51V@ES9jRdfjQW1#Cgbr!7KvSG#p#`LrX55S#O}pPh_S-Rji1
zt8D>ixzlD}{g7MN-4CsXaZ)*s!p=A&8;&fw5x_Th9rN-W%dC)!xnAJp97EjNZWwKt
zi`HtnG@a*wK;}?w30SL`3*}34Axdp`ySLj_6{SgC0`>uY(5iT-0d`uT{AL_@VT5dW
zfybG8luYl=6WDUW#2_5u!+bu$k2SM30xV3VJpymauueo%7*Iiw;V__vVN$?T?`o+m
zZ73>gD6MR9rQbNGB9`aQb4UK*k3{^MKU$FN3k3R-$d?Fsq`IXWln|<HiB?udTPlOW
z)*>WF;_`@EStaeZf1o6=KdfQCz>7H!D6yjBjJJKE)zFrgtBfwX2xq8GN_pwMAMH55
zs5M|K$amYE(ZrcIoyPmXuYFX3-CX0Ud|N;~-g(AtPr!(!s=h&Uy9%^W<HC43c8sfa
zdv|Z+42R^~DeS)v%3WzNyDc>izG1inW1a>p>I=V8F?)6ej+WcqrB#JR)q%p2fIU>`
zDi?c-o9dfRZ{#E8Gv;WT|Lmgbsv>{1u(*8Yf+{aKk_BT!Xj>9{-y*i(<2?_XN?<XD
zvDQK`B2^mAF&RLAV{DAujmm4<lm)QI+I{}~kDOD?j>mT&o4<PXmes50<1}j39INIF
z7CW_Hs6Ms(!da_Y<@>^ate!6u4Issw8jt2I4*E1J&;Ty5!@ouD!<%V2&$spnAMZ0J
zZS9d##fHwu!c|dT!^8pkkWc2MgoPCWXsb1B-v^5oH3CNsQ%@)k$`J{Vr)5Uf`MY60
zrbjNb)Fi|Oc1sWjLDu)aV>*&~t?eP1!V?cI(^t<AwfUAQkhE$#Y;nsB*M;3czp&)Y
zss$Buk<nIQw}_vZj*H!XBR+qA-kg%M`Ktr^9GeZT>ZlQ3Fb=eBVjO$_F0{=J$pKmh
z*i12{!%(Uza^g9r%=Hu%r=!J1o&mi>k4&Fxj{JB$U-V&D`uMcTCMMFRo?#~FmB*|O
z498$R6&VM17$8<0eu44uIarwx{iU6qrB`2Ob9OqM%IpnwHWs->G%8r=w$*KzEriW(
z?R45M6I9bwbHL$I_s+Fzj!l~!ntkqGi^Fbl96(#4`Zw<oIH5U+fvV=vsdOfNgijP>
z5Cyp5*pZ=DEEK>CYf07(5islicf#dL8Iw~l%j5Z+1BEcRPZ>L6X}OQJ!}v|H;Gg1Q
zO<6io9E?jvo1t#QH=NP~*pR;>v)>_~n@{2voEN+II8XMt@sxD^s+21N(1O6?%-o5y
z5pSbtk1)ECD$`~b`=6SaF-me3W&0(>vwo6~bXxiDNw>Rnp3S<nwKZDmPG78PACVr6
z)N5ATN3clZHLuj&Efby#X|Njx8@1LIbLZ5;C}ab+73@B0h2yA|gK+pH(_rkFcKRis
z#_m+^ATimDIS6eSCLJtV?zz09`IME474nY1*gi+};i5~R*`nCg(CqM><>yFx2Mzoh
z<?Mw;LK#~d1hPx96m4{ol^*0!h4?5mWM}JtX}FsmK{j|oN3=b>8^z<pRw0XBoU7V)
zYtqA^LY%Sr#?7k`W>cHyH^E|3wRL+#A#b<EZqZ<EB|TeJTfMVu^SpVRPqV?SOSQGk
zYQc}~%OG3QJjj-(@_s%bWlLVHjWt>taSpzJyDb)+U|T+|EJF@nDA?vaY>r_0FWz6)
z;u98y{jvpL)w~IIJ274@r|u4LfX)(xLFT4RZ!_f!R>p9w#643lG<MBR%C(nZtS?a^
z0EE=qr<@KSNMqQg*TU;o(*skyNSB*-<9fc=6hu0;?s3)UF4bMH*KtX~aIObwCX*R!
zn9>P3r~xhDjZBOcnY@UyO0~Tr>w;0C)Wma(%6Q|WDn4r<{i<Df+`3|qLTT*(l^@UI
zrAv8Fvccg|oZ?fOZn-NE&2txcD<ZL2B;V)D=XcaEJ}8a7a7vH|RUXT6=uo-NF;8TH
zn%R({sEe3p4N^1Lm*834FI8~SU~vN3IPVgv50COVV0}bZwjt+(%PNQ=USkIm0TGu7
zWx+Bv=1uqNy2=i*L)X)*A$2%UEe`f2`hvyxZS@55HGXt}jIYJiE@r;L)j&=%@ywh-
zu11ZMJtOgMp5_NKJVgvzK)a^Ln<r9}?Zs5{i_^`cQHKrdnR&*LelqKv4E#Mavvi!r
zE1VADWa1N?NIoXdHI{OieEgVQctBHu<j|@~2`hbg%6*h#tO|Um;dIP6^dT#4Gw4O6
zWi=XuHdWa8S&cQq3ucMNH|McB9>R#B*RO5?djPL6WiaUH<I=#<G~Q61_RV&?NZ6g~
zdlseicDsF#G|*Tr4K!jpu;aEBR!`NOMxCmQO=EiO%T=dkmc7!R9+!q6w@bs17N?57
z(4EzVD$|B(lW16&pc&;gyvE8ch<wPwf$2NnMgV;nCY;sf3T;^C_vNeZD&18pEr8XB
zoQ-G3mu=W5&4z?;*#=9IqZX5s$^8tM`cP4E{LID;HfeYSGO^>H<qwrx#gDM2ET)gs
zPI`fU15(c#+e6{P*7oyY*O#@rk7RA_L9DQ=1FDdgGA8>q;f0X<AV_6H*su}>vNdBh
z8fKdDPnO3!Vieg_3iVd5A^$=M$1Eb3iZ)v|+y6U4&>iBgrtYvgTy~#ZSgpeCv%BEc
z^ISHE&-X853-hX-9>9ijzv_&6{H6J&nxnef=`PDJ@q3~!)gQClV|fl&RLd(VD0Mrl
ztF5Ztf@DT)x&21JHCz!7%O}L4|2Zl`=uV5OsZL$<y7K}qujX~yHP!0$S}b0t)$Xx7
z5#$QwxxLu%A_hiYmW8^8+izOMV}4hlu-5DHhuq~343;W%N4Y!XcX?}y0xo~F4Dm%Z
zUY9TADtCGiZ-aS!xjX1{`>KnPpsY0<uL#@x^7++ih<J3Ts@b!MFp8cGB8ZuS2w0Vr
z7do-83$TSFc8yti0U|qSzO5;Ms~y=;bK}5QbRajJGrzg6fdvUm$Xk8G-eIinR$D_|
z^Zdld{5<{Q&xko)qI282f&vH^)?oRJ=FWBLZRJ6$tDvB*Ub$+O+nIOfY*xC0zvE7<
zh+>_=sh{v;?KYI?N}GsIUVS~qDN^aKCC*52CvLo2Lfdc=m-F)3<1NTr4_;fUm{Zr(
zkg=4;?O4QbX0sV%l{z727F0)c*LIPwxRiXc-KEE?wV6_31~WU|HS=vPI;+5?Z&Z}H
z)f!injk>FHe%`gZE6&k)NZBx@@R{IjNXe%F8M!v`4H|iI8Y~Zd(ctc_4GK>`)008O
z7LHWcz|IFIb#@g~Q31PH7++Xc6)&pN(ywS$MRBWM$w9gc^$TE@{&FDV=1LQaI})hi
z%c&h5v&z+$a93#|D|-t|yA)S-zFI!3qr>DswYPX2GiLcB5#OvC4o@NX8}@9H_oX1^
zH{v`KQeKtpBRn#vE0PiNjYH<{2IknlgSkVfV`eCMIoq@|Psbg#+V1HWDqhUor`R5g
zbVp+7<lOrdiK*8q9KGDJcsN)Ha7?>TF>!q2DNx%%*r4I`m82D1ShrWBvl|rbb*mTJ
z!{|Y%q#M{k4i{6DNE7bIK&SXhxzp)TRK-=(xpeNlS#=(7-TOkGu&Wlg+HyJcG&YN(
zXja!c@nm_O*HbrZ-rS{~H7?|LIGyhcxma;~FoiE~v8Xny(CXI#HvwEzkXH`MJM<8e
zNXmQYR&00$*e_fW@%KP_AQiAeo6zgiX3smnXuht-9Rcx(HIPaV1U3d7aaEsRw03Tj
z+uxhVvIVbKhQ7?p5*es1cj<*K3s%!cQC`8fm_orau<)8{(-Vq>a}OIEwtQVXMJO()
zz3o*ME6QxD#j+IaYwA*(PJVrh29CDWg2t7tsHn1wQmac5r{L6p=UocA?`H@{7SnWV
za?@joX}oa-<p7QMT^P9OJgMidD=nFsf^5Yi8y=S?&O3Jz$Q<%t>CC#)4QRGu+Xa&E
z!%cMFlY&>t`{a@?L7#@WfvT|HW!)mg8%v(=3gk1sT$9qaYxpI#E)740-b1ybKUnPB
zw-1%Ck-I`;k12e-4=m=oS+DU2=-(eCzEh8T1a0P7M#NB4wnEopvKGF#Ab0AyVU}c7
zYjt(&Z=_+R{kqk5r%T=Z@V$oj=R4SY&i&UcoyUo)KBBsu_SM%x;=%4yeRwl_cl_M&
zT28zAexoly2(0t*LepI>CG(sa%I&R*m8*Po1!tM4&Ky-4bF{4`(;G(H<LRi+dtvs{
z(S_b-d0=vld`=#A&$sWCSC4kud*opZAF2c-A2DPoup{u_7JPFc$TEi{cgQ9o*1lt0
zYUFMq!$WWzi<LViLIta@2tkFCi28hP=h>ZS7h4Olpsoly3Y2nu<)J8rFsIw+OT<=R
zamDJ9<$0fXh1DgkK3`qAufpFt*XOG$>M5#fU806vpFb!H3m5lbv&G+P_yNAvz_Jye
zH{dJ=4{QpvJ40iM$sX21pCUivVD9y>;X@8^81eH4m&3Ct&l=Ph`YgrHS+ktQ7T-cW
zXw6&Xakv_$$GVDgVpFpwy}HVYRXtNwk!#k}*v7`3ii)zjJ$zOPdP{>lGi~86EdQ{F
znaL}fl<Zj1$M?Hf48#*w=aL8wem%*h6)MVG?-6+}O}F|g3Zc@jI4#ei6_=fgM`5wc
z=Da(vDBUx;ycNsKY~%hyPn|cf%8?)SR$7F|xwp*YnH4Ch%hx=Gc`2T#{CHAcd^6^Y
z+ymVL+HAw!5!}$jvIq3gpN5S*@4zJX?a;vDhjw71+9X9xqMlh+X5H<yxqzSMIJFFq
zywfUxd2Nkd*IaqRvmW;q#Qkx`f**wv3sLFO^6N?hvpk-%y%3=+m6a8asyuI<r_i5Q
zh|f1<us$MN$ojnr@UkRm*zD^7Q)gQ^B7dP`-VdlyZZIXYY8B|>$}676?ZX_T<vQ5b
zvOUvj6_u41Y)Af8pNUj<T<kTq#<192w*T9>psRE6Hv2l#%Gz!0%$Xv<3B%}g1N|CZ
z@K4Uo>HtvZSl*8^gU&4AYyYEu3;gFJ1Dtd12&%x^Gv6qw!7h*&iaKD9MNHnr#S+F>
zH``jo26=@4>dNo&NPlmoR9vXrRQ!U_VRXoIf6*m%23=AcqJA7PALn#1f0|Zj#<rpz
z#y)%x7!nOGaAfMr)NPyvpR7vrO!(ifGh@qEgXPMUpyajGsckiE+)h^Lx&N{g-ru*G
zQ=o_ny*kDjZLOKwuiRGiH0WfNnukIs>j(Ze4DKoq;I6U_(t7~5jOAFLXM<-g03)v8
zGYET2dowir6;&10xU5-aR}spG0cr(qgQ>wt1x^T>?U80^533_>?RZx;hjDpTbnkP=
z=f)qkJZZ5!DLOZKD_YM=zg?+s3ZEsea5}HHSl+W-&F@;7ZkLQne@Uhj(Iu-_A527X
z=c;dQlW)cOO>3K1JP^fSY+)=>T8?MzV@R@`!*Avk+<)K$Pb)U@92HX~u;(ui2<)3d
zqfi0hP8%-@UPB{Drr0ZvJA*}~-POMdv{nUv<H;*2T3)GIY|GtCR@gl0`Npl6vnrPr
zm*jbV6R2tpyi|2&Nm0<Lcx)?{xR={3>CYM$UQj=O^Mh@cAB2>{_9%<-rJajSt)`Nz
z6wH_bOb@i1H^ryPWAC#Rw;6LkBi1+H;kQ_pd95yMqt%L+C6chXtbU8NYg*V^)?So|
zKT4faKR@~V0?;qL-+iCY>a=$GES5Nm@>;FoMb<C-;Y5+B#c4$hg1#lSCEBEA>`4up
z#l$}$|Ksj4-;x7SL1`y%M=StM!xa84Xu_W;)Vf_yKqo3vrS2!v?|MCs4u|&Q6K+@p
zNI9+_eam}Yd7rP!IJlHM8ysQENhxidr=3Ue<vx)}l?2i~fs&NG53(arlBSYCcS)cx
zP?AXY#t~2w*uf_TFC(}+P!i{Wcr?ng2-6fnPG(ueQ0;>G$~zyXmKS`unXgoV)A1cE
zuw+~_oIEw)iy&AWMb9d*v{h(c^CczPDpg&jm0Z&7^T2tc;BYpD=9Vcm&(w@lf(_d1
zSCZ%-)s!sfQWvCMlRszqbY|7ScDAi~Ce+ld%RA8*rm)=b#{^6<<c5}Ne9A<8LB67e
z)d5eZB^V6`3h!Lo*}1l}BEA?hI%M(1ac694?B&v0Tc;;bU6?5BN4CswX>}pai6b*(
z?f~+1uDxh+yo9$6CGo{RpT{@10_Vtu*p3+UnESknt=^5(7deTspv!Mn=#WL^%EEi{
zR_^(5n{h^C=*U=+#=9uUuaR(wKQ4fDtdSR|)z>enzxmwyYBeAPv_PJa2!-Z{7KcJM
zoMvcYXZZ4e73t#aLY;LpUgzG7QXH<LLZ_;S=7qv2WPZqIwL0>&kjuC4Uq?G-5ojEE
zhB0o~t{D0cp4OnB_7*%qI1zq?f=XdYL(z)X^p5$f+h(rotY03=FRAVLy{)pXv~|Vm
z`HjoHHcRKa`bu9%Eh|=(iDAe@hcMrY(2JQ9&qW~I?3kMJ15STfuK_KFD!v=8otb`d
zW^MSR4qmAb^TYA@-nczsudi6Ptl|gv$~9U(?!D{`hpVs8<uK-^cn-8zBXtohv&)&H
z8V3yAj7YmY$zpOtMG<g7q{&=B%;=Rx_^VE5{?h!-1*-gdoNAB7?6~O#k6N%95l(0N
zUb(d~b}^~1IvoWC*A)2kWEv5R37Id?kH7+lbE!<0{=2!`;k{rAdtSbOTEY6J7|T=K
z+tP%|57UMKGm;#A_&h1};&O0PL_pn<9^fA7ibeKFeU9PXb3K0;M1|@H8lGNgcwULb
z#2UQEGa<_$L-wc!FTq~)8UAp4ge_3G7v#|*m>_)M9w1d|eA!|Wuq1OMyu7YX)c>-4
zT`U&+UN{jBiSXy}p$WHp2ec#V_q<-c*88i%=B|RhGIZ~(oAYLUY}U)=<>eQ|z8^t5
z7KQI}yJ1;*7t%YP^v(2oy)S{H3irX@(yi^AWsYMC<H+}Oaa|TiMLB(e4QWI%m(2jn
zc#ugTenAp#72npg*3bCB+UMK&Q-6I{i`Dw3roE*JY`N0IJk|M|273Clh^=Z9niVPV
zf44v#Vax-J&3|fV&0~uHff(m>#+eOG|6-Q;r8VA7v%Fj}-S3mjV4qwDdrs^Y^Kspf
zqwwfEp>uNW-y!*LMD9dRqpX!;*j(8&@Beg#m+LHFt<L_$fJ8YZQBIu1y+bD7mh=2~
z)@nQSU&dNHljgz}<UHC;yJ1;qe%r~=e}$Wyqy;PJ0F;|CBZaXX+k8xK-gLjYdC3Ye
zHKuhP?CqFKgQT#gvf*8Y$}w!Si_c6z1%MM3`5DTfZZWJ>D;DZ{etyX3wA*cN)uH>W
zxT9!+#~yJw=D2O*!IN}NPM7sL96pCbI22nxJC<m^0LsJnejM2H7rFypmq&*gvcu76
z4QP2__fF__EDqL5I#gWW@HyQ4g`E2*#UM~gl<UPK_p)q1k|rDq&Q=|3;Oui-{RNta
zujn}Js_F=+0o~<ybJ0GSaqzx}*9Mk(X7jgKrgb80w0J9PSgwIXWUO<H?;}AXDpMea
zGY7^zZNQm25~FW<CvQOqv$2jzLlV_X1B!^vDPIy@4C6OvodwdQz0lK{SD5GdV0fKX
zh_03;p@u3~Ceq^4JSw8K{>io$mDug&b7C_}1!oV#65WUF`PQNyO|#pZmjz;hObpJC
ztc7{baHgFGUzXoeoOZ91wb;@Q;r%NYtMV3z>BJ<PvqN@2J}8yrTeoeU=#}Kq!%vZ%
z#Jn%o*ci(hwZ6`E>pJ_=IVpfBbhzet7+;p)FFU+niwn_^zb|1k-?^vT`}+F&M3NtU
zS#}AAm`?We^ksf#Jt>TPD$7ftF%2~0YC;*dFUA`RUDFNm&G>dwOFOS8YI}{^?~6hs
z7mfB6wYC-k#Hps^A}pZ0@J+n4olda{?|C0=K1cM(v_4;tOj}g+UGqJLFX$n)^K874
z+WG7`%^xHy`XB{4lXWe8?tm{BnRHnP?uw<f!gv~ss=;;TCmc#dX0^|}+govTqR0V>
zW7$pud~%IQ1dHo~`g%QGFZrEVD__a=^*wUHu-4ZyU^PKXoZTa7a8qxVGZxqG*Vg0O
zJMYIZiIP&+8pMhggH8)Q33{2btOc5(-)_Z(sK_X-Y^}I$hCvL5l^!-zeJ{mNU!tn0
zs4DRf`JpobwPhkvC6dNh6L8X=!2Okd_#i@6(Etk}-5Zg-KT!nX3*UL74~jVu_1qXo
zEJRr3r2$EqQ1Jb#Tk!p=TbwRI1#rTJ>x4$09^`S#yHJo(Fm>hbLd4SP$xJ;{^YFTp
z66eZ#jQtf)`EV+eN}Q6L*{Fw*=W9kD<D!otkz}$g%Ed8vA7;#f_xGm10(NE<{;6~i
zs-I5tf+o;26FfxZ!T*xoEVcu0+z)AoyqoDE`E@g+@sSz-jZNZp*ezY>)`S-usf@p`
z6u}5By^O!a1E=giStj*yU*wjUTS_(~_qT`oMT^8io}^{_JCdme)%Is<V&2S%gSN`B
zM&cWFhIApfqf)(C3ft6$Rvc)RHz-h?$c>aKgh0_-t}9~HqJj%x{;QVQ^-4q!hg`Ty
zlBfAB*Z#^8(Tl_lEilhylM3hTn?#Ww!FPqNR(#t8pFpu%l!7%%p3`H8jg?cgoPCMg
z89KLC)dCzH(A4VlLr%0@%2m&ccQ9W;`K+tOaw?Zs*h7@Ewi3#HG&O?dTwb-5I%pP@
zj^Kk@FfFdQux-N*v2()(r@5Tv4rfy*e_X6?dBH_6<LbvJyEN^LnmV!bg`Ei;t~ng_
zxSUxNQ*Cj>w#)do^D}(nXV~4DmQgjZabUSO$50AvE7!}>a+kn1cU!SGMpS%*?o7MW
zd5yCOUmTGy`<b|xkKKf--h@{eXYE(9{~f?hDuQu?kh2saF|x=PvS6)^r~$`TGX=7M
zV0fRO5=+oe#%*5Jf>RLm3>)L}_ukNFAWBgSyP|!n4#TI0>u^#pq5`7*4tQsZXug&{
ztmSFXIy7~_?y?2kx1#?i`K1>&H>c9s7=_Fp+}MdVx8vhOtk6Bd)(kVD1mEl8&l8z;
zM6B=SJ$Xi+&H9tfq9nKKibuRZt7WeYtNocb5>Lguvhjiqu8pKUnYSm<9iQusz$9B1
zfkz_Zog0tGyC*{?T}=AY&XsM;W=Z?FFq^4BdtF`=Z-CxFx@15#E3?r)Zb_-IvHW3Z
zvDxSz@(Jj!RY?fVQP|pEVAVk3xRkAX^PFY1L5pTBXm2TUXd?8vwb;b1{apGtUcb-R
z7%Q0RuxSMmo7Js4AAy)w?5Th`oa(^;>IlP>nsS)QRqDm6%W?4yt~_pTp6iA!x_)b{
zu_WJ<@6<GW?a&w->>c<Fy~OwyP#}a+H@1UVOO5U?x3`(+0ui>A=N>mwKrZ32lgnFj
zBX9Q3%v+v!rc2)*iOrOn!#*7P%Pr$}{c7GLcB;bh7Iul<_@r@^H<H&&<>A}U%bj8z
z)(S4Y8e7FqP^7_YpB6pXFM5c--AobId12ZB1&DL_rnJ-yfStrc6)m&DWQ?oU@~Sio
zcx^p>Howci(C^H%^{ij9d_#Sex6fNuzmLVAhEBdAZLh9&ISO&~;t<i(F59rIv#BmF
zM7*x)PQ-RLaKc!li3@rPeZ~4EP;ut#<aVh+!Y%JoA@^4%2W$_?y8=?otZBtKHvu;e
zL?Q^QU^)CLOy-*Al|y-YP-A}Ad|Y<R&)Sw32GU;$6ei;S2#gQId78U;E(8ftT&b5i
z@OA{^@qlzhJ(b1A=g;4hJ^v-;jMiC!!ot9;*()4p+DZa!lMpDeeL%6eAj3A;>PzZ%
z*dwSuhhiy;78H~gTNMYs-KZ*_nI-i$?tkNKl*F^t$rkZ~zkhF@kD5n!ylKZFEuT<=
z7~~NMrUCPdG7vlWhgym|h-e#6gN%3~p3W=vM>i}xZG+Oj%<Wj@@+lU@?JS#9ThmeI
zasw-{kVOvnvUa7kxul^J-^8m7>P`%Z==PW7RpniE>ctl<ai2Tqi%yTCA*T-|*l(=u
zm|Js$U4h5$vI>vlaei^m8m*|Ia6#QwdDVqg-6+7xm!_E~^<(Yg^LP(d+?c#!&buxM
zMiwY9Baj_%+a1)!r<4Y<C*|>eDv3jPK3q@t@Ckb`9yQGpdPOoC?Z$TuibYRx`YEhi
zaB?3?zWNO4#>Oj97{xUQ+j&=l%^%<Ef~68~@A!+f29JOV5Fa(Z+ftpp*O{k72KT}e
zUh(>aT^-;7RdZuOzgJ;d>?&+Q0*KXI!s5+eTtD|5cZlbDNUiUzu3wz*g>t|$@ebOW
zL|a*>Q3LKf$v?S~z$3u=SuB2m7}i4UFJn!ZQT7ynrAusYU9qAy+EI(f6;@Y=(-hOt
z=N1KOa9g1x(NX)BOJ8yMirNklO+w9?PDb-p5h-z^X2ML#=$ndAGk@=tzr7Djd>h*~
zK+hz(e&#HX=Q6q+rnsORj0Lznwzzm=wj%_GU94w@)oxDwqyaxZ^lBPUn0az99mDV{
z!QZ`KBh7Q5nhI)$DgAzFGy#M9M2mEp_V}(s7+@CK@#9xLzM3z<n7Wur;gBx98yDSV
z@`Uk9YO7b{gZVND226MlXEVz(&=;6cIs1kc=!Z4``OX0}a?;z>naTC<?kZ9^T!;hA
z*M0x~9^<u~Y>tirx$lrW4sN3{uRNeO*1O^>SP?%T2Jqa%@SSva+4zJnd(4+T*922R
zPHC>y*4h)5Q!v`kbI^yaQaT~`OFsG8FS#{}Gru<OPrw-!<|Iw`ooIIMP@PlL%d8ly
zNu4w}Kg(?je=IEs1aZ!xR@C6t+*;F$4HEvf;}f`e$@oZfM2YtF{2%Jx1U{~_ycgDc
z_HFi6qtR$aBaKF~wM#Sds`2i`u`LHLA%sL^vlBuvSxCaFKmh|Ob%3UUavM`9HI!Zq
zr6kY-qClY=H6OjeS7<Blh5pk1`n92J?k!Bd|MR@(%#0-4Bz)WNORTfcIq&+s&-#Cs
zCbIWeQ>lBS6TA9dYogJZu-yJ#6VZE9sp|dNi4~~IqtW+z-iH_5JyF#fvDD}ucj3dH
z_ui<aO;~5nVYc?eJBD~`$uAL!ZE0&I`vV(3nk`kY0X7g51uil~ayyR2X+Tn@js%KZ
z^1o}KmUa6{CZ{JPQC%D_J)9kK2Bi1kSsLcmZ$50=Pjzd1Y;d_~)6NaA3oBg42t}QD
z>Wisd#QqT178q??ec0+vXkO5T5_y$0qNkyx=ukEIhvIbmiTrLrel4_0(mGsK7SLBF
z;T_GynK(L0K`Wof^i-!q8Dex+qY#|yEZ<L7gApjmebOgBDqaS@2~keIq(lrm+|dHA
z-t3Hk@VWh=l{1o0UtH8xRi|L-Gv;SaY?ymrT$BOS-#jB(b3EmRG;sI04|pH!n5V~M
z%=4q}RF3l~N0OzRmH;7bJtQt;sp*h2_&S-iGwp)NPp&J51{h8C6KlSBsd9i}C1OwO
z+_Pc_<VRVSmVDDHRBdWVf=b91f@zwNYGFJ7<j?pD7X_`byr!8}mswL)jT&@KS%$IV
zwVETaJ45iwbP8Mkb@P{gMoDD5U%4EzJwZdzH(h_nW8^X;q}ZxYdoWz8>-~2<&Hda}
zZ#8JETIuBa?z}|Tk&M@M9r~!+jy0lIXuYsDb&0MJ?P3N)1x@U~t0CWY$ripuV=lI8
z+<KMdF&knTtyON#-wlFf4>^x%@gTvS*sy6p5XBUx`pZ#Xk9~_&beXs@072nRn7KHc
zU=}(&A+=;!0gBBPlpAB!Ux$hB8*Ht?fhv9r`_q6`PvA>Z%v9-{r%i-hG`n&Y+x(|w
zXj?cg{-D_<wG$0+J+>JIf0T=wHeBH&pj;Oi_p14Qsp0W?X_g-%>{Yu)2iLLyo~3$7
zy7wWr^l^PaBjvZ61e8jii`;GiS6YTN0-cdh_X63h6{#Y)tybvgw_NFUl8!P@oToe%
zEuE(17UlBIvLBIlxggQUNEBavQ|i5zlKC5VTC|c_xynWQ{HiPHBb?`x&+NRBJ>Os{
zUw>t7nNUYs-a0;uMGpgm$}qjYOdU6=Ozq+<(3j7xyF&W8E0%{#h#}O)d@b5)8AsIm
zgqlve;C9@)Z|wp@&)&90-r~$ZAMp2G{$5Nl6IEp%>>qgBT;@wDJ`p?RwSSjqAC_kX
zahk9GgZwEO#@@q+(nKb9@(E~18+)c@jq`CrWR3+X4@n;=Ss&2Mz{gDUCI7(tHd6yE
zwy)d>gDFo>vG3ZW;uw#v-{I|tkRQR(%6FGF*om~!M|@|q3=duDdiyI-T<D5EGJ=ii
zYBlD2I?I5WdD$|g*}cIu3Ic@t65oG^8Q1mEM@9`e=$7xk#Mi%OX;G_IGh?cW^?Tj7
zVbut}oene~QzU96r)$3bSAO+(xw>b8%@mFLvsJdKtm<zUi%b4=?b1Mdi-<2@1ZOOx
z&uGqq!odr+Oln9<DhGb<XY%(!3B(GSX!5%fHzaoD>F_#l26#9#p1=DVL+qd6tyqNV
zC!fTS|AiYr-tmk#)98TIhb)Z$l!hSRY$>r(CV&%Nw?JllZP(kn-qZEOdOSXG?PwV(
zvax*f0**WLq&=VCc0NCNneQr5@|6d*T*0<^gOtjA;p~#T=7lRf6WoNv_cU4Z{WswC
z{1I~b5x(Fj#lLmiqwB87=ht7yI1F+OnBe?pNJ30N6_6SeK&c|ycbR+x3S3D*T&AZ?
z_|K+lgS0h<W-CLfio8-!)iNn~{6bv^J%eG+*8atwis0YhL^(Ub9o_Bh1mP^yygKp|
z<R*UDUoDG+L*;VC+g>Rr>SOt8$(^s12M3EIJwj1p>Tdjf(a&PgpI(*4Ae;$@T(A5;
z_N$S-p?B<y8T$=;x02lL>ia}$Z%o^(n(}nNmff2)_CYB_JS6EV2-|D`Yfy_Z>ELv9
z$rLcnFJTcC3dJvjJAD89C3pM>rg#AI&c#5ZcnP$!FVH=tQKGy^D&iPFue=q$_7Z2b
zONS05L7phkfDe(y9qc{Mz}%-1%EsqxF`y?zW}By-Q9asfuea>8j&s(wHrVz{UIGJS
zzIC{PZ#CkoC%)~e*fmGI`)uoNw*58>ig{~c!Lr9&N4S7HG!@Yv-^YCX4Inl``w8?U
z3<5^tFbybb(7zI3*<?`z_rO!9CSmv{Npa{5V1lL(Z7)rf-ISK!bTsc>upYDsJm?jc
z>sqfM%pd{`dXbhI-aEeWShp4SuD{kf3b3HZ&2+C1CltNW%(`yYyfG?4gvgKa^N4-^
zBhU!4`j{#qk?=Z<6qujSk9%LViiOOD?j8qeHN9~t%3@(77r!t#O6C}rt(O&3e2r})
z!HSOZ(y|VSCI)4hZ9^IRx`R}#4jG$LH=!p|GDl*SS%>%B`*aW`=AVCS3nQm(k+A?(
z9tb_}!I`l53BJ<&(R&uRFwokTf1z?=`1wBc<n_O|>kx`c!KZ*uBW)N`K%k5$A!YSK
zd<-k=a0Sy1>O1K0#z==Zl@1Wj0zaX+zkZ0NLRO?gqs9DG)X_6}80O*a-`$6OUw3v>
zHd`=V5z9qz-uw<r<r&`ohm_DKawFDAE}AeDfPPr^a5tIj<9%uU>*h!g9ruiwXI(>4
zT|1Q3)5SQh5iY15ZoZv&qV6j{DOTW%z=QY__!jmy7-U-`k05SbiiE?E&&ZLFB?{u2
zJcfP&#|fA?{OJA+<V#ab*!C!S6pj*7hc%iS*_s-KLrL{gm;XEFYIC2QsK|O_j#&6D
z90f;hn}54?gns*dK!2>i-25P7O+PCqJKh0F5ArYi>^0!ShAFZs0dfGpm<}EhJ%e0N
zK3ES0&mdf*7A)<5yz}nd;9w3aJtrLMOC);I8@m&|$%v7#Hdv}Lzjt%By16QruWuA5
zdy*;Fpn>G1`+Gb$l8U7Bp+pRimGJmWn(rLmG&~Hp+2_k)gI?z7CRkoqTeTq7bd;}E
zmSi$%d7gFJ@_7F^PHJ06kdG#N)`OM~xBkN4<3yatjS)B=Q0}wkt_#eELIwyTyZl_6
zDb=4;7ci*Ccb*D6M4!XXPNaL1Cj5O)BtkBI0Q4hXn_h@_^+7jDyh&#{rExCsO~S3A
z;Jzu1MEofdCEMJ2eaPp{As<j+(zNupVb_x=1SNO@ITNORmXtcBLx&iuc9*3uEa=v*
zOI+)OC||TqO)cVgXK{pgoIcGv^WJ+AcDDMw)hDPM*{V@DEE`v>n;P8zf30q9Kb&^W
z$UA3sRo0&S>!tL!he$Z+dxVwPs!Yx>n9#{V)S@o_`CVs$iur+LcrlD57DyCwF5LX`
z>lW_W{a@b&b_7?ebQxExldoUcg+?PC=ogg+#=`-U27T8z#6gAy))$!Xnc(?zi!2tH
zdII{K*hD6ct00D?&rc$Rt^jM$JTe#<Ffu4+yvOU!B`0ICxPZpSDHR9$y2AtIo>*@z
zi7?`sM7(jjIF!$o2U6vck$%^WC5G*(ClbA}p7H>4<b^!=Oe#h+6q`tO_j<W_yf0$|
z#alyE{z1o`vZpe+0=_U2k0Gg-=W5!XmxG_D@eNwBi2AtXvje|yVj;MveS35e^4u|m
zLFhXKTp004%UYZMF1feNHB9@&jyW2s=V&vx;{=odroD4=(@}WY&sEQnkIuR3DRkS;
zTL6MaH+j=<-?5wBDMzLcX~w}h^fJl^JI!a6w_#lz#Ol+f6IBMCW#)q$lg(*nhD+c}
z+>!OOlnM;2s!ST-Rc1<gjb|qv@29`RyWg3s<~HW^98A9`O7fb{qR$w8<2`10Djs#5
zP`77`ukr33qt!Y5=3F?M%;r!|)MccCf!SFVb2zuL7c0t;q4WpsO!O~AI>|(dkof|&
z^<YOlx%9$-Z2*-aXUB93gw2z>53%e4a1YisjLjwdO@Pbp@|r(kzFzY-dfq@XPm&J(
zF-$Sq54cmTUzzJ_VE9UZ6f9hD9w>CK31EOn6hM13fLg6ip?zs{dZr#^-VvXoe0}Gg
zYNRLOat^EEKCNJ6jkp=Ibu|&Uw8B=mRLJ*Ro1KT{^868D>GvVeLtcsYXz^@cls%vS
zqcm&vD5~Lv5*|F16ZSQcp2^XkDBM=)XMS6u<^0%FiSC9ugRW=N2`&#6fQ?nAypwJi
zgyVr|P+ty(cgXIoQTJvYt5e#|+0(YLGN+K#SDn<tG3(UOt^22o&KW5M{&s0<|E)u(
zLf!hL3jgg4o}G4j?6l#UhJFj+6}Ig%l_yvt#C&P%4PeI%;wRwQ&T$8Tj%tT~`QdHN
z$4I>g2h!VaBZtxi^wl!5?fBc|`R%vM`)>m@=$iKji!!)xj$0rk-d0GPudcXr-RphP
z{&~DVh+jjdTK~1Jid6b#*xDuDA|uws`VUjzt!kejRt=cGe)M0fA^;Y6memE9_&@+z
zxW46h-ST}*z9jAMu-r;n1QZHlAs7o#BdpBKjl%T6>}ZR@NP$tsC~EzJ)a^q-62FjT
z=)2+R3v7;Z_}U4cMgyCw)%rjls8qnGnz%MxZa-6uzUyP}ii$2)cPvKaPa{K<#uqR-
zb!V!tx=Dz+p}r{x85QA@^aW#bD0u3s6DO_`f!4B3A1Lk~Q2^_FdYOyvSe~)sK;uY;
zE;eq#%GqhQ$-cNF3jZ{Z+zfP!=X?#{+F<<0;YX2)(dJ4zpFkIj)q(YPfn`<dd_Mm8
zT>$QXGpC=wT}A~-olo-zxPI5;e+qN>fjjT#m>+Z^ur0eDL@rdTOX}7TVGc23rnXs;
zFAr3KVm~u=_c7Pk{A1qzHE;Pk@q)zi;eFZXzTS17bE~rE*Pl6C6<J)xcSqT|_P4@X
z{{g&@<enAZmX`q^jVLdyDjhVt*3u<s;LHM51os1c=NOZ7&6VlS&XL}$-$1s?`(Fel
z-_~QA`wpCZ@(nn-{oR_o)*(`AFHQYL_v@xscC}+$p(A|#r{u}IZ+BPCIfTWwXvTJ!
zK0zqS_?Zs!$=+q)zYAVA8$d_DQH5z<eYqJ1etuYDCk6HHSzl+YTbNuh3gDfq>J*@h
zLs{ImP6BRxjxt-LJ&Df<-V45CZ5GWnaN_{AXul=@gEh$CMW~q;X(-b(H$TNv?PGgc
zXgx*3G}$tOZ{^7nx%O*nM1cL81`R;-z(_-+6+9u%XI6dqGiMCdR5zW`w7Pz>Kq3|$
z!ScAO1Y+#WCOl@~u{q5yK#J4!x`wBce!Z8Gv-qo!dm3m@tX<oPP3*ug4uS%a^PSw@
zq)IDb4cLl6k~U?TQ0C6My`%FJDNjq<eH-$ld#@hvb<bMMAW1r0>7AhQAF_3;kka&N
zSVAIa;1avv$qa3&!ZSa6cz9%cC2jAA&n(uBZ(?;88btXQGY^4Qjq8!LpKF5Jv8{VX
zv?ZBHX__iN1<-3_a5krPncA-YU8%_4$MMYK)tVW$&${|fBk5uHXRP2BI#UZoG9W5V
zch7oB1G_cj13dd$+c{A5@P!JbC}XvWy!nCGS=Q@7um9aLRvE_6@pT6J>>PV|Hyg|#
z>;#i}kaDHSOvs%BOWfLibF@9)^6eL|c`xQh>z(us=%s?$H*tyIubJi@^+0p5oUtMZ
z!)Xsz1L)YKMx5DmM0n5=#;Y8&Jp~07AWRtc(#0__I!ONHqXKfe)oW06C~l$e;ORsG
z{<}~Qrm-ufU%9`#N7EJIsj$ygw@2TBY|e(_yhl;qDv$25vV9fkNWK1zu4*0MYwCF~
z35{RDYb@wOGu4goORJV`qt{7fY$I<cis_I6p_1od1Ld#LY6fxvq9NDiV0|W0h!Tu*
z$-|l-+2cpaP75r)KuYok@}8GJysbWNo4ux8=&@sA*VK*zQS-H?zDQAGk{8}t-&Z!B
z0n12e7UFWO2Clzxn%s?HlLc;%7y&=I16FTF7$P(iDUuWP1BO<H9cl<?2c+CjH!Z~p
zLb%{U(%^%uM&_FvN2A{60qIy%F%YcnIFZE8P%L$_e@xSMOe*VddG>cgM@LITe%AMb
z9@ZiGII&RLC^$3yll!C)(Y|g+)s8j<0t+D8(WPid;P(?092FnK3r$KSq7`UGQ-m(U
z;e<%^%vH7yb>6Ig&8A;LMAD0N^*6B89PJy@pYXhQCx?$=6bK-cFGgZ$uerU-JB^6?
zK2@L9&0-I(^qBf6wJ^$(08PCc{ka)sp`qm$hQvcIm7gXc=v`<zxVyPArx0@lejU1w
zn@m$(*o@Q#$-6x7F02i-LqbPy^MY!cJ1n){qj-_JYKe26@fecg4EA8dSulzoz_W_p
zV*p-z)&9ZqtEg-Jb!7?V8YaG}PCk2naj1nz0oyU^&{Ql~fr<^0b05j+|8&C#J@11i
znu*xG8RVOu@jlcza^wRC2ddTbQW3QW?}wXJe0)?l|J*ygbmV)F4VU{72}!Xe(9P30
z-viy~wTOwkwd)l1mQ*_UAiu~8%qk$t4lG+G*awKejOzj9Uy1MGx2|3<Qzp#q7@+0M
z7L3awz=>t*Wk|A<)Sl&xGBa;t<vTW_IGb!`LtXBNF+KKL+dXe0js<7LQDU!1D)vT4
zN#2cw*<+a5i3zXypjSb<A_NZ<tRu#oa`0aC6!l?m$WvA1H7J-zOwmQPf6}&}q(5$e
zs&_=U?c>MgpMC@vAFI{Iz3juqqV2+e`i-@koAuJaR4j7eEHnN}44V3`OT^FyUeYT7
zY=d#)0;v+eer^dK(Knl74xzG7v6dP}i`N)SxaRu{`tR&TpU*ND&ARB^M28g&4UUn3
zL4kSFaT&<czK`~*uQ$B&-kN`lmnu;65mG;T*YFnYjeSr?4LC)T|45;HhcPP1w;wcw
zCM<>^`*+e>A-R0&>`u)a$+bMMr`aEt=eZ9N9cUUeh|RvxnbDFdj)1$EyNy*ZORb|P
zgl%?vs=iOt+-}nrTQqmX)n<y(MNW$bpD9U`nim_k84o*qeWhFL@R*|FWuXw%BdT)F
zb#H^o1^n^)IwC#~Q=F7*n0f3eOqL6s>-KZjF}l8vi>;bHk2=B{Nx9!p$>v4U(ufHt
zX<9YwIJ{&fb*dwlGKxJO45BpFcz{ep<9pejB?=^aa&43bC@2ObGkF-Epo>iZ8&t-|
z`a1K?Wx9zv`x^w0;qW=$7X3aensy_oaL}vE?R%&@p5Tq>Y9Awu$MdMCddc1e%R}|}
zdFr{czMiM4bjz(OF456t>IpaUH9gy|(B<k$WA?AbC()mM=*?}c&nMFrMy*`xSI<LQ
zEHbPw!-C5yC$eWDyFklfANUxT=zD5;Ux^>38Z6Q#>QuKU1`9?=adg1z4{UIB#A13t
zs`|kCc32Gb_|V@6J=XY;J2~W*r}{$*U~nV4ZfV;p@xB`v>&glmBj|OWpR%qL!@_kP
zykcE|c6Y^=7-E*AHLaxzWlCJVu3Du&u2%k1jqu+%7cW-|*=Q*{@8_>jt7k9O3|l%T
zGu0ZjNcygkzK|sU-Arv)jmkh%L6%GOF@iP9KH?h8m>9dnI@3I*kR)JDB9dG=MGMaY
zZ3+_W=enY}t-G8MmKHJ`&+wd)Qm;C(zZ`=co}7(_-Eh)Pbw{w4JVU?2Mh2^hhq~uY
ztk{XzSS&dl&c(xFr5H8!Z|iF6U?j3}vmO~(R|jai{Y4_E$83#)ouTca(hd>mDANsa
z_87XP*oGyR{!No{f%IUoJ1Bk)P>m{k{Rt(Ba)$GLQ80nA^8N`m)jg0!q5#h^LYgHK
z<?h==G18qP*i^qFQ(XP#)0;O&Le&j16$Lk=MWKh>crHAgM6D8qOxc|8?jDGsGZavh
z<*xrkUzp^p5a=Qj41W_43LZQZpq{RyJ2JO1EX0#)*h6Rq{14_3H#eb#EO&6w1)#WC
zW>|>km%TXm%Bi@wY`U?SOAH{%V9RV*T=l&cy>0RNvWL-H>G~f2-f19CIMJ}vaKcds
zFctWk|D~7blc+y80l1Pg$$Tuvm~7HMY)YTDpk_KpBr*)4bQ;AX$bK1Me964WHa;Q~
zJ{p@el8EDub7M)3IJZt{X?^@wC#schq)S@Fy>(m<F5Lo^*?|M1$brK!U|;@8`QxZ_
z>lazib^uKSp1lWh&(r9OEEp$_sv(h!1t17AP&8opi=I8N-t*X<*^H%{<MnsH6gc78
z?N>MU+`sqE$229X=WeXs_)uJl7=;noQl)N%*F?hX97Mhtc!A1=tP`<wjs9}F7$o#N
zM-tm9PZZmUVaNj&;W<BGPHH(3;?)kw=4{8KHeUvc?H)*xG<*mohIA0)um$+cT>lUp
zV#rXBDS=*wrWAx5T|i9_ewt17VD{7SDnvM((v=L=!`tjc&Z$+W;TbkvtvR`by)9f1
zB@>~!alZ4nd~JLVvD@FeVdu&dp?I{|yOo}+7ylJ;EX6uKwzanyjfcXCEn|F#uZ?X<
zh{Vn@;JEVG4D?Xof7fZDIKqt#SCv&-r$E85TFKO*jiA2m)U(6mBp8hv>4QNjeAB>w
zHgWsrfHQ2}_RF=bDDZWVF`A(47@trTqV<N*e%r}mpRzu57<x&az%ZIa8TQIUE7#LF
z#5jT+RTs~MRn6Gp<&5o*cyXl|?~8W>(Xl(Kzlm1AhxA{tV%nxb!~0Awbz=6aliQ{=
zy}NJc*vP!GJ#U26l3{yqjk-V35CMm%w(e+eTq*H7QFP7MCKN4SAK!fPs``rwLwmY!
zY-b(Lm{P~^FxGR(q!@9CA_Os~L<>Y5foaq_kj6BrS%aTU>wtqHr^S7s;jg`I!J9-F
zah*31OdrO{+jz70W>a4_^;=JSUvlyCVMjrJJO5yh=S@?rA}$sR!NC&;_iG?dtRLbS
zvuVadfL91OJ}g0Djbe9c$suWQdRA`11|r68s-R{d>Lb`}s)l6=^j|qLK0dRj`QJ_Z
z8`Yf~M(X|1WWI?15bV=mAK9?8`VDYNg*~$o&x=^kq-WAu2j+``a(ZcLu&0r&W~2B6
z;K0&S8dojDIbE#+Zp5F<zK(m4as5arX;~%VcZro{3W&3?4MI>Zk%l|1!}Uk&A5*ak
zQQw!)gq@1uH;I@PaUxa>oPi9lsfuj+DiO7#5&VzqSEb=`1d6*_|Mj;pJ(_xWwg_nM
zu+v?%W3$3DY)u0KyO@o=i>}hRSK-^S0$jp#Sm_7JBO4=-r~+%3Sg7`85b3QTl}@$k
zIyJ5T2mL^av;g863!&K$dRa?<8Zo0!>sdflHzzCrZ#U?_0k65}4Twe*gbDIpR9CJO
z;yR`ICs;OMxO2kKEYp7;!r-{Cv3VGHLuJNrMqiUxoIy}mzP1Jn111+34A7?fAT18S
z6$ZVkXVS{u@p$v^GMTR=lxR2yF#9=#Hs-=nxDCYPB9qBDkA{(HIs9k|=H!0km}PAZ
zXPj8nx!3eO^Ij(!w{xk8yz?I$UqukRuiD7%g(VsOwM$~LO9ywf8#;>Hz#nDG^CC?%
zhI>24{-ZuM^}`4a6Qlr%kO7ni<uhbDlpBVAG%h+GV2)FR7_OyQiOLU$V=y7}Vp=NE
zAmm~invWwp8ZdXhMLpMi8g}XiSXCshyvI(#>T45*r{fZizGb-aSTsooaJebEuJ_Xm
z7$Vu`(@uDcPz)_&tM*p>p(M&C)h^oVUsNik)RG)uqVZsqnP6;EX$Lqtnr7lfwhh~_
zYr5f(hYjBDl*@NPrLc_t1^Z+7_1TW`Q48|`Q<ZVODc(Df^KR_A8)GYIA=FaxV`zw!
ziphWqvRMW7W&+-MPDZ)Tb0YAo&zTn~ryx2~2jHF`#6inosJTqre+j_>a=Fd^w~soc
zoAyPlnUp(?6RrVsq=?t>%LHDA7loStC6FWRx3!KQY8|z&J<xzJ!xG~CWibf71eQAT
z5yAiP(Uv-wZHQnz*7Y*1X~ASd^MDqhKA4MW6x12j0`Y1cXWG}KKR51n`Zllsh5WVn
zv?qg9DLB5l0)12KAM|xNyAPYC*0t6_k>;iNI*-0N@m~JfUA#RfpE(Dm&C!o{T$gu)
z^^tW<CNxZ4ao=>vNP>QUfz$9g%h_0))p(FiiGPx?ZvrYzC=uoDO~ff2zx}u)u4mih
z0#0vi{u_1H>C?0o?v2DgoHzk@7jV!237vxu-_|(Vx{5f$d3fb?_!*HM0E=%00*pbb
zYDlBlLu$d2O}M}^0iI%x0g|3LJ@qfIxnX;yzx$d*{9t!~WqWrtnGP2+x|Q7cYvZHw
zWH!>*ZP@>qPDV#ICM`Wvcvm(VA01EHS}c`a*>zJTS3nSau5#0zGo!ldcE@s~POn$l
zQ8%<mF;(i*M`wDS(Oj(CEgAJ46|Y{3_QXu)6D2+-VaFnOA^8rouMSuZUvG_+i>XX~
z770Afe~QH}hGRV!Q|XJjSojAZtAvL1Im0+)WFtQ)gig8csZikuk*pEjuN*q0G=I48
z)}3fBp1a=zKl&kjql9>q4dBkFC9Vj@4}Z(_zXyhZM14$Qtkbh*YKT5Qq~Zt|BN^S_
zi@(bxZ;eJzor*?pO=ez}xiu8JHPe6Wf!lAtJ$~#Mw&FPN{?P8eJMBza*367$O*!ei
zyX}Fyy6uXtSM2V)#8m@(en|`uBirng2Zj#+>d?^0UVo1@4EBi6qs(6d9_<_>e@O8m
zjmd&SW8$<B%mHj!XY(YQOfGETU1Z)$dIqd8@jMuc@;+(?ZcH9$J`0DM>a-J2V4lnj
z)a>~5u&ugxV?BMHJz&QTx8E`2`8)F?RXeVBE3R?3tJ>Ayj$}uB7Lj|*^N@mUF%frq
zOb1VX&IuXaN1`Q6o{1g(M{;@!zcJ0LB9UIlNE=S?=;+RFBjns|no75t(sLik%x=iD
zl<&GM_Lrg?9XQ}S&`mV4Rw`l%{j>v_i9ts|Y0*~zLP!1EwwY2(dLxDoHZRl+%zb@3
z0hNIr9W*IFF40zVv$CD&GBLkkNu+BleC*WCLi{UPvQ!%xv6wtQ*TuVNI%y+qnQ3f|
z8L6IPY^i^f7i)f>@Co$p@KU&YlM*sq!&Lk8Sb`6Q<MFVaiK-^9g}}`iSsQS$*?5hK
zZjrXNcy^*UVP_3{B+?UiD#elb)Kn-I`vg*{V6v3rcu_tc%^;JEs(^Rx(m+>NSeBwZ
zBa9`1tfW_H0jT^*YGw(C6mKLvw@|bErf7j@if^RzSO-uvzsALUI&E&~aT))`?b%>9
zf0Z3qW<@$C91R}$BE%QIp_MZe1Bu~w)rRAP6PdDhtf!xATI}!nGTVAzx(msEJ{83B
zkPrM9#al40IX)cSiS!h_yh(gfR&3LT0tLvHjHyUw5q?O##_=L=FCeIO(YCe1+asQ{
z&=>LS!@Uv1aPC&&wxHgP3{a8Y!?qXc+w1mZC#^`tn#}gN*XP`qAgbbiB=}J8cSGTq
zxDdA_e=FCm2xw55c}0*<>AXmAfoN(lVB18xNZ2#-NG!kkrQ1$!m7CAKd7qft_h#OS
z2gV8;lBFbXUwg8!0a+|2U+M3e4oO>w(d8jdqk{fC0NsBVG=?(>f;Wkesv#FlSW8TI
z@Yoc0P03<v7|5XLc!)4;$zoe4!3sea=x4H1WD>?u?K6r3?O!<MO@|I^eMs|YsK4Ge
zoFJQd*n?Urtr+1<ytm?6;qHO$v4MQjaiWJ!vSMV7!41o1CRVNGB1$rQ-0gKDwl0L%
zwzNR+@$vY;ILxe;1Fo+au0);fNj1@LN4^J8qb0NXgbAOgR{Jh7U$B)V^z{~=1kf2%
z;3P3e;lv;hh?~UxMGXmu5Jw<vW1@U%bIc}3q?Np4_d3{$gyM9A2^>_ML0iqjb0MYL
z6-TK6*-<-uDJ#u$UCwR!2w<M>wR&zs)ZKa8zQxO2XWQpBQ+um#Q)2z0Z&R8fIcR-7
zGVFU05rAJMazk!-ejQ{LKyxo${;is6mQ8hVP{q#Fw)*G&YAm72E0;8P{j=d2d&F*}
zoO<bvINWBH2C%#F+kS~9?U3Wm1afvil^QlCVkT!>BL+zT*MQb0m=oo!_f&kauArOR
zAB4h@P|vq`fYduJakJIZ5d~>;04fL&<fNC0COqqtv7XqrkMKx%xYI({{8nkBqUs9p
z!AyOVVz{wxj1i)7vYZxdfc?-oKw|UlZsxj)011ZGoEhkEB4BPPre#U?>zR&me&<j=
zKh%2;;SeVg9#Iv0xmhMwjo~P}P5s4bJaCF0g4GJLP^&CS_yvv8{G=s^=a(XxEatB2
z>spS)N0_>25x{~)NJ3uBGQb6)aHSBQ!+)kB9^!U<A{Ma|Jqa5zSFM7dDmIpi-BW#9
zTyfGQ!TbLuba6t?tS8NoiL@xL8T#|irse0FOO@^uPVgJrzl_v+tvbcJN}#*j$V+<t
z_@%Yc&(=rK#Wj-I;F3vc<-kMK<xWP9&RlvRHzGQ_Vhre!l4EDVUAs9*afh8A0IBu3
zPSzc6Txte3?>b`{#sCy51BNl@<_tTvCFw%)HWPO{*yRu9-JEWZ-2X&tY`5nljT!QN
zXpNY4{elr4!Gg%M66D+;)u`cYFmTRw^uX5_3ob_ZX_5-CL271y>_GHykDex>&etpc
zLt&><hX)nLa=WdmT+=}9S?ny^y3uUb;b1@>!L)@g2OJJL*@Bi&OoQkF$9r5%(B&i&
z>PQD!Kdlqd7s~WR3qeqi&IxdDQYh7`0tXLp5<3+5mnrHjbQs&UJa2zrUc&wMW0#yI
zKTcuE6axczkCGB%o1!V(#H98ukXBeacz2SoiPaCn@1gDI8-m>2gV8tC)<X_fhG@m}
zy|IVjwNR_$LcKDC1DyK$$&Vy+^ZD3g95+zRB^$B)EBMMk^0BYC?B<gXvJU*)9k=D9
z=ogp>pZgkoNk7eNJiO>+)CFlXp`~Q27gklQv+VEz4W}r^y(4$*yl2<RN5vgS+(dly
zHSkfrW^-J;52lCITaNF#XV=-2$KRTQNg@{4qc_iAbJtzh%-<Z<<M<q70{$MF?W<jY
zsTDHTk79hlNhE3&Q^!(X7vB$cEBlp{^ZJHU{IP0j%^%zuRzl+QW-QV~?q7Z8V91Rf
z5rat4_0x?;0XhiQ>3$8Ej88!eA*1HODlu#rvjoi52D&8h!;oZZz=fjttrkZ}%6+(1
zpS*52aEo0dVNNxu=vRSwS?;5VZZN0z-*R%mNLo7>tbN#03^DX)@2;CEJTCMq+F@$i
zOxot7u4PW`X?_l|T+?g{IaS23(AI(e4JHPL0wX30Ya(&zHSnh7fJ0n-$F+9UVsHn9
zlyx9&kc6^WW^KedQWqCHk1u^$EOr7YFLfwII#W$_UZ-(V^!+kQIAPhMrG6>51$%Ns
zCiy}@{UR}wimYfUQZ)H9aG^MhA~nxaLE&-8`_l*@w>xYjWzdF~vrd{?qTH5aTD5NV
zSj(TFCF?+^Mr}D=YCVIMUAAcJnf31xC>b(#T;QTE(D4Ev%1p2FxOssKEl>EFi~P(*
zx-1W&{z2`cbRpVtc&_8P<M1+<c}@m8qd{&5)^yGUVE-V2G7lv<7L0Kd+R{u-EFv;!
zVNSU{*H0lr{khu}n)7^si-ZF_S9P663J0l%<MPuuNaK>!wfnm4SsIxgYU~msS^ANN
zerAYyYLXH`a7|ETa2ueo8FK3*QnlK(^lUo1TTymLp^OK}pns5|i#RQ<ayI>k$gmkU
zha+?YG1q*6OD6wP$_9}0mOC&p=9%{(TUL;G89k0xA*0p2AW*ITndu6t17IA;Q07dM
z``M<LCI*@W{+dp|VX`1=AfB4(G0j*UxxZg?d~`SlkLBFVK@UbQZz7u=v*LElidn~K
z6SHGm{C)EYB+W&CSLYCaBTnHJNi#M)di*tbO+03rJ-|=MZl#xGH`sCf5`Qs%SG*gq
z!8_y2z<&wba}>RWzK3r={Dz-pU;IJxzYd~6GUiYnvJUMGvyL5>JuG$U`VdqZHM&W}
zi`<7_mYa|D4{Z-0I1t`GRF2N)D%P>V!uIWj!DCkC*}|bi1wTaO+4Sb4YAw+>GSZi*
zsYf@bch2;?2jj_P{Gi)Equnq!cLU)!K)<VtKf@Xo<h_4s*BxE=cRk$oi(T*Q`i-tn
zf@fmXQ7qA{Wtg3rtXIqoFzee_GSn%UnV=1+7kaF}z~6R0-+A2mU48eHPwsZC4Z5qU
zCtPE3(Qr?ws;h5M7o~>tO1l8S;gZh;H`ky$i0gJwPVRO>dn{4bLSk#Vyj6s>vat5R
z8|7<ly{!EDs_mJ}++BYiqlNe^sTZ-~H9rlWb_daG*n62SW7I=x4)m|v!1N5lX4WQ+
z5SEdSiby8?Vmbl4k2tpo$0|_ma{#M_Qe-id5TSTHgaosROj7WL;v$A{^BEKR2lI48
zoSm4!Xnr7+ICqZpAR7m^3=fXx`Zf(CQw&`=cg_w!fCU0iJ=b;a9E#2Kf7#a?mnq6m
zmKjQ#4*G4P9zHMtQ+eXHNx>`{4d_wmn`ZRDY-9F7lnzhRMU)-|PW&Ph-eT<r_m*4S
z8)`*9UE*7;2L%Js5KGWK<T!?CJFrQQqYP_p7}O>Tl<|P0?@-BeTnENC2o7A@P%{6x
z^Ey8diyA#c8Ep}5P|cJ$Q+72Pg<1S@4}g%oo9jHm<tE)CgU#2I`BH|=e-=3I3)ZvG
zTI4wy{99}t;lLl7q%S4>i-*N0pcBtgeinr9Vp<MWimcitx1Dqlk|5!v5z^t`s!b`c
z)pf+n-rfB6-LBiO>nDEr!{^umM7Vro{`|bW{<Ij>;Fj&Wx86z@!rGBdo0@;mz9$cn
zzqaGlYL0^&`Zd1Ih;1T4PWZ!JHxY*Cn)b%<TPvKbKL1(PqP6#9c%L-IO6#lOBvlyL
z$V|21XN<2<w)bFz-0;C+`)Jk0=3mnD0#6A)A675M9Fk!jZ2j;pt)thrjykS=gkC@!
zq2Er2w4r_rVt32ZXJ%FOE*X_E?g{-_BD-eDb!l=iBcnP2ACZA9J`Dx;>Tumh2e)BP
z%<U(%S7D3h8~)or6B2CLOaErBvJ@+<3e-J48IsVi?(xlx{3;wzsAoRR=&+IS)Q<*x
zVucvyF8dL2e=_bZdXYFTG_=px`u^EMErH?2+^C2PG(Ve*w0+PvBlko=UVaL7MM~ro
z|DMPT$s6$`O@!b_a!|ae`P)DqmVAD&KF+meCY|NPG1zQ0uy-^~5gq}RFD?&_VOhc&
zkDw)ZgZskMD}eQ`LTRgq5aL=Ms`d}$G*?YSFi~AMp3H@|UpugCxHuQ{<)}YKEV$aQ
zL9)|r%a|yZHe@wLD+6#*6DlmShIZ|?;hmK%iMlL{$TDswjRK8oV%6Yy7Px<)bWDyh
z6Vn+VPD1ii68e}URuBavz3e%3LUi5vuB)$!L^EMEG?Lsnb7a#<TzI2iSjnoomn+_R
zh=i5es1=8*QnR;Ree%&qkE90UvCKeHJoUO;=Z_-T$cv>nP3}CN_F~>cp{P)&`mR0>
zsijv(>UKM2RKY(qFAn!5(!<4s<O`P>*TW_05PSw{oWW|$&U8u7Eg~gkSRmUFJ8Mn9
zVd)Ktp3%8tQJkO49}Iz?14s1hau+(7znAV8i*utrVsUPP9!TN|Jit3V!0iW`wah$U
zf+$u!Ga(zWGD`^n5RXF*3aQlRHnu}o@SE3(y_*{i#Y0vZ)zxz1&U7(+Y+=mt8i+`?
zlF6aL`9l1iSDVUQ<GNi6fG7=Tx7eIdCwiWEnL3+D+To~|iI@B4dZNCrVi`PV85)#%
ztOda49_$C}+h4&@!T`etV+;~or)va8eF-TqfXK#w5ap&Z*74jdDHo?Nd5Ea=q4A;Y
zP&QL_LpVZ!dX)Sp2!*!Uz;(VmJ`{3?vP~?eMJFA<XVtDz<o_0u`Lq0AK6!CbUJ{K&
zD4b6ZR#I#Ca?a8~#hORBT&*Z0nCgi|i^1Qu54FMS&<7(B)}SmgA!1f@mFt^JC)AL3
ztU*i)Em_S!UC~ti_fI{l3;iDIKeEw%K`FtOVIi|1Mh+MX3d4gshn1|Doj|RJ<$^9k
zuT6S}loB-^;cau>C;r+tR~+-jOU=LifG&)!2Nut&>I2uC?m5?d(Pqc}wH>Cjf*H5;
z{txI84N2?YzIekgdhq)oI^@?Wxh4+S_dp;MyChCNLM1PB{@6u1d^nLN9O#(#h_i^A
za*K;j&bexgLnU|9;Z;TGv>HBjk}_iRB4LTV8oDpALiW{T98kFjM^_g))gtjXC>!w@
zF4_b(T@*yh`DhKPxUKYKzS9B+iB2pnoIbs<Oq(TkO8hqh&7Pc`6ie`B!M}HMu<&zT
zxLJQU6dtnf!TVReJ%~N-c&Gez@UG@Ee**S%{0ClP36|BZu)rMYI?3h4RD&u7?l(g;
z|2t?HMbZV?l3-C=1<q2_&FKpKu;>{$@36cG`;|$CD^O)zAaxArM`auVcLkw{*#klx
zn4LK=964@=X52j+XAfL6lSvjPoiO}ePMG#Rk!e~n8X@ygy7{f_2JPx>)jkpqTcef@
zaH6kVy_6j=e%e1ZUUHmKRfPc{q>d(q*eJRV&dy$qx6jN~vhQ?9Y6ogF2doJ=wjkAk
z8O`DkkrA)AuCAnColAFnS1IuQTYRuuoLE#Q`b*==e!R)X8~0`V`Zh|vJkzHcw9_?|
zN6H^oY)<w!wEDFfZ9WSYM1S!P@}<^cbp_YhVod_Gq=cjbgqFdk$YtJ!65##-f%&H2
ze^c|#Y;v4Ho)s|F&(T&y`4Z*TgUiQ9+(?mb73CI;H(#FU9~<kRXg<TX$CvskEtW!w
z(|mz>@fK|uA|DDOxSdJ?$keEU^k{<V4H^JUVJrieyWW|%=3{-^8U;g(DQfq%JLX@M
z)6}H)*~0clpRUCPU29z1qpAr_EP+K{;mF!zGQZN38SGDGHKU-a-RjKPcumi1T92V$
z<~q#>Uth)8qinosDXgR{L`({CBeMxvJw9%^jzc*>RAc(tQsy*771Ito=jRsq=qb})
zm^<%;`Q&s4zLp}JDK*d0;1rKLVcg`y3Gg`Iom(J(EIMBS^A0JW=PKyqPOLA}Ktk*q
zEWu+D3JQObgW0l7hnR9hgbW7odY_MiXa=Ip*8U-^KcE!kNQIe&nxxqnD(zAzIt?fB
zKbzk(M92**MzNGl7lnxbZ?SSV)hCRQy>~B-qLaE~f)9K<G`Hj0eJC&H0ji3MwGNkx
zako2C&XkJj?pQRNMdF0MlnY2Jae}p=x~-4K-HVCGNr7Qj`F9<MO!m+hL4Cmw{k-)>
zb-A`6ARyT<xOxw5fEs2)3xMMJ)@y02=WPvuCuH9(!zXYVGk-VgLR_U}cl*KJp@`@;
z;t*Iq1@*(KLcTM^D+HsCe?ZFSK{(TbYnl~54sY8?-Em#rohU3N%ROfOIy&FDJ+#-e
zVk3zV=JQ$LtcMaKG0SVd{nf~Z{^|q$!`uT~a-~R5Y>U)M_wNmr_3$I11Y}G|mx<6L
zVZ9vs#B~)#sQ~-Yw<#_o|Hc%ei#L;$EBz)~{5lmGQPQ)R;xIE413=9UQ!U9D;L}k2
zh^UVvlMr?@fPRD$GBttN3G$#qjgjM}Kt5GsskbasjSLpLHOJZ<Z|n{Cm}w`EC<-TS
z_JsE~;#(|7eY%*PddJ9A_G)9}%+we$*jhN5G!&rZ^`;H$k@&W<%sMi#J-*cn_mx74
zWN5PA*7dMyhIQTUpCs?|QeW8md(iCV<zn?y(B&8gbUWQp!N+2Tk&3|gmc}B<!*Y$=
zkGb~>N!!u}NAT2#!UzTlmN-<sUW2NY$pZIXX7vgu!%Za>$<*}KOWhzjAa|^Appkf?
zB4!SVYq0o?h7vhXh=_9(>s$>B-~Op|!iyH?sMqH9^u0g1lcv)`*i2VUca*MPTTC^7
zSuS|yu#OBe<Ko9yoh)n8U+Tbk_V;ZNT?b}r*I=pJGL(u8k7k|7NbO*4dcOh#S~tMv
z!c{OTnC4z(1m3!c7^#~Vds12NfWVq}P5+c~L`OIaUU_Y%*gv5tP{n|E@%eGe0p8#d
z0|LbiEgV}@VWb!F?L)J*3Yh@F+n52>LYA6fir`1wn&R}1!;k&NV~2NGR%tp9Rq3{A
z>mchDunOgqUaS)HlKDgk<35ylwFit)Xs`2Qo~>o{NW!JGGtnMEMSP1D3_pSjDw(&e
zd~z|Az`q1^mW<uB0zat_LW4Ps5@)6v`E$BXS#uJYd}W5N;7wVkjpc|Fq@+#1;xk4>
z|ICerO<Gd>(*dpYKpqE^oAs17aC=D`P%C$n4gK!QpKgSc-RJhd5xAV8!8@vT+rIft
zwsX9C#~>_+`QD)+DhIDaMfhBos2o^wE*JFe13(76peW8y4j_adTsG|{=Z`*kbVY_F
zM5hnA6jJTqo^cONZ#{anCkRoHydZRGONd=5(g>$93XYdn73v+*l@qrc07{Dcyoeq<
zlExQ~ZXGEv!~hBL842gN<Q)dZj4hN$@P!ADrjNw*NOPHs;nPA<1TEac`Kqp5H`p(U
z*T)h?q=Z~p=$HiqGkw`wPityLhkdZ>C|WGDHxtto2ieAiUeVNP*&ffVZ;o9XRJAy+
zTTUX9Ohyt&Uo~FTlnwo|iKtJOS=UIuW2@WeioJ8WhFjZHYZ`I6)rcr*9vw%p47B5p
zyHuO5piLJDt9Mo3UAAn%2_@bf92nxKAW~uRp{51CtdDM*0a0Gv<$oc&d{xPd)4l0v
z(zf!pok*agsn|v=nXs*1h|tmU(N#m^vb8d+Tlz=J(WHf+@rw-WFnui{uOy@C)m3Kt
zvI2fu&Jl1#&wrNau$W?W6Uz<C0)|@}8D`1PJ`FyI<qVvF0%7o9VNR7g=2~Aa<z~S4
zkC*y0E<DY*9-S9gnseXpoQ!5N*O$cv$rii&j&7X>=4%K2q<opUB6}5zlgmy?-?AAz
zLTWwK2)+(XXW{WR(LaeA%1#wWJ=0NRlfeX@pb7k#oWP%kN0Gd@b#Q)2D-}?*)L>eT
zsHI+h4jPEVu%pK&f+;>pQ(VrhBc|TI*S}>zjR=LBB|Vrbl+-vqiR$_FYhcV)y7pt-
zuBjjRgSDL@%dK&zTy|80V`9r9ER71FCHz`U4Xy5+kuq1K`N{{6t{Tjf^RJXG&{@B}
z?jrY1U#>4rrEgFVt)r!nwCNk_Lh|qiaO$WPGkWMXMqX+49!bEGGJsFQBC?va>L!Lh
z{9kQAH;3cYMMFD>M#}LBPmge{lh~rUX~yAcnuFmucga>fpN@wuya1P|b2{noiYSS%
zKuZQspE?u@AnzcoZ3h85;!<%8slN_mwxolQ%6}h0iAD<5Bzc}Cv-muvZvxy&R$i$N
z0q1pm{M#c~8y+0#wQ~%{mW{~A!rgqDv%kenHqL88*M#_ySb+ci1lC;;A)-eRgysB%
z#)laMtO3&jP9w>ZL3zaYZF^3SWQjc5y}?(BT4p2qzi?T;9u&~?lGQ>`ew<M0&-w*v
zue+3^Oi~nCgkYT|;((z=Gy!kt_4Si-#L!%a&E;{qt_Gtas9O<rBiyyF0Ef9knjBP0
z{`wJWsG}mv<#;6yk3L9q1Y)0Wmy56^n{qpl9s2|<A6>#%l~WW5t<_YnVCd66^MCQa
zSZRWhLbSv(wy+8yp!pDQuX};l1?+$PCTy;g$xwLv_b=#jn`SJ5W{|ZHI)?SW94)!G
zB{>C%k-!e1W@=j)z)r}d$5JZ?YbDe~te|WDh!tg(`eBLhb+{fYUsHaD?{z#T4<}d;
z_VUB^5z;%1)DK5lpD+2}x1p>(C@qw2z?8zU1_AJwTsg&ftu?P$#zO!E%DC>>nCoUd
zZ*<jJ^Zl19>BUPu>i=;2C5nr2kAX_OpGj6!VA3)--fCUq$^)00Kr0H>9h!LhoBrrW
z5=-)9X?F3BH!Faa-~oMP=h!mq2UtrW7U}rnStvEQjeHvrWiF9kB#@@4ljcdw;%ipS
zH8wcIAM0ZI(9FE18qJG_s?E<FIy|{NbqFfDHtPQS;2<(q5{u7u4Q-l&nMR%3G$e4m
z=@W2Al#Yotaw4Jd;Vzwdyk+zm<!`3Bw(rVi0(ojhrNO}AD_5jbWKhNciT#pgeHQSi
zR1R#u-aeE7gv}qyEGt(kd&{#j40%T;T)~#=Lb_uahiHO-7$kauWQTAAW8bDWQE$(P
zY08GE6q`k{0;CKGM^rEfNX;%*s9kI>isEvk0To-66$^MIpM<h)acSxQiSM0mF8|;D
zz48_67hSp1=YF2{%)ry&vh8_c>GGeW`B>x_QtG?s(Q}vm%B8=7*TXjt`ZeTP{tA3a
zk!QQ5R)-`&vks8@h8VkZPBqL)Go;R*u+s1q0&o7n8HBi{ku2xo7uzuH{#PIhH@|0P
z_<dg#6l1j?FDKI_h0FMCw(n2J9BEi-X}a31_YAUg6T~%QpP{hK&<-gzx`3QUEcQ|2
zGctwIczmn?7`@=Cim)D4Q`<MhBf2?p8VmF3Nx?jZ3h?bXyy*c28(hbas^nrH+@iK1
zIwWO@jj&?yocD_k$pD0pxe!Q4@T-(k5*h7CTH@;INgUxio=S0GFKa9~DigV1$OP70
z!iK^lu@mwbm(COH74rQZ1@b>1$zV(WF}9S+<4=3u8RUF9<L!6CGYEZ_`T?Z@*=Ix7
zOTojnO9<BO5+w}e9o(yT9Cy?VHp#%1o2VG*M5}rYV+ILGkw<g}qEP#InXfcg_zFDk
zf$9Njaf(lu_}+5I!+h8{*S@l!sSAFzpP%*X#QubgT{cLB6{`TN)4}0TGBfCbsGN*b
z_AGr)K)nf&GQ`Nh(*<Rqa}fV$>o-$KfPCjN+gu_%kLWd$-tlW=co{D>a+yI3_%;U+
zHCRLgQ^LeJyD9QT%C_TY+@-^dB`jK4H=rI|X8mpo+LIZq9JgRjv9fCdizI0+NPj_o
z7enT>4i5`Vfmyyqndw{iriT)1nUokH=mMn}9&FKVq?Cfv?#=^FA(sek4JC8E&eHy~
z;;H^E<yl<Rb=Pur|HjwP?uYI!@SV6&u^1xaZ1<sVEW)<=CaZ$%oZ}?`c5j`j<Z{*7
zO=(-4I~#?>Ca*e9Dhg0<|4#I5Q?f$5%8Q}sFdqPpjyQnfX!C!kHfifiMu?~P<)AXu
zJ!pp2wVXy10ma|ff5Qj?-vxmcG3@M~o!!k{dO@C*>wR<}qT7yd6U(f;-u3c${N=m&
zFgW+-4v+G2v$5saF#rimK7;s1DogDJm1c~B9TT<Lax!z}GU=hIty7`Txfk8%Q?jLj
zjT;9<SE0WjFt2Od>Ss5S<oUx;ougpl)aBY~0j>2{$G2S+OIK<pZmYA$wxFfZG|U6Z
zwqgnBXLOe@eO$Q=&*S^SxBmw7^@GxW7(_3F%1Rd?kT$5RuqD+DgK^6P=0xdA`(UOf
zz6nnx<Sc=?_8A}!oi6q!6M1XxMw||(LvKmO?~5l?pw)*FFdM$Lcf-zPzBf5x0*a_N
z**8JkaZGm{b1rQGTr+TqSnJ?T1T-j$Yor)qtN;}h5Z-Yx(6E3n%S57nLFp_WsDgN(
zlW_DNwI}+APR4jW4oh|smtt9HARQ~}8dfHXldNdCard!I>Q&K{XMH?eO6Z}D|A0%`
z*eAY=o#95U?|c$Qw%COeu`KuB3fl0)go=?yOOZ6srlepGFe|pu@J7aDGHvbuZYEYF
zT=L>YrhlLEqN-*MB)-sX_lA%WCKf)U=?gKtKVt#l+ycKD-lHeGfz)Fj=<{^5p(mYZ
z!fCaLAtcAqib88t1q6}<a;SNz^RQf!mlbi#vNJJ;G6^)5SaMH$;rBS<!JgMyaW#z$
z@qbJHj^dD$H9iz6ZVQ|HOsq11CAFsQC=~k0m;)!UO#VJOZc*<qQJxUt`;4J8NJxRb
zj0O%Lk}JV9U?~ys#^+=n#RbY~0DTN0&n736d`?C>tTxZ>wzl@aF<p<|70Se-?lx~k
z$;7;jS`mglEi&-w_LMorvXqMA#%#pPMpXDhD!pnZ6w8S5<_}8a>B#L~ES7OM4Oh?V
zMhriHy#W~LujqO#V}-51w5+G#3ajWn(cci3@!C*46N4xMyPH4Gmf=M`2?Rapod?N5
znnzkN(7>z(Lx0ttF6#&mA%s@?!+0&K>F~v*w<O0Jbz;Zgb6u8o9sj$ysB34!vFHUk
z)<lv9#n-E}t!8OUo0l!pe`spP`X!kOk%j<~Z%>6Wfg+-#88QLLP-yPe1r%@V&v2QZ
zF~XkOFm<o*fEgVeu=a#8xVUUjXJQLn7}zdPhkEVqFC+#c(fFt22$iEXM)cFqY1qx&
z8)l@8X=hH12ANz#r$riL4$(Vh@*$x^rA$IO4a9na#-$INi=&Lt$xqMJkC{5$QV6$K
zxle>@E==F9Sy1gMTj`4<`5aDbuq|YTyTevDMB!7kLA7_dLM(#S+@PC3CWiILroO>z
z{#nR<ORYb7%ruYH3fZ?1T1(Zn-Z)!Kz0q<}hfY8K2>J03g7t)Vb-E^PFjEO=r5QG+
zC3S8KKwv~~z5uJ*_t={s9!`}z_t}w%opHjsjb=C-4*$4!&KqK+@aDP0N_OhSVdrUD
zO!vPil*PAs4PqXqOmSscuO(Cp_(kf|4!sEx6y~2e2krvVif1l#@E6a}6=Xl`Vzy}+
z*h$P7NG1V*-wm)(=Qs<lT$gF=^n#P!hp(21eMLvKwS4Fb5+tY$dZ{yqiw=f+HH3~2
zgo4>EKD{<=OY@p`QkVVSRxsjZqURl)?pI}T8362XE5*wr?dNdBeH6smP?@3Ec|m3F
zaP+=%8Bw~Y;3;>dqAin90i@`FzxjFFk-cza@Gr+%v+Z8`>0G&tA!J<3TlT~RYo4*|
zIJ;uW&t2*l{_jy8pI-~=1GeM^wQ&&1Oi?>nX0BX^7o!4qj<KHnTHE?1`-<gWggXAt
zaTtwl>!@YD3+h=EttC5>#uz?{9TEn{F2*efM2hcuFr+spXvUp(!teCDMcxXBW!7jZ
zw|wO~T-e>Ne-ZP-W&|K;>8I)`wnYbS_w}h6c2LGjRyz%k>a^x*={&2EkzlJ*%U0j4
zs{f^=>m~7*tWUPGwF)eVQa1!YamszT4DbE{wq_C)Y->jGPFZxUh$@L(Od%63LIAps
zhGkDy@t>Zz0oncDNEJKJbNqc_`<VtGF@0&iF>G((hu+r^FL&LIaEe+0Lq-%MYBx8X
zK8+)h;fwZ0x?e1!5r{VYwbB4D=yZiqPT+GAEO(6b6Ll=1i5eKw7#PEdh+%Pf<Q-Oc
zdHG|8ZPJOj8VH-pTytq&b*u@ogv{9Di;8L)&5!U6XgaCi2or`dsM^$y?Vv6ChA68_
z?(FN0&>|g(WhCBS$yIIy!oX3S7IWZiR?%$I8n%!D*Txa7)elOi@~7D!Oge?N4}Ayn
zC(ltMt=`c1=)@w-w7&>0i+HNm+TgpbU)O%cy7#tydkAZaERE!E&<?DYi#EmD<K6v6
zU|$I0jK$*Oc&WKk8efDcy1ay3Gmo)};8VN>jemv(%V?1tQHyA>%DX!Z09_i-ord^z
ztaY`non++%e}lmWm`oat43H=n1Td?_n@tDI1b7=R5taoMirQAz8weg9#|m7ateg@`
zdCm96d(<2&9d^Ck%B3}H;U5+(EuFJoz6*gd5;`_~T9$4_?w$sF`J@Zik@%A=BE84e
zqB-{!uW)lw&3#Y!bC}2N(Dt=Q+)vO8tcWjx2j0c28`TU;8FL)u6-!EPA86c%YQdzE
zzOQt^lMr=o9k3Hs8ObLV=Wyl#qDL&@EJUPlL-^*XaE8H%L=IqM{>&#nm$@Y)9B0Ya
ztIl!9*01Faovpj{sih^-aZpZ&uVB6exyHfo1(pIdKHHwszEvw2CkfORSU}8QiQ2E-
zuyf}PJ8xh;^_x15PZi;g+kDjY`ooBaJZ-Mvshv06$O`SRbR3Hh=R8nQ_&{BBpsR1k
zJWA`>J~X*sjv$#47*5GK`PVbsk!=EWlwcUhISu54Fc?Tf185W^2!zkFGFubJ5zqPY
z*EIi#*`@RBJN@T{RH~4=7WhQ2x&NB|rVC`E*<M5h0Q)7R#x+NatD!Jbc^G!DI7<Pc
zAOCgc#a_(5*SqoKRN<gNMi?a)Q_PU7c-r`mL>A6yhCv1h!+>jAHnC$|<9YFU_BA2D
z?;gyIE*%QhaTJvN>4q|CPH`Cb?KIHcf^LB*m-`9BAO+WJ3StMo7O7#u{qg|Hh}S8K
zuDssT-ynWGue;f9eLx$?<py%EG!zRydbbNj6MZ|iY`3S^pyGGJ+f1-R=Dg6pp_&)*
z<1fG8>js42bz&=il^gi7l{E0vhk;ihhVJ@Z&$F|kUw$MB;vRNyI*iCv7GgkSm%0ql
z@B+9c^bxQS(cEdMgh_1)THe;dktq|2*Dzc#MG6YmpaA0#Zgt4_-bvg(Wan&v^PEq2
zkB7esRox<So#GsL%YWOX*aMcj35gbTwbxdy8B4W$fdTbocC@gGxbaP6v)?Qf49CfJ
zXD4sIsqHbG|JU=DbspF@s$D49x_Pv)A!F+2b#n%?*uP@@KP>(bG;$jA8TmUi3<C!)
z!w*_54;h*I6iJ)Gl>}Vc2ri()&>vVc)3CR*0Wi2gk=RDZ121cgj?E(g#S%pgzJ7>_
znFCmmRuoo4*Ud+50E%I}Ah1ZocyVtU9km?zJ`N6Aw(eAVdMv;$n#rUIWXCOy-}<eF
zV^wuWRgbvF_17Ej5hS|QtE%{5v_FbmGBDV~sSoyVO&qU1QUh8K(&pZWytjs3FJD*2
zxoPEg<}A|yr$c;Z7vzI;t@%$DJ82{HEz*IMV)(Nzz{qV=1vwjo>u}}Z*%{mqt_SDA
zKDfTbo_kexR@d3{?^}G#9_R^qMaYxROPvqN>)+!aFY}4Gm*4uUeDaGg<kE}yVQLlw
z>)0~u9um+9HDCc*L{^e61g=0*BB>V>k&ZwnVfUxpz;b4iY69}ycDQ2Umj6&t>!1~-
z9(iUP<;fv1eAqjH6|5to>bub_c?@8S^=k6nCnKp;WPa3(M!j?))05tN>t5V?5jW8*
zc#Ax}*{C?ua2-{#Y)?OOyJ)_zf1&^P={K}e(;l<;BPXxw*^q+|*XTTcP)K(VCMw-i
zd-qP!{j1)>^?n6!|D3KM+H3bK(^|^aZA~aWj~rKj7cWJ-Xvk^)hsbIEIrt6l=(?}#
zP2epM-a!UltP9YB4@tT;uYdv<2#(9d0SGgZWs_h<@DRfW$VfaO#aG}QqToTEdI)N#
zP$2TTt&{6Jn1oEa4(eV*;1o`#;mQWH71S{R_=S>(LP$ipSlX5~qhWBM?uOiryI{`R
zXhk*;JA18kSh13!{;C^C=6TP|q((P5rmm+3opdDWMD4U=#$w|1nx}0<i*!D1cYYv$
z1AXAL{7aKwlM-qaXky*np-kQ`X}a;^h+Vq+`b}6C(q=4?(G_5*hHRmPoRpq&9CHVH
z)rnb9`^-eG)lULwwev}R^^5o6C-`0@lB6-J0V|GT^1q4|We#5GM}FS%$=*3q0?44b
zL8-AYkv#CchNJj>+dctt%d$?uaQH`XPkOKBsI;?Q*eLu}3-2LG?1XL8d#v|r8f3Zm
zl2FFE#i8#afAx971<3>oP?l_1fe~D((*ec~`>d0qgSj&dAB-Z59>hK1uMV9cp&p^4
zW^ldrK<j{c)6`31q3v&gy3c*%`?2-j|9USjqTWaQ94(x+Ul)#e3(@Gyz35egrfS<+
zD-=S9|3_$B{I#jn3@$kt^N@C<r8;)Tyh%UE2i8d;Vww1W7c*kWV1bQGM=nN8HlZ5V
zJMmxi5=ugg{^J;aj-SNbvSTSC=1j!W-u032E_}#Tom<q0oUDnDyhgiO9=xUE#ZWr5
zneyDTh_`5<%|;pfoz|tm6@3U+-~=%sn0XmYI7~OR0xf5Kgou+igV?NECJ36X&4MXW
zHksz+i4D4Hg}^HOBpLrgJeE!mKM)PQ{#9Eek@l_G>d1?K`Aq-9TrQg!sl>b8q!;fF
z>+$cpIrr#>%~ldZ9Wqqi23*}AE9&OoiX}c(y*-<4-`ek-_`RWNgxcgo$?mw9@Veu<
zZ4k&MZT>0NttCh|MfjJ|nstICJ}^q)nd(6N1GkYPI)b<aP?*d#!RO3wMs7l4YjtTQ
z3^-h!q!3!td0nT2GJdp$PC>5bh4`J2ja-E9&Ur{XqA!FH#2&iY4t;qM&QHUfr1z)G
zi-{1_z4#|S>|hL7JxEPr_j&QyZ1N@Xx*a-tZCXhtx8QwCcKr`@_0?Ix7im`sM{&K9
zE3UU11Te|37#3YCp+tj^A?dgtUZ_<(&55Rr*tIKl`#^Fl0F;wGkQswDD#v-9TU-}9
zbArw8$|Q(n%B-N@C&)<8kmCUR!oozxOKoa9lFAac){xRA8Ls&7>+<1@Wo5$o*A2&a
z0$*<*otx2ED6SwooMtQPz+NRC23SNY6HY682UI1>jGCDZ7q3s*u4|{RFNU)_4XtMy
zr-o~X#dMEmgcU_ob5lwTD5wBAjVV((q}xU%+B!qxKX#)hA)NYt2Eo2nH-<<i^&uv9
z(1TJghYUa|#7TSvn+YWmncDdeRfEn_>M4`nw`VGlYA1&BdSWD@17$yCf7%X-BAMsu
zZz5njWs>M3r(6A6B8w1<NKZ6jxun-6{$K@j>l{1)Gpse-#b`8A$4Zhe>r>N#l!9dn
z2?eQyEm<BCF1TM57o~+ne92?kw9O(F>HVw9ogd<2uUKcTHUCzF!Y_6dzduW*-$uym
z*8Ywy>O+0d&Qsaf)<6WlPRbNeI1$Q1k`^jqvLN)R$nT$-*+28iPi+d%6jd!%O=)Uz
zChRLECUI+KfAjmhdrHDIMF|1M8jV?&gDBpZz36<sbgRukaAXg{Y1_C$`w7-lOHQ91
z(0G%+R4cLCx+P8&<y0lzMrB5JtZW&ygW2j=8>?y`_v}1nA7i~=35(6N+RD}e&Bhh_
zPWEXqMkUxKL6rLA0GJGzH$Pp*C{r33q3C0=xTY&{`WV;ew-v|woCU$OKV@Om0+cjP
z-5kXmny1A?^CAYwPda*3_O7hqN6e6CCAuxk1=m39=rVkImVpC8GEY|`MXYQY7<%Al
zF(kp-s>D@|8G+U%451U@Z9eNOA3+j>mEwU}F?%)TRar!6tYRR4E7Fu#^8#5=R0CLe
zgQ*>0#3?^>Q7rz+-~{4$XD0^!1VKE_Q{yGW18uN1Tl^Ib?!OWsb08J239s}80^c8u
z{~h_N{$0GI%n_hpqReZHQeRhv6k<cyRDfs#Wx?U{6x)T5Ub^U_G>&`^RE&>OF+Lif
z=&V2$UNV<2KRig<?fm~qneU)7-|_#iGBZ~4@XuXl6B=dM6#|L%1&xWp+Mee#AYQ^k
zX6l6u1UL?}AKC{mD`TGo;>`nHzr~hTso4r-XkQluIg@5(5^|=zA6)0FxEnkl-1ql^
zw0XHby_4Pz{e{o*1HMDX_k+Thf%e!DC=Hg78AAxF<lQ8OncI=u`nuy^;VY7dDf00h
z>z>K*75Q6vd=+1*XxhiLFl-;15lV#NJE3XmUba14HI<r*IJq7V8Eg$avSiZ_?%-{m
zx5Mj><=16NGV7j^SLAQy@m2iH|G?WnrlAaB6k;sVlXGI~K&JT((%p;knS&7D!gvr$
z8!Q<ed{|G{K~Seza;&}-0{fVR)RMf6RD#oj!cB|NEGU^;JyGYJ+Taz6l=X?L|6CXE
z0K0XO%F!&+HaeX5dacB08LTO=nC_6fJmO~KUSnb+KI{$iV{Dtj$-6n|lQ+MYANGKV
zl80j%eszc3l{Y3q*nZDnr<bu#xL5;^biJ7Lm4u`@J2Qpa4RO34`&*Fi0%sJ|N1SAZ
z<a-199clxE<O;&I8AJ3s;RAph#UBaw6x1WfpKy(<0olD2zF#-Orlyab*tY3fp-kvV
zer@Qzzzmy(qVjWZ-V4uF0PhTLjF&dl@>iW48BlR*sGIhDmFMMfCewW^vvFhQ*e7%i
z>2r(?+qWH4lp~vVY&4KhN7H+&!<!Ukc5s7G-~7^@cl9Vh4oGGXjrGoMEXGgnA3c;+
z)I_(YDLr@Xd}%N1khpJGpa+tC9&rJk*1&04EWo$G&4m`=Kx289pt@FbVVo#~#)@xS
z>{_JA5#Jl1I3F4f)17Zw%qN-a!-jrG{Mj<wwg{t`EIK?nnXRNT1U0L<M(t`!mU5a{
z`-$-qoFB=*aS6p-p~BM1ZtsWQPmnkZ7vT3efy?i0-^@=S=K*~i^0)u()i_;m?E0mk
z9FpC|5{ocksDN1wOe}hfeP^eK=W{*?7-)D51Oa?A$U5|b&Z*tGe%LG;absizo6GH+
zg)81R;%J*iZme_I9`XR7KVcZRUuN&&9uUS2WAX9_)Sd!5v}N&!m|MSzF~FIz$1#T_
z2#Nx{f1e6q20<vm&|ot$fh*0n(^dpAClcG1!p)@OjlFXq$M><54i4ZArNA=^zs5BT
z73w6iVEg1IMQH>mtw;pdK!GA8^!oBJ>Dq7!1rtvhsv0%JC8X*$B1nIcn4e{Wp&{oG
z2vHKj;-0S8<`c+)fn)>1EQQUe74FZ$Z%TuA&E7_1ujvX6>V{l@*pjb;H%>%D&iTZA
z4aC-U0hvqhlGGpXLiQ@WOEKtOX6TadI;n>A9-v3%4CGK(Ok>}`p;<`-6B2zQA&Xf%
zG_Via3k|Q#CCyMz$V!-8R8vU|4kqx+2;N{OEZoA|s8mpV8d~r^&s+6Aeb#>;-f^Y(
zG0yQ9;ZXEPz!U`L9;GHgN0E9B9RhXKb|F@($%%pM2A8djJ#E?FNreU`-!9ILynS*Y
zl=_Yhuegl0Jb2x}1YY2;HR2q6;zlSRT7t<e#tsb>tlks>jO956=K`pp*$o+oI7mPp
z#vb_onqI#c9V~_bJkW3=B9!WjMU{;Tv>-xL>A=LHvhksf{fUuHoK0-b#l2771SOjH
zk4_}w{G-)7lIy=I5`CAVxcjz<Xw-VEqP#2G{8st+H9ITPFCyxI-jPl3e~QnN&mj3#
zVo)Oxl$49CzOC0tIpJ4;h+rSwJGy`!{piV?_BnRdvL@#DzD$VQ_UxP(0o>ACop8Y&
z*e9Oac`uNs8y220M{eG;?-s!OjJSoc^HyLl4eTL173LVNUzB5!FiZD9XV{Y5Pz)F}
z@jZxVSg9|0yoNga*4sW&3?ONc!h|`N#Z^1e;MIANwgISJR4g<vfP#qR3SGY3=A%6R
zc|&k_vcChHXr8miv+T{iP0DaYb2Buzyr6@V0DKI=+e!N}1{)y*b0Bz4+&j5*^GlGs
zd=rexvA17;%l?6&y_(;lRvVezS=l{duX#Xh8QnK$+xm%n_Y4H>|4_jl87*xZTy>eo
zW)yAy8MJvn$9zf)NsYo#(bAwh&~;GEDGE)5MoCi)7zQqBL~vJJfQj|C0|<(L5MC{F
z8++IXsaN!0;AjtMX3hdn_xQp4y?z|yU%x%j!wyPVS8je>vn=g#Y0^U9{{+~%zkr^f
z1cl`WV5=!>h-r+alZ*(<%WhDxmS!d;eth07oFP|$GX?j&+5Eb9l#nNmBH0zmRY$!~
zoJUhEhMh$xyoi=NZzezH%~hAHb0}3Jv>Zyb%JHvkEA63jl!9j9aff=#MqyXHA*T5#
zPG>PQg4qW7NiM<()9ff&>tj{<@jrsacXh!q<$&u>7=)jNR}ki3=Xe4A8LANE7Gde3
zNqn$D(RJ&-*2ox{*tzF6Azrq3eggR)Y-it1Cm(&cc&a@VMm7p@%f3A~kC?b^HJ}yp
zbv(?gOt4+z8eZjS;*(kokpZ+JXc=CNNc%`UFhFHGwt?D7CJmudB9&ths{7?!d8E)h
zTNo+ldPfT3bR`!pjYn*wih$)@1*y44n*Rq|$CiYyUC?x4ZJpaX$X5<))gCPRg`TRG
zE*C};y}8PGsXL|2RU@%Vt~W7KD8GcwU=PA2NJ|xqi+slX@QTs^A1L`RFh=Cp5-6=0
zb!i%Qz2E{Tatktvnux-aE^MY)0spl`EJYN77#D&QflJM0c8}OC7U8pd29%E?_Q0og
zF>|&M9Osj}+1+As;<W!9(Fx>(g05d+?uFRr2ToyN8>AJ7SNb9DVq7EAOHOpiOgLLM
zk-kg(^O$YD(zeHt;dpEKhkV@pU#~$5()0~U=lu@;2H-&15L08e{YneZ;jt?0J2-Cs
zue1{PUQ_g+J2laOdn41WR(VXcSeMAiFSCR*#1dqAsrmQ!cu^4&KMIF8Ep5Wr#Vxpo
z%uwDvVi>1%F^rcf{=2>eT3*7tXs+-(OaNb#v_XbJM!fLrEB-ln<L@1N(O3KL8OLYz
zdjI2@+Znv?0k<Sx9lXDK6i?K3e02Pt{>Rg|BO=%JUd{6tcxuo6P1nDm&q0a_yv7%k
zF?J<9;`uR5{^OW+$3YIpke=iA0#0#O5J3K;wZH2i)}U$rJw}UM^@(Dah!&RL+WGk7
zYhOmP0)GD`{2ojHAZ81(Y0M=egpH`jwAhR{=s+LEC!7B#Z*KzM)^*;A;@pe7V_yjn
z1OYApcR~b7kP<~f)JAKiCE1o2*^F0t4IMj<vop5a*jd#&O+0CvvPsk0ZPPkVnxttK
zW_LQxJpJO<&Hgy^+BD5fQ+1gn?bOiwf8V(m04dq={NDVYMBL@vi;Hv5`Odd5-$Xze
zKSK)y&>(w6b3yO1f%o`r>PH+H2D48v0jd!NLhhM5we_b(*6SHPRXziH47|%4=~$#k
z7d@xEnRGJ~ijFap2~Lu1N|N8?#506_D3WG{X!M<T5<P*#73et~gLYrK{mjd_r~SLG
zJz*7Vf$FxqvXZwjcc6DbHkeIMGYjhh2EnC4P4Q?6+F`7@Pq5qDqW*Cmf1u(d2PDLD
zB1i6nxk>gayBR(+2^a);zOe?Ylu46WnI=}>H2GEWI&XOYwRs>??Xa|ILcBTrJm&BV
z^lUiVv_O$epREZ^KL4VR+28!F<^j=ckG~-Ona|5Ij||&Xp^5Q?>yzzfm4EyIyi4vg
z&HLbLasc)cH;4Qq_lGrV)x!6?v~SaMy=ZvOSBJji(V&7=vU`Zz*d?p|0W)k|*!oLb
z`|A0Sq$$u5BY@QfPJ(N%N;k>&N4ge?U-ZmrSEp8ki#|ONT}=^g2N0W=?9|m4b)Lr5
zlb7?9kE4x`lu?P&=@yHxh&5e}%TvlC;EDxUG*wEC4C27xwnjYTS*po_Y;agD{{oDI
z3JL#8>u1$6Ry~kp#<8&u=UdAAxJrxcUk%)uF#ZM0OZH2y;V>*O7uR>-Dd$49R27lA
zl+D!~PSFA_e95x9P3ucYXd2p7z@ZN*Qom%G-4<Qrl?`~JvG^D80`J6H9EQg)y)nHu
z0Dz=ia6I4%G|vrr(=tJj(3!lmWEe|8Zcm`tvGhHD!fO*95j#{tk5FR~_XHx9(7V{F
zb5on!hYj{~$}vBfN1n1KFM<j}#C@b)7KB2Wnp~+|12rYvHP(4(s&RJi<n++>3nK@U
z9bE%6Z$~wl-R$4H8)aVZaGdXJebf1=Lnr6P4~8{$;rfxj$jm_Ob|ZlaK^FQ1-NWPY
za{ICg0s)33uw1$??~^^aquHfP_vI+};SR4ygjb}WQysWc^%>ChMPbdPthDLgGIBlE
zdaDL(u@KM7NZJkkADs6<Zp9C;xn*BvU*pI7R+skOa?9(5CJu;>#~?B9dHpTl#o78A
z{VV*3qAI=%jV~(7!hc*)pu!>?`2y-2?!)iFln>6FKprFl_IY_g`ZY|4*nY-Lm}hL{
z*FCAJl!xZaNP8Fw%&eH^iqj<`ek6y1kohU}m7lqeXMTa6>5?^;h=3IM(TpF{Vmm!9
zWPh2G+o;+}JkF+H5sOY26|M?vGky{2a_|#)46orjo(Z`XRqsI__>n+ZB!ZD9i`$5-
zNP;&tDQ<t`HJnOsINvo?p;al@FV@`EyOv0tSjrC#=MUr(>vR#D{dGK?VdC>_6HUY7
z2p>cpFi8wC>UooTUwSS4VaLvFj}uhkd#VPVo-90`vI$PrG2MHrZz|Q3iBg*2Xr?DM
z)dyF<^PH%|d;Ypu#+X-{mP}GmyRQJ^=e>d~>*!K!C~64@AT6=Hjvl#%t+(zIl>GRr
z-7^H|jI3sMU&Sisg>ADZE#nN=rn<s$uJAqrs_e?bO;%4!8{K2wzLzyNL)D{x{m4uO
z)tF}n)=2JxwYuPbWUK?tjUbpM+dE-0f*LtLY<2fC9oM2n*>MSPB$%1rpn<=MC4sYn
zX9M`#Y#MHmbuga2TFfAy^|PR41`i<lnsh;jFu~rDdr`R=SREjNr(=W=H36Ll;FoLT
z;<vg;&%a4e9IpawkQ98X*Xx@$1%)_7V??Mgn<yo3Mkw)tsrbXt5t$-FQr`=ZBvJpk
z-rw2TU;h!0qFBLUy?+hkfxjA}BFU@5_M4|R+Urd>p6={l>+ihaV_)kV@q`UnGYQtX
zp1@ng*B~cgF#F+tEc=eNl4egBy)0<Gq~V#&Y8qf_h-M-XjxW9T*W&&TEe<LmeoIrJ
z`U|}9v4EAZgW?rk(YcUOG2>_Ax9l;T`KxeXR*cYN{-6fG8Szy+m<d>opY-)lIMJ1u
z*5Qw@t<uo4UfcBtAU_IkE<JXw`cfVg?H&NX|BLPZmooT+XS?t{(5Dak3gC^wpQ4t6
zALKy_6=VLgOOni|1G&ki!xQ;Ruaoq{jW(Gdo9@X4o;HQ@gdGeo2`e+WFfwvQ26>vh
zCrVxMpe9a*gZ2|fir$lSBcBoH0kc_J<6N*I1b_4Lm<n%E6$6gA9O!Mz;+vsJer)F~
z3f&GJsh3p^DbCk{rDBI}Ql1ufX&vER_np`?=$K}7&kYY9&>h<}lqJ8vvA_R=cO7)c
zbN!;V(Hu_?{;)RC1|Wr`D$cf$)rWX-oI^2F#Hua+qUAyB!}Ws+!W+DV2;~Kt37aiI
zP$?9l?3<eGhhq-7G%nd!o8C4iyquHME_UmmMp=Xsgd4gqT_vSJD{-F}d+^jxo+?|h
z#@?7!76mBXU>LJ31>Tq6;!f}3EksR$!lZUg-I?jN?y=H`?I<lHO&^oj*PeRK(LLet
zo};fJ(_t{K=TN!NL9usU`qE!`O0!K}fhX6el>SUK9FBIy-yFtu<p)w7K;w)_tphKp
zm`@n|<H*I+hc|Rti=Cj>wB(81AxhCx##vFSn9wpkwJPe!hI2NT0F@|U1H1&m0{AI$
z7<BDvq83!GT@=>uAIL4!<z=V`<iQMGJx3d+9qWMKb<6}LgFe?be5uS>Vvb|UB2$O(
zlX%dfsTxvXt#K&X{fDL)KjNaybwzyJ2A)fHuS={-lE0ZfCbb5*`6ky0KyJ5UiNkyL
zSk{1LEiCYE)7fSdS>p$ny2p~=V7&Eh@ip;#kYUSIgJQE}Nuo97<MU`V_)FGlX*U%;
zA+!6YfRhP`FK%r~-qh{Mp2eF2fs7+=+}gtH*OPzagg0xK_${wbGXCDp3iem0TOBy<
z!1vLS4M<Foce=Udmrl1jzzug&19BV?w_W5Gi6^ChRspMQ1ehD8AvvRBSvSarPjw-I
zL!e7XBt`;dg8QdY6V9k1exXzoEAisu%{MO=5?#^U^mH!L6)!A4yI6>KMRL=%&S>L8
zCexit{uEW}lc|&C?*03_%b{X!?;pW)D_qLsv=l0K(rHiZ$Ps(bp0n64?8Uf%RdW5t
z{D|rcgUjy(CM^-n#C6n*OH<Crw1$37Ygp0LKlHcUk7m6e_2X~{k)Xd+hK^3%J~k^(
z>}q`QXzhqC=EgoS>A&&4V>8N$UE+FbYJ8cSK25iZPaLTo9r^RI{Wtn2dyWn%``$P9
zfn6t*ku444zte5#rqAE(rx)wgjOz2S%QTq*U=Z-mrH9*{j5MSc&`qlUDZWx>OmGcf
ze%i$fFp}eU<a*qJc#`{kulGF;Xdx5`RurPTWEa3PfJyL-qu|3R+@#5lCDOfM6eQCH
z-n)(UgauIQR$#y@6VoQ2vn8||&q6?s8{hY0-#^$REMvCAG&{gY&~6rDBWl!xg^NU1
zBN00IBtB%TNHbe^e+ITLJ)=+K19MwOebYE0;n(1%b$QdOVV%E5RSk>SHTTg4%TU#8
zn9tk2YZnA2Jo!KT$oq}2rEGtIe<<>+NjtPd<|LxLL`Y(uJib&Y;HD2<bg#sD%>VUL
zK2ErM!!^+z7$V(>58xuP2sI+s1u45)5~e$<=7Aw6#K{UnPN{g8q68E}xw&&@eTGu=
z!?}W9+gO`=8;VRjL_M6S+P(8G+!RohTjqxML`O!Vr(5P4;vU?2mvU4Xcq)yx&<*~y
zjMXrXp4Ol{+Xer%16<Yo1bmjSMb^igP+j9r_yFApFQC`^-VELV9X4R~u3;a?zKjpG
zVK+s44Tn?sP#A9<d&;1M9p<~5B<nfcm#YSj`5D-k-DA2&_fs)9=wYg4S*Lr-^h~t%
zV-H<Qukh8^krNL8X^%+Tbx^9hz%jMrUxS*sv5tys__yj_sKbky59xBV70<)>@vr#^
z+_hRqGyc&R*4;fGhDY;1{GLxf0}c3FM=M>%o(|V}>t1o;VI4FuOqqa~-bw)<D+H<(
zwmODI@ugQG6?wtLuhCYl0I<cu#`6bJ*A6wZ%>iVcp<QdnnE}zX=bzWKV7%g9#tw;*
zJf3z9Ge1swZvdX?3DE~$saVlafso329__F^vr-qxeA4xHWea`V8^CK9btja-dyd`P
zSPvuuvrZ&MUg2Rl8yI>7@dE)DY`OPOt5NGQtYlQi2%vaOIM|ieyR=Mj!qJ?3Sl1Ng
zL-<A@()f$k>ky7)y%pBg8eo>z6)!5nO*&a-BpL#9)(feyiJdk}!PVPSoyg<Vnaa>8
zMmnDE;N{JWNiM04(0J$Y&Yi=Z<0zX^Ff46pcz8+U!;SXd@E9sS=4;X<Z~0u#Ccfnt
zWndo9ElDk8&8m{e5zsB=exX7HIKoRnoP|!W2EiuH2_zqEo9?F!<<`czTTy5rVCyMc
zLCBe@l^sRR6>{JW%bJ;r`ZYVHBR$?yk-pw|cdNI;)J(tsx#tjKs6`ML;fQ<!ImeOT
zI)aSju`X3OXl;iJ%5@4oI?uC_NEfH4;B3qN1Xb8{gjG&9YGg**`ra#sRS!0P7_3_c
z1aB1TSmNy|kfL*KueN3xPZzE{c<{=?)6~ip8F|~-K>Pww;A-ndFv>LUQa_aj?4AG>
zmy)bh5;W=8bXAk`FMxwCwG^A>P4{1Pncl8?hFI5%9U>ADvK0uw*x{Tv(Dd<swbg_}
zu?(*GJY712MTQ5g${nsmxOE-ZSLo=;CuuA5FVJy2?bjjoCMiw|p~7VV1T3Iw7(vSr
zywWfv#SM?0-MW{$aL%BC0F$kIVui(j3yR-FL9523+{dC%-1aSeZtcqH8eC(#(m7P3
z(DhuZOXEGCYA<<JJTf`;n*xE<*UJ4@U->KHZ{s6Q=G=#+yWrk}htfWv>AB6%PPN_D
zyz25O@F5}lNH4S+Grk3^_A1XL+2W;EqeS!CpFs7EUKbIdiW9^#=mJw|?BK}43re<N
zX)Qwo0ks8NrLl(&I@_1}-slvp`X3L)Q$|<9Tuf<BI*8zsc%9F2P#_?rKn?7_-#Il>
z3gu4MVCR1*j<AzNmysGzo58g0PbH4X^9123LROHy40y5o<{&$hCt;bQz5#H6MiiC6
zU+wE(uVMFdR-A+e^7(;#NS(wm{#oU%(1DQl2$hce5jC#Dl89(*;1EbO<d*{oXa7VB
z=8VJM0^x$pj^r#wNW_QYXW_0$=Pyl9`HdS8Up$xT>byKBEEHARGZsj7eZUU<s7Lkd
zJFY~9L4VJWg7)9t?GF$14F!`?MM)P{{Dw#!gtOP9q^K)KyHWwMJ7|A&SPO{2-LOdd
zho7<7mLl4C3!heu78PFu?_Z~J;J7&W7p;T)?k35ozXZ0M46KN>q%faSyI}$GlwO3c
zIA6K9=Pze=J+o`P<DYeBu&eKCJ*rRX#%;Y_R#MFKpgmDYjN_hN<8OH^73<1sxxU*F
zB9Hs7?(Mp~=Xa=@^b&N)(CJd`_|KvbF<%by(S)xKh{B3OfGgHks*FQ8JEgGL(85um
z(74w~%Yy4h3b%ryl&9lR&F2ugg>Z!F(%+3<84ee%=<?oV-~0`k@PU23->g+ct-n&8
zoP6Z)iNS$De*dq|hsKXR@b<3LrLIF6`_C(fhDJtF*7O@)E0f{z_<>gyCXVHA+I9Ka
zQujCX&gqBBA${WQR}2VYZyQWzhhsxm9ZzI>lHqajuISzyrl7$N?R%KO%Va$@@f6#!
zIu1f_dX4W!-yJ?GY{!_GG!<AOSov;lH~=Bm4rmQA9WQdcRqNr28q=;8#5?!)Ub}ca
z8<%<II>IuoTnErRnC$lLU$Zk37#I9qcG2-5x5%wniU*%gC6IkCA(PJ)|A|)N6G&P{
z`%jtX6Ylw9u<`%kaaQOm-agiLJjlnF@%A;mrExRxDZtjU3|l>Mzyy=y;Czwm1@w)>
z@LcW&_Akmd<ym2Mm-o5oJiClkElQp2t;>xK;oHv^S((n`p0;C3-qJum7vU>q*Rv&7
zuYh6v5#M>7xA(Liqn|Av!(zDgiAoxLG1$d4c;e}8ganKtFbWhmr76)6|M*TP7E-_a
zkH8I?$W30z973Dc;a^-_H=YQ`HqMi(#(Q=h@RNWAdLHXi(r-el1RyXf*3wfbCfPc1
zd8}SnceD9Ur9#x387as`4W{roSfW;D`n*e^_v_S%&2loi4DP@^;sbfwZ1eg_dY%k4
z+_TJ+v}>*@Z<ouMlp$fTt^7q&bhYb!mU4-;L~ebxV9tO}&mdDj??fG{rwtk*@;<K6
zL8VYA{JiZJa|Wo5^!uwAI~y?MLzNzh)hDN+yaWXTT3f&3&O3kq&O1g<PA@Nu^&=nN
ze*FUvT)+LpjdxBB&D?(b%#h2+9Kd^ZAyYQ=bN!T2gSGUe(sji^vil)EbRz9#p3xvy
zBghSrpUQA&q}<gv*YmKUlM;Pww5|lZsG;$53UcZ_z8leiftV3^Px*9ba@(KT;a?lW
zZ5v|?^CQJXa@)IC==D}cx1UZ~fkF7dNO<G-BEJOWS|Pr)&1u_pP4HGgdXt7NRcqIF
zlXt>21OF@71Fn_tik%ZN_AM`k4u<;gaP^i}sw?z|bT@LGsXzVb(G+6(kC3nbrF*s&
zeR=3<+FiTxHctw`H6XZ&5u3+b-{SY%mN0iT^boh4xi}Q=;#X@t(YB)H8h?gc8XsW$
z$eFe+<0i=H1XrX3s)7UG14;bame#c7${0vk0<fr|J|)41o+8R6oua`jLP{pO<vFN%
zv(@~rT<3%`XlYl)&lvIk2FFP@ekX>Mh)%4dcICmjeOh5WluHNwM$E|C6Sa+*ZFUxM
z=~R~C9^QVGzbektdVXPzS2ZKr0~}X*z7sL`x}C^$qa<IinhJ&xJKu?1BKi2W*T(a@
z*3Cm9k)F<9{Q4$d-w)fz=iy)U1$YwghE@WxD@g<dQ;;w%`E&|`iRVb_hnH>@6uOp|
zrO}|(FBdTmgr(vr?wP6;QORRkEh4$Gu7(N=qoWIjkSc7W01K5OX0QnrP})_o^Fv3r
zjr6=Z=r42*%|`haIGC%AXWd)=YafCXey{QGR^WSq7ldX8zZ)1!j_<v!tLw78<4MCo
z*>l@OMuphGuGxAf)fG^p@xE(jvbciK6)WV3OroRXOe7L%oWn-0yFcYRi%CHEPT&Fx
z>xYj+4UAG=fq@I0U5WWSFtuP%O6|oK({XZGO{JUFI6(@8?w>F2Ebde((aIcL;(t5c
z!1k}i-qEgM%^bPzYMQK-v~lxj?s+|+G(O2Ld%wTtHw}@vDREO$2xKh(6C|LViVh<2
z(1DQ|Qya<Gpy=T#N;RGreFyN!C)p>^mCYG;6U?o9A{S8+5DrEou84@ju`a%p1tf9n
zBv)u9>MO|&eSt~H*-GUsb+tg76Dod8{VH!yxCJ1W4GRLI@L^Xd;OGL5Kt%X{LNcal
z8QvaR6M3O=whh;ruy|2^W^hMDT;YzA0wdrORptufz!Wb+Q>MggDet#Y<7D8{Eb?r9
z3sJd>(uEsuLC!B&@ge%1!_l`|L<dKnZety5e;o1-vLLrQ0Y4<vAp<x-h9Q4s&K|%i
zi!fL&{Ua?Z_g)m5J=x!@*vf3`8X7uzoKUoPg4BiVXa5uTn$wzdpPt<B_rD5h@+{g9
z_`$jT$PV4k{g(3ShC+H53-ak8>0Vmg68WrioN+T1CS%s-c)6Bla8sbAps1??I<+kW
zv_vyh5g<qn5a5bfZ`3!F+;!=yfYD)^fWDA_MnAk|c0%`Zi|=0F8!={Esa2CR@Mh2D
zew(<y-LsB+?a~9p5Wnb*zZeZsASeP0ZWyrot+J2x1s_Ds=HFWL2nP`;s1x|OyR+@r
z#4-%!4D@0Jc@~J#tvCLVpY#si-rsioiMFTc*~a(UE_rLx$MmGv*R&^qm*5eA@vk`&
zfH9swDVQSPOvPNr$K8o_ZvSuRk*oKVY0901i*=q0${04raJzL5z?11N^-UvDUR!jz
zp{J^G5G%>PwI>odyS|@|<z1Tt%283z{7nokhGa9PU0z-TyHT3_bkLAt<Uu1S)|Qts
zbZl2?@es2VWpNRlurrHCCwYFo5t8t*8L~Z3Oa@xXEVj6v#m$gyK5gP}b8ksdkStH*
z2b=iHXCve?0lvr2^7Ja^ErBteV_DV1j4nPUWoK`i(onG8)1&5W!jW{nD6eQ!y>RaC
zO)@~O)axsR4OXR=O_FSRtSsX~<Eb^Vy0*@IyhNt}=T#4#0;jeg*6~mF^?S-*;09SQ
zyv%S$-Qyl(g<)V}4WbZCP6AG1KZMfSG<$w5tO2F}k8c{r_yZ@+9{o!vtX|D{PB+HI
z8nddj`2g?&7}fl9hSqDHcwpS9oy5lYCVY=Pyh&qKB;UFCRMAD<fM}Vu0yte_B;Lzf
zG;O-;0+pYqn$!=P=7a7B2)b$GhH+qx*C6Jm?tY-ltI#djV7l69Nf=lO`WiqOPmsrB
z#hY<G(EqsZnyvo1tFcGs`j<4s^m?_GmbCpes^%<n-@dX5j69iX6?{`KwEG9P$aW+!
z5?9nxiL%bK?1p=g_6W|`04%z#%pP!x%Xcb~OVnHfxIAi_@6?pU1j>)*ZY2PFU5bwn
z^D^F87+a%8321@<%{UKuT*YYm2X3+~if<mF{RJPdV;a-e8n}$3d#`VM3s#|_tOG%q
zJGpM>B@)M0syVPM_?UFMydF4FUYGD#C2wDwD)%O3VXg{vMyvQdVVdU{)5&e)Jm@Aw
z7GEMak_g=#YK$<$B(CG#>dhm|%vzB8jz08iTmC9c<M7qQT`SBp$<j$558S*$?<@Tr
z3634i8rkBGLZj2}#Z^_=aF40OJ3%Qd-x6@9Zh<yh^6=lm6?t#lt?8CiSXBYAS4^{e
za16V??k;Q@ImqY_vHY|!vw6BShs`Oz*G>N+tj?>p<xMkRT1dqE=S_3oY5Wtg3V8(A
z6FFcRu@IXr(j6n2q1_9(VdN)LT!Np(e_Z$s!W_R0%?q>+@fvKQt}6oBpUANnDo#&_
z4U0UCPq;1%nW^OX)vZXsuk@eSAN@pUslLGK>ph0QGdshY>)NQ?zaUl4qnGKRKw9)s
zlvk$x?5Naii|Fo0|0Jgwd-%46I#L<Jj}yx3+8FP(Uz2+9(SryqN3}zIU!(mDzE28s
zz$oP^Q69m&IN%}ssQLlCiomC{J_ePRQ%TYr!f^=j=W8N9ybR;Q>6;(C)<S%E<D9Bl
zVjP=m=km27#Jj6X_en;Cz>E8zW8{ca;XAS&486MjCVY-0`?hr<-uzC+g@hV$Bk&`g
z5<HRL*gAauzeL_3?8}U-uUN*g&;u8@4Y4=W*dx~S`@Olw%~u<Vka6|s1dql<+n!##
zI@Wna{9*BU?uDz3P{O$Sma!@i;KW7y9AFyr{lbO+OZ<)aICS~!{VL~^Ttj4{ewtAV
z4i-PqXn38U=7-0-JN5iOBU=E@&HcyTBanAeUg|3x&;Jvqs7KR&vhUb?@O<gdK<kFI
zd1ba>`{FJ-;3eQ{Q^@|j6)(HqkxfexBNW`X$cvvUa8|(e626k8QeYVXAGjCD!h=7~
zH++71xv}a>7X>&fY`NBs&m7k3?{?R=L{ZXO<sP%=CXT0SlhuBboZKakCfE7_)LrX`
z3SIo%G#h746Z~5H9yxlyoi~@vc&PDED2{`?h`>XyjiE!g*JbbD9w;=PGR>b8iNn*x
zRfWL4lr^HId!!7_6PMtcC|v@pyFBVp<_rqlRGS_{YDEDxC-PUX(l(pD_XGE4Z+_(Z
z>mRv(4YeFlv9?D+Ado6naSPul>e<q0_1L}l9;=RC@ZrAeAKBg!q2dpy@T&v#2%cK=
zO*)cpU`lZQ(!NrfOud*5b~A>Acvp<Vpa~w|;|)9-42S`JzSxbJa}6_-jCUp>tohCA
z#NV?P<deKT*8&#is9eCQD86O$(KDub22_D|pqP9LbO~ZmCxVcu%L{eZgve|k;(aZc
zYP2z5MEIYTUdJ7PM?91~TKL0{qP$Bu;0DYk;?sVhJS08{$m=1!UO%KsEDK(WWcnw|
zGhyBu$M^#iOhdCmPIKePw^9?oZ|IMO>~Du7-?BrG=|(P8uZPb2b@QtM{kne-XfOO&
z3;g?adf=<3?q65R&%hN0;qudPOnIiPr0={ly@K4@Gk)iZ0+K(A!V`{vMhOv;qL{!9
z*vZzw=TgOXI6`sE3~&SR14!JwLZO&E;#;)uU@8+NliV>=-F+D3L@}Z{efB<fc7iPe
zW(T<yYq0Lct161eCAXz!4_^5IE^YoJ9QAJ({!}5K<1j^`)+TF|`k4CwEnBJG>$sbf
z55j4uZi#)R0s3{#uZ}pg%JxkT$G2a$e8+od&t-G}VaKbse{y*C>?Tj+<5RD@a&bH1
zM|^zHo2(+T0ov^v!ItD!0EJlYMUtQ4BP4k?M58p1q{|jTc9Hm-wNkb)Ga%{%GX=6U
zh_!5~fa0R4j|selT>;lgaEb>vvgr8CKq*^aE@k`TuO*O`{#37x_hn0{QV+?Ay4At~
zhHt;`OiK?5a~T#tJ6<y@2|%KJeP{#U1@8;;ZzzGucV#=Ecrs$kuoZkYzI8dK(!Aop
zqk*XzhIP};hW*0~@}BJq*ha~Y=n=mb@30KVu+f^Bha*IpTZKQ~Ve0|E>HjGqF<B|L
zkRRR!V7tq<>m&IBr^fz@=*uRHdR!&_9G+&QU{BOQw$sR^FZfNZ@lO~GdMGyK3|1Ka
zGG$&*p9kE23Hp#hk~(0fhawV`KV7TJse&pWuMBG~wld`bj5Zh!50*vY=v1^|#1(sF
zWu<Wa!jau};Lb6W!#<meUXk@D{rNW@9nVVjY9_K{TR#-3`(_T+*A}jyG5w21MCpq}
zFF&)hX4(5rX>-Vi&sYOpVcBuFZxz}RvMFF{KsQ{qnx`z~tkyhPn3@S?3I^Tx#Zrx5
zCrGG`7lzitaYac4j?(!9Y50+KJZR^w*TN%a*|194bSMzU&xH;`SOxro&)AKzh>`pc
z%_WTlDEhq2(*aWbvN|E+cc;~CdS}vcQgi7}wc~C*ByzvFV_$t$$0CB|Q-MHAOQaS%
zUZpR-SXY~UU56Inl^810q$2v?vmaspu+k{%i<N7X*PNBfm{B&RVi4tQQmT?PfjVqG
z^qtLPJTGtst>FDYxMiw98fFoWWmUD1v7t`4;}Li{#dS;5`z&J`&IJmtz)NTArSnev
z%mhcGYr**DnGqE&6Yc0%Vl-JX#X{0?RVY#2j|A%?tcKzaUBv3R`07)LDYCs;b;9wW
zsx&9on^%%Y0O9c4mSBt*V@32YgetMPG;>0WXea*U7f<4Ptvs@#>nkJWH^12A$^H<Y
z>>(Wvcvz5XLOx|eG(a0{(q=s=nWbR!_6kF}MgZJG{%oAh2AB)<Zff!yvsue{Bmj@l
z+iehqYy2TCXqzQdO=ZQqvT^%%xP}HEF|6z?$~UOEU<b93|C;X{=^2Kogyi#Y4Mx91
z_~AWw=~~cos#K=oH{!wXM1yao%f`xZ&k>s{I8+@A4*qw&C&=g?Jn?6hhp}e*eRaU0
zM2D1>2ron*m~Ze7z#bH^!)(@0!E2dOC~o5g4WOc&AE~qqJT&3mQp!Gdo0Bz`bi-Nd
z-aRxoBu414nEn(Pu5d9DyNxajAFD3v!FaYbhwE>5viex1FJ68fWgeL6r_)@zc#2rB
zH^r=^O*f(Ao=maMIu7z>H)s~T#W7h!_E3bnD>XgYn?~QJdRenZTB>xdcM|?DK$`IT
zdrSfLSOp+IX2Ia%AKNoHpS#}>m6gk{zkH=4jQex*yG{{qenMAPaVr$6ivEOc^z9xA
z?Y-+EW%c+y_Z(kU9=dC9@+6I?=8mVdn`NO7z6YFy%L{suy>ZXJx=TT74@x!*w;>E6
zq)zs5G<s>wS=1zhi_wF38COW)1UHmIiXsn9xGiZ73=&m6sJ%z30&eErQO$wVW6JDQ
z25lp?#}*cXrPLq_WvIbnRFa8Tb!W}dt1-if4hL0uhXqxER0j5*6x_S=U7dYFC&DK4
zh!gDX%;$|4{&rC5)H*VbCMd$f`)jNOGSIo~i;vx0$Q(XxqR2xcbX_96?LaafEcy{+
zQVhnE2eyS1*M(3TD{%U7rm$292Exg5j}0^qTyFQ2li@(H@bR(uzJOzA$eBmQSgtE|
z$Wvr{WDSJ7()1P+(%WQ0kkCiYx$7&AFdFD}cVM9b2@(vz+1abyQtmM(i6tQ9xUJMH
zJqES~W6YjNCI$Zf1DPIGiDp8`(FD7SqJ*7c=hXI9Bhoceh<5~UXPUT{?hsJYINAoQ
z9b&=D>4l_%>GDvyk}YLI=>SyhnxzGzwab*A!>PPvtUpPKlZgKjAeF@XH7<Ngd=a`b
zlOplK1xv11lFqU^h62F^Cgib191jR8XnhHJW?y~m+E8q-rHVf@6l-5B_-{y!t|=qB
z-E(KRt&c>FWY4ilfAN~4|DjX2Mglnig_+WGNc9j8_jYz#>SX~vmC^&3<?89uRXg+;
zT*W*&(TDM;SS7LmlV=9$D^V{*iXH^mGCK*4Bsv5}5rI81+Tsp4P;o2eT57Tz9H-d$
zacA;}%+ApJkB(vlD;*u+ZQ?<htiSOfw>X8V6U-%(BCOaA%!qxxKws)u%H?n_eAvXZ
zACV1#(v=+pi`>FAc7u8PFmxj1o$2Cf;Aqg0et7X2@TpSkrypj~=Jdnxy1xI4$Z&XY
zVux6M_%sxQ2qu5{bp6UzYv*`&D9^R_0FyK(UY$64W-n=aK>(o01PBrZX!8Yu9ylrO
z(v7qHI~4{HK7_^>S+2<v=$TpC?r5xUY<Tm~$~W9Y9vYq>UyM}R7;4ZU7&KIjK0qEI
zGGUb9mx1=_5>zc5gHhu_`KXOa5`k#KPV}oHtlLiMvqntQM&B`NXYAg4WQ@M(<S~z+
zB!*?76lX`wLRAbTG4V&tX|M<Z6z7vX`3B^LHJ<@}O3{^=020tP$x)Gb51fn_nEO@M
z!n#QrS580t@TVW%^A#DaDfO+N=J!YQ!>6xbsAI0-G)FSy=h&W`k~}VyZk|mVg+=8`
zK%_OR+aarII<RN0A9g`6fNx@(0<Xg(nfc5S)j(Op31|eqWjNxn@WEMSx6*ixsRR{M
zToZqcvD)INk<?5{To*ZwdIg&Lr-q|!N5QZ+HCDzJc8%Vpm}91Lz1SO!!$wG7kh%al
z7Q}_my1H%`;Ajyr)6z>vt~f_JZ%-54G?;sfq(6yLPrV+tQtpO1FQz~Tr2LLDUL5G?
z7$}a%VOI*qOWAlshT1&NQzk0c4Qsl}$Ir#HR~nXSQfUhl|BB;<0ut#g@v@7*!0;di
z&~H?RH5t-J^V*U@DN4~NWzKQIDp82yZ0AWM?K@l2js7Xg)+?`LsWbRY<L&(%=z8>D
zQTy<oNKZ8I!uQ2J!6@0MY?eH&w~1noqg;3963=uzcF2h)VD><vfdAR}Tbpw@3aZy2
z`mxTCi~+`auJO%uZ;D7I5FvB6;Qx%|w@^m(oQdk3lXWeEaK;VYifHx82#S-M(e$eW
zSJj@;ba)dyQ@bkg>P_#LCaB#kQ^SvqevJyNRnxAt;=Y;}!TZ+0k%_sJ@nUMd^7F<+
ziQF;yR$k=p?c+O7&UIEwfhtVJcI}wdr*nR_Jn-nW>mTW>d6<HJ65KtHE1{7P5J?%<
z8PG17ca3=W^f+D{WFF2n5{pR@7Gk-JaZn`B%U+8tw`78!gs5#9q1aNTW2`@Kh1|2{
zrC4@mpfUg(!r4S_F@S_c_`IXKFPDI?BY2^uL~dWTvJz(Uc2&qKfU<!~4^M?MeQ>$p
z!>Qp@9gKv*m|e{e2n2pjKU}pFxjMlYZ0C0Mu-+|YK}iq^wxk^YOPE)R!9?WSOGRO}
z)!LAb#K}7jq0(BZc1+sfkJX}x$`mI}>z$@`IXica-fo%exaZIvcOI(^k)30xb__vU
zunL*hannK)w9zxB<?}b~ng%pc!{kQ*CY_e)BxK{J#htA5WrRbxfUpD1I!IqyFG<Xn
z5Fh6_(Q|gm4%qgbeSV;~@nJv&cMQ=`v0?7<1_zEV1ng<sK5R!u4tKcyQc8>5S+_qA
zVO*rA)dQflq?;!WfVdq*KeNn7dooQ>%3COeupCKhB(@M~#?!PX^F+$S99}=;5S7}*
zBz}t&=wFh`d+2F$;=>n7^OjO>%xc2!@I#bK=*6O*h-Ni^8tK%L?KOidX}^~Bu4FWS
zhb^?M|80ym|A1fiGDvQe%)uQ5pjFjx2T<_W3?POr7l_)HsT~TddLiRi!XYD%449~r
zmN!CS#h)qYDi!j1sjC&nx%czHHJ-CI!*oXzzD7zgYoI!mW@Lh8RAu%9-gs<3&-BA!
z-5%&?3+mGNsZG<HuB9PFgMM)8ETW}p;lkaH!J{V9J^CB};Jw}a+YUUo6G1E@V;Dn=
zT0gR@xX?Ft#B_Grj@z?edF;U341~7)SKKhP=r0+D+b@rPy7~RRigK5VNpAI-s0gX%
zz-W}gX<#;g!u8~OD|@8R=$?vI++P%armU5*g<RsJVxY6jpB_rD%Pa?bDqXZVx+;4j
z5lTxxvvg`<3|aO4qC7hsrmP;WJ_UH|OTGx@Q|y<R$5Y|dPy?E@4<NtLI#8FG#FZ&W
zKFmr|5(A(DI;X_0X$qtUP#l`R;hUk*=Mss}g+j|AOkrpt;D96Xt3!Sb40hnn%8_Xx
z5ulIhBgze8NzJNbe*c(1qo#9RR7bHZ7n!0g{qug^Z)x);O3EQTNNZcqomkDxtu{vt
z(7$N~SJFB-*%mkG@@v%OtsJZ>uvW-cEa$#pHU7?<^eDur0wK8#+7v*RPcyx(gQCjW
zfBRZA?5*%n1YvP>BQ{G!ikHqZ<$WX5VT1&@IB^wgKg_sjtN$}46(Lb2aVe;frs8$N
z?Z3{;Zwq!j&kU91DtX0h!i(~^nKnh(tM%epE>A-7J&~SQL7#|uDV6matSgkHL+qPG
zf)<+A1CzI`4-aqaGCI0?<1|Yndjh%Jg7LL@@VB(XlM)e69@cLCTD7aIIuPlMIq1yP
zV1C(6-bwiQv%E%Q7=v!|f``3{LQP}>Yyeu?pqvjLMuThIB`{h=SMG_$a(z8f$C+A+
z-RC$?afg5TyF4<5+K6ShVJ0Ns5g#>Tef9BD3P>Y)-_e*c>i7ST@X_t1D38^Bd++Y`
zd&q@MK5e|wrFaL<8VjjH1AkJ}0CH1XSck{e-kIXmp-QRo)2?c_=x%(_<B2@(;Z=p{
zZVb#q@Q(_!{rV5cKfXn)qVPQ)COr)!Cr$_?g$=k0B9kd<1hV{9?%^mT^3KPyOhb9N
z75Ar=*I4#-poZ7RVxeQ5vFi{*k1%^Ul04tLqvy~RZ4TwOhtqAt6-}PN7fxIFPUkTI
z^ghE0Iy(GjPxb8RojSyuR}SR1$K3&w<3;O|;mbhZTX=UXE~%BPhKFZSF4aXAQ}B3S
zE)?XVx=T4aB>`#bsPg$oXJ#J7eBei5w|NLMh@_i0`hJO`$p25!P7iye39qrHz<_wg
zKJQS;pgbDFJ3ST-q_a9*Wm;P4)g>*hRbiVjnzu~+e;}-lPqW;#Hny<)^a7}jFfBV8
zNC$;-t9}8g$;Yi?FN#~DrXk3z=(UN;IuY^H{D8JVGD1Cj=Sx!5mql;cA7=l;7<ukz
zkT?XU_DqlXqHWufjv#+1{>2KQyVf5@w)X-xa*1H*#K``?D!zz3%nQ(%Uh9Jg4g0`&
zLURdvFH(7tkpg2)IyzF^v$o!dBCw8_+^GsKp#UJOKhmjkwXBh=ITScddiW~oMvQ7%
zi4Z>AFf2oV7hH;M6!2OV<HfP`1Mb-)PC*nHV(q*RYGMTEf+vJ{_UvNg4-(lf8>`>W
zXXC-SThA`K2vl69`YVdAcjFPmrcxXqDB~;-hvboBsPXNyss1E{D>FS82xT&%Z1#6i
zaqR3J15>jpOK=%rT$)6<%~^Lm-h%NMhTq9<#I{4X#WmWZ7z8g#IYxmgDLd0E#07df
zhH~>&3DB7E0@g%(Yjap|VVR;@okt8^wUvPWKzgh=E>`JG7^eSSItB>?wQT1)6LJvn
z?lWf>h0pHFQcFCWr{O>o233?p#SxT%%_G%#d0@P#n8SExH%Par_|?W!H0<lbO3qFX
zWV63#ARYPm_%`Is7glO^3QeWSxwJ{cvF)sf*L*JBqj-Oh@_9T))su(g($f*E2}B#3
zJa1nlH7}vSYSGZD<zBJY*)MZD^>^OKM0wFPKM;F|X+9Erm1*7{MPZ2Bh`SKyqK(Th
zclIOO6O-~nXTQu_A>IkYTHX6Bb8Jq1brq<F^-14{KJvF=AMJq(+O2jD9v$cwZV=N3
zOT=K%0j!Yj(<vn%N<@S2IHm!+9(lbHHjlj{h@#!^M?h&T)cB)7%q**lrHQ*N|M<Ay
zYP`p^{ADv15XVC?VbO0Aev`V7DD1(r(1YIYy9>H3*c$MIBm*OV1Ek<y;2Hn}DWRHI
zKqNTmfGa~nYG9d}>QBmM$Pbe+I#ms*qlx21EjP#kY-W#R70%0C09Z}$3#g{426{|O
zF-^rXZwQ3_X}@Ll+VFGoJH5y&WM=6=N8QGh77pN@^j_z+TfTPuAr<i!dO+Rw-fe0C
zN1FPO6V3PJqbti5;d8RnStn>FN0Mgnsnq1@VKZ#azG2o1>$C-N8oU-+w;ZG1e&fxJ
zuVOg{6-|HO0R-y@0gPgMB!P<X_)GlZ{XA!0{3>*+myTW~ITK^|aza+0ur3j)8X9bi
zR5cZjRQ=PS^^6Qpoz@kN!&5!G5#=3*-XR|CbyYw~9K~BYGYQYgGO=7wN5%PQy1qo~
z%Jut+tc%sgns|^bB8^AkeIfOSjHT*zf*G!-#Jm*wLQld%#cEjAPcm|4y`U$-;u<5C
zQkjxsRHMbDOvQ9=d^cBzKt*O1waQc}OvsR=|7qn9ufiF%yNFav3*&JpV#gOqij$&*
zFuRhCFDJV|c<Q1s5gSW_^tbc5qu}rA#Ko|hg86KyD_~=4QcG6#(2z8>B1vr$<N=-t
z(A>JL`;<5rSw`)V<;Y5#PE{T@)*SQh6~kiP*~-_g*iV+JMAh<7V%FZOWQS=`D|}e}
zwiQ*!*Dd2MX7XmkTK9Y)2{&0-?cMNPqx{^ysZ;@q8Ip9o91GAMaT0mi+CN2M)gi^x
zC1_-g$EBS@-wCH9@$L`Yi(SK)KeN5GIG>=VwOz$frnm8FF0(CuJy5x)S{uec@>CLa
zCc59ubUGc;NopC~<#Y^Nk+AbPMM5uFJ!!3fIF@G~v85yC+=%SILi!BMIVI5Za4AU=
zBvHtmJ*Tc;ICk$7EGV9k8bq10=eC9G3-=ydX3?-spZ*z!E9q$f$RRt7>kuhmr5eUE
z0xBU)qLbhUqahJ<Po`3!w_iT8bI|Xk0{#(!P^WT99>3zX;jVzVf4o@E9OQ5=fsA~S
zrQNs0Rvg%iod?gz-A+`X4O^l=30>wQhin0^TI(tdF3{sFnluD4$gFfVitI+?vT{(E
zOJ>8PvV0~PhXzz!2;}(-C^ZtQw%Ax*)Kn0Sft-KQ>C}(Ma1=YPX9J5cWEbdGY!I%A
zNXIXHfvUPec(sSYPro~yB3hFQzZ>{}*tWsTL$GFEXdN<jhYM9yF&T1T)AmXf4L%EH
zZ`fqQdkUW>dAl{7tqG-6OnPFPY%;Fph4u;*dAx)ljajzJ!<q_({y01k{$siO2)Dh9
zw>+2>PKQ6)B7AOjn6bxV+ftw6OCM={8PE7Jx4nzEuWH-M7Rj4~_g`bVwi(@w_v8>P
z5|0Q0dP@4O-QW6pVwDzfW1Y5D233}$<C4zHt!yFSk@tyuXMbajTR+0v``Wg$Md}VV
zw)B%`<7M^I>-CHE?zy&}zC^#EtA{Gy>yd=%R-az9H|@XrxLm%Q-u;4)pX>7(Bqwco
zN2*@_qEGhT%iC|A4X?eu2i3NB<=>4zcTvkF$KVLxEw^$c+FP*18NY4r|3y9bdbo9e
zaS!j~Udip|{zy=12NL`?>8#s-`xpN5#lI-W;ZnaPU$^Zyq%UdHkJQr$x&ez#tS0Mt
z$truRq+V+9mdIiM^xyLK3P@nAp@Iut3rDi0uDF@ofEOwjA{vv?l8Z#7UP<yCD>4RM
z8fM#2-aC`|e6n$$9JCgFCw*ZLWIYcPBi@eU0r7B^SmvfC4!;Sbg~VC%=guy#Byv9r
zXBtlvR$W4c8pcNw!LHW35{-|F&-)XRMo~81?Zni7VAvrT!8`g8uqT$-8}}kv!qxaS
zN07{C-mr<bAw1g}w)NH_o(&^CaJL5E%pRPOTvi3oSPdy8zJj3EI3Eh!xS;%j(~o$r
zY!@HC(JViHW9NZ=+fxhV$}aq<neZ{aYtSf;jofg#c)Wbu?1)+3mhCqE`T}{e3pJ2(
zo|(FTNbeaPDU$P}0{MAEsRNJBLRzGJJS6miWn~EwEPoj;&QOej@}@{n#y!JugX$5E
zMaookXQF8n5TD;Zn2!eEf8#Vo310IWB^tFl_vd<1jiu0ADkS2)(C#3+*STydH??@G
zqK|AJIl=QFZb+mey`j8u<?ZpHVZEtiB(5iuSvzB8vf<D|XN6k(v)fJ|p6mB__4n^#
zn&9d;eJtnIeS4d5(V7Y7=Mazw&bI{Lqaq-KL>rI$1CZ>5T)Y!6DJh^qVI@lhBaL+?
z)!&bg7d!i5@M~<8vT!#w`>5PNB8LKrRG9EL*4m)<ig@S$T^Lr?k*-`cy&{&0ty-V#
zD^L{GZ>!zO`I0QE^}8hX@!H4OKMC)LCEsbuvr4svl$VIBMz>p)!AOLH(H)6#!1+Ka
zG?6BYjTEp*!7&Xdsagq%6I=sd{}i2I(#YDU%qx2;{bLKN+NY`uWBrvq%Ba1kF9LB}
zgKQIug(Lp*;NXth!P<_&!LmORjv<g6*K|G7x5sXL+TYvT-<MDJqYCYGUw?0}ANjTV
zlldo2bN~3Bog?M)$j&|E`%UvtO8r54BGnA@LkAFje;}I;ygv$!i60L`*)l~7_Lmy}
zG#Cu_C%Zb+{lVa1yp#EO%1i!&c#C)#np)=JN#p71Z!n8A7HM%$%rP3@fMZZdw*ue&
zPSDarS|;!lGuZ=P``u{k3S{(KZ$(=dt^v#$N1em^{TOpbzW5kY{o+X)K}YKcwj#os
zVQWGOpt6}5OQ##pg*p)$5)3~51rD5Bp{+Qnnody9qt?fRMmmx<9)!1lKG@;kyU`v!
zM}7wD@VzE~ml4iG(lf4dct4EZo@gRX_5=Y*xx|p_V+=`;AX7Ktxj2EON0o?u<yt{l
z$c3j3pJRk3)(BXiKK(F^0dF*VCqJX<MR5KM!TW=0ryjhoewP{0x7S<XT7UR-F#ef0
zbWip+F2Lb0&sS390!Ogv=8uWOt_A59ONKdJ($X{IJ#9=7sIiN55e3X)(*Ufc#9!~f
z>8Aac@5i6qe}5eR62-)@I2=gDLdI|&=VBRg566!2W}{w*K%Fh=fk?v6mg;r>eHSnN
z5oAnW*ND9)U$t?lo8gqy^3lR+8Q4fJ6;e%;5|6!BB~n5UQDz{GToFngIU{ZV!9d{f
z;V4pRMktqG2VAXjFfy6zt7NT{`}Zu_WBXnMjAUylD|#lH{^3vIa{ZXt=2$yuEVl`L
zn)U}XS5FS^E#+(_UK!hY2nfLsFIW5bZi-rr%U=)=yD-c;Hc{?pRT9EkT-~F%+lAW3
zHvr6{>H+gLF3`Sv3ov6)K!Yww7*3JzM2()<dLX0bkSJdS!|Ajb3%Y>&bT9}A?hNg1
z0q~DoP#fsb_U`p}1PPcI+M$>ESag8=Qab<-1?Y<w0TUq=h$fA|Ti6H4@m<n+3d{pc
z^GAb&62xy$48P=FSv3O4&lh@OH3W-6JgC&+{Ibl+B^%2M;&S0d+4d1T6)O-j!x`<S
zo3u<mqxBN4U0daU>&wfXI{e-{FW$QLmA8V%PWi6DE0H)UldN}>Fo`91Q9w+(3VS2j
zLS32xYoz3ET-1za_>3U31a9vs<j*yd%InBM#dYThd<-(Kmu&xv!4WO%Ft{ZS6AbZ+
zMT-7Odv4GOO+;cg`>lwt@$PM-<O2a^AxF0qLXkvAwnAU443(gk0nqY>^7R{o1GDgi
zEb9uG2hVQt7U&Ym$7Td8Xgk&rXgh=s(sq-XftHOFk)X4K!(DYkOHNQ6ikeEp(lhO{
zPTCaA45`{wiJV&DDHJv}eR$jaPv>_{Va&bb7k=)bYL3#^neP$(*?;6>2&m1I_jjkW
zc~KB=GgFN(;k!z3K4qrF&QJ_TH}5pzw5>FL?5NqkDC+`FZdW_w>JPWsYDcdN?;F6G
z@;!c0|9u{}_oCfw{GIICCA-sD=PtCyZxuX|1>ZB7ec^!5x2+l73|y2ViYi$Oj#k4d
z&Hxp-CgVGRv00z&wlmxmX^AL^O?hD*F)GjrEz>MwV<NI`#cZsaqJj{&a}-UFKXM&?
z0dq|`v;gDZFVNkzd2@t9G*0pM3~#9_4f%yq|H)pxfwfAq@gZ0MZsI5a;*njhjTrJc
zW*h4g`~>=h-gB@dxCu8Uz~;yo<}qLp;0ys%Fkj<E<;%4nV*un!V*r$8T9ovf@!(mw
z`5Cd$sAXt51DRR^h8c>Y|FO&^8qdq2SVK4;{ZT+NqWT1ky;2AvZW>ud0ud|Rp~0~j
z!33(`F*FBvnGunVU81=_m)t)&T#Tdt6t!Q!M&3F7$iM3?YjTQ#4@^^8NEusb{a1_R
z5CfFq-YM2@JoFKIyPut~f|;OQt<lLthrU5Okv@(!9JD7paCRPc=t3}l2k?Rw+{4Eg
zxA44O_}PU|!~gR?BZkz=1LccPv!N9O4$~i*0~9daFO~qxlX(7O>D^b9I+scV(QvkV
z{LIo|FnrHA3#L`xKHjz!e-_#K=A#HO?#b=YjG?7B?m2jO<1bn8xtq76ygk9&Hd!((
z<uJhY7P#WLL0%N@BB>GU0Jo?1@&@aK+!*=+&lMW8%9b?r8(5DPnU4V2tN8Ic>7Ieb
zR>fO<t{fX9$!Hq>ZLD*Izy}FO7H@*MG?89qNwxpG5L)~D_uF>kCwA6OAzUhkz3AuW
z@5+1r3N5&dtGEI@?8+6ZELZfkRgd!UepO8(MRPLUV|Z2~tfABv$B(KM{Q$9WTHDyD
z_r)(;reicn0g<l&9mqXe3x#@RrQo*6JNYW>C_amKr&tP^4aTz(QB*nDB6q_$-OX(P
zdu6vkrKjd%l^CiWE6HPVs~L-#rD@I9rg>A^a!#pGHvfsw>hO0c*p@yzs;csX7O~OZ
z(s-6vom_J6!ULeU^psRbQ0C;`3F-3?cp40<TyOnt$ci1FU6D<bYDkbQs)$sh&*m0p
z21zAQC=@W*N>Ik#ju%$|L@UMd#*Yvql8(Z!vtD1W*Uz-h*0DD6l@07MA(h5?R+FQo
zWt}H*{9c$v@YPr1!7{WLhikZV9fCB;E#E+_%g4yO1jc0mBH>oZWG@zlzO@~)oAL$(
zpftjWOIbnz>wR;6BWU>NW^#V2$DXU<9Q(Oij`w_y>pS-0ev!eZ@k4y;txm=$-(o<q
zt>4-`&ihLDt-5OZjf>99xF7RDeC4|9cMdvNOBxJC1kmIG$}qB-HKLrXXeOzoj42~e
zMh+U@v|syx!V!ftNGaid#Dg@Fjk==$)}Yxkg{}?$mad3(x<<@S(?ZH$S3c180GLTI
zy!h0Wx~TJ5H+#Zpx|Mb0MSA7+mhu>(D?Zv*+JDqNro<%NBWzB|d_a^FsQHoofd2{U
z9^myy!@yDq>78F<=)AD&Cr`cD^9yzAlN^rbP`JHf+P=<q65>rLqbIaBOu^lpo|qP_
zcdT^u0r_ZvoQeG=@`1UGZdURGT@mhv4h{He33i4voc<zWelP^C1K4>rw1$BCs$`px
zr3reo4Uk_jE`oZ7nKB3JcC_*KvxKJ4idRSNJ2mZpvH1wkY@8?CMH_rsB-JDIq}PB_
zsWxShxd==+n;&WjkXW8SVMLr0>#6zS)T^DmGvzpFT|MDMj1%*pObySY6^(gE;zNwX
zmzWk52}8$;7+`o6-uCv;+d+GvQ{>zf*J9=jmdpW<DZOwquT8VUzpw#AeW6o~Tz2c?
zk<rQC(e1h6aJ=%(Ba0J9$7d?>@NjPXXm3>%Kr2=oe~Zof#8_z|YWtO7WYw_(1(As^
zl)6Wfg@EO(MuLjpr5^+vL&z!s4@X$c$n%>Ew1kwV6EG%+(KE0f)HhIYw1QbYVvhLl
z^iWq+g#p}es7GB$K+vkN)ab~>FSGm34`uMf`opJtc26gr_yS@PRBz!p#zNdFTr+w4
zvuyH13Mu?;wL?<g(Q#zh^?{|sFp~d~XXO(UH9=_*YH4I1MdnY)4@S$Syo_8RFiYY!
z(0!x<5l909;DboCjM5Uz4;a=or-2r}ofD1!*>~?73e{ZSy~lP=yy0Pjn%<EPXp&H&
zE@B8J=0tK)L`6h(9G|Vjcf=BuJNmtU*?7KBI1@XM-Md~Wypr~PZ{UEc_3jQ-vsZK{
z9LhvgB-RK+&ihy3v->gjS>o;p8<V($%+&OUBMyiIlbTi$#6l)i;4zZop!`G)W{9&X
z<r>r@HjI(3{HZ+tx<-+zsg&Jq#l(9M$Aw-aSPzK`;Kh!UU{tI|#AO55=%UE~gnrGy
znQ*xAk4UHZ6|9<&^%WIvs5jpXxVZ4|=-V%&Z$a44`@wroRhyI!wI5_s6@UVFFG|-i
zu*jkdbVS*k>f(RdvG@z?@tAXk6&3G|TK(Ys!9&&8=rZtzZ|$EWJw1`tP^f`?7_<aQ
zD1bi4%|SrfB!I85S|nTR;?J#WgBFID_eJQfrIHEL0_7;s0~&bi9-||C37e(X;nS@{
z^n-j(B(0J4IpV&jeIEzRrI9R~{&1iWyNI={O;1va22fFQp76+}drnGEL@aDAf3)@7
z%@^OyC;uYnq}s-BAtnwiejCZ&a^C6-GFGOI&y0?aegGf(cZUS=KU0)0HwFAy4-)Yp
zhfCDkahjcIk4(#>dzs@$<!xH?Hu<HZn|<g1;M1N!H~#^jz4-hIKH^?pSih?3>i_?p
zp-lWQW1y<&XB+GiuZZlZo^OXs)mrq;E&L}XT2}F=%TPoiHK$zU0A(DdfSn+_dq?7D
zlv=X@YUggptYDRWv#LSsvDNieTI#{Lca`q^dn<T?7lh0w5jhdG#w@moFIiT-4$l!<
zip#BAz#o$Smtrum=Gnf(x_l62DU)L@w(0S?UWW1--LKB7L2cGV%sQ>^usI7Cr&%Pk
z|5A9@;ay>|tOoU0!PhAVkEsUzWW%!jIk-Z-N)M{b$!s=>CCB6US+NJdZGaM823o{o
zQz`)z&AsrVfkPA+On<vTrzo*HBg)#m4sIHYtwsfXh+MO!<Zn1EV=Q0=GJ$m3(xRh|
zKcxn<X*K3|;E5N`22eJ$qXShwBR&445w$`gqjx4?eIsEGgfwf1osC-)C@4Wr4Fez5
zGq}?UWTN{foXFL|v>pr|3<nl6J#&uV34zFF0--_(BoF1_#86Myf10#MdIHv*6-Ulq
zi+PL<@UUwfg>jJ;waB~x&^$$udg;)_H>8b`jQ*6A6G&~9k(yh;4sk{oe2E+`!qT5h
z;8MssC&ggqKRln9KEz!eV+zlBD^204NSUx*Yy)|L-!ujk6o`TeA;QD=0#UUgkypu|
z6taAIOrfDB(o=2b8j}7qkK)IW+X~5pKoXY_C`j3A{dxOIJqBOV8w*I(3;T+pCimY6
zQ;X0||B`{>3E(z-({^huUqyfc0_oQgo!9{b3?JCmlN51TDyf(t{D436LB%ory1*@t
z;b<y-E5!OFDIe4UKRuKo31dl6OJr%MA~n128LLU5C5vz7$*VF1dd;v{q{kkbOB7<H
zJtYza4P~vC5#jLNr>Ug?_6Es+NJoZ4-as1%+5sERI!2#7r&6Gxy?|({3*hTVWizO4
zO661;@ov4SW}q9r(<pRMrK$!7l9Q!jMu9t{x8m48q&Sh(U9T2|(lT_2d2=+Nl*>wB
z^h&>NVhx0QaBhx{nq}p%2&1H-DSl?dln{0rpB}8$2F3pDAIKnp#zrt63!UGV>>4Z#
zb|v##tT&k-Qo07Wy)U_Ka4<h)P|JJ6nl%})tw<n*FV_ca*%F*!58cuD&-GXi(b0a$
zlAnY9;48=%G~#>E_b})qF(&LmX%M3bMg{+oaimu|H`7&sQw>~hb(-!Y7}HVY0fZ0S
z4ux~U9TULDci~PB-({tBI<HbJ7zPGk!<dEil7wI4<zA7>$D)(q#`-7W<ueuts=DPD
zMb)+@`}L?g8I9#r;7Tn8>{~E!(9Q*{4l9teRXA%ahH9xPq%;eI0D=sLHRKD(n2H@u
zCGBJiu2#tuvNoHl-F98IRYTRZCu>J*nc-~tiln`2s(MKYnJYFl+=_O!36nUa*;PA<
zGb{+?x50OG9UjrB+lrJR_^+pvRwSBA*-7NovQl_GQ#kThBARBT!u}9`HJ!9msc6JX
zron6qRrs~9!&Pk{JA!y_vWvU+j_BqL@mS0xL{(8mZ!;^>#yTj#7w{5#XEy#m%X(it
zEAsR6NZb-|=I0&k0-MgnD%FRDYw>%bdwOrYajARUZ=hf8y4^CQzawNfW<kBR1}QfW
zOc7WEwcZfow%J|>1m3o8Nuh~z&>qCx^ul<7g+nB9Ubt(QS2y1Uv5)0&h=}@hbi$b(
zT2fJj)}~iX6pa4nWd$$6O-n<w&O~%tzrrX`H5r*&h%~s8DhA^-i=jYySLIm73fnq_
zs#NSpt&1YUEtzALUFAS%5&3$~w=POqQhW`047QO!p2lVj_<DFIR4IAWSR_-(D^5Zc
zYi)JVI0#^n26dxI0wIk2W8W*qvXdi>hZqe-lCd)KnK({hlDF1yXEye|eo6z--?3aT
zj#MYF&b%MUNVj?O{y-G><96InTWff1syb49AyqD?f}i+=M|;<~)_}#>O3oGA0aTdA
zxT8chc4D=ayc)X#1JwZAQ6Si;V>kd$e=fZw))5&7B-4NtgaX7g;Pw6^(iNhOw<eqE
zB4UBB^WEGA9p10Wxosu4aDSb|fu^R7Q(e2J3s2ijgG>xdY6n_~VHp;lf1R6}B^1zE
zzl~lNg7IM7Br~J=&}SZMtV@f=PF6gxF-)E1?aF=Jgepb$k{$Y8CyX!R+j0xD9yeD|
z%%`U^!`j5g(@cU-x4{!2gdRfUEpxX(nMCyj*hw7;P=G910z}aOsT`34AqBa@q|83;
zHOgKIz7Z}JARiSR60*bziV!DZ7o!WnkO~akKeMd4%PcFPsfOQB)cyfT<OBVxf-_Y^
z;`__yEUPe*8+KI7P=wQSqF78J<B{KQB_qM&i5>@8+~|wWaBlRJ7T3B{@QlzzpcC4Z
zdd?B3G#pKJ<3iLbUfJtFwxw+SgIQHftqcSWLyL@6_7_!=9YldNO}CuhD~pm&!)8wT
zy1oFqQN~cT)ZthKPzBTbprk_cL@taT@o$FF_!fdkpEQgC>|S|ZPZ*8ASqTJ2wV+me
z0%7%|fxtOGr4hr0ZyC5Tfjf<r^M>)OD*<Oz(`xTSng=Iv4(N$+C*tcB;uq3{J0VH7
zMc7kRKyd<g6iSaq_@_*?4K@S77NIOL0L|=qMBL9j<piSQo@l^%YJKkH$+>~vzIcMH
z2HBC|WcZ*Pf&a#*0{ML4sW*yq2!l@c5r>gY4NnoCKu3IH6<V@Ej0KD+#Y>`zt-OjT
z9KWYgzvnn(g=JzrBIjt^U^YbTbl!CG<eMC5!uSSk8f{UKM7uA*hNFwGg3qTq9y<vN
z!QX+$0}3KukoiFpR5;%X<^bupL^DZ)XL$9LKcZp8`?Pr4-d7$v5*-fIf+>`~4E34C
z2(=95siE;vUPD#hevG$Y7%K0x({ZgYZUoe1uof7O9k!kBu6^MiliKudYWgg%n|Jc|
zao*Cf$#>Aee^7lqig$hKcK{zzO{6@o`l2_upvQalOTR&BNF1Cx*!cEE-CrLny;S!n
z@vVC=+4q(%yMyw1K?f*#RmOef6zqBniYQweF3zbUG1&lnKdcd^-JtCNAu`#x%$K-9
zEH0B^CKel?!hxG^imtGY!}XsD1MinHio0OnxYl<YU=iz~sq!H@+-9LEOI14Q1e58P
zaZHiKxL0CjNVQ(hd-`g-2^PlD4HJJqBCV~|uwS%8QB8()Y`ohkN57|53dT{-fc`DI
zmQ?wu)>ft^s$j9amhamnBNed<p{e#XiU9k0tOanSNT3S!PANqBC-giN)~*?!YJ!0E
zZo5Q!nRy{4qbItIsAlAH8iXF(-{qbGHJUfEBJ{Z&EX`rF{Q@7mBGJ5i6|B52wAQ_T
z{UfX!{mteV-G}(0ufYSQEd4pQm6%Lp5%oiCxiVd&R9j_|j-kUX*Gj;1K(ye}DYd7J
z@B~j*uJlxTwi$%+$ef%P<V#PlEWTbdM97$~jU4YheBHLmi38IR%rxUbF|De|reuW@
zdjmjjfyv%VRZ;fz_RQYgZ3c6?|Hr&|&Ma?7998;;=$i(27UHi@BV5zJ{SCPu=mAg)
zGZ}jzB~xmouI>w-x<61G4;o>A@Z-%jPwPg?&sAjP2JOJIF#ucyTDo_@xh<)MRDu+=
zjZjKXHBPw!N#=#9L4+1OG9frZ=}9;Xia)-b;wdKQu$d#@$;Hb2@zMBf?H<2o`7PD>
zw<}+lEN36k5OZ%S#%0-#D_=KrgV^6SyEaz1l~&$s!pa%ipHafEq5Z9ev9<hYDyY~8
zR3nI|XkY2?v=b5ih-%{0)W(%kHr5sO_~knE0uJQG0<`g{fdVKbtiT#js_w+j4(Vxx
zE|Jg!F{m~L`3Z_5_}a0T1l}s0Le+cxeFKV(nZ5gWB<JS3^`2xX6Z5~ZP%i*%#!K6a
zduOs?fYjQdsdb7}U!OYB)j499P;k$VWYk0k84%wYRG}p)mF_l@xp1mvk92lX!sw=6
zw1^Wd33mU5I7Z<v;NYeIFWi51#b=G)ad{~6_$}KHb?++7wmg3ozc#V=+GAIai1jz#
zGnGkg+h(f%*{0v`$Hsc9SIvxd#E3|f93lBqiu)e)og_ITPO7ms)P!J2*NP^M6fJ~=
z7{M`UU)e91@Q>7~(F#pZY(u6Ga2l*-16hw_thr<h{2?Fp$_+g0`FAXlm&X?%Dh`K2
zki=uE86avK2&MhVuj>fgZ>k|R&^b=6mu;!$LKS8f8KKGT1)m<H8eh?A6RMg>s2l1f
z#Q5nQID^%Rs?!jCBVD-n?q$SYUE;mt(?F|D+zL1b!kVaE`c)2_rh|Ig;16~?rn#(z
zw2xe(pN$V2i6wf8rG&ApY2vu-4);Yl0A9%iw?x(oxXbaH;%Fz53#O=UK^j><$+pRk
zpwh(1icHvL^`uy(+B`QJe-;QV8;N=yT-x8l7qmIp82G1w)c524Z#2G)o2bWi>g^j0
z>rq-zG?F-gj?)_-#&J}S4}EI0%6pU9UOh;vQZebI=wd4)<cP@13f>mE$u^e_TE*LQ
zFIQ2WXRXe|_Q}n4gC6B!bbBdGS$hKga_3C-1>o04>v#bYj*qHkOMNiVQG2iCAiWp>
zw-epwJWD8^5`}f-T-n@j>aFXN#2_nt^30MRDi9yn>-G0-evz%<>AFLlBPd|ba??7b
z`b;J0*Y1|smzT^-zfarROvWh}vCCRw^#6C<xh_@OY16x&jb#uo`|{kk#8odg1~8su
zsWyHD7cDy$R5!V9bs)L-C0w`AOzYL(ockzeVmN%s6<Y$YK(@(tb_kHU)usa=rJ;rB
zL3Q1ErENk?$Pk$?7W+GStwvzy+mT124>abnacJkrvNB(nYpzvWitAl{1-BGqrOtlW
zy|c0-&#D0kDYU1r*9t&K@8z}VzMHZe>z|@l_mLjCM(+BTSm{QRba|ITx_P+8Pft*h
zA$}h+qV>uYLnQKjM^6N>+T5aDzy+)Ni=f*SA={_qdo6!x?+5o$>Y?1;oRKs;oZvtk
zq8NYkaiML+wa|#_Vt`-lzkhJ=hyKk>@|OvvyeynMK?sB+P3ZlZejr%U!#JB}$-}ga
z$ry=jt@OpSvBtO-IFV;_>1Pt>60bvYGSwZ1A9X9=33wJ)V?^T?N3{mTvy*oM*gAvc
z{vYI)a<9(iZn%=Qc~>5%Bq!TGv}1=A>$G-U9@3P*L(30xxMvABv91p{S&hH1&`q5&
zYsc}R)*26`jy~AXs*|Kb&I%M!1Gcf{6!B6WQhcNuDgZ`*alcki_mZwCQtx>4%j==e
z_9`L12s`yCIQQ$2YxY-s6gie;T?%w3NZtdfnv@~{OFBhv0z?9XW#QA(bcsrVKx+cG
z2YCl6Tp;TvpojCCz%fEoJw}N~H5vhE!C*R}<l1?KYFh*3{k<hThMXr*j+l5hJSGjN
zzn{YCpj(TD9R(Vj;dv1de%Rv!iX(c`8F<~J9HFCxgxGOeSOHlQj>ea5s2KFe4&N<w
z5prx8MufP0HWsm>nqzf{m>#liOr&G`ZBiEcBMB{#?<ox=PtDB=WC{>=P#idPSNHsM
z<<CR*tL}*<t=sRkm&M%BkwbpV6iUQCu$V50Lh{IA%kf9-{g(~SWuXe|9h;w1<qfsj
zUE9p<;?9GHF*RkPixGQfwss7D40a-_Xs^qSAY-*vPTNsvvo-TdGXY&vG?$84Vs7?$
z2dv6rJ9+EkK@sVqWSPkA3R$x*mf@S<2kJo%ktB_jz_vo$gVF4UvVjFF84V#0R9;aZ
z7^uIZGQUzfWhInMMoHLLl~&#n4~M~n8>(0ytW~qs+Th&Kg5lWr++)LsWN3~8bve#~
zb&a0=i!w`fL&k+yfft*OEP({gB>3<?#X?T0Cp|%&WTHClN_pZat2LkDZS=qV3Z%Ow
zq;npc`yBG>MIsN;;n2_VtKQ##Vfhc;qV_`J4Bw0~AR5u?5A~)gYc_v7MgBF+-|HzX
zaIX*i#9tv>TRi)u6%^Xee0-os6+vs;<RA-IuGBchCx5L5tj?ZbSKJDyVfihd1M=(8
zfydL3_kCcTL1Qjfdl|)aQT+7z8BfRcJnDXk&!nRV8;@2*hxp~^*JWbK_2(l)LpoSf
z!d2dT-O+j{<SW>LWd?nwj`0L~!XIm91@wG`Iq}<Q0zQ?O-D@QFkf9OeqDJB={-hq4
zL^e8O`oY(y<gkb*kR3F1^$ttVm>NtmA!Pf$M%VBk39g-S9SuPd3wNdp=?vuqjfTyj
z6Y?Y1n-Yiq(=;{6V}`20A{1AVG7kavG6%o`!`gn_O2YIPK#6r!W;c)|9x*ooHKM?t
z<0K=Up>)AAy5cB{l8E3bDZiTWBS{AeUFu<2epKWFG5xlrE#4U2z&Wv9sMEj?@DR|n
z<AB`*_!TiiL~LAt0U8gS?NYGi&?4GFX^f#HLmLemP+3wA8*mu;Kw)iRfRX+x<qp(A
zR0@E9w?CyvP!!edRu#OCqQdA3-5)AcLeN!UYW3^7tvOCtAP_b?4iqw$X^U_))*Z2&
zAh2l^Bd4i1bScT8?vEqok>-xqUm-9CKcM81UB|GHV8?Ib?Ym)p!?W8TEEES$0D<lU
zrC`7U5L;0zUO>|JZo3m=F&s$Mo6WE@KBTK!UJvP=Cevnb{AP&%^t3b(@1-0EAi?-F
zMSA#tVZ>;7XdLB52A(vJHyR|=VT-S|1E~B;)m0nd+xVIszki4VA)^+n38bl3ySq=k
zTAeqvxN0hCzl|V5l*Q3uyR)9w0x){RS_hLgEPbf0qbePWTGk1KFcK+MbxcI2gbio~
z+_A%Os($mR?bj7cE!nR=5su=?!aoW|9IAJI@~s_)9~tt4eu$e&P!mAC5oq2~DnQc(
z9*C!5nS&a()?<kM^o!8+4uVE*V{PwV@?vg|AFNF9H*oDH(;f~)E1KYyvU%^}BWj0!
zNG{Bz9G$ZR@t|o2;|0c2Q<X|(#r?=^%F6?|h+Etj{u!Ol(06`~an=T^wQc@8!w-7g
z9EkVh)`2bfllda=E&Q&E%2QP(NOuL248sYzEx6!+1^>{;c)NVH0l*u7VqCY8f79(#
zntu^E7JvUR4ZE2dMovytH`(;tN$8y6W8nQZtom4hWZZ^AjpF{=&R~1GL_cPb@G-0>
zHM#rnrnBKob}W)A_9QLqqHW{cre1EQF_hO8b!@zT_Q80ONCB7${Z7N^zWIF2-_}{M
zMDCbfi|p_L)ee+`mWq69&&S(Oh3SOCnP!hcn7ok`gLzn*VBe0y1eJ$dLF)_=mI0&j
zBe&zARG@>b>v>lE9CjfGx*p=@kP!qqW}1~Q5XmXIPqu%N6AI?~Wxo#rf%x7)Zb&he
zp^D`s=<RMhIB$+0{@-{%2`cqmJY7@OS~@<bR;srVKQI^z701lxOX~jiSH{`qSC$a9
zd9E_x2BZfr^CBoDj!D8?0i=M#vDrL1{jN_Am<6z@xV0vy>l!T-*>5Tde>4*6fO|tI
zd;8|u2}MGhKLr0!#orN%ME(CSYwrOj$yuI@_Fp-6SI6o+-P3WxPU@NI+1#7+?yPpv
z1|g{>B&|?DBMBiP3p9W%1V$hWj0gtLu?<%?!d^g!U@*)jnB=ey1lz}E9@|{-a|ml}
zV`HP<`+k2__w;O#C7&bhRIci(KYaOnzZl?YJ!Ur$%1RMI+a1aXV%XLM$?p7TUmv|)
z%7!o>K*sH`AZ9}N6{0o$GED;W0$M_MyvdyNfL-wbBc$tl(CkE|FZvpPsG$b$ycSf8
zMG;X#|6DApK@B+uICOIDH+b*64n%N54r%qeq$8jxQm<<vdBQu`Ip6o@0fqY<86R6N
zB*0CG#W@Z62L&=PJHdxl1;Pj>E;nM%LheXFU+^Zbio#d0i7N^4Qr;iq0-BsFvt;>4
zHwhFiMMhBk0~wfQ?*TD3o#1dT81DR{w>^{(hS|f#<WTI@Pwzoxf|T30{YIBTUNHn?
zT4u3pSxkUoT$TBO|23F$<%s0oJ_<$}-_&CBvb@&`=7;d;Z}v7BAb|Hg{p#3Ist_JP
zb*<iZ{Tjs(Tp`BfX+t=VUpOtR65|KjgEy2_rj6e2f_;awYx=POl<qyN{pfmr4}86w
z;Jrz;I3UkmG$Loc!_a2POVYjC>)PvOQA7fWDh~`u8dFevM=pgR6NGlJ?b%xIL}~R7
z8F?!H7<CX^mnwlphQop)l~RZ|mkW|q==@7xe}A!iR9<^E9|vDSuI48}V_ewgb_cGe
z*aM_~_4-~WRRE;1It!hU&=n^+7&#^)C*we1B~VdBY*m$u$j=xo%xlOI(2KgHAJp`g
z)qx-!;~i))Mc#Xlm1IKU-pB4OFd=DST$r};`1M=w*rnJez=GG(rZ24BO{{6V<=$`z
z2WhzNp&t~l!sFNP+_@f4zY1eR5UzcA!_Awq&fa)sYL)+SUu*hv{B!I)+Re-O^P~re
z^(q8_{*QzLjKthavjfx(RK1C7&SL^@X>hp=a@7_A<Kxs`eOU2$F&Kz4tnWSb-abZ+
zsC48MNY#w(hK&d_<A|RMLgxf(@+W`!%#qh-VzIGInX_u}l5%D&7R$W$$e9y;to%Jd
z2Bml>Gn}-y>X2+TRn-uxc+t0QL_7*|t}9o5TZDZ-&u6<73|@s9o)3Tc24U{=Xdr<6
zuk;a*U$z0h*(HUbfkX*y-J^v2uJ9%7j^}BLZ9Pf}3b}?(dVJUGTNN_mT%bkRq#Q8}
znlUuw=lfjJRS~*H)RCkLB7Qv0&AoC1`nvS*UiPDx!RgkP<}e@Qo>KdYt;aO3bbt1F
zzJ7jf4G(>Sdru#~LPO%?*U&=BAO%mmq~6HI->y~_Pz##!U=M35j(qykuR>@xQ%}+K
zg+wv_t~E7BR7KbNN{;9^kbpEhTT_t91K%zIg%l89+U6KP<M7xY30%)<7&JiAv&roV
zy}KJzaQXd4FXrI#=P$m$(I&~gMGFKPT(af4->-NYQBeHc6&B0Sf7-_iK%p4Q6{oxq
z|C{}&nC>?>{Oph`?qAd<|K;`V-j`nP#aZC_PxpQF<u@sLulwN3UqNGWH7ABJS6lr(
z&EbN)Iw0u#Uga+&?<3g>^VV+&c({Xp$qef3*(G{!$3qBR$yBi6(2=kH**jnhfuZ)n
ztLNHCYQ~m`*IKlrxPrh>0A`6LKf(e}y?lW@L<?|&x97agmwWbe?vtZ_+KqQzeG5J$
zSMj2~;o0}1-k2qwat3j2;H|5}d3G7^%Pqrp^elf@+WQy0?@Z<6gz#60Wp4?mP*~D?
z>+^`&t7Ik+t@^&G-Q8yGr(XWS$_xi5Ooe|_xcb2duf`|hj_!LGAs>o}*oI{+-gMP&
zHS8J!G-sxP{SPS|pv>;h9i`OJhf7Xkq|t8J0$U0Rq2K<kFFPYnVfT&_b4ni`4y!iK
zp$v`l3=V(!w|*O!P+xjE#R1sgqLB7CLdH6VxqExyUdW=5C?IrT-jOk<i(`A~v5PXG
za6Pz9Uu;f4)WMauyU3mF{c>hRMG-hBDD<{o(c4-*_6)UWXOX&KBp$wN(F><(UvAa;
zG{LV`Sg@WbZ&A(5t}yPG=vf$i_OVYc5U9kZ{}}lVDzko@QJmg7#Hmpv@ttU|HxR}-
zQbl3E^u|fgr^b!%G?==Ds3?$+u917*nv30U-agEf2{dQd)~L9vo47sEZ~^!~s8o7C
zwDxMcgzgq5ylfjU-tIgfV0@Sf6q?uhswP)u*c;a@7FYKhy^{@s`hWv>?WKGd@VD@R
z<9YM+cx16*(=VdMx7YQaesgc@n%>sCRv)>DNX6AlR<~%Z^4JUHt}Y`YB@e&f&cIO`
zrC=`jOnfbv9hM+5I3mM#kGP^)gbMYJ!S1_yu?U%&E+OCVl;0mjoyHma3{|wR^WyfM
zzb_~6KK0b%Y4#^WV>s&M<2kH8p+z0#Ri|iqA7fXOgD-4nwO29IFK3_a*0+DRl6eG;
zR?M83q<Z(M@frs17F4`9JO2bm`)2wJ8bHLd^*7Tu_Uo=8jIWthou?<tpuh+Z86vTc
zyS&JnN@nW>iYxl^j;G^zGV9Z&Qg|?~h)Osf56dzwu`@7aa*5VgV?5dPcL7G4Frsj+
z*szwSppu&c>RSS0I>>~~hq(N@<{e$UVZUCMn4MXpbv)m@!bgd#;c)3HDX#a{e=1r+
ziR%@*UA1q$!rN~{zD^`%aoZ1F=YPk6HHMB)J@5B?0@uchk*?O!9b;c%KZjlsfsb<x
zv-<|}F+yG<rvSw^!w7-}g5t^N=0~ViOC(`+VH#cUqXj5rUdM22h~Gin<&49goC*zH
zNw9xa!;xc#=!$B@3TGuza|S--j!$zlPT17q$KCJ}@2hu}N=7u};I*j}Ve#(urDK>i
zU?idAsE(XX`A?y-NKsA*`Z3FOP)yd*1vz9MXWTM+W^7cf2&L@9yhnMjYeASnFWc>(
z*YTe(u^KT;r{IFM<J6_>ysnMqV!J1(7Ss;PA;Sc1cwNl;&7O13qeSvMKS8xm^=Q-Y
zNVQK{dT#HmYMSco-Zj6QLjP=9{ax7;`MtL7`m1`TMYuyDbI83HA<F2#i-WK3852uU
zD;fFqz9Zb8sNx_9$?8iw&7=N%&aPS!^FxthY;~7g*doRIy;ooR?k~bFb=h~mqFo9^
z?Q(A!?&({XTBd%d`+^tsE1{CYH`(piHSJ5Y7QBa>=H1IRs^t|jv~)}zWYyWR%4t4?
zzkJ!(o6&UCGQ=p;H7jN$sfJ`U{czuVt<ruSlFGKgL9)g6s<i=I5uzocI1=6B;UlZn
zk9dJUZnedP?F(GS#bHE^`LGjl!mnH*sk1;*FeOq<5HC9>LOv7!fG>{$a)*u~2#K|q
z0ka;<PP7*xIsp6x*RN2}FK2g}Mlv8p^LlF}d@t}5h=+fI6;_x-$Ki?K<N0#}$r2_a
z?n{1qQ^E~QJ~Pv56Jj%g7m)_V?fLQAOv0_qa<)bV@xnj2b^kqxoxA6)_p8A-qeP-)
zbw)$Q^m4k$#ua#J4EZf=dH?j5M-}DKEz@tENTmL8EAk&z=|A+y<KcScr>&1y>K_*n
zHTxfmWe9VufMLLSZTG#R7zZQZw=@!ZZ`S2TFX9dF989GKQ-Ak@-t#(KnHt>pg5H*D
zw0;(jO|sMD<zW*f%O}c(ZD9f8ix8K6bSf{K<GKTj2L|sMN2OJ{$=)`T`M~0h(GwOh
zV9l4CMXM6eyq_*;%FMCG?_oP<4$u{`6DD18E9&yaA&yh7;W9F635(uG^p7G;*%Ozc
z$%Y_3!&}#_{)ait4U}M`{g%j;t>bqA{pYTT!CnFYpu5Jm?lK}@d-BYgC(kgr&eZ87
zrfqT>uC}VqEM<ILv6#*_8zaA_g&ilX{o06eud{@!&pbIR+e`!W!nlSzE7Q=FQZPlT
zfUDp-P}fgMF$cXF-R;Bfx?gDc*rmdO=Yv{H`-w&%(y>b;x;ea_TLg|0$gI7{1vr0K
zkH@*Y<Bxy&BupQJly)l&uJG7}M|=A|f!#xJLe&V$$YF8{O5~e`!or#ZRb()AV^hBj
zeLUTVa}2h_tq%<rEk<X-4Zt2KEE}R;*YQ8g7HCp;mT1Ys0~Z1VOgm(nhal+5yGi=R
z!k@h))?U;365D8L2Z4vF{Z&tfMLWZG*BcWfkWAGQPk(|7ysHwxJn1V^Wafui(pL={
z?58(9^@loQ1i~^e)b8w<jiIg|f+SJOFE+cw;qUf_m%SUnMCB*=%WS$Ko++r7r4};r
z8#eJny>|#;T!tt@7fMF21t8?cd-ezbr9v+5>f<Ozz?I$E8A><ofSw^OqYbxdrZQLO
zdo4Ot$zYrD%{Hf$$fB#y6}bM*7q~uZUzBf5nEK>BBb;RD-_hA7I6?!F-7w468bMZr
zP(?Z3s9&tWe6lvhgQQvNDkwX%zGMrESgO8$HP=`TA)q4!U6>~rM=0g^HhQ@ZSLhgT
zxfN=@jXc-*w<sN%IlWY4bvU0NzSYk#z6BY_jCr^PNMBzBP<<Q01NhhGna00_Y~*e~
zqZR??5-On*y}>8d{Cq5m-FFFKgMmon@R8#$E6Smd$k*}#jB$RgyisP8rE3%AFW>lq
z;>(VQuzxMh02<xb${z_asg^%p|HO^xPJc`hZOc;39a#WC+mJ*{sSu?7@gIwBkyhgt
z-}Kbt2*5}?-w(ahfWaQ@OMYkQT0zwelid{zu3uaqtOwc5$l_DMlzeUIoiaB-n8rIp
zEQweyUD=NFbQRKZK<B!&HNp`BkOcta10ouTlyaC4n9Q+-?<E&*tmYEs-HLMbB<~`O
z0WVBa@K$!`O}c&>L3D##fYc$V!j{p_*xh6Jsdd3G-rf1u?WQ9{**|#K-1Np#x=N9^
z{NYWw<+P5w00Sc6rU>1Hd+K@I6crrvc7zqt6*oURO4lgLmeqEn`c@%GiQU}$-dx}q
zutW<6kiO`xX<{OBtx~OdxaS_sdd{}BnkHs%nXt8Ox_Hx#BiWo?ua0z9fUVF=vHyu_
z-;9borl9S}{-$P%03BM+n7RBULRSw{s13!Mfi}Den4BT9-TDgW>id9mcx{T-r7eoK
zLAV}80s>|kQ=tE)wjDyeM;%aQdvARois){WkhJpGFB=&dOQzh>&ff%`*N0Z$?e=3z
z1TIyfJbj}Yk&1$N)f8eqCTr!yJ5+Cc{Uv)N?3jeNL^ayDrsMO=S~uC%3koOpkJ2KP
zfs;^C4w*(^iLE=#qdE^C=5d>c7m?!!G6`6#`rJhMxOcSkB~CEf{x$v`i}ReU1pshR
zFVD)yy~7`EVJ=V~uId;W^x-U_6>tfpmsbNB$+ydqhX*gU*7)CLYlyMz_X*%SFuH9`
z%<8e5#;|N|`}n05xYu)-jz3T@vi?J!1zS3^{qEwk^zL7ZM!!VsXNz}lKeMN+B>APe
zzsjxpPl)~Hx-q@{xB~KB5gsF9F<^vtIcQgVf~$@KIuW}Ok9A3(hk{W;9N^R%H42a-
zJcyvddG^<oD3VHdJ5E=V@*+t7rWYdc4x%;b5A(v|1++8l_df1v4&0n#a%Lz-qg&C3
zoc}W=Z%G0)f*k+>B?GA#-c}+(u_i?4ZeybaTuHdkgai#^(IWl|oSFP~BG|dA-9E@$
z^<4W0d_D2x{PrK(;kyt>gZxzb1KYv%;kUIrXNfA+|DxSK?{9#aUHBOW>>}`?ksZo7
z14C?U5K(Wi^i-Rey<n%9J5>x}*l}nxj~Fsi+VjZDLY5rh9<~U=U8(``H#js{H+Gap
z+?0IiQNxZp@{MXLxB-b@5zTI9H&mnc@PYmDXdDq!f@vmZja{1=iT7}XBiSb@<x|<Y
z&2QB6!Jh`>T1^s_jICF~a;cHKb<ZrgNHMHMTr(-xD8YJlEK`l;T7L`-;wrqUPs0~l
zsseqAi~kBm@X*0aO(YAKD5%lW&v>!;5|-=U(m-6y<*XySFVaqj-c5z$hq0J_20<}v
zjUi+k_G<LTP!(qs^29W}ahu5E@6#_bm_aikgFm2xq7fc!42f%II=V$5E2oT7Wn#0W
z0$~KmXSEWL&}t&pggZ;K25cEbY+~`NO+BPP_xWJ7$#m3l{WB}l`F-Op#uv=nqOUjF
z;m4ja-}y=7OnCP_(c94e97F(}P$;kubbepJ1diGw+l~aN&}6%PA+WHp)NU^=Ji)io
z^n^))@x6`xCb;z|jU1{5MJ+rA@O571JK-WjOhjR*Dur0U*p0Cy%xOxfmOJ+SW4T&L
z(VW`Wo!JrB9m($8TI>9KG@UM{f!V(&HJDDpCK{@2+?qOiG_`eO1z69aa;7#nSId+`
z@?AMM6}@Y-s&2k3noeL0|I3AML2vkf;5nhXt{AF>VuR62gBIfeTSQ*5mB7kn->xWw
zTe1l7+nb+F6?Rt}PS%c8<3qK*#rRn2pzf#xKeu*75Gk`|Fzwc(YDk|RSf5T#=hg%A
zCo!H56*p&0PbTwolfrzKPjZQDAK6eT1A@zc@D_S;#}`$#?bQS7+UdJ`%_Z^5{{1V^
zid%N{pE*HVsn2=ouygeR4-)Zx{5WtvK#30V<-L7NhW-Q5@KAK^x%vuG5Ip2UfCD4~
zb&)P^@a4UHNzYlW)Z@wF0ptjXqzSmdix53=x65yRqdIBW#A6BO0Mc-xQ2=Tpy)5BY
z&DD2UfV<zhE;j-!mU!4|wOTANS1-`p6zX$fi`9`kGP(h!1agJ!aM`fJG}b7GKL`0c
zOR>~2Kl3tn6h`ZlC*tn{ge9RlE`|rt^X$2(9l8x!jzLX*!yAC{91~Nwh3x3tx9N3#
zTk5KNQf4D@OH@J>PBnPu$xuQ9*nA@N<e6Yqj6V{IJo3v&9mze@`GPfj4>BS>TC>ct
zGsvE>k&vrAY6&@_=l$w(b`GFH)`doY4m1v6Zlg`mQnl{rfW}ao@runkoX2}6e{Rb_
z=JWYgtlP5_o^gZ~c)2PrgZq$Q{J^)7(d1~i^5yw?4*+a_4UP0-<9l4O8;joMGF^`7
zu|Y4Id<XZ-zkv@VUv=~%&(Cu{{ANBzsC|gvE%UixK!PW{0g6E-+y|Ibnou;lkT0bo
zVGW4L?DY5^8Y9s)uoKUtKlU+Q|MLS(PwS7-!07x1Dj5IX{{-LT3ejym0)LK%P7-43
zpR>?GUH@l(3dlL1W`)iou|1A=+_{Fw4g7Yiwb*LWdqSt>x$w8bb9o$@B&b{fF&mVD
z5}<vWL6i#251oaz+*9gmI7t6|0!>alUYU}|gkooP-RPFo{j93*G@beS<W13pHW<B0
zRU&t1Tw}sW<(yo~m|#y6$#ynWtFPq$Hh8^SiH5>XI27G~(Yn%^<a7N^s(hnkuFn|>
z2|z7Uf=TwgfUr?OpB4BZD)9gKW+X_347|TKpX*%zSpm;q0`IvE6!X9Hg%vaq1Vu#E
z^{Kp&TXLu%a=D`<NX(Qxf%`>#?_$yjI_P-*DHv?zE$ePOK_j{Ryx&{UZRH<mEO^aI
zW2xO<yZ>F;*4r2p!iAq*_>}NQ(6=PnyVlfW0Q&;?iU>1ZWx6SoK(w~7!l%I@)+x^H
zXpwdPN0f!9w(mQ$rhLLLZ)qhG)7Q`Lt14!=Uj6fRx2~C&WVh~%Gk(5!N}%#^WCDu9
zL1?cpv0l+|{gJB<$qaezL$4oF0p{Y*;OC2|T->rwF=fQviMFv0?ZPhnD{@`G&c4d?
zfq4KO@m9~rM_wt~BM%>UY{NRp6&bYHI7N(s53tXKDtSdiplR4pEnOIt5?Kse(TRr<
zVyY>5@b;;}Lg^+5iMpLL*u>D_6l-sptnWCseh}4c4E2}nNW}gn!?w-A^~ZM9r#25Z
zG(FmqL^-H|gqKXM!P}EC4ZjGk9D!{F`e2mTgGE%M>QXo#>3vQ7#o%;8)A>;)tK6&U
zs`tVuxbBfXwSAd^Vtd3k#*&%RhOGenx+SAYIhv{-MBESeZQ90~qNB`h6y4LC&4brV
z;U};8i_zEb)pW6P?f!h{oqUk;#a9v^MLVw2$8oe|6C7kKsv&S&QlHs~RDv#fK`l#e
zWg`NKD)dBds19WVoVPI(29+%0&*wBA<AL&s*+}!RAq1%2Jjbe9_7SVr?6yH9A?x9f
zAj7$39xF0KUG{SCVVtPYeT71M^(J~mmq*K-N0&*@;Wn}+Qh_&8Y72C4Djk5*1{784
zt2n@u$t64OWKP{DhRsb1$2(ItX&5D+=Nv~!4GpDO*$O&NeGXV?KyS0ObdTq7xd0(|
z%aB1K`N0m?m*hlnkz9zzQL;kBMTpJcMy}I2;Q7?2Te1UvWkt~)xix){`cc)#@VU=A
z(fp_k1AzL`<_YUQwlqHvoZO#d4m^V2A&l#d{OiE=d26rQ0wJz*Rf#X?lj(Jkw22Pw
zI(4E*reME-f-!GipuyDPCbWe&Bai92Nz+j8QJ|J7_o#+Bd9`OCTUmM7h=atn>2fRz
zapQ)l{#uhvP%+bdtsY&5sICV)uLjKm4g2|p&#^D!JqJDBOA#g%@=B^4cp0q-evkgg
zDJ*MrvU{j8KnfkZzLrX8s%Di(wmBFXP~x_Ylr0=dq-x3Gaw=6G9tgTlGz5o7ly3m|
ziEUL&1LGqjdnPs*nr3X6*fTORK2TC6ll=H*#a3h%jFh9a4n-X|pkMd_+Vn5*t_G;z
z2rLns5qoeDJefzi@j4Ua3U0zHOu3K5dMVbRNeP#rezORLCz7M!V+N~Kh6$4#C7<wB
z0%}3w!@A;(%fC`h)G+Cx2oeC-3h6f(VSk@*HuJd?<%h~<ygq33_D*y@s8*17X(mQR
zN*^0g)r9#}Ari)aQ{IYkM*L4WZVGZmOQ`AqE|f%*o{g!Nj<yMOW7@d-Y9_@a-EE`u
z1B)e4rnL0VSd3YA$#@iLC92Z-0AC&840<aL>(My-)sk(oSWHLP5+;X_;d2Dz4-kpm
zS%ogG)~2E076*eIpTi>=gs{k?#`v^zQTzsa;}#i}k^C_$oKV$hVl<zuX^NnzaBluc
z2EvO(AFI`p`O!qwyTHlCW$y|WK`th+A{6iZ*F{G(%5g0}nsr&266*v&kQqpba<ij(
zEnYTy7uYUDKz;@MXp+PH3q1b<`Ira`Hi<D12#`>SiKB9%0=?^fgo|1h-sjR_=Eq<O
zZbKB9o8O|?>h6ckP{ewSZPHMQ$$V&+Y$(c3_871A`%jYgQ<Q%%DJ*1u2i_@7Lw%?3
zAf{Lyq>R0vYSNHz4{qT-DwHt=&cF@kXj*DtI9$jQ#-VfgqA@Ww32ZR(J3#Wsq#}0c
z*>Dh$hm(Bbb8?qJZNcHZTLn;BewZaPbuHrp4MtD~*`t{R8_vtBT6Oco)ifBpkgf`D
zMys=BREc;jKg=&sRlS}XbHkAoAd%E`HJ<65<D2|>!+G{Vrjm(Q(+DM~ry^lEqPVVt
z0kgsu(WWzqbv}g=!`lx46h3<?_O>{W*(z)iiN6f6idsagg9j<<1{{Pb&`Z-z6uDs%
z?tY-?h#MIDL<BT|$OB5Raw_3Qte67#NqBK^y%p>HWsC)4aw@nOOsyAe*pO9mFvx3b
zvBM;d>aGJLld0H0P>ZpNWCTSTJw6n*XCujpSW(SRg)$MNT9`^tP1)h_?*f-ykwQfo
zMhQG18*yA6$#(+dGCevG-%Gj~dXPBf8t52MWBNRgIeJ_Dni-<KRzdLn8WSGAOk;|z
z(2J4sir3>rc#$swK*i(PV5g`<@2aEv0AG=#dljZ?f(W+{M)eq1&HAs^>H!%x>`x1i
zz@|PNxFzsl;IY7app$@_slMfc!yfkx7+c^M;C2kMalr8jRAZj|Nw#IWvIb8Em&Jg1
z#Nh*=+W-&B|DTK>_<umaqEaP$4Y+Y$BuK$3!1$;*0lFI^otr?WOG3#@u#V#7+bmfq
z$)<o*j>AaR1i;Lcq$-CHS;8!7L{T^698h`-X0pP*Z%ZHsL8KMM25g9Q{|+Q5dmxT!
z9ux#wwzQmXL<+KEg;XsR4m-aP4#tBBj1nCn|Gh@F4Gnw+5`YD&1f!ssWO0Rwdg2$5
zcj+pHXYR-jA)i+hQTtG!tC{roV@@=8$@{E**Ev-j399AyjfX8sgzwiusV3LX@1R%I
zl(?c!%W@<<mbZXPJfbQVGE-&7<f5bpQTTHvZ$+Xv2}r?I5wZ<{VpQ~INUs`7&8li#
zE()eLGIm5uA|G7=!$9H!T}rN=0L55%x>nh@_94244@H`aYt6u9F(4>DZzgsz?4S^<
z8(FPq7^dRl7*n8rWC_Lq%fu(tV)UDKPP?=75Vrw8aH#qlA3SvGS-wN|m3dGR-x`cy
zUeKBcBME?Sbj`r+u4&l!`3gh}L$G4q+OtY_<>W?}g%B<A=yMga&?S{jp$T}UOljtE
zVW_Ja#^JXgftr8?C5tBj?4-c))?|1|$VAJu6v(hKkeV9I)p)H_I7u@V)H;pXC}lMO
zjTua~fWOW^NUFNQ!V`9)<`&cBjpQl=f>Y0nM778Y>0#}G;+QCo<x{*8Dn+HD5^5G1
zZbI06l{TC%_)#d{RBg*9A~f~eW%U^FyEuO!j1Fp(8cBb?8?NiJBl{v0U(6iOxU-qV
zxi<-<V+A<6E8glC6y+tNfjDIp(Q6yxw^q;Kf*&f%VNsH2qxL+2H)oNYj<KWC*g+1!
z5`L93HmG{~$v_)#Ko&tTo)Q+spJqG>+odY3bY`NYBH7KIk`piu4^9$K-3a_$Old#u
z*K;u>rjRPij|l$p?wIomJ69rq7O7+^g#s4dCj7TGO{=laN=Q3bWz>$WdQJ<SMPKN_
z`}wl7%w<>V9z6&sRqp8}aFEr<U~{&zEmR0?)3p!<0JlQgjr_tl_1(MXLEX8u%wtt4
z?wqR4>_S_t;_7lgTN4J~)k8|nx8HQf??yj>w;2UCIQP0FL~I2vY_O~i995@WCX5{v
zO7u2N?*x+Yb+F|?x~i)`j@c+1$Ufge;dr(b%eFd;zqipe@ei;%bQh0%@iyov{sE}h
zp^ys<Ycn1Wv4zfAZuIN?FBZ5!--dc(7k;0|+XV4#h%$(FM;9M$HE+;iputTHLlZ4%
z6!smkEbAXpPxBwKGR?pRzQWGN|6wJqU&lw_D0VmeI_<JiC9B*f2)EG+luyaYSluS)
zl=MDX-uE8wFrDT5ct6OW7e3D0{v^!+OnzcGC^m_y3+ox>+LKoe9ESFBnoRE)n(zT=
zT<C04#I?_bahazQLOl{5k`9k=8mM0l?jYz)eEMmTA*xakuC5Pk8b2%*cQL@ING1x~
zs=1*ea^%s5YH=v1+Bhbeg2i@i2!+O)wxdlBoZJ9g7(HoWfu3PYY{SWcNzJjFW1-N4
zcM1_H1dwi7sAe}MWbH#lYd)mOiA~umya5JIMua=PxEDU(i#&S28x!XTbU=*gTD^Kw
z6h;}gX^_!}d9u<Bmjf%k`bV+S5(yE!1PN^*GNq2tmof+Y2LZxha!5}&a`$BC-5T^%
zZIP$p;Cu1WeVdCM|6fJk;B5z5cOTi;EI_EhKR%AID4?I(uqe%9hEQcTP$l$+Hv>G9
zO^QHYtzS<fB8CK|c7Vw<wKzaMw))|I!mE&o`3>Ff{Lqf>Hba=#qWI>yIeM!lTFk8v
z1*ba86YO6ThB=Zdr&s~ZF(QiJG@|ynB}A<20olb;6TIvAVnR)A+p2B3));Y|Ep8;0
z;^S+Xw>ic>q}A2d<TAHsM8JEJ1DB{Aw<YwJ><j7AaK7_Iez=s*4d;UizzY?}Lxx<R
zQ<O|45zG%Ck?NWJ@Nhm;mlCD?a5R^xj2BaJVXhtuS2DTiaK7ZXAMDr)VnbBeu|e&j
z#&fL%77Z}0F@YE~#C#|TeTL831`lO9!2Z)r#J_1oG(ovtibkT+Jashh_GNy>>mwDz
ziRqu9D9p}J{8Km&I~!sd*x!N2ASRIeut<>WjW0-pnCj>f^dG$epFn7iJlrBp?$yGC
zW8YRpv4AohkMS|~7%XZ90Cqn1Sl?lY&|>ezJ%Cf51Ft#qKI+H!9RUZLgQ9l$aNlth
z_z+jm_&%>iyk`hjHo_g)gIvm&1?~<!jIp*>?ruc;g2KEsi`4)zz;loUz<osjx6YAh
zG*|DmXbHaG!kpqF5Z^?E*SxA1$BOvJH!nE=!G7&6Y#C2mrl&DHvqLqYa0zTL@1RAD
zcJJo%V9qTT-*yrU_v96hz4|iu(s(nt-(+ojo(SBG+?Uq{-o{&$hFO<;HK^5A+Yp&Q
zFL2MdF|K*eYU|T;Uf3SBFmi+f6vNg+<9aRIYtin;V)qnXNBvRBw7ZSlYxdqouidG=
zTO?HAj<W@7;sUiewXWN1XK$-__D!glMm<!>ROb2BbS9gm`;v5DZ!6S0OYN>A*7Vc7
z295$h{48WE@&>^h0^JK(0F?SqE^E)uO%Py&xlWEDbr^!4IuV0Wkq5-W-<g1wszOl_
zLBXRB%~|lmS#Dtiq%bPfHx<|tNDCtq79QfxCjLY#L|8C$t+cypr&Y0ZYQIvDB9Sxq
zmCI?TkU}jBk==CabpmS8Iaz^4M&XbDHOo<uV07$;ZAWGiGm(qG_c8B;7%gNo$95ZI
zZx|H+7V3w86AO=ieZ-78d3RlM$}AOFd1v)w@tUz-k$^oQ#}St|V!&@NMgd@~t083o
zII#A!Lwk$nw)W7+;(0OkVef<-&M47yq0w5_9j+fyWD|LaBEmZWv()b!rHG;}6p@HL
zMG>}YTm^*`h7?#(8c1U4F1msMzaWmV93Jx0wb*snY!O;w%xr}RqWbQa?$+~_R<=z4
zc(uZolZ(ECPj7FMdrKCulCiKYRpXV6GP-{Ks6JJw8j}O`SKvB)3@559{OX(fmKYPB
zjh^Nr`7Ymx`L`1IKB#e*)O#@_C7z1|!P}E(xM_he$b7;@oeBkGaMDaHRe_MhB{kTf
zyXKc_%?}1c!He#LW)Y>v{g5ai(QTiE%iSp<=<VG`LWMg}1j+*azx-g&Hx~}pCeqa%
ziS3CU2X`dGG>sg<w?^%|p<f=`Pt_hCX&hw}#7AHc#EOS-ONJM@2dFx4Uk1_^?tQ)s
z9_F35#N$<-@46TGpcSt4#j?&|K0i2^=X)UdZ959AW<*Z3Tb&hRW*`GE<}EMz^?5#M
zrty5l*<A7@Nq*rC;yuZmKc0<%ybC+Xg4G*yBvx`AZ%xL<m4{xuQR{lsyULu`u~WkK
zmu?q!^5qooR!ARSx86BH-TMAR-|*}Oo4kJE4QR?^+qaJaNx@(9gDn&wqgH(kt-1``
z!7^_V3X09viMGP#0cQl+;{@<Gs(Xkpg2vJnrJ5Iu350*fjgFLjK^6h15DjP+t9*&f
zQivr%=oZO<?~g>@!Gi!EBOcLd)AH+@F3bW_EDbX?Hgqj)iP~=1i9X9EPRk<UF9gI(
zh|_0hW*i<D@W;4&h3;nH8Yq~gy_b*1_X0OA9yc9~O<gTZ!1YrUSm6cY)yPj@=61%_
zKI%>D-drXvfXk?0&&W4*3Amea%+hwyC>X&uc}3P$_TRC;vTHP*j{sqAnV)zUop=}D
z+&HuC$dPR`8_y2rlj~zvvF;!)+S5&V-KhkxHWjGAXLFfKQeGNtFW0q);nm~xXwY7j
zsbyf5^;eMUoP&Xhcl89dKyUMhoxi7=Ql~Ge8TBemss*}qq5rPVSG^iiWCQc`c9N;d
z|G9k?ozd;Hz4FMILABUVQ(-nDiicnWpp;Q$Hgqh{z|vsPK5!hBHqIGU!!nFbMyom2
zxi1%;&qbG_x%p^L|HR@O)oAB$qPb<n#o@~14{W!LS;IJJEEjNoBAUxZCvwqA)-DuQ
zlF8v}F8Tz%n1(NE5&Q2<QTDrF3%fS(^1ywN${r8AJMe+PM=p_extR;26EC}}D6Vex
z+nX_cA#Q<;<MRG(-WHcR{$j6z+<n>S6L5Xher}m2FWd>32`z6KG@dYmoh7SoUG#79
zqJ8XM=BhP^sPshV--*>S{M<Z^ig|Cjmj?IKf5Cs`j=tryecRsg<Ch%i{Gjg;Cog1I
z4Zt=QgXHGLG{GVUfel6n*sL)FWx~#4P@86^Q6z}h>?Dt2Zw3SfIMHCR;7;ROl_(EH
zJb%i}P(8}q<{H}$YDn?SDeGC%%>msnJf-LbCc|5XR8bDFg;op!(#JogtUbe)09O!g
zXrd@VV_d)g>Su*YGMoY;oC@SEJi`)ofoG>gSS0IQ_6(o%E5desYXm4DXYlph`saP?
zEZ2{xL~kr{<ZXd}Gq)r2ujU`k2LvxJz(1LkS^mxVWS9xzuIG)1l64%Kp+*`wUjFJ$
zjgc`;NCc}7K649943QMMU)G`Wp@<q3@aG}4F3gWdf@?v!+38>c`sCP1V^izaWF+{q
z$JzS5Z2KeErBY}OcVMWo{W>b*;Q(t}L)^cBd{Iafk|>#~3}dc$CX|%dfOEfP00@k!
z)a<Bm_YuR0%ugXt%CjB#v3aYu^-HO8PpqOe97IL%aLT?-AE{%7POkKw#83Eo8UyV=
z0ZQ;P(1N=_4PFC;f;W+#=JV@P4MG_YKt*gKHa&T72L5Q(D=bZJ8C1=~gr04{Ro%<_
zz@{hj#o@yC(>_S*tI;lW2Nf5?ev74dfDWpOuAod$QdCsi!;=3(g8f)E3^lBkfgTC4
z(x7aPZv^^S9`>e<;{YF)5|V6}wQ%n$9Jta&Uz9@jNd8nMKVpaOh$}5oKd8hfb#Vtj
zKE)$7HuRmfT6Fq5|IJ^!^pzgQFHXi4{+sy<e)J&!u{ZL=_w#6wCst4HmFTP=4@C8+
z$X2|LXhbiw)syE-NLlOJBWX5N$*PJ$<LSsQMe3`FwE?|o`V#pT8R09ES8O_QmIxac
z5YGB*?ChS7|EVXC{3**tAQ`nIPB0rg3`bcu=xUl9%wqF!EF1hjC%k+y4+`S#-4lB1
z8zhZ<<EbA9lg92(eQLLn4BEzMEQ{E!xNe$y92?o#s7bPjFJn>Uad*_yyL)LRWFYG4
z^dvK}bE~q_Qmd`2%k-;Quoe#=^<<#d)4iAB@=otJD3;T2w~K$H_d}io1QJ@m*s=C^
zPZ~<gQ1BZq`gP(yiqS$%u}j{ecfNNi*~tIn!e_V*I)+GKLiQtih5#?nyUkFnc`+}w
z8%B+I5WE>Dh1AU#QNqEXfVbqN&?^^C^q-S|Tsy-)vh}KsTFIGrJ`oDX*$PbduYTmZ
z>mIr8Y$SCtp#$}UQxL$!>wvH;3v0+COFL(F99<7Q-Az{PSHBjj)k1H^Q?7gD$;(t2
z;5J;#0XHF<hvKS2A2FovhEK?kvAr48=hZ!`1K%}bD<K~>@IRu?{eA}mKmISp`Tt!l
zb5*p$R##TJ?3y2>MJ)~~hCdVXiT`ZW(m?;sQz%$ro?CYOZ9bIIt@JMl@nZE4osNJ1
zKEa2&7sQECxTxw&i|zK}(ma2lx6KbPaNrXxaRY8#yIjDJL)tvc{dJ%421{T2Od`5&
z584O39o-6A3>ko8b^UMl<u3mH{o9Qx=uBJLm_R;om~DL1FMCeZZ<+h(+%3AO#aqcj
z(m*<WciD<}{&`};vgGiTxAMvgKCS@E?G>9gy+XHDSWcW|(s|S{euvh-V;GOp`rKjx
z9~Lk3<t9I>P3Yx7Paz)4vjl@Xj{~V5ESj7w<nn8(gIIAmb-v*B^f-n_NI+(GQ?02r
zS9MjYVP0eBZP~i<fF88(fEz_qcJ5R(cuwvR1k2D4+z3bdD~9Emb={zpmIkl0V)F2K
zd3+|e&T-boX2#3YLa`|PE6XS|$Bd+yyjwHXQ>Ro@yE_>-j?E|;=G<zB)lIkC_U)V0
zuzl-m>M3n1*J$LXv{c=i9Uew{Bk^blV|N1l^B3_|6fpxk3i6r|zJ#u6P{JxVvB9oS
zLOxmcx#k3O93&HTAAKiZP<qJ#i%vHtr{Yn%iFY!0hk3VAGhy;KeLxrLdCK~tHID*y
z)kb0x<3dOlA3dt5haMiNZ$v%U@gaR{nd&u(%-EnRL+eL`3_=m$>W>Yp>Trx9Fd=WD
z<p8gUKq>zqzak@4W;DT!BFJTf0W4@;mdac8p>ZZ}Z0|iOo!GT88k1$i7#g`gi6|*R
zUZ&D}Mr2KuE6sH~^=%OZ4B&@~ItZFx1oSG4vjXaqti%~=*RCF?mx*jsXDXH*DiweR
ziZqEmnIyn8QNuCS9v%v((+E%Gbi&sW^MNI__vJLia7-<7rMf6`Yi2w~4ac$V(B_kV
zqi<r91TRivHBAhjY))}cFznT!p-)Z$#tQ-TaQ`*Yk?2*mHa!?uYZ#y84TNq=3y@lJ
z3!?HddVxn%;eP5Z`bmX-e69Mq!&5U^?zxJnLFU#sAKt73R~w%%R^+${9PW(dAc!t#
zILNXRkd`Is@Ha(J510kfgD5(UI5s+>!HSA%3j!{4aJijPGl(4#<MQr{svdWq4Vj23
zLJ$Ef2!Jz>S0^W{ag-9quNLssNP_N5>(Q_jiU5`<oUoFPSkm!BEF|I^P?8e$e-|X_
zF8&r04vBEd;P=&{=p?N~SVNLgNX^+mMTJBi@$8MCLk<=BQV5H6GwdXY)uMW5m8uGb
z5wr-Qjw%W+K`!wK8TYw@3}X-aV*(d6dwa;mYtBM}0aqhuE2y3Vw5z^7VK~wGH`nd_
zo2~yKSO|^=gDes>e_|wzpP0c#MFRFD{+>{zHllolwsKaPM??$$o>1D@z#qFqbtmUl
zb$-$ai$`SnPD#4zyC{w|D+sfQ;r;HQBgrhmpx9s~tiwu3V-G<wX(0^bbpoEju!1Y(
zau@+`-d<Xe!Q1~Cd2uG%;uV2c1zw9*pfp{4B}kq-%R}mT)VToPB*u+r6Ptl?8FUb`
z^aSeba+4~g0JH%@Mmcw%A(JYNH;BgAB10^9Epn4=95E_g!l2S1A3$7q4AM6Z$)&j|
z#~7H=%=z57Yy=gQBiB@E$N`ylh5%wps;oSon>V$&xRDy)gdA@*RV^MG#dYa{d<qf7
z8#iLAr}6`7lqwiKI9N@AFuWwA*|w5f%*iM~pJA`f-@CO|-fSqtu_6l^DCr?0H94Et
zBcy{w^n4b<!kBBt*sx-3OQv=$7F69Z>f`m@iP=~g#aTm*fqWwb<Lk@}?3$rQexMOT
z3D<ILHnAI*NmR$+m4#TiTD78sgHfwm4abNcugVf(csb#7<W=^%jwWy1L7YGaBL5>f
zponJN$l&Q-<B?)NMg8Fpz1IIm^ugC*W^K2?t~(^#c^Qdx5+D#aNoIvMDyDQ=5I(y^
z|9P=-5CixnSnznMWr1vLA-vam%n4Lj+5los7=xZ@4vmQ30pV+i=B1!ukR`m@D%K?&
z4HV8t*;l1F)#Sovk#2#2`b)zj1^5prLa$X=wxg;$IwTANBO=CzMu7%s3pfM+f>=&L
zKV*egXNA@+Akn0&g~Y_8boSAS#1bkBE0JP8p*t)$7?B-2itF&eM^nWD?4zw#n;s7>
zv)X4%B3zRkzH18KwHK&>*FlebWdQjBFb?4LcmqG*R%4cI!5|CWDe!-^NfZXsF7MAP
z#j}&9>R*%Sw{T6(KEbU=i+s7#xBVK-5KSxG`+`>}B1ru|S6@C$<D=82<=JJ5a>HRX
zDqo{9DVFOA{OqO60;&rXENhHUoB#IKpL@@)&*69Q%Y4zAt9wU*Ny*;}xeij#HmD<R
zc?Y2;#lsB*oRSt<DRN1Jhz&8gUUCPhG&ycbJRir{^|tsC-y9(3C2t5c7rE_0*wJ}U
z?&Pi!O&i&Dl138MTWBRAX*wCo=Eo>Q&YP$u!a)d<1=i}&c>AO5z>c|*8N-+vncFe2
ziD$*N=*rgKcv(e(`)Yizx9=s)wNN@MUW^n9*$KF!Nyoatb&M|sf{6Zm1a!f(QGknZ
zQ99ub7tA|QVvHY(|KV7Q6wBuUMDcTU2BD=K&HxDz;6*fy2-^Um`q+aoM#ZfY$Ou7z
zDh<IP(zM59&~Mx}%U%vVg#^Oxu@p7+s*M{fnOf8U(sgMZrujS)=!O!J12e<h%3%``
zm!?ykEKq<|QI{MEHLpq84cms1RuBV{sK6@_Mmz|l*NBM3(@Me_NW^X2sYFdFSgp;l
zH{f@?U&KmW+&FYoc^d5oXD~uKM?(5dA<+5UKyl{4z{I4BnlpkFiw^{m2FVc67lQM{
zRMnUiQmO!*E5~bPBlRA@5S2mD5$K~?jvZ12E38StW=7!-ubp2HI`@IVhXel;_Har+
ztdgWPCPFG!;DCl`OF}=$8`2+wKwu_L2jDk4OToJ&7%MPoQhD$#guD$$G(U@b&~5(p
z<j8JJ;SzGfcC%6-R(N(pA|zmn0?*?2e-IBRYalF5c|2HzHpIgNd%=QdqM90sCI;dF
z!80JtirJ!Gh!RJ1>#3k@JGLB5)m=IeE$GE8jGsz8WLoioL^L82Ocu}(!<v?eQo&py
z>N;r)q5E{bx23wnsc@=<z(6ya*^r5v*ec=3unTjeW~Cv@p_Dt{N=8s+K~s=ksfB}&
z^XS3Ozwy<rct=eQ#Zj%+MjDxGmgc}pv+F8R;0RRKWwA3?GF`<E!Rji<5ss|OhNeQG
z6E#^5sp(u$7ExZoj^j!vWT9qvcu=UMC_W+TR5Y#PL}@!!5eCE4#kh@<3$Y-r!bnWZ
zrPUCu#3HLf1@8XC{32gS7dI*hdoH1F_A+v1lr4+9v+9hRXvSxoBH1Whzv2Tsdt%$`
z+;5+%-rK0Ydt_JL1-?B`|2wnejQPPcLyz9GXYl3s=!0yl);K&mK6Iwb;}?<BsKZJQ
z)HyE;0Mm3v#+ZS%3q!;&SlOdaTQNw${xRQkOt@2nWU<f*py14%3osR(bK2;Nwlkq0
zG|hwhQ8BFFgldxq6$EULgHHcUkNl`jjne*6M9<wD)DKt|6wiBoA19Ax?P5EVJ*huR
ze@(Oy(Fzi5K~cG!d%1n~1h;4{(GvE6F2!zNc9Si^F2^rrZMgc*E)p^4ixt}9ixzFs
z0{uiZer4_Z0uQfiUn6lM4r^c!MV4f77zUqrpDn+LSMU<R@v1N2+lX#^zDc4dD&kqF
zq6$s*7z_ch9uQw5HqL{`KqJUfkmq%}5W~xXe6LTIUJ;F_&xKt#{L*!WSY$F%ttV?6
zETs9{C#|9n)B7j6ZLf$<x`S>hwx{^gq9o<V#tku5H1`@1DET|UKKFUxom_=?@K^=-
z0)`pM5#G?6Xly~!0Xcf9(Rh=|Tm&Iq&`bE?H+rXtaWrSCk}uW1Vq!WvUj3LPIgYKL
zcJ5<p%CMlqQ@JblV8U@E>0{M#Fh}eM4<U}<NU7{ThXugwYFiBi)R}E4F8QOm<XKZz
z)U^3}H+_h@ecpbX>bA`|8#lJr7Kvfb)8RvD_w{BP5j)1&WDckf9`E;c>q%6nz8bUY
z@*da_=qBmDjj2Y{ooY-$Lk6ZJzGtxJ`?6t{C{2(d2V{K%n*^1fE>*ASlzqFILVR$9
zQnXkiK^m?U0bYK}WYWg*ojb?lQPehL1d%}r2#ONB?@Hd<2NJL<gj14bNvSYw83|#>
zj`j{!kd?W^b13}XdEE2cdO8Bbm`b6RAM)~6Bi}dkPW8D7tSYdZ5qvIr>6@O0#l32%
zkH~{syaLP=BuqRA(Wh|95xg)&B#Z-|YEM=l_A`|DRAcH*>fBxccR%yssDsqB3lAKx
zZLe)Q{-Gd@udud;f$3mD9aXc4%~%(VSW)ZZqcR?nRq-6d8O38Bym~Lf$Bu8R?Wi7q
zV3(W>Mbe&w$&^)8_>wf)5N#YrMQrYO>N|`s_vO8AJ4|>Ppk2e_^RxseAephaB?W-3
zL}Gaf^5^}^ySI$&fF!bGKX_a$s94YUDZe^0P(C7xN6G^;xR&dW{C#03U*@s24sdZQ
zlndHK%^DII&>b`l8}S*g7NHYdg=<q>NfL2_8ydU|o8PJ@67h5)HD*V``4dY^m_>r3
zLCjo+G`gIR--~nW=-iv~*A0cEsCKhAvF+^A3Z(=KK}rw9M(6z5bLq{Y6W(chKaWoA
z!MMtJZAl477zbqC#QY#jALl?25&653U@elSk8-(PJ2sgBF^+_dkow0sR@T@U$I9y4
z6G=??!i`G78Hk)j8Oxw?G-_;ki4ZZrWSN&<p70*^-5~H8f}J<TW7*&2o8jBo4ih4q
z|K0-LI}6P;08N;>*PFlaFJN;5LKlxyq1vMKRXFS0Z0V~!kP^m@LscIcyA2NJu~C#-
zvQ^>4Ll2!0)Zb7=sfm&ik|6HfNrDoyo06y=97K7+!HBM)geTn6j*PU>hkoZFASzqZ
z>_J>rE~CcG!CA>-<}O9qMQyCn7+~MTyXIh9s)8bqLIRkgu>d?WG$?mS;@$asAv=T+
zIw1drSjkmu1T2JnY1M5aY1(a;V4!91oIz~!?Q`a^Id^+JVa}}G-CmCsW)@~<7UtZs
zPsU>PdhBs`?1_48`Bb!gT_kc{IeMzM#fr_7Cr`3qb*@-ETYMO+?i^bL&H(AiHOlPZ
zuN20>Y!*TKOJVH0usO!*P!*ORI!2<33;QDk1zrFi%}+EJswz*C07u@9oYU%}D%_(k
zR<Zg2En4k$c{ks-7Gry(Q9%@IDVTdws7NHN-ThBl9_gI_J4$E%JLZhY@@H=`LY+t3
zxtc6hlh?8bL&h!6_XkjjsV)e0S?Fy6F|`{zB0$~?L-wLNoV&pjUxNId>(B$W22Av*
zPfGF+_t*i05L`k=CJF<M@J*)l5o9)nY!2#5{DVtGknAU+ZIuT5AE3G=;3A?aP-L35
zBITozXy^Srkn3+E(TAdu&ffq|{tKd*%c0K5rkr9~N^X;d!0@#P*uDIol}LFs8rfbf
z;@?%dHw_GYrJDlDmhH}858%Idv87I%B~Y+Xo}82c@Gxl@ljhpp-|f5W;aobOziSTv
z_1T_090W*$+`O}DgTPidRI=FH>dk!*;S>51p&_`i@vsN-^J!3<31ZoBFcnnY2MzX)
zfC{DO^IChUO;DU|n11**=jrnE-jW|^@ssTq{f9Xua(qFOsao*G>?Qt3Cdt(oy37_-
zH%uwm9WgSo1hM6^4x)v@Fkp;o%*e%=qVQ_Kf@@9wqf33uCLKQ2)b;x_sI2*kPpAMu
zyI<Fvo#o{V0n+eci`1l;_f`GNn4}r<WDB5#(p1Y)9O>$-C9GOgI1p*AwD8ZPU;inn
z>=!X6f$b5U<>Rl9sLEF$!%zm)Z&A7NQ@0Qmy@k!Mvn&Ajf`*!|WvyGY$6jq(PUoy+
znWuPIQTuWi`L}rUzN-&WMnPp&8-f7H!-6?nghy9>sTOl)+Jip%-#q$2L#lUueqmw0
zK6i{C@KvMlK@yCn??js9!qURr{3rP?ev{icT98vSK)@l?fq);4rIx(ttKPa8E~<=p
z6NNBC$wo_XMy0?^>|SgN?Y=O3Ow-;Ud5fk!61hjyULNkOu*Gm^LAGiTM|TUmwUk-2
z<g{$9%VgG};_Nkq@Jax&m5h(Hv<QKw)%|0LT>U3oO)8>x=uZyovYJ%wtrnB_@0Xdi
zfbe&cRuTT*_CL>yW9Bld3hi=&qbdODsH+pWmzP%+j(gg3-GkPUMcfA(<=%6mK;X}y
zGgTD;V4TxM{4QZGS96yxiX{Bq?c)WmQx(1-s(bceJd4_mH^Lw;s=Igh_Wr|@RPX1H
zU~^nu{@x`)hWTo`5VdK}0z^0cI!(;yMHm6ZkrBS~_lAc>?Z+g)`p?04d-4Y9!39Ka
zc5(JRV=}2l(Vo1)yEj@<8(z$;2UnW<@r-V#Y-4B$$)~nH^W)Axz7pXZAToTx_V2g#
zsBX{A@zws$$CsA6{4BthFw>fzH=2<-Y_(JlEMHvhA>|A)8&$3b(4j3Nk3%6zrx*3z
z8(JmFEe^Y6;>YhVqU&KQO;@SsZGfyb8rcuEFx*=q-jt`j1`Q;tnUM6y^uABDQDcWP
z8Cd|MCJjKgt8=xW)NVaWITVk!=DVf}*ep1n$TG(hamho_L$o7q495v1NQ4&5z?-A2
z0-vptYZ5Ius^!AOftl9Kfr&b>+3W1EjH(HJ6xxX?hUT){T#dCB7b*X3adFK3(z$bA
zayvf{WfthI7rbRAR7fOx{kfgXVaTTTvc-5a!p}2J268m5ON)36x}ypk9#!{%Y=#Z*
zG>9@J2n=?1Vqkc@c)mVY&at_AX4H<P)75V%sx)&vT)~kj;*k(*76w$dTpGIbdSPs!
zI1bFcNfbS1^|_22siwm<)N|h^mmRV-s;X*R^9v~1Eyi{a?Y;)@OL~-t`IrZ_ffl(o
zziqk-&uQN)D-}fh6Uiab3~U5kq|d*PurhoE=~>=A&`s4bCTz`>k!gePn69wxV}r9n
zCz7tR&Q+m!NI$6CV(yrx9m|QfesV~T$U`S_C?7@<=i*DZXD3nV$k?b^cCPjy(j;gk
zRA*6=SY%_{%XtHXMM^kYD4JSxd+&*-1SMt{x4(3(G?{VBJE2X%)MS8newOF6$*?55
zn0Yl&q79Ji4j_gx&~$4wJ``>j0F^=P4jh+C4W>^L=@JlUxcG<eBX85Vh?E>m&X@|&
zK{O5Qo11}xjDe@t8fxwKJI+C)RhS|Phql3G`-iG@&rv~m3dmQR@4O!0d;Mz=Y{?Ef
z^Mas?PoXR#F8Tt(YlQo5gZ_Iib<<5Z{o`j7nly*wzYa)=vF`~=Vmq9d?9?Pm3f?H{
z^1Gkbw5MSbqx0f}nYY2?F5D<ctn&>;I6;-Kw}0nXB`xu#vuAmK|32vN*C7eIL~*$7
z-21Wtd>p=rx)&i!1e1)<22q`1AC#m&_ybA$V4?7=q!r$!Ip;O$i;niL0=o(oH1EG3
zi<@JyCq-HQgKG3zL=&vsDa+z3R}4eGHd@6n!|xWL_Z8T0fa*_E6^{zFDNT&cY;}hE
zR$zGKEBq`)xZyPjnTcxv3TL{BDK-ocs}{m@_%d7OG=?pK2rojpo>5F)q|*zWVyw*m
z)#^n3CI%6wE(<Wpm&e|Tppy)|@-WG8dIY%&I7K}7%7OP}A4UU>b?RW)0Jusb^XbX0
zZ9JNny1P3UptE8mP+$)w!H`afY3w#Bc()m`bp5{YaO8o|ckrXvu!jpJLEJmhv0+@^
z^ODb;Uf0+pNt?DHF7=0waX=A6Vptmp>e-fK2F0Kmm6svu+!qwA6C=YzF?H8=XH#js
z1yi$#&|EQp{p_77bVF)NGVGV>FcxPuLw74yO8Fft468EwfbqFbH4K11jE5oH3#vEN
zK+?F#Aw=eYrb1*0>MM^*gMtHK*Qo^ilZG&`H=Sqs+yDw7)kC^enu@sEU?SpVAx<Si
z^{v67v1o2LduwA~SWo3o7LB1`!n9JQNMcY!9xbku^icikBU^*6oue_~#jywQJ`U#K
z1SHw{Ks&GySPVP?q><kUJcHIJ3Q5BR5)RU}nG5oS@yXkkjBisu(5E+$Ky}<z#>E3!
zqx=D6+rj;mjEYa>EEQcsbF{`w{dmXlco_5eq`u<wYEbmTF`S+Oa;&!zO<*X~k=H@R
zV1j*vOxPe%F{rRGiqKaisHIW`zLtU3SsIA#wTlk}gB``(k5QfZVWh?WD+;>FGWLUb
z21)`9Bmd|azeFx0e|C7^+S~clmXKsXBAFG#axq3Wr{`4L4hHcmV<U)Mehe@-x0>dy
ziY*{?$Fn5U3|U;=WLZlCQjgk@f=W3l%IY_RLEFZzq>PNI#&0M=sezO_MYB#Lbt?J2
z)jRth@*_d${FSCX7qL3u)ijo|BF||W^|efTCy#?B`Thv}cXxwpQ^B$|U^pVr4(OWI
z(SzNNAZrlW@rWFeea<_@^-&C5Tm{0_Xwv1_fPT$W`n^3BF=<>Zz>r=+W)M;U&XTI|
zm3FsW3xJo<FPb(QNd*&vi9jl=x79{lmQin|jJ4yuT3rNs3Y&uw=9Bacb`D$LcQjrA
z5La;Nq3t@36-A~a4)kq4plR`DO$L^K99skF^uV*Kp)9I>ZDWE5dvhQF9a;tP!>0lx
z4pS2vS`kXyW`-v7QjMA(E9Ox&q>3Z6z;70kBj`plUUr`$_pDQVfR`E<?X$py=Dq%+
zW0fxifN6p(P=Iq5fEkgAXAm+3kQ|_1N0NnvW|s&VU;$wV;ZT8pbcc`a0yQMY6+eW)
zih}rd+BttRT(iopR;Ds@ScH0?)+2R9q@wbbAnBP*grTJfIH0ms;o{U;-~X{lH!t}M
z&bvN^G4uuS5USO+swG11Cq_knUakZH-T?p_UBR@w{=KVS8B<f1F=CoS=+Pn595Jkv
z8oNW~irL#e^=w(V`)KDpNOVLu5j#01%dp{1n0f@^bxfOo)!!1c@&7@7hraeX!Lt|E
zNDKE~0g@5D2{;2UlK^8CR5DN(ShnC^t|Z7dc$(V;&0IM>89hDz$oRUno<m!A{(VwX
ze-xRn!~z%Oj)}{t4vm%7aalULZXDN@a{%+uCMEeotTG+>k&5}{^z1r>G4CR-yat=v
zoq-1eZvZuYZ{X>`#{!=Xd^PY*v|0n!Z3xLFe~ppC_q%JC%&*uf`sa&Xl6ZMkK_as>
z*f8%fH2vX5nNj3$n(dDYkyZmlDj?{%bSp7SO2X}KyQ`Z)HnqBwxa{Vdt1$};bNHk6
zUi`HS7*rkF5}X$j!J(_^SkO|G<Z~bO)(qvD6*>?+=N+gU{JdiB@b;hdR#O+9MR?=`
znCqAM!;HB&fP)Wr0Pif*AYVqUPyi`9rjjv?TF`WQTPXaZbq`MTj`q$Y@8!~ieYf{t
z=*j%c+y)<l?_~56trOP15_s)aNCiY(N?Q@c9%4;(0EYlyeV$&mQ=sKp=ZU-2fzW5>
zB<1RJPODWYv=$498OEPa0dQHX@E^{ge*13$cGmh@0hhE2%ls0j;MqGq$N7Q@i^qQQ
z&AC83C5t*@r{Ed@>*lx?q!ocVlU35=37++uyWYr9NkSNThe>jQtcU^C;A$%zjYmt<
zDFgsYl7>iV!Bktwv}I{+Ls3<Q@6l&qd`#FzBF4sPW}nbmMlQsX;qj8LzLeV>lW(56
z*|eEpIe(<6h{IGg>BfOUgw-k|U0A5|x;u~i)5pl-aqMctmZaNbsqi?SO<)9+eM-8%
zmrLvAq5HsrtK#qK79_Ercucw!qTBsRh8;vrY!SLS*TSxFCPc_BXlaiTHy&(o8oV&S
zuZgGyBNz_FN@-0UNH2OicRMx^ektq}^y!7OwA|ymduV-r`*lN;#MgpKC=(V#x~Fr4
zzIb+uZIIOtAT}%jX_)83qRLf#0-lE6%XWRboKGX)2O+pkV&{IR;alSP5bt9k+K~+A
zo6>|9N|zN;KOyRXqqJ20(PSE_vfC{&B}nN32D1X%a=M%wSvoND0Ae_$2<lYt@jmI^
zLsZMmmUXkL-on-uKT2QoPPg@P&9ZJngp0W|Hw1e+P~PdpTzMK1gQy%CMHO}q)&+|K
z(ej@`N7;kC92YuDfUKkBbAtK4NfGPZ#tRvwOXEFC->eXY?{yC={54#hm>Kn3-?8b|
z%C8_WL1I6(%(!WN*EGLt84!tq1CY0F=HJK;{l853l&UvdZ@Ry=Pgg%Bu)QWwkj$?c
z#@G19-x<bfRQJ-=$GH3sa~<q9$S<jsR*f_~q7*ckv{UFGq@ZJtP@GM(XPEBW@=W!_
zEUV}y5Me&Fc)Syr4cNj>gOAcr{$URBLC19f+eYEE6f`SWIT9`9^o%=9r=RDl>{QUZ
z=$t1VWN^KO>U4sZ)L>LenyxeE8N)AsKArSWqg$Yp{S!LpSJ)!@g(}m*CQlwMa&O`N
z={xY1B;G3!`#72`e7@Z+w(VQ{rv@@xa|2teX{%<Xs;wh8MBRJ#AGxlm>qT0y$<@up
zJNKQ~o44nx;c#{CvHA9B_Fo_;4E6odIH5SS*I_P1@J7Jn=B~CPIWVCwQCKwGYt4r6
z3$mm~pIg@8`IlM27&J1sR9i0zX}YEYZyGT@8e0y94*puT)wRhj^7(ZHGwcL<n1)`L
z=Xx}c<_%#icR6xbhV#4*m|VbJ?jGx269@l}SCDKY!X!qx%mT>7t#d@CVAhS=bDeX2
zJGWBDvgBSmvrLP<3@9a?#l^)|n=Q9L39vpMoW~dS{%t-z*B*EP=wmJX$NP}x7JVPl
zzQfdqe5^tB^pe*2JX;;oWWXh<!Xq3Q$XuErUm)^j2ViCK;=ZWXC>(-Kp-lxG+?O`9
zWObZB@GC7^uh7SUxkl|f@)NR}uP@Bcy*q?(S~z6ZbHd?-Pz~n(;4S2P0aVM>E4T^r
ziFv+)^#JUk0??-Fm@vO^Qo~VhQ8*C^Zp=1G9wowvaY?omsI;i*L!^%P03y<0F~C^B
zY?GmnR0rSwS8s=hl+7<KnESrH&+L41{rlH%_*J%e)s`DK9y_-2#x0TYqHPZk+jjA^
z>!y4@&6dz+Y9Joijvw<4+A3x_*NS=M4Dvg9D^WB$*N%yGf>nD95{<_gO>$5M=<a3C
z(Eiv;8=74>L~XN!<!CjVw_}AZK}#M`lfc5X#OzDrA)^wqt-6tRM6*^I-7_3Zvo_~u
zKg))ccn;08h`-Fx;j*3&-I5T*q<vz_9!s16Vp(1j;~6cV1?{WDwcC|DXbceY0?b0Z
zy}SX7W>dM;UZdd}F1oa$pe7Jp{NOz3XaKI!bq<3grL$5XM8@r7owM~h3SF89F^zQ|
zPF5wkmSYR)#9aMC0F-5H`yBW#uW80UkKZkI?cFfqkd21?-#!iGtwnYoZY3ZZiX$NF
z{586PO3hh++>w!!)Cz`@!YJ8j%b)%<661mhCVcB#FFEq|0zx~ER|^WTIA5z7!aKP3
z;JH&|sPtLfar!jw%|iX(wd;~2Zx3%6B;)hohH%;lg^Z`r<lTSNuBemb*9U-iS7xwR
z&AQwdBpiG0W0oE>Ea4EXHnT6oOJM1p^|T_o>hZhJ!>fH4#nZys;E7OFZ~`<8jZos%
z24Kjd5GQXkLeiqHA&I=X%J?CAmHZG15GfAVN@GrFAW9Q>GZ4wVA&B9Ka)48=&w0qO
zho^;v5^OL}WgwRcmf|Rikc^QTguO+F8AG2K-wfysu>bu+^Qxw>pKr^X$0v|DX6w^N
z`0y@6g(n16wWl_h4M7cM%h`}B80F1V{OF8o>^dAa?oA^2$U)Imq<4s!G?{A{;iSs)
zVf>_wpWa(nl=O##u*leZZ_xC^L_zl5pSSCqH`jx?`?>Muu&&*(*TyBmBf+Gk&-1Gf
z#-<g=4TW4snT{RgXXkY(8GL51VhO-&Riwix@Ttz~D2RYQQ@Q`Pg)y1sGC0{pxwkJ`
zqyTJ4S72{oDa|b^sZm`O_DXAtr$diSch4`fY$OvRh2HIaPcuZ3;D}*7MhF!}eD1qs
z`7}qQKE?+YTaIqnKlDs$GM!G?nx3|!X2=R^&&)3nfcWM9eG5L!g{3DDe_26B9k=yx
zT2H#@oybLha1~Rd`-V|YD?<e8t9o*;f?4KAE-9<y3c2K~>FGV@HtVOS`*JZi4`Vob
z$~NT9fG<=cI0P>EAMBl;-aCDm!?N58#?VM*HkOY<W`=o80kBj=k%J*yAJy$pP*x)9
zfTG}xilNuNBpAxZeo>DErMX-3Qb<ndn%%jJ!>r%(ilN&V@bu}un<&mH#v)O>Ve1WR
zLb>weF8xK@dV4I3niFrRkChcUX&B)INEnA)|I>CG<AvMLmN8xwP|p~m-U^7NB)nd=
z#ErG3X2P424NNC_7AhQU=gl~R{yp|k>xC<M;$N)+ro`f>uL`y5nU|i~o|?Vwfbesn
zb3W+YxHvz7wC(@}c-q5vH;;h8I^)IN!)obZi9NfsJUTxW|DyvlA^?hK?pMXXofzIc
zw4B`uI^AA8(j1Ou6Y1i3+ks8O=aGxxk={5bzVGXB9RC8+8#k4E80Fo;(Srv9TPHEa
z4WroF20Nn_qDyq-W*!*I{M8~n)XV7Bu(dgt+Z>L2IWgz?XvBczV-mdj!e0so`%Sdl
zwg5a|Xb!Uf@~ATi8eSYaNPbt)>Xx`5z)ZyOV3c|?HSFQgzi=m%QK+flAMk<s4?s)+
z@(F71tE`ul4I^+r3I-BBB-J%S8WUpHTZx)*0qd|8Ly7i~t4dY@aL-J}uhbQN!@7yt
zowhnYFtRr&8rq;CAwwU%@JchcJYF8%Hae)9$cT&RmRIo66P__S-Gl*$QmPg<>zT1V
zh2zcqm|~37Frbp?6%@?%^fwiL<_v5@u>OM%1Em49xI4RG{U&@`unwfFvH#?8Yloar
z_WjYB=;>(m{n^7M1XjZo)%p2@rypeZ^X-GB!?*zFXK+EtImAs`o$GJ``d*?j%k2zA
z2iB2H+oe+o590Ky2DceRc}OhKcxi<q3V^ep<$@E^$k66!-x4ZBp#2f~0G>0;lLH_E
z`(9KP;i*$xCdsnTaN!2ptQN7tKm(bwR3&UhG#n@=v6m|S+FX4^(c}5}Cj9Bj2;l#6
z!uGMkOfXp~jw6V*?#VYEVpN#!3EQIUigv_%0Dsnd=jSXVj{o3VuMbQarZKj?n9Yp?
zyb<5+VYQJDI0bCvU9f3fAGibZ{2Js?N?s+!-gB<<HmH)x18k7bXWt2&7gXvhY8kR^
zyuclHT@DDM7XrocN@lJ;nR6n!(eD6Eb7Yr@<Pb5Mi#j9X@eQ^u3vzk@B@8|qgppg9
zq@Y$2?Q34x&fm(Tx#IYEF*geKR-dbD09@9j8Tgt?DRm^eVP0T{5Sq!S$MV77*Mcog
zzye(8zuN2@H-zH3k?MeQO~CWHU8etKh}pbxz477i@%&2~Fa2jx9ASx^$ON5vQO|ci
zDOjj}fT1+_LB3@t>{xdjM}u)j@e3Ds_)mfUF%^#Ia&f0YNFY;T@^AHa=!BgrU|0kc
z&hrBp7dB?$5M<F^Kx+vg+}-P84?eYjZ??K-4|zDNS6*}u^vurzxZDi+s3nRm>R_~g
zOT2T<-pAJLvB%f!9$T}w@d{0MRI!x>O@QROfGp7$xBZjLv?<9)q+_>Wi%FxE=7DQ-
zTi||@QLi|Q@(fr((76(mpvlmFE)$+G0labYdLlppkqQ_Zn12cva9`~F>U8H<IqS`@
z=wPDrIuRvmHfpAj+M}v_Qjqo!l#uaNI)FpEP$^{hrL#9?BB+QFanfw(3!7zYCgUYj
zE}Wl1h4hFZ$JYE>?*-CvS4wB+^HwUFO;?TV&;P5**Ec&+|AAt)-^jiM%*p*2sSm-E
z;CVP|V`?p4gk%P82|*rQ1BqYcV&&=+xFc8UU7+cgxP`_`H=vYo<bhF6{);;<!{*V|
zJ-Rkh;WfIA0<5BjAr1SA*jbvb8aB{4Lz;PjA-f6aRkAuV473tU3LX7Hbw|8|f-a(K
zAQ;0;h=PE0a4{AGKEdLPI^6jRYjfM(5?_AK)+2flpu~hbC5eacDCt!H<7L1w6|E8k
zNW21*!o#7X<w8hML_h?@QK-{#k-TphaHzS?i#Ym2FUORFmIdHg<^1(apeF<9qnBWo
z+zfde=qpq=*|(I#6Gp)2O&F<yaD$_m@)p!5;zy9whhFoKAiWC`5nb4KI8OySp!oqk
zmURuav%YNI71o;GKGFxMs5v)8v(YWp#^%W6v8~%qG)9iBtI#g3t7FGUu^zL~H#5cA
zz1?GzhsP%C+v?%Mz;t;i@sU0)!&6nD`a$o2iVWSv?o4nQ>YUyAdnbuHKXG8h8mV3Q
z>8qXOmWYmgZ)DtU#{MfMp~wVhU|09xyArk;0)V0(jt&GJ0D;!IIy0^#9n)UVmwa16
zg>8sT{W8oDT6hz$t;x;SWb;FVqOp9bgv3OS;sL>g))2!5KU}2-bq-g-n1H&(aCdRT
z0<K^ea)l6J;ty^I;K$M8(R+$XD5N`|6cG&0q-$;vL?p0rZ0;GnCInw()=HYDNjft5
z*@tep23NtY@#Ie2l`P(aCnN>7{h(lqP9X;)wAgw7Z3l4w67D90!71DdU{K&l`Z5aX
zpE~01H$z4_g&HrYo$6V<2dmJ}e5(@TgGu$L#7(IF6V(~A%g~O%&G-W_!P2KCP!^gJ
zjlqNIe3isGqQi7iyaX*|bwDn+_$VomD8C^Zj1M8V9rG6B2T@-L0K~hlJH<u0v&;0}
zwjE(gIvAG*AnF%d1d+xcFmd)QMgpUH*TMMF&9(zWCLS<1!r0AxYpIR+!*!lSx3kc}
zeN-(jV&&b?d%pvx+v;FCkG|$IGLKDl1BXEAcsLjT2>RR^UQiRlSd)tyR3?P{>!4*I
zf{>%*xUwsqLLY#ZwFV5HO{=PO5*$MP|EYWLz&Oq_e|+CEJ2Tt+N~^Y#tY&*9S=HT&
zOX9>PII+_q(MnoL8?CgP-IYrSK@dVh2q8d#gcbpzmjsT3P%aUKUPFh2<9r<bxC8DE
zjyque{XFl?N-Nv6<9>hq5_$HWnRjO1_SE+&EWQJ{A;4YxQ4ZbGvZ=4N8Ic#f^-y~x
zV*3O2BGBL3x2XljZ4@ZpbW))BL}$U{yx(a$(^#1&U8eJbyfXLm#bUAgXj?3BlJ~W?
z^zuM3(YYEs9_D|vhDr804O;p}?3?dYv8ljvtZ8%L*hwiust6X|(UxJGEeV}_cm2c4
z36cl_w%~?FnCIv{N7dxyk51pO3a`pt^&C~$yJg!kRk-2O=3z^8!OW>Eo7jWSL(jkL
zUIOepue{yueO^YDpI3g@wVv{os(jbrrPBG7t*ZR|ONv)H<NZzQ<X)OqRl2(!zAsAu
z@LlL1ma(?mz&{>yEP;cB?%UdS0#)kc*fv0lB2uGTM2YN&|B}m){*;ym__Nl4txBDC
zF;FZZNVNsdlfOTG{od1iudmz-$C(B%Gnlslel!teER%J0Kx*1UfAI~Zqp#~hs6ve6
zIIx5|a+TObXO6M4z1LsA8Rqn|9`Sr6(|M!;R)}6NED9SUf8ljZ-dMaV!sV9arUFfn
z6*BV?RmMJ@&95&3mstL@7b)0LI0G6iH3Zght*#O)<b}nrs{63GtdWL*8fi5`B(!av
zl_DRXvduzxl8Tna$&sDMj_usFY16Lm{h_)9MFig2aeW6A!U3v-!}wZpt@H>KvZ>U@
zHV*<1CzJM?S(8;;U^{UEu2MT{v}$@yco)KWh-M5ZhxIPO09a28GgxQ<iw!7`ovhKT
zEhX{QB)<4!Se`?mNRInL_(8rgc!;hL8+_y-p}T~5Q}+OMYfI0Y(4oq6`dYi|R!9%9
zQrF#jsaEf&GIlP$LS3xt+eoe;Is5-7Z4X;*w{R1|YKxNf2<z6a9HJe{wyV{$Z5q~*
z8pp~tkL-WY9fS7-i>d7XX%ol_A&Za_F_(+|%;kz9nW%=XM~aeC`HHSzV(8B{jC#Yk
zp~uicP1GYekVgal#>Utf9LBY<_bx*}WEjsf^n_tt-=mD!sI6y!N1qLwiK}f{L?MB8
z5Id#8fIi4t@L&a?PoWS6>IexmhQ+bIvh)9@E+23j&{l5R(39JQzhF;PN6>-RI(Nd=
zbafLlIW=9==x%V;x2~(!zWJ}HRX4^=WCQ>+5li4dx0eHnJF(LpGPxONal<+q;k(z>
zi-B+XYpMYtv6u6E*b&~Q)_M#cIlI8?+U$oQxdTiGmIF2;;xNG`Z89V~wHY>|bX_`Z
zo3P>2t1NmcsOHE&DJ|~pO)d?Q7$Tm2!|dI)*lQa7aJY4QHCI#pOT(HEn0C1(-s984
zNncObL|2cGC6#iv^35)9D{L>v+zsw+gM-`fGZrvht=_KWuN#xD#-O{U#T{&PB^x!f
zsiC2%>c3C8<_W;-fE6h_9B(B>MNG3+Klzv;$OafKLMEeFT-6;H#LDO#CQ3F~RdFY6
zCiBJlGmidEaEDi0xcxg5ZD^ouy|7i{H_#B=$(E2L%68(h{BhXB508wuxtvc^G<fXL
zR_CTh(&%`+rs?%iDbyO1TMvyTIxF`o%tY9UOo>%)!1p2U?-S5QN1;=l!48rGNlxL-
z0GV3v6tF%36AY6#r_B}vHacOl7;}=bt&iNRF+n<=Vb&n6E0F00LDrpWGoRFa7!hUL
zKrupqX`vUyI6!M@OCT&+-xx8wuIw@+jW6riEZiQC&pGV;!jRJs139sILuhU!B0SRP
z-!wju*yNAs`mT}sNThybHxxDgO^Jc=O@5#B@aRZgi>n6({lbCP(WDNMvB%Z&CB=fW
zBd$PwFjyaORX)&gq)%x3HrCf~+^31YBMqS+CU+qyR=`X&Ts@IMa5W$EB>naE{-g&*
z%}7jK-H<Slz{0sJ>2o$U?149;9tjN|Y~9)xLg%&qv4$q+i$Da(K8Wzkd!d3{!FUcS
z+jFG^#CQ;mq}^~J5HJ<w%}$n}STRsVTYTFvE)gpN?rq&Q;?r^Q9ozSN&7D05Zd6{w
z_@3c2gTelrABIf^h^h0gG~&VNM~_>l+R<$k2<0E#Q@eV0n!c;{|AuUWenV8p74ivZ
zV8G-1C+EXA>)=DvFVG0cL1&%Ej{>LY+b_pHmrUv|)t?o`Pn*z$!b=DHy0*11q|q2L
z$!MEmpB2`(7&MzptBq7%jZQJPW;{(9$|{J=Y8jC%sa^zFpz;ee@~h)STj=m<RKQk7
zKb_l|F0poLoc~C>NaIiKg1XW9XSa)C1i+G<#y<5QYuOmpqQm)GMtNUWkTYxrTx$>X
z<&^1zaxOqyk40u-wvo{egbwd)x2#@(>S$*l{F06xF=$-`boY?C)IR_lv@&trAW@b5
zd!lEg@(|2gT}cF=U}?mrfabzzFmQw=oV&4ObMI4M;|W9&D(3AiyIS7Tva{vw_;;Dl
zOu0N8bg>JO8`#vg6RlsAfe}x_`DKKt2uQ>n9Cas<qI%0#9qwWJuF3~PT?mHI6>11|
zg&#D0y<YPHUjU$I5bmQGqK~OPfhJ@Xtwz#=)1DQK5vXA_tjxFjfT98ZRs>yI=xk$e
zTRhY?y$uN;v@OpwLQ=}5K`354p3#P*&u!jc*K&2M(Iz{a0<1kY(F+N78=^?~<d(hC
zX_`m~IsmhJ_ts=M;14u)$~L3*>Xy3wXp>9n8VT-5+k6PSLpK1MJ<IU|*v-D3G+sov
zIccA<EJzCvBOC~O1Xoo?)-u$IW7~4wvPKj*0@><HZ%0Ozbr-r|mID)(Dil!N!T4Hz
z5-g+G;>0g*;VpkM?93TP%noIQWeqIkxni8w8*|Wc{8yeJ|J)i2oTQ72N$#(*%I1q!
zR=QU&C)etJ(|E+dU)|ajz+LsJ1DbZ7?k1k;I!#;l_-mka%<pNcRx>YJd!&Xvzd!lo
zwd({K)_a!}J9cvQ;j30lmQLmaY7Ip(V`CKO1ln(m5KOLDH;X|m2JNWYwuc(A10X*z
z7gCIYvi+brB*dz-HJR7e9n)U&r(C{fcgv*a)ewehvK7w5r_Z?(nAEg-w`a1&-RyG}
z;0sf!R7<UN3lC2&TX$B^QFrXzOLwXdc|7Vv1^N(!GeSU>RvTf{-qR}Pz5ySa0B|ee
zi1scre2qB~R1l8#?ZYtm2WmhD(^Z~gZBu<sor)D{Q<tt*o%g2`lO9>e%*r=!P5d}<
zYvr_IvO4LROt8mkYCvs?TvS%nPo$BqMW85?EV<+vH#|$~KaYV323Q5Cxol0FbzD}L
zl(?nrA5KF?e;uTC6MMrQ@I$?n;txO_iQv$1-W=8Xlqv6kb4x#&lK_WxuJ%b~+gKB}
zYkFbr4_Go-EItw^Y}p02M0r#qW%3)E>UT{&_tpe!#Xx&`9m1e87LDrec%`e_+3yc;
z`O^9x>K#LfjlF-UyCux)JwBmz?a>-ygPl$6>iQOR`k-sKXB?!PAu5}@p+${A^3dqP
zk##+9Y8`LB;OS4lpmV-&LwD>ep*;<{-gi`M?GATs!Mrm3gAxjR<%2k>a)Qc{m7H1a
zf7SU?baIVYQuS)&>#-#Le}rZSaEiavDupa_sFF2FOH0+u{ndK(d28=-3I6A!u+%#M
zeX@$?J?ayHFEW9(Lb%&r$pA8}F_@J>&arHUfU;>3Dia?k#caVNmQt}jNKI@X-XzGs
z01MOJfU#7idix-V8kx++R457Tw-1i|(j9_N^;=1*Yib5hYWk9}rGa^nhesmHP6#GD
zNvBtu@UU!dikLl-m1RW3gjx^EJw&+mqZE<d$<bDDb=~rJ!%@U2G{t94kEbp=EGvl3
z7j>Tw!hV``iZK{`c+GeVUJqj+=g5dtL&4)jUI*^<BKcq})KqzRd?_4WLT#3W^tePN
zkEe0-p+lP+-QIq`=|(7CL?-k1bJ$n?9(hx51CLCxLNBQ9ozR#m<tWy)vU4Z1J!Lwj
zMiDWHiN>rNqQSaxBu0Dkas1=Y68h`mqVDy_x;(6Vk2?}^@9Acqu9)8o_x0E7!r2^%
zb#+8yP>;EbMZ}Q1Di-PJiUpc0uL|F=;ZubTH~4g<M=<;?PIH#^b{#qdzH!!cw)k;b
z=mA*iPA9JFemP<}^!Foj!^^v`N=(B9m^m)$8td&H>mnLnfj*H#W)Fh*r<JP1Hwg3*
zJg5NL)nL8HPW!`rD-SjLD?bl32E|rbJFr((?rLG%*mBHQc~zj^=c^B}j4w8}f^{ds
zlT~9aOd`YJi`5>6(!L<_oaLfu(LgxYl70xH9sX1dbzCPBtFYYwkx50SmF|sjI}rv@
zP}Ek{uso4Hfm8=O*vN+JlSG11B@CuRNstt?#d-*jtGdwUSaBWL%HmO^*=`ch7X+eG
z7YN1O4YnQ@YB85YaC||U1ZNAv({&&Pv`oSl5|On7^aCHzq|_ts%17-Bx+xOR9KNdF
zYiJ>8_&0fiNsoI|EEEew;15*|qjz*MhLDcX`~#iH1ZQ64@HQe+uZKfkSPLMfCquef
z4X$a3hUb)~aM1y*fN8YKmKVF6u>V2>bXi~dxY(M~g02p?p718>V!oi;1(+w@w__Z*
zC#f_@XKP`q@oQ}!Xk@U~34{T=R2@Pr6t8e6@CyilI;i(2&#X93gU2Ebm7^-Pz)Op!
zC>pk<nCkiX+QT*PQJAXsb5<Fz$C~^tawbwvjZF%BS__1d$%Af?nU3y+I|*rJNF0Ui
ziPeI?fp}Gnri|EqPGiGi1c_`%SjGsGb?tLU-R*UqF!FQy+eRbN!ycjanGI&;pDoGo
z0hIf&&3728zcxQ~xxUW&HuurF_BzSJum)>Ku*t(60BzH(ywwu&D3|I#0(KrkbXMYi
zu_{SnfwmCH>j;w51*Vt%{RY|kRi|J3YOCBJ+9o=i#_#PPZ|h9AvEv=t?r&?_x4W|)
zqFryiYV6*nvDpT_9b=$@kNvQ+b0s}s9GnqyMpm^W18R!~`UG2BLLR>u6pRfC;#7k9
zEktY>pU^0gkUoME8UyeKoIykfqM*U+>}u=6*2nNph~zYqguI|ekH;QTqcWyC+HI9t
z9U`R0;q!pSD0F>vzzoMZ*RfMyy|it}2>i2d$XM7M7{#xN@pL2Jv>6E)L)&!ZOQ#EQ
z=CEE%b~)C5&YO1)>Tt=?MZ^=2I=xJ5(%i1?1BhJDbs2HjMRc#TMVfbe^)1`oZfB#$
zywKlzB2q-cn+C~A!=<%UFA80)QQA*+0$=x$w5t3(fCKuJe*rp=xgy~j`(cDnh;7;p
z*CY&qj`*glI*E$z>ovWD0atIVuBp$%Oei3Pf3&T~2#0>=MRd-+{hx7hUw^ctQNLN4
zB$gxoZqqyFP1a*mz@uqRot#}BXbyWX+cR;+j?f|L8flcV)(FK2^&vtwQ$FhC$DP25
zfOZJmN@!;FppbAYZ7*I0EyUhl7_+p|Ve<wYu9D#ZTk(h4D=V9wh?)Klr}OrYJDneX
zCX8W2{zM$(K>Nz4`55rK6PE3MSQ}DY=ziET(Jl&ECqa!yUX1Z}koH&<0m`jiLqy@Q
z5>O6<@<Y%8?S~RvITs>8&@a1gy~O{;@n*KSu;<~Wz0J$=A$Soa2ZGx#+#VcQdPpvL
z!@oJQb%nk5)*T0ym-g*?AaTR;(yo1DzK|lfOHJ+VO-pAS<00R8_?=t3$H$>F;b(pg
zS^f$38MG78N|n4`v#+2mW?E@g6O%H+3JO)N(2-@jwcx?ZXZw9)<&3vE8cbS}If>`r
zYa5PS_2l+U!`SwvdKHtL=o9JeR$wdLZR_j+A^;NLFM=RzQ9$5E)(AVjRrMkuh|rsb
z;z;5c)JTB^nekaN)b50jchJXWti>uV&^72*Yp*>>`x*g6p++1PFDsBDCct{@!|hvi
zx34AEvKc>gMv)AxQ`%-AW1SUmc$q*3)2d<%eTw~(-2<s10UZNHT^;HIu+yr>paD<;
z$d<k|Hc&+r9pL$tC=RcSC_C7B864X;k3g0C*kwrIJbKG0Oo}dxq=W+a%8x;yMmEED
z{j$!L&2>vKiAaub)m{6SVA_r-I9}(HC#fJg;?lQ{C*e=LR0j`4#dlitpV~&=y_BuB
z+CGdfI3*nxtE){M#g-9aBh0Ha3inWj-m2k%f#%dX+uFQQ_?<&KgNFRwfenF;XmZ=Z
zHZ*yk4vhd5g<@m#o4@d4Q1*A+pUd5!d%MzbuC#~uA&BzEy?6{c`SyXuMEp*#^OQ^9
zyAjObzHs|*6f?kD@C^Qxa+JncQ*kaV{j?uioNXkXR&g*KU{$ligg}5&Ei3{k0TvlW
z=VEcJ-?eRWEEHfCi+!oBO-l&XUpdrC5uUGAKYN7V18={6mv7YL=e^Flx~+9}&Pv6m
zz@~l+(o9fbV%HHDg)^=X*KK8Ec)t2q`Hd$uOKQH^kmmz25eSIbTdP!^$n3q$7xmof
z^5IYU(BBzu;4tu|SkaFwxTwY<v#=2Kw4l1m!@^Qsqce!>40wS*fK`Gjg@9+BbROvd
zldFN(W&f21aXsP+I+1t4ugxI^T?51b7(3;_l$-IoI#*Ap>oU_!n_i?mIMVNGboIGh
z{g;`Q?_7M~Vm5H#;{A7}P4hBWXOFiv=>bEZL!2Cl67V(;&1rstWOy=YUWTtwwSE^K
zZ*=t^F&kztK5)r{2QEH<zWwIRqY&yo0ttJFBEx6|A7CRCcTVC90X8-m^p40DbeE=c
zRS!#HGq!*<!aGtWae@H>*kfC3M0eO0C)c;#IT30BXSUc#wlmbf1_tI_CY>&&lZC~L
zU^hQZ&LIMfqXx|^bXht(dfcxCWHLN)=Qf=?%MGe$2`GIwF+9Dhl||Az0X;2f1R{y*
z5~^7jscN0a6~Dcr{BFI9i?0W6x7Hr<c*DU_id{z;n&=<H20&-xj3d#xl<Z%^|7-<Y
z2}^VlfsvNS)qfV<SbJw3_`G)L_<AX>qvGojI79g~43Db!5(aF-D1lM8K0~}XQfRae
zQz$wJgPn;LY+2A}Pme9b@FNLarV3-samF!*Q-(GyRaU4WD`RwFY-x-vL{xEn48LR8
zt<cENMd_h+a9!QlbHQ9z_jbur%7R42ijEAmf}lfTs<<*R{(wrd5&-1x!Sq_}svml}
zb&khi-`Fh*0rntbOJtm&4u{IGNmuFX^6f`Ny8W6Ldj-u;Ghy=3Pa^H-6VdSHjP3Ga
z<}Z!#XcTI0dPfD@F^H}}Hc(1`>GSPJB)k3cQPaTF;e_kUcwkHTD4vX5LoYgdX=G~%
zmL672K%!APd`h4ba@hDLL><C9?XdQ}0EMHrhffSN5oaR+LWG$hYzpgkf?86zfbr>K
zA5+~5A$e^_Bv?6VIuTFo6TOGx+FUm>fo-|7KB8A%nLxNA(e94!zPzbl4-R=uPrYY*
z$f+kwec?LWW2|zAFM`d~&&n{|Ev63~ink1Rd)j@MT<DJIEFFh=0uZ^ot|jSdiVY^5
z^>wDR$wcqA)dk_JWYOO-)wf>9Uh*JZ?VXxITDCMhVHhYWtpw&y#S9`55sPd{ry%pB
z+XEY?i$OK5gG$)5+~(Mn>gj7EzKzWl<iYj1HjN;!j;q`9d)w>{M-mshd_SwNy2W)l
zokMlIJ)zj9FV?q`^V}}KM_cVJ;<Gky1j7cdk-1jg;KJUR@g85K?Xp!TIms)(eQwC*
zz3vg)i|#PVV&K1S1OKHodx-1^;)m`j)&ZLnDhdiQo*l#Xifk50SO8oKP*S!Nq#3KK
zj1Yh;)5Q7a=HLI0mL&(PU{X$6m*@8%r_~b;ceb_Enf|_A$!MZ;oGu~L{mR(Jk#xMX
zsY~f&eF!(9!+qcDIzj$^W+2`YY}y>}OpM`dyn8F6rwzFeU`mv)-D%JR%6&Qli~m!$
z9FNt96$tLg%76N2#Bx#bL?Mz}5tu;*(LY3;voax~j5+-i;b2zNq#_g+*Mp7DZA+_R
zUDg7;kV@Qz?Do<H;TnRwilT(y{`1teQ>F^8>Cr8eGWF#(@m=D9pxci6V$dFJdpm}E
z)-d*Om2&I;+DI@pHEGN&xaDd;n6mk<u52BIkgWf4R6)@#Af`d2?Nb=uDg7I{>?wac
zVsbeylRyUjSr-<8dbo4chT`zCy+ieSRQj$Bz#z~-ik`6FUwLV3Kq4Q3)cu{Hk{<6R
z?Hhw(v&m`J)jJb=>Z5r#)Ib6E13N?hE4cG*2s~y9VDH=0+!bz~_B-34SfCde+U=fJ
z>?R@UtmZ?Gxwxz!?he8xKD6DPa2uYXs1Z17G`PH}R3uQZH3Ij!D6xlS>&-!Dk2#*^
zn1ZiF8M`lcfFhA1F%pZ=p08s3Kw$yI*ca{`?gu!lz!2noznd06DSEa<<0HyHgm3~L
z8toq<sIl&nFuTFtIu6;tRb$rbuTnme9x?_O6f4FjI|F6l9Za?wW_w2<IvMh|c5asJ
z4mfo)r|>u%i8y2JY&E?x81clsDA6Vcyg7O0v@&G{RZ#eR?HC|WVna5m8?4*u5u->r
z#l3;HRPSZ=9wWN1d(Y;8*E5PJLI}tNJ!g~DG}u}6G8XrH8d{0DZ%cUmamIQHuA4|R
zx>0?l@+0*#T627A9J2ze(SUP6T?K_8d1guBQ_>Z*VApG$yi^oVW7CZ)8(sU0C^n>f
zBk~BkO|(-n43K%SIfa2%2ik~G8@RwyRHi2|J1iO>><ZJc;u&b;1{ak4d;K{_rf<-+
z7<NuNdN#TD_MUO{?hQ1BA@npx?oE20s*Uw@;3fk6ZivIf{O0}JNg_I<9M%phA(`Tn
zum5YWKCy9oI9^ZkRIIz%ye`rRX{zb{9`9gy`^M@=W69|xJ32nLTv<{Sxl!rIkaJ-P
zcr8r&D+-x|s8e<z`Svy}GU&)~4IQI0D|<Y5d$!`Ahs}CCmHY9V#QFC<_}l7P!aw{G
z?9)6bKCA=#z1#5Sc4cHnvKaA`R*En%OsnXhmbnv2*AzOWtwC4>C=(D?2qgQuW03Dx
z0$~~J?n`13f>$JNr1C8T;hp-8k@Dr2moI1cz9tYJIF`7`pGf#GN*o&q2VP_EyWx>K
zwe|KSFnc(mWX8wgzxr`#di&5mrNy=v0MtQU?Omf#hybv<fN<cgO0uNiQeG>F#YJeE
zZ2oCgNAfGTd)U?DUJM%Ux!vPqOLLL_;E>mIIosH9afdFnOWgYpX|O7aG=%HJE%)i3
zTf)N~;rkcWqz<{8-NSA?+#i`kRD#`eZX-A%F5k7OA!2f$Jhb0^i6-<7mo$Xj;g-u=
zlFtZt42K{1u38SZ4-QxBzPiT_8=@*NF+don8egGGbFrv(q(UIsrDFtJzbaHR?f7yV
zPFPAwjgKM5+xH(K0$N$3<0Ice8cTs>IPA2u^4K_Yj4zFkPpYbn$Y?m>_3)ifLqcb&
zjl<C$9w^$Ec;(F&ON}iCH3?`R@dPW1hxMuTw`v>&NiaSFwKen(I(E4zb1Zhb_75Gr
z?Sr@7aPhW{4XzDgpy2IK(;FH?hhQ50!v4EA-EhYpH;gRrAKsp<d@^xOm+9WOXe1HM
zVXLCyR(y*KFh*qOhWPwswM@Mq8STfv-A<CbX|oa9LrwSb4y8UM2R)x8RUj$QQB6{=
z^W7RMf7=^FuHfPJ4JLDK807~Vr3eL*?Sst?5JkOaM{{pD*4dGum>6+(SXE-|KqL6a
zj(y#$b>NX0jC(?;2Kg`98VL@!7rY@4lzpx3#9>8Q{1P|({JI)j+%A{X>}U+>u0%&?
zG#m=IezRJ`9~$XGwk7Mngh4>q9k!~p#!P3VbrmKt+Q@)I_E~=@i-rP18xRL=^F(W}
zzP;@arpl;1X>0``ZZ+(mfBi$5Fz%_TWFX{$mG=UBguvTlXdCH|;aE=yxGGl#q2>er
zWyuTj2fN#wqW;RAh_PB1Fki=3S_XDB)wNJ=IcSg^ra$7|J!h{g;@4h>U09@jRE{<Z
zp;I!#)(&JZ<PNOoG00k*uX#oVL2(Sv^0Io#vi9t2zopZ7Df@{FK)(Z6F$d8uAOX?{
zS^xw-4cXi%5*?5gDFuPRC=atjVDL8q4FP$miRA*)0uqn7I`L{WoeFRm;^^#HKXf0`
zWE3v-@&`!n_XFB#LE>-~Tc;XTN5#|Gziu4wgDsX;r^(Mq{GkBD8bsK!@w?5p_OIhv
z(G-hk{bQY2Wi=7dju=fgzP_n8<A}XM0mgCr#aAw@Yn3&ImLA2Az3^U);VPLWJqc+^
zfJNazM1*$;X~|&WsCEQ_uOP!AApnufztyxjEME9%Y9ZWka@wMi(+zrfAvNlC?RPnO
z_=pLkbDxZBsH{lne^F(<VcL4b^vMRQ{0ypW9tqR75NN=Ep7{nB?9I>_ZnPmn?Oa$P
zG&(VRq`^YNAV<bf0uLIav@5n{qV>DVPJOe(*|xh8+hhluM(dLob`A!Re6%y#({->l
z+FO4ZnV4HD6@?{Vs*XL1NBW&-U#P|3xVtS8>j~?AbEsuoqHd^Z8+@r^eF=Z-t_Jr}
zg)K|!IB&5zw5M*<SH#8$!T$!!68epykrz!oeE?Al2C$oV-zddrAH9$IO8eiI{6g`_
zD25(I$R@qAwVajmR*~Q;bs#Gf&^^nY9G2iJE=cv)S&b9&BylK}aXM1wNvKbj6P>2s
zkf`&w-1_ocTl{s2-Kw9@uQ^)!fJW?q1xUpK+PpkeH?Vi_K;2M5^{+=A<Ewp5qOYd`
zhhu0lDd32MP>dRd+KWaAM?w2WvIJm|&Va_DimIMKbig)0fR~+a9%}wZxX;_-_LvO;
z=*qBHVgy{^zgVOp5cPIpn?-DJ2X8xyieX=i+kc6P1apTC<E6NR40O!t(UB(jQ-~wb
z6!`=~NxJ>yc7VWX1E#>Hv07Mww<YjX*t_ab-WgCjt@7$nNn2aDtK-a0SH|`Z_bAOu
z&+uNw+*Fdp;w+Di?MTNiFHpH~c`W^^wcSISQ`*n4;x*}xB*x}2s9M>v<hUDADQpU^
zLtcQUPO)6WLt8K|TcFiP5Gjb>bR!P&+p>IEZ6O4082uwgr^0G$?3luCu+%!6BCKJ(
zT8l2s!Rqszas?dO+TXiZWxe0qi><1S5%E#jo|0i96k94}QxX;jAM<p3R{#1DQY7Jw
z;Gg<AvU&rBCFNFd_1<0<Zfp!AXg1Sz<_hhoXNf3yLj*?xYKOUe*!wMgNWJrJb$njU
z3lq-&thr;!_>W-^^P`X(E`Yt<6~I=_0;8uxbp%EgLo|x*OfpIY1|YV8G{N>C_ya%)
zu@Pi6V*ib3N;d<<ArxZ4qGdmU8dLhr%Cf7?*V>0rtK+WL#@23W!s0KU?80tq^%yzN
zwaP8-Fb_T%91Oc3TrIJ;BF;xZ_qDq4R$pJMuMKZS<masBb!kZ3)Rl~5tJgY)&vWfj
zcX$x*<m#Pv3G0hP=l?k3G<^g-GNM4C<5gT?8M!D~RKUK9B3)X$H<i;06EHZ0uy;%{
z$D|Aff-GrC8-_v7AIP!&o-cesce`!f7s+arF{y`m@KKU7NZ0}qrC6I-T&vPZ2dr$d
zfLjM*0wvq}s|rOsY;(lXA6FR=MW|S^;s9(fM;Z~bi#GRxprCg(^`A$)yL=&bx|U@z
zwmwpMgv?wUE8ihaEH>+__{kj&`l-D%D1dE0G+6DnH52V?P%8+GkWbIHgdDU?8o_dp
zPze>3fh5`BGNsqG)Xd{Y2)3WJe2<o`cpp}n53*_}6)~j^fSLM}uyz7wK=OLC-@L<G
z+gRX)Z|wcMDC8_h$6$OlX(d?H_$Uzu<Q76yXKYT;?lw_f6p@OK9h&P1AG+~HhvTiS
z@un>sn(88T?%~^_P0o>P4sGaeZiJ(!h*LCMmq&h}tL>t(p4Q&hNc*ON)Mj5@XLxT@
zFt+W|wzy|g6G9MDP45P5FVkKTwTbo@f_6k(1kVXmu1wMzA`}D|587HL(_i9<suZ;P
zTNV5sy!Mq7Zsv3w+vMdhdb*#x{DW6N?~th6E?_3Yii(KtQ^#khBU>?Vc;Fht@8*H0
z-*bd-(>>0c*d@1LnPp%Q_+dpqZ&$}>s3W!2l2eH%HX(nY`Ek)IECPe@=ETn7VCf%;
z5op6!|2itEBDc|I&v2A2MOkC`*Wtzky5ZiYQ1v#b7q10Z@@<-BV)jh^q^bLheqcRz
zwDQhyBJqR~EhzjRHLlmRH?CoLvh_M&`_^pD|DyIK*%Amf!1KC4r*#NNR(S+~@R2{>
zI$M7Y`RyafIFN)F=6<X}#f&JB0K$wTeKHYbi`i2&84A1_K3P$URUVowjcK^qo{>Xs
zb(QzlwH+F{Vfe;F9`g!Uo$CtI^A<3K0aB4zKizNwS>l(D)U~zMja<ra$R8SBKwkQ!
zlu6{KUl@K(O<gVabU2>&wPJfu@lU6fFD0__XtWN4Yi5^g`X20BQpi;-0X6GtcaweR
zet&d4>c88XHvhV_WYo`|_G)B6)j`4W3t8o%np4Gxt=RghDi?MU+Eb<1q!|U$11|@k
z<SMi(eZL~&F~Y&9TLqD7yqW4bvuss{dUkB2?U&1a?t<xYn->i$V(3OJB)CmatKHGc
z3u;bm)#uAv2O3<#C90esaRvS6xS?;udy;tS(2a{~PxX~GWee6%WB!+c6T_gJRumpk
zhFYwsVIK_fss?pzf5q{SEz=h)Wdeh(;mQ*Iha-h6v@fF(W7fqb3=i4kos}E(skSxy
ziyRL+9(FwL_@d(<9Y1%RQCgZlY=~el%!XCs7HJ8t&Eomb*Non+`)3E;|C7(3^}WHf
z&%uq++*aFj&i%84{)gAs|C8UhY2xbp<LjS4=X+<j@2vB)zc=^`TJefAT{=(cjN?2P
z&sR~s;jF{*>a%M%##XN_{n1k8d=Ia^=6t2K7oJ|jxPQE~^2cw3S*U)frsnyJl&PRv
znJulA&sRGC8^+hF)>Npux^~~Td$M7aylD4epO`#Bo_h|247RUdG3Ts+vsTF25OU7>
zSu41@0^7-7ik7Kjn%0)p*y=o=UM(%Hma0Rx*0*y?m3!4Ch!p4CTKDw%2d!rOSj`Kp
z%awbnAq-CWgpaKF_{8I=NaLUnPz(22Vc%hKxW}@sBgKId8%D6*g)qLhLOZ?dT7$Wb
zXLvg<=rTOa)4s8K;j*3Te80udjM=9fyAPx^^+5GPwf=IIk<nBPCX!u3%Est0*+?q0
z6w+Ei90A8i+Zz^2P?j4uPQ*Q$W@tU_=0PVwHPHu<MUZW}3kzb)k%Z_J*vDb=xu}*w
z<rmXY4$Jef%N2$#I*+EM?`}9zLA?Gcg=_EEh2J=6__=Z2=H}+j&FmG1E}tg72Cv)g
zG+2<i4?7JW>+(gA8@r>yFbejs-~EHh*zQP33qzr)g(ACSliGN|eHW$V!;d=vMJtSd
z?!!BqH(%-2UI0t6qq;U{8rmQmhi&$~U}Cx(d4DKp73Mr4C88_+33z#moeGOcQq@rg
zb_b=1Q5-T<J#-P`x(a^6e(7g*Om}H3m0!RXd6tWSv!9zg<Ff->47Vn)bOr>U#T^z{
z(U3`_j`<7F!Wvr!X5%|euK4sSorHZFhIAc;WJpH^_LAJ+U`<1tb?U6$_7WYf&AZKx
zm=_A6Yb`Ao_&PP#4AX3Of#+=}J>sl{+n;CLB@sTV(|18j3lbHJ3r)Z9oO~PY&se&H
zCG<Z4FO_cC0a2EktAQ7)ZQI1a5s^p3V69xQl!dm}mg3ybQzoTDE%}ex$|7yJ3p>A2
zK2FqsX$7?YpxJEV55lVYtv$YFjYW8h1r69{NRFvEIV;fGj*a0pGwQKVs^d*H$9}L8
zr|AVO2{uB($mhrD@g%`6@%)dgIM-qL#aUXgTDlCLJ`Ph}TYcL_5Nt0A8jaRk6p36|
zqp%}7La4z)R1Nz~Hta+U3`3K@{~Nnd0^(S<@!0V#`;y0Nu*;F5#*L_~)x#p{lXl^n
z%~W|@J#pXAID~KV54YA&6m~~XrF;Uw#RR8VC;(Aqh(zOV`GzUjt>JmdRK${7;^-Hl
zUWC52LM^M#0mkD<JNpRIgB*dpa>Ov)5IBJ{(Q5ZD6<mI4wbX(TJoT`AzDP<pEcMwA
zl?iAl85ob~<C-?EM_4~Kz4GLesfT>73vFDyTKpG|06=c97oG%yFT35D{`2)OtgsJl
zv!cDL^a8mt(69ex{{rXq@APV~{*3;yWVM5pC#i$1f9%ihAl98ma|oP6ys|}yp<zNV
zYvu{Ys%M>B2;1Ir!19A>%)0tmj^|kgzo6!gtsc-fdwp6=8lA4t;f&*)5dko+GAEe7
zBvr#<Wvz%#SFcvbqdMXL-}Ditx|aC3ZYBJ=eXNZCb$wi^cCtF@ghMQNd^dXwB$Ht)
zzsLFE@hqMkx-F&ju<2?O6Bb<s&j3J%`VgDXuy?UZ@wxEG0yH1vbRb<2g1x!=b#tV9
z_r}dI%RsOPkGWwJ@=de^Jf48(9DuBuIuxZy;ynfSO!t;9_u%d@f=EaF8sfI@>I}6!
z4bOW>R6bu{;mceLloq2f0IIegkNzcnom)dX{nmuBp1-88>{UQK)hVJWt1PXp(?7ej
zmY*Q)5nH*2_B$?u?T!O0unKi?GTR{)2Zc!MA_X7Rd&r8ce!I?#UM({o;8*RO%`e&v
zR8x8=IUr1zpCdg{HyP=5BNvy?^|k#LuJv5)5lHD|vi;ojQktnfy>a$gO?wi^x}a$(
zY<Z2|51;WB<@~s@MaW3VZ1-`I-1Mn_SO|>M;W=N2i;C&lu)za!IsSE+;(Bj8@M%2y
zq^1?{lhU-U_iGx_M@JGmiZSdHQ%0&<%`Zp{^x=al(wnrmgsMAY>=&fptt{hs@)+EJ
zUA|+LyHzw1Hm;(Purb`Azn!5zzrQcE^H^S8UsjbY9tq!FLfpS$j5$p9iPt2pI{jeS
zeX^}rkXl5kFr5gWA?P0a=|!KosB1?k?C<u6Lp$E5Bd6EU-twL0y+b}qS^_g8qp5Xh
z^ibEx)Sl6xME>ko#N$7K8LIDN@Fx>`^ZwyYn}+u{gGYj$Ki9)SqzDMtwIJCI#)5pX
zNLTc1;B9D&I^xY@u$4mklFNvub_ftiO(>2{$3?{~z}ZQgXiaU~+4=kL#*nbif9>{R
z7VFv7gviHGwr*;!pBNc~-I8buKMqTh4)K~R8e3aD(P-krD}y4rd4q>+WgFx1W1IK|
z;a1thT4HDm@h&UMuEqrC2Co(skxR)^>vP4jrR(=1TGk_vSU=-SO9-9CUcZvW&)(z;
zUIl%&0pG;muty!1Ulr_sU^To>zr@cv|Js$ic3rv4GHiOPaxZv7X^~hrF7LW>pE5>a
zT=@|ENGXc&9nuHW_>uiC?X+$uEn!u2wMyUUy9!^}O8zERU00SWeJ#QO_|Z;qFi@zo
z2h^_OX~GkgN3bQ7R0{KPge1!;tJlI>QjZnv26@B3P<x6q3Nw(YnWbL8e(!QY?NNLc
zRaCujX@yE^oRq+z^#1M2cSFGdNw3rl+WS~@(}uDic0;fls%BYTRUVF7cpe)-Xr1*5
zuQ#yk@UFnqsr4t~ZOLS7-H)&@qA#e{El}~EmFxGS9f>gc2r0ZDG5Uq*HzMQAWi%Tu
z=26b-jUM~dkMSnnp2m9#9w+TsvE*?=xk=!$0ojf)bbG7i&twbWilyzab+G7ywRH#7
zWS3&q0(7D1cN0sVwJfY~W|en2cOTpB9H9Pi2h7AN_>})996Ux2$6y|ZCH$*=QGvas
zySK1(&**3m7%IhA{NixVFqS+G2<vza>s~VO@cu^)<5BvjFvSIy)N9#ikZ+_3-6KI}
zD_k(hV3?B0Si3TcB(<tpfR{Jf=3xhh=53V0<!bDO(Jo(CWT7&)Y7KH4@w6Oa?-n0)
z^k|Txw7%%F+QXu(FPIJH#j09@V4>n_nqwGpr4Lx)V`xh|<ft{SZgu``{#$8~Y3=M{
zRSBcDN?R;RoJ?PI%eMl}rTvA$fn{n7XxJE%ZmkvB)kffs#<t2E>C$MQcXM!=Vtg^M
zv`&@a;p9n#eqsTav-UZsYs?8Vp|NEO3pEvSImfXp=0@gkH<)pF+G5kubv2d{;Ro8s
zA-Ih?CLG5d_n=?oK)^{L;;`M|gp-j@gZcyPr_i#>8KqVkWD260f2`cdqE0>P7wtZ5
z-?bpJ(vTIw5J6Ko8ANMaAc7<A@w#u$MY+MFTcq4lEwCM(-sVrZ;?8Fp@Wt@dVR>Mc
zoptm&nZJ`UM5Hv>NzR)+$RF%!t`^wX+Uu(CW%fs4!oOCkJP~N}81Ha<gYjVUmxLqk
z$FihfEYJJxbCqW35kxO_x)}v=(;|_GWY2=Vq4h-uyI1=3k=i%g-ymC!B*wiJYe@$M
zK89#5Z=iTB)jj<#qA^hCkbDY_0W4>&VTPXrUB~i)ad9-FQfF4{RnNKg9704kvHmt-
z1L9_A{%D{7{3n#g8#)P0u0_{SUrCdzPYzbyz^bk%Tq@lAlR#7eJ$slRacjR<-{Hri
z-pTzYe05kCQkC>UCj=*_&4!b;!Fu0mcv;&eoA+?`R@29Qu4P22Qw1P^8&u)R)+T4L
zIXKXs6Vl~#>3yH9-anu;1eI5-@19neJf!Ufc0^hbA^XLbeY=}(a(R8OfyWRq2WlLo
zj=dRc!TAb0^_f!Kg)?mq;<t60i~FzaOAH|B0eATzHP-xukmkF!P9!=GASM}F;p0L3
zJ_{(kRC%Fl0Bsdl^$c6ducN~b0O99V$ZxCFEl?O%SU!=ujrM!gP8nvVv#VoJ*}eBE
zBLs-;7P??F2{`6EwT4!Pq{{2n4U351f9!Aq3CFMWnxh5soYE&`s8VOJTTR5CaD|K}
z<es?hIY1o0tAnW-QY<u|Ia>*FUDP}fxy&#}@%)O@759Iz@=f^I1;CeHuEa;e5yUTB
zx)kCenz4_cB7QkINV#1%v1(qS_%Q6#$P|tYDf(E)V34Gs?aWe$cKqo9i2}h?18CG8
z1pORUlz)uHYCFX483%&yQMW2T|5F2l2*YX&CF0*h-85zy9lhuq)lQy1145uK-u;IM
z=cAf9jv;iqz)h{<%PK!bJA9WR0`V&BI&H$)xk^ASeyeJoUcF9n@n{!1s%RFB8!(no
z#u18DfZEJDZ4r?dmGSU|IwEB!IIw%vQL$n^>&l=&H<IIooyOtZa(b+AWMgVF;T!&#
z0-SqQ-CNc1LUp`W9gnNyh&t{-SS`E*D;&vj-@W~cBZZ+2kq0`|ieI-5s<w1bA^VvQ
zV%wpgfR%BL8qJc2fQleR5_%ylR`nrOT4jt5gp1m4k7AEj+JnYE@!qpne3!SYJ79Im
zsrz4zxXXT%-KfUlQgy7Hu68}j_C&mFle+qB(igAOyfvFJ!9&M<zJ?nSEHLbOuIl}z
z>KLqczPJ0=hPndT_;<Gb1^M75$$}t=O>dejTGU%wk@dowF<zaqII$ssb$e=IJp&uk
zR>&;hS>A`>DwUsqFE+D#FQ&)c(C|?;KalWE{bjBf(9aTcZV11GIReb^`Cj+LyLT~o
zyFWB~U}!_&qRU&=bi9Ek3jbs%u>zY<n~pma|Lun*>n&^CcXho{TWM230WECSlzeBe
zv@VNbQaTtFOhoavummJd5@a9Uv2=7+zmz@-k|C%C@tSHkpOW2^P6M?OV*^dYp9R2d
z7lre1Cb25X+NE&h616Vxpsspi0iqUO%|ILhpV{p<$acx}2V$N-e)~!Fg^ShkS{P=5
zDH=<3j=j6?=muK0(fgx+(d*9n8pc$~Vc_>Dw%Q<BE+J|F=%P~xp28rK^}{ZpZ8`<e
zo|R0qYDKBM#X3QK$uDP+?~sg%7&13$0c#sPfQW-y)%Z7~*uPJxy?ZPO__B4wALpye
z?w20)eVM@f%Mf@G;lsB7wKHrQYUBQ=rcM$M0voTkpLn}L&?ab;5njt`vNBj!N@22U
zsqUIva11zImA%knTeoF(mTJ=O39T9mjR3WH08RsFzEcZH?W?W^*VRg}*`Z12^Bdq!
zrC3?^M$K6ts(d|E@6<Yw*XM_xVE@YUQrP=YSdihfQ~Qu<UfM+yK0bsqX+%5d1P?De
zHCL#<KIGDz%a~9Y5#D<*^^IuK`xM{mhDFNVj{6+1c6<(63|Q~j{fUYg477b56GpQ`
z_Iie5(1D3)HCI8?85vOucD2+M-6f-72!2@HG;fyQEExuY&&3i~v3V53OXk8rSEvn8
zC%i?oj2cxWP}T4e-~ouhV4+27+eayqDE_)ai)b)-0rKQzSHsy%8G+r0*iTXmMU9<(
zmrCD`Cg$OYl4H2NdQ*=FF_irVbO((QkKy~({{nbwR{Kj7pkAzwY_q(yZ>P5f!EtN8
zfb?O0PfwHX#pe<5-@}@AupV7k;9EK7hjFA^_`RdOe*fSdDISu3=@J_6Y-}(ZyWvsX
z4HZY1g6Uw?`Y!D3{xXoCQc!NedW+xRJL>f#N(yU?M5^y^G8!5?VV3Q}*F!vYhtfx^
zDA?5@t!;vaZw8tVnoOD~Ouxc{G~H^-v95_V26R_BaNCY!&0q+VMRSOF5`(&>;={vq
zn|5btvCx_zL!yEB%?g0Wd;>}c;0*)uQCtjmkln5BK!Xv6d<iyYz~?&%%i?wl2zgMr
zu)pLI2iJ;rl!GTaz5R-?17yY%opk}qv~aHi_zOD|xU;0Fe!sWVOX(B>b$3XY+>h<U
z4I8i}xWD#<U}r4{Y$JJEhp{g?3KT<Yop6G+XGGo@!=vYA+DJL4aKNg~Qj)U+do^<}
zO!l_SY|@Nwa@tSw?Prtl$2!Qxf3K-!i_LrYHg98_IikA%b`iP$IDZGK!yA$F+-J_F
z*e`t!>KW2_v}>RXc$s`Qpdb4P{B*aI&nYYrT1XtSZ2G9(m?Y>kdO_`0aT(y9NY#3C
zztO6)*4hT8RRAq-{AYC?JPI*nrJ*CrJL+D|rN+ArSSTCanqg?G#TQtP2b=a`VlbOf
zcCchy-Dx54Y-d7<({*j{Y~b*Xv>($NoO-v@Fr3}`uPhISO%}(d><!lReqrd);7?cW
zmpwJATVcW=Dp9aXTJlHQkGKMfPHO()`t~8j?;3IiVn6yr4JMtMYVR3GTYcjJDKBgQ
zX*Sv3vzjR#0oV)w0yKs6d_~HRSk)&gn?UlSf}g7Z8~`N9(dz%0vuLv!#BW&`i+h97
z_S9fs+=v((pEA}J^sXRYs<H6LnTHzucRuWSo%L>qLOY9E!aF>1_=3J9;*bUR-SC`?
zyb0}yl)uB>Kc8JW-xn!yw`E65d>ctsl+EN~P%%YbR`&zR?%7goVSSRMF2HbBdFW0X
zr@;hM;WiC4PEjJ9uB8jx+P&m=U892PAR`9|h|3$gP~jp=o_?X?LC-j_V$`zfWDYz+
z^>Ofby2%p1+Z~G{i=?NgPhp;$l>{smH~Jsy3U(2|hkDOE#@>zoY=&$w?#QAy%2pIc
z^5ly|+TZFf3-Oj<N0s>nQC7;N3fp=h9^20fo(Mze4sa|P-~+&8NT7_TaT!D$j}H!X
zD#uk=l(Tz$kz201@)YO&M|zVq{Y!L6#&?A3u!a$%q2Y-wqR!`XZQY6(`pg4?ITQ|Z
zC@L;DZ)<GaI=byZ!s|sm&Ao}Mpf^~$qVKBhMw{Yh)S*o#{PhyfM_w)Q;Rqt}HU)R>
zL`EAe?)C*E^$lJ1aH)0~F(Wb8l-zUUo{xsh(MXx_tw1iS$NBRxCK^TsK6zoxCLG((
zD>p$E*h+(e*^dt*fbO6+Oky_iU&Fz{Xz1!o!XY=`ehzAFcbh@>@}PO8D-^DLv}bq;
zy!KewOHOlRZ2$hYK;@UIv(aipz~@^Ev?Y5c?_O>gxR{6tb1d6FacQ*I3*FR(utFFl
zACg_<xDS>JnsAy-%06};xo@@o%HiLMy76IpYGgEe^Y>m`Nh6~n=Edi01RuR=L;QJ-
z?3+$O{`d0tU$P5rCc3f|G<Vf+NICV5jg1?<p6B}jlZHM9MEh~#e)0G<-SZ9SP>RNY
z-#^=Zt&_F3%EA%inV)0#=h^5_4DfY;DBdWTXBC)2dF1cbhR@p<Oa&>?;-Gh+?z9Z6
ztlb!6J7q`&U6mh!E-~R12IuF}yOBgYYivvogaALAT3Z#6F^50+tCkVdiw6ZaJ3aN@
zi0k^Zr)FcSDYN_HuEAa8-gRKs_l#;TQ01>kHfdJAENJ@`c-gEctrX%%h}2=%La7aj
zoh41oDnn~iZ(?Z`>v;}St6+}U+QI7fOqG>o-v|31^u#)wkfAr|aU1@Ii*#?mt6zk3
zw<n16rp_3Cy~esafx19#jY>sn@s2A2{X4qX@T|KX!xh7;uYZFFS8Cr8a|eU&byYSi
zjC9Nr+7;YYbKP%nq?N54q;{H642^|`&KVkT;^$up=W_n5gS5)~14niB+p3PD-}|c|
z^~36!*Bvy~&`_g!^VxjS^+p|y<XNL+_0V7E<9CABHT3T={qLNOVS20Gb2I4n+7JHl
z>=ks-uqNZ2VZv8@QE!&BNTaan56Os6MZ}Xg!^-;okP~Z!8H>ODtAwLLr>)28QsUA7
z!5gh1Z?8gQb#+=>RR3$0!iyDrW}0FVxUz?wp2)B#<Qc|E2<MSlQvjiN&49Y?4c6Qa
zde?4$Q@tar7>Mz|jzh2<=<h#&1J<>#wgG3gFRJMCpyFhR7C9V^>`L;CQ2!;cZ)lYn
zyq#{h%N(oX?RHr}-}N7MSvu<3LA$IuI@u$3+3ARJ%`UqfoB46O>~_TYSL|}Y5f)*)
z9CT=6&@P7@^<v&GM^WctyBtHEFG2&uB&jln@XsnEJ2p6etIUzV<3YPDVB7d^yDS|8
zEMk{6$6+>Mmz|Ey>>GC3<+z$R+GV$+m%qU-2OORJU+i+w;SybTIpi1++w5}G(JAh*
z%Q4h>0#a1oQ9!()BKVyd$1FTFDZ}+7{N0kEpLxfEx^e-sfMyUMIFCGs8HZzEzHq9T
zotZ5syC-{+7v>kr$qP<oO8I%*`$G>U!6MQti+Di>rK5OR4j-MuBQ-Bb4ks@xW-`g6
z`CJyaYHHb6{_^(|bJ`2{vq2o8aQuT`OAYsK8SJGRf1uz0yDkjk!&}s+DV8UV?jL^t
zaSTln<D6A3*pAw@P496y1_!tF_V;g1cCYKj@l3Il%`a?ET0KC$>L=Du-0<r7r)o!*
z-eu3<Fb#gn9_nLQ4>VOY_Y?5SE}=Y+mX*|+D4<k8miZhgR1tTwST(d>lDMByHPSen
z!g(3jX|m@~r;L$s9GlG~Ph=*#O3C?rshlk23yZmQF`1prFC<Huax%Rzl`QA;xw&i^
zwP{h7@u?CR&_4V>tv*x6XKNQ_uloEvs+Y@!()PZ-Y4j>>t;*iXJZ@CSBngFR?UU=L
z^?d8&|7IPY@6FY9{(svx+S{Z5&U_oV@jU;DAL1f&aA;hRC6yr|9@CK?4<SI9n|YWQ
z`(S<+fZ=<Hg(-dzi?KLt#^Jq;{1$L6hg{UclB|`rv39nBb+As>#kyG!+lbAA%`63F
zQy=SRTi5^_WJ7G2jliH`D`JpuhyHaZHiXFvX^dUK_Og9!KRduKWEVljbTPYx9b$*s
zQ`n{Ksq6^5j9t!-vSaKDc<=q(;bm8{tJu}-8g?zajy;V%on6mvVB;*!CfFpKVi`8g
zX4ovtvK!eP%dvU3!1AoXZem4NVr90-j<XZ&Bs;}!X3t=^uxGMc*|VUFc{Y0vGFv^D
z-OirJ?qGMa=d-)m3)tQ4h3p>oB6cr(F?$JnDZ7uojJ=$_g5A#^V6SAaVy|YeVXtKm
z!vFYn?Dgyo>>>6>_9pgb_7?V5_BQr*_73(=_Ad4?djt~Yd)VKw_p-lb?_=+0kFpQ2
z53&!j53|2xkFm$eH<5i5k#s-CKF&VDKFL1CKFvPEKFdDGKF_|uzQ~?rUt(W&w6U+S
zud=VPud{EkZ?bQ(zh~cO-(mm2zRUiRoo4^UzQ_KVeV_e+{gC~L{h0lP{gnL+`x*OJ
z_HXRx(0Kfk{X6>)_Mhxm?APqSU{Uqo?0?vA+3(ozSp`wHXc=&hOo*J~?(48#Fu99E
zTgts0I%po?K_22^9^p|Q<8fZc>v@7V@J8Omn|TXQ@>br)+xZ6G!8>^u@8&&@JNZVw
ziErj9-pl)VKi|R!_#hwR!+Zq!UE295g4A#0+xZS`x$okL=gi0W1$-~x$M^FC{6c;a
zKgciUm+(XUFn<cals}ap;g|8t`B8q1U%{{BSMjU)HT+tB9e)~sI=`OZz{h!-Pw+`T
z#WQ@G&+u8E<u~#<p5ya;f#-RF-^7c&1bzEmyv!H*aejiI<fr(}{2BZf{!D%=e->Zj
z&*sl@82mQ=Tz)%$9>0U%$)C^f;xFKL^B3}a_>1_x{Kfnw{H6Rp{xbe@{tA9Se}KP|
zzly(_zlOh-KggH)>-g*W8~8)~jr>jg&HOF=t^95L?ff15o%~(=Vg3kzH-8WR8~$GY
zxBPwl{rpk>0scY$A^u_hcl<H_IA7r(;UDEs@Q?A2^H1<k@=x(k^Uv_l^3U<l^Dpo(
z@+bM1_?P)t_*ePY_}BS2_&52t_}}wy^Y8F~;NRu{$WQZs;@{){%)ifnz<<bp#DC0x
z!hg#Dh5wBIEB`nCbN&ndOaAZtKlp$0U-4h_|Kh*l|IPo0|Caxb|DIR)8Q~BNAteQz
zsx{<Q)`cMu)Lyue)!8e2!Y=|MC_*AEBFLs36LC=|>P12{h(^&QnnjC9!acc7w2KX*
zLv)HR(Jgw!MzKk37AXM}MA0v{hygJuhQzQK5u;+O*e14%9b%{0C3cHFNRobm*o%Y+
z`^5prqvAqwkvJ$W7MF-a;;?v%xKupV@e*-FTqZ6TN5wI5g}72&C9W3Nh-<}l;%VaP
z;(Bp|7#C?VAtuF?$cSk%BW6Wb+$iQmPRxr1krxGVlPHRkD2qjLT$~Um#VK*Kc!sz|
zJX72%o+XyVv&D17ZQ{A&cJVxMhqzNbU)&{LAnq0~6!(Z1iF?J1#Y@CX#eL#s;^pEM
z;(qafc%^uic(r(qc&&I)EQ{BP*NZoZhr}Djo5Y*NTf|$%+r-<&JH$K1yTrrd5%F&E
z9`QHgz2a}h`^5Xjqv8YNgW^Nt!{YD6W8!hKB0eHMDxMG@6CW3!5T6vE5}y{I5uX*G
z6Q37f5MLBeiZ6*Ti?4{Uim!>Ui*JZ;if@U(7vC1&5&s~*EB;ZO7XKu^C;nM{U;IG)
zQ2a>zSo}o%RQ!whnfO=nZ{p|T7vh)V-^G83{}jIxzZU-`ek1-{{Ezsp_?`H@sE9Mt
zf%L{4forjegQT}QWPKBAcsG(GdtuJ&M{4z;49T#J$S8Ke;<8TG%Y<x@jj~BL%NCiG
zt+GwF%MG$acFHc<Eqmlfxk+x8DcLLgWWU@Z2jrj}lEZRDj>@fao7^sU$enVR+%5OW
zF?oU9>-Yz`Pwtlo93gq3yht9D7t2fJA$eFnMP4eODv!v^<mK|HJSMM@SIVp8)$$s7
zt-KCSTThqQ%NyjlOv?#5DW_ycPRkiNE3@)OIVW>+UM|SIEXbQ=QI=#`F3RKbgghxv
z$(!Xf<Sp`<@>cmQxg?)0pCfOR&y}~!=gB+do$~qeF8Km^w|t?zN4`kjD_<;MB3~-+
zlP{Amm#>ib%Ln8u<*VeY<!j_?<%4orzD~YgzCk`D-zeWC-z?uE-zwiG-!9)F-zncE
zAC`~Ecgy$4zme~ie=FZ7-!C7PACMoEACe!Ie<vT4kINPL5&2R1g#4KNxcr3tr2Lfp
zGy*4mR(?)?UVcG-Q9dcZB)=@bBEKrXCco~T$)!uB)O@;F&MsuN`NdLp(pk!+i<7h3
zEPl$eR8AM=VkuLU)7jj-QJzhK-I~ep@~lqfY^khG&Soa(v~qSnQ*v9+rV6>mlE*I3
zXBQSrW+8tfQ%vQjr=6wj%tAURCi56uu>IO(E<ZUZi~01FF_k~DkV8SsE==T4%3@|J
zFH5HuCJp*dDxE7!Rd+g<o^hdhQ-#_5LZ;+8p3g1LXXxc_yGSoG?eb#5c~fyRKb6rZ
z&@cRoa(YJMUrA2n^K%9rFaUE}p_pALJ15ignPOTJ3yAx<DQC8v&SfXv<;=-)YBocn
zi%XSHWT(orF5H`0NaZrqWsg;y%q)~MMYnaLBpt6+zHzZs&Q70_)E7O!Se`;fXLf;p
zwBy;SOkT^*r)M&*`E-FMWG+*5rl;s3iMc7u%v84QEtNBc)I@r6?nJsc<(*DrRH|o2
zwIB<*^eL^7#-w5P@&$c5U!>|DRlRzm-ejL>nHw{cWe?`@crkBv##=p6J#f=}rY5t+
z$y~;x=CgXDX1#i%7J_}^ziBap{^E7kWA5z2blxtzCX4w}X*QiLmc&GQ!Idr+^C#38
zx~-!6s9}{C3-*1QQw>iQGtSJ(0{DCbta+iBDV0K*lasmhe7fdyawa>C)sjh1W8D@r
zB6BKZ;$NzS^*$S^tzRx?(+e}XjD}%b$ap5xxy-^;x=5?dS;SZJ^E$pWPm_h|S;&-K
z)uCA|tPUBqO)qB3Co&mK(rms^$S%yJCILXsX{;fv2kR%5FJu<XNpylHu86PEVoTx4
zVqVN;PDwyTiTXv~E13j*so8XH+APm5&QFvv@lMn%%${;C78Ic5GV}QbO~HXj9aE*7
z7HNnU0Z5Z`?n%H<woEOV62($U%uY=i6N|arY`(bQp3DI3r?Zpkawaf~uBHlkthAIG
zeSggbTHW57^Tk5#UFv(#nk#Fn)l7!gU9n!d?$Tmm{X=ScXL9+8jPpb>vj7BCPM79N
zPM{sYlQ~h$W~L|8rHr*2N;E$j;iVD)YGIDB$l{a+%ut#WlZ#~xWZ{%qNEb3#v)O_y
zrH^Nv*3d`{d`VXrWie;{=5v6oVs<W5o-O7VXJ*YsfMpTy&7ctzSR0u6?4(vME>6z5
zFyNU}sflbZ=fbdN$|-8OVHL4htpW|1+bXKQV+{dEEtF&_Uo4w+P><=Vv{*1Q3&%4#
zEDnh;=d~HMHb>Z}te3Lo3^0O$=`Ut-xikP9plbr_%$6~c6FQASYJSR%tL52z3H{C(
zrNwNS#!61$5$7ZjV<uzZW`S^-nV!dk>4nLRb3QW#IoUl;FT-1I%mC$OGDTz7UPTt%
zTf-JqP=Z!3VnFOECb+3yv8TB95>0XKISrJ{x}wI%Dyjz!t4zRdKLLQ6%9Q4Sz?`{s
zfqv9f01ERM`;6<R#eCUnhubPz<BUEoEC6*{OHnJ$qpmg${IVeCGqd^(0ImQ^16Z5L
z11Nk%OHvAPWdJG$h5`63ox}Q>%9zDWA$JNZE$0I;S?EQrVF?6Qa8s4k1aQRUEP)$V
zp(G^duE8$u(jr!1X|k9tVAdBWtdbKjk6H5+7H_^816asrCV}>|^im>dfwiKAudui*
zq!c7vmI5IHc3I4pX3@_gpgdC!S8-Ae1V+xfrp70D*2Trb*^kmBIjK+iqRT=e1ZoOt
zlz>59SW($RDO*a-t`(2FfLqqqO!`!nB3QJ-T0n#>C+F;1F5p4C=utS`J|SF-6<!Kj
zuwy-`K*hiA%3>k3?p$@w%q$l3DdI0&g**UB72Q*LfKAc5T*P#M2%v^>iW)#wi)ulu
zYbQXis6f0<#-IcB-LHT&oh!_yRZF}z=Zl4abvBO=S}^Uay#NqUrwd?EirGo4C+n^(
z7A)jmN-Y-L3eA^PE$1}gK9`Yn5T(ThIiJrj=){?2k7vZh;>`LXB7kyD<$>xIm3Ez&
z&17;QG}$6>1xO5a%Udd>C(-@c#d0~9@mFz9bxIZ&@MdTO%cp!Z#q`voO;3S*fGuVg
z!JCNb^hvCQY;Fn*5PTmBqL4lzCl@Ec$Kg-{5u7{)E<s>+z+;`v$}+Tq##9=>i#2bJ
zX<=&GRD*jWUz~EO5@05i^Q)rb6cr`1ZYi$FV@-zDd+U07aVnd)ii&-*Ua8<Vmz~al
zj4jM~Y<O76mnUc4iX4D91)bMt!G-0Er*vW?QPC_xXN=CLW=(53V%`I*C3}Q`k>@9z
z(~D(bW>GGma!q6x@{^>0EP?4-oG}+NCosf-czFVJ6{H|Xckvw;Az}-dK}EoVxQQ8=
z0>Gm(+C^k{qPSR^^-g4q<=H8Mp!8e@tOjukpfYKjX#lRUFA{ZfmGd)%f`Q=8YH>lI
z$XZh{u?R5A<x80<ysSXX5jyGy)|ktnEm#jGCaJ7=bpkH>4)I}x0Ay)4TW~AVQp$jb
zD1+*u8|uBFG?>zI>UcJD!c;=SL?#UuHUl;vs}-~rOMP;&c*>2QE|g}#PGySznlizZ
zM^(qS2>9IelwEdNH|UCW8DGoKWxT42RZbmWcQ)%>$SeYHyR0wezz{-&DPk#`ssqHk
zx>QLqt70NEMRSl{Z~`HpNT2ddq|12xRB9T0QLK6bP5_vKcq!Z~t=1uC%wMfz-}P3{
zGxLS=DK9WV2}qq-DUi}^3PS;a_v9yt$xh9H!6^9blf?yfiV@9D&YenOl`3&)A%j;c
z3Y{tu>i5s)7mJppMjT<;w{}kL@vfa>tj*OkQ?YDBAY2ynMk~|e<4Tj+5*k%<s~frO
z%^-zVrBVU)Jyw0I3--eqpblO>?yb@ywQhW?XA0A=ovNW;J5{LPfUpB`20%w54(PN=
zzqAlb0wvH>#rCS@p~RP}=s;3Tm7=UN*AwX(f6Yk=R8XG<WI?bC*qAJxOQk0#u^zMu
zK+9B6VT=^G3Pq0r4>rqe35q&MIheXk1IQ1M18|`dZ!-insnRL%SM#NI;@812TVw*F
zu!R>>YOW!R5Mh>6kUG57t=0Rk9N_ABmNr_{qyVvCNw4Bx5(+%&sVS0WQY4P9o&YST
zEHJbXnUS4>+%Pqh(NUnAfijqYd5F<iYia=}YA>u`#OvzP!U@;bwHI@+_L^GIPK+{S
zcd*Tn`3w0eFqUQi35+NDG!G0vpS?M=dJZiDo%`(j=n>FH##9^)=taRSE#yyt=R)@Z
zvkRpxFi`=7&9Ki(1~I_21Wbh|sbr7}KwYARa3T#<?oq=FA(}3`)k$_i)g_$)6$IYu
zRHUOsyv8Ixq^@QbbYeYF4(IZiSPSRjRN=j|uMt&^oK?@_qt3brI&TT3)(e$*Vv^*c
zxJ-}win^GZtvxv&UHiUGstEm_dzBgzJEyK{O8A`1sxep);A63b7v`w9b>JFnuGowf
zZg@a?0q!%3)d?vvN(}{xm-Jx3x@5_lY7A#G^S)dL5{jxvmps<#Vu4Of5<Hcl>m&FE
z;)W`NZun~WTAYHU5F>BhS(T~i)NM<$B&!<*$VvdrvZk1E7YI`(ryAz6<N@_OBxBMg
z5fIRu37vvMp=c<?kAlZuk%}OCh|5&aMzyOGmn#G9mNG!SIRIHM2Ru($W%b-Mkw1aq
zoKZJP>s2ZdPfIWhUYrC1>xASAQWD_C9ID%O<`$Id$hr=u3F5b^0zFA)!LD8;ebf|0
zJz^KU)A{_`$IY31Zd!fWJxeVAsZ;^NsCm<3b_xPMm>YXWiHLdB$fN*Y3)zw%*ewTX
zr`jtMg-mfKn<+tK1Rgn^of1&CY512Z1y{xF6l6mnI!K|5MUrj{rA1Iy|LT&qWG3I*
zISJI}R2C`{a2zEuwUE|`^FHNO#}r_`49aWqarV0dim9_tXtuz@6-m*To$^$rRk{rN
zXNj&r!}H+1+&1!~dtM@%&|q4vbrz_1Wvu{2UJBC`S5ZCiDlxtB^IW6XxC)??nW;rQ
z0sT$Z(%+E6OfSvnX%_Vo%oYG8y0z*`VAWR<uRNYj=b*z&=Sn6tZ5dGD60{gfSE!v#
z71O7nWIU-rf>s{sb^to%lDB%Iv{Kq+ei4%7RDJ>a7&(<cp0UXAEEGuia!Ao+`vi(e
z@Bx<6rg~|yG_}4CFlDBw(PJe=^}*a`a-^8@7Scrk3{Wmc<)o*O$rk{JAScCBu0nQZ
z2HK7E!kn|1otS`f2@FdaDuqmDiWa{lWb0C5bqXLg2PVIe@hZ(oickisc&xMe{BfMP
z6>n~_zAikFNhwCgSA|RKj(tk}-9mb?Y_V&A53nw(BA|A1&VprV$Sl5&6k8s3cN)4O
z>ZCfcMVE|KiJr4wp%@ga2#S7V+U9N*I<YRRS+G6=Cc-XctrtQ2nV$&(h)8c@ab-#e
z5?+5vA!HpaE%Cf2k#aTb{s~fV6X8siiI!?O&(9MhpPN$zBD7Wn*kW!-gE6~EYWPWT
zVZbva7K449%9bWc`*1>|!-52iW&m|)(=-?sy9930P}hJ}twJe#(xt8_j=;KBK9PrP
zoG+#nN}MuPnOG5L2E0J7q)&sbM?)mECo{%Ox&(|fU(nU`WlEkI2qlDX%UEEc+LM%e
z9Qt`^&GQ9RG3T-;vcQqWDU+CU^@M-5WL1YMY98WPWIc(n7KeXL<CZ!B%~<%XbAn&D
zbxkc9yS^&ZJrgLx`ic(pkO8xg-y#7uID;bT>ml0ufdCYPPAIIHo+m*z1Fa2~KQM<@
z1okWX)DbIT9)e$HDqx*LQIfrx3`TPHeMlZ4K<S*b1fm3N1ss$)F;yht8q!xDvH@*0
zl(f<uaJAdUF9dR$#Vn~KHQWh!$fV~<;K~!@Go8ulWZMFub(Vppie>!-RuDSk#4q7J
z&~dQWq$Ge~qovEBpjw)g|0eAYDDmGjk-0gGd4pJT91244Kv<2CJaveR^ikmYg@rUI
znys&~L^SB6C+EuGk9{z-nZ)zp7i{Gs&|?O?JN;mifhtIkMQ;jCWoJm?m{QakgIbu?
zrm{ERd@3+iOivT5OhZZ99ywK9ocGcp1vVQ<D!t&gS0BB|tLOwi3`StmJ|i}X@C}rg
zz+E8WU=yrzcAm->p~)^B&jUEZs*-&I)JqB>=+f|DEjjS1D}>+DWe@`EZ5H1{3ZWb+
z7{K#Dmxo&*1w}QFxP`%+hLAa%fii=jQo($1-PRg)!=tp@sWi~lWZGw+Sn@>4WuKO^
zX?>;$zI8Gq@w;HqfgUzh0h0E-f3=h<od68F)wv=FC94cp01GUru3Ke7Dn)#RUPdCM
zT~t@CXUbRzix~hiYFK4bdf+vI+DnA-t(H)UT2e@@t$(jNuP%Qdsa6yxr`DCyw7^2k
zJqtcasjo9deHM^eUYyYIo5^W6lE5kFAesVY5L-pPRVDhGMf0>=8VY)sI;sjDt7tXW
zzE0IWP{_;xu!*jL*Q|1)Q)^7A;v$_Ef2x6jfNC5n;?x9i{9J%aMJyCrrO?%s3?LZj
z@D|FD?~Al8Q-ElL-7rgcLp34n(^{s*XOf694N`GR2^$O92@qK&gD8~YRVpZw6tc(D
zIlpx_1-*2U)}5zzP3k3Z;giKv2K~}>0fQ**UFvvx!CYOdHbJHVbC>d1-6?=jCMN*#
zdI>v4U=YpH|LfvxvfH+yDBQ#%DOskZ*vS%dPA5Fg$)NjzM2ci2{*<8PY71RN_tnn3
zh>p_lK9IK4i3HFP1p@EqzI!3}01;M0Va7E*ipL}_$-H*6WH3K88iMQ_y~SI_rCgTy
z=Nj}fr1q|rp~yOew!t$2!i@0Kuqy!9YBMVq+NDF4USU5-HtZ7!X%oN^+E!a~AC-#}
zFff0Iwakt{v8sT|U%6iJgh?)-(i(-VVr{9F;7FP!d_m?UY_rBlbRm`+qq9=`Ai7QR
z3`|2_?8K<)E9C~F#7K)odbRumVd<GiI^W8!T?f&D2$dJKZ$wPvYN9iwjSp<Si7iP-
zY00WCSc{%o890RWt+nlrR9{CVB-pYF&6rn<3@KUFQfDK93+&{Mh;WQWg_)2P#zr6<
zCM4BU&RqKUE?;1oRkW`G7%AbJMN>LOcwZdE+Rkt?1i0<g6|<&*C&WO-lCuDW7Z`}a
zJ^nyJU|+uzH%+h13@**8r6{!YctKcE&8M3sB?m7_lfcWyyJ+uVnit=IWSeiG4;7xz
zu)}8`ogBn(d=d(E;*oRt8^jNbh6;6pD{Q;LRj4{xM)AIDHWIkp(MguAeG~N}o_6>M
z7>5;wG8R5(wNbY8l2r>CcB&WctKr?~Hzo()jl&$OY0BHFH%mE@C#CsqFi6avP=x(_
zu&q;JMAr5K2f<PJ>fC{4SCA2|?1+_^ITMG19qKwO+0gh}v$k$NgU|>zGo|c?k*5<T
z%q$=VWC%}0oro*Su-Y8TTxTh;{rgaIi|~g-K-bLR{{v{tzkW#!$mPG@<y{$LvKZ?|
zsnbYA%fLyFjTVq9me3CVO1=Vm;wEsxQAss5#_SuOykxa5r<%v8+z6f*4;WXqAVs7q
zs3S5Do<hVp%^Z!L3aA=x*S2<Wz5Ya4MEAh|Qj~G_=EO}D0w}f!?*k^otpGv_kUIlB
ztSe?HCx)i&MY=zXxDe&KG3SZpc=%ES^8j@sV*YT&kC~cbWw`Y=Ut7coH62B$)~La$
zROM2mT9?(+BU4*jU(Kg!HI2|xIpnT*&Ah@kdYJ=6i5cV4l);O4K+~~cLSRMDEr~p1
z#c>vdCbk}&$bBIO?x82(vdQd_=S^4cpbPngA&E>WZ~OKFeBkm*&dY9vi>ywAUfbVN
zz353X{<2u@>#lOzlEwbq!6N`(?Pvn>K>E_*$iWFKYIBS21?N{_@kjpdNnl0E#uvkr
za2DoFA{NCTa2`BEuRo@9gA!sWmP9FdBCw=RPyq9RkQ6_tNrRtG3*p)DBDV?7NOS88
zL5p5wQ{kUpo7s#7V&qCf;)9_SlnxmE79In7fb5{M)67g8k|*_{MnLjW4J7K~rpA)m
zq`BbP-MB)Rsx5A(FD-fPl7|yWZdM*gBx{ew=B1^gsY-kxOqafH%$5>=;zlygQ_Wi%
z-r(Q|{44fnRquDcA(q2fn&B}jQKxb3Qt#x|XM#Jf76%Jf;yZIPjJSyFq0}-nLL<Nx
z>WETsA}Q7=`DAkxCnR{StS`i)wB&$k#2mWketZ}%q;Nc+80I<6QkL+@$oRnUAr$=$
zJP=tj08`w0$ccoU+L)OWxl_yv5;RsS7m02T8qbvV`D-{^!2KwSq)KVI*FA6@?NBpS
zo-&iN^5nx0Jw51DS|fH8YgK7erjPd)P44%sD>ubI$=%j$2?4B&wf%TQGXyb3I>^sy
zG3nsC>u#a~4K?V3xWTc5Oy|H<I^e5(6UUf1{PSe8>Z?qv(LsC-*8)5FF^qbZYc=fg
z?Zq(elU;f%+iGC=j`?aBx%R!pJu5dkbH-9ByIDXz$Z~ERmO+-areToC6ru-U2M^Da
zw70X+iv!WcM|U|OWU#t~L}Wu~qY)^4DLyK%u_wj_%^PO44g@+W6^}8Y##18u>dCU8
zR0hp@Dx+Vo8CcuO+iXHi4ov;&fBo<&L-Aph;{BTsU2Dol92d*VWL*Gp9n)Zr^wtKG
zcsRzS6TuW>4`)h%rs3wCfM{Td19!Kwj_+L0i2x&c?bDo?(UqC`&%S=yz7)veF4V_p
z459t_HkX7;5OYid9*Wm+C9!tl^-G5D-}%MEJ6ihR@%lfc>fPP_!#n>aaQ-z!_<h!2
Tr_cX#?We#0{Nv~8{g?j$u?@3v

literal 0
HcmV?d00001

diff --git a/web/css/fonts/awesome5/fa-solid-900.woff b/web/css/fonts/awesome5/fa-solid-900.woff
new file mode 100644
index 0000000000000000000000000000000000000000..beec79178427adba9f767e1c1d2bd205044a85da
GIT binary patch
literal 103300
zcmZTuV|1oH*S%}owr$(S)OI_yZM#$3wr$&*+P2+(^Spn*thJMzoqe)$t{>OQO5&y<
zE)D<!002OV!2q~_EeM7?kPI;Fzux~V;^HcD|AdVH25|lXH@1vhNkUXi{2wR#&&K~B
zs6j3jelalr<E;PL|M3PQfoiM9Hiq{9xHbR){2yRfP|OIi%?+LYaghH2fcy_XKL8MO
zYY(%3U3UPGo-Y8nQG;wyC(^>y&;$Tv_WDo5_7Cis6l(hx|40Ck`G0F6{0CA{5pZ$~
z8|Qz1=8FG<*Z}|#QkoS(kge^E|LLs$>7eocaao`fDgHKw?)Cs6mw!3{!GHdsl0d&~
z4Q)*SarOWJFgySNMnhIjjBRh{<O~3E^Zyqr2mru%8J?e(<(_41U|?VZ2+Ulo5D<E-
z_Rz&v)FJ>#{{ip)7v8_w{`+$1{{Z~Y0s%St*Mk1f`d9tuYxp_6InX!J*LOOYHqzI(
z3t!yJEXmx&$jHc4$IM~?2K2jz3Kot4(>H|)|JBc5DDDnc1X3{#iFDLrxD8d3ijff*
z;N$>z>YjDA;-#3Pir;q!5v;T0^ww=!#1=ZBW~H4@mz+|<ysy<!Al_+=WMK)eH=!dz
z!UQ5U=%_AC_JB+bu4izUKpadQ5Do3V0S5+(%0OqB<&^V~_0Z*Rn7h6G+j-sQXDj=T
z$BDj|>&N$-Gt|(T$ycWvR=}J?M|I}#BpXBrEOamT!Va^S*)d%J#w5wbT<B77B?_#O
zh&E8H!2*49+a%)BrzN<!;fOY-+9<aH&YEP>oJSLmrypCB#maDpY24O+h^ja7Wxt;{
z>E%G-w)C~p8!~RU_oUE+)GvMXe)Y}hn@HiL(j8oXaP`4kug~qy$Tw~EcCjm#<6fpK
zhQ?RqHKGPMB8OOmmpli3HXK8=C>)7p*!!;LRgxAXH(Yg}rC!J+N~d1p5@onRG${hx
zL76o?YQMn(O+6S<+I<L)Wp2o<ZfzCULOhe{nAE8u-P)ENAq`?0`k_wKCWmo0WBOR^
zA#%-7kAvq3Z-Gwa2;^Sst;t&rK1IZ|4VPYGEZ(sxI_bb9DT~nfP?SqkKC$r-mrI>|
zOpIBRKAB*=cPyD%#P*MeV=8UJhiN)(D%*WhRjORW@VQyB=0!Cv&FH$}RSR@Aa^(QG
z<+27vwN~YfWnD&<(+b!{!&CNCw~H<qW$Ss(wQ9F&_<1dOSwFRoSXsPf5_aWCr9cG~
zwVIsT;u0*IOn32dg$K0|S%nz2SaHR&W%YWQ;}Uvu>2rlqvwm`gql;{|V(F5AN;P*O
zwrW&IQID#6k|N%D20QDD3d9*cw?^1`*weu~7oRM`D#;TjUhz*+;gcv{t@)|IMF_W4
z=_$g~sAsWW_3D{yc5(0AhI7w$VU%+O{jzC?Fu^?AdmDfG#Ut5P$wu>B%F27i)-rj^
zM$cr===JZP72i#Kqqv42gSf`ROR8sDo_;+GiVc}7R-QqA3-vYgOL>JnicOY9mQj}4
z#zn@oeqastW7neRTWL7My-N@FnRxDqY1bn9XDK<iq8j6LYZMxT;!Dntk$BG>U9;%5
z&E4Qm4+RNJf^Wdh?BFZl8<*f%5^s3))`2%eVSoG+B<DD>Bi7ET==w0ED@om}nElpl
z`&_a)ga|lT<`MBF0uhNEJkro88uLcdN1N2WxaL+`mw{O<_H}{cDX$E5RP0MZxxKDS
z`D@x%uN-6wioaYccIoR!)iRCbDgB4=Nmb(9Dt3vJYa^appFT;7c{sj9r{+(kk1~vD
z1g%Sv8jo^se9V2<WnEyE^Mw=5#=7NI!?T9i3Q*-jMN8~Q5&Jgj(>k5<2bVI$7BSmI
zJobTPcE!G5!h5XNuB4o@3|@I|g>3E;AAh<24)IeJ_f7J8$zKFz)l%`;rA{B^k8@wo
zIXY$i`Fg!_C+7lReTEeo-10NM@?0L}#wYab(%z*H+;Rxq@}u{<ntSQ$WenSdbwdbl
z<^Fi=LrI_49Z6jSiZv>|@?s9DnCGsu^o_N%>-}f9k9N4zU>tk6nm`CvNyY$>AXkeZ
zwO4fd0S`_HxjDd-B7}J!bgVELZXh&e(3c{tSRDeiA;qOX@GH)t2)=b#bsd<aA&bc%
z`B-4gEl`mlF|EHF5zz6Vb9fkM8gwEdxLzQoJJN^<X|z8iCj1^FYECetJ1~BT#I6uz
z2){jsBH<%<w>VFk92r{DqU*Zw?7Z2!D9-6`Et$A^Y0vPKMP^U`lsTi0)aw!+3-al_
za%b+CQoFg|j~?%c#Yu`7SJEJ51WKaF;@?s;37*Ol-}12u#0_!QB-&E+<3yQK>}#S8
zW8w_~RU}s9*bR~1!V6>24O!l@De)=|NkxB#Nz-YGZ{kBp<EKa*OrX;xjm9cTGeqO-
zO<=L)^au@$7~bGK!g(cq<%Fdm&qO>E4IBl|#5@zcBoW&)ohjUq3DeqcU8)>#Y=<!%
zSZoJM?b-MP5%wH)LS^pM+b}Wqgu8HV`oK5|PWG-iF-~?FZq2%&%=cuwkV_AG_f0v`
z82WGaz&L?=gHHC+-NAEW4;*lPK@^5-_aZpaB@R;WqTG4$qa=1Ac~KGiLGFIF3HYLh
z?QXyNdK178*vc{uY}EyD$3r+Q#r8<3E7ElMYblag3O<#=XNxzVf^vseD4}sj#^y;o
zL#pOEszg2)WS0Ss3a>11)&rU6wH~pwf|%zln?T75+bQvf^H=9lACa+RLi6)27_ozW
z!|+7{YAS17SCQ01tkN%RR;^dH1-_we-8z5Xu5aDG>|e12ST4+8KWx887~Hf!euQ-4
zf9^ke0l6Zb{{PY-(7!wn?4H%t4V8r};X}E(tp3Et$G6D0=yY|7%QL!Nn4O)z+>Bja
zlYC?hmq3Rjp|{aM7Hxb8!Z^~0jjITWV3LW6QbUHgf6F3Dgd2)saK(v0K@=<1cMD8J
z4CNuOw;k0B!N3G+*6XM0GW$4HWAZWj@==t1UU7cj5%;5utM#+?j?GZWHgm)oZ2Xk&
zK7}O_GGgt-W2rJR?deM%`~9`n9$v{?+ZNw$UL79wJr<Ma#@l%;j!L#)!)Fx}<8X`M
zfO|MBq{juxdcmTJ8pY|D&kN(*N;KT@J!ah)l9Nojta6fad|Z*zJmZn`C$eWk#M_)r
zmzqsxKNbE9=7CTu3K|!|)H^06{_q}GJ(9<e6r)7RgCZe{)J@qBRxHUpqwy&4GB4LC
zs~?^}_5{7Q?c-YFCZ~?|voR9^ujB0x=sXsz9jg_v-los+KJG}^7){ytJHyKC9q>CS
zMu;G~M=`7R^edy~G|A&*6YqCh$^t$?YN>?&FW0PltGVuFuaVq^rqYp{a`ffM0~M9i
z#M}4OH@Z^?dZBj{vos2ib_Wk^!}cy1A%q)YNyW<ZYY5!IE-tD=Vmm)CQVLQ#cDNIu
z$8?Lw9!`CB1zv;B^X+b}0pHzV&EtcjUMc-5qSskN`e_G}syFzY2m~St`eT?mDih2D
z7CO{II{H@nNzQCl3MWk(<*v3iah#8gNiAb}@`LDR`bOG>+6iU}noZW$Y@WXEgw7N%
zxEJv2t4*(bxVe7DvV$@vm_-xFqizakUlL*ID6Wn9Dfy(A9A9qq^-YFsikJ`N9<kZq
zCFNA&%coTVg|9?Q<VrNVu%ASe?h~iq+3TeJk>xHkmL<lR@NenZTIV6$J9!bdP;CnI
zI3o>rT<1MrgW9nuhFLR0el?DUwwUkE7>`ETaLBAd@XGZ98W@ra&->U30x8>n3(m2B
zQ#w3<;M48#^$RWA(rU3atL~pUaWgoJMCj4tec0+c>BMO7>h<f+Zq0PZc=;b(YScy+
zQP&t37;vs&m$}X}z4d^)=ViO^1}zBk+zGa^{`uyRyAoG+v+wbDc_ZJ4pjeHXiO`7u
zd@b#kT(=Ma^Yr3qIdT3D^cBQ&_KbK9e_){ue$&WR$}O5GIN`hE>-VVo;74p<f5^G)
zp_r80W|W{0QXOpu_w=soy$twn>Nelbr2rDRgn)C~^~w7I-sW)Y+<R~aFaE;6^A=c`
z61^FA+S-0oX_Y#S*AwBn$|2xekh|AlNXf>-4SeoRcFJ2$zQ3ez&@4cAFpvq_dSU5}
za)265`ZY_#bh|s_H|p?|$Qdhvid-7)-}=A-J#Oxk4O4hAXQP93@AyRmyol$Wa@h{j
z{`1;aG18pm`Pr7Suutvr9I`rtaub#>o9{(m+z#G~LM;@l<e79G+>OMI7yIjV8n%C-
z_0CKJy<9pyNAnI#h2=OJ_p@s>*Oqf2_CO*<o{lbCScfp3Y4vSpH^LQ{M<Fp-CV=}~
zCnEFleC+&r;ruZi$Pc3iX6ZoKWtXe#+vO2>$uMa{T0t#sZ+HOJd4{(j%t~jZ1kq{#
zDc#JtMJHXjbB=f5YmzW@X6g7^p#J2Uue>}9JCRmtNR7Ebx7Tk6j)aRgG6l7BWy#UR
zHy~(R)qQ#f<%MCh$L(?7Lp^0F8aX*SUzn`rCiDV91)j91EJ3OGCgE_l5sk_L%HLF8
zn9u7X-U{wo4`eUFkG-L>Zrd~d)~&u`AKM|NgJ0#sbJliWTlEgxBe1b*-*g|$Ty8kq
z>G1+L=B8?{4;tps0<gVkyrt!b%NN%(a<%)6{0cRRX@G<^Xg`T&A>J;Wg9ebBXsm<R
z2He3GnpHAwSa!^<x5?z#@<#8<5DdK&R3K7KPPljEwPa`!@s&&*h3CaW4Pg2d#>R8d
zHNS|b_|-A;bu;?pma&P~r#Z*aVcTJLwG7)Q664#HDKj%8OD(J_8x2~?$)ZOkE|MZx
zEWUGJW_KFiOeL_-7jJEFl#U^hy^NHDvhc{7aZNo3-u!mw5gy#pR}xkk8ddRzuH5~d
zh!4u}-a|<$CWZV>A^NQ#lr&sK_&q=yTr;we6+90*EAR<bWqHrs6&4@QhURAkLy8hg
zwg;8tC;TULTz&TRT?~ROx_HMRFQwrdwJKs15R0?lM%iZ%s+eN%tsoLJq4#C@d&yjj
z!2SLEBe#bD5B<o7Iy4^c2FX-RG;T{_p8%+r)ireKS)>IB%xU1=PZ;O}kU}%Jh%1i!
zo-fS8rUW}^WVbeFb~%*4H!Th(Xnu-{?e80)ay`XM2wa8EbZMfLy%SLwPvL@ggH~T8
zfEBUtM)Uj>NNTd@)?Mwb72MrIZ45d~Z7ZZcR>2D<a4V-JvMS<ZdiPEQ(`<vm{mc1k
z4N6L>2+CVcxhSKG(h-gq)z;`$G#cmR91!Km9+KI2x98AM$$o~v0Oq#!Iz^u#`utp7
z^72Wa#VR3^@m^;=j!>y}S{7lp%UBr?_OqLEtKmKwl;II)h!yI><T9U8&X*AU_=gt?
zLjB~CDgix<ZtoWT!7O3qgQSl0(Fy0B3%(K2lM4_y2tJaCvYKqaRo!}y<|_}x$a`Xv
zlsWt-BtE~>@kCo<JBcURYcbvqbI%Kk)7S3rYgy4ak*Rm_mY(4&nx0>z#2f(+CGK|X
z%hLHZDlRMY7N@pchs$6FJ6KD*vh`H;lr0d!J5;)-0usa)rhqb+`~Fb>l%51CSv_I+
z@#$ew<4J4?ge^9I+eQGAxRu`iZz!4eaukFtNii@<s&QdTq<I7N?lT~_B_FVay0FAK
zCY%F!5jv@W$0Zn*WL4BgANv-jIEyV%Wt)z6k!mPzC5LRf$4Y+4x&*OP8AXi2$|bou
zf16Q}IyOnp`wR6%Za>oths4nMrwjE}TRiljabxv7f#3}60CZjUQem3;WH&(??%o}^
zWeGi|KZqj$h+S3;`B3PoN!?8%PR9G~k{t6)-jiuQkKHxsUDo=C*Ljv~Q)Vzk1IzT8
zQka^JpBG`oAVWVcNx5F4zj)kIi+HeY1jQ5&d;T~>1X40>3xwN$2@L=Su5b<h1~R+{
zC%F#D>fJ{b#r1f`C(JY0P(h7t7ZsJRbo6GUBMng|HPp`dyzqRWPH6J3V>l>(3pDze
zeqe+5>^c~q;iI{dLSmPnLmH2tbxA0GJv5e>0cB}Q0%Qq~5wb*k69(r`<4Dde=J~`8
zr&`5Akv)PNm~vKG3nkAGtgTz-bd#FMqu&)#SFL0SQ2Am?5WD<NwGn<tj^E@I)!7(v
z`)x?rPAW9^9olZI0FpgVk28>w?hfgHfxy=H>AP;&q~3vH|7D994p;6>pBM6t<#Z;%
z2*9h9Djj4^pRYpRnQzqmq7K!`<2Vmp=CZ<iS1oY`Cp2Ux7Z7<_u#3v{f!jLjTTc&U
zY3G8OoA=iD-H9YiWExf?V?zfS6>@tzvBN2BRuV}dX)%$-O27l^3c7Ao7~Fo+q--3R
zc9O|V);>?>nPus-#`hNq2Q~;8>KBqZ*yQXnK${<k?e=n`jHR!5J6l?zt0?1H9#>ip
zO%!Yn8`vY#Mq`t}>b9+;1Mzvfp3vTYNQtD?j78n?P%`}(?>f|2K$)zSok%EHZ(w3(
zVq-EIa}`ZUoR-6uchF7ysRUpd`$r6B!O`SH`Y_Ho@F?-AMJ(e~dsh9mL^Uq!A0UGi
zse=@{@6`y{S(o-Qh0B6>P^53ovSMg;;(FzgFj~K2d+nDw*B_^=JyLUQ$2E63qwT+6
ztV7qtD>1bD-Cy1sb<iSu-n;ZuRw2HO#D*tVd8kjF5u4y=$tp)&U{Tz7KlvH>;TtTI
zuw6JAlZWsvb#>*3b%GQ7Mz{DGsu?osvn*SZ;c<^64-Tvv9z4o|g}gRguGYmX@loz$
z&GkW82KrY9%xr_zh!f^rz!$2ii^78G6E@;qmimc8TN2H87vuELK0#jbH@m1exsTGj
zlrr9oHqJM`W-wBEkX9f6aT{OO`p#qV-(zR$&drHMC#>r7z&zlwI}I1xnn-k@0*%C8
zGPfUJBFJn%$Tio~vVbQ|-Fd^GAm^*|tn#h%u?CWx(rfP2$u+9Xd2OUK0znO<t;SMd
z37|f7E1O5ytvajHPuICSBBx66_4zHJ&bh?azZY;BXh4L);{0lsbFW6Sk9%Lu&QNnm
zJWHA|YyQbe3$BoBL@v@cwIaoYW^l=Pi_Wq`$qN8>hD327az|=iEx5Hm^h<9HlanWe
zB`qBm2}#aXYunktk}j~87-udwuAm<<YxQ9tyWHaPIeT0dq<kN-*hZ8U-DFvRVhZJt
zAHNSiUI-Xw>1Sr>3$#vf`IPdF?<>khr@W6f?>&FQ#x69u{nqptp}G%pL%I_Sm4}}C
zIlb_esMB=I)e*(!Dc6rk@#Q(U{(QI+Rje$P-9Deh%AHV-$!EKEo=9+1=KopuIGyUA
zLr^Lk^-+u?3N0M$i3*a?D8kGGAFm^c7orjmhariemogVULz}i+$ol=QzvEd?`}vgo
zxHNNwtp2TPy*hU38!2Ca>w~+^?YPA(`!m!2sq&4=(>s&TzLYQd8+6XZ(D(r4NpLPj
zS7s4k5Bsr@MKNqfE3aIy(dYe%%NOD5AqWJ~hN&TcNRmkqwz7~P7eGCT$Qigbgb5Ef
zJf%uCBb#-er4GekN;8pQ5h)W{uxi;4(0Wol*EvZSOt#`en7+<(xlJIYGd$5*J!n3#
z>uzt%$E%0CvUqF_nlH6bcHC87N9}ij)N@*?9MFxp_Lkl}T88bmtfPi67bqsxDD_+x
zF!cZpo$<5XwuE$NwOkLSkLh5Ol);7U{JJ&5g9{b`EfryQ;1RfZ6OgS~%-@Pu^ZGUw
zqfT7i1zi4pf>0ahUVX4r+v&fD7<>lMakV8#f?iz3uyuwK0%o7MC|f<66>(%#6Ckr(
zYEJy5zHq$a-w{Hq^~6BXeqIgySbo~|$bu>zidPpe0`zv8dO%)<zK%j?S9?z$Al}`N
zhP#q{zj?C=%)w7jf*$Vz>Ua=S^onL7b{3ac_;Z6O<!VG;M3=TV{~f^iU&i$KHJ|Wx
zI=qn1Smr$i>z&1=!XqAX3dV$WI6G?{^=BYt*+2E?Si%+cI%p=O)F0$^2PIzRzGwTL
zb_+DXdQCB3GFf#nV_~*#i^6#73wxPpVMsUrm~JG7wisBTSawA}*OgEfY4*O|uP+uN
zgg|*;Iw*DC79JjG!!?Npu!C2B_EDn_wiYDYg8DO<^6ghS$%_g+B7u{5af0ScpmN%x
z+Q^6Xy@?m&iXW~j=)JzG;KzO?S{#)XWaa!y5>tbvL8dz%zxZ*O@H=~W>lNRVPd(VA
zYVZFGMh-MUAa^N?_V~x%@+k>%0j4|~D$5c*E|zsa#Kh!msk~US0nsiRm(KFbc@}Y$
zjp{{<zKK$_P%-d0BFe7)XupzjywPWJu=SNS%Jh+Q7u2KgS0ivTwZ+uTL-ldApa7W=
z0LfVXlcDNZ^m_<|;yw`$Mxn!m^M0|SoIX!sT5p3_qv!N+JZd7!Y1Hf>n_X1lL@Kfz
z4B<s1=uYbZ)?ZS4&VmE~7^rk>m_z$<D6}xcAGc;s*GR}3fE-;YiO=WGHnP(xzG7PB
zgYc766K4R+MB+Kqrcfnqn41&W5J{^Jc9sjcd{@1X2;I%J>ItJGF-JY)5F0%8Rzt36
zsPYc>1vbV^sW38+iIMX9vNMq7A0IZ5C5~QPx;IBVdT5HtxHD-}ffj(mhu|~9G#4O<
z<jzK;z<%Gn!Lioy19v*Z3&vhLJ(^FA&&^a~!-q@7Cwt?A_6v52mB$_#BnYLwA(1zS
zyZ@Toh<NY~nrE}v=1ym$Yhj9)r4i~i#Iz!vY<c<ArK_xdPp<|C+2-|z<%`V;<b|>g
zCrf|sjl!2A<*vL=@x08PE_sVipUGRcUU)Q|AsFbnXY!P{w^g?es7_Ii;}I#GnF|rd
zJ>-jE!6j{3{_G#)%tGL4baEP`Mo^xcvs{JPfqzCAbk?-8?~C(go)h}nx<FZicSeMR
zji%WBm6Q}YjvuM%nzX|-^_sxj>L5CwogEe=BK>d$|NAEk=J3W`jxwF5Un*>SmFs+(
zdnwx`*zbX0&fHJ>gBH#PLGfW+nfl4#gIEis$|)o-5pr{;e9z>vipwk~hAeEu23aoa
zUCnK}VP&)0nRnqrK$z@NXh7X;%^jE%|Cv$S8<>YP7U_EzqCY}p7wRZe!QecI@*Z9!
zp}$KyNng4xQ6)IcAz^-wJpJq2EFJ8n$H@Ogq^wUj0$W<_wha0SEAGK*y=^2dDEH--
zQ@{>E6l?YI#O~$Z?ID;Fs2fJJ@$*^~+M1T(^{p$FDREZ2S30UL<S!R7!k~pnqnnVM
zFoOG2r;nkKQblBkS1U9^F~ebFIlI?M2>7dE9Xcn%EXI3OY$1k)*$bZ;rh|x|MK3(U
zK~XGq6MnY7m+Y!;_E6%eRM6#Fw>OkPc_s_}oNLpu2lY3(apDcKJ!SnO#kQ9iy*?{_
zr5M@;5d|t1v_t_C#5*lpmey4A;+f-m<p2#pOU6*}ifv;_B*V<a2FX>5%`*9yF^`^P
zViWGFel25u>PI)<KH3Gi8CW{f_SCI;u$Ck_j1<bV{9m-O-okGS^u)vEIOGwBLCL<2
z;C`1`c43$bN106};58B7gR#SU3Pi>b>YS+oUP})n7|lZ?NRPWe12R^`I_5hf&>8IP
z7f&>6)eUXFXQ-ECA9hQPhzoX`v%vake~V+VN6K2PfQjFMT_;+8o%FG|{Kk9nIRxYH
z9hacJ6~8a%n=8%Vg+?qz6qjR)(vp0Bzxg#;YK}zhb{%GJ-hKI`Ypu!Pwqnk5D`=5o
z>_}Gky=w4<@OH72N=mdLr9Lw<O+3_Ta<w=dtNR!FT6j>!`8dqYkhD$?;Po+pry{-w
z-!VML_aR|lGS6(SAUI6nd?~zTQ_mdI!>u8D5|%{A3@et$p<f3J^}O)|ZN96hxDtxT
zvRFowFZkE~Wc-*Upy5E;Z;kb*H|SISw}8u$-Crhw=#Ei3q{7cz59rqqn8(~5g`E?m
zcf0``F@C6FRNTL7G%6XQ7D&g)o<d49*y(g$=9_;o7o(alr-o%3u|Vz=w+FQ-y;0A`
z>z~^UsmDoBP+$tB(C9)$G88^c&D+81j$vEF4v67$v(KPjlFaz-11L@x?S1r0Deixb
z#)bvC4+t>*>KtW+Pds2V-z-eu<+ARYy*2u2#tET+Y`}5J@$@Xxsg*2KqSByf5GU~|
zkYdEGSu}25c+Q)BD|VT2xsV+!!WR9TFic$Y!M^8X@W<)9E;rB=B{(J$2-+$YbA@d5
zF_=+pJl=N%{z&*aJ?G`EAM&`E*~HvH-7BY052p-)l>wZm4z_IYI024x_$QDdGih7e
zJ#-ONl<;X?j1ar!l~=RKkTU@Dh~rX*7D)aHL^Z*BT*+5NutaY~j`TBhUog6;=Y+3Y
zU1Rj?#x~WuIZyh2Z)ZjB*U!~p1E`R8$K!%6uQ#%H{azR5dA4zvo1Th}BR8v-ti>Qt
z6Z~S~nI+gRBbba0)Ca^-<0GLKPxVEqX|&H~=EA<|U!KyoY7_Bg92ZWv31r?p^(!Gg
zhxACyA>Dx~3fxccY{oaaA<%Y6W$+VGTR3na2dk!&bb|!Ej5#xjhF@ooDy}AK7oP`c
z!`>=!=hr)8Ivhr#j^oLy8+svzA~rmt<8(5N&h_zYn`4r;u0sykza{aBtQ~lj3miA}
zfx2Suvd;|ZQ)%oA1|ya;FuFT-nKO;2(a)MLKlC|XDx3#X5}<UIovtQ#y#13NylM{=
z=;-A1Q~p>#hJ?uMe3Pl>P|L|;b)>KwEj}~@8$^f6d7LdhmMt6&^Gek#mqw*9k8q%v
zWg<tszPd$ex1id6jM>ofX-gMRx>}B<7*kdI<Bw0tPU$eqX-uTrvPF-@JGUpr9xA5~
z{GCzOcyRC$76}Jr@s8W$6H_yZiDDaaWJefNvr3c*MP<7wf~dI{kKdpM*N5phA2h3*
zgrC45{J4+q4Z7j+cNKDTxUH$p*JVXpev-A^F1RG7vYkG3`0;cFk$d7RTUQ6evK?rI
z{ym!BlDWI(c0<y%qf4!Ok&?@x<Cv7`$x<CgsU^<hf;Mb#T5l7skOmdf(c)vavt)Eq
z<U!5Aqw7B3V-jNAQin-q?@&X>m5LwI|I9zpj9}Md${<#W!ed3a31_Pg;uX|N<|-$T
zwp^tXdio`jn(B()D&$E;1#^0la{|scuub7A+6oVM!)cwVO$MdKrY^L{7!tRl4|uge
zS}y@P6l{h)m9<;*zqaccd9}%RE=im$5}D0(D&c8cN)oM35v=r2_BAx9&wq-QFvl!>
zC0>KAZ@okHQ7E2DD|h+p?tU(E(f|XqwxLf~4ih<H$HhdCB#3?F81BEY@ESn}Db>)H
zCtWM9V_I^bhCC2wn+SK5qKzuD{alte7I=@@q<VJGq1v~9&sf>w_|Z1mzKR@cv@N11
zbFycxrf0^xwe%3v!`HLDaka{Omh7sC?RV4#BusVD#3D~82;1^!*#rO2`ON~VEauP5
z!z<DodYv1&{kRTyZLh>0G)~>|m9A_SuEJv3QNno#+07j2XK8|Yp(u$~l_5XnGGPaW
zjHhcS>9rlJqh_~LkYQH}xIs}5gLG|(2r~Xg<2$mPI~ssTro&KmSY)F`jZQ=W$O7!{
zrxG&94^3(*AvM(4DeP)77Gh_>$k@t0$F9G?>)(L^pYwx`&&zNZ<gGj@iJe%bn}BDl
zE`~eQXv<Kmo^wbX!YA9|17#n=VDN(7i<7vl%6Z~oB$AqiEcwEZN=p?_po!rh(Oh@T
z283MLQBW-1km4{nY{Gg-UC)!u>n_-RQr<>m@IokBx)9^~+XO<G&|o<1HV7G%^Zo3N
z)*TPQbzu$4#>B>3iC0R1w&Mm+%cjJ-^{>APxGR^@CH|K`jYwPKJRCxk5cfv*j9go5
z>GA<9y_;#PIdYA_S*jX8Tt8;c1XcNbL4Sn`Pw%MADd}Pc))OG~FGat?gCS@~&sjb%
z?1DG#h5&#e`=>aS;XuQm2s1UJvV)liAEC|M=R*hLfU7?k2l{;}Ic&`Y(TT0{yqJCc
zCOO|Lz?WdZ=70mo6ot(;1tubOa}m=B2SM-pyU5nFZ^kK$GP|-S6^=;!(117^b1O=-
z6otDYeYY4xAg**&6hfnH`EST+X@qjxAv+SFz0M{~RLna7(It3i2j@%`Sr-v(ijf<Z
znN|DrHeFZqYcI;4?y=DzS#cf>VZa8$zop3i-Dn9W(vIBlhu-W@l71WQ3z^F{I$`F)
zyAX`yx)vgAp){a?I~*He_u_+7iaf)`_Dkum^Bi#Dg(5?=MLz}De~WE*23?V*A$JTJ
zQ&TRq)YLv4$r1mgIMP^xb{S<wxc&L-_Sne!?3Vp=%oSa05{4L3$36RaR%o)TLdXr5
z+7~(blE|t{oj%3>S|F<9h#QJ^Re}EmDxQIVjYr`xxfs-cnD(m>7t)Tho_dFBvW%|s
z6$3ceCzVz}7>pJE7f?(WR5OW-O!5a+DHocRD5aTZ4`k&)5ihZuUS1%<O+g?*BXwvG
z<FX^Pn`sjM3#sg>Z-ftO(P+|+7yuo5?0tWb*KOZmNZO#=#8Q<SDB4duyQj<bc1V+&
zJ-8}}BDhI8WLdK0qZs@9%DKe#?GY*h8XxH^=P9?^FWC?0-I(*&vwiQ#*6bJ9i%o&U
z8O(-y9=)lfKdYDW3!kP}T9s{<3R)hSzDX}~F2ooBK*d2ggpdOrZw4EF_ab!{G@3nr
z{}uT80Ki2-<ci8z_<=y%=Mq~eC?TfGus)MSjkg`g2AwV=r%G|@Z!NdbgzLW%B??^j
zrc97Cfh*Qgd)gaPBu!ehCuNv?D=RpPK2>C{tUPK6Hw8+lZv}gkLt@ga8ZL*~onz2P
z3zk*w16PwHsgkgvvkq2W>np%U53Zx0Akqw>oQ^#=6m;K<$;%k%`i+YB>O)?zR&J>g
zHS`z=9262?j{2w}3ZuTzf<6v6_~A@erO8yC7rNU`N@FDCM!Q9APS|fxqDM1Q4Cx}k
zr5OLG+(_hFEw~Hn4K0Af2aU+t6_|mxFQX+Qm;}Qg!@wI#n$>vl)YX`8D4^^VuxURW
z`~HdwL>jEo=KWGA5U{A5R5EhGvrd7c^bq<J*g{_r@)1jx2+#?aH*D&$uX57wM`|`{
z;OgITO|KDW*iklrb#?!mq=YzuHB=Vu@T~JjIr6Ni?Nn`A(cG-;nE9fZYC!B{SU=#~
zhS`xv)X9EHu~n!2!~6qKXLx>vh@SEvNibbqk}m|Uy@PVrVzDwcjz+Gg-H-i>iqDj_
zJeJC-jWCKiQOH;yi#@%Ni=l?}N7;q41)}t5^<$4;i{oP=_=~}ZJ%XyRqLiA~Pfa|m
ztD(+Rx<omFnSzS2G3;&Q+omFu8a?9{qufEBK|(sQB;SzX!f)HjP1Q7gQKL&bQSRiF
z2*!(}KUD%*&ylQq*z5?5L4I=F^;PO=CyABaq_diVt14VxgIicC!!+Go#w#&j*a1pf
zirc<iDuZNfNyNjkSSq*-2aTri@s3*haGj7TuvM!tf304s=xqZX0sxxu=O2EbUHySH
z+ep-jx7X*Q2E*VuVn(7p23n<?opd-A>TpA{UKqc>mh}mpL+#a8R1F#JQq%m~Yx8mF
zPRZLtbS%S+?#%1e7y&A^>mjlfo6mqTGMIliezoz;pu#FyU3MOthU3l$D)V}*2_!?z
zOdhMm`FYZ0ms`aB2q1Mp-43$FBY$*i$Yj@j?7f_Muxd&BbNMT!-t?n#fk#&7m-S<3
zLHCNsHvexLHtTCi{YD${xU5L&9`CGCnXL6OxhC_nK*fB?rZl4&M(g3^28{6bJHkeX
z^BM)LPNdohP14lJuuw8u$PdHSQvqonn%s^_{}_{AKnxDQ3hg*0jV15;)%-PN&MT)n
ze{YH43n<y>N8UhRW^GB+*4^bCCZQ)Qa#rTLx_)yMy&w$_dk)`xvH88|_n*BY6>OfH
z=}9#}>kyDY<WaZjNNc*|bcVyae=nNxyuU!s2N-G;K&5FWCuAV*xjYz!m+|00*e?uU
zf}oK5Nt<&fmDz=_;uW>RT^nXz`!6CzRnosL!NG<~owDzsq2}^!cCNbs%=a4>a@YQ#
z+vScta<X0&n=1b&czVxpZd)Sg>?aotG=%LB<3&`>rX>2iuO*3JQv$;-`XVE?xUO1q
zuiDqPflaN8quOgn&BDCP9=B=QrqC9CqgR->fGS^yzFx@`=JRSZm*7hulx@m^IIipy
zM|lP26i?`q3T4Y2m^IZEL<vM_bq{8y!<*|&gY(naKzwvspws1_Lee+k4i)KIp{xpR
zH6FiLwpy-FKZZzO!Kj07xJhgVjbTaSOw;6r$unhRhFB{CcjRJauap;i{Aq=}I<!5G
zv7Uesdb6?EH2Ow#T+5;U!KXebly2zgZ*S>e!kq;L#xvT&;@Md$EP-rx+(ypolJh0t
zJC<jC8_j}qL!?aXUqiob8h)-Goe3+ORuT`|Q!Cv&S<<x~uo4CO3`feuQI~)HMiN`&
zj{hceZ)43Py1rT9O^wAz$S*TXD^QgMO3~p(RE?gx<+oSHl2i6$$+)I{iEV}5^3V@2
z5<b|okditaAOVIhkAn{rPJEtoAAl?_&@BYfH|un++cvEkpGJY>D?k9ABces<AT#KF
zuBH<G{tHD17e4&{%k|%8O)BUeYof={z5pUp@xfAz9gZ$ic(m}0^}SBtm_^JgKwMbd
z$a^dYHYAh)3{e^ri;B9~!ksrMQuLSnEagC}1q_sr-Bx1e%X@}$W2Qsu_b~Gz=Fn7=
zP{<!OsBwzxKq~~bb#3F)FL|2SXh{E9owC_EEjOJ*>14R5A}I!T`e^#I)r||QR-v*D
zIChdUO71?(rgt=yc!3V~N!K_*k;-d3_|>i|-$woKG1%LCnY!#Zc4=xCY3e}TAWIuX
zIh}$%Y4#{h=RimD9=AITDPR4rw0Y|5!CMInG^eE80CcKpgZOv>U%2g0Y%)J<%Egn<
z79CG&q;T+;iTla#KCq}q_W_1>S^bpig>zv=TR)E?@1wwUJ(qrLn@jCnn8W>=8T;a1
zeW^8kj#KXtPucv36lv#@9N}4!bmXH-3ZPW{FsBAF8+_E0Gx(*7K}ZalVdh<UGAt2V
zL-1WAr<OpxR!9-0)U6JvU-LFCyP6fFTU5a*Gw01V%?dF3=)nwyA=(4OBQ!ie%tqVD
zeq^3872EWXy@<9Hv($1g{O=_XN*VA+&-nbGq|5DE-DV@)j}_@w=VAN_L4I#<-aOg>
zjvqBiN2CZp7^!}y?z`GM<aZSM!5GA`m`hcE4h%@9*wdzX5uz!1sF_utxAya*MwuhK
zjhKY5D@A8YpLt01qNvC2up&ish(%A2qp|)eMb<}~&ZW9sI$i!GR~3Fzy!A?bQmE_~
z#t@9yiwRo4sYSc(!GEt<`U@@Zg$nW*z!@>AyjZ+IY9GXkQg-l=f`bf|P)fy+@B=r{
zS(%8#qd**15zmJa--(K$T&`fO&wu`qRqPj#L9&fe(?;Iu?vIk}hR_m8s0MQ&K0zdD
z8FhgMm^FRp0)AxbRy9%Y;Yg_cAfG5oVLWG;9~p|H$*yF$=ND(r_0K<Pag~oz56&3Q
zG!bHrA89hr9+EK+5?qD0w3DjkUXeuG5t>&+FJ~I~n#7m+Xa0)d*^cR9H>h9bKTnin
zi^8s%Lyqq9Aa<J|EK7>gr5ZC6>ld<?T<KER)jlApT%SsGo&(hcl(Gb-Fa)8wVX@Zw
z9{h2@8cD?x;aI8uQ}5y2b;0JGF#!2gdK&e7HC-k6V}Q`GIYKwkb96Op)Js?H0D5ZO
z$R9dmX9yjOvkCHcokN#uK6%=DN|H*wkq_2C&gFU@V1<reqe;2)%=os?$Hvwx@RMz=
zss*`rq{8D;BP)>a_c2+nGv+#a-_b3|-|4Gh6E0XL(#)5F*3g1>g=lhBYrJqmMoe}+
zKc}hB;+TAP(*sIj_a`TgL(`7MXtk^NSHfXEr<YKV1Oz$xvwYW4MFevTk}?=>WWI*A
zgtY=KxfDQTboq4}!?Qeo7AeOYhPTEOhE%1=S$f#a+KU$c%yo!VNu@wswsA)9wOP9H
z)`ar3&D8rHLJZP8vsyC_Oo6K$J{LPfn!wU|=8|(0m#2l%L5Y@0CHq7BcTu_xE_avl
zdqEv3Ep8@e{c(j-2gWz3L6n{12U{`ys1t@IEaiBg$?y~OqT0ae!`->Y$yvSSr_0jy
z3d_>#3I=}lxQ$1F`>nwp%}r@3tjqS#xeS_(i|Vhx>!N<ZHf4%hpaE-V(*1Wi5p8N@
z2H_(i)9?$g(Bb^LSi=J46%k(%Jc(&qaf6Qh3<u}9p!WCj?)eqjFE6(kURQ|~39{Sq
z(W1YxlV(ZYby<PqrNp)r5?#Ji!>%B8w<+g`LuXzb6vflxIPW^-*c15W#8R(`<^W6V
z&G60SjcINK`H#5h-iI+mjF2Ts*v`@{JUcEAr)72tQA4<(n2uPD-JtgKqwQG!PiaZz
z7YZBXWDI}Gr9&9ZyP;%DxuO`N;|e3}&|{At-WWzU?l2>JR|yOLn5(Gv>%)dkTfWvR
zKMfxivOdp`w~A8iaKB{>=iA$S_jZUDv3%#%jKX~hN!EI=VZ($C&JILNXR}4O*=A)w
zj>OMVg!|eiFYpI~M)Kx)ZcDB;PNhK_qqEMLPt))9+fN~|MuhaLDj^ONV2wC|1M`+Y
zpybjTx^Dj>hWbM!41G{!_=)Ve0=zt}FY@BSi(@-yl=4Wt=fAT2wv;*tkM?VLkeY9a
z{mv1{hfJ1@1Crb^52A7eB8TB6xb(z&hrsiD*d=}rE91Gx|3i7k(&Ou7TayR8bWCh>
zc{6)+5O?+7nuqCKy^CLjOases3WFpYOIY;yKumQMd;m=$p;{v^fsBu-m6+b0xpNqJ
zPbx`!3bxo7T2{K5(=H=IbV}J&bD`cytALmY2)Ln=QriW}=W@97x2h7Ym=H7rS-3gF
zuK1tavVrTE=_K2*=0D|ykp;3*El43>I?F1WijZK+{SB}?r$fRsVH{U8c@39blIv>j
z_|zV#U6mb}QrMwo;gQkxM#dXU#N6ZS%AW5{Q{TgTa%IkkmzkysR!f|)i8F@J@c?4%
z<BP+`Le72EjBDwuHqC$x@W6+xX(FxeOl$n3R`loN=it3d91MVC(y#mw3u^2RW?xxR
z3kO#_>x!Z`2C!*JLw6fcR-{Fd2A#hd1k=O`#IdM@fwL$^o@<OI?Y?s}8{asZzlKy)
z@anvzo{+ELC{Pnc{<=HH7dN56$&+j0Sh7%YbTi^X;&t9&a-(T%0>#uUe?B_%Gg?-{
zjK<Pcxw6k2KDd|ln1;ou=m6j%e4xg?z}q*>)z#JKp&h_an<ghKzjM{$3$H%Bp!zzW
zS=YhJWH9R~QoIEkOC${D(YX}tD+6aW+q1xWmz@jaLkZSTJZi!~9(^pOc?v2{(cNu(
z8+^gEN`BK>rISmQ3f%Dhh{(h*og=vmTRuh5oU40!Lx@`unSaIlA5x%^Q!=-fa<L7`
za>5e*G`-|jix*=aocS;9{?!Y}73(azG9kx(Xj@A+;K38qW~LdXNI8>4G=@1GRW{4Q
zCUvppLi>v=V2&#=e9M%kLzA>}uK3Ylx{!z?Ud69X&u$=u>Qj)s<PQcKbTZ^&dA^Hb
zHPpOb?A)>R&0%>8OBd9tD@-$G8Hgu*^=FGKlfF7-VHSnZ<cyS5U{yY~ESut5x(O|o
zGuvU)=k3ODD2(+<Z!O_Qm2HTuAEt-&Aj;4dt4FDvUZp2YH_y9t@x!A12ZvdGWlpsz
zOA<jy^Wj(iR(~AdH;(s%*CkHL=^!EUPoi!=H~1Z63po3;SrO*=V6ETwU==~uLpaF@
z*~-~FLUphI`Ds(B3_2r(+I@(tp;_FwouKD7Kyntx86*VA_<pcb(_PT|d3lI-8mDZE
z#>m4_bf<}7)PQ~q;kV~CZbq?7URIN>UuOWqjElf-X9Mw|y|^P#j8Fpv(0V-D1<Qj`
zWdzJG@A(5<PeF(jhyKI)UYIl&MD%;RLtPg9#icSdHrl->zv4DC>@B`Z=3;r5$xNkn
zXC&*KeGW+kUlG*TLnZ!-P!lMe3L@NgC3RzU)q2Ck)s}$C+Q{+_2z9;?U+4=oGhZ4)
zG5)x7P2uWGyc5~TL5`@q>Qcg!45h9bkA2vVpP^<5*5<r27MP*7zprBB7i7`1hG$fR
zZB5Lv*FRAo8`NFu<np}s1qq|dG2^Zd`1q^P>z+jDJPy6+Ktz5j>|=6Dv;kwATOj6z
zQT00AI%>;2OHJIv`1ePu5$7no94sF6XY9z|RG-_?O!J(7#wdPE!sgCFcoQe8w>ZY7
z0`vF7&gzSJmE&15m(~+5N(lx#M09hI<HuH%M9dm3GKQ3M7>I~-f#!W-LB{6m44m>B
zi^fo(f(S5JB~<rTPnPQDyHen6@?VdM<2|cYjY*>8AhdNT^i#5fvu!+p7*azjxK$2k
z;Cwey-_5t3=Z0*pYuVKQdqnHfJ^9UI!m!*DvgOLK={mS!*}SgIP;z1~`|LlSBB%Vu
zSy4=cQpwj$C0pH(rXkucrW#8rz!XIa?8ivWj?@vi=&`!HF{Y>-qo&Mi5K0qi8(Mg7
zzl;RSw3Z=910LD^f-SgT<6(EQu@`PCcamrvX+o+iwN(G!2`DiY9(I6bOv=Z}AXbIO
zjEhUds-oi9tQM21E?nPoOF!PYUlfT@6lR0f9R|`CWU>uk18y+Z1yfG*s``Lwu)7$m
zcB9Mom~v)zeRS8(KlWpY(?jjnVNvLOW0L05;XA`3<g?k9w;uwFPC7~ZI@5_IOt32&
z8uassG>T-i6m5eo+XsI3NYyXwm?yIAOm~8sj<O_9OeUUUo&Z==G;27x!XSN|MjA2A
zR~@NR6^I>^SgL68`<@n{pcLO)wy`>-l#8Lj{chJ;NlN-%f||s0dyWEuVK!m~xjbTy
zPiVRPOLi~=W`72hoNJ*`p8i8?TN8B?NSg`8qnT12n{kFkkpp=gR)2t)qJ(k0=Byl7
z`C4eW(drxcDn-CbFR6j2*R*uKIXp9WVze+cXARsRbRs%!5SkaQQ?0R_0t0)T@!_O5
zkMBq6dtsy~TY4=~8=fjvMua_HsxGWZ{WcJs@iK{(iPi8P(4q~^P~<dj!cKA@8G>{y
zVl0B99LF({PtgWOj1)(?AJDxfqv<AB0wl(nB+Fz}TB<UD(yTH;H+j#RK?_3AC8!@|
zM$(P~fsnPU4dG&%YIX-)TREs*ncQwD7pB#Z-XJrN(DG{SV_``YHy3VP!ANL9#f(ZP
zX1C!s*zEOG+2X4RcL(nMTL}I>v%+bE+HH~-)I?5{h`-3!{z8d_FL|BISGy^Tny#D_
zf!?B5CnWs{Il{e_CWCV594@sY8Yzm8kL8vosk^tOVI;VUXHrF>Bjv&V;g<zjs<zfi
z7Od8c^Ec!S-K{6<8`~r26i!5zpu<?rb<=+It#ELR_SCmdW2eL|Q&=6gAG@}mM=v%T
z5I6!2_5L7|xdZ&O|3XU_3e*EAdMBJBBF;88Hu69OAIe6}oUuvu=<SfOhmis?Eh7Gg
z0^d7!{%@7{swT#?W($n;c`_aau)|%rcz_m(TF2bkNWMtSrVbi*Ds}1s9=)AlF3hKq
zMv}6$SIv8t*+5n0O#Y^{N6V(>I2og3n979s@D^KQi7Q$9)z>Ppzk&%)3rqcS&MxoS
z*L$?$WyIe>%}ulpH!1Jz`#rB4FW|Qr>F!Dm*<L7WyuxPr%)i|N(!)-%$OkX7Cf`my
zh(2EIlySAiCKB@F%wDpbu>l6gT18C^zb<&A9cgtpQuhVC|7tuJF_b+dUXMP`5C8V=
z+CzLCoKKD8YNF4R!}Ckm7|viWUD`e2<9}Rmh`xc~|8<;mV~ET5$tcR^DLv$wgmd;=
zbZNG;gLGi;qT#K>d)mKEt+76<P=?Vhwn}J{cmlb}6rJruta3UD-`ft}BdV#fW9^)m
zB`wFZolwp*qu+*?DdkuY>>`GkUTs&&P6gYau>VJGE95V@&&`T1e`{BlvP@SEcGQ;P
z@-wP)@rvy#YIj|!*%nfis{X$O7&UC1^29&*I+V~ei=4zHR`+}+lgk+Wq6xGmF%Xee
zP}gkt#<C(26)c(htWmX`g!Pb~9s>V5U;gP#?b@zTPIm8RV__=uMZ6_nYm#|>@BF<j
zDu!dY5M*99w8e2Vd~Ph|kQ+%QKzsT)?y&qpw-N7Y$n8CxlW*<^+gZq^{p@0l$?R<T
zi%0TQg+a`$HZnD(Bl*<x<GcaN){E!^#7AZM*&i*C-{k7#YXs7rz8|h|M`RUfll55J
zFc08`?lR4|%P*ND^pWgTij~#VMGF-unnWjmz+ku;W4eyD!#geLBxxEfn%bkV*rdlA
z^w#ak3;bkH>DqWF?BBL{F2a*0Jtn)!$Dw!_Y8hTp0o^O0xNr6Z@K?Q^X~&qe?IY0C
zW#3kw%PI#&6Rwk@TTU_8_PZr6o~sc2TnD?Lg$|T7f;eaH7{7uk0=_2ywD{ako!iE!
zgop~_104zdFz1$-VG(i6lntE@-JZPQ;-1NjyC2!xG&w!xLzc+bui(=y3_w~pp;WXL
z+0MBFj8#tGuQ!EpoJ}3YXg(d@gqFLA|A+$xdeynePMf}$5=S1A@NPY=(t6^1;Zj9u
z*@(|NuREIuD8>ZNnZ;xq*aIJOpLDbkr&X8o9>KyZC-bRwz>(E|$r73l1Zc^-w5ezg
z{~QOqW+*+1h8ZtKunY20w*dI1H8qxv;~6h?%*(ebXI`*EC?pTy?8Mp59RVO-3!_wV
zaV@1*+ZBlq?jE$g&w{>NnV21K^F0Ocq8vJuoq%dSk?Z=u1`JI&<k}x0ddwZGk%?R_
zeb@BT$s8k9^Y$YizI&L-wbZ5SIL6=?!R)9TB$2BeD^#}$OXcdX2^1APh$1bYFe_mr
z&U@<sAJ4xhAFfX;eDtZc6iE*vJ$R@$;~oksg@P){0|r0RTQk@(kxbCHz)>G==<lE~
zbc?7z6Z~XM2;h=^76F=g;y~#Y^c*vdC<7*anEXQ~c^Y2gAS+_vMRr@qRT9T(!sLLX
zyYvrDJ&DuHcad{nog`H`+HEaVHdS<roh!6Ma8bJ*hI5Vm;(8|gI(l}FrF`cAZpG#-
z;FLy_&b6XXx4kk_xgIa&5hR^1m&AqMn(&kb>-}*5(YBZ?0{C0HFJ^N{*uAApJwA={
zTyvw5lx8!{ZA&=x=QADKVSRn#%T%s!y(ZW{cSUZ6@Qe0z>XDD00Hf|Zvc4BzxH+zY
zg7M4x+WHrh@Ru?sE7E^Ij~;ot3w<fwChyB0V=Rc0PoGhIxFROA4WPt#QLkc}%<SuJ
zP<t{rkX>uL{q1qSF(2nbzMfqli|W*~RNsil;)kNW>KteH5+}I9i4=z0(<~n-2A~74
zSo{0#Q~tz296KGDZ#>`eJ4S>r9&kp%??zCOrpB=tx%>&R8=T!O&UTwT{vaIYST>oV
zWSSU9GBq=%YK_I1;Vp4oUb^t#tbSE9!FxA1w4OZum5JROP*b9qL{xseCKb<dA(lwG
z%2eo+Bi`*6ttHIMT|JdLw8@UfzlR=>3>iLqj<<{y!(X<H3_8ptIU;}RD1%?Zwp|E`
z879v4w%00UAQY|rL^l}>&~;EzKJecBPj|c;g|FgcKwV-%{=_cT(jbcPHkJkXU9@7h
z-GPeR0qS<Katqobnj308S1IGY;)DOY_X_cYcsHJ<r=U;`*9E17hH(^oUe*g2^ud*(
z)w$bebacbs|J_em^J*r>SNPjp#Z*UC|A|^qpIP^Y(`Pvr8r*XQad#ez<ys}#t>T;q
z%|%)@B?Z-`<07-bj+gWKqYmFM?Ee5WK+L~O5$dN+Cjqs@LCDI@a>bLu!@d|Ez|^rV
zPMqErR5^Xt$kZ>L&)152Ow4ROoH5QScTwX(zpCiE@~gyV5HT3^N-;LNe|q9bQZbFI
zU!ffihqQ-re8@8=WF5l^T~FX+7BeD5<QTugtLRUuoJtdV$)vYUz{G5}&{s0k#@Ccw
z);*g{YcBdDV;YXBh$*L{XG@d1ukW_TWAt^(6B)3X(}>_YBR~(@&WS}@fMd7VNW|D3
ziB)<qKX}J;zLuC5{_E}3a@uw#bI!z)(houiDZQA^j~-m!P7SSX|8ZBJjLM=DN%Z~P
zrBt656Vqu_A1;f0yPT-im_nY3P`bE?rOwtAPosPbXTF?J)Hk%Yl1-pkXfl_Xu{6oe
zOfO8EDJwY)&*5ZZYa)@wI*O#i5bk`3V&yJ%|AS%ZwbYn0ma=S_mlR1+N0WqIA03WM
zPvNmN@u$b|8C~WDT@59qcrFTY)0EuV`E~k0EsyvqP}xERdyMN@L5_EY3z?V|6S;Cd
zbD#m!ptDpW%a(}&6uKT=%6qS=>LigUoTNtYCSzkeVv~wuRX2<Ndsu^=18kupz?#Ms
zNOaX(AdyNF?HD89e!sd|bmwE3d_xyI<l#{K7sl*vdiUBEs`WtRVgg{`JW;G`c*c5&
z^2`)K4F1vnXA8HcN~IJa51JVow(WF$B54mfVcAy36+zy$e_OS>t%}yJZs)e7otQ3@
zX`{spX+sak!tqSVjzF?JB!5-sH%7OPj&AM3`5b}si3}>&s`qoX1{5y*x;T!b7>066
zG3fJQaGE>D#&(P)&KOFKM19M9f`c9zBk$PVXKUP93WvHq%`We*&6waVs<ZT3v6H4o
z_GeRD(9A82g?~T`hY11|f|c#_a|s^y%1vNxN|*Fxli*dwe~;Z>lcqgOFYJp}rPp$T
z7}lAz4HZ4H08!#CQLAB<il*c*y_A}&-J?iLOOmo@lenOX@?{l^LXOC_EK}XGQ>U25
z*&TP_!Elg|vBKJxf04Ec|G&3wvz8I*oEK>tJ1?2MeTtlyOd>4b6^0=PW(iu+LjUJI
zXAGnBA;(-cO~jd1bJgtp@jXko@BPesh*h&?h=FK`t!{bq(jH$gnd0S#$Ug0fzR{Hg
z=S#ul>4xX6EyA&YrH6>Iy_y?`*oMcOlgX=jeiy1?xjxh6aWriVrJOC1NEC^JpyhKT
z!%1_bn2roZ90y=JJK8>#t7KBekyvqTtf1==dsLnIs67-(7e|uCV#p8$k(aGdq!vpK
z8L4P=*i{_|iK2)u(exR0#!Y3RgjzHb6+}Z9#eJ_C?&9Ce^sdMqR4$whA01wgAB{J;
z*?=**d}A<foLYmaf0u~2%(bz4<?cBuKS!Lo-B-fcV|8K6*26Fp=BlfNe!f~g3FEbJ
zgIb_3sZ&s2y_X73j@2&}<xA#jM7WAy|LOXd_;<p&Sc21slgLh7@qiESwle|%y3Ig^
z!W&m9sW1fyTP`$+zuQn9&G^M1(#IdpRZ|lwDW%g|I2Q-2J}VDTr?EK`wKOf1G*t9;
z`gqr5bq>B+H7zHRVifYR@=AYG@Mvmc2u_rW%ol=mju4gF%FhJo9HoFhxo69-dxvN|
z1{<5<Sxj0Z2KO>f&11>bAc`|OKc{fLXiON!h?61c3;9tq#f%?M%bnxeU3nBD^jC~!
zgJ%K&z+=2AF#~GNR+(xZ)@NJY%O5{W?(2I*tA^9IPVZ$J9Tu~4LXP5)DhYN}5wkn=
zd^S^1wrTgW<N1?Fk?w>oD#Kf8F`5{*sO0m1<Qqzw7i2AD8>)hB_2O`P%VgT(quyD}
z_9f)&o-*rhF+%B=i_DOYXQ+=|dB?;sh#e0%-mUFV@!lPle!T>zQ(RA}brmV@NvzAl
z7SW6-Co9Jn>pAT-!va5@pIJO!IT=byTLe=(=|bANmR94kj%DcvY~Y=HF#l183kG$u
zGCe)FQdjFMpyuYOw{;#O<ULDKZoH8Ql-l^Tr`dMJJ6ZUqo7nqzVrMY_o;_Y)!z-ZD
z=8-FI-jKbAZNG&4ef>4Nn{7aSO*vmKSDmk5ZZQ9VO<%8D0;+1BirOXx_$CWC_FQ*P
z^9um0QT}_Y;NcxIGfnH?!b_o1m+sJkJuF6T+xEU7<o1ehJU^t!(q2W`E6GaHd_|2e
zqmixEYHK7jOYKwDUSSq{X>!(kKJ^|8ag@Zd9A?qs$`<*nus9`cX1KZ)p}ETNj3&|R
zLB1+)srac5UU}s~l<U{G_Vn&&Ub5!Bf6X1K{CTzTPqE7cFQAP7aE%yYB+i9sKATwi
z3DA5VefXAJ9=_%6R7~S0rWM3yVdsapkXPTJLKv^33O|(ItZ;Y1JW;%IxDhr}w(<R>
zK(t7Kx;rV<*ZDL0_yKhTe>A_u`cvE^-Fo}A-odl#^4>&W82lC~8w=q2??oY$zwPIz
zO}jHqY8ilx12q;vrKtO2`ZN_7pZRGKORsySg!LUqMEzY5_=C4V;HC#eeNZ5hkuI_H
z%GXI)Eb8Ks9XgiY{8<)w;3mCq&BX$H#ym_DSafuL`1i@)BE!G4Mk3*xj()3P7>4i~
zY?{xQW<L)zy@?cOz^-^-n|$ly{dIrAvohXq<6?N@Et-`<o8M;wJkB2uSpM$21M~XF
zXzWA#X_}L|uM_B%l_8wS!P0~<BKO-;VIyKTslW=QD#^iuzi?U>u(0*CD7K^%S%P8_
zpXlQLTR5jqZ-rzsB%2e}EMRe>)Dj_;(}l5jqdx(>r%mlZ!RiGtF<`&gR|>?lRNS)F
zf5`;9{|nPwCiuBC`q1RATFej~b$C28x&NZ+A^nW923wM37_#Pf{u@<E$;L#fj@l@E
zS~sjk&8=*&8X=sxY;<hC99I`DLx;`vn{YZK5m5Q7{6<HmaNN6VLg?EIvK%*$*wpgr
z_)>EUg(>5X^j+(_jE;PO&9v8x*i_Hx(t_+5@c0W#Vn!03bb?|@!h)oqF&r5l1M?%b
zk#{ap<tJw5wvR>L`OrOzau4jq|E|b=jPX?(PYrzz<Q<#|)aoUjbd<Z*H>}5dIa|Hx
zK*j_44%$q!>71skueQne14|{)4xb)$4iOtp`#illN)h+ubjw|dT?+POc>)#tQo2+S
zP<DM^Rv>c<wNzfu4qtN0&Pv#bAwCX|eEhYG$+Rf($Pn~cq&jcCOU6j%wFi0r9n5#T
zk{B+>;;vDc&;{j+{aDHvP8>^FqrD^{5epMKFIJ1HJfzvKDrZzX7Z1sN;BL95XLp`~
zxD>1O%u^GY&$w4}Q}i@@JT2Keg2T7-U4UpahLO2!XKPx;Ls-qG)rhHM@vvbWeiN3K
ziIy0Hg%?@}idY*_WLs3Ukf{(Eq_@^3?Az@@V*pR?rrJuxj8NB_Mu7_E!OCO0FN79S
zDF@}RW~g#FRMJzQalbh+X&Ku_m~>28=H-H>h3$n<BzB@OC5pSZ@Eczl>UTniC-W8W
z*7vMrN`U!jkx*RDYO{qc2L|I+O9=EKfr5*~78~s#Y6{L1_Vk&0zM@sxgAZVWlP!Ao
zpek)QjD~da*7wV@@=8hg9XM(Z4_Bm*8pZ?8=n<F&sA{0)a0L2mZa@DUa#;9)AT=bM
zOG8W=OOuoaPi$wOL$^X*wt0HmUS$YqHPkhe-ZeDd@GlndY})d5A`@9h*J3OzZ8MCc
z&Mk&<3!Dw);T$!LZA${iyA`38=8bSmP|&I&KV;;LQW_j8Ws)<}C2$^+4Sd^Tsd!tL
zhH(xNnWRwyH?@kr>d1ZdDFzWN*uLnEiUd#pw`)FT7$3vXO$>7aD9`wK`|`^_bje7y
zT3jI_Z2<eh%PJH;DdE2~E?c?$dk>8k3suh7uWr+IdMWn`?rQEhcan^je^~-%16A~&
zUa$1`4yw0;PrrAiR*~F<IS&)G=#s>hqKw^E5f=Ow(w{|_pWTJw<U2CPYg<)*yv3fQ
zusrrF^M+B2LiuAFANf^>S0^;yxz*&gDOlNd&FI`^lyw;)BxIG#<+r7Hfj4;JUZY|N
z0z!NiUycz+TK`2={UZ6%4yYQJOR9Rs73?Qn4iOJEo6|<(-ds-A4MTrxv#BSH_<M6X
z52j`Jx|02IqYkYvC4G)aLTjC~1SEZGbw$?j^%%`*X6G?VrG7>;@0M2}&XX7P@*ILO
zZ%|t_8*;V-oUfpL;y`qxwQ1>X;}K)vZ+Wu{b>2<Lj>g5*Jxm<KucNsB3-4TrLH#a+
zSwUp`d$(A2Wok<vxuT!I(lct;^0f5)>C>ggxwu|A8@$_*DQ?0~-$_X?D_!45k&2Us
zARQ1zJqc;Hi~5)@&gQITdM(;AAX_zN3$(4`sHyGuh;Ci)5nh1ILLptn0>7&3H&UCZ
zo3zmmnmXtTT}Z!78?B9PTz)xiL^;2aooA?OUv1@OG*TjM^mLj^zLv(|{d1KIjO_XE
zAKY-~W6iq+5S)!|rZ3mLHhT`@h`UbR;B~Wuqq??1evoDvykqkvwNu!1bO*IfUPe35
zZEWYMm)=gq4UX)Kx0B4-AD};gb`DcX147U5qi}B|bh=Gu7@Lut2tNx21orW!V^7-X
z5xT7&^;@gX+oh}=;x#E`s3YT=l*>`$Ngvu|j{DT^!1b=}kLz11dU2)@;$_(hOOhh)
zEJug0p*EY8!BG#imFTe0ww5l~mdcCtM8)kJcux}!U9_QD`C;0u%x0bN?Or3jt7*S-
zfmXe+SvPDC3^{3aS9T3~GGBW)YEpF-EF20T6B9+A#Wig5)Q%n7ji`Mss!7gMwVfs6
zWSOm>qd9bAvS=ek49S`y8`@ZYNT@9qBY=lH4a?L`M~@}L=RCz8aG0_RdSh}Ih7;S4
zOhuegGZi&WK4)R+SxJap5)Mynlfok#+OVJFBK@|!8ck2uht#%0jE>Tl%}{uON;&{s
z3x9RCol?F7@3jD&Dys|cKt0XOumwP1q_|iUV#$$&LRuq-L<QN!<c%m7PR5AYRIed3
zwE3OqwoQaX)$xb`6~|T%Ng+L&GDjU~m7R5qcvmtx5|#)&Cate=|4DgoBRyJ#9Ur&>
zhREA)M{%No>E1}qLVQs$jX6rRnlntH#)lNWRMM3YkJhMJh|V7yQ93FoqsAK6BN5Lw
zmd{u0E3dl`ZM=0R-r7gYJLP0d%`&yNW?Gt=aiBD>q}OB|X#Z)ZpQW94GLcAtKa817
zTbIhh<d|hoUeq&kJL?-CWWt|hoA3m+7?T8Dp=rnRLRdRq6XVkKam^C*$4HbI){jq1
ze$)+wnsx}~sN!%!x<E=6WogI1M(J#a7!H{RSm`<Fn*<zYlvd6R_F<}n1=WJ-kJ9^I
zzwe=&6RslQ>DB|kq9{^g{-XB2*X_UgA(6MF)UoEVH%9reoE>xf>@5+Soh6Q|cW;jf
zTI?J&?2z*>^jjqu+erfjE`}izs3F__A%&zM8AF9awrB5$tchI|3ufa<R76Qn%S8{E
zD|AhH`DTI1c15Vp6rQH6dP4u@VC5HQdCm#7%$=&8(wfz}kud7jrk1kRon|ZK*rB;;
z`sSZ#-1J<??)>#N3+Fx>idwm$9VD)m`-x%vB-bLzb`0gLXvnm;Pti9tZfd)Y?1ibR
zjdX_%R4A(9#>D>5Y(lxnosSy94cLSW2V??0X+V$Kw@6vs9;NRz<!*OrQasFMrlZL&
zNi0uO)00$`gBW!rCq<9ZOMG-DS6tKU<yPGF@BL|^=S@MBcN-~r{@q5D&qar$$s#h7
zmh?6<ns1cuQzGKll5Bh-6}z%=@Wjp;QA!RkOpWc5=QDCh$jhqn4om-`7|liy8cAA1
zQ9e&M{G5*8Wb<OCHNEY`!PZs8hIV~;YN0ji(@5@RI4R7y7&YbSU404jq0#jOt~e!=
zq3dCG>d~FBhrj8@C1Z=Msx9gOVtOw;-$|YQ*JEi7OUF+ckL!^6sKy&v-?Ps!>O;(*
z&HA2?Ua}}+Uv`+_rgdr$Ax;F<@^A#1BGKKY)CYp9H<$}GiPal3S-}NVKR<(Knq?~N
z$X`A^J-e^-_gH<px-dT0Dp*d2SiH+PR-rXEzEFJ{&cf`zM%XaI%JcErctVqv;z%*R
zvQkR76V-$TzjnH`vJ!__Mb=JLt4dqxr<0aE$;&=!FR>s$GY_bHiy+E*LeGv%GB(A+
zlu#jJR&kii%|?(A{5BL(!dh5~0A#?V(5omBKZq>V3d4VhKNx2UH~sXle=-Sw#cbq~
zWZO;V)JOvvvMP$IY@kNuJxnT%)Y*bMKM!>#vam$@IYyCvN?oEzwFjjNK|9^`7U^2=
zH$!c~ZAa*NB|)&@gd#nMMD(1L&`hOMQ%r5HP5zA-on>PLwJn8cuPK(qA4TXW-}!Sm
zHWUR~@cbJ2XE=`G-}`(ox{oVT8_x8WT4Ji7nziz+70`>Kh*m(WL=Fd+icYoMIDcz2
z+WBYKebVMFGlf)TPEk?Hv{0lLjUv}|wfoIetEbHS^Qa;h<Rgl*!*sQXrQLxI1K*)p
zQ8g6{vp4@SaT_tQd)ox<F9ILsU=A*WFAT8JrQD4~3#GUV#Y_HZM>f$0k}+%rVP1CQ
zuFNjYB<r0JVPW8#aBP>zMiwD6r6p$(wf<XYL^Ngr3O}rubwxsdO{L17L!8kDpssBg
zx2rK#!74F0sp-Uyz9Q?<h~*HE77FEb-T1{>m?DYJbDFsw@v`Wug1Q5KP!oQupypKJ
zTjg>-w!-EYYTsosW8#((i)*?niz0@MR8`hY9qVSu00(l{ip5(1Z(oD)1@K259#%E^
z_Y@^4w;t=_KgYORH>?Lrp^3+Y4H{hiVfRJed$33`RvA!EK<DVyb<}Lgk3;H|8o=E)
z#cp~IoSCaD-c@(xM1^c<W(YEaj6$6ccay)f>wDuSac>}ca4YSg^^(BdQ9jLOCwCC~
z=sK8Q{$lE$Yv??8Lb<&-CeIDN)_JHjK|lJO!IV^qa(w4pP%wCwKJOg7FN*!;$ht&S
zfxa_`-bdqZq3$Y6uu5pij|SqI+vUZsP?(a){CliJYDqBCg(thRnLSYBF3L*$b6dUE
z4p|}FqVBZ>D!AgND>QU9WiBp3@L1>nlHNUaiuSR7jDQbUUP)~Ut^X&S84~&(E((2J
zrLyK+GazRqv%|L>CkFEA4TW)d0@gy5qg`UUgP?Uho&o@yKzhR8Tzt)Zxsbfrj$V>1
zl;@L{6F0N2q&O2FnVyU~iSTezR{wY0vBoAGMRK$6NjTBTX-5?!vBbGO*OpV+WHOs7
zUwiZHq$KFcNNQ3WGRnJKvKY?A^25^P?2tB@iX`>C+}d3>T6rrS!QQ=bL}r`VjwN@T
zHa*pMCO65H<Z;YxHH20J|63&Tj2THk6N^8SikLryZIxI<`m!uvDks7}%!W?t`pHoC
zhv9^5E%KLM%6I;8=^YEc&dK+noR32pd1?`98v2ad74gf$UU|EytVok;4&w%nRY>6#
z0er0rb|vqL{@HboTh_^wmUY~5uXB%wLdV_0kvH6Q(@oJMN5Dl_(8qsMlefmT8AX|$
zRg@Vmerr-4xh1KVC8?|?Z$Sq~_PrO4j-qnsi-#(geXvp)+wVPztm)6!ze4*a!_864
z9}Inn`!{kHde=?I-4<m}dSa&@GQngviLeGWU(Mv5J(Ht!1121eFY!^eTGygBp=*yc
z)o6WG74%!-JiSL9QKPb6&~P+!b7rinMujA=%eU%+TK#l5F_~U=@RDIHVQ1NnYH6%N
z$}ejnIeEF2Ct^pt3zw&)7<_~A!Eks;ljE{BG&#ADltbFB81qRXCZ#^)HpVj)%hz>^
z_UEk$4aa1S6W2Si$au5@<FuPwBKrvPm{nAozl*cwyFQAY`?qVg<^^Wktc3HPSu?zi
zpBKCv5%c~%lrbkOY(wZLgp(zxPTZo~<2pwlR@_kq8G3z3M2@9%k(I($BhvXk(SVkc
z=8Boz%7<iK#zG+jNARU)G-|4@1u(lVhX9(96RJH_OGKM=)1|v^Gn%Lk*=j;o$HM8T
zR?dw@XJ$f?$nPUwfW?xJLPnXW<*K4A@Tkw;0=Z{|%CeN0INN!8pvkc2plJZNs{`+K
zMb~&HdODuT1zViU#N&88tyB9idU_mpK1lhs4HS<cO?=i6P>4o6Ef(F{h&|eC+Gw;?
zbBp4Ubb;NcT1fvf<@Nr`9!W7j>kF|E8ThZEUxRr~^}`9a)`ff;p4A-cFjK75Ivt_;
z(nRQP%?ST`R#eqxRsDaddlUFLj`L2mtFP*7dhY4LU@({iGXvrV1~UVaATR_^@dPD`
zq;6Q0MC!6&N!H~<uzW;{Wry+=*-32JaU9vvu4%1f%d%s`x15a=#&R6T*D||KR>{lr
zQjRyPc&*{9@2l>a9ss1J<h|efEs5!>uCDH`uJfz!_<wTdk)UPF_XaKfU{6q0jaN&m
zs!FdmR5jRhP`84;JI(IoxE2g*<H>IG%9MGP9WY-jiK6scGhkn3rabwzXIt2XR+Ko2
za^*!=a}bf@5?Lqi#mLH=ui0{9njfBd^DZ*6iwET1k<4H$7sKQ0PGklLGbhIHa6=c<
z0oDvvu!NXUV(qzCILOBK2&3&MVif488m-lBIa=wUDL|yiNGgts;{Y@@*8)I)p5;>A
z!x@dL<=SUNQB+ksZdC#Y<zCg&ROusa(S<Gc*p?#26QXK6k)D#J*<F1z;l6atFhU0@
zNHLOXad3q?;r?1GD8`aU%pN1CD}-2W!N$Xe{bZzXG;Eui!Kl8hT?!d9F)5nYgFmE(
zx<s2Fq9M|*UoMN8h8_Aka+o|-<0X`xQY0y1u(D<c<0M8!CXixelhp_*tS^q)Xpn@M
z7WE#39Z6I)x)>2y6pf-TB?*z^l3p^z5@7@E;CfP;^MY|>I(V0^-=%e5XXxq^x_;bp
zj_LXnGL_%v%4_`JF$w#ibtF}&dk`d(-WTxMniIvG=v}}3(=w$6Diw<o3#dHpp68`-
zROTt`io1TUTIvq6T@9$$T+5<cv|JwxuKk`{V!vGm6+%KDN?qs3CDm4sp=+B1DN*!#
z?~<Zy-ju%*u!Di_=dgp+{e`dg=MIUABvPeUp(JKGp{S*OD%>63@-gfQZ|V?;J(n92
zB}IG|HgX$9)eLualv5K@tenFz3f+pLYX*Yn)WoTlU1gv+S>pBcu&<xrQckDKJ<I)?
zexhH~`pHhLma&dL9746J?=G?oCn3|AUv{Xm5jw#3X$N7a=GK-t(XwT!)z{P<Y#k{(
zi0=NTir^Of7cays?vJYEeyqn2g@byuJF4I7tIw0!#!|LxqF0WHMk3q(7gfknKC(Vb
z1Jn$KOd9wLf7N2H=2EHasNuUU`>JH8JT%AV-7Ua7UfX|RZ47#QJ10@Aqmk$&cyVJi
zM4boRa&+<na?zlIsu+DrFlXpVMqQgJwu?JxbgO!Iw`nBJ4UKi>q_;h+scN4!W%a4*
zl$lcX_~w|&cHT7lYJ&yo18Fm*=mW3)P^)iC9erlf-(%M6(Lu6i!^OU^>UErD|5q$z
z%sPVI;Gu42+`g0SC^DeV*Gq0D+bGq!A6BKKToqxLuyE1dOzWsn!jIfz6X?CNzBX22
zlinmGk3n)Q9&@;YY|F<J#Um^P>kWXrVnpok7fFmTN@A-hZe=7!mB?g9PUG<lJc;<T
ztvgCyh_fY=^!2d}Vw{jIqAYG9<MML^u(Nn@0@FxmMz+ee`Hum%Z|+9wyTykrmddc=
zd9o$&{amL&%a&P$ox1$VkHu26>G1oIC7w;i8sYTqnDR4>yL`(oJozy4z`y6a%(HS#
z%=6!5W%)F&@vhD<aw*H;2N7vXAL>}CO0p5_(9LsqZaeW9x%rS8jcnR?+vB(G+Y}-1
zw`?i?)+5{Q+;-~3k+;Pq+X_dN(Dk$XZo6&Y?DZif;$l3U|2(UWuM3Hmt=}l;I!0?H
zs<5TJPJR^V5_gMn;|&cX`+}s&&A+|H76ar@XgJuMH!Wpyf4~eMB1MHtFAb>~&(Fs<
z$-lBXExK0og}m#FzJ<d`Tkd2*X^>Gd`0f@(h~AA}eC))r?HbWcHA*KMQ1naK<fWO9
zQ9VW{b{{{{r^d9cXxO?z6ID|F_Pgpd&axAwpVh-eg~oLHn5of;9nEJnNv%B0XD@aa
zt80({1_=D&wQ|D3T62+bhp86_FkB64SRgCemf=O#A74M2EcgMGm;55%#`@{dPqHq*
zGskH`zdSSS6BO}ckrfXEiOZd{U`>9Gz2FqUH=_*`S>)m3wQspr_sK>IY;L&Kr^UTi
z3e{?{)wZ6D=J(8aTY2gimS(lRYIDry(^yo50h;I4;fpsB;E&9=^PIuxnRb*{9=Buh
zMVDVuvS-hVv^U2RaUBY~VE=&okA5h*FKe0r3m&q7X#L_%sXUkn<x@9_h}sVkmbio`
zrqPJANW5W~n43isEU81*Qe6joDNoC6xvTSG1bTc91!f9JFX|4*MO=-(bSe?rE{fYj
z2`85u$+-~+64`04L)rA7f*Yt!Hw58=LwSTHQM}W~Uu<Jy%p&c<;ZFVD5MYZxO8_)0
zKUpaOJ0Q=NGZi=YK`v8F009jf{+i-<vI`~vPfvDJ8jd{h<O2^J8Qu`4F`Am(Z&^vp
z8cQZew1^(o!rJ9<2<zd^ZrJ=#DFw~eKLs{BCno{gC%j?!$OG&#kuas*lU6c04G&2U
z>JfGa`-SmYkuG*Sge$2MyLSq#x43S<&tK7i;PY5iuCu)k1S+kwfGvA$sY}$$vy8%q
zi`2CVc~xpQoG;JVd-vKi<w9sSRnjgmW@ctG#mlwQi<tulGOmfpi-}E#rCPLiV4ycz
zlMZi6%uVLa{gGHKvfs>4%2!WKT@CmRto{}9ZJ*!!YlNGH*9vbE-XXkS_ygfnjAlaA
zQ8Y0^Nc8b~i8^C0csiyyT)`1!N%2=2SN<LOFLbZ6{j;ClZfJvwDM?37bzwm@k4loM
z3`!S+b@+FnJCI}B$H%uDfgKtt$N@54C`^-pTp-#GMbW-_F|Y^l(D*Xb1wWp;E@T*;
zwFP~!x@fo)2?fckLTfIZk&7A0X-|z+*xDC4LM{TYSK?%O0kw{r%hA9>7O`qcAQB0X
zH<73lBbbm~U|qO*4sA^r8|2g&$f55IM3<L=<uTN^c|&nH)w^-SuAw1FSYFocd)WfP
za-A2JmpkcJ%2t3uugnt(zcvD8X)Z8;59ODwHjPF!6-C*1Xm7Pq-HTJ{A|$fX1H$e*
z_$pMp+B|;Tyt>90r6s(Cd{7soB*th{upyce_6SGTkzqich!eoTuKQT>IbXbdf%JOY
z_M-wGZP{em@8l3*pg$D)g=IZ%S>z-JQ~ne7*Mu_=*gP9c=Nu6KX^hT3t-bi7W})1l
z|1ET$xD0s-?RnosJ}E@lw+(rof6ApSvUWjjC*heS6x~aC_fl;_e4V1?P4m^w@4ebI
z^NMoxr$0T93LwP93$stm^7Q9PQMMuFh8rNkmJe;**!)M-2)Q5hvJInFGYob?+2_ab
z^nAh}6s`jd&$YP!|2}Ea>g(Z_D3(iK2|B4_9h)8JUFYx}hoxVe*!%$;35yfgA65_R
zbJ3pW{#Ks1wqmbaFYRLxg9A}+f+!p~#wxenEpVNg4(r`EvMb@puIQ6uyy$SN&iah#
zASkR&I?Z(-D{f(9Vrn;_y%L=?-}qNQ2P9bAO8jA}v=q*C80s#L2RQVrd1MnJzY@bD
z(!(D`bl9Lh@pr}Ua3<V=Lx#AwtMnE(6IVZ*NI40$3`zuPDef`iKAi^d46^Cvr8rrN
zlXUc7qG{su8W9ZyqRsu}vgUt?rc#}{8&f__BG>$Y+A^2%fO!PS0IHMa5f#_?3~GbB
zo2T0)u}iWfq6F-OSt$4C`%<zgCD_J9GR;UV6_~lSZ`+3KRM_1|{i!U=QeI|TIz`vi
zv21QIDT{JJk`$Rp8r4<#(k&b2O36^Ce#s`_C=fJSXDuU^J@pS(I#*X+O*k%`1gEDs
z^fBe6UX*LuBZWeQTi&^6Uohm@QeYr9G<j&_K!jMsmMtbF#Y$ywIRKlL+OQU3J6>7e
zvggEOj~$8^BVng6MxK8C4YP-d8nnWRjpK7i5?0u{KM*3)MDLy>Y}eAGNYv8fYCqVG
zp4reFO>D?U<1Jg_FAFB@4jG*R9A`#qR3`-=0;M1Gu=2*GH%7aMr?Oe{#8i5JfYEb|
zBKimq0{hc<!S!r*YPg#$OwB`v7`wzWV8Aj69=<Wsd{LOO>dqLiz)}?)0Mu((q2Mx=
z(-t$dUi-siWap+vL$m_6DVcJL+>*%Jm(PzFRzoM67K@dOvzf@-_fT=FacrBYgMfQG
z*_2L1yFc_QsTz&xcF1xfh2E*|kjtxp{#+0y+3d6jb$auR^!0>@dDVrN_p3&rpS%e`
zWWygzsGy2$tqPsAvTl^DSmn`jvYd4K%>av8=~xIAC=iO4rQ_Ana=<Jnn`|-78i~lA
z9YKThv*sDijsMcIGYdS4G@=1JohX*#t3$!lxe#1ju9lS%n|6Ub3KyXt=Bnubm$22T
znM5L{Dx2b!&84GKK)xJ-ieZ&%{@GbsQoeBVF@-31;#z+GSLeSd=2*YcSPK?#4+Ca+
zqoj^ZR`d(4IMB^0y6IxQJ}!o+L98vN`Jtca^sGUzSZe<L?<z!{-n(#0lJ32dn#(4=
zY?EPra4R*=vJtoRf!|ev@*p9PEL{B#i|Cr~n_{c%fU9i<;|bS@-_<y5%LdVBBHsv(
zfr1_E|JVjKV`dkOlyS)jno4em=p|Xx3N_r>iSH4cX8=p&o{+_I>-wG%G^pIcVtcaa
zYSHxp3^azx>ZHd-YJ<s;)rN;f7lq>>BH%2|FD}lnz+nlM68|TFW{;1LlcmMwMfUf0
z)Kok#utWV_b+0|W=XX54h1=MECcoQzR+EFg3kn-|=NYZA#AeoMVK1ZfPjJ5tHbHYs
za3?WHd~+E0Q_Q_3^^i&jfJsfEl@dkcDp20R`E8aID9mqsR--N5In~J!kyQ5*vbQ?9
zcSG<94NRIlhN^q_v5iA!+_0%hk5c{4U<Ebc1N1<m`CM{P-jnRt581Xhtm(PY(XZ`U
zO7^KQ<tIjShA}KjYCsK0!!bgJh_Js}-NT+fIaNx&-5jXxtxfLL#%x11DI*z^h&y4v
zLEBSG+>=UlS(k{TbE6CQ^=HQx#IbyCRNT#;q_ZdPO7`{+x&9|$ewt+Uv=979kq$0H
ze6^y(mNkqA$S<_SkDPSzNRyTn5+SKH+fq>mxq`<)lp{<&^o56-Z$^>h7!hEZJ`YC{
z;*fz2)Lj0U8O*i?k&Jd<#^ka5$Vh&yd5()AU6&T@u-NwL*P0v3phK}nw@u~#o<XB&
z1bD8A8ro}KDBbV3<`cbJ8W~j%i&EF6TW2pz$x=-ITxO=xtH==oX^l&}B`GQcIDQjB
zMgbP@Y`0U)$CI*}k)$qZa%8loq-D8VRW6Y3<7ptyCkk(T`a&J*;n7ZAB2PYC!*6{t
z=Wuu&+jwGX9%D~aeSYc*!{*>QPEMyJ>ExQ6xAwSUvx}ZtMf3Yp^PrD~MjMQHN56JZ
zwlAWekBV><JP|qQzbN7P@TeCc3U0Ll8BA)AstlWrxvQgc;o`vNs2KaN%^#{HVA`UZ
z%_S3ALL%P@7n1Q_q6YMxJE0eyPz=iGz(*`w8kO%J!*Sq&mb=lVY{cve7Mxr*(G?CQ
z0fw(PZpMNtIf`6RMOTI+=9%c@+;1P==ZkuFhTiw?{I`Fvt77L`o4?}EyMNG1T7xYB
zikJIcOVgG$?Ez1C`oFMGod#=(V#YJ~DCEmX+_JAwz5VF~=quJ{NvHSRipOj&#*t-J
zB`?@phM>I1>gHHxDOTvF^<!{8G!xiqY2krrpn<3{jX-oDtXa)R?okZop1t`ESkld@
zT(CR5ne(LcI|Bv9el!r}@O9C^qqb5AeDYXH6idfiGQ}106}Cdw7=3!g)0=2}89}?s
zQkCml0s)ZloWwG!E5@y)>!ZY}vtY7bg)fhfRT6Q~pkiNK11)(LkfojicQsPXbjgOc
zDbm<!chiKCw(Yc$pxyS)Mr5;QNY7`J6Tdkyk=&yWO-_sefi2sym@3*L?MbNGqmeBI
z?scSZCNizry}3X%78uX#iegi0D~g^U2krA*udV$fo3mF|vi(m<lBudDn-eri4Tn`V
z9#m8=A8V~~yV=;gozHCvwahuJw&*0hB@PW*oO+4d)uB~gWfeqMdlqqOO6O8ntaYw%
zU^6ho7P-m2WFK36h6B-*MM%&%%+|RYTljWQB%)R*I|Z#awWId~u{mTt+cZ(4<}jpQ
znvFN#%NIPlL7{BHBQLPkNz=yNrH&Du`QAYy?47LbV@uuUay+<UIB5h2YWr)I-6BzA
zUAAG^{aGBCR%t*(i;+4#(;ZJ*dkI_f_T?wULrOr_*ds4>viUJl9Q5pKV7&t$;0^3C
zEopDUiQ8h^D^0EBc}4d5J@$r(r}jq{w;p`oci(q#tES~D=?9*CU`s{Yk9-BT3Z-LK
zxD>WxX|~h_SdYKQ8cCzuh!IPd9VHkwft4KUrjGm^G8q0Y8el7nrln&Gfhf9Da&d0X
ziX!>25CA>IqEkVFuTlrEIZ-zF3gs4}PJz3PMT--MG!nOeMhz;Txi+&=j>&)4C+F@>
zv&i@+B`){fl#~0U(yKv+{_4`74Lzf(&+L9s*GZswbAMgeuYX84j`ZJL6#M(rJ>_!C
zjv<S3lMNjI@d8HQE&!xQ3zF>Yc%NnUF)AB^@!7-o9X`uV5<-;&=A@ers+{J5%JkvG
z-JXd8rv(Z4=t~M&=;1EK+u=F51e`3F&bZqOD&a#3_J+gL1BLmpqH3SvaDGeHK{jKC
z=L-Yu4fh>R911JJ<_Z?W+xKT#zu1hn5EuWpI{J~uafGgmYV{UA2fgrDS7fQAFgm^8
z5aqD5(+SI>(XUdXlw_&G>*L(o>ex0YN!d|FGory*EEqL3Wi%^`gLz&>Z5`Edjsfng
zpNqE6g(_}!ORcKJl~yIPlBNOb*Rn9chFh;r8Ra6(16J?LE1Sq^a}FfS4L3M<!Ew<|
zo!aV>e|MddXDdC4P)yg-x*m<PLP4?Ba4f28J!}gdDja@!Uq$;j=LZU*n8t3y2dUaY
zcw3aG#6pSAPxi_FV2m7nC8I>SKsL~`Z;5@`2?q|m$e7Cc(tA^J)5!w_YThy9<%#LT
zvlkt6Kk{Fou~cu8B_^|7y@#hO2L%883H~w<c&)m|nYXWf+`X%p1=xD*i(>9PJ3<O$
z`Ei(g`L6Y_MGYxD?hW8EsPgymR{FF;-D}gu*|MC=u*7&VAqAye59Wh*RHzgl^M?31
zv<<J7LsV&B%Wv+Jf<%OBNfhImoD_kaE#5uiI+oa~I=}k+7=5t1F?hM<iC;J3JmXVw
z()+^ciE?M-xS!j+<G#bI8uyM?KW%+OZ&w!ErZ?4#-`Ri`TGOtNw#Op-7N8Xd(I-ud
zb%3(2R_nnIn12%TW>?J+3T0hCV(WTZ*X#&1QF*RBP>2L^FxX-LWXq}>MjXoxW6+LZ
zlT5SxiHNP~n6!GXI7@QmYaHvZ&RL;sVr?r3RQ+&mJ|MS*XHxku1FS>?nf@4Pp2d>v
z_27U>Rkb8f=`TakM!z?}y4HOIJ$eek*pfk>&F;d}l>XePyZS(#jgh}2^Flx1OCu66
z-w5-@RjDh^OgNP`USrMi%0qsn>r+ZF2@{Fl<GmH;m1I!)XDrLJUI8sD)}Qgp&rYE9
zr$*azJYRRi=zS7V5U~i}4C1vAn-kd6aW422ZwDCbAbR0r-0KbAw`JM4al1j!hk(n2
z=662|MLtYIc-I{;BJYEHb)Sz{2c;fdj(t?Pj+M@bJ`N4!c_nChC-`?>Cuf@t&!Qz-
zL8IgYcs%wB)4@0fudu^0?hJ)HTYN>y?Kxu!d8~to8T~T!G(5yex>~}($O-PAjC180
z?P&AwkkwVHALQx@2kYU&zQVcH*?4pe`CzvmtPcR+VW5666l$0CH_+!?0qrBa37`YJ
z9oJfV(J~$wwk*dqM@CH3v8>^av*riZE9sf_vbtw8>lBys0fF|TAVsZt7@K~*B2T5p
z$Ls*&<}cmeKQhN_&IkW+R;PT@IW#wd7!xSqr3587XHHSwr!VfHmIl`%Vf!DbfLY(m
z=qeeUr?yH~4ouF<lG;3@O7iUFfrH~K69>lpsQd390gVu{a9${HoRCaYn%Gz-EWYuR
zo=&1&10|9Xp`~x=l?TS!u8Wt+FDI<8I`_)hcd@d*XdB$b-msr-M>zmt^QYX)%Eijw
zK8*N$u6Vp-Zih&@e<9X_IZ&Rhcfd`=eKzCZ4N=TCv*c_x8)BOyWErx4CAcn)7D#rb
z(O62yLdaO~Jo+pwE&YG-zQyLs|LgB7T;zSBvln~azvX?-#ol*%>B6rQJKps&-gM!w
zTK64-t1tFNvYpWZaqzR<Vmh#$0Q7JNJZ_KNG9{^WoCc)oQ7z$6!ibN1AEvgH5Ec5S
zD|Evm|IyO5<_|T8<8%|SvD%F*Cwj^BXtcV=?qU?FEw(saZMtoeax0M;5p+o$2oiB3
zP~|YtScieCa5BS@$Vesuah@uvk|@bi`vQ4Xp<|0|VO|_3NMlHma3msP)JtbK^@EDN
zcgdTp`8qo!Oz|=A7Cny>pQi#8c8lxTVDdal+k!HVhP^I3A8aYl#!$Tn%_U<PCp^xQ
z5bBCFti!gk8)Mwq(#_Ur$3Kl~JI_CC?KbSm7Pcp1pbZMwFdD91!s@yujJLn09$)v%
zs(zn{sBGW5xuH&~YAU6&fMnb86+AZ2V#>pa>cRTmNjzQRIeeKh+E{L<?8bh|ZrY8f
ze(VOsE-S)B+JWDI=4wz*RCj;Ta}i0e2TlGZ)H&xaBbzVQuLqNWHr_tyjO5lzB*K;W
zDg|;^=717}GhSqD6x9@4Vg=XZE=13uOJ<aTak?ZfBpFp*7mg!mgFSf+*j>oqOrVx@
znN}38D$Or}XZqH)N;$fk00@`b>_g8HHgqqQh6%{=j7%yTm=45JJ;u`RQ{?IV=0cSv
zDvGI@ihJSNQ@cZL-HFpB4Iv^<bsgwJUD}7V(jsh)h~`XBmQtzy>c)glmQRJ)j*X`p
zMm&@-y(^(p&2v8O-*RXJ*OTJ<Q5!<dzw!9@oL@2kG`*+a5kn6qtH4So(QS!`ScU4M
z1lPjt)#`R^($oB`Q19jLL$@5+LROG@z3tXW<koE%_0FxSgTokaHa1^=`DVYK7?h><
zib^vA#*WciwGeYIUM3|lF+CA@#yn%boRTf|4Gr}XA(PK%*4EXpFBYfSZ9vd0#K_4D
zl?l*@etcxh8M1V-!r<Z5<(oHq>w;I7mtPX~;$?Ul@AuyQU(k=lEcf!wEsF6=UF~+)
zlDXn~o#m0r+Q?*${AC~>(8e^?r03Yux0vmTMbp~q16i~afw#sYcSoWUHC5Z7ar=gz
z!MRwvCpJbOhM;#0j-y$O<KjuqzvN<vPx;Ep%g72i1D+}P2A`J+Vi|E&Im!EtsG)RA
z-Jx$7j`{``&FNW|6i#aFsD(^bb3*JSNg8Ive4i74O(<?@PujVt5*Yd?mXr*C^7|}M
z&5-ujp9&?D;nPRMN!MqvKt2kn7zy^is;gh$3d<uRN@(!F#W>uR{r8=47I4Y4I18S6
z$_h!c)))O^m);Xt)U2@mu&m67^}M4w?8higdxsM13PeJ5Z?C1$h7vQ**$F92ytd?P
zREbTHXpqx3P?)H>;KHpw<U~QGe#u<4>~|Y>vHSH}L`q18@%NzbNDdfD_4k9>EjHan
z*(%drw6uyI$~mmx1oY-hPWo=wpA*m@U?(B98Uw4m7dsBGeKhi^PFBk$*PR6>fKP)8
zN1lz1$M76|LBz=U?b>wy!9+cDTfhm2%q`Y{=!7jtDiKw$5GSmKEpbZJG_fR_VO>>&
zK`BpFu}5+OVTX)1|28+82;O9c!;ZOeL;op74YS+dplXDCO;N&*W@|stw5N4j7nSbN
z9}rD_T_ECwkuH(lezqbE3*$l+{b9zvp5}G5FxLyHR9A%%D1~^X?*7<wvQol66SJ0h
zUvu1sbbsdsO*@8vXBHIsVLKc;&HEaOL8o}OACCP=IKtso3-Hgw`sHO5`dsWuSE$LI
zMwEFu*A|fcM&7|Pol|W~YEZ@M-AhBoK5Yl=fUsQ8JK=dOjAAH@fgZi<i_yMdDDo8V
zp}e<-U3wXO8g?P|#u}Bz*I^4(NCGRaT5x;(s94};@OkjH)`ramc>_^EPmd~>Q>CU*
z!0i?9CV`qsbYjwsq)+H#Z-j^<JFTgdB#F6Imj**b*9Ikht4YWLBQ*yV`T`KFFHmLB
zYJNLlzO|N*T~6ucwM_D@fY#D)Y7bVk@dq_?l^%Z(=HDXv`kqL59+je{at&qLes9*?
z9+vc^Gfv$8A!;7VgQRrJE<G639m7ryQ9EhdFZ4`Vu9t`9gJN>x3fn+ck=>UCl7e4G
zT>!hXmLFG-|L60J(BT6YU6!8n>1Lij2PtBxDR>@meJGOI4llUv{eKUmWOpG?%j4dx
z_R7M_pmg|fQ7-JFvPwR^+HFg7U)!n6Zflw)f`}dilI`^3(r0DcE?ypO=VN~zHtta7
z`YSB6Pr3WzWn`~=+PZkrRy=j>e`h^*dIF$aRf6l|T)d2dF<nn<`q&t9p2s@QE?V;C
z_3m)bgf-u@`4xUo+2_`PeZ<AT;R^Q3TSkyieyOhg*2T-ckk++ZMm1Ji?Xaf3Q*W<x
zuy^c2+r(A)MF|%Ljr`E+Vzkki%dUC5)kV^pZF8^DeBbi5V=Q5N`};vgsv`oBP)|(M
z<0y;v)b8sOlc?g$R<hb+I1^6DmYhf<8~K!Fm1@cUH%rp*<rF1Het`UBEm<pBmdhJD
z|F7u#aE0x(`cRsQb~w2;yi>L!O0ea^8M3`M;rfrbYb5{MvIcd#`5=736FA1-Z|mnc
zgB0hN=7Y9Ah?(BsAh(+4kdFFft_@pr<09~2iGzvy5M0k@-8%RQqaQvj7=jHu!tf-(
za)*IGQD;kNw8jY2Fe40u1Qv%!e^awpRz9KX6i&z<)iT7X=F+TWXk%ol(Oe>55+zM-
zehe>=C2Y4paWSacvmMGoTl3orxY9oL1~sq%5wcQBHP5C>*UFS0W~bRyY1N$V_$_i*
z+Yzkh4|1jQ=TRSwD}}YAt^)aIms{qStwX1-IQ4m6nN-$&13A{dd(Cs(x;-l>^Wgdh
zZNqB5Sc9!SV!e3sftDO(VPQ1aJewO`U|Z3ZrP5^SeaNnV%4PgF&*8>0lm$i9EUU26
zyZkJD*`*Ob!q&Q)Fb7i3B6c=vi}3!@Haou#;7UPK@rVgV+xT4Z)P3=?FD^E~t+p75
zTg~@Gx}_8{9k$)7r4q6>|4;LpoJeW6ZUc4#FVi9q&hp@SMqYl_jG9j5v$#chw<(8G
z=IytesgP{G+kR#pE^PbY>7<_}UuJW|Hk_5=%RDa;)WvBjv?6&vsOqhVhfLpws0Ssg
z0wtdljf2i!MI#z9=7U_f!M;93j14Rj+{+I1*XDS}Iqnd{Skje#<A|Xvm*N4=)+9Xz
z98d-6ys!CujSsga1)j{v^DFN4lPLH!bLlHm`{31cb63w@jZEr?eDRZ6+t!+oQ7doT
zfJuFJ4lZ7ctn9D(;^d<#i_M@Zi<~h8rGr+2@~|5A+)8=Qj6BatHBaU>1LhuT9$*+i
zISs*?QSl6*Q8J9?XPcvHjU0IrY%!bP!U6OI>O22MCLYhkFIA~z(%t)ZQ&Xa9wMSPC
zQMCh7L^kAz6tGp%Q1u>i3JgM@{0I)VD^Op0dmQfHPpkkH!(ovIOwp1@w?>oHR#X)P
z5UQ%!G#TAGD&x5L6WoJ?UUoMd8G?dFk+nML)0LeBx;TuuUx-TaB?L1741+kjlmj$Q
zt}D5P_aukBUKADa4Vv;s^1`fQCcBhAxi6LKOWmQ08jaDLh$xfZIXT&7DYX!2eQlv^
z^`o;y{&R_*VK;yE16G$|TF1zA3U2(W7E{@+ZxUsZlyCcE%hHp9_dXhf4ZnHaK{mN4
zEuCPM&EXkFE$u=qL_l$=!{!RWQ&u~kDRbZ#H6!{k4rfSxk^@h9liTm>DP0uBClXzw
z_SZc<VZxU5=KtI%>V2BDkq}9ddUQ#f)Fiz}R;AA-hcg=yEM=tnmzj)e7^$x0`1RMd
zS$pYUJfUe%NUAL9nT)Q`!<j*cDo-eMlI_KQ!TSH3$T!#=Sz+V(GC^<<1`ZGkxzTE&
ztUC1x#HMglqKO!~do3aK2WUjr0rkU|Kv$i=sxdq=Ygi49WMzwxscd$N5KGPyt)VFN
zF<qBT)?Z}ykM$Sxy5V8XP;{+W)O5utb$4rq%9=7pHPzVM_@h5+7+Sw#NYWuwz4A)c
zJS0hm(l3z@hw>qXuqS9V#ImX~IZ}JHX6UM>4c|SiX{uf?94oMMs-@;q8dcdkVYxEG
z<<@xf?5cNp5@~OjqPF~(d9y)h*uu`eK>CI9FQMjMKPsy$sQLFC#-qLz5?zzz&&2<J
zi0LbMLhiz+{tlkJ<CP>`*77B%ws;Rw^!m74SP*VtJ>6AzobXgW*pyh}zJdA3L~Y;d
z<cwJ5Ci0lc`)aQiIUjivbPxdNVn#x&V1<_J-w!20V}KpmVm1D*6Tx^qI6G{GLRKQ<
zbSHM+u#;W748QnxJc<HKAcq>JA&Hu9DTi(%&G+Z$^Iw2_V5NqTjoy!)xTJe96^rV_
zv+RaUqN^A!bxrKtIRV!%c`JVR?RfkPND&Fyen&!%n~E+IvHQ^@(jT*jBLCu-=f5Go
zjXWbv2wR1_g@@Q0Sfb!HvVaC6g)*PFW<`Wk1f@PO>w)PFq8vDzmRgp0^;)G=Oaw(l
zVuVSXn*t$-yo!~>_AT{1=+dAnZpDG8(L7ZP2?X?D^-K!c+?FH_*^B};2UFK>qqa1p
z1vhOlc4`S*)M9~rzZoG!v8WRt9yF+;#EV8E7&Ah8!l2<WSzMJ{k9FqO{Vzyg4KMf{
z-bvvxaUzARN}#JN;H34Otf*H6_1vB-H?n0RLBml;5p9zObRq_fxDq!Ex|Ox65!Tp*
zG8xi3a|W!AoJ!||cd=X8`+~t3=Oz7bw8{TE_R;Oap?_=tEGAm$hz@Z)e+=yGWpzjL
z1zkVNwp*HZRM(o{V%x6w$c6-g_R4zU?`Z5fuoF9~>+l@yJ+jR9a_`YyeeEx~`s%ZQ
z3*xlBE3b~!AyNkLPQ<D7c%k5>u7-w{D!_2Z#$$kb#6FaI>Gd@cq)p>jg#$Bhw8CNY
z!4I&b^?^575fZXK-fPHqQh&W2wB|#hTdmL~MJnlfQVRrFga5C<mdNYk@ky3sIP`#g
zttJ_|L$6czV?;YaNZ5(=Sz$G7Ss`{X!+1zAf<aQRG$QY?qGD7I{cMEY&Ta{t1w#`_
z*cb~ZtSf`|HufSa8ONpjjU;6+c|g9NN8Vbp!mM;itG;;ti;Nck3Zv_GxY*gADtcK`
zX%q+$Hu4;>y>Lww;G@xPt!JB6bG)Hit0n+En9}j1gNmdD7^(29SmcY5a3Znc-caBT
zubB=8+n1{S16REF;r#qmDj6LpMY_zG73s2-$oI{Zd3bP>7Gs+_Nh3Gvf#wUMwCRt+
z(Wm-vN+#Qvb{j`OU#?8e>*+wOD`G{hu1IQ2mp1@ZK&!tuzl6FiT|!pq$2AMIMcFDH
zF9B8*YIDb79+|9H*$m@U06wR>iEt8D;Zj16!c|}wg6KnVfM1~s<Q1R@W*E^${!>7&
z%ksNYmZ1cc`9R(<0@v$-uP!tK(GBRN_obDEXh7%wdOvEgKA?3QN>=Z+BH?Q6sz_ZA
z9KJLm#$ub<^Op4bR}|@<q-iPgCBzU-D`%1`wFUr8;v+T?;cOt<z&P9Km==4WT(V>%
z6j#HSo~`S9W7FV(y}Km~{W9B2gJ0(s)x{cf48`u^I9O}Y5^MJ{5Yi*$cnRULKtL%^
z%t#=~tWK6iffHPj4X;nzj;1+w`t=(kb22ULf^!-Q2O{FG0+n@9>f0$MY$qOzJ9a|c
z*(Zspgg|K0&R!YUO;e9wnYEL1s@z>+r>d#jq|z;`wkXO{YC;Sf0aXncVR0fQ$)f1z
z4FUbJ9Xx-vbV1vm$ov$gtB26id&6Ba+XDb%sYgwcPlKo(f1GE@`IIs1d+1qptejS&
z15qW?8wu#2)&nF9;`s(=CvmcqbC|N|ZuOhdWM0#P-Jz&vnu6bF8Bk8ZHQa`1G^^y%
ziM1v4a}Rzkax<^mCeX354|J3}UB+Uc)lO-v{yIV77ktIfC!zFP0C`>8?K=vq{Z#rq
z)_S^5;zWIfZD?_)1x^yV$6Au!Jvq61@>5T3v?sHY9Pf|IQg+gInG)lZaJBiP?cF&-
zDam#Fu?&Nr7Tp@FLU<!o5SxJ1i_{;PZ%g(UTK;ho>(vsnty|lPEFY>%YidT|m=wHS
zb+)SZV$05gXD-6+y1|Q6%UehB0yy3NxYtKH*kug?X5F3&jr$TS*_hbiZA=!{w&wfr
zd;WuHXwPVDW15d^?7K9(D+0|N0`u@iGS&p)$*<P5EC0fe(SW5zyEM&=@pW{C0FNw!
zdmbSgN8Ri(TtGRTgoL`~s>gM)DbD{cY2hJGB+h2{R!Maa_*GfRjfx_;dDRGLw`t(X
zRTSgJ_*O<@gMa2MS@_SzvFhG^)v><++&?wdJUN<EEjBmkvQB;s?eb&7ra3lMm^5BY
z%mes-G4c<fGx`q^UzvkK9?HDBDD^d;5SP|`0M!19SDtLU@S*jKPI99SUW|`JF+Ls{
z^M62p^Xx^+KPvqHUFMsi%s2m^Rpt#GCHdc4X3AE<&FvlQD=KTTw&Ud#^eWtB#$QPR
zL#{00!x!9RpAha4?iKzBC9NGCu7sc41su5+=gUp^uCCf!*H-N|FBE$D>VEhRZr{&l
z_<~J394kz4!Y~82L=z6-gbzQ~*TjDtkDP|dV*KVcd7L%zOYm5d<xj}AY{{}3h}uRt
zDa(l-ls#NB5uXSesctLNt*b1{5<dTCJk~kwv?iYQmBd+-$5|7<1dsoXJ^d3hD}&7n
zF%s=g8DXi<Y5qAXJC9E8XWKWMWmILkr5A;CShujBjhbo>%~{sskB^Y`eA4r(b<pEV
zt0n5_Q=4^E^!kLKf1WF12ciVA2Ae2=4Q)tUJz8|Qz(`Y5QEuizIu=tSR%2`|vccMb
z*-$paPTqw^pLqCudV{6KVrhll5ny*>P#B7_{``5L48de;;344(;8*4m{$T=)w9#G<
z^(}yRk$^aCBG~AH{k<CDCOv8iO^4ZPB60K@2h4+AuiajMC8oMZrS_8jT1B;~tc)Dp
zvhh+Pjwv#=Ri$V1hGJC|m1o|(b4pT)Oo~I1++Zzz$%%nJiJhv_#vNbBak;^9x-NHy
zhMdbksmMl9QwL|ZTrP@-Hf|kKwV)v@J^dRtiej}mNTfGkGk06JD9hck<bjc%>QFXv
zV)yWYq$owZWLfOKZSI;LoEBWYOwV3p4XvV7IhdCp*?^n^sIE>b3>{_oWQ)QASdOgr
z@a2EXLOO<2UzY3kwr$74u0$uyF;q$%NCog2SK~EuQltW;{n%*k4CjY-z$t9Eero-S
zoPvZixltf|-{a$)j#<{EXS3qzT>5dk9u$7dD@R*6>cm|Wu4-k%r!M@m&x@6K!Dsz7
zS$~D+Q153w#cMU94h*ovg~Dd$qL<YOtD6?tm_A^ssye2sH(emK*iVJ{!i6K)2hRVJ
zjjeC6`usz*p+@G5r>!l<TX0IPd4qbhbG7ZZ!m~Ny*tWp3;EcCg%MJy27c7z?y<!!;
z>D7AMV&J+r-NgCrPzujTw6!00To|e#Ay2E46ry%c6;(B;S|mDK#R)@>87iBIVk~AU
zN^LeOn(VqtXwIe~&CaK&D$2y9I~$Fi)FiT~(p28o_@g964$7L!9#&(Mt!c(^f{XFl
zpFN9M@GMb<XVJjA&pIIml<okHrBqXtMXK)VJ5c3wV3eazM0qi52l{rYl-+KrsTd7(
z2ec@~qEazhEJoR#LG}b1)dKi5D3uI;lf36yR>$*{s{1_ljEg-FagM(v>f~EO3}o`)
znxNcj&Js+H<ZORztnXNHMRW9urvG(3&^P`FSsr*~ye|;{YhA18j<!-f);AVw>)<Z4
zwPpbPp+#|;ZFz`53t+Z9#}gCv8L?V(O{`fYIzqSxzB^p&XF|nnfCP<(5hQ_lZ#X0l
ziLBL$EJ1{_s5o^0P(C`a5xt2`ne5u9u46Y^KQn?s<7ZmWKq`M-F!WAQG<R(#p^)}A
zQG92p`CQ@1zPS?DiwGHPz5|)wzmm^^&LHu8@L&%`_HDgZqUtI@W+H66bK7GluG?kk
z{hBs5yYp3q+_+<IY{0ZaZ!_$S*|&>4J$Ki(6OT1CmV*vlzhl>NLWTy+jBUIvWSM<C
ze0D$JV=>1$U`}i2#*wVIpkgw;Kzz+w?c&#EJxCf7;v30@j({}Qg4%`1eDgG$K}hT@
zBEVeW@bON#yH34;G<uE4y*F<`Zf#m?8FbYZlqM$t-p;kD2d#A15WGh28lT&Al`R?@
zRZ7B-TzPzVpI2YazlP($_*`lGn7%3l**v^!O4pU6ckSr&>i_<XIWU~tSnNoKvW8fl
ze}>h09&J87Xb7JL1I+aa*BV{)+gpKU#pws0eBj2tY0J9LveHvS-Kay<L-ME5+QaI%
zP91sRfg}50Yvs9`R9^4vMg=3bZe0JktZDM&mN!Oz#p>)WtmVg9IXn%J7R3cKA0onf
zx~trL!s9H&$qP@I8Sc9@V?IHf&sv9p)Q2@3_9%y~Pd>rEdBHXo410mq+!HkR32Ul<
zrGJW*DjHY`L|f(f1<Fdhp&U7{8a#YT*E}EEuZ(m4s$x21x&2Bk!cj_nC2PH`pTGQD
zG)6lM#&O-D|9lQSyONIn!sefH2_UyX3WIKBP(DC}8+NsN#=zLzjvEPi)y~;5P3zZ<
zUDus>>|NyPc2^h}BINk49oG*~c3EpY_UDfYK3uFZluPXMkV23;VI6|A>RmJy;68G@
zeCj)TY$xtCL`6uMlBc5b)l^|1(>#?KD5QD@GIpYr3gt$Fy4pXbs;N@K&I~mFZ<LNL
z5k)>ND@2=~nl56>LAk%1E&7@6emPOd3`BcUrO{khT%76;hD)iQ=s>1$6^g;`lPQ(s
z+3W%r3Cb<L5U0N;xn4_$sY#{SNr1&YPogxQbDeQea+b{<OF&YDMswt}cS6{)xq>PY
z+sVQ)O?#Nld|A#{6_7Za_u}c;c2u!g7+ZAnaamCF{1?&BYXEhA`T-fcjcS*Om9dGr
zZ`~RKCk4f7fi3Y>^79d0yF=GU?0$RN{wc<rzkI-oh>5FX#s>`c>+7?!4KgvJ>vw1@
zAIsLC#(49W2{B?lkahE&9BX8)KCUO@m4~t#6Ntm#j3h@HcaVjp=0DzPg-C$>oo#Pi
z+Q{Bcj<d7?30Zft{bfHU+P-Ifna$-n7r7RnL3>e}sKQ)`h!^hnlAn7|{QTvYeLa8Y
zD0_`k&p+<mgy4PmnmKZh_x%3DEJs~oFCD!z|9Iji({xPh9*fiJf%E@G_-EGUY$~o-
zIvth6Jn_T`8zM*8s5`=j!-zFy-IQUc>?}h@EDP3tVLw}gDtJG4FgD3OjO7q#@ooO>
zkFS0h>=oGkUuO5SrN4;tR)(m2o<Qx%3faV-ph%L!p3(e{Wj&A2P%KMnJ;eQvv+O%Q
z4CROxI-St7(N#UR`qd=ml?<NR+P9!B*Je+nD~~869ZPrJTWmbo5f1dy!b@PY4_MMH
z!Ww<+tuTo!;(8A8%!SfVzKlHnbf0Zd9DOYco$gMM7sOiACp~EKY};sa^QFlW8*`sQ
zwXxmmr&adHR`J%34%7$Jlc-g8Lrhg;s=(Wu_0tL<X%fE7v|tZ>jb9-Tc-8xhR)i${
zZP3vmUK@UiwIT2rz)MlPD^@!iH2%E{K4$0Imv-tMg5rbA8KUtvz?!R*?V`%RdzYrF
zcWK&Ps;cd>8kUP8|CYOh3ZyE*yRFswjO@9dH9X?gaXnrHsAGMFoLKXKsdeA9`k5`Q
zOfYn01!dKtx{BlPU-L*;BJt~<S#!B!^(yxP2*A9q7P_|X1Fl%->)SSp8C)mU;*atr
zIE><iXa^Fh>-D?>(8wMG0aZIsflrQO*yI11wWvesFJKHT>2%5KlH6Q>WfA;$*v1kJ
zh+j~aGe-Zp&&+iC(k`sy-=UEAD~ogNzz%N?$6%0UzpCrKn*P-+5QlyT4t*K8ruFJ@
z4M(R-1N}3ri+8ZGI4B6=s_T@aJvLYg6rYce_As#xax!DiQ##M4p~nrI!(cWa_tHo*
zWY}Y@MDy$m=h+*_?02G4XGdDgwsr|IAb}pth(20ml5^l3mjvP6y$z`dUVFt<&q(*)
zYV*|e;o88pb3=RL$)5hHw^PmBimJU^O^x1Snm<<hYMJWZ!_%XCf{HYE?NDE6sy}iw
zjUgh%Vhr-UqOx@KK-V;6{j&TvFTpLXBCTJR12LY<Em2#~2{3ykHUdnxRy&AF>lDfb
zCs!|2Xdzw!j-8Z~)O>lCRM-qp{{G4vcZ}_5{^O3N`5iaj_&TDHT_pJk+c9r@-HktF
zXW)5sc{%$lQ4)po&98{!+^^1ylHl6eeTnQq3?!h;z4g@dO9?wv_Vr}bNiC+GG^|kL
zup$A>%hwFM5wfNhHEq%CAt8B639`=cbWh86ZwH$jyKs-)Lij|T+ps%7I%E?(&NjXV
z;5L$Sm_5#bw~*at4>)uRDpN8E^_Yu5Q4zOZz6|?Tp~D+b31yILZD=OR&2P98q4Wkb
zJp*HHf8K1&T`>zPl*W8!U@)^Q9Ybj}JM3(D`-CsydIj<U!5L9q4IWzolpL4peKNTv
zl{W*@;_{*tF!QM`Nt%iwR7b6Ftgo8LcZC7cH{6v^RQrw<jB|dx8dg6GNRNAxOpdp-
z+VK!~>*&r<2|fqZDk{GYO5?6o&Z;m5;KxU|PPMe!r?wtN7W3Tr#=|;2iN2{WH_gkv
z9}!qDojb1Q+uZ29e)D$ZunbfV$m;$n@WwpVzYO~>Eu>}LpNE6NzNdlwNC#)KRZgHi
zq~m%RE%?K@vU^Ag>DY1H37oQ?wb);$Xt<e0a{mf4Wm#<7=lO&HU6USRSeQV`&354u
z7b&}CYw!6t;f7}Dk*L#yL4|djDwy_qWmBqoHO{uiu>@Jrw1%dI0Qf)?<)BJ!jf7y=
z_Y(S#4mFD1-NnZ9Sc_zlMH|Is4F$Y)BB54=A#2CZ`u$BePj?rWi{0l1)V02zJ>hJl
zyNI+j_!D>&`6k;Zu*xjf>JBeEFl0~@#&s^>keY{N1#=Oxg3<Z=-y4;aN|dbv<U@)m
zxBLkN$g6t7(>5K`q9>y_ZlmVRQ5Mn0sQri>P*RpbzJZ<unm_9+PMG1vh?10}%S-LH
zTyooT@Rey$_%#4N@$2RO>k0gUKldZHKK%h8Bt~&}oRMA8#S9sd%kGk-owm}G^ZO<;
zV+AuV>umI7Mr!%Aby_3h<3=DjPxP)0b3;RycWJiOJ5lP11{88E7%(2E2|flx=f6PC
zp?wY;<LI!#mZ(}Dk*bq35>8Ok3?rb)ckEDRWXr~MBr>qSQI-^{t1E1litIfuo+h^`
z$>8i=mu=f%YFc>Pbr0=QO+%yNyev0&7C&;^o(_Ml{;|=jPv6*JY3veP`pK#GWcB+v
zIL=s2uvOdr>xPF<Un0P$osuvj%yA@almJn9FGz`s=t>xkawqGx@e$$yqt!g1yV{6Y
zE~&tHj>nt|Fa_FJah~nL$A9+mvL0z}kLYCrN*vLEuInO^Lf^+iZ{wKP4k0p?jfk|R
ztDwJHclH@!7#4~;!mlrX{N4lGg28PE?gi0dAgZQ`B$|QdS)V3wRWUSGlyv=RvDg(3
z2E#qk2ZNw)`;!iAY`|HUP$nWobMags`@$B63zog==_}>Sop49hCDLfFkW=XxSN(t*
zW_8TEa%`Vxa1VC&B)f7q+v{_QkQYI8Sj0o}(V7%?27MPnog&j{OBSl`<xRS`S}*J?
zETbve-FvGzKeCIVkkF!;xZG=<Q3?C+3z-;p$int*+otRNx;{6DLC0CAh^+aO_42r9
zIB)$8`6l^8wudc)4~ov6C5%zBYA*^imvTJkZ4`TtTV|I<zOp(ce!SP)Kjw~GR+mYx
zU!5ZOY3C@+oAq_x<&}xs-@AqSt83b?yT&wArpXhisd_1Iy{7#-Ot=*iRFk$-{Q6m0
zHp+%To73Tlie;683?KYLvN;63M6&iTm5a49P0+f^F4W0lG`IVP8+K=7J>hh%mJanq
zv%8<&osIT{(zSYbxOu*-t2Yt<m#(f%JaM?(yK`r6+0Lc6|Htj!xnL>7PD^&K8&30)
z{rin=+fK3L92hogt#ZkN!TJh#v4j$`J`+`Gx#j@oqoaW1W`&JtC?EJRF0y2`=l}|&
z1540%#eoCWn@2X1%VwJ&IZ)qkkm->RPRiH6Z)8fmY?fRLNzJce(ld~id}e?Bz|fzL
z?7Uu{%pVvKcl`Fq2WKx6hgKz!{|mAqf2>2l&GBovd9zE+#me)}xrW=VIB9S$pbM(c
zw~}Q{x)PI4x9kR#)_B}3TqfKlyiRyG>n-J$a<VI>bWL479Y-`SX^~?wr%>~t8yW5G
zqtRx40=#m`W2#qHnb3kumO|aN@4L|bd-6o58<U!rWOM`s8`-uoZ*XOSC9W^<SywLM
zAX#^Jm#L=IF15yfDb?(f-Z%=A@VzY43eU7e^>bHB64kTrGl6Q;sU%&AB;MB9*{vA)
zm24zXSI>|wPXE0tZrGbSkP!Sf+eZA-d30O(`)l&L^lSs|+AFMf0ldWfFj%@14n-%i
zY_WkgC|;<xcbIOiYP$wZ8vzMzvy{6{6fKd8H*`;}Oc5kPn<$f6uKs3T3Y)Ncm|>}R
z%WW)^C5ksr4{i$&4TZ1qImXPk+MVyCf^42}*jVUA+xtPbLR1*-xS3IpU^fU}%`X#<
z3Rel&3CD#K!mYv`tgqb5ddq_XdOV|*I6Cu=varm4=pmQ=AXHqZ$zaACWg)>U-1`hj
z&%t{eWpR843(IaCu0eiq=2m7QNX{X>49|pnS?Iw1LIV)S*nbGg5<50mSZ#wlnk6_i
zAqf*3q~WIGg+}AN(BSv2v{Tvhns{^T5iHjdB)d1PxFNwu<G+=LuN1r>czK0K@%at+
ziqG#<5Ria!tF<an>KG)si;qHr$VsmEhD8wM?P-2*4~Yhr!S%H^ra|BXNrJwwDBt^@
zq6DI2?qwE?wQ1UA)b*N0|MfWdpa7daMba4*+=FmGh)i8JnNNDSf~&rOk*ZX;Me98W
zU(;N%V%A18lmM;pprtZGHDp<gAn$LN{<IX<A7LXoEz8#8{7Nv;<ETAKS75?a%uG;K
zMDh16xT*PPe$TE#Yg{e6<H|)yg(2mGsAH2;+w-2Ys-!n3y0;wJ(w*qSk(xZ647CKD
zd`O+ON4p2NY#Hnxweh{m{NUic;(<%HOC$N{8VB}Uf=k&%SGR7W)wZx}0cloc#+?mZ
zM+AIcNVxK5hd2lzd7rPjKTgG)nrChjX^&;72}2~&l%|wTQA%gij5aJQS|ThfMnW|#
zGLP7j&EN8M1x?Xp`MKw0NmoKzKr=}urf5bekq8-@66ukM$x{9OqTpg6z_-wtldDzB
zZ3F#|SVeLb7FX9aS)_U+(ER&AgKf8|KBm)oJRSq;-S=tBtUqLr?Adc9d%6wS3CHGH
zj>+2L-q*#=gEBg-?_S1M@%G-@r)5*CC@sbOP6*L*NB;E@MiF#t%&=jJunn<+!I+!)
zxEn6DlUS52Fsc}l6;852#vZW513(VL)D?CeEw!I`qK&@*asS${qMz+Uz$J3ZtV57e
z8H``bY~$tFghr`H&aMu9<n1WSyDCKAHvct1ey>)^G$(l&2|s?~`|Nj9Pg+$hMd@+U
zs%olgI?<zGh^NX$uadV+R)3G!TJtI%e&deEf`7w)<Z#-}?(`^%7g~y%?tFH_m#cNv
z!$e(1`A9(+7N)=&xn9AhQd?XN#BwUeY>^h+iGZT4HlebbV}VV|IG}h6i!Gdu20|!}
z#*j4ZRA1sp!_^0#eBje|G(me}+U|s6IswhGqYXS~5p+oeMj9;qad&m7WT&sGA9>(`
zhoZKl#d>IB)X@TtAtz${`FYIe--`+nL6|0-XI}=ZZ*I}{zVE(|{nfwqtvU-{M8=8T
zpUL#U8rVtL$NvO<D#8xA3OK&77YCIm1hEPd(92;x-1WFTBSt}(1$t0r4ztB35#gv5
z2=;`!-&(86^g2nEr@MN(52cBo9~s#;VkLS$XjsqZC0X5kq)W2o{PO|hzuztg`}+n0
z@vta5*+rR>#2zORdl(pXxo}UyB3lE-rv?>^Shv>|A`d>Lw`6Y~Z6PSRa84AO?E4#{
zXBQ{x?3#hP#X_;f$Zqa@g@Tz+$uC$KA$89}mz*1WP5!%6vro;ACV#G)8+!V#P{V3f
zr6&qKdYsH)r9GaFjj}wmqi=d75$Q=O>An+`<q4}-6nYNjKZ@?;1wlRk68et+6IO<Z
zkY@X%3Gfb5XCrEaz}QNZ!R8Y-0wwV7gI1sk$F=pG0q4cs(|j$O5#wnR2fgiD>Aw#j
z2?ld|cwu|IZ|1tL;I18o@6^Xgy*O5xoP5i^%Qo~|nVs*Nu}2Ty^Y)%=N<DkKj6WUQ
zJ1{g%)bh7`7AJ$F(Oq|DCk|$g&mKBe>ixFbU3;i(s}pa(yq^$bd_z1n7#TQvX{;+B
z4~~*|hPPi=B{H#hycz0TLq0Xo6r0%S*dtsjTq#^H+#=lRaf4SucDX9@uHDCl;;XqH
zi3^;sPABh9MLDiqGRR@&l5Co1)V2Tk*QkD^`&6m@algVgnU4leCt|M&#bX?NF82bA
z!pAl3X$YUzw8!1^-GSzR!>1g@<0HQK2A{t4y?7KjKgh+o)sX`B^xcK9=f%F-mVW`-
zl=r#ns?Tqorxq4cC9whW)`jL-BJ6CVjo7dD#R0sfxl&3Ip_E!lm5{x{e$V68OY!(>
zU%W%7R>yuTkTHjQK6V&QTpNc;faW~;3~7@8@eVU$OF#S{Y;NcZ9rsM;2&F4p(8#UO
z$Agix2$kjcg%A@q2s1uhbB`kvuRGPE|HP9h(DibPV=Y38?Teac+{k>3<?dZt=DRUC
zEX3mrjaCdJjn1p>IsmMr9_|HYt*>KuWoJ7Kl$BoqqRY?snNP=-W9gNptTx5gY48z%
z0crTPk5NQ2md$2g^kvbeeAt-=YAm$93`KASV$<5n<+tAYiCb?OI$T>=AS?U-VAHkt
z+;i=wKWM(AIxuzf%~Jy|9kYvlSC3Ex{#=oJQ)T0|j8AhRC)q3nekeTT83k=0!17ZZ
z><*QC`lj=5rYbPeM}`|>pa&9~FM?r6;nJ<a?vNFs)_cm=bjQa(Zv@{v!m^zmnVT8P
z#p2_?wFsZLIK1hagl=sJcksI7C{0*f*GO)+^b$HaY>B#`+YQ<YHSG4ULJhb!-W6&v
zbZ99gvA_QSy|=WXu3X+tyF5i!qN=b}*bln?>z8cx^wkR85=UQ#MdRwP_=Il=^S_7i
zcyb-X#x<YTeB3vp`SB?{Hb02+k(0io>u(zI@PG$YL2pHS*&e*bHT8T}DQNy(Pt>Z=
zH`D~ITwE!d(TZ%B4C_|kn(5lTcQu{<zi`U^U9^*Iel$WA%Zw!JNA^tbP_m<T+6l-s
zLQ}>>{p{4Zks@{9#P%sZTcb15mvEG?;6%F%?JCc8vzAwlSXXa0(N&NV0h={#x2dR^
z=v7xmGpf?-oAgw?@mn3VzKk~YUnXA`rdhl10^61Nj8q3BVb?uV&U4OW%am;b!JAHo
zyGF~in#j4DsL@)zkf`SpPNgR0O67to+1a__;km3W5rbxJQ54A(JJ?xj5YfmC>>nS>
zKNyg+-2)rLm?cPv)O^;>^0$5IrSu;*f2mtPvR)#J7Wknx5+B`uNl(uu+ehQnv^B%f
zY?DU%XE!#w5<Qj}j`m$Sm10*^i+!X?x?;)X$xtZNJQD(LHjKN^q2Iwc>)~72T)<W1
zojN0wG9uS-FCl%09!|?8zw<#Snn28nmN!ne6cAOO$!*DPkpO6AT2$2!J56@{E3$pK
zXHe0GuD${V><+zQIQ>1<5}ThzmAy|a%NixI<FVs$LPSOSV`_=j@CIs1yN0GTWhhfG
zkT|wZqWL}2w~IaU2^ampjpZ0aYQ3d)$QKSAtd6&Ec;FA*p(2mL4egI&H{cR-YHaM3
z+aYv%nZ#ZueFKk|xeg!~sLnQsL|{QS%VOsRTtqNGj6_Xqhh)*c&^+av>og&S_{^+q
zu(&!DWOp5NOY~x}kM{%aH?1QWI2VgN+gP=z90j;=`X<8$DL&i!onf)>`&Sgr@0)xS
z5q^DzK)lTf)*UL`?XK$(t|i-rB065_Nw!szodwYlHzuxxFXr)>sJw%{jur9!SZahd
z$1**!Q<m=>Vq*}(ewj^2&l~p5SZ=|mTdJd%x{9A#0-bfVGj7!h&Ze#UDti0vFk4I6
zin>G^=Y>@jgj4PqSp;9w5Lsz9I+t8m%LiM_qg%SziZISb%O%2%!fS*#T#Pax7nt{*
z3#8XCLPcC?4H2{8jQORrpc=n~YR~5dt_IHkmi;FoHKoQ>U?yX5%72Y4L<7xJoXZ!8
zavn(YNxbwZ9`E+WKjV9fnri;YcS-1wy%jnz`}mi2d`ShrkZ(-MBCGcW_HzTWg6aSD
zoTeQ+rfEFz^r#!?|GZlm;mFjh+JMnyEgShx>vF0lD$#hsZ6rUCz^Rp;C@k;kG$@xv
zL;JlYWQupLv<nN%C^>&7K)D%tfCk9&0=QW8+4IMde%$fvsG8_S+Wum60;hI%clK=U
zH2htN<Z1q-qmw`DVI9c6xfDEHH*h{(ONcv#^^tP@An8iA5YMq6cBsWh12wCbIG2qt
z**q?SJxKH8%VcSJ1&MV&okFD1UX=Y&_{YooBXK*M8@Ru4jz$S@#&S3=-C73|OauYX
z5Epz5H9zK-*<}7t-=TE$p2J#R{pw|UL7~s7bd)S3sS1Y=azZup990VXW%rEI`eAmU
z-=S*Wk7J($eYI#c*Pb=qnW!Ty)K}3z=zbo2Qs1X(_qo3_ZBTg-4lLssWNqX9R@$t;
z)jA?wz^_@uA8*<9)Gsnqa;$&;TFoof>b1o8>SmTKVA;Ojxjkw5tokw=_2^IN<#<&p
zyXGFf-1M%(9kX*=FwvzQ#r1qHvF`G)roBTEV-s>rPTvH{4<s<Y4~OyDxe;GS<Gz^A
zvHrNkYEte$uIpgmJOtr+0mre>F$OL{>)va9Ux6e;f%h<PQ1ZgBiWhQiez1$mf{05V
zspN(AYPk^Sj=9FB=BJi`v&4D<&UF0PWWOnH-!K%jZ?Ky~+))xolU%xCXaVa2*mv+-
z;_6TSKfak{x5jQ;^!ZKtv~`0|&ynLV7El&<K)A9)i>o4`;NE3^wxz2vX;p87Ay0gH
zeOVpf<HY-5de?e4jIf}uw}&0E23&)Wh0{b!W#G~@I~>EjF8l}4yN`}%G%Zt_i$#kw
znl@uLUqI<<I@XA#*(^imA{%p%W2kFj>m184^fP{|AfEr#`7ekv`I^uRT!(1gp`8xO
zI(XORy6eD<J2I0{-%I3rU(TO49{x;ssWFEP>TOi+PE8?qxjxLpmpD^-_!5<^KuY-G
zFb_8lbM7+<Z+-ZW(+b^&+2$Ih?(QjMN7qL%RNl*Z)x&!fcApCOD-cc%bCx*YpR9;)
zVc%jRs__WUeXifGYK`r*;=nf?5zDMqgx17I-MO%K!+lrjM3tInBt<8q>~Pg|raq8X
z6iMtoj1wW77k55~lOsDN!v0N+pqDlsXTSaNzVRMOCAZ>S2vg%uoFCzo>#;)F2>B{n
z+JG)|0X-VdlIj}qfEUgX^5a6fdBYVnX45N%C$Kgqd?9>xWu$vQc`|ot`lTzV9ivy=
zI8wn1oLCd4Rn+Hu>HJ@ipOR0r^|#AKeTMc18_TvSaJ@{)PZX$L^ItN9qrKf~=I17!
zYda6Vhp4K1sV{qJ<^@)myrTSU$HDis^cj|r1_3N&kYEeZ4tqX#qF|KB>Uo)5Am45r
z_TYhYj8VPqrIH-;Us&P<65<V?TUcoN1XZiA`R6kex%yk(vCXF_F0FFoUV638;y|jn
zL*7--0)v?FWW5L)!!NR#iH$2pulYlwk-y1k^IFtyK4eE(Btt@4%ump<zZD+5-O4sU
zu4ymA633oKj%Kab0BS_1FW8B7s3z5Q@>=#*hjPA^RIiN?m2xoa<`NuJsn>k)HK`lk
za_zNmxpq11IC;m+i;87QWQk?LjHHn&4Ob4n<~0W^!{>!-A?v1O2>dMst%EA-dTK{|
za~!A&Q2whCN!G|<*SI*!h09exZO}>YtqoOfc3X*aUP=d5@ejxa`79pKv^xt@R342b
z3Jco9CpGOPuzOg*R!lr)(<NI58n6_^8vKGE3xxc3yH7QJ#1}05&vK1pPmRU<;iCX|
ziA690WH8P1KM@}yA7MQ&4}85M+fBw1b`Wg!w-5&vADu)!!PDwBCs*sm`D%pJ$tS4#
zh;95$F!X)Henh2dyV0=E$*T4ZOTGG+mh#d+D%LNrR;_Pns=OkWpEAQzO_pm?*nFxi
zI=9~HEK*yXlFi4n#4t$qaZ{cWZR*+tavi=HdTbwZ_b6;`08`I$X-2G<+Rk-Xhp;EP
zWva4uA6rgD8cwSl??Pp#cl(ZH`GF@Nh*l&~q4Dv=#yv;wS%u3AT2XDC;~-d})+g(V
zSB846Uh-=lbMV1<j5c(#qtp*?S7d3(+$e79P&mH%l7(B|xA9CW{VO9{G33d?ji)*^
zjW4Y}aAfx;LGby(3<Gz&4t>kD&O}AxToGTl4p>X6wY^0%o#j$0JJnAb{ZlAsAj_#z
zR;LZtZ<a8~vg@#MiU!W6N<gEOQjLXDsxNwf8-L~gXkV%n4ZzN+6VrnVJB5>NK4ck{
zWl`}O3&W}h@cLRtAfVsiI>Lbxg3Pj9Ds!_HcIz6CV+jXG8vAM-Q?<H_hW+<l`DAp~
zGHA&NsUca3CUt63gQdo1EJH10Dv_f}L$zd0{uh|UxJTG*W^k5uw%ZJ&F_g(7H1^j?
zUn-tcqZ07v*nNg%lQ1<58e0E?tSQYGSY^QD*rD9T>A0>kj;AlNdikoL3mah9L4ffH
zAhJ%q!kdaMa3x&eN}%|`#hu_g%Imu%d!QQ5(x_+*EiPuSo!h_Fux=euRP9tEe0fTa
z%b7PE7)^2ZYFB9Ucu`Z09aDQ7%X8OGY4UCw68l2oLnpV?bz{ddWjZ&y;7Yi-EOx7~
z1pXq6IG$Gl1c22&2-2~!K(AY@TEzP8NTT^W&<E<H*@5L?R1{;@0XV<M316cp?=v#`
z{Wh}ON-4*-g6wtn9*=J&Ze?{5f&G86g-|-faXQ#i{jv%{qPIIz%GnY(&BV0REhTSP
zZIb@=1^dRG$=!*VlCZ3V5=-n(-l^`sP*GcDT@iK&cd)7gPAZ@ry2A*-e_|A@zL2>F
zxaP=AW-aRZ0^_ZTiabzow$eE+?soh0W(e2kiLd^`U?e3;*)D@ds1Xe*q8L?mMeWmR
z&58v?c16+T)tAnh{t5^Th1q_uvjWJN(iKh?#Rw!tL|s-TiHKoU7BxzOk{vbSA{!lR
zuYTOHgN9dCW-uC%#8z#!>&k>4-j{c~aRQJzUsi+eo}ao*2`QKT@vm>hm3nz-QB@a*
z$`4+=pTRtt2Odtnr8ZhFx&GPEJsa>zYh32-IfinD0I1-`Jvyjd_p&<q?Tsm&zQvLx
zdb7dSf-7ZP2^d;QlM*TN&Q#R6nM#uN7OJN<YN>?8E*JsDmaqK5{`?@@Dp{8P8-ef-
zV19VdZK@K`%?h|__}ysW2jRePz-78PnBQ-J2ZxHO2mT-4-UQCEqr4YYovqHk=tw%P
zrPW$mOYiDdOX`{F>Cx=_Onb&2k8K7EV{GGfY-1K<pyMH6o6P~P?T{PNA%WNdf-wXL
zYqN(Wyyu5=30X+yy+8taK%9*wi8Zgjs&k~H?w+x8@BO`*)>-Nt=~UIJ`s!Q%pD5k>
zZX@FJ#Gm8NkvUTW-A>Qm9B0BUO$ow~a=>TINBp33nUc`JJm_a^NO&ypP<9QwoO<v^
zErpjQtSyi19A6wqlW>^#K1CQVD{n_{gv%&G^#_Ddrpk-t`dhS=G+i5YEB6BOz(NU5
zGhY5QuwJi^DsdHV3ds~}RL22U7R*ut`u*F2ypb)kXiM>;M|Dv_CXYF<Rh+M65h0o?
zRvzR4-I5IC2NkR$VS4x2QsxyH)y`h_;>*s~5Pn5wX~$_G!H-GY3Js%J;iSh@Ji2qz
z+;i*w+{%gDZ$GiZ-GA$zIK`|I{r+S;VJh;n$nB8zoUK(sWUm|8S9fp;ivzIPB0v*0
zX<R;xk|Oju6*a-&f(xWAGaRh>gd0kXa6K~Nmv|x#?kD`wyO}EBdb&F%YPuvP<TN*?
z;>2zhDW;5g!$vA^OgLC_>yoyrN%bhk&V<3M$ToPSM>%zO0=qanoE|kao0`mR%_yd`
zS^V7h$GEgOl+;Aj2`LV`XZ57W#rC?>*XNQ)&d3JlV&;ot*6jYcYvculguLO#_s?3f
z7nw26*3TSC=9Y7YZpAAFmBEp!g-YDgjoinl-MzY|CTU(Lh*hLIU9de~9n!jl5aWuy
zqiL?e-g%JXmFji3AxZ>c4B&(pWNxVx@O*&%JzFj^kAYbuO4$>}q`1R&HCf;}CuvF&
zl2pubmNucC-nxSA;mMpkWH6k*Rc{C_EH7x{d8&4Z8khAIOqZFJTB@8hJza`Pq9W=}
z>mXM+lE^Z~`jY^h1pE&|0S?5c(3j8`BQiwd6E2u>y=>{M@Y9Go!m@O#%o0b|`f>qF
z_Z+{*jP6l*^cl=4d!xoL3>}Nyq@)&Z8BwK42geJ?=Y{;$dEx%kH`scH3<^0RWpo?4
zRxzDc_=CEXNJ#p@Oxr78xlM{j`+6_nxgb^vEWq#vfLUs`eESc}sn|nNw-6Oi>QSFH
z7W`7cTI#VIG)}Sm59#>dQFaE-rlv>_)`o^CgTui3yRW7tTCTw${6P_xA0Y>1-_F68
zhL$rKV5=jPb^b6b(95TWss|V|9gfRMQSZ#Y=8>!+rFsm)E0*~7nR8T<IYXvx`xRH%
z6V}+=Hq<$HhAOHbK6j>lYDL*TlN!%DAv;EpCyud?y^zW<C=HvWZX+LOcIocJ^f}C}
zlqG~iM0RH)m2YMV-O*h;e|}>;MgcrD0zbZ}FNKgbs9B-Ffn><Tl84JCtUwepsz75f
zTC`I>sscip?!?qsiAR>CYUR)2s3=aobxKXD#oJkoK1$O*w-rfN$mExXqKYg5h>2j!
zO~NAR;{i{8-p`2vl6l{%(`TyLz`#LZ?$@Xm)(2%gd*<A^PoLZURTiwt^sS$!?I*?O
z&b)Y6n>o$#6w?Ic>;&U+TYa1KTws%y%7`kqiL544-B!t=J}~sLbF&;T2}hGl$)h|L
z1vEz}$ak=Yj-be{>8YJu_f;}ya5B2ueUOs01D_UTiHp6+J`;y5Dt~}AZYzh;>$_*C
zckP(Em6NAs?!{=2;da};%~|aA1=Mhhuj}5_#_Wr8VSMhM!918GrFgwkE(X+!yUhiT
zX=c|9_uJe|zB)8i&Cj?7A`DoW%oIB;WY%6ZAxb<we#T9m!ip?|;zyQYpUchU(K4NO
z?sFlz^P9B^@q8~Xr!RwMY4%bdbuUnm`N?NnEZG|_H5dcN-AkoT<EidjN>uJV_OG!_
z?smK2=+Au@-EKHwpHivhsXT=887g~j&%~Y@dhoF3#4bdPD6;>p`+b$=XNP<Zs6=rg
zA|6YYQ)u{s*E@g^QqGpL#NTl|`Dxj6s`G8p7O-$$Qf#q3Z+ng`JKjC|m93{lNs#eV
ztt<6=2HNMrs2!B4{k*4;Sgr2)e5K#CK%joJespf}ayOq?tNpxte=Kuc9gwGAKC}Ju
z#dNK#*Vi&JwRN27)2Tf@OXz6R_mAw`(O7=mesXJ*5Ryu3AR~D}@(8zp$TIJ-khuZm
z1^PR!L@)D9d5)Uk=PA0H8C|XoO_#EY>7R9$qp5{zt-6qjJsis%&_^Mg{ODWjdo!_R
z!rmC}axAmAUOQ{i<?TvS$(^T6@I=E*j>i4N#>D9%N`whxb`|{rUH@;=k-8eoFf%b}
zdi{tr;sd?W1+g#3|FR#0IdSPI%uuck=13gB`S9VJ50_iVnGy4N%PAfyqRVCFZL)G1
zb?%yaxgxI}hTCpA-Wmt%!FcPqZLi2Ox#fhcq!nfACRqvTKrxM_uJ<v8!+v{U9jn9=
zUbt4^<`j4^p^wuz(Wlk2s;lav`fRn>eSc6fM>C=mw8rOY;OH)0ZK~=K)t)>u<kyQU
zAE1@>>vKPig#&KqmEdVjfn#SVw*#QDAoDTsSR%`}XdVhs0<}OI@~F^AnL)s{3n)iW
zPnU>FgMCXz8(IJ2klsV`z=<!xG;ay+x|E32A%Tc;F)5#yVopjFJe8A@f{-LvJV8ta
zSCXPIq#`jTJVeRn2Wevu63MOqb{s-hc|p}>gk)V6^o;JPiYy+scqx|@ILpLY2>|b<
zEH*7pNaiFSGN)YXYK_v|SI~~@KBJ0Q_Inc{i8E4I5Cjn?jmn5F3cSC5e!+j&pxc`X
zk2;S$YT)&HEe}=`GWY;Gi=koo<8Is7F&SYbbblPQZt0=@4{nz=gpwGK9}r78hW*hu
zeN@)AtD0Z4UwLr<Ll|lD|4nWfKOmGbjs(6eZ2k1{{hODV4WXGrdER-T4Hb6nC)9vl
ztnFrQ0K02SeqSC5bY-ng@5;nJimK^h!5jD17|Ox!+AvIx;o5H7&e3J|^sebxhVY}6
zEfW^QNelddz8tXuPqD-(Pf(|p$NNC3&{4f5t^yeO7;+f-xOo66j&?K;vnhMHdF{7M
z^YgLT=S{O?lCCm$>6!&ln&W~<7;OCw+|i~ARa2WsxogofpW>$lVOmJ?US=5bC=O@r
z2B7pW36h|QOR{d@ZG*b_wC}Ijf6HX_4~+eqCvEUC_Px@jo*kBX3;6For*!|mH>8Oe
zMME*pQ}rHMme0_2v`s$j?Z0K!v4R<H+O9#Z_GGgROY!o<bftYAU5A$=eH(cX*I`}V
z>e3}f1v3>>N9AAJj5<Es*VNZG(!~%4f=#_zH@@Y{e5>4;^OpEJ(}$NUQmY`v0i*-%
zo!`%%wSWF)YZDW*!+2=8=)zl?+^uJBG~89!_zm&MJbU2$5%Gqv*N2DeRXZKkNM#yh
z*^Uq1Npt?uK8R9J_!e+a0qg@}@oE?_9|DSoV~I^DT210^k47`21xM2w%h9_vP0Mc+
zI)BODVQW%RLzD@L2z?YsN82;y1R)ynyN^Zjlpy@bI<~d!(7w8R&uv8^ATCnmd3gtl
z8cTR0k?<!i5zJHTSciA<#f5z1aIM_^>2Q4njdb4^@I(Rka96H5LON!b@q4)~CF!rh
zKfb?KIW!}1o8~9-QOyF+OFXxP=BJtbRVhp(Kf61rjTak1>wC)MUZtonBCFvw(WrSm
z9et6cVXR52X@0x7t#G&jo5Pu{mKW+SCw`KA;fzAQlRi$y?p~}Jnq<bz(}iut#$md-
zqng?3`W+^PX$Z{A;n0j+KgwE_Iu7V;t`QK6MlF}?<Z^6M-O3$nuz}P##(m*|g@p$q
zL2jA*Db^mWo7Y8t8KTJlcdVU3UA<nGFigZN>hmt)0`?%hv)8Hhxq7os*V0;1Vryxu
z4xv1KKhpn&g|+)>DmSf8@7j507g=qPtf-Fe8Hl?<x)96knNjjZPUMgvk!2PYRaj*;
z8~rp}6?cJ*&`#a*zrNm5`E1{=Y4C(fdI*W4o-Cj*sjAA>5hOxh#%PYLyUK^`twll_
zX^P;8NOg59=u46D$garV$Ti?Wlkd~GhEwhXa+m4A?W1W+*eS(m$Wx;RxL=Tki9$73
z>J<@O&Ev6Iy7bVipc}#U3KxXZV(IOY&Z)eFSI|s;+Iyvc_C_s-a&*M1SqVcTxkck7
zLVx)1f$j%msbQ52I5nGcjl~-tKHw8jbR{p;I7u2IKQSS5`I%~koMo}bPv*_;pFf-^
z#ffkwdyBf6Oq!|G2QaTbd~>z2C7~di2AEu$FQ?WX_WR?PNPkR3mLfYNSAuSf=4f-u
z46qym=X~QHbEfBDBnLW%O0TINwG)umld*=vrM+$;7djBts=X0Qyvpg)E4}Ib3|fIR
zgk|CF5~dy1Q8Vcn>jcvFg@+HIh&r5t5;v7qSrO?}R5A0DyhcWe#8s*@c}|`nzd1sd
zZd4Qa?h|w^LP~r~vzki%4(24%^4W*G=aG`w(jZ0U`9)7gv@on+f_0C2ORPuv?`6_u
zyf`kd+vh7iA44qGD@C-LE-`GUQkq#{56JR+qi>bvH%9N0<(E4bBFc@_r|4;?d)Z~$
zzIG{1m-1Y?#BeLn+d|HD?GBC2X|JpVwCuYyC$|$R^s}AQbc{5U7^Ve;$S~>NOK@2;
z<`{21E)wc`^tITMkH6J$V&;3$DvFxj-_xUVh36Cz-Kq#PGlJ56x2y;iIjW-*W)vxb
zFV^RM+7G$P4@X`exfQ%hAYU6Zc7VN8DpqJpUuK2yuh1lRq=06Iq=_O)DdeAw`KZ{C
zbhTN>t`Db=ikKnhw_J$iWLN-XHa)8IvdrrRS>a@vQ{-!POYj6mDXKy`C1^#3l&9c8
zQV^FAEuFMUDr&D;_q7xE^P-fMbbj`cSzaecB7eW;WD8m6Y^R1ITB@1S3^_g-myIV9
z^JgYxOWAVY7R8caOBScGYnmSE$aeU~>$_hg)6w8W>6NdPL~@`@XsaD_vJUx+edrbR
zodxl$V;75FExquN)yI@gB2~??P^7BN(MZ)lFqEfQcxqGPL>ivjk4rFscW|9z0Der4
z*87R%8})dn?K$XK$7?T#{C?~;w9;KguLg@q_W?BE>(izfdAv_=nJ@G_#Xt=lEh%xO
zdci<~4SeFu6#&JkJNY<+VtRUJC&hr<IV14#YMf`n1ame1Hzj*yrQKZ}$!B7nT{CVb
z<Ie1Yb%Ti#NFI)NzY-rN3r`#6=AzT_;m81=J4N`rHq(z4eLlMgJYHj?_Oy?tAkLF_
z7Keo((5p4j({`uSEOqR&A)TtPJYCh~+X!z=b!TV4p+tYufz(NzpG1{C_4R7l`kyNf
zKeMLbUy|e3V`Z(M(-z_#9m0=RDL!|kk;wUB(*eeU2q+4K+he7r2830cT%b!3!5U94
zZAa4fJKuXJddGY3B)e`Td(+nPfu$G}t?tO1$zu1@G|e{pHNAFwy){ApF*hW-=zc4i
z)`pyUC>h(K4NWMvrM-(n7Agf#EKNkSm%{8JD@z>!^!kCatej!?oPP1H<99wr-|fjT
zWY3MeUYxu0c!$2vkUssh^!+hU12S?jOQ}HBG=*Ye0{O>9vYr#xigBSms|%N_E_9A=
z9}~2ME=(ehLzOZ+e#vXBVI93<CSOS&ViBsVrL?`g^JUSqnjj0>t8Zev?bvZF1(o9Y
zncRUOHkAv>Pun(PnnZj*9<o?4)ONP6CVXZiSY_!MV;opQ0`w=~zQl_Mx+@1no;ooJ
z2eh<wB1(>;C!~~qKnS@(fhHJz@r#H$J*nyh;iunWC1AEBtalLlKcT8IKaP;r)s77L
zqY5%6FNbWeG-vq|s`QLi;iOZ|es`{qd|n?J%`N*djt@i?m8adBFwKuxRqG>c_hDN0
z_6<>mtOP}T49MvRqqB)m(Muohf0^w5ftJ0UZtn_hSqbCKeGJ`Dbo0ef_MSJedj%$N
zcMZ1nklWPVp{?tCS_Su^cDmGEWd<U;y*sr1u&?nJH>u|fuI2O9?wJ=>uV)5oG>AXE
zNiL=6CQp6WCeOGK@qZC-`Yv`ne>*SM-sfxg#@1h=4~~Ym&ul0OY+!@+--v#Bk@2&!
zhT#!2SfAAmgCwwXg`WMqPu}>%XD<3I*4)rD{G6h_Y<7VZx{j)`JYFoz-U@X#quUNm
z#r1u<y@If{l(#k95RIgky8H$&)PNHSEOkt;#CVRgEC!t!W<w<JZSib2-o1OZkMl^M
z0s6uMk@fmAo>OFjmprh{;b*oI1CM*Sb2gUwftBo1{GDY}eG{cbz8`aYIM)3r`hpO%
zyLnc0n-=AN9G)|g8tKDj)`RP1i47UVR{PzCLS6W9zuVSAJs9}2iG-IdP*hS2)d|m7
zH#rbrAvqxBC~2Z1@|Qr*RMh;r>*UJ2u1oLVyEU;3T-lMJdD_RM;W3<_p1k%l^sdT{
zTPEeoY-&Unq+Q^}j(9zxJ=J){xKx;$%)3<Qbit2#+ycJZ%sGra*{l0}U8OnAA~C7$
zmr9K65(CR7A~Rv;dwLD@g{@;*$9T_mO^6b_`c<6cDCvEfqE6abEazfw@i<)QKAkFO
z8V63-q{*$5C)tW{Z7g9I%`86ka@WAh>xU*?DIQO$NhO)G%w6dkl$KJnXO1kEgyB+Y
zH(Lkzket_soW&bZ$5>t$iu?smMR{kC`=d@raJAyEfEdC`C{x^}nosmycP5`Md5+vY
zUrw#2%JL|r8;E7fEHUAKUk#1gE8O(o<R*B2aya97XHf^(s<rvi95^ohCO;BiDzl_o
z9{{P3_v1|;kL)IE^qIa*x8Tc5A%8BG84QGrGPv;o=TnD`pGVqPaDbCk3zSH{fv?n{
zxx-n4O>T+XT`NuR;`vdY-!)yT?dGP`-J>=Uw?!h`m{H3XDq~~YT8CQO#>OgwZADEY
z0EwI=*`vGF?x%%fu{4^EmttAe94!@#0?Nip@$BQWyl-ar_Q^_Ra{KO?eX{)f<&puv
z2sy(92`kQf^i)cJkE38oU}?)Z(I}O>|1@S8rTB2#D;dU^n;vGi+2<}ihkgm2gO!Q(
z2Nrt?)tLUmL$^mY-2JAW6irFd|MD*kMKZ;t{u4P~AiVZFNZGKSly10zlns+>!J79p
znZF;SoKeJ`=IJkq@Pz&Y))T@ORz<|=V%k8{p4WZGOpCf`7*BqYMzB$sD|9(8Ylf87
zb@A2MvpxK3QP;D^kg(@`IC>8J3_vflMo~inhomsWmsujK`ubo-GECVNtHkTmoSR_y
zy}>O+f~?u<snr}(<f<%AJpCjC7^9GLXU@6C>g#ZE{<ET#C!9aMw9oLgwsCj+R#}&}
zhGQGgoiW_c-ZwH|>|PK}A<IJEHD8|c@nf7whUV@Fd8|{$yNTyus8JW`{M-`H^3*5L
zpY40;OZQ#2kNmOycW21ISUxrYVL+b0fsW{jsEH@C<Q#Qg{Kgj_KTbF2+ifCHr^=FU
z$JA80FK5Es_&p+H(s^A16)E_&NmNJL^UQ)eg%W#Gip0ED8BroN<l-@}Az`kqbDSz1
z()A-p9FGEEn%vM3J(!%&jMh@h<@<IotJ8a5MM#S(Dw1%M<Ne)FbwPd*&1%Xv>c@qo
zChQL-ubLm*Q_iTITbtf~m=FX(QbhH4Ug{{6mOqEi`D54ztSB*Mbg7rg?>2wbcE3pm
zGpYxJ`D%aAzGK~B9vH(3@SSK;U&P)I2FMs2#<1t1X~Q45PZ|a}NSk~51Na~MqgEdh
z_v{gd3>eJ224g?Pp8x(384tP0D3L27$m9XfFP?8KL8zV|ei(<qyt@Ap8~J!h4BvFm
ztzcaiqvmrfW;ANL1_!|D9fob$;a0$(Z6)+U+c`xyWh*JZ^rd1ln-q)G0=7c`t#vwS
zNmZrv#;tE(0ewv)as_EpB4l1^Y>un%)rtJp48R(wpY5h#{WSS%%Om5GyBCZxzD-8|
zSQv1BY*I{VbhyQi^zecfc3wHJE{<Vy&W@_oN`t;mcMna4G52$(9UDq9wZeFLWe~3)
zk5#t_hzNCDA<*lcC$#1_sgKPhnL%5r|1B_<G!q?UPJkUtC`|Df>vLj!4&qSwgg1?f
z0S7KNOn?Pzl)<U>HdnD^QJR=t`svb+28Hrw$Ity-OV~O$n$8wbDfN#u83O9Wvcia$
z%Ay>4NKSOWOuow*O9?rFwwqCMbp3YObTzK~4;r5ub*L`j@~wQ@<^OJ0<%f!aoYHH@
z^VL5Ra%kGTn%%!=HQTg0-8COYE$F`$iUSd#FYJ#*X2bdB2mEKkC<){mi|?TMX#3^;
z2o`RIWfVYb)Zc|}WXPu>cUNRoljZKyen36Ajy?ylA8ndZ;JX3cR^C8EG){+5bs#GZ
z_=Wm&)vv!5IUKn%@=_WFus#z4dE4RW6&8nDuK3O=gOM+k$Dolf5Dm}@Ik2<_VIo+g
zNe6J9e&U3O6<fnmb4tNt21}BlW7%{_oukQ33ZG?Nu_`ai@CO0Oh%|3C%uRQ{BkQ(e
z4T%P?in7298WuGK{eV)@O^S1&_+%f12x#;lpsx{HP$x9H*aueiLv(w}!d7o>_S3TZ
zccRtn4u2Rb^s|$Sku=nL3r_Ao{7qU(?}Q44^F!q9*$!p$ZzcpmF?Q4AjU~*M^|K3~
zCcNw)hj5@GZZqqHdrIJt#=r$G1^^XEJb$wMjw{OP<#N@rQX?}rEsq)2?K4!us&5P(
z`;5K)4ad^ub|JG(#N*4a+kNP^?w?Y@=Qg^XqT7?}Wl4+4VH?L)vo|UHNz!65_Kk3Q
zgEb&-oxphj`mDANhW<R6k3O7QZ3R3afF~f&TS31R$gxr8ypZLXGz)m^LE3KM<X5Pq
zTKY@al=i7=_a|yfO{gl0l07QX;=g3~{0~w>E|aS%xU3HNO^k-JNA>(B_;@{DjC%!K
z38DF{zln){bkjb6zCG$5?Dz#tKxCJLJt@uQ+O@Mezr^idU_K0Jg~n1aG?>6f<l{>E
z8~PG_Yy-M+UI-T04RSOpmz$z0HtD9k?i`>22LI6KBt`A!R7IMa;(7KVCFp#(r2B`P
zpnrw+l#oY|VRCOL(&u47KaKm{Sy~Tq<BMz}8|Z}OLq?<)d<IMCWC4{xE(h{8XRx^2
znfzHYh|cC`x<Bv=p6588+-`T;?VI{%Ad!==oL{3|Uh6(f)#P@5hIt*%+)3kky*tPc
zuLg&!D<H`;x#gSOIl`N@SbpK2Om?v-^bO#(36Hx^!dlnTQqr;{>3bIiY+zw=AtOLO
z_DqYMll@{VL-+KYT;H~r+>erE)BQX0tv72)TzMH5h{%7#$PC@rMsARJS->04E9Cx2
zWWeuyKV(S6A<&FXV}<K|FYHRI9^ibe+poTtqY;Gw*5QB9t6AtGC;i4)$P~Id_8St1
z=vt8rTS)2Gx%Y;CU?IYEC6P9f4cflOcTn4Ok=m@^b5!}#jZo4PeyINeU=ms*vN_H0
zfCfH+&IUy&mKBWL^>`x}53?rw$4_7E_j7c(vF=!3tB@}m@Ft*V-5H5ALYSVz{cK3&
zxCQpVzBjKksO0ZsR*@$yV+Gwr;V*3YedY>-95Ywtm|SOU(^=5mET1RK?;5Zqu$;DK
zx!P8p?ps(i1G>jiZxO}+pyng;o84!@b`ct13e`7zxCnr>tp*0=qtzqXYwga`No;E;
z*Ahz;iF>rH*3dLkx^hyp@yVr6CMK3hDJjfqJ)f>G)3qQE6xwA0BXN#y86p=X5Q50L
z2F=Ax5iBVOIn5Ot;Lku6rn&RvlS`w?gEt&FIyGOM+M1cL+}gK}9+*2evru!biOkli
zVjbl`9oqdq*{sb?mv=d;z!~<6rsz48bas_TCgV9>(N=7O6GD2a@yHx_I7XT0H$|{E
zxqc{qFC-u25bBP$N&L4rKJ4%c;snee^GCul(zOcjOwPTDy6^lQ3w~HTcc!qj8Q0uh
zJQn$2(r9>>tL3hqKl3?i@+<r3GlO<Wz#W~593mr`A+3=b1y(-7=1~}gmRE0hO(y8~
zUCJwS2`>gsBHaowAgB_6zIPOy=)4juO@_7=**@3(x6wQA%hfZZcOKt9ci%Y}HO0xH
zqJTJ_voYeLnw@cYk#{6={BRp99R;;0C|CE}qez?Ee*Dh0T<#9okKRW^sn$k@kic=0
zW|>Kwm&l&TdH+h<^$MEfsm`b|)m*SYc>56PM3_{MpKDPQDxn@A#WB|^BF-kbtI3Li
z@#Jv!be8-LPf2*DoZ6{G(YvDx)LH>DMxD<U#c<GyjSg0?mQbGlL(<jNn=GsQj|lN!
zC9}p<zRDvcTz@?o7Z?7W)a^~wPM@Z+%Z++(rK`tF3{)kko>TYza!@<KNkadjM&0Mu
z+^BYi;-E(yrNk6E?bQpEmZ8Y%Kih?Zy<(c(EV5w=_VMIdyb{ZkG^lbau2&nZ$IrC;
zN~U(mj@bzvxBW|Gv)n&?vVRx}k2#i~!;L%{`8dS6;z|qt$N?AFx0~}mraL%KgfZUx
z>5kT?Ke|Xdr1kjm7sHc(p7VZPT4aMiJ2f@+-YNF)W;Vn>!*Rnt$oq7`p@1?@u%j?L
zPGQOigZFn+>^9LEygTos@BDB4wZ}*`e@s4m$mjRT2i-|0);oEL|Np--FYwpuq@JO%
z3%ugdzHf)Ws)dheuyDx1!>cq1m)_{71FQFB_uvTqOkr*=!FF0P>eM%@ZYU3~tgSGx
zh44K;RE(2$A5X$QX^<~bi}<plwA)YH3{9bb3*isDehfy*x9?D0z7(2cAw53Lm%+VC
z68J5=A#RZ^Hu)`ii=>kxLHe?_<H!yRb$CO%OA`5vpeS9+&nSwJ;YCtt@SS)n6%Tx4
zK8JQwKiRDyIRr7oghbO?1ku1IVzI%5{$L8iN(p6aNg}kKOqLcT^nvA?T1vi0y+@~Y
zMNjIUr-;s!CM0+x<?&HLTl8crrHfb^8j>Z+E(me#D5i;v3%c^nm|QhQWt*CEl{wW9
z_Wh`oBzJ0h(%Czw*;g5!WEh7meOI!us0o^>!BfnfNtQf`<I#9w_*duE$%3vdDsD=h
zQ$q2W5QVWpD$NHbD-aZV2(sT~Hb!bRJqvkzyDOBC`3daWnb?I$EW<3SnHZ+PH@-zM
z>=QE@X-1BRd}4fXpsi?@EHCrZ^gUw<f(eNTzXaAaY@#d=?v&t)G0j0&!_rgl0Shtz
znFq+jID~W_0tJ_`#sONbkX0X-qLMUnU5?|xzJmGqzUw5yKufZ)j7j(C<Tmn6)%Ui!
z5(WlYAO%Sj&=4m{^gvY}hltB^nI|uZJU~dkkJGRqA##g`HIavJnf-h;G*-F*2uUID
z+U*?E;D+^~PJV;G84H0XYX=qS=^A2l5js1bqXNEflCWv`?vo+#AJCEYkdl?2zqdd+
zmIRG#VR-=}B?*&>Q!G~!l`Q8Km&gdl#im!T)DtuT0$1^3)SWS?nLjS#0c@w+V50*q
z$x}L4sc`z#DM6LV9Iy)HT%MYeE8G!eVJQ5W%5kctbw54UYK@_NDHffS>k{rbYCby~
zA0Eq%4ac)$v>4BhbHih^kH%-m#<JrWN*=L9WnNbmTQ|v<+heU%nZ+CZaXXrc0$$K_
z7e0^9p|3__k;%xbBj?Ea2#g8!EyTbb00c|I6Tvl;Iyb{r@XsY&ZoLWj!5EXum1(lj
zF(74d#{}DPll`Y|dQ@rcWqFVJd1ByBu_=|=7zAGKC5dd*nJ3&>X<kwJY2Dx@ML>C8
zRpv{Q!_Pa>Y=Us53P;#CLqDWubY)1<Gb%3#0*85pPe_tz5xP$3xg|<cA}MpKlZdPF
zgkvf3gd`xDS3}o%mB+j&KHfUkN=~FISH#s7nU~6(DW6pZ82wktCRZlX>xvpj;FXR9
z6}}@$nCt`q{UHA(FRs{5BB91T@|Xl^o{Tj16k8N=!V*mKR4=Y35{|9JJ;H1v9tq+%
zmdWr-O{SP#yoXmbfDrF{O4Y?nWM1Uj)JNlODfdxDdDKmz?9!61Cv<ITNh3Rb;0&!m
ze%N%$eMC*EkGS2<?(xso>2@nb`a24C<8?L(z~=GD=qIncX!5?jju7zm%BdjcrbxyC
znK-Z{E+KdQU1xn@AR;14O=nKqGQP~~ma9S&V>w*vUFITw(en5fZO&;*SKwT%cNH|a
z0mjh60aLH+s2xu#mMRgUDiQrb|01$!N%DAYM@2UeL=)X-`xpI~kFTRIMrOeuPo!pm
z`DUvT(!%*B)P&bdoXf!YXd={#g!3Q}7UO98ugcNX{A52hmK~2)6kXReeV%TWiF7LZ
zS0#V}C=GSm`N{hHRmt}dVkD__^B&zH_mdmR{jgOgrW^Ii{Bwy)C1HHx6Ft9F#N_p~
zp9j{r1Mm$7a^>TkkOl-fb`fc5m#`f<7#nTU9b`QH5%ZE*bB*&<1SbM(i4L=N>8S6l
z*ypY1so&p;$crM^ug6{41l+=Z`aq~!Dc)BS2HIxmWTw{T0^3K=SByckn7S15Z82P#
zmfru_`@3t*qOqN>tgCcPJxsS}eOIZrsV=ML2Q-U0#jvewtkU9IVS2hyTc8@mE=%%w
zCN!SN2nqaj7<LOs`rsNG$pn&LF#!|~MoJ~llp{<agg~7_k@>W@0KJlVl#=D6HV;1P
z6wXSB$Kp#IO-?~5B!?4(T~rniDvB=hSil@#0vlbm#B=0~7j;EBxTq+($;^btE0{xC
z;bcCakcFrqC~@1!pDbvIqhHh}GE=8TR~$(=3Ko%`Zp(5zqahJ1PGW>yaFqP1qDEv}
zK<gh%@u+dOYG5qd)3tqh9;L=q4vCVY6;I{aI!$vBMabNUQ6ILxIvlh<R3Ge#bV>xu
zVVD>N^b3r;-@!5bIL1}7yW?3YhP&T8tLsyuA+{b93~@@=pB4ZuECzRy8)M{7eD+z4
z-+5NorbMyzs3=Zp`qRuz4Dt1pU+{o-iUSe$5EVc;2#dm_QICRNeql<oP}T9|XJyY>
zctX=1bi1Q#PpmCoe)(dxIO@i#lt3Hv)*(Lv|8-C3*{uG=>(JAezxwj{C~z35#6%;M
zn<`1Y7qTdx-;_*jz);McxV_uH{e<mX<_J|_h!QMNXS??L%P)Vu=JpM+-B1)H!%F=$
zC!w$T_8Z7@kboc?AB2#7Xp%gNw=x1riwOM{E@H_+UF?pEuBYy;j30F-^p=s}bj}==
z^EQ->XQ80`(U5KDV|4q)@ycG+bHz~?>wMg3=@Zc-sx~sb*DA<RCXGPR=iGj(<#+Y{
zA!!>#!haNL^!m2vX#*ttizP1Ff(w#cls0ccc^n;T9P0l0hU%}4moHWQdGf70H?4bL
z*Ej@z<fQ@HM=?~Gw;*z;rC}qc3ZrCI>iDn<l=eJqtNp?b-O>VdpaX&#I?(-82Q)9e
zE7Zo}`_EW}?pH`J?w~nNZrmh?^8g+|kLt#~7jWEa3>w?S&~JrJu*jCr%jE9|%m~`v
zY*$q<9qD8f+>Sa-@Px(z&_5u3$OqO#KKp-uN<*@F4ZUwbM#_^}xU(-Kkzv1tC=~BB
zB;Bl(O~9X!vZ&{@*`na8;Y+|=Eg>cuJvNLT5oa<Y5qeZ%*gqqrQGO{^Z$3j#Bufro
zpvS&QwB%nUth|K8{=I_qVX7Pb_1+hI7w9ot&p%JcmrU2#NC^NAX1HbxptdSNPp1iy
zYcW(r2>WdH0|6vlsTFF4S<EtE!o&||3i?J1BNI1UlPA(gUNk#Dx4%gQGZF94dps`@
zzS@lK(Ft+W=Zm#E$L%f_wp>3V8yQLX2RdPH>TH!|-n-U${n+-L`&thPlCbr@OhGbu
zTQ=g+S0)&wM&hbb<Mb=^){KEI!T9)~PdJsI>ycwDOGpg+{y9=`K(Q_90U3S}wC%yV
zIKonYGMS;`CwBtk03<yg%OdoV%OIX&evxbz!FTdNZRy06yQOuzAS!~w<6oS*H(p7-
zQWO+X;qbxK(5ZVDu0{KXx2#U*Zh(pQDvP6_@i%eSt6+aaZhAF4l`uGUKaUOaE8<s6
zX*Fg`M|qi?%Hj-HPDO{EfM0G?-2Ox)7a4~fC<Dm-go~%n4qlVUL?HAKF{srjQy<E?
zrboRbNUOZW6F+%^{C!ilQVV<bZHq51j!1<#<ZF0cuAL*pW~RI~zh@z3ks-BuxUmM2
z>T8XY!|6%2obbx3o#bOlJ!ZVk;CUleF5iaZ87om%C)2~paBjgoIgxz#Um}kAc-E~T
zqD<l<%GAx5nfAM0w)ODHj@*{M=PxISb9=5iergh}z3%o#GBG<V^TL*%-|xq!3-v1(
zriY?pB*;A(#C?xNE(bZn-H;Ln$2YedyP!nJ%rCeHhe(Z`-rOw3MWilxu&ld5%9iut
z+%bWF2mSjZ5fvv)lStxGUe<w%=%y!V4zD3qka?5W(=$+da9uVR$S`w&5+Am`5Rsyg
z<I8EvimBM<$efB4OOl4bYs~Yryo7mjhfwC)X6<&H<pC5N3Z>ZEyeUUyS=&jM|DBpF
zcSKYC@Fw-_z8}Y^SMhQTcSI4LVAWxEqWzSfc+^?}Iiz7u(P$^&%o~umz!Ra4@o*if
z`V!D{<7fq*cOCwWu6J;(-6mYx_Z9qPuZE<yPZFZOk38@?{1tK&)VK|`y$>r71T`cF
zD+-RR&&O9Eu*z?iJ&37N86YLIGLqWaXTj?pJ-aS#&<bfit>p>~0%p4S<Y3;Q2WU6?
zwM4QS<TLc&86VLjSvrq*5eX*(*|ImS)ujh;c+p+AhBi=c4J9|GI~o|WD8lx><VZGa
z?e?P^6Cj0$r|%B&bdR$fn1_&`sT`S$+;+(vP2u*04_&|__Sv%kqC3}SshtMe`fxNU
zTgnS_-`Xq*6l?uy$|Q7ufKpL4YVZR-S^)07iR;!7!-^3?^A(U7j%+$(K^4<%toJ>t
zZ(_rtEMQD(1v716Ht*H7Y(8H~FZ=AhyDh5`*<Q<L$wq^n#?s1sgUz{hv;3>%mVC6F
zF8O-S+O{lJ4G<v(_VD!<WGsJ#&cz^39q?x%YIQH@kz3%dzsXF;@$yB8F7QUpIX7qz
z7}1IhVhBXOzmQ`3N|+X`NEacu2_Uvluy%ERYtQ@k0`yR3PX@>3A<d|U2*u1BP9SkT
zt>sipLRH$Z|Mz`+e(M)<oPPNQ)7&{AAT-j%Z!&cr+mz-8l(y5Oz3Vf5(YLWmX>BK<
zygy?!m!p_X5gNB$4&$B7_Y*acesfzD>;bzv12`-g<o>_TENAY?WUf6$b#tdq0LaPg
zZ*AMAMAOQ)%S@5`ds6b(8FJ4uxru7-$W2Q3hc&n<9aXlSFvJj6S)0^BjTES)5}+KB
z7y7~~#6>_glmj{RdF!=urU<$syFK)V7gj@w+N%)yQp6x~?9RxGBDY6=g+`9WsV=45
zYF6gSNR5M11o9b^(=ud6NHDNiLVKEJNCo002!n#y9iVU_vTls<!a)(?7z==LK-giC
z0T_}lpy1kB4su(QAuklm<Y%bkMvX2*<Y&COEcerx$&H9nOXISfH?f3tB$$e#a~djm
z$t<!s$JIC!p=}2(4#1W)kzQ628KVy#xeZCk)Kr7W>gcj9QCo3DO&LN_$y8O+VVWwa
zpez*Zn5bt9<!b!&;ueH838@C!fB4psrDpAqO!cnYqjBZsx2PSoIDYi7pvZ``)%^#&
z9LmLy9#J&GR`(qoTTB_QT%2B7<k=0aEjwoAt>~6R7&jU+siLheY-t@w0;k3tPP{iW
zshXBj@l=OHoG71?V;ZkGnS`yN#Vsd>Bu%o^_zedRA$xe7>RY-*)@&15bBNi#vRn+L
z5sG{QBZxu|Ci>A3Xn*Y`?P|6ClG@VQ@@XZ;C6ioCy|R4vt*&Je9vt(iGuEo7>aDTG
z@m*L`Z@*pD@UHR2PX%!fRM$8d6HX&rgV^+P5MdZ(tnk$V-W;q)v3f7U^B7fYK1H_<
z744SC7stmJKX2PBwtYVwj{iIqKm31C`E87q=W;jEn<MLSOh^3uT!YUB7*ph@WFzw_
zs6*e@=B6H33?y#Py43=Y3}tqHEF88zPEY=f*Ohd^7<Lt%w;l)tD31DdNL1&QChq{p
z>zk>)aNf(KpMHBG&~bg+c0BZ1&pFh6poWIfo4&oq)LLubw#Ub%8k5U{cHJC8L4_YB
zbBC?x76=T%qDK}02F%Xz4cTS?8i+j%ijPb%3JM+gu>0|2bp4>$8?0N<V+xL%S8Y?I
zq%6w3Wa<jOS`x{B6)W0|L<$TPwbF^4mjpae$C3@r6p(;8mshYXi$os7JjV-y%ZmbU
zDSl_}$I8|dN*t5LM??az3s@n)sz^F-b3B%`xSck=oPvj4$I@dq`IUsgCk0U>--t;T
zAx*r_bF!c^S{n4xwG<P(=Rwk#r(FQA-4{w(6Jc!$3K)<(SiQL>19hU<P6=uf2SXcl
z8X;wI)@|fJ_&_l<?HIYm@2Ep2SqF{XLPD}l4a*}uN1DU&k|=N%;#7_Zx||HgS4kB$
zZCKYWd1!wwsmLm_oal(HXa=FC4(U0Ozjm058<OA(LNriW{14ML$OE`6mUyi2DiUPU
z`VqttqQQlK7;&1S2>QtWvY{(v5G#)2<_tv}QPV^$HnG58FI(EoxWtQD$&}LaK>sZO
z|Jk!-w|qH{3=*~)F_GS*BP8MXBfCg@)}#H+SW?EM^hO{XgzPKzR_`s4ud)97u|o(l
zC-O2OntXj^<m5g45*A%v<~%`_$lwqqNffd2q^NU(#FK8~1rAA^NJhaB$5$j6LZl}W
zJg>=yC|Oukg1#f&$qVu^RggG^FRS;Qv>fuwNSLCgXZFiC3}HbhlDR;{P0kPzA-y&y
zsXV8P5+XlHeht=bBh*(W_0!KsN<@C1B5OEkd-s4BbFcpzMZ(9_eY;6BphKjzMZHo6
z_W?bE^Lk)liL>5$xau0RY`8f}ZyL2)?X3S{Xv&?c3|czbZ}89HbOFBe-{|G@)#}3F
z-%U(!Dp%bSxwX0h<D=Yfg|IH}JqEfffPSt}9B6;|UlG#YcCNx?;LSWXBdHR?ex1Bf
zr2dba6`-CLM_z4Z;Mws=5qu1SXP4+a1mkv@nzX}b(M{{IU?F5lagpubKX5j&X~pbB
zz7SWG4cqS11GOAnV*pEWOTV6@1qo9T7=|^-U4!S-La4G*uddgWi=57@df8BT199JW
z!>35rOe@)|F<F>`3Zt<s=0zuwa6}$w$HHfNBC6x=5B!Rgm8#;)n16_Vj=mVtXuk8E
zfCv%^WxBv~EyjH^L=`e-%m0P;K<A^ss%FMHnH#Su8eLFtJhUXw9QiM_kG+w0#`Rh}
z-}2l=zE-~xdTA_b=BMReBPAi+WO6px<jvkyl5hiCL$eZaY5in9RQD_mzMPWplLNvQ
z=$;cT_PVYXO?#ir#RSJThXf9rsh1DF9n&^N!Hg=H6NXIN5n^00A4jZ=5ar~3R+{4-
zL*@jd`yZiq^e!P|krP734Ts~?7I{i!T^kZ)Ud)D8HoEdqd3GMO<Q{`&2kI+rI@D5<
zv@DxApXVi6_?LVhoANR(I=$Hln<7N8CR%c}Dku`iN2^uY5^Jom`)qi0Nz~?u=-BcI
z2e=qH1c-AK0jx#Q7$u4$#*~;%vVbOtyud1m%S)UGpz;+~`|=D&x||BL&?fSlIPjJN
zB`5_Eo@=7_5Mr#^=J>Gbbbpy0k7Z2<y&*p|7JJR(`?1I+z0mQSJw*5wBAL#MD0T+L
zI1dR}qy>LfNP1#a@NStT3u%0@jh036fNf^S$WMQ}cZgIG?|=L?v9V;%8R0_5)oUb`
z^SBri=T+`m@`G24SU|L(Q+UZJM)Kq>9$CJv%)oohMW!LfqBj<qaf9k7=-Y%`9Avp%
zHzNIFZt!mQYOfV}K1Jq^I5Hy0NJ{a%ShNUFVC@@xvz6Y3V*eW=CabPb29d%ii)4v(
z98MC7NnSx>P7re4e+|9wuLPyy;N5f_{2}*Cq>V5Rnvs2xQ{a2h3cY&~nhbaaO(GKl
zjNmK<Bd1Iij0Or-jy#x^>&VYET1Sqgf$q7XKM=T+^sT8#5)a&^4<Rmh_XBt55I3Zg
zaiJON+pgVl>t4ywVwuB(wCT%(r-^~STk8!6hdyOLJdi&@etyfIJzL1HpCDs{<IcQc
z>&v#2edfB0Q>*Mh4$@|dA5F&wi}*Y2M+!)oFaY630wm~W(E)fXWN)I9^E5}kQm1?w
z;j5N7@>;Jtpo~kshDhVefvbKkv{3U1VhV(E+VC7TinKV7IFrbnnnec1jmKY~j>V?a
zqd|Q~)6=n7`t`?eyfU<uzlS4YYdc-ioFQX}LKsjPV;O7Qy0&eL9DtbX(#31bU9#C8
zqiz21ue6$FpZjj2(nTBbwoN<W+W{#gG!Q7Ep)g8#@FFciw_c(vcJ?SGp^yV~lC8U6
z@aKJrVsX8g^h#eszEpG9rQGm>*X>=r1ASTgBbzpQZ9{4f?Ez{jH7-5`WGZog{t~TU
z9?apP)Ts6JZ5JOB8}g0JZjx_gecLhV8R`*DmW9ELBcIvWsvp9Hy$Yr;;V5Pv8^}3=
zB}EQb_a!h1o6U-(5*dy9PepQQjoR!XMq)?gIFTnKt@RQAmp-p=K>vQ8`<ZWD5A%E7
z5i`GE^zy2|zsP3o(wF^Mchv61h4^h=?*-^R&-wZ`J>UJEOH_(E8(ivgsL`7rLh#<D
z?+A3T%;pW4tL^Zcrf@+l4@fxkSF=v2l-F~dqxv+|Z&;HC_1X*}^nAKRwl<V}<6H0M
zsWIW+QwyC1dc?2NAX9P&fS;68uw@~@kw;%n@v6?Ax|iI{4qrZib2LI$*GMZqIHbIF
zo=u^OvO<t48}p4phwUaAAU4$u8}5^|u5k9Rq`r;PCm^077t7q>B=7yuy{y*Ho(1&V
zTDs)^x@!c-sPpK{KTv8=aKfbX+uW&p?>)u5qk?+p34h3wUQS0M@s@{!Y}l0+IB!yf
zlnTVZ?%7>Tj(xajCnoBhy1}7Ui?e?BiLcuec5dJ9BC?Ag9(S-ou1$!N{UK8P^(TJU
zf|(n{6h|m7DP%|9A2~_J@hy?NY1T?$I;c_1>*3gLEL#@=MOA6|B2WhxI}VUL(R;=8
z1V$>hO|Exz`zB={f<Ek0Ot*=+bBCW$y|dY_`xzRlj?8LebO~#l?#Q@bh2J8B&p7!h
zilngd54CB~yWeMRikZ5ddJ^A8`s*BEoTH-Ci|<>X42Ff8hJ(k%jd&OX=au#OW(IGq
zdvzF<r47cr!E>(0qHUPJ-Lw7h8xGv>y5Eq+vM8_Htn?4-z4H1R%?Y*H{b<F9yk!O>
z9~`dl;5XH~`(?eOYkEhIg&tg8Sa{hcHwX9}YktnDY@`+06S)jV>Gods`cP7Pu{i?q
zs?BhsdvNIQ-OLl7d4z^t&Y-zaXvPdepM{L}Rhrzs`?sS*cV6}A%GK!q9GfQRb~Zjt
zcAu18TYBYHu)PPNQ(!l9jEwwBr1|OWGeLg)UzO5tB%PK|UpWis$(afnxJ%>~t@}@8
zp?wHGrg~O24dtPY>pVrW=;`AFR%X7!T!w(Hqb9GIzfZK5xB=xn<5?ds7M(&|;w2{@
zcSI4k<YZ(_3oGdvZ~BphX(m+HM9AQ=k|bk9<FJyFWg<dx=?^lk{h&UlF(8*EnvDUe
z<5G1+Ex4O2_HOrBt^Y4x=ZaLWP>iy1(?x2(lh;u+sk^~_emf2ihz@^n$@YAb+#AbB
zgPS8gozH)gwnb@%y`zzr1bK34+EA9fwn+rBcnG+*Tm%lQJotjRUZbftBxrPBI^%tt
z3i>zfL{F-`$K$B(WCUKeM?UDy%u_Xvqsj5hJ!h4^tH+8()lJ)^+RzOG>i34NY86c(
z;yz{T42XZSrlWZ=!6_$o&*nJSRyfhpE@zt28>c7v5?9Q;q5sxp(~vjsrY{keFUUHl
z#&kvAFit&)&byf2)1yKs#E^l*>n3W?h1O+2)Vu$TRfI2V`7aWOgr(;WG_j`P=7Dwk
zsp-gKSho|FeEq%+sotPO>{SFPqhA-Bw7Mt37F~TP`o2&J)wf|%NC-*4l6LDdzn;yo
zPBEH~ty3yS^RHr6Kkz@Rm)f+>7u8FVp|)8qol9t@elMut2K`?iY?GVzFU;EB3*M}P
zI+H7Og-jjJO&PJ$)%0b4ebeeSWJRK*Op*1NI+USr{SBddh4CBQ$j-<S(8cz$wZ%&T
zcuBm+fe$A5V@Csy%ha7YUi4un;(%XC<%1k>!4OD6{c=z8gg@iIMz<$@fbtFm*{x+_
zomi&US)o~k&I14nNF8*!lV#um!I_usdr2fA-z3VNM>dq#YBfI(R-5KgPLeS(<Lfb~
zVB467*wHwE7eSS&20vbDB)n3SE^Ckw&-u|!hwc(h@vgVO3Y!lJvLxu;Nh_aPOXbmw
zq+n4M--^}_%`d%4lHRm5|MprU`NJI?h_3&xMBnCAOFwOYqE!6^$IH^cOS;M}pj^=3
zLA_jxHq#ocSx=Ah!fSY2A(<>B|DP9B&le}*=7TS&wj9kx$#khXmZKHsKE&-sm^V+w
zN2g)|94|h+a=38UjBX>bh2GIfzklUA_ex#!H0|YDUN6Pd?}Zy$BC_?FyU?D-VYnl9
zr3QE0r0b*cG>bJ{<9L5OQbd0j646lBxCC(;Wx|@*rJhA~Q%&Ug9W!@Gih4&>MOUbb
zbjQq&y=wH2-g)DV@4OKiqKM~*$P68t$D&wPkS@*4NIFu`c6H)6WXHB0`8OuiyY1B*
z;R{XCK=KU6Gcx&RX`aX&$s`e;<|Bi4UW#13o})-?!ZdtrBXi(x62l8LqP{VPw>Raa
zkmtfcdE9^6=`wjVgxzw5^VE0YO}+EL;tg;@<*3B5c--i>bGfqv1?5!VPwMM5uk83H
zc(!idZL+`-ypCZ;R9Nh?R1VI_g~$k!k80Xc!sv<nfB_|&5LWFq-LIl;x_m^}kH~)!
zW>8rS1sf9+;LA{?;ZIqF1DX`0hB!abM{By5TcM7Adi|q+qUZ{CM4G7G-rbCegi@X-
zgi?$(cQX`;b1(f>EXboQW9{Ng;^`dLb(~AbU$W?j(S+hSEbtZ^$X)@tIYU6H1BwOa
z{n%_!z&I+7Loi(~U0SHF_7n)E^eX5Gda;SQQo3DT$o1j2a**j|UA!@1>Vx$RaFX`{
zE?Wycv=d(0BWz*aL>0nRL5z2^RhQiLAszuJ8WDB^GcTbx#q$0ASYvEKsBzX0FpfgV
z@y#@(p9*xSAEmgB#u`5X;mFADg&O1WY<B!6Kf?Hi;jvkS7;XXiE)g%gezMFC%OMw^
z9Siyxqdy^YDeLEi1}ekiv8bUR05wpP3h2i#e`#K{J}RD}<CTo-GvYQ8%@)rjM!$aD
z`|~fo+#=^^V8p{<J|lkALP8~bdG(Xm_2Y7Ywq?M!3>pAJ+r)JbbC-m^-{OOhu1p9+
zM)wESBdSJIB#4h#XE-dY8oI+Yx2$Y2t0rnptUPKa#WU6;B2_?W>LV5!5;d|0?;_XX
zE|bPI1++Cv5dxYt)2|;GM_okcXbRK{i;Ig@JVc$Rdd`78Fp%4>SCp%jv{G1-B*I;C
zOOxH{JEzH`rp&M0+5NLyG@EnL_t-txzj<<rLSQWY$@S#)YK44DB;O)mio%!3cdA+P
zC6}|cTXc5E%ic7(L=iBS`uzs^tt`SNZlDGf1C|DnaTR}`pfG`zQn?a_SsykGxgztK
z8)}BUQ{k__ZXz>mRLc|H^QP9P3ID7aFH;o4G|Rg)zb$LL!z*iPZ8$rtY5Fm6wV`X&
z8uuXjO;VrPP3ptKUSN5u^c;$4q&Ws0X9y+@Rchx^k(aB2EF8G$*Cj#TDF~AAmoJ@|
zm>x=clilx{_Wf4BZnvD2qC$-0M(3}?Q6bOqC*~47KU*11yc@HA`g8PVv`X=oAV(XE
z`DN>6rMM29i>4N#fR4BnXW@rv>KOH&Ja&wFMIKuT(C8noF4RUZXQkb*vY1o<9{(FF
zR9k=|SXro!HpR<X@l%kqagY~H(;U5rdN!UQz@`uc)`0H6CsYLr@LovNU@>z&+Swwr
zdiwflvTg1B#KsKVTPRG&*YLVx!q0+<XV;zik3-$R>bhTr{m1in?z(aRy42j?pj!Qh
z`2khGBKb0AupUEn^YljPNuui|_-@2|p@9qqqexcMxdAcid%hC^iv;{5$rZ(^eYV{i
z@F4ka&qd(f^!&p#ad>V3w{@7tn}OD0OCMF8uGmGk?ZH2IV!creqL{%8C+O@-y;9`v
z(a7Sku)F{X;%P)O`rU-tJ<;hLp}qQa=SOs3d*|}59~;gch6^!P@F91S`<-`mx=&Jg
zlRxcrp7jqPM)?;MTi_f-hXxwvBBZ0FLCG{Yxy({XNeqppndK}5LVFg)AQY}X*IMGZ
zJFrR^N^`7GRd*LByrg*aO{(GA;&nJ_Zj}r^DjTiL*0O7iA3hX!;{xJ2O-nS@z1tD6
z_W~A?6B`n;$;`s`H!E55r)FHP2)vXwl#(MB>%%wgZ<19c@5oV48xkw2b#fKNHEtR3
zs~C_{C9iMSVn&^fDw4As1XQ>93z{sxNVZdNtwZ@H+L3+hq|>oqg~ajWWYhc*DH~LV
z$dMpNZ!A)cOcH)#KC(b0?)D&-2~+qt>Tx$posDUJ19yo7hC{^l3g0T?9jJ&sGBR3Z
z!$VHEC;era5V6|IH(H9NJohEjZ6U>!(YN$y_jBr7)h}x|yZ5Ud=YbDtk9<nK(b;#G
zdvgFHKwd&Fhu+`)97iUwYw&27tYd4o)432idv>+cSv~tOJr3f#&vQG`Z<Ez}5=IVW
zgMuEO<{R@g&3D3sB!(g=w<*X6cvo->vSd|;PyXQKaK(~jyRu_XX2SC(GJAGZx<7YQ
zseEdmEbmViQb`n%t<ts~$;&QF?$}ncWYHQ;R~8m3=}}9(W7tc&cWlRa`yFm7LB{aE
zUidS@BmNHLtDqWu$%iz8LCgFpo6OCIx>2I<l%&E^h7<V%*=91guUxk?MzkCss~pJ3
zr;|q%8;|^_zB@W%WtIvluj*n;nIGAb8k!&8!b@CYCS~Qfr!~ft^)T!5G+PvKWCuZq
z3K0;LzGsm?Cf8-P?PZ_|^z_oj{FVLv`4!4C{)_KLx4`Ui3)K+@iTLZZ{B3l5bd&Ti
z9at?GimtIxrBXThkqZ$Dkcb?5p&m*I!~TLyJpm8=bs`lINx*C5<NO921x?fpVFMJ+
z1v7<u4z0DJvcUf>RCnu+r|g*;o{&T<?&$4y8$}kX3}K<V;OMA2=f)?u%HqUuE;Bx=
z>P`^DKTP^LL$L(l4MQqG3NlN{6RhtXneJR`hIdBDn@7*NhIMn2kC`$)cMi*Dj8EQd
z8ScAwDph4?^2A+9t)95S6;O;Tn>W7GN(g)Q2np+*H=1QW{>EtZjlXi4EqFI}zpOX!
zN)E>TfIeXx#k^e?&mD%b2xJiPB8az@V06%k5|(Vv4uN`6T?VqlD7R16m~sT=Xu7H}
z<QFaYP6*ld*<}U*wtT64X@M{L`iw_mAN1YSE`M&L=lQdA9e$`6v)jk}P^spU`JhIq
ziq>h>ffNVB1=O{?L)Si^0}6q9Q14UpF-3XiFj7*=161nxQzW8K|2|pws6ccxbuCzc
zp)*9-)Mt=&L{a{Q87z798I<dS!J|s?j=R@Tzk%Ovw^#gJ4t^~BO{6C-kGu#n7gSnI
zhRp^v11J?)D#*(sd$C8A1JK5hrL)DXcI)@`Af@i-v9d?Am#eeay9v4AUXP{dooP?4
zsmWn`IH}gq<MjP)Etg+G|F*LCS#mAMb}aYMx_zlTOXvE7SiH{GwhXHYp-@f;2_zWH
zTwGB+Ps!2YlcWFWVbp{~2JF+JbKQ@x2Hs>I{P;`%Gc7C?Xh2_cV9lazV|~+7U?dtv
z#&G`^+PgBOnl?r1B257-hS0HXszYm+Y;R66r0>C4V2`2Pa%b@T`=X(AB9Tx&h9S^*
z4di2>xn{F`Jcdj2EfFZrU}A;OkQHJ|vYV56)cs8tIdi)X-Z+px;a8U0iNyT1&4Xo0
zbE@TMrf%Axx1M`pdg}ym+*uld1-@s`r?~#;iK8MC6=CfDF{~l+1$b1hEKNz8$T<#g
zs8bZf=HCe2`(yMChF%H|bg;HE8y{Gu;0!E$)QC+{y`b_C+SsJB7W%AJ%1W{!bB>C2
zg)0b&3>mh(9d|fVDrL#qK3B*UuP02RVhpROHddHJou%38?vq;znjxw9Ek-nIyhSw(
zt+3_f?&{q3LS0tew!n*~Oh|Z9lk0x$;{E6=G){OJ<UyC_gY}4L?}0lX$bBvHfrtvy
zb?*AriwM<sW5VRWaew7tdL-YOFx2UxbaCqr&XjLR%ffIUBJRfr7k8o-Z%Yf?c<<`%
z+L3Do=bhL5>E!(fWQ8xCIh5@_(w7zgF!9s?eFTK@7R>^DCDSE^)J7l@^wmcprFuP3
zsK@JM<*hdyLM8L$<F7Pq;fYf-d7b8Uh(Nx1s#03>6-xuB9YQ1tueXx(0g~7bwJ&lz
zJEfBhzL(2&`d@-wuttk?jUJ`eJ?Pn%3v6t;m!lmsugX52%<xdRGc=43@{YDBQM@y0
zQ6{70OLURpl4D~@G^(4nU0op8EJxDiR39e-o{382nOWfcyn!GmfQ$6KX5yfQi1UPP
z{*L3xPs^TDoo|aakyp-3iY>P1@4`=EAH(M!{mRx;q9n-psn(VHJ!qAzq5OsaB+q#x
zeRnN}K-25(@Ca&9UW9J?I2&+lpbvJ7@j7~~qMHvf?I;~gXCE?k<;Am_itmz$SSH<t
zRc-bZQ;?lM{{}Ul>!;?(#nqR%%Ih^yLB%xf^@_VjRcYPV<Y<5V=Y=nzuTX5n2Fstu
z(!+x&SMX7%$^qyeVb7ZtxEK`GM?j!M*H)4V8O!?U#7>(+XW2U^Ms-q>NLGf%N0Z6X
z@e$LrU5n!cmmVNdLOXDAWM*Pwe{HKO%j(wJ{)vg1ks=l}u;XhbLlTi09d%)ExwaQk
zF8qk}>7P=50g!!~G+yNhS(B-kTNcHGJPJ4gv5&AYQSd+rxFpoCi4qWaQIP;Qi>9h4
zle~bTRooo8BH^BZPg{u-l_ty8Li*%9$TwsZ{cX0@$_`&Sdf%uPuNKta*_GW7;F1Ue
z>Ld^0V<Q+Rv`2GMhy0skJ46@ae<I}?Czj*{#v|lLf!E--sZO#3pd0h*sZ&UZM}uRv
z`y(ACqKaC4Bo;%uQB>blk}#IK@29)Nbb;PMiWN7G{(I5TQ7oneIP(m{=Q!X?`hFP{
zGH;#;xcP!f@j2K~1cXKEHAbhM7t0DnZd?)@OF_aA?n;c^#AJ4;B1@cvRowlFC`+OM
zjg>1y*~x^<Zm@^rBD(`cMF>wq61)D#yv?hlaXCAg@sI<7bsUccRn$2zGntj+qiXL4
z!?XN5BtaK!<lhkB*C2`oI|SPOh%fhGmM5?5H^NJl=2&wv%|Q;SrkaSQ>|K%!yzf5E
zis}!bMcI@s?Y_ODDoK0L12os~KMC?ru`CoNWNCk++entNF8_^YAzXlny`Rd$SO`<J
z1U}D!!klz13jqeB!aRk}p__VbZgvS#y94!ot<ZjF`F|1~xkx8IC3lIZQ|0ljSH@V(
zj-y1nDyKcJoZ_ScdQ&=q#<L>EWiLBkPLYM3OO-h<EmzT6In{k2J5F!FSg9tbJtvy1
zDj28A@pSiTdPsk7Jd0kPE~Vq;lq8e;qK@awDrCT%M=PXH8<7K%tEf~AAUZwyB;Pxt
z17-)e!~>-qK_#3gy$<F9yp{74sX>@-BJYRnl4fQ3tq6TG>M`<gA;PGH7u91@Je_k^
z3S0D8_s?S}5)+f=ikaNP8ImSpzF^YaTId*XXNqS-Xr*NQ2<Kz9p=h%YwbzUe)na*^
znX}SSwVazv&CMB(^AW`Hl3?XUS;yoDGEv)81c~Pm<>?u|8pvjcH=tUDL700-Vacon
z$35_SmKed$&@hM2vosO3dMptE-Cl_J4r~#bg6_%w4z<HDRSbrTZ665Gse1Ry)rfeZ
zd*L(O8_}1DRDDC_-pB)y_YnF=s2TP(7Zmomr@(;Zi&T#RIu6c6B4fxTEU`N)6qmIO
zf%<d<p|xByKw9-<NU2`FR0e$wp$=IdAO*`JtPL|Xs1l^>G8x@cR`3#V@g2Iz6-AA+
zIQ5vsi#ruOCt&HQiZIfJ2?=i}*EEsOX+tIS14AHF-Q)x#HewK#?&mV^86$Br%}tII
zMO_|N)M!qWbPLOt<Jhlt%(!Xrn71+Rz789zOx6{`0qBJ0U=i^{C@vvhNxW9ViYMhh
zbZcfzK%C6$qQSx4Nch`n+a2CepTW8=V1B~HqrX1m=mI~FMO%~w&&ckED#}t^!t<gS
zb*8hrfQBZpq+`NdA|&Po#f-;OjjSGZuLtl$BAIJE;yKbBQ834nO^oAWp3~%s>ErT{
zDM%7oFnC074RY1_veu}t?OP0K4hGf0bS5Ikvyj!KFBIc#sM1pmLvnF4ntV+#8CvOh
z4d>l&8^iK#-TSBx_|-?tzx9EmSACqGfPQ6}P!V4nOc)MAYwnFEO!a|44crM-!+k6W
zuytM*xoH!dufK!<ExAM{Q^I+(RHosKIgBY10nez_^kZ=o+rV~TpKFEloN}Pp7)j0*
zhATAJX(_#$F3F?wF@wlcBSdr~i!30QbiXHHyj3T^ut!6LxQpAsREGI*x^l8hjmxjj
zPxJhAHc2y~f)R6Vel%k^9Or1Sl*dy!-wTCJ)sCpuMOnE;#3w~r>|u1QQJmXBj1Ew2
z1Xx4;<ZFOI)B=!>^J+>x&vvhsq$_y!tl`Qzxuf!b*1tk_KbE9pydXARV_BBlO;O+@
z;at|0UiS3Ukq(vE>B3X=*QW;KuxS=nxKb<P1Yter#DrI`6lR&%b*o6Gw6F3BToguq
z#+38RduZg;3AhyfR+MaWx!z$ZjViKSLEZC~{B#-7g7VX{^(5s&U&VOQHOjl@=m}~w
zMi#(9a^YWWmUdb>Yo{Vx6jRocucJ3U82awO4-NV&f!{e~o7qeHqK~Uf?QE@b52u96
z@Zx$do%tuUTqo~?vGe38a$&2kZ>6X@qoaVab475Vu?vL6Dr8xXq{<5Z$C$C*jG`}f
zBbgXljb+;1l}~Tev~6%V{TB6mVFwz!@E$T|!R3MsYc1|r=xp~%s`Tsr6^dM-dZ`N+
zE_{yKgiX>mz@!OA7aeUCHt5)x^T0mrtuN4Z{fDA1{*df6EpmbG$jP?f)Q9x<Z4FMh
zz7I~(q?D0v=D3?-M<|~(ERx;L;;@uDD2fN)!;0Z5J!kyqg-_7FKkehg%+TrWBRD{;
zJy_Lz#0HwSS)xI`ttFX~gjP6nCCzb3cvB)CarX(wW)?@Pr^xESDTsgkaULn;kULc!
zS)4g0<o6<-(*#Y{3_LuR$JF;9=f{SzLCOS;)6w3omNnfnY<YI%^j0Jo@JnaU!fzM?
z+Io6qR<@1Sv}N6U8y6KULFGlRoLNkW@&{qEe^3?^i<vSf@+!F)<!%ebH{_}Je&7?=
zXC5|ae#KB4YMK|9@JfyUkGeOHljE%KgzKr}dFt-!uCA)S&*@_h&Gbx9Pq*&Y=&&rw
z(#Vo6`9N-;7#~=^u<-(JE@KFX5{NMnU^XFyypW&(Z-9irB!nE01ZM+;O*WuSmWBN+
z2~PG6Aq#H3&+mDvdwQfXm~7rZUTM1Osi*Gad7j_-{W3YQGU7jqms!*YV;_NnsgXME
zpe7jDKkb0P;0t=fvHRx-?^3Crs`goS4L4Se75fbTpTskV?>gMQ|Jar7f;!?eTj$DM
zpgPqa#>|!ls?e|n)WU3%<~Y~y7*I9TE3KNRFzg?ugo!VcvG`TZ8vMQG9xx)bIZD!-
zI-Paa(5(@BVX)Rf|Lp6=baEnz3UqLcNz&JJ*P1iMn0b>L(NMCnj#Jwp$vwN(T`$t7
z9cNb%OD4xK2OCUUU4NQwjv`haM$;_TmKdA~8JnWdr^-{g!MWU2IhCEt*?uMM6z3wk
zQtx1#uK0Ft>X=+l=ccA|>ALKfb5m|MU70H;J+V`dL@Vj6JC!T1V<BPM4j~S^w$4w_
zbpFz;2m>?~^Dj+GVxcUD(GLyZ`<fn8MSQpH#$0)Y<wY@SEw;sLVinzqYoCND%)vi}
ztLTJta-hFu*jq!M-nsSfi(EoGoexFYoS5a|(~QRV>sXQsl7*jS-`JDbqDvBf^2xDk
zDnd)66%WXk(xGF`vG>AzdG9eg0(GdOcJ%02y+mc~^);c-i}%4<hC6VDaE)-QaKG^Q
zCj5(IL18?HVm&}C`2S!Xh(?|IpbJw@0K}x43@e_~2$e93vqk#HikDUNFWm*L(W5bT
zNJNi0ILEnzXt(_in8ac6e%1~;L9zI@({vJ?exACQZ?Z3ZZ~7+B^OSJA@SyN&;cb^O
z$~A-5`2DtD@RGO5an_$=`vot-6RxBO0>rR&M^AS2L`P3@xC*v|_fbjrh7Wi2*hhuY
zbBE{6apdcr^97djHGGmmXJcu!_KlS^d+UXCWu-7&lSx1+0b7qsk<nU);dt>ms&@eg
z4i@UPr##5KL3c6Ti&S?(>OZ)wxt$vzzyNa{97AM^3VNgw_X3{<#MY`Uf2r+PAS%KZ
zdH>K}qGRC_v#`w~s$(s+F}GALv8)ZM-7WcFRtqs?r(Yx=s9Gr^m9IO53vw*>;)f?D
zQcfY6^Qjtf+jXxNiDNh!5yfUK3BBKRuvj1`Zr*cji4^3l_ns&D3dt>G(kBk+v#%{l
z-=OM8xD$%bd}-Q<JGo#>V!<dE(8Rv#$Gw`q70UsV6>lD)X+3U>k{ea%pc=t>;$^H)
zOdc#6dwP=}_i|G5*Z2x0n#S%kk(pX1n5rMciV?TzNgcXU9rukwMA0sYNJMd4B3?7j
z&=N{u$Z0iO>yweP02_Gt5(nf6kgHF%#JJIo=3VW;jR&+`rJI?6KSos8b+Ya|SX&+c
zLxP!zM=iPPRnmB7>(&`<p-|Q5^YG(d<~UtZy}-7<ZEQNS(ZhX!@A3__{ap~gGv*)T
zF(YM`i?b1`JG`Mh*M2GxjKR8Q*b9>|{%edVzB&w^uC6n-E)5wXmfEA|;|C$puRr2R
ztc|ij|D6xaeREN})<{+N`pf>_BYXWQ8?QBT-nH(h`sIm3!1nOE=5f@3aYQ2uov{#Z
zS?7^^h8`{}vI6`5xD6g>FKm^?s{lYizrXxD9Owe8j%S=wE>|k$hM99c%eD18U8~#c
z4lcl8_ER4GvJF<)=duX#GOB#phP3cg9*MUfZX;+jOwq$*-`wUI7tjCcdCl6;n=Ws7
zu?ynzjmzRbHeCoM%2oba?`^<qecx4I<t=Cje=q#<mD%OxS;ZL6IlZ6d_Ti~MNuTOk
zuQym5Yk;Ai7TV)PI=%t#;b9ihI~1kbm(w(ZGC{v!8*z&ORUw)IfK?609xzJ*t!|r*
zX77u|-ob(Zo@6A>J(zw;)x;&yCMiWDw4kX`Q&JD8lKELCahfIwe-TT8h4ZbJ!x8-G
z-WOP?MFCizE%iO@YkZGt8J=f2OuU_tr*=$Xtc5W!s2j$BT!!aAMqDy-|FB?Up8<Cx
zhFRLP^@48qptz-S=$=EB{WGat%<!Bww&H16@iZ%LZ|ymDY)@<Z`BE;iHEtH`PHu!<
zy2kP~fo)2tY|bRb(_q*6<%TJ&<2ceImZ`N%7^DWzXr#f}u$fV0Sp56J-vOu8^_Ou*
zy^OBs+2P}R4gQ#ONUiJbgyHfu;kt+DjKP@gl|{ysNU^oiW($)l<IaP~>=DRw6Mf>*
zlP4cN`HWuGO<muiciXdrhqLZV)?Ib8D{fZ%Wd9As9sG@(UDL>gld$o!sW0jJ5q+&d
z*Eig3)@@|ndDJTuE+i6D)vS9i<gGVH*9=ki`-S7ei-ea54^ye^EyBBmUlxAjg;|+5
zw>Li@_jT~^w2k{b+W>GqXJN4QI%^hPKDG68fKY4J%}f6Jmsf4F)rKmdo*4Xq8Nli3
zc<wTv9)yqkLtkNA-7_}*#AP)nFRK}RcWglz=Lm>X$&JTOlo_Kc?ICxGpfoCgoyAe8
zw~HKvy2^r9!WLkQ0i-K)r!j+}_8I622i^ug%DXzvJx5egiDdCslnAntn20W5jjFeb
zilZ`O09*9=MG~eMuEHDFpw-7d@|fFHB}t|l<JLphenPAyqDdu!h$_l-OH<NBmYotq
zv5d3nnh+aencizmI0md8!q~lX{dhs*@0uZRi|n469r*=8Z!12Freof&n$MsaYM_DB
zi@$b9b9z=4eY^VDNA6%a+u(lLq5)6mkH_Ce*V{hT8fT}QJGyr!V)m_XL0b=^<=34_
zCh5}%@{`TwGeF|upj1q?4NbHposNw|xNV28xfF%_&G|sqlgXtS@&04F9$Q&x3PbK|
z9-FsWRNf`5Dp`bh;5-Yb94m%M9XvF0Y~{M12ENKuv?sWg_67IR-r$wOYlSz0o)(S;
z<r)>rSO97X#Ihia>S%*l78;Ccaj1hWt!I7E;xNJkM6=NB=La=d1aCIoxXh-!0)E6_
zcX7ArCQUYFXYkSYh^~{UI$<eD@nu^v=C&h^<meZ<ea=v9*_Rb-LXD2LlAnL0-<KoS
zbnd!JZrY06<KeEP9l_qbChcYQ3oKG&+t^yO3#-5RZ#>)O8$C{sIqzY1&Rm6_^awlI
z8(8%tEE?q8`pSbctPSIVfPV^X#ap0{Xm2!jl}T&d@>Qz(+;GWt<NzY|Nvr79SQ}%T
z?oyfyIhm79`{zgYuk+!YP7W-3f6fJxKS$XZm5h2Z$Iir$B7!n@psInLp~a)|jQyQ;
zW7x{Dpgj<I=T|`*`RY5rXD9RnpZ@d#Jz-n=Ogw`W<Y|VXd9;v;&lqEzQc=dzv9Lh`
z*v<?@8x!)LS(lYoyHp!zj+Qm>kg)JkE(3KxG`bjJ!#P^de~xjHf}d?%?AUnT(>m_z
z7=|2X4xwkldKc@LU&Cnqs3<VL>d%C+^BIQh2mM*VJf1tz5Y>1XMjb$3SbaVc0`Ami
zT_L9n-$+C78@sRGu9lq@=aZ4Bhc0;0$je`M=FIEPoZpmaKywTN)uN<`8yN^v&WraR
z-|A?_4m17>UyRghkvE-z1O414eH*jknvTZnMMW0J)~wqm!A5#J?R{Q8CV{rf@ZW3F
z|KkkAP5Qs=vHzFr3>%zso6JX(n%4}Exo$N=4Dw`!MTBvF?XVmwj1KqFb;o}6P13&~
za4Rqm;-p_;pJ=Q7Ua!B(MFd`E)n}Rdc6Kbxd2D)?0iv8e&-`_t<X_0x^O+ZRgWbNu
zk*7J_a(n%rL%Ha(a&tij4ue?{eBe1W)K}1Rl6FVuW1TxRN%gvkLPC%0qiNS0{I5pC
zG?nNApK)5jw_svvFWs@@rJ6;s`;3!FI8W&MufzP;b^QsLKhrPJoAD;tbjL8xev|{f
zAnXe*!E|(<LqU8!;Jwu*rBU2F$5e0gG;BX2*4n^cPHF)O2ymF!(6g3e-f~#8t$Soc
zRq?)kSXB-A9#J%P_3$mGV!d=qiJNCia!M|pG2_bA+{9cfzQu92#9MO{i(;`T{xeGB
z)(Jf!CGJ-Za@}>rQ14H8`iT}!Bj-*lN_O0BS$FRsQR~iE)|2W&w%N=ssL8syG&Qxv
z<Ch$IUk!R+ucvnf5i?~-RizDbk-nNHB&;$M8|1>%HXY9CSjWTGT8w>wO(4A_kKD!P
z{DSAUxi28X-C=w;cuWBtkAtMZn{O@hIg0`fNYkIETZ@U}6UQ;R>hXMiyNuA>q_%qk
z_?jf7ZzFhe>$I2_MOhS4e2S2%I8sG1XVNE^r?v91l5LR|D=k$tTmzGBI+A2fktcR*
zlXFPf-aB|&KDB?l8&?!vpParaArV=Tq-5%fX+<SUrM+dJwkO69Q`BgOrWHj|MII`s
z>fnNh<nemAnAjfDs+d-!T+kJwD$`e_6OyFJL`?RkCZnm;_KiAXPFUsfVwY)%(KzAi
zUr}P#OfL=(j$zx;XE+}|^c`q^k@0B3!mP-W%^~i|M)V8w={smGwrXt%PHxi|N#81|
zEtWh|qu(cZ0|{mm(AMbaN@m4jG!;bUhNr~nH#e%Ed%2p4vd>i{mCD@O&Z9fEgecM5
zmnw=UNvfEZotUQEx?{#o(LzYpVv-co=xem;8#EEbu|bWBB!rM5(#;&Yxs@hqk&2(5
za^MmTcJPUaL6ueHAXE@#RrIR!^Hom-uz0aRj~eq~zm(=i<w(rRs8QccI8s@oCqfa4
z-h*rd|L<8@zK>mnOsk{_J-38NQF0QdA5}9}EJCtY3U0uUaeL$E7~e{SVX^KM4nwRK
zFz!^UL}BzB06Dl6DBPi13Vp6E#?KC8?QUk&3zu@J*<K2m6E*}w2ehlPC2`6h{7VoF
z{>9S1YZvSp+eR_l_$S@h|H-iXSYE;KJBQ^SrXyJopT{dQhTl2dqXqgy_mE(Ig^-nb
zJt`ejlzV0Q>TelQX-O29q^R+&k|Qg~M^t^GGjR)@i7C1y$tWd89W44tk)xPyp-e<E
zUB#ACqC&^^|3#mLL7&A-g_jAhVp%?fBLq>Ymxa`^sB^JZ^G24i77uxZkh~zoqhNF$
z5cSGN_ZC<_;d|pYP_UOW*CMl=dTo#pc*j8CBd20`EgnGVI!3FV1xL@fRAVJOr|32|
zh^!KM(t*5#Nn~lD$|`f&6+`WKdU9@uK}VouwRqJG-7b~SC9$k--%gu)GM7)O5}r9y
zswQd2a7|jZES&9U7276h^s3y0yK56WbvzX>B3ma0mN1nqa#{=&kC>LrXeKc27UNS`
z-;+r0@6%CJ*Xwij1O8Hcf@sl5GoNcl42`r}L^C4IT)r8JYGfk5<R74$$-raqP$3?z
zR!z55a?NTr8s8{OL>YH8XW1J%i1>F$#fet<8xjR?N0-D?G|~5U?!MOlr(!B!>h|b=
zU?K(Cjb|i=Y^Ar!Mg<BLL%v=VKf4P5c)(3>jI>l4i$8*l&Yi%pv<<kzN1{0$6yO?c
zk(8K!rbfG^);QK>3v7ukmVH(BDlF5Aqr*`F^=GE03t@y_x3FfpB$$~LOB#vB(d0}(
zfH|6ZYo&=K&}bIAg9|+#7=IyEE%=QmVC@qPf7P{I94qF0%|Y2xOmV2P$lMZ7B#Q;h
z?RUGq0%N=ERmW^efNPSa_q9Op>!5H#I79WwhlG!X7?<NIVVjqlOG8$kF@m0db5Yr#
z0Bs)6KBh7G8*Fk*=a}`V&!!i~%CDp?L{$q9zTlb2@qIe=HU7D<VE6ND^)S)LT4VDy
z(9bn;?i@>lzhqi)Ewx~pv#i<tn@fLjE=;lSu78l-PMz0UF1xz(?vN*ozt4oQ7f_SD
zXfw*S$V!oQD2#rPKI2hxN9c|%Go8d1d1(yEuqowa{*v1~&r{qxcz5>n{%KX6-hY}i
zP^a8(f{K_<8nXGBH>)qHe$=LdWC3*t@V)(MCcn2c-O}~ebZ2jV2g{1%IHL!>38G4R
z)jP<SdBR*5DKW1YD-<#feHe!X{lXUnTewqr9qkvmjUtRgD*53@!g^xJ^z=j1GUwRv
zLo{HvCdf%m4mQGq7q)W_#uDqN7a=)Fq#ZSt3q%&8V#{<#1rWJ&(h_=!FG)TjFqKqt
z_4e(Rbj{U~A(iJ0&&%n_?4%z%+?v`m5jA8a8BTG&00CA-O?G5WWA5RorRyoI)H{A9
zrD)N)h)$)~n50C!itpro&!T%`*N|<h6{6SD^YAm$nbhAtdE3MyeNLEEu_RANwA&)I
zpU>utt;6}oe1H`!%5g7mR~M^DEvS)9J!23Omm|2UOTmO!o6wW*#+p7sJ9JYcRIjrl
zSTv)mtVR@T_?*H2{L8|x3IDesOhEc!6(p@$3Gx~UWY+uqX+rvgE%A|VVTsv;Ab1x9
zV{kwNJ@_twVurk{Hj7%HWtaxlFadzRBf3d#7LBq}X!kzif(2biWLf;-2??W*#S9m{
zy-O0qAi+_v;EP?A#9Tk`nSrBIVOGi%X$yoAF{meP#d0jgPSyjca0^;7BS|v$B8KVZ
zeK#fn@RaUS^;q>?Aj}orz)6{^&G^}Qi3C&0XtG>csu*s1TiP{fsZ4980;*T5X3F6N
z?@&s_L?F&}eN~OxZ(#w0gMVSOJLxs5B;sjy+%ha2808KfN;6w3E<$c)O9paC%SM2$
zNHnP^UWBNcqN@bRTvSDgkW|)Iq^M(C9^KN3m|k%)S`sTsh)-~ximFx|7s|<sSc)zd
zJ<A5463n8KVrNq%qA03_Y8>lk7{oY^Q(+4+CZUfpDOGD;utZwKZ+lB^32YQW$oPQH
zpW5^4;Oo~_A8c0NHNC$cygJP0d-2{E8y|e}<P#5EQF_S(S_$n|n@4BnCSN=p;{m@(
z6XMKcl?wraTgoD2;WE}~PFOkWopz&E*xs{9yjP`?#o2+NXv)1*6GzWD5Xsqd8rl)V
zIHDbwqS|e=Yd(TaO`N0s^uKDce_+wIy?=;l*#~XyuxV1o^TE)^$zoZD*v>yTT4)%-
z^5d4#Ic8Z}h3VP#9=o?`5v>k4MZI`taJ~=q{Sl54n{<a0VbklaY|x*4Pibz%g$;hf
zGFtm7F2NaY_X6&1gw2Cq!+dPugbfprNsWZqSTJ(4;4zj50O%boL=&YMknc^2@=IMW
z^-MGfqBm|S#AEZZYCTcgW)?lkI&Bt1nBFgE_q^1d4@yBfens)dqAcfT=X5DqG!E+0
zI6lxMu%QZksDRMJVQf2mT8-u|#BJoG5H2MgQ|7{maV~BQ*_@UDj(K4oG*~31+_~z<
zW!Z5o?Rw{7M3TBmRd}GgLXY{5Bg-GJ&e6e<F56cTZ0bpZ9(IsG2fNyCeGYj>k18&?
z<JrV{L%}3vye3Fp#Vk+O+epweJT#~8t}*B>W{|on6}-ksVS@GZiR|$a4glA!=Y^xf
zwa@E;jff>i5zt&{wu6P{0%O!D1FK{$^kpwmg}G7U-SjpzPpcNo)#r7}zTHTQ2*n^p
z3;8~1xN;03F=-%q``o^LbDpaZ+TC<IHAq0fIR5bSd21i_Wm$|SWz&?CQBjtCaqr&V
zULq>EbF_nOGI$I3+e#y!M^c!8yu9_u_nl}AskONf$eeK-y!36ZVR;-Nm}jAI0%iyj
zhB0Ut7#UeeEGHIbsrF#?LH|lfhQ!Hjq;v4v#~%C0V>6CU1{WVaSzE5{IQd~amW-(m
z?dMfuQgxJM6rydhW2S3fTC325WC%Tu?#$4`Ja+BD4$)5TsO_zue00B(h{RId!DJ}J
zkR@4FbjhOCX56~8dW8KjdJYYq0r~=-#L^hFV=zP(%b_2Cm-p|Q-b+Q0y@zxNaKPq|
zyOm#<&QBbZq+=8L7KAf^{>ZME@&AEt=Ll(`0=E0M4Qb@y-vf&w)#zG70Ez&&N7{u%
zR}330DAIpf_kAx_NX}ZZXztW1z{HDKUE^uLYdP;hx^4@sdt>g*WYkRt#e@Ey^Q#vi
zjZ3s0p3gOS_WU!cosm;~^*W9i@Jy%qvkXJ`*CDcoJfpz~1z)lmZQi;@l1DE6j>PR$
za-U@oSF^JW2WxCe0x{w9x8Q=4kDZ=@h2yTi?HVy=d||WA!=-Q8dPBDdZ}j4s53pkN
zF0|LMM%OK}9OtccC|?N8jhw0qs7M>bI2GU)eLj#9gicabeR}q;r=GfNcE*%Mi-@OQ
z@rqL-`6VLBZ3_`ul=kfdK?zxHSt3VDk|~v98a8C-sjoccD3*y{@$0WZKSHLwbcAj-
zF@dmhWJxxWu^;38@QhXX2GG~&wPuBaP^CTc3?0Q5;9ID$5rH`*hu5{8+mD-ou~`mC
z4S<Ct(j-BfG;2Y-+-}y;Q!T^y?(P^<M(1wNH(DDPm+SFD>ujrawiC>LDju)b<8KLO
z&(-5=*SQmCVzDz5?scOQDz;CbK8@^Zr&v5+e4NhKb*evRI&uv%JJ=;f>4(`a!Uq}!
z(1RM)si3M#fa{<f1yLoav1B5~MO@~6F70kuP6T}s2V_&O_KEla=~rp-zxU1FmRykQ
znf>@d*A*qHmP8mOYmy{xT>PP;Ob?#@TS#aATjWeD%4hG;BZDV;*_t9(6E8xKMf5wI
z@8t8MQWwR#B92OeG13o3D(^+9>;*iW2k4l1jc^)xS1Pq;o75(_{KG~Jw;j+?LWvfm
z2zx`5>Gm+Yf)5pQ%%aV1v^>vlb^HJ%C`V9@K8j{QP&YPlJmwDG$6~VnCg#4vjSc<=
z^#`Aqq-<6)wH;Y(nmD_|#Fti}2YD=AY+}ZZEf<UQ@9OLu^Z7p-ra+=KYw*{3`tND9
zI_M!^QLr*UuVB@h*Y$a0<Kjoh_If;<%H{6s(0^mLCys+4fN<xH+aSig_r*>8_^d?r
zBS1p{hC=jcZY4!~o3Uu65Hy(A&|WCDl2d!DJ%HluQH^*Vw*Of^<;p(CM(DynrV9^3
z9jz<u6AnU81t!VO;C@D>8XNFhOlfYh&X&nK9`jFl6?(x+u~igbt|Fwi*-2N&rfsOc
zuB~a0q_IRk`AH(-^dp+q9;~fh6hOnDqbiCVAI~b~)3~ha%6vB_$K{2tgB|(WYh^m?
zF3^ft_d=Kc@&4<FB0;aG-{clR4P~FtSf{EyPd5zEgntQi<Ja8*z33fiWs7MB2K1Un
zV47PtETNYhrZYJ2n8tN1tf;ryM&Z(>nCIDX%<~~GQI(qwpkEzB#o}7g|76ZKb*0m(
zube%*QtzA?hbsCubE@6jS?QczJ=<CN)DUZz>E2x`rvk<>pbiLOgcK=XGA~ApgyoSz
z2y>fd-|~>#fDTTVnnH&cjGk20_r>0<s;`SZpsFv44lba6bZ}NNYg8OPARbVYM$J@G
zin%47-eM}~20(ZPfY?epL|OvsjqdP=dfmZ4S|oub^{Ou)rLs+eSi4Q696F>R^K2!}
z!<y5T-VhiAk7QIrwaW%WRk(3oCkQr|S1}X8My`9>*AN`Sk#1nD2X6Z+2|_V7HY6Dd
zn2x)8iO~Ad<+%b=XbPW~$Q4)6?^#lBxkaTja^S#d>3?%c^$~Um)M2{vw=WZ0bJbMA
zwcvBN+(PQrs+7w~s;x@X(`*(lO-)Ja_dtFPk28i_`iFEREMJz<x*fUWA9@7271A6>
z22FmirCCW!pPba`Oly5_@IM~<&X{I-=#Ztkn$_vB*`dL2uC5BB_>)!I(%Re`jldkX
zPL)GOeI0uTRW3%*s$J4<j()Kdje@gBpH^88ic<lY_yH@7zIu(EPgNPvZN1|*o0$)H
z>F3^!ut#|vf1rY2O-JNEV`j{rYdMg~$Y_mHZl`{2wr0z{?h}wh@kDoJ+*%<r+>_sD
zJksqkL_01n0)$za{xG6a&L-V8gN+1K%d?Hct#0dZquyvV>gcHAI^#XG6UVw5pt}MU
zb^CqDf9v;WgD*Vu%ol>ek0NOvRm!L7NP%G}^7pyS<ggvXY%%s27nj<LJQvmvxMvt>
zB`~Q1c?6gqtF<syHV26b^kYY-@>6rgXX~AbEb7$LGgd5>s(uv{xpgvHp*3!l=;Hmy
zqA@Hg<;i<*5@++pxlTPluTurA-bn|sYARZz8p9rC!U0<&A;dCQ&PvFV;s+)V+z|R&
zIOb!H^Q&ykZ(FP`Zn$Jz@dM0}3qzOpxPKqP-LSlHz7M3N%p!4jcA`@s(EC`dpyk=p
zlI_G&RW!Id;zhJ0nk8jVsOpKVWND`-m6$SlnpWkamSz`kT+Ymwlau;()wHs;$MpF;
zd<oSh3CR+gU7pD4^kb2IM~%424ZDwyc%6vjR&n{p+46iknAk_vra3{-0ppnEvnhg2
zzn=n?=^DZ|D%Twb1e119gYN@}kin$7)C7j8n#8TmJ{4z%cMNT0PO7rLH%=rFQ8DAh
zYJ+%9YE4qR`<`d0MvD=a#jEy6qVy+3e&Dz$zEjcUo%h~EFZiZciZVt=oE1?d(mO>F
z{JNhPWl4PaE~@`Nlf3P=+y2LAeO2zz`d^epH2ZB4`^&N-qU+|7EZ!n%%DX<KsvpWC
zwqANH{Wh71;w_?#24BVEDPX={{^l>ps{e)a=h^%I9oqkXiSbXCLlnHB9etRO3Bm&0
zJ4>alw$KM<`49d;mOof1d_q<WPpi(es{H$o`g8$ZE$ZSUkI>2O@%Yb4it-0l_eF}X
zU$|FMq=zo(y7D5o%6)nT+Aa#{m*{uKa0V*DCK5_$1*Uy>h09!E#?LdpOQr$fu){%9
zPqChRm1k#7us#N@(oVQfHPRL~GznImWqrkkrN3Hls9&QW5$j#f7E;xT*{2LuO)IKm
zYc}gy7@pGSm|W!udjUzY4c|JvU^)OXl|*69lQ$5E=7rZiYzs{HV=*6$3T+N<%@5iT
zyxWeMn)YyXD)wmPoAjhNpvMbkQ99TdSgLMcam{D0-_qP6%R6>Svhw$iei%y;DXQje
zEz@-jTe1yTS)-E9!?tLinx2}Bll{xij`CbrS8d6OCZ*g>OZO(}Ye+80x^=6jt0bf9
zT2L{Q_}9%SLT(s~`Z*TAGt2PO7-KBtk%7h)F#j9C>eg6*Zj(i&v0J1M9(}nf<`1TF
zD3_%=;<fdNCYKjtfm-roPKJt8ex$zJo}6{F2hdxaS4OpD?sQR~w0*-&mScWN4Pr^U
zovcOb*B;w#2Ud1Hj-A^A3bX}wg%zPEoE7@QIpN*HF9{!^PoH5#F`_w0*G2({P-V{+
zjBg9lPax29*#W?|11WBPo>Q7ZGiG#V<r<^<;dQ&fFZL6TSEGtvlp%T5mfF1FLS!Bk
zUQJaDBw9BsfDPhGHbzl`rHV}TP`M&ulJA}mv9iV|zor<Psu?GMXMPG>(mz`wQWUyu
z(_<i=OeqpR!8TDQBnwYnxydnBbyEj%%#71%KMpph=ZIz5HocVDX)Mc6iWa`pFz&>b
zs17cy+j9HsMU*jBtZJkw+jt@&DdcOmZCP|t#?!Mz|0Qh8O`_3F%<G9FCBD7sLH<D$
z2Y;oi&&ABaw^S9S&De8eTwW{=8sz(9!kxnXbkqicZbO=a#6lp4W^|q(Ftn-!+)7tv
z_Bp<aXZ5qEPj_jy!*l|M1vyGCAk|izi3RkNzF_N5+WO!;s0x47Tc>S-%U9KzSkm@I
z!&FssR02}D3B^_>=-hE$PWo6UsH5A1Pr)(JGqm&_M`Z+n5N*lK-+|+pE)of?7%M)i
zs$RRMD7CgnOZikP{|TbwJ{fy91|5TW8xSCqGZbmOfLXr0Vhi}p;K8){gbl?bU<2A0
z4WC%JV~s_?@?$8ML>M<OSw=!b<(J=g%!!Lax}vHD22^PnX4*?*B-tVzmT)Xl@Kvh}
z$N*<k)j~AFu`LJZLzy%D7<gbsL3%q=VNXYE=0vxfuC$IyRGUv}vAQNovZRW#mQKfz
z3XhOzmEHJk7`D9bffxobv$5;b^f`T=jv>I+wXP*rIow2v&ltQz6xeAt3aGzz^+R!z
zH1%o2n51uX(lDlVGfCq25T@C@o$EJi;{C@5&(bbBrWp;>oK=)r(`*=8OjQk}uDt9U
z8@N$K#_P@Pg*9$33>8$&BY#=EJYgys?Oiy<bHxYS;PuR`XJjW*^X~O?ubbPF(z5hf
z4}LH&lYfXUR^q}%Wnj?FASKVtXmqobyJe1UH<2|BL!FnEi}A{0>>mhiU(Q$_6UWl6
z33I}|!lS}#X>a--;X}g5h0h9qEPRbVwdMj7lFQ+oS-Z#PfyWn$;rimgH41}um}5~P
z@_MmSVnaPE+i1N$STEXWVST~hw76kw+6oID`h)pF`s)Gm!~ja7^FksxG?I$jCdP^9
zKE~%rB?g9q{S2?D>uiRNy?puS_-x^lwWy#zO56G-KiXn04dCF~gXQvwch{oJ1;@Z?
zU9Z`OGb$Ab?VQ8P#^vi(lWelnCMCL|uz@2Lke@DRr=Sup_+U9|N_jV$ql0dn<Pns3
zcr_24I`5pjkK`kt>B#unXPj=gQ0Vpx1;?SkvAZn%Z>OZ){j0ienO`i>O}d3Owuw{V
z_KwemeP3EQ1ira|ah{Y*wOO$Z@$)=y9kil=8x@BpH!udxb7KKFZ-EPM2p>XkqZ;b}
z$IFXJDQd{FYAR9DAYB<tD5Y*I5+Z&(Oettsx*tb#(5z2sD6JIYiRfHeBR4XeW8zJ%
z+YJkert_zmAO~Spz9nB$MFUR{VWFPYf)%=d>I7IkPF$;7vV3<u8J&Y9fiU}Y9ov}a
zp@+bMo0;mUBsRud+l0)zuwC(}iCy9-HF|$E9RcK)!f+sNKGtOOvnyA&ZQarBXe3@v
zsU)B3bDg^v&qr^xT>gGotGFTvu3$H@d}eYU#x)y9(ord*t!%VYKs@MS;RL;Qk5PT$
z>YV5`yfN^;p--2M(+q30)y5knD39I<zZt^Wk%l+YRdl6jB&ZI~%`#6UQlh3Vn^IDg
zQ+X6+?`d%&JH2|i^{A{MIYzK{1;3>SuL5>3OVNxfxdUw}ehlvBsi6B3)iiG-s%h-Y
zPKuIbxg4rtVi6Tvhq3G$bmSj_I04Qw_<nwu_MeON9)Z4)-B_&+5$mk4qcX^_kLS~N
z1$y}P^sT~QBMH%#QNQyYJMOIfJb@_O@0*5anBOvtZ<#t3iIHID%-gxpb=B`8@zX?W
zci;F(_eza?T0{p8GhrHE)b%g2!r$up^^0)PPcr%a0)p@7dOFgS*NrrxMSdY95x`tR
zW{{+#4tlJ_P4%UaH3I^9;o4ce6FVR}dt2!VIOU&YiK(5`u&KHvPDItrR*t#ltd<U@
zVD*pLDzjkojh^AsL7Em#tkJazHIDU!5jeBl7{2-XR3co><G%ipzMP*&efnOCjA?6O
zh#eaa`enwiwS=kI$IxU0c~nAs{_@a5KD|4e-(5|aH8WZ59=q8M9yoODOi|N{FhTR{
z#s0llo;sMbI@M^j+Ie!NH<S5)sGKl4_Tyvzn)qtk7Gl7zrf^qVvBV5GZ3s_|prG9p
z|AQiH?sIFZBh#<7pqKRY9o6nN5mi%3R40Va(OM*O<o(s|c-$V?AWi`Oa%H2}VKn9z
zH>n#D4Q~RQ1o0r1W~(fPxXdE$ChqKvz<)Y}XT}!pWMW(5APY2w$w8E$!d<`L@AlAI
z?^8spuhW0k$IGmFZmf8;JLr%675^IEAM|}k$8sS_FuI-EnB5VxFWTpK2{6FJk9WIB
z+Z!I^8ZA@lO6&oFLvUj|0|WWW;h*oq{6aXmy4F3phC*`nvn!o<MWS((a;>eb<8UHL
z<*G;QJHYo+sCO1#%1n^wR@jUq@m8`^x$3OAa`v=JYgu1$DrRrbw8yYL!IqL`-hts@
z1QBUeKmj!1)}li7k!tDffA#jKzVZ}WSv_l9`SmM}!Kb#qZ|k;SK>e$C-Ln0}iS4)S
zip>=*Yii1}iq{80a+oWz%49kZ^3q3<Gd>u<hmkXt@F_twI@69}=tLnL6U!Z&MIjR&
z)!ir9fc9r*N>{DIRq$-~qAWu;%~|onF56V{B%vs#DP^wlB6=lanRPwoNJgzPbH!9V
zg?el>``1hads+H;`t+BcJUXG}B6s+rl(0@MShM~qMbdMs<fYYIhW35+)_PobpW!N}
zfZZ&{1E1k>F#uhV+H3H+MvFl)L@lEoE<NE2?J9*_klW&*m3n7zp#X@C%d>;?^$vtC
zL7G>5@OYvsE43^-oANvLivsOgW|uqlkkbtP9?QWE?cK@{#p-hKsu5(>dQ2iFBND$$
zxNgxWu`Jn=rTq49D;6!t_^offtmf^7>d8k>Rts1()K{sx_ztE$aCeGARr(Cw<NE9A
zmKm!4@85q}&D*2fN??30ZHuP#NJM|<1`UMqB!&C{v~yAzF+jk4LE?#!1wgzCW;;X3
z|G`$64cp`u==TIyxDVoK-JuAT=R79#A(Rz9+LeQ`E@z$Aaed%l1j?U~b#ptag?vnT
zvDw}wEdbwNbA)>s0pn6Q@`PFL5wTpW*4~+>a+zpi2V*f22QvtIvu0Vg)|lI=u>R$c
z*uJ_g9%5x>=UhXxElXR}qeu7aq@`K5r7i57&_xo-Ok^TN)F*Z>u-X>U_aBYw4<<y6
z9a)9+4k?`ia}5HVR7E*TPpQyTAFN}X`ZZfqHS6Hbs&*85kSia_S@oSe>vr}LW_&rS
zsW%_A=qC0tJ0WW;Z0jTOMeGETNZ{bb_z|{tMUxZuM-F0BR1m`QQAHtSNlRhOFrEfs
zE<uLL;9wJF-afYo0oahk#8K*Z5l*zaQI)-PzI2ISvX3&cbOaRoVDN2Kmn48AmPFJ+
ztlPWtvgwByB6aAYTywV_n*2y|K9%w<RZCf}5ixD`BP(YwjJaUO|Nipq>e;ia=U5!x
zMof(e)j=N?9$UxM7+xU<sfz%53gL1uw6gdxJ$(ae&?r5918xwDuNd+eF_E7qrvtZ-
zFa)S=*2*6G?!m>ygNsKQEX$pAU}z@O+b51wnOPwU#(5IMiXE}E8O@5=3XYLH#&iv#
zpWbj2JCcdNUW?gs=Z>5lQG89c2KO<T^*dfVdH2~xIKd7E+k#@Q)wHyx*}%_#xXaII
znQxD0R7-treRcvX30;r+^^pJQ&wD+Nx61vdnD(A=At@AuI>YNFWoE1`w|(9un~*)R
zL{&J*4);pcaCoSV!j-~EjV2wGkazvnk#0SG<BOM*OLrX>e<Ti`wVhk~D~)&t31A$v
zrtWVaqaCa>S3EF9%16rR6Z<A+Ru;TJJ=~HkOKLqrq;E8)c22Hk_R)U2*FV;tif8;(
zajxe$A?71+xb?&Dd>C2F<WnxaF;h8r_4=2>1NFFM5=3#@+GeHIg3H8|+gV^J3TJ)S
zg8Tw4YVOQtcSb#)6Z0(l8Y|&931iQH7IpLi`rP&iHvo=5N0z9D9KI|Lox_W7ptu0Q
zObCuF4b9NI#2gErqRJ=<QPzeB;Q0i#_g1#bc-wTjg+*O0m@*0Uh>FCx`BvyXn1FTE
zjEkZh35aYK6jeqFJxd*H+qN{8_E}^uKYh@abhV_*b_U+ULq>LOZenK7Oo<q}ug5eq
zGA2CJ#u@m!qRGix)TpOtuPB^s=Vq}!U85gVg1(h%YQ$mshg8eXgY_S*-o(f2Xu(v)
zZu6m|T_fm+EcEOuCz5%e+j6gW-S=gVmX9z~)Zj;tUH=$*gq4q!kJ1h3`WD?F;#|ea
zAJ5PYgmphN?+3PkOgrqShP^=zgc+7CfEmUIkSHv+tDHu`UxM$1KHoBx<mvM#<#o`_
zb(bXBhUOPSfVI!C8P#Uhm>E@6bHOAyYQ|JrF_EB4$@2R<^=YhmId2F3X?VKcsbt0F
z*+R=sREl#VLiOGlVpJ6NiCR(+NLGv=fF0{SD;-n!=s(Ts)bk6vq0cTCGugSKMn+g|
z%Pc0dBkUKh7H$&mxzw`?$*Z8)^E+YBpb91rIt&gOVHlphNPI5RF$cv9TtH{CmAT?Y
zp*UAbck1(5CzhT0rXowz`y~a7lACp%Y3bxP%Th!omG>(PAG6g7`T@zdT9K?9Uf9An
zl$mUCZmyV}p~G9fQ&%f#q{=OX+;WmkyW3Voq>GVOE;XC8e@C^usz@hv6#7ZUvF`>@
zC$|F+DANSSL031te+4*@&@g|j9WHU|gY{*$mOh(R2E@5`*_$7HN;E}WqA$MmK~}PS
zD?TjKTH8Yqzi{ab|31dvLe$G<J*VlhGWfSf3$VgU0tJeI*_aRaWzkkRNoCRf!mYGT
zj0^3%(D>3)b;Huck6G9Lu}|n@rX+RY&Cw^_mG0fJ^zjW#=q(!-Pi$D){ydNFIJWRv
zRiu*ZSuFjO<$v1bnSy-8<Dh<*Y6|;>72!p~UBV+Eqdspd$|1!E5H5e7JYRT1qcmRv
zuP2oYFbRV#u<~zdUxQ)$n#l0><(B-xt0jWbcGVD*R}gYVl1lrB%d#Vv57R15tQ0a=
zrZTsrV_r2Cb5dyEzekgc=2{|-#Y82(;cTM|NO^&r%B<wfq?<`q^~{fcns%tLSnW5U
zF9`Fr4c;oeLO2(CIBK(`<`ruswDiH}$AZw<(`LlVpwtISm{bs^8^l?#))M68|8(_A
zt9Y4>RD7jor7cZT>6a<XiZobVs_ItW)gr2K7%8e`N}58ZrzBl8<;d~xR`+^?&x%M2
zbP*%NmqgK_d&T3DBKLo)>cJnO-dOO#=PWIz*|Mbo?vyMYy{D`J|HrL}Zf};U#78dy
z$<e9E@rgo2#F8h`KP)<dB#XK(%2MF`6t#cP^GX?L8RKi^`H&VJ)8~b2Xe+s$%G)pJ
zyvfl~{1*5J+q56B(JU3MTf30oW;Hf~w-(k^Yn~rmTAc%e4wleND=vXR9nme1(g%Rl
zoX4Hb?5Z|*#^z7#-gBxseQZkw7GYkUJvl??vnG8vt>V(bVcq=E+4=gOdbE&VoS5`~
zV@$c=>It{TP=%Q4Cf0z(m7-^?!QVNF2~YJTH>xN1(^FsTBzDC#qUov{-AR`plEoqt
zo&5e`<<q`pL@dM8qHf-H6j`aWv&?Chu3KB#l$EiJWl`85!vKTo4#us?%+_G@gAsZ(
z$}DiAss+wo#X4Rwd``7^hy_49DR6hqa)@~!UCb6DvLPN>Mq=W4@%RJ91XW1){hTD5
zGLmn&S(J#zvAJ7A=B9$Is;aCJSw$bd`3Aa`A<I9vkM5NyK0uF<5Yh4x(U6=%7HLEp
zypKVDuZEmb*U?>NRVJDo$|zlyC)^TtQW@ns;SS(VZHDd39a)vUV3<}5kuHsD%L^C8
zFxg?~XKA;ZJmh<wplCN@*kN9|GX6oXaUU294&CP3-Xw7?+HUFhW6>+E0*l&~>zD|3
zevO6pSTTfCwkPMQs9)#;L>iBvJ`dgt1bo-FcYLSibS%iO>P#baJ1edBQdM^gm+1Bt
z1|eHq%*+Lm_k7cG*VaF#XGeKzYb>VlDu!UhP0PC(rC^KEOVX-#7}Ez9<{?=KxaY^D
z(@ntO(IO%8X*xm>6l|w`gCpwuXgT(Z{PbKgr&^YkbTCf&`<$fYG>UW6dA*tfpm+@f
zP<*O-*2GU^4c|<^%tv(%@41hK``NzlC%uyIJSxr=^RuE8O;tzO@zqpxXm`6n-}NsG
zIr;?yHr3KF*^-lB)~Xv^G{KVpW7lrnxwK&|GEcnq1baF6ow(y^R(Q`nr(VMf%kx`L
zvcgSAbFIRVDwEBp(fje?Hy&r5+mqM6-mspyot2+>=-00|AG(&6-_$%R<EuKX{Ki8M
zoWemPJIsG~EmnGSd21MJ@(t!^(}WV0A5RK>@K_Z?Ck-8y=0q4|Y{c?0*dW6);C_ng
zAcQ(*oCTYC@aTx;hc0lj@Z5zn%NLf<49-cSoVJjPth6jjaRp&Hk)WNL@`0av#V3fC
zm<;lhocC#sO-1I)B1q_Vm(QG;q3WKTl%%ALh!{`HvS?YNET`i?Wj%d)-Jlj1<@v(&
z+0p1j&YulqJ;r<&JRkLnb<DvLru!vfRF`_3Yhj|&NNQyUp;9f3bzaXuWf37Fb6xU?
zla(DOPwv<`J-xHOFP2CF67Y`7naavKgk5jFxIQ_5^3ju9woH}G<r|j^g%N+tP*;V!
z*u%0!H`uJm7`zMgcp_`%VSX|l0NZ0q2sa(0N5|}H{Q^B}fu8Yam*)z!Pb&267@fsf
zhUgljj62ATy3z;h3vgTWlOLovG<eNiv7T51JHT3^UOcKKBT$YcmA`<y`Tyy)yZqXv
zkxx9&biGTz92h%TY*&%THnm7Gy2!caJ%z{rkK+EhwdgtKw(9!2j=rnweqqp8G!uhG
zXz&+=98$@vRW+%qH%+Rf9}<W{)(xjA>2^^UQ{lw5-lUSls`|J}QmT4pk_EBBwO*wC
z=&OYp;dH2ruuh;{4cUopM20MfZ5FZ+PJt4)ed)&d-)CEK0jmm8rY9!vnWlfyNss6%
zE+&kWo;{t_>GZmck=B#N4V#r`{tvcFbdiPuVqEr9^q*mgv=he~l4F{v1t?JYRCV9H
zVLM;`KiiDwk3L7o=-0Au-4`lUauJ4U9unvs+$RjYLv3zN9y-I8n5~O=<yIA<L0QN)
zIL!Ymv*Nx!t1Fga#m$DQ&F*}7R#O`$Kr<+MHu-i}v1w1cnhz#z#Vy#AwOeYFHYzaV
z?BMG)tEj6^*GL;%o6W6s)^$|9Xw?ee&lL1b)X3+JXhtt&6fK)hXSFez^7Hf_7C2J2
z8x-N?`Xff~kfo6~So#6@Bl`svFkmEW4o%#JP{{n*`z{KNX|sr!3%9W&RiYOt7Y`I=
zI(O319jIST4Z<WIo{xh*`q8CcNyj(xIGw{CJe>jc(zG<qGNBYJ`f}%RH&q>+V|%c@
zSv=>(!NuPcm+3v|f+rM&7Yp}6rV?Z`P@S4orCC%9c_~7%n6`~-8+1bmwzWCiAC;jQ
zo(P>XIwtyJz^~6qUl~@79|E*-IIJZmcaK6wP$8L#Yqe`@T0Hafl^Mw}O&hoHpDp5u
zX&BPXMC|URxMa$9WV*MInvTQ?*}0UA$CFFDF!mzTsfFHj#FkCbTT0~hNm?KW7K-fx
zp(^8~p8s=hR9w-WWHg#|^uedoD|3>vcPg2j+N(%&E9uyOFYLrbakNzW^erh(Mm91F
zkz_JbFlkXyQ@5N>r_`uI@Xmsbv+3RQ3MTPb^I)-4iqV@_8r^gjzio`)?h`DRyC5vG
z*mGtCBzQxN-9m^R$hreyP~}4PEE+PBZm28q%8zW@XK6bo_us{`hUxiKTZ={;k9`!g
zSC8LxGuCu+;$?hMIk6RhQ2xfaZRg|;%|5m72M`nV1L(Q+m@Q#v!L<J?{^(<b%Aq&^
zi~_Bfj<fh>Cuna$wq30#L@p404C_x5l8~k2MT=pyZ+n!>#W5%<>mXj6;FAy0DZ1-1
z&%jVN=w{-LVc-*_>mX<FEWOCDi~^(om~POBXU4M;H{jH7dR<`ghwGxtFZ{X?7fCMs
zgex0iXl!<6gyCzNj3aqc*ut1TfOA1Wv}03v&$iUA>|*#itZNIMs8n7e3}88s+BE`9
zoA7IMG-kR2R8{m(smZ0m2UInt7YH`d%_b&VOjFY;ofZi(GL@OxWA8N`&#~hl&hN~B
zD8D2BVfs66Yg=@4f=D}&h|z6ZA1QuWc9zT({!b)jIC4~uw2c&Tg82?XyCkx6@LRE3
zEJ=UqSj~OEYR_8QyKE;8@h$?#5dCau+npLA>CwTPgE2y+hs(mZ=NMOw&k=OtLq}7y
zr65+jW2<2(%KQ^*OqS(-Q??Y-Y^P7WF1Ig{KV4Kyay9FqvVY4g)nK=pwC&6D%QDt9
z9gzh^F^o>Zbs|o-Dwova>3m`z;Ab;iBeXk^Kn@Ex2shE*>~Y~|g!c#^28$Pr#o`El
z4#3OT18&BHV*_%@XHC`-Vb~W{D{ri*HCyFiBN9t9*mwwU98~`&!p>YoAnZV5GfJbF
zc@1j`NMP;ZpUtTFC+i|`VI&VXMxycC*4FBy>caZAUsuno^e-{SlD1yluP8SV17xNf
z6lK+njJ48k#LSKke#IE9^m_5>!Wi6icXaYT6UQDM?R;ts`x(a1PqS~xqi?JWI47ZV
za}JH1#Q?b+qH2dGV2;9y%VbDTIM%Tew661pwqw}kk90d{<Zo3hC8;R477f$6a9NFW
ztD+<g^VYnPv-Pu%X$%I#QV~|sO>bSjWSMT;y}as4c39J7hdm1?LgKJAI%PQaa?E{I
zFa?M9VbDjEYY_PA<BC^qH-mCZDe+JYGLk7aqgY;dsn?1`Y}}l>)sz!R8+`p$sqds-
zHMpQ^C?T7-rqJi$`P0#s#rm&>d^S)QmqkHFg}&KS%|82Qsy(yMO+2gP=*T>eoT*zZ
z{sH9v|46kLO~_D5Zntn0@CT@jR&F)R^d^)!7RtMT=Nk}C0;!Utdtz)G<<0J*GN#8+
zRWg9yvPQ)cmQmSUK);kt?!4`FuS%gJebAPeK=9A=h!G5G!<+qYt@%ISc!#92c;<Cy
z_AS=)u9!4!NvZ8t(tfj=MW>T_ddmm(U1pDVA;@*Hk<POxP&nK^xU}KUv&CL+&x>BP
zr+V+)MBV?3*zPnTb0?Hy-L1{@{H!pZtT`4R#}Zk`ew#7uglO19<m)c`&$RRg`@6u<
z29Ur?{qWzgdWcNW5XN|>evgieyM+BiH1D=8L0(OHn5PqFB{L8Kh?i;)V}?f2Q{Y+w
z%oe%}H!7B+JUMq-3UhTs2TW)rD>osJ9^jSRVLohg=^u@lMYLZ96)l^iGO1=4Oi{rO
zHpO_H#R(~*S-_U8$s*2W<Jx3=ZPjuwtbvtpErL*lmf~`~&@NJ`t}g$m<t0p0lfI;x
zX2NU91Icha<3cpzT3}Q3HOsQJAWsjE>1mdh=;1LvO+KK9w-ihEW7)w+dwtjK)2&f~
zDvo_9nPz6@@Zp(^VKpL}p-Pf!Xpx2}NOY|G9r3kPMh2|VJwx9Ki#7wh;vC{}?hv-e
zLZ{eMY+n+H2Du|X_~ZdbR(xC{zo<&siug4X)pr~5xUsvA%$gsuu%!MXk#NrOYn8Zv
z3J1mm4;TSH<;N>E-^mT$<K8s!M`tH)vWc`;RwH?=-HB#vhYwS^@lFlrBeYr~j)}E9
zQm5)q>8jjl$g2KS{Z#4>jS39H6}9f{Y_|quIJ8}n_CHbD1H+d}BsM-$c~hd@u2Kw&
z=t9I5J7O#o8GO&lM5T`CM$mf(Z_1;sXw|m|?{Sj0opjLcw%=V7HexN@Dm*Cs>;~jH
zo}xGeL~nzAh{cg%hM^vgemssj#7w6P8^d5hU}Bpw^f(3`upKQ;4EGFSBHdjOC{14l
zK$-BJvOo#TVo|*i?QZSi6G#%X5@dvVGLh1vSf^sWq7h%0by1OE=)!qJBNdrYQCN|5
ziO3GjOie4uByJ3TFRUP%lzL_BRMJwFm}a@tX0%`$(|*i%;&IwyLm0gi5Bs7FiE6Yv
zky9eFM69cEnIws(x{9NMlS(!etP@33u&hZsOsFWJsYN;evpSYEnVyfx$-x(-&K4!A
zR}7M}QVHLV8an2-Z=px~o&vKVU1q<#ba^}p1YKA!udb(k^f!ROiID#*TnKH1LNM}8
z@$5ABlI7l}$7x)8I$mbo=EWag{B6dmG0l2U{(%6QJaf~4Ryiv&6|>Din1kJjBUlgB
zXkf&i!|KElTd~S^+=?SPQNH_xQBG9tgp4DlcHBE+O3Iv;)&_saHN$t&@|+@>N4$8u
z6v1-Bt|m*yiMz`Q8M$`cE?bIyq(YmvrVW0TD|x`B`c2w)J|HBR^c%+CEb%5!f?B&q
zg<kYm6LRq@IHG)|C{IYGTdLXKxkj&4y}5*5R(VPNuNCF5>o2KDWs*77J=gEvnI>f>
z7hJsf85ZZtbHKX589B6$EDX^}hB3sLnM)u8*yknSM6OkLp(Z>fP|}y09Nv!U;Gn4U
zB-(1NR9mW5TRTvQq{^NyJ;(>xQ{mYzbzVjZNu~0ZK_8qZ5z=1J+&~nG;s?X3t&6Jj
zcSMzaS6gV)xkjI-foxriJL=+ALL^oZAb}qij>`Qxzp}GQEF=;sZU!E<kdjplecOVf
z5|PMpBM~PS&db`HEi%8&FmOge7V&&DE=zHDx(P`dx{@DON@SGdf@yy}$Cz&YVWu&2
zXU)R90_EBZgMopoSY!ZlBqxs0FwlV5vzpa(^jSZVoimXpnX(jVmnKy=_Fc<$D$9*8
z>Z0B7DjD(^3rTz^9;s_q*D54sQ8E=JTNTmOPR_NC@4n@l?XknMzLb&uV!Xow3?bh4
zM`0d!iY`dFRFjz4JDjjixCrjWQ^-ckv!W@MU@|j7C#PiBL2D5gy?Zc&F}mj?7{C4t
z7=PxKih^R1Q~>x~p}%OAN&^P{lHv>(x*>F!7X_k|h*yRz#-L1xcHbk5HSRTZy^w&i
zMMr)PAG{PIa-i<uA8W5V6!~&5hnCOo{%C(Ww<>?YwfcpH=(Ypfq6_^G$bHNG!AfTh
zz3)}q_pkQ%?tEA3rq%w=y<I!ThTDF&T+a3{3cZ-!bAPQ<@AV+3>f-mQF8_J-MS7jN
z%lj=BF;j%E8ibT3#M}uyVGG?}SE2_8UuxLhhi<oWUbL{D#{9RXR{Yd6+ip*HxAl|p
zjecNPsE0PYYHbwz$J!A6DB4grq_-MY2Hc%7=KfH4sG#?_94lj_lc+7qex8?J3U#t7
zkJr5){2ETDzE<y0QROTcVjMJ^bj$O^u=9R?hR$FKkPP@DnCc-|XU%d~p~-OD=|wum
z{v&!T)f!SliJ`78*0?DdC_D)32e`e|Ul?{271}ND;=%~_(820)$;LBFvPM38T#|76
z6>Tg@$KzWh)-(s-p##*?47R1?)wP*KA4_tf*CG18KDGb_$HINHz?yGdC!JnFmT*5Y
z6Uv=@{5M%{0B36*UY`$ywq@ckv`3fNuJN27c3FOStwT6qJVgHK<ffzuUL;5%%5OLm
z&J?}m(!mnF<h?{kWD!TCsobxyVf`ad-*eB?_k5UHIM>SVUM$K}%XGITUEfPZOvjNe
z{BoTvPf=lTuUq~B8<|o59=6*k7GGgF7q1Qb;7Ka^UAx`~%i-Mh@kS0X2%zyHp?iay
zoPH=|$kci%(iq+R-HTN~c)p&^c1sbn&5V0(Ga}C7M52>O;K5*&iv0>RZUQi|zM=!1
zanen6P`AqVWq*Son6W#-%y(zZ{IoAQj^zL9_%M48*`E2NZa)dzJP8DwY0=?W(Vt`O
zVu(Y=dm&E4!7?nk>6*#<Z9s0^CGpZC7uYsv=kW>^auq7;qJO!W4z4SD6dPEID0jzD
zEKSt_5y$SKLb(<s68dCSKdxyvYZkJ!m4=?t=XAYsTpRqCEB9ZC7WQAc?@c#r+Ht))
zX%!1573lAYVUem5X?m!;m58LMSdMDP=~-a2hE8|S=#3REedm??54`|xK#{+H|CRgc
zz5U?gr>Ii*yHvwo1Y{V+=VAnt&N)OiW4j}j_<TGJV;<UJ0XAcv4vmeF#Ay~Wb8MK;
zN!OrxERwBH-V)1G$?V~b$O0WioJLeQmkU^DHd!ErMUQ>-dPWW_6Gb_(6~hZT@v?~G
z$OZS7C$|z2Ka^&7mU2;g8qvK+R#{-e#UFhP!CWTtwyPB#OttuBW4y=~lj4(?U>>&t
zyRI4jP#56KFAAw@ztHH@|7fk68uXzOb^EJ5_K%Mn>&Hw`Ij<~C(U#m21SZ!7!=ty^
zaiIsyiY!l@pN8d+*Sum2py;SFSWT_<`Drh7S2<wkDl2r6a8c;eMMSTmKUjkcS?fYY
zx8H^JtO!_ng{}*7(Z7x`#}c&nUVwKw^pD0CLdL-=58GHQE-}9ZlghwH)Mm+6CHP#!
zZKzyO+L(Au#W(Z{)&Wl1S|&a;e+|A5wo1EZ?=u5qpJMIABzL2ha<vAiw11lN+^Z4V
zY10>XG%k7`;$*dh8#NNou(%{<zqIXrMquufKc%U3Z#Sj?C%VJDdxGv6zm8=aAB}fn
z(IF-v_XAIWO=y@e7V{YvXsyEiUbOAC!wes)Y(thPn8<t&6wSPtV|h`aoKnH3hJK&j
zR?H@;N<2DvRKuF9{lV<vK)JhaN&5Vg$v7FjJ0(k^R5rX_S7#d}x@c-<(%crqr10RJ
zn+P+;25+$AB&B{yc4Jt%WB=hG->REs`_KU+PSDMPEQ_=wHxl`Rnf03~oJ?pqtI@mL
znuwai@wdzFZI+I{N5}3i%oO8q$8A(w)ls@z$iM`l`J}y`5J#jYd#z2T?D4cYbQ`<V
z_r>k0+@Jux-1L&DN_w5=z0Fu|Jas^~zndJU#nmugOzbja{`8lVMM$3888Ma7-G0E<
zb5l0Ul1BO{4bHWE^<#FtbbOQ~CyRq0zAmO)H=GZ%=#GSW;;*Ih7qjeD{19(wn2x|u
zP(bjkw8AekCj~iiNNeZwl=7j;XcmdLXGL))_uP+I>;x4RG~lGw&F8)VUytWjOZkKr
zncG?LQdQ;;@6@|%-KnLUgKD<MjIOp}s6@9+OMe9N{WK@YN3%0QH3ei3y?Uq7Xe=80
zxr{Lwai1;;r@~moAtxx6jyV763&3(2CMnm37H+m>z?l$fx%m?hF``KoWvVAcGk9x%
z6Mz>miR*GKChPP@sp8I1l<2&%$+jV7sw67Jn+M9&r#3*nM2)bhf)BP_rjPqhRo&N-
z<<35J^DTuDmZ!-4!NBIb5g|Ro5~CO>I&Z{PCe8-*`wbD3nYEif2@rBcKhJzB<r1lJ
zykrto+hHqqPcAPei6`6FJGSPkM2otS$l&coM<y{>CXp%~B~9y4c`E8^S*#_JIJG<J
z-Dk+E?ilad5sO?S;{Qt#!%zG-cjszu?v4m9DTEzBRbFovH3+qgC^jZmASYY(sE2WE
zn~^e9bJ0_s6KYzwwrq(zNhL%3K3x}vvECvbX8{ZHHsK!OA>nc14b1NqL2*A0K3^vI
z0U08r=&H6Fv^k4hYi`lOHZ=6id%@C(JOb!Q8;k2^AW&u}LNzURNigeh&Ww+o7<*WS
zE{Y0%1CooXR<1bStud=uosrQSWXS51Oq_winehf%erKiQTfiVlmowNB2NziQ>f~iP
za}Hz@t8$jZ7u2ySwUHu=mQ&g?dpv2X-roA|8OJi)^ed5VuybZ*MG-YJi%<|T(?t;O
zODQuFAT$f@It!N3DR%I|x7n;cHa!+-u#xQG1&($=F2jqtLFhr2$}mIc`Q}P61}|Rr
zN3r-+MHsV4Gb3BG6}nOU&`O8ApjmSnWGYAKd@0j^&s;V|WI|DV#ZoGh)5h}bMPYW?
z$+}eO$;8hU%wtM-vO-t-iZT%l`rXI&Z3B(yB1>31$du&E|H{KXrnb3367(s*p3`oK
zXQ(!n{iJC%-EC9Dllp}_3g|?yyE^FeOrQ|EgJCbYEPrZ&-VR9R3`o9Ae~Zlu)X^J*
zGJ41~-)wg1&qQ~c=HO{MFVN-xX41co*{47HH}XZpd#DKWfZR=Gq4A7kP7&6=)ZeIh
z>-^ax{LQmYVXp2|{eI1HWxqaGV9o~w(#YUHs|}U@Ej@Jg)el{b&b`-h7fz<Gh@?`H
zD^e#HT<5*(PPhbfy*<NK8ivmzD(DMTMx3M9w`UAr9+a?htsT%d=La>~;Z)lpeZnXW
z026TS2BG{kvXT6=VYKwT@o-c%?%vhw_V122qKlS!HJVCaSs{{g$k=ySu|zGNc9U-Y
z9mITv+p4%vKg{0cqLDLN2Hm+4zq{Y<?Yi4gqf64&JEzleO|<31`;0@1L?#ZUV}_f*
zI$!t?Zl&eE>l@s7g2TQRzWbq%edl_Qy8u1TCOAjHX$iVZWeG9fu4W57zT!~L+`_cR
z&q|p5xAQQ74j2f+`Trt{rX&)KF5tmudr0W@d%asj6kYasEmPcaqib<iXUjdY-NYv9
zi-TX`A~h<E^vd<vWSf0|8@*ia$jc>iFW0`sgRlLq*WPsH)~U2U;nFU6+l?fhi5>1t
zqqj8PJblv}-f+{>>b};t!r%{6*VQy*@55@LUUxhDxh?f#i1h+-Zs7Z2?-62h8el>V
zBYLRfO>BkOVuihENYJz8AuI>oOa^qsT?*a!uPr}eTdnehhV+THxIZIHF{e;&=F(IZ
zwX{lZ*7d8E6kuWm=m^^gq5T;uKUVhEN86aD9}UbH-Hhsgg<?F~DxbAtCXwUCGDuh+
z3Jw|SM530-8@i6QN+w41RHf><F}L{j;TDnDQf)30u9p?Va1EDlQuH+(FA5tuDj`1W
z`B*eqBMcj2GYn7UzWQ?Md8sl6&!`>R5Ibr(`}^l(!g%Z0Mrvnpf%9IVksO?02tp$B
ztPQV=vs<CUp8F2g%ULfncrxNe5{~vC(OQ0Cdp423$Qb0%|6ALY0LgWf=hyG-chB|a
z&Cbs3&apeQD`~Hpof%!b8m&%S!d}agEXlUKlEIf8u{O4&*aXHl*noxYfB^$0ECC8b
zL68$doRHwfCWepz3dLb6u4Ky<AdpnqR4_>edz9|K-<x?eyE=?X)oxF}yZgQF|LXt$
zeonPx`t&ibovZ#6oXU~gL!b@Zi;l4DV6{BXa||gRtvPsClS3{x79a)}El77C`mw_K
z`Jy%x{v9GCW@j5YhfN?Nr%9FIy8&6Q_1<bM5pDp>g{8zDtd?9KO^2d(ArWope05)u
zL`PB-@h6fY{e-Tx#0g8L*g8I{4&do*?RbxmNQx{aB=K7!`6CrskzSxei2oj_+&bPN
zvoe%V(xP*9q9tl#UZjF1n(J(;Cpcn35QyNo{-XWIJ6aXAqu7KKjQT4Wo-+ePun{V1
z^WGkwg15tppiI|X(Qg>%`U^>NiN?s+Mvg~&Ph7`1-gUi7^!P~4)V69eADvZ^Oipnn
zaxxtLZ+f!QdmX#Obtii1$#>C{)!8VEfjRT5Ge6=5^cgNk^m#TTVC8~AXcQP8aMe?o
zJrE*STn16#5&!1~<=k|NmxP_^T2E$sp&Uw?k%BW^+?jPodv>cKrN7w>Ao4Nc=@ny3
zq~A_W=aTW^sA8*={p*s6$@Drw=Hp{YJ3G~@Uk=prEeu%Q19d_HY(?@_+hp^hqgR*a
z7v@W7@%Be*6ra8Jh`;{L#(@rqeq(?b!VUV-m0-N>LQA744Ty!4cVjd7I5ojc<23VR
zA=z9=7F4A-nXvoc_QALH+lk~f^z+?;lGy`N4Z@bGiG%Rwg~>!|W~P*wWYD(5P`a(Y
zW=LO`$ULl*7CW9r3IsKZlIO%IjhZH^FN@$PwM<d|22mY^G@ZO?sc*9HN6|5}UpLg=
zkRV}A>c=6C$X_Vd8*<E|gcV^x58rz^IWcPW>-NQJOtg1n{C;vomSiLwN(SR^#!@I9
zdluu2Zqx7r8H*)VaDw^UqZEaB5TY|`ZJ0Ca+1S12xYVrAREEK_GF+Jn1y&vF^$kbj
zdl;79p7@cEcIKaAadLM9&(Dx|vzu_W+qedIlH&$^O^fIY<1M6a8dEw^0yi`o;zbU)
zErilej|*7|cxSZ`N5NC8n<KOdhI^K4cnl8r<D)Z>aeii06k@Al!qefN5Opl1Sr#cu
zQ^t%MUpIz~*57zimXmT!_I_rA#~R?8e_&=5MN_FL8l6Fkg0#qn9+Y&5Y&h>{V2qkS
zRwm(!lTh9lxM5QMRp5w+r$c0@r-|OMncKzf1N?X@w4zot9HKKqp%a0vzqbBp^eug{
zHAoET{Z%Cv#2oJz`WUPnLO&N(La5Z{f|j$gW0r>Iv}`InB&w!lxS66XCj2tC!oKEP
z^(Y@c9WF=pkGE>*vyx?p6f3KdyINyeD@X3CTGow{sY!+?7c*|cFQY5$ds2^<$(?w(
zr&sgVwx2=^WZpRx1q!uk1#@x%T~sJ$6^eApR&Sb1Knc*^6MNC;uSMLoVmK5=Y-J>c
zF%6)=xcO(_`HrINf%qDlF=?2};5Djc(7_0xo#hT~WH6ld(!dF%CUwiQp6B4d;~<AZ
znI=ctLw#AB4Z65b2oy&N)Qd55%8H;R+`+F-HBV7D*HrU)YKfg|(<j{t+qAvj+_t$M
zGP}zw<<s*#Aw4^fQ)bSLR4;_x*-{mOU6+}e=fIiiG>bi2V0a%4<^y>qVwyG}S!kYS
zj)@^~QM{jxZBlq^yUb^Bg3z0?+e%tVL{t}|UzB3L0#55yhJ(bg_+_-~*kE+mO%LsM
zvspJiF_2Eg5_;ucCoNYG?iv{COF1!Ka4DLtW{7`P%<ZTTXGgQK{OZ!k8Y@wV&ZNWf
zb(iE^V|AJ*{GXg@4%Awh$gsW;_7H8W92cdzGO5*YlrIv&gDx#o*I#gkKT81a#}9qv
zsE%YEuM_t?bhS;y&GLc!b_vaQ3cReLTY-sgf$}a7-$%XX!w0dg^P#IBoaNUkhI|XU
z_?`Q2L_|Q~cLV=?CzN-!^pBv=bU$4kcZICL7)*_(G-^4%k`GA*Ii=P;?rO{~P;pSh
zL8<7kqp58Q*4F`*UZ-Q_5Rpp$S!qGEo=_G0R+~^gbb0d&(PZ)&>@fQ7;KP#i={AL@
zzFsS}ukF+Qn%b8^4K_WmypYy~&}{P*nFwDyck9}@`MyT<w+vuCbs-tJRX-6S750E9
z7tf(zC|-CW+Em?@OEkZf$nC0LQ@LrEq3+WX+CJ5IoQQKFD&Mi6p|P2<27gI4k;^5j
zm+;rTc~|AQ8WA$0m=PlC@yf>n=SuObLp1m!<YC6M_^c5!V8Q>d?RFX9hfcWd7VoWB
zqURsAojJ!o$zF`zv6XRbbk$?F122jE5?$p}fz6g5BIVh>6t<(wGTI6J3L2>wIY?6h
zcSOH+qfa5`t1>yfVHI6|*<<PRs-depDnKywDuhj62TP;P2Lc<O>GK2GQm+;UCI8J;
zEo`fESXoD-vmsdfc34pTNTAN<x}UQ%3OTp>ms3S4?@+v|vO?X$$v;|X8xzo6qp=8n
zo1~<0h2CzOLz(St&~fH0%ME&|=gs~Q_i^rv+*90lxqsze<j#PVW{fc1OIzO40j%|N
zZnvG@SB~yH@Ab9wY%AwE-VOR6eT~nT&fWg=w(mUetNc=H)xEJo?F@I$!|mEi#li~v
z>KAyw=1LczyJ%m$bfFh5p8N3Jif67|Z3Z5S8W;T7#q&LFZlxP|eorgRop&soA?5sQ
z9O36nD-m7!`g}I%4ALG}?JvG`f#asDXg=(5r_2Sv)wAR-&UEi?LL@$VnDIS^k56SB
zAN`G}$zu$$9dLR)2)2I2pqk<~s<zC;N2U&8q~p8H!OcZ%AS1uZ-*MSS*xt(InYy>R
zYG~Vt6g=KKf58`IB+vf)G#3GRYd7_g1h*8=jh#WL=DhfRzWs%3;MGOljlAYDd<X^)
zQSd;NZ4|9~e2Kw!D{bc&+P~Y6IDEpXL^Um1aT2_9M6^!oA(|lX7Zjv@ToG)%6Wct#
za!p^~nm+U)tcX{MCgu~<GDcyf@0KwiFIureWpJ<;<9YAb)_-zsd^#49qPiZHBC+ZC
zwbEQje-BN`M}G8>g*6RZkMz;o?$@OUBrIL7NXJwxmC+m@wQ0WUp%gzJxtUdt84*y?
zQA=*7S~^Q@!{>8c1(I|F&xM^tU56-7^h+BhkfKS8&6gxqx`7u$@;I+<bZ;n4U|kaT
z%OQckfgC}hMM+c0x%Rv$>3E`agS%1Xy>%8g2gjCkNHhs+zBK%86ct(ONwSsqqC{)K
zyxVA2-7W}<)Zf3^DoChL)OfVn_}mFY=t{W#ZNzJ0ACd~z=Kg+35rplkEf^<0XS8ew
z4aiZG;)b|M$Wn8FW*lxI8HV!^(NGTR_0m~%{9s+_>RjBD>7`1M$TtoPXKySLUcXcA
zQ^_AuR^d1J_jp@Gcmtaa+*~752b>(DB%ykp+~#^X^&3#$5-7*XNwD~UsKX4*k#En@
z%QL>r{}k9wqAVBYU^msPxr*eQZ;PlchE=+SguGI$<sCHJCRDv!R8*0L7#WD-tAFlQ
z-a-h6&!p~{*pj&;KwV}hQ>(~1QjaX4Z+Ml1YdlXIa>gT*b7>YI&c=_!RS5mw1GL-s
zvfhAv2lH^v2d(X(;5PEteq7HjXpF+zGP4ky<E~OJp3*U%B^tpj#yX4hB(2t`)_UFZ
zYW+x6dJI9@A&PnrA(a~-6VPNPG#69mBxz2GA@FE#o+i94VrkpG&bF%mK>>ht)6`W(
z;1_iLP2(%|FACHLV!u|S7Qb*`Pya&8`nU92`iC-p2b-sX8I0F2xPw5WU-fLTJ|Er(
zz3j+WqjYU|TMH{)$FnPrf|pv{wB8z;jkb_R{}<WjvNwWOj!_73%s{4(?hpR|)5pOT
zN5X~nu{rnp`ncHr(S5vzCG-S(9LDR#XP=K!H*Klp+hdX(5*S})c-^&X4N{)^>fG}A
zh(ayOKy5*MNYu!yuMSPGS|gjhCYgphuv(L{{UO5$8OtVQy`zVskRkPX^oROHQ7=zN
zX$E^+lCU^ci1c4&&|93PuTi(-Q!qiHv`jyFEqy)K?&LV@HX42{eMKJ)d?MQKX5+W$
ztlY{6!g395CEEE_ghRAPq#N@vEGR@;(E)VayyE>9S0q2ojfc=5Y1!fzT?~Xzx+_x>
zRL$l~+42x|(i>V!%O7lIw8%I>{wXcm%Bv<#Gqq{dMgJg4r^(=$m!uKNlxmNPrnCr>
z^QwM9j78ME#S59$-yFAM)*LPF`616MsxdHNs0z>jP}XGg-fe$RE<G(t^W<kllGZ*d
zNq}vfA+kZ8i-Y|xX!&KZ@nt}I6Fp0vzaoZSqW0b90x3`IwX}K7+S@z{Xd-A1&`407
z9H4(2BV)Eb7TLI$VNEZ<Nv%9G4bFs|>2i)iZIl@N90mFlbE85lov2(cO$+oG`o)fC
zcN8~7qV|v-jcoX`f&^=F=C*g;HZy6_WmZ|@aXLF$+f}T-aZ@cUO0x7J*ZsL=7}nQC
zmB><kTPv$qSGM*M8A(w^UWtYsTZ<<8O;Pk>uxPvP2DD#p(Crh-*&KL<luHt<5ada_
zKw?vBp8Obhk#saWvTkGH)qjawmSi7VUqSKVskD`fr6&ef_w^jD*2R!4q@zzMvO6ez
zY+owdZ#YhJ`~I+ySu<czU)hxF?p@7qj%LMS)F1Egt5J#M=5ky+=(#gjENUE{sm~lf
zb&CDWH5xOA52HU>%#fd%%p$Yh;WOVv|KsI>rsI8C9%#O6`v?1{ruI)UXQoRbyx<wI
zBB7xvdSnZO3g=lSXfPCc_TVMY=0#Up*HbH@Z@FsGeptWEx4aO@UVmJ5qXD?BZS-MS
zPXuMLd1~$K+6)-X=VlH!Zw5oyd^>N)B3R5{f;GkKfha)IRWPp~o>`a&1K9Ulmi4!Q
zC4SNKQSt2ld5GO;dsdTX(6x^setV_nI&rt?XIX78{CQbb5p5lNglUGRc29+_rmg>d
zH<!s|6F*aQT{#Y|J5H+)E*_o%4|p0Q1hg=Q#|2>=$L5fR`>=)#2<1*0-lpA(bE5Mo
zNm@Jt5hpY^$^Jkb5sPOEzU@IzvZw16tkPQ0i~E(b_nYY+CM^EwPvz;o({hQ{dBTI6
z6nx6Qg%k$9nUvu-(=3iOd)aqk+B4fdqteui#77%>Y4^<-H;mqc7#~DK4NNZH`Xt6r
z(tn^7o0-<j{4;25q)H@tIy19ExkMd?QOn;0wSi7tmd`xPVw7sAafYkE*C|@X*zsn)
z<qbmAh9;>`ST=AH;69eK0Bcw@>kIiB$Rq=b+9v^5Q?0jsizu#dp6F3+iKlZ}wIkxi
z*D$i3nmBcRQJ97ffxVQ#f$mTTL8soXq60W|e=67fG~HDjGuMO{D8?5eqNfZA9!{Ll
z%@_)4a_~A?BY$Mq0)>ToV@#7t7Yn*Ask%bfRTPo*>Hu!XhBaVq=_q#x_aNyP4Itnt
zQ{xHy;weo=uIw$x16l58$wgXP;W_Im<j9I+3weu7?S53OPBKhFIY#bX+JvMD@`fh5
zo_WmSG4D)>;)Gv88wzIMvzjaaA$G$tBSF*Chj3SE%E&GtgiRBp6FlE%@FH*Y`4v=e
z-_EZfZ$lLMcCGnLC~e@+>t@&uXMRa%@uOr|(qA$>AN95&&Cn^tBUwk(k3@>aVj_Aw
zFCq3sB(X=&2Jh_Es0>15t+He+Q7o{%+()@jQoI&_O~0rxbB^O>nP5mrG@T~w=jnbT
zqd@9R|2%)2XWP7m(r7$4$fOzi{bIgovuvZtaG4+>p_eQhw5`_3t$g%;=m{?Z?frSk
z5eTt0kgaO?g`Pp14C;-%txB4Vidg2y1RJX+T7zYj;}u=TCdysBW)qJ-t6IFJEnxh1
zs1O2h4OC8N({i{kT*}`ph?=D-W8d(PZv#rwd<>qu1e81?%@A^kD7fyp@I7lfeT!yV
zTIs7Q*{Nu<DBelNg8U&B&Jl(8kS*yLQNP*d&91$FELqaAz-v~h<0oQ;BH4tH9NcDP
z5ov|RhrQz{1aztS-auYFW@lJS<2nXC00^63(Y8<n{10!nu3YlLNDIZmGGe}m7UTx>
zcn!KfDN)I$H;Z<4n;UL-RCDj{<N?*(Z>qI<8absL6(h|AMsHK~h^a+z+H}KL-a}}@
zD+!6HN@7pnnQkM*m5#bCb{SS{<oZQfbM3!wKBrkYMC8&vpj!EUMNfG?C^S-akkDZw
zFNe!44Yr?G$gN1hJ`9$r%1~L4Jd5M`Ux-r}Lq32;VkhCBHQ@Yp6c2U?Jvc`QG;^$K
zzIeVDBZ}{XcPOIz+Q%t52dATle&ly@=?n+Jy{dKc>@VkONw|Z&LRk|7Hnm``(#yDm
z?YS#^Q>4&hpq*am{{CW|xj8v`#sq+I<STvxTr!IbKI^>|gt4PgmY{qv;2_TSlm*g_
z48w#hB<oA{`Po$?*CwsX*J0v34ClTL%I#1dg7OY1t59x`6?zYHcCwIpV*S3^`N@IU
zhX;N8b9)^4zI1P(n*X4?(wAlWkPG=nirz;RyL|G+&TiMFJkc}QVf5^mx<72uEDnWO
zmt@6$Oo^Jdif)3wv-CL4CBN$q+7vU<YS?@C1Kr=XPqkIrG0W<`Nmb3L@eb(yB~XU_
z&W{fL8Z*CZ@ysi&*t7(fp)2&^YK^9vEzm(dku5UwI-$${7jxMsRlHBD(C=Ky5}oDw
zg)KZMG+%rne*N?e>5Jam`!swXP~JbFJpdLCBo9R2hqw^Jmi38eo|r<ij6PM{HaQU5
zu_p_k<CFA5k$*9gTpZ`R^OdaO-rAPF{qaWIN<|KqojzL`MeUJRWC9bY_y8s%2k?=p
z&jE!v1FwEBw;dpoK+;Br>&GNvN(QKHq>Nak2%ErYio$uw8S-hUx6AzO#qbgDr(HGT
zA<8XG3ELFTe8|SscS*HFapT;FPs0-~g7T28P@$-vEYzP!Ts}aDt@Eh!nr^r3u&;-K
zzcR(;fan3pTCET|)$$NlVAFH@4d?>ClM6(PF*GzHnDQG$goL;x%TkD$zC)6vNWSwg
zORV`UEZ2|I#J_c#>-YQM_e(FdzDK9`_lUxaMBo3{%dm-IvHlmTLNy*Q_hgG!l?iX!
zLp>GqtjT#l$7x5C**u2a-EBy>Wj<IH1`z-XXx>4gQ)V<ywe5%~eP8R<4uGh?K@#P6
z_eMOk9s0B+_e7dMjP%ITAU5$&jqv#5LL+K^Dk_L@@mEy!k|J1wCdrnFok7p$w;)Se
zq^BpMNirb8n+p#=?DM2A^UODPBX^Q}gnNwpM~<W3F}_!aKo?ak9x`fAg0mh50i9ws
z(bT}+)RbdYu-3@FOU7gYmd5DYDYRp2sXYhGlhu}xOWlPTnoqoy?vY~i6uNwz=){w0
z$VoBo1^#*ImTFZXiy%|?(MV2oKu_x61ons-6GbWF;EiLKh}MQQGI(9ov2H5qVZ)B4
zY;4dqAOl-3{}z)caQJ<JOa*9-c*)pCvmc9M;0bmrW*ft4#Uzgxbs|QmH=toff$7`a
zYZKz83$|Gswe9l#BYZ@(MNN?SLaG<1hAfrHNvc(Z=Y}2jTqpb*r~DfObG_fTM{A}n
z#&nd5#r*rHac`=?OM*t89^pss_x#gX%x#{`-yPibZ7c)&`CBSl(CSBKcfhMQ-I3t9
zMoAl?nbWAOFcY7Lncgz>dH9+o_fD9=b*lt605eJmAH~H$JJCrvl1UcGUV5x#Sv!#^
z=P4lMPC-)|iYDxAS3Q)2XA0&xTTmkmE?G!~Xr_gS;n4O%k{kj1$K1GCFljo4P~v`3
z6SoSAG%z43!q(tMTaUdP^7m~a`ragEy=_Y-GiuUkj7n`qp{-c(Xh6$nDZ`^}Gm<(Z
zYiQ#7)e;_}LHikgeK!mL>L3mApHZb7Z|$3z>05`^@I)*6&Fz>PD?d+87iEFxZ~j&{
z$A14k<UB0mCyS+`7qfvHM0bi28RRn31G=;w^PR?NyU9m#iAuv$uQQL9wcsm*?sPTZ
zSetJd)|_(5{m;Z8?+`U)v3Jnn2NRF+qQnnjIVs~I31g{MeSifXtlrXquel`|MVVY;
zNf5}jg`^-XC30Wr<t35#E|Yp?Wk|+Y9#URr5e%!D#1`c`?0!)qVXbTTOAd4^3fSk=
zH5rnYoTL4P<YKZwo4>m!KPhO!q!x<*>}(CDHZ^GP87|k8+9rzId&xvp(M(q}MJ{ya
zDfE(O=ew0=NA&H9;1fursB*<o!B-{w(eGHY$azouF{4<#8Fum`<uMn>@Txb|i(zw7
zC93H0*CktA$?nYo!MR;Znw6uwH;-jhQ4DXn=AIp9QkoUTS6-id;l(|)@$actMdSG{
zYT+ja{hnQqT>*l!Km<--hW4Rus@|{UyAhJjcDk^&Lk(Ly2%tJcYh}VfG&8atXc5z=
z-wQJ68IHkGkOFb!61Z+?tzFO|&y^l`B9>?jj{)Vm6Et8Eq|yIkNGu?SnrFU>o`Cqf
zecT*(qaW{Ag!F^86>>a-`vr@%<?~f?Qe`sV#*Agw2<m+wqZ5~>b|vt(hA{b30RmTZ
zQwTk1#ol_w{y*UP@!8RUQ<1wNk|1N)6~*3XCWM5gX=~Tw9*hj4Fh`<cUX#%t_1;u!
zZEfAQq-i4L%p|Y46QRbwu`AZ&Tzh#bCnoJ4QFO`8l7AD+L__KD)JBm^Ygf0zv7X*y
z4??nr<2ZRNo!NBLrl+H~IkDSVjQsx+z3D#kP9*YH*3*?Wn)Dm3s5jN9sg}-&eAX>H
zZlx?$T;J6;Ty`P{E{;ZYe*H4in%C7Z`e0byuSKHGr-v&IB5T*9CJmaaqpe$Wq2@0~
zy2)y9$g&!tTxR&%lMB72i&%Kwf@gC*0$3<<Zac@-$}S8=mSd?1u=F*Wee7KASG*Xs
zqFbR?Rcp?jFZ^-yh!Mf$g<4jM$kD3@-1}1KIa#3b_u{Mn<W+Ji=}IH4PW23o$jYiz
zYL#ic+amJ?D|JG*{*Fq&<nn_<zt_8rQ=~$+eZ$Zp8D+EL{4AB3@A3L`H^f9vaoZ@z
zt4T5grho|LX{oYeUr1M|5zX}jA&98&iF9>@Hi{7;tTlf|_!1IK0rUKFepgNAQ7V-w
zMacYFoy~eaE_V3k{;Fz{3k6;+7(Hf8JKWumRU_#)O<z<jPtowMZ8unV`ME$nyyvfZ
z`Lejdl9$p4L{C_z@`PDP*5rw^{u*t8aT4I()wVgeOQ`jbN91_9I}i^28xh~bM!b;j
zwaKrJ?cN=V88Vd}WLr1FWIJ7mlV1~eoD)iff@d_FKy~f_1^s!&#74*AIN5_urSlF3
z?s|$I4(lDKtO1I&*F&1)0^farI|9CPL~FOa>=Z3YzvI<V2ip}#!Z}`2OZF!;syObM
zI&QVim&5T^&rCh6wi?a%b&r$7II+T8Vm-7I7XL0H>tf}3r2MU%iqgA!Jy*lJ>0S8K
z?h&*TpXD`?lP$-*kw>wV5Xg6YDR%|;8SabRUwRRP-iV65e&wj_dmR>kS9fHuJm0No
zu_dbCn(hA)%+EKa<1s@vBC-*y7!jjFHX>v@7Egy%!%#zT*bD~_ht2lk=inYUf&el1
z`XmGvK>z5<4d`fJumN4|bKoXrPuk%A4+V{Es{jCaoMT{QU|{rS;%QHm*No@4`O3h}
z!~g=f=5=X6Y5o6i{%>KL%6JyY<zQf90O|k$Lre^z0001ZoMT{QU|>A({{RC6Q^Wr^
zKyoSrPy`t;KLr4hOa^awoP}4*Z5uHVo!!8&FGhs;5COStDJ;dul)+MRP8C~1N>Bp<
zgdk3A*%Cu?es8!kB4EJfayh>@Z%EA~zwbmdmDict*q<+RqL0(6^C;6}nBUHs_I2FV
zJ#BtBr}Ea<lC0~#Ro2^clg!@)JDKNw4ffUfrz!dOqu6(=*;O5P-Cy39g3dMCZtK%p
zo~xZNO~lu0!g^iDO_Nct=zg$0sa!PXxsT<gN^u`b5gn{A(+7>kM$1#htM2VMWn3@k
zCYTG$NfK<y^P@RJnT}{nuoP?@qw;hO2Z-einEU>=H_>eqTIn+>c8Ts)LalkOdY&4V
z17<B3Cmx3ya@luDtgqJIzKhHikN)kLXUT`k?76<<cp46#C#~B$?pthCc0pef{)o>t
zk45bS(Rdk)JK`9|x?_FEAzqDhsdbRLFAv5w!MxhNG~s&SXP%4yL^p~}l`mI0oIP)y
z|JgBc4nzHLZE}t0@}}SXPsH9W<Y`y;E`jsD=G+Hdtwth;eec5cIzv5#Z_-9zQO-__
z_^RV!z+2Z2GA@x1Sg-gF_|p5O>05pOm0XeGn0#L4JZmn&Ug)3QuX56T)(=*<+x4_}
zYAcr~=UqEP7}wt0%pa&z!KL^AK{l9#cYHog-<$(7BEN1u?uHLb)qQWV>a+Srz29v5
zJLXt9Kehgy`q{|&euVzi>MNTcyV!FrhLdvI`U!c@F+S*A@jqJJp)QrT_73-{kE%oc
z(OMb(OaAS+*LiI<RBKu6X7DRZ&TB5*&wfTx5dQWeHFN3bqW3}8e*~SH-=+2v?Dd1-
zdw*tMHhTzt*{-?$$j__i9ohsOIFBthh$BJ%!M{x$RPP}x;AiX3?TH{3%XgKpjgxqv
zWBXQDN8odI9LIYX+rj?rw!$4j^{Su49P2Ugvz>9qgYt^J*vRw1nImumWu<tAFA?i&
z`Zi~~`q%iS>yVe&pR7L1lm}g{R>Pg4;-dTZwNGLmbKFz;@CP{b)@r|Eb#DE)%1^9e
zJ8z)I%+IktFph)z&UF>|PIB(7@m;_%*4Oy|!FwQ;-y6PR9cAEC9=OE%UM;2{^*QK}
z`vlaqpF6c*DeeckXQz5^$a2=xwnlBQ+UWHly*-y-h?AX1-CyZ@sY?kx2lJGmZqkr9
z^?%G0xi6FP-~KCTzqsJto_&y>D){!ZQ29gc{?xb~{(qd=hw@i*D)=n2{sQ;MlgD6u
zF?)C)F&h|P$OUr)>T2;??R%FokMH&0;XjDw$iI2#-itZU%*|Qv_~r{>lf)+!f;%ME
zPt3<oe7f)0BhGas`Umt>m!|-DoMqR0m{;Q#2k^D`DT-7oluD^|Ar*}pRFY_<%Sbd`
zbTctsbvIp27gR!O%Ag2??m`G1k|HFfs0g7F^5_skhx76Gnde#0{_Xc&Yke>4{q6mm
zi2wWRAXY~tl|^5%E+VZI@vq#766GUG&WJeSpV%33VwN}@QEGTZY5Ap(M4YrS;^gUK
zUqqRO5vRyGWkp2U?1*wr#PNvoIbuu1sa?gKhzccy^@<ZCD#@>;?zEZ$_GyPAPKS3!
zDIvEqE|uj~X&Z5-wKLa7RLzU12EW?oi0b03qKF#SYOIf_nIYuYr0HxqXWOq;M%b^V
ze=VGA<5n9+?Y$9oS_u5>;D1g-kuP>f)Ky!zP|#b?e!Zg+^{qFM(*Umq?$4#?Tzt-}
zCiu{Bh@kU)`p#by(FpfO+aem%*qA3xG9xaqc0obJg=}xi-=;Wa$j`txgC`fsZH8|%
z*v-^7$1f9?Ogt{8;ZoNYqlNsIxU}R~EBY_v&t-gUU0<lZT<^;lN3=16Hn?3uZ`;-a
z?<;Y+%B-(4({}LM;gBUS3;xx-Yp-8>TCd^LHOCwg^&R1L;(sUDo$2iiD;u|L`m=d@
zE#JD}a2@?!X}`XgP<I2IZuE4+she4JgOLL($9j&u?s|6TOLy9O;M`+&L{IlUdECp|
zjWph<XK!bykF(mhj<DBHZa=yGalHxWT-dqhKft*ifX~gYH}mQiyz=;)M}Ho@192ay
z??8G6Idg;558~lqn1kUAQ8!fYq0Z4z+J?CflXEMr!}&BqjKqJW+)*@);_+y;WAqvW
zZ>-slb-m46zFFt{JdVfX&2YSa6YNjm=|nS_WPQ?-h{-&djMHR2Z`ZHD3=3#1a3-g~
zn&O;JwKi4lRQ;yWG##($a;Nk24(IR=dhYbSywm+%e4Sy|Gt6)%-)5QFEZ*Pke9ku0
zd(_^`hx_<)AFt-<f4^RHahR)Sp4xfNNg;lPdd*iq-&tH>jthABfcqlaiu8Pt2M^No
zuzm}9w8*>`(ewx|kLdNN87&r%ng8RweO%us)D+|Vq?#x7eTtr^ad}$)622@o%Vl^j
z!)v*jFE5T*fy+ucEA?2V_bT2zWA3YIT21qF>Ylgvy!AC^^n&^q@qEc#UV^`tk8AOK
zS?$X-ze2~W)?USR9lUig);R~Snf+__U#EM$9&hks1Kk_U=1sB5_jZ%Lw`hHf=Wm<q
z+ca#(;~l!*mH!^h_h4;tZr<m|`|`J%@m4q=&@DZ-;k(^g-fr(hbNvwJ4)r^1?$mpy
zdF-_Ik-U$6mv-U0%X4U#`R`G`ho(>T{=}L3)I2}s)m}b+X74i^KZo@>JzwCp&;CAK
zzl8TCkH50^HH@$A?|0qryL<re127L*I|%O}U%ruli06lJ`WCnE<bLn|d-sRM54im3
z{)n^sAG7!g#?QWIN8SJ8-2KY8U-9}4m*4hB9P>Q*9mhZL{==O9bS94D_7@NT((CV|
zkwjZDQ5=gT&5EQ%hL|2nN!OAqA~|7nBq!DsOCl-NM68LVbbWC=l9Luja&kkFFOEb~
z#(tUMVy&=$ikh-&%j#ctXC&q1mMaiGm)E2G`bbWNbE^CbcvP@n(Y0ccI2=i(9AWRY
z83NbSH%4+sS0S%*3sD?Nl}eGESw<8JHC16%g<Z|Hy1nY_A~~y0BsKJ?SuK*Y^{xfG
z*1kw;4~e8sYq39)bKun797#QS^<3-IRA0{qm4&|N>2cn+NE*`65dQgjf<KMad*>vL
zX=&nmfj$?)ZYs~aCdr^7L;q&w1#g<;)Lj2ezGl*NF`P?Ei7k;_D!&CyE#<YMsTKTI
za=d4f)*XaCZSZNcI+80gg;})Cj^s*Qt|}q)Y{%~`xmkN7xtjm&`wFw|z}Jqv?#RPV
z=G$p^B%S4T)-&7HJ0-ameiwSWz`G89S6E#aM{>Qn-Y`3oZanCwJ_o<<^mW(2hrJ$p
z_0*#m9o`{HZ?%1R?cI^|<yAlDsy|<EqTRbA$#wPaNCxOL!2ZqVa0@K&jU<n!192EQ
zCz3(54dTmS7=zsp=EV>iho~6}Zy20myu6jx;j|6s$B0}((@4BW(mhJP_eJ7;k&HPM
z$yk2e=5szj^6?&r&p3JG)s5GG0$vmOJ_+_@KhGxPJ=uA>o#zGk6`0QydZy|zm0#1~
zPIJA3e|N&a3)dO+&EWA&`ey1q%UPSP|7?Bk5%<z~AH8#Ubib>2K{A(DbNN0Gze4MU
zaOU%O0e%lS^F{nFqWeL-AL7qLe0f;z!#FSWc@g|aTpz_@vHiv7^cc)1oVzD*DaNUo
zu3~5TDQi#Dw?yxydM|ZumpO;aabJPQ3O=ng?^QHEqh__f&*Ji&c%IfZ&h!iXe~}L_
z!heaLwfev8{uTbciu*dB|E<?+@?OK`b>I8-?$@h-L(dKLY~cT!_TS{uM)@1faT86O
z%<nDd=xu9n)3ce!oAG`J-*@4>i`RSRvW0hB;Jt5sEACtM`GD3Bc)X2<?euSV{gA&q
zoXs8TcIx+$GxM=C@v*t=(r35l!5;g2^w|UZ6WTwuzZZwkJZC<`|8tzb(0d<mzcTx;
zc=om2{k<YN;QSuM^&qTo%;=D_`mOtK<$UM*o!J~#_k(AH=XdfWKYudEpK1A-uA|P$
zFTDAMAHSKyF}#0=^}Bw5dR`s3cAPi=h4YvAdv>Ie9cfZO(zGzr5-lPvnHA{?Ya>0;
zdZ{{*mOdKkN!ubVlNo8*CSqZv<>Z&!9clR)k)B#c9Er5T-bgF%_b-S(r)7x4k)B=@
z=^6U@Um&ewt%{s8S43L1wOA8rHM!M`BR#9KuvcSrq%~ps{h!uSQwzV^>gtpiizBV;
zzTT2Z>*LcPSHNf}x1k>A&xy2Ahe#Xa*w}uP&5>S^Bj8=Au4!MfKGF<%7nKr+B5hVP
z(&qGJ=0|$*mPjv|9_gj@wD>0qB5i5C6)!GR(|TQ`ZScNgU!+&Ijr6K&k+y@CrB~Lm
zNZaQ{dQC&2ZwGuj@~_j*NIUZ&yH}*wu8y>ep4Z`fozGoqzn+gb@Uff7!K1tN9`yE<
z*9-SvxcAnxH~zh8?W3j-ulvF6r>4J|^ym3abm#IYSN;GV`VF1lf@>a*dBY<eh~q$Y
zo`LCLdOZ8mp?n-BhRYeDegw`V=^DlNQSv<N(lP%84P(t@EPc1(avO|%GaXk#;5ts<
z@wiWbF%joU@+R?qGVgBZqu<48f&K;fPoZNf49~lCn$OdmEzh~sGcKJ8cb2_b&c)rX
zv+<v8{~q}F;(Q;BIr8qOXD&ZI-_m(JD0E+VJkt3%&F9|&_YatB5k5uydJvz7%xod8
zi(o!t9*<i0+ctd+_Tzd!0k2riQ!t;_dkIgLz+NhMnRzaUzk(+#Cq}x8mS@axwVG%3
zem>`aY;&h+0001ZoMT{QU|@d67{H*w00K-v%m{=G3=UvE0{|tN0iXbQoUM}0Zqq;%
zg^%r|66vNtG$^QxS>;D+oF6x+WJOgeV!;NrLTsJHZLG!_%bq6c10WuQ1xpsdGw=W`
zSnv=mc>#`{E7~AhffQTvd^7j@oO@>mz`peg7M9OrJQ21~!5d*4MSKu;pzu?;fQt28
zxQMFtNq7TgyC_`3fjt-A#3TEg@D_HRUEysM9Zz@%6(<tjW6nq6GIPGt-6}lb>@cq+
zV+&op6t?O1PT0XSd=@UCYdsV$;)OL7-oSzNUATnT_P+2YT>HK77OM6S;cb+hn(z*~
z&Qsw%RGqiNW#)Xr2{d9{BSDA@OklWcb&Sy9IACm+uN-5604e7YN1W*RItec(M%70R
zHPADoju%0yBgXFfNuifZCgf~(%JnHt$Nc4%fa<A15(Mg0PeX=oWy#9_>o*y3(SgTr
z`yRJu&+T|_d)+N~d^@>y8%O!>-mO39H{m?YGy1vXP3aAac^$XiK2r4+!+DUTp`P{C
zvV+D=3#$gb-^DloEMBB~S>;Ws{EYV@t16QiqDC1-8O<@PJ<e~=6-9iCDoTxVQ^k0Y
zXZW0rIU25KW|zz{>;z|%KrMn{Eme_Djf!=AHT4q}j`U2Wfl>Z!tc=#v%g``8yOf4j
zDL16W_gs4OS9)`E`-thr#A(0PI%ik@vMYC_qklctza8az?%{oxWUaOR0^NP<UjP7j
zoNZbKnB>OM-R|n)nT6Xk2kmg8#BmabnVA_iQqM>?qEkydHy38dcF197W_FmFnVFfH
z{#V_a-Py~3-*=j-megvfdiAP$*W{Z0_up@>owWA<{G*@XBG#mkf`k$+(H0%i6+O`x
z12GgMu`V{mrq~h(#I`snjuXd=6U2$)ByqAhMO;8!P+Uk{SX@M0RGcbK6BiQ~7ncy1
z6qgd07MBs16_*p9xV*T6I9*&(oFT3xt}L!1&J<S_R})tk*AUkf*Amwj*Adqh*Av$l
zHxM@zHxf4%HxV}#HxoA(w-C1!w-UD&w-L7$w-dJ)cMx|JcM^AATVMO_+DP0*+*RC7
z++Ey5+*903+*{m7+*jOB_+l&q5eh9PVk#mLi$h{25|N5b<f0IVMJbG^L@jp2TpSS#
zaa7!2JU~29JV-oPJVZQHJWM=XJVHEDJW4!ToFyJ3&KBp0bH!uD<HX~|6T}n6dE!ap
z$>J&Esp4tk>EapUnc`XE+2T3kx#D@^`QioQh2llx#o{I6rQ&7c<>D3MmEu+6)#5ec
zwc>T+_2LcUjp9w>&EhTMt>SIseDQYi4)IR$F7a;h9`RoBKJk9>0r5fcA@O1H5%E#+
zG4XNn3GqqsDe-CX8Sz>1Iq`Y%g|$<~7sZ#vm&I4aSH;)F*Tpx)H^sNax5anFcg6R_
z_r(vy55<qfkHt^KPsPu~&&4mqFU7CKuf=b~Z^iG#@5LX)AH|=<pT%FqU&Y_V-^D+~
zKgGYqzr}yVe<hoNlq8jG$+qmsuI$Oa9LS*@$#uCQH|3T*Ah+c~d7M06o*++@C&`oL
zDe?mHg7QN0!tx^WqViOEn!K32xV(hCq`Z{8^x9eSGV-$Wa?+ERmsgOd%PYz=<dx)=
z<yGXFYv-(;Ca)^5Ca*59A+IT~C9f^7Bd;s3C$BGWAa5vdByTKlB5x{hCT}ipA#W*f
zC2uWnBX28jCvPwBAnz#eB=0QmBJV2iChsoqA@3>gCGRcoBkwEkCw)1VfefXV6FHTU
zjO8IYlZi}aCUaTH!?KiS?cBAqWhHC5Bj@snT*#yH{_+9xf$~A}!SW&Uq4HsCUHNeN
z2>D3)DEVl4mVAsnTb?7&m5-H=laH5AkWZB7$tTGt%csbv%BRVv%V)@E%4f-E%jd}F
z%IC@F%NNKO$`{EO%a_QP%9qKP%U8%(%2&x(%h$-)%Gb%)%Qwh3$~Vb3%eTn4%D2h$
z<=f>u<U8fN<h$j2<a_1&<oo3Z<Ok)4<cH-)<VWSl<j3VF<R|5)<fr9l<Y(pQ<mcrV
z<QL_a<d@}F<X7d_<k#gl<TvHF<hSK_<ag!w<oD$d<PYVK<d5Y~<WJ?#<j>_V<S*r~
z<gev#<ZtEg<nQGl<R9gq<e%kV<X`3A<lp5#<Ui%V<iF*A<bP?61W6)N)S@<Zs7pQS
z(}0FFqIKG!P1>RZv`q);I69tApcCmNI+;$P3(y7WLUdue2wjv;rPJtQbaA=_U6L+E
zm!`|mW$AL{(dFq1bUIy;&Y&yNmFX&UCS8@TMpvh6&^75=bZxp0U6-y$*QXoM4e3U7
z<F)hYCUjG}8Qq+2LARt^(XHt=blbJ_=yr5_x&z&j?nHN{yU<<fZgh9L2i=qIMfaxr
z(0%EC<kOe}3Q5z1rW8?3hiFC#rIb-l1s$f63{_Oq4$bKZE$ArSpB_LDqzBQ1=^^w`
zdKf*N9zl<!N719{EP4!`P3O?L^jLZvJ)WLGPo(qcN%UlT3O$vcMo*__&@<^-^lW+#
zJ(r$G&!-pA3+YAlVtNU^lwL+Jr&rJ`=~eV<dJVmnUPrH|H_#jDP4s4Z3%!-zM(5Mp
z=^gY=dKbN$-b3%D_tE?51N1@q5Pg_FLLa4%(Z}f%^hx>@eVRT)pQX>y=jjXdMfwtb
znZ80_rLWP~=^OM-`WAhgzC+)o@6q?^2lPYw5&f8cLO-RS(a-4@^h^2`{hEG5zop;N
z@97WpNBR@}nf^k5rN7bN=^yk@`WOA1{zLy&Yf31oNGa7)ZPig-)l+>nP(w9R>uN)7
zsx5UuZL5RoICZ=_L7k{hQYWiZ)CJT9)rHiB)kV}r)v4+<buo2ubqRGzbt!debs2S8
zbvfm!%d0D>)72H#8R|;v%IYfWOm$UtHFb4$4RuX*Ep=^m9d%uGJ#~F`gSBs~8>$<r
z8?PNuH&HiLH&ZuPw@|lKw^FxOw^6rMw^O%QcTjg!cT#s&cTsm$cT;y)_fYp#_fq#(
z_fhv%_fx(at3ZWHtBIPbNX6=qnyEykDpR>C)L~UBqbgOa9W_@+)IuFq_g4>44^$6Q
z4^|IR4^<CS4_A*+k5rFRk5*@?$EdT_IqF>XSoJvdc=ZJJM0K8el6tawih8PgntHl=
zhI*!YmU^~&j(V<oo_fA|fqJ2Ok$SOuiF&DenR>Z;g?goWm3p;$je4zmoqD}`gL<QS
zlX|myi+Zbin>t^;UA;rSQ@u;QTfIlUSG`ZYUwuG*P<=>!Sbao&RDDc+Tzx`)QhiE&
zT75=+R((!=UVTA*QGH2$S$$<RO?+d#)Gw<zi(6@J;-GD`Uj|Vt!cV14<(H~9x>S=m
zNxN0#C4M>8vWhw^$EIopkq&09Do(W-xOcrGsm-vF(>SY5ugK@R^zzB1ZQ^O>ClusZ
z+dS2+AjyN7Dsw;VhWR{8AhhCaoF7r84s&G|S<vP0cz#kT`|Kp~r+o}BETTNqroWRX
zb*j1ZK_hZUy+*E!_Te(fL){ts_LnMus_@^aah}h*e8B?DT16RWRXgxgUHWR0XBF-z
zVLPt;Bn}3ZK2mv+j;B%8xAHs=tEi8A)67fsq#8Og&{?I+fm2F;eB|UqwW;FCLh)QW
zd0mBgupMXo)7ptcowwrDpXz?<7rY@eUAFy@UsBkcO6f4JMyAq*H}-?s+%Ln?#K)>E
zweC_-MdB}7g^x|c?&U>il9${*w2v<p+f$>o^dTKoL+s;DnY+o1mWrLhfcMi2;xb6|
z(C+6_vAe!htRXbY#^G9HzUaZ}gE*Vyjoc5)+?dFZOG9Hn>-%My&+TUiPP8BGI=L>I
z`@E+uyjAM9K2rEu*bVZuD77&M^pPO(Q-9@iY8p>qE!v;JZc9yip?mo68Q6PtaP|4B
zjQwny=oXeO!yNoXXQ5xRwY5upB~Lr}PRg5w?a6f2UoK5u>@FFPtyAi1t~E9(%8Me-
zrd|LCYENK8um|_!<%Q0A0Vcs4R}P)Ad3dwTX{HwnUSYb;_e_tS&x`zI(yO969aq@l
zHl8e^MY}Gnqa-@bvzGOPp}l(MaLr3pXY4A2pk%w@k%UwlLs1Arsgoqi%WM#6xcwv!
z{7P>|n5tLgur#;&8!HXgAXfCcSiQ@0-*Q{z*4{pUU|);ta$i$j?0?B_?=;EBx;-y-
z1^}vjGc#?#4*aP%E@M3je50K;7~Y>2<C1|xWiv*RI&1+M%#4D%!a^2{Uf~xSoyUbT
z{*G?DrBPUT)3JzBC+;^-;8|rn(^XXF^)%|$aLW??Y7Alw+rZApL8~h3VAjWi>xDOt
zlcbMj)d6l1k?w8*x=w_#I>8#V6Ybn#Lja@9D3g~}k1x(<tW+0Wo$crZ#-Z@#yfwvW
z6Goq^W8z8!5xUs^QYVQI$A;_n67CcmIqvWpcxgC5YZc`N^VVHc#}%)Y8sn9A0ASR*
zi<<>wS<g@LqMrr2o$7EFSAz+6hF%V7K%UlRH)^cN`Ms03te0Ta^>}xSS6iAbUTxwn
zUe$TVeb?fg-HMH~TbZ4`c>{|RYBK|XwG+SKAG;Os!W?U_`-khiYWi`aTW8EM%K)9u
zs#+$+v#kj%CZkkGohclyK%{}MjdM7~I>!>v0+)uXbg>M;H$PDvD0-zXk_9X+S%)(@
zxUklz0AR&{AMwV(h#+EjgB2<Uxxos$3``9RG(i~`*!6nsq&9pWyEZK9qen5<BGv(5
zKju!^g*W#^hgaPtC~Yy8c?dp0mpV2P=2^nab+x?&q7@H3cubpJpRHpW>*Cl~dF9(Y
zr@ZVt5MfudpkaWZeOOdnnAmvHp19Kow(QxAzt|ru+>ItYIHeC9T((<GZxqH_Sh(48
zzT+D0m^Svc)Wv~)x}984*JbW8zvve^9Lb7<Fo)ZeuDQf^Xe)LXJOJ0mwrShuxocyt
zqq}_Jxo=n}^^+p<?MOx|dR=TfEyV|&Pp_{wzy++Dfr*rH;AXO~r7j$}8%TpjvU@Or
z-y@Lmg-o5PG|#gRGpcw;)3~1QUn1V|ewbIw5Ic{wP6CdxzzT#Ip4P||et@Y)byXok
zFEMAiC3S|LO90MdeOmfq-NaLX571&-gPYLAKLSgLlMn_7-UopSAMQ|(!Q*f-2!g=^
z-zN+X9P3D|suI`}`fy&@yj#;Eob;?P&&#lHCHRa^Hr!oiiZ-;kTb30K-DbGiyLP`0
z<J^gsKDjQf-zM>dO(L5P8>7zhDu@O)9C$X)cOu|^UM@OJBk^F*B<Q1rRrj1ZV&6A+
zC2tuy@^svu)D@7Ks%p_6$5|c#OA&;Cl+#|O=f-|S%@J1-3KG7H@AMgnoiihf;5uM3
z62i;zFvi7kbX?XZ8ja(!ibD1ve+HstnF2oTH>3er(KK>&>R0)c(GmdPTZ&m{9J?(T
z*KngGH#+1^<jurH2SAOPPOLrj0^21pej{+-S@JApqPQ5?&|)+=M1`n_Y1n=dX|Sag
z7G2MKHc1$39~4%@)nToOtuXAME*AsLG&57pv2<fa<`o^<$D6<~;I|sN?{095YsS~|
znI5gk-p)QPYG=9zZued92?!xlm=dPkvlHO?^{r&dDvfo>dk|-B0P@^l499+j*B9Od
z5O@4i0TTdH@U}xWyU#Eg+gK{i-O*ClX;CdkaD1a3H$o_lJuC$rewdG$WP4K(jAFe}
z>ddNG(Kwhb*h+0WlxcKnBeZ82`ZuDyE?uU^jIdhY(|J6jJryg^+tqrOq;Y`gJG#b}
z>3Ez8VuL}Mfz^`uC_<ro$P{>fxJU1>u1?W_4q5Gtb_p`C>-w%{k$z9LOTDLB=<g!g
zK{^Ac;}i#Ry2rn4h=w2y8ro~k!=^9G)Pb{@WklH}*JFRWv7#76!A=CvLSnbsAeo<d
zeh|POT4Q)ixMdN;1FNu682->uW|t^-5XwR7^eI?6fCGB4>8)n3@yr5JYEJVlX!|Zq
zcuQRL>_Q<I;lQjyWF4b@_xlO_Y9}`Mq}>z%3ru<!e>o`_`eDeqjK}HduEM<CxuKhW
zHx4n^aH>0TXm4&-AOR`TXy$Khz$dRZ>^I_l&$8icuQoJKZLPLhgKlG$fykiE$oY#r
z1hK3(=2%b6DFwo(@ln02$C=gF8y%AXZ0Me4G{EknXR>?_&V}j2XEPHgY;k$kZ8Xzm
z0?a1Rvp8wF2bTbB6C1+Z2b2%(@*;`m=7Ck>%s$IC0~QFqwr%Jz%rydh$hPXN!_))v
zHXLo*U>;*U<KD4tmPZ}a=6KXGjfnFuDfRZ!lOAUtmSqn28og*$**R{nixvL$zpXrw
z<Nv4C4rTj)n(bh)f8enkCM<zFaeqt08rankdSR1Os~oUtl(($I*eK|lT)t`7aH`Yw
zM8kINbG8qs)`gw6<&138>wBdPzOlZ-YoYcXk#~1?b1J)`tK7E$S%PC$ElbAx2uwP$
z<LJA5z`l>nIBIOx-ietMTYIq1!$WK=(gwugvT|UbUT$1cjhLeVdJ~T?8xB==_2D?5
zCk}0rgsWc04DA&IXCxXl3h#K|$urAAoS50tkyAjLvgYx_wbohFTyi}s1O;TeFq-7~
z-p6~>JegQ&5HaOncm<Nt-r+h9k>G>eG&{-|FtjV<!K1R+YyjO7WIMYZ;lD1Yu{PbY
zopv13I6u<De{HsQ(`*m9A%G59XkBu4TbLS=bz|409i*@C>5P@VF!rYz7T8dj`7LJN
zi;=y0@Okir(DAsY@6A=knhx?CF7(CWaG9-I0=}!5MGEdUXu!{I83#?X?4(`r?5b7)
zOETNM#Y?EiwlL{E;s0r~Mo<8sbXeo=h`EoADqJw@m^9~I?3e`;O5Jf*X9g=csdi#N
zY4OGM=GcUY89;k(YlW>NUg<BoSX~G6%OD4;ZbnPR5yK#_kx7Pm=2u#U`HpsBILa;E
zKCr5ImUnILYpPAS{}~{qE?YL<*r*S-pc9_hsPIcT3?LUPaAa8MykO=G99i^>cshkA
z`q`{q#^Z6GwZKp+-8EW=Z2ZdROg63d=A80YU=<@<8Sxk)*x;R(<~z(cEjM>F?BfOP
zS#Gkv^h<ZAQJK+YeqA}bW-Y7{8B?4u2l>?TIxcJttu%qr@+7U&q%PV$#P7K-EJ1N1
zBKje}VYe1eT(iR)#}xf(BgC#F!{0rykCj<W-rnEjY7pbZGSMD~a=YsrV=ixV;Pfhv
zr7h@r%0xbyS?@WpC&F#9H(bGpYA(YEU}44rmJh}l#wOtE!@R|pOu_1Pk1yT?gr$){
z0J~NKiaNo>NBUN<jKH;3^BlQxUOGq&dsgPrwl$z6F`Wr$eZ+<TGM{#*K2WPpi;mqs
zZH7}MC5~hG*@0EXv#<AIYjKblT)Uga^B5RehCL?d_Mwek$vxgqb&7QC;QkQdwq#=^
zI?VkYy?u;sLxyX!CbO|3TT}r=xUX~o4;ow@za=|$pUZ=AK(K@j0D$G>3}L08aw4k%
z6EJ_EM5_e)mFxBjOGuIU>2TAjQC`MJb99n4_jkCg%3x#=lz>*i8$Az8rliQea^wbl
z&|q3-2CN=5_`)vNa%9O~ZT*=uEkEUiD`(;}(MhL5k8s*{1<Ng~&Kzcgx7%}vdx+zp
z*PJFJv1$1gmapY=iND9E12+91j`h))XHg?XLPm>3-e#U1q>DCUg5735B3e_gacNmM
zfFo7l$Lm23GKByF>~O_J3||l25B3C5!8>TlL>NykYTM|HMJ=LM7#}^l*bGa5QrQZ*
ztM;g{tkV%+kl<*5l%EY6>$4c&WcC?|K+tGQiZW=*2TT(NO}&6+7ii*aCx@+XuPUA^
z2yMAy!%8?<w=MQ~szM-ey*b{)1)+os4B$L?8n+M%O1qD^g~gj78H#k+x0OcgMO*uh
z)+`0F)ost8a0ap7C@!Bc{YEvh-<g)+t$|kf&ANQCMr;LS+Udrw<e51ZX<&655R8*S
z1u(F!6`4V$#7AsPwJX|I_f7>vsP%yrxp{SSwTThmjf5p0NwH%8BdagXe|_(SjwfI%
zEk;*^2pE~TigPD|XIAyNg<qYt4spV%W=KtYd~vh25`WE2v6cAsH0s-{ePHNBH`u0~
zA0H<5bjrCImp1ke)xteeYWYLk@zWLvgrD?MjZOjRvrU#t7z$gdUVtnCRB8^^$nQ%&
zmMM_hARl$L8-5bWKHD-IUyoCa3F5-SCL38i9yU3MMTn6tL2;%K@A%1v(?ShUV!Ioz
z+GNLobO+_4%fGx`gQj}t?f6-5*H)W=Jho_&bGZ{Pq!WV2cML2T1hHp|(w3DNX8g1m
z?H(?<T32&qu$*+))NJ1dUE7R{V_C<{V-S{dWPf>OkYpu&KAv3Gw&IejD<G~2>CK4+
zk1B{pI{;S%7)Mjr9Xawi@jyT8d&I!{yB~8<*YKze;lnQqN79sE<tam!9@x+da13oQ
z#U6A5cV@?jE?!fR;rbR9&sEU50vzg1E}l(oMqk<bCc+|+o+UE`EX^^cWHHUNfje}t
z^+d=E%PjJ`XeD(vHLhB34_i7pwiT<YuoeY!WzZorv}>DBJT64GfM`|Jw^xe{BjB2i
zmMI@_fjjw=NgR0ACq_%|lmQ6KhDjAjXX-)%hG3adYa9cRM}TWA8VAuh)hghs?H;#e
zfZJFeBQ|==p1KZ0ECApo@@J)gU|$Ks<74e%b5LpN((=@jOFg4Won<!X<IXzMyr>Z-
zK`&F|x5j?t$LbI$+4>={4^A`Z5p(d?%=gEBd&d0J=Q?u8{?<zoNxX5L%sLohUiwix
z&0!f@=IJ^gaQPFTk7Z+%wrt^P6F$OxX2K<7=I2;#1RuV5kz&Ih@x?M@X1cAz7+f}L
z{sN&{k49S_<+Kb!n%P($Ai!qXezxq^F^vw`4cXzBn;H7xvOTlN{Ams_gqdUDeO%+%
zn_@%TJ2BSQU;Yh3%Cs3n@)j`iQNsy63y6*xhA`iL09Rzg%0j}hTDD@}cPTd){CiF`
zb>>K0c*f}+C!9%PK5fHfVXW&MI&BfrM&M2e8`XK{s_lW<LA(O>gqwipwWi3Xsy6m5
z<&!=?t7kE$5&8TV4O|CoM=?{17H2^@khw&@Y%>}x0M}DGQMuU3VqdZOcI`0-{BM+L
z5Xy3fP8b4mcEC;vlVNrOIKvifTEgR5Gh`<=ZDe&JTRB_^>AI~?c5IB#OULX%)PZi{
zaHq5hpC!nOGx>o<441#HH_HX5vT6I?>hYAbW;I#dZdTJ4v^X8|cNXirD{LR>h9IKA
zjH+u-25aNDImg3*_#n^bi~zSDoZVxd2A=5iAFIs!r7l2}xHhOj>86{NPVt6CXOBbP
z#%e>7&$~N(Xt~gS%jRin?2i{CzSu+zBotN>=aJ7_qQ*%+-TTvo5azzC%(b4uin7pR
zyKeK_d4>B10ZdQ1f?00w)jM`;Ph4jx_~vLSczn9p)y%rEnJxYc3ebED%AkUnee>5s
z@N6^Fi-ykdnOmXzHuUqEgxTH`_o(m`;l(e9HiUa)uG?pW$QB01n$u2eX1pO`Cl2BO
z*+DBt|9Lx&VM$pht>M{u)kAU@Tkjq1N=@0%lH{~!u$Ty7m0sVKIBAMH#?=hECQhx;
zF*Coi#yN{QCw4y`&?w};fl4?)kx7B&Sw6RhXR82EQa|hRFXHMP;0{-7I}7H(mly>L
zPP_J`mj6Zp#5>Q1*5R8X#bC^V3lS53+~$=vY{DRk!SabEbnlimg0e;ohUWvrj3zyu
z_98yU2MsS>(x1j*m~a-z#1w9gL=rAN+O3?hJGHTb0F55wN5GlIdK2WD&$J3yU5TWK
zPo;Rd2L<T5??yUu_1LDOyR}cV6%?0R*VxB_&B~fTL>XH&>5s9lmd#`OPR#gkRvOt<
zi-b=Xvlep3%=C6Mz|GY^YFX9>tK6OVjY|0H4kx^bXw~*H$FvU3SC4AB<>0Z$wKh}P
ze`L!|$NkT-t*sd!b9C#<&jlau*=(t2GYpPy7ElAWoW;hTXgNsBo)8T|J1}|7BwHlR
zUVJdR_QbCPT`>s4pvpd%jVch}S|8k3+G#edIn3c~79P`gMV>h}W_$OPVI_^;Yio3C
zg%}V92iAPtF?v&(*=uFIUwLUKM%vhSk%9Mq*cg*-8CaU+o*6X-CWk!(M|W-KL#`++
zC)2Zv$^By36nX92%C#&j|K1s=Z|vHf>t*0{D<4>mB@HRH-3;v2wREhk&Hn+P(f}g>
D#gX8w

literal 0
HcmV?d00001

diff --git a/web/css/fonts/awesome5/fa-solid-900.woff2 b/web/css/fonts/awesome5/fa-solid-900.woff2
new file mode 100644
index 0000000000000000000000000000000000000000..978a681a10ff0478581436eaca5c5695c97445d4
GIT binary patch
literal 79444
zcmV(^K-Ir@Pew8T0RR910X9?s4FCWD0~d4v0X6smO9Bi400000000000000000000
z0000#Mn+Uk92y=5U;vp`5eN#3=2VEnD*-kFBm<uo3!fYS1Rw>9D+l3hTgh~iLA3L)
zRED{20FY%BfBdgI*|-DH9dNI3D>Pg&wq*@_91!3a&i?=Z|9@Mu2;1D9TxN57ZxBUL
zB99SEwYF6hGaE87deYA9QleN?)uhCTY?_*M<+EyvGH)K#)^dAnTYE}s2cGwG04C9Z
zDFVt<-M7}ti@eHSwFZx4TIPA45A*OhmBig2Q~^m5P!UiOP)@m)l53FDIk~%vfi8-G
z>Z;rWysLBX?iaO!tO%$Gs0b)bYtDK10gEDhWzRWpXG!B*;C1|)fGb0<`ldfkQS<r>
znNVo>Ip}dg+#%8o(hQiGAtQ=rfD^R|#qQH@x$B&eNsQo2ICwjF!QThD%7?07o6`vt
z{EZ2Fz(0CYlRS!FF4+SnOq>TK*=zgh-CL7%3&(Ij;-J0P8f)E1!5MM{cR7N#_TKxg
z*8v%GMCZS7NAyqr4_$&ifbBYfKq6Y$gD&S2{^R#+=g#}KKBy#;X!9oCAd)<G=upa*
z3W*Rs+4#@reV&_40cYwhaSLb#@@Ayntg8G%d@mVeTOt)RM7q`N_9UBRlTOW&KoUSC
zkU-Z25+Hy=2%#vRi3%YicLYJenpjx`6+76#j^$4*?Yw*Ns#pHxntBE0T9x~2C1~MY
zI<gVT5Ak#R_o&ft<YwL&6+>$FjYwlyc{69vroJ2|n8V6vHCTC8pu>cI<_B|BsAp@l
z)UxY~VGF8=@I2rD0RjL=)?ziVek%TA&={U~TMyYo1QkS4+$iWyK2tZKf^Kkun&nKi
z1x>MKWkXw9TkTF;R$6IeU3PViZR5JGTUpn*y6f)z)25%)N^OAcpx1W721*=s@__{(
z$nnj%x=GRQw$l9)5%i=(C=Z@Tr~Oxqj1NMHix9Gm0Vl?JLVADRPbsxq^s(u-Ohr*`
z0GPC9do@xYU@}z<k9kx@9$Rzj=`}RB414>=14?K{3}A4hg`=8U)tWu38aW?k2Nw{W
zG}zI{@+7C%VIH6EZ`VDirv(9$OaU@407&u?jjY8sS|kNBCDSbWsn|PaL;HL4YF=-P
zML6)m`bZ-T*qB&_e+k-}O4`8XL#Gx4@jx(aXu|;^RyRNUZ@yIRtLpWwY9?1;u&v)c
zq?lx@gPl8s01(#aMKZcSXEy2J!v(kkyQf8=7!<r?27pko+ft@T=V^xw5FIvk`@i;X
zj`(N@`5*{~sBZxWfXHzl47s4N&-486_v>(Jn#Cg_;z|2`UmAEM)cr%pG{NdV6WU~c
zAOFi{sdvi$@75Xs;tP!-@yzt@j%l__JJFTy&OxG={+AkvB9~(h5`hsyJgTYv&m^~=
z<fFij6E+BJ-k>N5h6X3P7_v{F{ortsuGY1xOQSI?Xrz&3Sg<*<mqE5Z!toEz3wiQE
zrCT^>lss1;HFOhtLIpl8f2h;|Xm4~QAOsMcLrC|Ykbbr_%uiA_nUo!X5NC@!tVL3+
zlA5OUJ<C}7wj&a3BBl;!>iA`|W&c(EVAzvh{yxV!>v|BjVmuhxBZ;JW{>QQ6zu}#4
zE5I^AS9B>FBXyf1NsjDn=Q!F<;6UK)7#6R5b8ks6>6C`DtpBq-yIP%6dgYR?$xg5E
z0tn3fr>b?8tjLiwQOfk{WJ|wiJiXuc&1v5pPQV915`aJnfIcLMhAfJvB1)D`kb+E#
zX3QcvG%fo<FeS^hGwV20oU-#|Cx`wXK$;3ESq>>#j%Y<$6?;mlPNsQE^JIEIZK<a@
z9QSZM?*DJ9^`(GJAAPU+X07d+btdlC%&d!kzTpPRhIseB_e%9%y(*y!MnC~%!;oA6
zq$oH^bW))JvI|8}BB`EPk>jN9{^zLm9ozgl`d%bRX+^e^^o=#ykJ^1_qje|WB%E-A
zc%u!%4RW8P3#As*lN0~(#yLTY5bZJM;y~+1LqbDeQIRlQ^Yy2>{r6w32YT5r(%7>c
zE+Qhq2_b|c1aX%2YyRG0vvpbR*czpog`Opy3`{_MeD8=k>lPNUB#~s6+7zrr5v6o%
z%GXOaYv`%9hZHJD5v?JK?<Vm7zpPnLt8Hg@yJu$@r)68Jh<GEQ90}z5$=&K0in4b}
zh*T*%caS;jah!MiTZ;h&*#asmD#{3ukOT<B{*VG1^L!@^u6(&q@X7<yViVI~(S%kq
zpObP11z4g#DQXxaO=#({x`W5xXtAj5t8)|1n@%rBE{6EOwn}+7FK<|~2~wy(|1L8^
z6=9V~d6S!m%lXJrvunbq>Tt1;xbXxdSX3}^!yQi&P{HHi)AQg10uBw2jD~|x!@z$`
zG74&Du3#K|+S1)q5E2#<o1nrO-tx1*m?*2d-E`yWS9|*M@jpLuFqC{ApR;rH433OR
z=Dqf~{ig-laH4G4PnXY{m9+h|`t4*gr9+1{HQJx(qOah*3opLk#do{M;p3;CdFd6`
z-g;m9>2G&YppQ}`jWu4GauG2J8F@t&O+5o+b312OFW>$|C1sRUb*vpdy!u(BrfqC)
zz39!j9i;uVUA{@p@}nd#n||JY<80L=dT#OZN?cU&$wMQe6Oz(0^NY)C>Ka<xyL$BQ
zUwBGperb7iYp1T=L+P2>x%q`<)pZT6oo(5<-A~S~*Y#~3(Sgx%gy0n2394p!ej$vK
z6w3>evRRJH9blmuR@5!~`E)qd$GOGL56@jj8*A(ZEOZG=89Q;xl6AZG+;8akse4RW
zxc{%_D_{G~-~MA7WEevhDbv-`3pperH)LdkB%ZhM2<f<E;Gtnf58F<Ild$1D-$yKo
zngOBPXijv(AIu}JRoV{Qy`_CK*z{PJbk^qy$4e3oaT4NB7n5_ey>xbcP$TA_q`8A%
zG!;f&E`3A0k|dZIaw+1Lj+Tc{ze1qpRJ5BH@1(xhGqdt*T(9%FFM7or-|~)kdq1A~
z4CI~p{!oZ-94X|9(<<)So%;<HYI*F%7xL38-qInplM~zLdi{C6?R(CT4~Q^Day_HG
zo_D(G5m&PPlxn!k8x_P1<gdT)JIMR4alZarFEN)WNO-|tN3n~yn8j1{LJKZX&@v5e
zRpv<?g^HvEgSXSMZ$sa;O<fgv7Dr*=!_eFN?K<kJOhZpqWQoU61OmMG&Kpl2J$L0o
z=TbO3`@ij0UQgnvE{i+~e4P>m-Y=(h>OB>IQDwCx`SSl}XK!sUvNyA5CrAGO{F)#6
z`2PAbY@~ZxWN93Qf$vzRE(<(IQv{AeAn@V!eC%Zsc&?)e97FxtZ8zuZ)p9ZKyEcZ}
zS7ni#TwfOIALHhm+9J1AK@j+OIUU>7cTHVoX%dHlCy6Y9Bk%9mxwlPSl|>o_zGKOf
zfT6&Pj}O<U<-BWZu@sNuP(U;UMmDQSqn1g;A_1RCr&34)MPSH>dxK7+Qp$Nu2AxWQ
z0K8EtWfCd|2#_mBsw7xPiEwwlY;5>N@c9L<UtnR>1RyL|p<todmzPj#DZ8tH)BK|J
zVghB}Xtf63c0u(gpy<Y&nIOEP;k8b(atr%J1<prD4)kIVN-b|nlDBhq<uGfOH+XFC
zs+L+t#eAbRc<fu8)L^8=?5;K6dIWc?qhN?wgB@-}PwV&$gGBnHqCKk{C2`3iRz3E-
zh$Trm=XsB#X&yA2W4&yV<&tL-LpcYKUmOoCr6n1$(GjX}T~d`)fK0c5064p+&IQ5>
ze8L;9wv;LoZ-B~0&s4uf<YL&Dz&?#JK$!cU!)U3K7yDf58Hh-41DL4*mJBZC{N3t6
zv*)!GjZ0peA1+6Ft^_*+3wpSl2Vn)dx?L0KcGj@_HvXmHnQ+zNh+esqL$^oH8+17Z
zLLr!;1rxFZPz!M~O9~k%M5J0sa<-u@)C8q80Z&JQBfZIMvHC%3`g|7;EYN{Zij#IW
z79;2g5N%OlE2EJk)$J4vYcOVbLn!*v1^4}p`HM5Y%Q;Le34b|nh!0!^vvhShDJ8O|
zmK+E|qVOdLcS4=lo3rOqSsR)2b)%CnS<oNap-)CDsB`}GaPk{~gcFGLGEZ+-`3)??
znXHthyKXWlTb^Zzg@U=lhz#S9QD$XnW!3;y9gZ}sgFNRvJZRK40m4ZrOYkUQFYWX7
z7n~UA#qPd_{yOq@giiDbSCGSvIwCVGrv`D^P)+gICK{b3@^Ym(ajS>6!KCUC&G!Z7
z8^YSU5MaU!$AbW7Ju0%hbq@&>r=Gb{`8ymEjY+dXrOe>+tcT&U?JWyb8~0G6g)EXd
z$!!-F%|xhJ1X*3vVptAg0OEcJNzyx&^K$ZoJOg$-US@i?a@x7o#9)uwpfP)I+PW+j
zb-h|$IVsy*tmGxgn&)}dJdcm|;ub;!gO4)b<~y{;2Pxo!=Xb(Z@M`I)dqR?=X<}PP
z2n^}Oy;sjefw!AY*XkWOm)<!Fn*%j@WPZ(XyS^4tjtdZ_(>jvTh+yNxDRnnk%ubJu
zY(y>%7wuA83B36lT4|kZ9JVzEW7-`pBb$<AxNcHoWRN!0^@Nf&H>wvZY9$Dra}nAd
zVEuht5ChX<n+&xWky(((XMh;xz#L?8--imL_sz{_Y5S*KK#kVD#?}B{f^*mr?Vj8D
z3JS?^_BWq-_2Icg`ev%o%B9Y%wlpl7GbTz904}!(J&7DY;X=5gqchww)ka=UB!kQF
z+<ht`M(c+x(GPm^6qkxA3Rb_WGTn?%RIfl`+Fjc{>Y}_Q<yy2JC%86M?wGoDO6q3G
zMwXhOmQJiqQ`c1U)K3{%pJbS9-21CxIXAM2E!(pntqi2mb*&XGbrKaS)>W>-5H&Z?
z858|<C~NdSAtueF?hV@TR24~hK#&-_?tZwhUf@ot_MIYhw6<L_<#}%TgcX+!7uyvl
zF4&KnRc;R)@a-cRqVNw2(5O7ZI~S%n-MUm<IBU;N$E3-`&Fkf-SKIe5l~R|@CCmoZ
z+jh~$%U2qWndv%HCLn@1;Am`oT`^zM?hI_l$W&IYLNnI!=MdFhac5tKCcn#1m$4Z$
zW*NKhs0D9UcMvgntwUE;Ekzi1D<uLkx^HjIVuK(Ko1poB_0g@(<7HykuWe}CaDIcq
z37IvF(K>ox`{x6uZK>#Ang{VAbaj(bDp?0>nr-A}C76EQO~cLvznqN(V@vQF)e2r(
zkE>oL$%p{=vj*V#xF8Oq@Ntyw4jBZw9grA@@tEg>)tM%X#;L3(LmO?M1KG4z_xe=V
z9K2C&miFj?1a@CP7yx;p7CFO$`Z9Ixb*fdX8-ug8#?X2y9cWEGFgFIRS0cI{THb|`
ziJ~TEF*k+Q`=GoMuM8hqeM1T2-;G&T15&#kFRk=~O|^ORU^eUZX7&WK_tMuX(&d&M
z$p!^gj$=}BfP^{osOLfpctJeR!;zW{k1r4S2oe-iQ;mpGJ7a6Y^DtT4V>}CIr^=m)
zFeq2Ls&@TZbk=*Ompawh6s$ZTrxIC-W{;5wX5)$JH<S*M^|Q#0dOgqMRJMt8S^i*D
zoXAw^7@jQVpYql@S`4C==RN*DV5)MPrIt<VB1Nr~R{C)m9<Q|ow6@@?BWO@=Hk(?j
zWj{YO|8i3OhP$GJ&P~@#>v%AMI=-K|R-y#C)!Ol3(3<b-DuzZjOl|FSx);w_3=J`T
z<bGx{t<B0Ab4*=G)1uYsQth6Uc>d411L<Qr(i!!!$g;j&_?cTzH{`K}sQ8Vq3vM15
zk5LW?<^T$;Ef8;w6JOwLMUh)$Vs3@0otDpB#P-l5%X9jQ^U$gg&~arivQ<|5Dm5IJ
z5?LZLVfr{Yj4HjWJaZ3NTy2XV4TshGGE>HCV{q5hS~LA_nolR0=#?x-qcI~fjN-V{
zmBz_jR!7<j4~DE)(0~{5#?@XqEpxlpOQD<EcG+NzB@@kZi&BdR9-d60$cuZOX8!u|
zQDVnjU8B}jHYMwoJDPn=S#35aU6q4rkI#GS&QS_^bs}+B4(Ze+YE_iwH><|nsq6-k
zN3l+|xIZQ1m30Pt1>CAn`GiLWXUH@TW-@?8Ra_eQYxT?33vu{5A%Xc5v0Eo@sCn^E
zt#2)N?w=F>`b%3_`xkIQBsx`SI3t_Vi@G@G#kcK$fU#2OY$iyL<zYXWbu`&?8O3B}
zrlnnUU4NFGL6g?LKNhoCb#z;kN2OjNrE9^`P6Z}mw&mHShPdb!^G%+lE<a9nmMHUg
z=YjGrxhiFRou;l`O;hvKh|Hm#k@gp}ET^cKpVSz+;w9cEcHc#<tI_-Fx?L}UF$wk}
z6Ek=){`>mZi`$Qk#!7D%A2(bsn^r-8Xy!S2bZ@1w&He0{ooa5Upc7Z18vt`4%k_zR
zoX02gzSr`alPs?YBF@dWFmiD^Q52CQWca<s($`x0Tm5>hXin&JeOmo$Ek1-gq)MfS
zL{({1$o=DZywLhtrJUk>=>^lL8GYpY!!@(<NR3jRB89IVxh2nSe~68AgWTH8W>#G;
ztHxtR3#Am@(aqU<(;Vv6a>a}03*fAbY|oF3HycA}G^|ujmZH2kO<JZpE!(zkC8TR$
zD+z#Cyf9sSPc+1XKIGOaiq;ZZmjgP)n_uBtE?MAU-*0^tFs{$3T0%d_qBLkdVeEJ6
zHyv^CkPsF%Y>WuqSv>)}lV0yW-C>64VKy5Q)R~~x&2SMu@R8!hx8P}jV$3H81#U%K
z3a_AK0^P?a?EOrcn~&j|mPI@_+j=wc#e~_%Yyfky&(dUTZF)V~@*|wTkbX?RY4I#}
zO&TO0K;|I>>_Qi-IP-EfVhI7t@~-+2e59hLgs_;SuF0p-AR(}r)DT~j7zIuP@}?s7
zp>}~)#;?8;6}a-a?8U|XXfzz%kE=~PDTF&uxUju($xFSol6o<x{wp`@GXoQd^-%IX
z2p3bIv5#f)O~~XR6AqaNN%{B~E}S}v9V~W+C?gJaLPdoh4uj0dR;oT%s1l2V?!<H#
zuOrbZj(1r{wi;wS+1Ecv-Z!e&5!VCl+`47@*kQH26E!EQVT~Aepc_`|<6Bf%UzOT}
zqd9mO>IuSH6&c|fCQp$~g>o-Wpg~@OrK$M?3q+47@sY=((eUK7VUaCN0rrIs`*8*t
zU~2A>0_EsE54!RcXfIN;Ms%r)NT|reV#ZJ7)TXUiBj7E~f%;-m#h9a*ZtynhDt5FY
zjzuKVS{E;|ShuF&{AwWYy$bA_ci6DxvyuxjTf9=!+k08_SkX*h)BM9Xh+eH9GadhO
zMu5x|Vm0dPmyleU-`CI&&4JZ7szVsk0M>OcF;1NtvH%92M0T^b2>0tF8nQ&0mr0ht
zY4DA*K{-OQr<e?&L$)CnpFt0qPMLuND*7HzJJ{D60y|519_A!J2@#H+)=;P{CA{de
z>A-8+3W57R9HcsN6Qs`DBAonAi?C6QKNM^}X0Zr^9hPGVJN{J92ADu=jrc{vncH-N
zTX*Aov92k=gSed<5ji(e#c_ZZDggppTWb>cq>3Oab4SwSdw=J~_+?c%vyyOo^y=|^
z+{vp3q+vRaevyR@!slCaHyM@3d0I_ffHV7`EWO{=DZ{q|GyIIzfTk}XCiVOw6L$pI
zg+@07p?D9F8f%eC5mRp@@!=E<rc;o^tm`MUa&gm+Cf9=4w?=$(p*eG}nHDh=<vka0
z+oQICZa}z7Y=g3FF?np1TsGBSHkLBbX*7Ao9M|_2y7c9;Z@@Q8OI&XE+RQ3h&dP4G
zBttUWtFpRiF09l{PPdiT#)lx#KrjSY1j31QX@***2%b5-?eO|as6?+&sBjS|n2D-b
zPL`hIbiE<bdkXPygGp64i?Y@^x+P#xc&t6fQ}+ZK2iaR_ifS``tcNt77)!a!@_Uld
zluiZd4l(Fp%#$6Ff+?#Z{73J!lw`GZG<36_Z;`T#oqc-BRiW$qx;g)o`VxHA6`Q%G
z--C|eysXrIt8MyRS~{y<-1nB|SV`E(QFyKl#El{72(Owe$e`B6GQ*vD8uW`<yFQkx
ztw}K1f5LI(&^O@A#@axgotzk+ER4BoMdvusQ&^6^Zqx=LxUROGg&m}W?a~KjVZ&i1
zBQ307p4T~o8Q-BV=cMZ^S<}Aj+ll(HmMrPits>}WWLs<xVr+yJB8vPR*R|EBwHsq}
z)0*XEhPW->dW%W34CME@XYAQSQz;8w5I)N0iIvfXCwmSwV0kCCx!UD(rWdUEtmqph
zadL(97ox`sCse582gh|f_Gy-;i(&xjS`H9ZRV18)>vE+?3kLaR;7ILF#m94Z&mu@!
z(M4tpvQqiw1Sy$j#1svAOFD`<O=?P@MICYdv}<H0O1JZl-{}_2k<b%AsizNReR)P9
zQr`)`^e*Lz%n^JBX%htrVZLp^&NORU(x<O_r0+{-{P!h`FIO+1;y050fUJMEJxQ24
zzC6@8(oCa)Y|_GQEExPU2u=~x9bR_HB7LVdsc1zkImU6Rhq^!ohrPGJmB7i6&!`!v
z*V;!S(U6H{vzUJ~r&p1K@TKwrCsS&9uK%2%y9znN0(>a-S30P&dY#1%c!1zGWT!)u
zK)w0C6~1qN*-6yg-UF^|J_(iO&pu97E8lt8V%5%_d6XpQ_YBYKnE?m({=?d(-+lT!
zz=}V8R1vDdc^#=~=zmOwdWF9R5qYG^=TckNMME2GLcRY;NArBAW!}>Ft*5XPh_uyF
z7kH+W*sZ$f9X>X%&iVVX#dd6_@X@*1YnmR#Y;4bv)E#*8{e#*1b9^U}Y^>$8J;gfU
zFu5`IOw}8mLD`Mm!~!%H>)|jQn<WjbVigdjQTqrDe$(rWjd#O$jw4VI$GFONSg+tn
zk7alt?PjjjQVhok&$elg$hkhL?{&i|D+4kL#x7tGl&h<EQjYBV<G>c<d*n^XCsf-9
zS9h@<A&F!3;T;mK8sM+l)o3kE`~jFM?7Hp$u5JyT26tAU_`L{Ej#BK=@51o_*%f=`
z{bvx9-@y3Udssuro(onME=|(<Z19hV*kNt*rqjSSRp5POrTyrlfXT7kS&)o$=1=@`
z(1P=wl9<2pzPw|}{$4}Fcsv#rl{+s*WJdcGE_>2}9Fh2;Mo@j2klxdOPt4d$DEXCi
z+Od;d61s-xiAlaE*;8LJK2Tz3dc(qKOc+UqwLx^`b~(#s;3|_zb%U+<p3urLNrPu{
zY{b%XHDz{_R1A+EXBac%CSqUrpgPXm42h3fz00%=E~N*TAuVQt<JNI><EB|r`>fs5
zY-lz`9t@Iwq`#gU6|0T3z&P1VW;^#o-NWs14%Vy{i{PdoMxP7lW=pVgwffPRUWGO5
zvmbLP9#GJI;zJ}2(rg{2b$`iq(&7UB6)}}#;p);0AIYYtDg-k&g-ek>R0Dl03aBu?
zi?dtK_?Aa_Ih}=m$Scg#D@in~JwSi7Y?IQL*FRa<H8XjO;l0I0=1I2^sBeBTGu#X)
z29NblMNkVX_JOJb9TxKY`5O|OD{KMVP-zT0&A4Y(R{|?D&4ZdfE-$7Dd*os(<%s%I
z63p#VBtE1TQ#%33asqFD$N&q#%kJi4s=PL*JnSY4ufll5%NW)nYe%&U(J6*XY$a99
z#fs@`<+L+N*^YY7bdql#$qRpi25A?%Ds(w%XRg@F^y13STHc#m-rk&HhJL2QW%Hx+
z`q&<1tk<0>po8M%S37Rn{e5OQ_B9~Y($9(t<>>A0WsaeHD{1Yf_@3#icrC9OrsnO`
zh5x5-zkB1jLE65c1U;qO#V!hWkoscmhs$bjaLCbicHsa6s|!56uaetcIwI^rcD9aY
zLcl44i!I?N4V`EA_Y;_#KX)!P>$7J!t`XQ6EO1&}IDbB_>@QzlzsX67(sjvaCY%-Z
z{Yvv#d@-)Jfj^T-$zo0s9r@OcjOw&<vN(+1<I#9>76st|(5nr0NGEm+G~q`D+t9R4
z3`}t>0xK#6H3$nTalQ%z*i6Lpbj%#uYV-WY3NBoA4f&XjFl<4%n|M3*1l&mpEfuMe
z+wlK=&#*Phc;O+j95{$e%=M`cAUX2`<@lGGvt|gZ4kD9>LNZ}BOJI%M9zc&hJPR$B
zj6;W=zYje=bXPZcDyf_N-k=WXgA3H9i4?Wzxku!a{ySJFqVE1-E@RITyS9eHLNV&m
zP5-URRpMp`YdHbLVt*P`<=1)V3Kgulij}mZZuiY4rLchCs==6ENS7Bl^F7F5Mp;#n
zDvvDu)#7@xvQ9Vm00Rgc5ai#=RB_Z(hTP2}HC-^36-zEiQx!`ycWT<?ET|pjF{^(R
z*2W8K?9@L?^eO@a=DpMW6{#<4izN-KnP{>Ah<J%X1=>7FB5Oh_yf7=U$3*>*Fe)QH
zt_C^6#6nRlD=t`KF5jfN#2;B!tcX=?S5caHP!lv;4I{xa>`&f+`O6I5j>~mm+2@>j
zfM@r!v*ws}S|!Hz1H`XMd?TF4y@{K)Iv;vonBtx_FiUD7j@RQP3c`h`l=$;m7rS^G
zawYcuGQ(qJtNZr2p*}4<Urt>O79*H}I2mC9(J-puhGRj|DJpC1gTdtyCT~U{WH5*y
zfZ;=qIwgc=Adu?u2+i*qzq(R^nj+pS+gw>0uj4S#)MV*$3yZ=qtE;|ayvkqs6~!U5
zlbuB3^Uf8jb_olsYNp{cLVYm?zcAn)shH9{SU+E^S$Xam1*8aWRDx~y%s15jY<uq_
z5UvPh{6sp3(K>w<S=G_6?o<O{S4UUPf~0fzY6zB03nZRZlpz}cTrsLNl>`((0Sgmh
zRksUB{vEbcKe^^#UJ>NyjU~H>dn-Keo^4bBK@iiceOyJgZ@<>=ncmG<?R-fQ4Y9<5
zV&{aOJnk8f^u8NkS=B(4$1>Bu2ku3sFMH%eU-BK+bF7s-5>?;z!m!9)(q8G_9qLp8
z*m#X7Vi9@C!Y0>*BoMY2g(Zc}qehppDA2>v<59e9)I82^b|oYV0wrDOV72Q&&Cww7
zz6ED}D#hD({z#ppMn3}N3e<V$4l?fnJ{7_W`%Z;~`|J!-0S(Dxghi2;Soc`JQRz;A
z?JNho8EQKp2~NUBl|6xAKvmuQSJroSwY7G%^TCIYh6WzopG11UW+>Yj4%>?}WK*t2
z`Ajva9<h}ddy)Z|Qy|^<=&x;>&<Lk$@!0I)$PEy92(71|22a!@zbt&eIoH`etqi5E
z($o7@l@cK#A!ua7zlDVaOJ!JXs0ftq=||^2FEv_Ijh37{OS-KFU$om;UD-1wZ!)Xn
z_R#PE7YER;u_d!Sr={uY)%Rk$2JI4|F_(T%(Y1Vpy%);T@rX8)2b0_%R>}7<ze@UI
zxcSlc30e;H*cpeWmYH{5OB1%kR9ZfhRB{FIoo|@_rv(IhGla?zmZNox;IP`wrgqt4
zIrp>JLD63{uiSs;fy>bx5u}MBw)Wbc4BJPslhVy@dstp0VQ(IHr|m-P$^2%_|5p>3
z8;LF<G$Q5*1PVaKMuVXIBe8uI<juGD<-ic(3$K47Rgy>;7dCAUP4{op1UqeEIF|Ma
zcPOWg%ig%TAA93wpst<EOKx25j~|eBAP*AjG~Mnt$j+Slk#`aES%dMi59AH9+liYN
z!%2RRg!^fSv=ez$eS)#ur93e!^bQIT?C#U`<y%xS#^RVW6qYO%rfk>;f+{`f$(!{p
zUOBg?9zeHR0C#7(E+nTe1~De6gy(qAnR|dlr)yF3k4Y=S1&#J0=@E!*$EOA=U$4&z
z?{K1!ff-2QuqUblvvY1KKym(~@*h;-0HLmKAUG|~3l#)9Trw15mP<+?2Gu~%zKD3N
zQi*^u7@fXs)wy{w*-R7oG?@;T547m{OuoS+v4KpGK#8lxdJ->)7X`i-)?h^l<4TI|
zuZkZVmNJ|TBTJL2k}|v+L-`ZS>R5+V`D(&f>ZH|9b2Mjt=OX>Ro*h%84rjPP;h@Yx
zg>0C7cEblz*P@}3A-3<iq%G)_h*7f3Kq)Rh9>;PgOOW7}3Y&UwdZ=mlCM{bjy?Z5`
zr%c)=%;MS*HsxD-LwTO0rT*yl(M$&;9(!0HI|n>{WZ;_Urvvz&b1r@HeJ8Shom2*6
z1?747LGX{mwGKOXV2H~OYzy@l60Uv}oK)<pf4}c&bo8nE-QhYAcf$TqT(?o9>ADVi
zWxXzb#T<ivtP|ZcbS3*ljpy|?-%nsd%q46h^9J6YH}cv*ViaQ&zhBnC(RQr!jA4Im
z*$Vy%ue_Yv`bteF{ZRC8;7YhvYZSNZW;j%_U8i_^Cn`nUIc&`7V*dOmd*`TGd<?UP
z&C4IcQqGt=VuX*x%rRr`lsR$O9M{J~a7Ls9$}@BS70uH`A7F_<mhEs=MKpmUtAR`c
zOX`dud=R5dt6ugez&T)E!x(Q`p_Q4+(`=d7z`(Lj#m+gI%3fl;(CQcrMpqVd=1T3z
zTuI=1Y}lH0q*@0GI;LBQ!$vL3%s7{atybo<8X)d6T<X~jxY=2O+8qfzn~d=f#`WTq
zF83NcnBRm0=10EC{1SEQfyDJW&`w$0GxqF~#>(V`-?tSxiY*>lHwRX}V=A}UZ%$vy
zn<q)q`3SkNwdJ7^-4=sxt`b1n8#ph4z<BBgZ~ma~*E5M(vgGVYNCxxEAtq>v`Qr=I
z`Fjhar5{x!^0vH|YL!%l0*V)sSY>qSfb4}}ggq(lseQb*N(Ck+8Pn_njWY|o%<uAk
zeGg3u#eEXq+&uNquC>-W9T#$V!ioWWAK1G7qNnqyd#{K2J>)LdHqf`PS>H5}2Xji7
z>W-6GfU;W~YvJBr$Yw*R`&O}WL^C&B*mW$B5cIg9Y%LY`qT!c8ED1Xaw?DxPI>px;
z%iCGxPfElvWv20rj;qE5Gx|*KO8Gz=00YYf4T2vFA^A34i<sV;meV$;M(j}|HfI~x
zsP+<;<BbU~>=|%zkqy||)V2l}0#BeuZNI3&n*yEZb~o9@{*j}~VyHARG1i(#puDh_
z$Lh<0Coh`CQ7mi2w)fd<3uXm*u`5UOv;$3kqi3SzEXR1~>ZiO_a{Uo<x$7$340Caa
zB?b&DC4QNUv;@eltwc+0kmS5Y9_s^*D!?Js)1js8p{9OwkNzS}oG9P7esp@`<F3jQ
z;YABb=?iGj3S8P2z`zzhxrHcA_cMEmEfCx0g$4Hv@xJrv!pg>W-#Gh^5-*SAoBe#i
zsMZFx6(7N4+A+_fU^##NmQ6WYJ9cTvK{7{ia7P%QX#onLQ_8<2md~<#>*piT-Hp)U
z<CZ>G#D&q!v_d<4?`RzSZR<J}iln|KBz<b59jRs4I(-w85<2i)`As#`zP#O`V}4u6
zNnm9ZcUvqLqy>=GlZ$&ae19D)M>-ogDE5M`?&c;Le6|~y{a1H*j>Q;el{~-9L@jf7
z6TQmyCpEWY$jR2@a^q^-JF(J}<r6q31u?CN*CuF&g=BuY^Wn6?n@*yG#L3-sJ<KW7
zd^ES&DhtA2*Bk&=ehW5R9rBpj_Hja3=f>2kf=T<GJ8rj!5L`D$0F(9904;Fs;f8FO
z=F-=&^_8r#%z`)a0jGDcZTl^jO>F~PhiSFTSWbjZP1FVSyKbN&y}ydU-2;uxQ1=F!
zBHyP?jnfR1RGxsQbx>=I+rknh>?yMVTNy(z9@h=r+FSvVwP_nyteT(il&nGTYjBSf
z&Q?+;dM)48`f`>F>>s&(7w&1RIrjRx7y21+*$K^wZ(I#I0SqyKa#UTDKeoG)a%Ca9
zH4IV<(~|Il_Nm$n#Ns_5&l+<H^Hm`MYirYFdG>m}WA(V6#@@whx96YxHvsvW9Jrfn
zedk|TV0vXG^<2=gCJlPwdYjq_oKM(!9cvQkBMTRSxmJr&s3}uu5E)3x^qhrL77Ka+
z1;+ZFgV<b!80w#l<3?GLH5?U{5Xa@O1R3&$pt2ym!O>Dsp5Hw?i-K&0Nc7i)ch}IF
z98c83^jR`!?YkS;#0VOm#YVSus9pTYVX%58A1i8!1Q%R9;o=G%v5v*ryF%gy$^Tsg
z8X_kG{)DiDrtl%dt?t?SI^-InLuX?128WnIkahQx*_uaAT?~62wuLstNR;nhQt;+r
z#!Kq^OBeoI!G03z`|)3cixAJ{AFKF1k52%kBi6Gx#W9aA@nXR^{uN0%vF?QT?)^Z3
z;8!3>9b5egw~8kR@vZy!qa+LTI4iukKzw|ebwkT-A#6#jvdx>$b(-aXEX+(O`R6gq
zB|EoA%&-DymT)BJk0mx<<>@2FT??GVg@Evr5J1`Fso9B_jLT920WyUO2F_5Ybg69S
zrYl*Y1XO=<QR~_!wq?xz&y1_3L^nRGp4UthD?pKg(Bem4$su03qh_mP7XLdZaV~Wc
z=l<MmP~>gaIu}^<vm*24L@1x4?TbPAL|3B5vGK4Of`&)T;Y4th>=~8A+2!7C)%q(n
z|NNwW5%RL}Y2QZ4=eC(p1F3udFkzV(YXD?RFP|Nf*ny1g;VJyv_EN>w&FI>L(bWju
zhw$L@YJ2(I*2YTO3A#$>`}pDYi~GRyT9thza16#X{D6w`%W$r^p^Q0fOqscRar8?T
zW9QUQhNz&c_X!F5uw#0-4UFbu(!EGwi(TWeJWns~@An>xYg6n>B&d=GPqOzInN|B>
zx+=5@hp_k14IUG=v9yIus_b?Tt+HOtV?;9|71Y&AKu=cc|Ai)mE0K)-J0P(imO;?P
z&i5L7ruvWH<MxnwPhq1n3ptSF)nCrNE7Sl%Wo%oozatjzUo07K=~i>f85)8oNP9_;
z*DdR!A99lrT4R!M_uw#wh%j3U)~>9y1#aO2GPYvW0QkfQY<W$-N9L~4-Zt*<FN=nW
zW&FX;!iOy-mf$m_BDH*<!3uTiz+y^wTBPv&d-+nIBGx-!MYgdPnbr)c&-EORZi+*b
zo;1+qh;kb>MGt7_JnYPy^;W}w1r@n2Dw30<V(Jvn-BKZYiho+ad~nQm2u{;R4VkD_
zIL|9P;s!TCXH?p3TdYQ!&1xRu${FCZS8P>G9*!ncMy>dF{_pj60ko_Rq|~aa0D&Ya
z{#jp4HGWi(`1!Md6S|75A2raMB#95<;^RWT10sSozM)m4XlTFLs*&H3-Z$ItX+gJk
zZ{8upH0k*cg)V%arR*n2mQ1aT$ebhkuVnUD?!xIgyU*^-m9qeyBqGpoBnCSXU&X^1
zgmcOtlFC$ZxLRoFufZ4f$rls(k$Q<&3uCpSsFy~)d?weW^anlI0;f4)#>xeD=Ci&Z
zL8l8!9XLjxj0-Y0LR6wlCa!f9HiMs|LFzIQQ(q1N6-lV2ktWqz+W6*WJ{;;Kb413Z
zn*@tL3wd3_TRFb#LF)Lz05NyeS#Z7m@T3lQlRxp$0v%IZeqz%#4-U@FNe@9NiUp<N
z<2&ttB2naM5K-s3%=bi+$rNH@LIXg#M)*w)iwj^17R^ERErvoav<!$OC8`rq5t?mO
z-azI}{HY$zupl0HdOW(f3Ou5NWDxg00-b63X*U#<j66&WTloG*j_(~+7e85?<g)Fn
z@nd2*l6`B75TUP^6qP#lDJv_%(@h6ls6R&KZQ$i2_IwU_6Hrx1FDrPtQhRAXl>PiE
z;04)Y+6CAFV1BQ2=T}!3^~S~JsP%0#3SuG7@P1*PTq`K^b%E`xmpmR$)4*ZX#yo6!
z>MTQ4(gVoH-1=*cfnbn=V15~-O9~XCO#(lv!csc?j^(^}asbr#$iJb#|0TbumCI-t
z#nXs7`7X1bLrEzD+DYp)Kjr?aPiC=h0~~muXow|}msHmAx}FD~kv?E+rmZhu93QTi
zMW;M%rB}NIc-fNlnKi^JpyYjt$nDoV9JEq3pt^ICcK&yVB;1b63S07VKdcHO2<L*J
zl}nJ)t)$8_N&Q$Oiq3K!+Z`dqabG*yhkD3f8XPj+v(LT<e^7CLp-fFC>zc}m-rmNK
z{|$XB6uvFdhMvVni;(iVV-O5?pTsM=-?6s#Ni+g281SJ3GbgVtDR|f3{_i9n2OkcT
zUN+RS;o)BzMT$x)ZBuF#R2&l~9*W9LUXVtzNJym<V1~qN*s7v)Ey%kVS}}4`3UDZn
zO-sgYvB+?d99??k6-SBXh;CwL8EsWj8L}8y#lOFR*bn~7C7eteStx|x3QH+w0pB>m
z0omyRScxjzN8K>xc)jmDf`3zG`he9`$XlemMH|99Xoelw-Y?c4;L4&P$MQCP;4<kY
z?Y(Nl91iGq0CJ#~B==hXNBlAzz_$cS4`ILZRkZ<H!^CaOJ5e&|3|1Q%<dIXJQA8(Q
zTXBPK2~WyHWR`t<5e$<f!X*t~1*<5397QugmVVdA>jXFCnv(y;=ARHRltBf=?P<xA
z4fX(y1k7<nKXb3|{S)zZy?@4U^in^qnbm_3q&)1hq(((P$o)^XNK6^Z^VepRSBUWY
zT#FBCiG2!wiK$&u;t?GpF1xhp^79ACyEZS+^PT8@DAfIKmE-0e6h{q*9|t!Sg&m}$
ztJv)>r=#r{dO2*JDJ{(<vBu5sd^eu$X4{JBf#7QoT7&nids1k|CU<wIYu-lv+|}tN
zz`b;3sP|M7+ohn!o$IGirZcxoFpdDCoXs%OwsSBiUMbyr(7Mi~#RoYj{W>bJdl(<H
zID0oP2KQ~FAh8jdzNZILE?isXSc5?lY^%BgNw-0cCy-MYx+BW0Sb@Ho$uA1FbAVRc
zVrQ#%sX|kG*<|iGkngw9`(F9(c=4I$bnailoD76opRs5p1j1{iz;VJ+*6pSt|L#VY
zrf>$D*<rO<Pgn8B%_#E4;x6t@=-ys$vB=}I`Q%%)%J7e4wB3KwwwcR{a}8P9LA2nr
zW9x-A)_IiEg`V6U%~$@s+n$fciq57X=1$1pA*%p_NEKe(6VX5iy~ZCsSVw#3ByKF$
zkC|NBCO$@V1o3SCTMlNz^zl8t#~dz#wkPiC{44zN+R^HM=449Jm9aEvI$ro}*XkEF
zU^VLK*QuruKQ-c~^XN*d%T_vzxexkp(QRiYabAsNcS!Dgfb;1jQnj$>EF3J}r}G!r
z4nT*%<=Dj77r>bpsSM(?Be!V0Uc}HY6&73XX}xG$m=;${!)o<gH2-W0WspEa5z)>P
zg~CSh-^l<eQhd1h;kS0h#`w^E7?uLyHvT3y>92E8fUAa&+Rly6PSM+HJqC0mm7L<;
zcVf=MYHt_nyWL&EAeBqS22wpafkcQ~m80t|vQY}4*#E%}^g8UUW&7ZQ|MBH}2m`z8
z6u`R<nV>a~XWr=m{T0h43Vhs!#Ju(hF=fkO_q0ahfgqc&d^qXY$>o>cuLEUiRc&`R
zfB!VeW(W93o01+u;m4EN1MGzh(hA${s>2B7*U3T4aPAhMwb~gk*?4U6gPa>wS+bSm
zXYUW&e$6TenoVYYV{EKUsNL&Q%|un0z8ah0g&3z$B$%v&XXJyd`uRa9%^+(QJjALX
zm7|M-b=qUPW;Y!yP(847Z9N)~1APxHjnQ0PG#cF5%nC(Pfw}75gdj1qM@sM8tRZ&p
z@*#?=!HHzr^ts<cZFuf3)^D@8r7=2^JMc^Tbfy>z#+|m9Qy7RXYBIph!sQeX(4i9n
z91lI<2^mKRg6k0?n7Il9j~V_meiKlqYsOuddl#BKDvOJo>q#;Ba;q!^X}?{3B5Zlg
z#M24Rb8e6|egOatM-#PkRx7Qh?sOIn_Ek*$D6Q+)?OwAT;;ur?tR{3b9Hd+|$naP6
zL^4pS0dzLTPQ!TyoDna)d@v6$#bD{O$S0v6pA%1#&O*YvJe3%^EL|SPAWc?<Mg+2I
zy2wk$M1mQyiN{oVrJ+*FAs?<}lLS?>A%|5n9O0=aZX?lglP<GWIrk_$2fxP&R&api
z>WIu;SQ1sLL{oe-9Eb3uHQrORePkavK$?s-6r5QJ?;O1*FFKR#D&>b19yWe-hbE*;
zigS%s7|Gc~F3P;tDyTq8n5|%9w|(+BmR3NBh?JNX#WuuV@Rui+MRh|qv7m}q`d<4<
zh&Yq4Hs!DiZ3554w_3(hI8@e(KumPB+fX5{lb4%pY48j^Qv-bUXA09r8YDL&3#6e0
zyS<>FcW1+04IqT%1Ag%{2jw}E6&oY`<_v|ffw(|`39q-#ee$2cz;WNu#|bcVH41?C
z7!s!DDsydTopT{>*LkXyZIB!_BaG_`BP2xG9XeleCv(x38shCKy~-2**t*JX@(B_y
zThL8i{y`q_pFtj5YL#FRkf4f_Nt%Nsv=998|9#=U`FiQitH#6(m;wZGV5Jp`GE@4T
zuNoOo`cQuDl9onOnsqD}h>DAST+110K;}HJ28_Akz9oQM4OVrM(KLJ`e6I|BG83Y2
z7rPBkyr2SQ_nUr9rZVNj`IoSUR446bb|=xPqUO&OFJS+Ajd+ROW7MYTIHZ)>B;c2z
zr8Gs94yp^RG~qY&Kpyi3Gd@<Rr?(Ct(2SO{C)i#)xutEo)IB!)vTouiv<}+Etsz1A
zYy!~h)ZX(e(>q17QpKrMWAtSh)dh&bQe})%?EYkLj`Lho4(d(I3k2eigb|uTGZ;0j
zhk5E(S(qR|Oe<H;$fWf}@MqI$9dz43Ye$^Dm6T!rKrc#}=Oq;5H)SCq4n-r~lyCdR
zdDA9V#D-MJQYO54qWDDnlnPIu%V!GVCZk|7O5%@=M!vzc$*+KHOQl0sYFwOulb~_x
zm7$G3b1(>Fvw&`t9Xq}2G0DWSh+Qg_PTYt`CvTN%ZdY?bFMe=a_;8(dK`qFZ;ykBC
zG_7>lVNQpW0;J21+1=X(yqPCRmJtr)k<V3VfFv~<oy=8*8z8%EjSJzj7BuWELb}X)
z#bCcxUL>boGyEey>E4(be6MBmJ_!=Ztu>0f4J14$F4*w%HC?pYt#wv<_!HSpR_HS6
zc;QFRL=#6@ap(A*3Jmupk!m@~6B=J@525s$Vgjcs|GN!X-p0j*2g89vC*$Fhn|tP{
zbN}B2=V5l<Y+i0Hn|vxomv_xL(jS2?HPxS*kC(By{NazhV||~bqB}LbJNocL@%S#d
zLQ*vF)`NNlG99R)K(8$sCvAwSZq@p)u(#HxL9*$PSq8gAIE&h1{bEHa7g-#WZ5rM^
zVfsbek-IV(!3OMV-GIRzFl`_df<V`?J;-?Ga$#{GIttxV0rGL;VO9EE%Fs~*XLrZt
zPI@=S{C===n_V(Di{K`S4*Q0RM7y7^id|PpUJDa)FQwfsN<8`UGwBV%Qh7|CnJOJC
zAXJx^EWYs!fu7sTsZDG>2%wCxYpq1w{8MAdh>jJxAZqW~E{&P5Nj#wH^0q4=a;RdG
zltn6@J?$Us0$TE}Yi`GhUX4pRY7~NsC+5+bF-kOy%BuYrvM_ACX%-d!LpUBIYLhEa
zJKeX6aryX(lH6>}ybj0vVeYcSW@f3CxcH;n5DB?!fUUZ6Zv|3|a)uFXPVrH!#!+R6
zyw%jZBj-L+lesQW=jqg3>Nom&YZ+S>781<*(L}Rb(9ft!u3{fNi1IRs&dEz>elP(m
z_`Rb(DN;bON-=?9iny>q;%NvuMO9?^m`1{s)M@EnGD(|72A_=5d{_HECT<a|bfZt&
zwS$7_$RS2m4xX7Zb|7Ys=1N&Ue7eOW6#G!<k@9XVBz^F^r1r{v!y}-Q^P#e1W0m$E
z7#kEg%+*K&`@DsRkSWq0Mukdo%874O*ydb^+PCyuD}3Zjr9t7!j&4@|PgC}71xzVM
zl7WoQLvlpRvSL-^OAbA*n!@$l_6X-DZY|t1YsxO-icD>c%dw!IMLidSzX}s>XBOk4
zil9|}wp4loJIArVZ9D^^=Lu8`p9*FsARzPW^av^@I1TH$Tq}76G*vy2xRwZkkTJGQ
zvBi@7GWeKkMTC(cjS}2ph}_43N5`Q)Qz}MLH7$f*rWYHvbNLr!x0wW-ihV!-tH=rL
z>Qo5<4?{C&X$Y}Ls=7d{Zz#)4Fv?jBj~-DtZmx6(XQP|!ZmCAYd@O%b?Y1t2bDx8+
zc#nTH^{&B+&VuOOgvdrEHsqE?tuPjmI>F5&4Ayy&2h<ePs8WL@5lApOetek8C}nX0
zy=Dn)^B6<=dgppoblc@)^dY@a%l)6^&N8Il)039b{t@?PsZ_nJm86)Tfk__qCYS4I
zNyQ8nW0b6ClDVD`k8Y1aGo2Kax9*ut>oF%9nypq(qG(3$&DBXQSD#kG1(X`<&6P4e
z^99cNg<fytW~$a?s-bQh^KtLGO5-~tB%e!pQNBXsO()B8PH_5%lam=ekqTX>`4Ch0
zj$>Bw>&Dx1oZu7gk1Dse9udMj=@#LoK0vKVzNpX)qeZ9~g)*eSg`rgeT&6LH*70R_
z$_k)s1)n1rbgt7>q#?3eJ0*J?&TFgkYRe{j4BITLz2(_D=2`vfiH`BXrYAd>@`r((
z+~2iQY-&C+(Xm)s*B_v%LsLzWIbd3Y=MH71F<$<WzuuJ5s%h~Zi_5R8pLxh$%jwZ-
z{m<Vb8P31Pe-SZ{r_}F$qWh>=GaiqRXj&6F`=Lz%KKAPuYAk2$^XwA5?{B4B0$uRA
zz@W)czo@~IkYMKZ$LCs3)-x_H>IQgsT8(VKrAGL5ejoS{5MP>%o&g9+fJKTby#u{!
z1jjK-sj6UTMGArnEl(s;P>vW&$C5ESK}x?s9*|ayyd_iJAWVW?KsL6kWwQPtEHvX7
zZM~<Wl}3+zi3d;UcVz@u-=-PxN7RJa>6BpGi4Rb)TzBVdR!0=&Wz^gh!^=0j<w15G
zLWPH?SAQ`oL#OuFbH5w!B8qJ+{AN%hEfjq_;AK<fXOY{0Fz>G)$V*mDm+@_;I&q<P
z2X(#&5bP~Ic+SiQiI2&pdFjjjI&Cj()rY?Dy!?Eo{q4mU#22MbdD%&|VOS*;p>wQH
z!x5@5IMMKZcx2i{ETA=N)-A8?)_daoo^H=A^)qad(Jh&Z-znS6N%bmXt;MKZhW3Ui
zrfJk|>Kkw?fV#yFS!Zr;iFje@eO^V@CHHl#CFn3XgVKL|w-N|XVBxkLqKYT9^xw`u
z`q_$XF)YZjU-hbYB31*E8^z?nVJcZ04g7~fP`#WF!+Ma~`5%Uh<<HIFp_AL{r@41V
zW1H{&04(C0$KIM~*yYWk(vvz7{vdi5D+>`I26#tATl=3r&BU@&Ga0-`2_QYaaA|oJ
zM}tIh-z1>hH+u>F04@xjRQkx06HOG3>V<`jejcw?9c6-h^%tapPr{J^HyRn&g^N!9
z1+aggIrfTQGs`xq{3TX2m4fH3fuKbqP=O0Q{s;XPv)tWn_G*~%P`s@*OD4=-RF7I0
zOLeTbMsJd0)yN`IYyG+8juHDc|2<OWUX3x+LrUM0&?1(@N~h><>M3Ex7#WGP{jGYe
z52jr84&G9!_2td9o5i{j+;`}k#Q^d7oYQ$)Qfic)H`+&Mb(7X&?D7=~c|aMYg(=eG
zv6VTP6y`2mHgj9Yt%B7{ucONVuU5}AJC+k>(St0N*rb*QYQ@v#g0WoJdUW<9@kl-*
zA&HZcLwN1`ZRf&Nd60VN4bitu^7(pkoEB6yM1$s!Jo>OXqBf7#iQ5OjvwDzx(P?-B
zRvvg%j_8#g*pbo!X>v4r2$#|X#IEhtsDbq8+QW;C^kThDCm}k=&Z@~#%!DOmS$h6`
zD)i+Xb_Lb5(WI435pm6Omd-RZt1sbr!ht}*^&zyn1VqPA_kR&L%b-*H+IdXc^`CzA
z<p4iGz`wR3(6WY~IHL<=C$Tau5XwLu$<Ujdn-@6CC?u~&P8KN!7`>0|Yk~yhDJ!37
zB}Fe`$ezMxFXg_{SxA!E8PO)`A!pM8Jx02fO~))Y*gzM$8r9N@jjrqa!lmgKt(`CU
zyD`$}{zCL>bQG)6hk~btnPG$H4+5b!c`;r3<PWo;x+&3%db>yOa&}&mI=@hgj&$*f
z(NrW9VXnj?aiNy)Mr4F^=7vX7jK3Dz)X<IvE?#ZDW;}-^Za=t^!q)#KX(^>UyZVli
z=S=2SpS+Iw<aRufTaT;T8W!LlibJ(Ht^(V9p-_^iNn(f+On`t4D?T>sB~6DegW&L@
zCFvI<v#q~h6N!dDOH-GdHuFb0>nicolYRy8Y93+{>%u?$S%74UNjZdauA+wiM3t};
zaozh{`gM)>xiY&%(%V%Q1e3L9?^Y@6%oTqRR1}9nsDPDL!qx~>jZ7+{e-sCC#O>-X
zHwMp#M846K=F*dEE53k#8v5niQMVzq0yceVasy<xjGRYkXziqx0@#fiz=(y?hlZsB
zJSG)lpgXpleSj;WQIxcsC8~&Vh-rTOq3&uf;z4p*dEB%+7TTqTti5_d?WD3anK@kj
z-2)5S^k71>jsPwH`)q_OxhfYAF<&8@QA{?BV`gI3twNwg_LWbzu~`DG?cpKS<rLYv
zK5~Dz*Kb7q!TP^MtC7dSnpsO$)n7g1KG`-<Dzax**OMYZ@93_&#$L(@W62KXMC8sp
zY{G?PJpIls*>ZEf82}z~Pt_Mnx^sX435z_qyr!1h%_P&Vt>7F}jW#yB3GUFqO(sDd
zjY;rF;yR32H<(TrYBUV4B0FMG#3fl$`cy@BFi4%D*abDjD%^@dCWB6JGeFWXS;(45
z%1)JZ0}ZuoN}#C9MWTwi@)sa{p?;0@sn7)=^B1(Gl%3}s%%VWnU<wYuB_Gtd&0`>}
zU{A}b69e4wq!`OtA+~$UT3R`|N_KnyDgTAqZOxX&Q<bcn{F_88m_zFuHm_%laoSzc
zSy_PQ2Wbkrg!;eWI0WkVz7$hux{6&+CL5X_@|m1Fu$>8?Kxb=$!}uwU#dC)ed!ZN1
zrsOII?%D;UqIxbLm%rBUSjT1aCP}(pvRViHE9oC@#tpqt3u0nui~8>g*XWhet>0Ja
zEZ@M7a3veEe}3H=-g(>mdQD9D0-DB0L>b0>>L=oTRa=FUNitPYY$f2feJxulS`PhK
zPsJX2WyPF14^@M?W=tx5nNBGY+rLAJds5{y;8qKNnBJ{z0@!KIr;oaT_?DiXL|bu8
ziId4bilQedrS-?_75=@kJ5L9?(M1;A=pQ-xn`={SwG#V;Go+eF{?0tv8TYI9Q^!BG
zol5HG7R`ll8Z?;3;+)i?liY%ITQSn5Uw4^U-(F7AGlpCVmF-uCeMAkNVwvvYshcld
zK6C2g8^Xk@vZNdc<~26EZHL{F8mavCO#Y+dB~l(5jJ5;+1tRN1DC!Mm8)dUhSxlEk
zc~%y7At~%&wX>8lthES&|L*a2V6~LyU4>4~orvQd6+|#R-X+^bw3<ZHZl7zO&r4Vb
zmIB(z{RCb*;Ji-#Kz&f7-}-P977yYvz1VBq=Q|5@u8Y$qejAbn$hS$!G#a#d4%B}Q
z@gSMt_nDK<>lLMzkZFCk*;(}kdIP2j#tg#k(QbWO8UY}cB}&G>>4Jvjgx9rT5A0T!
zqoAAoH5?pdrZAL-K>H5m2VRw=?|$wnbEkHo4pI<oVvUgBk~UBC9vEg1E!x0^rT$ii
zPY$H@Gki1dl;!X*VKy3FhfaldoojFBv%<tg?$U$E<b%0z;lz$>E*E%SO4D_F7`=Q4
z3FMa1y~p$1iW`NI!VawLS@S)buXZ(P9Z@Tr`VF^FsGgkl?Lrc>4hd)!#M?JZgkdQ=
zoCYlXB!0Z|{h1v4BpG69y$}BNB`Qq|#tr#MX?(;TVvV<D>v(*#%#jRyj<d``Esl&)
z2zm$<TrVl4)n9h!017ACSoCt0$?6cn@{f6nNqEa_b!$P6SUI0{4b~$tcm?03b|rc7
zriZvQpx6C+M^Kdd3te63<s;LU##3?dsjqfdcVAuJWF&+fI~2pwc6uN!Rx~B8;sxU~
zXhB{5T+~O`a6d3#Ni5CYG+x~Mipy8yBQXaFO$t-nNX#?bG1)9`Mnni4aE)=1!%zG+
zr8Q&_n2Y|n6w+kI@Jd=7O&>vHJeyfEf~8MoL15Yf$M-6$PA5rfv=bT&Y?re|OAydB
z1t!d@8Z5CA>1tfb<9MjnA28~gTp4P?gC7&(n{6ah_17&hZ|h`46~B!qTwKLxdBZxb
zHR084`Rqv|tMvnec7cm2e2Ds8DA!h7J<In{6`9f1bRfYAOcL44JSOuVB+p19b95y1
zuc_#e%RCf}AJaL)uCNA9cDX9USR^Ccb-r)5bsIO+=TjRDmTkNNQaVV3G#VBs`3}v(
zzTuvQMG?PSk}N%?y&UU2ddh22dHP0+O2cs`Gj6~920-CE<4s<}xc~-VTDAm*W^}lM
z11ar0+~fy(ui3C_hMPLS_^XZYMB|E;zsjwN(7fmw{fmq^#_)IIA`RczkD+=i>q>DT
z1_j&v*67wskJYUF74Ug<_lO&L@%Q0$<Ba)u+Sx8%EByIPuzS7Vu}N_v2hx#xnfE||
zE(qZn@AM!XvXr=q;4m7cxNB{v*~Ynrz_;euVx07gDShh#WdaGliS-eEMRi0Lna=p2
zP`d;-qt=&aHc%WEwaEs$c=frbY`AeNH8KI6vp%!h7j1LX+HJ41T{^kc%FKLOL(|nW
zDc#M53)fTzv_o&T1A6A_hjqdrTUv>e0oC}d%8&a=U1s(>AClPefW5yIbd^mJf*Egq
zumCKXMJu`qP$-v&EJSaO-y@f2*u%SB-sBN=j!J<Vx~WpdM8;lWv}M6m8NxOBw8eCr
ztGJb$DY1(0kvfm&x$NRoV*oKQd#uj3`(RHX(0@~-Vg;b0Ku?jcZrZMpg^$KHSXV9i
z?n^Q$LB=>G?@@D5unp5y&c~f$!*-(USTWVV0glT{`Nrw?k>UVt?P&Zex$GreO?1ZX
z<+atHS2wWm?ctfPt_qE;Xq};DtVuozot4RfbLlHgA=!}Bc#mDuoJ=%XrpD2EG#ora
zFX9Lvb(|U5&GuxL+q3JFnKVkv77RkA;jr35Wm`8aRjINJz}~9&m;3AsnYA{<FN=)b
z_w8pF_hlqM^HFD#ravm1_}jg<(1=<_bLdFrXv7!WevA7+6PzfYm)1IbS5Twl@}}ft
zu-MaQ6<5ZLC!U2UpG;SJgq?(7O}y)$r7v<7u$=a$$IPQxfh3vF8#>x65c_9OEAu5K
zMT&BD<)fbHne;x2136_v8M1KF+Y7zX8XEVFOj-O1Poz#Q=c=kbrSZLkjrrIL?v?0C
zXa)H^8(cUF6A|rt6F`A%nNuu+1D+_aXFp47L!8ONWy+M(Hhr4$jYYb4l(55}zq=Uv
z_+=<tdw=%mU6VIuZkLrQ?y9iQFS{EEFU}qNQsDS@kGxV+pyN1%TOL)y<;uBO$fLf_
zr-sJBN~72H7+=R<q&pXhWWf^ZBbkZ7r+UN3G;b#Zf0)N~2SumH{@e}QXRn3{Kyhg4
zUua**BkZ6DIFF9!IdLl{Z-77%D`%7ubU`=J9t2rfLNmX@*GL|vVS}$@sYTf}|2O6F
zcv9tbil?3)y~oM~5!^sR$rPx-BmjhuAfAjffWk+Rh)-C)A3-WH={O8st|ddwd9CSK
zQ0Y653B8v^rHP>2uX*m=vq9(xy!N4XP$I)s+lIj(z+MB*3SpD=T8nkk85NZmBfeT{
zV;9<im@=;fonzE}kGUt-z1CJfgs+_hVrDczZ6R$s%#1RPJBGk)C2b7A*c8oq8;X;u
zg!+_2K<LsAa3@h*u_hosL`Yt@wJ4d^TD`!bh=m^mSvv-{HpFnkr{^REm@m)c2cVum
z?u^CQ+0=G9)aR3|wRpI&k6lt1U$D+-^*N#&-<KC&5hTH{Y+hoW@PXiDNme;-A3)r`
zwQQvSG)$s{ZhEZwJIlo?5vL(9C4Q2p$!Lq%D*g8iR!$XNR!i3%E5#DYbayTZ7_VoW
zafM0&MN6)Ze1=vNjnbl>2gh{}oyw8JTTrq~$60h-7Dp_#Iv$RW0TDiDc+?pghNj9f
zZQ^0o4rH%;z|!vq*||8+^gY3BGe0TPh!LqLy5Fi4TZmfOt<NI_wSuV>U%vtUp%utD
z?}{wfE~M<U$q~-pZ!8dB1}2uu^ApFfo$NFbYz@1+qTCZR=Gi#<K?E#Wa&tq$vA&M?
z=V?vA(lv2(&4o*2FvwRVkbOWzk<`hio!neU^dQr5a+aMwE=*oOwlX?Um)lakD6U7@
z+*={OSWnzAu{<9k;BS1he#zDZ=EC0fstq+Q>=1JTIu5VETE}K!&4j)ZZBEt+H!5g!
z>14{qm<H*%CWmdZ8UY#+-S;bSUy-sOpL%A3gXa;xbySvj*r;AfNe!7+G~{ach*&R-
z;Ie*BUu<VF8NXt0M|2t8`&$cPW4pv*3G?u$+WTUS{R6?*gTAbE^CfIUrg*s-_=C;&
zH92l1N}N+W6yXJ&7Y;#P@LrO*tZlgWBDzLaS7+PUs@&DCgxK_U@;+Fu3op}l4x#og
zqIN+Q*&RD2#H+(HXPFjkknM8@h<2cm3~sCTP^>a`NPay1^YcC}9qZ$v!#nOK)q94p
zC~FQal~43G#<>`?p^USwy#=5Lx0UKOF4;8Gy`>{X7adJRnH?*`>Uv6@yK|R6m{Dn>
zkhH5^rdag^x4vhs>*Ssxv%NUx=r?9J9jF6IQ@(ROD{hd}MJqu)qg=eXUEVf;G!HfS
zRkl>1*^AJ0$$7aEG5EC2SJsSrqOrtG2SPt7T$fI0<MJ`{NeJX1+CQ+eEw2NFCP84^
ziUiRXX8a0ffXLuPJ)M51;Ehim{Aj>&Q{G>n?%nYKvf&P%x)mzm9&(q%*{O*kd<aVs
zav!e|hGT;E>Y-h*AD4upyhZ!btgKyCjNq)LeeRHq(j`Y#hA?YxnklR&xck&{%`7P<
z5w@jc&!5R*edul62W0wy+4f1elvb(l-_+YdpVd$_cvG0#%p=1|$1KzCQ*mc})|=a{
z&i!r+Pwe*HWNH7~f5<Mq_q#8=^G?)yzzyIJ|F=h_ULS%)0h_<5VlPN%IYq*3In<oZ
z&h71NY@p4`hn%A<Su-E3FJo@sczwUh(dWnhqfds!Xe@aH0cXoD75gy|J_1iUYZz%3
zQ<(lOk0maq4N6-^MbL|CkW7YGuCYVYUuwc&FQFKXE9v8ZnY~hW68jF)8b??%W>v|i
z{_iaUAa8*4*gOf9RKj#29ZO=Bw-KjjGfHAW{seZLqGQ>{AVCe4kVmTMwRWj4+J-I{
z;ffsOjkpQ^WBUjY!#b?9!Imio%4Xfdc6GYniU#NUp6W^4MUaO!`n(VrG>lyW)JwuT
z47Zsx`Lm`qleBn4M+EI5jNoo0LGy@8uT+Qlu0VFeI_x}|(Sr=&Jth-vN4CI1F)qhV
z%;i!c4)R%K-zVaw191(983^pOy`EvmA#%x@byPbJouB_^EA@TzNwm2$wvf`65*y&B
z)pz_$-AiNzZ*%NqYlR6Z$6ufu4cA@oH%8~5sWXu8M4Nt$yvf|4+o$DcbzpClmv=vM
zJg+N>eO-D?d&C#et*tidvB|XCNi6mVc<HoCgc_cOH2J*HbX~#|aS%4ZL!1pXRlUob
z^;Q#_y>D5NM$LHVta^1WcVN7OXr`TBW-W8*s+rdk1-~qFnblx-&+Cp7`ViPSSx^1W
z>H60Cb&D*88K_a$zH<sShlWo=b2~$_(@}ESrPyDWv>Xdh3VCDYpxP(-Z=130Yvn@H
z0~SS5z>mVO3<raCZ4(nfJOsLByJlst(0$|m;f^VV;bzu^SW0*qCk&fBv`{TaVNe7L
zIDi#57vtFYE7bLvgX>EM|9K~ddVvgDTIA3XmR?BfS^L*}R)64!N%6bE)qV1ZkoeDR
z%C{n;a|Ux?JG?9L_~q=<o~U0*J6Y0+_t0?;^Fw={`L!Dj9zESOA`zNdVp(S7!49nQ
z)suicoc_;u$%jPC7FiZ*8=;S$O`L_=DxOa5Okw=e{j&13`H|h{373l2X=b6g_X2Ao
zJ70JW3;kH;%WvsvQQ{^&kWXe-a2Js3cdl0OZ1_K3tkhSFI)@?m<}8E8PgD+5SF>9p
zYpg_Sj}BBtZG$HOxVN94D+uPx%T)j``2kBEzh~Nly5H1snan#K0&_ur%4#Lm9o-yh
z?4cdn;ToBCFrr%uUfGQaJU0aipBc0!i^wRnl-I2E(1SjGl_A1^-k{m#6`%Tp)K+@v
z+f%NubwZ;LM!nu>&&Y{rvEQHQ2<^u7K)w*D-kU?y633k+t9TuKJEEP1w^e*;0~Fqp
zlJ`*XPGBa}C+r;eG(DxJtqC5k-ow_`zICRxB$?aHDDawc*HTDHqyQ=2Y85Q+QgX@A
z3lw7~4Vk+h4B?uQZr-0Xw7B}(G>P0n?^j1!t>Is6mQ}{cyra(Vpj3Nrrip01@^Rrl
z%XFIbvBlo|hVaUY-5*hQw^v)F`!+Z<aTWxRT}8>x*Vpif?1=hdt&>F&+(L>wla>LT
z-SWt>N_21-s$6-FWCQZFJI}srvf-Sc#Jg$kl)kaFnUFDv3<oSWgU|Mm7__{!g?iWk
z_Loi-_Fb{gBzM$eA!XI)%B@9CxqL~&8MDq;sIJCbO$C2bTbbpmTzH<HJ=-MKRX}pL
zVtD{H%%<vl5fr#gf3%rLCgygU{<d^O1*QT<Bof2ov<+hk5tpg|<<ThXIM6)MGE|Cn
z`550{mLK)>B2powd`P^*>xJsM!)r&UG+Pz8Nis$+g9R3|E;^j*)-O&h9iMp3d0h!b
zvg#8ir4qqjWg;QCerhWCD~imhrL>j&ymfLRzC{qiSIuL*)QjedwPa}TlCAS?M(!Ev
zvyg8W7WoLl(a}=!I0*xLiPnQn^oitzC1{c3nn0+(V`b7Pa`%*j9@}yk(jZZ+{X>H}
ziuu(Zc?|Bc|3N>i-?)D{!J95p@#hUvs0*x5VvKA0w^~kLg}v5Z*B<>CtMO@x{p`_E
zZGcYYFZ%)Xxg;x|keod&EiDxbfr_#;8Y1Oh|6%~<&RzBzN=#inasU!*{RTu|zx3f7
z_4wt@ty9I?$)=R_fN$kJeJ0A>FD1^-g|Vl#3}1WPJmeH_)~<C=-lmkQN3G}VtdbGe
zxh56y3VvIqo=}8NJ!5dFFiqIVRyNOitC!3&=<IY%HT2~oWSn&Ol6GQg+$zUl0h8!C
z(H)5%_v_^i?4%G%cAk(&cB%3NvArAoS|geF!jrYiN2deDcc{*fOdF!Z&6YiC==xw=
zY)(;f_2Nj)VvReOKUA8x4+T>&<>LW&-&5}L+}60%q+OKqV6hr9FIh7so;bPnuZOW>
zbLn|qT8-Alzse^q*_vk#Jk!h~Ft2JTY`Q!pyo8(p0$Rq<M-BiDUaLx`a+8zJCKlZX
z?+_`|0z&XzyBC?eP`&Wx6{Q<KsijSKUCF8*gm7@I4m<r$x!?au=i-xe<wQh4UdRyN
z|4!VUHn=YT)bXuwuw#gI7Tu1R_WgdThQnl2G(db6H!t(dsH4sAv$o%h@vGseQh|_y
zDyg=yIuyiE9t5Q~t8YnXsEfUDjeJUiQ6VV4v<QHB`M9*SORlblSh;Jiw1z-CLURez
zALuCr8fOkx_s{QZ6h0y`t}RkR@%Fprvtx^;)nk<->)Fb&%|nm@be5a`96~w5XVNSw
zXsY^fHNNRUyQ%aB-z#^O$gPc?)CXFB<U@5?=Rv;_$BHS<mb6xS)<r?!AjPWJy{xwI
z_j;gw?JcKp?We{=KnjWV@^z+BI4qsgY;I7OW$2kiCf9IzvQ>sN0Yi*9IGDGZBa@X^
zpkc6zPqTGF|7o0A=HRot!<XdJGauz7n-$ria3@V&dQh>&y+OdIQK${9I<iy&+lZ4#
zp5>|HwuIhEoOY<S@9a_r56xf)0$qAW+esG`tQGD>G`20T^<>p8M!Idtp4$f>U_`?%
zHr=|(S^FCkxExaLw5n}{<P~&4lAIS>I5s4`27l~3MuMCL((NntXEqiHyvo9Or+}J}
z!dYZE8UX9_SuuUa$q|oI>SBH8T!jjkx=A~Et`(1crYN@x2tkpL$O@;GneFqC?2K&J
z4y0QgoVZ2M5qAdt(41{aI(y)R3!T<EyV!}PCn$+&ltj8u_QeaGN9lKvj2iGR^snG^
zYBJUen~R@O!k)VqU1U3?R#hAO^Je1H0;!hJZxr;DbaR4F^Jm>6o2XPqNvf@;f;Ej3
z9U@Cu^YYVyTF-bWVlwqC=H$S2Di5PabF|Nrc(8tscGOZq#*gIbWo6<6O(#F)=SGHC
zJ{eL&u;NQqnFCWl;K&k>gmZGg|IMF4AWYpYUsWI^tFj?GTuMbHuArYSdwXqkZIz{L
z%D=I=S3eqgp$@%T6o$AHb-{0rVY83@`)RWZUoc!Wy%q<SK(#P9Cg-UhwNc9C5m439
zaS}OQ&f<a-r(q8!%m+Z#t@7Z<joi|jFynN6Xy9Sc4tSsF8X5N+Jk-@7NI!g%+VM2X
z++~AWqAIq_q2@fO%9z`Nm?-D~I)wjWX{5@a2|jq;S{Xi(*|H3a2GnGfnxoM2rJMTa
z2fOxEqZs||l71}@|Co28z^DpN0gBRRcm3Ld^%jFv53;e8*Udm_M9KLApcvUUd7I=9
zNt5b`n=EBY`B@8v;tbG)nnR$M((v_7j(Vuq4IP{^*6(siIYF+;9PqkMi95ZH7l8|H
zjmGA*$f@Ddu1^8|=d^BXYi5fWv|REsb9-2CJL=KuK6};xKoiS3FQbqX7DpQ1WjA+(
zJc}Ni8h!6%u+z<`w))uQ7#+ovb-=WtZi&#$V?fg_m~UW(9&@o=@OKfNTD*?Cfd<D|
zBR-^uW|oI6pHUmtj#33>ryyT=j`hUBvjTO0R(en0JD_pYU$hhZE_hOo3w)~a+EYn1
z=YjCSGnBgPljMgu(9`!sU!4Ok7HD-5(i2OVb+aku<IxI-BK4*ow~0S~%qJ&&mW2S>
zb#>t2y;@k+qkxO$Wv}m9taKDu`d@>(ym#{zR2IAj$*HL}zU$2RYO2^9zpEiJe;l|e
z@H;E88M#-Zwx7K-qcb-IVnT~p3+k)}$?NHv!L|yV_oVC2muCJ<ChdUG79Wlutq`TF
z&b{iFZfmnx;MKe9YE=6Co4x^!1@~TPuU=zUo_`|{;>MVN|AX~qH9r2yXwZM4@67Ax
z<yoY+YUMlm8^qbfzB|PEeBqg9qNJ6+UZq$35t=LA1Y%8(-36lVEfgQ4)|-Vj{&-D9
zI-*9;2dT^jks<{xT#on=os4o**sc)t^p*+1(S<7FS}#i%;eJh21zz%B<!fGRA=5fZ
z8jpfs$lk=z8DdPImT?}mt6PeHs9&d^14)8x->!?37S|u^>k?_tLchiQJZA&Fq%HBE
z)N0dUmIKo6NfXrTlm5HD%Y(XiU)>@;^q=UaXZ}c@VNzrrDn`wPMb3`t45=t$1$OHr
z{tpgM#_kSXIe+%r!0oH?duLOL^D_-Y0&T3oN1Le}B)6Wpln@2pngCJ&^!_)#0-~e}
z?Ent9zVDJY`Q=`f1lc8=&S5a<?k9*qWA{Zg$QwOVNE?rc-vwDC$c5f|#UC+Kk))CJ
z*S9rpHQ+KaJl$^Q%2H_*XXoS2080Vbls<pmq#oJ`1M^HQXGR7GMcD14y3u0@)QC+g
zEppnAvmzusYan>MGnhLV1v;agvp`)vivpm27DmYj0Af1hr0z5z)0#|i@JM)zdf}dn
z`iyll6Q+yNR<bE4I;kB)S#xUC)Bpxd16r(I;1X4^7Ws+KwN7~&uYU1+R>g$d$yz8u
zP&M^53fED1Eg)n&=0oo^m=cqwDC|4PTI$d(kras@k^Qp5e8S~z<?kUc<pLTgx)1TW
z7l8|zRwQx57_o*+^@qVpamALo{r-B{7J`chPI%QJ5IwFAE1QSJ=1yYq>}lDj>R+@G
z&Nopm<L<fFKR&yKqSIkJ1GO7X<sm7Wny=kKpqW1|FF%3NuQ-t%+!tbdCK639eDJjX
z3d}TmgFGaU1RuAO{l0?bSO5myOz9iWrc;pG@)Y-f%p(LGEyZHVtZ9V>z*+hg=*iR1
z3GjXpzCWK-TIHEYYmZHPIRsW@Sa~jqja~zu1)cV3*+sEiNXSDr=}6UnaOM3Lq;`G#
zhC4iI(!nM+?J1#O$?U(^zWu*te!^lNwN`!7(Qd7klI$1;of%LR>+ApW|M6?c-A=|E
zkPy2`<{h5DXu7BpJ1Yw*u3VT~+Ny>-=+f9m5eU@0tGrSyw>r#jd&#LQ+Jd^>w8Q6y
z%_LbdHE~*KW366`_m&4vE80m<#m@HW*xY`myL#n3RoZeA?ouW|&15MROxo?7Q&Rps
zy5*x>j|kJZb|iqht_b;#2A>sQtc3<SsAka17h8<(8<mLlm86xinvdF)7UdLpC0g9q
z<aF2`qjx3hlpB=HDudkjRK`{ZbA%POdTg_BYf$UDKSwxhXi9M|Cs+p(HcN9%msUCa
zWY^}DSx{D#PCgKQ8BA|n?Oy2nDrJ-770JW40fNH*yXxBZS%-#O01IE8&DWn`C!#cY
zRZ3fB+raHPf<&||cwc10$FWTG23p%=Sl^L<cQHp6hTCQE0WZVgHaq^n#mGp=0v@hf
zvup4Z1AC-eZFGlOeBQ!UF2>|ERD#G1KnQI<>^qt67CWhxIIc_rL9}-$v}hPZyGkP$
zGJGXthJ@1HzM<yy9IP{sMp6Ee<)onH>ccFLtVvVOJAwodT~vg(ky;RBSYT(~%+;ut
zTy@~~w4fFgWZg=Im|01y2CRdfVeuWXcsaq@!51Zy$~u0)k_Y>^bx7@F=D>P8CXS$R
z{Eq_&P8od(DWsgn2AR^*EL%|rFQ_z@ti!y3^eln>ps;ygm2Mfd%-+a<UKx1*)YSg4
z6@B8FY2w!xz!~W8LF@f)fyIXa$}B!OB)oMO**z|TC;iMnUHdn$>|+n*BjV;Q>*=R5
z`8Z<O4O`9(J@un4vAJkRv;l%rz<o{v<UWr^ThzT$FwK>yn^^2Vqh|>eq}@O_7W#UO
z0YR2U8dCJ2RX3KtylONqL(4H8kJ(cLRm~kVB;_ODA_+~p@z6@yrB{hP-yrN#gC8S0
zsXakG(+Ad@jLXD5pnyS_ry&({%SZfFT`$1`rkItuIn{R?^jGgTDj-|u#;s$W&7V(k
zD{CxodwJubNSPE`2@<+xueE~Ct9AOp%aih$Vc0HoNEIL1f9QNupoKaa#N2bve;2%R
zFZv#DlcP{cS{qs`&tHq=I3prSB;66vq96^na+F{hJWED19iGX^Li-9isfkb0IoJHi
zz1K(?Uoq!Q$U?&JlS+vc*&bsI>}>XT%pv80rle681GwSC1lJO`U>)`%GnpqP*hGM&
zxI7UdVJc{l@jQ#N1~$y?e!9_CkPV30+<HNzxAT0%LeFvS=c>V~>NW&+lnrdZt;M1_
z2HNe?FuN$|4-+$^<&6`ad=sK;*!{zV?4)}|WgUs6r+Cwn+!^6(#CT**o;v!HExNoe
zWDy3oP8IA1H=X&J^}?H++gCz?>@g>)8)>pw8(S+j)jNo~JY~9X;;xn$A#YE7Y;^hJ
zBuPr#WX=b_MzrJ=`?S|IvR@my5OY>fk)UFh-Ofa9S>BHh>P*wox8U#JV)80?(WWN*
za$PI;^Uw6{q|r6di2!nlAz_TS>Qa?vTOH9x8>Q!01a7DW#Ny(9PQQjW-zR^pN)*N6
z$J5Lc{Bn2$c8<i26oUf@QWZW=+gWeIM>jtetgCW6GJ2UN_FgU{j5%y?oFC?Kw_k>4
z4s08etSzCf9}WpAA&18B8*|oW*ta$qSu2j#AoP3oYl-T<aFFQ42vRRM%UB^+TV>IS
zuu@;CzxZ}V{u%+t#F2L`7o89MpI;GOo3C=hq`;BsHI8FXo)8UkBc(69XiizjOkCxP
zkMSK4Y{MrH2m9}<_Kw!JuFexejc{n8VA_h7JM6CXb>Yf+kVHX*w(cet;Q((KF;M11
z95T?!0H=^RQMG|SM9!ks(yraw=;vzj3kqdx=jh^btaU$0-EPY(&Yp%Kw&u?74HyoX
zSZkF&;xE(f$yE&!p53}tnx4?fb?mM6xq=ijNHM=!RiVJYH$7vd;Nr2&5>`0RDoupK
zEOAhy89vm_8+*|P$<E%u^XIJ3L*t%NwlaBpS&uG^{rH6RcH`m^y?4&7W9M6q%N{v4
zR$1+_aE@7hr$a?6(ftvLk&OFZMi+_gS+4^9kA?hOA_sJKNKC-cD5rR0%=#Ux$5)ru
za_L)sP|M};9HGjbIv~_Ax1XxF8xOrXJK_g*?@5(yq@Q<fkXk71mnPb!JVRXYe`c=w
z#W>(hu2V8%@uzBZciPlELQa37mwc&UGv_FctiPo&j!@aAOQ~M|WRT#ZV18^jlo!$}
zpmC96qse3Pgt>zQ|1>~{qtmB`Mn$Q2w^PTtOLp3KTJwY?@e@24i^7nJsD3KVoRs#I
zk~O+{>ar(R7uFQqH2y6BMEtJSBrErLRED;n8hH<p7FK=Sz$CMGU}zsqCot3eEm=e{
z^Ry+xu5B~w!8O_Ufwe=*X4h`l1wCiIYVt*Yx{4N4*#l8$R8S%QM1MP5Ur8UIxDZnM
zx%&d(w$E{DvM8ZU1_2}NJo5NGMqy{_sX_V9kZUioWVnptRmQZT0~y~ZMk4lmf{CJh
z5nV8@aFYb$Go%3WZ@I@;BaKj#?A!w?70o1T<u$DUOh+!57VZth_e@<RwK4uCO{<G-
zdZJnNt@=)n4N8Uu3Z@n~jLH0UTjbtyF>leIdqhyil1)EJ>0W!>M7MW2^-v`60rEh|
z%=7z=^VMBrN8v*MIUb(OWCr@MWTrKl;Pas;2Ue=bN%iekFO}rYa0zSWwvn-kmf3=p
z`ms+fT{d&YVb-yemA&{DJiA~u^p2J9BoK5`X?&3Wb_<fXq4>K_&crw42MOycTm6WH
zYk}<w;|nL>eS@kB;WD)@Z{J{oTvs~&WZWY8%BY&$>}5~l(=j$E*O_=J8QWNEp$A-&
zYX&iP<pdMl@QFQnH0aah!L_~VtytbG+x~Q*1wg=Cu<3@DoCPC~Kb8&ca$elwlTE#u
z;*ztKLg~MEVn*6M2FQHs1Y^C4Yo-_YfNd{9?KvVWj-nIP3rPqYzvlW|vVwPYpoHgX
z?`}SAmOEtg7c(J<IzGyGpHO`QHuIHvW6c~~im%Hz|G<2BBek&+W-0|U0=0XB7WwM#
z&#$|D#Rs{3{o0LAZyUDQ$OOiS88uPuGC{g;YcR(FZ^47q;(5uNLbndmXiNY<eog}^
z2+r6|=#h$e6D$p?)}(27QDzb2X~9=mVH$@_7rvt64yi%{S&^D%5W>QTxgIM(ENN&l
zeYIc`8CNvIVlLbUvr>b+S6|ai6_IUdt|0Rs;Re>S0W`c~Lv<PKTU|dABlCJ=%;P2h
zg3`@RySL866Sc|MwFNLRS{>UeT~-YwP{rs(u==r-@6rKDc4=!I9@7=EGgr{*Hj{WU
zH1{3M_?px+I{H%bwS5<37;MVKymj*b`XDCkZ-W05`s6sP;rjwr#Z!-k(dEz;u)!Hz
zPjlw*Gfh98`n7e@F=9A@<h&2|oXK$)9co4eA&EYQrG9Z~Eo1Xd_x`DB^gUvSYAgQR
z-#R=~zYu9lrw`&BpKFhs+T^!J)D1Kmr3YHzeUawrUF3?FF%X^NHQfkWc<#MzpNdgM
z9dmJ!*5SD>*e~lkLJG<KZVF!-7K7X`IM;LTeT)1L-|ytxRi7!RcI^{|NAdLHsO`3{
z9xSVA-#z?P(YY{F)4mu&hiSGG8pvW64f5IIPSMMJRdP*U;k&W58AyQ3Km24oSA={g
z;tbo0s2*I!Ole8iCY^B2#_FF8Q{C_|(XhiY!<J^pPsh-&`QCll4XAHHikkl32P`dg
z%0dmUdoAym<!Jt}Qnhw7TsnO@>_M$jF41KEKVf-&TbjIU7b{|t4+0q&k3J2l|F%b(
z(o7J4m?c2&z9Kg&z-MqMf<Z?#jyGtY9zomsz^m3{*^Q!0;aFfV&R3&K1>y#7zg(`U
zi}mi^iqxk3=))BGuys28-?NrUpmJHr(e>8>4X|?&tP79ZHD)O>dM!|%SYWR3#6pj~
zmdS2clfmCu`LtsGjVAuUKBLHP&KbZ$3dN{L!!23amy-lO55;xg^?$v#>gAar1T59S
z`JC>VcOaQ&kr0sDgHZ5*WifMl_O;WXgI4SvtgF-KQ<}vO>z0<n{PnW``{BPX%zllT
z-)8cbQv(KkQHX)sv@pWT?&E?E3^}S*QMa@&8nQUKb@~ev9GYej$TLO*HRYR7m+`3_
zqiakJ2en~tIVP+~c_FXaE(v(`EXn8Yl3?6b5bD{6@NaCjqpynv%dd+sNZLtsQTvRM
z*M++2#IQof!D}&ZvD0HObbyCcX#j9XBu3#3c;K$VT+*QO4iT#?G+;pbvEhO$?hqas
zAwJL=Py$(*E7zx5zYXkngmA7!LeIZ+1FWWHkUarIJh@T=vDq+gWKlt0hqVq@!n$!F
zp6c;+-iF)Bw_k+}c;q*?fFqHH`Y{T)!wD^A)fv*+!<*BNua)!~!TmTZxR6TjMx#wc
zM%v#~o`u-h%6T!%VkrYPU&Qx!$Y*m-2l8btC4MtU&G5tPCH`uO6e=y=ySnUeO2eBw
zrm4YZnUh+9G?^{w*E2$pLV}d)>J5Ugy6k2t<Yt7boM+!l8Y+aH8?zy=h`xQCm#a};
z&KU-az2M&U;xm+NLuS7UX&|BpD}a1u`hX)P=q9KxRRb$l0et7DfHZqdNI`X`w1`Re
zn<89szwvMP59j$YeKB^>E~52HQ#$ug+lA_Wp}l2*D(!bm4Q82A@yPK;hjAsy+)4Uu
zJZc|R8ifvN!Ge)S-nARW+jPde@YR^et8WE8RMfu@L{K)^{2R!H$7qnVE^n?_CGUa0
zUSsv6p)Y0f3H!wl^==^}KIP<GJDVh@@}HdOxtq|g!vOUlD7C-Z<XZ;jYVN4bkmN%H
z7L7{H3XfUFIuYaqASInC+Eqwgppi09@yXa?^5{tdMS)%;Dv^QukjF#QS!k_8>ri8!
ziv`!fOu;7Q_N*|&_d7NHt~N^dDZ<%Jl`P9WmIkAz(iBK%&1fhC(dWJQY%p#Aq>m1E
zhBsP8nt$;m<&g0zgRoOYu&7G{#b6TQmt4&ASqI)5sGH+c=Sxwll>XD4lOBrksjw0n
zl&qyiLNff(gj=FN4QfvGVw($gO=UYd@W8}f^x<^7yylH(hr==Zfg(>=oC}{IT}7>|
z3_r-ALfm=_WZW{1YzMat32b_%y06ejt4DTN>IBKtzcY_x;rhDoC+)pk^lKKt<pDw-
z>o=}GJ92}wSjGVV+7A7_23l)(3!4wUtPHQOk@<#c{-m1VKm_tIBw9--*wn@WAHK`<
zqGond;-_NwWyryV>c9gxE4q*}3gr#ISnf-N<{5Md&k6$|uUm6urd<LJl<jY5NG`Qq
zccY^&(&oPnPF{|@rYmcUJkm!wvvZi*69xUx221@Eo#=dCYr#Qmntn(?^9d%v_bxf}
zIJNA&<Q@bzoGX)3vloV$ND6E)`9=zx85Z|I?4MwW^hk3=nV`#!z9V%we=3X!?Z{Q8
zJ+`?z8=*P8uH)+$aks;$ehatAA4Y8<Etx(h3^l%97@Z~Zoj1M|fS{ilpe+-rDfJ{b
zg*Wp2@(TN+baUAJt(6`H(~?iqw*tWc0TJli46CZ&gk81sqlsW@Del*dAJ%!OP$Vj7
zx!1~mL?M_9XZI6Xj0U;dT;08+)o?p3n(&U7T3h|4E>OF+<TfU|^`R#(#A_FB0hgu0
zPa#=9MOoeN#DLdVn`x)Hy1LuVeOrV@_hw^_3yoYlas-c&EhLNsprja9{7E710mmMo
zu^KTM5GrvVdJnU^*DtE&2S+{<^tvIdDtf{Y-}A;2+{<ueI-{J@P1I+Lp!5OZELJhr
z*Mbb!S5MYUyMUB}FH@_;C3lXd_fGNOr$3A}4A~dZ#?j|&9qff4i20pq9IjNEGpyaQ
z<RrdY$sgiv0Tz7Se~fo&B8B&3_icO~Qn+{tH)m7x1?Y7R{_Xt4>bX0B2Lto0GI8PE
z^^?c!C*t!n%N1*hJy<#GSr}bb_q*8~c?oN1Sl!4ov}vy^XZ9ijnNmMd@V<+D0fCg-
z_%Q7R(}wBQwSO)t+guspuU3Z0-^pNgAX5fOFPIzeG8vc0W!|znnxkUcvh-(iRXs^x
z`ReRX?TL{a?J*Rn%y3`aNK|J9Iz7G=%8Y@2yYD=_cxiQ&KTy>ONsKa~m$0&{#V<Sa
zemH-w(u0EIklQ7Y)8ZfK63QDGFvBW6nb5XA@<Fd(Gx4U#@Y^8D+Xau$3`>{=?9gyJ
zGkK9so|kIMqdo6Bh_%|O6cr|;s;`paFkbZ%AV{)>$HJJ_sXogS!&i|*OBKWzSv2gH
zkIP}d#r-|SC?HS=f3YEf$~UmumH6FCl3>H4vaX~|SJEsy(eCB!cfFEF4*hbLyOsFe
z<+QXbX{UqqSv|JQQ133-x@=-{9tbt12nG2g^`<Np3$=Gz3c@#OYk(DNZvPJbC$`0a
z^N{d0h*paF*P*0yHdB1IXMdV}5W8jVn7d!JP<z1%syoIkq4*t(#F_;0sSdv%E&3+r
zTUqmS2R-L3b(cp?-p#<Bi<%sFusDNIB@~U7wx5o$<0V}2vw(*)dTT8s!^Wpb``AXc
ze08Hv0voLO3ZT@Af!E4r;S_gP36GQh%iP{wLA5zQ=^VefZ|@q0Wy_}%d|Go{{@|}3
z3Nv&lBVT{k(J$qzU(U>yuLPZZ#lG8|=aU%if3GnMByb)8*LO(=G)<x=vbr+)Qm5HQ
zAs-^`)w(Ljt?7HFu2D4mg2g#v6<4+TU1ulfhnMuO5+aB-n^&-Iu{hKUXI&Mv`8{>o
z0Ci3H+qa(EW0G(2?Wc6Lz4syL*MEqooAVZCW^SEd^ZR)yZr-@lE6N{85arzJE=Uv+
zzpUgfLSlXdsto&^z=8F1r$h%OT<@q>{!EUZ8-eeSKHWpG2Y*WkYTU}~S;5nF^}FhW
zcaj%RA2au4jhTXkM|!YD4u>>nc6;XRWA&+p?1HQ;HP$+4o()+Mxii~870s+ag$2c$
z#e1a3iMQvsv7Z<%1gf8M#@HrmBlD&Ic<tVbD=kf;92?D0&pIk1m5Madke~4Kuq#L0
zJvTnoko?h*8))$$MfuH(1r*L2BGw;;WH=B2`m(<P&WW*d;~PGf*Ni&#OQj~pQv7W&
zXh$pBylv97<i5FE_5ZP$rt(Tfk{)dJq(-4I9g!VpEF{4^$Fsm=HMWu`&gZ-GwGhQw
zIt!XTH`3^ny1ptD3G&K_G1J9qw(~}ZTv?IZF);tE*hU4so;yhBO8ZWPoXdSJrWy(V
zVvd8XIX-2b9EYCM2`v=koB;PZS5;H}H1OH*k*KB!nGO_cg=e-$1CFBmr~Y4XIxIBb
z8x|2M)Z@tbTEWXO2h0w3LESv!$J=$Z&yE6`Sx)W6*j3uxOw&}0wQ__?KIVVy0gFQZ
zd#+QHlg$6R>sik|$%TRFpI{j#eS3##jONVWr^H$mfku^QHBsJZp4gmGtCX;d>rzaO
z_TLa!RLL*!;LvK^2OH2ov&<R`$kPV(;~dyc&T|cPJD{~LnWArcN;|au3l{MrP#~d<
zY8Ie)h?TFqeZfpElq$(0;M9NH1g=U~gY5lWnqufY-{50D&m5!unDzx?2%^+&_LW;!
z)e3Rl`JI5pq17UWEH-&J9+-=wq?6QN-ldg}5&KM(-2yq2br5cc_~dDm2Wf$}sxNv<
zQ$Ly7ygf6q>r}=TMnHWYNpbb)b0};C2Qg;!Zsc{3ef2dJ5TSC`$lBtgO(V4&k;iWg
z{n{rM8BoOHrESx!L->Dvi6bqId{YBciwmFJ#Z4c{;0v1G6D}Ql2~Fo9`6TaM*_UFA
z`Q<{w@|&B^lCs)Lz!%yoyq6SNBc@`omeDc|u`*Yp*wiS60cM<QWLSmV`uejX4<U!5
zuS5f>i*_XwzqWIF@I8AWUwaBfQr&VYK&n5Jt^_l-$7BS}<hN1L&QliB*V)wh31-9b
z4x?3%132G`^Ro;^uZ*yd>}rFkR1_mCZD4n`|B=7d9i^JyCB#{)<j5u@)}H02OVzBF
z_m&dbg2w&|aRpqS(MXH$Dhh~-Vt$4H?n$dAgHD5fBLbIDdKiNeB*hR|7gENxF<Ku=
z@Q8h)k5_mzo8cCXh>I=E3|Zoa`+2wUB3LVjm9w-cPo!(L)1TaL-Zl}Uync(QlMfSz
zFit}csJa!I52Jqk3`<U+1|*{L95pxcd_e0e@?d?`-Lo2;i(`Rqzd-%fI7p^x*JqU|
z9wf|ef%v?LQvVoD+>Km>gQgrsKmQGXY_p56oc=lbOxv(IxA(uJRU<Oji^R^fC$!N%
zow@eZ-Y{zrk-YDW12E*D+qwN$Dqj<wJ8-!2a=^KL*D9X|!UKm|ym<F&sDE@nExUVn
zJeq2uV#w*B{GT5^e)sM)R&mM|3*Oz5BRLONV?7Z~x~9k`5#__l>6GsgBP8zjV$fn{
zky=Jsy0S70j-HofY;8SAG8vPOQ*hotP}L<VNEf`wdW~FtcKmWTr+X~@KR#bBuEtaw
zCB~B{F!|4V(IRNcI%e3h$tnwbo!~FbVr$o9e-r$kM3rUoSlBuya3;kV39F+rGNJ+)
zqYN{n0wPA#(6mrcg>jQO2LzK+0;MNVQi%5jBeU5hA|Lbm(tHgNzF;O$cL)^3UV(wO
z^gihay!mn5ByN}yJdP$h6sJHR0M^pEDjUF-?1nQ99YBfl*x%^tlPGTtfQG6^xj!6(
z%&cfc+UozcT>#Ni9M_M#L8(<g^afL{hD-*Nfh|?d(%R7X{>;{#uDmj~G$M9?#2V44
zFl9mDjOD457M4Y6W!h?M-@dgmt;*;Ge1%pPs3T=%PENa_i{mUS`?!CXp*^DH(+Ct)
zMxZjI3DiBoJEED4Vg+OW^*XKgh8IGQSle*qske@P^`BAIGpuXZT9x&3MZL=3Ep_s*
zWvZmFQDNm@SHbql)Fq`Fb!kbWpSR|7d05ofBvtYK@kALj&E=qoN3+B@Fa}`D-8SQi
z0n8?kK{*3}x}Yo%T7$TJ3gATm|1V$SkEpF~Jg|=&hFia^U>z=nyRU1BF&Cj<+Qs+b
zcV(Tubo0407X`*I>B`KU3{p(d2?B|K7$)WT<~?YZ@Dn|_2hC_iSenG*J+YiDapFU<
z1cj>CNRgQOx3hZ4JW7DTO>2ye|K4~c_%1Iw8R^9`nX(t`xbpqlwYQ+G{Sp-E8eH2R
z*CEO83UT5+Ar15nsCB1az%9bN2^+ek0Kr}KBGtWirL2Ko>Wi=;(Qq58Eu}Xcl*Az#
zaXqRL%|Q`*bowBoJp<{+yYZQ%n;Xk$LVzN&*mOo}i39BB%?65Lbevtp+7aAjn60i@
z+yn+Z{ciBvZwhR-o}5=j8Kp24?;8N+^Lga;(ox29lIJ4w>ZLoRS3jW%yylv~fNcA`
z>A5uHR)Tth^kR3QG+7t0^{Cqw?3Zk@tj|IvyDQzo!V#E}DnR0?Puj*GGL#K+dA-WA
zZk>gf#DYYT@Cpb#!(TnmcS<Hurs#%)Jhm+3G8>m7c7`C@=xoT(r#PjHDa*K@dKTcE
z;#uJ@3yWNcvb-u77(nlKOK?Y~RbZi-tR&y|c?W-!#Js+^LJ{Z%Bh0u#z}?tMvfSK-
znGac#F3GbyzS}bij2kOf@qYe+_JR7~fXv4#;3PyA<0f%5o2Lza4>qMv_XYvO+$?-i
zqX2B>?`+&yEynb>-E)T$g4wu9+$i!<hQi=-f87o)*1AB+l0t)_1owN5YcYmu@IJNw
zF-1pt+@G6kNhkZs6?nn>l$3AgcW9|ju`{(P!l7828j`wH;fToTmbY?PxnNCx!3@ul
z4oa3HzjI6Wi;K2`6`_Mtzq96`Oy@G6#H8?Lf#-h@`Tcz0vhcOiIZks#u{9s=c%I!3
zadufyDidU~WHz3R?=bWEW@y~Zha7y!X(j`V!_k4Iz$0TZ84=Lj1di$OQ#Fm!STHFO
z+`xkZ#wcU^P2RpeDVn@?%|!#pk{hB?Iuz7aq%jOVcy?VDAGR}ngKxgslCtH(`LF^~
z05XEGB|#d{hMzK*U2hXXj7$pM%(ECM{M}$)Y#}!Ods-3dK~!@DM4&1xp5(JaZjRLg
zLb)n#9hxN!W}=#CL9E9hkbVi-`<7lpWG9_ObAuUZs37$=jQ0u?8I#lrsDi(A0iR0l
zQ1o?I+&ZEEiJ@G^XxrU#wfg1|ZcUO93FLuoh6$3ZlG?lMjHHfYah1p&YrsZ|o`-$i
zQ5@m`{a@`lBT?$rkw0v{kk1c{UWrM~%JsfwHs>&UD<y-^ei!nNol^&(Ug<PzWuXN!
z<2*uK0t$X}2PY>JEf$@aVe&A&IGPVMbW~b=TZdLFC7I@cnj7(k=VFlqdB(~ed!t+G
z*d22!>slxPG~DN-<>g9}b$Dx3L0TDBQ4Va~SSO}s49>N%P)zHPxyD*UAqeU9o@LAG
z%t$Y$XUtbz160S70q)V`@y6c<bS%)wXieC*ftU!?YCG1#G|e)+q8|8YFehW-nr0bZ
zQI88u9%?d;12QOFqj7wOGN`TPU&Q@97XOoa*LECgh_;&D(WVXNpc=0}6FbbL@E-~T
zILm&Um9hgAu1$hF3KK&B)zkj$sLRQ*+1lD{=8>2PPK7tb=X5gmo)uAbwY9x**HJ}h
z_cA)a4AW4>0ixPp3~m-#+RT|<D_a^UIPoE(_!vLQH^pLIUz1Al<tJX27JaA)W{sg)
z0ZYV8dGWkv%H?3wth_vn<<X-8tm9-pl2iBUZaF|c#|(s9EUB5p2l%5)(vhh)^()Mg
zFEGH4)f2POW%EXU0YRYtIDs+{sL>aW{vl^L81g^P9~n&8fUWPpfjDq(TPnTOBcUwY
zz}6)|ZGH;^Hm7cSo*e5r^po`nUr%tXdO_p@(~ViU$X-uTI?#7Dmyez_xS`@+89>h;
z6Rj^cK47|_c?sdo?c)gCn3>=PjdGoiaGp~$IQA^y+2qtXc|cxx_N;|rF<9W<0}gs8
ztD@K4*|W_I(D`h7*bl**+O{~FKrL86ph&out#J)ThI!%VruzMIsB2nml5L!l&#U+?
zi6NlbOFPGsxyO%>j2K7yH*Qp``~Az0SgixfNt^U3gSpH7mscK~h#`v3k$B%>!|=1{
zi1O1zoSlz1asm?Lc%OayX?Rl{7`4C&O~lXG1U>30%0f{AdIxrUEd}a@QQ07RR(N`P
z_&v|apHbuL>v07YxPty_oYd>;(UVhK{S(gkty3q1XlL8XZ~+Z((1?8ulc^1t2AHfl
zT;gC@xM4y}E?F@}QfCA2-^negvNc%X;MRZY7nJWc{sn_oY-zB)Dh)P^80`7@ER2?g
zYi66}&4Zgyo+8(RXlrE^^j%!~eo<(4P>_e5oyyi?3_9|&H-YV%KcrYUIhX66Ow~z9
zYVQ8_5dT|sa&UnfiRT*YM~y_lqX0iZz`u24t3QZ`M8F$A8zjRL?C<wOG?<{3AE=nO
zRFUMBB%QM&%jGC{60gNi;uiA8&XG!*6iZj9cWCC`@upK~JN)1B2n)0PqvEmUjiI}F
zl!3q_x^XXN!Ms40HQw7xR8Kqhj_;dQ$r#2_UL+lw;f(c6ABm6Wv)#L&dCFNBo$f{-
zoERUz6ECtn<KhS`R096fQs8#UL!Pl@(}^a`iuu8NQiD@hv>r%Z`u~5)q4T{G<6PI7
z_AC$7nS2U5U1&x~OClW<9dq}>L+Z59y!(mDs2q4qHE`7&ZZ?-1+I`I{FKxpPH_-c~
zFU8kiyV+b2KRd{faa3g)rtJMxd{$OG&@DpIac@O7ZHw0FN6a}vVT>{;D~|xEAU+@6
zE-ct=_Sepp?O{!&&Zp*maZEM_i;Y%mRchL$br*Xn2dZM)^Su03o)rCr=ld^X%*_9i
zq8Uhf<$0pc<_B0|8R#K;WzhY(`{3obJ@=#Uvyv~Zn?OC~zTwQ%v!U{MA~v7wlZywe
zeQJyz(@Uskf<^bLM^tdeDjskl3Y>_1PLc085R1ntvA9}xAK4V!w;9wxn{KyqGh>t?
z9v6!yltG=rA^U-rkrswUt8MBSh~kh&bxLv)UsUViw^`yfre*t2@E`v!LAFq?HI-v6
zXtldxMYNjMgDkE(S^$Noxun9R7Q|?kGsOrF`FA0`m_uk2`atGD;xcpbrp5t^`o<k!
zZRx`!?Q<I&W9P9gqcIVg@&kp8reJzJJy?qLf|}l`#~I>safvmtmr?o;TBI#6!#)b>
zw=gYphfiTULMKmCKH?^E59eB5X}^U*mTke}V$y)yl}Z<yh`hHrx&M2+f*?jBCBIEp
z${n&HwNX=k&Dco3=DMn#@KyjYKxBa#_8EB^#P3d;SK}h=7u=sI1r9_}zb;*)n!~aL
z&Kks^KfJ|kfwcgL&4#^zz!WYStpKdbUj~BpBe;^8c&PCkt)<{g`@oKai{tI(vl_E0
z$P$y!KXBTU6(~HGs?$X2sWPjbgr{jVLhR9=YPf-e29zuIT9T>n=UVY`BHScSFT$o6
zmvOyEcdl?3hv;-6VsBv(QQVw1Wfml?XFYCCTCla4g6F1$V|jG()`dxP9<w@=7QTPK
zAK1x!G6z^Zn3EcYTecwCe|^$|_uD-R7N3XrCCfJy?BX8uo7jn_M*_@qexuRx4MzQ2
z(>V6czqXWO0U8fF%-{0Y8Mhlt9}2MNgGM8wzRC}we$@C3clXoQQY>9OSBf-e3P0+^
z?P2yF(O=lMAgTE=6HGVTCZH%>NCo)FrL9HAc+r87XTZ%{`65@Mc(-5&Kg@ff^o~K!
zJRpjPtP%65q$PcIT0FVFNEapnfSg#Y#Qf^bUW*zpE_@vWTCxcEep_j(al=jGSf2|N
zkl-YC80=#wve>VB{E7sbF+?{2><Pdd<Mf%)PyW33Qk^8`rgI3-e=aIKohwcXdl+&5
z-k(pRqrIU|@8%vxU+4(39&m>!u460;<bJ>!<PW?dqU;&2qh&0q0Fq?bz9ow+`(`b=
zMqROHKBtD$?W>l{)xO<3FYUbi%K@D~5GP9Y)j|8rGped?!|_-p-vy>}wiXqEpGUpv
z<7DADJ>1o*@T(2|>oorC{DQtikIbR9^*%Y@pQ2!UOJ83L;gW>}!Q4y_wF^SH$^<DX
zf}hlAgi(7e!NHKgk_hx9>SG`S+XCh0Ey&B2QF0y!r#<^TJ+^pSfjA!;dVsygazq4*
zy_j~E3h+eQuIOy1LYx5-+b9O$o)PK@LqvAOo!RIf!hmLRtg@py3yHJn5(7jVe*E~R
zM#G2ic<sB6j8*WV!iIYFHURbJ1cLxwzCNeCGOtB7c9_?`3OD8DU;|Am8o-8>Kf7_i
zQ1Dw^O1aeFE~5ml8>G=w8FfozDLg?Z3TcM?#tm|5wsJY1{)Fo`pXXpJ^Jki8>iY*g
zBTu^Lo_p&tLvs6v|AU9yuU~H;4*vg#+maa`Z_mx`eq!<WzW=^^f6$2rv{}?gE1$qc
zuRD4_YC4Dm6F?e`H?8gz_PpxUAF7~+Q|_FR&8e$4()xO+<98|n1n$XurQiVfjjK{O
zk8s>iHK>CAIK?}Neb!IYczZ{ruP@8Ie{`KE?u~L<AC>BD^qm0^+-`ed&nDC@>(Q<E
zg<I+ZVWen=*dx7=OZT9byY_vM%J13(2U?F_d0|_qJ?EU{E<eU`<CUYW0~fgF7o__B
zn)o_8W_y5e!ARkPRJRwsC0kzD7W%exZo8?bDq*mWN1$K)@u$sly@>QhShDm3Md5IH
zubqaKgD(c9@u>n*gdi+k@&SY}n6TG^j~Wc&tjSrilpQ<|g^q+mR(VeisV+vFnZnEu
zBi1!%uA{8p-ofX0H1HGn|H?eQ8XO6Z2EO0IonU9O9cW%4yfH!h;3f2=fhSsO;hj5z
z2vvmO&fN=C-9&#fJ-Q@Fm7IdJT5%=Cs&nV-QG14Kcat?(O;Y09a9k?nHcm-!nu`Cu
zamX<sw>Bmw8c{2YH9AvjBff4lYiYSAdXC4X5nnY`vaJ>MWCvA*a=QP-36${Ab#2sU
z!kdLw2@C+#iO1K{C+NKZ*N&56*d6x_4LXo4GGY^bF~oQ90dmR6urMsjFmQ?@si=@p
zu8nM+JvuS4iBZdTkS0hCZ?Ib^u{?D#3yKJt^0hJVVg;P_g>w13QcxmRD8wE)49Y`c
zfE5-B?-3rgDinc9W+5Yp1L7>6T{o&!j<&_;wQ$s6@xyX^^p@)?oUI^UrBJB!*``vK
zVW3;Cc2m`$c~zG`DM5$w3%B=rMx>-f)IrSC3ynzLfkg73C{hF^2P*9zBAbW?F8XKs
zB?W{BTy|tOo!X4K@0bZtG`at3<-ySO9Ne&_7gqyZ$lkrqwiZoGV}sL76WMg{N)g%t
z7@bH_Pcu8eMqQn4&PsLSS51ott*UGdq)^N3diGe3qV|z`?-nCnNfsRL@u0X~aNsn^
zym|8;wHOAu!R715cSbd-YWw<;{)&PAj`dEb%{qMYZNSu1(bNxjx1{<cwGRxA4pj6H
z<n>N01n2rpG6<QEH$ghtRUfH(>)wM$jRFbca{^YV<f~|y8U>ewW(hqG4S)d+4Q)xF
zlOBH3<Svm0`7Iu|IK#>}w+P}^HuKB!+`Oc{r5FLpp%G*eq|Gs^4X*#%EuTeMcpeH^
zqF{KNPmvGB4?S|t(hv>c7cZm|L)OyT8C!=4JXG{0@GAnt!HsPd&6}*ZIC$-kByRs}
z5B9p~YzV-J>Mftj&zs<m#MPLfTE$n0-T)JnyYVDnd1Msy5c9>|G@|0Xk;60<$Kmbz
zjEPB774sIf-a(tN`}leEq6K>u00d@vzsU4@4RR*;>g5}uNts+a*6yvvd1@GVSlW*<
zXgBwodwPgq?~zvn0Zsoc<4t=~QuY8;9hF8b`Kz7doH^6U>B`QYW{5p&GzbhvphNqh
z40k;*a)=!i#wY_?W)cT6Cd<ku88x?SuRko{N*U}&2uqd()d7T2b*5>9u-sCqf}#sT
zQ*RZob+0*-RV&J#L830`N=^6!tixfT7<3iRE+9kd3Zgo*CrLYivuL4V2m6^Uurnfl
zDr;?RZniKiviF}R`CiPLh!#nJtMF6N$jB!l-thE9OduA=V7h9kB@YVKIF9r$?uoC0
zIoUsyW11f9fvv2KT27ESN>3+j!Pd-&op?|U-U!v77-n<IWm<DUqy^}6K|$_Xt4Sm4
za#C$=Tm_NV6`1VnDD|1efb@cvmZ=QOy!p*^iyJa5**2Zd;N&_R8i;jLav5|wo7w}p
zw9~Eg=TW2)?5estl_&yl(9j!oFmxt~dMhyatPOp=4yAgVBkA5xy&d4c2w+6+3SDL@
zDi@1m$zI`WkVwM>fvAVRb7Hf_wRyy~618sPIn;{@;8FC=j;(2>D<TP65TTqmci`b`
z23FM^=1WLlQ8r_s`6OCex~8=ND<;WV#0zQi0NWcX<-f&k=H1=4+0u?XXQsv`DIEZd
zzN%!~a8;;MczQ`;XI+7BYC7%g`L*&2Ekmh+WPR4w3uD+K^5hnP%(cC~xFXJBQ37?f
zTcU}VSXP;u63>TG97=f$*kK45lMW58L(?-Mc>8b~A^7><!x&xNp-)ba2&Q+_Ef5$S
zCQJFOM>I>y;UCjZg^bKYyH3Vlg&9E5#W;^3(pxX<P-b+in#=$4rK`JlJ=%=&|9X~~
z;1PEe+*Z?W62!tk>(!Rh<U~s`%-WQc8?zOAzV-KY|FA>d1{b}WCu$S<wffC{wQkT&
zhFp2s{73yk?7^(0oSB?Se~%D(d|*8c<Cy4L68q)^7_7bX{MU}z`40Y=7HD#@S<D#i
zQ4*T*XAwXvlxA}s+)Z`u1iqLQ<b1UdL-hd1-)M;<C^peBmw7uTBGYW;%YB3B3iJ;&
zK%mGb`XyxPw9sH9_(s;wi=O0^4<^jC12@uki2}C^)6=>d0P$yxGYFLQnhCY`^pLE5
z-Pb22^r{d<>dR)uvbMmmE=xASXfjX*c;DM8&QBZ;wjk<ilP6g>b?mViLuN)}NI~=9
z;~32e%zW|X-9yYbKU<tfF;nh0rld4bcpb-J#&q>SntuQU6N6=9*vTPjQ>TbYkTnwM
zJz|Ac(67eOV)$<XpW$K(rr@kVp%w3;5ZXK~qF=G>>77K=h;k8oQ?kxGAaB9+gJ!+#
z<|5C%PE;-#R*_OKOjK8sie!N3DtNeB<uN651a(<nxF!l5k+AG5$;2rXwzVZkq=|1<
z1qLZMKnI@SNM;LSy-OgR)$5`2fbb>QjcSlj78j`~uQ-Qu!er7WS&ZGFSqv7~Fd-%h
z0&qe-4fbw<e6XM00~?S&<i_q>c6>S&(TwYh3X(l^$0+9w6Mvi!bO6l~G{?XJKvJ}W
zKgOGgvq&`QcC8L1N7k#6d4ntl{~+vomV32w`sL5hEL~z?982n54x7QmwG;{8_x+{?
zo-Ri*VswuC-aD0m;?NTa{d%Oz-+yPI8Dy*%D&^ctY+iWbRt<6$Fq?H|@Gx!qtz_3G
z3BG#MI;sC`f9blVM!fOjD#vc^m#lPc;%{0n8qF@=|AaeSdeq)=kizd=M*{A$PbDBA
zxX#U8!Sycm7UQn=&KY16D3g>l7kLF=ma#)YW0E8R@rQyJ0o1$k@#eO6D|TdgrSm1K
zvaeR~l^oQui|8L!(D?MsUo=>+q|(bRA;RP4f}e?0$!tD2;+H=r(H3fg(%KWv!X#m?
z>d<XfzE2{*Tyyh?rU7L;`ci+8BxR!J!^XtjfF<*S2gljHrF+X7Xkqi|`-)*e8sG}g
z9*%3f8+dr;8#lkPrLALmS68^VwS41j%hzJhHYYbkQT2_f4P>(<!2&Ba>5K<_b!bp%
zwrGEP95*jopM`aekRMu_SvL2oLmj%NsChpg*qrWIB!!wHxOroAYV=G`-G6thXhTD8
zd$v`BDs)5`>KaTh5V3xJqxqNZlY0Fb-R>V4HH?n*e*jp)d1%8H-#z!~5aaWP#L5$H
z<%j^<(~TdmEdQ0O7?u0$^0jl9)i*q<Jcvg3KBnnFQ3%8U<;_y%uaTXA!ne&iQBdb5
zoE6v0PpIO%<5d&8L;ldFFMm;NVOUO_AXbYs3V2Esv+^MR+7#smJf8WZxLB_I>~Dbq
z-)58Lqi*zx@aH*#IlXfPISKjdrr4I47Wk_`>AaSKxkVaE{nmFCRRe%c+rKjKCV{+Q
z_E4EsgL{Zu2p8ZBxgX*3hXNyDSpq<$%@jd~il@8d46@X}!^A#SACq1S#!Jy^B@4?N
zZ1*)7tHppojn7XrdwcDf)vMP&Fb4I~Nt0<(G&wy@Dtda}_v6L$=4-VLN(HbuBHne1
z%00(nz(rKHOKMOc4*9?2#j<Bak&NjU#HC)tifIXvSg8_{c+=BCs}7fn{n3>(%bgR%
zVaRAyxuA0^XZLO(j-gfiW1~S4(%D44`6Xm>GHZZ56~<BsqmDi~qTmTYP^JLFRQpsS
zWnh9to(|t!nHCMt1g2Tt?2F!dBJI*@{KM_RBAbYFax15oRK9yZN9_C>7y=?v?Osj=
zotgLhA3M!AS<F8Lz$SE@K%p6x13`@?lEBGW9WR#tfF=jPVB4vkJEF58+p$i^e(pMo
zi2HJ<-?x-6`Jy+%Z(d7Za}m*~RwuJ+VsWa-kJS+Ek$R>dbnWauH<q%_L5=!`EvL=l
zNy@U}O5*Q(TDQP`d*^-C2iCR;+HqYCmFSc6(Ri%5H1aWu^fi|$k|ckvYuk|&hoN5e
zs|;<+tqkjQic@oW1;l1Xv$_{++j0xtNl)#BAzGb=s^x9QXaJ_%F|`~*2*a=T)Q+#M
zn_Os9Ds8q1RuyA3_w?dVXF_f~<joYG$XQos_2Y$|M4H&%_GdctNiV+V?ZS;A+qW6}
ziKGw$DcL5f(y-NT7FXY6Vt7hv8}RI+sR9$#;%lWYSkZ)mlt6sNGtV>u7~wxp1|miJ
z=lDlNhE`#q9V*E0Iv3%^P-lBnCIa)K8a(f^D?4sdTMZtzX7td48*D&!?u0k+c-QMo
zHgjQS0in)0SUtReG(lQ>Z6BMV8HBX-Ag9efFS+RF!J~%J0W29uYzzH%CUPvett}U>
zEroCHZj(r?N(*K(ah*?z)S{GFEDWHu-_hNFjgl1n>tC9<<8krJUk7CP2b{jBW+r2j
zlPK5vJB|Z(>}G1XUI<BDuGoZ{=l3C6v3c!J)e@u;f<RHhZ5$%dAkJ{KIW8HscNTZZ
z_oT=>3M9v*C}jq>vYvVKY_>p;i+{qem|`F{(^ByB%AT^)SGit+2)C7-UH5tEwFa8n
z^XQXD5-1s5#!^b6i;OYN)+V{_5i40Pw-R<LsiOPuSD<{@f-u}}F>CpsaqE=0<;(4_
z3Yn~mLm(6p=;F|^E!N=<CLO7W%FxV+`f+*HdF!%UTr6_GuVx0u;xe(j0`nv*xqeXi
z{!~!bzeAe}YWF-v*&f-{u1&wv6+~bsS6e*XZik5>O_+<h$Qj$PbVu?UC~j^~OH5VY
zB4uPK##CbJJze3*v{kgbRJAERX7*j#{sxmZDUTE|o<}c>({7BVY<JX}xHS^fT&5ya
zwg_qNBx|;Iqi`lVkJLuiaS~mwe3Aja81Nex@^^Yg9et3ia&nNRdXg_uNzb+AhE4Xk
zMVH~w>9#)Fl<w2wEwFimPzq}`wlY=453_MuSY^O)lw2zszC^adK*BU1167Cc;R!e;
z#W0I*U}I<Clvg#giI?4QGf_TNtP?wMb?-gqySIJ&MDcVU4!hp8n8Oa>5+VW|3y=97
z3-H4OR_3v$R$mJQC2kVO+HpJpJO63D)6<Fy22ot^q7sXlP1cA>2{18s&L+k+Q&VpD
zTpnUnUSe8eGG8~Wa%NaD=}fLVnpQb{%YMWKL&pALgoL!j_*i@x{<1-!?4DSB0zO+(
z&Yxz;DvzJXCc9QBKyCLWv?p^Do$~P{fdHEN8iwc>D*%x_?$e|BwyqO4Loku1pN5%c
z0b!4=y6K14c*&pWFETqbE*x!>9NZ}XpI1Q2Ok^wiNOlPlZ@M~%6g?2`=lyEkiS>>V
z??(b!0hh=)0F3&K`ztc1#qEDoMVP?VQvmbN8qexFop)&ac32eLkjM+Arm0iEhfI}9
z)Bb-t@Q{JGZGQ=Jd;n7uY0(I#U_2an`sDa;@4|zhATK5gP2`E;GKX~j+(UV%yRyb-
z)WOuAt^&6T)W2?SFW0ERWJ20e4#x-nK*+32S6N?X%kE)9$5`KCcoqwue2oQSY{_b?
z8KVp*rsxmS0vt;Vr~`#h?rlJ4dz+=fbpvZdQ3$`x|7~X(KeQ-@l^jx3#_#+;mS0vB
zVtiiA+uipIDN3%Gj;Sj>lSU&n03D%vj!M;}slH`q>g=-m(DGj+iz18HwG>k87pfOL
zOlAR@Y@FfH*7F<_Gh-sF8nZFg86ypvA)xz+DZ~s4|H-xX;;6mLXqS8}{<?ma*o|El
zS^Kpod`gseCxM!n8TV#h^|QYGO<Xil9Yh<L+(pRqkjykvRuh(@3yE#@&1P@x^H><4
z3Gt7070g(+ilE}~o+HE_&nXUX4E<!$pU~pSGJ%!lOEKK^=(!60kz?FV8OE3hTBPn#
z@wv2E&6*#1nB=yApL4;2hFM2}ELl}sp(9YYagHshc-;DBo)WE&(^ncD?&=|1JUrKn
z)}tv&OG0=tkZgP<eHEqltXlTHO)l8IzCz%jI2cE{5T7k#^C_Yo;vQu<e3J+&*6)@J
zY~L@d@>EM}$=9!wNzy{XC*v)81>?7Wf%~F~2o;;`ZpH5@hS^;)4!abzul(|o^76|Z
zJV*%BtugTdMo7VsN`jLt=qWKIjm-Np2bcjh$X%s2L<~9MfGRB+Z=vxw(T6})38zV*
zV!>=Lrhv)Hwp!1}1+)I9QXaZBpnAznOfSBa4=J=SSj4}kI@n*=1`_=dwLZP9=Mw!b
z6BcZLv)6ZTo$8i7Abv_{Iz>#NEC8l7v@%-0N!>oTa#>l~zN&A^o$P~+c?<IQafpA%
zZOUJexAF4T_q*^^`LZ2JwlJI1h&&si!0Ok;uMuGtsHL*#1AbTrs{;aHizO{kI!^!8
z5GcvmVm{eEUblK6ffm#AJ0Wq0q1R!T`D{AC8gKy+D5N=aC85}zJG{=Cz$#<UrjcqJ
zf?l?Ipb0Td8I?0;ztg6c^NNe`ERhDuPuIyd-ohsysCt9Z!u-2HiI7&Hm{IJ@DH6D)
zvgx!mwws`c<NM*=f?f3?KKs_AN~ksd<aYPpFH)h%IWMO=vK?<cv*SN(I~m^!RX$qH
zpA$)iF8&_rkl`#H;P*8ob~pVlTKKW&!5h|;{LtU#`GQQm_nbUd<T5rFdAbZm^k|p&
z$U*hPO1Igpn6j|XpS6;KOl14Sux7hen!Rh(R3^M|A@nQVYADIs-s<Kxum(Ml3!^w{
zQfjuZHhW8jFWSl9pjKrBSFgFbFKY?c^-$=rP@z61j71c#YhUWKYZhBSj9P79<Fm#+
z?@7IPu*&^Z^(lXO%QAO=_AJ&u{Vet_pQWt_xBeV4_ZrvSOsRHcWM*upQ+fufHZe9<
zfqJeKnxRIIm1cT~*?&gfT8RNNx%l)y*<z1O23DVg^x?VKg(W-xraA=6#;_V{80gmD
zL3+=U`K=2dAFe1BB80R%b+8#Ea+;GkEx%$Bai#iR6d$~Jk#*Qr?DO8=?^}=mQz&*l
zoW;zp-pR#Ncq{M`JFCmj71lCK3t1EeVn2G1kVLqsokNfoyJdvjqr4fl2J7K$&$!8M
zCqHvQo5v&H+?tW^L4IPvmRU^#J*q;Tty>C<$Wf2Cz2YQU1<2wM&&2^nGc5EWhP-T^
z)iT2Ud0I8%aLsJh_W`&>SS+dwt~Wf)IOKgf!w~yN-kFwc{!V<(?zlK{ldyBQZ=ZpJ
zQ*zu4_bPbT4P&jOuo<^qQr#Kry8h32WWjyCT7}uD?S&4rMNeCEWaaLj+y*u_3a89M
zU2)=KH(VIXC-d3Q#>HXvuBCV=ow27r)3rFIa6ep|g(%yc-^>yBXT(gj1|8?4g2gI@
zN~h+uxWc$19hbWwa1X~N%Z3#7-1TFmyZOWk?sH<qj9YtytDWxfHkCBUYo3?hB~Q(8
zsVF8@aI0A`DPhqs0YfbS$9kpR7J8AyDzdINYv^}P)N{MeW^1!pZG4Luqz>QL7xPFG
z_2*S+UNScnPxN(sf7luyb0I=@p75E#wuirprW)OFa=x%@nmI8a?%nCce6E(bXJW>Y
z67?(efu1=hq;Zn|@6yU<p=ZqM-k-B_AY-7vyXnBED%p+;6M9zKJ+6MTCf6&yp~aVY
zXj*bw3)6Qm!XsP5J1GoC=*C709EMCl%K=qyDng_OOb`oTQDoLF*tN=Vd@YPxtm1;*
z!eNBqz3iCIw?p{7!#Srw-rdfa|M5f3Z}j-@YgBI(0Co_f4(k||ON~l-eZ4|yUE2Ys
z4zFCMW9$khh-i$S)RJ0c7FoSxdKffNcJq?MGjWiUx?#RVmbUF5s{WmiPjk5Ezg2;E
zJuZP}uj^~qS#y<<&4|vk27b9KwCik=<pN71ekZ{aJ9!xvYND#l>aETRp96(Ev&g&2
zw_^@H2M`4D8A$fdIK~~?-aFVC5Pfk#<!5Aqh#|g1JIe}$0d&xkHm%bPnzqNrnG^AE
z3KBq=Ny`HtRw3IUP}GYA8*ZQ*-UypeER!f$4Bw95S^q0VERtNd|5>h01nVRs1uZeD
zLK`(R$F&l=#UVf%$elq9UIffuTO?_CO8Hjx*J^^wM=jJgkji$tC?JLH0@>^cNM+`n
zXN-Z}lNGRp-X;>lv3R=X&l`WGWYH>aJx%dPK2L8|2*{ORZ&YN}XX9eiez<-6hpCf|
zYpwhY_b5n@GQ`}0S&daWEH=clch3({CE^jrDA-Mez!)U3uVVpV`NyjTd^oQtLFI!a
z-7n`J2HCAs?8x$N=PH$7B~b*y0eHQ*v2~k;VBO6WCDJgzm#t*H8SvNGj0uMuNnc6V
z;Aa@1UZnZ?G90-hLSnlaw1oCUy#VrNh;HEsLRUo)Uw&jtK}s1^mXbmwKia^SfD?j}
z9Ze372d+R;nNDIzpiWD{{7(7uK~!L&2gF$4CXo!2Zs~rj9t))l(mj+Uo2b8kR#^a%
z^r5Oq)@t3$Xu$uO1vU}aW%F$9>w9(JmCzTvtvdCW&Q*fRlQ9EHd)T+R1tG-StR7fk
zu4(x`(_{tSNLYO5+FEFWD#STA(GWX3$ZA^%21~Q=?0(NcB71mRzwal`l_e{w#EF{V
zVF`wQ*M=JMa$)lZmrK%22lwl8Q}P%6WX$@BP;=EAfr=M-4|#)_C-)6_O)cMRuE1xr
zWT$r~4UTDm{MbHrL?>~!UO&U%TdolL^KE26uT-y|S1wD=N+VBKJPjP*$OwuKQ|Jsa
z0ZcrVM3~^ZwghR1*8j;%sWN25nQ0>@nrOzYmC|LGQ>=&0OBc#a;?bE@*JwUn3PR>D
zSYWqDP60RAKHZ$e-EXq#M$^(JPHxhP;Le@WTW%sPZ4?|`lamZA;7qkF7Lw&CsVA;H
z*bC=nxhbn+SYKK6N7*~H<`CSapBFQ*{J`qSu+ogzkIGGMkkFD`%ZA<6j^`^Bf!Mu@
zvKE>EN)qwrxY-kPf>;famz1f<aFYdpv2ZReqhZ|$>fr;0N4PhaN%~B(i;*|#s5Gwi
z8JA|)18#^ofb*QM_Vw@BJ_(_Fh^go30iqTQ1l+o}ZdH*gpGg5|oK%jB8?NhEm529?
zV3P6hT0LwB50M=Obl|iJb#c0qk|#0Qyi%n=0BSc$0OK0f%s5clS77(y$7y<^D+ojF
z!tFiX3K<I+roc1=T2c&&Q&ObS%U&B+R1-~os)(S)Q$|WtQ>3m@&%$t%xcZ4y&4VsA
zyp~ig=~?(qbLZy-CC>?rh*a#>WqQ(sc|l3_SVHJD&YO~L4x7yMuZhYNcujfXcFsr?
z24!B!JU4?hQ6#}FPz9ljF61fRLjs=D#<3Zur7%p|Xf+5H1)ri*Af8W#uBFgI0ErU-
zl3RWy0S4Say?937v)?WW1t0HcMG(aTr{2Y43<-Uei8yHVj*U2h_~4%N<6kQyJY0-E
z=@I8N-T@JyS(05@=W^|#2AGXIGPT<10|I+JnW6O>)Sgiquv2w&kUn@QXu(a)WK!2@
zbCPCGlFhG!rVzZ!H<x{LV0(Osd6$qI;f<TcWWZ{D<z7V1rQ)%p#U2=s_)+HulAsiz
zCh3POK~6K)Hub&pbTC5t&DFWvDP}x4t5%<CKpgHXSTp+SKT2Q3*6%xvSpIDDx4CnK
za$KI)&jonx*&uIvzPGGT`VT9kwqvqAz5b;$)P#whmDw9k-@A8uLw4oPn`(lT{;!v3
z9Okg@^{+gejn_WrKgP2qAA&o1S54t}yRw_|5w>#~F~mA1Nml-SwxKz}l3@w88ChDY
z1F7OJT?pwqh35Q#b4A%4ktu0NxTuJ#6CU}(kLJ*^B2)c(i%ju5$RSu(m1o5#q5Axt
zziO&)u;(t-U)9+xN`cT3*Z5s3^-lq&)u8hU%DS9f^9$1(`2rsGML*Cjg79TY?xKxR
zcUU8GFMSB#)#i$rc^I!~<sY;lSIT$3u8nE8vK`L;Q%3479c2&*Et<BR$XGGdgfDzv
zFzeV!1Gzvsi#-yf7e+IpuMtdeAJKVDy~E;?m_<p<7;l3GjrdGnIkT;!r!2FL0C2{H
zbezej3MRs8jTARKUDA|Rc*a4z-TDGdpvuY5RUlcN8Bo)9r1$`#RtI9nW3HNQ4Fni{
z^-u<c3rrdOnNs1x!bwXC%SfqiI9^Tbm$@Zg0nfY+c2NTSD~}||MJ5#y&}hf8E#A1!
z`Ip~!f`H8F&^FttHm5)UIv}ZXS6_mKE)e40W}C3JNTxlr&vH|SUn2a+&b)r^O#ap?
zpa}60SO=44ho1@>EeD1i{Q+QJt{QL`oO(B_+^f3M5gpQtISGsxzNnVCJcPmirDLg7
zEMN+L$y{!`(E_1=*2Ra<P8!^M#ka|X?<@PwErICy8LDQlyhFfIpv}z@fJ23|ZPeK^
zNe%L85bx(Jm;3q!2&r#uE!SF{lduc9vhiK_nJHSjpR{lo)!cF^n~hmmW#iWwiZDty
zz15r+-&;F*Oo6h;ZEf5+ppxC<-zxXE>;6dB+uRM%mzK}f?>k)JSB@T-#SC1j>Y?+1
z`JCLia&}9o@7n?dFphadB^aJlZ2;4W(hkr0)w~htjFmrqv`hvV9@=7}&H%&pkrB(l
zz>_CovFy#Ss|HvxV`o@MLV+VY@aEOyWS)4z6*snt=W7d~SrPCa5G{QX9)L2S62f0d
zn~xvx9vB@q9=@f}Z|mr#2mrexT7Kz;o3hX4K9thBjNP)HZu(Nr^#K4pAAb(<L6OsO
zNWo+^R+1K&eom!%*&V$OM<umS1*nAlRCr!8_*8HlD+pX%9o6PrREk{mqOa6p%x%dd
zJWcr;-F<A!0bN^Z4GndVq_Zw83p^!3id$zX)E|CeDI-{)q^UCwu6L0N!r<T50s-<F
zr9G9@vEDLdz}t@yb7@v&&95cOh4A6*rY&y(F$aa4-c{k_>n-yQc0DHRHJ6f{m`XCR
z975WC`sV{Bwz8oGCKQQw!m(>OYiulkI<)tuSfwYv=`{tY&MhURns?3%u;jiEJB3%{
zuSRXSvJndfh7vp09w*Bgd%Ppe)=N&_W8a%%eqgVV`-?ir!m?D$sLs?vhU)0wk<qbs
zqukJC@&j6u4{EhqtL5@wl*(9#UPqwSGb4EJCLGI&&o*+~#<}|Hfd*dS#&ge~oc=~|
zQ}7MY;xELMd(v^h!Mz!`Q$e6mN1Xc-akI2Ow6UHJC+43-Pcw%mWdGHc{TrxYTw~Br
zF~rSI>ApOSp)nN0XckO*4eWrpgmw6R3Kgd=bPwecZduLzf$h*PMBiV3;CCkAL^kRm
z=7DTP{?c#4+{av`t&~~)5T<5YKyO!Ds2GNw$;QV_w7|BIH%S+5M?Z+->t(*DQ`W4!
zaH&?-bObj|LcZO`6C)iWfWZvXsTR#JY4;t3-uq;kFNI&Gs0a52vSEJ8xNB;6xqRW?
z1pWmnJ?qX0?5v9aXI5OJQY}<U{}un^{v8aImW$v?6wXKD91?<3&m%C)JYb0D6j2Xd
zF{DCxoc#@kgI9d^Td3C_7_cO8nfu(J5~7boBLOj(k%+1-SVx**jM)cIm1dlQ?FvQ@
z?jyn|IW}fiKdrHZP~-j(!Kx~IM(2KN)2KTqePp#YX(xV3IbHf8LsqXkL<$FUxcG~J
znH$MZb4g6~Y}Jp1Ob7Ny19~$g5~#LR0zVzkB{!wRjxO=Y_Qj@R<(}D0Sd=Sf6PK5c
zYD5)&I9?t{7qIXntfT$<l>M-IJTB;5<KgZZ?aF-o2xB$@xH};OR+E}norwJ&_Z9AY
ztRjXOAv`d%hNL9j2WnROr0@7cPZDI_88?yL3_zk60G%Q4Lof@WOROmB<#XeIMOkf1
zfB2j+6Z*!lP3g{;8VWhvMq8ZIdGD6dwouik^yg00x<^~us;Zva+D4si`m8qFn$=EF
z+UfXeQXN{RKSLB>T#@5&DmI{7<`V64*dZmDblitI8NUuRr6gz#zCxx*8)%y`GBV&K
zt$&KEM{u{wZW8<WQXPawhF`Kw9qR?`ImfddWFS6BvM3#tuZ(iECp0|7j3qn9WRAWw
z`o&h%d|eI@lq$)GptbXhvM!-r9%VR|NqRlpTlOV@Rtst?+-_M;=n^yoA}Q?zB%hKf
zW<LIc8E*^)H?GTBRUd+}I9PST^vJMb&bbsqvv{A^wqlYtou>73J54cjwKadRb#9EQ
zbM8Br5;uvy8Lu?s;_k_qti>vx=-C9oRjV*ux!j(L>_R&^T!)~lgk#`C`4x-FRUB@-
zDhet}g>BGir}gGVmc5Kaz+R!2H!LWEbGEnWyiPXjZa(S#d9!a+5!9sjSJoaaV3__O
zPJGD0$eowawm-KQr32m_-zz;;Z#w!k-OQkUC5e<Yo9mK&LDl-y^Pw1vb2F>x&PAbz
z7-#ShUc6Jp+MJ28B%cQveJL)OWd8LA&4L@SJ=XNOgznS>tt(Q!bKp5X-IHUReJ+PS
zry|T+;ef#?3WNV=$&bd(a~@BN*s$tDWI`^#H+Xk$MkRqE_`t!!)tuE#H@E$6EGIiG
zl(hK8Vmu5g`Qm<x-tUTy#ptdIcEL0XcobH@K)OJLjY7Dz!&#nlFL}mfVdMx*D=S0^
zG(D#S`h)x5b|3%TghODJE|vg6D^z)y<{TJAW%G0{2)F$=1(N6=?hthN^ePR8s7Oj=
z)TLe7TWq+EWVWqc>NZ<iQ<|+!-DTXByQ{U!&}@xS#8{gRT>zJs)1lwk4~ST<sl2sC
zleS9#$)rVb0cn|&08n&;5Ry*Y7S%8r+-sb8Zxhu(?r+J;AF)YO!A61dNtRprE`wWm
zYdv(hRw{Nb^#j(_Nc{B6pZ}|bAqYe#&;GP~Lja>?$&g&fsaOeynR>5KwOT5Wn}lp;
zHPn0|k$$h)H^3>v<TGV=gn_vWe_1O^#?C8<Zr0yqHjB@(ns$2N@HsckC23dpY$#7o
z*7!ghSY#8K+y5Ju)j69AbfNaw&R=j*JbtsKdpg^_fIp#e%gx#B)s7Te!$5XxOPkYZ
z%sy*cY?;m35*az_Z0qcl;54Ic&g(*2z-V^@u$zrqM*&+($P3^HnEB@c+XMJoipKM%
z34Nb$in`UXY+l|&+G@flhqSa0l$nH3!msoy-{ox$t>fR(9`64uJ{Q5^=?yB2J2x*Q
zU81P;Yui*>m0lWN)Y9s=X?ba7ajP<|Wc@qPVp)ph0SzF4?nTv{YH^k^pfAz8>1tDW
z&e!s2_tPX1m6h4v-2d*}{6lqqaTTv$o2QZ{wg%*FFt&}bBsfGvPD|jnESi%>IF>^Y
z7wBOc8=S{P)_YDGzHZLuk*zACwLA&-Ds{_NukT=s=Cu)@mzhCPl!>RbcbP>%^TAlY
z;{+Y&?2liuvUOLN^3%$fCwYhhL%yE&+~Op<DpInz5z<{{j{xPKO(V3@qhnqkxL90`
zx%ax}C^*w}c(CR2h_V1pxPcq-3+{>s<uT8IvWV4G7gQai4x{QG)~Ffknuj{-aK#7^
zuqa0~x8ZLBj5rs-^a`}t2)@UoMF0AQUZS&0+>yEfKcskyL!o0{!(QRM2Dl;4IoNbN
z-6q>oWC?rb^(>x(A^Uj^>`p&v--I*BL#~($))5SOAC6W&67%5(jYuPgGvY_NnlN6c
zyopz>NPEPDW%fYeffgwcg{lkf;3zau)7PW3?)BC9;9k}?%roRcMJAhxi8=*FuvG#C
zbnT<Kg^uokO-oLV5P!Hvgk?>e3(PdA2zI`((z^vz<P#@73DV@1!hALdEmNtPkd~{8
zRB?rW{z`7@`1(&kpr)*ES7&~l_H_3}WYw1;u$U=N%Br5mOUwM9M)Az(n0QC17_OlY
zes-X~QewQbc&r-k(@)}sCW-juj(a3PyL~E;`%ywN_Vp2R6pd$?2&Qu%b_1yy>U_a9
zJYSbHS(=m<&SXq=Z|4#oeB(6u+8EH_aWPGF&A;lN5z8I%*F-ng;l7zEkc%F5ce)c^
zw|SorR1s}w0s1PXJTJvb475?~EnuxTrWh-UE=7<d$TdF@+rL$1J)9k-ev~l7n0<DU
zUWb7!f2pHpKg?21i2M&MlB*aT1pLf~#YGDB%(-4!@N9TdVtR-N1An2yJ=tPO3ieNr
z@`A&e@XDAKs+o$S3+}flN=p+|2mM{CFBvc(LQW%~`trZk3nP%k-pNN6_$xyR)Mo_B
z^l!g+Sp8e@1h%FVa9qqbJV6|QlDDN-Eqsg@s&K=>#oSv*3a(7e4D$J><{o^WEMNap
zKa3P>US_C5-@_CxLJ#0Kjn#)6$dL?x+Ep1ZX&UA}{YzZ|aw&4J=AZfZX`4#&nF+{K
zi`2A_A0u7KKICj>e#s`<{rO&Ym-wm0FU9o+_=3%rhS4}M5Z)TOOdl>KnMQ1=Y(FcI
z*B-3TXXZUSHJ5V(fp4Wd-$`-^wy}FHu5AJ+=-!x$P-7&s5@5(DFI4+#z7pOH!Zca9
zKVVm0iGN_j1>}X%LA*6E0mMZL6JV-)5sh!=EZcXcmY~C423o4We3@Ip$DWCQgdKJU
zy>6^*P+B>86tUT9vo-%M)0j&@3==oGR0SfL_MQEwDa(EPZ=oOeOEfA#Z>Yzwxj>dQ
z#z%#O+$cpN<^x3ZvB3PEg#7G$&3!g53*|$5WKfhPswDl7_tt#6U(_Pr<ZeQ~R>}Xe
z)X7Sar>9}*Y)mh2O2MlM7IfFNJyOteq`%-e$^>xCE9pWsVtQmFI<RnonzQ@&&(E5j
zt06tWvYwqo-WypMQGEo;rMHR3DS|DPz(1n~ZLoj4T5tF2j8`lSi;rk5_b=C+RG!^m
z<sgQcJQ2h(F`5#M?C)lq&AIuYOr(6nb!)-Bft`L_&u-5;aB=-QFM3lABxh9Zc)(vo
z{Am$tWg^*un?#RHl8fX`%ZE~L%Wi`gqN8Xb(mobF=3{EGEdWZ5bQCDc!>k_EY5;&T
zWr1i9rAch&FMcGTw%eq$W%leg=j5bla&%JklB+aEVk>2bs9a`i0Z-D+gO7r}tzw_C
z>94UsKGAMxGV2MWAw1RknP?%q({6W)LqP2!h2e-_c2;KQg$vaB$e#kam!;QJH*c<R
z(3-UWX!D!_FK}#1NNlkNL%gyELqg<3LYVaIVCD7@%4Brr<Fk8IU0xL!sG27*qJt+q
z(NgB2&a9-GCnXbnYw6>GJ*HSX0alw6LjWjUA=-<hV~ie?ED(4lmN8KH6>cBMOajte
zg01y2M4be@i#<}Uk0C-htCimRB~6K#g|3DMn=NiQyBJf{PM|DQV@`I-diS$GSEGYK
zgb;=#=!p>4h_feq88#22St7`eW_r;1ehWH;tuc?NU|7NTADUQmAKr&y6goC8$NM7t
zOrN{zY@2FvX4Uki=Yf<KaC1ZZxn0DSxXIV6=>#Jg_nO0+az&-35ufKroZQm>JbatC
zs;a+#H@GR?CKBQ9eZg0f*HfYD5wnC<<Ir8?QNgd6`xT~u3jbw0XTVS>Kd<XoJo+D|
z06mn}S{uVA|1GB|5G5O_vBf9#BErwZLOBI`#Or}df~pt!=(8@GqPN&@0Mkef)pFe#
z4k|Hy4(mncGCbEneFF&ex7Bz%KusG=*EJ5+yS`BdJV|4CRSf8>o->E7BR9Gi989zU
z#6#t@MUc}`6gaA0(CqmPO#L+rEg;ES;Uk`0Zm*|xN_io{R9#!rF4y(h<bM&MozY_4
z$PG2c4yV#x8ng9e+C|#1jw@#Bc?56NYh!iwruUZH3nN?6SN^CHwW^T8VbEeqm23}r
z&?0z^z9Q|`lWa=v;+I_TYUZ8KWSK`paAv&1IpXTNHccTb_Fa^SN=UXY*N<r%8I9DF
zDL$n;VaqNgw{}9^2(vPKi9O44e(JyhTZXS<4eb<dO*UuPc$GcYq46^UXLB!13<G|D
z?l*U~Di9?zU`Y|2jEb=JY*GC2MLurSHM7@HJxWs-?x2<joLEKDq@x=K7(nAtN292C
z7_L&MMlmo0Fa-4C5vUxw?Kxs7XFyRDR20E9az3;v)k`6V%jvW^of55>N7n2MVkVZ7
zVqnYjmuo#b;2b$yqIYHRc12;~9Jx^R_jmW>nkJw@eCSjLbVGbeMPD0$gwOwx*TIc&
z<+t=3dH22WzeM#F>w|>X-;MZ0D*Iu;L7E27UzrMq;#0?Z8V?zArV_ll1e>!jJw3JZ
z>SVMUOc)IRw8*R9GgPI)IJTTkliRl^z@3X=dlM(4)G(8k;M#ZB;iYF-?RzbtDNm{-
zUq}xUjb3>!2*DCreD;$QN4aA8G0tldI3^EQ9#P2ucl<A>s5-9wwFD<Gtz0a}ZCv)?
z`!}vz+DFPk;o%>o8)4D`N(JVS&TMk2SQn!0&u6uO?bzl1qT@?~8GvXgP1C+^*G>E*
zYs8z_RZLj6jEWYG!rfO^J`kv^3mOlq^D9KRELu+q<m{M?;5|Q4(@L{Uj$>N34eVGU
zy=s|L>$nZ;m?KQa{Q)0>%&w)Ucd*L#h53dl``gFNLmX>?T%tbLqI%w1F|_!-0CEV7
zqK-F+cyYziuSju4v|B?jwukFwA9sZ@yFKM~wYqVL%zrlh*s48Wh~fDg0#+xyI;uwz
z702s?YWYbHG#;2H6n)DLoG?xVa=$HdGYF=Uj#Wc*bx2yR`RLi@gsy5j0<Dxf-+V`i
zdJ>gX+!C`mI-FB~_xQG)d>jlh+Zo7COotB(J;py4>W0@D@)Q@k7?9lgHQSB@9gk*-
z(U8%$INZeQ>3l?Hg2mvdQ0<UyH7Y1UNou)kKZzk)gyY7|`;_6sDl4_8Gut;aSi}8e
zq#K};MuG?A2%3!G<MQ)}Lx*(1_pj}d4nn<1nZ0?fg>?VHEboTOYoiABh+2Kkaw<E!
z-(VOuPN=d6vIo*j3{`52S6MYtF={ZN11QY%=4J%e4Obmh_Jn(9YednLYtq7~Vu|a>
zB9fZ)H{)oXh@6ucavUUWU)A|Jt|W~tO^d2F(2~sJhKWtY#ycK>*4cD#?;(KxU#>yS
zy!`U&zk8Na^zz8s;#zN`_!v9+(q0|i9n-CTs(7k=>P0<exV9bIcJlQQ$0trVV5nK{
zGbG`>K6GU(pb+pU@a^{LIw#NDw{260r>0yTe>x2`kG`eXB)JwN)u1v^D=fK!35+9e
z#_qZy?}_05f(b+I%PG<ZT4SnL^5otblf|WLNRGk|l`!OoiHd)ak&86{3Bx2SmSm^;
zWrD1<p$BTlI=4qZ{F-5$qhCS4Qt0LDk-}KB<Lc^nDN6t1h_cV2pGyKPX45VPo75Zu
zaa67(TtoKD8Snq|E};ivE&9f$>_+T>k<-q<=Z?OCWVNJiXEo(|L7ya)H&cM1CYm9$
zz{;ixJ+4&pWDrorzRs^hVuhqRYnEm<;I9R+cs#xuuXyVJh(G=o1wyuGETWV?12q{L
z-Z>dF9-{)VKZobzM@^_q#pq_+9Wpz^J3_c9AL_&tPCV9nVWPax-2Zd|A=zowdt!^L
z=k!yzIJRm}U_*9xK(wh6lZg%hew+7^7c^b)iKi?csVd$WLJ|{0o`;aO;QzSe=M8P>
z?fx|W5OsneeGF9iic2}ctsLsKDoRnuM4Po=^FwFbDO<&BkL+vqSud(ts$6tPZ7spp
z_Qm%{0!`$q!h?l4=AWMhZ#k8z$M?E5R`LwIlz0_0>HUv)PtCd<SIMc~u+gKm;CVp<
zaqpf;&npavkltuMz7kLQ26;T?DdkBM6M-BH^wbA+fM7^bu5Qt8t{x-?eE=72e%h5L
z!(5HDUkiJ;t1~(e9dGR-^RdL}Dj^W2KgE_DcO2hmMeP`SGWKsMGI00t81OtH?ST{3
zhTHto^PK$!zD_T7$vMg@(DzEs|A|=nnRhgJYsTdZ1L@6&3mAFFau~m&qRfB%$X$*8
z7&B=<H5V4UmI6h8aC$mxt%3<Tw^i!V*K-v{cS)wQ{0U=Gi}lyOi`LXHL788K+nEHQ
zd0o1ZLV=o&lSJ1S<l}=(N=FnOx$U-bnZI}^bX6Xz5zKY&cjY>^hmJ$z)6pBtqtj;F
z901&4&GooYR2^g+Oe8d<lb1w>+H?~UUTviltP<IwaiIWP$(@ZG-)*%o-W{W@){_gu
zRmlJsAhmd{HIJLsJqrZ;x}U@xl9M5V;#u1;hlb1!YUW-&eTgP|g;)C>3WglL?CdDn
zxFBL2%73RYb&9<P0%C||F|tNhErWU?2Q-36KHk6q?Aab?oQU5&ez;{R|8Wkc(urOX
zZ9Es5nT1&~Q)9XHgR$ZT092(i*C^mEU4e<$HHCM_(sRZk;M84VnnvQ0*@uK>7ve&W
zdz7s8t(PkEtm$#SJFwSu+b~H~SZOpPdf0N$)~>2k!PM!S(}UJps~i~<Jt4-Q-r(=m
znQhtjvK?wZ1to8^L0m2xvo*;W29yEOzTWbe=Y$DgoU`#Qf}A!JB=}`8)j~rMI&bF#
zFQ;pQqEE^dUxo(dyz%i^z*DgdYHK@obRhdLxguLNs!}WDwGsVWY-)&yw_FGI?0+|?
zszGBKMkkVzvkg>(8f0gKVMC>gg3$>LWUIg=nmRhI-K7dKzzdL`nWduN{Iqz_^3I{O
znG{`}b?w0&A*t23q6PNdAC#ZsXO8~&@8oZeZDLF^ENQQ}PRkBcZJ+{hWJX?-18GQ5
zVP0UPR><zqr%x4up)UuK6_bCyJE>Mvv$N6Pt5q2pot+>acBCgnUiq&2n|&ufQsVZ&
zpM9!vWCP7ep#9?JEsCXMCBjEOSn-&jQ{o8xohTr!6R3&5&s{alW3s<FZvzB(B_J6%
z4j^&1N&4|>muxGWUeV+fytntnP^}cIvy9|(F&WI%qeq3H8m30@nq1PlyD9Km?y;@3
z1~bs0%M=XBGL;dI@s$Dz70)>5W(ykwF(MsKM8)K4$auO=3^+m16|C=J{KWbP5idX7
zk63>be~I<gqa*Lhs*&s7+uF#Y`ioIV@(VWq%^P~kie)H~x-RpNT#TwOitObIHq0r!
zYObeAfdCpfD^*|fM9xKImUlaT|CkP>O^!-^lGI$ivDKK=4tOC(8Gd)VSicP-)MFA?
z`n+##hUp||2St`v{@<rd2s|+z0)_#4pJHEKaL_r-I^mCpN#r1*#r<KJ4#njs)ltzs
z1dkXD1DKr^aqC{V?ksF7@<vIaZ5ha4NVQIwagc_&cR+?CX$-enoS5atJpiQX<Py-J
z6}n+<*K1Sira9#sDAJ**&4eZ-DY2w|v>o0iFf_Sx#-?ayjE8D|PC6pjYs$?8xn>AU
zIZ3>+uf>B^alO-Ky!tz!m#p>RCJ@SEtNc3@#0AA|Y~c8?rrzpOw72YndSJkCv~2Hb
z>HP3IF_0n>U8l8AW_0oWJ}#o62Z-fFy}l?>h!`f~8<xmXu~?GuEId5p9LM}MK@_zi
z<_GZjKp#nX^I#3%ouSr?)kfeydhtZp>=%?-tEQ;+ItlVSx-g&~1trmG>jG1;G@Gcz
zz{<+y+o+Gq3_17An;Ai}z0ox{bFROsbM;npiVvvUDwkIV1`;-<egH#2yuW^l>!Q<I
zJ5BzsBX&)wNNIU9HxNM;<>?C`iOJF&1E<{*w|7&uc13>GUTv`0=SRqQZvWi2=s=%s
zFLzfUxtja*dM~8?g7|}GwLLnZV$>kPVfQm#f}Cv+utDg=1<Rb9v5CgW7z`-_SI<z^
zxHtY-Fn5EaE>kzFm~NSM4l!)e`x^I}&lNxAWP!~nW3ZN`5%%<s)B|k<b0Tl#sA#LP
zOImUjsn`WX-#rY3-2Ons)@i=)rD)1CgZNp!-kQaCFD>u0?ET&wTgU(DEF7X#T<n7U
z)ZAK{w)V-jZ>5)Z{%uD3Ox5$p&PzVuK7LZmIkK9@QKimpKadI(LJH$dIqR-}j_@w=
zfSkS}>C!Yu<i-?vpn3&x(osYB9v_4I9G|!^Cn?r}{_$)OpO!l3dSzVZJ#@`=4h(@Z
z%{hgE{pMiE!bKT5`4!K&O71e@2)a?WOvUBi_(J>sFt<917MN79kva3##)35lzNL_v
zVT_G{&4&PwcXqIPGk(6xv`1+RzQG4x>`?8zd1hVM9Ew+jwu8do8TceMutk}Pb^uXP
zf4T{&L-i}rwxE%XjrMHJ-{1b)?$Ha3*@ocvOHo=!AC4z`4m}5>&~}xPoGA{G2dZ9U
z$T4mjPMYY2`O?sJ!1vVbR+z=DOSWR`L-;~{<75!%k@qe|#R~ZaS<!qky2Xo6()|o!
zX>@kMGj?Gb1MbO}x}=;y&0lmsret600+3sjJ3N%&?wncgdfl}?uSi8yJI9I%u34`I
z93!@gT`}2R14gk&c6o{Hc9BTw&{rrNphwFQy!|(J-Y9fJT-dKd!L4lbX;#0zt{iG_
z;-^khrN@6{j4}>?Zl9IXtFeI{G^!^5GK+JS%Gy8?H{6P{iL9bIaWbQZd=X14LrkH%
ziM_T^W{jKTpDD3#UtW18Exys00XGy`Hx@4bJhm`$B`zZ)13)2JI9WlsRw`ysCf#02
z(pb#&<GAIpMK+NbjM>y-##+X3V(yW+xFdf&S8fohQYE-tw7IWd%HeBQqbgPSe;p~&
z#kkPF)&{;9Jq(MlSC-w@wrZ8lsnfSPM_QZ{mDaWva6v$cyWfx#xLj>yprU0CZzvb{
zm^{NT)vv&VVW{}q%z(th<OUOxb|{cTT@v{kV!9{Ffm1o6BZ)`yB$YkP%r#Q!8jlj+
z6YVJ39@Nr<%s(P+554WG{zmWipA>|{<j2XuKK-aJeh7+l$?YC)gd^?Oy5fh=j8bu%
z+7u^!7vff@r`d4LoNW4hlo@N=of?g^{Zd^&TKSxxwLLLWsb(%4_(i&3vLY?JaiKZ)
zE^1F6${@zq#mxQI1JRgZ1${I1DQS_okj{!rPf61k7yqEW#kqAlSRx7KZMRz{)?*Kv
z=5M&iV>vl(m`I)e9*!B|2?)FN&3*#^TFyD_m$#yqy2kC?JHV?YJo4SoOaY$JJtC5>
zup_#&viWa&a0En0BQ$1wwzUTuoUIqLPpV0k8Ue+4<rQO>BnJ;l!Y<d&JsUtj0cDUv
zdg8RjbPNVyc0P;d!#fkf{8~I8m9`;+#%c)KCyD!(l${=95<a4w)PXdpB5MvW!QIxY
zgjpb9{#<#iuMZV2^s1II_79a8V*kTj@p<JrS<D_QSUlLt?J6jAa-I44RIZjNCY49f
z3RI|5O~j^?C}vWRyE)!FIo>-G;6PGli$=SDbUma7RUP8%X3A62BTn5C(R}2gXLxO&
z&7bv;4kpaF$Dz70Cgpn6(a0VG$&18Ex$T1irfCIEG+KEUMpvB0ap#31-+4+!s9fWM
z(J)iiG5=t|#`IhT{&(1?fj+@Z$aPRucGWD-S{>T`;<rOsP+|{2!{<$Vh;@#y<*sh`
z%`aUN*!!O!ucLmHt6<iZ6SJ@^b1w>h1<TfESJjk?3z}H56=NPYfVlcnx&G^25?Gq=
zyPbJVKgZV^vWoFth(JO~fp7=BzE!+BG^;e{cxv2Z*2dX$V{g<~a$g~g`$^V?#7^_<
z@4ffVhPA@Z$D1&F1i!if9&%OOHr+@@vo_F=@QJHR0<}j};69sF4T_~gVCil|NxskD
zBtIR{;{t`C3x6|=<fI^eFHxpd?5spKbC%2rnHy4uZ6?2J%<x@_=0lWIkaDvd1GZ5@
zLThAe06~rEQ#1uNxvs)2969z9zMv^;4OWB8JTSj28n3}_C$Itei;vpEmE|Jle?IKP
zS&q`+yUe?0saUcoMwqI9qCYAW&)Gy)cvP!N6@GH4K?apLA-G8tF=_|Qp^a$uXH2?s
zPEMF&^NCd_ULV4wKXjS!kko~+8EPr6$ak>U7RanENv5TtaR?YtC?pT1<8~<ex(kBQ
zh&23cyHG7!dWsp(JjM95>|q+@fFQm({DoJDDF7Ire4$O5&8(S7UZ+#EFSSZZM=aeX
zrU%&J<uxJWc@bB0(2rS;b^YVO{~7AFKu(=-2Sv^rnLtZ7nWfXOezbC8eG_r_#Zt4Z
zJtEm}=tS(JH391Ny|p2VOEA5QTQC=YorQ=Eq|G8gaygcA3dygzO4`k)GYNs7W(9ar
z6W2s`<fWCL71hS>&N&hrXoJBpq!U_IMkOurKaW$%H`;udiFcJ>NAi#);)$8W_}67+
z&{nvmXxu>v!ONtna9N1~`}XDQ*Lbot^$eD0Wy;?)oEQ*;lL9rxr-5ZqNSl-D*ywWI
za~<Zvr=q9de)~rBMkW~^{M7`mUM)RSVypRQ1He3+LFm%lr)VYZpk_mZWY+KXt^>Sv
z%f&#~PkR<OO$zZfvVJr_`qpzQJ+*1}UIGsgttrg^Nz$}u_u3wj^f;1#8}l@S&p6Fo
zUE`VA`nLLmW~h#FilKdd=H(K~vlh1GPvYNNzw8f2v5!JB!0Y|j42<n@vadH;uwHUQ
zVyVrtUR>Iz@l>IASIOo0CKe8VLE+2}AIf%bY_EWQG+NBp(ZKEToy(qillU)p8%io8
zdv88sVt&U0S3JD=gyyLKNzs)r{>A^%<pH5ulcO?lvN>VgLTPGZT#nC&!lSWAGZpua
z>6jS{NcmB=fcuR9o6E6M4|hnI^E0F<s(03oiIw>9Ye^}Nrk-IY7?_i}t$Q0`r|5Ic
z6;qh3P>6-SXf^rz_y%S{Awsc25vsu`f{t!f_{4wI7ceu5h^)7nKYtPXcCYl0t4gVg
z^Iusm@t2>Ow~M91GnfVXkMRnhjcQV6khd^i$b7;SG9E>+kjy(M+T{a=WjbK?FIT1j
zJG?l2%`s={lLF_lM->k%E;tLGq}lf!h!|43IfWoQojPzK*k*C1xLSg2cLq{Vr(Hfj
zs2qP*CA%?DK*}~lLyxQ*ckP={Ek?>x-kJhYO&q#4f5B|;@KF$BU&+^K=6Z$vhO^*3
z(v%i0Ws^p)&cJ4RMS)MAg}!|o$^d;FID69wRT0n1aN&DBty2Q<>tBQ;FwD(Jb`BBd
zl!|e_9JU8V%1syLoXE+<OKwPVrT$!H#MkacSu}O1B3Or;sfuq-xq9Q_u#HvGNN(e)
zGBAyqH7W$O!`Fn44McnkiSvVP7tTw)d;x)Y{&HF@CB37RUy`i2cgcx)=@_B%PMM?Z
z4%_o!yt7`#(2xUij4#EWF>?yIS-7YkK@T3`m`3ftA}UkXAaw-wXCZDru>@Cqq82i1
zwI6E+cKeqYtm1rF!lxMtGPP+HDTX*Z3iOg$_?mwXbHX^xM>MQ8e2UUl;%9GGZ1|(_
zA6c)$x^JQX?+awhTsZ*)Wl?+e8+(#epb{UTU|%tj4b(8SK|veHf~E=%thyD)Q6vF~
zABn|mh&y!H-v(;2LdBhl#W<`Hi$qsCB_o!mM*vs9dz5yXiTW|`(94F1GDn%i^sWTF
zu{6c>P2!X3x6G=QSC(Aa7OsfWI5(7-uCJRF`l_ua_mwEvCjvabt|f2J&0d(nHE?yl
zcG$ODe)`$!uhoj?6Y>ScPu7G4#*;9-MmlGGkhvyYWZudA81J4?nb94k*$kofVoZkt
z0@$NI2YmEMlB@4@bGoTiVl@a7!1(f+mZF)*Z}Yewv8>i7G|6t()#{<y8V^jlIfsp#
z!YStz7AkQ0A5pfeqbp75>5Cb4vkCyAU2chxOu?)J25F{_+Qi~NIoCQ|9LganM?YoZ
zLna>4u=eOQj`cV=Vu>I_+Ko4jcW!$(7HF5}=MJlU<H{q;E|*2bRV+LcnRS2FjLp8S
zi6}KoWL`Y`Ok|m+<gz`sLghQxMu6x2x9?!Opn&P<z-nYd0Ct+Ku7h!xiX+?oZ8T&8
zuwce3$^hUExrPI&wFn*H7|4a3o0h#0IPk%ovSd@R(flY8^q5}yowA42Ipk#8lOkuB
zLw(p&-Na}L|A&TDR!bqOiS#&&!vYAIHsOTK%<Ac*%8@WOY)I%&Ff=vwd-kiq1_*#}
z9el?#&T3kGZs1sQMOcV$qCAaqRpK?#<8bf)C2;yxB8~EXY+oKXoe>&6?f*-^yQ62q
z%bU#l#amn?U_l!%;MABrSS~GvmxbAQ8R)GznWx5$rQ}JAmYpgG!dF7+Q~=ULXqJ$h
zOwDLEEs|{OH|;-zj^n1xsNj0f8=IE!xwAJ4?F{<7c}r67!Zd+n?2srJBJy&f(O9@A
zo<5C9?&D%bC|wRPDq*uQ@0A%nWBg|B&5sF=2ctZn3-dNZ)-|*Zv^6Li8}ux`cr^gU
z*!V9kHaoC<q&`^w0YKObftx&4pxXb>pFEWg(W!&k_SMu))YU#OC=iq^0nQu@W*BIh
zwOh~3eW3~5_&MS1b|qOBbW~MUcg6uD>u4zPwQFh;U-J_x7)J7=!K%birmhlK^x3jc
zovM(l9ldVnOm$f{WZ$5w`Xlj)-5kEI>w~6hC$TbE=RQ=XvpAeXqplcw>pBUMWigf@
zG<JjHAjL#+H7;0;GUJ8O^}-8^m5sk({|$A|f3d$buFO2DJ5qe+Inz(Srv3U8_>6pi
z+XoLFa~^LyRz1@RQB-I9Wz5{5OB-u~sL2Tfaq`Og-?tn|nU&u%uce@9x{Ele6uJKG
zn`lkzp;Z%IlGb@Yq&f$9{b#0jfda^U%mB`1%+>j5vJT-G_O$|*$iJI-hn2qgHe;;j
z4a;B<uuT~G!Mtf*OZGD1m{ci#*tLIu4&9XVs`L}hl^Ky~F7-~*l<d^!v*1;JaS&vY
z0XKB>Qn>p%!9W!_mgeIu+_6K@*a6aJpy9?S2p6P}vF^etcC8=#)CGfwbX@~tCh=?P
zDYjo-(54G@e(Y2c@oS4-0l#h}?@>y*-B_CNJ-#sB;t#>T8V;vlhynTtmO^}Dj60PC
zG()pJX;`D(&!ws$40~7?Tzm37U$;og&-L4mO;H<MbP_vO?3oQ5!WOyEe3utaCc6w?
z8eYa;Hhj2SAPEnrl<*hv4aV%Gw_w;XoU0oAPB0jZ%WRY_U|1}!pb8jQsEmdL_*!*0
z7(NtNWvWQXE|9;DU&>di_FvIiGpr)c%07-CfOt=kfc9zR2sUkO=d{a9!14HRa<bba
zesc0lxGEXY@!bfI{aX^Lu9}oO7@g6j6P@{0h>Pv6it(w$=d~jt#OZ(0bY0OIgW;s=
zI+DGr<P)9zJv|77Pkbp`B~nT5i7k=07S)q}qf%OWODe_U93AN&7?p?<a`t}{A=yfK
z{IA*<c*V{iHV*?-8serL$vYS`6~({jXlT!1C0tD_rd%p5Myh2|xh|Nijk?aB!rr>T
zTl*!+znpAwM4)NJQu@*}$ym-+i^w8H!%XVj)Fzi@bqe2wFj+*<F)XL}zXAN;ofrx*
z><Vy!ceQvJ9O#fK!U9t$jbEEHKav(H?MR=tEr@|b9H-uGCzx-{3U<J*0K?D~&?2@l
zEPj5Cvrt0XfSmpF*(}EV9&p#y){c%$sE9W2=1o$f?TwMq8#kmR;LVK(PiMh_0|Te2
zv#F;Cmb75(Mr&>DA|Hu}@xWx~oV+OgEm;acZ$0kGwb|p@YSiN-)YXg!?1jETCOW7+
z9^mhtDqn9^vTx}Im3Qf;G(3FbS<AJ2D!w!fuX^IGS_u2ih}-*cCS;t->y@vnJiPv9
z2meT(P@u~5#XWNqytp_bA`<ki`yQo7N8UbM&%F_VcsZVrc_ToGjfVg=!jL)0DGVv9
zzf5F)+1k*C3dBmK69iBTyL<{y3dh|%<C+Co)_Cfa5?ixkt@N5oVSzr(DLt6Uv$wX*
zcGCUSY=Uj(1w7G4nyS$EOO27mL;3{=QsWDFVN#lAu91(aEI=$RoQGfZDAf(ej<32C
zrkrz(U7_fGOp@#UZ+Oms2hZW676b}n$|9%cUpkW&|Lc+POLI0>=N{7=lE|}^;2oW_
z4^>JJ@m)-?<>@Wrh4gy<dsk1mO^>OXr3puJ(pPzF5$b=xU~Ki_;;bzj=cFkRoT5HD
zlB~CftYaHng&f-aVoFnwrj&^B2*W`!6PfdW+uEuWvRu`|KJAJ4AG6p@Qm-U_{wm`C
z<QGfi?EFt<NR4p=UMN=zTeto;KNnDfSu<l+l~n)W(|U2m+7$FBFZoUc$d~%CN0=ha
zsEo=F&TutQkM?gBn^@L~wQt56pGL<mI`H^`PM~A@VW>=OGL)cY*0-?uUKp^>Tqq>P
z9p{D`)!F4Nf6=@bQ}df|t1=^c&|9-M>M)s9B-?qti_muT9V6#QN5^|rlV@?69G_w3
z%%inN*|zl?aBMJjTLrkGwt5nHJk03Gu|Y2clgUpmi1{r7Kst95Wp84R>{+;|LrMiR
z5eJxxV7*|t4EHalb|#WL6wTAU;#$93JSUiadQf`BO`?XlpDK2we-g0Td?8kc3+Qa1
z_fHP=_osDif4_)`vqzFa(Y;uAXX7=v(V#?<A5RGCFZp$nY+snE^NAF!K4w%mqVr)C
z({H<WDwR8Tso7twOv{KVc4=WY2ULJe5u(4_6jAC1{<=d9oBnrlos*NJy3wX4;wUaQ
z7*cH{S-swI()ld%v19%HPA-+}?APg^s91nvSm>Q5zCkI|&G^Dy-&Y!+GA40QYxFER
zjeJ7sQ3-3}%1ynG13-V95+w7!W6_u!t`NjacxJa}OwixHREg6Jx)BRNg5^28+aI)?
zb430*#BOWBHem$*8fQ!@m^A|=iiosq^knba8*Vum+)?JBeOQFG4lin=widJ}Ts-$7
zR;O|6T_;{wp5trCk^B>$H1wEhYGLMp8#!Q*6xCN}3|Q`)I2o7{mza_~v+k^4_&10{
zVzcP422R6YsVh#XjmyiCFOPL&&w`s<>?Wf;@52{$<#GBO#v3fQu|b67f&tC#L#Zg&
zlVYe9_0J<a{h7k2H~=oPY9i!e8UJK*D*Nv(zJ@8e?Ma{SF2KCLm}C;Q8TJ*7%knCU
zv96Fb6#yv0Lc|Yq^#_<}77xP|uJ+O0K1@Iz<nwV`l?ugW@}Z7B)@R;3Mufz_?J;pl
zifM_P6+}eQ>lRYUt6vy=B0;3V#UgJc@6R`sBnw}N$SC1c;Am=~0Ex!DUV=N=%H%tf
z!>pSlYf2G{zPGm&%~}36-vzgJQ{gz4L7xI9sHmHY;2<KK!62bux2nH?V(1XQVezv*
zPvgncEL%0N3;eWHKL0}J6WO!hV<VW^Bxn}OsxB_O?1@iKzL+Tujv%FR5)V1oe-slS
z9F`yvk}TtHJQ;>n3xDNhH8o|CnFO>=EvTc{MB{LRB{+o5W-!F>EShtnfsMA_qQUtn
ziX-qW7X*c&1yUr1&~;RPtscciVn(HCE(}*Oa9-ydDwL40v8tbe9e;^L7`~d=DN3Yj
z!wr&2pNYhx&$MQ3lmt0eYny33W=C51Woz{PlDpoRb0aLt;0C9<ru3b8NbipgqsX5F
z_Oo1O(yIR+j56VXP<P+ZeBkBdfxZ;G_L%QQhtD}w)Ljw%*KoWQM<4&pc6E;?%cJvx
zGAJ6QyKbUk#G72{U$MK)603LDZ%uhnPl|byiuUxG3D2XZ$U>AOJ6-ZTGai3XQ|n#n
z>IB@6x9Z|uOKxwgL<Hj-%is0W<BaIXv_&PZ@pV7E$0g9!uJvBb!YwG1<SY+udTK=z
z8f;Z-_<JgvXnfeD4K>orA)nf~JJm=R$}I|26tDYFf^=UMS$ID!L8cYjq1Vv&x3ui1
zYebb=%9@ftc`Wy1<s*9*<+0Y$*GiSxl)|^s*^QNlNH2r_d?O#5sBCkYh7vWix_Y>g
z+LRIhHL%|o#bk?K(3J^q$b0@gY!2KxAP_-5Z|OM6TQ&YT>$K<fV|<)f$SZaNQ^+yb
z4i<xatP0U8OCqin=2dh82c~7d(n;AD;E;l^*oo6==UME6zJ(^)%otU9;n|&GqbViV
zQ0ts%ON%*m;jojqHLEsvK_X`fBV<dK{@q)7AcV0bk(0YXYu#du+`ojo3__4dTowj#
zv$@13u-(qghMg!0K+8#Tw7mZX@JO&4;HsH>RNaN50J`t7pXa{0R00D;G4}w!J?)Y9
zn3iQtI?xuHvmOAU??j?9!Cl1&s_HBBtl_{f=FsG7BSN<ma^7zJR2Q;7*0S81DfM86
zi0vreZ=HE-a6{0(0QhQ$F=*;dq6nfAC#cW4YL3KE^n>n9-};Z6Tzr0bi}c?+xV|yk
z6cuHP-u8fffEeq%uya*hF`$dFgWE_fQHTFv@?*^@p-MPBv_@nq85XLOy2pi6im6aa
z(oww&WYKDcLck_(IDgRpo$;W+WD<PGK+!z|Z#i%KE*&^<sqg=t|AW1DMJIR9LLDGz
zQk1;KCv~WEAp;uZlMX0--ZhX(c*<!%P9#Bvfx8KXU^8<pQYkQ=uX;Lv7k?TDNG!F|
zgZhh!*Pzx4<j*xyHw(>Js(rkmH<0Pcz6=33tQ%Ft&Z}*4itb$zbL*DmZMJLkqQ2+X
z+ju#*|L>)Bza}8#{x-~M&s#a0+F{i^Nt;B(XS==#Pa@56$Pe!RZ&|^?EF2sK>4Gv*
z_OK*W9xo5KhbN*dl5{Ut;LhR<6*p6aN6=A8S%u?b;?@&Bu+VVObqKwPAX$8uKto^&
za30KDCt_s=T6l+Gm&~I2k5m0Pc^2$5X?B<?1b>XQRl*kYhSmjw-W=Ef%;6dP-|6B@
z=TD!4+mL*_>ww<@XT|*(<^cGE8ZPF`9Ks4wvZ#Nfbcq$o?FI$J0ldMH81-WhavJLS
zEPi+qozP0}q;F%tNc2qY-n=_W2`@rM`jk)-_WWkoX1odgRkFsOaGvXeBD}ka(!@M&
z&^0eDbR`Iw$<X#(##@nmT%BBV?;IV*EJqPY_fygtN+n<R>0q-M{2-Od$<l=SWolA^
zjy*xTdUbPX#e-kl6T<4VA`yRL5B;+$=s9}NuVb>|4d|K2TBAMV&-i?Iu%>8GhJ*AX
z$pg1>ds9;E_6XtdGq-D$s?`2Hd+hd-5^tk%q~FrtUuhli8da+LfzbQc-)8T~ao}3S
zJ=tV#u%-q6_N%I)hjz7R{U~$5`wsy^nkvm4wa}NOT^MCfQ)Mqf-EjW$OXdmG#;3)6
z$Ap{lIhrPOPG2h11)nZapWQ96Xf3NX)b{1jtF+Sjp0R*#_|7@00|T)aTj)dI@x>h$
zG%hPE-F&TUIf1i;u!=g|98J8!oE@u09VDjE2l4XkY=t>K@k$DKh#3Y5+N%=TM7{iq
zYla!>=}@qg!^Ml1Ux^rcSn=<ir~)Z(t*SI+JV~;OJj9=C2$5~V#d8N%pzp^90}p5M
zOH27#89xohstODBmjGKJtyop;P=*+;E%ab!MO_*$DFHcQn*!|ifK4-6F1Qv>{d+Vr
zcs8vXeDTFeP8GT`s$07D&X%_T<v;6rS(%gT%*!Jzb+V7AhKkOb(f@+0tK%?LGI6-`
z9(8phQ8jJnG>2CG5^uAutbF;hQQOH4>d9O2^E&d+?}!bYJN4D|eq2QbH*`1VwFZc?
zSX4Gv!s$PCeSB{I05AP^pPNOuG^J&#y&4<CFe!=NR>`&!V^|}^4@2OokMyNsdw1Qc
zTV8fd(0Pxtm<$3?dV0~HOy{vG03;jjc6xS10!;SrsSck{(yT1g+So&#voS<Sv0VYx
znU7xd_Lpvz-?}K@gexAXPGLQ!X&NAlz9Kp%JqF1xc9iO)8A=aIQR<gZ3M(+Y(_jKu
z59WAl6EA8gd`c8p`12sO_6`bdx@bb`yPcKa{AP{WVXC&Wi@kB%Q2G1Ye_=y!uh*Is
zU=9@x5DX%{95Lab+d35<-hq`X6Vu|CE$<>q{!1_UG;8VoO<CuJocUMEhc;viCj6}_
zn&b$GuMktwF|2;PJZFQ-_iEs^Yt`|yLn8XpRWE|{7wi{Tg%3DJN|QFrCxXlgBE1P=
z;5+zN_CzXNINQF$&L*jeNV*)|dk^zAAzC5Ey8D>@`Dt8B6Rmbp57zCWnA&;{_UY_9
z-hp*DQcUXU`Hr>KKuIl0q3fI3S2A_KSRPkq|CUWANxFPW={>T~YTY+-{Ps<iqo10w
zsmmp7wmQDKSrgBmP3v9;irQ0=`J$(1xanSrZufE)|D`6?YW_cQ)io>4S(=E13Ldtn
zl7fF%{|1Emyw>-$8;WNHy-oBSeNIkk&~uus4!2Rv;i_<{I*l^VN)yZsgPp1B4kVlQ
zxt&$xx41x&k^pQWeaT{GkTT}-h5kbA@5w$ms|Wbw<aP1Qh_l;5B1q(tMOzt0kQTCN
zesfW<epr2AVA@k+uhr}7$s13FTV@ngM9}J^ff}$`ZizyUWhlmpknb~YtQ~x;6YJ_P
zCm`0LhM?kY5kpwqeq!UEmpHl3Terw1r7$+!+4epu44MI=m}}RM@@nGZ2C!;R5l4vX
z<K2=6xRqmBsw^4&M;kpKyF})#pA$%CGiSNiX?K=)iMy72P&}4j3;TH|;fOVvn%=8p
z&+Ensz1~nM)Hhx!Q%U%}=~m&R+S#;jz3n`9*ON~_9lzNj-l%DN<7R^c`~2gRF1C4`
z=}S4Xc0p)GuwjU=pBqu!g|tXWx#g}%wpbAbb2((sOq-F0EZG$1SnMc0h@As&pf}Kc
zWIo}%Q_mrAiK{&<uNConcYS>RtIPjiCLz533fhU~-<SVUPjmeuD3fKK^I3iQTqmeo
z<4ObbBTBXE%S&Q4E?#@y!Qc3)rs6>2?g`g*oP5FUtqF@@MdX8q3Lj1(x_Fj*70LPf
zzfZb+3_1iTtXsLYo=v@5#rIgpQf(fu$PArM0sLhv@34E>S1Oad1Btv`6J_`(mn1uK
zF;{zC&$>mvUN>B7t?xmVU!pfi&ul+R+S<kJW*#VQ3}yxCN>7nF48O})zaT%otY_fo
z*V@YU_!I*#i|M(yJm)_L<NI0`7cZ=yi!U_y$tnJq`Ir4E@;+Ig?5gU8#fvSCTVhtP
zj@k0llZub@=N?pvK<Z4AXpKM+xPXCUZvD}8Co%=@cg`EJ8pC{EMK80Fv2Gj5iO-YF
zgw)gneVKt9y(KUMOf|D6vv1QfKI4DetTrVdK#+8Yv+oi-3=Ys#5c;6AW+pG_d>OqD
zfZ@+dDW(2dOic8sCwpcy%pol-+kh4$Tb&w73?c{Cv5f7w2S%3V@8n|2geGG?%=!jp
zD%>qd0A;h8FYt_aS(snZm&??GdC1`(@Q(<pp*D05n!Gm;^9cV#?>v+(MzJmj@hc|F
zDguVC6#QE}yFFd=E6hkK2O6(E?H1BpM|0a>$wIrh0~0W`<Fe2$=Aww13+ZXdcctYm
z+-weull_8vf0>~amHXXjb<N=N50;tHE&4i!nKc^LA^M9B^L4v+B;rbEDq8SUEkM>T
z0IbaT#c|3-Ojb{4(;F@c@p{ob@@oFThEJ!pv>@d^CTULC+H{m7Q3(Ysv$#vE^=YJ?
z9DFWz$rJ$PTF!bFy<a2v=bL8b>uukQuSpcQS<)NQ*XJ(<t^TZ77*uoawfb<sm%hVb
z$f45<t}R*X`j5si`g2*sPk{ND&WArpzjMLAJosx#>Eg1Ivm0AkY}v?S%HfiAX0r;O
z)WTpJP}-&0bNPBSr>W+jf#8`L$J=JWWpe~apmP-4&8S%bq*7Q*QK66sIN!ti<vZ1(
zttCjwJ>vgbYuc9NK1Q_NHm3_syZ5D;@{Z(BBGXnk2+b5Z6X(~q7B3IlxmliW6xKwG
zftZlWooG0_ZXDmy{VT^gO;=?xM3q*7M1)CNjm|!dXvA$iQrLucU^%QzgFX=pn%=i_
z+Mhk^;&jO*r<nVP!H}IU=tQO?VwxNz$#6r9Cla|^4KU)i?c&|y3AxgJ{=D@ku0|c*
z0jq@;@)s%)row!=@TLg{ek)<_iG{BROA-Ru!Ag~8o~BBs@dy8|Z5bKa(myg#S0j-`
z%fLuBORnlSe03lPiSbtH;1iFzAN!?BPRJ8B_1v@Pf9f%hqcbEjAN4ra*PC>deROA1
zOt%^4q_%sf!KfgkM*?|fdgLEtuj_cZhM2xDYF5EiAG5y}b}u9h^=zLQm^Q@Z^6FlX
z{gECSLY~cURn@>QO1_o!HS9Tyj#}m(kE|!pp{k~Oj;zOW-IsZwZ|`a7lYC1*1hX{*
z9;5V3wfh-bO;PhD`dV*0OBFeV2=0Sq^_YSv`u0plc~$Lni~<$`aW+B>7vH(tPLveA
zzvycG(T@pka{B`;!nCua#cgBWLy2R^_t-K>_Br8WA#VQA;5V)`r;n3^FTmGf!rAMP
zC?W(kNU9q*rGFOf%x2!hh1u!3)x(hiw17x05j9|1W(Gy`vVwd*`<%~g%h-P6mczwn
zp0_pyWwoUvg4vZ2r%?!BNB|Ii3CuW<WVO(5j2i^KL1Y+OZb#jDmpZ7-p2Ru*$Z4%)
z<h17|i3VD{BmzJ%TVVn}$TvNM&+kBa$4ESnr0gF+*(7@wXZU9WO2>63ZHxdWQU{lP
zjAhErU6uW@z0LPb@bcN*f9T}NeT6|$>ahHCJ!ZHj*E?Bh;2oB-+$_;^d?Gskdbj*e
zHVlF4YsG+tf(dSA|LuH#n1Udb!`};ccn*IoaOWMV%uF=%AzYay!c@6fr|XI>?6!mE
zZw>?#@aZt;Mkc8sans|)EH}T&3?U-C?7!akhj|E`ybdt6t-1U>ezz~gM0_J$sg5q>
zhASV)`H=5PG4I0+;a>t`eEd%6+xe`Izqn<R0CepE>WFU7obKqW@G4S(^-7b}RCNFK
z)F{+Mwr03urZq(gu$WCtL-nD&$OCM&VF`JXew>X{vSBxJCkZ>YS9@-9Y;T-c7slOZ
z^+>?*_@mq3LC5!ai?>h+CQ>Q~*+$V&WVmW$4L@xPda9V9aG#nsv2x73Bh7S2=93V|
z^-{4nkHP397cI2fuD8^d?K>W(PZ6<&^#C1?+}KFpBfGA`hzJQynx+84bHbRz7JG!i
zJEDR7l3FbRZ^F+PdIqG*0gro9N`yQ)qlWhc@`x1GV9+{G_5=C=^qJxb$S4*|jnFy6
z9Eje8aP@bQkO%c;&zq%Rg?TLM*~)Qy0@ZDVIfhMq2Y>l9D?32wJ=9MQXt`!EB%+G+
zX;{{d(}jn~Oj0eF%R1t|J@k)(1}@upj)y9r97!ZTH5bN^h*<gK*;%+ADY@WBX+cEm
z&?JX}VR>x^5Neb9fJ!@)b>ipsqde32s9ER$cY&9+#;4!wDyD0hxG-~9ohad67f4(d
zycWvdN3DHo935{3j#Hrxx1uU4=$V=eQ)Z1>l7rus=m8=cnn8Ns@A^I<C0AFuUhW5?
z9*2^i3myA>P(?Cc?zM!uz!@&|OqkjEg|Z*7^xnxu7QEYg<;R-z><=NUQd6_jaeXrt
z%k^Pcb6H9q(_!6!FZyYo4CGa%vi&ZUt58W<P%q86x#{i$XSrKC?o%FYoV(y8bW$>$
z(&OKUK~6(5z~oML#L3J+^LB$CjWU@t9rKeJ_ZyX>+9=Jj58xIH0Y6X~w~GtQPy>j*
zD<HqaTfIf8KVTRAqmBE@*fxB13MG5aME%gx-qKUTgX<a=#nO$Et`e4d%Uu=%Fuulw
z%rVS&@XhbYlzMf#)N6Bx0pUoX>tc5xlLBu05CxEaj1OR9rT@1<{;jC4E@QY$U0v{J
zoe<4u8)nTrJWtu3L?W(%3EiaF_%_ON99K&E=}p<UWm^t<6JinqhG{aUK}c5C*UQrR
z8XLw_j+IDLGTZN;o9PPolV?e?+L{a2h*4`0|Ho;#z|@|VDVZhGV=3da$nn-R@o-U`
zS9LrmUdZ||8WyMdTSMkY{gN0q@&0{5SmG~HaZD^n1|*1|xGYDHBIY3Lsy$Vr{%|;k
zaXHD(6$!;r;YhMjgGAtg@Wd_U7{awFDmYqs0A@K#aY02?1PmFv%p}i%7zUFhOy9w)
zFeISJRsH0(nQ?|W{6$LdgjotzO<bbzSaM%Bnyf#N$ldIMV46rQmJ*#{YIlYLhLhM2
zF2%;wtJBE&+*mmOsDH_Th00?PB#DTcmW^kOFKeR0ftgrFXp9yH0sFiHFSyG>i2I`7
zQ<m(Y5kK7gjzzd`K1{m;SYU=i&~`B&#n4y7AVuK&h!&JY(Wh=KM6krknWZfZ-=emO
zfTQBWvf~8#yUmY@;vJU`*7VVQ)sIojf$vPCYZ#{7Yl)mGxbelmXWZf639Pw&o2q~H
z_~zC>Bi6Cj34Nq<+RyD?6okv5W$I8OAnH4U7%|1<W@>_KAQ$t~4^k+oigIS9x<Q0;
zfX*G>R8)oAZHm}L!?FRtWI<TN|C?T>weHpWpMMSk>q%Uvs6puRhDc;@^p~-AdVTR+
ziFqAMKRdTT_2InMe{X9Pl-R{qh1kdTIoqq+LPbI~a!wlKh$Xsi$B#VETWj*8oA>N_
zbK+Ch-16l8xT8*FJi<tgU<%cu&^B)*ZgOTf@^{x=yjXC~?j<;vdiSn*H)x#HiH|ER
zxZ?1;zsYO-bb9SH)NAftV$6_OCYO{RG|_V_*7^;8nqF0cZ{8C6G*<0Ds-&W1Xtj$B
zOOR%;?p#TE0YwO*I$3SYMPfH|4vtp6&cwwgzIi;^&crbQJw&razh&(cjLTb^(xzOa
z;s}UjC?n%P8WAIWsc-5+uel)sm^xaGT>xjBt--07zLTRnPzPkSH?t@vEZ2C-oG4Ym
zp4Qeq6WNVQUVKFs(Nr&^C5hQMd|dJOUS<-sZ6bM1I$-8E=@An&zJu>R-3q2HGYBwh
zgT=C16afYgIQ#v}eRd1EHG=ghT#GuU2?)iPaq5M(=x*nPKg+XilQ9DzPZ^L{oJfOd
zc7G%hnd(2gmm_NWQ4@F}qCo0*n>KZ3kqcI|W@<WB%i+o7!LGXQn-dp379OYhJxRl&
zye`mAd>a9)WA;n#7ni4jsaoIqQdi&NpO^&SKb>g-LBe6&hTrHBG`(Wpsym8t%DCdr
zs(G%OX-YmX#$AgGO3)?!w1*)3so2+5#K2`(#GU+G==S!z^m+5QOKE&pO3&%}cQB5P
z=$<q4?qCSdZU^i!{TNapkUr?MKX$**AYC<vo6jOxaJLyvzB~VP55+mYJ{+4ulWw1%
z=Ud#=gnoOKZ~MsQWH=)DxD8sAMhk>H6|_{|U)GST(Kl2!i1b|v`&Hq7=|Q2D4hxu-
z+|Y|{UqUgRYEjC{xlU-^{lc-r=idb+wlrm6Aa>y-wKYB!YPF;8A^_H5P}n1s#Er7x
za*_eUdGO4%wa*N9KU3Uo?MP3OuK4@;0%+DO0mQk<sV%?4b06p$inxH1)wp2Rj*~8S
z=DVE4v;&h+$2TM0RNmnbF@pYxH=hS5mFJ=N_}nxI*rrVzhx4k_7Tx2dXPA?4@K<g(
zx|;DnQxJy3A$e1Nj>t<pOzy$vhTltDRGoKh)3PcUSeW<OLl3pj#d_P`B`yd=N5fGF
zs;h%RD3VEmA@IhNFf>~cs#KVj^XQqrawJXwQ%Gmau=&9dz_{Q7JiVzQFW;L_B~%M6
z#~aYBkPH2qvIO<3?zoc0?G)I<0F*AYj7T!G(2*q*k-Omym)C&0JcBUbq=(U~+nUhN
z^HF37Flx2?@RFst64V{S5%aHt_c;rgMY+&=zT1OK6iVV<BQ(_8`<!3(y$-HeJ4Qy<
z8>q;m<2N}^G8&8l%dR8?Js&j63R6Ls&zh`cdZDB_`vZl?&DkBKnOucrZA?|Rg5!<{
zLmbd7&O3e~q`FaLmg<nPqd{CE(3sS$p7$;D$Z_!;`)Ur9R1iuLFA6hCZ{)#uK^su2
zv_TSRPQ}HjgoHR{0b7YQcUKm3W>nG6fSu!jXEL*PNprV-<iIERFKJHQB}!$9A~wuC
z9wiq04T{987M_K6M2W;8woOVf<x?C#;u@D*ai2IS`Np3cuTI-5PLfx7%pRBSl-*?)
zndg#k1}bEUuR}tpK5$(d42QaP@L1|>Yybzj`{<mWAtjeZhl%6FOXAO?k9<5s=7)F+
zHupMu<C#84Ja&BC2Sq;1$sNxlQ1iy)3G;PmFjp^s+Ji|xTIlX`GT1{t8%^XB1W4gM
zwX|*Kc->sqG%;({O#|6%j3x1go<mxiC)#Z>Lp?IG5l9Vc!V+yuY;37l&abQy&1tU{
zLnTWXOPa%=K|^TSumSS2P{Sb99A@KF0?D31<IuDakN%P}iI$tjeh{8K!ry*|S9x^v
zkbH>#bS$D1W*#?WKnucA+DV!wV|I{t2<BX~Zd`0tr@`J-r?)KKXB|%4kvepNlZ=iF
zL#g?-tuK{(mM(4tuF6&u`|w4A5%jHx;uVMgo*38Z@c+-}oOAe<YCN!fsb7&_LrDPH
zAUjLd9%_xn{{k`i_f%qG?eIM^bA)l&RI)UA)s@9pwzaiw6D_OWOkpaS)zjGX3y{<B
z3fvI|8F|y0vp-<sV`8aM{4&8bl2&gM8H0R-kMx_SS0VSE%cn`@hpMj4irRG0A$FwE
z6!d{=u8`)7;+yYXFE*#c%MvI@Rp$qCE;_cjXO3&N>l`qA{EO|pZdLN#$i@?2ZCO$#
z;*MORayB6~^^UKuS}KLI5J)+Ob}fpI^6qmdIQ+F*Doy9E@D{24H8uI5Z`xHc&yA#j
zr*DJ;h9D5%Fqa@}@^4xgg~5>j$lfMSEly=Go)Ed`WQv+-O_{QeXku}WyC^e}mMFwf
zXHSn@*h@>E04{fL;nUv0y~B!4yV2ImmoLl)Gpc8vzQIIf&~scWkYh*+B`p~G*^3E(
zovA?7r_|@_#1w>RQ;EVUjqjROygxid_WACVuwZjp0hg})N4tj3D)HJ>LPgN91h~xW
zoRNZvp}XX_KdstIk3!sKvM-dE4dO3>BZI<lDHoejae8~pKYX~bF1!i(vhVxNg-w6s
zp1-X@wx^zNe2)90>0Qu!U*IcjjCd4nB>!-o?7VkU%)5EqPz&d?TznsU@FskQbtD3H
zqT6Sdx6neoaXB5x(6Z%CO~joMHe+DGFVF7FDK=lVP(JNX3rUoTKVZ5^!P^?Liymd?
zx%@A@IC9pBjbcyy(0TDO^*v=<N@*^R)c)>=B~>K$8YCqAzL)r)#GAc*1$en$0JBde
zVg@F`h{CHp7*yT$W?3vDOb|}3sCP9|-6&tjD1_s+Q#PY^YI6A#x`)~wWc}HfmPU*s
zF2d>y5lI2U+gX&hl0u=6b!dV}Dusn5uc1NSPsRhV5f6rK6?8r#b^kJ(b6;k7R<Qc^
z=FAJeAMZxU&6)E<_qH$~7&S=5?@|Y6-F*e^bJ~{ePxa38y^y&%>1R*9hQ41%*r|;d
z+RgtSisQ=HED#=d=)Y!JtjX1uA@LBzf2=3*2#iINi6+`|3gvMo#f9Ke#&M}F-rc#{
zP!<)bBH7ZTn7`NK{rxv+IZ{_jL4g>ve7Bd27<imZ{cBVL0o6%WL`DOKp*?;~<Ks`>
zJRskn3qw%#eX0wp$>q%bvo=~SUsK7lo<BVMe<XQWRjTp}5E=$zEoBEF_=9Ui4{P)5
zDTzwH=){)6fq~T<XW5o_|KOGri>y(2(y?p~YO;lBubzKLM)UGsJ!PH-u0?kPc}IF)
z(A3hYiS8v61N|dt0)$R}^FLjxl7{{NMgywAwsv$eEtpJD{#Ci1a}y%E3(Soz4EfR1
z5>HrX18{s?C>^JWh9@^9eTK)MnU~j0;>{Iq6od+Wstz+B^5{nBL<n%#dysXfls{v4
zy6lU}t~oO`<$ou4!91Ni`|sKpzl>H#9f-m4>#DBaoc{a1m`uM>7@b7WE@hVo5O}De
zepE}DVD2+d2OIq0VI>RKp%*nVe-5Zn!?Njg#DQwM7BEwCPFAjV)XHi@I}t^~tCe3E
zZ1CINfwc}x-VMYc>h39OVJ1cdhh}PC0>3(nv~ztEH$l^i+9F+YWmpG4q5u=#gRr))
zbgIjqIy3_~Kb@8|BjH3>itsNBV3Xb*-to@t+sv}NRl2Uk<Wq_4G8Tr)c2oZ0?}EUT
zgh)qb_VPBv#shoPlUr#)6d<V_tI?^cEcFBZAB_Vy_U4Oxw8JXvbjAsyPtrzXwwq82
z?3cumfy9B4pRV@xMg7RuoC=zLvF&-XJWqOXB@1+ha^CXOo824VS+Ja292ckRMzfbS
z%1WPe^0H7%54hCvO>Ka6uN<y&ce_7ZK%m0+lWW3~JdK>hHxoQr&c-3Xp=CLc*4#$Z
zvP|`X$=r+&#h9&IF&}ke(fR~|bo(L>neL!Nm_H&TF`OdR*bc!CPHM#t!}Kr)UqQ2k
zPaj>bW`@D8GDTu7Q+W|3r6@^Y#-|N-Jv)Ig=yX61nH@4i<AB$v0OYqWt_5L{v)uW?
zbd+>#&_W8F>Xi21LEW39Kc-bp&Ixh(yelI_cjdgMGGO6?iB8q?6;=z^&rNTReOwU<
zHsMF>^$DeM8#C`POI&G!mfBkz;zc}f_kS=(JV=a5%v-)=dDk}J-cCp0^)I74Ha1Q0
z(+^^^M%sZr-SfNXt3Z$IgVPzF6%}k`-lgL~Tw``v+MA6&#-GleT(Eil$AJB_Qb#n5
zEm0dlCn6eU;8cyJ(^>4hWp^%l)NwxPwypul=pO(bU`oBqX3kvUW8rzlNFG?ld9^7%
zbG6E%8u+eX|1M7uk(JWI`UpYZ8SM5gW*vDXtaDSsR=qfmgM)k1bm1!luuZzx7mcA|
z=}&h9T;8VWni$1I7Gu5VS6{jOU{z>hXuLTQTXws2i;J5*i29n$8WAb7m}G<bFXI&D
znnObqS3S6VWwj(@J2gY)+F2>puD){r%Brx`^FE!-+Mmz(ocXzy+39mWEOiw(%4(^$
zvQy=nLEYXk;F`!g&QM%upu43bFhaYxYw0IM1~74_^^uC>54zR0wpX~iVGij;?eUob
zAzUJP-Vs#`ge#huos`(q_k3A;2}D_D2gfJU2PE)A*Qt+?9@i^S(Nv<EXe6@gmE1U)
z9>sYBOO!pSGSG}u6*PnD-cM)?HN#-pXZOypm@=L_D}!)$XP*4t$rxoU!z!LcMJ=|7
zLT*QpZ8hz!<1Eoyrpt*}+?*{k%`^k&3wg@SmtRHP0<BdZwlrdbePFWi$ba48Y2=Q3
z?@J~f+R%U*U&a}u(@G@LT4KDZ&d&EYh3*r_YsyRGZ$kfN9$@}B!+akYb9y3n;$YoJ
zdan+we~h7k<vvp3U=I<lkrc#0f!?Wl))ovy$f|I~eO-@v{Jq9@f<<nT%c$904_~sP
zB8I>q+cV*IoX)r9ua40KPe&-TF3o!LsxL9%p5Hc%8kce3J&;~ad#{4F#V>Q@pO*Tb
zlzwabc0qz9^9ZuDkEWB7Q`7nfDh3ANM_0Dy<%Iw`JzQ{<D`nSEW`@sfp`4;3mtPAX
zE=7qhDVv53w~cbNdGFYwvxx!=+Et#acxZ4I214k~@~a%&gX7{ukLL^H#t<uqLBNL@
zS8*ZLLr(%|@JQXGeKVwp!Y+TNc^rMpfug+ksNoiz76`8R{<F(JOB+kP4Y|p8{N%|g
zO7}Q)>iz;*A{I@_H;7hvF5g9E13WB}^a%>mp^JWD5@gv_D)W@+6q7>R%TQj4^l~9l
zy1=Yb5g%y5x#VL(LRqcvRHl?nSmQEX;o%joT4Ck@V*d<aKkzr)o-XcazH~~_LaA4U
zp5}srL-YDw*(n-98Kq3R>=f7j`V_W66G@32Yzo`?Cx~`n0z4arli-85bR`}GY=t|=
zz@h!URr&S8{%7R>Zm+ts^U7-P`O;iLM7UCrVUC!Y*+o>*7yVv8m{JO&7YarNtCB4J
z-Ga6Bp_nP1?hjvuw^mLPA(6#<XejuE6E34pN5HKyF)?0Bc)FeZb8XZgYt3t`#%hOk
z@_N9La0JBR_#Fc=(fygP<gyRb72$+Gfhb0-UcD;=^RkaYk4@OAdM4%F&q9yR`hIf3
zjYk%FK_yzR$V5-I@ze&8bEywVYb>~Sa+=P2Ba<%49`cLZGHe&H{2oCM-<~P)|DtEV
zWjGoq(Sv^{-OarGm*U-cRFb+*t^^Kjr-SdMudmm8@pU$s2t-G&OZ7rf*)HaMp4puO
zCs+a*Tf{QNNqah%z>8}~!OO*DG-BE^5Clu0ZGb3-^01tWW!asWO`lZhSJhC``xKn7
z7GN_U0WsU4XnwF7JKPp2NiT%0xet2#pprk{yA#R(NGHNS5l$+c?YYJN6dOlFoP|uG
zSj034)uETA<!lzBaUUi($04k72w`U!&ZhSeLGxz6_@<m*@44Wj=WwIsX0KzZD9b|0
zov^{-YI)zh=%My?J`xq!9C0GIm1H{g#D<aB>e)*(aShb|%@x}tZE4@~&CEO_etnzq
zFYDGGi%maIvZtiDKHYd%Gu@@y0^KQ-itM|HwGB{}3~KF|d`^BWt_}2JiFaRdA>li_
z#VjvL3cNC9{`{~kc*$|PA$NJvy|<B~c}dAj2S1Q8SaOW(7SyP=N^qx2K&Q^K83sVJ
zX&x`A%Qz;m`~rWX3^NWMoFP*BQ|EDLT@Ex}TdV~sq~+!gyUVHH!kw=S`?Akwz}f|h
zDKF9I@f0F({Ikf*lzxXzR-q3orEeeIAAvt-(6KDhOql=xZ(((sLw_fxkVDg15UP|t
zin7XMM!VILoMN*&7TTKIZMNbf=b009gSr+JgD6^pJf7BG)Avyjt}hQgKrpB-2fTG;
zUDu@?@MybuV{^gfW8BS)`753N-w+;|H8y|`qYwK~S?YIb8+3I)Q93p~x6_IT=bFMF
ztl-X_CJf@~SD|f}I@W&*)IMBk{*Bkm`^~)ap*Ha2gH_d~)vF$W+_SU41rZ9<&XdT-
zI!x)B)Z-gD?t?n<%Ec6txrB`;?cHAZ^->21OzZq1+A(G@O#swxCuL5v(d?9++@MJb
z)Q0RLQ12r1i*v8DW3E1kKO^vt%?#AWQmbE?;)TP~XTS8BIAJ+%C4Ik0%p}k2rZv&g
zYfO)IB!}&FpIb>-j)~Lv`lfW4nPyt>Y8zMPkRD@|(Io1`a4+*`0j-R6Oxgi)x4pW#
zrZ70(sq!t#vI*y?Q$<`_t@?s>r+>fw6T!7kE=JPf1b*`KR^-!9BUchVXE`|>^YpAR
zBOEM>K@Z?=CvwFKq*MQ{brZ!-{Zd4II)XtDehMsj+x++t%iS-(!uTv#VY@{l74=Fe
zpmtK1s99I=eIrKP^J!+@G4l^YL37nX!?q1KV#RAvO-uKUX@WvB#M`2V-=)957vHab
zap}c=_KV>c{T$8vkGdWAS6|<D!n<o$=y^1*$OXRgyIv);n57kA&Vd0X$qH6RHZr55
zW9+CHDbe;9Y%6XsleUEXP)T0%c@7-vq~SFSFO#j{Ukn1PBTCXl>G%kB7#iM#k0w-E
zE&v0-Mjp#20x9B}dySpbk|;osVB5BB+qUiQ+qP}nwtd^SZQHhOWAE<7#LUCa#{NKM
zW@Wxr);ZgD+H(pPOXK0j)yDxgyF4@auU<Cfy5<EvcBfw@#dYngQf#)cfN}4>9oJL^
zF`!+)HzK*?&Q{~wTCBi@XrJCHV3rs~;iT8`xD)~rS>4g`hn7OG7gw<%rtcvg(6~I@
zC20!j2N2SD)n+51ZB&Un$Z=}I4I;M=d8^VU0NZe}Z4IWOh2G`t;QQpcJUU|0_N@Is
ze`dmzMO2^u@ZUYXko6u(Di<Wi+j$fPMFx|Q$$Kd7E6vE=R8~ovd(#GYcb`oW>rGz;
z%c$DHZO7eS0!E|!ZLB38a}$sjGYb}-_yMb@A})LPigzl+;TP3eObcfd-R^FfaN>Ep
zgke_wmGn!-MC|9GLQkFGdHl1o9<HkNTGfdcEn0cT_1H%IPaiJk6rGjDmY=$841qM`
zUF;A%=J7@03xzQK%;V;L(~GFdw%?1R+xo$sW{Y>)o2-P52*z~XRLqSU<2$_DJMr8M
z*Z*YqGOuh6_tK5nFV?)W^=B9TlkG|+`6Cn0Z{oRHq6FJ18vC)T^HNy++tz9)Ll15{
z{Yoq0^W5RRsjy`2k1J;zo4RWe7?6DIV>s1my?m1Bms&!H0X*TmfBU)<O{m0Rj7HnO
zb131Rv@Qf?W>Z-_^uXl&lOpBgGlgxTVg#IUV=zuyeQtmVMe-!}2=4CHh><%yV%VJ_
zPSwA^+?jNMH|j#AqK>xpHn$|^=dH{umZC0ct^T2JPUTj<RRb8!krEqct_8-k5GnE;
zE+z4UrXFWM1`Kn&91IU_oYmql)y4pnCz%1_Cy(1rgX1o8ChSASB|D0`51v>Ke39uZ
z2dXhnTn@69S}W6`m>PEGtP4*|ONBiblzD-jjQht@XfbYe&pG1j##wzF;Lo5<NGdu-
z^CXvN5Y4mLrzX?vg+qG?-`+?mz9k-M*TgidGwf*?Zn%(3G^i`-liO)vdkxYUHE6~m
zZm$XcL!>>dXVZ<?y<cre-DEne6FW`OTDCjL+7)m-4cITPrw8hgFaaEXETlB7t8Z9c
z%x)TeyPziWx7-n86D?*T)^V-mdzZ_FN_qTLWenXrcru?sWn^mU<57l<$Mt@?vggj7
zpQ`0}R8}zu$`(&{rT1(~{>QY?cx688-Kk)D2<UwFOJ00I1guKPUzCT&wEkY`iCHTZ
zN@I2}98(kI4>g*t!3Tm~al-c^>%_#xR}o9duodpH_5(Eo&%r8TKAKJ((MOO-%Xyzr
zz^u1-Bi{9?$A-&(+O>h`s^Y;r?iAE^N6C{lo@+^a1k4PXWOIMv5Qvmi0u3qzPI8Yf
z{n4#pKLO*)9F1W@ba97vyeAb*(~}Ir?nx-b&Cquyu%Z}54PH1a`%#lQt$wOP^`mC+
z(6=UGFQs1NO+?a18f-aHvynlPhdxt#h2Ds$!BWD|R*1zHe_q}<oo5k~houipKp|0S
z&jfL1Cnr1!pZ;t;?7Vugd<y-_i~-&R^Bd$UTqOF-c?*u6Wqv37U<Svv_mjiGzL<Lj
z0kR<(0LItuFtQv{1U#FNZXOPf5Wk`sky3YE&F5P*uU{Q;HFww=^UOQ^6?hX;<xPqV
zemAV~zZ4C|Ey!4=nw=_M;f!f>*GZE*MTVt8BIG;G+&SOj1#K^Ju_RyJ%uFs)A|(yG
zMzD2DR00jW)~RTSWz&>|Y`#t#<6oAIA)e~E!i#N;1i;AW#Gl9qd%(=S<B%l70cuAO
z*QM4^v4Js^BqZwXFZ2wB9uy=XCjyk<dZq#GkKdlTWQ>}QB?Wcvm##okTWWLw)^~>S
zCxZfJ?9RMlLIzPmc_0)9G=5qzMZP9u)hK6!j|e|GfzeL#O_Dk$U?l=3Wqft7acRi!
zYnN?#nZuW2JpUaH0Qr!?&?lq9@W6VqeWFA9!wGW3KW)coIY~0OKx>@esi&3LF46X6
zC|XBFI-ICT+pL3ZjZWTL{zrla^+XoQj!LhMJmgztw)4d<M0%w$4*rm*B_>DX!%q0g
z>W7D6oO$&HXoTd35AB2VQ!#W10tum!8kvp0ukarWXj#M~d6O_^6R+2+-sNqj-pu5j
z6yi9VG;9kB_`$9YynC(@_0(_tC=-gzijHwRj2H1eR2ZR4lBd>dcicv+H7DA}v{sU`
z@btk~_w4QPRoeT6wl32P2u0Me?8z0D@H`blmA+`R*^VTOm-iX*m+K#!Bw(^=zQ6%6
z-^Vkz#g<EMp=854r{8Bxl-}Q!hFb6jvE3c5kZ9jFcXiZDx(4sFOgk_&p1)EfGB1|S
z;8Se&r+lnW3Y#x)Di-0Mo!}5nXWA}rQ*G{DIm^}c<Y#Tg2IZ?SS{VlFv(%bSbQL}C
z3hc*&S(!Oad_V!^B+J061=3kkFT<p1GMpnsf{lt8D2w*o0E^{8WJ~e844g=<A}nt>
zl-b}PyU_Qaac8Vw&|`Il1sE+8b3vy->=`}1i%?#WS1YpB<OCu0J2ECyjwRkzjoN>m
z_mf0TB>9M<Sw*x-HK4SaHx;jK7B)vTAkK8<^s*rLPF)IjqAS&p%7`PyJov2sT58iM
zo$3v(hj)=D2X7nMD2}nxe~cc0_;Bx&Piy<KQT5dlX0AulGJjFIMSgKmxIr@`6Q&^d
zAg_+5+Q)AH>Abu8rJ}h8SGuiu+k9b>1H=&69KvRr?-NbePZ_x{tfCTG=EWi!X{CJF
z7i`}(jp`{F*evNxlC*zfl?6MhIXHLgwpoZ_xjc`T&F+Sr%W8dVnI$7r16a3-^h`!U
zaD1|D;BSew41zI!wKvW`G*QG<Mu(YeH_z(T6$?=jaD_DgYOvfBm&U<_z~aF%u{S=8
zDB3FtWtuCzA+wQrd*;>`hNxhY%Uv5aFPA7PE`*c|@`uOk4E6i|b=!C2L;y$Vux#ve
zq2JFW|B>SEASVZ(mDg90oo=q>Vdz34nA3$1xmkbT$1rIgOJsZq^Ls+!d)x5r+z5NA
zZ~Z$i6PASuR_T+Ai{JKu8xL8_7eK=7iwsQGWk1|Kfb07JodF-dOrBrbp4qEf&^JN2
zq8n{JIeI-+I=psN7NmdCC`{5l(zF^L)g^PMs`*xOnGo_wUJVtb8mQD<Fr|1Tk@ZlI
zIjiv4ozp0*jXYbXsRv~s+oQFnS~bx|4G!rcn}j6UT5W2CMkC0lb#`RrCx(VBj#l$t
z68%VUNS&oZ`4wB8g(j_yq88HZ$*>gQNfj2o9fAmJoc<h`lI9x93g&Q`aRin1R9sV;
z8Zec9P%B`w;N*1AK5zEODm~g5yW;(U3$dA4H9b&e+QjiAaIlF+ZmXI5PU)|^Peq>g
zKzrByCJRi=ddxYC6B_}4?Pn9}G=?CdCKzykDQ4P^Bg0$6CR$nj0DJ;gH?(4IF9{3W
z@c6W40v@<4@waEUrY#x%*yjs6sAp)f|FvFB7~t{#RQi~|#E%9|6Dv&JK7QpfA+V~6
zVaB!9!_S?E<m-0?8U1IlTtxEk5fOPAADxa4jW9IXhHQx~yi(NheB#apTSiBCf{0FW
z^4ehQHr1ywqv*yEZRln8K;q#y5EcW5e^!^@Xsj&p93Y%61#LeBQsqf3;mkB`H=MhU
z$bmUd8PW}}b#Xs-)pFD_cErXT`fUjh+L0-i>|aA~BDXXeB{-MFzsCq}olgYk7cwz_
zB1@!N#FEw6oj!E-%6FGXXFtgt>J|3sUh}aWADNW8h(vP>DeqM{3R=!^gDYBbBS1bS
z@J#IuB++Y9)!kcqfP3-{pRsHRuc%j6{_MMO>YEr&D5X`Xrg)=!BZU23S@6Q9N|j1+
zI;{{~8p~c)&S_-ZZ!BXr)_8jv=_>d~F~++Vj1!|W)>jV7<iD9|q+cm55^oR(4hkl1
zn7buDE^3qv>S?S;XE%Q2TF+U~@rL+R+4!+RAt5spT}qMtBhkNysVIPXMzk3W&9ez&
zrH9~O0PYFI0ix=hYHfeD^$-t*xZJ8DqQdnc5mg@3x2c4Id++lHE%y_-!n(Fxi#*uq
zuZ6}f8+SHtBXU0<Sy-2CwnaOu;B#c3KG=xsib{sB$QNV&U&cu@(~}H-#1S&czLoax
zTN4CgEit&#wh>95N#n{AAtosRBD?1Zc2+k>SW6dg_5iS%vBhcOyvNyLetd!lMM1%1
z7h?0B3QRz;O0%<vSif?$mjiOTFT<Xrr*y1is{T}3pp>q8VH>)XM9=NF_-Qqo$(4vN
zF);&}L7HAYM%M?cRnYew!6ZAo4OuXmq;ma`<TXl{X&C{Rd}r2BcJSL|(~nGF2=Z5H
zXd)%ia&4K)zp0vq7(ST$hdKGCYt&FUO6rI`ykoON@4)^vJ3tybl=dAQO{uX*E^(>q
z)imDd@X{8!3`RB_FekP&cYA}7o2PaJXBPEPF@1^`<~T4KAZcat(;6vjIbaqB<N9!7
zufA~YXtm_2k2S8nRcF$dG~?&ShU6jkvF`=j-HV`$WJ%k6vL*tsM5E2e=BSA&O24a(
zDOip{2Nac~`_t<*H!2eDC8lw+i4WP&YkB1Jz1MqYOmWRSM1(c(%Gv3+U+#SgE?Z^f
zqpszjS#xu1U1n+Akn7PUjU)9lgtfi{#nZn<6rBcJzV0pD`Xe>yg6j#MowaJV#so=J
zCR;*#WzLGLaU>Xu4qXHEQKBYZVKXGLsa-odMP1NAwVNSGaYuNNBujmB<b}+e^aTU;
z36N33>J_&&W#KKpsv^oZ)j%CuoV^Z@rjY+kD9A>5-Hrd~_~P5Kr7XzS+27!qo+Rvd
zHd&!A5sP=<q_JpUooBE5np^dcCh8z7a#G2T7DoO~1Q96w=iEdkA*0m=Cr$*`a!_jM
z8e(3&S^6pk4EnC-ifq2#(`B{(E~j!#<@&jVY=M#*-iI4DLh^HqeN$L%tz9J4_(EUd
z!AplbW+JA^M8Xg(8gLas(tn$SxJSd@A_YMG%yGJ&+2p!3qB_1*O#139FP!*a58&J|
z_RZeL99=4KaNZ!wqL@C(pIqT!L@Hlitc+J<{weP<d4U15+L(aF1&)4w=&rYVMO(ki
zxYF7pcYEQ*T73+dUJVKu&3GE`Kp>=z5jRvTCHF*e!`xPOCVSGb@#b+CjmlX~c3<{d
zU9x%Bt#&9(GiDg=?8tH(auN1o2=tX|lB57#u(;v;^;w-xzB8iNja(s~BwMdA1E2$w
zGPNg|nff2RAmHZ*%^(Fi_c#kmA=R5f4<mi*+~Z(C^i5S3nbRn~JG!pI^9Asks=}Yj
zsI8%}0`7{nTni_@rnZ+e8uKVXnX?JG#DEBu5by~vS?ljhAZH1ml$^vfKP~lP)<+3J
z*xbBP0{^Bx80=lT_qFu)aqL1UF_lYv+*?oyIe##MQYMOKpjDYd@67=*9Iq<A(J#fp
zwC@Us9kQSa;?a*J;Q!WfZ5QIb>R@HnQ{1q8{sC{IgbyLwP{R;OY@;zwI$Px$b)kVG
zZ?Wq5%eV}4iKnyO)t8<zUd0R<ssP7;DcSG42Nl+y)VA-^0)|rDUwi{Z)-{8sXr4bt
zqK#1kl|6n+Y+WOQqx<yLpi^1BN~XSopiR%v?9&MKovgDDQGc|%R5n-Qosx7$rRs8W
zwh_MUy`mLnJ}D4=+fS^Wee?c7Vp?7Ejg95dTk*`LD44BR&ms5>KxJXL6hL7^<)izv
z3U|UQj#Zf#Gw#H2mf|%k{yttYSBu+*IJL-MS!W!ef>~0do%2UhyPv@f7Ep+#7}oeL
zUCiIv`jDUhsWl+NCD?yYN%GXjV$~yW%r6AKF}8}Mrn#|Z%J%OXZmIc-omM4Py*I1k
zTBq~4uD)l-Ql9ub9!g^RU4)>FfR+r7`a=@lYwj&?QFxwdFdBmWTid3&A}Pg}Dx4z=
z&bP)-!rk9a1eca>VQRq<0;L2|J$^Wfpmr}r1JA^xv1#Ojby^OvjY@Km85?xdkL;bq
z<QMLR=}AnyXz_7=`R4NQAaAYJ<Q&ntol(B!2mhP$*=|QBxU+Y$$N@vAWUicpUM<NT
z2D{%<|0yYL8H&f|J0wqg+oM|Lz&J!MORy~k1eX)10nFH;YNiM}3oo;xsLhn5n>41}
zDF;+2=94BTOd;pu*!~DYW7H8;ZVNzxgC@$6XT#N<es4kl_rcKSL#uv>JfCbI8<T^e
zYra=rV1qgLB9?56{tHyQVY<A%w$XBJYdcMdf1pO8)uLVTf$~2qjNn>oZV?07<~7vV
z>!vmZW|Lav4kure?S{e5$^C1eKfSNq!vuP9dxgy}F>A*JF@4NcSJ}77xfzQLuA|$a
znR$?@KnI0?T)T8_syJ0A1`9n8K1mcIJL+w5VS9$dnc3t4XQGC=yh9ga)kUUN0PfrZ
z6eBM1J(P*q@bL-s&x(8NQ$uS=VJb~Ww0#VD<Z53vK!Pf5>Sh6FSh~2}D=_YW>yB%p
z&Fq6~e;8w&mT@?Ud`_s$?0Cmq5~PmkJP{j^;l*7H7lP^_RKQ~vk`I(dSK`jvQX8du
z4zI%02SI(2f`*BD8p{`dk*f9RZje&g<%kuXAiad!e<yVY4Lx;Yfh_$HC*_TjA(Vph
z<6Bc=qDKt&zWpM`JRD>?K_+dy9xfk;P;gcN-Ki`M;JpL@%-!PocN5cY2}WTt?^OTj
zPMvj)sD*9mwl%ZHqO0{wlX!2t|D(e3eD`~vR3~L8G1o3bgff<6oJ7L0S{mIzOEuaV
z2x{b+MJ1X)OGT9QI29V~ylC-mmN6F;9wL%ph7vM>227Dfq}Bl|NMQuSAH*jKPcUK+
zn0iLHi~mk!0~Hvmm~lRlktNXE0Kv_3P9)ojZkxcI&vo~M!?>n;dcnNlQStsI9@y3G
zfXX~+_aj5*RuheT!u)F6-VsJX*0W^bt_yS%GiW<4a;tICm>&B+Ymq@wM0d34&fkh<
zRRMRA?P{LpzAb>uVPHWK=$cx&uub9+^gA~Mpal11C1DT+u~lDrITs=L9_~YP<D#pi
za6f-+@#xGuNFgU_G-r06y3ujD0H99Dn7rd-&zoeRpB+^YlDfI9InQg@r_`Uk{Q9eR
zcrz))-Ye9u9hCanGPm5Sv0o$TQX8)Q$YlCudAE4w_O^<UYF@)YZWZO6_vhtnVN`jH
zYa9wtSk~E=@WCIpms>}xOF{BPv>WMJ6NPkR?ecCM#qnXoZF`dn5c=DU&GY`Z{5%fa
z{c?jJwtf3Ji?@Na5bWQsF$0yNmqK0ZP@(#U@VB=q8-~aJ5+qfw4CIbkJXFel%?Aa$
zIG=wikZCDI6A7Qz!{SY&+xuM{Tc*ijxbznWILU!3r<woERDO)L1We$c3<G_Mqu$){
z-&i*WfS|5vFw0MmCa;CpUJivCHdGmnXMi?_SXTdInP`I7r{HSQ8_lLCsdL0ueYbs%
z_q#KG@PkS?{;+J=A@EVlq`Sw<YZzFiOAw1~iKI$#=#4q1W$_fj;n|G$ly^^wrqGi<
zec~iUK~^kL?M_p4R->`1{f{UHejitvv|&!N&jQh{Jh>)*A2d;v01U<NA9ej3v`F6z
zIGzbDkx_C^_dFp{nf4shQXO-c*p{P|1DE9Rnviub_`n(1!OYH>Dpuw;KloD^AX_;l
zksTRl49rXtX{n*y!lMwy%%VZ64@~%JO!l#wUri#33tvrCDg1gqlt3btloiQ*oh0m|
zW22|&6b@y6AQAeO%7DKv84Fv0qVm7fE`d(G6gL>zK)TDyD*jMS3WIIR(9Zhjj*%BZ
zfux+uH93p4WeLi^824Lq2l**$mpf*+%VzDI4OV<ptkj+F<`VUeZ(3Up3MxSj#iEd&
zK$?h(4;PwB)*0E(1IbnjR@g>2a|^3(rqv;gL|vdC_U#WEw4x73zD+T69@yOOE~Uf^
z`7>Bvt{^Zv5i4J-`Grz{_jj4o1%c+xFCwmM5F2Hr^hi5;ouxNSUC~Lq<&!|TYEXR7
zm&V5c6s+oq976*V|K?f^C^`*?Q`ZWJc9ZfeLMc&8JmIPK=};AkT{C&!B0s;>NFQve
z;rUzFqSEH0InEvt3TrVf$MZ!ocR^M7p1+(0VJjk4%WbcaxGiD4+JWYMl7wxElzRdo
zEN5^9jKhWC6nd%L7KvZMks5J|i3P$5vFgwJ?*LO1u@PYcS_+kfI)q@>DeaUhNNt>*
z;lN)YSSo@+)<FnBtEfyPc-X(jn&~X^MV?7KnOB+=7V{K&6f2Su6O$u51;p)u%tdhj
zQ-GE$P218W>MkV*fq7<+71Vs<X%&ND(&Z2rJzNw}(caW=5O+$*OKobl1)|S^Ed~Ak
zC`=fmNRke692ZQC(G+!66=K9IMcNv$KOYrw;^Isv$P1Gh3KA2+3V-21y;duZmLf)F
zHQoV@(Gf`mY|f9(?Nyn+Sy6pc6}FEQC_yV+rkEY93TsExldxwccEj6@fsR`z%Wz)6
zHZ4)3g*hsTAd+fytte}P;E=IZLvh>cHyR2|Le(@@Io@+G$eCy=;;tlyDrcYHV3A6U
z%<gGZoLnr<e;S%MEN50iRdcV(>gdK2^&-kFCkU`a6oz77U`<V~sUanqMPl__RSb3s
zhi+z6w+y7Saj5X`WL`V7b{ne7bf&3?P@RJz21rP%4{xJkj2!j10?u6=G_%}+(DTY6
zu=*oSfg;L`so9k*q6ahiY>U_MZ(WEvC>GJFW{T?EB0tOi7r4tYTs1G53G6%}zSl6y
z1^FB*;(|z+TB3xHRQ<9J3MR(b^^`oMSYZjX0Pk=0)z~z~(L|9L>t=g&VgWeuX=3|U
zd4*_dFqr$r-F83%v{KdGB8|#&a6@Qem4=Kw>7UtdckOD?iV8|eV&aN;(83K{(gXYi
zNb@hNSM#_kk7qF7!c;)_jE*Y<U-|OmIP~2Sd{Kn>2RP*2x+V14F?{LS-c4eELR;|U
zr~?mOUM07@Cbh@Kx`lX3V7%T6Rj|sJ0%8kJ;)*c64NelDUPH>)avL+#H)=*aSZQp<
z=ERfsgUAfuteKhR(_yxXKL^cJDW{o`$)>&urwo5Iud#dkH0iW>Y19`!4*NY6bm9q_
zG>aWI{p)Bhirh%>(iQ`#KFAL#StIyrx`cl+EsdIo*B%8;1KM|D!?sOdBry?cH9h?4
zgd4AcYULi%F>}abc52^Uw+BU5An=u4Vd*n2>JZ4b#v?6gmf9=@Ni$}&kH>)u5eYwc
z6Ddpm>EuYSawcBWleZalNnFlb)AsO*z$+5+Bn~vF-It)5B*{8!CC-6R?vQU%KJ^H~
zM(FV#=`|uwRa;j+SOvh<={Vhlp4n9{{z>G2Tr3xT*=-KJtSknJ?`ku$V3i*+_D?>H
zN-9!y;62ggD+<Ncl(q1V1CBw%D!f{BJ-`cydM@WA>lyBSM&$0edZI;6ht99tMqmo^
zl@quvlBtGv4Rbre!itrvU`0Axk4L|u6%4t*m|YjO9PetEJ*ZO><v}K8;hT&X<cBW9
z@=>qlc2y6(LR~CePu}NM=9t=W&O-UWZVG}Aray|e$334(y-3Czuh*y5^VqeS50M<D
zdC+E>3;IrZJewMjV=8u>2sK_bPFTgL_cW*)gLT!+@?x95SD<bf@ljWq_yfdwb_lEI
z*(z6eNPFIRf^$VvQ{pweCTVBT5zR!pVMkVPk(<zuh8_7kl;J9|mDXP!k)Q{YpsBT;
zH^&@K`@`iU&TbT*cC-x+1KbWyBHE&TKS)1&>^Zk~fhSK`%MZG33xxB!(-O@s&3)x_
z=TKyDk8zZRn9(!AU+4AV^}D{*CO*s@MtzGp9VoZs>^51^=$+6+%{d?|<J{%nyK#Sr
zU#1|?LQBo>w7`-5cEzu{PY@h;pnO0oJau)zP(yrsa*@!?8lB_{jvH;&=$xQKdHlX5
z`2=9_*khmVhMLN*iBhA-jOe-#PC)M@qeMzGxEIBl(nzE#$icaM&Z4byRddK`nf97H
z9#a?1GJdN^i<SlD?0G9$2c8~|on^*%uQzg&igLvF?Sv0@XS#5~i|V9IY&oj;I||r8
zuEpiyt3HpOy#RWwPrsw;=*fatHev`5j8=rQ;ajcax&Ry|OoA7m3Md=FNScZI*yMv8
z8eJc{=bvK<qiL{0apWb^chHS77{NGAwS@xuEAnI4TM7dHO6^-cVf{5zox(fQiE1t3
z$T!t1>d%5o%df-oS0#G@hnUQQ62^s>SUX{2qOpp`3DXP*YNS#eZEqF>e#8x_b@JQe
z2k>Vm_J?5i^6y)nqEq@pe;vGc<~Z33RJ4l+AWEj}3j^D9e0C&9g8yCDLNv(f99)Bk
z^w0o=wS(+UBB~{^Y!eXivK1(AO$wnE3oZN3>I<rc6nT4O!cq)4PHnr)fF(i*WRU0*
z90vZ5tMCX8mJ}K~T#Zo)ea03RgKinEc{VKrotH@2?dLi4-TVO<!80H<bYRhQ=Kjq`
z5Z~$1=iBq!ce3CW^BoAyi5fkgA92CN2>ie#<u>!z5XW3kbrDnU)sg_*qUsohnR5rY
zs6)aAHXq<Uf4naxv;fpblvC0enqcg&-$ch`u-rkQ6to44@W>clf{Ix}Rw<wtDsPav
z99L@bvFk+YAxH1kDJvEhKPp$7O&n{g#Nh{)sWXFphcTQCxPPjJ>Tc=#b&f{|D2WnE
z5Ghfxa0W{nKCw>#Cm0B3qAOY$;hKdXppaXjp`WO*-KfDIvCv(y;h(wm-GK)Q6)^bq
z`PIuHfr{xrxC0@Ikomg+RxqpIu!chyM~@IWgj6n5qfoJgRV`=7kU51`IelZ_v9-m^
z)7|wu^^pSOj}V=YAs3G_U57&-o>*0uX`7yU-Ij|Vte9P-p_{C_-IOEp%^>&KVEgI7
zrB~x8H}eA`0P$0J?SLWo#g85$RmhxP_09f22E%Z&;r1m~v_6LnCZVn<!7ef3t^xmV
zLH{#HzA5Emsp|QQC$PeCYfR2*%SP^Oy4KOjU+lm>1PYi~fr2><8aR1^#4!}An3?~n
zyi~=_i<tka(8n7n`ip=81S*I)o`MA|Y7jY`gz5jJOv4s7c?ca$R4+o6M4e34ELORQ
z9Zl9a{J+Cy>u7H;{iYot3j{-&XiJDLI}bKlk3N49L?4h$KNM75lw5xpWS^L9zZgw5
zU%$nO)EAS2C|PWB(CM{~#_7@fLm*GI#Y<sd^6*0xa!59IQB-zVboyeHdT6wMbJTu%
z@FQRVh4{3XLHtM4g5&P8|EudB-T?|EsS+lRAxgz7<}RK=^TsXeHm+fd$0s-Y=f~HN
zkN|`jf{fV&l$i#cx(K8iimclVw3`mR|F>W{^sAfS|NnK+5=x5w=W+P|QGIcY%YPpR
z9scOWuBuJn?A7lsd<YyeyT5e;pNJADSV6=4kRnJKLdEl#GH6+Y$M>K@3F<^C<ET<8
znuW{fuwqH;hRy4^a%oweVWnxUv*ZB5`XIyhfkoz_$L@m3#{Z97K6LKUwtJNaKqO0c
zAVgJNgk5aFU3D5SAg>S-pmA`V&-8{ac$?-_tm+rCSdm;vf0+N%=P&Y6T~O&y$Vx8g
z>sB1(45au4mQgxGAoUi6cc2{hlm(I-W(F-f;*C5y;uD`l<7-#K_;kT;_6xYhy7I6n
z6S}ZB(}S<N<iC(<32zbM;A~i?Ww7ADod@1rRRW=@D9qqI{i56ha)FVTqD9D7rHJji
z{@EJFq2QX9vZmQD7#Q;^uJU<0rwi@$pnN~t*KU<yr0s@cjeYz`G`P2TvZ+RhJ?<Qm
zg=5s7^K9At)Rk$m<RY(?A9-cvjpL@pjpl}nVF9C}Uo5q-pnLean!J|TLatR;1~hnU
zmt2Rjq-6U0tRPFKOXonvs$T4BN}2Rn&l8Zt(9mi1JHAOHNKZ*_NC%REo<#Kvh!8Q$
z@)$%B;uNUaH#RU@DoKmllaX0-Pt$5=m`qiHO*W4mBu;hIDQ^^cH**$rl*yt{dXxM1
zO0m?UB?{O5Rwh)TcYVT)x3&t*sv~a&cE6q;Y<n#S?8PWhVB7m=yN8N!RE7?@{e6=d
z85||Q$yF_$QrrzCtY`*Sgbe#VQ8!7iPtAwj!ma@EqqA@+lOu4dbtM~k{D~1bSCU7f
zNDfHYRMty2orSWMy;cmT8UJGX!aoEk_6vt<#)$RFOKVxBwNhtMDibVjz!q-oy&J-v
z@7<`@fIKD%CB#@}3Zm8HV)|9%f%huAm52v&c!Al2<-^|I-`Nn^`z}Gy=5D7(BME4c
zjqg}^I9Bzu*RiR4Mn8wuD&P87WVXSVT^{js8r6AqB{{};PwMHZj0NnIN+DB=Jc3QQ
z3s~Y9X6E6^)OKMd{F0S~Dq^-=X(URshlLep9!>^{n%_?>PrHuf+Bhqj*>(^sfP|dv
zk2-U^fXt3+jxYY840@d-9;gtx-IJo@G>;_{sl?0q&^wPhwz{?Zp!j;oX3cu*eStO=
zYYJNAB|=XWEVmXoCa(IYOO+63p>)|igXUL&`fQi$B}u><IZZ=#8GVYUGgF)t?CR83
zWS)EhpOKhss7F5W>daW~hW=WT?8?Fp$z1`fOyUk~_>2eE<SZr=?1fW`op@|QEP%u)
zFoIE6X=*GYF$RD^iqX}-_mWnn&47;p$F<FkyG*8-Jh~OonE0t%24rSQD+SOnVh;yu
zWwYHtt<`>F6`1d=RZWF~Z6soj>RU$0kRA$g!>JgKIR=eK(ByZ%D;-cQU14I?izgpq
zd&1A@727;_yMI%LT-S9GTtjj}s){{l^;Ty?t&+(3xmqg|Pb6<tHk{Qm@Pw#P#^e?D
z<nzV?DcGrT;7+zJv0>4h<df%Rrnh$M(FOkrv!c_82cgrnIF5>mD*;I{ZSW<QOoyd)
zqQXk)?!5TJBF~!Ua;HgdPN;=tZs;xJh&jMXTtIB1@}14z1h9VY$78Mic!?x`)%Uj<
z#h)ndJV|(otK3P9@?)}*dfxq)RL^fGlm8Xt3n%NN6-!}bP{=CTMVKs5nyd9>)Z~YP
z9Oj?YX`7XwUh9@mA~8?o)ClHc%>_1Aj^an`Fd!qdl^=_pg?)bjH)VGr%62P(KmY1p
z(Pq+W5VGKk-f}R0kFt9wFd`SgA=AXO4>m2VQ|yD#K0xPH7h|URi92Wm-kyhXVft>-
zsT2oEoP7V*Ub+kWJY{P$YtD8-k8e?yKz5&eSyyz48s?9RL#m@6T-Zi^@O?q?HqSA5
z@e%uYgAo24aU!z;aw&Y$5@8BNJ+ck_=@p)^d?00PqZs=(Td%BiKrpNC=uENN(M7g9
zQ77yeiUi76A>BXWytw&5#r@#EkxjJ??Yr6~mWK9MhGNq=&!PQeHSd&dY_0{0F;u%;
z>{K=_=V3+H?Zwg!h-R@`B4xsw|K*a6L4=LLOLG0<8L5mCBAg<Xs=a4;d5Y1LZY^j0
z!<qWmudTynsj(syL0Kvkc`S0E>qN;O%z`eZyiYJ5KJ`Ldx!mN0!W{HEMhlV74?33t
zWI{h$H#m7@b?^z>`w|(!2Iz2}qpa!}Rs`@kaSdSc^k{>qpbYF<1|ynK?2b(gsY&Uv
zHSJa9`_IjZ1&Pt9FmriJewRe({NU0N29Xl&PP*XN?#d9Yr_UiP^OOW#-OT%}h;Rr(
zz|{D<(ubbY(P@z4)UkJ~t4e3;UHK9EweW(TUXf_j)GUASHeC0F#x0~-Or-&`+QTPk
zs|_`Z8B<v0Bd9+tGcS(#0Ud3u3HXhLK55;SToYob6DL8_M$_&nLW~k!zqYkxbGRHk
zt#Gfx0HTA;c3<>$A_*%!q31_69W)nMg61nqU>CUnpBF^Oci34iq8w{`hd>Ale4dMf
zaW|;tKvx-do6G)YD1Ve{1uOC8CFXs?nwDF`%-<}7FMxVrMqry<6<o7}J4iH6g_^#1
z6%6`C*#lx{?R3YI-??&0+HP|zE96$ZQC<q%4?V{<FgipsfdUXZ)PFM6C^ji?x+a6e
zJM0z~)YLJLj(s`kC!`lJo<+Q1l>nU=5e<TVu=8@eMLli?p`w{EyI4OJ7W`uZ;`yB(
zKW09xEe+VFlH060D4)F3vT1%g+JY`gtWX;rE_W3#90v+Jh_52z?}De(@VK2*nF`du
z{aNedcI9vw$KO+>KUh|XRuldjP_N|%8?}f~3L5|k2rHgj>t<p4DIa2wn^Rh+7P1M-
z1MOnXL&n=1v^pCmM!B()FO+G<W4J-?7hdVaTM5)cxpsIy6#POFdI*DWTk&A}R*sH+
zlFNfIQ=nFT$dxarAG*7h(vZ<aU-E&k`@4WUx5gyVn4#{!=nt(e){GGb7{$}qC+tTU
ziF#DYkQgx5c<=cgWL<FWE_ko~=*J}KIic6AxSV5A?7T^Da7KMIdpaego<=AK=en|a
zK&5txUZ*9)AW58pT^=GN6NJ>upmUhiZ`HjAJM^i$Cj9pKzE$i*%q(V00LTwfXon8a
z!WPZUG%?_!^94!FpE;D%TiH1v<ujF_eGAn~lq?p>3_BC8UxInZ{xN5p>Ic(dKg;sS
z_jcADSKTl5HOY^Lbfl}HH(%b~%1N8I&VntwVe+L2i7A;irqf)f?^R!5`D58n^*PKs
z?Fi|@NXQnmHZ_0R>iuxANWWF;d%F=}#*J*-Lc9c*nUnZBm`P6qyq@O6mcUTO=%hRs
z1LSfZo2yO&NH?SeLyd-Ce1hvXRb&g)@SRpv4APz<nh$-eNacg!=~pv0#WDx&%4CmZ
zPLwz=-Ow_AJpngq7WFpQ0Ch<#-Jwe3>B5H;iPW0m#M=Wy;N1QqFFm&{bIp&1nnE{f
z&CKl!m{TV&;$_$EeE%{zJm=An-e>pcC}z<SQla#8ygg}EnzC3f(Hr*1YAxM-b|eru
zJ^NYPHq0RW0)mSj;OMA{+MlS|w32{)yJGc|eJjk2D=`NM9APOl>h|q*=V-1D*nY5F
z2ts8v{_P2-YK9fxu12MzEt5bDtyeLMH6Ea+A#cyd%i;TQg*ZZb<Rd%RMf(AlPa1IF
z2=9&p9c{ol*BR}vZ023}{?jD2B=n_k86^lVfR>3Df{Z0{bM&jwAgUzfrl=Vt*Mq<-
z+zwIQ@GDIu?1}Tx9dT<rN*NLv5OauH%i9LUH0?>zE17*?1$c}>%5Y0eenO1_8hOT^
zsCIy|OKcsHq8<~tBT(FvKxNn3#lTJ_FASZo`y=cv)%$?y{E2X8HdF-Yz1dk~qLhYw
zsQ@*I#o`=l<Hg5lWhSyIfmMn02^Vrz=$cl;e7+T>(6a{lPAww5ff+rM?OiU$)b%Xa
zm&gE9fv50&cQ0%wg3S}D-P;KM<v7I0F{p~$b;b>aq$<0q?iS%w)&H|RXj9o&D{ag~
z9FYjfyONF~Z;f%Dpn7y4sDc3+XS<+WaZ<8M#8bjN{!Ku@w=#snH-Nd7=!?oW<q#{&
zD3lDnsV0?M2iYA&LS7502oVj#<l@fN2rj3!0uYpwA6yL+u%Jmp$U}CbE>&*lt#mU%
zT6<ht?IdluEjT05qNGpe#8RLQ&|kFU&Z&vHJda8W1Jhgi<H`K^hX~MuvNm*j-XbS9
zR;%44-XC+dNFBB&QMMfYbDQC~Gu?+M0;KOCvw=L*_qvbCuP%p5NZ?!=m6FZz<hxLR
zJNsg__EH!+Z^bb5iG@Y;w4UY_fTln@p)@z_DaYbj**cJKU>KQ`llEFIYVF%hZ#3b3
zc%+g<e%B4mU+}@HGYEC;lRC3x!W9Zt#00Nf&=oHgbxvxzXDHza3yDRhb>?9yW+0sD
z07CO|ecF=3m!P2=;7l-a)GPb~NfLLrg%{bidm$hfYy8AF0vDs(f($RN)3h&Tu7rXK
zSa`Mc-n(IgF9!-mG1Xsd1<D>?w#OyoP*Tq-wdU3cxs2Ba<ZTbcYBx<fnIHUSrJYJa
z6Fs-qIEmU8(<XPl9k${RxhiF6+N{Zu&1GGYcqE^S$mZ%5*i2gt_19uLu%>bgJY0<8
zB?jX|lRxH?T8NkbA#_d{0y<23*dAE+*ym_9caBN-tzu`=ivb_Jq1J#QMZC%+%OP9*
z8KLAyuqCabaAJSo&xP%XZFS>Mz>*-{-J*AX;?uxa_>_Vg3O6Z_onQ7gAYf6=&NNzr
zCxIh7EH=-R@<{Z)HVQe%>a~OZ1Ut+%gA-#fY&sC7&Hx;ATn9!f#mw*&XxH$dXOoJg
z6mb*no{<x`_M$^P%}qCwxI`LH>QGu|YH%Pm`sU3Fl=+-cFKyONBn9q>4g=Djb{fY{
z2oTO?tsGJv(RR2bSf;8#C0o;kU=2>@nxzF2FmcY%P|n)r&=C`Z7|dlbif2zX0Lqy#
z5NYfSAWf5sy9%Vo@3QmC0DI9RDzrQp_z=>+{j+jIU(QPGX~hIjmZq<e8^uuIHp#RN
zqPoPH(`Wxvz|h>INaM{mp^A7dDvo17z-^cEfm3D=40xHy53Ru}v4?Gm_wTCS`JK5n
z_EAk{+O5p=05ul{;_zzmn(PV8<NJITDs7{2w4Q4L&N;g_Xy1N#8-=g>b%}_A#7rS4
zW_g{ejA!1l^UhV5RpmSTSmAj_Hks)t!fic1)hTf91V^=3u$r|VU`~DhVEh+g6MP^_
zV7Hx40`&fB*vnt}k892wNLKFxlB1$9;2b9W42YSNnb88R3R$jG*9=g<#q!~Ue3dSA
zj<U}t0(xe|wRU~Gt!Ss3pzj*^!+^sAnu*y-wk$CKN+tfa_mC~Udntpy9L7}l#7fP}
z!aFWX!7#<n=D&MiL95|x7rlmWfrmu!QUswYR7<G198j@X#o0KvKu+e}j1`+n`vb!9
z!i{}uD|vp9w|l*QJucSG3}`)8IpF@`TW-3g(+N<-*M34Xt51W4V91h`ZFr*9E;!(l
zw|h?VZ82~`L4bTpmmA39rxnc{trXK6Q$6_{3`(ai-5dssE+%#d7_kv)Sub=AgP1?}
zW{TjhjTy+JXj#eG{K2@8I(J$PXk<2w$^;pclt~6j4TrZ8L`vWBR$sR$P>*yb@F9mC
zC*gx4DCf2pz7^U9<yX1P?4ZaIvm_uFn}Q6LI{gu~)J8x#_7b%`k?2i3RPJ+J^{`l|
z8A$~n2YkaVggO9~WAnvp7PPkx4Y^iwD*9ltNc@qb*h(kpfPc2|um{6-zgrN!Bjm)b
z%rP#TX%rzh2@Q$@RN1<4*jckl<)qUUw582o2(JtMg)3;3vlw-!E@{ufk{HVqyp3?N
zZa^@C%KXx!UTObPQg&Cw28?SiEx3@6)F6rGNtb+y&gIf57PmB|iW9Ew7>9~>1H@r$
zZ*pKvOn1=%{;WrkGjZxED{$6FecJ~h3%l8jn<=^Ro+xd^V>+PY_S+1KND!}TdV{_H
z_4l4N0*H2$6MGe<E_433)t~Hnc4vv3JI7`EMHwNUDju?llxUZbeBe6xms!lijY|X|
zyvCj2^~RPpt(DrbsO7b%mpZK~#<z%@s+XNRl%5CP6-;5v<A4apUnW<xL1e>c6qy`<
za-1zL*ZLhV`=nK_I9RIn1p|DvJ{L(6<!40!B13?JcipK6#C|O>)0=u#a-oAZnL`^p
z0A=67%)TnxfDTb|#JHMEcBF)+5_?U;sNWDXbMqH-9Jsh=$GMe477H^gm?$GLS-d6P
zXRKvW|AKAN`_E8EgULOT>#CYM_;u~Akr4DKD6(3WPp|6ak)ke$Dd${|Y*TWgTe^h-
z^^==2tvAnk6dC02pfNPP!LF&6yF~^ArJ1TS+=l3RUvflwyl&%#CkTa~gc<I~-wbk}
z1OP4XV>yC1AzRo|^2-ValSD)&&-=s+$=*S(D?>)%nO%0p7a6YHTKoLX){y>6A+Ht<
z6t6w*A^`%v!<R5&WS)IrAAwht5L(VZVcG!#N++?wT8>Bw=3Sb7q*89tl1szc<R@2!
zr{jbyphh`>x>M#XS~$;n{(fKveubbI$|$QodfvgdQfXn?YR;GTW=TK*0093BVBfFK

literal 0
HcmV?d00001

diff --git a/web/css/fonts/font_awesome5.css b/web/css/fonts/font_awesome5.css
new file mode 100644
index 00000000..d299e20b
--- /dev/null
+++ b/web/css/fonts/font_awesome5.css
@@ -0,0 +1,5 @@
+/*!
+ * Font Awesome Free 5.13.0 by @fontawesome - https://fontawesome.com
+ * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License)
+ */
+.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-left{float:left}.fa-pull-right{float:right}.fa.fa-pull-left,.fab.fa-pull-left,.fal.fa-pull-left,.far.fa-pull-left,.fas.fa-pull-left{margin-right:.3em}.fa.fa-pull-right,.fab.fa-pull-right,.fal.fa-pull-right,.far.fa-pull-right,.fas.fa-pull-right{margin-left:.3em}.fa-spin{-webkit-animation:fa-spin 2s linear infinite;animation:fa-spin 2s linear infinite}.fa-pulse{-webkit-animation:fa-spin 1s steps(8) infinite;animation:fa-spin 1s steps(8) infinite}@-webkit-keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}.fa-rotate-90{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=1)";-webkit-transform:rotate(90deg);transform:rotate(90deg)}.fa-rotate-180{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2)";-webkit-transform:rotate(180deg);transform:rotate(180deg)}.fa-rotate-270{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=3)";-webkit-transform:rotate(270deg);transform:rotate(270deg)}.fa-flip-horizontal{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=0, mirror=1)";-webkit-transform:scaleX(-1);transform:scaleX(-1)}.fa-flip-vertical{-webkit-transform:scaleY(-1);transform:scaleY(-1)}.fa-flip-both,.fa-flip-horizontal.fa-flip-vertical,.fa-flip-vertical{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2, mirror=1)"}.fa-flip-both,.fa-flip-horizontal.fa-flip-vertical{-webkit-transform:scale(-1);transform:scale(-1)}:root .fa-flip-both,:root .fa-flip-horizontal,:root .fa-flip-vertical,:root .fa-rotate-90,:root .fa-rotate-180,:root .fa-rotate-270{-webkit-filter:none;filter:none}.fa-stack{display:inline-block;height:2em;line-height:2em;position:relative;vertical-align:middle;width:2.5em}.fa-stack-1x,.fa-stack-2x{left:0;position:absolute;text-align:center;width:100%}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-500px:before{content:"\f26e"}.fa-accessible-icon:before{content:"\f368"}.fa-accusoft:before{content:"\f369"}.fa-acquisitions-incorporated:before{content:"\f6af"}.fa-ad:before{content:"\f641"}.fa-address-book:before{content:"\f2b9"}.fa-address-card:before{content:"\f2bb"}.fa-adjust:before{content:"\f042"}.fa-adn:before{content:"\f170"}.fa-adobe:before{content:"\f778"}.fa-adversal:before{content:"\f36a"}.fa-affiliatetheme:before{content:"\f36b"}.fa-air-freshener:before{content:"\f5d0"}.fa-airbnb:before{content:"\f834"}.fa-algolia:before{content:"\f36c"}.fa-align-center:before{content:"\f037"}.fa-align-justify:before{content:"\f039"}.fa-align-left:before{content:"\f036"}.fa-align-right:before{content:"\f038"}.fa-alipay:before{content:"\f642"}.fa-allergies:before{content:"\f461"}.fa-amazon:before{content:"\f270"}.fa-amazon-pay:before{content:"\f42c"}.fa-ambulance:before{content:"\f0f9"}.fa-american-sign-language-interpreting:before{content:"\f2a3"}.fa-amilia:before{content:"\f36d"}.fa-anchor:before{content:"\f13d"}.fa-android:before{content:"\f17b"}.fa-angellist:before{content:"\f209"}.fa-angle-double-down:before{content:"\f103"}.fa-angle-double-left:before{content:"\f100"}.fa-angle-double-right:before{content:"\f101"}.fa-angle-double-up:before{content:"\f102"}.fa-angle-down:before{content:"\f107"}.fa-angle-left:before{content:"\f104"}.fa-angle-right:before{content:"\f105"}.fa-angle-up:before{content:"\f106"}.fa-angry:before{content:"\f556"}.fa-angrycreative:before{content:"\f36e"}.fa-angular:before{content:"\f420"}.fa-ankh:before{content:"\f644"}.fa-app-store:before{content:"\f36f"}.fa-app-store-ios:before{content:"\f370"}.fa-apper:before{content:"\f371"}.fa-apple:before{content:"\f179"}.fa-apple-alt:before{content:"\f5d1"}.fa-apple-pay:before{content:"\f415"}.fa-archive:before{content:"\f187"}.fa-archway:before{content:"\f557"}.fa-arrow-alt-circle-down:before{content:"\f358"}.fa-arrow-alt-circle-left:before{content:"\f359"}.fa-arrow-alt-circle-right:before{content:"\f35a"}.fa-arrow-alt-circle-up:before{content:"\f35b"}.fa-arrow-circle-down:before{content:"\f0ab"}.fa-arrow-circle-left:before{content:"\f0a8"}.fa-arrow-circle-right:before{content:"\f0a9"}.fa-arrow-circle-up:before{content:"\f0aa"}.fa-arrow-down:before{content:"\f063"}.fa-arrow-left:before{content:"\f060"}.fa-arrow-right:before{content:"\f061"}.fa-arrow-up:before{content:"\f062"}.fa-arrows-alt:before{content:"\f0b2"}.fa-arrows-alt-h:before{content:"\f337"}.fa-arrows-alt-v:before{content:"\f338"}.fa-artstation:before{content:"\f77a"}.fa-assistive-listening-systems:before{content:"\f2a2"}.fa-asterisk:before{content:"\f069"}.fa-asymmetrik:before{content:"\f372"}.fa-at:before{content:"\f1fa"}.fa-atlas:before{content:"\f558"}.fa-atlassian:before{content:"\f77b"}.fa-atom:before{content:"\f5d2"}.fa-audible:before{content:"\f373"}.fa-audio-description:before{content:"\f29e"}.fa-autoprefixer:before{content:"\f41c"}.fa-avianex:before{content:"\f374"}.fa-aviato:before{content:"\f421"}.fa-award:before{content:"\f559"}.fa-aws:before{content:"\f375"}.fa-baby:before{content:"\f77c"}.fa-baby-carriage:before{content:"\f77d"}.fa-backspace:before{content:"\f55a"}.fa-backward:before{content:"\f04a"}.fa-bacon:before{content:"\f7e5"}.fa-bahai:before{content:"\f666"}.fa-balance-scale:before{content:"\f24e"}.fa-balance-scale-left:before{content:"\f515"}.fa-balance-scale-right:before{content:"\f516"}.fa-ban:before{content:"\f05e"}.fa-band-aid:before{content:"\f462"}.fa-bandcamp:before{content:"\f2d5"}.fa-barcode:before{content:"\f02a"}.fa-bars:before{content:"\f0c9"}.fa-baseball-ball:before{content:"\f433"}.fa-basketball-ball:before{content:"\f434"}.fa-bath:before{content:"\f2cd"}.fa-battery-empty:before{content:"\f244"}.fa-battery-full:before{content:"\f240"}.fa-battery-half:before{content:"\f242"}.fa-battery-quarter:before{content:"\f243"}.fa-battery-three-quarters:before{content:"\f241"}.fa-battle-net:before{content:"\f835"}.fa-bed:before{content:"\f236"}.fa-beer:before{content:"\f0fc"}.fa-behance:before{content:"\f1b4"}.fa-behance-square:before{content:"\f1b5"}.fa-bell:before{content:"\f0f3"}.fa-bell-slash:before{content:"\f1f6"}.fa-bezier-curve:before{content:"\f55b"}.fa-bible:before{content:"\f647"}.fa-bicycle:before{content:"\f206"}.fa-biking:before{content:"\f84a"}.fa-bimobject:before{content:"\f378"}.fa-binoculars:before{content:"\f1e5"}.fa-biohazard:before{content:"\f780"}.fa-birthday-cake:before{content:"\f1fd"}.fa-bitbucket:before{content:"\f171"}.fa-bitcoin:before{content:"\f379"}.fa-bity:before{content:"\f37a"}.fa-black-tie:before{content:"\f27e"}.fa-blackberry:before{content:"\f37b"}.fa-blender:before{content:"\f517"}.fa-blender-phone:before{content:"\f6b6"}.fa-blind:before{content:"\f29d"}.fa-blog:before{content:"\f781"}.fa-blogger:before{content:"\f37c"}.fa-blogger-b:before{content:"\f37d"}.fa-bluetooth:before{content:"\f293"}.fa-bluetooth-b:before{content:"\f294"}.fa-bold:before{content:"\f032"}.fa-bolt:before{content:"\f0e7"}.fa-bomb:before{content:"\f1e2"}.fa-bone:before{content:"\f5d7"}.fa-bong:before{content:"\f55c"}.fa-book:before{content:"\f02d"}.fa-book-dead:before{content:"\f6b7"}.fa-book-medical:before{content:"\f7e6"}.fa-book-open:before{content:"\f518"}.fa-book-reader:before{content:"\f5da"}.fa-bookmark:before{content:"\f02e"}.fa-bootstrap:before{content:"\f836"}.fa-border-all:before{content:"\f84c"}.fa-border-none:before{content:"\f850"}.fa-border-style:before{content:"\f853"}.fa-bowling-ball:before{content:"\f436"}.fa-box:before{content:"\f466"}.fa-box-open:before{content:"\f49e"}.fa-box-tissue:before{content:"\f95b"}.fa-boxes:before{content:"\f468"}.fa-braille:before{content:"\f2a1"}.fa-brain:before{content:"\f5dc"}.fa-bread-slice:before{content:"\f7ec"}.fa-briefcase:before{content:"\f0b1"}.fa-briefcase-medical:before{content:"\f469"}.fa-broadcast-tower:before{content:"\f519"}.fa-broom:before{content:"\f51a"}.fa-brush:before{content:"\f55d"}.fa-btc:before{content:"\f15a"}.fa-buffer:before{content:"\f837"}.fa-bug:before{content:"\f188"}.fa-building:before{content:"\f1ad"}.fa-bullhorn:before{content:"\f0a1"}.fa-bullseye:before{content:"\f140"}.fa-burn:before{content:"\f46a"}.fa-buromobelexperte:before{content:"\f37f"}.fa-bus:before{content:"\f207"}.fa-bus-alt:before{content:"\f55e"}.fa-business-time:before{content:"\f64a"}.fa-buy-n-large:before{content:"\f8a6"}.fa-buysellads:before{content:"\f20d"}.fa-calculator:before{content:"\f1ec"}.fa-calendar:before{content:"\f133"}.fa-calendar-alt:before{content:"\f073"}.fa-calendar-check:before{content:"\f274"}.fa-calendar-day:before{content:"\f783"}.fa-calendar-minus:before{content:"\f272"}.fa-calendar-plus:before{content:"\f271"}.fa-calendar-times:before{content:"\f273"}.fa-calendar-week:before{content:"\f784"}.fa-camera:before{content:"\f030"}.fa-camera-retro:before{content:"\f083"}.fa-campground:before{content:"\f6bb"}.fa-canadian-maple-leaf:before{content:"\f785"}.fa-candy-cane:before{content:"\f786"}.fa-cannabis:before{content:"\f55f"}.fa-capsules:before{content:"\f46b"}.fa-car:before{content:"\f1b9"}.fa-car-alt:before{content:"\f5de"}.fa-car-battery:before{content:"\f5df"}.fa-car-crash:before{content:"\f5e1"}.fa-car-side:before{content:"\f5e4"}.fa-caravan:before{content:"\f8ff"}.fa-caret-down:before{content:"\f0d7"}.fa-caret-left:before{content:"\f0d9"}.fa-caret-right:before{content:"\f0da"}.fa-caret-square-down:before{content:"\f150"}.fa-caret-square-left:before{content:"\f191"}.fa-caret-square-right:before{content:"\f152"}.fa-caret-square-up:before{content:"\f151"}.fa-caret-up:before{content:"\f0d8"}.fa-carrot:before{content:"\f787"}.fa-cart-arrow-down:before{content:"\f218"}.fa-cart-plus:before{content:"\f217"}.fa-cash-register:before{content:"\f788"}.fa-cat:before{content:"\f6be"}.fa-cc-amazon-pay:before{content:"\f42d"}.fa-cc-amex:before{content:"\f1f3"}.fa-cc-apple-pay:before{content:"\f416"}.fa-cc-diners-club:before{content:"\f24c"}.fa-cc-discover:before{content:"\f1f2"}.fa-cc-jcb:before{content:"\f24b"}.fa-cc-mastercard:before{content:"\f1f1"}.fa-cc-paypal:before{content:"\f1f4"}.fa-cc-stripe:before{content:"\f1f5"}.fa-cc-visa:before{content:"\f1f0"}.fa-centercode:before{content:"\f380"}.fa-centos:before{content:"\f789"}.fa-certificate:before{content:"\f0a3"}.fa-chair:before{content:"\f6c0"}.fa-chalkboard:before{content:"\f51b"}.fa-chalkboard-teacher:before{content:"\f51c"}.fa-charging-station:before{content:"\f5e7"}.fa-chart-area:before{content:"\f1fe"}.fa-chart-bar:before{content:"\f080"}.fa-chart-line:before{content:"\f201"}.fa-chart-pie:before{content:"\f200"}.fa-check:before{content:"\f00c"}.fa-check-circle:before{content:"\f058"}.fa-check-double:before{content:"\f560"}.fa-check-square:before{content:"\f14a"}.fa-cheese:before{content:"\f7ef"}.fa-chess:before{content:"\f439"}.fa-chess-bishop:before{content:"\f43a"}.fa-chess-board:before{content:"\f43c"}.fa-chess-king:before{content:"\f43f"}.fa-chess-knight:before{content:"\f441"}.fa-chess-pawn:before{content:"\f443"}.fa-chess-queen:before{content:"\f445"}.fa-chess-rook:before{content:"\f447"}.fa-chevron-circle-down:before{content:"\f13a"}.fa-chevron-circle-left:before{content:"\f137"}.fa-chevron-circle-right:before{content:"\f138"}.fa-chevron-circle-up:before{content:"\f139"}.fa-chevron-down:before{content:"\f078"}.fa-chevron-left:before{content:"\f053"}.fa-chevron-right:before{content:"\f054"}.fa-chevron-up:before{content:"\f077"}.fa-child:before{content:"\f1ae"}.fa-chrome:before{content:"\f268"}.fa-chromecast:before{content:"\f838"}.fa-church:before{content:"\f51d"}.fa-circle:before{content:"\f111"}.fa-circle-notch:before{content:"\f1ce"}.fa-city:before{content:"\f64f"}.fa-clinic-medical:before{content:"\f7f2"}.fa-clipboard:before{content:"\f328"}.fa-clipboard-check:before{content:"\f46c"}.fa-clipboard-list:before{content:"\f46d"}.fa-clock:before{content:"\f017"}.fa-clone:before{content:"\f24d"}.fa-closed-captioning:before{content:"\f20a"}.fa-cloud:before{content:"\f0c2"}.fa-cloud-download-alt:before{content:"\f381"}.fa-cloud-meatball:before{content:"\f73b"}.fa-cloud-moon:before{content:"\f6c3"}.fa-cloud-moon-rain:before{content:"\f73c"}.fa-cloud-rain:before{content:"\f73d"}.fa-cloud-showers-heavy:before{content:"\f740"}.fa-cloud-sun:before{content:"\f6c4"}.fa-cloud-sun-rain:before{content:"\f743"}.fa-cloud-upload-alt:before{content:"\f382"}.fa-cloudscale:before{content:"\f383"}.fa-cloudsmith:before{content:"\f384"}.fa-cloudversify:before{content:"\f385"}.fa-cocktail:before{content:"\f561"}.fa-code:before{content:"\f121"}.fa-code-branch:before{content:"\f126"}.fa-codepen:before{content:"\f1cb"}.fa-codiepie:before{content:"\f284"}.fa-coffee:before{content:"\f0f4"}.fa-cog:before{content:"\f013"}.fa-cogs:before{content:"\f085"}.fa-coins:before{content:"\f51e"}.fa-columns:before{content:"\f0db"}.fa-comment:before{content:"\f075"}.fa-comment-alt:before{content:"\f27a"}.fa-comment-dollar:before{content:"\f651"}.fa-comment-dots:before{content:"\f4ad"}.fa-comment-medical:before{content:"\f7f5"}.fa-comment-slash:before{content:"\f4b3"}.fa-comments:before{content:"\f086"}.fa-comments-dollar:before{content:"\f653"}.fa-compact-disc:before{content:"\f51f"}.fa-compass:before{content:"\f14e"}.fa-compress:before{content:"\f066"}.fa-compress-alt:before{content:"\f422"}.fa-compress-arrows-alt:before{content:"\f78c"}.fa-concierge-bell:before{content:"\f562"}.fa-confluence:before{content:"\f78d"}.fa-connectdevelop:before{content:"\f20e"}.fa-contao:before{content:"\f26d"}.fa-cookie:before{content:"\f563"}.fa-cookie-bite:before{content:"\f564"}.fa-copy:before{content:"\f0c5"}.fa-copyright:before{content:"\f1f9"}.fa-cotton-bureau:before{content:"\f89e"}.fa-couch:before{content:"\f4b8"}.fa-cpanel:before{content:"\f388"}.fa-creative-commons:before{content:"\f25e"}.fa-creative-commons-by:before{content:"\f4e7"}.fa-creative-commons-nc:before{content:"\f4e8"}.fa-creative-commons-nc-eu:before{content:"\f4e9"}.fa-creative-commons-nc-jp:before{content:"\f4ea"}.fa-creative-commons-nd:before{content:"\f4eb"}.fa-creative-commons-pd:before{content:"\f4ec"}.fa-creative-commons-pd-alt:before{content:"\f4ed"}.fa-creative-commons-remix:before{content:"\f4ee"}.fa-creative-commons-sa:before{content:"\f4ef"}.fa-creative-commons-sampling:before{content:"\f4f0"}.fa-creative-commons-sampling-plus:before{content:"\f4f1"}.fa-creative-commons-share:before{content:"\f4f2"}.fa-creative-commons-zero:before{content:"\f4f3"}.fa-credit-card:before{content:"\f09d"}.fa-critical-role:before{content:"\f6c9"}.fa-crop:before{content:"\f125"}.fa-crop-alt:before{content:"\f565"}.fa-cross:before{content:"\f654"}.fa-crosshairs:before{content:"\f05b"}.fa-crow:before{content:"\f520"}.fa-crown:before{content:"\f521"}.fa-crutch:before{content:"\f7f7"}.fa-css3:before{content:"\f13c"}.fa-css3-alt:before{content:"\f38b"}.fa-cube:before{content:"\f1b2"}.fa-cubes:before{content:"\f1b3"}.fa-cut:before{content:"\f0c4"}.fa-cuttlefish:before{content:"\f38c"}.fa-d-and-d:before{content:"\f38d"}.fa-d-and-d-beyond:before{content:"\f6ca"}.fa-dailymotion:before{content:"\f952"}.fa-dashcube:before{content:"\f210"}.fa-database:before{content:"\f1c0"}.fa-deaf:before{content:"\f2a4"}.fa-delicious:before{content:"\f1a5"}.fa-democrat:before{content:"\f747"}.fa-deploydog:before{content:"\f38e"}.fa-deskpro:before{content:"\f38f"}.fa-desktop:before{content:"\f108"}.fa-dev:before{content:"\f6cc"}.fa-deviantart:before{content:"\f1bd"}.fa-dharmachakra:before{content:"\f655"}.fa-dhl:before{content:"\f790"}.fa-diagnoses:before{content:"\f470"}.fa-diaspora:before{content:"\f791"}.fa-dice:before{content:"\f522"}.fa-dice-d20:before{content:"\f6cf"}.fa-dice-d6:before{content:"\f6d1"}.fa-dice-five:before{content:"\f523"}.fa-dice-four:before{content:"\f524"}.fa-dice-one:before{content:"\f525"}.fa-dice-six:before{content:"\f526"}.fa-dice-three:before{content:"\f527"}.fa-dice-two:before{content:"\f528"}.fa-digg:before{content:"\f1a6"}.fa-digital-ocean:before{content:"\f391"}.fa-digital-tachograph:before{content:"\f566"}.fa-directions:before{content:"\f5eb"}.fa-discord:before{content:"\f392"}.fa-discourse:before{content:"\f393"}.fa-disease:before{content:"\f7fa"}.fa-divide:before{content:"\f529"}.fa-dizzy:before{content:"\f567"}.fa-dna:before{content:"\f471"}.fa-dochub:before{content:"\f394"}.fa-docker:before{content:"\f395"}.fa-dog:before{content:"\f6d3"}.fa-dollar-sign:before{content:"\f155"}.fa-dolly:before{content:"\f472"}.fa-dolly-flatbed:before{content:"\f474"}.fa-donate:before{content:"\f4b9"}.fa-door-closed:before{content:"\f52a"}.fa-door-open:before{content:"\f52b"}.fa-dot-circle:before{content:"\f192"}.fa-dove:before{content:"\f4ba"}.fa-download:before{content:"\f019"}.fa-draft2digital:before{content:"\f396"}.fa-drafting-compass:before{content:"\f568"}.fa-dragon:before{content:"\f6d5"}.fa-draw-polygon:before{content:"\f5ee"}.fa-dribbble:before{content:"\f17d"}.fa-dribbble-square:before{content:"\f397"}.fa-dropbox:before{content:"\f16b"}.fa-drum:before{content:"\f569"}.fa-drum-steelpan:before{content:"\f56a"}.fa-drumstick-bite:before{content:"\f6d7"}.fa-drupal:before{content:"\f1a9"}.fa-dumbbell:before{content:"\f44b"}.fa-dumpster:before{content:"\f793"}.fa-dumpster-fire:before{content:"\f794"}.fa-dungeon:before{content:"\f6d9"}.fa-dyalog:before{content:"\f399"}.fa-earlybirds:before{content:"\f39a"}.fa-ebay:before{content:"\f4f4"}.fa-edge:before{content:"\f282"}.fa-edit:before{content:"\f044"}.fa-egg:before{content:"\f7fb"}.fa-eject:before{content:"\f052"}.fa-elementor:before{content:"\f430"}.fa-ellipsis-h:before{content:"\f141"}.fa-ellipsis-v:before{content:"\f142"}.fa-ello:before{content:"\f5f1"}.fa-ember:before{content:"\f423"}.fa-empire:before{content:"\f1d1"}.fa-envelope:before{content:"\f0e0"}.fa-envelope-open:before{content:"\f2b6"}.fa-envelope-open-text:before{content:"\f658"}.fa-envelope-square:before{content:"\f199"}.fa-envira:before{content:"\f299"}.fa-equals:before{content:"\f52c"}.fa-eraser:before{content:"\f12d"}.fa-erlang:before{content:"\f39d"}.fa-ethereum:before{content:"\f42e"}.fa-ethernet:before{content:"\f796"}.fa-etsy:before{content:"\f2d7"}.fa-euro-sign:before{content:"\f153"}.fa-evernote:before{content:"\f839"}.fa-exchange-alt:before{content:"\f362"}.fa-exclamation:before{content:"\f12a"}.fa-exclamation-circle:before{content:"\f06a"}.fa-exclamation-triangle:before{content:"\f071"}.fa-expand:before{content:"\f065"}.fa-expand-alt:before{content:"\f424"}.fa-expand-arrows-alt:before{content:"\f31e"}.fa-expeditedssl:before{content:"\f23e"}.fa-external-link-alt:before{content:"\f35d"}.fa-external-link-square-alt:before{content:"\f360"}.fa-eye:before{content:"\f06e"}.fa-eye-dropper:before{content:"\f1fb"}.fa-eye-slash:before{content:"\f070"}.fa-facebook:before{content:"\f09a"}.fa-facebook-f:before{content:"\f39e"}.fa-facebook-messenger:before{content:"\f39f"}.fa-facebook-square:before{content:"\f082"}.fa-fan:before{content:"\f863"}.fa-fantasy-flight-games:before{content:"\f6dc"}.fa-fast-backward:before{content:"\f049"}.fa-fast-forward:before{content:"\f050"}.fa-faucet:before{content:"\f905"}.fa-fax:before{content:"\f1ac"}.fa-feather:before{content:"\f52d"}.fa-feather-alt:before{content:"\f56b"}.fa-fedex:before{content:"\f797"}.fa-fedora:before{content:"\f798"}.fa-female:before{content:"\f182"}.fa-fighter-jet:before{content:"\f0fb"}.fa-figma:before{content:"\f799"}.fa-file:before{content:"\f15b"}.fa-file-alt:before{content:"\f15c"}.fa-file-archive:before{content:"\f1c6"}.fa-file-audio:before{content:"\f1c7"}.fa-file-code:before{content:"\f1c9"}.fa-file-contract:before{content:"\f56c"}.fa-file-csv:before{content:"\f6dd"}.fa-file-download:before{content:"\f56d"}.fa-file-excel:before{content:"\f1c3"}.fa-file-export:before{content:"\f56e"}.fa-file-image:before{content:"\f1c5"}.fa-file-import:before{content:"\f56f"}.fa-file-invoice:before{content:"\f570"}.fa-file-invoice-dollar:before{content:"\f571"}.fa-file-medical:before{content:"\f477"}.fa-file-medical-alt:before{content:"\f478"}.fa-file-pdf:before{content:"\f1c1"}.fa-file-powerpoint:before{content:"\f1c4"}.fa-file-prescription:before{content:"\f572"}.fa-file-signature:before{content:"\f573"}.fa-file-upload:before{content:"\f574"}.fa-file-video:before{content:"\f1c8"}.fa-file-word:before{content:"\f1c2"}.fa-fill:before{content:"\f575"}.fa-fill-drip:before{content:"\f576"}.fa-film:before{content:"\f008"}.fa-filter:before{content:"\f0b0"}.fa-fingerprint:before{content:"\f577"}.fa-fire:before{content:"\f06d"}.fa-fire-alt:before{content:"\f7e4"}.fa-fire-extinguisher:before{content:"\f134"}.fa-firefox:before{content:"\f269"}.fa-firefox-browser:before{content:"\f907"}.fa-first-aid:before{content:"\f479"}.fa-first-order:before{content:"\f2b0"}.fa-first-order-alt:before{content:"\f50a"}.fa-firstdraft:before{content:"\f3a1"}.fa-fish:before{content:"\f578"}.fa-fist-raised:before{content:"\f6de"}.fa-flag:before{content:"\f024"}.fa-flag-checkered:before{content:"\f11e"}.fa-flag-usa:before{content:"\f74d"}.fa-flask:before{content:"\f0c3"}.fa-flickr:before{content:"\f16e"}.fa-flipboard:before{content:"\f44d"}.fa-flushed:before{content:"\f579"}.fa-fly:before{content:"\f417"}.fa-folder:before{content:"\f07b"}.fa-folder-minus:before{content:"\f65d"}.fa-folder-open:before{content:"\f07c"}.fa-folder-plus:before{content:"\f65e"}.fa-font:before{content:"\f031"}.fa-font-awesome:before{content:"\f2b4"}.fa-font-awesome-alt:before{content:"\f35c"}.fa-font-awesome-flag:before{content:"\f425"}.fa-font-awesome-logo-full:before{content:"\f4e6"}.fa-fonticons:before{content:"\f280"}.fa-fonticons-fi:before{content:"\f3a2"}.fa-football-ball:before{content:"\f44e"}.fa-fort-awesome:before{content:"\f286"}.fa-fort-awesome-alt:before{content:"\f3a3"}.fa-forumbee:before{content:"\f211"}.fa-forward:before{content:"\f04e"}.fa-foursquare:before{content:"\f180"}.fa-free-code-camp:before{content:"\f2c5"}.fa-freebsd:before{content:"\f3a4"}.fa-frog:before{content:"\f52e"}.fa-frown:before{content:"\f119"}.fa-frown-open:before{content:"\f57a"}.fa-fulcrum:before{content:"\f50b"}.fa-funnel-dollar:before{content:"\f662"}.fa-futbol:before{content:"\f1e3"}.fa-galactic-republic:before{content:"\f50c"}.fa-galactic-senate:before{content:"\f50d"}.fa-gamepad:before{content:"\f11b"}.fa-gas-pump:before{content:"\f52f"}.fa-gavel:before{content:"\f0e3"}.fa-gem:before{content:"\f3a5"}.fa-genderless:before{content:"\f22d"}.fa-get-pocket:before{content:"\f265"}.fa-gg:before{content:"\f260"}.fa-gg-circle:before{content:"\f261"}.fa-ghost:before{content:"\f6e2"}.fa-gift:before{content:"\f06b"}.fa-gifts:before{content:"\f79c"}.fa-git:before{content:"\f1d3"}.fa-git-alt:before{content:"\f841"}.fa-git-square:before{content:"\f1d2"}.fa-github:before{content:"\f09b"}.fa-github-alt:before{content:"\f113"}.fa-github-square:before{content:"\f092"}.fa-gitkraken:before{content:"\f3a6"}.fa-gitlab:before{content:"\f296"}.fa-gitter:before{content:"\f426"}.fa-glass-cheers:before{content:"\f79f"}.fa-glass-martini:before{content:"\f000"}.fa-glass-martini-alt:before{content:"\f57b"}.fa-glass-whiskey:before{content:"\f7a0"}.fa-glasses:before{content:"\f530"}.fa-glide:before{content:"\f2a5"}.fa-glide-g:before{content:"\f2a6"}.fa-globe:before{content:"\f0ac"}.fa-globe-africa:before{content:"\f57c"}.fa-globe-americas:before{content:"\f57d"}.fa-globe-asia:before{content:"\f57e"}.fa-globe-europe:before{content:"\f7a2"}.fa-gofore:before{content:"\f3a7"}.fa-golf-ball:before{content:"\f450"}.fa-goodreads:before{content:"\f3a8"}.fa-goodreads-g:before{content:"\f3a9"}.fa-google:before{content:"\f1a0"}.fa-google-drive:before{content:"\f3aa"}.fa-google-play:before{content:"\f3ab"}.fa-google-plus:before{content:"\f2b3"}.fa-google-plus-g:before{content:"\f0d5"}.fa-google-plus-square:before{content:"\f0d4"}.fa-google-wallet:before{content:"\f1ee"}.fa-gopuram:before{content:"\f664"}.fa-graduation-cap:before{content:"\f19d"}.fa-gratipay:before{content:"\f184"}.fa-grav:before{content:"\f2d6"}.fa-greater-than:before{content:"\f531"}.fa-greater-than-equal:before{content:"\f532"}.fa-grimace:before{content:"\f57f"}.fa-grin:before{content:"\f580"}.fa-grin-alt:before{content:"\f581"}.fa-grin-beam:before{content:"\f582"}.fa-grin-beam-sweat:before{content:"\f583"}.fa-grin-hearts:before{content:"\f584"}.fa-grin-squint:before{content:"\f585"}.fa-grin-squint-tears:before{content:"\f586"}.fa-grin-stars:before{content:"\f587"}.fa-grin-tears:before{content:"\f588"}.fa-grin-tongue:before{content:"\f589"}.fa-grin-tongue-squint:before{content:"\f58a"}.fa-grin-tongue-wink:before{content:"\f58b"}.fa-grin-wink:before{content:"\f58c"}.fa-grip-horizontal:before{content:"\f58d"}.fa-grip-lines:before{content:"\f7a4"}.fa-grip-lines-vertical:before{content:"\f7a5"}.fa-grip-vertical:before{content:"\f58e"}.fa-gripfire:before{content:"\f3ac"}.fa-grunt:before{content:"\f3ad"}.fa-guitar:before{content:"\f7a6"}.fa-gulp:before{content:"\f3ae"}.fa-h-square:before{content:"\f0fd"}.fa-hacker-news:before{content:"\f1d4"}.fa-hacker-news-square:before{content:"\f3af"}.fa-hackerrank:before{content:"\f5f7"}.fa-hamburger:before{content:"\f805"}.fa-hammer:before{content:"\f6e3"}.fa-hamsa:before{content:"\f665"}.fa-hand-holding:before{content:"\f4bd"}.fa-hand-holding-heart:before{content:"\f4be"}.fa-hand-holding-medical:before{content:"\f95c"}.fa-hand-holding-usd:before{content:"\f4c0"}.fa-hand-holding-water:before{content:"\f4c1"}.fa-hand-lizard:before{content:"\f258"}.fa-hand-middle-finger:before{content:"\f806"}.fa-hand-paper:before{content:"\f256"}.fa-hand-peace:before{content:"\f25b"}.fa-hand-point-down:before{content:"\f0a7"}.fa-hand-point-left:before{content:"\f0a5"}.fa-hand-point-right:before{content:"\f0a4"}.fa-hand-point-up:before{content:"\f0a6"}.fa-hand-pointer:before{content:"\f25a"}.fa-hand-rock:before{content:"\f255"}.fa-hand-scissors:before{content:"\f257"}.fa-hand-sparkles:before{content:"\f95d"}.fa-hand-spock:before{content:"\f259"}.fa-hands:before{content:"\f4c2"}.fa-hands-helping:before{content:"\f4c4"}.fa-hands-wash:before{content:"\f95e"}.fa-handshake:before{content:"\f2b5"}.fa-handshake-alt-slash:before{content:"\f95f"}.fa-handshake-slash:before{content:"\f960"}.fa-hanukiah:before{content:"\f6e6"}.fa-hard-hat:before{content:"\f807"}.fa-hashtag:before{content:"\f292"}.fa-hat-cowboy:before{content:"\f8c0"}.fa-hat-cowboy-side:before{content:"\f8c1"}.fa-hat-wizard:before{content:"\f6e8"}.fa-hdd:before{content:"\f0a0"}.fa-head-side-cough:before{content:"\f961"}.fa-head-side-cough-slash:before{content:"\f962"}.fa-head-side-mask:before{content:"\f963"}.fa-head-side-virus:before{content:"\f964"}.fa-heading:before{content:"\f1dc"}.fa-headphones:before{content:"\f025"}.fa-headphones-alt:before{content:"\f58f"}.fa-headset:before{content:"\f590"}.fa-heart:before{content:"\f004"}.fa-heart-broken:before{content:"\f7a9"}.fa-heartbeat:before{content:"\f21e"}.fa-helicopter:before{content:"\f533"}.fa-highlighter:before{content:"\f591"}.fa-hiking:before{content:"\f6ec"}.fa-hippo:before{content:"\f6ed"}.fa-hips:before{content:"\f452"}.fa-hire-a-helper:before{content:"\f3b0"}.fa-history:before{content:"\f1da"}.fa-hockey-puck:before{content:"\f453"}.fa-holly-berry:before{content:"\f7aa"}.fa-home:before{content:"\f015"}.fa-hooli:before{content:"\f427"}.fa-hornbill:before{content:"\f592"}.fa-horse:before{content:"\f6f0"}.fa-horse-head:before{content:"\f7ab"}.fa-hospital:before{content:"\f0f8"}.fa-hospital-alt:before{content:"\f47d"}.fa-hospital-symbol:before{content:"\f47e"}.fa-hospital-user:before{content:"\f80d"}.fa-hot-tub:before{content:"\f593"}.fa-hotdog:before{content:"\f80f"}.fa-hotel:before{content:"\f594"}.fa-hotjar:before{content:"\f3b1"}.fa-hourglass:before{content:"\f254"}.fa-hourglass-end:before{content:"\f253"}.fa-hourglass-half:before{content:"\f252"}.fa-hourglass-start:before{content:"\f251"}.fa-house-damage:before{content:"\f6f1"}.fa-house-user:before{content:"\f965"}.fa-houzz:before{content:"\f27c"}.fa-hryvnia:before{content:"\f6f2"}.fa-html5:before{content:"\f13b"}.fa-hubspot:before{content:"\f3b2"}.fa-i-cursor:before{content:"\f246"}.fa-ice-cream:before{content:"\f810"}.fa-icicles:before{content:"\f7ad"}.fa-icons:before{content:"\f86d"}.fa-id-badge:before{content:"\f2c1"}.fa-id-card:before{content:"\f2c2"}.fa-id-card-alt:before{content:"\f47f"}.fa-ideal:before{content:"\f913"}.fa-igloo:before{content:"\f7ae"}.fa-image:before{content:"\f03e"}.fa-images:before{content:"\f302"}.fa-imdb:before{content:"\f2d8"}.fa-inbox:before{content:"\f01c"}.fa-indent:before{content:"\f03c"}.fa-industry:before{content:"\f275"}.fa-infinity:before{content:"\f534"}.fa-info:before{content:"\f129"}.fa-info-circle:before{content:"\f05a"}.fa-instagram:before{content:"\f16d"}.fa-instagram-square:before{content:"\f955"}.fa-intercom:before{content:"\f7af"}.fa-internet-explorer:before{content:"\f26b"}.fa-invision:before{content:"\f7b0"}.fa-ioxhost:before{content:"\f208"}.fa-italic:before{content:"\f033"}.fa-itch-io:before{content:"\f83a"}.fa-itunes:before{content:"\f3b4"}.fa-itunes-note:before{content:"\f3b5"}.fa-java:before{content:"\f4e4"}.fa-jedi:before{content:"\f669"}.fa-jedi-order:before{content:"\f50e"}.fa-jenkins:before{content:"\f3b6"}.fa-jira:before{content:"\f7b1"}.fa-joget:before{content:"\f3b7"}.fa-joint:before{content:"\f595"}.fa-joomla:before{content:"\f1aa"}.fa-journal-whills:before{content:"\f66a"}.fa-js:before{content:"\f3b8"}.fa-js-square:before{content:"\f3b9"}.fa-jsfiddle:before{content:"\f1cc"}.fa-kaaba:before{content:"\f66b"}.fa-kaggle:before{content:"\f5fa"}.fa-key:before{content:"\f084"}.fa-keybase:before{content:"\f4f5"}.fa-keyboard:before{content:"\f11c"}.fa-keycdn:before{content:"\f3ba"}.fa-khanda:before{content:"\f66d"}.fa-kickstarter:before{content:"\f3bb"}.fa-kickstarter-k:before{content:"\f3bc"}.fa-kiss:before{content:"\f596"}.fa-kiss-beam:before{content:"\f597"}.fa-kiss-wink-heart:before{content:"\f598"}.fa-kiwi-bird:before{content:"\f535"}.fa-korvue:before{content:"\f42f"}.fa-landmark:before{content:"\f66f"}.fa-language:before{content:"\f1ab"}.fa-laptop:before{content:"\f109"}.fa-laptop-code:before{content:"\f5fc"}.fa-laptop-house:before{content:"\f966"}.fa-laptop-medical:before{content:"\f812"}.fa-laravel:before{content:"\f3bd"}.fa-lastfm:before{content:"\f202"}.fa-lastfm-square:before{content:"\f203"}.fa-laugh:before{content:"\f599"}.fa-laugh-beam:before{content:"\f59a"}.fa-laugh-squint:before{content:"\f59b"}.fa-laugh-wink:before{content:"\f59c"}.fa-layer-group:before{content:"\f5fd"}.fa-leaf:before{content:"\f06c"}.fa-leanpub:before{content:"\f212"}.fa-lemon:before{content:"\f094"}.fa-less:before{content:"\f41d"}.fa-less-than:before{content:"\f536"}.fa-less-than-equal:before{content:"\f537"}.fa-level-down-alt:before{content:"\f3be"}.fa-level-up-alt:before{content:"\f3bf"}.fa-life-ring:before{content:"\f1cd"}.fa-lightbulb:before{content:"\f0eb"}.fa-line:before{content:"\f3c0"}.fa-link:before{content:"\f0c1"}.fa-linkedin:before{content:"\f08c"}.fa-linkedin-in:before{content:"\f0e1"}.fa-linode:before{content:"\f2b8"}.fa-linux:before{content:"\f17c"}.fa-lira-sign:before{content:"\f195"}.fa-list:before{content:"\f03a"}.fa-list-alt:before{content:"\f022"}.fa-list-ol:before{content:"\f0cb"}.fa-list-ul:before{content:"\f0ca"}.fa-location-arrow:before{content:"\f124"}.fa-lock:before{content:"\f023"}.fa-lock-open:before{content:"\f3c1"}.fa-long-arrow-alt-down:before{content:"\f309"}.fa-long-arrow-alt-left:before{content:"\f30a"}.fa-long-arrow-alt-right:before{content:"\f30b"}.fa-long-arrow-alt-up:before{content:"\f30c"}.fa-low-vision:before{content:"\f2a8"}.fa-luggage-cart:before{content:"\f59d"}.fa-lungs:before{content:"\f604"}.fa-lungs-virus:before{content:"\f967"}.fa-lyft:before{content:"\f3c3"}.fa-magento:before{content:"\f3c4"}.fa-magic:before{content:"\f0d0"}.fa-magnet:before{content:"\f076"}.fa-mail-bulk:before{content:"\f674"}.fa-mailchimp:before{content:"\f59e"}.fa-male:before{content:"\f183"}.fa-mandalorian:before{content:"\f50f"}.fa-map:before{content:"\f279"}.fa-map-marked:before{content:"\f59f"}.fa-map-marked-alt:before{content:"\f5a0"}.fa-map-marker:before{content:"\f041"}.fa-map-marker-alt:before{content:"\f3c5"}.fa-map-pin:before{content:"\f276"}.fa-map-signs:before{content:"\f277"}.fa-markdown:before{content:"\f60f"}.fa-marker:before{content:"\f5a1"}.fa-mars:before{content:"\f222"}.fa-mars-double:before{content:"\f227"}.fa-mars-stroke:before{content:"\f229"}.fa-mars-stroke-h:before{content:"\f22b"}.fa-mars-stroke-v:before{content:"\f22a"}.fa-mask:before{content:"\f6fa"}.fa-mastodon:before{content:"\f4f6"}.fa-maxcdn:before{content:"\f136"}.fa-mdb:before{content:"\f8ca"}.fa-medal:before{content:"\f5a2"}.fa-medapps:before{content:"\f3c6"}.fa-medium:before{content:"\f23a"}.fa-medium-m:before{content:"\f3c7"}.fa-medkit:before{content:"\f0fa"}.fa-medrt:before{content:"\f3c8"}.fa-meetup:before{content:"\f2e0"}.fa-megaport:before{content:"\f5a3"}.fa-meh:before{content:"\f11a"}.fa-meh-blank:before{content:"\f5a4"}.fa-meh-rolling-eyes:before{content:"\f5a5"}.fa-memory:before{content:"\f538"}.fa-mendeley:before{content:"\f7b3"}.fa-menorah:before{content:"\f676"}.fa-mercury:before{content:"\f223"}.fa-meteor:before{content:"\f753"}.fa-microblog:before{content:"\f91a"}.fa-microchip:before{content:"\f2db"}.fa-microphone:before{content:"\f130"}.fa-microphone-alt:before{content:"\f3c9"}.fa-microphone-alt-slash:before{content:"\f539"}.fa-microphone-slash:before{content:"\f131"}.fa-microscope:before{content:"\f610"}.fa-microsoft:before{content:"\f3ca"}.fa-minus:before{content:"\f068"}.fa-minus-circle:before{content:"\f056"}.fa-minus-square:before{content:"\f146"}.fa-mitten:before{content:"\f7b5"}.fa-mix:before{content:"\f3cb"}.fa-mixcloud:before{content:"\f289"}.fa-mixer:before{content:"\f956"}.fa-mizuni:before{content:"\f3cc"}.fa-mobile:before{content:"\f10b"}.fa-mobile-alt:before{content:"\f3cd"}.fa-modx:before{content:"\f285"}.fa-monero:before{content:"\f3d0"}.fa-money-bill:before{content:"\f0d6"}.fa-money-bill-alt:before{content:"\f3d1"}.fa-money-bill-wave:before{content:"\f53a"}.fa-money-bill-wave-alt:before{content:"\f53b"}.fa-money-check:before{content:"\f53c"}.fa-money-check-alt:before{content:"\f53d"}.fa-monument:before{content:"\f5a6"}.fa-moon:before{content:"\f186"}.fa-mortar-pestle:before{content:"\f5a7"}.fa-mosque:before{content:"\f678"}.fa-motorcycle:before{content:"\f21c"}.fa-mountain:before{content:"\f6fc"}.fa-mouse:before{content:"\f8cc"}.fa-mouse-pointer:before{content:"\f245"}.fa-mug-hot:before{content:"\f7b6"}.fa-music:before{content:"\f001"}.fa-napster:before{content:"\f3d2"}.fa-neos:before{content:"\f612"}.fa-network-wired:before{content:"\f6ff"}.fa-neuter:before{content:"\f22c"}.fa-newspaper:before{content:"\f1ea"}.fa-nimblr:before{content:"\f5a8"}.fa-node:before{content:"\f419"}.fa-node-js:before{content:"\f3d3"}.fa-not-equal:before{content:"\f53e"}.fa-notes-medical:before{content:"\f481"}.fa-npm:before{content:"\f3d4"}.fa-ns8:before{content:"\f3d5"}.fa-nutritionix:before{content:"\f3d6"}.fa-object-group:before{content:"\f247"}.fa-object-ungroup:before{content:"\f248"}.fa-odnoklassniki:before{content:"\f263"}.fa-odnoklassniki-square:before{content:"\f264"}.fa-oil-can:before{content:"\f613"}.fa-old-republic:before{content:"\f510"}.fa-om:before{content:"\f679"}.fa-opencart:before{content:"\f23d"}.fa-openid:before{content:"\f19b"}.fa-opera:before{content:"\f26a"}.fa-optin-monster:before{content:"\f23c"}.fa-orcid:before{content:"\f8d2"}.fa-osi:before{content:"\f41a"}.fa-otter:before{content:"\f700"}.fa-outdent:before{content:"\f03b"}.fa-page4:before{content:"\f3d7"}.fa-pagelines:before{content:"\f18c"}.fa-pager:before{content:"\f815"}.fa-paint-brush:before{content:"\f1fc"}.fa-paint-roller:before{content:"\f5aa"}.fa-palette:before{content:"\f53f"}.fa-palfed:before{content:"\f3d8"}.fa-pallet:before{content:"\f482"}.fa-paper-plane:before{content:"\f1d8"}.fa-paperclip:before{content:"\f0c6"}.fa-parachute-box:before{content:"\f4cd"}.fa-paragraph:before{content:"\f1dd"}.fa-parking:before{content:"\f540"}.fa-passport:before{content:"\f5ab"}.fa-pastafarianism:before{content:"\f67b"}.fa-paste:before{content:"\f0ea"}.fa-patreon:before{content:"\f3d9"}.fa-pause:before{content:"\f04c"}.fa-pause-circle:before{content:"\f28b"}.fa-paw:before{content:"\f1b0"}.fa-paypal:before{content:"\f1ed"}.fa-peace:before{content:"\f67c"}.fa-pen:before{content:"\f304"}.fa-pen-alt:before{content:"\f305"}.fa-pen-fancy:before{content:"\f5ac"}.fa-pen-nib:before{content:"\f5ad"}.fa-pen-square:before{content:"\f14b"}.fa-pencil-alt:before{content:"\f303"}.fa-pencil-ruler:before{content:"\f5ae"}.fa-penny-arcade:before{content:"\f704"}.fa-people-arrows:before{content:"\f968"}.fa-people-carry:before{content:"\f4ce"}.fa-pepper-hot:before{content:"\f816"}.fa-percent:before{content:"\f295"}.fa-percentage:before{content:"\f541"}.fa-periscope:before{content:"\f3da"}.fa-person-booth:before{content:"\f756"}.fa-phabricator:before{content:"\f3db"}.fa-phoenix-framework:before{content:"\f3dc"}.fa-phoenix-squadron:before{content:"\f511"}.fa-phone:before{content:"\f095"}.fa-phone-alt:before{content:"\f879"}.fa-phone-slash:before{content:"\f3dd"}.fa-phone-square:before{content:"\f098"}.fa-phone-square-alt:before{content:"\f87b"}.fa-phone-volume:before{content:"\f2a0"}.fa-photo-video:before{content:"\f87c"}.fa-php:before{content:"\f457"}.fa-pied-piper:before{content:"\f2ae"}.fa-pied-piper-alt:before{content:"\f1a8"}.fa-pied-piper-hat:before{content:"\f4e5"}.fa-pied-piper-pp:before{content:"\f1a7"}.fa-pied-piper-square:before{content:"\f91e"}.fa-piggy-bank:before{content:"\f4d3"}.fa-pills:before{content:"\f484"}.fa-pinterest:before{content:"\f0d2"}.fa-pinterest-p:before{content:"\f231"}.fa-pinterest-square:before{content:"\f0d3"}.fa-pizza-slice:before{content:"\f818"}.fa-place-of-worship:before{content:"\f67f"}.fa-plane:before{content:"\f072"}.fa-plane-arrival:before{content:"\f5af"}.fa-plane-departure:before{content:"\f5b0"}.fa-plane-slash:before{content:"\f969"}.fa-play:before{content:"\f04b"}.fa-play-circle:before{content:"\f144"}.fa-playstation:before{content:"\f3df"}.fa-plug:before{content:"\f1e6"}.fa-plus:before{content:"\f067"}.fa-plus-circle:before{content:"\f055"}.fa-plus-square:before{content:"\f0fe"}.fa-podcast:before{content:"\f2ce"}.fa-poll:before{content:"\f681"}.fa-poll-h:before{content:"\f682"}.fa-poo:before{content:"\f2fe"}.fa-poo-storm:before{content:"\f75a"}.fa-poop:before{content:"\f619"}.fa-portrait:before{content:"\f3e0"}.fa-pound-sign:before{content:"\f154"}.fa-power-off:before{content:"\f011"}.fa-pray:before{content:"\f683"}.fa-praying-hands:before{content:"\f684"}.fa-prescription:before{content:"\f5b1"}.fa-prescription-bottle:before{content:"\f485"}.fa-prescription-bottle-alt:before{content:"\f486"}.fa-print:before{content:"\f02f"}.fa-procedures:before{content:"\f487"}.fa-product-hunt:before{content:"\f288"}.fa-project-diagram:before{content:"\f542"}.fa-pump-medical:before{content:"\f96a"}.fa-pump-soap:before{content:"\f96b"}.fa-pushed:before{content:"\f3e1"}.fa-puzzle-piece:before{content:"\f12e"}.fa-python:before{content:"\f3e2"}.fa-qq:before{content:"\f1d6"}.fa-qrcode:before{content:"\f029"}.fa-question:before{content:"\f128"}.fa-question-circle:before{content:"\f059"}.fa-quidditch:before{content:"\f458"}.fa-quinscape:before{content:"\f459"}.fa-quora:before{content:"\f2c4"}.fa-quote-left:before{content:"\f10d"}.fa-quote-right:before{content:"\f10e"}.fa-quran:before{content:"\f687"}.fa-r-project:before{content:"\f4f7"}.fa-radiation:before{content:"\f7b9"}.fa-radiation-alt:before{content:"\f7ba"}.fa-rainbow:before{content:"\f75b"}.fa-random:before{content:"\f074"}.fa-raspberry-pi:before{content:"\f7bb"}.fa-ravelry:before{content:"\f2d9"}.fa-react:before{content:"\f41b"}.fa-reacteurope:before{content:"\f75d"}.fa-readme:before{content:"\f4d5"}.fa-rebel:before{content:"\f1d0"}.fa-receipt:before{content:"\f543"}.fa-record-vinyl:before{content:"\f8d9"}.fa-recycle:before{content:"\f1b8"}.fa-red-river:before{content:"\f3e3"}.fa-reddit:before{content:"\f1a1"}.fa-reddit-alien:before{content:"\f281"}.fa-reddit-square:before{content:"\f1a2"}.fa-redhat:before{content:"\f7bc"}.fa-redo:before{content:"\f01e"}.fa-redo-alt:before{content:"\f2f9"}.fa-registered:before{content:"\f25d"}.fa-remove-format:before{content:"\f87d"}.fa-renren:before{content:"\f18b"}.fa-reply:before{content:"\f3e5"}.fa-reply-all:before{content:"\f122"}.fa-replyd:before{content:"\f3e6"}.fa-republican:before{content:"\f75e"}.fa-researchgate:before{content:"\f4f8"}.fa-resolving:before{content:"\f3e7"}.fa-restroom:before{content:"\f7bd"}.fa-retweet:before{content:"\f079"}.fa-rev:before{content:"\f5b2"}.fa-ribbon:before{content:"\f4d6"}.fa-ring:before{content:"\f70b"}.fa-road:before{content:"\f018"}.fa-robot:before{content:"\f544"}.fa-rocket:before{content:"\f135"}.fa-rocketchat:before{content:"\f3e8"}.fa-rockrms:before{content:"\f3e9"}.fa-route:before{content:"\f4d7"}.fa-rss:before{content:"\f09e"}.fa-rss-square:before{content:"\f143"}.fa-ruble-sign:before{content:"\f158"}.fa-ruler:before{content:"\f545"}.fa-ruler-combined:before{content:"\f546"}.fa-ruler-horizontal:before{content:"\f547"}.fa-ruler-vertical:before{content:"\f548"}.fa-running:before{content:"\f70c"}.fa-rupee-sign:before{content:"\f156"}.fa-sad-cry:before{content:"\f5b3"}.fa-sad-tear:before{content:"\f5b4"}.fa-safari:before{content:"\f267"}.fa-salesforce:before{content:"\f83b"}.fa-sass:before{content:"\f41e"}.fa-satellite:before{content:"\f7bf"}.fa-satellite-dish:before{content:"\f7c0"}.fa-save:before{content:"\f0c7"}.fa-schlix:before{content:"\f3ea"}.fa-school:before{content:"\f549"}.fa-screwdriver:before{content:"\f54a"}.fa-scribd:before{content:"\f28a"}.fa-scroll:before{content:"\f70e"}.fa-sd-card:before{content:"\f7c2"}.fa-search:before{content:"\f002"}.fa-search-dollar:before{content:"\f688"}.fa-search-location:before{content:"\f689"}.fa-search-minus:before{content:"\f010"}.fa-search-plus:before{content:"\f00e"}.fa-searchengin:before{content:"\f3eb"}.fa-seedling:before{content:"\f4d8"}.fa-sellcast:before{content:"\f2da"}.fa-sellsy:before{content:"\f213"}.fa-server:before{content:"\f233"}.fa-servicestack:before{content:"\f3ec"}.fa-shapes:before{content:"\f61f"}.fa-share:before{content:"\f064"}.fa-share-alt:before{content:"\f1e0"}.fa-share-alt-square:before{content:"\f1e1"}.fa-share-square:before{content:"\f14d"}.fa-shekel-sign:before{content:"\f20b"}.fa-shield-alt:before{content:"\f3ed"}.fa-shield-virus:before{content:"\f96c"}.fa-ship:before{content:"\f21a"}.fa-shipping-fast:before{content:"\f48b"}.fa-shirtsinbulk:before{content:"\f214"}.fa-shoe-prints:before{content:"\f54b"}.fa-shopify:before{content:"\f957"}.fa-shopping-bag:before{content:"\f290"}.fa-shopping-basket:before{content:"\f291"}.fa-shopping-cart:before{content:"\f07a"}.fa-shopware:before{content:"\f5b5"}.fa-shower:before{content:"\f2cc"}.fa-shuttle-van:before{content:"\f5b6"}.fa-sign:before{content:"\f4d9"}.fa-sign-in-alt:before{content:"\f2f6"}.fa-sign-language:before{content:"\f2a7"}.fa-sign-out-alt:before{content:"\f2f5"}.fa-signal:before{content:"\f012"}.fa-signature:before{content:"\f5b7"}.fa-sim-card:before{content:"\f7c4"}.fa-simplybuilt:before{content:"\f215"}.fa-sistrix:before{content:"\f3ee"}.fa-sitemap:before{content:"\f0e8"}.fa-sith:before{content:"\f512"}.fa-skating:before{content:"\f7c5"}.fa-sketch:before{content:"\f7c6"}.fa-skiing:before{content:"\f7c9"}.fa-skiing-nordic:before{content:"\f7ca"}.fa-skull:before{content:"\f54c"}.fa-skull-crossbones:before{content:"\f714"}.fa-skyatlas:before{content:"\f216"}.fa-skype:before{content:"\f17e"}.fa-slack:before{content:"\f198"}.fa-slack-hash:before{content:"\f3ef"}.fa-slash:before{content:"\f715"}.fa-sleigh:before{content:"\f7cc"}.fa-sliders-h:before{content:"\f1de"}.fa-slideshare:before{content:"\f1e7"}.fa-smile:before{content:"\f118"}.fa-smile-beam:before{content:"\f5b8"}.fa-smile-wink:before{content:"\f4da"}.fa-smog:before{content:"\f75f"}.fa-smoking:before{content:"\f48d"}.fa-smoking-ban:before{content:"\f54d"}.fa-sms:before{content:"\f7cd"}.fa-snapchat:before{content:"\f2ab"}.fa-snapchat-ghost:before{content:"\f2ac"}.fa-snapchat-square:before{content:"\f2ad"}.fa-snowboarding:before{content:"\f7ce"}.fa-snowflake:before{content:"\f2dc"}.fa-snowman:before{content:"\f7d0"}.fa-snowplow:before{content:"\f7d2"}.fa-soap:before{content:"\f96e"}.fa-socks:before{content:"\f696"}.fa-solar-panel:before{content:"\f5ba"}.fa-sort:before{content:"\f0dc"}.fa-sort-alpha-down:before{content:"\f15d"}.fa-sort-alpha-down-alt:before{content:"\f881"}.fa-sort-alpha-up:before{content:"\f15e"}.fa-sort-alpha-up-alt:before{content:"\f882"}.fa-sort-amount-down:before{content:"\f160"}.fa-sort-amount-down-alt:before{content:"\f884"}.fa-sort-amount-up:before{content:"\f161"}.fa-sort-amount-up-alt:before{content:"\f885"}.fa-sort-down:before{content:"\f0dd"}.fa-sort-numeric-down:before{content:"\f162"}.fa-sort-numeric-down-alt:before{content:"\f886"}.fa-sort-numeric-up:before{content:"\f163"}.fa-sort-numeric-up-alt:before{content:"\f887"}.fa-sort-up:before{content:"\f0de"}.fa-soundcloud:before{content:"\f1be"}.fa-sourcetree:before{content:"\f7d3"}.fa-spa:before{content:"\f5bb"}.fa-space-shuttle:before{content:"\f197"}.fa-speakap:before{content:"\f3f3"}.fa-speaker-deck:before{content:"\f83c"}.fa-spell-check:before{content:"\f891"}.fa-spider:before{content:"\f717"}.fa-spinner:before{content:"\f110"}.fa-splotch:before{content:"\f5bc"}.fa-spotify:before{content:"\f1bc"}.fa-spray-can:before{content:"\f5bd"}.fa-square:before{content:"\f0c8"}.fa-square-full:before{content:"\f45c"}.fa-square-root-alt:before{content:"\f698"}.fa-squarespace:before{content:"\f5be"}.fa-stack-exchange:before{content:"\f18d"}.fa-stack-overflow:before{content:"\f16c"}.fa-stackpath:before{content:"\f842"}.fa-stamp:before{content:"\f5bf"}.fa-star:before{content:"\f005"}.fa-star-and-crescent:before{content:"\f699"}.fa-star-half:before{content:"\f089"}.fa-star-half-alt:before{content:"\f5c0"}.fa-star-of-david:before{content:"\f69a"}.fa-star-of-life:before{content:"\f621"}.fa-staylinked:before{content:"\f3f5"}.fa-steam:before{content:"\f1b6"}.fa-steam-square:before{content:"\f1b7"}.fa-steam-symbol:before{content:"\f3f6"}.fa-step-backward:before{content:"\f048"}.fa-step-forward:before{content:"\f051"}.fa-stethoscope:before{content:"\f0f1"}.fa-sticker-mule:before{content:"\f3f7"}.fa-sticky-note:before{content:"\f249"}.fa-stop:before{content:"\f04d"}.fa-stop-circle:before{content:"\f28d"}.fa-stopwatch:before{content:"\f2f2"}.fa-stopwatch-20:before{content:"\f96f"}.fa-store:before{content:"\f54e"}.fa-store-alt:before{content:"\f54f"}.fa-store-alt-slash:before{content:"\f970"}.fa-store-slash:before{content:"\f971"}.fa-strava:before{content:"\f428"}.fa-stream:before{content:"\f550"}.fa-street-view:before{content:"\f21d"}.fa-strikethrough:before{content:"\f0cc"}.fa-stripe:before{content:"\f429"}.fa-stripe-s:before{content:"\f42a"}.fa-stroopwafel:before{content:"\f551"}.fa-studiovinari:before{content:"\f3f8"}.fa-stumbleupon:before{content:"\f1a4"}.fa-stumbleupon-circle:before{content:"\f1a3"}.fa-subscript:before{content:"\f12c"}.fa-subway:before{content:"\f239"}.fa-suitcase:before{content:"\f0f2"}.fa-suitcase-rolling:before{content:"\f5c1"}.fa-sun:before{content:"\f185"}.fa-superpowers:before{content:"\f2dd"}.fa-superscript:before{content:"\f12b"}.fa-supple:before{content:"\f3f9"}.fa-surprise:before{content:"\f5c2"}.fa-suse:before{content:"\f7d6"}.fa-swatchbook:before{content:"\f5c3"}.fa-swift:before{content:"\f8e1"}.fa-swimmer:before{content:"\f5c4"}.fa-swimming-pool:before{content:"\f5c5"}.fa-symfony:before{content:"\f83d"}.fa-synagogue:before{content:"\f69b"}.fa-sync:before{content:"\f021"}.fa-sync-alt:before{content:"\f2f1"}.fa-syringe:before{content:"\f48e"}.fa-table:before{content:"\f0ce"}.fa-table-tennis:before{content:"\f45d"}.fa-tablet:before{content:"\f10a"}.fa-tablet-alt:before{content:"\f3fa"}.fa-tablets:before{content:"\f490"}.fa-tachometer-alt:before{content:"\f3fd"}.fa-tag:before{content:"\f02b"}.fa-tags:before{content:"\f02c"}.fa-tape:before{content:"\f4db"}.fa-tasks:before{content:"\f0ae"}.fa-taxi:before{content:"\f1ba"}.fa-teamspeak:before{content:"\f4f9"}.fa-teeth:before{content:"\f62e"}.fa-teeth-open:before{content:"\f62f"}.fa-telegram:before{content:"\f2c6"}.fa-telegram-plane:before{content:"\f3fe"}.fa-temperature-high:before{content:"\f769"}.fa-temperature-low:before{content:"\f76b"}.fa-tencent-weibo:before{content:"\f1d5"}.fa-tenge:before{content:"\f7d7"}.fa-terminal:before{content:"\f120"}.fa-text-height:before{content:"\f034"}.fa-text-width:before{content:"\f035"}.fa-th:before{content:"\f00a"}.fa-th-large:before{content:"\f009"}.fa-th-list:before{content:"\f00b"}.fa-the-red-yeti:before{content:"\f69d"}.fa-theater-masks:before{content:"\f630"}.fa-themeco:before{content:"\f5c6"}.fa-themeisle:before{content:"\f2b2"}.fa-thermometer:before{content:"\f491"}.fa-thermometer-empty:before{content:"\f2cb"}.fa-thermometer-full:before{content:"\f2c7"}.fa-thermometer-half:before{content:"\f2c9"}.fa-thermometer-quarter:before{content:"\f2ca"}.fa-thermometer-three-quarters:before{content:"\f2c8"}.fa-think-peaks:before{content:"\f731"}.fa-thumbs-down:before{content:"\f165"}.fa-thumbs-up:before{content:"\f164"}.fa-thumbtack:before{content:"\f08d"}.fa-ticket-alt:before{content:"\f3ff"}.fa-times:before{content:"\f00d"}.fa-times-circle:before{content:"\f057"}.fa-tint:before{content:"\f043"}.fa-tint-slash:before{content:"\f5c7"}.fa-tired:before{content:"\f5c8"}.fa-toggle-off:before{content:"\f204"}.fa-toggle-on:before{content:"\f205"}.fa-toilet:before{content:"\f7d8"}.fa-toilet-paper:before{content:"\f71e"}.fa-toilet-paper-slash:before{content:"\f972"}.fa-toolbox:before{content:"\f552"}.fa-tools:before{content:"\f7d9"}.fa-tooth:before{content:"\f5c9"}.fa-torah:before{content:"\f6a0"}.fa-torii-gate:before{content:"\f6a1"}.fa-tractor:before{content:"\f722"}.fa-trade-federation:before{content:"\f513"}.fa-trademark:before{content:"\f25c"}.fa-traffic-light:before{content:"\f637"}.fa-trailer:before{content:"\f941"}.fa-train:before{content:"\f238"}.fa-tram:before{content:"\f7da"}.fa-transgender:before{content:"\f224"}.fa-transgender-alt:before{content:"\f225"}.fa-trash:before{content:"\f1f8"}.fa-trash-alt:before{content:"\f2ed"}.fa-trash-restore:before{content:"\f829"}.fa-trash-restore-alt:before{content:"\f82a"}.fa-tree:before{content:"\f1bb"}.fa-trello:before{content:"\f181"}.fa-tripadvisor:before{content:"\f262"}.fa-trophy:before{content:"\f091"}.fa-truck:before{content:"\f0d1"}.fa-truck-loading:before{content:"\f4de"}.fa-truck-monster:before{content:"\f63b"}.fa-truck-moving:before{content:"\f4df"}.fa-truck-pickup:before{content:"\f63c"}.fa-tshirt:before{content:"\f553"}.fa-tty:before{content:"\f1e4"}.fa-tumblr:before{content:"\f173"}.fa-tumblr-square:before{content:"\f174"}.fa-tv:before{content:"\f26c"}.fa-twitch:before{content:"\f1e8"}.fa-twitter:before{content:"\f099"}.fa-twitter-square:before{content:"\f081"}.fa-typo3:before{content:"\f42b"}.fa-uber:before{content:"\f402"}.fa-ubuntu:before{content:"\f7df"}.fa-uikit:before{content:"\f403"}.fa-umbraco:before{content:"\f8e8"}.fa-umbrella:before{content:"\f0e9"}.fa-umbrella-beach:before{content:"\f5ca"}.fa-underline:before{content:"\f0cd"}.fa-undo:before{content:"\f0e2"}.fa-undo-alt:before{content:"\f2ea"}.fa-uniregistry:before{content:"\f404"}.fa-unity:before{content:"\f949"}.fa-universal-access:before{content:"\f29a"}.fa-university:before{content:"\f19c"}.fa-unlink:before{content:"\f127"}.fa-unlock:before{content:"\f09c"}.fa-unlock-alt:before{content:"\f13e"}.fa-untappd:before{content:"\f405"}.fa-upload:before{content:"\f093"}.fa-ups:before{content:"\f7e0"}.fa-usb:before{content:"\f287"}.fa-user:before{content:"\f007"}.fa-user-alt:before{content:"\f406"}.fa-user-alt-slash:before{content:"\f4fa"}.fa-user-astronaut:before{content:"\f4fb"}.fa-user-check:before{content:"\f4fc"}.fa-user-circle:before{content:"\f2bd"}.fa-user-clock:before{content:"\f4fd"}.fa-user-cog:before{content:"\f4fe"}.fa-user-edit:before{content:"\f4ff"}.fa-user-friends:before{content:"\f500"}.fa-user-graduate:before{content:"\f501"}.fa-user-injured:before{content:"\f728"}.fa-user-lock:before{content:"\f502"}.fa-user-md:before{content:"\f0f0"}.fa-user-minus:before{content:"\f503"}.fa-user-ninja:before{content:"\f504"}.fa-user-nurse:before{content:"\f82f"}.fa-user-plus:before{content:"\f234"}.fa-user-secret:before{content:"\f21b"}.fa-user-shield:before{content:"\f505"}.fa-user-slash:before{content:"\f506"}.fa-user-tag:before{content:"\f507"}.fa-user-tie:before{content:"\f508"}.fa-user-times:before{content:"\f235"}.fa-users:before{content:"\f0c0"}.fa-users-cog:before{content:"\f509"}.fa-usps:before{content:"\f7e1"}.fa-ussunnah:before{content:"\f407"}.fa-utensil-spoon:before{content:"\f2e5"}.fa-utensils:before{content:"\f2e7"}.fa-vaadin:before{content:"\f408"}.fa-vector-square:before{content:"\f5cb"}.fa-venus:before{content:"\f221"}.fa-venus-double:before{content:"\f226"}.fa-venus-mars:before{content:"\f228"}.fa-viacoin:before{content:"\f237"}.fa-viadeo:before{content:"\f2a9"}.fa-viadeo-square:before{content:"\f2aa"}.fa-vial:before{content:"\f492"}.fa-vials:before{content:"\f493"}.fa-viber:before{content:"\f409"}.fa-video:before{content:"\f03d"}.fa-video-slash:before{content:"\f4e2"}.fa-vihara:before{content:"\f6a7"}.fa-vimeo:before{content:"\f40a"}.fa-vimeo-square:before{content:"\f194"}.fa-vimeo-v:before{content:"\f27d"}.fa-vine:before{content:"\f1ca"}.fa-virus:before{content:"\f974"}.fa-virus-slash:before{content:"\f975"}.fa-viruses:before{content:"\f976"}.fa-vk:before{content:"\f189"}.fa-vnv:before{content:"\f40b"}.fa-voicemail:before{content:"\f897"}.fa-volleyball-ball:before{content:"\f45f"}.fa-volume-down:before{content:"\f027"}.fa-volume-mute:before{content:"\f6a9"}.fa-volume-off:before{content:"\f026"}.fa-volume-up:before{content:"\f028"}.fa-vote-yea:before{content:"\f772"}.fa-vr-cardboard:before{content:"\f729"}.fa-vuejs:before{content:"\f41f"}.fa-walking:before{content:"\f554"}.fa-wallet:before{content:"\f555"}.fa-warehouse:before{content:"\f494"}.fa-water:before{content:"\f773"}.fa-wave-square:before{content:"\f83e"}.fa-waze:before{content:"\f83f"}.fa-weebly:before{content:"\f5cc"}.fa-weibo:before{content:"\f18a"}.fa-weight:before{content:"\f496"}.fa-weight-hanging:before{content:"\f5cd"}.fa-weixin:before{content:"\f1d7"}.fa-whatsapp:before{content:"\f232"}.fa-whatsapp-square:before{content:"\f40c"}.fa-wheelchair:before{content:"\f193"}.fa-whmcs:before{content:"\f40d"}.fa-wifi:before{content:"\f1eb"}.fa-wikipedia-w:before{content:"\f266"}.fa-wind:before{content:"\f72e"}.fa-window-close:before{content:"\f410"}.fa-window-maximize:before{content:"\f2d0"}.fa-window-minimize:before{content:"\f2d1"}.fa-window-restore:before{content:"\f2d2"}.fa-windows:before{content:"\f17a"}.fa-wine-bottle:before{content:"\f72f"}.fa-wine-glass:before{content:"\f4e3"}.fa-wine-glass-alt:before{content:"\f5ce"}.fa-wix:before{content:"\f5cf"}.fa-wizards-of-the-coast:before{content:"\f730"}.fa-wolf-pack-battalion:before{content:"\f514"}.fa-won-sign:before{content:"\f159"}.fa-wordpress:before{content:"\f19a"}.fa-wordpress-simple:before{content:"\f411"}.fa-wpbeginner:before{content:"\f297"}.fa-wpexplorer:before{content:"\f2de"}.fa-wpforms:before{content:"\f298"}.fa-wpressr:before{content:"\f3e4"}.fa-wrench:before{content:"\f0ad"}.fa-x-ray:before{content:"\f497"}.fa-xbox:before{content:"\f412"}.fa-xing:before{content:"\f168"}.fa-xing-square:before{content:"\f169"}.fa-y-combinator:before{content:"\f23b"}.fa-yahoo:before{content:"\f19e"}.fa-yammer:before{content:"\f840"}.fa-yandex:before{content:"\f413"}.fa-yandex-international:before{content:"\f414"}.fa-yarn:before{content:"\f7e3"}.fa-yelp:before{content:"\f1e9"}.fa-yen-sign:before{content:"\f157"}.fa-yin-yang:before{content:"\f6ad"}.fa-yoast:before{content:"\f2b1"}.fa-youtube:before{content:"\f167"}.fa-youtube-square:before{content:"\f431"}.fa-zhihu:before{content:"\f63f"}.sr-only{border:0;clip:rect(0,0,0,0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.sr-only-focusable:active,.sr-only-focusable:focus{clip:auto;height:auto;margin:0;overflow:visible;position:static;width:auto}@font-face{font-family:"Font Awesome 5 Brands";font-style:normal;font-weight:400;font-display:block;src:url(/css/fonts/awesome5/fa-brands-400.eot);src:url(/css/fonts/awesome5/fa-brands-400.eot?#iefix) format("embedded-opentype"),url(/css/fonts/awesome5/fa-brands-400.woff2) format("woff2"),url(/css/fonts/awesome5/fa-brands-400.woff) format("woff"),url(/css/fonts/awesome5/fa-brands-400.ttf) format("truetype"),url(/css/fonts/awesome5/fa-brands-400.svg#fontawesome) format("svg")}.fab{font-family:"Font Awesome 5 Brands"}@font-face{font-family:"Font Awesome 5 Free";font-style:normal;font-weight:400;font-display:block;src:url(/css/fonts/awesome5/fa-regular-400.eot);src:url(/css/fonts/awesome5/fa-regular-400.eot?#iefix) format("embedded-opentype"),url(/css/fonts/awesome5/fa-regular-400.woff2) format("woff2"),url(/css/fonts/awesome5/fa-regular-400.woff) format("woff"),url(/css/fonts/awesome5/fa-regular-400.ttf) format("truetype"),url(/css/fonts/awesome5/fa-regular-400.svg#fontawesome) format("svg")}.fab,.far{font-weight:400}@font-face{font-family:"Font Awesome 5 Free";font-style:normal;font-weight:900;font-display:block;src:url(/css/fonts/awesome5/fa-solid-900.eot);src:url(/css/fonts/awesome5/fa-solid-900.eot?#iefix) format("embedded-opentype"),url(/css/fonts/awesome5/fa-solid-900.woff2) format("woff2"),url(/css/fonts/awesome5/fa-solid-900.woff) format("woff"),url(/css/fonts/awesome5/fa-solid-900.ttf) format("truetype"),url(/css/fonts/awesome5/fa-solid-900.svg#fontawesome) format("svg")}.fa,.far,.fas{font-family:"Font Awesome 5 Free"}.fa,.fas{font-weight:900}
\ No newline at end of file
diff --git a/web/css/fonts/font_lobster.css b/web/css/fonts/font_lobster.css
new file mode 100644
index 00000000..29ef5db3
--- /dev/null
+++ b/web/css/fonts/font_lobster.css
@@ -0,0 +1,7 @@
+@font-face {
+  font-family: 'Lobster';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(/css/fonts/lobster/neILzCirqoswsqX9_oU.ttf) format('truetype');
+}
diff --git a/web/css/fonts/font_sans_pro.css b/web/css/fonts/font_sans_pro.css
new file mode 100644
index 00000000..6562e076
--- /dev/null
+++ b/web/css/fonts/font_sans_pro.css
@@ -0,0 +1,84 @@
+@font-face {
+  font-family: 'Source Sans Pro';
+  font-style: italic;
+  font-weight: 200;
+  font-display: swap;
+  src: url(/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokRdr.ttf) format('truetype');
+}
+@font-face {
+  font-family: 'Source Sans Pro';
+  font-style: italic;
+  font-weight: 300;
+  font-display: swap;
+  src: url(/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkhdr.ttf) format('truetype');
+}
+@font-face {
+  font-family: 'Source Sans Pro';
+  font-style: italic;
+  font-weight: 400;
+  font-display: swap;
+  src: url(/css/fonts/sanspro/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPa7g.ttf) format('truetype');
+}
+@font-face {
+  font-family: 'Source Sans Pro';
+  font-style: italic;
+  font-weight: 600;
+  font-display: swap;
+  src: url(/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lBdr.ttf) format('truetype');
+}
+@font-face {
+  font-family: 'Source Sans Pro';
+  font-style: italic;
+  font-weight: 700;
+  font-display: swap;
+  src: url(/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclRdr.ttf) format('truetype');
+}
+@font-face {
+  font-family: 'Source Sans Pro';
+  font-style: italic;
+  font-weight: 900;
+  font-display: swap;
+  src: url(/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZklxdr.ttf) format('truetype');
+}
+@font-face {
+  font-family: 'Source Sans Pro';
+  font-style: normal;
+  font-weight: 200;
+  font-display: swap;
+  src: url(/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3i94_AkA.ttf) format('truetype');
+}
+@font-face {
+  font-family: 'Source Sans Pro';
+  font-style: normal;
+  font-weight: 300;
+  font-display: swap;
+  src: url(/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zAkA.ttf) format('truetype');
+}
+@font-face {
+  font-family: 'Source Sans Pro';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(/css/fonts/sanspro/6xK3dSBYKcSV-LCoeQqfX1RYOo3aPw.ttf) format('truetype');
+}
+@font-face {
+  font-family: 'Source Sans Pro';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rAkA.ttf) format('truetype');
+}
+@font-face {
+  font-family: 'Source Sans Pro';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vAkA.ttf) format('truetype');
+}
+@font-face {
+  font-family: 'Source Sans Pro';
+  font-style: normal;
+  font-weight: 900;
+  font-display: swap;
+  src: url(/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nAkA.ttf) format('truetype');
+}
diff --git a/web/css/fonts/lobster/neILzCirqoswsqX9_oU.ttf b/web/css/fonts/lobster/neILzCirqoswsqX9_oU.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..a7f729d37ad8acc400e2ac7261c2f42c76eebda8
GIT binary patch
literal 392208
zcmd442Ygh;*Z6&A=I$nh&^t(22u(;r5<)LR3LWX1fRqqIZ_-3;h^UASyJExMVJRXY
zcCmLw5m6CPu{T5nW#8}2y&D4h`<Lf^-skh~e$LF?nKLtI&YXK@?#$eCMTtl?98aqD
z&M)XSVa0^&Ma)tWRkiovLBsBf?Or1?^hJ?+Z}c8EBKNJ4KaUb=_$--7ZIfO4@q+8X
zT}3J5N@f(#uKYvq?IPiKL@F#USuihBdr4%4h~7&2OA}{Lno$tB>RgekgGDOMm{dG>
zHt|)-e-eJ;r0Hi*e5z5=?IJhMlThg`lS_*yRJnfYpQKMFz5Qe&64Mg%xdx=^<Qel8
zcDwYYr6O%8quP$?vr3ASALubrq{n`)cg-kXI6ItD`3dlwf*+Y#Jfk#y!+`EImNx3H
zvuDknSL2NfY5epRA}8;iJ*RZ`>PL56Od9C2Rg|b$Ose3Ew?HnD1UVbf(q8(=<zReJ
zX$E`)3y$rNg+)SpkLDcR7p`Pu%Kyl1V|2Y+HeI^<m9bU2{w@gy8bv;=b4L~DH<~?@
zytTuXT)eHtFT>MA)d~rbdATkGv%l}FF_Nv)Y)+EgFCsdDKv~Uw2M+Ej&x#!JeA>)@
z^)1OaS!8uUe~%XtBmFnYD?<y{Ds@#+RBcX_L@AlQRuXbI${Bszr-r1Jz37o#tOr-<
zR-sjedWoULAgV-)!o9+6!;M2ODmnM*x{GV}sIoZe+3;ehssLKG+^407EDruI&Pe{+
zrfS)c!f20Wg=@`({I$*P)t1D?qP!l<N`@0D`9=JCB$vpraF1|$_@q!Mxz#2WyEy7y
zxmHX5`p|^1<mcO#{2%{@%22sMy73>Wf3zHk9gc<dkFlTC-!>!z`A?OsV;Fj?Iw0cX
z=-2)YOWj4U1X${>*x`T2(uY-H97`W5hgDbnKg7_AmaZkq^t<Qv@kWUDPV-I^<DKq}
zgfVA$qruYB9Cr33G>E^VMMH5*`73o2_mEPpR4d$Em5ckLdQp^4(J8o%bralXIs-Rb
zXXAFz9dWzpF1WcGeBD>~#T}-H<DRBZ#~q``;g;x0xKs2L+-Vv~*5~T;aWB+Ma4*(Z
z;a;n+#l1=2jC-rT758p^H|~199`|wm1ny?N8TV=ZEbfc?W!zWwtGKW04{?v^zi4M4
zZwxYtE|7`%%Bw*5FWDJ{l~k5Dg0Lq1bPzU@Bg=!ZCn+*L2#2IT9P-Nv6Q2`=D-#l#
zEc5u!md?_K|6D1NIWmRod4w~7DU_2TvxuEU`XK2g1NhI9@ubaz=W`^T(o0F54`wmf
zr@2_0bC%5H?#d>AmSpljK40X7e8=#*NMGb|Fn!$RgghtKb$rdom!C)dv(Z(yJ(FBJ
zEiIXjmWT`|rWERq&l926Ipmv4S_$ooK*N0e$;8c}#StVl&at@x&n8j6#h4FIGRQSc
zX27W_xU=EM^nfc<i1X`AKcUWacxpK{PfnIJYB(z>&*#rv$IS(}6G)3=M&wk=p5a>1
z<b?8?Kn1rXU}dPL?QQ3K6{h3=j2a3<8AA^gb&~Vd1?p;bt-4D^)e~x$`cD0%e%B3j
zBkqkNBzmiU8QJ{QcqZ9YG1W{1)6}#y879lLGuNAk%vSTPSKmwZI(vEESg*vJ=FRtR
z_wMr^@z#1zde3`rcprP8d*66}h8l*NrBq63oYE|%bxMbn-YKI}N>XN|T%2-s%5^C>
zrQDJ7XQXPRW~6>3CDJ6)Jdzn{8|fU$j|`2>j+`C2EOJ-m-pKutha!(gR!25OwnUz4
zT)T0kag)Z)8@Fzp(Rg^{F->%naFZ%csyC_Cq<)i>Cas(FX)>-!X|vZ_d~?KO{Ib7F
za4?fzTjg53O0A*AZ>oLjM|D6QMo0K9ep0{0J-Ne(2?s4sHO)_Gv3L!<rd}5>-y82u
z_2zghyj9-A-fC~7_pJB2_qMmo+vEKhsvl~alAIDrX`0e1rF}|n%E**)DbrIHr(BhC
zt!wcrT3jPiH*!)W;#!;?=@hhhUSu&XzNf6k>m!@WwYU{69@cnN(Bf*exL#R{C(z>k
zM}!uu*zf)v2K`-6FR~0cdYN_OzgXhY=Z=q21u9>4Q8}uu%1~+QWHd)Ob|Cf(IcoyL
z<2nED{XGZwpvCrn4Y(11@78_Zz8ZU<-+R^GSN0b2@4j~uY18)3+&gyfWLy5;5qs13
zw%A*LFEfh0HTPV&=e#{__O#g3NMsK&dy@Ca7oUIeoXBU>b~OOq%D4#Qxk_ZFz|ZtE
z18@hJsb-;BWX?5D+gM_@AhS=K=gk}D13%`Uu6YH#!_0S@dLtQi#&{FF^Sx!>a{76t
zcL#mF!Q0}!;(g}r^S<)-d*6EBdp~+VdxyQhLOSGyDu<YfF(;`EP;2Pv(DVPSgZOpv
z*wCY))$uU#4;~A1b%zgrT<B)&hi=3%X0Q3ieCZ{5ZM_cWTl1^=&Fu0{GGCa3<}35P
z*=@e#zKnQH%-3FfW@r&<EG^J5xsr#*7>c%<fL@%5E?CH%;3m0Q?v#gQjl3$a$=mXd
zd~AL;pPFC1eDi}hO+J&uazrT=Rt;5(YN66qchwVl8K6#8r>l8tfjUc_ua<FVJ)|Dy
z&SDy6e)PJVpS+e{$n5hHyqaDGuda8B*U6jWb=D`DKfRO9A?~3WUN^6~dCj~Im$SW&
z<}+`Sc~v(whs}rPee)4B!P-ouDoI0hSp&werrg2l+{Yc{3^eNLQiM)EOD;y!pDWkN
zMP7<rBTq_H*30AauH2|DLFaugU&|lzqx>$1<fy8t5>%3^raGuLDjR9n>NGV$6{=Bc
zjvDVZQnS^qYK6K^-JsU0`D(q?li$#pySW<<NE1flW)hR;2wbZCEhj4@t&}I-R2|7s
ziPBM3m+q>rv{4nLw`w8<Dk6PVQ|Y5pWw2^3164~YR^4Q*>LMdlri@cvWu(fGVXCu~
zs2(y=<uR|Hta`~*)kmhN-ZD+~l^LqPoT&!MTs2hYs3B^wEKnolYBf_9sUo>jO_%G{
zT)9Oplv~vzS*gxO$6X-zs3mf@x=`*?i{(*uxjdql%fsq2c||=a+thusR$U`6s|Vx-
zb&tHH?w2>zqw=0wC-2KnwMBNRt@4R_Qe7&Ss)_QHx?PgxD>+SN$vJAItW(#@W_62f
zR5!{K%%?Z0o29>MF1=J^DOI_$Ld}w%%*OInBRNS9N+bDGu2pAB4f%l?->=eMRh6!)
zwiK$iGDdZhC8}7iQZwW>b&lMj&XW!5dU;XZEBC64<S})H3{tJUaf~pNy@_5i<IH%k
z6wN!!o9WH=rhEOo{@y@uh&R+5<n?9#G|U_94e(CY&2<ZXs&1lt=>pw{xm`b<r}K4x
zouSioM|}!9zmbkGFKo)Ju%$j(x6-Y3y6&Vq>#ocSyXo$_C-cG{y0;#n2kP_n1$r?v
zzNO6fmg&oQ2Dw~csc+FM^=-`eZr69{yO{B<(hulI^<(-HeW_lpm+1TTefmNDkbYR-
zqwm#^=&SS<`euEn9;Dak!8)pk=(T#NUZ+#_Ma(<b>*0EX9>Hw!G`&%uuAk6_dJ`k@
zW<64G(WCT}dbECuIqB1StbRt1)6eQ+{hS`JpJ#?Tff;3~-lkvB6B)xMF>+7VuP|qQ
zRZrEgF>8HYPuFkg8Tw5<Q@^EW>9_T4{f<6UzpLly_w-!-zMiK)(DU_ny+D7c&(a_1
zg?fiRgXh-PDkS|>Ga16u)~SpO(^Ws2r3T78HB9EK;c~k=SMF0w<$iUstX5aaTWYnu
zt{#y$)noF3+902*r=*trBz5E$W~}>p+Wl6l$#+s6ja@~);d$~4sUUkLN%l!a`I4FM
z9_gfNNEcO0PEqwFOI4J%s*>cW%F<3%;i)fKMyrl8O0}1zszfePrE;D+LoVQnaIqRI
z7pig0Y(~p6HA$AMDRQ}*Dp#m!av9IiThvO~s&12~)gAJzS|!i%1oOPQTb@yO%7<#B
zY*&xVN9qaLp*ES{%>i@N#LVAb53i^B+^ghO@xoqZua;NCt7_JpbzU2<p;yn#^qMhN
z%w;C=lQ++sAC<I7R7MmQ6h$IDT2>y?KN=o3vM`#{AlkBM+{DQ85rt9Rtk{3hEJ+>T
zpmF1<6h$R3HGdr=S>CwZ^r%XUM#fD{kLt9@gh=$+!BMaI$aO7M#k_)&f@rv)uyNEh
zD;heguyJbR2FnX0(ZPd>>QU4n676V19gB)0YklnE3DK5B1y_-1rcKYZn9mL_j6luu
z;z%@UaN#&&A~r3_hT7Xu`*97%@etYoYNJVcB~ck#7?u7O8LYep{i7*1l+wR=Q&lOk
z7@I;ezNlzIF^|!$i;7aCGPtm`s3<*Z(jo<ssMoBRwuJHq7e+&=xzTWHE-eRjTzb??
zOQj`|32Q^+b0apzwy}Xvvvs4PaRnt&)2cCvd6DIj<y5dXGt>;W3@IEpxIyvIqQcao
z#zm26k70$RHL%PG>Q9e`(xM4@t=BOtcDxO9nVOqQAEo9NNA>uLQB?vJ(NL@OXhK@V
zlA26gJQ)uP#P%3hWKqWDJ5m$V)+HoMUO{fF#$~-#A?^6yOY%!mtsx<gc8`k`EKe=A
zJ?S_s4Qww&BMl%jP9^=BTAc4!QSm=yk2WP2nai41K2x$4y42it6_X6&(IB;PQLD!3
z(MoA+wJwNGD9%rhR!*Y<kw~;sUO(F|0;#!0(aQE}C|8xaN{?2dn5vE?5jao++0iO_
z<08w)MWR(;T6(l<T7T9jyb1Y5O{0}cQx~R3tEKfHQrLf(AK9QW@ikn0^|ZB8HE%@W
z+NxFaqN+GITBWs>a-=DDZ6)he#)+!h^n__PnDrOB2WI6ir+=xoa;wIvWQ&K92AgiP
zaP!#IB3jZL`g;?5d{_O44qPizBNZ0sMWy>XW;0G2YNW|p(FMZ`qg7LLBL&f9gs);M
z0+$;ZNA-_audYy1xw*^7t*stz9lfk|gC?-4CT*+HIz3t|ZLP9?ZTM{cI%#W-_3Ngs
z^{ihnZEeW<_0!gdt=}MRZG!brN?V&~{f234D_H;JG`QgNJsKVdhf^aNQ8n7$AnDOo
z<q~U`C7$Ugwl0_0yex5!pO}&+(MqlV3+-z}`%<7QLi?=WnD$w}3GK6fD($m=Q`%?!
zX0*@x&1s+YThKo1x1@d6PfLq*b+=D?8f>jTE|N#zj<d2*j2}(2vYL?=O>Z4d=Pqo+
z4bU4&{ny(twYX!d)uI1O48$-!ni=ofwaFC=tfWQTv|1ZdwF(N+f3_F1%CYA^;bf;p
z+BwSGQkq{*!9SG)I_F=hweeDW0~2<U{O+k8*Ji6)wyinvg9iL-o^jkH#U0b5?b0&p
zbWM-8|KFh^&?TUEpo^q-vq(myw^anNw(s)gy;FOmcnTR~P_$@=_Da>N35PqPv1&)F
zf##t^n>n<#Ns=3_kk`6&c}8j^(semyb~+v{lHr#Z^-^==*pcWst4n$eDO|53CemQN
zZf@!q<y!rkh^nT3C`j$aolS2af19FHRBL|#(s|=1q()6%@dQ+y&MR&}cw7;B;lw<}
zkcQSz?N!{dK`J%$qMdlI7RvjVN+854Vh`m(XM_+q#*Gswp~PY`H*-YbGOk$-daN#l
zrE{DYJg-MX%>!Pfc7;t{%95gqD3M5{S88utsqMwC@if;MpVLtpUYHT-%GhnG*M200
zmUTrm+>EQfB$Z7Q{7(F*<c&)WdJB5fqut`QIqnDDHO|f@PHb|#i@T#gGAtK+MXTi%
z4sO6m8tGb;u{J~1<i0)SxYVHy1|OH&<G9p#-ty(0n4@P}v}5b?2=Pqu3Ukw<omwwP
z{H%;E=T84mw9%m%(F{n;b4|8l+}!7UaWpA4*KfKN=Tz>r4DLL?LHQ^q#uzL8PV)cn
zM7sCC3D|!{iY>pb9_yOgu|eZ<^3u2{ptAr4+_80>E4{et)Vi_lGs~BtHDxU54GU`d
zw>@(b?(iBJ(H!pbKK~)UFU6^vHKOgn>6aGmfY;x0u>f{QdNKIMxiuio3UstTY#x}#
zf<-=oQwb;=7?ie7xtPHOT+9%QQ$W&Ci(>=BERGEfw>UO1B5ggouqUC@2q_mjJ#9S?
z)Hbe=kRMlM@sy1lY4KcWl*MzQGc2A9jka~>fi}k0X#-<zoi;Ge)@cL97N-}1@fODh
zN-T~IOt3gMQ0nN)B{b2|WkZu3T{bk?(PcwZ99=dv)zM``(;QtkG~Ll<Lo?uU=duo*
z>8_&PNtopaPa!zlGTov@dvJ9oV=Y08Gsh2FoVgCiCRm(#WbRT{>U?+QaxCzJHpf|h
z(4sG-oGyNmXZt~mu*eTugmb{{T2|h<?#h*So*%U6=lem6egQeV`sFS5gBIaJKWGt_
zfZMICyo=nGD{rYEwCET6L5qF~IlKAgUFrud!ZJT-5iUzxU%}Jy8EtOsXkuy9G#$J!
zK8&X$O9+ujk{WO3h{^9YV7Tg4a`v3*^5OL2c{5ox+8~KNM;1in-n^c}BXWJ-P~4^c
zdyb6Ayn%xTL}bFyK?B(l7;aPZhY#%^u{$HIpxRZZ2CT|=ko@2}nKhu6?0n`0*A-bC
zY9Z}dQ}gkYSleh$?w-MQ1)g}DNn7a=Tqm-Y)s$U`Q-bRRo{Cf1kzhC0)fa}^Cai6B
zbJrde)R4xk(~p->ZttP&2;>gy6On#-eMUqicVPc~b~J_!&5e-9&+qX>9bx^yYjACN
z%5KDJSr>P$SUIzJigkY<U-KlM!kS=5cWrlZtFX@2n$<#nU|PR2>o={WprmBRY@PJq
z>rR|gT%x`IUU$mODf86P|6X_clu5<v$Ny$`R>^d=pWXWDYL9bwIrl^7zT@22ocp44
zpLXsh=dN?^qt3nGxvS_Wg|u2X*}1H?6Han&Mdz{_O-!P5?QXk5)~svSsugl(-D=LQ
zjvMAmvv*`=ko9)1YB?8&aDvpUw6)UIO0AMMR%jXuvsU|{nP77HXO#Wx8_}P!B6Wwp
zLhV6<bDT6;3KTM@sXd91$LgjwpV^R13qo2ZsRCkbO^IOcU>!6=ouWV1JM|}em;RJ;
zKi9kU7kZE0tM}<I^;i09y<dN$zt!LA@AVJ*NBxujS^uJc)xVkXrUcqb%|tWFOg2;4
z513}An;B-NnPq01GtC?`*UU5X%>r{4I|XO6S8xuy1?QRb%>`z$xzH>z7n!BzVsnYP
z)GRZXndRnkbA`FmTxG5{E6g?KT5}ycVK<l?%}wTJbBkGNZZ)@=+sz&3PP59~W$rfj
zn0w8A=6>@4TzbenY#uR>n#X8YeOA#?U#z5eXYcoX_LDX1i;KnB6-Mz`KfGMRtT0|F
z74_BnI!V?y=$oV(>y5WcP1YN4m)dTJxehCg_eot=86T8-tTR3=_3a9zG%yJ!Q5u?x
zrm{3LRZVqCHMLBJG`G8V(!+E#U8TTuH~G@f^fIT*5Hr$@krGpEirLRR#{Z$Lc0aA2
zQO~O9)br{E_SCnjm(<JZ74@omO}(z(U>EHz^|pFPy{q0+@2d~gcJ-n9NLSZ2bWL4L
z*Vc7(U0qMtXJ7Gv{+*JWv!C#Ju%D2i8nC0#-0dl}QJs(5S11hj6jrz$g<a}1wO4&_
zSJ~8WDyEID%qr~4W0dNtaL}(IE<05v#7_Nr`Y-*rJ_=^Yt?^!{uhTak%ZDUteU3g%
zjJE5m<x(os4`=Ix`VW1GSdX>gW%S6S<uGjCMfy*dm-XAS6vcgWHdo4?5C~-1###AS
z^m{zc?%{iKFRR=avCeJpgS%O+zmWBMd*5lsizMzt8>)$Bw|A}0Sr=Eaf8(drcd_-4
zrMNqa=~hriMo@-gB(mkScbIhu+Y=U?s9~SWo;k3kDfGQ!9I>@n40|47gp1d9*T<D;
z<Y};y1N;=1YO($NmC0)#cr`L<rCOX+D<{?3Nww#sx`LDHBq!BXoK#nLQeD$YbuA~=
zwVhPgaZ+8^Np(FZ)eW3fH*`|n*hzI$C)M4ZROdOV?&G9-kdta;+7!F<6t;!E0KbK`
zp)wIFFNR8cza>K1V^RrS^NVEY-}G<NTgSLt`<SSS${(!#R%Q>$%88XcJ3cy%W?qxl
zW)t`L_2`S)CIu<n$=dvCeLb=<oAvlJSmW=*enJlN7vb)BgF9)Jx=}4<&uKFIPXjow
z(h)6JlYO?I*=PAco|h=}o<aGZDW<+#Ss~A7rqGf3LmGEbgt<sfGmex8%vjuexOcT)
zX-4C&FlXRiZARf<W=7&JGex*dOd;-tv^iPA-0@mJY)-?yHHhKF4Kc&Z#SA0-kQwS?
zEG0wALW2oiMvvD-eiO|g8*fg<U1<g$momVm^mi%!T#79Rt#41r5b9GF>RlG<<w8D{
z1%&THN5%2;2wfJ?n@jj%)6=E-*gag#DK5sA-ra>fq_s99U6Sd>^<C&aOKlh2m8LW9
zWsZ_gWucBX{a^Xrfs_YKd)#}_p*DXG?h4Zu_iB@kdzs0?U1l<ImzXxV7rN3j2>C5e
zFAJrWg<6+|T9t)PE(^6R3$-BRQ`_9d#rfaNUYVx2D^04yiKjGiDUDr9#HIM0YDD;9
z!$=HOaomRX%AAC|(lo$5*1z>#N<EiS*QJEeOeyH0>XK~G6Xf7tqV=_KmzkQlOH2*i
z3(-9TxZ`>-`^-UuwPdzRZ!j9!`m5nSWUAsmXsX~oz*wdA&88CW<%W}BlvNS;Qe*Y(
z5>o*;F2BqTpf&+_Wgrh>8#W=_xP*8vhN(zd3_1@SRW62GAMF#1$FLXJjHnj61-iSP
zw!Pd-_hM8&A5HE#Empzlii+rpTcxVgS&i7yyHg@gb2UbDJw_{i{art<dlj>CBteiw
zrzhD<vuC-eiW$Bg4~1Roueth>zd;N9jD9)5o^^=5>qE@B4zurEfrnl#RoI75;KXW@
zN|GAvWLJ}#>}uDPTB<I4&$aCyz0_euZ6Wp0*=?9<WUFjx$X<7jq_FSZK^igAc9w{n
zdo*Szzo#@|H@`qqRev==nzE}uh*AGERVXdl7azqA;CMA&(%2`TAnELo&t|uKjyj8d
z?(@}R_T-kSW$b-ltyZvacb&S9ox2;<4eapVs%~X(oHGIJimy>?rH5M2j(VQj%<ghN
zvx*nk8Q-S1v8(v9`iNcLUAlpcbGmkwH`kjlcfq5k|6Q|%WBOY6U<Q?;tE!{SC-$hR
zYOrdrnyTt_&yVauZj=>rJ}0+Ea>g|yes^eORc+SDs#>FwRW;9-I*r5<gT$(bf*9l$
zOypLr31X05Vvydl7^IgNq?Z_bUeD<#jRaE`@~Y0)Au(`wv-X_7203URzvDDg3_p=s
zFpg5kA*}*zPKFS-#_AmPH|d*w3e;aVtd7`xLCj$n^Jlr3LoVizaxn*8%<nEH&=Q;o
zwI%&#<B%cEoFJa^t4sOCrTmOLk7ttE%q7Q3p$vwX$LRp|gTwnC_iFVW?lScgZh`s{
zH{F|y+mO?`hM3Lj8|SZ4`|;Dc{@VF#)K~Zo)iNZ-`UT!R=iAwpr@o|wcw6@o-mLbP
zi`nC1zHl)H?lX$1&$v2Y?WPR)u0D5uyo663{w{}aXJP({816&rO|f?w_fq^kOkvq+
zm}sB{n#8q$n|E+N)#(AnOz>)78@L%=d`@EHIVXxsJHYgxnz|Ft;aNNatxkulPoO4U
z?Zib_kvfd{@iwGBwka;OBcRxGXMcur#^+dxb}nh>qn_86^F-g94TP21U|OM+m=#)(
zkMVDl3jZVU7xh@UP?FUzXtsX=o`Aw9f_hyN{+pnpEl0OTJ5)laz78$9QsZABTozYE
z`Yk-0{R^NU9j(^?uYj)0)1HMQ$_aq;G2!x{M+eu-n9<dcJPY(ySU(L|zdXDzZS`v6
zZei5={~E59Dx8O|V(VdESXFnU-rhmo<=PW(SDD{gn&|%(w28f>BlOJ|wEJH`zY#m~
zKLV5B_w)Y*J)JiGpFj#v^>L^kge%8>)Bh8&Ja$L}YHRFIwK(?Mzk#k4&|>`n{tfT{
zRowNcwk^J%Q59pE>Ik&_@8HkaP8EPIJQgPZq5lB4my3U=T=)=m#q(^p@$z%5eH?T+
zwzE7Om(SK!3^W5$VxQ@s!3E-U{RjVJ7ym@;S7l*s?EC*~cmn?X8=P3yqp{7(0`dAL
z`uKy`ed=T2EAlUd&VRx?F7Eu;Ze`)jz>i<Y{oS!g;6rA>iys32<8r)thc+JiAAvh!
zf9M;K;}d~3Pulsvr{PiXPK5X2&zrFy)Cl@!7vY)o(=7Z;!QG8-Wpi8XV|f=@0f;*!
z+hc9ij@V9lJ9bb%1#e#hz9!$-;C6+NHDia>>)={AKsj&34w;6GF&|0=^E$d>KRV>1
z*l%Vz&?xq&w-C4__NV?W_PtT`-(liw;vb6rVv=KR%#v7^Sq7{i{BW#|Zi?^4GU?|`
zT|1WLuHPolxxnSIU-en==sY0q&yKazQ)Ag&|EbT39rPx|c6z0;on{Vx&)5M|J@%_N
zJ@%V7H}<O;Mx8YX&yOAO=26~o;;JI+R{<ZzcI*9sE$7+TVRI|(nh9(HCIJfp^5{=U
z{|^5H<mU5OmiiW&CqvI$&}Qiz3tx(OzUV8h+#KV4cw)!@6#=YaY`s19b@}n#REWKY
zPCBTcBP|Z+5Vp`Pw#SWu{&-wfM~P$XadQdA3%!(UfalK|PES9<^#-n&1NRfQ`4$7O
zaeXC_MS1sd&6s4%(2>~hY5}y_vE7c%-+;4@^aaqg9sfG|GnXepJH9gZ+IHA7%V@SV
zz6-1;zpZO6@RdK`DH}H|O|JtF`1QEFHZDF7V~*tJDU5?<<;M9CAJ>C+y7rP6J?q+I
z>2l*%AE|2RH?B?byo^0+HSiqrdsgf_2d5#=R_@D<6UfRZ>Q`jB{Js7=c!178mb$n+
zJDr}hy4va=@;e=A?@d7Oq5ti@`X_7Fb-4Z+d8tgAEfaaNpsxnLq0EhxVRewD;r7@Y
zaeZTTHTXOAJwO$3zQf-D{K&Jb)v@RZ+OVJctbF@4TN+yc_fpRh{D;VAX|!eUmP|MM
zw=^~8+1bXU>up}1!s?Zc&35dx_>5m=<;Hmt*Y80)eO*LZ@KZ0LUFcw|vy{~}H$vlX
ze5+>wGZ-2lh9_}-VR;&Z_GJ7w09&@zFX$(yYtSW5r@Rhr&%?uUl#kAF`U$;c`9k?S
z)ywRTUJ`rJwZo2UHlBOfwSo3IenP+NgGVL7>L(NT-;^5c8PqUw-|DI_fXo0g&<{Tl
zegL>0ID__W4&ZjK3uqU>OE|xpj=(UW54_kH`_9Y;%7=d?-?!vJ|2VyO_VMA+?ARyf
z7I^+EePZDdyaBvsz+Z%a1DaAk;QfJb>)uTmzL}x1U%XrKOMqX&TNJy`)noOnt*0;T
zK-SEs@L@Y;2flYM`B|?qKiYbw9yqRU?_zXbAM_u3&|C>vn&V{^ATP`<95llJ8adq^
z>tH^E_wPY#eIG)5@v{K>HbkFzJ@7BZ9|X`(R)3oHK2JQ$my3Z#Tweg3?}K-Q`{-xd
z)DIB&x*eY80_DToz<r&(P4UsiX29{`P&fEGg!a8i+blq%gFm3-ZNl5|4^YqF)Ug(R
zT!x>=*g(9=hL5(~eekhAJbaS4HMDsn<pjQ$1O9efKKy&qufr>Ze**trfp_D8cp1<}
zJ)h_|DdR0<a~J+*`1c(A<6hP4;nC;RL0@^d6P|~k$u(oJp2qXWH*ym9?Gw6s>=&mm
z?XyM`R>ryk-^UKHauTM@qpYq};ohmL-eJY+x7blu7%K5xmCfn%bl$wk<{gV{H4YdA
zj0O4v<AEaJ{}4|O#cqS1bp5HMv#Or0f56Yjrw-PjvrQMme*%VgL8kH^$vRo+pdzOZ
zcCdT$H0yMV=lxG&&oQoaWzDY<>jD|*f!|ayD=IJYP6@k0tmjo^J*_G9rmJzWXVePj
zd@Euva+3W<b$e_pX*Eczp_&{6J&<SIe(+!t&r*f>n_>q!tv?$5Geh2$(X4}wmR-cX
zLVI~1O6)p-9Y+_lPGaGJ<m;wVnH8lP=#LPqV-*=A8=`9}0gd$gT-#?p&M4S8biI3C
zW97f1&XD1@ovbup!-|f52B^a7Ukh~yJh)R@z>f&!N8m|<nh4xL-W$OCoVCr(tY)s^
zjR4xj%6}`B6}!dux$FBI=>O5^!s~$%yqkj@P)D|R6Fi<KEp?PR<HJ&!=dM0LqVCW0
z@X3tp=fu8YC99dPDW6zi9V#EF>vl}{QU86&#f#EQjgVftFY8%y^k>dTECU7stm__q
zANY<i`{+ksz`qdxIsmDUHN<}exSudH$ygu4{qfmtKT4~Pt^`<VIhq4p!0O`-yd`lC
zbuLoXc^^i2%c3iCu?Cu&^Ul^@2`Sd6?RqOK!X4#RsmmJ{h3aYOOO-UajkN1nDU_q1
zQb%?57vlh6=Z^FuKNUV6Sd|oZF2s9@ZU0Mn?f5Yc)65h}{!OGxZA=rKiX8#stAD}k
zq|jQM(<^n0u!ZogNQ1^ACtV|w!bskT@*@w5G-=PPQKLngJ}%OnxE5&albeXNdP5|Q
z^bBw_4vS>g6Ul-X*{po$unyj?H|7mmh;)Dt9SL_DF4FmKkuJQ?*YzHe?(8$3(o>{I
ziAc`}IP%4*nfzBd)&=y*7wKCn((f6J1N<N|ut4P0VIqSziVSHbGPJYEFf`oomqkuX
z0|twn{+dWpeUXt@i=1(($e1c3V;RxM{Vg*7S`l8am(pz_6X%Ldn!u~lw*r(u<t~w_
zlsk=brqhqp_leBdAu@BR$gE7@eG#k&$eHAs(-ENEbFsfL51Qw96IlR%&Vt_yYm1zn
zA+qQ~;69Oa;l+8qMb4imasl}l$3&LUj*B*nEd5yI;&mdI{2_AbJ0i<I61j~2xg7eh
zK>n^gPvojCA}jidTw?&zuY<qW{Uvh!XCgO{|0e3Z`5cjzCyU%VQRFu2yM4UK9rW#;
z$lt03B6p1vxts7kt3~d8Qsn-bA`c+X58f~G5dHM<dXYzH&!hN{Z4g;a*=s)#S$DI@
z`bi=i@E<4N6Ix^w<!pXV<Vo7O6`6W^jL0+8@ho|tM-E?XC$en`CNXx4ywXYJRr>L@
zJ4Idx=MD0{318k?CGyTJk#|>$y!W%n`^zvmF;HYXJo*s&KWYH{B(mdAk)79x?CL1;
zDdl|joyh0Ei|pPc^2JLcd#>j#(nTWsXxEp>(pT_fe+A%Ek#FG9x6t|BTf9KJOXP=x
zYy!~cpXh_1-xT=;dHAhF<iOb?zn?C0u!YDU%|s5h7x@#uAExXhuk(sNd5%W7=dNQF
z^&Zx4KW8nKJsxi<w;bnL632>4`chP-k404*EWFwzs_qEPetajYak8k?$3!*9qQS|W
zXh{2BRAw_#ZC?`A;cZc!*$3`MS*Pq5m0QTkO7;Nz3=!4uS5X7c7d04*1jFWvI*se1
zXGNXylc>>`iW)Oi)Yv|v#tjrz%*l)KM?_8F+)XKUPC6)RYFkm$v2rjInr59VYIZkK
zXHFC~hZ6#G6GYAHENVXGEa24GLTF!fj;M1e@7w{R&STB_{0_hYQHyEch0{eXDHU}Q
zv@V5)i>HdZWEe0_)TNoCE*m52a_YT`wq0|zsOzcw#`i?sGE3BLwDpdcMcuhW)Lo54
z-A$YC{!P@qxuWjdChGplz;;m&z{3Zr>%q@OJ;dpXhpPg+L_Kl=5A#=wdW;qA)lEdL
zf%YggVn#!){ZiC=4ZJRD12jB-lBkV&z$8&md?acUJlV{u`DXC8JTB_VQ2=yqeMr<(
zS)!iaDC*fQqMmzI)C*Nay*NYEwiiUbOgXPC67}j|qF$p-Z+s%^%^O6$Mf%(KiF#+b
zsCQ?JdXJ;FA0&&~&h<y|<YQ?1_-kSDUevC}0R8eAeffDhiwx~VeQ}nkJ(q~u2hCsp
z!eYjDQTr>2`lgPkZ^`@Jg`$2qL)4G7=VxgCmGc(AwZWLjxuSlr1;E3D4~zO^nW#gj
z@qk4i9G)ZU2xb3OU)0~wa+K>>sc6PBtxDM8yqL3B>{~O-)!zA{L+oCM+hR;*q3Fck
zqAPR~okV)lcF`4Y5}o{{=t|2)R~{+43Om+SNvk$QbanF9xK(t`Euw2ZFS_<((RE%G
zUH3-pzAO=4pWUbiQPB-EL^ooutI>y|BkVUd{zi0@ZK6}(7Ts*7=;o<xz_QEHvYF_U
z`-^V%km%Nwna)mB#=D~1ye>NPebL#~M7M1&I;W%Pc9hxv3DF&giS7jLox6zc0!>}#
zFmZWS^eLx`?nzuv_OBQ_bRK&o`PcI1&uG!TIT6rzspx({e|Ew9uM$1r710A1h(7f)
zfSseklsjaoV2TEKOZ2eW06TEQZxKC$dQP9fhDk*9Na#HyTl8r5md4&Jx|nvCKx=6|
z(G&NJo>DA&8oPfpn~0tTuja6GICrb)`G-U=Y$5ubJkjTcL|-sU^x{RLFMLY$MeL7V
ze2(Z#;O}zsT=Avot8Wv%Vx#D5q4B!;qHky{`bPYl*;Bk3{FT&m+l8X<pxjlTh`#5j
z==<Q)1MnPOt{<H$`myIkuYn)ysP}Q|+{g~xrVXOEuwVJ)4$)7w5&iV9qMyA$^mEsX
zegQsit0nqnXnzG7UIXuS>Ujemyj559+to$CLp$H4{qG@L@4qDagO5aSXWwi)JAEJR
z6#X&0-nkgKSM(>(i2f9sKJ5cc2Udvw{B+T~;n^3BfldJZv*&7Hz39E<-8%p{0|0*?
zvbV1@&<_|X`pX_bq3EyR-B;5@f89>>{-ywO_02n?zg;c*yE{dH|Fh^H4vGE|KK)z~
zXdwC*+WKogum$)G_)+u$%KROE9sEi3p)sQWJSh6ec+r0?6#X~%1#>>btlDs%z<4vn
zggz3JfTflSH;74kPE7J_F_o~^QuzVk3E&ekRj}Anm3-A+0Nw`(SN{+=ET%>Zz>aeb
z&KuOg@=c9Jz#YKz0DGM^ISW=3zZQNi@M>Y%rPcy5waHtDymg4H(_Kv6vA`_g0x|W7
zt4DeDD6jr7F%7x^dx0ZjPFe{(3~T}31K4kkKx^Y`fV+Urz`J5nX<O>WVw!Ff)BGMW
zEv^7=10Dso0<`huAwV&3wwTsE0j|^7!%nCE4EC_wOcj$!T;{K0vVIfOc7T{1>Tb6W
zI3T9|r(!z11i*`qtAMDOPSDe(qnNJH(e0?1Q!>T$_*hKOFM;31<gOEw_m`O73&r$V
zgVBd-VwnG#f#f@Nx0u1J#SGPAhE)fy0>B?m`$o{-5w8I|0q8ls0l*&U>HUFGz+B)W
z;8tKg@Hzm`PKRfOjerioAYc*zkBi_>5vOH}ZUG(=Gm7+4e~1}PTgIFzX6#fk<8KyI
z0^WoKF{Sj+MEY^k_hP2dPg8S&XT?l=M$B~DGJ}2YnfHpBjm(@mUd)^{F>~pwd0m0+
zV&+5J0^lrYTZnv|y;0104S{qq=l2tH!Q}w7UqE>mybXLVX7RgXmQdc(Jz_3}zRQri
z%YPJe)j%;T7KphHnZ4lxF*iZWE%fzmmBrlgg_ygq5Od#XF%MoT=3(0K=y_sR!?)-r
zG3)5h4d6XdUkrM~Y^AKHo)Ys+doj;K)APvP3$$_DO=4b#Kd;dTZzPIgZfD-k6Z38(
zG4FG|9lV{uC-8aK*J3`SPrfJ>vk#g6Dk5h8!(zVeDCWD{#ryy-e(BF*408AT7%_j`
zDduo1F@L=;=IAhXw`*`pC(54oO!30C#7lTzyrfL=k}ndk(hl*e+%8_VgW}aXQ+Rb-
zyawlr*Jzt~k-g$I;goXfo#HjSL%bI0;<Y5t$)AeX`bqK9uM)4#Lh-Vjiq|$*yqwF#
zYeycQSG-R7;&r)JyzUo>*JGS`xr@Z>MZP}oh}ZvB@lG8s-jJ^14eu!4Y1!fxj^)T@
zGx0`k7jI0ec*T#1H=#(pN#IRsBHlF0m;vpx!{VJuJ@a;9e2si(LBqnM;w_pd-Z_7Z
zcizq7U2vXwOL~cS(f#5rCGL{D#9KCAyyY#$yP}VHD`?BL1H`*-jCeN;5$~q^#9Mia
zc(;Bd-W|2YyK}jC_fXHh)Or8);yw6+c#l*Q@6pZTt!W@0{p_uy?)5vw+gL%oC!lfD
zkK#SqM!csdiTB)E@m{Pf-nK^Ky);q0mtPX^)qUc<K0>@VDDTbB#C!V|@!stw-uubo
zZI6ieVU~Cw%@l9P)8g&a;(bE<K7*FsQ^nf{f4}@gy#4dV`}PO%e&C$tPw@ZelK{@j
z(D&XiZ;AISZT+nha5+GIzw_S0!HNL!f6(WLJ{0fI*Tg$a{v+>+_t#+HZt;$e7B4m(
z_)<ddY5Fe-aSAfz)s;}FI&c-RM?wjsC6qW(LKPwsN@^&fidhm$zDz=u`eNFpJFo<}
z8+aZ7zlsK$0J*?;U<q)ygsMIP?2}NnbYKDSvxKU51KyWVjZA?0YIXw7lTfYuBvc!}
z_GSS3>dXLE0v|}I?&T7ycM5O^@VA8OcLmM?Rs&y1r~$M$XaWoaZUR1$&`BYn4X{x{
z4F>=pN+=}*SPZ-k@Rm!XMm|IuOQ><Fgql1kq0|xyHGNk?&3=_oiz*UonJA%?skik|
z;E;sU;YmhQ;E04W=SwJSkc6@qNvQ2k3FSa%4)nIW7+5Ev_Pqhp+7s^33%Eu?9Tx)k
z0B=gD6ZLk&)?w$`z;6=jLRy!{CDiq133W>apuKw?U?xDhr_i2L4oj%VlK^e(X@KDp
z%6&&d`Psl$3H5^J-VG$wr@4gsE|*ZhdO!iN4ER_={ozIb0}>iI2cWKj@NeLs5*kE!
zF#SCEB7kxR|0tm$9RcVc!u8Oez;hBBMp?ryl+f@HFc^4CLL*KB=&upqNa(a4z^4*A
zeIW3jgbFJG$W7rY2^9&@1)$AE_X9g5G;%a>r-VikKZ^bz1ubXv2bKbqJ-Pw_Uq&C2
z&=}Ik($2A8OQ^Vmgi6j5>_qa+DV#AnRaS|62TF3>J5Wu7cc45{?HfIYIe&;VKgX^)
z{UZtGt_7U1RG3yeXQuQk@6ITmGfi@jbEnOiCLL##bE(8omjBL(rY=JaYXMM~P-|%7
zRy{{8;>=<X&f<ni@=qT%;jE<M1QyRF<W;eES^KlC2@}54g%wr+!xZD=Z<0-f&Ii9T
zXY?k@IL_$}r{#SlSGsbxJ(Dw1_H3$(P1Vof&e1>P-fV1n7i%~bo1`Da{lZ$_i(Tq)
zu4T_i#h!8QN{9cF3*YbD{rY!Ouh&mdqa^GGb^;#&tQjP{0z40F1vUav;9=li;10k~
z<7qB9Ngt+heoG2D7pFMW&1q~_?wX4`(@h=f=m)V8xI1IHxPQc2QF~5|XWFCNV?4#h
zE{)YAha^~P5&>8fW)&mM3Q71|N(^H$vCu1W)~nEV@Y1huw{SjA*y-eK^Z3wJXu9!o
zhVxIuP4W(5z3M8l;j3h@bNe|rpKDH@<0>o$+1^=%wMeCwnpL<rJGYbNlx~8(CZ%pO
zU*T4ZvBE%2J$N5(kYKA1`;4tP=l&w^5~=V?;Cg^E!#t^mmjFD$h8F-lHHUdp4o?7h
zVh_WmAWgzUY2yH(7r<;k+!;Ry$Ux4t&tY0W8ZMT#JDlyU7B4i8c8~II^KNwi71;B#
zp{0R;eh|Mf@aF{n^uV8pKMoifT*v+4!S$)sZOh9I{H|Vmcbyre$Ng4Vim`YpL3~~O
z>Rz%Jrzh@P99!RwL3uY~dB$GF{dhS-jLjdXGaetb(;N<R1?@8j{A;Xpx$@2a;CfHs
z?+WM+=r<n*@$UrwYk~h_(2js!^Ryp-B7e-L0Dql%)P{IR!uMAN@hb!W`oO;`@RtSt
zk`w%MgX;xmwhi$<m+wz7W88INkRJDkngK4pR}dek<HUO6<@GR~1I(QAzKNF;&zE6Z
zx^m;~YZ73`+jUZKT|4lr27XfDdjY)x-TJ5>uMY+OuYv!4Kz~5D{wj#y9r!zapF3?W
zdqhe#<kW&v3pA@&Djkib)EQQvscaWcv-(eUcHy?pO?NS!Y?wEyEPknT6WLu*%I=XV
zSrfD2rJO2PyzfPf8sXyqb~v7kso-LExtMA$W|`Fp*i*8(PI57xjZsN1T-CWdott87
zl%E{_?=EJv3vach$uBOZt95w;U=409=k~L@Mn_z@zPW~ykGgPm=O(+Db6wbT?p21B
zINHuyow^gNQc%T+spL|tA61FNDRQaTVcSZn?_Ky0=U&a352d!-u+Dbc?Ltm_EA^5~
z-Rok$v0?emYCSc~#ed@5D{aYYjKi5=V|11cV~Ng|xy|K*1ma6+wU&m?UM-7a>{}{l
zuhuwwwUwN`+RDyeZB?DCb2)ut?bTM-)?RH5XRo%FvsYWk*{iMZ?A11M_G%-}UTqrI
z%a%wRXRkKP*{kj1?A3O4_G-Jkw--)v_G)`Ld$m2Cz1n<dueQM1tL@|L)edm>Y6m)d
zwMC5FEZ74t0nY+kfDOQE;6dPS;5Oh!U<I%o@YA#`rM;|aVS`Z19L6TrbQsY!W4dBg
zSFzSAkx}muIn>cVtsATBTt+;?Q=E%Kn3aCqF;+@q<DJ{nx$B*KhI5BG_bTW1cJ4^$
zKI+_c&Ygx^ek2*gNWwc}JVP!_*k=~oE5#EF)0#Od7i(n|sW(iYXUDFNt>EpJa=+O3
z_98~R{g9s&V}IhGzZf%#*bdy9<<nxXGiUq9FUHQ*KYy{;V(e6$`1?29*o$B#QQw2E
zHv1;-@xM3?>=?ytZ=U$mlH}fo5#ENmR6@K9cP}TUAJA*rLtW2ls!VLxZDG&#S^a`^
zz#`p;(uFtT4#_}$SRZ93pxIA-h`-Y9b$i^Nx+iXb_G1<H`cB0y;ykebPHdu+*(6s}
zB5z-E&YAiyqt>hS3Z_2R>T)9Q5Z-`$3%V?kcX@c?a}v$FUivQH+_^{J1Lpnueo`OM
z4^YBm`Y|Y83&n{}-jk5`$BEyldD?JNZ?LoX6sga0!b~IkFOs@VZzGI-SmIyjgjN`P
zdT)ULwtk105A+A5Zs!zO61MX`BIaZLG43bq|0nX!@@L?Gu0IE#x0a#jE6#l-^4{`(
z-0$>v&}=o1c5fY4;GNTh;2+k9kv+}XxMS}Jb3UHCI0Q$QQp&~jfCopeAbcfusKfB(
z8p78x8YDQrc=|?tGhxde<=(SQz+&NT@WsAEoWL8}tRT7fmlE_U_?77NK!UYbNZ9gA
z@fPMIU_Pc-<F3(bh>x<ylH_<7!eZeD;w|qIuvoYm8n)2?#`S*!Tzi@LSKyil*WM!h
zE}TkmoC;xS@I%7(t=$CIW{-Dm{~&Bz?xA6h@^qrr_x6r6cj)fif7R^$#2uF;N!(X)
zSv^rk%Uy%*?!<CYez2yrbS3qov=rf_CU_~wuwpy>J0rG-8Ua_Yy-yF8!?6_9w6=En
zIa*=|j-`TY?=^lwesWUd4*sq@Kh4JZq1Zv6R%$Mb3qpQ7t$qpaSBo2Oy}e6gdt8~|
z#kL%~Yi&toKVLi1W<TbH)*eSukY@s=m9;kZ7Ic?!^7u9!tLIq!u~1MSJGEs$OJ|%n
zflpc!WW5sOUj+Tyly~n8V_v@0()Qd%sve++a5`j!9?6-SGdStdR*%!g(vH!t6g@Lp
z&y&vBt~`r(cF)#lOJCmUK2O*g;LSs;Z9F%wCSdb3m2#VMdL_*0+5#zVsatZo@?_3}
z*!ROTNNuCra84ytXCnJqI*S-<F<$GoI)||TR-n~go*R=Z@LqT)&YpDU1dKmECt^Xg
z2bfl~dD@QEM(61~%FL%dhW7NLwBDMv5shV1VyyP_XyE|D138^j$!S7Q524N4jqrw+
zkATk8^l9Weowsw0(~};yLC+vO8jfhkkwh$lmJl;RPXNCZ?j-UK@+9smYr#H=8NoE-
zr|apIGege=bC#Y>-ZS-FwBkJYn1~%v)`YPFdKU4PoAxdDMZ}!LDO+vdsb|L{&&%UU
z9{c)?*A;lWvQO>ym&Dy_|BT4Q+rRz!p#=OeePUM%Sh->RtN^|b_R9+ufJ9O?_kBEP
zf>a7(6Kp~5cdRa3pDoY&wx&3Uqrv9zsYswiTc-&yY>EZ#>d~wnK(V)*b5(XVLKw?a
z0{zgE@L-wAy}8Hg1bdI#5Mb{J_FJLuAv<5gifenUw9bc9b`E2u&X>2ald%d;#uA;3
zg`ISHPP)QQx<XF6!cMwEZe&bw(xshrnczDGR<6QMt`fABtFV)(u#>2elc+=|QDG-h
z2~MKIPL>j!EQOpbg`F%_aI%!>WQjM77;_VxEQOscg`6xYCre=`OBI|f*)JeWLr$#x
zBs%#CJNXGY`O!{(l#`#Zlb?{2pOBNEu#+EWlL5-@I93U}w-+Ikc1*8<P2DTFkL);>
z<i_`8eGQ{ok{ivE7{_iTY{&QNZhWuEIJOFWJIYsfqgE9+)+b|W_g*j`#Zp6(8?Tbw
zcvaJlSC!m&mE^{&8jM$)z_H(DsLZIfmGIN72vu|AenmIpSHybmYn<k`V|@**=e|Xa
zcC4@HMzBh51gnCj+#ST*@x6xLt@jYNqkJ;fNxmffwf-6x3njRAtgr6I`ij<82{FIw
zUvUrU18BNGIT2XJjeDFmkki~<)Ld89VZ}K<{&%aJ)m6aFJdX|KdI0Yortt=1T~3Sr
zB|o|pn|d>8zPnX+$%m|&t>gcw+)t^^1G~poUVY2Q>AVe#ZbRyP>&M-ZumU7#pdO5*
zplgthQOLkFE8ETv@<s68T0FM1xQDn~_~u3I58Q{P3sSU%)1r5A!tg#$DnBH3m_5|f
zj}cxiJa>^&2VHj;+_4r*9s$qB8}#zYXyudbS$i~73MV+5amv31kRAKh%VX?OIy1&o
zAK{<C$2NxUC*Ab**jV!1RUWzHF@_Sp)hns>R<LcYb*Zr_&p*vL2igK?8QZN-rj~5Z
zT6UHOIxn{0QT+(ltEDd5tuDGQTdEM^Q~-IaQ9paZl>7$mYKRPD&xz5a3RpEMqc*Y4
zT)yg9lURi`FJ$hu5I*c7WtV=56NE35<5js4X&S8GB<(Gkpx*|tR<7Rz-Y5KlT*0hy
zq5d50V(U$&-VbSUW^5z8_*8dhmSLYtj9SE8I+<`yCn-&&KK+X}Bwg|6ya?3TkkybH
zd&}rJm4>7w*(aA{qc*8!zyA<>Y?Lm;JT``xiz0YzmQX%EW}gE8@v~1p|NQ+28m|2(
zrj4;Pp4f}be`=zUUqmP0Mq9Oc#k|Te^SXJDD`lQ$-H}tMXnVW<Z35jN`qvWSn0W;b
z`77njK;dAR(aMfm6$m$V+^(cssYBSlS*2#G9;&wN<JotGEMhgfGdT=z(mq9o-R27{
zPkhBQzqPutA-3Oaifu8QV@G&b=Ad~p_JMgSc7(TqHpKomkMnlMMrmrEU{7jO>^*~4
z0_!iZ4w|i$88RCvYcu{9;7QJ0Z^dR;60x<&TbaB`=80I$Y?3O}a1^YX=1DNON;PO{
z>@X9-tO;gCYN-Hbyu5l~)&#RDm{oXNWJByLFe{jiQ2GSnO|g$C^DF4tZ??w11}n_z
z`dfG#;6n3N>;_kMWpY3PZQn$#n|Y65i=<F)RmyEhj$|;8Q1b>-9~TcQLSQSf1?(``
z9@q-(ig4v9*xy@9p#E|EjkL;fMydxquryZ(yAEYnf|BpZ@rx@zi5wxHA5gIg8zq~;
z*h2V8D72@CpCbH~eU6}f4R)0P+j9O#zki5lL;y2HOMOZ#-AO(s{j!NSrd&@#v*q4X
zv~+juGbnkRvY(?y+h0B<iO|kAIdSZ)LP;%hRHS^{Gxf=Jgj^qxi?c?)OvWDP-u{=L
zx4^1fD`CjttI8-(g{(ygzI{=F_4y=KQ6;NNs<Nsg<5g8G3sqCqRSiyxmvHECHMaR{
zW0kJC{4Ft=pz2^TqJ?~;>Z$sw0rMQYO5c!g1f-}&Dxw;zCMs24Q%zMfEV^4OO)b^Q
ztm3yuhn&pm>vTDU)tWXcQ)OXeqAl-n<*0VpQs|&MVlAQ*-xTP~mk!?K1oK;RSap-P
z8Ldv?Ug^o&NxI78?0P;{C)%i9s<-N+`eIjp5AWdg=Y017HPBk2z%s)SR)n(U9Y(uh
z@~#@r+T&?_bE1%w_><H~c^~@}XQ<I?j2f%PsbcI@l&A@+l#}HX`I<$Pk>Ll)!9v9(
z?Ceaz(!(@0ov#nf;9fn#T{{a~7H49~Vy<-HD;D$JcPtiis`>+UHkx%iC;ca@bJcm+
z1Gqpf#y<RoY6*6lma2=@CF)Wv7F?#5tIO3D>PqP(of((0fT6Bo1ner`scYp)Y++oF
zC5#*SLP9rnvwWp)Q7a`MduF$)+tlsq4%Q)8sk`{b!`<p0b+5Wl-LD>y>3pAIs{4+{
zBkEC^$*KGqvP!L%0_nw?AqR}DH7w~Z-|~G5#X0&uG8?NJ8~8HB<7y+{wAqC1f-QV2
z;z`cPpQ)ZY-gcMt#ghLv`LnzQFTUJRX2VMc$VZ$w$C4M{n0Q~#vevw?@sB+(wL^WZ
zc5-ZSAm0i46pJ07sn6AJY<7Hs1&zIYN9Rj+(+8`s_)5UnYQOqMeaqK`zQ@YLLRNgv
zwpP11)&8^kMg5BPt^?|KIaeLzjQbyG&_C5-bwvH8{>C0h48c}%m)3Hgti__ik7&~o
ztW0}4q{BKvC(3D@SpQP~(n-3aPUb!R%XDQqT~}d_RL!?J#;)4=*6x@r)^+5<GTUP(
z$pzZ3t@_`5uyY^#-3R-P2)_NmcSJ@y+hA!rT}H_n@;%RiTX+u4WQLxt+sbI3{Jv&x
z-rmm1-7KjK&v^D55vS-Lx~I<7dCbHMn1}ba^Kadc*^~Wh#Ho4^bEqMDsGWB+m*T5p
zZZ<WN`4rEvtk;g!JjL2sHuI}eJ&`rk=kz3=W~cDohH1>Qc|x=EYi8GT_)5b(JF{k9
zy^vY;B4*Rpx>@|o6ib*(V>`}$dm{dYiYx4F+Rmk!Nnb0s%N@+6uV-E8M!WLszFu)F
zGdcV9iaYJ<53^|dor?QdEqj1fAN$>kN37i~Y+0>g4!xEyRj|UxYS~6Rb7tPWg>O=9
zWvz@^vz;^ZC5jhVE!)N_*~@m#hq?3X%$%7u+f_1Fe%|9d6CW^h{*X1Y9juW37i{|3
z)gs>}8?)uZb`{!Mcf(E>(;=gc;cHbP6Sj83Oa+sKrLbgE$yDZRPF4AWRdrLt)Wl*~
zZBxh8HT6t=zG-!mX=qYRBNH)=O%s#KH?EqQ=B5Q-x;ojkGObOTNyn~X8<UBRv24@U
z<nZ;Y_ND{2#yXkKri<xnx?yqb6w|}>#0FxX$u|Yq9_wxTn7(|6s6SsJ8fZ>6gUnzv
zgngu8X1Ez)PBW*QLQ{lwvQg#?Gun(XW6d~IY{r`sGr^RaiRS-T_6p5vvj)37Yt1^o
zd$GYhZZ?`Huz0rFY%x#rMWv_srqVO!S@RrUR(ip_XttS`%*%HEWxwphx0c>CZ<)8v
zJLX;U9$)qOz-;I1J|CGK=3}$dd}4O-rJ>Kv=XR!K_V8V!edbH%OJAG)eBtO@^BtB+
zelS0ppZFrtFYY@>2lz6_LGy<>Wd6kV<Pr0i`P+V{gCz&$Y0r3`7h<<G!As<uLrGpm
zc1J5=xvh#<)vLx{X$`(bRLiUF)!}<Y_4s;O1Meih;*sJt@*-YiuL)mGYU(wUTfOF9
z3(k_&WY$=l=asrVq14A7>`8pl=wz>z*V;?-(!C760Fvot@#UhnUXIs}z0(d}N4{~?
z+3O-(<$%}K>n6X;L9aVsKI-B1WF6xac|k7a$)Soo!W{A*W|h@=+PRy#WfJQR)j7j3
zhLwZv(u3J&vaIKsttxxUd8{NnEKkcbvW>l!$FWfKguKZ2#|pe&UT<0I^$}(>USFQ>
z{%~Kz8Nl~&PW1-K#e4~8h&NPj<eNCdy%DUQ{v<#1EEtiinGH7LU8C#eI(a~f<zBf~
zZo?Yj>9SI8k^AIkuaMdAOR`x~nei@@OXPBPZmy7vWUTC$CGxyIUm!ibQTDrxd?RZt
zyVb>fm#2j9IF<61o=JSGXA0lwna0la48GGdi!b$@$+yzx+ApMd3%s+uh2Gh6rF<e^
zU`uC*TqV0C4=Y$ZWw(4PAA5_ubG&oC^Z4@CsUrpq2=^R6r*uJS!u*+2vI=?@_<nBt
zz|Rc)?7+{ler8r)zJJ}*U6U^_xDN95>=<14bokksK{-9+zAG;?J2N|>=ZxZ#IkRRa
z^qe(m*38mrNj>LGnK`MrWd6L;gq{V?ub5XdWlqWb855_ME=<asFl%0MNlEF<dExw$
zVlv{*nN>W`uP-w%T;Q4$E^vu{Y;Mr1ynwpAfQr1JRe64^vNLm%3d)KPvIY&wjW?uy
zLP0=qflqLN=NOQgmD|ByXJ!?+Dl@Zs<%D}XN-Fj~)`;ZZC9`JCDE6C?)cb@gvmJF5
zk>m9lUp&VzKRc*DtDs_^V+93iIl6DZaNn|Sq<eZfDzY;J>hoOgtb#mu4cmJr^bK0k
z*Kb9*@4P9~CzMv~cYNVc(J{GyIcmcLT$h9gxJD%pD3|07pdmg*Z39N<WQR}n@lW;f
zPc4V<qviw>l+)f6%$yV+RIU~ISw2dB&|UdKYx09`%MY^VyV__~AcT2wzaTVd@~k;C
zgHi$>6vT4}Sowi)6l7K!G<iOvH)sBg>BaM1ODMA-VNk#+zh8S+95i=&@!ZLNvxWwq
z-@2hEv@SC{D<HjHy!*1l!(5h%!;UdJdDsd0vI^P<`Pv7>b_&F)V=r$wG7%o`DzpvD
z%<^%lD`;T*yzq$fTx{#mva=kwGPCjn3C-{1XV1?K{C3tya09Luv=5Cq#=U}o_q_tb
z3gX-hxL8n7X~aLdm(@ODM8LffzMO?d*xNfi!bw~Bbe|WeALB)Z(<e+Rol`n@%G~hj
zljamJD6Lp@EYT;hW6)vTT15`UkM0%7T(6Gdk*?UJktf_(owCElWsE^*xtk=bz`tej
z198iB4CC4{gqta-uV=uZo^jph7)d#fk@!9%vonKoddB^r12Wqt6bH;G4s>1dF<n<&
z>hq%HSaXv~${G-!P}bpD1)2HbQrC`fX}Q?kpgDN~S$RSAc|mjX{N`k5wo584E7xaT
zZqS0<cndltlm?WR9;f77%QLgv`J$8E$w?<V!dEw0z1oE*If^PyI@XHhN#&$FY0?Q*
zXFDn>qMbMSn6eA#$m&&b^09(^TC>}Qr<8Rf((L4s`?OPqDH+ycH&*6-#5`9BIxiqL
zGgnWUnlL43*OWl*O>u%~b7W?>?ND**@zp_Br{rnn=ue(DX-;YB%<085Crl{`Pj_7w
zp6=S5JiQ#AH=TC+bhHinBd2Y6rr*Ugi|wbu=ggWtximb}&pWeRUO!t-AZ<AvOer_a
ztnzJ+Yp|e){X03UAV28o{2*&^r)Osd0vjK+^LmA59lNvr`=9$ho;$$K59FyJtJ180
z-r1SG5@rRg^z~wH#aZR_BIf5Az{7L=*3CJgb?B;q^mg%{ZX2HKGiUCx9!Q>hLO%3j
zkgt8)(DYd|Co$u(+Hjt$#&u#=d)EwV2)e&h!2b66;rZox=xf95EdQ>^^2ZkB$yd}_
z`A)BK9cYz;fTsl=Li3ODt{}K^dIe+^1eF#9JS^x{Y5qTXmjy|2-UV85zSD~HeXV$w
z&xx~+aiYRmWm@qpUn`z{EYX*jjzM>E51w6KD+bN))hWEl6`Qo^ggdZP+fZ>v>C6d9
z%tz=m8w`~=cY<?WOp>piY(zzOuXM_GiId7=xPx8HWamz?Zqk&p62nubx_IB6=EBpR
zJHxp%ojc3ANwdmwh32~GdCr~h66YUFT<D_Dwyr4{yU_F+JH-qiI~kZ_in%TxyU2_m
zJ2wQ3UFh6JriAzs;!E*M$1Y0rn?>@(u@lG6!=2*7Q^qbLJl%z-gH9SSA6RH6jhzix
ze~|$jSd{2DbnL=-V3C<h%2Y5Y16X8c;LpIHId+jZYix0;nFVD4Rakcs*9#N<mXDnq
zu)wAs3oeQ$FEn!~Yz}!y2Ns!m`1A1Rk6i#@Y9A8McK)ISIAJ-I02iE3%bibitRJ4}
zx+*-;^+o~>a;eZ{{p2`BE|Q{sA7z>2&us9W=;QliK~9!`|K%{+SwYF^<SXc$VEU00
z+;BPm6G3K<KU$LCpTy<Zo5PjwPgQfWeD$5<D>3l=8#KqC>~ZaDken?4hRw<H$Echv
zf5w!P<&RA{!K^wb7;tj31A4RL^al9ZzGBG9_7y`;c0f;dKwox1S9YAPc=<v7!9+bL
zJD@8wju)ppC^s`+Pe5;GP=01mpFeenKS4R!ar%P#cye-l3TA&f?St|=1o0h$@`Eut
zr&IhosHaoVj!r?oP67S?6Iy0Y&!8Ot2`{r<oG(2C{Qrl&HxHBRs_sS4IaPH|O<mnp
z-Bs1qbJy5&*Vxr_pB|)^x+Ph%jcs9zmXWN1!82fkkO?wi2!p~rbAd1=VMu}vA#p+i
zNeB>}1THtZ?*a+Q1H-*QE^uEGkXrAz_TH!J)Lhl#e)s+HzRz->I<@zyv)5jG?KS+?
z+T2o1X4l00a*Gk4#dC$hl;yToGRxHw{1xL78+Vo~^T{k%=J8j&pAg7dA&9eFO;2XI
z`i{S1Jo`j@uAt(+pc7YAliB@Z9Q#Fkt|sC>f6tuYr(9~iozXL$WopFQ=8gO_1Rbdr
zI39+7UR`CMaZn8ZoSJ2yaafG_JZF67^OF(u$%u855$}@`e3vuUiSfO7&y3)coamo3
zz8B-=YDF@e5%kUoKFbMy%7}T&iFwTkx@U~fMms^TjNq%R_`R(7y{vfOtnt30J-6GE
zS+1wxui)FPc)zT8udMN2#`DGRXT|$v#d`^zGAk^lY|a?Jphs4`Z%#ZvCw?y{en)5$
z*{tz?;`egm{e@nToe{s67vsr`-<dP!!T2nmKPTRQPV}1-@4>ZutP|0XTL)MtqQ9^P
zvfRqRx)Agf4uUM#xp7}SSD5Ts?vube5p?24FxG|m9j@Hrvv@yY#$`9edvUc5>p-;U
ziVHrA_FQGbXF(sXx?nws_WQ;A?-%X&^YQ0|oXw>+m;#W^Bxx@Y*Gw4@*ICnjrV{Y`
zxs>VtjOjXWx}G&%&zY`QP1kFt>vhxhhUt2r>3V<hI%|4|tm&Pz8B-h6J7-PrmNmUw
z*7OcJQ~R80Tsd=l)B9xE`?#5`$>gW#I3@len`0li6v@nRsbff?43|0usg&JU`u$vn
ze=bO=HTJn6rE>gx9Bd_?&p#KWR%SnIU-%5_kkrFxK6|MgBu&0}oz3y<WU6?du8sR}
zd=%Q#wQ(Q&S>Zli8}~EGvTN~M8G25J{}x^6%-5;n{mhK%daih#+gH5K8k|edF}2T`
zek(UC+QS!E_+4BVewXeWed*fhi|fKzGN${uHs8;R_Bm4<x;EOdYvY+jAJcW=-Ar?l
z!L`wsT^r9Qx|yzxHaXlcJafi$oiDb}%$n}cnXXrh*SYoLb!N?UZN9%@y1x(4H|7r4
z1$xqbgPwG4jF+wj?`7zEUCaxvjj_=EoH5sQ-<aS1#ovXRS$HN?){<-EIdtEk3A<k9
zzXg@Cc%SA-yc<Mc)|iVN{jNc0dLO|*SreaUX^xD(bZtBzG%wsY(L85<e-mwUrg^7p
z<NevS@eZcn&6(C0yEfhd^J36BXX1gJ>3!(hSQk0-yW!dxW6u0;xHj%*K?h^5>DriU
zc3;djyEfj3+Kahn_r+Y(wJ}DzHs+e$7jvCuwCdo}l*y1OI!w-VBX7QenZ`b3YC$Xk
zQCsXnH=x0l+{i)Lmfk4ulB@U?XobZtOlXwfDCxq)hq(ol4`ny7Lzo`QIMQ^3i<Gh(
zC0)31F}27r2~&0h8<*)<7|)g6D0wKCI;IvRVz99lpTT5~`PI1)GPTGsE;Qd@;>di1
z@u2wz6HMkCOgfova1mv?!R3_s1`}518%$!EZxCyiOg7yx4~_{ZY_`S8rWWgEH%ckS
zc-GW{3n}xBauPDJWF{e(S>`TGSeb8>^9L7OrWRawmE9<reJ;gJEx0H%-(WJse4~7#
zxHL1jU}D2`gUhwD8zmIu63*O$iMg^HrCrKdJIkb=xl1|IartL%!GxgsM#bQmI5fAY
z7#tIfrWQ=XnOTb6FtZf9VP+|I!^~22qhz#P46<KgR%b?7`xzdaNM_cUHIYtnuLS-w
z>kIKgX6@lGvrh1rSxflKtO5LG)))RVs{ntQ^@YF8I>29Mec>;&64J>$w;q$ix=F5a
z>nq7)D)?SJk6T^%ES{Ga&&!MF<@xhc+&YGrHtRre_^$J3&pmj~{opzH;Q93ft~2Lf
zXk5D=KpgvS@deQVp&0Q#JZ6*5b1wn@a;qlEy&Y-1U)!mB;8A`)e&xYC?|<03?*;eY
z!ymDhwLb6s{dbBFf^Mtgz1Nu4h5lmv-1~v}DzifIm)}owFBW1ioW8>CjCtVCNek~!
zaxLe$>wyOmq<HYI)9e>hsTuY8=kF$G`U7{Jx(ALt8dpkqvogX<lu70t%;^h<`Li9&
zMM_uHHklC~q>S(wWrXJ}BYrcJTy-$Nv#Ce6?c6>0JonCL-}6HJX5l&9V$2ASUnaHY
zhAa8mcRlZ(7Zn=`H&I5o%QC`!mJx2VjBsORggYc7+#G4npvklmf-<5u!d;YJUv)9>
zJ^j+DhdWHyQ>X5H0NAcGmNRG0<KOcrH$}Rp0$qekPe3A%N;zpqzat>qtiV9pfL*a^
z7g5~7s@X390jeNl<}N@*tTxqpR<gTfhsEwV>jd;uwmbuWEb<8eQ02p8V^-@}ZY-Oe
z8XXxL=;`*h<4Ky&+u?Qv#{uRXj&%-Oq?!E8OfDObgjIi6Am~>k;dm}PlSv2sU8<(4
z{)k%q9Fbkh;O@__eplYTvYWahPlkv3dV^j5K5tuBpFebHHoGu7GCnru_WL`1fq>8Q
z^e+cStZ)3~-Admg4ig{j8yE<7^lH|wf$quW<Y+WI6rCA;jJNGXB{|7)?e)Nu{TRs8
zDd|4l+m9^tsfh^clngn51GH>ye=2$OHhmbFYb&tq7gbQm_9!7_fq+HzEz2a*rU1h^
z)Z3^{%6jOy?g258&Et#25&_K~8V|&2sCiY@*yuSWK#JfD{m&BVjK>qI;_nK|Xc7oM
zK0A7BEj{nBI)=LY!ntS7`3G<O%uUI`_gp?4TaL^f^x!b-6B7s0_q(T(>)*ZK(jDq@
z`TPTY;n`u!%Rl6~IwU{W+hKXh?zO{lpCuH0>2Z%A(+?5=wnmIF0if%vbnmciwWX5@
zfF7f5fIb>T7{{Q2zX90y5>f$F#iCxc%bKb^3eqSRD-yhHHjqPAr&N%m>DDO~gy{fi
zYQj1}gb8{(9QNLEIip3S*2ts0<NU+hyDw^zNS3FcymG2#Ld^j=?UC}*lJsA6?}V&s
zOABd>Rh{luY*r#vJGdnU&XHva1%m(qv)M0Vz1SU(qWr3C(PYcH!a~wCkjrkLvLEW@
zY?h>sAaV2k^wzqh?1zpY*ZbO0Yq&k%o}Zc=AB{%``vZQAsm&Mmx$VJmDW1!81t6UA
z84proTAYHu8=g5D8(Xp6qAr}s?cUJrTug6njEpBE2|apcr-eDOGUgp*%<BX0c~$y1
z-J6u{j@6YJi)zpGDVj>N(urAFpahglR#^c^^KKGXmn2Pfs+#j+o9uGB9!0rC+2*j=
z&H;C(YIgOk<ZxhqoX#nyF+V8wA|9b&9kliYeXpHUPMWiU&Q7bfbD?t~otmB;8;K0}
zgn%XV`of*w4i6*=Ef>hm>zKI@9JysCySfz_jO1*a*7T8y-TlqZ-qWwVX<>FaI?_Ls
z8@TdFi}M!(iq%+CK;YM0RV!tys!et{T~3GVqJ(sV>I;iz&$Z)`U9Pl?=CBuRuw1&v
z_V5(i5Ehz#iW5KYbe)n+i+%6C+4?=MN0*mr2`?X9KCrP?bs@K3_d+)9!OGqi^{c0+
zhllacvbV*3_2pBn`|uR@7uuuD%lzMKF7tV;aI8%v6ql}UY+e>ro^E25FR&*d4FDQY
ziGXP45&E8cH@nV**SXGDk9Fpk_qfhqb>rUGIiJ8T;CT;8H_C6+dz`YYIB2p~WtaQL
zqnj3oYhzMzI&2Ww4y>^)O}1gWZ1=XyR^aKa_exGjo5R_5(JOn}Jfwuln545%sVvB+
z!-04mvfZuP&r(je)8#lTx!sW8ZEaI+wD!mF#BKIOWK&)Il{}IJ!J+a;su!>0HGhSV
zOSNI!IIfRIqkfcnj~<F1T3^$b7v{3*@iBkIA08a&>*)>xU*6Rf4TpX9?r}MXT|bwN
zgtY{zpG+Osu5V9ycEB+_9PISDW4__hv9NOU>f-cpbR7uwmiCw1maM%YSD)QE7z%}z
z{>_Eiq1b5OUN#%fgnlHh9hPpA$MjGK^Z^?r!<y`L-E{1L#qQiUr8w-wgQPU<hn^2b
z0ZBoZz-H1VkBsb&ODYs(oAqwVVRzdd?u#9Ao4f5%l-rawmrXkdB)#3?BtCS3|J?2=
zx1m4mtNAqRr4}Bh{|cUya+6ju5{m^;Yan(wc6eibb!Blrmzfw3L<5nb!T#P*H*ycU
zBGIsyHj@MlHo+J{@JT)h<?#BL<4y75Ku?#oV`;?K*E#6#Z?{^)>7JMFO*FmT)8>=I
zQB8Gq$Q@z-tM?|SxG{7a^hp(`V&|mS>wYS?6qRjiE;DAa*b*I--~r~KwLbwRANnB7
zV{nHR2|rftqC>W8cJKmZl8t1N3Kr0`DGe4;^UYHlOd_wQY17&?H;H^5PJ17eydXmI
zE$if&p~d%1e8b;@K6mu!9&97!ikWU!5T_R1m?5diNE&U5ZcR6@pc`Bdf^LyS>va2V
z|KjlCyC-(P-LxM3<k6!o*_2$dxr5m+PUMQtNgvYvcI=BIvSy#lPg!i*c$cEu433*&
z1_*XNFdW$*RvAfVmn7BZu&EB%nNEijMVTa<s@dSDv4i&<jwuItZ!aBF4sc<Y%jL?r
zGGn7;nftt6_;T$1%-Tp~f_osUCAja_iDh4Ua_H`b-LE!H*jL{C>jw_BOxlo%C0C`N
z=>8f^Np=CuGnn3`OzDCp>2%ng7c15?5!SimmYvRY!8*)0^#lhxIh?0TB*UJ160;xI
zLo+j)HnTdTFU}XF1-QPAON%{BkYZN+TU`MKmH+7$S3-rdKWSPMn7A5iB8Z8@84XMk
zyokks6m-kIWy=Ax!W921%Yut>DwaT+r11bd&Hyc0P<5UFw%J=}T3oeP7gpAuR+sYk
zYn>y{X?b<M>KS`kU9U&#=+jUjdy!JUCC}@_T%otovGKMLboM#uR9gpDpi?czpi^ns
zHc1OdA!@j}Y|=%K(Cal>by-x`1w#dD=lT=~YcuQjHPtG3tV<rKUflZ=^<UM)xPlew
z>%$Rc8+{uK^RqLV)WldM+zYiE4mY8Achpk6_s9VMz01WkZdaUX+?M-VWri|c`(&$}
z!Bwa<IHLy%l?SCy>jNP;%{>l9vZ&yULD{7q+>F84%Z6d>sX~{UM{og3u+3tFb6LWk
zW|GEEhvsl19>Fv#!?-hRR(tKt^abCVzA%?gg?!OSG~)AlX@8T{NQCWf`FOe7E5S4}
zd*;Kn9HcSkvbRj`PuLT*+r7Je&=cyid4;;$*KXS#Epgt*DtANK!~FS{Kc9U5fdenL
zISMN7?sLlA`Bj{5|HvKuOvg~Z$mFReC8ZhZ)w(wZ&-F}p9G>eDukc)xMmuh}o}J8P
z4JQ{uJShBK4E~tiSWUMkx0UX*+wDnvlIye3BV0_62uAXdbS-+B<(>1l=l$oOIkTIn
zq*>L72%P;-wx-f@vi%%IdtFGs)=~W8J-RmsvhCkk0NG}TO=O!i$mTZ4=0f5>5e^oB
zh?<!R*Ft+nx^Q>5+l^xn^=>^slTA-gj>HEC+(CE1*MYZlM%(Oua@!k0v`E@?-70B+
z5RUY8N2A^Eh(tr7Xr$-rZnGrLM|wihXs9P*{JnB(6|SrohYA%!ar4q&Rt?6HrZx@H
zz=Cmhm}Qzuk;?LT97UnD9fz!GX;@yuTC3enMN3sXRT9pdXu3H?_Kxd;>1j!to}Zq}
zWeOoaXX_z8v-;I+xX;kKS_u1@^erZ^l}|JIKmou@H3NX7Wnn+aXdB6fYT>^o+tv*J
zwJsCBcfNmn_sz{R>t2F?%J)DdKZ+x4NWZ1`xL~F^$$goDP}o?TgHV_mgis*Y5y?`V
zkx>%<<9Z_8l@tb)EY(G7tDTs5=p!FaU^%dy0~~X5JRa@u!)yAZkub&cm|G74_k#O|
z!t7d$VnNvqbp}Gykx-8}-!nNsKW*RDn<aJ6ZMIHtv}4TWnT&>$*3m03Y*8${9(7PY
zFQTr0TQfeC!d8U>J@UN<-T59y@C9i1RRyt_DA5seM9f&@o_e~)PAqbx``X(nT*LN2
zgj>V32TI)88exctmYo#x7Zy+CwvHShjgKPey8Ca<PRbp6baS0Tu2*hrc{V&2obAQH
z0{@?o6~o$ai`<Nwd3yWqpEOUccWqr+YJp4yD_LQC8OaJb5hvj=-dJ-2Q4!LBsF;Hu
zY`AoAoEX&#L>YP<QX|P=LPMNt%$InIp(^OmmMMvxh)p+7N#sNX`!7pNG2*yD$WP8N
zD=7#0BDAEY0xK{mK;$qu0AMP9RgH8qwN`%PXf!e^P$yLsSFVJ`0z+M$ZJ};e>7O3n
zVXEw(CI@;K`%E~LT4Z%khq?yZyw+~5f7o))tjd1c@&#x;0hF@YCw)x!W+8s}t<OXJ
z=7&r=S;kn*Tqh$j094Oemu!KVs#$7iW-a&P`dKhY`dM%#xH6N=q^2ekv4MVf!0oT0
zpB3>>nHD)$$;T()iW{Hk4Z8i^!SL=gn_ckXk%6Iw@o+R5=??gN!hzV8gSAL+nw?UV
zP!RiHj_Jbh&;uFSZW~t=D-_}aV;fAJf(JzfzQS&`YdFxg$l)?v<HXiBghvcM7o6Q<
zAI{!0Gc)?k%80kSz}~=a1e&tXW@hqCO@>E3;E!`ACs-OFXn2D1MSoX^qX4X`!s1&W
zI^3U*q|Tr1y2aP#9&B^n#cj1v!fCaZK&`6K`33Lm=uE_O=Pm>y{eGXz6K!k%m>G{X
zX8C}yI(}CV`4EEwa0pcdORNt=(V!y?%rPp`FJM5IY9H0ikiB%|3P*Q$xix~f4Md_*
z4j@WYSj~Gt65T)68;tm3{c86ub3LP>@qv+`YD?{p?M^hy@)@Vo?&wjHX@{ddC<mtp
zuH0T_Dry-dB*fofd7bhThAaAk-W`U!Y7DN76<JkQbBd&9915I@Q1|+w?#)7W+ff74
z@WR6+!NFLhcEA~>o#D0xqJ}tn(V8RJm*a$R&T}mUlTp&&iW0<Dc=4+~$J86H{nk4Q
z?<0ibf;68_dA(iH2<;H$`>2me3{dP3vx!|Jp&=H9f5V*sDbo7!bClx8bJ1gKsX3R`
zF)-LYJoC&<&+v_(y=frTo$FqjRXUUL{;5&>%)7eYmib5j?i&v8U!5i3;>5Ei_T}$s
zn@;QBxz7^p>2i4kgF^$kA<Ls5aagrZbuHf3VY#~X6O_;#w7ulok(gJpba%h>cpHZ>
zVy2h{gH1tp>D_TzwN1gOTbJ$DeRGOp&$lTK#h9x#=3RpIf@NcYhu=aNFt^Likc<vO
zGNKSXAg*UPqEXY-9T=3DHNc5ZAgnvZ&_tx<>ouQ*dAF+CIg)afPc%K}Iv<g8k@49L
z_~eRp8CrfOo#Jx|7^R1KSQ@F6P0XnB&GWCH*-h_#UI}Y?W>0e~OYUnwL6yoM19SQ3
ze5HAO2*M`;J+{K@YuW16#SNRdahx}c;yh&NS+vtzt!x4j4pWq=ZE(G|1LUffE%*lD
z$wKW$8xTJT6*TIik5sgl@Hhz$1oIE26q=b1{90a`iN#_OUnEYzR?@%nM09SG0py$4
z@IgSL**ao?X!sce41>Y`uSVqC7utM-zI1A*xAVr!kG*+XjjxTYt}i`!(36`v^U)Lg
zPfll(i}T~B4ts}3dxp9??%jCAviobwg|2U>w&PRF`MZzA`jzq2#*4Qn4vbIT((5|D
zH22CoG2YH=|EdH*;fVB@?()Ej8XQn8vLftQoSy}iRkpy(qM-PmB!P^mak*oYt*ALj
z-jy^KLcLabf=Blj9s@cfhJLE>I7X*7JUAkSWASKAg-bj@TQgAr#%d%CJPHSl3ssbX
z4_^A5&G$UKeMcAo7hfNchbI@Z8w;nS!O*ksO?TY?==q<1d~IVq)#I4y?+yRPe>-#N
zXg29wxj6xW%Ers2MMC<h?jm-IgcX~`7%|Q%krCEsyDGx?DCY^K+^X#0jWKqcP2GV=
zSF=Dl^RYMAK2NCVSd~ZH@HCrB%)@_zxs%$lq7&9Q=n?mJ*zG+m<jR~w^{FEN4lvN)
zs6!fBihtgaJO@D@6$e><N^d6sgdg@xJf^4&;!JXH6f28CA1sJOBP{?0FJV2~EIWLk
zBkx;rg%N)=*&$CriFmb#t9Tyy=!_q+vDF2P#F#e9sN@r{aR!lShEh=ui}>fd#3Cd_
zJ#x|NiL=$SEd4+ahT)RTq!rDUmleAYG*V=TOxq3t+VT{bXZ}h%7L@&7@=U-h1ehUc
zsbSXvLfj!cPGhfOY64qmS&QMooHcj1*p-V-_lI&~`sJp(<}E~HA66zz$Prqaolq0V
zXAy`ehz$t{Bvz(|NJ;%A3!c!>i5B$VO!fK#?Oqr3W?yHQ&)*h%?y2gFdH6RD`@@~f
z2a^BQ;~BDR?w*d0E>%5ix&POyuJ4=faAfW2%z|l=3ofR}e<c^Q)rgosLAjga;^sPV
zF0R(L5f>wL&yycm^r;yxey@L#`1o*LE~aRFJuWt6B2E<n?&%Y{s|PZ1e9R;h69i~t
zk`VeVaV_ntW|3$w5s6JTXA%+HboqmAcvgi#WDyYew0mkKK0Fu-c6wRl!%-IbU{R0;
z67t<s99X>j`Fb>)nH&yJO@)UiuY9hKw8XIt*M5eQ*FOfL@P6F`Bq2^p0Xs3xge&$D
zn7`OTvCLsCllG5g4U-p#&B?YM<P+JlHpsl{ty0BSc?dk6@`s{Q1lmN@NBKimpqe`K
z7Fvd;9nxRWAF$Y<IAoXY&=(%+>z}(dd3fLUi#9yj{F&cA_3D=&e%XPx+z2#;t50=3
z`qgvKzJ1~DE$9dn&=IyiaPj_cy%zhRF}?}uHM$3IUDX4%8RN4VX+e_^U2we07ojp>
zl_6vg*S2ck;rJsqQk%`O1JUNl5)`RXdyLs=pC<$o$)5>nJQj<Gy`5gKkK_*<HzJ2f
zi6k4u7(ZgQ+z=5281fdzzm@2UOuadCL)Uh$uYdNoWMFaj*o)UaGr9A>d80hU2_YZf
z`iHI`ZT+I_(J!CcxM_0!?rjibGOHu0=%<hT%WEK17%|w^I4-?G_mTK^gIC*RD;72i
zKMR#<%Gkg(?2gzQkv2!Wqqf7d04x^FzSU|+fXZ&qBKt>g*a1W_I^-#sO5nh8ZHyS9
z(^~=#RGMOmalZFu>TrhTY1;d~^#AimOZ*WM!XPRAX{9)z=p`NRR#O}xqG`)k3to;F
zdKt0GD#C>ICSg*)wGb-QnuH2MmoccNv1Dv|e6%24D0JDBbO8pq5O=OCX&w_|x4y*r
zuZ5%!xWljgSpE@C4^B#_^fo_soymzXRM4g^llnG?P9{fEnx2S9CyFLVJv9c9XYLBm
z2O(BZpP0OPc5q<suBDZu69c_nzMi3A|8!3}leuwfI+=ccPcZR;JA9`P%{>1`PhcgI
zJ-xEFFtOOH&h+;8j;=<M2isgn&Q4Fx=BJ&v(3!Ist>R%;NmhDTZwo=5q>^zbV8pH4
zCC%CyI++<+YX&r!EH^Wnr-b|=*c{($h8$#ke4#ax9AwF1E7G6qZ3HJ?TuAw?nvF<8
zsg_fehs9DYg=P%}8g2kevMlJ(nr6rD!zC@>k|&Mqt>!xEW3}3Ac&=tAFel&Hk;-~p
z?_uecEA7j3`SH=naDT5zu5?w&$s(1x1wv08dFDubRJT3Dws=Qw_eV{U+{nIKiCy`V
z)<}Pp?R0tRWxAJkx;_|z+01Ag&NeXi{wA$Da<nvU)#)AB+w$5B<H-`Ejw^R9kW1`x
zyH}ec6x;7w<4*Y}MG}#PQH?~^%mBlP<)YrOl=XPEwpC09Gl{BM3@wmIm=9-~qY&8<
zO;ZSk1t8K+F_Gqkqxr46mted@aEH(4C%slXOU)&3LI##B94=rocwIQG-A1r>IK)+;
zaW&1h1N8}dGyL8~MKW2xmz_oNDe;o`rkn~N(CiDYd15VwW#<?)%|P37d#icsDFa0?
z`)iw{AP2IyM8i;l%hsiD>fS1RMtViI8t;_ynUj2;oQOzCcch_>b9tDm)|bjW*d0ZO
z3+Gk#3|h`WJHbg-W;?6++OBH6MufRD(=)nJ2}PS-pIuvCG!{6x*UggsP4;f{^e@pp
zTH)kPp^IQYYJsEwb3r%Zteq{e_P46CHlfpJz}W?GIm|<#(*;+9esDJ5Rp8H3?&cGd
zFY66QWOLoY4yC_arDv4|Qfq}2@aV0s5cxYrKzfragoDvrS|LAH?!#0N68(@oqW72M
z&{N11KX_m{Y;`fXF=5d68<26BZY;MHK3F>{1^|ODlFC88QuMjgFlk*bH*(6|?rb5i
zZ?o)a41m6u$LSlbKM5Xtgsx5@HpO3%l?xbVxbs7O+xs_WXOdH6Bc-VG_6Df)R;O8!
z0*-K)C3<!ajg5sZFXOQD=BB(F<h<$m=Zf<j=D$bUM*37w4??u<PN2=<r^3;4PIWPz
zN?0|g5iZZyK$<(?14KCpm5}DD>e%7sA4qw`w!^ISY!f{-LaCEN$REIJn`|LVKQ<9(
z@N(w9fUB$)zFaZ+aZ2qC?$an2j>?>^3c$RlYcSB){)uW9$?awPl;t};CUCi`xjJ?a
zRW(s6bVtO>n1#lqpoUWmU!u45Q>J8g%p+8E+T0N><7zgPXgJ1z+$H~z;Rz%97Th4Q
zDoqU(l+lGK>IIa1)}Ch?B9P>SYU%`voFmCwQ>mYG{tk{L|8f~!s+x1yF90KNnm742
z(I+tE2Y>`?n*@ROZOjjt2sCCIwG&6i5s4^s)J!5|qH!KfRBf!``!YL39}=MP1Kpcz
zdNw^V7LS@B<L)xYX(?p9H5$rZ0r`HX_`CaxrifVy82?NKlhreq<sVtdVZ8_grEM5y
z-`wn!&txt)<%6aup5B}fTIVk4Mfbu?b|g;qt?Ia-%h##dKU=!4<$Dc(^w*oBTG286
z*;c3(60Vd*xcAGQDWpG+7UHv|VP1{GygcejF8(x&deXX%7djaJ`YIhM@*6EQgh<Bx
zpoCa?4;BLUr=W+X7E=rPoZ**o6hgtx)6=XJHszx+l)+|wHAOX$?LFW^s-2aUUQpF(
z6EDU$KnDhwFNvENp=62x7=aMcuu5RK(qTh_uhs4P3ZU}MF<Z<28u_Q7h9B87@6rPW
zg#0*!-ul{XAB3LaBA+(on9x&!izm+w!^M|KKErbZ<f{?G<eIIiM-?}W-orrg`vd#*
z<#cjvBpMcwc=E#3g2cBd_HINJlVjp%dO0TkpPO326@d6}wz80atYjG)ent9xb(a_+
z)2$2#FWg%cCkFJjY)dhAU2bVii(V9{XsVk&QM*T#JsX=gu<vk+G20u^ciOalrO@|Q
z+4yT_==)twk-i9fZ%KImSV=O>`~R^;4vc%N)cIG2alg<MS%7bUPqREIORj4x^3M?R
z+?0;!+XDz@K;wfWSwR-Abqy&&)-9?B2(UY0*|DZCNL-Sg1~^3CfxnhTK=Y^rB;gtR
z$C0rz87GVjho%GY!?6UlWImORWN|)<`;jl6sz#bI>asc-i$q4&o;5voY(ACF-L-M}
zxr7t)_J&4t`}B=x-aIrjID4=^*q)A$#EKAgfYbYydbQaTxzveuckj{3>6<d^>i`j{
zd4EsxKqh(1VC=bb(WU5A+BrGfKbRgbK-3||$lLWS;C8!__4)zb-ziYLQxJap_bm*X
zgkJ^%9@a*ostid!LhOo#SE~9I1Yoj$uc|^Y6q2OS!O(&A)m&zBJQ2go1*6d@cSR>k
zV7eeC!&SBHW&N-K>e_<0%!d*^)~QfDWV5C=W4j+|iup`1UD?BNx_{U_Gj;*IwxawG
zWJi2g_YA@In*xx}1NxGW+66rY>NVhIwtHcGAa-;CL_~eB3kavGCm<2Qicnilf)ley
zui&z9oc93Yt*I^qZ)&;=xW1Q6B6_8Y9{|=@kxmz0jeuasb!RjlMwmCI!A~X;9*))r
zb}FPH8(dG|xJW)93HwcDL^Hz{`L_=reD&=&pPG(`eX-H_#Om<+e4yi#r|(c*u|RM4
z+MImyyYeT_9Nm2Q!0O6Gt|yT0Pt4t(KD2M^$AONHf!;{>=+f?gzIII_BClD#Cxs;)
zZY#}tL~%<0F4=Ja{HOl?QyG-{gpbRCmnWR&pd8YjNdK4QEi8cp9Qrg#MY=2!Bm!20
zO(w7yJXtmsfiJ?;S*-?gjMvKHGdGGST9s;@2zr7zAayl5jA9mA{uR<=@%Ck}hWF%J
zs`(W~5uc`8v+^96J{KSh{%|Y`5Ff165_m$I@KXR&YhebZwnUy@Aw<Idcf7EB<iJ2K
zX6YD>EF2qqW5*khUB)5lcihL|2%9fBVAI@=rE#tEFSm9d1LZrfrEn(v|B}|Ex9c7<
zFuRcf;1WxKhM0wDv8$*=3g?7s*De5X2Gi66a5;SB3VggpiG!IW37wU}rmc6&%j9GS
zJFH2ozE~m}2YfNc0b`_FF+8V6QpW&t<|B-qOQ2)GmYJL&OvGEz>b=LK%dz;h%Q5I3
zh{yUO>9(}B_wdyGZPO<|de<{fjfFdhUA|CcX#RO?$;p|ULN7cx^nw#lZ7;?3SbVVC
z<MxaU4UH@>eJeh){J^2RA3wLHk7qmD-MQX@;j<sUefx&{pD*uz>MgIu3M6{YGo^k%
zj3rMBKJ7k~2Bn&DM&N4+WLG8PW2ffOoDN{|B+V(o^X&j`-vQjd)h)ZMsQYNQ7qQ2T
z$qCS>Uq^pJ<>>*$ZTDOEt*x#saVi5P+9u%MTv50#TFZZni0<F-h2Rw7RrgBtM_H`*
znC#a*i}2YdP*1G~@ERgI1$#Fr3`@aYhtusu-8ISWa=KAAL`GFMz;DjM9M`Na%z=su
zB5GUFB}xK@1%U`^#bx}u2<cweqx9>33I||BS;Y8Q`_aRPwy;&t&yu?)8Xo8ibcxt;
zM~&F=_094b5l-gCdVjR1`8LAKsNAdUb>3fz#il}Q`YeZ3Wl?r%P*$Bj?B<5OxPpmi
zF+ze=*&Qy29fe=1{HyZ<>g}l(C+hVAhvl}x6Yg*nkygx!Mlf~#x}E?CJF+Ygm_Dc-
z*tbCyLzrxf1AE1@EJR_p>y~ozogA5UP2SUNuo(89*Wav|hbMF&MH#Ej1Ip(bd8#hE
z)9ylTEJ?DvB;@loHx1YGfLgPFD597JDtPs)kbi&eUmRR~@Aw^in*<6f?r9R#YnsxH
zojf7UOJC62DHkIm698y_T+ueSKb3$KBr^c!Jya>praem9t4PWq8E01&n+@nflqwY0
z1&KFV>_;`*OZuHac%Ai90ozwq2Fz{L9xyVCrO+Ol4swlA`ywI5y`6*=cfg>lpT>a-
z<CX~108sB9IxOrFrq{Bpm*<>5{gG#F9v=(GgT7!-F!^kKEH<<;)Aqs}f6ZeZTpd$8
z+nuTt6+yfEQ*rfm7hnD_uQ{|dmK|)%^!9}x`@1tY-+A~IH|)NCBN6$IKj6^XRj1e0
z)jJRxKG-d`_*v#XJ|cZi_sn672fD}+EZO2UFgVJCqn@kX>A*P%Zd5EJ*L-1%N8#{#
zTl}8;vn@VMDaGz1?!#LLH{ry}=Tg(7iQ&QCkbpjW$~^cc=<{AxEcp?`6}`JB#xJ<0
zfBDP3ZUuA9&$3_oo$7kmB65mLCk09vIaLdDQdjNTd-u9pS7*UJb6xxKFXR=^?jLXO
ziS+N<`sF{iPIGQM+yIHQCH+kIWUvedunfFn8TcV?h-7YLUXZrsa^Fq0@?q<_q%%d5
z<6sQAhN8=rttHbl?9kX+d<eAV;ybk1pXaaywhkWH+_$j~eOVYK5x!$kwl_DY_h_8t
z5p{$QO3Ntgb14`c2V0rF!|C&$yEVrP+vermKfmR*&ClO`=|EgwfDHl>p*#VjJ0u-{
zyd4&wED-4ZxNlP=pg!<Fc;?Q)Sqrxt3K#RkO6q*i4k~e?(x=xKV@`*1qt%k>gxv0o
zSR(&x{UArsdwTRY>6hPk`RJRDURFNZckc}ba9-K{raX4FOMVE3DzNf+tMB1$hozWw
z;fY?i0>7Ym;ZaF-D{fV}=(H;~7p#7_4J_t{=i05@MTMLuw`mAdWS2JCHbus0R}5uv
zhKB|Re6cu<Ntj7^c^W_`<q(wF<XQ$50a#|U^7l90&4zUMv}dBbIM&3Q5|<OV{`5_r
zH!0SuS7>aCHGRK%)K5I|M0$+|d@U!YXGHqL!UTD-tl+BP6NIr@?RM>6W1^r;$xgfT
zbm@fgbu?Ad35W9(rnh=8fX&UnQojQ)W7XBu(=*bO0MU?Z!B~KD!fUetc6ig76IB`F
z{MOA_bc@zww%J?LwYcLe>w0`-ayYsefxC(L<V(;+!{j1n?xxGqFSxtu7u?;%dFctJ
zuMSBM=}yvD>G&c726NN_RtLe;tZ=kiY<8Ok#InKvVY8p1RWP|tOvUOl^YqO|O<Ao#
z&(I(vN*o%elbPELx5oX?g|wSsafK)`rbtfQQRJTDN@3`;OJ=?)T`ku_f_Y-n`wPrN
zv0A)w&DBjFF%GFn7tWOdyuY-)BqB7WOh%~jM(sG4c)=yHo@h+42m@f0Eu$h0m=ee~
zMzy-ccn=PV7)nkL*W!)u7jSpvbdluOL4<gvIX=;yxIy79cor$HfCO&^BBJ6hWn(`M
zfo6drUBS(fpA@I(eV3Jw^xku{Ai%D6k*fzDq4(ogC!}}koqiQS)c{-(y=<EtVNOos
zxgop>h1wAIVCO_piZfn`r9fFMJdu-}#WmY8l^Q!%Z<Qtpjg!L7Q|?$|CMAO*F)E78
z%r1VI6cWp+J`a^*U@l_v5nCvITr;`ckS~Tk@AF67hkv6u>NgEWwO~(gJTWvh+5Vev
zeQWm%p8wSL^2k6LEsog2p>|(zd|)7++pqj&`0D(F6vm)Q`2p6V1u@ne__Sby!TMup
z-a;_Qd|FnW?}^1eL*lx_CJwf#SYHwOW#=C{G*f*4_g%(fdbDib*o!G4=2RMzE^{YR
z#Bd@R`JPl-1;EU69AV5)ui|3}3m;LvmU^Q`RN;>KM5&~H!JlIX8~RE_XXO~L&{0YN
z`!ny%ttDeEI$a*CI_4=R7`vrsK2E@WV~-txjAT9(D|{#h*ns6D!uq4Up?VEclz-@;
zY4LTaEFYb@JStyXc5n~IEhTSEj)|)CBR^GmSCZj{cV+xz2<1W&K9-a5u5}s|-W6h6
zyel~dc+k+aG$QgvE}r+5zANna@^`f`CjU*w<QmkiBb-HgAwf|C@fqM0EP9EcEv7Tj
zYJSVg9y+;7(m{b81HM*C&Xsc<p!P`FD?V94PX3BN5NNYe=`?@EK_jyn?`TJ5AbQ`@
z*R0!uy(&XKjgHV+VI~Y2CEtRH3+Z2G3|ZwszJ<b~R3DT;V%@Q5=*f}+Rbas`S7U7X
zab~mkOSkZ`^%Z0baI*xbJ_`{E9uZn@?XQ`Vi`pFhI0Qx5(`uPLT{!}ILzu@eEP3^U
z)%%9ZSH2b!yH&sR5I=uv0DOy?Fzr_))_FONG%Ke;TS;%Bl~FCjyt~!>me(9<^Z9)J
zzP=c?J4$S;*byS;9l2!dbBO_#iT$qP4$Or;ueIZsw#6zaPJ;lon`fc7*0-gCo|Zr*
z&HoFaN|6$B*O2q_SFkqya6i33cNKs~hBg>A)&S%mXb(0)7P|$9blg?4UK=-Ks{sM7
zL_8WsVi&KnNy5Auq^Mmf--{#ic&N+34E0P=9nI&K46Ym+bYCS)fiwOm0{{(4uN7Mw
zgb?&LRK7HJD(G<-X2~k&GZht0siKLf+EJyg-nbdx)<}d=9ZM2nWni94Vf*Vi5pc^m
z9`HFO!!E#bsw^Rl_Xo@=^ebjJ_-rcQ@nZ}$Q@VA%YwNcvXW`nI%ojmIdPK*WGek{A
zgQu3$IR^4t5afq<963)^B^Ty~gz}`6PeXP%a==N?Yoc9>;(a|<9N0<)VTOkW`hxy;
zkJAoq%i?uHXmz4gyuwmaN$IPi0V2jq@R;u{obTTs_I7N=$7i<^CgtyaGhKm!kYyau
zW<3!MPv=H9a^(`BeX6%_n5%k<pB1MYl`iNA(eToA#<)jFxS5bGw90^NF?h|qIX2hS
zSa5vv5mn}B!AbE__=-TUR7w!}M2$jnuP9+b6AFbFi+gR^q|1^QR=^spfHCQu?nI2;
zit@jOWaJ@2IsxJUlN`#wVmpORh$;WYczXRNEOt&h{g?!`FB*>;I(?;QY9?PQ(=(*e
zKkM+??08=F^>hr!#(KJkd))6?-{S6>k+=3d^n#}j>oZ3~V<^1hniz;gI&&H2%f0s&
z44td<FS&sEr7^yYX=Ews6}pF1GKAtZFHCDA_6-OGH?1|yw5nM&6>Lsb9c@T_U}er}
zKf~}@*sbZ-EVx5;4N_W?#vfxgHaqmF5Y?%0uU4gmGR<qETx~!RW`AE%o1hC>fIm^*
zj=4`uf3*FnDeTZ~1N|QGw!DQ(Wb(mYy`vx2;D84eNELnyWyq*q7$!9!0pJT8=w_47
zAv>8=6!@}m9Gy`{iuU|?c}qi=DQjJ9i2kxlhfT2umoz8m*Kr+(MB<H8!%>Lo5r(jX
zw#JTMMm1=-zsmQg{7f(-=lRiZ?7JY!hn#71dpwKYj-!`NGGq1ZOXTyrKa6b5dfMzB
zzi%n-T@TDnPOtTBSa)AlX32l;H6NCDKQGUv`&W~Li(SE}=7pDsNXorDr!fExprT4I
z4+X?H+4o8RzzOOrA^g4>1jc%Ge>wHpeK7^7`6Z@+omN~q55?LwG!Nrdo0m{`YTM`n
zN1k{%?!c5(kv*hoFRwEv2$Si{#aW>+nYHy<(JCWm%}&%Gbcx7Wus@k-ZPva~2&MUZ
zcqollhN`?x`4=fFy^adR$Vv!S9MUl)Ltap6IPMk^?hvFClxn=CP7x{>Yk@2x--)>$
zlwzJCEJ5yI_k#^v)SJQVRL=p$aT2ivQ+uuP#1!gOqI6`1LnO#*9ztd+%B}0^&6~#C
z?Qbb=2Jh@!7+bv~J(;lQM}LvYjikb|@_5N+kk(L|G}dwOX4(*G_{=OEkv^__+ORFq
zA>uLY0R{n#`f$t@X;pxXrFwE0ouY`$3K9f7vw}!5hUGxM6LWi#D>gzcqMK2Hj(R|Y
zC^iPD5JXY1;X)k*o>Ww-LpzcMfDDaT6CjVNqMWY@BFV1>80c>s5DK#Nm;YDO#8Rbk
z>2VJBAk}FIL>rND#HSGqFdP*$3PX`%x&z#3#hiJ5wgZD-R_kB^a!3XCm>cB0ARTql
z3-#p~k*qfS1|ytGIp?Bs9U6jWREhv)b{Ne{N)a?gw|+nfaPHp68j=pak!Fd<7Fr%<
z3p-6q&6XblR~gi!#2mifVBnxm6BV8U*8t(l*AuzFxur>@OB7nuE(I0?+`wjDenxZn
zBu&fD1_tGa^<WK(CVaz5CyiC8!T4-u6~-!MS;K|78#c%P8!S_Qz+Zs?D2lBl&L}bj
zmuePVL>ib?u$3rZ2^dNMCQB$uxlu(*jun~%kEBYZ6qR%%X=U^P**P(7B+JU1n_7aV
z{?hV1B;P16su{{MD2#BuHzesj)6+x4$>eYYV#*($8VXNOhli#N>Bo37N%(6sPm=UA
z63aL{7Kula3A9nuoFfgYaNDWKkwib34)w`SiEI4%1_PJ$GSQM!(aKraXlrUlpzG_P
zdDP?)Ye@55!===K=$+;eh}du^q&MsS!GZq1Hk+&r0}BVp_2~bheHU?v@z{9jzN_WS
z%oGG8@|uQ#M3wz_|Eh9mt+)s0AGAJlbLBoPuOxCQId9&KcmHGG(vjUqup>vKv?I&X
zI+TMbRP_+@LOX(8V2*ZBMcJaHfP>qgia_Y~!0AC+Mj>c4xsCmm+vJ=HD_U4i6k1ev
z7hjU8PEK;4w=)V_plGYmJ)qyQSPToCL+`dk<kdqrd7iuTmMt8s`QI*|zpVe!tGhmO
zRQY7+foH_~EVnPe^ajt>|EaX2j{KkQuE<~5UBY5pzZMb$i%EZ7ZD_RIpbu0ZTKT?7
zbO;w38&zh6o3Vl(HCvkL(x?%m4|Y`%J>+y^^)74D$?U4EPO~2hu~mn5MfW8OASz!|
zeu_kxM>(F(NufM1<B(pRJ}CSHj0b|-;qYvfqyeiS7J&dGS#RXI;ar03nsQ<r4fGn{
zF&ccv=k1CGD7?kB)1VQq3j{lfM=X}e&o(waZTixUue~uC4m@=4ogaM7gZJ+!AMZYU
za46@^<@Y~)K($}}fiehi#lP-$kSNBxe2pohebR@-(0ZVW`k{#`sFLl(2P^*|hBhcv
zN2-3Rz?M~PbOa`hQ>scy0U<ufh`AXeF=$pahK#0q!&VfOK{gAG9JR^GV<;2Kf}5F@
z<5#w!bzZGT1gM%9>yzQz%z-f|{Vpei2SQ)!hmP3|9g`Id7dLGDh9Jj~p+xfV7^+;U
z7pchgB(u|}3W?9rl6LU>p`D?a7u)KMn{gkii&MnM5=6ua&$e1rk^g`P*LHWSQwEx3
zJ=(yU=Da^Hy^qtTy~zFJeTogHG~E$PfZY+)fk5QzfYiQ6t1SjZHpF6}7DhO}xMcKt
z4TR{NU<-ppXU&CC1uI&0t-Q;uAl6(s|93UjkgX&tEfAG{N35hURuYO^@RfuQF!Jbw
zAkKiXekiU0Q6itMwvfU|XX4ApXjNq$HEP6{Q5Q_z2*H{VzVfj$1opD<Rc#jfxdHP0
zc2yoKgtJ~<XORJ#!Wk(l{k5P_k&(*9C~Zqa2K$&er__?=k0D$D6SpE~^pvT6LF^6}
zISrOGl?pCwTLtmkppDpy+Cw<xFcg8W5%QQEWHs5&yb)F9w@(<cvsyCRybEQnrGe%6
zDexP=uXhAG!50b0CuIw@=t)PRYT+XV%NJ>giUfcd>clA;CDEFS2TuYJ$Hnxhxjk4A
zW?!uiK+qXhHJ)A8R+I-N!H$PRWYZA_(C;9&{ZU`kIKqIu(!pXL7j~?wqyv6^{%~X<
zFktQQ4+Mv@ZT45(zw@qrTb{Pn#hYJ$qd(mJ;6r!5b@lhYrstw#0pEbXdthyDn6|XS
zlAYcE5Z~(}S5NJJr?As~0KtHy^lzMPd`2K*3hsnaI1{bd@ys_>ep9U16d4R4D#A0w
zY!{G#3kV4LS8OOzpj~8xCm*eLf{ODIOpFsbSF@w4spx2U8(?pnJL`Ms$Iti1$$rV{
z$%%1PZy6jA;SXo+@JG#6ue6z>AfYkSaXL>`l>!yvkXP1{2C~#~?H9^rhK^d)=a7g6
z5JzEwf^{kBwpgte(Xf+5USvLTzCvN=1aPLILb5=iJPPFm5OAr)f5$Umzp|sh<mQ3E
z#IbbWK<dsF|7_;)qc=Fynfw0m>`U)G`jHo_C(j@M_IvF;ANbPYndR4g^VIToeB}j)
zdqc{|#J-D19((AyPro0G#9o}KOiAg0zRwMjPOr|KZz?H8LR=#olw2Z68K!e!Ft-+q
zc9Iwah2G&+OIoLC5OAyU+U>;@lxBt^KMh6a&l-#eI?t7-njX`;8RTg}dgtRoECqtp
zQ2Jbsc%IVda4rqwRpj4l;CY-nz|-f7Rl8Au`y`bJL;-H3fl@!Xds^ytT<>E^Z42%5
zxeOhMHrQVPKk-AN%(zh_ccCeIJz_3`dQEObIRh(&`lnxMnu34CG{_7UI3QiI9g3r}
zW$1kx!KZ}YNB#*bIT?+VGnDB*Nu@PVrW?+~jF#rCQBtG3rQyD9aOpkpBJTcsqk*#A
zujZKqh&k8{Y={))<3nW3k1dx%do2#JO1O?}UZZAmoy9Ew3y;_BYdAtmtZHV27Phnr
z9&ABcT3)(czl}<db|OZpkZb}sV_Gkfs&NS#gM*4Mpe!THkVb(;c#Sp9r~s#`POJr|
zGw(cv>Y;hpOlq1IJF6c`*l4n1#9{5s-PYuwmHUddLmz55a9%dF*`bFNV{%ud4|8lZ
zpI+{fTWETgsq9#O8wr)p9XCjjc0wG?*6Hm)D~Iz`*>Ye{p{n(vY!($rSF+3VvxSub
zwrN9VJPe;gl($I=nhQNO%R-AnN#mj4Cg}N31;-obDIzTAsgLQ-B2R69ii&-blLp3<
zOlC9{qQ+6QrCbHlVRxjOpH;Z47h%ED{zxlt<pIccsKKFS^*ftemP&f9bM!nFa=d50
zF^BT9olQ^_<fDD}iy$Ob>^va-iykPi*cp{wcB<D%r8*BAB{4k+up>rvFI0ZFMRi}0
z>?qaA(tuI36Zv_d9rkZPy9kMa;s#Eqdq;A+v0XbHZ6}cu-j;6z{~jrO9xK+l_Xi%=
zBdpfufxb;j3#QEN$Z%=3%?^0$89uE15azvzjhm`f+H7KisukI6X10o2QjfGLJ*eO3
zg&S3cRwtpx2hKxuYAE+p3i_dX8kgKSzR+d8giHe`3M3$j((Z6lc~ysN2kBof%nB+a
zoP;_>$)*4__HOp>UtO7>O(#ba;UN_B?D2J>Vy1^6;3x!yKrYHckj)Vwqz_`Z5fT{U
zY&64tRCl+L*WcYf=m~Y%yh|g#zRp2^U%SmFif4X+l*XHDi($+7i){{{9FA%#z+S9k
z<`UB)>uMB&)w#^jP+?|E-|S!-S(!2g4GX|LJBfx;C5%o@ff9y#msxv;YZ6FdqKX;@
zVz?Du;>q*3quAx``Q7i-9w}3wAszt+Ylb}xsrb8aLIiQx@g4f{p&BD}S)3LcBNZYu
zYUz@qi356RjG|oSM)&&iVm_C|IX@*}<F+#Yh8b+!3Jv7-@?w>rYeb9+Z1R;a)SdRC
zd4Y|X*+sL`V~=ygi0{Bux}3)!s@g~FXb$eLrz|BFw5Eiyk}j18fskosoa&(mCedSZ
zb~2wyk@Zfz6Qe^tm>**gJ8UD1%h*|)u)K<UYEigYV9W2<*M$jIW_V%SWJ$i(CJiv7
zB4Ts<oIC}L@p~IFK}!Z0t$06*;GEX)EMSobuq-TFWeZ<y_}H|_2;<cc&1*v#VXT(n
zT3~gN8B_6S0eVcPR5j?arnR&teyaqPyfCfp{<IN2%t+<Pv~~2#cbixf+*j}o%Y)LK
zv`=5lp;i$c<mrWb0QI`~q0#Vzq3jks>Zl=yI$c!BfO}O?vEU>&cT~_yFm6t;idZ<T
zxmXjcAzw4+F`ZrKSH7`08LKb!&n)%@)S=!Hi~rof(rLI1>W(nw&Byve{%K4p={MhC
zisF)VOg}P*#EUH4OGq4}_=6<dVO`lJ`z3gbVTshSvy_wYoa7ZT;1O~#z~DgAYGAL!
zmj8bH_VbsTANu%{UvGKvAq<|)u=Ezay=;!T{L3~u)kxArZY&*}#bls3BD|DC&;;q>
z+Nr9Xf~pkr^Yi=WHz55;0wyR`5unw*@eC`!CaSNsz(2dkkl;8B%cC_$y7B<;HC)b8
zJNg}S&=$-rg>4l;bHwFJ-4dv&3fMWc3bTL0U@A#koX?~t#$u6voL<!Cg0{i|<udeA
zID7U+Bl$dF=JHT09QI_OWftS>3)zN*3LS=((2atB5+eMHWgCY6e%Yoax)r<41~+go
zeI?6I3%+)ie5+FYhI-Fb*jX-|<Od@H2yY1`(#lLW>q+<m*{QZmk`s74Cjforh8iB=
zBrBv|f8hEh>BymdOyilJr1UCm8(rZ5KSy0?yby1imdHWxg%2gN_m%(YP>**8Nhc8R
z(@fr9ZGMs-?-+A=CZi<imD_Bc-speY)0C0V{umBQya%OJq{E;P=E`yalQr7ICX2Zi
z$RT+Nbah^$Ngyzz1Fo7f`kF0hV>%@1=n*QFGM7(H(<zbUE{{b@XvwVyc78df5A2=G
zJv}!6p>#0P9q)<wZPxLXA%8UF@9&U5)I3pdGoMXQXVtH_L{zSN|AXcGSh&Ap<AQuz
zsDcn_Ns0K{`Pb#I;@|EQjdX|alXdYob$8RE4vpA?<?|?mwjjN+)SXSKOm>#_RO-)$
zq6{ZYxs@R-sa}0X^g}&>GLLrMj>zFf0b{tcX&+%pPh^Ej%qI0mP=GV6w&?dy;0&+r
zBRt3V8Mii~8B(P7Z;Xs5BUirI0^!~T-uTri*26{>;wBaA0V-(oC+m%dhU&u~YjR9u
z%(H2cR;82riGFC*U9!XGb}5RZQniLk%}r_ua>a70%<6<E0!F7Ktum+0<ajL7*VAF7
zRk>hn(k`g5#3}A?ARj}aB5_?u1IwRKHF*a+;X679Lop;>9gI)R9?&=IMXf&cFiXMu
z{CIcYFi*o;&${kBUN?^QoTuLp*MZc2?GKcPU}=tEvh&i0zB&Yi!n6xMZkQEv5>4Qw
zL8KEKAs}xOvPSMSbZVBVGfnVdDAwIb8I8n-NU^pR%Hjm`6+t*k{buTcrbU(&D&1x2
zBu780_bSKkSbovbP?w`4u>Hs(Ck{gV^yv<}E9-v8>SL$cvoGBo?+83FKe|1YRBwOw
zO@H%dZPc=G_kmDQiH)wl@SvQUjeX(vzj}vn{~x{LqlahKI<J0ParVCLGy6|DQA?VJ
z`7qO~C*Vw3kdEqyqd0ms(+*Ps$I@D|!0Te5ELz1v7{D}HY}lMF$b7cn2{jUKCt*Zl
z$V|27Lmn2YHDsP;PXkvv5XF0M^Mhvry%q_;4T}%5?7I!=tbW=EdXvY6?23}qJ2EJ-
zd6vnzQrC+xFT1-Xsk_ASA|lN^Qb#*wsrwBZXiHnee>Vl6dqz#c=f7$s8!F<^SN^gI
zQNip?%NwyG4k%L`PT@=7?BZE$42atzHDy}19zaZ=3PjU4*0OKd&9dglp)3+GV?Xu@
z4duSUR(6No0w=v46-n(5s%6acxWQ$bX2gn}PS?pcx8ia!)CRnt?Ak?$0{ZoXb)SZ$
zQkL?eX+YVF>pBl4z~Zm&^{AxsdfnIK@VL^!K1&iqb;Hr?cIOMHWUW>_N`>L3qF!qi
z`eBe&9;EN(84S=;cp0F(foTE5Bl5sXf~_of`@^WP4eOAKNH*sm3zDY+8hM_oH$xvt
zKpIlfD5Q^MwBfuOspBqNnV#7$7I+?<9Z3#N*j~}~NXPu>&;7eEm1B|mKD5qGQU4hM
z4(syWL*rW;7p9-1kO@c_&|~2GVQELl?nkjGI2c7%%^(`U5CZ6#;v)!Jqwx-SmdV5^
zDv?^Z1<%$G#G)e%x0<&w!Ou%M7iww<e>{Zf_ujmjJT|qw{Nh*h9Ml`0li7Uq7TeNg
z95=rEd)7nu&MY2!*#kzIotfh^s~2wA{b!g<#u$2}h;;Jz+hrLg#3?NgXjPn~&8mST
zyH2*9Mb-&iqE={nBAL2w3j%!U?R~xB;oeAJ#2X96C_RN^mc;9?C`LRX0`-?4sh+TW
zb9MnESU9~HdUN;l?!g%PW0${@c}8k};YKCh|6G1Xc=E)S|NgGK)w_>j7@z#cp$GEw
zhm_ryGhfgfm=kzO+9%zuKNmqPIpl}ly1t?~>^T^jj(N&0f%Go*dtq(BPjQjXTcpR>
z9g6*2(ZxZ6o7MfqroFr@Nz40|H`a7%Nm}fV#S)`27(Knn5Q!($;%<fw8ap&GF3Y#6
z*wp!k9w4qpcqLA|K2BDbzmX2LO(u)65hdC)8Oa<dh1`tYveGj<u6A^$A|LPQigmPk
z!uJiQ5}u;0_Id4&-nD;zPB{{1>tk=9PK+t3*dMvVR^)Q9w9o_K;RWf%dOK>`SteyG
zke2Xx5HgM@%A!7;Vx?4T?DdL73}843&1toI98N^m5FtZZMa|PH%~_Q=%9CA?pxVbG
zRr6$V%sgj@3N#WCjdP90F}sC?*$(f~%a6S|WlyZd^7+D9^V?_A^Xd3t)uh=AUEiNM
zmY7;F9XvmAaD4h%1FlTGm^q74Q0D9brU$J^m-Y5eVBS*5lu@>pu-pZa5Mp3BCYGd)
zq(hX}g9gRdOVJxdSVHo#vGeV!bisEP`=eDmvIXS@{AtCy%m_EiPhun65h|fM&A2u4
zeHEINi{%_QMMBb~zG%)pZi$Q+Kt>gw`nTzw1oS}(IW;S5C^@cUp$bx_NRSd_#120M
zzO!kR+XWG7gMX)}P@(9|Hd&cj0!>xxgD<TPO4qLJ$?DPg02o@+Rs}JAEX*eW;nzjb
zTRCQYvK5*FNWN#PY6@S!N01TRRknhUK**wyG0(F$mN84quC_Q!@~lN`WNex8tgH26
zOB!j`2RDn0x=NaLOI%qy-?}L#{i+#^UXpX&9Jdw|uZ<eUsP<Hl0-Cfgy-7#e3RTO=
zC;`2-D%%X^O-gpvs@ko{U!fSYgT<JEb5&8Rs^~<c^3Mcv$`Zn-&;@sFPGJ4(c4Wo2
zx)7mWx35i4k^~(^SwI}?TZ~a(5BENJ{*GCSSueH1z2slot4s(9?%kB0s<QtOmOW)`
zD^)iX5~wKa!0Ry5;XTDVj8hdIjYE4%H!$`9O71TF67C45HyFNJPhRvPxVQ+{{^sI-
zC<KK~%>`_GS($;B_`d{f#VbNI#rU5UfU7<5{5K2GD`UqaH{h1^k9zw6IDL_EI-JME
z>4a}(jy?G5?=?7{6kP5Jtjq6Q8s*6?h~8w*@deXlcfGPFUpIC8i!=_n6t~(B&ScrL
zp-M`$Y|1Jr`L1I#ead`9+Phm=LWPP<SN>oRd#fykaTwO9@-xJFAAURr{luv2H-V{u
z9#6=76hmRhF(G@E0JO#lK#HQCgubS-lQ}6-p;~hVEfn>1p&Jz^BqeT6nvF-tqds<=
zSb!fRW=>QnRGEhwOsZQXTsUloP8Az~4-2~Q6DPB=m3SnnW|y<$xqVqEGxKNkV|P+9
z`p!UncqB8G8c9VqU$X6+xFI`nU@S72pB~R{&P?CDxO_a9y(xJ}M=5&GRA?wZH!-qr
zW_<bBw0>?8@`C6xCPKq+czhImY*1!KC~TAwt|HNc6gI`8DFB{ZtQy&C#!2?%!{Q)g
zrnY4ocC<o`v)WG=9)Q{gI7i-UU9v7RY9&mX+g@oV|0&eAPc=<A(%QbT7vk~aL^>2U
zCn;<bC|Pb8xOqcQQ%O&Q;!1j&#cC(oS#5SJu<pgvcnEn^(AKhzd)m<0<~Ut=0^wOn
zVbir0LBmpoZO?SPooj3V)B-6<S!<D)v_c2i3cX1_rgz*VyQD6_Cntu7NI8YapbZjr
zgHF_uTvXDAV(cKF1OEYO3870_pf;;)yBn*{xdX5z+z1Ybj9L&lJ&HJ#t>-k$*`hk~
z`<i$b^GP&%7^#kH%{`3V9B}+sc|j^8e!UN&f?aSW`EERVXlrH37emf>EZhgno5Dg6
zG~6{JWQwK<i35=nPvptU=54e@A*fKyr>Y{R<lip}9{t{ZT{!M45nYN5<h))_qBGDJ
z><o2V6StnLDY%rG5^=P2dfA$CMhE(mecgdxPe;(#(do86+qSb+Q=SR&HOfpTwgM?}
zpkxIyQH1;f%ARR$1vc*4a0LQNPBFOxl$;7N5Y-E5YE{U}Tp=Yh6_Lf^FB>haKuSz#
zaRt&|pou;5kn~#J#ka{rO9cZ7+F#Ypk5{oO*)U-g@eOmjULW|rv9qXD>X`4gv~9vr
z+T2&%IQg+Hdn8>IE2;Ut^qAR3YHefvdX+3*rh%|>vHPUAKMwy$VW-X2*k1`P!;0gU
zZnT91IMa>#p&($zKHJBRaoOkIn4L*Zjg9p81_NC@W0!)AEQ%sj5oOO?hH-4m51Z%M
zLYD89&$hk`hXmX1lm4!t+>v3Fufco<yHUtZMRrsT^C(-RyJ6~7c?=mz=^EV>{1D^z
z^8Tz4L2!Ovk_Z{5FBh4gtfW0_jjE~eOY>ZRNEk@1F?{h1a{1a{pdQR^H~}?`kf1x<
z36M3i7<*+&xLN!ly5$61q}ZS#uIaESe$**df2#5&JE7DE=OO+(Rp?76v_CP5^Bk@4
znoCSeW&v?yBTIBbh^i<C*}1IH$)i8donBAQ_SpM<shM=*O?vN0BKYf<U)8gA`<m=~
zT%J9%aBgL&x3|OPzG->+!FD+|dC$444@H%?J@Uro-FIN8=>mqbSNWyXC&i_^9`{h{
zBD4|;aKX(_GY<a+EH)m%(2!7Sf$Cwgu<H5!=ufc^$^~I9OTI^%Oh3}h`{Vtw;UPS~
zcO>ekilQR&Berg>uo~H5mlcG1{9T#n+;ZlFx7cRprVezqd-FT<_r2uYM{gh9nD@=z
zwK$^QxVrz*8$+|38{?zys6Vz8dELt|eE$twH@xn+<-k3QD|ji2Zak&@2tWJk$GZS;
zqCrudEsSz+q)x#uGDT&Wl+GD7&$*#GRA_0DfSLsviakVa^!iP>>FL0P#iB#3N)6xt
z3PBte*n$}ZMFoXw#@)wHApn9?N!JePX=H;gFAeDnueq$e^?2bxQn$;$y6kjcW#9ra
z!YGdOLk!Ac*Dz{Q(P@~I&?j+zoQ%R6@UJ2@STScj;0*X3(#bJmbCs2GqZ7UZWY!^_
zt=d~eftqej4s2GLA7vgQvFI=zX3-g8s2&P{(C8T)fDVZv?k+i2A&^ntB}lRFgKh7h
zzdZk#=M@J_NTqy}5oPy})4M;FJ!$zCGrho}j1`zJ6_I|ATQj|=W>6rNVUw^TctE&X
zfmkZ~i9~=Iq_W$m3MYMxSL=jO5>No9=#l86H{Ch~Yv;J`W-K%8rAl~A%_4}HR!JEa
zKjO@@!i|}uC4?#RkcDzq-(seViH~5P&`Oz=C-n}%HyuvcC*fc~*e7IDEFp5taj#~J
zgjvc)ejVxl<k-xis13!2N(~cY$@y9j5!OS|Nm}--Lgj_o8c)FQqWrTH@u~7hv3DUG
zWN%%WpATXTD}PqX=Q7b@W_xr-nC)ROZ={aNfs>DFGxTdldaGI&Q;V-JnMc9kS1+zr
z*bxtuN(bV0D7#$nO-t|7U0n7}4=F0PDVhdUeG>u@1w9@$$uwa}mPx@_Y4e(*u!(kD
z9y%wuKxBo9Dv49%=_>VSYRX8>tkRZ}L@;{Q`ZK7m!bvqEeY>zrkb;FX8SC#7<wd@T
zvSWo#Mv<@LhEbikBZVFYT`PNvt){uAjKruU(%;`d(w~TNO0!}K^(bvFxl)tFUZFo#
zrLL*u%C%o!`w!(8D7i8urSz#z)VhR10Ud`t#24ZF<%b7ZPZFdB&~7l`kTeK5Tn`<g
zU?uDy!wM8Cbp<Wh5D+Ryxh`xLvUHc{%q=H-=2p&s;?8j3#oi<Lj-P(rokQ<=Si5s)
zdR~5O@CEx*Q?r@X7ag$erdK9+z9xTdH~pr!N(y_gpEHl(gtVm3_W;a@s?wx=@%(g(
z*;*7Uc1&@o0(XxhZ4w^53F~-QA~xwo@hDWAqsS{Mp)2JF5AfJD#jxppf!<O=@YX$b
zd@$@CzUf(>+{|-7c{0#5k&h0=Qu$nT{dH@Rt(V<RKDw_Ry<z^Xk8V5~c+qjxr5jJ}
zd-0a-{a=3P^yK8|8{aSIcE9w|&)iWM#OL6j&r6q{hy{?qMVbw{<;Or_>`Ev*f!qWu
zN@Y=IG#$7@N*Q!g1W@6KV+9j%v>P?Xz#F#(cAgcO$hXg=Q<LNDI0lc@1|PbMl}D*4
zFVUDN@)wUBAB~T$*lw}GZNB?YjmTrFEb--5$V3t6X=z>8$${DLp_u%Zv2UA>=Ao*p
zpbvueMy(OJ8>h7?HsK}JXqgq+#Q45SyYbikyWeXxGFD2WrKvBBiCjWrOpJ%&46?!*
zgk9Tev7xX|?J>c9!|SIMD*-eflQPe1N4%)vkjO>T)Q~KuC8+^WyP_`+v@?b_*b+<%
zi2+x^T_zqT7zK)cAP}0gPqR5f6qM49$RCx*zh-Bt<2*m{XZMqh$Ama%OJm|`x;i0e
zrv}T%<U}D1<^VB`O4M!;$+>#>%EJ6ic5*x(HJt<GE^}m5q~<oBM)^JES-Fok8hm9|
z?w>WY2(4^({~soB+fjdDL;Cs?>4?I;Lk`F*gi{FYA=6Pw@O+~jh^E?6(Lr(BToy{#
zJxe*cSeSOZ^JE(@3?i_c6TE9_7b~iE$<_Mo>6f5}hx__EI;_^djlT62RMJRIkBxNn
zcJu_gtnF4$jE=%aPAIklX21&H(vZnF(Ig)#BiJJD6w@My#KrDRqj`DyNjE>}sYi6_
ziCk%MW>m>14WQb<H+6!rTXJ!Q2YIN*#uVg>#e(fb1Nc^R(6-p7x~*2lZc)zBK7yG+
zk%5yQ6dA}flx+yTCaD)@waHF81%#-**n3O+v5-=g-@@EP1_wJkHEnQnaR1us(n2;p
zIo>(Y*&hmOKFu40<<t&sLSTB#{-Qn1kNn4dxnEEGVdty%Fh!f2A8}sqBq8g7EuSx!
zE}yAtD+byWP}l4boa!rQ(&&X1Bumc_tF89ZY4KN@UNyn%T{ZGIkWBu;Jxs~<ts1UC
z@(FpSeyb2@MWPZ+QohR&VhAc%5lGF5m0@kztd;LY(!ZS@vE&yd`i%Iyd$yrm$-lpX
zWq;6&#3vOyr2L$v$7H4Zp9lcF&zy;5QK4LNg$Y3A$WisEP^6rk%weM)E9!1jPnk>x
z)*gpe>i*GDNgB<LW~L{Rij#m6FhP~t8O0j!fo6H|lLpjS7gmqf1OfiBh@&xSHWSi<
zK5G~ohM2=3fe^o|8B;^lSZF*f`7Kxx4Rz^OO%1BAuq@rCKf?tlFw4@N=!ZT-SzyA<
zz$9}QFqs>utYA`Vgt@`0Dl7+<=4P|$@zH1)kM!f<W3nIW)Kq9<#6J&pibLM=J(G0E
z+wNaCm`{tjoI*H>ati;{#LP-EO{nFp<wJ1k=k#<EQF*AU$b#NNEqoi47?cbF;2-Or
zAEsgyP>2(2#>w{!5kdAKE1*+<WE3f7l@lyyx3e>3AD*i@sOJv`)q(yI%gX(sYZ5HP
z`eX6V#(CicF`B2b_0A$OZ#fHBak!J&N7z3oq%3JDnqbAoTy9S&ClRVZr35xI;92aX
zc=JLDt&UHbM~Q?_H$BGjCqLHmC_`e-bYR?FrdcyiOsF$?IC)68e%bLa@sf$A+$JQ$
zo~oE|_+E0koSs{W^Qk98YY$UzE`ZQH8(jT~QU9PNez>w$tbb6#87RsK{j9(lBBEfh
z1UqpLM<Lu*ur&?dK#F5-8Zp@6!Jck6lJimSfQ~SwM9*mJ%Rv4cDs*tD1wMJQt7S%^
z#Z97aOM14xLv;-HdywmzjVU(O0-u3HJ}5bm<LCfZ48=TE8w?f+iGL1Jc>pI>-$l>>
z=)}k%6IBZc7`>|V+7APLcsLatU`~^&1qTp1Xmth2S5ay}h`uQ%3+2tG=_E=GkPzgh
z241))s*y-MB;BkZTTLpOZAP{`m}InUq4=x@(Wp7JONb}g9Vo@3pcG3jQHf=9D7PJh
zUdUu73lFtU5o<~HvO@iV=GV|}Tff?U%bYoRGRTrDTa&Q^<s}Cs=IuabE?!08SK;k2
zl@6%CqYzuk*NmzGAFH{W2yY~-8t_#8t)$c+NqFJBbfL^2NkCr|3amIS)ubQ@Urw(+
zE*c{)Yv>isLQ&3Ewg!|2a9;Q$$@xQAURG;{A&^Q71T;aFJI%P==QpBE5v==#R>(ue
z0j^UGggwxt$60<E)BAs|(O6In;G@kBVoc$7&k`wusW6;4J})#LXg|UQL&A_5o){?(
z$U5b6D8hB4>;S?@3IjV>b;-IkmrqWOCVJsU>F_x0Y;z#L7HtkeFsk7}FP^i?+$(jb
zlI;-xuom8Y_)LdyAQTs8uddy)UCZxI1prodzx2V!cdYGWg)#uEY4wJK^}O(W5rY_C
z0xmKjtw^`%H%$(dxc4ZaW<ga9+8p4zw8&-#7EZokkg!U@mEiLHTrNX}f!qPN-`9bM
zIst1eMJpA7bD1U`O7ail6QhyX_(X5e?e7kTcfZ?+7ZM`_Lkr{KXfo0r@b`oRu`8c!
zmNotZ)SzlJI@SI)^5mJzvm#NR>;p=a=XQf>T?;dTWyhO5pCUJ&hZzzzbK~o>1`ooF
z)k=&1L?g;nrp5n7GnC=@lTW}D?vh@?kJEIu6IiALss$Yq<3YL>MPL-VVc9~)JDp*Q
zKr<2x3uoYzfHROuE$R{$&R`JVQ<8O+uNds&32$dCMo^-X1YD%1;`kdm^6#5Rc+#+^
z$MJXjcYk<U`R(5OZZvX*m8<ViPG1e;ErFo0+A)|O>5cqF+q&Daa^=nr1*wi0P6rLA
z8v|6>t-^p%RUc6a<Pt+z&}&oBk20V+!Ujc|6eOFW1|59|moJPbqXj$rsoIy6!AEC5
zd3_jJ@c@$|s0JfrgR@vl$M*;yqWh1ljq=?zQu*pGW`~cK`K<?}-xK5Q>qKnOf<vxU
zNIi@fsi2lVq{~{_t-^SRFka@<h7F~lh^~T@ZRotK;&C;6<WX}wD>6zEuA^2o`eIwX
zakIkFHlPMOZj!<vT7(}@P?aXi_u+2deV%#di<Chm@?{kqP>nXKG%Wowr;V2)QG)>u
zC%g3oaWpp_{L@AEkmG3`gbU2ZZd(l|A7*1OgsV_d1Lr{Sk_%*V70-YmmyvYIXb5Ez
z4FN0R$0kiO`-~bh*HVLa{EP=TV;WQxH*hsn3A-Mte#m29yWg!zt)oZl(F?hQv~nyw
z8kCm4BDg7;=!RWAKBCwWkpwp-07pu8BX^kHDsWR6veIq?90{U=6?H`<>@4zCD4a{0
zQxT4Y1Z)-ARHZH9SmV4@Y)zTk4I6S0(g5vI>D2Vp<iyx0RZMF#5LJ(!vv5LoN2A^E
zh(vK5Or+=P&uS31BIfkkrnu6AXa)`vV#h`|xnc*5bxN*t=98<oUc(Sne3gn;)mCex
zMpf5pur33xpYPk+eQ^yU)nBW83%VatJ0v~EY2xmp6W8RR*n{{-g?|(~(Ep}W*ho52
zH47OSjuLnu3LIHFX&K6ETg73HKe+#+&w5|(H<si>@{W1t|K_iEzqLF6i(l|PN%<T`
z7m!}YM+XhmbiN!u6wjCY-?X>VsAzAk7!{o@2Sn#>CyPV6_04O4w)UUoto$PLcy`|@
zpW5Bt{VLyel+UqUr$>6f7!g$G;<0l0P&`(SMl`_WBWVn@*_e)%!@@6~Dn}0W!j=SZ
zK*_0cq9yaX*J~u8tQas{ehkWrO~z6_nS9vFCN`KiR}39n%dVs0=vAp-`ZyoGhxQN@
zb1t4HCvFr^lOrksrEJ<Iuu2Q3$pP_FJWMW9(o9tE6c`D3ZFp0?VJp6dokR$1Bm8hZ
z2BYxSAjX7$ad`3F6V=FZ^k_|ju#E%kz&DO5>9c|%Pzs)%x<tE%6Cc=VOYC$sBE=B)
z3wEp$_6rA!QZbByIAY1Xu||zzRpxeVw*VcO3ybZmjhpdpwTE_!smXC1-#j#6+9jN2
zmW(-wRcpz-SA?nFX@sl(M<wMdHixTM8}Jn!F&CCTB8b?ARaH1*4j+m~%n=cRY3FMR
z#|4{@m@8RS!`KhR33H+m+Yp#`VyvkKZTOP%Nm6)taG*CNa#gf4n$=ii@((F4g)@YI
zzmhyG;{+bv$*a4y$$~%~7oK71OM)!5#V5t@XqlCnCWP^|AsN7COS3a9iF$oTGq4!c
zKies&Z-n?W!_1*13v)%ZVd_7^3Wavy<a$k*WpiBj1cSkFa5zR{n9jAT!BgfqY88>}
z6A`{zqPYld<VbQuM!!ptt-g%zD{>Q8FOW$<2_j|*Jyc{S-lme5>Nlw(orATcv;1L1
z313~wHBCupKipVf=i}}y!~=tnNeL9jqm$rD?yCH*&@5txa3V992Mi(HDPUMdLLnU;
zUUoX?t-Nuim};^umsPN^C&oudViD$$rzoVOW)!m4+N+2<ez}sI<zdF%zS?UMy#D9#
zp>zYQ_$^LcUnk6I4Qg5sXgeloYrd)Sn}W1-GB@b}64J3@mR};eGDnN~j6L%P0C;oN
z4ua+aE?V3PT4-M&^YqljI4cg^E#bsy9A_9r5?-kn2f4X<6!@&gs!H2PU;ltF)^7{m
zG9MZZ1&2E0A)7U|8T)D_!QrSuMx~NWJAhU~dCcj7UAYFyVN8MKBhVca(z|pg7BC&L
z!tz0=P+$~<v`Gri6td#K3lNKvk=BKhmM2QIiWqOpQnc$dhKb6aS+AYYEMke(XndG!
z7U4u9>=)$|7_MwsP6vbOnLLXkbHte%8J5rc+h*@jU9muK_u8C%>+VPT+H+$$hvtfQ
z_k@NPV!LlsJ}b+Cj*fxeNcZT<)teB|YHRNp=nHrE%+PR&9@9+s9GCu3cRElAte<lF
zfGj48OflUFbtJ%KR+MD4-YdZh)zk~*vay{omZbeeNs7#Lc`vNyy501adWcjRPA?!p
zd8!QZWSXVgUqDS&8d45w>jMpG_YBZZm8PUG>g)()9IjzOsZcwm_Y?i5$ryop4d)T+
zYeO-!p>&FdvI!SxH()Hq)|%r45Oq_iYQ>#III*Fu8xoW1_S0MIl5&tM&4W_|iRZjP
z%{fi^M$OVO$y1LkO^^~vNR5d(!nEEDi0Sl#5o0DsoGfKOq_Oct;<|iD#el%G1@3Fq
z3+&!}2hN3Xz*2$#$lw5S{5w2tZsy4^*MEb}QuK&We&xm_E$G6J)L~MK<bu9uEbzQM
zT)D*O$`@<BB~HLkp6x{k)p0BZl6;w&S&$J0dRLpA@+VNOiG0l`NDgFp;kdhMPeMlC
z-g>f`LvGi^#6*5#CY>w@63Xo&A8NCLq(r}LPN;lDXz%rfi%Ijm_A_MZ&dUD*|JH>3
zHlCjALE5zxhSJ*$dj?Kdt~!|SYU~VlG?PU$+%Sskh9wJ~k^($~s!BVw$<1s#GzA{*
zlQ_GPpSr-MS7pm&m6lY-q_SnTXHu?8Wy@;Mq$K3Zmerm~rpF{kq^aa1HjM}lW$O+f
z5GBQ%28WtoMtfOKk_UjLY~$%Q`>>L>$MwJ<jG@7aL4flyAN^rpw5#OAr-0uNuNKQ%
zn#pHWmf?#3BPS@&ij|NDEVFWG;RVM=M_iW=SV#Lt-D9!m=f^U({>{`gQ;uYpe?*V=
z`_&^iZGG^*zMz)d{hfC2cy{c0ho>h;Gj~ppezz@j;!--@hkzvG4CpczDJ&)Bp9|h-
zlkG}ew%G@v*c5rgbQg8p5rx7Hi)e-$25(H0f({iCSQnI8upvH!6Rrq{uk6qgoY_Wr
z7pl-nC$j$8v2tRYtKThIr5kb09)68js6n@CzefDjpj)-E5p&I(#^$iwP`s?1BuJ-L
zcQ{4JFg8&~U#{NSVgcI`QNft_-I@;&Y}Xx$Sgny{1ZfD?uyvT&4iO)!KU>I0W2JAJ
zU_SXMbe|`h;6UZaPhS12=DG0ifdiS878FzxCR%&CWv4YIYtAw3;YBVq-E}c8#0}I{
zWzBHI;KG!oIaQ}diEM6o0g=cCcNOuW)5)uU&un{KU_krHHq`8;lpu&eQnwm*OjhYg
zoY=5qwO=G&Y}m2dFH(|4!;aN{kw}{YEoi?jCsAGE5F;-ZI=Y;it4LdOM`U!^cQ{c=
zE}96e>$SSuY+z=Z8Sp+{y5=J|GauKZ|1WcI0w+mU){90&MrPzzS-DkaWo2bm<-XOD
zOI2m<6}@*?_4MpZ&(L%a!#E7XGCH_`b4L*5B8$$&QH1A!B5+3qLFbObgTcoGAIf{)
z>r=ccE+`^TuEKSJAA-}>@Bf_>5g8d7kxLK0-~0V8*PhBaC*pkPJKy=%|F^tMWrfSz
z%V@PWxiq<0DHZbBdCCg`6H$5LBrL{g$y{E@GGIpK@xL|K82;lZyne$O*7u{lU%dLE
z;XE&M$?LiR$r}}#!oGxfDC7EBG3Z$neZghq!gaac^w$Z-_4or&MA>8bgU<DPFvZ9d
z4-Xk3i2H)xppWnf(00M&a=(NUPSH^z81!5w?7sEG@C10@e`PWtvChfb5g2clhRrN=
z9>$x+?px?^j5mwjw-8mwo5k*1i2JDtKo4~%g1(7C)I~E}|7A{GUWjHQG~v43Fw%sI
zg2O?3hSP*kbDmU1Ju*HJyR3K31_$(hBN9wUn@m4xrB*8zljYWa3k{oM%~)fxRw)-@
ztISNxQ8^OL#UkMdxlf_<qBNon<peH<HvBSUoj392x4d9u>(q^fTwy~#?_Rrk<r^a$
zI@g7FzI1;lU#iXLHnLYgJle5KNgI-O)d**#FMl^Ko1LyC4LMvkVSd?6vdf0HbK-IY
zJJ~|7V}9=poddi*Xbw7ZL+1ed44Q)u+|W6Od<R`jL+2Rs9TYO?UNzb^u2I%>)eKw<
z9s5n=zOl>^1nq+p_c_hQlmR;NCyfcT`%eD|n+e#ZrSC7@d;H&IVxAo~P4E2|cAQE(
zl^4~;9dvS~E07}y54Z@U&+j5+r&udb9s5#jt*k6ioJkt%ay<IvayH9q5d{63yur98
zf9|_+O>P=DBfJKbwlVGvIr0Q{7ZRP+kteXbi|Ck+Jb~R8u(R=eXu!^fak&g9qVt_~
z_z}7Y&kmbw)N3oP9^(2ViwSKu^~=xtegBS^VDfogg5r%ctEa}k1aJ7+@h?I6gIs5j
zUYbW!g_~SY^Fx(H5)9z@K)xk$(sx=6PVS3=AewV>=aB8sVd~x4^NU{_h+lNI^boFC
zD4_8C2PXrQK^P8vi_n)L3N_cmdZsW33Z<O6-Oy1dCppO2`e8hbu1phG(79}4qGMc_
z&tuAl&6IQ|pU0GTUrDF*c}!{dm2_^O$CP$oS;Lffn6@W884QoNJz_XKahdPVA(~3{
z>=em~JK5|EQzkh1-JPC9$353Ez26Tdm^cisXb{DD1?nZRBY=J2#lmaA!JbFK!owB;
zwPLjSjqAL5;zXe^h4i@-H=Vfg;B4V|0k8y{8|$l$m3nn5Kb1plU}idr0~?PQa=9r=
z8>3dU=rpUhd;|U=Dh{8A2Huzq=W^50Xs{StsMT_=d&d<-(r@m{=~OV|_0OkLIVp2}
zQt6TqgD>)!aHDIFOQi&5hojaRzUz?plo$x@iT;2gl<a<;B$;IX!KV$w54uP?hZ_QR
zG9lbkV#=dJAmk4P{BUU?rylO22LyKnK{&Va5-L!HKnjJtmnm&_{V+BOYdLr&Iw9$O
z)5vdh-4ix!CM0om-4oh<Aqk`Fp3v?KNfcf8gmzy@qT;sxO_>Y@CP&&7adI+vnePd?
zl6v-s<iuU$&h7Kz5Yw*1%Zd+no?pGkGBr2`DHJl|^?{JX_e1cEHoI<zH;y0A=i^8~
zIez2u3+K+{kL6Jtx&c%{DwU1r;@P=OI+aY|@I-TkT%7VH$|YSmFsM+9B|IPb@V%v6
zG&LoMw=1)VE@VP(_sQ}TW*PDAQ7rawC>Ry9`CuSCv-sO%+3ww7g-0j~ZOO~ULzLjT
z!lKVr6+ONj{9MQ+((+&|zxXM~NPk?`9>*Vbk<frv;zGt1LO|#t;Bh}jaV>a^eLmM^
z3bn5v2K~sMSFQxSlA?4_JismYVdEM$<LH178)x@EI>*Dt*}adB>#%Wl@1s+>ZK8|c
z=keRn1^7zJWlk0jg=UaQ-FFx*%Qyf;TI8$Y&5kqh1E8i#B}FN<OMvQ8ib{dUFQVZI
z00_j|)aZ6Rf79Rdw1dAJfn}wyBk^FIIL6nJ&0%IxN<6k_P|GizLA5{HF(}d@!J*{Y
z)i{*Lk%ltpka2bl!x(hPI6H=63_4_--TN4W4jE_nKE|Ntag0Oz=;Fv;X?5RW^ml<l
zk>pJbYP34gIvtD>;T0d|)kBv?;!vRGjl!YaopQzXFu2GsRE3W8eocrX=}(M{0r!&V
z4V0kwbcLwpmmm|O+8;gI<M^X4MA6jB<RgdJbR!`eElC1Oz>DBIOVbSmc;YW2JwZrP
z-<1i!#QJ<2uF%ovKy0jU4&vSC`yIr`<IG|A9mLb)%wb25Ma*%=iKfATH`q^8wDa{{
z<|HLRi5~LOaXHSXGlB%PNl5tg2KaQQ-Ep3Y^)IHRG(FN_nZ)CPbf=k+-bVpFr%%$=
zo7q||5U6!(>&=xwHBjO5JxU$wCbfhbRCrUR&sb3f$#>^NJLjY8v+HjzKQh8Way|T?
zXFhP|%++T{k0fZq9s#_c)sB)ysGIZ=%P+&k{kB;!F@?k`)<Rq#nPB<|(K~o~5~Oai
zX3k`k44VR6J7@|zNW-SU?hcxQ&e5<bhI|D@1BOj8<SXbTZuFBg0BQw-_YEW~Q}gK9
zoG_2)w~W(xcH8K?LK-9gH<g>788S=ntrK#bNk2H*)m74rR`*u{GHKC|aQ%d@^ZGHn
z{l~eA43GcUN4t_7eEs}#`l;{s<<x<cB3A+uXtn!DcMXqpFO4|d?kb>@w4uEncH!8s
zr(-ngc)Rzr1MocFPuI{1^LTz&IFZj$-fO1WX<YEkNAEo4XxGre@QJ?LR}rqE>$r-<
z58gPl_Q)7l(G4Hi8RIG<fBptQqGr)c^qllx`N2sWRW>u|J6(eN4F3Gk2Ha;J-9~nN
zWD<|4eZTs&3Gl0~@STP(iCugc2_>=@<>BP?;GQ(i#~+6OOaP7xv!%OUv?%wYMS8tx
z*Ed_^uzxl>ao0E7y3K5K{;qE}yKke@c!uZ(G_=Q_KjG+hy2)-j?tIer0Xu-L@Cfq#
zCSPWhxwZHvaJQMUA@Ii8e4*2nz5XocX*F}czOzH!eRj_6oIP<Yvz-B4HP8Z<s?hvq
z)2V4VvVig!M}bvLcXb2TP<LmsZtlu;ox)E?Lg7d@8H1NQnytdi{ez<)N$IIQcW5FN
z$asC+!M!`?0VUV=4BA+oac%MgI-|R`r%~-#5GRyf(Lb>+`uxWEbb2C0$J6?wR~wEW
z_0xH_&o$|m71a4YCio|O6Mkf(ij$hZo0T(9OemKLM`Qgk5`s+@xDpN``o<BONuj*n
z`5HF!(FwiY`Ru-r&gk{dXZL+{O0Rc5yYHhr^wt6U5t{Ia2JD9z3I#6n?I6cl&(@Fx
zxZN@}ptP71+5;p#ms@!hJ8pS{X|tUtS1*n|FR=9w1)3bzCkWv<x30t1wzkq~w0S$T
zb^6$TdNU26*T%|Hy<EyI%)qBT71zAll*(e~)mE<OK7MT}7n_Oc?(B4!+}Vqx3j>$g
zk-apYAdvnMl2t*+v{mtcazPM^AlDgHnf`oFuCwW{Jl7e2po&g<%#`cAtf!w5+Ocp6
zfvw&|=Lw$k73@uP9z3dX*guL6?BG%BHlyfR4jyIqE;@XJN7=oL&cP<A!LqfSs6p9P
zS2!_vg0evvw5qZj+nb#=;W%Eq+h)pTueZEfZZ9u-OWq=PRl}1Jf+qvM>TZ{bQInC+
zKKO!-sR!@r9R1D+J`Cv}pMCb(tDhasg8{Ws`c0IZC53h2q%@&1V;0P~1ukp%Fr(?O
zoEh;4xAvHc85=q?PPl^D0RecZf`IsGH}4)vu#_Gb>Sf1a;~Izk<A@=Lja#=FM=UvP
zoZb6~DTj@-dmpjow$574bYW?KoGhF%4H6-WqA{jrbT4a8I?kZ6X06lVJwiGsJ16#b
zrq`#}pmiaow~+6FXbJ;J0@?Gcj6>0X-3-3La0EwX-9NS>a=dF47T&c&$dBTYqxc|l
zdwH3gupy;1Zhl^cZd4X#Ep!X;LN`Avbfdg(-{m06Z(6MMmXxIaL8vDhG>G`Pe-NsA
z1`Q%6?jJPdP2@}KA2j4m#P&6V5MC_S>$}fXC)e|t44;n}e$A+mvl+pv<a7#BWgY)F
z219=9m38_!v8Tc=;5b&-C+3!xsK{<<W2w__T1xFEkgLvWE=T2HvnOnnvOC=aHoW}K
z<ooKzws|4m7d75BmE4VAh_`4I;E`6qot(p}@CJ>sD~cn|9W=(SB90h$&=|Y-5DN|(
zWA`3n!VYM_EADJ*;8-=6hP>_{`CY5IBQ;>GNXDN4cjfb=h|aM}?pz)Kpsfifq*ro&
zOA>Z@2t`7!n&|hCA(}yYrjcu9`!l6tsXf0a+CcoGo1v={n9B={4VGF+c;_g}b7>i$
zP!05YB!aj#n)_+dz|qEnX)I%jHAfo@=CO<=79DMD|9h$B>1bp7-%D)X>e5O8m5`J2
z0695{Xaguk%)Ub-1AZU!YX^)(n21+EqIrs$+NwHWILp7LePT684pZpzcOjV+gk$?#
z8_BigTD!S~>O9ourNC=bz_6#rSArdeeJKx^S!(FZ{(qZTdAVBvjT$3yeI^}QPgCa(
zWrg7Dr;~qe)Io3do|Qk)YNAt3pY-`~EikcC$hR1BeIgQ_y81<48g12?^*ZU5s!=KZ
zTUw3ktR|pM)u`jwsIC%hxl9=6dLgDHu`|)5F8AAEq+^US*3PbCr{X%_%TC1zW9{Bc
zoV})vMM?O03nu1P&4YP0jxDvA3T$uPog6epuO`imyvuge=tdru-*n4vn2|?l@?_*i
zZP4ULRX2Xb3@N|e%f+^3{?a{a;mnCjy^+8A+g1j4uK0fn9tc$YOQC-kMFadhwxVGg
zW2XSvDjKFSb_#&4qG1|i_a16P*QaQh#@M}w>&IQR10*CuRu7^8*N=4t15q^VhyjYp
zrlFYV<Hl1<E~?I005QE&z^Lr{G;0^|;!*hYsl%&J4rfpaR@^?b;#z_#{sCvtL>zc#
z>!Pdx)l3E=xN8aEl!jVj{?%*xRiz&!ZJ6l?T`8#uvf=`OG=M5#Bf32=hPzUPyFwJ#
z5B*-CqA*$95%fGy=jR)J&l9^kKi@w;v8wa){qqycIX~Y&KQY`2)~ofW_X=JYQr~UX
z4MoUUHd<dgjgTa`c!^v<U&Px?qcr)LY@<VGTWv!N5L!aBLNF)Q09skGCe0=1OCD*;
zdKU*^o_MC93`jlLC*na>E!Jg#omejU+U)6CtQe0?q^3PmW+nUXE*8qC8greFyj-oe
ztsHp%rl`L?8=sqq$kR$DE6$qWQMBqq>388F<9c#O6PF9{kZr<4*6Q()nf}T>WcY(y
zd(7k^Ti0*D3DFfq-(7ThKwcc9I@+fX^OKD>+Rl4LJUQBEJ0BKt=xC$u-c9^E+Gx9X
z6Zaki)!4N^jB1WPu(Wz=;2gagz;IvM`Z{mLv3_Fx`0h4z-PHzA3#;XPZf@4pl7oC{
z%x9)m(VALvjAa6f;oim^-yB8gR;;}_My-;kgo3It0bI$Ba0&o344fj0yib(j_&pmi
zH0EI%_N0lLe+lSmqVz{admMk%W$zk;n#5L0uGfdUwjquK?3@P%*g2&8jySmAG@}zR
z;^2PUj1ItvgZtmi)Zgn}GqL}^WiU7Mq<(@q*k)<<#NZjmu<+DUDisQ$Snb%(R;rWI
zics>|Ogc0jO2#5!n_yy6XZsG4^C@DVFL6+-HCS=u8G7MTxv+fC4T<`q0?1yprTNw<
zb{<%NZd1PUeN&}E<F)8YL(OT90wY^`Pid^L)y5`tP}Lkn|29PbDnx%*1+n>+IY!LG
z+}bdcUu4e`Tjfwi@}v3<f!h_jXZK35hb$Uz7Nm#q0E`Lvhz`bhvmoKJZx%Ws<IQ6C
zEu?{uH;di3(1GhfuQnsw5_OU2tlOT0$Vx}<xYKZMeVT@|E5{!4==9)8dheVOfR8pd
zQYk^$IJI$de-~#D(1XBEuNDgnbKqBk$|c|<!2v3Ftk8{kixYtE(SIN1>e=kW)V=yC
ztM+AQp#Ces3O^`b6&k`8ZXQ&55u!*e0ar<Q5@wPj`UR-}tPTNx^;!Q4RAcH7zb|;?
zpzJ|<ydVT*A@BfFX#orEm(fxgQ)y6ilr61XHf8E+|2As7Mwtfs&Y)@NY>hGv6rVxU
z(BT?onjv39#2jUsfnS5lPbcakGesvZgqQwL=an&YLCtP&H=Ba6eQNupy4&1pZf&e%
z|5viH0=f_t3zWsI0c9qU2Ug1GJW6>_LL(|>r^d--AXvl}EQU5*h~z;ObUjP)taoSx
zJ#g&Y4}DJ|JT*68TTjjAciZ`!THELMR@9g7NON<``-_F#!|!|b%(S{Lo;y+Xhl(en
z|5s^J@i%wo!k(?OcU_Q|>I>!RWCp<BmBqE?^-G&_!oOCYE|q`tg-dNwYMd)4693`m
z_iSGf8<ory@JkpsGl0caVGpU9U{A)+Gmu5`7(DF(F(?7PE<_4bY(@-N|ElrxdF0EY
zT`F8>UQfv5MWT=-On9V;2f|`d@OXos2Uvh70Jpl1Z%2tYzRQ!WwuTjgX#Y0ilw;3{
zEU7_r5~q(nCr=P^{7z!~vF9A}owNaC&pGfr)jLMp9z!`>r=|wOH;SK*!v6l+nk?_1
z+dq5q*xKIO-p-c1Dz_WU{CE^2;iy(5quCkH?~sUp`QU2~jy`$)M}^@&Ue9rnu6_I3
zcf@x{pAf>rys)me6>^NB7p#ChJZ>R3(B;hK5>b#ViXHKMBq9ir`N-UK0z)RN9w?n8
zC_1r@LQYtyou2%jq=^g?676GWm4}{a%od_Qu=c|*x^sPDHZ@sPI<7U(iQT!h_|5oV
zM*_cc>dA-iz2T9y%7)K(6bvk*fj4kc#rNV;S`c3LObBvK)WEq5xZaru9}V7Qpa^JR
z$+njlxpmOp0toKxF`V8(&jC#vhj>Alj~0uCA~mJxMyjDd=gOMw(_|fqx>L7wUVUk&
zJ(r9`gQ3vePAOMfzhOD|%J+G0xaHIbUcFk$mx9@uSmH%*-Du`p?T-oMU;B>uQ6`ZJ
z!keCnQue2|m?q`q<4XZ)N1bpU7Cb=hK=B?+CzE9jY7`Y+JV%r&pw(9I7~pLV9fU5|
zvMd+mJS`I-q}1iQ7lhPdvEq#Y9{sS>iW%1pT=iG6Y7b!hA6NZU8a`!$?Qdb>y!IQ(
zv2F%Y?*>FYg2t3e=XSeznKHw(G}_L#dj~Ph>S3eMepXSGvQpxUC(v}83T6iae1=yo
zf83b_tW?>72*kxD#>IQWRW(sSt$a*$DIH+`M6vOb=oj7K1k#>%(Wlz$VL<a90L@eP
zYSH&F>IUgNB6@>`E7Ajk7{D0+i$N6)xf4RI<I?@5d;OEJ7TBZC0zHL&1;ee^KVzI3
z08bCV1YEnjTN~_16$<%00dyxyWl|gn7C~1hIyhgH@I-$nW7X!cA(@p)l>9rE)6v9a
zBoLhlMq}~l)I>EJII!Q7+rKZ9i|w6ld?6HC@G8NXa2OKl5y^Ik-kLk(ZM9Kt&!tV5
zS*dQYhgrKdWIf!<4{8syGRP7Fw^iGgK?b)D7}d+HC?_Lk?W<<Cr&eCv=M~H)d&<1>
zeK@dGwrooaT~NJO`X-#Oi^5MlLkg2Fs8)Ifl$X+8FWZSJLgQv)s=-GX;%VrRiz;hO
z6<iF~YgKAZl_JMR04;W{!2De&o)aMytx3?|I8x#c9r5n!`v#E%osd5v5QzIF6-e!F
zA&qi2=^%*fkssTvAh|^}&4y>+%?Pr7=!HK`bX``cFX6IrH2WTG*gQz;T;GFsGm?(h
z_n_U3WR&+kXg4Dv`Y$>z22y63f3FN2TaGqA`0=LYaV<zO)r-ZRjn;}j)SGl~-KkE8
zpx8-HFvEg{EnsA<F^huzqUD4&pLj%$B?yas_pQ~oXXae<V$;|3E%ZRK%U_9K{qkfa
z9%)pbM$+Z#y^Ce{-{v_MJ3IAA$Njnh3~cd*YC3|QT*eiJx*Y)YFU$kr1rSh)DL(;Z
zlaOA(+TDPrq5zg#yPQ2Ntp>+IST^ET{m(THt<TY3_dmDZ_Z)3?|8xEG(N6b2*FPU^
zbj@)cIMU1P6Ih%H>Rx*A!_A(DwM|Bow9QVd0kV>#B%k%dK~f}XUp9+;+yiB$+$ohi
ziDV~94ogM1DLcJ+C(;Jn;oZAf_^DR&x?dgq{^;zTrPM1Y?wt;_IUATVPM&^xv3`kp
zKIYPErCeg6oh{}T7OL|bGrMP&*8YJr#Fv6Ij1i1vlV6tpjYC6=KdMg71Gh$)MK1<$
zghZWThyhAQPA1b*JRU6^$2&3b#s$1zGI`DIpVm7kn4czQuzy<bo?w2OSi=5kySa%m
z?4P!qo7e+>0m3Tp=Hd3P5{Ti;yrYC0l}m0n)3=9@X<Ei;%#t9u<1W}SBtpIJCwOD#
zO+W)GBPSa58@jqMf|QV2iLlon2%x$x+o@mu7I&Zx6dKaz^i04v5eUX7rswmS@*T5R
z|3vej4VNQla8Xcw$xo=EwCIzO(}zymInkqu4)px;q5X|O#fKmowEX+wxY3k2KcokD
z+$>AFE;nERg431(#6JTDP`tSJ4a7nN2K2vyxM;wD{x=XKwTCYnTJSRaI;QWFDm&t+
zX3r>%nZiwUTZqIW@nRtxEd-!=7W*!fuF^TxL1jp%qfqmh68u&Aqif<jEH{f5_fFn5
zamVBnv708(e?+@yrklQ>H(f6}x4gV{CVo%r9sHufmBX^xQo1rBY>0npuTI$9z<#by
z_?S9DP9^VU%AIT(?GyUOVDkozAztYlgZ&#chS;TV%#im`;(OniA@AW_rmIv67OHsf
z>#9~g-^f%e;<8mkZE+gF)E72bhI+24FCz^Dml0izVVut{su}x)chYBq<LWa^oz;w>
zQFI$?zWV^#WJ-9~Y#ex0lEQ+p511TivWNyh<`q2vxbh$dY^bm}l!l%+jb>TX3)2f|
zz?c*glvH9?*vQ>u+}iMtAQ6wMhCRxuTh?Fm!dH-+SND&UPgGNdQ<L0Ha%JO%oAR8W
zc}U>IJ*ZY6Lp?P!!+w!@O433>xS$>yz77o&6nQU#%k4#iF1vsgMR$>)gA2BnwYQm_
zmF3yOY$3NGr{x*mc7^g_%pMQN?-sY<@pzZh$9Fv*0~YXK7}$MDSP=l7O`cDrVW5FA
z>x=?#F-rGeGJ(*DTk*Re&?*Own}FOMsBPixQPg$(%({j+4ewqd=7ASgbS@*P^72X<
zRh^Ti$)crK2W14?_v&yY%sb5eIeyNOKxW)=W>^g%)K{3nJqQ2L9qO&j(Lvx68XzG0
z^#TwOU3L&d^2skD1)KFW()~i@6Z3OpbADb?=F9VFlAz2f8Mfh3)@a9qQ|Gw0PjN5L
zM;%wi0qKUV=e_3jkPAUP=(+$ry$jM9*y|l>J#Yl@#z8%ZOpfajcex{=;Jl!&Bfxfp
zcp_E<9!bJ2%L#SigU=8I8TkXKs`?m5w9?w1fTcCiF$e>Ijv<#95t0BRBn;)n@7GYN
zaC`B}tqvk0I#5?1pp|tF+u`sQ<nw_*zMe<^Paqe-bssM=_$tZ=rlW2_D{v;(pWgY<
zE<skUy`{Y4L@)!V%9#g<WGS)B18w2gpW#fvJMO7{ynyU~#@x2N5G3BFOoYH?3R1TM
zpxEw!Dg1cKAJCAMdfAFirJTR0E>tRXRx0gEYk9Hv#DK#lnOAr;4m00bL%Hoh^TwFn
zPj*~)G_N~lcpC!o%dQ&?{`)6`|H!o3(O_(VE5z9a_W?4c#QR5LJ<h|s+8l%qbRCnZ
zDuk5?*Xm;<%wx~P!<e`a_{N!ue;7dauNub0I>OChCjO524Gr05RoE3<>SPb74Vl8E
z4kDapMWOMb5C(Y8oGK3>aEV5cA>RX&W;mLO2@T#CoE^N3P-?Klu+vEMJ5N(u09vkp
zPW0v(HXR&2_&5S+F+LV33N{}Izjk$Pjqp>}cGrLto>|Sb?a@=BqoSucZ{_Qw6X9r%
zA*OI#@CS$Ns{>5RuwDKWv`LN&X`wCb2wze|VGZ;<1?!YHnZ*1JU~hz{49spITj*dW
zDDq=qCcHljg5nc`*FWKX0Nw%I)0E@^X^*HJa5Dgr#}Q4`8!hwoBW5^GYdhmbwX(W8
zJ1YpQJF5U^o^8*znn($)l=E5cy2AovKxd9nicT3e9<PF8VF=dh(E?=QyeT&Vi+Lul
zgI7!>6&<}|;H_amR``^eMUGi9Y**f^VO7iv72!r42~BkbTrbxcaR+x1Cwlb8D`XcU
z^02Vr^)6Hv(4fsb@10}n5U>z5++K!-pgYhVm+J%e0pTC~i_?9mVIB-y%=<O0gB4*z
zxT0Rt7ekprO#KbI0$7iMSkSYa%P7UA<un?+fWEQO06hQn%Ji~L`8?%54lAE`T<yE8
zCG&sbxNMs`d1o4Mdxi&8^1`BUyLt=SNweMt*eY(vP;QhSN$Is_{M?!;6oNrPC@dD>
zz7FPtxhyQPX+1I$)Kfk+^Kt0LiY~PIS!k?ezv#F`Yh=Xkrsn<(7TF|ga#46I*Ku09
zQHhVYH7c3)-Rs3bm4s%Ab_ewt^2{RDOm|q{*({l**~M(VT<kSY&DOW$hMTn)M?+QD
zTAU45lfI&FHT88R)AbNIMtvqL9o*}%Tg|1*j!Sws%9WpR+*7Ji9?GYzHhCG@=O0!B
z$a0nf6nd6$6HtBamVS1T+y@(0a6!}34l&C*<C=c&0XFQ|4P&sT8`w-@I~11e$_mxC
zu5?zA^qgEyF6sIHs1HdL3aI`|)?;f%SlL|VI`lC71+QVvYE`Y<%gSdRDcHWtO@*se
z$=b+MCF=+Tm8f==`~dIbD$}M`4T<VgZqOS-9n@n&0IA2lbkIb4THVsdQYGh@gD<Kn
zatCys0nAiF<s@ARmdZ&cLwV30DseXsXZUs2w=b<7+<14jSlf5sG37`uQ;FnIzLTgl
zk`B#}9e#vTk(-Vu2juCMk($RR4H=@HHnIc2WcPO+MYba@s!1m|k+~wz@wi=KRd@l%
z^;7Ac^TNp&x6h;}U5vM>H&ev1hVZg<fL`{L*Mx*1^hFRJrDaI67nvXC$}yZcXjTG_
zDsD$X;5Q@qY?&2(mB`t}BC4ho3(HEdx!Ud;6<?a;?mg99HkLfFtSon8v7GG|dQEa)
z9*VruTWObdp<Bo1XX=%1h1at^{=NSl`<=wcZU`S&{ZS~LC^5vs`QD$fD2Uu&CL=wc
zGrd{p^c@yM-t2$}%xUN}3#Fl3=jc6a+HlAmQaN<8niUT6faVLlp5Bu1-EMV~rWTwQ
za(DfrqQ90-A`dI$nZ9E)RZG?9DoKyKdAj)L7K*>}eVW5mLRz=iHzPG#KHp?gOs>pb
z{gjpBA2WQYk{}@4>~-RI*ooRvH$zb1MYJguWVawAfe0DGkT&bA>zC^?MWqpRAr%@f
zQ#2XHu$gjUibA$LDBscZb&TK}W%wZ?ACi#Ux3QtVY+ouB<{F`?`oYrecir&Xv-#uE
z;)!b7(_UG<XG;#xRBD-YbarMjb<bUQyzA21_g<7%&Xnsg6NPIY@yp^jpy)P8H;Tg>
zok#PhdNF`(IMD_BO(M4vLS}9eF@Z-JBm??E!8?5kW(M*dpdvB3*%HoItAbE%R97%t
zrC3Jwi4Q@<A}eiVc}55{=Q|yqm5kldbC0sFL=uY;=oldDK>Tw0%8vBFZ4LEFX=8HY
z$9HGbfrUgYomoSplaK9%HjgEb{!7VoUnKJMJ-1Ch{3ETEds|NicfRNWBKPD>Iyp7f
zSUCD`%RdxRPaXZj=|-+S8NGImFBHzfoCwf87`PY2|BU}DU2A{<uamw84XP@fR!;z9
z4hc8lUEWJryAxnd$udkesyU_wyODw6cDLN;vsppNR<jihpO3@}@hYtt{brC-)ro0o
zRZ3ppK8kX=Xy-Z|e)NC*%;M>-SI6()T{+`gkrLsliZ60bId~-gqTNVjVr_Fe{GHvE
z`bIV?ZC^RqT}eh0?r^lYbYtb}m+w7y@xoSgr4*cEil9d-0s|^bXIgv%?*tQzV$X_j
z3no00;AxABz_P9JS3KMES1sGR4t3b$b|GB|=@(i_FiCf|y&c5*6h%g~8GUgX+!6VJ
z`iCI=?L36yUj0K519u)mevbYj1K&brEd4_UyaiX6zH(OLOUq~S-RZkn2ue*i8o3;k
zQJvgMZn;_p{TJf#VmY9PpRmt5lOw^7y3B(wsMZ&vAM&Wv>0*0Oxi4e?*QqZ!6KtO{
z%6#u@Y{hHo7i>+&U$i&h@U=BikI;h8^P*_@JFS(?Q^~cC7WMS39yP-1{>57-&)$1Z
zyuDWVS}?^DERMdtT+bAm6LIF&1GlgU4;r=zJL2axeo2T5`U$y}8NVcXJ18<?{DQxt
zD@)H`HGbKE>y0;NaihfAjf_PtAf$H=BF%}3x(-_1_<SA&3p}2dM-Q(L8PDqp9mW$U
z4H?gi86CzGTMZdM@cqPNL&gtyKm6{tq+>YvilW6MoXE$yFGCpkvJ9`wHb=mhi*f<n
zS0O)xDbjX5JSg6T2;8g2VnjHWpZlZhW=3jF-9XOj8Dt`SglHSfiaz(MsQ8LglI%Z@
z3K7PP_^ZeASB)8A9KlbiP%k@FydhowB}QD&=(~cx0xa93gQ6qAVKVPVH;6xU2Gs32
z&p-@0bOzMyInO{WIdq1B-#~%Rp)(Bp1|t2I9`Ur$6K2s+N~(KKgBc(_&4A0r`4hAp
zlFI&mvq{m@{WJTgn|saOjrGaK<O+bYf!K(uhmbG<*qN|>1oe6tzNg9aua3v~-Eix3
zAG_`YKsovqVO`i4|Arp`fQv~&O7zN$NLI>BNG{)&=yz$bW9%2V<rnQBY(lG(VX&Yk
z0ghacPj6fX)GOf8%QCec(>joK4x!6a4>R2CEu;Ex*aT=~<val$gJBa4`~o@!!zLK`
z1;oO`CK&Jqr~<I3A1hiVB0?2(9?xYna5t(|#18j6d)4*oT4PzMC}k#_qX5KB_cU+2
z9(L6lxqV<fMx_Y)^N`W~EJ~qOdluDxabi)5q4K&ujYqlWFglA4nP4D;Fcuv$f%66f
zpO3NVkO>BU0b|i26AbtQ9)q@_-*<&Y5rrleH5WWw4~y#kbJAn-D3T(c2ag^hd3aSg
zE*y%V<YF{c1h&Qo0*uuZyd0-Rm@fzDa_JJzrd9gQW&4{ZN}EU)rM_-5Ts1OEM?4<A
zw3j3%PtS%h^m^UUY?(c%p*K1WB$d)}An~QsK++{02NFLz4IKDJ;zOr_1Ky~vS?I!`
zxQIB+tKsyeTr?I>oLF0n#ek!6c;aB~_!`hOVym$>;1UrqoSnh`MJBv)jvdoUGBY`u
zV8uzymwa8USj;p_@z|u_<42R`PmITqr{+@GbJOvugio3D_#=UM`ngYC_bpFlJt%Y#
zPKy7xrsmGU=4!&a%0*#w?dvud{wiDks<Grcf_BW-Lf3jz&`P(sh#57D2bnFfxB@*E
z*TB&vvK&Vfa}FF$^2%{Eap=I&1K&+-I&k!WcS9exAy}`S<@Dj4VM{wZ%gYr1+c~*&
zf@2>Bmx7C>Vs>G6W-7+2qe6Bu!0Tewww9;!hvRXn5ior2BiGHG6awH5f#)>l9M>VR
zrqdeE6BcG;!2+E(oy=KHW)2!W&=e=u95i@<9nSCaL4yarnIa{F1`m8Qadq1un3g()
z*ve3H0pX?VZ(#{n%n{3m!b9o&Qq8y;;y5s3FW1Ar?_n{S(0I)I)Zuf#biG^)rze?B
zTfzzPFF4muXW%1P1WZ>pBDwt=qTp72(gccp(<=R>*!`pl*N)(Y&Fl3)HW`pzLJ%(C
z2|@fG*u6SZGg<G<g6$k4*=B-C+Llo+GGsV6-R*}H4-Xm6jb{7dBwvRNAM|!&#UaC;
z-ww=hTdFZ=Eg~J%CdbiS#OAiQ$za+(v3-1Rx3ksR;zkn;ra~m1jVwfvPU@b5^PGEA
zsbqw_rS`7XQjc3T+3_fe^-i8g7VcMr#}{AIP^D&Qr}QE_FYEid9@excH|<XP&Wq9T
zO=9Z@TPxmBYiYs8)p}po&HBOgMChKWxXTSkt9b1T0QJeECaEI)jOve3p5g(5ZKy_~
zOuKo?vqSO~c}*E30b7zV9y};zMZp_6NvX0TZ}S*_r)N!23-(Vnd!9l99U(1LgmSc2
zh}8&bfnX`&k=6?aTzNu};CU=YaFXR{iHn>5faDDoW-7sxkN>A9)>|jqJD~~hL^Ls1
zK*7bmtDa+xskN4pKRMNISC4*6dMf_h#>QsmOnZJi5>M2ZUV%CSgCGszqbi{E5OzG6
z5oL`aRlf+30km0o3~ma<o&ZvMKQ0oM#0J_BL?^lQI5a7dW@+#Ms%m1RuxJ`I{CUu;
z3j_*sp@<S*$wn=Qa;8YEmgB`tI^UVe)-7V{BcGH9b#~3<`@u7zlPF=jH}t~k9x^`t
zibD$#S6B_xD|-lunAI1qt!aGK5hr>%D+0Oz@|1HHLRGLDJjiuG4!`1iv4zvneM09n
zV#r3%FaW(F&0*L$Ui;I19bhEv#~Cb3h7zk*Ts6IJz%Y%6wPBDK>I@4rcB-H>K~EYC
z9UO<D!TD{i!Wkjs;p~0%SLbdm7fL(w&F+mmTf>?Cw@;|0%2KwllfQP2vHhOw=Mj4>
z<DOUK3zA3pb;0{<qWF<t|46$|+rp2A>!;xcToFF0hPVU8Edl@lJutY$s9~`1dhD4S
zfpx{@aZx!7i2=A&aX<)<!snGx8Op+Qv^C3vM^F(dD_SwYJ%$dzc2IeYHUPUpz#c2g
zGKrLWFIEE2V=<o+C*cy}r4s*aJ|uQB#`V*m0Cqywa!70>4UsdY9g$VxtG!2risEWI
z^I49BmmLXOqk=W+UQs$7Wn+W~KX??%@;8fZKGG1|^#P9?XThl49sIO*1hl8=2qf4M
zSgp2KmJIf%g58njISWy135&y-{~t7?WH{UZwNX7F5eS&L#$bf!S*@FqRm193Ji7e~
z^j`|PQa~MYfefwSd~go^Fq2UZJ>j+Fm69Kz6Kk6w3OxBYYG3%OZSTp)&!TcP(+bpz
zuiBJq`UhS8{hgguMLc%&L8=vPmS1)Q?j!bz$bN_kHEb|Xj6(p4f|>*X)Hp<00p(`k
z-!UN?El#<$oDA#x+m`ow`d+5fgR&Eo!X^w_@+}eUP%mBZDr6fFMUd!C6ai{bQcgsR
ziAb2P>=@J_I|_Ub5xX7BSFln!hc7wDD&%s)Yj}NJ4cK<9+6%S?;8l?4fl?!^UXP-Y
z#cbe;)U+Uv!w_bUXb%H-o#Hr?xykJO9PH(|7Q6A=#%`=+y?6g?b}qLnpO%}4^@psh
z>jqw~e#l{!-^<FuW`tuDm;$-G#cg`7n(RTMiw=22jw}?1dpe%;5Nk6^ipY*Q6XL0+
zIyUQ9o}b@&_u}WLZnu6PuUK>VvbFA)@d_pK2W!!Eo}Uc2BYhfY2)i$XxYfQaUsm!Y
zZmnPTM_jPB`o4^np7nj1>)Mm-%<@i+X<-XiLGK>-WWMwCABHvK^?K9Z8KM@_+zHys
zrM3LCW7Ye3XTSA#SwD+6@w53XE=qXMzPfOrp0RwE&*e4eu+xWWb%{K0eY!qftDrV<
zE)z@!6VWhp+5{|erA5lHDT&)k%vCK#{c-L8{<ih=Z4%S_)}o66LRbI)saSMf`+XGA
z>5{uHyoKkLH!Xt7029&#IG}mlD3+s}lW0%zMCczD;pV|lxI1mfx=|fBx3EArz(ReY
zRw`KT0qcI*v6lH>bGj4m*Gu6B+ztKr7?;~X=d&(Jb9D_7+Pw3Xm8CY2F|JzKh!Vw}
z_=e?&*Mzs(WQQ+X&V(S41V@rMY$&Fvup~B<6koIs;P)RYA@zYKp$|DuIpE1!vRW<`
za+z5z_nYMSfZT8Ef`6E&doQGCB5UcT?d=ui2d&FDWqI>{Mb6ZaD7iZ)yqdf5mW<Ty
zUYUi<R8Q<SNh~mDH=TQw0RZruoTPgUQjU7wkd%{nieH|Cv)YPaseNH-|M>abLVjI7
zw`E<dDM!0+%iT~<C{gQk5EV&eC+-NRgh$keOQPG`MCT3_i1f(M^y1p~qI}YgHFzF1
z7xS#)Dx(EY(1nJK7a$W~0qQ)pY~0<g)wpEbJ+*tXwo}_)TWzdNSEnl$8EJ*_X9}jR
zj6_Cbp0ZVG$4yCY<c;CJmmk-T-O-<0b+u?n-mlN8?|bNRbFQ0*C%8#<U4s+#fAp$y
zp4QqokOI0Y{;MhV?Sh`|rpsG$ZYPBo^9<*r!x@IV+N5};$@ijXg7eyHm{T|;_nV)B
zQ^l&Gp`DD~Wn2{9p`&llSy_P6)cf{cy7oucYMKmg3OB14nzNGPCg@xR`RP`6MUt+o
zN2b!Y!ygO~IFxO$_6)h~w0`gTEcc$o_6NDs*ufm_pp7DtE9=tqq4->?l#7H9O7)G~
zTfN%0H)PVcKfRcm&6bn7m9@&bjoAymx;KD%H2dHw2$GucPSqblzBs%-MjCp@l7`Op
zQKX?;R?ooVO_C}NM@DbzIgLc>xn-Pbh@Eho$`|rnNiCQ3n#BYaEgCuIR@wH{Tr4*=
z8+Au^tFcUMZYmRzUHSIR8?76TT=Gb7DtX`byRNMxEqR6=eZpoqr=HHmB)1FttCo*#
zHJ`{h<ai-S&Yhp9OBBWBrQlpJlT2ualy&0?%gO1uKBk}6KOTB6pZl{x$B!)pCRP+#
z?Q3c)p-2$BNU+v)T{5x=+g1X$tt7#hPNCsgI>rLQ@hOit!P2RnKJ(2EUx&0<CyBsm
zn`Y{F3bzNeNm9TwA;}|4Ca?$@4i*^>7G{t2C4SG$z&^;$WR;XM9S4D-^pb66RPH-{
z@aMQj{#u9cX65;m|KRlX+=tqLQ@JEOtp?%|fOUums2kRts1+~>RjuH=-I4$pTemE^
zacEdxGrCA!Q3y+?>t0?Q^gMG^0M+G+W)r0WCNyArQG}<$^f(+9F#YhM#b_lLk5$N6
zp$nu#^$Y}1qrl(nLZb|>bu;KW4RcW3QaxU|5Y8u8;cY(r)P27*8C~Cy1MV`poA+Mh
z+3rlwmLu^-H1;jHnvZ_|XWt?pZ%;*9(NM9z^fArn)?hxjW8CK^{<DqGO_4Y$H-+C-
z!zN;G)+FT&_qw5Ruq{OuQF%j`tPF9oOV*~-Adf!Cpe@xCz}`%w=E~tkrZF0UwK3#=
zL)~?&OJd*XBnDJ85TeUwaJOMp|C*jdF^z<ZAzSc8Q^o{Kq0rp_4akC$@aw-p#AeW@
z<Xo%bqD9IgaV^y<K*qZzU@)U5l{#)A9si0~>0#TYfdd$A0Zwzp3qyn<p$>Z<bTvH>
zx`qwLjYeV>()FyI+g65h?o0nub|B}9-}u>HzSUh)INmWKuP#8!pM|J|yO;8ih#VbB
zcShA^$VRSlnc+G;dHA9pVz``|4~+YwzNvw5GS3&keD8Dp64Q#B>aw5V$}n#+d|!AU
zwJ5@lNUx`q(T=Qpp%x=y4~iSQPN?2jf9JthAH3Z1de<*Kdo{#vIGa!SDF*jg5^n#E
z6cS+IpW$aN-S3NA(tUAhHNmI>^+0+(`&i9M2Td#%i<M%<d~RW`?uM4*fL{ol^d9G-
znC38r`E)wFUcV+<79edV(^g1A`}HW$*l6caZ>lcR-j$M)>r8h8iK=g)dyeg5cAhyE
z@ul|rXmdcVTYGPO60ukRLMoYQl>7IYoxz|l5JuJ#KZAVZFG`;j!osYusx~KZ5fj$D
z1gv@7!?-$N{|UWF^Rp2YRbjwn&4e^h6ofKFbu19+y5B_mz$#Pee=ZM-77A(4?k==H
zw)>%qr_~W-rP)lmoJqsw3N0`t-pHsnFWmDq5skYWX1ioV<(UM}0<{kCXw^q*s{1oQ
zGSN;>zK=a7!HE!y0{}ZdAD^3<<`h;OC~Wo?++f-DJ2eHUpQ>HofOzdM;V(OZub&m_
zYGopb9ytIRvp=)5LOL~_h|5TBW2d&GtPx;;2mTOKl`lKK$;~sTpJ@Gnd}^oFb!B^Y
zcBd;36}Rf*LHuiHcFX0zH#xEqX?D#Z7h+xb%5P*dCdrx?yn-SC4~jykpr0G@A!Zwh
zm;642n>AH{G62f9kKz%EHWO+T!mU0+jpBjnrulIegIYh-Uc$^yn}N9EOkd+L2BO&X
zGKzLk7<OG)i`H@o#3FJ{Vc7miho(~?hRqZTy-7-M99znpV@&5<bHFY>`S?p8546wR
zHQBjsa7<gg7@Sya*N%Qm{Ko3$9k*Me+brg!ZNhQ!RCgOF-n499c<(j@`8IHvDeAyW
zFjHI%*7Z?>A3p$Ds(%x;(Jbyno47J?h-ptKhrhd-n|8w-Hb~<JeF7xgYny8RN{6x9
z=4xXp`$L`SbP%6E-Z{3r-LuPtA$Fa+%!cV+im`V5==J)s?+r2z+<LP>U@0HszalF4
z)6ejX55AQP0!n|OjPq;{O|gMKe%Ydr7wn$XbwyO2YPzDsV_ZGd9|Lho|7HmvI5{<4
z|L)EB(ADp5Il4{82Tn*&s)9|%2M$F~p292OOyN;&R%*B?eDawj`hn<I{1OB>PhnRi
zk3^AdE%3#wR9HOQbp`Qk9l@RA+0?6J@E`(7rwH{GBcwgb7|_i$26T(Sr?V*6A#x(I
zy50eR$5=+A-hBwi70j~6j)E*cXJIsFDiSdEw(t=u*mnsf;M-HdK55TI0ii;81T_*8
z@;#|UOmmhlLvuzZ3`<fY5~4)gg_L%Egy~_HFVoZJWYDu9ndw=OECJ<fJGQj}j1aUA
zDCBeVnL2qKPzG(aGnmHElXm35gk`g0_VuCUw84%ZnYvWnvLbwzH%Xza3!S>l&_#g?
zK?rp&#f6&`&H@V2>iJjfHkB{?Q7&uByr9-9Lq@Ue3)59cZDmFnq=``NG6vzJdIkpL
z)o7TmM=e@8GNFH+qi^mFB{7d_jzm=jc{L;mw}lU?0WJ%-7Y(zzXb3uHNK-O}Nh(^*
z>1y|3GKNhL8=}!LqX#{!$;Te^d407jA$9Y4q%&@#pZBIx*d6(Q>oK8+(Xro%)<r5+
z608cJerDbzQtN0>!$heW(28J$$%f+s^)hSm&0AuSG*}rjL>H&f{WLt>;Ul;()klCq
zXIWCmYOqbXaInoXvuV_DQdbcQ>1o}&x+NZ?2nI2t-_t`m)<})N`o3Z0W)~Lnh8Wu-
zZ^*d8NrkH$JZNG+y1{+Sqefb*mo1uC6q8`C7(*1$k6^TIhZ;#ki-VpwIGsQVn8Rqu
z;~KMTkCUpEw5AP_R-m^hABpG97SnKM|I*6JLblP!TJnbaHHEGQC0+Ydc)s6{9aunE
z;N?7X3r(9C2o`bd0!T<fn8!3}L1dxaA(L&`|46g<5txYCtRQ4-*(zQ$UtqeC)&Ye%
zC*kq;D9n;*>mVM4+rffa9>OSj`R;8uuf{@=*}4zr!`p)L%vN!=F})YL`*@@f40KM!
zqTg9vY~DEYwR=i4Q!Q>YWYQaZ#~(WSvzsp-YpyMYce9bWp&}6;k196RkdDSvM-D6{
z{!xv=jwKWVEFDBj;3o6QUK#nai0~qGMey6CAmXH>BJD~La47C&^kL&l!kQ&0LUX{y
zqtD<xn25eP@?gA@UhlsGTrGdc54YwxW5KefvBa`-4EtQ2-rohb<nm&zS}7NDpcP>N
zO(6CxkO$K~J~I+Si%kbCpxL2<#Rd~-1OfBU*PfGFK!8u+)<IU%TnL#fuo~eNLQn*8
zDr$D=a<PClHIAVMbedy>#osH*a&7^Gr{YE3t3ez(HHFC3I)(5Qq_gfxEQUvf;W#sA
z@7Q?sg|Bsavv=funM)n-@t5qXje<8lFNNdTy;340pTFhg2VVX2qL@#m=j*<E-gIzx
z=kk`PP@Tx8uDr3`$O2@BeL2(RXMi?%lX^og8iW!whayV)c5>NK6Fm(=hUrK~haS3d
z4LJLBT9(s`>3XRk&&a7bYlb)73k^SbIpPkq>vs-Y6KU7~=LqZi2kgiq%Z4i=PyA=p
z;8G^(aw}C4DV;cg1gfxXRNNp%-JBLjh&VWSyyk}En=sM5tYygQg*y5$ToQHzz~`kB
z<;j&grS;~@WO1^Po=NDrazWc%xe>Pgqh`GL|7|F}O!;&l9+_^WH)o(ZYw+>KsYyi5
zvPg19Zh{UZuhq|LinGU~;hRv3pc_7VmgYD&rzmqPb3oBiGRiENf|>-fkQ&_VEaP#6
z1wYNz*bfa|DpO-eXAaXMDOPA+WH)V3uM%dQ-@8b?M~`)pEMXdbcDixH5f&-7c?>Z#
ze3g{uH++@yH97)1(0mq{K<`(>2%3x4RLte^7Ew>7gAs4y_J#Fm#hllx_!-nZl|#ce
zq%-0384Uu`=n=xkn%(wp3d?hp3c9mwh9NYc%b|l%JJ(vO2eN?$4Pl-`@%JOl4-p(D
zocaA><kRuye{1MjAOfZ!Lv%LT7JdcYJ}r#G-P#+&_=T#cc{w>;-d-=q>PN~>T3zcO
z>V+fC>m#)i2C2bvrYTrXU86yK*Vt}st*@Go7`Sf&M{GRqqpUmK+dncVzFgDRS$KOm
zM;?7zPxS#>6%)@c4nj}7`6WBvBrLL3I6a^!y3oN@V<`kOkWowNIv|fde?dDUknJ^X
zEUf%-1_J^Lw;r@J6aKt)y#0Hj+6-dse$@FPjBUc6AI{hs2K{J^jmr^G^aN7gLf!g|
znnLBd<RcY41+2WSTEXQDtcyV(bx|dw=lBGoF-V<w7`mtz;saW0AQ<qWCp{<C15CXE
z+9vTVp)g@*c;9tDx-4*|@$e%x%%l#Ri6)^G#|NC|QIBa;cv#ObyRR8G2R5qMZWB0T
z`(*pX-p*`mw%LPi9*-Atxv&m7Pl*j?09<Paj3L|jw&+AQtHI7!t2x&r9Cm)_mJ<AY
zIu*!xee<bQPRi_l;LMq;qwnt}VG1FvHWCbfPo35iv1R}?zg;i7y#9_D@Y43uNjYvY
z1pu~%<SMumHBfr=d-Hn(sA?bxdIA@M%0uO!fq)NqTRi5V?%PfRcubjQQrxcxjy<2o
zeuj%`VRe;S0j!={J-NS|X=hr%hC-XU6naHsEpa4oO_FucXB+^0FK-2$AF?MG3KO%z
zRNNijsYKGz`KfeRcAuy$#@47?$<Uo~g+p#7DrWN@Pav!T(2u+^8V>y&st}O_SW1MU
zm*$vWsw<=v(Gf0DTnOYgluPo~c;EtOj)M7luXnyNkFIRqId2A<6;kxc=%;L@4*tg^
z`fwXU*6`^6Y1qBVap`||q+63TZ=Tk_ET{tD>DNmOSYxYajeeI8%QO(`ja3qE14p=k
z&b_k26Ixf)mHn-a>E-Dq!U{8``%hTX9$Ti1Oz&zq#Eg2Y6{P;}hSH+HCSdsHySO@`
z8HuaHo7AA$Oyr70t>0QCXif<(02VEGyLmG%f?GsrS2ry=gz<e{6Vo(^V&~~<mF&za
zt1U~KtWCcbLmxpwHLD26hfzpZ4Tf5vCZ&J~M4Ur8`DBaUpdR$tqPh)AM}zA|;~1iJ
zE=D{PPa}W-gTq!hmL19x{Fj7%sNhou0Q_2U9*3fdLm@*76BK+)KmP(6TGAD0&hj@7
z2qA8mjM9cNNWY1V!S+L7mM$+7J1p-n?`?LHOUcE24o&Dd>^qsI15*D-V3cpB;t7-$
zpihWi4e+I*#OyB*7;fMY*7sHMtJ05xTPni6YA68}CIW3yf~rEM4f(i`b3_S6$cf<C
zujDjmZW!t*?EGs}z^R!?r_+^mxm+%mDLqO6<^Z8j8vq4Kih)u0^(lcx!*sul_*JA{
zo&13_rw<PvJ5cA+Q=Yk0@#rgim8r=5el-@CO5c;pwl6<<_uY5g{my#|;dXvzI<|Nu
z-}+-Gi?uu7s8-NaR$CjL1vJSPUZ;j;5G0)fh_eSVL49>7ctsu=%dm4H<p=eBA}$Q0
zYdZN2S&;|@3e`~`Zj!{9oS&axoUdc;Kpv$Kvxr+IF){^8hxa^qFoX)tXMblTI;4y}
zUKO6|-(~XRmn^$XB@%p>HDG7Z1h~#xj!T|B4d)fgE8HYBHQwlsBHkGK6!FMKb*frT
zr@3I&nT6Uoj?63`79z>9Yik(el+a=%3!`f|1HG3&m<0r~g_GVyoFw*f5^^;u3NJ#V
zHp^Gdr$dguE+dWjEaRi;Zd>w9Iv$+}fT3Lx7D0v*Ju*Xmefz=8M~3p#vw@Kq3POVk
z<R%32XH-CPx&$;8mRw7a9~Dt?1N=}S#h65L4M}tY^`XBX5}7-2nM$U4HAp36uD@<|
zeuW8dILRI`hC+q2dmfP_64k>VZOX)FGp&{&@NUkH<#KUhj@-q$1cGf)h<j|4HF6pw
zIG-Pxx}w;X)hk?je|8A5KTrKScqNy_8+iQcsI*6yf@xSK$HWGQ_DSGI6jmU&L4NdV
zP~2%oe`JJeKOlY3`~zTpD16e!pTSI`>oHD43F+_@o2SxR#7%lheg&2b-y%w<T4X7)
z7>}G-8ca#CZrl=1W9TA5HweHq04N`6v>umdgmGgIVcU#-UWG?(_1LPqz1eD1DJ(E8
zB#U{r&rxlklh|Qau!6?#%TgXL%F!;SmrTi#{aP#&Ur10HOJOY?nTyHEDWCW~L$>>c
z=F%3wU-G**hHkg!<au7!j^26J+1gQXFOBR;{_2Bo>s-bEzCKhTVMWWstsPxwrIJP4
zI0Hj*1ZyMdT70;xsTsA4hKk0FJAJuG8qvleZlp&Wx&@E+gAfU(a6>oP0H-P{8p$ZM
z^r9J255BO2jx>6(K^aQ2Zq?&whgyj`-Kc<%bp6+<L9?#UPk7Y`J84%Ej<tiz4_in#
z4{%N)vF~?y5*N08pvnM98*VedlEI-3chsW>@I6B*A;IdYNsBNG%fcr0s;HN<F4?^a
zFI-9#JdrTG05Y1_Kvki-C2~tj)VN!_nc*L1iVmQVij{b^P%J3~^U5QJ@J_HsLp?=+
zCJkPuvOpu8*g|MkTGRrGzNo1p@cc`SK;zN>Frtgoh&76j^0?w;w=D4VTIxsisN+N3
zP$L45&_zCW?K9$^A)|Q;(WQc@sG;mkDh3Bpz>6Fyip%*RYBN}+_y!&&rF;P1Qbk`T
zlsNJWTOZ<BBc_K4e9ih$-%NBotq=9hL|2COA<Il^mVGmHNkaG_gB|Ya-e)K+7AXpI
za|wWJ&E*rB#B8(_EqckvsEKdjJy3|3b|~3tha`n|2i3?O1^rWAC&Q$u=lA#S$-=C-
zkXhRMAG<Z_Lt;E~dadevuWwp>>vaCglXu6?J-Bo;?266R*3FOYe>PV<`kCz)ZGJor
zr#quQv#(P^R;Y+~s-fasCMheP$snsi<@6^+BG?ravPNYCvnhC_my9QBxS=(ELcN2w
z83RY~;&et4K7w{;;E29=&^8Sm(f1D8vw<Tl?_i)xmPO-~@y0M(aM!$WzME6I+{{d_
zk}J<-XBM!V2zvW9Tgf%bo^Br8^I&V(zDmt!kKR3aYrEn!DUi$U*VMS4ang0Yk(YrK
zr)`K3l95O(Wkw@3AjC;z6cuXyK3Lv~amQHP4XYL>FO7!&q>r^92A2bQ@}QXY`0=!i
z4{|vS%=j3Z2_cH6e2<xGxA)V3A9`!`=X-p5sLXa<`!+BD|3Ewv^1_m!idVQI8(8;B
zUeAIk`6a+ovj6h&|ANX&L6lv+9WwexyF3c)br-7r{g3j7G`Qr1b%xz9Uk*@32XbzZ
z=XZtwo1uRZS8t6l2^&W$FPqK{ykHiM*X-YufOb@T$a$sD@bS;^;WOA>!oLFOn8Ic4
zpY#njbE(%iO|$otNG2{UFBb}MN2$y3@irTUrNUCZ3ex6sv1+auLNJpz%z{*;%NZ^h
zy|jk4-GM)*46jT<_rWNh^$xSAO?TU|vuA$j?8W5neXl+JVB6KmrH=1JmR8<=v3WYY
za9drx>1-_=D;<x0ZY?l1H654Y@%rvue!+A8uJ3=(`P*-M$>zmX&vb0LlHV=d`TZ-E
z<&|qoXYy0|M{j-iD{h^MB`V&Tnfu?gQp+Ln>-|V{`?!=6CJ|cuJv9X5Qk)>|?_g4t
zP<u-E8(LM7DPi~>NUTa%uxDL?+WQC<Q};YV614Y`b?YM}GJ7Af%wqYqcLH`-O@zbY
zG`frxb9#9o$Zv=>g*m-gN?oFT{_$|@#K!UESKO^mt-eES?q^!jVrbhtC#4SS2e;k$
z3*TG#MnOEh`#-GTI+Hy5yQD#=e-t8caD7}&Q2JjQw%8=BGS>lE?`%XAHG(BT8+Nm=
zvvNTW(a!QKNfR)B<-lI1Ux`e{uYF^QLdLI_vE3hfhcUVYqtWPGG*c}W2sjL7hwUz1
zN@c}Nm_+*ro;WTyPwsCYd-(MHq7SrLI8kfH3nA4t6_Wlue)O01TkgE_<i%J7^jW|8
zM^9Z!O&|TCe*y&h7jV)Sp(_!A{((yvKjLzzvyX_vnY2p(0qjxw4-M%y$#@D01!!VO
z9Anakh)~_1IV+fcCQ5aG?i)>{>i*m}n#5A~XUk~t8LRj0VR!x2{2HC$1TDvlS#q@Y
zVZbU;;Efo1>i=w?)Y@qIAOG2R%r6DjyxEFc$V@f$epyoE>Uu%Ey_Ee{j<w06B4wPp
zA48FHLb&h@Iee&Kh0OXC3=lYAkm5!xMiLK+mfTn1^cxxKzZokO@?keiWkSZdR+R)n
z#MEgdnVx)nBG*}1D3)@GNd(TlQ<>yVkBi^fn_F0%&n!;GCxVfwBUGBR4|`mTc|7zC
z;-uJ8{%Ivr_Ho<70)+hFMMm&Fk#ebJ$$C7?6bBmR!KMdJT|a#_;)KjZfYpr7b#~t_
zmQnEg<8})`&|}wr3BRDF$vnbKEpVf;LKY%1LGXddE+k<9^%4awL}krQtyQ!r$}#~<
zjr3$w!Ab&rB?RI&tCvMMtmZ!e$F2T{Q{QjD9yCv}ThTQ|<CZGImjTW&)fveRfkaE1
zGq}bry9qDA$~uD{ApTK(i;ROjEMjZB3oN=o3}s~ID7H*>o4H!JkHh|!3if-7g<bqC
z7;c$|o&kCnE8wD)6$M2`R}2plv9V2h2%6G7NuaPK<Yh0mYJ}&SUaT|7H;UoMWeof{
zhpozM!RX(y-79j*?DumY!J6@tofCe_INKBzC>XocyFuhd;7QfIYaOi{sj!+HK&7w8
z?YYlpQ-?gm{j`(GWHOh`7TNYv;DicSZ3F~UX*9WEyRQW;yQ*(X{~sfbic61Qkhu5h
zL(fFCjU;hhH=It|hOz~5-)P@<a;{$N`kY1>qmKSKae~eY9AqnFbx9@dskB8dD7`82
zq%B(*Zl`1Yyzy5k<bFzu!G&5EcGay4bc`@AP3a&z??<y3Ep^dFcnEYoA-PZNi04x&
zK}gk8wQ`Ysud%3y6?fA)1nh06lSo1bQb_ewpmwqtAQVvMg3ag3C?hz2d|^IO-kN#B
z9dyepshWB*b9>$0^7viTo5@sc%9B~}6t@?$&A{oOyfyyXpWaC)C)3G;_I&2X#pc}l
z_myvaMKBqgn?Opu>l$AI#Q|rLkBj{5Vm^dxe^HdBIMQ=m-5hNoZAh@<s2eSFf-kZ1
z2%{5iCL_z4mCSOzD$mO4B!EY~2>y%Ac{=*q#0HYIe`@#wDLnqWV=eN->;{=fKAM(v
zTq#9>Ahd#zXA&n8J}~_nak=5_gSkraI}PKL`6mEq!%!_278GTnwa{E%ROXernG}+a
zeWa+h;Zz}4@#w34GtWGJ!zk;;O)~O|C2Z>)<IEPav)-l7AIAzC08v~J1qJ>iaegiq
z1^R*eV0*LXasxbpVo{4os`j`Meo#CJMDUVX_#}Wfub}@h%B`t<k@;Dudx2UV_&D9j
z66Kh}bBHp}b{na1r`jiv?PCL4g<>%mr$p@{@i<bw486Zp?j#agd<iLWFtM!1LZ+a2
z?|~4XQZLTlRGZF6v*p5Wer_!i2~}cKv&mR0>0VslFrSvAZ}%LOrw`hhjI`q~%*{4t
zrxWQ=I2jGcg7U-uvvtb>da3i_@dz4UQTi_9E3wO0-2~ho#sX=USoGMaaIo?f!-q<C
zGj01w;V2=*X`bvYjlx(A)pd-cq!=P^k08dZLT_(HlFxJ{A7Z{Te61w@++Fdv*)a=1
zWlRAGs6cCR@CY(-zFR~I*ptx~eDnu>fJC~;q*}@XxEoF2m+A?K%vFfYSuQe>Ap)Bm
z>5Ncn+>as<s5f1rvIQ5Ctr$LZu}CG3#ZGa(-3%6j)We&~8?AtA;|P>5XqWoOM%Z{$
ziQ{O*V7Eoe*!_<1s2aBJK2I}4e`8AchXi;%trhJlXzR(gaI>NY%9T*(yAKI62qU}i
zGd(OqYNQtz>8@PtEUvd2W`^;N$uKM+r71%ra7tC9;;2mW`-a9OUi%eT)z1LirB2u`
z^9dhZ+~PqUt_H|XW|bnyBuTmxp;oTvWSFFS*Kb_&ngfI#c3l*f_augW2A`g?G54yw
zw@>b8JKIYa_sdmup2<YZi=}+HHeW`w_Q+e_A^zOke`0lM>(OfU;f>}^jr4RNsRV-O
z*IV!c+;MMywRq=ESAVDg+tA#_d>dKmx?3K-0>GngH;gF2=kSj0aNg;nAK(xr0Tqyu
zWU&zULW&Eduo(TyspgUS$JRSB1W%#Uv=J}jfg*9sXj%SNv@2hsPUctEylWA3Ge7zq
zwJxtjq_1^*mS27Oz2|r@bMZ5k8?PKZ_Z`-}{DJ{_^>!gGY^ZC<E<bCO!O9+hU;_pW
z>w$qGA`gHPm5}WTk((BPH;u*|Q=~d`94z|A4sWu~K9W2AfJwBI^=9Xu$nAJ{R5PFs
z0m7#$Z;rpaa`br<n9kQ22=?3IS3IMhjG{kDK%`D1e&1t)PY`{=qe!s?g0UZ|9wZLs
zOPayMZb*DtUdU(Xk!6dfA(5$E5aswqjgTE`UBmvzK9fFGcTjf3HQ?1Zw!MYUWGiHR
zZ|MBwnF{~rr(bph!A|}1ipoA&U3r#&Gq#`bv7cm6TFb(#ej{Us(kdHJ4=`5<*qtsb
zQeUM@+&5rgq?P$8){!Cj<2FwM91Tzp%dsU!{xm=y5Jv2m;~ZVmeoMrn8Q9_ITMj!U
z*#J5)<Sm;``%|b%Ytq{x#^0~T)1n_6<PuV$37lHjK}pm#qb;N2)$5nN@MH^qmtTO#
z!6o@!5_T4X?Gi{p4K+}UV4Uz4oQP^?@L)(vWE4X5_0Hjk{0n#1SKGv`DN>jSp&>a$
zRpKYEpPOGWor`sKqjD@ky3w?}GP~f!<$W5_4+J;rcAQUqL=a|l5|@RO>M=Tt%kzM2
zupCHep2{1{r;?Ovb}Fmo?zto|g+b>M#;*15cRH#zIA>NC=*K#9v19Q9R~>h85@|&D
zsCVU19|Z7Gz37><0AgGWHrXwR5199kdLyHPSwoO-Pq!K?OZ5_vO%~>RaOA1^9|PLZ
zt|fC~IbByyJ9&=<PyQdAPQkC`XHtbiYDRm0CV%yu{V9+%<aXM?vhcd6Y5({&zGT@!
z^X9QKfnN9m1VnYXA})dj4Zxsp961Y<R2?&0o-H8-$&kvFOfqQq%}4@H+pZ(Ea||}?
zj(0%=SR)T952tNj07Cl$-(@XL5v~gCtou=_k-+`oK~+4uYA`XK%SGXRF<l_6sR$KP
zTiT28xDh@R%|(D2Mm?~o$q2y1YQ>j#>TP%KP=nv2{vs3Am8#xoq)~a<4ULsfg$rpZ
z&-}M#;gotDNezVOt9x!eP_aBNw7zmFlFJa&<PQf15<{^BBvDx|u}_9c?uR>*o8%nC
z7uT}mhl>X=#Xm9d>zNhKxN7JM{sb9JE#Ym?tcX50d7!C4dP&D2#~tI7-9F?O17H9?
zTdjWxWjdh8r(e<vfR-q*482lAFYg=G`#gfetcgf#vWa+KrBs-oOQ(!hA_N0~^Ji-3
z#82Je&HS{UuH=T}=nI2sV=9d9HX0eS%O0U79I9t2SXD+BcT~vhP6-8Ja7BI$OZ2*A
zujZB@w-TCG_#_6i0z{vhQq{J)2hnGgrTriCyHBDY$$uNXC`)&e(UwD2F<(yC7PhR1
zDHzVnfhkPapQ-3nJ8aI}dkZ&#4~ML$x2K8idf1hKL&zJP)JeaqFfO(-qS>d-c`=~z
zE;^mmy=YEBl7n?SA^lD-rP2|#2OY*3b6wxPe)La+*JEjhGH^Y-glb#3sNS(*yB>32
zfEAW^guVdUinI%Edm81zt>(%SA#99%!Hu%wU$K@={jY;p-d{8I>|n_x(@ihs8JsOe
z)Axn@)ferE0kjw70d$53?}vxVuOJ6l33!yiqapW%i=1GD$GXDYH;qFiHw6Nn!1>wP
za9EaS_h<LEHrChL&Bc19l*>|x8vve@a;O*yhaq)H{+jPG^UXgBVZ;|gF5fjCbpWUP
z;XZv}MEblFSPfCch>r^osSwPPurCI^5{1xp8(#<@vnSwv3^}Gj#T$Hd(i3vYvI`C$
zmurRPb2Sdb6H+kP2?Aw47E_e@<MTjn+}v1SU4g^6ScuKVGO45zRU$=rQzK*%b8qVN
zA=F=T@9HbZB-K0NX?@T25{s~rIWyg-UeTDz!a@*rAfkBxcY&2if;=AzeG-*u7se#d
z^WdaA|Gy;;I%=4sVB?;%_pvnG<e22S^WgW#<sAlRtSO=^!Vf>gHBqjD8?`XK3MtUT
zSl=X|hh3q}ZbA=3oZh0mYWnw!xf09A5Vk{-(xD0~h2>fWy050sc2)1eDv+6^gLT^(
z-HkR-4tEuD=8-Uz-Q()MrtDgkTu2^Xph-e_kfuw=V-(frV>kw%8hpF-v{$mdRkg2Y
zl|Ng;lj@{Vh}psAN)>e!V*!>iZ@ptEuL7yOJ*AkvYHS*Cd)6@!A4sx9Ohy~qI|7O?
zLw(vxZsHaKdS1Dd&l<g#Nbwy|fH_RB`bs*QK)pOwU#_Q@wzikOUm8p~Q|V<RpKr-k
zQ)ebyLTYxI^uHh;sj9m<K#l>LkaS_Hiy`a=G(dg~0Hu^wDn81UM)LC^v<lg}A}p6+
zo)vOYaxoRmDSSC*SDV<I1y>P#Le3u&CdvCJe#UH_!Ler8ZZDaRx-+TbMr{u^+&#L5
zW?}7cGn+`q7niQ2kN%YWY&`~Co0a2>f_DN-!g9Q@X1uKD2HK5NbrJP1cnsP+@>o1t
zu_f39P9;iXK|@K{a&5WAR~OSXVz|nXy+i;7+}s>xja#UmjEuBS<OW}T`8aE({;9Na
z+rnE^e|PJ+Fk9}~LBGuoGV~ws6@Ys%iH0&q)0P_p01<=~Q}2s=wjR(Z4HQvvz#0=5
z5a!RgT+mZAIT}ZNRjZvGl{0?PsGu~9y|(ZI^<qgB4Hm&c_lig!<Gc~jc>_KgT?kq@
z1bFS>k!m@+kf9*_WWc9*aP7JxK|<9<P2{-T@(q+m{@AF@^6XJ<9Bv`?+k>3B)96YQ
zV_8t5-?bT%BtPyzuU@vk32&?9@>A1O=$W$ju?aL4M?yHA88k+QLmioldhH}7(HmV*
z$@%IyR=_AYaUakp=^2TvVJ1UQCr|Bct+pG>wJPkJ*_jl+mdYYS<UX)3iyW80|J)U&
zD_pq#+GylvHIiJWYBiEq|Kpg{XSI@NMYkFQ@**lRBo~~WUf01k`0E_cCRPRfAo#(A
za59OnprlZ^y+L{f{}1UP)-9px$R1K6E1b##j+y4cRF7WAL=>X(!~f$K{YX$iaV5<`
z#gz(*E3F^W^9_^*&eCqqrq1l`tgp2iivSW_K*M0I{L#FhNhBbc${&R>#p@G}RghDo
z?Q4HA<khRA?(4swuYwmsj$)vG{lT|wTz&AZouebu_1W+G<cKeywcMb*)3Ux?<Nl-+
zw3hH@!+l68Xbml&?BRa>NUwkF^}?WAk~Rdf`97V>e#}KRjs}j*hsc~alwU^98=I2H
zVXD)mZ7tcXs=Dte45p2db$0c)M<WnbI+lf3J;QZoe&j0Xi`45M)^3dzXcT7EnQRB^
zqnef4`yj`-w>Xsb(#B!y|50X8?GIjfPh&$z{jkQ&rM7TFRpB0n6c8nZSD_&q>xC#2
zA4QZ>KqHeE^F=_uaTT#Gpn3p0Vg<PtXwhUUUo7h(SMJL1_bwt`iK&V2*P0og-uA(Z
zZ`KnHM$g^58i~!NewuePJiZn_>{J}~@<lhhCl{w@kpRklQmp@ZLf8^6t1lqy0Ujv}
zyF&5>pcK1c1W@uR^xid#gD#n*?2@F#2nZ&EQ(7luYXph~)=+POkiaNL)7MLj)qJtO
zm`(<#rjxlZ4&K&EWo}`+o+~u+(}}5>T%vgO!w$5tL_P@Ocw6}UF2pgpD#@CnN|#M4
zHIt=>wMsJ{JV1`3g;>~l-F;~U6Zi?)vec@LGlSZuz%6bc0k;oM-|J~GZX?UfEw&kq
zGX_p<ahzh6L%@kgk-Uz$#7BQWczgP*)IK$Md&FzsLiWH<N?v5X-SG@+k66V6LA{|U
zh-w^wcX1inBkPACzI=sp9ncRf&1)WTUSYe^Q>Nd5hl9V(3v-2H0UaDUuy$9ZtgmTD
z)5sOvIOab4_*r*u`NoEn@J3?u^Vzw**IxE)Z%<E)w;g>j70ABo=eOMMh1m35vvl|G
zJ<gLxq&MQDmxULr{uGdH76G_Gb;0!IbKFnDvXqd*y?#jkd=E8|)1cF5DZYtBr3d(f
zy+8BrZ_C0`5etBDA<@D^nI?mi_rJnPvo3~=H|oJ=n42~$Ywr0r?%+{Pgxk<nhzAV&
z)>*6Frrn!wWP!t$@LJWM5j|2v^s=f6T5KIkodWHdxBt)tByur1@*Y`M@GNP8CFFV<
zPb)CV6c245C4|r=()%nrOTbKR$xTiM#2k6xM#<YUFeI!4F~nbioBQZ*Mj%N~6mnFu
zc!V`Tq=hInwSbsvTl68<ne)LSMX9{7%{gtjl?m_;4Rn$YwC{=@*#YiR_i?l|lD!Hi
z4j<P0Fq8=d>DH9h<_cpHY5_{h#Gts=01Ex`)DDVI7JqRx8UfYU=ny`bO8gdjqlU3}
z8tB%3z=+8wML(;dC-zyKa0S8tI=mhiatwJErJcMm-G3z%kTf{=8gih#ZlCu7yJ2L(
zb|1c|mbBQ?>FHC)0aLQpUS8~rE=|IkC5F<ZL4K%ncK{hhtBd!=qY!jJylF6XxxKF+
z&DZoF%?iX~kB1YvcMj*Wgfq;~qh-iwhcY?#p_Jh&J^IEd^f7x(2NMJ-76`<xN=rf$
zncU%Ns5PZ2H|cbuN71i(G}IBH;z3>^fn7lt15FfzR{BLlP!&jfK&3D6wK$5yuu-^z
zETgDWao8waYL-!Cjtm>s|1PT89yY4~T~tnlo<GB=0W#2MdV%?(HDMWPkk*Gq8^r1-
zS-)7JDKw&$LOF+CdXz;Xmk3Rw%;7zd{7DBfnMD1Hmi)=nnv^6<VdcHSwst4qeD-r;
zZ)76gT8Y#$kGx>L>GsuYQplA`lruAPJ2(0~nKU&ZEj+y8x$W+!zWi`A*LmfIH+}L<
z<9y>(S^`Y%bf>U*@%Gb=a<lxBo7pwzk;1Gy><VS0r_l*kssVZp#sID-xQ!Wtup}TK
zlrlkaZ*@3k8>%@NXj{1~2<4UXvQQF=aWV?1Co>Cjpa(r)Ojiq`e_@Sqw<=VeWAv$i
znfih=!OYIQZV1d&f~W2J(xb!l=BecR!nCek;bbfo#WQwI=t&A=ZR`rKArtK`_4au`
zishF@FDi_1A*0Ha6+NQ<lXA@^mkhTI-OJjIMTnjh98!Skswgexe7!Eq^>)1_*W@ZK
zwMv&W(lA-o3e{PRzF_ejZs#8zan-n>sXO&`tlR_qgLUDB>OFK%=O!eVyD6gcA#1pe
zU>BCHAe^EAfZL5~7Wm9*`PyX!m$~Ln)*@uf%cuigUtUv|lts3DcKcF7l+l2DEE3!>
zwM!A^(CAdS>87#hKp6_e0X$J-PdGyn`1YJ6dyb2K3W#{&7WM+Q2Tkfd@}s@!8r&}o
zWwrwxWxwBdg>aMs3BSM3uh;!E`=_V(rguB*EmSg9%DDv->@8id$c}QnUdN%+yDiu2
zHDOeO^<A;g{qA*e5fy5*U_$~YxQrZUd7YmhfQ_5Zjj8#S>GTjbiGlztJ3Z|-8Px6V
z_ExYJY}RX~Vs2qJjeZ+cv_al=vpzx=^f*KkU0Sg8qoWeXDBpPQBjXcA6PS!Bn#hDZ
zcYw$w?7Axfug?XU38CWg82{xy-)N8w<$;$TNgBKkNoo!+k1AFFtz4d+#s9{Tt{3=-
zS>SqE#O&?rEoL#>%O+jT%)}+5$XGoTJq}O&26U|-8<icdPsFn5%P!(CA64T<yt<Wv
zggFKYqX%FB3DYBJSlk&!k|y|IleD1>XdgN`F=>;A&)zcF9K5DUoQ7Uhb9;LfgxNd2
zcPhD?gxkK^SgMyx*?9zE5`{vJoc04k+2hc<Kdk*rqf)*vz&)0X*V&K!TqNN?qsDY-
zB}3Bd$Vw;ry;WdCguyHnCU=(;RnzDT*5|gOjw-!#I1R_9&;=q0{nv-)!lF$Xgtjz}
zlHt^5>(58sn?AqRbH6u+u!La(FZc%`EX%^n)Bx!qsTiqQa1@XhUVswDwGc{4VA_Xt
z37#*gnP_o!2|gt1q&C81P0Gsg6-$L;d4V7sMCOL2N-!M^I_qk&uvDpgDSPr+;o8P*
zI<Sz4r88?eQT(PSoQv0GpMP!!AaEOnqi>0y^q`^J<P2J|Pc;^fE=qD-4EVxm6E)q+
z!gERM`w-JG>+psI(7s2?BoS=ZSJ-WXi#UShB2@!93g9@>v#?UVI1Ei)FX4({C>vvr
z;dmQt?OCcB=Lzb`5h);^gdUn0LIvobj|`{7Ux5xD*p5G`PEwX*0A}dIjKnQa&E|s9
zNiAKGiS3e^B??!VmWr+KIJ5G+m*5IvI2PUJtfLL$pcWc6sIJ`T$~r1VKF+fqy+dh&
zG{+IB@<FD3wn3EuK^qk3P22(W=N_&=^%O63Wi^g=yfM}Y#u*8yT+PKA1>ciXp`dMr
ztTH0A9BG<pY8Y({#q&pounn+5xOiv-W2#p`5JJexZ~;L!x`LuurebOUYKzuk9{lc6
zsG8nRzKs4j$r<>mE0s#S(kgO!!wT_6B%oP28!CJ5&@|eCGRO=z@-K)e{1pJHW`&v<
z=73a_K9u1s#3jj%=E{-_uy^zq(exJ$nra5ZmV@Nv577pgq7MozV%NM&cLjByn6r6;
z+&<kW?B*aBPxlGCIS8hz`$Yd7fb|i@IYNhF0lU5jI9Sybb*RbIGRQXpCDQp~yy#Q3
zHlxhjIn`kSg#?lmn12F+1A+|!Ah*`HasT}G_upKt1Xv_8<V{pc)wXB%uDhGQMtq7P
zS$Qtpdhm<iJDXJ2c(`5OSZXd_x_71erHK?rv~pdede$$nt6@P{)*%QdCy;Mbn3iN^
zj#av2Kkyfq=`Y%Tpmzx6)xi6LA}=Zv<DgRcL$ng6DsYyJI?o{U2|CQ-@j08vX{Q_>
zx0{`|&Eavo*=Y|Q9`B!>1yM|^bh)s*8hB~n(|mW6*{m#Qm$OTilDr_#V|Rh+8BlQL
z>rR-__E@|X_ug*}-DnmX8M@gbFoM4$z62P-8R12$KZHCWK;^Nxm<EN5usYzSwMcWG
zm4!3Frg@6#fvxFx_@Znd;DNo2Fk2`TfcIf$WzuiTsORLIOVM^ue(#pft1s=g<`c1S
zFg>?Z-btUBNx$85!!4&i@aolSp%7e1SMU4r)~(sZ6L9}QW&jTJ6DZ%P3jbA&`Vi8K
zA*h&wit9QE0_Befic|1|XopS#0-7jY27Z_%%^L`_#shPQ{SOe!84u)b9v~(&9_XK;
z`&-{&;tDm+N+GMW6=-xQh0IrrUM0zWkQz61c;L`<;P)l#d2c@Ph+K_^<o$Z3<J-CA
z&ZU6d^eyz9clj&vt6!cBRXnY=YVFp0OS$mh=J|P-(5Ur0;w!)cQ^K6Eqi)7PLGb`)
z05;c+ECYjn*kq3R1JRnm?VOlPATN%!&x-eaw+^Jqw-xy^Y@d~rx2(VBg|ARwx+Cq)
zs@U1eiE1i;D#ADT%Ek*f<%IXvx#Sb%t*usn<VG0ibTK@^L{Un}QGHyJG9Qd8NO(7q
z6s#bVkI5Phr~q85!%aZW%*@F0Ol}5!#O0Jcou^ahSE!4j3EN!*{<M6rSjS0wi~UEl
z<Hb1B?!%#80}SFn!h9&ejd@BvK7~81fOthY0Ft^6pgmER3KHwUl9bHI)#*7nFtsaU
z0jS%>;!<(3Sk9FT3O=|%ROLniN&Gyp0Vrdm*Hn;jj(D0%yK&pv`pG*Em+GO3pV~Fq
z3hrkw<fQd>GW>JDdh)^Tt<{ZF@tqg#e6dH}`QxJ}ZrF~sXQBzV2Of4g&j@9NX^<O8
zk}?zn(20WV<vKj>bUV`@kcp%JLAwm{*a`76_({Z_r>|`uS%TDjk}y9Oj9a?<C~jEi
zN9ja%A00R=oz3o}181crbsrrt>;KE%n}<hsm3P8-sk*gSsWz3iQteezmDZ|Km3Ce2
zYpXZ)-fF4c?QXkmw|BhIG%*;1A;vNgX9WY31P_6XnIw>9CNtrgFa$Co4`ln23C}lK
zz99=s5|a?)R)4?uoO^52-jHX$KRzB~OQm~H-Fwb^-t#WM_xIw6kR<4OdM%vkJ739_
zep6dpGhh*Iy=^_ssb-2_GzpEqM4Pp=%i$F3o*o!b*$J=203<E5Qi60=ThwPjnlWU_
zmq;pKdK%;z;cjbAqp5U;E%v^_hPpRKx;y&Ao^-#a|G`@MpVk+|6RG$=@=gC{qJ7BI
zleGIm-A!bmWP3&60A+=K@uS)T2Su~uMs;o$YswZFADGG?XbaqJH8^C!26?s%;uZKl
zoc=C`$g{=5T9bqpU83F27(~J)rMtszt-IVt3%|o{yL}r8!49|W_H85(JKVPOx2d`6
z*+7S4>LaSG!P4LHE-onTxm+|V3c3DVu`l1-6YYw^P6&sZ8`0UuZnK(@6cr+3q|W5a
z7^#Yo2~8hL0LTEWl^{w^C3TxnG3AO%F@|iMcxB8!-gGwKJ=^AN_biTANz%(@F^V*-
z*t<Q)q=4&ab}~QGZOev}-YQ}Gg_0z_FEa3atIZ35&Hn{e{o6Q?lfrvR83@4X$p|bX
zq=l21@|{hTwgNFY8HP+8S{IGzT_FY;-!A#t#BEt~1@>5wG0tlC#&#Ek^b2sH5|Rk%
zymZ`~CWFI3K@%d^<0p_D^A>d;4Gqu7OldLNV+FF@8E;70XE$E@P$4^+8+JO(4o`i9
zMH$H`YOlX9Yl=<za~<)`Uy@$+eZSa05S-10hTOh-C70)@8{uCVd@m>rszvfza8Su0
zSe22i5<nyYdyz1Eq~#3;ybmQ6>_K}=W5DBP-mS@0oqMSO<7qbkbDC%M7|X+>9EF|w
zQd*}Wy7l{ddXZ{SaM<$)6Lahg^$SHc@8J)o8|kG7Bx9W(jsRPDI6!&)244aw9-2o`
zO;*-ZX;1SdoR7oRPg0rt*B`-1advT2`Vw9;0Bfxvr~qMIOu~;CM6YNhAJBjTd90fN
zSJ`AMTH0fxh*_g`(T;;6#FT;=SuC?TY+foB(`lZ^Dyqe?bRpfB?QLjpXiLPZijZBH
z%gVG2lLU=%W9z&!_m<N*Xt`Z}ioT%D_vW8$JMpbh$ir8e8a9S4jskSAl+o8h)PLBr
zD6ez<EdD*I<ufH+EZ^?FtqA|b=BWYZ4s5X&9IB9_D(Rt_;dU4f&&EcQqQ+=r#NJ>J
z_`FPx%r$bv=3(pGy+ePwukH34Z~oc#PYdQ_?D#*yj!&WH&E|8XI6z#eD{c3PUay60
zJXLG)b5oYZbp#SCcYR{p3u)g|WNn>HB61hiovsU2T?ZZDgbqjv$+oD^+eVfXEq$@5
zsQ?pHfDE=qW?lo6MWEMg0WC3N;-IRS4e`2IAP*I=_*<90=<*c$4K`y6?V_Ye#-$7u
z8(LCsUysN8FHixSAN`5<876Xmch=)fD3PuPD8YZe{f2N$`c0uuXjPjXKqP<(RNw|s
zh}Edo39ht^<spG9;z`)olX2fWWWKLt#w#NuAl&(`Zn76KGA3L4&p4*@!XK%&NKg_C
zy&@&<xNdDFM4w<1X$uL4HOw&W9*Y^%t?5@f(4yO3Mev9qOfqzRMJ=gD*jjldJH}&+
z+R$uYR^NlRR~28s!{uc4v9BP%$Bk*p3%PVO>ISMLZ8Z_Bq*hgzl{Q<h0ADiVjU*s8
zQ`}OMrnmvSnA(^J*GfD7du_v(n?3C+uI!}5bM2e|MLYupMlOvXUe6DlJW;LAxp03$
z{2n{bto%3w3#vBVXnBI^Mo&Au1`lsQsaH#NXq!veVOEmo9j*v5Cjb(!Niv;gn5DEX
z$<@c1F3450BE~9b1+%g9amHri^?ZNz>yuCTrue_%6MEsnjH*LT^)53^Uh=$<JSX&p
zR(2I*hna+s0Q0GRK0)xseK9os^a>td!epv1d9wr&BKQop8h#@A=MW-V%(;_=r`O(M
zsgJtC&FQEze$Ut;)!xt|xxJC$M12s=UZ;QVsdpPwjfD~Kh4&vi`{Zd$Jmm;CuDv_g
z6Jb8eo8mXv85cmuPV{$eZ3302QsF9AbaBE#r!{*b^PMP*Nu}b<YiKYS8rm8Fh%f{U
z_2em1{H@Yc-0dC20*=EE?EWI;HlqLNZZAU&u5XBg;1>1>387O>N1Ge129VrQ?v8M`
z0!Z2kF1_US3W68a4Dc#Eg4+nwu%0D}VD1!)^~5C%y+Wo>4Qc8`1x4iOx$a&0gGZL5
zTd0G@+i&0reT?@D^hrSN0Rm3kQ4o1x^Ne8lhSFmMeB7gjFk_=2z7coVyZt1{T>UY!
zH%P8d!N>P>rdLrJpB=n=H&O5zV;-}w5LQNWP0eBl$n27)mJ^`ht9QiZK|m&9Uc4cG
z8P0YTojx)lIHuwP6ckU;k=A0HldUiwBPvAVR02|dj2e_SR1100@XAv7cQrB_7FV51
zGK_YniNmRFD<qq29;2AcXFGKcC-KWnE|UUiqGKShFGnvB3DA-#6uqFOg^x;*^N>R3
zSJD6=HIc?Z3d>NfYD5~>gcXm=gz(iWlxEE{v&e;RC6?fsRnLtn!;HQTSZ25QF4bLz
zWp+sPz)*rzg3*qgG$8bp8AS6!VGAx3o6CeiNU#LS-0KGR_WBLv?(KC$)i;o%x7Q6-
z-#|XeUN=;I1Gy-jd%iS8EC{s%rW0yBu&?Vw`t{5g<mCh?X4f#6wE73ZT$1dHg@Ibc
zWnZ`1-rin9Tn;Wd%neQcI>S_#a{OEwZ#k8l@0rl?mYI{sm$C`nzfr{B#U^Wof`up}
z)FYu{6h|W20`PO8nAY*`A%;JI2?CWGHh}a6AGL*2xGhK!OLHj-th=o>0$pi-KS1#g
zYi?G@RuYk#ZfsWuIywex<hk0ehGBI3JMt`8oL0ms)#FEL$3%BW6aYHoQPG5&S6&e`
z0Vy`%v61BkrjB7NOh)uFf_MXJXC&8+1(I1(Ln{Mdwx?x{l>~$=y7e@6u#te9XX9AW
zP04DFT4|UpWbFqUCWK)K@Ui<Vp_B}KmX~T?jULDX`vdW5tmukx{O}=9dwkm4k&JiP
zO+oEM=M3GNQAW{xoHTmWA>fpljaEPl8=RRqg0vWg4i0XWNXwSV3m(4KxzZnM9k_dB
z>_|r|`uR461Hta5Y%X`KtJqz<k;%Rg?#zmW7Y;Xs<C9Ak(bnWAz;NQ>{_d=&?{g>W
zPMj$`aLidh7Rz5An;7aCZdMA-!RGeySkJt}wtTfapB?QLJ^!(1r5W73p~m{gY^vwM
z!&zfrYi|l%sdHn8k+`zlegk2PZwWD>2w|~O;5LW@jx0Z_WmXZgRg5B(o>j3ZjN;X#
zSWpdZ6cnpbxf}DvVjB<=^3q@?;U}{ho~#Y5d_kxLZm^H;G>!~LWErIETgR&zg|rbw
zcKfH<eH3J>f^e;EwvY`%a_57D^g&2e0LzLO<Df0=?FP@8KNd^G!wv|GR|``|nSGB=
zTZ9YO&Q~DG5m=C8%tNc;P<+!iG4Cw&&HUtB;$zD3%;JoFun_N0wWTsQ>uw(15I>*?
z9+(h3HX!}XxyKSgsWU(O_#DW0y%T3py=(j8!sdHQr!*aMwA8TO6)f|2rEdz8!naf>
zP~%1ql9^r56r>I4WEcS6g~&Ld4N$>iATD1s{y}3knK?LERuq_0%@m9AiL1~7(1hh+
z*2n<{fIm#`uG!300Nc9<y&o#1;(l%KP6{B?NhhO;xZCGT)84IdvlRHl$rR#Z%&GF1
z7YS>GHj&!y)?F^XW2Maj9xZE3*;_*!&&Mvlu<_#BH7wTBN8aKae`4Zf%;jyV&rRv>
zS8LppPF&0@<2`y5tta{6Pf9ms=dFjOpD>)g&em<_EprxkLreDI>w{%)B-42vM+;jn
z50)z|<i!@gD_gZ)8N_12K~~HPm2H_#iW$4nWK>KHtF(19Dhjf{7LX_fSq_@kx^IWu
zv5No#rR0)6OwG--2L}#xGdzzVP_#_JHXr=nkbW=iI8P)J$wzXYM7=M86^_`jydr5}
zsNU+8)RIIgEcA9;P3-i0mrnA{<{x-`^k~#JkqGqVN1ophAFbVHugG_m_L<S<jD`zc
zE^qy<cW&KfEJrJUTIxW&Z<%l%q(IRU+8|7&13rVvFo3F_QDCwS3($%bps4txt>TaD
zbCKUv@%b6#AZSQL9}K`H0C7Ox$0@+K3<8l=li}~QQ@R(yL#svB103{Cor1|G*|d9X
zDC`t$wq0%ldsEHzn$?55s016){n{_W0=0~f3&QyF_@TKOOu^XjV3ZxBabLoPrQ$J1
zIuJEn2c3xfIxd-OvLp0E&Lq!7246_+d|c){*Ph9YnMZd5hB)jUg*I{MPj)ydN9Uf)
zc3h~&j37}fzn39+ri5eSHNKpUgyETs05<3oB}-3}L`z+OA3Kk7U_$e3`!}qru7E8@
zg%q!3v`9Co)1<J9LNLCp4CrHZ7{JNMG@rbt{lXH8w8VW-z&j2=x^fka-9aoI8_H3}
z4AHJ0+wNw*()1uA9)wxFI}UTu5fJ6Beh}K>k?Cncm_9arbZKE~Vq~Z<2e!>*2!INX
z4sw-@=?W<-pRRBNG-a?CniMQad!vY?yY~RkZN9!2&Pe=kRcYpGQ0ln~5RycFP~~|9
zmj{JIRQr-QNhV=p)Go`WG#q?Cic$>=E*4+~1OUf2a_M?xO0%FyP6(hc5#$KbDIWFV
zKTAtPLxM1LXlQ9>3STi0i^bzD?S#hB0<)~MRzQ!VlzK9;^O3QJ!QiDJq#j*CP-|2w
z2eo)yd3?@v--miy;-2f~sgu;RNp5XV7grh&bsib&Xvw$u(6A{O4JuY;`iyb#iF3z$
zBTAh^Y4ErbrlQ=ZOpdfRi{JJAFSqSw$4ji8lh5rAt9|kC(m=W|?P+$zQ|<ZIuJz0J
zgl1m2>*C0I7TKh_hM>i=X}6)ikY>^Fam?af!sDRjdXEd)HQGVvMZ0wEN@tVZXtoDH
z`*UnqvKalM!D3oKhk`l5j-6`9X=()5mJvG;7O|Zw_hA7U%$BQ&tzd3l4g{GMl=^}|
z4M`eoCS^_gMOnH8$l|5PFFkhseth@ElPgCL$J0#v1>5U1-G}h^mRa7H`lDDU{^4o!
zJ6{aLLbiVwE!ms%HVn3zeYVC!nLAysW_PGv?A=L^P9Aj!JqEK9-RE+$=D>#Mu$&;L
z7p{wQY7*@&gig_}T<Vuh_BCp?jjXG6Rx~)2g+pi$JI}TVSE#ds9n)qf^fIu`C>Vsn
ziY5kBB`Kr6?kcNn1v4Ejt>|!wYc{75ryRxY3GJZ$R!Y_$Ip}as3Xt>BY^ykKDd#`~
z^UtYY!Vf&8{;c|tP@&QD=LO;X_45y0z5Cpmm19c_GgD(D1>_!tEH-@_(x^uxYou{^
z`P#o`tq67RpcU?!+g`rpl|2;ht<60Z#@XZBs*2qeajhO<C_y<0Lyp{~IzkEdwl>RV
zQPsjHgcXDx46OmIAfkR`f};>uIYns!0hGyPA;DGJF=|4P=|MgKGvW_Af(n0{zP;vV
z_~4Y#)&e)XJOTuTLLG3IMu)kL2E<}H)S=~#YY>b3Q&zF%y9!TTsDL%zJ@8D=09QPQ
zhWgfqXnf*OIhyfMAzP>$`_xh8@QLxCE5jb&-F<1eAQm)L(pulx)SK+Ne!N!;UZ@LW
zaFYnki5*K|&KU`26fy1Fqv#YZ^*0lZ9+}x>Fw<vB=`;STQM-hUYFf@dG;RXE66*;X
zJ*y0|O`1hS{jicK7Ln0O+z$N@y>GFglQ{dCbrPp9Eoe7e5hgj<-Sl|FAag=onc#7F
z0Q6ir;20!KOR(P%8)0J@`4~pLg<zH~7Bk1Q@^@jFZ0*Ng-ij<zkWB40CUXTaB&&%*
zU|^RK$;zBP_=pyZ?E+JtY-~F;C_~2F`AAqndP;31Se;~e0<%VXvIuNNPgi>?jOZ;#
z@j9wZ&h1dVTQy^jDwxPDtuA5O9_}mtk9ZlZ_|5M&HYp9(W@ANR)3$ivT78CuUQ=bc
z69Gx(I272BFolXoPrYa}w2Pw63k+jFxF)F1j>KjdIdmeK&|FD}XcIvHE?%{gPs#Fb
zP$HmKSho{F4yF#i<r@E)c$n24ZpRFhEm}s>?li<1wP|=*5Qe9QrzTW9tmZMsd<kcT
z$5@H4-KP>NfpAaU#X-0u;^l#N?5>CMp5ad)cN0i=rcPNtG4ZocGpwt{v#Tl^Jv6q&
z5xmbFLS~j!l8=FlQEV!HN_8~>_S5afytSjCK##qT0s>?+7;OmPz&$ieH`&aaOEa(V
z6NCWB7CRMp&}pLo%sf6?Jv0K_VH6mr0#Xv}7@}3!dpz3kGrNz+H#=<LRfq)3fap)O
z<>_d%PabSEoR+K5tq2R!TZ8qDRkYmUC`?jIqp&R=9vx)`wlm~e7V;nh06et;9H)Yh
ziCY<lUMX(-_bHP)=x($IK`s8@dzdx9wi7OVH}CQLCCvCgK;oh-=Q=Jd0xjcd5gkgm
zC_5TKAc1g`Mc?f61ewA9Mub7exd7XN4C7NUeg)a$fI&=YSwf(3cmsAmynRk>g!wcW
ztZ;WgbHt*x6jR=FEF26R(#FDxyNm~_xQPjaVPbJ&aeme?Zcv8@`-_x;iTeRcAP1@v
zl)w`GrM_?nQ3w<)G>Jn5bH5A##%MQz^NT%&cXn$A%J%7&yl3#W!_LWet1~g_;Yj%7
zfHd@V6;^@axAu09^p#ANEqNAo5&A*unNQW%zwIajyTH831%!5qs9{=|7mf?7Vwl@0
zO+-yQmUqL1Selm<!>J=uodPN|ml1&TApOxT+O1=GNwQb}U0KjVgYfwg6`&6H6v<UU
zJxhv!{MVL6C)AHDt$H0En}K1v$&2-i=+v?1ChZ<x^ocH){tK!16E&kTt-=Qr0K>b(
zanGndD=P~N!^6}mcV%_u{KD~tV{@~^)5FsfDo7`W`U{wx-k2Z#ecaw?dp(w4;b18*
zk?$~ER6xg2P)tJ0s}aHsEX(A`ApItCxQz+iJ#a~A;Y~9BT#pWjKw#i}W|TGzQ1IT_
zj@iK{fh}Kb>zW;T^h|QtJTe9tftG1OI(F#YkNWN!O!m8a4@)17dvXqc(o+8cw<X~4
zCfiMQ)>9|Ww)p~QycV0(VEaPEtY>R8{Sl8ew7!r|M`OQS(M6HvZyRs@)rF;&rh@dX
zPns;z&if8`wOb2q$2P~rpWHnCwet^nPA3r>aVFXaSu02!F1?VQPeFE)AkDfe+7@4n
zK+pObM4PnO-zPhaXF;cZQLJ+!z+CaMwfr%}gl<9NPX>k^#}DiR#E)+Z4kU*i&<F_j
z+0eX#b4<733^y7Ls}}H=GjOWe>|FP_B&Rd9=!M`YYi?+Zu)<u~EhAdZRyLwwb=a&|
z%VR<->|@9?YUaWPV%xZI^}?0ZYU=#ylPkxM9-f&}hl}VU+u4ChfOy1x@pd1=Sd{`&
zE)jvSB>B=)+6|HsCm2?l@pPZM!+^LL2jRVUx@V^NVDrtRi}!S*#>VSHSTxw!(PwcV
zF&}vZA|h@K60@P9BXKUYt4_&z^6wen?1QM}hFctOjO5aVut##<IF}tyry7IaR?+8E
zdyln|jJ!THjAlC2c+4H|YZnK13b2eV4jumKWZPg}Z>ZjbQU?;3_b_qk2Ug*l_-(bh
z0bb6CXtVZ-X6KUVFkcqyEXIXnqFE=wUV~@=g!>REhw$GUg3ao*+MG89r`hU6Hqh*_
znjMrB)S&^in0787P!Hvw9S+Ny%Y%MqwW7j<Gwbv<K#W5I|INOKjF8Jeyzg<X3NBZ0
z(L>3sTJis3e@$q+uOUYzbMYc=ii_7S-n)L`%&DV?7w4xYh6YmosUk2~Kk%j?uLav=
zt535%E5kuH#!Gr)jY0Uu2lg<EZjlz<$JWr1FdF#2)-kH0f%sTyZ%FJI{&nn)qX;ej
zrs|(WaMzM)@XLxk2)xV*(ZPHqQkF<eLsZGNrqYH}uu(PH2MaFFQ!4@m6m$_q(>jAe
zv1p=w&50_YupO##w0yq+9wyjXr4iuR?l}N#qhrSe;n=xjXYsH{4lOM%%ub`{2bo7n
z7F@2<eF2Slb$^*PIx9&dR%^*^PDY%H*Y~N^dIrt+XeZ>VdG!$-tEd&IJrJX@Ti@G<
zHe-tK@7U=GO~{G|N{1mCQlG>Mb^x(+0m0#xR;-~6`c4xNPc{`jiBF3T$+$3sr9l-R
zIXKG*)}ezJ&OIBsx#+@ZHBqpnTAfjt7VeG7gky^TXthf4NGPX5kz$1XwPTNi$B*6d
zsP<LZQOx719a;SW2W1XW&7e>pkrO8b;lza#t1HJ2Ely94jr13~J28V9w>K3_L7Hk#
zQYKBBQrJ#X?m$uKwic5pt)K@MR*lHWr}xqiAKz+aaiL;$Kuj%E2#)ltyJX@%R$*d6
zs-$H|RXc3ZVJh3nIN+cc7$Gbv0Eig!Lq_oP;V?97ngFm+NnAx-L}NV&EfO`93HUaX
zDQsHG<<e=8dkp7>(%Ezt6W%VgaqG6-39w`J{@u;6E!ni_)Sz1=74x~B-AemU{8im#
z-Td-)TX8$fbbUcLOK;s*njY3jUGBp4Ou*H=SG|%)UUHf>$wNFE$2sQ4WHnf|_MPY;
zO=U2;sbICrXa!E8AyyfIGAFy;wuZ=uEo@twoD_t~#mNPXJU$AsWX(Nc-nA2SplXIH
zJFuG~y1J`DQ*kge7g=Wcl_u<YfGh`}!mM<c8nnAb+m3B($@qU7#{Y=h?Vzshs5RA%
z`f~I3!#i}f)y@2i^JkVdy~U<b`YlZ13LL)<)xA8{)eLONI2`p;Xv<9zB06=JFric|
zjR{4u7>m$>_wiJDItlh6uR?V}RT23qq!F9mVzI8l4vW?tLR|g9X|Ej<%|r+cQeGsR
zZQp~cU^U-iJPV9|3yl6<$0c1_Iwzr=TA6ZMJ#n5Om`4uJ&rVJ10FtfeT$L2;jk!#w
zQi>nWBVs!|k6KLaEf)V2@9ix?FsGJ*AS^*J<J~xI&dS#I)}~10%uw6oBqGk;MC1#Z
znU)d`GkaxbLQ7>Nj!c=xdd1!rluLI%lKRtIe^ntZ%;l3*NJ|oF`zhfIs+BDGQCRSV
z&?H#;bdAAofhR|?9kbO){oA#p4IEZvsZ-$xI-5c{5m%<orr=mplq`90GqslToehLD
zW@v~^)S;=N$<$zK0G-{d3{w|aziRfgwj{fGYb7`Tj!aI?k>AW8+@>V_WZ9=;b|X6<
zx`cjeCmV)^VaPJJdF21VJWn1Cj76kgwCFcx9vqTHk;cf<G@@E?6*C^B?rwAu>hCV1
z7`+o`aMY7(C!*S_3DOVY$~edV47SP;M$G|h-1+!q=-^=#<W-!XsM^#N7^|R{KPxq&
z^VkUDSI6WI9=&R4_DE(C^z!C<;8d)KM7v;EXcJAd$ik6EEB)QJ_3wmVs`|T9c|ZS?
zgrVuy%0Iy+()(k;Mn_)?vsqk2bV~$N0afH9@@)iwiVPtH!q&B4>TvLwaPY9h8BfR4
zxitguYWe*QK*bvaC<ndcC!k`EEdw0n2`G=aWq^as0j<y!dj%XMr8$IyQu=xS^GT~Y
zyN|Jqh)d$kQk0;!KKz5)<sm;FmF1XSoF_Q#*z>`tM?jf99{Z6$-M&UV@L;<5Z1Z@O
zTA=@_$%O@Vl-lww99uX#Gc`J|&i9P;3>W*TK_Bp{K3^i`hOx&`ka{f$g)=!ElB$(;
z^fA<73LWh^@wNwsOR3BtXF#+Q5G;yj%1jed)xk6B+O#b<J)m<W-IdMWy-}B)?4Rhm
zem0x#{PDhQx660eXsE}M(`d28F9&<Zg6Iw89N#R2Ey`V<I#9~?FV*)HH4Y6Wzu9Lq
zi+{eDSy(yzv4`ca#ov@Hvlr*Z6Y2Oj?VLNyb^h(e<4u9hFaJwdCK&H^_&9rt{PRdW
zPBX7;R10i-fMHwcZfS&}Gm7*hDFEd(6a)g>96H%lzQS62g-U;v`0cfS)G@JrWiv^H
znMAoqaTQ2dGRTp&P!s{qIadUBy9ImSVhOYQ6_V8gj8?S1=2=iH*+W+Ae(nZ@qvl4S
za7jXOJ7-JT`Kuu^;S(ojX1F^xvodphc?pv?#Vj5_ghhvqk>Scsma?$y6E~|%(3n(~
zATZ`=p2IWh*?D`3T*bC=*Wf+H-2h_UIZyACvm{929*d+Ctbv0?>Fi_TGcXYt&?#8J
zx0dtHsA7J{Smi=t%s)@^lu4R&GPccs?aH*)rCT6L29)F~^7{a>ZGua1SU4m88aHB_
ziHRqKq-qyjcmNqp$C(`EMH^tYT$pMuu~c26(qE<W09Ah_aiTzhirgi-8<81hGnj2R
zxI6(?$>a%!6Z$W3<z+JIKN9VW49Su;k{^;R%Jc3x4grLC%9Bhn<|UD)sUC%tALV(s
zjKT$s9!y##{}W=j_jm^#inu7Ye>A4^jvOJk?Z}xUrza0jF3-<W6BESd(Qq(`>Q~16
zQ@1<wk9YvYZW7nBd`+1l=trnxu8P+Mj-AxKN9<tpJ7w~h-8qDI4I7**vBH%3g?P)8
zk1<}92>~rmdxA}}**GT3Xe1BjVHrIqQALlAW{e$0E4Aabu*44qI%z8f%`KcQWx}pC
zk4NkHNK11A+UPLG3r7v(g>*-G4V_)(@q^?nD#=$4ke9&GfU;%jZ5m_DwD7O0H;OtW
z@WxmWvqPtYB8d33I9(AqAq~nd8!fP<F@-W>38i^MJv%|;xiw%|vzFmlv|ok}bi0O&
zFF}j$;BG1mW56WR>d1@=)061EndeZVD$1K(77i}XL1ORv;#E`Q>={?DT)u<E&N;D;
z^f3lB7!+32qiuc<mIbRul8p*8)CECZY7(y3kd`aGxpeE5qp0^DG@#)T2Opy5o4|)P
ztULRz4^d)YMoNG5KvGP^J$E9$-vT(?569<ws<(-i(aDx}CcZ#i=;8}#s748DL04xB
z1q{s!$!~?&!Xly8?yOo80&F8}A;S}r0FNAS08NA`B*f5hcXWRUJw$XNZZsGwK{7fu
zk{xKcnngOG)NZ9v+FN3`;aJ)=%>z}_hbZn(F=C-f)KfgHUhixQ$R@)uY)>C}-ewVK
zGc1%$#<E)B;V{jLBhVU)sxh8_L`s;=I5kBZeCp8Dl6}%XG1y-~=lQl|w6(Fp>tVXt
zS)-d78xbX)K~u56gfjpNm1W^?(|L>jSUop?-vR72C2TQu7CaRkO>h1gNZ}^};`jGy
zoh`#2bGLJQEQ>k4rja$N!h-NQ)fI#pmhF&CW;9H*P~?(?cd%@&P>;9@tzB)ZTtKig
z$YN0(s72I>2fCR@*-JN{QRCy|v^L`l<MZn1K(V(w18U*s#tNpWZP!L;irTL&QVv1A
zOJA7^Mk&d^m-X@2Td1?DIj43tI*_Z-s0>A_c7a0vPaqhZQ77YWC(;r*uop_as0D!!
z$tbX57O?4EWsJ;(OxOB6f^-A=ry%t47;Bnn7qns^J*K`tX^rIu&DTEkh@m5Sdap9P
zzURgjrgRzAlRKVE?_6~^wlK7eLkA2~(px2BnCch4s(PtD-GRd<9ml)Lcu|AKwwEn4
zv?CA)c8(IqDBe<BGXX4*Vhm_t{pV6)M+H-R?VTF185uengGk@OYSj#~bDhY9K>t<W
zrQLyVs<;DI0qA4<3%%X#saT|?$?L}JxG>|}@M7&(2&?$B_SB)Z1Y5i7PsRpict5=O
zGh#}06Z@8BHs34Tg_EMmu2+nA33fmLslLXFigBxj^$IntnNdeh`BTb$iR&(>17v6w
zoLt%6@1io(AiLLrdnJb><j`3rhPS)3l6-3wbm;WW+l~RK^EQvW)9rK?noQ+KAaADy
zOL|5)y>jfx;X{iP>TtieU8D0NSG}gr92MqzoF>L2I}Eml^aHCcKY(c?wdQ&C`EHb7
z9kKI~UExM~Px0Nk3R=fq7{StoT_8s4!r&3?O0csT?q=+4=f%g>h9G*14n!a&;AnHq
ziFRNomVq?ata%jz;y^+OC^HlOLA5$o!hQqlA4L_Kv~aRD{WoOA#Z{*Z#1NIDGj)gK
zATJ4-a#az&9ol{@dJIh_=<!x<T%y?1>A&!Ys~%MSp^Qh~KP%cMaRWF0`LidEA6lH9
zR!0#=te}spyHonO{VJD((9DVV?s4AjPwE)0=<aHXiJkliBdJ>!6*b^Rz9oahASN2D
zgAhT(f{NIXCUq!nz#5yVB*%b%kdGl+3)E>T(khw*Gv5(J2c@4a7I0diWL1|qGG$QT
zaPTph2D9rdj(0i)xs;3u5~9!~2+K>e(_<q8#cWSIs2(+nJcma12*a`z71p#3VIY~N
zIiP*M7nR=LCrz0;c3ZB!-Iv&K`*moROQ@e9EIWZ*H+clvp9Guu@x#G7aIYx{_>GCC
zI!2>FbQt)fZQDOm2yW{iov{6zxBDC;V(0NMoEFSVono#d%0rhTxUPEet%}*MTy@x>
zPvkXl`O0z(nCZGYY0VAum*7EOaEPD*g!U_=f2IdKvg2ULV3dY(KypgI>^UyI8;$E!
z%z$UsKIG2h)_G;8v-F4*G%Wps=T*=Dz>g~KJUr>Ojtdu-mL?`Ru=lR@rPZbLr%rI>
zKNejb83O1(mQ1w8V}9*eCCE3=d2lvGLUnK;ILSRSDEiR~iRUa#dZsj`#01(I6ge~*
zwy-e93&j*;56Ow&oBykjtA47zzb!VDHjdvrwm`&&Hw@vvNOqwwKi@F0$g2ffTf4?O
z;?dl@&JQd(drygzT3NuYcXr2>=8)v^Fa}5QciQd#%xK7`3@rSdp|^deskJ%gT7Pkw
zks<!LBhr*i`26kJPF_OLmug6+j$Q5UT`!di{A_W3P)Vn4!2lzDG>$EZ-5o7n9KPsZ
zAP<8tu^`L}532W%)JsP5K!YS0(brDt5`kGm+SP!du^HhQH~@&u2n1h*MQR~RX0zF_
zhU|0<Hjc#t9to-ofWb;-H~eQAq{HYQJ6oI?A0rQ;$(_icc-YQ}*)aDz)S#EwrC6*d
zI>r)>04ACOlq_k@mPq`)8bW~Ci^{~+Q8wvs7Z=V{kq2!4RwXy4Qd{8rK=Ax~7ud9Z
z*znU;tO4hr;Ix@doHmp3vlw26S$jcvQ0MFjVXDk`V+u_dXL1c7bnHQy#R)s=Fli<g
zD2mb*j_t32!k}WTS;1%m4-e+siutx;zRd=c`IJ8Elx^lLak0fZCqlgPy320kY#uc8
z+Ak$G54bA34Toc_6}~f#$(C~WA=T4@(E*Hq<--Xk2XElcg@RRdIUL$>Fn-F<SBD*4
zdO$8GrKiP)4zGbHWbMJV>-S#8#I6FQzr3^%pKj(t<JN8C0|?Fj{7xKi6erm#TVL5*
zwhq9BaA4`%F9|}8bjq}^4Ub}9cMGS4dxXDLgBSAkve|T2+uF8y(J4-flGDhxH<!9O
zU{8%EGqnXK;R9YD!e`@~-HFZ4MTB6i5IeSxc9+7Wj&RF}o$%i%^g@W!y@z7bMx(OS
zRqO79o>60`PYc57drn`yYyH%TBg=C$lp@OZP*Pl%k0$Or?N>hbk51nz8T-&W_sof}
z?qSewHXKkNojty*)pN2|P5r~|zm#u4P0hmp{s2#DdJZp+B8KTlUPO^qQ9#TcCQJZq
zhU^dc+^ksXbD2uPs3u(n?A$0T)Wi==G02F68(Zs4f+z?tZASzRZ2*8`rGjwn7Yhq?
zMp<&4^jdD`ad2~aBpfT1w^9}rX`ISOzzIWD!So!gmB?<llXa7?x!sHitl2{3jXMql
z?o}cpvKp=I#Rb_)c>Bs5%enc=Szt*{HVFdpK*Hpn1C#mOnYq))k75~S8d#9bm&j0A
zGIRBdDaPzvapt8ChC+;QF-OGD07=*~vS6OPXJp}I|BVZ87mHJt7xo20+`QcrH^ck@
zf%IsyJ{V+J!k?ZGoPY1)(y^(Zf9k`^g`T|;h>sR844M;ZTexxkIh|<w4S7V%`78=I
z)wg!Q{2p(TOxBSWu&<y|qB#rW+gQ#3nXD452%LVv15>UOY%4ZmTVc5l;>^L(6~obG
zvl*$996k<jU&Mblf~d$~7+M@!n4Y8z5jQ;&?mC)yDgxDdbu%1iEhACIV(e*v5P9|M
zdmj`f2BYd@fE9t>u_3~}oX6R;61C0!aAt!vv3K=1$yUn+ZDt*Z#5x(=Hg$?tt$zZ#
zou}EX7L&!wm~Bv-cS8W3jpX2SU8m2r3&x!S1Uk*O2TqD{&FMCysWs14mVTp71K5rS
z9hWU4eFdYoY2E!B&Zvp==M9GQ_n*J-%H>K{8bi*IWyb&(*o&aXffx7(ISh*XlYj#s
z2>X<cgB=Qlx_ra%*#9pw|3^h;pGxEZ8zMsn<zLEgV<LlCiulKxC2{=l1lWuktssUm
zP7&t~SrW~n-N^oc&&_5#eO|I87=Nsm-PahR!4ylL4bcS{jWP(2C=|j%2^N@@h+{fH
z6aXT+@-H?NP1$Tw5b$!tRW0cpvvIdUF%m^6_((XsE5{)lV``UiV5<`U06iga@G*L-
z9mgVrV|<6P&?nMnwSnP{()GKHN%0fZZRk)4yUDK6Y1@fTd&?*YBx?^=IddqA&|X*K
zrbz1&*ztLo#IR^sn4RI2O}<1&nHqteivJcSNgtHtpZw6w5>k!-k((w9^*@+tLc!p_
zlm}rY_X$g)o5S|p{XhYBG@FeetLOq967_Mb{tT?8WFV8|48c#bVqsw*gA<&}x&X;S
zY>&{N!m7nA5i=a*24)IHVhN{gLQ^J_Dau%_DLy>B;}8liR7{tvhGM0D8l5uh@N>}H
z@eJkLd0cpDkzA_b!6L#mLY|wc^;A^GjnsX3(v_7lIDc6{jaSK}c#(k|6CaG68XA0|
zGnXq>!%QD>iMD1RE3A0181D+Zv}%~mU*2#;i{Wr08Lf92WX0?c299jN9_@KBB^tie
zU0DQkbyhVL7#Vru@U&J0Be_Rg!yTbuhu`P0yZxKbQZFFH>E913{w}mE0z(#Jo+8?e
zY4tBz1T2XJnH5TzuA@dzF~B4uu8ZqfGAKUyHhdv3fP+<|K_<w5=k|A&?;#wB5jCLt
zO$775v#%pz$yI$FB_#IoqzAu?b<%-wIJ-LIad#pabH~sCl!2?Twychuaso*TqH>-$
zB^L3<G}469noqH16qmPQq}p5+laY$W6<^1aZJt4GQ3VH;_#3i4k|`}B>+*v6><~s#
z#r%MJ%?gOr>@+ZBMuWIqluQP=5=a}uS;aWCm@){;v5epcpe?B{;W}@p%!p3Qy_Ltt
z1Yzvx*pWkv7=8qRoSv?ZSR~l!^V+uQ5`(bhKK4Zl+nwS|6hBUZP{hP%h<uKTiiR@A
zBb~c}ropNiIj-b_Co;RXo$)nB+IAz(3?$`-P;g6U8ku_MNZ(++bBH+hAJm5N06@x<
z=(D;Ynv5Mu@I)KXt47vP65VL$0cJZ27op)TrD8GP5Je;&cqt)kT8*L?3$!0v?%=TI
zke>bA#(1H?_Dy}SHBdD9<AeM9PIfcszN>DA7zcIY+WFbR{#-9`uxPgAr)EL!?ba3x
zw%;UYa`%Nrry%in_J{=ic2=><4FiEjFPLq^N@6G+>9x(gc$`I{(Mo97u+Mx)Z)@R^
z)Zy#)fVb6w9_Wm|7J!})u+rmC@T#f0zOX}9(3r-E#(_Y4&o!(3Bf0z$4m2v?NyG3!
z8wD2e5e%o0kwU~@YfA)FF`y}HHZv?B)~F>@4z6%k0>ZQJaP=9rk+^!OfEniuxOq5a
z$nAH)XXBV5*4oIlcLW5xiio^r6knnd9gsuAto2d!tGm*712^>K=}2xxHFR+NP$Rk`
zePrj-f}!QR04?%v{sAZkFs*3cB>h*`z6s$|)f>jq+=tHY)^6mCWlXB5?GB`j!A;Cl
z#tKgvD@Ymh_D*IF{>PCbuIfKi%U4iA!a88w`dZ5Ppkrw4uv)&CvFhE?5H%^|$?@UA
ze7372l|Xkg!0}l#DoPnwtQbyCz25v_=;NK5R*Ao|$ClZltJSVM1xpC*xcsbS79v7X
z_*-tj**(CHNJ1Y{{^Y`xeg&hRZsJAI;hdcu6zXO!0Ejw8(05wQRv?f$;I;!>C$Z&1
zgfoNa^~SHZ0?|}P=f;R18aTA8`c2zis%~=?wYsYskRpxE(WoFqi&1nE$@YSkE`@gt
z#}n}Yfo;i(D|%B!y=7OSuTLum(vR*iyF&jv!AxVQ7m|7av}-cIHm@Yx4|QAYzWQh&
z6dAdB;no)`dS$(M?L}K|Mj7f4w1};a_RUYVn!@+~*kGL@5^#rm+fV=QhK>-|`)1j5
zz&5kR_z4{4)4~z;P*-yUVBjO7Xr4gAOr|0SFl-|Oq1QH`1|0U6i2yUGZm?OwNQ&|X
zoam@_Qb&gdI0PJ7U+SL1WwY{iNKYK7Q9x}EvwijlP|dN0Hf3bEp^cc9^cVir-n{|x
z9sO;rx<QdYhN{@SpbGQi5w4P<Yph~3s@*J8q78V(PSHHuOd5!NYO45D)8RQ7KnBz~
zS}iC8K`Ie-Xb^I$I--&_VcmqW5UD3$8l;>+3!y`-R`pce@m9E(1hl35i3oD*?WDMd
z&`YBH&4i(2g={(+YWE@bzMH_hJ3IjGg3$OlFiyhw{P-Mr|J9;Ocqb~Ggj}?_v}1;q
zu4#-ll_FBusd!S@u3YkdDwhlnhx9I6z}3xc>{K%;er<<B$=+~7#pdWth_gG?OU`U5
zk|b@W$S+|7Eucv9E_E#*X~h=8*<>bBk(MDUu!PM<<n<9q*Y^<@1FCuv)_L(61<|dL
z0;@G_U0MX>ba7?zI0l^`AEQm>r@1Tfs8ZSAc5`<iW4O!=bU&&G9l_zSK8w_=Y!7Jq
zLj&a!LO|0i$_57`fgvh5uh@9IRu3+XYSn{;Pv`Z5R9>XWPqKz>Gr|!u!4HW5S`Zph
zpD!V~V_skr+s_+vRQ$zS`4=rZ0M;hG1c|ldAms2WQ)1W_v;=TqsCb#OXZ%N64bCf!
zK5&}h3~J|{M=ABvVB<j{(jKWC1M!8uZ^tvx<7~a1cGc{xAj}?_1#KRY8~1jn+ae)B
zYfa}YQ5)+OrgVB}>Xv@mzbS1f6_xJT!fx-Pyb5ZXj{dM`+a`DWgvRquJda_AjQ~dW
z9ggVoA`32z7kbc(2dK^=#>T6u&Z<9IwLhu!si@zeeX7I5;;^)}I^$9s9fys2@0h@q
zY?ir|%_FV}x>hSI-sNJoUB9lRd|6E>l4Z36V`-Zho$cZ%@??0);aIGV=u)eBllRkU
z2Sk{9cQR5BKup0ruc$a5)2qtowm(NLfe<5f!`8mDCOg?A+O}_PvBRCAKSOmxPM8rc
zsOLICRx1n@(U${qDT7IwcS8XJAN1)g%?KP54-^o$2H^U<{{jNG`p@E0K94@kGkHKM
zF)VM0U@ck12Wp70kM1Ws^*PwP?a2;Z3@+9-DqwOh{T<}IAK1AMt9A9Fm3Y3becfIn
zA<^=NJ%E3qcPVCx2`v%Hii%adO0bX;%Qqyq!aYRpecM}LL=%0J#%+R_f8}lP69)za
zVPJe<9249x6q!(hU0L@NDY%H(BD{`Wjk-#iRAT$3@-9hYpZh>O-b?_;mMU1hIY-kU
zfpupbr|G)7nnRET2AoMknw!&Hq3{GLSPE1@`BI-GWCnnl()g`74<I|95j<wc^TdQ8
zOe{>yGmPUfx-Fm&IM}V|c&;LQsp2)-j@^o#;^anCwp$~-EvetV$*n5e`R<q7s$>jT
zcFo;}+lsLjiGR!3iu#2K;n!6su@!-9)Htjah!JDaXboc#_=?bY2Zc&iq@oA|vg{49
zZBhXq&t)^R*|A!xq63bAgK=PhIEn@)2FABiXF6+H@OU_!#Y+P`CeEGaDn40FkCu<Z
zy}4qmDKYPaod~M4mYm3o>F)q)^Mrbg5h8*N5tv4zo=5Xc3BkYGiDnrsh%q&jLBtbf
zP6~1Qc6JIvXQ8tXgK6x5*4lZ|iHXXVW%cZot;G_<^6spEyO0v$O_{`P%Sptm?(bo>
z<zwWO4i`{&k5Xhbp9U1ORBI17)YWpWy%});>S|!-wf1B7(ZT+{Tur6Dy{4K|s`j^c
z2qaf)FuhcJw>tZh_R4ws-aTGfrM*{`GS^?cS`H9G>Gv3fP$kErK)BYdh989c$zj17
zt`y-uGr@sN7*c8;21b8$yw>5s{AYQIcx`&rp0UCHGH{QYhp{Bn{(*aU2*|63-s}Va
zd-nJiY$ebW(pNO}#1s_-6WnGHI3`O$L))NLUnzBKvPi(yFrxxZqsXXW>RrPwkw!<{
z&s@eX@t=(_FARqKR363ul`sW5{q6wSvURrh4L_)!v3&zlYG#cGde&fFOb8!Uor8IV
zdJx+g16edB-zbL~BJUI))>UwBm7+Y@SFHPFkcB2Fwh*hij0M-Uh>*?*(7fGM=&sG<
zM*3B-e5rBKgaBR)Zt}v()f*Sp_%HjmF__)EzpxS8rt(-vcis(i_kb}Y+Ns?Gv(K@J
zktAfquZgPkS3;wZ5I)A|(}}E%5JZ9|z)aj`weka=y7pr}n;3SH5}U^t(F+u*PLy4u
zr0G0^kJG~7+(jiDY67m-{#|V;{Rv9{Jini7ecX=u^*5p3s43AD54Ymc8e)B(xW(F#
z(SUb>Vh&j`irsU!fgFZ0Daol>a!Zl<!#=NkJS|FoMUibmUza_e8T1+=Hjh8<kBVPw
zYdQ9`)Ag$ctHCFQylt7zCeMr3o`pmbn=dVXRqT}hMo0_qQ5`X$2E}A308^i&jml`6
zk*8wD)^SRNp8)AHD#}4vE}dr%H}w#2gm8#5skJQ^s1b08QQVeQLa=L)sFH|M)3Ao2
zB*S66y#oWJh4y438CS}0&C02?m&8HO${AqG*8AZs1z^vj9pZ`1sqy-V({A!M#oT^h
zW2?c{=(L&b9^}AbbhQt*h+l2*xv=iA!NvC$=bHka@r=>!Y&P3WeuK^5Z0S3cx_uiB
zx!*7SGBlNhM$C8@bd316^b~&2iRV=hddSFW6fB^Q8`gbHG$M0BCRIOjI3`7gIchM2
zl9h@NaI0Co2Z93CMaMc47x+n%STVB&F$;@@gM29!o(H9^$++G9CX*4}W7sI$+}r*G
zem5zH!j@-O1QT-l)PAwz9kzTsQscERU3(+Wev1Iau=e;N4N>F4#FG0Lr#{i1Sb`b}
zvq(EFEmazsc4`n!%xrAk;l#wm**;rKD%-o(>_5D*F*eB?3I}@5Mf(z>y)!Yto*l}p
zoakPkb$2D|o8$LQz16z;lJqmu`G@t!-A0q$IMeC-hUe~;;@eK+b?sQ~3s~)<@Y`JG
zogSdKdyt>yOAd{|KR}T+lL3UQXlul=fY=-|1Ro80su$Y?ldclAl0jP!5tkD+z@E3L
zZCkE}T)~96RP{w{YSlVSY*8pA5{Z~6mLx_2KCPAWS~T&XtiGE{otx{~CS(7`+@2e9
zctReUT<@`s_k5^ZNlvtlPmVk`@9ZmFd3AMWy*uACJeaw3$Q@~K3j69FntHpu`HXbK
z_x0YzWY=i%`ZDG?(>wL_V#i#j>twU-%*eoV7ioq8Cb@|j4hrA+C9f!H8z><NXq+OT
z69(wx3`DytN!Tvsp7uHhgmy~=Lm03>%NLU#f^wl-^b2Wg?0ZyxNY*|Ao(JnrEV`v}
zaY*iQm5%?gc&H6}odPq>yG^rmj$Tj6vF}1~hX!Xqdb2TeDA=C@&r)3?G`#ww8xYhB
zSMmX=XK?c2SqQ4r*^+4X-Fgdj6q`f&{}G}RrUJh4qI93|J;D4LQGD%tujMjKZ_zc+
z$yb0P`1N1%vw5bfgndmN%gAkc&m9)zhdy<x#nZOS%t7Nb8HFm4V}Cb3j$J?X(>EIO
zNq<|~ZSe;d)vi<Tqscq>h`!4eV>H|C>2DpI$MhkY`M+=fwe&uSV2>~?{I2Q(JVVNZ
zW!%(>#2LkG=>2=aF#$Ih6<Y$DtO?MDbWA}YAqw#5)*xq5hJsOmjZ~B<D113qqpS8t
znDw~AtWe=Z?FfYaKFAGBxYR&zuORde_YNUtgHj%Bca&@D&4i&I188*%)l9oyE53xm
zP;Svq`yAm5ieZq4NQ!{UHoIn*3SN)l?1vsuOpVcjQ$2^K7oV7N=8IQ;;nMT(IP@cP
zhXz}g(r^)tb<UQqfV+95dvMO|6F=;`b-UT;fA)9px$E4}^#x3N2e$pf$8SFJ=RZ1@
zj)A$h(b^qxc_6o@+ustuDSZcLYlk4{zmpu(?~vmK@mH(mm|r6W<o{5*W)8FmOxC56
ztl$3X?QhFNSkQI!+Vl2?T~Gy)7Re+?3lm7{P(?aPX%hamSumXfse!1g3!)S?uQGcW
zCa%7YWXbG$HTWs$YH+wTt4aFNtUSBh=<snVW(-+c7uHU$96NgW(DY=nucs^B7Ed+U
ziK8zC!KQz5Ia)KAb*!3#rI}6H02Z{6V^{FRGnNmf&irR)57q~82SOwmLq9>2u_TNV
zf*4?>4cT<mVQ-CR&dZX&#oyHs>~EVJF)7Z8m*?tCuF>Z3aw42bHfQRhy^&_;RKL?<
zxB5K;>1Bt*;T-mO4s9GVyV?qNvmKP>)=Y=n9XPQtcPgCe@{X-Ewndv0sTVHgyCg9e
z+WbXn<^!=zM=TtVw$)E8%@1UQYG-?=HxM_~P1F~<(nAeX^5)Cp{i2lZXq*mrHgx2W
z*Z$|*-x0r!@JYAu^QtQxLbs20g!|Cq2d=ZWgivY}O<=4#*l2Xxvc1T5rLvB0irQ9W
zOSq4#*%Csj*9;339N45Umxedc`nj-vD4dHYB8f!Y48=~_a@ucf|7e>HNF06JnXsnX
z67fBE=2CYO#QN>Yj`7IgK)NoT8H=<fFAN3zZ#%hi`ta;C^Ut5F8z1ZFYpTx%Q^RY0
z6GIEx`Ea8BQR~X7V^ia+4T)!GpPJK7(XT_|1HzJO^Sdx5!0$oc`84^-2*<45MCMv-
zStNLPkV*`<`8))l<8vOjH<2(R5MO&z$s+I!UNQFF$$9A6dw=$rv*}^6W8;;L2R8p?
zLwdF4p~Fnas!uISxBg!8-SSD&txfHK`nvoj98hSyfCKXpL~d!r)1mZrc5vZy+VB#X
z+-eUlm|*`NuQn>YU3F)IU{#V^;o?dQ!+05OE2oI}2f13x&LWnMa!nlu&jca3s9RiW
z=}LSenx5VMdaw$eVa5~Ci}^Tw4^JC2o~rj#%_%Ok-3lLsbtT0<)7P3^hwUid@4%rw
zT<1Qr@ltvIRNriHc8PDb-0@^x6KyrK)9)Ecx+m)gI=d&DrVN|!uAbb@KOA~Ga*FMz
z&?Co1?5FXb(6A5t$xX9LGsb2WF+*k!++RDZxBmie%>-uEBTRml8f6HgCM#}o%A{wp
zOnmByV5#OaHa#|6;SoHZq`_1V!H48~JP>`d)FsL93rzO6|H8jK*c1Bj#>U)F-RpeB
z-qmwed{k_4-U>^fNN)bk=C5B!(it!bd5GgdB;k5VBtFZ2Ut+)4AyTx#et#0*$m~Vg
z2c^&|oKvknJZmG4YhBR638a~gD09PcO)Oh2%r6bXB_+zB9sUe7(HYg^C+{P%jfsZx
zdGfEx4*~X6j{So=$Gwa0v)0waYF>W)T^sLN?)Jb+`+)Vr1>MlFiVpux@z#$?Phg5~
zJ%YD|cuGgv+x!@NJMZo9NCEacEHUlxU%}f+!oTNld;9y+m+<$9aDyi=T|`ydY{dpQ
zBYjGMdiq4J_yisZ6;CuFH3BUr+|=w~K`^Y7gU$#ETgfShM$pV^S;ksdT)^G#h!FNB
z(s4!4OG9-9fKI3pdoNE-f4?&xX$l*{EicY4>#E_@M<(6~9#W0%;Yc#nVjq><%?}?d
zDTvMI#m8=aX7W4}SiB`u58ydq>H$^CSU@jk>vg#uZ{G&P=0VD*iE?)U&7&p6P8EIk
zhw+|BkAdzI4iuskSD~!ojTsf;s%HMHyI(?Pl<G>ixA&xb+->oEeI04@1jA%=dS*IJ
zlYOMV1L#%A45pX~qE4DVz!iK7PTbRP`TWm>FP$+fwnVq|kq6JrB%gTOv6nA4)Ned>
z_vMk?%fqYrr_WrK-g^G|m+D?Nb#{3h#Au{{*!3UmkDomD-lJEg0ngjtGJ4i<=&7;i
z8a7uofp~-o$XB>PU`qY~zsH4hpKZXtmGpg!CFQ9wTqdCch?(aoPoPc*L9#1%yMRrA
z#qCKZ(qQIj%21Ue%V!~#P-!X#G)51K?8U^tPtGOBmTjT3GV63^!o8_^90=l}K;7(I
zA^X0{GvO;!EvaZ&JblYY8~OHW>5CBcl<*kY+@ci32^9}Z#3RR#tyt-mXfLCf9w2GO
zs9e@wPJqvd_uBI+;HLRmof48!uP4!#pw%@bQ(Y253#Kh+9K;;2$2PnYlR^_+sgaY#
zDUb03>^&d&<Oz@E#i-i;;~PKQ-&PEn21j0v#Y3rPq;fvp{NNEL-!o6lh__Z<b<*c=
z$qnv>8BK3}0t?qDocI+N)UCd5XmyQ6gb&PcWpp@8l5zpjp&%KPJN^}R${E$_#{WEt
zgbAMgme<JPCFuW=io<&2@r{j*w{L8`a_fBcfpY7D^l|ooZDr(N$D?M1r&M<UOnso|
z7UZ_L3BYH4ZQ`|Squ@YAg$-zUnB-}Tv-f3ebtq7g5z<i~^lvK80~IMsUTs|++Jdw^
z6>B7WAGz|(FD_37XodO;_x`(MuBHvMr@iL`8$U5o{K&@7O|^GmorYeGCc3kV^oz|8
z9Zt5$2u8ehLAteyChwoRRdBhaZ@l@hPFgETuy4L5(HZ22AF`s__;PhbCBrNiOhh&L
znh`PtsuPaf1(=5HjM?FDbijO$E!MVn6<a8xs7vCtVP*uF4H+O+W2#)g4`S^$4}HSp
zs`J+m_Zr=fI)B6EZI;rv`5WGPSFoYAyE&6HAmC}M_cW!O=lj{l`?j=-w`&)kP+g%q
zG)xI2{KUgox>=2I6oOI&P=Fpq*pm6VTF6fUJpnhXvG-~(qz>c)d|T}XibF9w87;PA
zu%lwy-b1P!8?5A-)My#_Hq4HK&2&<a>D4b+T1_*9oz;;%+vW$Vr(yH6RYAN@K+|*!
z|D8jRTnW5zvI(b#9>vo?L2oBLj7Kdz;sSn0%$LQlb;m-RhOJ>d16%}(^>TtA3VH8%
z3&MD{SL<QC%DZU#xFrfdBbI23Vgk!yyow3LRw1_zb{ALN?4+ug#*db!@$km`olU)?
z0VsQyt8?JUD-WsJnL_W@+59ol)95XRCkEtvcKnGY^X7lnCKUSv{`DuB1a-nF-(H4*
z!L61d0uZ#o5HCrQ9w$LquI5rfz~3N6<y)8>!5rx9$RHb_%MxY4_X-qOOah%*d&rac
zL7ZKs@bHd8CEcPUjErd6iFrs1kEpIVS<$En5gQOB)YW7R+d)!LG$&A7)q9}kpe}GA
zQ^JI$N}^Px8mYMo#~q++TAq_tGw@B67Sd#(#**CGEZN+p?ZVFNs*P1;i%)6m+*^`{
z<yz}}^YeU_^$0mlLCIX_%0vDUymGJbe$^H8NhYODG+HW^N4H?Kh!zTGn-Bsyf#&Ae
zK^E~U;TZVw#!?<ua3P>Enia3#vBMq2FK-pBm&$iCF`$HFuh5fe$I+LBN{uBb;kZQ(
zVq232>^v+@mh@D`G#vS0wO95*bz^3zW6Q1(pWJ*;jh^`<F|F$w*lW?--;&y;f5IX1
z3LaAwbOS#nd|b6TVdcc4P`J9kf-IY6v>~>P6vEv&N_6;=(O6cri?8wc#okwI@r&9E
zx#e`JG(6KQ6u(FbN#tCTai*79{6d=_M3nSsA)#xukVY|p)Y{vw&3^c)#q-g4-0x`#
zhVvJL|E2D~I`UIPm*auPyB^BcJ@V|m|M=;NsZ4K^r4Ve6zI6Y>lDc#x-(wwHNnzW3
zS95yUoCI4C*P)nBc}}W>FL#%ME);3qE2gvE)!W8&?uKW)Lre#Af<%-zSsl~SW}r|+
zM28M)(zvC7juJb5f#$<mAC7jO8h8Cc-T#pKCJS?^K=Os9hp#QY`i?q%KAK{8y>faX
zTzB+D-+=YP`A43;_79(?jRk4>AU2j;7~qF6v>i7xm=BAU3zDkX@+obJUx5uMBWSqA
z2CNL!ys{yELbp#@fX2t&3-OyQnu?yb2o=nUU#X6!;u`nuUWq~ll5iIjX$mj=A&%1l
z;diKKgwX(3Oln8DDD{kBAsNbv_XskwQWP*Z(a3Pc%HeJ_V55LJ4=}LqlhG130pV}$
zKGe>cj0ylTTka?RSn63xcTv2Y-+)g<^RqBncD{`w7iUyAUSmM$kH?T!h<Mtpz=Ig7
zLpwYKUP^^=@1IUqJ>7^5F3AH$b^h2<XS5X3@x_hz+s|C$VS$MyHLK>O(UGt^)H|}&
zH|;Q590=)jxF;LNry7P`GtHa-PI~!FDe-8x`Nv1C_P<EZ&Gz^Bk}8Ep-AvuSAye>c
z7-ZY70J6<yl!<n?N>CPXk_cJQ1FwjhM#7ahpoAIojXbqt5UwE0EF;s%e0vnhty^(E
zX~fSI{m$>_KALE_A{L<QS(Q-pes5#t`K8-1=al0e7KTy@^wfja_LXwH+p1}1zBmy^
zqO(ljY-AUgl(+a-Yfa~>RrcNS2WDIAI}Z1>wDw*cQx|&YJ#yz#*V~^w@`<OF^?Q$9
z+N!$GK4NbA$mb6gMxX!vODE1oTWyx+uI9HtbKf^U1~r8&0?Yj8g{M^)_)d{IfRDC-
ziZMO#P^rF+1{tIhW%UhrU=a$2g`d^Zh4{n(b3g_sf9>Tg1Vt(tl{Ri)eZt?#PI<}$
zP$EEodlp~R=Y(XiK9@r_fMOAlNs~h0KSMSawFF$F1Ix=V-!t>@L|<OCFCU$~l8@$^
z#QqQc=*DcK-RlcDfShW}-~`QPuFp<cGndu-$J^$+^PN&CHb0R)k?S076=mP8hs0&c
z?eQL-8ZdNbnNapJ1<)^iMfIfMl6OKdyEqI2u&u?{X#Zy`p%0ikSTkDozii-E;UJ*h
zxZ>+6-C2Pj*kJ@sD<13?ZdH>+0u!xifn+u6pdxLuw=TepizB^Of2eOhVyW9z6)Y5H
zn&Qu2_(~>H@2h|Ex$vd%E}CHQp_jja=_bU<L(<<Plm7;%lB@4T-;5M^7tn#x&<AQ5
ziV321o4VZ}j7FV-t{aYt!J;66Z5Aw6v*jwRD+Ddz|K0;#0cDJ=03ET+0Ew20%?rRS
zVR+`()ZUJc20PvjJjk9mBHJbkm-KI^+ylpx0kqKD9e4Yno?-8jc_;9o+ZF@2a&?Np
zLcwJ&6;Q+wf*0Q;z(=LQ`>3s>7h3w-^`;kF5{-qRuBRpcP>1--4ERxL{5EwBv5?OA
zIpxMXjRuA3>B}CRhGBR?t<cT$!jkY_)w9?y3D$W~C%}^F1Ou3^B+@v*BmwY6)cPT~
z1Ka){vV6_R6PwN2tW&%CC`H;!7vmFIe0IlMXsT4-!otGR!qVJqBGuL&^|W<_*-RZE
z3rIE|DHo_!fQLz&l+V0~EC-6xqds+<r~XEgJEi^x^<3gzA=lY*_*cC6=Z`IaRQzby
zNGaQgjK=oaK0SFTiH@om@oQr1>#t+_^ejM^pi=RP3u2o^dsC=mBBa2yB2)oO+9(r9
z)NGQ>_dv&*EHd)+guk&e--GydnQ$ZK#2US--D3mAz8p1s1wRVX=5{!g6_Un|At+Uv
z9ug}$iOBA&oG1y?2g@ME>_PfNP6|JS6K7>jed|hVedkI;Th<*8*G1|q{{GydXAfJm
zxrcw_>eS+>JJ{(@2A!T}hpPp0^qwbi?5y8==Ib9ZH-GwSABvd!3!{t4vBwWJH%e_C
z(>IrIt**T9aNcRN*UgL+MoBXu)cY;z`=};=RJ8|O6#mxJehhSo-Nn*=IF^{L#ifmb
z63GN;AVd3|rHfc7OUn#y|0lLVKkLUt8L0D6)jS|7SMXq>U=vAl?0aP~u=LEIny3%C
z$3Js<L;8iv)xGtTZ;GZzonHIqjm^)}xq{arC{RM|R;?(hR74!MW(^U9q8VVv6lPBX
ze<9w)4x#NNN>`As$D1K&z)*A*FG=8_4zPrS>1Esdkn3NAS)^}6HZg<~x|8ps3GJ$V
zMmq5zhQig_ht;O}AUCkd*DR@ofQobq{=#)5OG-d)3XT~dFmTmi3&2IGT^-2fsS=uK
z{9gM#>V|sUd1Sg0ZY2GMhAP_pT6Xgf#Y|QltHK=78r}XHTcdvQL%gKggK`o>L6j_X
z2vJ3~0!j?+Lu18<NJ|kivI{Mp%;-aO6H`Nnj|GR1b_y^+q}gm*)6WCSQS)xVX++D+
z%C>iz&D>3{Sau@cIQaL_!uRP<hlqq^F-r85*d%*DB&|Mb#rdo0H$(B8Ehh8T?FZ3B
z;J|lja==Y$7%&7YqeuudU^L}LB}_#+2{l8J5|=f*mGqe=G|+F7^}^7#>CQf<J<<##
zv8}hU{V2mwZUaT@Ds+hd{rc6ZcbyP3p$5OhI&`*ke%c1>dRv6rA5*04tDC>c5IIi>
zFRCrqQMfCZAG`(zk6xJ6^1|T;Ixdq5$*2X`6MSc%A_~~j7A3L<MvDV01!ybEX`z%;
zHa@%S#q6Xc81fUsTdrJQzi{g0^3vq^*y!+J0vM@!uI{mOw!mjh6(RT(X?`A=XNGu%
zd02(2DW9i%p?2iDt>Burl*j}6E*9U91iN>@+LR95UBElix3+`Z*bHJh7huy<1ffog
zJ-5fnyfdr^%lprp|BWGariD+czTqLbr_%_6#<0KT1%RyueOYlHk;Wz;72!~s(z9i7
zEU-`lU|qE5DcY6T`(k25Qlne0L+OJgTrQ1`<Su-E71cyUMAeQAWJ|LNJX8XuaalqW
zMkDepRf|mS7EXP3pliEmdnAwer^S0`E0@jhJAQF@SdVz)*^&E~9Bd&PGf2vm7NRj_
z7uDVHKBR#+e~;l|R^XO;m&dS`jE7nHtS1p~Fv!|eN6FTNX>=2J(3Df?*|-L}3Kn+J
zbkANFvAu(c6KE08_y%3HM}`LSh>DeW4L6R+HrE3pJ56YHfTczmaqNtAlkJHr6ig;$
zU^y<nB|LTUoiQ|;#Mb~~?6L`M>Ur|3G|z#A-PyG}xQ3l|-<EE}9+?#fRL5{9DJ^lK
zf#VK{du|x51uPcpL$F4O9Su?~E3)Asn3+aMzeT1wH?KMD+`yo=>hP{gQUAr)sLT8a
zje%}m2$S8}AawGKZa;`}bDxg_x{z(3qG|xhktkiNc_m6iV|O*+<5^*5Vq6^?9brNF
z#*RdsifP$_1ogUAP|EPcWDHn};<kYxcytWrn3MiMmkmo@Hm4(`mPr~~!iu-e8>tEg
zjfL@%(@W5*3bE)OF5{#$Y*i?H=FHZ((7AI%Plr!I1jzUPUl0NGw^6;VpgBaH8nWT2
z?N|WC4!L+_)S%hjHnC1Z+rTPO6jsi{fx_juB{ys`M66d1kM4B~E%u#!S@|X{NLm?F
z-R?_Spp-{S$AnSB!0j_qx;F~$XW0&RxsSZ`VkuranjQ8}HP7w?23HX?HE;gSz{8>K
zQE+Vco|b+GOP3LTPPHck$W*zB&4tno#G?<!2$PH&8;VcMl1aV-5ynbXC!4g06lyNY
z*BWZCg@=iqje=c@&+mCD;|JjpC_77FdE>E|1v@2<Q>YZWVAuz$Cf{PWu^g6E2zi2D
zf6z448%=m!t&Poo<I>g))=xS84ySc)t|J{!D2?Lvt%5G5Z>4FjfVO%CbCnePxI{a{
zkbO5hR!~nkr<vh4`b1m^qmT_oe$6#R#X*~)Y6fUxLEXwsdo8l0<p5c@j~ukE3qcoJ
z(4m)-r8vb{;$!hOvd<4PHtm&UY2mQACRSa`7h8KKee``@$QF%E2}lZBerd_aD5Vbs
z79Jqb6u^NytQvwW(r1PTL%nV0_FV4D`!=?u90v`(;PzJ(``~E9tw**^HM)Fg83ZTn
zG{Zpl2w&jB>_bJl(o#=hCLkMpi1f?UQ>*f0gZ?p=iR3?qL<vj>CjXcv<YzPm&$G0s
zIWENsQn=KBh&4;))LzP^pI@%-btQzKU5Qz=0S*#~#}a_rVg5`2^lTM>hPAA5TyPzB
ziR^y-N19rEEj4@KIflV}p$45P-7nty1+(AjC~XDl0S3t20@lPFcwt@<BC{wAsr_m4
zX+c&;jCSriS)SGNwFIGlM=9Db0jf%cR=lC85w<0Yg{cma%*R^el2g6HxMY!h@)&qB
zk(rv}{m7w4-hasGbk;Xq=0;EO{HdyZYv1}%eu}cG$H0mV+s578-cn&hb~KnDeX2VD
z`aiEM9nr9agzJ)o-!Fkp>Gvr8j^y73=`o}qS=o@gR5k>Z-e2RIf-tG7nHE^~UQy<n
zR0cb&Q9($Q6>tjTWd?Xb#VjTE(AJMCL9u5DRG5H{qjla+$I-4KcXb!2p|rAfsi$`Y
zA42O@EVVef8xT=be&B2+6vro3C&NRf;%Ie=g~w4rHd+$+6oeMZmL^E;LwGL(nbPcd
zN5>Uv98OR~p1w#`UyZ=i4wqxMRE@j+m4uHgp+5q^XZqZf7ZT}YFu`ovW%j5xxKQ*;
z-*{zXHs0xL^VVBuPE^A+M?G!sSm(U-_qTlFA-DbFS!sTHD`<1vc=EX76Inqde5(gA
zS#ja2Y74u8Wr#rI=(+n)3CV-t9IuX|VpRdGry3w|*DDwn(23cM3j`KR_)VxmAPbUS
zly8%5A{j6_a#Cp7*7c$eKi!xlcs46fn1z^#UmzsvS2+4~^Hu59;DhBlh0R|I)M<(E
z7w}$^fJFH1+q{H`L6Y0>JXEnTjQ^7AeJ{h`_6u|BbXN%bp&t7I1lR-xB$_yVOQ6+`
z!U>Zl@lxf^0I!(9Hbp8CkJ6?{n0V}1TS=(5LJ`Zh_r8z{hNe)YClv0Ev=^1mw#H0L
zn}2A>ePQsJT3T9~^S$+r^$v%}Ao_RN8JH4OKFgi*??OEwqYU-%i1Y;tu75@nUz3=6
z(5`8aKU2D9PI^OlgRYTYd!u~Ki}DN7w{dSPQ#+{ok~(N=smhC{R{U-DxerMHW<;|k
z;nj*IK&6+2B_M2q^iVA}fl7n`m7;6f`8DD<YOi5o<*&;x;Tm3Ka!h)6bvXpygF??=
zXXEf|=CIkTs>*N;%Rw-#1S%2O^IWUG22ZZ%DN;g@u&kngEOPEhQRq<*AlFG<f+EW#
zDOZ?OAgK&}38a)sPffJpb=!K{x`A{fBuc`UNDwL3HhBpaWFq0AvqR6^NI<Btv!p5y
z(YDn1KOL0`h`y_>U-#GK9U5OaH#b<Db9m*^vr~mpnj@-3VDku+KHmSB^kZA+kzGUU
z!LON<ezbayv~m7M{zmDVCF!-T*I+&VfUU=nHrLNoU&E~+7K-i_zRij@jX@952_R>n
zXgPyUL}Wp!4aKV4I?TqojME866e9Di5}QSixwS*~Xggxf1fbY*6JQl<NG-8@b@Paf
z(gS{rnyGy%s^6|K!L-NI3?&Z#1l}zX_r+r=R>fTo_t$S@Hf?bk>MKM4?{+u1Ywaf4
zK;`nKP;V&>aO(vloVAkK<f;kqvb6*fl&#Z*wocz->xBK!E05W}c~Pt2`Ej<-k+m|I
znX3H~?SJf<Psn4a@`%D!%L?yM?R28_v`1w$4!{XaYl11G&<eH=<q968<pcueD!RyH
zFy$2eR}s)n4H>b+lte9GEk3*J#jxgMvF@%|CYDCohue+mr3@gMW(tc+P$XTW^WxB2
z95$!{LDr8V!g4MStJSNxrFY#JJ^S<bwKr@uKL5@?eXXhnB+>Z5@Y3=%|K{&S)y%bj
zk*-WVFuC^O^N&6%zVH5zf3ogF6?Gt=zV+v4UsyPL!Mo{r?s!i8r?$<%!vrFS#7GDv
z@T^dgkoR^{D;kRPGl`TJCKROws=eL>WT_m0pzDWnJrz%&dif@BhlB>gImIg{w)+D+
zf{ApaQD{sgy>6=hAzMS%t6g+8gM_iSD1H5vjf>xpR3fv_e!q!X6JOf=+J|e9l4r%v
zr$}a)uBBqY8?^p<F(7qRlKN52D+yo6=ftJ=rqm<72_@JkTwQ!E201{imy(?F-M9ed
zJq&O|m|}{t5LlQMH${0`v*yaGi@>VFv}|8nzPppOY|J|gV08np;4I_<TCjgeLhQGg
zLu!rT445eo!5Eb)O!k@M<2P2^b&*6o-~SV#rUs|dQI{MktScsWB0qF}?r@>e<Lel1
z4FnCxPcFazwCIh*b0N@~cmvBzEdX!TciuCz^pls*UcMPkwyZxL&4lps|A?1Q<Ip4m
zV-RS$K!Z?+UK@rGqJ%KK5j=+r!s6%(kE3g_QF=`YbHPk+#vGGx%5`_PrD73`)!@fl
zQn?<g^&rPEtm*@>Hpo@sB2RCISRJ#-VTF`klic+2lkY!v{g~g~aW!sfKGSC$ynk-7
zyU}8*b2PLhBEfc-Cv~(iVz}$r5wY=)p1=5_)t78+4rVOg(Bxw?XVYpl;gRL0Kx>QC
z_e{RE@$=ssM1bw~-`##g{7LkeP6`Di&|pE~)hLjPe@Hr*6A>e?k<*@_Pzj%s_nnS<
zGGrcd%xdXTO)=V_>}6O)nvAI&UTFAeq$}Ce9SB77fu6{f<AaCd`BX>SZ0FJLXyIL_
zmHvT5G0_n0j@3723m5M0AIPZf4b7?MzOLfQORxvob7GH0rDyN}vSCq#GQ;zu7m9d8
zT7chl`Bx~CM`b<aGt@Ipbsf8qxd$Mr<uP~eBlz)G@ts@#h=SZLpHmF}%xB&4M408=
z;rsH`1ifMm@u8_-Z8Ow0H3b?+3zO$I#MfOWudlJCzH@Z*I3D|-ZYxrP_LRtMFWO_`
z$1&X~ePA{g`<-5ke#dJqi1Ve-UzI*r`g~4&FMHiT1MmCK;QnRlo4m{reSLtk5N!ax
zG^_eAcE<Ql!Jy+%JQhhtc-vyMTCUqg!D$nPhu|cl`>9}bUIC@Hfyj~!Xo$)jCH-fc
z&9UZjyJUw0K?6~AtZTnG^qla@HbXlF+sz+zYzmH?s2Cf0;2Z3@e;9)kEaUV(250Sm
z+0;O*=`+KB+;w88^7GseV|<CtyUWFL7Bu<v0h@b@t6i-53PEt%or3+QV7EE#wi^{o
zu;+{H^hN&`-%*kz{xZm1Q1T)Q$zB!?EiTN@&CX1yEXkGa%tYO8U(^Gfg%`out(E;a
z5K6knl;e4da!jY<e9#mSi*c|#2egrIAlg{(bksYWv*D4Js4HK8XmV;<9!@`(?r*-b
z)ZZPf_qeTgTVpQV7EPWEN2AX!Of8!Svd`uE{nt+^Bb{v>&R8hea`w5Qd*iA3rIYgw
zO<(-txwrJCVo7_X$y<N!T|<5Ofx_bTlk@r5cfNCF1IMZWWzd4nn*rO>arH<mbWK-V
z!~h!^3Jl;WNe0gjKp9369cUQM2?1J}A0MkGqwIj^){*PTVyJXW%oC5mL*euXpbydW
zq-=&pC0!fCRHd_&qGAdWjW8eON%h0>bjT5m^@m4_E0J_d;mXSViGhWNrf$o?cp%-p
zJ}g~bk&?<KxBHE3_r>hB;jY8oCm+7~;BzNd7Kbkm0eYQqtJCLJTo1i{d8Q|tBVrNi
zh#<wlJuZnaGIhp&m%ajZhToy)9u`rZp<l<;AOCzoyuj4lpW^-yW-2S%Ra*<vsF6Bw
zw~;}`TkskIwWjXfCK#M1Sfx7O5Y#-KS%?>+Coa4UaUFqX9d%86zZYTD+FSLebGUOA
z^S$*(+HrmRx>3Vxn?Xp=h%}q`eIK@lqLl8VZ9!pf^p^3Y+F~e%NHLT=#pz%Z(8|Id
z%$aC)=^TnC5xqnCCqH^A?8(pFnAkaDGA12?mX3}4HZoI3Cc~qV)|M90+v@TAeD(Q^
zqO`R{>eFLSC_{N?y3yI=s{fk!`WKF@WF}f;A)mdqp~YwD>UM?+HlF=8tQlJyb`rn9
z)^bt&d}+;2W6gVn&;1IO#M4PkM^FaENeYhUhbShgO)!}gaOGGVIk5Mv^PgGM7}B5}
z>=qQeqLy#(dyrg%zX)tCO8}GIviD7xU#fWpTaQ127fZ65S53*#$)2JKEEF-n8oeLW
zB3hsn{yw3-8ppyd4Xq7zspfc-)0>;@{a~Nf+13)pY~Cym*LNqo!_N9pp+}kQiMF@;
z8ycl#=H%kt_ou#>QSE6==4eOk?mrAKO+S3!|I6N+hqsYkccN8=eP0NG3l@R^ND$l!
zkOUWyEbgl)ZlXj<6e+2-^e(mS-mI3}Zo88>cC2_w?0Ckp<0Z=^Uo!D{OKfK*$(M09
zC!YD@%)Gp0vb-<xdoRi7Bt3~=r<?tL=iaJ90R*_H<@sweo)!RBT@>y;_uRAm&hHG9
zC4-~=8s@K0oK~p@&@<SSL1sIK7GRueK>5VVKT$J25OVO<84b56*a!JVEMpJJVnn)#
zvP*r<BBZnlGW>etw>$a<wjNb(U|+ywo_`D8YhhTVNljL;XWhkCpoW%rO1`S{os=d$
z`X=p1v9DuC2<??Vp^tJxsdT7`_DZu7&SSlmIMAwSxGBpEQ#A+v1kF%2TpNG;&}cCF
zg{Q;*h^wYC-!-7FaU>P?hPLNBYrghV$|`^UE2Ew1OYhqMi1_K?>8UF>2aC&`xwQR`
zYx^&XFDfg|R~LrhEARn6%IiiL2Po@Kg*+Q_ZPzImhP6Xq1=<>_(jwiHhL+=vtV%Cs
zGf!=-h+Tzsv8sM0CQWyxBK~kl{LO@73}{8II3Y11be>XBOVuLT(b^|-_a3>|eyj6k
zO~~JlV=(&Ucg0t}@eNg?p&rO_$}$W0EK~8ME|TK+a1^Yt_n&>kEdDC`!bsv<*?Y|*
z7XDRLBZdZ8%mcz-f3YbFRyoomB(+Jv<^kxlfJ6rYj9oC$5Fs{XUEBe^D#E`}0J!<i
zNmsm-BE&GKEEbMaMbjN6W6-O=oK;38my|Do$roFya3c;9-P2UL2Xn6bGScZ(^MKBj
zaGnxA5T3WGRX9*J<m-`Mhp%6Jh5P}c9g0K6RwSf4R8n%tj%M}l6#BJH-&-)mA{qSq
z$UR4H?wlvTnJWOJ;qr%KDSun@<v#O7Pq060NlpiIxy=5riQC{X&$Z#jD}6&-X9kC&
zbGgP5RK2u!KC#5kWwYdE=l3ru=QQ54^BeEk`TYs{7mIC{eg!=V!U!ej#iY_$!h;rI
zpoKv-)FLV_=fk2vO@7o*!5XiAs_3r<QVk-)M<RxR?5iyNT$xb(Nq0r;;1z@g(p^zu
z4DtwdS5z2-s?Bv*92f(D*5WhbfKeZp^egNQ(r2^_mDiLrqV@K6c6R2$8lD2deM=K<
zGBsaBUUD#x77OeEhptMa6)&wV@xKv87-cSvTquy7&3!jFF|jb-cztv|``!WYx%J&X
zQwa9G-|4IEarT>AQpqNt&uJC&a#J=F8L`HC^Q&vOZw=1m|2pvZ?Vs5D$t$T>QsS9Z
z@?R3!-tp=7XwqD>dS_yzcmF%J2nh+;q<vB+HsvqUCKT!w`>jQokjGF)4we)AjZ9OD
z%8Dj%ff%8bl+@!6Z4k7yLg)i{Bn;3(*?ABVr#aCFPcABlClm|UE4+!9CeLEqh}Fc~
z5GC)W4Y6puHF<B|SQCO=w>3YWHxu1?J?}E~)4$?zWqQ*;z5nyXz~9sQ7+NyJ<_w5`
z0-4PTANryjRv%LwWPl{loB%6iyoDzt!nvD3hoNf&i5qsP+A@m5TS;~$B0F~vxm16Z
z)q;Y@gQK!4M`ulr<{;IaC3H!M&Kfc)V0@#Dk^L9*0wxV*I`}ITlks2|oSVzd!`&;X
zWW?5x3a5HNZ<sD=E<|&abI6NrGi_}lQ{XczacfI^gQvGE->P<E!Yp-XsEZIy)3a|+
znF9!mkZ}$TOA|FJ5BId86%ba}j8!)S)DL=T;500E6as5>zc#S51-}v$u_;)A)Tkjy
zii^yp13!R7Sp6xQ=f!_6{Wqs;w{~wHN{f`2Zk5|}^gH=~*^0BL*M5ffLRt2n?tCl#
zf4=<Ef5ESs7C!x@fZJ+-v?>NDLT*Ttf=7b{!0r(2*IA4MdYxJrLIfO+IP1erB7gui
zU2LR!tHZ7?xe(p3Nem8-%>=<eJtY^0@@(Fq2ePbMzJfSZ6$<^FLOj|fGC-5!DMUF-
z<%7>#sg&sEm`h8np}}M9_{4HV6BnAngCe7!YejZgr!MB$B~idzkcYZJ7X;}U>IQP0
zLWel5!FL7yAe!#b2@0h^h*uspObQ7mK0(f&P(gS!Wx#hxErmbR#K(dNse<G{f5s9K
zDk=#6<1g6kcDH-OVYNHFKEqlC8PbW)cN|uS&+QF|M*8gzht1=viHG_I5&eA?VY-h(
zn0!K<HVHvPDUHZt-(a}{dKyh)>E}UV7$xv}aij%~cYoa9SYL}9y-8%xd8ii~!b1AK
z7~+MFhX+SHe`(D!eJ>GjuP@9DKC@luj6@n7X<NOa-8@~0g~f@Va#?1_yB}LV(=i!~
zC7tG{t$~d00TUoqxkJS|2BDtxGen+FL)5z(un4yZVT43DYCl!qwj>N6hG~flu~&$?
z>#!>kuumohA=#Y-fE$^jrc^3j4A|%Kb0`DKJW&E}L&+<?DE2(XwCPNvpS!a8$W}TM
zcEm$9sAc}SSbt5=VDI$&bF(8|;od}jjl0!6IllOb3ug3Z^)!TQgRP@IE8UIbV{?y>
zoavcs%=@y1FmY32g`}@wg@%ML$&Oz9{G1OsA^QEK@=<Dua0<14MY$hQd0_if(`%T(
z6cK<%qnM`pn)NT|P&hN(CaA&E+aTilYfn5n3<0I&9lmBT)shO5gHozKA?j&5893~n
z00<=(IE!AXNrIUr%jA0(4V~d^%;WO<!ii9=U*4XNk7=g)^TUOF_e5Rx+JYiR`=5l|
zbS`(+yKJFgsLmW6X!of``*>ICpJU19@$QFl$TRo;KVf3C!i4Y{+1>#6(;-?Bq2e<;
z1P=|UP3lNZDO2nMs|e;mlSy&yscD9hnr0vwM00H1<FASSZ}{N7Ccz3?v7>L^mTOtd
z-HDuxrW**01e=qY7Cp%>^V&&)kSWa__u`)804K$7PpN4Yz5{*vrf6-n)+aTGoBR$C
zSqBHEdq0$9TQdK)v(u+7gUOCYZ?JKsU;G8#{+#Sibwq3H>ZEvPJa4P9!m($Ywdc`g
z+PZJFtSwyG&6n+4@`k8&d%e&q{3q~`fp`ZKOYRLwSd;=v;M@UcCK(j0nqNrsD$=~F
zehxW?;2t>a9!x*lPvb_;iOgs?j=lv=r}ei$cxzc6tF<AGW_i>BfjmZ701Ed{zUVR*
zCtS_Y@hKMPPFq~ufxO-EvNpAO-E7j7jWS<Sokac2!6iXwZ}Df)%0*%av#4cKQo@U0
zAYK=mN7}=k93qHl6Nt;X1~4LZtuebGn6Gn$iN1m$hLp=Y)(t#v1bmdAioR0Nfng;D
zRvvuTv$o{S$(i;1b327x48%{s%twc6o^d^AO|%T0>PkHM8S|<2na@4f*Qx}M&rcRQ
zn|hPk+*hFKeh)wVZE&dRhZ0YVYSwfjB1u_z*eMVSgx8?z5Je^e7FN@PA4+OViw(em
zDP9l$N~Ywh-=O_a#Nd7Yls-U4hcVeCIwF>0)-UOsX{rx-T=~qb|BmZfsih;@;m<W*
zT3<Ok_R^ktFiVm1ru^;ILW8rnCEm2KyuL1f4tZ&^OT~WlERsafrm_yQuZm;HfjPjc
z+fHyVZG{l)LbG-l7&Ze8J=h&oWgLUtGE=p#&WRLvU3*<yYZ~3rqt04q$nV84cIb;>
zyVAIWomSamNGK^4%~{P3$t9Bw^{G_-PbmL>li41yIigudTk~6oq*4C&2IcP!$=AQ8
zSyC`Gdee`c!Y>;@%%eg29sIH}{4y5mlag?oyM$jR4NHZ#K~e2VuLUoVV8)4#)9V_n
zb1I<)6$|?KmGOwQtAU6Lmmi3C$cJAIja?G3VDSnRXZte<SNME287*F+g)0y)f*8P&
zMd7P@<TK}$1cVa5V#kmJT{}|^o!0()j|@2S;SV>y;C!JWJDn@oY~GRx#c;T`!<Fk#
zzb3via5wP5f#(JXhk`wcu{s`@V5ie-h=#r{#1OjuHIx;Eyf}^$FwE540GdWBr2>lj
z#4qA>oFpF=bSSn_*$pfVSJDMar+A@Xj(t66yQyt#M0B915zR*N*wFy;T13C1Xir6X
zlI9EsncNW=06w6;p&}VqIk9icwv<JLr)?$n!p@5ZYtvTJ7Tw8PCvT3*Jt=FrQSt_w
z##%z4L0oU?Azixt>?aXYsSh`{+b;az;`#jUusM}+HP!FEoa<>)&iWyoM%^%@{#<rs
zd>~Gz(7k%t_pvxUbPHJkW{BVo)LZFe_;y_kpTA}?eCoi_&+erd{)uizDO71N|0H+g
ztg7qn5rqC+&rmPx%|+4ubUNi!wKP}KX@a_g(uM8*3U*c!^IwzAbF(%V80H3o=nuq`
z{*K(8AO5IjXdzte4@dop!Oq`tnA+-wN9Pe~Q|tm)&HTD;xcAhaYG@%`x?w(bt{W5l
zYvcW=*aDcPAQV9_xOsk5_D7%!Ky+gnV4cI!^9VRPI_EoJY_XdA(mie=l|Xx(h!s$#
z3-PA**GF6qu6+IFINq~Jpkxc#5n^>~;5)tDsaU9FiK?N=%6lEI4a+LRz^Ak#ML0-Y
zZ=<cW)lwg<xbeM7qaiB?+QL`HyrFX==zeT4b`JQxNHLBq*0e^Ry5=ZT12t<O3pr3k
zdVbwAe`Owhjss3#ThtX$r1*V^FeeeA__%D3ph^r~j+w<uhE*IY*Nj9V&!tka6~ccw
zDMW<r;Qq6qF-<aIxyr92(1>y|CYr9Tb{P-<iM#wV3jHDGmrH?}!&lSR949jY-M6_1
z$gNTC7MUsF%fh_)o5in~rZAhBcPRc@dtnZK;mm^BCAlp;){7W#b}Cme)pbUq^^us>
zWiYmhH)bZ_B~FfoV*}Pgmxo7rU+IGa4aN3fgY($b<d5auzCa(WgqAn{QF_1l&x|?c
z_c*7GFWV`Z?c*JY@+E+o0mca|0>#gyMSLoW3y9cK+mdF%Y&Y3qUD=4Hlv9-2?K}|?
zTVk=JB7se&^kPH|ZUS|pUW|-u6jeq7oJ!2@k=Hh|YY8QXDPCThlzq*ut*yN^bvWBm
z!v*#Wcu~4qR{+;rk}Z@Q#s9;fbc8Eu5>yT<WW-jrO}YcjkWWgFxm`80{yvXnakN^!
zeedZr*~86X6hN|ZuqBgdYOq;+f%uu)&`?K@yDroao4Aor`^AP225SbUZ8p!(Ui(P2
z9(eT5njv$j%hM(O(<`Ewh&J^#*My^P@7O@+K%m|5IoD94A!v_B+NPSNKQMH31lnW0
zA<_L|7GLMdln@M{5n)F@-+%*8GPENj9v3a9F7OZm@(uz&gGAX+Fc_Nd2q0}UQBoW!
zBdZBwkK71}B|!+#oqG>rj_K>@=osl3PP8Obt%2qi@<$Q9WgHfy6pN=3h}obgDO|yf
z`&uYYREl7eV=D16KkB8dat<wS4c@uLkEZ?qht8wcdAB3sclupE#8=Gc2GOO$9|?dr
zSqeqPJN#T)UZ4KlbDyMx>QQz&{lHo%Vzauei9cK_)VS<{h`px?M%2H+Jp6zJPgML_
z`~>lh@8CTl*D}J4JPEiOW`XfVfQ8OxMPifUnkdA&#;|L!`C$)Jb8`Ok@!yP)0mBg@
zQodk<WT%<LgMK`-Ybo?ZzgjhHnKiH2z2e7!SX*36G)}wUl}za%ZTWfUyE@tk)AsqT
ztAj%=gLT>3j;M-go6Th-4A7=1ey{i{H13e_2|3gZ7C$I{a~Gbv58c^~i*Zf)_X3*^
z_lEi}B1mg7WA_*g_%S9ELxv!#K|6?)Kl^cU+D6B@hx>WzJ==1K9RowzK|EA1@RkXG
z8@NrvG%rv`>fC4w3TY~Zm4|IBZR_AP5cnC8le~(4&y8N0tPRu$>LNY&9_bl~of@m}
zNm#q`ZPz2&$y~uxkF#L^%TY)BV8iFRg6~NeHvJdQxWW<NUyA>LE$12?se5<d;80+4
z7pK7frwXIqo){Y7z40e+co`z@A?cQqHs2K8)=tq2xQN>Y>H{$JE1&q3Pn5LNGLngI
zi`9KsaN9lZCwz#XdCdqCd(HS4kTW|)GVS7Z!Q-**x*U?thFK^3SbYu5^B&W6#YEMq
z3S$CmclW*rCA`auZcvNceuq8jn;Mmp`fJA@)!~4Yu~~rSpiTmRSvCiBkX|So7?37B
zvG1<n^NK$2or6<x$nYfE$hKjgaYE2EKj6{f@#se9NxSqzS1<3LKew@VYKahOGt=@|
zVPq(u>+NW3NhO-%jj?Ebou7&f*&!XOWpH&JeFZZtDJ+6Q5M|$#P+64fl_Q{QhC9zp
znJAdunfBRi4m2>47c?N+*hz70Pds9?n{6JazcCmY4m;KOcdpZLW{%_3jty-iK-+$Z
z0oo>DNnDmMjUWs&J=R2YveIJ2?=ygtK&b>k*jX}|r8}g{pu`Z}f{g)`1D#Gv_8cl1
zx@&S$5GEHU=MjCJfEnN2*-m9z2$%+$B7!a=>$1v}AAx-%y+o#|6d_pK<yDp=plPL)
z!A$$Wp-{N}|G+?Sp9j+I@w-NJbUiSM{aIsgdsT$o{--!Pj=BF{hHje|eq8qT!GaoU
z1s+&h1R*4*jAPugfQE=B3Pr<K1%d|0xygXG5|p{bVXnQTlrsV$d~bj^>%dJ4e30(h
z!DQoZ-7Vm-o1dGRDhy|PFwsOZ(CD>cs*Q)uvI0*y4ggL3i?<l{vOCt>dn`Db1SY40
z6P)cf4|N|6Qe!jxKczK*NCw4W*$aYfBPwS_Yn@L*Z#l#X$%Gw&mO}qA5$>rS$EzL3
zD>5b^WTYqy;3dpYz|pF`1b5vYCHlExOB!_iq(hK50S}tlU`6|Q^sr&nP#zv+hXuK?
zhNXjm!sL)&Qt5suJ>?;o9nC2p2Zh0bKHvyyd;x!J6XhtIx$aU6KcUVz>d-(ukIWh@
zLJ!Gc3^11kezmkV`dneuY!1NMYsh;1mL`A?3-!rtP=2Pjk?4QoV%uD*yYW2GhxO^2
z&wsrz=#9sG4GqrcXF`sj5MSB<PVCcHc6U>eXd<2rPjtHX6aXUDmawGX1lR7Qh^<0Y
zW1a*8W!=bA^d+&#3@3+A%(_o-;M0Y}>O`TZfZZb6?_lX|7Q5{ZQ$hqnVP_k!bihlR
zBz14`ApPK>BXA=V#uD`#J#arAjfE54&kn!hN`+5+d&PyG6o9ctGl*16Q%$;jq3LKM
zH=pP8iig(`NK@&X<IfZ{r0Jf0blT>%wDx@Hsqy*hpwrKPMF%<k^}?xe!X$NNF6?-#
zp-&anNie!@;n6Rs>XIflL47Y^9K#91xndNrbBqTa?o2(hPBlkeM7u%ucXxGAy*xkY
zBcMkJw#N@shsE@VhL{uo=B=e_uP1vDKWDC@;zn9aL3Qj`zbgGlcndA!d7g!{+gT#O
zB-&JJ5bYCU2GQQw=2cdZPUPNr4ZRhl6IRo8km8XkhjCD?#FC>>F?*!;sECW_QZnT?
zvCFY%4C)O`Px2cm)^g%+p|$HT{}$!ZEEaauF%Jc=7=IHzBh(<PGduQu*apS>7%q!&
zcmOF;B(}-ll4Sm$jza|Q4$p8PZ^ME$>Kf-kX!~DO4w0cp5-Q#oVL)|(n;hAK_$nh2
zY51f9^i^?^AIgF~1Q}L4Lqv|Di@c+QA*Gq4!rhl9WCN&$yau!?9`;3DMAL>CjCvu0
zHmKz*UdTK`?&uOn-(lBbZkX|aaEgyAFJN%BWm=n)^>swima^okn_Dc?s(}{O7#4+D
z$jGAbzxX$|Ma{?}+jV9zrvoi2fvh4>(O|1&R}J(S<gOC*B8zJkA&Z#Pe|p2q>Z%5W
zx5<tcVgumLAD821gh+sFx<wf<6ObE(-$3eG3yi2!)xxi%xj*be&_N9JlRMCi5|H{j
z^P#Q)kEXC}6M|1=bt&T8-o939-2b>fOBgG(@C@P2YgRJb(E>Uc87eW`|BXIxc;$VA
zlr==GxCa@hZ{Uzb=1gw&FlFJeg6e7xKb7q&UL=te39eTwgj(vUji3<1;(4SzIF1mV
zRJFhO*`#E;`f%5e_xIduotTN)LjG_QDDZn*wtwSCznyv&$MxdwGkZB_IM~n#Frfk8
z{ag6%g!Fa9X+UctzI*>41sl2{e|i5O87Tn)4806TR1oImX|$76*9(apaug8iARGpu
z0q_>6&;y>ujslQo;z|x#wzsRJHJyknqI#%jz+rcYWf81`?`=K)P?Gj?rR&hqUmcCO
zv2L!i8ik>%7)2}!p(>Yfcy$UtEIS(`sM|AwxB_@sUb5H?XUPKR=`JjO$zZ{bR?#R_
zHBY6Ch8^Wt)9n4j?tp}s-@=o+ouFF|g0G-1L1Ae%?uD?Pp3j8M6Jsy|CY7NS*`Ah`
zfW-vD%v2u@X8m=xp;^E*(}q-iwl36EL~MTku~Q7MS?js7F3~H3Y$i=_d&1rp(O{bh
z>M?XU5+IV8R)EHo1E%*g>^-Y@B;c|1gAh~{4oOeqUz*B*)P<=W5?+?=VbN+rOKmoh
zgy93m!Duy_tni%-Ml0$;EC>!#{0tteD4{v2!C>4`417_HQ&hj|Es(!=AH0v)znu)?
z+McVKX6#|4_Y`CvRgDl1g(26Dl04_-T>b7)l%w*faJeNGZ?L7>tBc>-n(5XYpqx~_
z9IUqv=c>vaCYTj<(*z2C#wSqx7Moc9ISNdb&*zoT$-4e|L{%lw2vCI<!Slb$kl(yO
z^)?lva>TIsPM9Q;h%U;wjxQ9(Qx<BT7K&Ymnl~zBm41kQ|GfBFc0GMhQu>&nR)npK
zoOFbLj_Z|5v3aFZjFlCzf>@LlKoI7|&#`gTa)X43&zZ9M_ivE0k;E^*!ITZ2?R!9}
zd)aq!^!mE^)5<f@=k#6t^Lg<Ty3fC>eZEW;PWUYh70rIj$CYRJ82+UiYCDTWj}lhU
z<3`L8)1rW-jc`8czyV5upU@CKm|biGj~0dpVQgm7%?<U+A)?_NLFifJLuHbr9JjDm
zicx6_hp48Cc>V3`rKj!m+)DML>noSdV&&6T92~4#i;dYN<lVoMepYCceo7F=zAiYh
z7Jp8!n6#M1{{g>S5}#IP@>S_&7PJ33{A8jOcvbv!{5>MHiC!gKixiR&N26j>1M;HG
zd&4K9?i0020PdBri=#{cI3FEICBv?T2o;LVAr0CU$nYJwf>jA<S5z8<RS9TUR2qZ4
z{^GYB97B%bq{8`1Pl_LW-~t|C3`V11fM|<mQVGmNI0=Rs9rpo}gh5T=a_s?RAXY!m
zG7`+V8eblH+ghg8!JyM_YpAs)lQWN=JKt;T2?Sf^R5WN_*;xGa?MSVqpQFExgPpw{
zJD0mNf9a~<c`2KXU^TFJ#2*94fe+Oi<8q<ajyVO)6*wXoO9ZK5KOzEPKb1ZZ{WCJ4
zege66_z{+iH-_s8=!(`=L56`+DGhj*lk%HsHU7zR$RxTXtqPSvDs~iwL13h-I(LBq
z(qv}R)F7mVUg83!<#E>l`45lAgoGCB&r2U57o>imNK+C&Pp#n~3Ly4V8<8S2n;};S
zv&A*?^WvqHIIemr$yf1GEPeG$NzjUy9y%)hq~fKAj4G#b+C%i{XF&+7U&&>#p|v#}
z2G3D%YY$i!T7c|p5b6WXXvS2l;Mrgg@O&6zJBmn}lYU;H!cBan0U@7c?7wraV|K*W
zH$BAV(*C2*2d<6AyX`q^6O%@F+~({buJgV++TAf2_qPoy(kb=4{?)xj@k~1Pk4Yw#
zuQg{z{5>tsAQR75#V2qS1p%7@*1Sdp%xw{}h%=m`bc%RFnUX3nW67WiLLos2#X_-2
z18xf>1CUMi_wYg+)%v5Kq69Lh*9V@z^o0CKK^lw54dD;APG#zoGd_;V+Z((zWDHq1
zVznO@#h#^1<{hU6BX-WK;%9LZ5Hzh56<z1$vk*66IpLx?3`iUiCe0<<fT^|teNB*9
zJTD#<3VYYdVQO7n9H`bc&^6GPt?R7o$fQ$nD0FZ&H#Sx^xSF8mX%!M}a=3IqN=2-x
z|L*^vm49U=1RDb*R{G(TZF|*l6>G9AU6ma~JyEbo4h<Z<4)a~dHX#Tug>1qjx&)K!
zFtQ2fuFvZ>IGylEMbWvZym6|Lh%z1v8rj9UCf?N0lwH&FSP<95gBqLSA!l_HQe|wj
z8Jo5m)5IaOLLq?j4`6tS%{dUM>crCrnD+-dxVEZ%aIS*lI3bq>Eyo6Gb3N;W9}(y`
z!}_4v-D)20M4S&p!`@5z`(S(+INe)H_#plqb_=o5Ey%NRI1_CsOTd1?!cmZd@oAyS
zkdEhp3N%0zkHaHwT2`s(FhUE_Jfv+Z;|>`ERf!%DmuD6OSI$pQZ!N`IImv_EzZq|9
z7<%aR$`(i-y3;+I{Zc{#;ga{&;l9C{Kw^~fJ3RHmBR_O@eQET{h$%QbIQ{U*_NkGY
zT!UXJ9}|BUu2(|nlG__`*oun;0U{HZmFA)-hDvi0qQm-9r3h8QsZ2o!>cyB-$*csj
z6%N$)pm~9Dth0@(!dkUj9@MTD%i2t04swGMFe*-ZRs3W4DmBo^U*tj199%>4uL&8R
zhH}P(K7qMa+(Tr3h{owA_XQo)iKdY?LZk#y3tcX}bmY~bI|D1}OK=2^z8F!qNC5p)
z0|SBn-tP8HDjAP8)Z>Buz>+(0R28+og@@2EDLP;>DS2IWoi=a3HQgMGHr2VpJ?nLC
z@f*wEDzA~!&!f}~){)joL)>c|7{9dq`X8x?<;wHQ;L76v4KeN){$6%B!J6{Jn#wZs
ziYF`E;c#<Sjp{@kx|(*<jKJw?w-|O+r%1(?5_5;{2GVr|cUQmT;0+AvjKj4EcR%WS
zs3hI>&`69BqF?B1X-%~N>P(>#*3(u&yztx?_*{u|gNO54`pN$y<cpg7BBeu=8=}$g
zch_;!jlQ-_dq+bu)f9_11ezi#F%Y_JwX`+3O~YO0(QIAJ60rsAIPFGXcSoi+)fh`O
z23(D?v}imRN;IHDX8!=s0*G&5<7I`n%JwGFfbP6SsBSX|*%-+Nin$CFI8$qCAo9jN
zMwZKh<}Gv`==*^FKkP!zcuRFQ$!65qs1<w66a+g4$tK}KS)C14u;K$v;pUY(o63bX
zb3o7g-Ny0u&b&3R7S@<66w`3O#hmRY@l>j5_$(Nln1!71|H|Hu47Ofl2*F0o1#9|D
z)nDN6L`yQ^mO=w#G!nrG%HT}w7}DM_s4|yDTo0xJlrAbJv~~?0irO1?1Ic0seZhen
zIGu^oW`b_wm5+qSJ?wJrq4?#hB%<23Hkl$q3$4UN0WWiE5+q=WyMmVwt8)*7+>kUt
zD)savI_ioAQ=2mP9-r?EPuB&ajO9YdP@+*+?Eieg+016&v%IoOEEj>((_pz!1o8K<
z1hvA;UkH#r4h2i|7^adXlUA|>85D`88GBO$*@Aw!<Px@T)lSQ-K<VHWm>}I1*r*;H
zEQndN23!HH#9YnM=%z&M$_F*xiUnha{dOE9@k^}I2omPX;3q1s@VlYnoN$9Wpqv1K
z<qkXrTt(n6nD6TXF{7)&RUh!<LPxV%@p~y3&W>EQ>WOWLd4`1?dvazm-{=jgz<fX*
zKlRY3E}Y-_;jv^B$Ki7Y`&&RTx1f)qy#~?VBpe7jw)m{#Xr;nh{A!ij2q$dmtRB1s
zf*VD7Dl5JX%Z+qCmkoj|8r3T>tHk@<B7oo;fMq(aN%<);Cki>~V9Gq`q-=RH*;6g0
zQ)e@ewwvYN>bV<pt`G9`w>Y<NV)CQH71>U;Tw&DPs;71o?jDRKBK=mDgu=JGgyUuk
z4G|ZmeyidI+cJ@9MuiAbFc6t0vnjD)#f*#+m0<qU7*%PFW*b8_US~K~NEgCW@CcRi
ztV}B9jE6H<e<-`r6#6jV2-4RO&gv7sEjt)lNv~+p7A~fu_F+f}8es_v>R~Pwxk`|f
z#>$|dUddIs1k0zgNR?Fq(3MpvM~e4A>*xlqaybP&n9W04hm+{!RBjTLaH>=W6rWj@
zhH`EaQbbaNULvY8lT?(BYP=*QD6INiB*ha$^&~6H7Ni99k3<G2h20<ldsyv87O~>M
zow#wC)!(!>rg2*orf92GlL9rwQD&90ItKg_I@TVi$c8;Pr!T5!(G62+NTXx8%!;DG
z#<mvCz=}c0UjfBNxA-2}SBJx@B}ilo9TFwHu+{0{g5Cj&L8A1R0P_l`IJT_Gcmq3C
zF?n#PkTk1q@liJ*v{bx-0#rxcfUr^V1`1OhbwkNF@Wb>3zkwTeN8Lahm{nmgjw50z
zIee0s2q<-r%+=(!UANHHno1|Y!@zC3G!RW`hHX~^>b12Hb~WwEG(@qVtvE2`dGGx1
zc&$EHAlr@Fleb*#@3uNK8Od#^52d3GvEgNxwXPxPHBNV#H!l3l|8=W3k$-aK2fsd@
zTj-e#OO5sQb@^2L*2Z$Sndv>sCooScMZ%0srv%#?!i?Vsora_*dVav-CA}{y6f258
z$0sQ;^h21z8pAa;MdCPCp+bg}{#KP=MLiU&WRd86<e;lx$Ij~!hU9?+yr|AJ^0U$+
zi7*q^y9@{&Te2a`tkS@MT`fsZiRV06@Lsm(iY6qF86Wfpbwn2Ik<U4f%M^m2u&eQe
zQ2JsIzhp@G9lq&28hZeMf|P*Z-lG0voG>Vd(SJf0s?ZvAa)C2Xgds}goUqE!M!@rv
z5y)mk88kwdz-U+a2#8ofcMSr)M~|d9Dnr6xl5+{D=3#L{p`**W1P<8fM{)@)sCGIs
z;T;;6K%g0fEETu}N{sby7TE--YI_(}+kT;0=#<+M;d;AKoQHUeFHt&Qqf4qmm%AE>
zN>d{)^-%|x5Ub83A0r>C<rxL?#L_Kk{^+PbfqI^tj5mhT!wnxcIZb01x=mTL-B34F
zTVE42N8{$^k$6+DWA+0Zffqkg2#>BLPIvUi2A)cve!^K>6LTT`!h#0Ezo6>a0kt|T
z=P3zAIS|<Q29(qQfPk%tXfrtm3OI_Yi=9ztq`ubgV^zhLvM{aAVONZ#m%F-}n!3B2
z-m2CQGYOX3_@_->um7QXdJt0&Z8^gm-EWwMe?rl)L#RU-1p#p4!NjALJQ9&^^WZn~
z74`M>X!VKuCTE?qHc-PJj*>IQsDe4k<Hk%_^yl2WlqcN(uQ>1uH`F7}HGrtS)UH0~
zYk$H6_~PG|9&bb&@tSlCHe3MD3WhrhtTvIY52)C6INE9nF7;Uezg?;M+N@p3+%F;%
zXVLPqi{)cn$4hRJt`LM^BG`m9KtQNr6}QyFf%)@_pHSIoFDtSwx8BvV+Hw<~(PkhQ
zMc9tK@FCfgMrRfaYIvBBt{(4Q<od8medc<jTpbGD!tw)>LX1hydXX@rn{LoK>qp&z
zTF!2KNe&!P-2-@(j$jQ{zf!TW5=y0wRI&OM;17m$Gasw=wZ`MvICkZ$ZP#(2@>Q@S
zclQsFmj}#+i*l}tT)32a)M~llA6F#9Jyj&bjVGH2ygl*DTSt@OCUfJNbB|Ud!^PS8
zn{WITI<|BmeD<R3>Ihp+NYQlx+pju!Xs!T%$B2*&G!3@+4IJ+{K9s@;U7RWbq8bD@
z%C9!V)G=EgD!mI$SJi-4UBaJ9&4lQjFthqLLk@P1{)`~0u++vF{~XoqCt6z4X>*Xf
zwaIYP*^%M*cjj^;Svv8$cxq<VBRawXMuPBUKGhZXNaqdqOspZ=($w=L!dAc2Jqvgf
zOdiy}rL#BYWaB`LxDc98&sfHL#oh?7+ya+5us$o&M|kR1r7wpKREf)ciweVE(xp5O
zAvA|tWQjp=oAZ~4vUXE+_-wV&E76XhY<Mz@&y^2<D6RR)#-|+dg$FTyH7;=Oe_pQi
z71f!?tL3zaR=(O7$=`?XVDYsggF15v<OFuho8=rw@D06D^^pY9GCUZ{xi3`gFslQr
zmVerOdGr1`$Hja5w+>?+2PTIgc0CMIH-R6`PHIC8?}<X={pA!IibG~ZKBJuG;t)m*
z7)!^yo{nev7=##nVvk3N@!@-$$0Nj$zPf+wa7GLsiTf;IZAszVWk`F=;YfRnhO|dA
z1oha|tr2uQ@Dr|+CkkZ*r-?#}(Ci994~09G%vAX;>|*ALmtHQPWN^h(0PP+~Fns<b
zLwovb6_XT%qeR(4@=94H1?diJdm#6vBEr4)Q_i0hbtw0`PDk&k3U7ZjYtR7hf#-ie
zYhwto7T(}O*jEu?;#tG{fu#en2k?1I!0G)YZ({b7N`o?m_~&Qf8Q~g?!7+gJ9#}zc
zq8l23-!s6rLK?NNOR^D838dGO)o|B>IVR8n5%Q6(ehqDl$c}V6>;{_+EWbvhF>f5m
z_H?vy^2(6U>q2t5rpeNzv($^Jwc;yGmAa9OUg>+K7SHSdeXb<Krt?h|x>C+Y$p0&S
zZ1MGfry2MfucG!s$4JP?EG5D6hS~6K>AS)u7|*{eN84d7L{QAWhQPpuO{2kJxhy&i
zro}<{QGh+srkw)R#A+tYD{9^)8_z5Q^>hQqH#4WvWlNH*yTGDA7A+PQPf9GgM2Eu;
zM2g)Wx5K!Ys5**8FgPrRildc`u`M_3Ld<us?_R^x@0>fE>1auHq|l*&x=}L&yfksG
zge~CbF^5m5Php~{3bocPu>b*!MQRziDrTINE!uIToztm-4?J^Wr*m_#F*bB<bbPfV
z77q9u;<eH4hHNgk-qqcco$8EXrzWzS^3mqr*4)|m{OCi=1COt}L*vQ5hsGyIItpR)
zKsXxCOeA|2T#l6+-JOHoOVbvIaplZlb;A&={9VHwR(VsLmi<A50w%jV5?Dji8VVE1
zX&_SKNkjsT@H~m$0Ssk#1S|OWs2&uY;8<|-OqpK6`l2>{&tXTMI*vSp0cJOQt<hYM
zpKK(Qzp-)byC{>hCm<e6zm&xTy{TauNy-XGJqQ>F?FReRvY$o|WFul_85wk8Q`k6t
ziVWKt5-_S)<dOYji4iIsjx>R3$KQUWy4>Wu^LN^_?~iw8HM@9f*(N#~g3K<yJ=mS~
z_kZb(_ssU;veK6w>lOXK+_M?hEasjkPiIa2%wjIgj{|VV6$1J^65#A<ga-drj!ua-
zd!OhsKMb<kw>%axSRBuZ9*b#l712>eDV!E;cBkEjzA!Gc$?P&wj=^W}8o=fRF9X3v
z2L+eycBU2}K&V>U6`W2e2#3S63wcT`)rcOCd)F_z-ElXT?$ohHbO;uY!%}hNlJU0X
z>@&}B6x=g+pLwC~>AJVwdh+V!b6bn^lX77g<sB`FcnKmdfM^DbU?^snp1_Tw9A)iK
z9=vi9(XXzA5^m$cD;sdnu&*ex%Khsf6nn2cDE(vL`bQC}$He!^{!Z{+oS&N>j+vac
zhed}|)j=zQ$!@i?f(o16ij&r9bJ&~?5+|?0qcHH<1sh~de?q|L+Vi=&t#7focKK_q
zi4oGe_dBY<x+7UE?p+@wGXcruy6J%p*+{}Zf075Z;7Kg*tGeTsem*^@i|MQmg_iKK
zx<_wZyLx5s(wU9ZOS3bRa$lBsC3L7y{~<E2MDLDsR32By9gyh#559S=cTj|1`^p1Q
zgc5o$nhpPg?lY^xInga69BndB!74g6OIFbatRf@M%?D->ajCj5+p6*VU|YesT3Zu@
zwR3A{F#)F+7g_-iX$EUUHRB2}5b{CwUaHQjBI_0wl?rI8W=`ofT-Qt@zW0`q+m9UV
zh+eqRd3+;ke(TJgsi)q3uub~*)g#TO8kkMzAOdsZ$2paQ7nlKaUsDWa%~K*6K@mMF
z`G|}u!2Su;mp^EFpyLceZwIU?ssT{VDP}_bZ(~evXKKb6x5nm#*@<yxjgdqat+8Ts
zq)hIPV}L<=pS@N=(B9H^gxQsO>dB0^l5~ysh`y?p)<UlwgU_yNm`&lL*v2)?95l?@
zA~cNctO&L}MZ@5*K^>^cephf<Met@4CAQUJv0ek7L$H;*UiMuWTCl8aHpTS<aNXtH
zb&F1CoWb15wtiDXHlp3Nen@%Y$Op6u2A8eOt5Y7dWGvX+u`_1`;mpM|7s&EnIW;k!
z@Avr??c=TN+Ev#+dT!(gqJjD@M}N)xA6<RZZ(a*Mwzw=Wubw~;ElF!dJ!BnhP8jUQ
zIapGv9@0Lt;UlH|2u_q0aeG2~SgdBt9l;K^YCCfM=ucv>!gMwWM!Sx+nmUx5OpZO5
zQ*t;OS+@!bS`T3uaM-{bEW01&Fh>qR`tSif2kAxhMkxO|HlrO~N2~rE>;v`JK<G`5
zUEMFE<9qJ@Mug)6r`2R~?z*tC657UkAj7e;i0R`#m<dl{a_XH}`pNWw4&EIIWVP^P
zmxRTcDRkK>z>@{hHg*&RO3G1ciuTm+oBPwC#f@@*T9ogOW9U(;^)&nf(q6K#LbaYG
zCP5njF4Jwb0i(q@go5ocMs*0=oiZ4@KRR@OWS@)tCf(-*zMvt2ax;Q0im^8tO=lg*
zoCpBR03{V$ayvnuEm`+m=ntkM`{|oH1&c#+DEBZI*x@+jCb_r#dIfHVyEsVnz!yPZ
zMkWw$pIDhVH9w0f7%vR7EL=@0(CjH$U!~TQY_a34C?)3(DF-#Qw`?~Jzdv0)D3S9&
z^3L{g>sYm7QJ1r0pj90CZ&l(EWAiU(J1*(#NU09<RilGd^-c+E!k_Ww4B12{Of-u#
z0j{M0@G*p}Fu^pVKZpnafc2!c84)Z_yVHV0)oyay5$*z{VaH19j3VbKzSQ1$adJ`R
zpU2?_27;9V!@N6qH(w&$D&khaW@AeS@7$Kt)6-OyJH0l&y0j3TicZSoqay?Th#I%I
zq|_>1pN1SHyQV^wZk$38has_eI5~wdyB6EbRVn6`e&X<kSg+qZs@j)A&iam7J*^t`
z!egiOOUMed4d>D8eFa9(48t9NVUVIki(&fLF4DQhSiMQ33lx4dz_>7&&{hEv`m;!B
zL_k3b0%cBp1%^z*c{mY^Rv4CvmqEtO4wy(s-He#DdM^bv)z=I}PPtSWL>b1HDi5ZA
zi0b1Y(9MUiJM5*;W4B6nO2Df>r0N(Hhio`~S`bcOJbhtnld_5awl?Zx-_ovzx>>lI
zMX`~fFIq#@yW1lu$t`9Mu~yR$TE`NWTohkli?$`&+iGjq9<rO8`ZtG9ZA{$R^m&__
zQ+<OUZEUD>n>&a}V$W>xHus6yw{8qC#=Dd0l-g~5|KkJo{y;||RvXnfUjKT)F0T!3
zY_0srIkBcGm1}HCnQLl^X2N3f_uN>%aHX^@`^AUuCR!qU&nMae+GqNni_p5TC%$k%
zh@6@bO$rWB6gy!2=!6OR481VHSdJ{A?YFuR9v71+cd103(v9R2tS%;5M~ws{S={9V
zaq-d(O5$}2mJ`IQ_>7fCE`Pl0gUTyq<2hZ<(kFFVB_{<-5rHlK-l_wV;KepJ1Yu)u
z12m=UYpbVAgikfbAC&NcojfV1MNkh&0Ixs%+|vHN2O@;hD_`4h)(N7S3E~EHSsFD$
z<HA`$!k-X-ibK+t1SfVpB9~wlGKgnT+ZV9bn2iRT2~Ln8cs+vmMo9DscBcngK$5T`
zZnte0#%gj29fBMV<6h9^H>ezGq!E{kLkb3*Q#bga1{8jSd;8>LlA=6^G0}b;l)2)4
zj4Aqj#$DwxDUz>$W(<w=;7cbPzc>Yl3{7G=a{2N(sOP>us$0GM#O23tUO%^YZtv1X
z`K-KkW^;XYd1-E@Z@h18c(66sn(gYq8nuwhtScU@)s-VFv8fjP=Yi2;jlYt*Emrxn
zUYcq?F*mEzn9mnA=A_x;YwjC)VqW}0S(tzSPqq4awP{ZpJOQa0&;F-1IW|_*oyJh-
z&DrITJtR$(hxK3oTCvnVW@in5M5$*nlexS48J$S8<JnXTk$y&akF+E^&W=m2kVULz
zr6%MDJ}bCFHn$7h)qVl3Zh%{@WnH<@@6u$shWt^;WenXw--m$c_uBk~$Yi2z-F4bg
z^op<q<%X5l^<r(UVYe<=<0G?*h@bWEP>Qgp{*6&&5Y+Q|`u>m$4qx#B{6Z}iF#Iog
z0@^Y!+~*V6?Jz6dZv1!@!l?7WUY=+g@cqcJy>#-2crf2jn=kw9vx4yKd!BvwJ6?dC
zJpI<UJazlllaD@p<N8Bac3_~at}HJtg3r30_8a~$)u04zU~w?kAs8E~mkCse8aJ-8
z9YbJXR*e<bE&3!#s4{crOWjeFTR|(==i)8V>|)BEyt!Q6q;VUPUFPQVW78{!Lfgx2
z2eDJl<Nmhr6AMc9{!s9-&HaDUwy3#3tu)!X@Sc&r{ui%=&t0jwYYl#5_nE=DwXKEP
z@Hf6uj<FidpL&cJ`d|A|y%}U=r_Z<8=`#ZF@Nw~z+;Fy|URt~;8tuR~DriT1Vp2Yl
z>CbrM!=K5srGrHlTwc4^Wha0OjsdG^xF(ouM61ngy-DYa3uhHOqNtrqY$@n-8VGV1
z@VNazyijf2(l61@m;+!ObtAC0)bW5sy1(JbL7U?T$g#()`gE|f*ilqA60j&fuibZt
zTAfvXN@YZL78QRjZGqh0UZFr|&)(yEkKMRd*ezT-e{So{#@h1I{OsgJ>qzVHV7@<B
zJa<C(aqb+aFrR~H2|-XQ>-uBo-Nj>PSvz+A;;2IY5_r-6w=}sv;^@g#Dfuty5KN7f
z34o**XcGk5Z1}n&&{xoA?m6*~xqx~|q|Z)DM#o!492Kfu)5j+L$FlZ`mtUw#_=4c_
zI6N*#xrE!fgnL|qhf6r&lOW+<GQf6ie%4zug!Omt1r%Tc7xmSms4D}P2+@6wOESM&
zCaFgae)RLoTNQ^C9A1yZTPFMZ$5uubz23?bLAxM-`}WnVd>`C??)I}+Z(V)zk(-4p
zh07PtZ=E3<Y<BwKPN;p;I{`5b<=7}zBGD`OA=nPAg-EFz0Xlxp$A98o@lpBWoRjwo
zNB3w$tfAF8d+%z`Fd9l-9QFjRjO~9^+Zf^x$8F{-e(#Ak$ZLO*?H-z`9pLT8sRuQ<
zF*=*Yx&0omJifi*nZLXst`<$S{r#@?XsVaBqoTNHANI>4GSq;v%c8+)5naqwqZ-e7
z#7kUM1Y!Y{#$tm`7n}w&{6AEN0o#5J06myyMx!nbW7>5)IJp3k5%AZHi-6So0*xmL
zaDCtOfEWwegqMyS@E8vVF^nz2on1P&bas6ebFnZzIXD2zBgL9YYCbBrJt)qhYbJT5
z^#S8UBcLx=vEm<=_Mc3*j@_MXd}y?~LE%sL8M^Q8o}&Jg`+uMbPI;@!&%IQbuV^V4
zYjY1zY}{mREcL3B*#gpEG1Zw9=7clCD_l(t3pO;~K$9Zo+?_><nH!CqMCL9!Y=T4a
zJc<9>>x6l3-1XRzc2v%EQb@yGdmJ@P#Svgwuya?v*@`Y8PLLtPcdhg&Yz*X5bPs{W
z&CJhpFK_<L{O0LXeRF-Y(^C`U!$YNhoi1Qn#gN2O9`NgQs9eR3D_>;2#<*TQN4vCh
z^i$;pcS^&~<DZzy0OhrLRK=oSWI7*TmHt^-<Z)p`xGb*lV8f{3aM@iBgtFCOgU{+M
z1{+)s!KJJ;*>5#&iOe^@)1$34ZSS$-AX+E@!)W1!qemfm8RJW?J<lOSReTnCx^w`$
z+huoy&-AEqa60RL5*<#xo11EYVDs|k-i2*>LtbA!eF{*hN`ZmEeH=^Xq#hM`GGW>*
z3R6TArl*xyz#Zk^|E5-Po>-_VL;y5gxY91RT)52Af7WS`OTzEV_JU}1Y>Q4K6_AmP
zObH-a=W*-<o7ip@)JPWJ$z(#gkR@we@?lroc0KSO;sCf{6s8uA8tTwdw&l*PEmbva
zUE10yst0*|WVlp0`0s0NS)ixPu8>sEm4zq$mF$X&TH>Q>(d!?>pm?mrg1D`n10Oz?
z{m@-3k!7ZX_`PG83ZRiR+yDV<0a41&%C^Z=!iUB;M5jXzU=AfXMhg{^AWRO(_YH(0
zrClDC1O+lD%|gtE7(X49*<$@E$8eY3La3C(?t($B-oz<G)d9BU@aU)@jGi6cT3=mS
zoSnwQjriL#&6#$W(zCW0SVoq@!qqpS%vAc<T0)goO=Ivv3Tm^bTeO^H=Q)i~pkZV<
zl6HU@c4K4fN7kQMclkqoQ#VKQ)1?`V4|LbtEM8Y#q`4`Y@%Yng1Ecy>MkGm%g+U&B
zWqnnw|Mm}E{(#x*Oy}~WeeH6l4veS$UHPr67u)1Sv)^E7sEtLW{&)7p>VN%v!{BTr
zeotj#WZ{DFtFmpDmd1uW7+)Inad8+Ngc~#2j5b;#pkGadeswq`koU33v9?BTCtD+z
zwnlTh+nqKO@Y#pnj(sZb^1JzBsUvO6jV#N2VdDJO=INEid3k(nw76iNH@je3=>Nei
z8jJeB`#~%m3;I`HJfbyz)s(@mx-8rge?tyTWYPwEAS9aYH^ds4Ss{S{Tog5Zn_v%^
z9rjyrLj^dSh?<5dYKn?+PoU-o&^bQQ<1%}$3&EgTLgR3lc5OuL#X^PJ>pC$MGVIp+
zy>1>dbvpI$C}gVsO$(VmLth@SQ&>j(c8?Ic^L_t%1Z(f(n@R0MxbcgDLsEY{dwG)I
z4g;X)$`wJla_7q1p8?kY(TA~0dzW@DUO2yvFb!gqb2Bos1L(_=ZcZaeSzkR!SxND5
zwR3*~$;vV={<bbU84f2d4>*gu$>&;lE<bYW_;JX;tRVdQfaGBB@Mu#)uePkNbJJ(%
zj|@Rp-V3D2%!Vu23#7)bqW=7a*_Kp|(Q3;9(KsL)9G6Co1}6}WXcY?t7a)u_bosVf
z!8jy<x&YN<WRtS&KF%G5M9PhvI6Hj^aOiYeU`|*pam(_>i=>P$UcGo_LQ_ci;_*mZ
zb1NXqUX@U>wEnB&0ir)aN=o%v1flXusonj=ud5XqLyfuU#Av`%Trgx_y|&@&V+%`Q
zKW*r?4NcUxQ7^z7oBRLs;L?b#tmPk?Qd3vI?v1|Xbf>4OS-(7Hr^RC(oH{#SxIALA
z4K(}Y88isI^$u~h;)?9=D@_2ImNLA6m6=9^svnVSQQ~J@Y(=dL+K>#HB&!`AU#+C5
zC}seZp2=Ynk+!tjEq0~&3sE*4Hv;TF7<i;`Q1iti2gxOtEEg!p4cJVPE$U>$#3~I#
z98xD6rsC5Ov((9ksrWRMtv}f?6`zJYBp?{?XNnP-2R9X)ZyT_@tU?WOcLl+CvJsK-
zSDKZvQa)`s!b0BXNXXt%!&>FR;D6Eo$+4LkL73T{L2!IyePtOUIOPX3R;D?fs^O8D
zA~jaU?aA%CS|orfv1O?kCuEZ<?^NlfQBI}hbq2a8z54CxZ5&wY?r%3adb>4Vt%)tG
zIT|KkD|KsdKYMVWnm5mbZL25QJlWJzx;fpA{kfU!cK=dTq2KD**%|Ih_oi>IRk8gf
zbn`G9o&qz;8DU3wRK7V6O}Qi*Ea%oGhrzH&<Qu?MgXY|XY^RM%ZOIP?fu8_UCy=>;
za02lwns>G%%gR8uwgh2oXX_$Hhr!m;p76J~fU!gc4C%_(SgN`R8q%y~J&TD(HgHr8
zhxkoZCl1Ez8)Lbibb4ZMX7Y5!_8^IHZXsQt9y&KZv0SbuCA~)MI^CVhwy&OAzA!X6
zRJmnHxM6KMyK-*0dKE0@`&EM*IMGGn=VT|Lr>%qzw32g6spS#OE`Vs%%!hzyXo`fS
zGO0d<DZ$GrNo=mwV%M_5SJDoZ?=~7?&(IJ!*A5whS2rMhIWxto8``j7#p;Hti*jr<
zr#U&YT5%EP^0(*ZLr7P$`M}1<&*@#B?7*dKMSRwrEH+kSVOc(Z`Yd>9XyShYg1#jD
z;uq(qBrDn%@F}0dq=D5HXmk^r1zJ&ZY{&o5MhQi^7Wh1vwjHI&9`-@;HPswDsZTb_
zbi)WU9yy9K`LHq6c1-#q(2^Wq1$^|}%vgapTS8BAD&040%%rqSD(#4Yaj9aXFEvBK
zQWd0~f)!^U?H|`?eFo}m6^phP+gi0L&99JqSg7my@T&QCWwDRcPdqv0q@Guq640fB
z$Q-@+b~u?#(V&jWAZ(MbB0skbp1ISa$#!u|a+wT^XdnVrqsp(v=rCGf0ieRoftFUt
z76ATAyCA}N$*jB70UnZUvoSNRtQh3{d86_C<@0;SZ6kF4?DSZHYn~RLmo&ae7%#%E
z7HzW!tAAPn_!7kjs)VG!|JrMRq?N_KX+=bepA-?T$BOU`*;&Z6pp(ZEs;pI2G_Ng&
zL9$B*!YJD$Y9EV8i$w7mS`6qD&OFN2Lal2kt8oBoOkLN*hGM-TXgpZphYW{80%ZJG
zjHednW~L`)6cRv9b)bcYva%Ec)dy|ROsG6Ob1djNNF-?;Klo-e7FO-`->!CA^dG6U
z_$vK`vP!@I#idyZoqQF&wTejv%`u`e1~h{+0HkcOOBN_DyHm0w#bHA|hK=!Q@?|1C
zI6DWB-OyfBEehIk@+uo(6izmzvQkc`d57!(23aqT2gER6sKxn-aq9ksasV;`d|s*v
zpiPLLNr$WyWkV3$Jf3D_YxS3hsJE7*v>RKi!!+FINx}7|b*S<Z1qbASF@m~)X<;4i
z=ihPIOPybIi1UbGj}A%}W5_HC<}IX0sWO26Bvty8QX4P@!U9x>(z@Cl7VJCV#CO0z
zigFB0w9Qt0<8gv^Q-CQZfDG6R!`coTSm8JsuQ19k2zS^9lW06*kEuSwww&15APaiq
z!p8ZT^_jKhMY5o&z=IfB1I=k47Lyh5Aiu5RsFZpEEFXeu3g?d2<%?U)6hq}XbR0}9
zUrv$iVx54b#<kx`>F?Z((rn3b?`ps7DIBtx!_na70;R<pdu%zSKNvbPQC1wjE%My`
zd8Hqdxo^Lx=JcYNs<yD13)?=*eV=Jd{hgCH65Id()Z916iUb&E<scHC8^VtGU0xbj
z7XzcmsA#db`X!U&?3(0q4v1D4R$Y;bihp-AslcC%2X4im2u4CRY%|#A4m+KVCY1G<
zPzofV<EeotF6?##St``_-iN3Kv-aQ<p)w5lHow8;vhI1Q>qne*{pi48tM@gSA0nm>
z1<DM<6Y9n#|MKj8jH^BSVZ)<;(P2NIX9-GwylQP7GAy}?eVd!}^Fu?#DZ06{d2xPY
zetmgqXl@9VzRp2s9=rwZX;=wO@km3EbB&g>bMRcv!A+1a%ipk)CO>SpqOgZZ*gX>R
z3%O#OG3i+)Ve|TT<gF#Q)^E&l?~z7N?&iHKJ>%}S+N~*X;ObawzpHm6-eZ&0j(Gng
zVRObjeKwQV8~Ik;X6nlMOPEcw-Gj1sO6^RBzIk3W4Ho};zu!ACw7%gxb$OvNG9sR7
zZ?UK?^j=H058;}QaI??R)n4mti2?w^+R_<*40iP#YV^+uFUZdi!-X70NBWIv$*H-J
zFt<%s@h*aCFtHu*XP~QCCm@Qr5v?oq5gq-?OKMAp01pqj*${GLS-Z8hdEiNi4`6<E
z9??^L=WHZ{8Z+VqP(c<tqmHcQVjT)=T0qK(pDWN!Rj2@1)Q#@dVr>6dH06k5scGS<
z)kPgZx_`c_p(+``{)ahmTKqtnGYM*?)3+DPAkiyhRR{sZf96Q({qtH(ji5IvxRN7K
z$X}NIA<<#Xh@ztg{Qw7nu%K`nxs(O1Sv>J;p9Oyvn8_UC4LcPN?i#QVn0vF?x`+BD
z)D0@&Xtg^K92>RQeCh32o*0UtXbf0_hYSHTpimHm!gK-F8Xi_D4Mev(ed#B`BGi-O
znC6+*((cR^-qLPVd}!!hJwv=6&{!9W)g@Asr)(NY(XD}OpTF=68$N1zH|sU8oSFR0
z^Q`lm&40BpAPy*HfU!`0LvKsZ6C1q>Ez#Ji@nzl*@11~gGSKU%A@T)bM%b58rir#t
zi+y0X1`!d>_&BBvY`%z?m~9gHZSPV_jOgH?qp9{1hc2t{v)PKT36bt1bUJUzM6o_v
zxI>0frX3abYM<niF_7UlI*~S~LjAH~P^ySZMgA~{j{?0IVF}WiQIzdcu5ECD9sGf^
z%1(9pPGqxb3pk@~rlw@e`FZ!@o@n=n)|FxeUDLvty(cyM^b~VKE81w=chzD8fuGzz
zrgSviMT_KH!l&d<tb<zW3=Zu_FG^mEVKIVzv;giO6AWqM{_z`poJuNyk{O%RgY+kM
zgq=90=md0dhZGx0eQCEdR;k9NAOMW6-5Q*lao6(05AW@9a-4^6J^bX}&Apq~AFA7}
zyR?07d2s@$fq}m6&I3eHp)y))J>;VT5!8cFdTJ|0_22hCI30Mf3*&3Qt+}>uQY~^w
zdP-T_4dJ5j9ogR{daM(o$<r=6Osk^Zp{mAtl)c$az${^T8B>^z%qSZ&MrXm?1p~`t
zy5YvUYUh&O?%eaccoRXQ596<?f8g>lhC-ASW!h{!?&4M(4&@D-n_NgXFK%8uf39w$
z4x#Hsc)W$-fo$i&-kD^JkRT|oZV4u+yjbW2;W}-Hs#2i-yZ?9hr*jW3{p(-5KQ+u3
z`qRonZ^HN<mK|$kWh^dJD2c0LWN}R{lLL5ByUXlC{#o6~(8o6dUNmbqIjk^8JRai?
zGTqEScDahLX_0|d<4q!YhawW1V-BhK$1ay;huGcWwv~)0pBAiMlh+C-{jecLFCNm%
zAM)@K$&5X7h6~P_oijTZw(B<QHda^WW~L_Pv7y2KTz6MnYgyaX;0Z+M{?xlFH0r;)
z>awO}_WZcxxca`5^ym$!p48T}y~jENSZ`O;M{tNgW%#e$Df3W+*DE`c5U_}T)=RnM
z6R*Z*@=Pfyx8O1bOs>FPuP6l2D)5%z@jLt;!2Cs1NDK(30BZ!h<91rj2!}uhVCU-I
z`ThEL4u@~It~OX>^!Z?kiK1^$edkl@bDurr>jQ%S?)UTi$+~$?_x-HPtN!<YzaN0?
zqTBcP04g^+xfu#gy5DccN+5WGRXJkj$*X<q_wkEs3~a@NLDrd;mYsdVR-N*z&sX_w
zbl3C-1TU2$2E6_|l^0+Ay@&qv>QC^$^2;@;SAIUr;cm<5^B_DW+<x+j#~*w2k?Rj#
z-aWUqxv>ULxY=nyElYdp5{gD?0HG`O)2B|3fXo~_=*VJN_tkMXzBsB_xoy@I>uax+
zI-&EH3Hg?}y5_g7-A6~><vUZKrD#@n`e%8Q8me+q!jyw&->!A*1yTZu-`{}#1M!#e
zknouNa90d;(z|EZ<iXx1qt!{RnGDpei&&e`rAxeH6Gem=!BPO%ktB(l(j`GJ;z1*8
z3l(iJT+Gf6QD^Nuv~yLZ&pL%N=$7V47q#?lR-=VwZhErZ7cU0wOAs+^##@Sc8(LLj
zk4Uy4IZv*AT>1A|ow=IdY-)=PT;Ejbj^pXt#N*f0cf*rG1r^gH|63`U<gJ58`%l+r
z)&Z5_IbiXt<=*@4yHCD+MoaYiS9d<}LH^F(ui#>C-zB3qpJP3SFFf_t)U9`{aOYid
z;aQ_8#Ef4-AY)xVJvM}_<TQLW%)AL%7RErzbCGttz#@C(Hd@fKN3?+(%fSi1u`>_{
znUqII`mz+04NzQGb*(A%q{LtOD>}iCn=Pb3RfR6ao!vfj;*bFBNF;J?iF1K#O^iz_
z@7{i~@zd3kg>Bo9a#nESMK?xRf8&dyRrc6X+_teIIc?h_r3*Qxu>f-ppFaVc-DxD|
zU#HvXB&fcRw>pMrX56t`%_uU6ErA2cWI}5MuLq$}@RTALO99mp8bf&L{)T|BueC$I
zuMuFfwXq(_7Xug0qF#+BwMK^X{k=V99g}NL+%Y+D-0TTo=_C6pclLUX+*YfswR9_A
zwe50=B)sc_p`oh2QbmFFDL`oJb>Y1DyzD^}ZV9%Q=`0{Bj5nN&l2cm0WR-Ns;X*CR
z9r#%i40{9895~}Cm9M>Vxr%S>$X<zi9=8+872d3p3=J^iDovOV49dcj2zv1mSq=r{
zw=^JoeQ-QF!<X-SJP3Id!8Ujgcu2(?d2_=xmJLTC@Cbg+d0~5N^Ay_D&rXkzr2=Wz
z9y+ZBSAlXOm1{{NuTu=5BJBf+0TeNJKb1J%v5!&eA#G}L)$$I~O=GPc9pOZ>DHe%{
zN(<?}cC)#?Hq%zqdWhZ`k2GB$H;?qW+v?ptyu)<UR7WP%9E~N_4%1!T?l=Ni(MuP8
zqnZZlz75t8>LX&zu*B;n@t0*!614Q7^|D+5SOL6-+_^ljrAyKG*Gvp+b`&St;cU7*
zlFLIa8jyNLM}i#(C|5MwUwcDNr}~Bn84P>KVjB#GD1%Lt1fIb+aBRxq-=JVsnQMW@
z?(D1h=<M~u!ATsqAI#tg1V_PLWVO2S_>$Yr$fO_K*o|dllc2`oNL@1SoIkgA`qc8`
z{M6+5=+Gb+)mER^5Bra@%PcVV{SnwH00U+ol+fN7XQ}5C32vnjXZKTtb0Wb#4U^)W
z=#d?BlM-SFNDmUIgRr$AcXkR+lW-T79LU3-Kyt8%XwspZ7#}c@0nElAN7S~bykYFX
zRIoFxAId2JcyK>s0g9?Tks!e6Wbi8|!LROPFi1uN_S`w)>>6n8W~WC-xINUGPH8NJ
z916ml!U1<pIUr=Hxruaag~fB%=zc`$CI4Vkv^HAnGkAgxai7Crt?QfVe}6yP$V4;s
z-t-{~Yd9KvxNm4Q)RE|ndxG(iKJ#R6sx4YuS0{OV&G~+B;>IKC?@`m4(e0%#S4~py
zT^;RgyYyQvYYUez4{!-EwLk*Sia#a?)=$HRpPc~iAOsWw^^I3y*24nO2$EU23-Vro
z-=Ba7EbUlK{HP=c*^aZu<uuyu%qJ_pW4$p*JB{c^kOT)o6izS%FV)mNMAadP>jMwr
zaxv$ao`ikE9)vX6wE7@mB9;U|C2YXuRe7B1W8L2{+T<vYL=G!ENzV#fYpaX%Gr&p=
z=9yjY52jOek}A$Am2{-dETjgD9Nq2jQw|MD1Ib~{5SK%dYQbup=Kl8uf91m`5kt?1
z-{*JLG!A9Wvz^ISCWh|1&gnwq_x4{DUo4TsN-)0+m&2+3Z;8F*yH~(H&U8@}k~k*(
z=@&-^Bs&-uc?`9WI%OIxC_=KMx4a#OI~-CwHP57Nk3bo-*Qodg+;vbws#QjdJ$S5p
znZ?9dgmw6)W8X@h!u8N7MYD_vqr-!}-JKn6t>kC<@P7f)Ec#BHgjYJDIuWy@wNK{m
zJ#w%8R_DuX#nSaPhbfMcNc3vKj5d=`eph_u8{c3{)4z4*E7ep)+YU;vS()D|tmr|2
zk3aM!xzLDan`(()C*`tWo+4Rjk&qN-Fku1=^OxX>q`FJwGL^c^LCr(0d_Bwo^>SXs
zr{0Q&XhTDSFtj)Xjs!eP-rv^J+}ch}J82e?l~)TTVNOzaPSUj$3<w7GWirJ^UaVL?
zPhcX11(b$#;y<k^NU+*mS6_o@oxC}^xHWj^(u>Z9k%vZyPo?_O9jzKa<VSi^)^MZb
z4K$6lgi1If8<VY`3qQEHygvQ8=RPUg8-}Nfm}6E_ncp2Yr!ual`n{KPJxxk2<tnoq
z3jkLB;+Ljn>`pYY<&~7fMT-$?*@DmtGZAezHJZXe5InGgT33QWIMDcu)4k5<ZYHGP
zp*I8nrQS;>sQTJ~j&${-qekQC$|$&cjRhmhU9kYbPr57-4$6CA%OL#`%%mT96H8GJ
zpFHVu@ao7W$o!7*r1UR5&hNc8nljj>%c2M6kwCCe|Adl{Tw0`m4+cGzOoGA06F_L6
z7fA{zlB@x~3Y;`JE;Z<i`UXM&fMGXSQXN@*N7a$)J7(rnY3619_jrT=tTU>{e6U|c
zZt@lSA_-|Q_KUt>-$d5owL`v%<w2DhG(oYzkEVE{jlVwO{E-!L>!>e-VWN#M)YKGT
z-|zRzPpe-E_#H}G$>$4rT!A~qm1Dp1L4Pq>7u#~jrAvZv>B&n^JbVL^eewMExwBhm
z6klip8R9;iOR44-;G$}k(+LVx7YipvS)yEPmGJ8kfpMZXVhTC02E9S}Rjzx#IG706
zcw9kGIM)~sN0%mw>i3SZb7nX-e1a0v|6Zz^3tgFZce1G=dj92+!CrY$)y+RHPX>=c
zT~|R{n+;DwJ&X#cK}zs8`Kg(Sq`@rpAR?F(4Yu`RBS7&~FAA~<suu-VinY2RNC4N;
zdW8*?ngUyMLH$~Q17Q*I)zz^vL0CPzx;1usY-M2%-&Tk~=dwzuFgG5G5pA|M=Dhys
z1I0jjc$_$<uoi%-l}*2fS^M2$0KB0wn(yd9^j<v%UoeQl^uTP##723=)BYcqOt?5+
z7WPi&(rp=0o%WB5b)C7ynZ*O;prsRCS_f*hW5NNF7JrqWiOw3)Bt?8U<xCn|Abn=m
zK9fD{Ex;Q-P@p@Yo`HoWZ*~NU2`kW4*#97SFam)ERYH~re+gc0P^g2K8^$J((Fjxs
z0J*U@0!4pGBNo^YRtY)y`x=9E-Eip`Fg@907<UkTj4d7Y6r{jpK|)6fiBc`p<`5Wu
z{GJnygJ|H<LlC39HXYQ+viPoaa+sEBV1<(!<U5GIs+pG7<`ggAODn2?*=A^{U9`^9
z%%y=HSK?f&Jy-L2#cwX<3KYNDXY0E+!mYH<%t%sd3X@kYHHVx04z%124ovrch>YV%
zBGfkic5<7O9gW^#<4FJhpAIE`A#S|2C*vL5Ts!x^-asgkW`0aOGoH8ASg$?C-RYL>
zS5%kz%5MJR$~zZ3nz;eTEC%CWKte(8FDgiU|JaBmInp&aI+;wG$z}*?A6iH%odg(j
ziVKQl=D>>KKtG0CH~;|DN1t<m_F1Y~pau<Aqb88*J53_{*sTr{h7;XOax|#jOWKKL
zwG}x!>bqr}!6-M7sNBHpu$b?Z4*(-l_vqBfM*v{4@-Lw?Dl$E-HW<KMPL38JK5&2`
zKip$FM1Csy#6|H@+}$$q`NKX(iTH?d7L?)6u*0G`!>aTIy{fl+i1aiyD_(HN<VdpU
z1vBw!-I?3}L+<I83eZ2i@mGdBfaT5!+u{eg$>~46G}hTr8#J42W`m4cC~Em0tVNLk
z`vX3=nn9f>6gzjx0@@82%+N|G!8M+>qdk|n3n3!SLYo)`xX@@&EmmvE8<ZsC6iTol
z9jUim^>Gxv#7BbG)Za?coqXx7IOquPOV7a+(_y!hDE5`zZpDLHZPXy9>M+;>$fud@
zCiI!Y4;Ro`2t?)j8+Ce7Hw#RWvEL!EUNdq7;l$^+=g)1dQEs%3H6sZ$7dsW?(<R7o
z9I)x5Tcoz6)8-&~qJfG&=f7{-9*K-DTBj6W^BrP-+V=ibZ?D!cb$Z3AVUceSrn+M;
z>Ab<7i8buM!B1UZ4O3##mZt8f(jQ-_z4+cGrpx}V`BKkswa-ShmZ{n6vy%!oxp{Tk
zGTtlpM#68&UmCVHw>jc^XVmx>uFKG*;Nwfb)P#lc5(+X>gPK0lTfA>m$wyFSiWWoZ
zx5Z&GQ5~iP-Ec>c>;?(RR-1al!p2o!dYo=V>7WykZ7nJ{{zlVn2=<l_Xps=?y}uFZ
z*C0n%bwqxEqLVv6h>v(el$IQOC@QZi{#4=xDZXPTsWJ;p9_6O>by9}wd+WQ~XL-*R
zQi;LlBs)*NaJ-Ey)vm=l4m(dZWCXXwD<7vuEsDaDapLdebp60lr)x6aUSF8WzwPYw
zY0F@R!&Umb&Pb%ek+#(v+RbgaT6fSk@ql6Rp#3SAWp=#h(dFqvEc^yy)1?QkrDHM{
zOFGR@TLT#-G&KT29T4V)FUg*<jASqlqdwRo+Toz9v>*^a!q=(Pp*EWtdJtv^MVQo=
zL>X(Mpoz)EBD1DF{u&ITu(B|MBp`5dpF<#alFti5em*}pDdS=LVZ}3sPl}ze@Kt4o
z&k|p&B#=dn$z>M2_{XJ`o-G{>qrKVsqV@iwGdld()Cwc;{Bnu8UQXiK(%hm8Us)rA
zGn}@w)I3)LwGr`qC_n#O83iPQv@lJD3re(h5G({X)G~kp!h!!$Ub7hHhmlfzLumt$
zcRB4P5!=GC@5hdfF0tGLbx1?dpEuAx?$_h?#<JUCi70)?=4a94XqW==Z3$mZ8@FP$
zh$DH#2A0+486p<M<%aCBDo~SR$B-Szu{#BN-f6^g9oeZ|!R@kw(Jh`11r7`64o3^`
zG*9#d`?HqhbTF68?EjkhO5fn%P;@TWIN}S02G-AiscLNZHxYIGEWli!k?P@DF2HR4
zCAmqWk`M5BkmEEG0>RF56le+4VlyCI3!|cOj_;{S0WR%Jh{WT^lk<TVz-9oANgXT3
z1}S*{l6IDL4~7CK`Cw(*amKq&A*>@tf+?zw6hlI{+DJsWbHqs4?dnL$Lq;Obog+p%
z)-xS7$Z;NrdsB;xV`GbJi>qS`WAoFK#DmftX-TlMbplgB>}spI`5g6@1ZglTqFIL}
zKrkpap0=P!O-XSZLOG)Xep|lh%}xzWN;NHmbL|J6eBj&+GaTmD&=?tRZ#DNlvMLAr
zejMg(6c{r1h&3kuAoKjC`la^S)4`7Z<N+^VtJp~9GMUuU4_{2Zk`kBBzc8@TP`m$~
z+She;YGzg;NcDlgE!Uxmu{4DM%Phom;}mFSjGShMBf5~FhUPKdDkGaA6h#FTYh~J*
zFy*Eza@L$^7-W-6`wwRjP{aQ!64;Rb&}Azqw}<6X77O_xy-$qlXsUKA0XC}mMX_S7
zVg9+DLM~S8^E=({SfK^-a9GJ<Ic<%uq^7S`=?8J;eS_%0QnlPr0V?8X_*+yNM&Zs(
z34hP}3`@PSFi2};kk+UuJoM$1tde*Ogf$?BAkG@e402^j5)g=CwSk~z+H=^6E2WIG
zh6iDg7NG$c>&;0=0NZb+n_1|EKLd^{wo5BN0uG1(u7EuT+La8orA$?B>C2E$JhOMa
z-i7Am%9VlVE{$dz(eT3=juq0^hTeI2dE$U~{O8xqr_W4$_PM@HD&>raGgp70`_S4%
zd2t;046P<{MtDPZphL7YIf~F2o#0$Mqa`7&kO_tn!&u-*C{o;Dr3hZiiV_v5DSNHw
zr%~c%V9TMA;GeyTp=7Y-95sqkm{^T1htuWE2-6eeg99Aqfz3&DIpxhnxxUo4;IU3~
zb8=?AY|o)GaeLmKIt0$KP>0GyUXrNaW<9Byw@&|THMH62_Fbi-bO`qE48o!>a#*T6
zDOy0CFIsXUyl!F+pa!7IrzZ7N_JPqQsvl5floq@lH0z)P!HQduSGU-25O<WYi;`>X
z1-R}819||dHNN}{JJ>C-xDf$5&OP)vS-4E1#YB;D5R;HZ9p_FKcdc?K;sfeqVhgJ;
z%bysO@Rh%q-Oe{We1aY5dlrDz|6G0=&&~?M?D{OxSwM(D)DQkm{FkgkGfy~IRN+7j
z<)P}K&zXX!R4L(y6yPHdi6Rw^7c4%NOfWk#=PDDXMEm$NE2$|zymm)CR1=o_{zI(8
z-!s@dJ^$S7)TT7@(z5t}bcK5p^)>ER^H0uv?m4|g^(LQqcxW+Xwo4{YL%25BI@+_)
z*El{l_xQ-<I9N+(x6bs;HRgTULO92bds7XFNw&rFva=~F2}VF?vG|I0Ux01zL_sTo
zr}4i#fI|xmG;K1n5TXL1=I<z_A?|uTAm~>y89aV{f-&G5z{;nQTo_4GvDk#|Sg7zU
z3bs*uEDog91G_5@_$J0`EPFT#XT~5@+XAXiRBY_X5c~)@5~-Rts%g-H7Zg`QHOmyI
zqLwT?2+fHd3n{60EEWtgREjVMBR6->li$>wjMn<#VW|8{PR2I+eB|1gw=uMJrs!`B
zoxjQe`jt?IZNCY9^*wOiSODx<0N2e8`5|`JgbB%Y3bo}1M0wz5@bU$;Q$>RpK!4zP
zvlI&s8pIG04M!pkAxsJ+qct`{cyY(_;-Vldt}m`(Tu=say&gn0L#qbg<BTzc_9!WA
zfD=vdsbGL=TaP4~fvv@hMINizSw-WQsSI-0_+`v`QkhE4Q#5XwO4T?Dx6F!4Cu5{Z
zmEK@<GQ-G^tq9-ddKvf(zd<t2PmTe#K<#NM`%wNNCB^vVS-_)=1`CipDAi%SFlH0f
zJ)9jt;rE~)L8{@PP#yRN=l~!x7<u&Qn<(U^-U23EheLg11*D{HW@coBs8eQEW=@Sv
zk4!m-okIhCU7Z=k`<oiWDrJfnwWh2bnePS0!bXe1Ls=zDN(+o-Rh#KB(iFVUgDR+$
zCFQD~CB>7QMFkaWlM`Wn_~i;bDSrcQl*@-Rqf8H}oeHo;x-;mB<F%Kwqill^#a>Q_
z!gdC$TG<h<i~Vwd>Q=Vapl`byB%}GV=w$#*I-}>c;uVt<Bm<;>P0+s%(d;(5%~(LH
zVljz^o2X(jp^C*~Fqv?gA;i)M)*Y|cv*#B*p14OXWSLV7S>Eh$lnWBjHj~8$K-m7K
z9uB&*>(V7Eak+H;(zU=&;NqDLV75_`JO(gbU#_c@Dw1Onp+@lgn^S>9id;xiDv8Q{
z?*8&}m&$#XG;L6s7_nR%l-0c)(ppK=4i&+aoOw#q4kkrA`~jw^QCLOI-gW5|-|$Sr
z<Q56Rne&p@vm&~@MreqGAN!1|jsUHN#cFZF-$HGa6>uOUtS;yZ;KyrB=n#O&(M^;Q
zu!?o7)w~BY3XYq{lUNG*f(DRT>;>F7x4~usvy^g0sF)yuDIXPH{&5Cn{20oROVsJi
zwW}MSc&aWU;)pKyurm*Qg@h0nTCIao$d7<R)dxTPJIIDP$#)<MR-6?Jia6L@9rhhE
zRIictlu-orz=7W(80lvibwA_8U%~9!!JVD8wRoJi+s^f!Yik$RE}Yqnuf|U=FHTR5
zkBtm-5`auP&=`m{)G3>;w#ueUG5eO8Er+RU?8_?3`T(a@`JNMZ57pk4d9Fx*AK<oX
zF6sGa);A~t(^Un1UV-n5H2MLGD<jd$8$Ty~RahpDWZ^B+GWW&OV9j%gHKNga^Z)1V
zO~50|t}?;*UPQdu_f>l+7KQdDLQ-hg)4qkI)S4+}YRRfxYOk!tRjzV5U5hE)Hnt0Q
zxozm7$ACTa0dBf`{2337X=dC&W2OO{9)@igjG3X$VB7`_xT{^6^PhX)d+|aM+A^!!
zUwzI9MZEi7+<Wf1XZg>68YS7fm_lmdi8je2SQd$JegR(iJg6w<YLp7!bXWSOns%EM
z%;-#Jrc^w#p;q}O(uU{}Z;}v*MI?g&F6wJgaZ@6Sn^Hb7u`y#g&f2AMzyJ7=U=ipe
zF~0F*N8(Z0<3~FCGx4bG@gtr6naKNmC*}!Mbw?hDP#4<#0*+pMt<M&IZ*i`?jL5uv
z1!y~>Qt7eB_V*uq=CP;uAKicC`h!~=tDr4qq2ElpsgWE9&G=zB8kje56Qa3e0bi9O
z!2pZVv4~i(#LV9&@;b>Fjzo)TKvSd`9{z4_Vq#&u;l}8C_QU->)6c^kKL!p~5-H{&
zGUp4=j)Z$Z>hedsU43#>D%t4wyATgl67|*LCeN_B#wWhYV#huC3u{l^8koudMd&+i
zpQ;QMGX#+dSoZqQP!M@5mHfv<wr700tu84C3op&Iv{uFLe9P(5V#@FwQ03GibqJf{
zM>xbH923o^rm$oa*Oze~Ae!g~%@0r(_`9|2@7QQ`Y|RKZ5n)FZ?qMTKR4@WZ1Vy93
z!lOX}jug>E6`jm_cDwc0REQ}YP!Wot_8Xw{1MLLwWia@aYH24%)QM)u8J<0TK+boF
z!Wf-krow3VI*?i-sy`OVb1fcsQvmY<>O)xvyi^EW`U!Z!yhOA}r4N89%T!0BFweNv
zrg^|o$RZLMXDd!lilYkW&-c4S*)D%;-7{DEdo1?0R-H0`WYrGJeAM`#SZxJx#)ssM
z%izxMN#vhg`Ov?e>n?Q9)M!-sJ6p5enf{%XFQ1TTLxdF3@Lz}AtqJ?4X)Z)nBzZX$
zR!xN^x2?${N$yn%P%)kDQ~QFo{0j<whV~?4`DYr&@dC)m-DcY@^u3hb1PUWF;Uem0
zsM7Q%@g<s||4k++C5Wr`k_jjn0!SR_T!6UpcMOU_N5k|P$AwDP#zlih4{8!h$D+gG
z-FQYiD%R*39X5cgPx<jB4+(2kf5Zwuo;LoO2R_fNk`mY|e`0~Unt_~^FBp=S`XXub
zikrx?6DveK%v4j(*G&71ldNn~2peY@+`fnGtvVe*qMSbTJ2EQK4tqSs2WE#K9e?ZV
zz`g9R?_Ju)mbrkwhttYfCZ(zj9ydFO%0Tq>l;CUTNZ?f*Qk!p_qC7H}>f3HqjK)r^
zo42ovAJv1gr)ZFe1}{8aDKI-S^qes$D^wA?1tMsR!m3i3o3xnhC=vpWnCL$UXd#Gp
z0igi+;H)N-0%p7>Q^Q3-Owg!-id+W=Sal)dWEl<AP;`_lr8~~b{~@+=G8#lw80!Nf
zDoMswb0!85d2}G%P{n%+Gfu9q7L_{t6#fr{tik<(kTptJg)7Pqx-~egn=5ogFH(X5
z48U+)scev{gas-Wlz^v2L=nZSqUb#Ip>7qmt_{utCJAMj=mO2UDhv(g`#3)e=1M1`
zDTz9%Aw>Q+I;GA!SDZnE|9{RHfkMM(7KxfS2P0>iH_n`LEPo2PeJC9Dc`rI>Y7<#8
zPRof@bTSnpCnutr1L08FQ>kX$XQP^-ql2Yx-EPl5f>Ch~CiY-|W4!|Lj8@-T8lNR&
z^xTsfq3n64iGsa|0+Kn4?zu24N~iaH)4FGMI6R)doNTo_JU$UGv^ZZ0FUc7u_B#Qq
z)9>-sM27ohzt!&d1mcn20m$xK*xCOIQ+*)(7sYoG0gxTSS*|QVh&3o1ICTL;<6_LX
z`hiCStq(P}V&aTro8sfBK&29F6FU`1u+=y0K%g@mWwd7)2kF|9Ymt3D%Vj6rUNr;{
zg#C5sbkO<&Sw$NwoN7vi%OwEo2))d}jc{&IC{V1CJ>&MWk`%y<RQof{ELkT%ylCpE
z$<}+_K7UOj5)D94#K)*U;IvIPSQp!$9Ucs%yC!1U>kBdg6tST`10-Tcp`*%ekAx#J
zxvsy>&+2MV5{2fiM<w%Ud+^H7)hE;AT@QmX>+UzGp^_8?pkQ0r7j7%>D=Z?_y#X{<
ze?}6lgQCf{qoA9Kg`-{?MKd6*2yRgl6&PlbilU+R!OuYLlGSDyL@ukA77@N%M*9<4
zj?0CM7YSH;asT4p^!7B^g9yejI?~;lN;NjQ(QuZsQdAeKA%`e6#X_iTI>`jbrV5A9
zUOays_DG=B13HyWJ-ke8WDRCSeU^%ZS)DVPu2-Mzo{Tp{GDFpGB5Z87)q7l--ZiD1
zYU|DmS=nKV4MwYiVYx0Y{%o<%NF~hLzxLd%^l-ef$2t4)jnK=V9I1);?L*1>gG05w
zl7VMSoNDi>?|(Y8`h+VQtaqmpf3Jg&z5#<>1bk%-_Q&JOBLI*}b2H81fW<7X<k6DB
zhoB(}yv$f17H~0%R`i=es1YR_)ZzrD6bh3L0fr<%DRrGeQ%Ls4QWzf>gz>d;Yyk{E
z+L!C;?rcvs)>VaqPHPA_grk#uM%V~495Q^TvT2_*Os(ZY#{lQKHdRI9v3P2#P~^FO
zYM>_<Y}}A@bz5zgl6jU(XEapR*ev#_tk(@yk*aK_`^nX;iY%X6i#C~J4RxzWCKvfX
zn$<5s$Z1xeQl6MWj$>{hi=6NZ`YK{d(aR4rO&w%-hZ3_am}PX1kxeqSku{+V0xS)%
z)AuN?3u-P1wdKG;1YHeB=e57LqphX6Db-M4Qxy)mD$eYgd`W^>pJi&>mYgRgQqwtC
z?F0RFh4d*?8~<SMPaWq=CXy4EV$o=YnMD^729_gQzCYz)xjATsMN}hFABj@190;XQ
zL=Lc=6a6fmq(B6l(`vg;3WU`u5^9b(+TjL}E>U0VWr`HLa-mm<%M~XMV~}W}lZ*v%
z$9G~p<jjc)P-6jHS)Le2VJcEQ3_{1l1*Dxyl+&>gIx7f$R4W1p$g%OUv%~1>27}ML
zU$DIcP`cg8k&edmf$8Q%pAsaLRsykuz6Qx*2JfGPm|1w#7SMOX?l{bLvjg6M4Yhq}
z)C{(9lleNb=|zZ)-HznB>NgT$1%J&91VY&mS_>m#%iYIN3OX{LGz#`HSP9uvL19AF
zj(aGW4TQyJY=vX+TL898`U8O5k=s%Z+oHpYuR4V_&)5{81aen968wPs73;mg?ye{!
ziH7q4?-s;H4!i@|j)OI;r=>*aE54LkQr-cgLgG8ox-+SZO1LFz%ES&FZUyq!Mivqk
zf`=|m>T<jzgDPkSdiL>DSl)3hpEv^(;2WIwrY{Gx5ET;G^g4t?jRF?Yu_ar(lD|sk
zzgq0V0^Rt(Qh1)amm8Cr-8t_`y1NoYk8R)X)ZFtk$C6TVklr6dHB+%TRI~Vb9(ArA
zLYs$1#QszrZGn#VXr^6_qJ8YD^s$=knF3{zRkB-eyF{~$s52q<0Irdl61Tt#L{wRF
zpqAX>z}B)@OouQ?c)Z1ZKnk2^VW}2sx@0JswSKslu_%zWa_U&f9_f#D`V*qMO8uR%
z1YEM2;0~hf5(zR`@^jBMEK9K*J!J;^dvmNRCxb+bhRrgZGsus?4$#rs6-##1*!Ah>
zOlg^YUwg*poO*F<N-g1OU-7^0epPDiXy^>)8ur(hE=k9wT8@IYleu(DTAumH!9cdT
z9h?XGr&mX+T^+6Q#)ZQ2O66>dhT0~8)?22u^i_0Bo)Y$z%OE+WhL<?s3I9utl^On*
z5JE6@5u7acwPeh1hX7o%#+Fb;f@{hJg1!FUESQf#rIx6#tBMBv)QlN$$<nq168RhF
z51zcPCV`(HAn49nJ$k8COY*+`wefsS^BJQe@X`3}d<j1x3gU-{l^caQ)>u!lnjL2D
zmP1Js64Gn(m?&XSuDRYdk9+1mwQU}!+mEfrR+bjPvX67EH`m?S+LBJz*SVsuNWjOY
z%70|4j4eFwaoTdpWOY?4Ri*LjfBk&ZH_ETBR!6B$zWvLUrm+${1=OtQqJn9Z7Ssj|
zNudjh5gyi>=(a=BTsFJSWxox>-fgqHU!t~TLcr>`_)K1_hz_^lkha<C(U*+lKfAkA
zDL#?io83r~E-lW_PJq(5zc1C5LeGL&GM1>XHB9G84KIvSYkbXmeio(EAgJmI0|z0g
zP3rs9X*v4uoeYcaK}gY~nM*4*Yfe8q*fL;CZ)eJT6qHZ19&<truP39)ZBOR0<@SzT
z69lv$M~$CB0VfdUeNK61s1Lqs5YE+%NTj!d8D|FbSD{qNlR{~=jD4+dXuDnS?FWTQ
zFiWS?fj(NSE8yfLZR^R!$pzPhOBu|=ZEb7GBtW<t(>AvEh_q@`2h00jfR?w_4SwhM
zmCrtU_6~k3!cuC}Hu?|#7zyKE@%x6peU-%XD7MmaHxF#3gH31@b(@nyL2TyeDQ^?7
z^RtTNbo9c7B4}mFUwADv(M0z{IarX&K?2TUwm3*Rcua1t9Avmy2oyLRi6y_whj^Xs
z(5qo9m;N;Ym?qA4wU2O>>b2<M=W^K&^np$s1NYYY+?_B64Djx$seGRAw5h_>QhqW&
zF+3FOkM(7{p|Vnq@rHWCE(;tHgQL5Nq`?H|oBqE7R<jKLqshVV6j48y79T&ZpIt?q
zk1h*FnE=8^vQ%tgR}s=f^u92U0O`2^PU%&i$BkBtf{eOXr!66hjxEtEnis>OX}(4&
z`^3dRQBeeQ@XwrZyx}%;&S{5RbUVb`U~WJG65_hoQ4xjM2LgJ<L_JPkfZ##$<@Fp;
z?hG+?HOmKB&iRK!juzaQXj5}!NI*I7Z8YQ|%SMCvBv?h<?%ED!4j2Hcs2%9<=}uJv
z3Gep@TZns?d2;a4b*gAY9|3HEE2ou7P`vRRY6OvAwXpH=k;B<c2qm`ezBeA}cjjx}
zY<R!x{ngp&+(<B!8$YElXyjnT7ug+)+fC*NSu@b#h0qsnxKVKX1Mz$Pw?m)ke*s0e
zzWtvMt}L9=6!d|4Kr<uGbT4`!nn{|ZA297QD^MHIKj6A0nnYZz8P#cd(N0}Jy`E{&
z<)tp46+iKz$tS;X0elN~$w_%Y6GFu(xb}-8$Qp0LK|q`mJ;$z7OaPVbWV*2sC05_#
zNi2nYL6g_3HmRbZ4p%>$_dFo_VClmxg@8I%n_ls;DJy;P=-3_;tR^oGqcc48NyFdI
z$b^tS_QA<(K)cVmIXVWZ+2`EG-1^d@Yu1G(cj&;@m+irM*u=GAU2RpA8F17msT{jb
z!Kf1i9kfVCl_OFi5P#P0^9YjtP}7Rv8QWf}wfL!)yj;*-{$!mG?LV(}kLm3{S86-g
zzNw-jC70~3|0-I3c4d#Y{2Ww#uU0M3*p5iNdu-)%DjL$SsNFw@hBVD-YxVlj@H6IW
zs)w+1X7mxb!3t_W-cp?N8Ob6{Q#l`^R}^y^fTL%V?65{G=-O_PZU9h+25M^aX#ilg
z*PtXKNFDgpk+p3QNmhwXYq;!scDOp78pQ)bNZQM?ArPywOD>7f^xEA|xEcqnet(XJ
z)E@>SQadpr2oviQR3oMc=wRL2lpw~}<~EJ<73)Z=uR4?(WgC&>LA&J${uDk3YpL|7
zm8df9OIff9w64^@fA5~zOPjihCwAw(pE(nSDKUtTFbdOYVOvZq&O#fk&3WWUv?V4c
zQdtm*p$ZNY`scxkN3&}44J-{9@7-?szz#MuYO5qk`fGrPh?LapLYm&xz{oFYy^DS3
zD-Om+LBC-jn`|}~$JSn!jfWTmIFtmcBX*iSW~b-KbDc00PGJ4X$dJ?DfG`y>mYEr|
zd1iZN>%xk8+B`L(jE!Wwxh#M<l|l@xn>pos-cgA#{cpz+sGd_QjwMn(k7Tf|FT1hz
zuM5wcns@}v_xMb^$s;`s>9C41)P8|Ywd7BJolOXRG9|0mbIXscPz*#aAh@-LgMe;8
zaH7!G@`2k4J~3Tv^mo-_EM_{Wii83Pe<AiI_<SXAfulOqKh;T9Q8rV&omq(8ei!dY
zdhcPnpX9OLX20)Uz9DU#M^C&V%80Q4XkOJqEp_j(qOauA`RA0Pg3q1dmZ%dc-Z2_2
zzGm%d$t^nn-IbTL8{_=&n+5-E!5=gGV=o!kl>g#);r0y8ru5!`db{!bjpv?v5*y&!
z16L0Z_V;!!Zf&lk*}yc|15jI$@9*pBVv2#tS8Jdc46HzefYDBiN@qp%og-nDe(D$!
zR)gMncgR>Zg>tWqtmK$ohKiX1aO*($rc$*`htC4k%K*}#!=lN(J84Ex&Z1fy3&?E2
zB4)WyvxANx<UYY}OaVLn<S99Y5HdG`yp<G*pMw_Rbffr`dbl1p7Sl=Ojh7!n#|^im
zq%K{eD)UPRm-c5b&Tg-*Ql<I$n09g?I8ELXhiK?YP;N`;^sh!+0?3(j)4)n!GIG5b
zX<!YK@Q%>IY72jUPFS)x{sBu~fG_^G$_ZN|+T~Q0WU``69d;q<9vA-R(Ep}**;~<T
zuacnVi=41?fX0Y+t9*-~2XOLlz%MfGfeM46_+2jjwcm>nw{YM?s2k`(oGRebIn>_i
zjCJ#DIFZP&?t45^+B22L)7tm2r-NkHFP;8yG$p_dgB(I8IHX;4AP!i3#Pbh{BEEBs
zh9s|H?kJ97cza|jNq;Jd<z+!w-d*0=T*pc;%}m3f9v;kt0gvg+6yFOJfhC}rQSPZ|
zp3Ev<Gkj0%veGZ9?6L-_fBC*yW;K!j%so=gLhvoW1;JkeHN(fakOyX`B(t}x1|027
z)LF52ME|3cgdLq|Q=(6&njOQr2lfqvz<a$YRRJ$D2@+gDs#Wr%lMDPbP0aPTx}1-*
zQJ5@gLUi6?NFt}ohJho%cAnR(isb1}1jk<%F%U)69HJAnBI+ZRjRi~H_}c=APZ-}b
zIW+uMlEYL1;MKxTfw)1JgvFWZu@N4_0yiy}#30kkXOKjho#>^#TaZamQ`IKkmWA<v
zkXC2t73s?=Pwi1b6z_wtwp0%9iL~~Q?*6&?VZh{8g{$HpaZ!w2Of=NV2zhVxSrF!)
zg{GND`%fyWs%a2C){BWcG&J^<eyWGC;6wq+&cG`sE5IvQK^(3(JYfAW?P-hzq(huQ
zK0qv?@DPnDc?Wh79IgpgWK0J3=oyAo^`<%~YyjgRRQWMc9K>RHE}3avdOB4~PaKFO
zeXR08f(sArazA+TfY^3`UFb6;SUooDO>K@!hoIvB1LXY~uBJFaOyTmMsgm9%E?fZ1
z{M8GGmv^v?D@%(!8JU_1F|lsbj16$z>d9}TnuU3B-z2!wzaSFau?0?oYmo7GiVRm1
z^?PN+C6#-?Rj%-m_=hSZZVp9QsT#>6lX~?qAGYLA#opf+!GCFX+Ck3Xh1uza*(qZy
z7<4a{32MfM)2Y7>`T{1Z!t%pmDOwxaJ6#K3sx&<KAd1Gvy^l`_k*za~uSpwwdbTZ2
zeR%X0sW2@^p1XY90L*X0ln|$d;VoC*>U?n`-R9k0(%!od?cTh4P}JemQ)46fKHZWC
zomGD`^$o*<%xW+&ss@Ipzbn$z7Yk|`+l=&!DzC0V)Q`6-?tx!dlXq@n+#ks<+1VM$
z{+Mt<tW~_TJs{bg1oX=)dJwnagrGAZTJRt?gNi~FBcTEG4Mg*72jK3bY&|Gs^w+%F
z-0LD%5*W|OPaLXmSoJw6Y&buXM-n{fFn3?0p|rMqAoe_Nw+=x<zd98pb<&ejFpt5u
zFO07)&SNS@2l^@fO<`Sz8Pf1V5C&?PLdZj;uQa#4*fqtdIZJ}P6&QV`e|Hk2uTgZ)
z&+MxUh<Gf$FAv#wqa<Zh*caOs--=&ySpZWMT+|v;Tl!gQ?o9;Ceh(}~7uqu3L@ecm
z?vU`6cv%p2hg9F_-67}LXeiRUeV@Z2sB7^MGY+8}s6!;7m#9M|oOe8>=iZ)@9FlFI
zlXov|?Qid4Vm2<UqV+O*^>Hr2Oollm#!h{#Xc@&6jPi||YLognTm6a#UZki`Fsm}i
z<w8SR!@f{F8EDVF^pQ_55ca9lZ#@aaI9NCI!NDOJgpz^8K*w*oEG@C2(RuI(r`lP!
z0(WqJ-9FT_e8_9WUbxbDESFdFR|flIH3RbUr7pAx{gv^)WtEHYSynMo5WdTqE`oMo
zpeFmfTcaVQaYjH)h%=H~i6tL7)Q=SUtEgR|{*?-viM1g`<@FY{GyuKd9%?fP^6I8u
z8Il#<S!^b&wZTfcATqMj^j)MoDb0Dpmz5Und&nfAQj)m^$VCv<;gNx{@YPHK6vk1E
zN(vyAY$n#v&=C}JnA3=z06ivw;DkinS5OmsEFHweW4ti@p0$={=Nt2;wx*rNp(6zw
z4o9>q>@!byX8QdD&y2T?+r}>K_Sm~a;btXO7nWBx7JvGw+Nibf&gb2(_WovZ_-Lg@
zE|-#Xy%V#u6WR9tt6eSMbXV=Ymd(}zLG*V30Db|af3?B{tiiAG>5QUAM3@n+&IIzv
zV<AbhRAb#)LK>fl6+Xe5(K?{e%xOU<061h$!YQMwjVfc%gF%1ebs<+RnGQUtRtLiy
z<#&{B<7Fyx7%d$M=uFF0e#wrKo}8?!12}1Q5}lIjCh8alEZg1Q)|A3;sY#|oX&(xk
zifD0loeXP{j8gzXr;4h8DCYc(`Fy3N!VdJ<BF#-LIeGMw^y8%!uyq;<RKQ~%Z+rWV
z%Bw}CndX6xp7uQgdKpV#b+D40?K7^I%+_l|`hk!Ua>BT<CF~22iHR?6!26}%fpnSz
z%MU+n%PLxewg5=<Q0+<uN?woPy%~lsbT~Z@Dj8!5IQsztG|8oi4<+U1!;s4l*2D%z
z)}6#q(+HB{L^gpwfCe+kc8h%eu`mqk)?Pc?SZ?<*kAw|5cyO@2tth>{&CRGQeeB@T
z8`rk?xA(8?DqG6t+G=5GZl-s<cWh{&IoF)+Y{wimC4+P6Xi*NLO&O+`hb7{b$U)7*
z;SPtQC>RCPGUqN*Dd)-{OgQQ3OB#EioD66gecjk&yLonF;-yW$uQ8qK9eA;!I_8nv
zeNChNld{#H?j3$&Ui{(_IOd)Id%gd~{U?-1Mx?P?rMl)5%~LH^$r=BhpYE>;gxW{y
zqjlzu?Uj#R5`&GYTtibz4n|iBwHB*6((%x2;m58?6Xnps<#mvO9uDjenj^N2`skaY
z*uB)!@`2UQUb~%Wsy%!$(bm9qxcO~J)3d^>Qm5kD9+TYRYgQ>DPzIOk5}p#=VY|nD
z3m}aM^;ED3R-46o9WH3tZ4TcAY%?hO1-t(SiaQ`s9uMeZ$p%!DNb2jD7>Sq;qM?9~
zc04hJ8Q)P_PWy~y<w%O3p&N(Y2&dxCej!46`u_&ECaHh!ytii18urtRsb^|*o?JTD
z566vVi~QO-?*7i)n4(?X?|F|Pyyw;Tyz<hE5Qb--y7lA}k3aU%jR&t@*(ENbrNxE$
zx!Ja4Fc0?IbgJt3gq2kd%)(33Hd~JJS;fs3!ETGHPSnYL1a;MH=ptxfX%@fKRR_jw
zhs#-&i#OF}7gLVpLxp9-_WPges=XGr`wkJxFeN+X^zPX7ifN?v^_GE}8-)Q35b*N>
zniGRVzWx04ifu6WdTucM*yf$T)Ayg;mr?o9FaOYRZ{N!g)LeR?WJ_8?d`p@F=B}-Q
zxwXno2K!fgwikMn-~I0OAH8DOhi0bLe~4-IVW!bPz|$L!EJC)Ik+#y48}t{8`WHog
z<HN^fG*Q}Mz=|4S0le!bfC&R4p?x1B<?n#<XF8uMDC+_LqAt|tgP_Ol2YYW(<Bx-q
z72q-XwiS@HdmD!AfN`$zPaW&nr-4t%&J1+~bb|2uybj+9kEITU*nsh8k!<%I9E^+<
zkBpK15u{@`)(T7Wvy&6e!_8>B-IpsK7vXz2F2FPj2aw8-3=n<#lL1A}HU?RMrIB9a
zaq+?8aZ%8Zi$9xA*Vi@1+%?_nvDWy_!q-b!BVdMr8`(V8(VDX)mYVN;U6<KY&Wx54
z9=x}IPs5sPJf@5|!XoB+vmN<nqqJHet+Gjz)?MKt;c4+pT>3mDuT$tB{}|{?b<>~z
zYBBs((f;7&U(;lF;)v`zxa@kIf``j4^#g(IdYP?a_oE|h!xH0CJP7LbO{Bn4C|^m4
z?`b@e=J^s?EZrH#K~H}^kmwl2`m~`45qGHm&=4ZI=to=OSCfqQJ^b+H%UsGIe){33
zE<ben<^zW#yCXZ>sP-?wgDIEu$bHK>w7SMh$K_m;cvw;zf`OStAOe6cCr|j?(*CKr
z_Ss=aZqCTo`=c+0u8-dNv@Yr5kHqb+zM+`!Tq6I2KO608ABYFqhmMH;+h0Ch6fYF@
z^FO9rh6CMAt}qb1aF?Xdspj_#FudRV;v|@s$@C_{%Q9;jEiFX1h^EoZR(99~&D<uQ
zR4=vSGaq>DF5S{55zBJ9AY;4I<rS|~2Khxchtol*@)IuxcENC0NK9sSmK)Nu8?)=n
zOT9C_Xpt~9SZX>OTqx}{KZEIP(1EJEb-c>EQB--Iy2|@W72x`;RzkzvsI%)f_43Bf
zx4)*XE%{n-rj9DIx1@j2ovAh9K<xeEis*1@u2i4yO8IQwqATTc2#6*z4~h=c0Fi5&
z5By-uHXfz@28Rci>(0~ZSCc^W^R+GdU*$toyf?C6Ov5-_=&l7qv{MIw<}^Gz>5?uq
z|5BZ-^@H{Oor}tvLX=z;ovYwIXc0MSbgs@LEt^GYsnw<BIn|$fN&WW^OQq&_bv<#4
zdZ^$<ogzK5^xvt{qkxC~lJE;(To;{YO&bhX*pYUJU{^(l?P;87X0+m@lZ@5lfMh|X
zS|2`6Bk&<kyn07zTV0));QM>^((1*Dm5Jr~*<Pi0d}O$Ehx_ko{TRNTTQ@LyN_2gs
zqOPyF%|ET~(>s3vB|mbLsr9Gy)%s-I?(RQbsdp9Yd$>LqzkR#{XKi~e9_c>=GxnnR
zFO~2_OUC2~Mu2CyE(YXPs{|#ly1q{cj-c#x!1eWn$@K;AxF;AunKg(@Jc8`GA%sGV
zb_aehnrR$>0F-545iQeRN5yd1bP(}--Q4d5ZpZMB{9f%d-R}jNLr@NaYMXBB5yH3M
z_4~rrKF=*l@c8cq@e_0N@pIYB^ZZ(<na;yQK{$Nz@P+q0^Tgw5P!E=<E0?K7{l?l#
zVQxl290%E!Od1VWQnBM5P9C`-EKq<&Xsq|;T=EDlaYz}2IwyYB;Az&>B(C<mh8~;W
z*x3Hq`V;GZ_reSL;p2MM>rQ1>bt=EvRb{vO+_BnpV_l0kkXh>=E%7b~dWJ?D6I0L5
zKCpg4tolFy$<>eB+?S>=&PQv0<2NopXY@nylm>sYRY{~l$zC0;ua){<>8-E&%J+xB
z1wy3M(sv>7BLGSsQtSH3=BBXOYU=|`66i+9u1KBL0Eb7pEwBYZMIyIz6H!4;wn?5D
zu7IjSRdOjR6P2O27`fD?OQWNJFCJbx7`-?O61}BG1k6W-;Z`)gY|MDA)g0VPQB)(p
zl*-X{WaTjLJOGE97d0qHD^Yn}h+vADmExDDx0mXhsaM@#L#}ROG~_KVklSVR*@te7
zEi9pneOIP?v+vH|lrMtVosbZ-@VzzEI{+xe=t$Q_Zz0p+ZA=^2LUvibwt=aO^VG^d
zJUcM`@UVEH;?)1+@^CO$9Y81zOYoLy5les)dudS#w}HK3p}C<B{Sq9?kOlR*b}hG-
z$C@}S)LIEG7U4A^pCQ<-4jdWCvJ;6fbPciepq>RNMD)-_wX{ktOwqctUCtVeAHAID
zS<iNP#k&&=>)9@^cy~hFobB?8cPE2s_<U1`C<*9O-8gL<(Ab3YrcUZZSnV#m6`90S
zRsnTE0=ixrM^f&65bBr79tTDk{ZFZ5t<m?V5w2KY19=!o+gehYmUJc+^zvT7)?^+5
zZQ`k@qz3t3iXzxnN~|nf5rX46DQ1{g-dxfL205Ry&lT#L^cnY)uc3dbtFO)C?CH|U
zmFotFowistOH|$IFW+CBQn@>so@{I?-BF%~zT8Z9r*ElF<yel7Oe;z@jg-}uidzd?
z>aP%j5P(rw6Ltkqe=c%mX5B=qbZRRE6PPs{6NoC0^)!>w6%w%*Lhq_NjJ$O_pa6Dz
z++JY(v%Bj%#6H{9mI$<=?`DR&#4%jHQFSqho=yr<JSS8dYn~!tN(teg5+F89G0<9Y
zmGvKVl{FBrYN*e3XEGCqGn1>0olV_c(P(3Dw7c=f#?W%AH`CsnsL3s4sxpI@#wQAz
z7L$%Btj^W0RJQHHa^dpez+gI`j@5M~LDkm3e|=!EO=*eMWNK=v*9zH{ODZ!S*IzrD
zq7pHyZ%Mz0l<tD?F~u>f3}sR%Bh{RtE}RWk@D8F_%7p)@eWL{dYsv>n=-((wm|W_g
z=AhCI+Ei#Nf6NuE)Q&EL6LsXO9VLJP7le7rwuWdWoLB{(#?#N_N^^ZI^OGj(oO5-E
z&u=UmXY;#0Qb>X~rL`&EvO1YpKH8DXi5_z-(hy4|XD&GH(R#nnG~L?K=imJC9eH3V
zolj}gx_4u6q<OTts;;@VsydzP5*vQAi?v>_k5pA>n{qeiCy;i{_7!$lFM{q9b8DJ_
z#4ZS*Rh$4-*ewI#1kx(yMle+<+$GikJN^UPjooCof{zQcL@gI3304=8HE6GCrWx9X
z%``e|9(%bu$vDvWRQ>_uwY;k(=6hx;33}i#X1vvf8JA0I)Hu&giEvlMH0U9F_JR~k
zxS~9#l8N<MzlqTWQ?m5q#OA`hd<1&rx{-#3SofP3<fkf&ac$MalT$867HrIvlDCE|
z>gbjC!R}!if>kF{k`#m^D}XS;P_<tYQCJ8rE42d9YBrf^qCu^S#575B?Gnus1ev99
zFzd|zQCpCK8-rDWY;T**NIveFx6GUKv&tA(8O?ql)qGNwA9Io36~)nvVn5;TJET2O
z@%Mw@(@dWG)gYvoNrQX`v$-sMUU4i=kF_;h>?TczkeKtrOVq1lIZ(Kc2D}z9K7wkN
z%uiMqN)&{&1W*kYi{rrMM0|yH_(nU>GhD6~2C9^(B}1SaDAFCv=ED5!)CAWrD9j{1
zU#T#&lF%Q=FITE%L|UVNdLOEW7h>MCx?u}pnqUi25Wb=~iLb&s40-`g;VfV(fwcxe
z)r7h!6KQp)WJPNWI{+MZ=pk(-2!x@QM(e~zY)(-qpf1boS;snH#w%=Dd5=zGh71AQ
zj5-il|FAd(Gx9RyX!!-G4XJ-W>wL|Y=X8}+sZ~U|N@A<?%@g!elh(bpvRYz`bCPQM
zLJ6NI&VUllMCp@X1LS5B+!#B;|I3jxwE^JfXOZd~?w4%l4pFv6!15<=qEDg>Bt3mB
z9rv*cz8L`o%H}Ww_~vkkduVO~kQ1gDwe$KLkCXLffKdb}y%*-I9r}zJKsBhxH(Y)I
zpeDAT&8E`>9e*jHl51;IQ-ZLzvvz6f!W01}CxwX&J5NICj7IdVXA8KCM}QnyLlyWv
z%2v#3#X%Cl^+h0#M59qg;T7u5n41~YFjNm38?pVU@mMkASkc?CHFVo^DuBvk?9bSj
zSK(B0uYo*BCr&S}rOF*7ZndWV+Qs2icm9jkq><&wq`zcTAKk(@3P`rZ|6L{fs2A;~
zK2$se;Oea|NG@lmXm#mLK%$jCb~ES|J~1D?5T8)`jEILuK{zBiED}YI5LzNGG7z|u
z!9aC2K3KcV-U9r>=}aJK?Kinx)<drio@AT>>4<*_sk3toLd-+j5K93>lC1}Z@yIJ%
zJ;!+Zvz|08iZ3fYA#ZR~`Xe=a=Y-+N%gPoCiqg|V93O?P!ltsMpaojbc+c2i-qr2u
zYH!WJ<Zq1EYP~6g75P0h4~s=Fm}uu&@|RHJ0Q?1DEfs~A#Ynx<5n7M;YP25TQnr^o
zz0<l#Kf>CZy)X3OSaYAdXCvNimo)I-pH^ydrc)mg4HhVmrUr@-K_4UVc>Bv&7aD4Z
z#jUm`s|E)AL8Yc<1Q3)>DcG%3sK(n8o=_eg;l7r<iolU+5kVnDDjaYFpi|H`nn#YP
z-3-(R9pvguSvG`@021P1?&W22ahJE2H>V5J==R86+z=vu6ga9a_rA#0HE{oGfGl{k
zP$l@!Soq5PEtZI+s|4Ng`mVur8ts@)H7-1TVNr)*As#i~S#7dNiR>mPB<CTcHvq~?
z&3MI6m3v*=a~D^iS}Y>2>K$b)ziO!HAG#M?T5eysb6xYfB$iS9EBIUk0AT)v;)|gC
zsRg`JeO*Dy=c$;!ZcMEt%Glcs6ARZBHLDKsCg8K^eQm<jv)Q&Dfa-_iVgbdhd<lFs
z>KQ=S;fz0W*^W{*I4B5%6N3}uqj;n|!@MR#XqaBBV=1*sr)=*rY`dk_kPejFdVmAn
zM#XD`ua<YXw?`Y83((c)ANiLXenP>``s9_Z$<MyXkZkrqWuo0|6V&o}VZ6XWZm($Q
z<O0NY5J%Cs6mLJcS6gtXN{c-}{w{E&WM04@VBXwjrM;rf%or{OIxQJ&)n+Tc2I`m^
zp=+RH3Rq!=D_yQmD~R~_sCpbHaLKg@RGFQWB|>yby<BvHi^R!qe)82&SJgv9f-p2W
zgsLt4xPc}*WkW|$$=V9>ZE*~+l>)E2m!>b#jJ^@j$bNU;qkCw^qtwM5G<31g@J+#+
z*|RmOcXX#_pPOR7*^yIo0<PK4ZBgQT0KAY)wWz$1mxXJ><HC<BAKMhomOAvLzbSgr
z2Lr)1zsYA}OprmOUF;SQf}tANo0Xh!FHM%=5A&A}hxGtqo(9lRf!gUHfI|u_RM)Rx
zxx)GEu0MYLu`AcETzlX!b~(1YQka?;9RWF67y8R48XF9(cEscqz$`JH9xBaRvcDVM
zyLUh{Y5bhpzaM%h6jeFT<PW}T@b~URcX2etU#Sa7w(NgUe4V1lHX&L(%X4ie2mEZl
z(?$e`MYbTTh4loprwL7q$UHII>=#kog%jOlxk<rK!*St64IK5kBEkjb43}fYsp&C|
z!MzM>m8A^<faBU4Uws&<AmfN#h^;Q6E7HhNf3~B&C6h`b9$zG3r8EAxmFKz7QZVrO
z)S$M$+P`=H`X2OR`MSRS%lD!xIry-kt|H>8VoE`CU<+2!;gS{?kR(#o<rF$8$u7Q#
zY*WI2yczULHk1I_U;ubLX6k~-oJC^6)n3y=03*TIl5;3xK~Eb>T}2p}dv=uDLXDP;
zqkv7(Yw_CPsa6_F^x~ns{Gm=Bi7deNbuJt0yX(7`wqt8Cz#V3$lri1}m-<eZNXJQ>
zvPY%k9#pU<7TUje{^VYCawYjNnkZ*g)8gGfMlI|pj?!DEP9@k0@8$5aBm}L%eXomN
zG>hgHfzKh3poMfC_9q0lC1`O6;fw^qb977a`kj8S6ZlO_SPTl5;0-vb<~@%KO}UuB
zz*IE6^ZSkOoKD|C6s%5WpN~}#`VO^sK1$tC=Ii<6?;a!;pm*{1gjRpA;r1+^W%%{)
z_Wj8exphzXM@mFD)76)Lzl>$zlx(L=J8?Qb^X}a@fd1iF?NA7em7+*X&i;ZG|8H_v
zUC`9K@{C+NOy*m{laD|4=pzq5bnStIy=~N;EaDtd#zE(u?Px;@eJBw~am0dJ6-f1=
zObu}UM=h#&GWH$5%t>~eZn!ZkPQ%BC1`|~gk2~V2$;L-(6W-p)@)U==x0b`*<BOxJ
zb=PW3F*bEA{%(PJHy2C4XN|z{z%2}fpSUQGb`ZUMLtX9e>%$MHG7E+6g;;etB%$!q
z)aNMr)s^`fURPL*m<(KeA4k96cmwfa0e<Bgw8|=QQ-{K56yNGNvUZo(C)0H<nOgYq
zs78liLm&&Scj3(dSLu{Q6eF2Tc0}i?aLMDMwr2wJPl6C9wuJo2->2xk`fYGsQ~FlD
z5;TrGI~OkO9PS)kxOCy-!rWj!kZMdf!4YLGDN@A*Ykyg%EDBGtg(yWhB#quEWnqih
z286G88c^$zC4Hm4b9*p1wL2#z5`<$Ih>!NIR<*24H#ZI4l}GcN=wI7^V^eFD70*Ny
zk6&l+9!N{=<KfVq$61f8r`G%Ok4z2s4@`!-x<?S%-@g3xms7Vspm$Q<e(Ls<uWxNG
z5t6~)pAKBu`}imLI}{}4y}fn8h*NEk#TqS|eifC$Gs3d6IFg5s>qIp#u&;1YVUAPI
z3bA~<z`{-BJb}(w6m5qtr^Cduf!H`;wNl202bse{sU`}$(-u)d@)~&f_=4H8xFCzI
zfQtPnBEGz}n^ClfYiqAB9osk2&@Qn;ZV80;dZ)y<Ous7q4&Yh4!rv=F2kIr(3X<DC
zC0g7Ukz&$dWPLDs@!1owcHL$>Au`eT3Y5<ep<v#;=Rm6~I{%ym9&;V~y&gp68W<lh
z#q@gVV&S!OUW-t!B%t8#{FlNQY7T`2A+#IX+1j|UGB-1+3=ie|db-<MQptFIbrr$U
z(559|jT#K(vy?xC&Z^HSY541>)jV|c_{`ijt)#pRD=ejtsdFgl<M`@jQ}uCbOIvag
z^v!RXeith1l6a^D8_@a9hpg+?1<7TbLyHnxaL#66F{5x9?fGn|JGTKvVm3=KhD|7Y
zg%wK)UHy&AReS@2E?GSEpjaLp-Hhdy^U#!!#v*Bm-0-1zZkUh6UY8F<NA-+w?tvh;
zyydtPkEQuy_cjji5nddJ0<YEh0hfe}o9pC=jgO^5ndVfJKZwAe%613b7kSl;CAS#b
z!={HKKw}o}maFxcXFM*&j!~<n$sMh2f8)_N+8W22+uLgrNpv)*6+?}+DKQl3ZIk7;
zXiICbSxW*LBOf+OB8=BI-WZpMdp)gHo^EgCKZ@V`^~S08mPop;KG_g*H`HfDb7z+)
zo(QDt_AmcCIu0wSlCGyN0m#B+isk99h@V!1Nl?*+KnB0FDR~@AqRpd8)dn^*&)0z=
zS+*h)=m2Mi1B@>$QHKU@dq~?cT|!~k;v4eHv`;ANYC_vvHz>dA803^hYz0Ge?7=ZZ
zYm6*>T<+lUVcF~QQAys`?{iedDeIPKXg401H~*-4CkAaeGAK!6J$#TW=F6A1SC<#(
zr_jV^aDdAq^7$HTFNFg@+xgB*<P=iHGw+O4-W+GC$#Y5OksuubD7u~|zzRv`Kj6sU
z7QU=_XB0`W<k4Kv$OJMeSe$~BG#zyjd;)o;B0j}{RUvx~?5-|m36L>wLn}JfET~bY
z41+iYAYblb6y7gxTi99!8Nl=;w=mFxNbeV?Q37&rTqW`$1B~Sj&TeSuRkEMJ0H@?I
zdBfFlztd!k_0IHtl)B2+wN&{sn&v1=9}m^lKioSw8fi~-#J%D8aIZYslWJvj9A1Aq
z-{(u*d?dr#$&T(U{m;i_ky{QQ9PMb`|MjM|g{xOlWkM@u{vE8;mN=$_FDy&4G(C>o
zaeqWIJFs46%|#y+kW!XpS}$OHfp14QCoAax=v*TI&ki;3a++BSXX0wn-Z8Qk(iB66
z0VDx@d*>Q~w8H3FMo{TuTrTGN(Q~lB;4#j5J#*p=*K4QFmaw_HLJ*K4-V!|!&ZP9d
zbE>RVBJDflA;VmOyvpkr9MsrbBK4`DOYZxT@GretCMjiSj3z1GH-9AH4mJ#C<=Kv8
zGm{igtYdnl;rn-97GEwAl?rE!Dk@WVzApBRA3OkvE!)<=24NWyenW8%_DW6xcw`0(
zp%rc?aG!~K3&TTmngk-{mjD4VGa(_IKZx+Lc{LM-))ed=CtSmf2)eKc^k9S^CtuRQ
z+FBPcfs&?{kU*6W^mlc%HWLpEIQIP^y_3C4rcZnMT>Dzgjz*u%fjYnKR>$jXT{2Zc
zeFvBM#ly9A501bYu6vTG@_&OZK;QP(FCMd3TlY}yLjZ69Dc=?@3y(`XivPjUlnKdr
z(IYQerJ&BKb$}yXEjS4xWL7LR39#ZlJGQDGuF>8gm=-i0gi0z*itnhxM0>}MdkU2u
z8gAneg16s|`;Z-cmF@$6QfM1b@ZGu*)x2Lj{zfb*piUov_F7IFpfh@XuE|rLJmogn
zDX7m??-B?UUsD$R9_~mHC#Chu6+yW2_?5?QUWfGTUb?uwwFy23SSb@oUG!oDq|!to
z9#L&(*u;i#6JeFD8ihCoAEIhR;^f$q?q_RpC7{IfWd1OyIg4hAzi<q3_`pm1C4}LF
z$I>heX%#Vl*qyS~G)TTs<5*LqP9EuOX+s~w>N*6P26~jm%O6@StWW<BFC5PlZY+bz
z9}LN<7I$OS;p@5XMz#LsZS1{4fN(a2N0gfrqiL{7WjTt$wt{#z%3lyZVx82jRx>!i
zbwS}TkL#*lC{Ql8uvyp`S{hoMnPU0abTdPaS15X6t0C)@-E2LIZjG_t<;Y|g%Ur%{
z$Ou+97-_mO?<Mry9JKHsOQu$wE5|M*bD7o_QJZ5UDYsVLQaYnY%3A&nW_C(g6IVEj
z&7BRR!Aq?lkR$YYL5m0e9{3PHIG;dL46KqJTXsm0pv|OP2pNfpz%i^D`a-BL!5Ra`
zC}0_Y@h2u?lSw#K-{=gOD37#S5Hz8vlXe|;yY}+5Aqbm<@@c~mIH%xJWBvEwuh%b~
zJb(g%3-wxy!-_6%>?w{80m#*Hzk>F56)W#pn?_pz!o7r(X;4$9Qv|gz12e=!iX<gS
z=O0UKtrE=XTUN7BODnF$-&T38AtuN3PR?l<?2f!GpKNdNg&T(Z?)=GM(jVblvn?5K
zXM6D&ChL-j?_JoZ4;<vLth}<=p60ueorLCp0+|8!QJm*86C52vTiBiq@Ge|(WFl6L
z8vaVMgO+=>pdMRL1qk)>4luT%T9TlSW=0bR6bCxR1EpcJa_Ur)8||GgI61l!CzFbj
zJnN+-FnR4#QVR&>;NBc3dD@++C|kWL4tUx5QrQ43EUi5&mw4?Rr!=i5fMpR}8A+yL
zv_e|A{d0n}812|2!UFhCCGKhQYby7&CM=?nbDCSQpCkrC7F6xXyCa&7dV;LzY}2~!
zY7iFh+(UQ1#x2xRarv9Oe{PxrIBG)J5U;D^vM@7{>!^-~fhVw-hEQQbiY5|;9_OFn
z1G~jeA24-8VbngsVgmmtK+XufnlFN8)Fh&Ai*`KrIhDczxdu(c-f$dAf>ni)9n)6v
zB2rNNBIpd`C1gc+@k<bhA*dDIjHw1yr&PR*<f~o1%!&iYYJ2dc%PG~-i=ey1Zb7l2
zSuoknV0klMSky>V=%hZZN&#IpIVlK}8<XIDz|<;XR%?@P<C+I}7X$ONdP*I`_^ji+
zGIE$JstUBG;=duX=g~z@_6(saCwZP+c4@U^yN$ahM@xP6oxA+(@&}pjscUNNdOGvZ
z7ot}_yu?&c8MAZGjp<odH1@xa_lP~UHP7VthivIqXIwP}G}q_*D8czd#S0T#nw!M7
z90cf^a4NKLJt%5&2-GNnVyl{OT;}GAs7XLkgBqqKAE@v23z;Lt+-$07U|o}I&Ujq|
zchB|faCk)Ugs9q?ogN(~09Y&fDz@tNYP>3qj6V}~7{kg?_KG=1k+ViTl4ARy17s!C
zT+THO|Hzr0%8hv3Hg_Nr&qPAHi&VjN9eD*bqv5`+H8~wd54k(PB7UzI9TV&3at*`&
zP^5o-_e;n5OTP+}?Q=*CW~C~aQ!~Pf__9(XA<qQlfE)xiEFVWF+j%rHuq+OWra8@?
zfCcv&qL^kok$_UWIKI6B8qr=-rJwZ>yOkn<Y9(`A_ljW1RT_c8PWT8&(i}SiRnHzX
z0*s2YJOdTb9y7w3p5eHQ&vJX_X~bq{hlXZXW|xO%hNhdT{IR_$!AfIP35u43Ybnst
zZv??H6PE#WGtjD3xXpwxlG9Dt!W+KqRR5$DY#Nwro7m858T(5N+uEVFX1Vu~3re{6
zQ#cmtvVpW`*j6vT!R=S6YN>5@HQe5p+*&NwVH-eg$y`fIYUv|aQr}C7OS|vy->8n>
z`BwCAji6f&Y9>hY7nDFov`91DA+WBZgjCDjjZh`2Y`I150Tq&BCCwE;6O~I!DOh!+
z5cOQwBjUkYp#U6BjZj+P<>9|$s#0m14Y+99?#V<3^G_?nJhtNi(s1qg7sSfA===+N
zBf0vhKj89s>PMQe<dxvjQn_bgKo<5ktL%9X{K&vD&}c&y>bFrt_W!U$|JM{ZN*ScF
zp86WIl|ce1fYBi!K_ZE_aKNK$F4dt*GDwpoi6`?R@g-%bJS*49FJjfJXSoWDOzbX4
zE?~X^zZVqnky}A6Q}HTJ)D)u%PNmYt;#IDL`J(VOIR!sW>!K#OS03npVShB+0JcNW
zIgezn557_XJsoRsyDjF?)@;9T{PSz_>ej^PUg&K}rCjlvmIr^h>p1MRS<3Y)i{l8)
z6BgaH#5}rhD_)v;Wf+<MEb3J0fTX!cl|39h%)P}f8Ou~L`IP!+uxS+rz+M|mO##&+
zdkQsxGz2SkJ^vW++K#_m1y3JW>dI?f;cAVK@)QAf6xF&GNrEfxnlq&bX4a2v6u_r<
z<~=Db6;KvPT!;Zb&4JU#?a`f@d3O3|=ya?Q&INp04fp>N>c_T4Me#M(NrHKE6~Kcz
z(dyRhm_8sf+yc-Bzz+xvWne*y3kQjcIpFV{z*UL|UJt0qG+T!I#b>z~<`1&NG=vL7
zpeYMSEs!xZX}r6dJk%eArznlshl(TJ%ODL$9*3OlT5L!phBnrCl6iO#rV?zWRIruG
z(pYtWiM6C1S*qO>J)iAFI~LVGQqpKTEtu+STeu08o4e%AZ|Y`Lb5&Spa5v_PJgic!
z+=|)(Ib*JsnNx$?TSbFvaQDGd?sf*csvV2RT7MPc=kLRw`d0|~&!OP(0p&p5)RMi1
z(m_k26O>1&;i1}S;4>vVI^!b#kFW}MG_~BN<PdpBgq?C6lI;|C6z1mzVgADWDh5Th
zCT*uM{%h7VZbe@05^6x4HfJvQYtl;m9-|UJOo_$;2!nL?jbfc&B?O3G=O-JB`}*TC
zjnNA;*^w6K3^jfg5Nm3UA6j_VrFvKgZ%n21f3UK?ERqqk!dEy-&EFJ2lvf$*H=#6(
zsmmJW$lrMIi@ecRWL9{Ap4Q(80Fgs@dnhq?xX~&Bl_pwM9vp;Yzf6^z+E)Q)qp}C>
zI>2~FM{_x<X&ap#oym>lhFw`#PiK1zLI#ZuHCip3_oQ03Qe2j?nhmR%M@=SRKQgTm
zvoE9vjpb|J+^n`*wak6E`p_GC0o#8<(b`qJ#pkR2I@(Wn=8m?XM#<Xrpkbl9TEvMv
zK8N@hYS|ifoOZO=r2S|&9d$L;VP#BQ$Qd3Br6giPi4h`;DaKh*c6U`vX8Az$nyDWo
z9b^+wNF0`Baa*7$(MHT|cFU-TCVUnOcL<+l0X~cRmLMF6h))Ab9KBx8A$5a{dkA?<
ztEtdH1kt+Zaflzi2-mvTVW8{UuUsMU7HV4_3|$WGZmcbW)nN>!)V;Y*<jhjZ`dSsf
z6+8jH#a5KV8Sj7V9tCoJ`sA%#LYof(A|&e3t$YO0^@Bglb`8!%Pu$uSj?$xB+d=|_
ztxbTw24S9Bph%5;g&DT5Np#pQtxI0dtmyJmZ?m$$`pgvFCXqnzFq>>c<_o+X0xEHV
zrU+R4CN$77J>;YsG91J<n|ug&0MTuaC$SXvg-q0jKIq0liee?m7KI}&aKX?<gP@&d
zFjn@Y4#oI!T?dA7smgZ~(G4`zKna>Yw1jeGw0J-nr(ZnbK~El=tcSCVUGnR#fG4pz
zIcaP(os`T3X+$?I!*dH}dTg`dvClm;bAJ1`wiXuRaoRmw`&)Ypn+qGuh4_3NV3P5%
zVKnUR%XM|OWI_$0`s$dvha$)9p%gjAs<qEaKq`{tVw=(S;wC;Y;n1T;D}s-19`WEr
z6<b;*OiH%i+gqw;OTmzGkvfsp30F|M#%f_wyLex!c+EsGXYQ50j6Jgh5BZkl;q6-*
zy`XgvgW$ov)+kxz*-lBYKO(vX%OV_$`FYViSEE$;j;r)LdcFu`Lw1l2IdRO12LL1J
zDI@hYiWaC#Ah%S!jMNmqTAa1AAbk($O4$h5hGYP<5g0Amu_N&KPWcFM0QC_VGug2t
z@c2&o2xor=>WNe7SDf`3P>ZkLo+U1{IdnQJ&L`|YZ8kYhzI<kB=KwqR&_lbs58Zm`
z$=#c~H?AJ6p{y=L!J|yNsgX=<P54<N3uXhhMl@F;?O8dNgmfvhsjXIt+~qvN8L&IZ
z;E0+vhDNIiVQ4+T^xfRV#KL&PjnVb&hx>b`pN9b(&h*c=vshC%vH$T{Q=DP!wIr(Z
zg=a^?y&rY?qus7Pxha)w^!r^lI9Q4L>Tr{1*j(ciKf+@iJ^2f3Pu&`r$^S*@J8hp5
zV;#A~v0*66t-k&<6o%SLCI2yz?HQkLt4qqk!b>wPtyQr*-*US2s1$5$xZl4gb)c;3
zJv`S@6%);-rm$oaFDyYj+a%E?O#*66bP)8Jwc=;kGjw>2A)}4JDUhO)OO#wMQFIi{
zgV69I+P;GGg-VmDld$@lV8g-zVXXv}Qjpa7<T*!yyQN}=F_d2OM_%Fh2_td(20V>k
z>{nr!bB~~cj`as2ajnJ!t_y3c%d?E`I)!#_nFQQH4m!^0gnGbDki<r!RJTD&T370v
zJdYGMphmp&8*c#>(b_x#DZyel@C3zCg_G#{-JxukzqRg}EB!qddt0l{n>Vs*m+NX!
z)KP>Dmc<H?J^2vl&+AF#pIrISzn$wYbkEeNbb0MNTeIDn{+*RCA0Jc~g(?UaRdCD+
zi^|;exCMMyd7P!vBGCjOrXt)1CQuMr(u4ba1PIhJ6__<RdQ%g_gOqI`Z%=2(D|&hr
zCgfz2Fzzm6mRd{OC&6V%vPn3$ki!kbkfHqL(SdY>v2{{c%m2tTi|@PAz?|Yz<1ao0
zr+DX4gi*c^)a3s{s7c|XvI#;qCpyQA&h-LLE!4DF1t-#JS|2O3gp4wBc>qg_qT|pD
zWTcsqA7NeqCcLmhmi7n=CHUlEdNk6TQYT847j9QWUQV7KRfxEWp#6Vou?s>A<X#cY
zP3c_e`B{}u%}^3?Z0QTCw#d_BogcK>s{jvH3nKJ77@5h{w6G^!RxW|Qh}Q;9h^|v=
zgFL)8h?J0fAKq5njh>x*S1zmy)4~)nK<Sl28aA_RGEbdCO~N?&UxWhUAk4%DMXwGz
zL>R}c^&AyMy5R9y+_O3y9#3CRw%Q#YUtLvB*8J9z`jX1CsmdZv<aYvAr{CkNi46D2
zeyiQ@3B)5c162^yw;-mMAf{KuIL~#3HsJ+q6DDG57D77)^d|ff?$wrk2BHa^6=i>>
zONcj!usDOrpcC~MqrgK*ow#PHU7H!_0Hv>i+$1D0`o%Cft^UTL)!ufTJOE<7*fQz}
zxadA^sOs-4!exTMO`_);?YD5MDHSdk5v(;7u&TJxv>5$aSO)a8U8jnSl{E^>Ys{)M
zOV-H`FPb`Pvh`lK&tH>>L<7pse0+=`qa|C<m=C3>)nHw0e|C5<knWm@Wv?&D(<7lY
zcG+iap_Yz9N0r+i2}fdbU4NUOfk`WiN)^a6nztU6%%knWD?eACOpkXxyojjBHxSwr
zfFT`YOsHVznVW%Uw}SR3`DQ@C5yt>0s?B6sOo--r;^z?w{tZRX(piK|gq56Jav+S$
zs){ItYO`@h@3;lDsMG@yW$`=XYvU-2$9+b7x>CqOxxgD=#*Io@D4IS#b#z2xhlN9E
znOlJgRiFg|&WTaiB5aBpS>1>ee~aY<xs5j3Ig{yn^~vtZcta#JRQ;v}#dWrNk1Nx=
zrV{it6Q}dDS=nKV4MwYiVYx0YexX7}YX91Ex6;G$#vbSF$2USRe{!TI;<pba>kke~
z7*WNk_MZCwr!%WhxT3*&cPjD!6*Gt5KyvCgkenI@;s2hpi!)PNnx5=!4hO8V*a>ze
zpqDVuCQ&9%NqGF$m*B*Mx<@2(L)uRSF+}HQ)+%CT1eoTP5ePE|9Ljcgv?UwsszO1B
zHH54L%dQ$`@l0$xh|9?^UCQQm(lC9N3mpSTnoQa?@||op*tj9*>bBY}B@-%_PF$#}
zv03an+GsM%sCcH<qD`h)L*43;X+$U*(`Pz_ywdbNtlXGH2yVKs3-Puk(Q3(H`mE+f
z%;`KtR4qxe0JlR^X|tGYuwl_j66OjflGr(ct0i(mw67|i$XribOH-<$zNRW1a#ozm
zldU%<!x<_vJAEqKmYjMF|LE3F=UlZ9^w$;Ar%Yx1gS|gh!FI!*Pb4QU#iG#)GpX@%
z5%0>s=PB$3Y;Wv%`-X^&jvD8jMh@CaDQqjuZ>#M(?R^yM@KiSSR)zaWYCwGn#yGOY
zkC2_#Q1u{ku7sevpK*|mSzF^gfk;KHPE8E-`%z5F(%RerKY}MXF|BO{%PJk>Q0SDx
zDTgQEZ)Z+z*9``rcfVk}zx4L*<VZ*3*%RE;V5ag@nia~~G%?)QU<QgyT{qPANGPEO
zLe^{nsD+A2B^&tsfp9UIuOm%^Y&QYPuzV#PsXWJuLJztc`{taNE0o|p;Yx%oQQOV#
z4s~|q<~W`SmZVy5XqKDw2ap5T>b#jhr2`XaY54+@V}B+Bosu+o?MUzg?pLgpQ{hD-
zG3DouWWui~BZ-FNa^Z|eOwm%|#2+>%I(aG_B~?yyKNwWC6`Iyo$Z9e}ZDFca=2WZ^
zS}I(}wjwi%=ft^5#b1|{!tnK)(P#a>27|Y*t=<Xas9EykSXg<b4fFPf5ch<Ig@)(Y
zq<U(v-w0)BDy}2nh!vbb=EsoHtvfWO*>ZL7H6}B=bKZ)|)JlnfN*Qyu<GNFG&(Bow
z^%~>E292D#boY-D+@~r4XiKp{iJ<?qJ&DRVRbyH<L^o_CZVw}S4OM3+uqZkqnn`oY
zW~<CJrv;i5Q58vRA&<RhI%N8iLXIwU@6p2djj*hzj3dd!_;wFNDa)sgf{?fVJf}Vy
zMeIs-@X$biA8Tn(VLLr3UWV!_;)^PFyjP<oCu-r}G#GUVy!EwbY|g0{x2Dvt_w6hG
z*WIs5tsM=W!Cb@s`qCxI5W4FkBTp(f>XNy1OIn`!$iV=3+)+1@e|mMK+SSn-Z(JxW
zuat%7bes{T#ov;COZqAteMQ(&wnqoxxpw3Dl&FCK!CQa=MWPng8<AS-rLC--^$=KI
z#%n<-R+r)$9~tV+c6FfUG*Mqy6%F_?ssm8|QW`OdHo+O4f3iVff+Sy8WB$(%*edz?
z27+7NHI-Vm!2a7`8_(A?pX}4e)rbhCP-#NGgh!8pzWbVTb#Vp`<_Ief6s%^a8BQXM
zFOSJ>qAUzKiaI4U_Y*1RPgLEUPAj$?D=f?r=SOd@yR)?=ovb&Ktoe@2PL}LlRkxgH
zrgW{6JJMMB>y@WWFLUS~W_pE%Mk>)|RhqlfXcE&f6i%Y_;ak#zI(bQ<3qi(*l<Nzk
z-L@)%H*yi!QJc$VcikpFUcqnmS-d6>TJB&P$&zJV<QRsgyE~QQ)7QP;jjkW_vlFbh
zd8#Yb+1eaS#uD|lXJo1~PN?xUWu**aSbWJ9HA$T|mG4uh^yt5LGFp?hx~!ASC94K#
z&D+x3nexdjZ&0nrNkF*LlhH&J2XI?wt_hxPKQ#6)GNi>ALXS@=Pvo;8#%=|NXHc}t
zlK=n%wPHq0oCvRF;N@j#Y<<5Ph^rammwFf3!8*&huE)n|*N)GP&$`B3qy4>rMPw4-
zfQV`P)^kKMwF!ekc@la>-LlLB)4?mZ)%|<t_m$5+YCx?}s@oum6e%dnbe9nMUhNgX
zZ-A?m3L?b^%2V3;yR!JFY!0JBr!XW;i*}x&c8(254tqOjHmP_*e}^()HHF;;wh)+(
zcG~Z5lZ)?n;^arpz-~`0`J7$^gsg`i4XCp8uPL!SbjoF3LaC@1v4(fn1AT<b7vpXk
zkMju^<5cS$9`5Sm8)tZWc&cltYcQ9Mb;baE0OTd!P;b~Y{v+#qbaT)$o8TgzmY~(v
z_IHYT*-ML$zj1`Gxnd?(Us_F7t6a^J<xUAjbH$`9(T2#TpFz?UT?a*l=X+|ZML|YI
zgUdDu=EekqZX2RUv@C{2(|nCm@lz-NR81HuI$;euV7eUQZ4}D@>WYvcdP$=`Qij)9
z%+TOu1pW`L@I3AVGJX)fMG%q_J=5nJhm}R(B%ua~#<9*n48oIT!$2_NtE+-QO%O3z
z$oh<;g1o0YRRs{B-ydutdJl&Gga@gUd!S7jGL`U7^wNn_cD{B5v8_+d<2X0{<0FT&
znGgyn+<k96((laIyxH)6*ZZrp)47pgCO7UKITjr{R2MlI@kMsW;&AsK4EWy4b`39t
zzHq~ha*7{_-|N2}`b7T=D5>!6|9o&|K}=PM9uSiUQwa~u1Hcw>rh6HJ4U!{$UDd0L
z!ltNhcree1LbE8@R^}y-dqi}Cc?KYtqkjeTMZJK`WH3I$#T0y^h+xf4Sj!;$c39y0
zz*)815J_eY>WRn&;r+x?&>Jv$JkCSL${Gi;E0-5CaL+jsNMrSJmV!WKsZ_5tC{Q!n
zcy1GH6{5&F^$7{vb?lH3qU_QVKQ)#%mo~;1#}}q1>FgLD?C;AW*pzAFI;O6+D#|QB
zq6lT+j}jmVg(*%DG8B1gDhH8kh+IBF0#ypLJJfW|cgD7tYAt@M&nXu#mp@tO%W=%z
zN^R%bH-QH6Y}h52?5_VRKzCi)qoBJ%#rJB}@{H|>fVsz3KBt2~hK4xw&erPn0ecs7
zHPu6=7>SYPZ{b}%D7;5{Rq;PM({A!eH<6#-uu4&#-{6Mek*r=18fu!O;5VRRyHG$f
z!?L^)!4k>`Zl~R5R=c+t-c^awsOcaU4*KD3Av7iUd?jy*<v{;bFX#aut$sJN5WW2_
z-i}c157F%;57{8*=(~JBB0YHIr27HPh%gOJDtLG7a8y{3Pk(*h302;6`ppF6y&@6)
zUWkI|ug`g31~188yCw+N-gE8QCm)A+J#cuizjx*GMKm>ET9}?38v!&6q)a_s;NA3x
zhzOxtLv<fdgpgOMLMR^fju9eAKXnWtf_*8A;<?t9`uFdZ5F?Zma+b9UJqs~HQ#bLD
z?7a6L*%8Q&_)F|u6xa$^gx^-83mp*S8Ejn?&{8njwXKFmNXRD;z%Yy0uM|agQ52cl
zfI`#jn^t{Itz}FgQlRbXgK^+MWQ4)SYjCU|9fMu$blT8HR+m)%^4MW^l*HyH6|rt!
z*}PmVWbMr|IUoiGI@incQ!H3jWMC)}gbI-h6tEq~#2|gKq+rd+#9&zP`(<R%7WZ7V
z48#WY6IjwEgt}hiI3o8@jbxWoRY<SE6$LE=e=mCMRp?FN(P<fGk-4&4<y*uwhj`Tu
zoZ6;6<f<4{2pveZ*FFye+j*f=d8Ivy{SLKvdZqmwjV8(nqulp!ghZOIFr3Cr$DR$+
zhCVl^Jeoq;IsR03k7)P2WO%p=qroT;4zyoJU_ayUBs@{P0MJ5Vr*LUw4Kt3;F=Hcx
zdGI(eK}>NeB!?P_g<hk)-9M*;^h+wIgF)c#o7+K?xO*mefb?0Oh4d}LF?mU?*q@n{
z%$~un8k2*|AW9)X@L>2WNuk%Ym=e7@!2^iG;NlxZ(c=M94M{*+WWN_-CgH#bwlc}W
zC_-pq^tZYMj?o}!lv0$y^NzwHa7RXgl4Co<<54B%^yg71`OY830YBEOi(UCxIJHmu
zX(V)sC6IqEU0S-hegPA`Fg?Yc8W2Kou?sNecLuRLKRJZ-WtAM_sMLw&BoS}wAf%4G
zKX^PzM5)l7$Q0q(-mT0O@ke+6+}w@4{F1OI{;Z0g+(<Ok$riJ9wa<b8#w2PP#c5Gs
zh?v?2(QVyG)Pa58edJ?w)Z#&saU@C+wgWK6X0jsp1}$cXQgjnmVoxpIfx00=X$NvW
zsE}gsP!5OFFTp_kbZGXSd^zE4)yr|38ZRag=b&J-814;V0mPr4K$SdI-BlidgtxzR
z0KtiebGjZpc_3n!7{jk81xcAltDAZ=s=vQ<2&$6d?ZL@?*M5r1Gr^VPUg65cEmDqi
ztgj#1E;1=?D<07RfvCmHMimLnPG#DOdSHQhsIuuK-U;bn5bwm;0_UAD$ZI+O#Po_I
zSk3rMI#OK?o-;5|Xfj(yLy^5PJ3dj3-o>E5sZ2z{Nnif}n67o8y3$Ih;Fp{hqHJ{b
zs|=eOW8(}Wn#k7Q^0}esoM6hNE*p9#qAV*xCl%3cbCON<4I?rkmtmF$1I6a;`y34!
zDT~|bwqRpu0|M9Y6x{drbaaSrZh#7SdjrNCfpb@u=VqoRIQlP>VTY(nrB8M38KAw9
zF=ptP94aU{0$^M^0~(hd!a(yv*n-)79;r*<cSA!OL1QSM47BH7`pBnAZ*_F~t$Hr9
z43RrnH}t{5AsN-!fy6+^Z@Mfkv7ym<uwJCv8Aqc#IKOTm>RCSIXv!C^G*&3kWZi0;
zzcSb#s~M1&FLj9~=~u@4(7j6VqCn@W^j%<JY(kIHiG;f#E&}K!i3|8dcnt(*NK9?v
zA4%Lp&R1NP(Ev%d1^i}bq%AMzg5gH6oO#999=`GR&x`+Q<<3`DrJsEJV0Bf>zWv*<
z-cc4S{j&77kPzCHmN-m(tsm%31bo4pw1s~J*1$?IEk~RD;fzmqR=4GIeQe&<Gz~&z
zjVz==hBd=eT9chW);I9PFI>C%?8}e-lK;+s4cvHcrBHaK(4X~xd)3_e+VbPS{=yHx
z_vOEuUR|C2zn<T}dhnBnt1q{#0_gaqySq{nn<6gsDcM^19^ztLw9Mf_%qXuz-4A{>
z@lRgFKcWTT2a9M~4K@Y<Mh1AYrY*x_CmfJn%&`IJ3EK<d6ew*I5)}r(EQ)elM}MR>
zXBoIy^Qq5zDFuP5&>{r3yZH+p9lNil@N9pB=?dc6s)bIa4X_JIM2?VJF(XrW9jIv$
zHD34!o!Bsyt3*s0PABQ1(j;NoJm+IzX_q7@S(5oiYf{`X1wC%Ly{0a1p846`3%l0>
zlF$F(Wv?aTwOfOA>4e8Gj^DW~ehvXllVHF5G3o234-37*IA~F>D*L#**)lWbFiGYr
zp!p@!BAh0Wl2J<>9C{Y>OK8p^AlZa%O7im(9`jWMaw$^+Wsa+Hq?xHFq*+?+>+2iu
z8_T4F=}e?5>~Pk$35YvI@vKdlJSiNCs-QlEqZpYCGiaFyO-_=QxswszB3ZzXW`V1y
z^!3KZVBja-SWb^62Nyi)ftIz&?2z4TkH=~gefxvqhP5xO1*7dP$@ECn6^=y{H{15w
z=d-5z4%uXTJ1#zo{@d@nb9cEZ;Ogw2`sUN7SXIaw2-nvp1{zH-|FqefjK+uC5<Rg<
zxH=I@Uyr_j#}mGLSCH@iXX(@6)t1m#jJ8bp?mtMa(%+#fzM4dyz!`*t=vX2rm9xg>
z#R5(+!Bg$23J38;S6a4(OUMCabac=uHF8f~+5YDb9$uaP<kKUYx%%49O9PXR*Ps3H
zw?F#wttbEP=a%01<}>3PpZMnE{|wtLj3t<sz75y6_X`kgFrQJN+(T|O<eQ)(of6Jm
z;~#pY!p;|i`1Q7E8w7?hGRYr1aOIy{`|sb7Zgtjoza4^Le(&!0#6Q5#oD@Ey1ZtoN
zhCxf;4cLMeKu<bF=sq2|2^zEmqGAT|7`iP(cG0>WI8c$Hy*da(B%@QKEceQIjB|WH
zFBf(cXe&IxM5;C2+?lf3i24v9YgFnaNiN8-)}$f=+Ai9U^k*I!C5#=5vPZdEC%h=W
zBBt9K(%sbq{bspstbcH}JKdCQuL=8`gAFY`hZ7ec&0m<BTnX1T#(JaXjzCRkmB|ee
zb2;ozM_nx1x;EXHUp?p@oa{;@`dnsTV4%BoC3|(N|H^zWJKqe5t7wnbO6jU(z5%Ns
z-~F%R-%5Xtj)zl<(g-wGPYARM00IC6Z8FmiVq54YR3o!?Fk_O$XACodPthtd-PE4)
zv!AaXR#6T<13HaR=f+7eOac8|D?_2n$=6>VADVXL(%DpexM^y#Z>2etPPGNGCmUKo
zW;MLoHaj&wKKIJHW%k;{O3tLTv~@SF<VPQldM8#>X@Ey#t(HVbbH_|m^JH`HwM6*h
z;Mns8h{+v1|DQ;IA+(_pdIT&=QZsnanv%6{q<EYbC<jec;`r52D2VC<WRAX)z|Khc
zu{aU-@hdyYFg*DyJuv;g6l`ft1ueEJQX*PKjWwC+W3W_x;iF6jq5ur_=dtYKpNw?1
ze`G1x+*v)@Y7XCg))ubo$gVz<7Xv+!s#*J*(vz$;`NZIe{kMM~G<xBT<$b@pQy;hX
zG<Cf1g?5wG>5~5PTkeEZTZ0w#VnzP}E7~QjC`)N7qXKP67@FG(6^+yel47*?@YAWM
zCh2kLL^InCePlk#hqN8|;&ut0i0=bsPO^P;ahYgaGeH<7nwkfySxX$r$;bEShejPO
zJ*~;1#i8E575DN}`O6zpek7{YRaG}n46h%|y|QU3%#JVTEIpZI^FwPhOC5IceeT+b
zvsZDzf%#&?lLu=r&EP40_*HlCt5Wz~FDdXOMX3q|Mbs>Zp!`i7{)KK(*x@Er#p+s)
z+HLdZdU=#YDjEJo!quMm%^fA2P76Z1E8W@Nin}J8GO4uP7Aw(;biOhfCnLZLdqCaU
znzF=U@XUjIpE;adZEf(^$^g$-wXBYLOo8=*na%kZW_$V)ZRw|1E${!x>woszST55S
z@Yv#kXyf*$_QcNay$g#UTwBQ>4D{zd_X#ZQ;N2epobx@%;-iW;0h0;#vDh9$Ac}x_
zS<FH`gdJUdsI|F?ttIPwOq$+oX1~4>2P1HDSb6P>m`9w0kaYDsJBpi$dq*mhY?Jlh
zOSTS6@{@Lxtr_*$W2!43#YXnfNhv2^=^t4g%eDm)-s-fuEnL?bHMt9;k>;9sd-cGo
z*p(Yu844tm=81uk+m9}c3}dgLur*dI*2VkAtv0(YY>sZM?)}gw$9r?&hrWB~?pqM%
zzZYtRjF1z0m7b2q8V@MB#YL!fiLndvgN&VNd7;qUTwB|mYtGhYYMa`d&`Z2cP<4!Y
zjO$h$^p90yrW;>Ei76`;Hv7?BYVL)3<@(^22im%Zu8;O@cKuT&*OW@PCmV(*`g^-`
zy=~&hhnCvL9v<ttI5_)od&g>LcB4Br(fq&#(VK5ejVBv7Gs%{>U!3phTJMeT^$$!z
zjNNzN7Qc;CD<yObpI00Kh_DUYvM9#bnVbO|UzV{mk@z84GBgoDd)S#~b0@3prPD2=
z?PJLJiC;h4H+#$lcqClxyVGb2N@Aae-0NZw@h+<NJkGDu0}Z{NS&ok;HFssTwLVa1
z_WG-;S_%U$Q($dic60gV#Vh-le*DU7BMXfKjZJYAguXxEu{Zd`wcDTOLcj2V!VkUr
z!{2yKeBpuZ4~!n>`oMT9WFZGni9d<9G9^ZgVlZOn#DW{L>#lZJg#!4ZGbP($#25}-
zZCh%m)84?)P=0@)xwF>euj*;=2jx#L-CkH)T)e&5viRa`b7JYeV{OgYc^%jie=Pnq
z25nU8frNyCZig*{PsoTNWiufaf}uu}9Tp3plzcW18}gZeD-bZPY@2qr#1)IrYqhsY
zcR-2Be$SZrSz%DD;tDJfg$a|x`2<dS*eYbgsFh8IPsoa4pD2buYG2o?nwoW+M>TSk
zCFpmyKPHOi&K%4gUOClT{(aH~>IL+YANTwULU*414$#ZG0fr{oX3SObp)|`215;>^
zY$>$$O|+z&+Y>fB&YKK$4Y#CpSBomwAc7@wr`l0bI)|7MmHfR_Yp}M#Y-(=l>J9{h
zF%N=S5yUxa^XcqZKA&!Lxx>EZsJA+7vbNRB4yVuKN({GU7rScW)j@9*1s9H3INDaz
z-P$tQS>G0gQxOvb{yH2pZ0Tkpih1EV#T$nj?t;Z+qFqdCm=2?q!Tq3a6I5k@CBQns
zeLIBvW|_0#C`uc?#=Mk@-`jz0EZ}DSsiw9}%4)CD&f(%#BqNJi7?>~YJxmavAATBH
z!>R&&T4}2Hgsh=xELfLH#ap_=0YBJdW5GzxY){u{wl&k)HrFB#cP86?0ZT(PTHn_S
zAJOa{NLAHUhvH6Cur`wJ%QYo>U1nQvIys)E>A+F4jlEGNG%M+#6-pWYI!tbqu}Em5
zAOfTVB{pFx0CSRtFO7xGC)uf)QIAV&RKuJk|NWa{bK2$$R@HQ6#ETs}-A&F^!^Jnv
zlh->!aZ|iDxtlTluJcdY-&EIO2J6rvyr0k-7IR88$r1A57i(jZ8J-4(ewyI-nFQHH
zHArOhkVe&31F?6|CRnX=R;)(q|8MR~;N!Z=d+)h-_I+P9n&r+u8jUognbEG1Y}v9F
zOSa=Rk(YRjv)E2zvXGF4IDrJR5|Sn)(3C(SK$Dag=qn{aXhTR}AB6y~g$MaPmI7@P
z($XJo10KEqckYZdl4Zwc>90=4BkP`f?z!iD=R5!NegE$}*lc5C3+S-&hL&PGYc|xA
z7dm7(T!DG@`e1W778Rp{__e9(5-w^1MMnqIZS5xPG+piKaL|#nOI;oLQbC=L=Tg3?
z+&$1S*`eu9Me;G$=5>2}bLkFPI)7-i+l_5u_fh*`cXoZY@%CHs_7&mwnt>uIkjW9S
zed-xXw?KIU5qE`Lbt<F?0oH-iz`HG?A`A&~vMjxOr&1pKqI0@I>4l0=M*K=56<2y;
zNzX#~mQYb6N=4}u4iWess0oycmEC=*LcnRTs`Lh%xvc_nk|XA}n~heLPBL0@(R6oy
zGN*ZP>gEk{$P<De#AUKLHojxDBNMBJydgXC(Ta9!C{fAfCOaA(GXi-`3qMe1qcwy%
ziX09sY3ER>q4t`;mYTn=HGk7A*i@*ksEW^Fj+kiaQK{B1rr7}7L#j<d3kauO4r55(
zs*>6nq1obtNJ$bnOAD!3Dwfgc8(@@UGf<{!_BWB4q6{0EZ=nx%MTUBUew)o4@L6p>
zv!u<+wph{|>6H9!l_7)QsfmXRy9e841868_8?!pY2^~&BHfK{CuNern88L}y4c-Bf
z^9scB1s2PMyr$(?Oj(cl(y?BcCOR*XcZs^2O=$F<+={a#Av0VMw8=B!utXxgF4H$r
z?)CX6%7x*ra=_(q`JDE2EEEj1g}h%c%dvsjP$4<s4d(pW{(P*OdnoL6%1%e8+v%-;
zAk`M=XtVc(+PSX68_ePjx`Y!oLmL+h1$)^sLO}aS28csW5ygV7FHIJ{<K;uHY>H?J
zghnBg9POUYT2NWgx`aX^1rQbI3tAI3bAY7mj=9Drt1eg4%holGytgypGFZu27U~JR
zJfTd);u7`7&h}IxyFN2etIk(6(SS2((CIy9%jETIN`-aBs>?3g4DM*9BQufPJh}dc
z4TPWA1?)=kR~$cOYDt)W@U9ZukC)`5wNpF|JQ={?Uz*g*3_#FqmD9izyWmXdiR}=+
z%bzXRA}#0%Cc2ZPl_^E|g#yP<hBM<Q@uSP|6WhdwQD>j<cfV`=B%cOZK<?A1HT#>;
zWhXzPkW%Z!7K;+LK_*r*KB<<Mtes1Jr@<dXAm{imf<J82dEy_4(mHf~RXDZ^{vmuA
zSp+tS#)hr>KobG&q>~#jB2!9iu?Sz4VWC}75;nl)z{lWUJa)5nsr}snA9lg{A|JM!
zZG)xAFI@7O2Jlg2(F41Rpgy(?1t~&9*_7P4sy?~w;uc8MYQM)#kPLkTIYB0z=ZT!y
zzpf6Q*cLV}z6l_6!&#tHVi5^p`P7Qq{Y~h!g@7zq8{4Si@@dGaS$?V1X~4-4Yz}AZ
zXz~^8HwR8^%ef#Y$nRFjZ$-HIbmRnRwK{SFz}HIXf+c+!tmV!Kn@%r%8fKynSW>UQ
z2h7ASI1kXoHnS1*Nm_XIcLbV3O$!sDq;~=vaiQVRXi0y1aZym6<X0gp3Ub;B{h(m?
zx2S{bnPt{2<yj4r7N0!J5tG5E2;Fain8Jl7Vq%-m0Wv|>cA#Gs$OM1pB4ok}3^${&
zf6<JE6?g?+GLY?x`vf>-Uh*}$esjDe=FSf=q5ZRHf0uCdbifo_37BwFfre>F+jHQA
zHzMV*5-puxY9&;n#qak3mDmO6f|c09V-Vewa6wB#TJa(oY0pPGuanf>;=j6~o&Sg3
zCc?%D%Z<ziC+d4A#5Yda;DpN~Chk>qTuk~ZZkDBQ2w%syBz+O+Q)pa&WtHn+Vt4cF
zz}nIzzy7jvKdeo3|Cfk%NcUs1{BV`~UufQs!u|aEUpMYg^ZQ?5KU#b~VX~F&dy(C?
z`26B3_rJ)#vv|E5D@aWGn@0UGMxuQ$vcGR$7k|$0|C(}L_;KU<!}w-6u=6;37GC(g
zaBt1yLrNc(iG}?RWaAOwp@Hj`Y$=pc)Q=a1GZ%YUQ7lZsX#<xfMk3GI?gTc1z+i+S
zVA94~EZw-Q2vo%Kt0*ZkWF>|B4+WVti}e)|acD;eb}DLk9381@!@h)^dnAQbFa8E!
zT3cysRurd|Hifw<|19VWb$C2&?B;bPoBN=>VhQ;}1veaQ?;I~#-3M%Cc3gMA+#d1k
zRT+~Uum>DFhe9LxRV3n9>#}A!;0V}}oNWZ1l10$kIv9r~!Kv68Nal)cT9Gkl$th<i
zzBwVj{%ao!UnhKm^|8yrK50iEpkTuhPxfOri&vsBTnTR6N@FTPlgQ8X_NLQ)ed$jq
zU+Lc8T}7ghfiLh)_7yzXD->{~4{fKo#RZ%}aXZG3^P)v*mPZbIO&*7hH<EnK&G}A^
z)U-7C&PL3~mc}<rH>1YhX#Rj#@GZPk_=NBQ!6g_zi#I=!XXL)7vEzQXrTVlHoaJCL
z7doSn`1*nCj3$TG>Ok;CdoEhY#tPS@(f47vSw4u$=ryp>t#uID0lO5?(Ili5VsMr>
zf_zs-q{4gAv<8vhmRp1CT7RBtyv)mu?{7A~Rn1pg`Hc-+1Y1`q7qrhR$h8Ot847_3
zw_)H#kS|2BDo!KOy;WsNI8@L`PB_h5JMvE+y??8-P>4qHEb+VUQ~&;&@^iF+D3&iR
z7=@o<q8L$m9JxuExE}LH1W3hmh%8WHaP^vDQ-@5cRt%T6Bx$c}yutdd(~q)?o6X-?
zH@VUDL7`3DBt8KjPFUDbTSxK0`rEMX;Q>}8i9mWs5|e`#8_W_~-8_#k@6zId;r37)
z?g|F{KC<f~YOVQ47s@dnr6v<?u1ZmB^eHK)J8ETFTVnsuzuUSexgmKgK1Zxa{D-WE
z<CBS7@!4nn#4Y|?*oSVI`5gYt+%WST{><Ef?!?#&&-1bO^MoGC`8OExmig2|$da2Q
zxj1ro-A;_lGf;g=m_{Fd4vtC?n3On0GC@diFT-*`76z~p6vTtIMWy1r9(5-S!^)x~
zuPjVLD8hi=S`^FciYix@>Q>Vh!jej*imC2IAdyaM;hlDXo6vMzl1cq^ZUX#y%jD-s
zC=<=)Vv%SbY{8TxLT>p@yJMwnz9%te?1C^sxR`IIH_^4BJJ(f^133f82Zcmox?{4I
z8ZE|>J?lGu+9GsF<HJs{Uqhyf!gy^gMJ9>K#SOIzyjAH&&7uI3#ZnEThFV=zPjdx=
ztnMAzSj6k$QmKPfwuYUFH0e13qXbq3Tm*_CvSBK3nje|e5ZrHHDEH*@<-|~1I@-}8
zN1`2g&9pO;s_q+L^G$(1_3^3E^k`R1E{%5-rpkELVy>%G4s`HWO?6J^F#dDc{XD^E
zs#fsUTzn4k%uRV{a=YE8f>RZ-)R0%L{DC7!*ZmY9@r|GU^rsj~x>v>Tr4;~@Lk5z(
zu($#!cc3)M*}?<DDMorKA|z^LiXd|e#I2Q(B?v+P;;e052|!FaT|2(F(HqycYRO+W
z-@g9XD*6&i1LK%F%c>>GuP&`xakTJ3fmmIUXEg`bV$(}4-io&*HlM&|l(p_zjj$F>
zv1o<uw%4Bk3k*IuJmx-hO@~mbb+w~t7JCQqR2Z!@m=;)LmK@nd70uWVA!koSvx{Er
zhRCDmVQ<5Euq7?I?eRaiy(u!{)yg++bkHAf#2A(%q9(O@GN&u$y=GOm9QGN_7E3g2
z2)$XWhNcIGCfZ!KQg!Uk_t%P<n;tEdycSrgdy74j;ao`tGyK9A(Cip*HqgHlN)Jgi
zL^K<a2Ec~gVVM1R1#%Ff)g9S{9E*5dHZ|l~3lkyQ+<+l`zNXN2T3Z?d4H1IP7o<+P
zx0v^tRM|?{Z!}viF|=@O#^G?<9Nw@Y(tM4VGB-b>w9#8F_Kov4^7mLXro6{p57yA;
z|6H)KKSZ0g!hpgnaMK{olPD7VN18`x7XiR<<_}&&l=dxN1|t4UtBgx%;9q~sc<gh>
zOy3gU===2pIKyV)FH!yFE2|ghQ8Vv~*6M-j1YW&zxwU#N;1IIU%3Y}3`0a0e`?J!~
zzF$Wm4i7CjMHlq1RnUCes$pFX#zxgk6a|l0`;$!<e(b1u<J;Hbq^~EwcFj%y_~+$x
z=b!)Et$Y5s7DDU(V!_G!nz!q4yO#5p;Lf3b*J#%&cTUY+_{T^8s(Ifu)$>1*xe6K5
zzt3)Cd9>SiCgFBMuoGOcS)L@DZpoa>Eh?}|7jF?>dy8Ap^@*44U&RgBFW?#c22uJY
z&9%jUpRJio6=0ZM!a*^{J_VDIS<pRaM)o<eD+gDqR_leUi+{QFtYr9?7fgx9_v@L5
zs@Lu9yHoi>9ahwlUaEtRF{L_ERj*dv_zJ!8g8rAr`rrO@<NJequd6;(xv@|ALc?7+
za(9k>3GL8)8ZNHIHZ&jpdgiI>drv^j@U%^AvRP8%CHa$@kGSi^d#g`X?gRY!<-(I}
zRCqve2noSmb0j<ttk3Hq^1_KodrqX8s7yY-A81TKMVX{pf2DQ%^m>ae849OHE1z!t
z$BZXw(wekJpDUb7g;Vo!>&joCd*-nV`WWT~H6vCFxA}d@`>qitfbL)`IN@{(f)kWq
zT(_%qu7)K;v7UJq?*Rvy)n&griKbYaP5E%^KSXi$mb5kvt-1oO`m;u>u$;AY4%Vec
z_c+g~dyY4oaa#9?_Lbey+6dlE3@G|X_y^t+v;$ou2@`ybAkgR%arG`)_WrB9^0Imz
zHN@$QNV>uo-5l*AR(Z9(t?zMq)1gBkP{PezplmgBv&Iv=zEvb?nb@2rDQIAE;VSl$
zw0lYBomJ*#Oj|Uv1F8BGtRu~KWZ3tj^;ErE#$*>3PO^uj<2dt0VlRn5_#*NiJ}Y1l
zfACBxN0VOz+_?!Wc3!xpW<dHPl>rh)zGEU4<raOw$l-}ZdLq((A#6}UZpwpLqcnSv
z2oHMNVCbZbw&z^B+W>>UE#HyLIy{MZh877UP<#`*W4qEq6Ll~0WVz0j0q2pCLcVR2
zWd{Fk7=3WOYqoQE`0aOED&-?jZl1lgwEpBawdH=x-HH1?SsX61PFMYNs)@@ggVVQM
zod}8fp4#<Om7SH*8)rv~pM+5B7Jke=EdFmHg+BOf&7Rd^1CnuBG4|vvCfftKcT(i{
z!Qq>T+ec5pGYD_`N!%@gDM~B1dL9<>0`~?{xKpN4oU`jtUIgp-3^!0<1Fw2zSv7`7
z4U)prmYEh<vQiK|CMBf&_GHY<>6qL$xMVk$$SJ4rFlkG~^%BqZDSDkizwFRZJZSdm
zv<8QBn@txkdUZ3SmbPMOXwB%cHGz`<naE6GSlm;}$pw?al(0D+_4kV2fXmrYzW!GG
z{;8=ucA2g^T7Op?+Z4QQ2F+~tVMX{z%~dG?*^ranhdoLn24a0P4W~@LMwN67XaWZl
zvrEu_@EOCs3O>+0kuwX6_TCs3l}?_uWG%J45K-T73L=rPK<Otd13@WK#SJ@-nBQUd
zfuf*?sIBNPC2XVFXGGSGQ4aj2euK4#7`p8C_GZVqa#Q*4GId=sA1b!BheE|zI@i6u
z5-J5;KBL-SY7-}O?TZ~aeqyvXNL?s*>)&y`?$!r=I|fIu+2y(QN)<bHJvw5o@Fe?F
z(T+WCN*Jq+SWL)0EecL6?AVeR@L=x%GK*O&3KK!M$kxMRh27(l)3!^TZfhf=W2z%V
zrYjh%5NeA>jyK&)>4j-^*2s9Xmfc=yyf+l;OZH}prDSis+TLD`SCc(G>E7r2`?Fbm
zUg}LEh^sH&+aAL8bWbsZ5~23q&C2C$KhTY3;Y!gBYGPFw64pQhJpI*zTBT8q^u_QF
znp)HW<VF*TV)<f=-ae4;aU==`i)Pe5=o1e4dbkLX_Bl&QZit|g;GZ?aI~J?M8cAV_
zV6~DYG(&?hZ460AyCZ3D*Xn{f%DW7LvbP;T5H`N%Xk$V55^u`mbtaYdyiy`tLc=4U
zN_t@tbUSz-vJatCd%dad=-LzOLdDSZuHo)zmpa>%O{{USN~Q0>u;?xM2G(T3t~i;<
zC-Pehy@g(JxYO^8>i*528QGX0xpd?mx0rU14@@UQ-D$Z~&C+gGyRh7|rR%^E<3vxk
zC#>oDil&mP-%<OeZcP{FjT7eNE#iL)-NJ)415L9q)CXy7N<BpkEUs>hj57E`IUUq9
zl@5war9KEXW!hs#SSC6e=yeYQxvNBX>T2GEYj}W(;eeS{?q0e@Nsieqbde5EryTK^
z-C=j6;+EB>7U^rA<WvbtQVgnq>lM=X*m+@oc4X~Qz1iz^_3re3!}2#O)ytMI9E(qf
zq-!@_y?feHlQhGYp}>KY>&5@vFxojD3}_3^p!?QKimuM0=YwJ2=FLxCTZ~4FJMP_t
z6<3XI)@Q&I?iTK;8KQXgCaae8co#9fDHAaE$fU-J5Y9!95?V_0l-96|Os)F82Bb+V
z>d`$#<rbJ~XkSfakGH%@IRX_OWOpXfInGp^7C24A_^5y~Qa7}1X_%5RGZm^7?c%7<
z=v1T^`Z8@6zsg`S>RpA<&Fc&kxvOV;n!j|pQhwu=hN~{?zG3^Do!LZ>$zaadE%u9#
zuou&}->Ce?ly$Vv>`0~Sw|(j{46bqElsG271~1N~Bt0UeN8ySoGY%^irVldfN=S2t
zGo=nfHS6Y)TN5Iq<`yYT%d;0ED^tz1&hFk~cl0<sT-_?WR4w8GXb}gKlM4hku6S8F
z2EHP~5Ube4k<KE8C63wk>MI5dYig3yo|$x+-f6j+&QB^2sVq#VwjH+|-6vXthqkVn
z5`SW`#E}6{`g^s>>Wzup28s_GwUXIb^lvD#=j^VC6X=i$p@m<FQ2?D$;fK!^n9)Fn
zxC{hhKrkBg1|uE%h~RW0^8ngFsi?558w{pBNcNS-xq>>Kex8mRgm5%mT0M*AxxQu<
zD1efJUWX1mb7id+Ahfyh`18BB%1wE`(b~vxU$xkUMBfRQ-Ia(s<953hqDB_c=%SrV
zMxQF^iNF+fHEap^iYgrKB`RK{9El&B2)}Bn*GGFw-PH~5iO%wxYbFm}e&Hd@eZHX6
z{C5^%VPd*}4R}|<(8%%i+xO%;_F3M~?hO>@ws(|EiGj5}UA<d7x6N*xFFIWoQ*q<y
zx>71{b4S~98#-zO>5(|j76u3YO~B1xA(rpwHA4ch0r^z;5yy=)8FXr$_BdcE5_3yP
zsbxee7ABgJi_OB!bUWY?&X8;1P)Zp9c?I(yc2inw`Vr=b3e-3K1~t@1nl~fuj~Us(
zh&id#YIKKJR%W5paLv{%wE+uGV9n_8;6NX_jJmrDovFACtm~2EHjGe0nF&~AFdb5j
z89+mW&7?9~O@%-OXhir2O4v&Uu*)L_!d^8`kH-3w`Cxex96*D2x8*_$J^|;obJaDe
zsLiL*nXKkgC~%+UZVP?1k&tBZxgs6vg15cX`(!BEJz#~mB4e5Cy1Y1Ayng$Ea#x~g
zGn$e%xBHIk@vE_DhYiYr2WOzu!x%HC_^(1#=&hAuj)yfKN5SYt7KAA45Jn^t>6gY4
zj<|+R3uA(ji3(AKg77#DzUszOPHh=E=E?|K)mGhDj@(*F**~&ZYL`B<KiO5Ao44I`
zSM|Q!u^a4<e|%{737e5^>*=mtHLhcwp>k}dvs`52SJUPEOka7Z{sY7Awf<fUXf<%n
zN+#?OgF?Fyg8@DxJX$lfGo3zzwk>XOEEFnkx4O(KWOUaaa=2|EZ$V+;1)vDvp3vvv
zXlw)~=FYV=MJ?8{;V}4_loL%3$HK8_<O~iBPh+~u6912u1g;EAaPpO4G)t6H-ju9O
z$X>{RSG>`3yXCgQyM`|t+B5iW%k9=XEq83VW!=T=_iZ?7sR!GwS!>10BGZ;GW5CRA
z94*%Wo$2X=ab#ol=jl@{jy*SuKgB_e=F$f6=I3m1$B<s6wV(rPOrz6lpcgep25_Z5
z4BIL!*wisR*)r54R)t32oO^NJIgWe>jwT2tntmKpvl9TsnjLV~Z6M284w??c?~7k%
zxx{jr<?!nJK-M-^{Mg5eV|*9*d1>PEp3`=LbLfNO!W-fQv`{zsq=1*yE`m-tS%h{V
z=n|y75TMe*Xb_PK@*sA_D)sgT14^x$#oW&4vY8ajwNanP?ywn*-W-!XG+;2#x@o4<
zAz9>G!K9`&j?gFGvsfvYqtz000F<%V|Ez31VVR$;?J}9%Hgj(**Wovr=8v04FTA4u
zYs)`drfcghh+zC`Fj?$7+OD!~^ABV;ggh~=%AQFl#}j!^Pp-IoR#l8fT9xaN@Kpr}
zwJKNSHswGFOFdwK9y$zw2YsQ3N?pV^$i=Zjr8e-B1hF{B`;hvBKMDBBfS5G{&xC|{
zKFwjJ3WRPS#8KJGlb4<c_31!jK`cLnEM-!gBqXb=%`>XZw@{bqy_WgdN>v%V$MT-=
z+0^9cijOZ>l8+bfZ&i_q)&f-g4@5dkP<h9n^8;cvrxo@qkOhhIs$;9F5)p%dhy>aO
z0gg7z>RN3l!SZt}+O37IF*@V1gga`t>2z&5vMGB3tRQiSS0~pOEf=&}aO|Cu<h|k_
zm`)w~CsS>E#!(yE`r%_^)3su(91@3zBDI0*?-T#Ic>Czye1~hGyZ6M5$!IW+4jW9T
zUTvt0uK_=H2v630FnfUI%ClTbg4g48m`zBjLc4uJRx)0nGzQT%8Xy~Mfa2Ta5s5^h
zQIt)zSrp7q=xsIMxHa!-aBbeA3^8yNnkZa7uqp**a&8KZch**|BL0`F+7VG(1@7jX
zyhYm*x<~v#kMjDZr!Ai{<5RpZ*Z67Jv~xeKOY0uFhWbhTwwrq6=kcmMjL*+rZv4Pv
zJFn#SrS)%{FyYuVz5;y!D^M8JffRy{3y4~*3QyOJF|0zBB6g<DWvB}=M+W%PoesZM
z%@-n1z-32tx)0$;Sbm^!%|;{}YgvoV?-s6ed(z<jlzRw?<U7*2G^s3}u@fyM_xkC+
z_280L#tI~-pt0y9@ukVWxI6)wRApt2a+lOtrxLQeBuT!9EsyPbm+s14ck144xlX*y
za*^p_>A<zOUVQDkTW`123wcTPR|DQHUl+%Gtanp?{r&Lbv70k0c3`ylFZe?%)~@<T
zo1bFw@ONm{!n$?&<(EUU=#1SFAbO8*@HyJ+Hm6twGN_m<4=tH1i4KU>s$r@;dlAJx
z39U`5lLMdS_DQ@xUzi(~$j|P#?6u%?{K*{;js4|qmRl_NwEy8f)cnuYA7)4D<M{C&
zH2B<TI>xu6=}5x;przc8G!Dek2nySjIpkLy<N#jenuD2bua<Jwb&_-L4A;6P=njt!
zaZI+L4K^k^(T{tG$%EcX!%2YC#`6d^km(m1&S7?hcy8=?<DcRMP5<y?r)*0+2($<m
zhM!_8Am=+VxfQO;3HW!Br-k$7{;<iH!!@h$IJ;k@`E$t%4mAZdBWU0d6bkHJ&>duI
zZE~nrT!aG;6YRDI!5U3qNE8DdyBl>dVIy<}xYRVX8iccR&;`Z_K(_q&J&t?Y=h`2z
zzb`xohuM4HGkYIyNU=P77}-P4<Rrt3klyW6e0evLFE1-R$1X*>6eHYIdUez31P2%F
zaN69V!~KUY={<a?@9@Fb4jt}0d<lN&KX?!iNFg8b!{WBa=nm9+VI6I<r?|Zt8&m|Y
zQQi{Hf>5bv&tV9)Xk9B^<<-WReTBF9#^!*2wmE_Wvwz?G5f-|LaFBhIeG;wH3h+nK
zcyb&_w&|@H4sz6r(hT({=QQA9^xpw?+*`lb#s6lXJbw5%x+Nm`*f+%(+>TE+gHB-x
z&>}PvFL?|$Tmw#>0Ngx80|h<+zCZ}T*nts%A*b-1i~s||ZRd0YR?$XT@#NX-CcuIB
zatcjMiZDB43%6*ASEOZj-_zb_9Yx1IzI%P|^F0_W1wZa(gNKjL%-|ibxrSa-3zy@*
zl`coMR&DwIXFSZUuRs07i9IuqXP#PFw8f99)w4}n6o(&k4uvrc8sRv5zqk+I1|d>I
z-Zt>1)SUgboH*g7iRFa(7Z0Ry7;8RMR^)S3d3JFYbqc8S-bS6_S{slVc%?)rTeV8=
z-BqK?a-(temy{~+Q5wms^q|Vmix+VTKCH~)6d$dlgmwh=ag1hjD#O^N*-GZfc^ar0
z%F57~w<xH&>C7d8diVr}$Z^y|+lIyzrdR%I%QSwc(!_W2$y}nB4hU~&UtxcWc#V=!
zs|}g(vPo_TLwCTS4BHQ24OU*jGn^Yn=4367zoCFpGB&6+NHoI#lXXZE<W#ood`ph$
zt)MKvuW#gmSmnxEtFtfc9cc4++fyFNYLIdMgTHOSJCe?y@d`5LAmg+~t@lXN29sW`
zF@|3}?Kfz6x7f#C5I+XaVwn?bvJPx{0k%0sMg*%@6zC9nNdWUsl1|{2y#nAhr@Ru|
zMj+F-VwE6!IG`gDCS+#F2EDQ)5z_d!_4%{@TzlH9QFpIPh<ye`odv|MqF!(HGH;<B
zjc^Jjb}wiNYR*Z;6HnroP{IwI%LFJ3p4KO!<bksM%E2xzUHSdlH_@=HaD(_=_GJuD
z0t1Ajdb`>@bcPq4_+(g9;SlG;2CZIF!xp!l|DYE4=s>1Xi?hjO0LL3AOUYtB7f1x+
zk#<z$!*Cg~E90~$;9(CpqBLz{DGV9s)+n&B6lr=$v@raaj*a)v7kj268+H_WN6QzM
zJ0}wZ`+EBZhvQv|^k5>)?&$DF+M>f*XQEraVO?MKqRL=(tb4S#xOb>B(l<C0Emo6j
zI@%KP9$!dK#B9YBtkjPz>|!@aoq|uO)_N=$AS+zjP=Q2uCgFpEg<lLQXNbbZ8Onl0
zR9>Ipl@oC_-bItDDn=mqrGfCZ7%~lLsTz5c$Dp>D+jH7S%rljY$6#`W`OoE#+PgGT
zA}apfz#4m(J`p{Y9$15C{kKbl_Fs_t&APB4-T_2nB$6v%Tuwq%1@%@;abcclzG{+C
zTF@xv8-s1e$v@bqzwO%l=k9+VpX(grG!n|~7XOGowB{2<{R&<!QltTdVn8SHp@em3
zSTP-Tr^@I<wmOMOZcc{3GR*aajeW^hfAWd?>ujg3UYlhdEIB({|4#jz&8OUerx*l0
zg$JM_N0Xr9{%E-G;pka8(;Rl2+UVylb}tbQnY^W6|F-DQzGM7@`oh-l&3-|=ZT1v6
zb3z8jy$fIpX@kLRy0*cO>afidZP3@qL#I;Vpls+7q5|L{lt>G^c<Q(9M8_msfm)ai
zAy_Ar38m#IstF<=xen6W8or`TKqU^GY@a2OW}mWU^_18z_Few;-p#wW+`T0?p0v~k
z<7?gV#J<uy=BIrln}_yRM#|!^uD{~lZ$5I--1IF|{`T6)+_sRfH<3OyJ9^bbx?{Fj
z1%<vPmEJB2SZSuxQ_yk{9flWRbhL}mH3bP^N;(E&-PX={l{+^K&3t?CBc^^|`S!rw
zpui6Y#v&%Y1o1)O2yEV@5}s#IGy^MCcb|4$R<2Vy2{RjGifx~`2I8WInI%y3>UB64
z4`^x<Lc&SoCmcw<3A})Wi3nYhBxjoCcRg7D`Yx8g`d_YM*RkvB@2<Za-`(}E)xQRk
z)W0u0D&8d?fV+2t@XXXRen2uiHjt7|8nxjhq6&kMAi431-+@bkoU&B71I>a{2Kf~v
zL8p>*hY`20!Zbm)Z5W>b2(}X-z-gR71hc_f_sZg!N-DOUZfe+2R^9^#<?yf|3~v~o
zSUZMh4ki*HQzjB7j2H*OB!P+v8j1b5O^$S^$IF**g&xdJbS=yPr92tx8<JYO>0QU3
zzv_y24ehT+Gh$^ZnXO#VVfC5qQ=QDLH@Ygxne|&AouAu0bZNw7ow~fc76whn;48&~
zhpu_|4X@mE?a|3QHbvVvl#Bgun>Jbfx@Xi~HnU^wNZ-cIS3J9Sep^>Y6L6)<fdz;8
z^M;`vDMTc~+5WotAO>>|gdJNH+uoT@yQGzH05*@4QB1dzN{iDN>7+f_wZWW*#Zo}V
zJ0;N}Q7e%_l0s*CD2OS8O~tCkK|oQ1VbHt_DS>LnkTai*=VdoRE`i%MDUYaPW~wer
ziwUMda~V}^pPX|EGgJi!dSJi+GC1!To+$jP<nf9RmeY2xe#;$O_FU1uwG<8v92{7?
zgPi9MZ<{aB6{-{pTe^EXa~BL6Jie+=GHO*_@wV=$&s#8wRxP{JC=Z*}TW?*zcXRc!
zjaF5lKUdk)w{bAj6E=1R+9K&SiQ>3Pr61p4>gn&=R?#?QX7QLTv5HZr!m+MVo7IEq
zGO_S9`xQ)FPG~RWF+q|v0nB}nqJWlYfo2y&9zl3>yIgJVHkUg|d<$fVR4i=}6D`&X
zti(LKDx@eSeSczO|5Y0|AJ*Nxdy~UIv->YR<}QtQf<-J>Pu8xTn%f%6oqC$xs8QGN
zWlySp7;@!Y^^c<^x`mhFdU{=`;auzEH4~+)+cc;{XcHNZ$U_F381%kGq$H@brO4@}
zA>-lIREC10&Qxe;&5l>92_uDkDiIAMwG4bT&CTMXx0(nO{4I%E!lw(yzh#s$Z9EE}
zLQ5AA(Tc2@_@9qHE?sf3k`2oCd>qNRvc;}!y04%f-d8SciMM;Kb|-RmRlJDB$%Th2
zS0DO^wu~IjTAhhx_kgidnW>Biy{cF;o$TuFo6IDtnZks_Z|?=#>x<`Y`jp!nuH}Nc
zNT97_I5V`{ByB&yROx6r)#gw7Ox{38EVsT0byE_iMXxvoBSRR$D7!g6-qP2b%c{V^
zf<^@D7qGT1=6`_>g25I(Kdcbac6=e`3|1wH%|;@$>y8XY29N@*Go7@BZS6h}Dz+qz
zFrN^Rt}F_LqC7aQt+~#5N}WW!hf5qp<W9^X>L;?&qQm7M9UmP%HirMlj*V6?ECY2`
z=<iBmO)9-MU07o%;0T*QrczCNGsX`0XkvQ&ZR6{%S-bXa>+pBB_u_$pi+h#7Ye)}~
zU6T^aX@}G6EOg|DeeO^sj#rEcvj}kB$onFX80af_Z(N*1>Vgie^?4k81uWW31B0$X
zW-&^M!@ZzJ2IZpGs^B)@U4t)l4N_sDYYLszHRV!grBF%6;T4IrbdKrVI;SeTWv8O0
z$zTFc2|OmU`;{|vjA5*k?XHeSf}@4$wp>T3ID5tpdEo{occg<^-8-}&cKUtpomkO+
z#-3$Yiw^)@Cxl;2J!8P!^5P^h$%82a#ynF6p$b)#HYQHM20=s;x-71C`HVMG4jHN#
z=%2PSNKlK-H#lB6GD-pxkyP}9q(**!EjnIJ#tzOrTr5t7w}U7R)*KeV!}OEbC@!M-
zIaf?}@<iNWcex$i&N#ePp&ZcyT^@G~0$K7x3ad1+!H<%wRX29ku$#+etvnhEt0Ki7
zZ(bWPYMeTsL!ZrkIWtyB=7J-cv`@T_1*0Y{3q|udEGeZ@u`ho^^YK6V-eZs5MtjZ#
zyN3D2=iw?33cXy^5V;Dz34{tfKAK+mQnJuOhIkU%panTzaD$SBmZlW9N-nP6iwg|7
z*Gd~RsmX36##)ol6bx2tBBT<7?3&*Gfs6b4dh-XzkzTPqDzDA^oTFGsaTqS^6@Lz$
zuzG~0UH<O;y!i89d(rfzvRVN)lExl(c?bk;6_j`$JIvqwZo0odJX@!{acl9o{{>xc
z6p%L#Z`-tg@JI(9$<)|wG|Z8TiCL1r{ebWO@rm(=y$@eE!3K|$|MvK)mr<dwQK3`l
zs^!sha86=<Is`W*9F`#I5<?d&Jtr|axfPr5W(=_DFS=OCzs$|plKipzeD`@4pXK=j
z?<12F2Vu?P4?KLl{sg)~M*84ih%dri&@Qa2tqJ)>waVoL9Rr>W3?<)|({_N|q)6wx
z80rbR265Hr!|t`+*WMQ3_6BE?wgsvd6&Xc#vZexbmZ2xLZkGATzI`9L_~MW3JM|y2
zExD1SnSAk%sV8T)@0c(szsKJTZf_x%>FH-5dZD}Umr!h4pya;=LxE;9`CMM989c}e
zZD$frdQ_+(1v<)4N9ljn#PiS|HZf$M)WGMBV{Qe5q&FO*eOnt3GY;_xV}e$tx4sR+
z(ME3ZrCZPct}qPqJ8QvY((kX5;^W2)f5IP6V%8=+W-UzCe8w(1_&i>6O30EV^T;>M
z5DssfL~6dakXh{C)~>gjYD1gfyV)D_Tz`Duhu?Gc)w{)~K&0ruAiFM`l|2TFJL$F9
zA7K<?B7Vwuctf~iFIU%HKcUf``k5F$<zjEtZESm?ls!DTzqY?x?b?(N_y)FwgT8&V
zJ1vUcY&#@fBSiTu_fRUO#%_c96x$7M_@U{{N?sXShH2b`k-^71#MeJRM-KUQFq{7p
zRVZ^4cb|lKEsK4-`^fcG@%1;cOF~)pE|iU_#!*PZ-}jSR5iVg*i4h!Z+#`%K6(vbk
zsYeE(I;%8KAO)0vrAC=N)Djp%B)oLYHSN-masd`^G?KqsgEND8f>;ocKqp183lWPo
zdreFuYUZG$ov3GYm3lA@0LX|ia84D~##Yq90o(ai0-1pUVzf3qG=L+)DrLMo@|0%d
zj<^{%jHW|JA-H0qL9i4+r!2F}p&V?MgyM*p1G$3!$N%rkwYx2L5ir8$3^-gacOf2%
zTTM2wqReKC)8X)V`?4=(bhE`|$-AbY9SE_f;vrwmY(ffeSJ3GIK$2adM4Q*@G^%X|
zlf`Yf1s(plUoJAo7r$8l<%jS`5bJM<LqdDw7~vupq7?S&5Tot1U1xjX6$J`rt3{8K
zREY#o8!yG<U>ZNaw&G~y(@*Gy+2Gx9y`(@NH3~`o<g*6UuYB5M(-XFB(RsoaX2tG>
zZ*ggU%Rom7^WoVeA&B<p(Ud_ETVH;opEqTh>kJT`o=zJ4$dSAG9b)|zu_W|icSwGk
z1ivSsbR0j*py@_wE>+F@X@&m=>NrL9yz%+Z<Jt9p!n197_PNYrYBgr@=(0(S(7SG-
zx3vZ=6VL+~MG<BPQ9J>r4CQrKT0#7J`884k-*k(w&&^RAzATo7PVozZMc72|q9io*
zDKCUc3b4S_H|zy?V$vK=Q=&^`(pYgt$?ISd%#N6YHfxPhD=B!pgbnP^H}1?NGb8G4
z>cRQ4SYE#-o$Hd5wK$;RtzsIoNC%{Q&H=XYaAc3kZMWhEL!9y%G@iC7ksQe?Xn%XU
zC`VKIWXx=|fIK0llaXXOD<?a<<7TVdVYHwV-Y516@!!IlFVZAG-J1X4c^LES-x6nq
zg!l-=>MbRh44CyFvzoR31@RGBvKK;-{(q1(=)D0hkX>-Lh#;6lH&W;;qya{sMML*I
z#!`@Gpus(YCmxSAhf69GG@v~IXG<y*TC4r@pu+<SVl)`ASAzNefli%R+Mxyq%WcaV
z&0VrwRN<6^`X?|g?B_KtXkn`2Q~$(~3#)E?n)BkLkV!k2$qh>~=>?#Jt@jvaD<C>8
zKV(Z4VY~9s6<WTQU)cE>h+>T3B1s31*rOMc>FqRHJQG4V*_24}!dhIBM|9@9*q;dj
z@dKC<KHiyT3o@&&#{*9!DMF1;B?86Ge5xAl^>RQH3fSCof0X^BwUYAtTyAe{dJu%w
zg^30K!cP|d?A%qIrbV&d)lhXmS=4l5eQKe+aQ(ucphB<k8|dv;ib1R1t{+{Yxc@p9
z2*`22Uv7TmW$X*ug_{<>i1@!o*DMdVqps2N{X*-Sr+v+7HE0Zmu-_NzPX5^K(QB<5
zgWc!~w)>+SkXxnx{)P61cL*WuS;l#f_dBpt0p%CmCde;AU(Rr9$}y59)A*}!>?5o$
z<gf_}ftWLnQ#6#ZRwWy5n}#gI;@DWKG;;mBWxL&iEc$I;Y)n;sxkStvO~r@gANV{$
zi_Pn>IZdkjq>Bvk_O>qULh6q$WYIXQU>8cfacPU0RAAGx3y~xRDefgct~iIr*acg{
zMGRc(4(e{445Qc`xY?opjoyp<BI&R{5wqJiB)?rwZ|pbp#oMAOZ>)gl?N}IFxO3sT
zC524j=Xa!#(V7;8Tz_PADi)T@>IrpmW5@FYz0r6YdEwz%toJNzT{yY$p>t72<fyK%
z<;rLubW#0g;pYqAX2c{rH$8SY+hD3c$D+ihe7_ijkM38HFE8(FlY=QUkH>OSf5H#9
z0#a!o_Skd=qfrh9qm`W4=L;D1W~0ev_J!q8Y8!?Sj!sw?pqd;)m{+@cG%Hol@f!^j
zcIpju_D63K#EbghF3z%-&rNj`f#t3x%`H3zARjw7+~S0)e5{FEgcG=tR(?r1Gj1U-
z)Ylrg1=J|qF?bGlys~)5TCvQY{ykv>^mL0TKG4*}E3p9+4xrh0o+HFT7ZJocungh|
z>V<aUwcnw7@tj4yOr4*0!J5_060L7{mW><<03hHuTOptb_&3B3{pL8HOZ+N0{=yZ@
z!D=`j&)z2dpYy@-txr3&3XT_i0JI<ELi(24gSx}lm=B_`LoBi9&kKIg>>z3R^m0@#
ztix=6=-g-XwwBr4v5;lf-*~McZ@}`k;=tLK3RpG)n;-veVRP${w7}-{Tf=4{2@=d_
ze+$@r1`>?0a6Y*Cdtw6Skgvg&bOIDrTA3A_?wOZNCDYxRHZtUy2Cf8oXVq<vvd?h}
z4hI+_T5oP?AFL(xOyeiNx;D{{1Eb8r{8nE!a_I&!(V32>+X4}rsyaMB10dy)BEn(m
z<^N8NeriRdrO5I|s}~9j8u0|2c4=<#8x^K-FwP}r>?OuW2C6EfI*BM2I5R{T4sZmR
z4m(6)4+aD#Tmy&;s(A~X$*Qg?o5?ECY2FC5)@X{F>9Mii-b_Xi#-_$5dq;a~m2#$(
zDRmd{oRn;L#9ea64xci|#g!^2;(%JjRhCw6Y*&a@O0=99Jk6}i?RnV5Xr17bc;HRe
z!Wrr*#qg7Y#O_+(vA+L0*TJFKfTep!VZBrkJ+^MA<A8qumH6%EK-UiTfL){fQnPjc
z&S*sMJM7e&jD`Oj(VNQsKHHl^g<NmcAr9=FjD<#q3SNgtZF9_SPM`YG-pLVgre^~-
z4gI3NhP}VO^TkBwD(6Mvc2^?P?<gdZsEzlhlth10PtFQEh5gK5Ycm1Ujw1xG4WM`P
ztf<q>Zxe005uD_!X*eYJQqYwe4oOjs?;8cJUW22w5juxRA{{xPo4t;(%I1$aUsbQ3
zci?bOHKHqZy6TjR*=&YAb|cO=E>1ad6mat&lxAWdJ;Ed*qr&g&89QqoyLQdZjg1My
zuKl|%p4&OMW8(}YU}|C=`lE(phO03;aM2ZyW!x~Qw~l^e@G;uTR>@0yZ+N?-%_BPb
zB&3T7Lf}#X2Pwot;lF6L5=livC_JU)=~A&J-M4${l6(xC3b?#k$lp=c+nIg>hjoUE
z#%$t5U)O+c;JT|^7xyRntX*^L4y{$T1d<u8&9Lo)U1^thr&DK=Jf;_;x|PDx(^DMH
zru-piJ9D{e-J6wTJG)bt&kPRw)69SBN4uxn{AKa=*oGc^CB3;m!XBybc;%ui96OSJ
zhsCl&ekzckDtc_3B#1c_?nl4`2f;wxjv(xbaj-tNOp6v(nd!`GFh)Xj(asF&fw-tK
zEWfU4vPUKa2^pxl0I0O0>PDKtO<6KAOs9F95wjPvgp;nO95|3yx5ug%b-Ln|ote$e
zf8a#e+U6Bi5&5g377!}X{PDah-C0Y|&8=J43)VIX&brxk8`rLZ>OdqYI-?>Z7(C{{
zkqyq(1joCIlr#jWsYK3GT&B{U>xZu1d32e0T;eF1-ATP?UN?U=<RsZ^?Ve?K*!5ns
zlgr8Wt%{uJjiS%EikxJ#G5OSgSnc4fHf7_VwE9^7GAI~GNT31@)0r`>kPx54x+Ecj
G@c#kN+NXyA

literal 0
HcmV?d00001

diff --git a/web/css/fonts/sanspro/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPa7g.ttf b/web/css/fonts/sanspro/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPa7g.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..01223b86e2685f3e7ab0f8c09f889caeb7f40af7
GIT binary patch
literal 96968
zcmcG12Ygh;_WzX4X0vIKga9GAY$`o$HkD2)y-4Uijhc`cLQ_;!#D;)~9T9m5qNs=n
zsGx|bs0bERL_k1AR7Az{EXe-9XJ$49@jc(~z5m|N_nx_Pr=B@;?(}7xF&4}gFv$k@
z%F8c!c+10$8ROf54|)wARJi!WnWc=)f19zCv|fe7a-Ml<J>Es1VXWz<L4_SXV}{;2
z7j8!)l!+x3MOE*<GkOeTLyt4o>g?q5d6R~`<9dLxCv1%E+dZYMsI<j1?GD4ei!qil
z1r~vGgQ{UZ4<t;fsF{0fk7)=mcnf2pS>=@_MIVJc9LbnHf-(P96-9Ha<SF(u+#Ug3
zGm0w83V*D8kukZ9F|n|!a%RnaZ2c9CrLDy4T!y^K{cJG{Vw0FZJ=Oc!kYjp(=)$**
zIeK2$`Ns}Nj6BVDd*7*Z1>fY0H@i$s@aGdkyZ*#D+~9X;-0FQqk51~Cd12>;qwxDW
z69`j~Eq;=p;LDgF(shd%>HVJdBg*plc;?~punqK+(k26h&BfRpa!;P<mz|e02(h}n
zUUAlIrxfzWF2?Vmcl?xC0pikWXVb_Ixf3i@PL$UmZ4bzYaDP}njQe`I9`_CMQQSAm
zjkrG{pTK>S+=TmPxf%B@atrQT<yPFc%k8*7C!fQ8hunet3-Se|M6j+vI!ygof7}P)
z5^NwY&StPm+^cX2b_FiMuEfRJEx0(l6_;Soux&8!#KqYQxCDD27iXt%adrk5XW!rw
zoO8iAZ_cA|Z^2u@CYndX+={n?xhwAmb9dey=6s%ydvD$w_Ysgj!AJAacw5AaV4ln;
z!+Zn35%=5pZMZMtOJM&Xe-QU|d>w4Iaiogx<j5g^k-rH0clbe=KM-+@i+B;wgh&#I
zSF{%GVRJ+r!TnS5DYMB5ass$BQLbT9@meZgOT}xccr6vLrQ)?zyq1dBQt?_UUQ5Mm
zsdz0FueA&~Agz#1TL8-TRpd>ZIkR|YV-_rkCmXY5IpCmnV`J^vE@Sp%rEIJ*+gWRt
zX3QZlF*b$O;HqMsSw~zmSqZCVQ}J8_b22cMm4jBob~4@%Vg)GqLOjocO$jT5xd>%H
zlMTjmCF{WYz-JNsOvT&bcweo;sDv9AOF>9()(H~S1@TtGWeM&x*zDSO$#6q1y08j_
zG9CWO)g;ilfQxw$LOPIvdpg`@G)Rl9HZ?Aj9#@0()Q>-#<$+&=5YxZQO&3OP2f=lI
zgV5^x`*X}2RBGKSKQ8cv(oRoVFlD1eDp|40Q6ZZL4%NV10ZQqep}10wG9a!OsduG#
z)B2*angeYy2fQe%4J}#utUx)nLHWDzb}D>NfoTZBp9xfh*JW_;LOBxWYhW6P5Gr8n
zay6^Z3s-Z5&5-gA>@s!}dzKw$=eUD+LoF-i*YOAV<NRa6M2Z+H?h-r2AF`3mlEdT@
z`MmsC{$OisE4D4Qz2?XL+W1xZ-RJkP-zL8|{Jyrgw-2*lXMf)QqkowHK>zvv>;3om
zUvRW_jB->t<~we3tZ=M$Y;<gQ>~Xy9IN~_%_%VP51O+q;NC-#^=o!#IU}QjPKuy4=
zfHMKVI1`+1XIJNZ=S|KP&ehJ1&h5@U&bOUMoTr^X2C_g$U__uRuzg@wU|!(hz_Ec-
z0&4;n1TGG|Cva`xrobJ6`vNZnxr4d}l>}7=T^V#^&>cY!20a$EE$HQ-1HrMu9fCUr
z=Lc5>Um3h8`1atH!Rv!J2k#8t8~k4Iu@D&&64E>*F(f6VTS%Xfp&=C^^FnS2xjkfc
z$i|SpAqPW_hnxxdCDaz$C^R~>b!b{>&(Qv%BST9=t3v08-W0kbbam*)(CwjnLf;NO
z5_&rH$40hBjT#MZw6f6~je{FEZ=BdTrE#~$eH!21_<_b78b8zcrN(bH{;2WijeiQ`
zVZmX|!xF<%!n%d^2^$u+JZx3iqhVXac8Bc`I~?{)xGlU<cyxH{@U-xr;r+u$hL?s{
zh0hPaDSSov>hO)>+rz&LKOf<Uh=_1Sw2vr{m>aP$Vp+t>h({u}MC^*#7jY=!vxx5^
z&Np#1iD=?#(!NPnle{KXO;$A7A1NYRN2W#gjO-sdGO{$XDsq10O_3`iS4VD)+#b0n
z^6khYk!K=*X=-cQsA+W5_D!#By07V>W_is9HyhjR!Df#&+t%#mW(S&m-0X{HKQvEk
z-m`iC<|CWm-+X=Zr<=dn{LSVcHvhEwx6OZ#@{bCSY8lloDl;lKYEaaKs3)QJgIf%1
zQPiTM#k>|bw79*+S1o>y7SSQmQPD}!p6Kq;)zMc)-xPgE^s49$(OaTljD92f{pjP-
zUq}BOBV$5hqGFO_JTd)aM#L<LSsZhB%$k@@G0(@Gj``7IR*==qO0e8kSF5)*)S76O
zTXU_2)-r3Q^@z2_+GXvt4q2aB-&yBdI$B1wbhUK1?Amfp%N?$!u2HTs*X6FOTsOP!
zbRBk`a-DNshz*Es5*r)aKDJA2LF|y&@v+llXUAR_yCn9$*e~K@;@ZTe$7RP2h#M7G
z7Pm6)k+>~!yW;l69g6!b?z_12@s9Y2cvpP;_^kN6_`&gG<L`-I8^0-jNBrLSg9%L&
z#wJWjs7Y9musGqKgtZBq5_Tl)O*oivJmE~jFNwCqMv2jhtrOD{uStA1@rR_wNij)d
zlh!AF+p24;n_F#bEnD|*eO>GQZCIP)HutwV)3$Zn(za{bzR@nWU7L1e+TGRe<#yio
z{o9wcpV9t?_UqbjZvR62vmHV^^yx6F!~GpTN%ka{C$CR_C;39hUL6;7e9kT0dF~ST
zb?#@}U!?e@v`r~Yc_ih1Pl%_hXQ}7)RGylVIy7}z>dw@U)0}Dj(ymF{mUblFmY$kk
zmVR^khV<_<(lfF%24vio@q4BxvpVyh%qKEWW#whf&RUYSJ?qC#EjkVCw5-#HP8T|7
zcb?gKQRhvaw|Cyvd2i>pJAc{v`_8|13GLFpOIDY>E<?M_?6SPe>s@)*#$98&cI`T*
z>*TI8yUy==Q`h^tZtS|f>z=OfbUoJf>#o0a^XnGYEvj35x31m#bQ{vGqT8+AHgwz3
z?Lha)?&G?bcc0h&#_sobf42L3-GA>frpLS<H}tr@#{)e!^mwMn_dR*f#yw+uru6LF
zv!rKD&l`H)+4JFSo?V#zVD|o;Rymb9kLO0__R1ZcJ1Vz0cY1D3?p3*qa+l`bllxHa
zqq$G#?#O*5cYp4OxyN(A%srR;d!8*XI4?4<WnSyNu6e!l3iHP1mF2C-dn9jvzJGpV
z{_y-I`Rnq(DM%{FDHvZ+Q*e91eFgt0*jVsP!3zbi6}(;WQNhWAuM2)G_@kG-S7@)M
zy;}Af+UwR{+j^btozS~)@1?!B^?tvP=o8(iN1yq9*7kY3uYccGeJA$4t?x5^-|YK+
zzsCKt`VHtev)`hAcl6ud?_B?+{-ynI>;J)k76XP4xM9HS1N{f)4!nQhXM>Ull?>W2
z=$pYE2bT|iaqu6PrCe5g+2YF{x$N*|Utae8Wxoz_4v8GnYDm_QK0`(inLcFxklTi=
z8uH|jT|?d(a&pKIg|@;bg-L~(h5ZZ16<%I=b>ZEGFBk4B{IKwwp<-yup<RX!8#;aH
zEkidC-8uBFVYXo-hFv%8wPD`jQNz0qpFMo}@P~(gJ|cNU!HDrAW{tRQ#C;<k9r5eP
z#v|iKb{^SpWa-G+BbSbRXyo%F-y0P;s@<pwqZW)>I_myWkB-_r>iJQ7M!hxagHfN1
zIz8&AQGbl~8y!5l$!KeItI_V!okr)3?l*eq=y9VbjforM9@BkH|1qP-RE$|LX8o8q
z#~d1SYRuU&KaXuX)-$&E*zsepAN$DIU1JZ8y)Z6eT&HmZ#}$pM8F%xzRpVY5_tCgt
z#y1_`W_*|N{l-rjf8F>M<JXPfIsT3D?~Ok){`2wP2{98AClpMWJfUX7q6teU+%w^!
z36D;AdcxreKTfnyY(8<|#3>W2CeEF>VB&^}uTT7J;x|Rjit>soi|#KvTx=_L7f&o+
zUc9mRmEuo|e=UhC=~ptp<nfaCOa58fvNXGNcImp(lVwq5*|_$U9iJ3BDPvNfi>_gl
ziqLncVF_$6dIJ}{Z;D<lUL>(jVla#6{{%k5bALR~VDacx#q+)13!)?Fe%QYROb6z%
zuJEI2JG}c1?a2#loS4D}@$c9W@gtkS&w7vWw^*TI=!Z0Ctwb}{l0VH7MN`&_pJ0h-
zqqh^`Xb}gpmT0@TWM{n#`4P}xSbN!$wG_dCgukZVpUFQT4*$!&=XpNjZp5<qF4jf7
z%nJD9-h+IXcQ?P!`!nU||0iU;_Y)t)IObHm^YM>(SRddg@w67jtfS&D@%VoQUs+Lk
z{VSj>sXP^yphbyt{rB+x!OnX>(x{UIk_DeUkW5?}-hV1tA$jr149U%3f#m7GhW8KY
z{u|+t+(Ksm3QCqqo-YBUF`neypf~7XV@@MV^8a697W`idzHm{msBZZ{_3K|j)jg_z
z^#M5)9^`*M>mf>!pK~x%{rvxlUztnz;E#F@UEtFPq!a2xSXAd5Lg@?A8UHKzbPwsD
zzXJ3U>8AQndWv+FM&w1$u=oB9e4x=#uaR!^fpi@EfwkxTK!5SRk7t{P_jw-9Vo3k_
zp!6W=!oR{PR;lzP>B|2OOtwcDet!X9*wDvH7Z3Noswwg{-20QkMx~=kPhSG4b1g}K
z8?*s+8MEEc2-5BU6<WgorBFXyd^hOZ;e+~q&^P3-K;M>&AcFAyqHhz*MSZ&tBX3`_
zo}vZn6Ulcp3+FG<*pPR>uWmtp!|}cqKaTQEQQtvJEM%elA=ZRH<n`j)*@_2vm%_i2
zOa3*Ucd;Z9hCETdAw(jc5bp)v*Xt!Y;!W}0oQ=40SQtCU0!3%MUxx5wSek<RmU?eh
z@)Lx2+q~cMpIM%gm31iV$5@=W3Goc~9;yQi<b&Y$Lxbhsk5wL#Hk4D8h=rbwV!;R_
z3E_4F-#!;Fd;cKH@4<I&4fwSkSmWKvfA*f?_p!b}0bkDofDGQ+`wd26TY?{LL?UY^
z!vPEYOabi%ithwJgE0owC6!m?Q51kr$5~q-iXTVV$G!iAnd}&l3QPrJfkylnxEqQ#
z$a`@27V`T!{JiD;O}X34ihS<Cucqvr_k@qi7oks~8-OPKUN)ZJ>phQm3;5j_-#&+N
zk8`XN<{3aG{QZ;P?foadqpg9ad?jlQH0AiV@B=Jfau)Bmn#DVM;`z9KhW|kriEP6^
zMce38jOa#tKjZN%n<t_TlfWE2!Fzzmp-v=v_wk|L?d%KWVJI7^=pF1T=*co5j2~s8
z(2;%kRrnSlz0eio#U0?=YNUA;kie3FaX>V}{ESaW*wYbqf_hgCs^Sv&vIGLZi}evD
ztiKqAFfL~vaSijxWY&Ry!kY0iHkOyN4Hy?4$S1G?yqFDFv<PV_VoQP1Kp`;92lgpO
zh)%L}UgrG@elvLy@;kx%F)v11h!%N&fZG_*)4&PfQy<`0u#?`G5pO8`j)gmp_!#01
zP_zhXDq=Z6FkpxKR&alsJ&N|qqu!(NmkobQ@GceZJ@D5>(IUtoM#X?0Ko<OsLK>sk
zqZs#k6mb<J{bP~063{8gPXf#pYy{86c;w5-V=?3$`DFh9)_T80Jt$-k<C~AsFZd}`
zekUW`<1mM^Om>Wwz`mHLf={2Ya_)g_rm_g$6zOV%k@p?muh<UOn?37&2KHllHoJ@u
zK%AZ6{y6I2an=~H0ntDNFc32THfVQ%>;nLcANBqY>Qd(8%*~HMKD3(xW&Z`_`3vOz
z3-6C?sJDX;vMK9ko6EY1Gi;8uu@Z5fB}*qOku6v%XoaFJAP1SS_hV(Kqx8PQn5oVt
zOTi}4Gs3x%!b5y+gKVPgN65RjOTLJ@!IMH`*8!B^7RfAAe22C|2=uBy>Qc7%6m(}d
zk?#FQEcgD3dh8O5P=9Y>{?f&A#APf3uzXZr!+HSifK+472PKd_!S_sV+KE5#4Y&YU
z-gAgQmj8h9&2y{@I;;wGF`3yzY#1;K-^DM59}fn73V0o3)uXu`<F4;x6!d-2a_?5y
zuLIr$4gjwJXMu0wuO;XZV20?U#z!$n2HnFj8qL@M#?a1Y&?U^fANWL@S%{&SyMn%C
z^vrqz6Y=~5s1qmvdIOl_g6!!qExi98X7axicm;SLpgFScKt9ZO0}Em93JivM0f2cg
z?~TSx&yNBlfLXwm0KF&N1>6oi28;uS0s{fW?@a;F!}L}HPXObA(LhJU;{x3eAb%<i
zr(k}Ku?tA!g^ywW3HF%%s-?savZH+XDDeSvf!^i79)O-57g2I=_~ku|_n~<9@#7qx
z8D`)-KoSrEIcfroNBJ|1a5DyOtKTBrF_TC?$YMKugWF-AiMW0b$E;CaLI0sFp}eSO
z2GWNVAr3FJ5yvcvAM;0?jiI;g*@Fl7W`nbb_I9z}eaPH%VD@kq%NkfXz{T8!{R(M(
zo_uo5p=ugrXrQ4eW%VAjIf_zlDJJ5T4K#!`VqqmE6;*7FzL(CZtY9nkeNuH%30to3
z<x?jYvBl<ISyIjxVSconEl~IR<|~xV6*Fd4RI?g=uL5B+^c^v))Z$JvOdPqTJEe$I
zS>TQm03QNaAVY5OOp@vcO7ojGn8E_K+xOT@{dUP}akVHG14SDDk-x#W@+|IRXW2o_
zawNgM4pCsVB2>OEHi$>XV`8ItTs$G36r03TVzYQ!Y!T0htq2)2f8;}K6MM7?cL!`U
z@Vyw#4~n*;ooFwMWQi=3ljT%7T~^3SdAXb^XUREop1e|Cg;|JY@<F*4KAR!VM9f)y
z$A6F$Ww9)kljIaRO_s|UvPxFV8aZ3el~>65@;13tu9E*yGC(nMzmqCv&TOJB6LM+Y
z8-z(NBxEdvIWSrv&=<ozA&bR4p=7c65>Xyv0iAQ=s*`dil0_!$h{qDMa&GXIW{NF@
z#F0aC%^-2)a)a2co;l`|X@(l}pJ*A@cR?H?=@D?d6^09#HVjd2(eAA0meN9H#=+BF
zCIpp3q~mUSC#K@=E2I7_<dP+X(xFnS=Q0j1w~6iIS@E2BUhKdu&<o;4u}i!x_K26n
zZp0{cenpPR#VAV&`l&(n{DUK+ji9+-!J@@$wQs;JPEw<0fla!IgOm$D)(`Er=9mNC
zskmrki!dYUQu(GFP|36f7-|!7tv)9j;hCd^Dep0?CCVor(%A}S7p&Zd;Z1+TA95S^
zcce`D>`bm3`1~8PhFp_ew}8JGTv13-OFYHmibl%fVMnR6AQx{ThX=T1+v{XdgrF__
z9e<ba<&W~kd<GxP3wUcDiN3^H_BMN!J;GM86_|Zrz-HqcR}3vSkmX^X7xIiYtHAs<
znK0iii<JrU;>LtobYsE{yD?!7UYpQY_L(q)Z|pF;Z%ml~HzuqNfJx$uhB|`MLJdM}
z61A*Y(PGpnN&#l#<=k3#w<&i^j60$}cSQ}{jZp3|C$7RHO71Wp4%xwq0C^kfc1iQ+
zI)1ENK>Xc}d!oK@F|%JU{^rVE3*(L`xig_)ejTBJ11eTU>%Ucb#JUFkmT3LAw<y22
znzuyhEjU1{CF)X&-U-D~W!w?1A4)&<c7S<HREH9UyxSp9PRM;E<fkPhCJwcs6>39A
z=o!=+$ihx`M%A4WSPik0pRAK6wj6n!f>s6ihp~(#_>Lm&CO06yRai3u9%226fbJxl
zNmy5c(#5(GAt$0vCO}G?p#}tDwFtR?4)<zho`e-8<Z?Ui4P9<lZb*j8vG#<*d;<4k
ztVto4`2Ipym&+=ohje96#6Y@|>Nx2JtV)5I>Nwd%VAaMlwEndnX^C2`uUrU~8_sT0
zE<$nViua^1D1005ir#^zR*Pt@L7`FT+(>i@dQT~Qo{95fH|20?Lz`|LPewmpr>igQ
zNUP{@qW;Yn=xTY5yiQ)PzC`z61<xwET0R8d{aFw6QHHWH_+m_AbJ$hvYIZYQ!j`gS
z><)G(bol*jHCuxo%|`I$Wwr;k{|)vgw8lH^UG^Tn!k@9P*+1DI>;ezwu{@5q;ca;u
z&*y!4Ki;1Y=VSReKAx9gW`7c&#w+>dyqeF4R=J(8;CJ!+`2Cpge~7Q)|KMx+!~7Y(
zgTKxX@V8Aa)9U3?Fh99KUW+1IC>Nt7Z<lwoKzXlR32nLt>trG!r#+$3sQua#`X~S`
z-#*|wttAS>DvQA^9IF+EuqJ4&kA~~<tPIjT85%4Bbz(N8c`oWp3Y(8B4Z7_Hw7hRb
zxpu({quW?Fb~_}wC%c#3$8y+8_8?+-2v={mmOX}e9%oNsHN(?v3rc%CdmcLR1-2Vp
zeGUD9BDN1#DLVk|S;js<zj8AB9M>%L+P^}~G}3VewCj1cklT0=yP1dZFt(giPw;NF
zO6h(c!!5RwySR(3;_<vSdyuzBpYUOx&O5Wmv0^EYJq<10hdsv!@?q=+K9Y~Z%APTN
z4BN{mqF4GlpTeiIH~DlvgT2M8colnx*YGRZyZkDCEj!Gw=L^{<{3d=YJAsu<%h>09
zIo5-n=67S1<14<BuVmj~ZPRLYmapeq*mr1$ZAF=H=g%`Q);8_s5^b~nJQ!s_a*Z~Q
zILxO7tqEEgbXU-_pj(0#23;M5b$CJLL6d^U2MrGz7*r6{Jt!k6IVdT}3W^MB6yyxD
z1zrgJCGcF}nZQ$l#{&-s9t_+cxHoV&R#a@ox{61!x?&a9SS-g%i$z#(F*mRZD=#Jn
zjtm?U*cU4?x???t2dgrYur?zKD>Oo|PD41)JAZb5=lsg~ne&+Qkn>&VKIf~>UC!s6
zTbxfgA91d6u5{kzT!wWX*I~8CY-g2onzPh7-Z|1a#M$3j;Oyz_>`ZeeJ6k*BoYBrm
zXCtT6X$v?X@FP}<d=_vd;Ddnu0eb^>2kZ#gij^ae2CNNO6>v|$@_@wwivq3=m>W<X
zP#!QTU}C`NfS~~c19}JK1au9^2yh3q#i|nvYfr+k0>vJ{9KSh!bewgZavXDf;Mnij
z>)7qs;n?cf<apGv*0IWQk7K!Gv15^Af#V8Cjbnymilf*u)-l{M*wNRK=jiUpa(Eo=
z9Z3$CBgzrs2yr+Z!vDPg&;DoqPx&A7|G<C0|EvBl_;2-p!hfCrYXAHESNJdSzsdhP
ztdW`RU*$i|ztn%c|49EK{{8(6{CoO$_D}Oq_HXSU=O67K>EFoT;m_>9*uS%%wx6^g
zwjZ?bx9_#@w(qcSwQsUNYF}$#WxvP1+`ibp$iBdSg}uf;!#>4cY#(bMZXay#YtOTH
zw`bWsSe=t(ciE%tVfG-q-Ol`e^ZU{7tlw$BlYU41KJa@RD|q(!z2LXqZ?oS<zjc1A
zv94!@-x9w?epma=_M721$#0_HNWUR|{rw93dir(tOY=+iYwZ{37ws46*T~P|Cv4|!
zKij^ueP#R1cFcCj_O5N8?N!?@+jF)pwkK?l*w)xq+U~L~v)y7_XuH}r*H&$thE+tP
zZ9{DRZ3VWTw$8RRTe7XSEzTBgi?lVeIc+w1LH;7o$ushlJT4E*gL1#zD|geEhb2PG
z^o5+0W@(}{OC<ElSbV3(qo*GaZE^)mg%-IQx`^~hHuT8N=$GFLo!VDv)k5eIttob3
z<<tw%r*ohk4#M3B&<nRgFMQ1&fL^%3)<7dPV_TFKcwK3MH=qUDvVExkUD$`H`Tf}!
zsPn_w&#KOQQRl~VPIaF9LGMoD{;2uYJP@^gA&*22UyQYmOQ3bzqdq^3*6w=L<y_R{
z9lQ`V`E9HQ#7a!)R=VG;?r1l_JXhU|aZi(z)V*5W$xWIhH);5$(!EsOwabYxdz8IL
z*?T0}dnD}nPBQat6btSM6L*A(JH6eeT)N4Ix#33QUWGTBQoD|xsU1jkigHD1bj#W5
zUZd{i>aO2X>f9>rZj~0dq_nsxHr7$4v7^d&N0sl6^p$}<+KsqV{yHiiB&)Z{$|hO4
zNmg!>&0ETSvZRnZAT){l%_?=E%8o+npxky)zB?$l?I=8c8=3iy<Pvw{$c>64H!6<Y
zh_{lpMN5f7Z!62yQz=}NE&88^RvSvZB75zc_}EsZp{<I&t>P0xQ})E0wu(3Kq0HJB
z@urR9N*m?3jmmc$mGU;qeH#^88^y&ol6<vRE?X;?t(8qH#fetn#8kWoRd?cVE9JYD
zEP**m#gnAoCQ%IhAf<(mMoxujD=F**dJ7wplhNcCcjN$f<N$Z#*=XYn?qQ}J#LE@x
zPEsAO!jG3_FvqDJ#3>%csg%U2oW-fM$5Fg+L;Q%76niY}C3EQ#;9X%yPr3w%QV9^H
z5+F(?K$QHtR9r44&n}e)mx{%uVnLY74V8mSr3C(zS^K42v{d|Qsr<H-mCA-B-csRM
z%9o{lS(1ENN-krRuNZRAqZO~B=`C-LyJXR536uN~rPLFp)DxxD6V>i?E~8B@iE4K`
zm-I|=Myvcqt29Qd6h%v_i3msCDVNczu0<<;z@M_wekqqNRC-&e5L&2Qwvh9bJ;_Lv
zoUHCM)t%%hO1X)Wmn$=sYLwJ2(XV68lzlT*+Rc=GGfDPml=+m3<&+BZl%z0Eskf)p
z+el>-srVC#aiAiG-Wn*i(}|WCN-`a((ikb{DDy0JuTXdWmQoj~;)zsgiG**mp|mtn
zIc}oT(nQH$6S+j$QyDi=AxEgU5h||{%1wlF6Jg#`z9Uqa;RsE#a8uVn@g`jP2v@$t
zm5*@cwz0C=smw|bvu!Gk+f>fCsnl)5Tge(>Jd9G@NLHw)GR2ifG*V`sXBtXeB75zc
zc-ly%p^=KWk>U_SQ})D_Mk+@5P-g9mxDu+k5~}=$s&s~`T!bq3p(?acmBLUJSBP>M
zqFjb3n_$I>V8aPegc_{E2v)v>m8&2XPmp>Wq}~Rqv^bGd!ERA*oa(JpamA_pI#mvw
zO1hjXMNZ?3a^O_y3Q$@nK=}<&Zym~|L-}>6a2zT|hf1|W#pp0DDI9;;OJ+B`pMkW{
zljc29;yqE~JyGI4QSxh7aoJUx?J5m+6^mWPf-sdEDgnDn3H&Lu_Ddz;r#R!M{Q4=s
ze#)gynQg{QzHBN+o03SWd`abIpo(RndfN|oiGEuJ!qb#ePtTNkqLg}~+MUj&KyI`<
zolAPw?sP7N%AZha6e>kRQtd-H>Q1>7s+5G{2mC9W5_P9ss+j}KI(XP6e%PJEkSg@~
z)reVZtbcEdQU3N=yPm8@KT_Z?75&9@v<WjYztRcgU|le0(hdE?eDpwjp@-N9tv=e<
zG63Ub)DOK3twri}4?|yZ1bT|2&>y89_&D?;Uq_Ge3Csx!jLDUt?dQksXu&yn0C%Dd
z7ldAR2oL3rcw-)hbs)>oM{I&tT~o9XOW7a1IeKGJXe&ljOOdxkPrVHNKNovL_08jX
z0#D>gX#cfV{q%Nd19rfeLPze#=!1v-!c)<APv;pt6Qk^%cxT=PqZbFzcYTX@WBW12
z^&9WOd-80agBD{Rdie#s7k0?>F}?i(Xon7BCox`l86Sey<WTfPCt(Z#yJyfFeGk3g
zci59`GRE4+m~nv#s-0S_#s|vK!`_7U>SXGvVys{~FXt5)eXK-pl|~I_q6IsP&*pR3
zXM8T7$FJa5VkF@zel@>_FW}em>-hC(Js)K6qbEBBJ98HC8`0Xmncu>1MVt3Fw0W2E
zWf*rrzZPQ;cVhJ6ZhjBHSB*ieWMA_K*z<f9^>JxDf}PSM66{O#d)J|j{0N(dJrC2-
zzAxt+_@fvpevEI#PK77<lYA3@if`sm^DP*^*os|0+xfHnIkuWVk2W=S|6okA5`E=e
z818wA@8&P_J^U5U+2!abRP$HaO#T}B&#$BZ{3hSW-$E}M;~&^5^e%soALQ@z5BP`t
z5c`#X#1He2`4N7UALF0!<JkLk5+evTY&OPR=kU+?=lm4^f}iGJ@~_Y@_?n;L-|(~i
zTa4s>&(HB6FnjV7|CxQt|H*&hzw+Ps@BBQQ%m3gPI97iNjy}sgb|prD<_jUDun9k5
z7yiN_0)$fpiXah;(T=A?hzJ#pL}L*q!bOB=A|gdo(M&WKQKE&27BRxY%9_uGOT>ye
z%v;<n5=0{Hal#I#HZ;G&u0gM8foRXJ6&)~w-%+@+&%+~9MVd$#86s0;iB6)k=pwp`
zZlb&BA$p2z8sisvBA=ZR1?)M|OY|0fL|@U5eIfdb0b(G=P|k`$Vz9VO3=xIcH8M;L
z7bC<-F-nXUW5if7PK*~5#6(eqc_hpfh%zxrOcqnbR549V7v-Wt%n+5LN?b0g#Y|Bn
zW{KHij+iUvi7UjFV!pTvGf>xv1>#z9ow!~s6gP-P;zn_kxEcHHZWW8gZDNU7Dwc`c
z#d2|nSRwAjzLmShJ>p(*pSWMF6c311;z6-mJS5hLe~7i>VX;oE7mu(27LM`7CK!uq
z%9^p}7)fk_*@{cdVX?+66l3-lMw)CGi;KgEoRj&nt=RRp1$*E2uvgHBe35OyIAtTY
znLS-Q=k+prlsPn$qUPDUWBh77#u3BV1dRKgX2I+_wi~k?H~ndz1#>KFuH_Z+s(4N8
zWw(mgF~+-CydmBc`_RL+i?_snaX`E+-VyJL_ryW*zW6|VC=Q8_#9{F<cCsB6$HXV%
zxHutBVn^F&;&X9Id?8MYFU42lYjH+=BhHF%#dqR+aZdaoeiT26pT$4LFXC76oA_Ov
z7k`Kg!Yi@GQ3^@B82zLjJ>pf;Upi!fbjm;(B!gv$48`uC#xhKX%Lv&-M#`qLnQShj
zWD6NBW27ZpN|%h4aWY;e$V8dMuE$8VKl<c%$yRKkY%SZ!wz8dUFFVL&*-^S>iuA}-
znI_X^2G%v~z|Nyi%z;tQpRiKlXW3bHkzHjs*<JRKJ!Q7ck-0KY=F0-vOZJvD+W0N|
zj%}BHnM=(Atw3-84)p(*vLdz~BZc>44DoJu55^B4#w^N%G@2;;$^LSH94H6L!SXUW
zL>9`S*zGi2j*uheC^=e=kz?gJIUYL#C$eWTZ&WNx(AF+P>p2%A1&7!P%vDZ73t^g^
z&OXA}?P2yYJIX#`N3g!+I9l%&n2)TKRcNnPV<xi(bD6U-n>iQrnO9&&b3W!YX>@pj
zyjG16FO)aPMe;^@6IxBT$Xn%Nj2SP%Ovo~fw=S1=$QANVd6&Ff-h+|X`{ey{r5a6s
zP+~k8qp<&wYq48#9rh|dLOT`ZW7w(qIQA(%iCv0MVUOa|*rE6g_9t$`?!;%YH}QGw
zOx%fmi7(1s@+FL}ye#*~SLCbmHH@{qF5i%E%6;-JjJzC>Z_9V&yYfAZ!@Ms)kRQrJ
zY!`dUKf9u+q`Gp3J-fKNY<8LdtQk|?DY<z>Q}VOjhI$N5Gc?1{EJL#m%{4S%(;VYJ
z$N0}N{&O<?vnwZ8&M2E6U}$n_po-a@=1z5|kZ*TNfeOu?lCONbJ!z>rRJRGuoe`K@
zGPSy7R>h?9vboOO(#o2ml9I9+HTJxcB4o+9HfeL4w7K)~y1KHc#-6WT<r@a%D+W08
zYlAU)FnP=|;pCWba!ej`O&)Vis&Y*pb2I$&O&$&P<uN78m&cU+6vN3B6&muK7TBv^
zo_aM%j622SvG=N%H;-F!&7GEs5EXaaDV<USd)I}a^WZUQ@?_h37Z+9A`_xP=FD>)$
zqjOGfQ04{NZLZ00Znl3Poqk<1o_t@bk&N8Hz76AWr=*&kq#8b?rrG-!mCULsv-ht}
zF<j-?`Xf&|s#-55%2dPRRKwad!`d{DeV__Tr?eo;KCoVpY3Vw&G?U3RlaRD5|3Nx~
z!GosEnlZVkdR9ew(JU3WJ0(vESxSDcDb8FIXP${O&txOdgqmkU%~NT0r=%J8=^np9
zQ!1;Cu;rN?<e5<OjH`STsu5+>EX`EZFeC0M`RN(<A(~-BYI6r$6JNTCKi$NTZemE!
zw-+j3frS^BNV<yL?MX50%`l0`Fj?!AZy#DOrVJIbJ4L^SHxpBai77(|my(fTAExDJ
zn5j9#RL$`lRy}pb<lteK;I$FWJXKQQeWotRyiSJZ=n~8~yw1<?8&=2De3Sfqlb(E&
zo_xdG0=NIL`huG2A)eYtOs+1PU1lGlnKPn}IRPU|r<PTh&73;ZK1#U>998#HCnU=k
zv`J8bVLl{pv<lBTx<SQE$?xRjsq*1Y$x^imVq%zzT2W-URa9TmnuxNEG-fMKK|G91
zXDd$OS#b)~a4OrUpiQOCG5&Lm{~Y5#C)2;kC?P|AO30n=lRPLL6&e(+DW@zWC|aeY
z<hwHiOX^tUEUC@Ay|kYExJ}yJCT;EldzpS+W^!JpHEda}f6eV2lerudK#mC@$ET5e
zRn=rJ*JLg?)4$AQ&QM?GQabrE2Mudjm|{w#AU$w$z06E*kQk`8RQu$5newD)4V$4f
zY~YkSpE~Uxla@|KLOeOPDWqYi>KZat=bYR^><wFUO@4E8{HN9zTu*^7)ksEO;IxKu
zL3f&*q#8b?rUy-*TwPW+qr7NF>C_T?xz--#D*3i@WK74KYAQ^ve-nSI;diRxbDH6E
zTB?193QBt~=wzQ!%MnPl$!V?HHK|JL6gZ=Z&i1ITteR5hU#W8*TzLs~VCssmmErsH
z_*8P9$)8piDfwDmfU0yO1tz`eseYApY9i0%CeKJuo^h3La^(~5{2Zftb9~%R$xqL;
zV+kL=RXWG?Ses+KHT+69F{GOq(hKY}m9M~=7Z+8!7B)|c@tR>0k&$YzsTXpF3K1$-
z<rpg0#E@ZP$S`^6q<9Q>nf6&)ux6PmHA}1BSxWWJx&*I{KGL5r$e{V0=noa1eah6x
zaek)XtU8|No8;%4bmg0L<(qUBAX}ye8tSWonP`td3D40=c#dY%oH{lI%&Aqv^RyD4
zSND=iAthg{(3JcFle7XOXpqM%RCvxS8q{4VVIw%5ln)4sX0JyJJ}Qu5bGoXCZcn-r
zL{Md)ovF1Zo|XUX9Bq$hCGw!U7(C{i>`7Op>h^Tfg6YZD%=T!3fqSj|Jz8+^te6d|
zv_7bj68&Lzd$g2*nsoWZB17lLlVQ@4VbambgqNWU)nmTko(z+oPO7*Np5cT3lH=KD
zZ_?4pmkvWS4SzCC{xVH^G7bMSefcyr!_Z8V&P<ceOq0$`lfF!ou1v$1Op~rmlb%eI
z9{v4sd$LUYStkB06MvS8FUy3hzmjlo!p}0{XPNM`44<-0Jo@tv_a?ucOny80%2UOc
zlBbnB%Gbna<jSMJ)^1O>PFIR<`lAVL($^_VPMR>u5124j-7zmTp+=c%0@SA<EjzhL
z79|%2m=8emTxIXc$nu#w<-v4CS#@PHtp|3XucQq%bF_`KW(rilvJ040Ijh>3rp`9*
zW=@@}tei8^tDB*XWm6|lsnHH+Of>;gUGwDYmN#gQbJEnwv#QHVi)KzyuiPoBP|>DR
zg#)UX=7BQO@AcQkgFc9UPE&<|XH__GubA#hO;Lpa>U-AVrRwjpCo^A%mzl4_$@eJc
zdh$Jrsi3M5Ky`Xj^mpBp;&Iz&r4*!OWNVV6nKpA))l9`SWgw=J!7z=CnrYfZOjGWN
zY08~unlfspDTj(_%2ZW8Yo>NtF?EK|Sa$iWqH<*$QdLxq&vMzM8ub{e9;+4im3LLH
zGiMe1k_dxNVsTv(i))ieCY?mM(@BIoUlL*TB@qry5@9k)#A{y?$)!nR@yrHEES}jg
ziSVwHNXy$57nOmMNCv}2GHNbr6D3i(qa-SKI*H1tlc*f3B$BCK66mph66iUws;qiy
zWvLFTq_U!-NEvm?Xu-TnnKDqy$Y4@NMx8QkqLe9jlrrT`r%V}j%9KNuGBVXm89mld
z89n<_MrNl@85!+Gs<iFJnv`f#s)?2``y~A|S(7Q6Ox0wXCet<1l4P&YPct;pVr;L{
zPt}@eNwjNOv(M6&vo)Eci56@7JpFWqB2-=7o?N5zbmP?R(Ty-rql@$1LCRfvC+%0|
zvB;J`tGZGJkkZK$TvAzHIimt9s-~!Vo~?Xpb&*yD*%|h#vYD_okDY9#l`|&m2i;@w
zxb@HwsIJ~_{SC&mQ6qZT#pBL4>L<sj72Qejcv8}xGs~f@l4<(|Nkq+*sns}zXilXv
z%v7<Z=r1}PYbBGSzvOt<p{3|AHlEd&1JoUWpp<A#2~wI?n`Z`6O*G~pB}L}J#G|+g
z|5|ya=r0mdsdJN(k{VDpvj)9_nzB;u1K*ya>gvilv#QLqCqO-yR?bml3TQ;AuM-*%
zI_>GY`{2n$95vNbizXYN>ALTS#)ff+zMpzuYQixbOV<Nd2v4UqBSnXwk)oe7Q?$a(
z(5(q5aGe*oZav}IeC2fsxjlLy4Agv0^#Bqi%Y2P7kfbHee2w*p3*y&b<y5y@efvO@
zOO#7A9F0v%t&PXncxr7@jZJE;O`5SutF=itHtDrC8OA1~)+W=~WY*eb8JnzHn@+~2
zQ>{(5vB|Er$uTxLwKloNCb!n6z}OV{Y*I{4Q)+XXqT3Xyx)j{0dhiBRb2C+s%HUaZ
z(|lI(tlKuJW+2ggR#AAmZIh}$qj=VBnN-uZN%bgcfxY2_r<M;M!v{|-A3P=v9$liT
z9#euItt(PJS^`p2O`NG(x1^?;I8%*(-P(XanLOww1fESE(oAWm)t0s%`gN!3F+NZ&
zgQ*#Ye;FysMXFnu>Q;lR!6b3UoLo}xjl13($XmTPsrAfh^;|)k>b=RW_Xg!^-k?&r
zQ_LG>Zt%tzC%vhQlb$-&^8?wc7g}n)H;{1iCZk?F%G}_MFCKbR7Y{x8;!)-XethxJ
zo4R-?ZALD1XB*8nttpM%cv3y8>^v!^xn_o+J#M#Y2D(*Q<5_D|w>!r<v#O}1OzCN*
z>fBmf3i1mIXw`rXz`FdHGsc{NC#=oKv&2jt&K+g6%Z<hCr8{E+dn7SKqycx>m!lwh
zfyQYF+AkEZA#MRp&=6mOCTd9Xo1`H+fVR@W+$f`6gIKM=L<wkH4N(EwPD9du(DoW4
z7nJ-1VgzWihR6Y>eVG7uaxv`oU|8Y6unU)Aodd&42PX1BX^$u%qd~iAV0W<ION#aQ
zIAwrg#!*4^0qv<FZU)T;MgsyEqan&b$7*1wKf}rh1u+Q}`$Y+ocs4;pOawKM17I!!
zh{u$kD>cMq(D@o-8t7FTIE{s2PFg_{zgHV@(1$ccZ_qUw;v3L^Xo#;s*J_B<pbu+^
zuR+&oh;q>N8lnpH5e-Rv-k>3_1ASCOyaM`|h8PCAQ9~wzKCYq4=n0qsu@Ll04LK5Y
zlZN;L^eGML0^JNe4fnT!ZqbkfL7&l(twFKZkANNi40Fp0g802%LsB_Bt05MHKBpmG
z1$|ya3<uo-ynr&2pf75OzM#8+JwOIP`6P4$$UlM7^O^zn4ATiz><xg@@TNgA=ssXS
zumCt<Kzw-Hzzh10!Goah0v`Ztfe$rgGtff@!~^WF#>}a9cLbDh7&vM``>Bs<kZ53r
zRe`SpJq~<^jSn`^&oy`;=qU{z4NBz!@HkMC703>64@$BEaH?BpfU__YAHLP#LqNaN
z;FPEDHL#C^VfQ)1-Vw%YK>w*Bn}hzM!EXTl75E)))`Onc;E#d+p~0yPE@*J#6Y&n<
zuK_TsymkSFK_LKCXi%NUIwcJ!DDtm(&=1tl0O{d&4Xk)#+}{9ojXN~34vKLKmyiHZ
zSOC^WG2){_5@?VHR!uP;Y>)^VqJfoEjE5Su0&S#0`hzz%Xa^dm!Ad~G4N^d{vztJ>
zym=D?4``$YR#P$T$<as!g$xm}1CC+sl?L%7N`v$eZ(-086mp<s0p-PG401p%4Xo#3
zShb~*3+mFq9wEkK4e~%CLrRY3fD#`G`2g__AU(&4FN8h-@eaW18^(z*gaH8RJOQgB
z7;j^68E9J#tdn4z_(doLAg@Yh7lU>%Af6{{V2udllurVc5oB7)^&(K>FJUx5JS9kg
z_(*skNYlW&2FBA3#(-vMV08oInFeD)vkWGHcGAEqGKM`-8WTZDb^)xzU|7wjQ3Bdc
z11mBZR<>zSdG*l14p+u|8We+OYhd*T<5XsZ$w00K)^srJ!qS)yO638t)u06im7u*e
zu!ojmC#gmSD3udoCeYVFfc7(Z5467qeK%D3Q5nty25OLg#|k`+>p=%=(6@zCxe~4b
zhG>wkSLIp=N@X-ugY5zxX0Qx&xCV9r>T;#BB|eYTU@w7^91w_~RK@`5a_m6UxEqwp
z3{WQvQk^6aKgVm3uE$9%8ux)t)WE7p#;I%w_X5Qlq~mddipE2rr5f~2;AI96f=<%F
zDIB`YsNB{8Q#45TV|Sbe@oJg|eGhOlj>bmNat-=6a4Ivx;{ervfW8%+%9!v3P^CfN
z4Su=7lc3car0-REQ<?7sNG|}S@A)i)-Jn$e0jxn{SpTT;D(GAdtWMH$Fb{5igZT=B
zeV|urknZR64fcaxrJ=qJSHnzr3s_*#5_G8n2c>ca#97cgG^lOGS8Gsv0jE@H+z3kf
z1n3*cHyMx{$`9m7xIigBfc9*1N)sUnIG};mYYclqHApt8ya8$-(YH#0((s-JeUte?
z1B#Q%8(_ylKQMR-^g|7H0`!o<W>As?0H^*ie%Rn?P?7@xJ2x4pvL|c-$Q^(+y$q``
zH7rodGk_hXjDKNJ0Q!{%)}S$*+@*0FD3vR~NDinh3E99e8d&+p_^$>egH)CPRueP+
zhd~T@+DwDmN}{<2zaKP8gW5r&g$CBRGCDDWKs*z<8d#mo1oA^5o(Xyea2gL2Lx4h<
z!9OungL^@TX%Nq-{U=7k4R|C*0b^kXkEk6<eG%e|Ks{AJ7O1UHZF7#gKy7gX{|*%O
zk$}?&8MW65{CiN;M==9t@JmzzH86uWVis^E09h4R0gz|m02TlX0Vi;iK`7|Wz;d85
zumZRfhz9O4hy%S>gC7T7slmSmMR^c#8W0l?YEW4T$iE=ILI%WI4V+-c#Cn59pqmUJ
z>teIP+n|s$1>)^C1LEO!gJYo2YRJBz&jUMv0l*8ui)e561AWPW()=m_9Uvhmg5r1w
zp!6KlkW@Y&X~?mlRDOUQ4f?T$91lwA03?;|Q4Ki;l+r|i><fyI@EJgH5Z(o-><JVn
zxg#J9$qXifa)V+}VE`GS{)56KP@4hdL;4v&Ca^A41NB1s8$doJ%3h%gG{B%56mp;d
zxsibevq6Il=7K^#6s`b;d??HZ4Fke~tAS>K3s?Ze1FZna6!oJNmV&kc+5)!&?G5e#
zO$Jf`$em0xxCgWo&<(g3$T3(2nhWFus{xdy0+n}>!9PGLECR)|!Jq@^4g*TpE`ubD
zMI>sFK8Qj11o0YZFAc2vWih>hKCpiS6mmuoZ-F8W1d^wi!5ZQ{&><S)eNe~>L3{u@
z0vHK1WGx1ALm>HzS*d~5#ViJSBapntJg*@>VK}-=1A8X0p-qFkKvC`l?4)3pzXr9D
zEtD^T#uO}+FM-;)7Rr}EV+>ZX2DN#u5Dgk{utGJc{cA;Pu**T4YEawIvNW)7msu?}
zcu!E523FBCi_!s5ThB_+pz#I^JSR~5&Z0N~8hfzXX;Ayl@@QbqFtbuMsGVd%P6#-e
zfm!Jq)NZmeG_cZ`S(zHt4zjW|*j=EID+0BNtj-!(hs>-l8q_|rx@%xfGP5Y30JV=S
z${T=l515s$L2V@q@=3s&W@bTl2-I$}@-%4d#LCy8c92z|LE|VE@dcnZkp&qe(3pw^
zStC&U$fEKFXsp7bG6wiU(BT?1u3$l~2-HroAYTNw8+4QgwNosT1AxXIEGm0|qn=n)
z-T;k3Sj1m|6Ay`}0F6gj6ErySaH0l{Jy=B=I2D0e#TwYd&8!j)>?L6q@dBVR32V9r
zUkzHWf&DPds?gw+cjznvI|y2-!PkN=(4cVv>sk%I3-me-8Yi%>*T89_%px8EG)`dM
zph4{|Yl#Mp7g)qEfbRueu0i7g7V!(9_LoIG0%&Z&BEA6B7PE*K0QE~Ok|BUU47y5#
z#$~M48Z_o-ksJWjU$?020oD_g@(fVl-J*N~EE|-<0(dCsIt`q-!L0Qf)Tg%|(ZC9L
zW^K@*{=N062KHVt>oE=L>suQ&up^6Ek84oB-+Dp=`?Q$#qz3i>txX!(y~V7jG-y1)
z+N{AyW}nueu>os~26lQe>lqCiC$P3^u)d(%G-$lQ+OB~!SD5vz2K9Zd=QMCW2(zBo
zpnkBmLj&jNFl(m<^@*()G}u&7st*A5kF8xAjAW2x0^nJoyEPceBgq6n{bp;A1|!*g
zMT7d#7S#a&yPlZ!ng;cyEs`4mr=u|Ibq(q-T5o9Jv;$_nsX={5i|PzOW0}@l8q^oD
zNLBzE*R)9H0P2@mBxeAPZ(8qYQ2)ewSA)hot@kweHJ}GIXzbH^UxP0I{Xm1pL9Gup
z__d&iG-yoJ`bdLc2YOh8#yhQ#H8|z*hz5;)T1PcF<?)yXje}aBXz*J=k89AFsC7bv
z-wJwCgT_a#Pc`^r(9bkz4AJ^rgOePc(x5R#>kAE>yTYu~8Z@40eW}4I&0lHI_@ec-
z2B$Qi(ZFstW__c99cs)vt3hLt*0&m*()^tUjZ0eJYj8^QISoei2MtcL^P>ihL0Ug)
z@Yg|q)}Zl7i{1g8WQ3jp_A96XhrGD_H6&!v6#xXHy#o1jHPWDQZ&zatWe$TGpgx8R
z_1P5x^GMJp8e$x1q=u*lZ3Z-ln*pFv8q~LOMFTOg9|US?P+!O80%Bo512j%UOaM*N
z5CxzeH6-%oa%)f<*5v_Gk^Www=^C;RXeXdE!Yl;ssv%~AcGD1ZK)VAy;HC&PPeWV)
zrLX|%^SF9zh}obNE<k-CSCxji74&iqaR8M3Tn#r%K~ZN2;vgvMiE9bW_kpg^5Rf<5
zLmJ{+(6t%@a^YGBtcQEZg=>R`_yP1W4e=u=>N!C`?p&zD1o1oQQ^01JAtSCWz%wvI
zCS2P!#CgzX0m!C+T)1{>h(9nr7Oo+|<JhJe;(Ab&5kV{hMHvyq4WK9^g6sgAtU+z=
z*ufey1oSch<xFk**g{}5%y!T*z<8KLL2uTOO+c3ccfcNH8~cTZgbs~Ec@tzCQ1~ZM
zJ3J2l39=(-V-0Hi$AxJ~<RcE@5`-5NvPqCppa!xX%$5fAG2-YMpngRhWPl(OKqqQQ
z<Ug(yD1$xx#Y+vj2Nd#8kh?%3^YJYa?_AJC4fzr%!Y0Vwm}Xq9Au~WxZi!FBzBA}n
zU>nSk-^3jN%1L$yMYxFwL-quHRRg=|SmNs%G7A*-gdht*_i4xpn8s`bfJfBtNt&iX
zeV$e*8-mOOMOhK3pVaCUfHDyC8B0c<laUAN^Cu&H$z5O`jcGT?7lFof9xK$KaU6)E
zf`|v@fIyf?%kSXT?>6{NK(hzsL6C1^*kKwl9riaen-gxapBaA^iP?#cm<{cTp2kFW
z1-lwMkr!Z(@g3Mdya~H}aeg=U<9>}@x4-f~usb#ryI4nJH);uXm|lq;r3<lxbUF5l
z-i!UA4`OHNTI>nkgq@qu;=IcjamwXB?5#W|KE*!AQ0#7W$yV5@*dF^6)3E<AAG-yM
zuorIw_RsB#NsP&j=@T;`W^l}qn2|AKVphhij(OgamcJEhHML@`M5~?E#p+`fS|wJc
zb%V9ky4zZ1{p#{}1-c?#Q7+3B=Sp(9U8$~gS7%obSDven>vGrCu4`ONTq|4;xz@VY
zyEeEsx}I=tc0J>I&b2c(Jho}9D>g1RDK;7ZOf?$+O?7kZ9r#x&5oeDJjSGuw5*HO`
z#kGs;9XBzqEMCSpi*Fg97~d{&b>h>B+Y)yszLfZC;v0$k@ZVC?T7|b7(&~%k#N;mP
zpLwkCciROo&aOqZXKu_eXQQ`Pgi*%TinGhHH~UHKpni*=#9rsGu%r1GejdAziL-;T
z+jl(n_Rhj?-34lI?h5R{T?x)UWH`GS`(U5PIifFNPwU&*sd^l{OGB}Dv>En>wgzXD
z!P!pO(Rndvdx5iqz}exooE4Vca$1p=h5!0$Yk92h)(~sBHO*RJEwPq^v#Y_`09PYd
zGgq|B1<rPKdBE9DuCCy0FISbT2Ao}BIJ*v<eGHs^%C*I{{UXi|jxCHG1I{k1<!obc
zws|dQOBH9M4QDqeZcW^gxC@+p9h_}sID0BNF1fSfETow@%P(Mh?<L@QaG7}@^i~ta
zZ@eaTckcripd-CEdvC&hvG-Q*E#4cwH_;QGM|rREcJoeUmU>!_8Jm`9^`ZW%AL<I)
zs*`Y^jC(2S2V+$%$9s==p|{*S>9e0dUx<m)1;F)0Kkx8)`_ED5{?+d!^!}$Wd<spY
ze<xjdZt`iwN$AOw&yn597AJ?Dj5>MQ$$=;PpX_(CFKh;!%sZJ2+Vf=0iSiSZPL!PV
zKPeeI@$`u;Cl;SrbK=N}Rwt59Af)48!8YKy_xO?HyN^G2{H5cMd@}a<%Hww*z3b>r
zM;9Hv?&yM}mt%PUj-#F<A0J8i_>04L9UObmH9BE9xMADJI3Eel)&S5zIC)?(r3X8M
z3nXdh-m<~T!0H{`;>`lO`+lg;clpeChm(fuJ>7y`w<}=_E$q81(-U=Wv`MbT`*j+|
zW({`buEP%8&DeGO95lv$`I$UrgDSH{*dmdBRfae*?U3z=?KqxKYJaw4WVS)iHvHKR
znfC`TvVWuDGkm|Gaj|{FXWQzA&-%%>L{Tn!VVD0c;!DYKVn9E&f4@RTqQ;NFxd2n?
zTmbC!ZXsiECcw?u**{%OlCff<9Dp7E)5H{v%yFC-@C|mIpT@rPa#1BmU>E-@Vwg-s
z2n*#%@r88J4u0&wZjBQF#>;Wo(f_I#u6Lb_zO3$Ck8W%r8;W`|flXw^YyrC#`{x&8
zuKYo^mOaeYVU@=t7!`a5D-Axx%7Vk}2b}n@s@@qMfjE~V&YZd7rn53|QpOOR^f1GB
zvIU<jo8#mPoHl_oCLY5n5$|Faz6)l>yJ9xHA7+?`@pzp7pTI`)B>e9{A{)h9;XfSO
z;iQlhR?0p2Uw~AcOwkqR-*?3S804^7JQwFf<l%gXd^R7mi`QV*@Opk3yMY(7#h9(T
z1+%n^a2|)mEXi${sat|`IVP~%`9yXH$Eo0$Z(G5OahmyLoIN=mTDTIYPgdY04#D5U
ziKX*!=H&J4QGNy6$``R+d>MNgvw|=2<?J<nH_jco2j`C5hm$Ao#aWXN;gsPAaW=;~
z_7P6c_?T~GM=*1C6tiT<FiUg>vtQp~X6Q$phw&3m8QI6qV=m}-{uXANu4LQzjW~~E
z8~)WGh~0=e%E$PXIID6KJI<fNX_cFC;>goD*J2C)Y01Kg76oi4zYV8qWU~i&IsRQB
z2B%)$k8>{9;3SPt=qwHH#Yr0K91Ve42X#uucQ_&AdwoI%&c`sPW6;?cA`T~Qe9M2p
z7vn>mYH&>U#h(1J*p)vXJM_n>lMUX*x8$gtD2uTxzd=1WCxFja`|Fpg{qySFRk=p&
zRVOLDgOd|Jpc50=5bnZ%9mL}Q0$Q^%7?m805y;DV51bFulg+~@;#C+iyc(l}OED6-
zjE`q`@=|seFT?4eli0l&rMr($W%pzB?IDb`t-+|;KQMx}1*2sz@}+DyM#1)A#OoD)
zCr$*t3nvGz#Ca|cu($bY_8vx_4q}w)EZ@bx#pu!Z7%BQ0qe6dR1n2@zA?b&aogNsu
z>4{OAY>dd{VDu#yBQ1FtRmtb!_`jA2)(ayey)g>X2O}PRF}g7cBN>x1YB2>P6jOO7
zn}(5x=@?}w$B04&Mh|YnNWsk*71)RofXC6>e*!x5N%Z13@dfND^v*Y<C%zrM?q|`%
zeh$6q=h1WC0gd_@dc>cj_xlBUx~I{r{SrOcuh3il8a>l<=!O0hJ<eayyZn{EiJCnE
zEiF0$WE{@)z!@Pp8-z{>8KO@5n1GW71Wx*xBZ_b$NDWT=n1ypZ4&W4uGdOtyCs5#A
z2|7<A8K+4^;dF>BSs>!+Bmz3k1X_s$PL_pL7DAozZ(Vf8Kdt?vGyZL)!SKz+7l+}D
zBxavpRy~7t*Y}E|>glY#xlgZ{&XOwB9d0?=mejr^lYnm<!m_I;2McI>rtQ|Y_^Z~0
zlL-ssABoRn5i9`jWb6Wr;L;iBXrD3%6HU%j{81B|X0dJzeGczl@6X=T-s9d)c>h2C
zd5<A%d@a2ALjA9Q-p9NLyzh7)LCfP?#PT&j^qBV?nV4PC1Kwx78@z|SpX2@?q``|X
znfG&GjZQU%MW#AhmmBXH*q=n4%0-?1Uzt=2PhaA#U6my>cjW+KqKAW@9pQhET>YCL
zrKRo%{+v-<I0w!szr-Qmd+&OLZTX(z_G{mpOH;)EtNJgEOTTVltNt%U*?7-;fBW~o
z5c@fl(Q)t7<O$|8CcWo0$Gzu#!GjN<dw)QQ64$?nZ7}}7=U@LkjIP*AI`XjA%HG2J
z)@(5T8>JtuIYZcIbcrJMyU~_SZ^+rYu)vdFeNXW59hDP&LmG$&xYw2lINgr5^VT3_
zNQ;W$4E@InOq-CO@9SLp!c*_=tb0=bOu|rCe^hUfZ%F;?-X|3=K2Yw^SN>0aUbMsh
z&d+<`@3_)#kdyO@2k1}#uYa0z$oHFnD`daF<?8?D$bzQ7#P2Uk@iZjin0L?L)v=cj
z<r2~TpR7o`)&2feTvQ98GmfhN%TbzxB)iUUeG|fwDl7>%<Oli_CrSO~k93g=pK3DI
zYWfO&uWNe!IMn|SVVp>P%~WXK!({iL{{AALUF*WB(=ytwek$s@QrtsX?y0l8l<D8S
zzoeg=y#K&=?LPFPiSzG)D_?;xA9~k&cYEJ~jRM|RdsljI!!=Kb0xbz0QZGbmS^VFB
z5&w6uf6J%yKdL*sAQ!u}rmP>j_b07+_18sxv1>U1*`jZQ%7@amMo0gtgpWZRlODyG
z<)wcOWI!S%wfely{iW;>CVI>D<7*HSv^d_@Z;`n0JQrnsvi8ffh+^=r!S@GWqq^9X
z?f*v|YhqG0*ZW(&cx&4yDmC;yCH{8C7x*!x@Jpoq488HbMSfIy{02MH0<}Ny5pspM
z=6mj=+JP#m`r4&AT&nLdd>yL)o&S@|+8F*<h6c5X`Pyt3%Zaa@<D-{|{omF^k`wyX
z()t|GuWIkeH_D}<B-OtB7X~V!fBn<>CH?Z}-=)8{7t191`>T|}Z3i7L%JU~^HIio~
zVY-g0cNb|L9hUk>yEER+@Q2z0DL@^E`A}V&pl92$*52!2w+Yuu?=IX`t4Zn7J<8w8
zKj{yOJ;dmtW+r}}0)40UAhiwqsCO6Vtev*~%X{O$eB*mT-<_^B|NrM-UEUhLLoKLn
z2VczVOL5-2wZ4DD&qJ4TS?A8zn*G<V>fHae$ybAPi6OlhFZ>&!CNV$NV?5)lQ{JN#
z2g)3Iub=-*#jJD-G)CRKIw^&z9r`;PA$@y+1Kzg~=Cdm7J*ua)SDD}P`K?Vi>G66Y
z`rcneQ;}}vvNqk&@Z^&?`Y+N={r5|R-ylZ(BbSomGb$`<8R)bg((N-90&MjU-%7Nk
z;HLI#=zH^L3Z5kCdI&$?qBl`bzUo~2WTGw~_`lTJ-=+P)?QWKieiwe;?|=gh(xY;%
z-qn5|6u-?=gWT7~)WDF6?+%SD{7Ft!s27!2!|+U>l1l5e{;DXd^%3!n`e|#R^ADlr
zwbQ#5rVT38P2N|*-Cgi^&il46HLCBg%Gzf`sj4&AHz6HKx__^}mlvh7zDu9Eew{~N
zPa@`{RKB?2Ti>-?=)tCt6Ux>1-Y<~OT1o!v^!Q@&X}Q|x|I(mZ1jkUzs9lAx_@#dh
z+Xk0*^JiP{ov6bby^FkMc-NBNt2{pjzI>xhiuY(EtM*f!|AsP9XW!5Sjw+qd&{jWD
zss6cSsSf`ApVnr7-~Hcn>0OQ7Qy=LPKS&H|AfVyTr>7d){`m=C(Rb>9J&DJ@pRW5C
z^Ms_-=i=|szgIGUC#3)0jc#F3IP@R1iZ+l3^!sYG{eON(>(}TBZ-w^leY$~G{Lh2D
zgb(k1ChVOTmkUOK(*Qrb_s2-EjRivY+gT%wZv`+Hi)YQCosw8I+C2kU47-et!#c`p
z%(Dz;*WenBx!ij&@4gl@S(7pMA}|AC!#vX~n7JB&QTNff0%@KIr_mSTYJ~IJ-^O|L
z@8Y@wb1a8&F8g6zSL2-WV>p}rB(4QGpZqhN(f%c_>#!!`8~oqcx40Imxt1IGd0aQs
zN#y(%!SP?ni*fFF5WgL#j5p_ZiFgsuSJ5fr{6U-|-iAMfnZI6q4QBlM@JBEwIErt;
zX#Y6A9kYWa{5i}5mhtB?|2LWMpizFl6K8nO=ex1y;%fdfRtGHLdvL1tYy1_QVZEQf
zO6OPe*XX2b%peH12%!IX!UQR}r>{WpFbW)Ogy%3^4zy=!+`S1d&LVLIK`S?fzh<~X
zp$nVCZ4@raTHp!;x1+&p3;d747-THUBMw&#;z>j)(f<m#SX*2%^i_hnJ+2tEraQo#
zj4KIiO**0->&6wxQg8*U@y-yIimL@mJPot&>9|^9#&Q5crGJHYu$d@V2TJrdq-8Dk
zWIM1Y?=7VK0QSOh%v64Zl%K^~;ZUsU`xUAE4eNcwP~I)@-|NwsPoo*j9x(UBOq3lb
z|M!L&62M&QzvcWP1ruP#KTP3X!<XRgQp_>AaJK#f_=ouiG2iFJeCCVzxAI+>TMEJ1
z_iy4~%lBa=aVwl}{~lZ(#O@=1$jt|E1Gzy6n481>6YMyO!R*^{xH*AcG%;B7aSHd-
z*hLis8TuOk?tTWlh5|{F;N}<Xz;Tg0!RB}VJIs(Ogp64{=7Ln&SPZ1f0kcy$aSswf
zEJ*~5VCGL}+T&kj!$cU|go|(%h_me@S!<ka-;@Pog-H}^1u1OB>?D6I8YkJeMF=?}
zm&K}+>D!0`Q2=u<(F+T~dW+tyJxM1E$2s+V8O>YwXH75<H30ucK2QwA|NaibTEhs;
zNDYP==hnk-p(tc6aeDnw))pt&4}*EQ7!LCYF$$X?Am6x;7vot|ta2%3@nVvgg!>dR
z1^21gDV2b^@98WOr`cC9Kgj(|q@+gFAPuv`ESPboJ<L~$tKj|`aSiU*ifeISh}}`m
zaHjnYtU2Z-_u_x7ak4w^?_hOcJIs21i2Gs8QMRKRf`8}1JQ$=`u!mGVq4_DgsJ8g2
zt2yM^9}-42Cm6CCh?)?DD-2J;s4rBDnnP9_Ln5gzHOKr!IAon_6#i)&SG=lGNvcM*
zQ8lU^Ts22spc>Ut)u<Fzqd5G<z=eg&2H!5kOts6QYF7|Kiic#Awri~FSSV^(JGiIX
z)k4*-XjQvfs@fH&Y8O|vtF@|KZB^}RuWDDas$FhXy9BgmA#zQ1%#V$N25k-vT8&&&
zeG684G(^?9M%c5w47t1=R}<_tUXEPe0sY!U>DT7iHTf*^`5dn1SS|ejXnPYl$BJqX
zICXD2>3vIg(o4EKd(xeBx;sfHz3=-r-7`Hs`@Rpe53B5;z#t&-P;kc`K>^uBMfCZE
zhYBuFL{RW4A|iqy@(_JY`um?#H#f;J`uu*s??b2N&OddlPSveC=hQi;svg4gH!(}A
zvAf}0XzRBPkD`4vV;zXA{~`L4=B*p^_IGI0i-^zlVh`!7c&0fV<T>2JbGQw03Co6R
zfk|#~3IQ%&&9hqYtTu}V;l!=iF5xqPw+p|)0`A_A*)o86p3C#R5chh_8cKM!3yupY
zBYuyZd$DJ=1hf5pDB%it{>`{);~Ik%cWitB$n}{2cAozYh<^A4=09-(7r4L!h?Ds$
zytN+Oit#Nx6Gv!bju2*!&`L4{B@iz#^Q{+E%n^(vNq|F=AcZ6WCxRp~6fzeGFc+wW
zOnDVl5ibzn0)IpLckqH*<^m;<ElD8D*sWLvUVz)1amxj6zM-2g@SLOMAWj5#U0`k#
zcPPV+7X?6wM>Nn~7sx{#!Ot8a0FF>?XeGHscXWd<xR@8jm={Eu7sQws#F-0p^8D}N
z`QOF!znkZO7tjB0p8qkP{|TP|9X$UNJpVg*{<rh|Z&x7S3=xuVNFm>l(mapTofU>o
z%<!}Ed=BP$CrLc~3W<mG66F%4ka*xAka$QT@sQGd4q<>O&=lY?7Co3l*w=<Q0~1Cd
zc{^V*?1ZHSUO4DOu+14N{sqqluLbco)_9~JF8};A%F8K`<{#5mQ&_RXa)kf=?jLGR
zWAO80ZOnFZS{;59Ykk-cxK8*$L9w>N)GNxc|4S@gHq}KK>`8B-g&Gxf#>Bt;pTJ0(
z0I%N+PJD*C8a+D0+_8}PVg>WU3g(59|5Y&OBaT<WJh2k_NQ=l}o@ZvBmxpgq4emue
zuYh@8Df7H?)*{N8&smtym4gd-!Hr0NC}-YQ&iu^A{H%)knTh#XF7vZu=4biL$qK>A
z7BB{glU0C^ZNfA0unOj33iB}HRSyFpK2*dU$jF*Q4s)G6<~jw;bxN7*fZYgaMa*x?
znctML7E#XJ#lqaBob?Blb%t{05H{8ms+cR}GFQlF-9Tl2AUQ!f>jvel8<ewFP|jLG
zIco*w%nwY=52{!bsN&hLvh*)!S+BCJx3R3JJ8WoXlax2He7CTCFXNd}%#zN6@0i09
zU9c=y@r^ed6qdL~+|#id-z+tQ=ze&L`6xxK(e==Ux8i=Jn5Z$liT(eN8SXKB46@(|
zBF6?$riz<xh7cAqs*FP0_=EBaBxJ7AvHXtGX((2@pnG&fKj>M0L+QoeeZU8>l2h?(
z1%Ay}dY}uMk^e2FYx(a=_wuXA`>fK7=f34vkoR@u?ZdDA%YRe`F%NSvLK?&d{CN_8
z-T_xD!m66k3ZNB0D}Yu2tw4J_QC}C{?#7>9F6DWk-Ke)0fBKi7N11OauY#gH(C|F+
zpVacd0y=($cV5wGegnB)Lhp8FmG%bF#J?Ev%j+odR~qt$p7(W>LcgT)%3t2epyDOG
z^A1XR3$*nxl`o;?Z)vpsFEp!e{N95<z4+6QJ`qGaqz6UT;Ev*=V#5Ru90*h2V>Yzn
z`?VTUH;xP3cSAbz3GA{KhATPUqTGq+kEjl$7h{KoFkFv4uqX?$U)mikxNYT#dW^>b
z*Ma?lpD+m1pHN4o;To(iE<vpLnK&_KuVK6CWBB(*L?X<?LOf#V!@oN)PeZ2nqRa)1
zBq5@lZln}%Q991)gPfA@T?n#d3#{QN?PbKy>3U9yy9+^<YGD}VXIb*67^%cqG+`{s
zyWJgVJ^BDL|0&4a=jrY!%$+jKiXdY2G0y2Gn2ff~qt^r|FT_Yn^&4W45V7_k(jQ<S
zzYsS-YZr*&{0N?xu>+s(P^a2Z50^=iFv75vav6krc}D53oR@*o+KTQ!7b1X}gipu$
zBm6AXThjTBPpR)1gz*^i-=e;Z7}sB^Pvg#*$8n#`w-NVxAMT;K4R_Rh4FCEN?z6cX
z_lRGFdvK27j-1_y-&>D+cjoZk1l}0Ja}RC+x(zo1HR0KVn}n)x%TS?e!WDIYN2J)F
z5KsEN`l#|Om7+X_KR-rH-*;6HBFrD8T<U~!kMbqu^XejQe!3MmLEVH~qOMXdLyij|
zsgEE!btibqTEwKypuQpeJ*Euc?yDH?#R@1c^>N&%WyM`v`HE2_)h4WO-T-HNQC-BE
z=ocvEBg&h&AN6tdaoia8nD~ym9=DA>fSaXeu>0V4+@}5s+-`OwR?<76qg?`SbSC0V
z_bU6vcCiufEFt!E3U7?y2H_47LBGDWOuhYcN|#SA`|!NL$ji&v{a|>QpC>tekkczT
zy_nM{I6aTwB2T6;Tn?YLFnj{hMnZJ+uixVIaY77Far&p_-{bjf%gsnH<aa;19K`eE
zob!Cnvz>pP;q(>$^+){c4V>P?Z#_b(NN~D_@%tzhX3js$?_R?A2PsACsFpJsS;gry
zT-W2v;0A^_`1y7&`69{*%NphXHRGS<^e#>x<@765f>`7{PjhK6ar#qEAA?O<7{1EC
z{+4sDWc+1H;q|AI@8Q(Wbbg!jT*i5}aXQS%BBx$XD;d9&)4j{}DB;VDH!<=6r@!UC
z{S-gn%IO%TVuEXNbNU@dcJZ%kDP8`}GU<a;jNH#uJ;l$Dar$dcpVOY{+uhBze4kP=
z$j=Y(v%-14$LTYS<nga_{9M3kl#ypCkFapgTNs&Oq=eII#$}KFo}d4h@mx;Pf1u$R
zq`2V}e~8Cfuu3a6oR9xSv9|guG@YN}f9+T+y=aK@Iw%2+#BS*1bxjv;8{C5k>-QnT
zxCi(AeIC)SUqz(x0HU&=M8xY;ipwxcch?ziRDw##a1&yHpT*r_Tfn()hOQ=eO>F-E
z<!^90Zdnf9%>}*uz3MgKzc;8i8wzmu*2fIx;ANi%cO;ENN}8J>Qv@Q?X|<h_Df5Ot
zDO0dUbU>5DJm>u6*AQ5fQi>f?NFU*pJjeq29;J_S`U6hMJ10Z|Ka*BV_tud$i*Lci
znrvAqL!XeWp?Il$yiNa+#JE<yE`!DZC>GFTQ#}3SIKPJYK1mnJ*>`BjW$CwacB{Vt
zXTJh(-6n5g#~osK<A1kfXTv9O7uk)tr|b&!)9t`-$Gv7}LJIFiMD|AfS;D<)Q`n2q
zhdAB{_WAf!2cmi_5aXMRDByQ+@7(Ly9q<D7T0N~!;WoR+5&i#d<?G6Q>SM~CxRdNV
z%5A9QcI?pl7|Nz{_u_uP524H{<$9DD!S00jqLhnpW8g6=gMT@oj-c$_$n!d$w&Etj
zMbzJc)!#9-5BlT~>KMW;hjHA1*rfUpSzM3z9N3Fc1>N*&tUOJMLHu308d2$QGM(?J
z5!~nalJXYh^0Sc7KgNxbKZc(CUEDDFpz<r+K=~z%;9GH@CGMZYFE`=F%RiwVU&n7R
z;kT<`dA$JlXCA@bnmfhA%5K~fzgDcoS6$CN{u-xWqf~rUxgF_h<tcoX=Q(|WQZdMB
zGpF60Ud!n%{MIO^?<K_W3)qu{@bj+?oF@3!MowLv4#BD<U_YiBzsPwm;paOzZKD(s
z-Sq2!@bk-D@^hS1a9YF2)10T5(?U*1IIX1=@#Iv(IH$RsHgL+N2{%8taO&gq-?+@X
z_<1+i($CM`oc@SX!wW<?_90No55is`V2!38yO~m00qA)JKOZ2CQEX(y!ud-$ErTUO
z;9gQHp@ve!ueiqqBL+@~IGy8kfYTM6{+v?7Q%u`FruM&-`+@wFQgI>Uan9Mq&ryC}
z&(9%#zMP-C_<1eU*1_pdI345k{hTgvx}<y=CGY0vn>f9TQqW8-J%`iJG4f-6zLe8z
zIo;0bK~AsabRVbdkm4?I{AtI`r~7eZ*k3aTjq;G;upz-byb~u1UX9qJ`@zY(VHx`-
zxEb;De&*)`uzkG(E=|_0AyJK$)(G?VG0`J>u`hw_)RWBNr<lV}!$NhfVUGFy3g+|k
zbU&+Mfw}!E%&FI~s|L5FV(-P9;QYtI`9p?JGq?W&<cR@$diZ>f|4;t@;r~%y>i5*&
zRCnsnlNrw`?El^0!f*wB1;b^W?!-u-8@IQr7emr~T>X^6fqNW3XYk@C$1fOsbeE&S
zkGmYdWN3sIeW#&`xUV6I9cA|zLeQ-5Gc<$qK41uAhuMRM7HHdFhj#xE&K_#R?T!y)
zO+)Jg19o5B1Up3@tQzHzABL#KsjAUL!fjKde!tsnPWUYrv*$AL*kvCv4zK@R;MTu|
z8jRzYesTJht#>Flojf2e*>v&6$qiTS+O_77e@r%sr~ZgSDUL?`Ot~KALIbdvqkf;y
z?>3pRc(S-r>TkRLBOiO+j5X2Z<6`IfnT7I~_KEY39Et7k=-iWBP_93D<Ow*@RoGPx
zxViRvwoKzWYKcayl@%tF*=*&%-6~ETZ;$!h=?C}acWpTk9QKIl*!Tr=U7I(rAD!B8
z#<9(ZW+%^7uAdqYjf8TIg@YZFn?mC3@kDdv<jbQo5iHV#p>z37>}dNKR^f&mm(SN8
z>r+sl&Fu5JUByaeh1H7M5;nBMHN7|9y8gnMj)khYCGP9mGURbhbq9tWZqKH|;dAF^
zZ#ri@(bVYh_wGEmr+ZVoqc+mejPFV9iF3bTcY)p-w;$!oX1FhZ&xvbSfAa9s(&`I_
z_v}F4E6+RUzFh;0AKJEQAJIr9l%fR4eS9mk(;PLsk-9Gz`-_slZTfTZYf<4VR<0lX
z+0a`<8Ts=v@~c|z=06v`-h-?!3?*R_l<n_E`(51rf6)AdI}ugU1);MqY~66_Lia*-
z!jcH|Z6EcxXZk&z7VlL>KkW2uF1+E~xtq=z(>tMSbG)kb{(<BRIBiL`VqdBiQPpXQ
zs&0%t_vLdPBG55=`CNbU=|1K9<R3-l$s?j8`Ivmi@Fw0-x#uYF<up*BBPW;N6p!JT
z5`)3!^7#|;JE2UI>62Y6E2G7ojgh{hjdPnzcNHeWK~LlKpm-t~SbbQdWDVXel%+;R
z)NFC9W_0M>peiQUzV*R{i%v9y6fDf%Ngfc}uXt9zC2qu9Ir1&)|GBe8MG*+PC)Mi@
z;dj_<@s%yMXo6c9k0;z_Y;LBxfWI%_)M+)2{l})ur)TnN3XLoNJ=AM8nu>Fw#Uwv*
z)m36U+I}pwKX_yEvtr|op?#s`bsELHQMMdGC>y0x>3XSiA8JA=`J>a9&)yU?no9D=
zP~OH9Z3m-bBTD?twbA{N<R>v2dobQN<9nAvYormceR0gJV#OcnQ)ptzfiD^kofTd>
zYiw#)EWC8)aQm7**VG)PlZ7{5Fn#@5qa)|9n!e$z(czx$XLW8nt9$!dU0cuA#ydI>
zqZJmB^muoxn8>LC|Fw<BrY>FF7aQENYyZr|F3i!T`8{pPx5fDUicYY2q7xQA&{+aY
zs==E@7=3SjrZVB+404tVcLte%U3Fgdsx?{@f^!Fl%2vlpYKwB5?cF=h?vfO5Kl|r1
z^Og^sp|xk?nq!luV9==c7HBQ;qa{Vqmi3m<P|0e`eH)J+T6KKYfn$l09h-MfPi$4L
zA6vEIP+9V~!kT<ptX?@5Z=so1h!LAai<&Y=EV|pzjfux~wqr7Z?bvLR+x>p{NT9QB
zb)sjX**nwJ-M+EAduv0qdMxa1uWR$nw8Xl17j|_8gOQOAPsAFonM_1hMq+_*ePcsw
zt*^z}Y#&c_ZHS@%P3YEkv<5rcz>yOezv}1DdbmjZpy*p?DYL`FC+{UHS73b5NJEQx
zbnrMMf~bRedWrg-XPAsrbJKYPqaEuj7iL!4FDu-)yRxNP97&#Nc8$$$JVV@=Jmb3a
zsJxY^b&&he5LKfVt5qAj;@a*NwK=(}vAVtH{>9`MF<ftIKNxR691{mH!SUu62!jyb
zbaLNgUYq5pw^%DG<&$u$G0ZNSS6lMt^Kn77(bj7H?0B9qRs<`qn@zs4!>kBnv9s)6
z6n}H<KzsXvnAnG>Gve_x@PwIhgJ*@`KjTk=FDyR`T3x6SGuUlWqxb?$EO;Lzn3QH_
zv*(=yiyh{|T(!(qa_-7k&syv;m*%P#Z`mbcQS{tt4b@b&S?@?boV@43>S#?(qWV6x
zWfe-UN6Fw;(X5h%`u^w{^UZlBd8#c`b-}9SpJG^tUH?tbsLwm@c_?{g89Iib69aIo
zJIPjqJ0YC-cmn^=7hg<1Su9TEC)bPVk`~1=7(V&yA!If9G1g$I!VHA$z<f#Z^(fln
zrXKU-YbJCVckjSVXlirR-&<z1^lj_UHM-Z9`&M{Dl@YsVxV@pRaKq}c^EO5U&fa9r
zgtuiN-13ai)ik*&(hnJ`7#dL9>+o4ul6FC}(`|NJqGtMDEW0x}3rq2rQIT5Ff8DI#
zs(2Qgx$<^YRNva@T5yLeqJ^kQdF<h>b;0#ZRPg}niuUz3d4KP7p*Ov#?;f-c_SKBG
zvB>7RBYA=8=@mOev)kH3J=SK6uda0|-r41dTU|A?g}XP69ADkys&2JajvN^t8mlRb
zRCu+1Q~Vh%N%z}7@3^jVwbVCzz1DMc-cx(d@7VJ2$&ORI4)HB$$+ysw8h8LQ+CqAc
z*=b5~HIs^-1g8LJHodU4uX%c7YhtjzFemxlJjZZTU8k+SZsEhridx?2Zr@zEf7|Gh
zm7(x_#2zi~pZ8XmMJpSGx1g%X-qx@hy%)rQx)z>C*iFC(`jt%1gKq}55M13~Fj!hL
z*IUz6UYlQA=4{L@+g`Y1wYaS_XJKkpQ9;6-9|^ANORl9p6U!dhMBji06_#ILlf?;>
z$(=p&OeQsJ*xk{#<o4J{1ASA))xO1+-ud9<#x`GHnQH0ZZ8_fQUT_7iZFcuyw7%t8
zUtPP+H8Zf+7g}09eCE0cjYW0KZs80z{n+Pf99!Gk-A!BrdYpI~Ur<Wn^caNbwNNLb
z3(ac7b+fId#>SPQzV_U{nI5BY!aflmRUZ3eue)WiqrsE>z6e!R6-_sVleb~+p-jWy
zVMq31B?Ie-dT0XsiE)O8-|$yPX&nG`G*$nrs6VA!U><;Zn9ZnitMa$C-#Ke;(~%nG
zv1A<#^U2@6dhC4A9Ks&MzvG>9>c94wWV4kO+AuyiXgYuPLii3;6Q;biu)nNYIpgFF
z<~+4rDBVUFp19S@%lHP6Es(g{#ItGBkJOHI+cO>;w)LBhzE!@iww#u=-rl&;*f-m2
zG>%tJghr`X#;g;;QSsuWr!5f(MF%^|>MJsPCf!G=eg_4J?oU%tS&>yW*Vni*oYm`G
z{;8dw;$go;i6w}=$e0^aQIV>%i>LdOD>j3BMOJJHO>b^$UWmpcloamWFnWA-Sf&F*
zM@ELmhmnk7rSjHt6h4(VB)>B2{Y52X#L^1Ll2SOBU*%ujZ&JOh!_256z8;HG-tf6h
ze)WWM??6MdWRm`dy`L09V_3eIybxc+kE6_wnM3Aasr9b8kv%hn(^;>0*UB0-zI^p3
zeHo19iBF#6Yth;A$yp&XnX;S*7od%$8Q%k|8ae#8^%ofHW}2%jYfEc9GY!4s#Z95!
zypi1g?&K4g&+mXMU5I!6ne&-671Fvg*#+q-Qcd|x+a_?+0bf&ZV@J3%G#Ls{*~6Bo
z)7KVv^u=0N7RCa;hCtX|<8P?xYYYy0J@tW#n&yUjU%9I%)I0+ACrCFHYn1~!Uymn<
zKVdk7C#6&nti--H5HpI-@q!u8VD0&Z7j~+4S8+{2S!qjQe{)GqktpxXx#Ehx<jdvd
z_4WBV2{VMQFm#~o*Wld(UtpPmvT3a#XBnx|^iA&2=fFhWIOYI}!oXtTP@=5CBI3y>
zE!D&m#M)%dlp9*AfHlMb|M!c~5Kqx=E*qcm7)?fFnaA>h+2l#_V)FOyX}4$6BdU`%
z^yV0b#ed>W(rz;KqO^ttEmPAu)P3%mQrK6FCAFoOOqVI7)6|q+Jn`I?Vn*vq&PD~#
zyGC62zo^f6suB6_36E#OoqP-56?_V@J=_Owi$6oZG27DmP3RXJ=9+Sg&BhW($?8>)
z?N|}YEz38Sx-6T8^1=bDzp|pS^1%Q6`It3qwT5iRQ6!?@TX4$Oi;!XlGv-f%b;U$x
zt3<J4%6Al3mzR47tIJo-_(=0B^Oj#TlYG9qd*UZ%b7x*}#4UcGe9bxQcF(v(*~ve*
z%tG}S6t67qMCnrZA;lHzwftN${9KXf%}stYSr`%*^ff2n*GF8Ltq|&N#fMo3a@1`G
zXmuL?7j=t{@5sRau8!*XF2l3P&E>$`I;rD(vhp|S_|Xjff7B8k-<QUf64;+p^c+m%
z;%Dk19X~6LE9E#hCzb!a6uulH>xzz_Kr};+)~=ty7M{v~Je42gYo&Uoj^CBW#q;WW
zbo?u6T$xp`*718Y@EY|F9lt+?gPwH1`Bm;W^mhhbX!pbVdtXhx2f9jN%}>$$wG6ye
zeNe~0k%2qZyL9}UDSSDU(XW1$`!!WRS)-PlHER@f(zG?oLK+Dz$w^0rWlGZ*$-t8~
zP+jT@)rTsJV4zweOI2&6vZTDctTd>bt4?0zcGa~vmpt(VStDxu>&hz%n)1N}RK4CZ
z#0sT!Z?+%t5(@RG@3M@2-xV5csd9NMODv`3zM|9E$$si~H7?cFSvzW|BAYUEirI|D
z0owa2kM9{C_d5_9gs!F?eJbod@YZ8RC(O|J$Rw9GA~|855S@#+ji}zK<Ru6exUo3-
zTGQ`}UWkgCqU4ADk6tb=xInB<oROT>3{2no4$UVnSKWc{GAHXpJg`y6EjqrBaM*9)
zk5VF_qY{=TXrNJ;l)!;cvFwpej0_NNV)=>GKib`M1+z<;7QXi!-*{wp;&{ae^FP$M
zY14+$sr7fY8pW3<MuWpa82X00rZzWsO)W(Fcf=kaO@!N^!;uZmp+-R$Y)Kd=hv|f8
z!k4#_wNb}!M(h;k73_lbWETVu1q=DFqxcTSVK3x<miP_<txdyQnU6?(mncVXP&scZ
z6Fi?KeqKiYW~N8thc%q&jC1}RuJ=4dSTLQ86a5lDoWd~=U@_G369Nl&)JyHk#BbJc
zm?Gf!x?VA%ovCt5nO~Z?zHNrzX5hpxCB7pICw?jMU54LsJBjXUrd#6YW#uP+De<FO
zIPpt~@5{ig%r7N=Fas~;{*w6N6pr@8Hma9%0{z162R)_C7iIqAsr<kr%-1EpCj(!{
z{8Hj~W#FaEFD3q!41AIKrNnXemELbo=9dz`KZO&WJU$2~eu;i#eg%4=4<HtRZM^j<
zyGuNQ^Br|tFPoxq!=}w7BCb$F$ddd`w)M9@+E7_qR$k@-uc%8j!z#(vV6~~el6eLu
zzg`E{Gnx(r1FT*JR70s`5i|UeE7a+KIJ=6?_3bW=6QYv9Y_(QLW5TBKKOT2z2hWeg
zJf0*Ul2-jv^$}PFOQaPuU9k$0?)N8br`WSUS0D@p2b^bywQ7`S;_>Zu2LtI*OS6H_
zXQJ8sBKJPcwr;LHSJs{}+q${;C7wAuM|reK{9smoDqrHM+1a`5R$wjH@oNwbCAmdv
zmdpH^v%H(N0*UX-D1RG|LW%Do9AAj&zg6{-FD`AHwfTIBc$}<JFmd>OCbQ{X{)tlz
z^i@GD4MomG#8R7IZ7wdTaVa7%|DW0Hb8`!<1<~#tQD{mS%|db7ZK0aR>U#2JWSa5m
z3u6ZD<GzGOhQ8k=Op*g&gu}j%zLEF|oJ1x$Q9~Af6XDR#A}Hq$NCb;+iHMq=390Rq
zW55D4S7iHS{-kZrCIYru+f>2ic6Jg>i-0xxwD?1-dM5shCT-*`5a%D#Muw<ient@x
zCUx7&6uOVcg+zDg=n-y-M0c$uj*a$-Pw}^r=$?$c#K$ChR7cO??<>)LI$FoPN}`8#
z^eX0%5<O2xL(HcndYn+iM)}F_q1Sc-21K#^4B~~z8v>u5oWIaxv{ejLZcJORGg#kL
zRst`HuT5$bIyX3Z#5T-oijB%gNn$Ve$JN|RI~G#C^gf;ql9q!^3p_12-H|vx{7?M7
z{o40-BPyO~gslVkH8>eje(z8gegdb_NqlP-esc;(({5y1pg`e^?SPSmy=LOauu|nv
zf5W1nI?XBuhgoyFSOW0^7>D6`Q4CLZew3+Sc9VYw^iVmV$M9=eFUr3=jVnVUAgY*C
zg|hOWF#LCle$YdbiOTV*`#=xrwW(jXX1#SY;rKRxrB>kE;GJl~?5EXb!e%BfUCVgI
zzOlK!`zn9l1aHx+?)He-l6-7k`<|Z;X|w4eZhbLRy+btWa^xW%LlQrn!k0ZbnV4EB
z@e?AB(IRK%ZY~GQUC_IOqJ(su)<Y8CmW9(gL*nOU;k53N_?{HLTuXid9lu5tXVgoa
zQszIb=l5jgKOu@_{^hk<_{|#5ekq=}uvmcpZ5pSPIO!o0Pw86{r%@^K6h|jqa#o2m
zXGK5A{4{?hel)9m`q~mtacIhap1M!R&&kS9{U-CLIDHSeAN*B1enOiKvR+!B$^6GN
z%DIa54T;~Cfp2DgL*ie_z%OTgL*n;l;G0?Bkof&N4tjXj5)OTX^idkeS#(Y5bg|@v
zt}E$%1k_R#av)O<oyJFK(M0z@_7zU2r1(E^8Y-XGBs<nmClSZ~DdjHMX*`GmH`x3M
z-Fboe#3Yc7E>U3<(tV+s>ioiL^#-;$$lcem+P==StsY*>@%XB`@<OrJ($h$e!CNRX
z<s@&nbk)0e4Q(K=pWnO1y?0<ec`|*jpLB%8A%_dT%;f9j)~s!<Ox{@M1V8G*I%*R0
zo7Qy(r(8uw(>jb73oEHViIrDf2WP&xy*T;T;C~lC7Znx7$t(T)$H}>W<$34cx04mK
z0i|s5L)$m)C0<8;ej`qar=6y0xexO#+1wKB3?M68h8u;|!BnRYwzjq#bNUNL+uiQd
zdur`DQGZ@#fwj)wF;d_;F!FA<tu{j>AO5PwK`?T3oH&TYvDY{Qr;#o3<5@Uy5Q*<G
zysqUBQ7d(v^#g8wGkbcS*ddeBOHXm{rWI2)Wtin2IOz&ToZEJ5E?)Q0=AQ0YWvQjK
z%%f!ZfguBZW48R8&eWW|Ll+-fQC2!;XT4bDXSuJry`YCV={L20fW{7-^d7llqX<{h
zIboU7a6jj_$oz)aGH~J)5<f2sCypuc!&?8i!C~QT*70jZuEsGvS@;R)Tg>qx3H&Ul
zs2sn#kILs6p89=l)_XT=@39|R-G+LwqD6kPgeho;#3ytd7M&Chi_{7oCySKKUr+vQ
z9ly@-8*X>ua%~oVjp4tUURi#-p8v33jwdVs3Bz+Z@q|_@Z(>j0t%#V#oX`S1<cwg)
zC3`irU>#|L7FQk}Xtnl)Tyf{*M$_j?N29~rD;DO~6b~JkT6M7Ob8{;rYYW%3IDD=y
zmw&dZ?Z&q7*6qpd;=YkHdRJ`xK=r0XVttIhD0|9TQ-h|39y$-Zt<pGsIf);pn@^E{
z0=5Ep)^+?kx_t@wJXQ;t_%(=`BTZ-%WJM-^0=G~R9>bbF6Tg{o^aRrb-h+8Zp8EtD
zPoP+^UHtQX=jE?)HA_E!^EvtFU?V}R`uy<l^U>sED3ks9ELUOwL0h&7=nXnfa#i9x
zvT%~C65j<mkN>oCXjV&nPgZ`Cs}et&g_B&B_`WQh<c`D-X5nNHmH1g1_*pE6C4No@
zzMH?1#LvsZuhh%ABMW~-$3LHie?!N=oP~c+$8Xc|kfy)LdQU*#p>HSqnYf|Ek5hhp
zJHlU31A2Uw^gHPB6q!68?ub)kD;gpRHK(s|wqyEqF&1h#kY7<)*-+Ctke9p;@fI2#
zFEBU4ikN1%fJUn0#Kk4PEej{QC4M{$r|&KCJvttu_UJhDIv%4dV85Wa5ooWewF!HR
z*v+ChS1ne|X=eTxSE$-wv2ty8G)YNpI@%RwLxT^jyDAbaDcG~&UEw7wc6XOshNVH2
z+lTtO-LGivhCT{>3q_Ie_=jhb$N!29oW{SzcZf`UOviU+;WW-={-YYc3R0n-%ZK-a
z%EwM}s#oGvzQlKA;Z(lFcV*#JzQm7a;ly(!emI4L`y--6$4_8y5J?4DFMUs$|9C1t
z(@Eb`;(H{HHxOCE{RX{;#*5(@qF=*FdP)4eES%_(_~8@|dJv(a<0lNiBzo}Q+AREL
z_*W>(wFULU4vF;=%3-dSvIb{FMiPf>9~{pc>&lLhZ2nOG2gOLEDjXS+lD~nsNJd-Q
z5Z{`L*)nT3X4sT<gEH2Tw&Uv#Ap&iGeQ5LU{Zr%nl$(xEub$uAcFWHf<`96U82T}9
zw?q2aDW*k6hQcD3ayy&-@pNbl+zE))5Y~~c(L6IY0*H}S;aP{<ySw|yf!M}#`#ZLd
zl_oDMSykA7c)}5>E3g%8Kig+-cQt?Tg7qId)H~F@cl6--#4AYR%_tuupCD?KB2SCR
zV`&#P>$Qq?m951M`IRNk-d6i?!nHNHYwq&tlEBX3{0{fvy2AY2K9hOy;FV*Wroy45
zP_9Sp$-eij{mdm()JMyk#jEIhw!~q!YQj}|MEzK~{@ms+tI4Y<wY&4)JNMq=(Z9f=
z@ag=#Zc}b+P`UZ!8KY}I&0&}rB^+tQS_q<XFn+d@-$BRoFdihnJrl=1j}*Q$jbl&n
zPjq~D8W(S42VW}xku3ZJI=(jpKZ%nvQuz;L;BVswiWGik2L2B2q)6fC>UfAe_BwvT
z@G|pxZm;sTjvv$WlLe6Eoow%&X<WRmmh1T4X<Uh^HXXkwjU&HX$M4f|(4+U8U*&#7
ze`nC8*jOIQ`X8X1C*^klKChSeU<O{5fqy*%uT))n{)aT})DM4Ox?lY&_iL(tj4A(e
zgd-f%wo6Ql1e{G!zSB`uQOLNIBkYu5Adzr3IiuBP#GYk^J#341!;}S`zUjQokhCAV
zob`!t@sKwi1d*(<^*PHb3Vrz{LdlGVAnMwgx<>56O06+mu2V?k5P%HvWJ+X3D}B@1
z6t?4xic@3dY>^sQKqFCPlK2Cs%QI-xV>A#tXY-a>d+d_L<qQh>JApzK^9B1SXdZ1R
z-4ebk2YABMh{b5bp5n<A?Qz(H$xnt@Cdr7fRs^5pl_FS?7C40F`DLV^FP`9j_om~>
zOdpR<t^B|yRq;1BjJYd)8$yx6T-Ta#Vu%9Eeq1!#U)N==x36f4Eta+JsA*VeG>V*q
z7lcIa8ysj>-`7^y+c~=ESBoq1LoHPm9hG%0t)ZxlJ6pAl!_GPa&C%Xq&=Ga01HEqF
zONBNHLi3NIz1%L<iuP*!0r#O4rEpqRX!u^jF}^6q@D;>J)lob!@hpllOht#J!@P<W
z3p$14fthn^p@v7t@+Qh>Eq4{%S*(Q|B0wjAV8f=0sNFLZt!w3w!_F4t#*NWo#2qfp
zkDR?WB5rT;{*<E2*0ptX(rnTq9Wgr)lZ3ByNWePD_*Q`kNFBc!S`%r7-sO6VR0Iyc
z4)R~Ctqdsc@2B*&HGDfxb)a$xe~M?h%)c`Of0enE#LvyZ@1Ynpt(-%IW7L34VW;!k
z9O0DG$mCiH`#eq?0xHP3nu-JchvAIk17vsA!a+|P)F@tuITkG;3J^&N%HVCHo-%w{
z<42(^Jhk@mW9^ffU#@*<=Dw+H$oTGQUP3+(b{8PVj2O+kLRy0e3iEfBs-?vr&Hb2V
z)-s+ycBUSo8L&`nYpkAPTl<c#jiNDQ&0Dqva!!6%hG{;6?>@RZhzM8hyL^keyMtS^
z)$l$2d;N^Rqr|so;7{{+l=#jJ{5AfL5<fQs{|QSui66<pA5%!mNqlbx{yIxJi66+o
zzs2K0;)irRL~*8iInd6u@rn3TmS!^lF+KmAIGBf|vBY<0;L@KZ@jKJF_zp`siQk>Z
zVWS`^C-HmIxcEIwIf>t=;~_+El6F8iNjda0Mi0{qF5rcfp?KLK_NS%zc!q>YF~AfD
zOpBT{<2&hS3O5v$oHmShu~*~cA52BlLd<xE?5ZA9TNf+tTR}0kZ7b?EQS-aPs$y`p
zCDJ~<%Uw)g2s`Ie^kv$zvZ8u3MNLM8@3$Pmplf{fX`*~>&2^z+*tg0{OM^=(3Lgc9
zeYS!<YqY3eox)OUZc#L#5&4`(B#-4T@f=H<UhZ2dX^hN!9#f~VKJa1{2TLTltTx+D
z?bi%y!A{tD`+vqINAr_;`|Ec%{qy+bzacQ+zTZc44pAcFT3(qrna;z8I}j<0{hAbS
z%ySNVmM}J${uIt*N8&p*>kQ?8o9Bwe4`kqP@LZAjAx+|P`N|(Sp1E7fntwT>*&^4x
zl_YI#|1ZLuA02Gmv!bW7|6dAo7XNE<+9MGqAnL3h#N2R?{FS+iY{|J<EhO$C@x5sr
z=ULF~miTTB2d7p%9FqoHCwdm1U7YnzQjcaO@p6fuKuiNkw}$1dS@_L5-jIdgL^#$r
zC|^7YUXJgH6`vN_nU>w)<LNNvhP24Gr9!p4W;$f3_Mjpq^^sJ(_OC>h7O(vf(S>@7
zh+Av%+FL1Jo6$uc_v_I*le%3;*U+fZ^6q35HXLy&^^k_{*7MF2m)6iDIyz1~T0{5h
z=pp(h8hWmdx{2Rv=&>nKhIr(Vj4!9PCMY{GgWg?!YB^%~8;wt#a!BZ*amou+tfW?G
z==QNx+YZwh*UCLGfd){EamUz;&<EIq+OTbQJK{uZPzqw##Ui&FQBWv*=O~u~4=Q5U
z@tu7@$%86=p7i}Q@e_t$>)$^UznO6DJHLv0;TI;)EyaV&82GKT5j_STlq{!W;PG`3
z124`{uSMN{rfA1v82psbeb8gdDMsKlvGEqtT22X&zm8RuQ={aSR;iaziMuccWj$tP
z2)EzWqDOwV?4}rez5Z*~(+D^6mr0{1G}JG)s$|I~THzrcM--EKVm*DIZ!B-kD(B|)
z)FXAMwG*{Mx93)*J;b~q(iHX!22HI472En|6RRrD?97Vz|BEjYLzKgxS|WYP7xd77
zIjWVHnH$1aN8C^xl^QAL^2^NKBz`D`!}g4w0-#;uC&U5yEiqu;<Z_@dGFN>mRgQR?
zH6Mv@rCZIldW)IoNc`Lk+{wH};=5Bg#unBws8`~+Nlvf#X{J-+hxGj5IT`s+r1BHb
z$-r;c@WW{D-8db}hjTqaKWcfJ>7@1gFPVOtMP_wt2L1xKSK`|<@ZYl(k@(IujuV)O
zXG(l`8W+E2%}wG*GVour<|gsIX<TVh{;HRAb{dBlgzOM9|G7FI64(Wy<0lM{a=&rA
zSaXy4kLmf}RHic8duJL)Ka}g`+?~b|Z%7)NEa#pyF5Y4dP2%_Icu1uChcq<wGx{}?
zu4R_C^1TE6yOH#G)ISBA6P>(^aR0P+@$MZRG_5Hj?DRW3yeUoMAMEf@yqXdLzPJ1b
z#Vl|>8tQ~T!Cqt9-m2<uWn0>->`$<B5uW5DW}(^>UaSjO)eThB=92lA-uhu1Hkd?a
zTQ2kA2UGH7?L(d_k>AufzAl-x548-^c9Zsg`)Igt^vuO@q!7!-7DrX`uVALUB2x>X
zx%zOvLSJU<vzP8E%~fB!YwLWnnqc*gML(_je>}4(IJL2@ce>cIvrVqpe`>aOd$AR)
z&ORIJU0v+j-x6AZoiM@qXj}weGhu63+iGn~%wTWNkX)t@%zL29Ryalm`^Gc2$o$S$
z&3nb<>Z?(CFIJaw)h+cwkep!8H0y;a*L2DxL8NLQE*c2N6r-`%lrz~@Nxk>3?Kw7c
zdsAL@zOBSj+%;ZQJsP4;%pe7vhE{-$G*fXpkmO9TjOaK?d5Le;v>49MGFIZpvT%~=
z65ox}6lFOf1#Q&v6NdkQ6q6P$+J8i+>&Vd>hvQMxi1|Q*3|p2(+srRx0Pb)$#oR-4
zG;n6OMK%xiwP@=KhrT@t3k%;^W&W;})ZpElCNA7iSuvoQhJ=!_U5Q&7!Q7!9xK`_d
z9}(qp9~1LVjBU)pLx$gTi%9?Z9P>74@yyFV%=sS$55}G#%yq&|>NV4>#Ub~%nDfZo
z=NdRS>q{4K=@LIAaoi|_{T3OeoS;$|y@mN5<@T$4DK|+){`E`X+L`a%%;-Dd37=;=
z(ZfvVN0?5+zsNjT;yVp#{M$^a#Lw07dfKmqc1iqNX=}hfCU+Kojp2*LJLUc+Zkfz~
zNG~UpmH!0gCw&I={0*^aSaas+*7EjPSjAw#ADWSAZ#1}>T3Jz#KXB)*@=i3kZP5mQ
zqQ1GgzSbY8b@^R!Z{F^ieT5xM9X*S+et&I!FjOC$F08J`_UJZWU8BnrY;c7A{uYNT
z)HD`M<|svp_3^=BU%biVv)SAZU(_3%0DI-g5pfIjBRlET%u(TAOlj7cd!|@X`iC2*
zc1o4$^t-20niHZ_#9Flry$s(CkG3-nS7CHE!p4PNTRMKN;VvG94)lH|ehqGCrtyYI
zsVw}2hMO=(GV|Z8=YLaNpvLs_kKhDGI=`@j=)rC==*(Kn6KHv=@#H!(OItH<zu>l)
zjpt3&>l?@FE-1L5?3B%8^DV{?@b<CmVvFhhW1yP%kFi{B<<@UC{1>-U;$+E_`1VYk
z$FRhArg5BVOnQXGcc*dj8tV}fKaz#h8cyPSGw{E$oR#>24E#0rb4dKmG!8CDdWXc%
zPUBb|linfmb2ISQ)G8gnJqsuQz0Ci)4E#-w9hLZ(GVs^fFCp<S=y)UT$J5I>fg7hO
zs)YNK^%|M~80E*;1`a#mb-Lz&aW0(+q&r(+-buva#$vX7+P!?Wo`g{HdJA0b_Vxc@
zSD!J~Tv=sps1J0xbCW%^!%xzqY+&9iqnR?kFL07R63-Y9pp#a35@-5T<?xD9;=2t$
z(8f<AwM);>{lM*w@P0*bcJLhDvy@1AQ%-4nrcXtL9YJTb#)NH)p;I?AMtU^ck>)!Y
zaYs+Hvr+e<$X=IJfKO_3O!JzYO2WH*Ctrb?tyU<?sYIafYuf4>QVtW4;vKe~hKwnz
zzrxy6r};`~T!0e(4v^X`D}K!VHwHHNpFA%SPY!%5BJ%0GNu1`T#J6YSJTE1_GYcm_
zqr{I$T<&e;@?+Y(zm3Y*a4KKo+YK2wmoM?1SvZw1@grIIJvx3!$NjXYQpZmSXpO0Q
zd49-pj_LWa2b1}V#CL1>TlkD$V;PG*1>A36=5h%CDbIU}pR37C!tZ3+C~?hhPc{nL
zg$a5je!_4s%hI>NwKMUX35R3~V!oE+e6}Lu6A3;(gw!Vzl^97WHOl7mBUT!_8em~#
zO&l}0SUK7iZ=Gy5S~~pEnZ`YBE1DfWtK*)2t2zE}rB_;7?H+eu^$n%(bNO6@o9~TH
zkDWDE-_pDJFRiQEW7}7Rea_=^*oAEMmxn7Nbv=!Vw)1DkFWuFJfud<lk0C|}D-hcG
zopDA5sod^&ZT<dg<{=dkUw6g3_I|4$q=PC>v-#Wm2W<W(?ZHngR!vUnzIIZV$$<x>
zS8BsPZI?Hh-h%VJIv>t=Xa1yiG66Osn{iwLZJeJf9(g7|uhV313yS@zGYZms=&v1H
z!UyED34RC*ObJ@4Yb=suwxx?dJbSo!I8~bBIr-e!5@rt3`+{;0Rw`tTGNY$n#ovly
z0P^-{Xh%aj#s?+p9f)ly8R8ahNzFm|i^&C}+S#9@x;KPddcXKlRSC7ZCwx`GEr$+Y
z>bJY5{Dq^l#jaA}=&x^%M>ZWODk{%!X{xP^RXhKhJJO9n3KwceY=rn9?!_qcBKH5q
zW3mrX8{D5Z9GU?^zyTi_v9jzA{FA>2M~)0EAjSZvDBv&*TZ2(iRo{~IHOJ|g6Fz;U
zr7}XUKyiaPS1lDP&R4M7jYWmdaP~<gz87&4iS$bT37VmkMmff{q>70#^I$Jg{t-nf
z&t%EUk@|2&ZIQ#`4d)lw6z{6$!Rg@CCLD+oqXSV^x|+2EQQBu$78fP*3R*)647hcR
zqvx*2$tV*WB0b%W-d{64mgOkCXip+~n&^QwmAu0EFlKYTVwR^H&<H1K>2vcAOM0MD
zXti3dt-Nq^Xv}LiPsfF)r#{a-xUDm^vZl=Oh<hMxDj1)sD99b2&&vz@;|t{zw(%#F
z2lrm;nd<1;Txm2nPIdKc>u`AYd{QW$q2`I1_SL-|oom-6KhjiBqem=%gU@WqC;sY1
zjaCxeabFI;U3ytXJDi9`z<SQKGtF>f3zvP|Qy=vujEW`sKdsnRUuMZZ+ohm+W3aW&
zsJ5<X9SN7#-4bwDJF7}-pR1^Eud3?zWuEuquMf4x0-kP<yAo#}FaMCwX5d}%=B%@M
zGEe=9{AJ_nKu(F#SR5$Yx$4=iOCeK{(OBd!x!?(Lw&?wct=nqtv3?}^@5yT(t?R3<
z9;|tkTJ2x<lUEZn38OX#XM3QrDJh=ek41Z_H?Z&Slw%-1uqvmtB;z0m>6ra^j<cZL
zTvQl%GV?@;XBJBv=f+cqLXdOzo!7Bh-=uct<cp$=XalC}O`L9;9=F=67H5_v<W!R1
z0nCZWeV1pI4+{b<Wktmk{Ux<|RXL@3c6Y&X-Mjkk^KUlxj!&9%I+dJ2B;{evIzz~U
z`AwcZ8~G$?CP5;gPY_zg{X}9xb<%w2@o`sV&hD=2bvMt%i;~|~d-sh@ZV628JR4_F
z#v_5DU}0TVtEIAaWn}6-liN2A9A6(5-n>F{&q(vQY&}PV@K-@y>DH%JN_-0v2=aWX
z({})$mNYMfWGS{{s{<_MpB$ZZ1a@0QrZ7v%DK0tn93_=k+}~%eT?MNH+0J=?w07`e
z`nW@R0HWL7u<ic-rQVQm$ByppT01z@64^AhXL9tMjpD_Y_SS(CCBHd1yiruQH#i!S
z*Y&!mx$Ob0;U2?Uc9{D)-FDdAoMtsH%{kO|?F(pp+)wA8$<ct5qqH;PzSuq9G_k(T
z9pm$l!eVvqFJhxE@8CkHf65lDh_|?hL#-i8L%Hqwx0f(FTq{e)CPRTX_dr`+uyAR9
z;=;}CG*X{$UN)HgqmA*+<Nmh#W}CllF&>NL<pza0xt9F#o1U2nO>b@QLimn?dl%mn
z4`Qs)9uXQVq#h$Sk48pzU>=bRYn1hVvXPlZPhMYleOFDDYbrdu8U9sY`xeWxs+Kht
zk~yrsVqs%tNqbq%-W}vh?OmEHsw>7Bj#Og_w3%yBV_5S$Q;qFj=2fW(92sGwO=EN)
z(PS=Gp~dnr{(8@}2Pe>)2E(47x@zxCbYx4xO$GTCWkr_U;v%oDw#k^YQUu4=-_nr?
zOhrwF(KQKUo_cXt+*%f|sGXXM`{R~cORg!HTjKH+*O%1~9$jp?H$Kp@a}W~WP>DYI
zA}E9vokw&$(a!xsa#2oZa)x73?8=bR-<;gCs?#3Wvo<(p_f^Lnk)GCAykKN_wyV|C
z@3*!t6!v!wOckklVdvn=8e3brrN!Uik0n~Xjh3oNeHFOpGU|Q5UavN0AeHs)`x)QF
zWUiEv`X6tbay#pKy*(?B_ZPGe54E}-T@BT~h33vxeL+vOXJ=tmeWc3L9iEOQybec&
zC1$H`kGG9rM7K0Xa4ZO0CUGkfo#BHO61Q066M7|>v@~=x2%(n0vUyMQ{J!p<rM{pW
z6-BycdpfN7#Y4lb?!<=ppk^XXS2h>y?GAg;X3#NwbaWVJ(=UGj8d5IisV!T(N|_#@
z!}-!mR`>e64NbF6>+;uir<E<?ZpnG#iCFSiP}lebE#*AKeFkyHZU*m5U`X*mN=b@r
z)_kh4IK8{MyIi$^Nf+1VSLKxD)_Zaf{$D3+VLpz|nsd4oV>o#7#Z!*hf_}*Uaah|-
z>^&A_pT#XvWGBt|4%(PYjWvqZfg19{$}^f*?Ct3ot_+p8`Z_mt4E5L}<+X<j?rLgS
zSGaTQ(DBu+Zd+?b_3+V=p{cT>OJYw}LmVgu-!k1k_ab7iQ=Wr3&X=*J59s4@CBL{|
zPWlT2Es^FaI%&pew74xNX5TI{k3{U%IF+Zq(emr&KyXX9_)^k4>h+C!lF8|C!q&H@
zBjUBSRtIM5%PhPGkK!ES7s+dvab{Co>e2eiL82y9W^4k(NS&WGQ8y7DnYsFjr{JA_
z*UI+fEX`K3(Ec3q7p{S*)Y7yLOY4igGSC+Z4M(%|L`ylJUWOWbXCO}|aeUdZlGYD5
zk9cs7S$SPW@+ZP;p@YntlQ7E3wFuP<9Sn0uo2>~@psz(T$5<9I84D9v-h@`?%(0S{
z!@ByKSD}+NnXydSk)l9JOiK+m>f5GMcoVN!xJUj6eO<tE&y2_}k~U`etOL&mX12|S
zo(+i?AAK}g^W1abIY~4oSNRdV;F$feG9Ox~BVGh_PL_f3hMh8CcWTruisvThi(V~U
zm|Q686Z`x6k{{|rU%(S=pfyrC^~LE<U0X4`kmZ9FCz8i?*DI~X-<$lK=%%$Y&Zh<|
zfc^ah+a5@l`8Z@O{KFH3--46;FU2TEO=222?l;4kG*P)6uB@<N>mZ2>V%6j>2ho?7
ztD>UDQf}^7JG+9OYDa!_cJx60fdO%>)atD$^(U_reX&4&q@qNK<n6KKcj)UDVApuY
zIdXEK>Z;|AwW|8D*^e8Y`4)3wp&#mEokcBr=XG1T)DfwKhUI`V%=#*6AOD9w;G}c(
zn#I|<e~Qlq10!o%N0+LD)}dHns;#@7Wd2*p7gsBfJ>Q&M&h?D9#5ayg*^YI3drXt<
zR3|E)$9Krlq6O%iuYS4+@d0aL@(|b+^`^3n-(m39BwLo{58PItimacI>S8i|z9%&u
z$15j;@;EzwNS}EZUU!<4y)w@D($2k;G(?#Ovc{#Nno)@+=Kmo*O2AcPbg%Z}fW7cK
z-#?=0>L)&bL>{sCE^d)Na!lhJSWnP7e{r@7o__x7Q#rLZmrE%+QWAZo;H<Bdd130*
zv;Jnb(t&`B83zJRXUyZYxj{c1@sz^>HS5Fs(-w~`>w~^JC!>eXb4;dItD~eQx3t9W
z&ON9bI`nfH=Zi+4$;<7`F|`F19H7=Vn0-Lw85;l4>I6rnbygNnOLYX>SM>QHu3l$G
z5Ae~C83vXaOb}XJVS?1T#nE@0ST55ij2yeT4M?6~p`UI`yeoBf8%Fck(cFqW)m&^2
zOl}`Nnp>G`G!^DHVSK-8?Y6aS@P9v9BP>`w(j&OoYv3N&;~RrVq<M78n&M~vOsk;_
zTPLi+@|dH2ZF^6vv%S{oSP`4t8lKx;=&6lV+ItU-4b9nXt+lQ_TPBV#fI%sS5zM4w
zl<d~56{Mo3bXa0OR5s)gsnJqTgFvN<G18$q{iJVp<79PfZILzK>IgNBH-uLELp6?y
z8he-9+1j!;;fdM3Rf#E2;c(CBCD>q{XX>hG^Z8pVJBob`P3t3(^&P$5ZdYisq4{8|
z6H|%3;uPHgJ5@@T*VZG{LW<;e#%RfhRWa?cAu2LM0vz#;R#B0-#6R9%n0!fy>@y$5
zzpoiF<{F15k{7hhNAoTD(A}g*`!>{=)+D5MrR}GL+X(g0de1`rKsEk$<^J&e?#`-E
zt;i{Oy6(P$dtJXNOukVcHo<B&S?`E%NQ@P3+cpNDzcIJ#-(q)knR5nAMsXl-;NaNg
zFzR%n-!Bn=hSjl+zbTkKSIX`RVpndt#3mI971DYEjZW2nk9#N>*?igj$nnwWQX)K6
zXl$Gfw3gOPSdHe8#}Rk6F19b6I}|N+jCW34v@PDbe|q6PBcb^Afw|$M2QBWRCQsYC
zo{ss@+(nb!FyvFON0qJM@^p8M9~33R3Wfr<YeZotVi$^8pngBDNbzFzWU~}2|LKox
z=vsARJ~$qVZs=URYThqQzFzli$JXxTHea8M9-er_6x}qu_QEmsnP29_HV&`3Xw>*!
z@myroZ%kfn?AmU`Q;xVy?b?n}{xn8;J7!KP^#~XlEu6qdnS-0?U`ni!8hSA=>7>d+
zI-9abM3OZ)rxN^_-`<H9{L{A&%v_)Gwo-AjLx0=Pb+g7w-y#8((VamBzJj)p`@t$D
zx2)J$H_L}*N}3L*%rDO@=GC^$_sgR*LEg##O4(aTW<VN~&zs~M=@-;I$pEz}M($ay
z781>ev(Mz5&XUtgP(PsaeLDNmWarsDe@@XOamH<*W#3GVzZ5-L-aJs;B|0~5%F6|N
z9T-buiyv&4Ao5{+fz(bpX=}hqkQqDW8n%6MY~57fhQ;~yfwmO`qtVEWc(Hx3cd7J=
zM;>{*Cm28%%97qhNpzPm>kZLJ1PYwSM0h_Ruf#~1TcsGqt*h_yg<_j}SI!N}5+8Zw
zhXt|b=xnIJJLHGWeEFB?J34_>#^1`p$@U=PM!c?NZAo9)VkJQ1mgW*244`#uM=)Y4
zFEb`az5nP~(pYVGZGN5-C@3@M6*N2(#o5!VM-^AiKRKwhv^3OOo!ge9cID)PQi`NJ
zOL>Y~o+<0%8hyk|A$4`5yDRVFl9}l;S3ymAWx$tzA!J*AUI#J+mE*IEd8W?1XyoJ#
z5NUFic?n9!0w}X&IyWz?bkY|yR-CRpT5)z|*3z*qe|=ZFCR%(7d#bkN@8vQSqp1dM
zA&<J0JUnF6Yg);e$VPeHKulG3>TdL%x(odooWELKEdE=bzgm~}pJR;lKy$ebtqGl?
zyU3{rjtI4iBZ74Uq}Fw05w)-@UnrXDQs>UCF?tu8dgHkfNyg7hwf2_UWUp?sk2iNd
z)0&&=-S@g$hM+gRMWn4rHJv(Il;J?vs#l%1X&T8z;M6S`$?5aBX%m~I3$qtJ%?!%V
zBMi$Elj-ZU>?>Q9x9FbrJma2mFBYtdv444ij*zuI4U@6dGFP?a+=c&Q$&>IbUyEa8
z&ziJU6QA&*&KlGS%|+_BFx}A7g-^J^NM;F4OBptv6e~|JZuWIMb`{;9=k4=$#hd3^
zYpV0_FWOyc_m6HW+&0&-b48WX7qKsFiS-TjpE20DScSN@s&!5AU2|d7*9*@32h1(R
za&vvD<t$jRw%OF&&I62O@Z-ZXc^$JIMpL8LHQMEN)D@N$*~=n5%`5g4PRuw1qB8kP
zxwAOtZ(BOt+vqg)VqReFdw?`|y8RcnAwC^fz<LOY0zM1f4?AQtkH-}%MJ0=Bc|dOR
z_jm)h1LAXBgeSzcWWAd%1$S&{>wk-~A?tu#xSdaTKyHnwcMrQ<!|vqs8BZ@J-*QcQ
zJd-Ywuh9%25qVGyZb99kEzIFINw=U@GzZp=)Ynv-E&2XLtuy05Tcvq!U2&%|rzbj)
ztQKXiS(j_Zoy2X}6g7j*!R(WZW*aZeXF2z*2;|}#fr@}-(~94?ZWDc1*LOJ@dg`uD
ze&;sy##@+~@UqfgY0Zn^ObB@tZU(;-^Q+aoyyS}+XXBO>sUE1arhNA^OGWjq0qv;V
zkr8`Aqe<y9=AoNW`d#8)lwLqF!Q`6(`{r>+woRCBWKHO7ZCHTO;zNq<Rh<rOW_C4O
zpKJp0cgboyaU^d|q`Gmj(b4ExG1#0}c57R^%~|aDbH2q>s@0EUi^peOj{3oHIjR)6
zIodDo00k_OQ+5em=jGcfQkLnX?^<R4rBKYL)}YUj_1M?4m|9`tTwrbSIp#+_uVC!|
zJH|fSjZ@1fU7pYqiKPs<9ElQ>Db`Z$%(oTS^|)Pats4dg<~C2)wAqWT`8HQ5IO%9!
zDzqldCT~O2hBj!o(0ecLu6N~<-s=yv;+s#Qao@&hswBC{Gnu$rN{Po@*fMZ@Ya$w6
z+0fwKH$1WFz~L@2+;vVO(h;g_bH?YU=5FXt{tAUqJOkoxwNv|binYN>TBA*Ue`jL6
z|BRv0HPx-wp|;RiU|^_UxPse;hxT;EUE#W>#?fGGeJJ@bm4^>69z}WepbVcFTj@?i
z9tTnFvY(r`##M6)ofXFmj@hqi$+`R#YPZL(LFrhZV#mOf^gXrGPfIeFe}ny;ytNL?
zyJ)XIv*65H)Uf?sEx3&8Sbo)zD`u4+Q{RF|Qwum@Hq8aMwVjnW*J!1rZ8idWZD$r9
zi{$>bHRo`f@$I+U54Zo7wHJ&D0bMeO?ybTZiBYo(c?;<$y)WyBt#kIJL2I?&Zmsfu
zS6uwQ_a!g=vE5n|s<T#ypiMX8{b$iu3plv6tC4;W9}VdwZ~#O&MiAOO#RXa|8AU(b
zG~%y`jIE6}jRa~U<7@q{-iW87Dp19LM^~3tIx0&morQr7Q*$4_YHv?q{nXq?@b_?h
z^EsFHcl1@qH=li3|H@t=tfkcr)-oHqo9}l}J`8%Wz;cq$hT;Kv;_94?zBR4)r22#y
z2*@>&SpBV~8M^qPxOAbvE>uxlXs>XGb4$L>7eO@QBuTmmBCl*m(RN$}kz7lcL5$-v
zi2M$^3}TY*g^-VYF9d9Hw7_$K4xa)^gE#^YVn--42azFJxSw#M8**?I`Qf?d-9e|&
zi0{IhPFfGa6qPzk#)TCrI&;gukaaqIX=%7_Af~9DpIJ)XVxdu+eN?=5f;`=9!4#<r
zplIY@@5vOE+B%NZB_<Op%)j2nU+@mpoL_W7CxXyjB{c=5r7d;+?WWGp{vZ9$Ey*j(
z*G|3fZ?3Hs<+3I2<&Atg3v~W;1ZyI7dlcVR1y0X)EHR%l5P9=ID6f*5zFfav>Wbpw
z&vN)lC@wxPFO|a8I;o4Mc8xC5jKbb-aX+|hMx;pm-RuR504aa8)=u!c_rq-yD{tIl
zR6-%=u)Er~F*Lp+x3kZvHZ0{e40&shUKHXT=K-a-GCvaF9p@vnPFM2zPJ3go%W)<4
zn0vw41@D}qeNWc3MwNX|rpf8RL7A3vY=~+Kr-S0^;z2Sy*3@=8WZW6bN}@pW^%O8C
zOYK<;hBxGGY@BUeo4+pnJ9g##4sw+2!KKKX&pJCV<jGTNLX?v>3}{T-xSt_tY<>1h
zM`NMa-%$IKwca)qZ11d1G=)QA-^{MuqDo)!v2v@c+Tr}daJa#fXsV4l>r^E-sRkPC
zQwXwF*(*5$zfl374q&iU*ixs3s5~`b-JzwE<YOe-Aixt*s9-epL6Y=M!UTlp-xc`!
z{Z%!=uC}QSEi=LL*12#z9$ySs4tg7VYsMO8S`#gf-oB=-ALtCbM;-nlTX<0X+845g
zJKQ$s^vP#djm78tYP#bcYub9l(b>Mb*p5JOXV=jAu~1oGMZ3%YnQ(`_I=DB{FiB&i
z31j4k%GKbx(D0y#63?WY_c#D7`y#T(BIDks$*t{?F;C;<mNx%ztS%Jhw6J4G-?~p-
zFy6JJZ~d+3kM)imy=r85%_!2LHJHCxlZi`|i{!T>e*jt!^LkCu`?ns=U!CYa^RmJL
z@vBIo>*RL^XxzMo<h!5=@3|AH$ZlO)<LDwM?j6{A-R72PyJOJh53OlkxwdKL1*=3w
zVR+&E?d!s!9%n<VuW{W-`{u1jCWffYzoMPrLzz%>&`M3^pw%!Am(Ud)?GvTkqu&_Z
zRUfrYwT-M<+*P<@gFh0j8?N)O+BCmrdaAv<cVFRPbHEjw?u-s~HTKpw#qG9e|NKzz
z#!6$^M5K2ej7;!Yqw*)v_Ix_!%?VX8A=tIxCFW1_&Mc;JEyN%4#OB5MRfVgP%a8a>
z<z{0=pyKYB_(<|dU*9+D2A%d;6$%31#_k=I=E!V?PCgEicANEa_R!$wx`=hKqiG`4
zA8QCXobw`B^oLkkQ}x7_;X}BiqtO{_nvM4Ll$O<q=Anmj3s<k2Iou1Hqp0PN=qtYS
zO^X?%u7b*Bs>m247`?zu=_=3f#;q*wXry|DN9>Ew2b<>)4z!O}#9Td*HT}iTMd$eH
z#Fp=mu5OtMBnDkA1-9oqw)JoS%sE4Cj>fLx^A~-dwR3&@X$%<lq4RRkQrf!+!w_Ay
zg%5vj-PGZQ<oAokb@@Ba9=4tPpI@FIifnr5(Sw+UPEh>|P~8BD*O?m2=ws=Br%y|^
z33H`1t?61I<QSPX(LS1f_}8z(YdV4>etUgvO{8%$JeH^k*n76sd3!pVLSudPo`FE)
zus<?1S?HPUXq##;GupfTiP<K{U}Rva!C2JT;p$q|EOu2*MQ|xxd!#%0^}3FLH`-Wf
zpYBM&YNi-ULFs>{`qv`)lO9q7#RQ|1^nP$-DOxq!i<N6*k*ayO=#F@MJf$&otfMco
z)L-OW<s4g`*xa31K|L<MEc>>Q`Z?Lq>ZGn+>2<H2>)$t!*xtYGv*%z&$eI5<sQ4FV
z{(r@%{h^s1iTIQ+II}(4I390k<FvJ~YkM!v{O%pSr<?g(@G0By70s+m@Vwu7@L2v*
zqWco1o+kWd$iVac>!9SH&i764-`L#JqRsc2#m4z_=SBWMnD6ijlJ)-IQKm_0dz-W!
z;z3V?5|a`sAfMsi@%zvC-_gI*@7kEhJ<}AoD-7F^{OMieZ(rTi{<-8cMdFhDEysp3
z#ve-1#ve+6){TE_Um5>SaEUhfIj=GtATEeGr0ca~nnqiwtFq{k-z;x5T#vl4tID-s
z#tRh%EuCh?TJNr_v9JGZxV*<xgCacjlSimls^u~99HQNZ3<KC}YQo>tUMevgN8Aze
zuYwl1gqnQHP!IMC;Z)}Lfm$<e<NhK3=J;WeqkIx4(t;K;on|TJyI0Oypp)15?KYd|
zyW*D{GgWfDUAa7N_!Be`ewzhurrup?S&FZmwA#FOYqjrd8^y&*uM(}Z)&%iyy0LXL
zz7gFdT}{yji9VyogZvtcD^|^!3xpfgrmjw3IABj$8|xOD$5#5gdqc)l_kJ%r)z#kV
zZ4BFO;d=k%VB2_C*KqhpdZ#Pcjnpd!#9w4>{Dt~(bab&Xt>|Xbev?-I5ZBrqs7qJ_
z_JtlSO;DuoKc)s-$Gba6noW_Z?pT*M&|<F&H~5u4y>-HHiMZYHXY?%mtrjx*n=i4I
zOk0}7?H}H_@x%Bs_+5Mmzx$MF{vy-ZheIRt5aKr#<zDh)OM*zbtt3+c@wd;|>SsDi
z!)>^nsM3x@Z#<6CtyMnjh}~9cbK&j7;v2$<{kiluI<h^rk3hbCacN5%3b)$pt8MkO
z;u~JuNUhCkb5SWYTBz<Xpl+Xn@Cl5PS)vIzmHNf>u3zl^WgJrXfZ-a$LB*`hEnju=
zD;S4BM4RCtN?70$7PM9c5C`{1aWCCMk?<$58PxWHJp~`LU$=Vr6MZ+;ee6@zavSpe
zLeGPJsphEt+SQ&t1;fZ-{RG`R1o=J;TNhD?6Zk;kD#NWzA>I}5VH~P4@I}H=rrYo<
z+}~IY`GM6d7B+>yEc%ta!Om^?4QwGc`3od#fw-{nH}N>X^BdeEpYe-wcY*#(&V`x3
z<g7^ll3SPgi}|(mFXExhU&M7(5846>s2*^Tb=-y(qR{Yd@m}=ikf8&owhKg=-GB=Q
zE{5;GkdUgT{Envg2NQL1Z(~PY{D$tZqc_kUcJ{)>gu6AD-z)B3et=qKhD`Moi0|cJ
z5Q(6+X{AeP!2U6_vej@{c>sA|ShgvK<!@8zm=BOjB$jBjJ+tA$I#1p4si_mq^=&u*
zVJhK`boE982{N-72AAi>8s(Ry`Pihj0k7~4&bIedITL%Qn)e^bt0=yE;4>@F`rbD-
zRbP?(?@xqxZ^hyhH)Ac&8(!Al^~cLuD5F~PDTwC%XXKTaM5u_nYpxK^kGJgJ;<F5V
zdgWQ)|2oy1yS!IyQoc*F#s)q`5huA{`l9*hhmRE8qHb({Ckb6$EdL0(d@>gfBBa<9
zwJrbfM~~#*@ugduRi*iz&r(?q<l2f{SOZH=0LPqE6-jFY|3Uer4e|dqdob~dsQJop
zQ(0wMZLq)<s4(Ug=9hH$g!5|xuKe7hynMgAs-m=_)aIzlzs1*NpPC)9R=Oiq-tyLs
z(Yem%aBFZwxGkP%%x$pNOwNr~RaY_1kAs>*Nev&KC~1(2ja+G<88rK)soG3B8UNoM
z%c}{v^Ky%G3w-Ws3#zs{s&PtKio`~XF|VMYw7dJ3=1?2zj%amHpzfNgW`Co7YHrkO
z0f`<<>!#Q&qCUm)gV<^EY2{HKK_V(9#62C!*<01!?|g)MZp*UC@NdeW=vP}=v}{Z4
z@9InMu<p7R?+N)HE;zUR;CSpT?JXtaEqpx--c$MASWGx^TXgi~@5GOiZ7BUh+*bc_
z<$H!=;$Gkrv{!|Ah1q|%V{~o#j_OeE9`hbwASUjqTiX_J?l+!M9BkNTTZ?yhE#ED^
z0s9ikUkl#CY{&5r>e=UAU37(g$aA9T%ER-@K+aIkt+ygM`E6=Vx%LihTebwf!wJ7=
zrnk-KxUVX@vZ3kf!Yl2AZWQ5Yyt?Sh+WAlB44EEyz%0u$Kk$HQDCd(TO-q))E54(A
z2~p^fzUeuIJ**IJGX9>FJt)?sS!>%@HUFJjQLorYQ4K3lR3B(w<8G`O@%W;SNFw6s
zZ87I94Tk3Gf|VVPhSt!~V5lQvGB-``cPDzPuyv!oyV}{*6L3fD-ey;guL0qs-uQGy
zQC;caibh9smCNt8H~E@-LtR6*!rD?Oz~ZL*Ca0saC>W><dR!I7t)PE$`EKl*q<g^e
z1#)1gzyepUZKJ9P-8lPitGajf%w06rx@KPa^+|__23B+~9Z4itfxlp6hyX^0Pub5L
zc)#I;%+<)=L>h)q8E1T4;4kEd^vC(Ow*$vQ6&!m~T%qUxIO8(^q~U*4`IYx)<R7Q}
znilaz;C5R3C2*{!+5GM`WtLX+cr4LZ=qL*|*0eRc`)hoT4XtB~f!=|(lrr(%95LO0
zO-(2qbB0=-H6dry#9(Bir*r5XU7vtI2?J=I@)eTr6vG9t#fjT<k6f&LC3Nz98e5x?
zxKh6pAKG;3k-R(Jue>jGas~ZvUw$0?{~~%H{0!X8{{AlHh$;7+JfHSUys-Q@WCQ<B
zoGhx^bB|ooeInMZyzk^3+D-iMv&`vu#7mCo2g}R-((C4fA3jj<)y9toHO>gm2fGRJ
z#)GLhQrwZ=Xv;hBu|s)pd}*QSqfHu@q&I|Nv#^RScmp(AxQ&~a?#Mel3-r$B<i*sA
zV|XTh%Q>i(ADTfcmw;Z{oLoscK&Rm$VNJI)cc}|`ZV`7TFQ#^aD#MTE@3Nh3c}He?
zmTqYlm!bgG;9343<%7z#SjV^x18i42oecx?iMgYd<)n-?k+UqrL@1hO&l!qsec!^|
z*~77|SImu_iIXIDj!{TS`_9b+E4_V_9(PNrx46OP7z(vF+ncMa8~O{zFI<?q`q1DQ
z{(AqR!N#r~@97^u&_{ob9qijOH<?(|>#VPImHj`ReFtD%#hL%kdvB|x)vmU$w)fsw
zE3L|^cUdlyjk{$V8(ajq00C@6C<fC47zia0f`KF$V+arkNeCrJupxzzOSt56cY(_h
za=9d=0`~6xX7;TtJ6!JmfAHI<o&9F!n{Q^m`P$4hB_=V+O`4$54vBa^-bs2MCM<$~
z7jq0<CgQ>C!<GTMBzgZX%D&+}`Jwb=qQ~ee=G()8&cBc9R<bpn%JjK+J&=vsT@v6p
zLi)&8z_aOTAyK+_1`=m=zE`zrYBdzi50s3->M|sw_gL0&^m>0C8;#{ww8ci_`4uhk
z;pkv{d^pmt4ENeSR+BAc^fVfbCac>*`l92R)(s{4xv|TWS)6L0%q&W^FYGwxuo=CI
z$-%*m#wIvQILSDf#o3gHu+}%zk%w_b*Lz*oM0d{6=oR>cDGKsSa~tYDRISV1)YWgQ
z6GB4+odugqxX>FA>g;5e2$@Xz1Zmm1XwlB{u^Y~R{q^&2K<QDkp1YNM6frsNti___
z1A2>h#Ls8ZM)8LD!Y9;z5F0WA4L+mQt5Jv5j-GULROiFxp%$mUKB%|!ZvP~#*4wR4
zozbRmY*Lt&UR$hSZt`d}wnmLXW>WdA;Zpq>2m|8`*}#1T7+dMd3uI0b#5zI^G^aEe
z|0f{HIdi4#l7ur{hufYUEuMhg=x(x@b0`1MIbf_4!h?fdEjFicp(h~J+sKCQLdTkd
zMeAw~^+!W7t;TIM*PVe74}501$Iw4Y=oyp`&W&7pvmgcx#_cCyLhdas=<bg%E?8aO
zykpE&j(idZv!tb?y|64DhueL+{O2?3<|OgT+1O`$m844oz3KEh#SALc`OWMqlnG$G
zAli$WTd1&EV-nd6WL7>?y_%g7kgQvJ{o>(E@10tE)nLcE7H>+<o7&xp0cU<Vl(cdU
z*^J5<a`!~@vrGH0+S)z1YjCW?w6GM9`x@-pV5c{D&)7|8Z+`sKBNJCIo!LJS_S%9&
z-LdKZa5nmOqFC5EKC-i~wBxSj%P;HpC!$2r`G8f|x+EB<dn~B<MD20SG**bZ*QyU3
zF+d(8pFJ?*V<T<B8|ayASe#g>o@&n)_u!dSFHS5{Pj}~f_I5AYm)Q44;f}&{_z$l)
z-gtuuchI#Kx;M`FvqSd(l4OEhkCZP#i(0^Ik@96RWdTw?#b6#4Qznq>B9?MkOj!z;
zJuKH_^I)!LDM!SVvytm&mg{jb<!0o%kHH)jQ&s?GFN1kPOj&}IJuKx(F=ZN__-na8
z0>eX+9b6x9p5|JSvK1*0)l$g2NO=J%4~r?gNC!#stC8{*v79{Vko=ydJXKApykF@f
z%~*Ru4MadqqU1tlQt~s&kC5`^Y6|qINg`)3kBTWjMJ_2zIV`5U3z#~V>#=z-7M5~E
zO!)(H*;%f~t0_36Y?8zn%ux~MJ;2m6m?y-Pe?v+gOL>x}V3mBQvK4FO6HL0zd-K_R
z){r%L4eR#oY2CZ`_5<1LuFD?4Faq4402gA?d){rZlWbi!3%&fE$^%Hh3^DW%Nv2>m
zdPs5@?dB>H$v23bQcJA)Wu)w5DNnJQ*`6%eO>V^+fzc^yOQJS%y8qxnvB#Y3kJ8V+
zpe^Rmxcuz1epyd))kI=hPh#~%B16~ML`U@#(!nYqO(4lBL<=Hy9bDYCLJ>@wlM|#h
zDAQ`nmjDhzBf&jlECRStbHB{_46q?tPUMTvPPtr$u+D4i@aIeGXC71qiqk_rySrKM
zYxcFKyUrWI5{HstcZ#4aaIX0>`aE9&3a+ljqHKOmx?dYsN8R2`rcD{o8(sErq`9>x
z-I<JeJi+ezl*?}Q1l@4`n|)0dhdUg~#{5Nfea0Fn*fGOt6hI2Clrk$D)-bQ!z})C;
zYA@K;XchVlN9F(6lWJ488g3uoHud2a_s74FZV|EVLf$I%Ppwr{LB)bR-zBg=JpeT0
zes^oYWpwLIx$mj&vo|>E(p}O1DvtT6FVv_uJ)b>WA@9t``#}QmAJC&0^r&ZcIA*V=
zvIoj%-A&DL)s;prTIOW3#c{hm>9OmR`homt+p26wz+($1#_P0MTc$PCb#q%f7jgPb
zmM<(GoZj6L2sBTQH(5Ip@jf3~1dAnEgcd<=%|hL#@inmh4_lUxyr?2lp=&(aICE%0
z*3+?TcZvGn5G_X1z>h|Y)im}N%Dd-`tTm5LK@?W7BFfpev>;s^ugMK`c!|b5o=f5s
zf5dO~Xgk~%dnjmjXHu@=aD7`MQql;G0aLm&9}5&3g~qVM+v0f78?`yT%{JewLATeb
z@#LL8P)i1EQZ;Ic*8M8EbhXe{aRHj6);f>fkkZ8+_M`%YvWJorDoxIwZVQz>px#Qt
zJAG!03^Xgh3Q{c`Z))yHBzk>}cA!_V@`U6U<V~uRowB&lhM5-WOwQh1ps&=RnGCPb
z_wP8b!?^ehXNA@>|Ll9ncSy_^WO5uGJ=ECJ80<%us2;f|4ND$4E4;>Mp!s*sqHA!U
z#9t*#!6m3(G0!mV(dr#WjlrQXXiZM~P}qO2+$32ESXht$#*%HWbA<$<(df|WOkF#C
z4gO}m)@-($v-C7hNspvVc0kIbYf^@&ka80&by?hPLD!^eN){>fwl_IspK3}5xmK~1
z!(vK1VAiu-kIjQQpQRiTQ$~?%7t8gyn6eAGu4FJr#gr0YHZYhc#FSQ~tY;}tiYdz_
z&l5fOGs-W;6szQU$v?7`r^J*b;Uw1rYdQC{n9?ZutmH<P@{E`=O|B$2BjQ2Ey~=dk
zrTD&&dkdDpA2FS__PdUHZL3ybW;cL9FwdJm7rOqHNG`hwyLsycb-a|63FfwXbHQkB
zaB3X|uajKaQS98%ZZZeUFC;CFl-qudMV}aphWr@KOHeaT|AqI`Q<a73dGGVi>tKNc
z;;f<@q<>}%)e8-Y)kU+0H|3nsY<6K1mAFjitjX5kB3Ggs^45jDdJC&G#p<zIKVyM=
zlt^ehH=^BCs-G{#o*~A*nIB3n&fB9JPlHwGDL4~Oy<4r<WXP5M9l5n#2CYxskQ(yE
zVvWi`gC4C|hH@X{SIxCTbjR1Ug<AN-9KoIj-jrZ<g2L3cDk&Gt#X56~$x@{lTEUPv
zntFDXlV^|&wb52=M=Q)C&BWU1%#wTOt_28!w^jMVkBdXOMUhZkr;z?Y7Ec&_8lACa
z%@;V*>~@yOl|wxpE3%%vL+`1}6*a0*z3wH2THYMaQ;MyC>@>k|q0v{+gQ^imA~U9I
z2fv~ak;hfaLd<1@>Cs@5srr=t1!U4i5gOH|4c9qsxkULll+Slc{zz^C-cEWhUE!3)
zw@{Oq8N;F?Gtatxo_PF}z0_>gXDoqCU4vk5aYVD3g$X*~8WKGXi^8Us>S$~6I{#=g
zhBU@}tVL&T&$q8D(qZ>Z@Az@68KW*f9P)e7swF^hA4VM{UusvF+pr{)<34h#KX~Nw
zB^YB`!J2nOyaE?)3(6v)wixogb>Xnl9u3wRRj<Edu1^(z&PMU|lK1(gSSw(aMu~iN
zbXC{zC8c61t2UUM)CLRk_mp2Cmp5s&X029Zfdup`$ww@&n)(n6l!a4u0qP!zFuxe5
z)uxv>s`LiwP;pq9+AWs&kvhyv9X4`q`Cy`z)6Nwvwvx^*__!%fRGNq4%vx3w?k`<F
z+153zp)D%E{=hZQ-#xShc~+Avfz4WaXI-`ODk8O5`y0$Ao?B4FhRFs_E|5lYrNyYw
zD#`WbS*eV#CtO@cM-AwUTgl&|7BNa+j6|x^it7=hF(Y!7+%<ZalDuFp*a9xWUbKb1
zvQS%)<HOpt1y@vaLNt)4)bB}{oL-C76Ad<5kH1paq)0k!KYs;r{b_VWt!LTXm{&8M
z7_?*O*JLd?#g65<aJ6S?+2~k({p+vPYvt9R6*(h(6sPeFx`>@_n|M9nlUowQ$KsGH
z=W@H8d6ygfqO-In+t-DUWOO(hj^QJO!Oy|JLdcE4v&#48Xhh3}@<>e!a~E8&Y23OZ
zNd!xlF}wujfeOQ;jOF2kfL5;yr5z6#syxqR9@;`4q&&}%WL&m7-dj-{A|L1aLo@<o
zIFyo7UZ1oz*6HL*nK^2VP&#LuUD6y+oZdG<)dDyUjoI_FQ6UadFqdFW1`-RSG67rR
z4|_U|-lmw<;cj+0BRwfsR_{;;Octld<PY?bE1hO{Q?uQuwl-<Q_E?Jr9MxdgYc2Kq
zup>czU>i_lnD^5?3gS2v<MSbJQiWOc6g?mJ@|-8B$e2@2OO?|IIrr6T<f;acKJHRB
zslF8BmM>2{DsPZt^J`SVP7cX>lzb!iI-C1!4WNEGvBcW)b|j2BA1VfAVN=2uD|ROZ
z!P-Ku6bA=pz1{xv@(T&03+0^+YF&%+AY<#WSG~&fZ%?%u>iG1k;t@*Ar)FlJD!%~O
zZI~Akz*25ngRR+=g0$1Gv9{K8*qYg*mI{GIEeD4hcrGwb%Xnths%Pj^e&Laos~$#K
zZlvx(S+q|JL9t>w!D%_}Tf2%@Bk#}mT-{f+n}tvpx&F&{_Ozsi9=va$JvWa0ddWu&
zZ$!_X;yN^7z1jjb*Jm;6<aH{0SflJ{wW);Is@CT;!OTYuVP1&Y^knF%HEW(KAA(5-
zrDcK5YLN;wOqViMc~<uQo0M<MesBm3!u5xQ`vbZ!VGAIy;y2T%JzZ6XX3U}Hl7MsK
zPQNb^9!)1&H34<Nm28Q`Fe1NhD@CJ&VV@z;)LaaBTJ1js?|dK9%8wC=$5XEyDmC#z
zY)4vC7pM!|yyn0GviiE~P~$LJEkePola<fnx9TsIrzI~*j*^2cwzxVL<YJJbIKDR1
z^Exh+AE{I6n(B2*oZ#^iJC!5a+8vxbr-RPtRg%Aw{b+w3jXBp<Wq&MdIN+#SF6fH5
zJgRPBjIk;51#Oc|%Il1E%^s&c+hOJugh!bDincE(R2kxS8`X|RTT*KbyR7!s2x)%U
z=*QK!#)r%AT0>2NF4VaQBl#T6O4BJRt&lzacodn8F0PoCXwUP-lu~$88VMLZO--h}
zJ>Qd`96Urgo5$4&DIlQ@t6H-Ss$ji#ptoaX_Ezxq=1>djp*(OC>TxiBPInNB+#5o@
zsHTFuq8@OrLanyK(!#n9q0JCAH(5I!nLN+=F^hC<R!{Pc{zX=uF=`|~NVGO{jjA?H
zU0B@|&#BCH&j)nP;ZJknpwVcC#KvKE9VLso$H0HFQ=`fW#5yVet;#oO-uDxoIOr+S
z;ca*OVr~Z>a<nTQ><)Hj0zJVPj!X`B_-$cYVx8myoWSV^&63n#QyqfT*H>Mn;O=9B
z6nuWPK{zbBCPq;*CcHy(h0B(VrL0A#Gou^vj%b|Le6+>d>FV}v^LB^h5l>GzzBAIL
z2^ixG9i9GClU}baMM|Cs+-Lp1ew`_(i;gC;1@=MLEN$gh+=2dEcK$HXnPacaX-5YP
z<lZ?3>tH9&%H=odW7wl$8jKePo#~deGrlm3yP3S5#*Dt`O?5@POVPxVHvQ}-WyYCu
zq`Gsyd^8wu4WuU${QAwxm_2R}wZ;9pcy2J4o5~66DJB9ws3j2VHjN+5V^=P0-E$`S
zIV3QWu}_IcySe3pa%f~--9k>tuWrxu8}pjDvoIoX_txJKixa*+;k{^>m+~!AQ(V`-
zp(W!9H+!ZhbYWvV=|4Lv^rBYqc<ja5OYd5mvp$|SUurhUJKgsx@2$T_dF{#tVR@s1
zH-(McCVq0Q>Yj#sRrk6chzvwY-%)p;&)?@dTK-0KAo2i8$N90G0{$CpjixctXb;o*
zVZ@;_NtNwTQ5GI;e9pxnkjAB(NSCSw=UQi#dDG%;?S(!=u`%N9+Gzbqc|s7lH&w^5
ziNo7&3HYb#uedaX<43e1equ*A!ttEJty3|LuPMHA#%)e|LKt@oDj$%abN8XO;1DK8
zR0JN*b#9OcS|%VN=dp-lEADYa-(+NPI;KzS{ds*->opI!T1?H(p@d-rws-^wqv|cH
zjniElM<T+e&C-A=t~U$i2RVx-r+4w^l42|F<X$dsL4<7O`<44~69{~u^DR!|Zi?!#
zuhIdvg9f<0(`g7bS?a9nP{BAfUEgOiSyv1gB2AVCo5mV(s*D%a@0rx5`e#)2t#ZYJ
z;r9ys=vkZVRYip|(C!{CRwOM;)8NWom0LL;Bije>4%7*>n(8WIqiapCwH%sXArO=!
zycw<6A#jKX9Rh(>(UFl$Mw~E!SnEB$puySDs@B}+DVhU;r5PmKOn!y+R>U#?gz((`
z2HPQ(dG<i}br*j1Jk`eaL@M3Br!i#mHfzgr&SgSZtUp^?e<4{po+Llg%-lkhWnM4i
z8l-R_o*MrMt*yq-0#!`NPo4t?HeBc@dW}tl(y)A+YKBLI(-PGHA@e5$c|`SDj@z%i
zTow(`S>f8)8Ir2qnvkH<DNoG{xmFR^xYhC8A|Iv(>~+*~_a1izXz2tM*?m1ac{a$i
zGmr}q&guX3ED_pq%qK;E_L>SfjvDrR?~9g%?t%2Ea=2kcF_Ik)EX#D}29*O1gNniQ
zuy;kOM>(Nvdqy#;%DDtnluI5ta`Fd%^awp}DUsj|AUuJdz#sqkM>3k~2?l$P9RenB
zk&zRauLg`|Xzg&|B3_=l4)v56IDQbG0(qA5W~hL$uQ{fMlp{E;bA7w2RXx0^Bb3=~
ze6qW1sk47&<J07!l=RT>0zuB_i{t)}xRLW@t?BZ=cNXCvtb7d4U}rvPJG`%8-zXQu
z7AN-6rZbI3Y(Cxpg2f*{%BlR~mH(+e&T06MjRT63VaU-r-LEMv>si~bC~a6|XxV5H
zf`NS9HwC|^ASajke4ju0F3EU!5-k5yxl97(e+rbpi+$+dE$+YIg8g{VYB(%`%Y)DZ
zf*8&7;-L_=L0u*wH|DOm*8xmZ^o-FcsBacJyVj&V!Nx}A)yiwsz3Nfr*z$suv-Z{J
zIvrM=x)t@^q9kXjW=A>(&uMQqOve*LLt$xoG;VSg3U{YsW9d-(p*S=Lfl{AEE;j=s
zKRqpl(ZAXS=yQ>eVeMkQ!1{pV*OK=-#)srX4a2Z>?i^a998`1=fiEaJ9Qzi8(!13U
z>ozZQUXVB<e@5{Hxx_8)atoIhy8~LMI?&hqCvIe5p!|!;fCFS8k`z{~4>7NUpTx;T
zCl~E{S}{*~+Ecorh4IO=+YAMLtgWdHY&5x~+uzgfNUOaw>WA{pqiOx@+3GzT&N_Hr
zpJL-iS>6jC+OqbFvFVLw&12o=KieY02GraH>*v2>g{nqigPWiVG_Lll3IwOw<*Nj#
zo+?3c0+0Rf;Nm9DprY4nNSVK)=zH89^?QA-4ySiA-!)`2EmvM`$y@$KRsOxPIS~tw
zy3PKL_5B@zc5_&&cQ=Nm=3>YZayF;zk>1uw$(m?#YZJzT*AodfXI%6?8}L2yG572L
zGp~P1KfEx$aC4h3tq<p$3JosvR#)B_^e%|&w<M!mT9)S-aaP@RemB2ny)y6hS^e^p
zzvi9Bq$`NKU{(&VQFD6vy1PK3L3B_V90MJtqgUZF0>Sb`&D>bt#36#&BJ+3$8}gIe
z>)uiJe^xr$(cM6{)?IJ5lRjmqYE5bT;`LZ#2`TmVgr#v`DXz)56N4*s<=-JB5cSaA
zKQzJ_t2cFs6pWboI(P&SwnP~`<S6<)*14(F&vkCQak8*neZFQ{<N4tU_XFzZG!Lks
z?c_77d$bF84tq!=)cXa|K+Ef2ToPC{iHD9d%rcxUytnFesg=x{Q7c{k+0ZqO_cvbM
zcwhK&HF-q+sOOr-`!rXpKbL&9<R6{r@{b<x>iS~0e{2CBC<`3jsmaPzu*iSPM?e*x
z$LC#Zk0^)8Ox@wNSJjb+>&Q>TLL33Z3lng8bBKDT`zR?cpey()PN1hOXf9xaa$kI9
z5~<hW9#c%zk1H0GE?BgwXXiwq;aJ^w+&#{P>w8L$ha=KbR3PmG!-E@grR2k;Z^>jH
z!U?IwLD2#3^WZfSIU?VFNZ!qrZS~yYlT)x)*M5bKwoGldXMU&qy}92ZcM$gM1X1H%
zX17GazD<rYD=#2~#efL#L_#B;zQiL+7k2N9kn>rV^UIQEG3Pjgc#K@jAT|Kv`yzx%
zgg_KJ%6OC<Vh{;H9AglN=W2&B9}tfb1n!|0TE<(SSjJ&QDpLr=$m2w9+5&2AueRVE
zR>ooSH3qRA5bvE)MmK{vGOvuko>9gQ5u#c~24z$ss0F`T%jpnk3vXa$JSOpr5ZlBu
ze$4PV8)f|R3_K8FgVsJij~*W|h$D0KSSLbMdxN&+<1@<WW)Mfkw$NIBbOuDVmM6qo
zXl&cRF^I#6Dyg=mTFVn+pVNM+LY#?54Pq@Ie!$8&DshNqWEdV#kk8Mx_UE67$CKm;
zgV>LeWoHo8F&Bgfr8)+`O!1&&jr(T?Nk?h5kIx*XtdBA4Q<BZ(7;Zg-_Xh_g%z2uB
ze&q3v$B%A)we97X+g_#IAw?487}-o`iw>UV6uFxu+ORAjLRhk&e2r7H5^7PLQ0LAK
z9XyDC;oENyAKV|l=bjMz7rqxIq$D$_GlRbxnVk>i$(i0>o#2Q<#7a~B8}+<lwA+pI
z9$N1kcB8>=HyG_?tE2jt10!0Ds7Cu)L^V=Ul9z!s?uFn@k}WvV&V(pMB1r(_W55{F
zp5LGM8{~3>$wZEoH<Ejg@7Z&F|HH*cdKRXHG(7PrVLy4j3R}n*3i)6#FEylIzwENt
z$-Vn~C(}Y|Vb3Fwo;Z{$5ld~DU#=9btCoFi@7`nOP2}!-?&`U#XDlW}NB_CVa;A{8
zS_g8Ts)bNGAK$z8IJp<7-F;8*XjF)eA#eHhQ~9cW2Rr!u-jgF|wFloPcYpf1;?qwT
zpZhe;Lv54I<Z0+dXgh3^xIm8Dua?}}b!&G|oKJS+*DK3=p1k_%Ct2J3(V~UaIt|$(
z4?c_sf|mi}FP@=^jh|lgujK^=@!h|-cyDnp`=B+&i9lY4=hTERo&?7n*i`#*Kze0z
z0U2*j1Os}bR~xmIoYlX58vIQJtH)}G-XE#H6H&^q;*z^i-U;-jm-VHW^(7m>7?)5e
z{CRiYttB^=zd-KB$gN-|z?O;`&;y&5m+7OmV~MKHOST%({o@oN*g44q(LkfgQumZT
zYaesxb*t<9$m0!*8?43#pR`^@RMz@PsByuj^HS&hY^!|RPd2tmyD}G?Js|V&T$>=r
zcy>uX%e_KAg7y%VV4skmYQXG(@VPKMYLvpzrbZ8$AJsA^6-*t{nt27*2hP^HA|_}O
z9l=OnFf<qsb)~ehQnshZW3ln_dBGlwz1JJg!|#)B>&!;Ry`izscDI>Q2wY91M#Aot
zIWrht(2`x09BT_k3)xt-Rp?EmyF0Q4guu~rFM0^QNf0(3tfG(@s}#VWHM<hr7OMRd
zojAwMJ{TVuTSt$e9uC+Nbq)3xxQ9-ipI5eydQ&Fbk~=W|O^8ML9d{3GN0<o(qmgd(
zW34;wY68)SG$%8v`L!gQhzu9?y6$vpD7Y*(9Cde0<#J<|rb4?VuXj5KL(7*tS|`@s
z6DkqJ90poir{4+;rIIVh;+gP3|G-kSHf471SlhS%;?-CtN#&Q7_2d@bK>Hl_z?zE(
z=$vMRKoEkOYf_u!8ktrV4L9OHbwi-9&}flsq`LZ0Os&=+CDeN#FJRO7S(77=JvP#_
zxr4_^&)kX$d>ifAOz8<(;C}7~K1VsAiHGE*gH8mA;&}Un>;SB{CemLlUpzyOxMIcf
z=Q}%ja$+lFoZlepuMmALrCux?2a?svdEPCa#G+G@@f8!wUq4KSJc1JTa0CKxIQh9a
z`BeEeQpjy-ZQD#+`XLz4#n`JHWcFCLH<GoH4KHS0n2VmF_B05I^;cTrxz&3{1~=vl
zi^JSyb??-*tZH32I=r(l?N@aRuGzt<o6aeAZW}r4+KnEeJL^C9+UX_dEIqhpY=@i0
z)3_?vlJ_B-fmfOGIv%XXZPM{3x54!vKO=|AUnSrB5h3SXoFPj{SGHFuzfpdT*_~!8
z*K%#hCr3W5TkFL$Lw+(|{?^6ZpHHd~2fcuDQ8}ctr?~GULI`cr$*WEz8J2_s6dPDT
z#bcVNHLM!xM>ULJMVHJ(&4obcSbd{iqq8K8Ev5~{RLgaH1#QR=+1}_J;iNwvzNfo?
z@Z>|w7Av)ie1ol#sCRAZ&aZf5m433@u1T2#sJ|D|h>SaknT%Cg3cgj{L5*#u2DisR
zX^4@Hd5aC-#GS!`C_y&Hsh7l{Cx=F^m?;!yt{54;e5P>nB|*xEFX-;SFp^8(1`YRF
znJO~d)qQ@1m)7T2T{1X$$*LTED}-ldN@=2{GutstR>+>MSH&{<xKJ;9N`}#;ul$bd
z;+SnhiUZb6a!PPwDSu3)!I#O4<<iR<qL30r<i*m9bTm3D|ITH(M#|x(T6quyQ6AJ1
z<%<y!s+qj_a*#;N9|vD9m(D0ZSO5zR7Kj0{STC2m$+rM0)6kM5<-anU&HU0yfo=*Z
zm<Uw(zluQ3L<X$BRqlQ{SpEp5mnyID8*%S1<ObU7CEnk``%nB7zeFoX`HQ)e^cSg;
zBX5?MlSjzI3+YFB1yZw>r}^`73zrTf0lf6IzQEp?YBU;MS7;=-gDad7%S_&!x?^W=
z@6J1>rta9$+q>hAseyeP+S)ek8yMKTp;+9ocVJ-m@bGSY4h`)dYukR$%(}Z~i^bWy
z*3I0ry{$F1djHa;*Q`#bS6{Pq>HgKJnVyRmPF~d8d(q^gi+V6lYVBhEV$v4eTDjk?
zb(ea%cUn(&b6-BWw1fLi>q&cW4B|CfI{-SYL2E%oQyzU{7$DaR<Uj|<7f!s!(UE@&
zLQ#Y9yGa%7<S=(u`7IH+$nB#gmMX_UKY9l+-J63hE3vX#cuV<0p}d>nSc9M?GMEB1
zOa_KRPF_)iok6f2)IW;lQDFHiS|$qgl03hL6~_IFJMkJ{5b><Rpwudq)J<xD&z<}t
ziPgZ1C$FHTMuF+ZDyBq>LJ7XH;@&y&AB+mX^%M*(l|ji#4Y2Lx<=o|54SJ^hqw-sn
zVuO`Gb6<s>^^86k?BMd5lkaonWJSg8&YiriBTP5(GI&12TcC>~n2Gio*a@`(v#z6d
zld3m>F3|-yN>R8<&WN+q$qJjgvu&X&WG|Y1av^)$l5&Wa?dfceTiTo_zltg}Yv0+U
zn7Faq(Xprdyr0j2JAY95Pi{YCbNCERtY}k~Z9+x#TYbb;EZ|({ZTk)kMpi%b`40W!
z+xr}sU$^{;M{aA6kA3I2*MM&B%6sHZ?A>!CKa+{6<bZy}&LJj1P<}|=!dl1@pANJK
z`(rwfJTBB(%{@tdy+a}GZB2}s13qWotq{282AxTlTG8q4wbWaJmfV!Cys>4NMg@V6
zI8EU`&=D(<iHBIoY<o;JG`)M@eM9%%7Z5s2rB0!vR8o;CGF3iYKHPov%{T7ff8))x
zhtJ1OQW<Wyfky*UrCfgg*qFN)X_A@yA-U0CAH}Z$eu!!(_<V@TW;YPriz?;{1`F~-
zI_WqePu{<d9)MpflatY0_&&`UB){Z-hWvL)9^rA{vSc|@-e)OSN#15Dzv7DIb9^IU
z#2aZ5IMGLNBP~*DchNq9xMJM3ij>+dw6Ad`dP^))*!{3*&kF1te~x>f@+Mey<SXpG
zQ7-q)GpKWfTTT{nH$#^=XEDWUJIe1z`7(ZeEB!vg6(uKufs9{AzgM0qe+bFw8~A<;
z-Kj2lnCqc8-lDGBUAM=%3E0>UBc*oB?e|c}k5Px5uibC^GS^OU|0`11&95luzqlAq
z)%Xokc8Pb${+4U!a0f0@#M^I)lN%!kKwo->_D>iM7vokz6<Q_dZxmBzaRZo?rQFQ!
zl&zOg9oB|j-gS`NJ&@(vBm<H~@VIW4?3C=2Tu(XiDg7)s@9*rXzajX}sc`O7fBz53
zvU%zM19Wx#S9QYqbrPRiuUBjI`b+4$(V%~&!C+`;G?c$a-x|G+tWz5d>PCHeAxpp-
zeP^Ry->5d~%Nwg8WI}}a+UZ5;E)|Qe*EMN%I&Bj!iohrRyZR0+)@$HxY(nkq?c1)$
z&j5f2vihFY(|1##T7Vz$x~3*<+$07~lTO#9F*NI|Me8x<v=}+x#>k;#4*t>Guj<{w
z6%VDKp!3Uw=)&({#E8Fr?wZ0S+|&CqH_+em7=iT|f#PpxdB2$C`r>zW(BCGw7l;Y*
zMdEK;9S`}r7h=2UZ<V((4;tw_K+r8Bi=nc670v@omIv1eT&w56jm}*Z>Mz{$#K8|z
zC}72)%<jvUO$Ap7-1D~cF0jyzZ<X&t$7;i<hOVdkL|yMC><EGv+My`ax2M_PCWpMG
zuE_ORvE$Ciw@=_5_X@=cl=d&&x5*?w!s0eqX;p23Dvp$2zh&_?TeTs5OMP$L>aG3B
zecNa=_6hCX;)~(FTvEY2LhE_VVkK@k=9aTP-)in{Vi9Q#W2Cwc2g`DA<0s76zhHkh
za)Ixh!{&@0uuj}nC*#kh(N>jTV=e|U7ilC2WDZ0yFo_ULiJChv*KXijI8DgqO1qUA
zWqh1#j}Q12mXy<p^G*E&ag-pb=U&9IF{4z1MhUb4Q6s*tzm3n4U^G%_NUNv07bkKG
zZ#wN&<Uke45H}`y60;dvM%6Q4oedZ39A1;&?&ZczMqJKhw73Af4zUr(`Rtjnx71)?
zHyO<y2Fq3c0RE!@|Dp5!w36q|XIZn><S;auoDZ?L(ZNj^bS9TkZ*<n)SVvUcaf}se
zOZqz{WoQX_SV>x=9iCU6(QVKh+_g9GALKeDZ$tJ|0i$3`p#?e|B<w|8iRTwIUZoHQ
zxQ?JY<d^38sc;7H!`yR{e?otq4nNIx6MnMka+%Q2Jr~gUJko@8Fq8qNM%*p%pWvQ<
zgX#Pzhuxt<Z!TQuO<8?blf`G@Vu<SOrH?OaH`t<fBZAZrTZWSoJ_LvTyJg+%$#=!P
zxz4D`Yc!a=ChqIOP`DTjMcRBGi^1x(7@&+phsM}i1|H5LY$z8n;pq<V&Y2<?=D2pt
zgPyzbP)G;&64}h3dphJm@S=<Z5BHMgCf}8K=y?4-R<{6M-6$;!P)$wp(dB`)!i~-Y
zTnV#$m*)T|s784${KR~y4bzz9pLXxzUcxM2V>=Hz>o;)v$#L$Z(`)4iyIap5>@IMH
zN6lZ+-~oP>Z*$*}yvx&*e8hTbOAHIUdM?1jedG4#`?Yu|em?>qYT|y(=2Nh$y~^b+
zRm*`qql%B`TZ#q&lPchLW!zjVokes`S(8p@68TSX-y%M63p$%15Mfr(>@YXQQktp3
zfi@w}1)|Xc_bo+!d^}Gl6l#@paZbro+}q+Trk*V-3DVq9Ezi}NvqhyF(H1hb$;LTd
zrpSQa)c~~%BiDl51IYcnn42o4G!|!W!JAZxIqiDADTCY%9wW{YG+A8c@BnS`os~Mt
zMCCO~89DXYQQoAURnDr@fj<o=hQCQ+t^!P34Td^9z4FWa=|&3mr*8s?wxNUTl)S?o
zqtd#LmLtDYH>>(wGuOE$c_aOOA^AGwgiGm80!o=e3$uk#%hTG%K%OJ)4)Jgg`FcP|
zhLi@CQEgX;THUDq^76-slX;2Kl$X(#nW%z`xF%z&xTsqmi8-9*ijeRXx(N2HdX1n-
z<&sJoI*HgSW+#+iqa4(y4TH+>CAMs#=F!T2v}(Na;9Sems$u;8b>)EZPg~>htrX_+
ziX3{#KVUx1QHQpEL_MG!1X~<b4mN%`5+A|8D)d4?@4+|&bXI;j$~p?qE%^ACac_sA
zauWyXr?TP1&ycdLl9z0&97M|bm5nFfL(1-QSu$3^jxv5%W$g*XURExxI3#J*j+WQN
z>jD$DuOc07c8{qiboMWToZYB35Wm#ZoX)bAJ76tf(a1CpyTzSG5rJk`aUE@(6PHwk
zy;e?GhpaZUPA{zPSK2MfG%&aX^&u}-7jzlQx}%bTrIV*N*Q!mNnHnhR+1lrHN1QQ3
zK3u!{95=n%TVjp2l4I^{y;~~rzgL3W6LTdDZK1585u%DF`a`eB-WqST_1K&AbrDqq
zaCj6lYdvIEaowDb=N#n^UwH+;tOmB{RE|{p54{4<|AV&Q+Tu+Ib-(z`XJ%$7-KQ$e
zlItq3f~FUXbRVx+ai{fjNZD4IIq@%mX|32KyDQHl<ubs$i<ET5F1fez7*aNgxn?RW
zCFfRdLCQImEhn)*y>g!9S;>cFn655`Pn0sQa>fwJ2PvaP-I{bo-5#UKrf6wseHOw+
z)T=CvP+`NP%#Tq@AHf(eiDMjLXVjNnXrZ%zF~+yug^1*Z<rCg02De8@`dYeZo;4Nc
z{PxpP{smiHcTg9%{oBp!)<GBIDk~})z<dSNWAi&JN1TNBVb_1To;#>H_`3%m3{BCJ
zlAy^Ifbv$y8TgK98D^F(rq_Xm$-SZh>`+`?id&&(H^eL+zm!i2e3RDVQO2c$-{|?J
zY{7ud?z9GD4IZsbi$g{Ashr-dN<_c~T)55WZNw8&xnZ7vrfBU51w)+{`pMyT<E)4M
zgN+ZpA<A<Ym7AyxRFlZ?eKV7ZME-~GFhxlC$}hPzY2;;Ce+{Q12eTQpr6xqsW?=<T
zXqv1#uk{}^`evQC`G9Y#m0PUS80~(&U3|G4zGDD=Uab@`4_~4u8&%Kwhrx}_0>-F?
zPN}M0rf850h@n;)UTd#&`L*7<1|{KA0ySQgzkxHe0yy;w^O#gu1yeQXs{8}}Iq&Ve
z<oL8>;djs7{0<ikcJ=ml1&j2Ip7Kw*uW|kS4947pi2S$>E&CIsBM!0}JtM=)C}^tr
zs^+zh4x1aDn<D?N(c5%>+e7rF)!VpNY+C|9#yKqxzrjIYdaVHgCA@@#q@?G+&141$
z5%cA_8o_9hP>M}Kje(Zce2BjBtaa~7aL4spy;I+$bJpJH+qYvEsEF+Z`oYMs6<4J*
zFr~#>PRDfRf^0W8aR#OrT;RB*hOL@^?f(bc)hpXZ{ubLUyPf-h?O#CK1Rp@TMjBc3
zNmQUjfRK$HBGpb5*<iB<<3+2tKddp>bv~Qb7Ifpbn{Zt+U=P4N+89=)s;!{}7hAR4
zVopdyIg2GB4dz5z*?9B+Mk`G5Giddus;v4OTHPO`rxqiQkfiwi|0|`Sb7W8TYcuWN
zpC}1|0A1_Q+WRxKT-L81j6yl)0|rn{j{6@*;?`;Ra^XVruG>%VWA6K_?W3cPRac(T
z%_81;{&|KsY-69)6SeV3<;OE|-!~ChAZ&Ba{w?~Kt+WgdT31lM_#4<}c2L_4YN0J)
zx+IkfWtQE2Q?6ygWzKC;uIOF4);T71ofo81E_6(CAuJrH<;fzC$1yuR?w=HPns+pF
z&s$flv<$eHgi*__(4s#?q{V4DDCeow@|jin1!66-UCvKY%w9n)GX9d&^Uz6BtL1{_
z!6jlXvPItIwbrbGKUvPS)VbEoNm*F?Yc*aV)mwSN?pL=JW%80(x5_J}h655Nes2hi
z08V%T78mdb{$7az$MzB0>RCZ=;{}Jmp}kEZ>k=`mcS{?o!6VH1yx4XnQrrP=shr08
z)+kQx<aA}3n@^0P$}Btkr(Mg1F?-OZ!&w!Px~SJ4aOu=d@~A2ToR_V14h>NMhY-xL
zS0F3m+{Hiof2qN5-#$DMm=q?Qe!HQ`pol6GVV55q(I}586KKP-vn;)%7K_;^4diiF
zmQfnaqYYHs4nQx_R;>YN=-afDW^?U&K20=Xw<qIOCZKaW-LtW(-fhjeTp26X7_M<{
zN7N7E(V6c3O{@!5{e7PHO$)mY`a+6?VzFXFqH#Lw+nHcmxIdfqLkr*O+Je|(5vPU!
zPdGJCw+@|&)8#w7drsj*rS1O%PVuvfBlB_EzT0^zaQaVbmEb8(ls}wlmk3g^lxopb
zCY{X{8Not~U`b_Syqz;SdHJ}uvqK^O8!XTBVWi@+C=w2ZsE3SNFLL~|z?QCur`a#6
z)le-1)m%5wDkMpmky0}~D%IODWPO^8>J_E=_^<WSVXNgL(*6J&wZB74{JaOYXn(CG
zY(oXLuYB_0olUnIxMVPqEGQC+P+yo1+(xY;Q5W+$0#03{4u8hEc2~xtutcNy$hfXI
z7z`L_7|I5N5P++Xw(AvGavw*#pkT9hRXu&s3#-+hF=Y-6w(<!QNF-WR@rFf4SHNy?
zsbi{m*cD)-I;xCwuXINg&5=m6BGSFzVo731ivt`z_5t{zk@uZG-%(Qmy(HR$8k)ED
zFZM1G>bp`fIe8<|m@3fF&lSznOHDn4t!`Wy<}#|>trD3eQ(3@2!+i~>`gBP~utR&T
zWJAqskj>`j)KjCufKXwkC1YvzdJR>D7rzJcdAi4d?ehRU6}EINs+j%h2cYP>*RtNA
z;<DF|lD|JXb>XH=X48dJqy1CCW5MaZGZLoy^X((Wk=U}4_IxTfLViuZq*{u_7JMs?
zl>g({u_ssbEnWWB^0RuEw{PwZ1bR2OFYi4I2}}D{be+=`2;ieMJYHx|`8p5?I6U6r
zOSKo+*YT4dj1SYVz04yNsC>-7#N7m%VvUg!I5UacK;vk*8_I|1=`v&$QI(${lTvQF
z>*V1QJ|Wlh@UfoYZ$myQlLnA8PuyDS&*P=@L}ubI|CVUE*^@7jzm%2lkW%b3pNZXk
zGy5lyF@f}*obBR_<qy9VJ9u0C_S@sP9gH2s$TC!p^L02iOG&jllh(_8vR<t}t3{lE
zmzc8ed{aX{C6G^PzFGdoFFwbWKM=|vaG%SQbA#AudS|eFC;k+Oto)Gxd43IcKE1^K
zkZJuvLgfCNQY1q%DMV85&k$?*mzh7nKM=)`)<fzKQ121w;Uk!>G#%Fc`RPHLE|L5<
Dni*Ym

literal 0
HcmV?d00001

diff --git a/web/css/fonts/sanspro/6xK3dSBYKcSV-LCoeQqfX1RYOo3aPw.ttf b/web/css/fonts/sanspro/6xK3dSBYKcSV-LCoeQqfX1RYOo3aPw.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..5447a5ff93de30fc3befed8f8d7c0f3f179be5d7
GIT binary patch
literal 167952
zcmcG%2Y6LC(m$+n&h_<m17l1##`I=xbHmui<zCwuFufNW7cjWtLJKW)0_i;=2|c}M
zN$-s$q>*fv^iCS-q;3-be<SG<XW!&~cE9~z{LGA`qcR$eM$%lJ1LKUbD7KzSHleT}
z5WIBgr9Q^2M8>4Ia6;+ish@xK5o334V(bBD;pC}#>AUvb!`R?mj19P?bn*!A+_(R}
zk1;+2wUkxVl{cm~KJW-*8((0|f7`;^mDTsBEsJJ+*-pm0ZCX@SUfE-F!rRD?`dR8C
zB)B$3tU&k|K)*$GEh~Qh=j}rni+zl-_+zyV73KHzZfRgFYzku$^>yVd8tv!U_sIJO
zAhEu@u4>}(+WS%8U5tt9#)jq=f0qppF*d=^nD0`CzS)P^P8P|kSs2CI{j<<xq{w5x
zeaV>flHW%DHqzPfFL|gml@bw~W5#^`xA`%nzGG5;Otl=FyL%7OH>*daqU`I=26-4!
z$poe1pA_Nz9A=~N8G@u!qA8!pyu2?}X-jEIA*?bcexUqRi2mgk<dw3~EU~Rke9`70
z4td8!#;>Ah{J6LPBvIvdqF3mH6^@iA_(&7xEP?klVZow#v<XW#mOWy^R=Yelt7P*`
zx`Pd2eiM#Hh_OYi1%HifBpZRhW>&$PSPkMW2qyz-SS@G+QWxTRDGQ>N$%wZirGix<
zT+Zr|Zvx^CY&e^Qw1s$Di}WTo4Y4LwO9OHxGB4_KqumsiiIyACN(FE|TZU&I^(-0G
z%`))34mB)6dCFA{x&okUNI}k2)RBUGseh<5mld!)aGCiZ@R-S{R4K{@{)PMY{Y*U7
z(?rwPYZW(c#cv{dPP|bp9id#vyn!uH98YE|A%PZz>p&A(G5SlrZi18vm#b%$crxf;
zMq@dnzhvYH)t0PE)?p+DvtcN)9OKi1Qi+Q5X0*`+Symx`B1VcN+k((|)KEvfBzA2t
zm&9(U8!87_3}Bc=g2mXGb{XULT6+WV7JCcuHhUZJ88+s)eU^O|@HzH5z~|ZL0bgKW
z0DO^s5%4AUCBT>2mjUmxcL85%UkSY1K8SV%coP^k&Pt#~oQ=bu0C(dNt_Qaq5@|%r
zD*Op{8vZyt1Am<Dz@K1$V|OBaKmIs-0Dpr09e<o1#~)`W@W<Kb_!FFS!8q^6y94*&
zJ&@89bB6PQd?3Q3coxFhJR9Kv4*(bOBH-z;a)Qs|v+%T>mm|E8FGP4V-wJ#tKNI*Y
zeiqWN!fX}%AV;tGog7^8`}qUF5Ap|*{vv-F;a5Zw<D#$V%Y+yp(5@IHh9YH{7{)B&
z7H(j#@B;gVA9$n~2|P-S0?rXR!1*E{xJZCEQ6fr!$BA*MVWOA_JXuTzo+_pS&la<R
z=Zd+&Wdh?TDn%u5t*Aw*2GIcAEK!3TCsBhem8HNl<xFPD*>W~;xhw~+l$F3uvI$RH
zWh?M<xdM2VTm`&Zt_EH&*8^{sn}N5<?Z9VBNJgG5&jr3nLJ#C65_%x_$pgSQ$(w->
zNmyEWm%I!3UU@I@0}>LG56g#vAC->*KOvt0J`6j{<q>%V_(l05@XHdTEMJwc0>3Wb
z1b$Dx2mF=%3ixOFPuR#X3-;f-&$<uzQR`7=*(2?d(7a50Ba=#xrP5=m^jIoAmP(JM
z(qpOgSSmf1N{^+|W2y95Dm|7;kF^~ihWS^@HnH2;3+zMoBOk(Z`8Zy~H}doNqx?e=
zCsM>RafNtSd?VwfSJui)A%i29Wu;kF*2UJ-)@SxKdxgCboLp@`YJcbG;>dR_b6o2<
z92OQfENpz(;;{W;&xf@+<D7}kVa{}Cfpda$j&qT-#kt<O(|L(=zw;L7ea^$qW6lqp
zUpapXcZPQjpA>#p_+{Y_hd&$ss;i5uuWN)W(^cr2?3(Xd;#%(7=sMeVxoe;6X4k#0
zCtWYO-gbTF`XNF_#6<Ln7#QJ;$cZS4m>#h(;^K%WB92CU7s(@|BD+QQkMu-lMHWX+
zjVzD6F7i<1BazQVejC{q6%o}Xs&CYYsLZIssL4_Dqn1RS9d&us)ls)cJs9;&)IXx$
zkNP><5gi+y5S<)7GI~mMS#)jmis((z=S1&{z9#yP=!c?@L?4U(Ao{E5Ut*jwaWRQ8
z!(!573SuV2%!yeP(-N~j=A4*aF~>S2bO?6X(&4-gS9Z9r!=Vn3bPVs<xnrM>!#iel
z40N2>ac;-Djw?HE?s#s;D>`1=@oya;?)Yr1Gd3<ZF?LvNdTc@LgxJNg%VIago)vpp
z?7`UEVjqZoI`);=_hP?@{kfB)Q*5V%PD47)>$JGjvQ8U1oz>~GPA_+Qr_+f}KgL;c
z9pZY%4T|%}jgA`|HzText}$+P+_tz2;&#W~5O*~0WamMh=XPG#c}M4qJMZg!bLV?I
zKiT=E&Tn`Atn&}?GCn50NBqEeUwnRiY5eT?h4Ibt8{=Q@GPp}hm-D(@+2y(}A9VSu
z%P(D>UE{hYb{*C=y=!yVbzOIKy}0Yqu5WeywCnfXM7QW}-MbCw=Ixf<ZA`am-4=AK
z@3yMjmTnhyd#`(P_mSOKb>GtcyzW<azpneC9;rR@dW`Qet4DQ@rXFj1oYCWs9uM|-
zy2sypywl^e9^b?4MfU8{b8OG)Js0$>@42$)=AP&FyrSo!o)7mt-t(KDzx8tU>ej1&
zuW`L*_NwZ&wAY$m+k0KuYfrBmd)?jZ@m??Xdb8Ijy}nD}2~i2%68a~260#DC6Q(AV
zC)6dZOxT=oVZxq-*LwHpy`=Yby$|(%r1x{ZU+aB5acE*%Vt!(2;;h8##HPeGi8~W7
zPTZGxbK<>;PbR*U_;%uFecXNK^;z6!S)UDk&gyenpM!l~>hpG=&-(n3B$Hy2dL#`@
z@+IXYl_X71sz_=`IxT5y()me;lU`1GC+S4ekA1Da*?rga-QM@YzI*!K*!S+fkN17C
z@0)!;>HA$j-Y=?Ow|@QmdHQAbEABV7-|l`d^|$-?=|8-Gb^inXKNv7*K+}NT1Ku0h
zci^;v7Y@8);7@~w4O%nkzCr&SJaTZ^;9CcOJEY%`xkJ_uxp~N!Lw*=4hjtn28=5n;
zWax^a7Yu!B=s$+JhGh*~KkT+)9}JHeK63bm;eQ+cd2(`cZSs!f>ylp`;T(}PqHsj*
zhzCY|>P~bA+~>L<a)0mX<H_<Y^BnLz;`!7&)H~OEf%jhTyS@&-9N%2u8s8z`=f0o(
zwm-*zw*OK8$NpbZd?}eJ`6-i9YExQLR;O%AxjW_Il&4ZYO!++JyVRJ}E~$f4J*ma1
z6H{lVUXZ#g_2JZ?(yX+YwC-vB(}t&|r{$-Wr0qyMn%*-#n0{vZa~ZA-e?~>dx{N~^
zuaAry=^MFa<ZUBA%#6<*lUbj6Mds_7KaFyaY94jnsGqa4vWl~&W|e2vW-ZU!n00p6
z<ylu}-In!0)>Bz8XT6>EQP#IvZP^joU9yw1hi9i`XJr><PtKl~U7g*Oy*B%d?2EGZ
zWZ#f|XZC~H&t(52`~B=Mv;UbBmJ^%PD`!xSJ7-i*QO=Z{vYgtS6*=p3w&k3kb7ju8
zIk)EApYv4C-*ev0Ig#_@XgNA!beGY6M~@htIl6H4g`?lk?VCF^cWv&AdHwR1=e?Id
zE`MfzRsPcaHTm1~FU;SQe`EgL`H$znnEz(}C;8tM@Pep<ZUy}dS_;+|>@2vXV1L0a
z1@{#kE_k`%oq`huKL)Hohd|H3pnyLxIxsdcBTyM=46F`p3tSM`9k?NISKzV03xPKR
z9|ukbSuir#HP|oc4vq>I1*Zh(2NwrhgX@Dkf)@q%1aAo58GI!8Z17m{{oohDp9-zQ
z4uw4n2Nn7YM;DGQoKaX=*jTu_a9iO8g}V!HD7>rivBDP$-zfaJ@MIAyiY)3{)UU{0
zG^(hmXi8C8QEkzRqD@8T6zwXyrs$5Mhl-9A9V_~v=&Pb%ik-!A#finkiqne=iYFA$
zE?!vNT)eJ$NAbnQ`-*QazPI?v;+KlwF8-|ehcR+Y%$Ocy29EKK$r)2JX8M?lF%4sG
z9`jyFY{{UK*(DVvwI!#OY%e*lWOvE6CAXD4UvjME-I7mBzAgD>tUWe*Y?rZ#V+W7*
zj?ElfFm~M7X=9tlo;7yY*!#x5G4_{nJ;zNQch<Oz#@#dSk#SFt`(?Z}e(d-i<8K^)
z_xSfqqe?rM_A2dPI=nQcG^;dFT3@=q^oG*MOFt_8bwalZSre)!Y@Kk|gfAy{nb>>c
zz=`uFE}nS##C;R5pLqMkw<mryX~3k(lUgU8KIzO!mrlB6(yNmrC#Ov=o?Jfp=E>ho
zNt#kRrFP0yQ?8zJWJ=rA0aFX7mQI~Lb>Y;8si#fdIQ8tQmrva{_2#MfPJMKmV_N#O
z!fB1uR!qBN+PBlYPaiOS?DXd8*G+$5`V-TSO@C+l$J2kB!Dq~#Q8DAR8JEqtWyX;i
zCuVk>Ib!Dgndi;Cd*;J4pPJ>E6+0_$)|gq7X3d(lW!71<o|^ULtRJuyikaPGws-c7
z*=4hL%-%Kow%I4=q|PayvwhCKIY;MwJ-5r;qPcZ*Tj!oWcl+E6=Uy@Q+PSyRy?^dg
zb6=eM=G;%_rOn$j-=05Ye(wAw^RJ!%Y#A%dDVtGtW7&!F*z*46rRCGh=a(-mZz$hZ
zeopx%<u{c-TmEYKhvnZb=)53xLH&Y*3l1%KWWl=&+A1O{x>O`q46Deh7+*1~qPn7~
zVr|746&F?PtGK!1&WeXBUa5Gm;<HLeWn$&X%96@Cm6ue$T={<GSCws5ovJ)lW2zdf
zUab0}>gQ@lb!>G)^^oey>Za=T)n`{<S^c-_Bh{~0e_H+1Lg&JYg|{tiTQqdh`bAGH
z`n6_B&1E%vYp$=kqvrmaCu*LrIac#-&8Icr*8H;AUL3u+%i_evgBN=jXD%*SJZ|x{
z#q$?0TD)}es>K@@U%YtV;+q!Vx%i>QA1?lJNv|c-mNYHdv*gt!U)N^THr4K|Jy?5R
z?Q6B~*Pf{TuJ*UOu(}R)-RhF+hSvG(vg(3$rFApv%IX%?U0L^h-Ou&I>&xml)qm6w
z*3hqELPJf%riR-aUTSD-bT^J~+}?P7<B`VqmO7UXS~_`Y_0ltzUa|DLrO!0kO=(SK
zO?#T&Ywq1Vrup3FXIf;-{FdulzG&^$x}bGW>nF<+mNhQBcG=&TJC_ez9$4P8eB<&R
z%g<lFfB7xTA6|ZR`TNUHuCQ0cuNb%@eMRw#Su2*TSiR!R6<4mfdBsC3UR-f}#SbeZ
zR(4(KSvhxQ^~$9yx31i^^6r&?U-{)KdsY8c<5taBwP@AdtA03b*lFWVTXfoKr`>}s
za*x%%)nisKSlzIC-RkF7A7A~$nwT|-Yckf9tf^eHY|S}qu37W;n%~xX*G^u$U~T={
zHETDoJ!|d7Yj>}`cI|Cz?_GO%?Tc$)UHk6ZPu703_Mhvlby4f$*Y#dEXq{)>$aO!i
zcdU<FpS0e+K70Mx_4C&^t-o~rgX@p1e|7!4>pwX?{Pg~(k3N0Q=}o6^JN?GfkDmV7
z25ZCM4dXXdY*?{j$A&96+`i%PhL1POjeRzb+&FFHyp8o6*KXXo@xaChH$K1d?Tz1V
zY}@4A)NxbyP5w<2H`Q<2x#@;YcW-)X)6q?@Z~9=<=bOIY+-q~{=HTY(n>TFUwR!*M
z8#dpu`Q6RGZRxfpX-nyr)myIJ^2%1ZwQy_m)~mL@xJ_>BwJmMi#BEEqowx1IZ69y%
zwte*W1>3i8zkd7MXGEVd=8TPJTzAGZXPns4e@EetnjL$0?A_UaXYS6%ofq%C?qB{6
z?S!{UoXKV~cwYqkB4R9?B{G>`ECh{Vv-lUFHHhy-I1KO(>y2~MEPfp6{{U<ST!QDR
zhGu}qvmv4@>nS#~=>q$C8Oyo|&SLl*@X7RG!}*WMKbTG8hgmYtY$NzrESdL%Pvu88
z96U^dhbq8+XgkKgM7WJjl38pL&UuqWg33Qhm6?t5`&dstiFHMp68;j46wk4)I44F^
zm|qJ%sXzaRAXAw$1UMlkDA|SNM>1>=B+vG+mh~a|{)bTdzvVwQRy1D!8(=JHJQdu`
z5_wqLuNd3$pkD!A0-ON+hO`o$#zrGN4lq<h+czOSAYCx}P)a)SM`&wP@lV=*R=Ps^
z64Dvco4*3mr~e+jIE7O^X@3E_4bofE*}nqP<-dZ<*=(ifr0ahMr2qd7oR9K<2BuD$
zSM7o3*Z&4I_x=Zv9u}hi=dqFEG|*^_A?D|Q2yy>Oe%X<Y3<2h+lWalA9*|9F4<d_=
zp!wb&l)WIE@$W;&|240%J?I13rauMnIq6@($-Zy<9JZ<e^j*O7fKLHG=r}x;>KPjV
z3TS%=bW+H!k!=eBY+NA^M|`oecV4o2tPS<F!H#ul`+@9V2$UTpTlg0sIm=OYl5FL_
z2VMUvpDg@0>KF>X$rjIM-2wR~oCgYMJE?3m+37z4F&gDyzyAURr9<W=|L1^pgVv4^
zsP%)^kiP<~EwsM02hoS6Ku6WMs4@PW1@Kcw3H*=)ReB2g`V4gTC<_niGIX*(o{!+a
zV0_1^b+EtK#rosd7%%2Pe|R{Pd9Sw5PUZg^aa!m4Dw$|~^rGHgESyh;w;6iFr?nmD
zWo_T`(zahI4!bsqU#|3L9CU~PJhq)s`qLZF4zq5&jdf5ua4*LDVdfLppq<%R6HWp0
zjb#%<`buM|`Uu|C7!88##-U$HY><d;w-%H9u7XV>Sv{rXC8;gG2W!h77RRq=PCy(#
zo%Lcrve6=nWr|#uAkzS&v7Sx>Z2-kOL32p;6a9lesC^3m2KH(!p3^!?wvE;_tQ%OP
z)S5(lk5lVSXXc@2u*b91UZp!5MmAgRNuFnJ+MkGfF?SB4o>b-#rEQ;!BW<7aLIBo7
z@g(9i5T-rMOKqQE+>%8KE9D;`Zzr_*5M*`@>gk2Caj{J9fXu#N#efci#^^QX;5TEP
z=z?-%SiI=Z#;fr?f_d{B8>M9aE@XHs%M$l9AHN0p+{oi%dDIrwPj#z$9c`adJycGW
zrTmVzcU8CmYi(BBx9EdZ{dl_Vq<8}H$3Y(kt!n#NL1<sJ8R?smUWz)Y&%Yr46XHLD
zo^1P8inf!0Zy}3MNgi?~;;l$;1zieS)b=p}UxT^626|W6_NkKDNyNWK{43BCppPOC
zK^XQ9*ju2Dlj1Yf`z-2(Y-J1TTZZ}?L2HqI1AzFNf#;Ar6z5y<E8scQVb(cmqmCbt
z_6p_*#zbyH+4ZPn9q4JG9`HtxgkK#C+kTd#k#+>n4uc*BeGGIFo)etKW?5F-Nx-+(
zYS0y+%RyT}$FzM+Ag^Y_tuU1P8EISaY$NCf(6ykc$OBM%LAvoDfYKe(pT7X5Q>0h_
z20%a30mGmVpMw^Fz5{s8&<{YrG(hP;0G<cDYv6sQpQNLI1*Ertkna6|rKIEkHv9*&
zRC50}<n#ww{wKW9T*JIp^Y19e><Y~7Z&*k66Mi-P3BOGKgthx8*s=un1sjd|l)zR2
zPSU&uea66ppmzYi05k*Y3|$Vo!N3C076Z!|bdh1+q0Ud)=Lmm_Fwx_n_qBaYpzLA+
z>>JJ?$~LZL-N`n}{;*L)u#Y_l&j={bGGiN!%{*ln>C8fVS;1`a2KHTK7dIgPG?tIw
zux81{2*1F3$^=tSCQFo5M-VnGbe@5oQ|(h-*gKOwCL0PGOXmi;l{w@dl(`G-5HG|N
zwMVwO8fj#wJL0EPvhU%n5BBkz{}#lL;Q581s5@i_@atcUn9uUTqdKFi{=&Y|*-Y_7
zds}LQ>LsAI0Q^UU6IlwazqCe*IM#`O1>L`vMXB`{Yc^~=jqfDbc$ZiS3R{jbNmhGS
z+WXLcm25bz%Wq)~$N3Yoo`khOQ+y8k9bgK^VK4H2rt)_c?;%a#+=aGOd;PEuqJ32t
zt*vza#a@zg=oQYv;%(H8y(4&aDqe^uYA+dSqfs~b;csHC-Hr5{AfM+9|6TFC8qY_v
z$*OKzj|tubk52GMds_5W?HeEq+LIfe`cuDEKdEk04rhZAat+FrgZHmtW4^}v_ciMW
z=nm)z=mu~D=-FVvAkm$r@uk?$e20Av@`*5(1lkR2eHP>~3^WbkH*+U6hepUd*gW2c
zO;vC$*8Xep>;F$|0>2LT1AfBIgr8Ur!Wn=Z6VBl=*t^HDRDL7qji71Z;T<+uCbGfy
z8*H%i62+5>qf9P$vqAhM<N*-4wZlh1ek0J<2(&!{`;`&kmFPU?Vqdd4pwWu%g`A#1
z{RCfQzu-o_TiG1g#i<hI#no&oU;x(e9_{MVb*@6)t5n^gHWU>fV}J4y^YE+TD_MiJ
zdkyOW=n3CUPw2l7?erzR;0>%VU^-xs2@f%JIH(subRZxh1o+K97eHzM=Ve1}v0K?t
zK%alN&HqtuCiJBaeIU9FbKQ&ZGSoK#^W!PZ)9HxULvIe^&ds&h^G-zgCd}s%$h#Ck
zWl@fOg>VnniG7THXA|U;i#hZW!amR(KoaZBlUY1_l66yXL)$LgTyUbDZoEY43+c8W
zkOJspAPY1WK$OxW050rzz6LGOVb}tlpYjv|VgP*%xY)F|nIVwrtgm$)>no#JjvNH&
z$&zG0&=lxyh^FBAcs9hu`zorR^+mqEvJdvkh+74!Twk<9^Nhf&==bctc4?t!Av(%D
zqq$6wB%?8RJ3z<ALZ-tZhaX|z_pq7#Qq~#sDOoJRTwa1TWeLtVpmH4>4(JBxW5PaA
z0!k+c#VJoW*_(|az&#4ae_*|Yjq@_rPRwVueo~m-$Pxf_Hdzn&2SBZdtck_*&dkBy
zWohhPoU0MXGg>d#0L}o=nz{#YGvFBD5a2;kOgD1cmI77+4glcwY<n7jJ9TYUfLg$0
zKq=rfz^Zl>oVHZ}>H#%?rvOiy_#)8z44emw+h%RM0ha+n^=2UK1yDUy$1{Li051Zl
z>>YsX4aJSNwmSh-M|+?)sVudzryWo|Hv--SYz0u8)D8jlhx(Eapz`#b0JrMeZUBV(
zOMFl{$l|w=8rqr=Cz*sOJzv-^9!g(@v~_@Rz;Hk)z8qoPKRngvP~Ste(LATJB*S@t
zW<ZE{gc-w)K`&qcAP%}m`Zo_c%5V>hu{g?se_H@6RES~CNx=CwfpNrLe3HC@Sp~td
zQ@FQcWm7F@3!AEzu#aoYTk2VNb`J~7ol=y@4(84ZB(n4JCrwFYYscqKOJs}3Pac=Z
zrcExHoXGN~Oe%ragR?f=gp6QaV2wxMR$mZWs?%JsAvmvNWeTu~CM}$GW_@sXEu9r$
z)zbN#;5ZStThdrQBQ2x)!eF0zv!S?cm&eANGzW`C4~F1AS1uc8(roMpdf{%GpN+;1
zFJ0DR9bgd$F(1~!5@wMERGpH=upVq6Zp~%0F(ix0lkyU=j_Iek*@(Umz<s(b+?dm8
z96Nz-tUuP-QLN}xO%7BT$-1(BERz+o$rTlKjiTtk$CdRBbt3P-$JI^c6(aq=$F(&J
z%Z2y<2i#CmD~93bZLR31aDu{J74D$0vmMqcOr>b-tZ%Jr;y?fQxDi$Glm9)&_;ctd
z;TT}SoX~$wp-n1|S&yeqg(Fp36!eSIq7<e%O8VFlI!&n^fayN5K&pj1z7E8?#t-Wh
z8+%*F^I{6DO;((=#4F++af7%7_q@u)Sb<$De~wS!bh<r(`;1<c*R2ZZW{iESwcR?y
z+F|Xq&a}?5&bH36&b7|7&bKbGF0?K}OSrK}C2%)vzYYOAkva-{v|0RRF<1-{L*-@i
zxIN0wvGeQ#J7^c#CH7c*ygk95WKY3;vKjU)dyd^;FSXa(xSxml)epOq>HI7HE$*Lv
zh}&@4cCMXo2kb(-7$wKqrS?R7vOU$FZqKx5+x2#%z0TgG<`%WiW4kIYIPM`1X2Nd#
z{RwKO91_+d8mE{6;B*9Rnt-={AX59l`cQxR0JIc1r0AkvT2WR!(rDgFHV3mg5>&tf
z#3660%FSTEDCc(TJQe5mt;oY+N4OcGP!5t7jj=%9iy*x>t+&As<t5JbXi{F{g~pRZ
zzPn8us)yj?VtQs30f)wGEQ|ir(ZWd4h_%a^gq#;!mspotmsyuvyR0j$E3K=n-PS&9
zzqQBOix#Esuhqv&VlFGs%13`gEs;!0sCD_^AJP=B7$JHV;wc(;8nf)t_B^``sg@ec
zx%T{1IZziLfEcH{ucj35FvAM|9z$zXvyC?EaXWStr<=5)`r}v_f1AI`KjYtsSYh$k
z@hl8CPREN<+%hc_<zfNKL&R(wY<r@TGL<Dg7^3Ql{~vOXM>>Z-k)(TJ1?huTX#i~g
z2%M;BjA8*;Pk`|{0C1;&Pq$UsQL23Vvj3KLV?^kla}TuG3xD0gRd2-l;IAjR>x(qv
zFaetQEPDAom+UUw*&WM17tP`*kH+oTOL@J#T;9(wGV+*#)oy^%I_gnDyB=|Q*{Pnk
zPZ#n7c^prOe=0+uWx(a7f06#-@3YUfjm3vA3->#{VTZ%Egsl$qI^3`V(N?y+100sY
zHaYlXd;=eiyU{ygiz3(*NV*8?_bBwtjS<6dO026a#;iUlaR=HyAPa%_%Q3+FWDt0-
z#LZ)SkHo!Ud!5V$E|Yn{^JD>Vw#*04{L7lN@bsX}06riyf%i+?w?@q)f%nQ$z<Xp4
z@H(6hsOD7Qc{piM&1t}YU9$&I56a=d2jmFg{n87(PbLHJm2TiY(g(awlFcfULxAVW
zVZhmPC~zjU@efj9vEoIf9~9359}v$2?-xgb_rX(vI^j=3o#GkbGWd5;+n>~M80iPa
zW55T*6Tth$Q^5Pg<G_2xlfZk#Bfw?iQQ$wT0e8ny!@a-<;CZAP9s=Gc?gQQ{aNiv@
z+znhN?g5?$t9F<@#O`9Zuxr?Eb_qKNGjl!mm`!;5qMDVlS$`aJc%4XYeSi;0SZc^^
z0PsGU1iTk#Gm_hA;EfWu)girJz-92Gp)KraNqW73GodpQ_m)X(h?3qACCwp9x<iz-
zhbZX}QPLoyq(ekWi-?jQ5zWNvyNRv+YyL@RWoK}35Pl%)Lnq+<G9GxJj0N5+<AC?z
zbSmr}vODlLiM#*y7Kzma?MDHZ;oOM+2;7LbOJ!H!V%ZHiAUgnO%NSs2D{O>AMj%`!
zVJ-e_v}73456E!f{SxamTF2^!)+KP6w1DSH2XMBuf&Z=EiGL#JLA)(Q8t@bFe(?+N
zKJg>)Uhy;V9w~r#z;ICSu%g*pL>urr@hxzfI0-zDZvES(;#c5e@f&ae-Z^jrUmtPu
zAL@<x3Z)K;6Tk<=7r^_)*TDPWJtVHa1l}Y4z#GLk!0X^CB2GR5o+my7&K92nXUZ%!
z&SVp4yvZsMCA&bBECW%p4MfR05GDISlq>{MvJphdN)Y|C+57?8J0Ok&?-w5e?}g_I
zT#9#q%f!3D^ThkW+3<9dM7ptK?1ev>O&i#1wv096{TO<OY6i|yV_6W^ek6PjucPEa
z{CY<%y$ZY^-e{7_G2p%8HQ+t)m5@~423{v#0xlCT1J4t00vE#@OC$3NaJKk6aHjOA
z9+7RMo{@DUO7@K?SvaC(<A{=#BT9CTC|Nq9Wb25MwIiB|mF;Kt4f~Y6$6jMc+0*P1
zoGNc)*Rj3qGIkz2gZ*Vc#Ub!@P}~N5K->wuPuvc?SNsilk9Zn*qqrG(9)1_3e%u0_
zDehoGmW!K!XHy<I6ZVxjAqz{CY%Ec-vP8+w5+zGZlx!_gvbIF$QF%F2mj_klK~;HB
zRUTB82UX=kRe8{PEF7zHHqN<ToNNbRUGL7~#P#5HAN<SIpX-44;I~!kNeOVNxB<9W
z+z1>H*8pe3V@kS0d*K5J{h0;dgY*MpAMk$o)2ZJ5z<b0Mz-8h};CW&<aJIM#I1{Ij
z|Djhnp$}q7@T*>m90&1B0@Zji@P2U-@Lq8V@E&n4aG5v{c%CQ%E)|yp7vtA?;`ajJ
zY~0MDvA7KKulz4G;B3@#Q0xFc0ADZhaSrf4{FY7JoCUlGzsZvxYy~b8+koeZGk~+j
zcHm5U3Jo}{Mv_)Y8c|v!iP9=bl-5b2v{DkKwUTHVR!gGus60kel?PSjK~;HBRUTB8
z2UX=kRe8`q8?BAt?f`z%p+0Q_-Yd2M?-A>O%fx!%dH7|C`f)mNCj7N7F8<e<v=d&Q
z^=uX1x~s=qc?)p5nFhbg7}7o5T_QOy2R?w`X{gQB!284s;JsoM@E-i$L~?8fE)y-l
z^Wb5pQC$lh5X*qGMJsS7<%CQhRI;Hx1IdVX4Mb_*K$Lb4ME8mZ6s6q*#cBUQbRLz5
zY*cwrRUTB82UX=kRe4ZV9#oYFork#)kG-)Q@3Hyu{@N(Kx0a6+!$iEBHWlxr%@t*$
zQrsmT7EjAT(vQ7`rS`ixR|<G{a4J2@5A*BzPF|05bC3_>@wjF21uXFs*wI|cE`ViP
z5BpmSNzTCTwE%V(vyZ=z)83;h^dLz@g-8!|XvV2f_Nh>hPzYXplaJmX)Fl|{wkiut
z9}10AA&FB7PPaHG;p~fd`y|fC*@|Z4EKI!6Jf4pIy3R-QqmiFw@(~T?EB`~j=_=n0
zlaDCnQ@aixz_WUKAJNV~RqrU3pVmogpJ=Gwfq3$J``uK&9wr}A%4fKPSAtIPpX;ZJ
zwtuSn2&t$x6m9>M=5r$?rJoWt96;OKaSFYsd}xz6RkVFAWLX>GE!0nm>RP&^?+)y#
zUGTib!&dc%g-*f=Wgzx^BXC;5c@?^FKRcmLt<&)?=Kc7M@RT-j7tXZrutS)4d8h%m
z3qm%YMcW6_<~oJ*ZL-Fr70$NFhG!|9`7b5*sS<?q?LDdl;cR;^aF)V<vgfc#i`Lns
zhtqAcjRBRCZ<7TXZEpe2wn>UvHd)9_aI8*XIQd259a$<%wtJ!q=i8ScoNdE)|4UA?
z>=SKTLyB!$5AtoY#@RNl1hh8U@b47Et3zG_I;~6WRuZtA)hA8z4;%x~NmHl9;eFLZ
zm~T3bd;_OEMk<G(l@d?MC&l0`rt>^$KAroiew#1Ac>}-uK<>ImI>`<L&_50<1;3Md
zqCGO9C)~`r3U)2`@Rfg&rx<lutc)Gx$@sNQw=e~1`n*gn^oA!S3lbRJ&a*Y<e|Wa$
zLL&3+GP}aAR9>!?c*A*}eL6;mV^5dECgZF$8}_;y?^LhBDP%i4i=B-V)%ol~_=hgX
z`D!oQ$8KQvu}9fskk`}f8TbcY#BS;(_A>i`ea3!Zzp~$W6z{{6_+Y#b>c_jqV|WQ4
z%ct=<d@i5ID|jWZ=8Jg)U&@>KYS_JV`33wUei^@<U%~hAy?h_v&kyjw@%#8w{CSSO
zkdmRlU4I2exZGX<!B^RJ81p831&gp(*=txVEc!-_tH6k-Vz0wM3$X7A!har(IX4b6
zE5&Nm3A@-y7|E$PAI4)>TZQ?y5H_|SX6rJH;|k1Z5B9yQ;l*FiHp9Qa73a!K%>6Ur
zi$53p#nJ3i>>KmgE_M}K*n__!=*RVF=SKXZIuY;0-hp-RE_N@h_5;{!&cW}NPqA`#
z1b>z6dG-R@e1*M_RzJjFEBgpL(`B$n-=pOp@ui4O+~SdJJCEkE>^vUFyReJZTiloP
zUOa*A;)y(wUCI0MLF_6%48M~e;3<40yOC$}0(Lvrkz#faAJ3<<2lx#9I{O5ljk}(Q
zc^NNfPw_>(hCRcV@Ot(vZ{&^aMc%?sV@LTK-0^!2Z|`nmZ}V+@2YVN9dY{8S#M`{*
zvyb`3_*L;!zKic-pX1%{-Rui~HNS&>#SdZb{KoI%_p&y;`+b;8{xp2RQ5XZ#Oj_sO
z;<b^tMcxp3FmiX~Wsw&|o)x(*azo_m$YqiBk=2p&BBw=;j|@g;N2W$5M-GTgjO-p6
z7a1Mtj1&>SM0_9dRm7(eA4I$raSZR{9>H6=4@KM)aYw{W5!XcQjo1}&QN%eB+alIS
ztcYlgSQN1!VphbIi186c5qS}#B2pvV5kn&SMI=OYjfjnijBrFS*Uzq#t}k34yWVrX
z;d;gOg6nD5W3C5Wce!qJ-QYUt+U>f;b)IXdYl~~WYn7|TRqtBlTHu=Fn&z6|8sjQ(
zWxLW{Ue_?!09T@`yDQEW>9WFq2|pQrBK&yxTj9sTkA@!!e<J*$@O#4V2)`-(n()2h
zyTUKR`^ekEH-xW-uc|S8ad>6;yzm)#OL=T~Fno0Q$Z&sna`>R|r0|~M@!=i9UE!AV
zH|O`xFPz7nZ{fY>qs}AFC!7yC?{VJYyvccubFXuk^CIUt&NG~woNJvcoK4PJXSK7;
zIm<c4Io?_1%yW)%raIluA<llz1ZP)gtTWQ-2>UJU`>-#<j)%P!_Da}uVNZlT5Oyf+
zmayyacJ-BEmxP@cwiEud^<k^RTEgnX7KJScn-exIY(m(Wu!6Acu=Fr5-o+jemKfGG
ztV5VHj5&UEeB=1k@qyzl$1%rI#}UU9j)xrgIPP%V<haJM*RjiSk>ec48IDbkwT=~z
zCP%HK+EM11<(T3a?<jKQIYv2B9d5@EN0OtbBi_-$;c{5^Z}yM&H}(npxc!d(n*Fl<
zoPF4S#J<lyWZz<6XYa?G=NI7}@hz}d%dn;{vKPR^KMlUVG57@_+fKK=_Aq;ZooIKp
zW9>-WVKeJz>!kIC^|AGy^@jC|^#a~Cf6RKoy34xFy1_bV?S`lN0{jB8&DvnCvYM>L
z)&gseHO-n}jj;->Y%AUJTEnaXR-)D2inF3ErzPYs@_W2(|0#TyZ^>iws6662=~xRb
z9|%h`2D(nxrL(dw@vtp(;Cr8kFHZD@MOlU4{Z_-CW-D8g3tO@sztZi1T^*w=>txsx
zZ7uG@I`RN)>T+0!myz!k*oHG<8$M%Kz&8BG_QEQ3Wp^k`@RYIyPs0)nVMkyCGTA>c
z`^U16Fz=_a@726-!@QrzIn8@+!}eD5FwFiY9)TIZiN|A>@5J{Y&VuC~hB<uz-ten2
zpYt)B@8gp(n_u8Fuy$R_7t0UjhkOZon*v))c(KCRAtH>O9B?+UANw`J6BVXBew*_6
z?NWtv71lX35%#KduTAM*Rf88RxZw9wnBPgQ0HaP|)Co*a?^HS6suef#Nan_B4^N7s
zv=gK_c8H2%F9}LKy6ve7Pgb~CVf~c2b1UB6iWj$Ofp{FDcpRbnJwo++1g$zq$3733
z`Zq$=pRArHtCVDwCt2l5HczRS$*Shzs7<or_F|jb2UVDA8m{sVSEYxmyhEuzekO(a
zR>}!X64|OGvQ<fBE1pU=1p6(L?GPK@N#I=M)|7V96rX4)$%^7SH;vX1#lsNQ`Vb{2
z)TYu&HbazbP(p=uDU!`#C6&Rd>|oXJ!HV<2D*s?r+hF1lIjPhjm2;5FIY^}pRFW77
zNd)m6RAG|uKvjC6orCZI)y@F*bO5!$UnXAoEc8?eU3WiviWJh5SyUDnJpe`zfJtVv
zOeye!F!9yb##s`Ww7RdVzptH#aFXgll9EA^;v`A+EJ^X6MC~FE$s<YiqYu(0OVlI4
zM<I=3dIX5l2oR+aAW9=Zl%$fV+DatO5he*Fs#X$JE2vYY&^RP2PEbyTby?~~Z^eIa
zRkpW1UZs%6C#ZT7RH+12DnYfFp!BkrD%Fef^PWmpJ?Sa$rnv8kJv8YLQR1E`aZi-E
zCrZ8SiC*Y@x|bB!`E)NSPMr2s{p+cC?5Q~FY12$ZJqlAVd#btCQ^^D6REjQ3z3id*
z?V)Pup?cZF#z`0Hq$Az!0);0jOj7Kw@^rT+s4$IccasxmN!C@RcU7a^Ri$^eDgA^B
zA6Km$S9Kn@sZRXntT43|uTtVwzvHnE!CQ;83E)Q4979Q`;}wtb_B0iqqA<>YNY_t^
zyLi=3yy7KZwI8oq>#Ta*S@F_Y>0f8N0r@+to^@6=$El}rDkV<kiBoyv%v0)joT{@E
zYLobVQO`9{Jn5uLbW)`|sS=%3-i|8eeic@BnBA#(yi@i3PQ~4wcq&;3{02`l>40Bq
zDVC?CLKMGksQ4s9NlKKibCXOvC>}bfb~`8up*EFHQt6;tL<tqvrDzOdlvH9=*%-xV
zjOs;<${(X@i%}fLsJ5b2&S;f0TBSrONkkb*fTGqYRY#O69i?(bs&*pP(@6C+Lh<54
zPX#+e<#DN}E+rM0D(g}`a4GF_DUMvG6!pNR_zG86CtQ^cS5KWPr&E=6s(PHNMW^E0
zsakZJoK#O3(j{{k+1G;?ifP#sCD{`t*%Kw%6Q!~a)s{o?>`**7R4WeE3hGpOXapRJ
z6O>b7U6w|`R+6z*SzDF0RZdHVEfc0vmTJ*b8YxvNsq&0ht&CSsOBDA4_c+Lo5GC%3
z68A)jd!p1!fnMl*x|bB!`E)NSPMiwWKcRROiX&mu>_a^YQ!j-YC86Yjaw<iarCzFk
zZO_49{wM$JLr9e5DS)44ApF&Xac&%nQ~z*yugPEIK{+4Jk15z6roro;0nc3~esj&j
zc`<+!X(3LG#n=JTcfiKMdqC&XiP$;PDSRr<j?-~+oQd-(oyh0nRQVK6kT<afTyV)M
zun)Ak1G_mV4~IuKf=A-i9nE8S2i}p#@=oj=oEbY~ht~!B#Y*-o?}pP^ckCN`(yo#B
zX3yaKd6*}%r`1`#FYm|u^8tJy{Eu{QABz3paCjR=a5wxCUVPihhqHVN$8Bxg?aAOH
zc_tr)J?ashAhXzW@W%bjbNFa{|0xf<#{!)CgS-%56e~8T|8dxpma_NY;he}PVP`o7
zC(~;91n{*noK9cDY4}BUGh2u|KC_LVV7}V3E>Ql0DxA1)!QOQtom}BNSi)<09sH#Y
zIK7e=p&7f`R=$icXCLqtd?jDSPlIP+4PVRG@%8+4+yK~!o%GA>?>N~m!k5gp@U7VS
zZs%w49oYY#iT&@{{2cfpaL$D<;zD>MF6Ni;OO;Pz7yArvkKD_zq%$x1C)jcAp<tij
z9DES_<!kWESPff(y?!mfmS2ZkCD-#C_>KG~elx#?-^y>}xAQyT&p3pyq}|2u=J&AO
z{9f#@@wGJmAinta8-EC{q=)$<_-58){Bh3NQk)r@_!F#|KZ*17Q#emQ!;kQ1ajJ$t
z1YcG=%3tCy^S|>~_&@kD_7m=_yvASWZ}2zyTe!XQ4u2PZ!B+SIm%&TCoPWSS<j46(
z{A2zJ{}gA0&-e-cIsbxx3E%VA{2Tr)Kgqx2-?R7m5Bx{|6aSh26YpBA;J@<UcpIh&
z$N6O?I}IM8)j|j<EMW_W2op{bE?go)M2aYQKW-J#B1Uu&9dU1_6TbY_S;UJjqO0g8
zx{Ds7r|2aTL~r(?NECfU67EQC7yU$k`X(H{2&Zm!v2{2htrx@C>0-D@79-$M_rRy_
zgI7I8q>40=E;8U>&xD6POJu{#K3e38JowrRM1Y+TL3WQQ#CPI~#Tfi{^%3r(;nog(
zDqrB{&IEYlC&3>-1s?fnV!D_iW{O$x&Ch{%ex8^w)V&^20Y80}s1^&wB2gn2izWDS
zT%D*F4Wdyj6-~JL(jr=M&uzI_Ay$f2;xw^ZtPyL)I<a1yE;fjbVw2b`wur4_o7j%;
zVD1n*#hKzPake-|oGZ=~=Zg!(h2kP{F>cFUDlQY3i(U9O+Lhuev0LmBd&NGnUmOqz
z#ns{(aV>s}yGC4(n{_veo5aoH7ICY%P24W-5PuVg#GUv(;cnc!yI0(YUpuZ64~PfF
zL->W^5%H*aOgt{05KoH3;wka8ct#u%&x+^7^Wp{kdU&xoDqg~`ua}Fz<8I79#4+)z
zcul-6-Vkq!x5V4x9ek<nJ@LNyKzt~Ui;u*|;uG<y_)MG-pNlWVm*Ok&wfIJSD^7~<
z#P{L{@uT=j{4D+{ei6Tl-$a{al1m}!i=Vc1$S~=Y;nF1|WTcFe(K1GMkR4^L>?Gr4
zXM7K?i|i`9$?md;>?wQ61le0A%04nl;?}(EF9*nh_`PJX93qFxVRE=kmLsHFdZbtS
z@GDA+OqFReU1rFUGE<I{Su$JZ$k8%a=E;0nAOkWe3uTckmSbdz94p7k@%Y}~1UXSo
zl9S~WIaN-R)8!0&{cje&{WnL>mGk6$StiTn0$Cv|WtFU!3*{nNBNxjh_-<XDtd|Y4
zQ7*;3qGs8G?*cBPuL8=I_$uIO_$J^QxmK>jR{>9#8{|g0310@>BDd0)0p%HThun#;
z1D=I%1D+$#mFLOx<puIWd?WB;d?D~s+-1C6?vhu?E9F&kx7;K5;){X%<pFt6UM;VY
z*UIbU_3{RJBYi<o-Xd?6x5?XayXkNEj^3U4lHlF)9(+mgK6yXBB>13w2wxI>guWvv
zAIEnDpTt)LpOR0@XYd`tXXSJ9dHDjqC3sZ6MBfsWugHJEi}9*_4PO&{L%s>0#@q58
z`7XXH_&z)wAIjtMBl)rX1pbcC<O%t?{6c;S@5k5j8~Lp~DZhg+<Olhq{E5Ci2+zo`
z@;BLLF^gNmlK8%#Z8`8YLZ=mOxvU5)61V@Ntr)9=)zONzI>DpT*^0NiSY54d@UQf+
zdRo1#1gkf^Eq$yctFP71>JQ(`Kx>dS*cxIDg(qgXm28c$+?EG^8K331Qmj;bLonUS
zutr*$)+j3rKARkCw3SPD3*o^DSV61MDzb{<&ndCSTH~zoRw=wY6Rk<sWNV5w6~3P7
z)(mT=HOra}&(B<Io;BYpv&!KIs<0~Yb;4?Ep|!}WfoEumRcqB*^;Uz`Xf1`WsM%_<
zTCHW)a%+XP65gZJtku>UYpu1;T5p{Wf6_+yn>*q6g3j<PcYznE8-6|L!FuAp>}G3=
zwG}?6?V&rcxa|{zyLJii8(Z+KC&9l?zv3LiH$Lycmp&h3kHZ`EAiEZ~6guFp!tJ3u
zv+%!fWqEXS7B|l#;a3_BUsD-;+w<YY{}{ihZ-B>n3)`me)&A+-%stj#YaiQT?Z<CQ
zJFNroiCqm}mBYHmy4JeRx*lG#8?BqHo2^@{Tj4Xi-MYj2n{~*#6CSj?t$VC{@s-K@
z;ZJ+eddPa%dIVpae9U^>dcu0rI&3`!U)wX*5$jp&IqP|N-d?nhS}$2ITYrZi?jP1M
z>s9MD>veeL-n8Db-nQPc-nHI?ck4>)ed`13L+iNp5xjPvSf5&-StqQ|;lumV`pWv+
z`o{Ve9=-3Z@2wxKAFZF@-}|Tai}kDZo7HABo3oAhWh@My`ipGAHrdj)Y#V;SFxzQ|
z+b%l-Uco3k+K#b1*d6UycAwqJj)QOd3HBX3$-cKc+wpc6cn`bT-R&NBPrH|$VE48Y
z?LKyr-Pi7i-wwWHU$MLF{wz`5;Jg5SyYpEtejO=iSHtgr9&VoPVh89q0egTw&>mzD
zwujh5;guY2C)*=zx9x$C(r5ea6g$;UgU2!h-{#C@cjK;S7Ce|a^vez2H8_(UWA9@B
znh(Eb06XMY@e9mr>~;1gdz-z%-eT|I&T<jX-D9v99*f_1#>3Aw0l$S!!u{nbxWPOP
zzq`%AE#_Ic$2`ZLYku!3hrhG}zxh<z)%HSoPit`QSz_1Pb@&yi0shpb_ywieZn0b8
zU0sgvajwK~DW}=1?KSH6q4o3&5q?+MWN(HCb}POhy4^m*-eK>w&xB9*Z2KJhTzozB
zeES0XLU?H}#&<(6#aBZw$2UW-fZz5id@pp5z1Q9cFYW>RAinc?jeRYAy4Tw`*f-iY
z**Dv_*tgoZ*|*zw*nhJR*>~D^*>~Ib*!SA^+4tKI*bmwdv4_~hVYzkX6-^EGj@$)J
zRm-ZvTI*}vp8Nu$o<OeKP_LnWLsJb+H#FDKd_x18=9%(&rhJ|$pO+ez+pw^qzG_Lh
zp~;mIs%5v|?Q?smwA&L@wYfb3Rod<K`*f{tQ=2<ABEO=hsiL*6y0&VCE5EX#rM#k|
zs=mchP*IL9ncRjqx8cnlz~iQd@)k!x=L#4B1e5?=fm79(KA1k{nR@a}J$a^&`KFKg
zhO2zj$Nbc=fa#;5p+0)jLw)oFJVufpRU7*3k0@-{r@}ul<Mw#Hj>2|*^SYJP-2ODw
zsHEfeWcVVAey>6I!E1Q(=2}Gy%9|X;Ej6{3Rbj=t=adIy9@KgBO@H%q!-_TkdStwT
z5Z7QMKVr-u+i-h)rYAll2cO?Dw!EUXrOGk(6vxPwXN^UlbW^8_m?nKj#6BZhzY(q9
z>lm-9(wqj<9pl?o=}*zM`AsMNh7o^ySgGz{ROzDD`i139t#!5Kt*ULer$8y0Cy;N3
zGvBmXVA?D&-6$}%7MNNK6t8ZN-{en$r+raFlTo$;(}Mz2Yk|oXFtr+0#>~<}#SAm*
z?g^x%Iwom>O*+*(q?-0pO#3OOg%s05O29E$m5P}BuOpJ88h3j=M!czpiB!|IjDTZG
zyOvT_&2Eo=jAEvxRMS$buFjL1>X@qaXR4VwQ`O9|r#98pFN~V{C$cuGS)fJ=vQN_k
zS&(69o*uz~k#!)|p8C5?1BU&8;U{4D2^iT1-C<MPD{7jTWa^l{u&I1mm1DXV&h+1f
z6F$ANrmCr`xu)4MQ{{=6`TIl7NP4Jh!%)x&ADTBy)#sY^hl%M4WQ1g@O1M4gYBoVl
zj8HKv%8j(j+Z$TbP_EI&TqP-}htcU=B`L&}q(F_Nazh5%OxiqCKF^fTGv)Kr!pe;i
zGBjj_+$kZ=gV9m7!O)s<N;it4O^PSrPK&7cT|};mQ+;<-w$mTC;mvJ$a|az&`f-)%
zd6l-XRj0~pY3G^F<(UfdOa*x%ixirwrgQnGbNOjuRi<->hC1iT2z3q?)`-w!MkJUL
zv9Mid7XE=5m^PndVY^OwJ=(&iDhnI2==YMEcdy|k!)S;%&sszlwnop88r^fs3$-_5
z%{Tqc&kL(*uejb|h-<J>5V81=ZNYY$p7@L$d?}Gj@G@sreQkMtWle>nR$Gr+#lBUG
zj_G!NX2P5*Z`$`6dHal<{YK7ypQBz?rHcnM9QCIp0*y93J!N(cSN@EM`f~a|G@2S3
z7gdEd=$=P4{E0a*b0xIP2(3IJlU!i>r_F^Ypv?uS;u{<oep7sQ!|!II!1SiTXitI3
z6)?RDDR&^xnBKgQv^{~8GzVU!#9F0$Owm(4##1A&6w^YAX(1)(XjY{nn*VjEQna#p
zJ*H@?VItM%XlYk-s;UttSM?Ys*R+soT1Yj0$WSsyzBEUxR;*StrCPP=ZB?eX^-pAN
z?2%r+po3;P(F+ygA!BOvIFM$y{w~viVLxE_3K+fuhOZ#HWoDqEp&6Kl{RoWka&3f{
zYcVbVT}<K2PZ{Br+6b@w{UMElC!kHJClEBO1&yLXA6KdRT&w;tcVUE$;$)~2P!ug*
zuU33aAS31!H4)w36s3ruDm^z%TTR4O`P@96j<`~JP(2J@vnG2})Tp|>8Co&Dxmws>
ztuV;1jlWkb4&qAKpvvll8ZFTav)ik+1k~^qQj1jGA8)GRBh~PcVd_iOgX%RaxHr}C
zlc9zS^%*(nl^pR<y5S=u#D}42Mm}k#e`$uFG$X&XP(KY#H8joenP&J*Gkm5Q{?ZIz
zX+|z-hOackPnzLJuRm^Yx@kY%w4ZL;PdDwQn|k#siTtMibW?x2sXyJwDc!WAmv`hh
z{mn4_%?ORBYR^-kjXTEIv}g3nt5<8cH&^rJ(OZ9Pp$&f->9Tr$wGEhGqi`+aEh^L!
zu9gCSZgP3JG5*ObRGK$6Jrv3)NM2#*);2CGxALl5%I(7Py1MePKx1=FZ9}~^3rRA7
z<SB~~vWju)u}jJu8_TiZu3J!9F2=Qr@vUM;4Yt2EbhHx_YUHFv4ff=kg>~g}N_lJ8
zR9%&vu&74n112=rxKw*B4fPGpk)|aTaiS#^2&abha|(r~Z=`8NKQR@nNQ{Yua=J?E
zsut=R>~ht)1>oOaNS(7Qt7==y!>UXdSK)!Ahb^j$HPpo=s*AO{i}kHyMGe*%)j!#U
z&NZvfwV-pYrgM$xSOox4yMdZk#@%NI%coakx39qCQrzec7!Fj#2@X^MBNgg8g+d*Q
zH0|q>rdbt<F_BPCmug=<>e#*pl@j+anN^}PfkC%Ya8J;!6x$OtXV9S8DFxk1(eYd<
zI;ghhL9+!5y48e2x>9tMH}#nvSJ0dcf@YZtnzLWf>`;Q{2oN;uQqW`S_o#{F33^R^
zUc(>GjAXil*x4xRHF0k!ZpwQ@<qdyc!=KO8=QH)0<5bYB?Ll)u44R!w(Clo2K2x7L
zI0ns*Ca70C>~BqdI1(zp{3aeW@nGn=;a4vlIE)*9{ic3%^az?ALC_pYf@XaTnjJ#W
z>=1(5z<Yw`2op5xX;2$%Pf#0bPcUfO4H`LVLyqU6xZ%U>3xfJ6hUcMiHP5v{^aQmb
z1U2<)Lx^}NpXrY|=LF4C8#IUEV1|*4Uf4Xr3{y{r;YTk#NH_Ilm~qq#3HoE&$u;$u
z<4Z8t)MJh@!Q4<jQ%|m`C)f1Lt#`~p?Gf?>^}+<I3^nvx8*1#E&3sXY8tG~w0@Zuf
zpj&Spg2o>eG{>bN{7_0CJf<CwsaG#}Xvfs+G3|Ilanp{+wBt49y`l2vxn2-4PfU5Q
zDR2BSL34TtdJP|5!zX-4iZ7q3*B7eSr0a#%6Ewb-pg9o)eWqQX;mbH!f@bF*G$)Xt
z*=YxjQzK}c9YM464w@Zz&^Ta%=424m3pwNxnlGkb#xoZ*E|{P>8wAaPJ{U0k=#7^r
zs5efi$LNFJ2q4|mr#D`RoBrqx8RDk@dLxE;W#Y!Y5;S}Lpmww1xsi9k$klj2f@V7&
zOf&kYHz1f#rhUEfLfo{kH(-dH_Vfk}dT!$8*c~(n=b+xWz}}krjNdb;H!_%qhA+L5
zLEOkE-PD&J($|nanEZO9f_Z23!T215#^)F`UWlOC2nY4X1^G?==9C)L=Ly(pQ-9FZ
zZ~VPM<BkXh4gWzS2fg9(1dW>_s5iWboBDGN|Hf?*)LV9}v8o+Vr8l6;j)1Cp@Am0&
zbNkW);pO!WEmgHuHRUt|kfK@!O|jLw7_M+~MR{XXXmLHYULu##C*zw98c#ydcoKp^
zV_(eqC8!-Akb|*5=Ij_W&cL8?-v!MHHE7P1LF4lcn)6W5xT1pj%3FYOFCY%-oCzHX
z{2mSje-G!k%Tv%UoZl{gLA!8%yRro;tR&>uw#)6;whL5^8K@dlP%S~fwpEC$F#^?N
z;@5is#P!(t^_q{k9wWbA^AXo$<u{&czwxK|we55Jwe15n?Q2_yxM|;Prv2L1A>FjE
z_YjDi_Vu0tanrt6%~8Zn`(8DMh^sXMzZWPQ399A<sA=E$!~Jg4zFrgX-1Og_rncRF
zcUrR6HNW0%A&22a@2(Ixoao&Z;)WBwyF%P>VvcQob6oNp-SwN}g<sE3w_ndfP_;UO
zDy?<<_3Q&RJ<zKq;-<%X^>X{QRRJ|U(Yr#oUuz|(k%Zad`n3z&?KeIEzwrV1jWgP>
zt*G0tcPXHzJw5x~e!U8TntJuBgSgQ!z3L#YtN^It%N)D?dRK>ZBUinPL)^$!@8S?Q
za@D&y#Eo3_D&+R-RS49`N3S}Fn-SKl4&tVLztJ$g>qEL}-}q$x#y#NIyF5HM?Q7RQ
z;--D$F7TV<zTdbF{Kh@t*Q=D<uU9Eh(|(H4u#{68W*i58;~?-G2Z7%>2>ixD;Me;{
z)MQ4&I12p6A>cO$albim`^~}CukAiG%JkegCj5He22C;}sO>l6W(4$p3mRpf>-7wA
zQ;$AxK(mbGwLOGJg*45Kys`6sW9R+G=jPYzFEq=HfVRJGf6%9VanP*f=B5Q?&%7Q_
zYWS+EriNttbe9u95$Zt8a-HI8Sp<)#N(--UXl*i~nq?+mbIl5s<Z8x`ne{qYRkLtW
zi_TbIV=7c_1+*r51HL?0b<M)ormD*F=0)m}TboP#l%R$HR4IcOJ~;hcE3Fqlz3I4C
zF2vQOMt-GCUY|CfprN>~&!^3&H%(7IP+d<zn@?{*n@>=s+@MOt5RcC1@wy$Yo}ec+
zSCc$hliZ>O*NpR|5}XQ<;3!}OM?oz(9U{T0d?YxPPYX^3wcu1nB{&sotZi-9IqPcb
zL&2)0t>v{UHM+692_EUH>J}A^QPCzf0;;$g+ve5<Ar=wPEH3z+#RaEWq>yG2`812j
z7h(~?5R1rYSVYLMh{quoDW_p^LGvG2T+sYS7ExTWNZ;mDQd9wAkpf1F6x34GA!1SG
zBNkOY&7ulw7F9;YB8A$qK+*OrP&}fss;Q=-Qdd>c00)T*YR>4}c#1O>AkHXYIHREE
zOoxawm5(@6`7~!Ls5w&^6=xJ`#~DT2b4KwHXB2j6&M4?8SEKD%ph<-$m6~V`b5!ft
zLQNKFQlrUYO_pe)HOWz@WA&P7HFh-WSd%7N6CGOD9IZNWnI_9M(Q55jsbi}Yp(*S3
znsw4^)=96iW?sGPbK?i^NR=-oLlv?DtxXN8q$k50RnY)nTpjFFOL@~utG1>|Z6dtx
z+*C(nRWnkxS;)<>DjVt->WDV4UbkMrLG|2rYriw%$~=Oq4FT#hwnw{dkgjcr*OTIE
zu7#yarVl@oDzq%BX{ro|DyTrSYR#jUBV^VV%cBoXh-(Yw(Tfn`x;0OVI~-Lhomdp9
z%&ZPKN6-{B;Yg)ECSuxAiva3Tivxab*1a&leZXS*!mFBF@Jm=rRi!S04N-YhQ^WGs
zMicjjt9WI@a`ihp9Or6N2Zy=lJw-dDylH5orKzTTp(&Z77b-Z|O+GAG>UpK9$4D$i
zZ;eo&<~3Dsn&EKQ@ie_zhJ)QmUT<+=#nl!ER4;H|Jwk4;K45_AErM4&&Y)6yf%9rd
z7~*<?^=iio+Si*|pWCfApP<PVr$S0g=w}m?;yLxqlN@^HHP5`s6(l?4_L&slsT99S
z@t;abF)1mhQc_JyYVwj(p%5pj$t9+4y@ByziyUe#-Q-R`m6BmnGESxBnv~pADS0L(
z?^H^@Ny$Hz5;Q3|+UV9jMh+gx!K9epd%PieK(~|>Jib#YdQ<H)#~GhF&iKr6#;nI~
zvmS%$EtXl2-9B@i@tNa`&m3QT=J?_>#}}X1$i{n0HeMqe?<v`sBaP1-X?*4=<1<GX
zpE<(#%m&+MHrPJ1q4t>#v(IdpeP+Y#GaF`~*)aS3MlSwST4A=vKC?CUnXR!e)yOo}
zlU%O0UOu<Fj1;AHNrjUu+C6c%djehkLu_HYe0n3NYxB3u1s!acE5F?njJ$b*>E-sA
zCo24hCm{~#2{>q1CZk;$XkWW0zIIPAFU*tFcI~L}AD)ETp(nq$L$OdhD*T5sp?2uW
z@9hw$sk%*U)6lneVSQoCr_zngJnE-XlZV2gJQUVPET2A#U>B)vx6wwgPal%K9<zHi
z`MqxK@B}q0iayFBp66<AEU&0iD+f&~uUji&Fc1vtcX8;uC-^eN0DMy$cV`*i!;$#f
z0L3Nl&{CYfamxnmB#f*nK#2zE>l=MESOY+lG+0AH`)aUiK>KO14ukgBV7&uMWdIhn
zFi?Xv1auH!Fw*ltDGsp4f>ONz>pRe48Z2rP-{2;&=zFjDYBhmHe2vh6udy<`N5t^v
z5VPnTz4+cY-XLNY@i<C@^-s_&4c5<~^vw%^^$Tc@28;L_t-)FZnhTf(5P;bltOC$E
z8muv(b2V52P<-#3zy`q$V+9t~U8cdN`pW_Mo;bdv!SJq#0*i)fwFV2{uf`iB3amoV
zwHk0+m*Kl28aU`44Hn6DuLkP~=speBQ=t1bSWki;&|p0cdQgK^0(!Lu3t#WXca#*^
z^d8r>8Z6@XIt>=palHo14|;<JoAl~N4Qh;TLKt9GfZnXZ_JNWP0<0%MZ`EM6f!+qV
z9qDzT_-;Ib4gJ8)ZUqA0cE??B1=a*md`q6dqVc>-gPjg~w+5>g^d1cs_4Qs27U}kV
zfCo_aJ<ta=Sk%@-fX4u&V~-o4`iWP9@c@z|!4$w@0LhZZ{22oaKxqt~1FQ!;Z(tMX
z3kImaFB-TC^eEsJz<$6#G*~}?9y35PcopzEfbzXz;5E=U4SWmwmIhJ{+<{iWuLOMu
z@Bw4o0{u_}j{rTcfs-D7q=6@aehl~&`G<jirh&UbPXN9^I?3Tn4SW*lR~k6=>1z%6
zUJ7I10KP~57EtOB!1@u?0N;%8Pk?_S&()y6XyBw@ziQw#4!>#OBqx#`fMX1(pQ^8!
zpa>`k2NfD<-sAm04K7ghU&){Z)Hcu!)S&@y5;7iUpf9LX1KuxWoa!a$2cWtDc;}Fj
z92E=zjnsg*5gESeqM<)%v<AGP$asu_fuJ2Ukp18t4Gaa1)xa=!@OGjG4``eQyral?
zX9Hf)cnx?<k>T4n8Zg)JHlqT33ya~MMhzsB?i$Dr@g4?7fI<(HE?~TPF9Ug?2^#R8
z9K+j?8uCFCHQ-x3jQ256016#adbAvr<VX+zkn8|t=QzoQpcp{11K_PT#z`&&;{by+
z;C%(g2OF3OIz$8BU|^i&MKBoveN{TU6Lh!%l6kTQyuCsHBaQ|dBj~i!>n)%pUxHZx
zk|}`%kQ@pA4)ANhn+J@i7?=&3ssZmGFrH>$4rsc8`JfpZ@OCD{w}&*8fs*b5@P-7#
zTcR2&K(jR9Z3%`qMm5lQ<!HdS?ie3!U;${Z2E1FrIE@*>LO{L-ym7(swIdBnKxsSx
zY&U4oKm%x@1_rx<Z^~(?1Ep~yXa<ZiAV5nDyaYN{1Fais{AdhU0>*0~`;IqTHEaZ(
zpn=vF{BJiJR)J2^K=xjZ>ts+GqbVBLL!eU)oC7*d1K#vuoW_-a<V^Duz#axAJs==?
z(ij8Cj^j&D8ZHK<F$0iY=QJk?NS^aFkgex5mIRjp$~53@W5#K02rdOI&_FhxR~Xm>
zTB(871YTv}D$r^TjC72~jNl+(kp{B;_zIN<lGS1jv>xC)Ga7CHt<^y51E(<~xDi0}
zA3$pbr!gkD3DBs4)(yVYz|Ejd8pz(O@uo4qA3$~iK=z)u8h8Yh=05;$2Qj=?tl<gJ
z6&mo~kk*5h$n!J8s|*|gJxv4Ie!kkkbD(Q9sI_4&!UWF()*I*zdbR-$O5+N!D9`yC
zXm7=LYxsZcy$76C#relQbI!TDu*<?y7g+Y*EiAqFvUHFl9i)i8ps_`X$v-hhjhbkT
zQDfI=qQ<VVAd0b~AvRC}8%9v1uDS{?y1Iy-_xn6^?%unw6cbH(-}l_l@66mebLPyM
zexBdVGcs0ShfaqJFy%dg^nvz)2;xWHhjQc<VoF#*#)wwpBxnF$bzohYu`41-*_8YS
zGCq>NN+EH0%|ZHP`+5X<rsOv;>oDJp@F3<}4(5H#)e#nAN;v>#J?1|mJcKFb0GJJ!
zlJ|l|K>PvL${SWUJH#>NodKHLjNKC90L%{^SRH2UM-hI9DftSFlmp32!3glB11r*u
zt&SjNQ1TM6O5fP8BNULPEgfX6<h62OmpIwoMj_)MFW-T+<HqanAZg}}a$wcJ@pvDB
zq?srGfhBFd>0kzS($AaeU_;D<93;)WSzr!+NF#49I0QRs<Q)c%#!k9;)Kdko;89P#
z<8Y@gc+^LM-G)hh6xd2k>Z8DZib;L+PQgxkc|QcFV<&CU!fL#q1InuR3qX1H>Vb2>
z`5+5i7@-m7Z@}fCF}M<31=@gXBNSs^=U~@i-r!)jVv-*MyB+gS4w6?M<=>NZr3`qt
zI#|k>cSnR=%m*BT`!E+e1mZ?H69m)|FGBDH_D3Cpr!fEOz{)@4Jr1}YbitHsPcxox
zhxv>{umtltupIYJm@B|a{LA&#4zWI%Z#%@KEJ*%=SYOO{9AX18*Eqy_Vy<<F^}~GE
z0o||0lQaUsQcQVg5Xk#U-h)8igE}Gzp5z<YII!-}_|^f<JjVANSb>NtTn9ApuxW<_
znt_ZTbBK+_%y2+&k3j>xA~p$=yceLu$N2RfV$(1w2LiPH81%_2Vw7LMfkSLICgnpA
zn~O>L5X9zTHgSj@irLg5b~t8BP>7!+F-t&u>?dG$aEP6X*%6Qru?3jqnIJ~l^}7Mm
zHAeaM$qzy7XPBhBKLq<3m?IrxXJblQkOr||V#>RL80E{CXM-4J-Is7BJb6dCUoZ!p
z6+zNL{0ZdUe-%OA{nrlOXv_;DOvj||_!p6XlKvMvc#`IqICv8<FLm%HVqWIpord{)
za5MMHd;b~Sg`Icv?{@IUVcz3_z69gn3+~6y@tD*NfhXzqAb1A5<nOZ%(th}V125u!
z80Je3-bt9t9HgD_mjn75?_|tZ96ZUF6<{Uq^D*CW@FXqYiZBuL?FjN*>V;x5=GqA4
zf&YGlsg!TZb|7W(a?E<55%xb|=7R3nd6%FEko0~Ele`I}9Bsio%0bdezU>A6R!q4^
z(%@FiA36BjFv)9ye;X!wF7Q9ayv)JB9h3AI_?4KKJNT3tR%|Q$?U+|P_;+Gn<KTaW
zd98!wS#X_$|2gLM4w8p~yc_VVFmG~@{0we(@V~&k#X<5mkaq+AmzZ+Dl!L!u%00lZ
z#=OtL7xR7xe+T9R4pKgX2Oa#cFc&&VSqUC;@ONT9;vi*5+E#)8HRfXuzTEe?gZ~ZY
z67URuBn--!zz;EBjUaiu!ohzSb7cgJ`MQHI&wL|-hxw+1FVBA~f{(e{!G9E!GNz#L
zh}=Zr{}ppXgc#;#2VdeYWkrwy${l=pj}IbbVt(S_OFtoHNFe1=$^r17#FV@j)Mxvh
zQU@6$6pV6UCB7*b>kv>j3dVu)_$SW_s1JgGyepXEAbC<S)j{&1V7fy<S{2N4kUS}v
z4d!q!?^rO;LGq#C28V$1RzO)21eBQqxdwu#4O{g&pr42>EFEkiCTSr+Ymtfb{sQ@K
zj%PWDoH3s5Am6_61`Z;3jORGWcW}I+gUBG`jU42gINrhmoj4|*=OEvU@wkIofSGWx
z!!adJ0F5;!F7W{J{TFZRATr1}X)cg&zPLOCh&(dh*+IVf;=LTqrI@`P<l8CU$H82N
z+1Ek7rQ-b@&<kMV{T<}nC_cc!T#Y%<LB5mXgB;MSY~q6*<eMoz)B#NbCNA#@<eMoz
z+`(LrIl@7{pW-7O%pWi*KLYudijQ^>d1`!&gM1ss4{#9KYFyF<SV>#Tm_X#Lamt!N
zzM0~Z-#}!Samiy~&&QnQAhO0d<w_vmE^*42z&wjN*FnBr;!+NP$RgvC_rP9>DftaV
zHW`=n1y<5f(iE8IFb{XIl7>e(h&(cWqyrj>P5dYa^D^eq4)#V&Nef_TKjJ4k*qbm<
zazOW#iJ$CX<=szlFtjW2A3E4uG0$-jSz-K_4t5FVxeg*bjGyOVpTU$g0_Ic9Upd&n
zVP4`OGQ_x~7qBm2UhW_=!nmXtkZ-cMq!AE#VO-J$$oE-X(gKLAA}(bJ*xNAw=peG%
z_)QMN1H`2q0FmLvCGUY5jw$a9M4lIy_XK7Hri2A-Bh1?!&~|O&cQ}ZgFMg*3dMix)
zE(ekM#qV}N&zXte;~?_C_`MEjKQr;aIEXATexCz6(M<e)2ayZLA8;^IP9Jm-8DV^(
zgOM`(kb}qz<BJ@Ol;4LPM0OZ|#KBC!T<jon#Q38Q=sP#@zdDFKEdH2-IS%u22a%1%
zpKvh8V?OC1a<ceS4(11#QXhcG%;HNNjFdqs6Tl9@eAWS-VJ0qR0*EXvzSO};+5EeM
z9fT=$0H9&a#GiK%`C44c4KNpCzUUw_r1(n?Xc;!~Wey@wic6gV!f(W1b`beQT*?X%
zt|KmG4v4HGF69ge=Mi7&ATo>iDhJ^};;%W_voT+H5H2MChJ!r^^GyfgM&fTd*k59<
zb`YK<{<ecX7xNzu!hyu!aj^1^YaE0RiLZ6A@{aF12saXc&%s`Vxz0g&lKA@$_P3bp
z9fUK9Z*Z^|V{UX1ULn58!Ad#W>>xZte2W7*&rQ7C!HC-j4p!p)p@VP^@sAv=#JR!&
z&2c9Fv4fR3f8rqgM0~4*l{jy65WXV*se_d`S2`Fmw>wxVJD)k2FEBrMurFd(IS5A)
zmutXE8Ik|MRAWZ4l$Qif3CsALyiIr@6Fd2qs0Zp}{}E;uXoUU$Fmpj;?4)<1322U;
zG)%Mvt*}!z60Jc2_VX|cK@oP+Cs7RAV<&AA9Y9Cy7hrY*-LaEji5{RQcHTA73-rg%
zJ0u2xf!KeKIS35Heii0$FoLm`k2w;I!OlA*#)0wpxe;>$n1uai%&A}+esVCUgW1@5
zpTt}T?{>_24&GguhdOw7V;=6{-Gg}qIFfsL&%{ySIPAP<;&|`_o<%)MoB)1^eIe$l
z;56)SU@icpt9-X7P6t26{vqa10BP)fj`>sYGs28vo&kQ2ojgdK34Vc{j7yvYeu<rQ
zOq>fyOTR1Th2T=c`77pSfHV_MJaIX=20Q7PxEA~gKhI*`1V|fy1m-Q^4(z03;!bcs
zex#f{03O7?7E|5__?<Bya*%KF#3Bdz_D)b|1m1g?iyi#ln2!SDB{HPMV}P<RvZVxN
zT_Ez9#FGyG!I-qS0)H;%(+<Am&k_g!Sj=Y}d`WwGAK>@Lq^%XmH-CaUBk%`c(!L73
zO3ddS{9%|cfERHmO%pEx-dp5YiRBI=`$@d);2(}jJ1P*lK;l&g|7gq=U?ul{jkyZE
zh986Zrh^w^zU3hDn8a%EHva#B`48|8_A4+Yt$}|8CheZUKMM0b2mct%bzlSTEit7Y
zZo;08NjoO+^DwtK_-!!D!3TtYFQ$~akFb;938|C7yAAVWKs)8n$K2}RABrjI1w=-Y
z*zVvD$D}P1_@gna97INw_`<<I5c5k=P56Jp+yTDAE@f(`gD2@N=>`15Fu!r|4>6`N
z(;@a3%=&=$i&4J{a~*`QFKq0f_9oatFc`BbXoj8gP}tldD8p>w5KO})?Fw7rrwe9l
z2az8Xl3s-cxOc;hI|My33qcX?lQ4@Nf}xo09D-8J?hdhqm=YEU-pA|(dJ})Sk2)zp
z=a?xR2nOLtu1owtFdcJ<Lof?do-qt}(!7wg76fZC$2tTvFvmFr2VstP2xelQ>JXfW
zd76WK_ZOZH&LW&2VxH{~EW$hoT!Q-<m{&Rkf5*JpA$SGzRtNcZFT5R4j^x|D@Ggg7
z73Mt-!E2b5IYF=tQ}Pc4|G<0@EX4jgrab#$>~CT|>JU&L3jYco!+ka8lMcZeV~WUM
zL5wm{M4k!)u~Y5^BJU|8zXZXtn54TPI0lpa5{PWRsGCEq0p?VPfO=3w`6wbE<a@q|
z^es9V`zFkJ;4ti;VE)D-_zd$ha0T(n!QA2yBMpi@hgb$?1dlRO+{hu8h1u94Mj0<|
z;t*6}Hg^c##iX1Hf@;jx4zYTeafet8v$I2tdQ(h!5X5MJijQ!JSxnx)nDhv~Hl~DY
zf*5&ILR}EV?!=`0mn85r8?)3QM&6bXz94qDF{L*-#E5$-d06@o?!>qB5wI9Lc~JTU
zAkSjNyL1V7275l{a}F`ywe&@Y7<pMrTOf!PVJ>%w4PqKrF5o$_0?ZQ}Vuei0;vPYa
zxVE3}5Nn3H8IT77dDV?P@5Va>hhh>|x53y4GIfZuCa`Zqd(ChVF6t}e;FVyKUSE-a
zG0Nswq|;XcWu`5kX`w^xA*hoRz=?!8-vkZui_TuzQT=t(-3&Ctk&GN+&M;@8rT855
z4_|?9;RnzFyvA-oSMNt?<gK<}qdB*~Hwt~VhoGJIbTrPMg^t+^(ItBo8f0%obL=hX
zjJ*Txun(aR_6fAWK7+p3mFRNafX>xMXj&~qi)ttIr}ji=>JYS|PVtXKcj*~uE4>J<
zq?e&@^e(iDK7)49mFNV03w@yPpbPYUbaysF-{x#|VjhjI%PZK``_Jfvd<gxIkE88z
zB|028prdhXu)UzPU{t~Qf=LBa3#J#$DVSGqL%~f2kH`IZX1q~6FJ2TcjdzX@j*pMe
zh#wvQVf<I|OXJtX{}``MG)^>6v`Q2tMkK~0#wR8vrX^-4<|gJP4o&<baY5qJ#5IXO
zCGJSvpIDSwns_boPGW1~v&1)rnT6SfEecx~#tVxJ+ZFaG>|NNma8Ti}!qJ7}3r{ON
ztMKf?OA4<nyt(k!!aEA@D!jMwzQTot4;MaG_+(MjqP(KQqT-@<Mcs;~7ad%5SkZ5a
zt|;14>=kDeH!5yY+`PDTalE*5@wnn6ijOVvOInsBN=i#Qm)=zRQ0d~*Crh6xeXjJS
z(&g<Mw>zPI)ArNbZ|PRrZSWlr-!tQ@;F~Zc*G-}6VFvN-JkJ~nOM8>%>gDK+z8}rb
zFWdF#VEzzI%U{}^XhoJ>or)IX!@OhADf|mG2#e0(E71&m1G##0l&cHT^!qs4eV;+2
z?+Uc_u0z9aBXsDtL`QB1a<v<|IuMPwlB=g{uAWb>UV@g{KchGHL3F{csFkZoBGJLx
z1HGq5p~v(x_Hn-nU7z=%*Yh#-c)p5`&h_Zu{3NK<TpdfUP9axk)#R!d&xmKmTg2n>
zw((B!Uh$#v>G4_d6XNH@FNt4HuHM8p;!P4Q6Ri`4iIItMi3y3RiRn?U9-cTSabe=J
z#I=c=5_cvZNIa5wF7ak!ZK5(!MXuH_%q?tL*ru?MT<u=ii(DO8SVpdnEj+dGbaM5a
zC|7SMSMMQLA1qu{_^9S;i<(@WS~R0*9=Up1O|CX3S6kKO>M@$DZK7OVSo%om6QxVY
z)fdUt+$dK!cPs8TNOP5%EV=5hWop(l;Bj);gntSbh{-`aU;7Ae{H7s3eiL5E`Qq@m
z;YHyE;f3;#|8v7%ghRp~*l*;YJ<U5F&DzJ<Pvsx&#so0l8_Ri|H`W{Djled?D+%8V
z-wj`*J)xca<`3Uo&-n&$^*0xXKMqe1e-thVe;8gKUJ)J@UJ_pF!rJqBW7QVg_bo?&
zqs82kv!%fnTCKeu>wC!64XZXBx8Vnvf8TJ>hS?jQ-0<{<NgF0_V5EavPtXa_CZ->o
zZr^lU^8W_XapSg)TQ|@@ZM;rgH+;3R?}i;4dv5HyvGc}G8$06OWn;-k+T)Fh4PSD7
z%!ZNg7i^$!+i>}YD>j_C;TId0ZV1+OTu&3co?c=7mi24aKfeCv_1CSxYyD;K4_<%%
z`m^6V?Y*PlJMz6l-<$W|M5YOz@?OrnkG$Jp?Xzos{N~^{!h_q+A}2By8LP7uwvh`v
zNM+BfC-FgZ^0WR@%%$i*W>0!FAAg9}WBPI2@XL9poRbH&i2f;gpyQYkLh?ZKag%`F
zQbvf$v)V|d<Po&vil(ic1Nxr2540PXq0x98T8rnPsrVSQ5+9E?;#1K&d?uQP&zHM`
za{)H@PhHNDYv>A=8h$N1UENEYy%cS`<!I4mJQD1bk+K}Imz<e8$9856Ae}~oso;=|
zV=~UkxIW|7j2ANKb#YnEzF*}T71%U&Fh3M~MrA4tXUo_and`*N(6ie9A?NfX;}x!h
zy&oA5)O9`MkLqgC7u^|c%`c!&xB)t&MGN#qv;`NVC%TCA6P?mup)+_VI;D?CKlFrP
z410tPi*-Ox^!Q+G%rh2!)63Ca{5;x=4-BTndZ7#YwxCZeAcUi1z0qwPiWcZtM{f>#
zq=&=?kPo+`hkCv0E$(Rgnf_(~{rVs?#7s6bX&(-!e?Q8cV}5DQHRm(G^H1hhbDO!H
znaOtsUzmrP_4<}sjdtJdX#f9X+I|k%?9osh?Z41N_Dx{dgz0GgKP9=#f&FRlCA%2h
zVee$WfqU37V3mE|3}z;0nawf>+E(TuTViI}wq}lPXJ*?{GuO5^hcct^Xxq~qV|$rn
zZEtodC^JVgbMSOK()`$tVy}SF>=iJ^oN33Kvzh63o}FfXWoMX+nPGMjv(J9b-V8o7
zdw$34vP;;b;c)YNdxW{d9?kBAN17|`QRZ5E9QzWUNYD2}b|yTTT^T(48v9!QjQt4D
zGk4oF%p>;KW{JJb{LTK}JYz36&)aL*gW_8Dptzo039n-x!kf*j_D}57aJzZi-fiBo
z_nI}#_FBu#u6OPI?0otp`wc#8KC_~?d52wYb~1nIEBi7tq<(G|+Y8v6VX+y?e5MQR
zOmmO@Ir|tsVAk0O*~xGryH7mC9tVreR2ye^g9FTy_IK>CFv8r(9J495fE^M4z#fRV
zu&cs*vaf;-*;QeU?5RNEsL&k~wy|5nr*5|d`$cl61lcFSD`wY)t#&)wvKONn`>9wd
znx6Zk>v<r0pZlqH?1gB~ev(}}hq4>eD0DlIMT_$!v^P&fbMrxHZJvj==EKp&ESi{g
zPtMqRXsMs=jrOP0BOE}#Fo8V{PNRo7ux5XP1?*Q)d;fxy*sVbJEI5@Bz*h9gZ$p#(
zr|6QeM4S9}^vQq5c<*z@232U4{{p@8U!qyQ8r||c&@TTKBf*`F8ooxy{5Ps)9*yq)
z!-4f5VfVYmf$u*W1pZ%xnEzOi;XfW^`cDM){3p@zey3^-e~|IvBcdJLOt*z*hAlD&
z+YV+P?A{?Td8gT7>}fIF{0uhk7j^>U-ihW?7`4mnVdg4(jJet#%MO?G&2{#8b3M$~
zA7HU=hOxQ@cIwYCQH$*P=4lwFXYCbcDa_H|?N#h*c{MxV-M}6sH<}gpCi5B$&g=G8
zcBWinw!*@E3gc1*yYe+m$~WwsaUcxIFc^^GupJ{{Hb%l?jDoQk4LdQ$HZ=#pI*f&3
z7zdj$-sYJJumtmA1dc=ce>{@@A0X8~0SW$zb|8Cw3^FGpg})Gq`)`o0--{&uFG$Vr
zvuBz6k%m8D&oK`o<z9$H`%!zL`K$d6J91vcP9ncGPuPpuspMgH)_jEB`W|I(&A*xt
zkOY5-)b}GKyp?vT`2xx9mq=-=?K0W3q1J8<vJ=JsrR_qoj(r=-*{dOap9a~5B7Fyn
z?d;l+zGH*zNO4taHwxLc!MjKIVMyD9LHC|W-*@5-_KlDoB0gkS2=;)`eI8_A2idzp
z_G(Dqr$P2;NZ+4f1S8e7eHmoW3HEki9P7R3_tu>>WOt26*^yx`domo$?hE}H-wyC9
z{b9PlhU}^F47)TO=^rioO~`H&>^b4-J{s(;;UB@?4ad~%DIvQ~<oRuM2MyU#<2GM*
zbU2jVA%?R*M0@{0-FHLw)p&`$9}c0F@5fF8vZp{9y9CIN13h%lfu6c|z|h!2^wdvh
z*MQ;dF))Mu17@->!2Rg8UxqGw(P^K}nEGSUQXi|2j{0i!&Nqz}c_pINTy{F4m$D$s
z90PM1j6PuEOf%u=pDj4a3_>;PiKf#@N1lF)X>9`O%@}v`a(pRfr~Q|`p|jHdTN5+&
z)Be+~n|h|fiN`KD#T>Q!`Q#%PoM@)jaX#_n6U~H^cROo*krfaNiMdC70-lJJf`9c)
z{fGNKoU!PT`;WT6*L|<w=l$hw(~Q{Q`-X1kSDo<O#MRwq=Ip>t?lk!KGLMkB<{Y1S
z3I2}f9oL30nhvHzSQV}`MVM>Dr%mhd^KeyoV_3m&akz|sE5lnNw_C%iwCnf|KV)=V
z5#Ac!8(tgU6#gV!AFkn9|FMI(RD~OOe1@1|b%>;h_uS0;nQ&9MI$WmLRy()wDY;s6
zU48S0Cg~ns-5QpMmE0|1mxmu=mh(?ss>7X}<w`}km4D9Hhautrw;kcS|ArWaIzp8+
zmV?yWs%9lQ<5E)c$ApY*Nz2vYJI<%rlfFskogs3d^aGa)30d+%+%c;om!08zDWA?w
zeN+)<6~5&6j*C^w-~QV)UfZ4ja64grq@lk@4XO_1t95BIEWRUGQQPzoJJ-~=#v*c$
zuCC`DrNpfVQqFic=TZ~aCtO=k2;wXH0!Uu_Z!uj;{O4msT9XH);cCqbq`x&KqCT$G
zT$j@3N{O_dNxN9_tx$JykRvL?)#1ZodE`PnfO~cLg8PsC;iRt`7m+iJ;MZ4N!Z*Sf
zDBE2*Zzl%)OkZMikGfa#zbgC-|K6nitqgyj3`6f+!+T`n<Mm|O3X#_8fn=2{&&j*g
zxY2Xe*duRs8^r#;<oh@uxX@}w_WP1<NtfCtJ;8I~tGq)pE_#_a5ch52YvHTmneslw
zM(XKyew(8ZSBHF4@;)oWyCN59zvYmA&d`d>`y}1eMcns%L~TY@cypAikyp~Rrk-(4
z+aPzYE3EKEEf+O+B>lKB$gAHGE8aHTl)OSOn<;xIF$iGiB;)aw+rb2U2M;hY*&oR?
zld%iCjJAulH~ILk1|E{iY<@%Or<*ZHs5!s5X~8dH^7s{*mi$UgD}Eyxo3u8i+?&sA
zpEmps#&02J5x+xBF~38(E<QS#j?Ad(#IKF%%x}Kw!mo|#%5T2u#_upB;N4Au>B+Cq
z^x{`+dh;7$`tWN@Iql2bn|@{zF`R6snz^h_`yKIop4nZ)SZVYI&wkT<OgukfepLzc
zAgX!t4(3RW;yXIdcSph|Ol!WPhnY6)N;sS^kP&tq-@udjvTe<m?7@ud=kX<*Zx827
zcE0S1&G~eD3H~qTt71Mo0N!X0W6!_aO#%D!{mm4!H{UYTmVNkE@ICMvU$*m+=f6$}
zZ?QIGKHrM};9kBLIlsrsjW&D{uEYI(RwJ}QqQ3>7<*Y_&gKYmJ!r98IhWUI?R&xH5
zl??OQb?+<AJ6UCtFW;1AzGuC_v|*pUdf3@%k8=aBfjP{}@fw<Z*=^4hu+v^MGn~El
zT5!(u@=PJp<<{mncHC=YMziZ)ff?hKc<s$0UKg*6na;j?un+94*V7DPSG|6?4D<#X
z*;8+b8O*+VLrqKe)*EJ8dBeTorkOXw8({``BfXKPIWp@}W)S=BjW*NxCLL=IL~1$S
zOyJ9Of|<>C>4Drek(ub@*?Vu2Y3fb(CYu@Tzc<AkfV6w6naMtU)67Ba#W&r|VIRKP
zW-K!Bxn`U<&zomjz;Ya7CV7W?hniV@*B*w;;ojjU&pXmP68ll!QKmog@?)_d&ph>}
z?9%rGLOa<z8JAPNQ#t?0JCnGvD<AK5ws$TuyuiDN^Y6VYIp65rL~L(^&pwcS_U<Ik
z?5{_h@ADoc&W|$BU^+a?5<+;^`x|~<f`J|+d+2fXHD)a|Wrw^i<{-Y6vP=uv*Urr1
zi>W>K4$Na{%9q7~*x752^8$Z?nd1M%|A`6MC+?@FAA809%=BTWxL=rh>=1XpX~-^d
zzcRV(6!&YB!ESLEnC|Qs_Z#CO!@roTm-?6D|M$$~@5PRBSK@Mwe~szFesO;=J=inu
z2EzHH|3}<!W~P5GU;KYIP59ow&1CVVe<x48iy7p7_|m@zKld@Kdm>->5Ac)+{Rer<
zB7YHn9%e@M6n2w)#2mqXa*vuLWj8rOdx}}|lVwLab1bsaXPHd%H|G2|Ktj6I^ksj!
zznk9dG4}#jU-VxznX=Cu_T~O^{JiYHjQv&rRqQML6($FEX{Bkz-gB#PdCh;#bYl;?
z*YWd)|Aw)$7ajK1{%U-(BOUg4{C7-O_N7~ceJwKhp0Yn3_pbBTL0i7>zmNNRe?2Z6
z{0(L*d(~|**+^~6iOC242VDKo{}7+-U5EW+|6`v13G&=yk&0|JjggCN<K9o1wO=3E
zNG0yunUQ}q@{!MYyU+d4dAlm+)*p+M<O^c;rT-=NYQLJh*zu0Lb|Mk(hOFdk;vf2<
z=_`BRnaS*a=bHxXe-|^y${u*w*#*xuVz0ZFrW3o|#Z6~zsSl^6E;WZEb!=~rVxPN?
z<`~)Q&UE10vx{lR_h(nro-fdD*t-Yav9tRf{wD?#O-I>t&5WQmZ^tg_{Ma9z?@ZcZ
z_H#xOn(P5$8e%;SF+)Sl)DSZ?#7y?m>%}6U-a&8riatRf?0tj2*!$6MSnW3~{RaCq
z%bt1kBnL5rz~dWu7W@CovorPC8L6+lyruG$S1`X-1Nwjo^ibvhh2JAG4y)4NC-kK<
zI{S#P&q~G|pNG{ZhtbVuY@c!d2<WK3rl0+uEyN0rL=HwJTZz*)elluV&y}6T@DpOY
z%GBpyMfe5RD~RVd{rAcDG3pIv<XCfrUl0@c1J1;0KaalO!tZ_tS=-xxO$k#bsdn7{
zv;XwVK=X?ntAL9X`NATJQ}|K{w-&Ao7ly|pLHQ%gZ8jrM*$}P?7a>)70drw^hmMXb
z!&|?<w{WBWa9ipLl<^9UTUx!VYox5-F4bux;8YObflX5`#rOp#caMSAX9O)@KZfyf
z@^Jr?|Gq<0;<d|>wafpSzgq9~JEq3zpSEbpiR!$5n=GSsdY%%r70CiTYV^G%ZRVEr
zhtOty?9!69YJ>akB8Rt-dmoC7!sO#)r?hS9ckQoz_nI%|Nn6FJ6?GwLdD@&RMfx@p
zYdutou}eBdvZ1sxnDo7OGrTN3h3{yUk0gCYaiYa0Zu-UVu7qFmAJ#J!ujC!LG5d&b
zoLWazR~FXgzm~`U%%8)*&11vo`Nl2Re2C<6sk<o)t+?jWz6ohT>rm5&w89^=y7(e3
z;+!Kn%Xc9MU+HqKL$XD1Wh#th2jXMj2fZt$k+5pwB+r!|S@FI|#UvEMmX=g}x;hcV
zv33cPxTGDfe5b-qyYydT4R>SZ|ML<1Z-`U)dhK)wnTxakhijo!@*myw-Hs=BZvnqW
z+@w8PO>e7`#3)|cn=tzQ9En=3V^3u_{4`nPYI*-we`;!XbXT(WNA3-sGjZA$ejeFf
zz1#gM{_alSuS@tWsi-Nq`*TR$=XQ7fr(Hyz`jNIg(c6=E*hm%WJsZ;ZenQ{3S;F6I
zDU&=#Qiv}Y2r*MfGMAHP>Pp?V@aphfm^$Y4CV4CAO&JrsO-vppev6T<MvPRr#1xYv
z<>A}-5V@+1Kr!WDtocbaigFI(rab^7)xRg5km9aN+V^g1{2SN!N!e<gU?E$k{-{mT
z#i0w*$)5acE-MM6qgT>WhZ&X7I<BNSx!g)~z`ASt<0M}Z-D~@*`PWx#<sL?td(HEj
zAogsL`=c~x{E~j`TE2I!uSvhO1-q1|nkzM<t)xrcCS`f0j0bnUN=c2%eC;bbHc;QL
zhfQ7$-%r|7W-`>;K2z8CWJ5MUD@od<jZ&j@s+5#Ty|cDX^^<KBSNL8|9ePjK5XLV2
zP)7?LlGl<kOa9-t3AeGB5j2cn`WHIm6Ta7F1kR}YBjuk(*73RNM{RTxk1tG?e#J*I
zQ<g<pq2x28k&2AlKTEn1hStT@|GI49TOy^vZ+bdu%SfG9t~Gg=rchQYA9hJ6#>J+c
zd{sp0#NWDeKN;ShO}=HHrc6aFX>ET|T&wi!Q`k0b6~i6+JyYAO<AB=l;;4V?@?Dp|
zl$(?nm*dG)A$_zR)X}VbzeJ<o@B`Alekw)N^EwKzoqM-r8Qfz@$|TG>YfxIeTs?|v
zFsUYU4kSOhPq|<*t8rURyXdQQO4ClSZ<8w$7O5#M*mrR3sos%3)zO$mN9)m}Tn_4=
zRLPRR`rhgFPTcnXy;*xKuVK1Vcw2Zw_@uC(;aic*M&k3X_GK&iu6>H{ns>+z$+cCc
z8`ngJ2jkCwX)B^U&{3p(!PFcs2N~mRPKGR(l6_~5w>?-WDN<iF2lPJu+I7sOmhb33
zYF<q`CDR~js+U&UKJB3u-^0V}bmmLfNiKC(f_rmf8I?kpV(vy#vl+FnLS>xWuql#(
zQUhxBcgfhMzg5!jzRai<o4PN5-@|obSf}#*96=r7BQ>vmBsuD&>#pPRr2GDxsnQYM
z!>lWj*1LnNMWzu?_26A&{0wrf93=a>FuDO;Z2`6tevM5#*x4p<vWGH?{GGYhv}a!P
z!?3rDVQ0rMf7gR;P1qu4cD85U@fCJFoa>d!xn9S-;Uk&dc{KApZ-R6EmATbk0MGg?
zJnIT({H}sm&4y2X+vdQeuCclHUAWZ7teshJo7xZfHG@6fYMTphYFpbXe)-J94Q(5^
zQfo^*-;3F{UZz*ywim9{c7i2sWIKCJy{5Jc{Af$t)hqSd+wL+W-1cIg_(<D_`QW2%
zUuJ?IVEeJ=X}0Yj%njz+0l~aro*fw65!_)1F~jw4JD9aH57@F`VX(*!W6jJHc4Y8W
z@RS`Re2hJSIrdBKxY)z7hnYj|nZE)LsYJl9HLYSj&ce5Qq+~AkCj44cE}D_T!o6oJ
z_ufXi_qcNJh1}hW(V%eeFuweH!K1ffE}n4j8RS?Ixgp$p0Bhcsx#z;b$CQB|s0@6D
zGVlYHfzMC|exNe&y$Q8Dqun0-8YmB6pgep+dH5XV;fs`qZ=^hYE9Kz_Ft2?MarqIm
zty?Q6?~(UUVHajTUzz!AW#-!`Ghe98d_!gCdnq&TD>L6;nfVN5=G!SVA1E{5pV{tn
z%^)o+1C^hTDL+3@`T2p$&u1t<KT!Gk-pbEsF%$l2(?D7JgtGKS%F;JdmVThJ^fCJe
zbJqtkxBE?e3S&P|8T$<T4lDb5C~u#kynTl9_5+o-&#)WqMrPG-wwpN%haXc8KSMeE
zB4&kG5SlRg1DO~8DKpQ7&mU;F+wG>WvibvMmN<Td+aIXheoVRjfy(V?crh>2^izg^
zpfdaemErHL41Y`+{wyiGrh)SO-Mr>rbJJ7V{%*?l7bx4`NZI}l%Jz3uw!fX%(d!6z
z-P!AG`YNA4Uita)%6O0Wr}@*&U}dL=D?2?#dFgS=NRLv6d89JT<CI$-rF`-jWsJut
zKRik~;bF@Cj#XCn0OepuC<i-M+1CS<YaOj@r<M9<a+ULxwHocr5S^paOc}}&Whjf4
zp=_=UWwA1p&6V@C%2PH`p0cU(lueYUY^pqEW92Cu2Sb7(CXZDgqfD1zOfZJ?*kCN@
zaltrK%6g9prmb?PEtJt50;4&DSur!=HHW}!&cZ$?n1la=gM&FA5*)($Xf(mKXVuLy
zre$zKaDo{mZGoxBeD^z<Z*y005B9$Ve=%KY7w*U9f#3n`4+e{{KO8*F)klIya9JEI
z#^o_)#%HpA@(EL4S`FNV#m$jc1DC%Ce>e4%Rc)@UYH_Sftc&R!>k;c=I<YEXf$5_h
zFWjy<Q(Ne4YHkDm<?zeUHYJ<ZxiN0ivScGCZE6~6`y#DNb6OOc+p~N7QcV4AP3s};
zOFM1pv$Unp<X<~_fcE@co03VJ(wSC6=JVuhYtm3#lV;kQ<Y{Y?zgufkq^(JbwkE7a
zq2I_hmzc|l`S1B<n9KPE<_da}4DCs>=}AZ<^CT@xwt1Rg1G5A@P>r;eX|AnIOIn#t
zyvt_u5pl0zE>L=l(^gxYcC5JxO*X4*jA>yl{Zh8}OIg}4`PwgKYFm@9>shQl!X7~l
zKaxJm*FGvnyYnNHNxSnalSNN;v8iW&#~Oqzdl_?t8fqKVOxvJ5+Mq|6x3iep`>pJg
zv`6`A?NN!gN2T;{tGHL@4rNL&hn-%|<j~8#i(O_7<x5|OoxTpc%oHloRwiH8pKzD7
zHTl}g#H9D*UTI(QX<v47^=tbzF5fVBD4#wtG+ELsa`u@=lto(;W7be6Elv(CPJPo*
z+nQ$5Lo&xkTA8exHl?L0rJtlP@!BzWC{Jr|2k9-T5A>Ft=`A_aTXLqi<V<hLS!zfV
z=`E@4_XYQ1zn{91t97F>J?BE~4^cy!Xnn}l`p{JCLsP8}MOq)4N-s*OtC>IEd<SL3
zv^gVhBz@jNGS=mrL`K%-j2?F~u6&B|<2EEu70O<&mMe@m`GOM8h2QpYsrzb3j(GlE
zrpmf@nMbhe=<eSYm;bjsN4}~k11eP_XZ5QpI?Ie@R*BYpC#XD>|0>-=LR!H{Dl?Ll
zs<iw2O%uxH+py_RlH=X^>e;OF;-@H^RVpc6!~9hFHe8RK6Dg`3;S%QFR)+UWoRP1p
z{4~4+PHZ*hy8`BH6~E{^(%tc0o&TwCDwRloS25V%a9r+25{H_vUQ&!wQTIXGeJ^QN
z_tTQD$iyVi--06<MgAcTAdYY8S>y(~wg8u%_<4$ZRBC|y;M4GBT(=-?P-z0vf{FN*
z68sUN5Kc1u@6JRrP(t|n<zFLBir5x;O42QQA~DsYh;fG;t?;qCOhvA>)9c^iDft~s
zdPvK!{8dyEB!$v>{%C%*ldFA)QP|I*cy0;tt411KhP+H=(vghsd1AULl441j5c#U)
zzRZb8rYSskTAI3aHk#hweVTqmi?oJ1vW*z;#C(TVRaP508O|E|(MpxfY)hsky{WdW
z>5@xHmUMY&x?QgQ`;WTYgLKJuDo(tSNM2#nIKRaEuOa865|r}w{n+RqUXU3PyN14}
zaRM=YQCpG9@D_IulEOT4NF=sm!o=_%J57N3B`wAS;qtVywCiL3<NtSm^M5@`QHv=x
zYrhU1G43GMSp8J@4O|fxMSN&mr!Dfo+^=Ze=Yh3b_1gbx$A>sL<~J%Y<Z&c@ukn|`
zx0J}?Gt{L<g36tdJhsN?x3DBjW4Jv1roF~=lbchsOYgz$BAX^Q(gzC1AZaT7c$ToT
zxF_fTq(A82YOjN9`L{lQj}IGF$Casdxb4X)ll41wg|R39DR)N8F0WEf&bE8*M(&c2
z@{P7R>h-GOENhQlkTmPv$eXn`!4p!pVV-t<#`pVw-|dgSIX(F9G27i`|Kmz(i1fBY
zvJH?sWlkVR>s?Yx++<DyYRXuR)y)i6yKtms$-AQ#9)1B^kzOBa4m1-ZpRR`SN9rA4
zLI2c|9;@(C_hhFVY1iO1T}1Ysb}$-d{VdOCWPvH;i_Ka_q{VF}V@1|+%NpmJQlfJy
z_qz>uj|x}No7OQ;tM1VN&m=B&9jP8u$3e8E8tctEN~`OJf1_LY=>9!y-z9th!g0Q2
z&T8$0HTOMgyYNrTRy00jMX6p#>Qp<Ob$lY18tL`4@>rAmr8PG7@_n5saoVGY8&gk6
z<$cO6vY};RH@ENDq3#(A-})g<qyGO}-}wLC8~$ti{r}-C+0*!7zg|iBXis|)(SPF8
zwlrd7D=cUhENC$dL0dS_Tzt)e^*GF249{>KyI34!9^v;x_Ca{XoQmeEI2wqGZ9DW=
zb+Db#S=EL0z*i~XxKNqKr|hrMPW3dJxc+FCz!|=YhALUpyA%yjYtc5e&aOk>&_<ZR
z=iva$(OLB&t9h59LC!PFy$mnIysQk~D{yx?W`&o_>fDuZac#{iuLE4%>#Vu$W#07q
zczw)j^gj+XZ+nBi!DbCBZ-<$+Xm}cD)_D`W1I-3qAG^t$>CH5oy@S1j%@)?d9%0JS
z0eZCg&^yjM&U}Q9ryrUMZ-KYKe8L*n8_ZT#wEo4${2afH&G9GulWl=;RyGc6w20Nv
zo_QB|aKzFlmyw3`I13*=LAj$cWsO)V&hJ3wi+U(uG)(#Ep2|n}Qa*Z=@<qLsFB+pc
zF;MyFNsKv)7?;S1W}@=Zla-I2rhN2F<)bGlA3akUq)Eyk%~S?yh%!jsl|dS+4AOAr
zqemzoJyIE@(aIoAS3Y`>GSOwqM3*TOJwci1GUbR4RF0^JGSS17iSDILbZ_N_#wZg#
zP&w#H%0UlS4tk=NhRMnZ&D1h6P1)y}%0ACj_IZ-B&oh<z8KTTjcV(Z4D%&$c+2_&9
z_DolvXQr~x)0BOltnBkpWuIqi*_x!h^CV?{CTR(qsl4+f<(j7{*E~sCpwY?#4ORYU
zrt&{Cm0zBz{LfJ3muD)!JWcuKnaVFuQf7IkmdlyS_6$*Gd73iI-Ienhs+{t8WqyV$
zn>=0F<i5%#_fs}`u(HXMbp?4lT|wSaSCBXNdV9U$rez&@J8zIT2)nE!&(U?{jg)t8
zqU*@(>pJodx{f?c*O7P8b>yYWN;lE<;#Sv-x7YRJF<me2>w57(>q9edhBw1>(pr)0
z9poKkGQC;eEL>zAc^mX)&M}>JHF-U)Gfj0(dA6=8&(}5O1-hm@Ti28~^p2oLHP)5o
z*}Aga)7sTo*OzB|^QmLGy2{+@D)YcQ!8?Ixo#>s&b5HV4G8ww=JX`BwV_kiojdr%v
zaF;sSSXZK#>Pqx>%DFeu_2un!eR-*_EbpRg%B`*`576ILN%&~#BK*(2&k3i>tHS;T
z+Tb&E#d)@_I4_VI&I)E(cb={5&MjK9hM7*f`aIj8=ugBhYtXaN3p>Sh_NV$&*|KS_
zKNt2{bVL*?o0m{7zEHXN8Op_%C>P&Kx%fQg;#(>gpQl`WOXcDVm5VP@F1}c~_#)-v
zMbF{@(?YrU7Rtr9RxZA)a`9c2i|?vjd|Tz>4^S??k8<%a@o@1a%EgOjty$QGi|?vj
zd{^b-yDAqyR=N0b%EeDs7Jf<~{QFep-=`?YI92)gDayQ0Rpxz)GL2J|Y3!y<<5XoD
zM=I0UO*!|L%DLw$=RQC=_x{SZ52nRr%`?9o`W~OYM_SLujH@zeBQyEsX-k@q^tL|S
zc^1Ef_E81eGB%)PjMKiN7?<|7kY6)xC0l4KDXe>2uFI^QLT%S_be>IfGtJE4Su)$E
zF@4%;JZk~JJZ<mt;s4L#S!eTWW6q(+OK6W*pgmr5?eSXC<N0jj5!ifYpR}R(Yo@(l
zuJ(RS=>3M_GTaV_85hkMt+nloYpYkNJz+EL30u;By<rNq<!YvFR<8DkO|`XZsPkiT
z?IwD~hT1DO)m|}Id&OMs6`N@5(@=ZGrrIkurA;Y8S3_I+#yEXr2eeqoY?ZjSDcN2x
z`bkgwNsoSV0Cv$(QD1vYPg|BiTb4}iGd=AyGqsJ#($*oS^}n9hb6@LuhSu#2?Kxvw
zV_hxH(4Nzio)f(RQm-<k=Va}>%=XZpliaD{pj%u<-kUaE^5&CU2kZB%)8fR}13zZQ
za;{(wXC+vxZl80m`Ig<U@y_?`iErzra1jp>N0n`}DtI+-vXU?JP2pWY7zhr>GwGL+
z%+Ewm6?ZOCj(sO*nbj(C8f4`<|0K)g@~_q`Zx_yYb>2M{C9UfUJt>b#n!JljlZZc3
zTUmYb?>s0KJ9TcZ$UB7ft+O=X{z3S)#7nM=&G~cwQ!)_Jy#nbz?~VUGNU6WOx6|j`
zv!@bF+?Gjwh~la?{U@aYt$v(Enzt5)ds!qWTFQU$zjyF1^vKle?_g&1_w)A1(cq9s
zU*!bQn)ssR0{=zE{vstXApX_N9FYIQ2<^_+em@c0N2s+KHYwl4S<k!QxEsr{yO)21
zOB6?Kd$eXovT9P6w0G&MH9lgA#EoB_>q@>|bb0?8UZn1JWbffcweSP+MLQyLd0lyu
zY$<V(_0*F7n>oAwVXMeK#W%BN#J-0XOzx}u;O?l+tDV<%`%by?w$wJa0)nT?Px@Ky
zc^HXtgzxjOR-fb8t@K(dX{KRzPlf#Nvk^Zj&noTS{i#t6O`B!0yPto?CH?*PeLu4D
zCCS{zd=a>Iqg*sR$iYm2C6tsj=1^B~xr;UDno{()8mIlRd^hcow9KStb=}fCuGF-4
z+P_9C)X1F_Cz9r8Kcf8|c%k%4dr=;hPeM$uAIUl+57PXg<~cie2wwrGt92q8ugSIV
z<8W=pt|6z=bJr{1)qly!WQqFM!lYEl2=~*vLyPJlPjd&p-8k%@=;_0=S(W*86wb}b
z5cl7tSJqyI*sf>P^bB|tyNuVjh6}N+0jt1E;d$XBu9k<_&?c{DWwczshB+(CdEO{w
zbI$kQ_xbe9efrp=hp4<pAxJHg)J(oZ?b}>=PW6t-tF_mDCSCVo=FoFRt>&)!8TNLk
z%=^)vZ8P62v}yo7xWxG*ezoe63!SU-#jr)f)Y+O*nP5(XUUARb-?~7`M6J-b8M*VM
zPu!Y%jfLnc+s0R#Xe<^DVXjSZntIb%OxG)>_XC9Eo=?fx?}MC8Z-@5#K0Jnh)_ap>
zV{4So@7EPZRFYT9HBIqkIz{tZqPL7(>k1*|_MNsH(gyt-+KuFUr<<ua+Pf`1k5fL$
z?Mft6HOJm_F<CD0uH&kj+xB8f>F32$+LQKji(X<Zgx2AdFG_Juz9N;7xsn{pvsXG@
z+gd-@BA;;MxYVuR+9q@5lC6^)SAM%7cHytJ?h)cDN!{c%m(sLPOQ@mp%`YQqS=%b>
zbHy%qb<kOyG6OUUW6$wGqg1j_csM=X_IyX}D=Ef4DiP!rBZya0sY$y)-+}9^%q?fO
zIjxEtmuP#E^5??Ubn9088N2?g^;X}eY<$Lej5Klw^Pe|J&qvIp|9c)YRZ^rEjAr^K
zdxGSB|Eeji?LT|S_fx8_k<L}A?-NQvGABio|C)dH8Q;r&x%&uJW)SYnj|5RO({OL$
zrSfrazG_{oYt3{m5C0o~Xy4?Uc8_CADIuw^faHjwR((pnsAo!G<a!vREL_a%3k#Q_
zEL=UW%qv4;KHM9_nl91Noa;^Wrol=Hhn5F>HWw|=qI0<bX6!H|??-w^nL@a)`KB1w
z>tt4coeG!L85Zl;rYm}rZ!;sj`_Okh0p4knxl1{ve<-K)j{hV7bhAda8^5dTN8i&m
zqw7>3@%yTSc)hL}-GDaXC1#WA4&JO9fw!n;-g4Eq`+@4o{Sc;QnevQ-lxG~HoWKZu
z!(qxZ4pKH?oWAEUWgEvTCooVsf#J$F4pFvou(FLqm2E6jwsEeqjl-2~9ItHS1Z5lh
zD%*IVvW*j!NtmT6HA(q|smeC?Q?_xEvW*8Q+c-zr#{SAS9Hgl^McKwt$~KNxwsDHG
z5CfEjn5Jyw6lELxC?hdV*~Tf#HcnNxalEpP6P0b8q-<k9WgBNG+c-tJi)qR>PEodT
zhO&**lx>`=Y~vth8;2{~I7r#Xxym+{Dcd++*~W>=HcnEuv7fSyGn8%Yr)=X4WgDj`
z+c;WTk!i{{PEodTyt0jxlx>`%Y~v(l8{ryZ8|P@rn62xJCu{lWr<$-^=vw2}T1q<V
zTH}O&j(?6R_RsUr<1G5Hv$gcJQ+?QR)rXy-`mkH6KJ0AOhuu;2VRuk{*xCNo{?*(o
zTCods&2oKRvz$<^*x6bN+i5B6$xc|e;!|{EXKIP;s9LeJ+5PG-xQlM=ZmJtQLv>@f
zQmxo6{Kx#qxhndw+o?Wm>p$&3ZSqtrc8RWl_Eal&mTJXrs3ki`wPKg(%IH9~Vwb2^
z>@3xaUBXVQub4vBjh&^svD<1*C{^9qS*ja5rn<39R5x}@)s0=Ey0P1;ZtN1(jqR&$
z>=M<D-9U9?XXz^JeASIzqPnrOR5x}TU6)-?*JTH)8@ohTXXmSK>=LbkrK%gdMAvJ#
zSKZiIsvEmVbz_&PZtNzi8@r*_)g0B0U81_N+p2Et64i~JrMj_;R5x}^bz`?w-PjFP
zH?~#X*jWJwTB=1uc1a)_va_`2mnt{iNV(}A%1t*?ZhE?M)18%@?ycOk?9J2_c35;{
zcTsLy_G;>hj&0FrovYk*W96oEm78v?+;ns0rkg7_-CeoqPRdPpQf|7Fa?{O}n;xm$
zbT8$mrz<zzS-I)y%1w7xZn~3l)18!??xfuGOy!ZgDv#WSR&2bsVi{gnudAu&b@RH>
z`ik!T23`-^?1tK+wV}=KYno}h=34GH+H$wnR;;DAVp-aXwbE8BPg}7JbnlNL1ZmgX
z(5_FUMHhYhF>TQ@wMEO-7A;#_v>a{A8fh!mL|d_@+KM&TR;-D(VlA}&a`PnewdG1^
zYn899Rejp2V@$qxtamJZ#e8~+Ol_@V+FIpkYt@L>>Lk-d+o^nQq4KqbYC_v|7X8xM
z^dt@GNp2<1qJh6PTK5+d^GCf^+$GxeW7;<5Xxr4t+s?d)CbUEiOun{0`P%x#wDoDE
ztxvwTK22$TCgDeBITUD%(?okDU)vgA+Z3y9fz`Gk(E9Idt+v`Dd0KBhE!k}KN8ag<
zRZUqvV@%7cW((lz52RlfIk@b;BpSD0N_E5kS)0l*Uu4w2896TBH^j4CR{(87dvi0L
zpU{f&1~x`rvKmNs9$Lm+TqjRo&G)Uy=K~GrNthyCEA+3wla7R6CpOWT7aQL?NofyH
z7wL<*$oQUdy^f3a!DuGOL;rm2^oxv<cO73+sgbLEAxVrP)crKdK>Ang4(5IQlLueG
zucKA!Wy;o*=|S-S5%-_Gagr#JhsesV&-qeTb|&4w*wNm-EV?I}dBDB0OW5Z?G;1RX
z-M@phmU;N)+*wN(=pM$R`xmJAs{4Czzf+GG@ionxq777nizIbb$+_E-YqbyFd>>!g
zse9zxP2>$x2+T=Oea+PlHT|EKln3Pd&Xoz>@r`w#;)nEqTf%fU!j2?hd};Hn-H()X
z1i#U{I4+kG!nZN?O3G(Vt=c_=beHt6cO(g4qMP~^xz4x#JuX#{F5g2OYh)|?3ORKh
zP1nd^llxAomIbNL<*K_nJrcF-JWEPeTKvU@`)cQreDBo*Qd;URF||XD?%wswiYI9*
zJ6Uh7TWb9wt!1TJTJ3Oa+-MDJVw#jR<5zT<s|JEvf$Z@QvC#M>-;uUDEyeeE+in-a
z8%QT*Xfa;}%B-q3Iw`kNDyCvwD*z{n9fZF(lJTf@-M}_zix$3tpR^S?wSCDyWhFK^
zci!!6Qt8i>Be(__h%3U!neVYMycC=4Cifbg#B0cMB3@+o&~Tyc4X?l?j+D${oLS}0
znS0nRYq4@3*F?|zdrBW{dRVlJaM@0>9>Q>IYbPlp`QJ!=N_o<Q639wfvF=)4-1XF%
z_`6!HzMZ?IujHTBY3aT6o1SZ#b=7G43AaK$sUH!|Bxp}e?faJ#NjxR4+jt)SQ_oMg
z@tm|+$d#yUtGmWZcmOF0dz3G@@OXx-%#$7=$@uSKmYRkX<1WD-4;SOK_Nw+9$hyJW
zE_(<`S|Q21+6Ob8YTn!RdXi$|M(nqzuGPM4*MG@yQ!SnIu^;!h#;2ewDAKlFdLAjW
z+5<5w)7f$(fBfHrtgK8|<sGH5&(T#<sZocvbG#8@Cfj|&+0#+Rg$|&AdGk_k9&mBs
zZE~pv?BU1%9n>PRNqi)|8b$Gyzv)MJS#v9grcGCUvm2OeF9$mVg7-At`zB?XlxUZq
z(S7Q(j#GMCON`u+vL#*iZl?UFx6gaOr}kAHV=`V!Ns1**eH&T^QoE*Q;2(9Tu6kT6
z#1{CGahS~Qi~4A}E~%1iIrW*0)N0*V>yM6N(nh>4wYYy9IUu?h3+V5gxweaT0ZB4f
z_8|vN#yq_R&^OwoZ<~|uUMn)uAGH1=X{X#oJ9%h2X%Cw8og5qCPv1S+3MQ|oOxmL4
zjvr}hl)8>>KYDiYud#?`J|+7<=c-q=wda2|^`K@x5UpDjZ&y|&{qU1)hcf7cYx2&O
zD`qOzlu-#6-@7mYgpoEL;QC^)h}wXeI+EW7HMK;`ldgMBk3s4NY-lN#8vG)VGPO%Q
zYI)tqA6m-_`rehif2|&uaOFQ=v@Z1UYh08O=6TENZW)NxJ??Ru%Ni@vSY}=6_#o=J
zl4-h^m}##R`AcsV_HxU9UJ_pI|7{03D82Y*eJ{~gRZ&yx7<Ea$ahCBBeMR!9DcMPf
zbh90P*T|jej{MiBxKfTi%Z(mt`$_%NSqLAy|HSBO7|zAi2MPBMO3L3ES3b)=+>fL0
zN_4KtXl(nwwARWj0XewmT+VK!ByT4B2FQ2QQ)s@D>*%}^GkGM-C0FDfxI+(FyXMNc
zv^df~x}&i(v=r~DEy7D$>nJT#e|J~v9JTeSK6{T}t>lq>4H7pF7b_XtR?`M`U~UfU
zM#u}%xX7XPJ!8-L7d=(qi#tcjJ?Tf3t0L=hN79!3Z{UFC=`w#(Mtysjp_3lwzt2vb
z-eczSN@7)8`mr^+qeOaK^oz4HDdR}LB6hw(YK7shYtN_Fl+9h)<C$F)m9;SbkNuyr
zzvCIO6ES#+>)03b5B^Q2t$&Mu3#+VdWtYv){@rj0Jzx(WWUtMKU<~@f6+CT*`Oo-E
z%?Q|l6=n?5ec7e5oZTpoLe~D7ISvVWwK)Yzd1w|O9nUmBLGHK&c<4};HAZn=R}|M3
zng=kR%*93Ydd78aW}&XlEMjbzhu$vH65Li-WwxVC<(sj(#;5?dwyf^#&M%>BDvNa;
zWvQ+-8l$U=;<}<Jt}7@H&=r(%T{~H*YbT3z)nq$eH91yS3l-=(p$WS3(dpVP)wPWi
zbd_SMt}9IFTEb#oIp|jQOi(^(q^4;Dq_aOZ<CPD}_5aWRKkTwUYTsyo)HD1uagkk8
zoBL<^XJbFdKgYE4f9ao#UD%>l$`(1vZZBnvnkrkA=U?bwh#%QQwV{8J|6A;`ldA9k
z&c6h^+fVf}|1#{dt7>oma{mhKvbU=5U*%tgT^OZS$|w!;uO+|7E3ed3d8Ow5jsA_e
z$eydd|0l}9c$F*n($X+qrOWxsG__Ku$@;hZx8q0lV(lC4#d^1YH!iXxtMA|I--}%s
zs8-5A^;ZTePZ_9&{zCsDuF4**eU*)BpnJ5A^B4PzasR9TSI)vuwNgoTFXgAQm7nUN
z{L~2Lry40gRi^w@SCw<OQGRNK@>9)}pBkb3RGIQqBb1*SuKZM)@>8DjQ>~SsDpP){
zh4ND)l%L8`erkmBQ=aluBb1+NqWshd<)^wRKUJpuR5#_PMkqg3ru<Z6f1|(2j8>Ma
zyRuZxl%*P>ELAsUsYWPE)mmAq5z0~p%2JgnOVv_Ysu9Xk4O5n?tIG1*C`&a$St?Ii
zsu9Xkl_^WrQdz1N%2MShOVw3bs%&Mc%9N!Vsw~wAWvR-PrE0A#Refct>M2WAUs<YA
z%2K)gR^1M+?Ukj<P?oB_vQ!z$Qq@<MYM`=I{gkB|s4P`KWvK=zOEo}Qsw`!x1}jT7
zSXrvU%2Ewcma3z&RGG?BjZ&5>rYzMcWvODyQVmv?YOu0YgO#P~q$?;p>-x3{%2;J6
zW7S?)I~LH^EihNZfymK-RwI|zhF$vjHP>@K?M*%{Qx;#IBClzPAGw;K1<D7~9_4Fm
z6>xtRBYe3kd$vg%RivRvcm{t>@X<iS7wyD}NP;dQijU^RLRviuPeOHvhmlPiD0+?M
zt6cP_%egh}p`bo1BGLBCcT!wkMUQ%GAexU`b5|o~xMkxjCC`vO&I>gZ2~T`B);3qd
zm!3P0Z#g7H@h69b<DS<d#TVrckkNIE`*M%x+F|rYvcf|8T$#PJRdka64<G0v{NFvu
zg~c!?(OC0;^F4IzR>?RCO~TBDT#0N|_R<oLM#fI)k_7Mkhu^KpJzq-xz9bd9$CSI4
znemM5b6_MEBRlv+{$VZywZ5=-zxTh}g}jrmfwZr+?>fG_e%XE3;s5uB7p_y8DiI7{
z(^zU5WM|`T(f{u;>Xgeg*@sAQzWal6^D*xts9B@(uRldw5BYLmjWp+7u;gD4bN3MV
zYTwKg(3eIV^-hv0+}+=I>7w!gq$H_h_pd(XQJ3)cOOpFD%KNM9bLlyn3`5*#U!}E`
z6_d=5#uTnacB^|g{D)rK{Qd7%8p#uq(W=8FPBkmq>bSfYCmE~k<uaF4bNNR}7Ig1^
z>%K~A4-W4lq`RC{NB&Vho&$Fz@2I^FN1iG!!Z@m3%^JU4Q!Y~1?=YwO_5F=q_*gQG
z{{@r0d7s>I<IsIYxNcvqYTZ`*pIoXRu@5!vS&dAMi|KapocvF$Si>lBBX+H5{|3o<
zZ>4m%+@;JZKap1Uq`qn`W(JEq?b{qF3Etjfv9}OYA?(dp^4hL3O!7TQ`u>%;S0}^&
zc4jK>Xa&s#XxT;M>W3-!Zx>!I-?MA|(?4)v68gUwezIS4yVVirFOeHl=Q%{nj!0s^
zhlBRp&7~6g@jlW!S>E>=jqY+)LXw<Mwxzq4_q~Qt=SAw4^ga@1O)Qgr6m_q9U;Kwk
zOwnpxSKz7lO17Kn{?hj$tn2Q5yAgL`^d;^!JZMeING;z7cO!oHRF8LGLs={CuKesf
zihK02_jKQLypjRxdatxrE$J?1D&6^G(ZKW$yN7+r4qwgL*{cnD*A77*xKN~2K~@kC
z+6Ntx2aO9Rpq;9R@vQ71=ONb>DRH1u;y@)9b0WEmNQncLT{t~{osmbhK;xcBQMw}G
zXo<!>k;Y6^2}yV4EBR)UYOCslRHwkqQ%Q%fGGwcIs#s~lZ=TANXREfVPUz}wk4p#B
zk(mOW`1z{YuP@K(f}Q!<xOd~%Pvy@s)$G?_rO+9w*)LNy`wdcwbUoGVH$dgm6VQDn
z8Usc5Rlr_Rhhmrg<^t7s)lntYb5v3tr0M$Wtn%tEs_U<tO0B!A)OwQc0o8%spRAdy
zdjI<94s?guLR)0!sSZG2CEHf@V0r8cH4*no>{)n-%DQK(KES@J8LJcfL><P}!|mbh
z?{);c7|v7OfPGarps%_C`>JlheyTldp32E%sv)qyY6#3!4T1GkL*M}24{Dz33GAzS
z0z0WJeYR@b>aThN``Xp^ZJr{UD1Fry=&QCsU-fVGRc(R3Y76Y7+5&x*!`D-7f&F#Q
zsClY0u&?S2?8}}}Ul7`t_DkX~J4f|b&4GPYb6_Xc9N1Si2l}cxu&?Uw>Z_Uq`>EzY
z*-tT-ncA{jRDYH8XQ<A=0V?gcs>f@#&U_!Kv)xDQ`knDQ+kJ-4b03+uerHD7`ki*V
zey6?8c^{>7-Ve~(?z42wPJ5l<K3V6s_te?zV|3nnuV~%PVcucJt+nZ$w#ueQw7%we
z?|3sgT0wKFcPc)A<eh0|>3W%wx?ZNeu9q39>t$x?Z1l;|Dj3nT=T^Q<j@G=0ZoMhW
zWt1t4(M0)+5&qBopP^?@n2Q$5Sxi^9V!E;wZFL@cD`hL1DO)j2d5T<RDB3DF5m#2C
zjq(v~m5G?HOvDi7AP!OvqJ^>#ZIyRurHsRHWgMm}<4~+z!wBUX;>t3#ReoW*G7H0$
zS;$pRVT5uDWy&B-R|cV#G6++ZL1?H9LY^`Rjg>)|rVK(t8H5655b~5kXs!%Go-zp2
zltIW-?qHg72QAaqwoFs*V5o8jdCDC$Qtlv6xr3I<9pou@&{VmDJmn7Zl{=WGtU;c#
z2Gf);n5le0iSh-_l`qIsrXVkEJxiW41+A4Sn3lGlB~LkmgmMH0$`Rx#N6=C^f;{C2
zrlqZ98LAvXBjpGZ$`MRej$oRy19{30OiNqC;@E+~5j)T!=)ek>PC;jO`s)&OG1<xs
zG*Dh3TX}&7X}rL}$_o@KFL1E(0)@&83{+lVpvw8PRKlO7GW^-91@TbTe|V^BK0H))
z9v-SX4-Zv6hl5nk-$3R3*(&FkH4e>n=gSOj3#{%g*;F-wHq+fDo2w4cda47ozOHJ^
zR*uT2Us`B9QfG&0<bUOV#d@2pAj`z)r{cU}`=C8qCOZZlO@oNTko^}MDq|6-cEu*D
zU9oYE+}zqjXxojstMTN<Z5wCE28NAI?vC7T{Ez;r%ZIsXKj&-rbMD5p-wr~l`4MKf
zoNYO)vNz_e%DOyjbn@PMk7TyZ-I22@XH{mCOq20R#_Eh!8H+ORlV9VEj5!$-G6rN6
zXEbB0&evo2#jcH=n=t|NzSt45S-IO{Q)44zBk@z~r`N?#^4BMp`r%)H-C`YL#j!S^
z7+afI3(n#qZf#;yHSDRe+*npn9;^@6$EF6W`MresD7)xgNbXOCNowYArlvjRpUQ87
z-y?Th?l!-LSK+<uE%g?X#&^Nd<k6FtXiwdhK6e4V-FQ2}9%v`h%T2LU?KC^x&agA>
zT>7#f*c0rD_9T0<J;naeo@!6C3+#{B`S3#f8+(!ct-Y9?4}Whjw^!IJ?N#<_`mQ(W
zo7S>}VL3fdh4eVG7a@BMvcn)fMs75!Vdq^P*~GmBJw-RxK=owp(?Ht)p|txWXz#~}
z9!J(*9?XiPV_EZf8Y_m*@qX!@>z(JF@BPaAHCh_)@b2{P^6vKTkv5wZi(hzOdez<z
z?;9^fIj8kKRs{W+Hu+aD!M}yky_r_=cK;5T)(54Hqdj|#_UA3q>{B?y&#3!fN<D`O
z{5r@BS_Z9x)<J&ICMcjZCj!xR+J|x1Y^g=T3&D%QOTjYs<P5wvrpPN`U)4Bff-z1;
z(30}r%EW`#AU~`K+F%wiBK3n-VO7u?6!I@C$ivn$+=lDtxPFe`hk`bk1>pxlocj`7
zD`ebDh~cK_-fDbQbM-y0e1wL|pM<OZUxXF@4dB^ulm8+>`fuvn$)<yyYDU;;U^<uq
zW`en39=MIsTvKnfX~g=muHFH}ek|sA%n7VQn~3=nuKkkrSm)yY8_bI^ufV(#^H22q
zH{s__{62vFLCRG?JS(DjRuac@T7s5gxxO*~h;ezaoH2YhZ(bg~c?DN1c=KC$ug$#q
zdhXlCo3F=r1-@6(g0u{`5^5zrEAdr@kIh`&reVp|WZERJ%9AR&TCFLUj8T=Qt)weg
zHPot_xVlg)xl*N}Ci7-9KDKH6^TXBp>;nGB!*}s1v3nQope=chyt#xXag^)jF#6A$
z4(Qj-4BArbJbyd+8j$N&+}R7ZlW9dSfPP)pE_TK2hS}Y;inRmn882J*uC0%6bg6RQ
z#OT@v2b1GAn8P=+*jF0MI_)Nus;<PPdsq=`$G4#T+s?o3{M)X+zcC(hXo?Qq1Zxks
z8y~I0K01Xvcwd=fZzuTL^bL@di!XBWbJmA{#d`6b;A?XD8*)}$o8g*+YYwg*aP7eL
zjp4iACcvI9-WK3OZH2E^_$tE}TE+3T3}4IewG3a&ywAdF4UhTegc-wkEP4`qkb6ja
zysrQ=GI6c1am`6STVqo5kL%5NMl-pKRfws(n(1AJy9}Wl)7(2KT<Dz`R(PyV@cscd
zhD(XlQsT6fI4$+I6Q@+XHgRVY?rg#n`ug?4Kl@pr8|VS%h6_pm4~?b%7qQdoRB9Su
zDb%tK)UpoLvJTX;4tmw{B}DoKMd4#XF(?H+Ku@HOK`@TInixLA&ca>USGZk`%i`eZ
zaBXl55(Dv5fuBF)@)a&`qRT#;xuN;A3vJLwRE$~5_hmQCp5$LIxVFC7e}^Ag*YFjP
zIi$?+G~a|(HVC)a7{~ybpdP3XvOqRy0CGS>&<Ny$#-Isk3YvlDpasYSEkP^L8sr1w
zWD7tXjNo}A!6+~qi~$FLv0xmS7w)jvU|tKZ1J{E;fE&P#U<v!zJ_Fbn+5QbI$L(eC
z3V0Q)0Iw6q7JyDguR&Pl<zO}hd9-cRNskuSlNPrqe4g}wp7ej7I>+wPw4&WGyJPmi
zttaS3O7{W%Xr20l0bnpF14F3S<EZx&7}p$ahO%RGGiq2hb+y<W{r~64e?CWQa-*qf
zPCJ-K8{Zna(5u*2fR$hscn!P`-T<<<+jj67_#9M$FTj_enjUB(?f6Xcc6AiuPC~4v
z=Ix~BRZ#1ysA=WYwAK4~N;OZZ<|)-YrJAQy^OS0yQq5DUsiixqr8}vmJE^5Rsiixq
zr4`iD3TkNuwX}j-T0t$Xpq5rpODm|Q71YuSYH0<vw1Qe%K`pJImR3+pE2yOv)Y1xS
zX$7^kf?8TZEv=xIR!~bTsHGLu(h6#61+}n>npIBCDyL?ZQ?tscS>@EMDr#00HA`w$
z6}7608dXk>DyK%3Q=`^Wqt;TR)>4DkQiIk~bE>I1)zqA7YECsZr#foCzKq(q9HckA
z0a~OhNL5*#yv<NgN!iV$Y9(uGzR@<VJNBN;%;^PsBQfmDcfs$t=Xvk~coDn=M4Rw(
z@G>Cg<aIfDT~1z?lh@_sbvb!mZa(1|q9IK*CyEv?(Jizcu(p9**-Wl%CRa9-E1Suc
z&E!BOIZ#OsRFVUg<Ul1kP)QC{k^`0GKqWa)Ne)z!1C``JB{@(@4pfo@mE=GrIZ#Os
zRFVUg<Ul1kP)QC{k^`0GKqWa)Ne)!n;o&#?Y%BkSznj3#;1=*_a4WbC+zytoSNSvG
zS@1Wo+ywSz@CtYpte}r1o*wa}ZH##>`QHk(1|{J)URzKK+JW}rH?)scw2f7?i6L!b
z7@$oi=nn>f!JrHb33mn)w0C-!o@s0F3}c*U!_TRSRk20kH?fDw%S^_hL+K%h(nHRs
zha5u>*`FSAHa+B2b7@*#Ehqo0kTzPzDVEt)R?9&r%r2lOvj1LS@AbKyJS`_r%gNJn
z^0b^hEhkUQ$<uQ3w2C~fB2TNx(<<_`iaf0%Ppin&D)O|7Jgp*6tH{$T^0bOPts+mW
z$kQtFw2C~fB2TNx(<<_`iaf0%Ppin&D)O|7Jgp*6t8B5cwgj{VrJx;X4?2L3fcLVU
z0q<rR?b&XiJLmy=f?l9E=mYwKexN@X00x3VU@#~HL%>il4D74VJsm$k20sD+2bj@p
ze+JF~KL=-mUx2f~+29=TOK>hY51bEv1%3@K02hMafQ!Iy!NuTr;1aOJWKbqED3ckK
z$qb~HmL2XbJLp(;x3~6vP!2u-jHcL~-m-s=^?VS3Jjz%<%2$6d01O6YU<l*vqZ##e
zO>04<Z7!!h{&*j)z)o6$owNcwX$5xD3hceaEDt}XUHq7K@nhP>k7*Y_rVad<Ht=KG
zz>k9te0y|dWY8V-qqg)11HfQV1}26t1vBt-5SSHiqGoK<v3oUd*M<?aSM!BnWkkWX
z2avx@ohhTvlu>7<QfJDjGiB77GU`m3$>M4=JB9JkROGhP%y4`R$46g$bg~EGK9{f2
zj*J5Xd=%iLEk4@fqkudx)TMgHHtIr1wqcw(m-Ud>%f1r=;RBlB!+2Zuyjae@)J5Z6
zt7r1h)QgRXjfou)8yg!Jn-rT8o2D`w4c9y?Ge$Eu5^ghdK08zV)GRP3nfc}j_DGn?
zeijFtaqL)FhIGFN|2vs}8B!u;Hl8*2>iJSV!&l<6UCy?No-fpMBX$3g+UM!{Bt4JR
z^F%qDbJTv7o@MrjB`)ln!kp4vxQ{lbkaz85dLYYx6IsQ2yUl)zoV&5tDMqa_UhLG^
zX=!gXmAG0nnm39?X(V%1t-X$YF0B27B}b8wU`N7nJ@z-yZDR2&&*CW>rm&Z!q4?sf
z;h410i({00d=etA(pG#XKAnHH+t|-i{(}|1d~=?J|34sSeGb{|W5{stL)Lo>GU2QJ
z%b4qaK6B-NicI<>f4+Z&f3QE3eJsZLBmFYJpWnmp<hS+XTy5z$@f-LVzCmX48E(tH
zPtdlq-dp3n>8(IZ)Kc#$<lqYl`78+qDa-BNO@0IKdVF5#&&Ss#-i1hH&h#_z{}aCl
zdR|UI#(t*X7M(G3aGUN;^yBQy@f0q@MMoEIeY|dd6YorR`Y1*Qv;+BKF1$iuzwt*R
zeXO(<TsxBnV6$E4FGrg6x_!mI!0%c6gty*rYag)>_!;(Ydn@5A@>bYCN=)swNTDuf
zr;>B*I(vq<(4G!XL4tLZJ;W=vvyf{|;NNIFRNK!|`F5j+;LPYp>^sz6qW056X>SkI
zv+(BDoT=xfdVX5Z59|5Gke1tQ3V+Y}jqpUyE7ZMQ&h!p)?_26;ik>%zwCuDy;=V{-
zuGRA|)&DH9+e6g8P|vcTr)6{_q1~oeuUGqBdY-5E-YxMoPpQwpFb1;bBz3u0T`pCh
zd3uhi|MIXMp|w)`d_8}mK4I>0zgb+kD$o5)&mU_#6zkO^^&Ho8bG`RG_1{ok^7Z_<
zoXrht|FfQl=y|TXzpv*PBo5|1bw6HRK2m!VwZEn3H}(88b-zpB=xmM2ZR-Aeb#JQn
z5gL=9t4l&%cIZ3SQ<vs?&eC%Sy~@6`ykl#%Z`1Qmb-7s2o}NeQIa|+-_1sU+<~M4e
zsOJOqe6pU4^gK?^jN#>czPgOj^Wo}pf!aIixu>3I>$#hr8*%oK&Uy&EWrloT+K->}
z>unbE>to*F*Vk<3*AM#AV+_^CwlM>hj~rx=v&Wgi_E+@CW%hP^yBTH|+r{(>EA8t@
z`rh=4%^2NV=W?%;*V$a5{Ml8i59(^w2X&3=bh<WpB6z}F7aK&Ibv<!0GIRZV0&SeW
zaV&OZ>?l+U92+~CmUltyrzSggM(h`+N$kAXd9;hd2DqN(dUFc4i)i^8m_y7gMvoI{
zm4})Ej0?LUJ1K<0mi80>ww2zsT+d&q3n%V=OV4kri>&juR#xp<Sadl{%3CXQTP)8I
z*1S1=Vj(hJ_M&5VqtI(i%E+n%xho4_a!8MHO6-SeF)b$EmVPGLroU~!=D&44LFRpG
zKRV?<^QM44B;#`YuL<5ouD>c+9y}K;fwfr#mvd)uOK?MQb#Pg5QE)yuEBI-!AUG+Q
z9~=P=W}U}m<kBO9GPt20a7*KYw*2Bqu$u%8;G-G@2D$cU{wF~O4B2}4v^V_~Jm+2i
zC7$veT;5auqcAy-`u7G4{M&<*{G0si33IZ4B_a0nFYzzr&U5`UIe&sYUD$;a{9}R!
z{$c(ce|j(uIr|*{0G?k)$aCOD2ceg%9CSlVSFzs)w>f?bVgmc)=lWUP7kJ+UEs@t(
z!cJ6ZJRA6Pyv^RaAjA8I_qz9r_k#DV_kzE}d%_>?J>q}nJ%FVDR_~AAwZTa5a(NH$
zV(-_m9WCGm)_G@mr=tz=bo7uN<sA}SMx2YiC%jpHA8)FENiZ2UVYD|CbAZ=N-WX20
zomUuK<h6#8Xb3ye+Vg_5?9SjmTNPYnx5-KwpFJH(?a6+dpdWevu3gRhziC%_vZLQ~
zb_uSJX^NH;=LwXXT*+m45y|W2YClxZE%n?~&joruNY4j*x8pxc&g}m93ih$;@}!=x
z*K?_!hwC|}=aJss_?)QcOVy>JoK3ZcIZw{!GqsoMx%mHK?K=P)E3UOQSItH4mgOQ@
zmSkI&yCq9<m5b!wCHJ+xl`UR&7nZgQ3j_!y@B$kW2q}=zAt4P?$V+d86i6T>JV-+F
z@+X9Zkh&q|W##`nGgnu--gQF$|H1CH_VZ}w%$b>UX3jZtE`OHtr&0O=etUvHzsjHA
z<Ikt~^Bes60^2~D?^1cq-w0t@{JS;$>E&hKCgCK2%$!u)XL%VtFaIKc{*dE8<mKo2
zZ&&!|yZBSX%Y27_zL$T#hClzzzx618euzIG;bkoRx3BQ$>->2O$36V>kNNX29J!0P
z#W?aBM_e3f=AX?Rznni`;kb=IGui9tV>U07$Dg0!Wp1F~YEE$EPX1it+@9ypFn^BG
z6Eld$af+UrYxrjy$Ndtm^k4GY{=}a@;q~n2pI_zAcW_QV&p*G!e_O<#IsED7&xh%$
zxtvp5!Ku28ym>e-5&j~_(|E~D{yCq2cJt4f{Btp<?YEq^x9}(9&wl>Q<j*4hbn|Bu
ze~$C#B!3>Hr{-GzImn+Y9C<VUJiwpZ`Lmoqo&4F#pCkNf=g%BG=}xNzU8do0BX7l-
zU=lm*!+1MukZZhl$oLx(J^Bggy-v;N@PCMFza9-~zh2F6@P8lIf&Hw6m1-hf6ArR2
zoP&qBJ{;ltaFpxAG4@uRM<=;foZ?z>nthIaUNggWV+<#N-@z8~2lhw25%v`H<OR@^
zb((v)hJ1i)$OpNGe28aEe3(a=e1PY4{h+i%+M#)bYt9exyn`R+Sx-O0qd`6j-{VD^
zkKs=1G0mg6GkmG$<JuG26Pi!(Xpm3x2#`;~Gx-+H<G7LfR?UAR>f>#i&+tf(&*Qe~
z9hxs7qT_ze7qPehh~_K&zUS8<qaW8iq5TYQdVZZpXgrB~#b45V15p`Y)qE4DfhRQI
z);_6yQu7p#!FZZSTzm&!&hKl!i<pWRG|wWY;>Vir@z{wU@K}iFd2GXf>5RB_{36%<
zKLn384B8R94DoZT&xzk}{+TGh8UKI%H`TZKZ=$Zv`2Wtoq1kD^qTSP&t2z2k{SNF=
zuFzktsn%bozfM!9zd?V4re1%e{y#Jg`kVDP<D7R=e^S$;zg2&$#;bpa{v8^h{&xNC
znpQ*!+@bO7->rYQCZK<>{=J%@{x1Dpnl}CW^$%#;aZX%9TYmUdweWT2;Pj0<mcBek
zUX{b`b{T`dV9;gJ2Hh;rxWs-GKgrlgt1b}Gwe-K*fBecT+2R$_J5Hb5@#cN|zP5JB
zCGoeu{7T%*o_+;XYf-OFI*D4buPHG4+||`?m%*Sd@D;dF^SA6@v*%aj>T)Vxd}-~a
zrO@ws*pWSZf`{7M55<?Ilc&#n@=1CFz%pv7L@jyPUAc%dpSP&UTxc+w`459j>+=Tu
zt<^3Uej`3Ce<gfQdrMR2SkHN*SL~b}otQZ1=-k@s{88y-#b8IvRE{olGSWL=%Z_(=
z+nZ0H>gn%>MN8AVaY`z~yNhv`RPU^=_O}KCXv<=(u68*M26JIi5gG_u3<egBUNtuU
z=2+K?wV|}XHni&VZVNSy+8f=wOfz>JT)!jQQW3B^`!0?~kN4L&TO05ON#2iE^dpV9
z!Fz#DxZDcO_uX;Vowv=6U4Z|_q>~T7_s$PTZaQ%SmM;1xdkNpf9uebWc9?x;7oN-P
z()bI1`x|SKP7Xdj^xGl1<a3<k$&z`z+~5C>QZEh0VFBa)tVTa8w(2K!)9>>85OKm*
z=C2!{ykQ}-YHcj(_xA7dpMSvBTX56!_5*TPedU4DN_6$a+syeN9EktMQ3rB)Z@mec
zX*T)tTzD?WSj+5e{5#Ug_-m}-^m)u5|CT7N`4CED#(*;@MZ*u=zHy4Z1vqRj7N<MN
z2f&X4g$BcOmvwX%wYmJQvsKfk1GR2f-x&LPyrpdoHcH-l558v-_4%03Sm4qc&C4+@
z%UgTuwbiel4+=iTM*bdOXLHwnSEiVK8{ffQT%rN|jWIju_|#CMKbPaTm>c+QK~a&#
z7YGCks8_9lpv$OrY27YN$h_q}SC}j&oylxEan59#R@ZtWc%oIOHKM(HoC8k$VQc93
zf%=1Wx5Xb}v$xe9tdGA_rnvzv;BG6mVDVuF64w&-&c8N<YNqCYJEYT5ZF_F;9&BYX
z)OF|eE&E&J4`Yte3_b@Vo3m*S(|R$uy#c;FoO~*?@#vL9Lsv#)R}2qd5$jxNUSC{X
zZ(cObzWcy|ch1bb^T2_3&yIwTM=!nk=1Zf;!&roztC^rM6Xz15QLIC(yX3<A%;@3J
zb?2VDYd*Fxzb2imoEzS^C;ksM+&4HB<n(PrtmAuO8LZW4s#Nq~#km_LdChTpjmh;k
zuF%J{+b*>Yo!ccS@7O<Rne!JpvvPC1?cvL2iP+i8!Y?g_GZt^%A^Nd)a>-Ozuh;b&
z(&au>pbyz}x>Wi=vm><|Plfk)PDdVGyX%s}6Vd3zVd<o6CNjR77ylVE$6sYjJ-vOc
zG%IQ`KYxe*AQv0aFHg``$hl-+Wcfkj!(u6yXe3zfz{Pc5*LGjuu&u?uX7Bd+*E&1*
zxEjhw8iQenw{*3-yE3rH<gf3jYUpfs)>yMWS+)Jm-l>L$%7D$$T5tE1X4d33^tH6k
z!A_5po(54)ClTj?KDqo3vn%gsPq3dpA&m|Wp8h0Jx`3I{h!T+PT(;37;`|NB>xqTK
z2SYK>KwbTyXF9ZQ3Y<8=u8LniwXM2(+Z4Mde&vA^0n~&4BrWPe<}aT%WgTdreRk<U
zep!Jo-<o$|?z@<ucXgc8fj?{)U&-J$Y;7kIiJ<;oawTB}3H@Ny-gDFZKzd=iF0(ju
z+xRw9u}PPnpD{3f!=BygIcYj$e%emd{~rIk-;Wh=PW(Ns2gN6>g`28Js_`cd4+BXJ
z_D8gdv$(H7>$Av<Ht5qr|Hy3_bH4EC%2JjkN0)6jEi69vg_RvyWx2ZSQqy)sp>;o0
zRByA@7d;gJLi}SNEB2L_`-(rNVH+E$`NyakE%^MZn$2JR+R|LEJy)0K%$Z&ITAbbb
z>B_;Xs=>-n#}CIr6J`o*y`&TIP3FK*F^9Q<EybT;_rxDyt6r&iu;uhCkU4xcvyWk4
zNbhBa{3C@F#N2{1GP=2HGUq{$@`WAra|QL~?wMQOlUG+$J8G+N?(SHcju^GhnIc!n
zb$qASG}1RcmuGKtRTQ=tc@Axh|DeNK+wZhrpVQUksX}{E%;x`*o`eJvngKc*I@N3x
zZ3ziNiWcod_cD)jq(W=#k4lcIn(ezfw-0trbq?5jT@^hhhs`TJ`Q=5M`?~XE7l#J+
zEl=-uR%}=?37Do4t$YN%!kj(3mQ5(x{NDXteFsC$10}WQCR_c0I~I0!6jeH=O<hN)
zqer`(mOw#q(_C9@pRF)x!^Dy_O{n{YL=ObVxC(bem&vRO`W1El*KLP8cLr-i6}lMs
zWF0T*?XtI*yL+k!P1hcux*$|u8vD%Ywsxy$ARM<^nqqAWyU_;G|4q<eOqn54dO%we
zha$4H4$dfM>01x=><O-(!=(7*`h`JPXPM1D^)06BY4^>Tx{ppx9}S(@pH-4Rv0}~(
z6qd8<(TOQ=sT{28k)9KKF_%Axu@`$0m(xu8KW|5W|G<c)HaEY_8ripx-5b(Rj4q@b
zdrWH+;rJ>vX~RYZA|T0!-HrPciTQ)x(=-x4c$KJ3-bgv!d=mN45J@Sm*iCVDQ6TTE
zAmn(N*O$(#cI1~h3yR&|*_Oh}tcUmHS(>N4Zf910Rm<AkT-V|8+U~Bpx~}fP;H<A{
zHrtU~T0HjCNRPd}NS9e-wKrzz3L|y?$y%enC)aOp9rxsAmK9pcgWV0|P3&Vmet%b&
z-`^9zp}X2ys?!zJn%#}yOB8&09wRI?P-1S97UuIZFB;XlCcG0v(fa19&MHj8J&vZG
ztMP9$Pb5@b6@R}5Yj*%b>@n$+QZ>WQN@LJZoB)bjpKi^g9DPopm(gsc_FhJNiJe3N
z?Iherb96@goo)AidimyU(v$IWruj<z$G={G6aNO@>-Jyx2H&%A6<(OwH$L3xiDswk
zjK<8gB2&9x+I#vP1$pqC;td46C5cXfBq8&Bw7sAKPpos^Kcn1FV_p;!wqm@lttY2?
zvVLqNTHhFmMC+RZ5%%(+tEr{l)0*h?Sp5Cecl=0j4{ZqU$!$Q2DBMG}u1SS`ys|_^
zoO|;8|2^u+fuAsS{wMYrLP9{@v7F9*Jw5w6yY}|<?Ct8AnCJ;jPReVy>u7ZPXjf!k
zY<B<t+1Nf>yU`6FVs-y0q>n}60L?@frk%ws&p{!5hyjkNx;4n1HfPu=UBZP=Po*RD
zl=N7ewdVTsqZeZV&)vriDbj}|gpa+DXhrW2^2)Iy#8L?Q^0eL*3Bj(@*~V&xnCNv#
zY5m_(M8s1cTC~=1F=4Yco}OTaq>K==W(}=~oxb3+yblm#S2FCeS#nK<IreY~dwH=j
zkTI;&c|&oWc%aQ8VXncqu}6XoOWjrQ4U&)pG~M~0LTo9XX<c)9Dk62w%?@9gv%hv}
zs$tSvQxd3XtSfIWb440FQzo}HSmJ1~mpCmMSq{IabE?A9T2NeTwb;y=S&m?%yC1Ou
zh=n=D2BgEZKOzZ=?L;u><040y$FELy507UITyu@1Hmlr}Ti9e;9%fk~{S7yS<9}>u
zN!NvpnW$+DH9ZZFBW4?~iMAXh+-X-!dh4eX!?C*N>P{yOrgPl1bCtEmpO1vxb<l^U
z<2B8w1M7}`9d(?s-}uZ&=2kK-nYv6%#>&hi?B)1xDu-RJ;YwB*hZP>uStETC-+M#*
zjrUzYJDiqn)TQO7k4=xK=cVb=a*RWhSMM22&q)WGfn^o{C8invu#%KdrA+UNR8<YQ
z;{QOK$j{C`iZ*G#5p<{QH;k6#ek1#RZ(r)mEY8wp7G-wMzx}SIp{&wuT~@KFKmN+W
zg4)8u+Jb|B`1AQi^=5OO<$U76Mib`%R$Fp51cR#0SGKgAYcu7h6{dRvIhkLX+nreg
z&J<=WOn)k`Y2X=yu20f;HdL}-#{Xm=b~=VDSk~!3HjmS0gtQoLioGoFNNDqj9f_T3
ze$K{Wh)t_!mxSx%ZwW(g^7FiQw^WVQifl{zE(RHQ7Q9D=4=UyRRrrX4M^t!&f={dP
zVg(;m;iC#Zrozut@L3f;q2P-Ne8Wq23I$(J;Fv=;?S2K1s_<h9{<bafx2y0QmGZZ#
z@DD2ZI}<q3qfPM5t>=6LztwboT>0L+65r$WCh_;E@W++%cdGD@DERvlIB!3}SGS(?
zHPJrCUb|6`_rlN~7WSB=U5AMsDwej<1rv|hOL)m%lC<=&oSHUoNdas<bFlfi8m#%2
z0!vPVV)!|IU45M=ocH9DWB|zSuCQ3L8#41S^QcX-CFMcupjGU<Xd7c85$NM>XwR@O
zF>6hmuhJ1L&nu!f&N;)}^jv*i{ZOgh;}fk&;my`3n%mSapY!8<&hxnq9>B_{)q@^A
z?a-JJ63xJ{ZW6W`hu>vn&hAHa{`g1PB70B#*RQ<7D&qg~^lo<SVm5v-j=pfC%@@8v
zD~Q*oJ&2K*6s_PrJZTDEq2PmrgB#c#!eU3KxpG8z<0Jtgoj8yG6T28m@q-f+WF2ek
z7@qDqZ{*5dvGJ*ib1s<OzB+%w9d~>%sAC_f7;I}EgNbZ<pnsu`ooEjRnoqwL9_;Jd
z-bu7_dz{t}njjA_D<&Bv2;m#^WT#W`V~8jtymh0TtZKl?lWNo-A^#@FVQu4_6?hLD
zNx^CM3%p;2)9MxYq6#N^1U@O_L}#m(%EO|Ab{AQzpp)ZNUf`1n9J3zwIR#&5EuuX7
zm5LveaXN5}qPzijdS$+_mw10DM*vAj=UMR{6;AyW<@;4Q(Jk;r72crW(<+>#qbNV9
z!f6!?d`yK?{{=poz&E^PWmNEWhW&>aZ}f|#peP?rl*hb(NlQ{(;E^OQF)c|)fxk`0
zr+E1!{`O>f_6IFVM^XN^6#OMENk@UdGl3JGTsjg?(h+<Hzd60oXUiM)?6+7O;&et*
z!jWP$b!Ec>BZ~}nS4~@!HU3P(j;giPmX+t53oO}<5DlLGe0hy(?M<b!Ad>4RYizQ9
z7&euKFI$R*OkyqWw#L#gCh9*@Tw7{8OZ^USv8bM}qI!829pSy=vjr=S+koL$$;7^!
zTL_a)GN^2~J7`ht!ST;C(;fEXZkc@PC++Pk)%%*|v3!oNU0901vq=U?BCo}2K6fFB
zfcM}=c@n2ND)4?4PIF7(V=A2HmcS<!yd3^+k^urgq~NEdYQ9DVzNo@!P78cch0~l9
zc!Y3_3AcM{D-nm0dLprqj!^BE<vqC28fVzJOB)LeAzvYOv}rk+CDz>BEiB$fLt$Za
zcbdLOYp`32oR(lgncDs>I4ybkETs%MM$A&2I{El|CD_H$1A(tAc!>(Xh;WUhslelA
z%(enyuOv%=&+NcovH_4qJr6dd!;_O_S05gRWu3L)@5@2m5&YK~FC_yzyZivox2I9x
zfATS=*b&GlL`M=u&^RnJ1@93!<%eU%ya%Fuzl?tmxSy|kfk$NgH^8l0l1~Dkmhm|7
z3@weNzy}3R?=aJRj?YDbPs-&*yCnYvz9^UPMfvY>IVA9?j8ANMHJ{-e75F;gm=kpy
z^_m}Y9m!80kOMGg!K0xp|C?&s>PpNpyHnmE(3%ew(Z-{=)h@4h@CWtC{J9bJVr|HD
z{t=B7X=x3JcE@CT$Y=3;&NujL_{guwBVUfYr8M$5(*QrjhLstSimxm9ysG>$87DdV
zZ9ZN&6LEU3#ZPXXhyUUS&}yIu76b?-t=nfbk{ja+T_?-tz6?ovuKhiH9+s201JsCG
z4l(F6!m0Koj$3*EK;$`TcW){VY0JxFUIFK$OZB+*gBqfSq_JGz#=Po##|Vc7_3wB*
zgVDjae14;w&V)gW5n^=vQ29BrkCs2p?7y$^2iZ#e8{7SdpB|EFlP>2y$4QHN&JHGM
z22N5(;FAd)8vSzK7lE&{LrVDuUJuSMydJCp(RV2o??Rk&5~mp{$}g&Ll12iLByj9_
z;K@<&Lkx3Wsh{W+<tLT$URC+^M0xByQtLS;<3ifeIV_jc--R3@RR3nYM}?CV7v=j^
zIMFZghzh5bEbwU+PAgg9gDU)71)o>p#5YlXQNg|BrBd*91&8;FuW(U5s={gKAn><s
zfxlga(~d%vzfFbHjzZw?RB+J4S1jSQqY!(2HC?pQ#rJSm9p!W~zsb^PgPoyDrF#<A
zuoRD*R@T#7c;3c^(%#AeC*32oIQ9bGji2G|mLG;jsNgmtcQE0swqOk@#$0V-k%f_&
z2!=Bv!_A6zG!ELGaGmWR4mA!`IN|u)KU9#H%PM^1i|b#8lPxbd{@>p6%5C)*55s%b
zGvivSyJ!fWz&=*g9IId#1#XTXgHy11#vZ@1jie6t)QGS?3C_Uk;ozq-Uvg_wg>w-%
zQ?c`Jd+6ai*!$#j&}wt@#g|?7;XB{^Fh2xEq_j6*emTS|qDtYXI#*i-??7!TKP|ii
z@UM}TUG#91J9A37Glx27(hPkWS?%8D;92~d_T2s)yUCjCv3NVP>TcYoc5-43iS}u2
zeM*)MQ+#c0#=CI;f!3VBX?HBjM^!kjErCZETspkGm-?sRe6157an2;qtwYnKoNhO{
zLsL{2O!Fxdi!If(IqZ`c^$VwHU|U<TPTt2l6vrvFn=NF~&)vRPxJ9>LKbxQ5QzG;n
z%S-X}a!CSexP<(i%mpD~=uDN#B`qwQkerhY)S^7$6}&w5rd*=BQ*e?10$;=pq-1%L
zgaV&T;E<f~&MNpJ77*nj$y4$5RGe!cst4MK>OuR--_NVQcTD~s_uF!MVVmUi7V&lj
zPLfjK{VWxyeh7R~!OO}2tKdf{f*1U#-B9C)6de9y&OcGlq*9MpRnNMJ1lDZBYB&$G
zqMFZ%R7)_ed0JXzyBB+0u`1Z39V_-`TUV98!x5X%za_WdH?=%_{qfkrvK#lWHO-l7
zodLV8x5XatWCh;kY~FEB{4l%wqU&Y{?=bHkYK_q;fqRqrt{k=vaA%RClNFpsP2iIW
z9KD72S;3DmoXn{FCj5|6-m5CVuHf@3{21Yyq<0(A7xKg(By$H`+<XiCv&$A;Pr%cC
z*=4MyP5aW|;7gtH@1X4k@^|wQ#t5PhU96wev>ESF;WYB1e7_2(bu93R3MU;Y@M#rJ
zI#S?+Dx7qPz{gbhc?v$O!bzu!^7AU3W}?6sRrpN`{#F(Kq=H|s!oRHGx2W)B`L`&z
zm*NMM^6Lstd?xuP=!p`JF(W?TqirYqJEL$NxNu}&7!KbMUU~3u`CDm5L!wKKq4kvT
z1Ba(2r!UhKmd=gei>QN5kqG+AT6-Bu@QyZlobTb|{4yWs9u`){ITi0x;Y6<}A64Nr
z&H|4pxR?5&;Jn|wfAu_`qB>PtV-u?isxYRAY&HcUZRuJIBw{R97o0UoYlEZ9tnWOw
zOC54?)z#*-kX5k_EI>zyIsF^CuVPMHAbtPNc>u2mpX+boJlKr);GQI{OM%l|7v=j^
zIL&E+PYWF1K(qs|zf{zZymqMP47^8$Q~jcRzY3@N1wO69Nv;TdGJ)f4@nb&c1ir5M
zeM-ADh60Z!%5yqt3<Vw$xQMyn^uve3r9Juw>Kjo04_wX(e37N%M32BH6FBHW?1qA`
zBlefqgELMlevEMFbj*FS5aPT?9wCxkWTVA=Pe%Qb3_EXXDmC`+w%b@=osLx~5r98x
zLS4(K%goP9SZ6rhnNbt3%4POrLGk#<<=Dj|=XPIr?#1WM$7biwl};Y6njPN1`}P+R
zeHB0*9axiV&?c#o3qgk}phN_D1QEx;hUbp=BFOo>x^vcAqBf7~K=@5>A2=}|+n*M{
zR=>v-d*?oVmht$TDsAn~x)0xX=v~tT7oB(L7+8w4;wfne?Z7SvJH4#6h(yv@26AHi
z%-rEh9Wb!l3mUQuGcCDg4P~C;meQ`a!q|*!S8LzC&iW}+nsH2TXu4?s?(>^V>TU5H
z>Euj}zxUS5uDF9@xR*D!v5$i*T459O<t062BCKgSc2!YTR&ItRtExB_qO<+|X}W%`
zp|u{L4~;Hj7U0yxKBmpWs6y{yc67?xXfqy4#igGs<@-|b$E9Z!Je-1mOd>CfsDDa@
z->TpPD*QzSA5r1IQ}CDy|FwcID7crRhZKBW^EW<QdB1S;B|*=OQvMWsU7M%iCuO{l
z^CyYlno|BpT8mQt9Vz(7v@Qj|UBN+*!Z){`^9}q~(S^G<3A*l3zDMJe#NVyLr<L;W
zRpCwrze~ZX{RCg#dd}BG`<P3uSlv&+>t3%3C^Fp*FEun58Id;yUdfW3hXZ3bF2`T7
zV<>AiBIc@bb0k(Rd|jr(baQsY$3!^R({;6;zJh?Y_KdKs+%B8NVl;R%bD2&F&yp#m
zc(7(ohw!L_EQ9mx^l=A!LjP={@~_o?N1@KB?Kv}8tf01_q{5b;SpY)oTNFZ_?FH-%
zGCQ)%vva$lo;H!n*A#e7Yl=%kqn@uFtWuIduc8NaxHH$I^g+d1IpU=-C6)?3bW`*y
zw!Cf;=N9zwaG!5<M{jv&Ze2~yu+8Dz5eN+C*rF{<JGAkyY3D<(wz6{jgtt3t-8<r(
zcBEyn3wE{q;q}fo@2ENwuC1x5?ehKB{P7h_UVCAAuyR|!yRyJ<E#Yx-KOLK%MUOb;
zyhmachuEEbHE~?RD#l$%k{$zuW31A!YABYj40&m}6r@->VZDXOPsA+=amyoSQbX!S
zN28zoq$;egYfz4=YYymFS39E%HuvRw#}9W5Y@Zrf4nL2`I?yP`?_uWKI4u)wkkc52
zegZ8DevH*{yb=3zMB)L57XY*$X0RNh9v-2`C8EGXbpJhp^A#-cJ{3+9NZ<=9{F4ek
zK{#dsqV%K@>93I46=XG`*bq4Y=j?HMjLeu@2kWt6vTkk}vd3N(7Ed`g5Y*TOcQmi?
zUNvFeBW6&+*BMSX=xr0YmWm%E93xBAJNU?giz?a?G0zS2&~PL;+^La7N%HT$J2pH#
zXwX_mOO;?E(}^R)>mBye*}3M`)jIv@uLZ5{0UFl2vF7n@3EqE`k4XimzLV~w$YYX<
zhf;AqR-$~L3a7CW_<{;2EhX?N6;4`8-~%e0q^ZD1R5*>fz$X;kOHq>wzOLYirsUd4
zl%G-Iq)i1LPQm}gwUoe5%6J~u+c#72TT{xvz_pYp|Be*=n_No?{B{KgoeJMbOM%a%
zCHPN@{^b3D1QWg{QVsIyM$BO{P$k1axwAotUpXLjZ*{Au0O3Aoi3{y(v=*31@;3aB
zh!2H|sP4|wX*Y+7HufPfLP*_LC|ne?@@#Y|_9Hb-YONrXm0RU^THBUeH^-`$d2NmL
zR#FH>IraA|WL0z)ru7{hRt2x-73tI49jS!z`3Zh;x!KM6$mb_)r#y;QJI42-E?Gt<
z#DJPyIg-|$u%7<Yh*~Ync(CI7>a7B6|I*&R-@Us9bU{+F9_=}pUk*;!q~=8p**<vG
zEMI5Xy<*%$bO$Yg^LZigJ{3;uK;R=PoYsNBCkRKsdHvEWa#ZfNganZTa{s^MatlOw
zFJf*m^DO_5QMw2ETIZ+IdK#;o|DW-?(#vTsXMH^q@FIG%P@Ci<$sfU&1r@(Y&Io)!
zg_9f*cv!}x7{BMW7XwE$5XPw=mOmQ5DAp(9gB5&Tj!q#Rn2H}$@Dde%5#cz)VAb<D
zV`z1La^r$s(c5Hoqr(h>Ik~P@#T?5jdXJ+Sp|gKtQlz`8D*kmGmtRB8ALnZUr#ZwO
zcT(IjG6<0WmG(*k4e@B?{|0KI`6i=%9Q_VZ51lb&G|bUo1I?xrhKx>e^e;de-<gPd
z2U6+<|K+j^gkm?Q(R`bvu#C=dGy=~mkCUeR2cUQTGLkgaK))k>9QGcJh|qtjo>d|2
zgd>0-cCV`T*O?2W<t}SMW<dsoTS>9QQEYKIXan47Mr37aQ6RD5)fSgqify)HOF5`Q
zOM)|!hqo^{^HcPznD+59ts^G@P@J~rK14AhCW(BX(J0jmo+GLorHPNv@jCi0r~XE<
z^FdTMW(n*!m_3IW?8hAUs_=CMpI70>2p6rgm(i+8wCYo$!=u`#x841z<(rp5Mx05A
z4*%skZ+QrMN~e80S|&@iLEm#Z-l4#EZiUzp@%Km)Pq`(DVr8+C3uyb38anRc`yEyM
zxYUeIj_AQDb`ZN0QNI!X+sC;7*1J)z`3di_u#g|pye-jVidL8Dq0<=0H~s?NYqi5N
zUacPloyu<!lRD3eQoePJz6G!DU(mZ^v<?ds^&;uml_P)An@==)M#}d^$87skBH>?c
z^7pVn{7+5(Q2ZB(ka!voOt?RAX^g!Vm&OkZstKo9eT~2;n2f_ufEaoOUq_B%&J_^%
zJg<jl5=nJ%LDa9pJ5zCqq?9PXpu$NS2|S#@F`u62?F#&myocmciqk3Z38g%wR7&~8
zo|8+d6rArlK_|{i(kG<PXsVH^7xbg`mpJ{TMSsux1#cPp)hS1CZpK5YIM-sLe4h%Z
zehECR!f971@F^8e(pumHD*SH>KBvNopQ8MNf_stsipERei3nFtKi?G!d`2mMiv6AM
z@&tZT#wlj~_bK?TDdm69cYmV%J5)H?C<K1Hf`cA~KeYSH;e1uoMcQ6`Z-oC|>}GzC
z-3;A{u*>nOiQNo0a^dvKPkE%46+iIV?neyC8yIoLY11_c$szVHkaCS1zXIn@Lr+!E
z8VD9z3b=JmyM;42NCddGMORvWP}Sz?ud1&Kl-O`NW4hB@NuTz1O?BPWGgJJ1_v_(C
zrmbn3jepkGS26F$MJsPNJ}m@rVWTB)Uo_Gf|A(7Xa7ydIS>B~-k}W2Q9w(3R<&rGJ
z5=VH2302|*&(b>fban6PY+Ea}F8h~vY2#m#Y9k(32hQ$O-u5+X`?0R^@h<#jd4CVJ
zdB^1YBR!q%eRO8`j@R--dtcje<ub`jII;5`@hQA1<ZU<$W9`8XDN_gH6u(1?D_J2d
zacjlf;AzO|&B&_oTC3~NxW8gfYxG#l%5yzM?tmk$VsAusn*}QtGgvZlt$w{MafD}Z
zGu|nC206|(uqZ#H!b#%`Jj_rXuis0(Q*hxi6z2fCo#RB#AnG-pPn2^2pNi`3f6BaM
zrPY4BHMrU)?(EbJ)wZ~8d8YjIqU`!|`T7oYwzaEB-*b2j^8&N8e^+mAK`^1cao0w^
z&?6`mvI*HQgv`ZS0?zOGaG6-gaYZIVMjzs`jLSHENS1M>kgd2&gEdFEL4W8t)dDXM
zJI*DvD7_$;CW*VoYZv&0jQ2yIrPi{}Yaw*EL~@KuyY&N9nsz$$+l^Dua;e`r#=paF
z=Wsf~VbUd((+L!DoXZY@_o;A_eF9%l@N&B4qu__}&LB~b8b74qxD~{EChD0`>hY@T
zS*P-}H^B^aNzdY>AzR_Oo1jtaZw=v^H3<vFd5n2MVX@^}oV?gIo&md~HQ=eM>FBH}
zbC%V5{9Vz#YyRQtvZ}J0&W@USQ&~|*U5njSTki1II$P?R?A0xk6LFKIT|2*~zosfs
zhd5W4t*WD?XP$P9;zrS5u`9rCn(uC42-|$8h{vj(aj{6^Tb(m+7b*K4UbnUrTx{Z_
zF`;>f=30zKF=h>JF)8?AnOmFjLkjLym0wrzd1UZQ)^kk8C1{)hWOqumJ4Nk+>!PoR
z$;QNYKxFb$dQ0A(q(y)_J1p)|U6Xo~YAB$;iQlEVsdG4SnF>APx2gENYvw&o==#lg
zLf3Pg&qq-{q3Z=sx?bQ3T`zFb^#V`mdV$j#5qLt^3!HSJz_~6=&?)^+!DFN&W&8(t
zKSrW_Vs9Yoq4go^N$d?cuC*!nf27p&w02y<uT$Z)V-@w>tiqG!Z%}ZgDZ#EjQGQ*v
zS_*o|KO*Ykdk>5(aCm&*lQ{J#J9Od6=58)5A98Pz@lUziW_Got8K6gO^_DYlx#??L
zvTY_(BQ*hgTD%>1-UO%M=cN<jr-X!I*$ED+a9BN)IM*Gb{EP}G-68NW%aF^HFaJFX
zzRt+cNj>zk|AW&^(x;v9f24Fa5kbq3ChWFqe@jIgF7J79m#?;k?(!kdC{H*#=z!O4
z8Lq)OIQ3#*^0X(nNp}RXpOUqelY2B$TRhX3!3wHd?S)8tmU@HGQlDF9OZYC(wxhj3
z-SAkkJKG#AlPy$YPGSylPJdqJw3w^#10&}fMu4n*d|$nvb8a&pVktOZYodIg3a2$C
z@F^MRclvn!t)hO)GmDYmjE7QjUcV^cr^2azflsM$Iv)vqA{FOzUf}D<o~%o>%lF#?
zpGhsxeVPIf%Q&PPyM@#57ktzFlGD#|u9XG8pu&kBflnlG%sAXVRPc2T>>i-U4$Yg2
zA0r%^#1E<a3+YAdv#~aVBGv-B49Ogz&I*)0UXcZ!A_NulMVX9=yr#OhIugb;t$t^C
z<i@t$-NDt4>Y<XXw(7SQU)kDKT{&2BbMaMO<AI$odB;457qhKd_2nz^XW9=8N6u-h
zaE4Z^Mm&8r6|DsgWh0*c?uRa!J|5wxciddYsh8(Xu&6R7(7t!`&E+Vo7_Zr}2N#!J
z{SKCLaanuYmu5?=_|0WoNlblnne@4v&WxIhgg&Q08h^qL1)sWdof}F#T2y7qO)t)>
zEavy%>4Gi4*WL9(nm(k}`|8;aaUVW$#rw9=MV#O14*dOCjaUWHUWs@!T8oAX_|fxt
zjZvi%$#(kxa3A^rXnRQdBqRq}ij45;yw1mqWa*QjnP;$|^_`>=W^(0p;7&v{8d>(f
zm55PtEw!|do_r582bw(t){2U?hc4aGP~jY?HXU7K&PZi_UnshkXKSx?6d;wwsob8H
zYG);mL6XJ|DUGZj*!6RX!c$n#X2&U~%t$aP#q%bzSu{q5w1%)LU28OCrkS%HZiD2A
z^84i?uLWH#H+43#8w+zKaInH{tK}n=lH4MZLE|~)%psbW@1T&q&?xTnr?j5x_nVz7
zs?RMbvo<$KXL|oCtj$tMY(J%V=xsmW=Dzkw^uq3ea~7v|hW|pDHTVsBoC%&ov<db?
z77-UnTYjTi+!0qzMmVdKy?<U&QFQO_mbpNi*E7=Koewr_!yEsCBTLaDW4OPwuA|R6
z^_2AZ{;R6TJ35vick8CQLMy(Cs$H0*<9&mZ9TTDU_Qj?6-E}t5(YWy$_F0TUI_*8H
zoJKxTTdQdVlt|^&v|5StBKc9=2nd-B_f~r=+AOd6GE1@?)glK-jk(3vFjP~RSF^3r
z>-P*b47ZsI?-(w1l;xR!TxjzZIktE6q#(Y6;^z7Gs$NS&bHG#8;cygEj^uRQ`~L=J
zHX?B>TjqjE|H!>dBkASox(sXj$oxHzE-j>&XXw()G8Ud<7qjkno4bpOIxX*xe<}VS
zPgo))CE?;Hi0@4sZrs#(PTa+$SuQ+6sZLFC@g3$bmg*Fgq);a-AE`^`At|zE6c}?e
zD&l`ue1k8H^xhz68bCslum9t>o+iCEq)%h{$&3TSD;dV^4}Kq%cAg23YPCH3<PAS*
z^s_rA8S4$_Su=BuIq8m4$cwY(L%DWvMz8OYbl%$2-`JcNr3!2P%NTVYU6hm_6kr5m
z<ZvZ}R>T|qxFuF$E9-F$MRoB{GwqSp&b7AA{U2jmV<gx<Y$`7d<e66{(o3@Tp9meD
zo;upis)wg0IImAh>5287(oY{!Hx#BA8_wFzHV=|G7{g|*!I+s|m{Z|~7k0c%;k4{R
zwl&2su0&Q2Eb<y_{eZ${=%pz1-uI!e4B9Vp`G%3l+2cuQ_g=BzPjDUX0tcM@A|{vC
zost@gq=35su>fKucq$fPWElGG!v3}uzq`$@i?N;e_eI@p%f8-OtEZ^D!8_OyEGo&X
z_~1WiWFi)Oz-IGVD?43%f@ph5>@z>B{|jqf3=Hn_d9AHQHPLWrFfFYCd1qGJ%W4N)
z74fp-L=KzHV?|a1RUlZxXccsTtd&Drq=wav^;dOUZO)jlduLnwj_$TWWBhc)bors|
zlJt>fOF_G(3`Q%Y&FPPhO-<6eKr7NC7^^z64`HmT-Bqc<W)>`y<Y@>@g1uNU%q?f8
zYHfA@v45dS&%(LGEu!(JkpsmyF;-TRRbVX2a+FjB#wE$O`lXD%Kuw38ncBCvU(xR8
z)Qk-U3a!~~o^*YET8^(LzdXyDGjKuVQGZu+v?U#{S7f+Jaf;o`DdhAK8&Wdk7&)~>
zBF=668iPE+{uW#g^w-wZw#+ou58EAO{)(FRU`KGUvu`Nq=&o?pPMRwF8vGrZy6jG8
zLx;7*63jDKS37DuYinwn%$8s|#1JF?;GKoUpHyuNZIvRMWwj;5xZuvSEi-j4N0*~*
zu(xX<&>3j;RJ4~l91{(V6OACM-@j-oDGyrAO*J)W5W{N5)v6L}M}xC7TbJ44Z|H-P
zCMkW2XB{n~_93+rA|tga*=(6Y54gc<2QLVRk49Rint5}}?f$-=_S&*Gf6z0sv}|fS
zGBbZsr>ebvg_ixR3)|86jaRW_$b~${jyfqTc(M@@L*c@f!>4RHR##YbaZ%ZKu%dwe
z+u!bt{~DVXE)y!HFyaksgdI{|Yr#!YSalT?wezSg5t2xqVrw&Y*QhHD$F7wma@WqF
zCuE0A%(X!#=9|hb=dU?C?UW#@w`%Z5{tipgaMwy%_0<=QAL%YHo$i}~Ge@iQdQQK#
zy3VQ`&fi)sjnl2s9WsSH>x@nC`s@^P5%xyN>a|P8fqz1c&Ds#xZz4kE-TESCTZL-0
zEn<=<79wmFJ~OmbF_doaq5ihfk{Ywm-7s9YFjUr<bM7a~7EGN-W01#H7GJ)#ey(fj
zoV=_{I=^31iE%I?<J8yrn8GJ3WV1R=37@}wPC@vA>AwkfRoFg|lE>u%TSZr($Xu)Q
z6#cZ<>lzQT564eC+no5rwDD+g+~w_Uw-*J5NBl*0etPsFi!RSFqvY~QJvp)~^tA2e
zX=b`yv8O(~?p7T}PfyS~B&q&9*Wd6RCZ<WsZY{;zo3cYw`Fxd)*%jRD`#o$@$?N+d
z)lU0%)GkiA2}O|Hx1X)Sv+Ur{XgRqWmPA|0-Ju}jy;vQx&iX0WS>NJkt90}>m+XiV
zD8kux0`EW~F2JhD+~8#<e3_Ik4HJO^bsJ}A{}zjd*^Y2H{{ArU5As`~oH!$>Je8?V
zO60d<Z;oFqJM&;oeL4O&SkkCn$Q$17i$u@HpCE@036G_Z@Z*|~YOc~qbYGc`0MDRk
zwgR7GpfA9cGI>W~0i8tUMP^HBexBWL3Wpl23auH@Lx<Q!hO(N%oZO=LO{}A>#?_pa
z`KS1YI^$2sBa(@l&(edZ!fnwaYi7PNFQejx=!n+vkH5>?E%80cjqkzlP3`_u1@9mi
z^x=;VEO<Ir{NV*_jitBQKiU^Em*hDfkN-t_653j7U6Qr6#hs$9sU`IND)3k@`<2bn
z=#Sw^UM2odK&$=+zjKH+CQo;|K+E$Q;3wZ&(5Ay+_;2I}YiJDi$Lf(-5~o0^V!S@s
zn^QHVBwHF|J1FN8{U{xDHhb$lIO<a?zC<gDm4)hv^C=A_8kF9xbB=p>y_AeB+2B(j
z+E?8`RVEBE$=0y+_}bt(&tQFr22!n!WUjO1(N;bvKzK{%nO(T1Z!x*dO6oH@<fi0A
z>qtH7CbOWWCP<@0FLcpwk|*m_U6edfE72Z>22VjnMs8YuhRr;v7e{K5X)Y*QYw}2y
zNWhkoGi}!h4JJtesaui0XFs;nIf)$pk|x}yKDP5IiDLn#B-^JxxZj*IKhe-rm>D<>
zVt(?>n$YUBmU(7PNMCbw^5JZImQJgmocLfC|A1-r8V)s0E7jjbwt#}7t|Iyfic7FA
z-wlef`jT8pMDeF=OAMc^pQ&(JIvn*8cXhAF)lyVjHWuvI)7`xfc_4#@wx-!&`)re?
zFko>)cfe6b8Zj5O{|>d2_b_4kBW0X8ri+AZMmn{KO`+I|U=EV9*32!11J-s}`%1In
zf{WIAqBUkuc4@w?JZSSrmS&rpg6^6?qiK1>f4Ie7ncbCPYV>#-O&ML;mG+jy{*mSW
zj@tUAs;Z^>+760IrQMLoYF9)(-n1VwXh8;cQnY8FyAe5E`$D08UEO;_p}pN5lj+Qr
zKG_+X(ZzqLpEk80jm@3k(Q*D<>}Wgt{Pghfbo`p7ndxP*=aL>ouZuU`7PiRO+29~>
zh<u)TiM=PY_aExVpOU6>R{V=Ee(`tlmu$_2Ij-DXS5A0!)zon`HhX@DF0JRSo$v24
z>ceR|wq0*r*}h{1?fD=p-ir3j<ln+5lJ6&RaRlp)ACdx?A>gTeNGFC9i+?<_(>-zi
z$ewG%+r~Y^`MQFEN|$e<#BHt*`gV_u>~3i@9Xb}+Gu<?O<;VpW)HXKO_6G;{?{5kg
zP0e@hY!B`3n4T7V_2JzZPx4GfWLNeJXC!5@5Jm~38TXWnEP2_I9)`TUki;7MFB%!S
zsDC_i;V^#urE#*UX|j>svwggIqVcJ(N?o`wbEH#x;RUJl$kfz%U3mG@mpWz}CA@a2
zG1@V|TN}SlYMiBYeHvq$j`aY~tCBsM<Rq7mEy%x@RhW(Zdn6W1Mog4}&)3b`;-yQC
z$RRDh4a)zWZ%d`8+Y;Y)<9+2X%X7)^2diP+5U0R|tQID8Z;v0%Q#wGI99jQ3UYLm7
z-55-eb^1q%g)XECc_!txsaVzI&73hAZ3BG<shFB=Fh#pbmC3||H>T7+1LjSkc6b-W
zen_s@oHw&H<#*)dmKIiZu#Wj%*#kyhZ(sa*%rp{m$UB1X2<ao|Xh-6^lnYAHNBpto
z?uKi&U9@c?(A^!FU@w>T1Ue$w-~8ei|EIC8&P|d*T@!6VurW>?428+cWsW}*MJ3lX
zbT`NP<(fYK`6sg@o&H{HucxlI=|kX>6>^>OD7K5a?^n*?a;9mlghbD13MP$YnE$dU
zes`op=bQI<x6Z2AQ4%aKb!HW3<YqZvSR8$qWG(#XDHhW*I$OL3ZMQy+<|xId*<rVV
z2PP?Hp&rO!k{}NHE@^%3n=CA+14$+v@d*tl9UNWc>1bN(Pv0(d8lA7`T`4%~rPd2q
zWO9p3Yu(H@P@B$LDQ#>zb+J;VrT8z!0gQZ}?teRD<O@q9>_w3=vZ|p4MrmY>Bu}wh
zng-Q%<hMxK5s2l3+aIzkRTz{~_(Os@k9@0arl>MYSiZH^k%o~0MjqB@&?9?>%(Yu9
z+wITPBzSkk;o7<S2cl$B=^8PS724g*`En#gb21%rw3lmEoSsOI5+M*_iL<IO=7?G2
zcl~{0cx5H_5>BjGd(QC-d5+7Mu;ZEv=st-5I^r8}^nHU8U0#Seps9hJ`a5dJT?kq4
z@a+3Ihsko8v@Whjz<Dez04#5CPixS=^V2oHicmvix7}Ow>7Djq>uyue-nP;G<x<%1
z+%qf$=kOk<KP;8+A8p&)gSN;b|5L09%r~@^*v!fHcPL*>JMv;O!_0at)KJ?|UhT=s
z$+Ea2Q!P79`;IVc{MG1C`|i-hjG;Ge-=VqdVd+t4>7=(iD4D!XkL*C6&Wz$r9sX{k
zm`qk!IpT7SRL1E|aonGVo`b81olNEePt*Xfg;G`V)#nT%K_^mkW<+)%VW%-WO_!5T
z`8oj_bJB)T`~NrxkZaq?bZDo<1vgJ5j+cYugR|cihl@(46sIxt-&equp*)L>lmi|n
zDhO($*7Rkh&1}iDnsSY1N~u}&mDxR+NJE}s&X||#nkVY@dY)0UFJ8j3DuyVdW*qOj
z$7xH$-jDv^WU)Cf_=68E_Ggu4>#|F-`WGI&kM-YZ4ccr$>y7cx-v_$vSVOd{hxDXz
z@jLvCr{W~lEXyMH(cVD(7jk0Gc#%z5ieH%NACz-+UZu!z3H5!1ER{IT;gnZ}-HX?Y
zYA}yzgT*gW@%ptzBF`|!96l2Con2Veh|8FnHMRM-wd&GzjjPqv;?Rb-rEIvRwq-Jw
zQEbwu-P7!=D#|bVQ%1fc7w-X*3D6Erw0K%a^B~6=GAFuW-FjJ$gpgGqQ9xTdSU?fa
zpD>U<IkHmWDIN5~o;lD*C!{a_fz5rkZ`Iea_Cj-cYjJf|xIs2%hU-ro8<sm^<fJx|
zyGU8e5vvmRX7YT{wuZLU;xx2c#P^7{c55KKG&j2x@!Nvsd=F`^iF#_ICV78&q;+&@
zX|(l7%FYq3;a$QS_EyXtuHh7y75FJ{so?v+bw1kP<r^%iw{IV8UkTKYx3J-sZJ~}x
zy)EDf)Xnv_%|`6;9}?|_c-)()O$pIT$TURn=Y6hayuNLFM`WeEzBt?x8jQ}fDtlzM
zt#_^tmD%be9ieS4@yAgYsgif1E?P$<ntcAVl4m9n^4?1pD$bztf(vd4=&wD4(p{Z+
zyRJfMvi7r)%PapJDnEm2Uiq#wD8Ck!qjv1J*&e<_Owi6dz%!ijI`4ebq!)jp7vaA@
z2lV>_`qy9Y+}HVM$mL$-+I}40)zdC5NFhX8Bkgi!F}A}b%}OR~iOW@jzfZ7BZ@3|T
z-LtMTo6BV@b79xt32FE&_?8L3kdVI0cX8g3Co2hI_?DI5Fyq?c!)vRD53jn~9m9VA
zh@-<*Xtfp=mX(<v{nBIq`Jaz{>Cs5%wMX7{^5naYT-%9#2>q(C5W!D8ue-E@7O_Me
zuq%l>fkZC`p42f^N<#N1GQG3QzZLE89~<|&^U7V7HQ!RDeUGnF>i6F9#r#l~uQ`;O
z10K?-9LnnyTC0}$EeTDf)W>Z=<r}B8B`LU@aH0-+ZU8tUCb3Q4oOOP4$QHK-s58+&
znh|;Po1Jo2Xv<{xhgFH`Q}aVpOc(Oh^ES1+&}Qcw<j59OY{{jwkhB%k&PpHdm`n6t
z7R>&X9ZBM~EZCnauWEtS?qS+}&~0;zp1-GMN`7lgx43rhuS>kFCFKP!hsG9&_xxT3
z<YkfAVZarEx>eCOXWXPX+YJiT#4UVW_KOvTodYfWb5>TOOG`iDrt_a*VhD>I%4P7F
zCZT6&66(ovM1w14A{l&0l3Hr)B^54XO{KMz>0DKXeU0t?p`fL%Fs9R$G+Pc9lsZam
z#UJi%w!8Wo8rm{5B`K~gaOPUa8psZbn;AUIvH|Os{*7BHJYTGVegmrUZ}uGc%xzvs
zAtl~hgdCQ5fr-RtGV+h$x7<F7&4Rhgp@o0F{J(bmSA3K$?;X$$c%`+|_jrd`{j<-?
zE%1z{2Ff6c7I6mVc^V9){bdR$7o&maV$_O!UhpGOHUS50j^LYC?H8e2$SG3cM?XF9
ztS`}F{^8;H7q)tnj%b<QcZ8NR6iO%upn>NGWZ;MLmX#LOe(ISW&n~X#S;cEsD4hY@
zEnc${zcbMz%6Mm>vzy#Q${=T;9SQo?0uKC~=SwgOJ|fvS^f3KxVUNY{V7B-@?0rK+
z%#Xk3!9l76`2u*hHUrOo#>YvjLmftv5hTNCq@Ibzzfa^yqo+S9w~IFgp<T#jjBPz0
zf5vyj*iity!=iPV>woqVdocdxZ+x3=_p&mU-!k|=@xKn?`y?tUqmY3z4Z%iC`zp!=
zV&IuQw7BW@Yw3N`1Ng0#N86vps=!Et8Vua15D2jT=!r<=M06~6StN2<EPm?1;^G1J
z)c&QV{Y9&~-lLO~M?$)l6<z4a<mAy_-74ETyRK(f>G#HBd-d@vaV-WkfQN|JB`V;)
zL$7);N+-}O><1j=HpG0PMtymhBlH=87c6k$HPKjfDjJPlbK#%$mt1l8ooh=vwitg%
zzqoei-B(<q|1;HunJFE|%!5|IkwWf`va6ugD-=4dPC67=%njFA1FnH9=H{*#bOmhJ
z{HkrTX`#D&p>d)uqO(pP=wG=d8ogzu|G>0W7wN9Qao^DSeSPN-?YptQn|gxvAo--b
zpcm>PZVcM_65{e}K+8GW+{;nUdqR(L)T>4{uW__B1w~#Oo&(e%=g52wbLSnrR0qs_
zXh*4WiK9Iyk|-Zz<PSAyz!FHOU*Yi(O1a5r_6E7akOp^UOU}f97_^Q5EB3JOW_|_J
zl>0~V=5F$rA=ZrB&V)@8)(AO=Ft^{3oOE%y5JaH8JU+jQ?eE&z)-Y?9%rjZmLR&#v
zfzgy<FRJrvgHsh9Zf#mtO{2xt<L)tCdCBa>p^kwIdT)MHLrJM#+oMZw_U#_<40yKr
z+syUzy>qKX&D6$(lnyOfN|A&V+mqOID(Svq&x4HS_dGC7jP68~x6y!8<5b;Jq&e2=
zZ5)~nEVMK(S4$GR-9H+Mlon^ThOAwlwqB-nMIV#y3LogM9`6jqY`TndCi+&I9iHxs
zL%$gfcT5_3GMjrU+S<0wf8>z{^1c~1CfIkuA&RLXvDhfNgXI!MSP_fJWb;+6<Y*hH
zik0{Hvvo})X|b&O@h*ezF-LPv*V}Hpw%J^J^}EJbzIsmd*7xkH+g*!(Qg)J`qn}RM
zE=)>DzQMrvNVEcILnf>>ZhR8Q8fYw*72Ff@&b7L_t0$sM#|lHMuG;FFu)B7!?)=}m
zdn)_GJ@w;@Cjah%&gD>UNgz~R-{<bP<d+wgHZ|MI!*iYc-t?2E!Rn=v?x-_w2dzu8
z3R46F)~A>OXAcj+p~GB_uvHKypVj_n`GU^cYPWCBTR-J=Si77J-TsbjYe7+E{;|Q3
ztJmqOkD4YU{&s{2;Fld%Ye~>tL?Hqa>y@H4O+{rvC%wm_d1IKpA3Iz~20cz1I6evE
zRY(d_E*(fxS2n`-!4Pg5VEg+^i}ITqTVlSJskO$k#pMb%s&Cve-GYFGq5jgx%PJ}h
za|-j)Gn&?>+Kyke+r=a)9Cqx!=n`Lh#FduS;4K=Wo{wQ{pFz({(XKL+xFZxVwvf+^
zdF%>F%PQ+?dOcA|KW5Zc&jg0LADe#Q{ezKEQz-srw$s*MeNJ0D+#w~<KD68Z4#qYU
z@0f%JrgLs$r>@1B5HGxg83)^*a*65J&OLXH{<cJPf7FG&PJabn)m#x!HrUd8PuzU-
ziPI0Y9^bq7IE+Q)VL7GwHFh(Q(ll0iK9ZE;^!E{8ZH(!iru@uItEn@<uG;m~qT3MC
zLxnNT$i`oJ90d33!Or3XBh5bW7sp0~C|Zn|*7$@!=BU;%qu1%&Yx`T%YGxZs`o}7_
zm9__qab7OMdwh1<hARp}6?cR$oXMKZ>TYR1xVI+F7Ts2#Ri0~`Xy!2=xoGW|-~mp5
z7I%RNTut~qV1RJ#Tlk)#FyJY)Wf$hvI)-N}9$&almzKu<U=9yt7$RvI>-$f~+1q)4
zCnO8{i*pO<95MAouQ3Y~hhA=Xu6Cmz(P(XxBjf}l3Ujk^Gc&A(o?5+BI#6S42JKqu
zG3j0L=X?8I$R-Q+6e1P2-q_I6*jQj~j&x)CVZGx)8FF$Vk1-9EwGP&Nsccs$=In0H
z*40PSV+9MN*ZqCf+<MC${j1OJy7J|#=-XDz<cBbmVU3k%viy#`#NGGAd=?9w77}7+
zWPzHP-bXOK>%+eJR!^j+z8!Cd^3>Vcn~ye+R(044OA89@g`V-|8UzQ1%J@{blw@Vp
zPV_cU1x>pA(N<4i9-r@_4p*>3(hcgFE8Nr^uqNich>H0Y`uMNkZj{+|P8a@k)3dv8
zc(|{3co@MEGvZ>@%+b!s-r2c*`{ri%QtykP30p8)m}Pw4V@<iRL7*j#bC$e{<*f0)
z=x7F&kK|{@^779gWZ&N@Y2g(ymEk2lrk>7%!NqMgdw;lBzwd=zJ^F}e`|@CZv!MrX
z&y_TjShcT%`h0G6k+lTb^Pr_twFAzXMMaYxJ3IHD+p*2(9(7_JUlADZiuk9TeUGsZ
z&K(ZE`9gYulDluc?>F=UrR9|qo)TFr7NH-7v_nQuxO_&&SIh_5I4K-;vYcjVox8hw
z_O`PO&#<S#*S4dxeYCuzwqs)4)N$VQ++qKqR>yQDdm>{8+ao)oEwR?6ZL_<;uTsd0
zN6`-Uf5b03jDksGNpro+DuVU*4zlQdlH`GD&Xnx|Z<s%%4@ciO+RXJR@x2T6d>tII
zCnPwTQfY}7k{Xe92OI<V_um$F!7)0m*Bbij`~!KGX>-w0(~ceW^L3D7C2bX+BMp7Q
z<+Zj8!v#H8_MNx}60H$h`BLfd|CV>_u@5A?TUTD0@NRv8J$P2{7Hrae>=pDZi%SwM
z-bG3;HiX4=CHAGyN8hfyeBndip1xQ21rwWR9p?By{z~sKG*fy5rs)RV$3Zu|1A4x5
zRhYuLBDS!=1Y@v`ZNBV$Nk6TV@S5@IiRnc!$6~(rlE)sDuHJXG;7(arYwpOh6g>S6
z?cROCoxKI!=k{FvHZ4WKkQeesP>Ki>S&KrnCb`cAwLBDwCTYH6w0|_RqqTa>(-5d}
z`E|NwozCy{wB|akqczR4TQXugc6{Rcc1PFIiScMKT;A<=cb5;g&MqM8$7AofZ0^!a
z$vFus8aKw-+d%~^A&UILWw?Z+S=m?!J=)b@T4t?t_6I7uc6YS&;}wK;w(jxjo~o|q
z@{gA~>WhjivP_P^OxNV0cK#y59n<aM%B+GGZ^;Cmv?kGK9d6$h!~PniISiB8S$1v7
z#bPWh#0@-2i+P#Qw|ITTbl6k3(BByIx3$e|YunM?K57ejb3>iwjouS1y2I06)7E1u
z39j_B^zi<!s<F<%T$#?eKGn0_JUr4}-RsWG%XJn62Hd&qzKTF`t}k5E?q9?@?pJg%
z&SnK@7@JokzeAxc5E_y|(4g4*NRGVC+`2lXt?c%Af=6eTCBvkFwbwv7vz5z+${VMe
zjvV!ElWg{`hJuV8M}4g4^u5d5>RU^5+iC{=O(%|;%6n(31JTA$J$BQ5bk4*6N^)u?
z!~}t9i2doMELs9*k8m8mNWwLL;W*!wa6BfL$7rHF*Zmxy18&gw@?00cMjv@z3`w9o
zF9zS!{fd{}Cf9)#ggUsS;P?)KYfdF`%B~>^d`iaotmftS$n~sI`HlZZs}`*R<wdJk
z^IRIDc0xrhSBqLG55Ckdy^Bs_P~-;f0lZEIF;PG}1Pb%0LA%Z=Aqz_CsqG-0+7f3u
z$sk2|`=DC-I-Q%Odd&wwnL&Fl$EnV*$oK;sKctjb<A;^<Uy#e+!^<Dx_$#Pqm-K$3
zcz|j@@2u$ggkl}g8?;7ort3=icQO7AYajYaw9fK=Hebwp&rzZ@73IC(_%+bf)9FE8
z_BDZ`_aH{D@mrkgW(|I)>iv^4j+%fcdoQ@vtig#Bc(V6`E6ti;r1YLBeuz`--9&LJ
znxr`O<ea1!C@3CGP^`6c%DkH?)>>tJ6UEvx8Q(-PG9A#kdsP(Ec>NaRMfhiVPm&|1
z#`&1hm@pUbVXL}_DpcvA$_k+LkWln+DA7aqZcbV2<{rXpK@_)YHuaF*F5{be$ZnPK
z)G<L1*#X|e*3CWKgo_^j5#{O49R|&RaQeuvLvJWC;07<BLy$^Oz#3C6b?i);l|UaC
zD1?u^CO05sB<dT=`U#ae02Fo)a9|`+qjrc>-l6#!9|L(!!VVvn@s~I*&r0CkGX7s2
zmuDsLb{T(;<6=$Hin)r9Sr;EOF*<}^2NbtcG!OIA%BV@H_7`Q;2nEffoMwDmtL1I=
zu<8`rsMffQV-JWvC*{I-_$c&fz+vEm+rq9h3dz?4)Tkd*W$P_g@Ik_1_n{T`BDaMF
z{tdeiKN`#X6~oP2n}F_4w>Uht>3t)1-@mj3Jyo4vUS_eeCe~Q*YA6M5)c0@yyR>ly
zO6M_bc`R?*nzX;!eD;yP^jeR@@~=rVmNvNR8$p`QQdXW$e0vp-57M~&oA$EpTT}FX
z@3`$>lJecJWPXKK4OS}I>o9-DF^*aqM=i}VH)1*3$U^#t?3#=lIpl$~z?{djwx$m!
z`jT+Ezpwq4H$-T4X1Up~Yhulf^?nmk4Jv7t&;9#U@^cTyl!la3nZ7lZE6(=bKzg_&
z|6Jc2VJF`D-q_5VbbfPrX0=Qu@pAUxr&7hspvB12wx-gZ;N_}q-21NwJ(ZU%g_kq`
zK9wq75|#R`soas^W&0bVGL@HQGL_I4S_8=`ycc`yjY}9DbzzH;O*OPNrWMW4@5(vp
zKewj)H^t>8xu#sHR#)NRAM+SK9!kqEuBbA0hT8uX!=>r`JX3+e<;u(FKi=igXJ=&R
zA{^ajw>vP8|5tmJ7!f|b|LtA{D?55Sj8zquf`7YLMu**QL#J}lIX&$kq3_b+VZmOL
zbO+=KJlc>oe+S;k_1y(B9u_(axSQh_$~fP5B9qH0Eo|GU=MouzQYrrtjvtfpuX3Eq
z3;ehW$6W=yk&x=SRK~x^%fAAA3UjJjx=hA#CIFpD{6s3QSw{Jbc)wuH=l!}-Y4=r5
z|MddL2Ab-jb_ITe3J0CK-JG7AWE}kv<#pRRjvWrwuLVDVQ~5QHzg5P;Ke_xe$8VN#
zS*N3X3-8x0GA{P4=$DM2OyW3IHh|7sxPFAhe}g_7Zr(}Q0BBKd?b?z;-ujrNlkJ!P
zYIc#Ow`KZ$!@`s)dawO0-@$!YrW))Oz1RLX$3G%)>2-x$hd5UrmCIk9D6c!f@yBHR
z3Z=ZjKd!<tdb)FX`A^6=W)IpWF4{PEKPlsw4J!OosrVVE<sCRJXJD1^Q?&GF?4%~B
zynZctipJ?0SuA9{a|=AA!jq@*`?tXF*#f_B3;b>s?pEk|U<>@-RGczB%Jh$@aAc&B
z@c|W%d?zv<PU7ql%5EXeaQ^I&tqI(_!}%ugwN#w*P2ind;2{-Gd=usG-vYm93;ez<
z@VjN4TRk}aF+o3b(L5188cx5!*HUp#zrZ`Uz(XpW=ojVh-vYm93;ez<@Viwwjk~D-
zfi3WRQ*p{VB9{-#cpLVVzfQ68>^MQQzn)Oe1z~Sl<F+4oo>7+OzCh(%tFX=RT&prF
zXB0)*-=)-hKd<4%O|9L-(VqhSM@rfIIQny-ucx4QbM$v;EgkwOLBj)QMej}2E3%r(
zlp(7rBmw2q<T+erbbzDZ0m`$$%4nFQo9#|Fo)x{CqyGmrn6=dkWj7IehGlFA%Sy->
z_AAa|VKG|+o-9v17I^0tcu0lQJQL;b-vYm93;ez<@VjN4dq4Onz-10OxPw)3`Z><&
z7x)@*qJOi+ZwG90G^04q%kSXztfg84`J57X=N5QKg;Re;`TMuP@7V&sZwvfx6;AU@
z)c?R1_`Rt(Uss}hScQ|E75In>CpjzdfmB?Zv}NA71uok-Wj@nv6ZPCAm)~qb-NDv4
z|2fY2FD$ETz-hchd75tm@7w|psc_=ID1ZMJ_&r<T_icgSt-^`_qW%ZA!0%1PIsZlZ
zu#7iu1S!%4^$7ia4LND}dIV1MSzDtK^EsjKffIjZJgM)gJoqEyNqw)zllop=e^TG8
z@ua?2<4Jw5#*_M<aPUW_C#mn%cv9a3C;rIg6Z(5>BS^6b;1B5!gZ`R}i8~zS+-a4$
z<KnZ2<D5GJPijTf!nq^xq*hepNv%jYabJ{AYDG1k)QW06sTI|DQY#Wp+!6IBwW1nN
zYDM6jJED9-EBY{d;9XN@;WcbgUM;{m{k<}O5~~Y1=a0aXtBcCh>=Af!b*b^>>QdLA
zTwQ8Bxw_PNa&@Wk<mw`v_#@~^t}Zp6TwTC9e?)n{y5RR4*%;vQ9auxS`gCS|hd9N<
z{q;|xJRBpo9qwT(Vm&PXB-W#Kk1NfyRA-x6PDXrCM8O23h=NS=m{%z|mtZ*B9Os7%
zXe?8XBq(c*wTS3~rl=2lfWW>v3MQD__p1-2_Z%D+K?XzXJsEaiz{S0r!|ZYR%ON=w
z?<UfG!n^6?p-KEGFI=13`^$>#9sX^>-XoEB+QvL%OY@OIzYXycRr!S#*;#En$H_4-
zEp3~c%**pN7LB6*D0*=X>d&NT6L{h+h)F~jqO9fT($i0C8KOtRFLchl3t7Z8c_{m$
z^eDgk$W2fbPi#c;7x@Pd9f3EIJvp6`hI~SoMw~1+r)=QOV@_67d(o)x!n<eF9?NK6
zX{_k6TRU6>m-e*TL)8P94;`!P9(;D=Chrccf4rYX^91{$WYAUe`QFD?HIL)pl=B?^
z0HT?FN%LvYp@WALR|t*KqL~~g`_dm)ZbJbL&5{RUsm5=8$VO`H&2a{bR&M_z$(G+r
zjqI>iBF`gbi^ScJ*VuP8^Ekud#8?2UWF;aAMWi4~Un=?7N3{l&zFN-veF_rm$i|m}
zT*KcQBchXDWw%r8OfotNW+XcBel+z|yZO|r`Igkhwj(z@?Pov>+B*~Zf)rvg>CY&$
zCYSj*deF>!&@CgI`h<Eekeb-lyv+S_nL|J><H$WSLS=5@$bB+$36QsN<Zc<cTJo~@
zYTao4fisYMWn`Ds$381PgEEPHqZfi}AK+ZOQ7)52u9lIDrE&I<wi@5Mi4cs#DfX1+
zdRR!ZX&h8W|Kg-&pKZ3>vyDIDd*lnD@2L#(yOLIS_S9ypI@|a)#yyrCcPk9dj9a|P
zQ-SD54Sr{$Q5Dpr7_N&G230anv+t%FOu6wH-UQVB59Rv_qg%qHJee?clG&JjH`SEM
z&BFh*eV9>|_Q{~DZl4=$|7rX9zS2IKTGj1yQ>wJ_3i66R2m6JYVk!#WfPwUue_;jv
z7go+U)?$K>T;iR*#iWJuj26$ZK*FnG<1yb7=AU>EV;L-WS#(bW@$Y7b@+L;Nh$eEm
zmf3Cb&tEZkZs<+tUVY*0?ELIe++ujTa;ksdj{e?oPaCb_WmHzl>*Y46#O()oPa1hU
zr5h1x586qmn-2vLpNO>2mb7LU?tvmU5q})GxodR!f0FAeVlAJ_$j-SOsq3<B6}hJT
zf=o6(l0L$!V&~c=ZQHix_`RQf#%rkGz0h~y(BSD$d7t^LOhfX11SFyXmhp1f!J5#s
z0tDv?dpCulTP*Za4Ii3Sf^d<`km42T29wtCjlo=7X^t-2key>L_cmC@m#3B{EDhdr
zb56F=q|Yw1<_$i%?E~AVwts-F+*#$q)sRU;VXOB+W{$u5ptrTqFeyoyuBtoZ_pxC7
z8}t|S;BCy31bXTyeuhT|QA7&eAWTU}C0pd7P7;yOtZ3*0Z&Uq3d);8|>g;G>eqtop
zI9cA{TJKu9(AU&H)^pI*;A^j|D(~?0boF)wTm24eo2zbVs&y()ml=!nEH<Ha8leD2
zpn%4iUxD!<#)?8<5u$3;E=P@8-OwKv#SdKP`B3XY?{(}hT*+8y-QRLue3v}R0WIE0
zs^#`#{W#tnuaoQUN6!!vx+P<mW9P3}8yamg3yaGN7k;+wo9Ce=aLiv|n2=azW#xP0
z_sZPTfLm73Tg){K1Q8G4K?D!KXNDP+Ew$yAX6NN(<(J!X3M&iPaO~r`w!HlMc9Tv&
zVX%x(?EA*KbcJL2!wY*3)+A=>=KCbdjT!W>6>Z|J<?x(C0?Pfx-4M*;PUYXqJrKEk
z87~j5i+@`o(v^E2;ESG*_(}N=6bVyuv``W$3o&17Fx*gN%g#$H%&w@(%KqunrCwd*
z`E$>gjGOfOF|Dq|>SC|Qe{|JVtn&0PyJ4!<^0&2p2%OFXUubVc(QcIG%_pK25!!}b
zOv*ixk!x?e?b=a##D8;O=gtG{rTx2h?KiFIue#uZ%XO=(y2~%P;3{a@g}I$tq^n<<
zn_JPw->%(By@7^O-49vD8s3i)F;Tl%uDB_K(KZ{UqIe|6?6Hyb&wdt{W<Dj2(2~TL
zc~*PygQ9~SAj(DYmHbu-u>oIZ4;Qz)M-R3~=ccNHg)vsGGkDgf?z$`5W6-gx)8|ng
zn73LZ>cCEo&n;>b|1U>>H1nfqqB%5q9+lmQXs1yYqnBEi3l{MOh>?`<aLEBFh;ftd
z!}nw<h`YS>W?KrPbSYBsx6iWba|e&~U32K@{@C2o{7z|fF#ad^Oy7Z>k<efl95Y(J
z#=gpFEu?wNY1mv3BjRIwhYxjMb9mosY<_-znSC{eW$>r!nSNeZs3ZPGx_p$7&&6_$
zXRmKLcAVFB>5<sN{QMzxMc_#V=AaQX267iWwZt5B_|MFb_^0qbPorbXH@{yOe~sm*
z@1Cz4vo%)i>yDim7`oi#ZD@7YoH#MG|A@mDsA!pd=aD0K;DAqWtv#h(L<?D@H*q3J
zxlx7|5%>rp16C+kJP?u59&Ok)Kewws);4i*M0aZ}_72m{M`n&kBFDSK$D^0teDkHz
z<KdCXle^>JLWf?v{*M1!+Is-TU0nI&JKt^U+ST^euC%@Pu3c%R)v7nkDwbu-w%o7{
zE?{grHefKtw9sM#0TXJ12_>Ng5<0<@aJhuE3n`Fr3E}PtmwIRI{ysC`U3pzD$Nm4d
zw#|3Sn>TOXd-LYao26gevgJ!tv^B^n@(D1)B6ENj2(A1jVOSZ+g*YwD+^xy&=YMVf
z>8`2F=KMP^ZQnjJIY~J)X_2p3(zDbGo;LfZSgxzHG{?y=gzGWqd8-WQ4ZrERopn@0
zqxT?id(a-V@)Ni=woj?Jpl22;@Be*MZmVsSs%x|n^VFy@p_+Pv{NcCSHVaOo#3t$_
zqP$S7%S49qVsYU+prO83#A5H<(8#Q_49yP#jYGH_txLt7#KNGUoC%zUjv}Doy_6Rt
zYDgirdDa5$n@mhyIykg%I<wl~*Y~(*w$&0v;S=%JRl%XwfOB2l=)oO3zBm>(B@C7w
zoBJ=i$YqK7Bbe=wPUJrrFT-rbZ{VTwOkeR6Aj81$aygy|;gc;8{8{M7ywuRs573tu
zPd`K}z6&w*oeI5Pq15Simp(6><lZu<)XmLmm7)B(5T_)Mc3T0*)l8GXjK_FOKwT?=
ze-k~$%Tw?%Nl>1p7zQR0?0CckYL<$IhK44iQAR~WY$cl`j~<d4WeQ&#d1xt}EK4c`
zMQQp$T09DA;T+HQWz&?l(N(&$sh~W9&S%E+N^_c?6<lm_#Uyb~@y$F|_$j%NZ-G)T
z@Xya}5-+?3UV(}!U7>TdW~O&l5RnRp<7iL;sr-A4a59E7&Yu_^O$AG|GQa(mSB5%k
z3g6+!i0c+^0<~NOTv2Mtv-szLnoF?s3s^eNK(KTskA%I*56>{<A0Y&vjBm0tkifV&
zPA4nvrBzB=Uz;S}$>*vT`TCj911A*nH1~WNCs1C%)9H!a@@Opb%m=QyX6oaQ$AJ4i
z+oy&mmrgFvlmG6y_~M?cEF+y;R&{53vvEpGCAkZU^Le6GjZ_{|o!DGMuBzEQvFr?S
zVVC%fy74b<+jiU7*lpXkeQBIqw{y#uoeRI&cfkew&`bQ|!k9ypGeZPJ4WviAl9VrL
z_^^>u;XnWL>=t?+Ri=}5DbulLm0Vn3rPkNpjDft1KbrdCV0ZN>C$ifY3JiC6dtcaI
zIzNhqH$6Y<Z|tuw{FJ-#@Mk#fOQ@xUe2lTiJ_9?4&g<ET^oQ6_<buLaaYwp0DMBF9
z-((8!A-@E2EDlIv8T)*iE0b{lC-wF2uIfS4=h0yQ0PT8Fi3MyPXaQ7<g<h|L_E8cj
z|GOG1mHsik&ijw_*vL$>>iH+ce&0XPWm6Lo={Eoc)kRkD{E$i66IJ;|gq%X{{AOSE
zp!pP<=f|a<(ov-}{wC@NXQLyA`EX(j6x$!XPV~@feZfVo)&Q+`1?q-wa4NO71o?%a
zg_4fK_z7M3u!F~wBs>KbWw`Jz&p6oHhO!L`Qw)8kGQdP<>7pBZiFE1mkZG3?0a7XP
z4(#X}xqPx6D!0DdlU)^!tjtmYU>XYp$2HS8u0Q?Y1QP<eb0#Lv?}ikx2dln;J-Q;L
zXU2c^lsA-rGd@Mn_F(GZY#u*#@Ez0s)dS0okIqiZT4f@+rEzNJ(cK3=O$y0r&)WJB
zy~g%z;Y;aHDg2FqzX3gm42zx+vz#9;93OL1J}zy1;fcA~dJR@!s=Arw-}qur^?-A}
zzF8(}(ATXYlceJzwa;kusUN}_kiTKn9@j=&TB6#=X)AfO(u-EG7CEKP$(lMr@f@t~
zKT-E&sv*-pIR$EiOr&&H(qT$08uEX|q_)k0!#)$!<F=#{gH~WF?8`4tW+kG+(>#x^
zl%xErl=0y6fM3dkZ({Nm>t^_tQ{KF@lnx3(`6@6-F&mGuvRsCKLh~`-ACw2JB3~LB
z!fGnNDNpCyg$yttA1?#?N-}`)TF7yS@DkR}IMQkU#kG&{KK7fJ74T;*$%;O~(Ten~
zi|NZs=_pTdn>+L-zym2k@3#09cUv^j)AEY)*(ACKS1OsZfHgnZFD2Iop_Cz(p2)a-
zWGFS*(`g;C-?r^M@Az50ZiiZ?h_t4cwV5QQnZUAb>9s_2`fgmgIO~X1D+)h2bn}G=
zCtWp?+M40|dU3VNKQrudpLfRS&MYL$1W1C$4Qd3}2N%W|vVc&fwY61P))$b@v#^Qh
z#@Blt?vAZfJLfuL(bT#v?U`(L1No?}+ZC@B)+FKsd7^h(ERMpBewUq|#G!30MmL2r
zD4!rfgg4D290>5BC{B?AAdpbGlSFU9PZsSSWvj>2Rn77b?%32{t!>b#tMw$%U)5h6
zSfNK0(^ZF`i&a@C$9`N`6?^V59VzPPLGPZHP)>mMAyv3LVUdS^6iu=tm@p!spRjUJ
z!CV$_6!lUTzz)ntT7SD!W>MBi8tY}QPMvRbaMY*Ix@2_?k{U#FcicXE!T8|#1;w=<
zEjKFmWVgQY#@4JyJj!W3Ym5Jae`uG+`@RS5ddqql<v*u3XV9fo*`D!!WTn??>9<Gv
zbD4ZHlWy~QIuOBTDi#_KdmNrja<;D78aE)`x7(d@+w69=3OD*8{<byUD5`Da<9+j3
z{}6c9uu-M;Q)x~u8gxNS*@$oghu=gE_WEZ=>6dy({j=nwH=V13nv5FD0sWiK)j`Au
zEqn}|(lPvy`w^)6bv7%8h!H*HTlp>eSZZZa3NU0UXf(iyiPa&c!>8v_XHvTFUvcF;
z`RI+UK7S+drS{Di1wa?-ssX-U0>sexcs-W!YXDugXh;(E%37JYMyfYSYnrN|dVNtU
zuTs^CL?c8PPAvKI62t+!H-BaRD?DVJ6SZN@1*$&Al3D+G1W2unqhcRMHL+$*t)@nV
z*Q(XS;3qVG*<5lpjbz4&gyf^&v}BCNOv`Ty`k$#YS)HN1`PaX0Za3(%8THR7>=Zx0
zLTk_v(Hf%qP(0Jle~dr!(QB_2^gsDYi8kpCm=YSNt5ojCC?}=mSU)j4u9)~W3!Qc^
zW(dVS?y~rARtA(*s^d}i8<GNbKn}69ldKM=Da*foFFANGP(kMyO0au|XiR8!KM=K&
zL~+9D4d5mOuUJS+%sUt#*!~gb1&uv-jN{+|?zCYM_n1#C1gW{attG`(BBY;FhK-XO
zqf=pHP>pzgnq>2`l{gBo32V8#)DET6s|w|^#2)R6XOtd|+V{?#gN>>y&d1#W%Ep1m
zA0Lt{+0`lv*}$DdB2$o1Q{$$|nf3G>YJ;-yuA+hV0hWC780$ln$6RrWorhkuwov&4
zxXBxZYbJg+(O-4=Fp!9FNt7=DOR!LpuLIMt@0sI#chOD$7&S(V%;_Aaxzi>(@@kuE
z;$^XTY~>YKBtl}*2L*aAALGm2u{gf8CH8+};^8HSmzLW>TP!ai`v7@M8caDa6Rdmz
zaIcCojBkMxVjMXS%GL4Glt$#{xiK}eFuw8n;lk3H(@&pSI(UA2#~{Y{8w2A@hq`BR
z;F0I$+&IeDVC~6PO(&HX1L%o~-eqT;v8=cK{7kl;tiZ*|i<SH*r8>%!DK*oXNNeKh
znMs93I3_0MXdQEtsAICC0u*C6;?X$5pv{U|jLsbAP)$YI(}9UrizZ{sPl<l~UiFf+
zEv|Cvh7%ndIx;kra73w}n$C<2>zX1OYjWqz^jRqe8|3&mQUA&NtIU=H@q%ub^bj;c
ze$n3B+nyO5>};D$OSVi*oL+a%M0!nI+nQAQ^2(n0#(v1aH#Y9z?_Z^@n0RVqauM`m
zwMwn!yKJIz=b{;9^$N0o)h&TsWF~R=u91<pT<*me-)hLG6P?Wk{n4*Ey<QdziAf~v
zwMz(OeQ5^2i5Vy%Ax6tph@JPJn2#97<83I+2b~#FSoldOljV8Yz!9gSwN_T8s<o!f
z%?Xz!W8*I;M{Mr!%ql~Cgb#Tczw)AG>)cj*;WaMf6|Y(qTD8{fKXB_=w=K5=5<1dX
z2phoHUjiibcFVtD4EabH;4%M$Jq23rqB2dIa+@<<r+0?>bWU}|)IL%3!EeNqJ=S)$
z**spCI%|5_&Xh$HQ|LyAGE>t=Ma*bMyRaIuTP!7XorK@LXr10YE}?cLDA^waE_#*|
z<{CT^!k#M-e9C?O^I21xn-xmEeuskp+&jUI7*y1fa_qJ6O-kx$2k}@1Pq233BZhIW
z19d$K%5R~!;#JTul|tp&$Qx565|}pFtW4FbY8oMxH1_J+S`o2z(YbN+)uP(E`aUw0
zyr4acXarP5g_6T}O|aR9se42J$j}&@xop01G?I4{<pGq7F~x+Rb5x9!Tbh`7Z=!4F
zj5B6#dXG3$n0zTJT3C%g`3YqMz$ElxcEi1d!1!1i;oq_megi$EcVR2ps)dgHhb*0!
z=ou=}k)O#5?mbWhOw`CfMDKv391wci&jBMOoCYRKo~v1<|0%p{;-iT#RWEW|{b7nn
z%0|>UabD`taW)Xl{Y6gl#KD6T&p*#IwE<vifIOYwwJU%5B3}bUboMZr$q@z#I6nCd
zw0R0U1&yIgRS)5F2t!&6;a#n$2`Q72Mpd1xrctf0+lF!f#5Q2H4%luP=n;vBBsO~i
z3Oz5uZ{Tj?B{2;_3_bN@S-u*a{P2IU$aT=$$t}PDwNlWP9y4sx1>VNNL1?u5_rIGE
z|2%(t=3UfQ4;k<rU<7sl?>Z-w3{+S89E#^zkR9&-S@(P%Ixtf|0fQYQM)glW9kE4A
z#Q&;*N~PZtIe?*mpn}fkst<ofWH9^#Ei^q`b1zRdoER_wcZ{yfRsvqxUhMcuO5z2>
z)qUO*^u%wozR|Iw)HRD**?t<6lgHJ|^iIgiRbi#WtC!U`LT5KA-1o1%at$WlDKyVX
zj26`ud5O)mHy$+1y-BEWebxN~ycS1g^-q36VF&=bltUVM?3Q&WDHC(l+5lxAt2e3i
zW6}6#{!TNGDrofeIw$j%wAvQWS0BEw;j+`&C1weQHaMM{++<WHgLM>db<p{~3y84C
zq=_Fh#$iuP^~%%JD=BH$YHL<5ec~PPjly4T{T55VjZ_!(?@-vvrKu)evPqQ9d8mPs
z>?^m7h3=`S=g#x4f9IWqm^@rj*L3C`)YX7~(i=OeRU(OCK#R5wDSU#cU54q<)GE<%
z_sz4pT5Y|kR$ZG}cJtYTRekRMdVPbaUR&2)_}v)_k5cJTobksefWx!YK9$O=Ig3J@
zK?{FI3z*NR(#%*Z$E#=k)qTflXiS4D@wy*#Z$OGb>&I`*RIK<ZFME~eWdz>gG#~u8
zf5P%P*>AQsXZgNU$|qsz)MoGps%cl8EO?XUd!>{Q+!poGl^*UwL%t9A`q8Zqxtq~0
z&s%#-yp?e>NHvG>ZC1W~=k9SF4)yUo_@+f3+<V;poVZiB#G9uXZ)Uf_kq=-?a0s9q
zm-atO*MMVU@HPZo_>7_BgPtEBM~h3Y&73}C>2%@ZOPAl!C|4y~`=;%#F1x?il~{ko
zk+pUYbp*y%)Wz0z&uwqk`oo4uP+2XKR7;0z>qS-73XR-o)wgy}WqMA}{LG(stQu?|
zvna4ZB%)EEggdxvpxdMceS#rSB-Rr&4u%|IS+E3$p)MX{t8wg1$*tg1PDF%KK}e8e
z8##1+OoOgb=EXL!q)?7mR##O?<?^|}a&MbREat|lYNS$m)0}^~FNNR4#!YzoJnYZy
z?(;Z<K__0z7wR~YYtnLtO>b|$v~%t9;9cuEE+^M6{ASZTn=k2HI}^G)9402mKs46x
zaP-Hb1CC@{IMUV@3Aa5NiBN5X?io(N(pZc8O>@k8qbcv|!F0pcQDtqBkFQO`X+nj-
zu_yWsJi>|Y@GOFT|F*orpEsKAK5u4a#GbY&HI80?M~^RWH!Tme1RF;cZB9$JS#240
z*;hX?oUn8nLbFy&h~t{mEiE~((VJK}5}b(pdJ-D<sLj{s9!Pt8Qq7SyPWReW*SRr`
zsj8>OZm_tYOLiM{o(*wB2c$I4Qjpg$Hgu1Qj?3Z>RVAwbKEG|-{F-gs)}(rRQmNkF
zx<?M(^Uy>09D1aC@3q%nc;U6z?!_El0*Zf{+e7!h`L!?YEfkq0H|_G}^qrUYkRQdX
zG_r-)d+3aZjz?ZayVQCdFNZ%l=Gh^kN^Vr;n&02o-r?#o1YIk$v!~^EkLXjnXT$Sf
z*d0yw`AtDzeA9IMg;y@&ME$5!kG_0|(OHGw26}N=<B{^<9BZO%Z24s5G?T|TmP!vf
zXGeOLSTa#p-srQhNKJ0-ilxU>YwD8LL`$G6?r1Z0niA$<!e)$F{nMlAA*HB(vO6{5
z10JEBlK0U2YPxbmH0F|lMM1-QQ!H3jo8Lg(qdI*<wD4;ppPQNa>{<PQPUF)QVvi-r
z!NRWY$0%Ot9V{=Q9uq%Hcz+0<<`F_0rZZmqXS3nskqu^-aU_*lI+Qg-uBb@oU*(#B
zF*%#)SXYOD(FXsLeD{!2VIa}|Z`U<=m-qIr1@&@>G505OgpIljjY3;ux;&Z@9-DBK
zMlsXaNbn>~#H|A@Rs9{ou1qYuA>F&9GdA2DP^4P?LqV=(+&Q^EHcbXxzE$f+JF|m@
z!#!7@cFCRnPGeNl96fiV-MfBW$6O43^r6k~qK{OIqHaylqF~>AT;d$<L<G4z+6G)o
z(RnX?b*4W$aK)8hT7}u>2E1<o-d2=tW0>J*81LIbEqRnXly5y1mIs^iJ6J6!31GJ2
z*MGIIPFj;K)<kF`I=R;1QW_(s=qkC%nvVN2?jCWfH?$<+h%Tw~k4HSYuuP;Ih=hmS
z^F!uLuu&xQb$EkgezMuvWes+xf{uu_@OmfWpF5g#eZDvrFdU2Q|6&=lyiFH;0C)sf
zaPp&>IL_3<Am5$InEG3*208+{<<U`nK$&duj|54}xN8D9jdpHm>)lSiogH-fSFIgg
z_?y!Z(->mso#yZ{l=fV;33#ThCxNFAS?ie1kOHTi&7^+A&Yc_RD>E>V!K?1EFW>d>
z!*_l8v7WuxTywz%*IcugQX&XN@OO+7<QuhQvDy6KZeO>)lhd<_d>PG!H4~xz{m1jz
zJAZj^Th`Uv9P+H}nBCC5YY6lB@niEi5M7+dkbR|j3_o9JWB85zeOP_=2qYr8oc=D&
z5j<~V&pXiT9{~o5NCA@K>Fe2(=<7j=eI#4>Cvsh?&!woOFVsl!#@C=?mL{qVyv=G<
z)1`(W2W{aQ!A`dFsle*RG|srzYOPxgFpj*;OBs0qo5q<)I3*U|uErB-Ug<@sHwmY;
z+H@v+-`7HlP8Ts6np<Q3uC;)KwFIALXUV5oLO+pS_I*B<4y+)3HDv4AXw4xqLk-1K
zvX$x;A~W|KJ~_cOAb%Skr~gB|^j)>wBv;GgrK2B+m%e&+WxRA+en9XxbX-<m1LLtm
z10JzRSDU!nwpz|z!oxGGu~oZ&HRrP#nyuDm1DHIADA#`?=W}0!rVd(3I<kns#TID5
z4MRzTP$R9V@sL#O^_#*WGj6CdO(#cIg3C9HEjo*ZMRX4iv?mg{e6zLLYYQ$La(1TD
z-JW9s-qBvD*v{^NVeK)AmK8dq>IND!lUK-bx6`p6{Ft?%7Z0*_Lt%4T6EaPEOFeqE
z+(fC}R7<nh8sbum9VCKr@~Ge;_?(NO1vn9pUb<c;TrQN6M<1M<dk`ap=VTVo9U|Cv
zFfty&<M<?kHgZ_-9QO>B9Bi|PE)^uI5-&Ti#hkz`2o9k{X>K8hgWmS#ElypVhv;=W
zsNsl2j8<R57}L_gWL#27WXm)TyHKn$wP=i%Bze@KYx5GlR^Jlzwa)+|v`n_5Wrqly
z7!dg=L`X-SWGCu$i2N+wUrsOX5WFO~5PtSZUwDz`EbbsX1s5VGwO&c_&iBbL=ob8x
zJVkf#lFm3>iZxGOb(QU$bGq-y-qCXBU4T1*93PZ(B;i-Dnzf#Dj`iwp!(Df_+>u4y
zsDqq~91aoXKvKNl#h^n;atTYP)?cY8O4CuJTktQWk?0{M1k^(2{^(yiJNfiqlBbE5
zPdBUF<oaK>wXyua<o;Tb&V6q&UHpxTbn!Kd=~X-UbfPlHt9JbLTSQx~2{%kvv~UO|
z&;z%CwE+GEb0vP~h!E!#E-jr?Xao!{!40H}TtfLtvVs;5`tx}|UN>|n68U^0(M|hN
zSG<h;uJ|nNhX#_ej{JO2GKpI2xD@#vw*$4JySRxRmXV@{ixyv?a`l)Ekx~`Wuf5)D
zbzeF<da29mz3%rzNoS<JBkWA_=RC$qHTQE`O2fNKQaXf><d3p_ec5Qbtu6i7#`iD3
z{1+RvYu?|v^Zhkw$x$2^yk9Cqsc$hL#w^PpMajoXxwRX9arx!%qs;2!W+LZarPdWh
zFJ(sB)!*2?`=D?xxWK^yncj%9S@8W*4z_y|mACHN^~Av-R|p=xkLIwH>cB1tudC9Q
z`9Rr}C81WfG=MTt((dS-kE(u?NmpB=QEPQN<8O8uB)DH5Z?5KpsnO)}h%rQBBxHy#
zPr`-B6Any8!_jI{bu1K}3WPmn$VfdPqwU7|Ej+5>@#+WVXRtsp9faad#n1;BtgU)?
zv$)x0!kb&~Yj3NzMIyH9w)TU3GocuoL1U~L3QE+#Kru!rD73#d#d)%nd!3CviIN&p
z+g|wdA>nC9zeJzT6(xe(xPNC)VU3$h|CjK0N3n#aEB1LZ#g`MK9MKj2oFTP*L9U`4
z#zKLT)B|lUolX-gd8-g#_>lZlA%t4e<UX<)Hfij;-~<fjYBH*!b6V=W#?`jA@wDo2
z^`^$PDQ7>q&$!wZ&}}_K8*r^QE~5}6ijR>SQI^^Y71Fo{j4`QlDqa-daD%vyzKwGk
zaliP`A-pZTR#`%Y5=mNuy|H2%T2{l#E|zC?ptSVy$EAEdrEgT`_=_)Mb#WMbU07^@
zQk-QyIv}Fs#>gB4rr}jwL}3(Bl40(w5+On(vb7vLANEOnwl$(lyIg)(XJ4l)Y;Tm0
z4hNSQT-t=$V|R7-ce;X(2AO;C0cW<q)!6FH_O%+!T@JHfYj7Kkc4Lb>8}N0hWG;Pd
z%%X`a^>%$TQa#x~uw9K*XVymUG<!|PrUr-E;=`xRg&w$pzkh;Pg^*&OZrVU*F`XAa
zoaCaZhX;0ccW&$TjdQ<RFp)@Let5|$cVU8Z8&C!Df+`%MLB=Ns1-CLT1Wf=nB9e*7
z!O|T>#L^+3xgzAVLxi;e_^ONSFX!jZW$Ao=m!Pnif1)D4gXRas&8YuUq&L&Z)k#P~
zm9(_3TU>KN23Lyuhik-rk|wt?86S!Ttt%2s*O@{gQ*&9=|Mz6>fHm1>_jPo6-Tv7g
ze|I9D^Hs=t@Dvb^oO_(gUbe`RgQIYd2N(8$0$Tyq_sh>PKjk;?dV;$wxUdAzRu|t!
zxjnQTjiek^t<LU_aZfB<T$=4~qa^<n<tP`*#)90wg)!Ps%EwkRE=6g(#L1jckykHl
z-~OiGUt(xrS~NF!8Zj*9E^#%QyLJ2ag?XQ^#N1eJz(v%IM*=R)OYlha2T5NK7A~bd
zB5KAT+0#;w@N{nw17G5=$Whs+gSbuk(lQ4Ve82Rx+^2&<vKK``W8vbTxu?17urq3<
zcO0<TrR?HJYAkBtU<+W2D7qX3hf_ml@w8Ymh03}W*_GS9A{t$>J6HZ3xp;W^;*sG!
z!^3+fBa`9SbjXv@T9s~nGM`JBLh2Snwl+9((a6XJ%L0LA7mSQtG!yg;UOqE(*}%YM
zGc%VDt`5#-)6)U7)~QqtXSzpq3Xj$dyHX|8fyJ1s{{U`h$+yK?aYNxhgx7aXcG<G*
zVAdaw`2H6lPbX)jI=XXb-|ukSOw{V7A)VlWM_|8gg-!z}&azzyjE61yPQ)tq+?fpF
zJy7t236>v3mqqaxqwg_K-sQ@BJb9-x-!ftfDCL2G)vfn7X$+(@GMmmUk3^Pd(z6k}
zYcLobbi3)htK%)Bt*KQq+1GcPrLhS#DJ0vudG0<)VyxN}SldyL9MCyTaX1!<-#G1p
zy$Fr!wDm-|;g-RmL1YLFB&DLk;GjrKwu8GTiUM48F*dfV@aEN9UVeGY)r<p>b*T4Y
z*dWuaw>;OSBHDQp$A#UGVF70xPHOgAbDPH8<kp2%>Y&<@2^b=Bqs%7PXf=v}(ULju
zM1a=m)pohcsl+urwJxhOtd=3PnWnK(QLU+WTCJ(N6F`N3E+E|lNELK<1~cs>5cst-
zRmK-(M47-1CpQ0T$CNAYZV5G*>h%h1B4$&yG?*1p;ORIF)y<4Xhg=$&y}luxYHOFt
zENX0C2m#A>Za+qY`cGrQbSh}z0m&$X?wMgCTCFF+kewSE8ym2+1_G;EPHdPYmJAL}
z1v9ZN82e~(BRt;r3%UegX1tx4-HFF25^D(RUC5RaEENP1l}gZPY5KEkFv^Ia{vf<<
zgE9qj^SVQ;yLaC<wejZh>|DT=7IV5TbF{ZP((lu|>$%#bvt`QE;qJU}W&Yv~>9H%P
z0}~dtcTJxvpffhKD4lJst~(|U?b>+nuFlC@*Uy~W?z9`7gFUW^9*;)ndSiEZRc`5?
zfyBn^m#@8gK(7evb)?SFdbdWA7;}WMwBo46pZtK?BEb8jNpMK^ib`oOz)ji93gSlK
zZ0ic$_)OFEoF=ZhLL1jErQdaN?d3Yt<xQ8r-F8d*Y5Ysy()RY-Zxit?RIc_yo>c5l
z3#?=>85J6#e}nkR0pyq=2Lzu8<w&`vl;R=>NEgd<pp-&Ob+VLeODP`Y8E2)gtH_gQ
zDc6@${3zAOO5IROiJ%mp=f;XWd|O{Ar8rTFPr0d-(gOdNrMMqVD!Lp9%LC>XE{T+_
zNV%e%LOw*wi%5Z7XL)j@UGTbaHBxR~thrrqn5EoOO0gF6*lqqb@&FsfB@`RQC4x@`
z?;!=)U@5NR64J%;02?fYmg;0Fzy?e4AkR1}1#B$l$+Hw-gQfUUs*jZdHdsmorT9F+
z#$q16EntJCI8lmE0X6^|y@%`!vJ@*<D#x)$#&+CcsJ-Lji&J~{+<JBVs;lC3Xz3kk
z$meEyHh5(ViPpvA6nDi#NWYkK0C!WcK3yR=jMQ9FAb6cvcx;tg76=Zr6krQ2gHloB
zD7;$#q1FAF{KQ0_z8s;D!x;+IZQZbL>(+G}wnmqXjg5|ujnO{LfGR(M23BdMJ3MXn
zDPtt&ktiAq7tkJ1D{mLtqdt24atWe*Q7wbzG^&cNT<x;zJaUI7@5=N$a-RF`6PtVv
zpIK|Qc)GIo-T^P}NM?|Cq9*8sm3lQZu~T_fSuL+ne=|6&@is+TO@XeqNXltayW~#z
zQAUOwE#~M%o!4w`ZnfbiO1G=UU};ubjMikt5^AUlI}=bvIO-8Y#?eDD-J6AF9rKsp
z(NtkdtG4YBi6W6F?i)y_Z|mE(^lzKZ3!ery(>_xi=TWZZL`W%!xKgfUNr&S9bZk)L
zRfH^7f54`(%37P=J5<|XlE;Ua^3a9tu0T_R=K0hbNp(+W`!IzHaqmbU8$s}FT+Fg)
zL0?pGOM*j6g$Npvyr6bz#37r>=`i(9tQ)ZSasI}v^mdB9$xNpu^SVNth6AV7_s?7A
zwx7{d=dWoP7;^Qd?Cq4TQEM#gO&vxMHghVoapBHBkv`%&Lgc}iTGX?BQzB_=-*I*i
zl`0fII^xs{7G@YYwqPx(8T@%je)-O?n>A%yIr#Zg9U}pQ&fFh~!yIpMF0rYVj%J-b
zQfCSn0?i3;UCw7u!JXaR8cd~vmOz6@9<~N^e~>#A`j%F0i{-mcgVvy^HHG!`mLF#c
zo?0g3%KKhu_LyBfS+Zf35Vp=~)40{5u)Wn4v-suBK$fpl<V~i#;OEpgv5qua{0wJ>
zmw9XryZe%kjFqB~Vk}pD9P{u8C)+h{_xk-_zr$>HEa|vpdTMWnI=!bme{nm?I8o+s
zsmyV9jb%ZaKj`-Rm#Et>&Uf!gt2_2iO<#gC-s0Z``!NqG7pbu2%)<Xji4$E_dX-wQ
zSF7N#fKx8TYXvtVuN--4{l{7D!m<{NP%JkX6goq6m%Y|yAS#tgXSX5hI{1oJP#~k&
z%jV?`jaoHBY6Ljv$8%UhQ(Q0+bg?`K&>T&nr8-#(l{YlSgFH9^ic(bGl=I|S3Y9lB
z#g9^btQ3_uG$n#kd>$%q%6a&<z+qX66Q%eRDsO0>oZvaZ>)iW1FD&JGPH>o|P{~2_
zcnK%iPu3z2)~PJTEVxZ@BTKohlwyZP*Tek~7PSY#LBV<PdyM^l68w)7l%9jyVHGb~
zQ`xRdnaAN2Jro;fBpGKbn5%rr`AtM`)hCr2U9Yn}8Ig*Vk$R_hw4;^mi+ba!8k1X9
z?`>@E>wMMT)EstAS2+zj=xeyI3T;md*Fax`mO-f($}-k!(vms**d{eKK^;+tl_E(f
zE7XJyoq1<hz!r9ToL;4y>{BUB<cE9G3jOR*a?BmYo?5&29vQU`(%xCv&0nRy&>3-(
z9{Nmv#yjA)h8tTN4Qh8P;niCj^zta#w|qP?>{8de>gsawSWZ^!Y6RQo1ZLFQ&EUrJ
zgvSx97t0QL2|LW9#j}F1bq%_@Y<izkn2kt<3V(yrrc^qctWhu7w{kK%=v2s4=N5d{
zCLKIzzanq!h-SKID+aWZ0PI@2gL$kK$^oUvJO-Unx+`mue5-rT-Rp{^wH)_TVal)Z
z$hDfbeGfKRjJ6QjH?uT0;tuwjY8q<8sfIdNqw*EC*ANDV6wtJOE<Bz3xYG4Yk{bWY
zC)9A26P7bwet#%t($-6x>eT9<9%xIlAm@p6*9181lmx<sPbrsd5&Vse09rqG6$eVT
z*z)B>ym1fJqB{PdGsc=xPn2h%{LW$}=Y+=;vVeKs*FF@emuc!{&BIZndV98}ejrk-
ztE;NjwPrJ^6(h|~XS31au=^6`7VM?fwub)Z^LPxRDqLvPQZ1_Y8xkGWp&C<DtX(9L
z$ZKUXyT_j=W~bR~w^_{2zt}ZO84;@Wx@KS_hTi4a$kNqAnG)ejM&+?o70U{hDN`zt
z#jZdQS$}wOUS;Y_z4fxg7yK<9GiacKJ;GVwqmkm1*_s$e>8QoBElpZ&6JE5H!V6@t
zMkd#2<T4H7p?oCxFTo`!$?i^qRlr%Yv!M<p<?M^KXk_ZzdP!Z4Mwa!~m+Jd3kti$_
zwi?O$!aa!&PPSMt-=h)q2-1$iL-ltY%b;Bm?dv^rPw%P}?MLCAL;JpSOMWSs1f7+F
z+fkx{r#cFNn&0i&Z8K)8aZ9kMx}NOwI>>>-nGLms1SKWR6*2ylR<R0XPQ$SM(eYhG
z-y#|#Vv#ar?on&vrbI9cwaAAzvyY<1uWoJE+R8ZP5nCD;)UK$gy`th+SRzs-*}&Kx
zbYN&T<vQrNl(-y^U0}0pb7AU4rGLg#?moD;xZS-TPp{h@47%MROdr>9JTc;QjwIs4
zu4pb6&rx<j>x~gYrWst6gO&TuYNZ6MQ7v962o4qtONGj)kuonkWoBcG9E^~+z#19%
zQZ#jLezJmtfg%NeL<`W^`1%)TC&m!`#1Yrm)k&JFR6aTFcdAR0;)Jb^x9CVJz(J%a
z3o9b}T&5@(5!iXY<2WJj%XFhHr)^OOn++{~0}j1qV%C_lwaKh$ZuS{8eq$Her&G9P
zD!oFZt*O@7njHysgR7xI*Qi$4R;jHm-V|Dufqs6Ch(;>bYMi>vK}Vz-X6Z(`Lve2?
zQWaaiJgkz{*IUWHY~;ZZw{m6V!E9AP1oay_8X)iF-liTPl=iV1#nWJ!!QP$%+1QnC
zO_t&`N%r+6-+sm6RqK9RcmYF?8mfSeHq=m!8gPh^*<*wk?aHQGMXl+MT@+W3&Cfqp
zc!5ED0A9XtGl<K1OC_vuppr_r%y#({B6TnoQHxaG%*?PCms5Ia9p6~F@*DJ3c;Vi;
zIqGXj+x4I>=p_p3;l~=LQ;ybCwRL@uyH(U|?_Rg1$7>at-Q>VSw|7UQ-G}b!O(uI;
zc`-?%JT@N`77Q7kd5GZw6HoaRq(qX_G}SlM=xx=~eVv_EGO0+~D2;WT+mt3^Nkn2d
zz<cGZ>VQrg(0sLUIFduHDnKPGVFPME@QHPb>Y-acc<?YeVE*@r<=-O6rA98Ba5KY0
znP*o>OO0xOxO1xApH-L|y{+y*JWUQfXC6p(<!ow~!r-;J+AZ(VSpnfLpr=EG%>Nf#
z9oRLN>UwK?$9r$>z5aT#;@WG`nvSd}<-(pwRJt0^_$S3X1uqMpN4zi0b|F1YQyP3t
z>7dDm#|dfH)hQ*KdW+VcAc~GYrJ*6^t`_^M8l#=mE>{I<lweq7YYIBuk4GXCLu}$x
zZ3Yb-0`(})?92d_La9ueZr`R<d7X_7&BD6IhQIl&+K`p#A5h!X_<Nx6TWd&T^|=*|
zmVm}BYXqR^HE1@9*~Vg}lz2??xPuyW?SeLw2>x~`n$ba0b3wn>*`xs<?45AtJ@%mR
z0UOyD>b2C?*ZFxtJv$y7c85b@R~y=JlSgoq%p=gmf#Xseya+wcq3;26n{_x68MdY@
zW{<~=7kQ*L?a1`?WgKZ(wygF*z-|ptsP%$PpnX5&H&%z(nF6Zl{uEULutCMpM7OCZ
z>YZg~M)B3>>$2Ipd_AGgY^cYVlPi_-oUccdHg*Mfg!=kI;l932{#-cU6YloYlezwG
zO~z`;Xmb8ug~Fj3YHuH+FVI1(coTV&`vjT;YzJ^JDha+Azrh4j<(>SPcEIm0seTb!
zVRD#81F58|tG~-No@)=~!J^{sK!PPq^>1G<_8Qv^&b9!2imcwQaDKLC<9e~j7;bKf
z`D{Up#ow3cUsbb_a+^5bsOKIqP+HSF!L%@RywE+SFD@!DQk7Yih$cnC4f&=T`KHPE
zh(3g6Z=$WS`tF-Jp{a%FB8K@?gP}eqGG$w**LzJtO-nA;+HOkK8yaK%t#GqL%TOl~
z?QakDd!}CS>~-8^r)-nH-u=o~zH;5Y%f=dwSST7B$ENPP{@#1<y(^RplCFo%d8;*V
zez@>rFc+ep0UE3j|A794nO&0h#Sx3gVwm?yCXq`W0t+xpaB-TF?-noPC8Tr3#qzEU
zA(<}uzIFaFeOMJSb&uB<3I#%b_Fny1hdreWo2Tk7+wB!qH&s{3r9SaFSNP3Ay?Onz
zu(YA7Mo}G_p0`_kUM#ga+?V%D@;Y`zn(2z76ho*KM2G_7#5rf?RI3v5(S(R(_RRQP
zD(36bxRidqDW<d;2b>RgrjlLe&9xVt-n*f_>hw*VMICF>kitV;b5l%j5pE(g`Q`Ow
zN&Rw)*QVm#<a_Wb#q8HCa#1>_$00x>1q!T)?X)t`+^A^|x~sG^y*f$l=(yU`&{Wf`
zXmKb-(mhw`rPln~#%#^_$iHMnsSTTJrJdqxd&bh)`ES$>4}7izH2e$Da5ZqA1OTvN
z2-O<IiV^ZVq>zBpM1)FQd|~wLgliq^Ha!dFgb>ppP#MWe8>H>fY^9BN%F_9*E9)F}
z;yN*~T<2)ex@BR7s@)XTgj&a=cw#WtXQPQ|f*T;DP}L;j>Nsv;XrJTY8T-Gg-m)Io
zV4k+K)~XC>8w(PVwbkc}2-mF_)}BQky>gJep`-g?Wy%N4JmtrzxCZ6_!wEp?h2FRa
z*8nyR&geCXs>D+r)naMIRFH@sIV6^HH(ghr4Y)ShCvG%0`os#GVsT0+tWDvDmc}q{
zQRSxvyQLn!cYA=>R;;?+G^QG2SUH6hHui#k3BFLC8}zV8GU~KCRZ(Z$3W<yNE9-*E
z_%QxW&CVby=)l0#)ZDwGTHl?cs<vxIKp7W(;)#WKK6QxO?cxRe^R#<E{q)nJ2bMZA
zB+y`ijX@}=!ASlFa5RCZ!}i7YbLh?zL@~Wi6MJ8B6=m@BV0Y3wIXHNJW>vc+o2|ZJ
z#`C0fG-op9Mx{@Zd!pj|O@r;J<<o!Sdbei6h2Le`5FzD{sC|L$jT%`m1qx{tT7poB
zUgD4fG<6N$=>Y>F{qKw>leBa6{Uf1Q)F}F*t3T%)HFjDDtT|)9J(F|Hx|1%asJ<~?
z^P#A=CfP`K>6^c@@Ou(;Ai`DQ=SPncTjA&4!uLtA@crynTee(<7y1b^7y5ZS+i&)k
z)^0qb047VuTtpu#ulw106C!|Kp#1BB>A*1LmQHljO?_iyX^BwXriuo1E`z5%wv%ky
zzHVi5+^1DfTEh9fPh6Pvs#`PhJJgDvNJrmS!(r_1m9g9cJ=IUGb3C5uSknoE{!=NW
zq*ImQTmc0ZOcDNoW#lv51N$Rqs`@*jk!Sl9J4ZcF6Y}JfggpIKSzpv-I>YoZIo~GE
z*hS|hb8e};T3Ro0=ez$zp0AcmGm`onJ1xe-??x~uf|$#1V=lv3Sc-f>ouMj(5Yx#h
zV&s?rMA*3|arWAFProj#j#(yVmW>!A^&20{Ol;p!HF@3qwU5X)t{3@Q1I^~^&%f|`
zb>mli3!i1HHvr{~PyZBrx{dK^s-w`!2fo06oMZ%M7+_qxLM0-N)0=9l#(F$5r{bC3
zZ)i;+w>_%&8i$j^tK<#y*D8IgUl%@URHS0=KBL{dx^8+z=TUgYN)slcD%@%dwdw;V
z|74#rtPD4q<ROL6;EXz(6J`ix%DpLP`+b>vvz5a!e4Na@HMw=kb2h{%I-0x&V@Mq`
z4g{X<?ds~?zFs<U!`f@V-ned!(AOH&wh9;iD7G1V_K;))d349M^<0hYDqscH1M&*y
z1x`6p3gEE;nq!-*rKyMTiOzxkfhp0y_8zL4=<X*MUf<r((=D3JJ-_;iqxp2ZPaJUc
zgiZb7;hDz5(W4aGjm6Ip1Df{-m&0xyr?03AS`K?L4+|(CR7pE~sbT~EroOCr41c~A
z?L^ckox7`!)Ox(p0go^Gz56G<s|Kcgb02YzfmoHQp~<A1+7U-9W;FE<T7hJb#-*TP
z`eLA~k}9->*SnYD-`C0E!<XXUOFi+P0lePo>bkEt-aF76@A*B&d%2z}b_#%6X6V*3
z!IXRV>wV<3!`L-GOn&AQg$js#j(NnfdGsJ!=3`GVK8aFvzms2&@`}V_><O@|!NK$3
z51rnSb-($hX<*5c0n-CsafeStGPWh1T@%iZ&;umjlk3H*t~d+t*Z+n@6~eIveozmR
z(^G}p>bQp%mcxozehRDN`_!s<;%~ZxAXKBYlkM=;;PZWWJyIW;tH}{&heQt1RmkBG
z{fbW)W>|VBd}{uUmAnQqQ~8oBS&r+-mlt#V{e&D)u2A;@@+`|?K^;d~j%$m>QXQ9;
z>Nvbu$DdB90}FiAaV>e0<$&M3P{eW^5Rg(GXP0ukwphpCPFctG6?IgdvX1KsUkAk#
zpM%+$8J>2qR?0aLIZbG0bugPV%W+jH$1fJ)_~Qw146__JkcU|g+6rMgn3cMsl^Y0r
zonaNGSU+`NZY=eM=J@j|TlqpM2W>^na-7(gFI4oF&v7Cg<s8^A<oLeaSp1}f^$ymT
zFObI<A*FQb6dj`vzPC3W>kE9iX^!^^eR3@4HRJ(S*VS0H(Oy%C`7x%Ol{~HS*uR!S
zjM;4wY$oq=KDt9eXLVT%`N>mH<(_(K^DEg`@W=8IFL@Vnv@u(7ZbfCmvdx>#(kBtY
z9`XXGVm0udfXoeWweOBQe0O|_zJF<t|L(i|ci-*5>u&!c)L;?Jqs=J3G20-mPg-FQ
z6jppkJ3rExOd3sVtETix+kLA=t7&P`Xj{nU@;CJMc|s@h6`*mm;6kE6ibe1up#C9t
zVgDjH1G}()5!}l9ybtZGs3pa2kK0vJsY;_E?-nM>BR|-`{|EaX>VBwyEFy}G9iKM|
zvrpXVjEhwknvFcNkI&Wr5PWetx)vzaT3=Z&VtuOky8rpgEB~3car^B<xAzbFM83ga
zQ4F3?@>naBHCkvP@(3%&m+8NKsPMhYa&+t(j~_j%$M7TgSMtc-$Ftx0PWJJ={Ajfk
z1J<T@F)I=r_IWE#`@zA31G%s$lEc%>3VR;A;)=&u-*f2EB(+*VM`Ion=0$G_v$SJm
z(}9&Ak(!Zq_NDNbk=)+w!R%i4Mk&Jv&E*|(Gg}i{$^nG24sSu+V762s<1Im#Q>Avu
z1I^v0itq4Bwdjl{bI8L!EkO^ZW}DzP)K}mfVvdd`-ucl41%oohz&cJ;ndRiV!mZ>H
z&~5>{?LzEt-^_hPurDO=z{6Z%huzTHfM~|$#V`agQw^C+LHteLZ3Wt(xO|`x>l-fJ
zwaSlO%$&#F>t5C8?hG}FtZTX=qdxy=VWqoA*P3^@;z@F6B-Nhqj@UgTH+QF$A**-5
zJHFBs)&__COQLPl!HI;!8w+|oDN)WF=}N|u?HGR-R=59(`CN;Yfgs7-1(`}(vWEa=
zI3I`wFE!aa8L(8QpOg3JW*g1D=AnVjp~+}$UEaOKNQQG=A%|%^u=ecyxzA?$wypD6
zmKXjWn8|c+Y;%~a<kc5%jYLh>n{MCv@I1ySR$NDLYMAPV<#lB|#&jaq>Y@`YeElSn
z4JKJlt;VaZm({D=+Zy$f8mYY2t*w*SsoL+7W<?WY$vyk_CUcwGMO>ESrbiQdF58pJ
zZEmO3;4a?7g>kzDXjLqPrc!a_nCNcnS6s16TqP0-CBi4#f4YVoHu*D!2V^E0{<yy%
z-9~Fr7q23JhCYD#rHLzqAab)xA;g>d-#;YJ6dwKIFUYy)#j*9?7w;DpzF&Bko&1|E
zUd0WfloX{{3>~w4mV7#0c;-CrFAFu?BMXys4yrH)H-T$bQ-25r0+RB&Dn<a7B8v1R
zB0Xaq*cy=^B3SR9&vcu0&91TRoERsW%^I(AD%&=+c`jye^){Jxd9LQY%)Y*er+eX^
zWz$&n#u{5>q;c2AB|~c-TVm}?H^abAJ$iA%m-~#nMPQ<<h2uOdRb~qgyQ*O=rE>-+
zM2R_q6R~ibgZW4bL!U}XZXCRHZ8EtQaZ4{*n_PHVBo?~Q>gqYi6ARy5_#SyiQsdd4
z?K;yV6xYS(F6isKU@k^Kt3=O8s>OjsN3?x_tdKlYSL2Js{h~U_H|g$&zW7Hj&q*nt
z5R*93&>*QA;w}6Kk$aAirwfBe8cDT?R0p2xfq<oP4gZzPag8iLbW!kOsZ&lA&jo0%
zn&5Lf^7Ii8krh7m94QPUzZ3N@Db??!$NZd00xPfgNMVRPb;OGsAZX2j!e2!v)=rYt
zEf-h8l4#+tG*htf7afD@slw0^PvJjMyTACVZ~{6$q!k@=ztG+;v>&BWw{*qFgr{)}
z^oh8dBQF+aq4_;9PTvYEkZLYI3E!o^f#*3-?KMiZYRb!~yBi#&PS|-NFHYTdc6ayL
zw@ppmwzIo?=WSEHd)K$Mt>4?*yJtgN+lD>8y}JhncH_OjfA?_Pwma6&-@ZMa-hTW1
z+B>$jr9!K&T()fgs&IJK{$<OqToqcIJ8yi+x!v98E?IhR4s=rPmzd&NBS+{fsog9$
z`@6XhQwv?(*A|wwbN`lFFn0Ukz=+;Pfrk<F7Q9h|v!+B9B?m<0ns!c@JbHwqbbl;I
zRXLB{jGQ#v!T>i@c(0T>&F!T%`ipM@e;=|Mv7xLYepXjPs4JW!D(q%3mUGY=S)L>*
zWozRuS-7N}cP;S|FAwEofb#dWPE=?map4H7jQc%z^oTH7g0q|lweq>dW>U`h%)(cR
zube%-09BZd^qZgo1}TxFQi5Nsx(|>3E9)L$J(h>o%5q6bIb++xCEO)kIrrMadj%*}
zoM5Q<7o73G8_*s%216a(SbX6<PPOod8t$Cv!Yv(MTx8DY7uto*;O?-v&@lrqLEr~A
za$qggU<d;-+Y2!db&#X_B+R}}R#pB?+p^|9Z_3`G6q!!X6`ZtYYlk7?@GpEB^{ZC@
z_R^ZstGXQNJ)PTswwCr<Q2Yc@#t+loHBG5vxCCk75A?;%T*}>}5!ueVVJxxa3%ec4
zuUz5CUX?%h<L`||24Da8D^c2r70Iu0UdW8nObcT|Kpw@Z2i|ZFMhM2}#15|HGFOLd
zAfPl$BjWmIT~7d!hN{G{TaRg-_SU#r3LnpUg}N!Uvd!76sn@!jgHwvamgJBFI7t=%
zf;A;Qc?fBs5ke7R)*!Z}q<R1T`-ktp-zm!Ga#>MlE>}aQ$W-BQ;c)L2*Id1S|JB#f
zejaz5i>7>=%gdjVmA67uz*BNMJy$1&R)#1wmeLutF5Ch0Akx89a2_wIIm^<xR83yG
zbtU<fFGX*N;Uu&aez$NI!CjzBsrUlHw9twa8B%U!DH{c|EaeiegY*mQktb8SrR2v*
zxr?P_ODVf>8tZG^Z;&Uqn36@x$4Hr>Dd>+H`sf@^O;P<Cdq)OIpM+C=_q%9Qf><Up
z4v}ZXy@CS_t|ZqXD4+$2IJ*OI7Jr4`53=7G`dgqbe1?-A&*J&cHv0SI+g2{-hRHqL
zqo}hSW8xaLatq%|3C6Rz40#w)Bc$TNQp!DuKXx(qA4r)jr96tB{fPTJQl?8OKjDVp
z9rP4ZMoTGA6<f%9^h+w<PE-v37m5+GiKU!L^S~ZJ<(~m3NvY4H1%B5w7Q}>Lm0*it
zm*5iGYw+1ce*tI3_lk6g>cuRTONh^r{y$`|Y^dV<)_RqyUZzy|*{4cb%m4N?D3!SI
zLMbbKuArYXCI1_rD`>Vxm5u*UWE)hfhDK#oqf*(}pjLYMpKFz}CZ)1Trrf5KH{qXL
zxm`&=n;eB7C=^JND->j}Ql@BXQpl8r(-bs8-lQPkRPx`Hg-v`u2ic>NH7OKLGF9P+
ze66-)mGb56puFN)pq><{hfy9l#h269aUHiOAEeLD=bjZLgmm=iDKCxuVDNhG*|U?E
z&}aAKZW1$Y{=qXLo@w*bPA>3T;}QDo4b*u9UnhOm;JGf%b+{j-8wtfXQRkI>o%EU9
zetnR8)^iDa_Dj^chOd*hr)~32bAj3;AQDpC$fX2#&{>4`U`du@`}vNY6FaTvh|b}b
zUwf_Ttg~pYtvI84i?EO7f+r`<cBXC1vMsjlBJMf;S!d~2(Oi>U4pC*lPgf?2Q?5(~
znjNhza<zs_a=}=$11GPr2EcbNhXskxD$I=H({B-_M^W1n?lr;V!a?S7bYg9EM`YOG
zZf$8&=!Gd^!q2|Ds_>P2O=VPBOro}Ke0Gb{ISSc@+^paV%tMM*D7aUU8g3Q`O7Y|Z
z?w5l7LUy8*KG{#|IC=;b^S@LEe5;qvuX0ZO?xVb=xB>TX+=-bi7YO9gSDZ<<0D}~2
z;Np3+Fe=jdOlGf66y?l$F5~aDSLs5ntsz~Nz1L66ujkqYU*_JUyqc9qWEQ53;tG+x
ziR<AU;fRCuaHc%h?(1`6dG2-g`A}{<_mbcy;Skl=QI1Nv(z>s&54-w7uQ!N~KJKMa
zL}(3%tyQs6+S(SB`l7J+6s;w5Mr?CfJsukw;EY||OO6gRJ-TV`aG=}~Zb*;>=c#3_
zEwTb_YpWJ7Zpf(9wzOz<M%u=Axi<xE!uUyf&1S9EZ06o98x<hG(TichP2iQxAG?xM
zL@OB1yxL%(;rJhBA^8mkZrG?&87p6?X*2hh;9x1{zu<qWX%nlVx%rt=fd7+Y{R95z
zF(Tv8QsDz7WFna&7fTaUwbnE#?iudk+FcU0!Yjg^*FLY8mH3um2|OWAS)w{OnCHIb
zkSY~UVTf}(yzt5`-o$wX+rjNwzcGG`7_Ia!inO;!=nGh5nDeB(o>a;MmBnH(n9T-*
z1vTA`Ik{GN=0C2<lT3QtsgzsU+NxByv~bTwT<%E3?TXk8dcA?ZP}3psfbT-yFh2~+
zJ#Z3K6ZJ34L<2KvE~PqbxF0V%YG2}B5PVO#_4u3_?_4U07x#kdpy@iiC@pN{vfwL_
z#XKL2!hG&#T*bPR%Tl&tf^P@-%FEy@qm{Y5l&NgDZQ))%OFuWKKMSq40lxVY;oGo2
zJ+oy)W*L{d-*8xk7lkhZ_)a?!zKvT_bGz~4UbxP5P=yzTZv*PQllw89y+S8{9!Dc(
z))dK>sL-5`C-P<vbJ%M(`E*>0PFgyJ^}*KGAT7V0dl9p6kj_F%E7X<%ofE6ac}zb1
zD@{f2#j5zoNSw|@TIww*uK}DCg&rxiVCdP-E-efy<Dw34lcAXtiW~JBF4k-9RG8|m
z8luGUKU(%NV6+GK&w<vkVayk%Ygm)FceqD9Y0`4pD!11g0MuTE8mrCX_qm85%KaOi
z^MJAJ>>Z7uu@-qkD3mnnb+U+qi<k^PqEu+qXp?ff(mVjCTgo`yH;Yn4rFfl=5<Le%
zt(n#xJ0gD{2oAhJA$u6lNBHM7L=>K?rXxFc{QU)FpwGVvxit;mfR%`XmPhG(xQ^Aq
z>+tNa<O#to+`iHbqFOLN=SbC5m87etei?bf-OvNa{gx(&Hj_n(r(u9fqBUS%BcXWE
zs2p^kE185=+vzf!T}3Vt@FzGMK|l;Ely_1*RP+nx7a?RY&i6<9e-J$VbT*oY(1ZEn
zA=*PJ51~re|6>2&PY(u9=gZUQuVb$9&r7}3^`nx0iic8958<rIe39-*BVSZC|Kj7p
zAjRmBVgxYX#X)})2#)>^Dcg$)!A+P?&=ryL2c+BtyV~~RYe<3V<mit8^*zNF!5H6D
zYAZR0oSCZ5fX&*Ji%oyv5^E5;T<DP6EM6)dSQ)gBF<&f0T?sJev=lPMjaCOMr&g*Z
zEAv&RRuugIRq`?PZaLb-T;kU^u&7`__=^{79dS={s>{%%YEn1&zvuNhx|P8Wji%mR
zD?_V~6n)T0+08ABWseoEccpxW4wDT^gF@5j|Dn(8>``gkj2caYzZT7r;``9bt$eHo
zs=rtzX-VO;?|v6gt_1eZFMgdLQ_x)8syhF(z-=Ggc;i}nlT>kI(ImK|_%`r81AKpg
zlnq6l;LhSRNEt-RFIb8KDNi5;dr3$C1u2t7v*3~9<4DOP<yT0#5O-u=QM>^u&=Za>
zpyfOw*L<4{P(3JlqUOS;{AzR9<xo@IN9YY#e18V&kH=b_7^3QsxjH^fdw2x&K3JlH
zxSCRdG@hX2nWVH1nlFOT5&ebOxP(8DU_EcG>^YsU=Lc>J{Q8FZ`5P#gys{|6^KSs_
zjNYRv8e8}L&tARlwomW9*ENM2mKW86hl-C;e<LX~(3PyYDk-&=!aT;i=t@)%g#vn)
zl&f;-0-;c|MxzO7wCd*HjP>bFCVk(Sq}}Clz>mx0!dZ{vVa_X<f;AAc2vP<z20{U<
zWYip8{Nud%VPSvfC>^DeP6=KFeB*aXE5z>}_PfO6@Ouq-l@M|#D!2nTUQ+9QGv%_!
zBrKI`JdN=T_bloaE!S$-d;Q&TgV)OOo14@q6dL+6)f{QKzx;!a!!L_T-0<--vjJG(
zY6>giqQ%lT+C@lHov5m&x<+wiRiNHjD{CZNSOk_w3Te&(&!%@N$0Encio%3;;|F{9
zeuy|9A8gz90q5}0)ww54&$^-1v*dN*I?&bS=-JKa+fHsoaJ_KkRDGk^tnAx7i^Hqa
z^;##wQg*|UUeAr-!Xq4!QRsJT&$j%c{DWd`D|Dz^gfw=<Nm!#bODnLrsZ`s9eN9|i
zYK41?9lTL0^;`Al+J0L8L2Lg10Q2O0cp`B!%v&sHU-y52xe^;?n6dS~CU-K-+id6V
zuY~!3p`m02Hp(=#s;k>Qcrp#W)^G&wT|7ZiY;3{^-Y#^&bJk4#7_o?E24|iq%6fby
zwkx&aeyi7}m1~6_&I4D)^4E7t{W)C5*eg1%Mk8{@wL123ZW(9g&ts!vJk@wRu?nh$
zpiD_=Qfn_au}DZ?2?oDXSuamV2R=`|<uQqpy4I71<fcI2rpgiFsb~QFik$(XIx5vD
zE8(oflx20xylB2<^<^jG=AY&agM)^-%gZpAKab6Ump^YCw)N%>q7CNt2TDl!R;evv
z|9tcCaP#~{W%$dVl=EJ|r3HTw%FzbT1KCQN@}(`t4Luu-n?zSxXTn_CGB;-#5F5^e
z!Hg^Jg`WRQ;dv*QSz}o>u*$MZbYaU{D^}qvR_J@hrd3W_rW)<+Kd~L`4lTBG`B|Y2
z<#x`r?WSe?Xy?)s+o5I3?VP*9I$dsOxgG45@6Y#z8o&k{6h@`gpGsY&+_Q5Ku+(Ii
zW;)ZQcBNJ^EHX;sCU&dKTJGt)!fQ~Q@>I1!<ds3$U8~TW9o6ThO7JvT#f>thob!l#
z99F<}F8Y79(2ANM!OC!9-kxH%mEp@9JvK#SgUBl~TU$KV(pSK`e7U8!pY9fkoDufn
zh@yoZz}6Rp4}YE(%0Ty+JZ4ps9M{~~T_%qOrX_r}p$9WF`tBi}POBC>Fl+JQjH3l+
zUl4Xds{(FMv@lRJE44C&M7n_4;@4w=Y0hVy%VWHyK_4-hB6_-L*=oGVMRChp4ZaB(
z1hwgSy8*2W3zncH?DK{3(U*6xi8K3wJsP#cez4BC%SP+?ze5z>7+Zc4L}$4!`oBUn
zct(89aS&~@?K%e0IQrCjDjZeP;Yrw9TBT~Xx}_aG*%Kk$VdE(?LfkGFj$N0r_YANH
zo#I67Rkm^*9#_>g>CN`4Ot!5O_BCZ%<!n|ED{4OzmZTen7RX+Exfdm)P6OKtqkEFa
zi->SXt1u`E27&=mP}tfbE75LHWVM%Q7hk!IDWa>=dA)dxm=54%D+mlEtWt>_)Z-d7
z{3>YpQS=I6oY1RN&Xv9%aX=ivKYa9vPEF3Qc6q9rJ)Y(&PuG>8X$^?EMA~R^FXrW?
zLfi5D0`t;&%!;+HbxqHj)_H7oXT%PP%j0oL9O4X@)=o}pvx6yfjoM^V*O*hNZ8L(H
zT>!f#qiG@Ua;TwNnTBeXNv+S=pB4@3l~M0dp36y84x`(H)v;5d5eJSmyoMT9qlT@g
zt^t!Gw^+m3UBiwOYDhu0qlUAw#=cJI<Z-yTE@wcTn%^|r(p_n(-K510!92$~Vbmg0
zOKVFDaS~YrZa6rvG+yOlqq8uG6M*GjgD$Xd&99jyRFa%mqih}&W%>;MyCR+;F6R(y
z6iyf+J#M2zrG-+<&zqp&?9WrjJ)J|&6YHQIuju*bzL`9C%Klzj)ub)Sg}09H>+NQ7
zV@-n$m}qHfwIIS_q&Oygiu)GgZD$38i2txgu)e(FjA8{-R?BeUk46J7nN{F@&8z!(
zjuT=yUB;gmE?vs1KvuS-QL638NS9ZbZv0V3`rT?r&Hpqsb<Sy#$Z6+H4fRYp-*isr
zPe_>RiDw4WgT9%;Og!WpB!8ekLWy)bfnVvt!oR-x<`XOO%VvK#yS#fgv#HzR=-!l>
z?Ou+AW%(7^%~^*7Z=C}p$xO)B&RLTKBki_OCdqz|EPOUHK!0|#ol-;(6TZydhB*Ws
zLQJs9Ps}Rn)x=#>xWDjMk|HY+lm2nCq>h{GTez<e?=V;k1<K-4;mzFju)@?(n>zJB
zz)hjp=N5`97Gv=LhBE@Uec=W2*FyD&q|<lfjlLUhV1FVqEF$@Z?O9x|{P!1qx7_T%
z^;ZAQxA<<s-lMAcmarE5q?-CQY2XA-eHE;@i4;dkvH7fte)t_3IbTH1mwl)3!3SUF
z3ZIDzpK)J~lPylNrSL^(;fwexB9g*?(Yw1>lPkHGxgRi#k&_Uq{rV7zkVpt;ORkI%
nec_|Xe_{s?JHI%S^g~3(z|Jc0VIvSzG#y?iM=R2uH2wbpk)6g;

literal 0
HcmV?d00001

diff --git a/web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lBdr.ttf b/web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lBdr.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..65a76bfdf39dac30840972c4ec632db187419229
GIT binary patch
literal 96708
zcmcFs2Ygh;)}ON3Y<AN~LTJflQwTk5HXTAqrMJ*qAS3|-DHwtj6;TlzBKC%eir5hm
z1rZResMwH)h=_=a3W#8PipYNdGcy|k4}E^$d*9yQ|DL&Xr=B@;?(}7xF&4rWGRcPY
zE+{N|c>Tjo7~>m(J-vqv9`^oIJ5MuqSrlU_!+Q@Kk@wv8NANDz!&tMmgNJqTj&FU(
z4RAXep-d{PE}gmSgR$cn8<EIZ+v8KK=1u8)<g<N@t(nHy+heCyl$N)8zT;PL?}qz~
zX|Qn33$B3~aj?W`)%9~<ymuVJ4*8X_u&k=uveNE9I@1`lBmBS>)unT1%ERn8xZMx9
zYf7st#yvKBJ!5hiV`9h5+FAAYut(-ImUa-Y^BM9c-(^c#Fq_H(>8a7rh8)xTy=T5>
z%+c%2)<0fw#L92j%f9!|x`J==#hVWu8W#N3#IT&78HXGE_D)#&0ntyVbjdig^~?wG
zyPpY!DaaN-$-ft)Spd>?y%_B~$@&vz1-yiLc@k`0b}4N#NZ8zr%^~;XiGH~Sd4mzF
z+vgL<eRfJAZ{lYBR(i*eirYZkI_+#a*&%m=g~>_sa-{7(`2g+@%ZG7)L_UK1WAbs_
zpOjDHzDBOWeXU%J`#QM}_w{l;?$68Tao;F6;=W04!hN&cjQdu(6)6!c2S|shKO2Di
zKwN?i!o^t)tHpgLF2UyG66_LOoL!HLvm0;;_8i*)^A=p3ZN(+nKX7q&7#C;9aB=n>
zF2Ok$jPn+}CGM?wE7-*F7?|7gwlL@L?lAY@Jzy^6g}C?OeQ+NI=@Wb`AB(r8ycFiC
zd@9UW^J{Rwk>7~>Qoa=S_w)O4U(Hv;W&=m6_!f>F@|XBau>XMXhIx;OXIvzR1SUk1
zK)j-z=meYnVn6O*h%cB;PLvbDok{XRCKa!x;<Z$~mWtO>@meZgOT}xccr6vLrQ)?z
zyq1dBQt?{LfP+n;^0ft_Y+vWgjhQnKuQF!Ag83w4maLeE8ncb{VDB4q04ryH_jZ=W
z(u{p5OpHxq^|)rTuB;2LS*(oJu}VDG!<-CM!f!IlwhlF?3meReQ1Zj@JR3G;tODjz
zl>IC=1kbgsGoCA0HGJjasR}XoMM$MERl@a1ysJ}T*20gQr66Pv%Z5aCLpo~VvJCec
zc5%bIWVj(0-4JFen*smiY6|FFz|Fh}AsxuTJss{c&PkiQA$4w(KC(GCeeQEo*f>SG
ztN^(fjJW@|`R&HY?_l^YJSX(V;ryMnJ*IN#Q9N*ix0GLc%7Q5uysc%E6&HrFdEjcj
z%GoTu>kA$dC+kp-bT3u!%JHV%dF4F^8fOmpSK1I-vhrDtvTn~h!N(kwTs?fbSuw(&
z1=OK@D&XD?S)kIYhiMQ(sD`cE-Mlfk+$|6`L&`g|q3l|=k$ucg@<85=kKmK}75qN_
z6#qmp;Ss~d?P7~KEyHA{94?p07vvs!+?Hq?XS>$+lI_<3E1*1JS-`yks{^(L9I_|a
z2ioV`*V&H*Is=OWX9X?~d?E0JBgWC!G09QonCn>NSms#nc+|1pvCXm5vDfjX<AmdM
zkRvE6C^5(rloQk^Xn0V0(8{0#K}Vd?&Uk0Cv)Vb&dA0Lq=Y7t{oX<J8JKu4B?EK1k
z()pV!z}3VR>uT>xcjdYUy2iLFTo<`6b6w}U-SvR$Dc2U)iQxF)<lqs(rNPy~^MbDq
zzB%~5;KzcW3*H_Q7SbxDZAfZJNl0Z#eaPh@*N5C5vNGg}kmp0ThwKdbA>@xxM`%>2
zJG4`1R%m|c_|R#g^`Q$xZwkFPbVKMXq3?x$68d%MkD<OWS6H*Kgs?7Q-NJf@4GWtX
zHY03K*i~USh20zWNZ7MsFNM7w_EFduVLyiX!n=nr4u3ZM$8cX0SCeK<5}I^ra&eO@
zn=EZ|Pm|S6)-~DM<gF(AnjCKOLz6QR&WPxU_=x0)t`T!0u8O!R;@*fyBA$(SDdN+J
zZzFz=<dGqfEh5`QrbKp+>>D{EvNW<fa$e-skvB))7r86)K;)6gU!p`*Xw;CX@ln&F
z>Z2A$Es44-YE{(QsLfG3qIO3ej5-$eYg1d(@TM_M+ch2Dbbiz4ntmG{7TqekZFFjM
z&*=WqqoT{AYojlTz9#zC==-Ceh~5zWO7w@(pG6;y{%14UEV5Z?vuB!ZX`ax$OY?5c
zFKd2X^V^$0(EO?9FEoFx`3EhUw1{odzD0VAxh)p8Sk_{Bi$`0mZ?Ub#&K7%HeA(he
zi_<L~Eu&hxTXt%h({f46Pg{Q5%F`;RRi9SFTTN<J)oMqp-K`F`I@apf7+XwuOiWC1
z%!HU}F|%S8#9SA1Tg?42kH<V0vn}TBm_0FH#2k+~6>E=;i0v4g5nCEt9XmJns@R)j
zm&d*pyC?Qg?D5!Bmfec5EUSZ+VdYtatg+S<tIk?rU2olCJ!q}5Hd(J*yQ~A&5$l)M
zqIE=TtM%B{%Ul2A&UELy2fN3)r@CjkH@aVSzwh4f{@VSc+ZX4IYY~?i=ZVXS>k~IT
zZc<!T+}ya=;!efe<0Im&_zv+I@p<v{;;)XsIsU%*$Ks!h-yZ)?{KxTM#h;A-BOxfE
zX+m5==Y;HpSqYaX+>mf*!b1s9C!9!3P3)Q2KXFuISz>MCC5hK0-kNxS;uDD*5?@Jt
zFY%MauM>Yv^tExd8P#T4o44A0)#hYUm!!E#TiZI@j%>TA?Fa3ewd>dJ)^=~SZ`Z!0
z{hIdQb!gvVYKJ8qKJV~t$5tIjcf6|OmQI14tWNDa<#sCTRNLv2PEU4vx3jHtROgYM
z@9BIrxlM9e@{;5ix`-}WUFy1Q>T=4{($m#b>sjS_+4FTucuGae%_(oB{Om3AF7Q6*
zJ(B83%}uRMy)pI0)Kh64)5_8or#+drFWr^iC4F%E()9PzKS}>Oqf^EW882tD%%sem
z%-NYAW{Ip;S$SCtvQ}k%l-)c#CHv~^9ohfv>gww4+O=z5*M41#yUyr3tLr6QZ|?e3
z*B83J*7YA<f9e+5tzWk*yWP@lMYor_eb()0w}0laoZuWQ$CHzj(<f&{&g7ihoJ(`A
z%ef<GMb0BR+j8E?*^_g!dsz3*-FtN(*8Q&TpLIXp{r4V0Jz{%w>oKCoWj#Lb@oP_8
z&+wixJ=^t6>p8RM!k)`|uI#zC=UY9$?D=yqd#~tTNxiP<^+9fIZvWg>xkvNb<=vY1
zYTi3}d-6WZ`zG&X-l=?<ADrJb-^y>B@5#^3&&%(hKRkaz{*?UM{JHs8<X@kEYyR^5
zhx1>^e=Yz0{Ezbw6@(PT6%-XLD7dfS-9ks9yRfowRpGY6{e?dig%vd~iYw|+lv<Qi
zR9G~qXjIXpqROJWqDzVv72Q~Ld(nMGAN02O_V%vqeP8eGee8Xb`wZwaug|T0HuU+q
zZ*1SbeHZq9u<s}R9R0lg`t+;mx3u5${od|(vcIi=ll~d~Yx_Uc|Ih%}fWZT99`NRX
zUkBz4oICKDL4kt?4!UE|TZ6*}4<CH@;N3&o4yhP&=a3ykei#}$wAawVLq`prICSRF
zONZV#bj8r8hi)7C!O%lPe=N2YH!V&o&MfXzJf?Vh@g>Deitj64SNuxxN5x+j|1qrn
zFz>ML!-fr;HtgzQ4-9*8*ayQ-4sSZ#J=`;V>hKqae=(xnh>{WWM%+7M*NEdI`N-Un
z*N=Q~<ff4yjQn=wFQe?EMvST+wP4g8qaGQxZPcz&M@RiJy4mP1qo<BuJo<&v`$m5|
z`sXnLV?xG6k7+%o-I$ayUB~2)88T+{m`P)%jhQ)S-k2-L+%V?0G53vGJ?7~#8^>%P
zyKwB%vCGFkK6c~Sx5pkBC&nd>OB<IruHU%gaWlu=Fz$hI8^-M)&&S7%&m2Et{G#!9
zk6$x>`}p1Cza4*OLaPZG6Glv!HR0+BcTRX@!uAQDO!#hsuOzx8p`=qudP$Fx(Is<A
zE-zVGvc2Tpl7l7Rmi$oi`$XHskcnv%2Tq(gv2Nl+6Squ!ZQ?r<|1pVAvL<Cu%9~U(
z>7GfiPx_%WwRB?X4W(O3zn>g5Ibm}5$)hG;KKaqfd&=x(9m@um)s@{=wxjH~a&P(c
z@|(+Vu862eu9#49WyS61T@O?|h5pB4e7|>qHu1eKikVw<VcB9lsAO*bE$C=GFMzoT
zu+R6qC<6T)_8$UsfNNM+k!ffzP&;#oAU0ZD%m#{3Hbe%pks{c)pC4w$BGC7TaI*vv
z$D+~djuSB~fq%o|cnWJLTKdk2W-OZh4xIKa<UhlWowbvlS+r;c1haVI_I*$O`3$_f
z&vyzf{dCcSb>aJ1H?f!X<~x0RkjD4<6TV+mekf1>Pmt-p1AYj!(-rUh{39MV2Jy2o
zYFG#2?|%~wWku!nS3p@(c`B>`@2Fh=EquT6CcaNJ&dLGFf?pm;CN2!$k4jcZUi>mc
za`R^(dHRpxJ0-LKMmQw5B(r}8lI1_c68IxI*XRp6*qD<QCHenPa4q~_2qsLbSB*jS
z>#v~d9@W3bAUVuOK9;avNUIxli;(dDieFeO;YU-{Yv=;MJ|LaY7@`x>0v*u+%jgTz
z8UHQ#br0#EKLhj<>88d|dWv+FM#Oo~u=jlj?A16=uaR!^13Hd7fO&u&deV*&2nF9(
z=*1|~e|{)ENV@P(Aj4U;(vzes|1&Vz24RH%3H)J0A1hrv!}qGD$kz<t5rfrAN0Xku
z07P%Nh5j~Z2O4k8HbcWnxBo}z2>%yC<8blapl^pC>ia?8kUs;yE%be93=zqa)VB%c
zqP|_fB5yxJ54T}4O1?XxOyBjL=I{7k!ZUsU=(`t!_X+$s%D2CIju9(a6aF-d;!k7D
zPk<k8-!hS?<&uAo=Y8s%*+o#jA;cq|cHnOrv(dMb=lE{m_acmGEF2?fb}<s~Z$tPU
zS!V_HE%n`?<R=pEw)#%u8{I?6%F`(8ZOjs@5YG&JM;pNG7-Nd&M-1-s9Z-2h+E7l-
z1x8>*YZfj-khUn62EKhE_Tqa1%Gcog@-%q$4zLz^5A}VEF}L189$(}0;e97w;`<R}
zdx_vfq8NbheIH;L+5;t^^Fi^Q;QwT;s2-`jB9CGc3xoT1#5;c6_mc+3!jAjSz%CUi
z2jYMb;exxV(2bwL-6y`|oXX}Cq=($?X5;<txQjL8E~ME|xq}VhsYqWci{wwh-4h7g
z#V+ML0T-JJRKq+KsD{7OXnUMiWngD5_;ZN!InWI7@;#Oy1xpB6$r2pBRC%js_#eo#
z;qDN4eTWSZ?R=lXeGbp^?c<q{mrUQsJe|ej`9nU)w~76TGz`KR8qtT@Mf_bh4hZE(
z@r}v>Pw!>pK|9HApc`2y@e15M3*Z|EOah`2=6C#Rgnc!_&Say3d4P&bEJyhP{4soY
z=CXdG1~R>ndBt7Ki!$lNzhg~#EgQ*e*h72@;wuNHvi^!zunDlc78nNf2Zs2;PGS`5
z1mvI=ysg35<rLp;UJgt}c@nLFzL<irr}z#6dx8Cau#>(&*a_ce#2W&?V_|;=e$F6X
zp=br_$`sZUZ~_8xwT1h`Y$N<_^nD6{J>hQ&-g%Ht5B#MmTEU87cM*^Sq`}`9q_H_h
zsJZ}Qs6Rt7eq5|*HRK=(=6W`q_rWOG2W%AVv-xy3fISI3<vYwrDDxQ9>w#pi{8nM4
z?l{cR2>%!>fuFHFA98t&&ENxAYnWT|c%-K*__NP<gzaN}*z3M$VLzG|fq%om%l>RK
z<TD6x0UT%sL;(FE>w7@E0c0NlH04Kqzk|jq^Kq2fQRo8gCKuG=r%=yMq1;aSj<PYn
zj(*4vEZcSm^wlXgQ?_8!q=R*ktw7r|4``L5WF89nYL4eP^}foO6V-Dhn?TP9XEB9`
z_&f%^6eW4rcFE^a4`geQvFiXz@Q6Z|CeA<xo1@Kdfmh?9SK6{HG069WSPlL1BlOi>
zknhzPhj+6)F_c9DF=B|O@?zEl=m4Y`a~>#x><Rv7a??R_R)l(5B-;B<BJ7reV~&RE
zIn{9&TTEv5C>sup6`|}i5y}HV9|pFtOW6pNb8nPk1<;dS>RSi<`+&{B4qzK_82AGI
zqCf`$mB?dz#%OMcIe?Bp4r9Kzfuq1Hz%JmpcB3ff0wCYoPgl_4cs>N2f;k(=2ZDhv
z0L>eO<J}ja67(_PX#n$Dz8_#m{^8z-871G9Fq8iwFkcGH(ssUipoHZ>5ikR|7^pY6
z3G`ZEB`_W+1bPErpbdceIv?f%eUAbYfKfma;%N^03V{5nH2eeRt&E)^?1%Yl;Fm`9
zTWyAG^-fXnLAkjMl)|Uy(~am?aAm`@pCU|V$MZ4J0MPF!6wKmzfFvLaauf-Sh5Rv$
za5EM~F7QJRG2@_qXp^=>f43ducyzM6pc6zv(SYGBv8uGbhJ{j$2-}C4IJh2w`NlBT
zgpFqQ+#y5yupzm_`?y)3zGUt-D0ifrWeplO(9Jx<`VXV=dGg6I534CkQa!s2bsCD2
zRrU@=ktgUr8)6Jac}J9$RnKG(>U()jZ8cl2?^EhZ%h)aYUR61@lr1s$+OjIP7;~&u
zY@xb0HqTc!^J`{T*Rgtip9#Wh^c^v))Z&gb;U1{&lp?NVnj=jleL>8n<dTDD#C?tw
zOQbn~MFefMziKZJ*e2`50x?+(5^4M={uY0pXK^<)=x)q%B*DE7QLseJalR=Y6OW50
z#FOGFu|_;C){1AuI`OPnFP;<6BV^1Tk`J*#ysAyOJ7Al^nqz)&x9A``icYdrmdOe^
zRaVLwvRc;4i{vahTh5X5<R$Vlxl}Hb_sdoA*&K1U!R+D*{-c~EC(Cj<MNX5`WtFUv
zGi9Bumlw;qa=yG&-Y9R9E965;1}H`za7e|>nN4(HLf&-t4Z<WB5;7KwFL)AC*F|8i
z5nti9u#H0vraZ&}I_Dha>!h5CWXPYAWVjoT8KGcM!7PNtkwbFLAaUgKF|kfPbNMFR
zaE3Wl7IBUX;t)xXfZOL`I0HqYW)YF=#%?JsRAwAJ-DW~iIYg@Nq<5kccYhfTV4)W*
zA(Rf4QX`k~aJfNj6fcNP;zh9;vp`$LOJbXNMZ7Aui<c3j)cF;8BA+=$nJ7no&&C9f
zi1vc!j|Fu98x3#3ElyIyX(rjEi#SNR2w?qL4Q7{f_!iiZj#!NEw_D|#azG{10U+&3
zTx-mUa6EIAFy%d#wMO|QKswu^>_U{=2)r4f;v?VS;NOul<+CffKF8<ZkTv9*<hm97
z#o}s-6t%`v94_>mamA|CS&)l&ki+-5MEiy`lqx%XgIYqWckvzkalVAt@FBd2x5Jn0
zSJb=r+3Wb$tzfrd27e*u{Hjn7N3%h!0N)MBGyejd|3aBCXD%lz6Xw>92{ZA=gjsrH
z!aTk<(Hy@qVHJQeVTFJ(VGV&XVSNEil0{P;L201|VTN9!mQ7Z4GHMj11+)2bZiBlU
zmAj?J9Z|o#(sSI6Qtn0@cSOk@=F}lOSXCfzB;77)4qnHP)enfjhjCBTA1+o0G>X54
za@WeZBTDW}C};~J6mUT0Lea)=RUWZ6Lcb;2`0e$|?+xZHQF;pwFs!&Zn^MfmQXDgl
zJEDz4>95`nG;fLOP+B7I80~_V2}h1&AW3c(kJ``{wV@023~CKzVGBE^>dq*vsMvy@
zOM^7ATad?TSa|^cVeU8yzFU%ZlaC?36<Buy9$^iNfbJxlDOj6=(#6^oAt#|uCPITX
zM-2$ZiW73b3HLf>o`O{=<Z>hK=ek^{+>i`aVf_k)xd!*iSl2=>@%@Fau97p69{L9L
zLJXuUN%~1QU}X!;RL99C3Vn)Y3~OYR9chUMt*=}Nl^c$>0J#Xmoh#mxzEE0(=b(4y
zZO|fGYmi$Cog0ZRV~_C^jP>X^&v#P=mo_$ut>(%6V&kSC>`1HVa9aMGFVF&cxx7+d
zrM^UWVHMB{xl%p=-viJp9fsE8ID9dtusQ59wt!uS6;U^_W$adVJ9PNHY$bb;J%m2Z
zX7&nu6}A5@_BOP}2W%Jn5MSXh*-`dS_6Iw|LwFpI=k0k1o`&@|{dj*qfRE(k`2=3V
z%Xm4T!l(0Eei5(ZmqM%D%x~j&@O${ZnD2jpKgb{AtN6qGIlh^{$=~Den_Q+f%B5fd
za-qBeMYc#TK}p^$?_@4{w_FZw`XJWYL_<z{L8J8mOL{>c1+gO57ksDnND)|ffgS+*
zX~nE58^OlHbqQMKF=)M4p`>O)lXXB_Za#Wvm*Pr;Zo3+5N3KD+cEc*A8(DXDGbFhe
zyPMs^^4M~AKVo<QS0A>DJ%M<hV$WbT!?SEXN_!)F5jt@zdl_7PgT2X0*-l*L>^*4D
z3bu!Rfmpx7HJg3Sjv(gm*e{6rSFCbd#BDs7UB^Rt1iOVt@n-B!wbJQc9?LDZoV&T3
zt>6i~9lM{?7{tRo9X-XTu<EIRJqs<}mu=#M(C^&JNAodQ9W;)QV>|dH^gQ3>(|9F&
zo6q1i>>WOn&txC)dVUGp#V_Mmuzmb0zKDIsujMze&#@Y68T*Rgf;DB|@H_e4><C|u
zbw=M|ebh>JoIk?XvlD2CJ&!Wq$X{eWtdH8kCE8~1@(`2($u-(IVjrI#{9y3%;5&ks
z1z#V$D0o5e+~B(4s^BTXCBY+u2L%@e_Xy6wDv6|ED>ynhJlGj*bDeSh>iWTT%yrmx
z(6!IC+x4z%hwEk6X4mtswXVlqt6VEwce!qHEpaV&Ep*Lw&2&w3O>&KP6}$Sm3S2#0
zSuU@ulPk&PcC~axxk6nImvEkT{^C60JmUP)dBC~Xxy!lJ`MPtPbCYwubB*&+=Y!7W
z&O4mToYy+9bYAMb*g4ZV-C6D|agKHtI|n$6oV}b~ooQGJ(hloEVz4SC-05`Mf=&nh
z6m%@;%b@*1dxG8#+7a|}(B`1$gVqK;9<(ZGMbKSAw*)N-S{$?>Xl_tlP*u>Bph-bv
zv9@FoR+!{rok<2(n{>dM6Dz2BP()C0kUfYwPC0&Z9CsXc9B}M$yzAKEc-gVp@w{WL
z<8j9-#|p<?j$0f{9E%+b9rGRajvB`_$7IKN$4JKzM?Xh_qlY8Q;dOL!BstuUmX0V#
zsKen9fu{q12|ONnIPgH=p1^klUk}_G_<Z1+z}0~(1MdmEEpTbzwSiX#UK)6D;LO13
zf#rcEfujS90|#K;Os~MMfoXxsf$ak017iZC1H%Iyfz1A^{e=A+`yu;2`)>QY_8s<@
z?VIh-+t=D3x399Vu-|3B#lFP8*uD_!Z|dze_G$LX_VM<S_96Cu_5ynkdzRg6?_^K1
zyX`IQ5%yra-Od6|1^g6nJm8yvLjn5(_5{2i@K(U90b2t$2CNHs66<+Z2HX>HTfowQ
z#Q_TfE)J*(m=Z84V01unz<_|FfL;Mz1JVML1KI_|2gC$K2ZRSW0)*|f?HAh#+Y#HB
zwga}kwq3TJw%2XjY@2NBZEI|g+8(qmx7}e|X1m_D$hN>X*H&knZkucyYb&-5uoc;Q
z*}B@&Y{|BEws>2NE!q}tbJ}e3jQmypAdktz@}S%&cguI>4*4>Dc~~20nSPLS(kxAt
zW{HMg8ISK&3D!F$K%2~Gsn8+|po>V4<U)^JhjD-#pi}!PtvU>PL~Dx8SUI&7`g9Jo
z!*00S1HEt~^ukegAN0Z*_8>GubGBY-fj5;Fcneyf1KWxE-;I5Qnm>SjjXFP){i5o;
z4|TqTbE@+^0D5-{R#r`e&UK--FXGXt;Y+Yyaw)WKC)DSM(b|0kbvYk3c{3k|n*2UT
z8;zwyx6=JObw|4a=DF%V8TT|vqiSigPTk2(nj|-A_@>gmT-~+HNichry;s?LCE0r=
z?D-Zl^9>XW?g$figo!)7-Jo20R4g92k?4`n#2ZbiT}RK<4kS7ap?XvrJ@R5@u2=Ue
zb=Pkxbsm*=k4lS2Qd&F|8|$Ld*hS^Li^_Kw`pUo_?MB=we_d4g$?9#gvPo8Ml9iie
z^Oka-EGgv92u<RCok|_3vZIhXE4Q7M@6O6?M+%SMNM?Qwxx}3~a*g81HHstG;H|`%
z)HLOzgQWGF9nh8`-VmiWDbYGZiC6SYY3ZQ&*g>VCgNmKTx5%D&(?R9FgW?T*C>!mI
zc+*~SrM>doUgf*JN_l(bzP$>qz2ahfNxs@Cm+h3xcFLx$;zV0;q7v^x)t&g;R{3r#
z%V17Y@g%9YNfZO$O=;m{ky9Z$ND4cV-ol3DWGwl`9XY@qrHec9Y^?DG_b^iq669^_
zPEwtq!cUMDFvqJL#48@etCYm6oW-lO$5Xs;L;Q%B6nh-(C3EW%;5o3PCtU(WsRW2p
z2@s_cAWDASDlWGw2e(RtTgBp5u^>$4hGf*OQUZU<to>3hS}XpvR(@N{T4h7E(o*4A
z%9o{lS(1ENN-krSuUK-=V-&Aq=q+!7yJRtF36uN~rPLFp)DxxD6V>i?E@MnCiE4K`
zm-I|=#;E+os5Hi?6varYi3msCDVH%y+F}$x;7{3Tzm&^XD!r{#2(45uTgiFKo@At@
z#3(=Rv(%mBsHJk#QeLFYRH`kdc8Pu+Yp(2@tI}?+?3+unKc>uwRV;^9n1@xEht=D|
z>TR^LiB|lH#yC(ZLvIa~+UZ2g3?-S4R%wiubCh|ux>u{aeoLu~R`Eouv_!)<*-%=V
zsvI{}X=$qDuc=(B?5T{Ks*t19+bEUSDCH(fxrs7wDc?~l%t(YLF=DCf8YtdGDj$)`
zcck(WsoXYEHd~Zg>0!1(rE!DG`39A`4R|YAIL5;$#o@AAJyj^Kgwsfwd7fn`af$4;
zYbvL3m4<K?Z@A(RLR0p{m2ed!d?>T_MO+C}TnSTt!&ExMR4&4l`!E$+m`Y)oiYrvP
z3{@^el}(7^M2O)8C_)WUVT35(A<9*-iYHjT4OVYmDlJarRIuxn8>f2fR9tZ?zfP3{
zr;;wGN|Dp}q8vC?x`LF}2~vK8)LVyg=}>+hDjbK3(V<f9P%%1;OA03t_LA8R?`x12
zdeXcnO1vjZyeCS$CrW<pDlWT9vt6aZu41vPSP-UiLnUBWDS<y_)_$o30u*Ngl-~g5
zH$b_xDYMO($(K#VXj2j?l`pB>3{tTSQg8d?F41qRMtGW1>gkzMPn1$mRJ+r;6v&Ns
zr*lcq+MUj&Q27%ojY6eJNUD7ZN8KrxLY0zG{D6ODQ>N~eOXm9-co%*23;eLdhapwy
z^Q#fFc9@yzfEk%iSi7FAMn6*EFBSd8bhHUGu?8ROi_l}tL4UCT>->w*>g$8vVLyzL
z3_xpfkZLUsMQf3I-6POf9EG0Z81zS}2R;G4$T!hrT!Z;Nfibx<wEY6O9W6Kq58_U=
z;eyf24&`AyoHyYSJd!O#AF(M~b<NO5EN6f47U+$&L|ZY2T8g|idg>ME|GC*)s&Aga
z6L}k+g!W%M)lct;HehFrDRki;j6QhTuRIlf_jI1YGcn4Z&AVbveh%8DJJDn8&fdis
z*D2nU_u{!c4=u(5^zw^%Z|t(^YkK<w(GDHV4q?1-C@)59ayWXTQ!oaA9XRNXeu&=h
z2kdFgn~g;qRgViyRPEHsYJ8vqJ?yn;uTG_&D#i+C@G4%7(Z^c!R%z5=7Fw{g`Nez=
z`;yP)^Z0yz2}Tkw;|uuZd?EG?T*<FO>v=c(2YRy8u)Ak5zXq+{>-hEj2DEu^M4R^}
zz6|3I=+|QG;dYEZ+{y3acdIdo<?JZGkG;rOP#>4ZBiLa*BEh~zzjrm-$d6(-RVDVC
zRI@7n7=Iii#ZT}ju~T6Uf10o5&+v8pS-u|Q7tdqo&_@0O-^5n(7tyB14kC<6)}pVx
z4Z}U#`OEwj{wjZsb9NE>33dE+HjBT3{_~sYKfld)@^{dS#`p(z8|~sB^4<I&d=LMK
z?`6O7kNH0S3E$5@<p=m@{2>3FAHoPiJ-ZlVu5<X8{40K#f6c$)-|{2q7aZls_;>s`
z{~jZ`C;1QjN6eo5%zt5D@PG1O`EUFb|DB&^bNL_q4ELdmaP(Q`VQ<!D>{20w6gCkc
z>>^M&M38U_mk1Ui80~mQgo-c`E}Do45h<cXQ-Re_qPb`xT8dU8M#KsWt3JLGZV@Nq
zF>i65NEB^opA>dUwWs+Nb~$=Q3o%=Eh3JeC{4Ut#ks`bzRiue@ks&fgmdF-eMK_Tn
zx{Ds7r|2beX^dYKh(dNu6tPXBx9B7KihiO$`&tYT1H~YWp&S>3#Sk%66pLZlH8Mhs
z6r;pwF-D9P<HUF|L6nGzVv;DuJQ8LKM1`0lriy8zQcM>!M3tx(HKJC`6c>p)F-z2o
z+2Ud`N6Z!T#C&myxKvz*8K}#}LUDz-Qd}h#iL1q8agDfET!%e-H;5(TMzK`fB$kPr
z#Vz7iaT|86+#&81cZs{jJ>p)mT-+yCi2KD#@ql<xJS0|$hsA2~h<KC*u}F+BV#N+?
z#+tJh7)fk}*@_FyVX-DG3}f~dMw)CGi;KsIoRbBx=dp8cJ@(JN%3ebs@+I~d#wo+u
zI`(YCoYyPpQRdN1ikfHZf$^&nj3Y*{i5U08N+Wh9dl|DF*Z#{q3+7nVT+3_Xb@7JS
z!EO+5VvKi*cuTx3cA|%C7w?F7#e3p?@qySSJ`}sfKg1sKk=QFf7W>2}*bVooI3PX~
z2gT>&5O&3VDZUbi#n<8+@vS%_j*4UAJ8@imFHVS);s^1g_(}XMei8o^zlz_)De=2F
zE&dQ^gim6dq!f~NLIy}Xdc-SapmfL}>69)REJI`{_6CK^CNe@s$|%`XM$2Zhxoja@
z%2qN)#!5@JmTnm*<7I+Olx<`Zy9y)Kf#{RpA=|P=vYl)%JIIc*lk6;$Wf$p@Dbg!b
zWtvQv88VY?mRT~JIWX$^Gy94CBD>0NGDmioJ!DVWOXkWvnJ)`up)8WUWgkhSjo)L%
z$VS<Zxz#MtZRqXaivIsitdu>1k-~d1hIl8t3*(0mV;1Fp8cme_<p4QQ4w8fA5IIy9
z%VBc393e-_QF62#Bge{da=e@%OR%eO5_<vjMw4Y3+S(OpJ?CSjU@!X|bCuK3LYOXR
zU?<g5tTgz9eab##``H0@5UuxW%tzMBnP{)pVJ5R4bD0-oHghiKGv{MQ^HR)d(&+F)
zd4(DwUL>!Ui{&-)TC|$3mp5S7)s2|*ya}_OH_Kb(t@1W`ySzi*DeuC_>pk*bxm=AV
z-!Czqj8WK!<SOiVT#fyXkJ4^O`2==5K83xGPh+R!GuY?&EOt3QhdquPu*2~M>~DM#
zyBoJ)Z{tgHo7|4kl~?4e@-_Lod;?=GZ_2mi+j6IT2O}@<$@k?4a+mxN<1qigF0hZ}
zUbc;G56rDDEvu`ovFA>%tGKu#aCS|lCndjtXi8zO$55}KX@+JPnq_FNq4|auYMN*K
z=NbQb#(!Q$U~cWy+M0?PL53!myHw1cG*7B0g?xKbid1NxltSg(<4sG|p?XYco(xxh
zS!G?>?CL316?2{W<+b&tWn~pL_4b0YQe?@vHfi&iw0R2gx~{gg-d?C(6&eN<Dh4<U
z8-g);FnP=~;pCZc@=PA{O&;@2s`5=9^D_bqO&$&P=P@PApU0HK6vN3B6&muK=IY%j
zPrc7cj3>qGwfAn6H?K!=&6Adi5EXYkDcPy6K4(MFdGMMvd2?-jCYRRP`_@-hl~)Az
z)j20ODDxuiHs9noKR2+iPQNZ0Z=pZcNJhS^-??#kQc_J$QVkzc)9eFE%VyVC*atME
z7_Rbc1CS>jRf883WvXFus$p%KVQre%K1c<nQ(BZ|AJizwv~(R>n#p9ENl02&;9#A>
zkipYt*Gw&~n_XR1I$Oo<Nhwf5mQt8+iZkEDSzzKUFxe<Dp%$1>3shP?DQU)ix;J3(
zwAwl&Yy~C<1t!!2<EqevYD5_|OEVQU%!qqRVS0wWSTn4+A$PDf@ui#i(@hNNCWiDv
z`!MCpHSGKnNmr43yeWpg872`KCTrP+_Ti0U%1|MDQuJ$hGcjeDm@;&5DH$2|5n6sm
zn3^*})trD4b(J+!Lq=SH*G4o8R7rvNnYthgvJK7CC0J;9U6>It;w(=KP4Wv(dJ0W?
z3Jq_IJb@z`3u>m9cxoRtwXXEy3i~L{oKa_)6Ev#4vZAhHR^=@F80E$_=Il$IkSu@D
zCP77p`H;M^Dm>@db1G&^VYZ*A%7-T<OVuWbiD4>gMXBLdX=6oeBFZ(=n5#Gi@h~!-
zt2l*c#VJt3sa(H;HkCHd_|G%`^Njzz%)nBkgbej7Ay2wr@}P87Xi&7KoU)9dXqA#u
z=*e`Ion?`;tRe6A@<#IGF=_Ldw0Vl`75a6B$$5p=uoVsdHMjFj=JHGcc_x57zee&`
zRg<}VlezrNzzUN&L;aac$@XUs8rHBd#gs@<x@&5q%uGEeF;H!(_Nk3B<xSBVHbZGx
z*R-=fb=tiqE!jpwym_{1q+u&{4XM;QC$|uL!`6J0-~7D5%Ep50E%K)t$tZA5KQ}Ju
zPLq>V!-v%L;2BfvDk^HKN^8n1%j{KJdsM09+p3T;9dD|sFb)1q{HccDsfN#KhR<oK
z_8JwG_Fj~2uW8^2B--S(LG7AUrDeNnO6h!%y4so3DgtYD&O>T1pbku3@wYPkUmm|o
zE-?Ai>LR63s|!$-Zlu7ZH$63=_N<yHFu5r((o<ku6`EZ6g}X4%sNOt3w^It!GwoQy
zhi{e6F+Dcq7;g=~(oGEMCWiDP`z+<lHS7GMO4q{XO)*|GOd>K;?e&d9&QKvj<*FP*
z<(e2WObi(&57~;xaF=PHtp#hgsZz7G>Yc4r@9Yck+UO(w`GO3Z&x!s};n}ZDjT{$d
z2FyOo(?XN{LX)mSldeLOt|Da1)IdZ1H82zH5h&p~S_#k5Y?^bHO+j-Sl<+*Qgy)@o
zNu`ids8wi6VUbB%kr6b=<9rpKbN)GX7fRR&PPXy^LDB5>YQaYZGHgy)7185OSAqzt
z>~k}<*2J^&pPQ%c@vKB1R2PHSe3QNDs#HDRY%Q4HT+M8+78tnK%HOL62hWPxpi1k5
z8Y$5qW{+1(38+bzUo0|oe!Lkb9T_Ga*(SUUU8r931@~r{^kl2zLU@J``b&;yzr9IE
zwm%()W*Yuvn*3#&^kf?TW%~1JXojJgCY_lkotY+`nI?UiCS93^FPSD?nI=7%CO!K5
z<MC#h__Iv>StkB06JM4ISAQkp-h`iJ!p}0{XBj?anRxW)9qvtjvrT@p{pG3RODWLG
z9p!7{GjiqCUu%yySEnmQH~rCsHtEaGl2ay52>>QmsypU|Ce|xceUSPTq~#`;%F^W0
zAoBr8o~!J=8CiZ)b^%QDE9z>KX+5w5eI;$EpQCM@_0ypGm0i%3+Szr+RC%#+H>+~4
zvU1KsudYTLD=Mc>tJe-|Doub?*Sv+g<qewWoKiV;c3nkz>8xq$l_y0ND%w=4a6lE)
zyii8^z5cp*(Ff7bX{r$LtO^J271O<`DXI`a{m(kQRQ+A{W)|x3G7EJ$g<i#6Z=qK)
z6;u@hs7_Cc{;qpdydL}Pl%kZ3Tut&c(`L<{IZH838Hj0QFiaz(W|}q;)08`6nsTR^
zri_|t%AsPKGR>@-JxjZ+uB`DJD=wN{TBU45XO`CCvs^KyUOk4X$2!G*<z1EQtl5+O
zNrXWsaq`(DPHspdnRF82PA3uW{7Hn-pF}t`NrcHH5wHD8B$p<MlV_ci#L2VHO(MLj
zB+~MB#YJVHB$B~!k&K#)+C)iI?kI`Molc@M>Le<MDv4xjlmvQgoCJDy&8(=atS#3;
zmDN^Pmnx%987-JsDN_bY85vB<$f#4MO_Va_j#8%F>69s>PMLD3QbwjmDWk{6DWhk9
z%E;{0DI=r3RF$@UvL<Dklxw0T%sxdwP1R(YCY72@*JOq!T9WM5`l&_}Eynhl`l(J6
zEs1t5YxddN@?uTqXrjg1K2JZ*SA?po$D40-o^G6ayt)wvYIJd-Cs?^l&(?lb9!qV7
zv+HVA04dqtkh0pU+L~&psQS{ndA6#`x>BtQax?5RD`vsgJZ9U<Yip+J2i;@wdi2l`
zsIJ}~{SC&mQ6qZT#p}s6>L<^r72QejdQ;M!v#Ox1l4<(|Nksj$%DVC(NQ5%XQn97z
zFFG7+C6l7R<apMhrRXm<p4FEF)DwiDlxR!~R+?6uXSt{*8gsCcBJ*J4QQU-ot-Mn7
z7YV7<xk*V$4XT(`k6uB2MY;BYZ%=7mUG1FNGtIL%NIjR=&QW6uXhf*56B-XX?diJv
z;LSuF^>vk{Q;pAb-S<Od!?;7=PrWZU;TVpk>j5i-r_-8|qQlQf(a)JFTH$8s)&vx|
z&WlI4p73nG^16gPUOf;7YQCm=011+1zQ!0x(voJr#(KmB@$0X0s>h?geW1x@$|V|(
z#wMk~#%pZ64K}I9CbhvP&Df+h*rXeq^ah&@W0TQflWA-+8*H+SO;&?Vwz0`>u*o$x
zxeYdX#wM@9Cg0fPH`o*zn<BqWipgn8Lrzn4n<7=0f+tlE-hgUurs`1{JZo;6&nljE
z+a}cvB%04E3QxCfQuSvP&$=y>YT7obUL`HCH+=9m@WE^N;BDZ8*QCL#OElGMO3<ry
zMXFazKx(RqGga%B)Kn8^s`0N|8xSay2i=6gv&lo6Debg|($+)2o>V=?2dZT-HN)^P
zBPF?1b?Z_+YH&4#B+i(V%No7$G<pMhYxE|ykvXlAD@aqLH~Ed;pj^!xR0>aud85qd
zyz$3LZ_dU^PuY$9K(-o%mfGkIB;35oXcUh!pYz5a54|}X4?X$gQRZ{}_~W5BXXBx?
z8M)A%Z8Y1orZjTnP4%j>^QM^Qni+ofdOW5X=uu^jXRT2^o;>HQnWbeFN>3|Q=h5PV
z!<33>)qoAa+WpvL#+-;Jtj))>#7rH|E@jxWhvyx1XH3k;&20d8*q5UqdV|Jm2-+`{
zpdqdYP1F$Ig0|6+<Tpt}bOvp!fw@sey9Q|=sVD>OpdqS3J8H;i&`ug6AC&w90(&vl
z`FzPR=fO;SMgi>PV%Y7W_Jd+~zuqU>4fX{v=V-_n(C!-8A<WcTe5}Wpu`u`45Pd;=
zX^87UbAhpd0I(;NASyt|YY6Nu#mWc;F$J_lLlVy>YKTdo267<Gr2z4m(sPN1m<oES
zhL{eD{h<Ug4RnEqBz~_n;Ghp^h(4eXYKZSZAJPy<Kv!vqZ$KZ`5Jy2*Ylte)M>NDt
z&_^{S@%b?gaV6;E8sat3Cp5$e&?hx;@&?2D5Cv66YhVV%B2et#B}nY6WotFW*Pzd6
zNH^#@;90o85p=zV90dBDhHM9ly?z975$FaDLHypRA*mc*&=5;NH))91L0{AmBSAL<
zTag|K`jUp|2f7V-703W6pM>rJ`6p0%-Y~!(X0`)(3!pT-Z7>;hC-5$?5O~jk`0&1g
z50uW|CEO3}0`>r_fR8k=D;>x58W0aY20j7E-F}08pr0E22zo$+L<2Ld3Va3VLEuYl
ze6WFjrNLdGhc$4L1;d(d1s)GdvI5!Roj^%e08Vx57;qeB;=}hEycqO^2B-X-)WALt
z#(n^PfqU$`X8+W{PJM>GBnmjyfvNM5e}|h#U_PyZlPehZ>?m+5gEJbO_(Z$|ILd+Y
zsq)$l6b6MLP@zHf9_y4eoS?|R;z57V00X3l+cmJ_iSa-K)HUwVz&a?#DO^G#Kw$w`
z8^wr^3Q3^B8dx>Oc!)t8&`=Gmq+&eGpe<;)2I&vp#GoT+ga#`EjWkFB#m;U5?egYL
z4ZNVy8dy!muqQ_&6%;Z=zz#TuwO1O%la?B!hj=T4E})PDB?~Ao9&3;XYH46S55uZ0
zjeJnI2KERs9%oPh3K>#zGzXOUNGJq|cL3=*PJAKs1&DV5R^KpAd?5@3Q0EC)6~TCW
zgQ1`uG_X#BapD(Y7yx-yGP?w{vjOouSp#cC7^i#^sEi=fO0E}!5`PI}0pck^0>nqc
zKY%n1tZQIA-C!JOh6YwQFrH~J9yH5fB51Y-R*^C6iPD$^O0o-J9R|Z{HjOgS?iyH;
z!LYJTgUYL?26nhI-pgPzXs!lUZ!k_}MwklZYhX<W!!9h18K6`i09y%KWKav*TLXJ&
z8FrFtRD)7E5oQ7X3<PL@gAYLmXwY{<l^>PiJYbLp>36Ka)3^$Bhz5OIIF&15K2WSd
zx?Yv*Fi<L^;Tmik=m>*lpd&S~15lSMl`Zjkv<BM_N^(FTeo`3&q|31bP2)~bDl>re
zI;T2GAbyr;kgn%cmV|qNNg7xc$vBk_;cj5E2I+TRX7B)Lxdwd`c!k0Jpi?w(uDC8U
zD!0|ZG!4@I*d3=qyqc~--vdr%Nq7>d(xC4Hr!pfv1yKD5=v#r)Wi-}+&eWjq2EWMQ
zY0x?i()X&osm!+kq!$3v_k6a&%b-;M0jxn{SpTT;I_O*ttWMH$Fb{4{!93q!C+H;_
zr2F}$2JeDirhya67++xU4(LLI)}S{Ta8N2&KpY3XRfF1Ae5D4p7dVvx;TnMQ3D7r?
zuQebylpn~EaD!5O0JRf2rHK#>yr+THYYclqHApt8ya8$-(YH#0((s`MeUtfa1B#Q%
z8(;@P_ZU0_`jH0v9CWY2I#7}WfE@zeXYefOCmPtf$vBlgVLd?Z06HH9t1vYzP|7oa
z9i@zaZBPVyL<4Kka8|#;ji6Mn08Y|oH~~&07xY&RtbAkqHv^JEDoX&Xi5dUHAQn7r
zu0d@j(Lw_!Krzu$gW5r&l?K+hGCDDWKs*!q8ra3k1oA^5o(XyeICv|HfnhL%e`2@>
z_koVkAf8eCPmG2e@JNgS#={IAQ9F|QBE%Pgda8gdP+Onc<{Wi_+TsL$0u=R;z<&Tm
zeI)Rcps0(Y24?U})B^P|gEwL}09g<mxD0?y3kR?eSOhqMYYoCcuLEuYngF)}w*xW2
zT?X->cWdy2pvyJ*_n;^b0!{>C;(iS(D*@RT#8=1wPE1q4>6c7AVh|3x)&R0D))~AH
z3OQ3C-fl1;9&R)^0Q!Q4><9WHuo)N#Yz1CId%HjAb^}WD>i~3sgq#S9;{$-wvsXh>
z`FyM)$AeP&0dg$pCmON@l+po6D%(#r<Ty}D69KX>C_ciM0L4Mr1yI=&C{A)mKp2u4
zOakQwlR<?6WQ6(;3R6IB29OUKU;vrGx=;<&3mIqt`H(1kg_)p126dp20|m&9bQxR>
z8f-8Z6!M`k9~APTa4Bd65D6>*ngecNA&>yH1t3$@k5ae^v^~%PxEbhVa4TpskODyN
zWSYTUpxHoo;BFw#U<GJCPzbC9P?ic*-lYZ)fl^omisvzd&Y+tOC|%nOk}ww0MuYT0
zEW#&<H$Z!9VAU^+?F00M{ac`rGlF;r6loxkJjD*t5FdgTYlwe<LRJW359lahG|Z5-
zSjY{5<STZ$238ldSmcdB@*4Z1hWL!(=s^wanZSlN4eka-xf8IHf?0tY)JC>Yz62Um
zuu#4PYU5fcUjmIUSRoqJ=CwjKXuQD+)1daR6|KQ80&S*2Z9~h_z`k8(wbtOhK;0Tx
zMb9is2S9B-D^Y{S8Z7XfK<zt=;s9vu!Rn|%?K{h>fi=U-O4Xotk_9;-;A947rE5^T
z$;!~cN@HeaYEV1K%F<wWfI_Ya)F!gJYG55Qv$|<e`^f5{fi=m@qI?3>KC&op0M0#N
zR;~uMl`P070c)C>1=%4`yU8lhps^FHP=ne*R*?pcqgccjfZ9YBWQ;&#Di&moK<y)o
z${V1u3X94Z;EO;<YS6fX1-T+nJH>*05!lP1V>GCpVv!sGH11$g*#jK)#G>*BXbi$4
z{sNqMNIV5-Ji?l&!HI{HG-&L>D%HTL2+W$Sfj!*JD$~GT5@r!E02-69W@zx0pj8^!
z55uf#4NiH7&LXhgptTx&73e|@8W*sx(BRuZuhgJ%0_!Rbz8#c!1kgBvb+rbyx2&Za
zG+tm4zW}}i^cD>o53q<|0JXm?;t@b&0~YZGpthJrya1?QVv!61{9(`)8Z<6rt<<0~
zKa1o5p#Hi=We>1kpp<8T`tBCx6JWWZ6c)h4Kv!$v#0_RWqCtIn>roA?fM?cY8q~kH
z9@oI$D`q{RL4AGeNe%4CV%Ad{)bF>}Xkecfv!2$V{=c<W1G~4F^^69M2UzPg7|HCj
z8Z<Uwt=GU#FJ?WbLE{A0^BSxl=mrfMFR(Uh;LH_fy`VvTUu%;F&Ie)EiyG7qwl-_v
z935tD(V#xDwN-;vf>M0|sDEs2(_kcnBohG70)1J7kvx)20Mu``Ue#bEo3Ck5AKIci
z0ASY>v)<64zO+Sh1K@NNX1%FF{YC374V-qsthY6&?`Tn-0cb4KdPjr$A{NOCK;xPg
z$s9oa5{u*vpz%%X0}bk<Si3Z6tke2XgI^B1TZ6_vt$%3ng`j&hXdKk~NP}Mix>tk7
zM6HiC_?4jhG-$lj`b2|M9`|d|*r)ZW2B$n8(4cWp>oX00J?KFV8WXiX*WfpR9@3!k
zQR@p0z6A734H`qVzS7_%M~5|NOwsyU1Lv+V>l+OkQ?$O-;FRVg8Z^FW9o68J=3^Sz
z&Bm<nG_XUBS;sYKEYkX3gHxJMXwbN%by9;<nt#w>M1R!aBs)K8&={okvj%??^cM{p
zkF@9=z)42v8DPJG8gR&qJ5WPH2Hin`3+)xipF3QG#=YH5G?Y04W`Oz_Zq#RY6wISR
zn`(#&pwSwl4zxMY0&WI^w$z}$jXMU2h5cYqON074ZZ{AI`x?-A4KWckNkbHYcF~Z?
zm)oO3ZCJM#NJaX4gQjc9zM$DaSA;nXG)F_s0`0CL=79D9dcsX9Xn}?}14>~5)aP;c
z(GVAdQn&#1f!s4S#0{VqX^8hg$<G3~xd{|?h9Gu>qMo>y!h8?tZ5jgd=6*m!d=I)x
zLqIOvtAR)09&+J+Ohfz#`h<q~2^965ARu>c)M0}79rPJs9n6ps_j=$tm?0DHjT+)K
z=nDX3Q$Q}<TQtNUm>!GNkl=A#GYxSSD9VT+7K5UU2;yo`lo3I822IwWHh0_*4H*hL
z6hJvsn?7zBFcxMz=s2JR<}lFfG-OlIWx%blN7=@Gts$X9<5AuO*&Y=B3Dgdchkt_X
z0@_4_+Wzqo8WQ=4N4Nyx1BGl7WJ^#3*%4+-gZdcp^bAnHA|5h8kcps^G$isLUk+5j
z9{v)fhI|zi@=uW4Kq2!9tr72B&^8)!J1D{?$d?&wvr<E5fTG;mJPZ4-pw9yvV21p*
z*$kkZWDih;+Xi9CUZAgQU>6;0^QMN(0!2L`$Rg048ge40F~b4yi26NA(>18i(-vhz
zkOiP9D+2YC+8zc_2I5l2l9A_R<bnG9$w*&vH<-s_+70qWpfQ~%hH21P4n$EwB!F^2
zAWWp?ckt?W8~i4s*@N;R$hR@<Fddiy`)ioZ3AfnKj6a;j>;(SJgY`mBV-lOs7GNjx
zLhLcV75j(RVwdlJ{ss2q9>uQP-}oQc9h-?=tfR3TwG2B<FTsw|Mc6@l3-*fMjs2nb
zV`u0p><L|qotrP<yvvtx%H>Y%tvn#Uz&^(?>~3_+w%DoI3HuY%u>Y_Sy9G<J7w<9b
zpW7DOCN@8|Z|uO>A+g1=qhrV6->6o`zGz7+&<eAfS#eeytE1J;>T3<N%B))JYU?KJ
zPHTnrn>*0$a!0#cx-ECSJIU>Fr@GVKUEMw11@6A?i`)y`m%Ep`Z*xE3Ugdto{h0en
z_Zs&)_jB$|?k#bVan0h~aq)3UamjJTabx33;;xIkHSX(pfq$h6!~aq>jc<wnrs^2q
zCw@|VMS@Idp3pj>O+v>uE89HVW<#4TZML_09sew~GpR|^^tO?0i`#yUe}(Gy$a7B&
z``vcNhcj$Z?U{#lMSE}@=1?xdUTWg(E!dm=G<HzG!w+Gv^AYT5{*|A`?qlNY5bX9X
z!QS54*sZ%z?ajRnJ8+kSvkw@~uERdq7jcg0cI;_=A3IeKVs~j6_Kr5k-q3d7Y%(~T
zjUAombGA1)I~bfD*}z$W|M+rR(fF6IMEuW}*Xm&vTO+OM)<SEkbqhGV5}XZkhr64*
zW87|Vwu{>f&StxFz}epJneKXUcA??yYH;=maP}GZdiTcjI6EY6Sll>pc3A^wn}D+|
z8aP|7I2&U)yROaiZ8o>r2F|_-&W0P#9!`!=?y5KoX(rC{Gnn4n4!j61GvEEbI->ZM
zXma-MyYCEir0+U)lJgSZ4ZiDr*Z8ibC)kehUFPfVt7MjXx&<>ft<ma3{Z&8I6|_~S
z;64@ia?}sTX0klrUA{%WD&LeZfB9+=CQ26qR}uZH^H-g|LY@1o-y!JzFSdRGO{0H@
z+<0#KMbsha$wQmS?og{kBM!AZH1yD*Ljw-=KhzI40}mA($_MRrDE9NJ&!>D|b|~<W
zWbE^2KVSd(lFuLfeE;WdKTrA`Assvd+n|HKgZmG@d~nmj?FS$IZ2ZCH2k-p!j!&=s
zbn&NGe!B3}i!i)@>!;rRpX^Wh<m-KR>>j_{JvMP9xMADLI3Eqp)&tN$IC)?Rr3X8M
zizI31KJuKCfz>;>#hZn6_y16z@9>-P4kryadb%FFZkNLrTG)SArZs2XXp>xp_p3FG
z&4bvLyBa%i*J0P~CTNUz<(KlX4XVr*Ws64oRT<*Mw7s_dwu5*+r2W|rkl6-3d+yJ+
z*Sz0-p8Z?rKEwA`jq~l#eYUMU_gO#LmMY3cZ|w5FUVJM#P7LU;_U~8AXw>*oI2WLj
z&IQ0u?^ZGvX98S@o&7V!6d5Nb$${A6KV3}2$Q;Lc0pDTQ`8U{iUL|JAQP{=*niwJ5
zAcRG7wD?-OX$L=cV7J2w03~t)cJ#k4M(SPXq8~eZu19w^hz&<QnaC!w$!sCJ0{iC|
zVXpjswu(K>R%4aNqZk!@4l4*g!peeu>_?pVu%gi!9xj~A5pT}i@X%QqI4PqTCq2~o
zPqyH5Wec2Kfzu{%#>5jiC1Mw5;k#j0JO{Jk{V~Hlf+yg=783Da07>}2fi`RmZ;Ss}
z=!la-Qt%%FURJ?VaWX{?E5!_KJ<nsac|OjED8Ts;h4_DpzU*?$8eYYRva9(p{Qtoi
zc0Fck7vnq*iCK~xF;lk`=W<MBH}gsCR*qA_G2eC@pN!MYr{e6%8PLMDIDN7jCvgb=
zAx<ovhchRyVvqCr?0LSJZR5+>E0`7B&TnCF@H=tt$Xz&h<Q|+nc{k3Qd;q5m-;c97
zR<n<Bdd4T1P1}!|vrqXNb^x<P$1wYK0y9HD;XI6=amvU}b{ca*zw>u6+jI%rfcd1u
zd;{x&xuI(?NBIQ51ZP#QWe52)IIVIWP8@j_=US}Czav;U(V~cL;Wy$`ja+sguVRBS
z&;B;%Kz8Ab(LFdf17~S)A5PLx=V%DbI;c}JPT+)$llp`VoR48n$Dp$@L_AK~_@4iW
zFUChW)!=~ahdue@u`9m>JM_n?lMQy^Tk@%#gnjuJJ^}nvwZHx*wSQinyDA?PJJd-E
zAK>JKJ#=CME9Us;S00Bm=G)=_JKE#_3p(I`D0<?2kY4yNj^6Atj2JG!=-^El30%fY
z*zLTW-N7qxI_MO3H%961;g#%OjJ`d9k+ughs`d~@(AHzL>?M8^dl{o(uVTdOHGVrz
z1ib?%2QJ5XF88tb`AYU7MxJ(Kl<7F%#=ghs(MgOH{en@UKQIDx2B(np$H-1kjNJ6X
zC`~R#Wb!cjl8=#=0*tB@@<{w&Mil-xqABZxQINhE@#u%qjVTz(n2J%0X&9lX<e6+b
zMjmEhl%WbE3e^}rxE3P?*I`uPNsItIh2H)e=**|li(ktZvS-jcUx%LfM)bO0Ko5Hp
zdebkW=e!vj^-J`Kze4Z#YxH!#L9g~(^k9#mw|W#k(;v_a{U>^yzoK{f8-E)$dlXt)
zbOOi(oauoxLU1++oe)y2PWqULlLZ7$`j{h1aUw`PPWzaRb3ER|DHO+W@&rzxz_}81
zo<uTElW2+4A+ltVNT8Dl=rj{(B@Q@Q7FJmZb;iGS-WmV2_K(i^w~+?JHy2+VhBK0w
zeMUuH4eO!r)unYaSSNFzQ9XktRjWJPa<na}eMu$(-!_D0S5FQW)ZtKvCp$RWI1=|J
z&QDmC(2GT}AiR@t3o(LAXP~2f${b8IJx%eqoYX9fb!X^v_%`}}@g4T<@~y@D|MJhb
zA7SrD9QZ>0w|~C%zRkWJzU63n96>C8?Dw7U{e=HVv4Q>q7wdehe0zNdasOYW0sq6r
zd<TJ*I@J^wna)yeuk4P&{t)6)F3#HjnF&0h|D5^PA3nUwQs0#kVFqhEgntsb`ZquI
zUlk2*ko#kb3n#!G<(IhRf9+d?ur2>H+<xhQb7AWH27En!;dkfTs{a>JmcCQIfBt)4
zi2Vf0Xcy9iAI!(JAD9&9eJA`efDZ?K2T-EK^^>r5T#%Q3=S02gifL@sVD_?h%51S1
zn1=X%WqJ6L<A)Te67`+-tw&qdb1r8a{4?<6C;t<Ckjx=f<d=AWJJP9t;B*p8^3@|`
zNQ;W$m~SJ!^R4ymLFqQQG#(W3HEQe8zr4WpVc(CM!u+Lgo9|J@iyg{&sJj2{n{V6S
zbL!jt_uP>y$jK?+H=wWneLsKKrRE&Me*f?IpnrGyfBRX`^cVR3NhuzNB<%OS`ge8g
zg+sYObpIzS(r#yee-#&L4d{&BRF+y(kYu0r+t{R}P{}adke`Ei>uBuaTr=q+6+YEu
zs@3!rI;m@V<2Xo0A?1x?^}YLd<+gE*f0ECfvu@668Ew}%&PJ{j_fVGqM!x^u`?DdQ
zHQ`(KsP94F65nvenYX}|ufUi0eQWTw+X+4>;C(s1dy8<*G$}m+9db^oo(=Q=V2b)b
z`1#*>asIFB&Q{39daWrNN8-aj`O&laQXuzdIRM$BZ-dGQm7-rq|4Rw)hc?Ey_|Ns*
zxiWy1C<$+z4*0%+9c<BCZXDnFA>r-vM&Tf>zWFHYLk(Y^x%Aez65pSHiQ)fK$C@;$
zntP50ZD^mU{Kmi?@wXGcz?4F&&By4C?{x}6wV+PJ?jSw+fB15%FQT6>>VL)jFO`Nl
zhfCp<bNHZZZ{zR0D$_<9p&^L>n&GT0QIP&N+xc?hZ|C^w|0Q~o6Z$pKzsMKzjdD4M
zN80nhxl;-K^-t%Q^vl2gF8sB<kktQK%HTFphl}$330jS6jQ%!|4C&ullX})+QL7Yw
zwgIRukOHdb$3Poe0MN5ZtQ~aWUg*HJ(2HAfUq(Sdm#&ANCV$KSMSoE2;YJT(q!7O-
ztuM@-+Jo(2TcF;Z&+{a0`=|HlKYinWkpn{x8{mIzOwZ=6u`P0e_T^cdb9sI4lXj(R
zqTh$%=iUps^t(YEKN-J&A%$mM|CPyKgLH`@<Zmbkf8|5HYmOH8ez-j5uT#F=WRGX$
zy>b4}4GArG<x0716w6sDg((UBoyQ@48-dNf*Ab=~HHC~&PidnHL1`~#Qj&)7NRKxP
zk=|Y4=SI4f%Z7BTdW|we%Kkjvy3hBo;h$sUM!HFgQFm~sHknTAUfn*U)R0O4AoFNR
z!3OF7cR%o?xvq!sa|FGKM)GymuU{q*<^|qg$d3F%=XlWbA`?~?fWwW`V<UU|`3@>V
zCcO7Qos)aNgLA1H-<=D}2{}98|GCemPf4Y9SbtR%)%u9iLH)Fq(D~3Zkd^f?tx}<`
z^*xU#j9nvySN+LReSh$~@$anEHMUjhYHmuLzL)=As?MqNDE~u<`BN%iT=1>$Iu4{L
z0&+sRI_diw>1>c>*pR;ctDn(wf92$V^G>x0_ERl`ulPUn=`Za+dw*ej-!jzU$9;3@
z|3gty_^CXvM~~yEGO4_xjXd{U|9^+uila&=oa<LV5f}fJlV@w*h5Vdvr?uJnw*Tof
z`V71OtWN}qA+2Hb`q`NLdg`prg-!U1?ri+^Bp&;Jy6&IP6OvNDi@!tvUdjBOkp6Qw
zx`jdEG>rY7BM<mi)c;>&LF?D(3Ewmw2Ksf-djH*@Z;1(e<N4)+5#Tf+0Ph2#^=-_B
zlb-Ep1z8v=cC!S03!wSbNZ3FY%Z9QESVvihd6psUa$I9EmwOlH-B)2IYbxem1ZE&?
zm}hzoGgkvK>OK~ii{^=N8ht6QaGclvKF*`xg=;?MSoY#v_I<b(;GFUUIGg<tu7x<C
z{7anC{w=O6u_od>{NLF3xE8CqmTUNFT-VV_<otTUMF3xdbH{`E%{XPe1;0Zihy=cZ
zP7&w#;}r4s`~l4T_2v&^#;-4b6mx=O_+uFDpTIX_cCd_Z!Yp6~e-ZP4Q~72Z<>y;)
zhWDlXWvsbaz+b`YfQ9^3oNE0Be+_3?zsp~z^Q-wAbW$~D5CmHc(0@EpKgeM&7kJnb
z91O>E1TKeaMFz2^xHyZ(70jC9!vBrn3S%vBg~LZnjNZ4x6#;I?fY%oIAIs=}IPK7v
z@i4c+6^IsSd%Wp@E0%S{<wk$26U?1)xiNa5jPmM&%ZYET2Wd&c6{5yFLs=@WRw(f_
z%)Y1NYKs}mfe3Xt)~7hwER?GQC3+*$vI={$9oUoi4&>lH?1kf)sr(KpKaRD+VOZ1m
z8&Z1;>wP0o-mUO|;W3y`qZ!MdF!#btlpQDk_kkG_z})J;<pLoE6Jf?bOyOS7m*VYB
zm}7F|Z2kLK5>C@!jsIYOgujG;D&K~=rBIxG|2F=8d?!{Cx5fGPAHwBs>^=&F-0XoH
z$PGfk+#K$oVaHJ{X5S9N&F9!f6N@z;hjIS~yQpFzLr3xN@5iuf$VHL_H@{*Bj+^8O
zHox=VVTM#8WX$3*H>AqOVj)!yn4Q9jd$0&*Ng_mqus}M~9{(a6AtK-=QbaNr&bE)n
zKRP!P%~%Lln6zYVA%$(3o#c<j;3WGF2q918vp97!eS1+PieT<7dSfA2AJK<(BI(3`
zj`tJ&7|mM`U`;U(HIPMNE@}||_jfSX8b)D8Y6#3Yw;q0nVMSnToL)bib-)SsBVZmW
zM#4NwjKL-d$T#jKqJ%ZWDwlGWAf|{ZxK9()aIeHpsYJ|u&tTCw&AyriK<;NDCH0~n
zX_$?5f$?;vJ<OMh%i#WUaXIc+h%0bkgxyiiai;y%tOe#Jcd(9hvODe{V0B<e%zA!=
z`##K3cBC4Df9JtG7^GLQ2UI<w`6;@nwgjlF1>`vp5=M0=1hVQvO$f#nfu|7E7pg@q
zAgfIvkyMvjut;37sz$k0jY?28DoNF-_Nqp8gsT>)3sj@Js2Y``Y7~dRSh%oo*-%s5
zh?#1aL)ETe=(+?*Hfg&is*Z)BhINE{s$H#A?TS&gtF@|K@v3%lRlC}$+SNhTu1>0U
zC9B%yQMF4zYYs!Msg4D(G0>nbph4@9YpQP{N{@!BS{IHz%gd0<n{hS8UgKMk&s(8i
zn=1X<0=p((Kt4D94{L7%-&S?ykL$fBOI~Dokt}(Ut<{n&OR}uhtGwH>V>^!HI8Neh
zj<ecXNPvX33`>VlNP*IZVcJd?O8e_jN*P)xrL<+3PPbvYQnq#|w3GtvbUG<*DUtu*
zbKcXl6av3~{+}Pg*U#T~-@WH<=bU@)x%c8<4ZMXP#q(D&N^7vY;cF=C*EQcn`DnyC
z;8*`7>XOE-8{_s@DAUXE&uzpW(%<5l#&9!_;T9glt?)}&(bNbS<Qk_SfQ#4gs1|rs
z>jk^u#I4sZ!K(pp7knBMxO)#qOE1QGA&+wd?)8|^l<{a6*e{@h_&s9o$DY+PjP@Il
z!h5muug6UrH)|}oW8?imZpHYw@%XpH`{AP)|HK7c-~wNQpUgv8t@YqmjIZIDI6{Cq
zLYO&1gk%U(AYP#7TQ91aBWOvI0EZ+&2uT7?1WBSXFc<JM7pQ|w`7Nj-ULb%A`~~5g
z;01Ne1<D{>GC)?aTd^9v0Jk^emJ8f`LpNRExj-y{p9t={z}P14P=OmSN`MfLu+v=^
zh(jE~#~i^=H(qEWB$w!pZtw*c^MW|@f*A9HIP-!ebAfgq|6M%(J9zwe^7!xI@!!eg
zKhEPn#pAz?$A5~)e;beg1dsoO2>GUol6*r5`G%0jd6Mp|(6nQOUyA1w80YOI@$eQB
z58*Z9H3%W`z(FAK5JKW1r12a?2N9tuV8vMI!WhE7HuxFn&;y}wL$e?YG*;oD55YF4
zG5-xK8$1`p*Dv6Q=JMZ{^^|uDm3gi*d%=wT1?2cT!gtb|hOy53Fw*`WerR_1F#i1*
zzbQ|wfr4T@<^9){_ZR+HO`Gzfx3DL@ff6cI(0;JL`9A?YX$^S&c5vb)X(MWMoVlZc
z`J$P5p_zH1%>T^H`N$GwW}aAuc%(%XFwfI7&nrS3)PQ>t&nsb`SI#^Svp;ZyO6GGW
z=5v+c0*&BCq(4+LZ>wZ}W@Ua>&HPNq{H&1qnUVQfF>^8lIN5si0pet4@Ud-pCLU&H
z9wssmBVP3w5aL6n%z?D5ITSG0DPpcu!d$1ExenNk0Ii7mO(pZ23f3YjnY);nyHv9N
zAhFI+$sEGUdO|gGg+k^E#jG1h%nxKvP|3PMCF=&2tQAzUR#3@WK_&A89rJ@~)&#0~
z^h+%LD_Pb{EbFZ->*)>~8rdY}bu8aaEZ-}5WEfe}nb3{}EYSs)<r3O>yGCS*tHnJX
z8_{Oj5k&XHV+3i+!S`;)O-1v#Cn+LWG-t8@|67^|G#`d6I110PUZg4Erkj4ag$#*9
z&^CS}z77dlD7LM<DYk3M#SZ8mozM@uR(>yb<98Z(FJ^KQ-kR~YSnPr>s7L%a#EzA>
z#Lktoi2HM~8_(&L*Ae#*h?~aSo|RvUeHe!Y=pkNVD}H{ApSMW!fz%+>4%80R4%80R
zj`Fr6zYcueiJxvx<wc;K$hR9mJu5FF%{Ro~f+C{%MJ4X*py7GMe_f&X_lWT_YPLNu
zrQZ`h{6>p6e?V%_E6DHFxPL$@^d=iue)DDy1ux^9H<8L4psR~1d>N&FL!s+0(5gD|
zz6(Fy_~}7?2t+p|2YJ=te&W)oW(^J-7^iy2NQj{ABCuY|w~Y(9>*lA3cN2J~fLn|x
z>=KV5{IEnE^Lp{42yYdiMpy{HFXjFf+_Z93I>vo~^MLfeQzPhJK^|3@S6l-x@r!X*
z%zpHNdEJLJv*0mPy8AR^us)~pcN@lNP<J)bB;F$kZ5+}Z5;=0Xk;6wAujFu+kv05G
zew+fl!zd&V0Ri4v^zC|n=5Ha138_L4)S(B-H@Z7eZj>I9{wYY>7wN_*jF<|Hg=To>
zqj%H&FFB=}LVXFK*?|6&tuc5W;Z`ox4d#M>M0h9kb3vTLZhDfd??wCq&JFo+ni}LU
zXcj1zMv$({N!?ZODlnQ+(XHo#;KhzbG#bZ`^0Oe_xf);ll!W)%WyHS|eyu;3p2j^f
z-@_d;Ux%;jgSdO<Gq{)L!|<Mc1b5inguBD9#@#o^a4*hY`0Q=LT|1NT&;2F*zPoVa
z&m?XD3gD)o26%-};#MJpq{EeTZ^AR|ckmy55gvd~iQkvLE`Enn5ud=%W8%Z&15%}U
zFYa_gEU6#&Jl!SUAx+{=s2kyFdL^XtQSl&REP`{)!2@kv92R?V$5kBpCGk6qyRlrj
zJIjK5wTh)K+`M%b+RC4WKOm=S@UoXN2YObT#9gTUNab40QlA8^UAQysap6&E1~-n~
zk2|O0!e?=V`bSakw}bb*R~*Nj`*LvC!^pK*oQBS}0Dd$JkJB+>Q2HkB4Q>;ns8{l#
z5;QMxXkH27`G@@c`pO)hALHlk93JEF5f0&tg}2vm{QFlP$Ma2CqZTxuh3|?W4D#D=
za`+@6nx{E@bLCffetd=UeJ_7|_euoMPjbv9j&qpb&U5${zrBm!ewE{Yhe9FE;WXib
zjpIyn{Eu=>Gb7jY^EM8D&ME(TWhdfm`1!M(+G&m{a`+<S_i*?yhd<=-OPtFL$9alV
z`)>}P<?vf8*MR;9`0XnkQ?9Gm`7QjhGy?P{D&u1u`kBsu<(SuSoRb``VT8N^1R>60
zE#nVzcx=Uw6u!cEl98`-_zKtOXZZPJ9F9>a3~??&4xeD;AirJY@FfbdvYbMiQ;a;y
zwC&_)T5AwA-{SB^4u7dUQ`>!=b9|aYVGTb&!OupH^L-9~&PXM{-NMi19JVp?JjFq)
zQ7-o|GRugCLkHvY9R7|Gk;7sRb&UTUA#OCqPX)Mw3A3_t%@z0;!(8eiXf{8=zXaw+
zFKd!K?@2)ev1!_Q9@Bx_1^2<D`UZFuci~>Yd*I#r5Il=};f4KUc(^_#x->&{SDof|
zu~`gi?!btD9(RT90M9xD-AseM4FB(ch+{9JJ~S)8;gHH#KsRzh8^2z<8T|J)>5QfX
zH*S4cQweVN32;Z!Gh`Wa2jmIK2byEg!iGoEWJ;5kr3qxb1NtMzImdsV!@D?ql*8|E
zNVZS32Zv8`2yGh3FDVqt`I&TCx~-11PrmySGqDx10yRVPhhqLg8So!Tj9aABIW+n~
zu>kEg%hR90+>7`=Nf(*3@5Y>rkZV`JD!5g`oK5>#eD#@}d)U>R*l~~8{kUW7ZtQ1x
z7C#@won*J;zOvhKf7$J*y~}ae*<re=8UEU{xLa)u`!Uk+<&9#mk5_WQv)2qi-$L9k
zcQL$v-@sjTui~D%pG&X9pZka650S#-(v#SQ^-ZKr>E0}UU3>&-UMxO{6z9eJ#Lr;o
zz$dWB=tGnSzqu7Tda+yKdhu%MFm4b$CgS#FX#x8VumeQgiF~$*GnfIc!F;hxn!=5T
z5qvi$jlrViL5dBSSyp1!c^}gKgcKBYq7FG}gf}GzywiUNE%!xez)wNOejoQmK7qR>
zAI8m-_o63%Ot?$D9&hguP9y$}!i`cP=D+Zz#vPfL;s(uw!Xoa4|BiSQ_O4A!UbHIB
ze+A7qDTFQcvk2!gD-<+;pb&2<T*G0U!$A&h)K0?f{Cqcmn`UH^pKm2x^Qw3=;zT%(
zheI95NpqYqhb~4MIGloYNe~(se}Lm(%g^_7*ukNeW6n{Cdmt&7Uvf+{hkiz0;h6m#
z6SI7zIn0QKLd|3RJkEGAhaL_s9KOow3~-zPhknLSGd{!5T@-2_<hREd@8Rcm4!=X8
z=J!+<%>#@)3`>F_+{bnM2#0r42rB{A_5prg7QcY!{fyZ7t9lOYBD~0j5A(B!LX?_n
zRmX^d!yyi*IPB$cj>Df*sCk+xJW8SF84>mt&9f8=*E62vm`Q$aQ@*7Z5AySkjCb+#
z7N%{O!)H0XgTq-4w~3#}SI7AILmYmILQqR(yoSSj8F`+cZ{qNF4i`DRl*7{;9_4TW
zA#MrBPXgS5ZqAKk=glOv&cm7`niO;UcAPbM6LtuG5j?*WHnXpS;}PfYVb0$RtJv${
z=VbTl7ixrB>{uWvFf4Ql-Po}}7VJ@$1!F7=*1~pmi)NA~!a9}+Q*?8yW<AS=4H$9%
zjr}&bM-{s=&O$~Uhl~hnKEZO~(~vwG%?tQ>_W#ju;=S*dUiN+VH^n8co%;<v|Nr|D
zG>hENucx-qT+87idIH_Zy;FJ*WYR~Zk82#b=kZgTM%?uHX^ofeder!E*W<mKCTQIE
zX#(KP_iLK5<Lm)V5L)<ynh?14mo#DQKzmrz0$uzO%mW_9*+i|l{qZr(dkP>`G`L;$
z4%jh@VD+ekq|wAoPDzTTQf{jh^ZDF*eadGt=^fV!zqt03+TMZ3>TmuJXN|V+>JRn(
z_uQT09p{#Xn|JKmmDzT9_wKf*p32M!_dbP0X@y*PRXmM!p)r{BF`w7#bL(`15Hq=v
z>i@KUS}*BEZFMN~6=C}|!$(VhvQ;>=dv|m(k=UKtDV{!e?BRz|Y^Jak>5%2xP1MDr
zmMXJOr`KEfw_C!A<cYY~z53v|_R*ckeSLl*(KB|{q<?B^ysKwyVfXs^zVsgP^ypYq
zf4Ep%nog|U78I`RZuJH-wOu`-ILXj<%;{6&U68k$0+-jDh^Iy5XVrVXZkJK4GFy;Y
z%8Ft%tzB-9Zo6u2+s4{4Q^XP7(Cu8a&YiZkICmNPFPmQff#dzDP<w+bF?YCqdT&GZ
zP<<<Eg-g@VwSwK%YFXSqBr6xfaqSJKZlC+ua$nEbk)CZE{Nm~BuDbGpotxI&xO3BH
zqL5mw1}T(qOX;2ZnBI*L?Q^0sbJqP*<%<EqTq&O3djHn{*qRd``&H1ga(qdN?M3W1
zME%Cr%x|)#A3^DzT>1+aKIKluBve4`#C5Ulf48oC7Uhq65}SHlqZ@54<&MiLp6T=~
z8g9FC{T;_vt6=^9%F?^$GEdcevt_t4TZWkAG{q!0dY$9i<)k1bmakjx%AD&EPiOul
z6rDRJ_%hGP<q(Yc2K#zYZxr`h>Lk#r|GIKk_!-_nW3sxuzLbR<32}_#XF9gj3>uS-
z!M4)5<@u82W<xUEWA_d82w%y>JGPNFPW8EruMKj#F(D?I+>#y@y4<N18czJr2aX=U
zv<bvKE%-BUWiAzlPh!~fcfu#}9aema9%_N*qe1~{{+wFxKfrs~bn)I~jitDh$z;l{
z$L41m3wo5|WZb0fd+@|{d;5wTN~NjKMUz$9g3_WMWccN)uNFp7{*IQ5LU&~TLx|lG
zz9^jerb6?jNL%hhNE@kA>T0S7ukmVihLX<x*By8do{S}(NbiPQq9+qV6H>hV{qc(v
znIEG+cA&p6qs7Z$fubI-w0V`;DEgvlk;awW?*;GStD~Dw3?8{Ey7|(c;CQ>UzrT6B
z!_jBB<2~zdyQo(Vx5Z|c+c)i#!)$-==GtY>g0UnITDKnKINRf&=-HK;ykW!ENdNTg
ze1CdYJnbCo+PD<`qp)^lI2xvOI#xC*bT;Gkf;`Ho&DD`ggo822qf`jy(D~b~*EWpL
z%0+0NJdif8YpJL=>O7OtO@}&VlDF>t)AUB`P5b5YtUYyTxTw*s)ov)wmZTjeG182L
zM=q5_kG|rTa?0|Jo}H<^6U)bU?1~L-*s!UuXIeb%81C45q$=}2f|$t&b7S2t0kmNu
zYQ7jX-;~>HQQtl;Ofspm9UZui)hgH9t9_RQC+nvovHoVyP;*=R?(WXruA!Qqrj|sw
zakwSYwPa{dclq&`y~z@&UE7h^6i+nw*t|)X-ER%pM%p^IC#m<&p-8<bjh@QlPC4~%
z=_5zKSSdVJ`NgARbbkIE_wfnPcoMNJO5fmKM)XkqqQem%Ts~T;9bO(SN_EG_O_K-L
z)n98^K4gj42-`Ea2i!daGrNWNW-h<|TFP|_x$Z!EsL+@cGg&N3&lPU!IBJpfg0{M~
z`tD0IpF?N;Y<xM9SdI&`7~=R67B`9L#b~9`hOr~}d6QXr5ZqE6LyHF0Z293bt*$_8
z30Hk^n@-Z2{HCk-XWqO~)QZ|tNBKV>_50&XiNsP|n9AILV2K|vDi&Sqz1|6L=ELAA
zn6q*HVD!38QViA4q=NN9ddZSZulM}vz=@#Fpx0J7jk}M(dhA3*Z!DBduJS|JVcd16
zC1R_KSw56`Ec4(eYoaz=y!K-#$uv?1Z$m%Q#8TOmQ>mDszp3@Wk;cMOz1AOEx;XRO
z);EMZ?`<6Nt{MI3%zjwgR&X8*<|`yoHSUz)M575#y<|l7zFH}qDa~9ZL`{9dAGY>o
zj9U>^<3{Th34g-;(Zzi%%g<vdg`27>g;q?FWYbZbe!h1+IJP6^=`I(mW*6oPB-gCy
z7-;a92dzz`A)jH}?8xO?<Bg8?Ox2(#IOhvK;jr}{>`6jyiW&=e@LS^J&>tY9X+*m9
zZc|K8jl=Sq*oiFRTr9c&*w|hnR&74L<gOOo>->FdgJat}0;3_n%Qj>Slm`r6d%O7f
zecNq~^P7gR*czYfUFu21-Jb8;>rsbJ<n|~^X3HxV3u!KjJp6UfuRj=?+}j@NHFs6G
zYJzLS(boEqDQufC9N5u+Y*WNj-Dj@s-rJo@TgwK`*kmf#St6$#t9AD7mDW}+8C^@K
zm0Ih!pI2+1`tA3fOP^P5BA4UaC`T<Ux>RdQZp>Jmx-1*hNvK8U#JZQ~4z*0~h_nyd
z%L+0-*4aB7Ym;Vw!^Tt3h>|-LoH88RJ#=(B7@3aQJ4zG%_Uf{sD!ULYHkWu(!!(Zk
z2=2yeBt|sGeUF&KXV6&S0{-<q<$Wb(8%J%CDo;^eSy#DXTgCP%;X_je?Q3@!OU4U|
z*LQ8q9E66KSqX^}sJCNHKUeambUL?M7RWssu2NoCyDz-e7qRtw6GNpn?)Aa+`sUI3
zsHd}Bs@k+@zA{-qY-_9tSpCDzz8^K(N3D)@YKNz3)9k>-bFI|>jC=PANw@Dy4qMmm
z&Q|DEWVy!KzG$~v<`1j=4(z~fqS`|z*GrbuOU)*&cPf}pN(JeqE(A4QzJBrX?~gcw
zeVr8!bLKmOzoNRN$K%g@fp!s7x@E9IcrkZ@%|tr94(Q4?D^bC~D9r|djw>`^1^aPT
zlfdPNU>49*PcLoOK6CP$mn_fhtQH^74F2kenO{G<>oWSrkDgqHZy?FJ{bjCNWu_ji
z*Xgck_UkWMx>OJ<3Uqq0q`}bKXss8=&V4~&BvlFGl$PxIpi#`A9RhOM<soNP23~#z
z<krRRO<HZ^dOz+V4$k_!Q(A3$xl60<GIe<emO8cCPE&Vdzwp|SGZOPRMc-CAIn|`p
zJ}8iN9d*#>=WU@3y&J;$b<a7xEp?1U7i#7eq*(@EjGVC{YbM$8Kz!?&={@1eozV>x
z`g}uyV8A!j95fu-I&yp_v^+n2@l0q_*WRACuC6^jsWkfSf3KvmLis0|S3wU^={1Vz
zw>0B1<?*VDn>Jx|O$V4s#a!)`V!7>(9A5Rf__;27)3#aSQy$ym?SfHZRzI}Y$vh>^
ze3*G-0VY<u^T$X2=n%{eF3~+3$mPeUKIK?tDv#fONn=oD$LBT(#vEoWx5fuhKFqry
zE9KJ3GZ-2IyEheT>nDN@CQngyscWdALwIdRxVvb3fs|^?{1kl>J50~QpX^WYY0DYa
zq?wSGmBTPtF_HC>d%_F0-s(=LI~IsGcSNQlt&{cLm5~N#Q^KBTi_IBg&2hWiW3#$!
z)qTOxkk996GuL`*Yn_$#-I10NWF=@4$oG(VMCIxbPT)`|046wDr2|v1$A>z#Vsxl{
zt#3>1r4=WmQmwtzT5PV28-`+KwzA((6<mM)#<P_bb#;XW<9ZwfCTLn93F+)_tjzH!
zORf$x)|;tG?(S~G5TKsl-MXfKX%~%-4Tk=X3a3d(W}YUdFfOdiR1G^@kzyy3eT%%|
zP{(<i%+&)+wOS||74C}n99%)BnZGuUdA(zeLO}*9u%H=1mv{+ZVvfaM>Z&kcL50a;
zR`qya+?xPNdi`Sk!9qCE8SBcAEtCp^)>u<^Xz}T5ittot+=Imb;vV*RMqGkkej0Y;
zsp@t2Xk+83`*pPCQ^@iU$c^<FUydH5x320jfu}Yf^5~(*7#m6lkN?|_!;SiiLaotW
zF(K%FwaenGGB;K2I`_LpOQ@=<*}4Zw!goIjzaCB(HHtYGF)US`!DCF&>B<a^MpuQ&
z(P1vzxMbHtzeBBDzCZJNc=0>Mg_Fh6rUv2VKRegC-IK0ApZn|7PD=R=1dkzQS<4~S
zREX(|4T9%e6~a10=DA;2bPJm|rZb<}NSv6h4AODY3yuNLTWOc(C0O(s7Yn3i72lnM
zmq>#uz9$DyWBo9j&b}PH5-WyT{GuFOFWFT5Kn`xlIXKz)hgNanRp}BHzho5`J+Mh<
z<6oA=SL|dxQSnonUuYz?yhl|0cs4$I)go3#v*~<(6&L<jx=O{ru!_S<eyfV(EEl!j
ze9}WI{>3c5Vi#BI%_niap}uqI66>Y^RKI&D`yJ@2m%gv!U(Uhp(!Z+sS90)X>8mRK
z)hv$uSL@X$alK~qCu`G+U$HhplUlVlnMe<zDL3h(uskW+Az5%%4N#Xgw%S8xGYn8C
z$P$%^R2j=EET*VxjyiXv*JV!yjSoLe7KfV7+HzBI$^ZpkQu8HW<E##sq~v*$L=UUP
zWKCZ`XpHp5?DdYSva)hyQ*r@I*wbED(`LKJ+-i}t5{J&Wj8R`$@rxq&ai|}ti`|+R
z@LOE@IS3oWJVD3WiynF&ncWoA4-7y~SRjOv(c5|?S0C&d4+{@gW>(zKR6ZRLiYqhk
zb3c4Uxa6478DGfEDQ2Ym?xQiq>GD{cl=Fj6uwKR8Xfqi<Ksf9)u+)eHprZ=&57JFw
zIRc+M&w59eFVbz@#O71{hua->tuLLP&NbrgS)AJ5+r3zRs`RGN#JY(qM(^z@5I#CQ
z;_D5<l-Hk{*cqA}9tow^4L;KuAsvnFI<3+Gr~)0Rog<nTsfTMEEAt}ki7I|Z(9+0)
z<<Cl%Kj2!9e;PhS6rU}ET+1@PTQIA57jqIB-;;xH<Pk07m*wCorbot)D7XW))X(vG
z?|^g}e7dsq_j7z1Ka#~U5@10Doict(C}8@jT)Fre1xL+e_3N~#gO^w~-5PF19hY+#
ztv4$5Rm0_!@!feiaZDNClY=)h-7<bz4qn3?Q^qgK!--?c_<<bU!5mY@59Q!BTz(lp
zlEqPe*gw^DPQg2c+K=k7Mk3BA$3LEp54?vtyNvJ4!S^u7l=08!;5E!KW&8^{_#x()
zGX5_)xSu(ujDInU6P?^Y2q%t-dS;FVdZ7n6FnY<3o3*=vOW}k^)t;*uo7vVJZ)|mj
zDl#wSn|K={Hic1vTR7T-CCXsc`XVNULFMJ5Xg)Bss+lM=e_Z7WMg_Li+4yLF9=qyV
z!KRGF4UtLnM75HKH&&%&K{Zb$;huAZOSoG@E8eo@zD9Zumg+LuQn{M31hMY(rL5;!
ztsgQ9<;LaErLgp{`C9z(nl<}9SHxHQCyi%4=W+yVPK49=9O2vx<=k_|+X&acjOUKe
zDeiAFekd<Kr7z>z@!7so3$J403o?GQ(5&!_vpCO=B)5#`j`I=L3}pO3PWnf<AIkVX
z!qE?i{`;j6t!JtBS8LpxN+!wZ1e=D>tJCYwUxGN#3g6fu2nAD})pmnRZz!&Dib6@@
zyO`yR3M&eeLj|HizgDXg#D+R+z}jxDqqT}vL%lMluH-s|Hio{tM}WS|EpCU86^%g|
zKZTtuJO)=RdH5ZKLo>rkyqGPMy_#*OtkpX)Jtl(#8U9T$X0_}bDP3b;t`a2kvU#+0
zY!@#Aj0=(}b58hWue5LP-o1kv8?6QiH|$V)gpg!TMt%@FY1e!fy_)-jjP6#^>$xN{
zx<^GH;x>`deJc7s=3p{<k&0f!?JA=OR5Za{N=A>U=tsD3$mnG%I?NnOMvoJ^@|P8x
zfOQSjrHr21Mq2Q5&}V4112RY+x6onO?y2e(EsZVC=5i~RL7F40LsaGi=Z;nNC`t-)
zptR%~xrys(wMOpbaUkb=h^fI^ia5jdg!LtE@u1S;wX{kCDzQ!i{AR(Ww75MFKPA`|
zd_E69lf_ZEPjc&^C!x)D??=}l-VN)`Pa)Aj3)y#J*F^WoE~!-cM@k{Gv92Oyp6R(u
z?t!(m`T}|=9nb^aN09;oR$a2V*e`^HV!6lW#Xkk_V7bTIK@UkKO2;c506nDDX5Y@|
zeRYO#w9fxhDbPCjCYI9sXbzdO>cLhW!JgWs!R7W(*Zmk1zRI83hhf3aytrXx|ChHa
z<LL)ndMJ;`XE(e7l|C!}fP0aQAIaj-N#xSV_$i?St6j3JyOh(x^p?}X+LwycY)Hnj
zPcR23UM1s~<>8YmzAuZfRKkOjYEh1VvtY`}mw2R%A5r65^WvWpD&+VpGkN$K1?N>K
z9=V_o^zTx5q>R(7O~$jjmW-1QBI8+JPPoidWt@2`>OqcAvo;yOC@+0#Z5hw<W{Q8C
zbdidm$cs<)Cdbe6_zuW+teUC#DR?<hZ<6yR9Yl_QJSUwGvaTWHpU=UUS=W&9FXZ4K
zVO>MU|0M@sW?e(Zzo_D%hes{p&@~9Bew;@a%}V9(Smr^`mFayBt!and-j^eRV1hn>
z1<<6(>~~xV3}>bHJ1+@}*C_&Bf|coK;)CLYu*taL*`~4jQd#r26=R9>ce{KkvsIAS
z-mSdo=MyZJV05R0*6|Xv4O=678?YWZw6CX0Cq&9)E?Sbjj#mA2nIBd}+@ZzZ&9s{5
zaqb8$b<fdb|1(~v&{J!}8s(p8ozl~gdAu5CW2`YkX_>^RuE4$zjZ>aE#;`KR1}LY#
z5fdqSr9_y$@s7<OUlKlF`IhTPl|Kq#q-U;g*pV1L+OzHYE3sP7%F8C<g*AV_3yb#h
zD(j~u7t+P*<*Jk?D<(`Qw2XLx`p(w#Kr9$8-e4R~^<Q}9)mD&jS*&%Q`u5S1vFoUa
z`Kz!>zx*`wi-#0`0eiEG6Tgu0T|zES{aD72=i$UJWPBgpRl(`lMU+p)Ss&nX`)Qnj
zzekjEC$Zk7ta7juNA5&9Z&g<i8zTw(_5<>QZTk3Bs#TG4RXK~gG*2F}l-_n+Ub5Zt
z$xExtdlktiH03TvGnJr*YvHR(EkKq5ccAgRnft<Gicxcfj;UAhc8-r)AufxV#wt!+
zLB=o3!-+e}_z}99gVF&v#mcdYtK1aaJr_SElq*~lILjnT$0r@2^m#OA-_PWIcSiY+
zSCplr$VVRiWDn3He;Hq+;(Ky%r!=GDm#MgwR;E?_w4!Mjq8z#S&6<~(UOD{{HU5!z
zNaqwh-v7!opR?kk_%V3N(pXUZHORiKEJo6jjpBAATbG3oCAK+xOo_&(j)5uN2aP?U
zu1ytF%d^ITqf@h&mws??GQQOi@b}kvx|>}CmcI7}0$XP@`-LwIF86F&xUOcdJ+&o4
zEy1hate3$QiyFO*?tM~mYB?D{0-rX*N6|u<i>UZ%1z(3bK`wr?<{9SybC3(U_$lnz
zBDoO8+&mXQLpW+8y9y7kOsnuIGLa|@NBT(TWu==PetAvaf1>n6r{L=;`1kqwe;>>|
zgEV<<o@FR>M3iNh0NPcYWT=eq&cjKD%J`l<oW`__@5{qUhRXOwc{s^X89$JRlZ=t^
zLwPt^K4tup9Q<~cxiWqt2S3SeB;%Lm;b+uz{y7hSPQ~xZ!=F^~&*kCItN3SB+)lm@
zDt-zwl-f?NXX1r2J;y0N+K%wQNPglT%+cjF1y;}Lah0`8Z}*bungc^0PY++nSE6JD
z%-rGV=q<^73SJWm1%F{agc&dKAw}xT6cG28@vIgl<3zEHXSEO+r<RuSthO|PUW<~b
zIG3DD=x6Vb!0H@?SAa;}&92Ab5e_#wT>Q_CkvhL=W-i|;q%1L+Op#rc44z=xb+Mq)
zu(bVcZXz2F^q5VZHLJFT3D_1+a@k*3%8ph*oy<a3_j2#Ynhy7Vj3pJP-Y?_3>5c#u
zr`|8)d-8DV<uZPeg0q(frw`SD(${>G(~)sXU&eRm;gr6N@5#d{eHp(f4=0Wz<43YM
zI1ao+RQ#0Y+stF-e5p<4_{X#HHSi|k8LW)&lX2NsgzF8u4D}h!vqZmwlkAf5%kprd
zN5+q2anJ*w6BR$D`7fep<s3BoT>K34c9HD7WNpOE2<b3S%UXPMd>l!kiuR0@jI`zZ
zI{Ho-ZiL+#=V0XcJU-EeBw0oW;HR4PzS6^vOp22ZhGW@k3==Xu@T&H7&Bxc>uwk1m
zykTy>w{x3#$6@Da*X&aCmY3EH#X^);FGlWh$R8W_Vba*8C4!VQ8JArw^uA=S%Swv;
zFa+oDo@8;6@GnC5Sa?l+i}yh9@#Bf@mv^^J_mpSuD{AO7^jx&oop9*O^qcp2YDV3m
z4_vkN%;B#2=;p5UmKNd{4&=H6x{xzR>M0I(yiOj|tN98G)d^!$p~+C63f8u_*f)81
zEnmCe=$~(%T5KHHW+*P&sMUAuzPxvOpvj*xi>C)X&4;d<`=_hcP))&8t^qB;HaDv(
zUwP2#8ZlnqsBSVlOU%aFh9Vdb$|f=|;Me~tDW25n0s-;nbH_$^{vTTBz^GvlBJ8c8
zb8Dy<?ZgcWG@4}Gq2dd<xcIV)FXrI2IL{)R&fXln2sgxJ@uPY8hgE!k9{vjzU(Un-
ztl}5v;70KeDt=PM?X)7V;-}!ZPP|?&SCNVzQ{$f%=UF3@>*2l}ya=~oWa+;@2VW;O
zs`vvrc#)J)@ds5L^r-dblepec-??;Iqy_c6FKK?Gwu41lRPl#%@M>v~ia(NrTcx;)
zKdR!Cf3{wI64z@sfAlH$N`yTayqb7c+R@_t+x!@E<iL3@4V~_=tEEZ{pRzo+hJ|QH
zm9etIY>Hlz<7)PO50=}SOM5-5P7awWQ@f+Qq9jsUA=q-f9f-CB)8@xch3xA7dG1H-
z?3NW$ygCO5j~vgpN8RC2t(5C-LGEvsu%*sXWh^c)0(r$b<bBue_Vid({|mUoRe36^
z;??C9I&BN+v#!#|eG2qp&ypAWA!rOOkPZp$uMYg+DR^15z?WbsOL;P-xGKp^NOt1k
z2_o1KEwRH+Pd+L-9o*?s-gt^@yixTJ`*3pY`dc<jYa0gKwM{$1ExiWkbfA5x0p4OS
z6!oTR6IDLjhG=}o9NuoI?RROl+jch!;(w6yn0KwAw|!*BCz%aXmddpjo4?81EIX2o
zPOu+Ytg)$O#@$#Gs1w^-ZT6>2Ozc&LGICi+gMht(%P34^)}i3I2`Y>4Cmj8WyaoRZ
zuO~WpiG57STTu1&$nnQ9$=-q}IV}<@PJ>5>N{7pr%0FZLOp)R|7#Q7F4ZlHedB7SN
zY4)@8U`tQIx^;ss@F3hYJ$PbsR5;`IJZi5`@9m1T5D!y47BLp!Uxao!Ozp$?Jb5yz
z_!($R#2cI|R`NLnj=cehe+%6)%lKL0m(;!rzJL=ORGi1O9DgwfKgT>t#!u$pkCIQB
zlFnhm(NBmc-7lVFZzaFdPvqGV_Gnztky9YkY1W(bog5Q|8_B4uICWmgJyCcXrdE`X
z@`pzx=)y`B)syBk3h%M!;isT6$UJmD4?jaV^N_PRzk%8u7G=n#9M4Lu`|@G{CVs?J
zRJT-K14BWY*KUt_Qbx&G{K1kBRxDKv83vE3o|c}nfYsg>swD^2o{KieP?kj7#*MLp
zbKjNyE$?^OJl*4d_^B$b^=+1D4ld2koL2lTx1x+M<l@|lGQPNqW1k>N78yUeiVMGC
zi6-MmbMR-dYcU&te-55u&MU`X&cVOUy+OtgtGHc&$EcdlDa~_A?>sAfTO!FN$3LdV
zKa0JMBza|gZw@}g5>3YMTg8PRu|$*c`&V&sge97cKd_1me`JX!;}5F1UHGk9ZzRz$
zTF`r#Ui1d%N`%S*&(Tzt_oZ~MRlc3&c{0<>SqxqEh0VCaEjDdY!Q5fRCAPdE^OJ%G
z*(J6kU0qdHZZesof2X*{La2CqYv9wNILJD>4Dmj4khLd6m5OBfU2&DclNw?A+L*pz
zj#N=CSNX)jPb*jMsl50bkSg}!jTa!UI@}QIQsmyCLf*GPUfN<fID0;M<(9(IkVhf#
zWraZQ$!)?PSgv$)&B}5`%Ra@=NZT<_@W9(QZ>*h9_iA0H6x;6q&A+(TD3q2i`SzsV
z)zSD*BO}LM7e{Ekfny1GONY?^p!cHvk7&N631I%fzQa7;;F}J7LGuIRDl*RfM#dNO
zaMDm@d^ry%t|{Y(3CD=w^l^_B`6hSCGA1SaQ$u8~cC!n5C!2Ui!2Y+G&RhR>XXP)9
zgyLH}gwAB0^KbE67M>|+w0T;pg;ufFY&414^6Qze$mKbiS5D#|GQK|tH}UwE@x3xm
zwhHWZUP62~*DtLI_|P5}_?5v=TE$PnD}lJSWo14OKcnK7Jp2yAF`Gg9!mq*2kt=3-
zSuagha`TL4)$Mv!Vppi{*Bwi3vio&fltuM=)d&0Mf?4sw{x|AFlvgA1Y{dtAC;Rsh
zy3GB53reVy7FJQ}KT6z1Mk^8bHmW5B-K)mkPrO<|kE-Y#acTwKuc9|lyC~>M6^#(r
zRnTKo)P}!B9kb6kd4z$oQ|nQ~I2|j36<zdHoMK4m;Yo^1=n|DeK^F++5?@79K}mOc
z9ST6G=9ln{gg+Clky>^y;Ut$#6;dI8^aEUK*fWv#;y9-QD<%BV(bis|v_>jxGUx+&
z_$d{i&%;^sk@FQxkT0y|>`x3?E&H`EEQM6RcHy;ODQ@kcpS;>nN@tL>kLlSx+YFvc
z=*`e%aQc(N^W{mY>g{eK#pQgL_tUJWyv^@jj3_I?l<IBhiE>_gv0w9Bp$v8M{7Nl(
z)~ht!yqEg9$ZfNVo>EYoa15u&$Z22|coJSj(y6`FLXTl&<fe0GFZF*ja@~VmVdY?5
zCY7@cOwxdKb%=#K;J@$ftzAkl#pi0SZO!-Nf6U#Vf@|@)mj3=fss8+O>x&uYjo_Zd
z8-<gsaiRUi4C@3kemIMxJ>mZk>Sg?ta8w@Ch+oF(G|B1U%&=_ldX04;8Q-~zV}~{A
zG%|iN2ahw4k@3A*95wtJ=PToC|3YVdjp>x}!)ko+o}BnO{VosBYTSoF|1ZQxaB9{h
z(GRNLVETDy0Mkz+iL4TA+u|Jqf8z4W_(CquGDXH0S8<#GM7oiT?_I@l_aOL!f*;Mn
zUtt|ij=z5u7l$QLjeltlUe5I?$3Lm!cG}sX#y^E~%BXM3<suzUj(<#ze-<}n+Eo0$
zRa|(5bu~Hu{j0dRo^>@De_$0CR#;b)@ds7h4r<71LpbSbs87^u4qaj)>!|W~%luxe
z(7PR$COTagwzO5P{_VRova81z-mPI=)hjN%Z9^<pbPD2rE3b$~?2Ru%uAm4@#3?WB
zQkB#t<h&JRo;&*VmcN%?tZ8<4HdpWVq;0fgWFpqy*jtOI*jVg_$f#d>q5A7pm9IE`
zed{wTuAayMZ6Jwsy86R?BNuN7g?$72Ql|2kF>RBm?2-=pYa{%&pnt8F{N1PQG>cUh
zkyj_}KbqPV8sFa9F;d~&9&R79Ly!H1uD_Kh>r;{TnF{wFcVmB3FyQHL4hpXCiK08?
zA5k{Av?mhnG)r$ct{;LjYj$*Wq`GtVyZj`(_ltMbz_xt5I_s8aU?4a}Yj12$&8|aV
zV1G?4;A;`I+G(9`C>6NSRvU}1qp7I2xUS4o)-h#F%$&dRM(*LTRzuq1Bp~K&njdCI
zG;oseGQKkpC;2Ml$8vF&=Q6%mbH9>~ol2<2KLu+z%{^U^vb2|o&d`zD>Rs2Nb4&ku
zcR1-7SV#S3YJYs^V6s_J+@0!HBg`!P!zRQ2_0(Su>{xU4ma6iuT18{8%h`IwH4qX0
zhil*#r3QEfQr?rqJQEfXjJ?B}SGh!_<vhVW4W?_71)5J2j*~%aapyVl5W;oR&6BLf
zA@<Lh<H)g3%CT9W_yDIa<A;@0UWGKwP307&f|ES$INgkNO^WT4_ET(<hy3;)$iv)k
z&M^8W<l$GDPSh~d`7x%Gapo;DzNlHnpJGa7{G^IoY3~v8mhoFO_bTbs=HWMkCZd(n
ze?ON@j(=E9$DSAe6vZc92G)!!?0-z=Sm7}!!x9DqerRy2%g>lD8Ko+71AefCx2JKf
zBW!80IfM0q=K7k(#u~dj++Dh`yx-8dJ&nz!HJ-*ATT_!QJY}#}kCayh?A479chFuR
zZ1gnO+r8^MGA2=KpHDWVBc4Q)%V{<_?B19sycX4rQ&&)uFF-r8(M*Z?37J^4nss))
z4fa3QlHPF>)OJ>vF1QnlRVMU7-e-j!0(82$+}EzhNphsMS!w^3ir=Dnko%wueJvNi
z8ErznErEWLi=R?(EqX{UenyRdR``h2r>1`t=V#r7HYrER5kF`D1eIGY`h~WC83s#-
zs?{xE)=NuIl%BT@tfNPJoOgm98%(e61q0Q*7mT%s2$y~**5XMkl5y}R@>Ss;oP%=@
zmhr`$_|>dE$oSqIT*KOfj33RzX;jJh{v2G((pAQnb8wAFYZ@|saSq<k+J=l@nu8m7
zM9KKc99)xA-p}UY+tu_xm4j=gEh>I*4z7`QsQ9N<yq5OXsrV_)A2IvR)+cE*GCjvA
zK3bdV`H=VzIjv30$*eNdvN<f^B#g)>O11{(@5>9hBk*+APL~cuH(z*%o;KNBR99T*
za(0XxGimJBQ)oHFTvzs6T2N^REi89rJhv|#;(48nGws=QSnkO9Ud?xuzEewOg4~gD
zt^+P>g!dgnOTjuL??g&vS50Jpfo!?C24L)BfB%>(?8IUT_8$h%+mzVasaUm?C6az;
z>)UrIsw*Wq6v%dVTIgI|!dLTt`})Xd-Qh?r?+MP^5Lwe&UFXa$iI739-y-zAeTSsQ
zYp#mdU^%1!%Qf=YLOpQ(Kc<W=mU{ADNbZ|ac`OQ8>_t6~fFZub(nQ7=a&aDuGQOCH
zlg2LNM`c{zrO4^W<@7ZVQ~C-{V_n7<a&b;y#uxK&N?*p0=HXvg@xv-^qur4zeoFQ#
zQ1YcQA*XXpjgQ@w%u8f^uY$jU0rO+7hlEmZ=wG0p@Za)Sm+_P2kEh^|u{4zN!&w}h
z8ha{{uZ*8U`XoKy0H@By&kzn-<i!|m5dRCS_^qU0lM$9W4r#8COseS~dlTUNj1bBr
ztK1|p#Tz5xK##wmyww%%bIru2TkTyNlkN_aw$}QAs%tBQwXL4s+S{uB&gpRu?0O{B
z-?gu|)}P$)zb&(Ev0dw0oc8F9yDO0}xyyUZt@WLWc<YIg;cNGGXLoL6)@>o~K|8lq
zgVQ^0-Tq?k0TUP6yDeQ$hfKV~=55j!qBJ*^xfPX@CiW)PvPEZHfM>xOff<%g_m>u*
ztC-f-iwBg$1(tKRy+dL>Y36lyVLW@vK+XpEyGM7RVab|<JJ)${u^t|<a+bs+17W|*
zTwPaRd~oR?r)0o_ec8GH9^HX414>1`_;uJp$m*oW%;c~5Ez<rHoKW~DtSZ4epy(BO
zRA<c<P%Wga=Bs~xVpgkd+ayWu*>G#ehd(BW>z#xChVY)vyY@J&_1$*E+Nm-}rBK(?
z5NeBTxwx#zpr5F=4A)^Ra#4G@*6yfB-Zu0j5qZ0*A0cnrg=r#33sSRETyIuBz=bRD
z{4+w{^mO1vh`DjGOwj8^V?(*kuaiX2M&5|OqaBBm_?@<)dgZhb;c9)MR1P||1vM_I
z%o%+9!6BfCR{h?D{+FEz$P`fnTJ_Yy%fxJRo==Uk_;|Q{cG@1dx(&{Xev{rRx+k0Z
z);5oA>j;bleK@?N-lrU1;##-OXdEvr9`~SsZJrrAxg|E&v%fpq>h?T=Lrg%6xB}BB
zXu+)ps2$nm(E_89zRF_J%N<%iiU1<f&3hy1ffQ7WMZD2CcyK5*-dvy^NyP_>w7q-N
zfvMWE`Y+i#d~gm)Ta3kRL%IU5D>7W(Z%#iher$L-?HO(F+-BAmPmOo)>9V;Na8!Y#
z)8ErOIG$>aOiX3I;I0EzZ>@ZpPgg0XR%=9l+yj%|0v~aK?7AIS7xf)^#>)g_U0U#0
zryaFnHx8Vv%$!SCx+`7zXRt`YO@US%gczTV54M!m-R*K%vC3|Ft*#+e-8z<gEQ_fk
z5KM&v!vTjG%Du4iHPn}gae=+;`gc5&r|<PmC+Z7|wc1j5>4xJ^&!2Q@i}~1}1CI+w
zg!FrB5>{)n`n{QNWN!a_eX6FWz3%hW7H*6lI`@U<^Qx@Qit3!@R+gDblG5inINTly
zX-m;)s(*vL@OnmDUsR#5Fh;(gbAH2<kziTlaCi0$2VQ+GF_*fv(quu2P`m0rAX9c$
z{7_Dh&DK9wf8_zBS0*i_S*S~=)G+FaJ|Ly6(70i|qQ2NsTv6jLI-;(gzU`cvIsf2{
zzF=K}J9O^px1Cp0iqZ2ejAskR507VsAv(E+i1}klNilJJE<DrFVr{p#Z!u?nAod(y
zGqEc$zHj%lQggGT&1Yz+>8&tt>>Iyk-R}9mOSZ&?Ae=keJe}MY^0`G>uCZF;tfI)a
zRX6xa{GAKU#~6*{Om>l(M@1c&2i#BI;Yg!v^?Ip-4^#p3sLVg!NaFePkJ0nWHPtjb
zgB4u%K2y#hR8Agrubx0?+5NTPaG<?K^tN7d&^MGwO|2Q&(AgG_tr1=`hrHqba;Z4b
zG_p-_1nU!-`=fR{tV+}iW70bG!X)knlX>-O*Te22J?AQO2D#>y%7zriM!MCyAVH1x
z|5Vp-V9nN6XDc60)GTZ+`C7QE-a9bck{+*aH%FQp+P!{vWnE?cx1O7(E-|UC?`rTn
zntX!+mtoWN=v6xs)H#2e{$*gmm)JhykJ{4~chgu)C{U<xe>HP(&>fodH$TzUf26+^
zlS$_II3br#g2BoVI6f)8@U7!63ih$e=Rqted>Fnd#zLXFpe<UPtaW%N!&8e`Fm(r~
zOwZ_ChRB9!eWz(;%w!xfS0C6%OQSPG1D0w}lJcs6bh!t4g-ENB^GY?cmZJFZSyNmM
zB(gDJ(O-xdy;1Th8qH%}<Bg)QM&IGJx7nQjb+LgRWuGz>n<`38MP=pw+WHnrJ0S!|
z=WmFF9O<y$5ZjbA8m?#wn9D}1YKMl>{&sU+RiU=6sLa!3u$9#hT(lwlFQI5~rUU$n
z*9aa0eX{P&nJ46>MOEBT9mFufb@78t=QpG4TgJQUebH?_!I6fzwY9#v)!)=<9Bb>2
z2O7Fuw$^EbE!EUHUMdxb?ZF{`wRNz(yvb4L7z}ys@I)GHz`4)R?#>DyMDDP`qiz({
z1(H|UWUsVHwj)F2kd@;j;c-u(uFDY{+Symyl}!4a_3?W9)aIsvrp~ahrFXx<Qa@y_
zZ1r~!hU|6q6&1rR)lpw~s7xvj`r_+CXqD`_Jr<?h%IIYUNy!DiOZkLQ>3_Fyuw}zi
zSMx|S<<xher8T{?s<a$5I9evcNyXfmm)mrfj_!TE9la>?t<ct77^hW`5US>sH6%cR
zs?91;vCXAhnwFYoOK0O*MM}{06nyu)gP9DJF!^k&_lkGHzKj{kYW=0qqqrYs$7PlU
zqdN7-AYUk4c;%S5v2l95tfAPUE!U;W_ElZ+t|wl3>c<9W^#xO+G?mevck&flSviFZ
z`}=7HSm65qIoe(3&~F#l5azHeVWmx{`*mtdyk+`eSKF|)!xVJ2PDk2e&GzaY#z#Vq
z?S{~nfq`QiTU^zBl@=H=I|i)B24AYdax!^u`1tgj8d_OI?a;W&9%Tos71k!XH*q`j
zsjq0?n_AnVEh9^|0-aWCa+)qZ_&Y;k<Dj#;wxB@U&{+9QA{^Y_A$;Ul-a(&#u<=)!
zx#pxLjAP*f9&>ZGXQ;Nkl1kSC9Y8DV068ZqC07>`=}9Q_nY4{lxs&Jd{-v89{|Z)^
z&z~-z+kjLpNcuOBu~@^1LAh6l=c+acr7QRBtUN8yP(_)gae`LYQag?hs_FLih^qS6
zwLW{a*i(W{QTo41d7`gUo}~LxU!``*omk|Mq06H~on%DIdzIXlkCe}@SF}=BQ&Fi(
z&_LNZPdH|T-fY&QXF^s?{qAm+wEM@lQ|+Q2#A4KLiMrBDQbmuIX73}urG@3dqkiGF
zuYE03^`HNVp7$m`apBZ<uShm)tZ2_yA`LCj{Yn}s@&Ko^C1ZMR<yh|+)bon9ed84y
zg}#j&Ghf?Cd1C#RXFJ&I#64-XDOt+Xa`4(E$no40(1hce8*^4nSKhZ$B+S#i7w1D`
z=)-#cVYVYcLI~f0JjJ^14B>ae`{Z);-*RMp6nHV#LNunBJheq1#o><JnW+Py7t{9i
z8_beWSzS?CSJy3dq$2^VvpBLeuxvQgEnHk?cAAXkrp(Pkq$A|$C@=k8=7GV?_o-Am
zwC+2d>jqi09FOYHEZr#zq#c%*MxYVe-Qpk4m6R9@Wi^mmV<m=@>lGi17|H)64=Yl9
z-Y)*>Y&+pn!;eO029FI5&egVCx?0@5{&=v$R#E@lpVo_y|1|w8ans<?u^~utE0!$6
zk&rCKDK8Mc8Ld{pEsv6;&8Ppp0{#UDxs^g#?=s^(ELqBUSFLtAgO49s4<Q<Lx{q}y
z=}ax0v)66vY8;^R<vPtcR&ELYwc5sMe_OP$c{cxytwtXX+2Yf-_^E2x#plmaorYG@
zOapqGI`)x?++?}kCZ9CX?yS?=XT6+R(>qag)8ijmlC#R=5c%YQS#Y~V`Mf=79R<qB
zMZt4y0y&Ra^ME`_Qj7#*$*Ps${1f+<7d91Wz0*0z@(o|eXrLZac-{$pWI_-y9#pFZ
z%R%rKYMNYAMGiM3zkjE*u&kukQF!12XY`GgPCQvLsV!)363cKL;Q5F3y^pOH%+JVD
z0xJXCI`e8IFKbA9MI{q%#W)zcfT3iKGHq(%fg#LYz*ur7J7H3K@0;kIR_?u4SfenD
zXYW`atW%g5K~dkmYre1&GP+dn+_S*X+JcfoxA5BkSh_6X`Nq#?s{T;bZE4x+#R=@V
z<@>DgQIrP$%&XF0)wYu)B51mEZOd9~dqu<s4JF=W3)Kc4Gx3SVmZ`l4w{6H&o7~mg
z)o(WU*SZhvTyya>n3JeULu>UQWsl7HS$5_rt(3S`&-z)O7-e1dxxS4vqn1!@iM7a9
z5wbQ<I9q0XQCqXQwmMet2u8Q3g7F4(OJ{>&XrS+s_S(8a-Bd|&*w+-aPLwv(`Da71
ztsT=tL3g^=JMXWDz~i-S<)p<L@)qOqtxo9313MO>y)mTQxOHZ*$=o&k+VF(=wa`V;
zsfzy=!g+@-3iq#Rmvn8tnY*WZakyN250xI;q4*$5UqiAMIjQ<dcAqu)967hAOjH4+
z7rvC-6pzdtXs-=62!-X}tNC2nKi5B1mifIiB30M-Ro6z=wR9Vr=LSYDo(XFUC$1hm
zJ*h9)R45GVI~KYJ+L31i^1M@c1HD7GLS^$*nJGF5xzn>wgdEX1vy)i-^%dWmaBSy$
zr$?_?8{L|Yj2pC;VXLdDv}VyF>D={ok^05)u|pkxgLABN<f>h%)biB$6>EaY*49l!
zT?Y@9+e=&x&Fc~qGb6|PqdvL5)8aMY>sELt0<fmSIA=R8QvMA%VxA_fCalOyY0(My
zLz7YbmN&VrJ-YF5S70HKke?cV(-#_wtdC}{=noHJ{r~Z==;PZ5`}U1CN&oo+ePY{S
z-`>%H^kw0PeQWfY&uEi#eItd!oHn@$efuf&?F|?$71RQXBq8?6jJvSGOb0`{2kjk8
zyEhf#s7OQ6c9;TFLQ|#+2SqC16aD{}@Aoa;n)|(|IhW3UALaZpljgpLp^6ru&Hjpc
zmA4lvEaJIHSX*A9wM_<d2s@;0C@P0lh1i3^H$6`0SIRV=dr@Tz;0q*$=_Jf-PAU(?
z_~HQum0e{<B$JoVI~;T9JPBR5dQ|4!tD;)rK<`6NW#?&-&>Jmj)3J^9k#bK(jmh6-
zObYQGizS7d^xBSr%&%xnknDXD?NLfkY+E2Xf%6&Nt6SSFyYC;_KF~gU>EIeqYgeKx
z5Wu;eso}0o=6`?ap}!`)F19F={zjg9bXS7xs~3%uYrV`zcn2O?XWS6(jYGJQ^_ENT
zad_Hy_jMq}<|d^0&_n-TnrKdK2+eYm0&Z20@>!srt8JBPz?BFzK)_p}_!BEssuQCH
zyqD&YviMi4b|TiLuPoO#w+E`;>4eZWbF8LF>n}1EmXtc4Oh>De>$*g1P0_oY8EP;z
zxr!o^w5|X*3$hR7jkrUZtb^2*sQ={Z@@NUwf^IK7UNO7b<TZE-O+}5KqT^+gP?O1;
z-ZQ;WTreqV!;y1eW1X1ily@Rs^r6*sF{jKexO{Z7I={3R()==-mqm28bW<#w4b3(G
zs^;`pOgd%#yBf7kE8()#p;?vcTdVH4h4%Ol!<|}btGfKXm6pCO#Z{H@CkNv=0abW_
z7rry2mF2d&BKZtd@-K*rU#2^z$y&mC3r_^OttcnO*FZHYX2*v_(?v`ctIUEv>~orH
zqU9#7YqE(}2g5QA|58jv^_6%ED~lW5#m9~7c1A{9zZlSJsa9upH#GNm;uzJR6Il_p
z*i^xSWBkuQAmL8q0Db`CAbRiWY1pe&L4lyNqKHxWpgqVWJwmIa<rAe7&Lzhe9ZQZ$
z<7A8%g=09v)%?X$tyb18*QIrz#D9aCx3C=ik3Hl2`zoq2W^szR*ogdONkm;am5?XK
zt3tqs(c@;bg;9KV^G<iNeoMvUrP0CGu)h!2qLe;fF>kK+4lfuM*T%MuS;dWm!T0nh
zIyx8Au3_uoM$tOe6x}u1g52WZx_<<R$VynWt!&OjPgVATVo5~NE51Lvp+MWVl+@~6
z_WF)!LtU-GAXWPk1Hq|-hVgY}jV7Tg^Ln|{=ywDs7E=zJc0*x$Wc1W>FGj*k;3s!8
zKhX%do<PxnB)1^!$~~MG*DAq#SSV;*+lUitGk?Vw!pdLJ5Ff-7dOLrc<a1~xq!MR6
z3bWvt)okH2Yg6LM^Ny!2tv&B}+A2X$2h<L`Gk?i>dhK=BsMkB{dL5Y%weZ4xk~o%I
z$RAWWNA1@O?$EALqo>rVHy1mj*7}VHaiFZIEysbfqJ3^tQ6Uu6mS8GV`)B8r%Qfl#
zGtwsi7U5?o4RPgs1BL#mW7i=&)Do%ES2=O$7tW6hW0yCi9roV(%QIj4IOuu<W0B6G
zg@<o}iw1}@CD3G6h>=r}BAtYp1${~84>_mPmXzuQS5aA^uC(#V?UkWc<*?d#+F7o1
z;|BVIB3PH+Sou8c=&xb^3HeVeEMU{bQps)!+l-tKv{<eV=BMcQ!eMj7R%|W~1iuq2
zEGv9i&UB<C^ITPv*+1Rn4tO^VHx^cWsww0%+1@Zzy33W!!RZGkJZ|Smv=Vn3VjU$a
zJc!(3a)$g>q^_#l@(~ouO!Jbr%_IM-Lf9_PF`sO;_h1$|qRb*U%9G3EL)50fL0_l6
zjaZ3f4TEY+6&57iWI+#BCJTzT7&O?rnwZ@Yj_w@lpPe1EhN0pX+bV<A&6BRktU=LU
z!?CUHL;Zc1%8G4q2`RQ{XZQ;U-$frXlhn&9Z|X*Fy|l6C$d;C%f4n~6J2W`9@Z*%w
z+qsksw)kxW?!>zBdoIi1tYl3;QaOuMSPHA;=Eyeb?^5yp!DGXNn`?T_-OXL&oxMGR
zIk=;DWT`vh>9hGJJ6op1nQx#5R*=?zA}xqzKKC>RzA7(_tdhm&3T>{v*s#M=oljrc
za_OPk>v{?<%cpW;@H!+*dwQ^Y@=4l{r=)!$Vmb92YL6rJvh%5~K3sa3(w{h=_LH0g
z&NnL%uEqVkRapH;f8cXTls$U#X-K`{D-08@<||7lA}ved6J;mNCyXb;1;6eq*xO(5
z$}1y#hks2R-GhGMgr-<Px?+kP*Cc(`z=CeDr_FlEF*8x;Z1L1N!ao+a-F92%lP|dI
z97+70z|4fce-$OA^QmMjx?)WxEjj;wnp94@-x%H$Sa)cE!`8;$R$H^3!%<VUx5iZC
zGweCC@Z~!;Egq$C+uAEWFglu$!{=*E^^G-V8$<%%l>nR4lVm}6(lsw{zb_$ISjswp
zFu48;>zAf`%X^E<XV=z8EuLaqMQ?fW1AL`Ii$%RsVcUA)Lz#ngtwPJ%9i=4`xK<&G
z3l`)jzF+};2y<!NMEE2;;2|}zrtc9a*scYeSsv~qoG6Awy9n{IT*|w0a@Z-zL-j+L
z<sPNZrW3R<-}=yNpj#hQ694J^<JDb5ox12<Ae(Q3PzcRCYJDhXYxq5`hL9<dZUH5I
ze{0>n3vqvAoxU@{?_AFpBwxT83LEI$IvQcHWn||i%I!*!fa;A);L79K;}l#)%2iAI
zu2rvJx}j|Rb9AzT-rFKvDPOvja}m?>D6Fm`?Vc9?72Gn%LnBH1z*z%>L|~mj@rL6C
zUY-|!C^|ZQdW+WQwWr;#rd{EQnZnd2L8_lBtWDUgI~N;iJNHJPXfg)fRVM7`9-VS{
zGp{7;d^5J1i?D;c0XM18{v+N~1fB<3z&g-*=S=!tVS95$JvJMKgH>e}v{#>;&yoR5
zG%{7zwtCso8ELUS7;=TI$E%*JzM#6+5`3PQSe}OjB#Ui~B_MjXp6A@;#ILhLTgj@V
zD7ck%B!~;EtG2S<Q|xfn)&8Q;VyGDjcJ<qPTKxW<ON&xrfyGlgQ*L(D)iiw3k+j%7
zy-{bU*CITZDKD!xHcYmHmy}^_EMP^aME2M>VXl&8$&ylXm5q|frA#4>WAc-p_uLbm
zDSG;2K|yq+%HoNq)^883X(}p?&BQv>@#$byr>n8eve2-$r8ZvG+~3o@>*{Dzd&g*`
zF(N#VDPVnX*j(3p?xjs5$#oso^=-AOxmbT9I?+|vJmvDw$9qpEOx6006;ZqAv%XgU
z_|Doc^bp$P^k3qQ%m?LmQtdPOT<`}I^P$OI@$s#p@m*nOXSlA>OQF|rV&B5YFYY<H
zf7i#4_sn$d{kx%_;qHCc4y6Y%R?+st2gNISe-~Tqsn}!!uKfE=$Biwc_Vq`usMsXj
zH&|G0I`<q|5YFO@AA+80x`{|V#3b8QQDZT^!EpTJ8$+S`j)p{NOJsKE&~@9-R-|{`
ze7wUKYpCn>Hf<dpxcEIAa6{e7S(NUlNKN)nQbrqfe{^<v7^pInePgI~9`8Qn8LSxz
zbd8QKl#gz3g@Vb>L~vVV!_L96cp`ns&=qfUwWM3aZIiBq%@Ya@JL=aDcF$S0rjan8
z$RbjCg%?onV$vI&(Ct#V`wbk@N5YzB8hT;pf;015qcD2q#AL<fpYLhVSL$({l=)L*
z!Y!GrW@gSf23@u`-1Li8INTJAv>X@Isc_`7Tdyi}|CZk48M5}YczV3a7MtG@SSR#V
z{<68;UA1QC$VG-uP#$*o2NQ8)g-eKU`EX(3#tjok;s2(IA(wO94<HQ{zdVIc=*$?u
z=gr4gvpf?ExT3aTlcm=wY-*ngPrYw*+n9N{EYQ$*&}^TmADU}h_;&Y5u;0~^s&6W`
zzR<SVckMTi#2xLmwks}jI%lTS%LByM7s0Tql)eI!6<tCFd)49kv4d+f&sGZmWL!Aj
zV>$lyPmOIE-1_CO?ZLRCyP94B%?;{Ws?26qm%_<nKt4~@uB!HiDHsfn)ciEw@YgTH
zTRQ#yK3hX-Ycep=+MjeJ()(=o){xKJnQ+>ZE_bKLpXxHWN87_|;^pvU@U~3_?0vEB
zP4!yKnrO#NSU6(s4f?{-aC1EKL`|#P9`u@P23vzz;uSUI+d{ptjPxsT2hv%yX9DTK
zA(VcZ%Hd8#vQfOJxyjn&5@G>o%%*J{H4l{s>iZ5>HB2@PZE9OcBj50bi-b?Nq#6Px
zRmD`vndXGOy{7)Eqb}#h^{7}>_O4G{+)Gr@NdI4^0<woW@;i+5=caeHOzlao-`TQm
zG2%`~ZGmQ24?@Gqy)@D<-+Q5vK8+?^gVrl#{eXITOxm{pxG^$npSngY-~oQUGQPhB
zD&BQ`AN|O*->;1CsriBTY<cxU;~VRQzeAaRfYfwi>zm}=OZ?_lP@xl}#q70;_b>C`
zu|Ly$rI(93G0s}eJmSCgwm!GBespmp^ID~F+PLj-TIq9JzWnt)NI~gyNFmAklG3*L
zJH;tl!NKm<+(?p2mU=8=b<=eYXrlIzK~+If7cZ?$Y3@T@%prMtmZN8umnOOjZQg*#
z<=KCKcSX0`VQYv4y)#!)DJYK@ut(Y__T$#`9Vjj47pM(NFCWLiLi};)bi0s`SL}y@
z244x6fmS`v^#3Y;i<%&6$tnI5)>pB5NruckRr=8AQgx0d{oTX4iZs49t&9tW&@uRH
zE14clIR!CQZ(K8$LdhGUhd+22SNFw5E9v0wI(rIV&m(WTVVJG<skHVy-NY#AbJhCW
zwEk4W<9Anw&25h9(D>HI_Ksk|ERt?S7SFVfBwAt)x4*h7?eI<vMh26Kbo0;DDktBI
zeqodFXLXGLIzNtAHfm+747u{;(th_^O24^ao^x$-Rfnrmj_FvPJxr5|$Fdm|=4C6o
z)Y1u>D}|ecQq*h##yuI~^;cRd4pz4cH+}l>;ZLJw=>3y;?-kc_i>%drgL~0F;3n~2
zI_*;?C`q(c(OjN**{5xuz)-*xgRi4d>uwZoYW5{Iw3oG7hHGuLHcTo6%^~4Vp$0o#
zDFq*xol8CeL)Q3ox@+(;?gX!O`|S0ureWdER?A2Yeak6<GNRzepuo%ezaAkd15W8a
zySj50`)3)4XXieg-f{|l!jmiSKSyi$K!gLDQ%GSwmu<aLHa~85J}W#-cPXTBE~iy*
zeg8h=Ke|t?Pv13ltM{&t5cM^P^D8wDPV?7yxlc`p_m!m)q5dw~3lEu|7CwPEUJ*;D
z=*=52mI%kUu*?%a!}tv0NYkbHiBKhYAU81cjOktFFID_x-8y>X);x_n*B$a3$Wx<m
zMcLD9*2r(f7joZ-pI?1ba8>S`f^nnzO<{fR8~y96Z-npVz7hVh9N&OuP(b;Bi)`jH
zOlUHiXNB8QoBf)kPz*}^ni~bP@Lo+RsF!t0xhv>y4|h2_{Go0~$BjL$?!G`eiU6g;
zTFh0#y(?d(Qt2T}14iLnrPuZLBDZmz@#+#UL+U#<mx_-f?tiURi~5!CQR?7YS$Tvm
z_w3yD_OShu;o<9Ay{S828EQ{N6RFl@JK171T`QB=ss23iFDTcn;ahcdld;8msnwm@
zzqaS#zQRi51HE@oU;Le~>~NmS{Nm2w?rk&!UU?SZipsaXWF-q@EYgsmu1+7=S6E>j
zs&*w0Jm5MdIL?F?wl&uEP%4j7zT(P$VW0Q}-PQmto_#>Xd%s+K@QwqecS`e}=W4N}
zAgnxtSUqwqEOx+KBqsSv_kZv}$s_mP*(tu<`PSW(Ry|@ZBNpbhicAD4K9XPjzwAK=
z8#VneZ($`~5yOp|&E-|)wtz7fC@3l_F7NJ1m0H}6!ot$RlIBJsT4pM%vY8EcHZ|9e
zjP{tTJVLM7YHL{^pX%)NhnhBq63HU1F<v_~+HbK~IzjJ`K#2>Kv`~Aoioi6mbxT%+
z$-j>E0+3);XoAiV%FVdWik!{$W<w$xSS7Hqq&%Izv(rZzCy{ZXqqcSsIa@8Afq-qz
zXs_Aq7JG%Ltz|mCj%)9cm7T(eMB3x3fn8D<7H%KQEPqVe`_^4lYx65Q&Bw*x(OYXp
ztYUuXP3e`lAkuN0>dH<{M*hx<+snSRb7YtD74iD)S7<pCzLWUdp&_AJ_}5JLx#xuM
zW)eu_BH=pWLGjxfBk?Zq2-*Nbd_wQL4^F2wd+R$2my4FX@pj?;zU}e2^RV_JW1D+#
z1Kmlzb>)8H8Sz^ze@*xbBOT`_NGC7-K;`MW&Hmdf-oJlJ^yxS2@3{xTxo3!Gqw)=G
zQq~lG!vTM&r?2&wd2g$@wc7WAiuc#e`H)17_XCx;)=b^4n=Ab2M~mgOia+|%!Z{uK
zl!)`m9ua;dejcmvz1*vm@g(mBWj}Xf!&Z5rP}v1aeG5*0<_6J9s%cn+YWkJ%4sWVv
z$m3{g?(J>v4p+>t32$(;o0Ik$f3UANn2H)gQ`_y)w(7cuhDfTW)-@dP4%GTRwpyR3
zIUS0xHQOA6vjJDP#c8jv_BDokf^BQ8)%D>ue&HW#8Xb0%!RM^@IvgfL6X+gUxnGRH
zHh~!}tP>FA&`mL{p(eudEq43T?N@ayc0n~vh3BTkpPzFHjZN!21{ZqmnGtXmw5~9U
zKH(K%rU5@bsGQ~n?LrK&j2mHmL?~h&2gxrDL-KpYQN~AwTN$VL|H`-=e^dZh;`Gmo
zU&x6+Lh%(1;&I@0Wbwv@@{qD`n>QM%C}2=B&wP0-xWQ0sX>o-bUEOuD#@(^CJDSqH
zkr_pg_@Q2C={aJL!sRz;ukCCMtR0Asb|gA7Z>g#TdW{2JXSeu(;@1Q&<hbd}B?qn&
zALu-Hih9*f1fALU#C>*NeZcU@P2!2pbCdMmvhp3x|3LSIZU8Pulj57!BSunu;M^(V
z2ftnUju4UG6aRu*h192SN_L7TkO1xR*e`sM`5Wn)G!H}?J}^4*UO`{Hc*pM2M?-gn
z6ov?fhq_{(cuV#hnJYRa`o>qX_`yYkP<Zdo&<8^bd*p9$lC)qE_TwAUVVK*_%|23c
zU<~MeotayxB$wftI4#GZlHNInlFkA>-kG6^0nw`YmS9;et2nzJaqblE%iKa`1+Uip
zMt(1s)mL(Gbb9vAPPpSuqdz)V-oUBhbbh{D)5DfCxnC+?>x!iURvtdi%fb?pXEzvR
zin9lCR0uR7FmZA)vGDiPlQ`vn;qNC0FPaHQcMT03n}I9Fj)56(?|7rTwLDViuJ7<g
z{53v{!`@dsa`pO&n+~N%u3A5S^Kwrtwe3W2|AB7$)pxLa<J4$!Q`+G$hwM!w;g*=G
zELx2vCps@{mFgBcjSLpQccmMhm-RcHdi1Q@{jLND*Id`WHa-)Ho8h1nUlV?JLU#$v
zt?|T&>%b?&{{OGE?*NapIM?0z|1FZX_uhNo)oQD>Dl2K#Wmzt=+;GRnm2LyZ*c3aI
zm}YQj2NIGPY=|i#gciafgp+V`fScqxgxnO8oEsqJ5HN&;cJDj??#i+a=gIS2J^HuI
ze)CQH=9{n0Oa}EEBb|t0d=;~uo|c%x_@2`9Id+85mAbKzs>%M^@^f1JfZP316ah-h
zJEEiU^zvMEAlP4^FUsJs)nn3|;u@PwtJdmmTGAOAZ_RJ$ij1f7>$?KU`SHSdaw1U}
zZ~vj)taCSw_VldNDBu!fc*9tcpI{!u`i`$^cnPR&88bkSGqpfn@ETyVm)|WCU6NQX
ztw^Vn*A^G)n)#mYsp5da!{6@r@S6=}%gIvdB*|?Y9o<-Yb=Sq;``*R7fZIn_F%Lnm
z_0xMc)s4Uqy5`qn4(2juUE^+aC^cu5eMdQzkh#@*t3u{iSo+&+QFT~mk?V|ViC1HG
z=C1s_I<3n2m0F!bsu1a#eU?avQ5BIX^%AK{sA=(9ElIoNj0&U1tz<RxW7OD4&rBe*
zvfr7Mjq`WUsw2~y?#nEWIU<sn(r!xFTt<yuVQZcF*Uzil>Yn!EinLJ~Ho1#IuU{b#
z$HiyXhDB|*pf(Re&sS3KHmOtWsQ?h9oK+9<aMz-~p$!YwrdYevX{<;-uly|}S1c~x
zm@8)j9^7tv`oN(dBGr|whdBt%VD!wH#2HSg6WL9>hfaKY`Wmjb!ldWyJPpQ>Y6TBC
zJ(8YmTXO4?p(`I)vi8QIt_>aTwkB5F;YbeHvxC97fsyyNwrD-JVyJc7($ZC%x&|-m
z?Q6G97S%qDtHmUDW$ccx4&QR#rYEi)nK-a`!}Vpq$Ko65i7oCACWF6>q}t9M?%UDV
zwd0N@(>sgqjxe#9tcSG9wo#8C%N0ZYVC27<>p|&tpBweNasCuEfTMfRK8=({EV0|u
zIi{Qpj;j{rdUHGQjH&QVxv;a;d4A`j^MmKVJao;_as1)!<(FS3(rf6txtLr`ZfDhy
z_8;O6k-bRy8re%$up*>9Tu&K5$`u^U(b<%X$!;#?SUqI~Fkj+wJu(O8W-jH?ddiB~
zvc6SMIe=Ubaxlm1DGLCzm&5#6J!J$b`?!?H>nRiD0i5Uc7u4`U-bG9Y>I|U`DVvb;
z^+pPL11aA_$~WpMJ8&aY2Rn_FC+c|OB+C15F6GHu3Tz~u#L0UbFb_dP8V2S>b(r@q
z?{%a+TuZ6`v^oqKg~A-2P3eRdMpKT}Q%(Rz$K`rt4vdvcd9<GL?rd4#s-^I>$d%+^
zj@My+0~i^H`LTM+38cuml*efbR>!xi>xqH)I49Gl-RV?1rA=ww+C{r|4PJiv-Pe__
zy|#26$Ov%n0WQkP>}e-djt*_91Wo+y>LH|GjTrW?<8*r=ULQv4Oywl+-=J}zx9TN7
zhm-?c%9C8lHOu7)xfOaLI5DRm&6=7|UmI>N3`G|f+6SWx+Z<7&*=~;+&6279(j~*(
zODQvz2)1PwCxdN}29~0-RF|D=E4&037X%Z=&QTId3Dt_qWoS<Ya4D1ytDYO`*cqlF
z>Iz_*E;!F@Re6+AThX5{Et!9#G(L7-(r7U#6INGyYhhzoAMF`xLvI5naI91MEyV{v
z0Ec$g4NwngyCGH9WMqDeBNWPrJ0li@$M14<xLSJ_*&TsiNzCOlSY0NQI~6u+jFt>0
zbY$Enjhp;AE1lI03hhP<1)N0<s}>e3&fCpR=_Q*aW_~xLexm8MbK(U_UVXUpf`uQh
z4uATW?CM5s2avmFr=8Uvs3e2!c$6v3j>7e=w4MRGHQ_R=>`H6;g!HgMVr-6gh6if3
zjJR!1iNyLs-+ZB<n2z*eTMfhQAEV<cp}TBq*8Y0$&JJ>2Jvmj>DzDKHuo#toWi~(D
zzB1h%jLPh~aJN_yH@4=2JqMG)h{t4AtG~LqZ_!2V;Z~Wf)T7X~$D_R{1aWD2S%y|Y
zTBRY>G~fmH{gPo}|C3T87ZnCW@|9m1>5JsIU(iisSz9n>In>dNIwl*`M~~K~hK8D)
z)G+NgT$&J4M78)qDzAJgUoN;9h2C5Aw01?UT1%i$mau3HPKVJN3|QKolJ;n@sNl<e
zdU!B05pM>cgEp}Azq;Id(2(B#lFMSX$gFWAgncS;e@OC;UaQ;jYu&~+1c_{Y4QkX-
zxWjBz1{5BX!O!oR?XZ|BnGcq{`QgG!LX0-GTGSedRQ`i@S#P&O*AYXPah*u}&0jsn
z`#U*7wc%4%7TP}jq}pKbO{aUhq_TzKwVCoo+q+B)AD9lTqziNPkI46UJ)fVOJ(QBD
zmTBg)bZGSU-i0(naJko1%TM#oR6pTufH&q03wBUr@EA1)cau?L@|x6U4~6|zbw6(l
zU|~1rEZE%oTOS;Q*d5|CDwErwGnaQorEZHsW45|1`ANDeb@4tUyCKulRjHNG6TNSQ
z6}gQ2An2-8OGzMQJqL5Nk%C+sxRhh{ls3Rzz~y>m4$Lkt<<WXddA6)?)l<$#uA4ZR
z<Mosdz?{cneypC-hLp`*%H#EvY2K5>%lw9N%zBCe=NSE-OL?-M5+^*~VaP}#=G*lY
zIqx9vJ}%{{ddhsVi+qLo39NlT<TTq!e7}zS{xcq>v-<Bm71c58_TQRFQwvi(V=Hzz
zm6{(-==rkF?k+xGmm`{(THj)p8RIq+*;Oobu5XWeE6+xamM*j9GK~s5E?pcwkD}b$
z*-6-lot!L8k5HI%@CD)_XXSso9r+!uj1^;AHD8OUs#I#C)fBTCHR_1QC`L(9FL`5I
zkJ`YM*cI#xVE?`8Dh=JaMO(NDF&k8#pDV$hp`87%>~L~X)*4krTl5NCLhCoFEfSNW
zjqK_xW>*z;%D6-l>UQ~kGEq{hMNcgR-tVvz@Ups2!(7)BAQ7J4SC4ajrSrD%g}Slj
zb9&1pGbUzxOQ-4CTuGkYU$hl828P?IeX1RFPKn&Jhv@qo`_xZ#3}+UG12IjD;1xC;
zP&pI^V{Y;WR&Oz*MMI^IWhqzIq4T$d<I<LtRP{rdSnmp>x27O7EoIN4zGHPGGKdrR
zYk@#h=}=3gsin~7wj1T@K#QnL+LcC@raa%<T2f_NvYuk)6ZB4=_ddA?^`$2jQ>!tZ
z|5OdmHY8<^OHomo<;Hr>y#?R4maGm<tI-i_k@K<tBb;iTi0OPSe0gU{w%DhMg2GHP
zQ`};FU#CmUbP-=lt?S6NuPNwt-pW(u;S*XNNX_5l!}fE+8%6bQ0Hwi1NNosnb_+qa
z#R`lquA)&;mWtJ<Z6Pn836A@P9#<lad~a+kYb=p~STBC<C4EaE`4(CRe7uwFLaY+7
zQ~~2@E~nA%@$Qh)Y||=DR^;!mJWH<7s5KU~Mvaq0s(<8t#O0OIxX|n@;|7w`y*~(#
zHHu`-YL%dWyxfxBUdQ;6EXxYaW;n9$Np>(zvxw`hydSNU)apc~c!b(>Ei3SESai+A
zSgxp`Evme8%MH)m)INzk)9}TeL>@ZU+{}QkiHd-|(~;5&Z?{`mW@K!PkY)iR;48^4
zySYg%Cc7$EAxO1JNSK0%t`cKpFVlmu4%T`YD=gJy>&uX+*2|m#K|gXm4tw@kR~N(A
zXKfyb(44mg-Gbn#k1totg1Ydik6}IZ1MR`6&h9iB+>xNl{NtCDO0~vlc<ZGWc~b!I
zjnU=i1vk32vgxFlEen0njiQWMdwp<O#$6j-iaQdJXeF<`B$kV6qg&^PHL3H|Jfln3
zDUL+D=s&XM%)%&M7Wgd@li6&JU|@EYySi4UxR*|U$?x|0djc*_*Glp}CAXuV9Jio4
z{cKIC;z$h&r(X(@T-HVS25f->s{`?i`2x*XIA&**n&Nijr{p!Sw#M!By7C5ch~st~
z-=iZ!X?_r;VRJF1`TB^|jJ{ld@L5gVB9@9wq85=ps14AbPMMr6+lOn49RE&nfKQNl
zz<~uF{ZOC35IH{2R>7_9kGQ(^QB}}jGFfbvU_Tg))+_hwbOx8!;V*-Dj3Jdluaat&
z%8)%;Fsb4)tzIeDi<Kc~B8L)JqQo?7rTYZx^mr=XijrmBjP_z8z%urjxYg9Hnv~49
z6XHZmq*5Q*m2e}H_)vkJnkpU^iUnQ)ljCC-1#c-ZABJbZcnUM!DPBX#nRURHjs)rC
zAM=4e)IJ30_H?m)V}|USLm~#_TUg9=5RMTuf<C(wIAKv%W0!c%K6GnrOd(=plcPsz
zk3O_^?L(Dk0lOJ9Bnwz*+!Pi;i`hmFx1SFFUfrmW@I7NCDK0G;7`%CTGhy5%isQ&R
z=NzF=<=H!yE;|HVcBI}0T!=kYXZ>|Fbh1-C_FFo}^=j4`U3^{lxKYdZw2{5XzS5pa
z^gMJ=XD-!?{3hN<Twg%5nah`Fn;;a<lN)3Pk)+w=mNvDIYDH{#a^xv<??*yWmgT#2
zN;2}$>eUZb9!ygG26VEQoLlb)uy-&XC>m`|&+irgzWMn>VzM{<t77DB?6BhP0OTQd
zDb=aer)256uup|b(P57(6dq5-^U7AK+Z>Af!$Gq5Noz3}9S(c+tx997+m^Du2~PSh
zq?Hd5X~$Ae917LLlq}Nikj8C^V>=#rfQ;OKKS~@VBXuZvb5f$6_^tL!^$Fffycfw)
zE*7}P`$Y5<ggWoj3x(UPaX$Z2$+O}XwL+$Dk}Lc#ai?KKM+Q!vk3l7-C6JIQ9kjqc
z%u`bpfLeoafKUxB`V~G&%s^^B<mSmSxl+t3HO;Po&6b?6Vnl>R1kL#9-Ayfd;<svb
zc5_IkY4g}@nIO^Jq4nr=9_<~K_l-VP2tCg5CP2;GF*Efw*@-G8+0^NWkwEz1DnU8<
zbL~kn{}smPRNGW~Q`Va8%Ph#<Kp4H1$^wH4O{gUik~Fu<6y<)%1qVe^5tRiP-U5_E
zWez*X+37}-2KR<cU)O@bW>FAW*s0E2kj04yB&GHn4Aw4ty1-{VorJGSn_P)k+Pig1
zm0L-E6wjF$VH3YqCQi%L$xMqu^0Y^7j9f}Qc9lx4K<R7XVPDHU0!}<TYwLwlPF&M{
zFkC-R_4vDe^u^^4+N`dygM76o4Nl0tWb<ybk3O{DntA6kgoz<$D+1c*j#bW37awg5
zchDPMH{j_*bNsVGdK^vU;(c<vCElJi<*n_3p?JUCW@;^D+B(|<+w56Sz-P;Of*W(~
z&TwqZ*52ABSK7OBMSCPNX6;V)x)CCRgN_s4o=_wKsuWjmCBJ3<#@%9pc`(ab>2a-;
zOlXW|jaN60X%&gC*M`R|z53ozA|L83hStqj4{O{VhJJO<9!!ObouT-`f@a&fElFp|
z7E6bH*?6)$I<{W8c2i5(R>XY_K4&75Dz~N=Wdv(c2dD~ADi2WZ&IR#fi_qszNof4=
zK5J7VBJCSmB_Cnf!n)4XkfE#yniD0K+$p~rHyMAd=y7cAV}=AOm!f||HsL`W*x0bt
zA|KB$_VKB26nmH%FSEO`bAYono;Eca_Qsp-hsB2_hsApqZ*^c-Gph|~mT!4u4^5NY
zX}>$ug~R3VbC%rhUdMfvA7#5TcLTc$emfm}G#FPJ*^IVuT0Vj}PubL|`2$VC>+CiS
zVpz7B>6ElFd^Rab85eEu%=YWXr5;;$vHlN|Ke2rBJ;}G(_BLBu*A||ZTzN^GK;e+L
z@kh25bHS9wIW>@%+ZBb8NxQDw??s1>RR2akU>?8<2Au%scXJluQzPofNp#c^BoeV2
zy;>-IT~l5V8k~-4x-{Ojwp(u1beiKDmt!ELSyn2xjVLy>Y@F&^KNJzJT_^MzI+R*|
z<z-eYAJAF_>qz%n3wG_S0uP48>|YoI{G3pX!FE7UbgATwKIn)!T|iq8%STifQ#*7f
zPeR`@Pf=ECt*b`0QMF49n{ra7-KMx?P?;QDEtZbS`$u0M;rE}jMj{>;HkZP^^Zta$
zUTPs}uilCh|ArF7^wdYRm6}Glrs`)Y_*8q{h%XkY(P$Zyb-CQEPOtWD2rU}BYRn$A
zo7JwMU+<BQV7w2STXm`Ml9)YY*K6G>^}a~2?`1;BEh_yTs%_VH9=hbIZB6Ueu%a!y
z<zZ7&tZAxbS*xbo>t)ugXPeI_tJ;I)e#Nq@Kd!_SLh|e8IkcXr(K^>Jn0A!nu>*W=
z2Wd4LkU9v2zShY;H_&pPWJwDmM&?Vp$z1AxKyov~?2+u0wuAmni_>jFIAPM*f6qTP
z2MC`j$gR@CXgj6>Y;pn&*9@}{J!nVY1!(MtT9op$jkAF{=K&oh`cOv`g7UL&`uG9n
zcmF``kv)<eXemnung?3fx&{)Ht^ML&abHVcVx40+{yZBNWp#X|>ju)!vQfr;_uVtU
z`XD682L+$vFP4vg@WBUU(4YV8_Er|AC6=y$j0C=3Ei`24;&8~~bY|)b<hlaKa-j~Q
z6zr8OB`UXeeo4~jyncLrL6%VrZzy=;7pQM<Yn`xUM&yUdZQcB@4^1)xrawR8eV56s
zOhzl8rqJ<x+>y+KhyMzcNXvmxOdtkfH(r)%9h}#JzQdD@9VuAMsoj#wRBjOoCG6VD
z$A(gKhklhiF>kRZHL+w_wz;@+t0}b1!S|c|El=}3`VhPd$BxbXgG54n;;Q`mAO9fE
z%CF;<pOQ%Br(-uRSa2gAO1sod8fLzRS<2lcl%)%GjZ<*)3&<BTOvBs(BB^_EX(ZDN
zxh`+VfZOSlOPlsf_DiRwL*k*S5r#2#l4#Ow^qbQj+t(%JJjssX&h(<9!=M=p7P`CB
zg3A1m&Ndv|@Aq_vy@6-)dFrL5eXmBJ&>rzo?#1<fZ2<I?1UY_%^_3d~Z0^PwP!WrA
zH|=0gb4grkE}5<$Sl!&)oFja;t)<<*chnQRK)k;>>7Q>|6gt@Q6+TPuAR9ycT!?>F
zJ3X9G8t?0Qhsoq^=E{eiah&jlITFEq7GXYPJ*e@m`ebgbL=DM^md;WR_PBOva(v&o
zW=I{(s>h{XYsWd+d>WdHeNy#U)-n>;Y}+8;v+lwtwoBHp7qz)5yS#1L*ixnB&Lx#U
znZkl~D3zXM^Iy!DU@fRy__?`BTL(_U*$p|nGdD%);@s#G9HwweQv1c&LaDe*+;36_
zwGW8<k6PRgn*;IQ-bJ~-F|~47yi*s`|4>r-M5XijJc9^n*(@3Awx_gdfzl>T3p7cm
z$!Rt9TEpd{JEt!wY%-i1WwCm2*o7+su1<NKg!vQbh4R<`k*kBR$(SE#h8M=>Z)#U{
zsRL>Ch}fiBZH%Z>-tnMjrN^}@ITG5oL3ZVarFU%a<}Y8>l65C_c2UJ5u&BFTUjACL
zs$)_?e$z621A3?j6e0k>fXaa`p%V~qAOvc{cI)aif*1<iGS;JPE3J^dCNA$0bf>yh
z<U;AS5w=fKl+Mqcd%@x+MbrC>5&13f+olSRQlV?1t}^pyhyesAN&FqF)^4hIVa3d5
zb=ZZ5(4#E(AQVY2qR;D@sSH^`dN00nLE8fL1+w|-^8=f0htyBXZdX0Agdd;G=@#!C
za+0b)o*oP&(y!hzmY5zKjZdQl^c&*<ozs&{W-)V3XkZuJ;<`e8xBLp#UA}Ls$hVab
zT6U@Kl<!pE8F{EZJ~&v255BN);Z60AZvh>5nli=N#O?5)e1wLfuz0<7**7FZWUKV+
z%kGtuCne<7w4hMQF{MHQ`Ks@s$-m_40z)MDD$Zo5ENC|Pfihlv<s?kE);=U2mJEwW
ziu)IADP1z*62Bt-fxXw#H<@WO-IWvMvO<#RAMRV1$rbM+qvL&1%Gj!5(Df*DKX?rn
z!S*xq>r%xjVUEo#g#EekD{QdvGM)XMo^8ttklPRYbOatcKhEVj2l@`|)#Mq@Y6}Sd
z`GD}T7(klNLcoO`dk5s8H@Tb-^K|u`^Eik{;5(oY8v*f$I)thYQRE<wlE*oS5Fmcb
zK^&VceM=q31G6~Z{ahT!$Wt6d0ysY5AgJ}c)`IOEj$`Cy4q^)+X3oGdz(G8E3I{7b
z1IMm9L=6W@sY6hUe65tzArQ~SrZ^mr@IrNn-E|!Ae_=gJ9K^Ry^+$a)9-ZxvwRMQv
zXrL{u@^jmAyxtbt+B18sR?1`bQm`i!CtuSsN8EG0rnOQYtB*Mymm0*G^=Lq>0L1S(
z9LIUKIu5!sK*T&oj?K3Aqcdt+tH<L6;jN&L>p)pO97K)g{P2j>Xz*cL4@zsyNe&V;
zSRdmvsgxUI%=!dxEjhu&sW%5l5X}0H-+K7i#IZ-#et+zR7skF%`A>p)$O&>joh@qk
zjuYev@r;epU%Gi$kyjZlhoKRT2?gzv%$L91_`fQ1==RL*_&=061Plq@Vw73LCpl;F
z2R;#}h}R}KJLfaX`Kj6KHP3lyxj%86O&*WQ>?WH%W|P}(GJDW3XGBFKB>|7j3GB4;
zv3lNioD-+#-HaN?5RrC*u~4g!*PHfgMIx<UPfk=8lZT((v*+1eN5_s%mlOPWnd_fj
zh-c?uv*~O$?f0hz+5`n75ARx5j`I`c>7(ce23UD@tkSu71!!Fj_tX3KJzZHsj@)%<
z`u6EAKi}W^;W#4w7}SziF9SJGl|pDgKeKo5Gvr}Z?Z{nAJCUagc`I+6%2yjZSh?qp
zo(MT>BlzFs$d`|fA2~99^vg64;f)hL`4Mv;XA#40(waqT{I*56FUdyPXcoWjuk5<#
zy6f)Y+MYv;meV}~5W3Rf!)YfKytI&fwN6oKWW}|Me@WPpLGD9kW+ZpT*sWt%a4)p1
z5O0S3lzfFsP+nII7TuZ`-3HN>3$>eXiTb>npe<*`Ubgy2OaF|)X()KxBK0?nVu*JW
z_8K%{6y4k?y17y0C>In7Y2BN4rkzT1pmKy90nJuEprzx~3uXzdPi{`%q|zg`g4EoQ
z+&a`aOaVql@>p9`s?|3iQny+*I@?q$6lL<Vazd<EOFRN`Gb3?G+G47~Wvjxgf4;GK
z)0@jC1dAeTr#pmBmdu0ol7(crpZO)z1Q{SqBl)~k!-ZTvCt!}+mq6g0ht&%q0RjSd
z_NudCD1k|V2^5z{_=;G&CsqywhZBL$gp%)DP)JS26Z0$Qy9+vF(cz6I$kmZ_F76$4
zxcm1P3%Zy+HlBnH+7>gk_QVzya?`1`Nw+T*_j%fi;aI*co}^Kff323eJ0aj@!RiSK
zk=j<NWZ$q4!55+2&t1C^A1<A@3Mb`RN=~D{S!{WR`FibWyb&@{(Uu)irEU<56~i-C
zKVtaIJ+J_Q{;B^6-ORP@wB!2grl8p<3K_ebgaX(*rc$IM!J@Mi8I3xNi`wD?23ay~
zNUEZ)k<g0Ow*17puR1a$IvR7dCP#keA8d^;ABjc%o%!OZR#r0FE?U!b?amb$j5i{8
z){vvDj??Nn{hCv-Q5`Pct8Q0EM1hRa$W2W;p|U0Dlgp(tximc1<yLEj8i_wB!=GFl
z8M}|=j}vxmbmXfKj`eQt6wPCpdBel_(zlsfNpsb2F!!)+oDZCZ6h;+5grfYYW4!5K
zyaK+Fw2oFTTS~rR&vsS5TP`yvKDz)?4agF5;+H|On6Ef%Bc&Fxth0VficCs6_6|w@
z>t<pyvm%zSk9ITTGmm$Zt(CtJRqMKR8cR*>l$0B>ml!$#q<n5CBc~Qo=LhHhgE66I
zccaobq(a3mT_AnVRl{3%r$@cyV#P_>{Eb6B-RHK4oYE=2bz^Dr`t{j;+a|ACY3EOs
z+aKCGynOV!sowLPl>51=2gpZ|!@!sHX*CPB;)LZ|@6@_Z{5v^bd4oLt0wE(iOQe@X
zOH28cKUUu1EJ@3&2bc-u6Ct0{sdVF6PCndHd1oi{;f#d2V+JAM4D`(pF|S{Tbm&LZ
zM0LX@*gx!)+&rxrMyOIzi`C<}hQK{C?$#!f-3x?Li_Bzd)wLRS^rkzmyn!$Ey6h>P
z)jdf*J6^gvn=8&dHh)YcZ|av>WS{Qb+Lv4W;u=kF)+#TVLMXoknLx<g&U5fuDUYa~
zg_df?NoZQ9OG~>C^o*H`jo8H5nugJsqipJwz>!1`4((l?&92@%G<?<S?95Ai0UJEO
zyYG@vTk^KbPsr24me97&?j0dkAZc5ES-E`K@;3V3#D7}YEQn=_sg6OiRQR-{CDNLX
z@+HD2h3Ic}^{-4PBcj|{K+;4nq8(1ml}|`h>L|Ipvi_(Nem>Gt_~z6%DUY*M|G=~{
z3JR}Riu@o!kzYCU%>ro=kmme1&E)Q*DbiH=Bz3g1p2E+?@6Up1`m@;clu12Y*+A}k
z7@*2LFc&H(!BkJfE+ARDkt3@o#8){<i_cd+HltP#le;P#9!|lZOmM#7%ecMgH&jNT
zqu$9{I#|nRzsE13>Tz}(^CA63(9Dq6Dl1_){^|sMsjNh5vifcIT;{J>Y5cV~=s9CC
zd)@|JL1_H84d$uYC?AfUlGhd;I={R7{6mWx?|qlj?!L6I_tNF*^zuu4d$#r9zqGZd
zXX{8|>*19v4sUI5-+Fk(%EMa=gYoGr=gqrvI^K9+(Y0e}XnS|}_Mzb&ouHFOy9Bj<
z&N`JMuT$yl9AVz*nOVWyICD`4^UI!@_(+zyiS}Cw{jeCVMJMXh7!z%Y9N?1!9Sj@$
z>`jJJ{wWB=xYc01PErG#*^286KCT0gF*%B{v-&Ff?`;mF5(r5rhbzZwDm(d=om?Fo
z5ELT^lO=VqQKm5SN&|K;X-4oOSIgt5<!>lXAauj4x0pkQaFx&AWMlPuHei6Y1|@Kk
z2H<Toe<95c@UfX!Db^5by0lhPq6AWcZydU}KYO3+1=RHv48_VpiAV!*bmkRYq}PDn
zTlu*1G3~K3V&$KO%zMTdluJx1H}iM$aizJ1IX^#hxRjvR*>dn~2jm3_)ynls90Z@?
zth(ILQC3;A>C;6y>nxYZC(e>H=jd^8$cC=VohSC&#`O+(Kdu?76ew;_ucgCObj|#z
zgnRU+-q<A>KhP8GxUloQpTKsGQ#;>hZiXiWkxqIJwVtkodaO6Y(vWLjo0^|H^w3mp
z@zHy_Gz)Gm2lwo|^bfBNcl5vT9<?Bts(&QEW1a#hniEBdQN(T^PGF$ikh*o18sQ#a
zS8yPrb_zQLVw0iNYLt1K1fA*iCV#-0cQx@DrBtO=Czcg`gGRX_XiP3pRxV!xyC%cy
ztDc0Mc^~=^>yMs=_{Z7sIH#okxA)$=?7sWr{9GoJ<L5J(7P62mtQ@Nxo4)Gu%l7WQ
z>~cD~bl0bgIS#8B=d%`_JGm(^iZtIP$04WDU*Ey6K6Zd=A$W!AfLzy+>v^BlbNR7Y
zK4zDk*F>&Aele-MMfI6FRz^tk;rl{H$NL-e4lsO$cZ{_lWhqilaw*sF{tuV(YbH;Q
zL!%b4^*dOJfaxW;gB2-_+gHENw9(r|k<z$#^?AfV;9gXua5ti&Zi^TX@5c<iSsMP%
zlxUH4I?8xnd=X_1FpJ0<NH#)t<20?+df=Y|ej&T2K)-jP1`5<b$gZN_tB+Sc<prxR
z;rlHr`un|17ro;ZWo@9hmLlajoH2*nU6Inb*Y#DD@eaxmv5gyDUtrqlji*TA?m9)T
zKQc+2c<~8RE~?{s2m3S2EQ6H#eXm4=J==FNFCt}I9cCOi>KV~05qncTWfN|q)Nm;W
zX$odWu=;n#ik;bF*nC`&-wM1kZ<4o?cOLH&-d-M98T>S`z1Ord|D4aMQ=cK|&Vo4S
zeE$DQ*Pp^Ow^ZVi>vVFZUU#`duU9Dax|ig7y<DNMd`G6&W1EDIoKydyvWBLpkaCEo
z$PK#6+OuH({d6q1)R9YdYPCkAR_n|<yyCO2_8ywlsx?^m)!N4U)&^wbeVYzBkyod!
zq0mlhRWyrAOOOYD0doTslqX>Fyq|-9DCNPydHccT7c==I{okcCrU@2?x7Z6CzukLi
zWIuE4>OM%^gck-KT0w{Pe9ID#^)S7~`(ZW5j$7s_;sWK=f7=jxvXyzNbLRwptNs|X
z!AfTX%<G5}hKlZ%`LDZps&yToX^UQaAOx9=RNrHsBmuUMLZMb1lp%WY6{G1TeCA2d
zmhFxu6zX4@E>Z$*(^!em(d@owbQw*`fMiHoYU4ioWcbK*>8<)ce&49hrt9VRjsee`
z%yVQJJN`v@-ZXhEMwv%BEFVsqJZ7WZr5=(EGtX&^nu4&eM{QCUguRHDsQv}>s2TGJ
z?WV>>6}{7!Su_B4Li_or#KT&+KEZDSIZ?=&pJMwq=4?G5IL}6IhBgB>fcuVx>?W`{
zQvE&CPGXpi;FpMY@ge$v69~c9w`aO^`~k)riDV?D=J-6OJv<N;yYqRsI5-fd<uc6k
z*ljRIWoP7_%_<arX`q|mM<7e4q}__8%=1GXVkeHl7IzFGSAi+<Uc^j>J*F04Q=5G|
z4Zg6|;0rM&tJxZ~nr%2u4}9_mykD@rXTsj1_l0bDm>*ay)}YO7^F#Oe9e9rsyob*9
z(=gAO%R-IL;x%cl-edF~57TEdnEYmg+1q#rrcardNu166&zQnmi^rs~dXClKnU_s^
zW5A?01RL+Df1WAue#16{6M@#S4rlyOAR%235tE$=#x;{YLeYGtkPvFsUj87HjmMJ6
z)r)oVU3U9fxfan}?6`5PM*wy0sf0kQu=6{ZkT2GXwNJt%u?Br|cCF{eDO?=w7|zGq
zhg<ayomS`6G0A8!UWx`|y-~kOWkR^Ak*=e0<{84W7o!Hyq-&$pV3G}89?HYbzIJ=s
z?rZOjX&vARb`A4PAZ*2{JE2H1>eQ+A4!z0%Y|U6lwt$;+Q8JVh=<$^Dmkv1aFnQNE
zBlqH=<tji?yIE?3tIbXhvOj%AuLlqFyz{o?)p#h~zQgp83|;4F&t{>V>P3aA*7f|G
z1N)ht1Hnz3BG;lPS>{F3!%obFni#`Gzbbk$^WqN2k|mxk81IL0lF2VwwpJ=Q2Un_e
zcyV?O9wzfG+jn$$P`~Q8nD6pF;<(nF`iYh-=--Bi`R*N_2X%O8{a$A>#8lheul95L
zs}5HTP=koF2a_qA>(mJb7*8aeV=|IpIUFtrC7vAO&#E6V&yol`!p$ns3}#0?W3o%R
zba1eXn_1pA=2=Xq+Qg!BvB21Q-^D6V<FUBKg_8yAgSJ^`&J|ni&L&2nFxqiuzcD(j
z@k=Z^Vo(`rbZRehzf{ld&rsj^sRc?nE^e2?fvhk(bvjdqvHNv?gUV!en4-h9rMFd^
zvFH6Kw2$cy59&je%eP9lNIU%>m-FQxP?&vy>1)7H$EI6!rN1cKBHk+f_y+)@Ey%-O
z`e&S>3u#?V@rZ6yZk8OeFvY2MZdI5d-{yVBTs}K1+UQ(@<~-eu<G)0cLcuioc7h*u
zX*6bqO<owF<z4}a#Zdhr?MqfjmvMS%0QK3)vz-eEoBV#WwNl|Hed!(&AwIhXC)ZXl
ztcG~~vvsA`K+#Q-K5bFcC;oYU^X7b`JqxRk%(fZrnb7r#e<<nGeY`oJ-%Me4Rar!0
zaQpBZ{X*M4U*3-kb~~kg;(pl-nqF%?poaiWJ@WMI1JQoTE8_3KI|~kePZe<-RqPXB
zw^i4C_7+mgsNwGFy-3+nUH91^k+Qim!<(wUjFgM2=X~}WO24G4=M}5}Mq4gQ*F@`D
zcU|9}Halzs(ewY5WKB3IfkgRUOD0Wgd=c_=p$1qBIO7DpES81=q0ivQPqV}t>?#L6
zR#vzPnT<LGf}B%oc9@eXTF-iJtSpeLfbAeozbgP6Y^ycfH#IZRzK6X5(I*af%n?=h
zOw76Q)Sd}T^O?rgrlfkH8i1~R28J36ioxwoIOFO8Z(J*vD|G7C6F!$CAC;PlCWX2s
zE0LiN_hbC^kXX4@GbLIT8?seCef3rRvb^f#ZLS`#jUdJa9{vX{f4Ai2dz8OEcyJ--
zA?rtf9In2KUfqeF|2f*&UsdxCR=<msE!EYZoj^(}M(2v^OGvo_Fmx=uRU_}g>XS&>
zP#>=))oI>^)%%gMv3lMNAEhtjJx0W2l&(}+PP*W%LDVo)@12`mtpTr2ZEPBl;Y^cO
zf8+CGkSttwS!Wr7hTA49(wS2|f>!o{%CX9@oN){R&U9uhY4!zj&6&;xl}{s#&lU-D
zlumQ3sCv-)CmOA%bM|YNykd_sZ+ZLRf&~XDubZk$07LIA<z_bBS)X-3<odw%tv&KR
zA09iFpw{-Pud3r60F<LfGvHP=E3j4ruEm+@L~f4!!1?YkD0-467sJXT#?ht@p;8`|
z=LHD2R@>ffniw`)t>z_GFAm8!D5o{rX0-<HM8Y#bfB7x*D^3QO<9*3Hi-DxS!_g5)
z1{hB;l?rkHL5>#d(i>=T1C@FjQW(CU%Sl0XeuwXSK&x!^XG|+`uo`adG$UaS_nRv{
zzz(WsRXV#)qjUUkZh6z$Zb?iIF=Kj_(WOVQW#iqfc$1!7_X6fXXZ00MXXeg1o-+fQ
zh6T+NQdtwz4DZbAWwFcc)kqQG(@kv`l^5Wt4l-}h`AfJ}Krf=!Az|f&Y4dxR{rORU
zX5W`etAE2d+B&;-xB24QB-&Ydn|YcUV6jJ({Tkv652I!O38_fIQVUeg6NMJc^+e5W
z-R=JM*^ku*w8P*$hIfNn?_^$eU6gp&h&@btwb9#n2i}vAk=*Pr8$DKAb83>@T%1sb
z^)9v1VNe^LNAUo+V@>puZsui!Mvuc_b>7DNPS53Sv-LgapTVm-qps)9>u+cJ8g*>E
z@43_quFBQd!oK~_;61ax+g42soL%1wuk>FJynjOfrt7jIgyJvk2gue9?+`V)QvRh;
z!vUl*xE|r!0hQ3~b*QbfHd)$FKUoxQvdr1-*{4T{Q6jB3gz-vgmyWO>S{9XiLAzgA
z1FAKg(PO`r5UJ$sB93M$*X3b^+u1w+8N3lX!WdbMFgMcwDJDwE*<E%I#mm(<hWKj{
zRt8wE8q(VrQRV9Sk)`~L96KmQo<^C!SmEjK_bxxw80f}3`h=@{iTw#zcUs05%x6lS
zRB}AC{)dKB^Z1)XThDI7^{X7^vSStHkAGxx<QiyQB9t<#Nzy=Gp<~C2iSQEsLI1`a
zlZ#EC6Bs0c3n8`QY;x$HdtsS5D~}_zW!-S=1b?6H0w?pN^BfezM&@CBnd)wo!(u<e
zX?Z9oYLs(is@z{MhuP)3lIA&raun?D)AP{QHp<z*EV-~=j$ksfw9%eRSugTXowu$T
zr@(u%+@<kU3TTwLn^o!=zS*lO=Y`FUvO@y7OsRsgKH!cZ3bpzf>hLA@=F{=%Ps8V{
zxB7BcX<%8iPcx8f67|*V)g0i<WJ)EIVgs(Ar%^*Mn+8To=k*#=OZk~IOX%3Pd_j0A
zf7s&1t#FErEa|m)@JW`DCeTw0rURvUT5Uj>Xsf-}Yum@daz*2hz6dubxOjt`*NwEz
z<BwT^(kjb~+k!THQm94wmNe=<z0}dYz@VqoQ*Y2|xmn6UUuh>%b`7{N<RQ@GDRmiP
zP8gVNRNL-h{IPgJ+5rW@7P+9Krg8f^I($^)-XFZQfL`Dc=tu?jKd>^?Wc_Sy_cG-u
z6wv`_2%W(|AScZ$mbSKn)l&5vhqQX2FI*V97-6!F+N}GhYvWovRzAHp`*y_+oT|<1
z|5R<VOD6{B)@Iw4{%dG$s0|{{u19SU6M0tO%q75W8K_O&j4u{%mlj(R^SX)Jgt_6@
z4HlZ3hEK2IrD48Y4ub4q;=w2+3Fx1kz2aX{*BYNZt>@+zb6~K@F9rg^oV1`^Ho;e#
z7{0}$EoVid{<-zv5Tq2UKx|LI9rV(cyhp7m@S4i0PrlZYnu87Yl+Pp7ZK;BeDH2yW
zl58q81^eBUOpUU3X`A2brli{;%`okbl%)khgSr+=%5l@_bc;59pA53kqfIWZ#4M!z
zx(rz>ur66P79BK=?O;6NaIz&YTd1^ptsLc2BF0>?NpdZ1%=f!uEe5aG&=Tvq(V*u@
zxW3#l)ju;?VnGW};}R$-eX3lQcf*R|7`m-HkzgHxK%gZi>tnLksU?=K$-Gylwb`^X
zFZ3uOPM#QNpT=2=DV%9C#9IK%?3#vuAeBnbDxo^9HdPOihFI%%YioiAe)px*ZX|Jg
zF#u1M12sVFfd^gy)`U<cr+3gF++HC5+4$7XjW*lHom1ljQ^DiGCFMB@O9ICOONJwf
z_IQVTussp+yF189`o+II9>te<d*ye>k3YV$JiY9>70ddTcW&&~>AE*|F7I2m;<;th
z<&|BVI(53vO<ju%ow20fnq+Y3OEGEnCu7{#nWsAo^xN|1K$E`eC+thiE$C0IA_4-3
zC2?wLTnuwX<#BjL%VZqx&8Nt46VtnR=7lM|E~YD-ruq-|UgQ&C$B&NYOcSS)`s_r4
zIYKgVR6ZmUX7|kZ$uBDY*GQn_>Z?2U?(NvOuVb%>jPc39%*Ms!{lCB1e(g0K*In0f
z&9&{<(wU;JzQRgzo>epDR(hqI^Sip0-jp(x_0x#xw;nZ;%lYJT<D-?|z5Zq9B>yDy
z<pNpRPS#iMZm)c`Ojh#Wdk>lp_PlLnUcv4is@3}moVRy%lMKmppCnsL#9sMr>Hk7*
fMFcdD=?0XK#(twOJOs-nO-F>w+;l%p=kfj@Mgrhi

literal 0
HcmV?d00001

diff --git a/web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokRdr.ttf b/web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZYokRdr.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..b814440ffdec9a2ad2c9d4edf41f774f2fe2eb73
GIT binary patch
literal 96856
zcmcG12Ygh;+WwTyCfQ9R2?0WK*d&Bb*lapIm0qNiP||53!4Qgwhz%4`xnMyrA|e;N
zA|fDyA|hf#MXn+O7Z9;wLoe6L{-1YdHU+VK-*^9ee$RR5%$f4eJMYYyzKk=*g4tpw
z+3<dO`33*j@{eYW@$JBS{e}-4>6-J|U5s7Tma(pn^cy)k=b0BD#JkwOjJ4P_Y-Bf2
z;nG!wa61m66qn5`nRW1;!Xm~-r!v<5t0`4iRL0I*-Jh{X-e&Br8>d#3l(&Am^Jchr
z!F~EvSUBef&4>9HpzYL|b@O|NTx(-2B!IEd%&MBQlJdRoR*c!FGUmT_X36|n@(lY4
zZjS=4>XMli6Yrk~e&h<q#Nk;rv+M3*4=!LV^&7m-Wk{Pmz?QKfR>l13snO4d6w~{|
z7rtgJpznp9zwQZ$k)N_X-gg>Y!8iHhEic>F;lPuVLwo+4ak#<n@Wgeyi5{!$mT_U{
zg%j}m2onfXkS%_azs~kEKk&6ojPriW1`%a>d=m3;3${)vrA-D3n~Sk|<eogyFFP-1
z7-DsKz2YmcojBypT#T=xcl@}x9mJ)1XVb|JsS_+z7R#%_+r9FB-2Wl}f%}8<LEIk(
zUtB&WAH)3#`2_Bp<R;uV%gwlNky~)zD!1akU2eyHhunetPPr5J=jHR@M6jMf8cc)O
zVBCk`5^N|g&Z=1r?z3<Swg8u4SK{K3`7+#Z#wFM@Y#YqGaB=oLF2VkZi?cJhI6I4r
zvoCQ8&beTmx8l*bx8|*36T@R*ZqM7p+>`f$xi{|(b3V_<y+7}d`&ek7;Dx*pZ%cRy
z%v1Ojm~Y@qaleJ%g8QxfR@mRi@56l~-w2y+99;2T94X{4@E2hJ4nG9*dm^53ksuP7
z5bXrw6&*wu*c=r{asNns#B6f1oDAs{%k@kuSxY5rsbnpctfi8*RI-*z)>6q@Dp^Y<
zYpG-{m8_+bwbp?ER!RA53q;=T<Bu6LXQ_O?F$)&NtBhH)F+9qcZ7hc!GG;$kj$F~<
z*pY*&#vB3@V^diju34-*>xOGKD`T~68lLN5P6DQ(#3UhaYuOaMAI1uh^CR&*2R3D_
z0_GCr{cJWI&o!(o%V+c9w-&a8;dhD(e*kPs5Y9CC7z01GD%=|QbFpNE?q*rgsvdA#
z1D9pESF^eG?~>q#T=ZZw5y}ksCs&oA^8pw0AcQm^9rrZ2OK-xTtDZxb;n8(T9$l<4
zmyNl~W_gh2FvS1ANp}xM{)Zui{3bCp4(qS-_^?W?Tgk%(SyS5SDHEn_<Z=xwRT3G=
zu7HH=V4ev|DXUgetwp|4PL`;5<#^NKqWqtS8fYG5SyCTblJYqddEb$Bfsc8}#X9(M
zu@MM=Hc*Sas(^bJbc1rP4yK_9VJ2){u9l6Z=4yqonbNe8Y&m;@eayT(iVx*e`5eBI
zKaNuPg$NS^#dNVn9F>+#mJ{Uy`LsM~<F;0|;kKJ>&)B~7Yv(uA?+(A0{0{hi;P<_~
zrG0|^M*BAV*Zv*+2ly}b-|BzL-y4t>P#&-<;E{l>0eb=t1RM!C6L2ozLZBlsDlk4U
zDX@EBLEwnMNrBaY3j&t}t_)lo_(b3*j<ycBqtH?5sC8^{>~_52IP5s>_{Q;zGr$??
zbUC{?Go5{%gPr4?<<42oh0YtDw>#H4A9HSZ?sdNHJnH<^`F)TrC^Kk!(A=Q4L5~D&
z4cZfQAm~WYnV@q)7lIwZlY*xQ&kepd`0?QF!7l|L2>u}Wbnw@~KZW>(goU&Y=^HXA
zWK2kDNOj19kR>613wb1DYsj9E10lykJ`1&nhKE|AokG(?b3%uP7KT=a)`l($T^4$0
z==#tnLU)Aj3q2TmJoNL>^I;+^BrH0tU6>~<Cv0fgonfCgi)l8c+3aRlH@msnUCkb7
zcCOila7TDlczk$Lc=zyv@G;?~;nm>_!k2`v3||}mNch(9@4~$i&WIKf2@%~QdPEdP
zR7TWBEQ(kbac9K(h$kX;MC^+=7;!w}^N912A~Ga0I&w^8X=HWeg2*M2D<cm@o`^gf
z`9pJC^RVVI%{w$tZQi%};O66+mp7l)d|~q&o8R7iUGvA9A8URgsz+39)as}WQJbQ6
zM(vL}6m=r%Y}5}eY%RiC#I)$pBDF=|7K2+%Xfd@#U5mvnmbX~b;<J`nE%RGG)pA$M
zS6c<OYT2r7D|f4&t@^hb)vCDF{jDBv^=zw`qXVKNqg~NmqBEoOqK8LMh@Ki<7ri)o
zdGzY&4bhvTcSgU_x^?TS*7IAx(E9b(@3;P__1CR`ju{hE8dDv!AZAI-%9yn=kHnme
zIUDnzSP>f>+cGvGHYqkMHZOKqY+-CgY;EjSu{Xuu5qp2^&e&ICzl-%+4y(D9U?o|T
ztr^xl>pJT;>+jZs*3;Gt*6Y^$)<@RY*3WJH+eEZ!)24Hqj5fJ#hP5ebGo{V!HdnW~
zxy@Z|9&Gb;n{Qlcu2rtXuG6k>T))Hx#6`vx##P4E#x07wDejKA`{N#qdoFHY+`+ix
zai7PXj~DSF@zL>9<JZMM7Qa1yZ~WWwN8>+Da3yp}$V|vf7@ja8VQNBM!s3MG39Az}
zBy399nXo_MP{N6}R@+W()7$2>9on|A?Y(V3YWsEDpA-EPBNE#rc23Ml%uO7YSd=&=
zadzU>i8m+SmH0s7lZnr@^KX~kZc)26?H+3PdHb~Xi`u`@p=E~w9q#GyQO8yt%R8>^
zBs=x)w7k=6ogJNrbe_}sjn0R<*t_I*sqOM)mtVU!@9OHB(Y2^+W!KuS>$~nt;z`Yt
z#w4vtI@hgRx7u!Ny1nX-au0Xk?0!GFRdSEyiOF{*zm@!@C*0H1bBAZI=R!)ClqD&9
zQZA&XrH)L!Ep=DwhiSoS{nM^W+m?1L-JYJFK0SR!`lj?BGkRqV$QYfmHdAJH&%82o
zUFO!zb6KOaZq0fy>z(cq-Me?6)%}_7Z}sTdqo&70J$Cju)8nfi=X+e}Y47Rk*`cSq
zXF<=3o|pH$s^={|AM5#gFVU-euYtWr_p0l)s@K|H5BJ*KYgezgdY$a`Wv?H5+j~d!
zcJ=PsyL<0`y@&N4*ZcC`i+V5Zy|MS6-p6}?+sD>tP@k23?(g$NpPhZ)?(<dOfWGd&
zEBZds_u0NL_kE}DvA&;WCuXN*=Vy=3uE<`LeOLBF+0SObn*BjeTF%m(cXC<o_}u$*
zPv#BHTa>pnZ$;kSdF%5Y&D)Z<D{o)kTX~1`PUd}{_g&sE`F{B!`7QEY`5p5;`91RU
z@`vP)$)B7*JOAqZW%;Y}*W|yR|E~gjL7#$21uF_(FF4h&YrkpzuI=~teoyv0(C__z
zC;ENX?_9s1``h{l_mAq|rhkY2$^E<c&+R|B|ET^G`v0x}{{H6&bRAGW;N}5u4ft_j
zi-83Liw9ma@cDsf289nAFlff04TIhp^yA>r!D)j>4_-9*_Q5*_zd88G;0r@Chg1)F
za>$26<A+Wix^d_~heZz?H*D3gbHlq2Uow2xWwy%(U3U9rZ;xm@qIAUFBVHTv{m8J9
zIU_F{Ieuix$l8&MM&34Z-N>g#?iu;+$kQYLJ<2|+#i$OWvPKOYRWzz<)K#Ny9d+NR
zEu&r@^}(n!qr9U#k4_!kXY}aN(?>5I{lMs5qu(8UZcOx;#4)L3rj6M(=CiR~$4(i0
z?br=tPmcX{T-dnr<JOPcG49~F&&KodA>*y_myf?`{5|70kAG?W(eYmu`WLn;Oeq{x
zczxl<!Xt%07deWW7qu<wQj}KIyQp8$@S^cWrA0MG^NOx6T3U2l(dwf6iykR@x@c$7
z%S8u@-Y+^a;hqT(P1rhN?}URBKA!Ny#JGw5Cyt(2I&u2M+KH<sJ~i=`iN_}XGO6{X
zlu3goT|ViKNsml=VbZ}#A5Z#ea_Ho4lLt?(n!J4S+R2+H@1A^g^7-O`;^^Y!;@-vm
ziia1EFP>ezqIh-j_Tt0E9~b|pgp~xAgqO4~X<IU+WJ<{uCCf`*EcvkHqmnO5zAJ52
zno&BUw5ar&(g#c5Ed8!5rEGlJ)n$*Cy<hfixwAa6yia*$`HJ!v%g<L>6}c5NDppkN
ztN5uhy>f2leU<l3Nt}{BW!99{Qy#nM+CF73`Xl35C-hesKjA$n(pd-5l64n7SqFX^
z*p27zcpih6!x20`hE}lybQA110ONpi)>{M_O7A{p;ruKs7bDmRzK4wx@3AWWy!R;D
z-edTA_zz-92%`(a>LNl|658Hf*m>p_c4p^4!2BM;yNquEJ;gjS0B&K=zlT5c4#_`H
z#q(nD9M1}bU<G_NcwCP@)<W;we6{y6zSw)7()0fl((XOsgBZ%9l<a)+BN;XZ<ViBE
z$5588<V!OCZ^4&WlwW@Y<R#^&!d$eTk*|LNHg?4Oo<@TnkS_T2fpp^1@Lo{5Li*y<
z8Pc2I1L@QM9YV(cg>Xo3O&Tsml`fM$Ujm{K>4lyf6o8H}=AJ}J|Nl=I2mhCXFI<!>
zDqB9N@<nCr_kglT<*zZIx9QN+4x$vY>W}n11T&S-|DU*kI1KnX)B&gq2vi?j43zgI
zsw3**(Den?8UHQ#>K>|peh;etp*pA$bUo#(ub6ewGu2}@)MJM<eC~9;Ms=GHRL8M{
z7#k9xr@XJ>*{<Q;0@{V@KOY*$e<`zA&uXcj{4apX%s&r@>SI+Gr+Q!06zNJuJ+9#0
zqUva>r!N5vmvy1~+n^JuWy}GFMpNDXe?k!aUkZ)G#dia8tB3l2&^P4wK;M>&03JO`
z7V7(jJSJT}!UiI4x6*IPy1_1xKjJ;@(`D#y43#tfn#y1L4#uOr2l3@B3Sf9nVrRU!
z`g9WCi6ngIl1Ls@ZdBP3(5o}d#^b#|Kvz8MxOYD9&RTLii(-daIO6KUm#OgkLWc;@
zVefL%9fZ?`Kk7Zp-(~~Ux0S+PhO#*U@uYf>GywG<eQ&oLEXH>L-)G_t`9x_b5aBF9
zg~8ZB$n8_e(?*ofWp2J4^12gP?%l!P_I|@}WJ7_$d=2<q!wT3z?`gIJX?_D`;8V!!
zdEhnp`yBKrfbRrk*+G>fq?OVrEEdN1gU|iU#rJ!E0Dgfv5)eQtPz%HZk?@<u)7dP(
z8}7Dx&+&cmv(<Y+x!b~~`rNVCAhXxJ$9+_8W|P=Cw2jVz&xNcMZHu4qZVAt0OF-uX
zwJ^^IYT@rIp6C4vBbpt6NL~k?>p-JfTYiAG#qeHRzjdr_KwmuX*U#`jf;(6ze%gBm
zc{@-zkQX-ApW9KE?2x(LyBp7K6`kbW$`0XMGl>-{I+v}03~PawNKZ6B3V9C3`_rtG
zILAuyZR#YZ63>7gvb3{tKs$u>9?wD8ISAX1v}>ri#O=s?fX`<+B8LqZnb7HR8qx+C
zzQ$ts7*@$gu`PTYD+I=1<aN5CwV?Olxe_P_Ci%eLU<-l1e2n*d_|4(tpcmu3r+Fdr
zLs95D<#8e27ebDO&=CXpbFeqO2M}*K{1(HV9l)3`^hHw(v;fcHKoHz_fcvv-rS})$
zIQ-?o-%7a21XAIqzoElH=i@mK=na2`fW=m#%&mlO6|xENH$l;2q{RhuG0>AuV2|OM
z#`8x(Kkg)e=PsbD@y&PO-57xUPGUK1Kg>3a!S08g3RyMup%QYe;sMClXy$<YJv;=X
zc+0(?v*oNm+u+>}`%<3CM)6$8I0pXqvk;&a5J0*Ev;;;#=l6l;0Ax?)p^GU8<OXK6
zG513*+Rac<Di35wX2Aw~-9CsPSe|Vl>cB&6zBtVa#iuM)e8UQn@0p<GM1fR^F=TOu
zjT679_vQ6wdj1st@DAZzOW`37w*m3!W^WVE%8tq{z4K8wWHQ0nc|ZwNZ}t?2k<S;P
zAE%LyDDUT}v+_g;>d;#6PpG#nF&#QQfdxqyban)54!C?&-paCpu0Vz{4+15SJ;C=(
zZn}!|sK<Vw?*;0JJ>cyq8;CNxh!?O$ptq43`8|$+`tv9L1CIvX2OMRikcVHf!O)=v
zN|#1?cfo!ua2hxQ8~}cS9|3q^E(GR^;b?!OZUAVUG!K}{m=|+c(0k@R0ela$4Tv$c
z9qfL988b=HMaJrY5P-tKd>qES8G{?ttN6YGH0F=FB#hBAFXqm?p8&`4>;x#j{&-#s
zEQL7-fPe22;Cf&Mu*_gLXf5D-NAC&i40eG|1~4<_1s`67<wf}3YJkGQT%CGPZh9h~
z&Y&j%N*{QjAHFN>!cO1_9*}<2#|=~%bK3@r`k1k3_}c<}3;3RiM&jAX={J<#w>It>
zX7$p6c0eTbs3lMi{bQ_Lhk`p}*8=mEiQzlt=7*ur9M2B6nqwv^uVC;f*0!pot{Qn^
zBX?deq|Pz(;)nUiP}U53W6vHwygwVBJ*vNp^&ddyzC*LexLD@UkwaX}J#x@U8lNYh
z9P_f81{sRnQud@3^d2)riUuf3`702w9kGY8@UpU*v)FolFR!kd$=2w5Wo=0rTdD6=
z)25WL<>p>fR>hWJ&b5jyR`<r{1<GbY^_-cttWMu&fv{?QN6d;_%@gka%7!@N4BX*P
z+9|=Y6ZJDaQ_lK<(wwOcrtrY+_PzFUzumG{EE1(+s7U4C^Vj%Rp2=M(RfkZv+QGdJ
zQ9#o}<*VXh@rZa-JSH9&PlzYQCh?TmES|<J!ZTtkLdI+&`4HR0UTwlX0JiC<I}7<C
z(Mfa`U1W(YlNEA`oF-?;nX*P+E@#U*a-O_GUMa7Vx5^drKDhxtTO!Ux%r<_*zr);L
zsVtY3a;lszt7NsDC2M7!oGa&J-eRG=McyXY$_JDVP>kH~l!}=%o9M)ZyshC4!Xy_G
zni|3aL_2WTO<?Yk#bNGIvN+6|P#WR@opO%+bx_JglE{D^$ylNea6_&%`)na3uIdx=
z(M-8~SYXbb!jZ4S4M#1)S-7(CxgZIV_6SIHD-0LVRtZsVTQ+e^yilHT$aJ>}L8TCU
z+(qxiG~9i8G?;~4GKY{mluM0V#>3?{v0XeXc8KT1PO(coFJ2J4#Y<wZcv0*@j8dmp
z<cM765M`nq>1~J!5)mEo-67s$#4Gi0AT3T>qh^*3UnD_Fg&*d#t1;W$lkZYew4p^e
zn7LHCDFu`>odAZ?L{e)ki7-5K<S?Z@mbF3tBtSdcBkzKh+i<)YY~(|3!~cqwDWBcR
zbrYX|LD!IK(reUa;3gKeVH;en!BrgcIssR#;?9CzyonUP#U<O`po8ciL_@0&^8Ne~
zzMNO{;k<x%;8E-cl)JatKK2k>%WlVv{$e&4^SPy{#fIXmL7dw7N09tS%7i&|S*lE!
zYd0pe&Ws7O_Qr&HeQlySe`CU`0As?60b|0N0%O8@1DGVf1SliOEtDY4*h`eMQbkKq
zqKFsF?n{~@*Y0jn?rt^ii2B@>G;udpxf^HP5hZt+V~6fwm4Up4>UK$U@;Y3shCuwi
zjeDZLaIspTQT(lxyVk}XQF3QOLH_`uKmsZiiZ*_$(ulPZ`YqAMZ<i^*H=DOa=`AFH
zc1I&lF)K@PU=;vKO3}ul3{r20n72fADA7o}9s1;e-bX=y+CXFCQ5xE#G;~8fgHi)s
z*u~DOvNIMdEOzlz4cdg3vqbx)H^~oek9P1KO|_eR81b!@7&}HS`3UY)l}#nqsvvi<
zRz=8Sl*zWJ!CImO1YrdVx!-|%tuj|i)akNRZpXc;%gxFS=}?v2f_o*_xsc0ExEDh%
z5_NTzoTW;+WPK3>)s<AnscyhZ7nrGxlT9T06)PCl%qTmmCF*N^<wB^`aCW0|5sEuk
zvZwlj>S7!3iPa9C`dUQS8Wb9Z&XEt4Pi5?3p3JW>abE1EO1UX!8+j7?&YG`*u%lW<
zhZFrLU!X<uYI&`^PJM}1V^z>vxsFx_p-$?9nfXzy2w#j!%<5l-*6dB}R<vtZuvP31
z)Zu?;>)3ks0QxsO*-LCMO8;x@b<`T~V07wTe1%W5FW7(Buj~R3=5aipcjTRTD%Rr+
z<b(KNK88==6Zs@w#>;snpU!Le<-C?JM6L2SemlRD-^2gT@8$RN_51<8f&YU)!*}vm
z`CDkk>r|#TN~K_aa<RMypSSDfa^&RS<Xy}u@0M#&o36*&n<(gMU({&5A(FnRj{?!!
z9RRu0`lN8Iy%^3Suv!8A0X7<K;wbdZDxl3%P=mEaS(poLo{#d9jDG1tw2v3F8?cUK
zDe|=kRxRDada=Jjll!u}**$0xuVMEghWl}$cg7w?Jdd-d*k$Z#wgtJpojr#-@p-lf
zQhkNJid7JA;3{Wtq4uo62;fJE^<!Lf*eC3B#QY^j8yBE<{e@l6Z9ItG#6x&E`lpe+
z1-nbFeEK_&#VWBi+{ImNEl=Pb*nPYUPhtPyX}mjo9IK%6*wd(`2e2JjM=_c`&&Toc
z=!F#VBDS9wV-?h^SY0uVz0POwYW60d#b>d1cpblz9pqQ>YtR?Dj$hCI#c$*{vy)gI
zwSs+&l^Cnor~EE{H~XBg!I;dKSTD7XeZ?Qd809x;hiyfkZ|Bcp?ZylEQb@GT4)9>)
z0qHf`IN}JO9<)AaP0*b|D}t5<T_3b4Xns&_P*qT6(4?R-K|_NIf_ev~2PFly3$lWu
zg2I9vK{n?F=MT<v&a=)l&J)ff&O^=v&i&3k&YjM!&P~oooEw~LovWQIoy(m|oQs|F
zvHoJJvluHeMmPsL^PIi0GQ)%Q8SSu2BN}TpLa<^(IDT=Q$LfvGv4-O~R&pG~dX9Zq
z)v*I>JDzYn<XG=m<G9nY!f~VHTE{}iT*oZObVs>kl4G1>gk!Lyz|q&y-I3}@a&&OS
zJ7OGBjxdMAVGH~v@cY2Cfu{qH2EG?~AaH-+p1_@fTLU)*J`%VAYe-gOCCPHECs`CY
zKd?5iDzGxJIIu8qRN&CS{((7xJp<DN-GQ9~+Xh;JEd#>?g97b=Ea0br?*qQV>XhRF
z?_r(Feymp6i8U*muySQXz}kS-0V@NR2P_F#9IzmuE}%MKYCvhggn%&t!vh8e<OTE&
z$PDlVbO~q|;0lNihztk`2nZ1Vzxbc`|H}W2|8f8K{15o=^M4*IVxI8d=)cbY9{=0@
zZ}q>?|62cr{&W3j`A_#R_n+iH&VPjeVE+RDzW&|)Q~i^$iYDGa#y`qG%s;@N*?+Kq
zWB=5C%6`Ot$bP`S-@eDb)4tWd$^M9agMF=iwSA?1xqXR!v3-HP&R%VwYA?lVoH6#{
z_JQ_1dvAND-DB@!Z)bPeqwV4LAiLep{C@KL-tQ~FPyJ5$9rb(9?`^-={Py}i@3-A=
zv)^NW8~xV#-Q#z=->rU2{1*Am^{e))^egro=QqM{uwQ{+U%&2tseVa*9sJ_`V*H}~
z!u$gKgzXpGdD}O(&uyn|$8Cpg2W@ZI_StsZcG$Mqp0GV+TW?!qyVJJ9w#;_DZINxh
zt=2Z(R%$D>jj#>271;XPy4zB1NwyBQcw3Au$`)pG*lhBG{6U_RXXP1rLLQNa<N>)~
z?x8OaOGGU*5PD8EOLJATM4?`pfbY~KtanO4ZL)x+pcYw#x`^tLY}6w+v3{sWR>2?D
zsv}X4=$c|D#tENCeL4@d!y&kP5B0(=s29Fq_o807z}BNiXo;~kTL1W}ss&y{EzpU*
zf%4yjy^oSVn0<mWKZc!GW!{T2KM5-*QRcZH>fK82kCI=@oha?sW0lp7sC(O^gx?GQ
z_o2q^iSoRa=b|L<<Rej%-^M5wR(GOqrTb0lj&=jg^VPi+_f%P_?zQSpZc-(=NyRsn
z?&a#PT^7UaQT85X?~!Ehk+A2x$jrA<EVv^~+z}@3^mdza=_VWIh8v0dEWFW_+I93y
z?LeYal`G=WE$6Cxow`@4yM9aDxfSnj#fw`KFK&vBbyGZcQ|a!e(%p@|GO$Ox5qC;o
zHzk84^)^Y_Bq=vZ%1x4aOQ}zi6mnODCUL(>aR;jGD5S2+ZCB;Ht8&|!!sEA)nJ*=m
zxRXSdDv2yr5?PA3l668$i9+urY0YORv}H&(M5#?mwAN6P6+LU$B*#vQhfXT?PD)M)
zP1%!dIw{$}hcatlB%6*(Djk*Ijw;<973Uq5`;IEKj!KFhCHd;0Ty{_{J1Cp>N)qiM
ziD`Hbs_rD;_R4pASq5`E6;C_$wjIU54-qfC5GfU+lcccQ(p%V&o)nT_+>rv@kpkRF
zW`)KV+`~*MNRYRyJ85--3O_+sz#Okq5U*qquQ-WUDT`OU$5Xs;L-L516nh-(C3EQ<
z;5}hSPdW#PQVtNM93V<LK$QHtR9r6N9A=V$OU2?+u^>!kL;2uRoWP$lYrm9=HcCEi
zl;1Y8M%j?YTPhq&`LdKROOh{3>1C|)6-(}UjFMFhz2&WNmn;S?VbUL>#63~so+xoo
zRJ+ruj4`Pss@>^S(lf;wqtX|nc#KgT#YifN2uIy1l`*QU#VC2epR&<@DV41izpYgW
ztyL;p%PW*U=}5GkqVBWRounA8+(gUEm6>uiT56Z**J0$2>|3hbZmH~BO0qwz%x6?A
zXH=MHB!ziKy*;DeMk$*pC7&pa1C=oJ)<CJ9PPEL>Y48`Nc#M+slzEQ2&s2B)mbi#g
z@kA+JqTrish?nLn#myBj&6WN&$JjI3Qyw>0AxEmWk;*1gxrtP6BF$S$cccn40-;G3
zVaggP-b5%L5z2Rj@)4ojHd8jclv&loY@6b7n@agM#oac%l`IV7VZ?EmoT;8FlvKiK
zq|7|eHk719_S!YcG)(ajrs54#5<+Ooo}?0{VuTN6*1kw8p-L*D%5SLRGgPG_RJjjT
zp@k|ALseWM%4LXh8KP{0l_Y|VBtQ{runHqs`3_dDf>b;~>TQsE>r}irkW#^xDK`%F
z)}f^0P<|aM1rDWM4#knf_@Wdz6kma=)(KR81J&CA<uX9|4N&0(s2Bqj*8wWV0OOLv
z@rS)+b|d?0@Ip^o_C!hcL`n8UN%lm^uU*AuS3KJl4|WxcUB!Yhl^e<dyW#}?lv(?w
z9Pm?;@l$^NlwUvP(x%KdV<ulV6{AgQq*T77ax+xLGE}`Cgu6t)Z6?Cgl(?s7;+`mR
zPgJ|psT4?!cBfNG&)S_%rBLY;ibtV15|T<E!clihrBJyflsw>H*_5d}rILC74IDrp
z{SrUy_+j7*eSS4!)&c9^J7Jch3)bBysnL&Q_)9^5F%50P46MP=!Z=tD%<c6;|1cjt
z(0=G44nV7q_R0*wI2rXrFGFjQdflVZR~(C;;&}8&sRuq0y~tP5V|)U0eF9^0WoY~P
zaXVUY0X&d9(1r^_FFS;X@-W_vhw})`_eS#OXw|hq8?l`I%3Gl~7LB%I47C(_8}!sG
z(EoF>*Hqs;fw$#}ydBzq9aKNPGunV%F{aRsyD|FUVL$K`^xe~VI?uo;dlv7`dtmh9
zE%aUA<h?Lg)f@9$eRyA<&2!LV%tJ4~fcL|$n*pY`KLqX2VeAyf3oqj%(3%{Do@gb;
z0I(wmz0r5k`+bK!$);eey~vCUOjhmGQZ+tMfgbiIv{$E4PZeVYGk6uBiP6Uz^j2xq
zU^ZH?bNF0753^_U`4xNtzY-$}SMf#sYQC6X!>{Gnq4j)-{S!Ueso3qagfB&F_a?rK
z-;6fzEok%J##dn60sUHxJ=}rOhr9S{ezzKfSi`>H_p;~sTI%D{cmzA6M<m#1==W|!
z8~GvZu9}8@Co?fm`!Ih5BgK#M$FNu73H~JC#Gm4u`O|z0#xJ&FC((BPEZ@P_@#oN{
z#*QM4N!FmRyc@$kFY-P7CBB!x%sIOp{e)V~)6eFwp#S_T`p>WPH~5?AMPvK}yN?d?
zcljayPyQZ%A2Ulo@(=hC{vkigkMZODU;G3=$xmSfp^nYPnCm=#nt#mC@K5-s{4@SJ
z`UPL`v;0f`75^F|x!>}0{5#B^{F|R=AMyWSuJK3y6aSh2g1PQr`33Gp5#i{wT!Fn>
zSFwdc2q|pBPuPXO2oQn7A)F#e1Y@-0DG?$<u{Wcc2p16|QZyG)qJ?NFT8U`UTEvK0
zVTm^EW8o5UA|CS=H;J|)k@iht*HlNEUtw3HSF~7kVb_SR7{Tu*+#*?cM2biiX(C-@
zh)j_sx{Ds7r|2bmi$0>S$fhxVktg!mSy8}th<>8K7=Ya&gV-lxuoxnSVhrUgF-!~>
zmx&Q#q!=Yei!oxX7$?SyLQy0ph>2p7m@JA#3FeV7Qy?ltrI;e7ifPzkGDB2}nW9?M
zh*{!tQ7dMPIx$Dg74yV=afMhQt`rN!RhWUgS}YdVh-<}l;(Bp|SR$5+8^ul7!*{b-
zE^ZOGird5r@i(zjtP;12JH(yhF0oqNE$$J27i+}5Vy(DOtP}T(_2L1sLHt8(6c37r
zSRjkQ_+oR6MYUipSu2brw#ID5CFZbLGZu<5dkZ5?HjKr^V?@ru{Mc6Pq}zi1bbHy$
z=tI819>zFj7~9OAuAlRI2|dajnn_XfY`rmlHHj6oa5fp^exI^n%wX=pEXR$%nP<Tq
zi<)bBS?m+9i2dwl@hZl6my6fL>*5XcaP8tvaX`E!-WKnOgW_FrNc>a0C*Bu_#RuYu
z_z=6}j)~*qU*d!~DNbRR+-dQ#I3qq0pNh}K=i&=-R(vVG5?_mN#JA#{_)dH;{w>an
z|A-&NkK!lsv-m~)DlQ1G#I{K()XqphX-AKEt@M`xGEh3CQwGUk86rbvm~1A)WrU2B
z&1IBqAzR8;GFrBlF)|i=huTP&jFa&)LAI5NvK_k)Bh~)sliw-Zv+HFC*->_qon;r<
zRVK-9(v7`F9+@IjWtvQv8EmJ_lvykQqn`g}-?Q_wyX+x*%3iX!>?8ZiY?&i-WuDBJ
z1+t&)FKM*#YxWJ>E(bD~ngzNYz5P`z8{?@Z>_Lna{vBh8cVSJ)8uky&qTENLiE@w}
zEQiRUa+n-0FOwtWNI6Q5mSf~tIZlq3g|bLa!2YL6*kxGEp2fUTsVqZVy8^A}T#OVP
zW+yRMITbC0>2e190AsgD*oW*G`xiUPj<XYJz0bsaWR0AK_G&F=GV3sxITy2;^D&>f
z05h5kF{eqR!;9rLYJ~WDd4pUcm&zN_YFZ|5mdi0_d@JS)R$#n!rCcR%mv_iJ<y~?$
zMqclcf0t|2X!3m$<H;C>eL!x&4#<tz|M(E?ew2@5_v7Q(`}ibwK0bwgk56OQ<1^Uv
zxD7iVpT&O1=djyx7xp^7Aa~0bF}m`S+$&#}`{XMaYk5_^CSR9t$Tu<a@|JvCz9SFH
zcQFq0Px+pFUmj+=*^B<!GfT>9YpU(prL`4vEBxnFPje^d<`GTK&vqN?F*McCbVD-@
z%{DaG(0omEjQ<?tKgambN%zmLnNm|-F(c5>q;jW<*`4Z6aVL{+cXELW&7GXDe7ilV
zDLPcQ3C*4E%q^Q%TQ+BAWmUy|M{apdT}fG4MRlD$udD<~GOi78Zo`{9AFpd`O6u(S
z+Eu<0K)w=yBfmZvlLnK<91~8C2`9&-G1sIq*Kn0<(wLj>pKsD=s4tDlnZ7h8=O-IU
zCachp=2U0DMrrETgc*0T$7Ao;C~Y3MlA1d;10gEuxRbL|oc$X@&}r}(o;=yM{-q_g
z_5pR%s>&<;2k4ZO8{~O`cAIO`o15)FK=ZG2#*^>k8f@e`2R4nvot$D)l49hLl4>7Z
zQZ}cq!alg3W4Ow(4Mv)DRP|m=lqp8UDMqxZMzpCO`%o2>=CmNwKD1GgscAa2RFlY5
z!$@kT|1h1v;9*neR8J|XoinqlWR8m4ot&qXEIB{dWM{64Gtb1CXOfX;Ld`Rw<|$s?
z$*IPDn#XV0)S6nOY<VUHc_!36<0{{TYE&5|OA8ex%&2>Eep<SHgcjI{`qaVJ#Fu8`
zPct#3nHbXY?IV>h=g5n5Buz!`_9PqerW+>GP13UR?V}pSl&(T{C+pYnW@1V=F{SI^
zlGD@eqqY8wHYI1YDmi|mYo}FD2_Ah3SsT^NQ#l3MXXuQ~%Q7@a=U~2(b$+_v=mweQ
z8}{=JKlz5Ad?VWexBuwIikjgencBxrsV$jXVIQl7GqyoEfn&?3Rn%6@o;KS)Ub%6O
zZ+NL0$@B$n7%DKrhvpTk@EnCr3TASCmQSY2hdVh_l_sc(5h_YWiIG-G<BHZqlx?&z
zTS*G)VRSlMNea(OQlLgs*}e+e6xtl)KgambG5&Kh{7XzFWT>waa;Nz;50#Dz4Hd1)
zr%a<Lx=KmTcV{@u8bstMt53VVypjI64R3D4o4deXp<h>+lvn5)wxZs@mUfOwT#gAK
z#{`h$tC4&~)g&(0BrZ3@zrrNWP+#JbvwVp|4QoW0Y;vR^%{iq}Vx}}<231>%eM+N5
zd6IPvo33hD=hOzDns<-kCCg}tC&xCGYS?MIgiO;ZC$~_0Bi3A#-rOAjX^j=vQ{dwo
zY~(qoH;oH*r%6eQkwZ#a(2Oay6&2N0CDrBA%IsCT_NY?q+p3T-9dC*$F!laT{3%A>
zDMrqzM$V}z_G%TB_Fj->udbH}G}@%JzS=chrDi#+OX$3i+L~EYEBtG8%7bezQ5~4F
z;%jC2zC6AvInSg|R~O0oy1D>We1ikSZ(539O+z)2XHt`Av?tHF$~UR<DR+L3sd{sK
z(oW7#%dle!AHG#O#q?O8V!So-N;5H}nHbUv?6Z|G=j@BKDorb!C)s#SH%z3b*y|dF
zoUTGdm8(*WD%Zr2ZemC`X~<GChPw>=9IaS$Op%(StKK=P>YZ~5S)2Muf4-oD=5wMy
zRCxAPrbdtRGyLW>$TZ)upKtieH+<zAz6y{mQvwb3mB0+NM^FjR)0OZ%Ev9)5VhWsB
zUkP8KE8!~|UQ#Y3=j$poIlsWLR$vqj`nW)a=UC9B?4lAjij$>$KvA@KJzDWmfQ*>a
zR6%rm(v%{CD*NmVU2Ec5`OnVL_IOq*52~}lW4_6rG?lAvPnK3pPqr4eM=K26>&oAw
z6$j5s*r2M`2Q^xvKg@2A))G*|mrpIyb$UGMhL3c^N0tdMU1zGte8D~GhMz2zT?o&}
zL4V2d?6Ws~Wcm0oG{eXz!=x|6@RMQWm*GpNq3MQZ7(O!$pBaYF48vcB;VZ+)CByKQ
zVfe`~{OIqG+mmVH&ouF8n)owKe3>R({gs4!6Mm)%KhuPtY2=h?;?bXXxHsv|GU?6o
z<)?}-IZs#a$X^qm(JPPsTDv{jny+Nt^hXog@RyY-D<@a_0h6bxJLZKZ*C|t7p!yV~
zW+#=%lBAMA^8rYjuk1bPnLbli9!v`=YHN~cJ#YZ}O4?92Pun=^rlRUsc7c^Ob83xg
z+Favq_O$uR$}t<gx@v8#m^Ni<opx9~%>+ng&6BTN-k>>-%4t*P)K-+2%$}-Vxsz3<
zqD`eT2UH2ogUU$1*IyS8`XKr_Rb>L6Rp!9G61pcPS!DvK?^%bJqQA?YjC>tlM!pUw
z-=l=<$@eIsf~rga)%+yu@46@1<F?O9E=W$#)+9#@ZT6g5vz5@4frLf|BQ!E<p=lEd
zO}QhXDR)|E%BY2=94etH)2ymFv$e~a)2e;Oip%GeR4Ln#StYgjELT+4smD<DSgWM3
zysLbjJ*U*iA`F_v(gqew>scg|W)bc*i*V;-5k?=2aA;VB$*_pmJ{HNPVX<^}6BbKn
zH)Rpt6^pdIT}e?Hh($6ODUwl3QJaWG<&IcX?lg<as997F6^mqQ!~#7wW`Ulavnpz*
z)s*X?%4%lLEKx?y87-JsoGAlwMh3$f88v6xM4Tyi#F=uZIa5Z>nR2K&BU2;J=&><p
z^z7q|%nr>N8SN!1x9z2xlxb3~iPkWCrGA>C$y80IX);}t8JcKKvd`2{)tYEEw$IW}
zwVG&6v};|n&(W51HJPW0R%`ne`e}h8R9xMjTvO-i#;Mz*8)2ZPF3xucDR*gE+OJAu
zi7kIlZH)>bIm;7VR#R0|Jrh+_T}kZ~wyJ5hCAuoePPfmhm<?O=m}M)ksh*-AbdSa3
z)<Z*}x_G<wHyF>R8qvcp9(T5>esWB;qB{v5PjZ@Lb`>hCB-(yK8c{cOT5WkCG(s6>
ztJsqD7afjuC6lbb<apMhCF?IXp4FEF)E$VRlxj>3QZ=nM&vsHtH0B_sMdrc8qofJ{
zy7EfaUnFp;Q<I#W5?C?24!wf9igN7(-=31%+M0QDW|?PCpn5K^nWx4S(1=i9Co~>3
z?`gXG;K@K7b+yw<rWl`Ty6=a^hH;0!pL$<z!Z8v{(*srrPxG3dtiw-F*3TKqy24G@
ztqD}%IxTM9dcw2$%Ih3*d-OmUsQH@e0VHUa`5I#&No$(<8tV}k#IL`~DQ>s=_JJmq
zDVJzC8k^*L8;`N^)Z3&Oo0NK+RAZA`Z<A(h(&}x}jZJ#JO@^__sJF>9HktJ{S;i)-
z-X`1FWY^o|7@M4Wn_Od)TW?cfYzllf$tI=A^(jr(ZHg3~3+@y>cmt}XnW9H!@T{e2
zKC5`vZJQJ`kZ3-u$UNP)NztECJnObhifP-Vc$Bul-pIjIF9(m2gQs2&9>ar2=V*$@
z<e*2_6)7IA0Vyda&J<m@q@<WQQ;dJz+JHitH0UM-o=qB3O>U>w=e8dDb*JbtK2WWL
zDd|Rj>B&hYs#}-hR)ed-q;bZaRMzN?yU`oyTcbBAjm)WyTtS-}y~%C#2Kj2<pisDz
z%^PKI^2Qe@y=jP(p0XPGfo?SlEv3;LXt;Tk-Y6brZt}(#54~xKhn{@#D034(zIf<O
zLp;Qr(F@(#Mzc-VltynnDIS$~o@CQpGsDjwx7#!W-72r~tZP)aJI675R!Lcfs;5;|
z=ho^{kY7+hs|IWUR;<UKHRiT>!rFX1OU%^KK1|x>#$xx=oiVWhH<tn2VPB4d=m#3F
zA!xr)f`(WI+Ezn+2AZfL$!|Li(G|442IfW??Ha^t1t!WsJ86iSpx9$ckhG7oi-yPr
zCI5gJ3!0=MazMLjU?&&DZV!eP4ouMd?m!Qi^FV3uCLm)#dud48eMD>V0T~P0M?(w%
z?W-Yf0?h^r0Ra?ghzigN8e#_ML=901I!Qy4%&>2iAc{c^<Pexk0Fp8BbESru0=iH`
zOb5M6Lreu-q#;S(>kK&P{TiY_=z0zDCFlbh;&adq8rbQ~Fsr8^z5v~*A*w(h)DW{k
zAJUK{=Z7`KwV;n^h?hYh)exgWAJdSDppR>)JbD6VKwJ;{q=p;^x=BNP0{WDObb)RL
zo`(BdK(RNLAculJqaizhVy_=TTn@TTLy)|;Ye>q6XEnrf&>b3LALw%$Vhrd`;CX~E
zL0`}i13`BKdx3O-(n;tAkbeU4^NPVJ(EY$`0P*m;K`H1PzyV+}@Rk9|;cWviD4p9&
zxDPl8ya#Lm-q(;VK@S^{3_bup1jyY{gCn5F488+Bu0g7S8CC_p7W4#g8XF&MpdV{+
zC+Has?AT{m)2+bcK}lDjJG=`h=?cK9Y@G$Zf|=y-wFVyn`i%ys^n9y<eH;v@P%!Kr
zVK`NSvHxgDoR5sXBntcn&>w-H;pRcmUo`lmpucKx%7Y6Uoa98Z132=5(y7wg0~7{@
zKv1DUWghF4G#sEvzmmZqP(K6k!|fVa@x-{l0m>RqJW#+oD8?yVLR)~s0<boUksKA;
zfd*+{)fD5w28o~{8dyoic&I^p&@c_EKX@~P&Y<BM*muRSib^9HG*W|hdGqE59?&Qa
ztfpevlcSLW3LPR~2OPuND-DuKv<B5fShugy4HSBybOHIrV-0dZEe)*aVOX`Lkqhe5
zz#bvS;|%gZp+icK=7EwN3HboY4xoCDlUxV`0FoVm)i;cjTnIw|lz9SHMKIpc;4;uo
z8dxX6ILV7J5`excom~#v)qrH4q=7Xej8i%Zlt<8MrPoV9Nxp<afMiOL0LhW?PastT
z>lzqOGbjR0*TCuq#xo2ifMyy@2F=pIDl&#WQ5wadq`LstVKA&_(<lS&rGXV03@h6-
zD8Kq>V23N?eGN)Mvo)}KgK^3;!W1A^18X`Mc42AE0Hyo@*gDVxgBs9&8rVb2u#;3{
zCMe|-VKy+(K!6T1co%fA27NbF{!t!Y0Swik`W-9qG_C_3u0h`xPWeh$0F2O}x?bh$
zNKne7Q5tMF=xBo#pkp+!15oEH<t@p1oCbRll=Of=@}xWls4mA2G>yAJDbE0^*Ey9*
z0?Bid2G#YP@{({5P^^Jfk&IK`5bg#_HK=~)Wd`?ymTS;AfmayZ2U@9tbH;U^QNC>i
zrfN{#kKJ(^B&+Ef^gZB|mxRZFDh>KRaLO~n;{cU^fW8%+@|f@hFiV5J8~k#ECqZj9
zsJ>VEO?kcxpn3tI`kv1**aJ%CAHW(UhV_pc`#|SwV0Dt#gDc?XCzux)ya9Tp2G#w1
zp}_&rt2ETNVG+!PH-W_lZ9s1`;GmSRfcOe@l?Jt~_&N=0FL25O!cu_J3D7qXCje@Y
z8%huKNVq^LK7iVYoOmJx0dHww^%}!oPz};e%5Q+$NA#^yARgY;pl>oiWI%CJego_T
z=z9iFfxfT7PJ$jb*bGW~0N~Uth7+PRo(3g70I+kDamstb7J%FVSkud}3RA-Zr8EQB
zQOfuy1_hv>YhVo;<6juu0!sM`;3RFvDK81xzz-T&`NsH<2Bd?OmjG51GybbVEM(eJ
zgW5`>l?MMiXtV~kgG6f$tZ`*@Vg!L?CUP~fI++Qihd?qD^bBywR*V2f!VLL|Q5xI}
zI$DEdM(sZ_4sIYLF&>xzGh{^VNa~A_Tm;Ig0+K*&eQKL?lm%*w6ZkivD31hw4ix2)
zz`q4WSrpYULtdf=sDl}@5p#em0S;URK%Yebuo$==Z~!+Ngo54#tOS|?w*z+oF~Dkr
zc+k5w_zBQ88vJWe<OhL&2YR0d<&}W$<CHTdpaVG7Qh`Iq#DfN5pqmV!>teIP+n~@h
z1(NMH1Crr(gX5sjYRG}0&jCAuA;9y%3utc-0)5edc-{w~4v^3jL2<kT5I=`CB<0Ts
z8gc?C<sTpmK|j=xlR$|NKvLcw(~w1=#1jF!FDO33X@KG&90Vxu2^1%}BOnaP42nUy
zK`E#(fR0fAL7@`VW&r(=eg@D9tP9mZxsd(_&<}~cSC|DFXiy6ZJy3w&NT<PE&>(~P
zpwJJ61)$Img@vHuKm@P|XbHH0#Xthk9)M0!KT6>?(2hVS;BP<|gH@nOKr#Tmlc@%)
zL9>8fz}-NO!CKH<ARkx<ATJdtze@}r0Hv@96wkv3T|svm5MR3u+F>jrQG@D(ScFdy
zuYmT`z^Y#s+aDMJ``19BX9V#kD0m={KE)2#5buJH&=CIwg{~09d!S>1aWF&IVxcz#
z(y!Px8dzP-Vv#li>1*tB8sc9J$9ZXB&jdEKX>b=P@|}R46wLD1pf<9F{3Xzsf`$Ag
zP#f1m{t{@6!3x%(Hm?<;LE{Zps0Ouvttbt4IcN(FY8zUX2KMbTtBnTl3+mFqDtcxS
z9{{!WthO37-e5uI1Zv+|6bC?K4_0RlYTsEN4XhbvR*D9-lPu^70VgvsD@}viO;)-F
zRvI%aLxb8uR;C6{CSw-#ia>25tGfo)Av3Fo2DOi@-Wphw%q&VLK<y)o(gxt%17>Aw
zP+Q4@eiE>znOV>s0=1j0JPjH<vGO&j9b^?~&^U@kasjAKWI@LWG^S!f*9g=;vM9d+
z8mF)*j{$x?=ok$eSFoU01Zt;P&@Tep13F%V+9?+40YKvp7Uey_QBEw%Z-B-iERrw4
zNrog-fW{-N$r_wwSgb)~4_1i=PDNl=sRs6NGpkGkdr6o@vH)mI!kVGM*MU}PU_T7A
zW@>OsJL)U~I|N#z!8d>|)}V0#>lzKd8}wQY8Yi%>)8H?Hl8gWvC$MhNp!Sw^s|Jl1
zSR^liPBgPtYS4IqMe+iu{biAi02&*xNG<@i#VnEqK>ZSnbO_-809~s=<1*Gd4I1;a
zNDlz&uUnM&0P71%X$Gk8Zc#b`mJLc_0X!6RqXtggVAg{g)Tg%|(!dIMW<9Jy{d?;X
z4eY&Q)}tEK*S8+iz>X|tJ+49he(MPh?9*b_lNvMzU~SUC?k#3Lr9tBX)@BVxI{UN+
zjSW~^G_cc)S<h(DIDxfQgAD}Tra|Kc)^-h?xx%bxHK^}v?a;vaAk2DBgZjbNP7R!+
z!>nBz)F-x{*I?5?sXPGGKel#jFw#NN34mvU?$KbRkE9a-^_#7|8jN)FWew^>TT})B
z?0RC>D;m_7wn%RPoQ}e*S2d`=XuYO^(+-&Rx(4+fEh;krjb&PIYEWOqB3%J!T+<?*
z1E^nOk)8oGzG=OqLH!f!pazY1TJLJ`t3eNG(AcN-PYu2p^gRt42esbU;Mag2)}S#_
z>jMpbE$9&q8t=3|)ZmoHqZ%~!X&uwxl*Z#4G!AP0OM@>1J)uEkqSi?belzGP4H_S{
zKGNXJK~HPY7^3yD1}8l_qd{Ye)+ZV`cZFG>YS5UX^_d1Io<G;1@kQ$k4Ng3t)xd5x
zW__uF9cs+_N`uBCt*<pW@%)VjjZ0eJYH;HDoCYKModze}`Cfy@AgzCE@K-_4YtVS4
zMehJkIzrC?`w`TDLtk9}8WK9_3Iv>JuR#A?VHz~<?P{i>%;7Kt)W>k4Ji8)c9tYZ7
zLresX(h#+vErC{WGXykRgZehE7$6q*!$2(!>g%{%KpgC=LE|;VWYBgRq5!m;hD5qt
zZVhU~x;#J%`0odrrXdG_W&zz1=19<<8e%qRFAXsdv^UTPZc0G&G{gl^3Jah<kE_3i
zm<vkb0@Md`&C(DzgI=y7-U1~*i{R!qP?Q;hI0TAv;<^>)dq8j35YRW*{TkwH&<z>_
zdg0m#JP7yD3)jOM;ychsHN^LzDCYzLy>p=q6U5J;PXU`@hK{(l0MEb-op5c}5Wj#v
z3qUso^uo1EL;Q;Au?P(b8OOEI5Z8esj|gH3DDsFPZU99d5oA};Bn@hF#|_tzA)uE5
z$Y*NP$BhIEVYY)70h3@31-(f_HV0h+tb#rAHtrJ*i8?eM`Av`=LE)c3?eKW`C&+G~
z%`~X(A0MtEk&bwTOAuaA=q5o%gBr-rFk2eb$B3tAfch2j&;f#M3tFrpk^cB{paS;r
zmmoFdUQp;iLGA{H&L^}%yz@a5HROw+2%8}HV488AhD--Vz9l{l`|hAyfo(8De-n2C
z$S2tw6yYW!4A~cSp9Xf(vBXz3WF{!e2|*TszM&x}V;VCIfQ+c$({8#3^?BMOZwN9E
z6nRCUep3500P;XAWGo43PC^=}&z}VTl6t^gh-o+I7lFof9v!Jc<2X=71(5*C0f8{V
z%g>P2&o=mNi)Ih<gCJkWu)}m<2JDwIn*(mKpBaBZiP?#6m<{cVo<=cSfHQ#?VIT5s
z*j;=-b_BnKow^@kKkgUUb^9a#6}w|Iu#0sZcB7VIhv}8rQF=XgkgmjD(Yvuf^giqi
z-GDuzo3L~9S)6zI0#3Pn1A8lvi;u9+F%-KSU9vrPDt5vC#8m7*%*SrQ670o$82jgT
z$0o++#tw)b5<5J0MC`cOqS!UD>tdg?q~&jgS}m+NE79s~^{@t5Bds#4#<~IjQFWKK
z*80)q?{d1LT+uGe74K^2a=TJoX|C?BKCV310N3TNMXsw|x4Le3-S67qdeHT->oM08
zuFbAzTsvI5;v(W&#JS?)<J!d~#f`xKRZYTwRjrEq1piKDj}MIxk8h6usIuZa$M=sf
zj;~0N2`v-aBqSzuPF$DxbmF$eU5PIy?n`_v@r`!P+D&gC(SAhxPm&UodOY~dqa%N|
zUGU-zTNHcd#td^ddTS*ZWn8BuyApe|pTrL8H~A^-b^aVXnt$NGVD~Xeb~twXPQu>a
zIoPecSnbWd9XoK>K(hB6$!^9z*ynJL=!@9X`Zji|p1|(XQ0yITiM^p6AlW2HHVZpC
zFP3aSNOl+`JEmT;!m{IkzoIP5YHM|}JXUXOgf+&RZY{QMwN^s1>mb=cSD34%E5_x5
zWV^XMkZhK#CnVd?HOo~8$u2gM-3ZA(3dug@+Tz-Nkz|L*jf^XTWLMNnwizVbs$R0?
zO0qFVvYQjPChkn!4avR=$%Yxpo=J*N>aHXUZ6?Xm$=Ti)f#)D)=Dm;3Z&trahSn4B
zy%$hNdT;XHi2HKy&E93+rQRFq3D4ubS9yDRr!h-Ct;CE?8?^dRe$@|U1#Q(z+^67P
zj`G3SESBS4?Y-Vx<*ht@{^RR0QMwqoj_Ai-Kko7|%G@9QPNCla==qOO)9BwR7oMAc
z6nP5u<f$EGcdGTN(WjzMU3O~dsllfPof-(6A*b?A<%0G-6??MkWaY`SQ~swUV<(?J
zx#i^Ylj~0&J=y+byORj%#OJULJmEcY^u(SMJ5IcK;-P;{II-r$UB~V`cH^-n$F4oL
z_}Jwb-d}ahbM(Wb$sc}l<jzAA4!H{3j)636Z!pfsL9%rKY9O3Eu$=h8&fo$`wR3;j
z<YZv=4sP*gG2MMXl;=BrX1v2m!;PMnVb|>%*rFEp-IeKy1~=LyH{kt74P&z&yK*;T
z2kvI<y4`^q<A6LZ&)86v*&=OG;9un-PE0#&J8C<D=Tq9B?KqijsArr0Y=_PJLl@b<
z*7O;^pVzq9zUi}VUDId%WV=;SF8X1Y|1$BJ<Tx>4klMdLQ%0f0kHxtF)973P?DTFe
zV{s<HP1xB#LsZH*Q7ngGhyQdj6(e&T=LLL;UFV---+7goCC6eH|I1>uOhgFR%W>ip
z>7pI{*n!;vCjd;66S1RzpBSTeor{62;arbiY$&7i{U@_xR>~H$Yp{R*dd!vI$2PEk
zu#H&d@eoD@pTP=(_p!3z2>T8vKCEqYhKCd9a>Sc6H{5hq22RQtfs-DpeJ5M+`LY#G
zuE1#%IAh{boDy*mv+zAIE8Y{c;e#;4Jenuq{}tNetoe3qEKg+Pd3!byv$JJ98RwIG
zSOrhP$rL?V31(pHcn+Jxb8$XI9?plzXA3dAcr|7Xuj7}o8#w-X6SH;8FiX1x=W$5P
zlH7usx?6EB$7J?5Ud&c;oC=Qlw%d6rPBWi^vnOYu7OuhRlQVG=hv4tx#L_Ep=Hzwk
z5xxLt+Am?d`3m+DW(8m5E7>djE}T2E8t0DOgH!A7##xj1<CNk1a5l$A_5n`M_z<&c
zM=^7D46|g%F-vq7vtQp}X6SpIhw*QmGV%sa#Xo>g^P8A$x{__fe9{@djrGRd&{E7%
zKFY7eS(TgE3H}sLtK5teN1n#H7F*bGZsA0W0=A3af>SlJ*}c4q4Z}S9>zD&Mh%-jt
z!?_taOM`oHl7>1*LtxfHos#hlPRRIHpOAs`G0f>0bT)>F$4MJs^Y8G*cps-49G3&J
zCw~HV<xj#6{UUX;!9jdWj>%%|%fIvq;0x9M`rFk0d3ElpTrc*klN8>;$qDb#i3w~3
z$G^YwIGq3AffZp?asoymFXw%5K1g471x69C!ieD_j1Jz0k-!yv61#(!vpabOP6w@I
zcVm?99zKoz9iwmeW29|8M%5m`2-+5mmc77lV|y?PwihE_FY`NaBIunsIdBcmbGetj
z&DXJaG4gZ>qfB4%-Rx_O9({|EqVpIP`V}KU7jO#6AdKwv!N^TtjM8LdL?#ELFS!_L
z$-}5hK99hEY(%nt7#Zo0QIG)`@fe8FjY^DUOu?wdRE$te;~Ds`icB^GqYPCTQJ9I*
zgBvkYa1%xa9>WO0<LK=_fjaX^^x`-1#q25c&Nrhcz8$^pXVJsnf!_3U=sE91jd~hA
z;*Zh${RBPTPtmLW3_aM-(OdljJ=1gOh5iRU&L7ab{E@$ol06nJEjj^YBF^-{86h|u
zgiZ(<p-%dkjFSZfPWqT9N^l}b9Zvh0gL6FI!YLGIaq<LCpuo8jbe=>KPLqhn=@6N+
zKqSyf1az7SY9$UhSSD6k2zAE4b<r9BwDynA__t9FhHoyuI1FbbG5d^)+G^HY-)EN8
z&R|{4ea6fgtldm?hg*)eCABZfB;ebIu<Yt7fCY9)YJZ`9Rl;)o)2A)Id)z4&$pZ0C
zx`xIEF**Ys?Nb)OMC7Lwf2&DR>1aox&*44gJ?}jWY{L8h@=t}0uZ9<2sQ>oQy9Qhz
z_wGQ;<Ge`$QA*8E-t)|1Z1;LMc@M+orvC{KUVO>$zc9>;?<M^xtfo|1tDAC1u__l0
z_P=M+^1j4d2Xu#i`mT%!Q+<O~YQFvR7>JjKA5u;EYA&*G%q8SuG0PVwxoq%xDU%9|
z!c%Q3(6jU}8ahn!+u)zxu}G3SY{^YzQ@$<{x`)x#;Sz6Hy}gC^9oTS$Rfr2eojS$A
zVWg$!pT<Id&U?QBz!mPkJgt`+Y`}-N4k05)RSajndsSSUyhpv?UOI-xnq_2Sq)F}(
z&tYgOnRGmn6y9I|X?g#-`%Ck7X@5F(;7FzI(ry~r{tr2B<nzysR%3l{aDM63s2o4#
zMVW4J`A4Qphw?{0{wMFKmT36>QCv!wsKh|t^;-8k<qhHBzr7HyuLdLYALIb(vDQ_k
zYg9r}GJUZ$;*a$CFhZ&ii=^4`{;!&TC!IYT{9hdE#n0NMmLBr*Pjv9l-Z#YCV8S<H
z4a(dmZ!yIUZC4TjU4ybnb-M!IlRLUp-&M&EUyFutF0Gr5-v6<&UebT;?0@~%_r<s<
zfJ^5PBz+dC|1)VD>F6M#ORD~+r^dP1*sR`>gsF!6-E!H)2lV?=JYLEUVN&~{k)Ad-
z;|;~yxOL&da~=35j&!+DZ@n8;o>N)+?N8-XlW={K)g_U>OXOxazGMi^`-v)J6tmJ5
z6*85=CZR*t%ElM2_gv$M$=3Hq*&`0kF?^{nr_c3oT>4)8*Ju-sH|;@i^SgQZyAd~P
zxm?-}<t6><X`_7AZyN4MH)P&KMh!3jz|=$=F6piz*M9r@(&eLR&T3!3#~Iw3x=`h(
z)^uGH=sS6DFsZ<FSW1u1qBa7Ma$Qq3DYM`Xtt9UvyxT-ATKW>|^r~8Hukr_5&0+nW
zV)JRVj}spyN7Sw&9Uo2)zmYjg)F1x-G}o0pda{B`h4LF-jU$wTM!M11{2Tt1kEXfq
zlV?+Zmx`b4{+g@b^Q}TK-wd6D2=Ssi>v#P2M14Xo>+20|BE9)Tu9U>dt#;`Py-7G8
zwCy+Hy{eh1M$wX1Ujf)Q<{IHptxw_oHNL4HY~s?ideQSj7>)AH$C;s;@87&{;)D1m
z?N>5UaxlC$$fUtN(xvNIBmaxyYx0N?A#buG-D;{|O&ppBUo1YVeO}5XLOhJHRXI^y
zqRcjOS6@CF<&Tl~ABEW{1fRTrqbHa0-<V&WR@^DK%r{q2UHXY{>hElXmK+B5qRn(l
z*Za_&<FHfhRjn;5E;Uxrh%*=)QgxC2dB{ZPIDIdFlj}`g(^F$tN^{S9kHHRn8>!ZZ
z0luj3N~!u5Ut?8M`ojA?ethqJwOsx4|Iwhdl}Z_XFYELA;z0kDtBXCTXVmJtp0C5B
z)?G?7eIdTpc}mWF-vH%B-TsQS;m_0w4gMNT#P4r;{%hg-Liw$K-<$snRjF@Wz8VGg
zKjW{FM`J|TO<Kqenh$9x?YlTlC@=L|`P=Y*Yx6&I{agS4O`C>t<NFHxsE!5o0qNcU
z>W8pRZRHCCb<6MM+W#s7<;mAZrLWpWp$L|N5l=tZ`eW47#+*3S*v`UGZv-+Ii(@Sr
z{oi3UYlo{fT0fmx4C~5<;N4|xBIcKCF~2aBU5#rT<}g>Y@tDhbhE-tBL15OzhWVA3
zFk{mfqs{{`ck&D7N(%AsI+!KF97qW+J5DQq8z;0M#5D^u42N-6`4L=oIHmhI&MQBK
zYc5s+e8J~orr}GRT>dq#D=^3KBTg{?1=p2y0ykeM5FlTKlehi&)i`xKh+m5{wp;O~
zB0(hZ+vp5!z5-`xcjPNE@70g5!hF{Nem7>s#`AkH);*CwjJdHg{wU_aD)?iV{hGob
zr!j8+1WvGC$e+fFgGGD`=EfKEXK<$TD|{<Xa6Z7d(do^6JDt;v@pQqK0Q3(>m>z^Y
z_2q<Aqao8UJcr{7KpjP+&dqUg7KJN_wZMh{*}xUbTHy+Vk7$ftx5gC?na40XzuJX6
z{R^d?#p8-aJc-CRI#u7rI^l{%{&a@93$9q?Q&*UiaJ9oqi*BfO-ME}A8CNiU(Qw{!
z3a-{H6<0HshO0g1>xLlIQOM5#HXFGcfPB3LyllXZ<N)kQdlQ_$g`Hp=^K@T=^RKW{
zHWVw`egwBaVYO>Ga=kT+#ax|*|2B`uEKDrUyzk5GIQPCk%+LVl!U^_8%pY1X8D{*y
z67F^UR=m9pGb}EgEPpTlSN%TBb~!Mc_X2a`^!JzWkKKE*%B>krd4HR=$La3x!sQ|C
zz43?MyazYX8-#$FDct{s{Wh_fdpZF(C$Wbl7Aqdk;QlH05XF){v0%(yorN#x6WsiO
z{U<J(xq{8l{AZY<TL>9*Sj+|8vawibRRGKm;lMpe1hIA^SOhbFI?)~fp&Bm2;U+>v
zFegrSkHY`Hw-7B@FxFQ@v-Z%!_RLQD$6|1fdnbgDBXU`sI+wkpC=dlO_Y?iF4648A
z&$^IyvIv~gJ`n$*JxC13zi<!1s=G+c#0<s1-VVb`yGYE(42Kz~w!`m8tcPoZv)f1E
zKk7$|(J+q@V_+UD#$yWr^c(j{ViIeCH6G<GK~#!L+^34ExKG1Ap|+U$ox!4TmitWR
z2fd#SPU=J*c$kA#aq)DbJIq&MXHWvpa=#k)Ys59UUyr>(Epejz4XhPr<@U4Abgnt>
z?_h0QXUzG%kNXkK&~>H~g8!z$ED*F;V3j<T6Plf&i%N^1x>`V=sV1U}%8e5`O7k*d
z(AZ!W0UCyq(hL{<t7SOM5xD3dF(aYzRH9s}L?x&a)lQYD4yr_TQYEU3Dp5(QL~;0t
zg=@5t5WfqTU6n3>Rp$k(Ixkd}u3(g{&TvU3s+B5HF{(thQ6-A25|yY*RC`sTI;s-Y
zS(T`+szeFYmm`r<Dp!7}B`1QvT3ot}IaLiBq)J){cImD_D*uKn0=sKhB9*I9vqq?z
zwFUMGK8sZDz|{ilV|T*53njA!*7LuB)b3{ckWMP4u~<od0A-%astaZHW2EW~R;0#b
z*W{NlQ@QP+%54`_Zj&$*?`17G3O2J)M+=y#By&}g?Ys?-!~e#|^L7liI&Y71*ac<V
zuFAH*s@;QC*;chX3#Hl}Zl+>?W-!Y34e+}Jv)p$4tHg2^iT{(h4K^!K+FPm89)p?w
zwJcDT`8Fu?TM_Rz%uL4NA0S?UnaY2ARsK7x^52!d7zlw%zFqypLzF82Hu`SB9^Vbz
zshlU$cLO|7Ip_4<z@5r=FuofXVD@4MUKD*jaL4~P;O-~<u<8N-+yI@X(jJQcZ*anf
z%6ts{a|7H^32&=Pcq09O14=2rGpGyjok7{7vYo8Twp*3$WL36PRH;r^<vB~0=L}Vz
zGgW!cP~|yOmFHwto>NtMPE+MMRZw|OQ{~yC%Ckq{dxd{U#`g+$e6Mh)a+^Z`z`)W`
zV&}p<59KzUzF>HZFBtBN#bVs?1!Jx03x+$sV7OEH?1;=4XbWKellMfKz%DJ!n%klC
z=o_K!P_9~jXb+>mfiZGlyW*lYMdL>^DnjiJYST4tDK>W2*sNPuzLpBLkj(Xa?V|rj
z+uH!QRc+~l+DEeFIP#w?OR_A>){iAwmTg(GCHYU59sk>L9LI4I#|e(}LvF|o!Gzq9
z&gJIPX__#(={!0Qm<+?v6gQVn)9G|>nx^w;ie@N^$MC2-DVoRQ(J6*vC?=1gX(mNc
zJR;Ax_CDw6$O+u;su_Zh<xl(Uz4qT)Yp=ET-b2vrN#Cc{BK>}Y)5`U7S}WyrEVUHb
z@}&OF-xYsRS@a2c!m_4N@o!oUF>v}3@b2y4toP_QqD3b-uQPK#XXU)j%6VHQ=Vw;V
z$%unl!Q+UBVHDzD0q0>R&ciSk@voHgu+^N0m2n<s;aY)(^Q{W56<D}dfSc>^&%!kU
z3+GjK&Z``pR~b34D&)MXg!8H*&ZW%YQtL4Wh)Y?)qqgBQ=>S&FpCrzoD!C?L<vgaC
za~A{G1PVAuS;aZZYR*y0I7b01VVGN-msmJ2Dd$>&g>#Myt`%6gKA`71fQ9n_JD2+o
zKJN?pyf5OiUe9N|gU@vfm-QAd>n&W$Tey_Ba4B!$v){<2yn{=22cP$PF3l}mcI&z9
zwsYA{H?mYfmXXvpa(P|B<#joq86{kDRiGaWxP)e0HtV@emAC{o;MR$a=rd&o(QW6L
zLAo;By|W*jaRfI7xxiIF23LLs(N1R&{j^IrtIHryJ??GkN07syGzjhC|B}9d#4C_G
zpjC82kLZG|?_T~!>Onu~fm(qUNn|xJNh#o+_~}~y1Zh5ydhj{D{DqXk$kpT1H&QQt
z`Y@IYFfOdnx~$Nctl)oE=q^@{>VfKk>VfKkLLSR`qD-E{CqTMTW)FUPQ4-}>h_XMC
zI`F+H{|l7=3DQ&9-$?&A$~W?FyYQFDh10>mG2ojol$?Nkqo)0W=OEL}ztNVAdry$o
zz+0nNE{SMi$m<LK`~=c~;y!SLZqaA3tgs>@+OiORK{sLZ+pvq?!n|O(jpZ7iC!`B_
zK7nX<raK}X!1D}t{o;K@Bgwad;Qo(;`X%0%JYPuOQ#w}gJo2qX-0~safr7(`)?CC6
z$k~E@_<IVU#&iR^v@XT}j_D!=6UZ}z(ZE=Qp4>CfFeB;n75@B;KZ!Fj%vwt6;LjP3
ze8r!{O&MaD==l^!DlvMD7zyHT@jBEntczl_y$?C~3Ef?U(O!;m+=v))j7++TL{pP7
zP{2SZMjKj(-xF?l7<s?WKF9MBNK%H|gr33YucgP3vVfO^5_oPpl+1M7DV2`t|4@^!
z*Kipat!wCZZmRQF_$1QD_-CenDwkgW5_U&3{WQ`)g~+Zq5M}(bbXj^4_x!wydw<U1
zc^UTty^4RQ@$K7)PktFuh{qt~4&s})@v{%lxAE;ReBO@8rD;Sx4&n2oQU*2Hj?|R0
z4R<DmaI=yNIiKgboJUSJymuOZl|kBz{0z_yzLhQ`s_hH*8Ge6^{P#(ZvJdh3J@zij
zeHi~PBMr1^{C<nQj%QYS8#h+HB%Q`;;u5=n8@ZoBO6c~uC+l%`3gw?;k06)Nq-J)U
z%ESux5IX?6_d!p>3WP1Pd8ESMc<-!q7<Ye7;cl=+ymJYqo&z$#()cTde73U~(!HT$
zkZ(@3?q|!7;2B!Jfv1~4Pc6TW&qp|ZiX#`613(V&^rx1+_<WY*Qyh=+=QWPM&hck?
z%2(;hB62D8)(}rQ#nT+&&pG}a;Li&@<u0Dj1wz;i|9qW)`zn2A8UFb*{`{Dps0HQx
zEPod9{9hrQJ;I+eJmvHJxp|pp>r)(eaO6DyJi*_x(vxlH_z-{oj-Jc!ajHbQ7kDXe
z@o%5t&nxs~3I6$6{(O}`yEz`=pC9JW7)MI@=YIbDh(EvLxPgEEjz6#AiMu25Q;xA;
zfz?2n?ho)U4juk)A$9)||JtFGf2K=7M8XmS`QXxZa4otM_qg4S*wsHm>}EG^P&<z}
z!oNifX9n@E@9Fy3`;u2TNVkIN9+w)Wi0&++D?b7sy9+b(N$3qa#M%D;^@EwrYgRzF
z9zjR^q5I@X`U#HtFytJ=YKK;GoG(KENORpJg;iD^VgYFc!z+U4!~A)HKcD5#xA+sW
z(D?QmJ(<Xv^eMXki|iu&HbLCtwk(yS1tg>*8*>rfp#O;T{Yrm2$8n%3l>y}(3h|P}
zzlc8y4z<W2QGh(0OK&(w5<-6!^uK@@$8T`+);Ij$4cyIj9TBY8u;1iO={3Yje}kW^
z(iNooO1db$fS>2^_tUu3><r?t&tS#;G&J!eh^u@I@zi^y1^k<XrauY2q95ON;~uvt
zYy^Jf@ICH>bKu`MDB}jS6f>TbFa3KBX`hyi$ngvo()*<a_8oGW;d$U2b`vEourKlH
zbLk1lf{&2;G3hZ#hTlnNa9iH{lAnH1I?fuwcMB+=D0>KRyaDW0She=E%lPyn>|uh=
zGZ={<A=hVd>)$8R2s?|PkLVw07$I8#J5BH7ucz_NqqtM>JWB9WDtvbq_YEF~m2V&0
zCB25XzQj%2o7ptYR^H;*`15&svN6~UnC>n9yh2Zw;7>1qJ|dnx{p-?Ed>i4&G5#*k
z0TIuX&&xc`XY{S^6Q0JvKflVqy}^+b|LovTFMpon_yB#@o#)65N8abivmALDD?`Sf
zApHR=Jv`Yy{&_$DY~U%s<<IY7TVl`xiJl^kyhSwYzT=<2;CPxp$M`eDpYPC9ca2l~
zrgR>k-=Zg5;*>b}b31=Vc=}`fbAo^NavEOe&j^1`@aGJFp5f2u>4`jv^1b|djw7$~
z&rAII2!9^q&+Ys<h9_<y#!owD3*E}u2K(<MRu2bs_rjJ;{H+7$m_3H5*}nmo>w<OS
z?=jbj*Y$E<mx2A^3ve*vc>S!3IS~y_d~XPMsrMinn(Tw4ocoP&?l%rw!LM|aoCmJs
zJaCF`h19L*oNxoi^FJe&A9pk&;`=7J;{D)?5#4i~6aEIgR)?Jg{8WJdPkz7qd-7Ah
zSAJ93%Flb6&kFW$`^|9IAobeA{J9H#P51mR=zjq&{6FjeOjn27<9@BH$Nh1?!ENBU
zK@RtWzo>r^H;`Y{U&Q_7m-Lr(jo8O>Sr@@ga#wJV`b+wkaNGLJ`j>G#`&IC_DE7C!
zqHD#Sa<76%>!9(4u`Zdw2|s$+eM_M^W3Oer!lT#6lSz+V?+FHdCR2sJqCy{jm_7UO
zV}_B3vLB^hW$EsaVfw_I^PeAhTRMAdKifb5;)~hMm-g;`6t}RJ-1<y%X1~U!P4IK@
zn6t<mGP1%H4+a83pV7!zyuugsnBE!rs?1noG`PF7pRoh(8Fx)~`C)eI#EH~Wch7-r
z2W9=`m!J)C8Q_IyL0>i2IiN5evsGG+MpLC*qTfC}PCIUI3;6g4@hNoT>G{Rhq1w7m
zfB(<cZ9crTG&6tb=wstcy*sv?lFm-_$A&`%29vKdJhZim?Vs&WrEfj!o6K}#`!myZ
zF5d)qeikclU4b_cXm3lS2%Fs$2>84u`bw+Kh7yx@)WtTo7_CXJ-`krSvpFg<EuGs(
zV^yJzYocrGE#X=7zyqV5M-FU?r~GBUmgt5(2jXk?_xftB-T-=+>g7efR+CKUwL-N@
zBwsKdOG~H^Dik`gck7X^rp+fd9XY!8XVc;Kd!{F)vwinZ%>3zrUT62dKOP_W2{v>>
zH$+|%&x?A{<k5?t&<Qqc%)XUig~sf68P<<xMBg~GZ#gyZAVxm-j{HW7ztK<0KXYcU
z%54%toA}i>k?znYNnbLqN4wNb?ukV<9p4}~OZVb<+!@+38Xa*&o-w|X@NP7(IW#`{
z#6xRyEz`HZug-Senf;EAg%LHPvALSJjowoc*ZVLwLnqwbY*)AYgnJ<S^ni3W`vD7K
z2u^1&ig$Dvk{C18o|N_kjUs#_E#HK^Itz=l&h8Bale`0w#AtlHd$82$+}<@-yy#vm
zoi}$inm2D6WH++b=|zQ(HoR#TdB$1XRN>Q`OvrppVy6P%KUH_;g%}7q&6d8(&a*R5
z-xQRvBX|qmH=@Kt$sb}7wEwL~l(s*I?_qtz_Z9YdlGiVhNcv3JbV>8X1o~tBPQ&C!
zu@mn3Rn}F8$xpl^4uh$*a2~}iJ@EuPjhesHFdsafU1ZOk4sC77w#hArQ39=0&KtQ>
z?rN^ym!pQl(p9tW6Ll}e3?|E}S>)$D(Q;QayNDb=eJr}IDNA;(H0Hqw`n&?ZBkfF}
zajFl-(t18h<tf1|BioyuZR3kw^6!qs<~7as!1_M<w|VH;RQu9B8{^7vXLS9py)9!)
z8Ra(yF(1iRP+x@kPW1D+j;W1Le2#}syfC-t?D6BBnM2=i-SUuhc4Tt@{_KY=^U6Rc
zy`Ns*C({i1P``pk>icHQEk2)lEqpYW`Bb*9Aou?q+FzbtAJWulM_0*Qugzg7c9bX-
zE5Dy#Gin+=JeF6zWYXx;V<?I`6`@Wg>P+YS3*(5_OJP~hZrPn$?ER(p7r#mm9KH9!
zEnBcsTr=LarQMkQk1UaWn@ugu^tGdhEf~!=&@b4FE=DsAXUZiA9^2lQNT@T@Xau*i
z+ijd-elqkEkE3or6I<WX65JfhG;c_DZ>_Rbtxq)d*C)KQEgh)^b7xywv@JB++SF@n
zbBwe_CYsy)7Eep4*Awlu#;QjXowG1)Fxa=S7aVmmQ7`$D9+OXh<)L?t?5goysK74Q
ztw$-<G)B-EQem8flY%rFiJT~+nEoh{n0eDqgJH@&X*8@~*SIcSHshYP3~w{<-f9gv
z*y-$1N60cgAKAH{ozG6s?Q5odVL8E?{w!>&y0|`GVYAueJUjMy+T}Nz4TkD2*EM(c
zc?|4>iG!)cp*D5~i~w)qp*Q1A@OHdeZnT-io0>d)`nEtjpMeJ?xJx91Gv;^&qujs@
z_9n**b=gk?Ws;%PXZeU{zdw=KpI~QDko*aA=!1swP-wg%8^Y@JBNTg6w1JQ5<LC@d
zEEpx^ppc0slb;!u++&5st0arR?5Vn&$J~>vEUTo-2Fo*0q`R-#g7(T5+dJ7;vll;f
z#H*@098ftJ)?PRT5P9Pyg?NQFZ>B$${HeREsG>-!YOQ**F8j|(T#WvQ|JgrO?;G{~
z=j_k3|4i>=HO1SJWI&R6(2dMvk__zQ>}4ZcGGx7M$!L-GIxV-Ja?(g{#>l(QZeVTZ
z<6{p~iHm_aYU4|y&4Lh&NiHWLn{8Kn*EWuCYmM|)7%YwjhuKg+-x|BCsm+!4H*LrS
z(&o)GgGc7#5&uBeI~j~SJL2EP!tss!QWFzYS_Gwi1Y2GuNgW#LK9jE^ZlWIJe4#`F
z6CzRR^MYO4Y#%iCT2as$SHvm>=i^lPe3T06X%Fv-Bx-uhC`r2Z!D3xZ6zq&|yeBy^
z(H_ix(~8Li>l{ja4)t^8)lLY0R7e*4*Cys7qg$IBk`Ak_$rql=1WpC|s>`ZI&5Lux
z_it#bt+rNIHBIj6c%in^R#7k74egw(Nv_>~Z^Kz5uE&3*<rY4;)x5IlM9W=5J*woE
zlgk6!F?o!t`l9y`)1cNfemuPx9^TZvw$D_My-@0#jCnHEC9cumvQDEd-q<vgHt$*(
zxNm)A`<SDlbZU1?O@*zpmO0#RZ#op;jFuy&un#95a$UyPD`}Y!dJOC#I+r$N9Hnc*
z4o`83*=enhu5#=*?w@0C*bGO8`-)fD3XA$9N1Rz0N@4k2wjpBVhOQRte+`!dQ#JaC
zljO#o(WuWGbm!Y9-InT+rm>kaM|exTXKmx?)|SQ$4Z(eu-96#mjcqkO{>G_HefNz9
zu)q49>kfrto2S=2u!TnAt*<xkX1Y}Kx3O?+<KFi1aXv2axQhO(rg;|Et0NG@&R4-%
zFCT)DGp>}`5Z&0AZqpZ}UFiaSIO>_}7?G}JZ!|Z=`{I_WO7QWR-C5ew5=&*z(H_VM
ztsStc4q$ZzD~0|*8YoT_u<738D6K7krW86}0Uc&RhpLUB;QbN{`>!5y?|;lGUAuLi
zHNTeqgcY572z?V<zNv#91GAP|Qp1Ji@jP2vsb`P49$~CRZ!{T9X0ydoP-2pvy|vv`
zq%UDO2m*49+pb{;y+IVC734;+%ad_MQ{*)ZP5p+A-tJZw-|FpF+NPn!v9*1KT1k9j
z*D;WL8e(m?x0ANXI34UN=m1N~(LrN7zcZ-RrkRy}!ArTl1ckf3iF`{j>O@QNQAS$1
z%4kZ6ue~!e+c3PPl|Ne=CVK;ey`gn@V*amL+87m2Cvkuc8|gVcixI6`_QEo9LvXW7
zwf(rx&v~0Ena9mef&Ac{;9{}H{z}Q_eO1fMu1l{B)y1}KAP(B>J#gg<nVB_YZ$?9$
z=Xg1<=G?O&N!)qG%*kigEa7)3Y*XRcr=HNV>+4sJhT2q?eQV&0Jbo?uWix6hG&f~@
zaPEn|i7YtE4DPY!Rh4G5v8*Jx*^^<{=fd6k0++sEtUvoIMwkx#cL6yxXy-g<QmSSn
zmSJ445$nHa+Gedb>qyks<u7fD#5)4L_0w&(ijF{YI^~VGRWy#76W+4g7FTPn)#I<K
z>F|fTJe_5g)m;tVW@}A2RMpt)McG3rJ0<N!bcH%gz{fDm!MhZdg*3$riLjmxOc*BX
z9Ig|_69Y`|4q4phqT+x#;V-e8*@(^X*kjJ@ORFray?!$^j8ZxG_ux;#n9ZMqq`Ptb
zoI2>`o_2!)jKg3MjKjsp@CGv<uh0SCwN;lkM<J^BWW7^C(giy)F<(Nyw`oF;PP$^o
zBBQ|)thnILe#@?B-|~)ne8XOr%6e%w4`9fj!<#}A%IQD3Pf$-~{X~B-;&SPYdPAwJ
z^ofuIk$8sEnzD1QPs2971hlUF3<`L~(_2^9>tO?$Pbkhe=JAaAvTs2b`W*^>7G**o
z^d*BDUC3n5=|a&@7Tj&CN>&*xe#^nSclNpytE{V05Bt&YKY7SjUug|iKJ@uFkJ?*o
zwus{~<oY6J7PSG|)`Xdq<V~8)(+f+akjY+RF0(XE*4n1fGSCr4%e+?+>%VR=ItnK<
z5%xJ6X&jB@XQ^8s*N@<EDh3~<jy-|gp(FW{j8t9dNJSDmlr=K1ls(1#Mhm;_v}7lp
z;M?5lp`Vgyg%5J{JLr^48Gm0trs6v__;vlTitpC_4yk!Ql3AZo@w+wY-@_>%O8)n0
z@DHT#RQx9z{2Tp{ivLuDU)3+F_yZdJrhY`lA5`$=3|Vtj{3L8&g>t<v>*rPcekDCd
zSDXHTivLv(XK(5sQ1QRc;gUmtT*ZH@!43MSRQzug9Q5ScEvV=1hW6Id^^N{{^}WAU
z-a~JGqrafyf0u`!SMmRl!=++P`G2qAC_mS(K|OC*rF^n}Ehl8_7baWI`c)z1FB!mm
zFoel`1#Bf}4m<4%bowQ-hIz>@7HqebRaO?&sHU-7_tw@1)>eJ_CD}IIgT4y8*;c00
zt0k60OHs7*1TicKEWXBt+9Izv6dT;Du0UUdITRHotiF>)?(N#z@cL>?)nFYjN19z}
zprbK>y8b6VwxPD84R#`e1l_;<G1gkNMkHU3j+wAdWSBZ0J#ke0hOLA7@BU8{hHMFr
zteP`s-%osJ{5HedjM+;~|Mfh3^b|XG>rvHY^~onRk9eNEtVvN8q=ky}@h|Y75DrU_
z4TLyA17f-m;fGa@F9~kD!h#5sn^59>#O;&#i`yDH{UgTVty)Xs)3OP%`p=Co_=Q#R
zibG;=<{K29+>&_0`7+rRq2X~0rrwFM1vLuob1$O$Kr=kLd&sh>;!olPTFfcfA46n+
z1a9EzPcukVj>9g=>n`w}tVDwo4-xooR)UtId~QlHK9>dlU|xEnN8tC$IJZdh^gL=@
z|DcYyEvMhh=@<CD3cj2n3nuar_(_~*N%T{_wD^-Uo*<rp^hQJv@%rO$iStS$ujdZk
zCmNi1rNDRQ;Z#q7@78_7>nYloc$UB)%u7$aQsDP#aXwZA{u2#e$a$r}f2zSHUVnk#
ztKg_VtgdSQClUX^>(A>&JW-^-Ur7(#&3U@O@7CZ$oL36`uQa&Cd8NSrT7!o<uN3%i
zHMouQDuMrvf)kxw#t=@t679x$73hT~5L!-f>oHE+5LTK*66e^dR%EX7at^|xu7E3S
z%U)k;SFTO@1P=kbaJDy>s*_gV++8IYRDL<K4g`~~S_~~i6;}0*E6^5xZDlEQ-ky53
z82^MzEv2c~$qV6Q4|U;l<X%3ecG9WTn0GWrB%A=Y8rnU#jOGf~;{xnpFloQdTK=f<
zGvoe}gBG<M>0_sJu58Xm<?#Gy4#5J(=k#alTnzE@3q|>wITzx6AaLy*ZR2B3;6Kev
zPx%X6nWLS{QFy_KHwYZ+hs-mSxh`<+To3WFF7Tgd@*m@4QQ&tIjy@uu@yGfq`1=%#
zFE{W60?9;zOjpq6g8`$-c$+(9rRhJAvK7E$)>XgST4*+vnO#0TD_l)Zk{|X4Sj(+-
zmX-!RD=M%X3Yk7wV~^C8IsM#qqHz$&?LWcW6M7lif4A;?!3!|f;Wt402>c|&-V8o2
zB6;{(!l9!PPlAlWm{2SiaY!bi^^?P)0!FdK&Qart%k5&j@E9|W?&Qvg5w@#3`!xH?
zAw7owoY^w+La_Zf_Kc4X-ItuR6@faVen-EIvJpNu1iDj2r+7^Sy1SovcL<&F5bqy>
z-mRt`;@Y1;?^Dq+-p2y{iGu3B;ap3g_bMpc!+E?wA5>7?_gsq;==~fuET_nyg0>Xs
z$pH|x{Qh!+ds*Nu6tfski=0&#3Wu$_zB*`;;C*qosnb<(g<JcpM`VQsl|)W#h_}aM
zyp?ullvdiyXM`yAr<@jeaHI%tC3u9WznNR^?<kik0kVkzKgAFe$oo5!ho4mOJ$d+(
z3XZBB;j~~Sg&srSV02I~{95`Q<Qr%q%a6xI+(L2Zl!sh}0q)b04DUpr=F~4o$@7CY
zqkKS*?qfwJu%kI#>SuK<D(K8he^N;g{qhL!Q_3fxN1r0M+_!u3-g=VWLf>Sm78uQV
zCthI+(z-HfH<{pnYTsD2d(=JjcF~71_@S7o!4YK#vj58t$KC(kDYv?Gj@O^~0CYI`
z?Q=NsA%Wkk;L9mQtx-J%ev-igD8{Wc$@76tn&$%@L&a%bB=8+fi<9gY_=9;kt$zf5
zw}L}Af_F>BPcg_eHGiU0q`y~9pUO*rQc1tOJr93U#<|an&)hOj{|=d73Y>Hjfh)R~
zz)2?&xWd;77yMP=oWFujk)CuCf#0XipZB-G6+TVrr}f*_^gq+4=kr*kSNMGz{0}}m
zHT_A3sC2bl(n&=6`!)G2aot1Uf2F}kxb7kFzt-ThT=x+8Z#DP`*F6OOH!2Q#_`D??
zx(Df|G?Me^qV=hGkIO&krJ|jl=f1~AM7b-{h&=Ik^gmX}QvCP&AveiV{rCGLrE5am
zll~wr-#}dGd3Xjw6dz*`CdmlR;{q_l1W7Qj1%p;Q6LA6+!uc3vHk-q?&BGmuoiona
zvbpk7{zqzqv)sY{)Ha&nuE&@8bG12pz&>KL>>k*`y@@Ri+bui2(=GguNa*#A-R$L1
z6Zsvp|H!?M4Wl*L!FqTv;QIuj87|9Uzx0U61u0I7j#zQkV+H2r+MJC|$bkjyIb-(Y
z#8<{IGc0V(K9)GTC;|<XAOjID;FK2BXan-G-jtSbo@X5*gf#sEOECE$ljLlaTLfm)
zA8-<<o7&T?z+E`p9H^((_(5;6%MfoYtSBnBSEhPa)!#qD8{#(Cu{^?;IOq9Wne#v*
zs5o&Rf$spv&*3y91b%-WPMk;JcVqP;(r2jFD$X?vYISJO<R$kb)={zT<vE!pQ%-}1
zi8rr7zHtSb>Ib$oDsE<PW_x#IqDqL(f)y@lDA(S>D*ecVlZvCc=a)+x%FU5@C0Bnx
zP~6eVZ(e&)$6JNY2d1?-j`#)+$tGF3c0duVv?l#h#fx})XvsW%ZcSFi`HjG}Ypf!k
zkHGJxn;Iy8@M-wG(OLpOg|)4~Q+fEwJp4O3eNfNWWW*=b@3-f@M{8xukNd(oU9d55
zdf#8han3SMd_~~9bvgVyu3ZTHK@|^?PhCxa8t2rC{PXcsDh?k!9}Oa(d)0hWdHI~A
z^nC3D{T!ntz-J652^lGcWg8At?mZ%x3HRI!cRf4Uxux1sJ)DRPH+W~p46g-_Og><r
zac{1CXy^DA$E$a3Y1wFwH<g7WO=FF9y@?9P^Go}evYXk<dylVK|6J9c_Qd8kw8Sp-
zw4b*SG&Z!*gLKEFij%|?_`SNfIX;A*gVjdGPt(0YNI#90hZaAD-7X|qc0uB3@sl#%
z4J&{af0A&t1g8gF3jCfT2a-zo0P(0RYaTSt)VGT`g7%*of3}8A!@gp6xw1E%*^8VC
zlB+bEZM-%+5Njx?Bb?;3z<1{1B%cMon@L=6<dF$nzZUr2dFe?$3;aGU&gHYff1<_t
zcoO(e^Ki1S3jBdQoaDK{f0l=n9whJw^Ki1G3j8nfaI$X-{Cpn%w2J>_9!_>ok^Ti0
z&rpPhil5YFd9RB0A?_&B<78t#jtPHVAEHRSJ4SS9WB`0VcZ%*vWQgzkJL=Z|K$M5n
z77+|T*zPuF_aWp%?)TSu|6-j@^Bm41rQcuY<3Zp%@^GSG;P>a@#N7pcw~A+|UMhYP
zIE~h6aCeGe39G!FhuDy2tvH3a`=&%P<;)j1T!E-}{ic;sEv501=AI69NmMsnRk(BG
z9fDlOwkJ!i6K-KQ;dKWMyzXDfbr-txe#m<>ue*ceJ6MLdiNI+t2z+NAPGd~qyYp}w
z^8&w5#%IB}zUKMEvw}9?f&GEh<^reu1->&6r~C!JI}fM)1%6*1P8>+!_bT{uilSOn
z{G{$hO}W&kBK`eJdQK<xsle}+ag120jJF&7_FOi6!1EC}(JAl;Wu7i@qDSEODmd0U
zh&EF3le+grK3GF&@h5ffqa0yVpqN4KN9H_^EY760=0$gsR@ONH6LZ(?QJ#ql#y{t*
zFQh19vi=2qOkS6MhZ4*r-M9~2j*~ONc+G9s2sm^+N|AC8c|%KxlshJ!Jw~B&7v7*i
zIibUm*5Z~W5)TXT2#G|}D9B|Irx|Wy7zB;j=b72uY&5WclJwrSea)LZ7T?ac;km~6
zmIwL<A6Q?O?Xhe#r}q!kG&;(CmWicIsLtwX8a%ds^Aq>>I7g08pLjx%gv}_~r;&tm
zz$=CEP=t@_c4uQ{p_0;KrzJF;s12-Xs=qI`A7+Iz=isnwYSG)X!Mxh!Fs&MY=zp3T
z+gRTozx9c9cB(2|wfp|L7fwu4Uxb$TVXqeT1@sU*_YQLRAfLZMJkM7;SDRN^E8GpM
z9(6xbocascEuJVcI*o;?X6c1n3z@Mecn~SZJ&%6EN!S6355jm_pgk)p{;7&D=HVZ!
z_%02em0nlzJsSKvR@F-W2lMcwD!x~Pe~I(gmGt{H_;u_WQt(3>{A27lQSc)w4qqCy
z76m^E-bj*N)Hj!YNlkwfHpuVP^cQnDd~!M!zm&tJLcOHomvcD#R9~dxS5zGINJ_f}
z^}OBC-Ws~3Dt)8+-b-{tpP(0bRK;KZ0sN{4w`j_LMfbg&PX@bdly(j3dAlm*V@x%}
zZbeaW_44|MLN4zVUy&0CD<UmmM)#!ZRwEpahj%E^77J}@Asl|Cjk<u=?@G0n4+P_C
z=tb76`29Z6hG66<3z7X6qn%=Xj9#ouwE<H+P){SR@`-~_u%*sWSg<m5ud1W2Np?k6
zuOQDm=wuq&CaVMGj!}<Tl4$7TJ%pCSzN!HBhR_UJr2Cl3IuEVlL$qis*07@r<q4Ra
ziI=I|2n$T%xzh%*p>jbHcNj<{`9iBc7uNPn^T_nsT?P6`!aMFWdp3p=YxKT_I1h7s
zxwv{D=Hp>*4Q(4r<M%{^KS>z%rY(<*r&t+`WC(l<PIj9+I{K$W25WU`yra6(VRd(Q
zCo((?uK(^X9tM|gj(0fQli^HA@(r~&N3(KN9O}#KC4Gzf3XZYJ=p;J@Kds_>3CGBy
z_(O`+s?kLRx1xwgB??6w_*j8P!5UlMDj)|w9vU%>*<AMjV7zLT10chrTQdlKj3MBy
zX??~o0w58ea`2#Y5mAsE)~z|Txs|=u9z^_O>xMmv;bEFba@-~65n^G`O9$ZB68Ij9
z$5inrWj+yE4pG!3aCnfA{#WF4k@I<(dRxX9ae|40zsl#gNWV*izsLELz>jF~=O`9V
z&gTH(7&YKe(q7!WMiEX8@~Bbb0`DAG$;f!CiAue5a3y=1?7C`j>K#HXB^%7Ws3B2+
zxK2<8iwke5D+&k6!%t$(B{=GyJREm{a4!VqgUD31-*eNI+$!810m+y|gi!uurK*gA
zeWWc0tM$C`*LIhE+&Fd^kz*p#Hd>92pU%`%q;2}%O|gi7VbOW;pv`dWWf3&`SuET-
zz1WI)Te-h3arsuqYqKExscAf1;{7P_MGgKE??-{}(%|p#eiZl-4StEsH-R6_!%4mg
ze6I%okn>@I@7Lg$_;?Wb0Ts_+H#Lnzfy=QVd^}&$(6gkbr#O0&!y^5j9F9|9NWKaD
zVh(4QxO@}%B@KR)%Qt~v*5JS6@<rfRR6K*d<Rsq+C;9d&ev^DdObzD(391Ly9As&f
zxws~HZ$%id;xyHS^L`JrQpj9Ybf>7^b%R34{DT_X%k4^adc$oYzKM;(S;O8}0)07k
zX--`u`OakO_$DcG6s{mmWBJlh_lheJY#iNmd%$sJq`D^Q7v%j?CGYjxT2I<(+&Q-*
z0J+p&Sm=q?ayi4^RVd`+IL-c^OPL<tu0qNf#5mA5BKph^`<LLb@=RMnw}x27uKar=
zq<0uTH|#CF+xnxC(ySVrjmqcAgB*o2ypOL=Je<mVb?0>C5#o{0e71RI>VL<1ioj{q
z2z-}_MB?ec;Il;F`!)Cne3l6O0O8=8ay~q=x?4yYVU7A%#8y{`#jgk|vi}<*tv|({
zuQgInuh;vpin*4eg)V1flsTBU%2uhDTje^R!=g4v@@h%EL*RQg`1gEn3w)1^qt{th
ze;?9g{ed~R8?vo|kC_Zbc&qqH#7+>$jx6uV!=F^~NFIKcaM%kd|ChkYkvmp?a{Opc
za`Od_s@CWuIgwqb299^SI_1Fe0ZGW}XVu{G>&&eLkCQbFrRhE=jxEQIFHr0_ry<J6
z{~W$I>K9csL0m^pyNjccw20dW50ue8YT5{KY8gGKqRkT8T1NM(=mhnQj2=-@g9cs7
z5M_qtjE={;V+ImsCkN2RIKLr*_;kp3oSsMMfo`NFlr>Q;WOT7hsoNZlcDc0uX;gr>
z!wZPf)brIaLXBMuh)4Az7sS!CD6civ?8tjpisu3^E#m0W+X0~DrM)Kib|w!$i50yv
z3bg5IrLXk%D=612%FV^&FSxpM@%SL+8dKu&(F!rh(^>s7lpf?X?VO5%uM!%AHe&^U
zQuwNDWug#a%sFC3rrUz`|AZ?mw@2(tQK6$yzHW?2QJP8W*S*1DQCog{IZC?%R4Psl
zQB95LAuW1RMpJA+Uni%9H@X|KP5P5V)K6EI_vF3t<PdKe>^b-vr9$tOWkk*&%`Ing
zop^Qn`ij=~y1K@Twhpe?gTMxZwpP}aeZSe3%>E{~8$pb6oTozCC43p^!$k(mvWk<o
zDDVRc4m&k=FR1uQ+z`h576VA+109m`k*z*7ldp1ZNZ<<^{4>sp1b!rkO9swy1ddh_
z^kA%Ew*tx)xDpW{@+Ue4en3qRPNYe%`20C1(%{_ZkNPgb%&|*)RTq$8@IW+DgYE(^
zmsam@a{6gjk+lNWDWoU-E#7VdU)135a;-$*yK*?9!$?aK_?{e&{J|q+{9qnV99g8_
zo5OL+#b+vhIEOPjX+ueWM8z`<yD?P!B>WK6U!q>Q^h;`bM2K*$O_X~vha=)xr{;4h
zha<vTQt`_<oPEx<Hj&R270<9-`;gW~);`kOa&&#o<*;~fKmXn!=!Mon)<7T4cs?Ig
z6IcGu5=Gnip&cgUijwhzJ58i%p<xg&T)x4+V_zc@%0qialjNEv2e4i^uc5Em$#*Sw
zpakuF_X*t9V`VJq8=(y?Da)XpHo8nVuCa_*>C?LKAJBf6lI;KHd8xzCdQ;fmlKt<N
z;Yc5CeCZjqj5T%9r;b|M_Y$wq{zF_|sp+lUV$!b5Xj|Y%m-O=9zLkr5xo!HUSJmB<
z<V*Qi%(VlJV#ivrf8#380~yVx9M;7`w3cs}=#cm4OpXk%%iG8{Jvq85Z@Z4NgeMCk
zt<6fL{aAZ8YbXcd$ppFapgGFk?mKT1YWKyu^irX#KwqD9+8k)aJM0*$GDe#!>?Ot3
z=0MzKatyan8|G0Y&s<PK){{TxBX3dnzbi8uIB5X_U&zBrG7Eeu4=0%~@Z5~fP)$|*
zB+mDs^$6L!XkQfFJgjhYt;TQEsQKz1Cf;k$y8^A@{<UJWRCG&EEM*hgeYvKCX!$W>
zFW9kB?426^`PRzvNQ+h2kMcHA@!1brcpLmmZUf=X<h!f5wu_ODS$RN?eI+h?m~*=(
zIsFN0Gm?JTSWDc6aHC#GKT7>L=S3p*5!_-b%M`Ym=PvLAG7f2(my04TGwcxQNj&eM
zelMlw@)G=u<YnGFke8?z?R<Ke(}__A`WJDEAeBt`qns-Xe3u4)hEpo=BPt%E9aJb=
z;J?ycl=F$^;iuqJQOaH5H52I%sQF~_(vuHHmg@{_dpSNd=f`eFSOX7jpfFyt;wuae
z=ViF@gF_(_-r*Wcb%(bu>G4FP9(N?-4mJgQBSrgM`&Y-tqwy|+=&Qhhxu(i$bGl-6
zzSe-hvDOz4H@5qO?a}qEx4x8IZJQH49ih&qV8m4u@&yodk_lp*(hjbJ(4cB)Eud%}
ziVm*2>r_qZhc|Nll&e%fw3~}7R@66q#~9a&5TC@y+??(N@G$IQ*hz*y5cscfCM2bI
zW6WvsQ&{m)9}Hm>Y4MXXUWk#R#h+Bu-$Wd#Th0F<&Kx`eE!c_rBR%<M<=Q7vd!+$r
zYlC9-<?1A_zhlC%HmGi93t&T=W95dnLpH-zzNPJ|^KfoYn_U0*xP}3~fch`Uc0X#D
z_xM;A_+lPTD_DW=(%|264MX62H28a5!w~qvJe=m2!1rqK&$$E^_<jxk9`}a`{7?>u
zW<wf@zz^qeoCio6hQN<#@b|gKAn*$s{5|fE5csb(_(yv3M+p2y4gQ`6|BZ@ga0X$n
zT#9`W<Ad5Whc8ij^f%gBN=wIR4Wo?qoL4%DXcCQt64t|&`wIiTLNqnBmCw^|**ont
z)W=$dXbLA>hHQ$q9g4n3*(8fZl$55Afs-r}xMoZMM;&CG*FnvPWRXap>-!AVO~rXz
z@H!``jYyv<;Fd9s=Y>1s6|cO;LysBH0<M5J=_x`LBe(6bRNOAIr)4PEey9DGipxc`
zyr2R+Q*L?L%W@kDE1fNHuQa*~jM8mHp!us~IQ&P*M{bgHvOCc+<p@}9<7yN&MgeHy
zJt3@!i@N{Fxy=BSmvek}#>DKDBQga}>n4FO=HWCu1->f}Cp}-_2L&#6UGn_f<k^3Q
z%9U}-U*NJNlX1#l;Ibr>amrud2ZaQZaatb<T$W4%=d(oM6iJ#Zmu88;mo)jj!nupU
z_sIA+=*TBHmx7g*OWbF8K7_x>XPdx}=yLcITv7`BfP#a2V}B^h75GW4zc6cYI`y7B
z{7J$grLZ2yseae69%v<<TsU#~nHfeS29xTl!$u24aO0V@aW$Q5nv-?uNMtloD>>G*
z^vuUkw2U-((zETM!D@Y=?%x;wi7ioEwx;#*!c)G6?t5Nn7;0?Y_|xwC?&15sj!s3}
zcTP4p`N!^yWNbav%~oq;SK8LydVIs;v)e(J(4cVgI>`^(pRS&AfUpHP*?guI8`NLX
zp0g2a?6cjrLtTG~&f2(ri+V8oHMXde-3Hbf+Q~0Cn5<0@=aT(?JQ^Uby8R%-|3z`v
zhl(~R$18|k(qgCo`r^cmBBR4t*xAg^DW)=PbB4P^Z2I4u89~YXd<C)?AzIwDA}XLe
zSHxl0p<I5_(5=@pBj8y?^#$o^Q0=FYgZ848prjjv+<T4d$>2^ZM^>8=dXdVUV9g1t
zN0+?cH(sFcbQDT~#pcGo*{60H42f?4x_Yy3%jqqTt&8~^w#Us~qb0s#7E0GNwYBwa
zY&KT7O1q<Oo1@Zmy`TXH^@Ji=c1o}y-((+y20xvT2O9X9DT%iBwwxQ4Y~4zmYECwQ
z)@HMPB#uy-l}hvlg@(e_t4gf;0)0q6hTyitRM^GBRq_E57K_npU3sudL-t!7tfHLc
zLVL|2300~@v?D)&q*VGLie%sB;nMMDm%pr}q}Cp8Uv2rZ174=b`%28V)vJ5sn}6t}
z7fIK$?3Jpa$5zoSv}43kgbw=0WO7ryE)94Z?<7M5KE5TCf1(H#o2})n_5O9Cv}?6_
zD#3yS-V$^FTr@gUZLR;O(0Hn-eCv*KqanE-o7g*}nMK>Wnhh{r?>SOGmh4=x8I0i#
zgWYqn`o;rSzHD6EwrPi}X`*Ft@a~^v54T}JNxD_bukur9iioy)6bU~sm0l18IVyiJ
zDaY)HH8g1Vd4o{19sbz{Uw6x((NLAW;ViGO2&_1)#?^FJQ%lHb+L##(Tk0NZX{f8O
zv3lPss)^ZJr}NIQnP_N^w|IidU?l_{TmBUL>_5kxflUwR0><rb$sSKjh~QLCGC~lX
z$+f(zE@ddj{`#Vtn!;b!e!ADwZK^QRU#tJe>+Cq|zFOQ6Dk%v!tiGCkJ^S#DnlU?0
zLn*&OHE&+FNpwyQk6+;O9r?rSiSE$2L^Vnd&7-{2U)W=AzkXGDasEjb@bjM6>n*m`
z=;Fef|DugwxZw$wxMLgoawl6XeDM97W%kmlDwEz}DEw9v!N4iJi4$IPBUwWhA47KD
zEf^&~;H{O9L$X>+lc5s(DznjIb_dKyRgdlMXCo~vj&zy|Z2E$xu3OKqJn9D&xiI6&
zTWFV8J<6Ia=~0$o65Ltf0I>ZSjhB;yPK#q8oZOl=XP+<VT1XGf1qSE;Jr189>29BH
zHP=+yDyw?;_6#5FTbNJZw>i!n<|5<zP2F>%_B`@M;V!w_i$0N!y1cuvEo^1yXgu#0
z$E<4V1(Pute&lSZY1Qs)u@u@ID-Md%bAQKGj7z#r36ccya4YtA(+QDWq-c(aj4b@R
zYqGZ0X>F)(nID|{S;u&NSKslOKgvu8$JZWX*IQaWt)5kq$=Toz4TYJxF6sz{va|k_
zt0^u<Dx$xyLFPlB0!PcW1dQ}JA|fHj`>C=8<#QIyJa-xzmpVtnLvztkM}+}nwUw=v
zvj4qjL!-ZEJkUE*X|-k&jnl~oY<_DoGiU$HRvIoFn_IR-+FVIb<5Z77W!|uE_}I3#
zCf~vbH!a!sO6o?MQ+EvpTB|LNNcW!1vDK?=tS#F;8EA8MwSL#y*tX?B$M7)CIWNY~
zd5oVb&AQQ(;9Oab0u%?}fcJQ~{IXq|=r1&~*&=5qTA!{l*9<g`%!Wrc;h3o2lI)uX
zLuJf-*Qm3pGP5ITFL#ty@4kyXx6b&sOj)oT2S!n;W@tfsP--J-YiPefd%d<udr~VZ
z<?&>~se^Qu0eHfd?lCX+)2;1l>Z>z*M&d(rhKGuZtQK>{Dsxet#pX2_=k%eznU{x#
zLZcmCy*aiybz*!RL*L?>nU2)Q%B#zZj8;>r+gt9fsO>#C8@;?{V`S}O0$Pa;E%G>M
zgFxjyi<-A{$0x>>Jip23j`g%x>{w2aP2u9mRMQ%-BeHEgyr!zGy2IZ)-aQmCc5b|T
zu%l(5sib9{Inx&Ht;g*%P57?HZmG1VVi?RL-A!?a+g6L9QwA;UCeBjkXDp#?WiIoO
zPUTzzui7mTSMnjKPsc~=EbhLh)~S~9;Z9>@cDAQsaInNP8EG3AgFLy->~dRO4sUm$
z31v1n)JN@hS1jsp_Z9I`-ZCDRXZRZ^-%hrR+_>gePPr^FTrrtcg1D{k^VwaE<9j;W
z<?`C+lhMiM@nMIth=_^J4F;!W`>UqV=vdg9qewn0i7lVT=~r~yk3C;IQ%o7q15-IA
zZD`)Gt<e>pH_i{_lr=VIGhDmo%)SV9kDn$69|@h9*vV_9Xqp&hd7>qsh5xHh7IT)Q
z!mAyticHp3-r%ak<$HeLDPzZndrbuneL+Xdtt%^z8-so+pM8dN63BPWxCh}K^hupM
z9@T-!Tb{Ts#R)+L_;`9@<mc-X8H=^7GZLR02yPg!AGFn-Fg_D-Z7?rx-ts3iI6$Ye
zwrSnn9c#BZEl)UKai9<`dHESS4h<K`J3)tAy3zF*ia{`TOn|*ro_Kh@tBs#B6tKSF
z&VIMr)YRaqG8hfDEtNOw+`*ka?0?OE<Qw(kf9B72#CmLrA!j;NovLo0^H)?-?S`OL
z(25?zzn~(i2>XO){mwtLNE<xlGq<hYPhCd?g~XX*c_$>@0%I2b_^XiDL6QsF?#*eO
zB&_k3vgC;5tD0`rFRwk&EvI8Xq59_Y4tA5*HYi!v!;^f+PyX8G2kH5Nb<UBJF+~Y(
zNUX|54BUCqBh3yAMYun5P9>6-KcZEr%~x}2NgLiFlsqQ*&BLrL>{@U|vtLEo^=sF%
z-mkyLh%{gvUWd0eAdz()9{Nl(^uce@zyXm9Mj!U_&=#J!sn9q(yV>}zac*|b=wuh1
z&g?9md5d+gj#gY)tqZQI^suZna8K~8E2kESQ|Q=>*_`~Rb^ej;$IM9UaGV9sY1v2i
zC<plFF34kexf5U-xP#<T+~p$C?iEHF<toxzE8=3EU1_brPDsdXz5;=hod`c#s%N&^
zii)xUL!!;=a@CqTUBmYn_YJUv#nlm;C6YbEW*cg;x!uZq*=L;D3pBng;8YZ`snklT
z6j#|H6=vLi<MXcPbIK?5%_@(+Q>$X~aSF|sy!2QAP(1$~GzeNQDjEdN`)g%Cld_*@
z=3}A$>G06B!)hPv@eOzRPI4uoE_-QCx<;BnnR~QV)dalh>8PR#@KW*UN1x#Q7TVn&
zrx7rB(};kDZUpEuT?SH`_%K>Jzt4E}<md$DGuL?0tXPCx>TXlcF>7|rx8aaKoM<LK
z(TQfEjlS-v6ra1(xn|lU&Y<n4L#;5Y5G7uPl7b4sBv6j57_1;fRULp!iEgzx-w#s-
zE)o%i-NEFRBT42d=qox0F{RnT03MZNAzF4q`x)Y5qVp%Mz9GLPT~2__C?_E1&O+oS
zjl3fhr!}%oW7x=@CAs4GMA^=9DraHIvva5xfEC=&XzWx7Ygly%eRbOjigOAfT}{%E
zYF5!Ozf}JaA6s(CilsKcfs{s(n}f$Nay5z_$Bdc2lWAvq#U#43eP=PZbmLUuL7Wbn
z1V*@WwjJ?1<!n2QdFQ_?augW~%S<uXg7Zv~eKno3-G*84vaQP=oeO1g5blV*%SIo;
z_r3tHIfDKdu`OC14QutF+{-1>p_Tz??p?vm-t=%+IO8s>8;%cbZXDZY1`Db3j6F2D
z_O2RdWwmG5{P6wj(M*zV6gmGl<XkUH4ZgEL(ThpwQ|7V?%C}ha6&9DtToZV`v$tic
zwL0N0wXH68dqTa{!I_}XQCegx@r*S1+QaLT&1?KIchh)Nlesq@+p#rN-?GXC`$r&<
zsHiM7#sW<{Qmva3&Zd!u4tzPgxgnU8J^0)QT#7wb;89x5utY*MIu4fQYfPNQO6vsl
zr#6J4p>d|KjBQ|pPe$kZS7-min156z`zXF8Whyak*qBZC+?{dN;lNC;li;Qkw1z#W
zlc4%GJI+qy&MdG=vBE@HBCTyv=qDTR8vBFs%0@e5#?Sq)8D9&3ZOndC9WJ&sRnAm2
zSo;pFnK3WS&!3($6gppae&93}II)&_!Dt-)#k44uV)o~FsmjVk95&1Cuf*QKeYnkm
z^er)NsRKX(?*iNNuFgQ~+|MU^c6Z0uM;ZsshKjyWENyYQY=)xF=3swA+tv<R5Y@Jt
z-TjHN;|q!Iz5QDs?2aUw+nn3h9s8**Qkrb(+&7ZGt3AHu{=R4j0>UWT-HSV}=nP>u
zk0MFZCUZ14q^>v!(_~^GBdAYH^{^`2D@vp{!jUaqQ-3ts;%aH459`7#7N2a`GH`e_
zn~G0{=J4VAKN?!M_HF*fuyo_U>0{#4d+f`e=_Y-)SL(aJsCz@i!2Ut%U&6@$5aScl
zflm0u2vD?WuvyOg4g6@&@?tvL6ATQeeU8Em#83BR{aG*0`ov`9d8AN}-<!u04nEfA
zAti1#t9jTs9g3$@wGwGaQaXp$W|zq*WJPA<Em|56<#Ci%HSJr6!rdyxx2|ef377Qb
zx2MQXKKdc)6~?aEe6&T9;6JqT#M7C)0;@dIkmdl?Sxs?}c#yel2Iav*ov*p#DAkN*
zYr3Mkw7A4k-ZosCW|_GuW1+LqFgl)nlV%RRdmjB%O!|*v51}(QeY8Q4tGd3(!ij<D
z+0nb}b{&pH_pjgB*SnWpZ|&&WX!@@oet2`JEecbL$mw0=R7iU()pt!)_gIW}CWr_a
z--O6vY{3=TYcT0wse3Kf*)*MWQa(4>^$$P%Cu6K7GDKE?ocm*=*aAAQLTD8j#9TY(
z^C-xd+BrUlDF#a;EkJ4VsS6(Ts>AIsuv8d=!#{HNYg7G5ZCSBu`h)gmZn<kl^3?w5
zaj*{C$e7nGTL3{ZMUifnKBhH_R*DL-p6h*$=ip39cU!4*by1Pc+}yDG6qlJc2-jxm
z&4D!5egy?x?YBmRF9NGw+z$6KjVx{MbW&k{38bdpw)7p$E2&>y2J_Nr8O)~D60<Lf
z6)}U=(8gm0gbZtMORB-jC_!*FnmET2VZ)Ld9<Y=P4Y-l;S5-;@9v5)ygIrhujhP|n
zN2gJr=9Q~$a85;I<4bu@GQWN@H}?n<zLOP^+J;s2ir=<V(85Zbd9_CS?!ZCYYqI~+
z2}KhQAYS>G6-O>O?_-Z0S6hMF{aYNOJCXgIpQlSS7lP}TV4OQ;Uldp?*3=Zgt)2#!
z1o_<lgl|0H{jZP@*8<~1&=q85cx*Gyw~@xQ;bDGyuPghN#b6LR?pB-OAMl?udkg;a
zBXorC|FFr18<=TrFBPI(#DFSup`8{|@;K){A~0I?Jh#4-Nbikr4X>#`Y<$iT8E+b0
z6C6+b%WG|hXN`x;oMoYbP3HNT-g{@AlGEzibf9-)s$pb%yJsX_ZgooKUHz_}d)6U@
ziE&@m`<R1@EKg__F0x}vqsqM5vBqdfxl#sWEZVqnxH06jSPjKh#gSOc<PLLYtTa@~
ztl2Lr>&gdPJ9Zu)N`(rY1^V{hb*Jv(JpXePxr_579mBO3kWy$%EV~)ADaRBCtQXu2
zEdf<4<s0#MhjC&s-k@71b&$vWoZ`H9bGhX7x(cZ|@1SB<fQuSj<++23J!N!Iv6l^a
zGPSiCPxckfCpsZ{+~XMs0mP+<=I^k62jBC-I-b+J=mHp}1`d|4Z0>GwSk1UcrM0&%
zL}v@HE-+Y79jQM&+*kxF&s2Ic>)_`gdq@0q4l;Sc*wd&J@pc?kY|q^ZVLIkN=uWM!
zFiZBJ?Qq@4{>v=#oIByh|IcOL!`++kE8F;a#MqmsL_m0ybBVRwk&U_i2D3SPO?y;v
zX|X}^f{^3G*V87ST|6-4DOUKMgfcG4XC7mGkOxW_&}l@#&?F8)7K<9rm(iJQ(mhh&
z-k5ZL;wrQhK9?)=k?^JlXP|DlqqC^|sh&P}LwVqHqcu<_m%Dbnrlu+tv;<MJtEd^Z
zN}Wc#(5!mt<Yn2czV8kT-Y<<{Xv&KC1~+`?mb*BfSzQUEq_3dIJde@O^#?^~P~?sh
z(kbi`By^0%=K89#B73QCJnT<JHgt9O$2P=kQnh6^b4i`Iq2JZ8$xP~VyuN8M3H4d4
zS|{u4p+Pg;q^4sRF`l?YmZw;5xq#Vlpnv_YroP_fwz@LU?#$rEdw-T@BmT`>f?b2r
zI;%UiZgA*q3d09^P2h12c{xbBt8^>IY2x2@{ke3{y3|5<%Rsc$W?$PG+t4~PggCQ?
z-6LJwlhvV09EpyYfZp9<e!mlP!mWVU5u+^5$c-oOKqA+=kJSFcFwy2-Nvrdy@xj`2
zHpAJK6rXUO1I4r?{0RAb)co&EHZS7&+MgRHV$R#?ulc$0m>Y$hxV;vSqZst;r`U@@
zvlgaBh%_k27_YERaT5>at*=VlW0-O|_Zy~a60QX7JI?*adlF_=W-~klSy`6-%K4Bp
z`xVIq_yKh9LQ^fE8_bdvnyrU?7FHvS`;i%&%eJ|>xYSuzVz$4?t}HEOCtkLg%WEtp
zWiDv!uz2CV#q0bGGhqcJH_;EDV5Z6YsxKXMwDe6!<=@Q>BVA!zO{`Y_y~SK+FE(TN
z`DR8ZpE-Rn<J&OCe>;2kKl-Ob{bO$BH|s7lTWn<|Wj4WgaKk*0p7PN3LnQR`M6fBI
zFOqqaG4Iy*x4O3W8Zx%>;bxbwyrjhKXlO68z0a@ns4dN1=W)+g_C~gwuJkxC+-ELy
z(3KtsaJz^6k>BnCYaRF>B66-{&jNHFL{Rt{xGmw3hOcSxAmKzea2;^G$9Gk&q#4>M
zSB-Lt3)eF+0`yU$dj*|WZacca5_-<SZ$Ui2i$tMz#WDV*@~{!QpF~jfH7FXuNo)Vg
zmc;n^K`Q^%P5dLI|5&^KNKJ4;2AzaRGavFqVTST;VX$7|b~12%ZenAzift%T^s=}*
z%zZ+=PVCX*1P;zX=uIlaJ{OmWNx6%~<}zq1I*;Qfdj_1hPU~G$EoYD~Sm1M;knBHC
ziaq_bk^iZ^1^QS@-pHRG5+O7G`M~6&ciYK{6yK=dpvOl2?x@(PKUQ3C&VG=tZFJ7Q
zKwI-$N%P^m&0c_%0f$gDt`+B(;*jHpN@>BhP~WOX<I(x0q&ax{<;XjX0ca-NOGQ?6
zp(~<)P0`kEhV5bUM{RBWnmeKBHbhvhbswVCB9b{K@?s*C14auwGzmp3rZtb;)L2&8
z_j{`9qoob4^|d$4yq3zYP&jOD^rf0itMvO_`-&<m1D5A1tGrc>_5ZHE+g9ssa8(4W
z8_PUplH=Bw@rJ7Y2JoOV%p4m$UuO7O`(OdL+7-TT)N_8rBTAHJr=1K$LLAx|K4E18
z;$)o{pG%~7N*dQjU3I=xZA0%&e0@`SWH8v&klNH@9cpYDu622)TB_TsN~$_)!gpO5
zZjWrN506%ch8x*uv4pE*O{23hJaX&fb!(E-eKqN1=f;+HU)#FA+BLsyZMlEV&@W=H
z#?_A1jkUq%r#c2B-q^!~)m=jvHMHmFigb!|QtGuI<)c?)X_q6Co`|%jYxwWLKr&S6
zh=l@c5XoY1HTT@r)^q%4+mgKt@t)&{w<VnITkbv74zZn>yZ3>%=q&kwp@XpP(s91C
zkNY;LRbU{mGoCqk(BSX4IgXt&IHicSz*>Ck9Q+&H8*&jelD?Q!Lg6(!G;I2X(t)RU
zH1+iPCj*x7baZ@e(_MeMn++JOcb(ifAB&Is12%tnCY{=~?+-U28@BvC>U|k`V&GD(
zgGo2^P%&H7jTTxRqEf8JFE$TFOKhc$Jq^j(*2M$HHS?*ej$ZGEYKw2SaeR1YtbI+#
zF0&7#+ZJ&n_^4~W(;ZD#wXgA1+iHAkdwX_T45g!qt~rWyfM<hULQ53UClB02NyepV
zJ&B4W>G3S&3TFQgi9KYU!JyCnKi|X(%1nmJP{r$I>|%D_>HN-~uC0!8Zy(O_Wv?PP
z5uu+~BQl=iJaC^$9gP=T)-)B{iUVEE@hypow7<=5nPNr8ullX=+L7(Od(EDxy{xj)
zow%!ae6*sxgw;8}T3tFbGlm_cpu7!by^Gc>$4XR=v{X2a5$iX39MQIQjC3*}=1QKb
z>kc<gwDk2_x-vD4orsMD8Yk}VZb?@-;AFXbxHvE$7@KO}@^)flYujvWV5+PkQ0)9P
zvAuio{2vT9_{#b>J+Zwpw0)#^PZvhh658+!)Vdg)0=6o;XstwVdek*>cs_f{$PO7M
zelilR_{FuWTb<U?KY8N0dCXjj%Xl5s*MfTNV;9t-#YHFr@k!1oWv4v$TL>d0U%itR
zmj1--g-Eo$*StR7JQ8xbqidUBe;iAdHF}a;-MAgqo2>O`LZkM^b+OpG#{L<YD-osE
zwl-B^sO|{0jfFgY(KVYrhSi~zuVX`m&06App-{r*NjLTkWPjryh&HEN?B3admfkuV
zE1;R?0B`XM&gBreCYwjGftAY_8o@~o&!c*jNPGHvD?0mJjER<SZcba#)ZKfAi|e-q
zM%TA*Nr*mRFRfWmja^;Ln?7q6jlHcg$Qv6yu;Vv>Fevkkw?GTOy;AP$AJo0xNc6j_
znltN~+xu(z@6d2Z*jAN{goZjAY>tFEy%6I(BeSFR2YJRp^s*VfT*$Q)njLZd!9#*u
z9G8YTt2i!miswPuk8+CrPi>EMbjh4zaI|UuPZn9{4{!>2MZZSNzkocAQtLOQNfG~g
z1+*BYn3=q$S$uz${~iCHzL)0)?w^2_8zXct9v|E`LXWt{ADGKtHL`t%vAx52BNTba
zBNTZgxb`OZKK{mn2YHhIJg3W$ml^G^>di4(V>YX*GTP+&@&Vl<(!wgtSD9X~uoMY(
zz*!h<H!!_aTyC?Jl?^}cuyp&&i%Y8=mgGFuhDv%Cb3G{a<F@J3sC7S4#B<HZ*KkU=
zFW=PnqqKn3KY|lDa2oehpx7k!OQdf~*ug_LracP@Uq+h$3dMhZ!DZIy{WmjOwI6Rg
zmeV@gFUQ}ulj?+luU6k--t1V|TU_iwFl*K88FnRWmKG|C%d0KsGB@5{L{HHz&^#V1
znKsCA35se2zM)-&oRK2Ez2QXEKj5%9)-`nxgnKhhQbcazOYQ6Wdj@eSmJe4FHVkyf
zCi*fHtyk5CmzKZ7?g1zJLKFR!#*yJAhMXp?rTwU!KLnqq)KR%IZz}~zdBsZm)Y>uK
zBhZ1~M9UUH7a`Y$=@Ez7Wp=ac4`(tDqbKn_%i#NfG>)DyO5;aqBptyn*3YF^X><s3
z$TnFC12k6_pDwLTHkpGBOkyP#3;Wt$**;xmb)@S`OG_(>`{M0S<hRj`?fGNtA@OE$
zMMW|4VP9Jvy|whBy|QhZ#umzEi+DRAt>qN0JxVC@gw0mjb#0U;30?kj`H*hAE+d(w
z$>n3WP#=zbz(?A8{`PuapO9`$_Yr%M?gvQ*lh}l7KfTBJOxfAFvGa9Lmpyx)>TE@t
zx70MapTguv0_z^*7!sJz*AW%S2X?g=LE8r8Zo>0XF%yALaeRj3GlU~gKkjG$mK8#}
z=&14ih|>7N1rsoR^Ci2WeB;44?0DgqPKw*WH_}JiZ=}mc^_zlY+HVS`bKexYwBMM%
z&V2*Ri%bD8=O~qfy2#~#du-u#m}Y+66YL<`vR~KDqM#(Kdsg=uTOui%6uPVEf8#^`
zXjRnXYpH5^wk=eX@WmV42`_53{Mqsu_R{i;R9_QhuG7fgHXd}jP}-Q(Ejgvl$bCV#
zOL`G$zkv1W8>GdICutFsT@siK(g%IpddjVi``0D*Y;=~pHvaTReYdZqt-mhmv-rB9
z&@<i0@-*w0KBUv|q0(crCon|mu0Z?os@l}v5zD?q4#&m5KbwBw?Z2BZ`DON_-;DoR
zH%fhbd0O{|cn^Hfg2_$=lU2=cx#xa|!|HUW_FgRcC96M=7mS%d+kgyEo@IG2o0Q(b
z+8NR7w5*JqEH9psjy-qO_>_L$_Wkc*W@5{)E$`K3MJhOcC_+b{F&sUA%<%Y&PucWQ
z+xO4&zDHgYNQKok=hI?^AcEgXe8-VLlr!i@_@Aqo!p;~sJsb{MY?i7fqc2opSXEwB
znoQIg>frFe^=+$a>ng#o%d6|%#;3d?=j6tTDy!Fl-AmD*#>d-jsYKK6Xt;fqVU@eI
z8eckHZk6WG1vT7RMRFAXbG1iMhHB8f7etsyZ{z>_GKRXAh9WAuuGVHo(awO|=*}at
zY;|d>{V7|5%8rP#oohF)t#Z3<zMyj*K3N2b_r}LzvSG_FEid3ampAzcVsSRcK6PbX
z&+7Mle~wyi*RoOfkVLoC>+I$6@?FmF^q+rErZn9g-ZP5#?1-cL@~q>m{FbD73%yr?
z_w@W-r;}OOM_K=^o9z8;7<rt*eUV3`w`fdNAP7H6+kl8yn1YwfGSh|gR$JkA!$QE?
z%swxfidgFwrNt7PbIv@2cb8zneGKoC?5)6CnC(eZP`~uhG2>B}+kMn{^yn0}sJf*m
zp1|W4#2<s)67SH;I7#pD2Y=B-Z<`L$d*Nm^3-NJ^a`@;YB`@)bq^NWGJ?JDaAeI4A
z7b8oaQtfTc5NcR=$}$nkH)-G4Ck&~Bbtesey%n1aNO5eIpu=7akJVYL*Z7;(c;cOL
zPo~vWG?54oR@rP_zWUy}cq(3(YA+9Dj)i;s?JcbhJsEp*GE!e_b9=j*JdrxLFXm5;
zRhVnax(6B{34QUVnnsT&*jC@wgB5grx*j*VxB7jK@>pxIEm&{2bP@d%Xpi5)GNPv*
zD1aEpikVOCcwEow&brQ)_3Y^xKit<gGbMd`%f&_l6RD~FiR>=$7aAGgU}OZOeVp&_
zJ3{;#dIioJA?Y^E`SP&tYtHK+^KnYx1>mC`A7zI*j`Y$3$3^;4-E}qnq$d3^r3b}|
z?m)K`K(c@_m~LN*<{2@cuNZflLzYCcUZX<<yL#hMS%tVLvBT-Vt4XB#L#i6lI@;5_
z?q5_bLijVrq)Q~#VQU39iaz?d;phqJlI_+W8d;k`-FM3O#Dz9La@6qnDe0W;))ajo
zz|D|vLHoq};AY@ufm1f5h)S1k?Sb7A9^>EXz7pRPAB*e5$ldX1)Fz!n1`_9nk8wW7
z$GhN%K`=bai|=rrc**~KK<10!d$7lVGqO(Q4TU$-8-hQ+`(ny}J|Oc*dIK6Vv#}|>
z0U9fK9rw<nj?+Ld+Om787D&OlEl)wUe0&PEoJESKY}si_0j`Z0NL#L+mRTFpJcVWQ
zUaBYYYx#RoPf#=Mn0*R4AOmqu<|%0T<?t0}xV;YJk#F<h{7^ni1ha|rMjMxs{A+oR
zX*|0uy!KFEZ2k||i(l);j?6Z9{$yDE+SWbk?;7;_!)4Y|Z*^d@ttakFRhPKCacRc%
z(8>D-<X?`yeZNRg-rp<#IygF>+T7!*wp*;W_HEsnjN5{1qM-*<OpQW!iySxiqm*Ol
za@Ef0(?l%%D9M#0OVM=WaCp{PH`OuR9GUrXQjf8Hv2asQ-HB&9T0KD>XzXVb>}lzB
z_~dG!X~ejuDQ3G^X;aV-tz^ki0J#qRDMsu{6I9{zeH0!F$2TSLY}*uve|D(5X{>3G
zg%jO1m2Q_aRAzHJ-2pe72#vNT7kU~-qsblJj@V2rJr$p6?OC6Gx6|P*oSvB2<*@lN
zuBX@%b{jnpDUZm53MIm}B5t?GQ9hz>aEBrVb(l`1_8Y%8?n^zL4m(N=(W!9S<#iYy
zc7_dQxWk<}5QO_Vi=EiK`9${J3wu8Pc+Umo9%Fl?1K=V-9oU^%o0DCVbdca}%-LqQ
zbG-!1ncGT#+#567%)u&mw7fJ@<n3y-2jOz4F0T#RiXs+A=Ycy>wWqeyQc+c3ZK+)4
zDy*#z$7~j>rOa=ws5ZKa>Kwri^9q7xicdqLILV^JR2>kbTkaJytJ;mm`a2LQNv$2t
zYg=mSi>#IPzTQy8>#VOVv&FKOJ5ra9bu4sLm6o}q>sp#)77J)yNf10d=$~WgpH;%j
zz|>KjyHOI@ZSBP#Ne^^%g(nk%a6_*@91UkT--(7L7VA#5Z)$Tk4Tqw!+d2^K(Y(Bb
zoytq#1(Pee0XMLan;q+DWvXG+AZU&HSPW#rCE_t^vS1ANP$-;(jcqtSI`p%%>oy(j
zO>S)VhmBHI%2(Z5SJO5aas-Pdvm<J*YN{V@e(1>PV+Z>B4^7Nu%)x1UDiOl1y*`Y9
z*3;uBx9@u4=Yu1^+_?4lnnsT+<mzY)PxpsloP94o*u6A$<ng`-o}S-wd@x|MSw9=O
z?6Ld12R+Gll4P_fxh6e^aW8u$$&p9o^B))q!Q*jNCvk_QFFY_^IGva&oJENK<M@&P
z8gLCfJ}_}MarQ&kW!Ibd55GSA@WXE|LlW;{r`f~$2=xCy*UhkVK(4TJEP>NJOqdY@
znFDf&r}+yRnZ;WNIP#*5>_eLU{H?##q&dNni!!o=w;tth{gsTI!&^`AG?!$A=sC*M
z{I!fM06EN&%QCW^y$;Jj78E|OJAf7DvTnOH4deijU#o}&<W(T&W#kx}W-k3Akl)Jr
zWZ1OsV~$)A$nwqQF;<2ZHd<r(ljT|D+`l}ldqejTkP8A?{(O0sNj%M8$jGP5V>mIJ
z-g;3+zQtSL@wfgmmxft5a#0}AU&bH->8-z#kq~nB^E8*_w}_rXp60J*<Vzq1j$9@L
zvhu6tL)iI$iEFs+zV>)~yfR+tt6X~cVfTp>r_Q*};C~FF<*#%Gq^lzxJ=pH4EMtBH
ztpM@<72pT4kKot3DOehQt-FMJ7cH0QF5tX8w3b}*yFd<b<O(mDw2hmrnLQ3kfw3vC
znB)~n{%KyvJKAlH{f+eO3;Pp(OQ4xQ&9mL%ZPRh_bhM03``X9F6FR~Ibfr(&BY9TD
zqy6)SKvSh{l1*BTrKQ=UNM}Ul>OcjS8+UTnBWA;7G|d0BH4v(bRa)#_-e@Ymcl}!i
z$C_;uVSlI&_M$+0Q}c%TE(daxP$wsH3*>9+0Us>`xzxk*RLEpG<nN)TOsTE3HPq0P
zP8;LBu8_aAr6k_d)RAlo*4KBNW9|}HxTVq8?x<<B)dhl;;npU9+FX=y1`;mJa9Zp+
zP|pHxV}m^NnJT!mo=@%cA6GaGBL>F>!>5+k4r9u3W^r*kn>}Lr{u{>;ncgVguG7*h
zi)S30K-@ufBRm}K1Euk3Rm{^8bo(kx+FmoB50uuI#nKJ^f=+j`z9|k5!b^@5t5@~3
zw+z&SLO0r^4Q*nkcw3y*AY>ygh0*D<Y9NcATw$G^{y=9q;OutH*CxG*&9Qcm#ToGr
zwi?U3y#H@$UjyCNah-{I@9_ZyK@fPvA0Hk;fcPc&2Ld3#9}xTzL{Sn&Q53DvG($-g
zO)IiY%c`O(jAE-^*0FtDMNt&Tab;C?wW_PAj^kB)R9EZdcokKfRa39))p1>K>XUW6
zUL7Bw#Ovd#t_bWm^BzD_wwv9v5+8mBGk0e0+_`h-&b@cy9l@?+YkT_>;nq6;>H2}#
zw%_mZ*yNTk^*QS^O|AX)=-D9fGJu{zlBEZ);Cg!aRgcNrw_F!L;Rd#}n&(~`b4h)N
z7qXyfN{b=1k=m`PHU@NSRdQFPdnt9xE@Bg{N-q#z^lX*ajt3rY8R!k-N`<y)mmIX(
zYe%?Hq`?<V#BAYyceC8wnlyE^H1%18s<0!LNjAD0>x}s9O%A**#cKi$&A$4U*J2Tm
z-)XAusEsrMbMWpY^+n97=KyK7^6Gl*0_g&jW-Aj_lz^((o^Plz2&{Dlg55I1Sun?N
z*47#9s$-}mVz|{?F93h}zouB5=ymve8i6$xk-%M~a1lDQtMt^)Ne757Y*Ys`8d<y1
zGT3L9hDP`7cy`>p<<GW7b_9TEXnii~o={6ry)%`4(zG>#WnC|niIKHK<}GLLXxJVw
z(UP>pEu8da@ZU%&4|S-M!XZ1WDiD!au{x=}1@ir}@D$eN%ok|1T}C-THQGjtz0z!n
z?{=8OZgZt%b=V>-ergWN%pKfm@S(qelwk&EI!?^QhFeJJ`lP0GAZ3i@`GJ;_M5$qx
za$ZXrLLPd*kDmL>6?tY@%JW*vC`!$-Qa{vE4x!Wmmgfa6g|=sc<@u48l10imOL<XC
znM7RnPr2)qcWNmfq`bmXE@&w&L<Be8fIL6eQY^Z&(5BLqm$Z~Ac;6m@TqAOS!*;v$
z`vLa-zkxS$I_-DJTs|hZYD7e(o7;S=+33F<O(sU0U5%B3$(D5(g_?}dlT$oW*dEL^
zM#%B*&df}g(;dxUPP%=r#=56`HR)}wZLO$j8Z|%6AAl~lUX_q(JpL7tQK;BdoK`d*
z|Ld-(8MREyvYC@R>Z8f{mPT5M$J1L|FNMi*R72ic9I(4tr7qMHZ}G~{`C#EsSih)s
z4lMhamV3p{P1SX&!tLwHftr@ykh{SmRe7Ct$&fuAb~ac{mKZsn>k6#T1Z|RJt*UR&
z)+SSu(PpAI3s9V$LR7qBPnL1^yO3s-<*6^mTHnL@rrXe_)i#HoxTsCDs<AIlbG@Gl
zpiJZhe^a@F_(r<FZMY%aWGyTEl`)or8G}iRAGpdBe}mlKfPVGiFxr=NTNG38CY#Y=
zbX=;i=zZ;VDd24y(o_e3n64<;BdHcm;LCJRfFL%|Mof1%3Qgwnc%AGrm0Qh@da-Jw
zFx-V=0S7k}Yq5Y!25X01`M1$_O6j0Jcv--Tp0O*+udqC=WLS*W*yyWLGb6MYGjWTQ
za5s0FOhQeUZw1-)o7T6iq&e6PSX=|CjNRRp#5RKx-%FX13w}3fFE!rO+^qF#FK7>>
zLG=wQ9JV0$QpEY|_4;X$nnkEhd!k-}i^vh4k0%Ea`36L`!R3txD(uE<SIyS)%;0-;
z<^WT=>-+@P4OpH6>Z*gO>8zX`D6h1b@Bl(4f0;aLHkzc$3X=r+;6q4%v}_gIi<Y!`
z*bnmTWVgf$Ws|+aBw9?)8gYZX!4UpN5hiC4ZM;6DkcIpsjjf!w1YGOwKJ*rxo3@Ke
z`Pf;r4h{;hcos(Fp-I}RxAM=u{NO9kPe20H&0>YQjxy|22-T}ivD@fyImIIiPjKBP
z!I7*%;48^-uV{v+PkxKOj5iX_Ri@U8JL-N(wPh5?phs|X=p7kP*Hb*JK9?nogP^9f
z4pETPHPKq$*Hsg(7lC#$>Bx9mDEjfiOYxtHxx67)tuGp=a$mdZuFM2|@3DcvJDuy4
zX7{ogvZ7|HPbgKT)x^e@=U0v`g&hr;EauYCs`DE>5@#b+Q&8F&)AfIuMbWkJYN9i-
zIZ9t5!GVUx2D~(p;{#p2(~16Wytv|Hv3LqEZ8*f`pcOG=KS8~ADF-a!h{DCjlBym`
zSCO#EJOGCSK~6E&*UY$~<BH1sRBme~S0fttbGnD-$wkKf7$4NI;zezAL`!v*rZO;Z
z5Ns_<nL%$9;X@H~HBn5*-F1Y=U<VuCqL|Hq(<K2T$nb#GoK9c5t}~I1j&D)l>`*lt
z=jzjTn>AJ!Xp#egXjinhS&}NluDS+)O|!oTbmNdDPe`%)Bq{7}XtP^wW?Mk6t~I+N
za&sGM+=Ch&e4OrCRm^Li15^m5j6tPG@x`#4Cy}@SaR*)lQxU>Pt0cW>tR=@A+=i<1
zs}62z%5_z5DT^V<kU*nt&I9sc?mCt6i;z{XGwj)meEVY5yMjDqN}WmvISvA`R$jYW
zDbcx~zYLNAygA@&AK;Y(9?Z_c#Q^2$r0lT>$$8~Pip?w2(^vABk#{e78kS?%shwOY
zZ&8yGrUQSpUbY#8$c$Gq3eg$)>5xt2qLi*P*Cr;e(I<cT^5oR3fE7UM6kx%QwmKcw
zDy9>h!U>!hkiD`H&3P9G<$xlzjF6|#KDnVIHum(hW7*Us%45E=b~_m!v@uOn%Xzg6
zW-ex`0@E>?d~th4uN<-nEqj$$%=IzCiC{Wqy+If0yD~X>CI76P4gz8vEgIG^K@Ej*
z#GlZ|xeuQeu5!P*B#@^q#OAW(KcIV~8RXrgtuN}S1!EJ-WTZb4iNu3znp)c})z-#v
zXKzbOlsx@&cYjNyFBFn2l4or*d@-+si{5|)L#+>a==5MGmT*>w;X~DLaN3<a`se1z
z!t5++93l%^E}Z-%^xN^9`U|AhSLvxJvu|dzJgsj}v(-nVvPl~I<iJzQ!BAdhAx<K4
zYB}f$=JgEGk^9j93Y@#@s?`aC70zyB``OfLrvxUSAGb+j8DH(TNG_i{t@!wIjyJg~
z_qu<eFAow|xW-y<sqM78Ts8LE?kEZU)X`wKH#mNpe^Y6c>Zv8!IH-9VGm}Ls(&#yX
z@LE`=A$qHFv`E)kuqpH=^>VsZ6y7zoHP<vqMk%f&dg8-VKPSAuk;w#W8!JPV0|QkR
zjtc9V-ppNzr^;OwzJ#}n@~uhKbqDHVcBa+zIJPKjEZ0SOEouWFTgKpI=dM1Us|`8g
zE~Bf{-PFp%$;lufV4kn_&9S{+m%9_j3e9OZUtuZt)=MUbS&GEUUFEMv?X}@=^YMg7
zrjcAYaD}UINI3tyIr0_UbD8wg7mpma2fTO*lB?-Pe|I3&gcp~mwZ_-XUMO6%?g%tv
z^!8=wKyfO_*cv?@q$p&O0_ie>Lqgg!MD;HAn_|^t*(mDkm6)wn&iMKQ8!VfuJaUIE
zCHMPt^}C}Z@npPVbG&`gHed-kTE^=7ExnGK)_z;AuC;NqXM<&3jnd|Xf;&6FUO=fe
zh2!KUoO98$V>CsZn&7wWj4wskan+C%qpY3qiGKYFTk8gg-8tNbyKUL=UDL*xO|b{E
zI4{VCyGB`B%UHU4e%6pwY<2CSTvKCDYoxIw)G`#Exm(|&NZzJ(oq=RD66<S$Z^I1Q
zVgUQ67GF`S5ux2qhM^(9jqOu3IKi21Hi{-Yj538y>&SL-f)jUbiDfM=OS``*7ZSNM
z;>lEsI0Q?>H;3Vy><~P??p^mMJr+;2Wi+Yu`{XiH+2(_-f=pK(x|#ftJ3?i5Ra1$%
zy~?qNE(Y{DQ~#{^tod2-$r+`iTq+mjCfB0py(d}Pv-Rg(BQ7#=&6f*@bG~c&=kWC$
zpws9Uzd_F+k-|osYDuVK04^HK%NZQ7sXH{Sqa<JxZp(HdD|YhbX)$fzG?zwT7?+f2
zZoPA@jkv}9uLY6&t@wd3mTSr>lCsJ4*b$r17_kYP53TJAnFF!xed}D+QHSgI4u{<~
zh3@Rf3ZKA!^J%Pg=rJ8}dj5n}L>uKWkD2BK<>`5#nYti5`_@O+j7IE=Bh+4Pvq!z7
z4Fj@SS=a8^*U_=LX`<V>-!MIvof!;qd+!qhPMfUo`TMxKYL^t)M`D9tGLY}^JzoKO
z3s(xK$j992lGhI95t@_7YD`ch@S<o8)|uV4b@5Q;o!iAeUyY@?Cu9#*nX2lfy0$>2
z>zm?ZlQknVHkZ`2zL9uc98_|NO3dX7>_tZ8{M%dZ2A>`Pg}(y|Z-Rb>+F{ZNe5e;)
zX7)$U6@AxOupb6SU@f6AkU()zjqg0L5ef~rbgbPsP$$=M9FaVgemN}F7+r?yiXZdp
z2&B0(u1@yWD-lEZ2OT@QZX){Pf2i^QRfT*0yM4cZ@Z$c8yJz&`{okkz*x+MQvGiAL
zTreRV50kN(E-q-k_s>ai=_fUMZd}x_m=l<vbWTvJ!7TmaX#rMGDM*_c>xcMxaW~<(
zJH$<dTRA^?^1OJK<4%Z2g;bo*lF&ozZGtsWZQ~`sWqF=hLN-@*sLD08w+R!4>G}}A
zou2gipjB(6QKqW(3CICFi&dS53{U@KG1gT4kPy;|bi3afPK5nf?fu{7HyGhx8Xpli
zRpCjwoA)J^)H-p{f~!>Hwc&$p|6TA8=)ZHHY3yqotL`CxXzls-(knM@!mv$1@U)NV
z;~I9|ym_<h64#U)#@%NaWy~zxLU9CgZY|xj;vg8lpY#aQ#%2`GA$hb@4WmcH$)){G
zlcT~G-^j=`=@m1UKiuAuT5!KZwr<%GnEYzxugI$o;mq1~qDhn|Ch{M0bB~vm3;pT*
zmGzr&3(hUd$Qc%BZSegBYzU2rqeu||dlBsc8N)}157Qs@RMhe7KlH5?%K018khsR`
zb&O9%Oxt#N?(P-)?+uxU=c|Np=O)utA(GszCl_|?cy#G9$=G<(oPUD|`CFtZ|Aq_u
zI_&L~2cLcRK|JU?W-@2MnSvWFfu(u6w0nRB2-p}19NW*&)2vXNs#lU3*wY6Zs-%j4
zCq67G*3II`6k?ewL-qb#I8fCrH;%P8J|N;cuRZJ2xxHDRb0#T|k2{2XHtq_@e&5Sp
zPsjGoSY{FCW;lnXBSAT-8|{jgJbu*SaDpuC%OgT!$##%QDizizu-(_jWy@w^)Qqul
zj;xz3-yjZ@_lQ~f>swn=r0;F>uLR+W^$p{e!5x9&y{>;EPuhebo3Ov5%f*Gft~LGn
z4^g=|WcEHj(b|x|l1O6?rN9B+1qXl@__G{OJ8P#TL6HT4->-kkHaOBUGMlm~wph27
za@@A<8=E(+Z5oiGhs5KtnvLyP*^J-VIraVh1H!Huq0<j$+r8)bmv(+NXn#%q*waMU
zGpgJD8MuBY>Q!YukcX-hrf;h1WQ91RPF%JOs1g+A#Fx58>S`v-vT?b)_P+{!KW^w~
zi8glDRe1*EiQcy0*USF6Hmg8N&i~r&?@YIjD5knQO__9TNO20zP_<L2U7zyDeYH|;
zL$)=wvDR%1Io!%%Yb4oPV^eTUjy<BrAr;1%wKZXR<-dJR;9s%jhFeB<wF5oTBo^F;
z`h{rDjrAvOJKWo~(DJ3h$oy=@gWI>C`n~MTtUl#4*ENevr$`t+%}q08Y~q0mZiZy`
z90QJU?uj*l`4d#r@B|1x0vv%DXgn)FL=PYZ>T^sYMCcw7I|jbe$LBv4`+ib3IW!=U
z9fl`s{oH`q!>6|;4tc*SR*Ixv4h?rXgmg2sc=3STF&Zn+{{!(uU}hH2f6i!Ahs77d
z4j3i9*9gW@sFfOL(dWSWhc@BJZSv&K%#2~5G-J5GQ3?Op@Sm&~46jP0^S;f-?GN^H
zq@m4`p1||>Kl`#{=FTrWcA+cuPCa-XA7Sxo7*q<G^`!`%KNEk-aMt=g!@qC7WFSWk
zFE#$L;W_DP!*j`hUgy{}f#;uO`R~^|Hc#NmFJXKrjwnn6^Jbwu2B_hAyq=l6Bo2@f
z!%K5h6coAX5ahgpo1-%k3<~AWvbNxq1)LXm2~hS_GR&Yn8ebV9`kR87c2!%1u>r8e
z-us7Is{T&=MIalv`)gab)L(SqW>SG{$mKT7#5TwmN$RehS=!YCJo{jWa~fPor-yyr
zYvcn@-e%&?FO5@sTJ2Y8g7Z`peEWA@4t6EKK<TimCC7UnXPeX#_Akh3raMLs!HXOr
zo~Y^EM=bpiN*-e+&*|!knUx%3IsTFyVmT&}<Ghx`qve2P3D`d%Pp}-Yq1SRSZ99Xp
zUxRV91mlIzg>jxd$#Qf6#$}d+>F^nhDF)*_ImdF$A_ujY4nyx>YzMX3*K^OWfbrIC
zFy^!zDh%3EHOF#GKbzxS2IDVFwWyeUo?Kw<m;j8Q-qsH2&Cre?uE56|EC)MTSkads
zYNJ8>Lhb55+ZXtomuh+Owj63LKUz_XijU>Ks2KZ^RtxQ|n&b9%6m!tARcm>n)LV6I
zi?z_+Ui{p4yr{MGVfYZJ7*lDE_6g@Qv~RQ>lm>C4L9PBMm8xUR&T<%DRNS&L#;lJ)
z({q8Vr)Pc;bxLR1?_Ri|T(~g*n*8&h%dcU!=wc*GE)c4})m7sxJ4O~smd;h88_=B~
z&vG1tP_z}r9&lVbb*lJxLOOd!I)lHn(pf-=;nd{<N6*DojV|En*(#$>aM(JQG`gtg
z)k>=s2UQlc_D<`)hNCM<GFRHk-r^_pR<qki|C!x3QeyCYya4Z$5buPKhltmcXmN|~
zBvNluT~sjG9<=NAcBd2G5DVmy_ZAl3J9%0;txQ8(HqG#J645DH-gJ99-5w6Nm)T=9
z8+qiUnhUup&%&Nqg9<D0Ww>SN-7@U_VY0Xk|Dww6AR%jYQ2X*yErjA(tqDzAT&^vD
zdAXcAcF?J>96dcssw4OsS=0t`ULCC|oQ|I0PBA?k#9dVnHg(K(OdgGKu~GbbIKTMD
z;^G^u?-LlO3{JaXvk%%}4@5FMBp*B@WBVT5^ZqAe9_@YNVfnoLFnghN5yw^5&*3x~
znln=0!j*I_9_mO)<pYv)w=_g-j*#TAwY%A8XHarfr-(%fD7Ai5IE;5sJ>DrT$93lc
z?|qD=pN*xTjU}UB&?PJ%gY7<w>!<Qhu}<GW8#17O1v)Qikjrplss?MKatqy!U@4;B
zCaMt<`DTaJ?J@liN6Mr4QuZmKk31o6Gr63SF(A4~xy96B+V-`@&i%iBKzQKY`>|TZ
z_S~~AUFH`NW&@P$&|y}ScVU;&M6C>iR71^zxwAbR2pjSM+bUB1br1-Epul4II?B{#
z45}!HgERKr85OK8z0p9HUM&>KwpyXn?u+KeL%ICk)=f%aL$rB~H-YB%t?7<!ZHSG(
zIFxiIgMr?L#$HSur>{G(buGdj1=ckudb=^DJ%*uVdgJ=efi5~Kx<Ut*Iu=_5H!WbR
zs>y5kTvSQn?Bh`uHZg|4Hbd$a2V0vE=vney<<91pV-n`;5mLq*nmq;TrxN39*qxi{
zJfO~^z%}b4b#~M&MV+?`j%L1vc+#Qdo$DO#O<mm+Z3}(dyqT?u?lHyLyH@FTn&rO0
z){V8P4R;>(bp^?qeQTO}2X?={b#3e9`lhbNtz%p6R%|wB-M-1e$G$d=6S=~T!VKBX
z+e$lirp|*?EYnyxRmCZ84dY?iV0M=qM2oR5B3D$HO;tuyT_TDk!CFxpaT|?@ab>LZ
zB~D@V`PjCO<Tt<lNIbK%Q*?1$d|Rsh(PMuY&+f!Y1p${m!5!d}lmj|>NKNotho>sJ
z)-f#XY2gHk?C|Cf>?JRI<#_&3OA9}6YX|hP@1p1>*m#%G6ETD~NmT23-lxTPQ3NvU
z857?5IXT*d!z00yv2cq^hb`oZ{86&MV}GV+9>oivg7M&Noa&vh1JE25D6vs0V<(WR
zKQL&Go#Q%Tm~*18J#p8e!GWn**IjMgqrw%jVQft#I@;B{cdR)Z5o957Xyi-ZozFs)
z+IixBB-rE)vkz_RpY80r=dsa=hkQ2l*;9D5=(Xo;ujVoFe9mg#>9c#V&pn?1Bl7X5
zgnajqO!kmTSr+nV@~5#2hoy4iQRw!MP#v_>>a+Us>?Y4E`Nt1&H<t|DFPAV?RV$7o
z+-tCOz^<^GFFKB6WuR9Dvk6?S>1`om!?2JJGuv}?WahFSSy^LGWh_t%SPk|jd&WN6
z7>4`zbUSaZh}8NME|aT=v*mx?{@_FH%?(?YzBM`KsB{`-lgCOL_fB=U#`fGd7qt#-
z@_8(_Y9DRU0M=X)qvfUcxn<yIDorCinB7-zr<y&r4e(zlzIc0kGR&x-p2FB|<jnd%
z*qKi6{Dbuyj_gb?y(%E=<^z4XgVAK$ck;g=7e!-qKHIl1%9ojvQwxKG3sXt@ZV)bt
z<z+3Yo<wGdOo|sx#-@0CvtSZ0h`^-1@LR5j<0&UEBkjbgr$a!T`8?sI_sOli@O~9R
zV?^nOe1lS{x9}bp=gcg>RUZa{>cdu|+>na7$gTG!!sYYQ`+4Cu_~A5IYdB5pq?`V#
z=B%QSC2VPKhfWZDJz-5F5@IO-sg_ADwMxn(lBKS{aGC!qcazE!ln(m&WQI@Px`tnx
z3or1G@h199Svg1kF+WD0C(n=47iNi`F8r8(h}Sc_S6C0P8Vh*lsCIC4y`dEE;nFL|
z3cr(o-1@zPx!l3;Z7sg9e{8<LfBv!cLyyf549q_^l)h)QwRQBKbjKWhpWE26_tZUi
zKQrIiIseSv_ng|>;fc?l*g5l^*?4^RJ2N{^%*MYG-gxiYHTMojBE$EtS$prsFzBV&
zzcPw%r#0=f>VrP3uRqD_qDvC@=29fX8>36Qqzo4<^m-%kaW8s}b<Ek0v9WI?M+I^;
z!|{W+UdDEaTag3WW;IXHN7QUfmE4v5Gg@W^7tt{c|AK!Ex&sQ)3V@`a!HV<V{C*+7
zpS7`=gF<9^(nQOqa33y7#k|dA7ult@@&*20j2d79pr5q!_cCB`A-VN3Kd7~{m<LeR
zTxC8|%=o{Ty2!3#c4f&zp*9zO0a{=!B~}0>_{P9}c<UX81+;ZJ4~5Ed=}9r80*rph
z6>~S|pUFQ%F*aEEgnI$9&TV5b80R`7OK)?QrQaC2!%a(%$35JTmLCk*h`p+p;v?;Y
zoB%mR&xVfjQ}vXAT|MFhl=|9krCNdE83lIti=7c;M3!9<z2Kkw`ar&%0<TTg;Gj@h
z`eW3Qx%Xcm7B+o1W6nI0+x%yz5Dgo?(;vXf{wzIpc9wusFIY~WtBBUhN>nd|A9(z!
zk?P%lb2e=o{eG`G`|Wji{`iN_^f|}g{Ny2uy_UiUh@bQlwMbHRHQ@gkOn5P|*oBl?
z(lcl)R)j}_iQxe$sCV!cE?2ZgG9h4=FqCaxV+(j1`pbDPYPPv--tK`0Pp4CqLypdg
z>ij@!kB4Gs1N84dWZ1-d<>VneGVLHcNOk_NKlzi;>C<*0w`o&OShH!95dkE}^XK#D
zT}Pikf9%-#=V?nHgg5M)XsH064xNSm!9Lj*Cm&tzTcq+GeuYihOV}^3!yZQD*DcU8
z-$I!mX=Qpj{kKS&VkRFgX5lWOmZ1<i<W~1^T(#~x_jicG{e9hOp5Apo!BSpB%A)Rd
zmhvgr1uL5mkfPm7Ok^&H)0=mZQoND)3YUdX_d7^ockKes+gyg;6^s;iOE6kC!wu_B
zavxJZMSC-&ctYIpbI&2~Ft-EeZwu(d?jhRB1;CF0zR2T}2YjF8x^(ZL1tPzLelPsT
z{LR9@7B1lXw^=V<;&L4BJw{z~^nNFlco%W#E<?J~^ToT4-$ET%P=}r`-g5l6=ofAQ
zMhd(C7o~1-0mMXj8z~1=I8di&IoyPd6zvXV66Yr1NpKP=^IBb#g^2EBjJKZuBQ511
zZb|<Xqo(J-MN=?8Qjn`<_?cHg?)71f?$oV?CG%anIo$)gZ|EMQTzPp97he9HSpEnJ
zxwOmkt@!)}=_`^~z+RDBqJ4-yD{2%;*krYu%vS3m`d(>$slsZlsI=yPq9v2r3Q0nO
zB|l4lp>EtK=}xnvIzO&vAzRfPYLOBI3j+wiCX1zt{kbKJxvI)suf2^S7#IH0jjH-S
zZ>_Ra;m@kRd+)chf<9tJs-?=i)oR8kYaKxWq?jc){YoD?69S-`bD$bZZ#Z*(a=*Nn
z>pCr+VLSlTa-JV8{&sTSHOIZWU^_y8%W*l~N1#5f+_>dw8<&%g!mtC<7<Y|`{D$Ih
z2TV^$+%?O*jNb~s;j+4$bPllk64=uFIq8@(W!oljS<CSg=0ys@$Xy|3erRPbm-$g;
zhh<veu2}Z(H_uX7?_dTrp^em{thg7XyCH2aXy&fCy-vlU_{(LztHHy*)Yj845iVC3
zsq1dwYCD4Xkcn_gM+gu<=3XZmzK`xMOAx6<s6iCPH*4zUTAMRe;V`s^WuL6rok5dB
zpW<Fe;G*Ur*W6QlM=u0!2fX|i7#=W}1>AMb?ZAc^(Mq{@h=KdG_=_UGCvxvFuW_vm
zc+YM&M?=Ud;TCX_|B8|J`JXW#70gF!c><$t2(C;*#FAp>=GzecQ0AoOV6Zb}l*=2}
zab2ysI-#~R6zZ%M>T)=oBDz}cDhcs}%wkT1z{FfL_jt68mXE~aJ(aQ{(#u^9b-IOc
zPfr-ZQ$n=t6gL6xbdv5#RC@<iw{l2}-o{O=h|P8Y))*If`S!fWig~Y>^1=pyn}k>X
z(~xSQ6{yCZ8aT&{OO!rEWSdF0J<VRZN!e;ws_g13cuIh~P6XcZ#ig?=OJ84A8lKHu
zpN>YgqkRgqMJ-KtI@7{PG$2MYT%W_<>afGKU-7M_I2c8ggqQiL+w+eX^S`nxKL;P!
z09KQ?kzcj;De))Rv8hKMkn<1vTGNfb)>O2%vCfT$3xtD>{h<(UA&l3{o;H6CTr(hh
zpza%3Pbi06H3AHly7fP*G_{9o8{30&BrZqX+$+IgC>aO^+Z`b#6|AkP1)L_VL@97=
zX0=1-y%SGXI^Zzi;j*Ta(vx^-jY-@LkmILU=Ny#w!RBipZVfO!Dm{#c;zh(-W~OTy
z#bX+qRi}Q2PU}adV_XLFdeL$mxxAR!fzr%oxsK3jy=Z=vyMlQ=XMqe^c$@2h=7Vx2
z4H|8q(&y>egNN%lYd&wlgZ35vCp=hxj`eg^&gh!j%mF;y<>Th340zDK!Y?s%1a;={
zxT}!vXZ3pZUMR7=#@M(no=948hn}@D6zmFfU39*bW)E6kfq7%s=FN)oKzg92Jkr<L
z6q7hNACBWXr>n473xzrqI(JYq$9Z(;;kynrX;wm1{!3}mKIW>bo05irw~W{Gu(anq
zb@o7y-BH!x;v{o*HOdd6{0mxns%2s(J|!|5T`ntCRX1`TT9lCLN}EI>q35UI@sllJ
z<%beiI{+nB`^xrJDgKX!m0_sEN#UEw6E5bV2c&-e*Zd00_0a`nq9Z&2t=->)-$G8W
zW@m%X*!Pt^A#<5M$|LmmQTQEP=MK|&7MMw}Pztk|B#QSqmoMfeS7BPXd;>47`w^V#
z2!)qvIbNjew-Z4Ss0PU!M$`hKC0QRR==i9&qnop}MO`pSA%(?4M%P|yFSu($f4FSO
zuGojlE-QQXKzB+C$Iz$#!iiG9(Wf5#ejfQg+M_6YXr9NBryFoE`-`}teebCnDjTX&
z*ek`6iUH)FMDBy2Hsns|4+7R%#2bOM_0t0MbA`hkB%Z?Tt#^>JzmS7<$s$trA>{^A
z9x3Q_9fgZXIZ)Vf>uuJH2y`B=(w-M3Y87P*TsB)@Z%oyXzv<$9HBKAv($~t3t;I5!
znUI%DWwfy6YN-w->bIB5O$?UHb`(VYi;%$(kq2wZA3@$Ch0~D00+7H!m#U^bMFZtA
z)g5*y9)t~SuBmVCT#gx-YPEXSm*NHff0r*xsK6!<Y_5sgJo%fKE}>=H3$kuk;hZ{h
z7!TM9{HgN3B0DcQ-#d2fzyaEuJ%xHig}4lC9s+*fL&}|nfbPM<%ShQ<m|++n0G!>0
z7m#vT8<iaL94kDFlsPSBzA%mG7Kf0syRhdLv<QV`)KicQP`QHc^D)EqY{Hl1ii2M$
zS6u!au>ue;g2GdUzhV>)2Q<p|(<!P>8xmR*^#K8Np3gJdwoy9oqNB4NH}UK$oGs!Y
z0Sx^q!+@;Z01A##?x*HCr*c0^k+7`rQ%wEm3(|!fCr&6hNFs$y!K*ufNHBhtV(6NU
z<92oF1`E_yA-$h|LTAs(=I)^E<xEYm_lEJaAUGtYp+XUbXidXA+;FzmTkj4uRC*+?
z+GFxMQ(1ehv4b8|=o%3z>u<TAscR#(;lm;T5wF|Q)8K08VXs`;mPi!;=s0Rp9H?@R
zN<2jw4Bziz5|GCI@EsddI`g=g?qet;sI0(NRK^KcNej@HI%T%zKhIu|NZUNCrG}{C
zq6wI}jyb9nE>USpodN0uP}P2%#U&bL(I}Pa;U9Jhai%?CDQa>M-UUrr{u1<FUT|g1
zT>@?gbUIZ<aQ=#M*Sp_*@bb8M^M5(;d%x!5wrnn!wPmtdge`juzN}e(9Mtw_n2S%K
zKSsztAMlO%RLS~-w(CoB&$0w`r0O2q)s=G0E7mE;U$2s7a9#kJ>lUy2Z+`)9!hj!J
z0cX;@PvTa|M6;Gjht{qeh!pW};F-b-tbjE*>=;^&=P%zQ?FB5_u21-LzYEsNb`6X>
zV9&g=e_x)n-V0b9cC7*Ev}n5;>5BT<@edbg?JC)Qr3{Jl19xq;!)0)Zp@90iMvu>{
zTR&rQSY(8rkK^54!_~kck&PEI^0?LZi|LR0Yp%r0MJnH~l3I__b2C^fL2~tAkNi7e
zt(0G1p|Dor<v|q|=!jS_UV2b7^_jrfP#Ns=XlY^6vQ1bpE$m-0cHFDemeEmZYWGT%
z7u)FNPqH>LUyRSew^rB6c2132Mud42tn*g_oE<mka+Wd5yFP^sx($0Ey~ZurUXaRp
zqG>^)4cu<s4_Q>2Lc7co!iiwblOa9M0$-mg6Ef{nXoXXhny*;KP>m=}U^mJYE?~!b
zgD%)B>!BQ?SkImrd8$~?UfVue=C_D+^a=mf)nzEP7wZ|h!#P^4XRP{5#r~u~7kb#-
zQS58|Dat|6*%vFEHn@DeVMqvdiDF!<S#}s4QZw%&bpfAG>*)}G1kk9YzX}?RlHt!S
zip93vCA$24nLi-7n_Oi=N^6$n5N%S84f~c##pR{CHimHtnn*qK$kSk^u?J);9AjY)
z?Zl(l)L~C!$Z54=n)rNm4MC?>!YrxN+MKlGgqw4=+U+g}-q30r#wUrp>hx4^SZwv@
zuc5`(kI404)pn=B!CQT9d~sLXU3!-w`LvE?G5KnpoW);L`hdQ$eK5GDmHBhrz7wWH
z_1WF94=nWd9q}T#C~%|giqAl*VmnZEXRYmvDYV=7#&wj?R_%}XQ?^-ZS?vF*Wmd{K
zZ`-SXgR;(2%g+5@w@gnN=c<<7OBv^?mSHpb8SO#1B(mca^RviH2uegSY}Geq4T3j%
zdt+x^q6_3J6K@cA4whPd7OjT3UaYHxPdX`>Z9T~NcFZ<{oP{#KzdY0d;be7B#$6z4
zS2aBQYXd&IBQE?4c6AQWbd}~G#WW&XJ)ck7^Q{RApedQ`gDNQ0*XD^*x;8jPuS(+8
zAaNhp<!f~aN;0Vkj#l5JpP_U&c7r{j^eSfUx>}F&`2_z&Bda$G?TS%`K$$2KzN<`H
zCVVF){Hxwpr%>0{Rwp=Hy+=x9U;2Q4Q|@WPD!7V2&<<0LP-zk$RHiMHf*6U>9yheK
zBn`4LhuJ$iX2~VxkR-SQ0hgeppc#jJI>Numy^K5Bdvxn{cj$KN?k?&66YX#+VSL|V
zw<oj@HW(4xRVfm`hT7X<%F4X+@JTg7s76-GT<D%6h^$o7q~EQoKMeiR9|Y{HYd7tm
z85^6~ziI9Etsjq1FMsXb9QZgelF1EEZ`@v!x@&qk*O02&PX2*@ZI2Fa*f1Dvui3tF
zI{)FvAHO)B-FnB(JGN%W5AE*j+kL3?wR^6&uMdHX<uC6V+}Kms73AWBQ?tQNZ_ma-
zBzQZ6vr8ZB`ZC<|dp629>6{A{3jC{x*230|GJ<1D;<HoB8SYH}D2}2%h(Tn^pCgDM
z@_@W_%#ByJo`duAizruyGiERYA5NWoR(e85%2pUL!D{(^;^HQjE^(oyxAOl&cG=FH
zDgKcmfn=8s%G|d6TR(N2JLfomp1q<~uEOiQ0s0OqE#M@{&rVzY6h15i{KT2~=uHGS
z6UagC&HS&3?gE#;CgiVi7h1?+k?hMK6Z4BQIV_M^{xuwyP=C`GxJ%GX(fxdw5ItFN
wkS5aP$lo9@xaj>iE+Rl8hrN>yRv5q3g(z1CP6E15m}E|^8Go@NJxtU84`8`lZvX%Q

literal 0
HcmV?d00001

diff --git a/web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkhdr.ttf b/web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkhdr.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..a9a32e4273c115b4888f1deffa81e1d514a488ed
GIT binary patch
literal 97500
zcmcG12Ygh;_WzX4CcB$PLIMfNWs?v(VYBJ<bb1Rlv{WDviXl`RDt16ctPcUPcT@yL
zP*lW@f~bgqfQSmH*c-C{@0pnm2@l`%{oecU{e174J9o;NGiT;bU&a|@A#5>|Y-n*o
zVbOgX?rX*ve-`+#c<7Llo9_L%Ib#={W-PUNammQMXI^>$@8VlB)?)pTlCIv;uUA&U
z?HGhoRym`5_U>J!;}{zm%vif`rqnK+e4^m8O2!@!XKd%2Q>)9XT0Pxq2i&{iK65H8
zT=RnG!i?})o2fJE7Yu*@!mGg0A;!Y8YiCuKe?R918)No9j0LWqQNCcdJjVWj+x>uh
zX8DZjv24yQjL91r6YFQsnp1x#dteb`>96B;K115%PIf&DX0<Gko*MmZNHM+Nd*)ll
zg8H1<^5?doIQb=e+4tUASMW`~c*|j@UkLkbQdp0l7>67D_D)!fbTD>ca@Wi=Th4p|
zzfUoNFa_D-C;2YknFWBa>%<t}cWeMrR=_7RFL%S%Ws}k-9m0l(`Q#o@zubbnA&AxO
z^NDYKcH)pXb2EN3z2t|)N)Wf^olR37f)Qt!ER&alx4Y!sxZfx5!~FsI0PYXThjD*Y
zK8pL}@^ReP%k{WF1%A2QAUEK?QEtTjS@|sPo8@NQx5zEHzaU=#CxZ0=GGH3O2I4*l
zmtcc&aW<39!hJR_!4}~X>_S|eU5AT9^4G)W8MX=Lt++UQ0heGO;Nt8UF3wKk;_Pc&
zf^#ky=P^7M_g1_WY~pwv%<XtPn0xS^F!$oUU@qi^xcB9KaUTus6TFm{;%zxEhj|L0
z0`rypYTTFcWw<Zr%VEEUufhF(em`tBad5@Aa-@*I$X|s0F1`om4@Dy5B1t4MA=(PW
zE82_Bu-Py6<NlfWjM?NQISJA!lk1pNvX)BLQps8>SxY5rsbnpctfi8*RI-*z)>6q@
zDp^Y<Ypnx8Y%=Aq&4JwA!Iu~_XC0A3Z7*0bA8gE$4TRLRy^UqFH;p-fRW*cTXI_?W
z>_cH<Y$~hAHJf!~U2)A}m8_1{;JF^=6rctrCIxw0$EM)@5LSeoFTwL%*i^D=n9Gs(
zbJ$Qk&thHhwgxUK)P6uYeAmF;D7dUsq0NG8H%mpB9+m@L>JGQF;Ib0;nQUIeyA-$~
z7v0$mgfboe$<<`g1%MmrNP+JZmWg`?++{Z5%H6=1+i>P?#F@JZZ;g4$Wd$q`sqEe)
zw11t(?u>j5fxp5g;Wn1izvky5l^%~uu^Td^)X`HmOu5LtS*${(xr8l*4C`T@0ZOTu
zspM9N{GuExSMRFuru{kjIv+L5d`PRjA+!|ba|ZIX1M3VQ^N~;W@a1O15&j&Y4!Kbc
z_ip4l<xM?IgAu|E*t*><8%xL?gRq&>pc1we<@;0i8xQBjD1|fm^(bc>`BC8zeMFhK
zPrM^Tq+1S@HFB+dTb{JpY~5}3wsp3B0g(aS11=9(AMkv@j)22<X)m_Vv9Gg#64*R2
zBXCaOy1<=*CxViLh6Y_4bZgMMpvQwY2ki*j9dt10c+k%d;RtoaI@&tCj$V%bj#9^D
zN1fvm$90Z79ebSN&NydZ=Llz+^KR#3&gY!3I(In_IKOiK<l?RnSBxv!)y0+LDs&BV
zO>ot?=DIF(Epy%By3h5bYpd%G*9We{uJ3}|29FJ{4qg^~NAP{YPX=!dek1sU;KRXR
z2mcl_Fl0<fRmkj+e}vp0@?^-Ckk>+Xha3p`GUSJlGog;quA$vR3qyy6P6(|Dog2D1
z^p4Q`LZ1xX8v1tV-q4@IcvwhSOjvSQYFN*(eqkfS%EM-aEeyLd?5420!X65HChVoK
zcfvjn`#kKsus_2c;ZflU;i=(0!!Hlt)r>Xk+iXO$vSzi-7BpMZ?EPk+HapSmmk1dV
z7SSrAT|`zye#DT7aS>A@=0sc?aec&X5g$Yxj`%v_x5$9VW|8rcJtF%?j)*Latc_d{
zxg_$&$W@UKMsA4Q7WsDM-pHeory@@`@7}z)c}eq0&8Ih?-~74euQuP+{6O=sn*S8V
zqe7x$qLQOhqk2a5iy9eK9yKFsVbqmTH$}Y=bvW9JE{R?keP#4b(RW2Z6#Y!}OVRH{
ze;oaJ^moyJws5qFYLU>QON*W@`n4F@qP)e778kd8vt?Y%_AOVmT;1~FmS4C0EhZqQ
zSxkIPhnS3*+?dN_mdD%~bAQZNF+auf*pS$m*yPyM*q*WdVn@c7$Iggd7<*;xO|f^y
zJ{J3XtA4FUwp!Kd!B!huZEN**tG#h)alPXP#Ep)tjGGmAVcgYmFT}kOw<qq?xZ`m@
z#j|)<d~|$5eCPPA_`LWb@ul&T<LlxtiN7QM-uQRpKZ!pU|6RP#a#}f7p*75!VAWW2
zt;?)s)*aS;)|1v&>kaDz>#+5;^;_$J*3DYSx9-q7qjhfUL9NHOu5Nun>&sd%YyGA>
z%stcnq<gFT4fhA`!|tyW(h_<n3`iKAP?0b*VNt@B2`dxUBs`L^DdClbcN0EI_#)wl
z#6F1&5|<?2n7AtO!Nd)T+Y*0GvL%Hl#U-^*N>A#OG%#sQQdQFIq>GZSNm`k-HtEr%
zXOn(v!`p<kiD{GECbdm{o9ElS*5>^-pSC&C=9grd9G2WFxm|Kva_{5;$)l4ilV>Gg
zn0$5e&B=$`wrV@3?Yy>^x82?@xZQ|$>)M@cAJ=|H`wi`ncS!G0+u^;Aj*g={-qLYT
zr>IUnJFV=rs?*NSuFg4~=XKuRd4K0GI-lv{?$W7CR+lMVuJ7_{mk&~6Q_52|rTo}6
zt801J<y}AaH1`bh+~N7e^Ji-7)Ul~Ir9P3mC-sbXl=n*Si{5Y2iqo!0dok_D^oaDq
z=@+Hnnf_LWBco@={EWLYUd{L^vt8z(%o&**Gk?#rXGLU<%i5OpOLj(fY4+^wM{+`P
zigG69T$}S|&bQr?yVZ2NqTBxN3EfM(&**+z_ch%g=>A0aP2G2O|G4|%?!WYi?vdCd
zrAMzG6M9_K<LMqJdi>EduxFc|xjhH<9NV*^=ggjqd#>oYy63|^H}%}!b63xUJx}!f
zwHNE<=#|*3Yp?8HBYMs5wY1loUQhM<y?3A9Lwb+zJ+1d8y;t?#*!y6gUVSF?sp&Jf
z&t-j<^|_<Z2Yo*8^HXj>Zd7hcZgK9I+?w2lx!2}?o|l!kB=70`;QSH!D+@${x1f7L
zLBXJcQ3aC<rWRaKu&CgQf~5tw6s#_IpkRH$a|JIKyj8HL;6TB#f^Q3cMPtTU7+Kh^
zFs-mxVR7Nm!b=NpE_|-=`=Vw=`9&8Ott>iF+_E^exPS4);tPwH6fY~jwRlbOgT+r4
zZ!UhN`0e5kiVqflQGBZSH#CPFeS7tt+xPCid;10V%jmbT-#z_a>UXNYvwx@l)%}<C
zf3E+j0TBZR3|KH=?SPE~_76BcFnM72f#n112VOSt{(*-EH6K(m=+Z$u2D=6q51u!8
z^Wa~Hc!w+<vTJDU&|yPwANuLAcEhTMZ5sCT@Q%aB55H>oy5W0<e>VKY@E=NSCE+Cr
zCEk+!k`X1<CG$$IF1fwrp_0udZ<XvX`MTuHh_Dgv5ve1JMvNXYeZ+zhH;vdjV#kPG
zBfc1MdSuMVjFCe|R*zgV^3jo-M(!B-`>27V7LIyx)Q_XXMyHOh9evH{e~kWYOy@BL
zW5$n}Gv@j+w~u*n%r9fZ#=6I5kL@?MVr>1`Wn<TjeQxZoQb%d0(z4RaN^dM(Rr*Nj
z)1_NVUoG8P`cdhj(yvN?E<H2OJ}z`z^tjgJ+K)>e*KJ(>xPjwFj+;1c%J{_bp7FiL
z4;)`Qe#ZF4;~yIT-uMIKkB|R;{O=Q5O~{!rWJ2|Xt0vqxVcUdHCi02N6T3|uGO=Rf
z+=<ssTr=^-iTfv>o)kAJWm2C>LnqZvx@ywxlOCS*(xjb}KALoB(pP1&%w5*LtY2A8
z*}SrA%5EyVv+SO-N6VfmJ6QH>xwAaJe0X_nd42gs<x9#RE`O{1SoyaVEh};>rd8Zr
zv8UqC$~KiHm5VFytlUt!v+~QTu&V5;nyOV*+pE5+ZdRRHU0c1jdjI6u$$7Y5pL}#m
z<dkkx2Ay+_ol=c{Mj2WK=ne5Neea3xteuEs-9#>H$G-wz!*g#uPhjoXXLv?mKr{z^
z7WR(<uou%<PZ4>R@~>Gq|Bh9lFEfn4%SyySHjTgK+s~h5Bl&OeAI3V1P}ZJ5&N_;4
z)|r2Vb}QNl!odRgpWtOb!FLT>-0j(y%p=L|8Q@p=3-<j<{?X2F&#(0Pcqf)G>@1Jp
z10Eki-|1T4E`E>iDSox@XG+iiPsmW;AwR@$7O7<CmmkTnF(6NpX#+}Fx{@!+_<sd|
zUQvGiD^Q;KaWUG+$k)FC!9MeSq;XacNEiJ2Kss@L_)aTbA${@dj6eSKQPQXX9$dEl
z8{v@N{tGBwCVf5+L<Q0dJvS%<9d67yL`nbuE0n?i`QQ&1<%-IdAF6y&8T%`s>{0n^
z3;{h9ts#RN)=LaUdbYq!<@5h1{$y>10m^iHstf$}0o4hO0sGEWM>HVB)E87|{I6i@
z9;$!-3REwh3tdn7>nj#_&NJ0x7=`kEpy79?>ouy|{Gd9HeZo9E8uUxwJ9rMz@IAx6
zW$mf{^F!5xR2TjQ#0GW&)sz1NFqwgHe)|iUIH*2Wb#YJM8=8VQ8iP^rJ*nzws;AEb
z5e&DezYRKowl?NKLt9ea{$HUP{GShv!^L-lz8!w3?+1ND{tEPMIR_$ud6X=WFY4R%
z9MX1>6+>^kDE)Tg`6(92*ZU5FpUwp6Z>;+My@&jbRL=>biiPkMEE-^ZKl<ONe9MJP
z>m@%1H}}9VeeY0iRM`nceBWVYs*CS;rAOcRF68}L3+Pf5`r6?l7VefR{pkrEB0zV1
zOG$sgGrqyTulYXKm-I!f0&YgxoQimQ`aV7j)PLRKcALSK_zvLvOuQkVT8RjJgPSvl
z3PZ9Y$n6WrQV`{rLa$dqUTc6AzUTQq-?tcT8wB*nNLzCtkA3AkhB2v@d^g<whIYUQ
zz+u)E<*lpu8NfG!f6Cgba)h)pq)~JLPdix`z~Vc7zW{&090_nB9heOy0+IX(-1TBJ
z_^WWY#rHkzT7#YjP3O<C$$objag1gk_&)VhjChV?f3l813yiUq^CiAN@NNko$CiN3
z1ulSjE^q<-o#Nwsr`Rdv$0-(tbhihhcx%=M;kUuCU7LWltW8j#v(NB9j7OjzJL>z4
zA7%YTnD00bhWtW(@9<C-2D%;3NuaMF>`m-rR*AUADtZaKp07k2S3+0b27f2n06rG)
ze?Xh+3@gX?v!j>~p05N#k^WFN7ND^9@j(cC5W)^+)xdN>#U*Y*-4F1^C<_DF5VTc1
zViNO;O6HYeEQP<vT48*#5@V@Pf{q4C_;`e&=}geu@LUOuZw$7ZEdqM-Qr~y*+Z*(A
z;4mNW`@zuD@SBY1?||dL*M7iX5Zmp03-6o3?<CLwfFt}!L*qaT@!Sk>!hL(VKf!MI
zodyo#T|WHX1eyh;!A+r|gF)xxIUnc&f2BY?yPc%~;jk;^qX426Y#dJjtpx1_cTcei
z$cH?HJC5B+0KaLV|G+mt6mG@><hP9VW;<aH#His;HWgt_M>vxq$66kVyhuP<cVVnQ
z3S((^_>QwXSYP(AZxigxcsIzl2zl0q)j)qjfEGX?Ksrt4VbJ+EKyv}I4+Yx8j`TW7
zn^if8fSKG31QHN;8Zd~z=R3m&`?~r8{miqCMqRm&Ef8O`@qkzS!p2J{%L1KD6iAaX
zEKPjF#z~>xPd4UM_53XxN6!f73JMSLc?^`9?IWI*UCKGs1D;BaT`DNSgF2-<+BPvl
z;2ZM|@;lM@l?VclF}`EsLf`NFL)Kc<L7r2YOS)k{oJ9ex{ZwAZ`T(7QOk?g3N+5fJ
z|C!u$7QeD0@jK8Ab;O&j6Y7nAD5HyzZ;L>0Bs218G%$vrW<T@Oyanh>z(>gaGWHW@
zKXzigbSFl&$Dyt}&7J}d(tF@-;5Xn;`0D~nVbqJkYOK9AS_<ufK0rBR&;>^GLcULc
zZ(yb$=F`+K0d_yZ6bp<3W&wdfJTL+n3?u@1KwE&uU+LEh{`LR|0cx3$A97QS=T!ja
z)KvUKVO|1U1}q1zHrNb09k|?p-V^Qu$Uo-%d=r5xU^LJN=nY^7N`>(Z=p=yLWFs!5
zw;_GR!*9TD#?EX3_Tjw^z&v9Eg;ANUv()zs%+2BN5#V!xo}&zn03|uaoI@cu<qq=n
z{fhStvvnCjTcEjgvlc)F^pBxbs?f;|y8>9CO!Qsu%D=>zHpjD*-Oe$?R8TZ<1Z#uN
z`b-w8xMV&bv%`f%J_fQdq+|@U=MEj(mkrGw(bvuT_9Jtj!MUT{EPHUtAUE@r3@C9c
zsrcY81l$qDEUBU{L!E|V=118FDT+Bjd>3tqF_eX~h|0<tv)MX*ubMe)23w`?lk3VW
z*$REHt(j8JmYVyl%35|6=2C0fVs&q9UZiXm&73=<j@9e?Y!Eh6-x0Io7I&JB;!3YL
zI3Y8*!#xytiMK9F4W5w(NQGt%C3p^C5sqi=+wD~W+hm=%L{x~uBAx%p-^AQNHg~gc
z*dEMsw1s;eqF`+>m-&WxNIWba5s!+;#N*-#v0gkWo)S-s4dNNG5g}uikbH<uV!Jls
z9t7J=v@=Ti9??;B5}jqatd!Mq3T7Op%NcT(yg<&8bLD)wP+ll6mdoXha*ezfK3gKr
zWXvL-;y++cuR>PI$#SZkCTrzPIa}7rdO1%nkc;F+a+$nAu9o*G9iSL_z!4QQXExE1
z33<cWHwcqlNN8{<3leR?T~~oQMV5d$MadGBhH+4T%1NqDN|{IzS&#<FShDfxH3WkS
zW+5bw6q1~%?2yZc#8c{-%QxVLqnE-NN=73WBq7os0k<1rID@)7RJm>0#4X8_@{B{K
z+e`>5h2Y~hdWSxwpHqQ3wb1kC5ORldsgcV>xZEV370-#y;(4(}Y!xqv7sWR5ir6k*
z5-%f0snaX+L_TwhO0<!K8~KMsL<d3h#Dc|%*BahHTAZ{-%@`|wksIKZQW1cfdM0L(
zd+@DFiZ*r?ICiUalWZtwIsy!(iKNz865)8}$YDx*JZp{oNrHB^L*9ibw-I<V(8!0}
zM*JNuQ$D+q>n1+`hOQyiq}Qn3!A(5A3axRq0#^yh>m*$9iaQH>@eWe>E|=`tvpR_O
zN-VT`H-DW!%$H(LZYVF}?a_Pq73J<dwu3#$R<o6usb7pazgm>TG5Ed|U``nN%s+$V
zKT{^mjmrvU!W_CWVaDB<FdJ`7n6K9+n#(sP%=Q}-Rst9k)(RLC))BxY(K1IFL2jW0
zq2DY~$|@ACK#3w=Fl#RtG`L%)+$}fmi2B`?H*q&wxf^5L5hZt+JBRLI^?+PPb-Sdw
zb{#)fIUxRC#ywGgxL5_yDE=7bu9a~|l-!w6*hzW|38+*k+W4(XBi2CZw?rGiy-xYP
z-n=DBZy^D+O&W2^W-52HjXR=^Lm8mn4l-|v>QG{lc02UR3B8Yo{<Mb1B%(C5Luu%W
zdIqHiy0Dd<RApy0R!(e1E6JvGmP*$Oq;V?iMe;-6wJm(dQtc)mLVT;Sz63JDS`&e~
zlWZnq4GMA>YfywNLz!%Y8muKsK(O2bo7GrlB2c%Ic{2K9<nmeEo4Uk`8n_`Hs>M1L
za``y!6<EJQF7f?EU0o|@t5PmmAH+a)C6#fi8?b@}W-8-k(;R))8yVKZC_Abp8ftyz
zLa5Ymc8ziohC5fXr}~2GVjJ&)7MZu97SXi^g+`%sqtTV@A)d+?nmEsOQwx_iR>tn<
zDSV!B(;s$JtLSiI|IHWZ5_ze-TwbBRM7LwL&uYx3-wodb(Hkj23vnF27?aUTy_j9X
zu4T*F4QSck%x*y){tvd6tz-AFM<JJ2*mjiuH`!aLHFlwA^gh1AN7)JX3wpz6cnDA6
ziM#{v$kVaTravFR2l7#TJfFZP@=9LCC-Z517QcYk@rzKa+{9P%Tlt;*AN($UH($r^
z;rH_U_%nP9e}lh^mcN#MdZSbd79bbP%kX(yB9|g3Z<4p6jemz+h1zr-*3?8pPy3)o
z>jjbYL4D+4MQE#ss&z*ZYzQ05BC%Ql{Q))-{k3Q|5i1kou==DHIW-$KSx2<x7GWL5
zMYz&Yw_S-*@T-xp-LV>J8SBYzf+qJtJO56!kXNxah~aKrec8S25ybNtdy)-fPqPik
z?PuBZs1sjcFGH%Yu{Y3qe;Zd7dl$85HTw|b>QmU~xaP7i*m1=CHTxMc|BBUYOSlca
z`)he9#sF6E=DY=Z&$OcHA3UC0Y!!ENH(Sk<czd>ncSis6KAyq5vB$8wsenC=TDl+G
z%m?$4>;*msJ<c6`9QvfM^D?Y%dV^2pHS8@uozG<N@Y#Ge+r{hog={y!m|w>B@hdQz
z@hQKCU(XI>)zgjabG`y=$G+sZ@jKXYzKXA6Ut=BATJ{Zp0P{Vk&<@*(Jb#uy&wN-1
z^*Wbmo9*Nw$OF=AlzXv{PYYfbyejzC;2VRl3tkd@N$`T;y5QR2$-xtYM+FZKE(-1y
zoEe;gwGvivbZ~gEGuY-j<NDS0z3ZgwnCp;hpKFh6r|Wgs%dRc1jjr{shh6u&R=aL@
zt#B=MUFBNrTHu=Pn(8WZjd2Zk^>-DxdbzS)URP&VTbJ7v>uT-_bp^SE^R)A4=PBoL
z=TYZD=U(S-=iAO5&TY=k&JE7Toew(KIafJvb>8T_#(BB(BIi8kZ09s*m2;wVjB~hi
zptH!?$Jx!9?o4sEcP3(0NHo@lIGr}fX~&O_la8Z~{f-YEI~}h(UUqD8Y;>%5JnXpF
zvD$IFV})a><0`BtS%6g~wOCtHh7~3w9D^Nw9eIu(j!cKg(b3VyVL4hlA{@aEyMqP&
z9`s|-H$lg+I_1Nlok6b$y&SY9Xk*a&pofF*4O$&^d(euYr9oE(Ee=`~R39`mXlhVJ
z(D<NHSliM+s353UP<D_vsB=);Aa_t~Q1hVBpr9ZTcslUsz;6PN1s)9i5G!GJ1ilcs
zG4S!g`vcbo-Wj+uaCzW0ftLqf6gV$%cHp$Ys=$eXV*-Z<4h$>`>=W26Fg-9Ouzg@+
zU|e8yV0d6qAhZ8!KV|>Ye#E}dzQ?}P{<{5T`xg5~`+EDs_IvHC?YG-k*q7R`vM;tT
zve(;Z+Natp?BngD>_hGS?FIH;_H4V?-r3&P?zYF;BkaL;yPXC69`IwpHvwM;90}MT
z@L|Av0dEFu4|pNq*?^}49u2rZU~Ryi0V@NR2V50!Nx-~-nE{gn$^ym&3=bF>P!!N7
zpj$wCKuSRSfW&~ffarkmfS>?jJ8k>fcFK0#cGPyzw%4}X_O@+@ZJTYgZG-J`+k;py
zw90m??MB;mwk5VpYzu64wrREsTd8fhZJ@2l*2mV(mTpV2wYMeO;%w2jaGTR+lV{|w
z@_Ttw9+QXUKDkHkl&{N|>C3~CQOop)p3{oPC{?pWqh1-0@6<%BcS=HSvWTUj7P$m<
z5!EBPs7J0vpZa>#sr^;0T7r5+*A!c@a_R-tr}I%e?18%vQ7<e*y>Novg?ix(TZbB<
zCEK8Cfj3kw@Fr@3ju<)UjPcixQ1S<|FHq)3VeEm*yboo5B34AA%<}-$yOVh!N`4)8
zp|mgI(J0|dc{`NwyWoEfYTO<u&l`C@O7a$7f|C3mMzFAI6Ll-yuT^)n8(?0b?iIMF
z%gO3qr|#q?U6Px0d{gOOrS95g8O&Z~?^X6*N%md|d%l&-d=tfjJHo^rVd742Hz}7M
zvcY`swfG`<(61^pl-hOlOzl9TQ<W>?(Ie-nd%e2Xs=Izm+<6r59>t4C5-%Q#jdfK#
zc2()_s?yz+zA~^!yAgLvUsolA6!kVm*`z2pDauWXc}uBJkrZ+lgeGynR&fWa>?ouz
z%54|ryNhz$iNfQ{$jq-Mm$;Keu2vGcT1n(;yp^mYT1pgpM_H?$s^FSz(f>5G&QOvS
z*=yG%$Bv4Jjw<$!N=^t(*^_KKD%rq?GHYKXn+{4U9hBb=D%~9v=N**$4l1+`N{SsM
z`D(9RwpT9OE1Pyo673*~8oUQpcam>A<-47%gt@JXr>%P1mSW(0h!<XplnT*NQrK<i
zEo?|nO35$oNCECh0q!KTQsWEmVWt!$$(8C(TAifAPm<LzC#n=ADj6gyP7+nh5*6=>
z6ffM6JQ5|vo&bBv+&Tw%57^O@&H<v714JnYh*Ay^CBJSJms{zxTk+slvA9(%2vfPC
zd~hpH;7^&gUrI%5C7;&HZ)-VA*^tItDjZAsvXn1Nk}pf?WxVngPwsh~l2shN<uSNR
z7KfHF=?_ujo+xool(;9V-RV@unN$+h?sO{Ync|F7>5Ef5#wm{CB$Y&jqwbW-I91l-
zlsw>1*=WC%%2tZsRw{&6DwVC|LS;`n5-X>u`y6#AJ&ILsV&w(OOt~5>wM+EtSW9K!
zQss6_W#3Yg{Yhm$reZm!!aOD^%wy{9G4(cD*+eV(L}MJNoT0Y{O6_!_m4=c|M=Ktq
z<$PtHtL`(@UB4ynqE$T6ikE2kCL7`<N~JhT@e-x<FG?;~_LRp_D&*$sZF7~@=E_ZT
z<)*oLOX+T|!i+>{l0}-b28uV4%15N~9jSaoD!0v)%~oYr^)TC{c-*8?zDaSn32!9}
z$9NcV94=?5r)njYa2hEy&vOhVDUrQ)O)?EvJcO%w!<B>(nzARUgsT|gLz%TNl1iA8
zN|^E+ruYm~sR&c<!&GQtio-A!SEzCss$7ODn-C?55F-gtgc_p42vNR6l&fGBPq2C$
ztlqj5FHWRXu<Mi?r+VvDQgJH3PL%?u(k`ds$Z3303Y>~BhpKfP%CAGc4N@+Hl;0o~
zPLPT*NO2vcVhl1aDV#vqOJ+B+p9x;*Nz0xn$(|_5o+!zlDEYOkxa^8&yW+vFVzH}O
z5T<fNIbc_uz@IW}zmx+3N-_b;Z-DX}pj_IN*=Ee-%cf$qDUFoMmsD;Bt5^oBw*zpO
z=(o*4c$yOT^i13nCGLr8cRG~<snPCqD(P9f)2S3HeM0dl6h}f*=|ec`PN@_smxPiB
z{41MEb*EIS83Er;^wH1rlQiZpsn4%Q%-Uo9dq>s@;}~5qheD$tsqmME{$d8&gjraF
zpM!C*?wC95iT+_BdZ5MVA@)P7kM_U}!Z;cALx-WYNWJcn=qrv!PjM{zqtpYRfL`Pq
z=rKNyxdwqTxk|MC0=OM5xFGJ}PPE~I(aR3yVLY5S;}MuIyb*oGD75NYpp96CS)>@W
z|6<WrjH8w!=9%9@fAe+jW^by#c@l5KlX+XT|Jtj5dMC62yI@SAEB9dZ!OMQ-Y3RFW
z@JybCQT80(jd#cB#k=UczQcR6ofzZ#o%iN_crMRFi?IN`{35K{@5}p{-u@u8Lx-><
z7%v>ghodz)0zJ{m7z4mg8?;Q{NAGtRdxA~DSo=6LE-*>8Q!CW?Ks9>U>(O4FLOoTC
z6-?)~d<I4zXQ8)BqXu)(f}P9f@%ij1U%(ggMf^gHBwWld;g|Bo{4#zyzXGl2J?sPY
zWT#>m&sF?tw05uM*I`e=QjAJ1=Qr>hG46nVEyf;h!RW(n{C0ka8iQEHPVl?f^L#b+
zacMk)9n&Kc>?`zp??)T?K{gG09;TyxU&|lj4`ZbG5&kHDj6cqw;OqI5{3-r4-+=Lp
zjo2adEPsw~W^4KLXj5aS5XK~Dp|89R!#ywYm-#DvJAajPtPhyY>i7;ehrfpY^Bd?t
zzs29?@1Pfr@ek}O+RfkRd-w<ZL;expi&?^t`9A&$-_H;5gZxu|h#%%hFoICe=3&fr
zK0nGo=g0UL{7e27KaPIE34W4)&A;K_VkGxF{yqNzvnN0CpV?>p7yc{%jsMR7z+B@3
z{wF`feJCOveU^pnLW}@iB!rN{CIW<A1d1T+#Bd6i2o@n2?RZjziZBr_nu!PzDVmEY
z5iMGXmLf*PidG^{#0v{6$37QsksuN=Z*i??Ba&%96m~;(p!pScDSAbVMQ3)I=z<aa
zuEHZyg;%7Bbde!4MV81GIij2BE_#TbqL=6``iNW_;}->@kew7oY_lj9eMLXfAFC0*
z5Cg>^F&JYg--sb%s2C=OixM$Hj1;59XfZ~N6{TXF7%wJ>iDHr{6Xlpk!c2jv7L&yk
zF;&!vX=1vl6*I(4F-y!A7l=ABN7ReCVxE{U7Knvnk+@J?Bre7b)TLsvxJ+Cwt`JMa
zmEtOKwYWxHi@kZ*i=|?jST1f5H;S9Y3URYoDQ*$Bird8P;tp}A_=i{}?h>oT8nIT~
zE!K&9#J$+na=&;$Jjfg@661?e7>jDbTCy07B(}nA#d+qiSTh!eF?$OmO*V|hC1OO*
z$pY9$?2y}leRA8`tLQ_%$R5HtWjIzMJl!zo^$L2Fc{G!v=Gl5-{Awb`5hK_njQf4b
zLfGZ(Wz2G1^H1|Em}60MEw73l;x+L)yI#D3G2W%(P4Sj^8$DdRct`9M?~3=tF0os@
zFZPHJ#E0S|u~&R7_K8oh>+OIzC_WX3#9?s+yWftA&&4tEh4@l@C60>|;-vUmd?UUU
zr^I*Sd+~$#QT!x+7QcvJ#c$$w@rO7q{uF0~Pcq4+khJ45K-$qGUM&M<kaS3=bje`s
z3<{NDGF&#35i(LXmr*iWwva7ljEt47WSoqbmTWEEGC?NFB-utL%eI)a-O2*dC%;v;
zV@qUv*+F)con&X(MW)EE(j!x)SEk8ynISV}7TY4TWey9%sOL}YNA|PqCcDcXvZw4N
zd&@pDSLVrlSs)8#kt~*dC5<+I%TBRpWq;;Yvp_4++rJt8{~K62djKPa|G*gHZCFdP
zirt4<lr=P(C<kD7(;zum4v|CUFgaY7$Psd+93@A~F><UdmE+`iIYCau?!hwl9OjKG
zWF^|#)o4BEW29g&JB+!?sc0cglhd&ZXgO9?e8LW3o!5SLkR3wneFo+uXUW-UuhwBE
zvmSGq^Dvva0P~rPFr#@9<}_(^c(J@pjSw%9SIVp8)$$s&ny!=A%cU4IUXGcS8!_Ix
zLf$M_%3I{E@-}%pMqclf|B$QHX!06~@nnp`-XrhD&c^$(ukk_J)hHjquExi(r|}8w
zXnYd;8K1^(#%HjXaT9hjK8Jmb&tn(kR_tMXQErnjVRYpcxm~_0cgWW;*7AmYQ@({g
zU+-Y#<z4xn+$DF*_c0Fhf&5T@B=@py?4`im8ReCAvu4_JE9$D}RR_+US>s8~FCdy)
znCmgrYiPQmnTBQ?nrmpjp@o{}8UK04f1dH5ml>ElYs##d)zck@rc}99%${^lnkSWf
zds2&3Xr9zU<=f*;Pt&1#OlY1=SAJzpUFF;vlWVINIP<G!)t6URR?n=r7gUxbNyfF|
z&0~1;6ykN=tnzw$p>|bh1W>31;4Ewi#-zcdG0%jPXTr%dY0Nii%r{)+n>6NU1{Rt$
z8tPADYPLU(sfDRVlBp^*q&eMH+$c@OO_=eddcF4IMrreUl+--wSqM={$CH|q=IVPk
z1f2%2;mMn8>swJ?XYW^EQ(ILX*iWaN+#t`3wA*}>-u&Faewu%sGu}c!*I*;x)xT*R
zp42pxk~AZSv~>Hx^2)jO)%Jl69K%(fZ6MO5qiXPCqD(U)PBWrSH=<4V+6SwkG^a(`
z_Q8#UOwZ7vrJF>i8%ENz1Bd7Yh76fHcjlDxy16rI%jc@NJ*fps$x;jRO?Kv+I15ai
z1tu8<Ce#8GYJuX_lbUYaXLtjKOr2F{l&!#|pumJ$U|bcNP>m|1WND$Igc)^DEzHQY
z57z=4-jF)jn)otI{23;O3==~}p}j=;a+RE$BN-}kk2lqbH`6eYX_A&xXdlrirc4#G
zCsn_OHxpB)i78VDmztSrAF1_cq$xQgRmlk$SywZ2O329b$l9o8fyyb!K1*k0L5`t$
zItL4ltP3*(MxK>vp<%z!@Kb2`DKxSz@&t}-tf*ODlBs?4l)CbH)%MX^IHS)B$1%F9
zrn;_rPR$(qSmnkw_Uuc|NVY#{!%&eCJ~XdXh3717QZQ2sbNn(@K0K+}sx(1Oj8IW3
z%8j(j8&|X@qFkemxk^${52Mq$N>X@Mk^(i7%Jo;!rqJdY|9QrLp7EcT6<BU6Aw&I@
zkSD{hd8l+$XsBpSK4lw4(N#)np(o2#c~(Tu%7(Pts~YK#$MEJcym^Z3)%ta{NqM!d
zVXGVbYiZ}1#O0X)@=O4E{u;?&R88XYP2%#i0;^5p4D}~2HOHSg)UZZ`sU}B?GF(#{
zC1y$!W>B@I*{3v0ls8q^u$iicbxl3%Q}gaMyyO@S@#fj4QVm<9OGu4QIk|<}8?ok_
z^ycRU)-+aJZ;_vCuu<Te)-*2EohBt|Mh<Bi!PBSIRaeifEuUFcQ)#c&wMVUD-&Tu+
z>3Gvjfobq>;!iX3PBU^&H*!u-v(HpPY41fj_L&V5fkvB@HdMQYtMnY#%yK#hq;A&i
zsnvnAbjm|!ou@i5WyRmh@PB#yRdRtzpRO)a3w3n?s`v&6hTn{|fLUj&i2{?F0;4?z
z##Nz7m0!6F^Gwy7=a+VBVMdl6OZf1u(kZ6Lh7{wikynO^A;ZLwQDmQ^e7WYFn^hTF
z*}SR7Yo=i$GtFM#DCA5PBC1@KVpO>%hD;Mfrb$DNk}=$6+2?A-nrn*GTwV3fRaNiY
z^T^uNNBZ*x9W<X4{h`9MzcMv?T$mLw_pD3{4f}<LuR_CDq2a3t$ucF-P=5)`LVE<2
z@O)hf&(~s_e^yM6`3;ruLR|?jJo}PzA+=Cfp{a#MhP5K2Xwb(+Dm>?+CS@0uuu+^G
z<pYYM#p~6Ij{;=GoS_P$$D5%P5meddX6afJ&&q#pp0>xcQh89F4PNt2_GYMD^>}l%
zVtRA6u)SJg;9gh$UadHIR>B5VwLYlP68&NJc(s;*8ovB$k*U+;%`|*u8a{GNc$qp=
zz2*z<%{2VvsO&;`Mh^N*j%UBU;UmY-hoM<UK3OJxS%#l1Bfl(vIt|S<G|TXrW%$f8
zd}bN`vJ78YMlM-~uPnn)mf=T#e>~o76MwdeKikBgZQ{!|;p(p>+?(*TP59X+{A?qq
zY!i?Eyu-aoZ;nZCjz2$De5nPxa!3A}_>5k8_1D_t&DDIR>ZU)M(1yR9Y&m(-<N#n&
zjk;rAXi~j0)jQOuAU!vwT$ZPlJIn_lWr4EyW@h_MIR!8+s;--rLhFHp&{xui`uW<%
zSw9t3zp`^oo;A15m}=%3cXMhMC@be2^y+46V|C4xsrB07%o-CQl{IgnZh3>|IVaal
znOj#~RX%5`dgVz~nTj@*${bK7G%qS6{a$}vyy%1I=X8|`cvhJM_e$vAv{aP|p#Ena
zUYh<cd$S64cv*!yoI<Y>uD8&ugbJ!M0aWvos=w>rRIkTAH?=4=Ggp&5EwnjvXU|bW
zQw9<m8H~`#sD-9YBsArYgr?kSp(&#lnsTUwrcASI=g!eCXVlE}8>=svTVAVdLuZ%Q
z;j>&lxn4bnsmD4cedS%{>zuh2eimWSELNOlv7&)RGHDj!PO}JieimW$vj~TVMVJhW
zc<pDATpAWD<}_ikVop;Q;a#yv%iEO{m4R3!gOMT`wG_39SXAzaMdePjsEnFL<xsIm
zrbaB#V`CQR*)_Ymu4Y!14ytn2j2Y$1s5zqr^NKTNAkN5OI3uIxOq+-^<&HR0?lfo0
zs5w&(6=!5>#2Gy{=8T^GoRQh7IU}RJT;;aCLX%2Osx;9WW}mE|rf4!%lNwE?X);|C
ztx5J7`e~*nT8-_q^;4ZDS`+PB*X(n(<vdO1YogWKzED3cQiO`D$D42JJl#0;cy%KT
z)YQd=o?zuJBS-sHX)L!D&aIoJ0!YpAhE&d~oi%d?s;K(%x`npdn!0jb735~xXIIaG
zt$EC`Rn3|?ML*~si`S!vhCp@k_ULago=r8Phh4m$TvPqznQBFM61?8j4CkC$R8}dp
z{em>2erio!l>-`~40BX$srri!$GVb9)n9Tv>(Em57aPy&%K_?fASk68Q-f7atIcy<
zR1%FjSZR@YF!3m9!oRM(QuP-JT<X-MrlvWn=hUNDP+wi8ec;<uURO73{@mH-+3Qfx
zRkP-+F$FXt)Yl1(2hDqi?ml?45J!DoP5Bh#Geh_N(AY5U(DzgCt4ugXVi|hC3gKy9
zGgEc=nW_3YD^*vxnYuNB3S6hfqgzjSHeY$2Lmsal2m>`=Q$2tL%`#tO3?ykyGhbsp
z;)3|~S2@k&QQtn$luG3i4M$^>+F;`~Hr@uCG-H$2V3Tfa(i?0tj7>&^O{THQY_Q2P
zHdzfe*~TWj!6wJp<TTji8k^h(n>=Ha*I<)xZ1Njyii}N>-zL?hG_@h6sk%*(rgOoQ
zrU!38wKUW8s0^O9G|guf&$?}sW(E??XBC;J+cs(XGm2;3mPs>hn>4S|7T6m(cpK#4
zHFEGa$iZuP@ah~*^O_v=>bfG$t2H1k&BU3e>z1@M6K9(7uUi{XD3b==gut^&L%PZB
z^oHElL%*IhJ;n#BbucZ{$S*TBrCfFE(mZN#HH0+Im{Tenz40`91AS}sCasY<y^$+u
zQ=>Qejou(%%^MU7PpWyN%uU|-<D@rd<D{pYMt-1MjY3On^adJk-efk4N12<v@yA1N
z&c;Je{&<wRi64JF^yX|l#GBCz-PuO7P1lr0Z@g(<m3Q7$(_Ayd&t8wmGy^><ukoyF
zRF5amIcIixWwolORaNKF>QYo#R79%=YyeiQ$DcIjHh99?d^}6c)M1}Dqg`$+{&l)D
zCKlo5Hh??q%TW;6^QiV|Cc+Kv7fR9)*MYXt5MO~NYe@3jRzq|FZKr{`QN4Gx1H!3<
zxub@d0oqAJMuT?N5c#0w9}uHKQ#3>#XjcvF<YHLwz_7xB33}fR=niuMXb%k;2ij9Z
z((WT#iw{WJhl+il1kn$)kA}DwG#4lZ1TaoRRD+J!5Ys^?Xo$(66E!5sY?6j312vF?
zU@iwp#>CHs8e$6QMH*rn=*1dhD(EE|lH|SCfP>zxA^L)@)4(ohhB;UTaUAqs4e=%D
zeH!8f==~a^7W4rPF&p$j4M}o-NJCr>`mlz074#7eF%tAq4Veu3n1;%u$6*G<63{0!
z<QUNP8sZDkCpDxS^eNzJxL*dkK|>A(#U5OOY!8aPegts==q3$8@_trBQa(JVA(nz}
z)(|^DpVtthK(_!dAWRARqK4=Xx((P4WCD~<LQjDF6NsPJ3~1l->%f};@$i;G1?bzr
zPGB+ct^vv6Jp&);E`v3oyMYgZdx4KMWJ}P!1|)-zflmN(x8GnN=mCQtKo4q=YG8&{
zfv*NV1RTZ22OH?;8ra3pa8j)TCq1P60C*xO=?Zj*cLpV00XUVdlfXAHlN`R);KM;r
zX>dx@cN*Bo!Pxh}&v0K4`iq9d-e&A2QNT$LjQs}u0XGkTp4Q-xfc~k$DG$zQ;Is`a
zhtlA$!4Hfot=&OkP;h_>4J!9or=;NoMf#Nt27m?_fFEwxz=|iv0}W8tc#sCxK`~C@
z650S17J#);jO3`$7BpA`tELzaF-Qgt)xb(B#={KSfre{P{lS|VbOMdgV3nYe2C1Of
zH%_2k-Z+6l!wVX%fz?zDdvY|=K%qkf?0{ofd!<1#iPfNb2)lPQx`ILvlrA8@c)UR#
zsHK7RJPfP0H1a{+8rUPmc!EIzD0E2a(R@&nBcTu=*#T6~agqz6A3(ALu=<8^k_%xF
zfHF^@o$S1W!7$K{8dxX6ILV7p0zhAt&MpP*Vn8xa(ZCuJ#wncy$|LBs((9{0Nxp<q
zfMiOL0LhW?0g$eNbq$PX7>onW)WGTn#<L8@gJv5{0?pCDDl&#WQ5t2Sq`LstVKA&_
z)2IaPseu(43@h6-D8G7ZV23N?eGDo<b2YGfgK^3;!W1B118X`Mc428u2c`S~*jmsc
zgIS=(8rVb2u#;3{1}NndVGhvWK!6S~cpr4227NbF{!tz-1O{tR{f-rQ8drc0)u3++
zr+g(W0)}f)U9a-B1eEe<ga+FNI?~`q&`}!L0jTqp@|NU0MuWWsN_s#bc~Tw&RF`81
zn#OIQlxKiCS&+&kf#f++gX(%tc}chvDAT~INX98|2zLM#8dS&Q1Qw0EL8~<Ao4~6L
z)__jdz-b*i&nVyS2c~LJ-H+XI8YHV}8uUHjl$V4@fm#jvK5)u2!eaoHe}KLfobs6P
zI51m-z8m}kgC{`iG^oB;`AvDg6`*<np!%NAHFz16%0GZLNDS*AHFkh5(7@^>tp^L?
z=69GE8N3a8p$66c{33&$pciYXZ^I=p6W#$98?*+!!GMEOz5+PSMV%^--GQoY#n<8)
zp!Nc%JRn>RP&xtn2J-a=<c87%JrZtEiVvVRA}5{*!N9v3SiQ!u7gU3Elkyv&_7Q!n
z6exY~YtT2D?=he_DZc@B2=qgPCqX~bV245X8axF`dH}E^p!*D-1|>ZJuyd16`q0<_
zO6~xx>19}jsbPUqngQ%6W&8_+BGBU+ScAs+34>*zl&=6z(q^3Ul8_7hs)3bnjQ?gp
zI!Jj5U^OwriC7x(kZDT|YAcBt4gL?%SPg0iiB=j|<I3p72m;AW<ZEDcG80G-fn+A=
z8Ng{<ObiD~V21p}2o3H79jQSwqxPQ|12>S97z>Pt88V`FB=to|E&}CL0ZE{?KDEs`
z$^x~;3H%f&$|He)4~p_g;NO9wEQ*;hLtbJQP!BU?Bjy4Z0vxy)fIf>LU@@=+a01sD
zgn?cQtN@w;D}h^pIN)}JM9@1l_#x0$8vI*O<OcyKYca7#gYrs1_XWunIw0=V;LtJg
zfI&FudIRXXc*@{CQ0SQg$##<g$?#c&gP_l8$o`<u16zPWzze{OXm1YyeaV1$-T|Nv
zkkAuBaqI$!pS>EA^5<g>IUbbq50IsxpJ>R5pu`6tDQ^#G$Z?>=69Kv}C_chbfZ`zR
z1}N_d6eqbOAPmV2%0Rh61*kB9j!^$WVKS)A0Qw;V44@NO7pj4BAp;Gd9};=5FdNii
zPzMS<P=MY@m%%*HV1osq&<}-0pwJJ6i$EiQNZ=BnCEx}Y14%$T06IneD1{q9I{+Pl
zn}E&+H-n}CsQ~m&rW@Q2ngjF%?f~)(R)gjPg}_<>d8t78U2bp>D1}9!cpft70=mV3
z_}XUB7Gn{~8dM*|BYc8*4YXJTtA1I0U!WiC-vou85yU&7;DJE;6hBl$ybn5D1E=+|
zc<2g2d<Z%k7y~nOEgpJ9ApMG8rGeGOEFNhikiN!0uOU8V%z{1;uxA1r+BCQu6!}iT
zP6}oPYET>5LjDqHOu<6_5~z)9A%6)p#$bhLP@C5Z)u8bPD@=phzgDycy8yI>2DJ?>
zO9T6Mnblf@_W^ZlU==;Hh!23;dR7|^8gH;5a{{&REQ$l5u?MS@2DR@juLjl(Gb>Gl
z+DR7lgn*M7n3bVH?ItTz11pW0m8C)LAS+vg-3ki5B2b&i>ZXBp$js`lLG2@}mj>1(
zGmFv*Q2WTDv;jExfLXa3)K;>fp9HLFW)^gZK<y^0K!e6ktU?WH2U$fLG>&4CTmWhl
zS<o>8jj34BH3GGdEXr?y#wskzV}LIK9i>6z3KsN=K<yL@`bA(bgO1gpHi|`h0MNLD
zMR^Z!loN~c8=x@=i{uM%k|D_ypz#Q6k_IOkmTAz~gH^79QxTX|p@BWz%&OGDUJ_=J
zEC3plu%>J9wV<^c*bl?385*3@jyj9L_JGdP;P-+q)}V0#>oN_#4fJvi8Yi%>(BLnD
zl8gWvC$O&6p!SxvT!Y37ERq+%Uk6>GLE`}y$qS(NmqjuHXl%eDxd7A_vq%;I^-C<$
zA%Ncpx>|$AWvsOtG~Q>C9stx|w<zxc)(4c*3{c<QqI3c*7nH&Rco^vY8aQ!-Sr2GX
zpWb><11sQ}^^gYj@2!V5u=k2tk7!U|-+EL7JF=Mdm<ILxt;aR6Pm5VkXi)#(TCaiK
zTg-Y=gT@1_r!*Mp?9&=FHehYgz)mk_J)=S61lC3k)*p0}28|b3&uZYz6=prBL499q
zvj)xwVb=2+)DO0{Xy6<jW^L7=KC$(J2CD(3@&Hi(*xIJSNC!zL0G<u{vIZl4B%J`L
z-)wEyV5FO`YEU2AqA~zr*Auf|)1bbzMS26^bQEU2p+Wsc>rD-ucEGH+G^p=rQJDc~
zEYo^NgZd&C=?XyOnilCCK>ZSn^bDZ!O>371^-rwb8Z_Q%y{~~2RhhL%gT_9s4>b5<
z&<{0e9Mt+qgI@-^SA)hxt&cVM<)HgCXuQ+<M1xZr_iNDDr*%MsQyLFy&^V~|sRq9e
z^pFOPiCTv>`1PPiG-!O(`b+~S@iObE28|(FpKEZ^qhlI0rf7Ykfpb@w^`!=lCt6==
zaN_y628}OTCp0+md{P6u*_idU26m`1>l+Oki?qJg;KcJO4H}oUzSH2u^Y<Ez=nop4
zbmvD68iTZc(%^4^{;WackrurJIOzyI1MD|Y0}g$02Wm*@pxXhs&|ZQ5xx+PR+}qtu
zLzyFB2B?qWMtOEOhj|QWl!ll98m%GfKwAPaa5D%rR)hLB?l>SG_Cr7|4eIN--9Q5D
zXM!ebh)JMrHAE3;R}G1Dxjh=xhIM;^H1J;xnxP^4f#v|+5M~Kz4-GK~w5Nuc584ap
z4L9YW1sdWED1`-3pU2%-L(BuEZ~^KAxo2yL>p?Hj5buJLpG)B822hk4g4hF!a^hYN
z^PQk8H3am{eYb}A7W7^X0ljeF4?F<(&<poN8sZ1gM>NEbpeW}A0ljmh3=_m3picr%
z!3-U7ZvdWw89L#9RzsWyeGY(b3h0G<tA_X!(_@hu5;9I`p&_mSMII5vRiMZtg18bC
zc|?$1KvOiR&7Ck*LxzG51CY<urcWpVN@2Exjsqsb90q!=hKvHe5x5!l$lHW3G$iWK
zMC3O?b^wKc0=2^v;h!M8f;Q8jwtr%ThD16N5iUXaK%tui84GG4JHc#eP#+_ao&oAt
zBti!WvJGgNhD7=ktAJ|Q!(WorklR6_{{*=W6gr>O8u2awP1cYvfg)^zd>PY>Yc*sh
zDDo}&Y1nrI-3V-g8Ty;N1wcN@UZ4m!8DYpipgT0Mi;g9~p&_$DQBDZ52=r|YISJF4
z;Q(Yr{hqedG^o$h4tYb61)#_)0`-&H9RrXD;v&XUkmeMmf%^O@;4h^+%%zxigMJZc
zOy`jj4I0ORDk_L1P!0%$310qytp2dUZyPjwkRJs37KR<B0n=fBHM2S47W<j$tlTlI
zD`rFcpr=vB7O_jP6L~TA7~hQj!|SojcR&9O`*BZT*X?ioPwbA(!Y<Y^*o|6=9i|sz
zN9hvmAYFmIqIY0_=o;({y%&2z*JJ1Ab2#tvMVxZ^HuhE?6rW+AV;FWfx@9};RP2oX
ziRsvXScu(%<=Bh&5cbb)i%*WvkM9>hD1K=C@c1$D<KkDvuZ@4+l2)J<X0@;qtYoW`
z)!pi6l~|S5EbB_^2J1F!we_1j(Cu<ZyJOv!JJH?N?Qy5MGu++Wz1;=we(nq0m$)x=
zFL$qW-|fEF{eb%+_oME|-A}onac_2SO^8frk>E~9OlX^sk}y1>G+|=GwFx&Te32*;
z?TKND5s6WWv58h<r^LRAWr@{EGO1-!>!jqQPRVPNpHAMCyfyiy<Q>UxCcoXbS=(vt
zBHImb_eDx_O7{nzd8FhI+Zi9uutl+F9?UT3qPJF#8Qir>vMaDR`w8rzeup2yUgzW3
z(flhvjors2*`e6&I}v+(=VG_+VzoDSC3fJhf@JSDl6?yMV4uf1qAy`j>wDO#dI-Bq
z!?1U>CH984hh$SA*&OWXJXf;Ckn9jhc2t98g=NP-ennfB)yC>*d97a7aBGw`&01_N
zw^l&1Yav;OJKWvU9p`pKvR&O?NH)ja1ClLv&vw^CvWtym?}ua`fn=X_Z*V_*j%0@>
zlq8IUWN&PcY%@qUra`h*O0scAvQH&%Ox}{b4U&BWk_|VKJ(iM~(oIPg+Dww=XE4S0
z67W2v%zSHnbwu%-sL9#8@2)ebBYoH6RDb4M>bu@|o$qSjHS~n%vA&CaJ$*IIQco)|
zW78U~K9pbeLs>yvbu#W#aIZr7U~D$a^WE-S;;Z#dKKk?LOE6Ko7`TGy=UqPU{5i_p
zzxo|Pz5m$@pP{DFzawruM}5}(2<piro5}7-t0N<i#2y)TWbl!JM+O|}51T<p3XbH1
z_Bj%Nxc2bm!<9z@k4VN2KYe(^;iZSy9o~Pq-Ql)}5z?XKuyq{r9om2B<wKhfy>#fo
zPsblxb?CMOw;s6Wz*Pq>Kd|_~1&kfI`G9x-C;L-B`C{L#d&ci^m$n%NY1rOooR5KI
z>jBh2IC)?x@q?YgMUragzOu>5!0H{`;>}{Z`+q3UxBAU^hm(dIJza-gx2s@_TG)SA
zrpM2^(I$B>-ruibY}R2{?)}(-`xJKFZbpr<Qy!JaY^cg?&27=(U*#cAOxtVQZ##tN
zBif(sAen8bXPf?Pd(Hbj=h(m5^clWi&^Xt=>9cKZ(`Wr;TdpV<#n|P4o%l*}oER`b
z?cbjvqfz2V<6M9mIu`&ty<5q6oC$C(cJ@yflVyS^lY_9sf0~$zkvWd@0=~ws^DnXQ
zyjIMXqp^$sRWVW~BZMV#jQB#jX$L=cV7JE!02Ac|?C9SiM(JJWqCY!(u18Ncn2kU=
znZ(Li1zXH6!~Xdtm@i+$?q&C}`?1R7L5vDMgB1iHVP(NS_5)6QSl#Fh4;RkmNHk||
zc<8JQoRl#fCq2ycpKQSw$QYblfzu{%#>68yC1N*b;k#p2ya#5(2VjPIBu`?aFvB~B
zx5a-gB;&sT+Tni(I^m>{R93~k_}_&zoJ`RJ|L@S1)$=_34@ExChbX}L5QXd_%r0Jv
zS;H&%Fm@%!KW}2T?mEoUUWM~GBxXsLVWw_5&gGcIZsKL^W{y+AG2gb5SKu`BDL8v_
zI%?rrIDK*kPT~;!eVkaj5NA$a!5-#|*hYR8+s1EXuV7a2CBA~a#&5&9Be&z+kvnnn
z<Q+I`@@||myas1;+|NG7=^3A3Hf=v<&JJLf>>y@|PGa`!6lR8g#CaG$;gpfL8U16y
zAN(E6HeJXzVLs^?-^6-hZs=;vQ9i;i#95W=*&+TUPOE$hCyqRgb1gQoq1?iW7Da3;
zUxrgPa@k$HmJPu?`&*a;*^M(sKg78iI7@^3aFT{PM?+xNL7kFu3MXWIr%%Yh`55MO
z3_2S_B;urvZ}|`SVtj;C4Gzlw*pojVyYeSuhyFNqvcYbAOAg2~S%F>oP0G1B0sJDh
zzy1cbe_oxtD%XkE)kzAwaB{+jbYcP<&hekGoc>RuJ^mY_1O6+cBmPIEH_iv?!xmx`
z@nVb^UV_oV8!!@hBcI4_;Z^KbUX9a1C$l>+N_Qu(!5N{`*xeXuTZd7#doY5w0i$Iv
z@*CL87zNvo5wBPIEjSVMR-7ET3g@}p#ops<+4~rI+JjN1Z}>L$Ek=*N!${H37!~>x
zBS2?x3dsPB?DWRSO&^TX<YGi752G*n7-=cMs7fJ^#Q%~sXT=y9>5Ea2ei-rSkI{|E
z7|ED|QH!Y<p{U_m_@B3I{KrKO&Q0lt|6A$KuE9vbwHOt66e9qSp|}4y>dYt5i(k(d
zvnSCze+oVEXVL3^4n6G6=uJP5p7R#es7KKw{v5sEFVNHd62025(1SgW-s%bTOut7j
z^cVCve?{-|H~tn%_Gq-U=md}nIMV}Xgy3utIw54ZI_YB)P8JY2>0`bq$B7{IIPGID
z&hdB`r%;^4$rCt%0_RH5c@il&O(GVjLuAV$kwhmE&}k;9l{nyJ*;r*E)EWQQIcNOS
z+CMtu-$peUzPb3~Fr1OZ?9;33X0l%TKBK&DI_qri(`QU)ZD*)E+;X%n^?xyN_>=G%
z!0gICh&eiL=y*woeQl1l+1O?b{^7GF!@um{olIDa5nMV09qm&V#6;9-ia)ljMK<fn
z(C6@d;``Zm!gtEI9`FChKi^@5eHd}z3-!PL`PTZ5`u6#rLCfPu#BvfKdf4}q?>FC%
z%mMl{T)gCa+_%?v9QXf#2Oqv<^uHRu`!v@S7Mae{v#If&g#8i3rCgk~|0|Q?@WgrE
zI#hl!b5{-!W-DcIApGx;s(<q%Ue5lI`jbiuKS46eFG<M%-nRx}TmEOb{lWj{{1pF@
z!+hv(|L4Dd?+da2ggiP${|lm|d=meTq)kfl>c2V2f<X?)nF~2eQvVJX5%~X}fBo|^
zy4s%Ck(aes_7>i^XG8J-DWlj}vQhd3S^0j!|BP6yTT{uNH!R}q6y=lRQtJ!!((e|M
z_ArmH9w9?pR17D5FRQrLqYQp`)}`NvdUxm9CnJ*+S{jsY-w(b$zD-INx;2LW@PG2t
zZT)}m!*}%GyYahFdP2I=plSX$|2@@`L)bh1R#@SG%hmtQk%gN6Jioul#S_qr!@li*
zw~jr3DCddp|71nA+u7g0ii>Iu)EQs;w)^uF>G+F$ML0n!tRT1{Kd3)h#MyYxHBnup
z!l#mqQVpCyDfo%pHIBoFacTS)5&bKU`T4#eyZ`j}7wPPAHk`AyjJ9jcMI%>AddN%2
z<X`>%-TU+T#kXv=Z=>&F-$W&ugOJL%kjtm&jqmn-2stR={pG$@=rg0&tV2QVxxPuR
z2AwbTzirq2Z@c`zIduL<W#<*>#co|wHjd8!Rnb&^u^aRnx<%gxm5#=__)j@}7_~9g
zqpJ7ZICQ_cv2W=2iSudE`RouTddrRDYZ4Muu{LgzU^Ln{7kPc8;mdO?@!-3U{^#o4
z82*3Ou_ooJ<f{L^@{6LOeWJLb?<vW*Kfb_g!QmI+{Up7?f0*K@^5YlSQ7zE$^L<RN
z@K%*_(C-^w!9WsfBBeHXrgj}&dmDe}|H)<JVE!lOCZ&n_+iZWWCx02~zb%QRC-iHe
zkiuX6kZ$Bl6B+%L(<b(mL;w1x(@XWsKmX4EwLMoS$=_db2DjNdT$P{4m0zV{x{RuK
z=hQknEZ;t*1MA=qr3G4mG7j_Jvpk`m^|1E7OJTPj*DBvDxT{tZ>e98Sr^(-{f2uzy
zc9*G#qD=gn1AV9VAhit#t9R$7%%g4p@*ez`Z~QOlyVHXe`yU(AvuSH=i&XsVFE?c0
zRMt(Ov_IcHjr|*W?meH&#_o*Yf1!o{?D~8*{t~2f4E%m}F3;!lg;BL|)ni00p?|(F
zi6YNYXEaW~dF?0EGgkE^X_((q+vq3goCp1#C-6=E1UTyZ04`rrzP78L66Sy4Ue#X8
zq%;jSRF5|bk=~u>*B5*@ajE}{5qb7I{G0mjJpQPUexC4~#Ml*llNKwPsFs1|b+2xp
zsStkjhmCI~T2gS`@HO<m`Dcm{Gj$scettx6;;;Esp8fCje<AAd{C4Mtj_+1C^t<p=
zTpn%0k4m+A*YJH%dSafMr2gE1^>bf*cW7kcpY%k9dQN^d4Nv#tRc@WoUln}UPx#xa
z;Dh>U_o2?;i<Z~RzUN?4qv@zuK7w>#L99Rd4*1zpegAX%pl7-AyV4YVWa|FC`d*&H
zWmC6)A7|wYeLX@kQ~u(DZ+$l|x3f6t3F+W>2z~ciO>Qiu^Th!>Q_KCu+yB^_zBiEC
zarM0n{VVTH+XjE->Rfx@ohZXk_-^&h#v9C&BPL4oTJ$(hDU&WG5BqLy>a(d1G<|pW
z2@+Lx!daWMCd$=+&RNp#zyH&<+242n_gwn!LhARN-|bobIsf~AXN#}shmF6UBxC<i
zhkdS0NK5@L{to?nIrDcy`tRN776ygm!yJ{OP4ofniF$4SpWo5?HT8slZq@f}lUngV
z5Ar-dd=G0&)Lad9qj84+;K3+x0G<Ld5^O{JCj{fi;TYd?FgHtLEinq#7PUxwHi*Tu
zVQd1{QPyFeWhlE8S1IOlZ^yj*y_m_Gg1Hxg83-HZnO?=r)gX+zm*R5KJP}T#FUJ**
z^V;9TdGxz+Ey5hjUYyIm57#9)r~Dw!W<P>!G0rDHiZj~3!gV>;M0}0^8~Ya5Rcfx~
zYW(~0X`IxKlgRmXf{OsY6z7fy^P6zWcnrT)B#9)xnobetYjBEq2YxqZ{)+iJ%=q==
z4`NPmEPn{2{S)}Jm>sO-n=uPm&7a5o-xR)uM)~<xoZ)>De;I2oF5$0Wb--f29j98q
z#$Ux5);swQI=`B~MkiHc20^f^0Q!$7Opro)`f@>rv5;Umo+EGtp*>6E?oqfni^dg<
zI;sWywZs+1VsM4SM=VC~Tj7d;wBsOa3-XU=^go<-mWV4J@gyUc=zj&=tRt>?)(MxJ
zb;cFXy5MqS^gado)fJbMzFFWU6<3HF?+j&WxLP5{(=l?AfvX+9J%bSH2&_*DVsntM
zLCDc%;N@QI$qvGvym!F)yVwiIF;n?9IR6G~g~PC>?>BJ!JJ$O~AirC&c+6H>jAkr*
z!`z4WVRoGS-xp?R0CTJVmJ5UyOoAEzFok<PUyipoV2;U+v-R&{ZE>3Z{mhB^%omvp
z=ik4A|0Cayb$-oo&i#A%Px<#Ti|ED~_j_0%^yWjjf!-hl%+2BcDRvyiWA^P3+#JR(
zns}`FIEMR|*hLi&9Xi26Fnf0rzMx5P^DB1XxJjR2^9TO}W@r^c#w;FlL#u2o9$FOy
zvr{;64;I0!tq2hzERfE$$G^x%hzPie6p_q@v+bi<dz@|Gf`wp(Ni1szEo{f^q<<_9
zC)syI2zer(C8(3>JBT7t1aq+{#zL^ZqA&hA9NNhuaZY`IM)TGK@jv8)u<o!q=As7U
ze}9LFAutaWLt)0b_3&GQ6@jgBdi@C25hvJ>gn5)01@mYz78@X--?&c{6Ilzaa;aiT
zVzQWw`&2O%_ZsY!YJ<7&=`0$j+0S4B(EB;yq+Zm6hq+i6m`G>Z!+f#08163>m*Rez
zxD59t*d5gpXWC!MVlXfHI_pFyyW_qKs{=b>*7GCW_hF8*6O|DBI}hf;puK|Kt;z|_
zPtirCB|u#<(C0vC7?qq5=&B1PAsAN#o<dMws1(IOSDQg2sVv2?NL=x%M7dRoN>U}N
zttwF+REg>YS1~9HRHC}75|ye-6o<cfxUg{9P*U88nMzlXDqX>->yn_^RNFOEWh@LO
ztP|W*>1w4)SDY$ctySqtRHcin($!v-u8yj7bylS-MU^g(DqRA#W(iVFWh?+Q2@}9w
z9WI9|Zy~B44OOKs9D9~;L@IB>6@|UVE0E5cQNKp1`ZWf-CZ9t(H{*)IYT+#~Z$&AM
z!S03^k=AW&2hv9+){S-bJ0VLdw@E0spCe7jus$~#dq}^AnaXe{RffB&GMtKa2|gCX
zQOH>W=l_qkH-T@vxb{aizn?65-(*XcE!*0x-I6THlJ|YL<JhsY2S}VfWKST3y#!iv
zNr3`w;I^d{DD9t8wnAx3OIy0UmM%b{Txd%#%cU!HP3c{T{J!UmBufd<``+ihfX6?7
zfAgC;vz>G1%$XT*aWju<!J}F)8iftFUfYFB1Kuv&8Uwg{FGfor#(6%E^J3iVu}o9O
zqg}9HKn3x8#N2^Bt7RDN*C2%tV&z|tn>J2pjJRXt1|T<L{9AbZH^Tejc8q`G0(NkL
zFTqddF|5`)aVy3*@Jt-R#~dNZ93f0H1St?N(DSVqHOvvTBuRink|2a60Vjea(G)Wm
z@GuvsgG_k~R1q%_-~#`J@V~(e>X-|ZLAE4;EMm7}4R`@=Z^kVbxcP=|y1;Xuk_SH#
z+;xGmP28aZH(nG0As*34cU>S3aRfJW1P|SKp$U^*qC2|57wpUnV$2Jo%nM@73*yWL
z+IjqU@%ZoH@!!egzk|nrCy)OakN*UZ|27`~2_FA#JpNmG{I@EQZ<+|nH-wOH2x*+h
z>COsGJ4X10cs_!0-cAw^Zz1szUa4G(5E2g@1QHJ+BpyN<&jEB01)2g@j71m55cajf
z&p?MB2z?ux#TM99unGr#2(~#*)&F8;gXe<y8go3-4;TMErIozTuhjZjN{_*e9hM{f
z_xtzMnntkBi@7n|$zR3qCo$KD{ebht8Yn2v%r{fnk{u@J-%{F?7rnx~?`@PYtxc`S
ziT?h72=t^e@cMJXiO*M8qDH5fI~FrvtYThR#k^4RzbfW@q(f9OPpn2f(jxMh=joZ}
z6`&2w;9kV@ikRn>GtaAJEuxb7oPqgVCAdHnxDn|OmCV~JnV*@MpVcrw(=k8GXMR@7
z{H%~USur@-EcyU(vMTVgbMQ<$LlyHdg?Sk9swaRDA1YxEq-D(^kGW0(bDbjQI_1oD
zz-|PzBIY-h%x@}Ki>PGoVqor4$@+uJIzuIM2oviGHOv+AnJW~sZlE$hker~Bb%RRQ
z4JuhHsAR36lC^?L<_9|F2Q{n-)bQw6S^8J9tXEmqn^@M<9X2$wNy_V3z8hG+SMbOv
zWl3j1JLa)O7c9$FwDGwbg(a>Q_jIg8o25q(-4Bluq$$TOMf<@w$8fij1)TR4aPF_c
zKkP>Mi*3Qmb05-FansEJ+(L$xVQ3q_Q{IGx%v0L&+yT9#6S_gy;@_2S)Vd0^3TUCy
z1^rL2v@O1^bS(Zu>0EpRab8lo@!YfcrqYMiG8Ip6E4_<<Q~ELX^3W?xVm*GI$Im;^
z97@o?2+aqY4>TWWK2XdOkmlP+^KGO@DZB=x6M1&y2Y(^Gw-K`qPwk8UnTq=+@_!Za
zDeu24Z(-J>!`tjs{!Vo88!g_vg_K@RA%D-reG4hjn{?d2=j8kceEl|Rri-ci19Ezs
zXaRZ}{J9rprtmdL1oE4~y~8E7nlT(A(1H5QM-LC9O~RV=E#d-q*gS`L*D4PnyoSRM
zVaI~doKy`6F9rt{nj5hn6=}hrD|N35Zcy2;9^|&=Jg^7wc8$=zhCHe@Cop5U68_(Z
zaSF^1&4TVm{JjCKJcBipAx#hdZo}9M=q^H<!{{A?PD??!oI-dvQyAy)Q4V20#aps?
z2u%-%EsTI817F1m&AWvlTd2^$zaGz19Fjd;fF?*b^c8tuyA`EJ9iTtH06F>^-3Nv7
zP=TKAhu=N=F5T{uRkj&WBS1O&W2WBVS0u_%3W0I?dxXcKm80IV2VRJ`v6G(eMW@`5
z52vX?{z7ve#nK4%SXS!xyk7yM`4Zh}E`%R?3!0AONBCK&w=TukKBfLyBedHP|5o)^
z>WjDo=0~_6=9}<ieFXQ)d=7Wcd;*@aH{!2<!M)&@<6fJCxbtQk{PEV|9-V3U-VWfq
zF5Ko5#<LH%0CnM3pc*_^!n0lnT!R~jPT@A9-{PjCUn(!CUsax=RFtRi^Bv_0<W;GB
zS$UXZsa?u_xVz~NbqqH<-GW=6u7xk@rOJhfu^-;1TfiIEz{hL~??;dya#Z?on^jB+
zs=vYwSavmzJF<+pKdVsDiX<fMf5PwZP4R1W4D+0yBbDow-{Q{GxEjYTVBZ%{s?)eZ
z>`S;gY6Lq9?iF{dUHJQUajUWhx0s!P?sX+*+=rEO;X%4XEI>zF1&`7R+|1S^+5}ol
z^IwpILh~aEA<gUYJj}><IsDDy<v^a`=N1kF96rk7F%B>0@JS92a0)j;S_{o3i&r81
z2;m~kZy)3E)y3Zdzkkt#@F2&(anXtAAMo1`bGVY<wsZIrzx^KLALQ^e{M9!p6d?{b
zF#ZUKf8zLK{Ovi6TuC8HN4acbWQ@c67D=~xji2x3G|#6vu=P^RPcwcuhhIs>r?SlR
zTdW))4lJ7pf5_qYp)Ux{*Z3{g>k(7d<Zt-x>lDIbODTVb!!oAu>m2hMj?=@>^Bh)j
zSkCxoIoz;ViEnRbyq=MJIs6sZ=WYCa2fv-<lxsNr1|u8!?IeY;TsI<}K}Np7lnn6m
za~yu3!<RXPmW7xvbNZj;@T(Mxc7DExLwIW;&bK&xo{=Pn{S*ovhe1YuNpVCz$Gn!2
zHb(RuRxm!o;lFeEH^%e$`5g|QM~ItB@k1UU2F$j~HJ9MODCS6yL1XzD{%ggY=hvDz
z&u0>ltrkr?&rdpVYv6WxN?!v{;V#_QcMrT)AA`qmAH1udhv(`Gid{2IchG5WQv6Cl
za|=fLFL4LhdEizjArs~9hjagb`3>&ICCj5bwxC~Mt)2kS{fK%}Q-nLTKB1`u54#f_
zku(P>U2cIK5%4UhS#w&B%s>{f9Kl@A3XKqBo8x1Z0?!}h@CzJ%lf%0>{4|HyeT6tr
za`-a}g^r&|JEi;Q$STFRSz>Ors8pa%Xhu-TKLR0rt<XJSSu}b;v4B3B=HvTdeIZ^?
z5=C<Jg%ont(pPzxtA7PIza3wFF6&lxzE>T$f<1^E!|qmZ$K7I2VvoX;xNqzP?jpMq
z_mmyR&tAH98NS!6a8KF<_Ez-3FE@gHJ1*4<FWoBm?B>I(_Z{3L_h)qh{{H`g-BT~(
zcDf&_ufU)GoA~dm$m2=n5#@fQP3c~#d``I&X)Y+AK#CK%weLo?6nhP>#=Hq>@SBT}
zW0i6cadxX4U~}21tV8}Yn5RvvtDqMS;HJU>+*}xjO~|SC;QqrJeAlM7LBlLYiaJGu
zdFUzSW4Md)k4$HkIst9<HMJDF><h4*J_VWj6mE%p0{2Efth|j|CGQb;h<{b4#lz|X
z-rRzlD}Re}{1oqA!@Fx?LA{hU%w1v&Y@P>k-}@S|0<C%u*Z9vlyq7|8vvM!OWy(uv
zm8UuU7KNgn!zK>H9A3-eb^O&4de-~^mLgaS7_a3p#BZG(+BuBCE(BGdpKs?lm+|vG
z9J(lke>PF_I6wb}Q~nu;zvuXc{QO;x)5dWY`MIA%SoM&?XZU%5!#oc49M*Cu)9K*n
zIu2tTIyk(Qa~Y*)&F2_d%SaDDcXRkWzx_8V3q0qE+AqTfAjC(x_CCnr$0)@7p6YWQ
zhr1Zrt$ZHHaz^qwog}BA!1f?;ODUyR%J@&HJ~i*~^IsV6<#3Y2J`RUCe40Ydb4=$Z
zuAd)J`kEhdE*CH!=a}{U9OUP7_&LDOm-BOipI7o%9uB|9VU)uwIh^8fIhSHBKYxV7
z&r+!Q2|w@V@RN*uo1ZV_@LCSf<8Xn)D>&T5;WR?r^^Koaa0I&lHiq@bX=s;wHT$5o
z5^rzEiGlxu_2Wmu;X7gZ`Z~BA@%din^L?;wy$SA3)~f+w7PZ)SKs<j$bct^4J0Lss
zICK69=KPbeKz&#<&HR5k^ZyyTe^oQfQeY0F?N8V>gWFKCx8f8e!XZe6faXq?0-uGP
z(O}OGpTF_{$?u>1ll0Q>)4wV2^bf7^rJw)b{T7-JQ7dS!;&2Ok0^O*+QN02Z=#%QF
zHCEiy_!&(TZfg9j#zl8EYTUT1@ji_gTJ`-JA9(SD8b5Z7J*){pw|+#^4Bq)AO%OZC
zzN`sB`~E64{jcF{p%&cU_ylGKd9bhI959@urNRnY20KKxMiVvIR5hAN*i5R;?RMz(
z2Gw9tJy(g(Uv<59^l<X6=%d2l)}&p2?1?qMJO4@Lmeae%fpb3fspQ(vY~Owfb|vMV
z{!b-8`9Ihk{S1WA<I2rQ8`^<EA9cH2Zih}MMAYCw%0C_YkFvayJZ*hP^54bzp;>?J
z|6C$Ibj1~k{T*GqlYPp~r}w<^28xc=5e@7BH-o-9%!5H;G-9l-(&_Zo4GR5ss5n);
zHRf{ggM4xyyK}?V(6G(c<`}$a`ON;^yJuJJx$xN7`CS|4Kd9V1ITRl8>a==CyLWU$
zK<u0CYwbAwsBNOVZHy#m$0GU~P6=z&X!7hXS8J?CL7pbP%jK|_B2S|cIVMafi+N&m
zq<QtF(`}O`tDz?_bpC|fy`nET;WT;H6c1fEG4at$rxGrcy?Nx|HNE{iy6g=WyBqCF
zWpZ=fRArUO;f_Xn6fTPU*q-Abn*GF~efuX4F83ZfJf_@y;_$)8b~)R(9-G{92~kOD
z=#WMcx0>EY|EV^;`<U2}pL{wB<LDwZtB!o-=B8v*^5>|!rElQnftKd@HZ}D{D}RBC
zZ%Y2XDM>R1s)uIOgX4YcA>l|wRn&!JdV8#S?UgIqrl>BONB2#6+^a?c!$#k&`QJ*|
z*Ax$2I5qLHOD8k+(YvFkzWO<5@)RAoBx##ZmnW*)3{lmA-snE&?-cW${;U0i$@>PB
zo0BgK$LT#{GWn?dM)Na#qjD`$++);n@J1}25)a@_DO?fkE_Z^P3`y#AAL|;cu+^<=
z8!Or9-&A&9aYvwP<@}I%Eoq+Hnx>;0Ulz+Wqavy|I8;3<)<3F<i=+R2viZ6@!XV^d
z#kRjCH;Su2_D4yHxB_40$*-s#{FjI()c)z4no^~^3-4hQKo2&Uq6scvJf3jqRfkF=
zLl63U`f9XOFLYn+TT@V7s4jo0Y1pLIm*uZUc9-9Dleh{cf5f}db3^j5IB|pbJa2L;
zmG(-cjXef3ZKO)6XHpG55Y*<E7S8&w4tyc3)mIeGBE7%|Lt8@PR;2jT>smI3l61d%
zH(GoeEnW#bLb~r`co{L^N)@;4oS8u&s>e2lEwN<_9pmSPeJc))_HG$+HZAMv-8}4Y
zP8W|{I+HlGYrbXVlG))KE}m=}*>`2f*q(0sHM+MOotJxX9q2AZewlIYaHtsJsX_3C
z^*e99;^MZxy?<Ukf01(Y_{_dN$=AfdBmHn%Bx<)awH45XHBDzwN3G6dH$%Uk#w~`e
zsL3JpwekIib?egQ@Xj0<D_h%DQ<GO`9^Rj!7=%AOJXvzf-gJ?Mu0J}Z;Oe?2m~>=G
zDp8VBnwczdDD)dHO`0j)vvz0vyza}w7hlsgbm;s;D_8DUZXR0Jxh}3xJ|miw&xzS{
zW_qG%(Q@?OKcO9b)O*o+srOPMZZ1+ho?%Bi9oUh{L=B|Vy?))8&AP5TJQWDJR(g8F
ztJ*p@)YY4(WBy)y%rO^gYhNhdZwkg-L(Tq9W3*<xHMlGkYpS&dU7d~1ZB;FGV~LK{
zEy#ZXh4P|2C>*$T!lrkq4_^9IzW7G|Q<o~c-R{%3&`6m@Z&`s@=+oentugL(Oc9Yw
zU9eOU73;U=X{Y_mblPQ8zRAwAIseMav2%*Iom=I_T2%6Klc#d|8vn*=@#*B+^?TsH
zDX>nb!M)@+!*Z>Os!@Z{Xo_-j;v+pidtQ-NTib5=VIX-AI`PHveQohWG4VkRdVIMH
z0;3vVf^(x4R9%%`ercd2K#*{#F;{}e+AiV8dXm=MQuAn_Bu{7q!A}R0zloO$p)GS%
zJd3n1iSLf%e{oInlHK?xuE9|Gu6xSkne-$(k=x=gL8m}&H5!dWs8O^6<pOR90Vjo>
zUhfpjf#%`-l6=)+zajXyOPa?EDhiZpPsPW?YSHz5qqim){C4t*<O9#vM9t<lGtREi
ztVH5Tq>FP%qK0(3l(0}w#P<Xeg%yQrO}OU9VDe9KxO9Bz8RtlobIkEf@@VoD)dJ>o
zu#=PI)kG7*hUOFaUnibTKAtZw%1gG0?fJFJd{gb|`ydq*O#r>^4Xn#o5vRwvNejFv
zisGQ!azorDGSctMy~_d<=R|zH&<*Sx9Yxxvb>7fAf26k4?w{^<b`-CjA3nM+>URtz
zty8XuGtu&wkS9F1Ej|wEs=y=olz0{E)z!pfXp}ni4ntH=Eya>O!)P3KutcNrWq)@S
zYV=00uUc`fYw4TvPi~0#r+b_o5zj_%thS>VIVn#+yQwj}W+i3p49{(kkBvp#i<+R9
z>cfW|??L(Mb4s@)&QsF-`DN#zTw!m!sn+PXd6soM2L_$J=IYvs;?3(v4$U`PYb~`k
z{;7q;^ooY621B~;U>{s6%~IXHf93TUv<9E|Bkx&zKF4{_o^Cm_`V=n9BPfeGReP!Y
zF#Pp4T}ClcZNx3Wsdc(n=eGFA)&{2s^7E1pmDndk)?Txre)2xy(^ZGPzM0PAt(%4p
z%my}2m;+^#=QUdl4b_dJuHItnYzohz_HYsoESA5JoXydza5G6|NQYJfYY46B(e)Y2
zMnYysS!Ge3!5J(t?#kb_Mtsex-8(u`QqZU`><;X8CWol~^A>Bd8uTW{D7ZGYzhrNT
z1XQ`)zNgcvIUVn_(dAZC-DqHBw!Fr(Cel6aA73B#_M#^3J1ci~c{X|?mUg>ms@u`_
zYfo*X*|}kAzbCwAZt#M&5%iJM|5&qC6vUd}LT{Yi92*&>z5yLrJc;(JlN=+{3(@r)
z2Ijfk4Lvt{<0abAyuT-==Jj}cv|3NFab<i|c{=%a#2x8tt*ot1J|)7&+R{LCxHWk@
z?IK3nn%9*(6&Gebu&}6m`+;I7QJv;xMrqCflz0i#@dMCtrq+RscdEh?`PyOsj$>x!
z>C=A__HQR&7s@p>Hx0wbk;W1vKaX4Dxx|1|J$i$|oOjH74D(qn%9CGKY^*M-Qa*Be
zx4uv<6RJ&1`<_9i@*LVDz%`Jn08?r(o>2`sRkF!msP)V{x>}UTI!9NlR@>w2$y40{
z)9T2mx0|0<MMlLd=)|4gaO~_l%C4?dOMs5rY&xi4=Qaf88kh^5(GHx;**T=S+mDcL
z8A%1MC06ING@6uF|C8~xzOi*J6A0HgyC=FF{hbJ%{l#0>4INw=+Pr@7(8`e0KeahA
zJuA5YW;v%9-B{IpQ*tvs_}CH~LvN-TR3fF*OKzr~0R67DDK_Tot5&LQk7aYSmz1vz
zS;LZr25h_U|4WLSd6K7_U9voG=GM$V^AZX0=QGAlF1r?CN3G&oAIaw0*WH%QuwT0W
zs3($P+NVeVlEblO%PgRbQcFws5ayp~9nU6vskVMHSXf<LuCFL{t+e)vSJwNx)I7JE
zH_}ft3H16?SnqffK66<ko>^2zp-FKRQfK76?o-h<)%8^)L0g->Jm8D8d-~n;@p?m|
zDbSIyw?wO&r;1yh#>VE_V7;NyQDf<B@^;y~Ox1O5E}Orq&gZQS^f}PK2a$I_ysgsQ
zA9?_|7#a$kE3K^1WbXd9W>xf0>ZWZD%T@VT^$WG$T~S|LRO%^ica>I`h<2;?_;F|Q
zy9Jd+HhYn-QD27C2ax(N#4FTmxo;tLIRr^%qh}VNk9Nl~JiOgt8_m|0t)t$J=mq|{
z;{I4=U6qI@pJBey5)%ta>vU5q((NF=gmll+fj&6p4eAQ=w3RNyUH;^MiC2=(I>zme
zF^32xt;9))$=-u6Z5T({+S8IA1*J5lo~V0$z8W=8(Uw`tZj2bQ#-%N-FTct2T3Z$Q
z*_1VwW8E<MJzKxk+HVsbSx;8scTCvr6OQE1(7w+i<NJ{(G(ktgozjFzW6_(IRH4u-
z=lLV~r3KmwN5#(I54ZWF1%@JRh0Ay_`PxxqQ+1WQ`sg42ew8U`H2Q0<Myd}lHgO%G
zZuKlDs7e#rWfG-IW4^hxyrRNC(NI0>4Uu+;nz_@Le6cz<^ou;btzf*{D}I}N&OT*x
zj5$T~={G#%B+|&YS$q;SLrZcb1Sz@Dk_xqA+u!qrPn*0=)aIMTT~2fI94GoOTQguk
zc0q!H9CefCIjj;${8z9pr}52M_#5g-2H&cA4zW4DQl$=L@a<Xgf2G!C@B>-+D_HSN
zr@u1`Kdp{t@I6`hx74i}{DLg}9d$f|A5G(n9b~1+;Ky-;f<9HQ$JO&P_@Q)s^sX*-
ze+GYG2^T+BFU;T%E#ZnsJ(j`0n1vUrpUmKorg6}-RBvvT>kajtP1if>=QH0umi`W{
z`HuQv2LDPHemX1u<4d?wslrD&)t+BZ<H&!hUfn9!YdU|jYAwc6RxRkthKyCq!1EtW
z=1H4{g)7Baz*m;+T-P;tECEv<>|9|oczI*h<yF<ijTxiY>BH8>x>&IMjW@`KQ9ooe
z7>g|x8a0z=1+<j3h8`!D1!l=JS~WvQ+Pe0w26w-|%-w7(uQn9dm%fXw?MK!|-wI2$
zxxaz4QRdDty-^=PSzqA3O}+|xbu-;kfI4^uvn-!-Gduu{sC7MNh-B6y0~GO8{Dw_K
z_!hoBq4murPe45G%ul`?{d@l3x<qq+@?QT7pAgqvD-LuVCNrNjPQCOJ^5b;XS+vQt
z%#S=5GPua#I|+x)2U?HP2s)}!E2O=^5(SQ%whqcUG1=6l8s{MD68MX43+>Jc{rFmG
zC2X05k?`iL**bWQ`7Zrku6=AU{9=PDzA-r%9)_*3XsBm&L$kv^+0!<DiS6qvdRsf7
z;gJolM74o3l_}n*`3`XfjeBtm*(@{oNt~yOQ3Z=y6Im94YdQY)0%c$v7DujWiEoDQ
z#u83kMB-aT8R~=5Ii<AmXqNcVocKhK#P_9eqSMXsVV^=v9)$-g)5$o+m-xOkzSu$b
z$qarRzG6f_l`9)RnZjd8rycQi@Fq*At7C4d<NP+!{T%c?;_0}Y65pJIQ#mER6<z>T
zPKsZ|bW8kbPJH5)5<ifG6StK3&Mdr`xuwMSWZ^n)KZ);4<0wCDtC@6;!_S4w&-4>l
zl<^Ox;{$gvSC{zqEPRr=rNke|!gb6oCH_zro?vb%@h@iKX6BX>e>9B~oh)StCvJ&)
zV{Qd{F-F{rF}4vy^OY8wcmgLuW^Bc5%qF1<qgYFWr`}(k{P#1>$Bl7&b$PL&u(%N%
zqb?pSO%GW$&{<<J>U3aHxjCiuAQ*2m8PP<PnH6RA;|6!D_Zw&Cv)<O}G?o`3qk3fI
znzW?z33QufHr)SE9_~N;xL<9CZ)19mK&O5Iw(v4(1zpNog%aX+CroGA#c$NVrQdBh
zU{2?w{K{_MP<3A2Qa`0}q33+|VRegewup27`7-~kao5c4Ao1*R+Rpt>;(K!9Q~DB5
zkJFCD09o8K_z8i%CaHYoc$e|B$9pqt2NK_zmHrI(M~QDI9IZt3U$54a_gePKhRc<R
z$H{yJo!;%z>2+r<cARPCx3yMj6`}3*lvWp%>&uEQc2yJ<zOUWCyrkSx9u8?mq0XA8
z7iv?zDbQdtJ7{SnYbk(Q8KY^QYZJN|dh=FPJ#z!}cB~Mfb|ijWRHnF+CkMZUaL9G6
zVk#ejd@y8e7g5NjC`&0?S}?#g*19mJAFK7(iTOHz?YMq?GcPlYiTT>(ed3Re%GLO1
zOIFf)gV=w0s&8oin|T}gTj<nHBPmqOa?g<H<_x-qOCr&&BPp&XKE$mf(e0VIv#bG1
z^gsrk;}(|a&J3zyz9rFp8FU|WONk!Mp!uxHN%Rn-%3_pOPEeN;JwAs10be9|?V!dW
z*X1aNMw30CG3jb8Zi}ZP4+|~U*wS#7eBtz-+EFMi#1c?Uq$SAj!iDu>s;AAv>3Z7F
zBSPl8hpEA8jS}H{!fF<^xUi;LJfL7L25G=90{nz1PqlbQ4t^Z{J1w8G<DX39DBKlH
z3+7Wq3rfpYd+`u%M9HH%AbYV*PuxPETDqz5I0`(xexs;AiF|^oUkuPH59pzEK#%4X
znJ?16b_rJogkAWUUv=cfKc0>cE%OR)RZ7RD?gTxg<EBzu+>-OvNy5=O?@%ewI`}4P
z(7S1NnK0?WWZlu(l5J!Dq3;&I7{;2D5T3>su`7A+dDiWJZc5d<au=5$>tV=gv#@65
z@m<`HB)%_=FGdusR-v2{KQ1D&Jy2~cIUV9Bln&%hYQ(POF(L6yIXKNaBz`mpr&*B1
zx2N$%Csw2>Ux}Z9e;WQVM_9>pN_<}?ek3RU@pSyf4LSJ96wd2gOlLXMzbVBpB~E=+
z;%WU$;-r^IJk8e$m;6=Y%wIvLj8A%r#1G`8PkM>O(|nrZpQCQd;74-eQ@zRfX@1`g
z4v6)+41QcxbN`e1l3pU?AIeJSBGx}7{y-K!&H9JLAIieFu>K+OFJ|G>tba)S(F_iH
zc-#^W{e$#V>d85D(JWPd$MO%lsigM{yw2z$-906ZGHZ2bt~DA`QvChb9H&wu{hzEo
zD&I{>dT8xp@wf0F`y6IgF8D-fOzs3Ne-Irej4iqFNrpUkl}X4I5QDVmxrNbKS9^|)
z7Y;k-Ygboqs3^lK=tN?!PG2pKRgXq!A@l)SYb+>AUS2(1W86BhiPsOCJ?9#?*k(ht
zF6wuEZ&|zejLV0G(d6^AI_m1TB-c4T#G$ZE3OR8zJSZ$0jZMxmqomu&iB=P)UeY5$
zOkaC^_V$C~?)>DhBY(*MeV1_NCyz%iST}wM?gJk_1lIvM(Q+!2DHj5{+Ixvw3%h7b
zb_>AvOG}LjT2oBbz?sdl)C@hLXqS@bE*J~BobSB`Y|%!21%|@%y6U!`BIkk8cUcfl
zjh;)GyF8ZSF5q+-oNO-=-z2he>h%&ol!Fs@k@$AHL5I`nP*C0s&iVt@GPGn`^==~1
z{FL?@gdYZX177;pXKBhQd#)?(3-X^0?x1sEZF71B+1`I{moH{c2}hB$)(p+oF>KBo
zJ-RHtj@*0YffW@+{+4PfH{Up8m7J*tbzCc7m$gFo`v7;NgVZrkgaVE+w@>ru3|`6c
zF}EZhO?Q!`;#abEAn~I)IO(Di-$!?pP<-%WtZ8TP6Po`?$>c~5j=A9y&N7YCajQEi
zec}a~_ZxD)!`zX-<F#&eIr6DW(feW+PP|v*TQwP65%AMb<3}@i6RnwN@axGR3*{(Z
zbmrhEG(XQu-<pZPFOyCrC;o8_Y!f`gIfb18cTl~9TV*ZE<2ixezzY>APa$c05Er(u
zwKUWY#=HY=+svr;D@}(c_Z#Q@t4jyA4=p>__}IEN;Z?<vK#kk)8}T%D#VQ*=wP)wv
z<a+Vg@XpSW`A?d+w8q!QkUOu(bKAj33w3%_^Awj&;?#B$->3Nz<0G&$VEsOWU$6Nt
z<0~+~$i`3Lt}D`;79dx$@#C0R5#EmZel~uRaMT6o3%&%dPW}Ojw37g_r3VL&>Q_3W
z(pw;UM1N#JOu~?&abrE!mV6YcvfltpVd$AC%_fn@)JdGAu*5g#;M5Z&zE$LL3(EL3
z&LzG*Cq7AGi66+pNeWARXAVwMO5%HRaI&RJ{DLfej-|H5k7VI1xRoS+GzY&Rlg{UJ
z@GoTWdvfr*Gx!&B@P{+_=Q4N)`C(-6<M6(u)|2%^{87?#h~lI52>+q#N%iD+@!LoX
z0QM@;zpEEVL2EbIexBCZZku@ze-0($hk?JW#8l*NZPX<XlXpjosvk0c!kn7;lYs3k
zgA<pR_@*43N+Iz>IXJbx#J6Yg4k}#+KMtJw>@2uEd8_y`Jf7Txa@K43k5WayWLbT)
z!QEnCvHDC8ma^!0xGPc3##Qii+n70j%j$P=Xqnv9R&JQ6mxf#}BWU2VznLn#p3A<A
z{8o5Gz?Xza#84JaBSPYvaWXvBm5fh4R^nT8aO(LIKaj%NqlDAPS_-AFxtG(CIHfP~
z%{e%wFY&E8IHfP~135VHA&Kux<BJjUWXa&iH4pK~mHASe%J_%U@zFh#JTsQ~_7u(@
zEnII{r>8!nd6DUtIO)j}hb+j#i5`iAw@V!J8UxcK@#C5om>z-oLN<PqWC1jTlwA`u
zF6dv(>C*P)EMH9(T(5m#R6p8rhR<g7ZvEY2x?T~kY~RgfvQf@G;eK=r=C$D5n0xA_
z-P+;MXH3+XhMKNgx8v3;j@rC?jvQS*cSO16;<1_idp`4n4Qu+_NI&esNL~(^M5iRD
zbZA)kc=)nJa>vQ1hE*6W3geZ|C<^-5hxB>aV53+kdV?#iCdZb<*oHuK-GzPq`=-m2
zGZpKLdv^~vG@Hw;<r90lJq`7?=HW|Lto_*D?xvxm%P+fuc!(Q0$DuRXv!tQ)U6q0`
zs?V&li|I;VX;rbg!Zp;|u)NQ?C$!6d%wJwRG;En!u=mav7wPT#{IQEaI=yo)+H(5$
z%FWYeZ_W0@>+U(WjB09eyZ9o;EnD`Wou&On*e>Bl_{Hk_;<7@6q268aA^$ZcT~EL`
zaa*AtbhHMQyH0N&Sausbg`!2-(+T@c=qw%TM;kTIalerGA2awu4*qHe-?D^bee`=7
zeA^N(-e4U>roTT2zcLelM;889?Cnp}vpWla1ACg&_~9)4w^{f_862x-;>}F_<Iv$q
z0?2Z`k--mU;-6AlSXYyD-oJ!n^(`+G|G_03tCl!9Aysb=FX7_1YDETrB!h#V44rP3
z>kajtMVDe$W0~*1gmnbsYoHf+dj|jVd*ENq!VOvZe~tE7aXKAhsb1YG*K0a|^r^sN
zEBjD1(Flh&2RVS1<+D90mIT2WJ{6G$w>{oa2-mk9zlx2q?&@-*p}6t-Z2yWMS{v)z
z!sUamB`1rd)iUTXR2SD(zMk!DL6pUrGB2IWiQY~UN@vFmbjh(S<x`NBQe;xkrS6Fa
zcc@XT*JgWske{A8(co*5#(Y~%Hi1tyS{*}Xk#PZm-=5i3Q8R2cRO|9;D__edk!u$;
zV*jlR`#We9E#Q;^vckL2dN0AtBP`F)l+?!)yx@k>D4EfcXHk~F8p`LEZiX%tmzD~e
zmOR*Q50A~>vY_`z?c<Iz$0~2@pw@A23p=!Zqque;Z0oJ9v`qS9bLEkpzNUq!PSIa+
zTMT=6Eac(loM<oZXdhhR(b`Rs*4ip-RYRgZ*2V5_y_*v3?$*`Z(&miB++8kpV#442
zkF@g}%F1P;k%C<;TvjoI^9@rtZUal>I|xV5BJakR;gMBORt?kudp9~#{w8pjV}?w=
zM+Vdgdn7a0OgT9o9@C9id#fMQKUSG?cJz&}Z-<*>xVFRYU)JT2&W=O%+FiSB>)`P?
zH#2y_nilcRi2Kc;H?(|9Y;chJf6B)a;|N|aXraAy&m-eo$oDdXpM>s2e8LA$3wTHZ
zZ{YYJrWR%Vl=ud<bP8X<={9NnJ3PK+{4H7dFS789vhaJ9J2UC*B^*75#`|IAuk1Y~
zeS?;|`Mdj13Np~9Jy74%iBjA~w%e2=>bts9D#bAAqJ%^N{5L@v*2uV~9!_(R9Q-)e
zz9mQ9l7pWloH@!VoHnu4?pfu)qBAc#z>$quOzv1kQT*d@rtPWF8Y;2$T<tYtVfuoM
zUue+WVfRgUqv6-i_v~LCL1ET6o_~Iw_VnY@IrQa_Cp3Lt2)?zc_IiZno0UtmQS+@#
zdwrGLQQ`|(_&2z{B)%mJe<2IMC=34*%QqQ+e-{3zLh?=GJF@UsSiVVocNYE#_XmmZ
z&EOpZ-mRH*j$;ll`{ya~h(dBq#y^;ee+p+KkQ|oywk2F?WceoX`<HO>2+KE#Ke&V|
z3d=W%KfHv)1A^q6#2?Av9T*oRp9v@V_AUG-`38E?8+?#2<fZE+`I6@1OHBL>Z{3U=
z#}dzbr`{cGs;+)F-`&|kBm72+8XwPi@It;gh8lGlKi=k2>Bk$Jx3h>5KTk6>qO6-K
z^U>-UQwGQGRA)VdthCV!@+Hfk`0EYs+3{6pyA&G(mU>z$Ch2!+hO}>68%Lt~Th^vL
zjMJ2rney|k!3Ig)PgB%!|Lw-<ek567`OHWbEqgsbs>aysneD|)c}l~4FVE++&G?^s
zK(EsMF>j|~d+qyrLW>%^eW7Y&9jFXJ0Y1#L5gSvv5BG_MfU{>ak1}Y*O#L%F`Xo-h
zMdDjvb)nHp_@8)mNPKq|{_i|GB)*q$a7&raYv5EtNLZFG|7+iAgPiP2ry<k-15fH-
zwma92DBayw`~S+PTCwHV*9BUz>(f?KU8SZ<DRn_vnu~HuNjyX1JC<-o!(&?F+fq0g
z#PfMA13plw-L0_ddXc^dYiaP{MmiEd4&Mmk86K>nW#cC^xF-j{g>cMhkiK{V92}`&
zrgxUaKGP3*NmMsv9K$=j9Vy4~K}E{wn={VgzY><TbNItV9m?=m;?ybM@Qvgf&NOsz
z|6hmqI&~p~_7b;A#ofXv^bv7@>M4b8%f!XJEQ9XPpsmE8Q*n1>&{bLKUX($LiPxs$
z9%PL|v)G|wUv}De0LqS!ppJ3wS1bI_A=h!bBB6VGQ3^suf=ZD>7kbiV+ep1VmG16-
z6oBjDVetxjH_d|KOzhnVk5emBfuB5fy;G^5=d`zUaw=GXg`YfH8#7+?f)m(#EL*!H
z2Zz-*(+jfWpCmlh+CM<P#WLT_E<X^^vE*+LQht^3w@3TH-(GA`KY-j}1*Uc6*%okn
zLi?e`;AE;aPvyyJ#t)x3k^W3){2N$BIm;to38&VYDb*JAN12yi8PNPtpuaEv7^kF2
z9Zu44Vv@?AhxW-vkEhV6m{MISda=&j3(qC>_$0N`ql;T|zBoC_^@3dUkSpvXQaUUx
zG_$v~^cK=>#Lj}QzLHfv-j3<w1#I}v-eDj@?)s=`Pre+)=H4%7_8Q3kjUGVyB=vvH
z9B>9ms&4=%{ZQh2(>UzX*qe~SkK^V%Zf$g(pK&_S8ky7nGMx^_HbxbBngidcS;GIq
z@>=2-E#Wxxf%FH7Z%gCoWlwUx5<j7NHIwg?OsB;6X5xbfWyL?9j!!%&3qP5{4}g~)
zRlcrqDeUQp+_6%H`l0#ykC=WMPelK}W$<UXyb@o?!hgo)lK7S-T+ws6B))A4NBZCn
zWCca~`*U#O#S-7KghSi?Lk7Qa2}h|&qRIFdW$+H13rX!I@#C6rbG^xOk^Uy}gPHiJ
zlvdW$B!2%AE`G#%n#3Pm!f{#$*&!tU@DeWGWIavdk7V!;^piB5q^F@iQSNNI-ew6b
zzuV34wXz+cZ_u6*2aWY?eIsjw8ZQf`^^Eu0KhmF8FWz$>i83N}3*v%{zsLEve}{*Y
z4X1-@61410D~+mLn8rqQUYDjBq{Hqu@me&NqUTG6$2#Pm>~i*257p2%mO0-*^{5eB
zSz4w8mw6_;9L33(tY2<%ik4VlY9aYf)kt7~wzYH)RgVX{X=_WufEV$gJ^3^g9G;u0
zmC#|Epece?FV(>N&frrvK&}|f;dze-dH?-*e2s4uyZ2@btvlk=g9UlXCyN>fyw)Df
z-6y<#D+}!hJ6*iz2BEWGB!pQ}F@1N9#Z&ulCWeP5b2h0>PmavxY{&UWX<fP8wZ?lI
zm1^Z6=D*EZw1f0SoD7Iib+NYno_l~|O`#4|$#2S2opDR^yYC08(M1AP#_|$Ni96P)
zkDR?bNRDSvLHg{6xZf>ko=uNu;NVj!d}9tyvRB4Gn1hq7mv~wy3V=VNlo|XuPJNWK
z(N-FV8oHBPwp=_%&DUk=_L==j+-CPQxFeqaX}J-qWnE7=UM+R{vaB6ZG~pOC>KEqa
zzNpd5)>oJNo2#TfD`$fg*8ynZI{0v^4xXYqkUOWCm!h9zOzzdZ&UHh2*fHjHXgS~u
z<UfY^KLAh0E+mY7!gcD2(X=G^6pwHj`yv^eHK_$oUE+IFxPZ2poyu`eh0x1+{z|dk
z>W-Ap8oyn92wXh-o0Ien{++_9=OoL5DLQXvItl*>QzY>%I6au?C;W3+_(d7KiS|Zi
z()qCF{#5)x4t_%OdE%v<&JHe_On+}CosOLN$0<H(I>`4$?B9%MS?Vz?gDPfy_yKpp
zP{1C$w7p)fu4=#!T>5()WA&!mge^E|4TY`set&&apsCwexWl)*C^j8w9U#aW3R&GF
z#TGO65_C4(Lr$l^(H`;oq7GLiI2}5DN~vjG6YuHtv<KYYx;nSr6?1t8(8vn!%(?`6
zQ$5W9n7?2FF0Fa9w!xdIFlS)}>b*B;ozJS&d+pN7XjHrtOm(BC!Qi;ZZPHwW9_oel
z3p>Oz_=h#0qZZIKqQ_<9Cp4dAX*P)7l8qlv;d=CwZ2V*<{wc9ab!O7vk255%LCe&j
zWe^`6HeLDzN}sL(^6|;G@yZQq#!20jGqXv}d6oVu<Cz=PcGYX|=dEh@+jcMQRYQ4r
zuNrF?;0h@JMx1g=<&-$}WQi~2;3PdIz9kD!vUVZyZCUs)Si6w;{v4dN3yJT@!rx-)
zEAib~xU?cl{O}TvT@|E_Nc_SjT)fUBOX3%0;V-kcAn|*%@L%xigTz0Rg}<&QGU?x!
zh5rKQgQfHRYzA+qy?+_}IA)}}Ons8JBhx=f@zLI>XJthB0L@&|y*;|r%?+>(vv6YB
z^zQox^IcsE#8QDLR<-`Ub`Yx3aFwatQs+%H<R#m&n^01OoJkHr&t#sOX?frzha{fW
zBY=|}k~o(jlMcxtiEq<Lf0Kd5b}Cs0=bGRWxAN{taQL%US$MHMwZM}740Dt4)Vpo*
z#sX}S44k!dGS)5aU#V4<;ilGi+eMjPUXk@KslcdD)w^A;sAOl$&upO09(0d4xC0hd
ztDHpzYQHvWZ3?HBQ`iJ&em6p<O|B~Am<=l_y1Gg^+CUAr#S^Kv_#ux%tnA~YQnUs6
zA=2oC4<*HyIE_w;FXZ4fIwig(2PYk0;`=2ocT;luuu1ahKS}AQa7tg|3z}@4(wF#_
z9GudZ`2HN6=5P|<n~n1*k@#@|OM50?8YL1xm=*v3V(udGZ7KY1H038*-okRpefUmJ
zhw#UE^h^9A%@Y1emXi|So5sPtvF{W4O8mIyK9;L*gL`M=CkdCcdz?1^JUpRMp9y*R
z6KPW<H_@Ha##0lvPQWJ{A=Jwy-_bP<o!+)p5!Kim>{t`NG(6$6b+2mm44M^Z<3|fW
zY>YKj+dIuS75<CEWA9u0dH0}q=IUuj`_S&chG$z^H%|uxj^RE2-ny>ZfT6BB(%4hi
z(Q@U?_>~I@beEJ4^)&o@AVX;PdDa3G%+2qz{rvHqV>I4v|GD}(I!fd04e0LVJJ^6u
z`a~VgX;WM*vl`E;e##3D-VAYaJRpNI7~Ege3-qqS+4R8)zN~%x%S$@mD8TU*`gl-$
zIBg`mJ!?z<!GTFMGM}74wxTkW^$b6NcB7@Fyr8PG!Bu$Jd$6=Uou1Nt`uhWu7)3<&
zSCl(JHQBH9s4rLs(7L0L!QW#|89XY*9kO=uLp92<DCi;XjElp+4KB-5JM4PJwJ{jz
zoBP-{tr}~0OgEJ^t-ogFRpTMMdu^z=d$QDCDqKDF&8^YCRbhQ)O=)|u-e@)2-pF$g
zg}rVc>p{(+;n$$SPJXzcf!7S<vDO$>r<*F$#0S}Mjb_b0c>(cNAFYDf=ao`5FJG-F
zuP_N5B(<)E7k^uP%W)t}3yfN^+D<wrMck8LfO9NWyUtKuV70d7o|xiU#DOX46Iy<O
z87Smeh90Iv&;7nkNw@Er)TGuiFDP3Ut9O@Ilr|bYv7+)SI=BT3U3_p$x3fJ0f}*K|
zTPCK4ON$!|i#l3n=meMf;fweLmu>M;oZym7(c{J`oxgzfpX$fJUCW4e(d!!&Ok}8|
z>v7BiiBFe<w|MdsDi6oUcy6k?VBXu;P*}J;E?k4wlEQ%vk<fgd!SRB7thJzg)%r?(
zUTj%QesMh5eQwpVy5%n^&uzcBX}qoDJfl|UogL`f5OaEW-~Tu7L}YG*Juu!p(7&)X
zd1VU>#pGxAby_*a4ieN=6S8ELHSWs8YB#%*=N=s==gy!VlXsn{v#)SlJDLabR8#UT
zYlYL$bjATRrsi{-L%uxy+JV7l$92t~2B*bf{YgoE%ov`{IgzH{6O4o%{_Z9(#>ua6
zCdHc=C$Qn+{64uGzemYBm<TRzdiy&I!I;jFr!BNt@{cyZwk_1AtE9i`iazp^xJ-0C
zRNY@)>h%;qlzcLI%`5ezrn2T>#Vb_iz+xS(fntsYCd6_bsXM4l8D<!z+;T=v&Pguf
zI$M*PUtW@RE`?mny-QUqs*9@i`32S&vpp2vaCk}@!pnQo=Ty*|?mIs%uP&{j#VKw6
z>1-DTIs3m1J;q9!K96eYm<zJF_n7p=zTay>mQOb#dMe90gQezzveN2$SJ6e8HQ6&y
zI`TQrT|3&N&ui2N+D?Dr>@$06F}`Uv(3G0zq<ALWvC?xc1q*B#?<`XuijUSBYX&^6
ztGbJmpU>;u+&jF%J#y{|(X0%%w@inM>y7nQ=FWwVu|tC!H}oD{6BTtuMY^dKZFGwT
zS=#6<CkIKZoRZ7-koH>|GH@(Go1L{9y>ztGJgmAZDygEP+$2=(`yBJMPG7+1$><H$
z`l{+Pj(k#iF8&1iBi*kB?h8A=6b-z&0Nn<=Eu{3wdh%@gKV38Z9${?@pEJB-U+bu&
zt^3IAWnEKEBjbm}E1^hBPpMKE4tPg>qO2hZ>6_eYkJb4@vVX!a{%Oc}=uSCx06V-*
zuf~_QbwF0j%$d~++q*5%-`_C?(^c5j#z!`V#d7t(I+uHzdZs+RW5(L5?wEHvw%2H@
zDi<R8>viZQ&Usg0-WREjHF_sI?6Knc<zttg6Z6~8d-hM}<SWJY(dM>uM_erybB(Wk
zQ}=~M`4-_$4ox*hoo(U21ig`!yV?eaP!1c~^7ClR8mcue2RZj~&jokMNCPk$8xJ+(
zL(>BVI<dTTc*xmRU)C_vJh27~wLbsyuF~WST5VOhc++@oxO&5WQ@ORgcH2f;m34;J
zbeB8Jt({HCu>>=e1IUr?Pof-Mt*uSW@zc&biR>}W<2|0xm#S_$hyZkascX_M4r<2}
z{=UXC`*?JCL*6w-g;kZshJunJTb0SF&0C{*2Ub2fFc4YYrY(-FY11AX88%l~4Ry0K
zAy>4buCg$%R$tcWD7P6J`}VI4KioGxdcg?v4kK#gR?r4Zt*nc9qLmjlNj^%sL<{Md
zHQSf=8tWb&pYsnm%s61qKUiz5ZF6*vwhaXJ-7^~p5`jT~d1$7%Hy-N6L5&4LNAEI=
zskX`(4>g5tgYCYS8cRbXT$}{-%u_hI|4p*UBJcG0<%0y$?wTyBWuxF|QfXoQL}c7%
ztnc%OCYwhGJN2QN*>;b;-(KOEZf;%H@3pqIomX7fV5u`%+nxT9ZOHFxGMO4pbrINB
z%BXjTC;h20{S<Pq&aq{(c9qHqqnN#{Sokp?VPoF!)@=1pZ|g`*b6)4fgX8|uL6g2{
zX12o}UfJI?oieRv=jT|W1&189Enh*J*Y!BF>US8yrd-V{ZK?pLk1i=-gBx_`_`JUL
z`t|)wikO(J*FO8KE%{Zba(o6DZeREm>a!!eM$b9}EX}MXxBg$B2Ub(s6)rLtmg)`p
zc31x4e|9#Q&v9gQK%Zw*^5VhMPo8l|7<5NocZY>e$1Bx>dF<0@4{N3;X1X9(JMmcB
zFby&P>Wa<dSIoxy4Yd_*z80$TQAcle<K_Ch-1RGqH?LcJ{k+pySJmKOwz+M5mAU*z
z+qY|A3?n{nhL-&b#{QCZDCguG?qO(mw6+_399@5JgEQh^?hWe-`E;N={K;gIJ{qu^
zwK{EMbJcGgHqS!0_*(KeI4cnU3v;r!rOVhpVejzN#%lws9EK|D>jTgpekrwwtkb39
zwA(Z@`0*^<krHk2jQM$d)O+HkQ&{spdnSB(l;#e|;7Q13H%Wo)#$D1VNh;%&6oxom
zDp!@PL!LN<t(6X8!x3Yi=Eha=5oJk-{7}rDI*jc{BAA{^+(9|htOYqobNX9WMwDr$
z8Fe}IWX)jQ1vBYfeMd^CmXzFr`V3{+)0yisG$_+!Qqk@4{Y!?(!x#;+R$fMp7qM)l
zE$R?MHa(PNuMj@(MqenI42oBtemZG=^G)<e1v8i5DL=&eI`|Q-x(}1q_ur`77MTkA
z9(Lt`6T&rJmp{K^rT*XYSI@1<cZyq`&g2fd^8%~O8k$QPQhhkxywrCw(V@lac`s=I
zStrMdJCp0PR&y6GN&ZGuDR+Vn_&O3D2gzPx0<SzQ*R4CjE^s%@jhf@2xf=9Yf#b$D
zoSYNIOqm(A0b3ZMHgesgTM^NhmaD>4Z>TI8)FxV;jkVVNHt)#!`dx$KK$+QVtnejo
z5Ho(e#bd4zHOV_|$p?`%_IcIOdN%DAWBHIS5lJR0(i*!<cc=GGRVg<@!PFNtLZ_^?
zsljYDlF~s>Q9MWo>OJ}8<5;No(-&|)UsxQ`CQo&*33~?S0wZ%ZwWiU|<~8kC8SPbN
zqAK}~HOkW@_e-r~Es3<;Z`;&;BqjGbPXr@q4eZY$FNi3${o1$k;eId#(Jy$v>~HX1
z`jnorYbB?k_?nGaq~YmwU+9X_xnp!(A&%v18THYVpAYCGhhWc2M`w%LvhLl^A<I6J
zY?&+C<q1P2AWGZ{QG#`n40k|ADOCWuXY+{cXC>mS(YjL^I^UbF6E8h@q0H`V9+GuV
z8rVsyt?2AR_)23Ql9J1bGe&iqmCz}pQ8~ytOj#!s#aLflUO@W?3TMwgzYvCsBCR+3
zn8TSYsg`A~SUUUhj3W<I){7HMc9R_IMYgRZoAc>(38ST`tiVuN?<qJ4d*fNB9<C`#
z**V&9N&==GXPtjIGB}Z{CAQdrTkvcxw}R4@lBy1NM&tn_j$y>iyqm#hCNoQugGk(v
zW^>tAoAZ~ZXG{fxpQGnMhd>`spGHT#E`1sudcEt~LSvy;U#<^%Ho88<&!zbhjD!En
z*kuf@cmFwQ6&-jCuk+xRsl~UzYc5CogQJ|Gmu0DArOJh&;p$pLM^pFauAw$hcYU>W
zB09V-FmYaSQ=P@!ICAmS#JW1OrOvi>!`Q(Us3t`-hLlesWoKp{m9qJz3^LS%Qd(zf
z8k5q&+^hn8uVZM-cx`Kasj;Zs>hShkymM~1$xvu4Z5(mgWBwHhoXH%l_mBAe#eMPd
z>pC3)SilUV&{j3%>q5@J#@3cK35S2!-MY%<n4NRuR6t&n=XG7WV=%23Wag0YDA(!b
zJQC-orY8m2UI}jR^6qk6=GT8?^L%en@@tBkd$^_eS$MuxSE8F<kzC%ssjH-}bongn
zBBzv(qb^KK^AKj&I2M{0slX)VMAASkom7$6<`*U}pEUZ+I8*+0``7co=6Oq>{JX_p
zT;Vs&x|(`+_RSP;Ja@zOGunLn1GXPJ^m)$wJaKE$$i>TNC`a<T-@-Yj=OOY8eqOgH
z*5*jfTuH~0J(e^EWY4v4{9Hqqr)9(C%X)YAL|23YBgNXPfu>Mrg~emk7R3Ecz3%AR
zwt+p<zWV0k#=*qI6&vH7JBQX>+!Kh0qRzEbNB30wN@Ibxt;1dGqb;lU_XOkUwp9Oa
z+#W-x{Wh>yNP@PBqpBfm<)M{&y#N_*Tr1NAOR>pNs(jZMT-Q1K!R0}B5DzOpxZEpT
zp$Ye@{{6$r!SIA@Ro{W(m!8o^HuSH#VpMtK*V@SXfz?;yU|I3Ij^#Lqa8~Wzo8K|*
z*NO*}KAdciyUI@q1IAHhcAqC1z<fWi(1>F=D@$A}ZN1)2_A+h5M6p(jlQ>8FL{HL+
zb2%{#IgKHd<DaIn-+NO|8cOr&mP{ITOvh3`OrTY$apa^rM=U}9e#Pce3o6UC^;5xY
z8V`Y&7>lZ4@gZJPP#;}0<nPK*eEM5iOoU}Tt;CaTPRsZ-OP4c1GB+=AFcSHP&ODuT
z#Tgoa(wlWy>E^8LNWP%5&Ov^#IOpoCP)z$O&l{*}EUPFrS44)(x<t?VIeoq}Upq39
z{2_4=`t}QGrxMzIo3VM|Jj|>uex6O&4XvCT-W)o2pD(;+*-UpAydNW--Kz>;c>ejn
z4@QEJ{xYQ(ky1YGmQ2q#9emhqBoam6le1078l=$ExpB=VuYW<+tB(Y~8jOclwmT`E
zKZsYJfBwb%NGLc4*EKrnr;bl#g`YLoBz5AnEd(8yC)P_W4po{ul@)f&%p3=eYO{Ot
zDh=AeNb`Fi(;6D>E-O|lsgd;s^>4U5rQvgC6np*q9^C5d8?+XgYuLC)^j-^kH!3f)
zO*5;DW$WzJ_F3xy*Om5nlv|2Q3ynq1p2BN+jlrtZ#e>R&BSV<&Y4h4+r#Hxz1<Y^7
zHl&Vzl`Wg;Ji*)?NIgAkvfH1NQ{Q_1x`CzKXyPk|GC3x{E$6^OQ-?fh^&dNQWDC59
z@52Y$n^k3RX32lAT<$L_F7>?8=Ek|SN+mD$pZ-HZWue_(%;(aQZ$+K*QIsfn<_z1h
zq^!y5d&VM4%$w?vOoBKaiwDv>MoV#7L6xDwU0~PxR|L9o%yXNhWzm!_c6D*Hy9gD$
z$vPkJTht_=GGP6M>-yfN*gy<tV~YwR@=&H4sN$12@3tp-3aW!Yh+bX*o^L`gugzK?
zCx3{nGrNevNK+GTr~&8y8ZFCKuG6h^d0j#vK-I^1UHk$*XSXi7SfSNQ?RIUw_G|cO
zOP<D(_~n7-me@6OM!J=ab^w(iUkr=%NNA<WQ>vTuiVt`iTAnYQDOG;9Y=gJoaUlP*
zdA>3KaGz_m-CkB-m3L46!E$q%dw5OpxhuMN&trklVp+MXYkbNxvLV(u)LCwED&_5c
zmaZK$P@aWm1bqA#S-cFDp3$CD%S=+&ATPD=ca7+@ZQg`d7i#v-4tibovMSZo(A*ka
zzEC_cS>~?BOykWeYeio$ao#0EF_+$vAMc+&v8x+n=Qqf1A9Es&z?Bpj-l#`RvxRVE
zA0{mH<asSZ@;Kq-v-kqH$bkWE!IKSXWPiJq%91W;P&#ss6Bb%UTWYB|^EhE>aJGIr
zP&oO$tfyC!KeJET@xOrn#WZ6Vz%Pj7IRvRVX=RHpV@a35EILf#9-pNO60acC-QdCr
zz-0ZXzzM)gSM!*!$fo8^bWS8|M6+YkW*>JZpF^3jQiGd|c^xr|<AhBR)R-60iiQ4S
z#~y#Iu(C)odaCy|zv6sAw0yiF(b&+|@bTo+xPcaTYS;0p!O%F<9u2ni>A}=vQj<+F
zWp`<di<1AAeV%YxiPnv&r>>v@lCIR=-jX_Bcxa@tB$VQG3UYW*d>qsjk%mDlO5pKq
z-Xj|<%u4d8Vq+vqIvDwiIMAA6&NAdEF&BGd=3iO!EAl@h^Yy67+pIl}E9dLnw(-tH
zLB+pzbX(lz&fn{+n#xnTi<6D@wVmEdH%j+7N_PkH#tJ>gLQ0TBvm(ym7JQRLYBIb#
zJ<(m=k)G)OBVY7nCc<xoaaV#bGtI>@%9#l;^7#|`K3TR|cS!3CX_>=?;;oT!%-cz!
z(CNY+b5)_K%r@q6#+z4lbq|MDL@n{gGAKJXr*Ej<x4Jm3H^*C6C;D1j&RgSI(y7tl
znq>&Sh#tk#IJ1t6I+fL^S9kT#EChPGV(Y9`_HF$mtM?u57Nbq`t6gmap+-w%VtRD!
zmbN4uX9VsE*04_<&t)=nr@AO9ASU%=-CfH%wseoItf@Cmw1t<4hDZ8D#JhE*dt+Oh
zwWc8$oC<Ys@+Tjs^vLk`HPD87=TmH>iFYB8b?rk9m*p)F)t^bJ`6B(1hL6>2Z#<LU
zOKcxQ`U6P+Ritmtr2no&a}J+sxFm0Rv-vFQEf?#LQWlq-Rfg*+kHueWibMr&<b$0D
zk_@AXj^mZq44x*ajjeli%dIsOw0c|j=I=J+r?p5F)N3zp(29cOKkOIVlK&u$2cB`7
zUqV04qr1Zr<o%~YE=wyBy8N=`Mqkb9XnAFWp}f5Ai{dj!jwIKAqq?-pR$XqeLQki?
z6HlSM28<zT@uQW=^yy+Mj<X`qN186c)6r-&WTpK$CI{xw;9N`UcfdW|<}ucV8szWr
zd`X45thB;h>|8ZI{mBpS>2<E0nEvF6y}eD{JC5Bj)H`bF-hTD<_+2jol_ga*m8FIn
zv;fv2l|7&c%*{sE0+F9%j%uNg<_cnJ3srd5KC{-lwpZ6zRWT8%Z>p>;X)t*rg;me+
zbsP5brRz3!u7zoLNZ`tiEu$mF`8dkFJFo?}Z=@di_6=C)h>l-^4wnL52YwJvA$QD&
zAO(M(g}VtSx`7*jgJ<%ts55DX^?+5PC8Zk!wl#(xpoWO<Gw6Kiti$z9ZOz*L2S7aE
z6_Td*jDz;uU1k$DlwdiJDN>6;5&rn!)+GARds6wouHyG0{r&3weM;h9+(xGq(x}g}
zUa2YR%(sMr<Fi&E=F>hjzQX(E6<)q$nQOhEd;M!6CgJ(5-Qop#nOD{YU*`;r(U`)V
zTHFnu+ekB$w5F4`vuClv)Fx$Gi$SA)GBmd0W83uMR{NNv9Gma^$MV#6hhA~4YnWJP
zz53%Z+FU>9QSGLVX5L)iJyGf`P5z?0(dV4`6t>d`ec%nWPmHY1;0@`Vv(6O-mp9kD
zExsx}c7M6Ud}etgJnHINgQcXBH1^AVtkn8!`)27#oHD&jFBnd*Ijsx-kr$f&2=6G^
zr+L+?kn9$EUZUiKx=bWdxSLXMHl^wq634XBTH_3r`kI{$e`&B8yS>dpW3VY6)asPo
z-kk-N)vk(<R@K<e9_Pui=0<ySW3|8DQ*16)45v>;n#{vknpElTF2#YhtzvMVK3KXT
z4ARV8Wj@1xAv}&qdQ-NbAS$2qd=5g2R2QaN&*^o(@#fmb$bf%fRb+XfqIt|4YEG;Q
zRSkQahZ;QAnNVHSY)Ewa&btc-jm<c{qefT1Tl|Nq#atWj^VYgopZ>|rP<%zdr7O|C
zDx7e|miIOEUK9%M>l?m2TI(sa8#|i<ACC`stl>-g%x(SDSI8sjapgMZpVVUS%RQfn
z^f#EB`<D4z`Wns6y;FW?f6P^F#DRc)t?+#e6?bin_g!^(eXM&^yzc{t*TtOCmAenN
zhUX&D)w>V1hGyyBbDSd}wkucgemq{ipgMseydnRF-3N58fg1b8$8}D{WXY>8J^dN1
zU@SsVU{CmUtRW`Sp6sc0YEqeDxi8S}x^-i)qsKnwtntr<m(2t=oY*Mhy1EV5Y+v6J
z8F4u4o4hOg5(_&nn}aGM7XJt3{xZ^(c6KO04bVL0Vifror7X!ygC({6`cU&|w5-0|
z-|23h4W7F@fA!WtqRY0tuEx10Ff}<l(c0I(t=QgDW5OnB-&k|oGDmpS8tHAUZK$^|
z>+9ZR(3X$2cCL@0=CK|F3a)@Z5uR*V21*EC6lo&ykZ|bqqQ&h>zOEG)G|jEcUz_~L
zZ$o(%dac*}^;+?{<bu=rJ9BSiYcpz;Zb1AVQnK@y%P9+Kb2y#bq0jWfhl4}mvWC*8
z4u8vhY`oJRZ7|LVL;fFo4B>{cbNhA{Tf=5kwciq5*EKp)Sy3Sz&esY{=jSK(!JdS3
zl91O6sJC)j7l4msy3)uZnd>E~r&*?MDdP=8oxagPPiIBEyIzP(qvIa`^p5UuzrkuB
zZeJKGajtC|UlCvT)b!TqT&QoV%<U{O{|7G7TlmbyLq3P8Z^iZNz3vSYz1v{O5Ssl6
z{)RG_Kw7~ki4@jSRe!Z*@`AO=$MVG`y2+g*;mXUNer%1?GIql)pIVFYY6tD#2kniZ
z9fgs-9d#|83rIVZEA7(2hiwwF7Z7tKGb`y4U?-$T{9AA?);#L5G_=eFJ%hfnwhDh^
z+d1_(L4CN{-t8K$@lJ+9Q@-vQZ+~&qL?XH@QK_wK_q0xWY<(?*tF781Z^F^BqFJn~
z4EMU)x*9vZ9Rtbx?ES$&XS2yR*B|JDs6Zb9#gC?I8~lZ88@(e%7nB)yLSk85jtWt#
z9O&+>Z0oKQVyM$Q7HA6hRy8^Y+ZTpQoa>s#XIs}NVpRV-#Up*o$~~y*l4V<?E0Ps{
zd#a+(8SmZRh1%bA&&3eGl21GhN=VQ8r+ni3@gZAnXkezfm45fn1YCn{ZevZ<=Ne3S
zs!g%t?v1U?Cwe!<-jh%4K?@tv!g|(662v6-96X?#X|Y|YbXtn)Pk#Urm^a)Dx@h+J
zp1fhlE$0T}Z7JR`I^|z??KvXw9=rkm%6~<zKY%oKO3OcJofAzVzN1`$^YtUe<j?#L
z-hT^}>6GaI(EHSwz<b!R(Kojt_|;i`^RQ*|;OgX)`C`9reEV>wZ(e`P9cz(Bs&68V
zIQcrKTONNWI8FG(Al)fiIhJx&&Seti70`^!>WVWeG3w;s7kA<o=P9!J@=P-A11~?R
zDe%VgaDQ)kmATqbwd`a=WtY=XUeQ=*?Ak;*Q%?7apW^n10o>{QL6j163Y3~s&BX_q
z()Ej{)KTQ-QU->xqY5Wt-wcZNxOx3m{N{V?H2<O8fwO?iNy9%w!9Q<<w=_$?e`_pT
zy~o$4#Xilm&}H~*6RAkqD!i$5jrE+3D1TLXMg2F&#68JMWgeHUG**`y?D%>UTIxF7
zvTUaLXQD@Y23rTm$ewK6s04bty|JLZ&t$G$-rPIp?dfe+qe!|6Sv(e-?(6LLwZv_;
zbr#QXPh_IEcRc*fOvNjZDQ&_j{wQ<fR_ejA-KE+kjX9h45A;y_0ktWUYfX)LX1Kh}
zg4U@2{z$jXKuu?BHzQl++)U|&=4$bb=BKFHJm?;nfa&#D*OYimZQ_}0$HuNjOX9s)
zgZD0Fl3Qd_^Fi)Q7l>Cie^MT&_K*b8qItFK9k*B1bcaj4er<VmwRp9*rhS#!Z0c*Q
zsHmX1%>nVc<`3A-OkYAawo27XetEh4$^^gUZt;5hBT9jK74j4pAWxTq**SX0GNJ`I
zQpDK?nf=k&CC&KapBE3}?87NVuS_pqary@IKSKV@{cM&~m`#<&qZ!k@BJQVqIubaa
z)ucCFzfFI;;iffXcYFS|>Qi^qh^$7OA7|p=jtITSaMN1zw)`<fD7)K3lpr0k7jaz5
z9H&30xt=M+w_-ix^Ni0Ejx?Q`-)c^a637(|RlZaI)BN8yk#2!EzZdt4V)@2~H{yzd
z-`nl-jq-B#8|C5r%$vMRv)|;+>N9WPHkg%~{x3^!U|Y$0Bd#pOHz*4zpnSkR)^ZtU
zMT6$k;zHEsfTmMGPls>aCp3Q)7m)l+NL^L7qV5Atk=lse8L10@qSe>X=4|yfwqXJ(
z7GGcduy|zg0V<Uq(zZTd{6K$*bDO|QS)Fn&Qs1cAu8{5Q_lrjHUyBc6Ck1gU2q`J0
z(9K@lc(}Hv_TY5umifBsz(;>S-C7;%gWRlXod#7Si?d=3mIeAw+AYvE=^k#=<>tn=
z9b>h-4w`Bn=)ZHt1wZ)ehKj3_zr1_=j!xwF<HcFcPvm#tc$FCDlqV_OwdP$1OeRZh
zL)-QTDz6gGyC*)?S<v_CxeK293i2yk+#yyd-ys=e0%syGnzH*&sz>iQqQ6z$V0q`4
zF#d_f?;uuzjD<5B$=^op(jB?$Xx?r2-D**tmUp<1IS^|WvBF$tI%tQ<fO5hzJBs9?
zjj@_U$AOWMCdLreAM<-EOck{Oy~AVB7L*s3wI>{T4KTFh2DL()RhUXEsw--p7X7Ub
zZ{5_~L`{`lG>Dp}s_>5JRNT_q8rU2Pv=(R!8Y=3R%}tms7N+{!i#u@c$alyNz$Z;g
zGNiI2RT~t9?21f>DMc9+iEdp(z*AUIT2NrOa^7ZVz1|)mBF)YDF^{gGw5Y5jeyb%G
zL(W0Uxv{(!gqiE>Elv+;n5?NJ5~B^_UD2r+YVfhejktf|d)#+KRE&!koJsE;>b7_O
zmB!2FMV;nq<&X5%R1vM%Z2NEZx9{M94WU_!@ABk#Ciuj?al(2c^_7zK6<W`L?^OQQ
zW)nv7V$yT^&*J%H0BKw&ek`t1zE6G1;0A}F9XrG&^zMhM`sa$yF<SCB<}J9)VewMs
zT(jA_McG<fXW3A;65sBJh4v)AC8=w`R~Y9By<0tW*_HX1Sv=Ou^DjFxgJb<Y>TS0n
zIDHq<Y)pMaGvEY$!vTM&r?2%FG+v&6xw|=&1U+6}H*+iQZTjg?wK6U3Pk*Yqm0L-E
zniijdHu8Tk#~kFIl^RXh*9&n*t_spvmNH3VOE2UN?|6q3WmSV>B6TsSKyiK0KW(k8
z9di16tkI6BwYNoIxV+szT5B<O*d3kLNPEQE7AtoT9`SVd)%b(%j-DESEZk(PuXiMT
zjXrCmGt!ips4A{6?-}u0>S`TfpT%plxm%k$d#h`$?%pPGy))!+m@2|SL~Sybw-f!7
zsE=1*`%r0ZH4g$Db7PuiDp9x=I&SgaV(;449hf|~B|1N&yneb~47iuIb#LfyOr8f$
zhQ5Ktg+GET?_%z|OLHZ2G`i{c=PcVs86QoZ{0@na(<JUi{Bg#|#l`9P$^ph@{Bg~%
z8Ap6@uBG^+6hEaod>FWeY$ypFKC0KBJ@d>lRX$)DaTGUIMkDrE&^cIBQ#%*z8FzQ}
zM&l_3;t^Hs>bcJnZS8TjBpkK1_1@v`mhtYM$x|5}LeQ*AOe+tj{KLSJnvdU_cjTDz
zpyl*#9uWxg((j2At-a<*-fbt8TP&w%=)Gg{Y0cBnJ)skTqmh%{2`gf>C=Z_AZNW(V
zIo|(|d{4YAs=AQ6{dkK-xdjO*%n?7rypH?4<cV%Dy|VjWP%paULjA+8PrFmR5xft!
z7vhd%=`Yg!k-q54J95`Wc`x4A>$=OG;*<1+&}_vBoyQlXw=mb;y6U#PBeOv7w<Pyc
zDbB|;aa@i;rM!7LO1TQ?O_t;eiUH28`GPPmm9uP>6>)AA_b2yKIYE`?i}JlJXII`u
zGxk-tTEtCAK;=_yuUAgM>g*uf4XkpqPx2fvv)762#>AzKEF;<fCN<7z8i?5#X->ko
z?1KKtxyNSZujS)MRt4Mt@5;Ueu&v@;S96Y}Bg?j|ecz8(OO|CVmN$9dlh{t|IJ>hi
zgb)%ENLT{|3Z;;;LoZ8NTMA)^F5Hq9D1o*>=?1;!6<WH}!fjt^X}PiVzL|66*nxN7
zeTj7>jb{Ft`RAX1{%vNq53#o$>x$!{j-jBKgvT)83@ysEHwBuV25+%u@WN$7pWV|p
zc)_xvtM>GHx^`UHwRkV?M`CZMFB)xGSq!*sR+A;Ws;$`RHoB}{NWt_p-b%Y0<!HG7
zw&ft*it~sq15^YS|Jx=zhR@D)B}WoV9sbdl{)YOo|GudQ$myA6s>^@z7Yk`W<R2xp
zhEZ}4_X6g-2Uc+CM36Emmuf~!*rHqsVwXaQqS7*?rZ<Sri<tOj{ZJyivXB@|<W}Yy
zMw5f>c=VI{R*&Cf@%S7Oz189H7)@?68XsvYY%12%XNNO0)l{6wPU6w|s@H7~YL<?U
zZn42#0O}rxta&MSAJ%*9m@-u&XH8j~jcsFs8v~a*q7lNS&8G<;3fl{}b~f1&?z<$@
zDf*qtL+-e;&QJCdV<1rafMgF%Pai71de4rZ|9r<ifSx8>xr5*tQ3b+b(dRi%jY~y7
z!KSS?cq757q0)S!_8Y{E&RH9Fcp40KiRwT{gFR++=v@YH$f`{k9mU<B)~c;OtHop&
z9R_oiOXGJXvR0$rpbr{N4z*JoaKzebPH8Y&oI#6k#oFSeCtHv?IS@2XZ8s-LJp3t*
z<g}T##<51kQraydj2;QUBV;z&vL)@OwyrbRw!YP&H+xcxQ^~Z!Xf-=dZ4i(4?Bza-
z@u`yR3}lXWPu}f_v`^rRT-`a;UQCP?#8|W#j5kC}i$1Lldr7vV(7Yn+OZ3MY8%uxw
zBtBB*Gr9M;1K<ebr}6}5VW9?lrt?UwfJWq~nP`hyHODKm8OjxCYz2#aW(<T(OdVb{
zc<`2qRTuWOtZWJ;1kTYCtnc^c24eO|Em!MH*EkZPfri2v%Z9H!qo?=m(WTvWv1L|g
z-VxP{hG0wFn!0Y$RU5WGc+ueKrOVe{(qE6T=-%$cvc8zhp7?1~U;Cc%v2*%*_TRQ<
z)uFzy+iL#Lp!l%QDz^3c^VHr5iYNcUU4?hq_ekA#v<K`36Crp#uFa$~upq|!mR2px
zO=_1H#p2a?E!E;%)pTF5@0z}`Be^4QgdPk%kAHZ3<Bc~yevq!z<SKGGPU9CqPs_;7
zNO_#xOgeZsQXZ63Rv_hUmggZkWfG<Ku#}^6%2wpr%St^wFVAOK$|G{hZj`!;m3mZ8
zxdo+eWqBTxQ)qk6XL%l%Q`REoAWL~-F6CKr8TVgk;eCoTIl6mzEw>0MXCUSNN(%WH
zDaVlVB{}6hvKafvHX`Lo8BUQbR{VygJSC-+|5_d<CdKcN=PTu3mZt!@t2~9fJbsRp
z2c?wqZ_87JXL%lyQ+`z*#+@&;)KNL*Zzxq}r5-++hnQK)BXY_K)MaO-9+grQVL*<s
zJdeqFXnU$yp2y{s_mHAyDNoQ8teNkZ&%y};k1=UCFXprPtR-s^EoWSOarp4zBS(Vt
z4@6Xc9}f$x&5+l{e86HNF(|jt(BCgViu8ThC2+rDDeOk~D;`C^HD#^hQR1W6l574x
zQqE#2PqCUgg#prBmRye&1GFhwPUvo0s+-6c63Gkk;kFiQLvMmUd+LK((GW_oXU&RY
zV%<b$x|2SA$)WL3c1U_cR#*>-?mbwtG_obJ83M(*J!@2vl-0e23_H~Ny3%>b2Wf+d
zXa)84Gq*eohM2RQV}huZt9GSF?P(~a9b%@nY4eg}DtFK7MX_P8&E|mrD7kc1D>WAa
zOCLf5x_;r_dAjz_c^9ClN-Hx{2G#0|Q$2dOE**)swRZ?j9j-{QF=fc&FoAqB5(;<L
zH2I9~XhSTJ@wn<Oo>15o&m_YgwbeOiq~ON<rv3yUdZ}V|Hmqle8)S}oHnDpzH9C|-
zyzL?7FMUmILaXh%wOf~!75l9x{_fc?w>O8<{`oq_oErpOVx9}(aJm;Q%{184zJ{<{
zH0yKU5$+4s1@%px@jj`Y?wnYkHtG#u^If2=D&|uIbkCt1IB5Y+YA9AD-vPx4v|={o
z6w&g^Bg`SayATvx;-aI)Hk}?Vtj;uxHYawsrvyW5Akz|QzqYr%*c48B{dbKGO`lWr
zJDiEhqRrotZ0v<QgeV5^7(~Ay&C<vpa6E*23FFRn<F5-J^W76E-PXsJ`K(>%p4$a_
zrgRub3mvea&>iS(MWk$eE+9eP@K-tN9809Yc4o<*0idQBCVJ;kCfSyET09eEB<d5>
zDNCfoS?{P%rfXVK$u7OJE^2M+$R%TiI(+o!dfy4>f|0mCka#T>aR+SGro1ZxA0wyG
zqD7Gk&Lj^&K|-1-2>F6J1mrbo4rk*r(a~yc7R7?4K+zTIX;d59{7tQqc0Z7~lBg)c
zl)zl+7(-aQ#a~PSVGM;7Yq9cI6+a-~r#?Cx?K?9Ng6Jn=1B<PLT{^?)vYngmp4KnB
zcRIEqgc9XHp~Urai74|>pmh*$2+Qt>4UE#v@tIKFvYi|6p(Rd~{|Sw@5B@LUc@Do0
zk5gY`aA<r+r?J-LK)$!jHz|gY4>m_;&7N;_v};{qrK-kYtE)3MpYGH}TzZ|^<gg^z
z`KEn@K)(4R<-w3FYQc-HBeewA%~BpLrxcK~oaK2)PRXLw1WP$8rwky^Qda8Wd3m<6
zlt<*0F_gkSM?ij5PC0;52U(uS<P_STH7w8La!LnMR<e{Q<doHl7YN~gM!BV&;=##^
z-(e|F$tfwKf<1Ktd7hS2^f>Y4T$b|H3LJ6-tJYhv0KUZZ+|~GgfPMcd({Jf_{0^=W
zV6v(#o<k0n!^`L77bXXOy*`(nXt3AUDr;Pwo+_oI-R0?WdGryp*o}zHBkirlO>H)3
zy!1lW<@d&XH~8%N$yBNV6ubsCUC!@D<P#<&m5L!{P<2|`phInRC)ELJ82hO`u0t&|
zK}Q|$Xb#rrGE0-FB<yi_xB>>)7*GxQ*~PsUXM1bM<~A?tX-xW@cl(&di1up+{i5>y
ze0la1f%Zqa{)X|aJFdqz4QsR*%7tway-uGdNBY~E)_0kWHho=TJd(*8w2m6H+>3ko
z)8=|{5?`N=ux})?K$r~(t8xa{&cj&PEcVP{%<AmEsMK%@%1|5a#SZkszHoHtgc3w1
zaWWAzD>LYyw)ADj;?bm0t@?#FopZ+YI#YJ{F=a3k9wA2ty4zQ0gITx1Thl&l)H<sz
z#|(A;rY_9$b&#4m`2%#tgEsVuI3<`L*0m*6$=a%{sB`FaRR*2auhxyKM_W<Q=jQs-
zO+uAZtq!>dy(PGNIK-co$mM9cR{_s@fwCydqfXwq!I%`IvUwshBe5qsawcQel_*r#
zDjlu<L^iXO;jh-!Q@f~vQ5(fwEL=)D_4cl8yT#cCoq|!_SBqoM1e_qc+(aUgpd4%s
zlOlJ6lQSE`Noo@y<5K=41_faah)l0^;j)Z?l8cEko=-RRHlXCsE*`P@>ciC*?JF<U
z8md})e?$8Qn2NXf6_O<jmWu_hs5PBpXQx(gs;$-;0HIiVfqX_+qciDhYC%8c_lbg)
zt&=IUf*3%-p?8c@C27D_W2@Gw_0?9pdPE$lil1MBsnDpMybyAevrAVcn>hCzaJjb!
zF~`8KX}hRI4`rHluwVJr=mq2Az;Zq9SLul-FMjrcNow2NM2?_EyQ!DZMENfiQ8c9z
z*Lpa>lgS{qh1PHyC8DN}gan;H?kcT<RZ&YguS%*Fcg7*YOv14=p<!=i9btHu&^!;}
zogNh~CvnC-N`ITPKBxxL)lI36R4~f(O$}WX_r*q=KWujg>ce{HD=#@~f&95KkjItH
z3^uNFOk}~Z(pubfRC#{>s8Y!F;TpYeZcwF}2EGVC$O4YBkS$S7_`A9G+(bPd<FQaD
z0?@_IXq+7BZSR`NvWGW4k!s8#`m+%R4^GiVs@Xh{xE}c3TuZ3}2_7iST?@ii%dXWP
zUg^v+cGo~Tpw@a!VtACph5_y6sLb(f&f#6;3C8gl?~}(rieAvMoU0466cet5HJu(o
zX->ISTA^00QP~@935w^8%SW&!kBHHq(HYYYp3?#tFySn;T~wqW86I#USuP$7wpi?j
zlrI=}ieh~+;b}BlYNIx9BnVBmiyZM=twxXN()*0Ys5_pu8tgiA&~9?q+TzX>jRe|(
z8eM#f?GlzHt+_a_la#1_D(2xyq)C;rd5o)7tD}UA=?sFV+DneqyES_4x7^&CHQsLv
zb*hxWyOkP1J{^!R;eJd{>6Yde_0UNm@k!c0^>mz)2PM45re2%~;ZcKT05V)-sHFs=
zY3=<@=>?Ds;B5oG&H=nCz(W{0_!ppjAsck-l-bilk5Ozsw|@O|r5BKQ7rB{pBQNa#
zb9pNkizprVtNlTvS{a*(7^?6LexcE*;^M0)jN_|T9jC9-3*TJ5_8Gtuk-8PI5F2YM
zMCFR<)TVI68+(F2hceb3zidDZx|GRLa`TsO9zq22?RSrLHcz8`EfkRhC{Ou2sIJ0{
z=enTd^0j)f8!e)KOxn(%Sf^~*5qee^N)rWqXS}LSw2_|Y)~tE1bg!#942T)DXhOyW
z4gQ5YKPzPT-`%cyh5!B2Dsr=#RC~>(zk88)3-a#e&!KVHCP{{-tYID*2{%QfP0{{_
z#%8@;Umq@XG^Fau&BtBcsd#TBYy$c8B%>YfpMrnB2dU+0@=Neufkt{{ZKf!8Lyc6q
zYFuZG?Ab%k+Pxb!4wJLwT=4Z|h0XX)`lb9e#q)|gVB5#2Fk5ajyfOv0?#Nc$bvUv_
zeKvQeR%<rYnlw1X<au^9Nj%tk@~{#*vo~Oc+Yby>Lq|}U<{ir*YYPju888#y&1QpI
z#hV;;7FWPs2>ZAyj<2!RZWkXAs$#?$cIX3oPqW$Xc3ItR2_k+2TM{fW>o-box#LE$
z8FfyAo;PA{+D^&?h3vxfVX%o9#wp2U_e>!zDBlqp6ZR+$WXZa7o!KSR-y*yphb%)L
zNa`ZBU0rq6u4+SHH?}?Atg&f*>0Z>c3iYf;JwCce#zgl!&Z&SE?Se8|$qIH7eXCkF
zcPTxhHEpkPw7MHIN-hkJV{LZ@8h<*z#Rnsno4nOfaPcOcH(;o7>5TEFD!caEaf>^4
zHJ47i?H&heKMi}AySStO16~|2`165y!Po3_hApDc5w(QK^DPabVhE3pu*aLS`;)lW
z&JQ63XWb|+fUn36-4<3(cmNqgqn<$8C+ZGlaupncRFT3-+l(R02GF2o6kBcGX;-7O
z!`~ShwJfglItw^OqdV9qo)#NTXVTF{>FgnAk3M2eE%kL<yUg}vkF(F$m>BbpSO#sb
zRCUv2uDy#rK%=(u_2gN2wBVPup(*mDl-+sFbm>N%sKmNuXP#OVt~aMfZEo9WQ`eL~
zQ^@!m7N^Z2OQ>k_nv0RbB9_)T*=*XqMU!{CeYx?@ct=Al(GtNigqyZ%8axhPqOUoa
zjmH|h8*-DGO_bwfCXpW^&Iw~pV-EAVToe}YPht1a{>^48ds+g5pjtFc)@zn?svVQ*
zZi7#s3v?}2b9W23W^=@#wnq;yQrD=xN>7_(%bu*y=80`s;^^=Ol^WIJvl^6?hfu}*
zBkp3lA5OACVm>dJHPqTbUv~%Y67JI7EnL5$KBqBil#ZnB!o<7RBMs?+2i%K2Wb(y8
ze<ac$c(L@bXR-SMhTjj#Kj7Jc7znQpwSZ8yANHJ+yayvn4<SSqbFws1Pi|6n3N3t9
zv(RiA-`?8XZ3-CDiPTiDi5P{_2UYwZg<tbyz42a`-8Wuy<wXvJVmkP-1O07Kf*RVk
z_j#gm&lzV&oGu^J+?SUBPF~_}!|Db;K}VYUJn1?l4R4gk?6M&oK;W^UV*BuMYxkm9
z-?F$RXo=)aZd1&=B+}(Dcm}i9Gjh2liOE9s9?gcy&P_v6e&^}Ru+3$6^QH4SkI8Qg
za=S^kZ%RWBD?2trXZ~*aPVzB#7pqw|6UaL?7NUWo079QW<}*0m4PEA`wVED}!_e3j
zvqbfJo!97T6l-jkYA#>lnAl_q7}xX>eSn+DPiJbY0-Ea7aCEU)`rXp)G#a`Gbp1!r
zbsP~8aQvdjR7av6riicfJ4%lLqx}{Ul?GN4iK73s`zCznfr!XNsyMi>AKP#^qqkOc
zM@=rRUvGYt#QR(}A5Qk;IiJTb+M`PG{^m7>zd*x%#1?$Yy8HU>3(ooa-s&xz1ofF0
z)<(?cfNAzMHX4`!hKtD5+5)Gq+i^GX%>Kxx;ks+*%>eKPIs+)3U`Em>+J2H=sK^6M
zftgd1k*C4Xkn#*+JK?w~VG%!XE^y?ia1X~_D_o__HqsdpJ}~G|=|!WH54h*1gwBt^
zy^zk^w>6GAp`y_V<Oi4&E^w(Za0ovz<_6A)E<i4)|EVjNO$y0L2Ez_7WTQZ5RD?Jp
z#xqNVMRiMr#rbIBv|PA(NEoOa5(YEz$nK`Ml)iT5s!*@m+PbBB(RuxK>p!w9M{H~(
z4&9978gYO0(MR21vy!#PBX^bF7#SJCc*5^Z{sd348S_*`YuI_+)Fz7)Dk&C3kv9q1
z96QX84XPMhHKrO5tQ=cUx-{*E&&(wA=Q@9~WbuqRwOjWldB&r>Z*W*$tqQDMQTjVK
za~Ss)b~cxOFfa_CVfh3YwTAhnX>D}%fnTD4Di{I~`vC+<NT54v_$d8RpmLZf{KZvN
z)+j$P4XJyL3Hy@O>Dq~PvCTzw&yI|K@N}axnj5M)u8cMgYsmc*6GvuWC9QUzBuZ}(
zu2drRr8nHAm$2pJrO?GU-E=Wt=sWt$>EIJ^Nh2Xi42&R9VS(~!7%(I;a-p4sMn)aW
zcNEuW#dw`TdssMZi0H?JvDE>Aa}T-$-C?mV;fO8C#Lg8+uW<TE%fRVHpKX1{w{)pX
zS?X!Bi@|{J36Cegs*q~E#s^!nl8wZNz>Sk(2I~eJ3o0sOVqq*!4hTu-@}QFD=BSW`
z@GlR`#1hpK9froXa%in)MBP)>A#}PfSend}?CUz57Wa(dW$mJ#8F6r{?T6%uT{&P^
z?r&{(hjDXdPw5}zJ)#`Y`9Cw6jFw(YQ@K5dnf@MTdi2xynrx_-lzt$Ja=53>gX5{O
zEd`5c#?cG`LsNazn&HGqU#wFf+pD>y$+;+pm8<%qjcab%+pFHZS=l0jrMB+4W@=_n
z(DYL1V^4x(E0z(~&{x3QDSweP29O83OD8VgWNUJCPF9hoD?7D9l8h+ld9FC_vQDYH
zQuY@2cU3)4M)S#7ywz*=4`-Wu5`n$yo1l38ODO%(i6b@|mU#4mH8q{B$pM#JX$>3Q
zO7}n}*cfm-J@s9g?2yNAikSV*-ejby!QuAMTY@Mj{5|(RI6ri$|2yXwWzNrk%RI28
zVSG!$6g0>4dVgKicTTL!Y4eR`%m>=@=QK=qM|N+ixp3pmZD)0pja!7~fZ1Cw%s#<|
z9aw8Nk*UdDHQW-uecR_SWf37Mt*)@-o8VcOa06nX2Th5LUSI&n6jBGp#hSv*MZyW8
z=PA{6f3H9`SKZLA>=imx`DN*|Q+w340&#>UK$!XZkk2#Z%a1i_OTQ#e*fIz^v+zl9
zECicjafKK|!QxzGgg9X^XowYk9UeS5N}^oz#!E-rH)!`5*K7CG$0LtvzioW1>RVo}
zuwzlp=&qp<A;Csx^K{zP{G(%QTpOlWJK1<=srUxUXC9dfY}SzqeBtiK8?^TsZm7C9
z`3)_(vFgd#O;z_BZq(kNeQ&_IWch$|@y|u^<ss+T@<HbqWioVkD1)hCJ5VTp0bY0>
z&%3vLUFai|RZni&UPW%ykiWQ;zLK8XKxZLWE}_$pvbF%TCwcQ+a0TVh@K-Y;6k{RG
zH{G~uY0t{>4c&W2lDb!gS3+Il`h8<d{7<@-LoO8==pPu_)HLLOlC-T{*N(1|GWOt+
zBGzqq)&w}jen{R6m8><~(OEbF%avcT;-M{{{LW6De-ovnuy;2R9o|bsidp>%xsO?a
zaW1_wg&YwcLx?EcuW<jx(hnl4<Th6FL4{u~Il^*0OfFzK)*{E#at^ng18WpuJOu9q
zji1dR$73wV(Yf09$}p~*gYk_|g>jVJ#&Q$@;}w>JTH~c2Q12c5p@_hxwQNI<ADjZC
zz;Zk?55~Kvz&K6LA;HK3hLnR^_@!Dtnd7ev#=~>?SS7=FmbC*>@7(uJX$O=IwDi$=
z`1oHe$0Kw2SSRO@MuYa{SEs;``htDobG7{YDLJHC9+zur0*qH#j-!Y_k@_Ol^0++a
zbX=qyr?#V#gZAYa2IDb>SB6okMH)Gp<M~f*#}njs*3!d>yZeykkZ3Ln4~s;D57Krp
zT6>P=q<14oV|*%=vM~l{NyCQn3>Tt4yTUv_^t(?y8G7=`U9SaSemVFW<v?lDMxG&S
z>1;8<51od4zYU&f{L%|g&jXx_L8!!hLcd#WzwNfl-*xtT@3!BKzkBWX0zz7G2I>ss
zlVqU<JYk+y7BP#GL<lVi^}MJzoAvWvwBA>3dc@4@af0ry$|umP9C?lYv&d_tq!m9w
ztG~@fc$;Di&eF3f{tYcoDQ-q;iCUP#;d~g!)>&*e@=R$zx%!>+&wuCUdqVd_R%et=
zs~LW7Cf}6u7V?EcJ{rxdENPmJTzxYR1XpHONA7{r!2zm5hFUuxt_r=AV84CA1#g$m
zAy?ggXXMVvs<bk_>Uoh0KWHWPsk1sz@?<T9;#sN*O}pxLsSL`Nj-M<ijUA#r=Z~I%
zlF|siNv_)WJ@Gr=5x=*OmLc$V_;KF<oy@uhQCG5Vt-dyRU1)KdYg~+9FDhO7{mU-<
zKI{7=#;J#TyCI6@!H4mJIA(#^gV*AvXB^u8yMHbX%kPty1Rn@q!XC7yCivtYC7-41
z2??ffp17L26tfvG-TX&o12X7J#c}XR*yysfxKDnDo6r?<d4l?QtnyB|QIq1!fcHMe
zQe<N(vaw|J3%W!+K{y|vxW1`$8@URUi<8V0?V$e%`6adFs9<-8PDoV>G=mB;Sc>RI
zbt#019O*JRJT-4v^WIn>Z&|DEAvbB3>pYISkYFWRV@+4>)cy+#Xa4$3)tT>}?pKCd
zFWEPy7S%ZL26XIDJj6Xn-h(YCK~L`v!~Q3-Bh;B*2GJ3+0MiDktvihFLq=fd>8hkP
z47jmcxw_)2gwl}ejEB1;(cW0Bv(ccWyG;jH#s*7gBuCxB;dr9Ehuo0w>TO9ai>8)7
zG?=$#Ly_M4WN#>(vjy73>EYB!eX2jvRBX#Mb*l%m`H_K^t~RW9v$&ywo_FK~gOJ@1
zRyq>+T(L62i@{$RFXE(`1{^vw6sM;d)-R0*o2w1p<J_0#9TZsdkA-ud&;~FhY3JO3
zaQ_Cq3i2}D+zC9h4$_+(SoASu=TAtCI=-E_bD^f?eOAXvOUqPhZ_i49aWdOF;nr4n
z^toHDCRcBG`M9@v(VFXg1(9^`?2Z?^Hvf2PuyOThvZX#c5m~a)Wpdkmd)5wIdF~80
zbCL2N%bUnPo_PXna~?5l4Wih$3Cu>X;}Mon=c?AK_1aVtCfVvbZB3x1!K2mISQ4o^
zZC#B{TPqgsR0jyZZCU=ZYc9*d<BFl)G0}Ya)rYfPn_59zz2#fD^KqLUI49J@XaV7P
z*i}kiX<e+^m*kZuvNBdW`!w=3zb{uhoXPO%6PqE~{0@zL84=nl8ljD2N3te?=L7QD
zD^4|8*Epg2^|#4+aaApB<ZX8D{MpOx<ciXrWK&^JTgNWi$B%*Zjo1qftq}?m+fm7g
zi<;J;0YErn5jE)S+;)S{do$U!=MDDFWLj4>a+j-L6AIgUS5Fpqj3wHls*qAVd-3!Q
zXB0cn9G<!U^r$lA7SFh4)69XE&6h7(ety7>T5)gFmAHeQ?E<ysO+2Prz-HoY0gLaW
z_sK1#TgiKWA>^|M17tIq^oNwCM@tVe3)Hsqm7E{t1mFq!h=|uV@=Sf{3kSK6W~;a#
z&4O`qifTw>N4VD!p@7xUgp=MR{Q_$NH661lYpSRk=%ZS4b%Kk$obTAs>an}JoUPpk
zP9HQ>+Y;6`>+;5UYT&>qUt1k@2ebA%XE&!WeUv+RAX6V*GJE5isTw#O12tYf5qGaI
zraM3Xxi&-RsL!K!S+J_Xw~94Z&E2T*(~}BS;9n9QW4o#)5VS~s89IBg!<+;%`Ft+Q
zD4se#EM{`w$R!&Kg^ibtj9$F4F#Ehx#mDz{_n%XrYr3KI8u_|fTfe)rdrv*Ds>xwg
z2G3iYqwgB!*VR?3RC6)gF-%sgzh0wFX7UZn8ue3Z;NMdID_7){lyj>{p4bFB063|2
zmhiT>$)8K+x9bQRBRJj(y(5j+@3;)7WBCm@XC_O8sDaqtaS%aG)b@9r<j-&81p3mf
z?d_8J6!_5sSZTCCEI1127bOe%(=U*-&JM_q(!bQFLMH{fm84+9VNs=j(dzA`kDX}M
zFUX%tmS5OPvw+@R{tj*#{*cNKlnT1}bO&a{>-Z&EevH42*U(>7RUF)=Q{*T)Izb<$
zDWo=+pXSf!c^0J#-nw8c=3>_9`a+2vTFxo)&*W#5x18PAclIrlc<=AW`|uSzySjE>
zF+6z1>D}F@Uokj*Xl(4z@Cbb_YT0$?*3Eb9Zf)It$L6hf?rI5VHeNTg{@RV1%*Jci
z&s?`Lv%UY&$`ywO1`e%Qd5E4SU+I^M;@M^>1PnqrU<h=#aQ|$W^>W{z&3EuzYF5+Y
z<6fnB8wDPApto4BY_JIs%P6^8Nse@IeD8^49HqRIIW(0#;Q*q%X|`E6_dw~WoH@k(
zh(hcxzsg_6{fR*|03hjRu(G_jv`<;u$J$uQK_Rj{1tMn)aj(y&D|y?=6jfqqD<9)`
zV6@Om02E1{-%&bCS=!Hi$elRG_sZ?8<N;JEmkJD1&iL-^O6)t3vxn#$rz8C;Xn?hp
z7yy*u8w2;J6Yr91l;j$;^<*9jmE{shC1Yqd&ArZ5a<`X`mX1=44VM4GJpq~Klrb30
zbA`n0FS(l854GHRso87t0j^KZ&qsJ2bW$jrbj%<RfRhMp=qLx3JO%9dssNxkyhV@G
z-R@z)Haygt)xryFj|$4%mu5;P3ftG>@Yr*n*?Un%di&omQ7yTlXzaMMcmIE$27dj&
z%YWuB;J(bxg{**PyHz=1pt{~Gy5bsTbk7wxE_Q5v{=Qc8(p$Psou40E_4Lu(Iz1CV
z`S22oyF~d<<XhZVsXbq^#xM(+A&X5%YzsZ*kYJfn1D1fx!+EhMX$%P-zS@r6MW#B9
zMWY<*Xc(}BeeR5}isvFYKgaBE?~VI9Y=SdlYne8c7B_YKfz6TfKgd@ZHnBq4cnFEi
z0?6E;wm*FFi>bTrawvO8MtYS!BO_W$F?1Zn&wc5>Yp%KPOSG-$VbAMt5HF=<RuMrs
zuP<tACcpa0$mggWhhGuB^)&S2A*!q3`5C+u#kDB)O}P}cY}};c>Z{4GJ~zbuSSm$f
za%x%%-&b%Z#N7S}<-ee~hqobRB~spkuTbDGQ~ZRb{DW&FS91SA$_DA?T4Lk+32yvF
zO69KK=eQ1nyKIrdZm|WNH@PBCrKc(E{#~?e12>?!kNYd-P_Xg{8{DxdH*oYQ@-E_L
z;6=L_n#B%!`?KNz;HLp!&EqC1e4pmp6n{Vq)cgkez5MT`e=2xH@2UCgc>4PjTpuFK
zj-#$^^4+>`bJO%LVWd=U5q=YOd>?fPeC7V&@1tM1Ul%FtW?jJf7o^;$Sey6DaAvVq
z;ErMBIY;h$12;v^#a&JGPS7_Q4p)}LivPlh3;Z>5%6^<EGmCK(_|MZ6%n<Ci=de;h
z%AxnHq+kskP)sP+V1N8sii_xdp78t3X=~AWpR*@FLmZyV5;*z!|D8M!_WaD!1b|cx
zd1ro=BvNBEA`HlMki8p?$EEkuvr@W|Y_2hxYIMfZvTCETy3S-Gx7FhCry5gfQp!P=
z${C~*a}W&YO23<G40=6oZqegL4MUw?UuQ5%@8U9J9rkS->WtERU^niJs;k38dJmjw
z)YE@Kg2MP0m^9!=WHE52I-0T0<gS1Q#rZ%tkArR~#ld%a^MUXgT-)8Q2k1PBamN%-
z@za&xZr|_U#T~oAeVG2%&Gmy8*zQhRZn@=77uWB&4orh6HgYeMYJQ?p?kvOgcJ5{S
z9udEl-{U$IB}zYVE@6uh)OV3sjwIGNRw}s;%eB{=E~XGv+zZ5r`G;J9&T`pJmnYX+
z*D1LdOndhlHc?n_aebHr$5}L3Men2HDf9xW_u=ebm*4KPxPqFX##xVZ=<RO!>Z^i+
ztDfugM!ba>=Wh#nqMnur=WBxxv-|<~8tLJCsU~TvKwO|nzUdI1Zj&`s?W<~yI|D9!
z7HhnkR_-->z+NBXn~HWnd+$Uq6x@vBL(C`O)<A9MAE>w)$&z8`-X^t3#vh&McFp@5
z?rpZ~S}p_bvxCi?0CHM+1-_q#Wgqe9n2|orNE$l=`2!*=lTTT9cW3e@666fYP^dXv
z6{t!Mb8U_N0hPND3KiU{KtGfwqHu7>Nj-22o?C$+qwA_f)<gnaEZx{q8_?AEaL2=K
z9#y2REu!)OJt#ZPO)2id%!Vd{vU5}Ipw8?>h^~X1GT~{|(+FSes`#<u89s1o-fL@V
zUXz3Sv9ZqVFzIo+8u$V?t@t~5Q5F1BfXo16%2j4IK8C$Eo!53pt%1IA(_W*)Z?GF`
z*&AJHJ-BDSns)&LYzXrqRA9AB0N9iJvDaw#=^fG&ZJpw}6yN23OKrzE0ihsmG>3$}
znjhifVH{0KNGsRnG^KESf}aFLv58`13@02s&##wD<(rw;AEl=FQG!w_lxpFgb()iA
z3w8~7gCYccP7%b-g}=ZIpnPrt7U6S}R1wJh=ZH<MDZCQyxYvmn7l}oZJ+Vll*O?C3
zz3G4hZg%JnXu${kR=}dsIP*q?!IBjJBi>X?%$q7iosqO7>g1k{L?X@MNVM4*cI85D
zJKbdv!AjHx9?s%$=zO-})#W(bTZ0!@)Zb~l1ut4-3Uhmm-?%X6p#3bb9WU<Xx~puL
z;zhBe08EQC(<#I(+y-mbI94e?YyCV|yxw@|koj8Va&a$`I6orKbe8MjI!yD+OqX*n
zo@Lmy*|ZnB>`%BB#W%RWEUeYi6K&an7uWJ-!y{U}P-XdT?s>%zvBoXvNoX)q+=mzU
z{0)YG)8d8pmH!vlN;Fv4F_U=Q3rI~Tg3v5k6I4EJVmO<F@`>qG9}2aExmI<cKb7ha
zs6EY?UT8U1Q{s^4(Y*3Ndc>!V_au`UGauk0P3aEqxXRla4!3&gTtdlS&Z~F?Lb|as
zW=tk*#xbFEo!PFpq?$EiK*g*1T9b|Q`mB*I3r?oBab}&_g7QNs|D;@=T9~NY{p4hv
zs0#U|vUZc++`xGqx)>BDTGnR`ccbUGmusPQvhxuH+40HO?NRU11w(&Z6j<~%ik;6O
zPqLDSIz~m|yikDU`rFr#iH>kLc=?<1eqIVkxXrRhxYo&aY!6&Xf1e;P;uOdW5UE3F
z6{3!!2vtK5)myP~Lb{$kULY?z`Ao`W)9YNd@n(9ASoyNj3Ea!~O<Imu(~j8$=}IV1
zeSS%^GSw6i%L-*8*wW6~8)G)i1X8}F+^T4qYcJZ86%MI~Edk50`lZ0modKHX2>R4t
zzLnA%>o@w;Z5dKOrXI5VZD$~`ljgaiT%+hLzd*TG1vj+s-F3t2VO@|u>pn#HB@7_<
z3gkWrYD4a<aIX4s^;ZG`Dt|pw&f+fNOE}0t<t-=PLCWdnE}VRDB~tbv<&Q|Yv{c4@
z9M2$Se|f`+|3K}RLQWD<J9=Ibvn7;WNQ%Wku(ma{>Mb`HuvyK#OYk}y(yZrUM1*iO
z)_@r=a#%27;{zYMkn8Lq{jDO-*}{ed6!bfy>Qw_(E^9JP+jt3TLrJVH*HF2*d<SH*
z2xKyFP{~Tpj1F@yR<AeeX|P9=%_r~7bu~BYy@NR2k6n&SDJ#byfU-}802=o(0Ek~=
zCj@$4!3lxQX}t%R>so8vn1-bMbx5rWNUd~fL@$OD9&hQN$ByBb8Qc!DrA%)`XPBlt
z8t-wx=k{42vi|nkYtKBB_Ge4kuQ<2-9pLjIF#KzzOqT<SOBjZCl{cOEJyN>MPQ|YB
zlgM)c^85-ZUFD$S#`670*(Q(F&hk3NO!*K}c9eIXD5Lf(6wfJsL;9(tQK-lT3nY#6
z+@i~4bxM+kmwj>hA!#`4pM!kS98>yQLy$OH!%A-pT}jJNgT`CR|ITQfMQLFVSu>p+
zi&PDnfT)V+7nf%31mx|u^NB#A17+5i?ZCkU6&z3t`P~cyKKCE4-M#x-%Kv7{X5=|4
z@jptFh^Y|o@%+*Aoreq${rT2g{cw1Za!c8(I8c6sMnq7Wp^OKPc8ULh307S0BK-u0
z_JCj45p(*v+N2#JUrHaZv>4n`Z9uJz+avGtOS;|ufGb>I>of93Z;j8AYd5>Kd6?Iz
z44G5B&V83j0rPw|?WSVf9f#%`bH}-yEt|EoKU<cLqb%2fF1Jw`s3Mi&`*tQ1$@~xB
z4}os^^1rw=PCxhuTl?9XT3Pe6bCLwCrZ$V)TI;bs?Xl|ImczE?VQ!_HN&z<M8Pk4K
z2h9Aa+=ElQj?p<_VN8|U-R7o%+U!(oMFiFgN<pjA)P2ihul7cb@#-2a;e9Y2DF|-m
zXyk(2_vpwH3AZ+=`M_f7yR}<?d-;VgE;o(8vUksKxJE~3e}AW=y`!UCF8!Q)mh0wM
zg68hUE{h`=KP6<MzryOvV`hWy=o%``scZ&hGEX!*Y})R8y;g5S=kCCp&TZwsZQkH|
zL0@aMdkuE^4R8#QkvRTgSUxS1%*^maiEbXWDC)r-x4K%r^>zv98q;1#YaWBcphG|}
zj?eY!?c2@kU2+@$!nd4+C@n*ugcw-RzC}yCgWUAO_HEv2*(0@4ae{y1B*gz&8%L)7
zi%xCh#+_ygQ2{+S%9|L(L}kT26^Bsnn8jWiFy^g*ohA$<=p?KHxi#Ks$Zoc4JepXT
zeRK#OA%1E<b~v352k*%`T~7K2`lKUC>R^eR!~3UV33GKJmcAvt54m_DmTsU?3%tUM
zkrer}nY_%R;ZLD>I;M0PXvaXJ{nBv0Na4|O#Q4dhc^KfN_F4D>_==H6Z&swWPp7tX
zR#{dk&#gOn!GaOxj?b9J#&9#`!sb@m8sX{gf3vhF;M3YF3y2HayKUS$rrd4Vb4r_c
zP8<6Bjkqhd{1GI~84R!>a~Gy3Qpr_acQCrryh6F%yvNNIZEI%C<2BZu*b2fa%+M@P
zgT><$Wx|FtW8;=_<z~Yk3v|pW)S|Smpi*}EA+881TeYwZ<tUYU_HPKRtkkpHwvU$i
zEl$e#7#5KQ_0YLhsb|HsYpGn1dYNqnEkpa$13D3y7KHJm+OZ8JDM?OP(JK{h7HmGg
zYFJ3Ns)f8<v(=%o7!tgP1VT_UabFvHx|}}@XmroQ0%#RQB_j8EquPdp_JbjHLz_m~
zBDYHKP?-%jGx2afF$k)Y+GpVnfGAN3Yag|OgSpAeNM+`rp^;S>fyLhXkkw$ooDqZG
zxQLIKGeNX?^*Zxdi^YP2)?I0f#b(7D+H6Fd3;Z3Z0Tou-Jh$R5(8O8WK_Fv}pu=f2
z+ca)<1oy!?>1V+!M9_=L<%Ygqy+!Y~@$OvZ9sOWBG&rk)VdhjVnhp}vqytQoE<~#Q
z(4+&V9WGg$Zh=0)wCT$&8{n_PY3I-c;`~F<sIh853u9WjtW#5H(5uaypNlm$7HfT)
zc#qe-*D34P?d?prKFcygsZ(xQ>;G5F%wxWxQ(Jb?PTSs-Eqm;L+_LKBV55@OFSl&h
zPV<=yTSiCblQ^3rQXNN;hwf4{gp9nr(iu@!EvsrOYLtQGsg2$4Qrked0V0O&etMpZ
zWTBw=q;z&FK50!A0%jHqKZ!!gs`XdJdm7*e1|f^p$$}uXEbPe&m)c~o896WUg@S(C
zCu+5If}ZQ--BI($?bFG6cRGiWB#BI>v&tt#yHlQe(W*CUJU9i;N6Fg=(hG5IfwWEK
zZfbI?Z0W#fKSAX-?j_R2--&vopXlGG6Z_|qS!#HQH)YziJ|WiCR3Ung<|NU3K=d#9
z(sq@%vC*r-HvUU1G+%i~pZ^ISQ-{@1U={<JE6~msq^<j4YHE#sUv!OSl~NN+n~68t
z(2&u1wF6wyymZpo*XoR#)OJy{t33sUT9Gf0@lSHkAZDVd7*Q-&Y*cKm_zkkzc_&F)
zvU3Z$D9Wc&LTkkZ#Uj=!x>*>Xn3iWXAuDAmRO|{PE0sp+cY}0NF8xsq1NQd@$M<a>
z8QHvVd~oCPKP=xkG$wr=8|s+|{~<il*)zCuaFs1Hy>hT8nz5}SZ?7C$X>W@54B~r}
z9bZa+{=*-hSl&G~{lWC|uI1-%Yi-?jK0e^<RQK|ZZC$OcUE4ZBE7tW6wR#FcF4enY
zU9j2PI@F5<Z*y?n?EC9h1Ph+lq3{QEwnfS%{(0=YU_4(%;MgPq3xWHZyQ6et>F*>=
zc9H7RQFyDk(?YYihVeu^53ewn%lwrnr-Fn4I}Y`^VoNl9d%S9%$c&ig_lT97nSGXX
z%>I6sta5$vi>^EGWPgN=C`s4s{t(w+`t`Tn_ucFH(w98<-sip_t-?ujJUw-bS;lMz
zk@;suLpW<d6oE)=*$;lG#toR{fcl4}cmMeahnuELZ*Y&`R?IrGyL5eB>9Ya)bGY=D
z67u{eaz9Q@`8nDO{!EAvKI9=OlJb=Plicqk*3x@E2<$XEgZvshjv_Q32KWfU90W<8
R-bTRgv8bd+X}Uu3e*oo@L7o5r

literal 0
HcmV?d00001

diff --git a/web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclRdr.ttf b/web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclRdr.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..2e10a398d2ea09b2e5b62ee581f2cb0b37a29503
GIT binary patch
literal 96680
zcmcG12Ygh;_WzX4CfQAaBt#OD%cj!9W>e{;(rf4?kOl+-!4RsbsECS)1)miW5y6Ux
z3P@2z6zqzqJOl+qR75N&VuAgC&&+HReDL)B-uv(UeD9e%cj}ol=T2Y78Dqh00h4TC
zkNkqdN1l76F=Ko)@KKL}1ByNz_g)Xi=KsW4>cAdFLvx>hc`e?>He&3u^#h99d&Vrf
z`$f1Nfl$VmO)Z(e_x(|$85?S2ti`E`RdXkdX!Y5>jIGOO?9I|i6(!}(UTCu)?p<)7
zISCfdD}tuL{0ERYX=?496Cd_%j|9O@Xm(X~S;>%2t{IHkvl;VWF|}mQba|YegWH3E
zYg)<FiV>{lLB`~5jEP65SI?-ukFA}@So#jU&SS`%e23k}f><T<r>6!#8*)tV_n-fc
zv4HO9Uplujz>;6Fo!<BAUBNf`;!OvwS#>UTTxjQ?8HXGE_K#h;h3KIP?X%9mbbdGd
zeuoex6J(2@<mbdT=7)4G79+erus%dtJ}+h--U_x(e<^J;P}p3I%_jHciGDfxxdT`n
zb9ueul-Euv<c(d7FQa$-dvPa-OQ)SpCOhO#uuwT(UX8RpARog05%~!2Yvo$pACr&c
z{-k^o_jPg|?(5}x+&9P#xIZVK!+oRNi2G)_8TT!63+~(GHr!v7FCzbfbp|qE>cjft
z-Vc{x{c&+NjaB159hYG9a0zw=F3uL?;_PNzf<4bR!Mq(8XD{Ls>_c3f9mmDlNnD(L
zi%W3M1>-!5N8{d%H-k+KkAb-bZvk^>-Ua5ayerHFya4x}yeIC%A$@|6;-m1kgqOfP
zkxzvAdVT}$xA0qVU&@!l{z3jA?rZoO*lglR72nR0L;ezf3HI;veK3C{;u#kSB7q5!
zED*0~DcZv3pg4&8=i+l_ljGz#aA&++#iZi3RJ@jo*HZCXDqc&)YpHlG6|be@wN$*8
ziq}%{S}I;^83<q#sC;dKDBIWgd}HR!g6wE}!6K1!ZI-MzJ8#T3mdW-QvmYzRrQO(>
zo246b2uzGkVzs!YvyQAit{JS1)u4_{husX80#vdp&}!ID#QOoP5G7xP=b5l6V-+x$
zpzLR`fq1TF?N~1ERfw+_LMVZ$60U~9U5yH>8g5-I6(PD=2S`#U#9s}UWw=jcv+CZZ
zzzw<R#HJ#YDezCOCV<WXT+D+IGJs6nGvF@sf;746Qspw~a@D2FbwSD+rX+{u!_@%9
z`FHcziIJZH@Ktb$@EeBouc>-W<;1P>>H_a5U-Xm>Qx14o%}P~ni`ZOnuNLO1pp=7Y
zieoh>Cn}i|^{yOmTK=g#XG5dR2A@jmLQ7FTr=l!dv9|Cr8zoc=UoJKn;m-hSP!1Jv
z??PEqsno*MA0bSIt;^N4A$MF+2%910?bsl;h&_ke{4EzegZD!%oWqy#hxuN9Mzj!p
z#4X}Eaa!7Cd)ZemlF!P$@`TN08(~{y+ipAU7wtFRZ;9XCeyjYp`5m^$+56b%**Dlv
z_&faz{A>L0_uuG$GN5TdLBN=RNddJ13j&q|+!L@mV12;0fIR{G0uBe93^*HT3v3kV
z3Tzvg9he_DFmQa}^1uUu#~qCwv5r=b362`aRgT4uyBw<=>l|AguQ~QQK6RXM{OCCE
zbT}iO@y--yM`xjPu(Q}X**VL3t#hgKKIa<eM(5W-F+nYZ`Ui~)nh;bIbXCyepu2)r
z1+5F(5*!%ZBsea(UGT8rlHjV~*}>Na-x7RJ@Wa9Df?o*U6?`K2=MWYW6w)*#F~l9x
zDWoW5T*#D=*&&NU?g&{IvL)oTki8+FhMWjF6DmSOLZd^ILp`BgLwkn~3oQ+u7CJ9<
zQRp3^D?%R+-59zv^qtTHp(jGmG|FtWpwUx}PBr?ivAuCvW2<rN#<h(XG+xs9p2n*i
zuW!7q@t(%}8y{=@ed9mE0>UD~Tw!g)vcqPDT^qJE?7pxyVH?6;3_BS1RoGAAEIcT@
zX?S9|JG^sv&+sAP<HM`M=Y%f|zb$-u_}=hO!%u{ti4YMX5rZPeMpQ=3jJPJ^mWX>J
z9*KA+Vtd5v5g$eziTF0+*Cu{V8aIh;(yGbOCRa4s(B!MgMv*a*EhEz-yGQno91&R_
zIX!ZI<c*PcMy`x}GIDd|uE>3nha*o$p1sU=S;S@Kmu<N0#imJ3Q=4{adUeyAo8H~@
z;igYF-P&|_(+{G;qnbyxiOPza8+Cou?NJXzJr?zR)XPzCNBuMEi>M!>&P4}CH;Imm
zZWrApdU5nWqrYg@s#!*}oM!!+jciuYY-h7~njL6%yxEV<&c`@nB4hf-438;|nHn=E
z=DL`rG55x-j(Iv}OU$b=@5LO7`6}k8SQZ-;n-uGg9TPh#c1G+~u}fm_j(sh5Z|tYB
zCt}Z7!V0mXtz^q%b+vk1!>m$knl;Z_WZhw{upYNIT05<GtOM3@>qqN+^N{Az&4)L?
zzxmIuELWaufNQjCqHBh0n`@72pX;#e8`m#!GA<-8Hm+q{dR+IozHuYs%HyWT&5zq1
z_eXp{d_=q}zHNMVe17~D@i)XTi+?cwiTF+Nuf)F_|4ICp@u%ax3C@Je5)u;HCv-}f
zm2hps(uDgG)+B65IGvcD*gdgt;)ulZ#OaCi6K_nsGjV0&lZl%XcO|};crfv+#GjH_
zQc%+Hq}!6-O8O@0m*mXktCL@A5!zyCi|bmv-?C}TJ}vKR`9`Z&t;V-n-|A%R7Og8<
z-_rW?*59;=Z8NIP4Q*a->uej}wq4tTwv}yXw!Nn9vu!_Y=WN%k-Pm>ywL6`Xl2V;=
zPs(fUgWKn}zpDK%x1YO(yO;YK_a^s;?%z_Ir_M-Snfj5(<{9p})w9R*M_N?cptP&g
z9!Ps9JvhB<`pop@={wVZ%1FxSl`$pb@r>^?{>Ti-9FX~Z=83E}Sw&fuSr28i?Dp9`
zv#Yb$W$)`?>rmKXe21qy{Ma$BV@Ag@9m_jbb*$|;zvG=9mv>y<acjqqJAU5ryN=#Y
zah>uy&F%C|r<Xgu-RZl|jXKA4ZrM4tbC=EoI+t{w+Iep0MV*&*UfKDn&RaU~?)+}&
z{hfd4e7=i+m-sH-yA*f1yvxEaZ*~pu8sD{j*DhTLb*=7tQ`cv@1$S%PExTKOw}IWp
zbeq)ek#5g-d$rq#-M;AN?H<*=b@xu)`*a`OePd2Q&XAnzat`Fi<&MqWoqINq=Q;Ai
z^J4On@>24$^1A2s${U<FI<Gu$YTm58tMhKmyFKr|yod9i%zHlX#k}2l@8$h7@7ugz
z^KJRT`H}fK`9t&P<!{J;Ki^xBT`;iVzJd=5zAJPV#uaug>`^$daAaX=;grJK!Yd0G
z72aBSPvJv_j~6~$xUFzk;afdekE|YLJ?`uAUXL?9JNB&Td0o$EdcN87RIfI@ih9lO
z^-Ql1dOLe(_a5JSR`2D#xAi{S`<FhkecXMz^eOFgf1h{zI{K#do!fVF-&6f!`<3*&
zzu$-bTlJsP|LOim1|$!t9I$S{R|7i@oH_8(f%^xELDrx_gT@b<G-&#uYX;piXvLtX
z2kjX2{-C3SP7k&XZZbG|aMs|SgGUaYJot*iO9nqMc-`Pv2JajE)!?6tLW(*T<rVcW
zDleK_bXU=aqPL2U4iQ6=holb488T<co*_RDO&eM{bm7p|Lq8e%%do&<eTLmR?8#xf
zhJ7;Z^l&!3(eTm3XAECB{Qluj4&OEWqv5AUun|!sQb$Z0apQ<>BMyx?IpXZdfRT+x
zMvaUg*=A(=$SxxbM;477J+f@%l#w$=&L4UG$fYCi9=USlV<R_=+&XgCs70gh9JOlH
z`cW^AdVkch(azEC(OpOP9X(|9n9*}b-#Pm6(K|+eF~%__c}(t@Nn>suvwF-6W8NC`
z*_fZk298Y{+imRFvGc|*8M|Way0N>*em3@pVp$wr+@jcB+@UzPxVU(J@xtP@#e0fB
zEdH|i`{G~6iE++x5#zGQ4H{QAZq~R*$L$>V#<;!X4ve>tPadB?zTfzH<JXMeJN|r0
zmy*hof0XPl`L#5>v|VYB(vs4}rO%cgDGM!2D;ruix9tA1x696#XOvf!FDqYG5n17>
zD5+Rfaqpk5M=G8{|Ke^Ii?$#WiQb)J42uz2EL%(h4P`O>ENB^?m%yA1eB(V!Zun2I
zKL%U}+{rqK9)=D9ZOr^c1RH{PeMD<EKt{8EqLud`KgR}&VDImuC2KBPu@JtM#i9k>
zoPW<^c@LH-;=R9#1lR`xPVbc>7&M$E$xbW;enLbOW+9xf$v<C!caM6{@@m#z#IY9q
zH0vx*vYz~ecRxSvJ;b+q&#3%Rp8h{U7J3i)AgaB8DBk(_M?7o@;%7t5W68wd|0U|m
zipuNX0cA<$sqiFgtICzi_TR#Lh9`rs3iWc}%QMNtrQtoLWQF9#Co?2BmjcPte+};$
zne#WoA-N@)y%b26FNFu;kK|mV4`@GQZVg(b<e%!m{}uPa@5Nxkqk7d4RKNZmRNbTc
z*AOI!Maai;mLqNe?FUf({Qrp`S)}kG9`zc!z^4yLCp3iUfV4nI)FIjE3(^_?EBJH|
z>7PphdWm#XLnu8(x=JJXPtUOTegXVb!?-hgjdYt2q~kDlk;ESX!o5fF%r(3_`2gl5
z{pW+ygQN>D0ojpFQF@Ye<$nhzErbz$3HZW>K32MT0n$o3S;2dRFHl&ebTsMdi$IjX
zJ@mIhE6@aEmWBqCZvU^41^*XA!*KE4pl^o{>ia?8kV^sI7W%$4gotAC=G&ydT@lFJ
zIhH2cvj`>MoxMNs1K`5}?*?Dpg8cg9eRKXh%C}s}b+p*Z!ud9W_q+(lI8KK5cF|tT
zCG@L>?_7*XMxLnN5K<6Nj`tUg{RAjE8t1(OBUB+6$qM0N7?HXh^lpTo&5{+=x752>
z$xjsCz3M%U@UoSxY(iP@W6i`%h-ZQK!+K!Ei^4f)@F-*ya!hGMIb9|&G9(g_&q$;#
z2H%s@-Xr3q_h+K~6_&!cgI7m^?cSF~viCTD24kDgux|W$xOtw%^JU&&c@AsMe?$D2
zvqU)`ScLY#V$hAC^qrt_EUHVCSL9L5RcT2^n!@=x?`hzBm;*r1fqH;qzy&yj#gh3v
zR*1ICY5ukM8{uS)L4Q*24zuAtcRYbL<q4>>hRXNgrw?lfG)9?>LYa8+ZZ1C$B(M@-
z3d|+I6qq?E=Z#oPpc#J~^li}YERMg&;-zHqek)mgKzHQ#oPLI%zPvZuE=RoY^CPUk
zNb?@xy;wHy<Nb{HMm~CbKj%GJG@fDa-O9Xd1l|u-bR(<aU$H@elmCj*#__CxzraS|
zd)!VAXQRX?teyA*Y2JhU^+q~+vvQy@!u*-9K-en~c5hY$T<wcXtOWl7<aH3*20g{K
zkm*~QN33TaS<2d=e8Tu#d}HRY2Y40AZxYL`qm^tJ%-8VAtPhY6^!5Sior010R(vk%
z)Ety^mG><^$@^{{twdU?P@a>~cAE@dO!n^cfqA`W**Wh<#Os9L5%BXH{GO|$mB>>S
z>x{VU@Z&{X$#8#+?e?Ar4#Hm-_*)D&ZIRygb+nS@!8{HAvVm0MDbg6pc4K^PH_|ed
z_2U!R06q=02E1(v^L*sJFB`x<V?*#ho$N89RluG{`pcDhDC&Bla!-D1SQ~^{z+(~q
zuPBRY;P+sZ!&%771bn{+qt3TQIDIfy`iu7j`-Synd%e%VekkJU&qpG@F-ng8Av1Q!
z_Ic1Spb^j$&!2#18+#6OFh2|aoP*4enRxyy_@mr_N9WMq4pzuV8{l(R>}}<P?7}i^
z8(4-6WRqn(HbF+P7P1X!7HeBavsimMnYC2U?ag~~104pmkO^!Qy+b(HQh12ZZO~28
zILN!UOZgLZL$;6~<(}#^!7WBJw+v=&@J;?&q=8?vyoW^wOBWUBgS-GRmLML3OzgzW
z2gYy3Ko$lx69Y7rQ&|_F70}+8yMYqOp5S{XH?5=}D<p_??+?O`FhU{U32Yqq0tsvZ
znc34A-F%vjhOXNOoCEFwp1~Z(K%NL0ILyWZ>1?rg9qg9@PXaFkTY*Es#{!xRv^P*L
za#$i`-d};=Fisi|w1s&)@ENcfcnvrXU@l8hFX&-_=D}!ewI|H)11Df^2Xq6#8rH(N
z!AyboBj7A>7jPf&2Jki9WC1xa-wG^%ITIKN^ITvmFdx92ngY4W0LBB;fog-BK(7Y=
z0boAQi!i<2fi^%CK;iWO9tOq$MSz8PFn8$7pGw24cz&L-^DhC1U_JmKPj&PYV?N!0
zehM@4;hhBB0?_jhf1=>4vL|{NAU=L+sG6U{EL{qa3`9VV8UyrAU>M<MECQh4VqlIk
zG00e=7=?1<cy_RRprb{8Vc#Jvv8tqY8Vg~V(M0%OW`_%jc|Cs?irkK1_MCwOd$NH!
zLwdSc&t7Ei-aluUi)HsO>gQtaqCQ15K2JV53pO;!P^X~|Ljw&BP!w~2D03TP3}KB}
zSXtTB>1>t0mrtvn%9iW<gqo5vc89)KRZc8nOU%8xtcoqd9BLI?pzaOL^OViJX)~wR
zuv&ee4#KACJ7QL;#T{wF-Cx})MVujZxQE~_@z#m?M|wscz!jP;lt{B53k%$A-(@fN
z+aYVjRiae%7wP;b{s!O3v$>0%V*6Mrv^sH{LKNV9sC->KCLR}0h$qEUVx4$etQXIS
z4dPkMAv`ZO!VP8z$%oh^c4?FGn~87yD85g$7HvdZSt841g`6lW<rFzpR?Exf3^`NI
zmUHD5@=Cc>-X<TEtKqXL;!MKq;rIMB=JHBqxtt&;$;q-xPLtDRjjWZk<QzFq&X>2y
zTjdJ*u#y2vE%!UBV&=>yS~DSUt$(8=C;&V_Tag8z6(-P*!dxPY!(5_dahQRjJj4My
z=N#qhpqz;mv}rNb4M;WyU#uWd!7PNtRUIZDjg`yC#0KS?%h%zCGt7~)FlFO&K^!9K
z5#Z=X7|ugsgebR7FK|m~p)%v(=?)Wu$|2HmH@y>;xckbeFWROTD<PB)l~Mzj)Qa6C
zHj5X;7O_=q6Whg$;w7;|ydrjqm&H!RD0O~CuE;}cu1u68zx6SJBchd{`C)-};_kXP
z;1(yTQ8UFRUBp4kg&*sKZ+{f;%(p8p+AufOm$_8FDF;-yTLTQWiMZB~6OHi9QNon>
zSk@fnlK|;#fwBu$Zo}}Vui+254f{J%rhIlJ*BAKw8?uI6Q=MoAf0(Rb(MVBqJjLOP
zLCO+fN2#+Q7jGkn?{djD*UO*?L0jQ_%)#y9kMkvb8Xw3Dc}pJ2&Z6GE$6jNPvK8!3
zXuk!R^Q%HV9KrfyMw3!%<DY}`pDPpQ#AT^6VeZ_RFw<^Kn1wec%+qTV&EXppX8DZ?
zD*%iMYXpo5>jz+xXqlmoptMkf(7%zWWu=OiqDE0#Fk3I@)VaGwxm#-75%syloPPs%
z!<D-c#vM^|Cm>&Tj#UHl7SipK=Gb-oSlxj5yBhaIec@vEzd^WB%3U+#jwrb^p<opQ
zLIDR<E);F}R^<_EAM{(I4c{(Ses4B!iPBqefMG>NeM&JaOL0s$?ua%FrH^{s&%7n7
zLy1P-?T{x2<Q}~_NRkU}l0?W)YiJ`k)f&jcc6L(Lo#9w9v7H~SmnL=x@;HfgCH|ou
zlMLU{q}}9Wh;M~_68AY+V<MnC$z}r9o}hHG_C(0>sFR71(x#{ZL0C~j?ziAxqs$Y~
z4<whHalg>z2IYois7gME`vk08A(!iM9}m7r=;|st9qA!m*&Q*EuB19nx&bR!V5T}w
zHWBFO-o~&7M%j^;sMGq&g;2TS>_+7x6nCz8Px^wwxAD$w7-r~6ds28>YfxzP#EnFk
zvB!8S`Xv{4Qw5hcHlD5FDSVc3(;IfARdhJffAIynN?t9mmDi~+(LGq@vqG+<l|Il(
z-OzR&!banZF@eoySF)?vO>8N<6|0_>v422^-_KUERqSE*B>3_Q+lAWy2741)<9)W5
zeSoj<G4>7mDCgLD9?au-Ja5HY^K`7Q>COA_zI+%T!^iSsUdGG$1U{Kp^UHY+pAW5a
zJHM0P#qZ<y^9T4td==*WSMx{s^L!hBoxh9TvF1d2gIo&cCl|<TP-F|`5|rfa@@|ZS
z-7A+vo36rInn=iLcWAV(U`coAqd=@g=moyhdZRG(&<3(_HW*hE^p;1#bum^Z#9)0&
z6-sJ4G+Ar3<>sMRHXm0yblde<BXR@EwG&n$-NL%C+abx_*}d#Omdlp22NA<VxO%eH
z><Ps46x#cP*t6*S4TCP-3Z3{O+X=4jX0Njn_7<*k_Aaz%1^bA7j#$6IHIseGP9WxQ
z*%`!q7OU76avKj~H*p%Lxr0aW%h=s&CDZ*pmRoE&cX1b6!4r5(_8@P|)7T?eHPMkh
z#k=x+_AIn?FSdpE=R?_xd<1%mukq1*G~2_+^Ah$tpTsNKn|um-oNx2#d^&rd*YYda
zUVbINh8^J7@rCR&ej~q`9l>g++t?TU4y+mbir>xeWheM@z8q^b9^@<8DZZ9J$G%59
zY$M8iGsb1TSpT$#OSH}2;lU^al54ba!~s4TYaW(k<-=`Q|F96NAm(5#L={#<6bB8%
z+K9rSu0feWDM86WR#0S6qaa6+&3WE=*7>9Jr1QA*u=9X(pYt8(9_LQyHms;v?|j_3
z+PT7ckMj=a66Yf40_Pm(bmt`Jc;^VLzv%7EcXoAVJ3Y>}&Sa;{8SRX4hByP9!tsaW
zjN^N(**J!k8~d?-<1MV>*nzbi&tXN!qgdCm9IHESbKK~-)-m5P%Q4+C*-`E&c8qWg
zcJy@=I=VYLI?^2}j+TyiM~oxV(a7O&*aH6u{3-Bc;IY7ifgc6F6SyaEXW+KLje+X}
z9}ip|xFYbLz&iq$1TG4^DsWC<O<+~v1gt6<6*wfYe_+qR+`!I(nSt)W)`5wER$$Y>
zu)v@|dmsz=E#RksQvt^VJ`MON;2o?^*@-nO8?jR5ajaKafmJJaVC~8xtYDdkbu81c
znxzzLT80G-4Coz@AJ8=*JHQjrHXu2`6%ZW|5fBm(5Fq^j@IT{!%Ky0kr~V)LzvKU!
z|BF}+v(A5w|4RS+{O|N%>VKpEwf^({XZcU}pX^`mU+h1^f3SaF|3d%n{vG|({Zsr~
z`p5gn_(%FT@(=K5_Otfy?O)lC+7H<G+2676vG25Rvv0Jow?A%QZC_!($9{)>iG7iM
z0oLEt+Naqk*-PzX?8EE>?Y-^!_OAA9yT{(vo@{s7qwQh#AiLep{C@NM$?ufkSAIwR
z4*GrM_nzMye!Ki$^xN#W!S6}GHGV7o?(@6TZ>irRzpMOa`AzeifR#QY{095=^(*x2
z?$^;T-7m$jrC+>Xj9;W*BfkJYVf({&#`eAKgzcE^Q`>&qUfWx?*K9j%TWrtS*4ZAl
zt+Fk*-DSJYw%E4Nc9m_8t;ROlR%#n%8*J-qE3|dDb+o11Qfw`4@wOOSq^*(7VYA8e
z@~r$(o|MPsVR=CAlkdnqawmOxSQ4~MZ^$`mmL^KGL_)8Ofo?CxdZz?vlX)x+TI4F|
zBGMx{&?7go9?&Dp;E%Lw5%h@G6x&!0G{xJ{z3)Ps-T>|J1+>kV(5eqWFPvwqpb?s~
z=ad$BU1@<gpaoj9w^08(v5!&n`?4=l=ZCQ~s?K{+=Zmot5_O*YLGMoB{;2si+=<%0
zkVm41FTr}qrO>)<QJ)_{Yj-W`avo~(HeQ69{2r}_#F)?B>VA{Dqul_TIqF`Dd%B#U
z?ltO8Zqg;WNyj&p?&a#PU5<y@qwGD(o<<GH2KIbAnfWG(5O7DBxFby5>Fp-v(oHrP
z^SKFM1ULFs;|-;D9X(S!kmw}kiqhzov(&v--K*4Hzopc<RodMuEpAC^aZ_v<4WhU0
zRleI(ieSc926wa@ai{#XS3F2jZ&Q>_igJ^p+@zSdl=~D(A-6+l68D=_>Ohqph15>D
zZKr&<Q*PT(c>ESJ^Bc$|?!=KB6i04Q9Jv8+C2NhA5{2GcR;j0QxF%clKMk!hlz2t<
z+BNa9wMs*46?<#NCxoW#Dfg`vZ{S0jwJ+jLE5(&o%5N)`?^Y`1t(5y#DzsLLi>)O2
zYN=edR4!X8n-+=_Ex?INya!cx;%^J(yM-)+Ia$S%tllP5416D@g^xl`g=j4)>_mDC
z8<LYz<QI430C(g7cjDP7;|uO#rW_>5JJp?}Izfe>AS+;wS2>7RJcw5*iB~y`S80!@
zc;SZl5icqBIM_?((j~w<!;YSG2@s_cAW9`bluCdo`E{wdTuPo@Dh)0bi%Z3VFqIoB
z2bW3-{3)~cOSx#S_|shZZ7!>o4N1JE!m*SuOZl=S`LdK;#wuU2<etYUUd7N`9)-JP
zF=z>s{1Bzo6Q$G>rPLGE?sP6=OfHFPcRH8!OmW7j{Kcp=#;6p<NUDhlN8KrxF{-Y`
zD1N}7veAAim(5gqo2d|*sa!UbbCo^GNVJ@&?laV#<S1IXiI$fuGnHzz)GpDlV@;KP
zQ&rkcm3>o5_9vD3xQgYt3iG(6FpsOZ$JN_NWfQ6R6Nz!45{BLyD7DjxmKjPi9jVe7
zDQ7G5Om&~C?)ojIE>gu4snQY&-(*8+X`*u6M5U#PlD{T$sj{asZlXetP;VntUL%y7
z2<0Ziyrq0cs4&A3nq=Xou7ToBxbhLMe1|I^;mU1eWwTwGl^$lBR2ny_oNrR8+l050
zHNtoprMMAB#p$U+afRqa^E|^);u6_w*TmCCDh-WPyp0rx5Sp?lt~63H!iO?zU&NJA
z#g$OyH&mrFROKR6xeryLg{l;Ws<=Xw%Mj%<MA-x@P6QiHfFjgj6-Kb~9jsghsd$3a
z+aUGUsnX&=P6b=6+&I)*hvJGu`E{rqIFxibREiwN7v;dA(iNz*PN4D|sNM!BmjTLe
zfC?u-#TcMc9iU<iFfJ(^f7nZAH@u&Qw9u30JyGI4QQ|#O;yqFFYgcjERhsQ84R#fa
zUB!Yhl^ZGnyGjZCDYN!VCE%wx<EQ-kDZhTorA?V_#!S9!Dn^@<NU3~D<)*)irN4UH
z2X~2n+f;<7DW#sCDfL7t^+dHholAk-Xm>i7^sL?KTnd#xq0%T+iiD)vhj7%Law$|P
z3B?ciS2ktpPPt^>pMiJKN59AqJ9rpUg+9L;F>A?Mp`X|W;~4EQ&qAXgsqmME{$d8&
zgjm~!T?HM{W9*FnVm@Ym3eoE8iQZvvjFR+4Yq7s-Ee=9!k$T-j(N`Rfp5jRKN2v!s
z7QM*V(PLc4O0gbZvNE*&{J0%0xBwo=9caS^p_d)PLwO_Kn1^9*|2Fgyo1j&98QO^D
z>>Q6mZ!8*Z#TaTS^5*ENSD^prVsEIvc>+)5Njw?tzm}?>-Ue;Jb{JD=&)pb(@UXKy
z4Sn|vp2@Q?%HDx@<ee~j@h<wVZ}Tqf9gK1P#=G(EJcs9^#h8y?ej)FHT{OK+Z@(Yf
zp##`aj28~#gVCBCf}ZFEi~(SW4SJ&=p!fSe=E){vtbMc@7Z|77sikUspaMPY^=Pk7
zq@F6q3a0QXJ{6;n)#$C#sKE@hU}y4Kd^S6VT>^9YJbnd660YP|@vHd)eht5tUx(K7
zKK3DcvXiiTXA!>vt=*gWVtzB)ytkmudn>;U;|}Q8V(j4`7=5^#-^1@!V-U;PH~ay%
zm9L;aE{#X9<9bAbeT{za8nlrgWs_MY=B%f(D*hOM93#a~@F)3Gd>wz9ujkM34g6XD
z9L6s;VrS51{sP~^R`RWAQ)7n^#w4rJSKfi)o|pMf{tDm4U*()#j($Q7e~r!HyU~As
z9sTDw`CI&L^rA8Tf!#!V`3HO-|B!#gKj!<{ul%3<0RMy^<cIjD{4;)-AK^zaf>6t5
zVa#<lKgPe{$N881EB-Y<fqua^{3QRDpW@$PB=-mYBR`GVlb`t+_BsEBpXI;u-}vwR
z4>pIN<L9{-RfMC@G8cQVu4MCt5K`ELpRfym5g-DELpVi{2*zl~Ga^KUibkTb2ovEV
zLNpPP;xf@xM2Tq8OvH#-VTtDK3*i!RA|CS=H;F`%MEjty3#t{(udu7pD_S7hvTH;;
zjNrEyZjmZHB2A==43R0aM7HQ4I*LxBv*;qaif*F2$e}TQkuM6^Nm0nQh#sP+=p}lK
zKI}`;SM(G8F@|zV3=jjwATd}Ji6LUB7$$~`5n`kmB}R)eVyq|@<HUGTf_Ws&6o?8j
zK}-~rM5UN4ridyrRZJ7rV!F6o)QB0PR?HN$#B4D~%oX#*6=J@)5;IU&iv{8uajm#c
zEELy^MdAi=qqqrs@@^JOuuEmBxK-RHZWnimW#Ufp4{?{cTihe=759nz#d7h0SRo!1
zE5$=%m3UaJ7LSNEVy$?T1+s9AFE+tg)MczGi^51^Gt5?8WQK$_W}z6fw=mLV!&qEA
zM&umKk8Q-xxaY7xZWntMeaM&CV;HAw#5S;J>*l;(L60(*W>VBVTUU%<6=NJR40G1q
z*jFr=UCVZ2mgB~MnP<Tqi<)bBRlFv4i#_aS@jAwMmxwpSo8m3>aP8u4@s4;`yeHll
zd&LK0pZHLGBt91V#XrRX@d<Xj9TK04&%|MIL>$Ggw`1Z9aa?>Uz7k)H6XF|jQhX~;
ziSNYs;s^1gI4yn>KZ`Ts7jahnDt;5ci$BCUab9>Own0iEX{V!~w4+D7Li)=987Ljn
zDT8FN43VL-k!&o(WVnowO=P6JOg5EKGFmp1F)~(Kvbl80I2kV!WTH%x$?Q6eRQsb(
zewS>)7Rr{gm255B$hNYbOu;TAw@j5DnI_X^hRnn|hix)jc3=S*_57Lr#Lmc$vXksA
zyU4Dxo9r%gWUkDU`LaM3${w<(q|wIj*!OI+?9E(i7U)j&_Lrgme=93tYcW!IKgJO6
zX7^zH@Da?SJV>L7vJdt)^^^VO069<&l7nTD93qFxVRE<}AxFwla<m*H$I4>t8XV7F
zz`RkZEJItn0<Gsfj1=r=M=)182`z-latiw=#%>R=PuL->M>)toWrxvvpNjd&YB?S4
z)f&uX)?zMm7G^W&U_NsmW;EwxPLoE57szYW2=PLBJ$72%Aa6vgX|cRnF2R`bQp~K}
zhVj-r<T81u{D-_t-YxIJ$m@Obez{zYCO;@Ko{Ul0hvjPQXk3H+jE~Z8M)?GGGd_jA
zj89`H<1^UD_$+oYK94<&o3MlN1?*qkirtIbv3Kz$xkJ8;(Un)^F8Qi_P4326%j@zD
z`KEkJzKxNWcjbHXeeC}F0OK$p%8%s7azER_UiQzKT2fY1J<Xm|T2nEr!hhzpN_T2r
zKGD>I9Jiq!L(>h-G&I}L97FRAEzmUA_|G-|bB+JpO#htfiPh68rUV+AQtnhSyVKoi
z?o{&aPAycSxl;?2Z?`8sO^50>p}8}id1aL~WizKvsH&Lb$Sbd|Eh#Ijm{x1gFDpTo
zjBArNw@I730IzGROKR-}+EsyJK!IX_qo6JrlLwQ>ToX>N2`AU&G0)^N&!j5P<S{SP
zzrf_tP+uNXvwe9?El4$-OjV&F&*{z{4f53Eg2cE}Jsx|H26^+i71!M9SqM>a$DP_C
z&Dpa)1f2(uNs}kX*0Z#v#@?&8vZ}nozn9KAxj~s1YPWeNzj-<Sy>$9@$#@EUsYWvL
zoV_oM!=0LDa*}5Fkd|)mTT(W&w!+@GF2!(_YwL?V>8R?wm?+Z>i_;8i(+z9WJ@)=8
zD4o*6Y<vF(L8fQu(9%sN(@jFsv;7C?3<eLFG;`X-lA4)Qt4e07xZSDwO2|?R@=S5&
znK<)JocSgj`6kqS6KcLnt2;H_xX<wT4VYA2V}vc=<RIUKnr~bcm{5%<qh@KQqJ|l9
zPc6vEv=7z{8(fz=*qZn<O#B%ph71!!MuELZ`EnNhxkNHl<Ze%@VQ;2MM5f7FhXVVM
z1~Fx-klm^JHN2UaGEGdGI=Ix#O#4tRKSNE;8LDcI-_V-MX%mBoUWC_1H1kzSf%jRu
zAoDvInyX8&!0@^t({E@!PYX=)3ru<nOnM3oZwuZ2LmLWemWOz1A3m|BWLAZJxMt4q
zdgcTUFR!eqshCkY!#+~EagMBisS}dz3)&>8&@dm8H%f))7<EC#OfBf(<EirDPR&-e
z31VWHids=(xK+|n(VB>Ij5OvbPC-13Oy?+0;aPDC)Nm@tr=U%x%{BgWjsINZKR3(2
z#3&&{eM-ok;gdWl9TgfBttqE$BPd#>q!zfdoMrVaa+KBO-Co{6e%vN)Zj&~5p}j)C
zt}r>T&>FU)&cEh%uE|`k2_V-5kn7V(zN%_6muE7Um*rn!GH0kSbEzGCnS+KkEKD^e
zQkdbK*dQ|#FGvhjTbg}hgG_l+wT8`98rC_f-ltBx$E2l$kq}R=Z4znNN?k)Lb<W8x
z#NMzq&*V2R*T1r%;Cc#usYWvLos%z&3%b+fB+c+4EhA{k#F~nVX;mfD$}7w4Ra$#g
zspQ+LkTD%^nyD~#{!RR8hTmz1&*_HG>1p<9Dk$x}u!DVC9Y-M1CZ~03*Q6@FgL7I5
zo&Ql&J$+Jzf3?neaP>vhfvGFLR)+7(<5S7`CVyI8q!ws(0jkoC6qxj8r1@3XtBHJ*
zn|vcZ`Nma&$(2vI3v!L>&Gm6RwICzQjwO8fR_PqmV_lB%*6=IC#E@ZP$SAbWP`;cq
z{#;ZUTG%|P#%rcYL}r@3wn505DnzJUm1C$}6GNtnA=BicgW@sVW!YzH!J28R)J&~<
zXDZb@^CG-9`bdAiAcN*}qCZr4_9;^%#|2q_GwXR;V3J>8(p6y6RbbLph-{e}XsE9S
zW}!U-B|KXz;n|u^v+LOuIJ-^>&(%tJZv9Ith13GALQ@M0P0|XDpg|tzsqh^0E~vXu
z!bWg9C?60M&0dcdd{iLA<_uL4-JT33h@i?oCrfKhJS+b>x!NAjO5{OxF?h^3*^{A4
z)$Qq^1=EwGneEX61NU0_d$i!-Suq<_X?;*5CHlkc_Gl>qHR<w+MW)V=C)1=O)1;$=
z2`^I@s>gi6J((sw9aM24Ji`b5CC9VR-lU_0FCB(v8UAFM{AHQ+WEuWt`SNLKrlDCT
zomnQGStgxXCVg2ZU0H@NSteasCOuguJ^K6O_GFv*vrYWjCjM*_U$zNXe<k7Ggr9A~
z&o<#_8$M;5c=YET?oEC>nEZC|m8Xg?HD4=tl&^`;$dyNbt=*m+ovu{f^hXogq_0D^
zoG@;JA26;`-7zmTu2z|91J$P>Jtw6^mZX#fnh!wA9A)px%=Vc&<ij+tqNX~9)&mEi
zucQsNv$c(*b`n&-vJ0G0J+sD`DrXsYGb-mOE5{7<>ZWO9Mdidvwc6pdN)sT}HBW(V
zd4uLUCR9$GSyNG7GGmf@<xW+FiZ+!h98kqH50sI9ufHxH^g;A<x+(-btHObM#dJ?v
zswxCf-?I)cO@Eg?Sp_=0tO6ZQfk!ddQ{Yid1yzLrs?(FIzw4e<kJ~;owJ<d^N0VI5
zv>7v}&rnQL24Wf+4AaP{nWjy|H06$%rrc?!DWhhZa;TW5Ow+4o&d@HWR!;L7D=wc|
zQl)G|rkB*<vs^KuRy~HQ#~Q_b<z1EQjG3jrB*LJRSX!UN(z+y)NhcBRbQ0mtmqZwS
zNrXd_M3_tx@!FR}a%qxSI^%*Qmd>~^iSVwHNXy$57nOmMNCv}2GHNbr6D3i(qa-SK
zI*H1tlc*f3B$BB?66mpE66o1Ey`rYFx?BfURy}oUi8AVx(SmuEGG(BYk-?;lj5=l7
zL@875C}ql>PMI?5lqrWQWn^lQGJ0&7GJ5u<jLZ(5GBVmrRB78wH7V1iToWx}_6hoF
zq9&6xsnle$CQ~%gl4PH%pQdS|#n?VwKh<cWCDE>B%|26G&eCMICR(iRbM@0aMX0*E
zJ$Xjw>BgzsqZ?tMMi&>jgOt0B4%)BEV~MR`W=*vUAhm-hxU9OWdfHT|sM?a6xwfjx
zni8!Fax(4HD`vpfJa({^S5KR$A9Rn!<JLn%pt^dy^*0#LMvdrU7mqu~sGnS;R&*!9
z<4MhM%&3C0N}=r+BoVcfDr?FEArZ<jL&cV=zvytRl}xJslH*y2ma4zlcvfEyP<J4L
zQlc>_NNHMap5dgLXv{%Mip+zFM{yJWwem{UUnHbb=O#5ZEwExnEqVpD73JCozC9&1
zHPy3cPB+h<K=oW+JzI?_pb??IPG~&nv}fq<gC`4d)Yep%Of)_-bl(q+4dV`dKlQ%c
zgkw0Cp$DuGo=$6Kst!LhRX=B?YK5DrTN6;=IxlYBdcw2$%Igwxd-OmUsQH@e0VGJ4
z`5I#&NlTjf8tV}k#IL`~X>Par_JO99DVJzC8k^KQ8;`N^)Y+sNo3uKcbYqiVXOm%U
zGU{wHjZJ2qO_s6As<X*9HraJH9gIzfI-4A0lT&AtYix4sZ1RjvUY$*$u_^S~q?(+j
z*5x!+w<*$eDY(=0;0>teW||(A!L#P3`K;nuw{6nQK%)7qqVROvCQW}v@vPf2X{K$H
z=26lDd&37$9UnY~51u+ccuX2Rx<u1FrUX4&SEPBg1f->zIMcLlNlP<vrWyabwE=-L
zdC*M=JexeEo6=6ND{VdW>rT^Se4tte(=rYJGE-AZRJSh8tp-<vN#cw-rL4glcY`;O
zw+3(08ko}?xPmk_c$3%Q4a(KLL8Wk~nm5XP!5d$k^rk*edg{=?4`i!BXlV`JK*G(N
z%m(o&^965w@z9(4c<9L&k1}82#}^O1sgH-!X5>P5w$W_Un$pOPC(WbE&Xa1IYi9V_
z<93^7pj(wSp0!4GyK@~grk9jeC_SxIom-1bVL@Rbts1ZaSg{^^(wGzRgths2mYAu-
z*`$nixv|(ibZ1P=!_8#?ci5MsAh0J=?e~m_8`>|Fpdl86CTfVUL6bBj`Ayakw9m7J
z2IfW??Ha^t1t!WsTWbjH-^A(#1sMt2Rzu{0l7B!92c<ovfXD@HuYsLh4C@^jRyZ)6
zFu<_RfnlWs6ZxQ>HDnBE7Y#|fk7zAEAY(zhX^38+-8IBbpgF)OKmemPL<K1Jg%ZRR
z(6Jg~0%);@B%Y1a5aU4&WIvco0OB#F=L!um5p=$Wm<)QQ22S8%n3Gn(Ze@o34jLTv
zAq~+Jbd`qq7W82aaRPL;hWHBf5e@MT=o$@C1-e#4Ob2~b13U5=W^5J2wV;n{h*v?M
z&=5mGpVW{^pigP2GFk^SAQpl?tszH%uGbJ>g5o46f^>my0G@^WTR@-Fko`fizm_0d
zf?}^9L0k^HNkb67H)}{LhZi)&63{Ig;x*8%8e$meHsD2sDM4S-5WPWn0K0%pfbvP`
z0+4?KrDwOn5YRoq8vv!@O@mU<w}5wm1;D!o#E16`yrAzJJP5iM_y|}He5@gxg6=mU
z9{dyd1R!?@4Gw@FGQb{V%&01mXkdm_fv*5P3>?G82OH=Y8r%tbTmvV$Fs$iT;PId&
zE07)D7L;TK;8eFx0;gamK76Nvo&OAT$_kwF^n(WWaWM8Ha0c#cL4VPZ*k6skBntd`
z&|iVy;btx99~%4#&~qA`%HX^PCq5DH0FH8?e5$;50);^#5L9STy~jEw4F@RluXxZ0
z)XxCv;dTwIcw*e&0CkNAXkZ-_;}k9-5umUDtc_yCM}=h2APuaVVm#O&2{c3lE2$U{
zHE03aNQ3kTZ*0&8G)#k)frcBTf?{Vkfp&TGCI%kRNDZu}V%U?Tkp>DGB47s`!`dqi
z;z_gy=^@_Cpgkz$K*<8ii^m$|f?66_&%>~4OCt}|rGY&{jK>+|gF=Rs9L)wLJ`xH5
z;vGPGjuT%9y#V4JfYmpQ6JH4Z0MvN`Rz)!0%3u&^YYnWEV4V0xC;}j_N@kaUwlg4}
zr)Xe}2;-Db0+kVDTFLbyP~tCP6hJ&BNPzfA_z+0fz`6#;GYm$9W@=z{1LIi+V?eVF
z#({Rwz$!9^Jy9CtK}mK2tixbf&8ATX+C>8^G8k62X;67})4&c_#=9Gog63#o^#<cq
zW`v1Ao(9%*Fzmw8m;y@W0kD;zg$C82Jv6X~mSHEU##B%$C&CP%w}AldWAFiJUk&<h
zsPdySoD1~VApMRNcpBG%4%DD;3#W1=%mW5%kgiwdS_DdEG(>~#03B*@8|W|%>;Tl|
zN@YuY9-+Zr1|>Nl5I?Dm0n+8zfu?acD3uvNdYx09BoIG~HAvTUDoetBz<3R;ie#M1
zhHx)XszExQml-?+TCPFg1YTkAAm{`QoHVS<jLK~dFiC@SKX%7y5U(a{(D#5-SrVQE
zsx;{Pz^Tj#PXSc_0s2;ODr3SrV7dl<H*i{##?zoR8l>-4c~hBh2S_gfr0@AmgPovM
z{{gH)Vp#vE@fzqH4XjSmaxfQeeuH_Q!CRnLXprvb^9|ksy;4Jc8?J(x@HVi(pgHKR
z1{{>i6%eODmuXPjim%k5_5!CeAlv{@J^}g$^7RJfhVlbB5-w1R51=+8r!*0QfOj>p
zdW~T(s0PU<l{Y}`Bl=b;P#Qkapl>qYXFzdMc?0Y)=tl<6fPSpOj)3kr*Z@j$0I;K=
z2MnGCB{=}FbCYo@d%|-7xdZ5Y6s*G3us|u#0Ctoz{-r@7=m`z1L1X+IgIhqUTmhV<
z%{Y}MAqP0Cft7Czr}k)&3{qJFSWV36R1$?)@U*E0wUtDa2EQLPT7%j_qL~KPxH391
zf<QbIc^cTo$^`O5Af5?&1~_;t1_MPfgMVU(22R3Z)J`Q3&#3(;M!*aniIKn<n871z
zM^aye_##kG6_5pL>r>mDqb^WeoWQ>aMSUdjA3;$c3H%38)I~83X7Ec?1GO-NH)1Am
z1;BwT0m!om02TlX0S9oSK`7`=z#Twi;7;HlKn!q?K|JWa8vHQmat;0+D9VF?lh>Gd
zP=m@!K=uXk6*3@JYv2?wCe|7>0$pzaSr;1&-UEf4DG+Zr84wRQ8+;1-f`;r3x)s<4
z^aEZ5UP61j59rGVl;+m}=l}^h5fsP!0HtTYhNSZOr-mE@O63R0QJ|k_$YM}R2Oz0z
z4{6BJpp+&8WM5Exgku23LD&mW*%K&Eaz{WIk{OH#<p!mo!T>Tt{Rf2!pf&@@hx9Xm
zOkiE82I__MH-LOdl)b`q&_IJ4P{@G-<VHFTW`PD7%mIabD9i(ed??HZ4Fke~tAM6}
z3s?Xo04)H>6!oJNZUt=xv<7Ym+8QhaO#xB?$em0#xCgWY&;_^`$Te62ng<jBD*=?H
z0+n}(!NZ^w7J=e<%%C0UHUmo64ufQjMI>pEK8Qv51hE^mhXz*tve=$LFWA2U3OOT)
zw?UBx0?AYCKn?K$=wJ=;At+>pAU*;e4vc^qvK9-uA&`8<F4w^7Vit?M5lCKRw`z#b
z7>=LQz@7<gXw%>>P?S3XJ1LmuuR(2O3*}3oF$D|dOQ1Hch4LlP7=sn8L2X_uM1#f}
ztWXVV|5}k6>~he{G^lN8SsK{4%dF-aygR5%1FPtnMd<*jt!E`_(0GFdo)f5jXHgsg
zjXhXxG^l-Nc{H$Qm|1BW)K0P>Cj^|#z^n`nYByP#8dzz}tSk*`2U*z~>@HBq6@l7B
zR!0r2LuOVd4Qd}*T{W;KnOT%ifZ9hE<qg2O2h7URpth0)`6OUXGqWH&1Zp=~`5H8K
zVijmmJIE^3pm7w7_ySOy$byU!XiUX|tP!YvWKnqoG*)3z83TMF=r9c$SFj*g1Zt;P
zkS_w;2|7}P+9?*v0YKvp7L`4~QBN!?Z-B-iEaES~iHF2ffW{-NaT=U>I9`Ls9;^}#
zoQlA#QVs0kW>%R7_L4A*cmdFugf&HjuLP~qz<wBJP1WF(cjznv+Xq^$!B>MW(4cVv
z>lzKd1N2%A8Yi%>)8H?I5|02HC$O&9p!SxvRD;F~EaDe{lOUOOhX#!YSi~=Y+Fus&
z2%xb6i}(UiTg)O}0MswBNQMCZ2<Qq88kezFYS5UUMREX8f8C<82UvGd$}>QHcZ>1~
zupCed3*e!kYcz1;2D8>`P@mp<R0AvEne~_k_3y36HL&-JSx;zCU*CFC13R*q^^^wn
z`>k~v*r&y;r!}bmZ>`tB?k#3Lqe0^V)&>nmGW)CsjSX1OX<(-pv!2(WaRO_j2I~#F
zNrT1<tj!uYbA?$iXi(qR+M<E;L725wgZjbNHVvGk!>sKZ)F-xH)L@mMR38B9A6q*#
z7|9^X1i-UFcWN+_N0JGE`pwoZ4Mwv0ss{C;Evf?mc0Dm`w+8j4Es`4mr=u|Ibq(q-
zT5o9Jv;$_nsX={5i|PzOW0}_58q^oDNLBzE*R)9H0P2@mBxeAPZ(8qbQ2)f*t3l(P
z)(0B=YS4WeH1=tIsKFP2exyNTpw`D4{2I{x8Z;(q{ZoTq3wl6<#yhP~G&tq)pazY7
zT8A_^<?&Mu8V9vL)8LCi4{OkvsC7hx-wb+GgT_a#&o%fG&|?}jhG>1E!AXveYtWdY
z^`!>RU18Q&8Z@S8eXYSM%_lTye9`(wgHxJMYG5}Tv%b~94mD<-(x9<O>pKljY5rb=
z#wD#EG&rUCM-4{wv<4^H`ALJuAg!M@`0Jo&G-y21qIUo%8KGx@{R(QpAuld}4G9@^
z1p-dAS0I0`MjABk?P{!{%waGC)W>k4KD#1d9s$}!LyQHD)DShGO@S!5=?5CEL46xn
z3=j+Z0ic!!^>th>AP)A^K;t#UIM8GbQ3%>zLn2=;w+6LgT^=9}>F)uWp&@&Lb^tme
z%p%av8e#@$7Y#8Rv@6gJZc0G&HN<&P3Jah<kE^GKm<3AV0@Md`P1g`NgI=y7-UTH;
zSHaD#pr|thu@4mW#I+RW`#|s15Rf<5LmJ{c(A63Oa^YG7tc82Xh3hd5aT@dq4e=8w
z>N!C`?p&zD1o1oQGr$IzAtSEmfahU`Ot>~{h(ADI03e$Ja^c#pA<kiXEL=l^$8ncw
zi0eR6Mg*}46lFvZ*Mp*r2(le$iUzg0;|6NT5YRyY%9+~qaYeu=nC+mWfnu0LL2uHK
zO+ar0mcbrn8~3G#gbs~Ic@tzSQ1~ZMJ3Jo#39>zCV-0Hi$A@W1<Rc#85`-5NvPqE9
zpa!xH%$5fAG2-bNpngR>WPl(OLC0%I<UhU~sDM5EB}fgq3l#ECkUKyj^9jun?;Ox1
z4f!%C!Y0U_m}Xq5Au~ZyZb{F=z9Z;HU=z%c-=u8-%1L$wMYu@_Lv{y!O#{2=Skmhn
zG8+{2gdht+-_nrdFpb#=0FS8OlRR02`aCUAHUyauin1b5KdHrW0A(QNGnRrpryvj1
z=TAZUQaZsr3e#?oF9MC}JW-@U<2VpS1(5*C0f8`)mfyjv-)-=lh-MGUgCO6;u)}0v
z3hZxSHV52dKQsPN60;NSF&o+)J&o~f9=i%Vkr!Z(@iOcmUXNYA2l?mNkNXXF-TsRI
za%_gZt$Em!ItDvXYq6{JD(oY@5&K2|fnA~xV0Y*$><e9s6HA}PUd(Mc>+)ss7WP(t
zDn7?P$58BUbjcRjsn{0#6VtK(umHOSORyL3G3=k)f&Ze)i|rNLFLq$;;MftdqhpuH
zu8iGkNz2~~wJx*btR$<A)ye8*6<K9gwROF9t93X2i|SXGzsu>0bVa)?SG+6P<#wgH
zGF%;9-CX&uUaresSGlfsEp^@LddRifwbu2R>q*x-*9O<~t}U+Zap7^7#ku0*<C5c2
z;s(c!iYt!0DQ;QZm+>Or9v>PX7T+X3I^K$J6W=p_e0)WMOlX?WJRvEeP14GwXOlK1
zZBKeR>9wRclHN*goIJTjc#FX;zD!9<>9qFwCyIWzo%iCbTU2}I#td@~dTS*ZWn8H^
zdk6MrKaCyKZ}X$r>wE$`n$Pk-u=|)eI}p2li?O$NCU)yCP<wOl#17o$;Os+&vm3Av
zb}P;ieHnXN-@{JT!`NLKioK&vu{X3OIGX~_cEFC#KXbMRI6DBG9ahI#Vc9K*6=_*k
zqSadc&(~o5&(~yYfwffq%hyV9Hqh0`)zlT^a)Gn$T^?|@gR3(*+ru^8RSV88Fq~Zj
z&OQOoKI3}MwfRq+9T-;>HyWJ1t&X#e!P%%f&Xz0A#u(0SNZOdREolch`#Lz=$Z+;}
zN_<L3#aT!*aTX`iGw;j5R&belAN1A`#jjYC`n&gm^U#sro4hyTzQlX8cd_>d?~U|?
z=aJqky<NPO%u-KxV8*67T79U$>W8|5w(11jC*od?`oY+Amg~L8yU<(Zop9{T7Yi{_
zx&XM2=ojt2X!`}~+`s!Bh2H=C#m}K>^zWz(&rLp$I0`*^bPL%XZFY3%(deUtj`ly=
z_h_G^y<yYuX#UYW(C$ZLk5nC*aHQ<0|53@<k!O!QcVx+tRYwjUX>la^2tqo10=9vN
zy@wAT-g$V-;g=6T`q`Mn%Magu=&nOI9$Iwh+CvKtUC!8{WrsWmKRKBC$(IN2+BasO
zYgFPeaKrW%<9q}-TMIw~;pBlOlpgF1E|jF5d&&z=23GIj7H<~N-S<O%zRPFEJDfD!
z;At^--7beMw6O24OzZ01Xp>xx_iHqa%_{85U4tFC8?ftk3pB<%@|ZksgDSH{*dmdB
zRfae*ZNKfH?J%B?YJav*$!vq3z3^w-Z{F|wll>bPKEwBm8h^IG@Y%NV!e{+tTdF7*
zJ+RAvvG`hYoEXqY?cbj&BT?gr<6MABIu`&ty_?BcoC$CfcJ@yZ6J(qiFZ*GK|70-<
zBXb<*1$>KL=U-vpd6k$hhhrE2t7523LI?}x2=S$K(GGs>z;1~X0E*>U?C5_@4AZ;L
zMQ>Jru16QvpAA7h8OO%6Qnr9ygZ=XhF<1T|Tg@I}Yp}}WQH%;cj}-(TV`aesb{Z!>
ztY~nChZE;=#G5lW+;mn3PRbaJlOCq|PPX84WE4)Wz-bdWW8w*%60sMv@SQL#-Wjvu
zeK5m3lqcXn6%uj2eKO7?Phul^3pN(Bvt>LL{~_SP|39SRWQxxC|B3djmglmWJP+qX
z<l}sZ0yZDBi&taT@H#$-UC)cy63o^u#w_h3oW~(COL7Zl>XzbMj&baEKAtV(I29c8
zZFllgoMt`|XHQOn7OuwWlT&dLhu|OJ#L~GqbMiX&IG@Kh@<nV1zm2_uS;3e29c(wh
z8|RMPgL6mj!^xBP;;hMsaLVw5IGbY)`zKD%_yn_Q2QhPY2(x6LVwUJ6X1~72%+OCb
z594Q?GV&Jt19L&Y^S3eEbOqal`K04~6YGk(p&Kwq`2@cLXH~9ehxs!&t#SiS9C;S!
zT0Do-_AQ)fQOLIQTX3pIj`~N60hnih6LTPYamMIJI5z`lX>c!2(opAU2+TUDQ!>8C
z2^l}=6Ebi<hB+OB&c+b&IBDZMei~nlk8!HOr?NNp<d4Cw{9^3TAFWO{*o$w;AvqrV
z@-Kb@_<Xg${#LbrUY)xtSBX99B!%~Ja>7S+Vgeh?@jtIT4*v(yl8wfw<QR-VUe3GW
ze30(=Uy&Z{N{kp@h0(!VF%oziFJ}MX<?JqAfzv@JuzN8|cOS20_ha<!A&j)G!l>HA
z7(sguqh&AgTiH&Gg6+bH*Q@*=I1%(NoE*3u=eaz<-s3CT2N-$Uhf$_ed<Xjuqenkr
zr05Jrh0b9F=sZp#>4TA-ZWy`gj!~K%jL76-^d%1?E%_K#Dd6GwUyBIV10y3nF$&TP
zBObjmx-kJG851#TF$p6Sl{|}0#>m4Ij51VVL}4mM4{pRr!A%$ycoHK3PocNJ4m$H`
z^y1g^1?(C0&NrYZz8Ssl7tq7rg5LC2^qjXrqaH(#_zU!YzeG>>EA(o=Mi2G`daK`{
zXZj<0p}(NVc^19PU-_G;*~8J&q7y*I;!F>m5rVTp=!B5L>ZFfxI9Wj8q>tI61Sf*j
z;<S&MILG5%oI-IDCr{u63Y;rJ=SigCG>K@O4v{SjMFO2fK&P2ND{;WVva!lSs5Abp
zKb`SUYyaqse;a8qd~@-|VK^g+*{4+0Ok-X3eQHU~6xP<<r%au~lBcRW+;X%nseMT%
z0pB)+WmiuDEU@+7)~i~bPqHQMOPq!O^X$wbSRmfXxCI!&r8CgcK4k$+H2H(#j~;(n
zHtWLB=kPx2J>xy*ebu`j@Bha??*W8;0CC_8^}qgkw|gJ=?(p7@mdA0#@-;y8fcKR5
zN0?5*{J8fC?@I4}??K%EqZD}YCG#ExR_IhyXk^mVd#XM!-jlG!{}t)?_4b!GsT3Z&
z^!xfZ2-8nLA^acc|2+QcN2#g*A^#^8A5MWE@J;;jy~V$0_%X}(43~#|Z!Sf>pLxHh
z|HAm|AN_lX{&~-OfBHLq5dSHZ(yQLb$sf!oy%>#BCMw4|e#3mw`vyvsxc&ni*zoT?
zfA#Y)x|&|pnMc{uN#ZTpK>SNe2R4{&5Wg<bmfp2!$+o?auMI;2Prmm(!_W5s(nY?J
z_cQhW!0C7v@2y41kQRyoz(@z~>%IG6`$N53UwG>6lKLn0FDwjo^+)(ZzP*RMo4gOH
zkW`x;wfsN)d3XLD54u$Tj!SX_IXSETk7nK9_3`)JY2G1@KeaF~7J~Qm#ccmab{6#f
zMSd4ALn<xE!U6BDzo%m_70N{-{6AQcZma+O`?!qOc+<NJdC(g05}FPY{F{=*-;mSe
z-Zx2m>hD~ATo;;18>#TACQ!Ymuh0*=uKV;7-aH9x@_yr`p&9k_zCw2Y`R}4R?OY#D
zy_V5-^=YVgLnh5XlqGm_>EFM9dnteTmObgc*L$^hpyJHS;K~v3<#q4#-nHI6-aUwY
z58e*<F85x6YoZPZ`f`24QdR#Bb*U)++CJj1o%~lW9RFe6*#@~-t950=c)eee=G9*p
z^}Vi>Ye*J-8&p1&uC3S5bzc%466)khrAc=*47uLiPzE61$1WyA7qg=fyyz`Al&OYc
zsrL<ABxtF5=cA;LB0co&IOe6160|??{UM4v((w2HQ^%TkYz^aUXjW;VuPO1jIljOc
zc|rZew~pR;Um~|YX@o85fx4gfFuB8fQx5bcYxui>M`-67Zk)jv9~#u>Qk&|ZefIxL
z>dS!+)7NJ6?zk`x-O{OV?_Bs6>HqD|Hvjreazej4T9;34Uw=oAQ7ZqJd{Y_yyPwW2
z>6d@~UFuu=XPG3Q7f%~pHq+svJWoTXku+=hYN%@(n(M;yeuYp^dfx_6Umypl<+$(D
z;laEM?W&gEMX+0sYq@tDTrQ!v(4^a8vrG9~{xAB2;tw;LC`N@Ap(I+Tg4%;EVcT83
z`E$PFwe7#TW9;$Y{yO7rXN($M<X4}!KfgrXX`sI@&g*(V^gn*SAAIVs_x`{1Wpw3V
zx$}j5Y3i#%s>G<yV<h!2Lv=zvsK0p9SEsyhQVe)jId7Q%3u9IqAMTXfx*Ak3qcFvz
zzw;=hkMKC@Den_1>|Ls#bkh5%dQ$pJnMl$oJksNJAzm13-BSqCt=!e6Tj@RU{TCHh
zgL13$)4=fO@Gp3dLb^%zPpa=7_2YC(_fs1IPYv$sc`af+2K&12VS|V+Fd}zOT@T^o
zIC>M8NM(Z_j?aa?KA?;H!gs4JdR_Rba)10%sj2@yC^=DFgP*_TH@-U;l@pz=Kl{J%
znfk<tgUaie;uPJrJ|eDBKWzmx{(iK(p7U;itCcDr>mfM@&=T1On^WEwbW9YE=C|)z
zxrN;P>kqLywXOPI{#728Q-tl~IZ41##C(Y2qwnDb-^5)wW7JZ4`T;GYwfZ}3V!LQ+
zE=XVZ3!eV#2h}DxfO@tALAAMfaP=jB@%NXq#f;OVxTes5gEGwFQwadu(dYP@+E2>n
zYTbS!v;JKu0Y2M*rQoU33jg|sY;@=i-|5<S@plc~`OI3M`JVn))VmtF$GrQ+ek4Ej
zHQ49Er>8FV&gVu`d`I^*{CX0%eLofUpQMXq)c5}H(Z5?Ze=oHE#+7bgPzc^-I-EaC
z1KJa{|F;;>_JvlapSRpljCNg0FKQS6`JMh<mwr@Y|01pU4<3vH)0m<^MuKh7M!^_A
zZiEr8K;~ljCv%pJD+Vo}ek_&^Vq>w6vIg@k1KHKMMqw`Z9?ZM1#!S{k%)JQAK-e(P
z^eSeq`eD?46fP&t6X7)a5?qaNUi*7EkA5$%d6;9_k8{}%;JOOulz)n|*^lB{fb+?Z
z;f(gLab1fw5#Qqf#=gU~NX@m}!2iH?6P-lP7Yi=@_!68u9>j0QDdSQ6E|DM-_zF5j
zoIi+D#9Q%)F!R@gufmL9Fa9Xz1V{46Fxo$sZ^rCk8Q+3gzzV(<^M4chHX7yU+i`~X
ze7+NFF0SIQV0FL(z6+;X@8+-K4C{CJYjl1!-%Te~V+KL6MF9PuEG9_7J$*UB!zggD
z5uU?v1)vQ{<L*sxaTbXyh+T#Y|2Kjw6mFx?XNtxp(I#$&dGQ!^S>S&RqyOQw)AtAF
zBwYR|iB_Pkam7H7wt=}Vt{CXOb}*;lO2%4~_GrhtaXDEku3$CZ8N$+VMWe*ik-7|A
zEihx*59uF*^(g^t2Ff)6C3*`|v>JP|1F$FWZKV8N?1kf)sr(ixKZUizp;*)RD^mL#
z*84U_dE+E<%vM_Xm-u+hL&f0K|L)9=lmC0d3<+RK>c8duAqC@L#y?EqUdxx_?X8$&
zO2XOt58xlWAH;m01M`_L;h)-fU~VY{XWzexe=2_qD~Vg+eESdJavydd`9p3#f*Z&U
zLcrV{?w?`DQ4D6^4#Uk6?4pUmnvdhSe}!FCF_58e@NecPv1`alk_0zru>&WG<Ow#v
z^WR~HR3T){;;|%1m5s$fssdnk2nX&#B8Vl6U=hsx=}de4i)@$(gPU*>&YU>gK9aS>
z+4h&QV5~5SW-TCvEts9;5C10KTC_$8xgw9b)XDU%M4>2zxrgY%;xOObleH!3WMMd`
zzBi+J>%J@k^HBX*IOd}I<9~k#V69;|W~2tfjC1SZw+Jf&Eu3CIgtf*A_CsMFCWgU0
zT#Us3vqQddFBZit602OwvD|Een1K5vF$wod?37Bt-1ijL1gF_gWqy$R8AwU3s6`rP
zVqIVyooNsAmEuaczgk?4`!(Vk+!tbZ)MYr+{(9CF^OAe;-|9Ho9ryRKI<O69JwL|%
z0Oly$Pz}L<>tG%X(ks|Qs-DpN6kSwX{L~c%dG?2dQOya4tU4i=LAb*36pZ>pwI~WT
zqA{eF>QWR7#}%t;luOm91XZJwRgG$;YE&Dzib7qW8r5Fas8rMr`rl&uf7_<eY!>2o
z;qq6tD?rt*An3XTNH%G^#;T5mqK37Bd#YW{RPBmUwX3<RUGb`RaaFros@m0B)vmUx
zcBQD=<yN&zKx-Bu*Hp*+*hpy5C}_|c<eKVRu+pO;s@65ap5@z+%iD1^!CvD#kk4h%
zuT7MGjl!<U7m&~Y$J%?q$8}Wu<2!d(yQ-`0tCd#Trrp&R)vfByYPKa?mMqIPw&iZe
zc5J5@r#B*F(q4!Sflyw65JCtfKp+Vv<UtY$g!&*qN(ccSkQc(kw18K??>YBwa}1CF
z|MMeg_WFD0&YWrIoH=u5=5zSZ0dL_a@cbl3sRO$kzJRiRQS}v+k4CH;e)Zo#UDCMq
zVch-#W%?!jbN$#u`rmk_F&yDB+{$CP9exQ*DhE6e;HD@9xVVEywct^$6E5Mwt=C==
zP=U9LpvnyH-jC5TfN@^R<Gd30dQ7USd9(}m3osJDN6bCgvs#VOjvfOJelxy$E7oUi
zxMSlsAh%=uJ9+%O;Qeqf#y@cZFSx*`;V1JMtkyQ-R*Wy;nK(k2IYJ9_gf@~PNP&2P
zj&HrFVUD07Ndg>_1R*2|I1wa?s*<@t6LWz&$dvyERm2MfxWHc#z5!lP$6TNqvLyp#
z3A+_*zzc8>D{i^K%{O$@1)fW!68MSWt_zHR;todKcu@g_c!Z1Yx<DM_2tnouO?2ah
zs*U6l-O&xc;ALJAXI>CvUJz$qkYp~<$>YC=$A1@(|85@tT|EA~dHlzD{HJ*Qr+NIR
zc>Je%{3m$)CrG}jIwZ(9gph9tX`CnN&I(m0M)+lTz8vGclO!JALgFF3R=O4;Bp!GQ
zBpyOYJcKl!qv#+KGzF{}iyn+2>}!LcffhZGW<0N|cEHwxbvWolu+FJ0|H8@!&j#@|
z=6I|(!uRuk`=6|LX7!k*FOcmB|NZD6YE7e9>Ba1rE#)*nd=xW<uPJ$A4HOhBGt6Ah
zJ-H|4A)hwoMIfw5e?kefdhS*w;=l4E(38f&>$iXt?^mxyjjm+wSjl|R!o1MJyin$U
z7Uq1ULs*z6S`m-5h!W;`I_7z0Xafhh7xBCb=6MF@c_#2WH@+t=!pwZm1TNqQHzNJP
z#JtVK{LIe$tcLlSmibvJ^D{m3vvTHSmEdI4=mW&bEZ}3C@k~6-!aPi39!9+C^FW9X
zRWS$Bu;x(0T&Ik=P6cxv19Kg)8v(6|`HhMBjghqo6LS|ca~Biq4{FvKOw1wdtS8hk
zS14t!P|mu6n)!ju2~4aTm{>P3u~uMWt-!=ufr<Hnmia*qYXUVq`qeD`O)TrxEbHwo
z>*)>~8rdY}wJhJwEZ>bhGW0Cz%xK3Fmgs_Ixf*S}MJ2Js)!?3vwP>^K2%`Jp$-ZE~
zokF+Z#-e%L&KVUZaOm%YlRu!k3%ccDc#aJqO*L-18G>8Lh%^Fi<JZ!wkdUQPdg(7x
zC!};2bdPRm3_VM)Nxk^(13rMcoEmQ}cv~*@Ko=}Q{69(EOMgSWmk{Sw#5s#NeL(w{
zek=`Q{FR_*G>eV+`!4?e4qc=Qa*xn3&@j+2&@j+2((6P%U7Y5hq+U+tWuV>2uNQy)
zOD`kMKS}=$O3IM;%b-T9#D5huyohgJRcL(;vB0O1B2k!4?KPr_-)QjWEK+<?L0-$n
zJ&RQ6O*XFl<}U?Qyn=83f>hu)fn2Gqub||AQfT`#G^%dA@4;U${`yfT0^!S$8st%f
zyNRnhR6{suU?tT##z+|2au}nEba%Q_`;_!Ugm1&{WudB-(g^Q`7d!6w#@=nAx*fYx
zkqW%Mlv`JDzsh0t5pH=-9XkZ?RSE5XA$6<j6x#e+c!wXu88L5B?a|(i_TQwM!(3~*
zYMH7J|4w6MMzvQX&0Xj_0$iBFqZFdYP`JS16C6HIp)m0CN`BtJ&ujR38;9WCh~uUZ
z<C&h<bNC=5R`fnCdXIdYyPM121}Xo2NZFU^wkV7iBgR1lUis+RboWa^*;a#V2vA;$
zK9swg9XWg$US$Glyn*n&*uO6ztL{c<fL=+rrc-WV+_g$+s*pcQMX^*ueM3R&-jY{<
z(QJxtJQt!7JBPCIaX%TyKa-EIc|nadG`kT0jQS_)AK-?VujBTZFT%_9QQSInKW?OX
zH~eOA$G=YE*6^!w>&+3|h_egcdK+-d&J;Xzhwxnw?)quNa~O97HNYR-gy%}N7MIbz
z0iUqf;5quT^dt2UeDz*Xe@=RiQjwm<-{+;rq))0Vr3dkcSn3|!>-0Y9UHJMdxCQD~
zc%fepIeZz?`U-BB+6TRTi!?8-fj{dg@@vEI0Pebq;~uOg+?M53CvltB4%Aq=q!Agl
z2{W4i0WbTddK|N$7m>%U(vNT>YEqrV9bwOir_@upU+mMkV`>!p4IaS#>G$G3vpX?&
z-U6-cTFk|d!LxLav_ou%_BID!)8%3rX#XO(Qd)GNF8>EMTcP?jhv6l<YyGvQF@&FI
z<Oqj%aQFm=Cpo-@!=G~aR{rWq_?HOP9ZP!<ehTtah)I6?Jcln3qQVL+@RFsU<N0e#
z)Q4{4Z$HM*FL2CF9P>CM2PhPk{QMHX{dW$Z;jg|yp%~$Cit$G&6m1-Tj>E?p5A*X~
z{Jfh((rTa&FI|qXigSE`)4Z2snmD8tV4=F7!!L38V-7#Zxy*8$?{aEC<M5fK^@#rv
z<F9g@y^O!cp<w)34r3IGs~NwQ!<7_@Sq_IdY+(Ge9A3GEmJ);f{2Yg`avgr0pWnwJ
z*R~kq^b;I@g>Z3@-yY)dHx$Be34BkrmXR-W%!~Q?MGl|g@D&b!t2|SCy}&vCf<m#1
zpTEV=4vzDm9KOs*9lzbl&lV1Q82J&!5q^&O2qO!O)N>eQd>4m*WTcG4N)F2ze;Fa}
zF~y$|{KJg7m_c;{|HUwa`V91$@8Q1$W<<YKC82yssuc7Nr>c`@FI~7(a5wy@Z-O6j
z4{r1O5PVuc1ApQH_+Eb(ey!h^ys8npp-y$D6p^B;yWr{jBis;n5xCW9Xk;qvVEBLk
zw}sOLcZ0tdg;c&0x`zuo_>JmQ;JkOJPpc|$&(^zDCUCM3fG?7EA<LM%u)jjU`<!Oh
zS!uFb)hA06%m>}j8Zp8-K6&#A+Fy_G%N%}#!_RU^t4wHP4oPbkwCfYCMJuENscWG5
zSy|`g8!s{cT9S;Y8JabacT_oI(f>$Ryj^{30gYZzETFSiA|!798;SV7kYzy08GgP#
zAHU??8l<K9G~(Z1aQAxA?d!NZ>|xx-{!9ElfL#su;vTY>a4*?QxTox9)ZJTfzu7^$
zof$sbbGT1!Ird=m!GE^{`+EXvH@tZ*@a?@8cgRWb^!*d=pZksaFSwoVC;0CN*cb64
zZnOJ3(x!CJU>Cp_5%*f@b4YQI^r-ZZIx5{SeE?}u8uaGf$gu;r{oO8|RKEq5l&hsH
zkpDsHh;%@G3>KQLxPfpMGrn=m4|_n9TT0@)IrSXwJq#noM%<TJ16}k{nrW)jl2+0p
zCzW_Z9fddgYvRA8KS3t{h%{i>Sf7Jd{CV6i`AOV7`62N><oYLQns*`ot>RX-1@m3_
zO~bx=C2q+)j2kp}h!>>0aU1-+ScBT1quLi1Zi8?0Gj19LvOs!{kT`U4xQfGW4ktPE
z)BG5gSc>^^{&s|sb^Lq};i|t#|Ax1n9H)uHa*i{?aXL8kG7{l%Gi*u%c3MjFMt=J!
zhr=9JbDV7)ev1&?@kqJ+mg5IGOfd2njz7vVeH@xN{<Dm)W~7qCCJyVBXR3|ga5`fg
zvz@~LhhdI$lHac9=ROK?`y_pJ72_#>{tAWIK!~!aKFi2supbEVS+3h}arjOOVH=>@
z?&WX~BL}2MfgEMT&)-Hkj7mD-5At&hg{r@D-Ig;_!{IoGYd9R>a2toepiqT=j1(@X
zQ1uc{R}re8Q7Bla6-kac$Z>l3d5)i>{CtX^`}lbi(>BB5&pCV#hZ{ItkUoJluj1!3
z96m`QsHKuFa`*@%zvAbA<M3_{cX4<PhwtF<at`++#0}y2OMs`)t+{ddPfS7UJg7RP
zN-@vx#5sc}u{-cn;QZaNmpuu-NBqB^`TqdsTd#tvlN1;d4pEEU3M30gMUUvkZUwSl
zPq0K-&Jtk->{f4AO|e{9#d2Xa-P)>}X6Z14k@q|7wZR>#*pYD-lHw>NMO5_xmJT0=
z{86c1!XK;<|4)9u`@f`<eV_fMyosCBZ<Ypn{{QzUR6Dqz-#~4lx}L)w=m~Ti_f|F5
zoN(LY`&Dk-@%TZNAGbVySQVgq9#uiy^Z1}D1fBaKRTv!lVO0dX%|5A$Li2u9)eNrv
zX;lk$pFO5(g>L>i%mbdlxkT-_`SJ6Z{glAQiF3Db3YQud)N0JZupc^R_NdjdRLW;p
z$AUqhPL~Rr&AR&Q#b2-gn5MV+jOE0?+bo*yD{oBx&#IfGyUraDXSR-xX12_2+gAJ3
zmoit08@_}@$@3ZV>J-w2-eA_nf`LHLr_~A(Gy9P0Qqw67?z+`jn=%iI`TGWMD}8EG
zY@3^F+Y;}%D05Icb?(@G_o3M6kt%5r>5%Q(OVq_WY*vd_r?b(I)~Ci{<cWB|mw#~H
z@YU_dCkLct_vE#cw!vk+u|(JUwWG@uiM7(H@yYbOSyR>9w(_EgxGo-X`!b`+j;07|
zJ&oD#pmc`nq{JHtB;tJ%^0Mm!KCfP~T5QNDWk(6xRvhk4Ty*tB=X&Rs##nef=^7ZX
z?{sw5@2ng=v3B;~4)&$m$2*%R7m_RIowoV91dl5fq!HDIIbQ~?FNic{>YX>-ws?Be
z`}ame{X4p5meoq9uDR~oPi#Eced40&<s{>&9y~~)f?G)E)5Y-T(K&Ar*W3Q){GRQ5
zUV+_tr;grw^n;kf=HtWj5iKgmSIe<o-?e=&j;QZDn!&7*%RPf~ySd!?Vx!zzty1ok
zFBMax>|Mtf6Wgwz?BD3zY;Jb<T$CJKX$e$0_gjD7<KJ6(`*lj`>z$KVO{~~ZS$^%|
z%(L~uEIqeo>5u7RNY7{XfuhCuPdgT`KiT=yBpUtPxnshfA-xRc6-|h*=K7*|*HfoJ
zr^22G@jrNj{rz@tAegeDWm4vtS}#4EUZ|hd$Gt0S)-G<S=)9;h-a6w59v2_U^mlFV
z&Qft5zO9r~MQ>7r2py_%F`@qB-T!^(ZF?31(y7c@QJFcLxmJYt!(Ps`Jc6&VvP)mY
zDEfgvqqfieDp%LP#QR!)Z??yX9G|&QO8Ioy<V^iuhZ5Y;YSi@Hcjpb)CUq8DxqAAY
zsWyv7Q(2C-$b9G0OGPsZul7t%y6(>WQB>UB_LjEHIi)3UMCx+SLF&n5ifT_z7qr~8
z&!;J=sOY%<`WyFqG$mCP9Z2xO+hW(H|BMu8?ns?TzkxnTcAw*DXG3vIV;JeBU`L-s
zqe$-QqUG>SiOrV}tvJ||*mOm=Zz%5SO!|fruCB^Eub;c~K+n*Lb@X#tc*R2J)O>iw
z_RgvGN-tl@waa`2qemX2J{?AFwx54vU`O|wTV^Js!y^+@orzKDly_zS#zV1}#j5_^
zXcM|QC|%8z>ant-@+(6`Ce4f%&y7t^9gHA5G83({35C#CcAWH$tx*cG;_6Auijbwj
zpf$GaTz>VGO!Cb7%x~v6*515RDbeoxFRpeuOEkN6WlC9=qbz!whcMTn+;q&m3QF_!
zft_7j#&_O6ySjB`WMX+bF(RGvO!RI%T$9QC?ssC-KqBNv8<wE%ZK(TDL7$}x336eQ
zNtw~mh{J%h+vR$DZQyv@_S(sCI3Du#MH9Vy2D*0p*E!OSO_69|pf%ciu(ES-(%;<V
ztM%9d&J{iBjj3ewbgeH`?{L=yonz_lZE5QDv#3-mi;ha-OMx4x-?8tbHt~}Eqx+<q
zW5>?@7sXlu8W#}@<puvs#FNyEa~y!5Mf~VxWt!o|F^wjgYV9+vym@8A4V8zF+PWNK
zW#%4Bz?ABm+$i3Xx#jMYNO2YNy$UH-AzyXOY_oCSHOIuwsoRXOwP@_k_B&2zK927C
zh4`LCVozKQVu<6*NwEGIeCgr32NgQ%_2!s4_k{5U3VCEr+D}<E<ywuU#eDNINkFQY
zf`)@PocoxjM5C#4>#s%nUybjL$M?lVXXdLN`x1%0c*597yJ!6V$w1~A<Vh<RSnW9l
zIivEK)iE?ecBrAzW$C5UHU7`eGoF$PoyO>{T6O0yE<WSeRnk8U8(`<@xxp5zuaDcV
z&wM`f>04`KPG`LK?I_J^qzu_Z94nS8Oj+now(PmpsY7~}fNkTyWnOK4RlM&#{$;`7
zsQ;eK)>nxx?97m&_!^wtml7T{pYZ5POkzi7$u2%<%)D3B)vOU;Jvx)=0ymOWF0`Wq
zwq*;+OK`|6M`xBxHI{-PO9is*{iA~`qAM<nd3*Gd?c#+)lG?k*>gcTTRr-zI-hiue
z%lz1hO>tjCB4Zfzg%7*J4?AqBEj`U)%1e*DN~I^EH~6^MK(hPHF&(uQ%W2{)vV`-p
z$QCMZC-S-E?Ta3V<XP??S{_|~QLnEj;I6fI+5#26N@OHG`QFWSZaLq>oK>Cgafgli
zMLl@`S5P*{Xp}5hG+nMV3M=?&YChJydS7qruz6*5gEcr942Ns|hEC_I%C=1dgGbhN
z1nkoWLuymHIc}+(wfdEM8_t%csNRU%{^N>E=+%`Ci*HwIF6}t4<~(&<-g|ENysDG9
zB;P?vSgXnB#!SYe&9XFgjM=7F`(GO_X`9~O-aY0vX)~{AhT82N=C+0nS3Fu$AMg!T
zUa~N9$(m@#Y}`9oG0<tNnzOn@yxQClNm8vfBKR!kA<W5q{SqlQ&}*m%psBzO8dnWi
z2esv`Q=Ogd(b8IdowrmsXPuuEH|^AVVly3e+e*soLxKI76VUA5SV~A{Q0~HdMqUD=
zOF<he?rmDFx~QvtGP*6&;~em{_Eyz;rb7K|!V{Zg-Y&h`dT5*N#+V~r<Eru*y<I-n
z*BZSWZ4K?s^WMPP`Qc;h+NuB59M~<EJN@r**gDoGn;<C!xHHbxK%2>uH{b6dZ+&L!
zcvM8S{_Tqao5r&$+Lu<B^euL)OJeqR_ki@|XI9sT2K$UYbLKhWueO!PT%OElY3DGd
z>y@6D0+_SFYOX%G7AQ{M=n)=9X%+w!jFoAC)&9wxPJs&#!7y|><hn-l_?fR=wzy)t
zMtU-{@7W(_e*Mh!<@Ajo{kRd|Sd<Z3#A<a~?P8);cWChv7-DrLTAik<u`=FV>yskq
zzNstKRFw;{Qv+tsd8>_R3k*icC}r5$mBCkB35E5s<B+8BO^4I%<)O9VzLZA8mC|8o
zcMnnRw3$#l;`JeSOIt9|{-z2ls4ArexE~i#K$5bk0Vu=9HLZPVB`dCf&f!g|V<a}9
zcFrPA@|-K+U>F;P{Deg1PuA^iTfGqLnrp*Pqc`pI`8=IoU*+LV<Hu&Bv5kH7b1<=~
zt0jh@IS!r$FV=CX6sa@Mf@VToUSU?~zu;gxa}m$7FCG$V@2UXvs+cQbl=O}p3s}};
z(*2#TfXuF3&TTgfr^2(Ir~%I+emu_nSmu$KSZU86C&i;glsf&AcP3cKmv4E%k!LKA
z-F(y+&avfl^TJucl;sxr2+C(F>J!RvSL=5i(rW6bB4$Tvb9r5*r>{OOUf<f<TT*ga
ziMlP3`I(|&zYi${vg2FU-XH{_6`ZH5$g0W%EjwMS;;H&jG#c!VtxLq#G%Pna*E+q4
z`e;vLb7e=%P+y(J=5*MWwX{xzqwY~tZJotlZ?yL(+LnjVlUvc|*GWf6*Jf@AegaN~
zE{&-RDIp4D|JsV75_M$AG7&!NxWsxag85{HrM$-6UAer|;4*x3r}p~m_kXX<P}-)`
zY}G;F3RMs?%7`_unq10?UL#K%n6tmTmwM(cT^dbCxN~4}JG!fPrgEsy=rxOE=Km0D
z7!YF_!?3FjDfXaQZAekpYYG&F6aBXsvFHtbz<B89bK><s_*Vu3D*}JW81U6Nbv}GW
zIt`QnMUzQE(a>5+yCEqPOvb5y=yY3a-YNuqWc0O$U6+>%q0!gqH(&GJ_iN<Gwc_>H
z8z=n!<v#g$qVe^N;RWAVFgWIW0WFBV36cSMu`UxV)Me~>U8d>Vb0-_Lm0C?zT}AB9
zr#78(>Ga?=_4*!B_NzHt$Z8E+=Q3~nW}P)^vqfy{knWF{`lLEJU9=MBUeqkbDveg#
zSQV)b8!dG)L*?8pb`A7AgV(U<rp(#+zNacnx0eS!4)KeZ+-rQk)!vsfCF^037v!T1
zU!>O+Er*m;5!01d3*93YaZz>VuP<09MSB0L%yavR6SH+eeVr7*_=2~sdYkGuu;eo?
z+0@5#_(B2hR1fFyodx)`dNzmeF2F-rdCaDNNdaD?Zpz_%3-A{8>KuM?9v4gMD|7gz
zc^nq$e7?uC_>!5dCb{^FIGIx9%6nN3Kbnn?cD}42{f`&mnu7ZIL;-$M{f=BZj}+iB
z^_O$_r?U8x8SA6jdJC$#-ca8KbV*V5PjlaWCi@-eD#SlqfVZf>k&FL$0iIHSEr&mu
z#gTu$UW00`*KGb|Wm@toRwn2;c`FlUiNvW=WNGrj;-t)C$b6GGJYCWh_e4##Fg%?m
z3shIDRbQpAvv%doQ0H!M@_W*es{8IE%Y!X#HyFx>tH4&(xqRWbO4^mev5-95ODLZ_
zF<Fz>51QhG$)Kaws@GQ`8~p_=U_WW{hc<d5rm#uQO6ot~B1U~-$tzj8kFVsuzo7ax
zekD3#LcJdI1T9v7R6>WD9+}$|(+~Kl2i6EN+ka)3x}h_30A|<k+yAHT>-Mkt{$|fy
z<@)dzad40DwQtNUC|0C<?x7LIsj6>4%S_3+!3(%Nhj--gy@aD?{ti-T=4Jt(!)!MO
z%Mp~DVw)YAz1U_)+&#tr@cCN2vxc>+3ru&@bHh{dj=9RK4cD~w4fXFy-@mFv+`eog
zIb+o52ji=@H*Xv64Yl;l{;DlB2%Qa*LmE`C0Y$JGp^qG*6PgKMnkNfl4nHl*X-vWH
zWh8qaa1F=573b(se6j-$asA5pf<S#L_&ARR8Q)oeZ|AWr<HrkdnI0KGq~Jv76vyYC
z0_x-N-C{Z!C;DalP!`7+fbB4cFDmp?xeD=YxgfQ%{&fo0<9xav<^@_V=QcXkmg)uZ
zJX}s0Uns(9%**)B0=%8+mhs~Scq8*l8NZ|e_b{)N@x29jh<T-qUtEBDxcy}OP!>n|
zVfoC_vq=6ZIr@nw%JGk8<D*<F3+UWkfM3GAQjY)e0=%$(K2d<*#Jp0D|40Ge!n{((
zaXOM*pF}7355kF80%u;u{xj%@Ubf)6vi6l^3g<aOy^$@sijA2~%!yFU*Ib=>rO3G3
z(BdEtRcq}6oA7o;%9U}d@kb3=&IDVfl8ZabmB0lHa>?0rDWC6z;`J@|CyH{}QPWay
zt<o#mG^CoVm27;iW+fM@d&-6T&LJ-2g6e1Zm96!D_3vP%u9oeU`SPhD(u2X2z1U*?
ztVy_x2Re^WE4fH7%+DW)zO_HszBC>%)#35{%iK7e;k--bybH$L4A;Mm7mm*j+}~vU
z;-dJJzKmzbXL`v54n}-I#!rbBg<qVN<Z&+Jh2wmN`?-woElB?=?uRnIn{eoX#9zLs
zj$wUGwzJ904DooPPa;(kih3}h)oJ-D*Ic9yLqW`&;PthYn(%0Iy-y#}Rg~6vBvGaN
z$2NJjq^r~h`n?);Rp}N@iI8gRY+=i|-BxU;S8DxMu0`0JQ0qGd?9SZcX81wTD3tL<
z;gUz;lD-JPi*RUVQH;XxK@OO6RtM<vm>QG0feim<NQUUval?dZ(ez{dO;j)6N{awf
zKQ;VByfmfRuzvmenT(rO1H^693cnK5%*V<>nO41RR~EgKdxMNF<j^x*3K`v*L!ajs
zk<r~b^n=X5Wb~38dKb5<jPA{$lgy)J^iU4{WI?*ebLe(8@h3U%Q9|L(ZK8FJ9J;t0
zeFA#5msdN`Lu6foMs3deN@KN?S%MqOAg!#Z)LOc8Y~b86Q;(vYkYq+$a*dqiddk<x
z13U_3YA$AKu$Ch2;CjNk61R4T(%L5MQXwj_QUd&x2rI2^F2WZ@K*8sW@Y7iwg?ofs
z2XiH~*#fK|w92f4=l_e4bD%|DQBk97D9bALrgi!RudRr`|77Hy-1kfZ>o1^&QUNup
zm*iZLI#z<RxHJUsy1&VNwJ83g>c?5?K@Dl|lukgs7u1k0n|(W9^wnv?@!e}w2J~c_
z?WJ@<GS#H)WH)n$lAeRZi}81QzwP<6?fJU-B#hvHo1EYMful;#lzz!&hcyZLEQl_-
zZc+MQavzfMLs@*OLc%H%sFU$U(Yy3lWklY{>0mm`>A-4~!)XpA<J-t{D2LPBLdK8(
z1AKQDUn++O4dpAxKP74k@+JN#<A-wbD~jST3acC+t2Tw{oK|pNcj9qN-m{piDg05!
zX|5*YSv^a}N&k@XEFULa=BF~w{1oMt<I`MC#xE&KpITeSvwWH2-><$RhhJV4pXyDH
zpXKkJkn31C%i)W{&Amy^m&Ugo|7bxvA7DL0#y?(wA1|nfPZZ#vW<5iW|40FTob?PD
z|5OeKJv?R!hn_(=_2VMCXf7&$$MOz3u1xRmfRgWVQ=#-xENg{pfM!Kp|KqhlQ&x2U
zlSM&kmn_a{&V+p|*b77Zts1dQLS+wP4MJX<uwy)t9Z4_wyulO}zywUwddV&?N(O~3
z-nUI}pvAmBgIjv`>GfEZ9NN|216PyMh8QhO9;P))Au@k!XiD#JEsxNWUjMfA!G`fL
zJ@)(zMj~MdVWsjVTC*%SmSuiVbNfyZHjA-s#6Ay|N1iptvN}sl=f@;UUIZ8GZ#lE+
z-}i_|?XNkXwLjzivpsXYb<W?vvuoy>>#lovBd@z36b~!w_3~=#<7z*69V8*Ir?J(Y
zY|=2BkbzV#@r74jmnFhY6}yZhJq?}<ufRG>;vSpB9rUDERrq%HziBmA85fT;-}nso
zkHYcwIQK&tFC34Lv%He=!v6d?OE($c4R0UfGc+zxLi95kXN`dB6uKd;Gkf7-qO2q)
zb4@Lq3)!Lv+YwKci<h3YP4T)W^QQgE(ry2-Rq<x%qcmf-6)Z$U_SMHDRr*_xDXX`e
z-*=>@Ix7Xmc;U)4(+ZlnE}m5CLeXl#i&ru)Chu0v83le2pCr_Bj*oc27w9&g98Nq!
z#*Y`_#4Ba|P!<Po#mZ|AKP4IzURhCuFN)ec&Jv2!399!}Iy|<s?^hRncUt+5*O%4T
zARov8ruXM6E$Ef;i5$LDmB(Av8*=#Z9B!m_>KuM6Ji4gdB`8NBeoFN#rdLjXJ{SK`
zE}e>^_^=l(VP_!b4QH`W?tR!RO+7>Q-5^syP+5?qRRh+Cq5aBTMcfzL(l}M!>T<RA
zjp%Nw><T898&;iMSGDZe+TLA5B{z31Pi(352iKb2EsgbE=G7+}{j)1F7mJ664-SUs
zM=p2Fbfq^YP=;A<Q))YSC!mgwt6(L~;na3Aen|C0##g{TAh(^2->Ui%<CB;l6ym28
z{b3g4p%7n$Ul`3(!<eTR;-?A6e=|f6cn`QVt;(m!RHCpR^*d6>4I5ovd5zwCnc?!3
zuuqjdbnMteGnro_O<t?#F)Z``ZSb?BvdB2eR2g3=!bzse_|77n>O{tO7vUsRW&DyN
zoMftu?=8Yf=E(TPML5|%W&F|t{2`XXGJbghzR0{r#*Y`_AIhck(IWhJIs8LK_|J0q
z$BOWL{QGmbnS38|@fU$p+sXAwGG3<VD8)zH0f#Sg6WQ`F=qr)u@-$^T-)myk>WbZl
z@v)%``c6~~+8yr3#?+8L^Z4B-Wg3tdwJG>6jqM!GL<8x6GG5RJfD_F!&NS!Jp|+Os
zd|R8TEIFLZ&SmtnKL~tqvU3t%04iFmgfgs`3fXxk6nBP9Yv<2%6EP%Kcg9=t_KW%i
znD@c$Z+0A+J2+@HCvvkH)HJBz(t{Im>9O{Y(o8~f&v5Cnt^<4<c1Y)Osx28`D8gw3
z$oS48oO-&9U!vfvF*?_B`dC}0^i|*H^ktmVm+^%noYI%^okcjMFXNXK;ly=h{7@Fh
zEC9YDIeby|UFNiMzSOF6{G-|UOeeLfjPI6l*=vOBjn0N63HE=8eg&uaGJd=WCwgT3
zP!<P0@IJ}mi>jX!JxhOswqJ;!CLGc~0D543#B2%aFke%wzlGk8WCdvH8?78m7kfQ=
zuBtvEVtpmTR^a`3|1gqdiQEHE)vQ034mM>{qqIJsPBtM2d_MT)S?7DUq-GY^tgdYv
zTfQpMJ}up~M|Lo~{&!jbvO!3p8z6=16t5NXb@IRfLk@6ST`;#C4BwR$d@*bydhn{s
za`Eq}!R8@nSJS>_m%Sx<(Um=23--(pOPyVnZ@V;*_Gz@5)$?BaW?##lS8Y6Vu;<c^
zlZll<j3bhHM_3=q%REKX=2h~Tjx%KaSM0Cts*aTy%WK<%H7!l`D}9?!-f(?o(`+QU
zrX?`CwX&@IVvRPw{$S@=Ph(>yD4pu_1>5$mTlb#hqg+d971)F!Q=kXrB`ghDz2rwI
zERL3%P=%$k)=_rt;&tWG<(Y57rtoli<$_ihXp*i!cSXmVwujl(5~GZLiPYU_ed2pM
z^;YtA&f&=%zP%8~zP)Vx9R+x!^z$6Ps{nUMPv!8#Mfm+Wd`}Vns~moy5Xat<Y`(_|
z@CNKA%;Hz%a5JsR=kP`Bs3v|dm)DWQkL2Q?l@2kFl<VQ40^Cu6KU{$C!w!{fzMm|>
z9XQoKi$9vfK~JvUf@-ce)ORsmm*>9wG~JY)qnGBgGF^`q;l!n6{BuS4NDhA@hg1I9
zdJU?%UbFdQ^tqN=*oPrVy8~p2M;6I9c{1eO1!1u|&#R%|-|lHPkb7B?XTw5!r&V8S
zD79O=4i~tcecRvYNro!=3mhFXhU&OWZ_sMe)mD)#aCu<*;!Iya70*hm{FDR!xQYW;
zp`bDsxh6gCZ;#dtEHCzivxQ6+*xaj)AkI=i+}Hj7#y*SKvM%o#XKpl_n=RFbicS#M
zmM4ze2(+m&R<I+2#?W@sFJUXUfiHXyUKVYt9u)?!U0JhC7V{xH`CIUOG4B=TgX%21
z@dW}YuJRNd2xRtkPkM6A$ywp`z|X27y1hNxXBb}HGv+dtWM0#Bwb|QE?ap<{_*zSJ
z1LoBZ>^YuV;X3z#B-IC8J(a_q6Kk;(r@X}Pu^KP3Io-Zt*{Q6*i=E0^y@ANy`UaEF
zCbb1@HD4<;l#!1aO39^BccGMWkK2x$PBd9udN7CYAsj76o`V{AK-H6vFL5gJ9L#xq
z6gUu?WzRvZ5>g4X4ul7Xt4H*U`u7{(uT>lg!^=09!-vpYfn>TG-Rwx{pVBT{Hd_a8
z!u2yFmv870H`e(+?6Ac*bT;`xo9w*^FE8>ZM9Un6m6OV%hsF-C#vFbc8WVAc`XwWI
z9|DJ865_vI^(~H1UWtFC7FO`>s%LWeA9z&D@pt5L>^mc_B;!})ah!@p^vL)@!qHQR
zE8*r0_E>`5hI@*<YJhzj7xYaOWKPX`cK#y=MR5&TS``P+3%MzZFUs~;%72*Y!rB$p
z6V9cOxsMq*)su`bViic{qVq-gX~KDw((F%Z^Wsuqaf25JFab<~tz6hewWCU1sk^=E
zcKu@YuzvV(&g0Tm?lXCN{p73Ke`I|eMQI#fxw5b1+_z=7%Xd3$$+>oTta2Nk72jcr
z=H{|&#hpP4E@`+8Wqf-9E^!;m_>Ka+j@wYiuPDG(EYW2Aa3065H<D;Fz9)~PFA(RI
z@dJ5We242?#t-IjGtTd#J}Bdhn3c+XlgdSsOU94n;-AH;BS~Hv-&KGgV96!p59M+3
zN&)_G9+!5rM3duxvH(}JM3eDHbGR7?{g5U=I7u|rGx`qGi@s35)I#Nebqo@P`$971
z^@6i0?#e|huV8I7=MlT)Z)<m8<L1UAies!roB5@BkR4;Yd#%>0Y7^M@LD@kT;w0Et
zlk<}G4OjG~!O-gCA%osfP6Fl6MoU8^MLJadQu0ldWi6HGbK<N(Ns=WiN7|SD?X9&V
zvu~!$(c)@JX2o5*OxklGt>2<QuvYQl&C+JDmQ@AaS$X$6CXf3sb`i2P>E-&ArHKYq
zpB2ARUjpl@7dkljSblsJRb>I0DaFM5&wYy}lc+Q8Z{NA>pEwzxUAOK;(^XwGjv6sN
z{w((7254@K_CBQgBF>LqlD&p`e8DRn_;zKU!rsK(Ph@;Y5l-Vm#t#(X#3N<=AmOks
z%jukDuVmB=O0QU#{sq5ea|<@Vz+FggP5Zy@ru^P`%F?-`PwMKZasMkW%i?otv&$Sr
zzwMUnrb@FwjWOjm<|J~7t|%%gaSR#XQ-C{pM9cUt8K+evX-2&d@!^Y)8r~^9@O>m{
zW+or$9KHy@1mYNwaz*&*9Ih|I?;;%kA${=%xHodeye{jTnUmB!m&v<a=LK{{&h@%$
zF(tcR_eip2j^+HXe<F;E|Mm0Kizu%i;?j!$^;Yt~X7qaQ`x{U~t$KS7y_R~A5_boq
zSgpgUmEd~{x+@p=YU0icdN_yfA>OQ@dvfSIsa+KGiX7Tcd{#k^5W4gW)G_;uQ~w8L
zi*u;qr5}RFF^W?Q36;Ib3FT5KXucFDNe(FK9$1S4P>EG<z$+3SO|(v`-*F30Z^;;t
zHu<7o!=?T%r@dpAYY4VU_@bk&F%L%{IHk;M&<Bd}MVvLD^noJ$G~sf-IPddy#iyMY
z?q#3$?Tf*jPrG>iS;eItZ9^XIH>%%{oMGFgmEQR#@KQoQ2F=9+z9e&`BI^+boS8J0
zH@UmNoi&p;`@BnSvPMGbK7qa{=cbc}RDTz0)XK|PU58(Nj*3%9sFVV&Q;04qs7c(Q
zo>JmsHFzyNiPVcns6C&;*eLws^bx9+3gmh_a)pM=+%+XH2kU4#I5+db(}VEdcMiHP
z?OSZ$=(;_8o)`Zq?@U@G|JXV+@}0ahzudcVD{2z-K*u8vDXwMB1bsklWKBTE4`%Tt
zGx`4K;xFRtB5qUgfe@z?lG9QBJ(~_rx1qVbjBm~3(g5=x8NZ?cA7wrx<GZpr>Nvys
z%J?bVdamRPzCoN>#t-J=gZ~u7U(CiQ{!@UTR`C5OuR;2(Dj-b}{i={KG5x$Nfa#~v
zM79XFXwhx~sg%nr<J${xElU;|-%)`3xm+^7s{q%q<|gBZ^EmdO6CalGJ$YQ(h|__x
z_+<sSi|bR4e?<;A)2@bG{6*DsTyJu@NOP0pAIZf(i(50Ba`;1eT%0YyAI{@A1CMMD
zayp+Zz;&#l$@rr=+zj;ze3RpohKBk?y%x}gGm%IF%ikT~_ZoS31~d)Yok6-rv8HkU
z4vnna*FV^)QJ&K-{?V2V@jFGi01sUHm1M&i4Q0p|tEwrB#hxOQomP#t<O?k&^PDjr
z)Y<M8Uod-{``kw(-SutQFftiSMtiID^te3s)|NiE_`Lbcno`YwIQlQjoDKD~j?l)D
z=5(;%*6AI;bS4@Z=-<++(W#%dffu92)GFw%ew;!e>l)cTc3DfFR(JkvJ--i*e1!eE
z`TF-~cD7Dk)SenP`{pC^JpFf4cf{U-dHR}oVy(rurPh^jdwul@uTRu`1QT_?yGPmJ
z(%#b2PV@8rs^KKmS+l33y)|C2-Q_E#MxLL86VoVJA-x}MhMLRihS(~UqSZH9uch$(
z_EXv|5%z_IR<o;AH{4^kqTb%L*~V7d8!U5{yA4f--t~INvZnL4-hjg~4Kz}59uRXl
zMRSpHlJ+vbwFoC!E8|BBahB~ez6)pKlJskUltUSF@fTHe0tc17h4&Nra3Z5zb`-lv
zrPt>9Hxzl8h7@ZGwbdj3_PU^Hcr|sF)LbmFFxK3Z)#1IlEk~GPINO^l_4`**x!X1l
zPF%CWQkAO7D)90ACM2e`MJnN%c)L;)KcEuGdy|-l!YYEXco6cN<vNsspD~YXR^mU(
z@t*=O#$F$cQNp$AQ){xE_%F<X<k(lJI5z7~AK}zx{Gg2E4lHv~DvOi~qhDpdN3nzI
zJrtWHB)|OtxOZXBrx~Ta`QK(bTNFA!$aE6^0`nRf-+_C3sl0^$nkkj>D{{C|U<VS)
zCF5^beN>5WD#A}8KG90)ypKyJ$3K`$$6OSDk>ZnngVE5A9g*=uD|sT`qNahYtOMkh
zqG?cAEe&c~Z4j3QR(R8vW=Ea3E)=TsHT&w^p;X1z#a)&CJBM4>CcQ1*+F-D@W46+2
z-&kew)LPsPzNpLF7HaX-yC>oqkN9i%mXv!a9_fzwtp;a9pu^X`3Jx(6?}2(2+7g{q
zuJqFj?}B2b=^t)|TF=VU1@}W`^(WqKh1~*ly1CrX?oypXzYM{`g<V)V{Ovd&nfjj(
z{j3l_rFw*AS1Wo>A-<^KYV?jm{B$n<S@9(6TynmLanj-`v_}=%5AjKRX5K``<$ftQ
z$siADQm|kIq=`0{ymYX7*p%A{W;$XxQg+^EF#nWhp7(>Tn~CIigrPLNBaAhPHZJ{E
zWyN2{NduE{o?B<*bMKY$9R=}ytVziDt^(Z1nuLrWF2YHZknuf5I7wO=KTwGCs)mdo
zE5O&Y<{{&k72x$enq>Tn0^F#M<<ftk2)`tUf3N^I@k~-q=fMKps6L#F|KS{7MLX<r
z_@e48)(5loOqz|H&Jl`_)~0&CTDlMNGuzr`+1HhK<Q0h|*&JBBJ+Idr5ha>kI$d9S
z{e?H`m86==>dQP3MP1Xz%m8-nDb!reJXiKtDs0`Wd9Eqrg}vcwp6SUrQ=d(TrH_p7
zf|Q{#5?rdHQbGF2IM)J~wuSc}LW_FS%1JUi9g_DVDw7E6<037umtY@a^Ld*S+tV;^
z8EdRv$|A|2tL@D@6?v_MEL+7CD5I-rA-`ZBWL69k1t0LYcR0F|=kJSjv{`L+yeMMn
z1_4b&W@)hZP5UHmL5n$Rm2GQWH>d-y`_C(KLH4m32isfXkqBQg(&=%}0oA39(@2!@
z?S(jxL>b>vgkxT>#6K+K@_t25ADo`&3}0b6!uuFmPRaOoocB)hh;dF|#&;Cql)j7~
zF2ZTfBjX2ixQX^j=I}+_(~wJ_t+aCdBf0q4SIL}2#&;?BpD<irV>)3a1^wGqU*dFt
z!-JYu5M=y{JTAV@a!|$(W^wRo?5@nkU&Oi6Bsc#AK3#~PCLEH;ixC=<Uco9pMlL)u
zY4rsf6Y1LML0KEEJrIOHH1;b%f6V)EzNabJnDmzD!}U!m=TLku*3i8+)sQmif_Kzj
zX$aZ-{e!i4)L!NGdWLs>sVNoT*kyIKPW+*DzPn@V>ejlt>E5ov4uea-%F<eor?#WZ
zmff(gpE?Tf+{XOdMsfl>xAXh`$#e8VTem-1c+SLy_HL^$&7U>#rp?==C-l%9Rhi{v
zEsExxnTrm)fGV%-Z^Ih<-)nh!y~^Pz?^TW&SS;B5K7<ALr<JvK(V9JRpkO2X=dk*Y
zmVtE#7LC`*H%yneWP(egp!pnjF77T&?~RNKUt{!uYMgTTJg6pXlnys?l;KxW#UN#0
zLup(zLsvLKVF928TXI5Hoz;PLKbhX3)}*ls-ZR}AOZC6?VzJCU5DLWijLxiZm>li)
z%IP&mms!{b+|ka~uC4tQm`M%VZ0j1l!dBkuH94JhLyHA{N{`%G3(v0j(Q2p9>(!;W
z677~;Z5GZ$=&&zQ;!WeAh)X7<YEi1y7#l6_)-r*8@&Vo_-{b4?yXx#|yI(#-L>$nT
z!fLX!MC%M{G~Un!P7{&WAWNVHdPob(Qp9e$I_~S$Qnqd1M2&Ke$^MF#HT?teXoaWR
z)mV;!jWbOKS41YZ^kNOtRa=v`V?C0WA`QuzwuY^`@_KLe=338&*^w(Y#11DmbcTXX
z??-XCiG;g($E75wagffdQ`{iIkabp@O(%D7`DlVv(#N|dQ%MX+o!VxrzEMARctzWE
zn<NdVI=VDc|Ni0NRIR@DerJbQ(r&LYRkU`hC0G4AXRjgkm~?XN&|u?4XU|59rgG&_
z-`@Tj*XEl=tux`<JG-ns6nb0ctIirw^p~a2@M$Y$G`sM7b;JgcDS60b=iB*RN;C+V
z%pinUbGXM5s`m>~{kIh+EY205#j<v)qel|y&8eY|s=AMNT3p5o(_cKUw4;5j;AocA
z%C3&K)ol$HREJplBx<JuBLa3row@J~9d*I!JX5c%Ic?Es)tV}2_28Y~o;&TpUMEde
zZS}gx#9q;Vw64u=Z?8R?`C{hGJL}sWjt=KLX<WE4Ug+c(=HgiyeZF%8@4m{9jw0^?
zad)a+U0GRhYJ<GydZ&;arPVsCA@%iw^BbN{wp96g<5|}RUU_XSFW1&<)C(n5qABk^
zz_gvkj8^HRJZ5t%zw(2QotFODvMFe((v-DM_ZZ#fO{LX#Z|VNr(&?KHtC=%4FOTR-
zc9poA&i(dHr`G7eLB54CY*V?JgMcGapYZhI7(O;0U=2)}I)5~>-rd!nY@M=ZelGmW
zwsfxA5t%wL{V7TE`27Qw_0CnE!F1QYnf9HVhA!I}7jYau;EQ(3?IE9F)JW32sLWY4
zk=JU7<;!P4U3j^ePc#}A0uGA05(5}U8)gXq_;{nch-2`{D$by!(VTbIk(y`EKVhC+
zL-VuznP9S~vT^`n!9j%j9nZ8Zk0v{$P|Jz^=2$4wAL|{AMtz}#c-_*{6kTRimxqGO
zw+I~I70!G+R9g!tQ|gU<>K*8fNt~5mTzZ(wJvv<jCZjStfY>F$ob_8vVP{<`w|Gvn
z+G=@!&uDmjQ@g8$4=D<XE!7_m#T>zr^|8K{wPTjB-_h#!)*5PzzK6arg<j!VVYjzA
ze0GmJ?W<frGjYvD32*I|_ddVsIZg9WV|?>?sKdR==JNH01HMx2=r=Pb2ECEP?$E=n
zoeTYwpuQG8<eTUr4qAmm+d)@A{~%6vzGodMg>~hL?r~Rjxu}y8A#2>;6q;$7+0(Xq
zyQgu;_^70=uY`Ha)o1SOG*-=9YxeJ@Mbf>AbeXZdA%fh@kSR|hw`OG(nRD~YCmVrF
zp;OvZic-xpM|7D)Jf+jCgNjb`rJhOLQ6=JK?QTcBE)<!L4Q(|)T2XE?=*^`DW2D|4
z*N%(k$%`&&YOINcbd@;Vq|B<l%<nSkH`*No10$gxYn@G7GFo08jM(a&Ah7vSf55X0
ziku+&#D9Q3S>7^r39b^5W|xHwSPG`MeDE6$B`DtC?3jy>47mJ>?IUyjgSKX;FW5I|
zT-DOt?6;>~UYHh~osq<(UQ^!cY#t9cuhUog9IdmyhT4W|!)!e?{-q4^eJ}FGiUHa{
z(OV#CS#HRuA_b{-cxf2&g-jdwHctj(wO!6gdUBazFcR*qZLRaqY>bRYI@==Q;RBTx
z=e*Gn^tR0+H@$wo*%1#%Myu835r1M01cZEU&mWPijeL6Y<F+spm_hSous(@C@cQok
z?Q0MAw5(`JBd3u=k*2mutHBfryPQn}{)l4iEXr=TOozQDxuvHqjS}AhO|1u`6JERp
z8dLrZ8NF1USDd2js@FFyHsQd5mI4LpCsW#Io|%1xG%)#;t2^Pf8KFHw`8s^lYH|@1
zKHur>!Yj$(#}#EQtGk&U>m8obt^dp6SDw0L^F)-GvL}#fJns}NXz|L4T-fnXE5d^8
ztl}4F2bo8s*JX*!RybySw4E5r#jjJFQ|)UHba#z8CM<!5@MyRt?6z5_jZe3EwpTW9
z8XZ2ew$<ZUV>Bf;cE!7@cg+6276ThLs-<R$&cJcxRsfPk=fFTMp-#o^%_qO2o$u}(
zY;PaB#Y_?!>);DF|Dviiy2@v*h3~A>XZ%iYyme!zxa}Lkp-^}z@Quv&rkJgLP5Y)s
zuQ6cv^w<p8q(jz&an2dubR~Ho#AJRZ&5uIk#k%uU!Q7dS{90Um>;uycp`z)s%Ol3l
z%~Q&H1aCmr!Y&bG{Yx35c|DN!r{t7>eX;ge;-LKcQl(ht#yLXBu2;%yeYIQa!$W=U
zK;}hZskY;!F>mHM&J+EX@{}#p%1BM+Gm-bh$b=NqQ83l0EA3SBTijpKI<4rV-9~Me
zpuU1mE*i4AOU8t(lJ?bQX?rd{-743E)PT0FU@0e`)r!MIu=?!3$G^C+7<_j?y#Cl@
z8N*Xgq4)h6#puCa?|?)$Ypinb!c8x<cOLgn%4wv?4;))taB^y?eWY{LDy-Jg&QZ&L
zQM-SC=9l}a9<ZXzGaie=IkL@35{?`*Xo+}iapJtSRIw%V?))Mu&9LuWsu5Sx3>arc
zgB8Gn{&AWylf_rO!a82?BErw$R;8op$JFL`0WT+?J8Vj4A8_<lsFligK$0ObknU5T
zw5Y4?22)K#m((*@)9kW&%9|I5F4iCJ5|>sRT}FMCIrBE*8SJpPxT-3CoOx_E^HVCD
zgf_-%GVKjxu9z*G!tXEbP3rDkyh{j0SA>4(X_S6&F0T_(o8aW7!$^a@FIW$d2N)?q
zZ`K2F_FM=weXeiC$fe7NH`b0>)8U4Mr^RQm8+}jx=als1^Q*pAGCwqQWTf2#dG6^7
zhMQ!0PI-aoZD_j^+3O%iEkE@sD?ATQa9ahi{?&x{uxN34&L4Xuaj9&Wud+fyG-|c?
z<jq*dcGn;sG}mtGaP=?Z&`C|>bU4*s(KJ_l<`xZ2`SdM*G7Py|=|noJ)4<X=(||sg
z;{wP;ZnVM*&Y2dO9?9;i*Er{zIJ3|{qG<84ckGn2dK0I}lcVsAr5-+kFDcI;Q`}z*
zhi{Hu<ZT572lVMBmP=u)%~4whi$U=je0&gD<C=nl`d~nqAOk{GpsB!qkUP8ZyhHmG
zYr;vziUGc+!v<T{8c{{Lx%PRkJCZ*f4C|^&YwL8oE^uz&FmV&pc8vxkyn!<U&p*NM
zBP2k%$I7;ooZYjCs}<#*?J!V&#5;OnavZpT?PNqM7$8QESqxmje)7@WJWB4zQW^TG
zo%^vJMk>rs*kd*bqZRZ|9MZVs#6+oHr^b=4b=Top2mf+Sd8t#p{w-UNt$CCGZ5abS
zwQTgi4O+$@z(qa=$qIkryiSl)z>|tfrI&7Lo3f7?Lyo55P}FA&)}%c1iNtJM+sxid
zFSICo%UpLdWiYL&ZEV{#IDYAxC^%6Xx@;%X_VMm$W<G3k!*rYUSWX;rfE4K>*~<Fu
zFP3eY8n=dO>?UthGP=gsu{K!ST$Qjotl`>*aC}GF7qS_H(VEKf@xJ|OyQylIH4=;j
zt17ou+U)+BaBOq;?rwiw%<7tSI~wFQZsiQd8sa%T&RLCsSl3JBlpVvogM9pb78s3+
zPhzwN`;GtMUkDExp7j@>#VFp}*($ZBGS3afA@p0)veqbl0p-qW5;=V(zYp6(9>FQI
zY=A^&uOv1mV{`jE>ssBS-29aFgU0)6zHZLE=8Xxnt*hKp7FrgJS4K808^3gIv!-<0
z?%AW;bR`G1!lRbr^NC(q6eLw0>ic2w26_j&E6SJ6m-QB6S?D0N1Bmq`WD1TZ&$MXT
z^5w{6TYTH%+Q}QIJ1$z*vAR-Y8#g-LRrYIa>Jq2Tm)J6~Y+Kw_>08-5a@E#!;^5lR
z6O)(=w&6(ag^Tr$iaOiO$k^DxuCB0~YkOR}7u?+r+guRTq{t%?=Z7P2dAbM757z0`
zxD5l_<IQ^MxyJNGow0R?dYeu(rMJ*iPvbXZ!QRlaaOSR#roN`p@MDkY5?e<Gca4SA
zUwu}W+%h`2YrIMQ3Gqz2Uzd5Iq<u=0>Ms>-n)WG-)}`;EXCJ~?F%|ag90xBeI4<&*
z1)Ly>gLJhToEX_27p{z9TWeo7jeAgv|22(;#oLP0c=g<HE{z_hL!Ld#r?@d&&+{#H
z0lWB3s$HY6204WXTHdm+P?lCUt{83Y%Taso_jwip9zn7h>)5$Ip682-@~11zjzsm|
z^AFJMFU$>+yQ1JY&8PC2$#Rv>)vP9dlpW7Jpw;?b%Ud>kQ^sa<jioVN6&Gz=4^);O
z(rFR{ncq`yC7Jvqw2z*4qULQ6IL<M<|IO#q@Ay*N%I2Q<^gB9}-i~mzeHcD`j?Rwm
zdHYijJdkPeq?D8-Z$V1z-KQuM^2uzJ(k<T9m8aiV+t9mrSz|cTK`A}(z*B~JQ_s5A
z1Fas2I{|OI9$H<;jUb91fWgv$vxRA#fWuPb5$DRzb8X<jykn2m0a6iYw!5u+S*fvF
z)7}#>{-fhVd$4MtQ8($UE2}+EPo(P8<1wkmuKOnkik6m{EhX(G3tCb`*;n#i(6KRN
zkmrW1oMb0O#8A=3Y*)A19d)I9D%;nMSR$1z2BXJYwy$~}1n&0AK$BG2wINoa-L4C@
zp8M_8E=rkZoev>paL9bhH0dl%oDcZYYI*+28PN1IQj|$_tzoV?mk}nSFXpoP@$4&{
zm&%U3XpKDUeV9z;yl@M<=zTaLRhr2yjL*QhQDG@_n7f~5j{xyjUJ}n7&98`~ceTO-
z`Yg)PjGJCmWC>3ZyDOYsDKqI*VZo5Cnr4zv&#e|w>1eHi9s{kRN>jgrb*qp}#+@1z
zc9|tw(PA)od}VtLbK4^6=sOxU8l`53>w-|Ue5PlJHdC(XRLi1m@CTnZ;QUokNh=8R
z=()A$`3XRm0HY)goz=}C^(?09v!vivk5x}J+|uxG4T}xq#_<@h7~62ntLd%^+`hmH
z-tsB!8T@ZH^LH#2-ya*;*jddtXd%Bg<R|;Maeq!F<ax6!54fWvYag3X^wN*|=OXTo
z+SS%?7^0oQU}K`8N^kt8b&b*LAKzKowyL#tZqz32Ul+YB9qCAJ?ygVT*6o*U<Dr(#
zQ&@r!swi?41>6X2oI3@I98+NLPtlkn8T_49^Cg<}ElIVm-eGSGJEEl(C5}kvL}dD4
z<(gFnoLp<myjtz8sIP^&ucJl1w{&P??3RlMso(w#!Q&`d6@Cls=RUKzQaQrb;E|88
z%^0$W*djW<{3BS%gLs4ml)i*M<s&`H7Yrm5@{<{7+wwY2Dka@T$JpWk*s40^7~3jG
z{uo<F6^^mZ7|uV)R=oa#cRUyz_r5^+fl{nQ^4Rr>LVf~?h)fkV&Ltcj`zG~aeOPC%
zsB5;=6dXJ&nYPX0*jY`9FVLK+rE_P!)83bmHm$RWKcXzekBf~Lx&yAwZ?lz@Yc$57
zp>OeJ*F9qG{)R!1d$@jo=A-w3u0LTk(s{Me1mzWjlqV%<mMdadrpn(Iv#v9)EzM*K
z4zjJNDiNlt(#kTeKKyjD-5B&MC)>vRT>272m0H?SQVzNFr=^F)kC8(;X#{>Ssg4e2
zt-Sn#n*ca7=(JoZ%vVwW;w|8nWu`Ju;7i@mYriPxyA}uN8eN9KbW<SOG{3yQ)cAnc
z-(Yb3z1rwCD7g!@7{F=8zNv%>=P@sR3FUhdxnov*0Zo^Ws!-I><2=7i(fqR6N0#KL
zp0|pNG51_Pa_Q6Z?6OChUGC>e=kU=HYS~{x<M<8wx-97xj+2ubC=k+@MFh_uyB#h1
zB=p%xtt%AYIX<#^YQh>Oeb?Mp7hTi1y^?fUyDhLL9N*MEKHhsEZ8KNxDzAtH*HBw8
zL-2j{Bc2Q7e7w+qvsO^`ivF?L#*nXZS$#Zwc(h}>b@%SL=m{?y^ah#&wX=bE<7i^;
zw!RFVV?xW(Dx}7;I7f4Vq*Gs>XzLw2zI@sG+STTyKQ)l->leD_O?@ja>5m6y>-?k1
zrj@Okr%?|WQQ`+k%T2wI&jGm*c`QUG9hVq(RoLD{XT=`F-kK9rB?sR`ZRgAhDm~;A
zc4IwD`}CANE<`lvaolmZdUr*|`PAF?81^`jMd$ftILJBB-hc6^^aVOY1-uuEs~j*}
z=5(hb*H*7co3A&lOhp%?R~oN0UunE5BK=@myLnps;*0AxuY(Jugws;a3Y^Rj+XJ-7
z6gj%7Az2kw0-fS;i~ViB*?D)+5v_Lz5-*Fs_q-?b)N3J+qopC@_M>6gKUe$}rL9JJ
zVIRoPU5ITKAGnm_w3(x7pI*5ky5`6Thb``O)X`Yu>O|OUt#7WkIh!jF9Nzw^+h*kO
zvf)EF4G**oAG~?EzxA<tn>$i(b;IPuw=GD&K<+S!dvMSpwxj0N0ao@Pt+G;7`8On&
zSiS1LsYTqwFi=v_x~j82RTC|%(>t-qa-WVaW~fip(9H}^Pig5o>$)j%Q|1J2XDF$`
z?F{-VzMjEJH#I2Fd{qOiUReKE-$kAP5=I$30UDt{kTt9k7M#05V-^n*PP9Y*+yfjl
zBHrUebY}J7tdM1CPuc;LH^tn7l_$DFVt^^lT_I6=I(($&u=Qw^R1kBy!`u^CF{n{T
zZU^-{OT77eC5n!0m;DxT(*#qa{wk;${nu+!)&nj~;{S&#J{>ANUfyBp2IXoEQ~uBE
z{lY~-S)5BN=yW_9fqDH(xxxvSq1?4jdPz)Rp(1Rt+udc#bxt?ruXwrv_McCYI_ho`
zvwX8t{;sDZ9n)C3pq<#fM(fVo=aQ-XDq&V!z?2<?z~H4*HX+;@n^<#ltt5OdSGqAA
z-PI1akCN0up{ZTzum!E=)hk`f{_xWBl0bvmjQ!!OW(<wy%zt+{{Cn-@O}r-@91T01
zc-InmEss4?67qTscbryuw?(Ui*w54+&N@@Wo6MbRDkq)59IsOxr_n2A3o~R<1#_?L
z&a=kIeD#K=TWA$0{9RtU`7Wd;*?(tQYLZSa%V8R2cBl&3{tBLNCwd@Y>{@%ZqoLgC
zv^ieX8Y}81T83Bn#^PSz+~PJ(sohtRsx~#$o9n*Z5VN@&C%OW|VS{)m<FwgbGg#rn
zsxU^()mSGg!&)`=0tgG_F)y&GWv&GiPM&#jj;M_oR3_w&i4kbxrAYFkg7nsuMtd3?
zT6*TUN0v2}l_xf&21h!kB9>%>CuY9VIo?{^VM%&NJdy1ehZ<X3U1^)sD}Gq#u1Plq
z6X#ytFrJ+3v^i6?$@#>1cl+|LTHl~EFw@q1Y208bIZ*1hHMl?F4%fPuH`$<X;<Og@
zmETEkWls4|`Q#5LcePDp-^9+g)eGUeSh&Vr&tc`U!+YO<ar)Siz3)Ge+8f_|VzfJ+
z*m7dDD~3J~d$)K%I>EchcnyGx4okY(cEi*$V`7DO*S<?_2gNmWrFGVGe>jMi{sX@F
zDd@o}o)1hiyRx0_voJd8s;c+AYc3e5Yj+N{Y;N1Id*ITk|Fli5z436$8*$oK1w&gV
z2M!$_qrFhCqjbMOYO<Xg8V2+UQrQDO^m=-rsh_L@kh-C)gFe@NX?UGu#2fFeTh?bD
zUf$5;x3||1wO!Ocx36z`tbOosWx8w38)^$VgSKsT&9yGS)iUp`n;q#{>(H3Tq6716
zU!tk!S(Lt<&SLRETT2OEMhM0*8dIbzi%YL^WqxlKiThSeSSNnJXe%}8aCepUU0cO<
znZ<qkj(Ep?^<DKS$vN~g71Aow#<B(A<DE&5Atmtn?)~98M{lrYq$T8NbjPN|oc*W1
zdiVIYiAyU}-J{;7fpj!lVG4_$qgPd}ote6%7yY0E>Fc>4@V*+Vr)>RbEf~YuKAfG*
z>vApfiKw?BWc7J1v3fDqv%Y=J9h;hZBUN+yU|r`Hi*u}Q+4|0%&nCK>dYnzs+QxG8
zPdj%FU;pI;bxoEDd)>|*^{(l)y@y88TehG>HlmD}lf+>9qKmHdYTb^8iJc>vU)#mU
zjS~y~P1T1!`<~&Wb3?bBeA_5SpBpXwXV6`b6?S+$DwL*jYwT=r$Tlon<*Ch~p2Kj7
z>cf!3^RHVr_sw)V8@jfoqtl6jgs*jQzq2Ob^}E|z0>R#am@Cp+>7D2t-eA|%_XRqq
zqprbt_u6`meWJZ<ZHqW=NeA4)aG<dz^Uc<lK)ci08}fCaR?9)%FSE63mU&V3cn>Z3
zLw4mRRlt~J6Umc}9!uOQB0kiu74@lKrw?#_j@J%v=-f5fyS{DB?c)7%jh3T!yEDnU
zkY(KF+_A%n8tpqcDp#{S#w9gV0olX+n6-~L>q0+Yv%h0@cYJ1V$IPy1eX_aM?{%gS
zDr5Z8OD;6VA)Cb(v>JLlt@7~*pIbO;jIZ$RyjJ`-5AB<jk^MbT@lQwg&bw#49%W?D
zF7zE<@%)8GHdgt5i<*52scEJ5zmYye3&ZC?g;we)qgBAO+%M?gu|Ly$rGI0;8<;lw
z+B)>LGQ=l|0+P9}NxF5>D=x}pY~mi{hW*`^4`p^7otyvk=QiVerJvz@7{2gtrDgGN
z*h`RJ4OTC|h?~AEa}rM;j$2&8nr7&!$;!NfDzIC41bhGfo#vggFC7gp`GYEb=Rm0^
z(h+Hj9DRI+vDYgC?#6ViWec4IN4fk}{9X!5L%3mm3Z)w&YB;@Oe3+>mg_d_Q@(D;o
z;7IsNTufS^G$eftzmlpMwbU!!i}P4m*FIm>)*c;Pte;sgtJ=`FUlvbXomaITEtvY^
zR`{hg!h=~Hr(q{^g}G2&*Ba|*HVpc6X*_hb=*uh<e~Y;BeaKVO+JH1RfR1OS2QW8-
zzMAUOFk_RKJ<v<lx}pidoh5;IyT{uQ2#!o_nBLKtOh>dkv(th9Y8!43N1gSa;MCaa
zu~v8wcZGhFuX^YQOG~5TAn2{h?LO$kan5=TPuWSOmC0AQ>7z;p$4X!s_4pcs{!!md
z1nn8296vX$WKlucM(UlOz@#@Il}22FK9sGc0X^fm*e`;pW2~i`$(*k{ZZ*Bt*(vsa
z>guaMg*L@|%*^gZ8?E5BS;4z3g=(8v5I*UHBs-J}1(lMOYyiaPKk992UDbkpgtd|+
zT%l&M(9zPfu~*-%k2Y6(8r&V!EBA}bL<@G(QW`->Q{{Y(tf;uo27ey`ztE=UfVZh_
zN?g{H{W{jty|EY65fvFw5s)UCx=Cg4C{o7w$?egVrW9N(ZBsq1x=+$cQ%iTB`z=xc
zBHoMhVgk}Mr!cLQuL)M;bK(h=7A=m`KkYjE?R!k`4Bs@>^^WatYd-TXqQ4GtUeCqB
z-2u9h@J*{ydrV!3;Csh*8i`0pd=7B}63){^-=4v()P&<(tke-c%lIteNYkTwUbsaI
zWC!M{SVy=1#`^rWZS=;gdI4XA<ToCj*CdXcURb|gek1*?@Qw7b{F{=i3*VG1&%Y^c
zD14*)P5zB|vG9%f5WNA-pn&oLS6R<xScw}<&Wd|cn?u-N@HbErR9z$d;#QK8siI-_
zuJ$2sf0%-6mc{)e&BKYt(Port>03*eiH|IOnM$RDL~X4W&l*lnP9nD{DFrWy8<F}}
z)m74$5ckC;hg5~TqmVk}grYCenD{?y-{whsE*l=aI^NQK&##8MhTGdZT8F#9e&{}f
zNpVE_F>x~}*`(~^6S^?jW<P3gOzvH|YTx!!L**m=A6#?nxhJ+Zoyxp?XL#!d40W;e
zQ+!*id>c%fFz`8BQe;}_v+AmKc7Jm3BTc7->yF4p8ykK7ADlk+wI}G?b4z=~CDPNF
z)$(2d@-9(7_>6wx*6r12)SD*GB_}A>&k<{#5{q@vn7Y1t+ilzQ&pdc$LV9lE@Apv|
zY7y%S#FAG6l}&&_l4j6EpzE-Qo(?J-{;$}2iDATaw<e<1*6R9@sUxh_;;KGl|ImQJ
z?5Zm*tt_o<ZE`yGCcV*N)Srn)>PJSpO}0j{T57L##gg9Xz6o!rX;ri{Ri@FoU5=rV
zKC8tv!R@d|q(KcF9r$cRq67bDtwvUg$&ZhXz@WlTM8U@uKA{0*?bMx@bzdSPlh__%
z5-WV^=$Z4g#(_De3D7t?(q*#wq}8H>X!IrfYC+HAOIyWB=_}laL`;l`V;eIk->2U7
zcOIqlOIp=K(rfhAZj2e{=iX5N*WV%Lg=+26R@EEwcXr(W`u>&klgd|;D*qMQ&y4TX
z{O#PFNQlp7#?F09d^OXFG<J&Z;yLL#TK_T!!6|5;32_Tu@MG~67rFMk$4ZZs9}Eok
zii7RjQ-j{4+DrALfqnih_;z~fVQ7cXkd(KZ@fF59PHa%W<><TZch??@++#hnZM9Tg
zcBu5DA1yspb`I-objE}H4eVI<6n(=1f2gCcbtgjaw4OFKzT0}H_TmtdFnjN@opG#w
zpzKij%{N!dX;t2QbNQjN2S`2&r1x{_lW0qrrt+go-fPNk^sGwTF&AXbw1Kvn%9d3%
z4I$RUNm2b`+pf?u$4DbC`|IlucQ+fNtK+Tnz7b2j!Rm?*3`EmyB_(?gwT`%~_LgC{
zrFM0+X{{q%XR~=5n+IBAD{OV1*5#3KV5P-vw_AMvwt;ABg`>PyzhaZP*BSEHRCw#^
zLIHcZkLVs*dRU^9(bY7rOCZ)sUu92193t6u$Ko9y>Rjk)TeGh-x^cDiqjQa-CcLJ5
zZ0C?G(*xdu))jluCj!zw=Dz!seWcJha6TnTyD`Sc1T;6qhX$ZtfCdndFlfQWCj`0{
zaEkvc#^v}E0y7{vzVx33@y94Ws9pz6;)lTN$nzB!*F)aEX%?xcqU7h~OIuufE3H<)
zJ>v0p*7t=D#HaU!`v+RKWp#?5mI>>?tTWQ=@&@W_mxsbrqa72S?H!pv<`oN)RVs0@
z^oZg!1%qDQ;<NgNw@8mnoV%O))eZzR+4mT}>K$)cFg&v;?VC6^N$-tI&tNh71bt7o
ziI~oK%kH;quTD#koV%NN!XNQ|OnwiZfEX1>efMH|LfVG}B<6<y!F&$AT}M+wq!ENl
zu6|HBt2W-c!SKb_+u9Vy2*!unV&3>*?i<-lPfg#{S8cp)qe0X^c&H8E$ZV3o!Ku~4
z#$1>58C0)NJu?TMI|}rniOfAzl56lx9G7EIN#8Y&lFk9$Igwd|7(}b;ySTLgF|dn^
z`1ahcF>q}dR_>v)63-UOdoF8z)xy~Bxib@DClVn0?w_UiNw-1k_tB_=Jx%VJ?9ZID
z@M1jixnVYzl!X>on)JyAOc9<sK9bt8xJLe&96U7B(z<y>{@FS@7aW`l`r_4{RZfE=
z<_-I;Zfl^oZ2aogt4{6f9lr`c`+Iw1>yHlh?#%wISTm8F>vem~>FTP+{%})EbyW`-
zIh~u4r@B>@{@>|F_m$`Lg-6`}Q;Or`i#^ln^|64-?P_iIy4?Sq)OF%OTROeGamxq8
zjWsaVX;jl9Exw7)QH>dO1gBe&?wK7cHanzp@i7)bSqy1)MQ#X7t*hGNTl!k3+C*YY
zSM&cZ?MndTDvq?L-<w0y+~?EW_l#yVlIGNCMl-rKI;_*OWZCi|`NWrOh>Z;xY;1yU
zh%tvD3E|p=D+bK5U|>VIl4Zk^i)=!&Iml*{4GGz>WZ6LYgJ=G)-<y$TJNs|`|2MpO
zqn_&O?&|95s_N?QLa;Z}&|BBT)h%`S&9&xcokeNT7z|b&X=xlwWH)s-jwUmkJDZ|o
zjhSIAlD3RwzV5IYyw!tkZ5s?qx_7LfY{mNY{g~@9&h-516YkBzN+Ztp1czb00mnxo
z5<<4CaY{oN%|zqXxlM*Dv9on^ez~zuygA|#OO0gfyJKVT5?t8czoz)wru|Ppy?+yx
z8Xj1%FTo}X&`1Wf7@AKaPTd1RzVYaV1@UaET+R+l=c2+t>q}d*4o_I4^y@4GX;)02
zRN7Q}y;kWl*uA*}f2m4q%&sP{Rj!g5YU=C_?N(h%rPbBcsHFOupu?7QDK4lkd^Kb(
z^9$xQ;-#p9w;;;SRZ(DVoc4QB1(}|7e`ZCKyGh<$Wz={x4wK%h_9o6gUa47b`W&&=
zcD1#yPMGycxw0$c@u-!_sQiM;U@XSbGrvX8RADswQJ*r;dWA?5oXL#2<Dz<yXFFyF
zMz&7M^`V5_YB>A;Un+kq$>uw!H+1I`0p~{-6wHX~OH+u3x>M948lodfh?hc7@lG%=
z`VbB_yoA_ydIGFWT6StJ$OVB;2w^~=1D$+n5W`j7SFC9sy!OGFOKu(R+R@>KZl-T@
zrutni1L4M6Mm>=*v|F>G=+4#cS8r|`+|zFBGW)_ybsDGMskYmr)>Gk${S(`sJvO}b
zGgDh{>I?X7{?X2+>Ap}b^!8MIU4Q$0Puu*-<tz4Nb(%qJYm9Q18=bL&yBmB6E1aoe
zZUB$NQ$rWfgl8eVfnP^Mhy#RX+Uv;;8JGHoOiP=`n>RF%rIygYj1#%>+=krr2H%Dk
zR_tE!F#h57!V51D<8C@{j=>uJ0$UB8|I4CYvKJ|Llf7g+a~3J5$|>zgIl#j_QcmeY
zuETuFql;i}<8wW>2<9Z8a=M%{g<PNGb3I;8xfYmD@i0%6Q<ebcIv(c9a!L<UuIE#p
zDyIyRljH>UWXr&1moxMxhe5`Kl+8$apprsfM9ND@d9a+ajW|g^ZW54T&J|i3LW-16
zd0I%pZtpCq6a5G<UoL&GQ~>61sUZ4T^i8Ck5>iUvgug(+!#q+>`3`bv_>@N%!MONb
zk1c|6^C_pxDZfN6KcDMyAq6W31(N1ro+!io2ryb6=E-u(n@G{~DNoT9%#GhKttDoh
zra^VulsA<~C5#E9*Eo3j<<ooj{>`EBYp)$YMCaJ=mwo}bIMvE!DYr2~dY$9r@P2&1
zbPVY?!18-QGz|~Z1EPnK`lsT1q94HD0BV&>K7*9o_>`ylk{SN=vng^b<_5@MXtE3Q
z0=3qJeI9~u_4Yu!Ke{{{Y{O?P00#HRY87>T(ZcRt;dANSfWMwT&=#gq*&w<8JpbXI
z>~cjYW*r$K_BN?OTf7qO`Cov`qI9gdQ!gX$B9bn0-eY{rFWFLCtFdcaJZ*Kk!bs;H
zZMtVmy`k2iX?41Dsph%VB&7^|>7)&qAgu&_9CCo7!<xVaSOqm)dUI;P*lEL6d)|bi
z#m^aZc0<^k_ojNrY>rT`qQTqLWXE0Bd7n{hkgK|knp9-SscNtUTcE6BClLxAK?@~x
zH#def#;=TD9OsAgy45vSaZapzPX4v48Z)XE?OoA*Q}3-ve*A7XoB%>?N0A%Ow)1N1
z!OnZAU*{b0HzoT~%SLO^&RJaE)Gsu*>S~PArhKHIuc6Osw&>ljPUa;{K2_fxr1PE@
zl$Zb|6g0v~*yYcM7~x#4%Cu6RRn8T&(`Gcd!Y*qlKbV_s?yYZD+c|$yt`3>vE#aP<
zLT<mK-bN&Mt>~V-tTmcfsZ%MXHXEz&MTrC_U5m&@v<BQu{jM~G1(s``8|{2pL(J7J
zJt6hXiN49^^p>5SbahRN8n&Z`R(L+((h{mg?}|C6zgN8b3rqp!PFD8r<LhVg0~rs|
z7=s=DRA<O(w1x``t=_27Tdg*W%fm%&id;ioP9s+PYdvv$I^s*=d)V$tJ3rLe)p|W=
z)LCAzbDUXesngqd58{83&T~{t#M70l1K5S&`o#`?Iy|lc#cW2sTTKb(Fa?q|AXqFD
z?hUpL<Yr6tHk^eG(iMM5Db}2%6pQo(S9CA?R4b?!C_RkmoS#t}_?(A@DzV&z-s0+M
z?rv{WD5oPE(*1jObvh>RovB+*r{dDDN)L-(Dd!9FV+NWHKS2h&+uIeYA%oe~Gfgvu
zR-xNA()=`EvGga=<)X`Y8N)Mzpod0HwxENv)m7O|ju3q)>`zPAimnDMc$@cS^K)+5
z!&s{bG>VDA8M4*7Mh>Ku9xSsu+<s@rG@Xm`SR+2le2z+AXc6?bq8o^m;09wVeak5k
zq-^J59x10ZA=fTG<<Uhj2l-r&ErOx97s{X|37ET)>(hL$$IB`6!2DSr=81Aj3t%qg
zVV*3f#E|kSKIN%$%CzV-N#UFhI;#knO`_AH5BQX)%PCRZ+4L~HNiyb{a*9fHMD#eH
za;BUzj2P!HA+kZr`~z>#j^gj*&~T;94|qGa^1F^k1(p53R1Jk5!^b%Cap}CrfU?0O
z^@+rIqsdz%R*!UzFk%F*`ZWfbNp1|94P<9~wtZ6$Va3HW^@&lVWv52v%>`@_;;`~j
z?ibhsJj5PB^QEV-FFIFavBFPJVfd|3$m&^xL2QUwXt_yKz>I_M{TidpM0TPW@|{hc
zT6250ZF6qaoA=u-ddsC6ur3kNR?ef<REMt!n2KtB&L)%oQ+hbQqQ%jqPS<Evmik(^
zNz2Kd>NMF|$Y<8&YBgDTjX#6)Llm-{5+^4>tJz6jVS5)^Q5FuMR+(HEoF{&|Os^`j
z#4xvNgosVes=q)nZP)r@yuQ|Y0nKPDE=Mc)eG%u{LC2NMD=izA(jerUFrECkZMbDB
z5^6FkC0`+7kJ_rSTeH2p3DI+=da`q<D?gL;W;|S^%I}lc<ki|Yq%|_V6&*rE%b+oB
zW|z@f4^~e*Lw!XRk<3pY%aUP5gQTXd)$eskbyYf(M4Z)RlVoqPfY_h`eV15TYcmWL
zL8YYVSL8v|+sU7u$XhvlWz!W+S#U&A7UR3Ud?gq7>x{kE6*M)O?R7O8F&DSiC*orj
zc2m!Iv_3UuHh0|cD<jvbH2R!TogtUbt#9R-ZgAk&Y6F;VpxMlO1)+_RJHT@mwCOxv
zLlh}5#GysVWWC@q9cxTFLP3bexgf(jG%iCJdB3x%ptm)K<hAl|y&_ji-A3bEJSXoZ
z3_F221O6)DEiXd}lB>6Cw$p8Jddzr$VX%0H?Bh(F%fy-7)DMDH2AY@GY|`f_11#sS
z2L-fltwW|lyt<@kwznp`rHu1^X>~U%<}75g_@#IkDJ|e8RMR9+p|w~Uq_v`k2#jUE
zeJSzYtw+aZV+jpyRq^9Pw>*C+HjZAO1cx!mgZK%7zhG>#!T_OLA-~{vGi?9t08=fI
zNJy21?DRWp^h&a&cuSSIM#A*5aI6qff$U|5(BJTcQ96SksRZFajRv09Wp!tP>@r!Q
z6QhA^cDX$=bBinFm4wy?Sh)swDumbg(FNup?Sa7tlhb7}`5Nkt=5M~NQ>(P-gO{sS
zGEev|S~B0m{0Lc8G94bYBtAF>?eC%`wK&V&E4G(=m*Q>=DL8blR$1=bvUJ3{gt<Zy
z+LjCT&hND>X`X7LA3<NE5!Hk28|dg*o$T*yUy~djO50sSX`7qMy?W7q5*p`5Z>dL=
zVS;W9D`VtsN105xcA{)D)~|w8#mOPO+%WoT#H{`pm3YcpQ=P@|pX57!V=XW6Y7K?;
z<R}E5(?=y=nHE#<LBqCN)C+>Q7gXpRVOV|CrqoEBxW<_a7=o0(DGP3DUMeQFw$~{=
zW8jAss4bREzz=i|7u*wn!8^fE@25RIT(drC2-|Fyx`Ae2t0|)K8FhM(!CE&+cH*Q1
zoyn=tXtnjOrZ&4St1{^oDuY}d_QhIhc`H#~2WzA|4a)p?ZXf-k6M|k#Hn5B>qKsR|
zw8N?qE3sEAWNK9%*_jB+4e~?%;$_Q*u9wtE++wCzOv7Q|J={sYh_xmNf(m9R?!s=-
zimd)pIDip98vsi<_2D_nk+mtZ^E{>~o&lQx-v&_YLEx(fJ{$@oNc@|^vo#3T>tFL_
zO3QmUY`C|02C&;O9=ZVw&pw4kIAgl}iAXrAl<(KBB@))#J640Ej`Gu=xl~LT1nmIF
zUF+7}MW5oCPtVLCnn7eo>O;T<@3lT1EEh}%HuXW-Z_do=HLSz8_4@prQO~+DW*+}S
zIvH)nXLFotbWTVdT5r@vkT=v9K||1m7D%Nt8XL4v6=$!JW!9+03=Z*l%29Y<Qr#`(
zG-@(--}?3U74J`W0vCim^cH~zH1w8E-?F6q)Na*#@>AC<$==lKL+NiU0puP)KEMtO
zv&n)Eea>;j$?o)EF?eaZu~pk9cX7UuKNKQ+AGPP|nuZ!Z<_>LbgTowkz6qK6F1izE
z{z2Z#s703G;5e3<4yiKn%<G4qeU@a;P@4C{W)q;WdXtb{i{FG_N>7Sj#d>Rn0+_L}
z&XVTCamsF)%bh7!yifZLMU76Y)K}vyj#q>Aa<j5&&G5M+H|SWN6urmyMKz5i*Hg_O
zz8_=RggHN~Ur>I}D7A9dBMmm%oQ)fl&;waSr*^Hqqq@f4Od8C3og-z?x7T@`$vUDs
zV)SsF$9SapUuM6~p61s^M!>~;Fs3;wJ<5EXIRA(f1Xf~N#oUS3ypW44#a|&_o5rfM
zBc3Z$Xql|vO&Gn|6ec?d<CytFZh2KsrS0p>&m@k^s-=1><|SUQxeDdjMX=BGbYZnD
zJ)z9=(h35#?C0W1M=3YfysCvn^qyLWqs!BhmwJa8u_kWuMqi3Ixm6Y=c{SQ%VI<Os
zLf)y;Co@Lt(;lt4ah^ChhX#`rBU(dlgVuZcf0DL8Nf+vS>sorly<S%cp$~O-a$9dE
z(iiT{)c1$Go4vI@`cRBA(P~DA$QdW~SYi#2T5ohIk2a!mZXA5bvLHNm!E>Q`lzd&S
zU0Ro=p+AvovBwR4tzA`BPD^Ycm2Az_?XpH4ewQWY2&^fzxFQWh_Doy5O{HinWHf$b
z!xDS0y~}3qcV~Qokh{h24^s&wE!~O;nm_O{fi&on7p5R9J^B?x5Inpv9)zVh*%4#?
zh<zE?5ePMga=FmvW%?OoPijh^vU@^&!nARIOHI@}VUL8o?pQ;-vte{=)%tDvj$w;C
zXty`iCwgP!^EDf&Wd(8=5w`?3;$x-YxUQJ83&ol^*!6UsIU!@TZG+6LuE4f!>r4$>
zr!`)4sFjf03|F#F$L|cwtZUm=ODv|smTXg?pR4T|gl@8~q0cQw^ds+0%rN_@=U~B?
z2nmBVMQVCO+EVuceU3U#Do@H!D)%nEk(1QOSc6|ba`YRQD^Dtr?zp`x(?!C^-Cb@^
zm+N@(E&O>quxqd~=f@gMgkQ%9q9MFJe|}`U&=7p`k(V@*fVkG|l(ebh49hmD5|-)9
zI$8?mbqZ%~wBPuq>Mcf09#!2dPBfSsjUCa|iYqVc6sv5?PVwN@Y&zU&wia6YlvY(C
z-)S|DhrQsf{?dCm3Gsf|6c~#f?->yG&7z%{WrJ)pEmnqBaeArr`}+Rnk-=3l{gB?5
zG>s}Ps+Nc^?CA^Ym&Q^J8Qq+G`*i!}C5^J#Ia#oFiBcynz9Y3xn{1L<(mQ4+a?LXI
z;!jHVq3!pa^B~bt4wCZQ9_Y|4_azm?I5vaHa!Et5x>jj)*)_2NeZNxg*f`lxAF8QU
zIU;iXdi~B$U3_>}u9}rpnRCrwTqEh&xSCrhsY>|T*Z)&`WeQTZrF1LP0KWBu;?xsT
z_JIf-OWC&4+;V%p=|E7XN276%wu#dRyu0ce<73y4JDZ$(gS#nc4rta$6q19ckiH{2
z6Q;>Jk4<q|u*Dfs>yK$o^9Sv_M)y9my=wh>BHMP2rqS9~qmdOii_O~cppRL%ftBtc
zn;P6?yLNKV*HmKiG$w*`91gyyaCidU0Mb;fva;^ObA=I1?k%%=yj!_RJ&M&EW=!3B
zj^P6t@tx|U46{#lnK}%fH}y7lN)%RQr-W4azO|!IX;F|ux(SRAKO4a)(=mrZH77<|
z5ZazdFG~bjs>R@cXnP<S?Hc;fWur6(NH7uf;s@{RDx3V-Xpg+7rn|Z~dcc-x+7#_k
zcGYytyQ5dzvrXT`X132Xiv5Ruk_Lu5a^&o9-;YV-G3f{RhfV75zyJQWPp9K?>UmY7
z9u}<G(%UbnN1xxXNtY;Ss}ZgNN4_i(Ks6w@y~>d`O}qQP<kDzblhh7xf<&9w>=O?S
zn8U5A{p8T7<N<df%T8tnd_QG;!^0ocV^R=P?;_&)u0m;a1W+d%6dUZ!OH-SHZzp|Y
zofi90Fhx`EBh@jyG7_!hjK$wuI^|jO-jILblG@<F{PLtcyYi^Zxhx>A)7Yz?5_?rn
z3Hjjm+lxvPj7f;2_{%^3k=TpBOc(!|1dIQ?_SWX+Tk%j|9qc)#h4~`1MxNr(YlOuY
zh<K`%@Fd5k1G-BPbgHbl(4eFjvmO3ipU34>D`dx1$K<=@1!dpVYKF_H0|A(5hKS={
z71^)4Y)NNovejwS_xcMhEgjP0bkJm771-^tr2?Jb?(L;3n3U#j(8DTnVb%l}@>Hk2
zj=2VOfGprY&nG^;KM!5do0sQnay5DDeSPa|I^;>hvQc@)b7;^Vp0D1f$qv@KqS{^Z
z11wASljU(qJSO>cu0O3b%UgOnzsL9*8va~sYJrkMXPOX3tN|kyQ{Z`{wKBm7+5t}+
zmP)864FeOyhsO*n^?|gWip0!hQ@qh(wDy|5nzao!8s;z2UcKqk$LCd>H&w^H5QgJN
z#tUP*Yj+iYY7Wab(lX)EMKs}2k#J@eozbXFqHW_}7x=f!qyRy1z=EKwP+|G2$*F2t
zi?UCr^5{+|`yMt~EjSy}5ev*@2Pc&BcGWgr&~RE^EUC0kr>hVQHe9M0?J|e;9a4=&
z-XYNj&793<p0q~>JMA$;uiBz0sJ%wB!)06U4?$*AS!QS60mm%JY$`s>LJT6i`JBvF
zG2bu@FCRNHt{c(^n~iJr+?3v<>8Km=8zvG{^?CRFCe?v0d(Ui_tyn8h``Y}f;)tYH
zGw$(8Hjqu5-Q-clB;88{&od*3On^TPCD8$g7d&Xx1&!&6mqYwIHe9zkW1@LT{kMvN
z&C+BfZz5N!uhAQNRqe{Y=-kbN)!OPGZLbe@NL}Xnf;MR@q(`}re@q~BU>B4=Kpg#k
z>fxgEVcLXf1OyGG`3FHnxF`nC2feG=J!IgT`<6$CxXYAFxJ!e_EXTOVl}EY9E~{ET
zU|n_fpp(4sYe{wC`TBK*%w$(@W|HDZE1JOFSgcPh;N_c8!7aPNb{Y3M<)z#mzI%=2
z?~V6xJGfg_+qqjpH#TPqovBRW$!*&%O=Wt!n=`#{03F>K$>Xfz_i0ecL4!wFeBQYH
z9@P-JLVeHlGivfRH96BM?JEv4sX_r+;589p@5oiK<<N@|oRF<l=v0<q1?h^vp<IE?
zN_(HGzouW+pSvrwBH4Y#grnx`npbT-=5$YesP;sUG}a>}L1#yzYeObBc!De&$OJu@
zPeOE!g1Ha!MTD)j<cH+PW5s}idGsv3@2K)C{HD;XF8*7TLR^srxr6XAhlvXBBG~{B
zD}2u6>%8X`5aJVn2(aitn$BYEz!$w0Bk5f}=P8k{oO3A;@ff*_hu8#&KbIj?WeCs`
zI39srLvhe^&OhWK9$hG1h=+QNJY2!SivA*wN6D)^1a^euq<7i^>H!y8a5-PfqvYEQ
zIJ6hw7~vsKFT!EJ0LQ^Hgn$G00k8rD^{NY{oDWe4h%p|=W1_|~#Bl)!1InSbpa*NX
zpdLd!#N+4a!E!vr=>>XhDnkgpL2(2xz#+8diE>*g#Dx?SN_nze3T~@pSsurui0lyB
zB9!uExzEurWrz#wQGq}_8iQyZQ2hy!ql^O*1bzD?d2XS#Lcg36ReE2j$5RBu3iLPx
z&RWmo5O^+#RSkg$PtkhtyoQMakd#XWTo-aF-^UpDQPEoLWJ=N%8Js|{u<HB6haTSe
z@Ts+5nS1{Exvx<96D1a${71C`kshnQQSuD22+_^$qJ89tjE%=oiKB$Yb*TI3(e7hM
zdyXCJIl8a=#EI^kZla$jfFUXxLYe*e#`{GnKG~wxAa>Drl=EX(B;s21&~m?B=W>R_
zPHa`&8g@BDA*U;h)|R81(SAOv87WcGgQ)d?Faeem?Zydm9DgT7qi8$I4^iKa-=Fdu
zWilhjk$)==kY`U_d+n+1kI$aom2VU`<$3ySC+`Tb=@eAWU@#>yMjttN@DcLt_RI23
z;>P^0)3a3CHG)h6R?vPCUbIfY{m^ySJycvmp85POyH4y%c*Wj$@k5Z1K`lk)GLZ9J
zDTLDb%hz4^W%4Yl_RQxmjU!J2d5dpR$_x2~zJq6aaqmfxQ|Q6sAIUR!-aU8MU2}Ke
ziA>aQq9<>|!k~UFYz`ItO8vKQzkOFjy*Sc{UvDh#If8$D+aqYvCDdCCWg-PhoN`lT
z%LoZ<bj#ZMr;d)iMXLIz`zMc#{Gj-!{>T+`N9V5KKPb-xL?43s_fcPzA8|A|VuE)s
zIG{1{7Tc6967U)7Yz5bl*N(4x`gO^NoRe#5YH2LL(2D`lA=JZwUi9+4=;eEn=Ui|k
zT+;rOJLT4r!^OwQGvL|cuXv8dNSlWr2^KNp_^8H69Vfz4B0m$+(-i1@4aYZmC7)2}
z3|0GdG0XMtlxB^wpZv37q{g7F@k$gjRvA#VB@JC;%ltFn-6-Gu`s7CGw!qYIQi@}r
zHb|<$$@QYW%pVvd_R)puelb71sZ<d^7tBz01oOUSKT3s$!0#8scV2mdoy8<_Ya(Jz
zW7ZQNtg9bR=EkjJ-()&9l}Jn#FLTBX#%8<MS4Z}Tnv&t3HfQ_Zmb|In9$S`do=UWO
z<E^oo_WauPRUxMvXKgwgnQUDsF<nnRuQ=g;2={FYr<hWoKeRIR0=_MrqbHMb*VCi(
z5}|Czky#vO!et!>cU86ZY36?6Y`PAdnWyP?hUA+3ams)8(uWMk+>O~C+OV+7FEne>
zQU09JI-c&lXGz6=!R?9knH3EIZ`|6@FcNj=r&7x!ib#{GQQP7ljm&LvW|m%Z$`TpP
z+9To49|Q*zjjM+nN19`)Zk=+%;@GpP<M8FHo6)L&DXk-4$Ee1V7FY3K^O5z7x0mw~
z>?Vz^#wOL(1bixuLZMbQP4x$j7MVfm52{p3g+>{jx<@QtN7$}`;m_VVUf9_o+rThA
zeM6u90{&<RHz!MvF{fBwQgSRbFKn#FzDx3Yeyr*#56-P3?wR7%6XYIeS5NWH(NX5f
zPp*J2^Cu9>jc8{HT|M$5gC55YB!bj%l}fABr1611%|}<gZ)9+sxUp_2lRf*|QZo16
zd(kz?_*%4(=D!!afc?BLv>d3<6B4`(-O>$hP*A?9p3TXsjJx!{=D9;dmmZGyyXK9>
zKk3GncV;pxlU|2*UTj&PAG>}ob#Q*@isd%({EGZNt2;-#_l~x%chmhS-qKNiHz?!~
zm(sHkBW_O5a&DvdjhDz*itmyyK14{<zA@5FtV=&7E|!X)@E)OQ<l6|1O@@3}$@1dA
zX-0YMlYPtwXO+xVXFm;Y5kcSjfcY-saj<SgWVG5C0TA{GLFY#$T2g74Y+<#NxNV(z
zi@q+`1%wur+n%UxH18j3?Tqc-D3*Jij-<gGTtPm#A-g@=kUsm;AUsvFNtIpo>#IN2
zmrL*2-(yNQ*)@~42FkHrm=C4QNs)_sI?l!R;UqMp+he2z6#PlpMorxD6db<%FolG`
zkL3P=Yv<DGxoZao56-2}zABcmp-Ve@E)OSTw-vulo|D#u=i54Vg;|Lrx$4S7;mTD>
z`mPc`C#{w=Hs=$$ezH>foT4TYPc?`Y(x;`MxDH;XcBYETV+l4WaM(BG=7_EMA*ty&
ziN)4qCv`+FCi4E9=5L}>&06{ulVY?Kp3};LU_e<=`-hwQ%Rn}=_hbjDDSp^-vUrTb
zFUB8CLrezK#7L6(`37=1K;=4$xxe^F@del=BuzJ6q&Y$Y#XpvTY($P)U0%H5WJmFj
zz@9IC9lF~Osa8PyJ<sZMtp1bV<CjqB33dbXJNk>Hnjx<h*OR-+J!9k^a(8h(QkzQ8
zuxprKV{Y-%XyEhuf<H@xXX|qCq=`maSKOJr1SPLco!r^hw)5oF)a~?r`_%MjCMG^J
zJ#~Cy;`mhCrq<R?ZS5O#xs6L&cib_v@{S#?c(0tndwTrl+1Z=N#^~qxbbd>B*Oq*K
zOIP>S9QdQs9*IETv|B6lyS4881oQI1*?r8evp46kv*&EbL>EKjSw!t<{|H)%IfzT4
zFO2Qv(_(Ucj$!?u`~)n|EP}u?l>p;+vjW)JTgZ2QQ-+--AMo^i4OII9k53D9*hEP&
zWm$FcDlwwfXbme66dw<h_WK2}HRPjWbp`gm-@GH#@CnrLhZG~wc}a>LDPAcqUWH8#
zpZtXNm+M%80Zsu*;?`FHcNSysRG?>zO1^JjL$C9-BwC;(_=`vOgHQfIt``$J+C!+P
z07G%|P%??647jFPjqNiP==<LJ4W(28v&l=$-=L;EZ&zqv=wsq-XFnmoFY0TU9c^dt
z>Ps_ldGYXUfsH`#L@*qu#ZmCQZO``@BnoxW!UfN}q}_!+^6x!8z3v_lkE(rd>aaZM
zTF2R|#Iegeivtw%NPfW9?mzqEzBKvX*sGVRM-KNSa$9p7U!Ft*aEHdfGoNQ3r_o4U
z1v4}X>_?LgDeJxKEbba{_NIHsd-wifonhIDfkfvO?fZWIa$#Vu_|3OKGhOLd<Ug4+
zykFuRFQWq;@S^e&9?*>-$b(vgbiXC$j0`mBow5O`!cyCva%dw}(rkRQP3K3nx35af
z$e^w0qN{VE5sRJ+TN;;YiZ`!a52|#PKE!SCbXO?m8;*sF$NT2^<wNf6yYAX~_uUzB
zvY{a<PBk>t;6RII#Yc;eUV7Cfmt2JhErmU>p0r_=1_FVuE6dhSABj#OZOIL<Ko`TW
zj2XWM*gk4$;PWSV6VX9HaOGS<OpY%`bVt=>{VT^v@fm7~l(8~Wnh$?ZFdTMp{SFvD
zFM5J?AZ3Q(;GumNDc6bql~4ITPAz?vZAD7uM%J_NNa99Tq*U%={Ty!F!(F3DsocW)
zB-UbaODa<M`%zK1F~%hNDf4qGi}cW6#~kxf#`OB@D6^Lt#}31XVHsSqmey)Db~0ZA
z{8DyZEB!l(8hB6xDLYI5E}bs^S=3tk2L8UqOn<+P$-`g&OO#c)>-AA4hlsmZky5$k
z^%a!y9?FohmHS<v0}SpzMGAlODe(M^X(m6%{d_WZcX_|-51BN*0~RUe+h0jFlO+%1
z#2tF_G-!@ogSb;KfPRv($IB@ja33XI-;=Q?_<m8~+?@|_;`S#PB^)Gelc-hHCz=qg
z6>Ssk6&)6xppusgR$<}|F8ZEW^c~vl0*rgn_y3=C=xYl&7ne(18pPV_Yq_g67K=t}
zseM^^bHz8xKaf>gi$$w7bHzE0*{so<YsqaovstG#*A~}b1oOrPXs#(kC^?gXpYg4g
zFO~OF4q>W`pB)@D13+_?_l{ZvT<s=9Eob2OY;sFEy$S#H96<^N<E*s?n#WKJ+3_)x
z5xoO0qWp)&$=mMSa|M%mWI0?ph(2cS7yXXCw({FO_piB)x&Qj*chWKC0XH^)8_W6D
z<ep#3bd5a7kJ1Qpnnc(uD!<Jpzm{iCkM7?{aekGFk$O5N;5<hxFN|@oK6?0$$^2F^
z6H6aFoP@oK9kR@0B+hnIDAbCFs?E&b*V{cMW*&=d-5HpmP|q=WG6)WbUr^86aJ;UT
zh*Kku7q~B&Jr=WCT`QSU4Wt*oD+igp!ECVFB_o4+#Oc{3!-x|oy~aGvN1eeU#OgMk
z-360S(7NCu{;oIT(kg4KR%@3g@l~VZzcNqT?M9nysK;(MS@8m<Ut?71F{(ft>QJ=M
z+kTnx<;!WE&obX7jci@zH=LsF(lOtirm>-we2_yRBmOP{Hi|osrR)~Wg{1T|CWko8
zclceQs39T;Oy!2|%5>FAmox6Vx~P0yxsJ(&`ywh=Q<F>8HA8cL%sfwe*fF|JfVQQ}
z_7K{1bg);v%<u6;mBacq%=3kAmDB5Ws=DFp#7TinR`e~5YWQD-^?qR_?z1(<z4nF}
zlXbh@QIE^p2-tp{g7yx(^g`HMZH+M>;F*^eV42dJXh#Tgh>rX7FfSh03bQBTG<)iw
zGP~=Y7I!_9bJ`pYE}OHy@}}_^xCf=3?fO4s@|oRX7v~8*RqGBr@n*j2v|<t6YKvCh
zsDA^~B6^oK^At+KiQUZ4&`_>BjW%2m6Ed&ss;XYav}DCvjn>GlWV#Y@dfHDrcDa56
zIY=pcUcM>hV?1H!sxDdeO6I9nu}Z1ZumeoA4*6inK&px%RWG8!;ynesW1Zve@s9Ck
zgI%ZBI}lCKgx&7+NqIR<t(Vh+fDHU~&l4rPAGYp7gi%FkmJN7nf8A2w?r!mfy87dK
zyH0Dc>6zz44UU*26lv^8IZSGk)1aX@a(%+2$w5eWKE{R01P)Jk-@X+gJWM+LNa{X3
zv|JYD-in#*JjkBTgUdo)2bTf+9l67JDF401bdw%B?}19dmcVjAWC}z6WYZz08)JU9
z<p7}m#Jos`5cjzVs;$s7DZVB%&%8JvoLCmwiu&Ebq#%{#LaC4;eEn=A+tO?CFsZ-w
ze#MFh^()<p5iQ~6kRWY%Na^h6{vETM2AHQmANjHk53S!nGAZo(_!nWnHE-&fWHLUs
z#WJRvo62;VW&G%hF)55FesD$Ujdj0e&X6Qxi)ioj{v%}L4_Io(a9UCsTg({@C_1z}
z@a>Dzj7#()b_qjU6Gj!U8VW;ehuPlRDYtv7BwDMNak;J0QGG*=8PbYI@DWib^1fcq
zi}J7^>fA&%tgw4!Vy(?r3nYxIL0)UH=xuJCEHjLno+!ygYfImww59tn=)$BywN156
zIT-r5r>7gvTT(g*n9&N1uvUDqZjeGLK7OOSr-#;{nQ0S!#C)IX?0Skvc0#j7^|yAW
zZM5$W`ui9;P2|j#bXA2?gldgxszNRk`@^hwlX8Zf&PwWS)rM-9!`(t_b_LFsbd|nI
zbFfmrIn<;zB&u^=Q{!@MKPjFSC+m{k=phR|qjN{eD_XKpOX~BJ-KOd`3>vysKkM1H
zjn=ZXA1#?FJ-g6atavXsb*tV~cN;(6-qW+4!hEV&!e04*#0Z3xt}NAhWz(u|Rkw0b
ziBDCr)PrVsQ<?s$Qa7Nlr*az$=d$Cf@2bAq-A$$RiIPs#SbBhg?o*ok<VQ$JmE5A^
zrH7ERtF+;he?!V_@vLZF>2;*+F0J|GAAoOHNh=yatDy<gX@<H<aEdey?mR(S<7QVN
znKoqR{-c%QbaF#8V{qz&F*EY*M7|}^t7yK8yrD~opxG_isF<<UcTLv$o#LuXk=JNa
z8>H(xt38fn9JMIt#e8y{>cypFII*sPag38v1Rr-ZJ);exqCBg(aa>)4cF6BN@2t9z
z+#2T=ol|$9<PmiP3p}wGVxgSvuS<HP+DUJ{5xy*|G5dC%-;<5V&1p`fsqR+lP><W8
zxq6_v^7Cavwk^8aQT+3_zJ*_AN<Pti=_#Qfv4V{i{0D3w*?JY*R6o7xroKK(|8&V9
zdZ6?MXuA*ee-kPBl2UX#v;*j{rCC0uzGN3&SNaB0_5<cOfH9YhqDM+!LCU6buZ@+K
zi>@x6M#?3nt!Lr?DD{a>5jz<b;uSCU5#R35G=xkx&9tTv3uGGVOm_7OP2m(&ilnZm
zyZoYb{t`HRu=FjS!+Dn&VnpbeSY6}w#^t%L<;9Ov41$~zl4K~^O>?X&g+)6{&sEw@
zN9+Ce9@TbL!S)uK4Q~rmnkZF+HZKZtkn$wr9K4VDKlDAgO}*`-XP#*uq?m9!yy)iA
z3)Hp)pFzq9zFw3L0mri)^c-*b%iX=MEfx<eRyCNHO4vbGtWlY`s_rVKR%iKr&AnEO
z)iR^<Yipnc8P&m%Pp;NciKb=jqTj$@LiL12t1K<Sd|ft}^S1`GLB<|SV8W#T#}c&H
z%DNkP5vx@AyR3cT@6EjZP?mJ~`v7>AE&V-{ATid>&zDvtEE0T+wFdY;IhDcewQy$N
zznRQFtI_PcBRjT&>9-oJ!NreJ_fy2umYylqp>JNNabtqkf8G#~H`Yn2Hb^C^YNkpi
ztNl^LukgAxR+*}XkP$SO6kmeH8G$^+cqACdl)y5|DpG0j=dStR@7euNQ%&jXj^<mB
z-^!Rf+Vc6fjzGO$Uyn8yf5tq+4B}>K8T%#p3GPBGe+<pY$zF;+6;_|nn#DHI;+EbO
z+t^e5$Yc%LusP{z`Zieu%s1<<&i>hMu!pQhTYcqC=|?rCIQt(J`Ux|SFzGDD3iFt=
znQT5F^*w2_`)znOX08}#zG~wvVH;=0X@kQ1K;%gKLXCI*HF)J0RCdqkRGP_EDp`5o
zcuoBc<@(nDzt#7^hK;=!*Y~QUO?LqAPe9>Tw!qgHp^^VB9e4}ioB;qyrr@h@4T9DI
z5Frq^_#9fZs!fxvv-%twi@MEoachp7Ou_0F_<90WJImCHvx)zaTCf@}q}KZ?VpU&U
zz?sfY;Qau-TVNmjYw-F_HuUPb-u*~HJnD<d^-xz=xxN{8E98)##&T73H$l!{%stD8
zQZwSq>UO+xK~FQkSRLu?Y*_U`rIRaf%9*t8BkV8uy3;cLn~_a9lj@BZ*8h?Ijxq6;
z)V7P8@c9kFzP{iFDl6ZHwtYLSE*VOpt>7(68jLHg+p%Z3d0Kp5(}rHAxn+87tVb5z
zo27Yv3mfz^(5f%W<4A40roUrUe8RUoz&sY*up!tlO$~L>JeQyx<%Q+Ynpetsd1864
zT#opf$YGl2ILfiW%090gnx|6E-K$$C%jJm2)2k}&xtWb454Bbo+Oybhsg!t>s0<8K
z>o+gW%4(LB%dUxw71SJQW5eE9fMWauYH=TX`}r6-NVId7P$0GKKwtZq_z0^qGGcSU
zytGADwWM4#SraSAvH$QMHMk?eN*yB@X~O9hl{#KLuB6hst-HsYXT<$hk6F#BJGE)Q
z&0|(^s!nwp^&MLt%dIpT1F}rB@L8_y0Q<H78MiO7<-kDan0VOgv#6|yu*-&RUW?MI
z=uu=*^Hr;Y?JMcv%rw)1nrQ}ZDj^c=Uf2Sd6Tpp&?QGgD^VHTJCBFLlW<|epT}#W}
zLBZbkC6hi_2S;Ov`f2+=f_2oz{v5Ue-7i6{?gdW*MRR1ZARc0ZSd3To>ej~E_l@)B
zH(m6GweYFrfsTc`?E7o$(zAB1_q@6sKA5@f|GF+6t2gy6uFK9N(G#c(^*%Jino^Z_
z$ec%)iYm%0qVt(fPC7!o_4R4xfO`F$#=tV>fNi3ss(R$S>Rp{+l#~s}*kpYyh%y8}
z#kWB-%<&h}Y%wn$8SIe^f_lERs#iZd$*N2YYX*;}rQk^F#wgQq2hWxoHqY{G$zX*l
zN7C3esiYdw`6bYGoJt%3?JBCh&X458gN!p6s;??2CnP+Fss_}#kj-sYo3sO(Jd^8b
zQ0U!my`rJ#Cd!~$u&E!+O6mT;V9^e<Z~V2T9a+*P?q@x9p@y1X&2oj+kK3%3;8gIe
zRb^51Dl^QBZE=Ok=`<<gZMT4B%Z%H?m-ZVbN!;*;oG%s5tv#bXrpDPlU700fV^<SN
zOYHuDPo7lwGD-K!mF~9H**YzDi0id=S&<Yr%?SH<%-<nmphGk$S_Z%DdR|B3O|(R6
z!Stkoz3`S&)dyOo*J~8MNC6N?rMyVv&q+WAYFg+4D}3_<P|!QIyv0FHAg>>Yf80DA
zx^k;rzV*tP@xhhh&xL0O#%F|t&~Wp>3{qB(c>|69CTpf~z+r7-NMoSU>KO3*99DcQ
z{_Jy~dkSm!Gpiq5yQXh#$Ch@PtbI$z+P*bwA6z{X9ck#?nwQD)TRXQm#QZ^*DZps`
zYy6zE&hM{ta{jab7;6ZaT*2KBq6e`H{X_OutjhAzSwgT#N!&&n{ld%_Un+i#MT$-$
zEB+lR)G)CfXTP%ppF1$C;ntQ9*@uu%f|HO<!uqLOOV{gUl0_;q7E}L3s+b$kzDmAY
z>^?(uIMHHo_a6GWr-qD*$&$0{c95_C%gY0M_YUmaM?d${T4_tKvTB?*RZXofTyDs(
zwR*Mwgf@{zWH*<1^BxbmT1>9?+*AD57Y{IRi{EArw2`HwWUhGcXz}zEnGnDErWm^W
za<U9Nu)o3E^Fe|I+XqKUhGa(HCCkQ%xA?R1x1p)hXkKOuJyD;I8qmT=`gkp!o}9l8
Nd-N*lL7FZS{cok)^9%q0

literal 0
HcmV?d00001

diff --git a/web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZklxdr.ttf b/web/css/fonts/sanspro/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZklxdr.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..4bd30ff9ff17861817d432a3e17bb753e71f833e
GIT binary patch
literal 95872
zcmcG12Ygh;+WwTyX0w|H2_Xr|VN>a0v#E4a>Ai(eLlSC8FoY^1Dk3T(V)r6~B6dVX
zK}1C_B6dVYR6sz)hFt9BBKv>dnb{;DUj4rR{r3Ex^Uj$w<(+rlnKOMEXN-lgB}}rx
zy$Xwp@85cV6UO*<;6SgzgNB7S`JoqMi_S8Zwxidu5&2KO_yFF;M>E!Z^PpiJz2k=5
z@fh5eAe4#aGs|Y}f2VW|V<UnYYjt``)q=@l$j?g{djx)7+cUMYtfIv;?LLHiH)AY&
zDlA-!f~Ufa@LBTInRWBSZtr;~7&^*WSZ-BKdD%A;o_U=ydr!s!*Ul`PKTDouzryVy
zz+GK7v$Ev1*%KI(s~8iTXVuKEyNf-rkg?3YcwNAdHu)A?#e!KS3#6w;KO0g^?+>2)
z7h{f|=XU-6q{EV5u$O%M8eG9Q`Qp(-#{F0oF(It$kBq|&eh0^`dy44c$sM!L?K<~7
z{Q8(cn1XEalfogFvH<XPohb2r%lZ*zg?v2o^7gQGIi$47AYpSeHjmtsC;H_T<_|)w
zZl6z__SuO;-o(xL&Ge4{AZ`J1Yu?#(vP0?w3zHM&<>2jZxgPiX<^8xnARoZ}A^9-w
zkIF}J-y}ETzFBU@eT&?J`&PLX_owC4xNn!+ao-_#;J#Dt#Qk~sJU9`oE06_KKh_`j
z0k{Mkh>NpoR)hO2T!JmcCD^67IJ*uPXV>Er>?yVl=I3y6_B<}Z-p9q+NnD(r!o}G)
zxCG~1FwSFmEbc9M3)sZ*IG9`URxo$v-C*v{yTe?>i*WDFd*eO|+9!A^FU8w3UIz0N
zJ_Y8h`8BxTz;D2PC0_~qd-y%LZ{!<cvyFo*{v1aN`3w97*uTTygZY3+WLzYPBql_v
zK)j;0Xb+o1;t=kiicgtMPLLBIor&^ZCY7wElC@N_mP*!A$yzE|OC@WmWG$7frINK&
zvX)BLQpsBDfP+n@{IvxkZ};$}#>`n;q)^)n7R(14vt<1tHEnNWx$HG#4qz4a;n<m%
zWg7cXm>8SN>Tu0somod*vspQ-Wz+Cn2Xh)Qja7lxz;+7W4`Rj0`C)jT1DkS`reUlM
zc|V&C#&Zqp!1Cd~3~y$zJ_w@>Pt));5-w|1Xf<%{X6Xpi!#Y8ix`2ZkxGcxLn$4|$
zmj*ZFq6?deP-ehCxta_*A8;cbY4DxKvT@IXyX^D0a@X_aHk`Q|appdcx5m8Wu|l{T
zgjoN68oMy^H3<HS&I`A32>+R%hg5nzD#dQdkWxoaxiIA+_iETAmF8h=0c2PQ^Gr}m
zMYWP!E%J+Us7$@9z?;?=<m)`tEb}0(vii`{l+T&S(>AO<e9S{W)xnpW4Mq5~fm-B7
zCEUA_=ae^fFbzZqGhyp?M>m#`I|gAhaNdCpVOOyy*najUJIB*_F(1Zj`3k;<zs66C
zmZDHB6_1Fo#P2dy=F3avgYp%5#1>)eXIo&~Z2KZ0EMREB;(%)dZVA{F@UFdyy_0>K
zeZBod`)`4{ft7(P10M`L;&3{$9sM08jta*t$0Ema$1RR^jz=Ba9lIU-9ETiVIDQCX
zLE%AhL9K%_gL(!H4q6fPYS8;m<_va5JBK?bI;))XolBjooNJs9I=4D^Ip1&|bRKn{
za{l77xx!s>uGX$hS5H@eSBa~_HOsZgwcK@!YlG`Rup>A!xN~rE@X+A#!PA51245Mx
zGWf3GjlpMv&xSZcB15``^bQ#oGCpKlNL|R~A=ic68nQ0rk&t&n4uyOk@_mRe)D_x1
zG%2)8Xs^&=p%X%DLN5)yE%e^dO`$tN_k`{bJrep==ucrHEHo@OEH%s<);+9m*vPO+
zVbx&^!<L1u4qF@caM;sfFNN(7I}#orJ~8};@VCQ14*xv-`*2?qSCe5)CN!DRWL}f2
zn%vmrA59);vaQKKo4noR<0hXs`M!y-sjF%8rX!k`HJ#aXLDQ?7-qiH&rq4EgrRlp(
zKWX}P)1M<`L|8<Nh*l995j`UMMU09lkEn^bG~$Vf=OSK>ct7G;#5a-Yk=-KuM2?6o
zi<}v`AoA+Sn<DRyd?@m%$QL8ujQlY2v&e5Fe{UAlEUVerW;Zo^rP(*levJx<Y7!M6
z)g~${Dlck4)aa<ns7s<Qi@G-I)~NMSPeeTz^=j1nQOBabZQi5#4bAUt{#&#?x@q+A
z=!wx)(etC1Mz4xq6a8TH7tue&u$bVO0WqUvDq}8*xh&?|m|J7k$2=DEOw7wM@5CIA
z`7-9mSRUIXwk&o_?DH*bEy7#GwP@WUvqjGqcec2{#S<-_Yw>D}_gfrm@l9M(Tv}YG
zxWc$WaiwvUakJtsjawFXQ{0-k2jaHIy%6_$+y`-=#+{81jL(YCi|-#lD!wv)R{Z+-
z$Ks!fe>wi0_`~sE#{Xz>E5wSiQmk~Vo7Kk}VU<}ktp(QA)=k#k)<f1)){EAg)`!-Y
z){iYSTh3{@&mG}z>2BxFaTmA;xo>yh=YHJ%tb31pzx#;$OZP7cG9fIXMMA5DjD#Ku
z{SrnctWP+Qa6I93!f%Q8#HNW>;)uku#F>c;60c6YDe>;ahZ3Jkd@=FO#19icOZ+zR
z_oSetW=VsR#w1Ninw@lc()CGiB!?!)CZ{HQle;JPO&*y%DY-g%Ve+!%)yZp<A5MNc
z`K9Eyl0Qm5nUa<=C1qX8^C_>TI#LIw-jaH-ReY<yt?p=bxOI5zQLV3U{bd_>n@id}
z*5>QBZQ2fQdtci}+8${a)2^u9;&!jJJJRmU_N;wM`}FqR+Sjzdx&7Yu2RlS{7}a58
zhfmV1v|ed-X*<$RcWm3Sw&Rl>-|zUdr=w?z=W5Txp10GJ(ubrkPk-7Q<jwQW_de>~
zo53<VWc15eknv2$7n$zNUYRp9@5$Vk`F&PY)`+Y-vNmLG&iXmKH2cQvec3<d1m_gy
ztj~ET=d0W%xkGa2<vy7EO(%P&k)76bdZW|P&Vil7Iydj!vU97>Jv#U5JgD>3&dWNl
z?!311rq261f7hi=m$ELGbh)g{JzaKnd85n0F2}lj)5X`dN!R$UZMtT6E$BM9>$tAd
zyUy!+dDrD#*LU62bz9f{UC(q2?Uv9jv)g6e_H=u{+wpE^y4$)ZcJJD~qWkmR4|o5v
z`;R?%kB}ZQJxY5_@3FAQbv^Ftv9-rrJwEAirYGwe-m|Lb^Lehk&UrWIeUu-Se@*`O
z{1@|I%YQfjQ2uB6r}KX<U<E-1O$%BSBo}lj$S&wn(7RwrL1{sGK~=$=g2e^b6s#(^
zv*59UX9{)~yjgIdkQX*9>|9t|cvIo7!e5HQi%N@bE_%G^^`c`%zZct!!-}Je6N=jw
zXB2lWE-D^aJgRtN@wDRF;!BIKD!#t>`Qq<;S-pn!TGs2aUZ;D<^v>yB(R*?4^}Rpo
z6WGVor=riYJ}>k+)i<(l+rESQ&gy$>--r9|>-%ZnGyNj^4d{18zn%R)>))>bwEk=R
zzd0a$K<@!d2Yfg%c3}CyTLvB)lrX4b&^?2`9-K0`WbpFATL!;1gbxWH5<SE{Bz;J?
zAp?g@7&2?f6+>1Jxo^nUAukU(Fy!+gzYGl;8auSz(5^!V3>`mo_Ryt6?-+Xj(C3GK
zHT3(T=Y~ZNYcs5P*rZ{LhOHj9W!QmX$A*17yv^_h!#527Y()Hs+z}-sZXEIOh@B(O
zjw~8EZseSiD@JY@`NYT<M+J{c9+fq!|EO`J=8U>#)IFn~81>qy<0UaAol2@oZYWt(
z@?gofk{3$$mb_E)QOTzzr%HYtEk-*>Hys^2I&pNn(V3&WjV>NNXmrWwveDB=&o0d>
zEhrsQI-zuC>5|f$OShLEF8#Xn*D-ud(3s>g-Ny_cGkwgBW44ZYcg(kAn~&`|cEs4}
zV=o)KYV7@EcZ_|1?CEjA<JyetGH$@QapUHWTRCpsxGm#e9d}^dC*!^t_wD$Q@$JTE
zj2}LJ&iE_G-!lI0@f*iKK7RZ77ssC*@0-wMLh^)>6J|}AKViv)<rB6}cz?q86V6U-
zGjYVkD<(cR@!PWavc6@D$~KklEjwOzc2d-&9+Rd`x@*$jNne!*m#38vF2AyTYxy@7
z$rb%@?X5Ub8Bv*A+3$jDRAo8(85>wELvKiUeb0*u7Av~5Tu}=e4cLGxJm0}$c{cEi
z?<Y|WI{|zLtN_;H{cuCce=J(Wacr<y$@+?(Y@lq-ibYS~Ara07iKf2aL>h||9_B#1
zI##5zIQ|pDEn$hGweJ_Sqa8dFi1IBIZcvLQ%3|gaULX$cJ-!p<pRdBZ&Ay-b64q9<
zW^Q3;UBy|}M+o0X!tVQm?**Tfp8rG0;l4wDh`ET5((acZ$*?g<o{g~-=_UF8H{s7K
z%CG+f<R#^&!gll-C|~~)zVCRp?}$btJs@51>jUY;MdABe=?dwKUuQ^f{tTo~|KITa
zAbbCfa7b_c`F1f%y8LI@1iz%`8vQ{D^qdOxRr*h5;D3t;;rC)N;ZeD23{}3UjQts?
z>|F@b!-+`8gDfB82C-rmK;`rQ5@%Rb;Rnh))dl|gfa-+C5QX3cbwoYdoBD$4jQ<w=
zbr01)e+J_70;qb5>Z(5l%1fm0BMsxu)N53?`9XCY#(NU^Ucf@#WnmOY!MBG`##jRC
zKR;AGNOj?#K$f!U&^^-2|6edkbyMP>z#l&9V^tTg^6k<T>0ISIXs}k*(Ns@g1Y$1S
zqW(5$4VrAs!ceEG+o^v4-=Zh{UJQ-Hqwhvz;QK+}kUs-`TP}pKn5Di=$QSkPYKuIw
zu{4p*LY02^hMZ3LegGa29iYzu^jG429KKx+IbS_Ti+wDT?_o{(9^X0WM=US)trodj
zFZs{N3p<NO*>u<IVlLtvj&N_pcn|5(Lf;+y5OeW|=^0@x!~44sem-+6sBfw7I;B4r
z-o5VoLFBSbr7!e7K7sJxL%gee?=`|Xz8L8V)<9mKpfnP1$fqcjQThf)iFo);MBQii
z9TjJN-x1~SvNZk*<n^7B*-J>v3BH5n16}zJ-)YcTzSH+R#yrzhTVo}@_ZxsssFxlE
zJpoGJ2`6MiWr@;?G{P=aI9M_eE*yx<;X4hp9rP@y7bpeX0F~Qhz8vxWfN$6jzOPW9
zhmx7x@vl%{8+Z5yM&tW-(of|9)|2=G!ue~g1YmeK7j@BG(6PXDn8yOsVYY+Xc{FPc
z#POq`M?rftH{XYJ*jQq~I+p0@iS#)1GyL>LyC;<&^}PYN14UQg0X%2&Qpl*p_Y3e9
z9|@jHA;&`BPVQhMc_ACF=x)S+7XHtYo*~VPFmAk$jYOGBlU1xl`~=Ft^FcNgVMYOy
zfnbDrmTy7WTM%{$8wf1*$0hECE&@pBaIpq$w$;$-e?XT1WL`NJd2E9mmS8M#3A=-1
zT##3>?x5L<R<Xe_FXYv%80c;&nTxrTO$E;=+o%_)jL$;7R^@vQ^d&{Be23uI&Z~X<
zf!Bby>fuCwJA9kr&k2l#pI_kTEa(r4Rv|BEv0TJsgP*gAD;4gKv;Dqvz#;hQ3M_}4
zw%{`jG*!_m<n1ivTQ&HvhP@NAa<E8@PkDe)ehFkd9cirvoeQ^ZVZIXb8qE5$uOQP}
zmd@w1o@@uO({~JEk$EV}dLG#;zjKKfm=jq?ZUgVNYyfnr9Brf-d?9NAb286lS;&J0
zJQVp6%6hXyNb7inKUldPh;YV2U!d1$hiKg<y(bjo`6y_%wntefcLLvd2g;%LlPV-@
zqTQe^<Usz$;awcQ^>MyKY?80FAF@C5+V&!!BUy#)$|g#SCCgmUeAc#}=0m3zvsBp`
z_MOdpZH`sX9yXHRA)Lh&9^&&DbSKKaXwPW7v<s*Qx>acGs7w<)Xv3z-XwbH3^B1y~
z{5sze)a4#AANsx*b)pmQo<?~%=sPDdiYo>qt%Ffl4AfLkW?g~SKnG){=Zk^dw3d)5
z0p;*p5y^r@Eb=ZJWhoW9k<Av7nQg@==vL%O9D4)!8CVHC$ZmsvcvvAj!A1e?*=@du
zVZQ=c2kZp40SAD$L>y<J#lS?-9b>1=cLu;56Kesqgn0{a0N4!d1dakfHKHHG{3F~Z
z1KnZX4IF_v3FrdzZ=i0_?|@%`Hvo#`8sIu$4{#iAXq>+%%qxJ!FlPXRVV(<M&doO;
zs5V#%+8QVUs(|SRWKZrWj8dRIKs=-Z;Xq#?2UrV?0fqq4h$k4-q)+j%9nYH>JGTo!
zT4;{Vck}{Ec9>gJ?}#1*$ZZKQ-#q*6iDDkn_kANuaw9o@3j7S503Qsqb?t#vAQE~M
z4h)C>F^q6C)Cl^A)G@?BKj>v5>e)ohNipU`U5FW`!s7nJS#nibT{R13Hge_jF*{sH
z%<l!VFxCXRW6v8rxHlV|H@vr-_3lIFo&)nnx>@ePVFTREGpye*8lNYh9P_Q3l9cG#
zWvJ6o%={>O@Tp<~TZq?=*uz=V^75Ip*uDB*QC%~Wt<m?%wPodOwZ2zPn^MMBn0rlm
z6<db6)GD?_-5Z-1Dw~DXb7t1EI(?r7!m9NhNmbn9PP0)QsinJJ-ARfZJVD5K>!Liz
zGtvO5pb)^;22<0Z?e^XFihy0RRxB2i#6XeBf55!J(>#~E*=hD3W;s&fp8TR7gw}`2
zSH(l(VaymjDjpM?#N%SKctUIuPl~PLDbxu97bhQLo7k;Q#xH&2OZj`Et!O9O%Q9Im
zE9De9P0o-rWsST<&X#lJJh=cf5SPi7a+SOXtr5<m5oZc!5zp}NF{d|4R>;Y6s+=yX
zWVM_nYh|6BE9c9Fa*@12-YD0~`;-n4w>;puikUN;Xv>7WvEdEEBo`7o7K*QUDtPWF
zFsH~8FsCS40%l++4GDlwIZ4$?DHCY|B}&Oyva$GL1;f2y7DD1ITe)V?ICA-rKwU!N
z$XDTpGt8B;rsugJ36b^)xP2Oib7(h&D!0++xg}mG&p2ed%Y>j(2tID7cVZgu{ygfB
zZ`8$d2)RSK)W~HbTy7KF#WP}ucvkEb&xz;73u2e}r`RoC6fYr0snaX+MFDe)a#4Zw
zHpB#ph&F=ei3PrIuhhSRv^Z&vnlUzfkpw9f0hp(*#w>DI{+yDcjV;4>-L2A1DWIHb
z3ow)>l3HU)gyWebhbisxsI3!F>!z|+$h#2bwkh89H}WC3P5+LTDW9Fm^?5%3hOQyi
zR3=)$Up%f@aMTh{3Ap0GSrY7sI}3X8CQ|q|mu!234vJ8;zt8afd@p|(vvJjYFlOdj
z^C<QU%H2M;2Vb_e>=w+_FTtE&70MynjQGkCr#Aj6B>$;0VQySbQYOry8xv;SjR~{y
z#)SELZKAn+W5R5|F<~WuF=4HMF<~76Op--W89{EL1Yss#qLfWibP`Gw@q$@<^r8Ij
zZcy%48h1qf?#j+{H%hrHG46<xJItL!cd&Xu-avJ`q`7t-KUO&){_e&-QGd8t1<)w|
z80D^oaYvNgnNYBr0ii$wDiw-0eyh@mH4yqO(Z+ADQ+}^EZ;8@dNPt#WG;qqQmAhHS
z9nr?2^iyvKn72fAC>ZHNd2pbX2}g?Kph<3g=aQj6ZBZL}sMJ6go@1v}*%^hE6VLJE
z4cf$3BaKthB7ywS21<qRSgPIRLx^v!d=&TjSZg9scaqIytU*EUVhxIr6Hz9Up{3C%
z0l`>VLhg6qUaQQLvHFBuZpZz6ms^w@(xED>Q=u?7;XVoLSI8y4zo@ILBzhMpACmP%
z3{+QA8K=4dD_CHrGEO#;SmCjXVJ(cZqgtZA)>ketwyA2^<;q1E?p(>9>I(|r#=BxY
zgSWmG(X|GJMxk?~(dFzRp3WDTI4^Wl1(!B9k!{2r`CQ|sFYKsR(c#4Y#TRI?yj)%>
zuTo#4JFwbktz1Vdeo!a%z|8z`HU?je$(Yr@j4fu@vX$&ctbV$g-HJN=A8Z}Fm)*x6
zg<Ss0cBAya#$HFQ@eX=K@8T<bf_=??X1`<pK7=RmMBawC<(XJ#)0g+-{rN~fmXG7(
zc{#7(llgRB!!O~rd=YAuoA@pKHhvfX2fv%I=lAma_y&GIe~RzqukyFiYt_=vY?MmD
z0^|~T1+r|ZT!EatN#4#}@=m!1wduWBQxgR}?TH$#J4DhG^-&Nj#+rvvweF}XR$L5b
z5oo6mWzE<KRtneSu`(eJ>r|?cQ?pQ$wMAQQA=XhW!j*}-?P{zPxrQxA+xdES1M9|a
zf+qK5ce1-!K3l`?K@970^=2E`BZ%iQtYa9$o<u)jB<j*<Q71mnUV>C#VXtBp#2dIO
z*xRT*E7<||DPsK$*Btga`i*l@+J8dKzhE`nQf}kH>{=emo3hnBk~e3!s})WE;PDvA
zS;O7j&DQcH-kROR+w%-|KhNTw*<)DURLGu0E!~Ih-~;&x_B=1)qp=DI6H;t1pUBJD
zt9&Y-#$M+$(6fD$&qCky9bU&TW&8PM{0jCFzX~gcKH<yx_3Ri{J*{G&@zq#6_65J4
z-^sqhii|bv8?1v`$4>JH_*QlX?Xahj=iB+S%!hSQd$~m0>@6OGJRrSB8%KP^rw88~
zye9az;8nrb1uqR=96Ud`Hn=KyGFC*43?7KJ5#58cgVTajgRS7G;P7B)u+4SO^^5B}
z*D2RY*HPC;uJ>GTx%RqVa_w|I?b_^m80#w5y6$kTcCBzNb1iYr$9jvYu8CNAG1S%9
zRp{#O%5`~N?OmxZw=32a=?Zl@T*7(Q`IGaE^DE~G=Mk*j*pKxad$5XQ2i9_I!itW2
zv99AbtnOIuywbVIIoCPMIo(;|9Pcb~4t4f-7CU=7J3BL-Y0lQpL}#2c${Fr-I&DE`
zgMJ7)6?7u#P|$&(w}SQty%e-F=;@%%K@SIQ2wEF-N6>1lB3Tx+IB0%QZBSLv<e-T`
zr9s1k1_t#G$`9%qlpW*=Y8#XsWCcYBH4O?5vIjB8Z;l@vryVC9M;r$nZ#nilUUKYo
zJnh)*c-XPQvDR^iW3^+2W0_-#W1*wYQSF%OnB*Ai80i@7=<6tSba&)BypHycREOIU
z>xguOIvfrWcsB5-z|(;z1CInA2z)DWPvG-`PX}%a+!(kn@UFmHur_9S;FW=k0_O(K
z3Y;ET5jZ}uByeb8|G?tFo`IbMGXv8CTL&fv#sx+Nh6g$Vnf(|08T%LZ<Mxm2@7dq7
z@3p^V-)Vo^zS;h;eS>|i{SNzT`wIIq`x5&?d!4=7KGi<SKGr_cKG@#ZUTE)b&$WB)
z?d_>{w>{S0)E;cN+gZSG0Y3zs4)`MAc)+260|EO2UJKYA@O;4bfGq)!25byi7jPF=
z^{fn7hV?yj1F8ci2TTko!D^rW0mT7513Cv}2BZbF4oD1$3y2B`4{!ts+gaOBwllV`
zY$t3-YzJ-oZEx82*ml`=*tXg>*&ejrYg=Qx&9=&Roo%UYv2DJs);8TX$yRC`YU^(+
zw)M1iwq@GVY^`mHwm4gqE!^g`+2lF-i~LTWk|*U+`H_52z9sj{m*~sGQc%mF2diq9
zW~ye1LcKB;->LCf@05hvWFdOZi%^$#SM^99>XB<%FVrJ9!ynbE!%&atnqnubMNRQ0
z>fX0en_h$3;WN}WpQBd28}-6Db}wp#Xtq_=0<WrC;5F0&ZP^<r|6SMzDEa-_=P2_d
z*-xs>`%vb`V?`v&JP$y<JDCTf<kxZ+O8ZhCg%Z93>mpa8)@_gSd_P*d51=d;pd|0a
z>Z=#{K8!qJ)h6mzx?ijAXg9z-U)?9+o+&4*d#$>Yn@mY=GVx8Ndxg4dmlI+3DtoW8
z_e!$&O4#$~$jrA<EVv^~+z}@3^mdza=^-2Dfg6eYEWFW_+I93y?LeYal`G=WBj>7n
zow`@4yM9aDc@*y+#fwK0FCL1GbyPfdRO#-h(%q51GO$Ox5qC;oM<s(a^)^k}q$xLP
z%1xSiOQ}zj6mkcICUL)3aR;jGD5MU`Z3pGMgL2!B!s9oPnO{RLaVLpfqa<>TlE^i9
zD>3#qRrzQutJG5kT$3&OpN7^NO0pt*;-#&UV_U^TTNQg-B`1WY-jZzED%rq?GHYKX
zn>I=+ZIs_OD&1`q=WUexHY&6>N{VeH`D(3PwpK1%E1OnI60IPKX?PE+?j+w<%6BVS
z4s)uCCsn;or5N~o#0xJ)N`+`EDePo=3mejtQu2#CQh+;BfIG>o)cAsXm?;HG@)mU`
ztxi(mC&@~f6IBWll?)OUCy6R$iHi3`iWhE39*L4-Pk_B-Zk+?XE9~e==KxX40iu)x
zL@5V|l3%xq%dPUkt$1*&SllWWgsI$6KDZSp@Tbh$FQuZTl21$Jx23F6Hl*>E3dd5u
zEal6R<jYce8LxcBlY1VgWEDqmc?|B7#i1ok`a_hsCraECCGLr8cRH1ECY40BJDo~;
zra0qN`r;Iiaf+ijNhJ~Cs5_-HPL;JdB@g&hHrg+xvW4Qeg$kjCN@WYVK-rUy#L6k^
zK3m;Mk7AXZSb2#uQ?ABJ?GpVu7Om`~Rc=Qs`)En_r<D1mishsV^Q5FOPpY>k)!Qg#
z6Q$%6g>j%VhTa+|wbO}~8%jDIrFe{z^OSjxy3bU1{g$|kQt?D7UZUWeY>1a;D#gtd
zFU^$xHIplqJ>_vT6>_9{8>!M7soX>=H<9Kor8`oE8G+Cwi!fyk6mKGwj|k;ELivbL
zZks5Z=agC1!)%-4ahpo{HpSgGyp=2*<6*>cxSXk;DwR~iX{5|N&o-2#ME2S>$uwN?
z5U%14R}w;K%ATYWu404_W!An(Dq%`0Vajiq;xkO8B22jtQ=x?^4#QMjp~_{bav7>@
zLX;#zj3hu2YKRIWMEMR;u7XuO!Rl?Wdh1fWIFVApu2XKD>a9~r#i{%{RSKL+yPS$6
zr}0H8a4NonRIL-F{06DF4&~CJ{5n)P4i%$AaqUnsI*dySClL0M*^TV0!3#ZU*%Kw%
z6D8RbCD{`tzjhUuUGZ#JJlIt%b`=Z4RBk8-?1~fkQ)ca#av(rSCP4WOP<{iHOPey=
zjG27dRE##Iky81R%FRF(%Ru$EAMO(UwwVY|Q{tYUiF=~NJyGpWr&1s_+MP}%J!^M5
zl|rRYC?194NJuJu2uIy1l|to`Q1XC(WmB&1lu9*g;(H5y^o#tklZSyT^!e3@S!=9+
zZ_C<Y9HRr)u+!*AI{amzznFzKVGhg1-h$5PF?L0Nu@Ec#i_z-qjox8jwFhPZ#>uE3
zIs~mn>UEDmUvU(AilfmVr5^Y=^detHk8u;5#0AFW%F*@<;C8g&96X3S(S{2~FFTZn
z@o?URH{}s*75a$H(5h>WHev<)oyVXz7K^rG9JLgAOZ3z$(f@O^*Hqs;i6`?Eo{IKg
zYt>J0hc;jbj45>F9*jPC*)Kc;efKP$&2uoy-ideST`+p_Hu|n_@^0)cjB)+Od+?q-
zkLRPsScqPJG4F-lG<{5Oe*oH{gV=G57Y^Y=(V85Np6FzZ0br*MdZX{6_xlceoK3-4
z`xrAWFhR9bC#ms)O7yTdqrEzXda4*Jn8B;~OpHF(ptnk+2D8zEox|tydF%wA&lm88
z{8Ef0T*epk%lQ(11;3JCh1T<X?0xiPr(ze+GJXwOyVvsT`1NS>-hejmjeHfx9ni1E
z*u$+DeYl<9!S7UK5Np`i{BHIvUrT*l8joNn^@s%f68+wdXd^#}T~pJrvt%Z#;tydZ
zMKynfKgu8DoA~2=Gk=0_;ZO3d7{7QLJA}6LXRwB09e);WYU~ukm}Cw5%DXV!^CEwV
z|C8_LFLTZ=K|i4u>pEuhSI~cc75(Se`5XLA^rA8Tfn7!W`Mdl*{ysmzKi~)1ulz&)
z5&xJU;)nSW{s}+IkMZLeL8!yJgHPE!eu96-Px8<C7yL{975W8V^HcmAewzOaBe~!5
z@A&taJ^7LU#6IOe^I!O{{5Sq@ewNMWzw>k4ha$q!XIX$fSeLOyLI^2rB0$(hpm2yF
z;S??rjFIg1><JMn!bG@eBASW_5h<F9DA8O*ix?3rT8KCiFD%iLeJ0!@K_p_{;#!d`
zQfNOEc0;wH`4x6KdPPgH`r-=F0VDVwg-4_dugDOYB1>e89FZ$JiO!;n=qkF2?xKh2
zDe`EHAA3QH*eOxWc8Ff0x9B7Kihk^K(O(P@12KkjS_~3{#Sk%63=_k}2r*KO5+!1^
zC>3MGSTRnF7Zb!pQHFUW%oK=9F<DFzQ^hnfUCa<wVy37THDZ>yMAVAeqE5^abHzL{
zUn~#{#ie4AxC}E;my0Fh3UQ^l3VTwn7R$snV!5~$d-JXrE5r?ArMOY75;uv};%0G+
zxK-RHZWnimJH=h%A7YKTTdWoLh;?GUxL4dKHi-MhM)3ev*9EZ%j2$+^SX6Ts&0;W;
z*aEW^7nvbpO;{Ml>@AEm*)SHDh!Hs_3t&%Uhul`|liST+Mj!G8_7KJ?!`T-0Wc{4i
zKhdMir<oKr&(<B|SK~2`*pyAcxZf8ngk8yA!Ys$~Kg_dWjz!J2ye#&JSHxa+y?7O4
zyeq_O;&t%`dboD+rg%%dE%u3b#D4Lvcu%}94u}uLLGhvZNPLW4Z->PZ@rgJpj)~*g
z{dPipCQgda#TVjB?C1GfoD$!N)8b#^jQCc3C%zXyh#$pI;%D)T_*MKS{w>am-^DrM
zlT30cB<*+%kaqNl*UCWYkU`QZT{2jP$WR$3!(|iMR7S{1*-S>s<}zBw$XMAz#>seT
z$(GVB6J(-HlF2efreeR*b1V>Jd$-9}Y^iK5+sL-Eoop{V$TZnedStrv$_$w)vt+i+
zVLN56?8F=x_56|jz<!dQWf$31c9Y#@57|@Z$$VKL3uTckmc3+eNu!PbVrSTP*_XN1
zEYL0J?cdDuFrHe*9>7T9KQM-PJG%qphxcO^<sKSMl>KCXIY17SgXCa2L=Kh1<ZwAc
zj+CQhi5x9U<rq0uj+5iDdvGFq2J=RfWI5W}m1sQ|V5Hz6JBGQ+sc0cgmowOh7`y$5
zeasHCPuL-LgdIieeJ183Yve4nS8FkoS%<mIxtPtIkNM1nn9*E>IZYZJULvnhBg9MP
z)pD7<MlMII={kA6T!As;m6%ysh4I$a@@9F9yj9*NZ<lvq<n=E354lE-Cf_45o{Ul0
z`{V}fY}|-_jSteUM)?SKH9m$tjgMnT;}h7=_#}2SK83xE+pv@I8SG<x7P}aq!yd*L
z<SzLlMpynRcgvUM9_;hlD_@nb$=Br@@=c7qye;?1cjSKgF2-Trmj~nr@*vyAUJT5e
zSyo<KQ*F<iR9iW>GH_1yG*5a#A<^`rJddGXLo*G{HZ<4JJVOf%Ez&gK_|G@~^Ns)f
z?7+O5DK*uVGlC3Ft8l59J(->iPdfSbq!+8uJn2Qsx5t~Ap+ohU&^+0$g7Rs#<#T3E
zuBx2xEU2idD=ROrtgf>cmX{$(#<k(iV|eov;dO0IS)IK|yDBmQC{hA&7S#u1(qPh<
zZ^Fqp;pCe%7ML^^7_JIT8Vj-mi%c2~^`|jC*Pq7pqI4t4bQK!XoayS-C{4Z2W5$#2
z_1b$iN}JcCq~^)YL5NB^p7c%`uHFqH=rni@Pu@IR?@48~_C9sfswyf2`{<OD8{~Ph
zc3WW5TaXvnNAs_9##`j)8f+A}`ko($Cq2WYB*VxdBh%i$tb9&grM-VW$8eQz>yI?)
zsOr6#C^L+RGmL06jc7By_JJxW&1rG2ePE*?GqZGPnI@5$hLOzNz(G2JA%mvQsh(0+
zJ7;E9*&G$OC%sT9S$a`{$<6{3XQ7F+&?KYKgj#4qEmXXE(ld?wEN{S|sWr7m*$Pbx
z3Qeem##NCC)u=K`mKG{Xm{IriqO5HDP%W^b^{Ioci7(5<pJigmGBIQo*@r1#u3;DE
zNS2D+<4rf>%{EMAo1}FrvJY<*Q??4(ldfOGn~5pg#FVXrOV7@>kI?!v!jzm5s^kQW
zsGU|lC1k`!WNlQlP~{Y4pQAIfu#=(rItPo4tc$V(Ml{H@$gp2z_$e~{6dBnTdjdx^
zR@59X$<#h-N^RNPO8Y1+oKX$J2^v)~t+KXq_O#jd(aMc$bi+%{NUlF<!%(piJ~XdX
zh370iuVAJZb@Izp`S7IYs?r2CF+xSDC^OP3Yh2Nqi1Lg!<|#=*J&aE0DM{g3Nea|R
zD$id*n?jp!{O240`Nn^KPGFg-gbejpLY^$Y=AqJ2p`oHR`IKuEMOP{5MV=g2d4q_Y
z<@IT|S2WTekKxT@c=Ht7EA{J2lk!Sk!&cV&*V4{6iOV+u<eLEU{WX%msG7tTn8X$2
z1Xh~F8R}15dMAJ4P{SG#rkflo&T>s@l$a^!F@vft!#<@^qP*$4hRs$rtZQn6PtCj6
z@Y2a>h&SIhm1@{&x`a&ADJQp3dn48Yliq^-z-f&Y*IVr88f+B0rk@`d>Q0lA3?qk(
ztl$|_YAY+NtIDb?rj^^PbnQ{4*tb<7VLILnQ()@-oA@(~yfciPGmV@xGwjtWDDAzt
zlfAlLBG71)()w!GaFyA~Rb58sfYjE^npzoHqf;JIbCK%6lofv~!~f;+SILDYeY(0x
zFVfWosNx$O7=E)d0%{tni9(Z_LZdx}##NC?m0!7w@=ev7@0WIZQC5x}OZf1u(kZ6L
z`V`}>kyn<9A<M*&RcxQFe7R;{m{nO?*}Un-Yqnt`JHuYrDCBGvBC1@KVpO>%hHMi<
zwn;-LC1beDvCq+pHOCaGIlAhdqpIFH7m>B8kM!pYI%qy8`a^|he`RX)xF{!JPJ>K~
z4EsffuOh=&k>RTt$ucF-P=5)`L3;$1@H|}!&(mU>*C3{#dG(d>0$m9&Xn0AvkY1##
z(Db5W!&<RXH0a|(6`ph9d1V)suu+^&$_Erhi`T0a9|g#WIZG8pk2gyxBB-*@%h9za
zo|XT+d~J_srShOU8@%S5?9EcS>hX5cis{YM!uD!~fqPx~d$r==SqU3d)%u`DOZ11?
z<JDRMYWVW2MYc|lH{0-$ZTRS9!pqi~>NQ_*Z?@s5lgciHXXK#2<aqYm8$LSu`7kuc
z$S237FURncW8|0PPp6^ThUOSPa}1w3hR+<sUyk7`$H*ne@Reiu$ua!s?~liuYvRu}
z@#mWOb4`4?CS3iMgnJWyt_eTagr95VlxyPApLe)7>Fs3F+sU7wD!%kWUAZHFO?*bL
zy!vbH@#bm1(sk1xO=!bkr(8LC!sGy8!ZdZqywHR?WvUBOpMuQ1v@%(iRu*JF0BQ4;
zy*E48Z|YPC)56NynlxGu>_A^h8|vn18)w~ARQ<{>XmZV*T4S0v*SMQKZN9Q{&PK1U
zS{o~;O_^G!9ac{>0a97>7U`BZXufmuv?+6HD=W%oPgSox=_*svrc#*$s)Xi6Wu)Kh
zuZtIb5dEB~G6ByjbKqVH-J6lFG6B^8ti#LD-(_!3kq$4XNQYD8Rl@Zad6iH>RVILH
ze$w@K-J9<9*yp4dr)TGBlCOm}d(N!cN@&VJLL-9_8X2|Fw26eK+>y|fJ1sP2)Iw7Z
zmC%%FR@I!@+U3k?)qZ2;C3DKElx^s&vRZtWD<{{f$1wF+tE8{It9+e3XOf>q7&MEM
z8d#iE&mx&Li*Tn|ggZZrF#1`9L&G9WhDE&gvq&xti<4%b$Ks^f=d%d!ibY!9uB508
z#3C7t6v?Qis7=J8az`vGcbY|I)GR88ibXOtVu2nTvp~<TS(UZZYASS4<ux;BmMNp=
zj26r*&Xj>TBZJ|LjG8lTBF>aM;!L^IoGGK`OgU7Xk*N`9^w^j)diHZhW~b(ijP^2>
z+xAJClxtF<iPkXtWc@Tnlc}0a(`33PGc?hfWS^;@sx{GSY@el{YBkZCXxF-CpQA13
zYBEm~t=9Gh`e~seR9rpY0#oPd#;M1v8)2ZPE-vx}D|cC)v|p9RGF#D{+8Px=dM9s4
zc}-PK^-NSzb!D{+Y*o{0%XC$cmu;U_IUBa-v6HQ$rh1Bg&^;EfM-L5w>f-Iu-(WnO
zYD5pacs+Th`pGxditZ$Mz3Exb*;S~l(rEhyX++)BX|)wW&<JIitzt{pUvxOul}x(+
zlH*y2maf0pcvfEyP)`toQmQdESk<)JJljPj(U^mk7MTYVkCG<*>&h!#f04kYPEC4x
zMo{JKI`j(aDl4=Pe0$1jYis7snPr~6LF&1pW}X^TKqEqZozQsDyl3g|gEt3p)YVQa
zn__%s>AoKt8^#^_e(HUN3CBn*OAlBfJk4u%x(+`(T|eif>k2npw<b`5>$G@u>j}^1
zE3b3N<JALUpyq3;2aupy=4*_BB&})YYph3H5WoH^XLvm7+XtFfu3VzwXl&B!ZM??D
zTW^zLY%=O?GL21Uy-k*}$*Q->Ha6MyHaW&7r`{&l*yPsRbTT%b>TU9jO<uiCzOl)#
zw<$0-1@$(?#-`YBlWtO)UZ2u*-KNOUx!}prgEydBni+aj2G3fW=Cg`t-L}av1BvFd
zip<k(n+*LK#j|e9WSF*1hF56|?2R0}^>XkUIe6>k;59sWb&h6uO%8f>U6J9{8jz7;
z;>^%>OGbu?GsF1TtqmxYNrP@e;Mt@h)8uw$eQxWaUr&Y};{(+?n2~Mdmz|zgrn+?*
z9yPccLK<hxY2}UHcpANdzBPK2(a4<H$Q87y(VK!sZ;-F%4GM)P-Mmre^WOO5q&E$5
z(o?5KexO^8Ld$6M1{!YOWH*XOna_LUkB8ng#6wU1c$E1(KmK^=O+!4yo6!s1*+#QX
z*OW$Yycu4Vciwc<Tr<PZUXRB#13fCQ@vLi9k0;+bdsbO_rK+b@Rp-&_f`gQbY1M!Y
zz>4+wQ^uT(C#=oKv&2jt?a8EFZY+K;-5C=LadR8M9rooY2%MRU**yh8`-PG;#C4#_
z8sbaP6b(s!Q#EjU01i*pz}zUKU4vMyz(hG{TMaQ2w4H{G0&TA$3P8y}AVz_vX^4E#
zjvCm>#jxIiVTA+3X#))F9Mry2Q3%>qL&kx2(~z|Lh}Pl*G9I*thUf#@Q$t(}ng^5u
z0>EBSf~W)?t0889j?)m6LC0%IlGy|eF%i^24uH7~AQ=-smuiS9po=ubbkNH*#8lA5
z8j|F_&VYli*ATry@6{0BfZnGez5?B#A-({;UqgHix=}+^fj*!iW`RDaAxX{;X^1O9
zAJz~rgFd1mMu0x5AyYsf(@=S|31&bn1$|sYV$UnvtRX%JeL_RJLAL-;!u<`PTQ%fB
zP&$tmkgY+n*N-4B0o|q{NZ#8uB;~_18e#?L4h^vf^jQrt5_Bi<Ji?TqFKCFqpu2$G
zKsG?>By<DFKY{pp#b7w-Uf?x=czE4l66hPiTfh?FZ3B|SJ_8@<I|lcF?gtJ48-Ncq
zu!|hW@fwf}urC-hr`p{iP{K#RVFT<L#*C^0sRm|P75G}vqreGle6WFjrommHCpB;y
zEyJ2_1)c~>x&qzd?LkRb08VA=6mS}5k^}Ai2KZ3WGa8)I^sNT=aWM8B@DtqBf&Q!^
zV?ck=;8%nG3j7;x9soV7!5;zrU4v5|oYUYWCz2h&kq?wkmDVnxFen6p3JogvSf`}n
z1V#Fl4Eliv7=Ryc*T9M=#sdvd)^HMn0@gt>PT>-g0SXJi+9*bHR7eF4*1)PM#zPEJ
zKtnaKl8W&#gI1v78dQJqCI;<5n`+=xQ-)Pk8tI_e*-fBb-n^NC7c@!(tEm|F<Y;7o
zLWc<00mrcRN`qt)t3mY;Z(-086nda^0r|z_4e~)P4Xo#3Shb~50P5Dj9wEjP3<^P^
zLrRb4fsz~vMF7bTpn8szTnK#tk{y86H;j{92m=6=c>-2NFy6*s2xwaktdn4z<V6?;
zKwp*4t^n;|Kr&C$z#0+8DV+q$Bj~i!>t&!MUqUHBG9^fW<VbiQ$kf2P2F9}t#(-vP
zV08oIIR;}va}6edcGAEqGKM`-8WTZDcLA)!U|7wjQ4ZQo11mBZR<>zSe)Z764p+u|
z8cYJs)4=Kt#wpJTQ-A^utm$Cbg{3hAl=1^$>p+VQYCwBwU=J<BPEw7Tpp;L9*+5?d
z0ou>tUC{m-^xaVTM|rpa7^p$@J67OnTm?E<gT5`C@|Ca<7^*>ay~@{Npp-|$HP|lD
z5eBP3M`~aPpw3syTat5$273{d^ngI}q&x<wF2@cujoU#f&j6~|Ih9EQ$#c90)%Be6
zl5iI=Q3I<Y8K=A<+zCw5pgNwH8>|Pd(4cPuuQa#^bg~A{57&7{`L+?5szG%>cE@Ru
ztfp(w_kdGg5*`JrH0ayFDbEOx0aX40`c`ntW5On2mIi${aC(f!<Dj(~RNt%oraXTR
zpn3tI`kv1*cnOrsKY%qz4C@~?_JGdU!0IHe2MgflH<%Y1ya9Tt2G#w1k-=M_muaYP
z!(x~TZvsmUT7uqaz(FZr0dX4iW({gv@pT&1Uf`4mglhmwCqUmozS)4>P<o(8!VOCC
z0n|q1#1kPHcv}Oj*BJJKYLISHego7#qHmP~@$jw&eUtfn1{5ddH^7d99x!+U^aBlc
z4D_JE7EsayfE@?@$lys((gOfHHyNkACu{}C9e_2x4686TEKo`_fE}fbe{N6=`jrOO
zpfUcn!4064uK-TcW}NbpkO%ytft7EJ|7t)wNO=ihH8JDA8^lAV(HhiN5-}S5AE2=s
z)D99YG_b~%(TNcRl9?#b!0KcskRAfbOwcpHAzLvN7zQ)sCx&ZqALs}Tk{PxCL<!tL
zMq)HD7G}tZ+L6>3A-M>YQw1b}+WOQs=O_!*7ANpCpeT<7{v9aFBY}Slin1uGVTQa!
z4NwO&WFzJPmjWEP41hih2e1TK3OIq~24SGr0;_>0z%9V7Kpb#~K_cj#8vH2e8V&w0
zP~-=Je-C<(2IZB2?&Gv9CZGdig9e9=i3beAK{p#f*ToiteW1`Y1(NMH1Crr(gCn5N
zXvn^x&jLGv0l@RX3utfm1AWnec-{k`4v^3joFd1>I{@)>P(xDwe5fJEf>QngvJ~`V
z4LKf^_y8p3?O_c$29$UrK=%d3M>qjc9EAM<<voGoBzFXaA(_EMP;M{@R2V=<sQ;ia
z8PsL~{g43$&<U&y)j+wBfd<eIiM&^s1sY^f3kp3@fZj-#!CcT_gZZG)4~2!G&<}-0
zpiO}YU@;I4xPc`=63_~OPEkKf;YQFlKwID@puNG(plLul0KJo$26upV0=fZr0{I4O
zK?{H)U>$(GRG|DWGq?|w!Xi*S4;gd--DyC4?J`KkSVW2j)d%qipCDcV?WKWLzbw8t
z&<FOffkMv+;!RNSKp=gJAFLtX1s$p(-Uo%Q5X1q{Q9udI(6xBz4T1D4evJlJ7qfVz
zjX?Su|Ez}igyFb34eXh~hBgiE21ULTu#<vWfg03CwvfLB8dI>4zXWRITF74ljW1Xs
z8r0^sLN#c-!3xu$_OBJC!7c%9u0d@>%hJHUU1qh^;5|Xz8dycoEaC&8ww{%&LE{Y;
zWKN*=okei~H1=S%)1da9<<-ENVP<7$P&>(jo)B;{1GBO;sNG~`Yha}@vvM@39c1Nd
z;1n`uL9YnZCbBwfU>!2Ex@b`Q$m*_vHOb7PbOO{qvM6l;&OKmOo(8p*Ea)czYnqt_
z-62rB$tu*Ku@kFEgW5q>u?CH!SR@yK+C&y~j6h>57Ick3?IVlw8=$cYi}D!YOF>6!
z(71vHy&_OM#e#kj*h`?JHK?6pksbgv?qE^g103bVqWlJE48kJ$0-R(>G6iTn!kVDL
zNrn?OXzal%)4-_+%$lTuJ>1MH*T7y9W|1ra8k4YQXz+EQRT|h2!>pMaoYIaui@@Fk
zt<m5cK$mFHxPWzq2HypGr3Q@=SXXKA7ePrz0F4t^S8Gsv%UY>H;{_JU3&82J%v!BM
z;{g`Q3!wIwMKS_tY``M90Mr(<NEQI~ODxhMfZq?gR)fZ6taTbR=4X)}0MuW%DDMH*
z6O_^nP~Y96bOJ07l)?gd80ba~oVdZP2Q;WpZ#}4i74Xb@NQ3(K*25aud&R6rG^np{
zJ*t5nS<HG&gZll}CJpS<V%Fmt)c?0OYhd>lv!2kP@c?U!1|yw)QiH|@tgRZ@>BX$4
zG-#Z_dRl|^1>L4W;|11s4V<~ctY<W+?`!SQ!1*A|dRBw_!PZU<oTJ06=QOBKY(1~R
zrh!s<0H}X#?b2YRgQODx&jo!+gONUxP5{(zwsvbU(#@AOs1I#X833^BiCM2`P+!_2
zy#a7K3bS6-p#Gxung&igVAksz)OWO~%m6f&X}zgIeG!Xv1)y<Fi*yd4eu+hT2GIDX
z^^OMhPpthKG~Q{wtHCb^eNThNKCSmP_!7_q8Z-`SeW1aw06nNdW1`lF8vIJok2Gk!
z)B0G0QyLFx(AcMSSc6j<k7&?1sP%~kzYg@M291eY$29o$pvN_6eAN0>gRcNRp+RGa
z)@K@=^ys7pjVW56Yv9}!W__VSV~W<78k~6kN`uB1t*<pW@q9`HyV;oajRtn8G3&Gj
zjYV4j(%{7N84Vhjw7%8g#PfF=jOh0ooOI_04H|>Ae$?Qvg8rmI<B=A<132jjJp=4l
zPy-HqaR+Kh=%70YaG|{d{d0$F(73m|iH0&ag&Ckeh8yMC9SL&@Xfq8l4m3(b)PhC>
zF>o^gG**N9Htske9`=JkEe-1HxZOYk?5jZ&HN*taR1HxK+EGIyU2cyCwPD>}AOrmO
z0?pEpeLy<_oe}0R(5@O{HfT2uF%Psm&;xGDKnpd*IZz4<pgxbgw}zMtO5p<32XfES
z5Z8lVq9NV}B|nSd=0;GI8G?8Z6y?Od66U)=Z_yCYH}`rC@h{K~8UlLZ-UvJZ_s|RX
zLmJ|H&_^`H51=UL1OdHsqYM+ozd@e>w!jP>ac>2lf*CsD-mW3ef<6O4HwE;<{hWsQ
z9n)hG8WJ*2Xs#iy0!1DX#4=Fi5kXuHiaa974xnio)aFhYtRX`|hXBZDYSSkS14?1G
zgN^~l!yE>Bt%hs{x(c`%_Q>0W&ow0K&_v`nLAC*fe*(3`6XBmAJAyXRptgTvQw@o9
zBqCgb@PR@%2{IPcK(>R~(x5&@B0U4tuSkRr5M(mwL=B1bCsqKJu!p}SsUdfRLjMVJ
z7btW-sU_l_51OJOUj#+i1o;wUDeE+3HYoBf<w@9g27MaX1~c?GWha1qlHEZOZVJMX
zJwf+qU>6-rc~wK^f})%dWHIO)8gc@rF~b4Ki26OL(>18i(+YV*kcFVgD+2YCTAc)t
z2VxOpX-IP#(m;LwH1L<!1?EyryFtGQG^X>&Fbx{VfhsD9Bv1|rgb7~$4O#u$2EWN@
z_8>n9@^uV5Ob2Gb{u*X;!Y%eQ<BugVJJAudp*_*ln8+5g#n_3w1bd8c#{S{W*yVeO
ze~SIMUt`zpul#rHj?KX?))MSSEyoViOR=MLDRz*q#$M4ou|M=4><rz2J)xVibMqOT
zcliQNxqJhAE02gzvClCKyBpoI6?Q7N$Nt1j>_05RZox9_#d`?*=XS-X#23W(i60O@
zIDTk+N&J}jHSz1>pS7eFXoXqLtpxlFRXeK-{)K9oRc_VbKd5fBZnxH2zq$k6E_akW
z)@`{H-KlPmJHwsj?(FX2E_C;CU*cZuzTCaieT#d&dxQG{_e1VS-J9H7+)uf8xSvai
zNNAqmPDo5hO-M@^noycBKH=Jgn-e}y6!<@?F#ID`v&2~ZD^<J1-iZ?vE0bhWbW+Qt
zl%#ek>r$Rf*_QHL%8My`QeI1WBehBD^i~nAhPL`VEhVkX15Z6N?BBL?KAc^PV$VF7
zVa`Kutqh}#>y%_yV{i83*g^d!KaRc5Utve{FZ?WaACqJUW4G^k?CqU{-MUNE-rQTT
z19uH1yWU843--Z2i*rO@#GclD*r|FHyGz5ccQhJ%Lt8_#X^?Cu?C88uvb`YLL6Gdo
zddUjQZaJ+e%d(QKwwBlGZVk0YTGOp1)=FzNB)blh4RVLOqup_CHzeE9?S*7Jxw}HL
zz1*|hb&%{5BiW6R>?4ru6Yj0<?H5RPaKf;JF_7%4ddW6{WMk?jTcIQyXC%8N<>{22
zDZ3!qS0UMOBiWN_iD{jcWTDL@S$+=FdoKddLdwi{kFS;}e&aQ1xclxthdR=Ct#3K*
zD}2}cuJc{vTTV}S9__o#*UdMLS?XyuW^7ub)raz{ekdzwt4_v!3hossAB@dn`Mx`R
zOMO+o$tQmLY$+y6mjG80{j9@h?LR}A`%k~)sP{j8{!`R6`gh!o=VqTq9!EWSd<WSb
zZ*hFY@z~=-jt@NE|9HRSePJ`;c;WE^(4NQRk5wI;e60L<;Bm>=u_uphJ+|W5y~hq6
zYjrI37(zPw6>Ni!`i>qt`qI%IM_)Yp;3s2`t~q-9;oA-`KfLVlm4}xcz68VjHy`#M
z`uI@#$De<6+k0c*bC)KMgfwh#FwRRL**X9<5KbOgLHuB6aIvJ?xwky;WMK6UZt-Rb
z-Tgn5=iB^dyu(Sujh?Q<uG=-RMJ?>VE7PV1H`*jO;QdAoV{<Qd<!;0d+%4F3y8|`G
zTk?cFX+u?Ji?l_7f0c(gG3}u3knJd*k86LnBV@Lro<09(J80g&cY*zD=Rd>u^BNc0
zpZ{!IcmA_}vaM8<i(c5}f1UVJa-0~@Pwn5IDWg#0N8wz6X>=|Cc6zsv@i-IUTI}qf
zAtuWNF;Nb{4*%(5Dn{lw&I|YkyUxGBzVj+EOOC=W{+GoFnSv0O$`bLpbkh!g?7(h~
z69C4`aoEwnM~u|F&P89=aIQx;HjoWRIhnvFvPo<Sy8`>?mtwB`9=3tq&o*L}$AcIZ
zd<rWKKETR?kJ$G(@nLPFGdx^4mjnOmqR!m#&{-KcDPt&3dZ_lFY{BQt7@S;z(<X4n
z#3MK*Vn1f#yI@wlD`vy{VTO4GPr`o&B;)M)R5psIu+h8~8;9B1a-PmAxR+J(44h2S
zm6c%zwvOksIlKVpLlokCh$5U---lg}S;MRN5Oy^m##Ugq?mEoUF2i{o60;;XV5V**
z&gGcEZsHT!%^atKW4`ScJ_)CpPr=!fGf)fH;PlCvIEh2>cX49r0-QN{6?>R3WKZ*D
zjQ;E8pO_VVk*{X2@Y`|j$Q?L$<Sv{%c_+@AT#r+R@4?v|8`+0AJ>z4{rX9k}*<s9*
z9l<QoDa?MI!OYMPI1l4ToHFtTJBzuXfAcpn+jJ@0hWVtEd>j5jBA8u+Im$=)r8ui{
zGds$kz-g6RaN@|5IM-q;{%yj-i5A7|Ier69)yQLa^C~t7^X#u<4rD*h7(IY<GjNs$
z_u(WBb&iI>tb;lw;|xy7_*S2gf%7rU=@@i2hDgLo8~@_p<BRbDPBl0p`(jW2SnSFl
zj~)7B)X4_>@hv$lCt_dz#ZLfVr1sa}sP@mRb64fPVy`+$;T@cuaDYxsU_&|n^OYyC
zQjAoN!Kma|j6hz(d*FPKp7<Y#UhFcA7%s->;EfmwT*b$;TX_Y$jaTAy(8=shjMCl3
zr?G!v^ld#x+U~`u+I<*7+ltY$7x<0rC5(dY#)#L;{8pR@dK*p-T!Zsm?q>V=I`%F`
zp5DVK(`mko{R^W<-(sW)|6_xbWZuS!CHruO>;0?;Ms9jylqL@&GWi&NDZofeAx2e-
zcm)2(Ba-#P$VhLDg7m?NM_-I?OvXsY6pUI-#R$bTo`e6>$i;tKbi%nQo!Lx`9xTU5
z!L=9_coZW5kD<4}33cY<=*83jc|3vM`4;rVx1-nn40_l*(3^f1J?EXMQBR;p{26+`
zpQESy1$wn#q6hmGdaGZfXZjs_p+BR?`3riNzw*~nvPYq%MJIra!<im9BLruI&<P<!
z)kz-{aI%2FNgwk>8BPSL!)YILaE`~@IECUAPM*LC6gXFc&XY*PX%ewG9U@m2izGUU
zfKD?(t;7K*%f%`Sq0acXE;!?#*8b5M|2C?@@Xf^+hvAGQW}i`6i~m8<_nBq2Ggy0b
zpD}X=OP#6iaLduQr1mA51bo{NmR&tLSWug>ZQ8e9m%Kmu-sHlhg-MAlk_F+NOjv>u
zTsi|C?NjDpqS;xBKXzjCT-J@D&*59+`^k6Qw}bv);lKU!9YompD){h)`fvYyyTSPm
zYIlJ9pL}1aR3J9rDc>2`oWk=O-$vjdt~LKN4iwLg_@>Z^e@%U-8qz{$6~B7lVE^YP
z#i99<{<$l9qvO;j-?!>NIR3K-@YmP@QhiFv;S@MTjKrt^y^mT(mj9Wg<bU&L^#7D^
z;`AVL6YUcvW$;~Z`l%sRq)l*zJcg@pm5aZYq?geZNv{9!^C}zqFND@KR}Xh|SNW`D
z(;9kXvDOV7DEEzSBw_y}xH|)YFWmLj=pDkbe06ZIazUj)l{nvK-+tJB+YpXFJfgZ)
zt!;dtE1Tmg2FlNa@C(Voq|2^TyZifh`Y)Kj{{2tO4$|JJ?EH23f8T{)ga2AvA(ML9
z|NZd)wo423{6&6$7ANtI+}i#3>exRE<suROFRad&-G7eD)Ec|he+KCq5PE&FNTI>1
zoGQIPj+Fj&eL^xJEhhaX>Cjiml!AshNcW)S=ha;QGkx@Pd(o73^}qe2zBKUA;D$^(
zWk}(FEIa@C?fD@#JmFim*|!?CM1Lh2s_70xF1u0Zt<f>!PH)%XUgw*reM0t|8_WC8
zIB$sOKbkIHQ~pOU|D%`A|6$qLf!ts7$C3kE(i~O)Q|cQeKzam@R60l&4LRRn(i}s+
zsE^^|Px7*{B$a+%q)xdoOusDrx?TT#LAkk5i+ziA47gKCm`MJRZs>pG6wni%{}0<$
zI)*>LtMrm=4OHErN<Y0(?TY%mKuXT52aqmZOBgxQe~vZ&HI_Hot6GKRagcoaU20Rq
zv)}%|NiX30PxR!kIQcs~Y7ItOl_rDMr}M(}{8elhx^H;?GyV3v(5bz+tMet{_d$8n
zVD_6X&O2P1ItBUp9hEu1d%wMUHg5dyOlnD|sBL&keF@N($FsU?ci@@YXUk!?85i{k
zPMML&&8RC0C_xviKj1&o)I@5W3r~KnrZ=r|>HSL}7o<zO*9=_z{#P!#s<2gC^TGiB
zOy0yrBgtLJ(}ls*>l3|zPo-6m(w}OV4!|G7U%C53bbqk$r$gnK%Edp(@eh9B0(q_O
zhEJ`NuvI$a=kAXl8{WfheHt6w!$j@xjgSEK2%#s4MfWzSA4&ZrUDK)&V+y~XZ~8ve
zhxo^swGI3$cYc>T_4RUZ(D;i6;P>T!dERp*_$D1zGElK-PEjY4`^I<mtorkse}8xv
zr;VgTU!2C}@;ncX-1*bdsP)_Mwy`I0+#0<p{HWJLGH?90!Q5c4<ZWD?m;MIF=b4oI
z`n>k*iFR_K|MQ<AN#v)Jq`zNm>Ru%^(i1&uK=lWDRz@?ZcJXTtT3mi+)Hki(zlq;3
zC%+>_8@M128lKK`biqU8GEX`NP>T?Jt9!j(BK=PAO*;6k?{jckug9>tC^zRtMD@{s
z@khA<S)s>+Ky@Gc51}{Y{2yNZM+?;T8*xqa_4kLZQjPXF(yiKrh`YXR><{YiNgF<o
z>srC@?|k}4N$S!^uKxJ$e82ih>*>Yb{QuZN9)H@mB)<O0TZ26Q`0jj8)Hk$V+etzV
z?=Kd%KMxvQ{gtVKm%noPfBl|xR>$EVcezj-Am_UO9T$*`k(_U$i38sse|-PDF#qVw
z&z-8bE-d%>4<3vH2f$Y#MuKh3g_EA`EF53PAm(OCESja_ibKskfW@;RY#i26)?%Jz
zFuNRADduwTz`Xkg%w$c$+>5{rgbnjdFJtCv07l(Qak*%o2&d7P;R?rj?fY;Z{eD~v
zF~@Qc=dyo<Ycb9#KZ3K_kK<Z`^T|)(jP@^aU5Paj-{Ako{)KCqnrpd+pT%`8okY&B
z6I=xF6*zZ1nBRm`#$)(xB1t6iwRDO&zXzv?x8dtC^Vf^tiy6N@{6WkKj^+<xw0|7m
zj@iL-z5}y>mHb)E|4rdLX_TKohcmnv@t3gXVln?GRtGHMyK$=ZEBs}gVf_~0L+4lX
zSLmc_%peH1450s$#RMs&r!N;|7y}80<GCp=`d4rocW;J^vnX7_tT`_H-w3WSxQ)Sl
zcq}f-THtB|Y13sv{&9@{httjyamBF|T!F}mHlS^B#j$p{QdoOjajXNb6pY@dA-_7}
za$;442fU=?3PFua|0|e*D;7DP3GT9RwZe?$0PsH?>r)(THuBYh9K8V?ZNQ#v2lnK>
z3C`cfUO0}K%5T8=X{;3v!<xQd!R>EY@7o0Vjg!bRTWR4R$rCXT6^B#*donvt{_hPl
zG=Qb3|CS4c7EFK{|1gDn9bbvJH)4({1!wEujek172lIVS%xAv9TsZ&!pZE{;-B{-r
zj&tt!u~s<W{$03y54(>7p*IKM26}@KFgJ($C)jZmhuOEIaB~d1XyUNu<0S51U>8*!
zbm(gqg4w%M@C8kRn_sX4Cx!G0Hvi`Th8bFgkTHwLQlM2f76+|z!0Z%G+=E3hOBEp^
zgay)>_V^dsrlKj_M2HCH!rAswtToQIZ_Yxn!X%cpf)=)7cG5rA0w>wGMF{z#fVtJl
z^le13D2BP0=*1E+-`tzEC+%cSaZY_-M)TJFStRD62CxXsMGeIN{tm)g!wAes4Tc%#
z*2C{GtO&Gldi`+L7AM$`fO(`C3G*m1n#GfT<33)DXHi(?Qi0`Wlf`7*r;4e#Ps2{B
zB+Px!V9juv{Y(}By`K$E>O>uQn1gkJ33R4C%$JGF;Qn%PIqp}8D{x<m-BHbPrv23{
z8uOBSSvxw}9rt&zI<OsPJwL$xBg|2@qY{Gu*1<d&v{$h8s+`dL6kSwW0@M`)eGY_%
zQOOB`uDYO?!MK{@DFo$(N>L0-L=$K&m8BRKfh%5>D7Pw6NvcGpsuI;km8f=b6@#)s
zC90z;QRyfh^uNXQ|F+T8=12T)T!E@|IaKKiMqQT#&8FI}i7I1ZC}Hj3o=R5>Rl4F-
z>1wG;SE4FiT$L_r)q3HYN>_VTy3$nX@~F}!P-_lDs;P_xu+gYNV^D+EBGpvhLR38(
zs!Clr_AIYLDsRHo410}NBb_&+er=}e*BI=Yd<N;<fhz{9g?GaI97<^nb~n6$wC-Yi
zkUlE0Zmg?+3$mngn}l-v8PaqT>vL1Ehx8kmsSLMMWw@g%!|7O;;A1gZfq-R-oTC<x
zQKg!zQXR-!@&x?rbs|q?sM~of7J=Hm2TDs%lyiqF=fU`2j{z)9m3FSy1vH`h9xkV1
z&uSP-J2VD0_%isq2J^E~_>YYnVY3S5KTehZmRS9;7UiF6fke~-Ph*|THq6#0<6kje
zfSGE9wyH)*Q#FEzz99&K>ViP^uNTp(MzGPB1orrn;Epc|Y9f3|Sg@)ETB};11->cY
zfGesCIBJ1kasLf<K?_w2gyGwA4mLjQR*XhnfPZhszg*y-Z|I*cU=9!gSSN!2x<L7-
z+Mx;l@xlcgsv}y`e_g;0)d;OrjnJC@@q&5iyF~xdjd~$b)diWVF33=IL8ht;vQ;h6
zNtOSus{D6W<-dz6|D9F&@1n|orYiqAs{H4w@}Hy1fA0Sy?p>hUtg>`L{l8?%c4S%B
zTe2+cWyufuCCQTCuQ-n5IF92uPGX$I7{`QE5==;?LOM;QQ|UBGr|49gfi%sf-84m0
zG)<*wn#!eVCe30PhM^gTMKdfGm&>9VhD+yixpi|HE<@z`_CCL)UrC^A-8E}XQTnZX
zI{!KQy!PH_?|shU`QOI#zm4RZCN4w1;R*SMC(ZK|-C3dOzzjc(??1vk?;weXUm@}E
zJT4!{6A}+R1riTWNIX1gKF2UXWM~TT7)#xlL)h1bI0HRKAnC|gGz+{Mx&nQOY<#x-
zdgw--L_w5w0BJm|H-3lBRsFumHLIZt&mUGmIW0|{mcI{!Dq1V^`U8Jy&6fR6Yo;6D
zykX^&*T_&3Yf#ALE7UNnO)cC|>URSYM$!m){Z4S=A85CrMaP&s8ksNJm>1fZ7YhDo
zW6no9gpGNk9qCAmC}N&xV4hckK5&D35zkx2JkQKL&%#=Sh54M7`J4q@pa$HC^al&`
zHVgAJC-XBG^D{m3vts6FCgx|Q%*l-4WScMsh?CjC$9CX5@h}_nFqwH6@v4`A5FaXI
z4y0qvp@_Lo33HuQ%yrDnb-->UXhqC#EX;2zSc|YQcd;^ev9SK2Wu3vo9Ky+Zf{VFA
zF>{4d)(y1G4+JN$ux?;s-N3?HfrYgK3u^@y<_CJ_2QJnGTs-@=Ed4Dk>$NQFoh<9=
z4jY=;B<1xi->od)D|lv@SkhV1k3}reC6?t{^zlxO%o10JdpfqD&$2U!?uXZ5keH$G
z9zcw6uN0On*!%D{`1%u&0_PAfwuH#Be&ngeO*exG3t1ztfwu7<<SUSn#d7<~S8@k5
zg-+-mUHIF*az*aJ-(KMT7@b<>*HXC~x}c8JcdvYm->)dYQ_8-T_v8VL<06cTxO59X
z@8I(-cmU~)MREtybmG&6PY<X67-$zXpdNhsklz5%|A_KRP{PM3vs6ic1r)u9cdjTD
z;T{*PcJ!QMKDR4WI{%{MUle+PT=~wlxnFKVMG;D+T767)%+aP}`so)@hp)h|kp{AX
z;%0CIaq07#ZX7A|F10LrhHerMV`h=gK{scgg-(N{;P#ScS=-OZOL(4>Kf$vY(Ok-{
zD!4yoNqdlcmh*+IKC6+6&Ldwt;=T{z^p`#8)meO|izcy(8r2NpmfB%WucjUUj$=ml
z7VU)e>BrcRXx|g^U*_ilMoj#jti%#xyXe;${!Sc7l7jq<Fuus&XZcBMbqN$eieW5>
zyV?DyVZEjWGW%V~%#Z2rCyf0HjOqr&*khd1O)jdMOn?VSnjzFgb<;Y^d;`1dCCFZq
znUB+VL{2_{rvtho-GNS}p&ZUrgYqRrA0m}T(*8u1dr-FwjMheUe>v6U8+;S#<NRIH
zUdX4{J}$q496FKyg8Z!fH2?Pm?oE0acPcI8j-`hY*L?z#?Ey%-B}8}Lhi?m*kK6Fv
zi`cGb5h?mC&|$eBe>-uf)Fi$)F<y)NsJx)xjMSyL-KrEC!PlHKa*=+6&lUcCO!^eL
zP^$anTC6_a$J<XJpC)-ydWZ8J!@o;$OV`)9wd-Zv@b#MXJn(+}#YzT||4&J;fm#Pj
zu0>9z(&H%EjQ4fWhCY%|GwD22M95jB8io#aTsn#}O2G}^#|>f!kZzAOFU<nEf_$eD
zCpsz(;mux@N}uymJDzdSxQtRJ<w>;bmn)rko>=)D&$G&tkk?jT#`D3Ic|2dj43sp8
zL&5U{dP*kD82Xh`KF7}q{`CZZKSEE*#owReJpXq_Mj4sm@6MIeoQCrBDJkjuYn;!g
zT*{P!Qz@nV{cV2t809HV@pA*`{}Mk>@~@-({cV0e$IoScPS8{8=X|<3<v~KAp^PH`
z8BX&W|9V9Ej$hF};)(jAM5^@%{QQ)jQjotN;O{Pe_A~MUzx5I$LHaJm7&*YtZx}K0
z_fPS}O`G^sV2oR_S};S7{thJWukl|Jdiy^C`xO7BSRYSAGI})~tY3HH*1Ovg>HGVL
zbnV7{b59`Z^4ExX?MHO*JBYk|R}N~{&>d=;^Kye6(>#D!)DLin)h^7yhoCcP5M%%U
z{fBtb0@_Kl@*ns~^(&&AqM#+7)Sd-5`I+`1%_`gk^@zrT+n*l8TqpS_xa2W#LP@g^
zv)M?TkojOcRw{n*Ll6G8<3EfNPX7`=pW^4+{QQ`oU(!=@@psat=(aSnq43>{SP87i
z6=(q&zmun;l&Hl2h|m30d%ud7ASjcdJsI%?CxWI=X(hqGbocW26Z!PIW7z2?p;kuC
zlh}jv9_~1M12N&R;_ut?W%&j9Ir$m+N&eRx{M%#LY4RXap2O!6{C5Vc>U(j6+!^^G
zIOj=PtIKn^jcy9s{~2f#gSg)=g}d+0;MaP5_969qcsI<Y_)x~%SYuFWl<$MkR-Q!K
zGe}EMqpZhMgSXCb9>An;P|7%LW>=*z<dazWe1;N^;J<w+>t5+&d_I7V^e!xQucKt3
zNI_Jdgr@Zp-n)bw44;;s#y5;Uc}iNAmXYhjcpIhSzQp_GeYj2W1akR+-+mW&FJ6*c
za3A9ma<~etUfPSh6hA}0Ddc`hKEj`8r3Ktaz74+{rAg2<g0}vET3>obehSY$@>_VC
z`1vqDck-`~^Y<7(Q?S}l%J=bnnUPbR#--r&>$}{eUn=P-&wl<6PLJ=Slv49Hf1l#F
zO#BS;^K(ua<L^89+0V~YjK9op=~!EMiNF6dQI549(Vyb)`{d{G{gRUM0=}F0dyt=_
z{G8(F9)5mKPqYKkd5oT#Px*U_e;wuTQ~ZoEa*n_EEALXdk8|le`MF1a7Rbx|UB}OJ
z{Jca@&6oUr4?j=w^I?7-<L5y<aU(N6ZJ0Uhv2ICXm%}*pf&-d6HEHHx9XQwR40dDv
zE%;a$>=S>F`ApobkGWYtED%?~qsYcED7hsMqQi-^4NKip52C}#TDXq++bHw5^{^BC
zR5Q+8ZX<KK3A!ayvx#}#W{lDQguM;8vl0>TSHbu02H%Tm9%Ekjm*A%2RK|DyfBO4A
z%6;>?vI+a|`#^7^k)}C8eSz<#=!bIbCHOHo?7z|exyFy%^nR|X!F_sviQCa}qaN-{
ze_H!AZe)K(`wZ@Dzo@;aX~4doXEib0toI!5m49CQJZ_)Aq`idO>R-^l03Gc`oB-2`
zJN8}z2i8D$^FZf)655;=)~a%7!q|J7um-f+L^>UEY7^0D$Y4lEtyY8Qgls(VoUYS*
z)VS}2$*fBqJ=}D4<gom}wSCfKb1f~Ixxu+P`Pqw^N2Pfvqw)&4I5eFz$QKe&G9;pr
zNLxs+m!yO>gj}W4;1OJFtFwkPe<n>`?tN1CH>;&>V`I%Ttu41??vc-2JN&={s5nyy
zJ_-5h0<Q;kiMYdIx9JTAdg?=39Q@pt4CVfMPP{d^*f}yJADB2XR-Ec;-PSZY+TFcv
zR6bKZ*p}RG*Hzv!zN<kx)mYP>+1pY(g0^m7xe7k~AgpVeq9Eu@_R1*5X^4b^dcED|
zKoM!DNtRM$2m8}=KOX7W;oTQ%Xx<d>9P}g|gO;uh#)042w)Onpu5@B5x%#f*;qglA
zVnw79JxDFQjoShHR+)MxJBmC(cO(?@oValMPj~&rqSuwWCB44GB%e8U^5ieK9*-~W
z+|Wbvi*l$%4y(9t3?V~;Kb{lPS<e@a*FCR$zw*duP8~dT>Xa%q_5q+LmDD1w2WjI-
zdFs^HlrPnK7Pa<qt#49kjDd7Qi$3eW=a16!KN%a?g=)7Yw<NmO_+73!*OlIy1IBYF
z)%Bh*?>mus$%`-=K{uqIpgUnmAg_=$r1hLwj=$Wpd}2BEa#B8X_3E|5QfUV3HL9o7
zjr7<dfp(&FCukV3E_W3MIvN8SXD|{?JGe)X#w0(VzQaFP9<L5H7$=vv89Nt@@s@de
zO{z=!)6BZA#a@Mu^LX3H`7#|K!+;^Z+^YMhXFfmo#N1R^KJ(RAnJ+T;Nw&G?6k0Ch
z9r(?NmINi<a|O+O?b}n?x_yP;EBSY;Gm%EBP`X!6W5R?mZA>y1@I-yNuH(WJCmw7v
zI9#i=o6dCC+qANw#1NCuWIj7^KyqC>{9bU=MBu`eD;ENrHU-{O=skzL#dty9sZ^TU
zP8-Gip<ExH@#~68jP)1r&8O2DjnD)#Z=7%YgU+|mn91|$6J2j(<Wc{gME_R6`=lP%
zm^UUlsti9dz@_B+yZYOA-P6DRU|;*LBONtki9{nkXk6cN{*HF#&zZiZ^=miaF+7ez
znH$?>(5S@N=Db5817>M<biX^Wr>AxLK+j<PP*?Bjc&t-C6B-{_yU^o(N1AL;MX`y7
zXdPu*%i#Oc)D+NW4HD}RQ<A5=L3F<p1G76v=)e1?v7wDh4Mu-woqf2*9x&@I@gu!=
zZ)A$c#xrmKz4s^cN^S1=i#sYjF1_xE0n;j96BFsrc^=~=R&`xnwh!I<<oeaI;m(1+
z)<#q&FxGd=lIOpD^pUi)vnh-PIy6qSd^K7gb;*xcO!g?(B$X1(g}4iti_^*cO#fx?
z?<Nj<*42dSYJ=^KiT?eA9e30&xD)<hs4m*wT-STh*fBH{iuo!XmG)58SWnlk_Ehsu
zw?E*tRk~}u!yR3>byDdQsL&+F5B3a!*QUV(wD&JQ?vXz8JiaLFPMx~;Eu|U-jSnIf
z>I<INmQ2wI&T%{bE_L5?PpPhdd01Oi(;7>fM;{sW{ls|ih_lx%^=2Nk)>v8-BU92+
z=7B%?8FHi{@c?oxL%G_76}6&~YfVTeQ%@RYS?8#CoV=KM7Gw3T#O=xCVp3|M*{vA{
zo1e#f0d9HFU=Z(B<i3G#fIb@i+F|eGo}yL7I$MMFcYa^eYjqXj^7#v2y<Tk4>B@X2
zXu+BH6L%z&d*f0h^M32zwzfO)4b#F=wWTJ!A(HtV{Nw{rdJrYTt{t*!6X<~KB!g^<
zM8rG`e=+~8tEkkVtMHZeKlSn6XT5r(UT3Z@AH#0V?t_lD>gqPf!OTmUOZR#bRaFTO
ztsFKY=e@`o=R73R>YOFR>Bifiu<J|pI$Ov-{&eO_(<jms=W2$c(czl=Gc%u{PgcIc
z+i|=N-W^Iy)OAw8ptnh*UwWjAw#*Asv3E{-{M1}#mi*FQ^k4+b9UJVvG|sXdoEa_2
z+BC#gI+7J)PY#a8*6&LCyUJw8@r4s|U{l!EYW0^?o2n9iw{dRU+G9JCfvR}M*c+@p
z;i+A=Sz4ysqal=3jFK$!C1?jB9xa#@A#1`w{e+=h$W9=a9a3?1+9W$po?Z5NWdCrG
zOYWy)?AB&Wu(-+?^v2~&=Vv|MUE8VH6I_xr@RSuy50YTzs`Msm26>En<tk>#)rAGJ
zUjK3XEp3gP4)nJSTeg)|TEZQHaM<ZD8}v>ZTXzih9o&|PI(M2(@hyp(MoTHgg3@Z^
z*}4?88u8fgZni|3T<TpuE84BueqFoyJUh={8@aCGh_9d~@1rIj*y7Z6Ax35hD4K;{
zuSH9eG7!{%-m|kUKDiL@S?9OuGhg;J*qhDmzMcCn$TCh4NE?&4u3mH3WGp$I46j+0
zY_b^_?A20dk=fu0)}iGv60oLwMR2iDA8t)g#G%Jf&gd?1g5X%cYfvt2o$BkswJViI
zcXhFD(ls?I9XYHwCAX!#OGPF2I@__#ec)nWuXM|PQ162`QN_v9X?>`0xS<BQu?Cj*
zT>b9Gp{m|MU5C*#u&Hlz{kk1Ve+S0hi8;p~w%S{)o{}n4L!bMVV0f>+Dq1r+G`(&0
z-CJ8}^!b<eNHdP$8JlIt`TztM*$*^W<z6Cb1J0Zub>IdeE43R{PFs9-Iq1^)HZ=CO
zYm0i9JGDji_S(u``O;(CDx(7f=7=Tpx)e0oOX@4DGM8y5Ch~>V>^(VxH3{sH+5<B{
zSB|a>DJZQf7*%NK2Mt1pfO?!TfK?a_D0NKt_{BF5FAoj5<V%_Rp8GKK`3pmbiS8i!
zKFK3Z%+5j%YtZW-=xNjG_Ac*}q%uPh{#{mY>`IjT?Xu<CXNF>(X_X`$*3pUplwx1H
z23~7w0b;8pL6pgtZ-wkP^fuaK;e;+U(U6K8qf-sN?Zu)=s@nRgX&jd7wqEIKzptq=
z8g3aF2u8Av)1JA^tz@_3TfX%*(7sh=+ilshMB7tYn_6<EP{VWX>YTaR#f-?HF07TP
zX7_b$ge2p~-81pl$=yluCs@_&t*pYsYfSF!U3X}6O!;%XWhxbk;Zf6wG5g8N1bCH3
z@G8h|;_M2O!k`7`GFWr!1@S8HeJ6BsU_)4NM{lBBHoA_eSk*=O@suwt*i@B!=P@aw
z=2gUnCzuN}Z*)Rs)?Yt4@>7E<mGRUP>s2%3`<}7o8Op_D2ZOaaW_)c{il|tz7z>DM
z(qOH|vq2dP$`t2b*Hvw-w|fl9QlGK9y(%SLop0$aDmtT=>*JZvgf<O(i$>8-vg$Oc
zC&X&S*b@1XcH)z1z4CO`P@iMAGU0Fr8lyE`soD0_mg;Fsz02iIdR<Mv^t{p05E!ej
zw3gdk4*PIx%UG;AFlq7F%k8d;vYNJ<_*gxtug9D?Cm({1Av-71;8Iu|V4*_Fhr-z3
z-nh0%8|inA#7?>Pxt1c5)KX$8@!I>08+$4O=I0OVj~_qwVo7;%Os`uqK-fweKV*~-
zeg}+G=IU8>hH@m`oH+Y~JsrwCuti+G%kw96)l<g7{$NB(Wj-u(l+=3>+mtb4T2PMN
z;5+rmQRp*HhmG|aNQooe%kUahRGa4?`9`|>NzI1Z=vefV4A~RcVW!&f4(T#jH7FWP
z8Y+f9`*x@;m84N(Fw9yXEs_kf&g3!Qa$gY^!zO3h!~<`=09^^+Mx?7B)~t_2#=;-+
z-}N;gW{fX{*4Eap4ZQ&RR^A7FwJ3|Vn5bHdf!dnYVj^!&J?1Vl7U@=bN+VBQo_XA3
zFdB45Pg#>>{A}D_Z^!?~Ggm(wv&ZcA2FDok{cL3jwmi-kEs50@HK9;ulsZUyeX_i%
zyrshKY%D9?_GcEYR#zS@pLsa*|FqxvVp++-(rS-Q`al2Czd0P54E|%L?ABQtcOd#b
z<jdL(E2e0nQp=Z*yQF=VFJE%aNWNpUnNN-p7iQ~$_7CL<WGEsRwYO?u{Z;U=_9r>~
zHWgm49n9goRrs8CTMoZng?DSma`;^;Jfe-~@H<p^r*<-j?^oew?TH-zLlr)xozCI+
zWbu_!vWn#J)3BOl>t)s+%i(ut)1!}1YJZ%=f2qPPs&@F53SZVfoJ;>VD!f<wMh^em
zEDn0|?H1K?yP>_+bhT^$CHLO1v+sefcJ1dm{NJkZF73NH{O?qFzY50*AEMqUKi{rV
zEw^j7e6k{~_!KJ=^ryTP$;vAhED1;xg+)nOx1?!Jm@_Q>pdlS>tnkCIbdfAfeU0|A
zRb@WMK+eo`?V*O6U`K=T0jyfC9kwU!<>kd=<<LO2xpEN$sAz7qLPGXniMU}5U#vHn
zv_5P|4|HG_DaBOWXyE#|p{8y}u*F<cE=rO+uQPbj2uF>@2p{8-&m$Zyfi;VE0c!(2
zt+mk-R<IBW%Y&>rC;-cYv@^XgrL9b47NiT(m!3}@FMD40e&NX+^gcWx?U|FzO<OWQ
zP)tQ<&(gT#T(y6M{=(`F?S7l|xyG2odvo|5gri+BhvB<8gEfbrwGmi|z+DS1a%9>f
ziySfawDLU`*lO7}uCmPak9G`9jh6h-^2646dvaUsi5b0gvZ^QEy4j}l&2L(0T<TAa
z#pb@O4W~dSTN=i-J3$YuL!k3cc#IienPx9a7Jo=GG2XsnB#R!>lMl+Ey`TI>$cJnq
zV?1vJewzxPWd0%W-70(^&trk#qryj+9)aJf;2yNkHcrnG*IGnN3pyDm`UQSx7RUI9
zbufpYR_OPjUTQpBuORZl`cl>-wkF#ywah2=T+dqtKjHSO<$4PIwgQ~^q`-Hp@J^;%
z;P<HTIP*z?-=)H9nNJG*4i(<Qd{W^1Rd_A8m%#7L;;27tn>l(;XZscPtYv;E(%+p;
z4}6;WxxjB%;YXQI3jCKUT-^@8QsECWpA_l;MujJtPYV2RvpCVo<AZSGlb>>XGrf@e
z9?V*@(F#i&X;EpMi<g_6CMZz~-;h!b>2Q-N^Qqc=>uYc-Tmvj3)LmbqOwyuYok?Lz
z`7-=j-3k0pRR%QiJa>AhAzj_*ctKspqNCoMFQmG?5te2)8V6z(q70g6R1Y3EcXIuB
z+$dJ~R_zLGx#hwxnXj7`W{PMu?JTfIziX3Xwta)Yvr{QUeq(X*uK2l;{FtS=K&RT!
zTt-_eb90u<#(IZ&QGU+Oa@z}BJvZlhtO<O-YHrT*SQB`5ZW2#`y&L5U{H)ZHD_6{M
zfve~EERS)4-=WI?J|2StznyT50pcxhXgd&LCoF2b_D&|-dSx;&L8FdF^ag!_Tj6>O
zyWOg59BcJQ%Ucbl#g2fCh2eKu+_n1BqUh>qk=9haU#F8~m&Z|GF;!2_hpZ7^;hT?e
z+d=C>n`Yb2gYitB=?H0Kz)wryEZqOa1^5GmLkFwJ<5P@pYtFL327NXukWt^7NQdfo
zt+kApm(BlBzHA<~tlvcj{)v}OFH0ZH6m1+IAD_#F$<i-9IIN5UX^}Y>dF%DsTMuN>
z$9N0~^tK%OB-cWqyL0G=+z$f1J%_%)97~{g<<Q5uF9mu>4xQtXBG5Z?=*!Ft1$s{o
z{ULKCf!<9hb~cwv@L8Z81$z1bM#9R6D?UO=QaiJnO5VCk+CzUsx~8c-0vAUjtCr+u
z{<XvA4n-9~36z&;ku%&*`4+jvV_%fJpQ-r@BXEh^2}W)1?Ud51Mw~86RKk7%JUjAf
z6sYmjQcOudU4TE7#ZkG-+&fqkA)nh2!$_lpq@D*cC`Hr?!e63=g+y_hxM~;7?d&;`
zzWI3c0*^AI1n&yy5&4|ed?d<6KE^zb$bl3hb%-mK7NkF|f!>nExmPKlsP+z~hqTx1
z@6!eEJw!PA=U?#n2lNlE?9zrPG#EqLN%k>Mq&c!Qu-tks@>bOq&t=zQyEOEl*Ddb3
z{}h!5>b~OIL&u=nQw(1YCw?aIJG1zTEW<~X!%rhh>1!qZInD<QSI$T9Im-VW&j^9v
zs?sUW@pu$?mOqK~w6+mA^C4~(9b!+YT!EjJysC1EPJw6nq6c)U)1Q`HBK^vE0sfGJ
zvtNnnG&B8KIt5N^Gl8phtCKt`1)k+WlwR;rfoJI#`Ow--;CHF`?n&-#fvfrP-)Vn0
zm;Ofu>8Epew%yt>>fsm5;aT1%%B3}!$p3CtK2Ni5A@E<S@RQt+0{@i?e~onuf&YyP
zKgqg<!2dRfgPvUbK(`<q<D!r*T6>E3Sk6JO74)vKB`t)VUjK@ZFDs|N)7J;Xg^=0b
z?evq!6)~<|xw`TW&MSNg_Ld-GxHQgaTCvkRF_p-pWs*a|Xxe78r(uuO>z!<M!*$1w
z&f#0D$WymCI5)h%%mjbqz-@yYK6TZ@nKy^eKf7Z6xAjbsqpowlf2nG?j=rY<FI{ob
zzxex>{yp4}+9K^|a1Ow4h*c4J*DJ^q8xXuUk=IRXuuKwaku-bXBXF`ympq?1E_*I}
zuXr-YP2=oxXLmbmLdT^u@Vbxna?Ti?uWM^z`$p~ZQ30^JlBF!o27FP??{K9Kr?5CJ
zI&4|pU**54Pt~hW`i$<faBZZ0(ipn6mujhUuwo`t55LYM?AHaHLf~W_5x9B=zRogA
z;OY_lI!j7{-%fX$asH)L$6P)<;;2=j1(N5O_CN_;2KsEy4?|UlB9m7(tvQ1#VNz*B
zx~jHfW}o7X?f>D%)&@oKbmsiEkapE=^=0O>cPkFrxknGU%F_;^iAr;MM>Eq2dbl0_
zzMvh518!saO;MK6B(tk3#)%VQG0z-Uy$U0aAn+SkX9CaVv!YX0VFEuZMHJ2`7vN~O
zJkA`7(nB5*Jz^&3II39HiToZ?-eZ3;b5xt47aDOf>P@&`I|_OQPOFYA-pTbAIIY$M
zZX~~RF8%$&%7T1!1^8Lb=S+_%cQKcqG;xuST#z2tpp~zAm2*`-B`+(yMv24V=^)&U
z<P_l087R5JsV)7obysA2S)Iof>Fh2(QrZ@388nSAPnWIv(e}RmYqUq>!>KuAsAi$O
zD&%t~DrOJ*{o_NKgVNKh53FvSU3b8}v8&^jHnhbA`gD?|AYzozruQf^Uf?9v1b(N2
zk3rj?WGN`{`;{?&J)YG)CLk5m>9aaS1S@ehuILb&QKAQ&2Rxa)>}e>#<Z5S)`2Mzg
zEVDkJ@VWaATYl6gmCooNK6UEhxy)Cn3;W)=zo8+bF1JcT`xZEjTY=wJfYYj7;JXWO
z(f|a0djU=oRN!|N;PD)OM*&U}Mx@_gfRlAo;6GI1{}W4Gf&WN_KgfL~@OujIXLI@d
zRRO+|!=EU?zs%u(U4UnD_>(!j6r-Lr9#L*qa*FmOi7xQFDLuw9aIFu#9aj3A#y;d&
zyg^GrCf7wl>{w51{g3-@8Vj+iN3iq*p3ED6@-xxbD2w`3SPWEs3Y>Vjz*S=aIMFO{
zra6}n^|iqBeO*d*$>D;BQyqQOCgiylbrc+&ogoVE=I;npQn7MLZb<v;Dz<FDF7Cse
z+SHZEa&ho(U%J6qe%Hc{ks#ae8gf`#vzAn*8+35}uL$0z^w}^Z_dM5MXgjw`dsrq3
zoZ3s^w-w+t2L!&m0H?7o@VgXzBj)E`&L2{O=9t141Wx%2{I&v|@)!8-0-W*}_+14!
z@g0F@`OZdY(`2E`;@~69Yel)#uOj{31^H0F3jB6~i&zkDH)uAXU!haMNrnkr;e!fJ
z^axy`XXP8v6K8q^&b%D!%5R|EtMP}J$IBE!z!5BEBDPJj?_L+PNL((~J#1Q=E{t8Q
zy4!qEiVf=}iz<fk{1~#N+R3Bx16X^YpU96dtj5q1Lk3|bj!-P*vTeL;t|LBuXV0)J
z-rKjPv2H|uU_l8OJNk7tUThGO@f;+PTQ!FRB7(vYO=TUv(9F^SJ>pT4ODBv*>A}{n
z#@@=ox*v=jIi9}tce`4*Ix^oFDwD>uN21*|^2m6=zAxN#?%vr82fFXuu)3)~sK~tI
ztP9aR5;Ct>R*HhWOBlE~R(Pd@-rn-gB2%$5R^y0-Du?_t%O@@v>&6>WlTFdJw;4-H
zf2=KP-n5YHO9uj(lzgT$6l&eKefm#-G{kL$D7ZtIvutA%rIGIqrUR2)gQpa$j90eU
z?Jj4@z01c}HEqgVgazUGRb>Z_fv9}++Pw%1d7gY3n0Fi<#C8xbkDobZya{{+<3!-|
zY8)ryXYmCU9#i3qDm;Rd%d_d13UK1}BL6)F_>~;KPmOC!bNC?@9@A=a_>mlrwAk;E
z&HuEb<A{1ia`?eq`m6GfStk?pJfp%R+Lm1Uiz@ub+U^|wtO}24r*imnIh^SET*0GS
zZa2)=Lc0DS_ulil_pZtjZ63c=fZvx(|3U#yGFsH*#T-uMXWKQZ<#x@Mk9p@^iBWrD
zk4-W!3CI~9x;}&_XQD0)Sda#zi9mhX^+5{@E$#NQvI>u5V81Gi?44*$AQde|AXF}d
zA!9VQ_{z#l`^_$CR2|Dev?cSjIeGP#UuGbtR&m>_1r*jAs+hJHqKO7a-*7=(n>|uq
zZdFLDRFU>Zw5F!pD$h;l<J>GkizQ-FXd6_~#`6cXX)#Z*hk^Jn&l6a}E#N%wpgkM0
z_8iRH_td<{N&JTwh+sZ6fno4NYey*}5A{p4yiFr=L%j5G=lG`kHdR+u_Jo7Y3yCc?
ztJjI>uWzJuy{*aI?%m#z+~R1MHb$d3tzfX-{on4VXfSu&xTa%tIwBhbRo03F&dT<7
z5f+wi;IOb*b*T1ei^*$|>Z{DQ%f)3BBZiuB4Y+0s2cVnYvp9AmMzCLlYP^SVj3A2s
zGa-(tO3@{-tcA%p8?~Vd0@PBF83*T5&9Xs&`&V0rjLXJHY>&W3$iaa1qdR590s4xo
z%Bxy^ZVm?Y&FDKj=ZuI5oS9m4WF{dUb_O1_TAMbt1%04RL?FJ0(T`<6XgeUKnC4<=
z=ZH+q;gDjCdsd7TK?oet?MVMq?7J2g!>ibJK-^E@^R(v-`BR);hG((B7xK95VlE``
zBY7P86FmYyz<bxU%ymD~>N)zTRv8^)GXZu~+%&#WB1365HuF1z45fR>gsOyS-YnEm
zdIpA7st0kwai$BNC~7CoGS|<G)eWK^L9f6S|31=_|1^(t`!UzJiruwJpYzPj)dD_U
zkPM=~FIuw2D3|KanEtSA*)(V#xHB6y=`~bkqfPtno=KuAj<KPk;i7B*hX|cKYqK<u
zH%3EBkG#+F%g;5*$}jYkZ08;ncvgN9Zs8sjcvgN9F64;7vvNeFe;q9%@T~j-E`3F_
zK*6)}i_$xo&x-U}`9<m9=N1?E0fjG<%^H!PxqPzgNlvdNIVI9(<rL*F<gCE6a+Yu*
zzXYC@UzE?6EWZSvm0uz~$uEIt<rm>5mR|zT$}jQ(<l9Xxzdq0iog_x}fE5fgPFXF1
znPr1=g)u0ggygIIocWMeNfS-9y0pE!vVpCu%5<6E$Xy)T+S8ro)w`4sSBQ|>UPnI8
z)g6x*S{uR9ysc4_!mBg-iV{x{hB=BSOy=pkUWOD>S7^1$6Zi_zw`NKSyH!)?ZuU3D
z6<HEe=z|=o?X#NqZ&BiKbM%?*C1t@Xg~G2C3V9?a#fX)9(4tvMqGO)(mG(F^<1k_=
zP#I9KZq}Q|2S*ie>%S5wTw#+Uwtejj8^1ST_&+Z!{9fb9LC_e)viNoFNsO8R(|9NN
zSp=&DjsWJ_h7?RY^HG8GY!mo`;I9f!+K9mS72w1#1%7~V#FK~!<FCO*8?c*@T0pTX
z{i`v?)+Q+7FiR@R!EYOKd@kK(@7X)3?QC}V|Ml==?0dBZtaVAZJgBu*lvtG(39>{G
zH91mHL*g3(-=o5Vs+L+5I7c-vYWE;LV(QVdyWwL)i$l_tQnYgp&vI&#bZR^+>55ly
zI-V;118g4<QPaiX;GhQfsT-s<BBs^B(|IAS&jnF;E~i8gb*C((vo{w>{h?%1BB|dY
zsRKW_G)}x)iKL#RNNPs^nDvYq)KIUT&!Ok2J(RQyIrJ$Nx|l=H(HcWZyOcu@v7RFG
z-IGI~qJB}*9?7BWh}$aYK|<kEEtNR(8#9k6JI(0(D=~rMJU1os8)*sUS}16~77vg#
zQ1aaeQn<}=4&qg4iR=X}URcIS7#WJEqNs9F>vuSBrPi=fBB~sH9RUiztmZ09YZ?P;
zJiC^lF`&jDqP34GSMEo-MrCE4i%y?k4(6iMrK`^=!Ra*LAwBNb{sJY#Z-f@OZH6K(
z34KjV+6#1Eg_q|2);!m&q^{f;xc*aCP;L^vF1IL}3FZAE#-k|F0N-x0<{PxkXVBCT
zC7+|@EX9AK6-o=x(>e4U`!R^>i1rRpjo#yk(N|Zd3*LC>7`2QJr9R7gOtwBMe{aqV
z1|ISf#p2ug!^e7;n|Fo(wC4Jl{M~`MPAU0$%iPHGs?dBf%C&yxkkI#tL*fiHW%MIv
zpE#bt4`lI`QsAT)2>i5kIGbMX;e6_pe1y*eb4xa|9whKN#m7PT6!Rg0A5r7XZv?)W
z#WB{5T&}?31IU$YWI6?YAeWx_5YZ{{)7kXQhw}JC3ceTYoOU}z<Z+^3QzxN*Xdlv3
zGE6_sDueb$Jx<^^>Tv=u(BrsX0$1xt7PdnOT&>4tSdSC9T94bOwV_@DKb+IovU;Mx
z^Lipqhv9Y*_-V}>s(O(gCvdeMC-gOetM#=E>uUnPQC}1Ijry9vZ`9WaSL<szx)eQC
zyeI4dLfgnd+n{|H>@6<THm=_hn)Mcc*B%USUcvaT%^1@ALcPGiK#P5f6LpLj7aTW=
zEhaMj!V;XuYOitDX&i@v&ESyg{Y^g8Uzjuhv8CN)ri~zD$z;5%ioUH&o(?qm${sUG
zC&TRnz9+4j`KC@+SBSQS)Td(It*h7laC1ZLR4CnF^_OtbU>`a3-*07M2k9-)wZujm
zv0hj7*z9_}(6w8WTe82`v8APD;?~x-K1XOvt+HB|+oH5t%R7}yOgY2bD?APE$|_ew
zrB^a%*XzoTm4>>y23o2Q8F{I04Ky^=$5h)`UeK5GelFfE15e}A=(EP_X~q(pbS2tI
zhR5~&m+d#03;hwj?r?E&-|AYl+>N_vR;?=TkCgaI!sdpG?pw=K<J5*KV#FMVpOtJO
zf53BiUeRHwO}DY!7x-KOPEuFk2h})Bd4Vr#9#rNMMZrFuOV4wRb^932J?JnkS$Xu^
z`=OtYCcF{z>P<9Uuum|xI1;VNs`9z5L|AN8#iPdZeH*FP*fcnL?~JW9;Z(Hv5!Kcr
zZikqn$^TSo2dt4G!^EB=;`Q*hfX5wBY?9#7(*Mmo9lb}g0Vn5C`pb}c*u#VLgzL3u
zrxb~S6<QWGXpe~0tVg}T99raZK*{Aj$VhcArzsblc33LC$9#`cN40w>HAzYS^-)Mk
z^*awSinuZ9pP9}kh0dp#PQpK8o-6PLO&<S-DHZsU9B!nYMW~m+fBGHxS)3tAv{L@h
zaLq*e1G)621^Jw&^rYutybWV_V}e(r%1WUv*`%edufmv?cR|yfu-nA;CFx{zEYy$f
zN=~;Y8ubL~1MaGtmQ_2K7mR~@N8&rW{Pq5tmYU=?qs_6`XsNVUc&mbq)&8bvgU{n#
z-JFR@zv<qU_OD6Tb=CzfW`A90Lt+wvo`{S@9sZqG534LzPKwTS(>+bBIeq8GrY)>M
z-E?;ot56tyRMI)^B3ieZdx>m2_XDrRXu_VV9R5>f+=Q>g&uT7Ft0SM%g7l{qT*lZ?
z=kri5{Z;8**1ANwOH?j;qm<~uUM}d+s(R;^8aLb0rR%lyn{wN_%Jy6CEV^!Mmu*Hj
z#Jjr&=REoSU7(uxcd;G;UZBz=1Wpz`foJsy#(C@tJgY|#F6=A<&*~8(J=uc<p4B4+
zPU|{>XY~ky(@Iz1S$h!U?9UK*)}KMR&^rX4)jJ3m_9=m9^$w9wZ!Z6*6g@@Y$8-44
z3-H4^{OJPx-W>jyIb5dwayk68<|<a>*>)zqM$p504SJi(Jqt-xqx3d;rAUDm4ytTa
z6pN#qZMGW?L|F=T_HMiBuDhc4s3L<pwpucS*n+3fa+c+eh+9(k?OB#P0?+D{Oe3%M
z1fJE&1nsou6!@ZI#r4BCiaO<RZUe4sjQ0{kgAx|6RJtweF)6G!H$gVCzndK;*i+be
z-9E#dt3+{+pmsOzI?Q=Vh|~GuwV~aNkSAhp3AuM&;k>C)?Hzd}ns9~89m(r<Il7xI
z7KbAHKtg46#3&E;1|!#Pd$dPwIMYFhK5l)`z^zXbM6p`|Uk7!{#xpT4W}@Oh5ID_5
zfzPXPo{0iqD8OmP34BT5V*erMpHyc0+bk`3Um{B>fh$^wNYD8TJZp>M^t>_<_>#~<
zl=LL61<tl8NTbiN>c+mu9DZ7?*c5tbMu_x^HgiL{ie-oQNC_W9o6>Ht326s$A$$n}
zS9}R#UnEOGfwM1xr6VLc(<AWHnwJ%+IbDE1L^vdo4>L3_e+DZ6q-k25Eg()zz!1tB
z7M+nO0-muKA??TqYCaPPG<6lPinzkf&Scw6o3C?Ax+-oi@t^Y@G1u5f)_0uq9jy)o
zhVFPZ*s`$E;;tX~FU{L~Tjw^mIGt;f9iz=AZ`o|5qhqwCd1+wv@Bd%`^e9@<CB)u9
zLSQF$e&;@ghTd!|_C@u15y_kE#n$f0pBZt(W^B?AhG@;INF-E|nN#kF066QFz4Nqx
z-6Usn-gF!pz^4T)=Qpy$yZ)kZtV^!!sR8*t?QcMR$2?`bjtTR$95rOyrC^81+?UII
zetAKa+2<J(y^DE7)DFw<!6Jh8!OEycvT;8)L9Tv{THube?Ci(9&ruF5HhXH>t*Fg9
z5e*-0*`d{?Pw4y`n%mkse{!eK>+h~_NdF)`lCqZDqZZ@zRE5tjS^E94uEvgASC{GC
z)pq+rbw~=Xinz<%E)*_nOc+BhlpP=)gCY>f*OyAt84E!}nj;-l8|w4RBR=)RBu@Pp
zmdmALz1~vq2&YPOZsY5Z|B!aV1Zj~E7a4r9Q1r%QK(c<vSFmElc+S$on`#W%11*@K
z!o`pJ{E<DYTDA_a?ueHLP2NCB-uu{3Zbv$b1TIMSKFX<WN#Byb)ZxoHAWyLCk)4pr
zSnh`AN%sz5EQ=sVT6)<<oFk2AK3RaY(Cn^9oWg+f1&)`m`{6|EmbU)(mSo?7wKW?&
zM%N>e-f+}yE30jekGVQctrz7ZYY(mtjdpa;*mTBqUA_AT9p0H^QaIh(TsPO#ID9Pg
z9y&-y)b;axGD->2Q4=)K2uG3Hs5(HG_8KAV*^q)8nge%&a6L=$P}&~#_>5moTS69d
zh3edtmZ9Q}YvcXh^PPk7GWVsprK-H7Jd=s|+ug42Q0^F&Z36>6ZEf4ys_cyz`G1LX
z53CsZ*nMue$r(B%FAaw6|9<1Ij9Q(nGrG!?fAzm@{#6BbiW}|a>n`FX$o>Uy%;k!C
z7c!SKkK9)kbGu_zICTU*$szJd7Dg;&#c$3HnLDhAyzAFREL`YLYD-t;hF;Py{Hpg$
zlCiX`+-2#0U3K8Xi=8dTK&mktvB2)tcDC{959&=)Too2Tv|W{-!Z_eD$&xuskoarh
zhW|d#C`d7uB(|@%1WTKWjgEj}Pu4kl!;vymu?@`#HPlswu6=Xe(K0wQ99-f(%v1+x
zAss>Cb^&ov7R`yggX^i<oq@sT*191_=F7<NtzDCgu}ue73x8IJ(dV7@wYGNc-<nvQ
zUHzlkq;i}LR1Z;KiXLHpP*C5z_6G%o+4=V#I5aFt<rHaXsdI+gxNB6Q8LGpF9wV;6
z=bltI6dpqa8xF0fKgF1%vj78Z>(1>wrh%S215lg^h>2Ld@K*DNreso%)!(~M7xo9^
z!S;9{R2hg!SFO$U4Z{_>(nw@{r_|(i1v6KI4m$$Lsn)~VLl}Wc&49vzv%L)KcYrty
zwJ%i~1{g5|X}(3%A$89yI}aZ1SyMkU8?TD-0YXvfR?7qJEw#ft+Iq)5leTcs-(F=k
zIn1>WKRI?n_K!v?>TG_C$J1P8GtNwn{&-ia+P(AqE3>~gZciq5jMT@2vkvb-+V3+I
zO}vn~PZ<}H#7tMvN3^??ap5Mvk`Vj|f)fk@T!L8w8;jDIQV=9B!FpvWl}u7g$kOU;
zicL37?}I1QSCuwjkhE?igq45L(q3;iE;^n2_L0-`Xl;w3tk@kwX*SG<w=h1M$UB@Z
ztwvp%Q-r&aT*O30o3$m=5MUsIHI!8PmG1F~R+7S{^&Wexr=@W!F>tH>AB?3Iv&mXq
zVQusW+x0`u8|UYPUQ2yVF%h)NV>nplG@JH1-Q7Lw>wBD)PQ7lT)Lh$Sb5%-2;&VQ)
zI}H{oQM8Lh6vB#~rLT>&A!-URN^}xQQ!G}+7eVH`iS6zEgMm<b&$_JxW3{bS{!06>
zZK@_v=eM+ZBk?I?WoKi2L%D8Mv!`)=EVk(K*{s$%uhZc+n&!PW@W%|weFEiT4S{lV
z10^dQm`{lQ;5CyXM;>h$k9K<6UE!wQVasqJ;I4GnyX#}yni@wNQ}M>=nkA#fyI5Z4
z_eSO_?G{Jbszs;WosQM6E!UOSh0>cLDuvY$f502E>jxgc>VhD;X^(z3@=|P)`OV$~
ziLH0`v`n;6StEDX1!{V278}TL2ivMc#=Ccrm8_t+BUwsXx3<@{qTc7>>6*YCb*eR@
zyg|ey>vM`x6lVg|F4s<4HrM49q*rG2uf94b^eb@!6;3@yE2h=$c)fSHfcdJ$0s8i)
zo?&p|;*$8*L4^zZi)Wo@zUN>npC_X5VsALpU3fwjG<D^iEbPh;LW2|Mmwk@*2aghC
zE=wQvI*&JsVngGDA^uBxt~0T9e^=K?<&-^GS<@4a23J{2EW@@p;=x5@<IZ)f4^B1v
zJ#!W1Et^wK32o8L+_#l9_gpJ+KA*;&Ta%{>j+}$?LDHXlIw~gna{owcyl>g4Es}M%
zD(loE|ITD+-CASyl<K^G^P8(XT4vg%lP}ix#bW)@7c=`Jt<L1uw!OZ9ug(WG(#$K<
z2|0}ZB@bc#w4>B@E7Na%>_+bC(CPALaV_6>@qW0F2m32(Eb67_HJlDZyj?DaWQ8uA
zVEqb{lP5_oz^u??U8vi6#mQgADxY;;r`tmZfZ>QMwbz<Tgq}eq!p<RPDC_R3)dKa}
zO{mB(9NdPa;vrxD4s!D2TGC}b=JJh{eUzGxD{at(wq2F;<Kj%wkO6+=@QLv9!g9?|
z(DKhdn=xLxgi&`DLv4cAjWT9AEW8H}(Aa|y7$<a#JXD)fjGn>xpi2t7=+CilkKzB6
zn!K{Kez9{K&>1J!`Fq*bJG2b(U3f;BG@f}n?+67o7goZ!osX!Aff}-bv#ndR3MH(t
zHW%GP_yx^7I89n+Ixhmp4W>9CKau9s?=W4p*s-UuXRJ`^5T%gzrw*;jZmzIbw`+Tb
zJgotT-&nsqu;0AYE*&<Rd}gE3k~t$ehEuM1&{+Cb=A}6t^T<4Sh<w7ddkQ^VSUZwN
z$5wagboVcx%jt#C1uX%){PMND0!Xb?yfVzua6;$EY5+p*xj_TKk#JGzhn6Q&Lu-y~
z7~D}gX;0SFcGgvrjDP0EG5OLfv(Fp14h-Bi%%Z$25eW)W&L!co2mMjRBLJ00-;X`%
zLKMM$++VO{Y1{F8c4e6DE}Th|?>PF(rXkW$)TdslPk&p+Qa3meqx0c58`ajRb{v64
zhhgCaIOQ-bIwKCP;9r^GvLQ)}vNIpq3z43)23|*pZ1(wd?&&%%Czi8|6;J}UFfUG`
z`%XH*BDf!hw0`i_q*xE8N%u-y#f;5z2k;E~nq4pFPsuaMvLz>aXu)4V1I_{qO{z}I
zQ%zi6{ui8!$990+$$42@z?r=DL2V1jE!?vdLI#la!SASZwit~rw}HyO?)1FU=1nga
zmmbsyqSEKE7Bc(FA7A*gus-DM9n>Sr_*Sv6Y!i^NLy<Z(=%t5g)OX)t@ff^r7D%xh
z%^ol0)<x7C;MjE586-XSbI=(V@Q-qoYZUe+2pk-bxNxr1P*$YHF{+LS>AR^&rz<XY
zN>?x0dmN3kH3z}V@U7{VnuD0HSHUYTp?|$uj;vO$Q>44H;(fMdlXKD>akOoS_$&cu
zUtqQ^Jsoe|@&l~p7t8H4lkujqiaAdh?mW_0NFz!@PaQ?hVX`F%nM@W{>WU~Sf}A;c
zJppR5N$qw8ONfyXYs6XNERNK5?O5M76|Iby_1fK*kh3b9x+CrN`vL)DU@+0OkhU4I
zWOGc!!Y1QEquCbT7)|c%J`(pghCKZq6waP#_G(sO6(iPeU`<&C%_LhvLL!1g$Z)(1
z_+i$OD-J<42NUH_NWQJ1w(?*2t~&=&I^PtDG-W=E*XyFKs55zIUqhYU6kVj&L-PBh
z17gi)rFxTI@=0<>N87do9aYUi$>?~&vTS?Q_KG8OC7je5%q7Y4@^ELc$rzg%9yz?F
zQCGY)J-2hoP;^|DC7rHiV{<zS;uVPeGHwfUlU+AoE_vb<!yhXp7%5PHP-t!eMgMrc
zX)@k6e|Bs4{^?e4`{q<~lTqgwEpt|`ay;OWb@qy?=9%HX?M+T&c)V}u*sbkVJ-b%7
z&W$(6Qi<l{ZOuFPm)T3~73+Eid%JcdLzUd#6Y}$r0#10*qo62Fk%Ks?8|4d{V7P%V
zUE3=c;k-kuN&a6$*n*VYepgTAToi{aC$}y21pjR$m=1P^GEYW>?ZK|_#lI>}&8;2S
zJyNUvA73s`?ONNvxVBdJ3+Zx8dvWGJ=^KajEgi*@rKo8Q_}0oh7}uvTQ!Lyb%36TA
zbQ;s7)b1`$uBtNn+r25`$~y0aQLn>!jSa1mD`UjzjoCa%UjD0j%q`zvn8yd#Msj%!
zF&$!MNNXS}pQMD4Vrt$EPVp7YC}k#)Q?I6QkD5;ygKGv_dUMoX`!>%Y6!{Bpv$7Hu
z@>fykFxPmpsW}si<3$i(aDZi}x;#i{DWf{i@;!BVY#+FY@?eckKrDb?<ccZow*B5h
zO}8a!b=v}M#<&!lKWHjGuGh8nX1<|O3vPz{O0H^5STzwpQ!ERr6Tr!w@Mi1AruLTc
zXIi8FxHr_0@=8}d-O0{r&*kN1oNnoD5jn|8RZeu`yuwsM*|X6g*8S1DF8-;*-GAp=
zi;~mw@?~=}(l^t3FJ*-G`vhw#I;m4c#!~yGeb7nC;s+K>{g<yI=8ke!Crf=>?kvrv
zf%R6qF4Y@0edpPoeXGJYskXSJ#AFV=IN8~<ZBTYO^xt=sXOTfy3}=b<kRIpLvK9PE
zXwukWsFHlyMUNuyvIcRtVb0jLYs}tkOc^b{K*@Y*YtGXCNzbkAMws1d8Z#zRiIF$0
zCody!jM;qNw4PLFPx}!K`K6`XKugO=K{3(ImZ{o&QCMbP&J~9BrYKG0;5be7`J}nn
zSstmRaA0OUP3M#1BxU7%(y^Qq`$hKPON;En&ODI!U}Id=LqB*IHHpz$mh9PSVtrXn
z3T6>ym8`B9^aQqThL}}KW<`N<W7vB}YoSglhot_ftZmn5L6Z*Rh||bXzqUy6V${1s
zq+RjRsogtMs#cb|z23`@(ebA=4;+vhq=C8>FG`*+jABy8#TnV`_r=;oufGH;OoNuy
zRm)ZPc$d9Hw$%yp@JjU{z<jh+Tg2Ms@J!Lq&Ye3qm-!az%(FOXbs}DdiH5sZQ66cu
z!mrGO8qU^2*$~A)Lu?^2$sZ1Gi}{*dBd+(XwatEiOR~7s_MU6hY^fQ!!-(10uxZe)
zJ+`~?Kub--fhkwazWbQgK2X;%vw?Kj2udr(j0!R*791(dg0iYpnr0Qrs&}Vmb-H#$
zK^t5)cdDjFXV4kkP2J-S69<i3Hkkuf38JwqxXNztUF;4^($V5I>(~6jfkBMgk5IKY
zQL8fi<um1lJv?NU&g1Y{Ny0hu6?}SZ#`sBOjL(lnYH8&+=z_n;H>@=99vm*jpbfZD
zB9hAHkgx+`O-p_X2gu_3CtX>ka)4}^(?kcz;`SZo1lf%7`ZHvut1krC*43>IzJMZ#
zPC0=wiPd~aQV%>j-Wn{1OZQ9W@VYH+;>1@+oyDF%@l`HfvpGx$zPba^OeG!o8r&TG
zN90U;mRyXQ5HBt?OBnX}wmoJlDwcKTNO^quW8Z_)&N<)efPdIKmwD_#Q1umN;d^)&
zdZ41$hSJJ`u_i5R46Mk`^rdzBuX6{;t|}{%tgA}RdUNbWL?Va0%7L=U9-k41Y3mLZ
zt%3*TtCeS@FOYXBt)Xg2-HS6vWfw}e80fOhTUld48%QTjAzN`pab@6zK|{IWf95jh
zEMJznjFFACb&byWrcS4!;u&u>oP~}RjTwg&E2T?Xsds%{)Z5z@u;7IDm6uUB+>xc6
zZLbJkC3Xo0WNhzHWW}-T*N!i_q$6Tk`690zyOUz&c#PMRg9nF^`zO#ezQOnwF*yo{
z$%zU!0A@oRaXOD)-&@&gB1JarsEVfdtY=Nv7IBog46NxUw-`x{t*{C;*1tN@xzKKf
zB>)<3Lk)U)5MBKt#t*Lnaxqv@Zagl{Fx0zdA{6#j_j|iy2iGPxx9+|zE_F8acLjoh
zpl3ds2#ut+|8(G68Z+G(Go{FlBrr#YUN7LZOYz2z_4jTV+Fm(piTmU2@$TMlo40q5
z|8O7?o%aNL<Kf|!%&RoAzfdTHhD}Fvz!Y**@<?zDIrm%k$+jElEMBneb{?A1FWx|H
z?c5=v7qf=x#hyB)j9gPIiU&z$7EViCM)CF3+ms?|udl=+m#}gT#e4v*5B3?Q1g;8m
zV$OG_?v!P;x8js#eQ(`z-H&a@D~{Wa*S)b*KfP1`=9>%C3vYm@lSg?Qaw(#7Z_*Tq
zriCn3^arvL9*MXfi%iakW8T(47@N$$kit(qk@?`8=9<c6pe5{01e6F`9eSr6dUSzZ
znXUO0vr9G{-U629+?kE)U)^*|)6@^w^0T2bUhDMP=vkd`R<{P6)p6s&rTJ&iOx$%B
zJ<oLS{++(|I(nw-AMrawE%c$b2FKRQC><pSaNr>CKqZEi)$pKY75)>VN}3t_ll9Ax
z(*sh$jR*3dXbb+08xS_HmyY1}pCgBhigLFglwNls0(|yF#mnTg$8FzGNHk&j9LLnb
zj;4JD)MfD~;Y2m$&5OWM1>S{INTQIaEZP;tf{iJp6Yxb11J{vx?)u}<>o=~|=_02=
z`{APU9No5p!_h@dA?|ZvYP45D&CqY#hTlivZ{4`xL-qHy_{}RpvkrO`&a1;HRB2IK
zVQ_%qCwE~IF6<f>`jXRIqFj_jS0-gIPs*BjJYnU|r2H*PN65e;v+w8wa8tkH#i1FK
zrf3LWx(F_Z=>x+KmCo0#@QU_aauhqdWxvOl47W7zNlfq57Nveqt8<M+;9EDZ?r<wR
zw~O@JK&8ckz1ve$2(-!kro|OLYAqY%9orZ`y!(iD6oDf;#f-(7uLZ8}WHb?snVPWG
zC{dRW@d~7)CA9U(+~N`OT*!;<#mI}S%Xx=PurBX~d6RuFZ$e6vHTM8ZNsM@>5=#U{
z-U-VNuNVdMa1t$$S5C9N%;qUZOoj6uU3rOjee=j<WURfadSZE(R__dz`pYWZ0h8-Z
zZ>!xGp6IV%*JzZ^W+GN|U@L-~v>bQx0Q@|qI6W0oKmyxT)G@76Z8f{1644V0C_?yV
zAd-YPF->13vrZdLRJ-f?ckHfP9kHc%cCA_8GFE46@l-ci&Ux1~d0MQ!>((^fHWvz5
zBG&dgyIXp<%w1-04F{U8UEQ&+Z7gl?h_`J|tsiJv*Y5VFoT2ep*IjL8<wf_J8okxe
zSB8p9+E-W5o~bZ+>$mc$-{wAxk8pKbVrq9hITep@-d*eKidH)D@ETihpIG|y+vD-u
zH!UsS-g<P?xn1p%$)D{?lY}*+HC~X9lD!=3NTCywRov`3K77d5zM<yu;*#gMG_z1r
z<;dudqo1KeN}q!woU=kVl3hPqp*$K)mYx5@)}Y_r;2CS))v{xM&mDu8Ju_p!d!Wr1
z_Sj~lb#oKFKiJ!Y`{Y)>K>fZ%Zi3_I^_55n<DFKbw7gRZe8rLZR>#ri1<#PTG2!a#
za`X;)!hU<54+s1ux^78!tWPwqK4?t#PX@!0pgUw)azx!8pT)8maz}@oyC*$5`*7XB
zHr(ey=Tzf{=A#%Hu;Rlb8%Rs+6o@9W+Oc%%d{ySZI;6<U>(;o|{L5Vx#a4sP5^<bg
z0!u%C^yqYWH0<m4p)TKo8=H_9I0t4E>cX0zr~#j(oKyPV=~!xBNDfB3YQv5|pmSVW
z^nBnoxywf8W9xSi;ls(6NTk%#A`PBe(CfBr?%FvR0=03J;6-bdlm07W@Um^Bx1r4J
zD9#xsvYL`fel_B)43<|_TI$_WXWwjM>W_ET_cfXp%0iy_l+Cl+85^k&^iKUR%`K6X
zGg#xQF0p*rxo7Ca<-Jw)RwS6(?x_l{>uTCIjCCB}8jky5#kj#-2|%$lX$`ZDM{mu1
z<&j>rt-G}+YWnm4y7Sb+z^VIA4PXvZl&lQeec*N}Y9ZcXo6dR5*)Ez5cw(zNwH!1Y
ztWYryF!S*Ji_l0<WMhZd*S))|aVp)@7O7u-pwe394tZ<q>H>*$volm<wAA*-`nNfB
zRsA)cn;U%tZJk>xb?$X7om-lv<JMLTiBO=rF7sY(t-s!DZ4Y^4Xj?@8OTWpstyS=(
zEHl=FP2{Xt%%ITHyq+N~RR5M})|#ryfH};qY6`jITdeLOrBxGsJK|G+Ed3kNt|e&W
zwoD(jtF@Bbb+nV(we$8hXl@Khn)SGs;J2FfpQmTq+P3aVrne`P(|hXu{q=!LdVKG!
zCmy(j-h)*tH|Hnj#C$)Fja8WJ*JyUqT>l7keD7Sp<!4h>mC9V-dPnE(zUOZ?*Wtta
z94&kWx#{KBZz)32gsK`rg<g&q(|(QLpw=`O^>X4X`du0ASc1YMgE2RO^fvrX5{8zp
zH0ET(MB|~YS3S}bw(YlfSpWR19j6wipZnXb^u99U@IJ;H{;l*d{tXKW@`G(a^DcHF
zU=^)MKcQ0U_vAEHqe?|Zdwjamt@#LVfNK&{5{n4srBZY6Kxs`&drM<$`yH=LSM&ts
zx|+J4j>MX~#;A0PoG~KuGAa+^R_=b(a**R~k>_>zYNoayI^SWG6_E$Al*C)o0_lXf
zC3zWth1NYOKZ=uDEu?kdsC0KO`wMjLi)RZ}ZscL+U9B3Chm-8H)&j-d?4R7z>BzOl
zQ)i`cW<vUuRraPxWg>_?wxM3{$xmU81{+JdSI0b?-5zA+&>9Mt0_Te&t<BXwk3TrE
z{+8*z!DPDLa4=WE)#m=DnyB054bF^AjyCl*H>RRjRb2pOX=PM8jz3%)_gb$Om#6Bo
z%XUScD}8c#%MZAO`?%C<H<enFEA9Es>qHSoRk6}<RJD^dhowoJwf!i0Os!<nHypOv
z9`*N1lb6q)y^LPP@7VA0D0*o<_s)7{&-AP`B(<QYAXStmr7K?TaaaS0Wjs^Un4FHg
zqG_+Jl|qeiX{aMHFyChyDr;&q)da%rG(PuAvoM;lf7u#^qzwi`s)djKgsT<?Vyzr(
zN;E`b$!TeJ$kZs_=FC7HsF3}jA|h{K>NY4l$B?t!gq)S#wDP!u>sNMa-q*Y!8|3ko
zM=~;U03yAvc>yUmaSof5`qg3#>!iyhKhx1P&g6BT+he=Xa$+oXe(ApCgBOT?FZle|
zximP#-!O&*y?bmaB&a>VM6-hOc>`%8@@CF|v$A&r?@E^$pJIH9aOCONyeid7DaaEI
zb%)>erR&wDCHf_(d0l!&Y7xH#3_+W8#P<5)qWDGrSpAFqbpDs3d)2=bjpTnR_Njj{
ze3t)3`c(Z3?oLEGs0%2da=>4<^9&x<d?FP~Pogyk;j8)*lteT~q`33|ah!C)L|aY{
zhX-SAYr=y^)}|xtnupu*K&@8ZSXq*uSb2?VWdOfRTBO%3=eBJ_Y2&#2yjH#+xzFKF
z=U0*T-4%~)S@~GuXE}N0)PIn^eUr04^rQaXd(z3{pL$cZ<1MkKrtzcHZpoD~>6rW>
zS<;|>^BTmdrwb(<&Lu}Ab;pL;J9Zh$jnDNxvFXt3e}8M!{h5FMY2A+PA)@XRyc<*A
zjixM^`dli>#D4MGqO&G-$8$}8BzgIzdXWpg`}N8m=?GSf2Gk7P3(=K^;-}v+?>w{9
zazQ&gb!`kCFF|JPk@hO7SU*i@9hTWMv*vf6zAz;}H}&n~R0kJQ{T@<b%bef|q?SfW
zgM%XuavIq~jf6gr|Fivz%?N<cr5np_<yCdIcteq1S7cZf>S`Lcn7yuIgR$6{sFQrv
zWtK9t!(_hD+~8Y1n5uAwF?U+s)y=Kg{98Fy6^)F>y3-{(gFoc%8|boG%bD(vK+!ru
z5uZOuwBY|NF@(}g!EwYPsi~br7-Sh7n0}NF`}?YV>E%w7d8j=GI(@aa)>w|t3sm^}
z1};1h%og4hV=^6Kc~)xmC}dJgzPK_6&iN{jBq;&*G`lDB*s^x<+lQ$Ir&sivOY#@=
ztFt0eF+Kl{_Oovx_9e~K%ADqF@tza+uAb{&>{Z^9Rd1met$0t%@6ONTKK5rb<JVr7
zUdePLk6CF1cBa=!;#;HO7qmBoc!nYRbocmt_&{*7_^|O{WVBzJYG3Re4Ib7XHBHnW
zsGq~TqbnDoRli13-)Y5LnDsbhL3?cJG0!8O<4upb9-W<#zAZgodhsG286DAFth_^U
zM`?P8AN-<$-ZmVIExR5y2Jy1z-WZ-H|6`s<T@%lg9ycC3WD<Fq4jnQcFMS5G7MlH&
zSfxA%I}4np7-3?aBDRJqT0nuX%m*_v7LRynX&&)HhBVk$TKCtFyN1Ip^*ufHoiRg6
z(^PxQj+zN;yvpKg=<jc6Z!S5or=ibhw$%4lm)o{A)z7<P5sN?6JlGUp?=bl)TE`n3
zqT4Kfi=_g4N(W=<4IX>t#$D25&YG~J)aP)9L-vv?$mJol!4m8kTAJBK5bdPHvet@|
z9{bNNpL@0A*6!A+eO>jl6Y~4lB9f_LbN9MEgVmWNxC_PuM#~rA%TP$6b?jC6GHiV~
zzmw$MTE^EZr_4hO&>n>r5Run0zD|0Kc_7jwK%a1tew~DX3FMFTGGg6x>DN+vP(8^y
z;!}_vSZ35j!59qJtua}vC=~OO<$&WTq9MGdT3;aT8)>{N)iIMmdp7RN3H#4WB~5>?
zCmiwkf?m&btUf%{5+6-BHD<n4DHs?#u!Ts6(ASXobdG39>o^0hbOgNS+A@u;MLZU>
zzhe?>7mw_;ymOyC2bM*@8&_VHNUO#BWWPuljQ1Tuica~tYs*uZhu`A&8Sy(f15)Ua
z`;jx9Q}P@#pqSJ>(%a1OFyalgZbTkYsOiN|OHJmfGgFpV;%DLtiv$a#@kv~g?1KiH
zC6p_4V;Cu{AqT%8H9dWl-VqFw-@$##l7sm#X*OKX@oCg^2<S6YnJ1_wC-I$lFQ=fI
zJ~E7&P6M5p%1j~!(W?1Sa!?BJaN^+8N08=%^i1Xnsw>fDQ-0^VI#9xq=?hcR3^Jhe
z?7o&Chb^-L{?~rCx2e`u6h_W{k98n(Ne9bJUUn&FStY)M-8J>&M~B;Y|KTM6IkTZ}
z|726+EkokZ+{m`t!HL>Xs(jGsF*zH3k)Wm08mnGYJaX^Ern7syls`i)TMiC%+}5r9
z8JZeto9^)kv8%Y$-%%5;UsX2bc0yZL)7?zB1i+8<y_91hE1P9h$I(jPM{@Vb{e4>y
zW8yXYZH>|DD%<yyIw9?A?&=z=nSLS~aKa3)(@aTpa@iZ0{dBS-_OwfC`+$htRg4GJ
zjBtW7g$52u5P{pFkfd+f)Y`VIzj-1qwas-ku8FMaXdH^JsjA)Pi@02_ZnMj1Gg&My
zvy^P!l<eFyD4xld@uv1MJklH5U&gha;gXTg&IOCnMss{v+9SU&KaSA~kG_@HaX8o<
zF<v;66Qc|+2y6?()-c1q*rY|$TgGFDyARs*I&bPw_kty+n{V;!bQWpPN3*jZN!`;!
zL(`d8wjF=!spH!ycOT^QTk<oA#X(#HbZ@r9kUDVFm<Gg^k+y=R&kdzt2zOKsR#ykj
z#<0~L>WPHn)=s0>WHwin`R!HVz8~L=s99Gq6||L<=`E}3eAV%4ucg~)F%=ui^ybo9
ze^p!1cq7GeX@~q@<X^%k-pIYAcuw*@9$~%55xqCiC{L!xx^HO;wHSL1w({ykrLDqk
ziYBl9+0AI%G1T8b8+Ti~SFP$uS67?Lx?5LWPmNX+m-c8i=$&HB${Nt4j9ewQBoYci
zmfS#x^m6~)*yO%xy(!$}ah6|u|7PXyk-B>aXXeM+T0@mzURN;1FHGRZp~v7oz)GWt
ztwVVW3l=_P1LyURU;q^L!pEOt3^&PwL-;6qg_wcZumzouMz(Zn=y&Hk#(wgPoj-VJ
zV(8#du(MQW>G!4A`8!AJodKh4o=cWkeeU+Cr*nR!=jdWjY;>l{)$girn5@9%sXn8}
zQ}1$ItlxZm%f1)Rj!)e`z5iz;H8tMw<Y3FpaJ|D*`%!JAdFR^L)KG2D{`1qT=liRz
z<<oYj)Nga0@H7qjDq#}DY8wv+ByuHL2+7|jKJd1oF61es4@G1nUO5EfT$6r$lC#Mf
ze3XB6&UVgp&dm5{o?l#Cd<_4?pXZ-{Uh*!IR2{><w`Hx2HNh`5gVGX^3lhwfxF^T}
zSu2oEASXD@Unxj0-nx&GrxhfHG>`CGf2~S$fstnvWCCwJ!f*XjL5||BXE@D81sO(~
zQ=H~ks(j8c@@y{6A4=!tPe9@0nj>-xXdaeJfh+>~c@~i_0=W$22?Zg!GKukGkpD)>
zCk({I$a4b0StTiG8}A^^FIL`Mp>qhsD}$0w^BRz+1hVof5EG~QD+PHSZ`l}mT0ve$
znp%GAuT^Qnj69<tAK<N8e(RS4!OD41>f|&Rl{9Z7jfK<vN|ld;k!J~k#C&t*7RjS|
zj<wykP+Ou6VYc>=eelqsg+qsa{^Qwu@16ZIN!~YC-bXrK2OHV~_P8__nVp3V?ah_r
zz|SF0{^yz**qDB<c>?Iw%%_mkVQMWZ2gpSr4>R%{AsC%>-o{SpJmdwqGIU&C3PL6@
zf8<>riaqw>=s<0JTW54I8sFC9!;Pf)7^Car>kbZx=g!UR0yUGP0rD?QgV+>yx~naX
zhuWu2^>Odam}D8z+bo%*q)8xMKT3!8MR6%?M9LceNtcFdVVqyY<)@zV{%~)7-@4({
zf~~iAceKK8F%9|sy{W`4P4m<;u)<5j$O*hlXzGd;9{z+Ia^<=`kREl8R@Qo|s#;A+
zpS8m5vbBVJYtqA^x>WsIV=SDicbD6pYpShf=3>*By*w4GNmlriwe8qifIYJ)bOtpn
zqWO&}jrnWfhyb3>d#8%Mx=ww?-x*&#-`HVpH$NIVHvRcz_t&3|u?9udPUCH4RX{Cy
zJ-`)02E}Kf*PlzS1DR2m-(@SUEU!&{X1U)~QlV?^X<WxNR^e(`LrLV7`6jK@(^kJa
zias?V_ZhTBDck0hSXe}`tGZW6nS3!v9hUOSpxfzd=neGDrz4$?-g2*V$YzRK<LwP=
z?+<&b-9g)9^&_#VgPk7FaC!OGRi@5(!<t(3HZ&n=A8G?FRAr%UcaHTuYLWb<sljOZ
z_ET%-d)s#JA0WS+4)hIyzDh{zIJW>~pI9Vk>z(xo<OT&ex<T;>;OqVUqv?Qbw$%<s
z+6N<kdu7AAQj^JIEVny+PPZ4qCdQt|XqQ=6UgHWTs?v?YwhCQ&eN`~!|F+z1EHAfM
z${oLUTP+TwBV6X@wcb^%R&#BZh^NJ{!IDEP`_d{8rI;OO&|cJRu9{9~Z+Vqtjnx#f
zwRSX&)Nvzbg0|wY$Cvq_(oM}(THe))<`ON421C@?<C0nWm{!Mm3k*pvC;S6A6llDs
z&uE-&TuhH1zU%)j?OVW`y6!x6?$yJVWclj-vfeLSmTg(GB|n5L%MWbX7{wT4jN>@Q
zIId%eLn)z@I>dD;p=lZ@!=yAzvTd4==_DzkG)?<4X@<$pWK)u|OgEFS?R2{N*ls7A
zW@t8Frke$6f9KvSV<4T*ehZeabac-Dobx~b^FROBIj76J`N@gui6Eu)cZyF-E{f$s
z{G6c;q~c6;D4kZT#|$=i&xCjM$!#?g0dL)o7L=#u3Ycxnk|mzUtT8Aitgc#*%~@OK
zws`93i{|}h@qpwA@<NB?E#7PLThuiTQWMTGvin9>QV5QBT0DUoPtPP>iBhoqJ%$@X
z=t>kLQluP)y>JdUMbMQ<NC_ilH=pM(#guxK+Q+9nE2adI=Mlctb8GS(=2M;*Q!*&^
z2w&>EV#+*9o#OMH5mTroaxb6fg*9;Y^C@S=lrhO^lEpogbWIUjXpo$i6!?^LVoFqU
zO>&MbBhUB66piGd<UF79qL`Ay9vixgTh9C)uj>xt`!VKK*aiP9uj7_}*Tb4wvJQjM
zLi)Y!2yYO<>DqYwj(VfFT*{4S$EC(*iv~6+slMD^$C0^ATgN>qi_Tj(S8cM5Ypt_t
zb$7yI!rafG)~DDMEYKc74yI=<tT`nEPVH5W2%FgZLJbp(i00KrEs<FKjs$8@SGY7f
z8H8=K-b*e{Wwhpw_Kw+g<FpdahT1^Cw12zNU&Jfja39<%y~_VSnQz+G>WWr&lyNFw
zv`WwEmA=XrGS{1KpKiBSb}7qy>YY_8c@K@;WT2nU;k3{j?Jr5if{s8#2l<EyKF%9x
zdR9b}0;<8{1n`uwQas7@WjF9-uFOspnr=oEYNGA`EZWcSb-&RAy6pI9I2)BHL*Qou
zANWOPW80RxbfZT0J*L`ebh)e6wNGRFxk2YAa~rzWZEG56wl<VO>FMPv-;|ZhIa3v#
z<-?GU?q>&REE{wlA;4Hf61^MJrx=cfHFd1Q(^^~O_sX<oT7!&9>XI?C_)%V_@wNN)
zgRI<WFCYB~ZElqOBV?^td2cGUC5x;nSrU?Y_Q_KeKhEN%21dgV9DSaMsln1@;H0Lg
zEfQ;7r7dpKt#PRJz*tqyKN>B$3PVdBr(c&`x4oSb*ozzbey`HqqgH3)*boF`3i|UT
z#)ppjO>~8LQl42;ldB>Fg3_~wxU;5O%G4|d8P--|)7GHu#i?$sy}njuQN8hFWrYlJ
zDwlbxT_kFj+6KUJ09SNK3A$+}yO_0^{D^Dtg#cl&aE|P;S}lHy&Ef~={%?}^__7+>
zCIKf@9{>=!To_gXOtsFd_f%GJ6|(GNw=z8=LVQnNzCmuV0ql30ddVMF0gHWo1${-7
z1nn!8*U<#NcQNVQ{x9EgUtO4^efntcpZ#E8bzT_nIkYB4W8#F$`G$Z}K~OOF{>NHB
z!}ct$XUb(V8B^{cb2SL{)sSt4C$VQk&fLMms6r&2@Y8O_I0NOVS={UegCgG(9@C;w
zvli){o#Rq-v)An{Gq-qZ{IZ%|0k%w2?$Flk3}67t92^~h!HCi2vKjsL5tH>NFIRFZ
zjaGm8W!&RXMTep^!l>J_wr)BrXkGNo7COFQN#>+m99^kZ99#-p99vG!53M-Qzz5-<
zz^NWL&9fV<2>AI~>&E1kD18gM{hZDf0GsR2X6|g_-^P04mMZ$9JR*n@e+m%keeu)>
zx_WpFzeI;1iP7y&rDIHjU<*=n1JB#)4Zd<I(I24ft=wRba_^B#extzL%=(_Y$r8Am
zwTH4&5fjtQ-%w90KmNk(QV4rY6q(L(!s;8Vz$pDVxxnn#1u1%)ZC)umDJ4ehf1)rN
zz-8`6TOpUC@4|egEJZL&Q2sB#0|o@6#CN^x&Fc()oxajxvxEj)gX_#O&TpvHc=YD*
z1~TWewd)KODwSHxMLf|?r@m8Ts#I2JRTbf2V;VJ%qQ-u<lEyiU6nG;pOMYVq$Lq-`
z%UEl<Sk;6!#|>DBy-calR))!3bB)TR+A}QOv}tsotX$?`nT=8i@<f8#vBI6_DT9{?
zs4or@3!QGIMeI~fwTxiKORX9USF;E@F(t?xh{CFT<HrI~6wZN6D7@{!*9(AGj+U}<
z(Yo+R&3$shhC3FXq1ZezJA0yV4tejzjM#v@u<au+SSM;k5G-FWBAgY9eHA-d1?x?Z
zmrGe!^X$V95tel}P#8yNW{%QV;oJk;wmkq?cBK9Qu(W`c42c!fsZB}8{#eWXoQAbK
z_J1jLzgEjSePr>4Z^W9SiSK>Av8k~M<^7<)vnUU<R*ByvX*4<*FVG;D&uE=mccms+
zDNin_2vd`pKjZ3uPgXu8w^fi$f4*bKpBKKJr2DTV&1lJIMGQcN06MWIG^?MO=RT_V
z#^=CW*8Om_;|HV2`B~(Af$gH2l3oZvxXJYZGWv$c5p3ApTA$MPDxG>)z*mjw{%vP_
zFq&`h+HzV`$Zo20|CHK|QFRD$cr0vj(7WPh7>yOC$0{?OnSXlhwbw}GwbxK%ABl*$
z;Jt|}4&yiBm*N@81<5bTWwHPC=nWj5KqXhv4s!s9YwR;zzH!>d1$u@?bYb|$p&FRQ
z!;*K&_t1AGjVsqvp@iCcj5MH$ssq3$d?-|(08Rz@_GOh;#d4gqHeTh5e7c;-2&>d7
zTX!BUSGn6sqe-W6T3t%r`r3dyUQHDHjUKbvW87c(KNi2v)gC~dl!EtTMw><Hh*pGc
zk(8%Flor+rIbBVK&ivK7xJLRt;s!12+^&?Pt*>>9`)&foL+>MVxh7jg;kPNvdMdfT
zzIEH;M-(y{XR@FkD#d&O^*HD*Nj(kl6!~?j7BExMvc+SLB5o)#o-pckE{oUQ?QPG<
zePdE-WrNKh{ZXy2O06#^=cBDQA~)$&s+>ljXg4@saC4T1dx%YIslfbX;BPw&@6Gdn
ziqrnOEmzkcZtt(__q&63yDMZThx<}>xmvvSM+Td`W>4H_@=}O$$tWTTQot6}0(kKF
zk%1$Rr#-mx_;H~QJ%RJCD%(I`uDe6)vf<#BresyjxV}46R_3xbj5J%5b{rqP8?Fim
zHa(8!6W(y$fFs%0VOA;E<&#{%fUm868I?+@oakuu_|h>Km?r_<9>WgT5BM`zFarcu
zT5`r==G@?<f*($?Vhj(trp@d8ebw#l)pJ|)bB6B3j6QC2y7`2y#$EHO2LDu5IOV8|
z#5!?!Rr$<<v11$=EVghs-rX>~sM>+Li`RgRAYz!{{ucJntkG6i8Mwg+c@Bqn#T8OR
zTfg)!12#WH)JWu=vz*K9PdsMYqiA@?GHuz^x*#jpD%Rhds;e2nKA%3sKke>GN)da-
zM@RKDpQAfDR&9khO$915($})%XysAm(aOb*-{Pd@a#rWpWuLsTSb0>1bjQ(L^8j%_
z=*hbA_h8}I1I@Xk6gvEGQFvZzdEZ3{Hg}LF-q(6pD0FIh;e}w{u1bP;e_GbTMH!Z<
z<Kp)5&vdr*TX!pMhT3(83*2i`<`nm+tghM^*5{h;R_|TRNh_@CoV0JQB@r1kn_KGh
zCR@I-*{YwcgHpmsdW-KNqU#yRYgoU{A~(Y{7vgS%Aq8KnLctp7IX`dfa^r*hyLF>_
zf3s-<OH<6}iF$j3y1_twC}Oy?V%PZQ2M3jtlZtBVs7fO($}O{|D%qVR*Xj6YZUCeA
z>*7=BHN2N4YYSym;4A#Dhnp95idhZQZAls<W#$Tf6@=CvQ?5+so*y?hnxf@qwLPTN
z-)Wjp>Eih*Rpp|z%+S_yctM`JcdJ^xTc!xPQoAp-OeCnCBT+nt4TT?I?XRPrn45ZP
zE_FAA)Ap#ULB%UjwE{7Sbi1$_??K<bP%Jt8<q=ntOIzt_3faQiU1iEWS|68--C2#)
zGOo<yXQeaVsI^9=TjI34KJVB)viJM<Dz?us()lH>(a~2~QTU3?q?xStG23ULA<vU}
z7`I8MZsYtJm5dyduc2?yMTx$_7Abw)N*S2(YskDVQ#sA`841G-aV^rWomr9CU5$#b
zamx&|o7+|40?F&!LOHn#L?P?m(ZUmbT|BQgtC)N!0J4|JiUkmcmstVU=sEJW^rS$&
zA|7I?>_SifH5=*T%2PfaBVVW)Yc=d{a8QJNSa^LGm8P;+8amb4vW&8;;kc=hMD{jx
zX|iQmbyveN3%<T4Rhb_RvF<}|X^7G6+jsqg_gmzV7Ww<{O3QxpemauI2j!K$`_hp}
z1nrRXbACT0c?-4E!L5pBP{SzdN5lr~_1IC5xd_(nlMl4&+C68RHZ>-6as9>}31@hr
zVoKWDZE{B|X33rj*|$A??b9v&zDtZLleyx9{3GRW*UZBw%wo3tC|@HGXy^_-sx$E3
z0p7bx_oYC>!6Hqqj8w?*DM*u7uP^*}ds^LMJ5ulH{*2w#_25WM-8%Xo0>sJ;)Jm(%
zO|s{tF#1W!m6er374f#nh`sQe4?ZBa!f(<zx5gop7q09);c}h8i_$A3e#9Am6Oto;
za}Z=3G29iA6x3}&(Z6<E0$n$;Qql;em)o+zRIl6Zt5hn!%pFlKE4wwlBMS^;YPD){
zQJm4v`K)I-a)jG6(3KczLs)j&n~%kE^1`IwXr0&SW-O+Nx8+wuL)42&aUTI@?BEaq
z%B^_p3j<&V{xMzn_cfzHTL@*{C+})ix0bi4TdK~k-=R#a8;O*uSGV|A`kd7Zijj(N
zuc@wTOg+y??;*JsSzU|l;dKLPwNaJs>3o$j`Tg&E(<&oWK5C&m#yI);d-L2atu!T(
zhgJ=-PoX$t7}zxQg*yy$hCs7{GRT&p>PQ%o<CZqt-=?YtBF0^x(mr_4eb4QzoV!Qa
z=mm4!u+*RFlgbyD3zse7G8(t01&^*|z9hjG23{26*%WvL<yO=hu~t|Su)x3b5(|ws
z{N1)ORa0fZvZ6|ZQzD<y8tbf0j@FvHQbSv`t=#rXxAr7=&0?{)=OgZcKJ}*VYEQph
zV^-qLt*^CPW*m{ho@iiWg;}-H<}lh?ci4PdaBa%X!pv{LwZX)1;$;*cH`o}sHu%@;
zhK*bAczBa`R3A#1c5&R0#$J)D8S)u&fepd9b=Pd=!FxaRy@j%|NsLXOQ(f36GgM5%
z&A5Zik9f#(W&S?k0+wY&M6b|w0==g*4G+j`kRIsz#B(A!mE0kJv{+)14(>@!ZbViW
zOxegmZogLB%VjhjwUei_<+}3MmOPG}+-^LW*TwDmSikv$*9oEHTvhyl@ng+}2P8n(
z1$vGg!iAFj3*kd%a2m6MXi`Jc!$T{l$LsrSyDQe)?hid>IcWQiddc<|Un<LYIHw*O
za57iCndX!y)AZMSJ2RWsWirEnPv=z|sG06(T!qVbp#)p8V*ZrvxO&cZ%=@^7T(Uf_
z-){Sg`fl4J!9B4|_qxVR_vr%%?!*HhyM7FCbdMwtvy56NXygaQ2+QLA(8%N55LxC<
zj=aW^H#u@TC(jqgm~bBU38wf<bhv=F2xlGg+?BE$(cy#nM7b-zQytakliPc^-g3O!
zo@?8d=sK|3R{qzzAKNj7TD@-5p&@x>NKV|Y&Zf+4TV&)A8Sjnaz(7*0hJ}BOc?vv5
zqCnKy+vKhBLRif_d!4@-K>QV!QE+{DrEd97Bf!}(N{3)Yu7;m3#1!cL%ZNw%3v!XS
zts;l?8RWnje?mIj$EVL=?iBcv-;rp<k|TVM=LkXuVUL~yY_*sJ2Nd$Kb9|1!6k#I@
zpDp8aJbO#+&k=-$i7<4Z2;*51Mi?-v_#D*6E!1*=ujN_t)+!9|Eii<ZKEDP=<Q5oM
zDuIRPMHn>7O2|R&=0Ytu=fKW%+y+K5N$u!D4g~&D7!0f$Vqb!v*pBb6!H1CJ`CIT&
z%0Y43@`*6ch%jgl?h|voAm+fiGGdNr5z8U8R2cJ84mvIZj9c4L$}x%@a=w-`t1vQr
zZ(kr6R(tFG#CDt&ak>P`TH<pEG#7&3LZHF#(3VmfWZgV0N~OXW-%6$Y7-QZ?p^;r>
zTByebrw^=pb$|BsGkcynJ@Mk=i}<7bCrWhWDp{tpMGvoT6d}+$A-Xv&*-hSIygY<b
z1SPbsM}}5bN`JeDjvOid0YX&LjXLxA#CvopJjELC4cuAKc?Crm_59i&i}}~QXuWSn
z{Jw?;pFcw8>;1mEI-j4OnlDB*qyKzVGg6}PBwxk8@E~iJ?88ZMW(nO5S}&PK{Y})S
z69_a1j0%O(Y$jI=X>#Gz^75(av%AhNC+em32_8Sw*n7k0O*SW!&7n}U%owHF$c5<@
zKG*WuU6k9^15E-{#89t+i{1&aPaZmSvXCLKJpSnNBg<j8)LmV;0u(Z6r9`X)C2!P1
zD4w4<bm$3k0Zn`5@s(<n38QS`=M?ioIbrNzkzPA`GL#fXu<%>*%G1XdkKylW6e7Sp
zN8X2?LG4-CGAh`Ux=$>fSPq7zksyA3w6J^c;lq3RzI)N5-TdC^BxnOK4;8SC;J`+Y
zqOCW7r0+6O_s;Mi3Lo}*_bnb=+{eFBn(<4nk`Kr;)E*W<)C|14ylH{P!til%<5hKj
zpCM$=`|<%t#P8SRqc?xm<TND`si^qCDEbkb{sE+%AnW5t(Z`P>Pr0B-8K5_Nnmt;w
zR5(js0nHYEPHP9}VGhEA1btXIOM%M3a^6)atVH683JGfSCU11L>a5CXZG-IzPn?^y
z<jA|0!E&9ZT+iVQFR3PsjjN9F?U5}%nO5(3b>m+70q;OpgIuR!$sU=KN~TfCJfcV3
zkdteuToiyM74;!5h*C3ejDToVTEqg76Cfk-yU6faw7i&1Oe%F(ozyZEZ62(t%_mcL
z*rooF1U6D7#tVDwbvj+l=5ct)1HnjR$k}1Hx6e0scv`Um8tPoakHZ9~vYk8H9)-s<
z9Ky~gX)+M13xz`MSnudvJ#OHGKew97f~6}gZXB7XP*fdystpIE;RKWPsi|eDuG!92
zmC5aAn5X%p@xr*%sk5NYR8^NLn~qQ#bQM2>)!`IY_y}lFFt70)lS42RWpi_>e<jP3
zhCOSq3am4g2fdD3lcPQ#^Q5;l57(4ehmB#bGc;U3bDyhi<lZyJK(^6R6Kr{_dZ4NP
z&Y_0>XiY<kQ%%`i56pEuwD(TTP~2%aP2OfLbevJ8U~(x%*T+g?un@v-;an=WT&MK=
zDmayj)5Io+41T3kVbu8jno5<LtB6mYl1g_Iwyk&Qt6v-G+ntr+JY=T5XTw*IkM!N&
zN$DzDJj=YuHt{}c77`e?U1Mh^c`cn+UU18$PGXoVEDe#zow>fkmC;e=*tI3dG}JnS
zYwtm=n5#Y%(BmkAIJK~YNDwmUz0j?@HV;vVmFoRdO!)d+Q)KM&<%aRb=r+_!qfoFO
zo}e~*Nb>yFL|*NsK6Pr&@$il<QQJYU%Pe!8J2}0wVb9^luBtgp;ax*M*G~Pl&MLz}
zsb#Wl<ML$u^Y``b-ei>?oa;ETvArj?v%l$1&m5h(#ltuubU(jeqgl^_oxn_~fT7a=
z$~gqi7s$~Qgjn}YkTB6q9+JL)mA4CxpwwQJQeY&s9<2}mM;Px@@9bkfxUOMlub%`S
za5^w{)?Gr>O$gmmh{^(uU=XGzx*>3Ws49FA9nUEerq)IS=kM;iOJ=bL9SKXV?a*+?
z`no;$O3OV}jwXF|_%8C^&iF*w-+28$ukWqUOluq!Zy(&(-;ucQv%RMJYDeX?lb%tP
z<=5Zikk%2^aU+%w=b;%rULzC~Sahink1f{36KjUSm#1d12>eK%?tkd+Wb*EZ`f~^G
zPF}wtm9aJVXS(->n;O4Xc$2&&SB7_`GmBvy{nIqDzqfb)L=%0MNnete%jy&B;;B9|
zE`Ld_jKrGjq-yy&*fpR_{f_Bi$|*;dk!E66P-GKF0ekXt%ZNsPW?4_vQlcK&e{esg
zKU?t%C`m{2o3)A%NKX;c{&xR}n5l}4FXxE5@L_IQh?QOoAD8GhdqPQKBysw)kX271
zj}$)S_b04@E+a|0;UZ}!Bv|-R%v817s$Ahiv?f)26*rSyqH+Np^AxMb-!=M6b@2>4
z!Caxg$jTY4VYB2UIhm(#g;}K56~E7JVg3oLi%+=MN;sV^9uv-{LkIw68zqXS5!NL}
z$_J8=3tPUnYu&nCU)xf8ZvNti4PV?WyyMQQ<XzyUcppgZJU%vdd}pfkoY{C}Z0o}t
zH$J>|?8wH=?KA7r+uPf>r_(cSppR02WCDJZ9<3ta(Rxzj%-Q_)N15^K&!m|1`RhaD
zIcA)WhLHaXU4_ie7z<;HtVqd9iea7C-eD+*ypaP2a3N2?!wT81KSxf!A?Dph{z`<0
zC}AF+7T~bOk3s@c3kRfy10p;j2ZhJyNd^K!wgoCGl=A-YjW>iAp5aFbEd)3pX=eL)
zPzXi7_73Y5+gQp2m_ja@M_<agsWAISDfg~I7eBVbs8g6)fTXv+@W3uz`;hNH+F319
zhKxqo3Ax~V5Hl`NVT&o{=37c_t{*WMVB5I`_q~HmG+SWEZwfXgGoQWw)L@E%i;2(A
z4zY2pJ+OV5wMma?rR0YUY!O~dx*Whkll1fsl6Snl-n@6ckB61q89Sj4c<(pc%B53#
z3nLVAO}}fTsylT3-N6)jDfj&a?a+h0?Wyf;fAdXrp!j=Ogr8zwps{r35@77%!j3e>
zP(^Lvew#}rZGZU0VE(@UF>BcTm4Wu`r_=j>@uRMhZH2df0i3Ce??9`45uAsvQzcr)
z06Jkvr6di}1Oy+_8sz(JaZmj~oxv#|kyqHP-3hlLrb$FU<<x~-fpkD2!zsdAgEl&u
zsvWkQ!m&u6D?BwbPjQkdendXPdd#mgW)>nIZ<FKQhUQ;B@x;;-PjpHfgTY2=V<@B~
zBV?rTY~k6J2exi~059}YGKRRf5$0J~xOk7UVr=qMViIX{C*OoDhF_U({2FA}Q%wW!
zSMem01IQ5-ONFq%<F#h<DHG{_^JL+1p%jJ5$Z08jA7(7D$NnDWzb-k)x{)%06g6`d
zDJzoS@F^FWR&t3QL`vzFtAB;%&j>AA!ItjBdK7y_afdrnO1GSyM(c2^7*hEA#L%)q
zMk#rh`8nl7dPuK>&Vw;VdFc}B#BCd7i8%|sU~Y!CY72HUe+Ka7>~xBLkDvunv_Q^I
z(eK6Y6s}47iWl+ysFVKw2$O;Zkk($hOYJGjnX#Kp!Io}OJC8a(LLCaWbbs0zlrk~z
zA*FP4+FMK;d6!iprF3W7n}CBm(~u(GmIl{S6FG<Tcj)=ju#cejUfgomh*46oUlCKL
zaAPw)FF?V5m8M``xQqXbabbq5VAt`%UfnKPFWDryOLDK|0m&C6UoA<-!ipPOqj$yE
ze1;^us*icreE$DQ#|&77xwc;7(%NiVgVp+ZogKj$cI(SpyIrfdTMIwo>~;=6kO{rr
zuGiTtg(>=z!Db~#^){Oxc?;9G<$3)UFiRr%3abe^pV5SC2E-4g=P)Lt#R9HTdM=cH
zDLr>usgQsh4@$X)Er11R7J?L7*0Kr}eB&z9D)|spMCmV-G#~rs;R8(TbF+U(dCI?F
zrv8Eba_P5I-`)8HbL#MpC+Uo`gBn{wjbgc}o*&=EWXGT7WdIj*nl!OrDE&6E?x(%X
z>4^tFLt&m}>Pdo9C6p2b>OvLwSrP}&jP&k;kvVhVU}}u!dJ7QR*euP3RtdSXbLTTd
zBU0vcY;IR1Pji7*NglAE!68nAuEnAcnwOE_5&Dt4#;sQyWpkQ*i>DeNP13oFI~W|S
zsJF{E_lpleIuDD`B0KiSA-(CVb8FOwvIWDIB>&N<SkR9#&)aOAt!z^dsKQz{+zUv*
z#*DIIMgcF>l<21S@iId*Gqk-QF&9aKjg@{=8c4*zT%4sl5K861gXZY`DdolYPf-q5
z{2BV%hIt7c9DPN!K&g+5W8KOb;_~|=%87~@CN<v6IjgIkT<<taeZag(a)=6pg_AEu
zrAI2V9v;j|r%1rrVI9*?GcR`caSlft*Vm1jaCTOc<ZaAl*j!L%bsp?<HMdl|o03dZ
zAmC2~{h>JWrkNi}K42$r&3mkr_eZOFnc}NV0we!AKihAD9A8t5yef!e1cK3*#3z&R
zy4^9K%Ns2{A*JKKaxw^-rF`R$LUP&z^?qBh{w49ryySH{6Kh{+zYix|{0kf8W9A^+
zClgqbopd{KJJDKMsjJr6zrlitk{pxBG8L6t18jl5wt&AL25BN`XU-4>dw}1ayQZ{U
zK1#GUhH*s#J^fa>ayxS-%P7_AN_K>?hV2PBGMVDX;HnyM)!X{88e9r#e@}DImaati
zmR6muQmeCZOj~1ZEE|n9cBNcKjmc%K1nDypH}GL#m;Y4M!m;{pU&<Hh^|gDoc8=3q
zIp(EsJ$#_Gb?zo-3fJ8joVp4M5p<Klou&p*sxSl1X7GmY;eB&ayqHAv`P4V@qB;M-
ze4l)a{roLC2UqT{!;ATT!`FMhfET6Uiwtfc!L$$|#^Dff(`kPqaggc8ydTRPK(4FI
zc{0L|uFVyt)BZqqjyaEcpO4L<)-QoZ|CQAVwStfE?W?}ybICjLVwzs8e%Xx|ZQl{*
z1)?pruauLU-8*nEUd#(8W6!$rqV4-ztYLM~2<QwGOaTf-f-)8Fgl1-JtVcD&xc&ZG
zrioj>b?bUM$!Mu}n6spv9pYzLsT5^JZDWS%!3{YXKg*c2m|OfL1JyJ!Zpj7aBPyv0
z^NUVMI6<k9waf16=u%ht%2=H<$hf^#@nL<e+@!bTcrHqD8I*lfEQ{Kbu-~js&_Q*T
zAD1*aLsq*h&A3a&JdXGsXy+r?r#@SJi{h2;vY@U=i)NmiSC520&JJcT(Y`Dp&sZss
z;3-}XkMOxZzJyG)1#u=VDS|sdwuVa;P#&qA<IX#obS{6A{+=hNi3wUZ<v7h$N1`$=
zdY1PG%l4MZw~^CXS&c=n_j4X?lIP-k3x9y0@DeS-%K7e4b=DA<W_q`7QF~nVg=^A8
zINp;YZgUW=oGUsd`PEiZi=X0gE^8PuWVv?+7ZwI-PxhfFQ^l88dkc@ugel9t&1Fp=
zFANSY&^)^!FO5Q80-uAATy)O*6qA}PmsO9b@vbRcL$7Jak-L~iZn`U+?h{rV1FQ>!
z^n9A)N>M3kDL&6Y_9;$XdkZPmMVsU#pR!n-xpoC9W2kEZGXOGFaq`*)z*{J)v1j{D
z%6Sw#o^Ws%RW0T6<82Klcci7wn40@A%Nn_IeTp%-4K;BaZS_3LZH8PWmg6}V4f_Dj
zPP8^i8GBv#bal`pQ$B#gI-|xQpUIT_+=)0^A(q9O@)dqfSt&+vHV{KCs0yBtc*BC|
z29?XbI0Q6OIqG+=J-@D6X^$9J&#v2tvB2KzKL#OKn+!B?Q=X8qLRH~3b-q&@@TF>%
zmbkI9vTU$YkN!LY%!Dxtz$**9?ujip3)e1P!Y|{+pk%RlP8dV@)Znv!rt0IWA?1Yn
z=Z`*`1{oHMks>EK!{c=yaDNdgO~o?c{v}{~K}-pvjbACgiIf9Kc^7%Oq7J37D~_EN
zM=Vzym8=wTehWKSoWEX%+LMx}Ni7+s5&_liZ<j5eXc|m8)Vi`+?La&+(2f9b1wKAq
zRi(3-avA>7Pc3rAQ=spm;(y`k8><A|&&dRx5z~~m)tx<C3x7!A)`?)7ED0*7CAJmo
zCHEK4mwHa;>bD(3>IwD6s>|s3qm-}R0SaF%UJy7SrAWj!_`Vzb-+?D5G!q}6KcDKQ
zkSxH@iQ+5N-z<nmG#oG<L+#*gqFL8R+eABfa!A|L(po0f)LTbo?1)@bVbaS7Wvoie
znXjschnsA+yEH+q+M?6JB5BYn)SMeLUd@;#?=!!n^Jw*q3W#;d+El1Bm<qRtIzx=P
zB_1#R(Qy+cH&Eg%FYSo(7rx)aYY!ry!}kY4sVv5`iKN*Gzgoh_yw(S^R(e3KkbSE{
z4og+&_jtL?_Ru%FHqJ8LPLre7VRqD(o}A%|ANYB`=*2l57b*P;GC#Gf@e?3Hxw57y
zB2(;<<LE@DOkSq;{i?A>?MKL<T!XWs$7KpQf?q)#Rs-`7bUqS+|C<%mnIK1Gh=1{4
z?!W&Zwj`5ZJk-{5<QQY<Pp4Ap{y>dZTLUZ<e#M+)Hn0zX>b?aV!BgnxC9Jz)_8>-8
z@I9eF*nPgr;@9@|n=LaN3;%3!*1E9u=!f)aafX?n)~#d<e{h3=ILxkw(i4z>4H;n_
zTP$HvSb2m+XD!qaYP49~H7<+0`bF_Mm;Kx%^ODPIZ*bb|4W;K7V~;`l7h6pCM474g
z|KEZuzooHD`I$JAD7CTl{Ili8qhfm#Y~kMn_ty44GPk$;_VzyX)kF!y8A!ymy><Ua
zdp~i`-`aze)n8Sq)Rpz>GSybUL!;7__v$mZ_vwVu$QhI!NuyD##{&e+<E@QN|H=MA
zhq$%YYa9u3w^#CVE(f^3#W)YKXa5x30M$)y8Rx<^4Gzk<9dl;@SZr|?8ovUw1;I{K
zTck3auyWi^N%>rQLb_N#fBBYCXMQ^oOQ&NKXG;TKdeS;*>&MuueCuf)e}wiamGbiA
zEj>8jo6Ae*((||X;pw?ZUta{O6;pg0yyRQZ!uT^kO4=noTSs0$e>j&OlRlrA-pDj%
z#->`bs^or1Jyhd3O^$;X-BzY5J%5~5da`;?m^mGpLp9~8TpuknhI$Na^yV_O<)wNq
z=VzM5dKAlzU!rC9p&l<Z=bP%GWlHrtKbhSk)+4<mJ#nKyDU_jlu&6EbVX0J`;U$Ao
zjYo-^LqJ*3xvfp192V==wFt^dFB|bSL8fIe3a7~#_9P&}kXeFgrt+q!AIarGvEPp|
zY8}IxgU)pw23h&WQq!6Qkll<qV5+YvwKB$z04CycOE5oqWtG>@9v%Ym^x55}3Z=e0
zr%#3GN0m;I)27hsq0yF>X*#9KI{7J8mT3`NJ;Yu_4U`X+@W9XG8)gB@)%~ft<9&m9
z>7dPPRasT}%8szjXThhTiVk#Oax#*hG8+BLOhR}E?90%;Ti7o_H=sKnZqmQ$=<I?H
zK2ES*Af_6wm}$-IALaFMZ+*QNdicXFM}`68Ds=Ha_J6K{A^398A`0UWRPs@#+Usr7
z4C$vEbNeTGz1)j`P#!*=I@I_7+Kz$k_xG%A#}~iY`Hj_fy!-EKNB`vB-nH#md^B+a
zF#aC+XlD-tM%8WjxJeV<HP)rxN<7syarLIk9kZl@r#}y<MXrP)2F3~zNna4Da2q68
z2gr~q{vP-mVBcC(#~OUCrNu*o{qoIB$m?y^Y&34)##HDijXO|>6ckB~8zK^S-$IrQ
zR>c(Liec2@6Z^4RNAoAH0J}DJNJkh)0Aa@Yip@NM>dHp6*;;`>%SZHCCe<C)=pX=U
zqTP?(Mx{7+99l5#6=X7=l2&UJX2Z?2dT2wBbXe*N1;ffAZmYuPrxZJ+NrzWIG3QeW
zjotz6J&`(o6WIcXSC|+HLOZ>gH{9?;gZ6BRiNmREpVZRTz@+6izu&EH<9e8we`3O)
znr*K&;L=;2p|%|nrIF$gdma{_21%==OR_<-MFQt9<R)G~S#ut(InFzOsgNsN4<ZB_
zgb?%_g3}Vh5kxF~oDamrr+`rmmh)=qMkp$b`U3H0->+Ko;m>_)et$UMlDjiPR!HQ|
z9G`UWXV)YRxA`3bW1YXvYz#2v^s~8*es=f^KVMln3-A5J)NwL>S9C*NW-gVQ%hYX%
zPE8*tcTL3d^+L*0pVNgHTSn>Zb7-wDC;#pG+x(Zq$HBem{UkVF{siy{DOX0|rX(IC
zf#aE(F1%j&m`vfU26^FSl2tSQrR%?3!ut}|GkOm%Oa0<9?9l-)r5;p|mU`?IvNgd-
zxK8RCVr)-bf0aB_82>gQqYDe8^Yi?>n&hQq==$UmdFJvfBMS?qKiVp;_%h<TUWG4^
z%CB1N?S!}0rwzol@nnd`Ilq3ank-4lQuVRIJ7@MV7o``OJz0{QB$I`2P8MFAAvx*!
z^HRw0BP7FI1SG1}hX`D@XC`nGT?)qpWhUWX{rTiu64>;;sPqVQ{~)DZ;KEN}tflGj
Pnm>ZlrSuR@mq`9E?PGqA

literal 0
HcmV?d00001

diff --git a/web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rAkA.ttf b/web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rAkA.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..9f8a3453983490f2d7c521a436919b31ed4c6ac0
GIT binary patch
literal 167636
zcmcG%1$<RU(?7m)&dtq@L4Xhl5`tT}76XzHxi<;!4o!$aAOa!5tvIyQOG`@yts8Br
z0d;DW%2T066-wQylizoC_tLa)`+lD1|NLL_nVI#Sot>TCoqNuKamH8_Tg4<BS&$zH
zZtK0x$C%}3OnM7Oju<oLnRiw)cK?-(9elB1%(&e2?YkaitmmDKb-QxJn10^rH@~)+
zF+LHk6qi<)%uStp=rP9De8iZ4-^{AT74H@tnaB8oS&YZeo>g8_maw|RcPO8T@~N|s
z;5s*A0m8oly3DGsUo@ffl@Bo%dyKKTV^y`KCCx`ZcY?97S&T*0RF^E8YaeB&QTA;>
zVogbP`Iy?;-e~WB#>BF@we#!!tye$7*vLZ0eA^htX76Vgut-+M!YJ0{pM?=4MIJlz
z6=TjT&!nG8ch>x+4ArJuB4XXx&L6*VPRzg`n3Siem1EPczlG>K75&ms_XTH-d<Rj<
z1f}Ai6m7*sW~1_EP{xL6%BM3g??z2Jq_m_ERxuMlQhBOG|8nwkM}Q<YHi|DB9mFAT
zp2+xhl*d04mr<T7?PL`+1}hvXhxteo=FH70pV9@3=CLL$*>LuR30qCd*pN-JNq4Y5
z%x}Wc2r)K`)#Gn2>(Bb(Z$2w!b*vKcdW4e!m8=T17O69lKY|6>P&Nkf2Beg-a)e7*
z4a$u~yq5Jvyqr~|RxV;y=y^Qib*i0OluKk@wB|<7DQp1xu0=nkz%^_E@;oXp8Pv@(
zkYA0q=b%27ssLRC&@H5(WGdQ7LAlgFwVA{6(f0_{{!h3Zz^L8`)C{oE=w&9xSB2i|
z{?tn1+0iDN@lwj4$9t3F(5=Rh2zd~{6iY`a2lA+8Gt?-?u*Hx{y{bJQc}0)`Numz2
zCtRZP%8=9JFLShz(O)u3gj!2hHLEc{Ju$zD$gM=}SqRZs<^$>=-*S{s#Qc%8>k%4`
z7OIh&m>A!5l!<N7Hiu@+1~9BF!D8$Ib}{4j3VSv1dV4+aMtdXhX8U~L3+xMkFS0KJ
zzQn!+_%i!4;H~yn;4AGbfv>W!0^V+K2fo(67WjI5FZvPSOkf^48v@PZY#9CocpHvz
z4S3~{$6TZ=!JlAD@yFR_{Bd?3{sg<1-G}f&{Bd>&e}cV=Kh93#kF(G5$JrP76P$Cw
zIB&z-0w?eUq_pGh5bn;qBRr62BAmsu5DxGFa3L=Qo&d`y_+&mAxh1>=;hB6U!t3}3
z;4OR$@CEz=q+f>>EcjlIQStjYxZ(%-A>fDk!$^OLzk={<B8hR)S#)MXbQ9=T^boy~
z(ns`RmT(I<uvd72{lX92U-SnaC<X#&i)`RLkq2BTz?&E%h5!!}!_dMgF$#E$7y~>`
zj02t`rT|Y9(}0Tw=1-J~GT<svg<7?u7I?ly3v!r53vz@U0X#`gVwRjDrvR7865ujf
z23#lWklP>|fEUU|z)R#3;AL_d@G7|qc%57ayislf-Xb9xd7-=*c&mgS$SWoEK<<)z
zfNz&~0PmNuzVd!~Kk!5HA>cz25|fY0M}Z%gPXHg5hk>7#PXiy3M}S|FF9E+IG0XA|
z`3CS?u*_V3AU^>9T7C`ui~JS#G0eiAU>&dy06%U$&MdpX-5;7az+S_o(qpOgSSmf1
zN{^+|W2y95Dm|7;kEPOMsq|PXJ(fz3rP5<<+xuYkjbLlpKK26pi2Vr7%Ho6hEPgJ(
zh(Ezkidf+jbHx?n4e_armc1a^iy?_8<gZq5Yl5}WddPa)4%)NqdV3XmyT?B1a60^s
za>o^p{f=+LT7{*BjSkxsc5m2+VLv*hGsc<V?C$hAvz<en6P%^aTIW*d2Ir;D>zubZ
zA96nB{Fn1x=V#7e!_&g+!&imh7=BOqBjIOUE?1l@$(8Kt?+Us`yQaHlyB4@syEePF
zx^}v5cRlDj?0VUC-1VvJbcBeAj%XXvEy5d-6)`+wWyGBk2O{2$_$=bbNEsOunGo4M
z(ifQ>IVAFu$ZI2Sj@%#lR^-Q#-$gb?MMSlZ>KxTCYCu#$)R?G+QEQ?ujJi7NhN!!v
z9*%l0>Vv2+qkf5YM8`!ZMGuTFj2;_Z99<Q?D0*%5MbX=%Z;ZYt`jO}((Z`}civBwK
zw-{$k%b3KNJ~8Pr`7tA7rpC;QSroH2=3q=?vtG?An>92$x7n6v+nViZ_Gz=z%|-L*
z=53pIYwm5H)qHsK$;~U8*EL_!d~@@y&387xz4@u;-^a4p$k_PUF0t;|!Lj3GXT;XT
zE{R<qdr9oIu{X!=k9{omXzZJ@Cu6^jJ=4O~Vo-~rEhe@oYcaRQvKIHXc)Z06E#7MJ
zaf|O-G`5Ur*}7%tmi<}|Xj#y5Ov`gx&S|-@<(ifkw!F9H>#dxv`nQ_iYIdsytyZ_X
zpw(5a_O{yB>QJj^TfNrmgH~U*`X$a07aNxpmmJqWE*LjDZbsa`*0Oa>>)O^!TW@In
zaO>w<zux-8)?c;$H9jo9Mf|Y%N%7_J^Wtxg-yi>2{L%O~<4?wa8-J#at4&;+q&CTI
z`nL(T8Qo@jo0>Kcv=wcm+YWC#xot(;y0$CYZcYeGXpzt{p?5-BLSDj%geeK@5-v`-
zCgG-pdlMc_cs}8cgcAwhwCmc=(=M}JQM+;NO4?PoTiovAcGt9ftliOeZ?-$x?sR+6
zzGwTC_Bri`wV%|!y#2iP%iC{ie|h^I?Qd)UK>H`#ztsMn_Mf!>p#$#_)uBy?t{prb
zGCLG?7}ues!@Lg5JM8c9L&u_y8#`Xs@%oOpcD%pi6N%2mmWhdpeG=0X^AkrVPED*z
zT$H#r@uI}-i8m(RllVyDkxtD!4eV6dX>6zBPF0;2bz0l$j!qACdaBdEI=$QJvra!I
z$)uR1grx3CzNGA=AxRUGN|S1nb|>ALbRg;Jq*s#O>)fXE_|7vr*K}Ued41<gI$zuQ
z=Fa;&Ki2tZ=Qlf_?EG!#GhJL=;<_YtN$#?^%gtSmcloWWvuk$O<y{YS6Ws#c=6AcN
z+qd1jb}#Kdr~8xLPxlD+Sl#1Lk6(Kx_N?o9PtOy*+V>jNYhJH=dL8KXbgy@M{oLE`
z-Mn{J@2R~n>V0kRm-<+J3i~YWb4Q<7`|`d;eV6vVx9_*feUgVH&raT!{7mwP{lfb7
z?zgnx&HdhUTkg^B)$V)U$K5}B+@5KkC7zw054^G7BJW)9R_~ME?|rd8udmv-*SF7i
z$amTw@GtRS>)+@9)c>vjmz407&MCc9d?^D`s#6+LmZxk>*^zQn%Ht`|rM#1JBIUPK
zD>X8;Aaz7)ed?{L_oY6T`h4oK)b~<9OZ_pmF)cf7UD^w2zozG;uTFm`{X|AwhCib+
zV@t-987KRv_b=<et^afV8wYe5FlNA(0XGl$U|`pQ(+1u$@QZ;zXWE&~GuvnO%uLD5
z$sCqBDYHCtUgomQ4Vjl@UX{5wb6@76%x5!S&3rHOROZ*2zhybIT4W_;b<gr;WoHe^
znvhkRRg<+KYjxHISyyH4&DxiBDC^m**RtNv`XuXzY@QvJ-6p$hwkJCyJ12W+_Jr&i
z*|W13WUtP?Ap5H9z1jP+4`m<DemVPi_NUpW2Z=!=2VFbp_@I+H19L9U`8aoA?hSdd
zc^&e4<)!B3<_*uAoL7-om$xEsbKcgxoq4zCJ(zbm@8!JXd7tKI<OlLc<xk76%x}m)
zH-Ah1w){Q$cjX_<e<uIc{P**}$p1ND2bu@k2YLol0y%+Ufk}b#z`Vfnz^1_EfgOR{
z0uKb947?P0C-6z&hae9|1=|F>20g*dU{P>fuq0R=TpU~%yf}DG@TTCs!AFD72j2*u
z2!0d%y&$}xRY9kMz6BWtfr3#5(+VmJ8Vb%W*ix{qU{Aqa1qTbBDR{Nu{emwFelD~N
zn-{h(>{*ynm{T~ca8hA;;k?4-g_{a5FWgahTj2wRPZqvZ_)g&`g+CPWqNt)aMO}+L
zMVUoKMdOM}imHni7p*J0xagXqn~Lr&dbH^IqBn|86n#_l`{3}wtp;}*+;?!s;K1ND
zgZB?UIrz6B$wN|yWDglWWa^OeA@heU8?tW5&LOu9xo611A%};&Fyz>f_lJBs<hvoi
z4Yh|x4{bd(acIw>fuSWsYlmJk^xmPzhW<LtKdgFK!?10`b_}~|*c-#%AKra<`S1<H
zFCBhx_^IJv5C3Td8{r($Y()Hs#1X*}%SNmnv3<m$5wDE+dSr`{14d3AdH%>pMxGq`
z<;c^cdW}jQRWYh&)PhkfM%_GW->7d#w;!D|df4bmqsvDx8@+e*8)NJ-@nhU$mX3L7
z%%@{pkM)nO7+W*;(y>pD{d`>1xK`sjjq5uuWn9j<qH*KKm5i$#*D&tfaht{+9WTen
zjvp{SZ~V&f2gZLe{>uq1Ck&WSH(~vR3npAY;l>GfPIz>}GZQ;a>^U)K;yDu=CSE-8
z?ul<q{Ap5;Ns}h6nzV7!MU#$9IyTukx!L6S$%&JPP98gX%jA0}ADsNm<X0!ZKl!IA
z9jA1kGG<Eol%-P+PB}BR=hRVC=S;n7>itvSnHD|GGc99UVA`;0lctqStDe>{?c8Zw
zrd>X5$F$p~{XD&V`ZLpiI4AO))N|&av-O;3ik-!sitCE+Dt@#0i;~tQ9ZR~G^eag#
z8Cf#1q_|{3$>k+GN^UDTSn^KEnHi}wYG$mMv3bS~GoG07;*7UvoS5-VsVHqx+Of2E
zX<BJs>4?%PrL#)wOP7_dE4{Y#=F+=MkCvXoA+JSQm$Krr?PWKY-B<Qx*&Ag)mNzR;
zE#F#xclpER&y~Mk{$cr76@4oDR}@xEsHmt|UU6B)u8MsXk5;@mv-ixUGasAz#jKoJ
z8)hA<>{&UnvbeIcvaWJz<=V<Em0K&XtGu!DuF3~1AFn)8`D*3y%8x6*uKannm>n^@
z<?QyeyUp%5JAHP}>~XV8W>?K_n7v~5uG#x%zd5JHoPKkr&begH&2zr0>QR+jHMOd)
zYD?ADs_Uw5th%e}!K%lrj#Rx`b-e21s;{elt`^l1)h((Ms)tvvsJ^NC^_uXS-ZdB0
z+);C+=EvG*wY_U6*DkHSq4w3<@8|ZLJ8JH{xf|x*Huw3tKh2An=bo20Z{)mr^KP8?
zI*zMFb(`y+towR?>inAdd*+|1&#&KDe}Db24Fen2G~Bl!Y(e&dss-0AcznUz3nLb`
zU6{16*TMk{3l>gXSh;Y?!t)kxUwGTXLknM6_};>A7KueI7Ij&avM9J{!lGG=mM^+s
z(auG8EP8s;_ltgC>|ESov2XFn#Z`;fFW$cRz~c87f42D7B}GftE!n^1^(EgfwU-8#
zUa)lU(nCvMUHZk+UzWL+O<Fc@+3ICiExTpe6U$y(_SJH}JYl(S`RwJJmmgeyeEFBl
ze_7#L5xXK`MVA$QSER1UUQxJW+=}TdDpu62Sg>N{ij6BSUUAimT`O)~aqo&lE1p`p
zapl&PyI1a8`N+znE8kxE)he;7$ExA0rmUK^YVN8<t1e%4*Qz6{POUm~Zp(8s&Ygbl
zl5;OV_rY`DJ@@<7;j7!N?zcLB^`zAcR$sjOw$;z9KC$|X)xWQaT9dFQZOy1PC2Qub
zS-0lmHCL_KwdU3}Pp<i3P2<}3YqQo4SvzHI+1l#03)Ze&yK(JpYY(q|ZSBYFV%POq
z=U+E)UH-ax>n>b(+q(VhK3v~yedhYv>#taUY=gDIy<x_N%QoD;;pq(@Z1`<smyJU<
zF5Y;<#^*MEv8nkc-=?xnmu@<;S#0jPdGO{ro3G#e*yfMUYlFY5&f9<9iSu3OxBtsu
z&+}8@U%8%*Wlw`9H=e<LXN(xcJYpVbTQ-KD0j)>;3WO>CC5xvr{4~-(0bB&wiTt3U
zBSAZ{Zn&Mb6&JFRBEIoAnaE;AdltoiX#7pIV?Bh$`UxK^;zwCe+|7FPUs+Gw854vP
zdC5q3uq+<d__A;z9K(umvns-Uu1IuM<%?9E2ISqr;&~-&i5p)&|B6M5&k=tgejJ4P
zLo7*+hsN}O1Twer_YjC#teuiwNPZ;4ra<y+3Y%C5lJ9>A{r|V}XXlFM>wg2xCC#UT
z1FRiy+xR`^b{ObafR_QM0F6j1&}l3i;UYk94UON0^dK~5=)(xoiN63>@n0LiQMy9<
z64Dvcn|}h*r~e-M;^s~5`2GQOAEdXWv;PF7%l`zov++vLN!R}lNdNyExDNII4osW0
zu9^a^um26y+N1T?6i5#zV*FRLRB;|?3V_z<e+JI~q`Yj-{2{=47i0@U_JC|cQxKzB
zZ(8q7LD>tk8UH?r|Fvw$_K^MgCxBfd+tdUEcQn2QTU7}9Cg6F%yMP~cocWQL3Fx7r
z@jcL@kX<9&76RC~0PljlD*-X^dBf)M7_<`uTb9!JE!n>iC_6~D@E<_-VtL9=lCAvr
z!1Yh%WY)jYh9A6=EpCAAZD4sOJOC5`yFxblA3#h+J=pKR2k5e~?PTBoPXYS|?HwUd
z`v>hI{{+}uXn$!6q6c$BN7cNjIgVsmB7)_LG}cC?7htTfKxf~B&(Y{Jbh0b*dkg4=
zoT>J~uHr$~l|PQ(9A0LfG3K6pP~(?P%J(FmF!%Xq^>85C9RyzIF^|%l+Qv`#df4Z+
zkRS92_PGdtRMMZI0r1#(Lg`Nr<Q>Jh+p}g$2cE%vzs8cqVf5S3c;*j4xl&dj1lj|r
z`NaNAys0@FfIYYheD%e6+BeyYNq!H250cd<N?sQA#qUDeT`U&q4nQowk+o+(F)#8`
z#cY-!YXOUJ9#{=}J1F)EwT5V%7+>g|qV~HAmZ<hbvT3xZVc)<WHAd}AID4GkZ+fVG
zz#}d|9@+dvj1@Lpok>2z+~ItJvG*7EvA(c5Oe|>pT71{|H3y~rP@F=13&M1U`K|F&
zk&F5TSo^=jezjxC{0L-rkoAEc3=;7ymG(>6l57#lqEWVpe+SR?V=PYfTMBvgV*$)T
zPyROcj&SfsGXIH%i<g*Ryn^=bL;Hgu^LX%tzNmd_o7x3G@2YmF9s!ka+xWT)&u;uh
zOmF;7j0VLxByT(|&LI8^=#QZ5F&2W*nP@N4_ac1(#)Pp-f8%NCZTwF51?>ge1+)wD
zze7IcA@4%`4y4}<dLw9A<0%4uL*r?{caYboBr}nMcF_*{IW2l4{S?X&v_%+a3)vR+
zUC93y?LxK^_2uno?|RT{kp42@F2EM#L+-K&dAW%HfHurNC(*X-fOOIL8O@1&1o1<N
zKLENPbOd-K$ZI?!S2q44=Qn<5#WkL`T7X7_MxxBs$S1g!jj_^^mX5r`pih8440-@`
zapNfh`7G;e<suE^vR(xRkJeGp=Rhk^2B7qUbmKn&r8}fQ{{Tv-NU#14fPVM^y&&Va
zKnp=%0laAFo1k>YBX|$+Bj9<!>jpkndPQsFpMdn1Af$W$Unz8!^!DF^|3H>X?*E3I
z{v^wPmyb|6TGx;dKMuG7>)giOrUmN<$OeoC^oKn?$);i*bY-&vpU}DmecZqUpf><c
z0!jhr7+MLs!oXC}3Ihw+1&ycK`HkP9%}+5`r+K_uN2hr#(vCKsB2a63xVC-DHeSG5
zkZqI!>^c2#j=c(b1d{-38-G={(b&whc9HHZbe3(6U*$i?{E%Iwb9x0E1e-iYu0{A&
z)>ifhrM?EiM(+Tf$eN$Mo9u^OrF$c_g|jopj=LkReHKIa26+*F1>1%E$I%b*LOfA_
zWSi$8jn4i(ut!iEajb)^HvDfy{2k;|U9=st1Na>;O4MO}R8T)=ys&R{H&Z;(*_QeU
z-6^Oq0y^XNgzcwu8TLr*sWEg;6fZLu_TNO2g){;>tMy<`u>lnOE#`#ot#l7ncUZFF
zYG3{VdpPc&_;s;Jv|y<+9Q!WK`wZ~>ILiK{%EyTxkQU2Yht8zf2k>jBX^YNEbpNHZ
zWE}L0?!l*7xCD>jPbgl%lj<)WX+zOA_~AceZ@dZVk7Gao#qjS%{!-)*V}sS1+MH)F
z?r6~kGNJP<jg`&`kOiH|4NqOwxXt-7bPmE^)Eo2W7b|hs<=AgI8w}_KhzG<P+6R=N
zC!j0zE|srGT;M!I<=PpVi1Xo3NN>YZu$Fvg?S$4)Km1}jj^oJ#1qX13KEV2-%y9kz
zpan|@<RP36$TQ(Q%zZyVDt`*}DbQTl!S`4%+>v_OZ?j&`D_Jk_pyH^L%>!und&mud
zIb%E@ci?=?VLqD-=mtnsbRvGcZ)B73`*kZt_v3u_0rU@`#yJ7)+`uN$xdOlc_7F#)
zYe$gwG>dD}mTvP(w0)&&JJg4w;xp*tr{Mb`$o4Ym=4Ci5T!y*39cyh4&PJSdR(es-
zI`Defn0nR;&=Jth&>o;(KrcX7K)VpI-`OAlrTw4R4fVwyWxW82|8AfEqh2w_H;*N7
zqRSwcRD_p-|8cA>dxJGcdRxAb^<#IjZtR}M5BLm(?}rT2QFal4>QX%hNMg<LBvdqC
z%=+-r%!#$qj2D8A1oXu^%wuiX3D#P{BaN4-^l?a^s&u?HWZxIy1CWl#0Wtxk^Zfyo
z9tLm--uM-0t_~|*qq0;c2yg*ttq?fal*S1mkVUM6br^Oofu+d-fbOilOaaYfNoQ#u
z>nO`vHxuuus4mkH<vPlKsE@c+rs{P-A4vvCN0YF=?`@J6$_vpnla~lekR&@`zrZsv
zd^Tj7iTX~A_Z~JDPmeXjdP>GQJs!{l(4DAU!1@B(01{2u14=;Y1fe*UX(Kzc!31If
zY<ncm_^q&BY47|%@1GRL^C;~AQLt~chrSM={jrj*!JVNiWO$OLv6GF@BHjY&v|rW$
z)&pt*+W<QN&jW4;JRkyis)se=3A4ruz~z7^0S^OS0Zagt00sl{0rh}+P3Sa)rvl0W
zQvi7OuJHi?rA-FhWncs7R=|aTO@L6l-4JdMpmwN@Cjd79jsU3c?SS2e;wiVr+W=Sn
z1*lKzkNUW>2~ay!_a(qu0QE`z5YTvNEN%dem+}dQ19kyI<0U@E0{+F=nRE?}Wr!C8
zLX`3;9Eyi1$!R|7`~(^gFmXlaARZd?Un%9`>8Qpf0OENVpb9X`0K&M#oMLW3H$Y41
zUJJlv=qO|8owcMA__q<TNQD^AfC<<a6Y#te!|pa3XL~C@ICL!cmM*TV;%sJJ`5bnt
zs-(UKw&Xz;mNT|6k?qZy97trB<c%Ji$W{!`8K1~z4<9ouk&PcSWK1H<9Xommv>seF
zvM?3_ThSTzraztm!yQYdxmX-aLWvAK_eR`Pxp3?ko$%yZI?KmXZaU2gjuY{8OB&0=
z6D~R}jJ04LS#Lalmy4&hbee<3vJR{lp6ANJb6h&jh8=4U9rm+9c*0AkS*#gW32wJ6
z8_#`NBmvd8WHFFHcRVwf#Rj7#K4x@oB6FEsJne|Fcf-?knXJg9aTWzT*cH#%4P=F9
zTXLYmNEXk!umP-qjVUdyo+}Ffdt6piTP<?`dt6ahQYzB_dt6mHvqX6Rf55e+RiY1`
z#;p=v6z-sKyu!^Cb~eE}g{c&coiz>Bb^MqA9?wM+{QLhNWBxhxlW+{MU{2`2rqCu8
z4_CQPg(Fp36!eQ~L@7*bl=QJVbed9|0n;<a0;v|B`*k1|AJ?ZvZ0x?~m&D{-Yps^j
z60eB|#jWB>u|O1yp(2uhz>o5gJRPT?&sh!hnpQUlHv+mDW8Y<MvNl`iS?60@tP89Q
zt&6OStxK#+t;?*-t*t17Cl;xOb%nKChfLjpI44ZzuZW(am*_38k|*tfcD9{s=i~XY
zLVJik)E;h+v`5=x?eX?Rd$K*%uC?dksWLpDhxOG3r>Y73YyO?wCQsmLxGX!z&a(q{
zfn9`}!|W0ED0_@O&YoaTvZvTJ_FQ|Vy;iL);+)6ED=s+pz@ALlbN|Re%Tz+bT14aK
z(GC3fqh}p)dgzYSPOv^So=yNQ1v*o>Xp~lz6^Arhw~|f8YK{aIumCMlHdU2ouwPVi
zlXZ!TbNeoo;jkk(;ryutNsH!Kpe*(@>mBP|@Iz&Z^FPWGFEpPV^1a@)phgHjuAn@t
z5I8hnLs|6S&K72hW~@ocB$T|uy3*QaU1eQuZMUwmuC=bSuD5nsyR9A8PV^}Cc&$!W
z5_4I(RvyM1>WO4BgnE|`|0zxJiW#E35Kqx~rZLkVWKXw?k!q>AoMxYMwglSZ-4NrP
zG|9-k*+eV&M-07D%QpI~!PBt=;SUUz6p(%xf0w_(KjYux=|zjbg}g8^Obizz@RVt>
zD8Vg}=FGxQHk2hQDN`?`2fb7~asNZ^aY*OTCz5n~>>!=6D|Lg-?<b;E*;wRYKQXnj
zivK;`R&@uWR%m{ypBDd~c4J29Ip+lQ+8%#x!Bt1ZI^hpDKm4^<9Cm;vK95npz$LpM
z&+HCmUx@kQWgd;EW4G}dd9^&qw;Fj&#BSHkXdR6xzsZQWyz1;oo2Co-kvxeU8ave?
zz-tn~TyFb^^b>!qKG#MT7rr3e@AQT}9kxDfS(w-1h82jmvgAGBuo$+<f#*<H^FcU+
zo)23T!Nx+;h1kCbVq|X2SQo6gc%1Boy%+u$VegRzz`NyO;9W8Zyi?-IV|xd@^1@yz
zbAXFwF7R}j51b|QfCv0z%bCdCD>H!i;LboT<9Tbe+#h(S90<HaW&^Lpt$<oi1)eU`
zfwN>9@ISZgLGE7J7kCeD71Xj9c$b9t0WHH<ftG#1D<#>iV%ZCLy6gj-C3^!8fHwX~
z3b-}Bg!H}QdEh<b1>oKAJD^Q*6nLk25qO7q4!9WiX0-M<Ej*3%z2XVrJ@A!N3(o-W
z5>Eo}6i)%~5RU;D!_)HjE#TR4wD1t{9&r$Ow|E42mpA~tQ{Z`bwD16MF@A%g7Fy$(
zh(~azyp!F?u4h-Wi?A|R;fz_ws_+g)F`NA7IhS2gYp?7CyazWMl3O?6T`~!Hr|bf}
zLk<F7gZmvxuRU-v?pf#yCt8wTN8ka_8ELOkT0@ldhA3$cQPLfvq&-AQe~6L>5hWcW
zN?Jse^oZyH?7nN+iht&xbXK+k2YcZMqA|1p-Yw&Rcga}bow6nH4%rU)JovSQy%9H7
zVXv3iP0)W7aIuUAo-Xi2ygfq30~g6Qzya9|I7`L=Lt9}Z95MpoVhL;Uck?a7kiG{V
zG~xk!JbK6OhTbJ`v9y4v!zV^<+Q9$T=)|umxfgE`kp}z>yj%PRyi5E9yc1qCYF_}K
z2g5<5!;WUJ7mdIx1%AJQW_%Ak9lv#9bOOKp*hS(DZ~z`Ua00&`aq=JPjrbb1_QKan
zTzv_=TYLk&OMC&mQ+x%yL;8W&h;M;cic`SF@ZAz8p8;pVZ$x^Nspgq%0?jvB1)^jZ
zh>~R>O16P0SqGwIABd8LAWAlZC|L=jf47=HLVtV2N#Nb$1n^GrG4KxY9&oXEA9%X>
z5I9SG06YM<iev1>zgbPI*)qJdG8ga1l(Fe-BJNT{SrFE~KYWaDq2^xkI`AIx2Jmk2
zHt;TS40xw_6L^R00lY@M3%pYN3%D4+CQ#q+02hhlzybWGM|`{rJV1KXh{(3l$jG`8
zCHqE{EF4j?aYV_=5hXiElq?-lvUNns+7TUqo$VL)E&G&xz}{ppvuD|3xK-|BH?y7W
zDs~Cpu=&Sviv8eguh<8?2fsYh`0fVYDeeW{A)W<ZBklm6F75)(5_bX*fFDN45_krM
zoI+*fB-mHtge)vkvav+T$`U0zOOz}vQL?o}$=VW~PW9y^T_04{2UYb!ReexZA5_%`
zRrNuq<EERBduBRz!amrm6S42N6t{raUE(I-o#JNT9bzx=bTI^Ygt!&BNZbY-5H|v6
zi5q|iV28HE9)$jG57>e9J@EdMHtYo6DRu+z5Z3?~i)(?Wi|c{2@YD>o74<*$3ODo~
zED1i=Z78u<Tn@YkzZ+AFTY-0qD}i^2i-C*9CBV}~A@B%sHE@yG4jh1Amio99cmRG^
z5VGvQ(0~ik%3eHqLwsxj-i=>dNN(o?@5C=6#Lc6?Yw+s>@w5?my4VbyB{l&Mpj>Fc
z(`qJZhol*$J(4Kxl0<2rBuYCaQQ9ks7Gt+0I-TlcCRKe<RUcH<2UYb!ReexZA5_%`
z{kz#(1Mc>Sb-=sDTHu{xJ@5|vdO+h?1w37>2F?=a0uO+1*Tu#Ex{}Uk>#+kbVfDEG
z&0;ffyBQC^%3#tx{LVpgTnM~JEC${!mI3b)i-32ECBQqx{lII)eBfd{A4mN!2QCsT
zfCFLyaF%EQ9zZ1_(}$I8=*&PeqEiD=IyVrdlLOJ6;*g?rdZ0L+ABaw;`jCyP531^e
zs`{X+KB%e>s_KKP`k>RX7UFO=cH=!ZKi*#(i1*g=aAO#Schkm+DR>{PSd@wT#iQa`
z*+cqqwy@NB7xzj5?+$LIFY~AQ&HQ{`gL`w3_uz4O%Hm5{;=?%6T+1$lWm*OMTLno@
z#OXC3b{DIUe~8=O<0|wpNkoN64|Qnb*-+NmP(mm~ZwKmf^!}g;k#4KHu=JtOFcp$G
zk>hrYdlK%xc(+gDew?Lf7Vg5t3$5b`IIrt+v_9tI4MAOwXsBGtpUO>8<tCbPM5&xQ
zb?^Z4YT*4BcHY@`2deV4Pg4IxL+y4)&L91^QRNa$Iigg~a0jmh-Qd5_xr#Q;Rbzxy
zR3C~q&877`7jI$eT%v{pXnPY*q4!h{eG;dNHf@D0>s)vXbuLleN?VNGfitxWo|ib-
zs*bSGNw}eO$C<AmZY#L2LKhCQ&(*DU0^Y?u2tWK;ZQ?H6Y2Rb}vF>uw0=@ZcY&?s$
z_oC003g_8mjRz^5Ws?ohRCvH&YV1-q2<O>5R1Lye_D<kTh5zQvVUrfE#M`l$51VXb
zK&9l_WI+bm>w&Xul47P!7IFYMRyQ!*{37v=EY&63JxYc1@E$Fdhwc7LNwVytY}!ML
zY}ya<Y_i5#HthtoH`(y-6v3-QUIMzUOPp3Z;54gmn&cli2B4d!PHBl>cK2hw=``{U
zob?!~5`uP0<dRQ{!COrCdD48k_fz{epMm?vaLiLP(<0qu`vB-4hn0fg$>eB{Oelw&
zHCM`R;vW3+rTO`5nIg1dv0}EDC-ViS%vhx9`!e;=5%>N~NMKMC&(`4o;n|u7iJW5>
z+og7y@^UT48_p~3b1^#{XS!^>6+M<sfxWI^3)ynqLN?(`0~g{(bt$_X{-LXJzuL)m
zv0K>z_Bh_WKa4ZfbMOzmgwxc&*eiGg^fUG&ejz-=qj)Et#C!5y+>dvQ2lF9(C?C(K
z@@afJFXd&tg3so)d>*gk%V75|=9lrU{3?DmzlQJNJNYiYoA2TG@&o)C{sPBYNXgLO
zWV`}1Tw>3F;LGi5%z2%?h(*{-?By&L7JUuoRba+ban@m=`8f9k;XjYYni~e0jlgb1
zzgvyQOpe3-Fb=2Ma;&$Ru(4gRS{Gm*7hy$vaPD0OFa9dF4*vZOxK|Fq+TQ|S{KYsg
z4r1GIZp>xd*>&h)2mT77AGe^N+wg1WD0Vly2m9Xr>>*g~LpW<rWlynZSP46VzcTg$
zdl7xU#y&)^C-B$6KE}y(0qoIf^!yY1jjiPtk7S!Teed8B-jcUwSE#qRujcJ}2ezFj
z@<etm@63C!>v$jTV|#cC@6T@ISv;TJjeVquJ;;aSci2OGBA<k>DNNy0*weh2m#}B>
zhHfQ$j?dvW?0G(y&t)(1dcKss%$M_X*_(U~U(4R*8~J(ceZ1*?5j(*z;g_;g{0hE}
zeag4<?d%J@`+Yt8lHb7ZVPEt8SUYF<{rn-;h<CrA=8``PA8-`rfHaf#x#PSla$n@F
zk$WSrkGv}Kvd9Y}H%6|GTo$<?vL>=3a(d+W$l;N}$gIfJ$mGawk%^IQBU?sBM>-=#
z#BUL&BfgIKG~%O(;}ORqUXC~taX8|UhzBF?iMT!D#)zE}+atC{Tokb}VpYVVh`AB7
zB4$KPju?x#cMBtOBL+sKMz|w-MRbYi5D^~{8xa}dh+wW?T;IFCbe(d2;CkEjn(IZ^
zv#uvxhg|o&_PK6#?R8!6y3%!t>wMRG*DBW%SG}voHOn=_HPtoVHPSWMmG8=OrMtYY
zKCW)AL|0o^OIM`J3jZzq`|!`hPlg{4KNkLS_>u6#c<=Z@ynTE--a+0OzCC<v_yyq`
z!&iqdgRg3C`0Vhq@af?b!$*e?4G)G73hy884^Iy75uOy@E<7&0S-30Qa-MOXc7EwR
z={)W{=6u<C#Ch2Hi1R_`J<i*mH#&DZw>!5wFLG{nu63?(E^^j6tDF_iV&`P%Sm$tO
zp)=Px(3$FVJ9|01I6FAwow3eHrz7l4*y*q@!%l`B4|^@_XxQPfLt*>F?hLy*Y<JkT
zVONG-5_UfPXRE@Ngw==Dgv|<@5jHh!eAvja!D0DfSz+m6-mpGl-NF*X;=`JSIm4La
zC&#yrPaPjQjysMyUUnRD9Cke7c+hc=<95f5j-8I}j;)T19Ge|$9V;A*9CeN=M}?!<
zG1)QJG2Bt;$aM^Kq&nP=UXCP3J4c+OnZxC<>@)UH_P6%u_DTCa`%U{5`>6f2{g{2g
z-f!P&-)!&3o9A2cw)%S5s|DCoXW290;U5oQ-(dU#kY%UaUb~Oo%}%uA?N~d~cG%4N
z#rod*(mG{*V7+a<X1!=VYdv8dvhKI`S+`nyt?S{bz6`%WY_wKeORPF;wl%|=YK^x>
zT7#{8E6Yl^yjCBpo0Vv_wOU%ymeUgQH+dRw+kXn5<#BmTzATTpzIUvEmUoAx84O(~
z>(WYDmpIs#sqno|$M+^W!=fy~?|#c*PqUOQ$$>4|gkR~-gIyi0EbAE95^XIGU>`XI
zo4ODd;uVy84YpwmY{O^l8rX(2Y$vQjJiA9(f@hQ^covqR7drwQFo3;|)jyPdjCDVr
zomT6<5$k?B=d|v*4clA6!?616cm!7bS{{d0em>sXzW|oE57zV^c*AeNdd|aYKETId
zHNVIwV(;3<XUh}v1fPS^roh$`o~<xWhzR2(2b=}$$9awLD21tv-=;EtdxXL{3hR;s
z5caBcuTAM*)q)p0xZnpV%<rRKfYBx}+61QD`&3D{>cx#RlDV<l!;_*YodhY46QZIx
zOM()QZhM@<V-zk@SmzRVZpFJ>@!~c;5Rd&7kNwoR`>ApFqg@B-IOhS=`1+~#lT~iA
zN=a5_l2w^xlS`vaRxS5MYm)V~XWP_2sKV4zUsblRs@+$W?M?0REfnS(s3b5+WP_5(
z1|^XV$d!10Dxhlgvf-UXEC;1ErBgJ;M;S`8qBzY&FD1ubiicjR_g+d)XiepkY<el#
zpoR+TS|ppEN-8~7-JWXPJr(CYRr#K(wVuQwN>Z&Js$>sUvWH6Pt|ZYNk_aLnRAG{D
zcU8N)osDoe)lWB-+l_kQuMjVMGDa$dZo3QRB8Bv1GSvmf2!JsHV3OHnQ;TFdS@G4`
z#$A$iR_%9I?RU0wk&>iFkfdagq&P`ZBTG`eCsDsBL-I&c<LHER$rAMp@PSC9n4STm
zGy_Cw28hxO5GAQ3s=gA{JR~X}5>+pWsu#4W%FsL{Do#*Og>_w$Zb!v`M^(3@JzS-b
z#&=NdbWpWAs9GIVj~$d=wpX><Q+eJ_$*LXY@-~Y5b~r<m{tzYZi4yljiF=|n%61rq
zE~iIHaa~T2lH$Z^J2k#`ipO?}qjol}M6{zYjk29uYweUgP*0`kx-`lJ#czUYAwi8Y
z!NyG&>7*lV?R<qtD@=OSR+VXMk5plr)wZT2?vgBCrN^t;j#ugNHl=^A!Y5TPCsms#
zZE6$0IV((k#i^7yHSRd<L-5ujZ6vtSG}}<p={Ut>oIPHJ$103FAkuX%aTllhiBr79
zss7_sZ>`jbTPa>zDgA3@*P?tYHL_N!<(4Y9rAle3%CuBvTAExMcT3e~3$!Nj8=+on
zpvY;VYP3+bTc{c>RN3Y#<)8{HJIwA=Jl>~9exKs*KIBT)48OsXOq$`BT8iZ=sSw3)
z8!A59P?8d*>(V6CW{QVqs^4ZxLTF8;lT@0i9#KPubuF5M7$ub$RX0ZQ8KXuKqsqsq
z)?yTgF{-a<RWe$Yj8-X8N)k~<5};@`O0^NCYDcM3k*c3al^dyYBNQ(#j8w4As*FqJ
zx|CF0s;*0oz@@ayr8sh#S~LQe;wxNPop4n*T;)1dNvEpoRP8ubk50w4Q}yUHC8?b-
zq)X;7vabOz6w|UNO0p+PvL{NiCrWi4sxOD)*`auFs9qeZ7qqF$&<r>fC#a{wx-QLt
ztt4Zsy0)rotCE%qTP94kEY+i>G*YTsQk5C5dKs>AhbZm^p5q`pLX@~CO577A?upVU
z1xBIE=}}T#m(!!9IB_b}_=Mt7D2{|ps}JocOrsQPmV}ZA>Zuf6mqw}nH6De({BQo*
z`;jQgQvg3pclfJ&;@;RBxBkBHUX#DZgL*#PA5(BXOoP`w1D?A9_{}vF_r(Biq<Ak0
zx5dHm>kP%oakx4;j>5^2ZsFr_cbtHm<0RZq=|(;cx5{U5gS?&1;DSq5igTdN9XQQ7
zc{n_>5j+yN?r0vvoAKs6mbYLR;m+6!C%o1;FP5?2c^ll$+Tz^Uj!uodBYO__&!>4J
zdsf}mJM%8QEAPg;!~aP4_TD%T_Jy~hA9uqq;blK@AMWxgJe8;6*`5sEpAX;zaYj9Y
z8)POs3UAymJev>VIXoAq$9&xSgS-G=6e}{f|6w?jj$j|a!#RqN#>sLlZl)FR3E*pE
zxSjqBx8axA9c(6^@tI=$1m~zT>kQ>DD94TaPMlq5(#;jVgE_p4SHoXgi`y%C5$5AG
z+rSs#N#l?BBEFa};Y;CJSk71Qm3$SxMzxx+!AbfR_9||+v+yOe^?U<PzMJ@Fejd)h
zTX6op5MQjinC`joMO+SV#1;HXzD@ZgwzJRpHS8gNE!}y^Kfz9F4+Z-K_u#!aFW-n?
z#wzjMzG_y*Z{j!Osghgxt^78AJHLb9$?xL(_}%;-_%rt7D{1%h2l#{Rdj1g3*Z5i*
zf0)(c?)(T`Nssc!_~Uq5;YrTfJlq-T_+d7mKZX1BGq_Jb$B*#majS+u1YcHrng5Hw
z!e8aD@z?n=_A{PWd6U1z-{$Y|<9K@IJ^nuYf(`HkE`XPKA^(V<;3xUV{1pF$e~LT8
zXZ&;i1^<$N1>f^G{9FDV|DONAPqPpCkNhY8GyjGE%70^v`0xA-Z^RPexW6pMcj%V0
zWkLwNk0ET~5Mjb8!i7sjh)59y@5fytTEvKEqB)+MX(3vQRw7Qc7V)ADz8aYz+KKj}
zgXqXkh(yszB;gsUO`?nFO5cRT7va=XU2G+8NUKC2cCP3vl0`pw)IIR2``}ei5vd|g
zq>Bvr*9XAEo++~6WgjGRL@s>o`69qR7eV%*D8P5(io{_2cJ(oyMZ;4&@Tq)>CwE4|
z8$TNU__6TFj~5ffL@`NBhHri<yz|q=IYK?xBTC_?FBcVJrkEuv#cVN0REcU)BWm#t
zvw5NpPrlTP20Z7sP%ILQ#S*bpEECJc3b9hG66cE5VvSfU)`|6EgV-oG;oF$!iSxx4
zae=r{TqG_QmxxQnW#V$N72iX<Qfw1fiL1qSagDfETqmv<JH$@0OY9bV#9ncOxKZ4M
z-{Ni*x8TXT+r;hS4soZrOY9SOi+jYqV!yZ#zb8C^=k6X72k>jhb>fhCSUiGX7#<Uk
zizmdB;;?v1JT0CP&x+^75%Ih@DqavT;@86~#LMDe`1SQ_@hYB;d0iaCm)YJFZ;7|X
zJL0%_SG*_Q7axcZ#Yf_VI4M3Br^F}XQ}LPjTznzE6kmz2#W&(x@tycy{2=h2qWDSt
zEPfHcir>WV;*4mNc#lyENnZiAr9*~Erwo@a86hKO6u$o!Bb&+QGFG;bEoCbiCtJ&S
z*+#aN39_ARFFVMNGEsJtNwTx-BD>0NvO9h+>4~q#^_G2PUzsfXNw@S!uk_(ploXjN
z(`35Lkp1NVIZ$TGESW6_$sCz0^JKmZ$e=8cg|bKvmP6!FeDQBMzV|m$j*_G07&%ss
zljG$CIT2s~n~ZP&O_kH+ba{>}mL+nAER|)lTvo`La+a)=v*jFFC97qPtd(=+JUmx4
zU)JNhfD7oWfO0Xu3b+*C1Y9mx$d&ji;JI?OTqD=w%Yf_U2Kq9f+$_(N=i}>u7vS4~
z7vcMNm&i-yW%6=-Bk&4*A#fX>WxQH$m)FQ^<#qCUxkK*67Xx?8J#w$SLEb2Dk~hm+
z<gM~H`huXmQ{E-_$-D7%)4lkX;C=X#-~;kOd`a+tJcus|J}e)>mjoZ9?+D5#@g2dZ
z@D;&l<g@ZQd`Iwkc~rh2U&OZrUzY!(ZwboR<m>QaydmGj*96~|@4%<=u6$3vkFN@T
z2oJ{zc~X8XPsvZ<@Ayo9F29gp%CF%4_(py!zmwm~AK(l5QT`-<rY{e|GxEDUBO5Jd
zaZ6azvMk$j;A@0VE8KEf5mqFg{)@I^tY%hoE7ocOk4h^m&T4JNTW#Q9NwC^k?X3=0
zM|fL0SxHuBtBchYzL)M+538ru3*QRtWA(L?t$vo<^1v_Sv;0<ym1?EIOOs*sw+2`P
ztxWiAvaLZ@4n1244^F@eS_M|2RRn*|5NoJ4%o=WufOlt<HQE|ujkU(X*E7MIXic&v
zTT|fqnPyG5&asNE68M2itum|Js<38Sv#d&ZhUQpRR<%`Q)mn3{dGHm@x9Y71Yk{@U
zT4XJT_h_lL%vx@(uvS{DtaIT{S_6M`3;bTt3ZCWG@B+2LuLlXN9iEq6XRWt3z~{6n
z^b9PX_KCr>b{*h1w%}P$f`6TU#o3SdDehtS!pHt3yg?7MoA8uEGd!zscj%c}_}@3M
zTzYaAPoCi&c6g(w<M)ABb`HGwr|^sVYIvO2vyJ+>+P{4^bBDFl+QrVZcH=jt^Q}Gb
ziQNESmBYHxy2-lPx&>ac+pOEIJFGjcyWlgs+q%cP*V=F02M^i<)`R$R;{od+{Amwc
zk64ddkKt>RPgqY{hpnfqr>$q;YkST*Vm)siwO)Yd?Ir7F>tEI@)~oQty>1<|-mu=Z
z-hx-|9qYLDuJxYvzV!jTTi042S|3>_tdrKq@Y;Q1eQJGXeQtdLAKq8i*VZ@Ix7K&?
z=>1@wwtlpJvVMkt?^o+L>v!vn)o3%D<L#1zcs_X@+iDB8)|R$q+wcR1*-ks$cG(f|
z3P#z{c8uN3Zf?i219l6$C4AF|*$?b{cG_-b$JwpnJ#1sQwG-@ic6+;n-O*08JK0Hg
zXS)l2JNSxy&F;6mvPAU+=VkEQUCMIs>qrT^0e=5W@Z{NcwugQbu)Epa?H+bdyO-S?
zUdg_8vfa;i+aCBReYW3Du~Y3dcq}vUZO#Gg0X*xO2@hsA{c?kM4Ysgj?0uYH^WfJE
z;Dr1Jet~(Dy~W;P@8S#5$Ju*$X1Nge?!h<<55@00!{O%|iQmFT<N4*Wc!GI6es`OQ
zr<f<>Ip(SMH1m5;3H+s{_|2!>uCQmqds>Nm&m6nTuEwuGweY9T!!IcF@fFSncvlzN
zi|obtEoG^_%wDd3A6iAf5aD-~we~uAU^n0kqMPi^_IdXC_7?bLFSIYRFUHqHFSReT
zFNc@*3Vg|P8@?KPHNF{o4g9v(;d`Mw?49;5cyagGd+i(S8||Cm)4j#M)xOQX-M+)V
z)4t2zXWxzQf8J~Fx9_v>w;!+{v>&n$*az)H_QUog>=E{8SWb0GX<coNBWFfk`GWGW
zhMG#ZCoi9<Cy?Vd)N82U&{RXy4b3q$&(MITxu$-ush?}==cb0`)XuD}DW4N=XmVME
z>e=mg``jL??e+v!Yi>_K)pmRRKHaL@wB}BY$SbX^D{ZK*s48FN$}6j_FDWf8uc>$B
zmzH2irnKSBZFqABkX=_>Qtt@pQUN1?fD(W!aJCsU1~bN7(@w5wC)bQI&x|q8aFu7q
zn3ozBFk>_{G)7N)XpEkK$4JtnTEm$A5d}@gRPZNe+#avjQP5;;Ubm8(+n<IOm2}*m
z3|~ayA1&xHcnwe99IJ3fNu8spzOt&UJgi8MoXTL%gSu><8E;-rSdr#m&x|(^;u>t^
zMGXFPA8wD&jKpW;;PX3%mXtQsmpg`@<rt-Mt)Uo`?&@q6)1}Xd*k?rRH=^}>9m7>q
zn$uvqV|bG${VBRNzZs<8Fyc=S8=(gnHDXpn&CHUzhU%)42GzIQldqJ_6UZ~unP>XU
zH+|-tVdR@u^G&PyidVPCZ_1~@(>|-V&L~^H89}~jHQ$s9m{yG{V`XWfVucxX_XJW>
z9iz3tMxPxWQcZs;rvDVvLyGAkCEysNYDJ9s>x`tR&fQ**5pSwtBGn8nBj6a@q^DHX
zvfHDxQO)#}YI;i5&3RH&9pkkAj58}|oLV{dxVp-knNj2ZM%G3(^VLj2_Gx+|^D_+1
z)iW3{vJRx$<NlCoz_1@M`~(a?0VCU>J8WE2MNRXPOdS(u)|D(McTCX2nec~j!Y7nf
zme-Zfubl6gq{>80`Xf^_k{)W>FcdVxhvrRI?YSoZX<>Q-86laf8g5UzT1`+BBUG%4
z5+kjWriRvZlw-6pM@b6mVRSl2NeXc#DNrM+oREPwi#FHP&o%XPP5s=ouo7d03=J6}
zcS=a}V02V#Ftlc#(v6~Mli~@u(;`a$5Rt3&?ARS;P4vfYcyk-x+(AdV&Mr42FV_~f
z{A_(K?OZdsT+=|VX&^UbkwQz=3@*<ME-x*t+zigp(BM27p~1nz8WDQTj0966W;Pkj
z%s(*$)8=!`Y%(aXM_brbWnm*`{ZUi%?lrt*7!C2}TC>Q)R_YZ}sYgy_q4q|sd1kzM
zxnY$}71tXKaSb-|BWC}(FW62q5}%QSFC}sgUgj*XsVb={t1NX?Y3os?*te=MFx{`u
zESR(PP5(Y4Z=aE~-^khTbJVD&boF3{qvotcpwVWeXU(qR%AXNYQ$qi*MqTaPS><81
zdgM{He`5~JS_z#pLOV~$B<Gv)X>;KTXmbIo_yz}t-xQx+`-hpxH>1fn+LLce1<a^I
z${olxrZ+bvZBHO2&4Cvwu~+F4Q}pbJk!$3YVtPn1J){I3^Hr^g`G1|N6s>GtkExn!
zm`L?G>YKEjs#=7}RU?MUH9e%79#YL1GL(!_F3r)P6|2E4sRnI&8<gp7_#0Upd!)B7
z=%Cq7^hSkv$e0>E4y4%)f5<do*bf-K0*0@E;VXz?nH6YgXa%O>JOU%UP#fWeT1*T7
z5L5WVvqpHaHo}Yl$fQ~D1hfhD1cHXOpiwmF;}X@LYssJ1E{w2IoD5Y1ilW8q)ryY=
zWW=1J7NXmmq7)HSrRSt+tBJU(pOdT85mzb?s;9wg_GE90npL+qLo22?M+@7l6$a(C
z@%L)QL0kzNR9Sscqa}J{c6+s!fEvC+YLTkP<4rYuq#8alOna$%QoUve_of<tGSqaT
zJtGIblOrBVH+*D-_%Jlh$S2K=FU|0iX5^O^8mFPDhNc-l(+r<!hR-y^Uz*`7&B!Iq
z@RerxNi+QD{m1Q1H~puZ{?kqW>88JQ)2`knQQowlZrV>b?WY?#rJH{A_KxyqycuS^
z8KL=9{dw}WamW0c{)}FE^=|F<=4ie=`sj}%wBau!T~?e^VFS*oRJaQ9dKIb<S6hKU
zC%Git82{u&D$Sdk9tvgTCoi&ds^-orv2x4nOYDM@>gtlPz})$jRkbzNWF*M|lE=<M
z$ST6E#~xBLcWw#J+toA5O2n`RF}y)cti<uRlCE}QWThNEtJWS<IkUP%jxA{j8>gF+
zBWG30Jiy5Ll`hp^eQizc{7BQ2ia61e3WQTfI-f$J<r`@_(K)7J6^SvCP)XN_>hhVo
z1-nEIZU*?bXVT#8vhu3>lCW|!#3jg(lv%HaSV=>iqlQ?ehgj1f7FA-8QR9<!7~Fg{
zxOxn(!3=IL2386{)UKtjm2vl($@1yl*zL>rxD+>f0EPn<ae@OCz)XdPPNC3%B2E9g
zrs-BiVoW4d(xv)WS<Rcapi)}?rLam=CNSt$3hoKIm128><_;P(C#9fUDLV3%qJwH{
z9yCX=pj#~{q$@>7ebb&faRtrIAZWI!pt<`6%?TxFt^h%^F9kiOeUDm5o}kyX=QaG{
z&Pb*^h?9+?UK96*;-<bgRNwIDHT?NZdp^^ixlRSm-X1g;#GpC31kK4N=riq^i(}B7
zXo7mT!}-><hby7t%WvXA6Ay;+4ZnKhz-8R<>o@J2t4GkB2!iHH5;Xf`(3}v0=7bQ`
z2Hq1iSD2vLPlMWEdxF|fdxAmJZ_vm|8*=1_;)V}%E(q$Y81h5&YVx%~^aQmb1U2ny
zLx^~&oEeX~=LF4G8#I^UV1|*4-q<|B4AV}A;YV*gNH^_dn0eG23C3gk$uaGi>q{`l
zv}3L@!JJSz(@u_QC&!G-txwEB?Gf?>^~MCM3^nvx8)}@J&3aLW8tG~y0@Y{Lpj#gu
zg2o>eG}omd{7_0CJf<IyX;*J}=*P6{G5vT#anp~-^y4-4y`lOhUvG$5C#JsF)HnW^
zpt(H+y@n63;S;_i#h1^t>kGAO()Gsb2^wEZ(A)@uKGUzy@MRn<L38pCnj1*aoV0_+
zsSz~Jj-WYt2hE8)XdEy>b2A9)jT~|btrs&c<CzN@7fjIH4T9!E9}F0N^ufy$)CVWD
zWAs5E1dwjp(+4la&3N>I3~@7leGtRCGI8Tx37WHhP`g=>Z{!^?ay1^1pgE2Q(~SP<
z0|?fW>0ckb5I6nn0~q3_KYaj$o}0M2b_dPHIj9dVu(zf?<M#~egACT8;Y%N65I6Ek
zH|?c|^fjapro29=VBHygFh0ki@i_*K7b0j5!a;p-L3z`@xupj6eFApcv>!C>8-H)m
zxFdo=!++4oK_7TLLF1+f>H{z0ru`hlzj0dx^^qNWtm+3;=?$o|BcN*CyM21z+`hCx
zcu7rdeR)-RWeKeSq^O=jQ*5;_hAW(0S~52(w7H($FHy?qlkv?4jVB>!JPE;|u`lNS
z64Z_l$idhjb9W3HXJF8{?}Fxr8Z>vxpz-+z&3!0nTv5S1<t@Ox=M#r?&xDQy{s;$x
ze}wazl*w-r&TCRWzezZ+N!@%ERub}S+vWCa+XbrT3{=f2sFt8#+bYD>9D(XN@#`}H
z;(BiUde28(&yip6`H1Ve@*7XJ-}qDf+V;8q+V+8({<W<`-1Kh_(|&F1kZ$_dX9&bi
z|N6{;xar@k)+pkpf3KQD#MK^w-wTwD1XXJS)bwxs;eNO2U+)RXH{*Awsbja_otCV1
z&96^eC}B9!rz^w_C;D`SxZy;ft`Ikzm}{HgT$lVtcm3vi;n%Cv?boXiRPBzSN^9MI
zz4}1S2=s1=xEZnDz1)6nRY1*1^r_J8*IEf`Bw<dte(l0``;8C4Z+rlL<BaxeE9&;^
zQwpf*Pp^KrU++Sord_@3AZ|2F?>dMpD*$TvGS_auKGh-J$W@=>5I1twr#QroT=gjq
zaU)l~3%UJz7Xmf%(Yp@fW`^~ygShG6Z!}Dw`jBq=H$GXvaS!<QDG&Lkf9={w-1KkU
z1%7kg_Zzo?-?#_-dY5wh^)3Z!`cE+$mU33ZjN`y>90Y#jAn+Rpf!{a?{QCTemds2T
zM}gls1pMYA?l%{1zqz>jwcUqCnUNdEgkPWAph;#1wf#oi%z!>`L8DB*-p>#>?dbak
zG|Na{+e2tnNYl*B8$0hecHVD%ZhpQ0LbJ>aX#4B-2Yt#H2hB>JUpIs7nb+e<4PR1T
zSDQ?q?sDQMLLI1Is8d|^v*7VmY2g*M4Rt0|xxkd0U%5ynx#r`?%o-gmubernUKgyX
zG!3f00$LNj0bj1GqH<<KU3po_{8=i?t<5EVN>Eb(s+7SCADqtDO6$c>Z#u4(3vsom
zQC=yN*Qd=VXeh4R^J(+xP1B1HRJRk*=F=O{<`YyYH>eUZ#G}i3ylzK>C+JDd(Ii(^
zCf94h&BuLG2~Gt_a1=0tqo5X?4w2wgITD;Irv;~iT5zhM5}XRnt!kLBOIBCbgo5Ss
z8cM2EYV_QaI(VeZE9zA=Mn&t?45;dAZs#}52(gHOW^u+JEY3K~B84=ID5qIOxe$v8
zhFC;F!y-b4MP!Fqq>_fk8T0?d;*9x!W)amDi}Y<iB}Ek=7Aat)NI@+{9U>N0Ibu<j
z(=4i>W>FPXEK;Zm3lwe20>vZdme*C*mg%NSYvCYKLCqO`8&7ej0>l{w3}+P7oaqp8
zrpgg#s+{Ib1vO`?pyG@|O*o@yQ_d(J;*7#B%^3w9C2F=EGc+mHq)Zd7VU7wNo2khx
zO)52+t;rlsv?e*Kb*x4ct;UYII##EN)<lQaHAjO^T%gH9O|)7&7VFp&MQF*oy=I^E
zntjr1teIDz`rP=zJ5rTP$xxN7Kto-vs_Dt_MwQmW7gr7YR9{lJ*s7|mQ-=tzJ15mK
zw|qWQwOPo?u*zy{X6lGGuU@y_z(Muec5A;g;>tXNssjPqGPXy%ZIG^Qh}V<inqLJ=
zl}sOgBvq)NRasXS4pmTr`KmXM-i}aMTP%;hG$F1nlt*tui0j@wDeiDIrF3Feq%yNQ
zJU@b#pb1AR^)V6CkJ<##j@lgXYqK7O`RxN1%NJfgzaGDY)t8s)8aNP@)Ya84Y?y1}
z-f$H!t6ivmM~CBF9qQmP*Sx1_hm<!Bebm=gmdrFYQ}jj!2fHbU4NK*hnRblCQuNUX
z?P*?9^`RLKcO6gDhh;d}jpX$a2Uc7iaX|G3=hZXh_Ua1;s6HZiwc`vbr8hXQc7!3W
zH(0NBte}5=nDx2c>hKAgTzWR7w1j>(F)5z2d7k7@p4a4glS@f<DD5*TzOyNQlj1*{
zl44R)&ZeZAl+@%oXG0-QQj>?6w)FwVha+;Rw{%lF{cK8xNy#{yl4DYG&Zgv=l-#o^
zc_t<AY)a6i;A*3L_ZT^NAP19TM(^>4<N@7MQt<fBrszYp&s=AG<~rju*BP@PyUl(K
zs*hM^KX&`fbq4=|s_xTVUwr2J;xpG5pV!F7dsa4HBOC8o*_bPh&s=GI<|^YeR~VnU
z!uZSq+h-2gK69Y<nFF)W9GHFP!0a;zW}i7Q`}{^O{<B(Pj>bN7H1?UJu`kugG}V(_
zqK;lZw|W>UO6!seCzm$KaW~0<uKp=Dvq?F9kkhUCo0NhMHYt_YBnLBZa<IJI9+RWO
zf657QKsn%`Nu7))b)bDsa(qp4ur5qaYLk9c_)j^ZekkXUekc~|M}_}XC)5w+{Lv3_
znyUN6F%4sD64noF`Bb`*nMeIpYRXVJREEMv3-wh5r$}wPjW&9H`jYJRnA4*v?{#a3
zC#cy`^i>w|T-W@$C8gzR=O6|5y0sDp1Hqtv7l*!kf-ggKyAzbcT@b@pH4vA0hL+;=
zja%03e8MP-|3MMYZfc;fZ*<aNbpuV(VD$#=tih@T?V`cL|GJ2`d=yykfl?iSMLl%a
zVD$p+0qBYJTu_Pwtf8RPF2MQ$w2uah`s}O0qVK)ptJMS+@zqZQzQ)S%9udQvL(HOY
z^!5h~K$v(OsKNRbG*g513n+c_0$}|HnytYiz6NQqW`X7aCIbXuiUunmbgBkxFettO
zPGAK<r)#i5@Px4fi`p*MU{m`g0DK=D-_c-rS44qDQ?*Qkh3{A64H5-b0q6=1cv_d?
zyCNDm=nf4Q$#tg&>j>yB4c0TDyERx(f$q^@Jqx;5gEa*71`QUz-i_}lDX{51uA4Mi
z#P7`-ENbHx4VEADRt+}k)omKo9NmsEz$yj3Lxb%DB^?A<he7YsU^Rm71Kf@DYS4Q$
z*w7C=*{wiK1f{pg0M<y*`!rZIpZ9C9(?Rk5dIGBo^g#_4jrAc77U}i@z#)|R0Q6xE
z7WMTA;0XZf*pmjRed3j1IDq6xFc$DMfMiK?{+xjspfm?Z0jmHn7+4GXq5&H3O9rk3
zeHri?U^n1(4c3pK#|)4R-T=G>pmJ{;coXy;1K)uj*FdU)XP_1EYeC-we8d>HKu>7k
z5uhhEaMHt%HSi?RQ-DuVz7ObU8n_$ubHJBKCpmnjfsY3LS_7vseWL;2OJVF=z-g4P
z2c_`<te-#)@O23P4EPmgZUFsF11J6ZT?40iIHQ4+oJe*6jya%ls<93LML<C~sL(*`
z9`FBYaDig{N(MtfZ3AsU9UAZ^A>&~NI)gej;Qd0zsa=9D0BQ?>cMciJQ9(D*NDX)!
zk>Q&z8oGi;Yrq?djK>)04%$ou*$&>^KyT1k4Ge1sZzpQ-fVR|tcN7_KWxxv>rvYy%
zGJN|+1J)YeW>kQ0VKKbZsDWhCRs-1~o?xIKDD*(-0_KaiH;@b3K?B~CV|W`<Lmp_N
z27HT$@lFQvL7_uRj~0TG90>vdk{y8T94EOD6ah$f0KC=4ILU=z7@&s+ysyA`PXnVs
zduhNM42+Y!2*v=QuS#dn2kmQsWS*=6Z*MS8<0POtf=(;FUJpw0C728#nG#3<$&uhy
zfL{aNJYYP<z!cC_4S4^6@iYTdLDLPK1Dc@$Z)Y-mdq_huDCsT$Z%8n_C90tmG*biK
zmSA{eR0GXdwg!Cbj`2YTW`O2sz`GTU)0`2^1mtPJ8y5^;JJK)*l;#7#t_KYos0A(1
zz+gA<O*swKpfpbe^8tem2+$!0{slTz1MM4X{%8&t1BPoL`;IqTHLL+0se$$uPV-8z
z1Tb0y*?KjvV?b$+#%f@XfQ~b85$Jdgc+*GEE6pv*nbs$OJqk*CKtS@OIR=m&$CsWo
zTmedR1|Yl6X-yK4Jf~|QThD1O39bSZYrxyajMLl@Yy-^DKsKJ28rT6^rh)bZUT)wz
z&<YKVbd2VVU@u^n2D1J53Y7+u)ocy4AK*JP8g2!x(m?wIr#U0I4M6K3KzjwJIVQLr
zFjoWZ8~ERaG~5ANr-AIfns1u(g8;G%0J8VI!N6mnwEh8jJBZ=EVhx8u7iqwILs}0O
zqs%V|FEMZgbg2fi{d}2$qoB(*sJ&qY!UWF)RvG9BdZ7UhO7r^v*gF&Ws*3aP&zy5^
z2uXkdfdrD=dy^1$kbRd;kVSS7L0nJ~ty`7a{;hwvy46~1-FI8Gifa`S0WB(0YSp6R
zhE!3*VxW>DVvLCBdB4vy_a-+G5URHJecy9GzcX{^%$YN1mS@h)Z{`^gh@a~n<lD;5
zb&&4`D|sOJC6M<7(gxc335XwgAIgyz$CR*ud?Q+klOPMc>cF}(V^<|0WmEDS$oG-7
zRSJp28xGPY+cy)CXG(qpQ---ZfyXf4b};KO*Cen2Q_2A_>oMO+;BibT2f%E=l)M)#
z1mX{%!_Ba|*&&K4?+nn~X6&W}4#oV)fz@HgZb{%bn3Au+NI8(a6bu1799WTN>=y}0
z8I-&PtkO63s{{&3(>w?HR`Oan*xNB%I>>jBm+!#ZapU!NkTmlSagd#8Jl;njY39j)
zU`bnV5}1sg^z)`T*bwt@2T3z;Dwu{J(#V?*j>1kFdB=bgu#+wx^;E$tc+^wxB;2VB
z9`#XRw_#Er1$H|o^-*9y!K6NVXJ9A2ydQ(Jv6D7vVKv_W0t?OulxHs;Tm&u!8Q_Wp
z8e#qlTn8G18^DdA0Nj#5G3KofwhZ$Q2m3K5`5|D3R^$ENLGsF@?0b@~lmYJ^2TK|A
z?n@vWbG}3H2<8HZK-?&2f`B^WB@isdzQiGT2J=Y=R{k09Pk`$|M@+f)tTB<+n9n%`
z%P^k@D{*g+xeC07f4RQKA<_f$?+y_u3zB~z(i8Jthe%({wGNT4nD046dSSlrfbLi0
zNg9D*1*W_+2;}`F??E8%K^+kUPtylB4y-#gzI8w|kMTVRRv@AZ*8vSYY}(;~W+3B7
z93mqy(;U#-W6%Jvh>XP~?*-`aF@AlA$V5!afdFkk27U612<6w$a)=y(N%;^&rejh*
z1d$n-O&lUeV>We&9E+I;;`liZvjnukehOw=hsc?j?Ev`@nS)852_lqTzcV0RBa~mC
z{18Nbj!C-v2V*}MbEre)LQF{u(jf8+OnEmDp?vxBY!IQW`x35%C+{ft3#Ne!5|DHd
ze*$^;%My@xzudtahWX0`CSg){{42>nN&l-HJW2Db9lX()zjg4&U|!?korQTVxQlz`
zz5f6nz|On*4?1`wF&}b3UxM);29M(BWK8OYz>{=)3_OQj@^`s|$PfR|;6>bz!F<WV
zI}P)14k9P~m4LR!J00^C2T$^46?hHz*_dxRc#@WHCol%{?+M6rsTYcInC~S(9{B4L
zm_YfaYzI;nuft3Sjj-R2nGFuY&btI%fTZ^`nB+|$<!BS;@eYzs(zh4*A7jcrk_Pu+
z{=~uGhDlxv{ChFUbAkT}<~0ufJWSGG;BUvg&cUb5uwq-`e~NjNgMUBf%?^Gg<}D7A
zXThxw{%4rCIY=G`@@~Md!kp_M`5D~h;D3&Jw}a$uAnykJ9hh>zl!HHF%00mU0`n0E
zU(81x{GFKd9i)5&k2&~XVlHryvJyP*;P1j*<RE27WUIjc3iBxkU+(*pga0+=GVmOJ
zBn--!zz;EBO+fN?m4p8T=4%O9%r_l;dFERQc$ljle0l!c3HX?69Q-AilraT`N5)MA
z{*#y+5{O`yJNOcJDJz0Bu-U<v_xMKw^)R<O_|i^D84^f&lyU(4r!gh(1@+l}r_@2d
z5eg4+U?sjO9N`d9HVQ|AQTQj%3aJl*fV?Xl?;v?nIKe^kp>UEzKw1?}b&xzMJOWJP
zUf!{AhJ)lo;T;YE<*ksiBnT)og>nr9&l(dYO$F#DVhc+L8^<Iq1ZXWXQQlu5{pM(f
zgN!pqGaaPw8_jZ%amQ!_2k8e#8#>4sWVDfk^ogU*9n4vnxen4_j7A;I9L$)59gHb)
z0%)u;QHckT{$I3}gN#8&Nppep`J(a+AmfqI4i3`ii*|D`zs2nCAbqE34+nD%W={v{
zOGSG*pclYIdpk(qDB8!t+=SWJLHbG2eh%nWHqrhL(r1bebU>4UiOPEd=`%$KJDA%r
zhd4<8DLT}_+>S~45lCMuI?O@FQ=`Kjq;C{G)Ir8pqmnMbO4?G!1TxMVrK}00&lHvX
z1~Psbl{^OaQp~9iGS(QSTnVJ_5~X|z%yP`>4$^mtN;v>B78#Yi2lfU`$!{QIlTk@u
zU?mMDO@VnH^H>KfX*knC#v`N0IiQi)M2~kcFJqqIVDH3~v;YSA5k1wx&c!^<0o_w3
zdb)#^cR$0yAXlP4cChzgUgRKSh0$L)*kza(JIL5!^b!aA9HyiZFrQ#v=3xJfd9{O#
zAx0&=fPDe;ItLjej7oX|>61kzjev|7MkQT<^v|M_7C^=-qEd!{y%+O$4l-67o$DYx
zKvc>BkTJZd<UKHhG3A|sjORt=J%Jg5DPaNI2y>nT+OAFXJ_i}+i{9^m-U<_az(L0R
zq7OQt=gdSOa**-A=)(?ZKQqxkI>=aH^brSiqM7KU4l*tno$p|zoId6tV}#KK4o1rC
z;|?-j7+vUKr2IbNAY+HoMGj^(=3)mKM~p6UK;OBEKItIiVbP}?%t@Gka*(mH=u!uB
zGUn3`GENqK#=-muQ|bedF|+702P0)r$^@`|Fqb=^Gt5M#OaK{6i>`1mQa1nMVEbW8
z9RO$;Gts{~$oN`R$_+4AV7}-eV@T1L9MCdsqJMLc@uaBK86f;d^koMbpNL9X0m5}e
zrOW{ttB6WD1HySkUvrQ#i|FeP!huBJaIhC*zUd%bNc1fSdlBYp2jNDdZ#&puV6Jfx
zo+SEr2YWH*I}XBuMBjC=@{VgAgbRtj=V0X>-**shB>I7ay%Mv`L3onrItTk}%=He!
znM5}@*sCx%ItZ^2{m{WmIVyJ$o*}x)0iEY2y4k^q+dmwv#Q7r!;T)n{9IV8-!U4^3
zCi+hYD{<cHApAu1V+Sj7-sT{DMf4K~D{<cLV8r~?!AjYwbTFS|e&%3b#H?}<jv^}8
zfR!>L|AF}eGXYC^iQyEpe4mrIF%Q(kPQJy`L4E8$!OQ@Su>TKcHfW5U^o}(F&9IY(
zu{_WMJ7pu*5)@*;1Tzkbu#-NqV$cRVX%lM;+F}1CW_xfDcJeFM1$4#EyT-bK-q?AE
zSRc?A`?Z+;z#!~5Vh#pF_}20<hl1hQd573YFbY3+VvYu5vEPL`0ZhbC1I$U_2<*I1
zY`TLt4|9ft_W<V64&H;9$2xcqVa^1{aWC%~J06^bo%f8L41UD3s7J9=z>l#nz&sP2
zh5aqeIe>JPetYa}@Kfv`Vg3w|#@=U`=YXFRW(4zG@W0r}gV=fCeC%Xg>>}_B?4)Dt
zVnAB@oiMKeza^X}F|PrnnQ-E<>%h&}NypeN;P?1hjyV^QHvSOIyTN_fNypgz;8FZY
zIhhY0!~Pzoybtg@U_S03eeu{r2kCpqs51iZ1I)z^es|0zfOyFmQtT-}*_W}U7-d}`
z<1w+P9sDCPk+%YWI_9$uzU0p`2meIO=Nx=VdwCz=_r^rl3Z%~;qs|EYKA6Z?fwvv=
zuMYko%oo6mxRa)_mjLfA<5;nk4l?!=d)dK1785xtka2<7s}BANn5)2R-1`;g>);Li
z7|hiUUWoa&gN(<-)_}j`|8~rGz`NM5$CR`N{!C2dp1?mI^8*Ke7G@dPfO{UM)WZ+4
zXJR791b!~&CI`O&b2In{;XjNiWo`?0@;fGV5_tDw{u3al{MncvJNQRqN_qhqBZ+<L
z;19+`776@em{krkMicwo!9NUh2l#^Ue~-Bne2HDk)Gh~4(p%CC_{U&=?cg6}OuU{$
z<d2y30q+-~e#NsLf?k-79n{_gI|%w?HU&A@DG%{x4#5D-<_^I`Owumi0zVxwTRO=2
zL7eo87vkO-GwKj@#f*a@+{a=TI|KtUTRQ}$m<KsT7GO$PAXtal4Rj~|avyb4fX*=!
z?+g0jN3Ki!KrjjOV25BTraWU1?xcB~v=#*KVUBPJCS#6t2oA>_<q%B4JkudK74s|y
z>G#La1{V;{k1;QF2o_>q1g^&YT+ACBg1=zi<q*7rd5?qi-Q)8B<w*MO@dq4&*D)V*
z2;RV?%n5?OVM_ji;2q4zzyj=VV#>3hz`h!Di9<krh(8IQ!hH?q(+<H}V~WUML4-0<
zM4k!)u~Y5^GTu`}ehGpTF-dnpFbk9X63EzmQD=up7Ul$pfO=3w`6wbEq(5Io`W79D
z{X@(d;27*%F@NO{RAOEOt|vYXFgH0wNP}X}A(DoffJYfAZsZWjz-;Ugp^O(daR{m~
zn>hsUV^U59!55e<9U|$NQHMwbvx7r~dQ(h!5JV6_#WNiu7L)fcCOv|$j49!oAVS`h
zP!|M|`!Om1B{BRQfm!MhA#Y0vUl4iFn9{ip5#nA-9+p0iJMk@D1Quf_4@#E;@+?BU
zOP7J?u;*hw?-1c#OJ8(|ke8*%0zsq*bEQM1AJee10ndpPVxHm<i8C#Wdjt{U+GdhN
zBnPt`kOu*I)tNl+%sT`}V-i;9{@D96b%?Siuz!d4n(QE4)R)G=E5Rhaz9j!5l+7<m
zr!ND_Oe?x+p+n?xsFPE`sf0P(1P$?v&R*G3{Y`U_>1zfvGBVSgYc4=b@kQt#z8>Ae
z^U(mj)^0#o?-n%jeqp~tb8c_%5cJg^g?8Gr(KvenI%cmxm+Xybki8Slv3H|0_CB=3
zK8`-vrD%bD4t=k$q04mxI#(N^X*G@()%NI5?TXISgVBmQ-aiiArRSop^h&gnUW2~T
z2hb||9NIx&Lnr9l=mUKhU7+jG-Ps6zn@6A%^8|EVUeB)He?TYX<LH0<6WShMLx<xA
zbTob(d|Fsqcu3)>!m))D3MUm#E1XeyN8#MUKSlj$y=bFoZnP*`8toA69~~8)96cfW
z<LG74-$rka{x14OtZ}SatVOIaHY7GYHYzqYHZgWYY<g@)?C99}v0ui18@oC7``CT4
zM`H_PD`IcN-i>`6tBideuNTjZH;=cBN8`ou*6}X!?(v@Se(^!^VewJ%v*H)TFN|Lu
zzaf5C{GRxI@dx4$#~+C=h(8g3D*kj))1us>cu{dt>!Qv@lZuWkI;QAXMb{T?D)x%g
ziW?O-DQ;HWvN&4Yp?GBR%;FPE{F1zqSV?I~htj#FkC!ekeY*6y(&tNGDqY#SaqCms
zG;K4f&8E(!o%`SS#6y$6489ISa^1vD7t@cv^9*wwEbUy))$7n1{V1B9U$*Pf!Tb@L
zmUq})XhoJ>oq!hNW4u}D6h0pf!lE<y1~dcTL9X7F$khdC`u!8yeV;?4?<%zQmZ4#{
z5ju49(2?7gT<uJ*_C@2Z<m%a)tCy0iSEFV259p133|+9RYUL^;k?3IUg5J~P(PMfI
z`?$|V*XJYX^?V9Fp0A>#b3OVuw+7oaS4WVm<H^;j)w$|L)1n#C=Fw=hRkVGyTXbM_
zQgmwcl;}m#tE1PEt8>{#yh$uC)-o244ULVAjgC!-O-khIv9XI{SH!M~-4dG{yFWHR
zwkY;|Y<29t*!EZzxmrJ-9nXsw#N*`ZLGf<nYTx((a&<)f%=p>l>P3lMoky-dM6Ny-
zUl?Dax!SxsS0@xrE}B8EUQ?Z`jmgy()ww!LbG0Cms|!jOl`bt^My|d{u4X54wY+n2
z=YE>2)MUw3|2?K=JqP|o4x8}z;T$nJkn^>V@XoIr;^SB06`ZdMe;r;K{xZBm{_%f$
zcz$?r_#^wZ{Ih3yC!<+=mi<KjAvZ>YQQip7BfSycaBm2<X<kYALHK_72J!?s`StBz
z-^Te4aMRaUg+C3?4u2BP34a`37hWG8A6^~))`hkA^Tw)8$oEY%!3kn+YOpD56H;qm
z$NDaEb;Ii$PTKGz%)e|ne8UkNp5E~6hOryQZQx4>x2~W)KqjUhAI|&m-sJxcq~peI
z8$aGa`?T>^aozCc#-1B?ZtS|T)5Z=P+iz@#d&i9>8<EEwV;gpGefWl<>k2o}wr#j>
z!}S|Z-EjVf6&r%GcIy$r>uD9%Z(6^0{h!v~wf@%i53IjtUH|o$uD|euvpzWCgX2Cp
z`hyuCjA5GK86Pxwf6@C{?=4^Z)7Aao3Xg0xm7GXhXspgw*hVhwB$YicUE+i0<mLVf
z%oXTAW>0!FAAf|_W7=`t@XL9ZoRbH&i1sOYpyQY?gyezd<0b*ErF<bK&uSx;l1I>*
zE1I@)4rqJoKG1GF0FA~Y(ONtWO~td&N_;Zfh|fgp@Ofw&zEtiCE(X}#KXtiCuAwVf
zYWOYeboDSYdj;BdH={+D?~!1ad@0KjdC8eI=g6+KKBUtyFaaEuHY@F-wA<3|NqZrU
zRu`8w?EAGjtpb~-4(3N<PupG-hO?z@OqgY2rs-L2@5njzNPC6rVBbgD{JO5E{Z3si
z`l36at@#D?31^`*TC_lqL0fP!dZLR+KhY`uB|3w5p;P)~^h1vhhO<Z5ph#QvM2`wa
zL_A~BH@y<w#eYS6@nOOENH=sr-y8IZ1cY!xq&vEeL(u{qY3EHtkMzNjKIFqZ^iZ!?
zy~XWJFVoxfp<VB14mRV=6y(FPwC~58i_9;~#pY7xcmCeoW9~Kcn3;S(Ghv@#*6Z75
z4cdJ_Mf?BnQucGmWRHg8#QqCiWZwjKO_+q%|1*-i9N2S$9qeLopS_>`1|DL^fY<F`
zO@C%`4zL;KFx$c$ZcEHm+saI{t<4d()J(T+%+bs!Ji&G~vurnWqV3Ku1p~}+%o;q~
z4mCfuhp<<`F!l-<ZqBo#%!SN!yTnd3m)XhYDrT5n$;`sb*_**<X3uY!U3N8lG#qQL
zwKL82_5^k(JkH!;k2km2lh~K=R9e0tvoqo8?8@NTH`v$m=j=y#iFweTYZlqd%`$t9
z`Ln&&JZG;nf3-KW2gNPyL2(<q65h%_gm;-&?eE#AVV?QBebBsXA2w^5?e!iryWY2t
zvh(TF>^HdFR9ey7ywk2UyO_W9rG1$hQvYifGY6{NE;a+1&-6<>#XMyHmwgQ9n=<<t
zI~guu_ld{Z<6xngV597AaHx6O{)QbEhL}5<V>aFvvLoW{?16YUyDEGj`zqLwT@}{K
zo(dF>3f(bb8@nZZ;&w~0pC@-pkbM%oVs>5l*nWz(?8RutekM|irsv-1dhUzf=U%EE
zdjXoWpJtcNf$WBK2)dm|pv8GC+M6e$x%qIkHqSs?^Reh+7ER2$CuigmwA3Hr4f7|_
zA{<J)Fq%CL&Z31lta^WfIqX+Zd;fyd*sVbJEI5-dfRE85zYR_DpP);AJKE$wMW1{n
z-+Q0&ZBT_)`OncSzXQ$kU!YrlC)(w|<V$cDUkzWOWBzN^GLJ@g|B1l*i`e~cap3z)
zg1~<=i1<$hY5t#rdj8TN-G3S#@As?5@W=Q*TqN4T%_JK)lWmbX(zZ1-VE2xK$vevq
zVo!^~=I5|+=iAYI_l_~Yg;Bf49%F8_v&>EQM0U8GZEm$Eo7-TvZimIX3&!eh*r`9j
zL@l(JnrC5{mfP#i3Yeq6*c;i^@+Nk^yMsMQ?li0HT=NDD&YSigcBWirK8A()1jeNb
zcI7LWl&{%2<1iSKK`<bLVLOJvYz&3PI0VLG80^Gw+teHi>o5X_VI*wAD4T0W!xGGf
z5jcs_|C1T%{}H45r!azls_n~OAN|bfjKW{Ri2JV?U4NL7^gl9c{)oN6Jj!VJe0!03
zj8X0djA$>hSC}X5uh^0EN_G<YwOMMfVyBWP*jaNCyY($$Z_OvoKNt!Ah*94yjPP!^
zE6nGN-0onM_6z$r*|VY6ZVj>%#s8%2LQ%%P4V&4kA$6Yy*@Yr?2Z~SGwIOxK2HBC~
z#+uzIWY-4oA>D@|We*13dm?q;iMQA{LUxGwh+QGr148$CkbNCw?*`ecA$6Yy*`pzK
ze}*A^siy49AbU=*w*%j?-Uohn-AO}s*I2@i4Aa?@;Y4;{=*{<SA8)%qNcY!}JvE+V
zmxkl~6J);$*=>S7Cp_IpgS|EUne5##t9nlf*>xh<FVGz{WJisAec93BXm*Df%>EE<
z{KItL4cS-YCH8(e3Mt=<odjf0fdT9iAUh6p(LD#c>fQkZBMZ<|KZ#uf2D8V&WcCl3
z!oC2HqSyX!=&~1`_L+QB|5LQoN9v=a{tNWZH;oi|C8E__b~>SzvLM6Eg1HQa9Xe);
z8GXXf=bUExp&Ip6)Bd#M&OXDmG=a2ce0TD4^b|8w{>$Fb87cp*iJ1B+|7q4uy2(2A
z#5re}<M%wDe%zc>&4fD6r=EVQ8GZU5XN@mo1;j#P?h&7WCo)RGzjRZ7;f{qbEQ~%n
z^U*Gky#7eqA0II}#0KAYbiTCel;_8+={%*uPTb^9gMY8yOo?lQlj~iLzms{#H^XJ7
zt!W!pg)2<~=Bn^16AM2JUkvXIEBGzN<+E^QI5**TTUb?neY5xuH-u~PcUyRKcu9Co
zI6GV)zRk1#V+V1m3i%c?ftX=s$Vd_IxtaGfVOh8)T&366IJfXgxmtZ)ee;GU>7Kay
zQCJ>s<8BGNJlu#`&OdRf40m#tD;4@Q=WA_9_&>BGT>V3cQMgTFA!)4UPR%PrTCPc?
zq~wnY`Lb2F*PTzX<D$Mv=bho}dVBQ=mkJ44^1<Ct&N!Ey;l^rja$TQ~&nm*K!k7GB
zPrBCl++Ul<Ylrh4?jWo!VyBF}jQve)E0Q6p+cNi0>|9gd8jFN`;_7<dQA*r;Amxl$
zI~RAIJ3rytdQ9<^=)Wef{ZP!*bpKDriL@pUNW(Rn7xXl1Vuoua*QK<jmXaE~^h>pG
zn)(KbGF%xx95Rk62cgi9<@~(+kNx4KuWFag*!uA6A}--O;q#R3R-AVb1Ae9pv013@
z+xTA<-on52$k=V+MRG^-U^HTd$->9$$+9KoOphGSS;%zaU+tEaVo!Lh+aUIHlkekv
z;IcC5H=LVvOS;rH!xv}^R`U)|rMmM5;=Y|WVm0F=ybrOFdb)$3qz4E2GN1ECTA6zi
zE+W6>2;@Y`m-k7!sf)Pp{Yc0RNkQ(cIY`rG$$wl^8RX7M*HklHrsbmgj^s5L26=TU
zv632Imb^kMTTk{*BI4|vWITGgZB0NwxQ~g*{zxWAzFpX5v~{G7$;bB>z+<E`lixtv
z=^W+=HRBgG&H2SlF25p^$FIb+;5U?Sla{8Gd-Iv?Q^4;?{Kheh_#I`6`5n!5@zK__
zV@6GTeg&ojzuBfEzXH>V-)z&F-!Y7UA7lzmSAKERjbE|p&Tok6!LOC+$?qh3)MJU^
zI5WXaXLZ_di05CK-8G1nMsM-#)#jhXb1U<!N|*=n1yA0|9H~R-M@Q**#B9v8q!&HN
z6tFAdV0s`!>`3~+W9iwpq$hhM-}N)-$>!T*>B-KPJ+V2TZLh}vZ|POcW(UAK%`xox
zH_sHZKi{8CF?;j<&9q`4zE$)G-k@hYoALZN3E^$lX3VCq_zw5dU*!A&D>n-05tiY;
zj@1YSjOcH|=Vn%;6fm~Gg>XJ*Rl{uhliNA(U?szBcHR4u^Db7I<V&B@%=WAom;(0M
zOUKSmdz`bpEOU(4z-wsoWw$+3$WD7XW-xp0HRqh`<(fF7%Pq}G?6_B8hOz5jp&9O#
zcx}v4UPrH^nZ&+&un+94*VP=%u6n(2>Ff11vZvm`ra$}Y4K#V|tvATD@CJK>O^!Fj
z8)Eu+L%pG<8DrLmn11ZHH_S|=PddUJ#;D~eGn$_1XmbSp(!;oG3^UP3vG?9s)6^U1
zjWd(ke{Z}wl+o@9W(xc8O*DtI7vCf^jeYozFe4ZPpKeBaGrSq5IV{IfW~_I#ceI&G
zzxEhhj`fZ;x!!T!aoCUdjyJs-FFz6c$;?x4$}W9BBDB-J({VY|JCpNIyz__~yYlf~
z7kU>H!(Vz=a=zBPf%Bc-Tw;4KeD-1Nvv)snW`8~6{D}7$abDsr;jSmWWrVQY`!jxC
zf`RTQd+2fX4Q4GgWrw^?=5YE-8K$}HYiFj?V`_uFE%O+f(z7@WJA2J>p5xCk<Ncrc
zKQjUQ#GPY$u~*#BO%Ha8JKv<UL)@jNA-lv~X0q8S?sAjHZgIaf2eDt=uZ+hS{#9K4
zt^Zs6U&~DXZtNI$11>lFH=B;^7k9hq!k%$=5YF%X-{F22GySva@&Cazp}&8x$)Kly
zKTmvs8RR|a=|6;@N0`+;h93TWp7NOg7*AQ~FT~Fi%%~pEZgPvvO!kvoVvdvD<OuB<
zX339}9p%i4jEyd5GR>cv^Pj~C=?c@6{pJ2*y0gdJ3tWBCf6>&Fede&Q^jG5NW&dUD
zullcIU*)ed4PcjEGmY4L?sZ(=@ZT_<*@Ny){JiDAWvuK)hkcE|2A}Lmhy7juUDJtu
z>DFR@k1_bJvOgX7micASmh1d=xUcuu<FdiuU?#9v-6oUCsO@HA@(=$XT>Z%Z2%qd-
zhy9=aKY99A#&b_(RODmRm~oM9-1`Z$_Ukh?vK{wNnUQ}2<0F;4-Dm!1yj>M@>rZ5q
z<a1)R!{34Z3;zr5V#hn~+Qo=)XU0mtBL1Ntnx3-vof*gOcfQGD|GS7eQTD*Y&MtVS
z5qsU`nfB~*7d0JJQXh+?E;Yw8>e$8{&pvnU%q-dK&a|cP+0nG7|Jlj3p$FO-`$54$
z*xCIK|6_tNrk(7$W`-cmTeC|#KlVqbpNSl1KW9cllPy3*Lrm8Y(=^0-8e*D;SdYE*
zy0OTod(fS>qDRmJd(WUJ_Fl9bR@)6ryTLxqvS%JG$>Gc(@aO|iW&dA!c0GM|T1_u6
zcZIZ^g|k~^(FTmBg)096_DA@tqCJ-1KWIzk>ue)mF5CF#*dA7z^zhkmUAUFDe_gl*
z>~P=p)h+G!Y9UUQ?g8Oj#DK4Ke)84wHdl7?|9xWna>!Ua|2GrgZQ+M}k#FJOhg{qE
zT}LkbI5ouZbDpc;{O$`g_1Zq{T@J|iJ_4%y(hsJDWz-$N|D3D#3_f+wr?gxlU!38i
z@;`hv+`xHtcz1XVBPh3pSMzUOxCzGbjc@_q%+F)q9sWkYk12oO*WteUUC-4$gEC$r
zaU(w3pH8?YdhPC?UX{K}Wy%+D&86?arYT3iDsiNlhH8r?9cr1`d@)P^r{<{rug3jb
z+azAQ9RZ_)dpV@Oem94foTOxuKI<x^6FpAOFKa&rsjvUmskBP?RJWbsKV52upNmYz
z*Dj>i4$9b@T#xf_CqJZ{_&%^Bd~J9CQl1E%zIEyqEl&aEySfzV`&2W!b&X>rMu$?$
zU}}havxk?5XVQ=UhonW)kBkEnrz+RiuPN2xm-Mj=yUSOPNhR+PGhCkf&-qEzmSwfC
z{6PMld?4`%7t_Zr*IcO1ljQxBglw+4l&4(L+I8lfltS6~%L3W-C>bGfvV!ZYa50P{
zGb)P7p`p)J>wcbSNhyo&PIrqd&6HNk6Xl0dF>xm^tK@0wS9$MH%97Rrci*08SH2}q
zKg=UJCh|jy-47#9wMTrzB?pp1?%PC1{u8&=)c*qsr?%hk=8H$=(HdkWGLy3G>YKJD
zeEn_>->LmfDfPR%=zW`$^{uX}`{!0&w-erzwI8YZ1x`}0If&Et@H1!UpVq|WzyF*m
z@|)Ob8txejzSgCc`%aGVE1tube$Bg+cccQTB5h}V<kKgl7%ePr6^yR!{qWr-zMr(6
z+%sqQbg4VA@Y?WFn7XAr@ySG(^bhDwl@XJth~HAiR@Wr1Ji}K~At?fbg&+DV`VERH
z2Vb4F*o5#exM`UTUv)nCzi@w3Q{&$}c^}_rdmh=0XUZ`w<&u<sht7;c_T-<mG4AM=
zwA5kd)Zw;=lgq8z&b7Z&^qPc~!_(_Ny6j#r6ZN)k-v{I>Ath3rvGUZzF`2bo>a2bA
zF|<6T`gC?}ANO?L!-ev_QoaUvzd%W?^NGY*`@-ViwXn%McW*nit==Qtr0;#1eCr}5
z2|wi<HIYu+^n0`VomD!u!e@<3tuJs5We3;S>bFAMny2ph#x>XKvQf8|!hgf~rS{PI
zKB2#^U!VUZCHV>!1_>G3!}QTFP#N?1++=7!J`uC<-P+;HH;}lH3(8-+tL}Yk``rCs
zxSZ#c!nM-LwJqf}U&C^jrc)j&9`s4-QahcP<tZg5kxu%cz2(1N-0O*6#tX<t(tOV&
z5!Wj1eUeTbakvNRpUBtTZb!IvH;3xKb@{HoScgSQhs*C|svr?n3i7@j<W%D8m;O=(
z42-xX%AU*Z)c0}rloD5W8P6ijz0@EHpC{}{#3@mBDL*pjK=M=C7?I~<R^qk>@6E7(
zq-9FVpj_D^*EA&Mp~d#?j=j}8o?4msX3?+p#8X<OvZXa8ORj2puc>!>Lv0_4Fp@@)
zwCrv&QgTPQMA*;dHyyHJ8>Nh#LvpPTpQK;&y2}lC_5#yU(v2?{IDdR-@6?4E{<U`4
zysf4@emB=#Nw%FeE_K_uOX^E?-Xn=6=d=%6Yjou^zNTDRC!k~+Buxoh%2Q2gs{3jC
z<I3oajHXu0Cw>2|$x?{y(lH)=;tJZk9BN&K$Pez?<&b>J?y@HtTao++b|gZYaA0?R
zC%%PYoxt<c1$BhDM~QRaaWy`7Z})4i?60k+bR_Oz)>TcPm8%6NkEeR@t`U9)X1D<(
z``IwM0bi4a*h=^{Hm&(GY62&FG_37!%q^x3^O~Q4y<H4DJDmBu9&BsO7BRE44fBq#
zx1-=(Z&1$lR^|;K$L!7%nCCec&h;{LkNqV)>vDM3Rm}K(9bPpPKK1Xm0Zi&zn{D5R
zOKr^Bnf11*{Rh7s*wc?~GvQ5bOIyV+pLw{UEr2Vvw#4(jh;8N7^Xl6+!j;<gu%wM_
z2d}Bu)OLg)&9j}nQm>6YNM?lFZp;%OYI`sre3<RYOz=Z(FV;LAVS5MDgXy+UFe8{@
z`v&&~_t}2TaDCABXRXY9J0MsPEVP4IGqcnV4W0>}vBQOrv4=9peuW(wc_Q)zbErM@
zB=B@jUqBkB^UGJh-6JI>Rh#h3m$FaF3-_MMcWQIeS-AI@a_>dTy?0UW9mbbmcl;JG
z7f-nNH09pgkPF4+P%D1@l!1>Z1K(E}_%vnU`ziyUrVM;vW#Bt21E0Z+kS>g-2oE1s
z9zL!-d;`81dJwAc@Qsv*Z>c<dALg}BBNjhlwspR8@*a8r40d7W3zV79RA#<VnfW4R
z<{K(A-(8t`Uzz#d%FL%JGv7v;`9PWZ-pqENZu)6i>8t#FMEUu?%Fp*zem+h4`M%1}
zcUFErgPHKpnk;4M<I2((D@)%<S^B=p(nsuD%w6xt-0s!*6vn=<GWKcqT~_vWRo*^L
zdHXcw?fWWkpJq4Ojm)Yqx8<CL!;dJ3pQapsF|)!e2u+y$zRU~%gqi2U=l8Xr+D}bS
zW%c{YEOGn@x8GN}{fKh=eU;l!^CDh7(@PotzRK|TRffN_GW-!`_%o#Jnk?n{5AvFM
z%}h6C`wvpKKdNkhBW3&BD%;;q+5R?OJFgwwbqBA5>8X7FDCOrzDdRoLpXg6C{gs^_
ztnBn~<)ud|BYlW6%tMu79;w{&A<8EYSH^g_^23KHCp<{G-x12n9;zJd5anP;DEoS-
za;?LZ?X*(gOtx~KvR0$DIaueY<S0YgN*T%$Whk2|Ls_B>Wi#bGt@4yjl&5T}JY^H*
zDVr)!*;skX#=*hC!6uhgABUKZ!SG->=MljO&Le}7FsP%0(WX?n)8@)(9t@*7nOQMY
z;5841*PM!dS}+a&M+Qf7J}Nkh^9g8z%VX8eEYl)5B{;?O6Io!=neTo-^KBjo9>V^|
z;E$#ga^X>2<_Gh!KNc*+{zUKuR~H3~a9JEI#^oty#@A#0<Wf^#qz3N7;x-Vefy-Zl
zznFAoRhucRS`z6P>1aAcx<tB|_N)q+V|pmZ+Xk6(o=WIUYHk+)8t_X~nUaZgZj75q
zmQ2%>Un7+-B3+sxQAEBJsC<d4e2J@kDOUN?idvkHY!^wNp_0BH|60=mwBhGuN<Cys
z2d>I|o_v)i4ON=ts5Hq{X_Bwfq)??vOr=SYN|O?mCaguF-N-aon`?;qwfxe|b^HQz
zJuOL^wj`OfB&3mf8p)Drp5>QimZ1l#kxH3nDrNGJG9U6T<z@@9uV5}vfl8dXN}N_I
zaayzHCN!C>t}&*$wX{o_+Ad{iyX0%TR8M71zOHAncBY+44L^=H%GWk3g53FusfXOT
z%w*6~U1iekZ&-tnVXtA1P(zhLIVyv4kwJ@?x3iep`z`F#$fJCfM=_O0B`S|fY2RMw
zUYR>oPg*(bv~s2at=#+AW!6x>v~}2N>#)mAp%Rrc`Lh0myF}LHtCWdI>&Lw!U-FSJ
zySVz5{R)?_nLCtEn;4o5X%#v9%p=M`)<l>!R1b;M0EtuIG*nrWBP}FzY(&ars7xtD
zrsSDY+R0KA@me!?C|7H5TWKwshd^t|nbwjsttDq#OU|^GoTY{|k=Byh{z&i$_D883
z*;+Rm({e7r{x~(HiPnc~tq)DLJ~Y+(P^9&tskEY$y6XAk&34MSO2N6gLuvI6=ex3s
zKFM~@<$OEt<hybiUys`vd8!CsQkGoiOUpQB1z)1V^6v;&xL(8lelLAj{&b{kbM3F#
z)NlOn>N)=}g+rf8#(lJ(PR`P|;-5RqjAa==NQ^BczoRAnDFtwYjFf(r7%5GRgMObW
zM~|?K^0<T???FFtv+{jUQZ}n(ypt<ywP&;*Mt-S_NB9gSd0TkD#`jt`ei~A1=xJ`}
z4VF{JnXU4D#QDH`RK$__!rw<+_8q3nUH9bF=kNUuNW1SP&AuU?t2ED7g=J=>jua3F
zdirvfaRXgjfPE+BA~}BkGP5!^E4RL$(FPq&V632vmRw2gHFD>^pZc#{CFK|oXJkeD
z|A|qhlpgk8#smryGb6I)E%tbBLtOIqaQ&7J$^51!i{w}SDp3-oj_b&WdjzSjhZ|RO
z_J8M@=e8t%mGs>QFk1GGJUcPQ2fL44aHFGA8i=`GeUo!CO|x*XNmEHnIliAX{TPY#
zK6PX}BUU>xS0hzFChl5mxU!Y<C*v~PljAnDraDfQ7`dz&%~6@`qI#esqwcQn@|-&M
zRTFM<+_lC<Y`l?-yl&C2iC205_sO}k+J3&Te=u9m%Z!NK!%wzed$@1Ix0IW0;eGBJ
zBZW=KAsMk1^Hbt3^J*%?FOe4y&}!6_q}>Di0sP<d&A)x55)v~}v%Wbz`IZDbxo<cA
zD|s(hghAPsXnjQ5NWJ)$DI0$1!mlmWYyV5eAmNj_M4J1F@<J{r#@?&_1@g75V9{l@
zt9&(Ut*vo65L>b|)}EWR&zP3EIW>E>9^nV1o}?vds^wU|B7AzR;#y8F?03E$$Q$gx
z-*1yn`~Q@G!RN?2?wL@B+uoeA%t(I!$^kR3c~z^t?~5<coRqoA>s+frDP60aKuQ}y
zn2z`O5Qz(4LCKbSRsBu*?`cE6S^nsozf%*hngp!Nt>)^!ZPXnZZ)uxa+7rxBULCVH
z+iPeY&0xk~dbp7Jo*0n4J0XeENk5lIomn$AIuV0{8X2K=PF8FG3rA{g4<B()u33AS
z8elSAQspE0|BmD?Uup2E%vqNi_FGimHjppH@Eop`^P_E(!>#B}zMpgZ<})q%lDg(;
z)%`WVQ;17lM@`I$<2KfH3)i`Bf9Igo72<d2mRy0k?-0MaT<`n--LFc|y7oa1wXW^L
zKP_9XwV<qR)azMrU$xR%zE8M<RN<&q8mn`E8{>`thC^CYiA%Vt=3zB?U*q=gv$_7)
zw|rh!qW%At!Ti5<`wzC=|1ZvlJ-_}A;AMo5_Ov96{u7`6ZzGsgVL>zCEQ?_XTETi|
z<7*nM$1&zAc!pcq#bTCO#P7%KgYb$u6U|joG!PZr*66QlYulr<sw3-xZ&bc<fijKH
z*vrvQ^(>mWerJ}!8Lmb{m8|Jqfd;7e&^A<N%g{Hp5hn1jaDbc9S@jXCdH;q6InS*0
z(!4bDvNCwDz}+=4tGsMh=e`CP*UG%^wS|j&lQp;9%xbTP*Tbwq|6^bCcdx(K->hZj
z?I80W8lFa)GH<kZnAxD~V?Xq!cvDQdccgcu*~B{7nPxLOKu<6qc_(=%nJwse`mw3-
z=6G|=R@S)QVLoO>>mO~zZ{Qc$2L3pIoGld2%0^+07P1=JGw%Zrj#&Bz1C);*K<Z_h
zQOX?+P}Yc*;`~M{U(`kUqCv_RbydEooAO16DPPoG`J!Q(6MdDB9;<wGfAXZ*j8Q&%
zobu6=l#iaGeDql5qo*i?G*%g;Das%ntPIjY${-C?25GP|NJErC8mbJ^A<7_4R6e?&
zGSLH+i5{R#^eAPb2Pj80S~;RF%0v%RUZ|V$Lfw@Y8m3HiU*(|3DhJ(PIp{H38pbIj
zG)2qABxRqcDEmA`+2^s!K2K5R=U`=i4pR1cpt3zfl<hf0*`A5Y^Gs3pd6Kfv<CJ|K
zsO<9;En8!icOI+E&sZ&CQ<Qfet6cLW<(kJT3v`IGKm(QknWFs96y=wvDE~81`Q<6f
zFHcf_d5ZGOW0hH+qUCamvONbYvph+e<%5*-8K|7{NM(KoE1Nt~+2o$eCihY{xxcc>
z<8%diYh6L!PFIjO^SXQ8;ihFBd26qq*AKg_BX6MV$Qvo|+(g%r*VlFAZFL=ahOQ&;
zsO!i}m6dLy>&30E7jL8M#Ur|2+}HKuf!2o{Z?ZSpwAWgZ?H%qNZt8hcy{Wj!I`RVa
zWll34bTxUp)|sZdraV*El;`W3@<Lrxo~dif8+tRTQH^zFd8V!`_q293*7fC?-fZev
zwyrX_y2?E8PVr9RS*LoZ^4!zB(@dJKJI~a5*jQJeXQG|$EZn6|HrAEsrMeQmwQ}xF
zbbWbiU0+_RE6Y3TnsTda$^-OwZ6|!RbP@h%-e-hU<yB$-9BuGvy5c-jSDY704QB<j
ztUJ%tb>|i>S%XY_U45SEkMYM~mo?~_=!G3`I`|X(32fOk-JcHoEIK0M%I3wCi;pW8
zKUul>66NAsC>NirTzsB#@wv*y=P4H-S1!Itx%gt`;)|4v7d?x8OmpSpn=2RJQn~m}
z%Efn5F20j;@vW4LAFf<{59Q)v;^E>;l#3V5T2rwL7vD*__)f~jcTz6?Q03xBC>K9Y
zS@`jR@b43pe;=<L;{@g3$1C$bL7DgQ$~2Bwrm?d!jT4k<9I8xXXXV`UlylEj&b^Ov
z?!A?5?~lY}%`?9Sv^_p;k4VqPFx6?u$a?&8Rg&iO1zTU4^9<(hNE=nCk}(U(7)8FK
z7#H~(=a-{WvbjphmMSHqDkbA8*Ba<Nn`UOBnM@cm+omyX+F3kn4!_*Q%$xJf1%!Vg
zzXEd+EnZApyh3g9nrVyIf)>wb6OX{=Gy9}~)-Oj}zie&&n$Y?U!ey`>3^Oj8F<PqZ
zi>lO%YfG4;Enyz=>n#&k$(5rrD_h&crYfx(>in2&`ys7jLv0nCYO9#7tzx#eicM7d
zG}KnHskVwuktrqUYG_5<7^Q7&ixvx+trAt4lIeA$o%FPw^k^shU>6M)^|iJ1RI&sr
zS?Xz<>1mr;Ph~`gN{5Kn|8%YAzSi?Jt=nnZaz?bqx>}m1EvF|fCwc><UZqLP$=Y|B
z?V&9vxmV3WH@}9wHw7JYXOoXd(qE9VefiOQ;K$5Z8Mo3g!L6`7;<gpkn%jH;Uq0W9
zSNhf~;3DP|=Q4Q!tAf{XUP;fqEW8H@10n9pGilF=`I+zmGBz&EB&$u7pA;^#0(-fZ
z{|wWRe;>JfzmIdWPgoN+&#rTfuzK8~W(-Mf#9#V&Z`FkG@32uSbUlNPcgXm1Vq~NC
zvvE)Kjg!}%>HMqiB7IkKp@PwU86n%cw^8caA%B~H`kaNte{XSKg%sq_>uS?~QYz5u
z$C>f~SG|_H;9|dm|KPvx;9Wjr{O7Z8)sy*NUz>3$I3&`yTpknN2S4P>os6+BV-z(&
zPQ5ARNf{v-dHF#cwHY=k-^5<eyGM`sSJ&v>ul+m!C*tTzG)z%4R-~<_JuZxI<13NI
z<b(X`Tvc*l@g@b5>!MwqJFwdmEVGl+$PpQZO{_eTfcU>w&25fDPqYso2?s2`(eEbq
zy-2XVM}@nSqq${!_qFF0-WF!St$^UE3FeK^SeYWeS!a)K!rJ#G*l1-G+!aYPwI#;O
zYy1Dc|4GUbQ+V_}pXBN%S8I)m?&<HqT@Fl2!8|`jEXv$-!e!X0XQX$z<N26#@=R(u
z5r1{Xxw;<w*@d)!=VUF}Ki_-vMQbR0cV%6pcT)T0zQmjs$|CRPToUY~UQPJg+Y`Qf
zcgim%lax(Ljk20&Bx{Uw(fpw1$v@2(DNQ+QuS$NeIiKJC+10h(!~Je@ZTC=9|4U9L
zOH``+f!iq+@`al+FQ_Jr>N?2N+<|Z9I1a21CGI_qRhcg&?6)KWJOG1lZk24rc0FHB
zYk;&b^1Z$clie^Rw<$MQ;j+-h5Y3s}@wrfa%w^6B?+U*gPxxQ?jgQazMjw0ikdPUP
z5Tu?-dM4i?^|oYrPSm>;{uiw<DgRRM*@r!yubt%g^0WK!x7#KC9$iPutfSAuibWtg
zSkcqVkCaUwPFi!#NeR*&pRA@$mI?HRC9dfe^_9GL?`Bf!5YF3s_qF>Kp7g%vJX(9X
zQ*@PWp_eAQpG8BMNa`|Lna#Di%|shtSrZ!JIH?z}ar;IaIh)M6Z}hvH2c5r)jy>m0
zOkFy^vzs^mR;TJpxh83zlrF?szxfi9Z@<#{JCz$EgZ>S2Bl+H`rr7uANTyzGzoZ*{
zb<*vd@-Ug+N&ov}*68QOclDFL`A)ut(A-tyPs&B|AEOdlVx|63rdNwQCH)<#oyfvO
zJDK!-;AS|N@G9JW?z{59!l?Zfmu#I>CMUk{TuM`Bw(-rx`UELI@=WBp^a;c+t$15E
zYZf2crtd2jXp~CEczJ5N?dzV@Yc-60qC}8aXyke&=?AH>Oze#C@VzIq&8e%>Z!b?s
z!QH>GrG4orckKPB^;QQ`Ha?;?Kt8*JG$bY>=lQx*ZDZ9}kcG4WBKt&Ie8=C<we^rB
zpSgdgYBZ@HEg=o7^OrJ^%tz6%zENcQ59nyP&$#61)qVSM0XU!g49w-)H+b3oGVS&M
z4TrR7yuV7hJ>SQbki=INmy=%%HKnN5J)S9nk?UfNvTzZvCoEi=vT*6%0B-;z=7YWA
ztmzUR&Dq`<Zz8OeaA>)(XVcO0EIOA9VaASO<o!7BcoT>Fnr(_<y-sKK*O_ox9bmC8
zH=WR%e6JbeJ%YaD(eO@V%>&9Qy`!AcyZ%r7v&~x7Zv4KkAN@erjFzcB;&rNnc)hL}
z-GDaXW#&WG9bB#&fj6mU-p#6S_aCY!_am5=zbVhyPkF}S$_WhCHyo%uV?SjBM(TSG
zRJL)1asqvo6Bwjy;{atFhbh~5u(FN)m2I4^Y~vth8%HVII9l1pp2{{JrflOFWfG=p
zN{v-MVS=)ay_9Vnt8C+;$~I0@wz0Re4To!Lj#svEsIrZRDBCz*S%^N$LQGV)alEpP
zJ(Q7{sBGhSWg90b+c-+u#xcq^j#aj?m$HqMm2Dia+{Hv?8^<f#I9b`oiOM!kSGKXA
zvW<h3ZS1FP<8);k`zzZxO4-IS$~KNwwy~G8jgysa?4@kuWMv!2E8BR8vLX|eZ5*#`
z<0xet$12-6UfIU6$~M9^!ZuFRl5vEtFCM4mqnB#JZmw&MTWTq3r)!O4{zd*prr5v4
zzl5{s!_L&w(^~amM^zton(D)Dq57~hRUdXc)rZ|y^<iiFH~BYluV}?C)HTcXb<J{2
zwPI&#DQvB!uq!)Z-Gfijja^SmWINT0oyqQ3f5csMV|P~F*lDU8yM=1SZtg$j|B0)j
z54*MM!?ymj{<9`mwPKg(3TRKYVrQsU?1oyh8>m+75?vV`s8;L})ry^=TCq#mY4sHo
zSKZhdsvEnN)`U{kjh&&ou_LM*yF_(k=c#V&64i~}N_AtGsBUaubz_&PZtN`8jh&&Z
zu=7<nc8Ti7&QRUh1-dRfUDss?svEmRS7+y|ZtN1Rfu*V&yF}M(w^7~L8LAt*NOfbE
zsBY{gsvEnZ*3|~88@ohxW4BV>*d?kPJ41D27pZRSi0a19Q{C7NRX4U(-Pjoc2U@B{
zLv~3Z8nQFA=9elr-AK9VF3L?eQf_*Za?>4@o9?dMwCv5)33ga?V|P?;TJ~z{ijHm3
zXPvFwbYtbFvz41}tlV@n<))h{H+_(D)9sa;Zm-;Qd*!Bcl$#!++;lhPrY9*k-9fqO
zNy<%kP;R=ta?|aVn{Kb%^c3ZhJ1LLc5h*rGrC6HR$?Ig&z0O`|q_61S&+@t;vm2^J
zD?n!VG&w5Qoa8Q0$=y<=Se{C;43%OnREp)Q6iY+*{%}GNxn6)=AA>{}eftrWX!TU0
zWvfKXREgF=WmzMYVog+vHB~9rOr=;8m150Rez|!P`6{_$Dy{NWTGdBR%`*AkiQb8{
z6|-q2>Z!DfsI+RJ(y9^C>NL|t<y5{(sC<=BO^{6&&@Np_OVW^*<R0QI8u(kHb$>B2
zU*f&aU7}q-qOz%h%BDu%r_6h3f+Wf^`6_+#Rr*9!`ZQAMldsaJDbi;weq@$Ip-P-4
z+9LTXYkZX{R%L-zSrBOb_qA4AZIL{!x1N@4w)!LQbjPZua3(BYtIC-JSAQ6-F>`?V
zax3FobW4p+x>_yrf8Y;s5`Je5-^0(lwLtWfWCc(ex|?%U7eF@O8`$Vc$rwN-nv2pg
zg$Y{2Iw84VevBaTpOr%2%}WTEAeu9iU%m1*1Cm<DbRCMiu%{C4@>RrG*WQohx6s~w
z?9UbLk;yn(N)I$~U(J`R^pJEkxTa@XJ8VYWQtqc`mr?urf&HT|@H$$ho~LXrNxhT*
z3*CQmN5`8uqhXKU(EOTj#F{(8Mb$c~WY&R<bIW~Y{I&wot1W%E{X9r-R#x)cO&921
zzD4&hR8qFi;{ei+7}1;N-OvUqVL6SU#5VD6yXP5iUfl<)>)EOPHO*>v?aG!Etm~fL
z-LwSHmmZ!g7rNtHLI*W@P)0aX#<3-zMnAibkZVRpT=|pdF#55Ke^rzZ89h+Vfi-n%
z_n7Sdzm^Wa%VB=sN$4wGO?}sNVRU(6O<eXJa?Mq8;Y{tBzvP}s85V|6bi#du{2&#i
zWF`8-a<{l}uANJ+zbEBoZ)L_kSnf~Uxo5A6^(C6hnsR&TbGcwhVOgn`Qa=*hSM`WI
z&q12WL3}>|TKb&JzRtX>^6)9~L`V9+HkK9MK`6*oIb?K<aCkq}MpvDNsVVDxa?Vm4
zqc-G!?R2j8!uXoXG+m!lz5b^9axIJ2zr?r@?{^yQ#{HC|m4rW+HS5cn@3Abr0h_QG
zs^K8Xiqs0m{Xy=Aw_zoYj6r=A4#Q;b5$6}cEifu?V$OA*sW&{Ou7lOeGOD6&h>l;0
zyyIQ91mxAegVwQXU+dPKZ{nh52EQq3Ch05rr!|^1K(4xyl~q%VQlBPlwd6MbG!))V
zVzs*3cY0!7IC?1c%YyLtJd$_UT+y80kqlR3RhB3ZE<QD0_ptFKVRxlXs7kEN<J({l
zZ#dNLn(EW7UagT=+*A7vGLUMuT~cqaW!H4tV>Ay*U!DG8ncUz?vE*URm0AJq_NQiq
zaQAw*U-wJt5wrpYTFRyF=MWDk1DYgk4b>O_+~_W5>M?-1nuZyjBCpb!5vn1ictFna
zMueDbBT}yIX&r!5Tf%8B>j3#4nJ;Gvfq8hsW=R>_MOjN|=iq-{of4~uXnl}FQ>K@^
z6<?2cFb`jjF63Mn!YEUFB4;SiE<Y1@ipRQ-)YO(3xueFGblJO^>Niz7@BNOtuBbdH
z;~lHZmV~Pu8Tp!;-csJHYi3<R>3TK&3X^$#J5#+#s!*$t$S!PZSM~E!{Uz-xMN__c
zU1|}+c5<PK<Sp%1j+80ng6t@}U0BP#AIW&vuCw|^^jWwsz4n#5LV_7!q@8jjyC3l;
znogui@}Nxd6(R>dczZ>nC2;QUoZRcf`AE3cN-f+d@%wjZERs5LYcx$HN|b(wNWRJb
zO`7`Hk%ca7S5`HIq!f~!K&tbO_t0HLWNuvT*zC>&kO!~fI~fX|Rqy#C>ci61JCl8b
z>UtvW#cF&@Ymsty@*Xr4&*#cAkeDl)yz;M@NXrV^-j$>P?PtwF*z!M3p5k2PY5dzs
zYmMaC{UBBg6aK`P-oqW+k-gITN!fTuuGjTOyN87@@t=72)Nj%~eIAI*zc6#)K!X2|
z`6UM>y&MxJ+Nvs&?7qkda)I2?FQn>xOQvldQ5N|jJ>EpF*Z6SHaHSl(@4g;tuJ3MB
zeN_orK#Z=1;arNOkgy-2wERW-7VH_doRYVZ60(ujdG+pLr2dx~0&?Kr?P%)0lh)uO
zy9ShDK8fBd@qxxGF>8)w+2op}6!+*MYu8*E7g^KRIdX0;wxqnOcCBSek&Pmk2G_c%
zf8>4+d4fAKl9oM9@<@7v#ErwnDvKCYA_LkoHwV3q<OeHpBv#mhz2#rxnfgxLHB!T?
zbxP!`jP$r8X-odcl~CmAGU6j&eZ;L+5dYCX#Azd|^;Z(BC8-fX(k@H=FLssm+mfRk
zwXf3usC9qxs<wRkr^c4NwpWu~6qU6w{!jgL*x&J7*og?d#I5X$dAmQ?wDRxv?`D<N
zJ?ygC!G91Ap$qK6W9+s0IE+CrxPoWRApbdkg&6`Hu*wW)bYFI<+{|v2$1~PmX-;AU
z{R?vjBjur)!{~TD^E1XBmjRC*DP)aNA+3EnXIY^+Tvuoo>I%(5U7H!xwV82Un^~-@
zG7r^NnNEx62wh`TpsR~U>&nWguBl9F;*_0rhw18~LS0c*s4FOk>k7(3T{{`mwUepZ
zG)L%ap#oheG+I|aMiaU%MYHZ`r>j!e6-IR}VUeyJEYOubqm>UDqG_7N=<H9;DCL8)
z{r~a*2fOT#+C#@{yOY-E;c~uzzG>!P;9rPcc%nT27yiZAg)Pccw#bd_c2%~hX=3-(
zEBq_)BYUVe^sn@Pja_z9_5I)YS7Vp`RJ;4v_}5@}yQ*I2Uyoh(R`vZG{Ts0hqm-wN
zQeXcT@_SUuZmZ4wJN-Lxkv&&^|M!%GQ97>NRZGJt9bImzOjDjRP1c|1&%=-G#o9wh
zox4+39>hg<WcB@r{fDs&1C^%?RIilXSsVHb{KvT}d$jgYHY!W^XdUS<_7~&+r2iym
z;ivL+B)hBfQ<=(7byj|Au<}!ll%MLa{8R@W=gwDtYOwNCIm%BBR(`6#@>7GApBkk6
zRDb2CJmsfaC_mL-`Kjj0PYqUns)6!TgO#81l%E=`{8SU=rv@uO)n56j{>o2vRDNo(
z@>BhlpK9!H^glF*C`;8zS*jdmsRk=c)lpfh!OBv#P?l=2vQ&YxRQ;8u%2k$Xu(DJG
zm8I&SWBK{YQVmv?%2SqVu(DMBm8Hs6ma4h3R1K7+>YyxDrm|H1m8CjZS*pRxQuSAs
zs)e#t^_8VcSC*>2vQ$HrrE>eNwpNy^R9UJtWvNP)rAkwls=l&ReUzo@sVr3=WvO~9
zOVwLhs@}>{WhhJ4Pg$yd%2M@HmTG{qRBe={s;4Z~P-Uqi%2EwgmMWqwRX=5^`YB7*
zPg$zAx`MKuu5TNyj8&R4R;9Yyu>e^&$J_)5B1abM3bT<mMpt?_({nx&M|7EIAejuS
z9~<IF^ajU}LHR&*m*=ar3b;Rm?@hUC(CZ|-h!+u>{1fCN%|w5(gfH5OV~J682~m7B
zBNn13UBZ)4-Qi(mvL;XT8XJ{(IeKo1JQUQ|UUqX<Yev;w^c=SYqWQQbcQs-SXC}Tx
zzr8zTkMlU8wdAk!*;r++gfA_36yI`4h~iHU3CBIJc@1Bb-A8&f%^%4=nQO<;S~32l
zZLZ8>lHS{Y^O5p3@!$6v<ib)olf?Jte_#A1#;(`JcM_U}8C8|NMr0=~;b`RBsZ77@
zUjGljn~ZRANXg&#ScUUf`^;Ud%rL&}(_ti*Qe!@mf0(k@XssT0?fZWC|HwP(4SbIh
zAkho>;U~p+9z*(=$x`>c2Cn}YU*A%<R<iFh0+h>?o|KH@eD??CM)xIW<Yn`B7rIIh
z>AA0=*N#rM@R{!}?3$41w{PYNn=x0CBQMol`TlG=9#CsUa?gIBjI78TGlH?m#YF#!
zE2DXP#!cLiuOe;NahCbJ>yWr`fV|h*@IAe@E_`p#JHK0(#CXC!0wqq$1n$GjUM|VE
z%3dxdoMp^~zWM>Ix7j^BQoBcZ524%>-k{g`$C&CO;Qr&d=SYwA_uW_~t-%YaVe)^K
zxDYE@Awb;rH+Hh(@xSLFZ|YoyasY3TUCVFne|jmwK2(?f>M=F0rrO1G@;|YX6~x4i
zvXhPc>nP`amC`+OmoldeMM~L|`l_{<Su7g0131-;;_WLI`wFlognju+UfVr}NyZ16
z{cYl2nGFBH%$m3}OCU>UV2S>D)wz0LA=Tmgs6E}tc?tbnhM#QLlH+<v*&T^;BI98D
z%@XYyzkRtNzuj!AZLS3F({FNod0(D-$VDy7<a|<=Cf{jaH}3lybxT?w3A4IXB-<$J
zUgbA&AR41xb(h9uJtpi#&mq;{H_hbPcf92)aW7BAy_yNFP8q4?yY?N1_}yDQb~8Ov
z@2?ei+Kg{^>^t4}9<St6<=v9+nsiH=HR+CvMFZ2j>>jp*9ln~evsVFn*N$R5aDj|c
z1sOp!XcM$!JZNMv8tqhFjAt`-lz6n(jX+0<10AuLmKb-D-Jb#-yEsfoRyyeDM@Jn+
z>BMM99vb&#G-eFr9W5ChmJyn<d_@;9mq4@;&(M($U&oNG>ZxL-3BMUSo_vIAt7?zd
z*EYDcHSN&K*PfrRn*Dmx26V*E{A}Di^XsMK&k@z^*IP%S(^RuxJ=N^jPc{3ct7gAG
zssU>>y00b@uIRoB*emL2?6Tinp!%-b=}7f79jOjf*WY0}Ufn^*t2?T$zs{=b?;zFn
zH&*w6YRm3V)=XEue?4>ux}$8|7MU5U1JKuzZL4~)Ja&Z|gZo(aEIdlbx{pwOfIU?+
zR(tk|I)<yq+GE+@Z6>=I&QRTeJykcLuet$ys&2qusy%Clj*~}JLtt;!5Li#g%+pmv
zU?1HNYKH0w?5TPJ+pC_yBUIZ~Z`Bjn)2?Bks2Qqx%U5lIzG@5fRsU8`)fVWhw!rqP
zEzs9-_;l44*jx9EnxQ%ad#cXBp6nU*Iic;aJBYvR9MxMj2liCWf$dduU{BQ?=&R<y
zo~pa6r)m!DrJ4g}KgDcjYRhg>y>*;FO?3wL(b0aZqy0zd%=e)>+kKd>-x;N|-6!ij
z_n|54cP6K--)XJuciQNj_d|5f`=L79eX6e6X`?gT$LZYmt~z^txXxSemRNUljCYK2
zYi+uxtg`8nSYLCpcd{9mSV429cP2i6;+<!v>Ux=>x?ZM@u9q3A>t&|uZ1i!7RWPDw
z&#inJmss;6y7k5@moY$Dj3&PD7ekc4h$?f@TsezL%2rHLwxX5JLvNvMMUJu+gOsPp
zR)(ULauZQyB?^>}Xr)ZVBxNEFRu1BDUE9)J*@srjJG4;7VX!g|laz5NR<2=)at%>s
z8Cog7FiDw(LAtgjTRDXx$|(#`24Rvi2rZOBn4k<oLuC+hl|g8%48lZZ5Ms(86e@#|
zs|-RjWe{?eL71ovLauTL6O}v2OIh18QMrSG${pk?chE?=gIwhf@{~KsRqmjvatFD}
z9po!_Fi}~9TxAU=Dqk=~`GOMV3z{ikkgH5VZpwO=TxAMcDpN2qWj#x-as)Bu2nv-W
z$W@LYPdS2I<p?IGtYjIe96=-H2x7_+Oi+$sqOt?I$_`9SS;OMkf&K}0pl#5W6)x?A
z4(#;TG3aPAl^4iTULaF>fvgl>;7H{K;>rsgsk}g3d4ayl3-r}-{tO-A&(JaaBUB6G
z(W?LOXw`gpwCX%OT6G>Ct$Ggo={SFuj`L^gIKQlMXr?<~rl~Bjy1Qgk)dZTOyGu4x
z9iZu|1GK)bYRgoP%BNjgU_4T1r)lJW>3_+3n~WgCL};g?ykVQ54O%AK1?@~$g2Ryg
z7aJ;L5vX>>CaPVrarL;lwMQY_jd`H)q{eL<XEYAvm;H5iCI1uu)MaaS%Fp@Q^PIgo
z<@YtARR0LGTZ765t1~w?Se<cQ#<1kQ>5J;M%Ko~+>ISRpHK}LPwx+E~dp&Jo+9UF7
zoRKyyZFE|nwBocJw(5K{@<`;C$i-=+F&~M{j7-h0j7*3OjSR(4t)E^OKgnN@NX-xb
z`s*BN8!3(yfMRR~k>;GmMcfJ^6Ey4zk?crDusK*CtdC3x*6@1?a|yfXT|w?ofJw^n
z%c*J4_-FDP?RUwp%&zpCdllaM-U@F4Y5ag{s4SxOmX^8`ZSEXeyHR$uJ<N`wl^bs-
z*ok(MoouJr>9l1(vZvTn?P>OOdxrh7J=30L=h&aH^WhctSN2N#YkL(tA6{#(v)9`j
z?2Yy&+OE~KP4BUT;bvN%3Tbg<FGBVjWQRdojO@f$4Lk4Zmrc}*(Nc6~4OCawKJ`WZ
z4@B+{LEaA+J&vrsJdzbhC$i@8ELIF%<o&|C*t^8L)Vs{P94(FadG~t{cn^9HiOgoj
z;^*ED?+b6I_q7+IoYVRqD}sKCOuo#&!v8gl?p;X5dH#Jct&fR}L!P~X{CS%+`vlIg
zlDfY`>N!l{S3z!&7qkdk2KhljP)KQx1)}S;2j5*sNG%Fp2wn_c3jW5PoPo!;l2>TD
zcu~w4-#ckR9;?q<m}t-v<cAeO0cIgzq<+vMtO{C!IR7$&Tx`t5#B~?0yYTx$P=Hw&
zZVjT`7vox-??yrl%M$li;-iwQWn9^ahRUCXYy9)W3jYqkY#aYYusJL<_3b#*)=n^e
z>_jjLOa@cHbT9+l%a>tOZy0NThnrU3p~QX!rmP|x%__7pm_Os%FL=X?asL(Om6+FK
z-hlc0aF;h1KlkHzKK94>Vho69MIxTth+{dDATKP}H|8HPE)Qg_Lnd!to_O;Lu2%5o
zb9t}Ly!m?W+s>P>$9Dz3S0X|3!jA}b8$P$;s|p|MxVlBdlB>zINnVvFZR2XCrd%>c
zRowd-_g2VN4YjH|t}fJVT&dDflX<flAKNwl`QaLUb|L?x;aYr3?AD?kG>_-Vn@eaC
z$1PkhhtXed+M-`KD`*9;>G_|MrvbTc#htxi+aoJGfR3gW>ld?Gz1S)^$Ye)agEo9y
zTlTJH{h43Rcf5rYKOUDO$#EM@qmL~1mBzA8JD^l`A}$Ao6_M8T1?Ark{_Wu34)wjw
zcoGM6=(6jA_i6aGR|!5dZM`p9Yqtx0Wx51KOu>|xM!3?DD;`%ot`vA*le6NQgKIjj
z>A1GVwJmGPH->Ay4?#KD1YD@u_{zrD0DPfU9AB&OwF+OW@U@EPS890ZnDf4*?4S)V
z@g(*j_dW}E;<^*pow$0&$8UP_*&37Te_YSu898znYbk5)%F(+FcNyXWr|cabF7r+e
zD?C;wc<+FX;R@okf;g=pPAf>4%9MDOac97t0Z-`Sr-%3Z8K5)h0;Y${NPqI4`d`3K
zs}rbc^irs0ZK-8#sby`cWo`AUr6)xC1x4XgK`|%=T|iex9fM#bc{PTTbpp9Ri@sRW
zWod9i_+~JRkq>dHz|Z~o32=D<UG|yGhRR1S6fobu7_*fAWoOK;<X<=XfIYGQ20t>J
z>`TB32lEy9I;^rm_@Rw}G*AzugZdx?WP&Wv05k-RKsIO$nt-Mt2Q&lCK`zJxEkH|<
z4~Ua31W_=A=M4pifMH-bI24QkBf*Stm%SPD7H})L4crdy0C$3A?6CVBSPuRS;5O~c
z;1%#HSOwlBj7>nwP*zywHNb2Law!kgNe_wZiNq}m7nA;rN&m&vxk745C3UWlno>!A
zEG9n|2i-{N9-tS}sW<2Y`hx-BVCwzIa05F>r;`(Cjy5^euuAG`p*i9I=g5CPN2+t9
zscD8B%tgkxWL)S~?5n_Q;C1i@U|(SK7TC`9PeCR43{-*7!4B{REzlTdCr=@7*CayR
zNr;uyyq(m%3Tj;yHLaYQw&ok2Qpr;)c}gWuspKh@Jf)JSRPvNcYUxgD=}v0tPHO2+
zYUxgDX$7^kf?8TZEv=xIR!~bTsHGLu(h6#61+}z-T3SIZt)P}xP)jSQr4`iD3TkNu
zwX}j-T0t$Xpq5rpODm|Q71YuSYH0<vw1Qe%K`pGJW|dR3%Bfl9)U0x9Ryj4RikekL
z&5~MGMXjo$MwL^e%BfN1)TmX|s8!UcRn(wW)Sy+=oJwj=B{ip#no~*5sZ7YPFB38@
z-JC~?%5I$%q-r_&w1w3uRix}XQnk_)A<IOj9Yp?hMRIoo-5E*mNlWk>?)fWt0lWxa
z0)GQ5!OMV{lh@_sbvb!mPF|Oj*X87Oxsi249|K{;J^|Z#-lw1vd<NK;j9ghquB;<h
z){z61<Ul1kP)QC{k^`0GKqWa)Ne)z!1C``JB{@(@4pfo@mE=GrIZ#OsRFVUg<Ul1k
zP)QC{k^`0GKqWa)Ne)z!1C``JB{@)O2P40}Nml+o+-B#3yTIMx58xhfFPI0GF?jeK
zSPsy+X;(5f_%e6}yb4y)nl}o!dD(#ZQ|#&Oc`ZOoP=dT{1!zaS)}RgFpq-GJ2Z3(1
zP(45|TA$va59kjDfP=%G!RYWq>d6M$s~xmX9|h0xowGdLN^Pu)EDU!=o*+N#@hv)r
zR&orj<WaPe(`Y3J(@GviD>=dZHl@CnQwFLSaSWLE6__}Xvd|urFKx<0KzRthp|+Ki
zujS-xIr&;nzLt}(<>YHQ`C3lCR*|n&<ZBiAT1CEAk*`(cYZdugMZQ*%uT|u075Q34
zzE+X1Rpe_G`C3K3R*|n&<ZBiAT1CEAk*`(cYZdugMZQ*%uT|u0l`S@bEdi}SDQFGa
z0KRf;JHUI{4uE&Foj_-B5a<GUSIfKF?w|+g3CIIW9$50g_66+TV#y0jUf6@dKrje=
zQ&~D2KR*RO1OEfg0Y3-l0>)PDdEk6-0k{xc1n39Yi@_z}Qg9i#9Q+bo0q7stE5Wb9
zRp2+^YOoAE2bP0BgLlAM@E-U8tOJ|DKfp(PZ&~00AHereRs*EUhe(wVkt!b|RX#+j
zd`Q{bhD2#VFSbUCh<q+rnY?dFuoFqJ6G^ZWNw5=1u<sI6hit4R2it~a)RryOmMz4z
zikMar(<)+GMNF%x9j^wH@pCws8kSKrw&?eJCExD_d_{ZJy#y;?6<nK7$(K4afI2gP
zIx~SfGk`iXfI2gPIy1mza5cw{=bLDP>4J};_!x?hF8GMr!*QQZkF*`%f&o67<D(cK
z#rSA$(k$YEE4JY_Lb46kOTU0R#{LTm;RKrCgHLEVdn?r5QSI~e`~m0m$dJhJ$f1!D
zk&%(Hk@1m<)XPM;W~sTx*tEL|H;26`&M|Y$X=b*W$u0>~*wJF7nUZ#f8OpPJ!2^ur
z$-UCL8EY5m{ZHw6uAV>DGvDxBy-v?f)a5+2&(!lAJ&(}yL^+$Q)PAF$H>pbwZHMd^
zmCf51khZOOW*0{CS2I$v-fpv>Fv{K7Yai*y-CpF($XO}xGJ#lH=Eu`BN~Dg=RJHaN
zOD@`b?Pr|N6g%VJw_soEU5fvRK8vSln6hF+5*=Uk8D^z~UL1J@x8@Qet`=!gB|e>h
zwc7|aQ{RFd3vOVgfepIg|90lCU&(0lmCTDjhw<mr{Mr6Y&PV!F*tKG$Khz)K_wu{=
z?fq7M)X(#q_*s6MZ@is;mRIR*MX$<wZ>_i5TZKNT6}UaanD+ukQs#Mc{a)T}{uJ*9
z?`rP~e~x#tgyNm&{R}-WYtioVj5iCNFmwGQ(HJucjWet9zlsr;DYzW!jgjYggK_J}
zt{s(r6R$I&xAls>V%!S6<~(-{PtAr+c*zUw*WNrv9k+WoFkVz{%eXeizsA1fck!Nq
z1$o83V3+e-Y8QDA`&o9reb8HN@3Fu0nv(<9*{dX`>`-!%Jr~yH48My#*}K9X500`^
zy=is=&skze`%UaH!WxL=B#oI<VEM|D^Cfb&9rZjZ9Ei(#>W(&5?9c0&*@xIyg_KcR
z5t$GDK{%cBT6JeFCL!eOnQ;p2z0|!-{U5LA@{s3puY|KuUFPZe2K7Hn?Dk}}Gs6)-
zuc-ZDb)Tp9`FftCcRi@_T+a87HRq`PDZOj1`pHs1RbeN>jH~@}J#SP$pQ;~yI#=ac
z+a&~AFL}Ew<xI;bZ_!N8i`37<YX6;{hwAwlJx`Fc5e<>ntPXo{MoS~-FZ5idXI78m
za*>?vLmJyl^@&Z?MME~Xsl7mbj@Fo5tS+t8Wv9H0xmjH@^qj8e)_V0TwYOCJF16Rw
z^Ywbp)bj{EXX`mf&x7P_ZdCh3Jx|i}&-7fZ=QKH+tJOYQ&$HFVh1^zMj?{BcJvZm<
z!K-@g(j#-+dm;n=mtS|Ym|qX`7QddRoL?^pNDsEHz!sRk$|&};C)txse|s72=>R*=
z&NGATV!N2Hq}S}5W{6$w6`SF@JI-}pd#{7JUKy|(Rio2Qs?q6YYUM0*ORzLpYHp46
zL+;$B^W>R(F7wa72Oy{PjU$ocBF7sOIWclN(sNGa9FrM2H*&sd61gOD39_wPdJ&^D
zNYN{iURmZSGnH?@(MZ;TrVn3r9pRAUFwi0cMc&8d%<e^UmJu9kte(sCEORid&CqkY
zo@Ex3wK;k|QqDX>c<*MkYH^rnc9Ua&qR?wh%E-C_xi<q}a){JFBl6>vm=+UnOIwkY
z%WL>15!o#*gsHbs?I+auuQxA1Zl~RX|Fyx!;C;sCUk_FW&j-t3UKYZ~+#lQ>+=1&&
z!8PE@;L_lN;GAGia9S`sn8~_~DZx0#mWKud;CH%UZ_lq4<IZ_OlOPMEG0eA<G3u>w
zT<c-PR{N`X&PM+wp0W})?iqgxT+G8f;R1hNaE?EhXHE&G__q<_064^}gDghDFXl{t
z%s-Fc&-^okCjKe@EdQ8boIee763-vXnE5RKP`J%8em~H|?~JCcez?u@i~X&{Y@A=<
zH}|vs3_l2>jJ5CZwtL$(o=yB&UIkCh^2*WO^^U*Fdy`li?-l=0?*)ISx7=ImE%N3w
zVt)^D;61$GdAH!}I`1lC8Zf4R5jfX7+dCszL!8@k@5zk+ALZW=OhHrG1g{Kpv^Okx
zAD*BOJ41C0Zt_}tajzx3LPIzP&+ZBq+A31`NK$pC|B~H?eTv^N7{E?c8~p;_U)uaN
zaP2GY^FfwfhRbGuGq$Is<Vh~urh2|fb9|NBPuDXYC9X#GT&(9G>G@c+m|63_x00)4
z#BRIl`4v5<>3N=>JL-9uo}23VFz-S9Pt^0=|HImw07h0+d*fZVw=A8t)9G|4-JPV9
z?j)VHJDtwfoqg%-%Osi1WVX!4WcEo0hGmckh^!+hqVNy_1?0J)JOokTDfoOm^`WBT
z6WqlW|0;^8=ybl{sk--e-!LQk{XdqQ&M(zfr%qL!I(5#eb2;MSPa8dTZ&3ZZzw%b9
z__LZL3I5r`pV`tkQRXuK{1$({$e%Cp=l3Ne{`y<~t?%;k7Q$H(|J=%-y}aaIu<kRw
zbCPO%mY1>cZ~crvf5VYI{CNTY*4-TcCja~~{`q?Te4f{Uu}3{m^XD}j{|ql#!au*x
zpS%WE&p-c|KVPFKyPLOS;>h3l^Y<LD;dqdLc5?h`{`?Zhef*ijunw7xmwA-`^?iiv
zuHwj@{JF?EJj|c7^px`X=XrYSZsMN{I9??^2;?`so^}5G9k1a+{`oKbb0PnHx6C~n
zuU~WA#h>~7*~p&{(^Gd1r?Zw*b*1zqs7>ei&p4jJOXl*=1^ja(|BQF2p`?>j_y(si
zhd*!TPYZtz@n<f7y7;r6Kg0Yv&7W)Z)QN9(aAcVyXZYt4{@ll(rTkgWpKbg(#h;b@
zS%{~Eo2U|YG#&EcjbVSAz`re!@JDqKzVEd`(qE4^jD8BcUx)5V{2SwYU>Dy5yLG?D
zzdd{>>}3w-)b;cIaFBK4EIY(^#W>#;NBFKd%5K7$a)R%TlYDQSVo$QCbklr?oP{p`
zTipU8r+$w&yS|3qauvH}KzA?SC-3L`<O6)4{4mda_#lrI`8S@M^&`?wX{YX^eE<9y
z&mZ`4p1t%T9@X&)_z+L(K8d@jr*seFKI$d9M@W9^KE<Ot9_5i7k3qIxr~5Q+mfocM
z45Bw~(S4RjY&?ZqqwmxG2O=}>(|rye^M`cL@Ozv832FUl-52$r#f{DX;*l25;(qYw
zb^nd%iZAHCgouhS>b|0XR{yN-e|Rj#b3Ah5tMFESOZPRzMtn#2JYplhr~3wvfp~$(
zG<=(Um%9Hom~ngfMZW*Pr0d4khTRdmhWL5D&&uC7{#43u#Q$%9r}{Sjuhg{>|9|s4
zc59lic+y?!9Ak%ZCp4AIjaTY?#%qk%=mN%Tjo0dGjn^A*)YTc!7|-CucC+zjU6b)$
z#&_w0##@cI>O#ibjJN5U;q8B)E^NHRc!#dVc&G7BUBq~o@h)Af@owY&x;C8nHldX<
z_(t`(Bbb8|H10Bn^2+imLw>*490^4tUb{ZxXL)A4tTl1R^R4xUh6Y1@<L8?$IeL`M
z9+7T6dua56J$t^teQ_~y+gHDy*valjG7@PWdJjD0XHYBjN~<~K_xb!@lSyw4S-q(F
zJN5_cxvp$Omg|*oUHh#|Lf;LsrKzdrBQ24`iDS~4vnM|JNgU<z21!v%9&{{dSfRX7
zu&~fpU^3hI50h6P3burseO@pAB0kK1z5hV8G0-y9b7J_&Y=5k~dv1AnVr*ntI^!Pd
zte?&?SjKyM=BwEi!J5XZgfARvZUC>F;7RjIcR+j68OwdXaC1uw+OnH{K5x0nWGg5{
z{Smv##5T`dGdX?jOl+qo=7{>jvkl8Lwf!Zrs{NLU_Z~WU`*g5u)ahwk89Da0N_V`z
z2_4|Q=msy+h!?yM=z`a;QvA?uAHM%xJ)zx)4($#}XYRfCgAZ(9z4#Pqo#;RNIlh_6
zN5xiV3)#GQ&a&$hzk1~rRw|uYeqj0Y%W}!@bAHqKiIRD<?1scIfAbrZdVD$YTe+7w
zC)54ZH}_KRWY`-H<)Nc{H{UolbK}C`F6wCg!ohvZCBfXwUM@Q<cQjNwT2%J7BgfvB
zlYP^U#1G5pyhG#Fuh2{LD3s^Lb9RlTudOBiB%Mk8g_+NuVC9MLi_*IPLTNqc3QEzy
z11GEVUBICo+sl3aNFgyljJgU;rkDD6dZr4R-SzcrRr8kCNJm9k>mYk9(bciL1I*$S
z%;UQjQD?{+GF!cRvu$=w|I2^*?^mw)<aQA8ZC1UWIL?|+{)hMm`!>FT`?MGv@D9}G
zf|748EA`!mzk*}<tF^Gu9%^ZcSgBu_A`!1y@74RgZpoH6d(~Q|EyIvmka7I#gGRI7
z5I#6?sM(-58`0wDJUykQJs#GL&Idg45%>ENFEZcz+#_*M;#*2PQM6+f?bt(@gTy^l
zj;WqEd(l_=42I03;s+|c`G(+yIE$gWV>dLPh$McDc}8>i1V%Rp(XgrGODo3Y7we;(
z<}#a}yD}cXa&DfU^W#fP<M`h)d;7}DZBtXXt*qQWyZ5RiM^2wUa^xyy{<=9&aZ*v&
zpvmjCVb$@~H~U=tL~rl0q3v@wkH)8^GrrAZ!`thB$Hp&;HBb#r>od~zpez#+x4Ozy
zN-)0llDyjZ%I1U3SK72p7<27<d+FdxyCC?~9{Wr~p*P!>8=1X&m55xuI<dYzp0)7K
z?SlMkAF}%^Oon+gA{h95Xb0`tbgoosr#a!xOUjJz^&jpU>bUdDoAzw$8yf1{CY`C6
zi;pf9B!0^fean{GBCT~aO7NYsv*<^F^H-Uf%|3s!6SBwvmkaH7A*EP;@1+g>-Ys>l
z?QOMNN~8X^-Q8^~z7EeoO?{iIv3Rk4r1gL$SU*`-UGJ-|u==xW`x~2Qo9cWcPIq;M
zqs*RJ>6ji0Z-&~!APIFiHJm|I6#C;0m)X2|-+q$)=1Hk`dHL)&sl*iKK^ICumh)9k
zD~GdHSww7j^jLJQtkYi=^&ag!YU#ZCAUm44c4*e?ogHGQ61N<@8a7sn|Ay`B4D8iN
zI*~H>_0N9g(xqHyt|8Bnv-P4cV>Uh(+1J{-FT&z{{lea<&%*c0HheF+da!83eqh$$
zdgVoJX?bQtrY&=7?^I@CrXelY+;;Tz&C_W)NUfcdHi`NlZ9dS9|JX?4(a?c#_yT;w
z%-`%AtE?RJB|eNkgGN}*&LAdS7qaR@;5=Wbk&qtyjog+w>oXt!mtl(?TYxQd;L?wO
z=3l0=965$8yJZ3qWYJp+n_RA@!dntgB_6rM8FITr&N~Db*k4d{4r&f-YPNmu3zrRL
zm*g69-PuDI|K}grzdleo;PVYsK9Jb^2hdc7!FV0t#O?b~n3Z9uSedPgbtZnq9!fmJ
zx(3<LmIo6~$QcQq!`Ij|h-`MyJ_o6XB@y9!kJ-<6B3mA|O}>gFVZI-Iu6z3W_cDL5
zVxX+1dVl-U)*WevvQe|UsbtSYm1U}Xav|5>R#GtT^c~)x_+CqiZ;Q)uBr8-|=0<CA
z%#d{HY3%oInj_edv4PsmqNNmJLHjI=40h`?wyx?uBb7`0I(JMq^#)s;Tb&_GceC{L
zqcg?j*B;+=QP+<7*^!yZPYWTyn64VVc@(|T%Aw@aP&U)TzJp!;$9ozEi(9Q#_Kwkb
zyDMaCDBom>u1?RaMoaCZdDbl>@hy(LF*ng2K)tVkZY#-S!6m*;`>|!o{E37)+pzxr
zxOAjrXSk-L#IOq96c1Y>jgFwBp|9O??Zs1TF_&ZV;j^)Dv2RD@r}q50@kvsJIOQ*Z
z@}doUBxIAhOqEUg5Oj`m6D#gN(%o}GTi=#?W8&GgiH_1pvEMuY@QcA<ppW{1W;zZG
zR21|KTl0qPZr0e=(?$FNU)UDuIiYQN!x4<O&^El~HrnI!w)OUoEjSx<3yX_mJ9o01
z=Z&H9-5KV2%WQaS;uv<!s&zkm19S#)J{jY@z?7lB)5H-!c$KJ3R+S)Wg(8ENXhYDa
zh+(Vv>@D}x_V8N!w(y|UQD$@aTNXnFl{uf-V#y6|YR)as%gplDEi7*BzHr1FY^taT
z1{*s@>T3F`ihcdxDQOEtYYmnvx2qw?VC@gIO;nqWbJ+oB%c##}&M3&U6}5FYPS&$0
zn;Ysw!G?zB#F<8qtHA84D61r{#PRqwMpx`I%5<cimY8kMi?13yW5LPc)r#uUCJ*M`
z4p-g2ZHce2%4pEzPCTevUk5jIumpTT@-ecfnT_K*Y+>u`$WI;A{Wr%UA~}9Fe)2Z)
zrtha!eIY{ng5PY5AJ;#6`G+4refhZbbYkeo&nCY2t<9&YJiPs{qdcSm%|9+$<=Omr
zG_;zVZZMm3GCY=%ZmIw5qqaQ8<_+XWLErRg7%!5Ec_ETbG~mk8<~=maJw-<`Up?{q
zmYzKCc>To4TBWbPZMD*0-^O0)E30p)_63!0M-vZH@9{(7AKDQ7liPscQ29q9VnSsg
zd!@IuUa5%lPoDpOLmh9eL*z$SdV5!*F?z;YVzHK%XjERe(bbvh)#&yu@sTaGdTCw7
z*JDyT>J=+j<p51YFJ`9QCQrd~5;?s8<5f$0J9k7%yWRTTLgW+&pO!w>?DSoGV$(%f
zzB6|)n<{ijHpCFWE4N?_M|j1uW?>ISLV5aNQZ}$thT=gV7ZBCm9*DOW72)voJu^<P
z5D@N$v$M>Wln!EsUW7J;9xpg7OEocS&Jn-YR*+Sg>*}_%R~8yW8G8(dy4D0HozQD<
z!MCw5r0BKH*qyivlss=>4cehn7MPw7?x|=g>#eNvc^aLiT~#}0nrGZ$XV_I)(OFgA
z9ay&bT_X;6xx-d$%dmJO)jcy6_Cc%NV|Tf;E#B7pF7o+MRL2(SIIP2b&O*VDL_+*1
zQ6Nv<*XM=?$Fg^xK0T0Cl2K3)vh1Gx)x7bVYqtJs-fWmN<M;t@B5L^wyn&cqnwd{p
zDs4?K(ZZ}MZ7Nyao~|z)v+Uc(niDTYgQXR0Dq$P;)uRq*<-87|QKW3rkA39iL<VWk
zwv36R53pC(D@J_2k&5*M<<Kd@1o|dg7Wzc;TggxQ<Q{*=m1`YonJ_5iq<0_aNzY9)
zm@VdxL#MB6OUuUR?6g+Y?j5YC7%E@qKL@>N<)_{OzkksCGFr<9jo(0PT$AvpXcA_7
zvX$&R-*s6e)1GNaFGz2==$1P#>$Ets3>k%)%}n>owt_$b{@eEFKkO>3wb=spUBo}j
zdJFG6^ta^bM<N=H!em-0aA(`h)^vY^CH?a!=b#lC(yi$uM<4cV{*uYCMKU&2de~22
zEgkZf50$-oc72xDU5*Cs1<hR3u#!@!5829p@f_R!^WVnU%+_e)<4Yt3`KergT=HQ>
zk`(M@m=ou~yEJ&eTE16<PpEjm2JcYuDGgqs;)5D|T*XH<_(dwdNrO+R_+|xP_mj0j
z#a9#@GpA91RK;gB_+=`7%X#p3Yw(-Z^6$~$kE!^36`bhND}3`CIp4r<EnWYue(!eW
zdz{`R{;wMR8MXZTHTaV%{s9H&?JIos8#!N<_Q^W4?t@Q)G}DSy>kQ+1Cr-7b5W-R;
z8$ReXmNeKfV<6_J%yq$Lb0KUum5t6kdtOOyST*3By{)0v74&6%@{@F)Pw#NsY}uVz
z&<pjvU5pd-PRi^@rxQ|F>?!sY{hLfh%o~U``)V6qxtZ29S6+D6n@mS9Hq_R|OMI0z
zg#~FQv?R4`FeT9pM~@r%%!jrFPVgBHPMif<IiScy(vg`V%V7F|ny#2y%EDeVs}9|2
zD5_69$%feH6My;M_gG%y($CGZBL`SxaBl*ZC2ocJw|_%BygvPf7?BClj#Q;Hs(7`E
z4-yVN4)!M88=<qBn@*J>63+jCm5ZeJ1!H4h?>i7}X&)LRTi47$cQ4txrY7Ud*I$4C
zh=JYV8ECH^!2xG-pl@@4y**f8SCw!^qwOst6QnDVwWbk%E+1K7z>^6EHH`4}F?lr!
z{1n5%6L{0Qoor+%Pu@|p@hIt79Ea_U^H$(ph~7!!v<d{?tHEg%3mg#-DdmYCfltUd
z(b=u1^03jM-OY$2<8*SI$_so#!7=+`Z&UFVnSSb5Dz5YkXCOp{oRLg8>&x}BpY#5h
zczc};@>TFlgLi3g>Zd5*tHFtGfp6B}BqaqtrNJvyd{BeaY8K^3H8}NO;1ddtvjMDz
zD!#&?aj5i@G!*4$l=7JQKi88q7kGaXm-6)_B?W$qjJNahN&MX@<<s;xtL5L5#8E#<
zNm0*x6`bhgQj&0zlHfDOm(z<Kb9UXwPu``fq$pENn^>RTY-mV@vI4{I48(%PiEk)|
zQDb4XqeK=M5Dzs2unq7<D!FRyvY3!t0H<`x7GSPa*Zu~}Z(ShP<a|PDVYR5*p@<|+
z3!b_{r2*nO`XJ`gQQkK`XRzKdr-6SL7O@;*^Gi0%uzmae5xZ*TO?;HOKU{S~lhTF%
z9UI#hKF}kN==b>whBb(<VDtnySpr-542DMnco*(@Cvlpo0`Jw}G{Xcws=;Z734B7u
z?YId|l0e{xRh-(T887h78k}afzy~!r%{+nk6OM5q`cLWu6iaPPvBuMGq1BRweO{gi
z8!Xoa-dz1)hqFA}mX@7f<jT)Jw;kJ{&&~=Dry1w<#uB^DQ!twENVRGUE=&D<o<hF@
zH+$KLSWl2Muy%ubfv>2zU4x$_Tqki^{{hT4tFT4Vxj$qp!~b;RCp&o_Y()D<N6A_~
zGz5D&OUM5|95L>|Ka+`4GMlq^EMhl#4fTDMk1s`pK#$X%;S`O7c~vQRm%!J53%ri^
zK$P#5@#le$@Rcv{ei{D-@Mb+pD1lGOIOHR9>1iAVJ}7YA5UBVTpN9gUkjsm9X+8*i
zvs@lV5Z%wXUMBDv8IP~~b>H9|75EC_m=A$<pYC^jm*i&;=nSw|<)x?%w+3Pjj?%S3
zta+Om$_Q3upvOx3M^$^uYD7IUf3D|zQ~2`-G*Ydn`7hcXmFa;eLSme6I0EsJUzSJS
zF2T!y@;K1|Kdg?tUxO!S#Fz#@C6}K>yWi&Hg%c6#=|T)D%@mRj-<H0EeGT-$UI3w_
z_lL}8a!p)e97nVV`6ndZce?K2GR96G3{WF#IjqQ6UW<ww$|x9!m-lPRugK*Y<ng!p
z=u$m?;~=Mo<gvW}t&eHGcZzUWNMFU{dl(&jD-<^Sp}*us>}H73#jffL)*h((D$D&*
z<zPFTN&I+e=-9t6%X^V@8}B*JThw#5COC`k-^OQ>z$X+OYYl!F^ikj|hyz#ZiSl}K
z<a&fIK{`V!PEpCp@-!nwc}4dS<tJ3UUnvir2Ywk9Ka7avWIZGqMLnvn0y<O6uPEiA
zd!*v0WSskKIQ_Yteu|u?`ZwZT8k{7!DBr8WiGG3iYj9f00-w_0w2}orsKHlNd|rbS
z-$eP%D()wrlZvmXIDAojg^Tht8k}?of!}f-{M{P-X0`l#G&t!LqMrAvIOyRkmT=N3
zz)#FCEnT$I#rH<}-*HO=EByraW3qdB$OfOX@4U%>rk8i<bNbPG#b$kOcbfDzv3ElQ
zsKY(dD{#Zzj`pfx6Y#^{FU(bTtRBT^>$euztz`Zb_A$S{a3wnEDT6O;|8RF~*yVu(
zZx4>si9q-G(u3nm8R>tku4r5gtPR2$);8U^wdQC){CTa+J<`Vd0;d!ATy@0T=}3I8
zn&b@jSA7*$Za!J0%aolqsftwMJS04Zt2=L*o_Y6fc3<L+?|zr%CN@`8>|I?QefOb5
zHxF~gYCC)W&?OhIQmrBI@+y4|?iiwxBp+ezgtL&GX0U9@9n^RwXN6aCwA1TNH!Wo5
zwukG3Z}Lxi(!Aw)WtNKEMrU(0JMi`ejkgjjN3>2hj>lw)fVF)NobDzhang!Kd1Mku
z!D&Sayq{s0<MsHdcPhR@l7e`N6DE0I%MrIpy{40`#<giOrv?(Fn%~*>K&-rEe62^g
zIK$gJ8>$rTwL<oSVn_3I6{gMKx?6ZTx4mPNHMd>SWm!mZ*mBtcO1MmUQs#h=Dd?Bv
z=CU=9;}goc2zWa$Z<WiV2dIb2w{vYy;G0=0PO?wn6ABJl316#<A7<F+sUFD0RD2~B
z=lc!SgZ+l;;cHd--k9clr{wQ(FD$1Qwn)BrxOh7P???Lr?`5et$u5C!R&hIdb5;B(
zMdE^9-?|n*tm5$ga{h^WCe(WTntE2KJhYa1tb?~>M&MM9`H<=@7Op*RnimSK>?r<R
zbepRS=G~gc_;T8%*`0O6<7@AD`__|=OBa_KHd_Lo;Szgum9Hyz@CH})!eZhid;jqp
zw~bv_xHaB9*F?0#x+tabF@yIPyxGhk=Tw}=OyCm=jxmEbS;dbsXf#xQ1AbU7@7I)H
zQSmVieu{ALfYSpBgWn)a!VxlX;Oxd#-fv&L<a!dG>x(ajbTWKydHHh_i65hF?!V^a
z3!4o3&?&FHjd+&^r*RkMdo?(%V1X+uSkyy%qQIv#<ttQtP=nK+A<B<x@QYM@lLn_f
zRFt3B;4}{fzFC9csp2<j@b9VkJ2dz=RQ#P9JX!ua757s-fLeY<#StgK_h>=S4B;3v
z;?EQM7$ljFQOpe-G_t3Qj@uMOkSfWguFj)l$#{a0H<WJLoS8Eq?Mgg_ID!qa1$s}d
zEWJCTG|xm^B&~nO$GVFR^ZB<C@6_NVtws464NhY%@O~BdQ(sh^_nr5VvUQz7{JtWq
zH}(-d*9dI3DG>A8msgdziLFasuOg%&oXewy={Mf04Wqc`I!8vNDCPVyg*~E+&+K2z
zy%l>3kC@;%d>wqo-^{tN5$|HDIL&xbzE^|O%og~Rz$uc0{e{<$^+@$2vmChpCcI07
zQ~jcRuLh_31wN(0NxBGpLcwvOK<tEyuh6XswOtxTQGP}#&*`L56nMYDMI;5MA9@Pt
z??U7)%^v7Y>~${f1io2=6FmZ-P;k(Lhzu29QSmVieu{AH>9S=Ir#$iok^CatEYz1|
z^d3pFgX80=F?`ou$088}D^Vl)p6Wndw40Kyl})Q3XF3~d;+iGmsKQDd)!GHa$9fP*
zb-|9C<3l^7GZ!F|D!#q$+Miw&ZA2ZosgApBcc2FBY(}ADl#zC*M2U#ljR+zY*!Y$2
zkr;c@a)0BftHpO{_=-D*u2>k{oRN6kIA{6f2hyw=&sRDpy|o{^@9_I3ckJA`gL{%@
z(ZUwAP@1}Dk>18zft4a;<4$X$oZW6~%64YhvWxsh<y|%2+2Xb17285R`#N@8($e=D
zj8*%#FYK*ttWH!&XU3`<dfs)(rziq@c72BZ7@W|{p6a}$Ka4xnO{Uqk%bosgTZS#O
ztZ2;*8_U@fA5Swa=nb_2=^bY;X`X4M(dRKUTz`NS9kZfC-itQku~Z!QJbYw{LHV8(
z{EO0yD&CiZKZE-pO8H3*ez%GbXz(AYcwB?Oq2jX|{8bfSP;o!S0;%|l?ku0}qF?DM
zKCPC2P0H1~RQzTcr`!L}q~PyLmS=y~SE}W2O~IehhgJMG6$d>k-~57a;GdSRE$a8)
zr+$yxPvUoI@V#pJJ2iN-ir=N;)V{)3zmfA*X&>{cVZ9NzWBvsH3H%gdRkTF>aO7a)
zA}w6ZT_uhx#i<1yT#lw<mshtJd2=%mLRGslu&S=6IIkeznb-Vr5nT1Px<E-oMMk*9
zw=v2pr^Q)Vkkyiv$J}bLl}sPScGcmIfnvWZFFz-7<Vja{9df%RDg1MFTbWfdNPSap
z3j3-ov%=VILquM4l}ciHYyL*^S{$C-Ft(!&6!MkSh>@y5)Qph3e8pgWHbWZx8kE-}
zR=iuKJ(Zs#gay(dB|3@%Iz*@%LL2Z2=Glk{nEGP(%ysW!l|k=7X-)NVOK{NY9&6~D
z3m6mMG>wHzn~STxa}DjAT%jEnS9h^FjY-=l{J(pyv9Ttq32AGru4(9887MF49<=3+
z+ucpxK=l?+ab9hqJuB!dbAP>~zn3Hgr=RyrtoRtaldmL>OIX3U%Se)7fN+eIg#J=o
zoKxrpJT6X{X(8p6fFvPfDejdAtH|+jLqn^d_{2G5<Vr`3v$K=k2$Va$ckD>Vj)}p}
zc;xXyE9et(cwfMbhdc)z<7}SO7l*Y7bg1|#20aDkt8p?xTpe)iOelYZrOEhf><KOj
z1s;=6EEI?LBwx7#@6q5Sc?7<Yf<H=8QZhcyPcq1h3%=|{Rw;_!sZiztKe?PU@{W<M
z^1R`9tcNU^=L^DPUx!hX`YK}mh!&6Fjqba=uL11ghyhe_We*R)I+=<qdpObFgfT6q
z*kg)Zkwg3a<SyXGcLZLMwD70I2PKKW^Ul@5!Ch(k;=wE>M9A{C!$T|Wh##Eln4N7g
zp8ZO&*t;Y0xIKTgt8a{t(rfGmJ{qN*@(#N5c@8|5it|wt<$E+Zjgr6@G&t=`0-x02
zv@Z#KK!cO~6nI>N6Nd#puHt^&OrlvP@D&xOe$oCT@aa^X@1FwiOX5-n-+u&tvy5Yv
zp&r_=1pcmMdG>q0FA4nC6#NCgFA4lM6$hOv-)LVF)_YDbR&zD>1&ZYiAWBlvmgLin
zm;<R|OZFymp({ssUQpfYw`S(2pCiaK(3tPETJxQ`;h*wgPwWYm9eH|bW6Y<!-fy$n
zxWIjl$9^WMs@65CRHfR9l7dvT5y&)ItJ}QJw#CrKsMD5?fKT27ZdNEN>nO<RIXI*V
zLiJkGLoRs>;1uzB2|jTt8P$<g;qwwcc#<A3=(q7$STC&}qhcZCnro6!lN=B0SL~vH
zFD|y66@8@o#-{Uy$Nq6_?0D1u7_ArR?re*mVkycvT@yIlH3H|cuY7%x|AFX*|4qU9
zd=Pk#2B-Ni@VEx2`7iKs!qIPDzw{e9wsw(A4Tz2ZN71!bZsw(VW-GA&--X)lkGJla
z&xqFj|BShnzGU`!ah(e}SPM!K{2+5yB8ek7vY_D<Nfv<*XmHY;1>Ps)ag5xr^=rUk
zNyiBFvPM2~@b6KCuZpiQ>?UXz`<(_qrQ&uCev)vU-X*FZG99}&Kb3JYu5QpcrzsJ`
zd{@>)4a>W+2p#_OUwGv3w?M=COQ`uNz6!Q*nma_~Fuk#s1yb;s98vrt@LHN}a-?yO
zjQ<btHj;)i-Y4Tf01jJ(iciY;pMd9ZT|~4yps62YA=k4Ya9uN~`z}dg8K0K%D14_p
z@|kvM@O(vgC4Nen&5gR3kq^g4t4QpB!h0&*r(EFiT~VBDudi;avwBv`%Zu~#t&ndn
zcXhSfQ(X-SSJRo#UP;*ULrx*m^m&yfuF6VRNu`)Oje<|e;KNs?+>alke?HRQWqRX;
zV+=7zbWb2=5iv&O;f$|R-53W%YO^}d*KhKAdURLIbHq-O+L$}gh0wplq`UFC<JaIT
zDn6#cPjOw3w~IUXugDSKHbe%?5#OtZf4}_x$4*~9%3gW-WdwXbzj!g#KL9CMs=o*A
zLIR@QF5NYd-24s&i$Evh?{Or)q7!O7ij_2=)PV4EuJdT3!lg!8(}5PqZpUnvTR>LR
z|Kxt!;JTe+&DE9<BNv6-V-3C{aJ;eJ&uqwnBkCdlEm2A{L3}S8tIU^D-zmc3zx_Sh
z??(G}F+YS0*G4W}wLf2phWh*~t0Vs7DG~1fUK5Y9@Y&ko?pKvScN!1)l+w6#hIIz5
z$JoPyYQnj0De!RxU-wgFJg64<3j3&19x|i?xICXALwN5&aw^`DigVc|$}ebel2HQh
zQ*h|gINPZBVc8Z0`XO6rR}kgL)$)*CDdiQtlgq9Yoa>$7Lmw93&!x}ke8`jwKA^V0
za{6gk{TuIB4d+h>gOv~EH{!8WobPI)e2)gFehIu!gOheB@JS6$GF;#TskmOR;&Z7u
z=cg#YpyGbKYk~MC@D&xOevx)4@aZIuC^FLa1b(xOQ%=IarQq*MmIqGO2~qx54Nlex
zf#0U$phx8oX@TG;&3g6kXop)5#P{O-??Suz8?>8$&f|NoTMzR|jRu#NHe7y?Bw3-+
zV}ySJN(`6_9+D-I0(*q4YWnkdej{`#$8RpYJ^N8lZA)LYKIm}c!o_$;Lw(Tc!ljGx
zj%!=`vmbN+wb}ne*OtV6717d#Fes>PtB92@wBQOxZT;eK*#83@@~HLK^iF8QmGJtu
zYIHgE3~x$N>AcDzUhJh11(mW2ni1U>>)Ib}StxeRH+3!4>ZQcjO=B&kVVvF<8iI>1
z_go|xjRu>dQI`3&U_(H;7Sa-Iis00q>q?i8?UANXSiL3kKXhj2TKj8KnRM4b?LC%9
zCRA5Zoo<@X%pI)r2Htct#g<lEo$Jc<=hizq`?AY+_h{~^h*c<+(dtA_BO$%uFFOa`
z!BTPBjYawCRGe!80`HS8+12ocqIYWf6)Mkr-AJnndo-klQP{0gPX(rpW+8Q0SV?tT
zsiS47Rb0lY9jOn%FF|LMW{-R=2Ya`x(`N2IG9u<@@9y6G+@M1~29&G!ba+2O2k-w)
za{q;N;`evBR78|AR+lOjAuVs^(u_+vV+{E*h+jpJuDB_K)hh7Ax+^#ismR{LrHa58
z<nknSFXHtJd|bvmu&1Tgvm)0+_$ktwc>R9k0F~!^9d8G3l^WB0@09#Kx?6q=r&suz
zW4a&7^aAHnMBqKTAEw}>5es}l#qD^D0QFDcM|A(I_B$0ntm0HZ?JA=DxLS{2Q_l*O
zC+!GUiyma>L4*co1ANEuyoH<V_2K3iu1k~HP`$@E#nR!`ttXTGtu=$?HKAZxg)b8E
z6?uv(E1FtP961=Bu5pw*e611R7K@{B((iM+DoV;jRi1i(t-HK7-k&I8f824ZcBs0t
zxvJ7$R9fuoXz1BWGqV63+X6kOkj`VI=TM0HhWkT2IBnx4BAO)DjW>z7(u4WIYt@f|
z9}Rrm#&vh=uI0ELtsPhKBQl=~FrQNK!z%9A;43OV#^?<UO8ut<zWz7r4UZ2J?M_m=
z;J4`Iak6_UeN5>mS^rY+N)3wJQmOZ)YDbJm`IV`oleOZ~6new&O!3(U-37C=L)_1J
z6CO*&`79LWdo(!h^#bqH;I!8Zd{Tqc>Ja#V2B(v-z~dVH4HchF!GFhf15ti11^)?O
z#R6YQ#q|NTo*Omz4i&#fgD<N184aE+f31r9=?;}zo<~}!d?wvP&@)ZtF{<FdG=#T3
z;B>0d(DOok6)CYu8!oVw+k8cQ3yJyOe3ea~>#vY^kZ5mKqJu8B2@0ekE;mKAkYa)5
z6r|uCvZYnvv~P&=)2TS$Hw50tvbkL8$G(A{sO5P~ChuV*GEu%F$C!|}Lvehl#}Rx;
z@p-Vjs@s|z8MvXxFM{$5d-c^NxrJ~ag!v)QI^@H((A3L&>WNSAw2|LqgLW+MQ^J>#
z+8(#3rkbx<9yTefq?b}J2^Ljn+X`i)6<UVJLfh<Mp+CpkfDk9LpK%_eWzNf|_-ayC
z4Se0m+E#(l56Y|TLLrMc;4wL7l$YnLOqB1@;Ix_qJ}Kk;<{qz~&fZwX@;#A_IE+@j
zU5@kmMfn~LPW20XQiIdpAaHu)8_g-pdL8>EpX~x)VIR_&IF6fyT+<f#v|1iGx5Em&
zPsTC(*}a_pu;3fsF-P@toUdYmFKBS0N8sZMjy)H*3{`wZ_bX8k_S#hZ6yex88X;?c
zFZ}=>Z>-7)KTBfk@^kl*HEBw;!%KvyVLTBUn2deAV+h(Jl9aZ&Bi$!E_QhJaMasME
zSxx0<JeL%PN<tNbrSJ4y)-l$)_eXtWOEXyxOL@^q;`#QK_~71%!xfw?8xF_v+&M$m
zfHU6G)p`Hw)MbO9N@y}l4gpQt1JZdn+(cfLT!WQ6F2F@(Z`36vFCy!&essL3l;1>l
z7EPqyM5etvNGC<Iw_t@(uW0jDZehcPu3pWCD~V01o^F1vopKfMOWLmf=lG?Bx&Z4I
z_uG{V+yCA?gUyTaJMB+l?dNjornbZL<dhftvkS?8ZioL|sYo)N{TqE3V;=*JUxii3
zC#*%fN@n6?){8MCo4JE#2dIZtL!p)jZK5aKV#FhW-~eO!2lns4ecw$@ox|6?SE}!<
z=qau7Ex&uuctvqrn`QL^R?_XQ9`2agl~>vBvW`3a%$Obac}luzh9I}RWI=06q$qc|
zk#<uq0veJ{tNCkqN{aT<!BTztk|jfLGUjAD^T(}v&qQEpZ^zEbU~i~3MA<3a?nbt1
z%ad^be!x}5M=B*pg^~l~Ii+pUw78ZJvnWC;%;I+bx!ryKncm{YTzj!IP@|XLlo=xy
zluT_~!j!O~CA_7${Ow0(PDXdkP7O^)zC#%@#4Ie6o`a_mYr{^tgye7#vyI>UHfiP}
zJXIn?1F3zuAK$oZIJ~2yxv9FZI=IkYv*<Nk73_)+7NxhehWw$3d+=%L?!iMb-$ZBo
zoYi2e9gTEt50#W}!94A5>+G56Y6}J@rxH*4NEG5^_&72a{|UEPYLT4>Jr~L*h5(CF
zahI9-vW3Z-2&D*^a(H&xNO60yH{h;)z1Qyactt9Yur*+hO%zOSY3bZLHq@43{ZN^^
z$W>VJN^xg>>9%&B*JCixx-{PGTZjdt)1CsT{KzDY`}^O;Y(}Jw{k$1m3?IJhvW|3n
zx*^@3(SGXvAGvHOy(rC)W>1eljhB7Ju7UWlhaJ}>KA(8kLyiuIquu!s^)Rp=lqSJ#
zH`xwoR!5ZJ0P2mMoS3Sqi>0^$rS$j!D;W@p0(d47n<G8XY_oV1uPWZa=VoF@m5c$7
z$*0a{`>Kuld1D$YOJ)w>nM<T;>8oP4kuIWmA(b0VLZd&gACe7C+1wUeR+igw?qnth
zhn9@Sd1Fo0+3#=6X;O(b{XE8(=QKgvvZRQVDOAvS!iU30_~rVoUVm|?CmJ^=o;8Mc
z_I50H#17u`lDVxe*lBUwhx4q%Jp~m52RdSFQ#d`d#*VHY!Q<B?x3ZQ~dPu1kROVvV
zyxG&*xijML^2qDil$}vb>)APyqi|Su6?+;JH*q_o-aJrJoy^(-X-22VA7f`S=|9J%
z7{(iR(5JDFcX8RMavP3<GMhQM!erSj+y#Ev#br-0&!Iv?Qc(EH<_lW4hJ0b9kzxC8
z>57-O?}&6SxWh2s)OLnyZT7sX_kI^+;_OX#*4m2#_CPc&D0UZ3KK$+IOUBmOrr|x!
zP43}BZ-0BZ(`;`4Y2sMe>EBUYf_ynj<{4#_?D83eJWgdwsD&&XND4;0$k5We)MR9>
z=Dya__G16Y-tIje(LLSuQS(bJmd=BNl?AcEg1oVy@J23ncSU<?gwTRS>zv2QV1#`B
zN~M0j46rDY7GKDpa9D}b7du#Uv;WV7TN?0shn#3FHSF75JF?=q9h<Zx%W5vp_Lcaf
zgOb#;{IRswK(LcpI`?#3Qd<pD9FC#xXrVhVQe!r@rRRjZvr4i`at2oW9}YBZ?lD`8
zBmqcYcnI_f&5|Z(GLwy6kw1kY9LCC%bTWNpS4XV2swTV;+%#D0Y;t?+YwKg<yQ7UI
zt?v53w8h)k7;4WnWOtM{bh;WwbMwkvC8ZNR<-YuaQI{R<deQE^qTS@`2se9Eq%LHk
zDxXEv-nW`&>l@sy#ZA#YW6_2{!0T>y2I7lNGr_9r+GyK0i`_L^knbz+nJ6uBmF4A*
zHn=()N;|R*neCy*KCh6wudxK$EtI8F>T*;v9P$eisg$7StakXqfuWQA&2u5N6>Hzw
zRvX@4>#D7;D~pbdS=x@zF06HET3b};SeT!gf#&cV?Ea0AwGjU)J*ES%>`8+>h^ZRH
zmMv@Z^GPk@)wuD${%hj5q)3oltAkvljA)TmZ6_iGtkNU9Ulw=rC?d92lZ}N1c2!q-
z<7J)gOmYtRqFaN}oh|<M66Wb^Dezcq<{XRDcFE3`CM0lb?C<<WiF2aR8f_YLltzz?
zj2(-*9I=|gfY~^&*9UxwoaMu;z4dGM{F$MlX+a~;4C4WnDH_>E8o8i44_$3|=Zs2M
zmrI|%{qImy;;KvJX=o4`v7W<NmvRbJz6gFO%Z?&aY}i#xdXDxD9P8~EbF~!KR#tZT
zMx(Y0%Z_JU+bnIXbJ##DiU#wFe50+Ci<XRilRtG<qL&tE=aiqNC?$iKCb<Zow|qW9
z24fn%5gT^9Ka`Sp<pUn~a92Tr&sb6LouM{wJi_kzWm!vkc}v+Z6FVYtZ`;tQ)7H>8
zP-jENbDXVX>}P1N06kLn)6_E{TQzyc<uhh;$?DVh?kQJ~m7YpAbru1!+#3gP%X1Xt
z6Oy$cEcF!iD<yqVs?McP%><Rywf6IjQ2)yuTx0$eZ-KONv;f`aoZ7fLGgBKqmty|r
z=2KMkX3=1Z+9yc)4_V))9qJE!hx)QO+u`>{vIk1SD?#=zq89c(yxsH_p7E2Cn$cwm
zoKc!4CRonI#1d=Xx;62YB`OIEq3(5*%n>`B%6hxWl<IgyCMtGV-Z%|7J+A+9J)K?7
zTb3=k!qU3_2S~wp3oj%#O*7u$@r>>gM8y3Kja>{p1G<aO8dB}fR$L9Ec}xlvD1}tc
zyWC!6&&@3fS>pZ8HC9*V>ha^0XsIGUJJ*`Hmeq9ESBEVbKTbS4k$8dkAjnElvpBzK
z9jGt0beF8!oawnxw#uKYod`-VpLP1HxMn4KAB27MX*#7)+kbykhj01l`+CO8I(D}9
zE_zz*tyT50mZk!GUiAlFmY$|9I<n~;TQqM6j~l^dY*6H-4%y<XUxTCi_!8(Jgh$1I
zzu}xm`i?vTbp4g|9s0?&3DV?ErteRT@DyIFJee2lN}hN_OLv|(nJ6jB7ARj5{jl|w
zHZ)XMhKPc}^_bF%vd&N)@jj&?r9tTyQ~6MU*V~|J@acPYS5{M%iisuJ8Wtiyv-138
zuugAWCCR*G$)l^1xeV(>I#E=SU6_`i;Vw|~l+htJC4pH<uW|yVqiix~S!y~neyC;Z
zKTV#UQ+B50Av7rt&~(7=wb;^f)13u7&8eBqin~O6RemW)o8#;q!HHVYTWJc?Se($o
zNjY95*+E-UXO%Kqx{I}E^8%+h1<=G~L)z2%hf`-M2Ji=%A$C4{?39!eCn}z-5ZV`I
z=Cj2Q-fVGa8VsgG2XD@D(FgX*tA(9~_1h{ROxS*Ji{g`yvb&Mz;y%zUtnkWdU)EgJ
z<D==*HM8D&TezexJ`{FW7qpg4hGQ3WcOS%gcr4FBuAcn-QG03U>MWFZ(n4~f6=tDc
zFInR0Y$Qia%U24-NXs%gxrNY_CRHSRVYxHx2s%rw<vI0s|6F~;oUf=pr`%dn+~f#%
z?q2Zu1Lb7_pJi#Rex=b-k~N!|RTT(SWo6E0l{gw#>c^HA8!NnH9?zJ!0!Lx)r{tcn
z9QBrivRjH{3eKlsA_Yc+e=I+?($ljN>!N2@Q&+|xGrF6ad(D3__gLCjH_ffKx3A7^
zT5V?^?dj;~NqlsuuWtx_hA&il7=13HSQ7MEX~8aEO|wCwhzRC9`Phr5%6d)=44mjG
zZY*cc?>zR{PZHlP4caWOtSpx$GF2I~w4IorKhbVTn>#Ua<tDRn$%uEJ8H|(j9dS%E
zNmq|HA4Ho4r0tQsNS^sgLhxfz3+9GUZH1U67QZ~bcj(N4LpKiW*c2EkFj$AYrPV8e
z5?{lC1M#gjwU#57#jlu}x*~q!R83P;&0@G?|NidA!Livxt&72-A;Hm@^nS=n8{(y)
zcpAgPu}Hd}I0>0;dSsk~mDmXLTwY5HtM9*PWaOg$m4S=m`0<ySXmp0XW1>4Y_4MQV
z=&{MEqn-Nap3`?8otiur)j!TYJ-%RIllq16iFtkElZFLom<i0*TFiXhG_{v22TnyI
zw!oW$1ir4GLdq5A9I;TAy!uuaNZ2+vHY?u-#sAE=@!sE<^6enr@%;+zS2Ul){3bvO
z4eDu>jf`}l`Kly2>cU>^zpk-aA?xg`scRY%igEx7PZ3Gs4S4|7>S+(7gJDWeK+TSp
zmCO(L38eu>xir`w)DOEqX+)tQ)*dNDw!EQj+q=sVlx6coSa|Mm_AaxbwJY&5<`!ue
zub{`u-6A<lIuh3L9L?|?dcE-{BMZ%8|J$zEKiuBXw6mSP;_7RU^ymHO!w)lEjTg-(
z>oH^P=^`Sxv&~Kl2!%=U)o*%zXH!G_$djwX`>%MLKis^qFzgN7w!mKb#3#OxI}mB>
zcXL@4B(EmL8DOSk2-I`-`Ewo8A`o+*42&NRcNZHv<|_mK^JG5UmS68IaU)+~VOGU+
z4KvNRN*?Rq%Y$f2D{cxH^s~k^VL4?j+!{mlDY7)Fe+qtMhe?`IJ@J^mJgd;0o9-(~
zo`v9xooSHGv}eCex}JQxnnCTAy!T4&{B)%%o4f^x8B9IxQ7g5b4X3WxlWqN3oWIC#
z86^KFjTgxjx}qk0vw5lh%GBJB&n-`~k8w|BViu0dO_be{yu3l&Ec+_F=`DQKB&p`Q
z1_jIWie;&#&Ph<u@2H?3g=}6mWg}d^ZhVlDoAi^O;aE{wmd%_8&bj(8Ep2dq(yQnL
zlb*7D+rC58G$cF68ObW0<!8SX4T3hjwNzTd>@HF?Eh2`8?n8o+-YJYWV%>$kiOJ!u
zTiEL3tMl{ReK*guQa+A^l<~On{rG2MT?en-^OTx$FUE`8Mbc0|$wsjkMC6m0DvMzu
z#88O^zzXC0TY@Ev&zAe!+S=Rv<<D+$1zYx8x^_qUc9rP2j+Afii7qTedp4JkY}J?S
z>Wl2|LM!A8{yo-&Q%EIQd84I?9gUk8XeuzvmLsdds!*iIlxfZ>@((RG@3R~^#vF-P
z24jcjuhUBlX?qVZUO#~vEg+swd|8kb{JjdKQy@^pY<b}Aaz0IX048``WyNS^<!A+R
znS+bTY?{`T^p+`kvXgl(i!QsaJuTa8NXtr(y#30xPP53Y*>gc}dJbjQOoJHtY5Abv
zKUDrQqBkk8=Ac*2tEte)?cAV|Ybo;7F;mo~O7Leri&F(2Op=0hUqe>Dn)xy#E)~!2
zG#VEv@nu`0_|?*3B)%+v6|0QSCFK3U`DbHZ?hk$V;z(vumcdeF319rc``N@L?uZ-z
zU6OeC{h+BFYvyl!K8f)TmxYy_nX2q&j|Zd9#P4|u&7aD<0?r}vK)sw#^9n^`OQ`Q5
zI@{rdgq@x2=fNO1*OLZCZY{ZX7|}QbxbeIk1I4bhR_3SYr+dBc?Zqolnsx=y+``Wb
zstTM#&2`~TThsE=4QUVhYdzMoH!OLc9Hy7#){&HGyt%G@F4u?t7|<W&OqF*eW#y_i
zO&lT3En@0EH@vH?#o1lg)Dvx?<IhLF$1ZrVbG|OR{9L1F*j}!fC$~m_$QtJ(uv*gk
zNNR|(v?M1G*O_qkLvOG#;J5>!ElxUn>|FnI2BH5gFD&eae%MsZ^}{0HTtoewB|Bp_
z%jIYw-H)`w28SzaHY1y~LbS%m^)Ad9t~1MSCgpxB*8t6V*UgW%h3a}8?PYt0J9f6$
z#2eUP5J6|{RV5?daP8*amQ8)7iJubf`FMOvsZ9;2Qp6W&J&)9n)O76W7}{0VQPdr1
zj*ic<;?llNExns-!`_jSs`g-HE||cZwkUfY`!MQ)4TtAx429209+&FxKC!*vO;jE^
za(Uc%$(tyhoVYxN(q!%DB9~YG2r7RQ)x7e_H&K2GDo5?mh1d;T2UKWRWGLhs$+iz%
zIUdG;s~6*+m*d8zxbbH{n^>A4?IH+E!x!;gBk5xiiuKW(x&A7Ke?A}YWy|+@0s&8H
zP0hF2+-<idKJt^=^72~x9~wPwEh8V{bFgXfJ6Ph3A-)T96eJ+mZ%EfIjHJ}dvUgo{
z(XQo-E?Ra|GJdy<p02{OvO;@VndOluKJ}?bA9>=D?V(fqcb#l$Ik{{9snAQMMfTEC
zgfF4TI49xFY|l|taT!jH_*c%et_;2nwhV5)Fk>?oY1i5HpIPngonCD77iO0fcq%?K
zx=`GZTj(g^N!Sy|C=q*LY&n14Y^tdaXi~Dn3xO8(LA2<Tu#+IlvqD<owjR7WTfZ{}
z_Y+POVqaSo6pC968ge#-SkZw$tW6C6VD^s7FCP>co85DRAJn9YPbP0hE@z~S7wzfq
zMtdFqC`Zms!ugp5f=-{-5OiLaZ6uGfJ<dqTkhQ^UuDk#RI;d57DGF_qAA)rn_ron^
zc2nw`QI5L%#6|HsukvD)l$WJk(mYG=`r$VsATMn~XTo_GwWr3&Y`g<;j=K-UPuhRU
ziVg*e%LC{Lw37C1*|NH@@B+7zzko?7EN*;%z`U@FEr#?zJN5=HH060nDgg;odsnf&
z#APh?IEvP@OLGec8+%3uqE>I-nqDeuC>+l%Ds>bVe%8}c=<$w(!@Xt``&uG5rzG1w
zN%!KFcP~jMtX=Z;Q|19=-No;EKJUozO79BdHZ3H367LB@c1gTGL?Y=X4f4P8enGLY
zRhH@D9xwgsb<ZUhSj}9QAvP!tpZ)aUGSh$g%W?}m<EV*bBw8dvPI(qgv?gQ<C{v<|
zXG+wIY+LXe==qIOofVwZCr{yA%5y_C*OChgfARc*bG)#ImG9k~c>dgPtr2bN{)@Mn
zq0&G(`%E-$VxLjoZbG?^lW!z3eEB+hzlkHykn7CZO1TGEymfCY{!2V2_k}XindpQj
z|4y0ROr(jRM`W}^-|@*TW(HpSfi0N+53y$wS0k|Mo$R6IW#+~I>B~GD9?w38OhhKK
zg<@vWh;^V2GiDa@Lh^Sgv0tpM>xdeu_Ut$1cJWpod<Rk)-+|W*(dFV@QDG}x#VfO$
z%WT!(dY(O!`2MFp&3Xoz@$BI8_kX>NZ$k^^`Fc#W3NU9#o1#n|Ci)9#Z(RSC^a$QU
z_IGRsjCRkY%^)^?aex2C(-%x%(${y%bmA}b@%TKupPq$VOg+aZCXRL)7Z;6PM<*tZ
z_n5Y@o$+mHY{9%3k1v`N52kG+UP6<lx43``L;;{r?fCsp^a;8^8NJj3^Mo1=!A8M9
z<3(Vs`NFG@5B44IA2{*$3x8q0?8<xob#dBAZ;CNaFaGO2S6*iR1=WNQ1O5ggKdse}
zYyrU@Bs2<Iw_-D=8Am&j-Bx$X(NsEo<-)?h43{=JPQ4NCt{Mx6$Ev%-+YOG9<&LEr
zr>1UP>R29e7`AV!KfTz!r>$*I_u}dLP1F<oBW*$yyHBdEz?-r4^SQ+3-vRC8Xd`U+
zKsoOTy_=&!EsA%0QVq>1D0PN1bDG4hsP*4r5BW4N)jp`L@fM)S`=fgwNKsniqs+hk
zM<Nh!!qwre)+k4wv44;+45?{X&&!*{v!kxPZ^a<?h3v0j@d!Iy8_q<fWP7CZt9(9&
zwIMaTFX@$D@_n};s971IUoEUecemD#7aH<UWVvi51!;L{IhIOiW4p=F+*{mKCYkdi
zr6u9Ah~?^2vlqrfvAvzwU0Ut18}#$0^qR&kJG>p<&9VB5k+z8`&@#L}fw!_!L{1ZE
z(M05kSwd7mI9ugN9MbNEmCkI!$#A%S=SXO4dqbdSx^1y3u-PXW*_HLZZEZ!ioW7P8
zZ&Qn;FCBhZx_RJGmv184JXvhW*gZ0^)Znh_JlVmFv5v-G)4XM@uCZ~`=m+kqhTz0K
z$Mp&JEAR)u*ePPQUh+rW64{%;AUzpmp3+Oq6B+QIERHng8fx0iCo)O`-3?~L!-d`&
zcguC}x~|z-dEuFnO^@t|9XopINZp<q^cA*9_B-@d$yLW0ud4J=kjUOdZ?F>fK|kNK
z&{=F(ET?0CSN(W>eSCIv@NjGK>PV^E-|GwX`CImUW~e^g9`<#|EiHQnTjx6S%4XZ@
z2MVm4tL?eAn)(t??@TKKM}8a|9PSIn-MQ1$N7!Q7r_o2@pCd|=UVnN4pCE;f95#Fg
zRrJvgLJYCp?U6vGzjbT4cFr4!M5{uz^*N>a2tSLqx?-jEIBJmZzb(^{6(!$)v18On
zzJEQN)5HC5b&Qll%rIT;`XKux^jp|#jABszq<Y7sNVa5#9Q9`FNh0uBz%JZkFRG3;
z%r(~xZEY%=p7XG6#>S<1ZBJjkr}#5vo=PinP-Hahm<}FV*;&bO1##<E&-OzHYvZx3
z?B;M0?{hcC^<~)>pv3bFHw#`kA)gZS*fGf<d3?wTys9@{kY?~sG>>*aJo(_=UD055
zQ{szk$u&~7t*I5SaB)Inla~EsjA<q;%(CT^>ytR3=^@k1p?V3H8t6K1iCK1?Jh^Lm
zZEd-@wpjlqsid~JxVA+4lD@cB)vKk;YIfuBR&(~pHT$=0*<S-b!Q;rtPJ;c0+nSU$
zN~7@~eW8=gptt7d<Ys4;TgH0WO7!iQ1q-dFc@r#dx~}!txt9T^a9A~c{t&onLlicB
z7x6e4XPR7Q$X;7qZ$4o(7<`NSA{qX%fTK6={g?6)uPMvyC_tYlDhgxem&6XnGY(}m
z)ifU5<IkwRu+N;ARx;jPjFz&|k_mjUf=a*DPxD7{WzbvSuD|SCMpwMho#V9C`=_>*
zK62@*AtQsmn!l26-kz4Z?_fgDxV9XJJP4t;m=(0+h<TTn+Gi2WL}CFQh_6=oU7_MN
zFrhF%CnqPX+_{u%D1@uNDw_d(SbBfrrS@=X0~<&(W^+wVmaV3zvl4VeS7SfKoWO|{
z{tc{iy}ZsP^AnEUv6J>dr90hF-JEtJt9~$i?O&Fh6*~`HP`mi~t@H2yz#`4#Ld@ew
zF^^$&O`XRWbNRhcU@%Q*v9`sEBKC--E~fWoTWNZS=0g4+Um)zk9g$l0zO~wztFffO
zRbcZLRQ6Prch`=!s&hTFdc3=Sv;{Bx9&Rje%VT=|)~%5ySEEaBSTaiPR)2MUQCd!j
z&wMWN*`LtMw|>7+ZtOsJ_koyrwzjpkM%vpcX~67ir*K|vUmT(L3ytu;<Nk((i@UN7
zkM@zU7s@m(XPo<#HLQq^KM%G``gi7KtmWk&8D_uTA?X>j7n<|4va_lz6a58S4mIrf
z#vb$DuWns1E>&(C@62-8^b&&lFiHcM7Y05~h*?nf2{PSn*dH*H3kwH2_jesw>sV^`
z4!W_L_to`;S{r&@k%!rRi>s|yUx*hO6?>xxJDHK*WHd8=ybR$KVqdI4ZwgcoC2fpl
zHp~mz2r1NK8a;?6W{K^O^{#X>Yjtl`bzR%;SW}0ivAii3wX`3fo<G{M(_mx<`?gqo
zrFHxCQ0++F*mQgjGscM({WRKv^_WiObVLTL_=HecRofT7W0>uHza$k{vm9{bH-SMc
zW8Szmeq)EjW-u(6(oqw#uJRmA#1p=c({4eFynqNqW%N6|0Qfzzdl_%VJZ99J!j<)r
z9NRIgZOw9Md(|Y~WmM(pD6crw(A+pR*L<wc5q(?N<<~>DRfFg6hn4&9XruqA2kYSn
z6%W?w(~1Y{LH6M{d9ZZp>%F)q{wLB&AxHEPdWV$WiuZlK?ZT&?JaLs_<<v)>J$}aU
zl!eW+Hs}BMqr?-5M~e|f&5(6y0yq4Q^ZkT0%_J*0FNFH4vI8n?aPy%iy$Kv)tSf$C
zFrHg*w7_=F>4)!^x)1kVD7a#859dXvrLwa>kT&lQ?(A~3AML#MR_T7UN1ny|K`DIq
zg7+j;lUxs_{GyD3(5Os5ncmY-anN5=U0D_|8ZR}Ns!PiQ*>2~7in{HaYR0Sv>!9Ud
zE*rcq66icO&>au9m9|$`x0goiC&ufB2db)CFPT1l6}cTjMfG}|-2*D1?yAxU*VR&O
zzMx4~DcJZ@QL(eKysxFKdnMK|<ZQM2?U7zjOL=Xu(DhiUr?#NTlWFm`Y>G}EY3J_&
z+%(YCUS`QDZSXnf=!7zaUOR9@t_Y{iFwI}iY2F;oGED#--vkN@sC~Vuz^rV!tTiw{
zSW~xcIJC8`xn*QAy016b)7G6I3D!jSFg7|<+URWxTZ-Ga_y1wwV61XH+C1$rr0pN+
zTWZ+T8EzcT%E`1_Vgn`YGDn>)udcnUsSf+Qq-)1&5PLE7YHNX8LMC7{ayZk<ke3Cm
ziI#|o6b;2Hd|!U;R7_vmTwYnfcl%b!bjYNyt0)OLrEQlClr(K>Uc2;|lwBOG%r$S?
zRn1z@KCwLS4>__To@kwaWnX4#@1(b7uIbaC_|K2g350yyZTf6P7>z^MHygVd_FjRr
zPjeik60S>doa-bU$LW)oui-e~^*Ii<^YT~mQ_By~N1o3@61betg6ngC;^nu>^<YOs
zyIewWe5YKGXqV%Z7ef;Gq)ZQ=)x7*3xgJ=}aEAIe+HKGmpuA}JN;&_9sGo3A&y}K{
z^*1mehotw=NvxAjLI(^~%O8O56lf!%qHZdidTKjJr#7_CQD_zYoPyUe{Um<6s?|M@
zKbrK1IF35?IvM{O#}6yzrN7GfmpOh!DKGs+#{Zk+M>&o&o^&m6P`sIHhdKg^H=@Tm
z3LZ+0cyobCht8pt_`L$ZcktgqtF(rG;(b)Qn|K=sI8Oc7;(`Oe0-kz8J;+P{PN3kx
zfKscTampKc#<&y?Nb52VKNDzAa^MXaw{GCTpJg0cCCUp95Y=DjR0rQgwH8lOoqB>!
zQVkST<7f=t(70{qtpztytzVMy4OHtFWPAhF`Z*a-r5Yoo&lkAvIo=y}<Tl`9>_89O
z#CzGiv6mZgwU-);fZ9t!(M!1SMK9TpI2Fwsd&zzv;~RR(UX<|-y=4C@;~RR38{A}D
zXx`Y%4Y=qfW*UFDhDmoLrw{9izeB{Nd%K_)a_U#G1^T4+Q#1qQ`3dwzfnGqU%mJWJ
zqivL(B2?x8P}o4gfw)qm{t8ZEJKdf{IeC4;4u83fTR1MyPT)rcPMJ1QUS6NT56k#p
zIWA@=dL(^>k6WiaZh|_(KgIDb-4ndLI&PBI8l#RJ;h=kj(~a+AC3C9{+mu2d;e#?h
zo<avn1R+1V7+}yXI4-O_$X5;P4@vA%k$XVc_~;&>j1LkH8w0Hi3B2}`@BbgR0&(ky
ztkRk8JHJ8bicFi^Ut^gX@wUFDUFgZCv?7Pi2|qxn*4N|&ZN$^x|Fg95O;uKc?C&{0
zX+J7!^NvntA;zTOtw}REn|!q)kmj^GiqeR0ui)_ljmtl2J-hh)6g?E#>v~I4zVMao
zuh2^W721dO4)bRW<EZE3cq^x;g)FCdv(P_c=VY?ULn!AaJIs45a$XA0{>GA9Sn9R(
z40swJX#EF>eY!E-X)P?#N2PE>X}!xxw1ZZf)9?D{Y1ND@CpCOtQWJHK#?pbFEN_`T
z=j1=a*Qd>{`qG9l-WyX=XmzI76RCo$H~sUJYPlLgHYL`0UQ*BgG0D|qu04^roB|uT
znx4Yd8~%A(wOl1q>(5JSqB+Ucm}~DpK&qCjrGl%pS5|OJqq@<5T<X9{l(gq4mO$AO
zE6bw)IzQ?EYcF-?Wada=V`X`f`f)8ix4`Ag80zkNE4EAhdAXLnw177^kN@~Ul|D1w
zlFfp8kGs4AbLIbOuXu!oBE|mcUbWP8_Y7uMdThD>bgxVm<!+BY$g(ZznR?PGu@APu
z3j=+W_7nXg{RI97@DteYeA23nUm*4|;QKhfCgV%WzHCUtnERxQWSpM>=;ndJ#BnG9
zyngIpq{#p$Ez>7mEaQJt>nAPKCtV`rf8_Wt(C!(IUn=8QZ@@20#o=*&O@9~fS5U@p
zRoe}4`rjdNJwG{dIt6~M1}8cn=k4Ag;}0ox8Xo2NjWYgGwf=`WP8vD*ssFHA{vnQ^
zk@5RDj(!;qar~V!zPtgyIf>)+S%-c-#rMqCe|Tka^N(UFph<Ur_m?!$7d~k)*sR%P
z>V2!(MW$fq$Q_-+5-g8um}_<)m#Ge@y|3grxW~Ct%yHuGv%L2Y%lK1j`TykjzsvY%
z)$*U?_#-m@s9OFhj(<wV@psTe+}+G^l;iDAY``B&#pQFg6<QSOVrJt`oU1d`^EUFR
z$@uo<c^l_&(z-<Xj`QF#4W2x=-*+DT-t*ueIuCx22Jckqx&J))2UBs%pC;2E*Wk!8
zBjW=a9Jy*_yf2Bv?tqLZ(zM{4e9q_oAIdQ!<J&bj@lBNPI1e7v;KVmk{=W0z_nrs;
z(0TBCWL(%si2hl5+-qo_=mbvm3w%3E#fg4_cbo^0X>g)nl)vvh_`T=BKXe}a9t}?8
zF6zJkJopDwampqlm+zDDX4qfS^fdp4{beWYFEsyaI8J;J_;xw}=Sv(XJ_uaRs|uXw
zRh4liuj)5>dE$d8f1g~>*EZny$~cuTNU=|SNXB0To|}T-BjdjXZr2kZME&=l2mhdq
z{}APQ{!+O-&tD3;@h9LsZ>x+ed0YPnIM4qo<4XS5jdrW+<@z_`vOR14=cvb{kEnFs
zAj-@3HRAtPc^>8~@`wG2uOoqPr#y#3E&(V03p_R7WGbGTZ!*<>cb}#n8W&N|z30I{
zbRPU38Rz~JK7Y2!^jC5E1y1uv;M-Xhr(f9hsJ}Z!d8|j8Zvv<C0$1dQz^T6iSLDV<
zT#*|Br+$g@irm<UD{^BauE>pzxFR<MPV-IFf4?kGHsT*l#re7u<@+=^$zg%VH8{y(
zfe)nO+)gU+>(7JBc2b$2G~Yz|8|3oB4omzOcG#V4h4WwF#D9Tr2Tt=%;KYA{cbo^0
zX>j7dD1YC1@O#gLf9O2;JsO<&FY3SlJopDwan65HzE8%HO<qE*3hEL2_*JZ0USGgz
zKI<`GHTnSI;E#+a^#Q`c9~n>T16n+(4-gLi$mNszfEG{c16n+(4`}hEK0rA5BiEnQ
z2ef!n9{^7Lk;^OldpEM}Bc=iT5&O$kx+^$;IL`UgEc2&^&mVyke*~V~H&GAgkHC}r
zrWQ}`n}id8MET^tsl}7~rWQ}`n_4`%ZxT-Y5%nkcO)Z|>H-U5hi1Nz5S&#VxFP%CM
zuVVY;^#Yvpr(5Qavc3o>{s=s|z6huJBk<(<(&EYWML6+CluxcNEuLIoT0FVFw0LrT
z5l;LO^(WVt7Ei7(;G93AJYQcriVzv#5h4_!cdiH#1TVm*f*_^86DLwO;(Uj1xVUVj
z{QS`(&HGE!t2b9ypX^m)M#$ej!J`r~b)~q$p{80w(9cE-8XTA`SB^%Ig3}EmLZN=L
z3AydYw~kXl!uZzpk6L;T42VF5{tJ4t>ZTfD^hPU#><jR=!$+=qNQL_^Wb@&DK;*NP
zql}Jjb=XTn;ce}Gt3!8{P5Qbghx<puZp0V)bFC#=S?znq$gMApP4^7tSzCfdn@~R@
zR@hCbKa=7T;K#Qksu4BDS^syWXFji|5R|P?OibK5kFr_F+4g(sG0LDXXd$jrJ{a{U
z0?lj%?1#rQ(oAi~yBe6uY|ZSsVyJ<o`wsMutll;ANOt2=T~ocYwQSePlCZ-StK4~E
z^n$9nk#C&6VHfQL4eKMim)XxGlc9po^e(*h`kVM2ceTL|qGE>KtNV`h37r96QY$j1
z&lId$tC5Q(`^eq+D{Pp$&%=U`zlL!6Oy6#;9xXU>cjEV``)5)udz(I+{E?(rAfESk
z><hXRIL9Hz*$NwG2jUP#oFPiDNMZK0z5u1Kq|A^&ehF!Hdi{$)t|EkU?=_ae{#DLK
zfNPzy+nf%=pHDsUZamTIo{`$wL47)x{X*w@GxE69!FK5p6KquUvIo$E81F$;){Hjv
z2~_Tu>e+jF8AS`*0p#5rQS>h=^FfX%n%4m!AK-|hb6t)|Cah7ke!tvS68WHvEJ<DL
zS?NWTQ8J0|1J|D7T)SQ_lSHnRkqf0h_Hlg#-@1VijKk~fN!^{Wo@CQFXq*I|q$hxF
zwDhy}Kj3?J$luc#B#$Mn^z6xvR(Q7lD~vl?N91uYgQb^o3psf<5ZzLPzhzTY)dp(F
zdhAJ>UCEfuHkehpu^K)I)KaC^qM?l{SxOp2$;`~oWk!ArTF5+{LJOIIH`2mQynmk-
zRFXmq8D}@r!i}$><rnNetf0GeHj0;`RE%$BRK5KzET?Z_8U4pv)EGR^-D1+J`KA`%
zWVM8MMBI8nWF4$x&`MI@zsO&5t-OKJue^Ve{afNo2M3S##10P~-F1e)f^qqQis^x&
zEj3$?MtG)Isz<#|fi;TX={5ztF!j70>w3R*DXfZV6oqLunGwF9E$MAuTp>lcBmOJH
zb!xLW{CaVKW!#aLWw~U3raQ-7nrq3;%VZafXYOaMHxIHeHH?lV-uJ`{!^XPhndtJ~
z-m~8ve&GqZy`S?Kc@vjgkdFEu*v;x7B@ynJGL&{ZPgxR44Z)#nmwJ91N^f{NW~;Cp
zveT^Tj?CbA*+~3oJYGH?%ygs|n6r(Al?7eTTz>o1(W%?n;!Sl9re87Yn}+UU8Hv~L
z8fwxTSM<zLcT?g4=1aUt|3il24a`y|Xn_U9h_FbwltkoLY62@c7&9eAhZXdl3UyV_
z2HVC*ho_^%U0n?|gQXq*gPr?N*4KsydyiRan<jl_t<BAi3ypP1X6_uXtXZ0B8qYUa
zX1aQ|fbrta#1QyyCH;ZlqzOf=xL1Wp?ugf{pIyx`8v6g|(p99`=z9*Af?keX7`%ZU
z!|e`t<V5rJiFXR#N<;b)=rY{0Y#hVe;Z1Vgi|7}^g#}Av67CLA&?+q)!P42arA23B
zb2->&P0KPCmO3Y1y7aS4XzBI48k%i-;{k~|Yi~&0CwR5~SMaI{^rB8gZOOc9!C+y6
zV1Te4XG>9=C%e#`m6liH$|)$%XS>(llU<x$(AaA+7!NSLZ79C$^Lyz=$mDHf2Ts(=
zJ=l0VMZI~0ziV!q$mMa<1hcn;?~63M)mtTUc^|)-f_aADo%lPwFWLmzL0s3P7Y_6S
zzp1^5M38q1;d0orO{RA{yvPnykQcUDesJmTW<%4KlV2;Ix0p<O^@i$V_Uqrh^PRst
z`{(`%$ZtA1lHEEFF<qo1$x*Ag^ugl>5hw?3CgsLS|CP7idgUH^B>u2CHMPhdrKe@9
z@rnyiUS`~~#dz7t3$HM4W%J{+MmAuW93P)FBtC1LrG8|gAE`G@X0d8dqaPM(7b{f!
zYcorkiQ%<Bu8n6t@dWPPe3S0p48MSWcjNn3lrNyWbUgM`zMVpGllU_GfIV0-dbs`g
z&|qmp{u(RP8*6vZ-gVbVyTQPmXHUp87Vo(bH+Ga3@pJaXe;oUd6H04n@dVAl^?tnn
zR(_AROdWlPB#HRKSmwTz?~t$niF~|1hVRLlAt;}ea_dEYhppH9lmBMX#lhA7?xVvy
z=7xsfGbz<BpRJnfA6cr|7Vg}Kk)c@unFH<=(EV|0_f54hB7JQ(eyqFuczh;4IQs4(
z_R%$v<ewXmYf5|tzn+j~u}`k=+_lZF?GrWaT|!M;G}RFA=<Z}L=88LI-eH}GMG{L{
z#_-EMulB42V(xgu$kw#Ky^*;Xuj(s_l^yJwy<%kSN=s9H++DeQ|MKF3$2nRS9DDDH
z<F}0v-)7-MIfnW(DFRn>BEW9xCjkm3sKJINY0K!QO`~I*HjPbOG-SSFZSBhJcOBn!
zdSKx6;#EhEoIZWz$W?pe@7SKeMv?f-RX0!Fwz6_NF%@%NCmEFS!NS*jt$Z7735D|X
zxK&7p0(SGR+u#0BbgcVu|98K(wAA;1O8XALMvE(d&8Oxf%a+wFS-p2z&5|WqlDjRJ
zEw<OY-tO%zyReP2Yyt~QFH2`BOMnns$c7e30vl=w$B{y~OL7SzB$xk%KrV$elEc#f
zH}grh*KErD|FE+3%{TLA=FOY;-n@D9W`H2DGig+=9UYo<fPby|_h9O5elC+=fJ!8S
zb=A3yXL?o$`$fPRynS&7>N*-TOH5<3P!B}-BT^PdISzFVSI>8eyy-G18=IBx*8VPo
zU%4N#Ykt_$W-FYLk50(yrX}h&PcAJMmA(sVnYl+K@~<5!PJ8IwLdVEEXopL90QJ(_
zn&Cr_`YG=LFQH=w>A=pMEa0M8tT1sw^=-0p;<C{tS4`wKm~*<EYiOhFqyMSduq4oH
z$a%KOins3Bd)r9VI;=NOt(w_B<1`J0BB&SAhs-iwg;~kBW8n!vx;s06b_!J8h-aBF
zgE7_$TA3aMUre+JqAA9FnEBsA40W&8WYV^nOb4}QvlgE__H(b;bb6ajud`LZXS0;L
zQ7?_ugndQe9V;=6u?V!Zjo}?~agIxZ(NkVOKar|T-^paA-9Df;H!|jLY;986o5|Q9
zoe^gbJ$I2@FIPpn$>X_!;hVFkhys4DK_1*TvSUwR2c5l4^AR3I{VM*xG{!wnsa8>~
za(sVz|KQMBw3cVfWMAjN@J;Ac=`TcDnZ?9bdWZ1@P!qa#383O^9zDH0M?7jArK=Ft
z%Zz5C`kkNJQ|Q%%lod+Zy!UHgD|ArOsf-f0N_Z})h3(FQT1Huvb2>c+SUN9@vs4xX
zyG-H;dyyahW1y}P(!{8Xa&UTP5;zy*pfo)<iFQee`lbCuu>a}WIR?J>IpBo0zK8oN
zZ~`rjwjX{^^c3JcUZ4}Q*<ru)@ZtSG{b^=k546I;u4G?-|8Ru-X6^3XYxmhl3!wSw
zXeJ&6Jym2Y=&E`@ca_E&BNAesA)qS_mqPF7UdA73oxHeMym+#IRXv%kTirjjR$6+n
zX0>d|?Ynp1GCF$8?%lU9;riE2Pp>QK&)mB8%*wgdB4!cQMT9XW3=;G>*r`gM@HKjZ
zRo^6%YZ{~KzMQJHK_ijZXj*G8!*D*spJx5?cu_1qgA+L{r4}k-FdN<zrYmPoA-n0h
zU`z9+y3#MX>mDtAh{M6ig}KX4w?ckWtR-P*00|=o3+_NCSC@W?yU+DS5pm7DGFJL8
z<QGA1(fh=s$p6o1r?6Q-qWv#a)N7X3Z*%@bE%nb3ho|VNy-ZJqAA=TJ#y_d3N~J$f
ztoQvLMRn`ay62vh1U!FRS6#kI{xrokXmvl&3E6DKvS0xxl+GjJG)m?1Rdw5(pVTY=
zQt2U}Q`-J9po6EenW=~^g3p!!-#<wrRAWt87i+A6nbWGQm3Ci`IffZW+s*VOHeUES
zzMs_YAF1CqR{C>=Wl$Z2G7L&L5%ieyex}#4B{b!<6%D#_Sb=hWsgzjzcIB2`v7GV#
zPFG?)JhPlKeseKU``njg6W46mdHXWP{5#Glo_!&hzdcm*G&sqkGt7J>5u9nJr(5`V
z9jAmtrIY=IYgVftIy4|RG>Mu_@`3Xo-gE6wK)o9uboRMiea;6<pBeiJZG8h;k2N2q
z{@AIp$ty#Jbr&Ccr{Sw74iCz-jUt)4zVCt)mrT`fi7ai<HHsRvvN5uZbl#we7>yCl
z4W+NW5A@ujr$H_Bcc6{}>R69DFt1OmQL>4#NUa>H-@I6}WQrfZ8loB&Bq2tsD%R&&
z^Z0(~rz2;k_w)}yKjp6bGX(giiIXRb8Sv$AoJM+5E1a;4@m=Pn1HOA7m9iC&bIOmQ
z)G~eyiGcK3<ZonBkoi+E{_+b}{@hAFU=#ct=N1up3TNL5sY-3|eIMZQe80cK_ZfGE
zHscar#L6#4IxRo9q7mNDo_YD;n3E6v1iWfaZtR;&Ur|X9Lt5i@c1Ua3LLnL2@cc3C
zU~;;mR#wk0Q6)*GVh1>|ga^Z=w2C9R^ZL@=U7c;|RLtCEyl~H<!16tP0o+EeOk0vm
zq6Ud^nLjxd%WNU)^_!;#2L>$O8b#^*pS$Ipo5#I%5(M#WXcE^boC7(#BeAtOvNsRp
zRim0iN7Pe04aTt&*R65}%r2~oD7@ii)zCK(tj6mNq!ZH}8;09_p77YpXfP6;ARn}(
z!j7a&RF{lJ@<!r7RBB7<ahJv90PVqVdOpf2B)MXU^dQXXY8p3$6Ev155ZV0$tc0Qa
zE75Ool{te()tvDysaEmgCF?iW8yeKA+7_~GShk6X(#s8qcX0NjCx@lhCB<)*_6(nV
z6k|bsKEB6rZUN4Tpbpj0$mG~jizS&20~$Q#4_YRcnQ#NIpo1V~LG2(Sq;+>%8?DW?
zwaP|SxVP2cxwX@;?+-y`MUth_dgq}%`K|dq<)u!waHqtV+w}bNn{qzMPNCYlwEP|X
zhk7k&#|hMXieC1K$ltUj3y&1N9bFR&TYAlb+~%QtI286cGsd86Dju6kcszkrc7sf3
zFX~h@=C;*nG9k>kUXO6xRvP@fg9ZQQG5$y3lxa_hY5=5CDNgw{wO3F^ICQpDC~R=Z
z?mFXasYujdZ@7zm@UUxbSew!OzNCKGwJwA(p}z+<>FE8D`w=MnRW>t<#D>1HIyi#f
zRqEiSKoyOMzGX)++rf~^7cr|Em9@3aW`*s+3l9~^2hVQ`1e$;;m20$A0-^w`2AHCe
zOu<X%<2j<mRa=Ebk~L~oVwqHHlGG_`$mqULOB-wI5!!J(5&A--$3{wOa((9ooy+OD
zL$nx?tk`KyP&M{EcpZlCeWm++bTDi}sE3X$saMvD>eRKvN4ATkoTyG;U+f*hUlH~e
z$Oo^QQwBrI{Ax-4XiMLq-rQq+;RR!_Nk7=v0*5;u*EBvCG(*Y@K~lgn?ffhI_F+Hf
zx#vpi*I%ztCB4~FLg}GW?tPS#(sHb$m>2i%dzJ=NBiCbYP~4YuTrDf(XIzF-_S5Vc
z+zl`wi`fZF27{00{L~%fp*zU+2;|Hlu-k%YWN3E#j}Q^nbKL7V#cM-Mge=u%lgzwO
zJxNC+(eYddL?giwWUZQNlnQ2w!UmGHx_c$XMIoeHq>AV#w<T6Yj3Je1k4W3DpInbf
z`E5bbV@gYt!qJR*Mohl;V4K3OY<9eKZLvXh#re20Tp=I4@4jKVid~#y9=w*QWlf|}
zE~D2K(6g%bO{L#9)&m2u^OLt&`(r%Tz%6K0oW+(D@?z<VeNXQjmOc6?4WLYpQf2@Q
zwWIv&$PWv>HNkfkU8H;$0ZJ8QO6#yppSdrVvRn3jNhF@wc-2)Qzx3@A3{E^9y)ZYj
z&`9|IhxXoh){T3swV)<7&0C%j)*)|2cd6!OVwEpYtlzYt3}sc6`%!HwgK~0e<D!(a
zV9Cbp#&-Kx?;*+_9P*8?$@FA4Z_Z$FAF}kPGlP~@!-Ex0&K(2{8LX4l*?5ZW*=`r3
z?L+(GnKg;T8Z0L^Z3>d%edL3AIKQG~hxX9f{$>RhPtS`W4ecxPZ7Ftd-rT(q1hAk1
zebOkxpw9V~=xOaHUkR?T1XW3MdPw@>^L4#3b66GAFNt>T%;(NPFyTIhwtHZ#kX9;s
zTdb+QD<}7LP;B9}Aom8~e{v@kHcmSv3+CUv%p|{}R>DX&o18jdHob4(>c;aXI%hJO
zndQ|xDc7C7`8D#v$@ORO*Q%lh;19Re(71n)M%IMgF17QKD;AneG-Ps++jsbCZz?gJ
zdf~Co&bCAX0ZN;Dlj$BKW-qzf=5%-~bN+kSO_va?1**?DjVK{)jG8&b#S~*ULNbZx
zt+ZI+&YMkW99^nR&d*BX(;zT)t+LJ>HMWFohKO+=yNFzD8fsg$E-}MLzYL$Zd&vq2
zh|*hJyj?s#o|#x@3|w>crU&{cUqLVLqPO4*Uqm}_i?ZMk7(G5(2KdWAV?)vO?#%U^
z-5nlijj4l%cz@k1->4Z%o02NOZGzq-FtxYCq8(7EvbnMT9=!sW0ia%XKPKZ}FskD@
zhuZ0_;u3*_K9{LFOiz7E$a1_9QadWC!#et(v7xk>%`LE<oJT{n;dA>wuE(yU_7k1G
z`aOG+QaS3uE#QKGVf9km5r@;*f8f52Q8)2XRo(p7!f7oi5?C{+4DX}@sa~qI)ynEb
zq!&|*PS6K;i|QJTL>Jh+IlzRIJ2G(lvdT0g*LPjobJG?~S~kx(D)ChOI*Q4SdFucb
zAeDNC_B~GLEd%~IaZtcis8m3{{yOCWz$6Du;m&$sZj@n`%0R+K_%(ini4m*&iZo~G
zyfn`cNOPp~x5`n!n>ShhBE8*>=WFCQXeXqb7KTZlui2&ViSFF@!oJ%Y=D4kTj+?n~
zHoelT)7w2L_8z$Ante|^(Z%zluJoo&Y4X^bEnC*?nqzEe6P0#MVsg;k(H8K0P7dni
zZ4+~HolSTs9&FACpP{iyHFcsIMV(Du$f)%VYH>rYMqjs)d{A~2U9O^I_tH_ZcoQdb
zT1sDHeZ-$*+-<xhrswdXq5h<KT`lC!qou#_(e1zu$iu(`D3XuHMlDiwUT($R2|eGr
z=%N>gBtKex(UKR@&N|2_8dnE2{*U!d-XcMn*FRP|H%-^iME<tk`B}&mrh1|cmhuGC
zJ;8Uhbot0r^gmKQrP323d$0ZPsGpOa4Uc|Stk?f-4KzK}@BqUquwVxku<ilXAjC7Z
zLR9s`>caLkO5)CS^)vBBdg24DXA~-xmwPKTz)Q<h;4;0F3d{wXr_xl>Jg;B9SoI`=
zB3emxMP6<*?TsH1%)la4I7sa!ycS0#_Uo_HHh6(s$|Ygjqqwc=PCNxN-GX1hN#7BT
zZsu<-ODR3@85v3&W9qQB-PrKxgUyGxvAfEK70T)2(6ml5qH2{s0O&H@d_v>y!hWnx
zoMKZ@zxbsCqm;JmHFcwBeeos4*7(pl;BX8$KP;(VqAjbIrFt}tOac?$+%&;&kn4*#
zjJl64fO6AWSHJYqkeD2wgS2VvB|ws+kAFZbAjx4_TL7hMKB7d$783HiZakE%*Vc<_
zRkh)BZ`in|ex@xe(=~|dH1%;J_+YKdufo5zAKeB7Zqx+SYQJ_PYG?=M)u;gy_cWRr
z8-!ETv*G%gg&JCAtw$vp<9l=s3!cH&dd&ap6`qfg9Xvmz_nA=si1U;*A6u8Rd|#{N
z!^}oH{LeYut_VH~x~=e_@3DL@SMs3-q*w0KLcX7|XWEWGa`(=ylKLuqmGLkde?a&K
zE5D@T*>VbR13aGp!q2wCfBP2Ry2<?Xc)mQz_%gfk4KcQUh#LlA`-JX5sSsfxC@o?_
z@b&|ESXCopNKOf|CCO~gZdzjQuqU_lMUs|Ajk?p)S2Q|0oxvVw$F^tsLW%B#r!Xo@
z%=E0>q0@w-##me{6-jEPTV;)$q(-ig<Aj^JdmI6`vOmf8jr7EO%uSQ9;sAfbo4G4+
zW;KIY^TVJ+=ruH)i~`|Wu;4}$(MGoT#^#g44k~gZW|SJs4KlxL!z|i-5E`t?(G40|
zXq`+}TdPuB=%4U-MG~nn9BW_+7x~9MKAI5XX8c0|L{aAdS{x3G+3B1ioQ&h96*^9^
z<&ABda_g75FYHJorAc2BY<*+fOy~M#9;6V1dnlfu0wNI~au0=qA^aB%eXCHQnuq~(
zu^Se~dPD>1VwM|ib$g3?xG=oWu>!hwqLDT+7Vz_;zrY*d`o<3e?_~IGxy+ktF`C_`
zu60p+hgGHV7Nb3*-Y$n})Ys~7IHNh`vSjr}=Q6K*<}-yzYeMH=YBAW!N18UhzTKsF
zgl4}N8IK2h;~LkXEm#bU=KMWLooCGAn2L4oizyA_b+vZA#r1qBrEYdk1T-|-xd$@!
z2N)k3Etk>_KNx5*uuY9TRESc9YlvXefdiZ9$K2N1+GaMj84PW*NAJD&fd}rr_tEL_
z8Pn6-{r>IK(`SS!=PBaPzi@}BjOJIswC`a1#p@1)`%No8wT|33SgUKE{n<L2+loK`
zhE`A;a-te9W!`l|LX};3Ev`D;-yU;z>I;E&U2AsbcOWc{_O6~4m!H)Z&H9XmaO{j#
zsRIXlIPnZ%Qr+^~fa&FFt}5`*qr}{z)y;GT^tKwm<+r0dY)NCWE#75aHneUq8gS-}
z8SmPTHG4Dh)JW$RS;AQ~dSgLrL_d)Zc!Ji}0Y_kJSz<^fYFwI6FNb*L=-LwTNe?0V
zDD0sK9bYlAC~4$xiUYg)$b%vxlIi8K(l0)~a_Q39>kT8go<v_-e*YM`s&shO{gw8=
z2`H9D?Z<#f-Abq%6e*R(*zZPn*b~OVwnTp+VfGo5N;2`=29;ZvoKEJq$`Dw()mun+
z<P=IfNpHNPuHLt@uWu$!+Zq6te#FKf{^SIpt4=h+`Po;|rPwI2{Yu1*Z_T#W7DAq6
z!jn5AKd`qeJz>Zxl15LrS7;cqjc-d%lXk0TawMNlb(Fr=ebvrGw-5SE{p!}hwv~3z
z#?AS4xOsy{;UnKiAE_2aeU&h)VdZ>C;wW~O-Xfn*^|_lxd!D>+a$|qrrw`w<7W0ns
zNlLE<j4RgiRZhn{Z%}+J7))VxMpF8P*@BWYW*wdg$<3ttgHWlbk}I~fn*-hL8?^dX
z40qI)5r;C~KEKJ`D+`XrGfP`U`k`oi*tdQ(JfaopMhcO!5ZR}1H~Eqwuf=aJy%`JG
z16GA5>kOxXQ7Q@Es$!J4=wgOr)W8=iYFB%bw><E%co=g#nrJh0>S_yNcdFPiVazpC
zT>3b}h<*9C<m&d^j(q=K^5s<8?w%OQmAEP@Z9rvVZLIssofq7RwLiz=^8J<74y}06
zd|oh}Nz1kiF4(sH;KA+DY-`kNjkacGj~ze$$Ro#(Keq17OIB_P1h%Za<V*|?8zVKw
zs0L#M4U5g=`_5_WGp#@rOFD&*&|HwV<Xfos@6X`C)P=p#xHE^K@EZ!N&*<Em!wkND
zeg?Ni=VmZuU}Xlw>IQ8L&$Nz@&=QGAp`g$7J!S~rW5(e*gXj0r28l>XH``guDGxf8
zy6%?P2eYN0lH<u<mtrAx0YU;0e$F7MWfUSkHS<&Utf7V{c#Z!-@Na_a+3IHjue{0}
z2+(Ncvbiwi$jkhZkr!>#g3q}5d&{d^{)4(mf?%z042I0!;PR*Q$}XqVW^w0IL%V3r
ztR{FbyDQ$y68eqws+aS8x{akzLe3sRZ7z`&${ya5O;o=SS>f+Y=>i@mg7@Hq`8T4f
zpW7tdFKTjC`hlqGd-pDks!q#~3f_Z`%gSrv>Za6!L(EBw&BCV9CQ-Ul{>i;$vh?}A
zoIGf=1_D-FkhXwIn(Mhouv)_!JL$?HS{GZPRe7*ns9hN6{kTNq4Ve5cb5v8Xu1Sq;
zF$V*BQIy4f_xrye=uJi2S{(sHOU4zMSnkTk<5~B77<kkdEO(Jx*vbI)LF+(>O$3wI
z$Z2#<Y+z88XkicDU9#C6^y@`iC0bgq+Z5Gw*;WTCaps?|R>9Y64;r-@XOz>=b&v?g
z$Q6QDfNe3f0XL%7OSfx8=Logrif8uhp^=>N9yi`Sh7t0yk?{$>jc+1IkxvW0!#z${
z9BjjfHcVaNWS2R;hYVhyP}1sll22#imvqHi(g9*Mnq4T_LoOG*4QmK32`nZg_W2Q6
z&x+~YPJ_!!E|0Zj{3vB{rW2P?Dngy)GpN%g0tW__1ZZ234v6IQfanro$dDeark6Jf
z-WJ>nUwWj^zD;wMH<8Z^Zbi;Emb0zWo3Nl0Uii;q_ePL(C*UKjefsjtL;Lo1-ZF8E
z^Nu^w>UQM#pqe8Ik7o6z;NHE#D>@x_-r>Au0<Zyt+=v`55p-F!A}Tn+T8EP4c9u?U
zzfw_*rURl+@LkeET#ya|Y8~_a`nwYoeERpWF0=9JR<(~@^SzM~mj8R)pBAKZZ_K5O
zpIDGCzG5!DW;dTs)Ye4J?muIrxeAGVe?bZI1(ZM!d;(SjI8%zXJTLe?&LSM;&mvHF
zDnyaHlo-jCls6^Ws8wb8ebGT{%4$nl2QMA!aHVaww5x+ICa@y7fV@|Jf%ZlVIVmG=
zU)o1)cQP(X-UAnuim;8xJ%^lvatoI)zd>O`0#sxUB`acCe{(S4zi4RiB7Y!w(|dg#
z?U7_M(%#XBQlmJ}q2u16rL_F=ff6EoAm7aO_vZ#v?d_>2w!U-Z$U9pt8-BQZ_YXIq
zjK4f4_;aNUrNFr`gZo(iL6m%=lH0<{qRe!8J2Bxdc<fOi(kZjiPQS8i*D>Lm{HzUK
zpnkpE1@BjKu-%iG!nJGHE64KOJNb{X?Mkf~JPhoDu$j$j=0j>zmISD5l`yXh&^aGd
zzn9O}I-*fWZ8qPob?C$vyWJwzIkd+zOWMaG2HfjG!mZJ<_ND2(J?LN7mWbi%?^vR3
znLlW+wv0H?GFoqf-vy=G9j|>*eg+E{Q$Z-+aJMSH&<49}VP);}jW~9iYSK&F$D*yQ
zDTc^c`;rVl_8UkK_bMBEWlSjh<=8Lp5pMnX4*G6YSt59V`!#z9d)%tgzY5>`n3|^q
z>hcCMS}6tJo$~u*?^jB33rb-elqg62&Q^`WttLcXC>3UZK>oFq0E{+r5xI<ejqbbP
zoC{`aGNz@oTIxO;OK(-~s?XQ&R&GnjhRH?FnP678XOAu$oN-Rk`XlAX$P*|_ZG}o{
zLJOvtRJ)ZgNsk?qu9F-)CRxf^B<rLPK8UB;cNdnx-iJ0xORztzn3k5+va)mK84Q%J
zz3sMI9!}*Kl{en<)6f*ZhzR*Tj7lo=0AZ~~bj%ou({*RnOk)yJa$#GqLc~yH%Q-~A
zmPmfxK4a<Cb=d4qcV}OxJLHr%O)g1Hn%cEVlg;AE_2)bRw@kk7OZJW~lU8d_b(u7}
zqQ{lhwOU$QtgR-0KIHAzG<kK|<u2`zs@0&;SPj_E4TW;rCbup>LGCfQjI9cpO>b};
z4NVPpUS2*1y915v58TuJnmLUe`&5_g|IWbv-fnFBFXi5uwGl^T)5x+7-cmp1;-CmJ
z28wWrz&OAshXfBXE(9Hb{2n@hOXOndE`pIken@7a1(Mk%!WsbiJ>>doe(p0YozL$f
zP^<X-+<6P~yJ&u3obLAAg>)lbb0r}I)zU?4Im`yg--TlS^9{A@B~4~^d(e??Ex0x(
z(<@`vNW|)?3i>xUbe~}iwwZi!qdgN2d4?k4o_Jf*u|U>?r+|1&+!IvxvIUj`9EE!#
zH+v1JkhcB(>O0I&#Z9|j;r8cd>77>7<=0W}5G_ZeF2~f<Q@h%^CuXm$%=Xt&l7EYG
zlnYI@=ed0-ir!K_wwG}!O5gMZ9Ll?)B2SZ+ty|v;hbtTnTno9u(@1VEH{)tn1<mc+
zx|Ou-M{b_G(cEYk(J&rKbqU5J(H|t8$d_)QJt7*$AKBYVkMQ=ad<nO0^ZXS#7WU~F
zIZ?Wy%E1KhSKe0pbSzKKLQzm!7}2cZd5(QUJH5-EML9)e@>rCf&XaSCZ32*7%+j%N
z8dY^Ga!&U-tK;$2=X7@;px+0&htD4zJb!rj;NalFNo)}(rXqpPmY~w1jio!<j6Rjy
zP^b&7ykK<n;EG^y#lg|h3s#2W0~bzAQpe`Wi3<lN+E#XECd0OtXtT06p6=B)rL<<)
zm=?CWjm4w3QOnogZnwMY+aj^s)!^8SbN}52C$0+)`U8W3RA@5b4gLLQZXjps+Jm7^
z)3yf&Ek?A@Kr-;qeH|9uR?LhD#&jNUZ1K0yvV|RYei6$&PpXakabjgWzB1816_0}i
z$H(*d$j7Z=Wpf~5wP~FSWedr~rqh|}SZq3zo{k~Z?7-C2K>v!&H%xYgsb)!6*A`QQ
z0+c8uXL1K|*M^j?)s(Obvz-h0MX)mzSmELP3cNM6>J4j2?YgU1`*k9nZ}niUsH>w(
zR7=kM-N3-_NNVTM(9Y6p`*%P2<nH}!?vo9G`UU9r9khQuv!(g~?85viVUE$l?8mq)
z4laD6&TG07K7~)~QmFzuXD()JS2~*<3Z+u544ACBa~C&eLtCUtZEBR)YU;gCPrF7D
zt#59Y$(m|Z4PJ*cEBj<S^=RiYv{OlUV=%Wq(SnLafvRKkE#}t?`o-0M)7S6w4|pxH
zMo+z7VQvdqRE7qRkDPgGy)suZo*418G>2vKcq|@ok_VwQ3k7<N#KRZ~C9E0P?>t>=
z;Pc3+fu5dVRQicF6t<6yFCQ}LmU=xciz_Cn(UH;Rnaz<P#ywhIBTREQ3JQYJg)^HD
zg`C66fm-j`0)p+!VB1S7LANV5Kz2VyWolCgkR)BYF-yul#UoqOedirtx#RW;cYfIE
z&q_H>k0m)^j1T$adahx}uNyX}U77ROcV94*UV7Ow-*Ri~%5$3C8okD9i?&+t53Rjw
z^|lAkD@@(FwP#DO&FwU~#(Mn|{l19ztu5gd*^y5TCpKTbV&<|QZF3<?>@9|y?9oA+
z$Aw-&RFePXt^zHa!TYIe0sF+Hv;)us*~bo&R^r9VmeI+kWvexP>I2$d_0m;Mlk2qo
z+5;_?bDGY1dF1fO3H*nzmtTIFG#;jsZqa_Uz(fv^6*xUF6<vvX4<pBNf{a2bQm(3`
zSjk~B!17#ONin0;AWONXlHx+14Xo6)3-T0M%5{|#4@!-)Qb#K(QIr~Ec_43D?LOog
zVtH<;q&SgMWGOdRQVfWby^{MiS_nf8mqnWmoC_&uAm!3(3i%FFUO>uam6QSr3VtA5
zjg*__AO{5}S<20o6ccu)R$v9nuu(2jY~T!b8LL@_4VGdp7s&w218lGqGfEAz6kvm;
zxR7T9D+O%K<tefhV1uQ2P->Kw0ybDm6s5*k9;&U-+I`3~#PR?eEX9eGB1-`_&^7|Q
z{T8xP@C4II!TYLy__rQBIC${jotO3=InoQH(0uPBUx;bd;E)EA)%5mK+?8)e`Vr0r
z+^vA6=~BTXNG+89B=`YV1`Jz#%}6=PQh+Vg%n3};j#iKxQ8RY9_*Dx(w-<8%ul7w%
z_0f;T>$R9+QQEa>=FBr^Htp)^9V&Kp6^DA!Hi&9LnOt^?Med;$&Y-4`xY{MErqV&$
z18P$rKz%R=ed6jss_DkmZR6|hW{pb`)erh|!-Mf_+Xgm!tS+NA<n;FB;%k#^-DyU<
z2LT6q6j}|&&aZn;Yei>#UGhw1NlUvUX>cdw{)nYj<!p=^3;x6?3=lz2x6J48B}@jR
zIc70v4K2!m#nutE1{>?zoQ?#x7ojVm<r~mHF|};KevaA8?_RPE_JixiqF~_3W82f|
zJCb{r{C<7le}0u&PkT&TT0}Xz4?DN+rCgI*%#)NEP_B-?e<ePuYgY!0Mz_bLGB>)L
ze|lGqsU=ZdPTQt$^_p$2Mp^6g#bRAgE;E7_QQOrha8O72P0}`JB%jk{E25%Wf#d~`
zMeH}|Y?hYd<i;hgn8Ma*QTY>MS0Y`ocRuTggzaXN;~TryY&lyaPu0r{IahDWm9wK4
zQFLVty^vwtU=yeE85hGG66x9;&k{o@q7oIhZ;TIx(`THGg^iF!!Wu%`bdVw8DrHrc
zq<nWPn;UM*%lU<|mKnp{l!1Sxuq4>3vyLQE!%mIGv)pGjYt$xhU8^f*_d8@=L3?|X
zNZ~WLb)+KZpj^}xbA-D-G+DGdol0kX(WW)(8})vz9ay54?;=`K&!ib|Wm{zVPVyqA
zy6v*hYHGGCMSi2s=5|G!?Q)CS9~Zmh9bNWL*YLy!(qM8lDWhRq=^NUHR9$1C)7hJH
zciJi5=!h4}k7C~a@RK%++x?-CKku;F925D&xKu0On*CHy&!@5|<3yR0l`^N;EH>vI
zR;weAk`tBOt*k7{_{tv%ZWC;0Tw~tGCfPvGXTi^?26yLKEG;^SAZnYqRB$iyVy(pN
zzEz_f=q{$TIf+<pvuX0_3qmrdL9c5uPDY2pK}>>=$qM+T^OB_oDa%QXpbU?8Ub4^>
zEAGP?V0oxyp($pR8e}O{vd|P4@@!zGsAQ?;DY6tQS!jv}rAApPDp_bs6s5*k9x7RA
ziVt~)SRN`_Xo?dlI0=OIP{~453WBEuKj41GbG=HQrvxWi3Y8HI4$M)v;cg+R=$1-~
z1yQW;Whu8-Qmo{BlHk4tYuSTfY`EDH&y(yK?l_>U%6oX=S*UJF^+|q5h2J5>5iqK|
zxZ%M`Rgz0X?Q6CWok<(fnv4VPPxaJ@lo8Hi%SXuhNnavW*J@EVBo+E=U$8gp3f6w9
zRf}aWCkUg~b;9M)#=wN=UJcY>ti7aFTBSRp@RzaC+4PnstP)8J<3d%NF4ybMw;O#u
zHk-mi&R46f<jr&2o3+!$)KV|5;+nDD)PSjsGo*m;W;cFS`fxfGQ}Wfm>0r_Cj5W9#
z^a@8?$cd;CHbpx*f7SB#5syaJUSFRMh0^l6gd8>=NEJXGWvvF+<8i~_Vi{4ns2XVD
zXZ-{DAy2`k_ce>gd!@qWfY@v{TMd44{+h|ykVo0nzNZwnDq4E%H@3z@y8&Ad*qvxG
zJ0HDh%_3#TC#g}<9b;VOYoTJmH{iu~632a89CP{XMqTE>wMK`@OV0O<w#P?&p?;^V
zvEJ|3#+p>G8Qb7^K?DluPya1kPrY50bnU^`3OqOEFG<Y>gYiy#Ym-z_?=2Ld0f{?>
zt?^=gmJ@ZD3#I>|dbHp}N-sD;(IFVD*i$PEaGnps!^lo~Kh<=Z<{IOfBfl@WkS*F-
z7O=+q(qo~9CUv8tb!kH0TED-eshGeepwb$xF`ez)Fj|@Y7FXEN>aWw*w*)@)`Mr8k
zO{=om0<WB)A)OV9b1GA^LnIP6)HTRm{zwn;S`8+%*<`T(-l$T@h_G3u)&dh@rrj;4
zd&YFlU!gm7^?0K?JT6wYTT|hQW{bkALgqKm&8tiUnSXu3=2WWQ#dtxh6kH=*35<aE
z00y-f@oO*iJ3Q{y7>ycyP_(b~EV)3hQt9aj5juV*_@m%Dl$29{Dy-@&QXU{w{52vK
z!KqW~>YHSZ>c;UlX$9IJMWVd8)j(F39&I1sq;o(kJ)$!T<WE~eHF7L!rRa%h@9O;*
zt{xB3UX=dN(aXPfdHXU-4VZ(1&!dDKCD3+SKfm;nTo|;ED})kJeT|Bop9qq3OGotB
z#TAP9dbkFRKjjWs(J_x-nD6NLR?sJ%`wsU=g{rW%r$rODwnxU*##ZNq+Nh@rd0#+n
zPHXKvMqNJzT3tV_jtijk<HAFq0}RK3aCePR#Se_RnGFmDv~XN1{EV&tX}_vA6H1Oe
zSE-2QFZ%`pfdL=?*Y0%M@u8C^(LUn!j<hF6Jv|+va5^0hVUZ1vCHN~@hn6){jfbwL
zd0%G=m3itX=NVSGTPjq>S}Ct`hTNh;g<t)ZykS@98LM)1&AhaLTTyBxfUT(F6xggP
zIqGmv4d+VAmC{CObFIqPNRbEQfN+o#8XPYJX9{qRCX~h$M}I+08eVC1Q@ae~PgSdH
z<%XW4wjP~R8`QSw{H<!Ap)2WxwYS-ZeS5!N<1_S<^L5HZlM*LKRCTp2&Q@=Swkg)o
z*eq8n>T5JkQy_y{<)EHl3r&odfO??b!`++djG!XQsvb;7LeaYZ<;#Qg;y4F6zbAQP
zPPlSq*Nq+0tf+=kU;r&2hRs~bQy{jJs2)Sl1~4IWb22iaG}|2G-L*nxf}B5)e&a=(
z!~JgQS-%qGhm$M7MG@s|QGPBi#rb>2BSxVyvh-|<sn2fO^x4w0$lHXcUm`E%ebv0Y
zJwj-Q7nD@Gb;X23AyWGLgDO$8V|4k9L&-He7>xDnKl@pHO3&UfJxy(bwB9^m(eX;c
zKaUx6=yaoSYR;IMwi!h&#+5VMRynL9Bi5)7-<6KV(x1C0n@CWts0QxdgD4N7!mKxR
z+R?xo@KxfE3JE2WA}*Jd*Xb-$$;A`xH4RdcSS}4L-KXiqW#t92Nvk0FW7?p;CDd}P
z^h8G<P_<~4p@I#l@xUgQ9ol1;{rcE(aya<?F8o6-9dgBm({!bxoOk4?P#f^CRbLwJ
z^!9nf1+}-)tGD|iX>#~U+h8(~G1*(<N}a>vNZH@QjKIoD@GbZd(%W!h4Tx#6<15up
zHcZY;J~R2?gQV{P>QSjBeU)6;(}+pW#5?{?`DVdOctfp20wFyK!v>#i6;mxPaptRp
zwCWm^(pI_4;K`DPWlJ<BMbak~choi}3JqvM4P+6IN9@aklTuyf6g09Wk{iYxs<Wt7
zkN9J1<(cC#iCikgC%R;ZN*xX8b;A0F4<nwIppB?*RXa2qhx*pif7?PWo=C!E3}~Ek
zwo=l9TGN<k>;yQ^S&}R!#RA_cs4YnZX1g!iX%K%)<aN89MqS!GFhPA>JfdsO<owW}
zQ>AnV5Wh#cdP#iLS8#i+Vf4jAj+1uS%Gm9Be~)i{(b?&o`)6^xEoKkO+HxLmr_I*s
z_2g_Bzs>IV+iiZzx3q$_@Y86=3N;8Ex%sUay0-+*KsT2dis%*-Gf24^8>?{0<(XWQ
zQrVQt^tPqbZGD-%qPba-&-7`N21C1chd-0?`?A@!*}S&HYU|MEv;AgsKYg-U*;7+v
zV^b_2PvrB7c%IJJVEIP!b?$xI679mX+59FE2$px&WBLKVL!|y;Xss=7AM!-n+}QhZ
zFY8&_)@R5V;to%kPblu*EcTek47QNR8noF1`EdVQ+1AYxzp)34OSj2mu?Bl$12gh%
zv;{Hzc^f_^*fXiD)7@ZP7{yO;%8CXfRpU%h8$1>__sD7*&R&^ZVk#(o#!#Y8ddHPQ
zeJha<v`i)IRds!0eM~pK-RH<_bg8H=+)`9(1D!?@^^R*st-rzE1|$ddUuU0F=oFPP
z*7@r3<Hs+#<J^K=-zbtB8VdXGJaYHlcOT1UG9-GNwcBRvw%%6yRwk1@2B>rg=r8C?
zgx`5aKV0!dJdT;4Wb(KwK>%EW`_WWPDWkH1?M@G_KBCHZ5YmxXU9l-RZs<~mjP3oh
z_kT;sYcI-sW0n|PGFHkC?n{Yk8f$9g(v)cbh3K8uuyn9fB9qoCYC8KzE#_<>0xIh)
z{|LTi*FmF!C8QGF2V1q35q0BIXIiOLUAfASG_2d(zCP3K?b5W{-TFXtn{mK#Uo;eo
zIycEK+}Xb^U%O?7!x0v<2!Ul<8i({|@eEm&9F-GiBlRk1DSrl$x$dAA0xeUZPyy|D
z?9{F^gQT3>-mY&}>%7id)v`gQST?yz)h5^0wJ6*!v2^dD7O7)!BPXA%B|XcYUMi04
z*itW@64hk=naO|8u1|u$r9rp91Krj@3rJurVd4;Kv`Uw-GMk`lMWb{&#iUGbyM=sr
z+3_VebRaE`){-HKOwtbGkloW*7(TF37LbW*M7VXrFHhLJY818YF;ACmJSy|c8d~Zb
z;;yjIk7$3Slxh-@9|>nSUuZve_7#t)w$BK+?9qnubqZ-IRh!6q+k~5No<g*XoY+$!
z*Xs5xq;t>)rE`WF>NEbgX&s^mbb=uQy@xu4+Xq^OHKOs1L?~K7^g`}|+h7yD`ZA)|
zgYvb@VkwDS-_Rj$&^64_KHSlB4SIRb)6oj*7gOoLJjsMuK|8P>4ngv0V{Rc;8Q2H9
z6ey)S2k7Bd`W`VZ-FCM+2BCU=gCp2Ci2u%-D6Z(oe`hTpxv(iH?kI|6_Tw3$Jj7X!
z9h-gk*FkYIApQgXizK7J{`IfPWFq-LH^xW}Of^F4C4=}Dhahis%zn*QK+v>U&ta9f
zs}*X>&*{<Yq`lbNdsD}{TunAxlV6u|-CEljGa6&Lnp??rz2eVV2D8PE5$Dgj=yaQ}
zG#d#a8pdzHZkqsK2>ZB|X=76KQixu{AArh7{H4bLg!F%R4D`wr2fMb^V3t4Z?8`Z}
zYa*sK@WI+(>&V;Bv16}8B&&5x-WJtLytN$p+~;P?#1|A1Yw6vOJ|dRVyV273h_Cd$
z@oS64Yw@AI>_#vDh@FR4U^-BhicAZ1GuA^9jhI0EBA$6u@XImk<o(mZskRZXJ*W}g
zaKna?ktH>pI#rMTA*Eewi~BDo7wnl?om%GCs)k!~>2yj`+UU_3mZ(~eG&dy!$<zxu
znD9k&cs2nCK>;jmQ0J;64ZRi^&`@?n=O$zh1{)h!V1Mm#3^tE`hJE0FWUr<#Lr4Z&
z2u0WJgxq$F+<t{T=`tFZ8m}Tdf}%t~^r=*D1jmsj_2Otx_s_}WHI34^xc>5}zNIvq
z2B+|0?!JS$3k~6vsAKaQ4;^lb8U=`-2sfO6?#vQze`}W}Y8f0E=~uhzCZ5YI+r35p
z(9x?OY2LP3;xpx2j2E7@=TnV!H>@xHEG^qYXB_3mzW_H*F>ah-Y?vx@bjq=f9iVw$
zQQ$j|zt)9%57DhZqpo+rB)2L)H~2-B&f~DebRCwZ>G92VHA_CFa4TOceJGO$gU(({
z#Ia4bZmFX+B~}<4@W<U^@fh?4dvN6_tjwKFMtNtWO=Sz%4Z{u}I5f}0eqQC!Y;7>d
zpk3h5r!wf)?yVgcZ0+$3>AD&nnvkQ*G!%HOBc4d@-dwZv+KtzIUa?`V$ZN?f^`erq
zK9Y5Yq+7^|jRzIvt>*J6KKk+JbzbJ78aksG?}5_}wm|tg2W|tMxxY6vDE-#pk-Gj=
zFFA6h-XZDhkq)MwyyP=KTN?^@h+UR7olOZ#u6LsO!=F*eb>-jT22S2rI{{lW`^41H
zW!Q&#L0}a`S7uxLHEZy1|4rIQ@Xw3jKEe&sb)T1g<V;5Lj%4KZ8^@B<`LWchuL~Uo
zzf>V>F}F;egY_P7(SHZEK+BCKq@Z8=;rDNoYSe_!tLNdr&ykb&)9-r=J%xOsr|X5u
z$*a10>CeIssQv|c2>PQQy;zyEnLwQv2(a+#=LX4v`%AwdC&@Qb;?7bBm+$OE3CgFQ
zLx~nzmOt+X+%4Qir>qjs%*0F?Rd4SN`K{U9)=tMazG2LCb!Ciqq{PXTm_(dQ3th`y
z?YTS1NN1`OUf|^^&?&tUP6+1{62q~&E&ZjtWZVO@)363s-@-chV`?2-{7m;%gnpEE
zvpu;QeE*nWxZ%fgCHZ$|PecyUL&)J0z00S=!a(heNtBebl2?`g53H@U<OY`GTJqpr
z4*8-SV=Twj<Qpu95ipc2$2H|r1;(c<FrJ))QM(8RtW;><HRMH>!v+{ymg8yxsldP%
z4$JZFIT$q3rCT)LQXa;23t;F@3*$P%!@%x{kk4@qMw9RDepX902O^pw;t8#V*^U`L
zV53Dlt|PyjYlmo2JAg~%I7*&jIcP1-EC;hTGZ=g=N6FXcU^Fg*!T06*N?+)>)Gf-v
z*K$K82d$-r<yhR88y57I&#|~2)f|*=_`Y0U{#6AZkW}c)4e&9o(#PVK^6kKyp_)U~
z&)V^0c0zf6e6Au-F<4h}zhyaTZTuM1o#TbrzlOFLv)d-vgc~y>bdQ1Y{)+zb?@vBC
z_2iSAP9j>)#7UNqSP&ayKb<W&QKGhCu3C71*NEU;@*U2=An?9=%u(;m%*{7vZoVaR
z3;vy(z4f;2v18fWZq42X2sXh4>dfO8zs3W+xh*X)tA+MM)bkUA$73+M;iATW(|X@<
z8jTKz(dZ=GtG_U_z9jeyc7kpJF0F!dh!`n0!DDFk&#`a%C&Ag+H~kZQ)oGs(pnf~G
zmN=aWr&=miYqjJjr5<wf#mg^$@xT`*zOb>kP1HtrJs0Fn!myKYyA#+-q1njE1AMNH
zUzni$4RW;twP7J#MA}sIu%Ey3%I9evx8FQ-^Tv!@<j(wceEbt7=WC&?(MAiAldKqD
zX5-B>rMDKAqhr^2>gdrr`4KE3QuWch#-Dt0{H~)YL<C8qg*3XGS&HCJ&s%Dew{N&(
zW3o*Yrf)AVoqyZqm*2+v9!HNhP`d<OQ&1lV>zsdsRhlYpIJ*3&q^UT{ew2P&j31h~
zX5tY0Lutk$_=vnq?xL0^Cw!x@iQ%T}F%vwy*vf0lgs?JdpCxA*v{im~ng>2=v9x4D
z@gV&Q$ATC|i{J|KE{@N+#2g(({N+axlnaU!13Jz)Srz1p(jDX^Xtwkls{gqJ7jqwR
z4OnY>Y19!XEP{6Ca#CI5@^(um9ufSK-`j!dMa+v6y4}j<3u{B7<_KIZi~h}{nPsga
z=X%_a-4>ZBt#@R!ty#M>5GFT;;;G1RkE8G6&Wt8#4vhv^ZO%C&U2PM|!n)|00h_DM
zZ+ApV+7nK%Z_9#K==rCQF@x&`9^m%WJ<E!nRvX6}7WRjERY`JNhbubT)S5M=^UI@C
z@%D{fOVhbrrY+`}jO^Ukf5FLEYJ8>B)K~gTc&f8!Ye%=VLArgWZP4nx_2~XDY`}<w
z%QIw&Py>vfva4RLQd+ThFq~{^GStXqT5pR=r5osVG~u_WMWxgY+%4uNMT5oRdp<kX
zyE8B4f8V#H_skrnnesziH*S#tMT&*cNvg5?pz#y!twWkSc8cpnBB50D;F2G#B=?&;
zx=JrJJDc&3`{u`B*>pvF1xFzDF^jYbr4XcSRV#(~)AG(+<dxFDeC<`T>b!muC-MG`
zqS6PYUop$V1WIi{DXg*J6^T%vR>cG-J5c)ZdE6gnW!%wOtOhwj6Y%~FELXME?x9py
z)lq6Kh7Jbmq&q=$jQ}<zoj1e19ZR;Vwf63=E%o)fh5+tC4~&GnmT%q?v6+I+e&Y!F
z%Y)IKonA+F_L(JP(x#fhMpNU5%eICmM%Uf5#FU8{n)>wt)E_GUk^4R3zgy^P;1oYc
zwbh2xry5v3sfvj6n#3B#8C4e?*{HrO!Ao+((BYY6a^~<*@uH2%*%w7(p%*bH&-KP5
zH<rFhz9JTjd}rkfXM1bw<7*D~_aCI;8V>f?ik^|wi9?BOEHg-^#b1`zivqDkuwM3*
zm|^?3TsK!k`GJ@uh*k=8Yl*+~-$a@EBDt=#_lr#gktOQ#pIP%6Iy#>6FSstQiRD*F
z-B6sQZUvFtT_E)=myTTf#S~GN{yX)>(mv#Omw(GGtH5{Dqjv5jQIlNiL}?$n_5^Y^
zQONnypG1qHlO%PH#YL?oR{CS%?zJ?Nj<xFA(!MXIO8*V$!SXA@A?{r&mFTDkg@&xq
z@bS;_Mpu4JxR(0^eIv$-@!1lNev<o^(m$njNVSx|BwWG$2E5HJNG=)+=5tE5XUemv
z51NUCO|>#fcxMyx?Bp$b5Cr&^$?A9SxfI>!_V%1hquZR@)3v(`|GIZ|b?q8X?>e?_
z?Xg{%%&uc=*B#rH9t^Mg^pYi?UKOr>ug#x5L_?CEHB>x12Rf<tOHA>sRUiVD)M-^%
zgTvgLU9)SsYi9RnxgT}ShKG|JRhr=Q{)(^<y#+7SCNL)I2)RN;uE=u2(8u59DCN)R
zsHx_0S_z+Rb{E%N`g0}oD2Ig`#q4Xq-`fnL0su*n!Ac2LrSn9k^H>|JIVePyCrK*V
zM!59stJS=RNi9J)m}fp(`7VVCfOe7)_Ay}GyWGd$#kpy|osU)W04kqLY$er<H_iT<
z)K;^P&b~&W>d?|5zNJI~paf40+}j`jieUk5ozFv|vRqP9%{VgqDwpP}xeu5AT>3L@
zNfBPj|H0jh)}As3#a?bWGy4u#Kl{fzZclpl_TDJxspJ>Bg%0p^7|H3F@e4^da$qjl
zdZIg0Y+u7#>?Qx1=onPGRSZ;ii+xXPZ*at(REf;%Ql%aWx!6%qdbP6;_eRO=${&2X
zVf09MBz10f$G@(ky%v>!1#kEh)K^Jch0IRebJDxbL(ySRp+)4_dFjyLu9q^Z@uLHg
z&P%$^`_Hcr6}FXLeiP+e%l}3G$~|3?1Qo7_QN$4h-VhFENZAjzVlVS{`-@?fRnjGC
zXw~(_^o_n6ac63W-s82U>{2l&mo=-K+ty?}!#ai5*BV;hT)Jp_EyYPYZl|F4v5ToZ
z&|)u8$?QFBdr14k`|sa)|NSvhI+;w1((UbaWP(hT9xXk(@zV$PUwGmE1GJx~+@7Lc
zaC-{bbr02+@t!<H&$o%8e<6mDt#TqPP3{xCh;*<OoQq2;&+#hvsmOiz>>{NPE9K~|
zES!Xv0~`Zq6+FWI4iF9sri3=6G$7?pma;{#fu)?mb;9exfjrgw<-U)Uud<Zt&2l@q
zIC+-)FXZVW%?$Dmu7DH@d5Wf>Pt9D5U=R17lsD0xpcct`3D@$k|B5;#+yp%E??K)^
z!HukR5;f>igG8L$i*}Y@=Q;&nV9y!)EKs65d&<w@{oZc+{K*?mc5~h2X`IlKimOo{
zE<-JM^R-mkcow36eTn-i@(fi{Zs)?}YVNN{8Ly<=%e9kVvD;lHD=FXPy2ungT_7H<
zq?{;g$u9IuD&7rmf7+g};0~GtEahyP2Wx+C`S+X=CnTvyq8)Z*8lhnv(Y$vE4hRm@
zyXN`*D_#h@*<Kd^dto{xHosA^Xua@Hq%T-rEX=(S`odbzkZZMag;o=y-_2T0ZRNSM
zNvmyY(rOfy@0E=jO(XI(SH4#^YPF3`S~vgYspP7o-;FJrK;?OZTB(9)SE_euluE?j
zRBCo>@Qq)Z(pwrlBUM8#RKr_Ct!h@6wpO!|r>eh7+xUDw@@W9Wf1c96eG;mg2M<-8
zlvjd=GN2(we@QL($kLm*&O1j=(05xgXS#%Ys_*0v<&JZY9T>TszPkl?A_s8i4$29!
zZ)O|X=imb0QoTjreH}0#;$hNvT*pmIxz3IgBlO+#fO!WGlfIM3j_0_?(wDP$xNShN
zi-$>XG_sAk_Hlv6w^X#;6c-mfOy?5ngVk7yP34Er+J9E?py(jC{_@NH+qThM8@Z<h
zpAq)5T=2J~*>*)Y9@-e)DdL{8o^_UWCCydDdh=;SDxtf*i`F8HPxt9u=GI2Lq{yX`
z_-Q~;c-)bZ;_@1krbpB}f-i?z)H6z9^<p+XCmfrH#Z<@nh0Rc_*J8lf3r9q`2>Wf9
z;wSf<Qm<?^NqV~RotE_UP+0r93Bfg(ixj6&b*~{U+yoAJ;>{lJ2ZEy&jN;8vFoqxC
z4R}DM40u-`onzIUc!sSJCD-Dfi_c;<gXb!sw@|S|l}fFgOAgqCz2Z<H5EA!t_I@sd
za|HGFjt+ahcfgO5Yq+f7eqgCu646qaIx6Qn25j7F&g}7;$!cOB;Ih8KfG-~R1qOX6
zw}m??xKlVvb#~M^SD{2QI3n$q1YNG6q+2?|ogB*6TYWxjeRhbpb2UnR4kP!;+Oqu?
z;U>;xvzy2!&f3qN#6GXZ@3-I!<(}ob1byH;uvwtCIX+-^xy<-*h+RUB0|@$xykFs7
z77PgcKatntF=M-!d%0>pfV4vIyV3jS7-teJU=ycA%HO89+x4wB+mraT;y2gr(9tBF
zqxua<(`elTm8koF6Vgt-)v8B${pV<ief<7pw0*SyaV{-bg?qQ;ppS}3#&A-TuB%RM
zbor&@V~!3k9T7J-t2EpY*AX#$;n#(7PYYHG&!Qu8YB|1G!_wji_jE+u)TB^yom|iz
z4p9tT&V>c%gX=SI@rAfu=q;Yk=hO6~HX7CVaN)E+kWL5u>5xgMH<|Q06CmA+^W0|$
z&;9$5LfLGHew3}PN~OWTeKqC}#9{$|ETq?H^?I#_dWjvyp8XFYcbInt<sUeosg32P
zmUQC7wHqFHJd6)*{gtTmKZW~F&DojWIGn|Y`>Nr%|2ljqRZMXOa2Cj9iXA|M$vn;Y
zO7JYMaJg^mR^R2wwUK)PoMq|4Tsg{Cc1H2$Y|F}(ma|c-3+>ypxP5!KFPYkg57+*%
z<8cE%w0%aj@7%@h+p~9g<9>X&uU_XrZor41!R?sAZ_}9}bkmbDbN&G9dxf@vWUAlJ
z@$;B#mwEgB{(i5_kxHS>TexR26Njtgj*^xAomH5CgLBi7dlqw$pN+J>SHK;kLJ6zS
zh6x4pOx3BJOZ&sB4v|pOY;5K7Bd%_xOXnq8jZTkp4}#MyLEk~0N`4~+o7;35>$0XD
zW8+f4%c$luB8}G^PT(p6jjFksD*xp-z-Q9%qGSDQuexW)qM&PwDkTz%n~er#+RtU(
zEk0Hk>ZP2nG8@3@mN8CuqAV1wDZfTXNL$&|Gwj}7nC;8-eVx{GKi)6r-%Bf&%{7JH
zyJx?S4D|g8NUb&8x9N(6o=J<T4ZD#vmAMh`{!C7Q8_-*21d3B<Uaj3zE19Zq3=ESK
zQK{3WXl-ySf_i@k^~5fJp+sYXe4E)XB$PX8)h>#YWM-(ZZ^&h_xJtq__H#r*V%F)*
zgqFFZ>=107YbR^z*8W2O+nF6Z=t*q67vlYcw4YMePP^LD|3?4pj!b69{CjrhnZ2*{
z)zS|j{S+IO{@zg@1e{B#w4wOe`o@<t8H(3u%Wgqm`4JA9oIvpLe<5W}IV89rwj5}U
zNcj~~E-w?o`4~B9gh=@=T6L_f6-<@?h3@B2+X<YDc-FM8t~1!%GL%~X%cw}Dv`Rv-
zD}}?fovZ|E$GGz)AS>W1K=~OhWDSJ+jSe?0r`9Mml676RR`dUF$p_1Af=#GX0UF^w
zqhh>=6}3UudD94}oo-bqoArv=cY=P<cPOq=HMHZ@BBdXf;0%<71$3?~UzjNk4gOrn
zFl@9Lo9dM{Mn&R>;ee-KrH$(~sv1eQK?w+NLO%~fKd15?%1KzVTvGZF0sKh$NZBel
zRDO&fQ*2}<?CL`wWiI~7(W9`d1K(3+i{Rn%o51%J@ck}Q)&k$3EuTaR#OKF|hk+D1
zQl3J}YNY%CDaEo`@O1gBNP&96O6@O?2(Bp~LkdX#<Bw2to8WQ5cgP6UUy`TOg?88x
zV@P8c7lpBiBN_B+npIp;7=2u0)D+~oeyBn=lf1JZkiHIDALnUZn$XY%qcqV@M>9j|
z9Q0la@kAaJb%aCMg+{L(==GD;UQ>UELz#;+Z^Jr$l=8?UWf|Uo8TewfPR}+c?1w%&
zdGW=6c=XXWoSrU^m74@ll%JqJL{i?XlQ-n5rTjS)V3PmwL@cKF)QD=lx_C6#qSC0c
zO08P^-qK>L(b!sCTGNg=3@R0(F|-5fXE}#pE%#%pCqN=VCh*|~V!qhiKhEK;K6qnv
zgep2ExDjxT=Zap4=U(<);c|Fh4{jwyq``#XQQS32?e#bXyHLZRGL5G&eywwX+F($t
zjK;Ity_0@?tMJT?wenK2RVRC^`KjsyomX#ROt;~t&kBtvU_YF<UPfa6NkUX|k+eou
zr~6Ji?vd$ho8^S-62SskN^xe~iTM_tlLWJvNepWEl1NG`En9za!3DqAYAM`sQ*Y1B
zH*n@;E}zdOT|u=vh#sTtGvqblPSDm7^zaz^xS8t_+y&42)AW&IbzvX3(ffwr&Av3W
zv>>Kl?Re&TEbz@WX*HIMO^5uyt3FWdZGcX7kC2YgC$L8$FWf=eS%JJVwth%nh5QPu
z43+G+TpE7A`amK7zqEO#u(YEJdA`kO`48Rmzi9J9Y*gF4^uW;iY!&i+o6iYfdh^0I
z{{vb|F3^jsw6wl&(lz=?TKZ=5TMhHHRK-RTJkLxcj$n;EzYBrY0OgtsaUEMwQ=iRm
zQ(J1|!jNn3*LN#p@l3T(-)PbLCE=vDh5kKK#a8uuemwlA8)-LILJMoJ(oiRXBlltw
zI+0GFSO}M=pu7GVxYg0f5R;<{cWyB5PN(l)I2JtptOCcPIGfWb7q)XDmO^XYGol&y
z+FKT5=0Dar`uZGeZmqVt`aMtmZ~e1%MAwHliZ+JUAFtH$e5Dh@vCY<E(YpDnYWu6-
zl=tr8Qn>8Uh&p&K$kx(yZtZYwT(i-&O>{gsp662jHEaC6#CZXTgDdaD>if4sy6>`}
z4CQ9)L#sEh4y_ek?VRyp9ln0OwV!yWqbO7Q2qxyEi|c`rZmyo&cjZ@C>)9WGQv!$B
zLQe^<U0e_Lm*(oZe7$eFTF-dfno55J?+Kk~8zddLdZj<SVY9M|s&?&gZIjCAsv9Vn
z!j+muK5?U5(agm;kKJfjR{Hv1!s`JKW|S&CdfJW}N_lwIUSCwN(3qX|1G&yho9etG
zxm?l2#f2W5*I8}dQDFkms4S?q?liNl+QfpvYf-dFlVZ2S=wZJ^9<+7E3V&`~t@cRT
z;{0E<bSJQNi}0C$47=LiE+b$YC27v@g`+V43oT!@%32u5e3iB(FkkT(u$grMe)Ek~
zD_Ue<po2(l3^_?86mFB`U}I>HukPdR46ba}MePjdIFG~uhqoF03-n}2ty8TA6bzOs
zS!tWc8^+g2u4DZWvmQ8tK?hbY+gukypZs69C4FY!>P2li5I^$2Y|HYqhSs0bmUF@v
z&bMU?@B+=`6L?ujB#SUKRojdsu=RsI-KVzgT)(KX5d_%9g}p&U9jIXJWnc^xvlwFw
zD>wyro99W9+FvRd+{)9VFb3-8>2W94a<{OZTl**44{`DdArLKCgc-5VAMlDZLQB4$
zr_N3>)_jaQJ4FF5V~H8+G%lB>&JeR)dkT@FKWA_+3T_piM1QQG=+9{?92^p-C4PUv
zCrOKkYEMV7FXlsaEly`kT_}IeBC0*eB?XtEcc;u<bc@bgW*n19)_Pa2S?OIZ;tFYL
zNb2x-9QaCeN#lwY#?FZjr(A6^spZZNw0sKpAYTisC8J&JT=7e0y6~lXV^$xt4EKu%
zTAEU>jeT4}tU<)i2-hRBE1JcLx0K%mgi$~^e0m5V{{A@#7xZj&EP~MeO(jm9l+Wa1
zf}3&Qxs2}NDB1QTmCb6E_H?6V_T>xx^-hyRbGmVg&0j3tBt5WroR*=jH_Ww_@w*DU
zlTc27S)D>VARZ`MqR(`@HgbhFakIiM>fs`Oi&vv<cnfTTD^nPk{xdL6unwOJgLZg9
zkCm*)r=bw6Dd$;n?lc{}q}E|{)eq$J+;<js^0-IZB$Jb<&}_0f1n@g-D~}1k3~Nmc
zu{eg<?!-)W1sKD6q^k1ZKpu^=OLb<fdEmiY`GKb492k<=IXnJ>Q;iZ?EB+NuWTY*%
z+Z4?AgZ{KT0r=m?rq0`LGHpL^YHVQ2`<QoS|AK^-p2s{Zi-ERGIBOrwv<2MuEcp|C
zaIXmm@et0Ge)ia7Pps=-wfecWt9#evwih&-!uH&n-qmZLTfM4(U4BPSqd`p973o|k
z;x<M&eJIlzF}fom_Bi|HT$(<uc@8^w)GO~L?pDkf$aOKn#yzpB3A8WnQ0a-%M~GQB
zMruk=lcJ0pSUvld)%c4gs8FCP|3!G5y8#xJIx2OkPk~iI_pYVl1<NY9Z2y7CxKGW#
zNdBYbeuH?jmt2xPd^mgY#o5DBGAbeiv)fmYU;X}t%%w-NmtB@Ua%tvLP=G*LepT3j
zbwDj!k;8eL`XAVFwI_~wVs}6r`{4;4xj;lN(48p#>^s+Se-izPyDm-EWyqG&ote^o
z{bZf!gAeHG&1tfWdljA_V$2;kffK_W1=3F13x6WJx{0~;)9&}MzM*^;(Nez!Um|cQ
W;KD&V*{&A7nK!l|-A&U4g8vJr(rj@6

literal 0
HcmV?d00001

diff --git a/web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3i94_AkA.ttf b/web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3i94_AkA.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..3ba2f35bfc700f9776ed61e0b407dcb36be69a5c
GIT binary patch
literal 166564
zcmcG%2Yi&p);~Vwc{ZEfB!mz`3o(SyA#8RxjS^CqB=la52}uYcA&DWOm(YudU9n5G
zD|S>=?5NniiXFX*h^UC=q9XjiXJ!_oufCsq|M&Nj&pBuMoH=vm%*@&6d0?C|7S5WP
zWTS`X<p-|rbG45#D~mDd9Xfi{xa;payo9kmI~aQ)Yv{NMIqBDJe}u7Kdl~D#Wz@L-
z-gBegL|Hx=t(26_DXmYffBY%NRvl-|e{W^Y!kO~v-+D4W=QGA*_syy(E$_58?jDqn
zNBPuQNN}xlFGBbfAaT~5#syXL-v61gsLvRSIapIyR_ed&n;wjXG&1I{om0A?-hPGs
zin1R7;%iIiRE$4azZ324VN9&AubbQGZ?|$EW2472=DV6<Z1#g}BMW15SO~>h{If7(
zq{xG(zh%t1<@BJ_gPiq$DnqrYmT<3$bw2#Wd94Qh$hbU0tsFe}rVELFIJ18m>K<~|
z%UckYOi(KRN&XGn&umoQC`dZPH08z2%j2j?DWxTauu7Qt7nP?<^e;OvXB0^MnKR;>
zGY;aAw~lB0M#|$KiOVTZm3Fe3GzKdaDbMlgCd`?i_cUR_B6vp=mTWBe(dDfcWo%ZC
zKb`Ji9_BaU2!t4$#TxNf&jzsm_?yehSOcp<yb<9fKozS2twU-h@<*`%8_vcd-h`Ag
zR)KISt3|odh}W@xET1hv-3Fu%N8L)*{zQ~(P;J$rY&`R#MdBlc4Mct&%9jDxvU$i$
zR(VOF9+rXpIcTXG^{LcM&;<b9LJCTzqKy=kOZ`Ke*({IcfY*WlF{c9=)g6V}`H*G>
z_;14aOTm51F~^@Bb-WpO{9lgyR>i4DjU^tkA-*Y=j!-t{q>jx{qZ!8*LOP8I&jF2R
zg^&eFqyh6lxK!npBd6z|=4(Eqza*3hww9!7&cR&uVtr9#K4zg2wc^!y=Aw@V$hiXL
z<1v>c^+tq7qJ=rcOMLs5BaQEXwmGz9Hh^K33D(LUXqPZ<FSAzyueH|#uea9&Z?rc7
zZ?-oBUu<6te5rjY@a6X9z*pK=0&lUm0AFKY1ALu*9q<kI4Zt_qyU>pSX9Dxd*)V7i
zXCv?@z}rZKYr!jrJnE6M2!Dbt#vjMp-w1pG{sen~J%sRM_~Yzx{0a6C{Bd>|f1Dk|
zA7@|VPjJo!<Gcgb4(FYCC#1ykScH4<9taQOgAvZ;nF#0eeBc6J06Ym+Q1GdIDsoGC
zDZ-V!65%y`9q@(xLg3AOGtzIwY8HGK$Ef&299;3o_~XD&@F$S|I)4k{w?zWuqO0i2
zgy=5NujncIAf>P9%Pip$9$>HV0{ev@cz_rHJV*=z9wLSS=Zak50s-E{Ffj~xgcyMq
z#)vV%<HR`N31R~9G%*eMTyZXNiNO4ca#0RkBWh5qPSgR<m1seZkZ3`UlB0m9$SKT{
z)8sVZQdtUIF3W)%WCL=WWE1dwxd3>PTm-yCE&*<q&A@Bq8sPPE1Mr0sl93n5OMtJG
z&;z+eLJ#D2xfA#<c{lKb5|&u*k$Zq2m5%~HE+H}bq<j+iY55HBbMiUh{c=C>0eJxU
zb@@8*TN1M@-<9tIzb`)o{#1Snd|Vy}{zd)@8yaF^f3Wsidx4*}o@SOkz#ah28)&a$
zQt7c&dMuS5OQpwB>9JILER`NhrN>g~u~d32l^#o_$5QFBw)06?Ib+x=b}uyW81&80
zhe3au_(l8%{whBq5=EX^FYXlINg;d6Jh?#b#3<jj+F2v4CDv~1bK7YzM%y>r_u4Pn
zhaK%48IEelO^$y!ehl%4ObJ;Wa#hIdA*Y<ZomtM|&dJVlXT5WYbG`F&=S|K#oO_(l
zIA3#q;5_2|A=C<u42=!#8R`$s3tb-iSm+C(CqhrVT&{fA7}vS3Dp!+hh3i7s)vlec
zdt8sXUU0qc`q1^I>qj?thr2ttySbCygWZMh3GPz&9QQ)^8uu0M=iMj6tgv2TDPh@R
zBf_SHRfL@%wlr)**cD+PhkX_HuW%XOGu#)R8D1DZKK#7!+2Kv$&EXe>Um5;L__N`!
zg?|u!B>aa67U7Oah)9YU5D|!&5K$VjIAUGIWf3<<+#c~z#M2S4M!X;KMa1_JXIi;i
zwQJS2RsU84TMcbBuGM+1s$0!(wW`%ct*&i#bE}71Jsl|`hes}sd_3~S$hRXujr=C^
zm)3c$N4K8ddRFVk*3GRqwcgVDme%*T-q-p->w~R7Ykj=+sVHYuAZlz>an$Unc~L8)
zHb>nW^+42<Q7=cm8})hAcTvB!32oE1O_w(P+GMoJZ!@ONxoxW2Y;ALAn}^#x+vfE)
zA4YeG?iQUKJvh2BdO~z*^qlC0(QBeFiM~Gi*60VKpNxJv`rYWyqrYn#*LFzT`nJ2;
z?r-~6+e2-SwLKYQ#YD!$#`KKw$7IC}kC_}(9#bE)BxY00mY5weyJPmo9B3EcZehDM
z?T)oO+1_fO+kRC0Y3(c9&uzcF{RQo>YX4UIL+y{XKiMIrLw1J|9j0`s=x~0Ar5!eO
zxT3?>4tI8VxWls@UhnW>hc7$)+%eGcvW_=){G{X89e?g*cWT|KbEoZ{?(Xzxr{_Dp
z+3Dj>Uv>IdY<z5=*wonU*x|90VrRt8iCqx8D)yn+r($1@eK+>A*yFLMIy*ae>D;&T
zsLs<mS9YG;d1dF#oge7@WapPVzuWoq&fj(ZEiN>!ZCsbQesLLb`Eg_7&W)>zYl>SD
zcVXPsaXaJgiF+*Wg}8sjeG>O|+;8WEo>OqnrRRJd?~TulFN&WSKO??2{^9s%<6n>e
zF#bsV4_#OncbAS`x^+qJGPp}&mkC`;yUgjbu*;KOzUlHyf+Ha+AugeJLTW-;LS4e*
zgmnp*CES>Bd%{BrPba*Z@P5J<3EwB2>FVy<u4~t>le(65t?RnD>$<L&bv=;iN{mTN
zNK8r`kQhiDn^>GUJ8@p(%EZly*Cg&ryf^Xj#1|9aPW-f6|88a7uIP48x5v8u+I?{M
z=I+n;XwxIV$A%s+^*GZrt7k#aTYG-gt6#60Ubpu8vUf!9;@(?(ztJb6Pja90`rOcG
zSD$<OJlp3`pJRPa_U+y`r|-hP>-z5Ld$eDle$)GH?)N~y&ysp26(?Pj^l|^V{zLkg
z^uM_OzWyKdKjZ1@nd`aH^Ooo5<h<m@<U5n!Oa960@fLd*dv|!>_eJ<}ebv6pd{6tn
z_qXwT{j>c${JZ^o{U=j~r8KAPNZFI}eaf$?GBql-cd9paKx$6vqSTeC8&h|s-j(`b
z>Z_^mq<)$DU79N`Dy?JMq_p$WR-`?e_FUTQX&<D0k@jucFX?uAc>1XHE$N?RglA02
zxGv+}0djzMz?cDR2i!T}$iUEn#RD%K_~gKU4eCE=+@SS?o*(r2;Ld|92j4jOXlDP+
zftf=y$7L30R%JG2uE@MF^XkkUnY%L|&3rEN^~`rOKg;|!^Oqs^kjNpOhIAd$XGrRh
z>><O4j2}`mq-My1A*+X6G~}8gJBQpk<l!OD4tagZheN&`@?#dua%aV4#bx!*O3lj2
z8ksdUYi3q$*1W70S(~!1%DOS@_N<4pp3ZtT>%FYQS>I*-oNZ^f&hDJuD?257ZT34k
z9df$l%*%NxH$Jy1_mjL4c~kN#^3Km&nzteEioC6Pcji5u_iWzlc^~F|nfD{M@bLT&
z`Q7pt<gd=ZIRCo*Tk`ME-<N+N|6u-S`N#851)PECKzyKYAU%*57#)}%m=$OYGzT^X
zwgh$rb_ezb_6Oby910u@oE&NmjT{;~wC7O&(5#`uhfW?^Hneu=!lA2&UNrQYp*x4}
z9{T9e=Z3yM^n;;a3_UUQw*qHDbU}PU--7glyn@jM(+g%5G!`@$Y%17Nu%lpi!QO)X
z1#cA`DmYefvd}7wEQ~GeS?Dj!DjZ%oxv;#jzHmw5`ohZ#Zz{Z_a8Kbgg|8KUP<W*9
zhay%KR@A;IvB*<2sHmW5e9?JD)kX7*Rux@TbZybiMfVjwQS?&LJ4OF2`nKrTVIjlX
z3_E97pJ8dka)*r?Hf>ntu(`wT8FqMhhvEH(mkqBT-Z*^K@JohYGyLY^yN5qK{NV6U
zh94dN{qR#G>=6+o+Kq@G(QAZv#J~}GBSwsvIO4n!OGaEh;^q<0kN9F_$jBZe&l`Ew
z$QwsKHS)!gZ;Y}>g^!v%>grK@N9`Z={pil4yN&KQI%V|W(fOlCjGi!h$>`mq_l$mh
z^bcd)V|tDmHl|_BrDL8Pb9!vIvHixTjGaAp-q@XE?;QKU*vH0xIrh78{l`rmw`|<T
zaaWGpHtykZACGT6e&F~K<7bY4X#A-O{U%JEFn_{r6YiaGaAMfRl!=okmQ1XfxL{)Q
z#7z?~pLo;6J0{*gao@xP6W^K?H)-^w^CoSWbjhTbCx=h=PtKZLF?rMErzanrd}#8C
z$-hhyQ`$`FG^KIMk||eAxqr%wQw~oJnc8pa@TrTZ-aqx=)I(E`OzSo+dD@I=v!^vo
zTQqIgw7aGqo!(}8r|CVW`=$?>K56>0>1(IoJ$>Kwx6f^V?z!i#Klko)Up)7>;@IMx
z;<?3Jif<~uqxk;feZ~8W-zxr~_(<^&#i!15o)>*y#d*(^^eh=sQeLvT<kgbzOM8`8
zm#!}TaK<?^@@7n$v0}!C8JEnsddAinkIZ;##)~r!%{Wu$E^AlTqbyK1vutbG2W4NC
z{i{5t++UtmKD>NFd1-k=`Kt1Z%C9ZIx%|HJC(2(cKUn@*`LXgJE8G?BD&i|LD<)So
zRIIAFyyCT)VKY0;>^U=S=CGMnGgr>MrP5v5v(i^Nq;gp0q{_0&ZI!z#AFq75@`K9n
zXSrr|nALMu+N{8=owH6>4XtXZdSQ0>?7-~Zvp<@Bc=ormPge74S9P1}*y?W8N!4l9
zS=EKrW2>iCmsiiJo>#rRdVTdJ)z?&SufC)Df$GPrpRazu`itrl)xXwQHN9#E)Rfd*
zUGreg=X2ubq|RA3XV08B<{YaPwOwj^*ZOJ))#lfZtesR_Qd?EqP`kKxb?t?<SJvKG
zdvopGwTJ84)#cR9tGl)CmHL$W3H1&2H`ec|f8%_4e&YE>=Py0~y7S*T|5QWg24BOJ
zhJ_6~8y;@>u;F;aZ*$}3PMy1H?!9wQH4biE(73(vXj9jw;--h^+4F|ZYnu1yyx->M
z&tEqG%?05L1}<n=aOHx#7rejV=z<dqep%>V*luCZg&7Nr7EW7OvvBFc%?oc_xO?G~
z3*T7y&xJoMvKPfH>ai$&(TGLGiy9U!U$kY>GmBncba2r(i{;|@#e)`4TwJqw)8hLV
zKe70gB?(I^mt4Q(@g?sq`Fg2m>B6O#EWLH<zNH73e!ld_Wd+MhmYu(B!?J6Z-M8%7
zWgjg&zTCAuVfmEhi<j?S{`&Gm%a1Mp702nY=C;jo%{`hu%^A&s=8?@4n~R%gHrF*T
zXkO90vH7y*>za2q-_`ukiiQ=<D>kpVZpCdY_N;hr#k(txt!%q;(8_|9<5x~!S-x`h
z%Iz!nt^8o+iB-;3{Z@@#Rl92As=HUcwd%`Nr&qULowzz<^~lw=t1no6%j#!Vf3o_^
z)jzKZUDIxjXHDUnDQl|MEM2o<&82IuU9)4&V`~ns`F?GiwZ64kYe%o0vUbMW>a~q)
zm#*El_KCHxu06CabY0hVeb)Kb4O};C-P(0q*WI@6o%PoG<n_htFIfM|`kyx>ZkV`X
z{f2ED_HKB4!|{!6HxAl3XXCbwFKqn!g6Ip<FQ~cT`U~FO)L~QZrixALHa)TF6I>p!
zEnWEJg&%GX+w9+5@Tb4=n@iwpsb?kdeK6r<E|JN~acfG4Po|uo2E2{<WW*QY&U*y$
z{j9I(4tfCTj{p_`)+0a8&=^pQdC*pzn8#-DPnkoUVsU6Eir<g>R!8_&4zod^CAib2
ziddG)KY|D16ieWT5O;x>kKh;h=**}58H5kB64{-VhzLNmDqo`Ncv1gi)JZ}=VQez)
ziecg=)}F72Pv;gE#y7E!YCJTi|09rztYZ*FfF&r|1?5LFYzdGj$@DDLu<lB}B;)^A
z5S%NTum24&mo%RWu3_CVuVH}E?8uoDfVTiY08SxotWJYR=Lj1Q=&Rw(ac=a0biwGu
zXwr#4!kJSh?o_%$`V!O`(wn~n(x?9(2FO9Gok3{puR!-fdP_R{cR;%Qcd!KYNYDQc
zp#QW6{(nO=>i!i3+r+w}wG{+fU;i7>+WQ{>J%q=kT&!kUVg}~#H2~J<e+WJQlkzf>
z<plxjJ&J5W&>oOYXbH5|{|sa={zK^bzm*T#9<o1w2V|H21W~Y4PQW18s$+oH0KWiE
z>Nv|p-bg^AhBF_5!nSF<Mz$>ouyI9{$K#c~^ODVDhtK>3>H;vbe?d@okZj@K!4uGV
zvXlQlB>hd<Bsu=yXeSnYlP&hb#(P<w36BH?ocT%FXtL9P0U`?ZV88zc!h*J)?EC*I
zVBes<BM55$pgrX80DBAVFD(Hw%!Hn*c~Nt`myO0R9Fs*NY!9Wk$5=_X_d?%|PD3ZV
zBR`cN!~7DZIPD9&5Z=RjLO!X`gTrUbe~NV4=OWN<P#+VN&RD!R>rHyYlb~OTu;ZuB
zoTfPG3E!ynXEJn%0BL7_Qu-6Ac<P8XAE|Tz{fZmF?;`Z$h3!5IDAyD4h5^hajgfd$
zbL4^zipAa@iL(J~u@{s4=D{YBtgck@64V#=XaR`fmm>dC&^#8$PNLoqED!Y)#7BU`
z00&EuE>P?fY7HGmTNt0(&#}*9t(L<J+>vAdRCbN_H0&GLqx7CcXAiUA@Sj+c+EeBs
zk8FOVKBK5J$z9At=M!-;D-fGdj?N2FXO4)?XO2LQM`%A3mm+SRIiku_nATT&HXZXB
z20k<SU69#Yq=g|3<4|+)492t%vZcAd7h}B`^Xo(z@QnRtI?ARZy(8woNXdLJ`dx<b
z7TDh%C>O(~qODQX7qw4qQ@fD+FVqgzQ*}`uX~$LAdFGUGo;jh$K;vjYxCRiU9`H^O
zJQIyZ9zoQZqiW1M5WWErqz4ct*o=J0L&l#uAv*$sv?J00e88C#1d!KJk{REO_<BH)
zu16XGvOG>_3-Juvd<1YQ+J!tNbXLXz3>Edr%K}))hup=*2y0MtpyuKCHje#O8<L@2
zfcOS-_y&D`gZ3u_#<rj_C__-f%H_RC2UrdOYeCTl;zwjHOOm&t%uUF10j%GtJc@jP
z(u;rJ_9{EAbcgikZ-D0g-v#JLCLjsm1dv{w030!t!p9AK1bPziT8p#~lzx(q{vD9s
z0)o2tZ_xa|DnmN{Z^M5mPsr*&+b{kTUTAG%U6Xv2J>QJA{T6G_Uc+ybuVLN4hBNbP
zSi{lm7Z$Db;c^kp9heKczZ^8MAC%x1z$U;-Ln*w`!0Z;`c?>$MAR6my7sAlNv-Bp+
zFF>tnKWtmjHkPwQWgAaG{}W*EnvqA404QPlOm1u@&Zych(wzn8S=`&4;wfVnYmhgH
z705wYBUuRVhrK@mN_}}*PdOX3H|oF+tNwN%d`RV`)7hEqG1*Yi7`iv$*Dj~L0r|Vo
z4)Fq>RDZ-nG16eep)(F@1NN`Gj5qv`NB+IYUj_<3&z^Np!FFfCc7s1<`)RzeZ`f1y
z-auzt^r7rOwT-bUpnGT(Y&Z5_+9UZ<l*idp%)(uDkGkiU;BHfbJ4^{b&LZ%eUkUit
z_fXh$?0I@mCmW8v4tq^1-9Kq>M*De?Uy0ZY$b`MGMcUh{d`CfNzoRUP`cnNxqCe`N
z&If95Rrg<<C0RS#XVGpX_Cz{=MiDQHC+aT_;l5~__J`eSFD=3ErwL-C<{#&e5|M}e
zAfGrp(D{MifjjaC;17J#SV=eO{7z?b!&7(agW6SX2hTyLS*pxt0m!~PKZxfv4zh`W
zo`5(&B%mW870?$z>3#W0$a^%_%pp_mFpEceN60e^^61NdVFM8MW6jXo39ccJypGi{
zoCydZn?wMW8IQKcgAM>ty8{5}CY;Vr;|v5I`D)f1kjlHGPxK4@>1lt!dOEi#9#kB4
z@^~cTKR_M;5s#-wBCy{^U@Q^Py9mfI0{s%51zY+7WHbxEi4$FkeRm7=hTtIl87I)+
zc%&c4`HHbbQ49M}t9YjR!L~FlLcB<|{fBh%8SZAEqOJ9qYy3_QNC3nW$ONPxRQHI{
z;Gs8wc=4LB$56jX3#KO^u7JIT`}<p}-v4>sU|(ztd<9!n|NmB>|D)bW=*CRcCt3sj
z>5DL(jSE;j+YLKX0Qr_+f4dwyv*pY&o{BJ?UE@)<96)tZkG+j>B#U8hur`p#An1gX
zzX)B80!;+a+KXV3;5AmkrZczjE=Vt6vD^ch9aQ>C^Gte8y4xN=aVH=LK<QBc=>M4?
zKm$6g(y1(!DFRS9!9XM%d1iVLWE|^lEn~gKPi#2Oy9B)zjbq-k6lG*j<}q=dPh}~c
z0B3N@vm$j`i@r#A60i=QYmpY@BS`a19*vhELHq!E1oh$|(`e}5A=uc}O7G&Zo|14+
zi39Yd`wCIHne_v70CY9sG*ALcCkV!=Ob6MX6%mMnGrzzN#KQ&;!kQe5^{n<!3S&MK
z08!|F8{logS^`*wSlrni46+9ZiX)x&OYF7mQosVhU4Ul*M-AOCMx#7Cv&F#Upa%eW
zRt{$(c4i4+8KA_#deD|oi+DXCSnd$Q9|1N3ngOpEz_Wm7?f~F9z%%y)g5@V7JQhIh
zP})HN@j#U7QuskbPl7%Nxb06seNuna$L<zDb@u{j9Gd{tKJ`OD<Dqd7eGNeQ1hW7S
z11Oz<_-F>4VC?iD4QIy|93$n|0M?qa!E|c>Qa~bLG$0tK^78<}G5?t^F!|KpN&v;F
z4uuI2hX3OT_MIa*2OMG1(7pD6a_A_-ZqHaWmB2rg#?x);AAb*e`zdsXBkJN~<sHn*
z3k)C6y=4m<YB;NGsHkQ~YDybxSx5E=3&|c|5YKjHPtA{Km*$QgAJ3MJ%$^v}W{(^<
zBA!hgH*8!y%Naj*7_=T7oxzimZtTll@r>927J!!OG#6}40!n1yS++4IEtIuoUGU^u
zI`%e_3e|Oj<9ODWrLkN*DW}sySQ~Z@>jUk~VIxhN1N$=8HJ<0n#&cY{oXuLZ&UiA-
z&$8HXlV-to#j>8v$A;j!FN*}A`jM;^>%@BCnYm0>gqHZYu{k(LnOr>ih_QFa({zLJ
zyqvDV@tkW1)(!R)XT7s6InZDjYmeP$AREfYm6gq@7X|-4F0ZYdBXa(GJhP#+Or-z!
zxTdPIRCxa%;JUIJ(HBqV)`&!f;}mYMaHPV{7Fee+m7=k;wrNfS|K-2O^=N|s@ZV$1
zKZkx2ZUro$!EQsLO)5@L*m9&34pV92&@YOGD@<#Y^szN`no=Wy@jMyoO6ZvlOCG}7
z$MkIz6?JdxOIzhxtF35hiMPcg;tsJz%)>Kx!$lbXl)u79^K{&$j^TMmFY4=F1$48O
zeUG)l+Gt&1ZL%)3Hd_~27h9KDms*!ums?j@SE46@@~B~5W$n-*U?)-su}*j<@h#Cy
z^cH>OHS(}M$R1+n*m-uqF0hB$!|jpwXnU+Z-kxYrwx`<D?K=B>yV=I`d01bGtQ($7
zJI=qCSIf`wG+d^gZRgtg_E5VJHAmQ^>@oH@dxAa5o?=h4Ywdb_xxHGgE$W>|wO3ql
z_|AGUVb}kjgO;g;gtdskO{_aO?N84-vMzYmQNpV9M?MD)N`XU)E*hm3ZpA<{v~DH*
zMIOwEM0y-r;<W#%8tqic4Hj%R;@rLmWjO2zH#5Xw;ixT=7R|AMbgzW;KD0gtKU9`D
z*Rx4wi5Hqrs&SL)LyZu8Tt#_S0dR1>hO>yjoGr{0%~*?)2`G7$wZ*#Hy2iTJy3V@Z
zy1}~9y2;vZ?Xb35+t8!b<F&e23Cv~XSh*N)uqTqqFzQ`C@rN|UD`trDf;>gwna06(
zmR)R@Ak|WHd9Hol*%D}rcSlS;`)X?O$jMfqWeLiMJ`ZEHcsh0vrzdHH?MJf^{xN@-
ze}$(PqlCrZM_ve?I2|cQ;VIJ+Q7UGrIkVV$*!FlOWvWYh&|9?=^FQPsgLDpkB1w0~
z4$=j?Qg_(={vuqJjY1Cg6H^<j_}|lQRd*0-1?QLgY4h)CH)e#MbMAy*JL9h-xH<<h
zJgNrm>WaV4io-Z);>#H2t6Z`@cxHDv`&!HuZ}12_9eXvemDkG0;4vm0ws5-3LLIGj
zG@`r~BjWO!vm<SpF63wOFmh<@REGesOaOCv_1~m_{`=~4!8;u~FVye!hU^bn8?q$C
z>+rw|L|B>fesEX<+vMQS@Rd9Zcjry8MQ%18k}kmhJqRPiy#ezUhm%SnR`o84XQ1t!
zawzZ)Sp>XY27tFoJb7$yrRRq2<uV(%MCJe&%RJyrnF~DdZ(AOW++8vQc&8i)yhGx7
zYqUH7cpE%5)bbGE<uV1hM5Y24%XHvOnFjp#Ehi&)m+S|;Q}zemA-%xcWfJf<=>gs<
zeZb2l*{l-T8@O2Z1<sUxfCoYw{~!gN;9p1jF7Yz(PVp-64)F%?cJT`EHt`zpR`C*W
zi8ugU{1+|kNBS;!PN;?FfOm)&fVYchfwzh0fw#inLM=QE{8ugD*>SY+DDY1481N3U
z4|u!S3%pI>d3Ut%FmMU{E!09gwx8`|dvM#lh24a^;l)^)%{XH=z%wzEm9VLQoO9U?
zwRXuaz&j-@HRRSEcsp+IXkR7*Z<SfVt0bOQhx9rFm*DP(zHp)?>74^S5IQ66RZ44!
zlHL#{%^^y<LzJ|KDCrMT(jcOwLqti7h>{)=9f;j`HCy)g{FBbgw%}lwYz@3qwgKKD
zV}Q5IDBx`}8hERW1-?Lb1YR%k?7zKMVy{5|;lL#_0=Sr-h_^@Kekbfg*#S6TMgnKb
zR>06!*a(MoBU~b3E&gh@WC+rC%241P68kiI$L@ySC2)zffQzLAI8)ld|JLZluPC_-
zZxfLQ{0zJUznqf>oCMw`egWPp1@Hwh95g!YX!crh26(yn9=HUzVj5iy@F?*caG^L2
zoR6D3I1xVr5ByK{MjS`2UE&z<PW)0qTzv<;U3?9^O?(TyRr-Nf!RJbx904v7Uji44
zuYfbfQQ(1cu$pJG2{hki6^N2uAWD{jDA@+0WF3f-eIQB}f+*PtqGTnA{?%&!4E^oI
zFLcD~=fK;<7r<M^A>b1632?FaCvYY_S|pJUxTU}L7prL{TY`61>KXjUtQdBFEOx#C
zto;D^!rn*CUE&?!o#I{K9pVGv?E?3G^!Fa{R`^3mDjx$c7jFWWh_`@?#fQL!@R-uf
zybYWw{sBBtCaV#VZKIKqbt6jljVM_-qGaQUl9eM$c8(}nI-+Fjh?2D<IuJYCFYE+6
z%06Z9!O!#}dkVM8d)aMl8@q;GiZ^WjcAVlt@U;s*Z5ri6z}v-rz}v(Fz+1(Oz^laF
zz{TPo;7qX_c%ZnS30W%c0-i=?<P_Lf;)E<LQL?c_$;uKXJ4=)-Em5+yM9JC`EvEW%
zimnf;>VvBKpsGHost>B_gR1(V#Vi!NawhJ%UfgWEV_)ycqQ&jtb-TC~c$>Hlcq{z<
zG?HP!qr@G+h2l=&d~pkKrnnh+Aa-a=>_q6VEcjNW?-bjCcZhAk+r$pwt>Sv%5^)1?
zF@D3Rwr&I-h}*~i&@0@~d$I)hi>^kAUE&Jho#HCs9pXyhZDI@XR&fb%iMSNFSQG${
z64wG3itB*$#pS@6;xgcY;u^@m{J+qEi_pq0aRKm7aUt*yaWU|Au?cva*bKZ?JPEu?
ztOG6)>w$~m;U^9@01u>GXaL?_#7xo-NtE_TqO?mArG1hp?UY1muOwQ6-I8cA)yGV#
z`k<;lsHzXD>VvBKpsGHost@{Cv$YD`?G$T(cffN<qge~QRV)WC5zWBGVkK~<SOGi`
zes>oa|LaQH1m9mX-d=0O{cjeVf!obQ_*IHX_rzkfu}jPc-YFIW?+{CXw~Gb9+wki;
z^}Gjom6!`$A{v2<#Zurx{GLR!IuAHgGyxB!l91^WN;Y(6AQ{oAfhe6Dh|<Y{=r-}V
zqI7zoIGrDe7E^u5M%4#Z^+8pAP*opP)dyAeK~;UwVyuN2oQ*wrkIj$w*9PIewOrg7
z#^Bww33w;%Tu~y*#UAmbcoFYF`Ej<e)Oi>8N&)W<Zl!PV{ron*iPz%Z9N;~93_Hob
zfhB$pCz>1JIo}9r&ckVD25j$0ND*&z;R%a>;<op+3Ozv*Q6bVp9h!VLlzBGPDHx)+
z19drif6#<Tw^dzO`e0~;3Q3&Eal6Gm33p$-+b3~9&QvrLcVXg%*6}2q*L68sANBZ!
zOP3=WELZx6a+6fK$)+4pDyL2z^gg0p3-7+LbI-OrNR_93lKLkaY_|t;e(%47D%Z)B
zBTD5AckoKk4gPDLt7ywyHAYB9^`U6XTw2fdcneeK5;Yt^+gor7y{B^MlQ>nhWh-P^
z>)|cbxkPm<9WizX&eSe=USeRY&VhwazzwAb&V2oGTfu!5y6_m@w4+<=B)p6H82qPa
zwTZiMr#-|T#JbBt3y$AyJd3b*q0i+C=h|eAvlPy>$%YSBc;KIEY*#f1=h|CU4Z@lB
zHsHYu|HYZZCM{ZSlO9g8$u{Pzlw6xENS3`8IMXI64z|fc4g|;Q28Nqon0*6MmfK{z
z$Ea|wy#?V+8@BsTCCRdnv1tz}v}r%cwaFT1+O!kU-ekkSQwXmPc?sxtDsftg!)aFE
zG|4}35I{Fgof3^FogTz`(`n=zIO{P|B?Rr1$R(c?gSVLO^Q8H7@2B={J_GlSk(j4Q
z(<0qu`vT}6hn0fg$>eB{OfZL=HCM)N<;i^E-;^mt8y4;|yLb|xXUdF6n!Ybn59i?C
zKNu3oYT?-``X8RHb0LxQ>=L`oE>~Wzg?PhxxxE6j!*Qk?g14f_vuUu`Gx0|CQrto|
zu+8iu+^8;NSHM4XE$&y_*miaY+smG2&p=);vX|f=cpayyH}T8hXY4EXFZLTd&BJ*Y
zp1^zY-gqN4pBLe+(BXU{pU%(a#k`D{^O<}$ujA+Q2EGJ#?-G7Fzmi|WujSYCt$Z8b
z&Uf&g`~kj~zks($aTZcC^tTwVzzmn#Ga&d1dk*Hj!Ct`J_9A;Ji-JX8g?Sa2@l>33
z7-$~OJpuU7Be3R1KxU(`8@0hHb}VLc0`7+~IMr5Qy;Z`-CStYD!#pm)icZG4cL}`s
z&1?<)`|EJ89Ei1lA$;+d;Jlc{uEx1Bhh4{RL=Ri>R{;IE9sS(N?!j*h_p$r2@9kla
z!fHQ`v*vX6JbM9epdY|rIeV48hCbhB|3t5!<FAQ*fs^Sx*rT7&^GSA!t>zXFV;gt`
zk7AedXx@%prQYJcmUrfH>^dIL<Jk?oEAPo}<bAo1?c^zZ0K1cC@;r7Q_K`yN2p`EO
zu*dmiJ_WxjPUF+qeqMq%x?kY4colnzSMyr-GOy?L>~-GA7qd6`Qoe${$5-K3`H%T}
zegXRgZ+c(MKIfP6%h(Zq6~CGt<=64+*w=XX`zH1czZuVV9On;W?VRR&_@nF$-u>Rs
zC4Uh<;Bd?VX(sJ+AMu*7d&BMs+ZA?G*fn97hiwj9AGR`VN!Yxw+OU~n#bFb}Mur8#
zGQ(2ClES)&#fNnaiw=tjbA}1`DfdtA<L;yG&)grm54zuQA8<eC-sgVAeZTuI_bu*i
z?(5uFx-WLGcQ?Bixa-}s+%w!$-Q(RO-39I(_aJww+vD!-PISk)+q<LOVQz<;xqfl|
z;QGdO#PzA`1J~QG*IX~Uo^d_y+T*&{b%$%0>n7J0*QKsauC=aa*CJP=tJXEkHN!RC
zHPJQNRpiQZWxCQ`URPgNcUQctqbu4K=CVRhh5itFEc9^bN1+Ep-v~Vr`dsL~&__b=
z54|h&me6gX*M(jgx;b=x=*rL~@Kx1^&JHaPEe@R=IyQ88XdpBzbO7F2PQshZ33z`w
z25&LDLM`WM=TFXWoQItsIS)GDa2{|z=iKLf#CgB-F6S-IZO-eQS2{0tZgj48E^{t$
zHaKgXGo2;Qsm}4vk<J2Vj&qPR)#<@I(}~VFXM1OqGtB7-IUVv-$TuN}Lp}<5JLHv+
z=RzJ2c`#&m$Za7zLT(7z5^`zCCiu^qLl%WJhSY}43YifyJ!E3Y=#Zk2ypYV0^bl`I
z-;nMh@geO)B14=Z%yH6j!g18`nd2kJLB|`81CHk$`y7ur?swefxW%!}ah>Bz$Hk6~
zj@6E3js=beM~!2qqr@@QG2SuKQQ*jN405D8JdWOu1V^kR#u4doIV}6MebPQ*AF~hJ
zhwS(4x9nH!{q|G#Ui(3Nw|$$v18<&RiMQ3)!d}h8o;u5(0T2H~`1*?Q3qYowZhP&%
zc6U48Zf{4~VYb6&)-To%);HD>>r?9k>uu{b>qYAs>v3z3b+2`YwadB*p6bi-3&eVB
zrM1Xvux48`tm)Q7YqV8l<yo0ly5+U{THUR9tD_ZdMOaQt$W!tsylsCJKFg2fLHUL}
z;QGO_3|ig;mZk{0PS&NZvMw>OEz{w9FUI#Ky27F?!tZ`dU{5oZEy;#0*??c^E`VJv
zQkHcbY>BoOd$Er^4x2h37UC_GdmFalLfD3{*!8dtr`a}Gh4$=zWeHwTmf%HLg5K-^
zY`{SF4p#qg_664cMD~+f_h+!~i}7YY);+gjduQ?xto{b>#)@CfW3b9M;d>C9VR`#v
zP4C3H;%2PpT&(83d>mHuYkV^HuB-WM`MLa@S7Wp(u(gC|D~uB&!Z^tRX9D|iUL!n4
zVJhRdsf^zqrEs>wy5vBFy(-;nQ@U5R;KdFu_+u324^c0`XcHK10#oios-#Et;z1e7
zJlO5wNl}zef)vLIQBj;FL5W9?Jwf4d3KuG@bBQ~T;@zWo@t7Wn$Nq}P{%YL))wui9
zu7h-(^MGl5{Z;!(DmO``B&jk<s!Wo}rBNoSmiwVK$@<x|ZR#IXVQQ(LD%(%h?x)K3
zq4xNN6z1!wBrr*2os!5pC6RT=m8>_;TO`}wHoTL-*(j|kouVl|#!!+K#dT?#t=@`<
z-m3TBN=|4^rIT!WE7_oi3hP=Vn_fyPy;R*^YTUgP=e<<<UaGZT#34#jt)8l6PgSy~
zO6j2_(F2kQARkm=l5Y=HyN5jl;qI!R?kcxC^}ydEUieguR0!R6BIP25^kgd41;z+~
zF#=$c*;G>tydX?`b+vJq1SYNSs@m^r=OCP*Mv$Onkf1n8P$NrFyeCk<C`0l{P~+%=
zbjjlN4DdlnqnMrnqBH|UX$FYW3=k!$#H+sIiF1TW0`aPsc-0HqR4FtM@ro1FQ(;|~
zMsbef{~T5K9DAfnA&rky?Zl~CajI6F>M>5~WoK2ZGnMDDN>;Iy%R4CUV{wKi{UJ)+
z6D97668A)Dl(86vE~iIHaa~T2lH$Z^tQude;xSfn6l>E;L^}%8C}Y)Hi&gSKJ(Z&C
z(kMGAemkiaI;l~1vT@TzI_XG9J5S-U3X>E&sxlqz(JD-{+R>E6U6Qp|>Fw2Qw^!-y
zZAw3;!iQBahgF-0ZE6$0IV((k#i*1RHSQSfL-5ujZ8W&ibcms((=m$27<-}$k5?FX
zK&0zj;x0z@6Qg*EQT@lL-rA}Ww^h8fRr=S~u0#2@YGiFy%h4(~TBSs*GSR9`w8^D$
zN2@m5pf!o#2=!V6MNS)4qm8QFM%8Ge%C=T1kEyV-!|Wl&<3noX4=L^*Lat<y_zj+9
z5{X}GDVC$8LKMGksQ6ezNlKKiOOs3^6%UcB-$*4Pw5HNYDv_#3)KFnvi{_w}l1eL8
zx0T|vl^R7WRlb#Kt(D@imFg=(m5fj&BUDPbl0>+X1Snb!S8ar=+Tp5HnCd4?<%X$T
zx8lWxkqWj^m2s(Dmy(K0)pe;6xRiFe6h|&oi$>s5e1$5j6RPTls$8ck=~Q){svW25
z(W$t0sve!DB()QQbjch>_O;-JVp{e@N%llZ_C!hcM5(Sr_2p1JI}{HN)r&**f;Lqd
zngNI61oc!{*QFV-m1JyH*H(3HRnk&n%Y><xrFyiKMoLvnsxl*0FC$g%FvY#Va~xzx
zh!XciiF=~NJy9B^z$kP%JxYq}a(a{$Cr*VLpHMss#gVXS^`RYwX_P|El2GzMJ(Z&C
z(kRtGJoV?*p+92#LBu6_3gAoc0e^Kb+#CDg*541_Yx375qn;1<#}u3o)8KW_fah)?
zesdj+`(i$Bq(gCIEW`<rz5_M_-UGUqj={;1Zs8MfcbtTq;}qOa=|+AoZj~?K26-3W
z)fQZ`GMoc#?!alz$wT3hb@MRXx+8ci9?4ttDBgx$j5}jnobcM=yjaeD;~j82>xgq>
zES(zpIqW6eKlk%^_M*D0cjbw^8}H70!2d}1_C7cd_Jg;fKli{d;bkYe4|n+#p32kk
zY)=Lszz6a{IHMlG4RSDh1>U${_z<4Ovw03qk9oND2l!BYQLND1{zu?UI*NS?59b&@
z7AMQ`xS7s`PXJ#V!|n7<+=gFgce6@7<1@|p3C>ez))~rQP=OowZk$~!>E;UGK{c=8
zbKozn!|j#42y=0oZQ}FzeD)b%z!&mGd@(!=OZhUsoHz3ocmiM*PSS6&f8b_23tuu@
z%h%!LyMb@y7vTJRA<n-S@r&Vyz&#hfh%4ZYxQcJ#S1X^yb?hsCJ$n>iw8EX2{1fc3
z_E4}daSz^w^YShDWvmL{@0-JF_^tdlJXLZ#zk}b&@8Wm!-TWSYFTao94}Zpk_)6Ly
z{xE-p-NYZo`5IqK<4@p=Z>RY_xRRdaPw}Vmw8FETv-5FhXyDJWx%_$Dr(eK*`XzpV
zzl>Wo{2}<V+8g{${uciSf1AI<53--}yvlq0ef|Oekbi`yR}S${;1_IyA8;PL#Pj)Q
z{BwSof5DINFZog25x(Nb_}Ba!{w;jZ-|-Xtd;SCek^jX0$^XSq@}K!H{8xU8E#SZL
z)BFsU2*>?pA-+Smlr0fLNMQ+EI7EnWicsMaZV@KJ;r+NrM2J=*Qnbc%Gi^k)Xe(kw
zJJDWr5FJG)5i2^2IB^d9T*QkmA_31xZ4il~8+{WFUxZUnb+P5RAvKG>Y=!72l0<)a
z)RW;;_ra^4B2q<~NEaFKuMdQWeXz)cmpw~liyZjc^F%&7CIajcF%;j4D-=ce?dl6W
zi-xCm;8XbqPwtF{H-0Sq@#Eo<pC~4Y$zqC_3g7&6c;}17c|twcBg){XuMjgurI;nE
z#B5P5YQ!8-i!aC3i}OVTo_uK(O?b|2zE~g@ibZ0vSR$5+Wn#H#7AwR`u}Z8KYs6Zy
z4&OZ6fbV2pAU25$#b$AlxL8~wE)|!F%f%JqN^upQmb+S9Bd!(KiR;A;;zn_k*ebS(
z?P7=6DRzmQ#Vz7i{1$hMxE)W{-6`%8cZ=QP9&xX@Puwpa5D$un@O#3;c<$~|u@}E~
z+$bIwPl$c^h2bgjw0K55E1nb2i~ZsS@uGN191t&ySH!F0HT-&bm3TwEiC<r@75~7q
zG4F_j;$88ccwc-VJ`^8`kHsPJiTG6fQ+y^q7l*|c;)wWC92H-QW8!P^jrdj^7vG5!
z;(PIf_)+{M{v}R|pT#fYS8+=GCQgepl1Yv)z0nszZRwC9(kVlwOS)y443`nIm5h|F
zWt40qqh(teBiqULvV-g>JIPqtS;on8WW4Mm6J%GJD7(q-vIl-I=_Py1KC-XuCzE7<
z>5<9OD}DGCB}JynG?^|l<N!HP4w8dqrW_)(WVXzax%kptz6{8rvOpHfA~{SB#~1%b
z;(LFi<rq0uj+5i%1UXSol9TcEzp424-*kDdESBfV5?Lx|$TC?jE96XBDQC$lIa^lC
z8aYSS$~svu&&P8`b7dpG3pkIy3Md!itALB~O~9pcnOu&q0<MrN<tn)vUj|$&*U^^&
z<wkjd+=Q<KZpOC(FP4|cOXX$qa(M;55qK585O_77WxQ5iC$E<`$Q$KNa;w~iF9z<w
zck*`0o8>L?R(YGeUEU$@q%R1{-SQrJue=XWH$8xF2|k1`2|g?z!IuR0%E#~}!6)QC
zd`a*r`i`J{7T*zk9$yiBLB1$o!gmB;maoWH<!kts;2ZKy`j()4TfPG?#=G)8d`<8J
z`5}B7AIn4X6MR+hpYU*eE)UBu<PrHL{2gD(WAbbHjr<ngkMHCO`Mvx>{s>>lzvM~z
zGktjwo{`_=X?ezC7Po{YEz7bk2fjw=v_dVH<+j4`^k0P4%8ImFTTxaUcvRY2G588#
zd#eNdE1j%ZtFsknoda)67c0T)Y9(6T;Cty|^|X3fy{$g*#PqY0tp1kAN`_y?XZfuZ
zE7eMamnOp+U=6eeS%cxT8DeEw+4O87JUIDQz#3{5ScUNC46}ygdxImbQSk1JvBp~C
ztnt<a_<AN;ldUP%RBIYMKj&J-)_GQmRSG{)nN@C8STn6kYnD|7&rr2hW6iN@tvajT
zIv>8GxmKgqWX-eYTMMj(@E$G3w+xqB%dF*Av$X>Lq*d@Yx54iPZQ)sN2QN?u{Cd!d
z#o~F{HP%{d9ehq3g3rL>X`fbj)-DcyV+)@31o+qKSDXj&jnDh>rO#*Bv+xEz!EVJ<
z3XynL;lAKAv+%#KV>$HXES@|IgI_5NzNQlRw$FnX{|J6jUkQ)%TDD$4SNoUGW^T2%
zS=-qK)(-rpw8`2DpV-atRXMC%tXr+ytlQxwyVJVMx*K0<yaztB`>gw|2doFJhu}eb
z*m}fz6knNq4F0qytbNv#)>HV}<TKW@)^pbL)_&^+_}X5w4p=W+uUN0b^Y*&+hV`cP
zmh}(#;oh+hTJKu#S?|Lu_o4NX^|5ux`o#Ja-mM#~e_EeepIe8mFW|NN(mHB=WgWA=
zh7a#s>$vrub;9}{9=#u}pR9jbC#|31-}}`%W&LKIw$9kh=4=&y84H1@{z_Z0)wZ-P
z+lC)71Yej8wOzIwUcqoX!fs_p+O6#<w%2ZBN5eP$9Q%>|z<#pZ+A(%Jcn>?+9qmqb
ztlim;v(K^P?JjnL-PKOSZwKG9<7|)Jjm4`cI4_6a?lP8*Uq?#W&G7qQiYL#mV>{_L
z0lT~1!|rMKvU}To;FauWC)xdNkDUx3rO)=;DR!!z29IS1zRfw1J&b2P2g8Fognqff
zy9O7sgX|NWUvuHt%*P4&UHk&`9($jC$Ueq9Z6C2icxJf(_wFK`g@@z!ossZ!jmB?b
zWAXg*cs#*85x=`l##78w@f`DX`&{#TPbvJRW%$jf!k%eY!h2eUdr!4pW6!~_Ky~n^
zo{wKp=Gu*R6TGYQ?FIHi{FbuVUScm*zYjIjFGToVWwpHq9@usGg6IZ&qkVzB$-WRi
z*^BIp?Mv|W(97)0?JMA=y$atAy&7K)y%yi~ydHkr8}Yr+t@bv1JG{6%?OpiR=PmZF
z@af)e-(lZr-(}xz@3!y3_doBm@3$YYAG9B`_t+2HkJyjed+o>U$L%NVeQY0lG9-IW
zX<0*Ets{FzL&dy`kfz!yPjYS^(d7JWkD*>e{f4F*nr>*ep}B_UYno%~=a~9ArhZOp
zNOoOiU2R2msG&*aZq>8L@9}w(skSFMpjz`J=d0QtuivLz^_bQ?sqWmes)n+rIWuc2
z7PxZD>l#bT$|`Cb9eHJ?7?LS%c=H(EJo(6Os4H!B<m*!TMgaLr0IvMA&6qKmG3J<d
za!flpW{kOJjJbxZTr<Yp)R25LMni*ROimAuF*!fkNHSTqhB5oyLtBh#=pUHzBzwJ%
zp)JPd^(d)%{Ap-WNyn3%;d2-K-hv*3*YM=cwhCsHHaH3!t7^(CLJIZBsSM^kpv&f(
z@#bcS6l(tU%y{#IT!W2VchMjF@Fe@pNPI>PKEGplX<1Wag=6?xj!`Pd8jdmPuFh65
zUHXiOeMYo?BU-=LF;X?9ISr&cMz(0upQ2myn?d>wBmVS|QF?&kqh>YLR+ct2&8aDE
zQhj^y2~9IxGo87n&pgv-o*71-X*JKZnx}a6B>PSI6nNTa)ioGp%QGX$Gp**CQu(G;
zqsmxWTBulIM%|P1Q&JscwZO)n9UW3le<`N_6w^bB=^-WGF;3NTkNfkCq^Qn4-ee=*
zRKrB78CpiZV|<IAQdP^IWSxy_rl(ZXQ>tz*IW^TWLF>;1vvMY=m19q6sH&|DpYRv5
zHmaGYW(u-T(-WDOVQ7w?i+m&N{8W3w?=sCd?B^SP@(n-vMz#S@$b^=Pn&u^$Iwn;%
zl+LSgOwz)c^t*6ECzV&>+lF(i<~pXRGVUqAXKF^$gH0QT0!H}Iys4@^*VI2O%;fxx
zpiET_Pjb3iO;8gfRIG|pBdyYwhSqeHZL~34Neb#=bUIr}3UMVVP$Q}Apn*1vHpkS@
zG4*py{hYLrQe%V+4H_X&N>KA)bX03Fv}T^tjiP9ilAP~JbC>-tB3Ieju{+9J=#R(n
z<}ti^0*(ruU13IEp)G91+4@@AIc9J<rhy#OKu*vi1(&KBT&@{hZdyo%8JwZP!6jz|
z2L}slM3`)5B#`2+Y%!S1KQIH+=5tiG7?d|zTi8@(VcoNSuc>+W8eTGthIn(VS!7|W
z^a`ocBd4-Zdn49dGv3^skgAr7>kS0C1{-<q*?;T{w$qHnXXM~Z39H7-oE5b-rM2Z%
zWsVwcJ!%yDRt*NG`}LUxbGE+e-)H3QGjjGDIs1K%TGf=U9>{Rio|OnR+Klw9*)?4G
zGu*YM^nYwL)YZ?b2&vN}53l<Rb70m=@RSkUd4eW6&x}u-i{yN5E<hFE;K1;k;<M|1
zHxqegG<imQ@=U3GGpe9+=jRyHn-i3Fa(+sh120lyuhJu?=-Ck?*T^fy^pIkDNC`OR
zs#@;3f1auot!&<8Q#I8vk?M0awrDw3wFr}|Mhuf{dPp@rq?$2gC>f(%nxjc8R+Cv$
zP1^J}Dbw5Z7qT|?NN-=zL9?CcjSBIgF*SOepJq4xF4KI&e!k%=-|&@h_zGZHW(67=
zT!CpgkH84e*G7207SsIS#S}XKtPx(Qjqt+XGier*^R)?0&JP&Y0!GoGkBd}$u0?-X
zyD-8=aWYg5D2f)ZS1UdikP&l=T8JKRic&;Sm7blZttR5Ces+#dM_j2qsGbI|*^|8~
zYF0ho46T^nY%OfBRv47m#^0+I2XQ5AP-XQ&jh5(*+2hq(0&4gQszs_Ek2lruk!twJ
zFzu!4N%fi?+?#6n$xzdU_KY0#PL6mm-SCkS<ipT3BcC)gzBI#6nvq{xaGZvw8k%PK
zOf!6@89vhte`$uVG$WTZ!&jQ&C(ZDq_aBcp-SnSs`cF6gr<?xLO}l!RM0wMGx@kY%
zw4ZL|ly3Ub+dIme@n)FuW(4O`^_QHdjXUPo^k?+St9NUUH(T?StdIUULL2@v(&fza
zX4-)BsuZq4yitW3L)BK`&rT{0HO4<_flBkHrUyeAc}WZG?3(&nrB+TwW2rr~bk3a8
zko@|&RW)_B)>I_Pd?b&bg^*Q<TaP`gw7$L+=j}N&%1gzFCNZ)}Os>N5w~DTIVsw=p
zJFCtfS5-NuRE{rg3YnmrlA~u;$y~tbxm7OJUt?Wu-P|zKlZrUelL~}VM>?NE!Q~rf
zI?*|%VHIg*BEgcbQFAIPbqjW>8r%%<Z&%Xb?DC45#?p`qGsH#6kd)b|hFC>ItX4y;
z(L=0l5(}!Z$Efki1`KYl8eAg=*JK7)kAal|5Vh;5Yh~PhX0m*GH}?4Ql3j`$JpjXj
zia5c63Sg#!L#I%1Kw+kTUDI@{BCSj$Skk5XS6QuFwxCj?|5R8dDiav+C<RXrc$8u%
z2h1HbU`|Q_k5Y8xD@6y@);wU2U;&R>P)Jvbj{2rObK(k^n?b;AQvq}L3z!p1z+3?W
zW?u><oA#5{LP`#JO?zI$AMT7~x&t`bDC#wFZ!m7^dxP~2e_q3%&$Q<=?V0OT!0hb-
zb3qK4lS{yyYyv*hp1C*%%!wwTcRQSKO?$W!D!%+C9x(AhFyHX2Hx69J4ZnWVzPWk?
z%!wdit|S4oKL*SRAz)4j0d3%u1Lg`7F#Bmh8|>tOHq^<1fay12<fIKb@`G{1hdCDn
z^i>S`!Fe_L+8`zev>^mF?P^1ac(9xqkGbdI|1L1|X7V$PT=d449LO;3WEg(*#)EXz
zPKKFBy^&x%rk!llj=8=BvQ0bY8WYG4mNV^Sn|87dKOTKz4rq^1azJlPpvq7~ueG7Z
zxmok?QHC1nY9j*GXVrj59~}b59~Cgyr2za;N*|I<Kgp(Dz2TuB({8fqCpj25{Un=y
zyr#Z4Sl{I94H4_a)c2bD#vc<fw}*h&@ZmLl!gr+j@|kvh!FEl$-dK|Z#@7-sH-doA
z^y@Qx83#+iocsgk1`;qQ?SOG=1dOvIU{2lvbK(vd2TZ`+3<7#1hg^c|#f-~%<^skA
z6EJs!fVt2I@(n-w;FTQE2Pd>+^g$m4kZ#)32QS3Uc=Uk`aWj5>5W~7MapPVIn6rLB
zyIGKL<ehKiYCIqTa~uz(8U51-5UeNDzdm>&Zu-{;FvLxN`Tzz!H*s_A4w#E`Kp$LS
zZ%uo~?-|es8LUIYmp;fKZse10+Di}WYfv9dd3{j9x-<G<e2xL*a|{?SM8F(`1Nz{C
z@}_-rOAYAz1njhFKVaH7{@#FbM+5?f|A3K$KJX+5jGH2$54?z*_OlKD#%&SMM|SM7
zsvl6LH=xRnfU0%x@#%T<_|o!2OKa;ID{3mLN@)ckMfD7tVyk^IRN<tu()#e==6ZI&
zL@A?B#y1-<o`it$Bm@G+zL@(<Ks!Dl2V;NC-7#RCfdS*b3z!=!{)ZR6E{)GOVD3W!
z<BAI8DsKViJ&!n~dnR-w|Mzfy;P-HDi!ymF!nrNV=d}puwy2w@!b(DZZM!^vZM#6#
zoPnx21=SMtYg>i5nj=s>Cw_efKwQs_U+?*d>pAl4Js)vBSAOHE_8WhSU)w&9U)w%V
z)4#TLh@1Y+VcM^49nwwz`V4`%>0h525I6mM)fz?I^zT)3h`5>y{9d4JB&b>wpr(K0
z5BKXm0qIIdLCyF*Y3kVR_oO9hUGwYH7D^aS^yvz5!-+m!A#OO)rz^w_C+6DbH`gV<
z(Oti}UikIu^!W8E1Xa5usM1=GU#~t;GXlL^B5p>kcQ21$TNO|<5`8N4__bDo8cCQF
zu3x*bJ$~Z@@Eae1-#DZF+KPJo`ji4{`qQi5<JY?osA*U4I*1z$)4LAhM#6g6LEOx+
zKGh*^<f>0`h#R@;Qyk((uKE;*xRI;gg*<+}3xOK>=v@bKqhWg2LEOm2Z~E7#KBSxe
zjZfBZ+yj1n%0s^CU%U1ZH~kxTf!|#B{l;zJH|_zy-laT#y-R_b{!@&GrJU6;<2dje
z2Z7%>2>ixD;5QBezdk>rB{LJoQQ$WY0l&G3`^|;hZ!WHWZTF#3X5_{(;n(LjXp)&h
zZNCvWGoa5~&?u9y_cO#zJNmu>%`%eL_7EBs)HE~m#?JeVo%b7`n_ut0&@3|p+Wva{
z0iW{4L9>$PHq0P<=1opc4P8{xP?toX?sDQMLLF$FuTxx&v*7VmX`wUgni@=~YMv=K
zw`ze(a?Qn$nYB7tQB^ssQ5VGj4x|gJzVfvudh>lbu9;PpO$`<0rE_PgERQyq_$fh6
z0jN?2FMM!1Un{K_KfUR=RxZTVqDFb8OkSThpP<3GZqKL9r#DS6K2Y6GzBZrUd~H5K
zm2!hB5kow>T(Z~WXi5$wr)F!CBdd}cwczIBKB)w!0wg#J7{O6c3r>efaH<>$PL<Pw
zQ$Z~_RZs~|h3adX=IWAjs%nG5iu0RFYgB4PeQ5(c(iJlsRkW3gHmDg;)z#e2ZJH5e
z5dqEOjNe(Dah632X%<mVvxss*77+}xh=PVigba(w4zfrk4U048{(;3AbN|R9sw)=h
z+k8rjDnKk!z(|pTT8cVEEUI$EqAI6ZR6)(6DyUebPzx3)+L8r|yXz|&s_M#hQ)P8<
zkf@;MjJ}PhI8y=Qi~@!;3Tn=Dh&WT_h%;4AbEbltGgVM=Mxhp*QM4sz6c2JnVVCBN
zf{s!(+m0EUlxb3~iPkX3OdYG#WR@mXn#|UuS`)2FjyXD3tBF=)N4<_UXreXIp>@sC
zq!Z_9GG7y|){ccbwn!0LvL3J5C%tB$^crjC)u%oWe((-c<x(<KB`d$Fp-$CI&hUnp
z)xj4x2llD4v|*uDQ`Mjj5nfMrs-wPQE>g8w$j-3J>uM`?M4MNyM{nSudTo2O-x+ab
z9zoTC0BsrDqun-0*EYnPoZ^~W151@eAATfNXq;8mP#y|ZP=UFsw`9E?p|G}C$@<cS
zxVBKqdJ{ri_m-UE2}M&%CuW5yGpoaM-LwQvI83RJiI{%WCV+O-=73+D^(f45AFx=y
z(2BW@_$92dqFmR&fvB{hp>BRty@`86RlK}zzWN;<j&pUWgTq|&o}wL6-Zb>l*icnk
zX=<kEjS3ESQw|%J$}czV7>T9mqY>KEyr$|yGaT+Zo~94WaIhQ6>mv@VxH{s1>J84T
zXUOB#7YtB+MDS|I8B|Jda9-^QLtJmL-duHvMgRIR>+^Wj;S)5e>}*JB3H@whQj*W+
zB_{>*ye7|^R7SExX`e~)olWtZ6#v<j6qAy2HYL@hq$X9L4Fx$#O&Vs})(03Lj>y5@
z(oN~~vnd%SCF5*Lwn@o8o04Nva?YmYnv~qLDFKs$tBvkG*~lRoaxf`o^vT|!JfK@j
z3dz2+Df&?DGuIiPxz6~^b;j(+9<v{V>LZrfk3Bwfo$;CLi_ctNeCGP%GuIcN*T}|u
zRyJNE8}C`!m@AFXTxopfD&sR(7@xVq_{;&@XAamtbD;K_1GCQ@n0@BJ>@x>upE)r5
z{6;SRvsz(}#y)d2_L-xxFV)C2H94tN9ld-W^)OPn)+H5ADr=GBX^{h6{X?v>MLB(t
z)2;bil!6YnD3#kH2QzPSu)I9UCP#(;kQ3y9a=<~0IvFkMK>J$c_*&#(U6`EI7X7I3
zA98~IP|olDP%PMw3jd)_upi3#y&vK<RriTw8phTltRL9&sdOW=Wc5?2DMR6484Bww
zmQP<raEjEn+i0WLr!UFgWOI5n<-H#5@B}qGioVJsp5vNZUs_h7b`Dxp_z#4Y2@B*0
z0{S%^`tAw74AFfzD1{Rd!&fyBmw1Mj;`EJM)_oIU6ioq&H$Y$C=%T^u4w|6B>I2$U
zgH;8ZsKMF~+D(IX2$bpoEb5_$2CFw{Pe3oE=YUciU=0VQb^+FppnWx1)Mq~p7Jcs(
zU#%vvh_C({@HJM3_lOwY9AXxIqjvycAi~5WzWq&L{R%o*gY^q2ee(ifodO-A!6Lr0
zG+47hvjI~90x(U3l?OUqgH;52t_CX~v{-`;f+vg>Sk!ij2AkS11uO!@0v2nqXsVWI
zu<-qAyg{PC8Vb5h1D@7p_^yZs4!Tu?MRMJy!8!oCU4!)k=nf6m^PoF5STBO^(qIh(
zy;*~WuXp1+N(yXxkLy+q7V&$V28-IbU4!KZy+eaddUdA;HAi<L46w>T@77@ZKuHGy
z)^niuXt2(J-V3-7>2pBwjd=na`hh3A6^O~8^cESw8V&l828-r%j|Mv(6yJX*uxdab
z(O}V7AJt%yZtn#=jxwKuKB2*)zV-p00g#S8Yk=A(UI|75NR9;K0s8?YOPceS49ozf
zId}!o40zSRYS7mV(0E@ra3km&fVTlV0Pkq9{snr_0LkE8!219y_kn@;KtD9_J?KXo
zNHy>bv;uwu=pn#ojByL}a}C@LdRPM|J^VrgPXIjvIEwOpLBG<#J)p+`-yogj@T~?u
z7WB9VPGkB`1HPBS*a^T-DBlQ5;{jMFK@IRV2>%TD6=iM)J*9z@e*LC_(>$Ekz)4Od
zI{?QV&^Xmt2ZAD?AQV(+pf!*8|1`KjF@7b3VW75w4xkPVc$1Lv5CdI7of`0dA>-68
zK_Y<K0^prPMsifp9W+b>-bQ5jri+Gdpb;AIh9cvw4D<kv)Ij!ww>HoRG)e=*+QHk2
z8j?YyHQ*gZ#@ib3g2rgTTZ#<dzR`fShPN3N;9FP>?=)&4nRL`Zc8GT}&>s|fpmYKA
z#XB3w0gcmu_v9GfhSZP?8m|H0;$ggtfjm&?kkX_1pd?3vd;rM~Kz5FkTnGvQBs&1!
zYGa(_LNEf*Qv=>tV7!-sF`&IQ;0*@GNnQlw0MJ*ZvztKs86cS_X~5eXjMF#?XpW%M
zO0U;~l6(oK0!XF=5<qe!_y@qR0dF2Ko?>7cXsQOhf53Q}f$5;>2F?S`(15oy8NNNF
zp#+q47l1b;7~T@qPzE|!1KyTkcw<xp&DRhO_|_fcSq5f+W^2H^6^zrI5mW+lHQ<d4
zhOZrIs0O9^0I-`t0|x3qhiYK38~CQ2hB=@#PXu!TMFs@uFavLb4%a~YhMGT`!-as6
z8pyum%~lPoKu2q!y@k`f5-b9Y)j+mh&FeT&nxpX=*gnt+1}+Ajr~z;K=y|2NB{|dj
z1h6MTNe>7}o;1e*vg7#DlZLB6Y0dy-*Ey|80+MI32D0^>=91tVK#2ytZOk~$4Z+ob
z85+pO^D+ZlLCZDJp1>;%+z2{T10x-yIV0Ewn5BViKfXexfn+sX1MLU+&WwgTKx;J6
z{=jL@2<`;X`UlWn!D)^O?gG?npnZd%Z{Tjw1`TBI)qK;OKL#MX03dtMn+!Y!O6wnh
zw}TkoE7tHF=mHIRZ%FIGLX`Oh;Y9`xfG*ZRwx2IC@CxWs4Qg*#hA_d)fMx^dfL>&P
zgVMYLEGl!E20B~un>5gQfzuoitOL+E0kjA5-3F)(jR$%p;z6k`0G$yz@k9^?cvS=5
zD`WgM1EiZY-vBxv(O#v1cz9C-?aBNt1JozYH-H@iecQl2pzmm4pMV}Ta4#t70f2o9
z`ksONKuHe(?4O`C_XPI?s2l+A$}_y(tRW7R#tguh+Zg}CKmhcp2D}}{_*Vul1f_We
zFwz5>OM+~`Ney@-jq#rikPgyZ0`QhT<G&f`44JmqKxZY<K?A=Qw4(+(2Z>G^@a{Mh
zX&OjoB3A?6`ey>;At0FviUT-gE5`nR?41dGRmIu=XU;h{Y=N+3fsovLlaPgdOIQPh
zHGs%2s30n!QrwWDuUZ$1)~!mdQtMu{io4=&-KEr0Ypr#ml%i6gYHf;$G)2_h|Mz+3
z-rO66h<o4n^S{Y&X3m^Bb7p;J=6U8k1E%4o{JiN7HimtOgOr&!0~|^i%E&tm%*IU_
zd2_%#+?0z)KUI(gkACVMhd+J6qdyAl4s80P!0yDRKML#z*z`y5B;1sjcQROlo3cR*
ztMPsSEI1p`p1r1EDL5ZA2N%VWfqgN!0<-}uz|TM)xH^tP>}wqCX6)-7?EBc%hroV_
z{R;=FE04DCNx9MnyjvVBZOpqZj@H<#9fEtYA8-i7k9H;q=p$Yn!IQWja|oWs{*?n?
z{u%EH!2O^bw%mJ$`FsiXa}L3?*w2F(@$Z8DGWZkW<^BeTP&xKr9756-r2ast0{gEH
zp@G<&974UZ-*5=^!+z5N-LJ-zG6KO`Y{@eSB!5!(Adq~}M+CuBtbvUK-yIs?I-r@y
z_?`n_AfgJ_0S!DH+Tnm^AmfJ|Le<!54(RPMXn<FQ4#uYL1?ccGelv&A6l~go0Bt`8
zee#MB?blCt2+hQ%eF#E_VbeYYp;_2%9YRN7w{r*`iQOJV33D`d5h%sI5WCDFv<SO1
zpdLbtv8gjbh_>tZ0F-Np_Ult0g3uY*l)FC!_nFuu975+}OIc6`p&w#P-av@<<;%N4
zh_>!ayb_<}QJxnZ3eJf`%0a>jB=0|pL-KxsgEtEM!Z@a4(|7z!s6Q$HOC3BZ^W_fS
zc<i4zcoVQMckoWZ{wcVLXC>di1b5&jZ~mPQ-dOCr9MG3w{JX(@gjs-1-w=3GZuf)d
za7+EJaS;09{~G)b|2fz%ICv*u|K369g#RL7tnp67e#ya;dU+ZA3IAiUUw81NEdLzG
z1nj@WA@8MMC?;aR5eIeP|1FNmv~SvWAZ_sq?4}?C_jTB<K~LP|CFljDyr0IVZUSjX
z?_ke$kaCi>y}*ATTb_|JxCQ(B4*m{o>RRC6icOsh{131%ckowXQ~m;fC-xN%K5d3C
zwiW(|*jG9Dw`2d@!QX{_wS&}IaE*iiZ|rLwqz(hg8}MtfS2{?21~)nQ|G~c5LFzV;
zya9hVwmdKG;2vyw2KXOg-|OIueV>EB2Ya=Hw2$C^2mfR22OOlW1P?m+pI|@YAZ<rz
ztHA#h`*8<fo_oT<ufu*8JVzLbgEl7cW7vO;L+bWr2mfL0KgD6OUvu!~ov+8?VXt@a
z<^6w-!^hs>;6H{<8&lADgl{77e}%m@ju7_S4!)#a+KM0zyzAggKK>C$6YT8{zKj#n
zh6K_cr5ynODQu~GK{JluDRz)KLjFhxzQi~A)eZq|BY!LyM|kQipZ*{SsJr}04pJxi
zlO3cU@~1iklvVx=2dR_%ncz^KC6D>D9HbuduXhM&Z~3$(K|q_ymwO<1#&C?J1Nw<L
z!qUM;u_+4yT8m7W{0n5=9B%F)e8zAK2U+`u(;bBG7;fnx>)>!J2jM}6GaO`19L{zy
zr(owe$a*mxb});vBM!C-Thav3SYyJH4j}8la3=@hL53-Ffvow$@(v*U$Z%H&S@VVa
zIGCSc_jQo9Q@Gs0T#jAgAZw{`KL_*zm~ejwSsR51IGC%j2Rg_)DLlvly~-v$*g@7z
z;h_#_5-?%OCy+H$xXQs?i#^;y)=%LP4(2*++K)iiQsGe!!cPs4c96AEc#MPaR>M**
zz)IQD#stD=4b#>HvStcPeFNcLhNX^yJs*39gYX)|v@3zEUBa|4fmwrnn1ifc!qN_a
z@FK%f_rR{emih+5n+!|&0xM-GWeUvm*he~8DZ`^2gdZ6`+5wHkCOp@{`~iEOgS`P;
z$^sbZNBDRLyAt~Z2Xs%F@QDsq@_v$ofv$v4cCfc#FLe-JVfcp*_F3#@4#GPOpXXqo
z!<I4v<^${>IoMxgFLw|gVpz%x*mc-fI0%n0Eae4cO%|3i0>Up0OSu49pM|9?fbc59
z(uRP&75hd9;njv$I*1$~EbRaY4=*fr4@?!d<QWJ*FD&^4W;nLQ1#AZPDhIS(oA7N8
z!siR$?ttD36TZVicz)qK9nf=T!go0c|1W&E1KQ6__#Ox01%~f+Kqs0B-{&BF!SHGa
zBklBl2jLNhA8;_zW*>AAeqs0_2P5tGVF%$Ih97Y-<FOxg5I$n~F$eUWoA9q3gdY}u
z+`$}&{e*+?#==iJm<8BRIS8LD{IrAl9=7xcAUw11vkpeuptK2K2Vk#pKxdc<OPc_~
zOAD`cFw!=E<6sA2OCJDe7&GDDItYI)EbRuEi?Dy^AUve-3l3-*HsRkp2tO$-eFlhp
zBm4&k;ZKC6tpJgAgr&^^;Z=mCodJ<~g#Y9qJd5xv4k7~yzv^Jm#eU5}WFg_#9qdx<
z^$sE%3IEx_{t$bEgUCt3e{rzOus1r03?%$l2P=8p<RG$;@EZ<R^7y8M$VS3%IoM0E
zH#>-&B>XoA`(x}a4k9xNZ*{PjVsCR0xkC8w4p!RH+YTaU2*2Zi&T|uf*TIP2KOC&2
z`8@}bIfVb|U?t5p4rq=u;eR<;N%M9Gkxzu*cd(M?9S$O|2!G&UCCxh>jMyJKSZO=E
z9L#^P|LtIZhh6I+GK#R=16JCITm$nFb{v-W62U8CnV(a)5f3!MO}#~$f@ZkCkKG((
z;Qk-%)}Re;$~)2)WZ|X^Bke&4+_a5IF387y9(EKI;HG>cg`gBSWfLg_opE1?-39c-
zO?^drf!?^uYorh8kDEM127rOMe~LW_48#31>?$yvxt5PT0*uB@9wKAGIKte3Jsup4
z`zGwkU<zScVowD#ag(3OVGiCZ>{$-p9oR=Wcz0qS>EPXkeH1vFXUS(|E;tT1`HU<8
z-{W2MqsT&VGVTYk7lBi7zmB~aP_D9Wk1PSF;(ibNG(Z`9|HeKYoI#u+>@&d+a8n17
zv%uN7skq2e@I%~`V`LeiEdB1-7lEG;&#$mA2b7t}#3NULpW~(+BUgi85M~YbN<i88
z!?AA$x8bH7Be#S52qW!eHMk%58`zQ`;CID-&_UMXk%t^)?H!@d2)wtjA9e8iVm}5*
zm++7xj|1Ai@RlO9b%F3>B2PK^hhsx;1^!{!&p7x}KhHY&$6!C_;7i#{et_Q}8(J%n
zHGhOYBk%`cLth2nPVC=0_`|T*f#2aznMPg!<XiYykry3=_Y?VpgMTD8bW|XGfyf^n
z{CU_fgFo@?r`WH6R|#XV*E@JI>_0mQKPIvP{Dtt>VQ&O~#eF5Vlr`{=!iMe%{JGd~
zIr#IjH-oMCx5t)#_;=hbu%TlDKL`6A2R{${UGNX$zZ+ZH+&^(s-x2APz`GUuUjRDg
zAB+9IgMS3Jlot>lN#sKZzX}^#B=ARJ*E$G~Ch{K#{~+w$;3MMy1@<2BF>Yy7pE!6@
z-cnw`pMzcJ;LkQD+QcDr4|X#^{zCMxXlsX{A9foDb+^S0g2CABKqhY5Lo~}FsKm~8
z2&Q0DcF_)m>4u%_ApC<U<rU4xzXx{MA?S@A1qJvYj9usu48<;S2#T?LI)om;mbgIh
zH|##3FX@-(=#v6;j+y8{Fo-a6U(yGHsn|mtf*IKIj$!yy=26O85WIn1?GQ}E9_tVs
zf<4Y5n2x>3AvhlU6bD)NN0)$ei05SNa~*<*u$O}6_@9Zr!Xfw#_Dv4KOW3zK$l5)+
z3eb*Z?H;|uA$SG*E{EV%Y}%Y4_&v7N9|$&L-wz(Z{TjBs`(fPcu^)2?=nv6ffyeRR
zfc=z1u*sML>Q@k=O%zb4f<WA~dx7wK3aBqZa11u(E(qphQ(pq%%@_1=2&H3Bb_nPP
z1+<R>>Ot1?1(a{W;kf^fJqygiy&d~vhhP`><={%v(-Qj~hY)2@=sASau;cJ(BZV0b
zq2}0a97445!nO`UEq0be@Fq6xR1kcGo$C;4iXC<cg|NFigy=Vgv<E>50#taEL&##2
z|3b<m_|%vp?g>KFO%Z)T5V{?k_Fohs%uMWJhY)pJMEru#oyHWebO@35V(PH?LHtQ?
z@gv|-+|)twlYlx4k?!JW!E?AfVn6Q?BCo~2a|ltF#n1vlr~vy#htMFlVYLRlCzOx9
z&><9MTNcj<LZr2HszWFf`)xoS1k_az>bwVe2#&xet{#JN4`k~QZB1bRg4k=CgUF&j
zHV$49Hs$p(^%tUTeoQ%i9MEPuu}q6OgdRk6vJf0koX47=6=BiYD<`VIW_p@|rV7r;
zQRYl@4qA$rqJQ{GbPKOW1Mnuh6<xjmL?iD<_ER+H_V-4juXZ-tX_ugJ_8fG~UW6{$
zpP@na1~kXsjLz8G&<^_``e2_#3+!{~d;Jr-T(_cgH3LnnQM9ObL4Rs*bfykLE9xZw
zXmppJiMG;9&`Nqa`bO_StLSrR2mKQ|LH~?C(7&P!^l#|y%s}7fOmt$-L)Yb%oa+5c
zbV5Fe{>LZK_V_1sIBrEp<NLvf`NjDo^T*{MoIg2#YW|`5v+}RcUzz_z*bg@eXM}UY
z1>xdw*YM!*xbU>_yzt54ABBGs{(1Pu@JEq0k*r9ENPc8^WOQU)<lxAZ$jr!Lky()=
zB4<Y~jQk|>^T;nEw?*!YJQP_Qc{TFa$or99k-BJ;Xp3leG&dTK7Dh{=y`p`i712S_
zVbM|1anVzv=S0tqE|0E=-W0thdRz34=-ttKqYp$Mjy@iJs-Rs#PC>Mwu%M)%N5RyB
z!wcpVTwHKv!8?UsVOn8EVcWv2!ra1eVb{X3g+~=0Q{)%5FNzcu7j-ROS^Qw}qs31Z
zKUe&G@e9Q-mb58ZSlX_1YUw*YihB&c?cuwoeH_%qV$`~cnqFoQYv)<!Xr#0&wN|e{
zXY_q&cK(Cif)3{Q(6qeUeu7qHsnyA7A)e#SN2l=FXb={i!7I=Vd_A>#Q@mCmK-2FN
zX!m^%jlM6Vt#>mTb~DhS+a4XcWz=d9YIPtQZ>3h3Xsw=4tu9B)>@U$9dq28hUv5yV
za3ayc+6%p>bJ1gZIp?^qMAzrN==FRYJ)VC=N9PvwZ*C8EYOPjNtCOhJ8TGa5h10^#
z!`b0*xKp@GxKDU!cxre?cwu;HczO5=YIP;Yh_{WjkK{(8kr9!xk@1nqk*V=oJu<R1
za#7^+$kmaRk=rAyBacL$kF1Zp5!o53rB<6oTSwbR^P*8|wP&;swK_0bNv&2#7e$v)
zt4rgxx{6x8i(0)u`cU*St<~)MTAf@ltzZ_ldU<`VwxL!#)Ys~Kt<}7Etv*ovNb!@!
z&r++uqgGqTYxV6Og*^sot<saFR{b~Fn)Mubf*LllU&I!R%?~=?@E5zGt`#9Jj$MR#
zY3#?bOJWzsE|M#*4~v~08xs4Tt&=NzinjpG+VkxPas}NO55{@bm}9+aZ?rcY*P&if
z?5)_Fu~(rd(8;>%>aNAS9$Zy-Y3$V4lGyiSi(@Cpu83V3n;Tmm`-zKd|K_&ZccAa@
z90lfy{Z7kw(%*q<HTK)mOYUxcW$STUzlZ&st%q!#x%H{7&ul$->%^_hbnxp9x&UZm
z>hJHX{(fuXdMo9)ZO69vw=zC$yGDGse!Q(>>z-}Bw{_pvbz7Hho$>Fst!Nwccw1!a
zZtjoXI^u8nTN&H7Ua|Gct;cUYd+XY*!RF3eAi-N06}G&yWz&`?w%oMknk{#1x%_W~
zx17J_+_z47Yu;N&zjef0v)-D(Ho=qLYWe0PZ>GPoX49$b2frRWyweP7BJCk#b+^I}
zYGDth?0HQkJ!no|<FCbDi~eKIq(}4dduTmo9LJBan4gH5_|c0PpAtWG95X{m{Lp;d
zHej@r8Dhdz7p0W=1tr|kvK2F6?AiAZ?Z%a8G#-oA;zQ9?JRhyZ3(!Wq2(80sp=tPh
zc`8^2aJeh>St|F?6)ZjcYEHVk8=AcqZM*NHMVI+V@QKWn<rjLv*-10>N!kF)X%v_Y
zW~a?hTbg!l+AV48(inB|*}%D9@21t@($c|xPuyuclW{m#+P1j8S?n}5)wNN~)L+_5
z+y{;S(pK;5e%g)dYta|o6>ZJy&?lUZ&S=pBJppaOh3JVcp!`Iq^vCE7{sf)U3(yZe
zJ{ZjzVZ%aY=!qT|REIoc(Kr1fx{H5{_TqzrNufUIg1$8<4+X?9FVq*^#xc<X9qQ~I
ziXQ19p#jvxD)dlqQN6{TO+VA$3}9RzWQLfDW;*oYNXGZMW~uq1S!T{>f9EgEE#_9U
zik-=~vlI4VcD?@DY(Ts3hiL!5G37jm7M#&g7(aiZmz<lxsR>ij`hQa5lmmNuu$xm1
zZnL*@-oRa)81Rbytr^Tt&Pv<d9ArC~Lu`?mVLO>aZHbv_i_KxS)EvQ%!g;p0nQ!};
zV{BheDX26@vukjP9brzjBRMNz6lVpDHfPy!=3I8VooA<*AK7W<Qg)bK!p_1AIGe#|
zXU}EqE?dqS4M&=v+M~>sb{?k_9&J|Gx#ntn9On`q&&YQ&Clj8?sSKWdm2)l6;5@?f
z%$@d3^N78`JZmpEzqUU$&)F-?Z|%=HgW_t=ptzP(39sQC!kf$=?Jqc|VU_udz0>^F
z-fcFq+v^Q>cD-ru<K)w)IB#%`*=0p<^B()6`GoyTAKO2$L+S_SQT9N+Z67s5+0S&L
zoo?>3Kj0k0)n>E3pOXw9;Pi<HIpg3VGuehY-C&G)%3j6^3&YI~>@k~U^EnamI?h16
znNt<sl5-Voj8hdh$(af?jv75NVF#xreBe$?u>VP%lpyCMc!iw0@V@;JZP|~a8T;u_
zF`AzHqw9GfdY}8LcI*exoc$E1bPnY-q><=$u11UV!Dw%ug68H!(Aqo;ZOuobi&-==
z>zSOP^UzX1(;MYaWkeXmxG<hG4NhT%IH>-7g2kLy(D3|%6F99v&Ma8O4B&nA$nQXt
z{0Hcg--$N)578&Ti}~KanH$uiRsKKdmEVnK`H#>ozX$E|A2SpDgjvI<=$NllE%Rt}
z_a6?d{|KkwJsSA_V?p5mDhT<H2WkEjK@<PUpsD{9I^J(rjp6q*KYT>AgPW-~YNpu&
zbGR)tvykr1Mv`}m9mbg!Rptz&acA4{%zG!8pCD1Y+|DsSv-8bW_83mMJl0%e7np02
zY+Z*G>n0>tHzS?;C6cIz?D^&yBus1Um1ZrHqu<z{ajNB2oP2jZXOP@rUbZXEt4MHO
zv$t?E<+J8}q%a>Kaj8YR@+p#(I!?|w2noqBBp_8tJBB0K7=aXHBod2JNGC?yc4iDx
zhiW7YW059|vpHrwQi5ZV2pk9Ze*v8S@4?ky2nYXoJCL(J2ALD#!e0c({bIQ5cf(1)
z2d??O_8fB`-0;<Qskt96_XBXWAF~&kU)hT}k@FHx68W)t(q76*B@c75<|CZe_ZVku
z{>uCVPVjqheg6rEcc)!z{sZTBH(c6}?C<5wh6blK$Vn9clX42hX3lMRm$MpD&uNfT
zC{j<L_>fZ@QcrA<6DfX{JdHw5ZSd~Wa~M+2V9>KCQqP@uopU4PgoyVz6@oJ$^qdDd
z*Fny1kh2<6&uNe|8dA?^7|u*J<y;0ibAq!Sn8$i=`F-^y4LM!oF-~MSj58UI;q-<6
z%x?#HJN;pLzJ{Es@f@c#9PQ7O^Csl93C^7G^c)S&*6@$w?1uUEXG+Ma6FGjKo}eKo
zYTW9}i4I3_Iz$!cLzMal>A4$nuEq<T{V*FU-;a|7<V=A|P6?0`2YTt51HJX^fT5uW
z&{IE^Qv<3vV_+KR2TbQ&fcwyE|9f=Vi%$C%%&Gq+TIxg1&{6*pdgt4P3cMoGYAz?8
zFiKg_+{{OE8H^e;VY(SV?~KJKm_evUJ>GOV;pinNnOqadXvVyg%&}5zk#a3(LpM*k
zwkBknrCc+to2DlH_+u8IWafU>Jn`to$D7IfFpod+cr*UQ&zPECcm<?FQtpwSfH%UW
z;Hs%<cF&l5vhP0s_VKsp-uC3G9jmT3nWTo$SKYmI^RcgtT2wqctrdRqq#?X#H%MAT
zYwa#<*4Qz47~l3U_EPMH*oN5JSS^1w;xd_BZNRLF)tE|rUQmBRnaSe9++ZsClMvVI
z^R*ho28o0G@rUpA#3HdS**izE)r6Ket|iCn!d@F&&2vWI$bEUHfmuJ#AzpdDMq^(s
zakw9=3*N|6lp%L(Vp|e-#Mbw$##d6hfp-~+g|?$_5kD7dZ&R-27r*b`9IvGq>kf^H
zd7t}9{&~MO>CC87&*+fTHD<^e2-N(|z%xa(;})hwORKZV;jfEn&tF&5fxiK?`drh^
z<ndQ%!X|1;O#y$MxGFTorp$CU<vh^^|E~O%6Sf=f?);UT9{iP=3jOP64(44G&19aw
zjK31|TXq9<Mq>W~&+SCY)s0zJ*c39m8fHp4t*Xj&;>4=4rkJ_S;ilXk$*iVa&PT;u
zVwV%<CyX%VoCbA+DdPmDmrVsHFTIM-pV^OF&ir5_VVEOezQu0cQf2|0@&6k;P)j*)
z={?N%*}YoMykRHiZg#AebGp*Un9LeXxo5q=lyZ_%Q{0@TgqiN8n=&{Axu(J^@=8r7
zubbD+wBtOao+g`fkow^s<_$wISLIci4&HEYxarRsNTW;}<_Xm%pOxe|(~;T2csA`E
z<Q+uF3G5DR&v{6ke(g>4CYnrm50gz6ry@-;Ih>3%)kM8n-Yk>n9pN2ea+y=i!F{xM
zH0FGE`{gm?SirO2^S(#;6TK7hS>!Fk{JwV<@8uLEQgyDkjJIFtU4r>jZw2NJ-bzw(
zEAoSU&NaH7^l+XL>ABatpY%M2T&Ep;t7nN}jrVK9a9R=muOc66%UMM4m>fo><|a>0
z5Hh)pO{KWYkQlXvh988RQ++TO`->6vo#vkgL-TC^Y}1_6cYb7AaRSc;rYWcJTxj}n
z*3QpO6HeN>&ZKkN&h>=3iQSQ{m>u0}S}^ZfO_+z-Tjq1F&LgG=C+j?Bddj&vgn63%
zf}WhMWBRg6Tw?-G*!i_-$q75_@cEtpJJU=~*}?sy|04c>@c)4OkNzKVzv91w`I`S4
zKAgCN$%#9doBU0fZ@^t>Ehp~~=5PMr@Y&*T!M)YrYSLJPzDvyi@c)57XYgQdXGPkV
zdENUagPGk9LhfXLVP9r;ADZ6G>1uKB_IG1`<bPyZ%4s~t<2)W8HwU7azH%xLZcf=T
z-8o~Y7_&4eHN7}zr?ct9nAe?kP|u(zCTHz%7HtXpo2`st^heGdl%CGE;BEnD+iPf#
zF|tSe8BardoPJUYU8tx0*)I#_&%Zk7F?#p{=!j6<|6@O>D!GE9{~!A?ipcmQV@Zu^
z9((%#LJlQAw8C2QqxGfZSbA)ijFA7ke=<U+{-`_V0jWO!t?t-+S__&yX>H<&DSs&j
zcS)~mm;o4*Ej6dDG23Kg$9YgL%zuwbxj)aJ^0ZtINUPQkb#e|f#=Dun$sF)1(?#c1
zFOlmTg)TC)+dyf^^@iAbHP?Li`EoT9PsjfH$z-je28oS1uBm&Xx%Mz|2e|q$Z_5PV
z$xkW3XL?41TpChW8GG84?dAKOr1!vI>T*VFV@(j-yzl4!cjd_CA(>|SMSN944qpR_
zHOlUI$dr0b+}n3Ke0#nPsW82Ix1`LCIoj(b&6W7n2vu;uSe&E2cOLY~`VydhrsOyA
z>^E)4cJa46W!*`yPS9&;Uu|p~SN-r?WBLgFBc~>|PE2gcxy&eb$EY#PBn^+}eeWE9
z)46eJO1?$whf<B#kMtxdZ>gVMG6K0@4EfRCzeLItw%kv3?;ZY|y53itaOse72uObV
zkhWJ$I1x6sMd~B*OQt&MO18~JsBg=Tr&wR7W8yASTN`_q9K>5cHub}=zW*feiFYFR
zpPl7N4ALGY)VKAkPYo}m2WTE#8o1M3atl>xuc^`YmKvV>(r={ykml4n6JL48nfmm%
zWF%_Ay)NZS=)wjdIh6kMo~s{C`DY}C$;77SpguO4Iebe$R&!hAPhKarq4x7?ZeWJC
zlQC$c%w1ylLf?cFw<WeC_K37c2@jM%C@JS@jYaMx+Gc9*)c+edq_?<~$*Xj3uwk#3
zvnxIq%lx9LtFNDLJQv9q&{wv(e7Iam9mUpb-qut0La}vzjZbE52Ups|-1CH#dXZIa
z+)l=u2+`2q`~J6kotpLoe)Hu0gcOc7oNeJ}CtBlvLVnHOGRiZX-skTCS{xjteg4X5
zwe|Oirz~YQvCjv-tf!m1$kVaStkl-U9>TSJ-?8mGKTr+kKk?dZi|fVMW3k6I#>7l-
z3%MyXa<4{Lg_56#a0}1AjOUp_>DxsjunXT+@#`(p8@}uh+OQ$EJ*L!6Q?rk;aNjv{
zx!HgF)LyC7U-RIoA@AXd<~k}!o8ax3Yk9Nt(`$T0LX!%2rM*_3_%?n*IllWJr68k;
zjxGC6jg-^=?(Ey&`6g?Xvew$6++|Ls<DIkR?YN|VwC%d<`1A2Pard;o;x$7k`Fl4J
zlM5ezim?+8M|~aA0+J(SJYZw_NpOTx<BZ2FW1Qq;OCmS8CG`UFmz9W&-0}R#Q|=mD
z=97}2)HbK(u-E%Mm1K3~QISJ6MgCNQ<WnR~Z4A2%OnYH{vx7h+O5;>=G~WIK$<Y**
z5S?fLVgF&yXMb-EyK6)?bfN4cVHZIi@}Nt+kQXvPRvFNxUWS)pF7tA{_GY<Pf+Xm2
z`1U2{3OMrv%++%0y}5~fP9w}O+0Qh}+`>+#G3Hie)KkqW<kN?k+t|N5lf6cV1&5hC
zIOTqpxih#exXs+fj?a6|-EyY8xkpZNH}`Rp`_txrImz8Tz)rEX<{`NKdsKQ?0DTSM
z{x{{XlS=a1nAZGtf=;!?lo6$^$>Og$Yolyd6(Zqlp%T7+D&Z?t317PD$X{ob^Z6?0
z3slZ0QocgMb>goJ^1fnZbt3aC;;IX87MWj>mUW;qzamP!2a@QX{5508Z7*cfz4<HV
z&3&kwzWjAWGFVP5A{T7OI`m-PByzzh`?3z@J>O@yP$!iUwqZ}!)3~Mn+ERb7lZ*A{
zU&JI*!+t6?Os6F3OlOrH`Zi)CCRZhhfl3eyRf5>T9?YJpTy|?6X1ZwI7ui|tl<KN7
z#Uhm{7O6}zP?=(pwu}%hW0h&fPOfK6nthhtDkXL;U*I`eV>^{K7O`vmHR5@ly;oh>
zo3x&gB7H1U>0_YM$3WXwpwh=8l|BY`o84ymvgi11%y;ZN#31s>fR^`9;;*6orD^*s
zVn@>l$TdYmS)>xmB5jdrDyJ;6pP==qt4b@2R9YF(Mw=L`GRq>BSr%z~4S6lSR;DYh
zwzX;Iwe#AUG%wT3WQ%3CmyMa@<(OiXYqs<9ygbv}%lGolT$OPadY!$_ri<6x>urwq
z26_X{QQi=5h&j?5>J2qhRNh&o^3H=*-Z{q`;f*j8Rk~TFa?J_eByW<L=gstHn)&Rj
zKFl1W63t28Y;U$XP9>U?yd%9M&198pPV(k@bIlPd-JGP-%?T>koTPHiNh+tTQc2_l
zl|fEY>Ek4oK2A{S<0O?nPExt!0RMFVbTh<1!#~5!QW@kZ|9t;^GfpLugH;kaQYDcy
z{fqsJ%?NgBU&`H|_&*{1PyL^o!~7Ng3VcLPIbG$HgH%pA%D>US5r2_Z4rWi+FU>(J
zvmC=-uG@Lz9q0&|#a^zv2y-ubJC0RZ=1g{R-OpPd@*g6MNHGVi<g&j?F00w)y4KA0
zf8+ng9Io=qVJf+-R+(ird&XZjWBDH7PiDNzFRT4m{a4Klc9OqthWi`*4cz^!|5tN}
z$}bO9`DL}g+23r2s{FFre+R89166)GjD584;r}oHU&JPo%Sx48R<kSZ12dZaXuC+s
zzx{uclK-HyWUNXqtJ#nCF?T;<*X<1UqkYPIV}8ucR#|4XN-?Y1%ihe458AWWc4`m~
z!e*MvHS=Y!r^!?4W<I+@OH4UC6v|9QWtTlwc8Q!5Nhgv^WS8Al-q}Oto%unZppR)C
z^bPu&a8MqU<E{uQaQB1ewp5ziG8hsJF`4Wy9cj7+ql3|y)j>7p*kG*5VQ1-hlg-}K
z38t0O;&OHiP2=s;gXyH?5Wd-pu$T8x!XF+SjyXG+jX5uvXR_GeJKwYq76uDV7xvWM
zj=c4r;2xy2_XhXjULCB)eLqyY3H$6G!To6PDDKDEao0rYcvGe0y_Al3R65>NWwJd~
zCfhyKE!53qs5G|_+Fq@++gIA1rnI}c((ZJn-K~^%w^rKSR%v&pQsHJwe?6tYA*H{~
zl>W9*`rA_JZ-&y}HgWnZwAEMIng(tCI~4Y9^G`;T8t80urL(P+&bC!Lo2lbxpft3Z
zQb|v#WC$wx2(<E1_Qy4`PeC!8DaCB56tj))&S<A}u$hjr&6Lu$QA*cLDP1$AYt3||
zZKfk_Go@Ufj<g}AP%WTP?b($e<84UWQ;xQ$Y;8|D+MYUSTglP3lB;c{qqdb?Z7UtM
zt+dy+(q6~sEFGV-bbQXzHqk-H=MFkPXX*HyrQ>s!)}qx~v|5W9T8pXD^y?WDP2TLB
zs~GVnGH+qk%W7bo&RbMgt9zB;Ixw5r2E<QhkTSoKxlIjHrO(W_WG3|A@*_8rPT`6L
zm}_v8hi@WvUnW*9ODW0i>=nCKQWc-chVkPMeyT_%ktge3vkkE)W1GH-w0~W3eyK9}
z61738$P8R(=#96(#F~M6uVu}vrJC?-Jl7h#&e<Cem%QtEV3IbMzT_Qo?f0!wZn8?}
zCo)ap*M9CwQPcK?T7u(bkTO;+`}^sNMp|7mt=Y_SxzZd-*?oz++TYvu@^}39hMxQ5
zJ2ecIdL_Fn8~c56uCG3!C7`k;T+qnGZ{IaVJD?URH(3X_lD|aVW2Ysa{krTgQz!13
zL`^4B*LaG)*n8^Z>|@687p|A)Q$MWO8@3~O-`p=VGx)|OQRgaofe-F_U?0l8mb%UU
zZ2OhC>fhFQ78=~uXVR&i20yrBTZG2)zMUd7r4AG0TNDZYcD|C^$v7f^^m2VvcKhfr
zcIRICY7p}mxu}=crb<Qk83CzXORA(iT}wrd(~uXx&&R$d&)BL1iRjCfN}^N`<PFI%
z${9vtOwBo-kZVVAo@g>$+?CzHr+u;|QMX~0&Q>)D@s%#>Tg-m<QZ$IZJt_Ea{e@j?
z+kf)DT%GSfzW;yc>nVZHtCx7MIlz}`Z-eiC;6IgG2nSlI_8#Ws+v_R1eEr}kD$ylf
z8h3nmW#T<D8YFU(44Lq8p~PRfvj_fj6o(YWcaxa3hNYn~%9xNCmD2Rxxukoyyv2<R
ziT7z5>+_TF{c869D0`AtHVDzkTqsd$3Hz(1%RSw&w7!lQ|10Cz&kRo2&JTT&6tka+
zAM=TekoG@Gt9l`JdV}X>Eg({@TGvOo|1$e+9*RAp&(U)j{h80ZI*h&0;MuR~LdGm<
zQ`qal=dPU__Q9_y5uX>0j`8~s6#E29BXWhtexDOZV~>6f_uOvQMk1=Gl8uD<+*`~L
zl^?PW8n;ntuYA)Lm)3oDEhBQZ__}c~Iz}yjro6r$N}}yeR|l!<tVA1kIiy8u2(Fqd
zwPv>0@Rv->XUk2VP14JT&+YpvLDyoN8>T}-$5yht`XzN~8Ik_$<%(Yy2_0LQNDKYv
zZFeJ)`q)Z${a<Y+)?-fQnJD)IN^&Bf^?_xbCqMQju=60XesX?7#pHe_t3ZBQ=4H%)
z*)gppn0Qw1t(Oq;qcyv>qWnnbcVMQ}rTmCHGrn@#tBt$+&P>#yrVz<*VtuC1OAvb2
z|F)l#!vA-snzVUHZ9U|zu%~GSZQ(-|AzLUxe%nDMw-My2&*S?NfA^ygBgVJ!7R?k7
zqU+*dvk{#VN2AYSo;?=55ew{9HVv&9H`)rcTfA!fA^F^B2O#Zy(+&|iC$iTq{0&FW
z`L-Q_Z1Y_^8vRP|*)giAp<3jbcATx{Z#<IBPx<yg#@|GdVcJPv6R(AxhQzX^J=AOM
zwYG<e#L^y)G!nV3SL_wr*<P7fW{(h=q@9C)gFEe!eDA&59u+(gJYeUF)WyyVJsf%%
z-36ZcJ@8as9q6urrkL{8>j0INccV1g;v=&1fhup2m1;IJ6p@ujRNgXN<t@Eb-V#-L
zOK+8xccv_(W~j=_yQ-{wh)T&v(y}`v!x1U@P?eG+gW_+fmUXpCX}YVFCSRpAJyc3F
zNToD`RZ7!er8Jc)r5T}8@-8YL@22wcZYm!ipz`r<Djy%HGMuo=$9t;WX1L02qAIuP
zt@82CDj6TDlJTx886TpOoNASZk5p-RwMxUQRT@52rQy{o=jpC;o_v*t_fXl+V3qAu
zs%&S3O2eyF8a`6x;5}3hUafNQq4uw6Xd9=}@S!RN8miLpYL$i$RSEb=m4FXbxlpCb
zg?gx5NZSf}A3n4nqCG{v(XCcVQ4f`XSE~ekq)Nc6RRTU#CEy3E1iV@$;MFQe>aG&-
zktzYtR|$9zm4HuB3HSt+FAY)&_z0DNcTx#>u}Z+Zdi<G#^jqJM%E3E$eZ9V>wSMs%
z@&<W>aEna5txChQRT|z><>0N*B{tHet28`YrQv}}!<*?>zD@Ki-=_MNZ+maLH=VD4
zMLyobJKQ^*uX*LW-wc(KcT_2PhDyoXc}ICi@rAH_1Dv6<@-#HiA){1@d4_kacO3C7
z@D`XrzY1>Zo#35dnyU;w1N|c>6H>kq&Ol?yDfln;7ULt|35Qg+p6$ukzaj4hbbO|(
zoITJlew(6I;@^b-4?0krtK>byZ;6i5ES0}!sQf)p`Fn=S-!uHl{$$feC3R&gsVh}U
zU71SiMyuqvKqbF@Rr2e;aV=EIZy%NX7OFI_Or?2NrFou8^Q=nqJeB6<sx&WGCBME(
zen+X~ca%zgN2%m@j7omXRq|V;QohkD`7Kb%?`W0$7O3QRluCX_spNN*N`5O;^4m{$
z=Zsa!@37#G;4U*(<-b)b{~f0C-zt^=4htR*9_Fq{fvZ#sJWQp)!&H8lr}D!pl^^z3
z`C(r0o8UKQtjdB5RTkVwWx*wAn^|net3<df^lPzFG12uP+8*RDjh!|jC{P-I&CmrQ
zIw@o)PzG1c*zqK@;I>NX+L?6zvP?_<I>4jN;I8Zw3S+l{#t8)sGdi?`hRL`7*5vD7
z7~c>SE=sKO-G6hXajh6TilBuhy4$Lh@BP~=y~~B#b>%tv`oBPFmZv*=nwcqP8tIk&
zJ!$4Ja|E%@F{hBm#r(BUik4x{GUt$%bNOp+mYPdRk?09%XO^4GN%>Ft>tL?nFUMSI
zuEu>0ry<A=p@)g>5&oK)N6nL@{VDbgh0QbkMa;8|X@xqbwbU^!%$VkxFuIa_(-xZ8
z5shPcHf)-*bEv@NLmx{_$d)qhWi###!@mkW1kIIJwqnGRT|}Z?DbpThk7763(Ts}O
zGAiO;V874ZCH6<ea{;=Pn%WD|B-7DehF+X}dpWua3S`VQ>5Q4L;3K*Ua+Ov#g;xFr
zAJJG4f=X^OQ8XL9fh7G+`zHRI?Pk=eFrwm?okJn}cXkf>GOiMaaTT9`+3mz8`-Ixd
zxJnEkvo|Og%J?a6MpwSzXXwV{N8k3*ZII7M+XU?bO}%EOKxw5fqpoQpqb{cG6UvuS
zmp;#^%h&&my7XtpTT{e%dmpCkd*~#iE^gWDP$Z)+?V<h)^Ntg!c@r(`cqgp`eVxox
zm0!g?R5Wj7*2})pp`mV(f?q@!x93l;#4W3;Ojhe|eI;{D(fZNI9P{g#i6!F~SMo~Y
zPF%%j%$p@=U&lMYcpQ`@G8LDe`c%c!%RS}QyIFsttQ)?Ad%~5FlHSK|&xT>Y{1tCl
zn|L~r%EWb|?4$$<w?WMYbxYbri;LWM+Ewb~O2+Zu=wfBu{EMxQzxiCS#(zP$Tk)2A
zt@Ouaxid~QXALeK;ab_p{>`Un|8Hp6qg?A~7&;L`Qrqy(w{^vvrB!O*ua|A6(1Li`
zYU)zm-%k1@b%`>nPvyJf;!gc;eo2dljLT+SKGY{c8=U<Om9nO$zW!XB<L&x3Nd?JM
zj)3~@b|v@O`qt9bdLYEN_~mV~{$0w%Oq99HL(>1-bEWoi(v#@p%3ISELQSRI_n)HV
zJ#wME_5FwaHt%RXyL1aj{~KzPjpeA(8jrU?*BV_Jl1A-?T*<dxuJ<)k@{PT_v3rSD
z*I1bE@}4V=hAG(B2$Kw#bTxeHo4I0cv0DBTu_x2U+{4W~WFF$^l4z(i!mEakE|Djg
zwaQ%edez4!GuX%RTg@()>)|ZPeSF+EWpefP{61UbdzaYWAyV%r+zI>ZNmD$QOlA*A
z+hq2ilxrvCYtkcJskqQw?@4`oGDWVmQ}2DfZc^!bqO79h5^kZEQf`huy8HO-Wagx!
zPXnp2CP%{5r&;^>*PBX-EuIeKA@y%kSMtieGg0Gv`}3U6=Hl^u1N0}EN|%zx%w+14
zuExTDTlX|IDe{K{PF>0~Up=kVl$-I$7@aZ)Pq-b8a&1)JM(eDfyCv#h{S)({y^?gm
zx!UWwhL?QfO4^d|OS+P6RMry7r<@y#DZNWpt+M8n(NWwkoXp(fJxFM6^4TxzLZ;Y2
z&YrR!lQM1|+swPs>6D0{^k^UB?Lr5TGLk+??}miLu|A~hPco<K^Hrsf<kYpG0C||u
zP5trC4I)WqH^aJwpV*{pBPM%mQhgh`8@tyq<X62)kswMrrOe3UB}Xa~E!Vwke`#~I
z@L4JIS54soJuecVhQGb9lXv%jCmE)3*H@3B@%X>vyQ%$2l0r*pq^*AS#3tHTyv4=&
zL-DH=8VbF6iJt9xw6s=jvB~st$E}rw3NeG@&Ns*v`y%;PTC0>(()2~1{685s8|wES
zv?fj~lkLsbC9N$xneW71SMP+-wkRe(d(S;-5%s^6IO_erfCFt5!n3X)!Bcpkw5s?B
zC_HVK63NdR()1E51@U=aTjN?8Lvgzm$69zB@fC`;<(Ig=>I)?4YYXa9of@4h)l{Ev
z$E{^Wd8PgmHJ<9{+{sk#Kg?&JI#3_>9!gEYW8(*nPwtu3x)gqe?ss)*R#WCa30|B?
zI;3UDyh>(9YO{u{&z<_6j&7r`@~d<^Z{krj9Eo&Jw4ccP#8<M(wOU!jbz91F4P#BY
z@kN{sYbZ(e#J}OaeO%X<8TW+S>8`)-)mddyOB*?p8n34x(nFG0F5hl<8}39|Zb{5`
z>BmmaB?0UA8f&UuS$at9yLr8g@%peYAmkn4PeczkGIm?QsSJnNLjU{z5?dr+y4zy;
zy4{w@x9PT2zD>7f@;$okEMJ`4E@;et)^?Mx%x!o1!rS&hy8MjpaOkbt%qQtShXK0J
zp+fgL^ww|xhv;sH3f=8csTu%!>Yj)Gy60iMY5?e?J0Hq*=R;rBem+I_KlIoA4?|VU
z`7lp(0(8?|5LLPhVz};tnCMOOrkN4C7h<$`h<AwT?#=LK;3L`t<g~p*(GnngBzou`
ziGy{I#3<b(G1e0e>4SBr#3<b<(NA|ujM1GEqjaalAl)f3Mt4e#(w!2cb*IEo-6=8L
zTj(w1UB`RJ^Iq9CF-~_)jM7~bV|3TVDBU$NPIpa=Q61}3bnirO-8<3Wlf4tYRdf0j
z-9gb;cTfz~9TdYk31lbnbKVE>%WjHsUaeP)TlQ3p(>)cVRHOP}-B~e4cUFwjofShl
zZ(|sG14O&}D1U-K0k`N_AH@lClMJnZy%rOs9hmN_b=_0#2TfG(L7wV8Xr+1&%2e+`
zd)0f8u6hsJsNRE+>OCk^y$5-!@t{mK9yC{t2klhjK`YgGP^KCW+N;Kc&Z^}gPqiGB
zsg{Eh)pF2AwH$<0Z@Z^j4%(}(cI!XmKZ7RsXVKW6rFsw2RPRBi>OII;y$2mtdwZ5@
zKWM4i+p|;$LZ)hO&*D79m(Z~;I@~i=A40b3L&#Bm2$`x6p|xst&r+=jf$Db8Qr!sI
zs^L9LH6*l9J?~knCm~n$BxI_dgr=(PJxjGEWU99JW~wcrrD}W6Qk@A+Rp)z_YEH;e
z&F@*NKcR!_PsmjL32jyXdzNZZ$X6{29aRf_mg-W-R$cH}s!<_RH7c}KjS8(*qe7q>
z74lU_yj8slnW`f`OSLOxs&<7O-B%OQeKoywUrj{!)l}=gnj+m-(^dD?bW)89#k#Mi
zlkTf2)_pY*-B(kf`)UexUrmATtC4fL2AHVstBLBqno`|Y6V`n-Vck~~)_pZobzjXu
z-B;5^_tjMEzM3N4S5vL~YKnAUO<4EUgmqs{SohT&q&r@Ub;pb7uRkKbzpA^}oxKM=
zydLbSl5-VWc)g%`EundR*rg!*t~z?<UODax4-GQ$Jy`v{0r-e^k}{=G9lgQcV0<dQ
zO3q=By;%{ZRz*s!N|ajVD79*))T+Hwt8ArKA#b!dnm3N|#u7u~#D;@RiJsMv*u^Dh
zHKZvO%TOxTT&Y;PQnAiT#aby9>!ehyjZ(3;O2smjinUQHmZemzRH<05(l2+yLs;oo
zq0+BnPj-6cD*bAz^s5;9H6Nd2ykpp*ajbVNDLIZ^U!78ReWfccYXvPkfioQBT!>ty
zV#P|ua+Qj;Q7Tpp6_dSR=Xw{A>kGZ>$@LB1EtIpI4$*<rA?_jX_j-?V#>HdaE5s(J
zK)5|&=}OUBc^^W*+CabLEC|^XR;-jOH@+uKC|4_`T)9fQ+CsV5OXE+3enpjX<tgQA
zBO@5+If$+nPw9)V^hHj1c-B~@4p#e8iq?h9G~qF~e>rmzyOPE+{_d7hmvL7$6u43M
zyERFVXn7D#ZV9~vHL8n1G|6SMTS>HSrxQl@!$?>O4R43BUwmtMN}m2&wH4^vLuQxB
z*$VTcIDb1nN0m}b&bjtohMLNK-}-{Sk`kTo)~}Z8BXIK{#~-WrZ0L~Lb<&5DYczB+
z<o;b+=A!W(nNMmct{q<>KEGszS6_w=!lj%FM9!piwOvZvOigR*GmX0w&r7IOeT_Ot
zZ2Zv!x%;_a&Fm`@&5d#+Tq!v2>fWt_Q1Q~*R~!xfTuH_KsKo<+G7*o|NTQ6jMaApK
z#U!Ojtjgs{Jdv~$&n0~%Y#fqLNl^_ea#@pWzEeZ)&mG&GyaPXampm^%j>9edD81Te
zJ4$)7el-zWD9^e(+Ct%3yDw#8Z^u?9pV+rcYDY>ac~^XhF<D0kx_WDy@=SenLV@cq
z;9cYX+_pt}QuGdzmQ50a<Siwp_foHt{`+zfUrLUYnx@1gdF3yKV(cr9R6mso#OqsX
zjlV?sH;6a&8QhcgO<LEfcjW2Rx2qgEUI+Wnqr5Tk6!{a{B&VA}jgURd{>h6ZPyEIC
zL#c19cgqTOOZ?>HwXp#bV_cdfvhSCO1KG922xQM4vJhPRlw8w}g<I-+zj8bpmO6WQ
zwVdnU-H5}rm_)mAWk7CH$~In~DRey%IyG9=B%x2mW0Zd0Jh}Rpunpr)eOm6h>l9mQ
zP&`Gns>GdmIMrRzFpku#`q_xQb$$F9=@DPxx3|1GwN#{MHMlnH?{3w2<P!d~w5z_1
z;t#vJY%He4d*dx2rLK}sNoh%$CBi1}G;oP-27&NB%C!ASY|>W6uGfPvKKuANe%9&S
zk#F9mg(SkMdmnF?o$ZbNTsq_%x-v<F^bjpI*}<bD2Wiw8_LDD}(dkd$9oC#&FS#SU
zm`c|$g#uN&Z$+h)<PqNH@-AuE?=SVe@#o?#cfXI+-*Dk274=?U$|3Qjrh_Z3?RaF3
ze<7TBBjqc<M4HsCEvaGqbN5q2>0^5t(h^f!wo9Fss7Uv;R<uSE?PIU!lb8E?Q^OQV
zSgEtr_u<tbW*v9dQO=^7L8z*fPfG7ky7%=y!tVE*;dn|@sA1gab1Y3keC$uqBbTn^
zgYhu&_7pEeZJqVCtzQZ!o>2WTT4(h>PQov_eJ|mcYEx?4>f>^!SIV5N!MNpGr`BEk
z(c}{i;?f;ku5_h7Qt$2Cy*H)XI~4cbHwb&DC~;1d<Vz5rw|(aM)o#>`htd>DJ|z8#
zJg8e*&jF-29#6c4W1IJW-xs|;uy=mZSik%5l(5vwc1;Q2aB>}QeX%#Cq+N?j*1<kg
ztTfuu_{4ozUi9FUwv1o4yWdzH$`c9tKx%HJ#l+=-%-lGG3{%@hVlJ6@<KDJ}6hG{9
zB>nNeA#uG#jJg6PzN=(JiO=TZD~v=;4O(P^?l;`=;3#qP#1jW($EkNbY~#-+?lz#1
z<VM#b@iv)~B79uzm=flI(vu=Nap6B3FaGQs*1L(6By88KrKL!%9QZpAFlk>l7%6dQ
zSk|vOTuk^YCn6E={#udD;}c<$wkv~pNhH1FuKoEZ1E$u9)9seLmvntzJjqlfdS~+4
zq${=OC4Ey|!hMvpW{rQUe>$APGtuxILdJ0oXSiPHuQZ+foBf+j7ylMCGk5jx^wHdl
zoZ@~{?my^1!TGXJBb6BDKZow+;Yc60qTl#kv>(rdWB-v^1ZO^GmcWf~W=@Aw{W$Q<
zD7cORU%JT`m+kc{%hCExWqVdVZSfJU>$%W~Y`zzlFUj-yX0ZcvMmbU0eM3G*zp2d8
z@4!3g7vOpN)wg_$e=zaO_mb`P>&W){E#zqZ-n+ei>7A=zdUs6u#(Ru@tC*wTX?M_X
zvm^R7bws~;?x0^d=jr#%Ia*Tb@LEqrr}Jt4X_UhM`2T}jG-dZ!?rV2S@GN}f%-#zB
z9RFP0OZ}xtTz=>;!+oBA9&XX2?W;Vgo63_aRi4z&zsSFcFrrPnm4Au<W89)s+xIW?
zm*W=A+TH!j{mXHSe(iq#75<gDMa#DD|IGgx?yLN(h+i~r_w}!)7RRa-s;f$&D*PM#
z8}JeB+rIw`YIm$kq`GMxk5#^L7BzhfF~}Lh)?ekXBFyd7eShUAcc%s1iI3>!_Wis4
zyK&z`o5)lNR!@~+wNnXJEB^uiLGFsS?*1yxO4n0}tNlm)NAdra|0~SLX+xPR<?5zV
zt`;ig5-IC*rb?w;87k!(pi-`0%E!)DDOZ(Bx!S6ft4gI@160aYrBbe8D&-oWQZ7%W
zT!U50H9)0YB`W2rQYlwUm2y?7l*>~oSCvY++NhMPN~K(-D&-oWQm!(Ua#g96Yk*3*
zTKn7lzavu={otKd;?-6qUR5gbDpQG9l}fw@tHi5HC0>C_yauSmYmiF3s`SL;Au9Lk
zrM&uVm3vjG+{;tBSCz`W2B_R?kjlMERPNPM<zBs1?$tu&UIPMtW~fTPs#N+lK&4-U
zRr=LTrC&`|`qfOOU&B@U6;kO}p-R6BRQi>s(ys!Qex<4OtC>o_`l$4)hf2TtsPwCc
zO22xm^sBc@znZJ`YotoQMym8{q)NXAs`RT!rC&`{`ZZjoUm=x#4Oi(`NTpvRRr)nj
zrC%de`qfFlDlb+USenYf3iM0w99rvQzHhcl+tT@lxixgesLqKjHHDgVgyuAdq8PsU
zZbcY5y&(d1=?H|@bW}<d$hUm#YL~l)FR6w86cC$S338xQ?z?b<Zx%7Q5n5uD5Lu)`
zz7m)CBv$wHuv$RJGIXUQ)GSkJn$S8yGrqwt#BLd<bzx{&E)YtX%TpPAzutmSp?G|V
zZupC8EQRrqZIqtMs4Vk=FrnoqF-kc3Nj&a-*}SbV`Mq(5o;j2?He&|qpRIExon<pt
z@)yscM)AMQXq;d1Uz{1rU1q2{fBi2`=6;h#`eiQYzCveb7OO*%3CSOvpt$SZ{XYK9
z--yq_Nr`A*`hq{6TFa?pe51r#MAj4U$rZNjes8cI|AG;Jr@<5T^35dT^X9bQ%v-<f
zSm9MATAFL^dc|(W-Hn}p_0>~NJ4{*oeKT#6Uf_0Kro8E^rCh0maQuW;NZk8afqk_%
z$kVL;9YvCNG>|BL^|<#HgS7mH>$K1I1^wDjBvor;Z@M@n@9O(zYE8!PX^B%l@`vVa
z?YRkCXzlv=o%Q=l&)4Pm*<9=$GwG7~!<YCq{+yI1A$EO<h~tk?%44KgK)qcX;|lKT
zo1nhU?OpD)O7wy_--i7QU+&2r&9T%6=ShEl>Kbw)K0o|-7lItUMok{rNV)G&aXJ{!
zL&GcaOnkpqPfb$$OsZP~C$34=YqWLJM(Sjb|70=u*XBM`qw%(x8eZI~*YdV6{`=}N
zeDQZS`o!c$?|xl3k*dbaSoSU?c$Z&S?D2RKwRj+9oM<QeO+tfqn20f{TXVn9ea;Qq
zV|_bL1Wot|y-xV;&z2DT3+3{(ubl1oyMq0_<}?2LOm}@R*<Xs1(KMRw_)d^y=!ENk
zLwS={YqHSF_<`Mx7Q`%cAm*X(a5mhp2mC!jb53k44LZa77#oa77hNy7ou4YtbG-6A
z1Lb)Jx<)@V&S?;yX8=vjGzTd!p{uU<yD8tGyRPtiDF0ysEBstIp2Cwj7*2t3JY`ky
zD=*aQTHfQ#$4+LZYSNT*Ogf_lQ#5J%XqW4XTQq6<s%5T1HEH%!4yrrvtiSS6(^QjY
z6V;?SP<g6NRg>lb<*bfJAKet<75-{~Ho7Bl%c+xrYM<+@yw*dN*BYp9&4ZNV+EqEO
z-Bh<`59Pb|RNa~ft7f?}G|O3YnCjUq*K;TjS8bcVa%HV*kn{8$%ER>>%9*NpvqCj*
zc2Uin6{>l&LN#yts(G_QHE;H-KVj_|(_b}jHc{?wQ`NjVK=sH~sOHTsdJg4G)hX9s
z^>0?FPB~vSZ~Cfv(^qYB6{>mDSIwJURP&~<yyB*+d9%N2-gKu<R;bR+3e~yUUv+L)
zsLstUs&lhKb#D5qZL>l($W^Ge&3>wFvx{<`L#juvzw)2cRKw-~<w9FMS8}HA`W~S>
zy+`RcC*yRF_cYztJwkVMkJTOB({vYiweI3B(Oul7x_^75?%y7xJGW=(cP6F!oykPq
zo84P?T#weh)_gVN%`%fx&YSG3JFDG!lfCqt5O?0>MBOi)IB)X%-dSdbe&aDhzws#b
z<QtC>`i;j7-3vWYzuZVYhjOCsc21l_DUyjw<+Qg|9{X_Rv4@qro~?ZKsmf8GsvPxB
z%2Ds29Q91)s1H+KdTZsPcT)a&SUKnJJB?1tEuX5~@*&D6KScTD*~%gBq`dJC$`!9t
zuJ}~tiWe$Be7N$%!^#Qoq&)Dc%KaXu-0#-P_a3f%?@HxzPgO2=2jy~4RxWod<#OjJ
zm%EK}xu+<XJEC0feC2ZID3?1+x!gI*<({Hk?i}TBPf`AMd*yEzD}Q^6^0$X7e>+F{
z+ZoE=&Qbn$d*yHED1W=1^0#x8zui&!+f$UYoui!XDazBHt~~7`<!NUrPdi7s**VJ1
zE>>=Kj&ieem76_9x!DEE&CXFic0~Eu`O3%6Q9gEi<zwe4AA5@Ou?v)sJyiMF8Oq0w
zC?9*W^0B8V2RlbO*i)2)U7W(f9u((b%UPJsm3Q4zdDktJcb%@h>lVtpPLK1h<rK`Q
z@~flDuO6)Y>cPr?Zmyi?=6Y7;Ox0LAOSP2FQvIZ}R43^y)z&ym^^gu!E_Awbp<5^y
zTC_K2s@C2#?f+JF<+f#{$l{9&IWsm>wd6KcExFC~>#G(jJMkGo9$@eO9)FL?U?geI
zNsV&;XG=zuQcl9`9CSA6ajyDU&g5*RJoG>{p0)|~VytOh&&##86ExYF%QBwMSdnpB
z#v=V&$W_8EKJy#=xiFtK=VT=R7G|XWEoyap`oi=H&F7>~XqMje>G)d~HR%<)F$4ef
z3870vXNDGpriLbjdW6d4FXOaeOYoZhJ&gv;oB4Z9G+_pp1{cKr-CZ%oKlN{EaAvS1
zI0-DlbyBbZQ+&klq+l*Gf<YpU;IEK2wvpbo3VGV${wTkXSHs^6-fHhgZwX&_O!r1m
zR+k|I$YJy>(vh;eS<Hwt4!zn3*$Ip{lk8+W#ZI-;>~wn=Bh2^gLVLVD!JcSOvM1X`
z_7uC=ejiPx7uk#LCHBYmQZ$wR)Lvn)v@7h-(DVJO>h^vEO{DKKLe!}KZZwOcWf`rZ
zQ2EyJ`2#0m>l`BNMWF6I_-3a!^m-_CdN}lXv^O5gJe6-<&h?ghKlGM)=XvLQKk_c%
z+mhS7+r2xyJH5Mvw(@nzsnE$Ek>ejD3A_nPwaUK@3Elldcl@{MnLFu`wf-kTPS7F9
z4LSySK|U=k5=4>blrv+Q8LSI_7rYSsp7T@#&N43JB;!htZ!EkBvw{#O(l!l{!v?va
zW2`0+edu1$AyymYGUIC=<lt(Le}~w+_`FM)D}p@i{MeR&eTYE>L<t$hL)GH@ruwA$
zr^Pn-XUA%Mc6In`!0*7j%$1wk$%c9WQ^7Pa9UKN`fm_)T*oH5TD!nnJvKo6F_IUc(
z1neJzW%yl;eF^rJ*ekGq!TpuEZ^z~<67PQMKba=-BB_=9lHT|gsjLZJB<(H8WlcQ&
za<_(Dt|FIPQgXQ^9(n`4wmq@MONdYs^LFm;*0|E@%R%1a?z$4%`_3*cKPkI?#aJt4
zs4*t$U<>bbY3~@@pfTrj9VV47A6qoPiInZu{91nv<<K->-WYIJdC<*Na++`%X9-sZ
zJxy7t1e8+VmJ@<Ak+r?e%FZJ9oQ%)mq|9>qFSBFZ8;tel5|<4+(LzGrhiJh?n<w9F
zmIVc<wGv;St4!}>@CmWWRT)=hT$S+zTob*|4#5Ut3|EFQhFU*9R^zdY+uI1>*LZ&i
zZ-aNhhlEPTQIm+-ZyLMaZw`8ZUU2R$Exim)!0-!bV`a3lGTK-fZLEwoR;G6?GiTBi
z6vQ463PCaG1$x7`34*bd>x9_#oO4{sDaV!dKC6Ry+?h{1N(mG9nQvN9Mja`$JY)ui
z*u|g+=uOGU*Uc5UFC)wz?2o}G;8Rc+tF>sku_2HKnt-OD8E6h#fOOCjv;rBRHE09c
zf_5MiWC2bvv^k(X=m2s-M?jivJ_v*1yl(^;2}Xg@U<{}RW5F!&b8t1d23!lS1J{Ea
zz_W~n&w(}I*MJ^m{{Z*`#QqVy4B*<>cK~_x(m_km3gnouNAL0IJ)ZQBg4kxte>3I3
znYP)5wrOaaU1*zz`q)f;Y!3QR!sVbJ=nn>f!JrZh0b^t9ImbGa+L{qOZ8B-ohBn>B
z%=`Z}LJfS!HBw(2?MxQ^hS9|2vIFpsxL*c;0<VBq0o*?GI@rnm55X?*Zy-C0{{wb|
zkDzuFVw+j3N^jE`p&PkCB=~teExoP+TY6ffZy`Js#XwQazkzT<{sVS{kH8)PT{1$K
zJ_U6`24gk!(i(bc4ZXC6URpyht)Z9J&`WFRr8V@@8hU9By|jj2T0<|bp_kUsOKa$*
zHT2RNdT9;4w1!?<LocnNm)6irYv`pl^wJu7X^r;67qR~U(8fhQ*3h$R8uYA0uOc3L
zR1H0<h90$(9<`GmwUZvSlOD7)=tpnr4+en2pb|J5w<}KLGFk7F1Lf3esq&2l{gk@e
zPO0u-K4p}q^~A3?do22ZzW7zJpW-r}`z=@p7~#ze;P-&k8&cnBEo>*g_krjD`2e6(
zkh<Sa-EXJvw^R4qsr&8J{dVepJ2kL_8rVS%?4SmAPy;)tfgRMq4r*WrHL!yk*g*~K
zpaynO13RdJ9n`=MYG4O7u!9=dK@IGn26j*bJE(yj)W8mEU<Wm@gBsXD4eUVEz4=^P
z`3rj3N^ldn8T=C50&WGXz_X?mw6YbnvK6$lm3`5q**}1nz#qZOe5srPEo`l{v6a`J
z>kc3n6fxd)0>uED#wqV6=nl=K4uU?+%*sJO&>su{gFz)2&rD<jG;tp8`GkFr=hi?I
zOJcR5hp-=}-kR8njD~K6lv!9}gw$D>`AJG&t)c$qr0`En1Vn+1ZC$Xtf!@p)NK2!2
zEYgz?!7lJ`ApFz+fZgCDT691;g#hOrQm3`lX)SeHOP$tIr?u2+Ep=K;oz_yPwbW@X
zby`cE)>5an)M+hsT1%bQQm3`lX)SeHOP$tIr?u2+Ep=K;oz~jI*eA9KbOObo1eAg@
z&>4^~+ZB*E+a2@(JwY$f8}tEvK{==Z{Xl;(01O0!z+g}bhJc}982G#~cL`xm1*d`k
z0jGmAz?t9&;4E-9I0u{ymVzIGW#Bw;KKK#109*(z0vCfzz>mSD;4-irJj)3V&w(}I
z*I*-lo4_03E$}z+F8Bv{FZPLNfd_mLfE?OYKiXJ-FaQh&m0$>MZ63VK?(x<G1)-%u
zlc2|Y8f_u6L;ZcQ1AG8Juf@C=+XG$P16|w$UEBj*+{3J54>WKOG;mK)1|959ih6>6
zq^ds{00x6fFd?=km`0dGz>HW8J!7}bae1?q6%uad5t#Bdy7ZJvdP-${y;8|svXZ%E
zC38u78+SA9B;Z0+(wCAU4#A&LUT5M7_MVT@`*|O{W83mHnSrM-VE0*5<}EUl7RWxZ
zwuCU~7!dPjG5uERUZy5<a?><4JTy8qCR8078#*{NDKtfS1RAe-lCwf=S{m_Ya+=8L
zX0bWJ9Lp)#hckXoG-J*5(DP;l@9t-MaoxrA3*E~JAQwnEn5)!WqUI(w|1PFIT}_ey
zSTkSU)76}-<{&jkiD^z!_X;&#44Lpz(x4Wt;fCj#D7oxndcpZ!&w6@`-C;j~f7-_D
z5*ozQUT9J1l$5+oCY6?5!0GIibEPA@^{l;?GeIot^mj3jRd=0tBkpyq4lQBjUA#r(
zG`yWMlu)b^=BLD77?P6CmKgE1wv4t&NEcq+HgrZZe9+ntvrf93@Ynh2ewuH*J>D*F
zJK7(%U~cl(doRP8Sd0BM+|dX8bXN1Lyp`Uy-U@HIcM)NidCTzK?w#eGh6aj-xaY%(
zU4|}<sp!>M<c;yFxEh3Rj~<*eGKQE7HI{Pt3fbJBPsr9lLM`K&=5Rokc>yu6<<zh`
zu9qRr;GW&-t>DQ`wuY;P_{*KQ?PlJK%iC@@dh_9zzXWf5on1q?C+#CVqv5<N;yBc<
zws+cF^n|mk?G?P6n0W)bfhc$4;e3~+n$j`$O!)OD!B^RB=Xzr}mu!rkYiGc7xrO(<
z1{Y?O9cl*<=VO%d7}iPFEK*a>Ahoi3!Do+}XQ}y+ns=)CbgYEC>ta%`&+|R5HBXDb
ztbH(9G3i|i^N@yIrsjOTTP1EgUfuVqd4ZZYs@YFN-l^uL&?{>WSNBzNm-I-Suf%dO
zWj`2gPJQ0iyKjq|aYg)Fse6sO?^d&)nj^$C55%PJu2rAO>hqeK>(qQj{a0zsr)xZ{
z{q$Y(>@p40NAI4b{;cru-y^Bwz2e@f{;c?LZ&LF;^>NScQuiP=Sxxd(nV9A@byul5
zN6o03qr_xhCLt@;oUT4g)ZI<ZE^1Cyvy++urU(Cx?+@rb?U*07W@h;V=8BK<S8iVC
zufn{|Uq1vy9uk~9n`Z{9^k<Mg&K_q5+aK8rp`oknDl^PJY9BRK_D}XTGu*EC3e9Le
zbLR@L3n!3Wsd9~<c~iV8<|@@N^K*K|d~<d1WbmZ9CNzjXf35D*okLo_89*a6$Dz>C
zAt+$zn9zw(uEn9#O$)fBXPdU6^FrrASA=itX!0^nptMk8*=an=4CU0lKA;<CN1<Z~
zvk$8op+6E{#zR`Xny-jy<x6I3H8z{B?x}h=oi}76X%yLE59EKnI2kGCwV?z&?hCbU
zPE7I>%6d}h<dhW2?qmx+PSC!MoR=i@QK+y<Td(eU$?$3G;2GM`<AmP?|K7mc-i6HI
zT_g;fkV?FaRAW67kEi{|;C(*^uX0t8=CAax<$H$Z@G+P9XTi~2<S)dY@6W+~D1TGo
zbdEtrG)Pg7Zm%BPFY^oiJU`oS&3n@P<|3KkUF-e8tMhjI0e+i^`DNa9mVcJFQ_UJ;
z8sxoAOoKEI?hyNFewA0_FY-3y;_co>-oFrYk@uSSlDE!p4a&SV-jm)V-fDdB<S7^O
z7P!k-dsp}qyi4KFF7=jbI;+S*InNLB$9QMLeLl%s;GIOO%Zcwb%(?u{);G=YCQClx
z_@3mq<~?_M8wtC>pN}~gDcw;2X}H)=62ky=I&~wJXL%)F)XOCWbAmK4)4$tm<v->%
zr7W-YS9+fPBuKNh*gO37_C59G`w~j$W!z`+_Oqz_H+gyxCAY|K;C!tY?eqQ|`z$_X
z{0*{?OAC`)w&`k~rZxV&x<{#di@Gz_tWcj<WENtpygM;(R`UWi+pAfw<`Ol-YL3yT
z-qjeQYG$iXjk?>adylt~)^(Peo5bWuE=g5Wz01hRUCImdX=m!)Dh)Ya-77TY>FVyL
zVV0?RshTJ0-K*4mMZ>gI_eW|jQJ+F}?@;%(`qUovd0TzDskugd7ODG2HOERG8Hc4b
zMyPwd_Xz3Sq#-w}xmH6?R`+XaF4G*XQ~%~_ayl6?T&s6alDFGdF6G`zV%x3$>(oDR
zcimIYN8OqRvr*DuYBW9PsC$RH2dSB^X0Do@)EuSecr|CM*-Oo-Vj5SEmFhEH%{(;=
z)$FF`P&G5v3@|-28dN}G4l)y<^b`5(#~kov(_cq`f#wqa2APK$2L^L0-BZv$84ZT%
zXi#Np_#3Wc!U)^J=9*DDGK{g6b_i!&9&Qik#7r3<#_RZS5a-BUW+v(=F-b>>$@VGx
zw3(t~#WZG=@0*$I=h$gZvAY;IzR$SP)!eKj#wr~#ZqpItcGX69hf2clRDEN2c}ICi
znY(o)xkvSK-K!b}@6)fuRwIu&)!fhbVW*o1_$KU3^AJ7lEc38RtshZI^`rF0i_K$v
z-F2CH9O?8=%@Zn-ewr`0t~SpgdA`*=i*)cl^K1Qf>NoV;$ISEo6MQxGTa_fQ<IB6}
z%<qsMuQe|qF@D~>=&$qFnLntk_$8GL{}E~M>*i%-zke~WAp3p8ys9$Z^(wRdGgSFw
zvms~_G%*`>B>bzXg7`NDj0kG)&z-oxx19*TxBr*DmiYEYBCfstzn*KxGik59x0be=
z5gHsiiZT0~&@xjJx*&9c=^DBybdl*6x+HX|=^k1hTF$!R^3dg`cj$`H6{b&UMQDZT
z8@eiVl_?Kh9lF|7gsu%;%c|-6(DkN&=*G~EW<Y3VXcgz?hFE18=I4CD$JaU;tmF7<
zsc)NtHpK;{rA1Bp_wC=mAjfa#+cy4Dc6HrSJ7NCNpsFh9H>d8EIj3KHt(|+dx8l<i
zqN^7!ym9vJw-cbbZT0E9Ui-S8q@3}b`S%K9W|q~iN#D|vlG38IG{0Tnc15KHO&;m_
zQID+Rwn5wC=W6n53a8e6IL%&q{`r+B4jFP{-2jQVriOH}deanUu+A)y)b;I?ot2r^
zBr992BEN5+eih{<MMd~K$NanJeZQjbh{@-ja`ova%$a}GIhQUt{nX<x^;S%pQhqSf
z?J1+@%(W*~4;f$i=`9ndA2g1V9uV8bN@Asan-wZ7DXA#$*N?a4G$|=5Dojhu%FNCt
z^8Pt#X?E<CAB-A(_Vj@>I%IYn-*du=g9n{3zG7-|X7TLwL#|t};F@W@!r9T12|qsa
z$jc^n>5|#CFXbRPh*A#CUFj0Dq&%&tlt?AXB!2#iW6v8l?7U-_EShs_|Nf`WS>&yl
zx?=9!tET5ozIf)$iw-7@#A072mKIt=Sp{th6!Y!ex~FZcx}A1{w<52uHm~jlISEuk
zuhp`b`izI3Z;z^bR>Dfi_wwo<Cy?g76?vy@8_9b`QAOW2<bUGyvqz8p;mi?-bja**
z(11ychYUXH;9iGxxMgkl=y(D2?U<e4*%d&3hmCnLQ_$I^hjA#LdTC*O+Z18WkJ`o2
zXx(yeMcqbQ^63e7Y8`8PNxeCr(7x6;p`<n7-z~Pw9*ci#K7%VPDebTIQbAl4=eqLA
z?Q?U7bsaV&8X2A5yL;=d#S^F6Ep@r&)B8w1r518|miZ`cs7+tnw@JGqzeyI6+sS3G
z?I_tIsW{)BwX<%Hy=3Kk@n`JgJi}LS@=O7NZ9md-QC=d(8Qi7SaJOA{c23`Z{rb0)
zoR#<MU)01e@=J@T>o)Vtm$&NJGHBJI<?`~V&yl!4E4->a@I2nPsQ93gl7ouv<>dXv
z(j&^QsGD!EzoP7j(z^0^nlpJrJAH%A=}X&`lC$x63vH(ff%U_Mb(<!*`0|$Zn%%?R
zO>Eni^_bbSZX)eZTK8mXI77Y=OsQjSg{6r$7;ory)WkDJk3M6fGsk>y@Zj%_Q8Qk>
z)2>;t;JQP?6E8dR$RAH|)l9)^d)rP*o5$0teUwg_?3Fj3@`E!@UUu5?$1OZzvA1H%
zyg75~Hrc9!4w*Szo*xif5Km(_V~Y1m6KO8(;l+EUrn*V8M~+HKqYWk>pEGt*l}mrs
zDdV#btICO_H%;%{deZVlf|pOaee#gBnLnRLZzVVLe?Bu*J}~5m{U-5z>?R*AS#3zI
zI$A?RNzKY5a~B^u?a7kIS6niC?%dgzcq=B(o^)8#y65eHx^;H?_z4rMsJmXY)s2)o
zvO-CJysgsPOOtttQy3vIIXPiZsDe!&cVbC)r(-K8&nfI*aBSYtZoQ{hRL;)J%$w48
z^dTkvbB-+@R@V23^nqQoyY!hftXoB4Mvs;yLwonEF6$YA^o$<Zxo@OJkJep=_w6&O
zJLw41RNo^<O(Z`>6$M#EZFa4<FRu4a&&&JtB5B8SX&=(c_*OJjNI6S?((>)6&Q_is
zRCe&t;%NEwUcF~jgiD4UoZf!mF%#^Kbqi-5*QLvGv+PxMb0-`#ko6XvC}THi`SA&O
zN}uqzY${xu8OaK=qV1MOH`4N#3^`^9|MpVt*`yMFl<P}87w<_4o1Wyxjwb$N*A^by
zD@gCy@`O$&^b69n(+`ba9bMY2ZL^?RX0vmoM{VeLLO*+X!lox|EFDwIf1U70+LAt@
ziybJ9c7ETSc&F{(*Jn(MzoSXpb&nS=Y1O`UkdfVTN%Zk`g=e;mv<+J4wK@|n(a;yO
zOFMQf&3>`&*}A)5Yu_gv?$iD?Vh)ITH8E#MIX8&8%?r;LE^J%WF32oty)gQ`ZEeqA
z-)T%I{@2%?RVN(0a-MycXZd2bZ-p(Ol59a%xxJ|FTD!dNbbD!A@7TPypI!^q@k}M{
zYK46ds#B&^P)4i%{dA;iQaaSr(WTA*W9@B#+p4m3QJ*7Oavb?jmSkC$W&PQbWm}dd
zTk@}L%m0q;*p8DpCUKm^gx~}xgg^(HPN&l}L#JtmrqdZZ)5Fl|G)-|+Oq!QrQd}Oz
zO>r5D%cZ!vc@)Fr`Ehwn9+O8=Tq;9R6j9!{_CDw69LG+l?+hgV`Leb5+Iz3P*4k^Y
zy|#}OEtYnoDIZ*Ad$Y2$>gm%$QDZbVSyEWg*c)i>ayay2<(6>mWaRGe$Gc5sEp_7?
z%z=@HpxM5*+!mdTq~Gpxg`J_`i>B)K>I9Cu#jH8BeFZx#dU2X@wa*B>Yc(=;N!+WF
zCdMM0O)z^$eWKps600`X?VN3!OEiv$-2-ivQ+1(nlcy{qUV4Ad9sbGwiTjeywmm%^
zJ6me1(;xWZwakj6tuw5jYMHf?PBwMyXl~!p5>44H_SUM{WJBF#qPn-#>{@4PJFtHI
z-nPmTTS-OBovGA(v)67bt3*$z_E%X?p!c9lWR)L)no|a^NYVe_&FpL2(OTP6DY`Ih
zuJK4{EEw#sicLf|n|}1*=)K8`@|m}<hiSlSgF?{nYTupQ^?j+G3+M&i;a2y<YOxqS
z8M{K~fe8Z%EEKlyYHOQq+OR`RKU+W5Qr%USU)J-b&^y^%GZHnm9~c|Ex8vTu#=<pS
z^R1=DjzX7U+qI*98smi-5iH^oms`H31bP&U$^yn3!?K@GrP^W@zTATH{9x6=gTh6-
z{(*s>LPw6FJ$}%cPQq=Eaj{`nauxoa?kxCh_{b!hm`x;oW2O=6ldKrXHfAElxU4kj
zGQykWS~36C=ab8Qd&k`YkJ(;XV5_Pf4qM#0&mMBP@sqW-sL&BeEQ}Awca8emEB)>M
z_*i9oeanV$Tg#%}Yw^1`Umb3DC++&RRb`&KT)m~QCNffM%ywE+)sfLUQ*NHmQ5I-y
z4i41|&-lASHA&yP?ogLMeWa@09r7d0s--N_j$tCJS9qDtKFRnZ&c39!X%dV@bFRR6
z!*IVVo~#?L7cZq>3&gf;OTQyT#>XO&^ix?kZcv8EtS8}fsltvA?x*b013+=_&6f29
zLoag_hYP$l%D^mJ9>tR7G3OG$@t=Cx``khC()Evo$gAlkA@|Wo=o7fR^#VQtKN`&d
z31rCtebVM|S#&u@gJG@7<rSZ~z7?;dI|LX?tR3-P%$=JgP>e(<rlcg(Io3CH(&t4N
z!N#8PKwF0?G#MNia2@myhg=7Hr-Y@Es%WCFzKM7E8S1YPd1em1md6b(Skx_8RRf1w
ztJW(+$12l|oU|gAP{-|ABe^X*T3dItw9K`&&9%fP>+2_DSagvIX=S(FJHGxvo3k0L
zeP;__;apC6g)3;oOslR$84G50gAa=m86G7uMT6nr$OKf2cU|D5B%~(mYsZ$vSCi#+
zOhCDv>94-f2r1SZFHRz^LL$=oZc4zc&j^!PB348~I3q`dXGG6LlnaxT7n1R{j38Nh
zZD&P26DBT4?e*R-)Ph7B`#9^9dUp91h0mwGuLk-s$5fc_87vo;W@=mY24}XeWgvYX
zpZ7xI?Zf9ojHlH02s5pSRd{908sWysd+}+v#WfgjPgW+JmHl<2L;itMvprtb-t3N*
zR}Dw}{iZ;fy|gkJbcdX|dG2U+bhylFH#^#V<&~vt3o4rGv6Rue3$6Rb1+p<1M?*j*
zVoWMo<h|90sqn~%-toi}?#6syUaqy;G}<Bb+Vzh=?o3|@x91uh#<i$v8a188*%)|G
zUK^|ivWrRUeKs`UN_5l>*O8?5kD0b?6B^U+tzRFF3%k?a$q?DqSc&XJE)RUHu~II+
z>^*35nDqF2(0yK5O26&xcf0$&LOkuo=WtRiK8Ch2*P72|Y=4!d^8AzDt!vCiJ#3S$
zA^Zdj#k^+5{dj05w`i??O|fYj^}punaJxG^LQ3_MS7`S2c)fkT^xJ3?G63gQOUz<P
z1XLD_u_R-$<exd|orF<DdyH}S$ur)WJXe9fz*#W;?WaeJ0~Sl5_~?~yj+fM0t+ge`
zX#{R~h2Nl72aTe{42gthEb_&a!;+I@%dP7w&VSSUkf}URZ?fm^bH5IQU@6zB%N}d3
z6|Sb=bPc-QgD#=<`cmaU7<Hpg#3wIltr>?<mHt);W1AN#6kc)`rpKHlN12a6H-^X&
z_*Alt+3j>{umawx!3UM{DGlDG;Jq5$uHfSu+@Rq78oXb@*J<#11)tL38G5E={6>m=
zA4>TJ8OPY9bz2pDQiC5<@L#Ng|5Ae=Rm%TLgFmg{e<kBYk4~mDkj=&o<E^DDL+`KU
z&oO#4_+M-A=ahE-MuTVC|63Vn?aSjD$Y$dzw~x8cy%87v%mVhQeMJHjrU`Nv`QSF<
zhDMY;F&XcXQ0}R(DHF+m<c1^374j6@E%~`V#hG+{F&Oms6o39Xc@b<WcUf7!Wet|T
zj#{Nzf}U_@`I&u2#x!b&42-d6bT_%JghEe!gQu{fQflVzo84G%2ZNzryT#V-;!TO0
zmb<lx!>Mh?`6G<;8HZyeuzK*i%n9tIumcs0kZLdsu^oWR1U4MLH~EZ$ee}QUD^ltI
zfpcuQ;=cVBJJ09;pC1a39TyI_d@tRqc!ECp1TC=|bu*Z&G2W6mjP)<$W(Dsj9HRnD
z5~ug%b#USqA9f@V*78nxRj(V#a#*MEy|uLsZ(8PiJA3vehbX+MalrNU^-2!7N0=la
z|4gCI0cv2(fHTGfNO({=e`B8fe+qtBz)S&ez7Zs!9dJktl;4k-7LLQ0$HtZ8odOJ7
zR-SNL0US@Qf=_F3qKB6slkj=a>1Op%E+k|2v{1|GWH^=Q_?V2}NRjtX!50K*V5whf
z{IG;qp`J#RH{gaMD+exkkM#$8YqZxcV1DTH%kWMOPW|NNQ>)<98k{5~FF&rqNkVeG
zUxU+1=J+}dPW|Wjn2clP!*8kJ3-Y)y`biS<@{@9ThLa@cc&`e-q9X~(@n5L$_f+^V
zH8@E~UjA1aoFo*-|4PP*PByQElZ3=LW4sx?&}#EoujHZNJ~WaOvI~~J``A94%M9UJ
zPkqRR{X)hwYpW}l#06wSRd=znK(oCuNl2jEtPPBnstvZ{B?qqLi<TN`_S9FGy_IQW
zPidWV<u)pt%eWk3To;$PX+P^7;~K0u&P~t5yIjCMc(TtJu85|XH4sRYs65T-55GKG
zI17KS<Zu?RI-Mi=^A?#e-(c$)9w&_77$PSKCog0^<71qX0PjR}S_UV6<#<Yi6Q6N>
zodzd9<M^0@2Sxa?75p9rr*<>-Pit`EZ(dKo1}FaGcrW3Y8=`+iXQy~#`12Hp0sWw{
zoh2(;IW<`3IS+N)iyQqWTW(H{+2nK<6tCt-FEV+&!H_ZAp)>kzrIjw5#ijMCa~UAo
zSl=kunh`vU?Jb+-6nWdx2aYc&xI=^APk5Gyc#bSY2av>veNJA&1m@g>zoc@=PhSL|
z)ZxiV^41Rz!(T5P#NRLN`p58}GhIk-dtvbyT83qv^)#DhSa#SKw;v*UXt(^43hgA6
z-MRmoQP0b!7<w6lZ9yDFRTf8k8F~#hT+@-1;^;U-zXSTYj^>b~{e+U=BI_jMK#q>F
zvR?sJw>HhnrhvZ8>@i+;lA%*KQduY1_;GaM5OF~5jd<1tj1tbsB)<rpUpN#|jD?3i
z^}bTQ+wRS*!$5NxSsku~PqI2dAJxN0<2YJ3Wb@IWD4K5&ry=)c9ixO!JT9{_!nqHd
zVXo!oq5T|;LK<;n_B}$cGV^MDLBZ!W<qu0ZW=430%?u18P7C;fq`@ojKV;Lml83}&
z)dk?^qvMZ<MVEmcfry58BER9>7Nk=WP)>CaEpAQ=t3|<a|LSW*bCE_*Y059~@;AOC
zoXsZHQ<aU`L~YW)k{zJ=)M5G*W(BKMcn!0H&%}z10az+Ui4vpLW8E{EKj(fe{~aMN
z<kZ@u!eaW_dHce*PND$(zKQi3yDPNODQuM~22Qet<6|-o9gdS81z!+mmGTx=54^st
zp5Yboc0rAkEaK&-H8}A+$9rWQvkcF?g5M)_sp=;>dHFG=d`eS(K`sv)N?p%k31=rm
zjQ&DKf4jsL%kfSPPW1EgDGg5abG%oB)2ik8xCW<n%kh2<zEi<BY4A+D(+ZxVQzNCk
z%<Y_hvMqT1lS+A<gfUxz<G)x1|D^^$s?_r<4Nf)$ujj869Q3f&N;ugNSe1;2`Re3!
z(HiHUTgU!g&veT;^4yY7%$F6=XqXjG>2#7#UiGvt$`thKXLjNTlE#MaZ^fOQDcnf4
z!}70#Yzri0^;UwFlyURwEVdGXxv3?mZa}cv#%=v>KhE3k9%#39`2zSUzRlNIUMfs<
z%;9A2D*jeD(=S$RuoP~uduSMEZbK7=n`(bBic`c;KrnXis}}yTZ{%m`yKtn~yFZw2
zt_(r~HB$^ZR<)T<S3R=6&Fq3Ip{3w2CtsDYc=z$1p5u4p6pHVJ=6id0Jlxjy@YKnj
zJ5NkXCW=$sI{Mh=%|9I{eTOp?aSE}~PDC`Sv^jjGIF5%m1dc+f->L%*-q;{N80|?k
zMhrPFb4zVgJNm3TgOtYHom1~y>&z?kc)~4fYo6M%{LmCqh*LqnkAGlX(kTqG)x8{V
z*Wkp}y!@mFr`5;tUIoXCtU8>%Nce(4+K$dz<Ls=}3ok$Qo^07=$Ezx9_NEaS_tcmB
zM-TV%L)Q3ow64J-DZDb(IKa@gC+)(<zrKr~v+j6ovZ$b@u88ZwkJJaq7z;)dlSKc!
zG!}ftKvD}|Fo{f&x@1lIWeF&J!^-1qoJn5na=By&PLhJ-(}>Z^;3P3QJ|^Qgf{61b
z3Cr<&gdi^uU8Ker)Hu^oR6da1PxY`BE`M%b^SQ&)=h$g5qt_zQ3%w0`IZpI)JVo)c
zE8x=#9;8!crTqR?@Ou;-r_gNtc>QAvp3>B_KseihT*FJh&(hf<I796vCaHiW$GrXg
zWWgw%Sf7e*bKBj+k-l}l9kb%I#UpKZ?00wU?H!zPo!+!FSU+j14%jOzH*^MjV+GE0
zq1MI2h;n#-a<O@^{ajw_L^w8HPkqK2Fd{{1EMQ?_Ol4mh$7$|3J|_8;T$nqYY%BPF
zx(P}3EW__n%BM8tW#5+zmW8^W!&Dw)!P<okf~;mXF@2%qb25sr9i6JBQ}m-pg>kqx
zV9BSiIn(FRIy+5gGY$U@deJVlGOCv2of@2a&C91WIIU`q_iAv`sT?2I;G|PI-mk$)
z=Wu+T1}Bdu$EP$n>0pj;(%>07r#1KirTot|`11<>7pvfZxeESM1($6aPS1jZBWi(J
z?i`;a9J5B_{E#k6{yd?`k}vvh3TaSDc?2#aoFS+RZxCa3B-dT_;*s=W3Tjv$>X1_t
z;Bwtx=OAw5?U59}!sfeE+G{Px+ch{zabA8>gVTI-yjQ_f)E@<B{b&7*v#1TeQke|b
zEf3u=7*&E?==apSY*hm-UOAFuZqnwnX7(!XW}8^nwqr;e*zw@u0=++CQ#=Sep*^_G
z`?=I#&fi!qBHz{El!Wp95xyFi;hlmSCw}7PQyQH3o8#jWjx{NqW9y1b-1e*wS^dlL
zP7O}=^YSSTPW5wqT!WL8;rN)0Llc~1QikITSs$s|rFrD|q+FiSN%P3@UI}jm{u!g6
z?ts&t1AGhq;W*LB@o5cC^l*Gk#z7BaMHGBN(qxU0Vru*_(@cDC-v}v|&*Ri2UoNvM
z)e(p!)v&`~9*6k+^Gv=4HPMI=b!11(qem1gWs>3=tvmw2=d(89w3-EF&buGq|KNlB
zA3wVHuDkXg6;B+dxUaKs$x&Zj<WqsRv5~B0UX>;u2w@EHV{0B#lJK}hp=<JByYTt_
z_r~sUo83Fxk3N<<Jh||FL%K<9-DTSR>z#&Q{@(AlxkE3V-gj!!dFs*4KN^(uSqLro
z)cTAEUBY}c!nqN%N<lLeeDzdOAm3zim_2b%Y)fm!KzE7TU6LH|r}nhh^qC9>x53c%
zv%?QO60eAsU&ndEjHAB1>zChu^w*s<9yj&~`!F6lvL$HO3@?GKLGhc#Fz<e(z`ZtS
zjk6$RcSp%D@N|wIac9Y}`0VxRzD{rhi|)ZKx~eP;F}S2n(p}5(qz3<3Dc`Na&xjWl
zyhnwf!2LeC{`DICVFm9~;U{rRP%b~D!cT}x3cg_#e6xb5C~8S5zkpnP#QnTqnR+Ia
z^4ElSaDPT__elv4!XI)%g+HY#e@-VV<xi;a6S`alKdIoLN0i4ckj=&o<E^Iaq|T;%
z?rG(7*90|wN`ps~^1o5x>h_;e@RX1l*FZKKSGj$*Ly6-y<5k>}YEf+T08WB@d@FQQ
zz?aGkMG*%)>`Pem)HPL7m{(+_05E^Ff}fQAy%YpSzUh8jvn%Xqshe0H3|8Fh;X2^M
zOh_2*q~a_ZEt=J#c*Rzyk`CzADk($iH=eo*Tkcx@N_65JzqZlpvs4t@aIWV~W~g<y
z+5}<6$TeSSZYU}#Efv9x<3KU3Fv)UfD+z117qaLoM!W$xKKfZ-*v3c`StkY4Q0$gL
zi9n?(K?oG}1^ebEHWLXcp6gxe&u=L3E<8bjcisN>{#?gQe8V;o9@F}XSamxBygK8x
zUG+ubduyr}YI02{k97Y}AwJd{8VH+~O+;TyOP?nC%T-?*Zgw_CO8Wdx^Kddz|IMyl
zu`TE&>kaEAmm^8x8MfXyj&)96dGK2w;ovtj))htel~H^MS^gB+$Nj)i41YSpZ*0u<
z`s=Gk`3>6ji;K>E2=#k-&&a-3XJSXP`Hm)p`h9~?KTs>h6=L;Zw-2gDr8A;A=rmBJ
z;D;qV4htW#fxw|RP=1ka9HJf;GsvVT$CDbIRy)VLH8@Ehj&IiB&nWmP;ouR}kCV|a
zA>TdZGv{7l=KfzLZcrev=`Df>g$?kg-Xelfv`9WyDP9p2(JL<)A<F#1dYqy-Mg?C`
zdN8lS53?SyxJTrGqj|>3u7-XD_%nw;bRr2FV&_cUQl<-M&$>oNup+fFkcSTrF0>*B
za?ZK9XxCrAAO%9^_+8E0Tkg0|o|_A7ZrrQ~vSy>6sc~7eah&FimzOmg$7#+uE^8Q$
zlV;<%tl2nDnvLVKX5%<%Hjc}hjpH=;93Pb=b{uvWA~_XY-aYd28G2+5#&OcXydGHt
z6V5do$JLtc0@G|9mo*!!hiNvB%bJbjq}ezwYc@tF(`<yRG#m8;D?JX0O%bUz(n%KW
z92AL7yu2(lRXN=d<QUbRp1K-qq1SwKsA`w2QPTe`g{+cF=`tJiH$|>Sh9q?&TxJ2R
zt5Bx+rIt~J07!)}C3x24sq>a6?r2&TKwDZ{7Hg7}#~T^CDq3yX$$i7i0&0u1*Q5~N
zO%WmzWo(sU%$PKVmc#1fIz!Lo%>^ChNcJG_F;*0_VfpQ$WdzGa7R#R7TSodeeEE#|
zh;8+FU!m0LoUzT)Sq4t2ab7kIKJYNw#&8om!e~Y$FI#W?96L!lqZFLh700_ZIIRbc
z4{2~(4;&vQ95E3rQW){ZJW_bOEKUAhV}*;!5iP~zl>A!)hwq8k9yg>SA^*Qe1hLM%
z#$7SA25Bry>{eZ7Oi2dtG1{ydJCZ#d@6+HU8#vx0;d7YFmvx7MW4{7EO9^&1mvfLk
zh*wtd1>n>!=|?qwSiv0{{C>i*8!}V<O!{+=78CeBYbHdPJbVZyW!hXF1I-oq2P_U6
z3By<%^h-oR4(dI_R>ll|GGw<=9CTJYe*Qp(CRube`3tU*WRha0yBYc(Xey+giiGws
z6xuE83hh%QbUj0f^FBi^5*h7N)r--W%5EkUR$NxrOSD6g&<Tc);bfP^ZD;xM?}qG!
zMUshroXEZ?{s#M4tRb!y6U)wab<9uBcen>VbwQg5Uy5Wu7w1{6dHEI#3A?sZM0I-0
z+9m0x^A;Br;lF}nqKVpJ<APi})H)xRC5(Vbdn}34p#wBmb0~2HQItBqmz;A^y;6)h
zAH~b84mOJ5gdijoaR}@ZaE|QrB+gOeveqKbQRA}D6Rko!EYUeW?O<a!$Et&j_mo(5
z^l2Ee>hJ50pk<s}(FyV*WuB)9_9a+K`Lq|N5v2{V6vJLjMv*Fzy_#$wbuhaak*prF
z3%%f1Ubhh^$S2tea`Z+p>mutdwTa$l9h25WisI%aT4*=NaJ(sy%DSS9OE^xJL8J1o
zh{T)E`d0O+!}KZ4Ko<J&0a}NjhV?)>TvmF5PT-K)HIhG*iOCoG61HxkCH+q^TSxkL
zQglAX2_uUf4z#m}#}2J0g;ShnhCid=qcV;&XGHTW_=1dsw3k^u#6wh%Bny_|Z5kZw
zfb<i}Z&u+Kn1_JlJu(hXdYQG$@p~kT67-{8qLbsJN_og8Re9M0WwJ?yGYb^s(2V}x
zCBB+fMOid)E3G=~k8B*so>^l3!VUy<wh6f_;z<oodW@Iv*5D*tIo_ke$v))xdJRr8
zn&W*MoW`Hy8#OqMC&xD{cnbNUGUXQ(ocfh1KcT_XN<B|Xc$ket27gLjp4oxC-4hx-
zSE=Wuf`cAr2U2;m19RE9YUv_<&+8jv|ITfiCD=57{#o>DcQyLBF~jd-t#D&Q9OuRi
z?Xbeg{CWlX5OSdz!5;~B<jl^Tbt@lB2TJ%|4myk8WGxm9_M{&-M9j8!yAu~jHncU{
z+U#YxJhGwn=eR#&Elz)HPkvD|>=arZ<t=xnUoj85H#XstSX+;Ipki|qu9LL7aG#`h
z*qMH_6x&g@>(hl{F;^mQ1nfVRjklUVfV%?}HzS==SIXA2A+f!+b$g<1q0}+gPWQZ?
z7b24}e$gwQ+U+RY*&SOS4zG_z$HU=qWVmUc><tapOBY_&t?Qf6cmO7PhSq8Bzc3E~
zv!<^hm)67BQDYo4G?z$6+{^*I+99_zlaboph8$;3Zbf}*uwljfH#YMm9flMlV?cv5
zr(*BmO}BBd;%Q}n&a8pIU>vAk!D?K+;y-7ao0nIwn9rG|!12t=PEk*xKRM1gT-s02
zO`}_!b4$Aj7W0iAuV%&so2Sm{Zk}!C_m65)zLxrm;(T*%ey*oXbrp#pbc^l#M~RE>
z9Z&5@=2=tF|3)J=5g%&qCb7|ob2*31AY6W9U6Ovljf^WyzSb~Yk*|=uaV8g;yv$Bg
zrX`f8Q%>9m!uloLkbTc0p}i<Q!lVr^y;&+f$7*>-Doy?aUJL9YO)ap8Pz#}5G@`8T
zKz1LM=GGD{kgs7os9QeFKI6qK?_+d^8T~Sy949%=@ouSQj+0#ExJ;=R{lYyZ1z*g%
z#QM7&zemBTUFsRHNA8&yeNfl4K;_A<0-e{ykLcWm{9N+A?6AJ6F^N0onKN!?>(Tj{
zOV2K5?+Nslnakszc)X$^-cV5ytcXTi2VFCR?fv+fVU?XGryc*Lf|d0Z4p+UuDjsh1
z*0pWkcKw>@*t&bTInYwy;C2Pd9KLu>pu-O?<u{|gMC2tra?H+v+im&XC}uL<bU`YI
z45ynfNip+@aR}~QvG|XAHY203YmQ2sgS%K5F^(@vGeR7t#_v(^lm=f=@Of}ark=wR
zZo&xrS<C^ie?7H}k(cj)!GlHpq-zEAm-p35Zbt20Fn$|Mb06%0U4Mby2)p1sBwq<b
zkEYS$S;l)2)>GNHv>caxOB^Sj<mF}G635AQ;JECw;W*h29G87d9H(`{aoM-Tanh|E
zmwihdC!XiHd}>1Yiz4wn$2Uqor{(2kUl+q!6bdi@xVpS9tkm=9D)<wt;EySIitgAc
z^~g5ea(bAr3o{E`G>DJV?n&V8L!V^w;~EY8h`5TX1XdY@v+QDCRKBMtR^!CoX)X^5
zZ>Qt9pQpaCm(x(g58Hzc4nEIlhkW-u(n&R+8eBF1z|jw>yzHCf^kSYRJTuQJ>W6}}
zezX3?g^Sn~RWg}D9y94Ih99`|KB^;ug-1Pgkr3TKq;AqZ;yPC_ENvHQo0xPBYkR8N
zGm?~=hL?_RIl|V4lwv+Q@3JxF1Fd$1k;Zb_*5v5qp`|O3wy4=3l)PVP+1+Xt)FX^5
zk)@%vwmxaUO46UT%|`h(F3BaXz&-;xL1_mQl~&m}lg!KUByz}7JshW1#>;nWa9T|q
z$7?67JiC*~>W6Hm9YEH{E8<BFPWAKh-5Q+g=lFUJPMU(_qiURSJI5EKs9#PGtpbiu
zsLQjR6UTcb+<}QZ$mnn4<0eH4aGdJl_+|}G^l*Gs#-X`ze^SAj=E8V7pm){yVW!c<
ztR$qzd)TKI;_QknW?FMtZvmdYpjZx`jF#Y>3VT?5h0@D}cFxw1)wd4$biv6$%UIxS
z<F>ZOZJl={^EzvPZu*I{+gn)KU-5+LFWT3|wtU!jM`PDQm(SH+8Q+rre-n2NcF(u0
zA3IPpZ0mQ_;CQaSeAqV7arWWy2fDy4l1+07`Jdd7`EUU!r~2UKo3CNJs#dv#tvi=~
zclBG?q|<G*2c=e2I$gfb4^NJC8QzLRcwtI8gJ<{qX^pTu>yfKDdR(?hhJ~m2J%9Q7
z`tH8YEP>taCw~kguA#kTyMdkSJCzz;N+n{~^;g-6{y1oZeF7f_d7O-pA@KKLY)F=#
z1I;Xt2dE|&iA*NKPYo`l@_=2MF9u|@#3<zSj#hx&;9R6}<muCb$=w!?j9Lrx8@m4C
z?uVONgP}WOrl!qNp>{Y>-`u%zb8%Tq)Ws8ee3)0;RTB*%Ar;!DQ}-`e+qHbe=(G=c
z0laeD1<xI@QbrGlceqLvofe%j2RR7Vl$6Rh=jGHMbZg#JQ5F`?xp3n^tf+IXl;4AS
zh+yw7q5o<cZ~!4)p!w5hjw4+jp9#q<T4F06JXVy}it&lfl;2{a^W=(IMmUFF1r?>V
zc1n=9305Bq|F!bqM&i>FtCTOmhchz1NnnAHNF1<jLujzJGgdv`6rGATY_Af}hx)4T
zyVI<1T~|3A?U|^a#nylK;mYAe>zqw*2yN(VpNUr1ES~?OX0&nh4rkp+eP7>Qcc&j{
z1ar{Y%xl8)n3uIA87tw6m6mc9%?q6_-;|h4-ht8yP5`_e-0Z7wvq!y-v~#Vapt4Sr
z7p2l2n2Xj0f}NEE@rp;o)fHw>iP`a1Zdt_Yo=>R~r6jhLhhx=c?uf$==K%c1*qgin
z-p6*hgtF$i#FAK2gylwAbHZW(x8ICL^Mx0@a|UD)&?7gSVb1-+tKLOJNofv#wHg<f
zgrh?HE4iUietxhz@0Ik$^s%dXk!V3dLw&(j-glc=g_&?k{ID#S0v)g_<{=V9sSYQF
zuj^_uX%#3(ONqx+V$3m?r@zajSGd~N^P-er0SA@ufA>mVi&5v$=X|Tlv%pVCYsHVz
zSM0;cPL;+yP^IF{Tc42%@fy1=C&yy)JF!}|C#6!hm>2sxa~-<uj{57*FHaf+KB&U_
zBt9r*a#N8u@g@)B0f|QqI{XSwyc8cm5J6wCZL%i)tRU>0Y?+QFcDy6>8aEB}Y%{qE
z9mS=s^IdBSjeC(iW^C+0yI|Y8X9wfAYwR7#<$a~Z6|%RMtd7;rgHv863RpUlH8#hJ
zT`dcz$GI1jM1dwf4s_Za*z0xZI)m<YCKYk2q_aSmH6r7?X7q7XflEkn<u-yWfyuC>
zLyJJMXQfH`YU5qa+Y;3se$gdNzty{|scEvVrmL>dQqtcNNL3FF*qmm|JL&f@PvygP
z!GS=a%ZFStll)BHQ#SMVwZin}g3xSd@Ad|}uh3Rn8=j1hOs`$z5F+VhS9!g&E+7Pb
z6+GdOYVI7;SpqZO;QZlKG6l$dFLc0;3_zd8H${<8bS^j&ujwt%FCU7x&NRlRTLw28
z)34rPYTP}NQ?#aSdvlr9VR5w{7{_s?^T6D`dESzE6kHM_`-F5-rMi(4oa$yaR5XiC
zvb#sI5I&pPzDBsCaHfSf-PpHaeh>jQr6!A^FxP3RsM{op;f?>dX}mu+P^B|1P8}N^
zVuWm%sw=daS^~KSo3Wsw!|u*=7W5tLd#QiCV|QCA9OgWK)03bsvx?ODgN%$+q7VB%
zM3pN``|89lPs~wSS2GZ*O*sq8+x!hf1EaOABbzq%gi@77ff3XC4n!^)^#$#f!MM{|
zQerI)M?<a7)>vbQqugGBZM2X@abm~V*r>HNScQpjnP+5k#K@)nyRnf#QDrLBJGF7N
zwRUu%r@`M{Ug#XE>D*jf<%oH9nVc2&az{sF46TKt;Zkc!i8I+=*<PSGRz&?B>$x1e
zhL>Bf;w*{lHCcerof6&*W}XO8QNpj51pDskO783J*}@vzv9WJr<7kzAbYP$<xh>YX
z&D6YibmRT)>h_!pDag{-wH;=paN`Pc5G_GgmvEkt{2Q5A9+*IG#a@}4b8X$K*et@h
zU4QwqGkq2Y50efyWO}B%0CA07g%BrVCs{74^Gu;~<bP7jX0c(?SLk0C7+vq0loH=S
zLN_S_a>q86h<4f?W%ey&hbroi93EM0uP9$s#N>sk-GUyX+U0k(?&{d_Ag7Pz-jOwi
zY?Eo}W3ucvsOt8JdgraEp{zV#EvJI>IYsKZ*%&Fq!Wmp<Y`O$&MSQ8bdp^;!yQi_w
zYAJ57ft<d3y0WwQ=ri_FQ^&#eBl|l7R-4rm-_>*XgQezQI$tgEp`RvLko10po%Wwx
zBWW|WFrmn~iuR>gOqWAJPuWYVTsD7ndV-;{lF|~r%~5i-G3efq5H6-K``SI8cArq2
zP9`?EgN@G0Qun$*V4b^^a`sF^>%WM0E$Er7jmh36qlB(m3Qvl`acLXBF6>%*{ZLrh
zyf-9--Pg$($t3*COt0faQOzqiA3J9ZI`!GJV#A$YmWE5R`%yQHlojp%m6}^&2e7Q&
z%zBVE0vR)slRz5+Nq5030NwRp*gjPc4Yov{ND=hFTRM7(`p*m~jN)3Hs8Vt{FaiY~
zhqi8gf9qDK@EmTA%uvQwIx!_1E1%CX4K&*T7!0bTQXG>CFUa~7G~D<k{jpHR+Jv0N
zo_RD2dv@SoLH<Sg$tf7qh*v?L%6dFYypcw!?||o$Ems`lf)ET-jO%p7yD%+ipGGw9
zHrrelvoB#vB>XOmGsm@iw{Rf0tgfWM>_|T;OoiNKl?5iDApHy^2AgR}p3hJ>-yvmO
zBP9mIg}NHWD1#xUOMdsJWPY)p+k`Ye=VNEiS~V}NX|<NeN%+2xhWE85Hb;7qhPGs+
zBQ#L6VS*I-$7#gEk-{zvZ6}2tEnTLsC4M}Ban6=bxUF-puW+WFq&XnJ(3|)-3>mF6
zc@Fq@VtE!Chmpbo&z1f`C2Jb(A(2h3HE9Y>NC~HqISn_C-+N{bU%exhu|!=s&RX!w
zEy!yMb<x=0+!&r%^-u6htJRGyy>=jk9Btt^_v5Hql2+Ue8_NSH?W<%Bfc+f{cxU<F
zGJ9fa2LZ_~?o;%FoDNRvn4Bg~wK7zh;nX?f_+I(z%zm8g5}5+z6W|&*lQGU>s4_Wo
zkY&o`!LCA;JFbTB##`#deq^LmC6TM@Y2!R2x)rJ0wBlBu$tf_O@MT?%cB?P%55S7T
zZ?v2Jc@<xRsn3BMph+nbf>MRT{H8U`vXMgSTIVYMdx5urQt-Mi(+_y>U@3jU)>aak
z38vFtVX&mlMn8gL2Ug@`pqTbh%9s#eFE<Qd3XizVj^1E=G8`U@)O0v3WxXv;TU%Oo
zm@3O`b}tT;dhTp?*==@z+kpujxRI_dMD4Gmb}yZRNIHUQ#>SDBGz~lU)x-g8Un?mK
zrYk-hA0CT)QeLMeuiRHX>h+EV{mwj#)0^@jciZrIXWL-3VW`ctslW4qSfD<?q&R_e
zAjKv5^#Sj?iBSJ0=SXAA{&0AIOXCPXEv0jCNCCT)$3)hNve}Dm3?+sHE!e*Zxvg`p
z%AZE09X%15Y#f@;5f+Shnp*ZxZaC1=a$v*c{uXC^S6|<*xbWJZty}j<mX>%DE!mgd
zm@dI3J$9Uc>%z+eS#5%|XHOfl_*uiHg5{fc-xb94C#B(HOW1-xEn6BJx0rB-H-4a1
zpX0pXyyQfB$y|f*j3GC+YjAKLhBm)Fyc6w~khdOVjsDRU5;m|T8~AQ14o-n!B_@<6
znH2M-KwqeG;I8h}?tcHKu0X0tU)Wpah`L>#XlY|_>%Nh7iycFz$j*_bT@&@;_47>+
zEQIi%v$V5$VWGLRblY7$2mAW(@0*?DC(~ZB7m|}+R0)ul=HZf*y@R_ij8<IQhD6U7
zvnlg%QBoAbod*X74tBbF4)hJ&+x2z(u9lWv?ZUe)JCdzC+m|kjt^3!nUu+ewUKLsw
z*RS8-D&o<lp813*ye1@e_4MpY2<eoVn1`kL9W>S@tPiuAqZKI`Vz~&5@;pOMk|OqA
z6S5KN^{xHFNZLD71Fn^70R4Yv4e+gnl^Se#dx5+L%uh}`Rhj}WaflXWV<DK}C9wC_
zs>o7_fj4W~6!Nait^qD*=&Y0Kr&Xo6=&+dBYRc3P6-V7v=U`OTFAl5HF^*_u43g-P
z&Lr!IFH@@7S~M5vstlCo<dvDjNg>rb?9X@P=tp|f7l{Wk{fK~HT9&68839$7ujZZ_
z-Zs+mr1$6FTj&`Z>sb(%S_V414FB}O2iKaKn(A+=h0GFI%Y2t8Z&IvZJ>~k|&%J-y
zJhE*{s^#+K|HF{#>~D8AG&LnIk>>Z3j}yH>Y!8i6Q$pr?p6Z$;kh0;kNr|p$ny?@w
z8|RUR2K~s~E%Ho8eM5eGsKB`<C)abev+r54_SQKkP5B4HN#@{@e7E1hr-Pexpij|9
z+}x2Ug96O>ahno(jx{;P5>v#f=sfYYzD|~o2Tq$5?U2}BOUOdKuw2yj;!u-&66Ibq
zdrG_SQnj#b2PRA^?WAAgn=v{&wF!T2{>-bR9io?=mR|o*J}jm4W*c4^`51O7T)`@<
z8B2$mA^b$vBiVwP!2v@gkO|0Q69yGCLF~MvH$}&^f?n01$YV7F!Sr`g*`NOGFbowt
z5pqQ78I9n#mG#J8_xbwu;6yzvFALMPlI_J#hgC_4m{jHL(&V`|G=QC}V8`YaYtBD*
zh9&$=e+JuY+OB^c|2flX93{R&X+Mt>hf*FLyf>uQ6m<AZn=(mAlaz*&5vqfWP9Z0?
zt-)1SvUs|ouX?PdWqq(WdU~;>&egEZ)U~I*WlOgeZg9`{rsA`$t+Vl|?|Cdv(b~PG
zrF~BqwMhQ`H?StSzUTIx?0CTf=bm=*uzy#(uFh4J^u>n*4Y8u)TvKV@(Yh_B;LMOv
zk^cXBCjI?~`e){IkjeG^@gLJm5GGVl`@uZO40=mL$&GG0?^oq7rFc;x?(46p=;xV4
z*?Am3=i#3tdj?)*O%0j4?8sBPwkVh7DXpSRrbRi+GMS?Ox4b<*UmwekDx^Hgii)HM
zk5MQ;NwhwT9U9KSV#TB-Wx+|0FF+$fUK@3$cPPa;l8qW|YwJ2K4oWua%-5Sr*6tH~
zkyDg%jgGdBrENm1Yp9}P$d!JRMi~1omS>b?XOkx5y7lby-c1D+h5ABQ{wDA9=Y;TS
zXQLB;PNy%O!zUeBO{BSC*<l4VHF=bz>xw`UPS@2S&{a-aTBVZZ`=kV>kH}&i{Oh=J
zj>+RSu)vt-o~wQ4xA#f4#~|Iw2J)fP!lbjkq$AR3d)}3un|)et=f{cZs!(5FmtoDx
z_GDd|wfu?!N#mvVPKNx|ZRP;z7eW8Spr1!l+`LCZngZEX`r6Q@a!c7*w`z~{rO^D*
z(7v|B=Bo`3o1-S<&qP+%%Z1h3yRdVj@y*zjkZx#%M78XHCdP%LV7cf>k{b-;zH)9f
z#>a-o$A>H1ecYyW`h#O$@2H6xjIjqg2R3dT2u-Z>DwZVmhh`F70uH4!LcS|ive{Ep
zMbB>8GB(^X>adujz2T;*hWd#{VYq(xy56ZMQlkYOp^3J(O}!QAcZhOwKt3whr(7XX
zDWQ_0w;LzwV_TZ(;+@4l*g7^fGc7b$^loZvn+Q3A7Mm+N)w^zYefnjpk5=5nsE<|-
z38q-nibPsTdc1ICBziNg4?Xm>U4QasdXGAvR?(ZOe?_8M{cofGn`vkDAHA9WldOJN
zFYpqOorv*e^wSquM?^5~^-n!K7RDdfBK{K!?fQr8dZ94=rSl;t-X~yZm08c?^V#&0
zPeKPNsWW2TF#QQmIG}gyO?f3HdHFWmS>gP_gXxhA7PAHanJw56;Lag#(31zGG~>bI
zO94tnnr)K8II33a{C4y9?VIUuZEw|7Dm7KrTU$_ET!6o(KmOynix<!R;~$;<zy84=
z{_gMo@Pl9X3$2zy`sYFmMiVPgw4*)5PT)*{{=X?3K5ItS&TIsPJy%?*R1dZ`xy9b1
zy1FacRQc&7rOV&BZpiFdW9)95)g;b`FNoTF5^Yw|d)PST^@F9!M}#Ohyrq}H1B4Te
z7?baS!#l)gWEnxr<G;9O)@Ja3U6U(26@Fct&|jT4n_|Q$zdvhNmxXpaZhLH2A>|h1
zwE|(Q58n!8QXb4bEVqSQW1+~;-oQ>(p2C4Q?<K_?(er0;;3MPD;zaoM`py<XdJG58
zgUAo$O!u?#U^hP?NwG4>az$hhYF9_{EWhiq!W|D9SLXXeJ<Q8T{Kj%8TIZRA{R`$+
z{{k$+{dKHdC0gX#hV3M>p$xerh+C!n?G=dF5;5qktjV>79i9py-(G7iYzc)M8|uqr
zc7x00Xed2pb9qWF7RRZ|c3XuvR^bj>id_|={rVTNs?wfn;=){zNZF_jBx&*cJV>FO
zx(2LHq8`7qS5dNw8!5@wyfBx39qB#sKn%}FoP)duJR4vW3<hhZM;GupK68DRjtkEn
z8`GP`W7m(Eox;A4dF?FYtAR4C;&*JCS!N0Y+22y@l%3MRvQz4K_A{I_P~HTr9=ai?
zQ-W6bfuAHNXk*0ewYR=`c$H_0pje&h)BG*2mEJ1i?bGX0XdmMu(L*^C=>=*U4N$GT
zVWY8*3?I7jicPT_uh>*rkj(;b%RHW(@93CMrVmN=P?kUg`EaG*DeInrc6aC<JTrLj
znesyzIiK*{ssgliSU8n_`P=mC!lO<n^+2d{(%rshNDs<yXJGl_*gT15)L>-u1j$A-
z^`bld6wx9czWx|*RlrM3_zYw<dIKK?qG|cdTTR6}H0CMRd90DIzZ6cSPk#2f@Prw!
z9Y@X1^ats8SSDuD7L*UkK&t{ZlAT2vPz)@ii4Hf?u8Q<}qZPI-ZX3y72f98iKW%0e
z$n$}9L~aKkxg7>K9_i~pGUejm(w}!Mt~>aMn2T>X=&{WUod-uo4|L4WC-;wz9_*YK
zcJ}OUfk*4XdH5dET|&!lq6B^d;!{w9_j}N{LGbY)`UW~ZxU9@PE~M7D@5SIN5}FSl
zaleQEe|RsRraSPx)2H8oKlUl{?bD|ZA4q>qbzoNTqV=<+EzkqWg97cuyj4ch4NWWn
zN8!B^YxsmW8ASS#$-}8&(tG0F>Y;Gr?&0CP6XBt1r`|pNz{s{=Zrb$AZ6gm%yY)`H
zbNUAxHvD94>?a#G{9xK?M?d&_q?3YL^uwUr6h!ZCd<JqprAQ$$f+H88H2Q?%9brPF
zS~TlvhBm6uYp9K~q#Cjw;hzQn%%E>oVk??d*O<jV+ljzC3FWiQKKrkzMP%*nVdH{G
z^4lF50eOO(Z!tQ!eBtu{=^+w6HJm3|MK=f1*h6_(bPkixWJ6=)l88x}jacYD)MLWO
z9v?~|lbs|aJ{z0IJqvet%p}@f@S>C#uPHVfjkW@RZLZj{D>&4k&nb*Gm)5P1j+wsq
zz{UrX<*CH+zP~yiwY#!)hy-g%9B{@qM&|~R6XWiY+50dmSzB+6u&5;mMd(nx5Tge+
zkn|oQ?V$rUixM$}eV!b?WyMP)TdT%es|RXZVpG$qfT4|>ovxhZsBbWu8n2!`FP_Ka
zJ_s3Vxx=krvoOIThB^;-zk!gU;W>jdKRM!8f`;fNhY`FldX@P$;*Cv>2**jdbSypx
zV?@rJcST=opV#SZiB+x9SN27XZd3gjUOYSR3snsK&C^Firpmh>Jlfv(i(d_o|MG9<
zf^#A2DUT{#f<#77S$rBg%ku<c3S`@fyo+qVTuBRFx<LU&Cge8Eb~NuyRu9+ptP9Nc
z<o0jzw8W}=tApzr?n?h_!}?l;9Qs>*yB1Bc9lc#UQ~9pe&dNYXQHje@SX1VSH@V7t
z??~=G@?p!yNYhLrI?~~=evj5G@x&?g7wcBi*!*=OnurWlv{$iKA!L@+1^rTDFnqCb
zS9hSY8r$vKfr`S4&Z@?-p3!`3vDH;HGCnm}*ApnJ9z}FPyggS6E^w8W*c}vHAP8=e
z;tR@<+!q^qqGA|3j7uy&H^6LI{zP3;m+-=|4Jqr($F%{B4ih9uqU5p^H#OpMszCSH
zn8&kor&p-e`zA&^tHPsoss7TJ&3=!y&}Pof4R0N5x_5EcSg9a5oz4xr_U(%fOayaG
z-rC{>S|$!WkN#svolW!2<Ps$^g8M=VAS^<1nYx&_rOofc*@RvUZAo;toqzDF2gk?k
z?eX-h!k+Rb|G~Z%oU7QOk1`gzS@Mx7cDRna>FHG`O2ed><y}*vP%CceuIUK~>B~Z(
zM={IAcmMFWfBT2)W4$L1A3o6wis@wY71%t`M>JzaF{Z<%NjX_sj_9C5lhL%sU^JUN
zmBN{Qm-d;>I;=pLBjiW<R(O-i0N5tfM+~TyqR%j+ILs(9g5eED{A`^Q4OqDP;9dLb
z_0@9`dulX@he=ZQN}oATK#!AUh3&4lh9B8p<SLqIkL=x3WAN=<sB36*jaJ*xQXyKR
zlWMXB1H}RE;Kk%Ji9=5SMqHP2T+LB)*;<pyZ>w&uvAyOxqo)HV$INW5!D+~iZtuDN
zweU94J%@Sv9K8;ZoRIv`bZoBfJeONcW>|33ZO+x$?r3awsRm@N$0p!tu`bYV6~*)7
zQ|b4HHWtJhh3U*7H6-FuN3dn6lit~+o$7BeTF{g+CJA_?9$GcNZEfzaaR&OEi}c=9
zz0qBCNAKpdzv(o!{^t3So~QqM@caMr5Yb%)&VCY{4F`R;nzJ$g(lcN(gG;s;Uuqfk
z$QgbH3~z}?W7AEwLp62X(HeIo>=EYo`+IAmgKo3UT<9=Iwska4WSGCiye7ALth;fl
zWv$*a(i&e^Oe?_KU0;`~6!6BnP&3uh*5j2{0@n_g(ANU;vB?sOCX1XCuozXxE`q*o
zTRgt4jei}Vtr=@-8mrlELO|8Tfi@hY;lRiF&^*r7n(yqHXXAkLIxz?Hhn*eyh;YP{
z@IlPekifpD^{unwgr3+?_{T~gZg30#XYpEhLGdBnow!rf;iM(E!m!q63e=Tu-n&?T
z;9u?*@BVDRL+^?lxM#XFYGC}$HOj~61+#r+jY2(Onk1u2_yFVmjjf3-jdOF&Gts*7
zfFPWy8?NyTw1(Ez*G`-l{(khXCiYmBuP!n&5_y9^R~4Qcc_QxS`c%w9pDYxMtc+O9
z3RdS2doUfU8aFUsd|M0Lo8N`TL$S8R9dW$478q`dtgjD`nOYXtZ`>Di>2!MM;@J8{
zoY3t|HSg+Zm>Wp#j1w=>ndj4J4=akskT&8NI9dVH>KF1WE6yQn{W(FvB?L$SCx%Oa
z_rba2wH;BWg{dCgF~@C)tF$|S1fgvjXk?PWqH*8i*oQ{$%er;7dLi4DEf@lw{!o9Y
zxXk6SHEuF_$GRJKG(hx~##{~eg<86u;q61ohf=wzqdgOQn;;3}H%7!>aRC(nJDsSV
ze?dM`J9bPyQF}o+v*L*wZlZVLnC&Wgb|Hau<eNo^Egq7sa=!7J>qY%3?~Cs_FX~@6
z;T_6$Q~G_um3|}rf=TFSV>BWrK{@u7*|bnKBgBkiwjf{}&^x0>s}SCMKXijm5bxUN
z+O<E&Vs;f-b01ke|GaQ$;a7Z&B3mu9yTzI7&*{E@Z*|{5ZEo%GP~F4F_0OX{#E^?y
zK`TxXq&cBrb*^ps^e{<B%9j{QYL}QA4Deo{C)66UyF#|Xh$G?_bX7V5C!nz&OVH&g
zud#3JWJjYtbP_uAV>ms>X4+=wa0pt~<M;QJv4hZ-O{1a0>WS?g{D_qJBz^<gB0&>z
zH<w+3unyd!vJDu&NJ`o3a5*ZPyxolz@#)5BJD!hhtO^g+L`SQeYAVi|{dFaFU%^^W
zY<=tKLV`Ua*|@#4f4nBIpgLsl0=LY7FF(ayLOWvQn3V*#-3m5gMiv=yn^4pt@(Du%
z+eD~x4<rMy2?GPQ9c^1@qnqLboBbp0dFy*CTiSm8_>q2Cgr<_%rY@njYgdbZDABUb
zr8g{YYMzcdw++>gH{=%W?VhYH5<dA^$>K;~_b#&B)`KeYx8;(JRE!4UwMAq6A_y%T
z3mGP{C=64B>}RA*srQz3?cXSFSs&^9NwB9{$aWfh%@yuMwSDIM>pY>p;M=ZPj~ELK
zCv15yoE*OXFjiAE;k33kVI8?ge{yG@BRN%*7_Ck}b@0TLm-cJSeiy&QK4%nr3S)Mc
zfX#}8pJMm~$Fn|XIJ0dSzCkK)V>q)Q7`_p>A-jv^{rDDk1<Mg4a+Ku=VQpSwW$%#c
z!2T6&G8w|~IgV%jvkJ#;A(7+jC7kg$D?cyQGeYHWe2G@SRMB#b<rP_8`!Qb2jqkvg
zY0B3u?ey->r8>S^hAuEluth`J%&u@R?FyB>qCxCs?c=i|?aNRjK4#GEQ_!6p1-S;@
zJqoHWyQrY*viliI`^+lwG}RlV8V;<8-b*N_N!O2kCNjM!zZ>v7tOnjc(aWfbOj2EU
zuZXf<-?)lit9QM7Sy^c>jN5p9%4Z)yjR7%|^&I9y-R}bu{w%{YJ=d1c^j%w?_dYYK
z(Pb3#@#CmMv1UiEP)sN&?pG*&l~ESGiQ<<fd^yG1@)?S?<umj3GUh8FMzeT5nHkgK
zY|hwgEAOM-DzQ=9!z?wb^ibnnP<luxdN?5WP@vqZ0kLs;4+X!3FYDp5@=6bvl~;NQ
zoO;-}yobwh-or03|MY^20g;Zxg;;y+br?g|PdL5MSdX(2Xa(CUTnY3TN27#FBLGzG
zIgv(yqZol9rN+-$Pg}EogVq$TM7b*xev;u5R|40Tmqy^G@)@q|VzjlhIpef_g_YXQ
zYVV|;W@skiuk!0CvqmUr9+qc~jY2@|r2B^WbY{iS=wxtZ7EqpMK`zf_0HiANG514e
zAQS?!eVr!%u|dK635P$4s6K`It0|-D?fa9ss^mtCVc}M;rT25nE9<Jo@<xv%cpEOJ
zD>jqgRbJu1h2`>!K&eFGlYcISxNS`aMxumy8cODFLE)#ipu^KxE(XK!?*2(Pp>SnQ
zX`rGUK1@eNxyx^&G5j1~{%oHd5~tkKC--H@@45|gK0R+ZPpgXb1ZV(1jbL7NY+k=*
zqZZF<{c~qFz%6z>Ia2cWEk-W=fXP~(68){ABezHF6<dCltwZM!f_46eBBETP^xFRd
zrEJ52eIBf)5~B2tTTyzZw5HWBrpm3ew@GP1gTF2)ICLGhs(ibO(tq=q;_a5(8`DXb
zKXe-mpc&J(DoX#&V+u-dZ%m`NNvV2F%@U==x9>xaRcCc(fpc$H0_m{dgz?P7b(o8j
zIiA?=LgL=%Zov=NN}VO<ykeY3+g<EOi(nT@cjlCo4~l_~$e$i|ao%jsv+8YL>D!Yw
zgT+*dN*ooX2>;Nr_4x1CFEy|K`Tc4wZRiMygD%_uLcem*9|!tXiOXlqri4zsh_fAT
zIU99b#2l{G8BTT#9P(Ki95)_Np72A<aa}FL;XY>N56Ze*SH<wd624EtdHDxdDG&D$
ztB05W4DDV8UsZ|Um+%OyCxbt%#&NcNO-K3oah@aLsE=%B;EytT{zAgvS%yD$6aFD9
z|1*y3+)DY&41Zk09SY9N|9qA5PiV@6e%)o(ufJRce=>u^@Ic-&T`$_Lrai#zt}f;k
z(zrx#b+#t@HO}Hc&1B?Go|<`XMsg=hqkM#o&WoIS@eO5k4l(@iB>WWxUt;)6Qg8hV
z{sF`PHwnk7sZ>8N50yh)qFY}6?=|IVlwV_`{IZ0@t|Bd~;Qye;r5!bLa7a7qIqax&
zu><2f?Ii`DRqeFXl#@a#-?j>#)Zm#N`|nr5Pp^WXSq1;C8mD~x5<SnYg8xp9Q*KPD
z{E!Am<{b&|)8H2syhnwfqD(O21dV6*oaAv}r%5V&R)f>H@$zk};7JWm<HpPXeii)m
zD)^aI@ZU-}_lywz+%qyKy#}%zpVi<*KQG_53ZB&9L_aV8`&IDMtKer=!GEj9*}U`m
zpIZh0oeF;$@?55;N5XL`ne__eXYTWvJ3!nI*#neDhoiI1CzG?RtdyG;D9^#l%kmto
zkiJ=Os=PYCXC5Z3!mL+S=xK&h+4oiG83lbuh5nYI%v;3z&0BkJMf7(JU4q|^<$;xY
zfjqE~1mB=Fmh)CZdCuGSP?lxQmC&9{y($`xuZS{_)s2r(gI;G+#_VTQR`Q+^-*E5Q
zoS;|a%Oy6#9G?ZgQh7P^60NICY@T>|Ia3qIiO)FxdrdtV{PZgLnN{%LN;s{Dk6F9h
z_&OIV82ub44&nGLaH604?Wn(Vl3e&_R-WTjp5wC`Z(*i<+bVccgHykFJ-=TCKfMZm
zW)=LmYMk*Gum8DK@ZU*zALivOTUWe%kGedQvm77N;3Q``-lxGc{W`u1F8M+EI5TeJ
z_54gK&%LZPp7U8uE(;@U{5ekJ&+%E{G+)chx2=LFH8|19>-qgE_~}*fGppdgRpV^@
zdHv6=g8xp9v+?KUdn7!5qn9FGK<6kMhaU_1()t2U{HzN~<0I>P!ZAJ)p3(Q(@)>=v
z#WVVzaEy;sPe$Ks@r=IL;u(Ff#WVUIIE{}~e@5SH@r=HwdLZ|u^0NM(#`qxW0pmmZ
z!;t-B77xZyHad;c=-3$daGXYm<FZy<US8IU%W+vNa-2qo*CT7i<+!XBm*cWlT#n0H
zk>PA~c>S_gT#n0Hk#MFJC3<A7*nXpz&f*j<|1rJv$yN(+Ha=a__{gh^a2g+uXI7WC
zd}eiN@yzNXoW_UOlUZF_JhQsAcxH8J@yzN1&c=t=pIKd6JhQr}9^xKeo~<sN3r^qY
zXE7uJ>`YdQAwhHmHuMN?T0N4)GwAbH_q*H!w~8le+#WDg-%;b=xkrvFp(uqB+%=&y
zT|^QfaS<Jc!lA&tN!n;b#A;crf?kPE=)ox;k6GBe0U<J(@Ps#>*R?N>^1y|IKQeg3
z4G<1ICW-C@dX&>o9+QOQPaN?}u~2eAQa|D|^6Tp2n`7;Fbsx9))XywLC+d@NCksR>
zC@oo=*EqY5j`ziT_V!NIt<4Juid)eN#kCwlD{CmO1*iGNbbkQbkZ;6KK0$zrGyRP-
z{UXZQZ;T1&5hV&eE1$*EFe66|!o&D?#HryZTKHZ0TH~7Bfk#L41oxWKf|19^^Mqjd
zr<)6>f4V(td?~wrHe9<o<nHj7KH~59_&TdfAKUVaI(y_V&%Jq9Y#Z@;<i<kQ(}=A#
z=>3fEdxeLx9>?#LF&;NTK+UA^Ro0{8%M|5Uj4O`DNxL)0E`0Sy*CRA?@Qi02$$EqS
zHI~3X59i=4xa*NOsP1pYh%kvv_H=rgi*mw^&xB92C?XTF(?xIxBBGJSE28WPls&=9
z9^?BC!GIMzbK_Nf`p1N@@uO&{CvG<yO0|6@YCaIVD8Dc5V2GL(k+(!dRIoC$Qkl0v
zmxIyOAtB3pg?b)GnK@SG_fnZ-KsGVtw1iNZ0}MH%LUuFcw-Rz(j0(qfxuEd5n~>j0
z$b#4_ydYjg899gZanyXA)pK0=l#CpckO#yW;TfF?pZXagn2E21D_Og-3opQ|GLKx9
zPdX{cR~-fj%U%7;KB@KK539WNH~ZiP<R||$tCr7xF=pQaH?P2a<8*?6e|rt|m?&PG
zQzZEa$#0ymc4C95<t}Re`3uVD)xJ3Td|d5X7OtqBoXl~|KTl_fE3^+EtI|F>e6{T}
zcP{@toi*~$Yud->mG;REt8Je-SrIcVT+X@xZ-$j*9mN~`3D4=#TYE?UgzxkA+Ee#p
z<@OY><xTC~<dX!`DfcMg^O}cG*#KXj^a3V(o}6Ft3-GWPpKo4xApOFry+63`-e;cL
zvuE$!PvBNX`s>N9vpbz*Q)B(Kf~gkeHU|HlN4bk(a5=qB(kphMm0Xgg#fa&}t)_fL
zk@#?36;WyU<H1EPqp#_ee23j6EM760i+=1dxbn&?it;SQCc)ina0of0+hcj+*1kjc
zrO&_mR-vKx&TWJDKQwy%vBI}rm8i(v+JKzG3WMeFEJa?&igAxyHI*eL?Cuy^&cxgr
zjC7-u-L}%@UYfLc%JcPWvklp64R$;PK5?Jxz6tulfGhyO^UK}V$xBuL`F_{^|5=#3
z5U$A+5ilSY$D7XMD&&Xfo8rX`$g2roKu)_!JeG&Qpelm>3!OLALaQK@2**blXckR_
z%e+jvs_0~KPCO(`u#fDE*cxVgqMI5I@9C<&XV*+`Y^K~&erJ1ZQ&US*=Z5xq6Ru;%
zsw;;Y$H$yQ1D$<UZksz?H56;!P@vD<G~B+qp5!;pmJ_p4Otu8#It|8HLckp^#Qh|E
zMq%D9iuw^D<aO%={Yd(KTsfKwZ;c!kuHd%FOZA(>N7IzanAM`g>8Xx+le0&JUZx#*
z?a#9NvZy_#j4`Qid5q`XPwjLC{3SG)hBevwrS8)C&#V5&FVNP9=M(WFQFM!$kps=}
zgy6Q>3A$g2SS^ei4O#+!*!?)vn=eL;R#R?4p4sgxv{qRKm;2LVpQXrOYtrl82FK*o
zf%gy76_bTa3){A{*dC&E`E3^)yPE;a06o;)U6Fc>yDL~PZS3Fi`OG~PseCTG>!N4>
zuDOLG_2DD*!K&&*g7RSDG616F42A~^t$Dcx*6O-K^C#YC!}`z(?<bZHM!&BzEas$-
z@7pIlaQ&TVD>OIwNPG%>RD>}h3xy))aPbOPSQx+f=mLv$f5nFzslw#X{_5%DF8Y%G
z<k*oP{z!DuSJS-k;{*5paDHC+;ei8>%nQ>yzK1x)gFAK}Oiu|9&?uPEOZAPFd8}o+
zv0|b&v21aJ2eWK7iotZdTbRR2ef3pb=6Q@R^Ax^C{5FU$AMk#AaG}OW@sA*rhuc$z
z3*ka(Pwn8IW_QC(XHAdYEhP0hl^X}2eYSJJm7^D$ukVw%mTFncxmIp@-Yw+PAGt|1
z%Szwq)e(<FixH2@rJ0bCKLVMe`V^BQkX4v9@g(aX<_X+IeOx9Hg{)5m@%Y{!-M{~-
zNB8X6fA<mburvMP)C`k|Bj~P<tqurE$e>~=`_9d^fG)hJyY~n8?|<xJ60C=XtLR4h
zLq)WvU!+@6l9U#u+E{;<Q#9{BN%fq1g6cW0sf1=Ah}A=<v4}F}tA~~k?u_&7o3wM_
z6&k+o+ZnI~rd#%YKmDfAlKs8ABb#yedROcBf7W%sDOO_%h5qns=g||8E3OE8rWk|8
z&V!<;y@2i#V1J<AAlP_hWn&Y`Rm=nvxGcm~j3R<GG2g?#t~=O$&h7rAA+<QL?ofC4
zA@kVJw{QR1$jHyOZ~yt23zy+Uoj}8p{&4oE>-eoWK3Bq<7?(V{FO9j<`Ph4F*ew+4
zAkbJqgYeulZ&bZGwEeyvFTZg7_#L};3C-!Zgx1_m<6Fld(53``*VxFgqCfDywIOR(
zS>Nxm`$RjLWOHG~Eub~T@Gg_wI9)~ez$&<mtc<1bT7e%KI4VpP-L-db_w<*#FA5)i
z<LLM9{Xx^X$%w#JqkAN^b<&ufeg+KW{3hGDWAE6ON-k-HH|V8p-Ti2pUfKp%Vjf8%
zLBgn_#WU*52;Hq*6cGkDJk;~6AGS=FTFOT1?>TC~b53s_J=io^X{p?5nmo1d^h*(!
z&0Y1&A30Aw7YbQwVrZ2#6VBJrf7tn)3iT~RcyU#Cv%upR^Q=ocJ62=~-MLWTeU7o4
zPMoQ9nD=;IadBS0*}N!y-|7}WC@R3aVyeH_gT(D<moi=KW^x#79kUGCuOo?5LGMm2
zm;Ta9!00n2P${WU-!g5GdzjY8Z{Fi7LHO$fv{3e`R0CgjP!E?Ew#|Bi%(CGtPe(6e
zvs)#yBvIPLqcL)O5Gs4zypi<N!ehLC;#aZ;XhoCy=LQpUp`cr{sI`QolbUUCRgZ<$
z8jC)bnC0&K+&i{`c_a?G<F2>go*5>Vk!DDAGCpA^wBQqXVff5RIM>bXq?>`07X66n
zY{Zj+uST-|1>fnmaxc4;iSf?HO6Bqrra<^@x3K7bBO}rGy~<Y|vTD8#&4Y7UqMwuw
zyN6G5l0C^zz3^Q)b;|wixBC_!`uNbEJ@b3^&58NWlP8_ekI%g79G)5hNtv6o1>mMt
z?m&R6<xE?>>mTgxeQ-Vhy7x!v;IV}}e`plmH~x@#df(II<4^Cy+v%?7PMvyAJn+=9
zV^2}<3>a-%H8k4LwsiRphC?weR9v?rYfJYDZpB(Eta?j%@us3`e|}-^nmlW1{_~i?
zLmhW^;Ezz<+LYrqRMlR;%tj1f-hq$CNF(6EhMVrOrc90;x^#T@E!;ZBJrtB7jg`ko
z3Atx*FPVG|xOYjnlkqZrze5zF&h%Ah8i%#8STPUZfzmiWahnz^(`bLD+4`R<4Gzcc
zS+1|bwpNT+P#A$XfUH*-l4Nn*zWHi23WmP<x?38s&9g1pub$II8g6C8wr-5*C<6-d
zYy_0R_Mvrovz@7o%u2@QKLs!ZE7+TIe`z*om7YZlPCkDtwLt@a?ftJ;F=ojsSkam#
z+GoHSD(i$(OV^>@!a>^Z^rm4ykoaKx8@71>P0jcu@v@u7Uk-hjZw<;fNmzW3QD_}K
z)ZO=ksg_Mp0>kwq_q4U{8zv3ln`*@{>o-4r=bm40U}}J?S?GaaRQE^73D~cy`_ep5
z4en2q#HaO+tm&~5X&KSaVClDyPu2WK?}FJ^tVg<+1^0jaA-o`9?#1{0{eJv;KMlXy
z*EFhTa1gBunm5YCo~Z|ZIBWrZO}MufAZczizx9guP`<rTUtr5S<bLIX-{7zx&Z{u%
z3!V87;Q~qW9UC6H4cOjEzn*>zjH>%@_NdDhwX+pEh>;=-5Hf0ItCO|1-1MY<=5p(k
zTZU}k1m0)%J8>LS^tj1KBAZDOOr4{rhV0nL9c0I1`aaJ#!jOIY?ask+mCROaRlZAQ
zGMPp3U>}9=m;>xyaqd9-tAkutOXq{=kN7pyj$^W{7v5v#Sac9RkDKNAd>3qm5z^*@
zAeVzqFev-Aen}^=T@I|AD&0}m&bS(<&+E>x&vV^DpXa)xKkE|}zEi<BNjT2AgcI=S
z8)*GNYtU`nkHinb^Vp9UGfPD_6paQ8GahjD6s`ce6`8LyO2doGP+PaohS$|qtxMEw
zs~29`eb5md+SXiJX35Vf4wfh9dV_|*Ttjk8ePTv%Jot;2J5!07ruyXClJtLl`iX_V
zoQ^uy=#fg_ox3(Wx2*NvxkwcGi;;vJ+Gh@9jNI*@iQYdZIl?S`Da*A_Co6a0Ory;`
zKf1BrT^e@HO+E3wiQd%Ej~;nu(>U@NwY1mQuhnHcBmO@41EV#y_34>=8la5fZN?WR
zTPqAic$y25uGLA|OepKpl<*EHFj78%1ow<6ei2G=LrdaBj>VQM*e)J&=*<OX_FU&T
zU3$mY{hK3s!gJ~5*$ag^Ra-V*Nhb?0oTZtk6KZ<r+dxu+Rva4I1phs(^H_pi3Wddw
zp27)2iW|FVMG+cV{yi*0qxoc{xYCki$jLDwPe*vSb9dO@=rrX30UkN&eQd$G@L2lc
zSh?uZS9d=2{`(JgR_k42dF<iz=lBopk{$Or+J&bhv+KAGPsjfi-BM-tkJbfJ0hYyl
zbRgEy?J~PY6SxQ$_E&d?*PF_HHczQD=8Y$u@o+R;R$?phIOD-!qDY_H9<T27OCwLY
zaG8~b{U-bzr1wdJk*5P}rkiuY*HI8G_|%1KWb6mz1Pjhako1(2JkpOyg_=H(QKfl&
z6Yrl^>E6Vs8ncJt4aZePhQESdO094`B-s^wIOkkP8;d=jVm^4@lK2_#)5nCR_aCaO
z%g2b7H68hmjaNR#>q*cHDXWYZxi~;Dvu+KBaBhB1PWBo@TS2ZR_nPaqHRd&Iq9&aV
zSEP?@cy0r-rCl67HM)MC#CM_|wQ;^ytRAXN?mf?626sWxoc|${!=%qITYK0~Bav%e
zd)WIBzUo;%*e@!QZg;XmFrx)Ob}*&&_ViW3X0I>x_B+xaNuzKPt?}Kt)x+{cdytt}
zsB*cW#g;B#PJ6%jLgLOP#+@O?oiwiWUayhXA9-^;SRvD{G;-Zhf6_@Bd*t!H!ah^O
zWDaro8TLEh7eOYnTbis6W=|KreNH%XPPm9vDoI)s>?I`1be)AoiIpF};T0dj9pMVR
z57<t+)Ifd-`J$aH-N7>i2dudNrb-F#$?S2BNQoefSsUCFJL)H*&W2K#z1g{WV`QSC
zq{(s2QD5e0bcDJqM}>x(Zof0xXm2VnZ(jP&Y-g`%*o%as^cNNzyYO04{M{E8hcI7S
z%wA&P7hjR6`jo>=J-}(Y@DS@kjE@^6$Cntl<$f69Qu+y(U~zTn&*J$lN?SyNfj9yN
zH(nH2BEO$U>MwJ{K*}N8PmwV1s`Slnb&XAy)t0&5Hy8%SfAE8zW`p7Lw3pAYxKo*7
zvbfm)bFRzyUv3DEv9dR&#M3A%**9`oCd~K;Aiz|gVUmlaAtY5H>l1u0v`!(Omib;j
zc<rM-Q?s*EduG><j;^1@48JkZ*Ei%$w6)RgS8$V<j~X(5mz!$H2HkV6S*m1qiYl2B
z4x$5@YSP4cpoTc}d8sba4L8*^=Q>Qa9A2ba7S&Z?yy)gIWlIK!Dyx|;ULymu*1>By
z-!M{chUKtf$JhUAoa?RYz|mcQYkX^SVvh19mwFB@IJe(f0TEXjKd@<Pe}ZU(c7Fo3
z7tk(aMW2fgss<!y94^9J4eLUobq&$cnwrsQ^BqmcT&^GM6Puf$E}Lcw)vtUy+ZIQ!
z3QHdh-5KYv-J(T!@`d9V4eo1!hVV(L^kPK;q?F^nmVFPL@&BQ9{ruSD$L8meC+~v~
zJ~Vc9478-Z*WRs1%2sLpUw~iUAV4oDzn{YI5ysbMWCna6D-+T|@v_JXNVu0pPEEy4
z1S{@+3SKD%x4S7|8yv0~sdupl;KjgX!_?N&a1T%9>797;o+lr!jlhw_pM&4GCs6+v
zfBV3xEtNzG&G!L%!%+91KndQZ&iWSprc-GqZD=Mzks>6Fd?Gb&7gKUaqHRZOG=(W_
zt)d*z`RV_;bE>+x)a+VkO6;H7cz|ES-977EIOMh4%2><nB~d2NFv_509PQH^?}jWt
z{eI(H{7&~ok#rG1=}6aP{iAs5c04Z$$>Xw9`o7U6&M;R@z69X=_2-D=(atBxfByt)
zw-PO|oZRB$m~(cMJj2CIDaorr)=i2hBqAxP^3a;KCf%1)v_uZRtk2EO?G&1ZX{iiz
zm6hz;@cSvY?1YQ`f4hEiFvu1$aW@)2hjwMJ3+WT3J$TuawxD0~UA%?#S9mmx)lSNW
zRr|#kTr6NjVFMxV<Pt^@(Mi%=zryAkE^3-<0oi&a{7r^)El<%$g!7m5-T`m?H&%W)
z>tlSUSb{0scV~JpJD~EM=*816!RvY^BZR$YX+%j=rNsrgXUlvihK%#%jTc^Uz4Oij
z4c@{Wb!!fy4yopzSEL=NBF<#GR1_FB&;=|?glv(Fr$cSv=`K=!Ri{b6*0#3aQYCph
z90f<f0dITz-R^$xr8e&9NFV1?UpOir=h~T4E5m;M&ScN|R#-aw7E~+CRVYw21$j9j
z-V)3SO5ULPR0@{vlTUtX*DpCQIzL5OGxWj%NG)*rpSDE#ZV>69Z^In@NsZp&THPZ3
z1eP%~N<l*{W{j*-crZ$6r<u6j1307c9kF)3@0ONn&2YW`?6acFeJkrUkgOD+rLhGi
zmq7{hFMz+<Ntt3fD&4=ye0-`Fon2-@e$0AE97#GfidwOskTj^aUP`bHCAyMHdeM24
zO$r*x0+cj4v+Fovm}X|&L6LV!_8n>QFTNle;^-OdGunTY;NVp@tGL9}dMUmWo43R?
zZ@kq_CP-d7`$PJ(ztwl#vrhG_TWY=;LbKGbqw%9Pc?z^4cA^B?b2BEc&idvns+VJ4
zURnZoU*g;?gwx(7qEY@dS=+?7ss)3?IAY*8pC0S{J5@dZ;io5-mXKETqN=W>a|w0j
zqrXpq5@-nUwaTYqERm*Bc4_3FIq97=mF4O4OY_FvCw~FHb<X6u3iJieg6VHRJz5;F
z{QsrB4RDiJmL{zGN|uZfvVLF5@@xJ7S(as4zqTw3+xXwc7-P&&9Adz67{V}aI?XUN
zLo+O!PFR|zX*$bf6DFIb*esLHP+2;~QmJf;W!Y3JUxrC_^_R(}^JRN`Q>j!cUn<My
zW4o~QJ?FlXEDYV#I}4WO_rCX@d+)jDo_o%@=bmd0nvQ+;F>ra(8nIX+)|1rQe$;RS
zHDLeqVX_;q<$eJU19P7YSJn>a0FHA)g_m<et{n=**=~Y|kY1CLIV9};mx*Ii{2%Zd
zuFvy)Z^`)-_jo!YF9~1J+QmS}C7yJR=lhQ(cq*P=x)BcfWV->i;})XumGvn)|3I9U
z^E9k=0p)wV{DzY6%zeBL`DBg^zupo@9w3ffNvBm@=G2=xr<P;wybJq7kgTg%%V-_v
z!N6n(1a5Vp;2-7a?m>BflG`ZY?{%;Jk?eOL4~(>VdS<f?O(KjBk*49@iPiyM>qsR2
z$bWAeZ^@1a+@1c%5fE%g@2-Qc#z?E(7cj4>m>*Va8$6;f*y!%tobUgmt`AaEZJF6j
ze7LL8b_h1NLF{v+g;Qu@0w?^|Q7eNKc*B5zQP9-`fh0nrKvk!Mx&|*OD(EGDJByiB
z?Y78~I%IK7gH>}ztybyuzW7{hQl(@OJgqVK+IR9N!Izt!&e12ac5MQmp*vc^ZWM*#
zC;oQN>wS;!?E1T5!EUfFUEA}we{`jHfu31l)5zGyjbkI5>?56BLqlDiBR`TP$RrqF
zcyE&DO;XXzEj-q;*hYRd!~<5wUbd2Q3pJeEFM;C{%8?BZFIkM<?w|*eLVMzy6T!7!
zi*2Mck!l?Zco&j^l+j`83JvD8j)8!0=I`jPwFy`H318cwVDyd$?Wr!GyK~*rziXMy
zwDfn`Tc(3+H}=KD{kf)fKZvy*=o>g1&swF`Ev`W9YP3Jl;)x&Y_iv;XI*v8<5=Mb`
zwTMp8a9Ibb#_X5d=jOK4XK2%=p~2~C?ce;>U;Xu8|J7gpjdbDM&;If+e|GKy=Ijh8
z{CVLRX=pICK%3#ZJci`_fk2nVep(VjB91~Xy?}{>JzD&_jC!$?mXPB$E~^Qohmy35
zOPBVY9voQTy1^lOXF8{6$DZBMm~Q;c{3kCT?aa@_0_I?5ZnF2pznI6ZhJcA3OLh@3
zBQnL8);cm}rDPR$xeD5oE!n-)pC!i9W^>c@K>yZ#hsU>vM)R!`jb>c9)i&NbltN^c
z_>5L+wusKurgZ~b9HG8Y=Rg?SiBVsFtY?EkRT~+MW;UWyNRa5&HQ-<s?I|MabjkE!
zN+Do5sZ?G|wg7vB)~-tyK4fw8u3ewrv-DU@K1)G;Q_o&4%t>HNvNrV!;J_=3=5F<>
zO-EZzkirQ;rO;WQCPq`}z|=rwJi2Yn-_c~ZA<$4kw0HUuCnr0rmE&V0ZurJWZDu_S
zN#E+tE!zeuY`DxRUIo^4bn_o=JvrziTh0iSL=X2l4K45Y{?@ytSrr)T2<E+xp2*z3
zK<}n#IBzqH9WI3b^UOr2XWQ1Z`DkWfUp~6N4R<sa&RjUXaB4c>ZWJ3E*Z$=D&GCh~
z&TZUk2;|{D^<!MBBKIgPx3G!6UDL9ux9|!(o*j>fsuQ<={)l8;f99tz?ZEt_J^t6w
z>XJpH#No;z&q_308DeE+m!4Q2#l|BmHl`gtevJzpLpg^h8yRWcxXsyOY)rb_W>!U_
zu6(3(BsEnN8wz&qNF)ba#<kJOcw{K0S6PP>t%JeGhI~DVdX*uZYk|p@&3GqT{A&Zl
z=~%wG@N@i?>}@eSraPL~g@9+W558Q%v&?Qw!7srvDnndtnIUCw+|iQ+s+Gaf&S1B1
ze|Rl|5O+EW#hcp*#ZiuWb_)oOW(J=Gu9u4UVR(Du#UB&ei9TWdW^bbnzjwCZ+p(~)
z<FUsde{5{qwlRDjI@@ztt=_|k)yi@gpX;yji7xc>X?~38_<whn2R3IOGRwos$}Go<
zSDNMU9mZ_KvkMiygO;dO20cBKB?5B?@3Ge789M`z08Zh(i8dLCJFu4?ptUz@!W(-E
zZ?LC2M<bSMS_6b^32SPVh1;f*cqZPZR*C37Nh@~{*Q1ZDfz=#zPbtE>wh~$$dAa8^
z@}h0lAjnV+Ke1(|o71{NO0}}yVqIglrJl1H^UchNf9|Hl2I>p13B3)L{G`?Njr6iV
z^>R8m2h#Upjopgc0xCC#0&n4G4XH=v7T&{mIZphAKQK;wK3^Rto=W#9UV_}qqs&`*
zoN3N6O0#dD%BIqnaPW4XT`i2~g;|RUapsLC7`(_&@(%o!FJldW%#{h`5&3I{wMeJ5
zYO2t4QDbk7c^Xo<k;!gu8c)R5c|GmXMs-~|mVIJFZ>}fk>hyYCMpp#UOPdGQ_KvkJ
z2e(J9$zqZ%pw+xqnQ!Ek!Gx%TZ+j(PKy^RfEmtFzs}Bq{n5Fg2rCQ&s)KjV6>ohuB
zg*}zdGQ~9eN^uze>^0!AbZd!byE>p|U!BV3PGOwr?Qiimpdu@=2EUKtn<=vF4kGy6
zAm4MoWt67vB1;Lsb9yoC(>vXQS}U5^9fy<{ZZI}xnpwR;PX+)*2cSMDyva**TB|0t
zVZF=6OV%4KVfGa-sMi||O-+d*v<Njb8)^=yFkjH32(<|5fXPI_45(UpdTTkocwF(E
zViF$wNMAZfIg7`c2-{9TMV2lNeggtp6^8fzJM1;`Q^*8Ua8tHkJ$cf6<jCkn>7wza
zmysil9KR^%$iR`>GK%-+lcV~VUou{#INN~1CXgebigVa;#nZfXD9N_-bg~+2R0&E4
z#E{|(reL*LHxy(}3w`*71Ii1fe+g@RDcx-eu`^#ny5s4>-Kuoqb|t;$YE^p8sY-h7
zqMXj4HP$Zve}Gzs#9pr|!A_zCdVrd#25_kk-tvCv6Q|hT(g}zVZ^H$}=j;G+l}yzf
zc*d8@`S7{W*&grch_`oAKeWZu?DOJl)ITfMPA&WRfXjtiv_ck<+_wYjT1>cCkyC-&
zgj~hTq(zc-ue9t?BtWKL_r$o}95_Bb{ZIU6`}h-I;7SmEvVS0<$F*`)%l6_FBB^~u
ztF%>CD2N&nWaX3Yp`mVLE}zf6w)<BnPW)=OcE_&|9r~}2p^O7%u9nIW4I&IAOc0R1
zVm!YwKREcB_ObtZ=+LisXn9$b!EFM#^YSKHVGxOx8+PZ<A3JtlIV;|~4F#4gD|?`=
z$vL>JnJ^fU;k>AfiT5s24qpids8{C6Rbn8?xB$y-xLgk84MInd`bj!n>rQ$7y4rNw
z;flG`rluy78h@NmjCCv|U2&V$Z%#jv8B2)ibo(P6;lwJ{s$_HK5y%u2la^Zc1zJY+
zrsNG(k^*ISRcZrlVBE&fnT@5~2CtFoGE0(~>T;kFI=?sRK_kwip7<k~<|OJ#ggYK-
zM?HzL%oAy|-)f7yk_#PU3DjF#oP!tHElvR}!D?BLqww}i%7uH+6E^0GYQ+)ZEB==D
z1Ek+7Kfed%nr^0<!zmJ8t_I~;U*T;B>yZnR-Mw56V_`x`@@|_$lw)RO9~XQ}ci4vo
zqSaB@<vN6SXx9d3EHGm;2`kNPP4Kvw-da1WwyS4rx2DBB`$RwEvDxQ$*=(K}{S>tz
zkDGY5qb#kSCQZs3OlUHepy^HF*fF?8<JY9HfIpsl4!@RoZ^|XGh*&dJg8$;htW?&@
z%T~&B7*zVBkIHc5zi16g7H>mmctw#?3~)**O$dbLR?)bvw0|QUB%(yqO*;6kRw7m-
zv^pNcTdn>)G2SHFbFo;qxp%a;Ipx<IrOwu1f1}Zs3Z|pYJ;OcC?E$?hnE&_D;q}g7
zOLS<x(;tm_8$_EU?ej%ljzCvyJZGs7+3iVBlT|d^lMZjh=?HbTB|6OdX33j&vgg7{
zuTwO(wzQ;uE{nOHdJzT=ai;*r7b8GBK3KoF4hq*$_}46sF6Og)`XiIVZ<ZuB8rnWO
z`bcwupU9*Uz5~h#s7Amk)vA$0#O1eQW#-Z9RRPXN1B$zxOJT)^t>ZFsL!1DA4Z&%;
zlwZj5bUA-W@taD1u_}Ln@}s@wmETD^2fv?2^U&4bQoZ_LR=H|)!GQg~_21dr>Z~m<
z{|qeXh9{HC`l>{LmbIPv4IRrO0QYPGf4M?yF;~hA;4Z=yacKe6h=miJrSuMS)o}LM
zdEt3+X%g?|i?>nk7?lHG0%w}H9g7K9mKI7p={8ErZ&8jok}W0*&!Z@M44#G=LL7_e
zyu{UlP?P6>apcIGp-_prfq_wO;v%0_a+f$9<u)EU@{1nimKhz-jdo$3C4Px^VUB`d
zqCZSzuZe{{)FZqlUdi8<dW5&<#ljTt6L>9hRQKsTd#$i%na`Hqmiu%bWl<Eg202)`
z0y)?O`3?4)8V}h%NnNCfwK^e40ZS3y-s_<-vkn2Pm`sx^<Gy1RVF!A?yDc8y_T8S|
z1N42MH@jyt8lBveEq&*4wJOd#1~WFJE$Zr~IP6)QzOh@|w)OktV~1zj+GY-qjemb@
zn>{l1oq_(vjV&!37yAdkGZon%-L^KnsTKFHTCJOhCbm07vB3-bQ+4a(JbLy&(EecA
zr@iXR#(%Kgu@fDmqaE{G<JoL{>p$Gs!)#9~mCZl>awOL5SD=-8HpmWvJJxeeH_he1
zG8Q=xf}Msdvsli!HVffW_UgI+ZpoYNQ|*<X@BjqkF#m1qYihF^;+|04VRKlTJZvyF
zlg(~vZ{L#5&cy63V=)Afj*Q1*V=aBR?E#akX6wYn9)raQ`VbTXZUO5ME`qAbBbx7E
z)2>hg_B$NQ#4}FVzyfczEbjm9{)>^cOXW&N94gg}V@9Q72bc(lg)dnA_|~n*3-4c^
z`{<*&%Yf>^O4b3M9HdcM){RMaz!nCr-qjRjwQ^>hc}T6N+!<&aA<5wp?QwG;9kR97
z8|%GBhpWL7Z*nI7Y-NiU8gS3M#bL9X*4S73+<}m#Uep<#7GuL|`<j5;*{)sDShUuK
z)=s0fCiqs+{ClA9kh4~{nS2mH^{$omzmXlC$k|)gnAbQgp`KjW=FyvtF(B$b6lu4O
zjLwKUvra$I(>o0H(A0q02uDgRl^4+tiDF7WtR)Yg?RcOCx#1!F3x_+>na<G4idlS9
z|KMh6s3X%)qn|7u5WW(gQsgN<o4i-Ny#EeeBM7G>u5wT+T>+v|mn};&PbjNfpy3Rb
z+7bz~qjNvoy!MZOwEnS^V;xhWU{WbG=De-zY;6OPv_q)1d%Qbc{n3G=n+J|9bd5dp
zNMe&uH+{_B>2#UAwzhtM{50I7cfPoon>e*&`nz5JpcG!W&O5O#91C4Lomv>#dTg*`
z&)Mxee>@?Hw)7Vs-|G&sYg;52L!W#QNv;bgLC@r|nE}7#p9Bt#;bZagj~8T}!HXUC
z>8;}SS-WI^0iUU9ab`RJ+wp?<!bj5U(k=YM*GC_H^zG|dRk09M?{h1{>@>?G)|p22
zENXooIp)~&iuaW+q|i19rNpu4ljM2+St*4|#dyl8Qc4VY(!A7<s`AJwr%NeGl*;l_
zKQ5&Z<Tx*Nrjl|RDb${yRKbz!I$KJCj}jXc3dnN;Brt&%dW0#Y>_^H!t)vJ@c?&5|
zms0xJwBoXI7gBy&fjq4^%TvykQ*e(#Uhz5d02{>_!bWjM@xJ0?qyQT{C0?9?&p+h>
zHh4-HrD8k<*x)HK<Vo{Vz(ysHoC0j{lq5=Jc`0Cnrx4^gF9mFrQbv(Nbpaa{IC5RU
z2HHlqvpt1a?pOGlPR=gSEkPrei^q>UPMkP(MmmEZbPsl174o?-OQC<dEpRJSaV^kO
zyo&TiApqP>Li+lriYw@MUs12P%p9m0*ecbmSDfW3z!qvIiSG`}v$LrA_t@>P_Kc49
z^p1@5((2RR)ur7xzx&B2chB#$@7z4IW5>+qooL$}sPcWBxrc;L92<KShS#T(E;}0)
zS2q?8BS#!vNTMz%3=g-}CoI{4Eur>isoh{Uto5aOTPIWRntQhocv@2dyRoSymk+Ps
zl(YjDwL1n_kQ1SoRitfhq9^r;%-h_uU6Hb{v<{eU#+)bEInkHzYiqW}a8F^@7wd0z
z`?90jsAQA^(QtE%E$#8PIBZ6{FCFtIwCZ>`4I`z%@6$@7e>G&ChfN-H*MzY$$wRgE
z8C-Flz4C^b&7Rq@FkMs})HB7m_JcHP)K)49Q^EahrAFeKJ+G$R(yNI+i_P2-3U_2$
zrDlWKeB%{ez2BA|g~gcKmy5--Hl6O8bZpg{{=ROA+QdEYuq+=zaO(^}a&8D5$TDx$
zB8SZoc};&yN;Iju+MC<kTDv#2jf5Kgdfgh2rKvNhOmyY)10PzQgA=)MIQyI3k8Il2
zvU;_B)f(T1-so^TJz5&aIQpZ-IKs+Ko`Z0~JzXQEBA;NCGYzVd!;77EW6$^gY>?zT
z+8c_ag?6kbP%~sbx}?g=4T6E4FTOz%K`?e?43Hyc1nKYBvx8AbgS#gh>$6C!eSuMX
zN4wYEw${+x>C3tXQ`+8^V3%HH2stA_oITLEN@Z;I#(F+!PPqahmoNN5+~f3$+EC7!
zD$zXA&T78C$)~^gs<A91q%-o0Q$m<}I2LV+H>tAmP<*)2XVB@~z*a~gYz-#!6Kx~R
z7|wF66|QOPs?fD-76=5+`ij>v7vFi%=5an8iG+<|mn%Hjd359CpLgmy|Gcm7&$~F?
zT*qvc%Yc|kZjo&sc{AlVH@CD5>bfX56`I_56lEgCyNZ4A%_QxhEH7XRjF;S&YK<_>
z8A^6NPw~9sAo3cKm*C%TLyl@~4nZww&1S7p4DAtDhb6WKXU`fNJ>8_Mg_*$e@N}0~
z9Ubvm#4dUtKKAmeLn(2lV@aNeRvk*AQaFEtJhbXiN(_0@ycDfE<vel<tvZyFM5!z<
zMXL^_5ac*7MT}8S!J#0YhgO|39Jwx9btt7z@eXvDU&<U&&V!V*JcZT|$`gT4(>^we
zJU=U?codfu2YJeKl{{x*)r4QH>R*G8V(o$-Lmz+sIk+J9Xz)xokv5RGK*{2IA5+2^
zeh4)rufU}g6n-k4p5G@$oOy%RxGvb)EMku!-DpcoyEg>c*|wHcrmnfujw|dP{poi@
zMu)wjabI1`=W$VOIn*|&d<x?TS;OQBLRN<QR$(foD{+V=VwPQx#Z)R$66`5wUr(UN
z*VY|N+cJ&z6gwMmu#ZmmSe!GX>GjR_$-b^J$$m}bH>;usJNg4J8M!xATm`K!iJ@=w
zOo!J6-K}~(HX7R3^(C8{^*Upeo!zn_H5!DVSzkYq@7`cqW3I<yBParZ8biBH<ZWFA
z7pjM089x<y?n=*Sus6`yW)mbrPpf2WYix*H9dQTRzJ02FIA}Izj~4;~qhyzC*R3XR
zcc5<)^|(+^n2$zvJ)~TkHQq|=g9&-p;A;1lU{5g6-dHDm(VJ;()9Xx$=WiRsz9{g#
zd1GQM<cP$Kn$_CexDf*)zS)@Z^<d_SkhyLskI*_w8cgPXS)JB%Lw_{d?AKY=)M`w+
zhKBKRNKQUc=xa-<)HY>J$T4VxSGZE)<1_0M_*!*Qgc^>S@*Pa2^XgDs0Fd)c5|B9!
zB}%*$+mb7|sF&x#Kwat{h-&q=)%u3MnBH3V#BjZ7UE7)_ZJl273}oW|{)9J?@cP@^
zTho0ZU%%SAI-FrbEY#vu)!L2bCXH%Ms}#@I)Y!Gn*7jZv-Ku94y}`zqlbPFtp=fJ!
zu>H3&huzGSjXozfk8ocMdKuxPOu9sA;}_m(@_ex5Bx}~$*&;b&V$y}IAKkWj)}`LN
z)tZr9UlEl+Dpl-JZU<gqYX$_eNy)ecU&~2atzJ(b6wMWGvS;`M5@3=1k_n2vC|S?7
z%4I15FwAr-N(G8ptH&t=ZC#^5@><LA1eMCJR3gaB!NO@+A6yl{r9KhmVg;lYkxUOY
zS%c1~F8KBy@$4U_o)j*<dGxJUW~O8;oK+k_i8VBy@J%t4Z$erKOM0aS!7=LC*)(?U
zCq#x|$Pn;k%zX~JC8~u!h+`O}u*$MR34xl*cTQBPEODnhy2^%aUEnj)+{u3tVq!Lz
z(`^sPc+GtU<mQ0e(%7H|b9D{!*(}a32&lD#hNr2`#)pSMEe{Xr*qrmp@?$kl!P_cS
z`1%Tm8FqH-#N^D(<iu9{hVHfN*RSo~AoDRD<bCqA2U}b2F<D57fUR`7Vwr42F-J@w
z$(dL{%vgo_WlpAJ?|?^gHfA<;EnZk=WpbYpO^M%1w_Jx+!$n350X0UXRVH<<R&Q-H
z6Y@G79;H%Jc_JU8v<SK3E=mV!9INC`*<X*wM|Ri4WRvelJmb$>jh49E8*Fc~wK?N4
zM~pUN8$BL~G%;rvI}6t#z0Kdy)Ks@h^h%DTQ77tj9<yZE)|owyP!hG8Q0se${YJb6
zbPKT)W)ZF;RM^*ZQBNYFvdzskI9FThYPC*wHq-KsP1v!+{;o5q#vUr)W2UttBK(q%
zI6<O-62!jCEcYdvicwq2DPicv4tBObNprEu`BmX2h8}IH1x_4*unKL#K}2q$Q64+w
z81|@q!;Zs*v758AHw!nBmuBU4<b{R3lDAaC3qLH4X8#UXhfQVc@MLW&d)l!hkhTl9
z4ubLC%*=cADcrm<JA0#4Z!KUM0E@f@dBrsC2u|(df+y)wx#F(*eV#PT%4zoerROG+
z$%*q9r?c5<US7*2l!u2W*2oO+HNuF%>cbB<!;?`b#7*_JT3u7Kw)TW$qSmxZRcp}n
zIgYGqYGGPj^VjBYV7)g@?KWFfyjgg;v7PW?1b-@&@R2e>d9%O`()jk}+i%}u&+D1d
zZY+FF8VliKwert7E|$6YGPPKKm|VBMGtvR+tj!;XPd9u19oJB{YpvgGGGj)^dR>1{
zvjlEW3Y?t-KO{{H8zk6t)<}`sNHQ`PSy*6)=jTzIgdKW07j{w-nqj<?-xOa_+`w-8
zB4(LFnaap32M7RWBuuhYYU>%s8XFLcU0)}eovo~?DXkZ^oxwV_sHt!7wxI>JOu-t^
zV;h&BIUl_rk+Lk$Co73LAhDk~oL198$4ISFqpUU5j!54#iw>u;-k?*iG1X(6O|qtZ
zEbz7%vRFdm+l9aPC#;gsYSWwB8XDS-dZ>)(IcPV4xyK{7n7EY{T4tKhT*$BT@<%ci
z7WEf`acMP!gJnmD6gKM2QBU9aM6NBXybXE85sjN`>$DxCd;#CQaeTXdZFhoeQ(<_5
ztFgn$_2J*e&(4SY`@{6{MWfhniLzU{bVn}Nk<Qr@{$L^z^kdr?atEZwYk~vcF=%E%
zc@v0swa`@B*5YWQ%`HNG5DE`*H|h;xOiY^l$i<=0+}A$PAMZ1-Gg>SLJX!PZf%u=|
zlpp={hC;mu#eQ42*Ppiyhy!hH_+`ucz1_BcvESMdGdGXKVx!^kXe>5D_eAE4XW0wb
zr)h=EzkCwCyiEn-#dIjsq`XCC`AurGWNh4&?i&oR8(kNk%sJZg@LTAJrTclpw%+}_
zRc&^$p>3oy)!X6?_a^ewHM@5yLyhJp_fR654S1p>T|?6~yJ*dU?V0;8HIo%U)@s1c
z;HP=Nzy$tD5)P^F7Plqa*<MpK-)CQK-8!D=w}_U`a8I9Y^}qg?t3o~&F}nXa3;$oc
z(7YkMep^eU+3uU{XxR{!eBr*$UKQ=cV@2T}bxl+&Sy=G7Z}Ouu&QL#o<&{@nxZ;^N
zxQ!~a%Q)|P{lewTmtT=aB{uV}dtD%~&i!uTG9F(6R2wwgUts3~S}p9BLG%OOrpY8!
zVt#s{j7kbJqQ>QGW?5(}iOVdu<vY5*wT!LpU2}M@br`76`lc6FGiTxdVeEf>tKBgk
z>2-?E_1Yi(nT<{!;M}53b>wu+VRi+M?U(R~MCr*Ngu}*`1n4ba{EU$YUL$E8G`hej
zarW|<;_Nk_<`yN8YtRYzruHRgl2WYKYP5BEgMBz{Ga9)*Gu%29w*N`(_Z9|rcGP@l
zk@-clwW+Yk+@iVBzn@KQ+E>edRFm3_{?`^SAlBnc#0O-{2H9mZV1lq}@(Ed@C7enJ
zewAwVpwXd&Ug?k8Y8<=zyqdb69=m%@oz@}xTErU7kIy>l*6muQv1y~@QJj=i_08_r
zs_iwa;~QG~rNWnw{t?*|`ar{PgN8MbkcpZ+8l`A81(c-;24Rfqw&I%;a}Zv8)Nc(x
zdll4B?@ib$iWut$9Kj*uD~9&;qf={eO1EBPv1lco)vFc7rom9YNpy@RaqPq7)$1k$
z-rjXX!lH8NKZrHLHuaL{RP%F>AHOW_oo7tF=ew)j2D8hw^zVdl$QX_byLJn!>khLk
zoBv5r@HCvSqI<OXKDsBW`CZg6&w;8*z}UW?P;K2zkFHi*H51m<{`}w8)GA+mp0V<L
zz{+J)`CPbBGt*R=6OK%ir1uyljiFYa7_eqR`)4<VW1t!r#<7_=gM1<d?K0pVN|J9&
zbAt{+WD?ki2_~@Wn&>ZNotwbF@Z5gaDE@`F{OL!knqKvVQGHIO{^N$}AC1l5v8x7g
z06<%~Lmz3-ap%sR=q=;f$m@l-2L}f+qOhnj^1U-a!l4<;^(PXhP&1gL*I=;F0YExg
zp7HLQnwp$_O4Zj_^VB2p&s4j&1p?c4ss1~A%ci=tew(yyOW_+~{^a`Z!mZ(Pg$h1(
z3ic^r*8sAYPIH?y)Ow{7{loEx(tkR-prrr7L?+|q!iCrROWjbtQFSyrIvDW;wuZyu
zZGKm{r#}*oZ)_J;`i2eWFI9TeWCOdhefF89Tdc#bVqx6QDHICy?LfpNL``xWec^?p
z_@JMIXv@3UTWOT>oZ)LHEnL<hXG$c~;j~`GHc(j&=wj(l2d8o8YcScUI(ybJHD!Z*
z*5!BP9L_i{)b{kuu))1MA4yL}B->nEqW6V-%;u3?p0}DB;5s_8?P+)tVJEPJ>n4nL
z3vn(P+rS3x_*Iy08S|zj1|6zL@ct3N7>w^TjSVOn>mM=v@rL+k%K!Eo#y<NmhDV12
zfzciMPuN)-4f|p;CmGGP`dVpSFAkf%Z#E9r>Mu-31BF|O6q<sQ3uh5E1D*rmp>k}F
zDwb7R3%P_!q7`N_BIV{EP3)g@M20xW?Ag{9+0@lMXgGGEaU{HdmumA*cb)#5)$_Yp
z8!^h!XJ%(lj(f!SrEgt6<!-8xxb_Y3N$d*ByG<Y}%t3Go`KzR3$RY)wd>k2^i__9v
z=HH6e^-+sqp(kgK**@&M<_hQHk+j`x?@2cI2E2_Y{*|rW%9MrwW^NejjSbt3jZ<28
zzBSO*U{hHGCd|y9NI2(4EW&0_F3{4`D4Bwy)Q}6t@@);G6bDC_Io;PXM}H7IC5Emc
zh7OJno~ExtO{X`Il|*SU_HOg~^wjnWW)|jU%q;y&Rdc`?YFF)MSGN9eeU0#__9b8k
z7KidmY2uzoZqA?JaD*@nBrMaEq?nJR<FgBeZ~ES?+r4R=?SIbIs_E-tyQkg{{9nu`
zjcv5SS}IApj)1iJ5l!L0Fp4c;EB+7m2IeBIPX^e&Q}jt#APdpQz&H9!MoyjZ%)E9H
zKd#rb*YSe`6j5AFTBA(N?9;MP+}1IJ&j&YVZM$ahDST#a8)?_t^>rq@p=%~h5;vJ2
zUPo=vni44u=$k&g8<va(HDaoLd<OrnvoqJ|`+tr(#%A#Ol_dRb>CeIvMxhL+mRr1u
zH&H+eCGhd_^*%On?L)*LxQpQ|)C%*MVkkj#>}k|2^4&kwN%ex8%BQkrK?6@*n<ajR
z+4R`=zV}%C_U*u<yLUetxW=ar8{P2ej@d!!8cVO=xN$9_*Uo~QeTDTF<^c`7tS-VQ
zr*K*;yt*_ED`fdCtdhSXtK`aO+J_MCpmdP$6YB8&E4ByP1T47h4Q|Io4%IYr1XQ2O
z=}M8OkE7&GUh*WYDsstbp5sT1_QHw^%0c%@235;B$hR9iZ0zMSY=Lgh3CfmVUi;G}
z7;+AR@xclhSS<nLR0#%l66E_8RotFj)q_)|9uN$<mgRQHFiuy&_>$MM62|FeEXcPt
zR<%^dQ#l7kk^Gj!;5KXCjsv`<r`g*Te5~wC56|&qcD{m-&o~Tj<*w?>kJ+mg7{A~-
zR`%sgsV~&ql{w^Eeo}>Xiso94b-6D;sp_qqV`V$aIVggkT+5lt=*u`Q*Fx?1ctuO)
zcAQ=Ai&F0GuNb{qrjwKG44y%Q@O>akA}W=0K8smYO{IK{`Mh2P7xB>^2hFSUZt2I@
zue+{aUwlt`4?idh+f<Id!M4(D!O0oymY!odnx713txm#QuZ}~I{S3L2;jsDQ#q!Td
z@$zNy)mQm%K=3FIpiUS5lC6n=C-1MxbGq6liF)2$J|)gijZ?kvn)UT2Q@!5I_LToZ
zZ*MUPI~jY?f4AZ|3(;PJ;zP9hP3+}<tC+`L?zgyMlz7>B)UP0`i{GE}TQnMr)ym!|
z>|^J?K5^pf^Dp~ecI`;2k~{9tn}MMy6%3|oEFQ|n&YhQYxn72Yg3Q@usIW^e!$pKr
z%Q9@LV;TN6nZprJtdv}?g%O_Rns~8FZG~Ia<!J0+&8;3il5pe^{D_@f_&~aSTl!!@
z9<6@nLv-~E+~NdzO}6;-Kj(YSHH98e;qBqV)4x1%;+MSdGiX<ytQ(NyxYq^6nZu%m
zk6Y6}dEms}ub5)e!~cLU#msT(Rp~hYMU)Z7XuO8KO{^IV76!6{ayh_3hnYx=V1rVu
zrCAh1M$y~>vnc+y292VrgXtunB>A+>LH?}^201lj*Y7o$Ap$iNHCm0|@@RsBL76qc
zI?i+f+s_qFv2&o^&p}~f#cRU5>~qND5k&`bkbkvThqlNX9ViZ~F!zul(<s7N$UZNS
zOlm3yQc)D*IKt;p8RGq|zI*^%8sXk{qe|=?i41KH^cQC0laAncYisX1_HR1Z_T>|s
z!-<*KJe^)+s@dPu+|uI>q^yoyXv;ukI2>Nrn&`%kMo-;HA~V*X>jP^C^+1lIRY6B5
z(=+m+hf-VAPzSmCNg`z$Ix$JIr5$<hZq^s*33P2quWFeN^lkK?jKC{z=TO^L7orhF
z2NFj6a2Q9<x))!E)nf3_SS*;{^8dC@ci}Gd7B7_Ez28rzVO!{a<~x7#Z;0Y^#a#?u
zwB&Vz)1TNR<!kH8Bh=(PNEn-!v}(1nuC+mD)ahHAwIZS^8&<b8tTC?9hc6(MnR0$A
z_3Tf77{>u?rP3}4k8esod-jL%?wuW|D_J}zh_J<ieruGFU#bpJGwHd0-Td(ywNi!u
zHyj`BW7l2wSmB7)rp1r4=iVIAn6dZ_`!%Ek%sFd{ksRT+nBebkF|yiw>|){RyM=q~
z(jhzB#dg^xRpC<MWp2ZmD?TImP)<YAQ#t0(O;6$IA>r;)t?=;@pVM@%X$DrZI(`n%
zP<5I#g}p|ML8f$5J)r{k(wD{AXCgz*VVApoS8}}GQLhjB9SLV^cXD$g7jlJ+dShDf
z75+Z9_@~+4#Kh9EZJVuY8di%<UX~l42@DPO{_torym<(lL`JX%ek-8x4Lpfm<n?i%
zN2kT@!QopGc2}BFILOM}ah%W%a$QFQ+ZRseo*DUzotezezZe-kwllMILsg?}{!UN-
z!Emzur-k>~HFaHhf4*litgO){XAch!9-d9ocdhCgqGCtW-HF^V+pfk&d?cP~RcX~%
z)xf%=_>ItybJ^gaH7v!fB+gr*ra>t+f5Yw;YQNDjgiWqBe~w9r{E_14LXV*1`5~)9
z+|mRMEcCg#l*`8Meq$zu*8EMO7Wo5!KVE_#q@#zy470EvdMoGD5oB}Wu4*N8ma#&~
z&R7{s7VefZ*($9v7w!OhYw@OXr*N0nG8+3<WiqEs-g^&k8j4qx-^1+)cvG`VVE?%=
z1%~t5B>jSWty1AF{#^N_QUi|2{UGlfi-&sG-tT?O{`01Pez3p);6L9~{vLUDe{b*p
zXGeyg-QU-@|JmWp6O(OilTTzi7U+9ntYhDWCmw%se`n|Z7axD(!oChieE!_dT|b?V
z$LD{#Yv;N7_#Xwwo*Y>B<aj7F{^YuWC&z-ImvaAV2;Wu%0+eg~ZiBlu33j+-6h2%E
z<&<^dB}LMXLm=pN2Kd;5UW0>T4kef+!%nN%>71Y(ymuYzq)?Tkww%ZBW^%TrHNvgJ
zi>1tx@HIhfExxb(9`sOxXaGRg%3;B^t#Ck9IKbOj&Os1)o(wBxlZ3C9jODzoY&Y92
zxAKZ|3q}nv0np1*$}Jq2a96l@9nlBnc9!!1s+_CF&B_`7$5NK<E@zjPNU^|(zYkjA
zEoBA(Wq9J?zPk4*#{$~AoQI(DTpCu+C;_8i3FX|ag%=AiQcFgQ-y%}m3ux_qV=x*Q
zrou}%g}~BBb;8lm(kb|5LrLWMl^%@2YVO&DG2?bN4IeqM7MPKV74zK{H-H2il6G55
zGY2*K1AnA(xY-^Yw5Ys4*s%0J39_@J!5(T``VruF?!EgL>h)*3O}T&8fAHIV=tA+g
z#V>^k$cV64S<8?S`Vc3MG^eD|h&?<is_fHyzu#-ydf|xAJo&S=ru><qZEsw8F>jyx
zzwi8jFz15&dL8HEz@o4~k$IHXCj;)fkvHpTg~D1D#Qw1QNHFE=i<-R}d(E20hL%>n
zR&A?Q4feGSn*C0D%%Q0f!u4jW(bc`y=j*oA+JlYpEv7<$TiyxW<ci<IszE0ru})Z(
z5L>uqiEma}e|_mv=+Y%oH8?prNWbb3PkXxXYT;G;=~pkGIdd7}|B9PytmT_)?%WXa
zCm<!_UK{LF;G|y-`hxfq9>p<y(+Qey6i1N`CSwX>t6{ILR>FNZC-TA#xfI=oBdDnq
z$(n*!aSCgNrsl9>O6fz25h+J_%HxW0p7OGgho8^q$kSDdDe+6B9N;PWQp(dvIW2sO
zJiV2a98w7K7D_?OBtfspAwm`S6zxcP)GoE4zd@~13v-HZg(HxT298pz(vaV9hajHw
zd+Axg^9BCg#h<0ZH^A>zygv}3_YdAGa}GDg97CihO-(rt##v#G9Y-CSnt@Ua58+JP
z3&L%rjFeJd6Fl(2rZ#UXrQAfGtHKvZ*<4EbLf8slk_$*#U(Qnu!7Eij%6`P+p!U2|
zOtVRhfTm`V^1y0<C>(+vXGLjO$pZ^(2cpVNDjrchq4+NDA9@zj6Q@R5mk3t<U6o$7
z8C9iiRHdq`lB?Yten+yp3U*bM`?UsxR%bATR~rng5qn%GKgZ~6jlm&*jh8Z&UK(a8
zGv3Ny`rg$>BOc*YXfUi<ZOY1zJ0Wf1pU$}7P_M7YkKs=Y`g*;--d*@Rqh42Euk*0K
zFz6__xw9~jbpFHMC`UUlJYLRq43GdoXDocM0;UVFshkTGS3D28NrG-T#bvCXleQB=
z{y8(9{ldFj3ZHVK{7yV79u#gZBA^J~y(PpHdMpYkr^FPh%?2Vu>{{)0diNe+?vY{A
zJCE^%O~~t?$H24V$AGy<hDq;4-9b^fr9XtdOIG|EFo$KBbbC;(EgleJ>g&Xui$?(S
z1kE1Qhy7d)HndM1lnxpfRg1#J*|YlN$0^rQKtHY==DFZCO4**$JtaM*JD@@>2M*}x
zDc79PuXstgA@6dR^cPYUO8SdVSl<+KxkSk>*oAtpt10Mm;{ncH^&X+$5pr}k3r!t<
z{LvK@q>ccG_<`ajWe;gYwCDPuMl=D4Zqe#OG~DK3Q!}7johln<$p^TfB;pfV)|S5k
z?HSDVLzstzTUh=MeJ$V^AW#27aY(7IO8<g9o6GsZu?A>v;hE>d^B{4R;(j3u|GnGf
z6<{De3D-bDtc0e9&HTJWWmicFe;_X54@b9<ZR>ZcnmPl4&L)+!zm3W-3OV@FzgH=b
zrGS@D=!8sn144va;^CHd+>0XEyM<iaI!9B+=gTxX*74FuaH8gfa*%kuT)QmPqVkrG
zCY8M=5sxQo>`F&Qcqh==s0wy>2UU%ogw>-cdAzD5g4J+wSSPe+Y=T3Gq|>da)P|D5
zE-AQnZBXh8qTHv#R)q`v2euE?Sn*&g*&BqdWzz!n?Gxb_3XjtMKwgVwjm~TqezBZa
zD4rCyD-M=o<0+~+Mxv^gnNl?u%GEs(6AxZj$Ak|R$4d7b{7y)7B?zyVAw6)f0own*
z(4&A?C7nf7mKJ9DmM^h#$yY|`v8`$pZ4J!M>YWY#0QLKQ;cZ2qa`yL^dt0n7=Yu>`
zyeN1SxE+ym>HDx-?aLHQkv%09YzhXOq)<rkB*Wn(eZ-*K9i$H+y^53V)5`hZ56Ro!
z?)Aju9;?@DZSZ=9H{1MyXf)t&6P?Z`x4X#+Iih$S^nDpL&%Hf}tKgKXHEy1<`|uI6
zb(i!n;X|#z3jXk#a@YMiJCG|%Id9dS)t|zL@N)z-e}dLInZG4qde?DoV>~G2h~4PV
zBG>)=2HrNvMa<@a?kV9GxXrvCGI4PR?HgR#zKL1;%szaC>`VGfb@)*GrqI6emF=5C
zu7i~G)+znjI((>oRdZSyB<2MnQo}iq`Vi)EKA!02GdmveCnO<DQ@Jv+<^EM><#Kth
zUhcK4nmSq{xPMTdo5DLPFu6d7L{k$re+UW)VP*nNN)IL%8GI}xBSKde0uG-}f}iGU
zi&5}o9bG0-AGWeJ2BRJ&-xB&1ahX<4vgL!9B|X=jaVMLEP&6P3eXD)`24_8pwE;ma
zSFNa#Xk6_r%{SC&*ELy{HFcs<8*m67(a>yVI=xY!b!3SXmSzVy;YQ90-zw@L!Q*Z{
z$eSgrXmoK=`es}jze-qn1MmCf_Y~m@7BS1Hw7B@qRb-&|Z-FXCv2s9HF;RI-bn%ps
z+bcbdcX!z}M4dQ5`ycX5B*C6=qE58wq*bd1*)@A@yW8s2n<aC54kd0CD4NK1?(e83
zK4q29s3&l&Ig2xi{^p{BwMQax!Ho3?XTOV=i#f$irG31GGsDvGO=<65vf1Lj4)4!V
z|1`XPUW;z{)!}dUO48ot_cw^!@%N=Z>V^Sin6Oal=jGydz&S`O4dG$t)k|1_fX`2h
zeb5h{5g^$q6!*SB%E@BC;$ZOvQZ|%QE*1)kS<FdDh)DSut-4YSAu`Mj!c19t;HVi@
z_r=1#x^(12dky%LMQLB<bd69uc?rmi;A)i;<f&jWQyG6Vjv2ZFyp+|dp6S;(9V7qf
zQg0R0*mG8Kor%*G*;}~Dhp1EQZVgF3PsnK!&AK|zyP;5^PqeLbH#X|bt6-dB#WzuY
z`1h1=gNuzX<Tlw*-Yb`H=&LIKH6(RCBz0QtA+qSzW_9748}Q~Uo+{cEPa%E;A5G9=
z%4>P*bNkiL&YXGbDH@F<MUUb{@g^|61(^N}Df?04Z1D<GfW~{D-k0)7DP^wcQ@m7s
z8F|)~Ql2T!D-K~zg4~aIA}Z88r??6Kw?2}PGG%#&m<(U|NpASv64K3w2uOf<8?>I4
zX<dm3VYGdmO4Ib<bPjqiDmamwg?J=_4R`9jh~8f+_nvkzp0Z!He}T@QAzmrJzbx}|
zqEd<#{M6^~U%mRpxpUGiAUsiYDgLtfDt3kyngG{gW%po>hWx6z3oj%!%Xt>{+k%*<
zL0h1e*<JRul(xG*8PD6jUVDCA7>q*Do{tU!;=dO%iXq`Y(fq+WgH;9$A3|oroT&T=
znW_gGrING>9t3>zXD%z^xt~9m_$i(r1CLT-91y()QZQNn(ei3JgVr@!CzsjnF47&K
zFib#F4we2EW_c3SiU>sKQ{@N3=r@?FgSc-Mav(uTmFb+baGxkS7^`1Zvr4O8rG3-k
z=~&~1zQL4m@J3+S93p?-1lK2$2M<R5R@g3pzQV8^OQaNsM2MU7{r!0}q5~9*DD@U@
zo0<k?oj~7Cp?6${Qbr%vJHlsm@5+)?+Bjp=mSv!dG&QH6H@{sDH!S0gWU5#G5Xfc8
zYE-{NRFxrDq^ljedGniPg^D2mBig)u);1F_Ltbw4oOyon|FF&5=fxevWys5I-eI2K
zSKa1+fQqX0T6LL<wnK;Oe~^lx)CHEQNLkzmDfk>LS{C@+x0dxC;?gpEAf~CQl838h
z<59`)aEcMNP4EQDe=_f_Qg12}^P756pA_tI{?(A!RmNEPo5tj6w1RY@hs+Wjjk#~%
zu}nwtZ#-qZRYv5DB%P^%rMX8mwD^ZWEz?loYg-v=Wi*aR(viwwEYlC!mvQ=tBvg_V
ze;1Z?bNX4;tbT5OC0=gK>L(}lvwO-7E`L{3{~ub%Ufmwm9^KyZt!ZT)Lz$g5PD~hQ
zca@u8{w9w540P~!gaSCS%>TH4O+0C@4mWlH;DT`nG=1YNVCeM+pzjOCvyf<SDi1tZ
zW==OJ&FOZic2SvI`l%^>zt*@5t`tJihk6dJtOvVDm3np^vK=Vbv)8tt%1ol3{VVIC
zGUa-9Oxi}v_3Sb(l>76l5>_el^v9@_`a|Z;lI&LQ*nF+EX;=t$$4a%@#9Bm!QQDZ(
z=XRBP`Pa&0fCMl8`yrKFb=2i{?5?vq13t*ou~KWyHnrJkGeO>M^0`4Cq#fo#g>`@i
zKff|G%vfT#@<c1C&}wzLfy0hyGu%~SUa-2It@58ZT_=x4+Jb#>!P;iA*hGAx2H0^F
zCza<>gS)zhhuK2P?H;!K9ZhD75uIM$)QAU%sq|3lM;_C)$tvi*4V6Do6W3GVA!8uS
zth7Fm@$~@<#5&`YZKV}rhkie&CfSy74l5(}u2)zS2-pgXLK6J_eyhTE@b-UHtGrun
zQxCLiubI={|7NRv;NUA-1@2vGRSdWS89a!qD!NoZfVH7oyKh>E^xK0gTRCr2+d!*!
z=JJb9piO{oOS<1BU=j5702XEIzO1{fz-QMo?cQgrnZBQdg(B?6if2H<_2l)uqK1bP
za$8nX+EwXfGK~{uQr7x#dd|ArM3t0GN-D9<{mcroM$ZnSXGGWhzR(BieHeMSbT-L)
zZW8r2b=ZG5mA~U^v#Ol!?M{`o&2_9o<CQ-Mv#{|i4r6W9kR`Bs<`O?4+Z9CT@{|=q
z$wqWJihnA*ASE$b!FhW+>;a?7=JVN9#(<q*;--06T)tMUA-PS-_2#nLOyVcbO7(;U
zU&z@Ii3fUwzB<1@;FgtVsn&D7_8P%B1Q_GL0|ur|wgO{;?6~*C2yv?}aiuutN?O_(
zlJ$4AgLbJOKBDG^_U@oC>=45bAIo_41>%Pv982o=LZ!`+FKE+ACQDj#cGWgGLp~wY
z6WdF6;y$q!0Y=Eg<qr7$61N)5xSRPyU>xWDz8}Vle*dBOwhunEyWg*@AUE#s>KTgQ
z>c??LyR!k)UX6W_3FYg;b$A_jD@GKX6+0D=%knx!(!*^iWrL=LLLSR{fEV79vfCti
zlt4|y)*RX6N_VG-CS;|>gGS4btb|H>HgLxVu8ev8fc?(E`UCK^+;w36z+;>4Oz&8J
zT)V+{$2XDdAKx+dSVQ`e9pnAY>4wMH-_v6%JUBW!7)~`jHnyYi)tx)9Pv<vnzPou-
zej1mF_v|@TdF)zP+taglq09d0?!mEcXVx#o2WRK~ov!Y&K_s|3{qsv-?tavtb#{;0
z?}BbA^0)Ga@Eqn7B#s&ehXLlckpGnMa^ZC0TZTA1tgdjG&1i)qfu$1x{DyT?$=CA}
zh%8eB4-beGZtVZ!LRIXQvzjWkjYSHdW0Bmt1V^%^j|%^b?JhgE!NZLWt5|;Npk0_L
zeDrp;pPK*=-4B$ti1M|HRv{}~(aG<@OYm{qxtCcJ-+U;rgDQ4V_^|M6hLDVf_f&=V
zgsV|@M9mfpXVirgc6LO?Vujl(s8fh3c13to_?TOjf{ba{VUa~xL`1lzD>h~>d}(7U
dXpS`R80|y`Xw?Qze5E+~<YRQHDm_T)|38Jn6y5*;

literal 0
HcmV?d00001

diff --git a/web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vAkA.ttf b/web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vAkA.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..388869cdd74e722e7534199e11071d23c7a7010b
GIT binary patch
literal 167524
zcmcG%2Yi)9_CGx3d2ViQ8YP4h2q7Sya9bK7fs}ib5PI*V0)ddkkkFfS6_s^uC>E++
zQL&@4u8XMH5S6u}tH@$q3wHAVo|(BJy1F0t-S<a6=bV{&rkpu*=FH5w^E@!l7>i<S
zm}H|1@&mzb{kHiSv;2%nZ^7tM<0f}`>MO<`x`wgGwiJw;kej}J*CUMe*~eJVYetP5
z=$+O2^}873lTk}a`GV5A)Vjx?WNh6BjQQ`KQ@wO{?{+I6WPDK%#ye!stt_pGU!8Ca
z`4f>pbuJQIt0Ni_{t3`y?t+FTcUP{yg|Rlr8H+n!U0Yt-w&U|V7z>-rSVYZ&(j|5F
z3+!9ueG8CSQ@WsX?8%yUP~St0i4}FV3mg3H*B)eSbRlEDZ47<0A7EQqBr9iO6l?L%
zLXVLmkDvXVG3PaB)6S+j7yK#@m8Mc6VnbYq4^n2u4E~03d5UT|KI5kKMBko0FcoE=
zaxRenLSD%PrQ)9yeZ>K0qwqz7q*JUZpUJ$u4^<f^r6q;1N|>M?Nh(DDa`JOWu|$^G
z)FeJ@auA2Sbt2<8(lh>rxB?_m<#w{!)CVgZDTnxI6Xq;|drep{C+};*k_FiZCTy|Z
z?0^Z|tb$E8VF&BM{3aZY5My&$1ODpRAT|(x3n9mPR)u&2!pVRtRt;K<)H!%Q3T+H$
z;}CB|N;#`UxRli(-)O{Z*#MRcT#Xhd;#s{aUyJ97%!^vwXfcIlqRm>=Uk+Tu7U7vk
zJxd04vkW|6fI8=+Jms1Vx&)wWNI}k2)RBUGslVVOv6+)Z!%Jc_FD={7VfjcOg;xGZ
zFESbBAB7Tu=Gt18`}bCFRh+t2UlJh?;+taW2<1R7wX96_W*l1z=`<j`05p*mK^7#D
zddQw|sd`p{C%u0)MvEE!B_l_uwq#Xu0mi2f>yHwPF=`DcmB_}T{)K>g$hi{v6ES`y
z^#+7SqJ{-XO-$_2QWl9FQ8$NX%mXmYEWu*zOuK|}dzHNwc%!`$c(c73_#%4?@TK;p
zz+3IDz?a*X17BfZ0eqEx74S9oHNe-}*8*?1w*%i`-vE4*y%+5Wa3(OGoE1Z}I2(aK
z0p3O;TmxP?<WYx|W%v_pIsQ1i2!EVij6cEdXRto(G5m4%IQ|5C6@Q$a#2;s$;E%IU
z@h3Rvf^puFcLI**@kr^+J0skS_d<9u&q6qxXCoZo0pLPj2s{avPw=UHDxQ||QiSL5
zIS6myn}9FjmjGYNFGc!|n8AYY<>(cEkb^7!7=Il23H}7qU*^XUeoZ7XF1m~EOo*NW
z?TX%_A5!{@{>&0?;Rf~!FR)+ufd`2}z=OqL;2~lNaGuBmE)?KR6pLcu5n=>t7$e32
zj}zm7Cx{8a)5J938Da)-iNN@Y3Q+-EEviwfR@4G7l&C?Dkf=e9lB0m9$SKT{)8sVZ
zQdtUIAuE9EWj&rY%0}SDatZJ<xeR!PTmigBt^wX4Hvn&z7Xn`*AsKm@{1fn15_%x7
zk<bIVOYQ-_OWqCqfQ0px56OpsAC->+KQ19L`4{;Y;J?bJfDg$-z=!2w;3M(~@XPXL
z;A0Y_EdMV54*aHk8~A<sKJXXv3*aB*kFc9z7S;sofOP=)uhw6gWe>6kLGv>0bxbNf
zmP(JM(qpOgSSmf1N{^+|W2y95Dm|7;kEPOMsq|PXJ=V6pKW5)3wvOG+j<S!~54<lQ
z!i#woU&k-!Pw@{$Ym9A;xI!EgA4(~^Le?80kB8+KRyS+7waU83dfm>pOYCZU3Anh!
ze#gNa{T<UCmpSfsoDPc#^Mnl#TNieB*gIighMje~oN>-1XR>pUGw2-aoavnBT;yEq
zywrKEbFcFO=abGCoNqW!I?sgr!t26UgzpaD7k(i82baUu#+Bge>q>Ryx<<ODx@NoT
zU8`IhU6;FVaNXv5!1bi-1=ky{lddmaXCqt@aS=%o$q|DhhDEH5xI5y}h<74RN1TZi
zk<pQzB6~)9BeNriMP43xL*#9d4@CYw^25k~MgANW9@Q?YThxH4jHp1=n5acjYojiW
zx;AQW)V)!UM?D+$Ueu>i-$&cg?V`IyXGRx9kBgoaJwJMJ^t$NFqOXg-Ir_fnC!(K=
zem(jh(Vs{E7!wxLHl}M#znHX`yqHlj(_-etERI<hb0FqytA4HKwOZ6_ZL3RLUE6AJ
ztJAH{v=*(STX$;Rv$eN%cI%O?r?#Hmy1w<Q))%$Ds`bv+ceOs%`s+5VO=O!6ZF;nE
zw;9%EVw<uyHEou)+1TdtHaE1nt<3{%o^10%n>X5=Z1ZKCvu#~%Gusxl9oKeN+xcx5
zx4paVqivsV`%2q)+kV{k+gKSJ6B{4fE7lh~B(^wqQfzr_ZS3;cO|kdIzS=IVU3$Ce
z?dG;?Xt$=_mUh>)+ud$oy94bGw>#GEM7vMgeHUlNwTerO>mQdMmmfDet|ach_ICT$
z?d#jGYJXAtr`x~M{@wN;xBs?->=4r-zQe>0WgTidEbH(<hbKF{(BX{^Cp&!E;cQ1&
z$GDD39g{l_>KN=ew&To>^Exi;c&JlMr}$3OI?d^{u+!>J7k9ckzD;~WeBb!g_}uuB
z@l)ex$8U|_9)C;x{`iCON8*pie-Qsg{7;>IoriQT?mVe;dFR^B%R6uCd}HU^JHOQV
zt<I-9f8E9E(yB{Zm%J{cx=iabr^~`FtGis><?1fGy4>C6(JoJSd8Ny{T|VyeZGudQ
zNr+GAmEcPll2Dv5DWN=}Heq$b#R*S!wYyH~dQI2eUH5f8(DiWFV~HISdnCFO2PYOL
zj!!H}tWI2!xH<8P#G4ZDNPH;qsl=BO-|E(*+n8=Mx>a>+>~=x7OS*0AcBtFYZtrwE
z-R(@0NQzGCl+-iHo0Oe2ENNm=SyD~XvZRekk0w2x^h(mZNgpSD+uhf_zWb`~7j?g?
z`_Arnb$_J$q3%b!ztjD6_cJ|2kLVtqdi3n!?UCJMSdTyV_-l`E&ue#HxAUf)cjbA<
zddBvg)N@16XL`AMW%XLoYkjY`dbjF5v-h>VU+dGhPkNt=`@Gnvsc%N#>3uKh`%>TI
zeLv{?eZO}7y7e2-Z&JU;ez*2}u;1zaUHX^yzoP%){+|u#G@xw2r2`Hnv*ba^(~?&t
z-<5nKxoKecfdvDv9Qf40AKZ!V8u#_?m)zfbVm-y4rJk!ik9(TD1H2X9i@o=FPxxYd
z1AHTVn|+6U$9yOJ3I0X?+x##4Po{KC>6X$bB|T+K%9NDSl&X~LQg)@>p7M0ciz%<C
ze39~9sw=fkYM)e3YDQ{p>f+SxsV}F#mHJWYm#IIe*=eoPI;ZtWD^1&x_DOpC^cm?l
zroW!SGrSq&GB#w~mT>~h%h*Ay2HiX8{mgcmgEHr5?#X;I^QXZ>1~&|TGD~K~WW{Io
z%JO9m$tup8lvSQpo3%V^Q`Y5K*Js_5wJ+;H*5RyUStqhS&N`EIHrtWiCOaX!PqrsJ
zE4wIrLUw8Pg6yT)>$A6HUz5E%dtdf}?8Di|vQK1xlKpLV(~yWE?T2(9GH^)dkb)tj
zhD;h#KBQ*I(jgZNxn#(;A$x}0Gvu)$&kT8W$lF8yIpmw6d}!3rjzcSl?i>2)&~I`I
zbFRzzEH@|jw!GGPUGn<mrR3%0jmVplSDANy-pafS^RCR>k#}d_!+C$pdpYmzynp7W
z=jZ2-&Yzw?H@_i&P5zerYw~yJ@5?`se>neG{)zlg^1lmMfmVUef!+asU}#`?U~-@$
zP#0Jc*c`Yba8uxpz(awj0xt#L3Y-dj9c01CV25CjpgTA?SQs21ED2Tzmju@bw+6Qd
zZwc-X9t<7{9uIyH{37^MfwLgCAhDo-L3%-c!RUhN1#=4;3f2^CDY&L!cfr1b0|kc*
zjuo6J_@v;wLaVS<Vdui$h5o{!g~JOc7giM36|N}UTzEy{O@((9K2-Qr;Y)>Y6`m^m
zx`-7;7Ii4<QRFTfTvS*zzNn<Ax@bw!`l78x+ly`~+Fx|A=t$A=q7RC`DEeubb6D)K
z#9{r1r4P#=wszS5VIL0rvAAEcuXu2Aaq*Pmvf{eprNwKDcNX7XyubLd;zPwR79THu
zulRKFSH(XKw}(d$Z$CV7c%R{c;ibcChhIMY{^7@m|2V=wqIyKbh;1WwjJS2gn<M@)
zvd_rMksC)|KJw9#Cr5rZ^32Gyqa356N5zdw7?nS2*{HRnt{rt?)X`C&jcz?UWAxO~
zn@2w~`rXkVjsAR0;+Xzprj02dGk?s&F*lC6dCW&+TaQf{n=^LA*ePS{#$G%2`LW-R
ziyYTuT<y5K#=SM(IllY&apR|rUo-yR@qZux12#9&6FN;unvgspbwcihkrO6PD4S3-
zVbO#~CwwuXX=3k*?um61Z=3ki#J47iN&P03O<FW*)ugSHu9<Yxq<bbkJUM1^`^f_*
zkDfex^4iI}CqFy+pHn(c88)SM%Hk=jr#w34=_%h%X_^`~HD+q&)V!&yr`|mE?x~MX
zeR}FEQ%_H8J+0%kz_dxzYNp*c?O)S7PY+C=HT{z5w@-g*2A|Pu#=sewGxBDPnlWic
z`HcB97SC8W<Kh`t&)7BN)0vZIJ~Z=#nLp0zHLGIQ=2;KV`mUsP$*htaOI|E_zciw>
zZE1XI_tJi)`K7~4$Cu74y|DDk(jBGul)ha0Wm&(n%Cg3?3(9tsJzn-~*=uF*mVI3I
zQ+ZT*$MW;aJ>^;DMdcI9%gSrY7nQFrzpnh|@_pscm48^?RMD!UTSZC5jTLuRJW_GE
z;;o7wD%)0OR9;?rcjcp%PglND`EKRMvwO`>nVmO#?CjFnOJ-j-`-a(f&OR{vxj8-O
zESmG!oKtfL&s{tB(W>56ld5J_&8<4WYFX8~sx4JlR^3o_bJf18hpV2fdamkN)!S7k
zt3I##ZXTcKn%8z-=XvMNOP-fDZ|J=7^GfE;pVu&N<-DEq?w|Mi{8sb(&!0U1lKFe)
zpRP`<9#lQPdS3OW>aEq=s&`i3UcJBivFbzBFIFF~ey{p;^;gwDEwC3vEoir(c){`o
zdl$S`<EZIVb79SGHBZ-kQyX2|r*>-X^4gngU#&e;*S~H|-T8H!>h7$2zV65KqtEx9
zA3T5D`3>jaasHe2Vf6*|8|$B{|9oM}!UYR&ZV(N@h7Aq(H+<Ka+PJ*&uErl1xfe}c
zv}Mu0Mb9kyZgJS+n8ocE_g?H@99TSY@tnm=7GJpd+QqjoKCt-t#qTWsd<k39dP&j}
z-;(?#6PC<dvV6&9OSUh$f604GPA~apX~fdRrCCd-EM2(t!lkz^eR1g<OHVJ$ShjfC
z?aPiVJGt!p<>|{WSiWufJ<AU-Ke7DN<v*_|Tv4*({1uy5Y+G^9iodRSbH%4C9V-)7
zPF%TY<!vjUTlwb7k5+!WvT2obRqIuqR&`(1e^tt=+*QS^#;uyRs(e-Ts>W5TR&83f
zb=9_2J6GMlYX9mbt2eH`V)f3|`&K```pD{cSAV&t!<wu$!`4h%Gi%M9HEY*wU-RIa
zm)Cr>=I0BNE-1L5{DRdN?7rZc3*NcltF?}`9oHtW&09Nj?b5YZuDxgN^J`yS`{CMe
z*2#5U*JZ3LS~q3gf^|#RtzCEVx+~V*weGofr`9{y_gSC1KDd6=`pN4{*UwwOaQ)Tm
z_pLv;{^<IjH?-f-bwjTW12;_Hux!IM8+L4XVZ)CbdvBbuaqY&ZHh!_G^QMuT)@-_V
z)Ba5_Y&x~M)#kL#Wt+EdzIXGn&1Wv`aACoPi!Qw5!uKx<zo`F3qb}NT(JdD}cQMD`
z`ipP6_{EFA-V*k!zqVVt!oPAa&iRKyvzmUu8E1qDvShIwv<Dy(unO^=Yy=+w_?fj5
zvytWi`~cVnxC76}8(In4pLGXx#IqvNzv+89fJKWm79paVz7t(o4-v!qiY%7HUqLvF
z^+H`e_ypEL#IYm+KLL+rX*{m!d9<Iy6Ic$;Q8_rb<=}ir`E#fY&WSnvQPz&HX01g!
z8!RGNq;#SVfwsa~BtOD>s{T-){*OS8X!<e)qJec%vJ1(NWY`i&o-N@D<R|(5cW~Z+
z%pV#n8n6EZ7)u&Y1&3KjKA`DijO}pH&j3dO|3I7r@^l)@MmPZItD)(eW<4NX2<Zdq
z#4karcx2N*m9CJ!gmi}V=J$Z~>3@gba*nEJAnN)p&~1?3lFt4fXk8|K{&)Bb8?E%5
zbp5x0^#6Z>+fn|vz|=|eswJrTMRV-;facz>f%LEn{oloW;#$zD0Gglw6*T?$-{hBV
z*uW5o%%-2soL2ULY(h(bZuL?&g6u>HU@ypK{Bdad>ObXewmoEjeh*-m$TppWrk{Ci
z({r#@uvbm50FD4&1)R}w=2mtrmh}MzG`*+t8oNfeEd*ra;4RDHe*+}I=S}g1rtd&w
z__(G|$o_>u*+H^}zXNhCD^PZlY~>#U$p3fp$<#kk2ibA5#h0=;Ln-Xn(DaqE(PXE8
z1H=-PgZ=((fE+`%o$UMnA<(+f5@`MSPe5zSuL1r>wWiUysI{vvOM@;A64|JW)~v}$
ze+#<(Y17$X=y5jmx)sKEja~=E>&Wv0OGe&q0`li&O<y+Ww=o`A=g`LBW<3m|-ZIvT
zUksU(-fU|6gx}uuHGiP#M~cHYnZx%f{TTusB7p8Ry{q)cgJ-X>_96poI_bb`fR9;k
z@jlwUw5jPFAm37!C7|mBYAm70#G4wUkywK-LLKRtKfPP5#k39|g&xyd>{K$dsV#o6
z=?8ug<NhqO0Im7+tTX#g*;lvt6UJf>;BKtt`#?Vd#X6zp5cL!NYu=}X!&a?9o3w_K
zU86M(>ju^+y(VGr(Y)SdvJ`qIuEsO6`R9Qrve{%SzhiE-Kly_B#nY_6sDVAZuIX#p
z0dm|8z<Mado4ytY0mv`AgNJcwZ!#My+TpjS9+=-WZbw-kc$`yFw;Md<z(bt^c|?h^
z2uDDkuR>0JP;NPE136@2Tzl|OV1Hv-Ka#nKW=`=1+CR;D!{6OQj7I(EF)y`6^;6wc
zFZg*?)kEb7DE|QLmneK0`n(!^)-?T#`XN)BzLhEHOMlRQNWZ!1l!DNn=;@|!#nVW?
zuIaSu^E~9MLjDraS)lo#`AQb2Ngnbe#7~001Ns)|nx<0({H3OE0VJ=}Br~xP_11${
zfzAbuM7sd+`3?HOWhTn^M)|m=(<EDY9Ptl8UjTg``M(9c2{;J8Aa{8wU_GD{>M`q^
zoPfM}Nb83>FedT`#J@-U3((I&7l1c{@}?i;{n&@@Y5Lll-t?_C4RkE%802{#&j}8*
z5!QU9&2ReJj&AzajsmqnCGzfVIz=EqW&N$?$OHM<-SDg{XnW8&<hcTQ07@@NH~tGy
zx<mT&JD_xm^y&`)WJ|i&2XcPS=*nS)p9T<p89;kHg7*Mt07n4N8+cdg73t{j0qHG4
zNcaA~Qs^w{?H_{wLY7MIe?U&ZkmVocBb1NkHRQuj1Mb1x?!dx%f7qS=EDJCekOF&p
zf-Q#r_G424@6cF)9x!k}=yt#fz<9toLuY_4GcXx+ih=oTchk3QN7L7+^E3})t_3jH
zh-M+}-KJ9n$}UcZZKE>?*~S}Sdte*!tCPTQVBN)Tq!H8r{?v3v*+yeCo9!Z<S;#KZ
zZ)rcV0m?33kNk_+V0kI(x&h%gSVuVll-dfiIQ;fB0(;0vWrxWYKZf$uzOJh~`i`@s
zI#Wc_xdFdkN!a)i;sxX*UWg}Zk8E=t(#TF{!;VoMNvsoo1=IXrhxn&>eh(<s9opy4
zz}a#G)}2NAjH>zz`$lIo#S`sqsST=^fZ8IUJ+23U^_SL2{1O<U_KDv!2iD)tq5x?G
zNq{Woz<q)ow5!jd*smc??^(%)W37`BSi|Z3IS$WyGPmrGb(hxuT0H*;sHO6^!(Jmt
zB(j+1J?UWVCDFdx_tHLz&cC#m><7KVIx8cYL(<wydu8H<ctU$37j!b}rnS2r)>`Ny
zY)Ct_tN9;}=Uef-1n0O{kcajT1U<mx5UhE$pQXOiJ^`|j*q1l+L~Vrjh13>766+<O
zhE80EF=)lk0|WsHfH*)~Kzl$RKz{(qHA&>N6n-t_5{>-~<#VfY?J@rbK_30FzWEXM
znz<92L&@?e&ZFbm7zHoFp1p{(XMZ+abVPc8$frN{xgD{`>c|RAxPbRy9zZHT0eS*-
zIO_-6PbRW{_FJr<^BSy=t#lk^viKCNn_ok20Q~+-H**RBZUFsOoeb!z=r|U|BiTeg
zj&)Y_8SG`wvi=09?>w;r{)j_tqL{<R$SU;zb2bLh2W_`%QJ1dse$;)xsyoz%qT(~i
z6@a~8qPPveOW%e)!fn|5yof!}CgveoD!o|3I`Jit!4ej4pu3?xK)ryT07|2L8Y0;c
z@EuC~zb$LpVlUwa#Y>RiALaMg<>s(1ypeUl4S_EF0*rkI!WW=FQ&|Ug3g@CK)}F6n
zeQ`IZJA1t8UA_?EC!upW$cuDUmdZg7afc{|ON{esj8i%GSP>YP>A3Gx3P^|lV-m)d
zW8MMSD@~WE^r?t1P<!)O$e#A-Za^fU9bhnk^gb0p=~6?}r=U3|-V>DaQl0?70wfxc
ztfXl|2(TybWW5JF*M}v`kpM5oJODa|b!nz!SUm0rbT{#MMRlHd<co)$NuV@qohsJ}
z?Ial>{*pv%c6W=k(6bQrnrB@=36f+o^g0J~VIyQZoW<iT(@7j+qxoyhh53{Wdmjhr
z1?WvwE?@%y9RXcUcpxYNr4xkWl&7QY#fA}xO)Lzyup?}eA9Hdn=CfKqDa`)DIsqbJ
zhb94z17;DhKVv-o%)vgvU7$~z9;7(ZX}v53tOYCpTn@Mr@K?ZI!2Re?55}5u0OJ4~
z0l0tHv>)&+pa?J#kP8?Ds0LKEppy_D510WM3Aht*I{=nL!Cp{;6@W_ts{u;^p?YHx
z#{IJ<s)y=00KiSPCU{;|xm!W62M|32*af)qS3qr2d(_5dEr9B|4)8a?8UVFP?GR9Z
zs4oeCzX0etK>$EyLj5H^@&HdWb~a4|bX4~_MCmz&L-7!;LfRaZ`3O`3OuU(f`uuBJ
zfxP8_20#HI3qWbv1`x)rzEjZYQ>-T-RwlC6fJx9%#^@=es{UOByhI0~j~&E9*a?of
zi;tCeFe^Ved_4D-FRicUY)*aUe0Hk3w4nz2^#}{g8DE&l_U23tB(lr%#*R;9t48Kb
zOl0#$jvJB4CXOo}m&kI*k1dAQgR3SM#v)jISe=2m=@*2S>NFRF=Lk76aKCMgNehQP
z>4uwY>A3ke+N3$baUyQFq_I3U%A|#{wyZ1bhkJOrj5LedaIiKk0X8iKcil#qG@G?%
zU05IHXG3wrOXss#E1aHtGannmikU?cP~|0yVezaN?#yMgVW^3Z8=ITRT;?fuDd>Ao
z+@{N7q$|`SXHl#p!`YP$W`)f)IZ$CFWZ8pdvH~`)ynI2ODE!}XMNRDjk^8^n+4ZI6
zBK?2I)m3v!h4=plTw7i(`r|fkwdkR6g2EjXZl$oZ1=cA{rD*J|X<SgxfB4^V9jf48
z|L+*%&!L}$V}Nl_7W%I#v`NLo)l;X!kt!_;`b8z86s9>!`q&yeO{p|@N#6ugE!_Kc
zAl4zSf7>=~?rnW}Oun_=ij|glO*|s*5Z8!BxN|pLMDq9f3w$(B=VbS5pw~3JIk*wf
z%^3S0>q6@y>tbt*b%}MUb(yu*`jd6J^=In}>q_e?<iU+aDq&r1?babvb};r)Q~5E`
z2X~PB$!q0Fd$2vk&b9OHpj~Je+r#aV_Go*oJ>H&ZPqwGp)9qUOe0z<J`+1mOJ=l4;
z*Z2khN^X-M;x=5ionz<O0lUC1Ldg;KD0_@O&YoaTvZvV7>>9hyUTv>ebBj3VZOBG}
zVsFrg3A^sx6VyykB&-E_g?fVjfppgqyXam>?FQ>Z{pkkKQs9uHi+X8AS#e0Cc`Mm;
z%;rc?0Sgd|ys0WTgZ-kM7h0FAIJfUX9u7Og%?O2ZkhExw1@c}6>Ah{e3w|gsajr*`
z@)9pJo*eSM$+V$+=3rOTGpi6dG+x75^ly$9Mv6wPMb0GTyxO|P+GbsAU1x2#uD5Qm
zZnSQ)c3Hcv9o9~?D0P2v?=OkDtXwM({SCE5GAX9k<rBY1Q@mn?=vj!TXxwScvWMC;
z?GmI~YAk2ivzl|DF5VL{PIq5TDc)+b6+9P1YgDt1HfwM@b}*-#w4wTASr~tp|DAu#
zzZ7kR#oxrUFx)sDDMsOzX^AKmWopbUwi&iPQAwG~k{<L`^~C*~+~bhWp-&{~E?7aj
zVO8o0n?F!Qsl09Q1nY?@jamH1bX%1jj8dWTrFPo>G3~~P&^_mPwAuxKoxoLB#Jb_H
zGq~%HG~zG;n)p0=`68F>A>7#=&OQ|j#ZexO+p*htjl51i#;-E+fR`0zwAN9N@>}$X
z%WIo^+A>|p59CQap}tcY0=y;x%;mP<N&oQN>~n2qap8-?{Z4P#;joQiE5f`EH>^Ok
zl`Z#!!xGpg2kxP+<wJ2ddJAk(1RD=Y7h?S$jGp1Q0E}A#cJW1+)qAlo7xo@m0K8ic
z1KuTrz&j;w9@{(U-mtw|<^Y$-T;Q29A2?g)0cZYh%~^Q5S7re3k(t1|CGK0J=0U(a
z<zV0)atQEhnF3sb-*Twtbl_~62K@Uqd+>BGepjTL2LkWLd4y_C2Hq*%z&oT5cs0%|
zRC8b8nX*4{w(JL-32pp^6mXJ#8R>h)^T2y>qD7tJDDW<LfKaD+33!Ki4!A@d0iO9A
zH5^9zUhx$09-Kp{hG&3xiN68wgx8*GcoMio{1y1OYQWub)bJ?q9(bszhJ(Pn@a75C
zfcx&K;bGts@d)rtShd6KAbW`IW4ExI*fne`X672~G3!}1-lZsEQ-3+;@;sE<E4u;j
zfd_`<))RP_Oak61djRi{LxI=f+(Xjq0$d^!fM;SyOVaBKoC%$g_By3CL`iRmlI9R4
z-62ZaLzMJ~C}|K;(jlUxMMO!Dh-PB-UC&niKL4b%vK=_sD_aBak!^u@%Q)a&@C;EO
zVu5$a&cGMTPQaTb?*7{wB~}x(9|c?@qk(6_<0b4-vIB6D><Ao?t$?#-3^246Ho_qz
z5H5jli)8(88Y9DyzDI@w?}opOTF2^!)+KO>w18(y2XMBuf&WnN#E;0i7jF=e27C{^
z8y-&5fbW2J!W&BU3*d`kIH-46(d><)33#>m3b;gk4Lnm+1CJ6v0~d+2zyWavI9q%J
zocZ7C4Sw+<u08?Y0}l{!^)KLE@N^Pap9AlZe&BWDOW@Vw6mW_7C-6-CT1V}k2F`>B
zfX10@0#ULGM9D4?CCfmRYy(lU4n)a55G4yilxzf1vJympYc_v?_V$RAz`MnVz&pi9
zz&peV;1cm3@J#qSiL>{CGjXao4qwo}&!)9(1>RYy!}~E6Y$ltGv(#`FgtZ?8pWvG)
zxfj2NQcHga-Ywn&-X)F$?}P`Mq|zIBop={`wRi=%L>vR2Dc%My67K*9@S7&_@hWhp
z^r#+@ZKIx%bt6jljVM_-qGaQUl9eM$c8(}nI-+Fjh?2D<nu(R|2lgd9&E98k;C+Q>
z;fH#J-OFxcJK44Da=c;lyZsaofUmu{e?`4~5O|lk4|u1zA9#m&7I>Yw8+ays-qeqM
zz?ot{6S7p?1w4)N$SJU|#0gngqGV%<l9eS&c9tkvTB2lYiITM?I+M!FDY`tUDi5m4
zgR1hNsywJF530(8&Sc?Om9ufq_2OjP6YF{>7K@uJ)Sp{{cfylN{n-mVQxpS_f*+p7
z=uY5(xCJ;{+zgzF71|Pe5c&<9Aa)>q4{oZEHtYo639mlYdp&Roe(j*zZvxI1Hv(tk
z^zm<cg%f&jmIUAaHsshVt_0qL-yNvNtAKZkYk+s)S7@s7a^RVw5O@@P-o)>A-~fIH
zpf>&toQXR#LRS0_8gLnE*()vv-Xksn-YvEQ?-E;pcZy4acZk0LuY;$Ic-jm+6Th|-
z2Nwco(o<-_VKtJpLehxR8cCE^Nusn)5~Y=rD6N%5OR!oJok`^}lBztYDi5m4gR1hN
zsywJF530(8{?=%%19yAyyA1VdJ@8Jk5qO7K4O}AD0M8U_fwRR0z?pa#)5XPqoJm{Q
zMy$ZgSOd;~b6FWqHxuDk8AiH?-_%Kti-GrurNF!4l_xna0p2N=0q+nG0k4B+h}v%e
zo+(xW7l~EC0kH@;TQmY^QclS92_+laGmwmE*Fco^4Mb_@Ky;^gTv6IRP@MJ;L}yZY
z$VQb1Rpmidc~DgzRFwx+<v~?>(3zMEao8KX@vf5}@2?HUduw?(F^s{xX%p~H+6+-5
zD#SzLFXCC*Tl%rLu+)AR=SczY4o;;<`C)z=-@<EfZVvL^JPx-kK7%DbgdNQd><U<>
zHL$<ckmO|SUh`phG5h#GaN7H;3Ozv*Q6bVp9h%%6%5DzDheGsrpw36{51J6^wkiut
z9}107A&DJ1PPaHG;p~fd`y|fC*@|Z4EKI!6Jf4L8y3R-QqYgKVbUvb?e5Jq0H%aBg
zo4Tq#qLfeVI(PujYB<g5yykibtNgT1Qu{<h_4dM(bM1Fj`QlAJqLj~Y2d@O3;6K$*
z6>a%c^$}80Z7ACEDb43PyoITs5;Yt^+gor7y{CL=lQ>nhWi4b`>)<WaPl@VUI-&0l
z?6F+%yu`s)b%lja!U?4p_Iv|zTETf0y6_nLM4ehE;a$wf`1|LyiMw#7J;5Hpyvs!m
zj&nAiMcaGP=4yrWY_i5f70$NFhG!|9`KuDUR0+a)_6}8oaJIb@I7{K**mKyVMXPPn
z!$~&T#(+x6v&n)CwKoE1+a$#-n=E7|I94Yxocto~8<4WvCfhwmh4bud5YDz?yML9F
zEc+On){r8b)`L8otZ}wYD*>%dHvBt9@amA4z=7E&v0F*NZdRW($v<!$KqpO|5{vg$
zAHaOmY2+Jd_86%gf>ugAC7%?7x0ufJr1^C2r}}MPhV#Zqj8iL9Bb{XX1Lz-zm4e^N
zJkcJR&=YRvTsgayd-&4d$y0<nESzQb@?^fq<Qb1NeO{&(y5iiQ1qlpo;n^DYZ=S6g
zkjN~&Z&_|vC@<Giyy3jsz5t`cv8Nlt#^J0q4fc9ATg+DC6mlWElwF1s)t}jw@DE*w
z^VLqai`{`=^Zv@7g1nw(&%r<NGImq1uw(24_A&dG{mjntDBg`H@jiGT)Q@+IhvA*j
z;d~;W&S&tMyqs6?*?b<a<>&Kyz5;gdPy7mg6~C5W$FJu*_)fly@8)~>{rmubhQG+M
z7g93xx9G3H2$$Mr5PYS*0ApTnFJTe(GJ7R!1B<>6<0>%Xso3i<(0uHBg7BY5W6q6$
z%tm1~YKvX$Sd8QZoDbu$tF6R*n*$r$1G9Az#&HQ|v<Lg%74YJ(VH@Dz--L5zCg%Pn
z@WuZL`^BMb8}^O4Y&*LVE$qNwA@l?HfZ3hw9{jd&AKQ<0?;-XmtoGyBYffiRvuE%I
z`Vst9uou}&X!AAp548Fr{u=TA>}j<8DLaFfzhghK_1xl->_Q&R+px=dEN{=QR&Q}%
z$Gh+Zww)*PM0Nx3&U>>Pd4KL>dw2>T#O}l!-TCZ3tRqG25k3-kW*_I1@eBGPK8;Uf
zhj|HpHGPK9<yGuCKA+dH=Xo8kV=watzMLK9EAiXy8+dznJ$sjL#$Cnt@TT`x_95Qp
z{WCkoujbp>X}+CrXP@HT@0-|X{ARwNeZe2V+&Rl1;*YW>y!(BaOa3f;z)=_j(o9<C
z-r?1e_eS0kxi|8r$ZI37h`cm%bL85{6_JY~Ya(Yy&WxNGIWjVccWYB4lkt{qBHp!)
z#T&OyT!Z*2;!MOBcn9|byoq}};%LN?h(i$vBOZy^A8}X2EfG5-wntnQu{C0I#F~gD
z5p@xBBg!JCMvRXb8BrLK8!<Q{HNqXyH=;*GLPUp%HW85#jtJ)Z!S%K4GuJ8C`>wZK
zuen}wJ?nbP^|<RH*S)SgTzg$Nxvs&R!CUZt@EX@LSA(m@HP=<<n(mtD8toe9%6DbE
z(p_Fxe^*aeqN|fD))ncp!hZ_?I{cIHli}}#9}hnoekA-*_`&c;!uN;Y6@E+j&hYKw
zSA}01zBzm?-br4BH<RauSA@?DpBz3me0X>;d}#QfaDRAmc<=C}@Xq0J;jO}5;g<8P
z^NjN|yvzKK^SJY<^N911^Puw)=YHp1&Rd*2o!gyPIk!45a;|r-axQV!JFA_uoh8nx
z&hgHX&O&FdbFeej>2~&Y_HZURJ2=}oBb|=0vteh#J_|dEH>qC>dm-#l*yCXjgzXEv
zEo^t#4Pn=WU5*z{HioSUTNc(3RueWitSoGL*u=2WVZ*}m!?MHD!@Obr!+M4#hII&Q
z73Rc`Uf(&sbewj4;CRPz+;P-##Bs=R(D8_4zvC{)EsmXz?T)J)TOAiU);m@?mN@Di
z)sESY630}>c*jUbp(EEZ*pcdRJNi139Gx9;j#dtr!?MrX-`QW<pV%ku6ZRYSG5ZDk
zu>GWcz<$8qXWwS;#+&C?;cfMeuvd$)rp~p?;NhPLU*9nN0+4N|+g`iB-P2CAJJ@aP
zNZVmE>j&#=>oe<=^}h9%^_umP^{n-j^|<wrb+2`Ywb!}{p6V;`3&dt?t+mXmx8_-8
z)^uy4HQE|x<y+ZSy5+U{TRp8rtCJOLMO#iw$e-jHylsCPKFfFHad}i8aeeJr1ugFd
zOEV0*PS&NJvMzD3Ez{w9pNa2HbcaP*hTr{Gz@BC+Tap7?av^@DyBKzLn6j+nU`w>M
zIDmEJaoE(wun@<P?={$lOJEy5X4k_uoMk&<6*{o}$`U-IEWxv|1bx{N*nmv-I%fZH
z_7Ud&M0Q5a`zFl$nfMX}<~_GzduQ`7%>H^Fff>J^$6=Ol!S^68h2`y!IlTwo@S8E8
z^Dvta@Nt;UFY(D(ySDLp@<aI{pO4<Az}6C;r!aPi2xBJ)oDJ;9evR-Lg(;8UraXRo
zl)^a*>ztVgdsVvErgX2W!HX4K@W&|3AEZ`*Q716!1g57Cs+?}siW_+(b7QrKCq+@(
z2~r$8L`AWe1SKBb_5_8;DO{wmeoEZA74L4vi`%q7JPuSm4pjXfsQNvSRvn~cp9f6+
z8>s3}R!@^vO0vq6tnwtAr_{@2Rr3JUCfNXco=xq8DoiyEP<aQa(gRf9epDa7gu;9i
z<pd^)Y*G^0q$IKlPbKS%{T9i#uMO`ca1L^7O1o%^k1>>FMRA>*Mys#lp|5JauaXmL
zQ|Tm|zDhPIp~AWp$)=BzN*`6WkLq_H#d#l<zmKY|4{?Z`RI0bi*<0o8tx|d^N%Vpw
zf_M(9Fv+)<D&5N-f^bjOPEYl;C$+$j5ifiydMbpjy9Yf*3hBvIDhrGr0HX)MB(tfe
z6nH_H`08%sED20n-Cfn+-OfcgN%bH}$skE_lB9Z;q<BxFc9DnVk)-<34e634>Ji|B
zkw!5+0z_#9h|&lUr4b-XQb|;8B@*WdlLQh~D~YNV)TvTv91;~LD5t`@EcK$R;=ijZ
z+tnVaQb^+yR6Pl*RDvp%pju2&df7#l>O%Q>XC<r7^ptm0+;_$vn)HV#aZi-ECraEC
zrCxSMFLXZLON#4!x|b9uPCKjqbyhrfRvdM<X(pl`g{haF)m-bW<biT3MVF;s#w&i~
zRSof~m+>}Ex=1G->15|CJXT?nVkecSlRa96X;eFzoH$Fe4l2Ea8to1$y@O5ZpQ!Lj
z)yhd#=SiFD#Ba_DQ(JK=B~JA_4(kxSwMZKcZZsWYDCu;Z;xW#isKVnF#u*Ul`YCZ2
zr`m~Ayu_*Y<5X+yRFB&!UfL=BYiHLYe>>H)cB<xB^)yzc#Hu{8Do?C=O8t&ib+$!q
z62B4Zxdw_SZB>c3s&rdbqOHo?TBSUu!paV_2NjPGs-8cnxO)&!C2NJ>;7KN}@JlVl
za+Oqw;<pVIA8RN{iPCj$l4&c&Lo3y8D<vV+rqW3&tyGIBp~AWpjX{i(N{lKSqxg(b
zy@*lyV^nQ1io+PyR<z0)t#U@Ilqe;MC?g3_)EcGgh*G7aRIW(XPNaGosh&nCUR>y@
zU>B)8F7?!<q~cO#U8)BzrClz?k;{~#9=H@=;mYcStFqzhsZ-^2s<KX1k5jeiR9rh%
zi%yf1>Ip--WDX<y8t_6fEqkIQd!i(Jq9l8wRMw%|awwi1iU)^k#i3e3ohlEFfJ1SD
zaw@FL(g@f}GPWvftFpGrX{oSf!c@vqEm}$=r79&=o{_4Rk?Lu&;$Gk$2iXy##63~s
zo+xoolzJ)93!P8*lHxj_?j^;EQ=$4N6puo2By5^}s7GPyrBI_Jlsr&QrRcKMOZBhm
z1^CN<<DdNi5+!*G;7jiXe{~<68~fqZKLFlq^4EA!&WH133igL-@VaNfbC-$VT(fXq
z4B$jsfD>a8c7XI9uo3Vc(7ALBc8+ukpMbODB%B<l;CxCa@)<Z)K7$kFU95}?E?GJD
zfi`zwH|ONx@W@8+NSwN(c?@sGTk|%&E!&DSV>|5d+GD?1!G7i)aXRaSePd_ZHS(_P
zIh;Qa^F;QnI;(f*J@|RNC+`LSBc0p(VLvzk-iCqP4Znn!eaC$`%ct;Eo`$<U8GI1W
z<b$zCJ%STt7JC8SxF7KCr=dKD=VJGmk5hk;7vPIxMdtKB0(;U??0tAR$MCV(S&qla
zbT)hfxK)kQ=_@!5zl^U)&A}a?X~s`5OYK?9l)s=7C+>aNyUwALD|`p@c{N`Ee`zgF
zujEBoh}~=>U&I%)5BL(klrQ7U;aOP8SMk++4Zi?40M=nAeT=<|lkHr5$!sIvgq`n&
z{35(`zXg7@OZjDdEBp{R=fW3pCA<+=^K1Av<&)UXKIYf6NBIqO<|Y3GJE=Vs?4LLX
z@5O%k7W^_+#pYwLU(Ijjx8YXF?fedYC%=o|&G+$p_`Uo-z90UK2k@1&hxo(%5q1-Q
z6#Hv@EsZ~cFTS1S2jNQk3xAUT6}J`s#yLA5XNG!yh%Mw#<2?Ng&ePBFBm8-ss^Jg8
zm(`B)SNJjhDu0c?&X2S2abM*P{w9Bmzs=vl?UfV!J@^G1;Rjp<FY#jj0soMn<R9@<
z{Ga?Z&Ilj#Pxz<&GyXYz&;R0I@~`;U{2P9T{eyqYzvJKYANY^_C$@zD%+K;BOc9Rr
z%Tl%+9-$RN2q`RK3x^03P7y9#B0@xpD0n~a5z!(>w8A&P+K9FyR<sjwqP^%KI*Lvr
zUUU{+M1ttbJ`{<fn@GYPsS8C9aUOjW4qt>*x4PJBoRHRt{_FxVKqQNS@Thy>Q}@BE
zo+463nn)KJ@ULgW!=5Fw;bk8xazrkC?fD|WJ`q9oh$z5!;)=vD{C4#b?xNw=4ty$~
z;pWb0c;m;yA3q)*`H5nZm@KA<sqoEDhj)Iam?hM`9#IZIeWjQ!=7_nXO3V}UMYUKU
zYDBH56X%P1+<a*ejkxEwSS%4s#WJy6tPm^3DzRFu5f_NHVx3qoHi(U4lh`aS#J4do
z7F)z6;!<&$*ed=cE*F2sm(Z>hSBa}}TW*`UR$M2xi|fS=;zn_k*dca`U1GP`Ble1$
z#Vz7i{1$hMxE(j^?i6>4yTv|nkGNOdC-#f`#RK9&{GRYI?%h2q4&c|08^z<|32_j=
zFgz*#DxMO56Nkjp;;?u|JS(0PN5u2u1@WSI3BMj*Esly;@ayY!;#J&@d0iYAe;03v
zH^p1xZSjtHSDX;<iTA}n#0TO-aZ-FFPKket)8b?CiTG4}CO#Kmh<}MM#aH5M@r^hm
zz7^jIytyfU6hDcd#aV$X#ga>bFTGjPmJS&voibdyWQ2^AQ8HS_$X2qoY$MysSlLd-
z$@a2?>?k|Qc-dKYkqP)dT%znIlVo?<L!Kvl%3k=rq>t<?`^o-tfJ~MHrCWNWSNiZP
zN{URCX);}A$U!nw4whLmTMm&!Wsc01c`{!HWKb5!LRln-$znNNj*uheC^=e=kz?gJ
zIbKeX6Xhg18DFHEif{i-mowx{IZKwvQduU;WreJiv*jE)S60b+a=xsV3uKL~m38ub
z+$&lr8}MDgMf6obxfEXoT#j!7u9U0fYJ3&&0=ZVMlk4$iz>RVfeHl<*Brld*@O8jT
z@om7Z@=x+|`Db~Byb|9Cyc%B!+=jc1*U9bjdU=DqQQjnX$es8?-fp=^?v*#oTjZ_s
zHhH_eL*7YW5S07mJ@Q_8A8t3@k8cS+h%X5~EFZy_1P{o^@Fl?~<UxE%@JafPp!^%Y
zBltAFBKVAaRz8RC2tF@gkT1%Y@GZfk@)i1)pnOff4ll;v<s0~#;9K%-_%z;?C**th
zs^CB1;rLLVlpo1c@}KZ`d@MhapUThV=kR{~OMWT8l3&Yj;0yUyekZ@DFAu^q^0PcE
zn=EE=OIXsfEZcJ6YlKcK+;UkFRwQo!MO!geE338D#%c?XN;@mgYHxM0I>NsaZ*{i1
zSP52Fcw4$zNmh5Ohjku&FTJeZRv)Xc)eoMS0amg#&~jTI_+@;S-%7Dktu%OPGOR&X
zrZw2gg3o4%HPp(XyM^%J1gxM{U=><L@aGicTZ1F4k=7`9cg9#_t#Q_PYXW>dldQ?s
z6l<zA4W6GF)=X=bRbrLG4^(bdSe4dnYmPP7s)A=|zEy24uxhMYtIj$fzM_RzgVks)
zvKCuQtflZCEw@%!EAchM)z%v80{D~G!Qb2#zZbNFXSqGRKppYxK|Je>`?4FXjn*dk
zoGuLAfyHf~7~Hi>fZy1HXFUo2b@~<O0es_gKfd(&6#E;zK~Jz-aZ8~U?ke0Dx-$#^
z`zDr4H)nD4EE0aDq3|`8z_&dMUi?$|MSU$i&KucgeXsU6?`H0>c3QjG#nx{8rnJS{
z1E1K<@KrgiTdZ5H+pOE+CA-tQ%evdzhp#l=Yu#t<x9+zdupWd5?P2Q?>rs4V@-g_+
zp0EyDf3cp#*CwB`{$?Grp0*BK&%oFAoOQ%{-g?1$5uUe~t)tc})-mf<_~Bl+j$41X
z-mu<;SMF`=9qV1|g!P{FKD=8uSpTp-us*a-S|7n{_fPAz^|AGd^(lOKpIcv8|FXWc
zzJf>Z8|#eqt@WMtJ^Xt=T0dDoTW75%o7o&+p?nPYlQ*!dY{Ays(za|He!wu>X@}b`
zI|5$8C_CDYv0K@#?KbRy-PVqUZ~74XhJDS>*zN2%yFI*z9qmqbyxrOEVkg*L?L@nq
zon&{n@g^SooPEI_vd?3Q>IUZ(@Z0^F<>1$mQg$=^{+HwC*><*veiN{J+P&=Fb|1U1
z-49;L0d}%I(01D%_$Yn0-%hbp?KF5SGw^NBO!hGDdS=0cIfQ<>!Mg^Ru;c7K>|gWX
z*9>5X{CE5U^9Fm9z0Kam7oy)`Cva!E5a;e;*b5KG?>i&m=NgUQ!p7qM@_5`}o`~Pw
zCgT?KRNP~pZqG2k_msk4T8`g*D(%_!9C%NwaPFCpuWl~DuRyi%r=E{rP!`$^b|bv2
zi}5YarT8snxxK<(seT_?L%$H=ca`<_26$jM;R~V{+85au+gt2Q;FG<~-fI5|Ul0AW
zeT97`ytG&2yP@0g)zItk&Cu)Nx4jYH3*BMww0FUayT{&Z-)!Gv-wL1Z?fBm3o%UV!
z-S$5F9{XPVK6}4?zx{yyp#6~ju>FYrsC~eG%zoT{!am3jvcH7oEGR9nudQ+9l+{-*
zstjwasd9Vr@`-u^Ic`I}hWZUnH8kDO97FRA4QQHc%IBK$xu$$>YFJL~oZ6bo`Qe5p
zS460m-F~;v?V-|cPf*q7_5@UEx7Y8}wYp7h?$n69@~Zms#s#yhE0?(PDry@_%gZZk
z8XWoMrRb8$ZFqAV-rNB^uCFa^a0GO&fDu4I3BVO-uEzAi^fA}elWXe9HGRx8eatgl
z<(WR_rG^De9}Nxl(UTtPqbJ}olJuzB&}V-{L5n^W{DK*`$Ln<zwCJ1Ht)%Amr=dnA
z9k(aL7g2bw2Hgj*;mMn06_%COJBk{rsw*nPigeE@55_#G^X8fU=H-MHY5w)dcmpA>
z!A4%huwS;}_V`Rsd`1pFzhii5d1FJRV|X*i$dzjiN1t?4%|%R;J|kkE5v|{d*6($U
zR8?tCgXxZuEvodV=-T|IlYYa9KRs-e?qJlYxs5e*O6waJRF^iYw%wk5rDUE!o*B+O
z(`LSDGv9P0-_)9KYRy-?x;=iAKLwulxwZ91+44;f@=dMzCRf1JYE&6BOA8e<%&5C3
zkdo>cs|7Z;xpzo4?WLIZQ%nmfriGM%W1K1#G49tRlA;=Sdp$<HsfLME)3uC%V|<I2
zQdP}vkA93|rlnNVQmU@blbY(7p!H{hnK={G%&{lbSJljkn(!O4HmaGgMhdb|(*v2G
zVQ8)%!GMu<Al065PNo6Fe!%b(F#H6JY=iEw2`v>h%}X+MOqx?)x~S4INegGvIpKs)
zs;H{0uUuHQ&@n~jiI{Tkp=KmKRJCC!XoL^Vo2u$_P5s5h^aL_OGF2tqo^&;vpe9DB
zm=&c)TBR)wt!XI7Xk(6&6x74$bdHh~;!0AWMp8K;18pX4t|^~u%IBK$xoKgg#t0c2
zGD7Z@kmkYYsM=s?%{ZkSMbRe36L6<Rl%ErktGv1Ij*1rg<2Jmx4R7wCqf$SvG(E4>
z7Phjvyq0#Z>0GX<AlFoo8?s2DscJfxXF8Xc7FKCGXK1K%o{UiEU}232J!V9LDG_s8
zbY{*kn1N~YIp(zJl-HvzY^t)b5p&O#)VzBQFBwKdyt&p~vanTphE(aEQ(maO5o@05
zZ(eR#RZGS7218tfjr@ptzibP()AYn=<lsw*oR60|D{HDtYbvVB9o5=;R4ewaYIIDu
z>oXIkxx8uLXXNcOa`qcJ`+bfYRh2Ft%y85+O9UEidfIGu4Ojk*h?-LRe>LiB>*iL5
z)#{!{)&7P#Fmole%LuJJA(NbM`lro>C!oy*sNx$O7=BZHcI`Pck#BmFZ?q@h<O-Nx
zg_JvxYfNu$NZOu2N}2;NQev&rJ*H@LkMY#VE5)>sVp>QEIu@!@5et7kR4H27ydG0D
z)i9Cjb2PN5IaSpNldF0RlWST?H7%r?K4d5vBVU@MQ7cxXnNp3~^foHf+xQ!@Hugv_
zU(i9boaluL@sKe!dK^fz8_&r!VAu~Bz5<4?fZ;2MZkZWqXlMqeVLt*RyjUCI#ac{@
z&xt8~akCL#s*Ui{a}Q}0JOOP&J%ONMEoc-C`nXKh=UVoQxeFs~6emNKfTC#edbQ$X
z0vR!<sEO$IrYJ=ORp~it+G--M%ID<jbi|d)gX&@Mnl;&*qDIy2&CrVJ&C$a4YK1|5
zZT!7jaS&I+231xc)M$xbnB88jC7_0{kXoeb{&-UjAE}0q3{zjK9#pSc!M&-5pA0oz
zsL#kjujGh_(hVOOAwCREGxA9@{Yx|aq#608h5Bh|s-bCy&oskln&C6e@Rw%zN;7gv
zGkm2Pe$os-di`;G(@p#7ru}r&e!6Kd-PEgBN#r;6r<?lIP5tRcPU)r{y}Tp8>2HSV
zZ$@Z5RePR%ZQL=wrahxqUcFkoy*ZjMkKX!Y3vKwzNSCu`&9(uvsuZq9yg`K;!qrmX
z&q*!~H^x7CiAwXPriVfq`N>P{oa(x{rB-fbL#bU*x?n+RSfFlURdsERH5ExRfaLLW
z5wePK>amMU>*`9e-(FBwQ7T3>ijj?Cauv3}RdloyqpRfDxwZDVsyPcv<@nOZunD><
zIeKoD%ma*GSmjdfHPqJBE{rrSsfZITsX#b2q@PnLG<_pYBl?M{SVdw?B$U%NYC+{3
zU4vb!I#&k%?K#vryP~qXp){=0ba5FTNP5_yx>!YBoUgiAt-Dy$D3(-VjZyuR_2}F}
z)wu?AuF-U^4jn58AZpiA)5^H}%wYNSYV7vqdt8be-2uaaia5c63Sgu{U8hi}Ly@L^
zUD7nGA~7Zs%IQ+=t4FO{)}T^if0bD!DiauVD+Tui-Ab`NL30KTnw?V6trQ*4m7;@c
zYaTRPu%KH_D5NVzM|o49*>MHU$slN!sh~Og1<ej6XpR6uvn~Zarhbo_NS>hA)aNz)
z;mk;;JBXc)qFxjChT^8YH&ov6=QaHKOnp96pE*ti&DtI`2gIP+xdhG5Cg?NunS*1{
z>}Y~|wZs0_)Q2OX;>&O1K@$&#o*RDk!hyrM;n#2KH%E`4*%1WIktAr=$Dr9E1kDa1
zs13X)XpS&Jvz`XE!S)2Tq4orWrrn^ClQ!gd9*P@2%)TI~k79Tp8dvjN8$?e~8$wW1
zuQr5;hw_>Jm~&3hEVV&%7!GC_x#)$>6U;F6WEg(*!h>{EPlg#sy^x?krkxy9k2$^s
zb4)$v7!%A1<umo<n0j(dzubDq9Mm2mPf#yRpvq7~ueG7ZzS+zdWvG#^79vo+R}H%L
z)*)#8Q9*ND3c?Si^uc4=@tAt`f`@iYy&lt!ClojBcuYH9Q{EdYZ=UM~5%a{9_nPv?
z9}_gEhoIN+;Wd21ccl38nR<PpdQG}sSUo}GYYCbYLC|N~^%=g5gC%Ho{y}pB37VaD
z&^R@M#@P`xJMW;`aR-e9CTLCuLA{VeE}{8i`ei(GLF0l6nzKRB9O#1q!;jv0d4hW5
zgnEoV=#2o<O?`Ufg}CXD-jE?~`mZ-)m{%rl+$%w|*AHqp3!WQ!2aH^e2P9~=<H0ne
ze|iIg`DEJH8!yC7`+5V0xM@#sz@X<QZjRkSb8rsojSK9psn7U5gL)%_d1(038yUon
ze9}#Q=^=d$>4V9yH!7HSMjwpNF=%{_LF0u8nvHN!Z(NYy)Nf9yL4BTpoi_CcP5s8-
z8#L~SV9@X%G;+`z9#7D?DS~>#i@2#j$MA357D2sb#~Q2J0abbfs_Y1;n)hy>9yhly
zEf8K>Q`=BkU0GF1GXN>7WzZB`t&8CbCzqGjMTHjE=JgV}j6NCPY|wZTg2s~&3>y1l
z&M!gj_<$UY{V`|9pm7EUjr%TWPN+e1rVJXNZ_u2Fg2ojU%v0V1jC($DNasxGNZ?#J
z5Ih&oYmq0vML4fT{`?l<ycT8iRai;LuWgsxuWc8o8Z%Herl4Aaer>A|S7QXK$HcGq
z0Ep|c@#{4oaXm(Uz2+mX$I5R!)qdko@oU@X_G{Y*YTDPf4sp}I*-ZPjtwXwLU+*Ch
zH|^^^1LCHAubQKXoA$kG3=vmr1b#12HWF0L2~g9%@rV1}rhUC8;JN9)J56o7{qD46
zt!sY0+d>Y*iQZiyZaC4qE5r>adUu7m;lv!<{N}jiH@fRL#|yunoo>ILg`jG61XWt=
z_UqXPYI>koOT<l&_3GvJYpVikdZKrQZok$_P$LPm!}V(yw%c!f0Dj{G@Ed2eUt3YP
zU++>tO?!IwyZw3<0yXvORR?jSVS3d;Tv-87!<RXB`}M94=|--47l*i!tKP*SZse+W
zaflna>Q%_?*Q*eyk&j+=5H};NR~^Jn`+lQgde?_^)4uV^`i*<QuXlNPZrazbeZ)=s
z#$Dhy$9=zX8~BZTz^_*+w_mSPpr-v4qhTq{8fF{^e&ZnU8wY{kI0*d4LEzW>N7Q6S
z!Z-^2#v$N02XVhSaQn@{)vxV7G|KecI41mh-v&)GBdF~+;${T&ehV69p6m4taZ`^z
zZ$Pt*<h4D7MujxZjJ&b)eq-nT#^>hO>n}9RjDWVkZhz3Hd~wjM<c0NRWY4@FPipwG
z%KF-5`gE5QKN0Fc!(yG{YM2X;r%DT-UE5f1LRE`QzJ*mwRFZ2Ue$1@V!OE&Ra~pKV
znkrMFYAc{M(HrpPx@K3+X{@iTC|x*LJ#uSviJubG5P&LW@WKbDpKGP{;-@zq*UE*s
zn$*azl*#MU<`Xm&*Y)|d`Shmg$p@<I325`_4QTTTs+1d4i5TM1`8-~?qtO%eq~>Un
zE31+lwBQ!vJgEey0wg#J7{O6c3r>efa4H`OPUX{rQ$Z~_l~D;!h3cvs7wVh~s%k>P
z%JUmbt5s@rU1>c$(v`CtR5V6K>(vOT;%aOcHkO50L_o7xc8<leW)>-=Swud~BJzb;
zL@>l6G8z^UGA!b8h(*e2SS(xk3l_^3{*px$S1i)E`IHn@fLNq}ks<}P6m^JLRQZTS
zl~1#%f|^B@QL#v&7A#P-B?}afsH?26s;$sfmDj>SqJo+;`Zk{8Oa+KD3K-5Ps5#Ri
z;!Ncu&Qw0lnF?yoR7S-ag<5b%(UzQ1Jj5A=U79lrI!e`OJIXXE*Q7!dtznMYIyOg>
zxtdgIGEbBFnrKaOEYPtUO|%+2>U6AL6Rn93t!s`(ow!Jo#hPffb}ZGgWs1<0b$iV^
z={4)5*H|;J-u1chgLkCLmy)3hS%Jp-T2<1M;f*S<g)eRa>{CN&{ZgyCs$Oj(yzZP-
zM_uJYq-wK}lVMfV*38inZC<@@y?}%2x$V||XT+6x1XUXX)MadscH1Cb+YqlO#kH^+
zmMWP({79<MFt@6{A{?rq0t;1Z9=#kPv$j|seP}{lTPTlSgb>%Qc~acrs7mR?+(>0+
zb$DR}O+gcmRO(|QrX95ipdPh2;MZo|3-j9tES4|4a$y6032UgV&?T@TDy^@tUEEk_
z;@)r-uc%$Den*GnTy5&$FxR}NXor+H4Q({kSC!5&B~$c51qZvyhXqSLuQ2r(iKXbR
z5$e;trs_>I9PT=vrZ>xQup7ziEe@=>+Twuf1<tES$nDh!3{bsA@M^~yR7x*!UhN1&
zTraR*?N~wkdNb>DyVd3sG`YMvq_l*7HZdul=4YPd&@-=j=1ndq*&(;jr1+Xs{3gZU
zoRVTvQkqjzO-gF={N_-Ilhov5Q@7s0_^?F|wU%yjr#Gi$n3Rm>lpK?i)0~oPQgWM9
z@=Quzb4t*p;Ao>;_ZT^NAP19TdhhXu<N@7MQt<eiQ}m|VXO1&IbDZ&+<BVC4-DW)o
z)mtpH9=m<!IO8+N7oR!4_{{OeXO1sEuaS+nSvFoH8*j60%#p@tjx;`Vl<}D(jL#fl
zd}f2~GaGE5*--n;hS_H}%s#VW_L&W{&uo}|ej^uuvsRd`vCnLceP(OyOEof0^(2?7
zt(VWOE+a*0T~guX@)l3rEuKJEe-WG0BA?#K>Dv4)azO`M<jQOD1S4;rV0yVd=7|db
z;z@`DdIAnwl*wpO2HMx+iLb>I%nS1*wM9EB{EH`{cIe5ub|@BVM}>b;Ce#i+IoA$x
znyTBxHVu7i5!M&Bd@9|@%%grPHF+o;%0pp&#PaE*2zHU$b{lQ<`t%{$>oL1Wli%ys
z4o^_CqUfV6;<>Jcb*1H%YUQ9w<#lT%3<iQh{VtBB-o9Zy_kmKl2j0cOS2YlqxI;^E
z`o=BmxrH!Z)JXwKG(cb9=%&Hy37VwA>Id3ggN1KnqYecYzPXLJd=ywGK&cGCq855-
zu=;}b2J}ICE-1wT)^Jd&7hrt@+Fyf3Z4S_2(f3~Q)oKEZ_!_7IUt?u>kBH&TA!gAx
zdhxw;yg|e);&HGB>qk(0kDI{y0hGRZ0kD1o9iqV^zJ_YB=7Qz`rUC?Dng%N$bh-v>
z80ZWQRseLS1{(x7j1^c^cZmj@>MsQ>19S!~*I?05t<YfM`_*`ZM1h5Gh~r%k1-Pxt
z@LdrN9CU{Ui{!dfgLMRSmj>$@(A^rWr$P5<u$~3otHCM;y;*~WuXp1+N(yXxkLy+q
z7V&$V28-&rU4!KZy+eaddUdA;HAZ(K46w>U@77@ZKuHGy)*;Y)G+0fb_X6%i`U24X
z8f@qXZgwjWlR@b%GJrK2^g#_4jpsue>~zqFHCWZ4k7%%{ua9c5NVg9F9!EXzgFd0b
zqP7kKo&u1L{mlT?PrMS01dtpF#sdxmNR~9_&lxBKr7?H`um<p=f%Tv-8KC~YY~V)F
zqkz`{y8*9ju)YO7Zh&O)cfgwf%J-ImH$dMu@D=Dg8b~#82U-EY0rUjm1ID-o`k@9M
z0eVscCq4W~15W}y1vriT{Xsw0z}=vq06s%H$>DPid@Se}8aVaoUmEbe6vn;;oI(Bu
zQ0foB`VQ0p-+=J<fFF_PX3(EBaMG`zHE<e-vl=+biDU=h7z663>T4z_0t&)Gg$A1U
zc>hm>3l#lVGAIVM4Ri!`Xuz9<jE5QM4(il^_X`=PdI@>}s4f8BIb<Y91wBC{HQ;ST
zhHtuPI1e;h1Kv<%JjOsT&{i7Ae(=@?`hm95z%Y04cA^FkXsiajqsVwW176TL4R}kD
z;oCPFFxT)lqXK*ji{YI{4J4CJ8psaucmo4Lp$AGAFkZZifn3l84R}wE;cZ9_d7z0J
z@GTz3yBWv_g$^k_S`12ZBnSXVb^x+-oa91K1R&V~@Kzh+Bo~4afZiJLz5>Jlc%oqp
zXkQI@gMo397r{6H^i}EX7SI6(Nao2J@b(7d)K3B$Bj~i!>y4l!UxKLsk|}`%kQ@nK
z1^6}K%>%|$3`_$})qwX87*8`W9W>p*EYJ)McsrBf+d~>kKuLE2cte8WEl~~SpjjI5
zwgkf)qZ(+uhG@XI?ie3xpbRue1KzD*oW_h`4j@kh-nd}++L4C&pfnx;b`xmOKrLv2
z1_rx<Z^~&{07~OTun;iJfB-Ev@CxW~4YY2k@uM+Z3K*$@>^t6U)vyk9v<6yRIE^d8
zGQe03Wb4(qjsvAJ8n1yJ1f5`DE9gWGc+*FZD~&D5ndT<||Kke7o3k27o;1b)vg7#D
zlZLB7Y0Lm**E!8e0+Q!U4P@&%jU~agfD#RO+n8}08-i_sG7V(odAWfdpcNWuP2iOV
zZUmjJfsu~Um=Wv+%+)})A77!;K(d;rfz|_jXGX&vpw${^ec&`^1a|^x{sU;O;55br
zcLC}&(7M6TH*hy-y#})PYP@O89|MqG0Fb@sjRu|srTGuQ+d&NP6>B&Ix<mus8`63J
zUBK5c^%yS$Jpx#+fowltVc-SOl^WFAunJ*<=K*UBbOpW400*UU1z42l&l+fN#c$F;
z`vp#8K(Glw{RGe&$oCnbJk%fP(f?!bJix3f&i_Ai&bhm=OIhkJ?C!mHcUgMxO(}x(
zjtFAGhQ<~prWso-i7`frEw&_REZ7lIj1>(g*ijKt5fN5E+~A6^BB1C0dEdEr?_G95
zFq-&#p8vVe_srZmbLPyM^3Iw0&b;HrF(oV@--uS?B&Y{ob6{PWvC9*XvMKou<oih4
zDuu-1O$TX{?TQ5CnUdeYti@cJz(bgCJD3kKS0%6zQ_2A_>oDI<;9*QD2f(byl)M)#
z0^$#_R^G6>*&&K4?+nn~X6(iU4#nK;!0Iq#KS|&Zn3Au+NI8(a6bu1799WTN?3W2h
z8I-&PtkO63s{{&3(>w?HR`Oan*qbq1I>>jBm+!#ZapU!IkTmlSabVTI@pvDBq?srG
zfhBFd$zTe0($AafU_;Eq93;)WX<#~jNF#3sI1)Q)<Q)x;$4<I<)Kdko;89P#lW?al
zc+^LMt-z!{3hY))>Z8DZhDm+&&cIH3c|QhcV<&CU!fL!<0SnFplxMFFxDZ?dvcP2t
zG{pQJxEeG9*MjRn0k|Q7V$2&I>{`rQ9PFo<<cGk1j`>#y$t#bt?@78+2E5xHEM?5Q
zD}fx$1rEUjm<t^Oaig3G0_upDK=35?#~gyEG5_ws%0J^h0k|G?#FT5#7!zrY`K&{*
z1oNNZW!&3iE(fpUU#_omi1fsK#~~tRLGlkodSSlj5b1}x+9A>n^L>X%Z_G6g=zcYx
zq!9>~V#+&%K;BRC9t83p)Dc1O6n$Xhz`8@@TL(1r7~gYX1tO|&9niqTrX3Dw1~Puc
zAu<9p!vVcL1`Y6v$T&>$UVsiC<JWbFOv0ob2+;Op&?m2mP=5V-4w1t#DIbE!3{1+0
zATkrPu|wo2%q9+zV=(hT96!fmmVh?cPr+>K5IGaG9Uvbfb1=y>L4>mFcLt<ug!1c?
zAA-m)F-dp-AnfO04t0oJfGKG~8bp4LDend%lrLYN4I-3vU&58}<Q?UH!E|tb0+J5m
zPayApX#(=@zj5$}Vg5FO$(Ym~|8nwA(*FtvPtyEK2X8dyRSw=*%()KUS(twWw{ow%
z_us(X*m*bq9tUqE=DiN+OECU@;6ePHj7i-Pc#>`pfoHKx{yyg*^27fJcmemLF<*4>
zPQ!f3LF9!0GN7&TPRD%J!IOMh4qnH7Hs)Ino}}g535>;jCjogb^+GWo^Zf+K1OLMW
zCQ`mB+kuqDt1;_<hS+b$%mH1n^DaSGAnE-yCV3M`IogPMoP(s3^z8-yr<ih&q`~c&
zKXLFYFv)9ye+MRcF7Q9Yoa^A<iAnkk{H>T*JNT3tR%|Q$&oQre@aJRx$-&=-d4q%G
zS#YC+za8@?2g$=g-VOMbnDZPYKZ9Ex{4X$XbCA3Z<lTV315@soa&SMU+yneCF&}X7
z#eC4g--)@vLCQz)kb}PqbD@KjmEd6qe>di%4pMeRwhH{OFdujD<-R8z{I4;WfM@X|
zVNk{deu(*60+P4O9sEZyUr)edu5j?>nQtZFVXk!W<@s+X;A5_G@E^mZj43EQGHxR9
z|Bksnfe7XX2VdeYWkrwyHaYn69v>%=iMhqWmv%zRkU+|#lmp;Dg(-P2sLS>{r4I6q
zP<V&~EAdU?2#0{OQ8*He!asRdNPQ3l<Xzze2g#Gdi4Kwvg_9iu(yDNpgXBr!;b1!V
z@{WZw9V8zLZ*d4HZ-ta4K|q-)lxrY(#;}d11Nw>B!qUOUF-Z#nT8m7S_ZLXNIhy4l
z<BZX42kHAp>p94{W3;}5^n;@f9ApeK+R#Dz#L?ys<}A!y2k9?HqYh>cX3W73#*{b#
zG}f4?!~;nGFWSmM#vr4lxj_1SQF#WC@yKWg2kG-gyE~YxFnc&i-znPD!OX?%<sf~j
zXm1Df0+?tY2k9F{`#PBGG5a}4KPlSZ0lms5I>15tOwofK&?I1@@}5BYOwqv(<|fP`
z4$^;$4s|d$V^V$u(wB-3bCB`W=x_(=8$}Owkg?UMqzkZ;wv;h}jI%~5YXa#rMJ2z1
zj9*42kAb}ebDD#UHAX2{0_nR%DPIEf9OeuM>AOUw8~_=Mj7r`Edo8BqH;}Q(sH88j
zl7^C|!2A>Q7zZn9ILkrCBcsPUppn=_k8?1uU>@&a|BNYV0SxjZda8q+hk2R<x~EL^
zbO$T%eujfVu0((AU~k8~&_TuuqrY~rOE52Tkg>z)#SZpaOi3ePKEu4!!TtmDN(UK3
zj7oX|yA1Pc2N@%bN_qk5lSL(sfQ%PLC0&5@&!UnRK*lPfQig!N1M@EqGFBU%=O8>l
zRLTL6F}$ecJurhY<(+|y=SAf`ff<4+VFB9^^G*k}U7P4#4l>Rco$r9&3KPBCLB{-|
z_c);E%tY^Xknz9heGX_pGtv7UWGpcHfCD<wO!Pqq85fK$a4=F%A99c}!stQ=BW3ns
z2N^GnE^;tZejjm=vBT)24rVmwVh0&Vj6UXozH<}(yMv5}MIU!CCt*I}AY)_ECmqbm
zm`^##I9c>*2lFFLsSiNL%%V#ijFdqs6TtSxe9i%#VJ0eN0?1febg6@pviZD&?T;yS
z0H9&aME~U=<7-hVH^5wm`GSLtAw^$wK+CX+zT_a|Nl~dYK=_U5D-JR~5tXt6gzJb(
znFBIb5tVWVg!72L?jU0p(Kj4~1Bt%rU@yR2;UHW{^eqQ_A?8X4;YOlwJJ?@iu5u8b
zB>Ikny$JJN2jM`X?>Sg`$JGwPheY3Zu=0*;9E2N*e&Ap)$6V_mJW2FJ2m5=>bq>Or
zMAtjmD=^C(gja}u<Y1*7ZEz5tA-d54o#!UH$-#)*#|~EFyxBoGhv+8`R^nXlfaW+8
z{kMaaIB#(fej@s*gOxZ}I0#=6{mj8ioVPj{F+X>(Qg*gEm@hE5JJ=U6D;<QRh{`o!
zrHsgbV7|mmz*1gfIK?dA=j3h71DV*#w^$ue7yC~zvp_@aKgY}gjj)s6vBsbocG57G
z2U=jKY{XiELhKh~#z7Hw(kE67+F&PbVr@Y??7ziq54vC{zhYfMH|)G?tUKs~op*@!
z1^ux95wkxSg#9|q!C(mAT0Z7bFdRGY5E}_b;pfkoqro`rw_;8Nlkig?b22y_JMR;l
z;o#kgIn%+r8}ld!?;gx!9K3rmXMtn6m-mbv2TsDyd&W)%KjK-`qu43n$JiHQo(ayv
z{ubsOK)Oo5J$5$uDfZ2nKLez(w;l5r;Fp9M!8`~23OjiaI~SaXos5fJ2!4&7bc|gD
zNK3yH=4Ie2!udPqTtJ!$Cmy>R{0Teh7`p-d6+h2m&I6>4KLqnOa2IycF*YAOh#x5@
z3&2Cz-^Y~q0e%O}haIFZ9$VxfeeW1`M&Nybx!A$)f%zC9UNVLhdmK>qWo#)%Sr^E7
zOzbHK{|HRvt-zmw`HX`v`Lo2qKN0g;2Vc@&-Us-7Fp;$a>GQ{^GXlRaCh}F_ZN>bT
zgFgs!8F&GA(lquW;JsxWEB3O3jQzx3aqy49M2-q%Tp;$EgMU2ca_~C$eueo4coRPc
zbESh9V!rJl<1w*S;2r$mjQK8j5BoKklGebVg^An~_{U*>;NYKtxfZO)Jr7gr;YZlB
zF_B{eKNoYOgI|ET34BcW_hCwz`vg1r9g{i<ygM-e4Ukj*Y|Kv`{G%`>y?~67#6EZM
z2V)|O1pYA0N(ULEiGAVVkHOplz9js=V(tXHuuGZR?chmzOL_tSXw0u2{3DHtXF5dg
z$E*u@zX<g!p5qYo#%$!E_Qu#jFaWa&Xo{Wk5O3xX48&~i5KO`(?cy!)(-E_!gNz@<
zNw0Vz?wv8C4na4}I4Ht>9A>dYa4=?ThoBU*i$i1~ri2B84>7xg9>ibnqfQFYIcDPh
zK!5zmb%`GcCSxAt5KP0AXAHufG>?<kg5Z735e~r=%#jYkVVI*Ff~lBiIs~U;p5-9@
z{`lG8e8TxL<^>MHBFqcHmAIdSd96e6Jm#$q!K;|JJ4oL>ekY(DN#8www?ps-=DiNV
zo0yb2LGTi$<R1v$#e4`X#J&Pkp8W{+m6(q?1k{K4-@)U!uflxFAy{op5&0{KP$r7V
zQ$Zkh%Dq6wdy2>}L2x1_=`ILPz$Cu}GB#h-*&$L7bD~2)Jt(4l6p;_opD!YPi;lql
z5#~&AH1;i+zjFw-Va^5D5TE*(8yzB~L9yo$$-qp&ql^?cbckeOHgbqi#)}&}1eKW0
z9D+5Nlv6?QC1y*9NFB_mLnMOP!68DuDW*IKA_$=3Sq>44$@>?R9>G_}lyFTDA#X~k
z3xddeOv-;r3_pismO4bp+Y-VTMD8)Bbe=<mxR;WLr4Qpyd`lk%i?NdjrB4F#EJD0X
zmw;!n=VSiUA;P<szTglcFH4aHf=ChO%MOwLOvB0nJSS3!d5S|M&a^D<5k!b<o5>E5
zrkEQ5c@U6SoyqggyhCslCSi3RfW046hbU_T`wq0%6bIp=b{Pk+1e5gIMgB!7o4ZJ-
zT>)jL72UMZA@VTP$tmDe!kle_2KYs1uk5J4!gMkH%wR@FW|?!$`DiJ=5dFi~pj&tW
z8h}^Z_2}yT1dY63+ON=@+s8WueYHoTo%U=r&Yq8s*~`!+dmS2N|BU9?+t3+%7usPT
zMjz~xXn}neeXp;h%XK|ER~w>fHI5e5_UKRThR)Q3(26?2KNj7k=b)|ha<r1pMc?S%
zXcc`H?Vzut6ZCELfxd?>&=1kw*${o3hockocywJ}!>-<cLnq|J=zn|yZI7>`!*M-2
z8b1v_FDxxQq;OQ>xWb8rlMAO8&Mds8a9-gPQ9qg)Z5Yjs7DY>=9ijuGqoPxy$47r0
zy)=4N^iR>hM8AwRiZzS1h!w_$#D>R4#m2=Z#SV|nh|P>06+18X+t^jHKgIqUyDRo!
zY*B1!?9JGFu}@>$VqeEI<Js}%@s{yuyg1%E-ZkDM-YeceJ}5pcJ}Q1z{QUR@@hjuk
z#&3<^9=|Jocl^Hi1M!9NN8*pipDJonlv@-pDlTeW)VXMK(Gf*Q7yYj2nxc)xUU5co
z!{Wxp&5BzVM~gcYk1U>5d}4`Tl2;NdDJ|(xI<NHM(#54ul|Ebg&(ar5UvAx~^(k$d
zw3*yyW9QP&1MYg{-YL6+ufvdBH*wR|^r!DU(;N#+J5O`<YIH_Fh-T+k>^gKXZ${Jd
z4!awz$daoQ(L#K*cLF+v&qIT-=nTFV&A_*itG6a{bs?I5pFq3svuN~Pj<(*lXxMFt
z4&6L-<hCVOJCm#Z(0D7kdbZ~3CFJUrXqo*RdSf3#7wqzCxync+I#|1+_w+dQn9gM%
z_j&00d;q<kkE6%)HFR{YL;vQMV5{cp2y%4-xjL;XSG{OPG%MOX8jZG!wvTp?9vqz<
zofbVMdSUd+=+)%vJhl;U9LtNfjKyO^V<TguV-sVO6S;a!?84Y(vAMAuV)J72V+&%B
z#{L;w8GAprHC9Qk){W=H^Wp{ZIJw#--kn_S7avHjj)<QbKbu^=Fp;ZwlB@TUs}IE&
z#UImLZC;hD6N{!4%_LXnR^@6Va<xTOuAZQ|T9C-qg{6;{K3TeiTz!FD%}M0yhR(&E
z`)jUJlO<RE_nDgYEO>$(HsN2xIbw1k=c^y#pTBN^kKcutalRt_eRz5J+wd~^$Nw4O
zdEr6fkL=g-&z|L-jArc<>}T>1xiK1y@<wnT>5cG)dqc2I_e#PK!ZqQW$P?t`*EfHC
z6X#pN^<Q5R{xm#0{7E<`{Bd}7cuja*cx8B%3v2J^vdWFf_l>i_@nUYQzp>s%q}INU
zbzSA^`Zv~}wEjn!&#ymh{o(7MTK~-YaqGvg=Sv5-ZlFCtCZ-=B-TBcS$^Yv~$FhpD
zPuJ5vmE9<=>vxs)TEDZbTUn>F4rT4j+Tq@@tfUNiTozlugX_cB5B;!kJ#E|itJhz%
z{?zs7tzWu6SlezLB6uCG!n%#?R<C<v-L30xTzB`nxgQQ#cgea7J~-=x<3Bj|gQGr}
z`N3GG37+vm{WXuSsrUYKtADz3z+2%Ft)`I^8H<e7*$Nfp!cJ1z^Xf=^(4737zZ7#R
z`j6R@9?i#_(RxffjvIbC@0N4&pcc_SB@c8Q^M#N+(0trDptY1Q#N=6Rq*C$-T60Cy
zR?Y!!PwfZVjR&I9cqCejr=zL(1hf*Lj5gvk(K>uCnuaftyMl`VHuq0mE|hEN3YHpv
z13O*ahs<7zw%tu=(dBz2*ezemaztKqX6hW-oza(c8U`kUBQs9OxG>|UjN3DoWzg#4
zvWk7bHf5A!)6~J-EcT48sW6-^qby;r6*EK6YI|4C=|{$^TnGC;G8WW!J>xIxYS9<n
z0d398&?j6EozbENdMw(4i_sHZMEZ$N>0Rgy-i=P_lhF@7IvCC#VS^%V(Gxu?7!mP|
zMc?$x=q~;j+Ka~o6C&Nw1${@*GZGNO@sS?rHV#D#bfld(9X-+qMf#EtccO=So$4)a
zXL_4HrZ4S!e{+x-Z>Az2j-h=&&Rl4IZ7wpGFu(J!=5}+3xs#d6^O*_z2(w<_HmlI?
z`#IYG|B|+!LpFOf6espy=qmdruxr9(wEmxw+~vUjBG|z$26x%{>^E>PI|jUA|78X+
zlXIZWGGlBDbC@kL(`+j<-L^J|+fp;bwlPOBqwsj!&75Gnn-gshb}1NWj%C*1*><S;
zsXc_f0*0|yz;JV}9c3<HrrX7KlDX7QF;_6l>~dxn{)W97d}j9if!SqOvPZ))=8txk
zxyByP?u5shYwdC72740w5}r!S_hWV@Je^$`Jo_g5TK<y#2roAG*mKOI_BUpUoooJK
z|7f1ISDSy?Kd}eJ4eUX26T1@L$UcO(n%C@K*{9)7^Nzj8yl3w-tC{WfJ~O-4*azA9
z^eOfme9mmMqPKY`bFFqWe`%L}g&9)6GK-l5wZSen2Q#1Pw|1(z*Zzuq3>TQS_91pM
zT*&Sd53|R?A~VrO+1=n!^OXGqJ1h(_e`b!^1Y5|Ch&Qtb;%)4z@PX{BU_*9QSS@=h
zP&mqU$Ak)YOZd#~mSDd~?vx<=BzVQ_y6~y}9BtW)(Tx3cq!dlhebDvX553R5RXg@V
zG-p4>E}aLn8`2@@b{>Hi=W%Fno`mM+!_eA16K&1Mpo>{FG3%b3k&Dq%f4DcypG=Ez
zDDA>%_B1$)7Gg}*{seQ_ub}$=1*frFf$UjuCSL%bqDQ_0P4b_iOMWZb<UdEB{5HP#
zw)1UJiB|b9&?~<K&GKKOTYe|n<#+KVxSOwruh237wQ8A1qr3k|VEsqg{cdsK`;P^I
z|Mwu`KOSWGPXw9%lR+K-DRjKgSB>Eh@qPHHXa_fwZQM+;Mdk?G*35+6I}#@EEIWuj
zEe4xk!p5CvNAuk~)?5XnHrF0)uCphY>+Ol`a5>xDXiqjb!ED_Oi*+lE)orj-e}joy
zWG^w#z%V^$uQ5wuj-I#Iv8(0v?0k0%dyxFuEVuK_n=m*l?CtDKxx{=53-cL_OC{{e
zS1>7GvvbB67?MFSAcJ8$hQMqLg~d1o#$p)k#Bkfh9180&0)}BEY{Dp;YevHo%!Uy-
ziP8U)8R`EKqxz>Xf`6**$6g=(&FPH7U&e_0?-*UbkCF8I88v^vo^KvxG<<=*&^*K_
z_d-UrAG4R4zuVujBj@GpB=URnq`iWjN*-Zn%}3d-?=kk){JZ&>k>JgY`hLO)?^e6i
ze8I@=4n}Fev@gk?4b^sQkew)gp0*3cTJ~+&#9j^Q`!vWd6zMxqe9o>7={q*ajuh9W
zcB7D88@zjUABMC&7<BK6^nEAZV&4eaA!0MTLa+yf?(-n~I>_D)vR6a;J`J)*L;C&<
zL-<ln+m}K1oM3MUzGJ-){2scKhU~8K7&|h|U{8h<*?pl8-?x3et^Oe0UqklPc$Qrn
zj`fe1{U&6$3HF@ubRP}&*6?Sscf$!)drHWz6S;nY?w}z%YTV(=jt)n$JH%l2hiK!E
z(S0{$UyT>p`{78Wd~bFVkUa$kvP*#MIM7x19O$Nd2OJz(h@Se%>>4nbJqD(*f524s
z1$Yp>_AjB!UUb@L^G*G4(NZ6&i;ns)(L3KHQskA0R&&|ugjULeEOP?PWiaf}u~W_H
z<9|8lG}9l|sHd9tryYCt8K$KPq&4Halb55Xn4R`t_J+<%`)^Ie)J^+Ovu^5`dZ(T^
z=L~aP&GYHU&N<agtmS;_>8F~}r`I@Zd>Jbs77}xh_yjzWQ40RmF?AO$T6D?7?>-nj
zu;PKA-G9&hlTA}%gYTPHUh<by&KP@Pr``2;;wE<*{Ck<RB(C*O&b$(TC-aUkg^NvF
z(>AOOmzg}wrQsseihs|Bw}j>VmV_(hTKJcQ+uX3S>iS3GJA6NU7k_iZi}?z^Fq|H)
z3*X>b|FeU*REGLRFJ@Q~@{PoMZsz?=xH?=FuF(IhoEvYeN8-Br<_%5KJ#lqISQc*K
zZV9`LH!kPAT3sr_9oXbbdANb6IbW}Zg#SZ3Lj7|5U&kuc?^Q`-IY>Q5f-tv`GcF}v
z{*Y_x_M-DC_M~spc}KX%7c(y960+ojhF2~*uP!^nP2%DX=O%V?ato-?--|9*2~P)P
zXuJ}=l5n>?RYTuIov8?4;yFu`!G+?+xLfi%*AnFoGvS`Nx{i0061NUWIpa;7i@VO9
z+qkw4Q+#bpy8f`tkUskl;UL|~1JZDn<^}RESt7z+xK?moN}HCFPzD#Pu4Bcwz`4sc
zITB^KBK%uemT*B1;9e0v@BU-|ThdpR%LmxH@arfpj43=%+0N&@n;7sj9f{3T>b`~l
zmEk4)`#17;OL$2#483zL?~#L#<;k)Yeweu46f-CMP~N4=Eho*M9!w28vA-tyKJFqe
zNX>-(nxtFOrMelu9zIBpcMKm)cjpbneOveuQuAbaA7Uf*bT>bGta6Yq^eK6tW#K$^
zFiw6uJ6Ar__eqS>h->xhNq;FbAu}q&t6Z)ouaKry^^9vOgWNgkBi#%aYq_YpBYDk*
zL0<ien2_?}>f{w#*-Y6xi6X<!Nyej>+tvj1gZr9@?2lxc%C`%<jJA%nG5PrZ5_pVM
zX7f9kcDgBZgqrb-n&$jsCYN6k?Q)(eF)jEF<=dpCDdpaLX8RQII|9FP%p!hAnqq!O
zab0}0HSL&D)1F^}>A-I`<*p<4PW)z@&iszn(pYG^@r#@8{EAHvenU)8eyvO|ekakR
z9!Ctvn~7!ytJD5KJpaY)u0gCcdW&bTH2)@^TbN%}!aRsCdGb!?NF72yI!eDIW@Dx$
zz34%vfL#d((*qe|N74r#N6)q;J=r7puAfOyHs2mYPj<HKiOu<JdnNv_qE|7S9RUAq
zj%LrlJ53?`^ZmmVvp3&MrWO0}EvG;5COzBPjOVW)gtu9nF`K^PyWC5Ek@E+v+$f+&
zxEA*hS&dM@i2g==Zele`0b~205YDHpYM4!bax3Q@tYnzYu6w&U?`D-rzVs>0Y|nau
zDPW(yI@sB1k8?e*o;lj9?=>*_vfG|1WT(BRW-xp0HRqh`<(fF7%Pq}G?6_B8hOz5j
zp&9O#cx}v)UPrH^nasX=un+94*UcQnu6n(3>F4z`vZvlbW&r!@9c=R0TW^qQ;SKf%
zo2K3nZ;0vZ4fTeaW{g=MV*0b+-Y_$XKIsTEhEdB=W;8w1(dKaarDM2jEHlwZvG?9M
z)5II^jW<)+e{X_0l+o^qW-9yeO)`hE7vE$voqhNYHzODWpJ7INGrgInIV{JKW}J7F
zca)h%zxHTcj`5B$x!$qfvDlCEjx&82FFz6c$;?x4!Y+M3BDB-J({VY|JCpNIymN^g
zyYlf~7kC#D!{2(BbN-`uE$2Ub^N8&o@Y!S7XKy}nW`8~6{DAimaej<>29x1YmJq^o
z-aqj3A`EnY*+Y-3Z!&A42|MI%G>6ew$}-JmUpq669#b3aZJEc=gr3D1?Cdqid5%BF
zOz?l^|I7sJ6ZZ?#o4w+GX?n6#+<B%BJH%aL8n8>;r6z}+;(lW?*e&k2rVIPU{myud
z;a|bktNg3*|3_x>cW1}AYjOFL|0mOt{o-ymUD-447Q*?9{}<eEWu|`)J^sI$#`O2^
zFj@5U=kvt7nL*x@p8mb~d4O5nW9i{9;3*IJ5Al>m{v!N5!i?$(>?Zf9nZ<r`kC|g-
zH#tIknpyJWWk)%4B4eY^F`4Ec%=xd!2<cMOi~Z%EH$B*6ZW&i!@Lw>Qvd<j$m;IOV
z^NRlp_SgK^urK$QoBFUzubYPKJ@*DKZ~AYV&g?<A0zYs0Zy76l(P3ZZufiug(qVtk
zf6sJcU%J)U-)9WIo9s`=y=(oo(3T(iAL72wUx&+jf4!N=UUeHyHlwzih{?zP$6Vd)
zZ^kEk*J1y+|8JhYh4I`I85Q}|G-6z&f_pz>)_z^aMz-SqIWzK)XMAKEZ@1mw&f8To
zxBf&%NxmRfJNzBkzx2Q4E_S@*uHB3XcV?{QE8-veq3I=i-<k33e&?Hd?0*+AC(0gp
z*x3coG-R*4Jky?C?xLoHO6p^f)TQPaMjhLj<Jjk}ojF1Fx-)I*dv-Lf>3?=IZRmk^
z#@;39f}P#(@IN*fYud@4Yi0=2yfwR|^J9N>`kBaK_H$+=G}!_~G{ia@Vups8sUc=)
zh?(rA*PTT^J%S#z6+MHV*n0)Nu=l3ju-a}|+70$;mOb-mNe*KMfkz*B8vFmsvorPC
z8L3`g?i~4MDQuAUIBmcvTBx!gTz`c4(HhIIjFwcs&EBUkx`i(eV1n>ozI!)@Yqe*!
znlAwTs;+8hzefu(s&K&*pAF%5utC3AUgpXU;<uc*E+f{v`2P_x-@+H0e4STfF8{8-
zdF6X4b;!3$;;T}7QK>8Yv~_g%?9<P;zW4(vS=rzE1-_RXwKtI9Vkjk-Y0ljvkK%h?
zzRq6`uMMX%YBHBGlbw|EvhY31+e3_{Jdb%TyrO&)A4o1A(0jP=eAoAOH&U|8-Pdw@
zU90(Zti6?rv~S)6dhWhGYpT(YN*s)%sjXGgp_-Y;H>>n_Qb+ZFDfj=-Cb6n<WYus<
zIE2+0%DwseW_K+y+nqn{hpa%x(7WWkEc`rqze-5>+@#DBcO46n-sleU>NCkHWYw40
zUz70&M(=iUWrs+!WGMS<?m6m0$YnsrClWH#g_I~qt5c;XWfLE@jaVecfeuK{hv&k*
zuaRempCsQQq}CCmN=-BE*(a}<9Im_y5@SzQ?h+&1(+^F3-i<4-q`Ut>>}TzNJi__(
zW6Sh?YP>fkAXD032`&5rY@<%4q>hX^M?fb1Pr9_pzI6Dsjz+ho3?+KL8hT=U0H5D@
zFdje&<VjUA(iXNt#%pn9WGm6i@qHlAQokxqQzd_I4{@bB74qKv{cqgEM2-I6JiWH3
z{t#jmE>DkH^|AN#D>d!z>%)!dyQ}G~S55!>=ki^A)2RGeg=BP6#K|>nHTbUGSbdyL
zVpV&IW$saGbZP%0zlX0qzagsX`xcRurm^!*jJ6>&nTsRGp7%J{|Moe2N8_UDSM%9?
zg@0Jn_1n0JOd+4DzOD5iUtS`m2ruC4Y#S|#<^#DZvT!d)vhC+v3OPmyRq`!)Lrs_D
zm2{JNYrlbcTS5qnoV&D`;YxC83+}?oElZZs@JYUc@<@%ca3g-?+cE*UGkmgoTPq{R
z33<Q5h0On_!j(z;zD$jK%PJo!Ta^=OQ=oqar<`C*g>Myf)tNblk;3HBJ!z@MY*CBb
z9!{i0jW6WtUm|)#jB`_-UHj2-&${?sNDz6HN&wfk!qlW6TJzE!_EO`h{aTKyc|CwX
z`mM;9-k!HeFMCfn_g~AI`giSU($}8x&=$EyxJlo8H(`vCiKI>1*Jq+UZqaYas`u4c
z=ku+a`qr)XJPl<xA-$$gYnysz&G$`Rt7(J5ULuSxA*J=T`2rE9g0D)-Sb6vn_XXI$
zVsyN}eqHL=g~^g<C7-9h(jI_6ksta!o^p0?oBChV7T(X(HQZDlBwCTO^d4K{$=Q6_
z>vJTeWL&C;nn)vc+*{69zoYs;dZn);14-?gM<S+`8Z**}qlIB!W$i~QrnO(+UsoxQ
z?p>29g8W17;rgzgDNTuT^$BLS@OQ~F=kht7LvnAHD&w`MBFq|W>)vC?*Q=J$WH{75
znJ*wYDXod{xMEh|wu*Yzlzu-WOZ<ZY*DErAz=fck_}-tie^>Ta*LY?{qCDwWcp|iX
zDdEYZdOk_|C|q4rPt|=S@7uS@XvZzoH)(^IJuFA~3bA=t@{AU3HP;r0FA_V+Et!wf
zUeXK>6s{hZGLT6B@O5{8@*KY4Qk@oZbJ7jpt5Wv8+nh8`<vDXfB+uL&lC+$_H8Yh)
z$@fp1627KUl?2=S6Zd@uCUl#8l_w>izWdf>+2g8~bA8@Y+BHT!C}&6vmEH240Nk;s
ztVzZ-<s<2H-)175iTn2TJzSNyo5<4xK`r6eaNF~1*_HEJ?%Z#uRJqVwm?M>n3D@#W
z5zq8sNh8`<&NlTKhtGk34NM`w9KLo+Od}*>FTS;Bz|I!Kq26HHFbnw+T9d_asl%CV
z>%oo2Y!UM?+t@bD=N$z@daW{~H!{ojSmt6L&#cUOFr=57+wE^*MW2HeUC#X6H()`t
zVL#uo_2E5N+Z?+F=CctiUDnwq_G5lc;W|IH&4lH&Eo~*gd}hstwg6_++7i$ABDR&6
z>D9GugxR$1;WQiC4qg+liR}oRnP)qBrCuA`MdokY?#${QYI`z!dzkITyzN76Z&oNB
zZu<l?f*H1NFf*8G`vrFeciH~TN4>`mU}eh!J1|%nEV6@G;qs&%8ay35ZHEhcVh?3T
z{8BqI@<`+nW;}c5G2rP8ynr;U!!KXiagUUgRBg;JUrT*~GUeIIlou*f9wRr%589s=
zd}|6*4nNDU2VbQH%$yUZJVTlCHsnGvIn;_@f91;~%9r<3zC1(u@_x#fXDDCZPx<oB
z%9qP`Y*$7mg*A^VYaZtbJ;--q&5M;aZ>X$!OJ&XbG7Eh=vG@sdqw|$P_sILFu?vr0
zpgelE^5})iqZcWU-avWu9?GNp%A@yD9z8>O^ft<)2g;-OVQ%^i(_hO<KV{P+%BJ^I
zHoc#+=^4tV_fs~#v$E+~%v*oP)KgA9uAF+Ya_SA0Q}3sodc?lPO!NNC#9oO{;n({q
zzn)>=V;x>MW!W>7WzSHSy`Qq|8Me%pF$aEw-N0EG_lPp?8Opd9Gl#pJ(1dsIr@VVV
z`?>wx^iuY{pUmdws&MfAl!K2b2j5RQ_zW-NWt!f~#P?GszMnGjot24?C=;J0rPkC_
zKE8|B%xh-4D=XhcS^224@(q=hZ>y|)J7wkDc<sD)aLgUN4yKp#?lQl742-xi(<A*!
z{v<O%S>!>=A`eskc!V;?LzM|0qD=4z<$#AO?>kJH-C@e(4pr{<VC85JRrYkaa;1Zn
zD?L<M(&5U99-^$Im6~R9l$(?_6|K!dI+vuWGKsB}Ni0z&v6(W7CCVf=Q*P2KpV(OW
z#3sroHda2diSmh!luv9F926X6a#@{mi0K#%4~BCd5sctGG8hTdIXW0^N|obmuFT^>
zFppE1y)qU4@gVreY1pR+)A4^qa0KTggCjW~kH)q<R>z!RS_G#Ar<ndC1xy|0rO#(x
z%-zAg*zXVSH=U3O58|>QSb+VZU=j95f=9UeXz(a5i-X0uJkAXEOx8I*Y3ho+z+KqZ
z`XVoIc|LgF)KT`cnX;cHk&cm$rbDD_q^oJq?EN{Wr*g4vkS6D<Y|f_6*5hA&ei<rF
zvXRS;a1)u5ZJO|FsFFoy;50*$$Q+ykl`K(}EOC`A#VT1^QGfH1>LTN_RK{oWuQjs2
z4L>JMGLa@7xGM8*@>PyBP&v|6<w&l|k$jaSg(^p4Do2V`j+CezVa*6FMz*=q%q8Z3
z<d<Qt<`<Z2XhSlz4auerA&tya$dqjJ48MA23Hq8Es(fjt@+A-X@)7T{!F)pO%bBxN
zpt2^evZj^Fn%1n12~9SuV2o*QEiF>Ewn$mpBKg`PWvZ0P*L5e>&a$(p+sD#6`Pw=~
zkT^dvnMj;VO%`p`6{e2;18W7c>|EyZG*Ic&RHaWY(&tg;*DPk1eGB^(k|<v#QA{OK
ziAthUTDCX1SLXO+O8bVL_RZ9%eOrTFX7}VvD~Fv{4!g|gDN*^7FY83OOQcM`N|}hX
zd)zDXB_H{+o2y^huW<RAIX?NchM~!l_K>sBe4i|2O@!G!nMj=aNSwN+fy$bu(l#;|
zMx;!Z%9KK6N}egDg)B7@uQhXga<%rhm3ET(0<@EyX(u_;PI9K5<V-usS!zgQX(y@e
z4+IZje~`M7qjjSZZRSGk4^u-LYkkPk`p`t{LldnJMOq)4Nc%~ttD5KCY^Qvs6r7Vg
zl=kj0z6mRJ6brVUe#Z{JC7<JqaT_B_<uH+J>5m8xzm*>xASkC#x%5B(cG~ZctTc~0
zdbPRwmuvbreVW(*Z{5!npbwSm6YO?<sKi<3FG%k$F@li%ewOs76v(`bApG2oe~Q2F
z`=AH7k@C2R9PdlNaI=g7^AG+?dpB$0(xoT34i<fhiwh&1|K=TT)%afF#zh$u&6GYi
zZ}2o_e5HHW?>g?OG~NG@8EMiU{{G+bUHEjl>z<tc{Jp<{<oI{-<O2(XUcBV_3zWjK
z<ewWac|mhr#tC!{0QtNFKZ`JRlpuVAQPOAlx0=xfH+t~8X@*}Z!S53a;T%{j_QyA2
zHX?i&%j6j|?K#OYAQx8E?D0I>W;qg^rn_2omTTYnJeFjBlO7`Zm5)l41W6$s>u@os
zs{1;ERu!xNnuSrIM#Qgzwe|xU8GBP6oEXh}8XI$D)J5vQ#9VS;<})PI6s9^U#c*}$
z?9A^zO+QB>t)-4IOOZ6)Mj70Vlq`3(hAUgO%yK<BRzqv5<5Gz+%Bm3@d7~fBksM2{
z9;0w=_5bc4ZzN-^vKFTdX}p`a{+?z9)qHw*AG4&G)v)K4WC^a}z6IY>ZnlK?C1StI
zG@wnX<h-4D%Y2xfn5)9u!pG7|(VhYQ0RGo}>+dE~35iL~+P_1;7(XZ7Sfy0+4qSyH
z;i_EI`YNq-6;Dy~j{S8B(MBOhy0qQ%pYxGC6A$GHlPO0&C&t;Ud>~8o$Vj>nqI@g=
zM@O<WhL5EOQ$614S9qo{%~BTk7())<lQ)z!#nd$ATdaYLqr9Eis)zL7{uj#HrXS)l
zww6fk|2TGz8O!h69dO<*ztV4a-wWw3DZ7+7<f-)39FtYSjJ@s2ZwKTP5{fW)GUM$t
z<&5a3RnPhG%T#FJr)}RgL*JU#yJnfJ>2hGPr0&QFZ(Diq<dNtHG_R$1;^rB&XT?%`
zMql)R2_5L}R#`+J88eSdvi@mgRhZjTG1Xd!zi)S>*Y@!C#FLlT7M7-(<gw0kb3T+8
zW0pCwTtmr_S;E3cWyn`zcn*D`b-2KfC49duX82Be>bNWWK8Js2jv(LDdmgoa4e*3C
zo;-C=QnnLMC-Wt~@_qJ$IMNyL+9R~@GF|&U2ky$+_<|aDY3XvU1-a?I4Rh#sSEaMG
z33`|KtX39N<qKQq8X<o#4$_)Re7<Q^hPG@UvmKM=<-3StEp`9Ef|XgW|Nr<FDe!}B
z_rJxv{7`P$^Xu<`;w4P9r!qqHl=yrlHiSbJ{xb`<vY3{m6?|t7zNW)^9Br<EXSk8w
zCQdMq^7}FS6})QBM8i}RO+m%BHF~Dn+V<#{>d3m?>y&9+s2t<d_BUvedIpVIe=$p7
z3s<5^O4i;kMN`xJXa!np*P<7w3=Z&Luz#D-Ew!0dw=bdT%`-218D55YMH#$T;qL02
z<z5b}XkUkmYh~W>+QP-HU~O!7v(oG7^)#!{)7a0v;|=fznANP19c11|6Vphu)*J1O
zG3#|5>qp*HZ>rhg9pN2eHnLuImf3`^&g0Ey?<DUe^9j0`er(FUIo=$zg|(=+m`_=G
zdcTeM_5A`{-yiRfw}rx4*(j{hB33PXW)1Mn6w)#<1C)s#K<Z_i5y~A6P}XRG@<k(+
zFY2m%5v&@&Zu*_lUHPIR$`|!ezG#%@L_cMs$0!rspFAmMM+9M_$0-v%Ntx)W%0!P*
zCVHweNMn>inyL)aKxL4+D1$Us8Ki@iK^mkC(qLtfhAM+JQJLr|%0UlM4tjuc&?A(C
z9-ti2NacvSDhGX#@<QE}7wVzB&?x1g`ziZ8M%m~7%07?Q(lAaLp{ZIXCMoYcRe9&B
z$~%uy-g&ArKLeHd>7u;zSY>+#Dcdtt*`A5Y^GsFVd6M$Z<CJ$EtGx46En8!haUP@0
z&loLXQ<ZTZqb&0zWtqn)3p7+&ps~vTOjZ78s`ATImH!#5{PI-gmnSK|JXQJSG0H4Y
z)p9vi*`9&QEKgEqxr=f>W0g}rRGFWHl}(<gY;rGUlY1+h++W$`ak|pGwXXDTrz^di
zc|E)yaMQBhyS3Nf>yKU5d)L?X-VK#^ZmjFQ>*{*%wz}RsOV@jM)b-w_%1SrZb=_9i
zb+^%V-4R{a?d!VkK<h(OZ;Cg?wAWgZ;~nN5W-`5L-ZWffy>|h6EvK6fy6U@*)|n={
z_B&hGe&_4j??PSsovmxX8+fy*QH^v3c($$p_q293(skh3-fZevj;;o`x*9z2PVr9R
zS*LoZ^4!zB(@ci056{+m*hp82XQM^!EZn6|HqsU2rMhCgwQ}x_bsczXT?byOE5JMI
z+Hb3CzXSAaZ6$oPX%YT*Z#&^sdd$!AzCdexhOP|H)|KIfQo~tkEbGIwb$z%+o7EuG
zURQ}{`(ypF*k!GFHu_s9m=69#e<E8e&G2WyK8r4gxUzXM<>KSY#ZOi)zC^kB7Rtrv
zDi@!pTzsx_@p;O{$CZmOQZBw&x%eXG;zb`~U(;N<_~y#Rw^S~^lXCH$l#B1ATzo6#
z;zf(%SkqIv_{qw}mnauMS-JQU<>EUj7vD*__)f~j4^u9FxN`C1l!YH32>(7o`S<b4
zF-}naeY`U76O?%$uT0~3Wg0sx(>Oty#=*)oc2>?kPdWEo<=p!!=iW!z_Wnpr)+Y0-
zPut_u_K5UsM2{r{8JWp1S0!mae05!A&a==SA#GHlO2&Ff#whX?1-8i7IKQSUC7Y|1
zY^hQ*s!}qpa;?73uxVx{A*UOvjB7-jb{5Z?!!I{6=jL2<KH*=$ufSYLix<-tuTWdO
zX4>MlpvCjqY$LGw%swfg^=qoFUyinZjcNS`;W8Kv7R^=mwN%*`RjC)(mawU|gn7uX
zw@h3mS5uW)IocjJQEAmcXU62%k7yMeXsg&nTg4o06?3#zY^>6!fwqcGv{h_^OesO9
zLMz(FC~ad~v`xrtm8i;;Y_B`*q^IqqM?2XUyJ(WAtF5J{k|j{dlBsQ`r)_4Y%7`qL
z4iT;Yb+n%QTF*1IZf9uA8POW+YH5bHoSw9ttnZh4l_4!BYt&`7hqj#LUKI!3d@gx!
z3OeS_CLfQWzaV4#@}u{_PiDaiA0cZRHZqzlZX3aWfo0tPFDm-iOX<-rAdai$E>`lc
z;=Bx=YIQg-)x&i>llF|5lL;RnW8+UM$G(Fz{43YWdAl;L5m}}l|D-SfJsqijVe$by
zJ8je?>B_q#Mh=r^(uMd-A8(I&wyFER9~-4&hpxw=?@J7H-fzt(;l34#!lCbp&AqSl
zuX?fcT}gLL#n#$JscVM(pSb9Ao+AD_{;_9B#BBw#k3+AkP5()$5Dj~(35~ViAHk-$
z*e}H|_`i4P8;NeUuYRa;r{=;Tk-lXTL+pzaaVGDu3m3FfN|VT_AJRJ{IRzIdDc`P)
zSC1pH{~z-KsraPoASnw|<YFdgCt<{Avc`}H{8IP+XEstHu?8gdgaZjNQ42qjdr0Ta
zga)6RjK7Y}ZjmuC$rIWLStIDyd*twMFOut<pHC<W`B6Quzv)iiR@ebrC(gpXN$GW3
z14RbDDfUztqNgM^&Y+T>yK&pO*L8BKo4+?3ag<iFYOYf9K~gt~8|xdtk0X^1`x83M
z^CQGXzXmYT4yS1?ZI#SYc%N1u4WY@9_7&%EBip~5+QE00e20CIENNA-)!L^VmB>L|
zqo-v<nMddAyR4zf=kAY52`+O#@tsV6Y*nqTmJwDlyU>WeD@RTBO)CF8T!fPu)!*m4
z$+PNV?)gu~VUusZ=d}a-Pq|n{$*9qOB<f&-=fzioYdo;plOC7w2v%MuzAwLd-;DG-
zot=2<cM@;Dj<2SVm<PBP`v%e2AvVsN!|TF@#C2tOH}ZKEE1j7~hWp*&dd^GXc3U~W
zl&&=CDEIE=$k~hgemEz}Y$61yN0ia>B)^*sz?J9fWk&1Zw{I6^1$#nvhW93)^UbEF
zrnGIVr5`70O-jD6Kh<pOLeTVd+E3rY2j5e!L};9~50QLQ^><3T?#*=4N3I@--eO|7
zT(n6zy`|*%`;-UK&-@bMk;B-wP*SS$THUne(<hO}gdk_MT<<MrdvzygQ_^U!zG}T7
z^OCqXSvEFkD!;jB-AbhFGW<#$LBf_?H>$PvK+^d;l^Y-YcjQL$t<z1h@6WMkipo9W
zmddx3t!8+sluc^NsOhJ6my{me+OO};75RX6;M7&VKQ-6Ig;5EaWkD<F;*2~I9eQu1
ze5Y)CzBl6+)YN?+A$z)1N!V5U_FLQ4n%{Bai~5)LeTRg8QtPCAN3)8RvwZ2f6}T&5
zLh9)~s!1ySzS^FrKF_U+@vG_Swm1KKcTbfAW^*Re%C(B5^3(L!Us3G<^a)%TP6Jg+
zk5uAId=(O={obD<S8BGk`}Uu_%8bk1Y2QI#%B&#Tz<;Yudp=oCh-pF(SF#OA-v8a0
z$@l*@p-B#<rL&veLO@k{sJixR3wh5p3)j}>>w9z4Qdw*0d~H_EJ+9S5!cqL~=aJ0G
z{q!#0f&=jT1NKT=ti9TrQPi)IWFM?bm&l%_qS}3)DS?seYK*dQ5w904T!yl6b-aPz
zKt{|5d&61NCAySzys_RSSSjJqa$(PApp98{BNxJq9nHx5vEFee4)-<N6vKL*&g!o-
z;j%iwV*SQ+Lcj4HW{CFydWlEFJB>4UE2s3Xa!T*{Kk?5tt5pl}8eKp7fvy={t9pY!
zR9(UAbj|2`wEiwJAE}Pt4XU|!qiWFIq<V2bR(-acVOm~No^gWmj6;<Z7^ZLN^h!@q
zHekBGCtM?J<KfB)^ixjYU}YNzDBIXy*~Wp&HcnHvafY&u2P@k+T-nA$m2K>$Y~u)J
z8%HXWKsu39qm)nRt8C+FWgAB++bBC{PDewu=$P)UY{O(t&9TZh4pz2th_a1im4)b|
zEW|iv8^<c!*i#vaamqH1RkpFOvW>%)Z5*j=<0xetM=RSnQQ5|^%3X|8wo&$MI?GH{
zwsD-YjWd*OoS<yu!OAvHP_}V~vW?S}Z5*y_<49#2M=9GlTG_^l$~KNxwsE4ejboK<
z9HOkqIAt5hD%&_**~U@IHo`T+HjYxZajde9hiS=}s_To#X!#he8mpV@TH}^lO4{jK
z<CuS;f1xS%FZM6yEPAW6we+-Bz130GTb-eLt6Qkv>TK0p-A?sZw^hB>+5YwZ_1r7k
zs|$6_a$Q}s98>Mp*;)!)Ybor;j#angQ*>BoYKd&8+N-nKrRsj%MTd1~)nT2XI;>l$
z_Uh*T<Ngy|6}{E1Rd2QRpYfkDxvIUoL{~t2s=Yc(wO2RLl3ic5SC{C@=s>ksm#FsY
zEY)6J!j7n~nz-t)&QcxLt+XbTst)Tc)nOe`9o8kP!#YoOSeK{{>sG46x<qwY`>Mmb
zM0Hr#Qytb>x(YjAby%0E4(lw{VO^l>vg_!&>_Bx`m+0#3eAQuHqBXEoby%0^dhIr<
z!#YcKSQn`d>k`#r-B@*4H_*CTUv*fQs1EB^s>8ZOby#Pq4(lS-VI5H&)_JPKx`FDj
zwyMKAE8swzv}m#}2}F~1me%}I<)#}dH{Dga>4wTpk5_KGgL2b7l$(}4lsd6`T69=<
zRBl@KRO*H<Y|%TNqug{O<)(9#n{K4sbTj3qn<+QlMY-wr%1yUdZo0j4(@m9|9;DoK
zcjczXD>vOix#{uBO?Oaky1jDK?UkEuuiW$`<&irnkK7R{HcF*fhS$mKWa@aGz0OEq
z(UD)z>x#^7pc1VBncd4Y)%g=nau=xNZmCi%Po-FvO0gCy#d1}OWuPN}I3b8!FF>x3
zMWTyd{D?}lOqFOkD$%l4qSaSf)=;HbW0hh}REjlIDb`q}SaX$MZk|NGO0Jknt9+GK
zb&*pin0)U<??l>)*|ZXwDy<?at?H|^YKXKt%`{dym9G*iUnNvyWYhVyOBc|RG@vE9
zoj8l8{FZ3PUrfv&^WNYt(SjdQ*;HR;Q$z1_<~=k<64f*LDt+=*`b1RvG*s!6uhORp
z(q|lgWR^prN}R^pBKaz7e3dCyWr0;$5NQ4PwN_hgkvy%po|bI3<RkBNXQ?K;<*OsF
zvgsVS`Z0XNiEbm=C21|T71dhe|KT6vBx`|I5wGXnS|Gmd8}M%dGYxW>iI7Q82^)PW
z;edq0TER?QH=4eR+4yq*PCW}}r0a#gi`P*$VR`Dy7aPxXA!DQeA^-Htp8lWqSZi5z
zlO7Z9s_H4GyB~;MzU}49x<*f`+SjW*CyCla7v3c83M(VN{Xq|SIa;Kip=>Qmg~Gpu
z?jL#MMsVB+cLihJ3sSwL)E&h6v1GZFc?bNLyp^${jX<<vuS)m5Z#$_idxD{Zkzb;>
zNQj9X-1of)eDwg*j~KaLHTpf}Ia-P;lRAxSmJr_j8{(Y0M|y5D=8%YgV@bjNc^6IV
z1;i_<Z(PQ+7+sY6rH`7(3z-X|Yd~>XR(r^)u@U@|gBpfoa-UIVPFJ#OUx6{6Z$7H6
zy*QWW>RL1U`%k%4VJ^s1#4(k>8tc7>o9xFD(j0xWmz`hLu^{#N)$o(lh(T@P@H8n|
zY0puY>Uo6R-E$PVwy=_JiFc`yBCIh<<e$o$8rPHe^EBD1jq&s}m&b6e8jr`0ERzGD
zThMG@ZOq4Asr{^ZrEixkhde1Q#cRK-cGvJ0p6^P4u$|Oy&P&AxB=rSpDVr8bj@n~f
zUz3bS+EuKKAtxl7lo4v#K1#l<<8a#KFw0>*Rx#f|M(*woZ)L6f3PzG{z$SaXeMD>d
z5xUy<HR}f1E7}e?zfU_g5|cIVoVkZRt(J%`SIX(#F23*@i8|!|C(n!$p)b+RiP3Q^
zk#~->E)qYf^5jx#U+dPY!bE=|cWUlcxskq-f39}A(e}hxWKL~qMjE&k>d6u9Rm6(f
zREh8c_cj_Q*_Q*~$tP7erR`34(LDc*xTw39vZOvnT~(LvcTYP{k(GJUCRDmyr&QOn
zvPIv1C(i(TKN2z}C9kT#L6+*=*!%5iSG1OHO>@A?SY_3FyH-z28g9gWcj{X8yQ=?7
zNx_t)OZwQ45SrsxkPq@?+?$q1%B;3Ox@uKy^%A}sB<vV_90PS--Ux}gj%PJxMrgHz
zHzK5@+^=?N&p!ikXv+-IhBCVW$+bYwmCVAEo%b}ws6}Fv_{bBB67k(Lq`u4{)kD*U
z_cDW!Gac2bBju_ip{(W~F3I&<Rq{J=r~0ksluB(EBk_{5)pA2EPAUKC(zzCo`*6})
z$~&aSi%Dr=%#aL}{N!3`9JItI>*l^fM2|6d>MV|=H?4zJax)<r5-erXPr9kxK-xF2
zmVOz1Z^|l*z%-=2m$||mT3?xu^G&0mPO2oNQQ}ehMyvI0rBy|q?du?C*^`5kvli(9
zA1<k%k__lBPJAigOY6IS*;H|l=^;}$b*B#Q-;wVAZR{G0#LTB;E0qjK>bAaP1+}1R
zMv%0z&WDqyF29{!+_|2TS1+mye5$*{o%NZnhF3Wg%8RKm2xSR)j5Nbc9?AGs)e+Y^
zzkyF-Ypct~#7*cTmip^v-e_u7k4rM_{V`SJ)eXv#q_w%kT>jPJDef&Za7oODp}pSY
zJ>7GN)l&&uA_uu+o6ft^Ql4nJYJH<UW2&uH!e>ev@9FFR|4*d1)9xTrSG4tu9u`eI
z?Ez>nTECCda;^4q<w9eHS7P=^RqpEr%@e+QoiFOnZudo*xT}UCK9jPN7+nF+xg=bR
z+ar{erF>Vu!+P)+=q-xIHTf3XUDcDS5tegEj8{kx={LZAC#}M^gz_t{tI(A7r1%w`
zSLuNyOD0#S=T$93Q)!n?9hEq3tNgcgHkDP0l3aBy%~DM^vd7$>M?#Lt6OzYX`>oUz
z=?yv=<YJXWi?M+=8!ec8<yM-wn~&kzkiF+$mGq?Us^*5A<inkrsLv9s<P{nBkt6wE
zat%9ia^qLTO|SnTPQ+;wxx9?nElNd*_T{<Mzobpe#Fpe3N76NEQU=pPsB*1powN;1
zI`7+Lw?kzujQ>;r7wp4$4(vn(UgAdfue{lxXIlBU`M0sk>UMU+?BL%6htL)F;34+J
zd>F={H(bFpW|04^ztjwY4Oni5GrBLkNp51-$m1Am-)2r?1pP~M1|#L6nZxLKruiA;
zj!S@t_GDRORH*BU3U!6%q2wQXvg!)WLS35~)3up#Rs`iTIw|^rOLSGH+evqXt}!a0
zgtcNNrtHuh)isq)6K5-3X*66{7ZvJ?qC#Ckd8n?SEY!7=F<m?9v}w8>a7XBBp#ohe
zG+I|aMiV>Nica0px=OK?t}Be{TEZe-Iar`8dqyiCG*r`c0Hd=%g)@>JOdI+?_kWK4
z7o>7e9k1;{TAz!H>}J~3Ki|IqyYNJL{;&OuunSw1r)-fM+3lumQDbF`n){dem*GeD
zI<4<t?*AUU?0D+?fAFuwF8iML@aOt-vAf+*ulBFOE_<N*{&oI!*o9HbQ%0$ue*^hF
zDs5NPrv9J(KjR{Mqx$||DF>r;T)CT;hEY1Y+)|mQJY|}!f2V&Zeq_(oo;vE>gR*iD
zF0yl~@89R&hg}$`JY}GID+ASB8L0aHLjPf|%3i8Hm5mypd#R4}7yFBG|GWQp&caXS
z=}2}r<)^ZhpX#jq)DY#T8Yn+CQ2D8jI?kQ1{L~QTr<y1~HAMNTfyz$}QGRN$@>2tq
zpYoKSYN7npK;@^JDL*wt`Kfx!PYqFi%2R%7i1Jg7l%E=+{8R_!rv@rN)kXQKA<9n;
zRDLSQFY`Y#!<41!q%2hvWvPZJOVveLsv*i!wNRF7h_Y0HvQz_=rOH*7YKXE_gOsJ}
zsAKv0%2EwcmdaC>YKXE_1C^!9RhFumvQ+hyrRu0GRkpHJ1C^yZSXrte%2Ewfma2ua
zRCSf5s-rAbU1g~bQI^W>i`qt6D!0>WhO$&{r_~H)sp=|A)mK@nUdmGSRhFukvQ&MP
zrRt+BRhF_;{gtKauPjx6WvLEQma46?RGG?B9il8%L|Ljsl%<L&OVwXls{YDS^;edv
zovxs4uj|`JD`S<RjFsExwE$T+$6OBwB1b*e73Lsqr01KDDd&9Tjc75?LK=zIzXtdb
z*BBBgABa54S7{Y+e->++<f=gvvB;<*4aN1ObCG7EzgWT-?Zh#B%ON3(k7mR|q@IK)
zp}Ir3nQWw)=ruMf@tW$nCGt>ES9`O~S*;mWchPg)5{TyGmfBzTxxX%&Ws^r9S7lYE
zd?h%aja24J_|kGm@hyjhDE{P-ez$vG^Aul{(^vXu%^%1)nQKSW-s;*3+BY|@^ReFf
zfAy3~um6K@z_-N`IFtMS4@SKz%KGiLh3_OZ2{YGm8KbMRLzZwf^6ey=lvdZ=&9dtD
z|BfZkJw{6YH;q-)j1YINFoXHB58x!0FnX{}{$Z{FOKST6zvDvQNpE1=_ZQ<tFW~!o
zzz;TL=F%ri-QyZb{f7?l4Wax0J;t1Jnbwn%F`V!Ipxo?Y)J2e3sq$SsL#4-B={Yl=
z^DfX{_ID9-dKmQDH}ize%;8=J=kap-weQQW;{os@siS7UPsX$5jTyn1@BHaMah;!@
zqscJD4f!h4RyEeCtQEFp8}IclW2JJ9c_B&v-<O#fPuNHB#3^lM+de$jxI`OLZTz!_
z2NT{!D!hLn>uvT7gVgR6&Lfn0;YE6le~hTk2kt+Pd#-8=?^1^I3Gt6zO}*FsUn(xd
zO4bPwxBZRX_b(fgar`b!@<y1tUHcQ(UVLR%ySMs3E+t3yQ>DLZOiiw?s&;qPe_|yo
zk|l0vszLt6<h-v^S|fKUb2@sTR`zt9Tt@YD4omeXf78Fz7~Z~Ov9C~4A?(Xn@><pC
zT*4vAFp(xZl79BrOg%Ye+uwVgztnwbhs+TTk*w=@jbFuqg;T5VSv6f*9VMavhv6sN
zHCb&eNBAKl$1gei_jg8K%X(pSx406xuP5zU{%iHyS6n5fCFhf}^xLe6t{ysdOIjZZ
zvnm&pwN&a}b>B7rxjpx4FO8}9O3iLbg%IAKvVS`pafdI|xNl5`P?a)O<Fd&sHBIrm
zw|eYmdZgcz{*K>wy6-(+)nb$;)vCF#O8aNg!1SK|%<f=^uV(D*Re;{LBN-1|D5F$C
zRuB!^1nn3P8X1g6J5^WX*=!vp9<8IqfsPUfI$|+BG43L}KLt8=F-AvLI_T&}M;%4!
z#Mg2j8uw&0W-Q|!Eg2h@5t?y~n-rjBPj-KrsUsb}jv-ssQ^iUXelvAE`Eb=%)t;T9
z+ThaGv_mUjdw#xZ_UpwwfsWXjpN)HGe!X@4Iii~V`sgThhHCc9RLy?<RkL3m)$G?-
z$E8Q3`${wh${uq8dqo|EU3QuaRNqxQ9jTtKBh`WG`WvI;)g5%ax})m)>#Vx|x~Q(d
zak>XoTXui4W`^qh>#2Ls9ckmX$jnq7fWD4wTh)W*u`ASA+{dw7;gLGleYola?4_Eq
z+Otp8(Of;o9>e}_v)I3Irs@XlrMdxq)eYE7bp!TR?O8K*oIIi$0{f_jz)T%8ucI0Q
z`|5sBGgVJuFVz#+UiAbXuG+TxsGh)Hc9ngHr-&v>U$q7Lsx8o0{ad|MTcEGn0^6&$
zKwrn<>!`NCKDuYrOw}3KOLYeJV$Y~A2yKVmLHuRss6MJWu$O8MY_FOFd#UC?Uo{8z
zQr%s>RC8c&)f^~0DdsR!TXu`;qvQM;sxz>!j`mv}?LS;+z7N&e?!$Eb&M2MjK1Jub
z57qTMBX#}G6kWeFLf7xK*7ZAWbk6%BI_LdRo$WqN*X*>>8SdkCZhJSKy*^y$t#{XX
z>l1Xw`UG8T(?jR2PtbYmU3GoU1f8osUT3CH(3$BIbiK?pT`x0K*UPlg^)f?sy^LEa
zGhSE0OwhUK6LjwRc%5}VL07v>P%dMjvKWnh;V*_Le-TyYqPcPwla;NQtZYRqorm5+
z*@~vhRt!>}B1ajDR?1C8m6a$^KBAQ}5tEgPI7m5&!*p#+b7db|Deuri8Hd5jI80W?
zp;)<wA<8vGm1St9{K8~q76vJ^kfWT!5akpGDuXat8H5(fAWT#Sp@A|8xym3kQU+m?
zG6*qc5DJw+$W;cRnKB5u${<Wq1|e6ugGtIA<fW}`nWWso!O9)vDtFLOxr1Eg4)T;c
z$W`v3iE;<I${pk@cQ8p=gIr||CMjPqRr!Jv<qMiAUy!RzL2lZ5mRw~DS}Id8DQ!JV
zu5tu1<p>IuBgj>bAWu1hT;&KRrLAN+SUG}*$`QnrBbcZh!6an|a+MvJl(vS&u>%7V
z>_FR~Eh}8w2OZeyuVc{BWb5jcdddrA>*|$yX}rJ@$_vDm7dS$Bfw=Ml{gfBzr{nxt
zI>Mi&WB7-w7Q~}e|KU-p`S2*!d3coSJUmME9QN07{(3sjpRHOAWsO5K-SaX-Wr5Y*
zC7Y-w(5AY(WHZ$PT1Rz&*40&Q*~(G*v`Y((N9yc^z1!u(EYn71nF#Gvls9Y>v_Z>c
zyP%z^m*6mD|HTH%SOltFv9W4bY*aOFZtaoCc4O{tG`>-*Mj5h!VIz~XGpB<8iGS*{
zIVbJseAPVXl%@T45=zyNFgw?;sQ*Ux+WK!~U7a;7d2gLZGh5~Ctp7&+H!>S%nv5+O
zt1{lmSd{UA{2FCsOwSmd(Kn+wqbXZ;u82Gkxgl~<#%Rn3BC{gXaw;MdBSRxY@l)-m
z*Tqlr*E5p(;a`89BW)wakpfVRtsv5zv$%*`L1dzaJu#9K$qF_F>w<NWiNPv<FJeB%
zE_#=d`x9Z3n)(~4X;1rS@*C}U&8f(#@SA((-WqSIw~#cxTQyV`(Rxcu-HA4L4z1lN
zJKB!1V`=3k*ok(MoouJrsdff!*^lfg_EdYCJ>8yRe{9dRXW2RSC+vK9nf;x;-2UEP
z!On+&v{&0}?6vkfdp&K}O4_FP*}-rVEl;_$II<TZdkwO~AT35t;;V)|clFCA>cwa&
zI<p3<8*88XA^#6X?hirU4;MX-ti3z}$$cVg9?xRM(1qTwy^Fkyy-U1Hz2Bgv@h)$^
zcei(scdy87RxEzu?eM<zc6wiXA<8+e@3A82r^w_>VS;}TqkAh-@lO9PnAV3x#v#w%
zME<-@ntcXmxQ)8ML+Uw9;8#IzkQcNFS_b(+K~P9(js>FYv?t$Phf6IAmIW^aF9t8M
zCuiUluzI%8bo5}Cycpj;89^TV8MZLdpe4u;%Yy>ULcU1-phZ|2v;=YfWd*s|^1^NS
z4e%S_cQt+k{B8}R+!y0oobO&j<chnuA}9zexcVVi-bX{_&%#yyd11MK3wSPE?X$a>
zFLN~O+VQ5XooKq)NnkRV0;Yl)U?#YOdf&twW{OxpmhT-(>_=dZ!W_*iw6T~!<Jzyo
zFT9Iz{~hM#nAc!li}}~^b8jAg=Hqt(_J{bA42WlWBA#1_V;PblFD%nH<{vRG3tr|M
zKASf$b8n9SmLNa;3-7g=H($qn+j#SJ_%6ryG9*Y|xPef&;ByPUD)F(Js~a>dxtdIy
z<W+gn7Oqxk$|Yk|nYg!Hu4<^2RdIEpZsAI$hMLTq&G^`+@y`!e>HUTLkB0B!Q)2fn
z+ClSpj=Z^qCUM-LZ|?ignYQTH%?V_VkLQ0LZVUo)-HJPV!L}y`9RPc$vVJj>)r<K-
z7n2!j4chPxZi7P@y|MlVzTYjJ_>XWof*iNObo$6*UuLX#T=)g0suOYP5|&3=(-)L~
zyZN`9f4kN9dgBoXIACUO*YQ3NcY52vcGK3|Wjt>;_==U2MNBTk7hiMRS(Uge+~w^C
zUy;LKle6O56#oJK16<qU+LkrtW#PNtM_>ck2wbR{_{zlBKzt1}+4x$4uNC-Ofv*)j
zze2;S<c?jG9d;K>Jc-@Mz3t%+TzBBQ!~2Rf@bMcYpRF;e`o~>Oc}7#Yi&gDaci|#;
z8SXN~1y0#JEPTZ~H7xg7o#4F-(0odqmJ+9>#Azw%Qjr#~)r9p0G5CTfboA?l_xV|%
zGw2Ftgs+hPuNh1I&ts?6iPSWDDb%vI)UvkJvbNN+wtCgl6C(YBqVVyc7?gsppc|u(
zK`@fM8cV4;p4>lyep}LINpO7lQg8wzAL3GupZoArAD1W4WuMLL(0t@V0eYT_F-ya*
zO=rw*<X?B%&tBO7fS;Y1yMWA${|bB^R@xw3ZzCWBWP&=NF31AepdP3X8i0l%2Q&hW
zK@-pvGy}~+F31BdKueGhh?6Y@Q80w(4F!jQVPH5o6pR2P!OZY$`zOpBz>VN0a5K0C
z{244UfqfP{2mS$G#_bjGDtHYn2P+6;BiJ2&?bQn_z5199KrSVPI_V)bJ(0LY;e676
zKIuQ7I+sT+si4l~QBx|&kNM=s{GdB2-4paiI`sj4!2mE297Mez8E#_d=zyGv2Tz-(
z)UXQbYMwd%|L4g6K1Zr@qY3+CmYZB;d`rfKUc<f|ybj&~ZvxRk`xX$bxu1h=U^}P;
zUjTF(n=fgB#xgs33VFLK5#kO)tf1!YpyriR>nf>fWz@7)-|&<Qo>IY6DtJl-PpRN3
z6+ESar&Lf&cTh`rP)m1EOLtI9cTh{qsio!A(sF8PIkmK$T3SvmEvJ^2Q%lRKrRCJp
za%yQgwX~dCT23u3r<RseOUtRH<<!!0YH2yOw47R6PAx5`mX=dX%c-U1)Y5WlVI?)I
zjG9$O%_^g2l~J?Gs9BZNtV(K@)T&BqRV6j5j2cx&jVhx?Eu}^+rA95K1}&uqEv4pE
zP;)A%ITh5L3TjS;$}cD10&^~@DLZwRlcHth(FWGgRFbNzNzv`BO4+6ItP6S9jn=9=
z=)ov@FTP#>z&-y0%fJgj=H9;qUIwoKVog4mk<Vr1a~b(uMn0F3&t*nfuulQpg!v3?
z<$0fjZD2cK#soRCnjBe8j;tp2x0CwYN&W4l{&rG-JE^~&)Zb3(ZzuJ)llt39{q3aw
zc2a*kslT1n-%jdpC-t|J`rAqU?WF#8Qhz(Czn#?IPU>$b^|zDy+e!WHc5t}s8|CC*
z!!33mxE0(6{swLbcYr&=l5nSe7CZ<30bVxNz5-qav{H6CUkVMwEgoyqyj<G;JpQ);
zEkOybd@E22T7x#>E@WdRa<LM5_!;u>vw%HUf<6H4>%jmp5F8Zl2u6o%s3V(bt3IP;
z+7LX;H_mh6MrvYZWKp;)@(B5v$#>`sTF4o+kh5qZPoaezMGHBL7ILDwDy^=TQ3fg*
zZL9-xREODBb+jzB$Lt8Y@wJL3_;09bW#nra`C3N4mXWVz<ZBuET1LK>k*}5HYbE(w
zNxoK+ua)F$CHY!OzE+a2mE>zB`C3W7R+6uk<ZC7QT1mcElCPEIYbE(wNxoK+ua)F$
zCHY!OzE+a2mE>zB`C4g<*&V(Fv;w7|HE09)_OtB(?`1mx-p!&D!gdB-Kv&QWbO${^
zPtXhW27N$Z&=2$n?Au}of`h=pU=aAGHur4&{1p5Q{2crO{1Ti4eg)12=YjLV1>i#P
zYj6>`7+eA_1-}8m1($)}fy=?~!4=>S;7Y&@X4-F$_S>WV_87IS!w&a#*g>ZbyW7{X
zAA(KbW3ZWTQwu!c1IDsx!#yO*8YIdZB+42j${Hlf8p@u0F=fz$O-T`v&1J~rHQyi!
zb|49MAPIIL33ea}_FZCL4%Z+T*B}?yAQ#sl7uO&I*B}GeAOqI~ZRvY-qU3i0y{R#M
zKwmHb3<P7t6~Pqz90sO^tEm|q^xM6HnpeOVv{%(bu<}L0wFQi;OPv`=of$}-nMj=(
zNSzr-of$}-8ECS&+SE?qduXERh>v0T7>19I_-JAe!+i$5(RO?XijRi)h~p!UkA^10
z8f0l5V;j~XBwK$cb1v)9XJzjNh42CNH;nO#3*XL24(xr@{;;0cajp{?5*Z#jG%_MG
zGBPeQAu@?)CBijNnz_biJWjYx*_YxMW{x?{%r>*wAz>=JS&Y>4P@dfz4q!Y_?wv6j
z3AIe`|CgR0(zEc}*7|zBMbFLE{Zh4`py!|Kd90qN$=Uo#?bqx16Lo2d%#gjJa^O7*
zOq{oDZ@Myyzmidkb+*EO#t3&KuYIIHcYBdDBWI<(i|j6B%`o02l1LqyrD_?|C;#k&
zjF?--LnJSYJm$&TGJ47uzw#`eqG8H@hNPkRqQ7uLTIj`*f8y3$Ld4bDB17+xIIDlP
z+sH3d{)7Ac$0;8p@qaTTySFg{d_D8mFK0yge8!yT_^0`^{aOAI{#16Y80io72jbG(
z@9MYrTlrBx&u{G4^D}(I2+1~Y3wl-7d8@sZ-f}+!jZjOyry28J$VkeIjI7M_^Sqn9
zYYBO(gyLQ4UB<}EChuIX{){p6`@B>9IgF+sO&Bi{c4Ke4Kbz5-qX}!QKNnwzdV_gV
zf3GJlon==K+=?0V*@B<hj49^u<SZ|+Uo+ykm64(i-p}k>8MpVNj3BM>UbL^;W%fDy
zB)>=P0`D<D!`@?W_twFr+~5`1t4V<ji78`Hzp)qEbKqQ7*fYFq?aAOcdn6%D^O`fB
zHQEmIHra!{JCU5EF{`GmJzLIvXNkS1+OG{qV4oppbFR94q~}-k{0}|99a0)-D{jKi
z$E-}ZW}~=UU(Z9-&&T4&oUP{#;UMgxx-U|fhxL4?`aetT_9tq8RL^nsxm@k)(=Jw*
z3U#?m@4ZK3_?fz|<g3S;i`C^{>hh5KY@#9iVNb$uqj%k*=S_N5_BFJ8Z%WMXQJ)cY
zsnis>T-~GU|BrgLy}Go}^FsCcq}p%L^Pze^LES&s^ZM`*LcUbpGu7o|J+t#Y&;6~s
z->-4LOrO|XT^`n}e^Yy@+NWq7TzuN9%T9SCbG!Pfr{}1iGxXd_&sNVZ^;}2KjrDw^
zo}1{osh;!nJVMUqR<%#l^9(&-pyy&ekJWPnIUD!Z6V>H(b@{8>+vvHUo{!e^06iCS
z_TXAQhOuSddoN_eulV&ai~035Z}ID8Ht_2WDe1w$71#pPPg%zP_9T0f8DKA^ogHZJ
zw0D|8cClS-2HV%|3Nys6^oq@J-7)8Cuf5m7T%)Ymb*km*de!puC)Lz+L-1tqq`5KD
zA9-|>&YfpIy39%c9)SGPH;zP(jT~o8<iyD7NYy!!UzqI3Ig#^B<H*I4i;;P$_TnaU
z2I+b^Qmvjj(oEx<a5NJ4U{<ns=ew^p61yeksfgH8n&oVktDO^e8QY;Y>iJzc+j@G=
z(6h|Xw>D4D^1ha52p8T=IqlAH(OucIDD)bUGP0IH)*NKvOAcub&WQXtEvCi9+tP+4
z<@MX_@+UIAzub|zNbSd`{Ab=7RMHaOfdAD&S+Iuj`Zt1?gMS7~U}F}+(aaBS3vLOn
z59S7!gG++*gI@%5g42T8!7Ns4Obx~}+B`HE2;<Wg#%N^FieHp*>Bd1l-0Q(K8OE!(
zu?}VvT-a*(v*kRe%zu%mybMG4wEvjDkf+YoaOW`YeJ5d#_vaB}Z~rF$+F+=ErGFXc
zZH$m##P3}HXF)x<gH!wyf|35wnA3UwKz}l}vHqbjp8Y{jzcUPIF>a^$1^yOdHqvkI
z=lEHE;C&tBF$%vG&Y@i6S<gSk+u*GYhI;RME4)|z!QL`|aA3UW{ITAX{!Z^vZvi9t
zw|jr_w|F<mdw5rSSHNLRXM}$(BmU=jXM;1~Y>x}BC(dpC{y_!|)HMI5U_4sQMtj3B
z4-Te!eS?3pS5!x@buib9do5ua8o)YucDJOqtqkVc3R(Z+vr{7}GTvv8GV*?nUB&ya
zv~Pfy?LWPD?Gn;<s4$7aP)mDjizJtAf#&s_YCl)cC3-H^b6Y*1r{@#A+wk9B&W6?z
z`v7(MK+l<aUa04udLE(YxSpqY_uzk;o*z<|wsJPRG~~1O?CH6qp1bNfqUYvlPNVJ8
z^GACAP|qLe`E5O~^Rn@?QT<27#pbJhq@E|MpL@Kk@v}|sZ>para@BmMevG=DrRSfh
z%WZm&tDjYBU##{&>Un{N^KU(`)bmy9{x9|U|5*DHz&4L6f6b@MhkVGgB+G|nN!H=p
z)?wL}E#GH+#Yt@Eat_j@an9CGleS3@LQm2wPScY@Pbh^#fzomm7AV(J&Qf4mc3F-E
zma?=!VL2M*|9dl^KIwB}j{PqspXHxNGjHC^y!YnKoA-J6Q_GRx^5-)g3GvUr;Lmd$
z(eURZyxkoBS;znS2mZO4;}QPZ$?;SC`F@T!@~4GiH8KY;^CAA%_YkhRl_L-E=RVH!
zE%by<NaHxq`F{`poXhcY<g8<w-}Cah{K@$92L3eiX9YbqPjOEE7ytYxj#u$#8-IR+
z<9Be{VlpN0=(7Tj|AylxUb2{fw(-wx{Btq?T*j#~@Mk%H3Oa54^B8{?^QV_TTllks
zKWF%Jnm<p_Q*%H6+{K@JIC3xlJjI^}_|wgw9{x=5=PZBL@n;2|bYE41M$;fi9^U8&
z3x5JO^g+CNHOBQ`8zlX$ns&{z(0*~v3-~X=bzm3Qf!&&4;lCcP3457?m118*`f!kS
zV2?Y*wc-fZilbaBu3@)fuQ|bW<0RLOQ|txyDa~50A=kmie@!!sXsX}hZLe=YTP{Ld
z)@mN%dh!XbC*RHW<a>BF#3!ZA(q_$jdA`=Cr0vpn&HK3id_T`A_%zRG`T-v4@j;v`
z9??95`>Mw@AHp5gt27^h>^!b{mPdMglt*_w2bp?{=6T#Uy-o9RM0DJx`2>&R_!MrE
z-mCdEqBS1Z{1Z;mKcM*>zsvb~NbBb{U(kL6w>ZDZqc6UMJHwyRd>IiJFKYf7Q5Ij&
zyrlh-_Dh<t^7x9c@o0*#;{@{+%{LG)@h_ThAztF&G%xeGi0|+?hwt*Zh41N%xKaFl
zuK)j4(+$;z+vBh`#Lv|}r~bb3XR7>4{D1p9)wl9rs;-sz|IP2v)-+%7G+?e4=;QkB
zuvD(mzg6Sc->AP)Q>(vOf3v1ef2;nKre1%${&wu-?$qC@Y1W_CpVox*XY^+@Vf|VC
zSxp2H0QYL5`up|wYg+UV>L1j^^bhGD(zNQ|rGG-xhMnLPTG@&7QZ4Qc7GP(M`;B3<
z+w2Pm0$yV*9E*AF+E{>@jZ;!l^6|$4h?S_;)l}Z=x@y}tHa;(%Ik$iF_|Bbw*cOi`
zANttGlee)&Tx5|b2NQCDo<gm#D=o%w!0!)u4F;_xZ1JMzpB28nAg?S>XL9`crDtAx
zF!;qF8|~<5J{XQ1NZufwI=A$|1K8Fh&QF63qo+_uDI)toSvX{~S&I!uEB|5eYQv$H
zXvFXJ;xGK?_z(N{ch?6)ef^gYZ5wE54n+pnUD?sOPC8XF*j2l(K$o|sr*C~VyQ#+O
zuT0L()%q~Jnuhal;EexXoN8+H9=|^tX=y=AcB9|#^%xA+VjG%?*$r&#^sVbQ+&0~{
z%RS+UdFw`MXNH4aB@@%8vAYlKzi(~WGjFd5&G+s)T;<rZ9b-rIkAeOi!B?4jgExTs
zh;9%*{`{`fYp3qmUSHn2uAyOFYq@l)|Bl0lPY)dpZkd?a=mT}Ag}sJakQoDGV|81@
zRxh68?B3*G{{7z}kWU>ydG*=ja>-wCu4j}SXAdO*_~Rd=)IG<~rFz?s-s0x!g}s$K
z8}&xR2q<9(Hr};i_RiU%-Ie2x)|#>HTQ(Q_P5XcCxlHbI#653w9^Sd@a8AzQW65v3
z8w3@QS2Dd}YZx_o@!$CJkItO=k#y=We>u0r3X|k-K+o_NY210|V~Y|r^uP<xzrj8X
zyilXDd;EczjRqiU4x5V&h98ga_UtNZas;cF>$aNW@lkhWa}RrWa=h!(1oe)1z8~L(
zosIco4qL)ni&ty3jxXyz`^e}2>*04|K$38iC*MpSW0qYXkiWygAgl-e9q@LUNucHR
z<Ea|okH3OnRG-ae54W_$Ea(+Yl$h6O^kTI*C98G(;k`LU2rx3|?0MIX#%!%Fx^?Z=
zh)$PfM4SI!o^U!7<;-(#>9xwqDc1vk`qKlhsmaRMQf<&ov4}S8Va!6}n>OIZRJV@b
z^WJWqF8>t$(C4ADPu>~1uKj0V<iPDM$J>97xkhvN8jNbeidjtS#Sjq7#6xqL&CK1f
zX3Y(A;@LMb(T9Jg>H8M;-90&Zc46VZ>1&sE?mT#K=guXtlJm2P^Ao!jWd$0%UaPX^
z{$u#a;Na50+Tml}9sSa&z?R9eosIv-rY{ZGPz?>|N2PaxvRv$zG`>tqFt*BS<LjCa
zG*+5{&B%nY(mi*2FFhgXJ-p36S#9;@mlnnMAGwrhy!1%&-!B=nJ$<Vn{^V0-9;Z>a
zFFQ}B919<Jv~eF>q1;FUh-eprWBk>D%lo^cXC6PXcC5X#vmJxro0}NkYES;<)mPc}
z=B6eP%`{$cHwS${hp=W+Gcw{21R5l@xB!Rkb|Icvard>M_1>9aLw&e*gS*2Y-`n4M
zxModdcfeoYR<k}n*nZH|)NqN@@2PNA6jkLn4mP&TMe1s{I?7z-PN&&ZvVNdt3;aTe
zf7T$1^_0d)J@H1}R<HS`53@giSSmbz{2apSnPvnOPND?lEhyxRCB16c#I-k`X^+J^
zZa--{`xu)~E^i+j+s+OoA9?JohEeV;#Jrxut#PEB$e7{UPksKui2{3pF25vy{OpUE
zci)KaZfV&aWlemY=0iwV;(P8D-%GC%tye1~zfpVBmG{&e@(sEiOU~elK|FQFJY)TB
zOCRgb%G2u%d0CyP|LfsBk;tAfYfgT>`O;`~Plz>Rk_Y|cRaN8u<oD1|NI~qPP7z1K
z7Ht@;=F2fg%UsqnMq}=??|rN-*Pf@#wdO?L@#IGy>oM8$b-A|OPQ;LPUTurGToK#V
z$xkMqzo9hjbcRcB02gp;0WpQAu!1z<sH$e`3!i_eJ-;+hmtUS2zyI^UV2_>k4fy>7
zzO%_KzW_~D7=SnNP29Z?N0}SL!`#*?R+;<@`*`v{n0F(4?)b*!2&9Rmsex?!HhUBF
zd%1MO?1^zbV+?SuV>M%b8VoULoG8~lpX#4_+p^@Xc6C=p8~3$u+kGrY=Nig#_$(70
zF4Jt+#9V<pP-5LtQFZY0<WIxp-plQl*__&n67uTwU{=_q7vNJ6(jK}Oy3%UoO{GPH
z*F!3m4Y>O%bf(2+T}8jAW3I7d+nm2;rmng;XmVFZr5D~eR$7s`Y;41oUB?E;Zmj=G
zQ9kt@{docXDP5^epgI-JX<&|lLp{S+^fwHZ4|pr1U0qEj4VHG_jH&a;^tz=^r+r(+
zSWox3wP1TCl(3`;pw>4*w?$K#;u2TM0TPM|e>mUJ$ZxkCif@Zlw>k{VU{2|vR1zq%
z)E0YN8clD%a_x~sdCAz5=lYsUy~m0jpt^5pgmwW$`Hw(($qG%#C6Sv%5lJF#81{w7
zz+6L@_xA0N4{dFP7vZ}(gU!*FX8-*C9}d)cT1<(h>9tE;UHkeizU-E;dt<4SwO2<Q
zX<fp*!<M8k(@$Etu@%ySl(~6RZ*SF9pDR*WmRD*jb8g(oP8`seMQ0)=!+yQq?RPFF
zPm(?4IbSasL2)DYCZn7$uvKDFE<@!X;F29x%Jz{bz{dcF2WbIqhU~S-@(;p{iu|^H
zzIDh_R#{S7-98_!b3Z$2%#O^(DqKaL>ZvU|`j3xR1OgTKR~_mO_`(jisjTzm($>0;
zpe`@yDhn0riu!9iCWEGZxt`*-(W;yRo24k;7hc=IzFboss163JYm&=V4tt?iTjD53
zIu54kp@HUelccjeCo%oaoZ&`u&$6+6O=#`Naz$l%umsa@qoa1;*5pgf-4b-zlh43)
zja{2Y^KZz<?q{3u$*3R4?hQC{x^`%O$nkH>_$mApZ936r$~uUJNgo)kJ$LBd@vf&o
z@y^3t(hJFhpMNR&gU<|IMddL^iclUh0hWj&RcT^;X)L~M&ej_ZMJAtV^BT!}?z{FP
z#t!I>q8)7oMv5e(IZP6Y49e63=RGvaJw-=pMPowsSlpw{Q)|#)UlTnV+3Ve|`r4qU
zIo0i^<TKQJ{7CT+Z3w+Aw~@&|R9iW&Fp$08<*ZLt#Q7)I0H0BR+iI|N9qR8t)YWyc
zzyDxYeM3WiLw&uxdOMfaO&{qzI^NwgMvIt+wdedWPB-4f`gMYH3I}KwdNJkfRzClP
z*rD!Mj084a+Oe&rvZGW#387P4QyhF=dJmTDEsGnDb(J|L?_yOcp@aGZ=ZE<%5H26|
z(HO5bwY0*quo-imR)i2jY_Gx5>k&dCK@#q#ihy|jp0N@a7ZMef&FAJ=Ra!#u*@9a#
zZ(?7RIf`OiAcn1M%x^8vDamsbmUkAj*Jne`di}LJU3Dn=9~dDkX3snEefWhl>{!_S
z!fH_V7-TcRek?Y;+`Px%>*;d2ofQqG&UkR|hPGK(Z)v2ot<7KAS$(O=@7m%hvs=tI
zOOC0kt$JW4P%>9+3zRtWbG>a1eOqaco6+h)X^E^JvIJnt$6_$Uv1v$cWN^y5WwL+F
zeAUsT-U^c=$8L$47G}PD!0@)WEq<}aXVC34V1Y1A2Wt8wP6jc<RI?v;H5bC)!QymQ
zmiukX$8xo<QPaMyERy_Tw7Rr{4JQi+e08XUDmsrkgl&<bu0Q<lGu>nbWLt82ZhM5i
z{!8C@ATaLxWwH?8g0z%g$G3!Kk^WZtlQymG&m2G9WXQqGIr6e&*S2OCz@3n7Y`ppC
z`|4p~=#06>I`;a{e8YbKsP||5=dkZ*$-*yq2ZO;u?-$S->=^b2TH`iFAj76G+S9G%
z-+RYHbvZV?|D!0&bMKw^J=A2fn{?U5*#Rc~ddgaB#s8<y|7O}+hflU?;-Be!0=JY9
zk(D|Av6#xX$d``U+y$k^qAXu9$N1?pL%G;NWSO%&ZhN1-b@H<Y-C?G$swibYdBrp6
z^A34mN#-Utzzk(%O|y@nc5Zc8$SBl?t^RL(j2-^QcPClH;zaVBizEyAUR-;P<j1-p
z8QH-gelLP|sqj9fe6I>$ui*VEd|1J!RCuF;532Af1z)4W({!#^;pukgQuui%`52UX
z7E(CoPM`J)1)o;o*DCm3tKiEj{BEWE-75TZ3Vu%tCwjCgz6JE0Z{W9@u76X$cVFsz
zoZdA4fC~SbQvMw({3{Cn&J@nuPw_RN=X_1IPd=IRZrnm6D-}+Uv`@wY8Nv6lWE;Xi
zli~0%r2RB+HuaYI3xn{~oQ21xy4hZsYc+Z-9g5%P+!M|9uCPD*fd^<4uWNN$EZO?e
z0*DSRZ<)M7ML3;;txQr0R<Aw7KGa^|B4Ra-ebHb`u(UA8LJiGd;4=DQbA7{DMZMc2
zw<J}sa3RqgN1yxn+#lm}pU-jd0(p3~4p3yknVE(eA<wYqgwgJmoh$CB*T@=cPUwmQ
z$q%p=_VYi#{4&!e_de6lc5P+0rupP$vfJhEyJ;=)`n1<!OeRD-h@O!Yyjj5q35O*I
zYgt;4_UWXrmUayg(tp*vC3dSs-LBEm|A3P#(mpuczc@5M5RJBk2d6uFx;v+@x#p40
z26juuK)iZ1UzayEFfdokZmaWERVIg8B9X@M4$#VX^c~t+&_vNIM*Re<BYB`1Ki^N@
zHU&S%;v8={Zzk^;a5@z=>JQ;oDV675GtOIqcd^+FoYsNBdsR5CV}Z}9aH2=x6EaSQ
z#F&=K!!Lt&=NKG3GW}zmet}P<aLj*f-<9$UtWA_hzcTS-GEQS~3CbIA>sGFpy~g`v
z;O%uV_#8!hD!faDQ$I!dUKLJs3w%z6lbjUzlnN&~DeyrRPU~6VYg9P#OW+eJ{JfL=
zgbKbu=g|uNBo9UT=~Q{l{MR^t1>T>=C9js`q`>czaYzl6PvgrO<y~5mlcN0HX&mKA
zP73^<6i#$<IY~IlN${D=DRF*2jy0>p+JNpClA<N%&hUGB^I<7rb4CKhz#eGobNI~3
z@1&fedV8QGB{Co&oS{IDyii$LwN;Tx@DrYQbFXSfE8fgjG9AALR^8NFQe}QF)ymOT
zTPd$8mK!0?QyY9n9pXLYGY6{<GaLA8@MRPTk6+rW%b>;sftX$K?j|2(4IgcO01K0Q
zd8Kd8&tKNNZ>>D8zu@ZtULn4Y(HG#fF8g__IFA6{#SUcPG+zbYtHNoX34DzTr+Fsu
z2?aMx@E<Gq0R^XaY2J(Sb1IzXx4;Kgc)EN);jn9n{<mpEh_9gWSG@5N`lOi5q&w`w
z5|?Mg3YT?$sfmsCy8<w+^0I6dMW%~8uq8>KrE6c8r9XhnZ+45bV4Jxl)1NK)EN$TP
z6_ytG*^8(}zOEo|;O9oa1iql)^v=pOeuQw1MAoJB0nBTQ@JEs_fP2SDsB;gw8ERn1
z@G$)3gM(*&^rIiKf8A`D!vA(8edI7_ca1`$yo$Ph%11YcQ`4cjms11%#s)I*E`cLb
zUBh}g^`d;QjDHLGJRdEA_sjTCfRAfQN(p>QuAc#K)Y2#ld{D;wK*fLaSt#%cxgOCj
zjjq7w<noZ=nm=;uOyJWpK5*Wtd6jcb;0uIfHq>AZ>A^MVY1)IpZh!*|M-yoo@Q$Xw
zh@)mX=qWA8wHV!&IM#h#znRRC!lu&nYNVP3hi>JZOK}MIuvlD6^Ix>QMy3d-5R#d5
z4n9Xd?tA2MH`56N%42T>`~Y$=q~=2=zM$a!s`AHDINJR&AF(`{p8N5Wd)#pv@dIc*
z&;#!Qq>?reHX7+r;(Eh2+)bsE36}i#f%~|OG1J)vs1dasNJ&}L{<}1;b2A;{%t<CW
zRpl4t@>;_A_)<Lq{h)@ZA?sDvg6I2H-#bP)ws!x8$A4jb@U3vv7=RUHj@gY?w{?A6
zXy5Wfp>HthTb{WNYzW_+oxAM*<FZDQ-p_lEofq2ZLPU2OCy68Qi4=~Nh7%YCUqIw{
zs{9zQ2mTpe&-6v{4#XFy%hQ|`<>ywxDPozIhvg$I2T}e2BA3(k5S;>_P|Bw)5P>hG
z$}1L#z>mo|KeOTV<D?7pcQ8Z=%M$#W47^K)lLQy#dsR5~OW^$~oYu0yr&KttWq}W>
z@GBL3Mun&ApHpxrojEDx7Ze<4QGAVy`lnSmSr7uhYZZK1g_C6=%HOTR$+8gmJqiwb
z_=+W*EDP|H&*4nI(n=TKTf_gZ;~M80=wtGNxyUb{p?A_wa@m=rl{NH5&(YQkWqtAE
zG-+PwZdd@p^WT-uNY6qOR3ge=V-MgAfOcW<-eUDA-dhWloQ2xu?y`W^wlp?S;l^Ru
z?vdUxc;oSDeyG@J_(4^qZ{n`LiR|xss@rF3FCV~hSado*A6)3cd0rFqm4~d%>^YeH
z($dcQs^ss>NzOE24-~@6EkYI@jXR}j(|aHvc16Mpvausu&&<r;vx7bLKi~KUW6AY)
zd)sVt^X$;+!-wza=Z48q_K<IGa&k)mH8(<X-luIqz15k#g#QzV-gI~dSC`yL)yd?n
zIFlStRJd{s2TVonZ8eSPqWX-|l~q|;?8&Vwj5u4m3Tm%kr#i93>JhDzAK^J!Du{i_
zO1wkfX9%3^V^Mxuh10ATct0EDtFsZ(2)$EqKI@5}uv_T_){T1~vgI06P6v6HGqqNx
zGoI~g>hn3qm%7C<=hF6|4>oKOw!QJ7+<E9UPq#ID=B~Ghlg?Wot1w0FvT|e7%84zP
z9-xCuj~C?ri`hSpL2u%knqqxv-`Al?vvs^YPM^6HZOOo?{{o+5nK(&5fls7xNK2fz
zD)<35B<cabGVz5>oNFAa2O5X!;j1<Ey?)jAj>+HSXR(}KI2Sm*Sh480z)3m^yq9I-
z)DMBrDY%)=bQSy%MdI>$)c64f#~Co^pQvX-smH0RXF){tYNoIX?#Fz<z6tUq^URnZ
z_;F9YI2VxD0{eRReEE1uy{*#Uzb@xMUZnc^Gabiw?7Ysle{^%>CR1JcrV>lA(itw8
zIbpAQFnKk*Z)CCWlIg4L>qn!rA)=jZObfT_5Xl4H%rVfa;523epGe^tGYcOxfgfTR
z3o5??KcJL%s>&}Yc)toiMmVfDP7h=Z<Sjq_B1eZTVazXGF<(Mw*jHS^a<}LoJAVAJ
z9m(ILZGMu?$JfUD&>`DPEAcKBPU9}h_o{FjcY*h-aMFqbpHktZ6$L)1!bxig9Jxq1
zk5<yNUWJnu73F7Cc$%I$75;vu{B0`yHwu1}3jc|M-=V_O<!@1NCq)J*<x_U4pr7QP
zpmUnaW6TJDMcYfKq6`r?IImI8z3?G{c!!h>mnKhMBL@}?7W*BL*}0ZsX(su-$IfO(
z8L(WJQ<m7By)?T-3nZa`#z#1FBwyhpFYwHfe}&r<0_T(}^$<q|o*rQ*^+3USk9p7B
zJVv5Qk<ZY&Fj%=efqyU<Gi5Z}1i5TqI4nXZHg2n`Oo?TPV{dn{>Fn9eSc<pbUXdG8
zd<>jEw8#7ND^)*X-D)d24vB+R+QIJOGioK?rNU{3i}JlHoMy7Xrvxq{8F>Bhaq;>M
zRR0Bd7t6${eo?+xg;V_kpHkr@O$0uX!XfDqL80Ia6gjE1OEXQBpH7vBw6bz(CGdWM
zi+Bo7KTb}#gvU?t6XV9-<mClE$1-uEN8l4F9D5qXWhnRpB6fK_*vn+%#|Vc8$CEsQ
z*nPkv;_@oxlU2p+(T08Z*x1U*y%Q%`eXpLCsN(k?9zwmOdE0rtSZQ?D4L1h2D-lH%
zO+_v)Zys74Kp55L>0_PoY3bBk0-GntcQ#!8`laD&)Dgz2JOXWErxR7^6CC`zGvh{5
zc4`cf3vBv^`?c&T<J3^YP-&n4vay-Bj*Oh#*fy4v{H0;Y^u9++9CPb@C6{;`#?Br(
zc<=bJHEX9wu|CGp#(uOR$BMvEgPV<eo;?OSt`1wdzM`hsgZ4;4Wma)sv8Ol@a}7I|
zZ})Eubzc&{#FU+LtxoUWxc;)OHNj+?bZRhI({uW&r=KJak0TZ=ADqz2r`Bfd=~J4K
z7NWs0zI@zOU08-VI;Z`Ndz^OhAI&nrI}@mut~qyO%jOu3AdjNawqs;r%3_AZWj(YK
zPh{e_A($%Pqryp+ihBA~_?HxXQiYSO7Uc(2_|Fx5BooKIlT`V2nK*8ur0`h<cT#ka
zf-f-mU6lSh6nw2x{tc;GTdm-C3Y;>qvu|hMr!&eI!Rk-7dnS#e{GfuLRdCRw@GYR{
zd;`DLbS)|0yI1)hwV%fCSK*`^1^*sY;R6c(kb+bDDZU2uoUf_&F`sJAH?aT0341+7
zg78&=h)jwPg4W{BqRb^?Rk@9LgaDWJ>|||MiQ8mCSXE7ZUzIxAswv>06DXG@{*(y0
z`c^}|v%#GeE%yfdt0z^#S9#6$;-V~FZ$S}jRf4c&Dk<iRQ;8YRy;$Ohnm&H2u2Mm1
zD*srQ@K~gw3xmPTm8Se6u9!fiOCi$RT6jTlSWdawTvvP{jeLeRV8pPZxGXg4`O3jM
zrQOkggZ2hZJ4Nh(`V06f;#&9)hlfpZ&pd^B7z|Ok=@BH!*&Gv*RG+Qyt$OQe$y4p@
zu8K77ZfO{_RSwnl&ekEW>c?5V_2r?mkbi4kY<*>9V`*b?u9l4?T(7;ms@fAW5yv+c
zRElu7ptmZ}eW1VCogE1k7j7$c)_Q6v_|4_D^6<CM)VDU%+TlImJri>-!5-jiisSGr
z`Ei4TWXJ&FIJG;69#hO*xx9PjF>|uF76*hYW9Mjlo*6yY-@p9ilbI28HFdTcs~kgD
zv{}DqbVu`;!`ZgGZ|qR~SXXDL&1!!Dp>&{BMC&1%iS!RB8fUvXr9JQ;fg%Mz#-IsN
zzUsW0V()-MC!qYnl>Wr(e}zj&fhQRB4ln-(`zl|}0`F1bB#i_<n}NSTQB*QMPB`WS
zqVuHdwaCr}?*(=@Vn%b{{Kez*7`ZQ357J|C@@lRcs>hxeo=y=HNYp?-5qC7-<h=@T
zEl=DL_yR*O(Axml@@f1S;aH7CeRpbn<@qcVkEnO@$y=f9NQltvRf33q+qoqqM;YFI
z_i}&#)!8~npAtu8itig5+8eL1uNfH{9qrMdd%4cxLb%}r=KQu;duNLKKjNcO$?1>N
zT~K*cGVw$v&PPj>?@{42S^}R{;iR(!KB>Y<X9;{jg_CR*_=pN8J_~$Y!JQN@so)C=
zjyOu3rl-oU&BP_rt)ia3G%mThZW8#N0>_&}sUFg00zaKmK8NcpfuBj^C{H>|;Aa&a
zbSiu!odrH)zHoXm{#DQ!6!%$&Th1vzjiNAUBBUi*%$|AJm<k15sO#`qvh(y8i3qK0
zG&_pmxp7+BzsW;Gp)GuEg%VpCA?mF2;-HZ03Q0quqG`ISk$ECTSIR4>qDj3;Nl|61
zOH`F?IJ7cGwJi~Jr<B9-6iJ@A#r(DfRmf^pes)8NtQj~(d}e}ETyl1D4)U3aQ+ggb
zt38Na2YE{aoLbTfE19Q6&jwOH)4vu)+rxq%Y`(K&wP4!cZQXih$KFv|G1%>}CGAZZ
zc{itPLh~C<6L20M%U75<QBE-U+fz875d!Z~;j{t-KBB^D1qghcaP*tkFa1s<;&10t
z+VKA*0@ot+D$ca&Wb=O$k9)~f=bri8_Iju1|0gn6`hYR$3pZ=y+M=TTBCWzbk~e}I
zvnno;ToL$y3a521@ID#uA>pfC1P;F()?+W?Flf|zuxmsdu!1izc*Hs0ufmThxLt)G
zAsi=B=cs-z*TvqAOY)SyhPRC_h|xZ#hihn6Y_Y7CH<eO=@tePiQhf1`K?8rYgRqJ=
zahl^IzL+c_Ho{kiz!P%Z@yoz_Xr{^W$UQRt67XS?g)-hJ<F5ekk|48Xd{V~$0G!Ue
zQuu(XevE}&epcWlF*L7|43_b=G9JUJDvyt*y)(%`!ojBM^9`Cm;;ybeeGB2jgH<gz
zQ6Uhq-&?Lr*j%RS<zQv0Ioq7=w8Rml+~mVQNVtjyPY!!MSy<2rk2IHQ+T2=?r>4f^
zsil!bYl2(I`a@Ktxb-9SGECOJO!Ww-j>p|<zKzI6E#EC85S%K<XdtSa^>OZgo7dB$
zIVH~&vxKN_%pgC<4=`9I^32M_7Zki-RsI;^*#FWDb)sG93%*NNqQjT9_rL4C&%N_-
zoW1^~FCjSmh2bNj{x?{M_Gz>W8Hj#$Azv8YdBCH_=U^Z4_db$!l=3lA$clxGq0HcM
zC%1l75#&-6OrBH=pU0e*TR;}n@9<OH5G+5$r7JBT&^(&zu?k-hINsarWPa^7xjdcj
z5~VaB#P<qdE5$PEJ4QIx6y5{J_Mm;cu=2zKuaypXl@OdCkHr(shn7d0uFQyrKknPy
z!J@C#Z0`PYDkz@D1IA+om(R3fX^-&<K{esr&J_4~3P10pD0)yW@CEkaRC!1e+WpJ(
z36g|!i%Xa^9?!)2Zd;U}RpBJ51m2gz;r*r?Jt_QvY*Etu&~Q3M`EjK@Bv?lIlm$w5
zdnV2;Q1Aig8_0Y8F%90jN_@~%r|oUY$oo~p`4e9S&#>nuBiC!9e1<&_ocbm3zRY?^
z+Q|5%3MWY}$`54X+B^l{kco4Cit_3Gf|G6&DCHM2%X14+lwX^H*K&(b;CBj~@4$>1
z`00%D#oQ7U<<Df`Ms5iT{H%h59)&+-3DW+BEJ0;Iguj#i7vCG<f9LiM#^K;UcpiMQ
z8xp%^n?_u7T5(Z={ikfwXkk(P9F*i@F1To}TZ-*5QdZhk&V_M1jJ)th+lP#I+dK^|
z<FUq47j9<^b=L7u2fIc)Zme(7>dxAkCRp}y%UJTsn)b@s7TmQ8wA8k{XIpS%BRD#i
zDE8!k97i=o!5i8lSj9eMGHg{@bbn=gpLu%glP^l;cJ1xz-q#hKDtAuT_s-F_{zqb4
zANJ4J)vtHCCL`4i4b{Q=dS(>cdcmEB>gop7e!ii)wobWK@=4mwWBGwj<YIsCKYX?<
zk4~t;>CZOeoMJHK30`oMr8p~CV|L~=7KF<?MhZOJ6RLYHSh>7)uJ><}B^XY)E`rBd
zCQf=;lwX^Pb9+GGeVX6P^*E__O8EsU&wJg#@9F$6&X%3<8<pS|skpqeV~yX5?SO@L
zD3$Ux9%%5&xFx&yzzC)X=IE~D6$Q1nl$WSex!1${2|9THZ<G5kRuaGO!zCl4nX$qY
z$p|I#JeO!((n0h8iTBe6{e_z~Sa||JpaCCHKO`)&sgbQI@L9P$;dk)*1wJn05$Ltd
zdKTn*I8OExuP2}%pz>Vb@piD+>{os7nEXAuvGZO|FQOwzLun9i2f7G<7ndXg@1dMd
z3QqJ2d{)8Dbn{2S4{E+ImsjHl6dX5&c>hE_<4QeFRXqz-o-7rtg00dQ<sB?M=y23W
zBMsVUgrCnrbfk}$VZPBW)~SUVXJC)l4ONAk8%isxB9SU<h1Kn9Xt*o9Fg38bzQkEV
zV9i=niFH?1nbqzp^MryGHU8?dia=j`vWES<=aTlOvD&JT&toYrEAz!0>etlK{G>Za
zm%-w(lV6wouot^^#G}|Qa`lMYKP&GaaT5p}=C_%+<<cl-mgXtVDUO@zmJ>KE@PjhP
z%$Ql3_yGlXs_+E`?`J16>NzHGybTPusQ6ivsDF~$1?N+@tHc=z?`K9|FT7>dFYZ~X
zZdw&@(QV+Dt=8`-lCN8#NBp)GpL=A@)0qamfEU3NnK+-5qI{1EC+#orJ{3;dU*MA}
zoYsoK2UIv|M}d!I;`~fQ;Oo-3l+CRLfp19T?2mj+3w$;c*S0D3pHktMEBK8ne6NDv
zuENvhZ&q+8-Ck45r?kG{Gx@6oJ!`2vMiw~U$@CH0wW@4(^_jQq8dR>nHCTL(9Q}S%
zQD@DCm*7}_z%T2Q&f)xICtZmXBPwm<QdC41C1kC@DagQ6T14QaMMU|O77-NFu2SHA
ztVo_QPU?w*FEFxisD}-b3HzHs%D<$Xm85ql*s7?Gz~5b$u)Fi}aJ?_A-1ch@$SNex
z4?`-mhkSMFyMO7OpxiFMM+hp!8BNUN!TEry(F>10SV3)<$HFA0v<n71{HDTuej)<}
zhSqV)p>Da?<}(-hEwc6!+-_ih<Xrs}UstL1122;FI$v)gdA;4hxwjHeAfGVR!*Rae
zMEM>SPU}kGlQPb4|MB`Ga{Y)SMm;O>1m2OS;JkiOzDI>q{Q{p<;pC+f__%`mr6NA>
z1-`&Ot;tf_rFk##wMu#1Qslb@f%nNc_R{Ploc^fbn{1<SoUdnr&#G{uN8sZr96B2J
z6cv0y^E=*OKXh;=evEMF5<0_8N<YOZJS1;S#AZYy0e(`3%W5e{qaF4yna6Z|oDQ1&
zU}tqrl-Zg~Yg>0D_I9^#ja0N+OXIiumx}8h-QGd>9sXnSv9^Vu#uKCCCR?tfs6F}Z
z`2LaMOIj@U@z$Xp%JZ<XsKzne)7kOp;i+qeL6NX-C>sGz5OAA0byxkOx0#o9rQM$S
z{kY6r6)V*#mzlLko*J^3^4rV~+i2!(X42*zv`>_8yeQ}4vcC%F?#ktE(%_TI`8dBA
zPbm-hHSfyt7qble>7bl>#0~k>mG7^&Y>Htp`K|a@u>K3Vgj3q#=k8Um>Vi_-$E~n0
zXH@i?q=mkV*%O2B<#*D{@I-J=lEz0TwBSuUM(aO8JI`l9t2<3C5Au{R>S&cX0%l#f
z>{za@VzRk==xt}Tb&ZuBRgwDL*G_hn+Z?r4)8Zntb-IJ&@u^*ASHMxcquj@=xpftG
zTbTpxnINU@Xs?3yNobFs&Jm|PB7sJVRp1ogoye&z23`G5T>Q?<(dzX@rb^pvnYLoA
zX49Vd_PIdIEL}G@IbF?ci@iuXpv&ql_w$ib@?4}cX?!`g?-0$(;d|V#Xym_;jU~4$
zp9&7f(Qa_lD5ZBOEAa(%60&P-+AET4h?BwY2z#S_dmPywa%w|;4(APrV2B^<898CK
ze*!0i@(gU@StMX?+07ZQc99B;PFv+m^++lu$CP-iW}B@iv}dwyPfv4W=j4G+!C8;t
za9vAVyfk;V+PkT=<9X@Up+h}^sYLr)vo2?DbjM<eYZ{X?+7xQpvAd@BRPuXn%1~W(
z{yCntgmT?$d>*5)H;Lm);Bxvpj-Ac{zzDAg2fu8nKIHUQxPLj7>&Pp2iyR=`MLu&|
zzj4jFw*L8b!>u{y4@7OH=E^_1ov{-4rdFO2WUe58s^4WBAB^{Gswjrp&(0@t>;E;(
zU+jsDtLA=@9=-pe`fMD-XIZlA@4ff&ceH1laSPm>)BZeO7}m8|+HAKsl`SU!DS7XG
zWnqUSRDK_EIDj=c4-UJihnQFX6-fo?WK;2ZvCM-(sW3L|Wu@KTbQY3gdse=&G|!j(
zm2yD%V$DEsPEIv|d?e4FtM_?y+WiJ()K8}z;B=4`@?}UG?4&YJR>hd(&XX|i>3otW
ziQ#e)?l|Rqm3h{5l~m@H=H!$+AR8{04rRJ&s!^}sul4%Q{Z^e8g^%?c$UH9RMF9nn
z6SRmCZIp4ugS;rb;aBT+`kPwXL)|&a?=pSlEkhl<6WxdJ{IH>+s;<%GEZyi1w`BV)
z{rkGQmex)$C0Ki7Bh-U9g$?m_468utr=4;)C~T%#jc#H+WgNq9IRw!<+=fM!Pm9@X
zs<hU}@^y|Ot-@<@l-${ze2hCEby=Ru(qKCG3#1wCCw~o{WYGQ-mtq)w?LPQ9Lz+Ye
zH8wj&-Ria)d2$BKXC+oih~@z9B5}JV7D^NNi@Ck6n?n9(B%@*bukGk@bi5_rz0uuk
zZ+7`Z)!t&8x#?{$U|bwsx<F-7RZ(SQt)REUKKA5SCq9$Ywzhs`cQoYMT<mTQ)ivvl
zLtjdsY<5%~tN)6*AR~7TjgdoB$?4@W85fTSLyLbJ+}5OLtU4>+Sl&|FT)nNKcW-CU
zLQhr1_~D?b3o#T`+0l@>a9f!@ab)e(k*>oHp;|sl<nQ<i+NmL%0i)y(__(mc!p9o7
z$1+Vtvgo3zuznso7L7!r=SGk*hgFr2l}FL?eD#{W<xenHUXqWPn!;*VZEv?EwePt<
ztKMB5F?H|lxT2HO(c9Kn;wg&N8g+v?1+kv&vb^$w!OQzUR9Q9LihPk6KDxERJ^|X`
zi{<MTSHnaq9FT@(!q-W07&|gmBBH$3J>BgMHG$Tx(V3AJM}3*gJJ7#A;EM+Bk+Sys
zX_L1<6l%}a<;9($gtLBIetwy~Zil_J)LBrtwZe*a-Dvk|(XLn>v^?l=Ns+q-2*%Vo
zvYe{$d(AUV?PXD0b;K7~*Eis<ENgJIOl*$KMguhs?TH;GYsJ>W0%vKdeMg<WEI)r+
zy)zMV#*x9QJrwHq(u$$6$U(c5yFb<AmCeWwxilpZ46J_S*zoAF0ff#`TV0p5d1~F>
z24|<Iv^kzIwJpxfEw!s!JDj3pcw%f2a`(5;{S%P8uz)jqOxs@hj15X}M6n-cXP4Kn
zPumb*+oJ#MXLtNFnGv+=qmXX*LbkOE?JZ&qW0**oJ}CiXmjz8~6cHDw&gY^D?yhb2
z4mo4Z4C}~?$c)bI5r2!rJ=SgW<l)Ar$!0mZqr`7P7ARj!^H<8tw_A$B{)DYOacF4l
zG9-kmt6tNT4GE~N@+O=1T*fA>r5{3Os6=O<pps{oN$CPeKpNwfRB~Ch8f8sV24$V)
zy4)-N8bM{QhGd1B49ql)INp2uCdIYLGn~d-=8Cuh8N(=qtx&U-JxfC)M|u(ymA$s0
zr=rE(6?PS`|E6oFsrB-?^+zz+bA`o~y^+DO{0%$bD93>p*;4g9H%kfGbZCL%(p1Sw
zc-R4-QzVCJE@cmHaJt@^k-6pmO6R(vLW@UVSYUa1vdcHn!tVZtD~iS7`bKhJtl!r)
zxuwJsNVprVmJ+@P9mYF1c}^K6Z;x_3h7asgV|i+;S#4W>{+@X!4rN7N8HbY%pPQq#
z5BZIg7}C}_sms)iMx!vpGSWz8+FtsMj8Yjk*IIt?`vYd?C%>QNEs#x)7KAk*&wywu
zHx-gp2?@y6vC`<p%<~JIPp=JDBpSSclpo4gH}%uN_0(7Ro(Yyan;<`-L_2zlfqDi%
z8A)e03$9`($@6W}B@66RBE!SXJ3PF|auyepe^?a#LPjf;ED(B5VZGh3GNTonk@ctE
zh_lyUoiAYz@s?qi@Ro7j4*U(w(dWep<r>1T#0ljhqUipD#@-D)i(;}ZVSe~-Ew<oF
z8BH^q#xSVp=JQRC(qiYBX=)_iV5u-IFD<d-tgO=MOumhk4oB)ca&ulzetKu}XEf@N
zL&!rX?_V<f2O$0z-6PIrOG#E9*<CM2W+Kw(&b7%Vmgsi}-q!j8d3UJYzpm7A;(X|2
zXJ2W@u6WO8EU2(65U%wVTg^>3{gd<plyr7GSJKUuo2`{;CC%Hx<1F~A=k1`Sp5@Qt
z`1<4`=<mWAOF91LR`H&$%#z7NKe;tQc80<5ePjZ2x%>^wP8ZUFk#A|JInryXOs83D
zVw03@iGCC!QCMBj0|x}PGMs89wZc#x@jauVRD;qjMo(WIuQ#M>@cDbTdi+#nYVoC8
z!xH3U!84q}Uk%BjS|91mX6dbKD)$*yh_qDZ&o9j?$SN&TGM&*THX{X^Yb0|ko6dTc
znGlU{YT5Z8ruWVnx+%R0O$!1vU0+^>mh+7zmei(MB$smyi}pM|_GfjLw5KqWL~o^?
zki-}{E{W4}AY*UNbp)oORNOV<Qt!<%G5LmoCMFB0cjuqYoTV5*%6nz!v&Rn4Mk*65
z{2wA0Y|l+s<W}Ha23fb<bTqdtSEtWnuYc3lVXL3_-I6R!eFDvPtjrIBW~{#q&d8Q4
zmtM3<GkiQaTh#{VNMm<LgTqraSg|hBbD+2Pkg2S4dx4b>fAR{q*_|Cr>v0%HVwdj4
zSEF7p`DbLULDrU>z*3AfloaePVGRnS1apuSNX4do(WtH7US3pF5OMhD!l8}6(r`hw
zrQA_ti$?cvtZ-JAl~=k<+s1>t8;Y%_y}1S6x;k$`?p~9%xM6p2eA{84vpnH&B+8x8
zV*KP%&S6(fJ3~G`=?$_$>oJD?+EC1EW43O}Ue}F7#{L7{(?wq_T02wll>$?IX~WE7
zJia)yVJXfY*s&w|^1glOC)rz{L_bU98+?j&lDZ-bDMFi*n3=jtowG4-_mR=jBi$9v
zK34wKr=R|A^822MjZDDuaAjrK)Veq~yVS1B+Bdsn*IuK3$-s&X6^TeoS1H;HqP@?d
zy<+lgV8mo2NbIELjS!LoqaE4a<c+?%Y47Nn!;8y9JGRtK7VC<KJsmf?OFaJVmkh73
zG9A2b^t!3Z>(?AUQ4@*O9Nx8icWYguXM9U&vi7*(-7wy)^a5@LmQy5<J}NG(l3geE
zJVvV);b?FP>v7&}ZfRi+16QqCbJf6&gICgzKXpYSU2K0M8cjU^L0!k;sj0)A+RuMp
z+ex1~bRT3N92nKID(&b1ekOmQ#Vr%k8QhvI%AA*q@N2i0!BJ3BSkYMwp{FYwGZ}Q(
zYW3A&=1LYKzaAEdr~y>}qc!~MT%S@y2i}kMx?)*HVcw9~l?}a2t;lw^^_GJUe+FR|
zd4K<6!+68xq2@G&hRn4LZAIAwVWVI)GaO@B8+>u3H@c*}Adytr1T%FR`$I-%!S7_W
zfd$E~L>p$37m7(D=A*f@X7jMGwa8|5*vvi$YiivZ%Q9ST&{-R+k$xL9j;sqkxR6gb
z0HGD-&{rhAOJzv*dV5}K+ZwC)Uj68%NHE|Z53<*t!-;Tz@n;@=l<E8x9hvnQsh*g~
z#BQ~d0Rj_Q-Vwez?hgdpURsW9dh}{<eQfK2&I;eP2iWV6Jn~P){o%y03lhr;j#0kE
z7MWvFF&wZRR?V15gC>k~2;OHq2P<^FGj5;j;^`B2nW`Xw9Po0M=KEfZZECqw@)Z4*
zY>GNV6MQs#_1Tzn6nnM?_8`uRGNh@R=T^GFly;<griaRX*p1|8dCSu_pCrXLVH~)l
z_S`wyGfO+H!>AnsEu(h6!%~f^)yhv8)!VJic2?}XUQW05J+TL)6U+`e2_+pv(wmaf
ziu{o2`FP<W?TZUD?0SA?nY>=f5J~609eCsYmvPFDF+*)BJ3wAf$}zAk%jB8Q`NVg0
zl#`NefkV3#X%C%touj{QYM4$;PgAF$tYzk%DEC`Wm#2(^P`P{G*3S?%=5+r!FIm)H
z{x45Q;Svyf>L}Nx@R3kYQyW$YH{v3<wF1J~6!kJ3Ghyd?7JFBIj@Ql;Tb@Nu%f8Kq
zJMq6A=W%-Xuaw+!maHrfq_q{blhhPD*VI-_5zyp3^2+;vRz9}BwZ3fnJLTo|jg9r?
z<*!Va*R}35C3Z$THkD}?w|U0fq9Y^GwsFt4MQz!pj_A$=TA>p@EmlOSJXW%EEE?hJ
zR$j0MX5O*19Pm`vMzV7YOX`}(>s$7l7B6S^<g4v1n<tNG4`kJC8QFSj0yUaQfP(Hk
zta$!52C^#*2BXpR$dm6m(}R4Ll%czuA}&)IIq@xi_Jwc3{=v7nT>{r{jNayu`hNOT
ziJW=UU^3P|naa(XpWTAoocUQiHz#}j3!b51aLDt8WZ}<zBR=06%FKzMBR;b8iN<r7
zRj^#bmV}hv^BO5zZ>mAlvn8>qc6((id1m3KmxpqZP?VBqN~Xm6TD|@--Yj3yoUBOY
z&P3P$h`PUzo?!p8GRyb7-t#~$CHO?1@ap^CeU@$7=ZaNU#$5Z7PasRW#*ev9r>Ecr
zAMvO=n##H<CJ`hM`%HU(#d!@+!ueHU^yPbB3{TbC<cyprQo>t8eNRhf)R#m493PCO
zP>3sbZGd~#19I)K0mYUUvIVCcUITlm&{<%}GrB5nnbI0`p<Rt=Zud6|oCT%Bv8J}b
z`d&k>!T3RURcT>aGFebikuPa=a`Q~fdM8?&Ye#C`=#d_h;5ksBmT8J_6Prj`c)vWf
z%iHVd^wq{9b>zUj_bcqGyVq^(+Vf(Qd$Y}z+5s(2yl7aMfb$Y{r>#U;qLBlIdw4LM
zuscz+NU$w-JNq4xf|{aodp&HxeVaD!hmBa{D7RD>giC!JL*Y3S*?%@m<0Zj~`T2?9
zC5;vvS%y`$wQyZ9%5lm*fEmN>X62{}j7%*Nqxt&vL!nxK!ZGaKJJNYcA~;yj1|s8)
z^-ccLt^P>E=KjdK{>tQQsED*F-nAvyrljyl2`{pT-d8siOzi0#+2b89>Gan|hSoE4
zW&gTJ|K^5>e`~3~slIVMlKcefB3I?dP#0tn&+-_KUX(m8k=}mrlI#np+`D&av*GXs
zly>Z(H)W(KP1k-ga(U(NJ8((X1ynCApz@9jC_jwKQ9ELJ5RFCFVTyL>3UNb9B+7jF
zhVfSXfB886_wp9~+AaF;es{;(9WO)rA{&S16?|7uG{z|OM{DFZtr-3>8{SZ3Yx0M&
zzX^wb&O(npmi*f9qJdyE8Vp2X)i=RPd=q@jg%nWY6~uS3pCEs$uySB^$1>_=w%ylV
zx10Wz)RmXlm567l-(QM<re~jf?n57X?zv}=*6o|$vbVl|@0R&}b<g?AN~@|$%jjJz
zB<DVeR&m_q<~iBO$GK7iUjV?1!OlLp+}rD4*H_tME;E%DJ3LRWOzECHNon2f;q{?h
z;{m<F?X{PxQ@rC`0_|%L(kZJ1y@F`aD(Non_bGwr;8D<(!UKd8z0eQu1P(71zps7)
zX)7~7lN%s<LB{!qGgCoVZJE4pWdiz)#Lx)TqHOfMZSB9JZCH{20Iyad=x^}vA_V?*
zc3wa*-EJS{Z{vXugZxfeDydhjz*@DWHrtT2>><UUZR9Uq;qP9-D_GoP@^$nw`Q0n&
zx3Tcc=}g?MfK-Jnf-OfQazV<v3vW|g^cDqinS1<D8+4*9KZNyi>D(+^UbpV6+`Il&
zOk3fh<N5^Bz%Eo0tr0sErttre-wojl=3=AGK4Y`mOC(2$&H5)(d49=AXk_hpPkF_%
zwy~}`&*myEDE?AK$maB}@9bQY#U4$T+pRs9VCMx%%d;-iyQwHHU>v_w)>s4G)&RZu
zozXjpxc>`zEzSJ>L&#o<*OW-)eZwg${grzvVSrf0yQVx}_}~|kJKr2=)x|bS;d5Wz
zc>D*S`<z@q&uVI*ETU+S#69J1Fpza1w@=v?4Ll2@R^;-+34<2V8rXSRV1sGXCkx!;
zAs>?PW1%-*+<B4L;jqH%uTTE;;_t)}ZEEn|BD9&K&_J303^Yp6Mu;^{y-$TQDyQFp
zVtnx#{zjF2T>;*xLb(lClX#;_@*8qrD9@b%JF-;YDF2*+tQGW#j^ywvA$&3l{^3O<
zP|`m9i?VMeFJ~jk6YNvRkF%nyuTCC6jv9G}IpjDp&^!{OgLhKO?~xI!cATAC{w|Rs
z6=H~FD)7c1d<T*n-$A^Oq{Vmmh{fnCpWAM9TmAq1MfU0BpB{Of`8K}(%Z<lB_f4ML
z4;~nv3CKWN1M>y;7S9P{;JH6YuKyA@5FSC@;=LQ<$c`Ki{IJ1jWomyz{L0g(uY4;#
zlF7mL_Cfa6fp~ntHk)(v6<3_hnVHEsdBqhs=ghKgT~pbtK6@gOn8;4PoIOQ70mbyL
z81w{Gp(pT?OP@eburl4$E*hoA!tiVG&xqJy;iEU-+17GvOY5CC9sSqr>u-Gc-t{9!
z){%VCII{lUhi|+-`(LRh$Xn?F%rflPpburQiDGL&-?|kwPfb|s4qEFfMsL`-@rF@n
zt?gj)_o483fB$$WbW~>>*wnK5mWhd5Hn(gVu<4F2G+sWo;lP0nW0yBBfPa5MOH0y2
zko<Mcc=xt;#z<U!1L$s!HXY?C=QW`(aWtex*(^sR8R$>Y4a)Or(7a827n<bzyj1%Z
zb&X#F8j!j)xO+qGr$?24`}aU0d+_)ll=IPP?BB%^h9tK)uf~<+N4J)r`0K1;&zoN<
zf<z%N-6Z$2)GG2813`fV^4(p!bVWv{mj@E?dleXyS2rC<>}snSD$y0*mFKjUSqlq`
z^6H$CM7}l@b;l&5tKHL9Z@T5m=_6eY(b=|>SNI*phW*AIU;Xs4uDY4ozR_ViE9^c$
ziHQ9#V|K&&ev!x=-ZX4@i#Q|ZUQ&J-VlcvIXtQ-AJ}35;uG;Fh$@rG0;EZ3Z*B%VE
zH#FLcirVWMoVE3mq^;<AMmjlos5dax6&fwo<!&DwnXfMk#+TYyMJOC-HSEhu;592_
z-6OY;_;AXG88V5tm-Bt2og%^;q(ICmAvOwJ(UMXBF|C$4ql3Y-wx;?b-Du9~+_IYP
zrY!w4)~b3><6G}~duye8-^rnSKh$;T(A8@ic4Lb|w+4kx=AmeJz6T=ZmNM#veGJyh
zFS9U+y)`-u^~20v3tb3-sqWgiwdL}NJF>&y5a{;RcY9m+zPl|D4Ar?qaZ}5lp~zI5
z*|oN<dBko$P-H7J`)bQ7dnQ{37veu_X>0AQO_b*K(+Z@sQSz3;Qj;l3pZ?PkDL?h6
zJ%?3}1i*Hqg{O>0ltEXd&gbvg(OS0&r^6lIn!&;<v$d``P!$Q4#4FmG=1iXcaH!R!
zGj&oFKv~JW8&LpSwpWrU5}?qw)nf+@)#nG;XJF$(C+V@*pq|S9(|pMYIqA(u%)Je}
zW$bs@4U1Mspsitjv~%B}b<LEE9X2%2^#vk*Yr4xn;jai-imiD$P1~pA*Ig53l2*I4
z<eYuWHh*VJenDHiV-xkc<@_Z3gX|4R#rccF7QD1Vyko{{W;-y0O5LTkCCfVFNyG+@
zMkafonRx$0Z7sp7s^pj1T*bQJOie3px|Ttcke&T|%->x2ov{xDFJZ9=J6j6}voYKt
z!BYbh#wjt&?h_|=UvlEaCDtmt_6e;WuNlJoA@QL~v8<(e*Sg8cb*`ktJu@*eL%U3R
zhmH?+iG{CE@`Gkxs{dN7({YCBbzo6ZmboxssvZlm4ei%oQBzW+)gCay_oj)S|GgC8
zYn;5C{y-QUwIUN44JTrAFxmmWnyfv#tkZg(&bQ$$?IwSJwWD{q^6~b5Nnd71uh$1k
zy1ZN4cXVgnlI`<0?c3?g9l2SnFCTBMKpS~zqY8W|29*H|oD7&isS^!oaPRxx`HD8X
zxzgq`SC)k9W-hJ#;6pofxw-7O`Tjsw*3q2YT?dj`j65toSbO8>FD!U&Z1IVwbXrIw
z2qO|nSSmd@-*Z%3hy^9Zg@xci<)tM$Uw=`hiRtvuNDn7}7^$hKVhO<#130p7B0E2Z
zV<}qac>Ech0dFx-SmRon2PFE8AI)zY4xTLzc*=}AUzPE6LET_%%lq!_sPt@l%l5$f
zXEw|}^iD{6@&^tux?>u<U>3`|8BC_htc1}hD@tDI?B+$ABiI_=5b`H{wM`|q@}_F`
z-Xp<qW58O8x6>4d2Fu#(qHWd+G0$zL+?w%3?MT$5GY{35h6<ThzqHg??P=8-7WKNe
z29K{eJEyWaK(k&*cs=^~x8G4z+;y<8?_ifW-)XF^ZEUEmUF{u3Oj88Su?yn_n^esD
zmZ%qg30lb5_0j6hNHj0ytm~1a#loEBqN4qyQr1?;PrJ=%$u;LUnzoJ?jBcr(`^wJj
zU0;|!XjrP<xyIxu*0TMEY|!6{`Ctb9MIw4w>?Y~tO`ZW<GZ1&74LTG1`}SWQpO3iu
z%CvfE$`_rfj@s*=VGqq8YrEknUWHWRYTF-U6@z0pj&|)SDU|usjD8f8k0B+M!!XeN
z0bx^#fK(w7ZLFYsU-!VF1S<<B{JvoO?w(+MU3IXb!4$u2dgij&m3lqXS!Y^@E^R&9
z+ZkWqHQYT!v!oQO_*-ZN9)9AM%p!j5l@hG6iO$ob?BH3gWHslP7FtT$z?mN&Ff4Xo
zS?4I$=?)rUE;CInYNDJ?X=+Ju(wZ(7F)dt>!u3y5Q#ZP`R;M%GjyD8WyMi?ZMYo%+
zM@%i-6W)<3$T3I4>skomJw9Vi2l`wc*CejJ3o@+=9RCzN-2VrsTF*S0I@LOUJaww|
zBzy9LQ!PZ;_etgGRUVfg+87xiT8lB@eb>D&yl~f|ZtlLPzHryox))4rhQ%ts^UukT
zB|l#I-^7nPQ2SX>3p<;izoogs&lGVkL-r|HBv?W=>inTb@Wh~H%o?h_u|1w&bbC?p
zO>ceXacSUi?>@no;?@?6tJN#zo%@|MwzXk<rz>_@{M0?t<J2adHGUS<LXW5RsF0;l
zRy-SBAe<UkG@EKym{5jaZroe!wcY9qxLiF({R4WV(^>8@l{s$m)TB-zO*da(y?M?X
z={T5(^lbIC)Yi6mBGtqF!QQ?=bIX<E*PWunNKjFAevn7f(F#oIPh4Tkh^!&?$qypg
z)+KAX!{zCZx%)5cZ5S;ZbbFgyBTbDhcIU_a6}6TUXO79!I+K_>9H+Ml4tI36m<y}I
z)uoVeT3BgsNcFfc=YV~RU6kGfJuNpx)66KJb}BnVV{tJVGFpQ%rDs`J)8>)drnij2
zSZj_p3<P`j4_3D|wOAT!y^(1q^$s|K6}2^{@{XMYKO8*R<DcvbjoWpG&{*TpeEqeJ
z4Z(O`zQJUOB+A%~&s!L1Dy#92l6(uv8kqZmk@4AvtiiAian(VY38X?=Vg|*x2a-Ql
zHae`Us4eqUZQQp-GTw@F?#dERv9#^VzS791)~ik)mRLngg>hu9o8fhxFYlf9hU~df
zxHu{|Z_M@fjaTATqaT0Y$Df4`;Wjkg&z7)zM+{Fl!@fq~>~kDnE92PJ1Lt-K$Jfa?
zY+vA9({p@-z(p2{^RJ+XJj;b7a5>8bZ&%ODZ<gzU{|ohS3BmF0GHy)cbbnnE_#_iJ
zpUu4dF1h>>DvvX}H`tKYjq;-1w+edX`Uw~Hyj9f0_w9GXvxdFaH0^cvN>mH&s%{Wy
zFQE&(?%x2-+?Va+`!adACK)6csrc^yVDfeF{Zk#kfojn1=Q!%r#$_BkWYl^<DIbz?
zxT1j{RLVEY_^&yBh~vKi74MhcK@@{5gZA)6(aSi>JvVsIfkD%e@p~hFkMrL_t8^Ou
z3`k8p`vdyVaq7Ps7aaH{@XS5vKBY8Ja9|)+t2W9hZ(@U-@-zn`GLDie4%Esx=u~l_
zM#e!eaKQnh`j4FI&;?Yh@if($d*n3LKtVNVl*jD>-dgAas_&Qal~ms)<14AYQ^qr?
z#<*!C7`K2F()^J3Mj5#kxEMS1lAYwejI8YC3S8->YR|9ql2G&#DqZvvYk+q5k(Ira
zd@{bGmr}Wmujr*zCgUr5$v(|{8CluO6}af-@6k(o6Nf?0>%#Cmy>rB%xk1niFSrR_
zmw?o+xt()Oo}rNLe+KTC+K<!Bka+;~7oZ9#0E1TM0Z{lkz=IK`&gVGo?W~R0DbG)|
z^-&pb<+!{;fxlD6-5i%!DDa15yprQ$e$wiBnU7qDJaU3M!hgc?F3s0?d1d4v;W9lg
z%GePOx<@(PBtg!Ka_oBkeL)}Lr)2zS1|2lxJbWy=SRTg(&$)k&-hKiP56S*D%)sjx
zII>~O_#ol%^k60;GY5ITB7e81C)0c}e0)`>&-Pq%Syioh>l%O8-|+oB-EOeiib}Mj
zQd?bhq>SjIe%t>sy0|)}{TNvp?^%_sm;7D+HCxTKzH;;5B1=~msjh32MztkHHXA(T
z=YI*RG#HJ4%rAD=s<hnNaiaWh5b^xCi(bLnmOXNqFJl-tEg!e9b4nr<d++{xyq1Vm
z%rHC+cuR$yZC{PHb00V57rT7svEizg5C3g4pKZ@7E-EV1jcVJPyv-F_Pz@?+6u<V5
zQmGn8PUN=Lh)lBbSk>^D+2^w6o%lP5G*mQuo7%Lay0W68;;a}EDf9C4|0tDeUdE6^
ziOsA==D8QsygXKMqVsPI`3hd<zf$yVnU^pAqg1MSNknc~jmTtfnwPzQ2a#%C`iV$T
zNph(Na>)lP1QPl0^Bv<rC+(i${uS~BsW|+tRmuK>-BXsIlP7f>tE)=fWqG+KEk0hI
zonMH!<msM)zs_u_wXiU^FgsjTXf_pQN4$?WO4-J2lN8swT|WQH9u5Eh^@zJxg@m&I
zqaBJi4fIau`^#PbV1M*}pUVy7)PxL|kRyMFUfY2)6Ihs}AG8}KXi4CI0{#)`FTb=X
z<EMmP0{$q+mt_2Ej{nd3H*}jZ8~qY#CDfx0r^@R#ar~H!^S#7*D!-QFSIT&`Qhti#
zSIKyg<G(<=U%@=`OK6YN`REE9ra>B~T<6*^@P45^jz7f9Q@eXP{Wr<=_bBZO{ALx7
z@_G}e=j}57(^PqVF2}(a-d~)!kj;hi631_o@$W0;8OO=8A^!Xe$I&m{<Gf#Y$oPpB
z_?>ASyU9BA>sMS4LdySLtBKq>ihGi~$X7kBlIEuqXC%G0#A+xq!d3a#r<Q5+7}GcG
z+~k%$xuW;FtGK21v`jTNTEKCOM7M|IACPfaBQm#KoGTxaao8WCyxz(256k!;l=4=N
ze?-RrTPa`6@n>cHR~#qqp61;BsEi9MER8>xiOV}>FRY?*!u8v+Q_c}PWxVOZtl;zM
z9W-!cq?60XSHTl1JiQag;VRL2!4CbARq)4F!5>!PWbFz1pI8NdG!v%`X>$1y6^@)S
zGCrWfk&#5k`_j0|ldzrXQ~d%?d|S);Ij_QrZvu~J;4gB13Otd4XL>3gUj=_;75uSP
z@P}o5rN?7C<5EiYgb@A06Ed&DiGG2{SHTl1oW@<0e|#1EkyY@=R>2=u;WX}|{wG$!
zAI-!mCx~3WPsZuA$fu?GFFY#S;ZdRaPbY&uK8^yPmpwmU;W+U@;7a~f;5>h-jHfb!
zeu<YSK8W&<%k_M51^$SPQ~BBqkJDo^{!QRD8Ti98{%hcVzS|M?Kd}n_sEq#z<#~ou
znI4{@6!M3%L-{Dbn2e|Lv%UnJ=XsU!RG!zBo~T>p`d8wzhYGiv-e6JfkW&BKMS0m{
zM*QC_%byZO{^&XX1wPM8QtJ!in)om9_$qipg%kfp`NvnmA6W%|Y!&=r8RusqeEw{e
z>96JV3!K)Gz~@;lr(bvislVIh@<v`>;8b4V^Rg#U;M8A%$5+7<DxCT&%0Ipe{>Uo$
zW2@i~t8iL(qW&jV!5_`U`MMM3`&2l|VS$gRaGHk#AIQYH=TqRfu7b;+PuU|%^G%e0
zyIej9Z^>u*cnQzyc6NmGU*N=lfzJacJtc7Bzrf?G;0YB@{1@dPUj=_;75uSP@P}16
z@n6*c#47lsnK<XaDBmaJRp)~gWrBKy-aN^|^7;Z!{L#V+RoMfCgFiB!wg(6Ye`Gvu
z52*39JwQ14BbQIx18O{N52*39J)p+Z_5k7Fk6eG+9#G?HdjL4`M=qbz?=9zp6qx}2
z2>o(WmRB6-{E5i?3Gw+OaN>`^(|Qy2aQ+B9tvA(pT5l3g{1N5TdQ*+3^`;t6>rFMD
z)|-SAe?<Lhy{X32dJ{P3k0_tgn?cMUoVO|S@FZK5*9&mYpKh5ysr5xT@kik4^+h<%
zAAzUWml{v6FT#mGqI`ONsqyssQse3MrN-0ii*VwPs6V~F)OdP*0q6V?<@x%;NnjM2
zk}1L?fIZ8_B0Lb!fZaVpjaCozur<{czRx#QR^H`aHQ>WL+*zC(oUQin>6HUN`1$!H
zZo$2Y2pAXcVaQ=x<P+4Y<N6RbWoN~5Sb?o+qCtcj>=?qgcTM&8jE(j5PbFXdKz`ru
zK9NZEE!WxVXX@#^wF)s7-@xg4CC(mYH-&td7q<G53y-@XorpIuuxl3WB_$1!ZJmQh
zN1mu!?}_!d_eEQ6PQ*?G3(cju`SCqtbWSgI4Trmm@;%K}j;&|`Q77ykw2(_tCkS4!
z<L(jMnmughYtr){)#(sPviQy&V|T1W+3fRc@W#qdQUtA_1_4?kmzww)h}nvWlt0{&
zovn>r+Sc)=p)e<LRe#4{hA!Lo{tx9oYYuIy_qa-;l~*5jG}_BMeODj4WNiNx$#=cn
zybD^O;e3K=*l#3*u8Pm{PS&b<4Zj<azg)xmLBTY88}iRTO}8T~7UV;pwk+El+1psn
zwNK%%QH@6PeO5z%4darLHfn3!Zn^fU<abc_e@M0LF0F%~QX&=sF)+wKpt%iuJ1y#h
zhjJ}K2SsooN^g>4c&m{crQgczoR)uwq`LL|mw}ulgmdl<7G&?z6p6EN^;Y<s>J9J8
zEiLK1PfD%qD5q#U<&VB7@+`_6)|%1kyj<o%^ka;Ft5Zf+^bGZ^m+IO3c$vrLGV6dm
z#gRv3gvva}k;i0YE0B+J<Y5`PN(!?NX{XTo6Bi(l%E+A5i8pQi1Z7g$!Z(6<FLU1A
zDwjzkZ<UdKQk;E8JA`k&oe+%1|FEYuAB6uTpGHIFKK7;E`)s8HpGNU%&HLr=shp74
zrrq!C=@kxkwD(Jl{>k*{`{C4O<O1hs73^6yjlbp7*sh?4{KUSrmz6x$Y=s|{`=oKQ
zfLh2CC2CR8MwRSKdqK&g%$`;IIfc&{=O(CSy;6&sGvo};poKiXD{0|AT|vt_r4}_U
zs3e0H^2n~FMfhB$^S@xrn*V{<!%8t~lv43;Ia43~8!pqo;S|km5wRYtw3zAaym*6(
zOY?&EGM$!Kf$CcdknynEqzJry`QnBcLfF&qU<@F*0+AM8?>KuQ`JGJzm-Y7^8knDq
zw|BHp;NHSX@48_`cU@lB*x<*Sq?(lb4&ryZ?|^fb2F!m6afJQSU1%wrqP-a8DemRq
z0v>LgMk!(u|99hFw9y-7ro2k~&#p1%<Q_el=PYnl7UUM1bJ)qLypwFSXOEwq3B)^+
zw}0{nTl5XvCfhg8C(gaT<p-Z6`2rf!cOoFcB)FY-!g~f)6J8OzXs7U@a4Z#4!$%sI
zD78pjX7*~OPsR$pHeF$sBiEVNy1sI#{Z!kKdqXV0BBvy)KyUMyTVHtSmcCPcx3HNL
zJ{!~Cpx1@^&oa$<&Ds8tPJe@z*?cFG?`78HtMm`F&|8=-patGqI2NHv$UV>5i>!qF
z1COf|5vKIsG$<MavvePiO!%g1L*4BivwiWVaJ9d?a&+VI%dV)YZtm${G*vfW;&C?A
zRQnGEynatv$<C?ywT){my1c1)-{uCiOXD&NzFWwGKwLi<AG6S%DC9Kq8nxr6^Yyy!
zryjg3Uxy#ksh_o97rBECoLl;N`|+0Blb?`Bc2>IvwhZ?y>&NhR_$;~R!{`xq)T=Uc
ze0g|-e=?Tu%qhtR-(1CmuRQSnVd)h3)EDM_D)C;Ge7E2cc@Lxk(CXkCN9Iur1_^Tm
z!-7eZFZGss3X#Yv%Uo7gQ0y_Y<7bYVN=(-1s7Ysd8`Bo|4sQO~JYCutxUT2GmGmAR
z;=sz=Bg)Mf{9SbyL@tlJAegyvuC?g<%DoS{d=tMr0zHi1L2deG2lxV+P30j)(s$Nl
zls^igZ&2C>!$alO`K8%bOM^N4-yR%`>B0kNzU<s)G8(Sa>YWz$<4-;K;HQ#VqchOl
z^{DIX;PKykD<pC4>C@L<d)?{N*Cqcv+|@PAZXfCD8ZpgfU32v4)yA0_<JCuxUXwM)
zHuMkaS-HNizrSCX{HcD3`T+|`bt`0CUa=<3*eDjK_|IyTG|BPhuPsmIee#pI9`ia~
zkJ<7A^c#^6QZ@QrO!wY+6sLTX1oNBHSg^Zob(Q0X;&-)nRs;&puq>UnVejla-qF{h
z)3SndOJs9^*EsbOcWP2C;^+9CkKOj@ovGH)BHi%>eOi(zxWOaSmZH!b6<>hJ$oLMI
z5|9ZrUeDrta&`xL@pkHlidV=yulIYOX6ptAj|}%O4z1~J@4Px86(0X}&D_w$eD#sK
z5RD8`nuS_S=&x7-7uLdv^yQw>#omFXkwmn;=jtfCds#a5>*~2-xuzt)VkArAuv{Ns
zsTa^RzPuha^&c6Y9%=8s8jC2S8seP|bEO1x1<~qukGyzd$bzO)V<c5xyMAt>w7)hn
zk@J%unZ^^oc=<%t!R~c8Osu`pw0(=CYR&qqNBYW3<~`vx_be@*;cx22>B-HgJC`i=
z%)J1jBm*QfarrKNsaU$ScW9`$XK1MBiZl6#mzOU$pI)51erV|W#igA)4<6jPbLrZ%
zHzr?~PW|PYTPDvgEZjGZA)z~Bh@z3l#U1q;y%w(eTEbzo7I*w;Gr(>hdHZ|b9UB_B
zeBjj|u36LG`Rc2T+2+S4=6tv_w*5JO(+;tM*=u-DvOzPSTEY08?)2>BmaPMvI*XRj
z7d>%`3t-aqBxNY1JN-Ui1N&ZenLRJxR&&VVHlKN?Bz@f;^mH!tHqV%H4(kIAyL8&*
ze`0nVzfPyC-8M0@u_mR7enD?)*24b-E3iwvi;K$|$PW2N0lx%^aYmp%S3uaBq;ht!
zt?O@HyYAHb?p^K)N6g!?A^$&qlC!Qa*i|wyZ5leWxOC5&uxH+0@&8Ku4*0l=Yww-A
zO=Y#xYPDV3)%K#*O4_R4yR0rtE|M&FxjSH7F*e0?7my(aUg!{t;gL{7O(6vW;iW-d
zLV6<!5Yk9_c=!9Cxx12Vlb5{TXKUNsnKLtIPMb3`XWDuWEbVofCTFNt(lI$)GJyw0
zJS;wsm%>Wh!r3O!Ffh*S(r%2Zf#y7XXJuT}K#|4g9YDst7N^r<aX2o)%Tnxce0ENF
z-e<M?7QfE4({VY}i!<)*aelrGG6f@x{R_C??0W1d4=j?25bGq_7uY5v;@#qSI0sG6
z0*fLqyTDSMUt~uFytv3oUtO!xt90=`_FSN@`9NT?;7_vzr2nPOkp7nvuW~C#dKmQ=
z(aCMnf>{4Mt6EK_%Ko{xPG)L(i){&jWdk77|4GAT1<4OM|1&N{Ncv!|MA~$oXmq;y
z3)P<C)KaG3dg+O99U}XtsbqHdv(LuEL^kO$5_U?j1f}qGSWwCYk4jEjXM(4TTDP9G
zE^y1Wi?j{-vG)s<wS-}IE=ogwf)N;(;~=vr5uHkw`{LYNbC2cD%j#Xv(}<7^>=T{=
zMj$Py{Tw48{BxuZtiKa`_MCj{Egvr7Zv8}8xvQqOrm>X${Gyqei&i-XTL&h+7x=<u
zZctNNkK#On{v7(|wu}_~g-EOv-h{5=9-la}WXX{U@sMfll3eD<?W=3RP2Atl=~oTh
zvVF%*eM@fIzWtT~p{%dBw=X#`J~A?n-v1pfUkwgI4<gct7QP2M*m1TYCw&p8N!7-D
znM#}IHVkwlMyXj*kfpa|?Z>I)|BA1V<L~I?s6ugtAaj-^!=mP4f0S0^1S#-ghn}Vr
zy4s>ka*}@&u0Ngp9?pOwml?G)jC!7kwFEp0AYhzx$Gzw5w&dS%*Ln7&oH;JOe|7S&
z$S*)g9YkxfD)w(#pzuz>1pYsmp?hcYuJHX!OZ59Nkk7J3+qo@T25!VzmVeI}RVu$%
zHR=23#^_9c?(<J%`Q8829vxbv`CNulkBKsnQ|Z}br(8h6`NrebTk<aVpJzY*Fx@-g
zo9Oxjz{WUnuKait|Fy?iSNE7_Xx^UZcIl&CV9<{<Oo=*R3*C!x7i|raAL3+%RA2wx
zPfrf2t{D9(2?{<JAu&Nc4WSfCd(3z;5yTdxJ-N2XGBO~>3^TNDYFv7Bq)C+a!Je}5
zZW8siL%GjCoj-c@)Ye;uxwsEcx31d>ao<+-In3t%hTiJ9oJD`Z8|mM47DYT0e^$^^
z3cB;c(JA#kw^J;CnYuWy?$&#@9DM`yI(f6Z!{h02-<-U6^&8akT(o=${YA?oXGauI
z4-XE4;j9*#p8MoO_txYZ5Rg}w6aCbKJ7-mg>swR?HARbQV1umTfIe!oMfC@g&%cIo
zI%1Aktr7DP)KQN*_M#4q*~i+8;%xA2qj6Am_*}b@n|0zmrv}iV`Dkp?#>j#&?w=E_
z&lA;+#ohwp`uAXc&MtfAnf4eY@tYr`Eg>Z((luPt?oCVD&yrRZ=g>U;f^<5tg!Dfm
zzlo2=Kt}t*>L5wIC!Md9r$?ZrFCs0?SSBANeFFJJN#B{4^jx08YVk-9^YTMTr*_WI
zSETpy-=apqj?}b9=uF@9BBt+~PajXG(>)Tnbsg3av>|$l-$It~eb~e0umLzx(!3Pn
zx~Pbo1elvc#L`YOoRM9y@}7=Y`O89HQ{1p=_u<g!g&pM)L$S8m9_=nS%FTVg=tQ)B
z6Vomo?P+XHSnSHY<bOYOYUhcuK(-<;=WxD8u2h#)S6OWl$j%F~twl-^Gbs8vW;<r`
zz+fEHk=N4GVW*T^22e_PB2J!LzFoZ{<_%UPs;6p(YTczacU_my?(}xD4~#WoTb)Xl
zn+QjmN?6FOH<**(vYGT&&>qz^AB_~cThqdpA{^<36v0CP^^XblXorF<d#&iJnD<m<
z{1iWz>(zH|UUo=rQ{hq-1G`{QeF@8{>MdqD$;(f_G@~r->-=)^@|l-TW6bDOF5MBW
zAe$5QW6!YgC-~MOffwlo5)KBgiMdS7n1vMF31PWl5o79@XDgIv%MBVstgkpwetCJI
zxG#oZvK)D#EwA|Y+c$+S4{buQQ=3*0u2z;ctbF?El?`Res|7)8Yf4GJf`6#L80~o$
z^<#C8EclE!A|0xm#@;(W&>3gM+u`ZT8e6m38(T8i+1Y2SDT(`6R>h}k-Tv}u^9GgC
zIi=HD%~h)_Lu&1`*+ikU>+@u)Y96SY<D6pliWZaTi6G6L@kNj@X*q^Tp~{ha>6OQ_
zWipjrbt(JcTK81QP^bS^vfx_JWJuqj`xfwt@x%Q5C!p=GaNg)m+t-wCLBF_F1{?2V
z@YpgJ4%&KR`a;5))~Yst`mPJ2?1QIQHv0%mg{5`Lk2sDLz|k48y$d)ZPRKYT6p9uN
zLWCfkS5b*PCqJ8QpW6t}gla^kki!+>@b%91CJWfX#E!)1avF7N-6$Z6v~9@PE+Pit
zjv*9?alEkPp=)`dF-Man%P!2W{q$w>EJ2oI$*mo#%PG#4NtHn4L)L`ZoUlHWEI4Et
z94fZ=mfmqk=@MJ<(4gf|rZ&PiEJBiqq_aRnh`W2o+}s`PgU26F7QFC+NSpk2N(EWx
zY2KiIi<S^giNGDt&w*X2GvE-yf2v#1b9x2^i!j&={5NDFU_c-7Q;{47w~jTZZ)DHR
zv4aS>%pvgGekg)7?Ux7ddjatmIBiSOQ{i{XMCi?&dZU<ei)0V3&@ku_ycE_8h!vXD
zPV#{07NUYR%CwcHiP`FjN^7uCc3iHHS*nN26U!r&e);EZ`aG-J77Q?hBiNT;oUbl^
z=1`xi@Vb4&7d7Uqx=)^5l2_RHiGCa@wR9h1F8%Lwv*>aG94yUN{a%$ty@d~-{h7BN
ztKEb#$crvu>|9R?doFq9+>LVs>eHuzJcKzSae(}lDD+F@hpw{6&h?aFnAk{>%T_lT
zoeP8t%z1MU%4FWLj^oEYUa9oWBuo&Il72ovwrOiWqG`Ed-_d<HX6izH1!C)@bPiUu
zUFP$0^(qz^faFTIPi*695GswK(1&tr@?>#q>a5uT(Cz%so0u<FKT};jQy&Wr4u&wi
zx0m)bHush8tglH+bm4BmP{IG0;Ym@ZE6CSEFyv@a%bW{Q2dY=syGjNJOIRH)HeP@O
zOrak<Dku9%8kR`W=Rj(iOEgeh8WL3l1L*Mr2w;J3Dx|2tpwC6z{BiD)=gO8l;)M}&
zRa5rqhjMDmaSFZ3JXV1dq|FrkcU-NltXUl?%U6$?Z8aAz8{bt+*lK|m{RQBEyoUrD
z1{^pqQWfm)WqyAdP8U~ATwKsMH@Bqlz|y7-4GkN%WNww*vw8Y?_Q4Y?*Nc~<qK147
zJoTUZt+;<g3^6h99|0S%{=~X_u5edXPuG0sixm|^J|0Fi+SqLc@5&F=BQkKBTj~CK
z1q;q|?@w`xM!`Utup`ePqMshTc$Tl4^ewjvxRWGv!-2??+*cj4xYgzyO^zjK*7-{G
zZo^!A``m*MD$QLLE2pbx#UPdb%`-hcW}_kbQz6(Q@9XXATW$^<zvlS89VAsy`Dgel
z{uj^=x@8hJ6~>OVC!`Cvqp>QJkqPH}O%%-3xud!3qK;5^ag)|(4A$p9_;7Y}m8GgM
z<{nqo?i!!Cu-0l=kzY_=wK@?ts8^I)P%qI2-AbvTbHDhVK&^B;xI*Hh-zhAb@pGCA
zHi9QotYJu)L-@+S<2UKHxLmjp(tVhJx?G=`6Y6}{5}&Vxd?(`PnJ*KCqaMUkmHe33
zi`}glacCgn9gKJ>t^Y5gTGBxayePU&6bkq-h@VI&ndEs&b!k>!wv4UwiTwH8s4Q2V
zKf>182M6t<g0cqN=Z4Zu!VWfF+}P1~G1yj&e@oG}i^waK)*XxLgA&QqHFtC_1OF&1
zCD5c;(lB3mfusQXb%r{FTeKAnUJY@a1q&bNuc4oG-?g}#m-M58r;A#>j<h=Rb6vr;
z{Wp33Ub=}*lx%{4cH)--UP!bQ|DDPo$xqGQHg}U|Ug{Ri%d;rXlc#(2@jeg2;BA*)
zI`_Z>VG(cPvcbVJ_Ta9GiCq)(q77}Lv%z$yvqE6JEs*^@`Zs1X@Jr0=cFyt{Lr(hm
zr^Op0l<J%!Lr**W5+;Q@8-9s#_CY$TX!o*lh5TafmiRL7Bi`;3{zKHpbao!v_}jX@
zIbUKQoKF5!j5r7R4E`X=ke>H(cNER{W=BUDEZe<%pO}>Y;KJF}PXKF*)R@!=ZUV3W
z8@6X=zV~k$pc7lw2dn>A8}ukF;(04{j9a1P6{HE}zhj0fmG{W)&Gvt4hz`|iPTwmx
z8~>Rtn&`=YC__6fz(U3&c($du(ChQe#i^a@gZ1ZFj5qK;0k@<xuK`q|0`3+3I17}t
z=EvEf2QNI=2nED8*cM|LTTy#2@;rbG+hEEq$vZSET5~kjc;N-=n=3WO<t6$?cwLZ}
zqOBx)9bjvITi&-yym+j`SsH6<sx*eQwYo~9=JZ4Q!|V8MW2;J*v^4kY@@KS0<%0xU
zg}cTmPA;^OA-0InBU0T<kDqMH*5%0XYC8JJGtaOOe&Ff$;O_^?f@c<&g@3|8fie~|
z3ciD0Upm%rJ+TPNb?dKs<{3CBj?Y8-#Oi0z3N^4|LMym`0zrP}P3esLXx=}eK6U)|
zAVsguD$H`6Ix(~z^jWDgsAP!f>t(|GL%K2@{)SSQ0DU96Ab#jaP(vkZz_fsSCqB+b
z6TK5>8)}2<gJ;`n>DeF2H7@_i@`vo;vp+7+UQWxigQ8r79x5a`N%9`~_)MMWdoi64
ztGGz7fb4mXWDmm#i?WFQl;`_WIv=D_IvuxRA>YsVZ!TYHcXoQ#)RC62T$WM%0O@PI
z{9t+)%ULoG@I*OG<wZH%L2@{gPB+}9)0cAjOt%{SnWf-aaFMJ@M_@_YEVSUyJqi>{
zMvw6$6XLAESlLY*>!&-*+GA^4Yn$Eq#rk$fTT79>*4@6OZrlBJ9)DfP8EH|)*R_wW
z)7yH=qcvvCi?Wr6^9lr+A}1$TXEg;k4|i;?|3$Q>uCc7voY#q+Q&>@zJ}q1Y+ond+
zK_}}-uTp#q4I-^z_6>FczwntjCKehe#FBWw1onL`*dAhYGwb%~0!0E^Q;?sVYtY=~
zA9Pz}Ik`0rn*5wxec@fcL61e2n^P@(BG?xS^#y}VLZKx=BW^v!Yb(oANrekEX7<bV
zuWsyIxvy%bxs4|zEj(dw7zxbe?TyF#yxzWeyw|(J?en|cexLi-18_A-CA6M(4g8F`
zm`lNt0w0cn?=S+p)1DIaCu1q{5W^H>7#R|XW<uX!Mq!^D$35RjsQ77aj<Zs4FgY|`
ztE;*ywYsvQc<;Ec(NWyy!acKB7REfb8k5tvG~nNGeH@0YyQ4&FV(%CFigY2nq1b!o
z7l?V(zSQRIuvPR|47CT^VusQNbLl{+ZhNFaC)<<dFxs47a)->ec9+Hj=5T{jeuq(^
zsJ28Y;t+r)Fftj#lcsrkmPN6)=w<R53_g?5XEgd$58ZwDefQmc_d^%Brza*R9gfL~
ziD{S=Owx(B@8jef_(7ciQnz7>cV4?E+U?l7XAj%4GN-uc%tvt1F_I?i7ib0PgjgoP
z$s$jPf~?($&OLmvv&!#C7>6p>v^P!1FjF(u>kp6hAKX-4fjfW)5wCh>Lu|*6xKw^I
z!Ntlf`!T1vMOGX)r(+osO4ouOXWT7+>fh#UFX{AER2TPlj5qr{j)b*0xTbc^zC<L^
z)v`qu_DvPLysl!uezwA6cU#RXJY_3Kt2(i7rN6Om6cclSc73qFq5s)5*QDEqL@$Gu
zVssN8oVq)&L|h}4SshNk_s$bNJuGXZZP;p#Taw#Pt!I}ckM2B0JusjLKLH%9H7(eo
zX)mEy3kRB#ScY@OUkA2&T1(n}RkhW@Vs}YvA)Eb8uHBPZS>3W(6?IRU-QlXru(~k7
zS}xv`ADC$GTo*-4>7>lNoC09;F-+t$8)T#lT$i?^_%Mi+%(SLRQBJkpUQuCf*xu1|
zQCribwZ9-y?5uT4O+6(eTWVJ^cZs8~rYar|B;RPcZpWTeJ>|A#g%<ZjZ>e+D`qouZ
z^e>1ye}(?hx(;nc0yo3gd56N$S)cqldp6PLE|6`0;MUQLSG4UuaAFEPN3!`HPAgvW
zU}U5l91=isdJ#1<lv3`i<bDb*A8=wgnyo3D*3~wZyDOuUbrYMz_E2;6`eLu&RT8LI
zxhoy@K3#FGDmWOa?KR4ZyTkFpz^cJemtJNXXbKO7*d^ta?sAvg8%%!J>jSDa+E_`T
z0=PsBe)NX82{Sm+qYKU!r9s-riYL;32eGky<Q}MWnIhVpgrl^wp=ruGP!KP6)wl$p
zF}^fhJ5$q02xgxR2RJ^Hs*qJgqs<kVXltE`v|PJ$_bolBKL&Y}kNVY%W^5VqIFF$n
zU0dod+k&^cEnODkX^X|L*ZWn2H_d+Pq5d0ZXKxzZ<DMEFTj6l57#p3UXw=Y-tO}!*
zC0bdWr*GdA>9KEPzvAqCglN`|w;!Mtu*pPjCijpxGd5{nE+5+4zSL1;9I9N~KE0!Q
zc^I6$gLCo>7&#K&KAGWT=(#i>WB)F!G5m&z!Fu}vi9)6+q~B>S!Sh1?obCWVgBB=c
zS`D>`sO)>^QQ1ujdwX5-5A1Zj)p-_`0b&#o{>UNda;OH1iS!}=tw$3WVyOLD@_Wf6
zd<L{gYTlfVAFi4Y9FDwv_c8LKZ3dvhE8aDp32L~+T3yQonc$4aJ>lr&7YB-3++{vb
zsJCTgFV)Oz!d_)>datsAK9Qc;)4Y)G;OR@CXKzAn9+@4cBA&99WLwDW!u|LZB*W;5
z6gxKmNgVY3I{8VtZc!ZcBS#j;L8tN~2-^RVSl)mwZCV2)#k}5_k?Ur3^4>Ha9zDXs
z$!{ECf1n`hgcE83Nu2wHhd>`5L}K?eBElB;Z-^uUj!;Vt%0(b=Rp`Be65O#=Ry6Ef
zQwyH31_NeUizgiBvD*DDvGOv#t<+r9>kqq@)VXUaD-y1S*zL5^(#h^en|Y0pqiAj;
zBEaj_6b>_Ol`rnZJMnQ|hx9P7+EYSRyH<tLy?WNwU+1o_tV}qm>VSb)?TfH83%z8L
zC2S4$fIJF3VW%&m%`3N;0J9}*%~y{c`6|W_&)MsE?vauASBdxc@W~_z_&R<mJj{0p
zb0m<tri(+hk*v5WRN2{GT3(LnZ)tgujdV72ZFM&58-mR1aF<j0E;b|iQ1~3pTlfxR
z1>&S-MrR{RN)@H$WsXoKn`t)GQ!!7lqwxe$6l!MQLd_l-_ysKrQj3rdi0tQp=#ilU
zq?c#XQxlR8vA3F1Bxn9gIa3qt=aR>e6Lu$ZR;K$@C8?IY&puD~H{vy8U$EinE3ZuK
z*in6A_C)a1DYQC{9DmB>NMIMUZX2E_uB^u6;E7ql1`PHPa(HB64m&J)p0^GqadQ%-
zlTTQQcccSindB8_XI0P`67rdqefY}kteE}{?0gQ2>2_TiyY?H?(>(t-gug6G7hauD
zmw#qay8O!d^sH@SIzx2jtZjdNkp(l5;ALJ^!?P%X9+XLV4UkgRyyXp&U*HtNr^HhT
zk`K@ZpX30mVmHtnFR`F~xsEvPu6H`?5hNDx2i#3wUz5w#<nuOhYfF{d#okGMmHK3W
z234`QuOA&njVd7qU3oQXfORT-0X0ZcCZR9&J<_)eyJ3mKn0x9}Wvu*gTl?YiSmmi-
zx7M~*gu@kWwXG=Co$6;k;m1_UAeyyAldyJQYwGA|noNYliN`no=!z?Tw9&Krtu341
zT7xo`C{vIw1I`AId*NmP312^ng{kUElziN?=B>?J-dgS9Wl?4#HOm6R%j9!Gq*Cs?
zo%r_p^{1qh1816Hag!{aWh|Y8ud75fp$!|peQH4X{J=+8mSqxK8U|<*oK7|YRV_xp
z=8OQi+#*;o`A7&vbiZqDl*`>!Rc^Vwv9(ES)5}~Qk4vVvX-_o_yJ8WWxq^)gA#-Us
z?i_9yDDnIHLp70XS$3o*w8ZZ(nQvbW+DEm=#I;g1Asq>r<Q%+Tq6J0h!#%0^Afz}$
z+ESg&jejy-skUixQ%<2O|C0Ht`hBRXVb~cDmzqPuIIA$*A~Dx+1NA*GHN)cYj}jed
zBhtKAW?s2dy5XZ+>DhQnA$dx8pFe}QZhYn+(sw?>GApe~&alpODeUa|)vGhFrb`Kn
zN?}a2C@1A*XJ%M6dn(y`<{RuQ$y&hhuqk$r@HO&;;miy8HxV%qpDVp58|t<icIEZw
zU1;1|*D%DUg0ofK#@%~N-Bq(ezB(67JqEe+HLgpw%9sJdGNJQoU(UYkuI%0Ph5%ey
zyR#p8Bzt$(nSW4=GbP}EGbE@4f8)grRMx=D&X?yfP+E1#B`Oh4`WtB@cj`1|K%a$t
zY2*|GD&^xAlF`6%YR8BfFj;dtbVXK*3k(w(@6sYf`sH&Zui}HmCdbmMdRvL7zOCL<
z=FTga9;;nxYco`v<KD)OMsJxnSGDGm(nx)YBR1%Dj`_>_B1UbI#cV5UsqnPx3;gEx
zrGDdNQL(qsVks?eE-z~}7I+M8E7^TUyV;zt^OSl^i?EbKv-`*ReoZN1n^tk=Ep@D5
zT{HKmu8TT5c69`YgtyPQm@YcIWNeK;N&a9OP2B4BK4c~4-;k9(l4rRjf=z(^EQp07
zgGNTWhlzF+G_|w|n%X17+yLo522uhX%KtJ?7xVjQFC5a5U-;Cb{2t1W7Sq1Or;uJu
z>)r`yLt0WiU+e1@YyH!Oxw{qm;+WSND<1Z5t7%+a?FdI4k&M=VXlq-KJ?iuZi=Dl(
zkgqpd)gCD;FIiCgppyv@OF(#>bTFTEX&_C6#|O^bhG!u>W0_~*O3ld)-xk&noav`>
zsjs2j0V+oklOwu`?dz+B$IslB=JBtgr1%u&NCIuE9uU@}DEdk=>?$sy$U9Ca-%#EQ
zr{n~yoSOPUIGmPdkXXn~@@#rOH<xI34do6^O|i<WkXw{&lpF10dM+Qyrr`1s{Xx>B
z1Iat7NBByzkv~oM2uU*oN%E_4*$V&C;y#^Xk0$R-_X%<}{WR03Qv+-UMIkZDQ-2jc
zFC53L)=7R29<4M=_h8WpLA7x1)MAnD68VOtT-wZHds_EQ#$uCuTJaf;;<I;mXXozT
zo;{tNdzMyDgyYM@p+;k(ptK13Ctz}ED~nsQLlXxE2KFy4FCX9EKX70o)X;ulWMp4k
z+rE*J1MPj4%j@gLE1bp#jixaesn_PWW3LH$oEBPL3H#z-w%eQ8_o8q*b&%6sUjMHR
zZn^=-E-MBqytXA?x9xv#<^<bjs;R7MwypehbBP)4D`g4xi12l2dkgrY3S)YX&Ieva
zCIR}e4o`YR$?rl;YZj;T*SIqfH})l#$K%TrO+!OXO~b>5%bg*ozusD+%f~+*OGH=J
z)vb(*?^W1cKT5CaFPA#pn*RFwb(-AVd{Cl{Z5HN)d!c*b3DUw#Ogn2q-Ehr`dqr?+
z1>0c^x|I_wZ{o78UcJoV*|scKR?}WB%VnE?J~8ogR=c*fb#3x1GZ)@>--R>84TYfY
zIpIGsW5cqvHoZF@o$`wA@p;M0tqIW^i6aZ=)p>neqDm9cl@w{pOzxIMX+mF)2>Ath
z+QNX%(YEK@#!Oe$7wB{<RhCv&27jeN(~zsl%g)KoDpUnLz9!ZA?KGmDpG7;hBp1M2
z=d~d1XCMc|xioF0>h<1j%W`DZz(o#wGuRsp^#q);f{GlYrr7T<E;Qv;2H57a>s5Jr
z;_-gJNn4YfS01Vi=I2#|2&57tM&ebBgckDB{qe2AsSs{Oq|Z&jtT?X`Ef@7K8}Bu1
z?Jk#Hdv4XNws&x7xXWKv;iOTj!phV*&fm34APg3`o79|I!2E%B9P(*|c=sJ$qNxBs
zbLHoB@UY|={-$ll{7MUqC_CME^_GUNgZE5sy<@`PHta2H&JuL(wz?i`qPNWC$rIEo
zL%KF=!jag!rg{JBn&Be@-Vs}AXmvw@O>4}zS<4KkL(@lRHa)z*b>*F#IyQDVe6AAr
za7SpOGhna;-X0GQC%O+TiLSY3Y|UlOhJqoJfmIiot||$&THB~+m=j|je=TSl8Y)7k
zGWaWk!&rF1eMT=QNLz~s<NDsE>cN$|v7%YL23O{dtuidtZ!|bIs%M{@-adUF{^8@f
z=bmGx?WFI{S+ACu*%r1+nhksV8q~W7IhL?JSXnrOlxx!|7NiXDJlD;qY+=JZ<@$7r
z6M1&>Qb!l%8R03%(kU*~HO5OFPp5=YY8lUSBAwzv9ue{l=@jRDsT<QNW_FUTLR?a%
z><S<(hBljVkK`(06H<<3Qn0GEO85d&u1u#iVNc_4q|1;pHxIc)@;XmBnSq?DWve9L
zLmprw)k)aEJiJiy8d87_o?=1D0M7$#q*H3yFi!zCc#0EwcJfld#(bU;o&s#}6c_3m
z<E4NNo)Si>WjqhC!BafQBSHo?c#3nr6tI!%gqAd?R-w(0b6XTLknahE96Ygm_p&{E
z?z(jB(4nzQ(LLn*3Gzj`H4RB=W*wztV}!fZ)kwcy@Bnwq;D0(Ic>t+R$#*5cVO|ki
zV$Dc-ou>d>s2RI{U?Z(!H=<@3dE(4P<nhH?;Q7wU$<D6H$u5)AX~Ii|Gd)|ku358v
zq`I>+9`Ed|M%$L4fraeKv%GZoE%%2^<IL2mDAFYNQx72JaqIDoe2>xm-9T{DiIsvc
z%KK)l7Ohj$P`|uou*tu>wsDoaq|~IZ9_nbSm<X*P7-;h_V89AQi!+w9^IYdTS<9l$
ztavsuVs3F(8thZ9GP6NzQ#X{hhFpyvtHtUMbg2BENTo?1X*8HHEz-oDrRFM!t*k&*
z;dI5pz_`T^t=@^g$;rQgtN*~c;)*662GCtOq>%YMj~~6Vw)Rv0i~8T6i2waJon!>^
zmX4qtRv6~bXmQ<&Fasn4GTzDOHpg4EUX!WRX|!2Fns+~`$TMX{`<AK(BPN5>SW;pr
z{o=~FRN7uw3sK4Mf?#97KsHI5gd^iTpEqRFx`KP@fd$1Eti^JdPFoxpoLDsxsMZA3
zrA1`{xvQeO)z$P^almCNjy=C~YHF7`zb!Yvy2{a3?QL>V55jm`h90OO$KWX^{fr<K
z7s-s}jz^g%SWzfzSiLf`qPBX&)>hIYp7hw5unJg_p{VpkG(E=R?q2VLkzwElhnJM`
z^Q~j$7L$Fbx^~cMDDjU~nT&-6Mthdt>MwCvRV^V$G+$O&W)0WWgo}e}SwYktYW;`N
ztko42=nT)7XbpO`!J#XmF+)q{ailH6Et}`~#1m;BRhsrLk2sBTmtI?JDND>FsIs~h
zUXP*i8I}uYyVI0>9T>_f;282Xx(H>2rKZ&V;IyBf@2R-8tg^Cf(1Cv|S}$9%{Ib^4
zhJ$Tw2kA~*C(68@F5_M7skm^6@(-0&RIDg%q}(9Z%a*UW3}yV-^Z#kdzH|M*v+3PN
zS*~J>$73nxBWFupBKZvRf?~P<cacL*5z~8oOlCq}hr8vngvwQHD=|C56*c_6Ftg+z
zkh`Zu3Ca{CK^d-S7p@m2C{M8<Wq{`)eL{IGC^gJeNS{!O6M1&>Qlw8Zc}92&=@UwE
zq0|^JMf!wN!YH+j=OKMUDV}-Aq)#ZtIbVwO38geiPD_4+2z{bv5c8atyv|cdGf;|O
zl9YU!9YUU)(kV8{6_U^Jl$+BjC2R+47G8n3?9-5txQP<KC;9Iu`J6KS9Qy>od3?J(
z&DIw!HHh~qCt#0Y8-cFqvQT3A8o^*J3K`w@9&dBkXpXEfq{uhqRe9NtdS9$ITW8SZ
zwHFzC`(AJq8VA*?guFz9rAhdYQTIk^CoD4jL|tCk448k-OO5#pO|bCvLp@kAYiL%c
zEjQG6dYc*$s=#8lnAi@T-pSthL|CJn?5i0HjD)I!{^BFFP{{ih<ac(Zd-8E+rsBEI
zsfs1#o>*RGjzMknd2KpNPN1L$E2$&#0lz-4H9IHl_eIp%ZF$%R1C4@KFI&`V@`Zu(
z4VX%3_+8Tp+Q%z8!|rM7^*7tizI^%Y(kwv}lv?yA2s|6xF}*a}>(>^<wj`@cHHMLr
zD|BUnNQmImh_s{ChBQ{Vvkeu{G=-n1B)_6J!kznHsOT>bb_Z~GmHcHzs1zY)EX^Bs
z8Lb8f+Y#uG$NJ04y90(ox3#E2t9{+*p|b+{Y>(uObc{~b(0pXky{GWRaCu)}UT&-o
z6**Pfe66dtmhJh+5?L;^i9+5hkLC~kgXEw=@*bN)D}$H;c9M)nGet3&7KXqHb{#oM
zNs+0`U2+joLc*AxpMY`M=;S#d9`C9h3gv0sg%)qK%ckEK$sUMfvLRRKEwQHNb%R=?
zQHz(Q)K_WGHRNi%?|FlMgDlHZ<TlE3%Zq(+OLkv@u_i9a<k?xO9A7Zn#wyJwGya*(
zf6x~gnN*!$s09`Ru<BM|6pQ#wAVYJy%wb1eU{<M#*{dsO)#iLNPzDlfD75u9eEmhM
zO_TovlE1*?Ez$|#BA>$`e-UUw>|$UxYPQ3{WVfSeZ}KU&+iEaa=_L_TKZaNOHk2$N
zy$Q@g!|Ta82A>CXnaFe^7>nMLTPV-VD$1MH#|&wRAIPQsOll}*{mG}@jc#^k9(1~2
zJJ2uaGt9SeUMxa$TP6A<TfKAd;hnu?1iz8|=+N~qUR*XzTmmkXJdYA;lt2%t5oxEw
zHF5u}23Jq3vO$wgQMN95s)VsVnOv*~cLBUYtCBRY6ZZmR7Y4OEjYZ}BXJ9N#C<-|o
zp}eB7BN3U^7<IOdg$BKqkW*G<E3xPuB5G}K1HZPn#dcwYP=h!^nS0L`jnHVeP{fBQ
z&s@NVh(IkKp|ot{o&f6GB2EGaEh55a1HGY8Z=kFv6zVA}DK0K4u~^s+e}6pD9|-g(
zFq<3+`}~oJ-v@I6a!c|@wh=8Wq;sJ(uNHexh6vxt58)^pK{|b4R4LU&O(d~gWgbO1
zEw%p0-f(D4Twpm{r{7p4vxqJWIPArE<!(}JrQnFHGUXR33zga&tyfJ5taX&i5wBTh
zwquEg_<IL40Rn6~lBwi(CC|XQF4y#hJIC!E=JE=!*N4sDowdFieW(x{aQ!Bo&(g(q
zn6xc+vs#mr7xahf%mt0A0%LxDj?(D1hTzu4?m5uTKcsrHt%-JG5GSzv$Yz}POg+*V
zFAu9G`uh!qS^3IBwVUneslB9Mwsh(6#l=Qk{3OG&H`c(>>Itl+KyY(NI8cLzV~I(W
zsV5TQjrkT!@$6`>pos!R{p+8%me}4-J{2e|rSe(8#7dOUMtN-G<K7kN?(G|W#e&(t
zb{pa8)P@bGl20LT0e<}t^1{zOpEq5?iQQ33<(iR=CHc}q&!|r;Eht$vu&<;*C@3Zv
zC)cezNw4HnhgPgOl&*ISurz>`z|K8hF|i!M$(mig!%{3O(r;b8VS7ob%w%MH9=;<Q
z4o4rpBNB~9sJ!GOwjAZnizNXMuYs*hpex`LAvQ+y4Y`F`IdVg>LVoFNc~*{6CRZuk
zYj>KOKaxuOaYtF9nl)WxDl;2H#%q#KH}Q1~6I$#|;{+x>mg_M8FkQ3v@7Ek<d#b-M
zj6bx1`qeJ&7xlqBk1Tj&47w{qwNNq@?S_cjW3al)p%G3yyW^n-tHab%Xv8=~-QNUX
z0H2a~vB!|^t%X-0V!&dsQnxOD-G%GkTKCdRtm-8?EuzEfp_mJ68WH6_JQJU!j!M2L
z`7wK$Xh0fEh#CWS2GkwdcCicpo3Ub}TC21b_-$paOu25k(NUNvQ_4DX@)Ip|2U`}j
z(hB%=jYR!iC&ejJ$pR|*5(8&_a=z$_o~WwRX=gVEaOg>@$W!>&uG8vjD|7M;(wyA)
z;z3iel&P-NISjD5uS|YuFE<6_P5CNgKyOuBsK=n%R`41>A)b~ni3pVcqKz4-ErAei
z_f|DqrP7yGjc$j_(q!#k7VHWd?XnAD!Ibv|z+<hXqo)U>17(9&yV(usUUm#oW*`06
z^6P0|i`U!Y^V7TE>ULX8JRWw;-4Y12xW)HQzrED&FSYwgeicbZv5T?^(hEPaszj<A
zYfF&bw7A5ll~`fo!Ym`oXznuA)8Mez_jFXoqu~yGFDz*2=`=*m@rw1XaM*>{Xm4Yv
zr76_d+i5a&_BNI`+Y^Sy-Y%8OI1noj#^b^A80YoWjfg?^8`?i&m_M(L%S-vv5U5n#
z#K$ctabZaJR&cem+0)?~_SCo6dqz4}S9X{5TEeARN~DCr{_X4J-qN+j)(*3~)Ddhd
z?_I6lxLz5wjhReVhtX~=4YgEuZ`90!{wmRgKVZ*E8E90Tp<^usgO<?_izuJ$7mf~{
zT~}G&z}UKWg)%#_y0LoHF{JSreHBXC$xCrN8|;deMME)Vo^o7Xg!46%;edBYrwdgU
zx(Zj~44o@#kzI_sp_Q>G<p7UT0AWd|n$O=fOycv!TW+~!|J)}dDpQ^;&zKiJIk*4T
zTW_7~Oms5$5qoPX{*EMnfS+^3QCJ^RqDNKaWrP(SOL(HOXcQcu5KYsx`T*b}+;>*Q
z?J`JL&RT4E`Wi!HoUwSL;n=$J@zN2k-&|Isdh^HZsnhD3KuJ(L?3z?vxU)m1R4J8t
zigx+V{XP$DvBsKSd9GZUuk1_I7Mqs@fmi{jpx<J@#+rtiECYFZ`xxyM;DhSL6?eqX
zN}Uwzw3t9J?dsjts~d;CP5L&gMd!+|EADXI;&!@R{#ALGZ|j<E%~?GqD>1AvN|PVR
zw5lmniF_5CEN{vGM?o{uk~MWFdmnp6;n5X65V!|7K|L3Ds%N~)O74+V3%eRjML5ZA
zEGblI`g-%^s>!w5Xnt|FKHuS#DK}n-0B!v<`P*bN#taQLH?CKdZC{<M+%C;3b0)UD
zP`?`Pb}6EP--uEC4RlQv`6`*ip_J+ki0&d47d9cYm0{XhV!#)%-%_#L@QGq~s**ad
zRj@I6j=U=05SHbf%I_SzWTPsq!kw;JYNaZyHdkqf^VF3A`-pQqj0ZVI*?Imvm9GU}
z#N_&1IW}#uGY1biKDq1KhqSY6K$@S(bs2~9RmpAHfhE2Q+1j;&RM^ZO33gl907Znz
z&^<nh?m3Ro7*6|{IgCgs^CUuqg0TYedux^Jdi7GJY@}8yUCaRN_G7rf@`_6pZm@u+
zwX8#q@KqfOwR(XE(91p~_ErSI19IR`BB;OvQuvOY*!u=P)EXjQDH#v^1$zqgLR>&E
zIxC!rc;S-ADhXbv@+>Z_v~+e}JygHB1OM>(1zDcut_rpLCbz6YP+xM%nLoZ8Ra8b5
zzr(-U%G!6|eRtcT+RDmG)Je4~QM(p1T=HGxR0F6Jvn%Q=yz)++Mh95{4>pPImd3`@
z)zi({b+y?os}lA-*%cm>$y1rNhh4l>eqU)<!^)ao_jd$ax5x3m4=P8NdJpg&ymuCG
zfEU!EMBk*S1$zKUC*qxs21x0@Hv&@SCWF(!6xsUhXB=(yj>`&M#vNvN!5&+p!FJM8
zVrr1($}Ga0GKEkqWA7e2mMmhfn2cGIKmW^LSV{8dwaK@cEBW@uxj<kJFZ8hmt&j`X
z!Dr#2Q?Q~YgnXx2YR3JF=s=_cy$iEd+VuUio@G@_eD*S(?8J$EJw5BPrP_o5h2pRT
zU32XCuC*(xhsv}?ZTY=bRqcx8c9+hy+O@-6=BX(EZf`FzFpps?dLJa2B;q)YXD)k4
z2oXa<#W;1^XcR*niATLaJmH<A9f<F{$k0~JSaq9zPp|!AcHjWJc-ELOnG&W=Y(-Qa
zipnpo?W~2&m1WCo+grcG?$63ol*_XZx?Jx=v0?WF^vv(Ur|@K?<5kQHBB*FmX=Gsn
z9~uxj6Pnjm?_0aZ+f_2G50y5xb~Kd~c6_a2VEcyLp=+kEd8lZ1z0zkJ(wjc9e&e>h
z{d<$&N#t)3r7vz)z6yJ-NcuvRqNilIi67!bcitQjdyRK{+PvYLgq)kV$?AHwxt6>W
zy^rP>+HJ*E=1#|W!^+KBtvl7Wf=7}cX63j%O<fJX9jf(9jT$hRIj3EbSE4B{HJJuI
z6_ev7=3ccaw=c)2E_T<g^7tT&MLG2ok<v2}J2(nR$3YgOa+1Ubgg0Zh_D%J5n>vO^
zYKHTQH7@H&<M{nc17+LSWe;Ardg|Jxs_B*4ZG&o^EV)AEUec4lfj#nom))w}M40Zt
z+c!b=@O~3FrDY3t<zTgwa~4ECY~qfVRYgzqZpx_*wXo~2sLbo?R5n*UeBbd`F6wGm
z*o+tTI+}YMhIK!Cg<#53zh{2}OqlnE82rin716;$;V;_H9;KNxrd=!QEaUi_yV`OO
z{xByN_Q|AgseV=37E0jtwZq+Q<B9IpiTh-ZYNuSCTby5<b@egSK~sm{qYlhpA~7W-
z0lmaE+Jp}E;Pv7T{JWjKaXWop)-X~ZuODuBa?6$-_`uituYuL(;bd_?GRYL$puo`m
z7jN%lSKOX_gT29?=uq?}mk3p06U2~0&Hsg(jie`ebQ6+&i&x4?_$|bRXvDt<n>IDJ
z%r;oR^d(a$77Lk<x68xra^~}lw6u)4t9p;KvFcE)5+`1l!Z(b_SyYRXMcBh^W@++H
zm2mHwN%;ISPvHanA^8B${Y`5o(q@$Q%C12xae7DgLv|3hJyx9H&n2%Ra>%}l93I(E
z#B}K_Pe&{dM5CvY*QS1!F1e29ILbaVpTl`hj-@=ub?m!5hY>L7<~gtI`qY^;3@ojn
z_M_}`^DwOEz!>B?u4k|F93_Ae;5n{CfFrR7m!@<4_dE>S$HF+a2u9h*!Z^l67+9x~
ziaEGPnB!?LuO*WMK6>dmhrvC>JjXp^4na2G4!X~7F~*kj9LL$0cn+#X#2EJ}FRJA@
zdt)Ak`y3b|K2D_jLgR8S#>84~NavthM2wx=mm3!KR?Km3J2E+}fT8E@IFWicjdl12
zF>*JsFVDC1+|d`?apOW?WScpRA2NEffR}687dWhIq`4dxQK{IT1u7M>e?7Gr-0hG|
z!#0f5Y62JYX{+K}k3F{avB##LnSBO-JRi36yw5HnZox?sorAr`^y048O36-~6LE3~
z;{H3n`EFm&v12{QkMsAPy~j`Vp1|Mn-V=b}ko2I=K78Z%m=nDDRVzrU#XdsR^D9S1
zg~J&NIn$q1@9Sj_M;X1?Y~~v{?msbSUd`?UF71*FB!5GSLvlA-{YR{cekj?6HPH`o
zn<n*n7WG$>AH?mBxphjV&R}5gC!_4O$F92SvDwdT_{_fA3Rwm1E?ks10mn_u>y62E
z4$8(}n-z2I`^*NCZ_uD=sCj3>Mejt|r?0#2G}UqIvHi#Pg&Z<RDES^xcuvWMT1YfH
zs1SRN7Zc0uJGMXhJ;HpZ9E}~ktBXeuu{(9*2qu5QUc3G3*#{n&z4~?(!df2IXMcqK
zcIZ2zjU&no`C!7g?Y?bas9aVa!qe-MyAEG<)nVRuA9}Qvd<`^Rp#2MolE!BVP|nI|
z*YdfZx0$Ycx|_Zvf7k8Xzwxq-`}rHuOo`+J_9u2Pc}?87WjZtCw_^7eH}%<+t-|fn
zdF@NwOWgdc&RMX;-S>gPYN)NNuE2-27@s6fOC%RV(-{SiT%eJ}yEu}dUQneRHQ;;`
z0tQ}|ypz2Kx=sFsW+86LC$LY!!gv2gsTHv0xu=9CvSjLsUP;oA3WT^6S8-tT%!j+g
z)I?}&TvZ`6k5pIomv35HGh~r@rt4$lk@)iD8e61DpRhWeh@&2;j0NqjCAP*-)HFD1
zt41o;Y)!bswbA9Z-5X*@TvmGkd-+4K;DZsrKTt>GhZ}?h4fvR!*-41rz|8t&dZulN
zVwOsV*t~V5P&{2>^|Tb|!<ImzA+{oxSl!ec3)huI3{Acj(OtW`Fa2U!uwhB5Ihy=O
z<+6s3jWrFJU5qU=7*;yHw_JJAf3Bvn38dDrEm8wftpQj`d)E=}VPTphntvQOYYS~z
z>a4;XFV+@HMg}ycS@|jheiW7r-7c4IX41y4{*$Lhx^}e4g)Oqit|cc=jdt#AK|L1i
z7#+op5ui}H6c$P*dLJx&rn|Y<{ODRmu1qG)l6`8;_lDSQwvMjk_lp8W_!I8_=wfOq
z_B9B3umZqUhL~0g(zfeh-(cs%8!xl}O8)GD|6~n&CzyjdCoY!#<L}&uFoZI@Q3gIX
z?1Mz~3cCguGt8wVdxbxp$rCO-163p7_KiQ|w9qTy1s}LUm)REz9~B%sgm7B-0hNF{
zl-v;JRQo@{GMz?ijkj+t$Tj9AELHl=!@bK^ZwuK<DhgxvG4`8F{L7*?YvjzUy*)~G
z)`|kF`pru&T0S&6H)yOXD=t`G!o2{Y)L(=@2{%bfX?=ZR=M#kivSX16(_g;gK}R;3
zJ&Y5o<ew%=P~aiEq36;yiNu;qdwLJAPMrCIOfL0*qPcyKKU#HT@^$t(xm*_5(b&Ax
zpPd_>+~3)`pEf-1@647xt;mswV)c=_Zni@Hj51dijKs=wRZq}*g+BFrp+(3h*&t^z
zW>5mv1{O^ImgzfgW*d^X-mGD{GL}1d#jY!8WW1?g39W*L@*6ZtFN`RqSM!f61}T$j
z=yEgLaB~OKCx6><bMjWo?*shNG<+`|xbr5Mjx}`NoV<;#zqym?H3WGu`4_1Dv!Kga
zf;PkA%2k}{`ODxH7hOJ-{Ii+qJ8x#|legX6nfxvCm#1EaMfMhHC>rx}skUCK{pdYB
zF{K`pjtRe`C-Q88J)K;`ZfBnwqPOH)q}ozXN(Y2rLC!fPk#ol4f8S%unS(t&e$$S|
z#vM0}kDsK^lj9RdM@EiLOdK5@Jv!02p}u}YW8?bz`t^Nv+iqUD;^u92_*}6PpUZ|%
z%*>n^8lv~%WeuC!S~oQ`Y-(-WTo3BZ^hYk@7a^#WZo9@_J}P{^=geMV=b01r!mB-J
znnzoOorJFn^uH0kge)|~Fc!KBcBPCRsTZW~kA5H!y)Wd*%H(m|rDC=-H?TK;oz6SM
z{>1V56=3bV9G(W?SUHDOE6q<HkYOVawJ?)|;PE^Ow_D6M&HkFq&g8xGonMPBd<-po
ziy#7=6SsOba!|rs!bd-ly3=jU<N-`Em)x$+WZaRgdMA^6CYi^__A3~5-b$tcNQPe=
z*mpnr1MffDX+k^2JOq>HQp)A&jMK?%_E#a3`_5m#LzwDKeJK1;xCbrew4K3yZ=cZJ
za^@XG!<OU-TU*ZD-d8JNQG(}}`laQV*}z|7&?M}T9pu8}LxxY9N<zf)#R_|GAA8kO
zQ@ld!(Q;tXNyoLtEfv#_sv=p*XjO8WV0$~PgM~iBnJ4;c*)K-EexRWLP<umSXZ70W
zXh*d&^)AlVJjVBRWI*%N^@8#~TW@UI+hCHp)*onJvHqF*qNUgOHZ&Y+-221lI|f!I
zzxh3mwO>H<JVo;=NdI}6uZiGXf#}VJ^dpIb#nx*qQG5A7MNz48K%usny5d%CRhFVA
zwzas>V|CTLlyX6qtI=sHr|Sbl<|0GD5**efKe>7X@DfdZh?rS);t%rQAceuf{W;v|
zFuZy9-Fxr8yHOS|FOSn(4z}uyB~K?$AJ{iDvkxz#nX_(3F)X?rg<bM6*#&sceo1H9
z<j`b@E8~#7$L-n}ZdLg{(jiK41}>r9U!lKI%dU9%5++7|Ov4ovR1R>=LMhIu{0$KH
zOO{LRNXbRYr+LbH$t+KqK!m_CX)W^9VZS<+`W{lg%TpTDDXWAkoUMBYd0OUET987J
zv4@_wEng^>9D&aT@`zS<bc)^ZTD|@{;3<S577`vo-VO;wCQ_<VLku-2<c+)WJN2|s
zFL{FhuA|?Q{Nx`cM^ZT7CcmJUexHAL$!ej7eH~|9l=4iBhs#jQLt-uIHf}>LFA2X!
zo}P5djY5>&DwQE+G@Wvj5EBGx9#WR3Q@#Yqn}ly8r9Yi=e@er41LsQlb_Ra|+Vf;8
zgpm-CvXk<FLtLpp309nlq}_&M<hL%#sAQF7i)4@Fa>;Snn&cr$>s{}n?~BuE{WFti
z@qFR`Cw(#e#r19~Fd7TAMnh$R$yA^<8MD&AYYWU~+(Km3ra#Bi=|$<!aWUOcl>V&K
zn9UlE$&giOG8Jk}#`5&<83UFZ=(WuNt*<ZA8MYaVutPv!WK4d?fZt>buuBXuo%DLG
zA-Qor?Qvrf6+ph(`Lu%u001CE^1J85#WP}W3=K=QfRY+PNuWY0R<?4UTzjif|Ebka
z(X&zE0m%}nINPIVPY*mSJg{dKO?y*U3T2YG)RZX~95`+l%HA~6euUH)0rMphCfz@j
z(|zk&p}zYmvN%&u0OlhiOkQ8>!vn$tz1OdzXRiY00TCvZ3$Ae-7s?9XHqx^mp-S>J
zaTMAK->?!BmZ!JgytVqE?4Ypz^2?)>lay;5^!$*tjpxF?O3JpmdBvS8nrCIgBi<c5
zyknHBRcMgBh?{*tiCR7*;btBkCV@i^0=w1dwwYA<8tJ6aT+6?gDDYKi(3-X85_x|g
zJ`?yLShd0v66im^LJk?aV57rh%B6pov&yAW7fDyix}vU1cLD#}DLhe9qPHlQwDXU?
z4nW!}3`tI+{WKCVZ%^XD<IvO;)v-zVrsR{-ip-NwLO6UA2R$JN(q$mOI*89QIq{pk
z2`mL!C3z4W4Xar*Z{JfFmyQTya-YxVmyHR-LjB5Cb!kOKsk(I~l|l?u$!XyynNkRk
zLVbY+IzA>`AQ($aP3!^znU?njg26x^oDVEDh4Z=hNQW|I#F+%u)H|XaQU)B306s>9
z&vmw`ZBD06-G&CT)Bs9-7UPv}-$G3@gVKuy6ZWmKi=~6Y=LYJn4u`dVfXX}~)JR4l
zZ{VvypXT}B9SXVe5^4fYXMkRm_hH1cTZ;Wd=jN@fbh|4ng%>hz188sD09GS;lAi(u
zV=R^?kwvv^v-$nDQm^+}o6lz}_4$Mvzs>6RTPa!m<dB}1JSi2U>;F?oJ8WLB4X>Bd
zpXW!_NBi#=swJzz5!i7gP3vM{mgcEtDy`WS%w99(Z4#<$W%&h#I_V0bHRcE!c)7<V
zGt%Avw47#YiKj_;yjGT%r`AZpTRti$q%Ibsk}DwZ`5y4a*j>B_sHLr~g<d4U@Did8
zWx@LTU|B=LqSssK1xUv*vKN5Q|5r$nrlv@^xjC#cnIIBP!snp>V=)*435YZjhDJa-
zB*Y}|LgVng5+pNl+R_m1pIF<8mk@J489a>_jo?1mGJlosJ3D7n_xh>Up7qnhQ;xf$
z$MGV%=n+~VO`weluL<l#F(~`EEUDfqw2&}~UXEPj!i$h5V~cYQktmsMULm}=-8VMo
z+m2d`(7sF0ZQr47YbQ3~CB#k#pLF6y?aM~{t~$4U2lr2}zi|K5df}<#(YqXYQTtF1
ze9JkI#+`f=FdiXXmV#Z!$A^V6nIGIM#K5t{yI8P8sVTs}2m4dNO=p)H1?%<BGotVm
zxR3bI0i%bdo)>y0F{zboGpPgY1g6dG78hD8Bl>EEAlH@Jgx--rhqhejWfr3ayCYL~
zfHqf1HGDVRS@&+0xtqO1YqHDSX01>yH3S{udg+K%S6GlwGrH8*gic9|)XeMi#xq;5
zBVkargDO+#Y&LysrO=tFYb4N4vMtREkZr?Uwmq0kN!F%brO~0?nY0qB+q!iinQHB7
z{W|LT6rN9r&!uU9=GuX+Ta&4;BLkj4C^Sme3g4l52rrM)&kBu$T{q*|hwNd=6Y$A^
z@6Nd;jpbV1If`w$+NxppaGj#msj=o(6oiW_8f++c59(}6y+tEnP>^gg=sdJ~mS`gU
zyRBCD8CgR`MT0!fiuL+pM)<fXWsz(V+o?>S_t?@t(EiJ=+1W1s95A<}9_3U>{lsF2
zxBbobWNK4q=O!x8pT9~nj#h><E5hD(06{KvR_yOhsTRPwnzRV&(QSG2r7pVtC-q3m
zDj7{ZBfx%>NIv={Qu<OJSZq%sWe_RvA?4zfRB}b?+ejHj${VQlcuFH#m3obON<I>r
zC5Vz~LvCHr>L?y+*!cT8saB&dl*W}lccdy)26iDRZN3aG`(xy(lr2;_UhMHuxguS@
zPO+vX+fj;w|6e8VNQETeQXcz+%W>#23`klzX9pXDrje+*Ag54i)7E_}RPJfk2FelE
zTh^LiNHyP<vP*WOJiMQnBN2N*4=w;uSGHAJR#<Eng5c2B{kW>!-=)=87_{1Kd2fCZ
zAbc6Nc^zzX((5ou>J*z5$v=MM8+dX!<&qpueU?U+7L+MQ^I<0G+5YyiV_jXqdQZwG
zc{=qbus#8-{|G4)DTCxe*jKR7k@5qcl8uxnkOI~H(RYy2nktdJnEDb@+K}=Sq-;&K
zOHQWlLJF*ekN%9Bt&)c%KVySrwIt5*$&$|A<!*=s^)Py*HDOOfxLjXMUmwz%w2{L0
zHdsGVd=PfN0NR@p>0KGq6BQ_9aT?DiqIJ;xnS@B_aXFDa?{ffsen#vwk4>#R+_Sys
zP4pOxB?54gjpr|lGMupD#gZSe^7QuYe|_@FIM&Tssy&q}c|P?7?Fm+T7W}tLCHIkL
zHq|P0&#~<mAL1kU%{4LBSESWxIyHK&_IG!fVOR_f<y6>gM!nu>vsLhs7D^=R;r}5%
zTC{=@31csI`cEjS%KWH`5bvZdNysFi1HaSOAbz*=-)UKg-!O1-8%~>$kh~zZqYl32
zvDnHWttL{K=xaP;u-gqryZu0mYhyV+jrc8e+stOG)oiwD)Nkuv&itU(e>LTkT!>pd
zH6oqH&Z5$ILwGaxUKPj?$Un#Wy^dN(u3o8CGd3t!NLVr<7}+cE$bc_dM%$31UZF@%
zc{cub@7~{T^t8;KXllG+PB6ALH8eD}xdVlTbl(xmKEYnW9Y0F>73krAppQ#&d)mX&
z3qG!ow0Cat+-w`aTgd5LUOg}%q`wPwE|b~iGMik-Tt}kGGnrq2Jcb)uPfP#s&mb>e
zJ=#IH6#?R8)2c~b`UWH6d6(JjbehesgWelzKFa){arqZ*UOX<DHutR?7^pwL%@;+F
ze0ILc|GLeKA!pjW<l@Oy)#tbQP|XeZE^hO`prynjt2IMQt9mv%N6x3E@9N%`F3?g2
z8(rA_SV}t&F=A)WYe+;aM)qO@xvjL!UYMtqH_O8wd%#{;oZT#oyqU(+OBsB9U61>8
zmDSaHy;qs2IgvqF=5u~TYCdkPy^sovtIv!`EAx3X70eUS=Q=t*HxG7xJSc9~c^r5y
z+{}2iv5@b);W*vVaeDD+h!nI5a!pI#zl>G6xSfm9R6AL@PPVRc^3&&H=BJavmX_e;
z{h2mrK8Z?2`p1p5|6UzUlXcUw>AJ~B)4cGdbSI?a8@xR|-VL{A+MoF(`MXJoGo93r
zIz&0h=g`ErvlUajrYbhbK3hFFAjHW;Zczpg!BH-xHVTh0COve1nd!O}m#nCpl-(L!
zSB3fax^>=eAv|7>GRa>Ham;DYsRu5)`FbARG%%W}XHWDH)g#61_?C0)p)#3zZeCxx
zI#W-79h4^Tk0dD#qivY&V^q@pS!}T=GF`hqM_pj?s7G2#qv@LS!ZKB!x<J|}4LD0Z
zTCuM<6Lb^cL3d{0(W$xx3n<f?>vGkF7Ej)2b6dJi$_i;NL8}+a?Llv*b)S@W0-9+7
z8aNmH1`7#_0EP;<Ez`jIVs~-AA*)R_fS`YB`hs?jjYX@cbvlo72Y*Yq@fPWq02RB8
zGHslPx&T&@X=$UyhwCsDozlucu{Zq<ZJwO;Hm%U>Jy|tzFlu&99I&}ZLAnceA2iL`
zJ_Q;H_!asT<z>O3qE8s^Z=OPS%uig=s0%ZdL&2jh)N9dK@WX!w0~3|*EKKGrl-<ga
zn(kGT+-pE<)R?zyt+=L!VEkX&v1-@E)LHG=+j8{(+K!bMPOdtu9fxYJS!l;T^aZ#+
z7axnM;w;SU%T^bbc-5nAor~LbFd|?+ULYNkM$4)=eTbO)#=nMs7S1-S)Y@XuF$j<R
zEosbcOH*HiG(&ys;OF@dX$PR&&ue>z1{YDwK$pB*?)LfI@@`pokw}Vtiin?RQJ;-(
zLVbI=N^7@kRpsr+h!|_*I-Og|>1HkF(w~xk{ok#tw_nkv@cR8;eDte7jyzv%46F2*
zDXPMaH-I|RG+IqGx(i;6>!qz{^C;+_W+-XHe_3>7*GP0+CbZOL#k1^gPbog?gs6S_
za(lyctxu!1ShN~nEueJ?<&rzO4+awg=~**fIt0*MQtcWT!J?c_UGLb_B{azmL1!=_
zj0lDK1!`&i+Xigb5>gF-a??M70>0^8fO1*q9{agamVDRnHbGe@L@;9HWy6SJ8?`uH
zr}>EC<M`WI+0i<Z=PuUdVXGraj?8fJZ$bo@L|YxwI%#gUGF#Y1BUXbEqj%KRh!)>9
z-{P|*oPvziIh9&h>QRmixDwwSaqJeFYNhIe{6cg*0R$Kf1#go_iJ;v4??HL4b5H4c
zP^jYz{nqk+e++HT&nNk8vi4(odu28W_q@@T4&lwkJ-w$wK<{&b1&7t`L4?3iYC!s|
z@T?>zX_oX##;_)_mfO_a)riSR#;$^Ip2F%9gXnN_li#3-FA8L!^Ii0nyk_F{rFsg%
z3yT^f<<@})p)H&a4WEb7SEn0*zmL;%`#0z2Zr;CgxOYY1RA6P#@JcZO2kd%QB4x#p
z(-U%6SZYE&R!fDzLY|Pt+T(UvE%=uF;i*%fEgz^{Id%W4>8@4Ho0^o$rcKSOx~5m%
zKee)QpuA;sgHqYBxn*m4mD^jY_XryIwA*0wx!pdS!F}e{s&bFM)Vu3`P#Sgw|5^G)
z;b!m<>;O5#GCi~FXfKkmE&2K6-`P^u%#_JzS*J>f>^SrK4!rLGdq|2>A4)$hoP<{;
zhcqtjAh2s_#aby}G^t|6$-l8I;kq+l#0}$ZPqD(@-Mf2tT}1B}<*-2+>pQb%8+-XD
zpYPeTr)Te8df!8>(xkp9%}0c(Y(5{ywrtvM;KU`KIKGJ$0Yl`Qw>#KD89V5>J^8a2
z4+%e#{YW^}$VLX)>f{}R$w$Z8sO+2Hlwn120%y%%fwz~uKVF6{3-=GQ8dfv-TQ)Y#
poXH;!{|K`ix&=%K!`JK~x&tm;Y$;#Q!p=*9&NXJzy_7DI{67TR<+%U=

literal 0
HcmV?d00001

diff --git a/web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zAkA.ttf b/web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zAkA.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..e9008d329ffbfe310a5f97643065058b2c380d48
GIT binary patch
literal 167276
zcmcG%1$b4*);~P5_sPjQ5hMf)A%x%%j>QNBVh0j}yEG6Z1Y(U~#a&xUg;K@qF4Wy!
zX-nOp-rfq;OTOQlnM2e2w(oQAcmFSW)><>ON7k%avu0+U*&D_gW07n%lWhFRy!_yv
z0ek$6SxJmZ-^lUfCKauCVL4-WZf5MR(vg#<<fLDE;BLnH?PaX@MdKz7_MNfh)dI%&
zbks7ptfr(swf_Ex8C&-%V}V;LtC!Au`9SPR#?Snc@vf`qSCo`@-4OpY@+TmF>U<=)
zHoBK0{5v3NeofPobG<Kq%UHW78H;_Rx~{CGVe`N-jD?|ocWq6{l6w1j_8aoP4M?ah
zsi~N7q9z9Q-N~3(P+!;B6zI72LB__XGv?pJ&^P-Iwv9!wY8FPZR{t#Y7%B3NQ{OP=
zyy#TssZ3}6zvQ9PR7$uv%zU@#p*hh*e`H*KO0~Rk#@^jT-<dZ!6=hF2>*dXeN+u{3
z|0MsB4`en9Zxtk+(VFsN=Hm%er6r{$g|Ox_@e}0-sDIgcIpYvWXlW5&w>XGH-Zp{p
zE9fDAUz|_RRBk7mM}4ruk@7gtGGWg8^B5BrEQ&i!Sh7*<eiOD@<*`{gn`zP=tTzjo
za1=s}&1X&ct7k*lVEi?*GS<MV5N|>_8BhhuCbK%ER^s_M7Gy<i65`EBDPt7~m#|vo
z8;^J$8-%A-$Vs(M#nT2=LmhG?Fdypipv@GPiRX35Q3hPg7U7v!Jxd1lunat}L9Gi>
zo^s6tT>{WGq#$Q1>PSJp)IZgk&GJ|dIL!Pv`O9QfVjRlkvx%s`5`C&hyA6LTpK!W|
z38s$;t@?Pi;>x4=PC)O8M~bB*lnuGpu~NnPB(@ZiXhOIKG=UYM-_-jCNSbhodRC4n
zeg9=d7Bl)wMvhQz$*N=xMx!4ah!Tq-@g|f?P`zkG8x4?Y1@b3gv`E5D2#rMzHN;Co
zr`G*T=#09dc7O!{hM6Q-w4G_sW!zqAuLa&{Zv@_KZwB6KZwEfxJ{x$ay%Ttsy$kq!
z`+VRF?F)e~vM&O@*uEI}Qu|Wi%k9g7_u7ZijsR~0qsQ53$dR)#_!Ho6EW)+mmO~=-
zNLhwI!Op@TXIt^dG0V3h<#u)i;rsB%q3!o0<u&|qb{v14eThHLzQUj2oD0TzXWj+4
zEANVwI39;^AKnMyp?ny^S(sIV=kt8vQG68eG*~*pXY!eNTEa^ZuH=;nZ{VANckms+
zXY;d>eg$T%;D<SS#gA}s#qZ<y13$nYK>ADkRfLa<M8-u=(US?$TcBOhR}4VPKrxV6
z!XrGuKH&onhyd^qF$8$17z#XG3<u5?xxk|YcoU<=Xy7qo3~HDlCIC+olYpm)DZsPD
zEZ{T58NhP|#!r-sa^PxFjZ$@@4!BXG202Ee202cS1D+vgFiXyovw%xv32?bA2X2rJ
zc-kzRffvgqz{}(^;N@~T@M^glc!S&kyjgAm-XS3wd5%06_(BOikQYhlfjl4&0pB2R
z1inMU+R8iSoxu0Vdw}nkkeGZ(J_P)Td=&U``8e>C@=4%l<+H#q$(Mj%l^A9DrhF6l
zE%^@chw?+<Z{@eZzslcWC&MhP0oJ|Ny}*xHk1)#~Vh@4lW!meQRC+9x9!sUiQt7c&
zdMuS5OQpwB>9JILER`NhrN>g~u~d4jZFw^0&IGoO-2x5#68aY4qoF^|{2YEce}R7|
zl0=@^B(4+RN-q1zT)9GCgPy%>b+N`<tE^kC&+G_$1!}$8zRiBlKJMt?NOM#<E_b}*
z_&&@RHZ5#v*acxPg#GI5>m24Ra87ZSIBT3sog19zIxllx?Y!Ojkn=g`o6b+1{|M*d
zk>Q=gdxd+$v%{B%-yQyV_&4Fdxx!pIuCcC}u6eEo*Gkt`*M+YAt{Yr;yB>Ev?>go>
z?)uJk%I$K;x)a^W?ji1=d!oD8y}-T5z1F?U{fPUA2o{kP;fWX;F)Ctm#N3GLh$Rv0
zBX&j{i#Q(fUBs!#o{`Cs8IgIB<05B9Rz%iEo)x(<^4!SVBOi=>Ci3;jk0QT`{4L56
z)h()DR7zBK)cB~`QH!G1Mx7mXan#|cTcYlddOGT8)Q3@DNBtV@h;A1hAKgDXH99AH
zZ1l|NdC?8gE2FnYUl_eV`j+VXqyO2apv~eoN7_8n=7lzIwK>t|`?kZ{7POtxwxn%M
z+of$cv^}@&zP8u5y{qkGZC`5pPTSAg{@9MU8`iF%-IR7E?P}UBZMUJ_745EVcck4T
z?Otg2R=X4JzHisk-rc@q`=0Fwx6f=pvi+p?bK382f1v%1?eA&-MEh4_qGGzl^p5ex
zWW^N5OpPgxsf}3{voU5@%;hoH#M}|{aLn^D$6}6mXxG8tp|ZoJ9q#M!REO6(e9+;m
z4!^|Ov2A0!#rBI$iOr536FVceBKFMKHL*Kl_rxBGy*c)wjximpJ1*(?ZpY6%p6nFp
zG@?^cr|F%_JJoku-f45E$2z^#>77oWb?(*K+j&^$g3ePqmvpY_ytMO%&gXW%tn<~K
zZ}0q2=jS@V+4-|Bsa@7}Ij76ZUEb~Td6$!2Mc1gV=Xc%P^}4Qic73$#i(TLD`e|I-
zxVX4JalW`=aiiiU#TCa@#WlrU6?bdg{c%sny%zUD+*fhGbZghGTeqxkh25rhEA4h>
zw-w#?ce|n6-Q6DV_Hws(yM5m6WW0!vitiHNJKh(c6<-)XHNG^yHhx+B#`s<Fm&acd
ze@Fbo@z2K}i~l_SWcQTrOS-?55R;IQFfbuKAunNk!k&af2{$L)m+)l5s|oKXe39^L
z54%U(9^HEM>ygqUyT_OwGkWan@qCYCJ&yPIuE(iFS7K~pZsNGaS&5a2jftxgw<YdQ
zJdk)};ysB^B)*dPUg8&tKlPM7Q+ww09NTkd&v`u?dS2V}vz|XD@ubM4&PlzJyh+27
z3X-NIl_b?9Elt{xbZ*jRNmnP`p7c<!=w7+KntSc+b!o3Rd&l*j+xt-OZ~7$kDerT*
z&s%-t`X=>V*Y`-j@O}mTHuih8---U|{g?N@zW-+fA_im*ST<nofE@$&4Y+&2;{#qE
z$Ogs@oHVdx;JE`I8pH?r2UQH(KIoo7Ey@1mg~>N1e>1qvVDI3P!RHRXcJT9qzw_jI
zYCZcsPk7sTbG^&G*Lt7uao=EHk*~>jo9~1_-k<MZ=)c(il>f7UGcY2sEU+=KEAV_u
zkCe$NOH#I{Jeu-s%Bv|KrTjD1PK`|MkUA!HO6nP@OH<dRZb?0mdTr``sgI?;n|eI;
z>$CxB{<NuSJJT*nJDhfN+P!IyroE7MEbYVer1YBfBk3Py49cj_xFO@sA<iL*L#7Q`
zIpoNY*E0uY&dA)6`AFt(L%R>1G<4U{n}(hk<{dVF*sa5U$+ENBW_8Qzo8`|Mo;5ma
zT2@(BZPv1^4Ou(0F3CEObwk!&S&wGDkaaBUldP|@ejLt*yNAaPk00KDc<S(+;bVu-
z7+yZSZusKi>xQ2*{F32U4!?Ey1H+#l{@U>OhkrW!hY@T<#E4EKl16w&q>mUeV)Tfq
zBT7b8jc6XRX2gyWdqx}_anp!<Mm#d&g%NL!I5Fb;5iQx{vM<kmKl{_1VL7{UPUH^F
zy(%vzFClMWUV2_$-uS%PdGqs{@>b_<&$}q^VBSr6_vSsB_iEnzd0*yd=8w#uls_kb
zVgBO$b@}JyUy^@i{;l~B<Uf=Ddj3cG-{k)m3=6gob`K5+rUi3@<ASq-mBGf~s^GTZ
z?%;vojlp|@PXu2Hz8Cx=_|r%^GJ0g!k-bNHM-Cl1a^%F3XN;UbvT@|fky}QdKk|x^
z*NnV<<bxxh8TtCik4Ano^0!f8quP(^K5D?Iv{AXE#*Laas&Z80s8yr3joLlxz^EHX
z-81TmQLl`8Z`2o~ekza!(FI)#`V{yJh8K)3m{w3$P*-qP!KQ-q3a%))w%|y?BLy!M
zyj5_b;QNA>LU&=u!o<Sl!Xbsh!ij~&g$oK76|OBjyYS+|!-cmL-e351;nBhm3%@S>
zb+lu2yV3EZ`;Sf?-8A~}=r=}xU6feVzsO&dQ#8J4Mp0!^ebLgQ^NKDlI#hH+(UGDD
zi=HZax#+E;kBh!4I$6{*#yO_#m@Z>d$4nSAXUwWGSB!aJ%zI-yjvY64+SsLI*NojV
z_MWkijB||}J+5}#vT+B;y)f?eaqo>gG47jjKaFb{A2xo__>%Ee<JXSgKmN|~uZ}-C
zq1%LE6RIa1p77j+*CxC(vE9V@iQ^_tn>c4;<;3$QUNZ66Bzsc7Nhy=ECykj@K55&e
z`zL)m>DS5aC(oIDaPljYTc*TK88>CxloeBMnsRi?Pg7c^x~F!W+I{MPss5?Mr;eUF
zY3iJ*3#T?ty?5$YQ-7b<Yucb`RnxAT_QJHcrnBiu(`QYupT1=J*6F*ZUp)QV>9@{k
zJEQXq-;D7y=FM0;<G_rkW_&uc<IM3hn`f?=xnbtRGoPQ?GAnFW^sJ7va%YX6wPDuv
zvu>aD(5&ZXy*caK*&SzhpItb6*6cH9-#YuJGZN1zIHUZG-Dli!#@oe_#h&8y;=JOb
z;_1b6i>r&9idPqJFFwC`Z}D}-zt1V2^T?b}=d{f2H+R9@v*$jFO;ub;L&;4gM@v2{
zZC~28v}fsnQh#Yt>EzPcr46O$mR?qRb?IHDZ<hX2Hn^;^Y;oDTvi)TbmOWecM%f2t
zUzMFIk1p?8-lyDOKD>N%`Ly!#^7`^6<!j1!mmes<uKbDe56XY5h^XjRF{@%v#Z?uz
zS3FwrM#af_(eqN~T{Q3Zc@NEdZr+>oKAHEA%H+zSm4%fvD(6?Os=ToBP~~lvk5s-q
zf6)Bp^Pic2vT97#xm8au2rMXFuwX&sg5?V~EI50??ge`nT)p6y1@|m?bis2AjxKm_
z!KVxUvEbK*a$&^64h!QK_F3pzn6WTt;pl~P7A{=4XyK}bn-^Zc@cxA#S9hz<sGeVa
zp!%K~Q8Tn=YE6C3#+rjQ*Vo)p^FYm$H80g1tNEzr%bFi+PSu9hwyEu0n^@bw)>m6q
zyQlWi+MntM)QzvZz3yn;_x17hY4sE9*VP}Wf2#i1GrOKS^~|MbUVP?FXC6KCWJ8aJ
zl!h4%)eTD<E^c_W(a|`tvAOY%#_yZrn<|<vZ#vpMxcRK+2b#ZH<X_ah=)OfiEFQUd
z_2L^Af3hTeN#c_6OXe)8TvE4W^^)yNE?aWLk_VQ&xa5N+-z}9(W0v+>n!0r4(&<a9
zmM&YmZRw>;uV4D`(pQ$ASo*`V$YmMJa+Zx*R<>-(vI~~oyzH4}ADqR{>UUP)tlYCM
zIP2}@?UwtOk6T{4{Lu2RS2$M0uSi)jX2r}E3s&5<;-wWIuK0DOdu7tf)Rp5_maIH$
z<#{WgUisy!gjLzA#;=;aYT>HJRm)dxSatTQ-K+Mlx_Z?es~%YO#Htroy}s)GRiCZ;
zZq;wAt<{mMV^?=y-FNlJtG`>r)<ms|Tho6{`kK*eiq~vfbHkdu*F3)F`87w^oLt*s
zt#9qvwdHG<t-WIHqif$;dvaaZbtBeIS+`)_igi2J9a?wyx?}5pS|781(E7sl6W5on
zZ&<&2{hsx=u770xE9+0J|9<`N8|)2H8~Sd@-%z???S}muZrt#|h9@_?wBgu>k2ZX{
zvBSpXjaeJVZCtW(*T#!C?%#OL#@9FgxT(#i&YOap8aM6T^xURjHxJu9fAe{pAKU!X
zmbP04Y{}m;XUqC6*KT=xYul~qTW4=wxAn@cZ*FsK3vS!E?fPxcZTo6_ukHEUE4E*@
z{jwcBcMRWAyW@f#SN+T1Z95)>KV=CkX7Cz`DCQJ7tOVz!G%*`gvJ(Cd=oyHw!YTJ#
z#GhyV1kTL-6{J55SPs~Z=e-O~01ao!B7$`j%h(+L1x`GI#qkeWTb$mc=mH<k7i@@#
zXS4Z3EFcnCfPVxCV?Fo@#M`jh>=T?^KWTZ7zliWxY_=T8W{Vg=N0ooJDl-h_FJK8g
zoyCc^Yzn`HMTqNJC%zkgo7-3fKc96~{h>bnAA#)0I)p$Ju^vixA^DLETLa0nHJr(M
zk$nGO!s)T1@%rBYV@czwU@uF;xH<vj*taeJ0K5YD4)8nD#_KeAT)u@5<Xd<}6tsLB
z(gV^3qYvXrC;kjA|5Wi;an2@P2?6QM{|2N_|2?G3Y*kMt>iR3tZIIrQ&i);cF8>{@
zXQfKdN!R}hp#L-n{(r*;l>I9(b<(_Q4K%<0H=w!qKY;YmkN$6FS)vN#_W=O&^FM^1
z|4Dw?hGmBU^F5kuLC7AEO=u0UE6PUDoDYGr7i2U3eMtOY^BUVj_UG?_?9#tLH0%@u
zWWiQ_26zGRBj9HpXG8I9G@zG;mUls6+q7Ndux%lLjVoZEBOXxp&PO(nebsUj)Xlzc
zIYss_1j-JQE&Mxp3AUB&<i8Jn|0Zv;9RF|BlK{TS77t_H0C^@n8WhlSQrT#-(|-YK
z%wfODhW`bGhip69_y1GCx<PA42-NyPYslXL))rb{S_5P_6#A*gMUC-OYz+UNO@?PO
zRi%@h9)^BB%-XclWAa=E__r9}!AhTdi>0hLzm}!&ds!b53!navEhkRrKaM=K&c#3;
zA${x(UHOsOJe3U~z2O-xAMrrTcf5VeDT-sh&*tYS{h0zCA^?vq--q-EbFB;3jW$XL
zuETg=3H{lGc80b5{s*8AAK;h)j3xDvcvEB44r_2fW{VDNfUsMw#U#Hqut_AVgGye4
z+5$fu(1Gt^Za@b<g~hX<*+l*u%MtCcj-CXZ0(50PWG_&x6>1JqKheL?K81e*yEO>w
zJguW-+h|S0x`8!HuSwW@g!U->6dSD8lx28EHoraMu-R%)a)fzke<ChrL2(}JeGH2f
zJzG8#SG0V_+hA^EJrsKp?}|9>VGg!@D&mwqn!%r7F5zOC{8q^99Hg~n)A+CW<>MR3
z>IF8LKZkm|BYYoo@rzhbv>5=;ox$&P^fkcmg8cu1c1h-sqps};?}z=p68XBRx{9bR
zs-Nnndf7KEKT<tZPL)M|q<yKvomzeuvEVm`MX7#l#aORLd<*D0&@Avy5ZV(JBfS{u
zJzG9keZCj*BZ%JvdOPS_pl^X*f#;BiOmF#K`dhw}X`nvP-YuUJ@S>LQ0pCGhpOeh^
zHHaTX{A$nxpcf$z0J8j+_7>u0)cXYL-H&=9TR8;vrJ}wJUB6h3XOjS3@f>m&HzIrk
zU?1u+>zp`>I-Wt=p_VUcOk@_yW}uE?plP6yNCSx9nNvDiewP-~mf%?f=pxWFK?foa
z0e%;gPa^HfmhY_IE#F%`Kzo692aRd@lt8Xv$?_58xf5vv@vJxK0MK5jrv=XeN-sz^
z{sU0DL;CYKK;!=J0`y}jU=V--vY;1V0X{bLYtU~EybJm>;03^!2HsWrNjmy>Kza)Z
z>E6FV^ZzOj>G;15|A8!(-2Vf4DY^b9ywKdlyjJt?5scX`%<Z>XEPD&TPQJx*0TTfu
zVNXxucj(VRcZiOhV=U<W@~VNyKpzI21Z)5-H*_QDW&@R=>kTYovs=Cge1|$eXLlid
z8^T0y1-%OM3ZUk6I&2%xAj&o_gzbcFl#GRoB-pj}ct$V)FpoKuZ8SC$dsJ-~>C8fQ
z@e39vo-%e3zoO!|vXL@~x<(`XH1@lvK&h<&>n$5WeOLoR=b0-}o@_JKg}pP`W3r*3
z9q8O3SF$j91)g7vdWaYBq}n4M<{}L?oS$SC)d5@DOAa#ppMmFh;W_mIb)U8aPT1H{
zka?~?qpJSGzR}rC@kD!DDr3$R)RuuESYwCM`b%ph{}Ja$>?t9Owpf4ri~blh06z-&
z1#7|r#IfFDOvpCVIaHltl?}&QCmw}9;QWcTWj6mDYuWS2^DH2bb-@}&dP4a-QyS((
z|InTk>t?iSpZ30LZB^&rAK3}kf!0~n8!fPRq`flnqIjbA5)t;IZtw$sBlv}=cQ;EA
zmuddN^KAU0*#%>-`NZCV_7D6XoRL2Tf3$}{U)8<=dw$xJ8=iWrzMDN{Xdfg53&;s9
z7r&k+@%Nw`?_qs=kM#j`1GE8j0R#X80et}j1ZU}d2Fu{bO}=li7o>bYv*D1(K;D99
zKVzSx=T2x2dE@~$pG&NN1iM%-fFF4#@%i|T{Vl9_0E88s4ofxw`BNdw0f1CK06e_U
z`bzxvZ@<m@IxkW@sW{5y^3I6=0C@ngCt$oI>{>_g*O8S1IskeqTEW8Ehwx=o;7$tB
zZCG~?LT?D(!@fgeEK8AoicOP|I8UvFy<Q2P&u59P>e6*iL*3I<-Jv!V#rXQgN6gQ6
zvUZ{rzbBVs97|bu%+u~NS;;gBd!R9V0eD`(iUEU7IN4AiD1jHy56~k7=xYvu(*DoO
zhT39Rz*leu`u}gX`9I1{fK2D34@B!Q&dCVZL8gVQJMJlT;6<pr9D1+^_T@6{Iffxj
zc037rE0tbQ{vqrggxg~ty}{b?h0wJ@%*kJdu66|-0O-KlV~pCdL#(TU3tA5Gen>CG
zel-nkzsKSMnSfLi?gW|za09Xdluo)I#oxnT=RKCM!)nYZFXbr!!~zlxM6vNLvqFG9
zZeMFF>x+F#founehR(JHO=5#j(<G$fo{x#^=Q>Yc<m-#M8&A)ycvX((UZ^dakBOLn
zkF-h)Jqyts^Nh-=vf?-B%lDY)10d6`(5VxwJ?v*OZ-&ny0c%M$>~J;acQxxxRBmO1
z0G$DeCY%aNK<NabIOXXqyRbq6F&^iP_gHtdl?fe~h%r~|CxtPdJpgTC-!1|i1*{=p
zb6`ItbFgE$r*sT^m^nBDbY!$%Vy$I60gC|F0PY8T0(cPcm>3H?!&-I#b^?w7o&mfL
z_yVv9fctbUvjMXJ8vyHD(S-=t0G1dy2KokIEnpeoDFe7|)^Zi#R>1XuP`zUj#(lpQ
zs)y=$4S@TAEk^-V_8tJ0A^J1mVZfFD0@Nn8M{Qi!3aFkt0o0Fe0BV!kA)x+HU#0_|
z2hekZa=`6?P=ARJ>i<`aoyydp`hOPENDf5lIn}w&#6#&sNv_=hBLSiKN`#vLREGNe
zuax+t=foe?e<olBfaFPlFmCaE%2EKm0Wr|Mj(}3=48uJv#$qT3{(&RhWmEsKw)cQd
z?}7VD45zM%@;YYa1&bzgU)j=zYR)PfDi*R&t4o?{Sr>LU3(KB7DuEr&o|&J(cI8f-
zoWNF&&7PXT7L1)VCV@?zG<s43%b7fJG_)QZwcs|Sn_*?ZEwLfE1vb&7xv&RJM2-xW
z&nB3(aM+z5*o&v*Hr#lV<^;zHY#>WxxeRv|RefQsJ*?UQXmbuDEul6Xuu1W(Kkjp7
zV>h7FY^>GYa5pW$MzA82X0bLb4tLx9Y&g74770L=mn<3<tq*R^WwAok#3xP6NnkGX
z6t^4E_ujZqHw?ZfU4pYn)*0R^4^9xHPS=E6l(@Op30~q%Hj+&$E32s&qyBqbURzfq
za{hZfuc4$&r2qH0x~dX;*#8H(uB=)N#O>Q^k)&|E!krXuqp-6T)+tP-XzZ+Qu4&-E
z{`a^ZRq!AFdyMht&`-kAzyiM&xDACisd%`0>Qp#FrA0!&s6?c~G)GAv+d`))wGA-c
zDHcezu%~h$)+u&i`*!VaX}c>r&suNANJ|_QcjJcFMPiYdD~dz}|Bye=$MbaVz)i$j
z=rzr54sHZ=Gupn{+G1_BwprV)9oE^_Io3|=Tx*wgo^`%;fpsDB;Km}Auy$Jqb;y(*
zigkV_e^vAo{lx%zu{>@MwTIg|cAg!yN7<w8B73Yo-kxYrwx`<D?V0v$yUsq-UTx!k
z9_CjPb|lmIxBPp#M}C6aa9MV?oonaYBkcl|9Al5OC)kthDfTpbhCR!!wd?Iw_Ifq9
zh;!bqlj4HIPt}hJyZ(<SsF`v|SPSyh^alTf>8>MAbbXN81J;N7qivk33sQ7ZFRe%`
z7LuWPE8#2hVD{3@>Uh+|VPQyS4EBq1Zn1W$IJa*`9u7Og%?O2ZkhExw1@c}9>AhoN
zpQG{;=Xx|LFY!X-$symps!lyN9DMAiXVxg-(0CQGsJ|R7j1-MntDK3*x!bzP+GAa8
zU1D8oU1nWwU19CD4p;}Reb#=oD0P3W9#$fASvgiN`WtGAS|3fV%Lo3Hrg+5&(X$Xw
zQMl7M%pPGE)BRk8X)MpM=bX-gx_EEII44aqy=ybw3jPs8YgDt1HfwP^b|`#)p_~HJ
z599CgH~AO1z1U7z{4G2S!;RCiVjOOn&J`ut?bDc9Y%^?of|4?|LVD0&)f4+a<Q|K3
z4t=8W?}inm2Uextu=#^Uq{`b4Pq3bt(wN2no^GqMLs2R;zSK_pe^0wHB6QEWD_ZS_
zzb@daJ7PWX7YFWoB8@nVhbBIUUcSI3yAyYIi`ZA9QM}Bfa65Jnua%d``*51o@|cd*
zuD8)T>QP>+9&vf`>7KSu7xH6y98ak4RE7YrMF4ZT=Wo(K`D6CEHnZ69Md1ObFYL*%
zjbY2fd=3w+K$MjwZv%&OVVfNMQNEUsz}@KWutjb*8Im4_^?N9K=D~<1p^u$p0cQ1K
zi968tAvqHGpezJFAcMgBC2k(u`{>@Vy-H>S&y_jA#WD{#OXdP+{%y^}@bs|E06ru$
zfe%XDw?@rFfcMLx!29HI;8ijOc&<zZE|%%QSuzdy?`!tr>0$U>sOG`I2XXG8nv;R|
zOAqiq=?7i~{|eRIAGlZ!1kREJfHR?uf06=Dv@aq3uy_vmkaz+3pm-Vh06Zk9Q@jYg
zPdo!W7rqhH_7^ogiS)zpgisBS10RHUifVWac)xf8cpv;(RKp{{e^mqSj-!TqfDeiL
zfDeiXfe(m#f%gmCcSj9(0nZh80~f=pJ;@$qce0z<RctT2i0#D8T#Y?u1Kwqr$L6w`
ze;#w3;z({ifDcJnYRIiO@Bx_!ydP&YlG_O2brQGLA-!(Eb7eemF?O^hz3#x7&>3m3
zQ(8lm^oA&D4pGt_qNF`UNq>lv1`#D4B1&3Bl=O&bCRX3|Y~|ncPdY0*fP=$0M^Yc!
z10R&Jzz1+Dr9Q*}?~`%B+i-Rh_GXE@|Mo_S)dcNF0?(CEz{PYU-X14A0T;;5!1*|z
zQV*knp{=kH4(UdCu7tJttI?8SNIxXQfe%Wo@n{{Z8(NpZbEO4bEFHjE(gyywdWSPD
zX~0jwhr}<y2XW#i4fq*&zxWk+AAV1#-Z9|K5-Xa$QM3TB65j*Q6+ZwM<GhRBiGKnY
zzz>Sv;TJ1#B7OwU{7>~pe2Y?t#h1W`#Mi(F#Xo=#h_8V6i*JDU$pG*=@g49g@hR|J
z@fmQj_yRafd=8u`hpBNUn?U1DR)Hwl1)^jbh>~p}O4flW*$1LzA&8QVAWBw(=wHp|
zkI~*CaUA#{{8q%}3E+L=ec-v`1K?u#vWT+}firQcc!Rz87qe+CTaI^D>e&LE<cisJ
zoTZ9b5Y~PO{Ht%F<YDnT@FDRg@Imo5@B#4#@P2U&c%SSGyiU9ayh^+RJXgF5TrA!J
zE)eem=ZmAjS>iR|OzBlUBHKniBkM+#>>E+Ca74+*5hW`}l<XW)vUEhr))6IZM>G>F
z+pp|9_Bnim$Jop4Y4$KqmA9~K;Jdh(?ZO*2f7?%S2lzTHZUH_djsPDJw*v1Mw*&8k
zpPl-5BXF^}88}Pa1e_^uV?vgQ8-Qm~9ytT{l{g^_OO$LZQL?f`$<7ibOG}h&Em5+z
zM2o4soT1Bus`8+!Jg6!Us>*|^@}R0bXfgbwc{pdLV<jAjwK@Uoehj?()Ss(?_ls+Q
z_ld*6#bPw@IB^|tfw&$xUt9&8g<qaYS7<MM2%*2S;QNq%NE`q@h~JK=-h;sV;P0lf
zzZ|$&>;=veR{&??^zlFR3McfwED^s|>_Lvh;sW49VmI(XaUt-2aS`x7aW3#&u?x6Z
zi~=4fE&(pUFT}*}`M_EDrI^OzV#vSzztDhlP|IPl4fv4Q0en#G1U>*?8*y_s@ILVn
z@H+fLOgwD{E*4vXv&0tQOnM3pcv6idt&lXLv_=x8Rgx&JlSFByBuZ-~(YaVHi563N
zjHD_Ls>*|^@}R0bs45St%7d!%pno-5>%iS1u>trXetn_dYy{qiU+JkItAUHfTHq|P
z1~?ObRu>ol>rC3tHev-{#+q>co6kydx|s^UN+Ic<I16<g7K?!o;SL40xg7Wa?lw}(
z%YgTZJAv1UM&P-k3Ak9S04{*9o<?;MaF%EW&ZL}>DSl^$Y-rCwly(h7Y2QGUb`C`M
z3%nZ&O1lT5w0|I4OywaPRUTB82UX=kRe4ZV9#oYFRpmj8F&AR7H}>E?wgBE=8;bYV
za&cmqfOpfT;GMKH#9UD>?i3G+r)6Imz}~`A`(2zX1-v^rmA=fM<k#@+ycXx?An(g#
zam(UsSmMXAqq&@&56iR~_O}|6oQ~aV9_%h=AASK6)*~wP07*oJNDp;r`sq;C=}^~D
z2)`tmeDwaHE<x`Wno#}e&=?hx*pcIOi*pjrzVvGz&c|7bX5lPMywE(JhW)zENAsf|
zZwTsqL__&X{*-T;$~WEQBTD(yu7l^}SuMSfXy=};cc{uw>m;>LG*oXNJo%&j&MIG5
zlaDCnGu*)|K_~dH^ixG!KUIB%R8$*^wth<UxgL_zPl*~1pzW<Vh2B#>v`L&Q+PW69
zto85~>Ze3?EnU!e2lmu1cwS;*tGdHNC*p+C2YbH3IIZBk3SGDlZ`#qRbsFBqybt$b
zPHPi);Y|BJy94ts2Q@hUu<<O)K8!Y3DV%GQH6EdGmQ6N%n8KO=QsRIrK{(gmr%Djc
zviAcIQ}{3T95!juDx36hnoYJbU!~;QWI;yQ8-cTIlHxF%EMz7)Rwpo={37hjk+RAr
z+dV;rbM1=|&az><|0O3`_6atvAq6(A2e~#`<1Cw20$Q7F_;(86)gdndolYfoEAiOP
z>XRn<2i^eCNmHl9;C<CQFyC|<`36pVj8qOmD<z(iPl~}?Oy_yhd^-12{WdSfd1EZb
zsg0?TPO<|5^pC?z!S7_AXpc<j2{&`Dj9tyWeCglhDL@?-&N7F2GGAo!Oh%eMFH;NM
zaqb@m35;mv*(&@Wo~<(=kvaBUyUZ?EUaqBh!+Djx2BX8VryGvnY$vl>u-Eh0VzvUO
zkS*+Nb`DNd=dlamAG!qRtNrW%yN=z<9$}9{UQe@U;2(GiyQx>$tL$U;1^bEplbzy`
zya!L@{dj-85t`2n@m6RNpUP+RGk7sC<K=uFU%>15nY@87huu4upU*Gk7xPQ_Wqcps
z&kyi}{1CsL-^-uETcp?vDH#S@^;ckoOYBkzzQV4-m^au<nA=`vuVC$9(br*I1x7p-
zdmRRvhkZ{F{_`lzxiOI0IIKqPv5TFEk(`3_VJvpF6_{_8u(3&)t&1>@OE9Co*!M1n
z7k@R|0RR3boGUXi_jkY-e=hcmBk-H%#h7WA;`h@$whw=!pdZ(wo$J}n_-)}<b{p2c
zJJ~(3+V^9xIh#Gfp2E$CXYp6gUSKbx&7<riwE7ADnsJNZbF};w?xQS&{r{b<=N6A(
zTX+<2$9C};{Q9|Dy~TYA@5bZVr96Qru*-Q*-j`j$2Xa3<#8dbXc0Jzc&SSS?9VuXU
z^Rc+IcR!zwU-lp8v-m9bB%jMm*i(EyuVT;eg}jzM$Lo1Ldx<ykv)Idg1?~YJ<Lmf(
z_8#Ai-_Jk5o8CLwCwvz_kA2E_;}+oO{8D}?`wH)V?`2=}D{<%GTYd-T&MAH;zlXKp
z-R~#4<WIu~9EmX?&7^hiU0xk=OT={%ha>hzTpV$J#Mu#>Bi2SNk608@8!<1UIAUtV
z*oa_6Rzzw<azyWlgorK?F%eM_&IsZD-F?#it^0HL$L@FCZ@6D}KkI(n{h<49_igSQ
z+*i5xyDxQL=-%nx>|X6&;;whkcbB?nx+lBGx<|Ql+(X@|ZjZaaJINjI?&NOgj&M8N
z%=N452iMoGPhB6n-gX^zz36({^{DH9*PX6gT-Uh{yY{*+a_w?$cWrd7b}e%?xoTbW
zU8SzsuBoo^u0mIyE6bJc^0@}Odb<)_U0gA)2$vQ9d-xCGUxptKe>eP%@R!4%#k<E3
z;tk~6!fyz_Dtv$VrQsKbpB=tAd@bHfUKCy*z976jyf}P%_{8v{@L>3e@FC%W@Z|8m
z;fdjK;j!Uu!d>B(^OW<X^K0jE=ey1~oG&|{bw2KV(0RA>Hs=k_tDO6tmpU(W?sRT-
zu6M3<E^#(EtDW<lbDcAtlbvIoqntU;q0UsN$JyVR<cxQAa<+3uI2~c9!cK;L9d<nI
z-LRu!&xbu8c7NC%VK;?c6Lv7{^014-c7<(+|7>;GvaqJG+OYXyrD3zfriP6VD-6pE
z%L+@!yVwK6dWR*1bqZ?}=ERR)KRdp2eD3(z@vh?y$IFgq9gjO6blmN@&2fX{D#w1u
zrH%_7I~`jc>m4f{OB@Z3YR5dsT*pkuWXD*?C`XQCs3X<karAd2I^rC$jy4XL!?I7=
zKil8gU)sm*_w8f$tM>EullH^*z4jgUP4+eRLA)b=A>LNs2z#{%YwCQv6dwMm@bwkq
z7l14~-S*i7?cR2R-N|l;cgh_$vwpRHu)elFwLY}owvJjaT2EV#TK8LbTDMr&S%<B?
z@Km3VUm!MHYprEggSEgawPssW@m_kNm1kvH>6XtLX!W)d@UD7{6=gXsA%B-A@wWZv
z@L9eq-;giMXI(!yRzk~hcNn`{rmRZ`WnE%nTV~_exMEhrdcvYC!|#5}VNbJ^Ey;#0
z*@9o`w!y9zD$6<vwnSTtd$Eq(51YCe7UEUpI||#d1GeD{b{TBLDYhS0p%c4JS%RmO
zC3qT^pg(&SHXxI|j@e(tPGH_oWhd3VZ^67T=A7m|w_$td@i5H(2JXg;U(aJP%eUiu
z5NE^k4#b>3gnh-8n9sSG&G+(2n9VQp=~%n=@CEV{`3YZ$-lo9T5?-J%c8CaLCkLDb
z9Ke2!@C1b^Pr#-;0ehUn*$V5NnF#w-y3eL`pQ^!!6<qN9D9n#gE5N7|7<B^E(<3UU
zN44TX9?3jd?cqsLly-s?#|}|Z>?J{oM~^*4;YkV?D6F3ncOJ#NNAcn@Ef9}`6_0~e
zzXz*+52jTI>DcE1Q~w65`jgeuWR;Sv@+7M~$>u5bGFjC;2(?Kz$X;Mm`=AO_O@mb4
zL8|m1m3IKu$9GVeZ=#&QB#})@BAb*%HsLAmH(|d;vh8ofI|-bP+?vuZn&J}-C0S8i
z=cdu>uXyOMTJNvqgxXX($)>-O4N9o6E=98Gr=-$PmF=hc-A{4ePv!5YYU@WFA}5vV
zt8(^LIs2-VK1vdOAc-KJgDOn&?W0Qfv4<nvTeZ_$J?%{`@K=c!J`+6^Lf4%{Pmw};
zGLy;zqX)p~0WisIrYQwp5GKBQ+Bi!BlUDas_4l-M5KdG*NK`UNRGcKLo+T>Y6RBO~
zA$cUKe)K@PWC?l%_)w%#OpgFj8Udm-0z_#9h>}ziR9gweIl?4?1l3A{Y6W$w6dH#F
z#R<x(ur5oz=&tzhuF7_|$Ep<4_;^)Myebv1O2w-d<CR`^Q>D65ejcY}6-Q5bXT^OS
z_Ryq1M2UN%#63~so+$M)4!zL%bT28c^XXnvoH&hB{fkpP#wm{CY?_IvM`7w^oSJKK
zN**YuQgm7BWmm;-S5-q-)yu9nPP#}Z9qD4{DLheOl42K?r;9yag=ti~n4CCEvQ8?!
zlN#+#D!r3U>0hewan;IkRp)V=>cnr(3R7FLDkWC+I~MB@ytPOh4{kIaZYb$=tl}}&
zo~pu=6~-A5>G~;g7pvNdRlLNi_G49R9aN7yC|)`!{p(=YA%6$evkt1}81*zprNpQ_
zF)B}tc}o3`QFXRQZ4$o`>bVArC+$^<_NsJyRieGh+g7FAr^3n(vm=VfBdX^|6n97P
zRI)bs4W4Au2EWu&EJsO&D1O^e@rj0#lqg;2CYiQTJhV~mwowv7Z7Q9l(nht25-O}q
z(HKN4sYI)?(TdM#)r)AAKU&omtvHNUZAGb^Q7UJYN{LjGh%}M_MXiylj!0EHQss(J
z?L?@j5$dU1@!~>H1>36fxYSdZl8Q@}b*Ub>ly<okM=n!}df-xgg)6HQuF8h1r%sjA
zsmeN4Jx<l4Q*rH7Ejmq3swWKTxLs#tUkhF+re#l*WKWc2Pn2X&l*&3(TMosuL-F8H
ztvFOGs8i*k5pXC@P)>z)SsDRbNyb)XZB^D*IV}~oOqfbpszpm_q*SG($}?8AGFCku
zt+*Gs$3b?4C~;4exF<^76Qy1X^g`#;y`;F#r+Z0p;#8>q3B{vO90{9dAL>z<dMVT>
z2_+AdQz^PE^-}%AZ9Jb2{TbVLATG&M0AG3^_^bQj+&BQI{z33wlfTA`a(<j2Q?Nfw
zgV#L+p1Vx^=8E_4aQiHX9pEUO77O9mDZ<`ytlBwFz|N6Q;ZtySoQ9L*44hBtM1BTN
zl~3UWc?0g$2`*U~_JKBcU^nOF;qb`1c?3?~Q9PQr;ca<4-k$BmnXv<Qcpb4{ENB13
zE$SBD1^dQ0+BNd->=~RtpX3SbX?0fb$&+|5-kbM<|B=q^1F#<)1aHG&?tx#z$A0F1
zoaIw^Do?}Ro(w*OXY!%gqdtoh<S_O;ym7zs;d}(o<~i6s=Hb*I<RkG#u>y1YAA>#V
zIQAhtoD=v&>?|kaWI7K%0eo!?r_)z(8h(l0$SQHiXO{63%u##RQspnGz=``N>|HDA
z<O<)xLSD^l;4iJi>6N?)jo8gL^F@3y`<O4`OZhT>7CZ|p_)5NtujXrT17IC?(yy}D
zaI&3`FPUxRo3QiU!ng8m*#GXp{`VZd6MhJsbK#4)0N#k*{35<b`6Mo7U+~M=J@}#(
z&b;KGV8^wGf_;W_@L}wiufi{5Rcs;l`qlhuehqGwT+6TH*Yg|rjr=BlGrxu3%5Q@|
z;|_c!?M{9dznksl_h5gGuch$^@Wr=N{6V;q9^w!4M{rx=G0xeUI5RZx$5|tP0_W+c
zaGrjKKg*xPsT%$ed|B;f{tADUzs8U9*ZCXl7u;7l#^2&^^LO~WxV`c|{{Vi$X7~XY
z!ArcDf6PDO$N35VDgTUrjx)j+{7e27|C)aT-}68Ccl>+)1HR;Vl6}N~;y?3W_^<po
z{ySU3|H)7B7EBS2^UG3vhi(Ple-T0oOW498!h}<V3zu+<2oVYI$IT*2M2j|}E$+><
z7cruPh!q`0CxLh9L{||fx`}wvoqZw_L=TaOJ5pQlb+BIaO*niJPTlHat8hYEEe7KD
z@F0;a2E(K7g-_iNuX>6|6=@<}WWc|k2@m@)kp(aN2$3yv;A_tl`Rq#(WOs{^_)c7b
zD8z49CvX=Hw|3xD`5HHO#={#w5&rne@W@XU)5LT!L(GJ4em1=G#bS<7_j*Jb{PY!K
zo~RV_MU_|}7UIisHKJD3iF$FSXu!>vCee(0Zi~edu~aM*XNl!vg;*(8iPd6_SS!|v
z^<snAC^m`BVhg^7xlL>rJH*-I9I;cJD|U(V#QEX^aiQ3a+j4uv#o`iisklsBF0K%J
z#XhlL91sV^A#qq-DXtP%<F~l0#I?9tcfGhl+$e4mH;Y@ut>QLuySPIf!S4xo;ojXn
z;$HmPafP^FJRly#FANWhN5rGzG4Z%~LOdy+5>Ja~#Ixc#@w|9Jyog^9cZ-+BEBN*G
z67d@D#=I`x5O0cO;w|yEct^Y|-V^VO55$M!Bk{5LL>w0<#HZpj@wxayd?~&XUyE<V
zx8fh-JMq2vLHsCAil4;K;urC&_)YvS{wYq07KxWgrI7U1Pg^=<m~_f;>5^_4AtPm!
zjFxR=TiH&wmoc(~jFlZ_Cy5*8va5`f-DJG%E)!%AnJ9b8B-u;$mVNMhNk7?N4v+)o
zAek%&OONzQpY-EbloXjN(`35LkV9mq94d#&EIC|`kl8W^-<ivk`7$U+%2BdF7Ru4G
z2w(ggi|_r7mlNbfIY~~IQ{+@RO-{$x|7PObf3xKovRKZMb7hGvm1VMAR>*m>QqGrE
za)DeZt7VO>m36XSo{4)!jj{>f1zbd51(ZwiRlu|GO~4g$rCcRf%QbSXTqoD#%YYl@
zCi*g<+$y)p?f5$2+4wf#PI<1}CC`)R%M0+0z}@&l;2zv%yhL6qFO!$cE973ePwvMT
z0}skW^02&8UL~)_7xS)_*U9VY3xe_{d9%Dl-iq5zx8qxaNAM-VyX4*YlHk4aK72{=
z0r?=lB=|6WM^HY7?+8ADZ|yxLpO(+yJA%*2=j99XMSM%}W%&wyOHdw_ufvP+raXqP
z3BE1gfluQ-`M&%BUlsfa9*$4sad|?1DnEn2;|uwv{7QZ;zk&DTAM!i-z5GG`2w%ug
z@@M%AeR&X`k$=ilvc+N+w}d4v%d#y8zDDS@!Y!BOwjyx*FUpFx+E{I^c2;|MR61C(
zR!6Io)fxVku2!7Y&5F0W!`srsO0;@fNmeiTUiw&lt$tR2YXCekgREq0u;sD5@XPqE
zfR$pUT50goWLQJ2Olzn$3_hFT)(9(`?iRv>lWzsBk=7`y0REiOR*^Nv8f%S%cV~h%
z(VApUwx+<>GtHWA&9G)#v*7tT!z#AsSaYos_<_o-a;w6cXH{DBttxni7FyL-ja6&a
zS@qVL@D(*$O;)qD$XaYIv6jMnbe6T;T4Alk7Y$ciYv4~>2Y+*W{9e!jp5>140(Hi(
z2VGel?#phlHd>qDbJ`NR1B=@}(YR|D55KVm&w3*K>+~zm9e8)<Hg-FF?2o}4^Z>gW
zw-nmouEMRMJG1b=Z(=!ga~3zxBH&jV0bkQx__pW3i~lKpQC|y>^G3E=->d!0yP5l}
z{ni1t%{qwRl(t)k;1jzNzAA@xm36gsjdd-&WY=3aST|ZXSvSLHcB^%pb-Q(kbp#%?
zyR5sdd+?RX``}M|z<SVn$a)xGn|#!I%zE5<!g|tr3cj{ytY@v~tmmy4;CXw=df9r#
zdewRjez@1IH>@|UW7b>n%DrQ~YrSW^Z+&2W2=CVA)<@RI)+g3+>jb=ZpIM(<UszvS
zU%`j>jrFbd59>SYdwBGIv`$(-SwCC9z`ysK^}F>?>y*`EGn?bhg8Ohkc>}x97HqvO
zZOgXd2Mn{FcDU`b-S7%V+EI42-NtTfw`2F(?d=%&rXR;!`9H9eb_YAw?g;N;XS<8t
z)sC~f+3|LFJHhT@C)z#jB>Z;p4f~eeY4>6Y>IUce@Y|iovhnLk3A+-0|6RCwb}8OW
z+QTlkd)s~NzIH#mzdZn6$w79qJ=pfxUic{ecEC=tQ|&Z(EHm(J&P;X}?s^V`2Xi?6
za)WmbcCa_t2iU*n!mpW+9rBy_1?CvuvU!KShc80E%ihPG<xx0y7h*45gx`0@!p}7x
zzlBZ2{pHEH!8{eeyG_R}=9#$1JR3J-i`DNvCGeM);WwWOd!Ahh?`ajzJqzt>y9U1k
z)xn>7CVoL_w43Z^cvlzOOYEiiE#)kGIlj%g62A|vreBEgyUKcd13a*s@CDH=_EvkF
zz1`jcpX@pIPWxPZJ@h>LeER};X?Nqhp?mPv&`a>m(97Vry#n70-DmH&55S9i$Ubae
zX<vo!eO_Z<YhPzyZ{J|wXy0VtY~Nzvif@44Zr@=avG26+vhTL<vG29-v+uVbupeX(
zvWLR5Yf8!*>S`U?r41E}D#Ds;t32M^JfhzGY>%NnLj#7U8k%lswxPL(=4+Z`%IBE!
zIi`G0YFKt%WnFE>!f->A%iXGFPr&2%c&W6<8&tJ<y!ooM#~1MHT0N#VPpUh&tg4}`
zxn^E<#S&L;d0kUUSy@GGlOqpb|E{Ywxead~!<#1`j~nVrnjHB$SH2NIz7l{d|8zB`
z52lYfrk)&APmbwhuIXd0;VRekF*h|V-}KSYP#?YNp+0)^y+)E=RU7&oaF1-&r;&eR
z#^d$*93xxx&F4{4^90gRqmquto8fnl`lANj2cO}|mu-zIEopERG*wlXSA-Slo>Lx-
zc~IxgHT})a4lB_7>yh#0hqwkCx$eS0x8d>nO;7wr4*r0nsHCj9slrionq%b3v5L?q
z-PGwKrb)jMvEPU`U_=}6ImW80G^fFI$Jka?22ylw0n^EVVI+_qHcodia@_pp+RBoK
z=9=n~X4SUGo2Qh_o1bfjGuO14XWGm&-N-Yw=9yaa6t5m{z~oPXr+t21gHg6T(}O%y
zYo5uKZ)!EFjG3i{iWz3q-J741>X@hnHt}@tkZRgXG3}?A7E(+LDfx~`s+4=uzm7<X
zYTV=V8u6wYCQ?n;GV&dhTeXy`YW8^bV-zzjrJ9yfb#>m<RL2ypKU2)inWAQnJ*A<l
zwlZ?cU&z|1W}X@;$UaREWL}1$IeG;1jjZ!i?J0lAG~ckFZ}`bK{Nx+i20dX@S}SUr
zk7VkYR@qRpsKPN#3uoFN!U>;NURBXh(OA{!n4$8xXZ-O{Gm;*v+AtI}!iVO~RQ0)L
z{%K-*^D{y+RV6&$bTylxCPt{36(vSmC9MsuX(-!hW44kM)Whg>wvrU$N>ZRkQrRH`
zZ6<AwDW7A?=a}+2X<;SC2pJkOLY|b6=E3Nw+F)qSIHem!(I&;4?@4o){UIV(+3CJJ
z%3JA=$MEJcym^9-3jMgk^t?h_*oxETwX}0g=W<L1Ii`Y~kVOhjRnxg#)4ANVunN;T
zLqnbOW`sHi3u{E^H6s#CaaXqLOy!@LfobzQDqD5R=hYTARasc~{69)+-hGCb45J~w
z9BV#V*eX3ks&vmOFVx<MHP`evHz%yBwc`4MA+Etjo_oQc+k)*hJ@Fek_){Vl;$_Z?
z+Uk<p@~SdNwYDDBihZjZ9n<al&4f8!-n8#G^7b1!2aKEpen+jUN*51iIBHKz1R8C6
zdfMz7t^yhE+7kMIG#cva=U0T)>7GZ{{e?L&b0xIP2(3IJlbmPzr_F^oUz-b1#Wy%G
z{HFNrx<AZBp6N}V(Vje$E8p}gq}=&A#`NZdr0va5Nps*uN~~47#}qx?V>~tTN--^@
zm=;okjz(3=-T1FVm7<l+=QTxB4HKz;M^mesQ&o*HxvIx7xu%6w(?Y80Lxz$u@})VN
zwPH1!Db=h^Z?iJJ&3_?lV~_Om1sycYiC(A>4;fRV$N6b?^B*$JH|*ydzVZ!U`G&6`
zx@Bgdp`jU=hW!YP@M3L*7i%#s{zFXRi%%QjrP>HD{o^5xf;V5AP;Y+Fuog6m27O$n
z>T@mo)7*s-Hj0y>N<dMxczs&&F@cPjQ`AKC_)?T2f~xfFG;K8zSLL&FbUNZn<w5l@
z_{^H@OHrfh@nvYm^kr*d`?SI!zc&6ptvHA)VS_5G4{EeTFU%gF))G*|S4b^Vb$@)R
zhL2RkM~0~{RS&Aqtl+*>!%v19F4Sk_pjUFlL+OT(j1V7&rWyI9nf|32e$tHm(n9?-
zG}X{F!)Kb|GtKasX821pe5Dz=q#3@_3_odxAHDu~eCekBbklyiX+Pbxmu~9St0eN9
z`qNGQ>8Ad4Bd2uJj$Yo8-}E=b^fx0ko~k`>o;L0nU(=q^E1zDiJ-%$smsfB7v4uAL
zWu(h_bLQEAIaLZ*Bi^J!P2p-O2xKRhgd5|ZyhNq>Qqx1BjJ)I}c6N3B{1PjtqN&6l
zSyEF|5|&@zSXEtDYt2NG%t!L%`3PABIQ7`0OX}-Ou-~pJEiVycn#I^=F}(`g-zqxV
ziSbo(;`};$QdMP5iJV;095zK)CCAUNlDUBKja4qyUQ=CdU1Nl4NkyD!Nd>~GA^n^}
zq3Ii88qrTo#VQhQBB7kFaWxf{x(2&Mb*>cr+m+NgyS$>hsU)nzba5FTNP5_$x>!YB
zT&TKOt-Dy;ES6MZjZyuR4d`5>>Rb~#*K9ghkB*fA5Vh;5X=U8~X0ZHvHTL-Pye`F!
z?ttMyMV#P31u#;fu2U$~p$OByE@_%ok!TYM<#eg`)uXnpYfvdM|B_iHDiav=C<XTh
zJxZ~?L30KTnw?V6qZA#_m7;@cYaTRPu%JgxD5NVzM|o49*>MHU$slN!sh~Og1<ej6
zXpR6uvn~a_rhc!QNZz2&)aNt&;mk;;JBXc)qCOM%h2o~XFI3*}=QI5IO?`e-pE*ti
z&DtI`2gIP+xdhG5Cg?ZynS*1{>}Y~|wZs0_)Q2OX;wxa{K@$&#o*RDk!hyrM;WuFF
zH%E`4*%1WIktAr=$Dr9E1kDa1s13X~XpS&Jvz`XE!S)8Vq4oxYrrn^ClQ!gd9*P@2
z%)TI~k79Tp8dvjN8$@qV8$wW1uQr5;hw_>Jm~&3hEVV&%7!GC_x#)$>8_Y2EWEg(*
z!h>{EPlg#sy^x?krk!k4k2$^svrRqb7!%A6<umnUn|iWMzdU-!9Mm2mZ%{8xpvq7~
zueG7ZzS+zdWvG#^79vo+R}Fgf)*)#8Q9*ND3c?Si^ucS|@tS(|f`@iYy<XFfHxxJR
zcuhM#Q{ERUZ=UM~5%a{9_nGp>9}_gEhoH~!;WK=~ccl38n|l4BdQG}sSiM2xYYCbY
zLC|m7^&7s7gC%Ho{y}pB37VaD&^R@M#@P`xJMW;`aR-e9CTLCuLA{VeE}{8i`ei(G
zLF0l6nzKRB9O#4jh9AB0@&@(B3H2C#&>I1yoBH&|3vtsQy&*%~^j~kpFt1G9xL1N^
zuOHNI7Cbld&Np&39+05fjtA3>{^<<}=96h(Z@dsU?duH~;-)>l0fU~KxH)zQ&A~aS
zH!iTZrat5M4C;*x=Aq$BZ)6ZR@<})KrHAx2qz@*)-l$;S8GSH5$Dr{!28|aYXg0z@
zy>UT)Q@=T-2K9LYcG}b*H1!*QZ_v0Sf<eQ7(8xh=c)UU5rU>c{FXE>DY{S2CTLkr%
z9c!#=2UO_|sInuVYTkSNdfYtzwEXar+PbES>WZoongK{rErX`mYF!LhIJvB(J~Fhp
zo?b7J%jlEw%?6DpA!s}a!Jx4(=KK=Wjt|Je*dKFt3>s%((75mL|GDV-XwH;D<MR!g
z^H9*ZqJp`~TYz!TBM#}D2_4D*Bb*=nBb?hRPhP8VZmaxxt-`sj%I2xCl2Aa~E>A$)
zE>JaQplVD(wFCp&Rw1s&2vm<rK<@z%*JBgVYd+$7i~@SiM_i9pz<8<y#-9?<w$BsL
zwhz>_uWcRTrhT)S4rp74bkn}xLm+P2*Lw!UP5VAIM-eye`_vdBuEqqv7bqJEs^$c!
zY2Wz610K`9UK8-#^xu=Fw%q|wTC&!)fZlB(hv7u;t`Ikz=-n0Kh7-NJLfmj-j%@*R
zTnZT74VdFaK+jH3K+i%@wK{?-t@Q-->;pAD(5oflrpJ2q@&vS10X03*yFyPuYbB_W
zgxTQ+v<ur4Fg}2Q@c{&kGdiHHs3)LzDWIl3J^MWYy$XSvdiAP<xY01Z>L9MH0I1>1
z9J>R0SBG>XSG|iv+{jh$;t)4-)w?*vja>CA<O%3i2-L_&uR4gE5!R~?;->w8(J;O1
zL%M0-_+$gdJrK~lJUln;Yu7&FrhVfs2$<u3z_<+p#yt?wtCT08S1C}_eu~ksl+zk!
z90vj8AP5)-LBKc&0>(iQ(ECT!WJba`3IfI<5HJVvfH`mn%)vFF?LIWh^xQZm0(##D
zO)?{>?Kk3P1oVCj8fBjA^$c-Sk3Mfevy9}mJ%mPuG|h~>vGW0A=L5#)7SQW2G|P;D
zw!fZ0(64-P(5&RfhElR;KCd@5d|5?9T{3;T%ZZ-|b)adnPH{EOhsRT;h0m*NZZM&$
zMJ8Wk)e@EDYQ&G3wK`Z)RXM*&XT<*nq%*3v^0g-V^8Gokc~zCo4He}jjq}wbk2aV1
zDM1YZs8R+Wd~o`?R$3o^ded>OT!^bljr>ZPe12^{K|^s}pI@6#Uz(nLpt_!XZ9aYZ
z+I)g4<pxzEhIn*7ug~LX_6EJF*_!0Ys^lguxJH~OmEcr>1V;fQI0|aP=@1D{<s-qV
zd|GfSs0F7oD#58xeRXrA&RJ7c8wysO*<4bsQlsii8sL$xnAfDD(JI=YMnDx;W82tV
z8e$Ov&0^^vES8>TkwTh9<kKu7Ux-BnLo6brVG$w2A|8iWq@0Gu(#AirSlak!7ExTW
zNZ;mDQd9wAkpf1F6x34GA!1SGBNkOY&7ulw7F9;YB86J9K+)DLP~2T#(NI-auB$4m
zgM&l`HD~l~JjIy`5N8xHoKaA7rbEP;%14~3e3~;A)SRh|iZcqe;*6rLIiq-pGYY#j
zXB2dlsL^(mYEq_2xh7h}9P@OnQj__bRB5t6lZBdSO>)%eSgj^njUDwm)}V>jM2FTj
zN3%{`q{(7Uv|2ls>ew<xXv%tgW}Wnzb<$_7nNRQfJov#oLgh=zP=&1g=7u^|(wpIn
zEUSYrt_Jq0sia}4RbADfHW5BgcB-Skq7kXuEM#X`<#n}{I-<?1&!ZP`P(8Oj+V70G
zGLN8YLx8%B?a^)<q-z`E^QO2Ot6`~<>BEnt3QhB?8p^|=3M$a3TJ!4V2${9T^6Enq
z;@U!a^&*70Zq1wG2}e~*C+0^eGpoamZkmE79HG?5L`*ws5kNg^alo(5x)<iR4_GXJ
zctv9qehF);DAy&hAu4HTs9W4zZ{ogi6)&$_tbRv_<6Ld(;4s&`r)Y<iFAZ%pHB^;U
znvyAcp@M_m<imoco|l_?jKos()(G`!UQ_j^84h<HPt%)aIM|Kk^%e(KTy1ec^#bS9
zBjoYv0|uzxBKWl93@W7;IG=WeA+8r#pLVREeZ86Wdpv6M37TAXI;6COel{^F-qX*#
z$)RUH^URlAMzTY0ze(|*P6?Ql!0D6}lag{eCDo*)CNDf43UQK}JlfQ)H!yx|kwdMe
zo80NAQ!-3S#_5!7lahTpCC8-XoKDF#DY>Upf+ht=8{N9s$iWLam=x1{uP-DI=$4X#
z*MB-iZ>s&~IO8|R8NWHsnDy9W)?-k;#WL%$$8U}^esg^Bo8yb$9AEtA_~Q2&+4xS&
z#%E;XJ1rY?r16_0jo%z){N@PbH%A!1*<kz42HS5o)PA#J_L~i}-)xxuX2a|^8)kpN
z$R%)EE6mo|Z??vMvo-do8kweglS|ar%kNQ_ks`G&sc>>xt0$gTPoS%RidDACr#EuC
zwm_>~(7{%@a$7yY$eSmaULLP`qQZZA65@cKfP+?LGFp{^_O*KAZ}kN8!aPZB)s71P
z=}D*^dh$m*6brSZ!hb3gYKNZu(GGE%s@udi4Sj1B))%(?D&5G;t9~jqc_<vpLt%Zy
z^6R4rc9Gh48*TLY^&#2kHM>WX-{;W|Pf)X>=%Xy+Ij+X~lClc5a?qsmd9)G+^MgVC
z8V-H;1Yd^eeG@2!lMusKH4vA$LrZb`#x3i;oiMVd03{fpuW$6wVD$z~)L;z&?Ww`4
z0!`9j;eTDkTRsY`_d%%)z@irVXt4T&_677qdJZVX0ag(x)eEqG1RbcsqBaL<u;_cQ
z_-ZwQMSKm`fUmJKyhp_F<`A>!8@)pSnFte)Lp4~xfezDP{R&FoyZ~6ggAUhV5nm%T
zSo1-%0W$#tFiV4#2a0cu6Ig|yXK1kUL5nrmAh=<yz@ob6YOtyP5&*shj_+tNyep!>
zqM=%@!NT{e@dk+k3*R2cyB-Q~TbJRxA{sd8J`EPhb-xDdS<nL-tfxQ^YOtOFJ*2^U
z8uYLRYc%MU8Z3Oh8{bh<VAFeCS8K3{-)l5jRL8X%tN`eB8f?<5>ouq`x&dK;RR(&a
z2HOuxItZ{H2fbN?)dG480N;wYYCvz(U_(D}vs;0{x88BrTY)tm6yLfhuxLE*)L^HB
z-lf5+2EAK@MSZ<TgGIW1FW`QZ{Sfp44HmWaAmC8|>DXfisD9#=U@U;-NH7`jB!FZ|
zWB!bRQcxO$=K-q$FBn)4`l12q?@I=*0DT#76mSrLZ}$^eKY_ksfMoC{;4J{<d)vS<
z(02@c5BjbKQVraJR=_U@eIM{KW84D$L<4t&9@oH04^L>|iJ+eXK1cq6pkHX<9?&lV
zUn8C5@QnsO5%gOPoci<+4ftLPW8VQzB7YMo^#@@63~GRHK=>EHZ^&~c=<gah>DNCs
za2khG8aT;`WC!3F1L~*hYbGcH3c^8!2AcPH|4)Mp6#Z8+7!7J0=nU%6fHw&l4>Qmc
z)TsgQ7cx%u5+nhrE&$#+WF$ugy+I>1;B7>PZ@Osc1sbIRZzwVzZJ-Zm8x3SXcv}Ml
zK-+0xm^*koQG*vWMg!haWW0j`A84!wyroG0<BJB&HN4HJ0N=u5c&AYV$)t-0vO~P9
zfx)2A1EmWXFW${S4rsgvyeG%-Hl&7J&;$+m77yb+4CH}Ahm;;I1|>NX<O4`{0J3wO
z<U&vYAlU)%RvY6a7lJW>z8dhp0>l4cqG1APe+_tpfpL--!6X3mRq5<@&_M=B=E)lH
z_6FnBPXZbv=(N)7ji4l7f|&r4DS-r#90^_n1T^5y1IAMf%mPi-fcFm=PctwZG~K`)
z&<qWDJCottLmK9SlI{ZVh6KY~q8iFThiSmu5)5yQYM}8Nt^wb=V|;{xQqXJ-c(;Oa
z8Z&}QK&}S7al!DlBMl2dX*>XIFKEy}9q33640Z$Gl+#cHO5;S(2q-ilKt~&R1++*5
zts83mXbhJE#%dt@jyGF1tOFgdfz}pI<4Uj$Fi`{9do`|;KxvF7YhVw8PBE|(bgBlt
z>7&P$#+Kwv^Ao@x0wp~lAbHXl1IUi!OHUehgVLA*$gXpmlLREsVhv>LIgKU3#elgQ
z@U}7IG&Tf#0Hqqp#`7`*`#{Sz(3-$23|s*^PXi+zqcI~m44AKhY(Kt2rGaF%Km)A@
z_|A-m>p-hD(E7k>%m}Ur(EJC`TES_I32p$?YoK+5pK0Jm&;|`;@6~wInBNB=y8s}2
z&zlWA3`+AKfVYDf-YeGdIOq}$cyCDS!BXV;72#zDo&`Ni1KEDQ+`#joD>SIJVI{%@
z&jD5&=ni_00S-#z3a}{8c^YVM#rJBUy#l8(AlL+;egbF><Tn|hJk%fPkw^fgx&X9C
z<iry}1mFb?c(07{|Bt=*fUl}Z|F~z)IX6HE5(p3=$+<~LAXMpufb=d>0ygY|W$mKt
z-*w&9wd|^ETid#JUAwLVVsD6uWl>QPu_GWLi3Nn%Iq&y*=HA>J2#CA5>%Q-M?&mi%
zcg~zSbEcm2{AQk6oPg9#DQ_U}M>19^Bn@vk$e3)GBp~;c@&;x(_R<7qW54BKKEhs>
zz#MF;2f(brekXwku%#XVvl3g%UN9F(IDif}!|G;-5L=!Zpt;T1H3^KuUgyB-Fk`C{
zxCmRy6&R@pQkH_D;A;m~q#6570#XO1ECH+Zjr}2k0`j!AgS;zwZ5-^i*liu;J;=**
zVC}f^`Z-9RdBYuKCmN6E5lEhS@*i08)~f_laFc)DR0kVj@97|U=IsUcAq;us?F;tD
zO&)m%g6X))7ms$T;1N99sdohav;~j$D6n5((;fwO12*kZVAo^Q9=+pmlV9HP;AGt7
z4O&=@_gi4W?*R4LYY5H+=YULbUII<A&j*)*X5b2NCCCR?Cs2(2HwU{M`#J~vIX2}X
zU<WGW-RK}?<x%%N$ye%tcdLV?j(K+^kc~adA-E5Fjzb`R)H6Xq8}Skdp1}QxL+}*#
zqYkY6Gv4EX^FbGEIrp?NvG&-{I0W;s7lK9jcfwu_UL(AmU*-_&js3PmOzMJ^ABgqA
ze%B$^ANxIrSP$&?9b$d4KX5?ztMMd{K(GK?o*4x4d{XuxkmsO{2!bd11~v|?J2bv^
zKr@f=JqK1Gq6*gm4Loex;eci!<HsCgqp>p_(A#6s0I!Jcflb*9(BWhJMh>yb*wh07
z+I|fB<P|aMub<@*+Z&tuA&BjZP5ltW_QP)O5IX=n$02qQc56^bm_xAJfeyHj!Y*@&
zoq*jDP!6$~*p!(dM&0$h0rE9Q{q-piLF_l!<h#Ec?$fY`ImFJumb@SjVt>GvX9F?n
zmoN7QG3vT6@k)I1jB>qTAMpDGBp)Q4K%V{F1mxNO=-`dO{!;>#*t8x00?JSF|3U{(
z^88{4Zyfd|4&Hd|OC7uuvHt>Y=305~zk|DQ^KAaz4&E5-dmPZ0VElW*{e(FZo3<hF
zB;RI(XK+jT&UcXh!+#dMi2s4uFFAO}VE@xW`U!s#V65?u#eT)XlX6)MUc>)z>^B`e
z$;-DA7?1sS0&-v4g<=Bs`w376{znN+qJC4i1F4IbVK)R#abJs_4R*!Nvjp9N<o8q9
zluaP@XbtwE4w6suZ7=XY$Chg(4{pUi$-(~uo3a-8w_#J}0)IXBr4Ih>*yO*!-++CY
zgHN4d#kRu#68kC#|4!_`I`|v0uXd0!3;yQdZ^FLDLCP?YX9Io>_Dv2_p25uy{#V$y
zI7rzB@@&BW8e6WHdhicyxd!;(VBhE9i+#U?|1I_`2dN*yYzO~4>^TlnSAqu|{O_?J
za*(<seXGF#0sAorU#@%H!QYHM4?IH{iGw;O@FVP36Ogi9?BG9${aOMRdx?WD_k1$}
z4|}PDFZX{d0UvvrgZ~INbxc9!5xI%Le-wLV0x|5>4!)#a>WUx(tab3^IX+3C0rqDO
zzKj!6hXhg|r5*tPNo*;5K_j-`DRq!{go5D?ti(43qa6b3M!^^`mhhBW0qsE$P<90q
z9i&VOCOJqs6jV9{<W<354pJrsdxL$rmS-&3&q2ze;5vtZ`c^<)5(Lzl0yzhQr;Q28
zQvv#k*uv7m7GjeZ0<;#Hkmnc3cXOEOAacgAv4ed3hFK0GcMO|2$aiqKi-X7?!=?`M
zO&qpzFehT?I>`587&@4l*l`Ct1Y6Ps&{$(aNe7Vczp%tXWRM|wE|71&Q0@Ul9vOCa
zkZ-=Qr-Qi!yO)D}JB7U+%%#|U9OPRn?CXGD02B6ekZ+@~+`(Lh-QPjJlfnuI^eUTh
zfP;K9g@YW>Bw#{$P9Wb*;SdLN4faq6`F;wAIhbp)sXqewmI_BWh&(kM=^)=m;V1`@
zt%i~>z)Idy#{?p04XJAa`DO~Gyn)CsLn&im&%xfyL1c{~^-3V$E+O?xVCG}*>mc7Q
zq0|E)vdB=%9@s0erM!X2CPT?zU?mSFPk~v8eUO8dJUrMz<dNYa4rnAc;h_%ZW$ft=
z_Ihl|3t;F!!lNDRP1wgcpnJ-M$2wSf_TwB3{YrSegS{2|Ob3w_hJSFd^RUly5ZPgP
zwu5~JTk;5)_1Nb+*k`dXb`Tk2DES5K3)q)Ah>S3l`~vb#7D^rgkr#%NFF?M}Ldgpt
zvWigZ5U{sl-{2s!+VCa^;Q>Oa2S8+ap_Dx^L$KwUfynbhc}`%4VoO}WHpRZ(0d3bN
zyu(4{eBqrA=&dl}T@E7i3-5M7&zTADaS-`mc&`K6&rJ9a2ayGa_c@>w&4l+mh+Ht7
z<zS?q&UO$PVK~RZNS%GaLF9$uTn8id_dy4d9fl7%m~q$-JBS=He8d5L=O%pALF8fK
zV-DsB?8hBMHWohNV2;Fo(m~{8;ZqLgSJ=`XfXK|kc@9SEpwtOq%dzJ>pfk*bQYV1O
z(!vD}M(XBs4z>bY+5kYqm<gYE5cygt^#+*puwQf#8B+L?16qbn_)iCsCxy~xfbbjP
z%MK!+2&Jw7;W|R8b3kMjq0}=VoJaVYgUBqx*Byid3EyzAXJ9XJ5H2Kq)4`sJz0^Ut
zk?<`C`v>f04#Ja!Z#&qtu-|bI4kUcn!OAnf=OBDY_`ZXcXZ*lHxRLNf2YUhbatGl_
z!jBy6pRrds2xk(mbg&m<uW}GxA^h0EN<CWbAUs33#sQt@CS2=a#P1UaD`{TmAe=*3
z<zOYv)edNmGvTKWR?_^LgYXmK=MGlV{Dp(?72$dZD{0=~V8s5?!AjlP=wQCW-sE6k
z#IA7=jv|zEz)BsF|G<2Moq(mj#PNz--p?u9xCa{GrrhEUK_lEJVP}G-xc?738#KdB
ze#e`Gmbl5ocx%uGH+3W478Kw<8@mt`;U<6L#h?Rj@+MveI^zBlb|<haZptg(9rVD>
zv&MUZez<vtcsb~g`!CoPU@-10v4?=6yleT`!@x+~JVSg87)zMzvB!ZuaNmqQ2}~wT
z6YNT`H*TIMzORFKJNAAK-d)%SICytsALQWOgMBbKgll=u_@Uqk+&pLeNboD}MLUWg
z1&+r(2m1tYBJMY_X9Dt7zT4v`gJ0ubhkXhlkG)OUr-I)QXAJu^@LSxJLHu;^JKPjp
z{7mo%+~i~YEI?lRU9rytmk`gR*p~wGOgQoQW#F&4$;bHB;6}pC$G!=WH~vuUTfiN-
z$;bGe;C{kLJ(&e&<9;7oo(K4yu^(`dZ}IqC2l@7n(`E$Thu9B0_`R?n0i;W0Nb$!2
zbzfvlaq7B2<T3Fl9sFt7^tS?kU+kwHd?}xK4*p@-&p7y!_wqcz?}traE0AygIBiDY
zmt)hv3cL;2&pY^ov0nf$;!mE&UjjV0$g$#!97OgLf7!u52%COXAaa5Ds}BBj?8V?U
zuKfY~b?^pZ4E9n7FT#GyLF6&<W#DbXUyJ<?co+BO*pk=4KNy>SPv9Sl{h@<D1A94G
ziGOQsX@?)<Zj4PoCh&8y*Esn3*lWQj#D6cg)VV6$ly_X(B=By-{uIzp`G;eF?%*GQ
zE%^mRMiT$h!5@N6UnKBHVAnW^j3)k-gTFiW*WerCzY+Ue@EvZcQ{OvylHZbFz&{Xs
zvxC3CF@+5rV*kKy1bDs}?W-``LHPQ@W)A9ZjvE96uya5Q+|-A{mJY!{>{brJWNh-T
zunl3lV7GM;`9UH1Rak(3H|)?M=z(1bityh9yVxNZgx%gDD8=5@AvOnF;sU`(*gZin
z(l6K1CI#pmGll&@1!3g8qz?p@*t<Cddtu8x2IEhj7n0Y4;C<}T4#5=cF%H3=*kc`n
zsn{nt1V>|^=pf(yg(rjG6VLJ3XE+3NvCjk-<9{0V6%N63*f%=_uVCNmAm8qVw*%^t
ze7hIk<q*7%eUC%%1~zq05d0Hc$`1tZV9y3~a4*4@dq0SKDfS}{0qvpiQScc4%dnqx
z2;MWMi1HQ0s1rq$sUQ$H^<E(Io+8Ri5FCb0z6*jG*p!z*Wb;Mc9Aa76lN<utK@s(%
zh;oqc`6BYSXd3R1vG)T9;{FW#e1~8o_NCx*($fTcjYEt)DE1s;8Q2MU)RE$*4zWz^
zW)3mxcyV)wpa#38L+}AM^;8gigWc94)(|^%h{dowJH%)=#ncBuj1H*yV27B+=J|`s
zkKhMm+Hp=0qiovI76h?7v8n&<;)K~7yVM~@*|sBoLF{g0N^f$Ak@ix`u=D}^NpI;x
z;9=a9LFp5KGK-P!(s|$++<Djw9b!Cd>5C3A%CeNcKoBd!UgQv~U>a67;6AYe?4ulF
zg-pxh8bOS-cBpiSwZL8tD1(5q>PDG&;~9bju!*bN0NnkVIz(L)*tem*rZ@-}^__9>
z+F_Gl-%)-s>gIRk({}-Nri9P5$RYLs)X7ocXyQEF1iKIxoxQT7`VzCN>2HQ089CUT
zW`2*B;xo}dd^x&>XQ2W3J-ZTJy;W%B{l@-)=G=bXaP-ygk9OLV(K!2ibj+TIF4-&5
zAbUNUV{buc>>X%_eE@y1PoM?%8T7rrhA!8Y=v-}zrqx2UsCGhsY7ca#?uJ&>iT)wz
zE<Fuxr5B);^iuSV-i21tXV4D%8ahGWLLcb6=mPx+-JMO*x4AbuF{h*J@^W_d{yRD$
zA3*=(<7j()4IPdv(b4#M@MS@1!SI5y1$z`sDyS^jr(nN=>k4ivcs%sO24T}MH!KQE
z!_MJ=aBMgwoE{z@o*P~g{x!TI{3hNk-ZI`MUJxG|9~mDT-y=RbzIS}z_<r#N;=hak
zDSk=(ukjn>cf{|H&y6pLzY%{o{&{?3d~;!g!p4QI3fmTjg~f&K3%eKgD(q8OQ8>78
zMB&)N6AOP|ct+vHg;x~bTzG5Y9ffxl-dlKI;he$;3m+?dvM8r0x2UkFxTt+mx1!3T
zX+;MXonLf$(VAkfIHR~}ar5Gq#chkj;?BimiVrS6texMkb-Q@G(srFoZz_GD^x@Jc
zOP?uSSo%`wqV~<&AJrkJLuH3G-AcO+xZ}ZlrhFG{jv`9k6q@d)f^X;j%ptI}H)*L}
zhR*2w(d_)PU4ahfb!b}t+J28#WGU52Xdyn(n}JT@-=RTRbOv96X5i~6)teKgItNX^
zkE7l988rGXMqBT4H0(A-hi+?h<d#vY-6+-mXuOqDJy}cj97^?Kw9Nh;y|J^=1-rOT
zsUnF)2Wxlqo*s%G(@WXM{U&sM-iKb#$I#>XDmpq>pnvnTV1t(GXi9Y=rMg#bsd`~X
zm>IST!>}am6!r`Ug_Yr6;Zfn4;l<%)l<G}vBi=mTI^H&37#|iN6CW3!6t7H_>Ot`{
z<LAXMjb9zVDSl^sR{Wv(!uZno`|%C&8cMZMVRm8b!u-NQN_E%5o|J0;!hw|P=)w~U
zPo`AQOqA;Fl<GZ{>g>X~g^y^dwyG`FNkvnN_M=oUtu57NlxmyWQk|itnx81uIi(Mk
zK2bW4Qhkw9%}$i+>Tbo|DzsE-$x^ER`%KMx20Ts)o9M=9rq~?x^L3Bt`pvr#;{515
z%nPGGM;AnYiq4aN{NFeFU9?;DE4x|#*%Q4Z(X2hgu9tuG8{@!OZ#3o@Z?rek8;WZm
zuU+(E^g;9n{R#c#=4&@!gLxgeYV(EBucMQrlcJf?@zG_`<<X(h#nB}$u5FvEYSz%d
zuQ?b@7kf>UHCb!uwYGPx=q_hhzP|E^mA}G%ZsndU_g?wr%BNTEv2wyn-gNNm0XhNt
z#Ps9i+dsZ7`F|z(xax~lpRZ(mTJ<;aUHRRrJ}bXn)nirHRh?ILTGbK%F00zDqCZ|0
zU->oXN3I<9QNc>aww0HyynN-+D}T3g!OCEH#}#zJD;O14tXc8iipN*nyy9;w?pkr_
zM*~)zv*L^oPyBHDhlhN4z=!*NIG$;O$9>r3gNHuIdVl_Vzg{}v&1hQ5UX(<}Tw`^%
z!WWdnx8$<tHI($AIeEUn0DA%YkJ*zR&ByD|ddxVEA7L@S7c+U#iWr}g2Re><Lr5NI
zK5iZ`TFM(@(o`3@lstm=oYA}$Ghpng|3JI(Kr|YUL2L0oXeyq8R^lVkMtlNVhfhb-
z@Hui-a2CMj{;AKIat>X=(!#H1r>lGEvlpOkcP(0Uc^?VBmp5fOVlO#6WyZeGC?}sr
zfJtEgj2RhcW?YkTYsL#1jJo(NW8bf}8P&Kncd*xqJ7YsC4(G~Pm9UqKouQ_>-VrnX
z$asbGVEaeLtoqJp+@QV|ebJrK*8BqcgtO2YEn1+*qb;}?J<&zvpXikS4xPc@qf`1w
z^h1veMzTlP;8+=YqQ?fKW1g|-n_h(O;^)y`yn8S)))QUOw*|dp0WnOE^+LCCBwC<j
z9ld?fBfVR!oN~AwJ=7~yZ*fP{*Yq>xjO!I<H#5OZrGGex@%>P9rul<8%bdgf&Ku3G
z<~DOXGn4ORChUXEdVR|*L%Z*nX#c+<Z9j*`?9ou1*ngqB?3=)@36*I5KQ6h;fju?&
znq3U;uy?ZGz&-33@Vb583}7bbK$~fHw{6Uxww>9_mY98Pd$YGKHT&8Q<^X0CPPaYG
z4BOKjW_z(q!9a5evj$JL!_2SkaP|rq!CnC)&FOZmIfI#QXWPl<Tsy^F$PBX!m|6Ho
z_Ga*z*>e%I%PwY*hJ(ys?7`-8JDuGL4>4ERL(SFp2=*mBnvw5#b|yTQT^T(42K!q6
zhW!Z7Hh0_8%tQ8%W}dy&JZt}Ap0Ssi=j~tFgW_uTpty!z3IE1Egg2X4?TzfyaJzZi
z-fiBs_nP;Z?e#u0yFRe@v-9bb>^C^yY_y`c`CGfle9!!)@9fLWkov88m^o0Z?Zaje
z^O^o+r<!~0Z`sFimRW9Rvy<T*cAt2FJr3rYNj7A6gHh&5dl5S<3^ms?$84f4U`NDj
z*#q$wc2)RL_EoSEyDGdVdn!;ls&&VNFW4<%z1uCpewExQLH0@TirIDHbNeOQvL8k>
z_EWJ^G(Go2*K>dLKKE7a*mKaF{Up0|4q`W?;plcAjTYxU(B3>5&CPqFwRu0ZH6Mg7
zX3@l~dveCkMoazP-Uz>v5n&YL!Z`LcIFS)z_uBmlX0l&F-Te!WVYdR=v)}~Y06s^L
z{1<4FUym;N4QP}95`FR;dEeW_yFm?F<-bC&{MTrf{|4Ri-=baqJKhAp=dIxfbj)v7
zE%Rt}_a6+b{}8+1JskM{BSGLl8pQm^f(-xhpn?BH(9nMp9q)Il#_-v^A3h}7!A+$t
zG*fJmnP$t(ez1G{!{nW42eYTe5c3<@xZl}vy!Vbbm%yl9Y7aD5+8O35dl)-h9&Y|-
zk2Kf7Y+VbBbu*0BEwEF6hl!eN&oNKKFwM7@n*}gO&)F;4)$%HKzPpY+NUk@F?M>zl
z7@Q^cR(7VGXFi98Sr6k<1H1AAOv+|<&e$D>WH1cK5ZI2PFdM^QF^0ofjDVdOX>-gd
zSclOt3}avu#@bvn4wm3>7=a^@{vU~?|5r%$k3xcfwC&Gc9~I_Ur10k<aX%mF`n^cf
z|AEx}KKpxfKhp47_DnMyDfb*C+K<@t%%k>vcI3Q(okad@p0F3PQ^|wutoabT^*zGg
znva@KkOZ$o>RW|`cY|GEzCv>QHB#Dd>_27ChB~`7$W9dhm$nPVa`tUl%U%uX`!vWd
z6zMxqe95j2={q*ajucm>cB7D88@zjTABMC&7<BK6^nEAZWZwwcAz~f7La+yf?(-n~
zI>_D)vR6a;J`J)*L;C&<LwQq8+m}K1oM3MU-ebKF{a(70hU~8K2s<+D%bpB}vHL<l
z-fzpj4gO%=UqklPc!pgX4)LeUeiO3W1ba?+x{n5XYxoDVcf*X@Jtbt<iCjNlchHa>
zHE#1|M~4I09byRkLv-+W*L^o+UyYa8`(b~2`M&HVAbSc7WS0QhaiF{IInYD*4j2@h
zgP!_Ib`2Q99s^U@KVT~R0^E;Y`+uU#UUb?w=AHUe(NZ64gpT@e&^w<KEArZjR&&|u
zgi*?ZOfv)KG8i#x{8Te;`fp|)V=7RMdbH_u%poTqXWE)TMl;?!c{sil8>ju3y`eMH
z{#z3>jne)zteb`=>*&K~9%l~S+C27<nMa#R^_WK=d$bvM>{h0x7g+(Rkd%9*C*Y1q
zDfrjWG@5nQti$i0fA{LUAG&*=yZ(4rH`9XD5c;o6&RlZDq;Vf~o!8_k{NzeQc(1`g
zNo$iX4UQt*;XLEoXo)E^Wl>GE)U?O0jux60(Z=Y#=my-?(VS=@|CUC#CH!VZHMQrz
zkkHZk=p*b|(X-M0(F43|uZUJ~um8$HI%*;$1g4R*BYiiDR`P5nS{E(j+2q_Z{^1ub
zaEWy1@gp=(XOjMjvm2wTXcJdU+*Q$+*j4-!ANffhZA_g1R$~6;9T9Jd|J@_nB=?uR
zbw|Y8FaI}bNk}eAxfn^O_(iK+NOvATLMv8DsPu!pCuS)F@zv|`iE7_$-FZD%gMSS%
zYf94N_^ED9v(_u_C^d%nZp?Soe=V*=t#W>}E<N0N7h3CB!as3#1$9Vj*$N<aOP)e~
z<UD6+Q+mG2h5zN5(U<@IG?B;TJ$biG%YZM#+M3Wz>&83I)RZEtOgnFkd`Ak@U(U&q
ztS!;JsNS5%zfOIM5?`m$;^;+6xg7H|QuQL~7%$+fq=NL_r01!p)X3-f_aeRMrsx!R
zPiIDN>$AKQy_Kv_(L;&zEyRu<l4q;+Q=i27AF-mRw(%@a)qi0$H+my_o^&Gt;f_n|
zh9dQH{?q7%=y{|pJd4XUp8K<Cr3*`W@Xg56E{*O>_(&fuhm2JwdRLz%>8C#8zwIN@
zKh#9`%9W|Z`4i*4+Qw@8o3s#1v<_(NOSa9_S*~<vs-vrMljE*+YY6swlzovH;Mo<)
zcznT@nSgKHaubuik4y`BFJTAK_OT8okMVXB@XWrvJv26)<+qz@$uBgm_{B{wzarC`
zUpv!=-(cQ5+L}_X%`-zxKEHhkTZmo6Z<;CQw;$&vM49Qx8%!sD`KB|!8Kw)reAAWR
z4AYI@{z$iXH3g;zze3ZKU$N=MZ;<KDuf+7>cNkyGdyv8jW)kZPFXA`QJkQLn-B?BR
zCih-yJ|&%>F?XsRa~!_m&fhZsX$arQA>Xud8#itFLLO}L*>Mm#I=c>z;X7jwzFOPz
zl{$@YT-ohD&mP2A>I~WM8uMg(G2t)ai(v-4`(4jB$&Gwv7O?l;v!<AR_x@>0*kf-o
z-^Oq7)j9)N{Ssn$i**+>_zrxBYxx$${E$@{`F!my$NwW%8ssCbUqi^XtTf3-ZeK+_
zpR;0N2H%PsFu!J%!VGrQ`wsJaR*>Y$_oA8MSuZg8?4j2XH@oOzW_ej=f3JzRi^-Fn
z^h^Q!=jED0q{VH`VeFunZ-%mqUV$0rwevcdX<iqviy6;8dApj4?3CBT3}BbMzWDU_
zkV3FW-fpHp`{WHWt=TJYuxaBB@rIZd-cWC-DffnX!%Rzd&KqHN=j(E`nTq^zteL_$
z<~Xw_UzocSemrx^C$o#*9wx_|;7u@lu#?_IBXa9WW&%6vO*WI*Rj<;>j(U5W5lFN5
zH6y+Ky!}io_=^3_Xzu{;08_~q>Vfzi<Q-&ky+gc1a3AU&YWgAhJ`DGf%s9_szr9}(
z+p*rU_?+OKfO(R4I%#8nJ)Y<c?<`XIC+`Bxzj#+*UhmyRYHx#?p307Scammy$|KG9
zd9z9LBg_~W4<j;<80LG=5{7;7@PC7u2RZC=x5iB3dnePhlD+9nC0{)qaF;O`A&0Mn
z-Ep&D9Og`arWxy>;-6vy_If+j^ku)d-<aO)_Vzo|kX_!+F}twS+qov2-QNCaGT8C$
zPi9y4d^_KG$l)*K>?Qssg#Qb(@q4oC+ZFiy)&HyM!k%x}n(plTb{+BD;NO7%&CJ%%
z=Bxehra9m2x0y`7*6-wwcQFgRH(%@b5avE+W{=`4eHM3_?a$^ebN#u5d5~GrW7!ez
zA#)&m!aZURk{#iQ?I~uukC9#B%yi_N^O+FyEc5oWka8|Ceb^)JIn#@M;$GnFi~ftI
zf$SBBdy&70FfaQr<9^kD758F)v1tNB^qOhP{&BD4^M?P1>Bc^CO9=C(|E96BpB(OG
z{xU+cs~qlk{dY}Q_Lh4O_xs4vd&nMhT)W&~4)yqv{}KKx{1y1D^jDg3>^HZ@G)D5e
zmXv(rf5O>y{yIXk{~Yd5{ZG03XUJryBiZ=eG()!W1=p@;=6xgN8yoQdl3DeKAmiA`
z({1uM@pLuJkDrdD<1142wf{BlZ~Sk#ie2lt>U*TR-H><uK>8y;GJRzKIx~hH?0l2O
z9(FM^UG}lV%}#cvDf`v6Hl5h1E;OCBM?Qcaxzrqh<gkM|n7!&cnnPv3I#b5?V;9q&
zZ^*8u17DHdaPJ!Iikltm2tPg;Z#v4pX=V_;c6)X@=f@uBd@Iu5vL`dr%w$g=(-<3S
zj2RkZ1C235V{E{Fcs*ID(<|u3n9w`ujk{0K2X|k_2dm?QWqe?-W!d+R5o1qg0eF1J
z?!_Lya_<Iu?~K%!TJB8wQY+Y{^<(t)V;PC6esNzH@`hETzm2@r$a~k9d{1tQzA?>7
zZFTem;0wt#kTLf^c_iNhWc=nmdcD34eC~Wn<ua3Fnvw1=Nb9EPtHd*i`)7HJts86f
zHL3b)$8tm8E-UK3WA50MKP}WRq-KeX;}>=$^PakL9`)og%5H&v={*bcH;do>rXjU_
zZL~Ui5IKmv{jLVj=^O7R-ixcFXMe6olK1$unoj$ZJEhuM>fDwo(618xZr$?CPW_*w
zvFZ0pz42~+W^12%FZ?$>8zI5l#*xasZ3Os9-rDaZ*ky@XWoa*9OG&wJpX%tnx=|)%
zRvX2aFQeL?lbZA%<%Wd8w4x?{TlcCR{}+9<Wmv68wf9M;j{7CPpY$odO11>f*ZVDu
zKcm2wasT-L=(^}=zK5CP6Rk;x773!>RlnH9m%Desd?gto;g_iG(d{mL`dJN872T42
ziY?FmSN~7_X?I5&u!Iqn^4RKWN@S!ZHoi-vPt8P3Cy^+@FHi3xE@T_EeSG^`-!ekW
zXr$$gT;M152+3NIN|D}~K0I13ax96LbMEeXOOuVIwch;|Gun`Hr(CHxQ+~e`SM<^^
zB_+vp{L)f{%xZozZ98Ho#;t{^u>VRwlDazGRa@)RJ$KkG>EL}4i9fcqG95Q~uiauy
zufM)VKe!tu+f`CJxWl)v4VY-tssGyM)wi*DlA=$MkT<LiknX5$aa+cc9%$#gqX#9<
zWG}I0{NyUqwVim#x5zpvhvZXIYOW`2A?4@Xlp%dy-Gg2;dFcB}{dF%@!YNnsvifbt
zwKHJP=8&QVE`-*iSNX~iR&8mb)<26}u#DW08YU85-VCDGkd>;WG`g0QzqWP!#IV3|
zCW)ADieBA1RDC|0`mEYBDVOtVsn&$r^HSfn&a2r886)JOp6!?j(=%b$XYJ7Yd~G?^
z7XyCLcNi^@bk=`VY}ppmgVkS_=^=j1Eiou~BS{`x@|(#Tmpos;y=Cj);cq};X15;q
zYwLOX-O}oEy0?kmsxOB6{pws;?;lExKC$lA`roxTy+#?na{0=3QOJ8n!liGI5<c<&
zGi>Rj<ZXnv+T<09(>rAGUOk7e{B>NN_66_CiFf98yk$uL@CEYjUbH`vS$u6W_1)*o
z=<DcXxrwx=`tMB)b-veAY2S9@NX-g~Ej>nU<NEaOI?bcL$RZL)S{}K#|JwZ2`zQMG
z=-VBuZ^>AbHeaW686_mQw>mUOYLx#num*9`UFV6D&!P2bi!&~=EyHhhi*0zg{L!2s
z1ihW~fqbD*N^Xo>OK$fSRxS}TS-xBKEp?wPJ>OHePL2a9pRHUC>Rw6CB))^FMM#Jw
z9rV#HU~n4py(4e9+7dMfsaX;q?%I;uD*m77v8}eYRW#*^(yKk8Y28*^Bh+@kAZy<l
zYNM-lM6(&$<|{k-q4T7!Z_+aRj8SPxv`R~B8M8@xNRGMO(7OK-|CY)%Iw~f<i)$lR
z2XiqJu{!_M`&;sDs&4q?KbU>$Wvc9mM`wbh`E2A{gkIpsj=J^e$3k!GJR|t05l<-6
zAUU)&boK##r+od3-va7U3*?V7v*c53K~<^`$3Jb<ao6Z|sW+CC=a0G)y%w{H|HFqc
zpOd(Ib3r}#4(j?P(y5-?8{6w%wY`6-I*<s(JSUN@yMwdsO~73}`k5F%17F(&Iea$X
z&jAc-0j_rZnh~xKPq42!fUoU~%+*LFZe{*(FY_>*=}2bGda#*sTf|(-4$Snu+>V6_
zy+WDLzcEwy5av@(XJ+M1Frnv~TkW4<Kj*`KE@qDH>#&`TVL9KnP2e}*v)T3o7|v#_
zR#{<l>?izMz-fMNTMC<L+u9m_dCYu`Y(5O8we39Li`f#df!D}(@L(`)C%DU|wzHSx
z<=8GTn5}JBuhi>cca=HVwkI>QhuPlDz#d`yF!y?t?aL~oy=}i>-(X)`9_$zFXZr_t
z1b5g9=9J!T2e3M2mK_+(3Fg|ttWtTx4hx<Np0Xo_J+Y&h)xN-vi9Hy5kXg%~c?5W{
z+X27Ue3dlB6c*egC$n)k=hs^5K8&(3;*FINZ=;NO9%ovU=fa5Zs*HFO${~+6J;I3l
z%7|wuBVIx&6my3Xe*KB5l(G|Eyj*$l4CTekl^4%YUc6j+@gB;HXA)m`lcnr<TV==d
zl^qY29gizJUa0JNuCn9(m`T15={kw|&8?Lw_bB_Pa0_2vs(g84<;&YBUtXYmc@yQ!
zyDMMrD_`DM`SJ|q%S)6m50o$O%lz_vO@FN`<;t4Jlr=9`*1TL<^9*Ip%at|np{#i(
zbI+ePS<0Q~D|a4O?z~XB^K#|RWA;sEi}z<X^-@9#k6x}kdWL<MwRByTP0vs^Jww^_
za%Iyq>?*s;RIpZRHKs7@F=f^>lv$5654)P!gkLXbCiZ$}ybH@-Zojl&nqJDam&?3t
z!U*GDu8ez38TWGPYhW_GnAgDcQQo~=dG~UuwWf#i?lI-vGo|jDEU$&v!u0l9dM(Xv
zUMsH^ZsFtGDj#2{e0-Vm@g0?qFY!8h9bw!%d!0=$W!z<^_U>kkGSg#}MINjy@(AUR
zM=NtYOqt-J$^?&A4tSXIz9W>`9icq#Fy(FsDMvd>+0&8Al@3v^bd<8BBb5^!uB@b$
zmS%QQZc^4ov^N8E&PaP@5{r~c?4V3yb7c}cD3jP+xk;;hVz%;$&6H2fRz9(r@`+8A
zPiz|O7VO5Xli|T|c+io-NX*f}Xv{Ie7}Jim72`~?a-2EJJPv?)oB{(n75;Gm{NrA@
z_X+kP{Ip;i=KjI{nA3ylrX?#}W|&sNQNdA0djZpsx#f2<|K+aW9^C&3{$aY%BixVA
ztY8-I*}+`g4+al%_MzY*d>#%S#^*6+p*LWy;uEHk^cVOG+ZsxLfzNZnbEcuPpUsv1
z>=5e`>tZ^^y2rYkZp^@+X?iLbTSCuqy7tYDX|q}UYr-!>dy~fW%gykUKBY15(mAH7
z_AJt`w4{B?T$_CDSwjA`W-g5MEXCThlxWY=Ui<h=?c*EJ$G4~N@4(OXCJpFKI`j1_
z^K0_7AK69wkrvvI<Z3^Xr~OEQ_9JoaM~bu`X{Y@N>pmDU8k>vFrKJ2X{4&gC`~q`1
zV@QUMA&nVB$RqP4eM)2VG`}n}51mU*wSQ@;{Yz{5mydat)uxKnS2H&!U;COu?Q2T3
zuW8TvmdG?_B?~NpwTwuObwtY45y{sPse$$~dAfGQ+Jo)EwCzI}oqQdgV)QsCnFjPY
z=bB8$s0&R)dlB>fGwr3!+1W*VpBCEt<kI^*#5|gZnJM4KK1olMr#(?zd!lyQ6O}Tu
zz0S2Vm#2Y@Z@3xXOcTbp4{*yYo;(@la5Ku`mYF;4w13HywH{n0y-c3=FEJVSxK?_W
zJbISzIs1eC0iVsx<;i0-j7+AChnPOSOeVcdj9EMl=xdtL*EBM_XfM-3#ztnrNdJ<l
zy-5MRNo!Ne2+1howP#*WuD0GX87G-9z&MG?IEl$PiOD#L$vBD0IBA;8IBBwJ75Cx3
zpSF>$ZKD}u<{aD)&_bGPd&t)IkfZG(N83Y@wuc-UKdE)KbG2J6rjD4r_N|&zYp2ND
zE#DxYVpj3iSQS0a7v`tYtGp#X2S2b({CNvr#eY~6e)2Y+_O+RO-}$+1{eoLr=PfQV
z5Af%{^Z)ze=X;5FefMqcz9|!?%nwdu0F${bHsxMTy{M)alvx-^8&eX7pC^Z?XRlEM
z=QH246W?7A%9jmymU?RNe?h-}R^T_s-Jg{LFCvZD6g|xOYQ82_78+e^N~p!cm@lGM
zBPZS2sZD)Z?Rd=0Xwh%_9lv7dgp|9c-+9|<*BY|Z^J@D~!HVdQ<Vzii+aSu3yW<v9
zBmp|BU#=&FNWMjOvkXpfS@eDMChpIWAc&MeqyWbdTI%eVoL#oFOPqN~-Sjy`R;2PG
ze71Fv%EZw=(OycD9(8Py*7dF9^Kbr1ma?>1>b|rYt#O(!NHLPp*Rn`R$NuvN@||v)
zqEF1g=o7iWNPI9Cfpu=2(HbCfT`BRkU?cBRPP*xsXt_WR=jZI5o0qHUciyHC`P8(=
zTuxnEt-Ybt&9@mFWwsY*QxcfkIqJwA36qe_;7XHnrn@E7fAUC`|Bl?1K33$W@+Po=
zXMa0cXLjV;e?1J+_ZMY;!qzcJjj8V-l}o^;2t5j#>-m(6$Wq1r9Lc<_0(vx68ui8T
z%kiu4$^X^V@#NAUZX@67i#0LMvUaGxvq?W%K~17}{<o#m$$mO%*WQCxwylG^%R5VL
z9jUio7jQK?mpB^9k83{HfB%w^%)>2f(Uz%Bk389vrTbAD(wAwjX{vLOLCJr4w~|$5
zKcTGZ#`~ZCw<QDlv)+Hu7P0>nx$_`asr)MkOm)5WYAdcN6}gt9)J^UA;ntAZ*FC5&
z4TPT}3^FhIrS5@?FSMWkNVS{o-zzaP^Ufe?Or>-CSJiixr)E{KtOrg%EBqfvL0w<<
z>#t@H<lw{A#m<OZgldofMCR2qM@<jq0_c;Ha~Xv#Vr_Ba>`$`lwrR#bO*M0K>p3)6
zGLf<*4&G#$fk`U9P`-w>mYgUseJSsgbcVRF#fkYNoXK>3(iYE_jBFcr^gc5==ht^~
zTV=F$J>2qY(nr6f%(<jK!98vn>Ob>8x@UX$+0oj&y*Rc!SGUC7SxRo;mf>7|lF}lF
z^c|0{;;q^^SJka|tt5OhE?k94_s?llqVk@)z4!YT$S(gw$G^dY=DAw=A4=%|=Wg>K
z9mjWG?s`bWJsmGagNAQ*;a#sGGVFZ*g-GNZE0dSa*Y!SpK^|x>M27x1_Cc6#9^!W#
zn)F{W$D{iwG$+8KwMQdTneBx3qb{sEy+Zl3+4hfUHhK~*PB)mRl<|66xvqI=4|*R>
zN6YPUGaqJaHJXps+O_DdS;uP8=g~gqnHRhaFT=d3T+~ajP)*DtFPqh$FT*O8m{+_q
zSf$0R@9b$__j-H1%@TA6_BU^O1H1ud8LK=8o43&pG{(H=jq`RlAL@$CkG!egRI|dH
z=1nszS$TP|S%v<{>1MTegm;8lgMOgn&024!H`A<RRpoW2iZzt~u-0$l=i5g91b>2U
zBOHuv3kx#W%9`S3z=PowX0<|@)e7>hu^FLUNQJT>74&5-7>9-b=&t<7Zpwf3Q2t|r
z@*jhg|LCdw2kUqF^;2eboHDEZDUD**oC&8oNjcR@<y6Nhr&_68$T;OfDwPWvpj^nV
z%7qM6E@YH)A)}QG8LnK&80A7HDyLemY-)wFsTInmj!-tWLfH<ObXFgCS2lGwWjH1%
z!_iY2j={>N_ER2pobsssl}8<`tVX4Br<0UBtyJ!`Qn}M{%AHm!doe)Si(QpF9jJ`O
zXk{$MC}S~Exr$2VPA6#{8mO#krPicz%9oB)-eR2Ar%L5Z$0<iTNjcJS%3+LA4r8FQ
z7nRChR4Ol8sqDo-<wYx%7oDWMXr=O^<CGDt)LK}nT*UxoL?<aDx~no41C_BDrTpha
z<v)8X|Jg_R&;Gg|xxKDO?x^dLTX?;^UZ%0GN^b8}c+?nOm7Jxkl6O&#w3)6-Zm6r0
z%XC$8BQ#?UH(hjXa;Y+?&2$a2)iuZ+bPaM$*C6}42073gpW{vOrkGAz@0)sidV9jY
z?B(r+kE~73N1GyiqpnbHpsk|0u2as`b;@mZopOP$Q_j?N%1yk3X*1cnS~*i!D|_00
zvUSaJrgu24sHv`8wz_gT@Q(71;$BC4M|0m}ykp>*Wi4~2wzO<r(VU6yt`qT>R+p`-
zn@e?db9?27o9UY6_PS=d)O!id*IjhAvenhf0ot855I;Jch<}r}iFj(f8r)x@D?G!O
zwal5imbpOMFe`s$MRTUEXtwB38f-f0y5>xOygwedtZvRkYv@GN*`MT3Vnd&O{e4ZI
zvd4wWKgE?jE>!k-va-kRls#^(>~Sk)k8_nhZl&yTuCm94${rUfdt9vSagnmeqJ^&<
zc2~3&v{d%Ejk3pGl|AmN>~U9Rk4uz29-{1VFJ+G>D|_5d+2hH|9=B8WxT~_qU6noV
zs_gMlWsip`V?18D;ysir9<O}Z9?BJuSC)7WWr@ctD>hzPv2MzW?V+sLaAn21DL<U6
z{BSGfhx;l&yt^{P{pk%^Q_HUjBZ|+6B0Xa>Sk(-AzXtqrwU?APl19AMQ$EaYl#!=E
zd%Y}ry^y{Wg{kzNh5TA*57<h3z_vOfh1zE|(Rm;(&19IkrrLkW7<D3dnaM9#`?5S(
z>faOd8T|6inT%j@9l;881Z$}ySQ|z#pKToi`tvL_42GtKj%L|9nl)!M8;s8oI|Tk#
z^eME}kuB7bt%Z(kt+iKbq5V;|j%+#F6YZjNHnQ!<jBmT>_?DyNTegmG**d;8*Pdk;
z9p7?ve9NKNXvaGL5=Oa@QLYSq2Qq^q)V`y!*OL*?(-F^O#4E=wdJP)sxaVmP5@-+7
zKu14MN52Nz7i4NL5Yu+vP}{Sw?Kwl+aE6Y7F>RTyHD>4-=*bw!%5!Ny88Qa4dRpco
zgfa$FR<-PC%Sn{9X*;V`drECj-kU|f#N15mA8^UqW3cmHUv^$h?rT!@(=O%fb6sMt
zzcL{D6boc#Aku5614uM$tx)E7nXIcqdM)g372h%I_yTNBjn3h}&KTZ#Y1}%dE%P$<
z<tnb!*Aj02W2&q#`e5srejXo9#d`8~EBPiqt4NQ|Ku@MK{hzynysfP*<Z?BV=xP{)
z?MhYu^(P_jo9gD8#6?OLCgV(|H2Gi8%Xcj60g|Q7y5kp+zKibyhxE|DWH(RHDESn>
ztaMT`@EPPL^%rh>iPozc(F+6*lu4>zmHMK;TDIuF_XOz-kJf`)sf9~ZvQCp;ZI%D6
zluC;t2L-h)DkT>ZhRwA?vB6jWKIc|n``P}}(|3?QcW6pQ?k~K_N+&sTImrL2q>RR~
zhpYqmRGyDBqHRKE=qM+ijO)kj^fLUhu!+>A#V?X;?x?+<%VpkpIB>H*ArXG7vX^x-
zwfW!4$&FpupWjT@g!DTl=Qoh*Ez-LEdH?Bg><l+d=JVtXD~T|ZZGTZRW=7&Fe&k(!
zhom%>dge6LEAg%G%AdzCDJM$iptOiY`Wi?LO{Mkcxqtn!YQL)Q2C4JOnwYGIk}_#W
z5`vnoYa&Q}3n>@IJY98@x_W22Qa!-VjJ3YFlBHAMx$XOHU2fV3d|&sfRH&58h4`s=
zj;@gFqI>Jc|KtBylQ%aRD#^m~zH)o?0<p;o){XK8z$^tBZC?c|qEjV2yEZUG16_i*
zsQc~cX>9a~^S_mzf19}h?8UJ2k1c!Rt#Yn*d~o+pAElCEcW~Ts?AI3U;K!eceA89s
z$v#wDg!JWTUgBGz_TYb=xlXBft!P8aT^syI9Y39kPv(b2t@Ts1LrME(jKp+pdlL+s
zuG&ueq$ea54&PQ=mQ8xdf7k8GEV_YIB;KENeB7d+ukD>kf88Uosx8r9)je0=zn|Iy
zQ*or{s`Hh&wu~<oD&<OrPQ~`$aA^*wtuIXG_>ZPV-)goUDxsM)E#_^9-SP~r3O%h!
z-=s@)IFYxX09|p%h`HQ_;j2BZ<th*BPSi2C`JQl_1WWdabuRglKdI3v`MyLvTI;au
z%$QBo=#>&q-cotO6}(liQ@6XKjB`1zRq<Yvh^1}<WPTR?b#2bnJ-h9HsdRFE@{2@D
zrjfk;N3W!EkFi{O`Auk#UB-B@2DcmSm!`A<x%;^MlKF-(3|k$E^#4nx&pl;shaTuy
zdY5(LtQD70Ds_-HdC#s#&XRn);%vQnn2ICiN<Dwd@29#_^+#eOA8UIh_cW64qE#t%
zY_mS5)#X&^|DY=escYRMr|#dhe_Mu3JN1*DY2)QjzV;V?L9#|C>t%AB-A2Ma(+=jS
zyD`cZ#k@Y~u+31msG&E|8;Hbrh&K`@MfB5Vqmy>BX{KCHE-cT!=(ZJovjs3X2O>E>
z#5>d!!qFUVieYDtWnIk)a4wx;TmEReqBHh3Gt|2ejj!Y2NA@sxDfjV?av$&dC;2Cv
z_f)^@2f8xvLtTxxTs5+Oq*_>4=xV%`=u@3%K346it5qlJ8r4m@RyB@(qMAb2!3#X2
zd{}Sg!zvT{d4&%vS3az_O0$RPbCxSBHdtlaJyoV%p{&>*%8K<-R!sJb8*ch4D>hYG
zu?l6yhAJyIOj)sAl@%MVtk?*ZgiqF-8maQ|G0KW{S5|DKvSOo@6`P{0SPzw!Ptx2R
zt*qGY%8CtAR&2CN(fg|ueXO!#qm>ogO(p7Ml@%MUtk@W3#fB;?HbPmkk;;m7S5|Di
zvSOoE_C8iwvC+zkjaOD|tg>QLl@;r)tXPGzV!f3Wo2sl>UuDIHDl0ZZS+SAIigj03
zY`n5!-IWy^udLW;WyJ=mRDZ0pVxyH68>+0>NM*%FD=RiqS+UW|icQg)F;Qzqchv&i
zMAvUN*ZR>;*Kf8_{l77-D@CgRH&^xl=BfVQY}Nl8Q~kf~RP%34HUGBM^`3#Q_iUq@
ze`8wDinN|}(R$WSwf)9a+ixe;_M4~LezR52ZxgMBMXKA^`cL~$qZe2-{D!(pw3%x7
zEl>@=4YiIoPz}GKt{!cz8h%67@LQl7enWPCe8sd?J--F2=Qpl(x={7}7O0+IPxbtU
zs^_<<>iG>-&u?7y{D!LMx0UMo4OP!?hU)n((3Pq=s^>RUJ--F2=eLEfUG;VCYHQW=
z8|n(y9M$t1YFjE)J-?x@X)RVgzXhu2H(&MqhN|Z`Q}z5d)K=F(_56ma=Qpl;enZvs
zTcCP=^HtBUr+R*ys-EA5s^{0Lp5Fr1^Bbz3-vVvDh023AQXaII@}P~B2OXz8Xb0s%
zyD1M^raWjz<w47o2kodlXd~r8OO*$0uRLg}@}TXN2hCC*G)sBV&dP(9C=XhqJZOpX
zppBIW9jH8LSLH#+DG%B~dC+mngLY6Jv_yH(66HZlln0%l%w<PqF3aeN#%fQL;dS-8
znucCCuNyt6XbsQuy3_COqWx|@{ca!ALi;Ay`{rx!+g5v`*4h(gYERTgd!k(Ji89a~
zK9U%uZ_cN09?#lF(H9=mUa5ihO4-^gHP&9KiS|d1pKq=`QI7UREwv|Vu02sJ?St~P
z_sP@VC$2qCp7uD6=xb)cdmrW<Mt^@eJ$(c1abnuzG|?WXDLu|Hrn&YtdD_e5X)n{9
z{^j?KEoU$q?80bpD`^%D;%(6y{xB(j#Cx5qL`Qf``<Eu#zclr}gkx_`Z<1y5v<J!4
z9weqcNK@@W^0WuZp$FN6Fv6%8Xy4IXM-^Xt4PSc-tF7H?YY()w``VtZjw+tESWoLT
zn~qU-x_3^_$-+3c9+$IDXUE7pm#ntn`&HLDZDU~lPkNIcSy{0RDJF03jQmx)qGBCi
zGA&@FOE5D@?LxRil^7H9bGb%WT!;jFp<caHS6+y$9F2grk`sALPOxvx?@zunr&xh)
z<yT6Yy{!;C>aX8KZ`box<K8WQ<QoFnRND8DazZ<L<86dvz3y8uO>fqf7gMtyl?#&J
zPv{y}sq~hS5N>uFYY6u(*Ra-Z9sIXLVs`tMS8n@1wL^5~RT0CpsZhzXO8M09N_`R4
ze?H;69WA`|T}Nu<8x~E6a@KwAkj^@Dd4J>`cdKY?^EN5zX`IUMtpeBML7A}HT282r
zw&XXYe(_QUpNN0*9(6D0x-^MH>Re*~ks4hoNy}l@ihOmx#*eS~A3sv<h#IvCy}GZ+
zHGEx5t4pj0PqoEu#mAMY_Ifl|3bXN?3$3fmYmm;~gx?y`yu0m#c%&w!;!@5btsd?8
z7g*EUtE7F_X`|dFDPu4{E~li9q-oMmNEK9{UGh0#7_^Qh|8L*s`Q#~GnI|Lw>X-Ia
zome-q{fP9eN?fGeIVd&h&tdlUUu`bB|67>j2v2!CUoGu4X$0weA=PWSP=roPVcpnN
zBCq@L@FZ6-O58x*LE?^N{sG2_3+RjAMp81j?p0g-qc^3!{#kr^k{6;1mHW#q7rl->
zdgdUr`m=<HE(FMdFrTbXvXA5#&2TC^TC1VpS_vz8&WOx>EE$W_o>#(b>!|HHWQAv9
zWss|(={b^;rbs-g`jv`RYc@IP?#olvpb>6)BBYb<Z&x37GQG97w2g%JIf+~Eo6tFz
zylYYdo&29}OAe4r@-~8`N{+gHqx0Loxz%%Kk&di7*JS>b-5gXhwW`kbhB-BLN{W84
z&i}fh-M{2>yK7ze`f9J7sehELjkN$*0W+wLX|H{@v~;PdV&~Vk`)$de2C|~rFyD{0
z%iOE6UMn%?139E$l6R{e?>`1|MHyU8CrN|u8o;&0okM+>r&*?P2iu6Tl<Qi`jpZ70
zq*$H>_jO!bp{{DNiA$K5cjyBuRJy6Fn-e{AOBYf?Z+)cavZP1uvvsI#`J}=o>*TgV
zZr@*8qrA%`LrJ{aLKCe&>AzjOot)*ps5bq{+MZ}@sWo27w~N~QZ5^-nMaZ(<;c|)A
z_bK_`+>~mKl3K6><6CVi<QYNg;ECnG?D(n27H<G`;-(dCq>q)^kM9wW<WJh0QEF7I
zdxx}pRVViv*j5M)TW8!&U0t6`)8KS?Ci)|nu2fjL6VI3!yA!3La%|^zca*U-?V9A+
zsN+D=pMF7S3#8XpcaB!U?xeNh=5WW^Nj)Tq5bpgg{Vk<7eDXT6Nyl7mpG$Ddh_Cf1
zTF$>ZrIvopkGV;AHKXa$x+5uZ&y_1R2c;wz*5CTcySeffCPy-?x}^vC#EoXPJtxnE
zrrWff)XTOqBt)VlYHRmafp*v<ogd%fi~a`!rqxN&vcoP%F41T~kx@7~{%)flB_6OZ
zIsGZ`QCg4EAKH}?vGR7|4tyAqDA8?}pM*{5F&2$F&+=}yO!w5dk=nC3x?W<Vk6>=o
z_7A=@V8Mw?bdaAR?~Hn-J`r&)#eZ(}0KN;*P5z*UL|0FGoV7JlYLd$dS&x)D%G8;a
z^4K9)mwG~Nt2fF_giXIIUX)C-m8YeM*6UK#!G);jK635WIiFmkUMCfa(iE+8dL;fQ
zQ<Ah*zX<7Z@}qj|N&V?a`EFfrQs@3v7wLHiJx)uvkVI^Z9#4-kC2dIe)!bW9_ewdh
z-;T^hbYYWr-7B~Gk3HB_?r;2G`=_!y+-dCf7emVbH`dl%>)&Kb{9F86SV?m$d-Qeo
z@Am&;x+AHd%}#v}_>Z$A-&4rt2m8<X3(QdD?~Bby<moHfb#N_v*&T{>d!so5ne{j3
zIAqh2nTb5QfjI?v-($dIRh_IRaVto2b)DTvU1yiexZWIpSz*^kSJ<`XUoLNIqFb;)
z*Ve^#ZQZEEY7*Itv$d{_%hT0xZcWJuT}R^9j^ye(xRJUJE>~B;wb2!DZFTKiT-Uyh
zN~{Z!9Wz_&nzc~ZnuWSLthKHS%hOe0ZqLNV$UT3}&V#aZVn6@?{Qtv!D*4!7C86EP
z&C~IbT@=gx-}`6aKGQ#w9RGuV7VfkCvvJGricV(QP1%)!%C0o`&-2eCjO?-4#J|A*
zGj7>w(f2R%FUBqVEq3=W^)JOOyDskPU*=zqTlQY`{VV+|abM+MMf|c4V_*MjN_32J
zGF_CDDfh4Uug6FBWc2+TDd{mPvF)biJx1lWEhzO{i9vR0wEpe>?SzrN8vCm}w>!1r
zZhU0NM&G~JzZdsEs2@4X=k!!Qr@8VuP5e3j1DusT9Q!M`(^&U#9PK~sKaBsQ{-c<W
zQJ->DM%+y~pG@U^Iw|KfL^+>bl=G=j&Zn13kXtI}GekL`X3F^tQO>7AIiDfQ`3zRh
zr$RX&PdT5i%K20%=hI#}pCQWmWGUw}L^&T%IiDfQ`D82SGekL`4$ApdDCbkAoX-&D
zd@7XlY3i@?KQ_aZ`RS<4PcvnHhA8t>rp(U}Wq!IU^D{)5pFo+P3T1veEAul%nV;R1
z`RS!n@|Mc{3{mFCQ|4!gGCvi{{B&04r@b;iS<3wMQsyU9nV*V)!wgdXXNdAY70Ul~
zRsN@;@;?of|7ocF&rs!m3YGsUR{p0*`Jb5bKSj#_#FYPOsQgbK<$ro8|HGb)?8?|f
z`Jdj(|MXV=r;+kM!<GLTuKdq%<$ne!|I<$SpA6-HhARJ4sQk}R<$ns5{~50Q&v4~`
zhAaP5qU+#Fl?93^3sj_Q)>=_pXPT?v739cbjaasR!-<yTmfCCN(U;^gi#wCPL}V1Z
z5Jt|%>0R=G^fh_f69rtK$yzr#EBdsg|0&W~-0n}(Q;E)!mYkK|Do$uQBt{9*l2nLJ
zW{FQ?b%*dBjah3Ynp9b0#jk~$ZRzU-jr5ze6>IK7^%u>mZGnt>ZMmu`-z<#@CAzfT
z;WV#GEE1oDY^MFG#4lrUn2_j6jIst#4vELzj~q*KFxgr1HPq^q?17v+fYC)}-OD)2
zTvEoC488Jy)2OQ>?SJYSD1kZ1!u8GZe=6a%iPbkTb|+x1M>SuJOOaf%Cy&1SF6HS&
zX1q>Tk^L7Bkvwroji*)r#Dl9AnhCs{H%D?mhj0BV`G>s_@KyZ3dQfh>)7SrfyfdEZ
z=XlHB8R`1D<3I+GtZz;Zp#P-qr5L84Ck;tCl#AWX!QI(+;yFI%+gtGc&Wc-m4CY(X
zZ+t=z@<}>#y0h*<?61;8Edy)mqn0N*xt$mP)-lPKZ=_sM^4!+na3V31=SA-DmJ6l-
z#5axkPhO9&oDqIm+HMsix44As_>`ymh-=)rL|m!scCM?QZ~856K#G*H+`@YY{?bmi
zlIx^j7QIdmz-p!Y{WLc@JzQ3fNB2cf=#~7_y!$BeAI~jkrbn-9&aam6xYgEc-T!Lc
zyZB4ewN@Fo9ZH?-iTuBEP%3XxF3ol*z4eDGsdH`Je{!msD^tm5cO<2O@-N+;{-0Dy
zohNOiu7o~soS56LpIen{qOPUaIccTZcDKV~xD;;B+;$qach$dlF2(cwd-42xSL<GM
z-;#%4qZJZ+CmfYq#{nNj?Eh~3ZWOECKQ4x(*YP8w^`wq`a_bcQt3JvoGJ5Vv4cW5Z
z*K^NK>3+$2oN7hsXMc*D7FF94lh-AERA#PBX!6X~wxncREJpIFl4D-_)#>b8y8n*5
zNqM6GO|^&Ge37=jBPrinYOM*_-aA|}cXm9bTZa76Jl{sDlJUrsC7(3um$Z|4&VP%B
zoOjuM=xcTeYRS$(`Dnq~AL-s4kvRpKK^SxhIwIW}6O2P|P<P|mMk>`Er&8TO^#TPd
zh1e${OA)DVpz?^_Ra(*+8AB_yorz?mD^iQrXgd=L%XnlMZIS4T)MXE3A^FI3WuLHV
zD!uSk=4(}h5UVQqO;bHWd&3J0U*Dd+Wu~cCwLbjogsh}9zdqcj3+}G``lwd5zN%F%
zrdrkdsq8pIwW>8xt!fo2M{cNE)yh>v(KvJyO(tI1sVYD=asY1GuPRV|L>*PWypPJ4
z1J$#(yGofmtCYEm>RIcivgTb?*1U)ABvZy7GS=*?I@fyZ4p#fwLR(~}ss1%z<<VC4
z6nX3|Gammv*z;^Z)mgN+YGmu98reFr+suKSJ;)wp`mpEB;kb{qGjX46FJ|YNOYBv+
z|H_VNeO1TNG}X}-Qyp#nR7YC_m3KE(9c|^htIRaj)YeBewRO^6uJ%^VNc~h_TOYfO
z-Dak#mLy-bw)v{H%~xGXeN=0kuUgwWsn#}MCFu=SYg<3vd1jjGZtJ7E+xoEc%vZ$r
zwf&lO%KkI`RD)X|)!^1iHMsRr4Q{?_aO<Obminj$x4x>uP4;8UW=6B@Inz%i^%<(c
ztz6~xR&_4ztuw@j>8$V(x>jYZ&I+HR^TCJdT9q-nR%ME=RT-^oRod%Xl@2;Le7MdH
zAEmRx_tNz#9dsu61f2ukLuYx9)cM^#b$<6mo!LE6*Om0r`P~zBes_0WOEOXCbWhM3
z+!J*M_e5PAvX`z68K!GPI_TPvVY)VCFP*hLL05cC)H&J{{W8ConV_??C+f<MiOS~;
zOswM&He#r<5ux%Bt(1YNRPLctxrY*+uiZwuhZf2`3{G3wQKC#ks2oGSvI`~3D^x14
zu$wXpdn%*QO1Xp*Wf9sae=tP(gG%KOij_GSs?0&CoI#1Q1(nJZ3{I^35Qbo=G6Vya
z52#c=ppEhYlhW3J<fg3wnXG(3T={?k<pXk+4```;K(6uula&w1RVHAvG6AiX2`E)2
zV6rj+gOmx#O<Vnut4u&^Wdd@Q3CK|<AXk}yJY@nVD+iFP9Kd9i{!dlue>;`_w^ZqW
zuFCy$RqkJ^a{pYF`?poO|74Z>7pdGoS0(;&mG~E^#6MRh{;gHwpQ{r8$tv+LQi=bd
zw6z{_mH1CmiT`Ak_2;Urf3nK@OVieR3`nf?C=1F=rb_vnsFc64O8K)?%HLR}{8@=r
z9=(EIrcfpOg(}(auaf=#Dyh#@8GWYe5ZhaI((SL>==N7Vbo;9Yy8TrH-Tta|u0rMY
zSt_q@tnzx1J-5`|@-npjTiuZ^M|Y%ap*zyGR4t4RRSRPyUA5I%Stg&cXpZs7k#9{?
z|2zLX_JPU_GEI!JDKt$OpE|HRTF0QHajQ@=m2=odIfp=X-8ENTcg<?$-_}l}KR4#i
zW?h<j*{iZY(BHD`SDJOH{U?4e)cLtkTbuK<Q@>@|>Aw%MvzolpWLD$(O=e}DkXf9#
z&j$^!Xy9cpYci|Jtc))*KFC;<@leLBjLR}ElwbC$jJ_FV8Lcu*Y(s2$Y)<UL*eS7t
zGs>_pj17wQ&VD7<EmjySBut&3o|iDmU-MY%M|k~Z#WG?h_*S;(jAaDh1{?X0kNDx+
zP2=tsd={(?76$Wzd9iL%qQSk`*90fP+mw^zhSu~1tl<9q`uh3VuVlaCXR^X%sW;EN
zj~r%yJI47U#%tL{vMZzPOvbmdcAVYaj%Qq(XeZgpw$e_qQ|-QtUca(O*`w_-_E>wI
zJ>H&RPqZ`bN$i+*o;}}QVE=3{WXH6>*vstY_6mEYy^7IlDWlQ*?0mMCv8Gza7}>*&
zJ<8abj4>iR@gBooo%${ldU3{vZmbUK!K$GC^!S75>4(z8j}$F?tSp>HUws%W`c7mm
z&6(aGytBNsy>q;Cy+5Ku?+))y?=J6d?;h!;S&#RX_qF$p_pP_ti%^tkeUG&=zor*H
z7bf@5FtRt(58m$I0aH3#dNq2mH|TNR@>kRTH_+~DXyd$B(XM|8a)UNO+aNE<4+_ZF
zcp&;FdsBD!mKGGe5WE<?6#SE&`~olEwD$^3g%@JSd54Jwt=adl4Lbm~1$j|*kk31l
z7qp3Lg0{T#Wd^yp*t-RvDtxL4b8V21T@bAbLc+&6S4hZ!Q0w%%F!}(WFVPlwO0>-X
zT~zH~2j)lX{1?GmzEc|638u_WGUM%JPzk1hsbF8QAGnS8s2mTzpLJB_-Y8N#8hb4E
zI96kg$3BH~e=x<~S@@rieF666*jHfR$cosT2y-W4XW^dBJD#MkI`LeaNO_e!yFOEm
z{3FFx!6Lq$8uP?ei6^e+iK}_y+j!!YJn;%be##TCAapgMm(p9bjy4kOCPHo^l*Cmn
z`Jr)TaMtBX>a5%eJ*AvUrlyALHYToPZv)QM)TYzLxT!YAWO=M4#HUh1q;8qsw}Ag)
z^id*ZAL;W-Jd!efLRk0trYtC?bY=fW>wn32j1@oji0ouag3h3eDG$10cf;P*l*HPD
z4$RKA>}g4_=db4d+`?H;!Dkv}Y=eFH))n_sV_9WfZ2X`rPqu4R9c#~*i~ReHf1mO1
zGYJjTDfiFA)tgm!UxJN*-3`3&*njkU@PnxcikL_)yFtb{lf#*2oN30H_TFa7QhZzB
z+Z^BK_?F>Y#){}w(MR6LU^Q3+T&yL8Dk0QBLJc&H3AK<=3kkK5Pz$|{(PoX0nTf=i
zP3Y{zo!FJw+Z09Kci?;Q19{*Rwt4d2nv&XooNvKBTF6z#OS`ItUS+t-5IfATw`X*V
zcXU+kF_YhW2ds(~kfsHsX#r_k;C)G&Qt4X9mBn0H%pEHHhS3dvCg=vbgMFi0$p3GR
zrG>X=2SzkR)2_;BS7o%TGTK!c?W#=ATE1+^zo003EGP!0pgZV+)G!FfP*&rk+u3on
zoc%`o*80o|rblao8OSgsOf_L{z~>8mR+|~7F>7S<=mGMX+gOZU%J*V7>>iX~Prl&#
z;J%13-(r6UWXA6gU~^PsgXj|*0~w$JXb2jCOwbr)fhJ%V&=h2YW}rF90WCmF&<f;&
z)}Re&3-SPIvIQUnL%H8DFdU2kBf%&z8jJz^MPJ#!VqXpZ2Cf0ug6qKbV4i7ip8@m1
zvtSW^FN0SAItcAzu!K0)fbXNPysW6kYl6KCfY0}6*B<?<C+)E)dYk-zoBV&9HphC|
zXfth&wX)dV@#_J4lGD9GU;3kdpd1VU1Ho>z_A#{laqM9^-AoLgGA(Ffn`x_M=x6``
zOXR;^BDJNFV_MP==F;c4MaskOpk^_64T$Xj4X^~f2{v&4ORy2h?oq<*eFeS--!SHk
z$DT^rE=$B15hJ^-MiDKqnpRgsORJ)#E&GwXZ00VTxyxqmvYESV<}RDL%VzGfnN}Ln
zN+VinL@SMGr4g;PnpRp(E3KxLR?|wWX{FV)(rQ|1HLbLoR$5Ift)`V$(@LvprPZ|3
zYFcSEt+bj}T1_jhrj=IHN~>w5)wI%TT4^<{w3=30O)IUY71q$Qs%TkNw5%#xRuwI)
zik4MF%c`MeNvo=%Rn^d<s%TMFw5TdtR5dNCnif?}3#z6CNz2(x%h^oJ*-XpXOv~Av
z=)X24`ncxEV|W7D>5p8kqMT~jsjh~cttMC3n<8>R`m|jszaGrn=?Qu<Zua3-_aeeP
z4_*K-f|tNQ!6NW7Amx;G6=hvTSyxfkRg`rVWnE=tjg73e{Q|J#4rO0WsZ>)c)s#v#
zrBY3)R8uO|lu9)vu$~fFPYJB21lCgm>nVZtl)!pQU_B+Uo)TD339P3C)>8uODS`Er
zz<NqxJteT75?D_OtfvIlQv&NLf%TNYdP-nDC9s|nSWgM8w?ioLAL}b`j5gVuz|G(m
z@ON-4xDDJ6=Aldb889C_3l_1b@yp;9@G4l$$k{a7<Yj|gR@}Gde;d#iv}2?#0i~cl
z=nzHpk2Um-H9=3_k9vc?ytVcN<zN6nA4)Kecb)O{iPJehgEy*Yq920!(GRr5n%LYZ
ziakhKHsH;(8zW>lM#xG=$nK1gT^J!N86hW`OVZk^tkkYCA!Qv0g+S^-C+seu2U7f=
zVEgU4iZZRDOsgo<D$2BqGOeOat0>bd%Cv?ut)Wb7DAO9sw1zURp-gKi(;CXOhBB?8
zOlv698p^bWGOeLZYbeti%Cv?ut)Wb7DAO9sw1zURp-gKi(;CXOhBB?8Olxd$^n+~&
zN<b-S4?2J{&=K%lwlm<_Y*)|?><YSr9-t?n-rL@w59kZ}fpX9vRDc0sAlMBI0)xSi
z)uWRM^J{Pl_&;ze_zgG>{1%)Jeg}RJ&H!hEKY+8q+29;-F8Cw(6F3i?4=w<I1{Z>h
zz{Ox5-yP3@`QTab4u0=}_rZtYBd`{H0$AJRS>OR51R$3>)|Wcg50rxeU?A8HOh?+>
zHLVAczPXD2_^Ti31tNNZh+ZI~7l`NuwqIiw@n-Qdcm=!)7V~D&8ngjzqpyN8zBZCA
zr7x|eA1DU{z(6oQS`bVj%${JcXq~hSeRto?yL&!w4qoc(K;9@gHw$^Yw3&glnSr#K
zNwk@Pw3&glnSr#Kf$S4L0sZ(Bc^{f&DhRO~A$B7~1tI#`J@Ma{@6C=P$tOf9AvzGE
z10hOH22(CAa(~;@BPQEqBfV=wB=BgySBQkaIU$Vqj+%Fh>F22XJT>3OY#19F8yOoF
z8yy=H+aoqHHra?oM&mW}WnO0ny%A4y4toKdYG#^a%;Dx>B>q#`L13C0V}^0>zDV__
za_7Dodl`!aT&}-P&EKlIT+L6!w5)E$JYCJk>VKrV_fqpPH3zCWN=$Q-y01|41NCXa
z_m}LslTGgCn?jzo6Ft#1<PjgR_xcxhJ(BBYUZ+?ES9`G&Vkf3O(InDpnF*i82qgI=
zIg~|uuCdE8FJ=E6i!1~;y9`{9`=5LrTf)k{xQoVVxH~y1q4;W;krsP#Y$1NFBu0F#
z?O@hRNEcq+HujrT_+Sn?pKLIJ@Yf<?yOY`A*CFq{lo{yfFoXS6WXs3+hx-Tn)BLHN
znc$D{hxr4M_H_3<`6Zmc3ct{A?Kk(c_@Ch$BqAHV&-@S_BP+c3{0yW)i_vhjz<Ub0
z_8jkC{{ruJiN(9gyT-eM^A{8HJR~iPz0<u@kcl5f94~n@{Hu_p?}JR{DB>E=xtG`v
zVTj)vY5f9xdW*gn{K~vyzeK|LQ<3p(M0%JFQxLF!{nzje)poULPVruXqj<+#3$yWx
zeZkJ>_k?|j)P{DJz1uhTR(pe2Y_BH7Ws*`PO@Fj!+SA}t-m%Ad_u3=Dp)f9c*-8FX
zJI*h$BkUks?u}=5ytU(zh)_$^L?a;XL!wUj4;PbnF!4EE&Dm-`tmZ$|d?qU6>|)ky
zTi!p;#C%r$mx;;fAZCI3EYgq_YOant67m!EpQ}FSsd<csA0=)(QQh}zm`~M2dV~M<
zdiKxizFGaz7>fT8jp1%hv-7`_cNc38QlINI<PREVSyVvyX6klVZP2sJHJ<C#f1UcQ
z)qE&c|FLQoshO=|ek&%UqujljnptYj6Vsfp?z`12SF=*h5n`I9YCaOt$MMc4G0-34
zmUX$baCI+I^9}X6L!aU_O;2O>xn9ryQQZyI-B(j}qPoA8XEdkj*_fKyYPQw0>@mUF
z&(-H#b$_kyfof)`*+l(+tL{;14p;L~H4D`oDJJh1VxFo#gVfwxeSV|v&T4j1lfIv)
z>!4->Ob_|0r?YQzc%#kcUHG?1Ss&)tn;oCt#BVjfzEF-HeR;mkH~p1EtguJeBg_DM
zuKg3E!0oJl8EhZ651S$OHM_(NwM)HXGg9|1xy<Y2bvBnP=XIs(I=V`A9sO1H6<r-X
z5j<i37OS9Fx`wnEc5wN*Krg0G9E%+iJJguiVX<TBTW7{jHH~AZ#eQd+$IgzOP0yDa
zJFYNClCS5`w`G~Vcsm>iMwmfJ!+OFD%PuEvB{!u<w=y@$nitjFpgz937peJ%`pE2i
zYcterqUIDaiCsAEmdaIkgJbT_zA=&4j69Kf|FS+HlTdQVXmDKY__Q<@lVZyllI*YF
zfe)2FT}BSm;7)Z<Pla!AO+XFExRCJg1<QihgGDNze=L{_2Xkj|OK@FqRd8u=L2yp+
zd+=CrYA`c6COAAenAH?h2|od;@~~hatWI~BpfN!Szc6SWG!L?1kFt>Ie~WDTGuW&Z
za9>N|&R*g^%lrkx0{Bk_clwXO!QAWLPQ3R8$M`q-*AV9fuJ0T4g)h7~$Uy#m7N*2;
zI=@r=6M`(x9Ocgl#`p(f@5B8E`jxoG`=ekoD?o3*8_Z^LFbv;(f35H~xLWzyex{G)
z*W2uuA#eX$)0yQT<!$h)gA8vqY{NU=67LmniT|zlf<NAy?{D;;@E-DJA*sKWC+aKD
z;oaa}4LkUfcbQl1U5GUQOmLcavUgl?0VyjZh9kX0nd@*xFahmdle}@k1k$q18v#R5
z&W=4@f^)p~!7=<R^xDEI?BX>H?)1Fi9Q(bjTk#jz8ghGr{UYeg4neEz2R#2``103b
z*B9D({&<$XWe8^&WZ1`~&PgfT-)dREpzht(y++;5)NH6`D>Vm+X}(eSRPQd_U#Ypo
zdyRO8iQDF@d6$}jntvA4)Tq1MyPGhh)cmdb<f$1~bG*i1rSTW3*+zXnS9c3_|KQ2H
z+UaV}R`Z`~&R6ppHJ50}XVqLKKDMRC5ZAM3dA}is2h@GPnm=gBm(^UTJ_|McC~?CN
zNiJQhXFpZ*CH1*l%>oU7iJDicIa9-2r{*#>Wp;rzn$NaG-AmP6uI2_Y?X`OC_v*7w
z&9&;EC;qmpy0g`6tUk@v%&;|_%~Jn)VwzuTJSVBo1kKecYK~BIoR~12Qc@$;EK{Em
z-dwKzP-FO5&3|ePd#PJ{1KU8|f70Arr0!QVOcOO5tC_Fn4Pu&^n!+4S&xz=Pv*tVX
ze_8!w8ZtxOP1T*RZn#)UiKNPG&=meb-J8@sP|XZAo2uDC%~5LZuI9mFn%}6qr<!}J
z&#CGjq~_jg7N}XQW;Zp5s+p^115A(o7G-}+V|HhDP;cJ!C-B~UoH?F-6=js`Z!X|h
zVIE|x8(^N~H%Ldk!8+m%G1dHr>bN(|wy|x^2p#=K*@1R9Gg`;Mu{s8h(=l*&dy&1!
zOwf^VqK<@<?34B>Gg-&ODZJNzZuVwo)CO~+-N@K@5@Ta$bBm6Ox9g~QhmMMOsxH#I
zbSB8%s_E|@?_lp>bFYq;|4==8_o*h%`*qgFEEvOIo7t=+J=M%%_2_A4uJoDaL7lbn
zkj~V2nEv#9^9bueFEWoYJL50rah;Lz6l*-MHcvD2;x;pnclZ0vv%1RiIeO?v%tHTh
z)>l5SGbvtRz3wySMOITTFfTD<Vxd{&zu>=MUe>u1ujtH(SK%h#G>e)0@V0rKxexD~
zH>AHZOLfk|TRI0}+5f}ZdjPg|9C_o|henYgMG^$S0+Jv)2oNAq2=?APRVYfLSky&H
zR<Uf$EpD>o9^0}Vw<K=y`Etp{PIbQ6PQK*gOLFHD$0@$t#ZGbBB~C7}bIz9t{QqY6
z;Q@~l9q0aMizN8tzTMf`+1c6I*?Br6Zu9;dU+sUO>B4fBgD<Rc{O4Mq(|=$6GhKc)
z{y+Vl>RbJlu4^^^zw<j*Xp&d7`wnDvy}nhy2)pEc`l~fw{dM~5G(r9K`s+0z{f+vY
zHFf%1^|xa8cANe-O@sap{T-U9{!aa!nwb7>{oR_l{vQ23nuPv7{e7B7{R8?3G)eu3
z^&i$W=^xZT23be7WLaVD!EIl7t=41DXwhh5MKwj98lTT)OvaMQ8k^RvWkuR~_H^nL
zYueGOYj4*jW>P=ha`EZYZ1HyK&NGL6j~+Pi_jC8(j{?~Co%xHTOZ^43gCBUC-D%Ve
zJIHK|`Mh4A%V5x&V`i7H#`tvYuWC!&MY<yQ*MAZIMg4f{&lBv_rI)rIYHvT3>XuHQ
zIsD@vgRUjiVnHqIv8Sye>S9r=rNm&gSm}pL8;dq3;$D{vxcIR2sofXGqg@l%9=-ke
zo~`rSFS>T;@gsY#l}?XujE}F^<xcl4EU{y~Ed$MGzA!R5*biPOSKdP0*GJ&3(deCC
zZzA5<h*oSyuh-=?7%U}LD=JUg3<fqjefhxP`!==AmRD2^)eRkJZrV2(n{rop=S`dL
zJ8<BhjrG;l)t=#N=eA!z67W|BW8eezz=Iy-3htt2qTJx}p;96l#4p{u_f&WHsXd4G
zZabDp9NV^6Iz4^I?%j87^o^dHnYn5hG@=&v3TlCG0V8DL|KsNpJCOPs%SpY11>m&*
zPyW;o{V2#wf1UGQl%^+&me{`3KeKhI|3=Bw|MRDC6-4yig1&>d@6z{#D-kO~|2J&D
zVsQAHExlXHE6Ro&N6%|*IyhQ4S^D8`R_~G-5VKd?{el7IrO*3Pf3B$&^hi}{>Pf<4
zMJ{|_3bUnfIQ0?fbm}!$bLKD`NqtU~)_ee^VJ&04QHrDicwpr%b_95#Mq_h&eMvqp
z36uak|0TJh%vIVEXln^OhD@=rt=2s<#eR@-B(}t4j^OQyr(xsrI%6zmG`qA$3o2)w
z$(Mhd__ymo#U1Rtw^B>&vU`7$=Hi#|3~Y3w1KbX?deCxLn#YL6J55r9znZO9Tdc7$
zX{MgV8<Q@h)}{5iFxEv&-8bf!=j-xI^Ka;>(@DD6t^N<h@e}P`?jH7dhTZHM^!>@e
zV&HV@B)k4JKBOjPu2rA~GjD;}VvtSZ9Fyy<XVwuN4tVQRzZwzsMXsq|tY>$kwr^b%
znX6CjgZz<n&tQbt({19cG3HX}OUs}v=xku}l7WFsCa388RPXMlrro{#yJ_=%2ln5y
zapOJv58Su8cJ%t~+pirSzIOZe>qjBpT;Bc&O7WIMPAi|In3S1W`Pk7bE<f+GV|#Y)
z*?U+zy<zXtLh23HGc>)igPu>W?1o>4XbfsJo>eq~W?xv6XC<fFs7%O#EE1V+<B_tV
zBOQYL&LhL&_t~oRbMu20V>iqRa_4Rs`~1cZ<Lq6#L|=B@HEZ0f*ZOp%toTgTq8Itt
zKhc;9O#?B>?#MGcFWf%yxx}Y$zGln({FZB^(~}F6+j3Jcut@4#Z1dpoNIOO@3`u<*
z{i)*|PfIH1x-ZicS-+5avDvC5(g`eo=%}yCy}NmA){&^$ZSM?5w<KHVtI8`UqTSP;
zMCoo%r!T%>Y6?314I?dqXiY&~zOS>PemD?uR8@Jp8ol*Zd7;8!cPu&`1|5)1_FMGG
zNd0joYAmjz-@eRVepx!`_n*0oWPAbAK{AGYw%!RY(`@4Ns*!&zkXT#oWTz+GFcq%f
z5Dj`dr%YvS`^MSbsUur<2Lijdu-jA1<NMmmP#1Q|?B|?+nwU0gMreQdZw;52t4nkx
zRpv_~--p~^(YB`z|JYT0UfaR^pW->v@7d2~<`m|VSUrr|Pu*R=G0&E#GnMD>i|i}F
z#LBbeZLB*TJGrhnN0(Ew?n2amS>vHZ;!q<yg--_?@sFLtocJf-pb!62@G8@q#J+_#
z%h0A-8?(vNHyP7nb&}gM7CrY=^iV-*p{~H1e<<?QbJ6qjtBQ4n<pt-n&8*`q)<8u?
z!1|Tcms6kkW?8hVDq8kU)C{e~o<_~^2*-+4H5YyTYYn@LoMxTbUAQ~)9Lr<Zzu+G5
zcm~`rq)w*Z#<Nj8`zt()+aR$7tHFS=8cUR2ntF`giRJZ*3Tet;apno=A4$^!8GC@?
zL=uteqz^Gcl8t=HGWt3szRVQ4XvM`GPbLZ=VAiiSZ@BwGR@_iuKUG#z)Y$K9?y2<Z
zw4NDXV7zYEiD<j2t8Z#!v8O-mEv_+DTA~}{spmT?>%4yNBPMUNHy%Q}b7=S1(u<hs
zP9fbcBUWFFkuRDg#aTMVSY)-bQs<ac(tARZXLD$Av30SvVKi9Pn{-bE{UfFtdxP}i
zOY_yCYmZK!=<qe|>Tcc981SZk;<SSwakTY!=;L2snF~60HMj3>iT0G0+nQVrli}cG
z+}mAds~$789-Ev#*6OxZTPqtEyE+#dYpm536zxQ{{}b;CBu{XVFZ@0%b_(Z;6f5A*
z+YhxaHHW(0QV2||oUHW^d%eA``mwqVrmHWWIMz{ZpMCC31Nh|&cv+>>-n`hpaDm*;
zGw20neaP0pV3x6_3PZ(>3vCVT7^q=Z+>Xhyn3&ngq}1QBy6Hw=XGO7n;Abp4)*TqE
zH?<v`m^{{gVtHNhy0-boQnRzDij~jJg>Z3+Q47o={Xl3iS0V|ih(*(?#u9@9*wxe1
z(d=@W)>jsIJx7kP|Krph92_om=NOt2`@N|F%4HW{DMK{=uOW|JxUG<ut^~J@lHv#F
z6zY?$8R%$kD#e7>G-!nqM~6tkndRSH>0*D{zU-|jE_D}Ly>;V}5=Y)6M{QN1u}Dd<
zsL<wZ+&4Ymw0Eqg**P4GjkucY8Ye@|jr)vFb4}HzpAWS=+DdhKUb~|%Pgl|(jE)73
zdQVBGw_z-lo15<_E%zjv1EXQ~h_l__J~Y_jZ+E7yawn_&H9DO&QC`;sKFxtoU*cm=
zn!ZQ~FD>0P2F9Yfkax0SWH1zK4Gx5)7gNu98@BIA{VNNP57*VD?$+R3ZX6c$z0#wS
z7ty{r3(=3C4-~n@Dm3?S^c8^~r%|ESNYc{Qhgr5h=0ehMVh?<-;UkBn7tg%OT+gO{
z$k_X?p(k)N@bh>AK0%w4t72J9KG+(vXmgA?#sbrr^no)6s~K}kIBuXer0-+Qu*#!H
zWQ<@aZ1mki{c<^ta`(_X$ggA4-_nsEm=4@lcd%<J6mRO9Vy};Q8X7}&iKnQicW+DG
zP5s4>G`~=LNp|hLVwqv2M=~tqRjD{8&x4<!j`wDX<TdYXYunk}Lf=~&#_H<E8tTVG
zp>cUWw;r3GJl5)KT<GjtY!vgFwBp=~kKYa{rkP+<_`of02wzb$V_cAOB2KtAakbR!
z9P-{OtETZ#VE9$(3vG6xma6TkcivK|Cf*w#ZoB*%dXQ#yA_<e8D`7D)lCdJvyBY0)
zlOV@bL{=fB55JmGAFqC4p*qA>NL6|0%-~zu>O<yzH(Dyr=Dj?p#bB292MesGTvKs@
zW6;iC-x_MxA*NfK>`Q$C&pV*!j^laU-pjI^$r|Bi6^V)1>u_5{m?AGFwmZtJ2jWdF
z?u6alADSHX4VRaeHM*M;)iJwwDB>M5`6_D4+|Ax9e>rAdERYzrTdRx98fz-tw!8vI
zW5nI=MeB%TWp&a)vM@-;!VF0!V_XxJSY?@hZ6G>2X7Jv0lcS-aCf{TUnx?y0!l}FI
zCU5GW!%gc9ZX+U0HJee>XW8o{gS;j(Rj3BCiD{wx8BN%h;6QE2gMg6<)Ak)Ko_cv~
zBobpgQ;w-X40T`z!XxuK%`26yq5bk_>JR0W!>%YZ9jf~jdp-4S=U`3Epp(_59C)r2
z!gUv(!&s}HJEx8E*sb+5>xzuJoZ@v`5?i3B@hN9>-Hk1qatrfxIp(~LsQ()^oeoE5
z4NGQya<E!guglf%N_`(~7J$|p&?ea^Nne(YVzgy!l!8a@ZkT{Eq|3MEkB0Ahq+xS@
z<$7H~MZtzYzj2A#UsB>XU-HZUzQz`^SVA_^ET$C?dmOcv6BlLEG?~n{yR>*oMTIpt
z$C4XrFV6p3{fRs~tSnpZzPe}ggB?G}^=b7($y)Zy)XP;v4#!Xx3!nL^f0*pe3Q&9r
z>K6738Jw_RDwrLyAu#tnrR-s^Ej5qW9pN3o`KlK)35OE;HU=B@9C)V+A5_ZssPG;I
z?^EGb3O=R6^AvnQg=gv?RpI-T@|#rnu!7H~@s)P+dMNmE8i)KCv<nKpL4}`C@Y~nG
zPpj~2l=63}@DC~Y2h%vwqfPhAr{{bFztwbQp1U{w9H%#f-><^|L22hhD*VF={*g4k
zs(sGabo&_loRt_(1IglbWqXO3uxH6p<buOUm=;m;!DReKtjrm$D>snmC=3@;b<kn9
zl@#WA6gSeD6M=xY$Nb|TlmDQkySlu*pduHOO3Pa%-&8TIXE(RW$a+TY(10=CjP@*t
z6*D`d4Ngmy%V91nE;4!cpY6bUJ`f1@mD#MxO3{=wz1pEg5{@1lxa5y<$>$OdPQdqu
zIET}Ss=)4(8KKi)3u5}za9xR?373&o41Ysc-Jbe4y3dk&_3gJ=L+YU)Uc^pa%MK+k
zAh((D0loSv%_UwVm$?bilGKN|#x!olSP2|A5#d*&8?hSPWg&lq9d~Q61A(ee?}FF#
zw-I$mCMG_$>%x}S;mz>69ow7nx;^&T6HbYJX?$aBj9hR13p?5Ip6;&ZGoK%u8XCCN
zO;j$SRg1O;)L`cX$(UeRDF|O#B+s9MpQKY&;K>yadFz1FsjN|d1W`i*hZm3YRp6bh
zI}4{7An+a)PBU2GvnrhE5%`3R6P+F{m8UaXqkfi!1)UtH@&cbo<B)v#{S<teg+zJu
zD;qy4;~v!0g7OC3>6Q7yUg7;Q@b=mm_FIBqD!fyLQ$I!d9u-b>3w&0ElZF)dlnN&e
zDewUmo~eISg;W1U`H3{X(oP;r1z%?H?I`q<CKTm2q{~C<UqK8{8t==(f1@Q0DazlT
zg};)8pU%R+rzH(3%HNfRzoI3LCh!lYaiWuJNWw`&g3nw-fnKa>ODi$<Bg_inJtI9)
zljVSQ@r||68SEp@Xs9yve8wlMwTA4~LR~;NKo_MasLt6S>j=38^6h3?fO8b{9{=N~
z?1Pq@XmmzvE1t`=uv`|h%L+-|g1fO?)^~g^#blW|!u!T$2J;Ov4g5*W{`JChmuZ$I
zViun-Y0L63r(S;N{Uv+L(|wSB?siXE_Soey{W_n+SjG7q#*Q60`5rA?hT&iX-pRIP
z;Ur4}?^y#MRpBIKqWpw{d!Qpo7YO{Yf>XOB^8%k$;UwDvA5h^Wdjjtx93w;YZ`4*G
z{v~_gZX;id%4(MFXXUJ5mA~B6YAZ<k3(9hHbBgoq_VwnqyyyA3_Nv;5QSa6oUDi@}
zWpzoV+LtbPEmd)Og_Q-K_At0m`53p8j~#sw__BhRsqhO3*GRPPNtbeM4}DAC!6Zh!
z24CbPAn$w;{7)B5Pm_;+co<%KwuG<W)ab6lf1Z??ob~MZrD&OW_7ERsic2x*+fEWa
zllc6LEVPqQo^fM^Q!mQ)aP-??b|s(t0`24I?@>bvad}?&m8sq-j{XIo-_p_;3Uq)_
zMB!*O4{`|<=manOUqDy590+ulm&LlEd6ut>0^PvT4J+-M4|DzrbonGnKxid~w^N>`
zwUqW8<k`n|Bg;^@(i!!XtqYfNvjElyW}&~Oj4Td&vL-VFsUE?N8_~K!FSzkLY9fmp
zqnr{t=lFMy=AkT&@Md|0J#>bFo?{mS{4ncRMm`%~R`5kt`I9mZUa>Fnk-;vAXt|i=
zfpo!_q;F#tL;uMqQe)Bj;Mb!=kIS{*9DeX2>0gLGAf(NM(nJf@L9{poExZ;5$DO@*
z5NA%SdAq9ovM7%?MFHodN%eU31E7VhQ@OU4Mb%R$2?xutGPAE@RPao!$mpXTVA5uU
z!rU`qUJ8G)_<2^(SZ#G2dh#E3IS#(*CkoKXCEjb8fM}zWEv6|3PP#?l6KNdl_Y&`+
zz?a!hrF;dihhl!Ip3!sSZ7Q5}ktjc_!b#@{yf2NzzJW(x!4I?Eton&gQGP-x->xdZ
zoGuSLBfFlHGS1I~IQ=+B1O07mfY-ko?^NNWt3~-96;AXEyibMGtQGi_3a5E1@BtOR
zN5N-QIPp!CpH=X73Flb~zO3Ll=i;+kl;5Dj$$k*{?Q7ttRXEuXqWoPdoa_gIe^9|e
z51*}sll=gGav9F%YleTL{O>xxw#;DdC2yEZ1KSqoT<NptbDqs<<rR6&GrDHJJg<FH
zCw)UK*t7#`TKOezrhg2+1sC$zXl%Zu(zp#%DdW}Eme`nZfy+)@AG2CF*$1lKIA@D*
zb+uJ?yF556Ow750^{m%ET8AUK*YH(QmU_B!!e*ThT{4W*Hn(%yIup8N49ACl56ioF
zl08{nGkk68BAg|5?DM83oMZqa5=Wyg#>_4zpMOo7BV?A)vQ%U7V5Lf*RUX-Q)4;$@
z``JD6PH1Om=iEgtEf;OPYxnLuro~RkC-o0qJu`D^6m_>^HQ%PC2+i7TZrgAQ4?hTb
z<3+c#4lwwN&PK$cXn)gufv=>cF5Y_1vr$LkkiFdObVr&^!P^#AACp1@iT26o@p)Nu
zjPRMa8gFCSI9bY~{00?HGf&`sY)G!Bo%*NX%d8LW(CKQ7W(>}2qRL)()q!f36?<0i
zH#nnJ&hd+S#kp#7HeOqAmW|rVtm9WKeC6$>(#*a4#M$cN^&5){YJ){$4gAmSBV+J_
z)5NvVGcqs4Y@t=?k6at$gbuT4Lf-X}_SW+9IAP{mS6G+=CoLiHS(c5HwiNh88i#h(
za_uVc!^*C#U4>_MYry&XMCE<@0jh`3?#ym3yT0^pj-LQ?df~0)^g?T+-vTFXAn+c#
zIildy4}s4rxQ9-X75oUpn#aql@xuy^lV{F9QO|@@PrIs~Wh#%AbSLJ-7RZLsKbQt^
zs8Uc0On*M>xr<*MB^c#H>IdUH9Mx?z-2=`Y+qCzYhnr>(gxe1fjxJO_uwgzB*=VZu
zI0hzKy<PPMu8;YX%jc)|vB##5G>>(BEWdd&5}S^IesGcfmRn}9tiYdHih)*e8aIJY
zq;YsHagwdzM>Hu>eieRLDc`OtzpUVkD*Pnj-~*=zdIvh3+rs4hz}|~%o!?$D6QEP`
zE3RNePHDyOUva0N0<HY)oR2X)Ht0heYvVMn#yeFwjlC$}qrz!E3%pN-(@HAvDHTpD
zslX9|nAL8k{!taaPbt4ih11F_>X}jDB#Q!{RpA#Y_$?~@Nd<qu3jd^ne?Wz2%HN>i
zX-h`5yR6`dQQ#}Pz&8+%F(W=-tBuo6h82|*NUpO27<hn{(Cr4P0>KNxtYC)R`miC#
zZ?0;PE>4}I5Qf!(4aR`qRGDvfx!jQol1<Sb>F=NM@$Qs&SgY|i6;AqFl;5DjX}krF
zdq48{wNrl-ocEviGsa^y#2lqP$k~A!24j{AhnPmIt%<qjblAqiCabd~<A`vyShdmP
zOX?twOD`?bxxyBqu6b|KDwpnG%e@s+W``#JDaUap!lnKyPW@`UlV#&1m7;u)3Mc6n
z_>_$E_z7M=PAI5;&1<~=)p(~0r}{<t9u-dY3w%n2lZFxaL>k9V1aTV*zO4CCR=YHc
zqWp$*c}U&Ue9tQIJ{iXv%YMb_$7u-Y@09(S0;gFe@L3g3^awod|BQkj#DXaJG9r#i
z3ZvK)W#cCa$0{%T53!4ZF5^0ke7D?^%#JlAjdtPm^y-MiM;>8g)e`fn;tp48P%o{p
z8fZrTehTahEvOZ?lFMaDh_wRoi{b0eyZrL=uDf*4&YgSUQ@CK`o~4Dyo=-=2bzq)O
zOCP~FI~2PsQ6q<{@U?}GXX&^U(GaX>!v*aO_Z^NMjLkYqYj$^Bc~kGj8+Tt|OpQv7
z3#OTScfoyr^ZlNxYDe(NM-JV)!FSu08!zd_JXu0JQMBXat;k1PBE%9VBOQOoEWA0+
z6n47UUr=BwE2@q=>Nh8=`Z}%Quxn3a&%U<ckjY>S>J3fTo`39$cx8R%nYX3Wv;MZO
z)0bXzZ#VH|WjDJLJkiQ$vPJL>$nEj7`lawSh0eU(brl7HQXakdK#tz0HME4K2hPmj
zLZir|cW~pxtHHd1l(fq0(`vj!h5tw?-<^ejOnOeid$aHda33;V|D+1PTEY8O__q~&
zScU&Y!8fY#3_V*Eyq%(wl=91(x46`be!ZdK(@Ocb*!Q$r1;0(kUGRZCkcHooRsLyh
zj#B>4Ec^j&k%Hf?;GjoJ)9KT5zJcE=y12b0#^E02IclF~rNHk~;mr#EfC|sF|6v8E
z_S1az={aB1?L(4URub$}IGeA-4KmsRl6I%FY?t`BI-o1d@kH}QgmtlF&iaH)k2tQ#
zIRd;q4OMh5X7YSS4)Xe!fZyAXGpf3--l<Kig1yY$4lDpT&wnEm@+DJAv1Sdp6`l5j
ztx2Pc=r^8|(s!JZYRkHHx^s|;KnzR7RuurT#c-pwWQcXNS{OT5U|L~Se&OKR^zzx2
z0M{|QxNbD+`7FY0?S_W<75Y)HX~$iVbWc=F<`FYc5GBT%OyD<0gW{Wr<=7^RNT;M6
zul0QM#=Gxl#SIYzLYEXJdfcu3rt;aurg<s#nYxL3Uu%Wg-kS(^MT#Tmd40PAxq0m7
z3)}vSd4{`vy&;o&5W17eZaK0mQEGM-RaJ&d!wGLg$lC3!C>m^zhkiddAK642g!hH_
zQAlV9`!Jtr0>=!;%}mlP{e)u-*JDOe++Kye`$dF5{Jh-jizQ)=_&pr^rQ`R;$3xFP
zE3Fm7*IlDKaKN)0fqa+kA3N0Ii_f(-ZjJ`Le|FOOfE+W3StE8&<1EH$ox@rNniTw`
zd`1+9Rgbto;8na2=gGSp9uLU1rocPo-HpI$mJ7Ul4Sb6Ve^e<yPB`QP_23rH@3CjB
z(RkDH!Cn1p!~`<(kiJV`Anta1bKWI7P+BMZQ{`AhP=r$;jM}*7ZO)-MtN=ugDflwO
z4h0;IgLB#VNy0J8)PwbWlyQP9Jk~P(2;qkV3FKyC8xhGTJ5w@U_}IrnqoZEEq>gXA
z_}I{L3*sB+YYrT!)SdZaM^y+xju_m;Y;yJxr{^v93?CT>r@xiyWjfV(hYF_=6Xm<t
zz_+MyTF*rJNfl1(nZWy1IO$!1536t*d4Z2Bcsp)qk;DmnS;2{ZTDJr~t-@*D6?ktJ
z{$0Lq3H&x0cVhNElZD@rRsI>io{92zs&HCQ1b(-IgHFDl5l-tF_)O~w|4HMYpnf2Z
z9y3f{Pq?N|yB5jKl?ggk;vHBz`gE5wQfn!!DmqsXYL{3_^1P`x<zQ4=OFE17y0c<Z
zBZD<%6||7BS9xgaxhYe;P-?2O7Y`*YHs2X>+MBk;&kBt#3)>rFV%cy%ouSLoVli|c
z8ditO7MAGOb$Z1TCn)2x3!ZUJ+Rk~&WfW%&G$)_YHuAV#4@E?PpXX*{nn*Kd7#*7a
zwHRLaA0M<{Rlas4FSEMc^W}?9n&~yzPdK#GkOX|fNKa^<*VJ>W5u?jz9PC}-9hyJO
zGmdbYSpx4?;WQ%zKCHrNMhJYIaNc`fj~oNMkk%%0`0xKp6tJ1IQ;xf_{r`vwKGYl@
z9WZv+2i*S)(ZO0nPL0D?i!1EqHmgM|w5^(_TU5Lw?IU>Cufj<?2)tLu=P;IE(vk<o
z#mB4%Yc!4J9G!x3Eidr&UXRwtY@F})c=<9FegU_07@Z6ePCLo;i7u_}Vvi+<|59`_
zU(2&2oW=6}0*`WjlbLvw^HbDw`tNZ*H@4xELElPI&bSw=(flk6?clM`zXW=QBu|cr
z?&j!=pvgu%6dCR1C{{Pkf6@L#MkhJ?4$wD|w<V4CpR?XAgpwty`2uNXxrS+uj^Y%T
zM`e>&2=p!=<9p+k1fr=Qflm>0=-lVHT5fQQz3qk0h~H`qm3p}4oaeO^mX;P4m6npW
zYb!<UrlYLYA=I0;+FE3`Sj<IMqRE4HIA4(4h*}qX`5`!vLwf+3(&6&~P`tM0diFZ3
z4vbX{5$9B|96>I)_zJIsa}g5ak=J|JC7A7p>0T;YB*_tWfWVg(JZ&Ec{3PL`RYWbn
zPAACJYAh3puKl%$L<brFAxENLaWz^PMkM-=wWlDn@ITRM@o~JRfh;=BZ(u3q(+*f2
zp>8IdC=;gcCkrSmR9&iv$-^msi#0-4MZHFx6n~hX6h~J)ns4&CK<%NYn(NX%rHFW$
z4%)$S9PhDc*Sx81m2t0r0Q4z;MZDW05|w10I!RAy*h&iY{}Qdk%S_ZOXUIh*6j6*w
z!24P!i<d%U#q&zEJ*!Jpcd@3_>(Q!?)MrK9J@o?u_I<90{hZ#k9WHRvs{$XF?Q@J6
z#px^fGW(F|AISO=uZLuZ_AK^u;;ky2^t>p)B@6#D_Xr5QH;qGrzQo%V_+i<S1f6J?
z=oI+4QXV=ft9;t><T@z}=awh<&;mYOCOxh3B3CfzM{Un=`e_yY3GWw9-O#UAhNuRV
zUyXODaO#&R->t$)rwY7Rg_C6{@JSU;x>?};D*R0a->kwj?QT)<c7|IEO8I34r+$%T
zDC(ci#<`^@@Y`hEPkhM2?@*N|kA^6JrwS(vP~dkfIOyT)JK<yjiYO5^U9`@N=Z5*;
zg*EdNSTle7dGlH~F-C<IBkot7<35JeD_b$pap9F;v0t*c5i8^%IZKw<%zW>m%^W;u
zpF8_({GNtSYh7~xDcoN_URPG$QfkM2kd3X4;#13p)>|6J>)d~e{BF95g<_3MsV`av
z9Gerk?A6q5>33{N;DSg~F>Z)#XiB{T_bcDuX@jti-N^pXrn2YK+x}I%ezECSe28>G
zBE9ct#-_#A*2SileP!hfEt_|0Q=be^*84iJ-5*SJ?k=}4cGi#9){fRkMuWl86;?am
z<?jp0w^s%SyT?x~7Z<n9i*5dR*TA6aF3W%MZ9d=6vA2=W+>Y!*S@x%VX3ZU$Yn@ul
z!xpXGRp42dS6yH3t3T&W8q4~P73C#`?qW~0DyMpRaP_qsd9J?A*ZcR&x(VyYIq+7N
zjnmpJ%1^6svIPX*D@TdbE*HI2@MS8`ce4qadswv_l--Q7XAqrN`<YZD#ca-qy*fGH
zB(4z!dp*fId7og<x=@5wy}aF~Z96g!$$=R6EOi!?bjp6EpJiV#;yngMoD;XmoDkZK
z-#g-3G{|v9i$c40bM42qBCPZmIOi&%jd7<3vy^ay{_rv4C(i5HET7w=^cJ}^>F91=
zyTHd~9M+Di7Fau|h0tN*Ca>G4@2Aqj7J_~8N34k1EuZAi@H;}BPDF#y>ZAErPN%?0
zD+;`O4Sb7&d+4r_QvN*6x8-`&_+bUd-6Y;KQUAD7PrIs~Whzhh3;Y`lxn<&99@0Md
zcvzQ+ci@gV=@fBf%`G`P6RXnE=>j|A>#MX@CLGaNRehqqs>)kcA8GCn&5w7FRQal^
z>Kp5;yxk_dt;S|+_qsw=<<()gJ5d*PhMG2SJ@aR&WbVL3lP?*GR8_hw%H55%zD^G$
zRNQX*J#IH)wI<8*T=$!}MRe9BCj%KqXJ2$m+ef@+tp}Wp@DUl;ykBz_M%NC>!F?(P
zKTqb^YW%Q*x2wu8EBGQC%&O<4jIYBwRmVNwqTNYq7n~P8JxKm3>L<>}lk_F-a?z<0
z_a$)KiMl!}Zgi>cbnULueVpIw`nYF*`dSxy#P4-+*{kP0ZI!jcYP>^*lT3>8-71_c
z1c9fui>QYz1c6Vg%F{d%c)tp#6;$BEDxA(j1imo~|AIsog}^sw;h*KRS>Ri;aji)y
zf3pg2RPgImctXK%RpFWP*DH8C-IG(wFUwv}!3VNf1U=JK9wQ4JnMH5L%8YY#?!9-B
zAZM=E(J{Jwiq1aE@76`rSM7|xNP(xMGRVG>O5%oH_LaMwa2?har`sR3lU5R~kWXGj
zEoF@+TF>BFqYs?c5K*2}tJFhlh``e)UYlW8qZbOkEa%_b43F5qV8?^=Q9a+|Dd#I$
zJ<N{iWj8t_^**{msPr-vz`{|6a|thZc-e>5J<Zw=3VtT|Jw@0#a*GD%Dvk;^XZyLB
z#Tluz8jadCXXz57wV}vKn^3guM$2$%v1|_GQe#=bWbKmID#2y6&AIt3pG#>j<BVOp
zi_b9_Lfi_U;d*&B-odhQnq#7Tw+g4ZB=AWY=eG)Z{m{%*zvc~I|7yHLg;V{ae76dx
z`UO6z!fBTx@bPS%%eugq8S*niN<_OP>jIz7F3)#I0`HY^cud$Ooc@I1n|zutaH3P-
zTU0pFBk=Jwj<pvzAQgNWZ|<XUslck6jh`eO>qi^3?RTYD5O)NACex`m;y&S-H)kA<
zHk?3Vmx}Mmdy_Gh_lHJ9$$qESJML{9_CAtWXpPUe2gfS&+iP!Kf6Cs0h{*xRt?RFC
z9gA=OLDQCow!IyWswP)#Q|jkU`-XaUH+#J!2LmJazS4lX${eX2spxP2_$5;p(J8mE
zX<kIG3<q>RW{YxG4{1L8Ds{-cF|>sI4rg7Y);^y4u06;TJXG0Je_C~un%49R+G$cN
zm@nxyJ$)4)r}pw?b_){yu#L*WI=`DwsTlaZ^Y|M%I$WD*4YO0?j(++I`uPI`kO;b$
zPj_hx`0Ay!0UcLa<jl*XlX_cSx(ccB%s<~uqc#r8E|(sKkAl2OM(7YoH8`^gqxLya
z%yVymX3~~vBH>>*$Qh#wBxK?cMv0N-_Dwl)uHv0<NQ~a~AhUL~ghz2M8|(VVUFSy|
zz5dM+Q(|j^1%|xg){aeE&CY>(k%i+&`GGcn#2<jtmNboM`44EhQr-{nQ#@SmcN%?s
zbTU+&m4~C+IgHpxUy0U8*#mORE1BflRJXK189By~k)z2yhHLMp>WVOXtQr>wwAG=i
zx^txE;F3XSi9c9H1rD0zi!er`A}U$oq}ka(CI&pNg7x--WCN4Vb*5NdUMGb&Y^Sso
zV;wgmJ;;&i^E-S=qz9R!^dN6IVQvWt{R8MIqZQ4Dyi0P#i_s!t6-iEQ7WvM<3nySA
zNf_CPxck2_8ybzY#{v_v=%#r6yhr+YpvQN3!K|O29BAko_icMs`u4s{JR?ml3l^QB
zc0+I5_NY5>@RM)(N1_|IyXX3PdUoweUESaUCGnMK*e5V9d9+jUAcce#ZP9K7<3eY~
zXXO-2Z#e02#)r&Wo(-;WlP%&X`xEY%x`SD{Os2vPyMMkRQtR*b4JPe3g?v>-4oh*_
z3;D^QV^<f?ZBk{eOfGgsH&jNVq3W8L-Gwa3nnL74z)f~;nNp6MDv6{678~Wb2}?fQ
zT{9XBKl^yYHiN}t)aBLWZjC(tg@%0wt1U-ozzO*NSJ~yP?a4fUZGolR@?`2OscT=)
z4>zn|9|^C2o%kPLsgUZx|0-D;S7kw<LsR9FKZ9Q_D;>h08tStWA|R)Vt=eQY=H^r(
zHJOrE<&BQsN94>1IDCBhFJBKPjas)Z2f4sjXIMex&woH3vHK$HRA#r&n~_Ou3w#Jn
zpfmgo8JTlW*4%(Q@5YimryVLqeflY9cX_10FW0Trw}j6;xjM-Uc;Us&{3IlxjB86p
zk0Gdu55Fv#2CWEu`c8b*UR=@ZYnrHK$nL`qZ*JZeZ`$=W<R#nC(=}_VLY|<~#`!iR
z4_H3Yer$5$SQ{&!*@=yy@Cp1E*8%F@#*lO(?Y<<*KWA@uHV3<%Tn*$HjmG@EvPwy+
zoH{F)O_e>I+D1N3rgH?VR2glc7imBG99B7l_RCx!LJqXm@TSHz-D>{hJPg-}8Z*}k
zMA9~z7}%*9edd~Tjmm$`>}x_6pf;xzV%whWn{Q~`6zQ5SE3@@AA^}!^ueGAs_SMu6
zF;4bjpSQ>3X{)IlsvQ^S>^0@H&;8bx`f*;}TwDJ_G+I_&RvVm%4Q<NHsb=ofK!-i-
ztM#x-M^!pM&+3t*7@V3g!bw3O*JIq%K!Ssike_clj1-{Tm~SW^=&3BO8cVd!CF0v!
z`=*Vl=Qo=!I=Zf8UDMV$4BwKf)}vDs$J@R8x9`UB8J7_0W{g`9Sw~4qy*^KN5S%S3
z`!e_*iVVg?+O;ER<cfQJ|Jkvr&cHSmZcg&nN8^JBN-k%tqRdocD9)?0IO;b_Qe^hK
zd1F2GeJ*5^jc;qZYOs%!Gd&e4vgJ4X)*0-^_0e`~b-sOl|MC7$^^CMEHX*+Q*{%sl
z@m-)XBq*eblzr4^<OI`B4;wz7+edbnzuCC4-VrPJ)YXjyLw%JNdy6aF-!l|xADW!*
z@^!nc{xOrgtJd96ZPcxA^#qdk3Y(*(G!*tXx*O{onoI4D>I$^)L;LSX`|w?YL+N!I
z(vqdT<x!zCW1;6?jE)Da?k<1#)YMRWWT>Yj;_9p{sT>J)Zwq-VqK<v0ifV_ww7H=k
zjrqf&(h`TQqNBspx?X3jZg6)^q-WKS(Xxef2w&5M63H|J2_U)6qJ*x8ut5Kj?ykdq
zeLJYFn!TI5$0mn-WkWr^(U#fzL#C!f6Ei2;vRm^ige3R$&7TMB<ma$Xehp1+RrNX(
zol{ieQLL1Og}UwA)0PVBa_C-u*`0dkX08{?dHkcF<SS!IB@^jTEm|IJzU+)pu&9u!
zDN7+TsbQ15#69XA8D*8zl&^*qhFfYP?U-XWIV<+=koEI;-Nv8UOI_u*O~Z#P>#n?T
z?7X&W``$j%k-C<;GtbTJWBE|iMNWHiN9&H`g2&}NXHI&(kjHlwg<OxlC%PPx-uG_w
zP&%FeK8p^KSL_LlwL>-1S+{ses^Q&;S>QP;>E7Giy014eXe~Fl)Fw99@7d^VDZb><
zvPo0h@u~5n?OtnDi6geqv-?D8;Z2^emXbYSLIy3$GgC_YPO&1XbF6TcC?tv$H3aG3
z>gpW!C$h58d;%G+!sWJ7o6cHl`#Bc-4N0V7ea+eG#6MP(>Pv2L1e0!OSrrz{;i@tx
z-^=@uYnbQAQF0Px?{nErTHmC+uN@4AUj5>+kg{nH$Jx#^gQNvWzki9Z>o_IMk{9FI
zN6A@+T=s#oV!PeL&y-(aA#Ro5!)qsdAGKqSXQVWdvG>o_;5jV+)h%as09T8)G6tj|
z;(~zzdF{fxJFs^B3*VXPv4Z`YJdhHdmmrVVr9>li0P^#_4toxHFz75D`VQg4!EM`K
z-?q)iPJ6wn!#?5^<>^AXd>ZAo@^rBW#afED2Cc08B=vKa;O(Ie?3Bkf&k-FfzlY}Q
z5$B;086)1Pa-Ze~jfA(a!7BqimtyD4F|l$&T+Fx#M}`i~X^b$@w`{gnnu}|arj}-3
zb%}jlX#ak8Y+Xgjy1uw9^#L{>c2@e=n~*N{VR!1&@<`wm{zZx#AQ@Ez1?Qj7#v&n`
zBack7$~U_Ew2{BOA{$@4*A;jh?u!(~KrR2ZB_3znhhG}rn`oMC=$k1ow+%P@djk_=
z){3Ii@1*`!dJ)U@PfXz*v|KlouUf8UX}kbD#z^rqYs*~dH#nspB>t0E=_UM)dnMBy
zp!>iugy=`worQy(H*O0hlHHS`gZP4PrDh_~(vAdZrl&-fsBLUH_43{H-7(^hQW`Yk
z(B>6iy8iThLRBs?)Uffhnvx#Xx{*|k>I`Hx_39VS3y7?0tJ=X-<9lD8wGFbMnhV+K
z+A=#}Ih|XHK{||Wa9&PDf!~(S-bOp&Oj5U)vO=87O5~Q6;f=P%Sb6@C*?VWLx0&5+
zCTOI@;47%gK~^Y}!x~`O$=<@Etz=MYM*_L5tZ$8dFb72+{ff5Dn&`@&Ict~jRxGUE
z*r)de5JGmVdTW0qOCr(GQ;-82ml2+o3uZUXT%I`;+7?pt^#W&sPSOU0-w+=lME`7U
zvqrZ2ewT8v7JRJ7M^Idjxp)gG#*E8wg%*EdwPuXMPlv~<tz|vlI5N|XgagfG<rM=>
z$@!L+T_$%$wY5f^9@%ZxrLNYa8*s8lt6(8&e;&2h(D{tKHc-v5YiKf4?O2M){LEe?
z_!{x%^u%ambytnOq|ojQOt>L%zRIE!drgNUF*dQGwW%)>?rSn_8EiWd^8^cOO5%Qh
zyriZe=!u<Z8{Fa@YDgRig$^VdhQw(oKV4f7yQ50A5^{rA3j(lN;h7w35C@#sva_{y
zXG<%6Z|z&iVOw$*`lAzdslSt!OwC6(Y&zQ9e00->qs{E)oij5#Q=4Ktx|WV`yW}nD
ze)N~Gg^+S(dnRA7!{I?q_Qs5is><F2?d=D8t>Fr0`NKEAc_#Ivim<sjXf_9nrw<;)
zDeCm}(H32f=M(O)d5n6PwCrZXx<mU9;QcLhw?aA(?b*0jfVW2pQMpSXvoC6dbf6{7
z;q<`LBK)1&fuMJ2xwr4Ypl7z%-&dq7?DLjIs)E&#(r8!H^61E+=6+NCuJOd~sYrNo
zcjAJ>wZUMmx2!#J;6P(r*|weChkN>t_H5rS&YOM6;ZIQ}RT>{SoDheXlxagaD2x^@
zNU#+ZNP4<-S=1r1aM$snq2pb_-eUv!@!!om8XI>sv#%uPT9R{3uf8a?9+{jxua&*=
z25UWUa`H&4^dkFa*J46qA7_dA?(X>nOKp-8i<sMg!P@jA%!%S`DOQwXDBotv%`c*i
zfus)0`th<BzfRZG#|Bc4Z6Snn$Tfiezp(}>ai&43p#tw_e_fU@oEmXkG;Q}~FF4HF
z5C#>&EV7iT-_`qcs6`>~%vZDKJ@gmlMuhx|6-;)3$+ny^qgk+^K|`uCC1$N}Qdd^e
z#JQ~c!G;9thu=_T30aEfHg|@~)~zo$2isZK%uIndM>pJ?`a0x~tfwc?XLTNF<m}73
zGBtPa=+aQ)=IC`tcXkaAckN`aw+?r7=X~eom;V@xM(fV1g^Ul_#n~DGH?ZEmH+1y6
z=*@|tr5U-F7hd>QPH)F>yEhVzCcX|rko~cOXMb!K97>2CIO(!?N&iUG1hYZj+})Ur
z>4KZX&1>g^j63>VW&VPSb$NL;Zww54SSq!=dt%7E{GH)egVsfvx4Czg8Q{OcO}31_
z#X<p1sN|;1_S81F7ua+2jMlucJ-yCJe>d3A6X&#s&uqn;&uCA@3Q#8^Fth8#k>#p-
z$#PQdud-@a@3dI2(njjbeA5N~+R@J6n&0w`sV-?fKM6haX1F<5??Qe{I!msQVxYKI
zj@?f0elcliJklr2vdt%N#nU@D^ufwT6z90qxpkn2(HZO?o7&e`<mMW!rm#JJW1!FT
z$4HuIcMRb)setG>rgZGg)`0=WTy<<B_0HG`sM155Iv~yb{R=e5=+u|45-7QXxT8r3
zOQPnFBZG?zEW~m`+qXllxF$ZxQ*x%>K|0PEhwlI2KX)pHqrzt?G3P0g&>+^sU!euk
zkn-w~-h9alnlv<=i8x~xYLn&m&POYQ*5${;UEYyI<A}F2^7uhpurfMt>e|<uoawSi
z-pZQe)3I&I<hI!K@tR7nWa*kow(jeq7GX8wElO#vAsfCV?R<kz3o%I^#SN@P#={|3
zi!(Oh4%ZhI<(bM0y89#BO|{#HSyk#kyT)BTNBd?La=d!&fkV@$;7L&D7^SyeD7ni`
zpNeN?8KrnnR_7XYI0jv*Z{s<B76(4mK-b_oIVHKOhD=?hH?(ZdEzH%eD>iLtytRHy
zPGOF2UD3MP_$<EDr%kB;yUsqBYrx6;Xen94^Npsyk@+Ok`Z)Gtn0YZXt&(ZQNv}tM
zih#a0YE9oLsO=1rd(@g2Y&Vx8C8()_QiA5~mD>G7;ao3e1RYJ;Sh#8!89}R4FB2aS
z*~+d!f3UlVB~+QvE&uR%{d7T9p$<u?ry3sr1dH8oPuTJA{?zlIz>^i2Q?KGlSaXnw
zM4~3a<Yc0XPGXNm!>RA2Q;Sx}OGV`yUA;TyG^3}|T3kYXPp~IZUmoo_$vYp7ie;Zh
zI_Y%!<od1Am^|<}Q9;+)_VT2yz+Mn;usrP6uhZ9Ub5M(k)Em|9)yY|3XmB{cvPhqM
zZ&Pcqtfb<X#u9fSlbdIE1-+rpA_RXj?BXieHE3VNPRR3G$QpNoBGo|JN&0_>w^o){
zjJ5mw0+ZvkL;7CoPps>e!TrrmTi>X!s4fp=oS8_b`g%cdt`qwvY9(z~Vpk?K9;xrN
z^O@XOWb9CED`^vhVWZhuPzckptGaP?VtT{GSi;c(!?LKrS>m5`yC+O}>uL%@o+ufP
zWKc#up@N!qd1O&iYYg8mhU9RITb?*7hpDmXfvqzm1FfUw<@VWu#+hh%GR}r0yN9|b
z>#M4(leHV#T4wsHQ!i0%7JR!kU7Hf(B?}|8fUW4c*i<;Ny{TtYMMddA)A01{EUT~X
zn`vp=P@Al-uBxBx9@-sAeI9jT&(5wvT@I2vuB^^Uo`v+uW0y_VokiuzlXp6Fx1UAn
zN%x&ulxAu_7rDIh=TP}sRP)MDo<;fXs2sJ!j$uh|F~Z*9w9_}(NklBIRQF##5y8LE
zQT)f&Idm5|bo5Ra_XY0Me?wbufX(+9p4ZbG4w72vOsz5PCV&VWGKP(Xh2`aiMP+55
zW{;jcnVS1jsl{4aYPFPNzV<*begT}z!zl)w5Txz-8jL65s*(kkbTSU6mA{;s-L-3W
z>#ki}Yr8$uogLGj?m(f%QdnfMn4Wy@i7$WoiRYg5_1<~$Bac1y$i;W|vRZ2q{#1m3
zd7iBv*<XJ^5urE;p#RUxSkIeD%K_&AJMXnnPfve)t<O~KED8o+Yo~Pf1(gLpH>I;r
z4Nyw^t)t_`?sdlYrWsXod-#8#U8R3On_da?1ZTQ#3Dzy)Sm(Zxh5HC68i5xAhvwiT
zvWlS9xvVj_5Cf*pvj4QfbMwtLa&GJO{n0O~lkR7yxu$q9%E8au)mEV0_V>)2HAs0E
zeu1!?Zc-DrHv7&&Cf&K;&2v*gvq4j*Etd2vYGAc0udOLzPr!$bJMrrSHl285O(^{a
z8*x3pEs=h04PN1qew7Wb%QJqjg1l_d5<(_dXW?6YW8)k*HHfG1AaOrC_v(?X@oa~d
z-3tq$xw&6)SNg9Y9>Pb5_HxO?WfN--ZOHYcH)(`vRv-qK_AjJXZ6=T1709g%IjWc`
z7$|NHHZ&y~5)o~k-cVj&c8k?sQ|2lE$WUFiv(e?Mb6KoX$(growdS&cT9Q2&!8~iU
z0W+9>U&8N{`_@2fDCoxTjNa$OJz$g;l)uXfi8%2R7p!h5O*yml!dnT0!Q!dWA~K-j
zr}aNcwXxeT8PkndNGH!+U*Tul{^LL77I=1617$-+i?o1HRtW>uCR0G!Bn>>9q*i1r
zlRg4^%)}GA=%&r=<kJUaq#=k;JZ;wVzrT2mmkF^Ezd!Y{wcjWt+SlM6P-s6_p@(uD
z8tCQ<IHJS1^t)zM7LxA!4OwrSp*)Q2s`lM&ZM)l3SIGUMtbPXC(aFD4mOKMlDd-(y
z9@$Iar52ijO9@h#V|Avl2zw~?38qUu#cuKYsSB*e@25I=<~-zRGVsiBe6%EFfJ6<@
z7^K%|yq*fD9wlm|gJ<p%?J~SE3C}=Jqd(N{Z}1Fn)2u~vHD)c^{M~=D`%(|T_7iqh
z1&gylg+KL1>ifJ^_@;O!BLmF})Cfu8`AZBuPl*=y%6=uiAMcX0z>5W4elFhw<Gu%j
z0lo+BdKlPrd4K=qn}Xs;>dmJ8gUgq*KV5ckaDS6^r_^<PZ2U+E+qsi<92p-w-X-m1
zJG+*W68ofdVqxKgl$w^3OP~ZjqIc_{Z^&GazCoQyGw2)WtijPc_q*6Ib%X~7_t9AL
z_!V{kRQFHeD~~gsbo}CnANq=(?N8mK{ilZ>zWBI=*U6!lFlyNY3B+1~-G}T+ftAi>
z&qymnf(P3u@@KPzKj3Kh_Fl4a<Hfz+wwe!o$3GBE>>3={lL!v@eY)zI<HI{nZ`yQv
z$MEr)YMswnx%uSe)RiM6S58fy++0anE8*3bOwxz3R)jE34B8pWSiSN~kn<Kt>m3{=
z{u7FKxl-Av8r6J~qwy^C_uva<HZ|Z)!u(mRG0W(iS86Fy*I3G*?SxAKt!KuWKl?Un
zkyd_zZx?gEz?=A9Im2*CwdY;9llpy4RphU;h`nZf$_NdFyF5}3_ES7gUubBuqpdc$
zEabdI=|k<Li<=Tj<S>#I#V;oJv@Rqa9Wj&E7Rs+MSDJH5j5#@_Mczn`wsqdyAJOKl
zuWu}^9gU2bF1~2fg&p?J#Hrr9-rrDKsYf)3v9a-xuVJcwzPHDk*gZ6N7!1*DT^VD)
z!|GX1nvEiZI6Y(pi%jOE#eI;SbZijzeCbdviVfQ8pK1?|gp<+fE%8m!h8<qG*Ze)c
zsSOpC>sp6v1|pqfzU`lp{;_*+3*v*CwpHua9hhq0-r%n7IN9|g;)D9P8@%}~!>;b0
z-MdrQM4>X7CKoh42`)jy!pWP6BLpW|rM1O6B;pdecK$_TuI7GMu%a>QS*LS#M~ro*
z$XJVB`x#fz*>~UFSBDB*yDzw`t@oDOhNkcM&|+Yz7JWtjK=vK<)g|AO;Qm$05vB5<
z&|K%cXAeHfTV1SXEHAd$-nh`}8wd@I2Nrws`?fjb^?^QrU^udzIujnPP4?FeM|bQu
z#h3az7JJrLHg$UZ9Yt1uS&_f2Iv%g8?AzMD?|naLoUV&*P7Ka_OOB$ibi3;#=qqNe
zykcj)HYgKCfDMYp>x3X=oK3&qvai$c34|xYp<zc!b%!T9+&NTWGg}-*L!(mzwY?r|
z?SyHfE76v#D`=xgg32<7t&AcGBo>e;n4rA6hT_ABieYvOtYPR3J$8DE)2l<9q>Mn&
zvaSML4*+Ml8euc;%97%EG`gw5(=j&TbSx~^u(-}WIo9qD4cGPdmwz5n4<&`xqTJl@
zj)~Zz<;BS|#+cV@pIX{~AksVG&B^!Fm9$dZTQJ&Bg9F%E>(iz)PeKG`n>qMkw@ED6
z;J_v{#B@QOHZYUyZu`u|Z=V<+wl&34&$7LhO`h|*n{lcF_kgg_pTbz@!6!>{lx2r&
zGyZx?q$JGpojbR-O=_84JJ}ZK^sv-VB~PbfmP=p0@BaJmJF~Czmh;cQr4uyMY34t}
z?!nr~Pcy}^(3bH--F4c+{JdggPKjv)yYJ-}%*6(`PLF3ct^5h^q^7w~9#ZrTthA6!
z<0+&Jv>74h1|v)Y%ba8g>9solo`d!Jz>Y|1@0hP1X_rc!)#ml+XScnmt@?{YS8gv1
z7LGO5AKYJSbne(&R~N0EsKq7|?`%U$Uq#=sj@W!=pXxBiMz87X41YVPqA6mw=M@xq
z%7U$R)~D+p&>4;FcV!!Aa}7R2Zo_=vnRnP1skS+c&pYU=7qzAR(DW`DZoDY_<g~-O
z1Y6L#P_(Hm8n=g-RFrQj%*iP!aM`uhV<AsdiB|fIbZ6@2!O8WJ2DbUYxAqGD)F<Ng
zHc#VFM*uCtlHqSN!}^F<Ib!Z39*^ce`1JMa`R<^%x3N%H(-AV(6>S^1=FEIS)4h+3
z^xS#(z-7O<j3{<Nn(u}*L%dYdtc2(&LM>ZhwEwqc3^G~B7d@3FC9#IsmPBx<wyrbc
zuL_49?C?=nS0K_?U2HQK*^9$ln;RzT`g+S`fiGT{8<^;hZEV6Dw?>;{LuM}Zj*hxu
zr;BNWS{9gWZt8NRrC-FT(c7rjla!{tdg;|#4y56;o*7yflgY)_wuNMJp>1q-b_`!8
zL{4ou+KMBysiUpF6N`%%Ubwh;f_PAdmBx%wgIAY4LvirW1*J}t8}>ZSXRU>fej$A9
z#abVeB=%x)UU<Fv{9g9?-AM7t!nxJPymC`rgKgv919gXgwqLvdr-$4+fB4Y8O|}Lu
z)X=H3kdB{$es1li*AFZoeBFQ=&3ca%B-?78ZQ9<rb64}WXmG*{-rO7PudVJ)`iDY+
z@z1bNPaa5|I)?Y#IfIeWvB-<!RZ^k3p&MdV^6F_opGqjoSm9L-jhwt#$(wJ*v|+mB
zLJRoDG_@0fXcG>G!h-=%f3$8i6dW-%ADP^IC?3E&?(NHC6Nj69u^pX_^R3~zzRn$S
z@Q_Y7KZ5o!kBEn~=?3FS?nz*XbLOD)<Grls6O08A7nYM-4R*2pPMvqh=e9TSHJ8R>
z0QGztJi=H&57DYaZd#iEC42*b+6cgb12OLRczc&l(uefS;AwTXZ7wbkm0IJoCihf#
zWFZ1AR~E0191A8o%Xcrgo$NJrU)eK#I4Mri#&C*u5cK{pouYl_W9d`0tFB6)qJ4~g
z^qi+?Shc&@H_%Jig3vlzyy4Z109vEgl?Z<I+0ftV?x_F73$<U+ec8m2KeHh9Ix9(i
zHTCiJtc`PMOqu}YG_JJ%srW-)9eGU>EHYYH<md^e3uz^3aa--e{v2~ru*`bu*k>MR
z7cJi=SQMTs*}7AjI`f3~#1VhrAQDI&=y~5wy2sHPoqO&Fr7>kZ;Jl>wKBiZDq1)(J
zz7j$KVPMD*!r*^9Fi_hR@K)AZdc$SmDoGpHN;vbZ?=*WWefC=0Os@}zp+&u>hCSn3
zPPJHl<6E1z&Xu(#?A;zuw>{Bbx_xJI(`appe|o;{!XtDjN-`2(nPjIx6AU0(XZgZf
zND7%_Hem;FS>d{g1w57IRZ(YmqB=R3h_>Thjxkqg&>tE0Cqqw`xaw@B&H__Se5z&q
zV3NPkF}kg-XTqOf7z)8Bsl}T67Ismu!jtYNyHC8)^laNt=pUL*M%)jSw1{c~L+~pL
zI7d2tzNz-WNVv6S>yG$rbKgeiP;<dZkE^li_V-`d8|fT1*%Gr|%-OxC**)CUG*_uJ
zoVT%MHtOFpP&XFNEn4cB3>LzXVLLF?-LXiv=oqM?H9MEAAu}3;Q`YD-h|3-Fgdvj*
zy3COFB~m`qOUl}pr?s0$!rfN{2LenVFd$1$RaMMqW!o+taRdizU#g4`NOhipxW)9y
zEo|V-b?%9-hJ@YR(va*ZuNr>eQog-&V{LMxHg)>Q>CG<eXt<>=y^Uz6aqJ$9`Ywi;
zLxHo8aC}<en%{DqTQMBpD3`~c4&}L}!12w%4f-ygspD<f4?L@fBv78!gWH1N=ViCc
zbr^UZTz_zUQQ#Wvp-{KLaR*2e_@s<;`R3(!%k_X(?7V)BR{x*$N0b+>Ud=Osh*}60
zwOlP~S;1x!{ye^?!-8zk9#}_pU`Hku2o%m3gLauy0y{{x|2xRvSOiT#C_FZOy!}7m
z_pA8sEp#b8dx)b{<7EQ9kWg$(&<>ToQlOU*dY)4DQh{DT=n;<6&aP2<h<2a2-eAxk
zJtumMP~kyB7J38SYgc~H!|$*b<aX<M|LW(ct^*t;8naQ}>y=+&;%4t}5Aw1Y8$!|R
zex=4+K(kM(*L(rvk=^g>W&AT7&-DCe8Gnl7nZCbY#y`z*(R<?5C7j~uDvGmFg<{p-
zTcMaxP&}Ye{5{@M^el>BmhsgTe^<s=Q~WI%&!(8h>p6^<Pl{?D=RL`cm>TC}MzWy!
zPu|10x`!%M>7mMxp!ASX^bld2VwBksr!2m@hpbn|SM?BgfN2clnpHhyJu<$khd7;}
z9>!Pqa1}0k_&Ztxv?P@`bNc>*9@D#944P{Ny;!jxKs)ezV2Bi{1bVwbA-wWjT=^By
zLjr}$GH7KE0EOoS92id5sMT}ITQr~KV<6AQmAAAS8UGl^WvK)%$@s@PE=wiqJtO0P
z$8jN*G-EdKF>B*vCPs(QDWE>7Q*$RTt&EzK?ZHt-jZn}$!fB?bKhE3g)PQ5?o1l&G
ze~|ItX3;=$_F+B>othtWT<8Gq0R*?bpn`P!sOB}QUw8&7hrNss5Dw1~%`mDzK)FZX
zyXQzOma<iM;@zA`Utec;hXUH@U`6n~_>wB}oRtXFXa1lgPzL&_{}2AH^lAADnzZrF
zh3&w*koRV3uwtk|7pU`8ycg=$l?5C@Kf^VJN++T<R(=iYF5%SG{Vm)}+IruGrWH*n
zQuSV_dCG_k^l9H8BxwvIs-+RtnmJ94l#l0c8&la($E!eW|Nbr{rWQ>l_8x7ZEqqPg
zd!qIA@_e_oRf~6<hCQ+MAe<=0*lG*@2bA({2KFehYHdX6_uh@t+bSY$0bOsUdFOlM
z>gxqDPq>yjw5?WmeuYda@wE7VKq>b(rFn{1s{G*HC|yePbaPcW^d81v#nYTDp634#
zC{^(klz#W!D7`(+(|A?nJyDv?(-N6d(qKP<1`B99HIUr*DyMYfL`FMUORfZYx5_vF
zl%IgMnIC@_+Rv0$+KTgwrAi4w=9Q&IrV>^uRqV;J*ax+tj_6-!yR=YTlwYDRa~2iz
zAE(RoW|NEASw(dP4nVbhKK}3ZD|=l2_I@?n;~gR0klp$}=vNN<gV**lm&vT>)+AQL
z@8ARnmME<(+N}~SW9T15m`bnl)$n{7FBK~q@c-cW2^r_R3`Cp1rJaI=dZmkG{DyRS
z?I_1j%J?acQ~61bUo7L-E9FNx4kMb=a}CFTf%1CDl~;lx&hd^__+{BRWsKMM^L|BT
z{C!Hh4{`e6FXR8Fv@3AX!Rr?|(YeCuxk=z!tf=4*?sRDX#POSD9PN;u20X>_TVx!L
z4!Qh09KTh@8#qq=`VH^b2V~s43coFbW5<cN%xGs(&)>AN>*-R1@B)z&=-m#_q+oZQ
z#Hw<OjYi8~7cV%BN47k=*~5Kna_@!J_m6^V={rjAh22M%8%fzWISy{=$fom3pOSki
zMwPfLxc+Gw7hI?ET3()PUDTs(Q|cF7|E!D)t`m2^$GQ7C881}0EAY=}<MJN*x3H(i
z3D+-T51k7;OYE(Gs^IgPy|t7>xh3TCt!v;NDm=4C|L7X{!)xG=u7N+4jblwq)AQIG
z_#@dk<*$_KA6DU4D|o*Oe@?-BGdO$<$jKp13%<!d27Xo~5#IzpufmCM0&iUd?@-~y
zH&OnhYv2#Bfj_zi{*a6dUkK5^Q66{U3lTWcFYtMmjT8L>Z(RfLP~k+sDF4wl@Q2sH
zA6)}~C>!VFF6w`54g8TT{29uXBGc0=<85?GB$50Jf6L<eB>i<9B`yebo_k?593>tI
zw3VZHBZ!<QRiGkI>TiI4E6b<!QSMXvDbTNHp$~JE%D$e3KFZNIfqpLweTbvK1Nuka
zZ_(Og=R_aj=nvtm<GEU8dXcLY8tWa@!1L0|Xg^0^L|LBMRz`a{y4o9c<2h08qgvsu
z!D3Hy=O!vE`^$*G+hsXJ6pVrshXp>*gddIO56?g<<LP&atj0T3<w?#&Js({Ie|Qc2
z(KYagWSpO!aQWCF)9>K)3!LZ|_&jrvo|XN5)Zax>9-cbtukheed4bQX{DUM@0&iUd
z?@-~?Us3*}Yv2#Bfj_zi{!li~<xAB6*c$jFGTx8z`ZS+cqI_?5d9G&#KCHq?&kDR>
zg=ajRH?D!po=?F~E^VToo8<DsuS)zEe$_=b&G|2I;=jP>fzx;iocJ&B)-~`B6;AvY
z<v+Rx{_q<3qif&~W#gRxqW;I$z#qxRIsZlZUKx+CbW;=y=oIVvHLRHTm*XVQTE9lU
z-lIINTQZ(m?+FKgWIVIptMSZwPdNA^m(Q&CYCN;vtMSZwuf{X$J#gZWTz_W0SL2!W
zp6Y?#m&>Qu?=36c6wv_w(E4G}U$acoz){YfxXhh0E<FM#?g%`yDxwz79f4<7MKzvT
z6$vNqi1L|LQH^I-MKzvT71elVRRqqtBkIqrifTNwDt6;-0mL0qKD{coKzeZcrbziU
z@>@AM&iT_N^CvyKP@YSVz%#RpaFQN@XJ(fg&&)2ui9e!zW_GFZ%<NL*nc1brGqVdg
z=Z~mAGrQDyW_D3M#2-<f&n~!uH?0itI1wNA`{#-iK@<e`^$1&9J6fb>xF!}Dv{&`K
zOUy`o(Q6274?1`3Rw73z8exo4G(w)nf%_jKjfZd$s^bWa))K3Q8RRI0=HyINL?$dx
zF;;$JiNX+;PQ38<`u4-4B0S;fRqGs)7`h~4jsBj!PA#m8&Ook|bc~Y-G-BhPN=rd7
z*f<++KhSea*+AXqy^)DXS0j(MSYK+(%}*?h(iy(Ae{a`RD6b$AfRj<gteiv}c@(pP
zGkY7N9!pAWbIkq+=|BFRAq2(y7x$(Iw^3Q^$^?5>`Z(QTPM^FIi#-&=Oh5R+d@)=m
z>=VH}#M|{>Gh$};;;NDBr_9V<cWP7l1&_`cKV^u_hXYf->NdCM>b`Dghu3}W<{Rpq
z-7lwBZivle{@1VU(R`FWFBx=ht}T1nam_vWoie&>*!w`q2KI*LPU*80vunl`M&kxs
zFt>ue@zM}B(M&U_(IC&kOZ3+ma#I-xb1N!sL)X7Vy5)~jgl(1H=I4~?Gj8?$lD(#B
z#LgVPZZq6}xd>AfL5L`Qi`2mGm;Q*-SF;kLg)wNX#g%7)Ttf)wAVoOcmWgoUQ4h4=
zMTAp&OPjr6MZK>`oorfqgYWb}#W|6$N!>Ux`6<fGGg0O%pxwb~Z<mo(y+J+KO7-jj
zFY{5k%w<3pIr6ZKP??h)c~nNO19F5T56Q^&Qk31QEk^5)orOFiBm1OY1nNGAGU?3e
zr@*f}IKOU`%VdzNW#mF>hCQe?<Efhn!3g{TBX9&G01uEE6P6Cn<+FgIjJuz`rgrAz
zx!-3!r}EKHW&H5$HMN(WA#3<+nq+3Yt#IVB*SHrE=NI_fOW5a|DDGO&B6|VJGYt1$
z#!bys4pZ)g#`yxC{}<)?Y;PMq-<EcClJl6I?HU&Czo0zNd68}(UR0%ha_Oqu=MG!Z
z{x_88Rqf+>rG0X=s@vyoR7C!=f7N^$ehUjl;F$lqZ}il=`#=ARck{iqm)(nVx2O0e
z&uZ^1uOqy~1|CN)LGr|#C{6Iz$#0_MF9jFxqV$Q77QBg)U6K0a9S5(x=;+-y?%cI!
z_jR}<@u!VDmX^GulOsKtaZ9L3xmh88r<)aMC(PTZS?QBT(8fBtiDibSMErgMB1Bxc
zev0@E{HwuLETb#&PiBvq?RYh>sOT!6v8tf5x+vdl&SRkgqmLEtTeeBP-G>jSo_PA3
z<%Zy%?E~juIC|!;@^3y(+5<FX?p{DAtpiQ}4LJY>F*7b@r!zs|goEGwLaWNXOoNdw
zX7a02+I25Zm>u@@rgb@{g7Vs0+ti`Zp~=$PU|E4_ozA2$uveE%zLa?OywH(n*us;+
zfJqnDn;YX#Aa&4dPsAI|`miLK0>LL!53$kIXX%SHB)y@Ue30<;>XjQke41w^zDm2`
zv3#Ths+n!{a6@HeM_2uZhGRQ>Bl~vDbT!N(o@Z}c<JNdG);`_7*A$6YH~3ur4P!&z
zzTUQOdWmP)Hylq+7wU3nhT6A8hyofT7skL$mIA+F6H7AOy+Ras(q&{zVV$HKW#tWF
zJ=2Y(-oRy{L-mXGSF@LK*W=#$xyaS2usqT(It|rwAF+OnArGiryBGa~k4D8^Cr%d9
z++7Oauv8iFf{{7Kb^3y`>e9tu#(!`<T6*n?#ze6`l*Koq*Z_aG9u%WaM8c60ppdI1
z{_$&VsJB3h=2}groP1+(byZ=Bw*;qQ-!s>ki@fzFoh~G4%ceG*_wogFKV<Je?^)PI
zu{y+u)pu2tJ308f>fVW59`{Zl%dLEsA~{p;n8@YV^Lr{-Yw<fQgUk&Q^umad{~3CL
zmD1)!C+K{Il2###A0clB!=(<ZX}#4ODlGbO!`%^G@W%SrEZwGcL4(5;l(eY_j~!!+
zXTF_i$4LmRg14l5!Q~>vV&Q0nN53H)9oL5VF^$WDyC*SZUB=ZD7oy<U)D0iJ=lTGB
zOTBT~g%@5X<zIH;MVFd(O4l4aeg$rvTygCDYj(2Pg=6e~c4&U#P-+k3dFzYNhwQs1
zOPIgY=!1#c#8k!I8;r8WD7jJ{VKxySFg}f!{GPdsuHlr!z0B<o_G2M!H6RG#a3V1X
z^&Zc%&y;lq4_{WdXM3Q_7G_DEaqD>xKDfQtsAI7+hh=$!43bU8<%!zE|4ZRB_&?ng
zn&V|x`n0tui}fnIELSMvfqtVm>lv;wp!qOT(tW&F7J3qQq3PYe6uhTszCZtvnXW!~
z>f-ZmeBaJp2X<d59rUMuw0Ul6r*C9xupc8r()1zJk&Ag{liOca2jg^KcJRuJk6dwr
z)aOz5I=Ybh(WV`|o{^r^r|Axptc!Ex+C*Pg)wLA9mFl_uI;!VtRVBoAFJz5;@#tA*
z#^9c}$c`zi7j)3@cHb_4g?Dpu??tJXSj2d2cX(4}g?)GHr61_I$P^1!`U4;Ofd7&k
zJk{0J^-nx{_+Gdu=>5EJY1>fydJWD=VDIyIN1ER})}LZkNrPetNVAIYRH?aZAs%1o
z>ROD)7rVwT=zcsL{(D2;(ZTT(Jv}F?Mz7z#{o3K-YqxK|ezbP;efv_MBW1AT{lgpY
z*?-`^&1ln(Zqdy#p7jIMUh5LCH;cuJv=}lG?ELWQXBxjUICs&`r=Pg`>e(GTSS0l=
z7R%c*wJ-_gwVB!4M}`NLH3DyuHfZLRx%>*h^|O=Pv6Yx#N6;F@Rc17fh+?ES9gDZu
z^K(+-BKyCEF64ly%&Tk<?B43=DGfi%Ui(9NkMqD4i7As&>(?5p20LaZje2DBIq3KQ
zQg2u~G``Ivv<mw=z0X>E0a`ZVeb$)I7(voL&?dA_f&zZ$BootV#Nw<R(6Z4@m-Y3(
zZ*$Am@`{R)x_y`AuyE>I(j|vtQ|=1yylML0!-wygtj7p?Zn(sM`rd%QG8jY4v=Y6}
z^%b|~NrJQQ1X2t^<`xws9CJhS@7gNNM4P69TSVdp3>Xm0z9)f!Z(3hcvc9mS<mh^f
zWj((3hNbV66c&|~6akcfo(YnygN^{`0Ix9?WC2U0C$;0?J%5u;MtWs^FHcMi0ayE;
zv}qF0wdSYwzXkf=auoC9yobL+i-0e}KD>YD?!CKrXD<d~-eE!b#-4?p&e+J*NROC#
z+VjvlzyCp6gljl4`&{@%X>cjbwuJw`(%u6w?&8WH-}!En)wlQFwX4-ut$OdxvMgJ&
zEz2F-V2q9FU>t~n(2Ox)2noH0H~~UQAOR9uAh`fZ?l=M=N0Lk6((m91mqWY1&ztXe
z*K$eu-ygi%{mysh&CHuOug%PxU8n6kf9GBKFR{zEZrr?O^Jb!2$bUYg*+~9La0ftT
zoWtOy$Qc$B502IGt+8s&JDg;C-KU;aKex)&W0vS-Zu={*tQ;i5k?0nbvH~Bz(h6#6
zg6=QMG9OPDrEwccW2AGLBOgG1><9yOjqx2&&;h{5=?o<>uEb;&dkNuR_iCKY#h+J|
zxcKSc0#1lOCWPmTIDw)fo$NiHOFnk^aQx$sH=lm-S!e86zj58ht+T?C&~?{^?wDM&
zVLmvxbf^n-B*|594<kWdMBRKNyS#MHCQD(l1|~1)@4sMj^1}Z93n$l~SH`}hzF_?+
z7v<Z93o55>-Ld1ArAu$wvE$Y$;nFKFy6DP<2W~%j{cSXVAcLWa-oY^rAxnqlpfBiX
z%3@<Q_=Q^jGwCF&&Ze8xG=#Mp1Z*-|s_w=h?i0_nB8+%*S-mP4S-_Sqt~s$E$~&c#
zr!c1J<Y{|lXi5IN!VO3M8K;GDmKqt~1!k*6Ns@yf0ThJD0=N~PZOwldH^Fy$1(pcs
zKk?_kLr|AMYE`18X_WX!^iwX*{=X=x->6rI?EiqC`YIIYlB!CYY9H5Bp)`_yQB=E#
zUjMeLiW5Pyo=x?CQ(0}CYgT>hQF%k+Zz-(J(@Djngm+MDtH=wvTrX<uMV+#Qk&`Hv
zuO(C=`-!?`v9Ewm)crW1gQrQd|9JR>>_7g9$xg1dLK8TN+A6ks6DUE_MmQfK(}uVR
zn8${AzdF>Pze8jh+<GC7K@^cge~I_I3G>A*>&NWpC+!JN6=1q?Y){wV#nUabVE#k(
zL))91whj{G_fF@O-+ENF^6=*Ew=Cz(fB3SwHJ=*+_YWtOkAgSw{fwONTEQE{crsAl
zC`vBj0ddUJCTZHxZ;<dSSFH$rJ-HdNvlTjj?dFDW?7f=FLCiZ|^A7|91OC_YH~RAn
z1WN<jc^|MKz0wpL{U{urI9NDd79tL=*1Y_U)Q)O%t)kjkwWHx14}(^%d#apTMXj}Z
z4@7py^TvqH7BN1b|91XgK%n2Vq@2!_Mbs^Urx0qvu9%bQmb|886-?-V$LW}&4k*s;
zPXP<EkZ6pHcAT^;vF8nOYiD$LTa&1%V$l9msS3`Fyz<JLJ}~F|L>|0Yeu{P{=e>N_
z4J@R6T-PWAy{UNmnIcb??v;Uj75>7<V`7m`LcIH2DIdlO^<Z@uIym;^GFHqd_~^bH
z$r2loct7W}&}oA5&+zh-NT>28yGDL5e->o~_OD7ZVnABA64SSo(pMf`&tkZ(9`YJG
z8KeW&tJ%+mw?XF#Xa%L?Fr3G#^l+Tu7@3?*dm`9sxw@n^ZJk*a8>sUSWFoUM_Q=+=
zY^mY-oE5Iy3SG?6zP3A{3am}cZEsq`EN5TYxW2P-Wir-UZpy!Y>vh|%U6ryfQQ)S9
zSb3$g+>$$Wbwk76Q^wD1C+lbqB#8LwkT7PNLl{pkza>-JCok#@Nax&a?knS~<KAG`
z=IP6KjdpePpSSmhrDF(*+SCzGRLGa)vID)WIuVZ4=eKQ*CyBnPhEmK_c#1W1%z~h)
zL5eLR$jpUl_BQHQ5oPAkYtmPXK8~V?<Ms-dhAsKVu8>k+V==>HtL{++KUq6(WH;mo
zjyz>83(PG4MSjrw)Desstu@pA*(&M}%`a559Uk`xdY9uzHKEg!erV#N8K!Yb%&B=~
zJg^<L=H|H0uUn!jFRyZEE%9~Xb#ZgfRaw47wFK$$o0I!Dg*WZbpPjS`QAMQloFDz@
zoX&_MD%g@|=ikSFsJ9O7ID~qm$JiBrS0cQdS`{|=Mx#wrlS6F{LqomEM5oi_p2)?9
zV)cPYXL732?sK^;&B=7ypN=*}twxv0ZO=tQP4HZ_W$U{9MXbLDyo&Y}^iDOG>BOzb
zcL7Ap=Wx19Q5~*+D;iTU{)4^ur_g-D)M{kydH0_}>l%!$ru+-QDUIQ4!W*FPmw{8Y
zas>Nm1ZiwvMjxeG(nV=NI)jMJx!AdBo!4)uDlZ4>JjV2WsT<B`@BQeU`ub|%%bGf8
zfn%!**t!kvEn56A`4>AaR0(}expIlRrK()Ngvn!%Ezu$bxVnzX&zrhu3Ngi=9=&n&
zi(-p}YQXVuS}y4_=r{M-P`^uYST%E*J(ZRUMU}05cP0u~PPwsSSNKf)MQB#UEc;)C
z*1|ug1pHe2xX+rh<Ue6$mXy^uZqHM6R>BJ+I7=2c#i8To&RmQcW3fCU$-VJL-u=M`
z5>?XOohpjnBbEF%N~)=y<eKqdUTlu#VP{Zp@;p8?Zq4`|F9RBqU_8K|Au9j_JdU59
z<S@9Vta<qeyX**i8Zn^<s06=z2$qYA-#tXPPKJboIJZmZ^Sel5V#bl1K{^FTf$fg+
z9K67lB{-qBC@8z<s0GXKP#I%}q-$zpVk%`%nh|Ty++>@XNlqorX)C+RQg5*&EunVb
z5Q|6Jy|$L5F>SMDe)5%}S~I`M!l)U1;e{cskzeg%&<%a%Bb}M8G->&D2;$LHjXD3I
zSwnq+m!IL@9P|a+A7K!j<9~s{<NYh__58Ilri}HdjvN6p2ia4^8K^`L{v1FFtfhOT
zNc8A1abbkt(Xfq<fOmdAHarn;h`pgy4KLrfud}h@Kk{x~8@R}srICiz6aSx!y^8;f
z)u1Z3*fQZU<UN^hMJ&**3@$1|jEi_7##1oy9!b6x!~{Cdm+|ALezkGMh7Bt=&W;QZ
zkIZ7EpBow+9u8)jnvx<n=MfT*dR9(=phU~(Vlyi?Zd@@lF)}nXGQoDB14qFCr|5+k
zJM>|+hG3CgI04dJY&SJ!_f~4k*2N%z1DuZLaf?BzN9|G^jK*<uVh$lmX@EoEiR6UC
zWa*AfuKoS*)N6X8ttN|ku(@enbJIpdE_Rw-J2v}Q&pV7xlfQA-%=8&e)HcZVTflc}
z$c8wXR|Nr1d7RRt)v(tZ2122MhK8X?WGK<JCMR4Ni(OQ9<}w_YZd_wqe7R<*`LwZr
zXYc*^w6nykWNB<LYuSy!Mm6y|PuAyC`=o$&X-x>R-9)F#ww>$?nY(f$TbJH=<=VBq
zlaoLE;lC{DZXa&VyFY$0mQIl`fy*bXs;e0M+NI|^@eG{+n5#jAzMo-^qQ;Uxr5F%I
z^rsYqMHQ!NHDYyCIhK@{87rKbfT4c?hrMI`Vs#-nnOrevP4tU#Hr-3F+<whjkj;+^
z{SL+U?VfF0gYnOO@$Apf2B;-mQVSn}%YO$gp_@1V2R#=fXn^nhBmR}@&P`2in_H8;
z7K^#b-@m?$3Hb$K?PRdWVswpFHk~oOau?3a;*y|stNfdHcuX#vA2sv4JvnE?$^)Kh
z*9+a9u988RVb|M#<C#u#;&vkZ68$T5PVOJ@uQV6^D$@7*n6T1NOAizpPW)bYh-e=5
z(A`|O@OnX4=z9(5>}HI*gS>a#6Afm;y(^{ZAbM9+s*<xK#U+)>7FkkRA<r+RDRSXM
zit_S`Zr0LIQ>CBFt(K0-dzbTB$DSUzb$r=SiqBy_?*xh;Ui7LMxSAq)RkA)qsiL`9
zAtr(^u&4-`1P+J!!3QEs04{4lRL=>o19!lxG|DgYQGNw|q}#pAafYZU<7xC?=IOLo
zh|<OT>s~|p4|)0szj;jLzoa?BFJcNE^@|jQyJAcmyG>c*zV0KyB=I(-a9Xiff88(g
z+<o`OUU_8`@uy9zi9fAo&xJ0#EOdK`&!J5;hqyEq7}_MpIi<)S&>>-d6{UVrwG&+!
z-==`4_6kLXp`uG)M=lISMVY}`4Q(X<WAC8HGw6LDE{v$42u1SO6I7ZH`-N*n8BHON
zp}YRM%3lT<edI?Fu#7ZJ+)KspT;TB?DU6E&=AU76UmvvG0|$QQR=ykjdf;cst0_zi
zbpD*y*8Z*@Dp`KuVt-#5{Y*+3^!#;w^j{%e-p7B`qdLe;(n-+<6PcAc?iu|@+!Wsx
zqT{~5rI$vB<H{p<2@d#9|Eg{p>hLS>;+RD{evWq7CCPHE-dO7V3CiO&8D-FWoc{PG
z?;k-W8fynszMcjOLzrr5z4E9&3ITdDh4ks*2^uN%3!xHYD@t*$+ldXsAaez;M;Yvu
zbUc#aAACS<$e?G$D?u41F{(Api<A2!{w(BXQ;Tj_TN;lp%>=tGCVOufs8n_A7~wan
zxr~m+^<ACo8a+mr*$V`M-k}-ZkG5fMn-I^oNbp!2GraVabZ?8bVn_WGKSAu;{7=1u
zZug)US5CQqLTxOThWEk*kxU+oMG%O5U%Gjs^~;OkJaE|!Klus5dwy#XtUmuw0IM4P
zy&Ekd??n#Lgi78EHFgA%2dCt{sJ`cLa-z~&rKmDhjmB@fGOY}{R#Z7^6xFusssH`e
z1-h_aAJ$#)A8!DcpEbn{hL{OQX`r>C2D(>+%Uw}jU8J?~N{&(8Ff5C;H_0lbxy-pB
zty6%5aH~)tuJ)qH)mVqf9kIXq>%=W71~l?vhbj9a&-bjDPgdaR-H;5wA&JF6!xBe&
zhUa@hf~Vx^w7P`5*pTlR{F&PEny|mbW$B~>aaqpMAmM`Yf8ynrO1oZ;;dIC+a%1ek
zmAG*~apO`tZvK_hS8y&ZM!$Ij9tVCqC^RwB^~Hc(jU_(=1?G?<a;ZW`LvqpftbBTH
z%kB+<f%?|d#~fZ$bvZ8P99q{9>-E<U*QM9K8ykw`hWzfFZ+=^4dR_PWvv6Bt+?uG<
zR!9y9MMZ_lrS}GHo}Lx$ecN0AIXw|e&t@C?o2<q?@I3co1!F+C8raU_#<qS?q&GxC
zF*Ip3$pmdNgHR<f(CHMd#s`)a@)?bKgF(;4zK9Ak1#%M?2hbHY$YZ8Vt*q9hlk4Kc
z3b{PHM6Il;#l?yZBMOBegu=bymF?{-!#$BiOG^Tu(T^*IfYvCqZGCOqz1^GVn_gHd
z1T?0F7q`8({hsbE^vwLh!Q|MoWn;;~ptnEQ)Z5#X>%Yb8g*M^`Eu^50RH6^CG2quR
z6%{tx3q#h`;^4<TOed0X!ifTQs?jM`5%0){hX?f<Z;Rg@j;2~NGwD!=S8pC`%Qn~d
z2YnmTzKkZSYYF?h?KQ5!kbm}7ijX$q%53(<x`b-apx>Nq^12(l7M_Yt=3;%#mb&G^
zuH}81XkUxH^PKwF&d%PwDSMzIR1t9n;!omAt*|R`UYB<aQW|UJ?5h|J(yK^sN7F?F
zFUId5*KFRrW^U7_x!$EqdwV7)E5CZ@9S=Qp$DLmd9zJyF`s)uJI*eI64LZMD*hkhG
z^cPsg)L|GA(}&Ltbr}6uBc`oWt*=^m5Yr5It>Mq3sF(c8*&^;1ExnSan>IwYUo+4<
z6diXs{Ie}9=Z8PL%9^vjZ9na{i*jvK3BNtuxN%wMrHAJQ>=uTv8h!aPU_#3#x?d#g
zvZ4`ttQ}IksPlvLSk7Q|O!ah6Z#{2hHaO548?{?KD{`r&@&0VMJB&a<wmO5$l^*Zv
znF<BEf{on~htnPR_a{5YwTiO(zWUr0D#h(8=+(D@gC*qEK%jcb@uH(3;)DyIVc<`4
zra&O~O#W>a39noCtKS%VjQXH4uY1nQ?$4hRe2%bVB_0Ae-eY<q5j@>oXz+=q0ACdP
zWqP#HU~w$#jt<3E3<k0emx+Z6dP}1Zn_pVjR$9Y)mm`VL-Q%++y^cjg@7L&}s|NZg
za<|AY9tYMc$zP^}r6z75!Q_&2?<B2K6UhR3D(MO?*l-KpsgP=NBGBUP?q0t;*s~&D
z-)*rOnq29bjAuGFJ)c<0=Azjxd!Z%tugTwX+x1(nnhtvHPOGi$s<R`BEgM=^Q#>f3
z4R=QG<10e6!3m-kUeIqT>!!N$53?(qM`H%XCI9s3>X3Ep+Jm>xWA254n<vm-7s|GX
z_~G-7VjPKH4O(<A4z66>CCH66Bd(J{w`jf*|NF3IE*olf`kE0sXKIbJPG?Vhk~0;N
zXn#j`AT^=vTh_EHmF$WPRmLY%(SdZW!Ze(Y4}{kZ`8ty|3Qe>v8Xv1?Ydj;7>_l&-
zzBQD8YAly*2cXGpxHAac((M8daomQB-e1gj!X(&)M4yevT#-j@pXnL)Ef1)cP54{A
z+hV<Do1xj2UYYew*Ds$>Og60B-E$gyabQh6z2&0lP+lk^HO!Hk{=%Wl@90O}O{n{O
zsGHAh*p(-p*^I5<zI{D?2B)V7@u__Hj@!Td<=gLgICS{>LkABYy8bZHV>2YwTNovH
z=SwsD$ewV!(JwUfNqq_BqB;EtYW&-Cx^DZ`13kkur$aN%E9QszoPO)*oQ|eTa~e`k
zn$y_fi@AkoH|lr;Em0{nwe&2_6ugIz2hW}8^>b*0N}+?9BGT6bC(zf|l#$8K{4?yr
z=HaM*F?|6-Ga$UoAsDz9isbQQ{Mm@ja*X7c>=xNlZUrsE>dso5jUt;@mO`2%FW;Yx
zyl9&#1WFX|VlT4Tj%r_>TqW07Y_%qP%NLy5&M-3~*k90-o2I_-ny{NWB<*Ha(KphI
zyPl7xgHIrR8zk#G)D~2DV9eqzJBKt2g-7@<z6FX<B|C!stflzuYPot*4|c2KOjRp&
z0|D9x2Nwru=jD53N1*BQ@}?|;k(oG)kR--wDvyepr1H-WvU~G$gThjaQExWujfkm%
zNZKD^fAK@G*<j=6f*pv(g}G2-`qgsN;^y3=w$wLx8e7LRHpkM;@RT<Zx2ZHde!SKC
zSZchpwLQ=<&}H$|&vr+8+d7BiN2AFLvUH)5(LGE@W65{OLuq3*BJ^>C-lS43Zu@J)
zQyzjJQBkG2R)4R>j(d2eX!YNt8rnOD;$p4wL9f%|jtgr_ePgoa>|NRA*k=wMP!|e8
zN1ZEU=_Tyl8~Xcips~Swro;Q7g1o_M{Jj?6h?@pI_b%Z%(oXqe5MQ}8NEkguXQ>Zs
zJzhaoV}YB{=gy8>O}1Pe)9Q3^7*gqXWp@kT;-xu#`4)}m7%y3EF>3UddiHLqAb~-P
zP&138=AZ&R7%hrXi+K9GtN}2Cih7=2UraCTmEA3y!`^zNFWgBv3wv1uZ04YX{8(!I
z75fyG4at7M9>EHaEEmdRJF)5UE3dR%c;V1p!MhB1kTuhY9B&nK<gnq{Fk!yn0`pZv
zy1VW$+!X|Dz`#Yfj{r7=6kw;MR-h!?!qdqotX8C@I>WMGGX<-He2|f|Ed0}7hq#^*
zmVJP`*($|!k0Hzse&F|`1xOb@S(GlkQA$@nz9?OJO)0%>mzd6A8J6w(GoThBomc~U
zAk_fQ)Wq@H%M3W1uuD3d;Nfk!Rra5lqhM6IMdNl&u%jaw>gc$&HJxf}OQl<Bq$>+o
zvkwZ7Qa?<Pk(KPHX9o#Sl|l>qKv)l`otWYeBd4rj6as}uNTQa!iJYpKZu1pkbMUiM
zQ<nzK;VXVKku_y{def%t1WL^omdXB%IB_Ut5={oo5X=?RPum9v+ik7w?X3@Qes}-=
zcQ@D0zjy9A@2x`_H_FgmnpB3UuM}^wmFKs03=BM6yY9Vn&V6sbmX}4DjfHJY5MCq?
z3nHI#m+i(o_wKz#KIi!KXV`4OWQM{v*%ML@u1BUdhP`|5yu~5+IzGLZa`+?|^?<?g
zMnc^u>3AgO0GA7VS_BjKeA28>8{W$`l~o6PzCd+ZQ_ky(yHrMp!>GcKTQXx!8#0D~
z$!!YgvYT>a8AmFcT-6v$<35{Av~g83lP<OHBeag{macS1jnXy6#LsB=2We%bVWbV>
zwm&@j3{;)L=`>Jv-lkl!A-Seo9O(?Iie^w%I)<vUDMw~3w<)XR%`s#)G>v7b-%ASX
z!9QQ-G{Dkq2}=g^uiq&@<<nc~?Ye?W_F3T%{4G5G>->L_fAA^XW4L($<<^Sjlqkn?
z`PYIhB^DGGmBX0mP*ToI`~A$s{xu(2_#=BWUk4}y>^0Ueyds{xpgEgMn`myUL;G#H
z)#dYQw|ZUqnw+hRy{4b_JFTZ|Haq>Z`sLJuHr#=;9c9ULs8eT6p|m<@2<e`Y@86F-
zsr&aMfYoZDPX77N<7wgk#U;SzOgSpS|L|faDr@3pOXWEXl$O8#I{pwG=@-epRN<f4
zSA;LYR^!%YQSm|$Yz2*7NpF<2T!dvrTxQaP@mD3+BUCOCHysXB{YPff;k35K<BgH7
z;jTy~P@{FU#c?joY|aK#u}IfoS0ov%)rPtskM)na{GnL?sLNZI@!9QWXWHwHxtyWa
z`b4L`CTw+NeNI@))&_^C&gBfZ$5YLQ+KA2H<YqUAQeLM)6AeewK9^pHO-5Lc01ofL
z9t=5+0Ilgjeu)|{R<h2He`a`hXX~kbu}R^V3l7#7nHw3Mi{v*DM+apvIVdBj80I{4
zSoRstk)RK-2cQoG6+xaJl>IMHhnyDPhMW#6ptXX>hS>$h{K6<t7xRZ@zb)ktF3KOI
z{AjTk@HZmeL6$`h;@6;-WPWiu$e@QnUM%z<QVLO3wcl@QY76vRZO+Ne$h0dScU2eV
zKCA2Ne8Qbg<-83;Ubn>;o9&8r=h{ZIM}<G=Z6ioX5FR0E%*`$hc#QCfePIXQfug`)
zq<5IDnnQc<6mGOHOj5bR>nOL6%28bAv|*!fZ&G+<;dE*4zmAgPTa+Wd<V!lRQFD@d
zOPsBT^DUxsiMNHIE^mDA{PVvZiAXFCY>aXfm;3KhZi&xPZo~QKzc-BBBD>?c(Jp4>
zT$8j54jKJH(pMe%GpI-KC=tixZ>1jL?e&iQ6z>x_E^;jH(=F_)`7=uV><Q^@u}`-+
z*!3t1N=t(hz9w9Q^+2Bt@`cAVMc8BUKFewWJ_2q~anlg|4pOXWgO%n|QQKmBy7#O~
zr&sOi?%p$-PS5V?9=~K_;*#<4OD85Soobj&q?R{?o6IIty|Zm>xZU4m(%U*J8)h#Y
z8@*sA9-p~jbnL>}2G`h?t5;t!I(o(G)mM&fZ&=mQGF|U7TaCu4zL6Q+{Eqvt700wX
zF3bJ>c87{P+814t_&3|@xx9H|qIvDIL{n2@+23yD*=&1buC4Qud!q3W)Lw;5%lg>G
z;Dt4?VC$g?@zYb_L!|R@j&nR#u|_ZM&^h)N$5)ceQ>o=i{KJpB{&2XzuC6Z<>9h7b
z5++SD5NdFk>;{{g^(AInT4$2Unbww>gabDjB*voAu|&gYUH5C&pw6vaIX1RctJ7d&
z2r_}~7J7wyA)jHz>EOlTG8%XC;vfdxIq)6()V`3<WH|k_g&lWhGA@NHl?f;n%e~7L
zO17KT`h596vGm0&S6-a|!Cf1F{Ns&x0jisA0n{(SLWDAN)bu5d0p4N~*(DzX=^XGW
zgZ1JB#0j-t<H_mGy0G2uGMbZyV6M&*uQk;8w05W2kaV~*=N;doEf#}Cr?(pse9Kzl
z_XeYeT5FXSH;tLgEma|pCslb|W6@d{TDuOd)sd9Pd^@2PC2RTwD#x7!$71B^*73=9
zYkjr3%ApUnw}efeT9Y;jL>+^o%Gr_88Dov5y0)jIvtO$*>MfXkE{w%GjD-%XCV`W;
z1p6kB+b?iJ3);sAv9CWI%4V{Sf#WM?>8bv~6`sCawwp#jQ`jl|uW-JsgCe7$ml&F(
zrxajYgs_c>n;3kRg%-$ESRIvk01x*pO?S|6PV#hMK-vEFx6F2(aoy4l*Niu>s0(Km
zg0<Zj@3SQOV_B!L#OwFYyL;+;_s;b1+tNDrxmBqtf9;Bk&5cf%)?=#g_QelPeR1c;
zJ9f7(y>8u#vswcoN2I^kzqGF|5q{>1%;tfWpBc<;yMEP%17lXBv+*O3_bYZo%gVau
zIQoQ1$G#(61$uTt8stFH{F7Ew^FiJG;{#de@M5iX`HW$9&f>G&Wc6C6Rv1>U;lG`S
z4Ts<KKjeQN|KaP+H{blrLy)ZFkR^*&tz}_$73-0Qp^aaOS`Q<~JUc9VQ*KAfRZ>a=
zJIr!C&(%^2mCEpxYowGo^0f0(*DlJ_%u^0XDJhg{=cTSIr4VGQ>!6g9M4m>Thn6>~
zJ&{sfholq__RbAs)YXdpAc0Zj@d%?xIUOmN6;s$>kn${2E|*ez*o5qB@(oD2p#*tC
z_IaLiqm&XZ46z=>+TqwJOcOQ=)3P^ZZzBcR;3*AQ>&fvvzy?pDQW>5CZ19vg^0f0(
zz(y%gGfx3FcuEST+IcBpLrNjYR2Q(pQ<BKj$nyXjJS9@93)n#07;aoUlMTxr;hHLK
zUIG6DjTr8}<dVRpmmWCarGMz244xR|qqP9|ud$1rg|RR|xGOx2^gTilxLXD<)Mc`V
zk=j$Jlzol4L~KblSIR!mQ-CehEO5VO4?BdK|Ar_2iSDtnZu&Ijat-mOrpg_gH=TCc
zChV)2TfTht>gCJl(6)I{<(uqsvayI`lN<h#sjSz-`fL^U`~}DXg_7k^7p<P3)cc+`
zH1)2CG=yvo8jH3&(AXOtOMTnYG1KRXru<fuGuqw}8JSFZ0gL>x8Nh;02y0AoYLX=c
zgN(jPdw)tg^`r4Yy+hmV4K$8)wRYAAO$|DWp)HW?kGg$LW0mzzqun132kY!9uRG!}
z8EyW?WFT3kPDUEriA%-N`gZhBN&a?t*)ey;RZTur^OxWv>83{?^|!Pfn%TBIf2N`E
zk^4*<Giqrw%3<a5*p^Zgae<xWQ%5_WNcR~X`o>^5n~B;&8k7FJ_gB^UjoA^Yb<On+
zIa5{bQ~q<yD*Le8hgy{a^maaezyxl?5dG-DfT-Ut5^*Xu7xt*<S!=?k$i;&V^^vZn
zxbDUgs?}6`431ntZq7Q}ItG7ibo352g~N^iwq?z-4Y8^U*ODsVXuHugn9Ge&pHh4z
zFXyW+@SoG3KwRf@wbGWYdy6TPIkRHu+|!%9rp`U*4v<EdL@OK7N(=a6g5%++`6{Uy
zqQxAN29M-%(QS_3kF^fQ9TrbdL#j8b@r6bmnFhBj)><3P`5Il_smktXsHIk+3A<v=
zxp<(VTA_{m5?wzJC!PMF!yA6R!R_!EEBvj_B;kxsHxcbraQP;B=D2_SsE*K>6D1De
z4;WKn&D_>tljj-&iC#xYqa}1T2IPs>*3Q8!kT}9L;YOpqcQ}`Sy1HCMS3O~C^W5ad
z7%<jT_y*?U_fPb6+)@{d)mbARPh_a&;;Cg9x74=m?djRuiZT(D`Mgx-7*9u^E#h`Z
zY>`-OsJ4}IqtM06rYQ16tni6!kF1w-l11K~rPArIGQF0Ld}*;z#9%4iB-@L;@B)f{
z;>CWvhAOL5uBtMbs`TdQY1WE}oz>QAbxud1lQ>QoSAHN~w#a2!6>(Yk!QRAPc~Rz2
zN&~AxjBLt7GKW&AREDRJ%%PMx^0f0(By);+nt2MbJW5HSR68$4GDl1y$W#}}97;(d
zPb1GmGKW$krMgJwP)d*NCE3@6w@`|t2hW3)&+`<L9+ZL|ow7Y_5_xWtQoQg#?&T@8
zC_#DZu)EVCyaONG1K^_IzIg8E&rfg*RC*6;_i?>bH1`*=B<wqfN<-QTR$)NiS4SH+
zoyP1DXPc%*-y3SFcd8VItjUzJtsU{R1BqxhR~~G%;09txU-K&=t;21$oKjxzb<<rc
zEvS7&z7yVla2TBzmmt!P#L{FhEm@OK>e+^bLg5Gqmb9z8JJ=P9wZu~mSu;Xu1fA@y
z%RBYXl_QN45zlB>^I+<01}!?wduNBg&06fsBA$Y_OUGWm-o2u(Kjf{i)oDD|hOW+}
z9ZW^rzz)nzW=BHCDr<GkXlv`Jrpi(SK?AQmTAf9!bu#xcaA9^}f)}yFXC*56YS(b6
zJ79~OgaA;ZuQ!`w7ITBKt{p93y*xP-(rcRc<--B3&0{q^X3!1ix}ZvuPJIA3mA`|L
zfaDZC-Do{s0-{%AeP3#OC@tRM_+;m7s3#Om+AD-#v(Ah)UR$fr-1w3v?2R_F11p!M
zN5hW#gubkzvUyO0!7w~)O?%r2M+WFyugcFQ8A{em?pWJ`1catH9*;(<O;t<Ox+;r#
zWCXgF%PzDvG%Hk2xiaMFa^`;yP6=_2dG!vYO^XZ+9=2^ZBl-EHFEUyHkQ*zc9CHdv
zi+oC4Y82g&BLDR9EI{FX?E~@3T60CMr7u})DnE6gTGN-PvQ?H>TfMzandwn?GU@iA
zk?GEWuS;#J2xSWmkvf;6%&OHp$`qCL_H>6r>8=bJQeD_}udmh^eBrttW{wAfv1lj|
z|DSrhS;ypNuY=SS(B)y4!U%)akoQ0$NNh9{rL&<Wz>F=f=2*~PZ%jIn`K`+aOrE~%
zKfM&i+RN`SdeBE@JLRi^l^PC%d`}`~!IE176n>(rTB{|kHU9#;Tw7J8r4RPG{D#S7
zyHK)PqS}zO0S(?0{bC@7Ds5%Cy0YA=ISNgtP`KrCpM&kr-*AdxFF_T1)Px>Yimf3{
z9>%d6JyG0TzhiG~dmr^8|LEiUp1pf=O2okd*?yF$MhUc?s+VZ)RI4#iD_1Mj%1U;?
z<z)BdXN-)wm|Vi#A3y^{v#<kkpaL6HMBy!=PrV3@4y8h$at-KA&8}=L;E05>K}W<;
zM;L8yFu6Oe0THK7zmpJK92?Z2TU0~oWEDCDn8qd=8(S>iBmpWyp?M{7JW*>D=aoo+
z;A!Icg5n-)U$LT{KFOArBtGoG?8M~E%;dzZXSAh#WTd@ilwh^63O2&q0!yjXUoLft
zc1?8g6o*L+ti=J&C^E00F>4g&OB}3%5o6@+ORsG^{oWD_<Krg#H`D-jb`-v3L{n$g
za$U?`u2U^h)|Q##I_hte%L5t^1W)vz#rb_e_9-BQ0AaDVDek<Z87Xd6K(ECc2M-21
zO$KAq<q0GlrUqv==}PL1T94K3h8`1lwX*|OE!JPXCY!x{iOFYoXLQ(}R_)T+%#}+F
zUS}kWQPQ#lvLDG4bo!5Q48s7<5Uy<!+oiKxpHKQzX{CGZTC-DY#1SHPpeg>GQ&_v!
z{T)}J+^Hx76tFIq6n@O-AwdyOB0%&=jP`b#f>Be-5uj1eu>;Z+bpAH~0_X=2%7Bpo
zAS^*UaBz_OWaRtK4fS~xzP{jjgs*4Uu6;KD0`k`4>3QUZTc?y)D&fPPDz*CbwULZT
zVQLIFnG}|Ea4wOy2&OE-cxh(lCHmxFczVs6r=@x|fCc?TM|=Kw#WdvzPT3h-qDha!
z6|dWTS~ML{1k>#B{Wp(fG9$O%Guhlse$_Ho&U`2jdjoPY$JsridmP<6C|9W(b($sB
zmG*E&+5XT-nHJ~QH0qAv1vQPVT;)~8d}h}5Eq%gbj+?%fzc1Pgs6-!f2^(1*xvFpw
zQ}@)p|MJvx?685AxsCb%A*>N!(n2N>Cd6GL$I^-6igeFJORPm}sD-kcX>MhQUvv*O
zw|Dvt7QHhSiFdi*qWJ-jnCvR{9=IS`R#^UkOIvMAFG;th&qyNx$?h}A8*4*w5HS~4
zg45~=yc6FP?vp()dl0^H%yl`P!vT#-JP6Y(n_csH#%z{Ky-Hi*G<X`AHQ1stRW*l}
zsO;*RR6Cu&DwE}zhvN}m4K9%yk3}PwMSSX$<VFQIxxEI%*`fY2japt-Th<@gqc?gz
zni{9PN?Vf;I!&nn^F3t@84MxgQ~93;k|t-+ZmbPtEDf4kkUM$}s*PaA@mMN4uNXcn
z-FU2FM;eq*Z@ev(a#S+mSFAB>i)d^032*QC()L(R{!)w`aKzJwvdYSAKbP1mC&yR2
zTU!$SR7V|qj#VRG9JhV{8W;OwY+xWpA76bvF0!s?&voXSIy;+ko$h2Hm`Vi$+@^5K
z&cq%pFT6dla<NXu{fo3-MZ6meRvbmNYz4a_1kp?^jXJ|u?3!&oTD@M|W9v!w_9lC+
z^rY#w_9puJ5@!WF0)dVo{slYEwD+3Zz5Wh!pS?d8>$mrrJN({ubFaOxzP>CpP>*dw
z;emMl0N5169jS+~a`Ss}&2Z7aG;#R}WGn6o<jR7$^kn!&W~IaIn9Owc*7Xec)J?XB
zlARW-J=c)w;t4aoJ2xrn?Ji4wUoP2E=d0^Vcdk%x+9VI#>~?o|D%KeA#)p~*XH=W0
z1&#P~1bbMp_aKdZdFXKnEDU=sk5!MrGmH9++TbxXH>H${%{}IF<C>+J0i(mv7;f(}
zmfv@qLJ`0%>o)hc7M)+?kq1XZOV`vnY!>fWE<7CaYkc~SDGx0kG17$LecOjMAk<9$
z6nu`E_^6OG(zouv|NdK!B<5?~T7}lFnU8<<)(0Pa@IGwQXOrLY^acXGp6}!z!Iu5|
z0M!h;@on@615Rt)=nHm@W->5;`3Zoc5THmPDm_$8v0Kt)W0~2rYPvfZ>*%h&a6|ow
z(P7N_mTstE#{Bz?{pTO5Ru4tG91hpg%B#<H;P5~>P98cG7hDr}+nj;(wt31lOK_sV
zv*p}K*b+^HdOHgLjvYeRfIrZFJ(0r@S1*n$&P(&-y#_fDj4(e1L|2^6dK<b;W>b?p
z&|x+?hGS1o_H|9$PcJ)nYyYNZ<r$|lKfL$${5}CEXKX%U2U|XIN;%tGehOi=qHsI=
zCib7gs=@AAk)MJA!h^|`6G;X_Hw1RUTE~L6DziPCP}|q_y44lEeHMRJWu?R5turXq
zR~>Ma_ie28R?H7Fl}FJze|n|LuPl!bM|uPKkLPxf*Pt5|{0b;ojX9M?1H5Xv(WDE?
zrO5^Lt1(5hD~;KO%0t+7$9v3=Ooh~Py$RvWShBXJ*WvH4eXuswvSGT)RjIC08+Db=
zYEz)fVYK!ITkQ_#Sf<ihsrA%UkM(wR^a@+#3qLk0gg(_m{gvUHw|@2^<MvHVwQWzi
zM`v?t7hV+*DXT6eY}_Q2mz~QVxp%2hVL7yj;<5T8QhY|D_`gZ`oK8S6*fzk)pY7-l
zD$0~AJ1f=Yi{?Ou`mu+UW%64gjHP*?s!}<W8h5P|lGIw74Azv@TkF<%Rh4RSLU4~2
z`#$D_P3DHrBSJhuJV%1j)8KYTD5k|30prV{%OcLE+>{Q5bm@>UgwNV>{MR_YEi#P%
z8dvW6@mh2LJL(>F$2$sj%dMNuV;?#ceKrLvql2sYPh5ST4?p~nSvvbz<Btu`F8uBp
zPalma^kBY^P6JDc<|en5NGzgu`1pMqje!pC(P?mO^`4wuv-%umPmk*C)rq$hbISvP
zsX66a>`9mMzOhyQ*_r(R2y>SXwd7y#ACM{NCLrudp><LRC^Q18t40TWP~)-`(o6cE
zf+pZ(t`9;qm-BIz!e@HBqN`G?*k3=~AC3E$g;U|>-e{z=H`<sOiQ5!4rXkILC~7n#
zCU)oW$aM>EuttZ1h4XJQ?9r!hPyTzXG5@{LXRf>MGx(sN5HE<)br<l>aV^SBNCKlN
z#Mu#PaX4dltes1ufG%i$Z(v1yBpOUx6^9N*mM!xr<;GUGqsi__xV<@d+gi5tv<+)=
zlQFw#ZM}D5!lBIfHJCjChv#vdIoKH*Sbh*rVMPho4vct|c$SE5V1rinIL#5s6)~>^
zsTyEvgpM5njKSFHy3sy4W4*)LofC<l$lv@|#(wgeb|r4X?3<~5gI#S`^x70>W;$G2
zow}yX-P@i2ANH!DwpU&Ag{4t{{`Ce_PA66l;ZDfklg~|xps|Qqi92O!*a<%d+DXe4
z9rKx8>w_`K0AsUnZd2W4bFi!SynF0JbvrjHrw?to_N!H!H?jsN802l2uiiiGG`tvE
zaQhUSBwqarcy&v0MF|82P6ZAjeu-8}X&0b`2VldqSVLlp#L~E?W?gqqUvGM&_X%gX
zxuGtLupWJx?v+l{`Cl|9O@GP1uQT_yHw@xH&B{t|Pu!a`ITXf#)}gSrha*jHhuu*(
z-WG1NcyvL%$JFeLx7J%-&IEY4$l?AV^6(R}ay$!X+D@QkgFiNCa2Ok1z9y@~KG^W`
zit&kQU}X6Xgpn<qSlk7SEIg?Q`z@iQaua)G-yKVY!K%;GD8Q!x9?m7B4s_6nJ>n#h
zv4IG?yTL{|IZ(jG;nCR*`A>VFD_=J;%Feve9aZ;q3G2td*Z2~%ga${Pid;j`Q{5Es
zPOVvz{}t{@p!mBVB2M%^E*~`TZD;9|HbDEKj|R7Wk_rG*92+o%OV?HHz`yuI)!)EB
z|73rZDZ>hRde!bq=1w?rQw@&X8&9uxY?xZ@T%Z5Q6z`8$m}{$a*4nn&W-Drg)MHPf
zHuzl9Sv9DdK4KiFoB=iB^VT)^?@4y^<MjRhuzz@J*gx`CAn@WyfPM~tN?KqMP8s)R
z6Gx)p5pv+;ttWfg^y9x|H?u!E6rOyoFz<m$F7TOk9j_U_t3`ZNTuJwdngy0fx!Fo=
z43nsHL*se#iPv8b%&c8I6L`#_>~$zvzi+H#-I`wSW2|Lle7pl4Dy+e7+5d!$#R`ua
zyQc1AyMp=aD}^sFtbnJn_!geWcggd3{4=dJh<Et$mB1?O#(kHa2KxbPVeFgSSBV^o
zjes9iyeFp1(Fgc2hf(r%q=yt&6@Cj(E|px#b6g8gc`?Vo9hU>UGXVQ)_FxgV@C%;f
z8gxa3ahU|;z7mXgj)OtFyw!?pnCMGwKs)}xb8w&Wq8?nso-V;ajI?7~D#AFh2*!se
zg>gWFL3k2#9Bt{TydA|Hbe|C8Ft}fux8po1$1A0FynS3ddU=lP*li_z{GR9Fo@@?7
ztmQiFB`xCgXUD-1`*Kj~3ysUW$K?=fxn9aaefbm5aeQB{U({PM$MNkb=5PYWPdSW(
zh2Kdd*TnmBJ-ffu(tkf`I}RP~i~M7r<6TBAJW5Gd!H>sjP<XtA7jcZQEYXRG7e2;(
zZtnyq3DPPC7YN`YU`&R0o_Z?s)KfcO4ZezhC@S+}J@FZ~mSzi1yBNF(l?mmL-ehD~
z;8ac(hY;fX2KlDJ3F}>VS?{`={@#6s{ecJUU-}aLeGm}5veQv#0KfPR?gUQ_1G%_u
zezDsS^}JSVG}dYi2AHe-o9g|ZQKvB)H98~PR{VvT^#V3UnPHt{N4)Ga%!?GS?1yOe
z3s|lFSau3lYd@CV%KLl>^{dFs5(s1i2DRE?GO=e6_VWuLTz1(9hwhEt8(p1Nq*ouC
zHwULsHWbP#4PMH|zHms)6}>lB<ZdF=s>N^-Db#QjHq~*<o$))PvnfSt_JsgMw8$4r
zC6Cs^2+v|oyqH)fdS^WU%Hnb~cJSIR9zD`+#1Z@j`@-q32EPCOz^kWI8LW;mFS`wU
z0?~IJG&Rw~({ng}b96kTNRQ*~Mfv^TzwEN_^S)04PkrRifCk6+Rd`B!Dm?0*rDt4z
z%I}zbX@vjCFD#wBBzS-D68?wk3d1Y(B)f{_27_Orv@GMq1~YCyuwh4{E^IWyooH-z
z6o1<dt*qSUx7mH#I&7E3w>})9IUJVV3wVDLf=Yo#6Mx0g1O<aKmB2b=EU<lJ{s8*|
zX!nnxu!!sd;YaKb@D@aAr&xfj$!au(o5rLkLJ;#UFtqlFxDy~Q(W$R2`d4A{2$`<A
zm_n24jRm@K)G$)lmDDOs%|o%lRpG(>Y{R%CFdU0^bh7(%?cJ@(sYr6_fx$-TdBNUD
zyf@&_m|QKv)q@RVxPd;JY|W-p?Mnue+2QV%&NhrcP8;GB$Q_V&<k6sg#qe5)4N;kn
zw$#)J8<;mwQl_})b~4cB&n?T8hbIH=<NizPmnKsi24X8bEHYT{hUsY=jW(~!bnbpU
z-XHARJsc0Drv6mFqP2TdbHrC}DBpZe+HP?;yd78U-1Vh(G-@q{jqs-FX<rSuJ*hRc
zI~Mbk>(xd7E5G1fwb@yzR%y#)mTFD4Hc?+?Qm9p$im16tQ>AIRUFB!;b<46>9Jnmq
zv9U!i_v7;UW!cLQ?9X&;YDQhj!p(vMcU^#fm2&7Xiw-R_+u{D2(=S%4<qEk%@l5b1
z+u7IMu5|v2Dr*(~$?HGeM6J~oK8ILq{CpXFo1{y43_3aeVeG%zm-5&D@h|N2=Xux~
zw%QX?<R8sHEcz|x3!f9>C<jj;Zad)7dgj?1iTr`{gg-AV5nf;5z9u_H<`nqGmVkQT
z(dM2NkO%h>Lvs#cm=J`B&_d*c3*QM@WEmgsULJP38rC)~t9D>P7$^F2o@7^QWn)Xo
z9ntD_ErKKer~Z4V+LL1oSFN6@s5Df#s@=6LIWij>9_sq+g_-cOKAXm_^MgJhArW2V
zMp%?7(y?hMh-5JU1`oV{a5{(!Y&d?(JSm*6#hyEwY|yW9s`lXUB^z?N4VMg$d}c##
z;dzBp9@*X1cTQa<c|-m+_6=2e-Oi4#U3GG0WoGVzfq@I=GW1=h_y)Z6@y7Oa8xCry
zzEN2oOJ(a7m8!>8z`CRGUqYYAL6t1aOyr0$vAX<+tjhX6dp~b^znYc7Mz#Gk_){9C
zXyF3^M_GyMD50-H-BO1%%=?a=E#bM$?APyGSylc+>-%}qID>#cF2N7cp}|m&8CaL~
z*Lf@Z^{<h$njqWqpD2!p&JdhGt;w0N`knu?{hbhHGV@lU?EBXIhk#yRcu~Gq_=sc~
zjeWg5(I!uP`Uc)u3XjNl%ggAEa*4oR%1^T+?8qej$xkEITX;ggO)dvV44r)6DJkB>
z>1eN<Q-C!}VvXp769{{0`ORnd^__k5^5XZ<6{mJ~o_fX5;N?3yJ9k_@IJ9qKV&Bm4
z#S;@3k2dYNeaoiXb~ZQfylvB#+jletQX8(HUw3drDz)L@y7}ujq_+0$o1NL$-@k8W
zc3&Upq}VSd;n}1?tTlDOqw&-?37^ClT*CJkvTbr9zEIZW5`I8<YXlyq(OYm%%$+nd
zG_q?I?AkU#-t+0R0!gN$Im(K80v_xyp==8d;lcb7DYIYr5kagk{6M~2_$`O10YEGX
z6Rfn{nct(x@8NAM<{*eXPmW31{K6XxiDKSXHqEBRRz89V!5<M!0Q6xkdzu47z>`m(
zmG?;PEam}JF_+TAiWz^oFv|cz%<f-^6I2UYx>jr{(*P*L69@O(Pk+I?hqfNgLr{4x
zH7jQHFC-8?t(dzte<Xi|Fg8;77|FMxwa1LXNLE-@zwnCSUHDnKa8Y#OK-MGlOZnj<
zsf7%uT}v1<uoRODOCuOLa1=0GGUIsoRu6#KtQniTF2X^LT^MMx4MlvxUW3AW{#afh
z$nF-4JJhgnJ>Vy{et3y`{JM5?>*spU`r~$V0e7nYPFR7RuUMZm6(J)$p$S`xu5*mU
zypds}!aB9>yiWIuFI*7NFT1hJ+;L!F)e~R2wcS1WqYp13%(-B-yd*qHYo-uRMX8`k
z;~0hLdIwh|>r(@ccyTxv=!@&UYLBwYX6df0F0+*>`nns23;~Zl=~63&K()cBO{~rZ
zI*sL)ur0Y#m!C*>dw|K-!pHDp&}l|U2a_Di3il-OB`MR-@4r8J|NS;a-`H56qHlDx
zoT!DyAb9mXcU^n!UH4E+kGUJhRJ<GJ*RKl$pMy4mw^(bzi9IFkQbf)1N+-<*aih$Y
z(v319EGz7=l}AnNSDzaYUKdNzeKUfJO5xcf_+-}$KS%isWXt6g`ACD5OL)o_*;1Zz
zi_pQkg#SXGRt7yAdEP|I#XO}$O1VU6V>j_q-KCUvDP@LI&>yRyk@e#~Q*b9*d2*|w
zDnaw&i-4yR=CNveDQf7KVUUp0D0Ikvh8k4Lj??g5_yo^)^5<51mf7<ECF?Idf%j)7
z==sDOT&@*XvMYr<0kasn;-E0kE*EQ&+IS95r`?J5Dz$Q0N_j}|vmL@Ok+NJ$c~)qK
z7WoIHtdLTEB}`+T6noH><5J4E3jsEZF;^>h(p@@e&r5|YtYQUHc2OR93~)|Yu;Rog
zts!~&u8jfNlx(eRyX-94KG{{!oEF&-p+&zJr7vE3T5M+g1L=Py`=W{#{XD%=tF5fo
zX`>ZdZAA?>Pl(TP{-xDcOW$*1vQB)~>BMKPTYRnQs?_N!tF;Q+Y*DFe6`wX}Yc%+;
zM!Qo}tEs8MpEI<z^q)8XL#?K!wzfv2WtV910<Sgs&Gbzl_GIx_ev6pT$M)%J2t<u8
z|6>uVM*>RU^dC+!7On;5WI;Kc>fmrY=)GL%xY+^2n-vZU&&wiml8m6poXK#ReXsER
zZqJ4E?(0H>%z&GO@J^0*mF?-M(D1GDXX)Md0dtQClioSZmwSZ{(`|56v%<du<}MK?
zy))?d+J)y$7lPfe!fyd{LWD{6ReBO>p`q;Aa(Z`;&?dWzW)SMb+N~N(*H@igcee3N
z#hJpgg9i;4Urf2q7haHEAs^(quqTwV?a}X!?bh#B2ruY%@78UkTysLN>|UIxv!Gu^
z%SBYVxPDhHjM>9(m%(Ncyn-g^wujtqgOxu7gkDF`(HIik%>n#q3J9*203farUX$G?
z?;%^L1d$X2XVDfKcZ31N=#+beIHDBOZwF3x*9)(iUFL{S-q4BfI-fk=4QQ8PzF&x$
zNVtW?e&NT$Je^f7>=)jbT_mq4reE}l@V*~BshA&J3ql9aQa(Hn5N9czCbY<I!aUZ<
zWE$u!p&V}(BvG}H?sO?U3R}|ePulRq)giPr^m&x_oZp|bD?NQMSy<t8;Qj{muvi|#
zfZH(XY9ZHY6T(a%4~OG=78YzBLR-AgZO?kWS-ZQBWO3m<VES_y6YzPlc2S*0<*{Z|
zu1qBoDJ80I7G4fu!%VQHC8%_8tcoQEN+l6uh6V`LrkgD|YZytV>sXy&MM*@02)4Ba
zovk6%__i=D3xWfIv!KS3=Rxu?2-8KU0=4cf;fJ!Y+;c)+v$<AdG6_FCnpY@XDy)=U
z44%o?xfgSc^rBi;QJ6Y>?v}m<M6Z*6O5fO5bpiPN<#O@90oh-Jw2>|pK+(r}alQV;
zdj`<{SA|a50B#toq<Ki9nG_0`E0!{we}z0X)GBn^%PhvY+{*%C9IB=g&&mem>rP%m
zks53jp0$-(4E1t1^94hQgHgCc@XI!U>+^mu#^~Z*N_Dwh9er%Upba0vpRJ2#vr%~Y
zgD!V4=ynmL2XQieR=)LbLkgtRFsd_tlgDE+d%eQ98iL_?JREGWI<c<nayYPCv+$VE
zj6JAyUY0llxCPFbVxQ+qUl<>ux#~gP-S|KUD|`iK>%K1Ea%|3K>#R3{kMLsEjfQLR
zAzC;`XfN>?KueRuopTuD*+Tn4{ocL$gUEHh@Dg~;aIs#>Wh4fJkMPo&+Kn5vXQI{#
zv~T?Q_D#?GR-T5B(0sS<!76;HeZy$q^5fe#v)(&<4nD$**BEZB!iU;-8erZ8RUGqB
z9wLTC%eCC|qB;u`s56bFqta{^npK{@c)ZV}ay0t=w1r^tOgvhi8<SgU{>6^YN8x3q
zvpEoGcG7f2$$t?-vO3g^9s6=GCKMUL1~Pm=X+p#utZ`UiVVZP8sNLPFGuMVqtVW~L
zqU6&;H*R73ccL~OH<wV9Y+8%IbtolY;kOCh<$+Krz&!G}(Sm(eg*V}^j7oJ8MXP+$
z>_T0(8i!e~tT5@TB5omQsf`#>k6zR6Y9qcU%?0qiWt{JQ6X!O@3op<}nWW{y=&oJf
zk48PCUnhJ#hWGvAdx}9tp3!mdu3aB}9U18TH^KMDF*>kKu#$@$(OriSa?0~Ly!(Vb
z2|e)K6K0X1O2n&!OUg&tlg_dRkJX{qJB^t(lz2Xm9oU6uXy>|4MO?{*^W{KAE|qC(
z%Y*}gFjhfR^|7>I4!T?+MlE=t&?H+`Y9Vjqsv+;tE1pwN<r4D&^k7xtX6m7ux6o(M
z41I0rqf<Q|ID)A>y?=qY8-FkLQZob~LxcyZrw<fnkncQ_EQE<wU;C2BLl}L#&<<<;
zS^>J8O!n!2Am!3Rm+a!gRY+Nil;0rbj(i@s7(9cN<w$uOwH_%1WPPX=JtZefX|YN*
zuI^4m{8i2Ik$0R*i_v6|JIXxnP^4G}IwGV*sSNE$z@Ss9KqTUGx<gbB$3;!5ncgy-
z#g0%Pd2Rovl1~@1vQcQEWG`_VqYz)*%R}^C=}kmzb)KM8XVBMH`oA9u2YZa>F1OWM
zZ7oOFSm7Imv~1#Ulut$Nb>6UBXF=@Bzz-skV6V~AN#$+j)l~ks(9#Xi(n-!kSuv=b
zs{DVwfZczEs}a}q?82ADaRpsweTK7t<2v%Ig9oum4LCoi;FVofco{gK0nUGgl+y|p
z*-eG7A!QgT|Hf0yNO=?~YowI9f=_mD;eMp_BIP~gxva2Wb|LfyvMgi^h#gy)m3;@h
z-1<m2%AHg<nsP?HUZbcE`Q6SsuMZE*E7bbGgPo7rkiykOs!=YWa5e>~m#=~DJ4Cvd
zXN^P+IMhVrnu_@Sk!)*gL1tkgmn&!%(y{s!@4Xqlf3VnlI>mLi>xk=vgFAQPn1TT8
z=<)uD$kB;jDWLD!zxn==Bfq=l7WXPZ*i>-HZYz8R>%lU0koc6i`PZmc)23;D^#S>T
zzsTZYOHeJSL*{Utxt*4bH)C<WH{NCSdaYgK^1j%*+S+xoK0tgz$jC;8S7|0e+CVyh
z?L)mxo71I#LdH~lFr{gfBs~-S2>8acq$T1Rn>g?+aXLK1H7k=tvLt0!2p^*kzH+iy
zFCghA(x}LEPpQ#rYpQj+X-6_1#&<QIh1J>`O0LmH)X$b5Dn8H{{JzjF8^dj;kQ@Xh
zTcmT&$b&X#h_TvoWm!d8dG&KR*j44Ns;OaeY~7Wyd@F7veM$Hp&1Qz#Ovr@a0_e++
z)^7f{OF#QF#1#3(*=PS;Xs~wl_I6lX+u8~RlzN7}B%cLk?ML4Zpm+PBJzXSkJX!Au
zpNo69icZ-e)NiY4g{y+c0fzRo64x#9<WscU%&!z52yYico4QQ?=syB^qXc=}IPYRb
z$p50N)#!AZTHOZCsg@Ut4+Q!D(B@TZT`ST>$Vc0}(Y)=v|DSDMwbeC0P=tK6%^NMJ
zp1HWqe}{^4i*(f@70tE9qx~mR(KpMV^&X`nIrNW}vYT+Ds{!7j`l6*Hu2zsmKumM-
zO5b9wc-R(nI1Q09yWkHNf3m<U(rDaM?A5cihT62;k(R!;6){%)rZM>}r=!Y~jdlpU
zU~vnIbd>(YTdbipA~$(FH<iE^Y3SU41Zt6nBA-}`P)nn6iN|wEX)ucPlLaT!(fMW4
zQ%PT3+{VRN(yiC8Rjk#o-*G%%UY^rUOz7rz6&qaqK1%%$|D$#2x9PSjw(7Q>Bh~SQ
z)CYO{yncLKKfkTm{Ngup-2Kpue+X`%27ag)+_EN~bgFiHaJzP!;tb=QQ)oBN%^An4
z^n1)y=33a|-<O|tVwv?iT+gAKS8O-T+hCPXPwV>1jT^wKg@Ob1Ty%UrSUD=ybJ{u1
zoyB@~*mhBwLDaM7_<E>Jv7Rkcwy|P8>rGpV{dp3;aW(DcKiZ!~_EWKA+sh30L3ykr
zE!C>Clp(T<+`&A4FZ`Iimruw)3rH{_j)f#`(NPuKv8~+T4EU9?j+E3Itxc)dn6x-Y
z?D7E^pk0jqUn<uC8k{9XXqd6YZpDcv8P6(Jv4Mlm`mnLKTJ8|69#?(HsHsBZY-sJ8
zHOA3agTZK$+Y$zY$%rr1a2Bw2jr=y$fC`V+Ag$k$QNfLS@(mQ*J!lCy99q3r?qpR?
zo7I2x0sUCMT-V!!>1u}$*KZMjXak5BCwd)VS!)P0$NL?~^-8`6x5Ae42jF{f!}ri_
zo_0z8hbF(jiTfWm>UTpG5hUB?Hb_Pob;tP;2pHKeZe=Q&Oeq1XIcb`AN&bY^R_;%j
z({BI2wJNm6HGM*>c35`*A6gYU#WjCit2SD;mvGe#Tw$HyL|iSR%M*|`QfBc?DH46n
z$G35-O=SY5dYCWZ50o(YWnd7rbpi$#tLew#vi&ICiXIvXqcb*@4&*C1nal5WqXzhk
zWmkcE`7IB})o^kmZfJGLUCK-<l~uUpjuwMN%TB@Sm1x-sT5j<qOiFt)X;+#Oo-2<d
zY1Dg`@LkaK?Wh+9!3p)AjI?7dPSl%9rjkmR+}UFJ>lFT7SHi4xHZ(Yu=7j6glMp)U
zzYMeXLb~aEF%Lk8$rU557;n>V4Q|z*q7d3!6b@yqzP?`JP_zi``lU<to$Wb?%Ix!*
zRgN5>T__}Eo8blJcazH(+sveMrd*kxdSTRQiYF4?LeCO}VDZCtt~XlMfoIFViSoNq
ze#OblW1h4X%b(hoh#p%$26>P2dxezjv$zqy5`Oq&ZT6Foq0ydhk0}Oi#?Z+}FSYn`
z?(<I^y$jIZ(@X8;_97t;1_B9~ZDl6ss8HXNKFgIz2t8J{)mRUj_9OC)4O%YROXcVP
ze)%hSe~&4DY=8gJyU_bj+ReRXM%$nw)}9hxJhqF6EJ|IakJ*{cWrGT!l4T1M^2day
zv6HwRyGU2yZc>OOlc<%!jwz{UxJRP6XNtB$ih*Ki$r;8V7T?JChTLSY8g<A@B7z<Q
z$Vx^QJ!|-m1#WWr0)YL!fu(yk4G(YHvvgp?iVs$77@QCvCkDGG10Mt?JGuvE2UeL<
zD`y9~Ln+fL_Osc+S#vVfJ%Hz=84vm2eel88R&-6T{KLu>ohvRprMdZ(3-JSw(_Jgt
zPU&oJ?mVT<KeM)Hu-TFG3h|zqwcbW&^I#7WoQ>YK3%_4G<IOpm2Lpcq|AcShBl+{f
zVay!p6-tJ!0L)`x*ybU8F@IzJV-{pPSb6>ko30f0G%Q@(fWPoa%VqjPLH;@HN><{w
z8zYs>GF)GZ)o`2uCSyW0&ah?SHw<SR7oHI;3-2$mRkl0su-$$;|Hs&{f^{yO<rn($
zzx=lS-g_MP-|x8RUi*D$m8tNCd<pzMOGwt3u)UmiH282mss^`-`<N;Hhaalgxe9i!
z>WBGXeDYNx|E41UrtsASJGX}I%pa=BU+JOOf&4oPtm|!L_aXMm+uVx;J4+qd=U{Ob
rcjW)b?sMVP%5PjS1xXrXt?eDe;lMB8!_VN;p>*s~d3I5Hh|>QbC>;g_

literal 0
HcmV?d00001

diff --git a/web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nAkA.ttf b/web/css/fonts/sanspro/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nAkA.ttf
new file mode 100644
index 0000000000000000000000000000000000000000..9acf5854fc7167ae61e67098142e83e7bf5e88ee
GIT binary patch
literal 167004
zcmcG%33yaR)<0a!y`4@c1PBlUgb)I<8#>*cjU|w+N!a%t%npH&#3ZajKz0x}L=<I^
zUBz7y5fvFm8B}B(bP!PyQ4!HW2a!Qk^8cNxY6!kMkMB3%OP+I1?RDzZsZ&*_@4Yb2
z7^}w?Fv$k@$;|Sv>%7j(nAMgs>FG0g(6Ia&<JK{@dpTn-P3bdiM0)c2EqfU2xRJ4T
z_YWG@)pOHF#~xygk47uG1=I2>5-axZXKc}XjQO6OR64u3ymhZlj8|P?JaY2nqP)Tu
zHPL@V`52T>qy*QzkZOc~2DF_#t$NlE9j5kVEc_s25ywi)3-W&SJ@+7EL1;guY+Bx|
z3i~j-gt8w2V#@NS6%F~c^bNGPn=vt^qP(iw*L2}N#s()d=3U1yHhUMli-od67DTZ+
z|169cDe~BrZy9sme<krsqO<f@WvDjQ5+O^X!q$F&Q~e%4Fe%SaE5{~moK5uO;;u=k
zyT@5-QB*QP1plN+l8c#*$}0u9XZ<wg6Pbs1p(dSDT2crrmx+H<d8$PJ(lXNrfyC6-
zigUFN;*d9tVH{G%I4_7bl&4BNSuu^l3P#ESo@&CJb>fXpSg<heFk#8E*<KU2>Xfk|
zo3SR{!P+sO35OxX*ko3XzY5lkb;Vy5D`1tZ1o3Kw;{YYB6to<vlaN1%`B{H94Dsnm
zDPTni=dm)B8;p24yOE`%d>(S9vXRKGR4tUFL=5ww9XI++VBOJcIeI7nE@Ly07q9Z-
zK;0|_`P0zGRMe+Z#h|kQx`hOkOhg+AD3^F$n`tZ)y$?d|KgM5oMl}YZP8J)A_9tOX
z#Czp+^<%D%Fvg5Arp_22Rb06h-!T|H@kp^`gwi1Qa+a?+AI4@w64eM#1C3!h7&nc+
z5|SpIr}7Gs)8SV$GLz9?97+UQi&HhHVKzFlE~qgRb5xC5F=`Z5=%W%cEkgMi%oa(w
z8liz`VH)ug6IpkBG0o66)DAEOz_5}8t8aI=a~Zd5?1jKf?WMrW?d8BL?Nz{c*mnTm
zW#0w7+FlL3#$E%w)?N#IzkNUO1NH;J>+SWx8|)3h8}04rM}Rkh+2gDqG>NkT_!Ho6
zAi`zfmO~;HNST8_!EV7HXDji?*=_g}?0NPA!mr?uL)-Tv<sbOt>@@y3`v!lU{S$wJ
zb1oR?&3JR*7Q6*gqIeX-?Rk5Id+?qJr(#tJp2f3(vw1e~C|Ekd$MUhr&Et6pPvVmh
zUc#3F-_CCbzJuR^^oOuw1>epwD*gfoSNs*e7x-2FD$@VX-$VGQh-F-~5p9?d?F9N2
z9YklObP-*cCEUUd>=7PdpYQ>96WxG&h#tVbL@(eBkpY}7z?<kN`T-9R1JJ?{F$8#+
z7zR8-i~t@d#sN<d6M%CC=1&xgLf}$SidyBO9JorN1vx;X1vy9#0v;pBFiVb;<AC#I
z9&n*71g?~o$ek{y1J9JRfal0Lz;oqX;01C4@DjNMc)45we7l5X<el<v;I$HZAn%vZ
z1Gz<R1AbCI1-whb+REK>H}FgHCE&dh5|e+He+K@Gd=2=3JOF%99t1ul4*~yO{vG%|
ziCLB($Pa)&lph11lBa;blivYfmOsHx23gnxte35qf&XItg;{ntyBjpGyS<1>rN>g~
zu~d32l^#o_$5QFBRC+9x9!sUiQt7c&dMuS5OQpx!mUqGW8^ji|XQ6>-+0Xn&p3VpI
zQofk4=CAQDL_^_)-0u-b#AlMrmU5I_EH^<4-&ifJ9P1YAN$ZH6Vvn;Y*;V#!_M`TP
z_Aic(j`5B=9ZxyF3<?d33-Sle3wku@SkN~?mz<Wffiue4!Rd4McJ_CUb{0A-oO7Ma
zook#MoliSob{=%T=RE2BF1SnZl;9b`e+qsy`1#=PgKJ$OuBNUwuCA``u0F0|uA5v_
zT{B(tUAMXJb8T@w<$B5WSJ%6)Ph4NS{v9Gi>W8!lX&>SZ$q1Pq@^Hv=AxA?_g`5ky
z9O?)S4~-7(6q*>C9(sG|y3lQ*&xF1gdNTBz&`b5KdJXDD)$35tSFd-y{`IQr&98S`
zz5D8IsrOX9m+Jks-idl=>s<^JVc}uXVM$>bVS~cPg-r^p3Y#BxTiAVJTf&|SdnxR%
zVef{0683f2zw68T_3O8&-@d-Ley{rd>W`{lP`|4F{QA4=Uu@8(L4Jd>26GxLZLqq*
zh6bk^oNI8op`&4V!{~;c8YVXMHyqk<V#6s7XEa>c@Q#KLG~C|s(}w?S_+z*o-Y~pn
zc*pSc@PXlD!;8Z!!)wA<hOZ6Z9R6hZp6~<VN5W5ppAEm*NHp>`>eZ-Uqfw0t8kIMC
zq|wes`x+f;bga?mjlOI2b7N=Y#*JedcWIp5IJ5EK#^W1LZd~1XLF308ztcoE@iiIQ
zB)>^nlQ~V6Hd)<dLz5j%b~V}G<ZzSYO-?sC-{eY!E24Qsy9iH2YDC|Nu@O5WE;bcS
z^P846ozwK$rhA*d+4N}BQ%%n`y&UO?Op6>4IVQ3wa#Q3JkuOHR9{Kmkk0ZZ|{Gl0d
zR<BvJW;Zm8Z`QL}PO}lsikdys?C0jr=Go1MH_vTe+I&{?#m#G5gtTbdqD_mgExNbp
z(_&bQc`a77xVOco7EiQzvBm2x{@&u_7GFihM0JTuj>?Q095p^_a#VHHs;K*;_C~!K
zbu{W!)cL3@E!(y9v`lT;x8=x|`7O&@&S|-{<?5CjTJC7MtL6Tdhg%+RdAjBKmRF)(
z(Gk(H(Q(n;qW#fBqbEj}MbC+TF8V?%f2$>}?r!y`R*$xNzSW;&?3jizEn_;yB*dh}
z42T&MQxY>h=GK_oW7frNi+LvIm6$hLhqvz4x?k&2tqWS0x4xzIvewVFezo;mt>16`
zS?h0G{}dY(+bFhGZ0Fdd*o@dgvEyPV#a6{W61y{YU+kgSW3ivNiD@&oO>vvbHZ^Tl
zwprU|bDJmI>}hkL&5<@I+MI23v8`wu*0y=uc5OXvZ)y8v+mmg7zQK7z?;CEt;m_?@
zyUcc#?RK{Np?!z;liHWJf1~|R9dbG>>+o7f*|B}cnH^v3c(&6Gow7U4?zE@V{!WKG
zo$AawhjxzaoYr|l=es*U)cHskyGwSLIb9y_a-_?Z8#8aLxbcY_zl>`gmmXITcTe13
z;!bsSbnV=AM%T?<|Izg)cb2=_{jmFp`)qvc_(Acd@vGzC^>9y$C(pCOv)l8f*Y>va
zPV#Q|KI`4<z3dy}TkLzx_p0xE-%klLAv~dTf;XXiLPo;$gn0=|5;i3~n($1*n+Zn}
zK2P{2Q6#z&!xQ@?4oa*}d^B-q;=aT~iN_L8CVrjx@5I`q9!c|)4kmq{oRT~*`T69N
zDUDMSQi@Y<OWB|Dc{g9T+-_^T9qjgF_g38pcVF54;qIUIXy0Rej~zX}?eSC3pq`C-
zw(8lrXHw6Mo`ZUh>p7`sRnMB9D|)W!xxVKkJ$Lrp*Yi-%_j{h|dA8^Io>x*`sS&Bs
zshv_2Q`1uirjAW5POVIxle#o@b?S!H9jUug_op6CJ)U|x^<3)ZUXEVjy`p<{>Xq0l
zwU@uw&|VXJmGru~*SuaUdfnS=Q?Dm_z1ZvZUT^pMpw}0@{?+T3-od>`_TJL_WbZR+
z-P7(!`!wB`{vbBOu#Dyz?J_(WsTqAUMrPz^lx57xSemgqV?)M{j9nS~GY)4Q&+L?$
zn3<kAFmr5Xab{&^P3FqXwV9hUpUm8oc_8yh=84R+nHRG}R#;Z^tae$RtkkT&StGOZ
zv&ypOWG&5FowXrrN7k;a{aJ^zj%S_DI-hmL@A60ZWBqadZhpUisDGk=ihqWGq5ls5
z1ODy)XZ?HqZ~Bk=Px;UJFZXfu3GWl#r&FKAKIwf1_8Hr!xKCxDnm#N0tnIV8&y#)j
z^f}PyNS_mZ&i1*8%{(l-d3L*OPj+f{-|Ugu`PpUJbF!Caug>0(y(4>9_Wta{*~ha_
zXP?i$lH<yW$cfE~%juTm&l#FCF=tB7jGTozcjP>fvpwh8oV_`3<{ZsAm2)oVa$iT^
z@V?P~JM~TMdvo6{ec$VQwqMJBH}s3^*Rx;0e#86a_nX?Uy5GJ1HuQVA-_!kG?6<$)
zTm9ba_i?||{l4vYsXy=U>ffk;RR5IzBl{QjU)Fy||F`>pH=x6S+yRpZtQxRp!1@7i
z5BSHx<^x9$oIP;Kz$XWOF!0lXUk&`%z#j+kLBWF>4oVqRHfYA6I|e;9==DLL4z>n&
z89ZR{yunWmesAzcgFhb<F(h`#&>>@o<PVuLWbKd*Lrx5J4(&2Dd1&U)!9ynvy?f|i
zhJHJY4~ra@KWy``cZU5mJYsmC;e&=(58pog?cwK!U&QeyY(&I}*b$vZB#uZQ(Raki
z5&0vgjCgXysS*Dg896d$WbVlIBlnLyJo3V*7NdraDjrofYQd=GqwX5DY1E^mYDWi+
zZZ*31=#ir<N3R*ZXY>bSg2p6|nJ}hk%(O9&jM+KnvoT+f`F_k#W807II(Ev~)ngwR
zyM64lWA~2z$Jn38S>xiy^&U5J+=JtekGIFijn5uGbNs#I_l*B$LimK{6WUFPo6v1S
z`h<ZKMo!3|P&Q%4goP9CnDG9@w2A8{9-R2eO(8dB-BfbZ`kOw!>0)kX?vmUWa^K9o
zko$9<l^2@VIPb>1guI@4!}2QgYVua*J&^ZO-beWn`GfOw^Gowr<v*7HLjGU!59J@r
z|0@4-fukV2AiAJaL1ICA!JvY11qB7A1<MQ86#S`RcfpZ@Zwh`X3@aQ^xT^4h!iNi=
zFMOl$%OY0PuBfKy!J>zYo-2B_=&hpniyIZUF78^KT0Ee*u=tkZmBs6dA1QueQuw6&
zNsmoBI=S=Yn<wumX;zY5GPq<+Nq))HlIoIqB}+^0EV;jAQ^}5!=Sp5KdA;Ot$@?WI
zOTH>OU-HuwYf8N-5mQ=C=`baJO4gJiQ^rpzno>4p?UYBSyfrmwYMZIUrmmX0b?VvD
zwxwyM6HBX0?=F3ybW7>urO%h{E&XfhJEb3#o+|yi^g`(`(;U<4Pis1@)wE&LZk@Jc
z+J|LfWxlfe%66Ciqg<A^C{HY(RKC1?XZfiLS<$WHri%F$_g1`A@!`$EH@Cbw{pJxj
z=ij{K=6yGxuZ*tDuiR33qAIwmZ`FdTm#UjqkF37G`oQ$i>3yf)F@4{RkQr$+rp{PD
zW8aJqW;$m!o!M$;`<clzGiQ#NSv+&*%;huJ&D=5brJ09jemwKs%-UHEX0@K>nUyhX
z_^hH?b7tK(>!DeX&w72<zh+&YZO?8o+dX^0?2_4wX0Mz5;_Q>Nzn=ZmoW65zo3nS$
zCv$$hCFGX=x7>Tn6Sus6%SX3dn9JujoI8GQ_1q<M*Ux=o?(1{kpZo1RKCk&a&%Ba(
zx6Ru-?~{4w=3TA{u4!1)yrxY}mzso{)S5mu!)qqg6xB?tnO;*<v#jQ>nsqgsYaXlF
zS@TNGf%z-v-#>r*{GIdn&wpqBiTVFpU@hplVBmsr3nnk9STJkBJqw;#aB#sV3x2pY
z<W~2sBW|s{_0C&&-ul6<=N8I^5eqvmOkFr^VcEhJ3m;zi+QLs4ezow&MZt@jF7hrK
zuxP@fX^U=Mbo-*Uiym6^$fEs=K3Vkh;+Bh37x!B{ZgJt_X^Uqpp1*kc;wKg#SbTKx
znI+*%x-9W6>9Hhp$<0gdT=K+{T}wV&+F)tVrBjyPxAenhLCd_$ik98C?3rb6E&F0w
z?eg}^2Q8ns{ITV4FaLH$!xi2Y1uO1Z@y3eUmF-sMtSnu*Y2|Axzq~C9f9r00{<hCo
z1+T)<<hs8OtKg{+`*2@`*GOd7Uc|j7Tl8gJ#6r+6fJnen#CNc4-UDGLbBSuuaF#8d
zpc?@@k)Lbm3{W470YoA%Q}n34D3ejAKOhF}M<XwiwG)}F8$X6{CTlCgSPY-cB5<RN
z7Jj7TuFqp@4~k@jJF#xEkaeSU-07%%H>$%oBkwg9&hKJjBAq3Q7#1p{(PtFm(JYi7
zXC2gdXiWb{AV=1o4S=XY-z2+${78m%f#g{i)}uVh_kRbC|6}>UT+w{}C%|0Nd@4A?
zB6yG5&uMN!&jF4AP9lz*JnOB~SSrHlfKD19(|{h3E*O0vo%j`4D&D;I6zNI;l+KXe
z{2q`#{rAvTR{Vi>NN-7Je-E@SlRp1Xc!%{@dQQ6jTR{5%-@s1P|1B_W(z>b(YJJff
z`#qqw_iG?Mq_OW{Zm}J77J%00{|ai)|8L66aMmdR!e4vItZ8Kr$R^YU@Ya^r`*i?&
zK{n%$L+zRWRQ9UvA^Y=tK=$W4sJ+BvYWKoc!CuuK1{^Z<qNXfP*|8X`83nbcR9R!!
z$hHN5Y#bj7I0NVe+eh(EXulI{z^Bxnk+6ROxSoe!^MrDhtgo_@WGnv=VD5gWocx{i
z>&lZICtJLkH8zyOaT;pRD;rIA`Zqw_fqJmtzYVAxu<c~u{||xojk-Yl$A1FaTYe29
zQSWJL|DrigXCAcSgWd{2H&KkSo`P;)s=bW3*5@!oBQbAl5T^J!>}^L`7ydcsFBRqI
z)?T<;J``!#=g>#uRXrGpcIQIA8(E^#n+IUS57u7bCu%QKTr5WZ?rZuZp-WhE$5nmW
zUyotm9n2c2IX#K?e+Cbi(C=oruCGBiz7l=LqAozqCB{g+sW}>tJ$Ew;7rm9vUE7Ok
zA3j}sQSHU>zk@ocFMbHReF*d@_L!rfXIT`x1Ur-rd;K(vknaGFgRl2kgcSvfeL}4v
z8Yjkg^_)Wc4atr6P_k>Zr(xf~9;NprI(r1pD1E^{?I|0OM>f9`>XFTctwb3&olm3%
z`X0(Gh7H|~^hEG}5P<zq#v<*EwyiR~_8YVjLvt!R)c#CuamWty+YVmlILMNC=mwpL
z!yJZ+i3ms6{){;dRdT)q^6m|OvPmCUbDUX}%rUnP@Y0Uv05Xmd<53T7QD4+PwN34U
zpTnvhsz*TOd(<9K;m2W5?}yGTu02cRkh!&&02kzN(BVkm2U|!GI1`;j`IAWBjq)_+
zH7K_R<(Gpl2b~By5i}8J9mvB9ue}7gU^ze?NM8&41mNFcPQQab9IQP{G80?T?pCyW
zzu~6?`UHSa$P=D&;-@$2d(bXqE3crvFvQOz{XA%6)cqN727E#8@-?LG1|*{$v%kq|
zl%=utM;n+Es{`8T0N$cNqmaHByb;VreT-8cLLSBkxL{#?fD7^h@(E6`Y-=^rR@Yvz
zu_pm8*xf+8q3oNrXB0SD7wZvS-yV;=@hCGGbTG>7Mj3$83(}4M1t{IY{Qe$QIz@W*
z2LQ4q9q9l$?=`xz58(j3i7=h<2u=Y=w+{gh7&xx<>Oa|i(p!Rn?)`tI&{<_`{s{eF
z$WqDu56I~{S^g0o>XxB(4H@wZ0N7U1jyZU5$h|k~0T>FP-=B`NRaggZHV|-><^pt=
zfu})N14!Q4bzmsMGYkv|rMd+9Y*+0i_H6A1w0V|K##)<<wMG<clYLWrhCr=pvTbw+
zA=|ivImtH4xwzXULnj|c8bJ+UeeHQ=8;#ApY8UCwLUyqmem#f2t9#ocD8CSU2<)(Y
z7U2`vFQ<S~Uwv6PepjONv+7IP;{B*k{p+@3F!pTd*GW(p-5cZvtbaOd9z{9gg?K`L
ziic{Xk)0k4*-;x^(AP%8Kk<4Q`7eV~+kta#CE8sB`Qm;>eW~%nzR}%G@k3`@>Vw)P
zpuPy`jGGL={;TG3JjQ@?rHo`2Y;~l--m1W-s0IFXoYn`O1?lWV=T)-d*z07Jvd3W}
zA9+63MPh%IqY<8i{GUO?RQbj-0^u&YFLf@3y`lb9TXasM`!Ag-dqA(S&*E%iNt`p)
zSy}Uf{RDeSU!>)uZQ`dB_F8J=H0C4I@SltPjmR&9UV=|SX9t2*?AOB~2aG|DmCgx}
z1)a$iKXeYEu?Oq`^+kYvPJWJi^|RQMqgX5;9S{X*Y=F|+0lEM>0b<aPkMBU)NQ9|e
zZ<QYbnvA}>h&Y^+dSkqL?F80P9PF_l=kmb{PT&lE0yeET&bFDXFKD6(Cz`lU?}B!^
zAnyX`1yGC;Hnj_6*Tw#bb#dOW_)>Az-(<9T0dfO?PlmoS0Y1QRL!%WPh%;&g(gw0v
zMUUa0&=_(cAUQn1+JV2}VgVa07vOH=0(F7s^Jx28Te{6dXy?#%eW-Nt9e4xqk0JY)
z@w@cPn4^~==QB79t%v@iAEg&_abKScJ=Zi66lX*hpdN(V0%A=XrAP8e+}|Tr+W&oB
z(-)pH>HvsF|9`B{U)L*T&G{_UCAt*y?Sb%8jAbH=U>7hS6}WFK!!tKHC$R&yAMphU
zzX{#SMp-IPb%{bBc^t}zF&AG98B}21HN%;+lsS1Bpf}ntX00Hf#sutC?J{1D^ofYi
zQM%etXkCv3bplA&djQ%1d;m&k8gMR*V!chA)(4fPGMOfg)&K!xg|)*2Ad7L%y@+}C
zu?})Ppc`u}hpKSoRXQGa@DA9fy6J&1<z=&I%Cpw1dbAFye}b-t?x>R%$O}*!1BK}<
zN)QVk+G0(3`FhA;H1seQ>-;^|pP$1SH3nmzjIm8d9@Y?1jNwK=GeEQnQ~bAp$~2Rm
zSYHCM2DaM`TkBRfU?|qJ+CMQbL*bK*1W>*oa11b#fNjLO>dhSNJC@A8tKCj<q|<&$
z`89wkfK`B%fIWbXfTv;iVi>E%Q#rMnfH{DDfX4y*0jYq2fF1x3pcs%}hYm%U@<#%w
z{${{N0M+Xa*kGU<bUC0BPzngN>tO84WyGl+YGW7Re!y!0s=L+1iCzS(2i)~5pgyU+
zKp)f(0kyLR@G_tVKxL>O0vZpEr2$|sfbt3OtYGcEfWUZ(k3;~<TmdDh?fWbEtu!h_
za+-)b#{uWB#RKVA#~c`YfT9l7tE~WZ1Gr6`s0rg7at1d140P-a)<q0!02mG(#To)M
z2GGA%fLSWU#B%8CYS;;mxQh>!k25RN-+wsw6wIzH<!n-A(NuP(G_SghHD`NRP}=b9
z7`8oaY*q|goiTKH467NKHZq1y88~b}3>!JD->?{#K743DXg#>9#nX@>tSM`Qr^LG9
zDKHudrMb{wEJ~!{nYSS(EtoZ7t?}$yGM<JTY|@<I82b@RVi|bCMb`~tjaVzznI+=+
zH_|X_&%wf3H0y-txzg|)mrk=;L)H?{rukTJc<gnW#Tu|E)`59hFFf~UkpxtI$?CHf
ztUdFvRMr<Q@nJ*LW5A`(#nX)#dpkT&*Aq|7=`@aKS(~vN@RS|SP*+=m*0NBn!?t+(
zuMZnmP%y1RWdHZLu&jKVNdNC~ab;eCNdE6}Y00EK;ragomlu?ZE_nL3RJ2t%TH#2A
z8z}6ogLMj1DH=P=rcbNnm;ZZQfhPEc{~lxhIrNioePF?y(0@&#O)5@L(Q>2{4pnLO
zpkEZLr!cKi(#M9-X-aJXOwSYxq*{2+*MV4MM3+Y4;m<Z)T|d)WY&DjaI4bst$Ho0(
zhR7BDMJPYT5A(r1nLF4wc%IRN`np#E-K=jvW38}OTDMuNtlO<StUIl{th=q%);-o5
z>t1UudcqTnRKvQ@+NwjqPNeo=E$~d@d!nQ0Bs$9n<Y~Ky-OEn5Gi|?}ZTGYL+XL;v
z_E3AcJ<=X+kG03!<@U|?0vpfgVSTk_H{iL(@A&s}o%{k%!=>73c7~m0_px(ObAUa_
z9%2u(N7$q6F?brS%&xHK+l$rOqTYFUq~e0(yw{NlyW(07TBZ^b)*=k2j&|U*D?RJT
zTH{$q39Hf-`5ZJL1r8~?Xp~kxD*}?Cbt~C;tmaTq0SnL=WnsTnji##P3Tw5BbNd;T
z;jkmz%n*Zxqqay|G{*wcT?^@bY<&WLs4Q`=XOqejFEpQ2W25OqjSzg?M|oB@aA3ar
zv#{TsEzA_nSe=rwD0!cCzqQVKz<SVHZ~e*IU_E4Qw6<7VtxeWu^eFXst=3j7b6M$D
z2F4rciDc4`dY7+Wm!^2d3{hTyr!YLz*wgN9PqcH9YN@%LVBd7L1lr>55L3^-np(WU
zXv<%>1m#1Y`>`@S9ovJ`leB^M8?zw(3IBk9&CiQ)Vet=<7lbEH2Z}*>$~0Hx;U-6O
zX0he4?J-KqRG0LilWHg8f5@G7I1YUxNw>rf(i*!`JJ|fLqMj-njvVYKrZ!gbAJc7B
zw+Ctk=9l_u^vARtGeXZfw?MBg@z)$&wL+{l{%~T(UrWVdG&J#TjPh?>vfX%Qw?F%*
zs1iqb7@m$@$IIk{@)f?;$YV5iyLLwFXhfNHM#SX<S4UbmUC7VnY2?t@sSW{NivZ?w
z-S4D-ac%XvaDu>-o<651=wQ&&pt(UFhZ|NP%u1Cz!C@|JlLOD8F2pJHG)^8KSj6Fw
zbT;<y9vGP$Gu9R>E>h-TRd1Jg2HM^x`v7m1eSx<~Kk#OWCy(t-^xUvLU#0=)%5>m~
z62BSPsWJn&`|q~g6S>=E3h*}B9eAt6^VVp&8}Mcc4=Y;k1w3CS0O!g?;E6IBI8`PA
z|9;Ey$lWe)1l}gQ0&kTb;4Lx^cr$(zqL#hD^Cj7=T%6*m<u1UfvNLdZXybKKz%K)T
zNBVa0Ht;s_H{h+}2=Eqh7<jXI2Y8cs3piIC0-pFAEgVGpcJUhUHgN!Wt9S!=i+CM)
zv-m6UCb1tlSNsL|w_3on<7nX};BDd+;H_dG@D|*%sRcamjuu`7&J}xrC&H>7Wc%1|
z_B4A0H;nu7F3fVa0B6ifR*E+#a@pAH=Um=^TH9r7;B69?8ggp~yhX+WZ<cL=H_6_>
zizJ>_hxA$k=gMf{i8#@c^jZOTht5cQk<uEXq&GxKbBL1e5GCy)O8P^TG>9na5K+=1
zqNGPeyJPoV%xZq0f6`gm1RQLa4S~1GM!;L)tD-T418<g%fj7a+CG6W|bKvC?&;Hv>
zCH4yRUk^A}h5=8cC*tiv@GS{DM>Ye_k_~`UWqn|1D{O>Ah9I0PVJ&`Zwqy{}x5;4O
zt?)xq@7UeYy9Ca~FEu1J2XLyif&b9x#7`)>9d8Vg2K)%T6<#^gfJ?xe;aQ~i1@LV!
z95g!YX!cT33p`(Z51cD508gZ+{_R2H7vLOm1vpDw1Wpw{0C)f2>J7X;#ML*z+wkij
zarH0YE#jZRo5i=lo8TFM-iY(S^WhO9PQC)3D82?x6=#9F%bseU$tKWzlT{!}c7Z5a
z2BKseh>~?6O7?*$SqP$JBZ!ifAo^RY`E&HQO`HbaD!u^TEWQNZBu)b7icf(jiqC*k
z#VO$KxK$iu@BGGUTFB<I8LWa$!A))=8;!eEf98j^?*^aAhp4$-ybruhd;q*vd<48j
z90T4gjstI!9e@{!Pk`r(cY$-^p`gA$2F`((nr7xGaH{wRaCaH6MntxaMn=|+DA_ln
zWZ{UCjU!4{jwsnVqGaialC2|3){ba*>};3Wd3Khag3td5yiogbt9+L2V4K+kY&G7n
z`Q34fUEpgw{HZj`7l5~j=YThh=YcngH-Q(4r+_DlXMj`j>nO$nAGVNr;z{6fR7Q@0
zeI-uF!V)DLOO&iEQL?i{$<h)fTT7IzEzyZoUyjlBK~;TFRUcH<2UYb!ReexZA9NxM
z#;%--d#(pJ+jiL3o5MTw7<k<x9tGZvUm|Ec+kq#Fe!zp^kEc0$0ys-N0-P!y2JVg>
z+7jCk`Yj8-3F+I!7T~S;y_wqG3cN}D2{;$td1`$laH@C+xI1ni|3j~EL+`-Im$eQh
zwu^g#w~70Jw~DpEo5lUWo5bC~x$q%Si`l?~#Dl;&Vm)vcd{)%QJ;2@J`xUbAztDg?
z(aLsl8}K%9JMdO<7w{Ib3V1V~kRWdU47^Az1I~qSgLqmAoGMlTcc)xvz(F;Wv_sO2
z(jG~ac1fbNPZFh_k|^z!M02rQ5}io(F_Wr3sHzXD>VvBKpsGHost>B_gZ|cREdqDj
z#1i1GcnX0=vlMufm=ByQ764DgFE%ueTY<a7SM1{AKdz)zY$<l&IjkD@zsdMbY&?8{
zgW=tP?ulE_#&$6ic$=6Fyj9Ev-XdlJZ^kb$)bnoOMWPBg7tgFw|MP%z@Ea7(>I~pi
zF&(%&m4r-RRkEQo1IdU^4MgeOK$K1nL^lh(8wyIN2cmR-AUcuiLpG{DsHzXD>VvBK
zpsGHost>B_gHFU+h``y{jrZ7mcz>-2-doGSjbRAhO&fuC(k6&pQ7CqcKZ`eI2kFDv
z!cym5+$#mVJGhk|;RpE+zKWOO-t6Zccm%t|&cPBNz=>u9TLa6q0QR>Ok{pfGD}K$Q
z)yF@>ZSOBC^eRb2g-8!|X!O-k>eWz-K#1NB)aB^?K@%d~R&`<N1EB#bByl3g?H2bW
z+<ozGpTzw*Rnb)3g^3qh$D?pw*X3w^RNxIkU5;p=T;6r%MyYb6O*x`ePMtdFeMGyA
z)0)n>+HMb3p7u%VpJ<@n_Q<)`e=}9Cg(*jr${Ft9m7p8^KXtC6b#v7iAr;k!qIGj=
zJy+l@Or1;AZ~$$u!zuKh%Arr<RMEPvkY%law@~L2)vYwg*c~`iyWn|=fURl;3muCa
zN_(97y5hEi`zmzd750s~wT{BOn6L0t*R+YdaHl=Vc46J6qXow`8_&Y*?dWs9!WlMM
z<K7CV+GN9fD%|~7HMXc4gfr|-ss`aydoyrPg@5DBVUrfkw@D92*<>5DR7!?T7Nobm
z6gbr;DfYC<LUsqo>IR0JU#PtSDf4Zz-9uD3!@eKkR2#PYS0%}^53y+v$+2la$gs&8
zr`og=(B5Rjzmo&64tWXawk~m6!7rnrbkijNz%c;bG<8a2JmItp>rJPTZ{VuONR<$@
zQzDmqQViZ=y3dp5)4iYCw|PG98v`*<4NQx4lkEbae;if{ekYToJu-nDZq{4@dz8oX
z*}qdJ2W?om%WUUye1<7A9BKN#Og*&1y}u_U(7TRjtMC8tY)ybfZnAUj0=rOoxn|=H
z=lS-nm>rHYT`#;BJ)Dh$y)MQ()$?!*S;6jLcj88M54#usp$Bol+RV1F$Jxv5FZf08
z0M1Zv!9VbKoTlDo@3GI>*X-Zy7j}i$<E?ot@5noGAKoqQ%lq;Ed?X*wC-8~9fEV&&
zK82U_n|URl3%hqWU&Gh(2l#{hPka;K%(w8Zd>enBzs%p@f8#g{DH;0ej8|ZW^Xz;G
zzQ~@2Ij^*5u@HNXJ&%RMqA$X{3e0#S&N>V<6Xza3{O4g<a|0l=LD-EN;S@U*GdTkH
z!w8&ei?H4%!N#`5YMp_3oP`w~k8|%_c<~poCGhVr!@aUQ*8c7A#ovwdVsEw%=f-rl
zo;`#fHsLQD`tcb0d4fHI-xi)@JF)NWW-q~N@5NbjJo_tq1Mi?8!e1f#8+!+R9%Y}Q
z*DvrloqdUu=?vJTi|F|h`<X4~77t}Bco+|7t9fJIl-;M^;(m~~<k4(BkKr+F18>7S
zu!ndT?q%C}0`JD2;Hf;5J%@cHhwZ_;xFgtJKAMlg*AvF^aqJ+^#T(sk@X5S{y~U^U
zGWIsF;1%reyqe#_j_`T>R(6~(!Y{C&@a6nA_9@=<zKeZ<w|VbjXZU@59Xrd{<G03t
z;@$6!>>PiX?_}TcU06F;_-_6ZtHrzD2f5^L!UtRrb3mF&``ig$8v1PL<DuI_H-<hC
zx+e6F(B+{EL+6Ih2rUaO4xJb}GIU_5KQt9@*T#jm3yleF9@;oGEYuk)LVgap81h}n
z*^tjePJ|o_ITCUx<Uq*2kUb$gL!JzIBxG~Q`jE9DcZDnuSr9TSq#|T;NPfuJkl`T%
zL$X8CLwbZHhPXpIg|rQc4v7p24+#x%gfQ1-*9F%(*BRF-*GI0Su6JB-x?Xebb?tUN
z>w4U^-L=tmziYK?m20VMfoqPd+EwP7?8<kIca3xncJ*~-x>8-qE|05=tDP&x)!fzC
z73#8re-6G7{7vxb;1j{ef{z3r3O*3LFL+Pz&fq759|_(Zygqns@EyU+gBJ$Rg|Dgt
z?<N-pPYfO%JT$m}us^tWaJOJza9nVQ;Mm}(;E3P`!LDG-dBu6rdCqy-dBS<jdBl0h
zdBC~PxyQNF`K0p^=Vs@6=UV4o&Xvx^&Kl<|XQi{$S?tVpj&%-q4s>Qa)15t>iB7k(
zle4We+8OB#cZND0L05t<2AvB!9dsh-Xwc!H13`O(b_G2hv?FM1(1xJ<gH{Kvg8ytm
z(43&^pt7LJLHR-BgGL4o4(c0}8I&579OMb=64WjzCMYtfL68$adR=mycbs*6?l|E%
z<~ZUw<T&8i=h)-e>3Gudh-0&3y<@H8F2_p8Vn>Z*mZQ>9>L_;PI>tJNI|e$k9qEo9
zjzovs(a90(h;l?Y8aP}I%f4b?vd`P!*r)B2_Hp|?`>=h`-fzEb@3Nn^ci3C;=J{H@
zt-ciYY6kYy$#y<G{3GG(>x*9iQtf2hV|TIJ*)evc9d3u(4x3q*tqayU>x^~E`p7zJ
zy<@#;y=LvTc3aO{k6YWVjqp^j!7mWYt%cSctJ0cc<y+&ek=9_Vua#+~TFI8j>SDFC
zVyxy?V=K&ZT0;ITFXC<cv+!A-kjLZ^dB}CaQ3EY+4@-kzSCw^XqO3~<Yzuzvhh3S*
z+Q6dB!S8-^VNX+)ElGndS%F{aZi8Lzt1Rm<*b;3mUdBGM7dCY!EW~>#cNDhacG!lm
z*`Ht=uCUFp3XyE5vIK7^OYkNvK__+yHlRCuAFIDV`x5JZB)h2AeJ$4gM0^PX>z>=N
zy~R8TtG|+mV8t)y5m@D`@I8n-V0pV>O>cuY{9&x;46Npt`7o^Jclc=RUF-N1`Gx#~
zPsL~xU~36aQ5YvggmIDsP6hViyheD4!c@j*QyHH<NZ~Yvb;<4sdsMo|rgV>L!Gj%K
z@K-3zU!Y!q(Izn31g6{<R7tn$#f>tOxv|^BlcFe{1SyUaqM|rUf)bBzdxXNn6wXmt
z=Mr~r#k*Va;x;`Hk6jgyUDdd|s&RLvT?gqn=K<6Bx~lf$RBoI~iBo0bRGB!FOQVca
zE#HXNB)id`VpIR13R6ors<Jn#+Bd4QovA&3JB9f&DhW&yS*9eiOi5%JawY48^A^dr
zlMU}Aa2iT$N~dUw4>6QvMR8r4W~-Cpp_A&plado!Q|Tm|PD(bYp~AWr$)=-{N=H?<
zqZ)Td#d$|nzN2cbBXNk5RI7t3*+G@;pi<f^NwkL~{KyAYnB?1D)oyS1Lb#pkr=7}e
zM?LWOh!;K<BNalo-Ij8ZLV7Zm>H=c~z!(8A$!x5t1zr#)zS`KhO9GQtw^8l4vC|Qb
zRU?R1GKf{2#Hx|SD&AwMUz8zv#Hw+$M!IA%dIoq8q)|-I08yF&qBH|UX$FXrRAN+L
zF~m8-B!L*!ON{CTZK@QShZw~P>Z!1<OQUF|_;01^wz3DR6w>%;)lRgk6|HJTs~)43
zUba-VT2gr)rDPRFxxAU;J_=`O(jTJ4JyGJGC~;4eMj3@s=yH0L6xZeSC@D^yMyc^d
zDITK~M^QGdM6{zYjWSBDwJ0SI)Ke+CE{(E<;<trrp@kY{3mZ3Gq?3*`w=)$UsxV2h
zxhm7#9<0JNtIbVG+$CA0N{>{t9jVeIZA$+}g-@$qPOCOg+ten0b5@x8icl#LYTOan
zhv2P6+F)>_X)i-bry~@P5%x$G9<DI%fJoQ5#9f5yCqnTOq56+dy){uIZlZW;qV%tc
zU5@fi)X18smK&?w#ww+;D$`h%X>4+7+>KS6jnJCJZ-jcSfg-1os?kW*Zlr27Qe_*e
zlvh+(*<tpA;_(GF@)s0$FCbU42KWu0WYPe?)KV;6NrfnW+febLhLV&hU6&@AHc&h?
zQ2jPg5<+V#outx0^@tiOtZUI6)K^leuj<xUeAZW^sISV`SFP1o9M)HTg{hKZs$`f-
zsi!1S&qx9kt=3a*)Kj(VsZyb;pHP(>s&YdVFD{H!u$8KeOXa$hR9vdAOO3##w9BP9
za+z8*0+-?|SXrH5RX14WI#o%hs_RtkI8~2M#kEuQ=rkp%ogk!3<}k7^11}WQvL{Ni
zCrYv>O0p+PbsefNhvM0xcyOp*9I6+zsmjm{I20$Sr^31}&48^WW2?Hhs%xu~mI_-Y
zOtmc4qop)bs#;Q&8K`<0sB-%$?ggIXAUi^oxF<^76D976(kKN+q08w}Qe2nQqog=-
zD%ALd;!!A$giWgt?I=v66l#`)k_YOk6kV4_ss7a-hQItb{@J^bD9KX*k3xI+t2^S}
z*crF}8{xese@#5<d2xSC!1*u<UiTDu?z-bQ*Pgg9X5mKK2RFtXoB-)NU<2SipnK^M
zoE+&EJ_2{gQMfsd!TpqO<P&hKd;>SgCs{rhT(Sb318wfWY0k-m;gJpDp}2L2@%p?0
zZ^*-WBX$?=j7@ODYl`z?A^U|l!|kj&&W%xYYUHihTeyE7<T30`bysi0+wvQDJKi4t
zN4mFn#(D5YcpJKMH~bPFc8Pm&mrvk{JPFVCr0{OMJMV!r>LJ`9d$Pmu#$D#UcyFGD
zFF<AROx*hYybr!8mSb-J18^oC#7@D(IfM_z$#OVurp53H;A>;JoxY3P@ZZ@}Y!aUF
z8E5<iH>opgzVa6o;l}+m&aRW_<_h1zRD5G<8vLc@xV@4Wp$ezj>3jyC$v)?^_-sCh
z-vZCVJYK`+^9B4?JOQu>C+YXtKX9|1j4zoj<;!sLUBOrK+i?E99p~RW`Cafs;GPR#
z#J%uF+{f?d>y%GoJ^PyfiM_-((4Ck36YRA1P_VCX58jUR@+0_VtOQ@{o5o7{qkIRR
zDtU}Q&Y$2<@~8OI{2Bf%e~#~jKVuiZlD3<_$oH^~{3V>P@wGJmD!%x3h3|ta>Cb#W
z{|la0c%5^0GwuwP`~a)sf5m<J4cw>S;)nR#xK+a+f-kEb;qUVI_&@kj{ysm(e#G-C
z$N7i+BmOZzfu~na@=xIxoDM(W40wrW^3VAf{51cPpW$Eev$!LC&A;LQ<mdRe@IC*F
zpXcB63;YLuk$uMh%`fpE`DOkS|C!C=zwj%(7E6TV{xTcip_|9%3L&Jhge@E*NH|5X
zaETBRD(b=e@r(!)^+f}G^DA655{*R@5h0q2NYP9*7cE4TXepvaEB1wm5v@fmo{?H1
z+KL<Kn{fCdoO-H@&BqOCf#||+6*r1F(G?!`c=*)4@Tw<>M3E$tMGE}u-Qi*HDN^BO
z?=8|qI(+S!B8z<^{CI-6kH{7|qAz~C`V!Bg;i(<?RL<eaox$+N4~0K|I6U$r#V9da
zj1gnun;#GF{6uk+P|x*<0{H2RM6sA8CW{g=MNAc?Vwxxu<)T8|EGqHjOSPDe=iFwB
zSz@-BBW@9M#XM0X=8Fa5R<Tel5{tzWu~aM*%f$+O3-dOyO585)5O<2Z#NA>wzJs<#
z+$+|K`|z~fI`M#bP^=e!5*x%rVx!n3Hj6D{tJo&Ci-*M{;!*q-_lS55Pu4vlo)k}s
zr^PekS@E3MDV`U*#0&U6;YB=m_mX%Szjiz%_KH`<KK#P4U;IV9CSDf@#9zfh@rHO)
zyd@5ax5Z)cH}MXBJ-iQJVtW_AzCI}afoEgh7std0;<)%wd?Y>=C&VY>r1(^v5}%3B
z#TVkV_)?q^Ux~BgYw?Zvr#L6R72k<}iSy!naY6hbE{cDPOX5dyS^Ok^7QcuqqE<4=
zrI7U1Pg^=<kaWsm>5?HbRMwMWvc7B}8_ICmNH&&DWQ1%gBV{w$T(*!=_%>X$Y$ao4
zYZ)us$hPtZ*-o~{?<E~&C)rtckvGaX*;Tq_y!1#fenm-;i84th%M{s7c9%V5Pnjxv
z$=)(erppYODYK+s_L12#NA{KdWPg0|Zy>(+H&_mlL*+0zT#k?<@in^9`1;>ieEV;_
zoFFI4n`Excllihh7Rn-7EGNmyvP4diQ)Q`~Cd*{GtdKY3xuPmrjqd`^psxbT+4w5p
zE%+wjJXs^><EwzT%7t<fzH+xjE|tsZ%YbsFyiKmc*8%Uqw*l{xcgxlC9=S%|i*E$p
zhc5)K!?TPJ%JuS3a)W$GZp7E|HsgzdTje&nT|O)yk&nt9@-g|ie1g6pD4&+k$Y<qq
zc)IC%d`0gCd`a*{xd&eod|AGNFA2UX_u)%|`{_G^@^ySi@UQra;2ZKy`4+w-__jPO
z|0dtTw*-&Kcj;S#@~C_tUW^aqaePhiBl$6W8lT9M@>6_O@H2QgzL2Nom-3AK3jU6-
z<u~%5@|^q@-j9FD^YVLnLH+<=$iL+!`6GRK5T21=<P}+KF^gNml9pxJmIGfSbXvid
z%L=hV@$_GqRo`l0HMGL5M)0UKu_COdR;1Mo{*@M16ut)-ZMA~8rL`4nwXxb-H^BGO
z-s)g=v^rUx;fcA?inF>}ZYv&s8L#ED60Afk30|5MtDDu`>S6VS&!(5v+e)Kn3*o`Z
zviw#bD;r-K>}&P2`db66fz}{+cZOI)tzp)1YXp2fqpZ=^7;CIG4xXP0)<o+jE7!_{
zAE>}8w2G`^YmznDDuHKcs#R)Dv&yV;tHQb&zM?9t+L~_7ux47btl97$-D1tP=2<n?
zd~1PqEBr}|;BRh(-wT?+v)mM3pl0~>paqM<^Ri2<rPea|oK^&$fyL84_3^A-H2lUE
zJnOOWuhXwMyYP+Ao%qt{YwUG+gI;Bi;wgm&cvj)Lz%#S(zb|9y^yDm_JPU<isW*I0
zx$te@1TX#>{Gz@P9_OWOxqhzpH=oViWNo&#u-mMy_)Te*wGBS8hvBPoSdUnbT05-A
z;3azk-)DTvdfIvhKC|bno!0Z#F6#w&&|b9mSTEr#ldr&^_Nukd`m?nkUz>c*dfhr;
z{na{Xy#Zg_Th<}#ZR@c0H+bIuZXL1SwcfM-0YBXP)-me?>$vqHymB8~C#+Ablh&u!
zDR{RwSf5#+TVGhGtuNuV`^q|NeQkYX{S!XCZ>{gFe_7|P@8Qw=!MbSu+qz`^2>;$s
z*3Z^2))lMPW;VxHC||+z$xGN;Td>8pv@P3)A27&v+QGKV4uMy&o*ib_w;R|E?Qr(8
z-N<eX-}C|Y1Kv}*Xg9GV?56M@HnW@CE$k?}r5$azvSaMlcC6jTZj0XzzGdIB-S!PE
zMm@o~27bGHSQ>sE$zu=0@4p&Po~>uw=r;koo!#E<V0W}T*`48)ywQ%cyV`C$9zII1
z?Xwf?L^}x{%M^T@vpahc&wBQR2eTLba)WmbZfD2Xr#Qc6z^|Ew6Y>Z61?D*WkbTTP
z!FyUK*hxIIoQ->TUz~;e<M*9`@N*5uZ(&36{PJ)-!8{VbyN$+E%wzE!^LTrL`MoC(
z{?Y>c=2K)B<6E1P?GoI3rrM?UH2exw4u9&+_ywiPuC}McyE@aJWzWWMDYw{j?Ro0=
zp#}5{5q?)$Y%hTab{W1Py24(G?{%)SZ--CzPWvwVZhSrT9(#>_FTAw(;k%*h@YT=<
z@y*ab!EgHzz8AX5-fVAy7k8Vz-G1191Yi2xVLxU+Za-l^X+LE@Z9ii_Yd>f2w4b+k
z*)Q0;?HBDm_DlB5_AB;Y`&D}%+sFPKlr}A|pt8Kok(OUsG@~eJdRd7(J|mN8d{&y<
zP>-QLLlX^6HZ;x93`4UtO*i$^P5pFJKRq!h4WHjCE1DW?Xk1~4>e=mcd)@I=+a2#$
zt-0f~RBgA%=hdycO>6GNkc@(o%7W?Bic5=TxiSjNtMdv9ipr`TnFV<mk|}L?a~s~=
zS;(#|&#QK1=~7un09i@^uB@xgm@$|!rki%sO*`pkj2UK(8HTG2GscX>pe!>+Ljz-s
zPY#SRJ}cfxGG4WYG5bRL)EQHs>zHxJdpwRlb;jm#E2+7CNoY|?#~q*I4avUNf*ym%
z@Z?Fevh(vQ9XZt{rG-U7IeO$&26OJ$Wi!lpGtz=`H2->LJXry*!A3?%-|PEu$9v64
zyhaXQpQC?X!Sw1PNB^rFqg1-pA7j#8U9Doe^coR+jc9#Fv_6kxplV8U>Q8nItka|~
zLAT~JgY+3je91wB^Z@G(nmoO1QeNfsX{CA7Rp0LTOr>P;Ss7+JGfbbErq4_>j7-yN
zrfD@(@#>EEneqwnv`;RtG|HA~Mv!S*%`~O5Oshtfv9h#KvBHeH$7dxZI)-Y24ZS)#
zq?-N`O#ca{hXm6@LY8BgsueQq*E5o!I(K{Gjd&9c6NzSMDOrx;b$UuvExY4&HmaGP
z5=~Euy1DqoM8^oNKO@Y_8KG8=J)*LtY*M`uzaeX*nwe^*Ap0aek(numrt2BZGP2G}
zv`1W%X_jF>%kYzB_{lP|^}B;c)K%0Z56RRqYEot1j3UP<Eu2x;gcCffu%xK6sH&vO
zF-DaM8FMXDGm;!=+A!od!iVOKRqeUPUbisgvr+;wRW;o4$!ax0O^i^nD)Nl9^6DB|
z(@~ny#xx}<sE5(%G$kp-m83w8q|yQg+AP|1Q$O9*PdD|`lY;V$5i&Gjgxm=M&4bZV
zt-;Wmc}g~lqD@MCmOCk=;F^eB1y{%JD6FGDZo`|~@aFbAigb378F`VmutitvYiXyO
z!KIr9(oF;D0gDt^s%CH*W^frvK}BY8h6V-~pAr}xEUXb>yqOVyLdc{#gPC+4Gcavl
z$D}%g^2BQko2V>o$mDA^HSZq7ON!ADPr5akEG#~ANfx$5kDSUv?TuJ7%y=`>gG%Zu
zuE!tX8f;{SOu4=<*iJJNuaSc{A#^HU<}4~J%_}P`DR7i(>rtxMw@NWE-LKayn5*?o
z|6U_+uaUFQ$l2$0l&Pk4b$^PZ?5aed(PpGq&933fml9HzNB@sTWqHNqqM&j;@_OaJ
zVGhh%37j$lJ5RtQXPWV8a}l4V%>}698ypyZ6TEi$H8YWEMw4l@C)1S5GNTG8cUHPF
zz3BmI$7dxZIq)JS_9{JMie4Qta*ezaOb-dBhXlW)O4SOf`t?*LXl3)no2rS1iA1lX
zx=zc9szsPwHDZ`t(?g=^A<>K>MadZDk{r{uVof(oYPvSP)0OF+{u{D3_DFAE&_T1E
z=#2{TfH5_CoRwrxzb4Zx!+w_GE6ebeW%%-ASY`zp8d!lzIFG;x&(ubErWVu8YhntX
zdDRHd)<$^twM?3Y_$+Ng<FovRHNR0b=;IvKo@>r^YZpe?C{Bv10Y%Z`^=QS%0y1Jw
zPz%xRNl=Ois?yVvwADmh)lW;;>4+<p2i4QyF?+HnLCvb$lcE*Vlct63(F%j|+W334
z;vlYs4XUg@sL>L=F}polOF#`@0kuff<MAXKJ`xQdDW<(dJ*ghEgL@JUKPhUu(4LWl
z-pLUUq#Hg`0(=;nWaN`%#+PLHNiy<F3XIdxL_?DdpGk(#B*SNt;V;SXm1N|SWcW%l
z{3IEE^#0@aB%A(|P5;TJ|76o&vT0ZEk|=N5Pd4o*oA#59oRUpHdV5ECGu{+4-ju+6
zs{Z0LwQ<M%n*NMldGv1W_M~aP;`PxVM`*)eO0q1zsn`bGRHASx;?*it9jvwjUs_yV
zurdB|vs9WVF*y)Q$&8z2r<GPr&a={ss`KnVdDEul1!YxKm6Vp3S!0nTvyeP|GD21k
zZasFtyo!oEoVTat7v_lp)5XB)Vsr_Pza@0F6N5|S(8=ZYu#!pB^5pQm=|LlOQ*!X+
z5}5%QTvg&y{Z*Hjl~;wDo>at%o>U;1I@0+R3M}7H(}~V84Xa3f6A6@b4VqRoNw;9<
zslnxge|r)Q&Mqt}t<DQ7GDDn$3`v>QYKSE?#HnhCrFw{E)5WY3>@jM5vJ!)<QiH3;
z;HI0wRbXHR07UI_>RK6hubC{b-i_Vf%y^gLMi0PnpdwCipaPhwz|bia7*MF`U)MC<
zsz`kk36ylH{#91Px-F=b#=k185|s(`yOn~+``t>h<Nf9i>Nh7PzgsCf@|B{4YHRK{
zM=-xzEhwZbMMr(po;h*(&CS4Xwkf~4`}xfY#c!?vezPz6<4ybVY9Yn@J*GX6;SYC4
zGTnZhY!vmFxF--d^*w?5hCh$t&uiNAn)b|f%5U~|zqug#&B?`YPBwn8Y0q37{pLjD
z*Sj6gx28Q@2^C*H6Zf0AKag+u)f)#c<Az_KY2REu{N_a9H&+tB*&qGpgy1(P1iv=$
z@qTlK@tghBuMKv*UmNOpzu)xhH*(U39QlE`;lrE@{Q4?}{J^}Ld~Fcp{n`+Mns&7z
zL_AQ=jK|z_{AR25o6E32#mGf(Z1MgS(@u)vM{hhxH|?aDdDI&T#$)<PGwqn`i$Be@
zW3Dm&v_Lu2PMT>a&5X;fPt1Pp5sLTgjR{m4YUs5#)HpYr^`Z<l($z);s?Vx^w>~=f
zjX%n7u1kLSp_D$vn||U=yL!VzKc?My(@%ULZu*Hg{di1$PoTcZ*Bc_%iK*`~^^HHq
zZ*C8MkKw~(_=N9B@#Qt`dIRm6biJ|0`;D)~Z*ByBuj$uo_%aR_zd8B)%?-qFPTGFs
z)bJZ;hu@sM{pQ5&Hx3xTxf%HNMh>|I){7aJ@yz*+3&wBm27Ys)_h%V?^ua6MuMbXW
z$LNDT2q4|Grw?9;oAKxa8RBOA`XGjNW#Y!Y;x}h~zjm`A-^e@5$klj2{N_0BPcr(a
z4<J}irhk3#LfrJP4`7I!{`3J1dT!$8+U++NXTLtUz}}knjNj9*4>DMXhA(}PLEOkE
z*|e7&(AR)InDY9df^}!~!T22g#^>laUI@QA2>bQH1?5fq=9cQ$_X*f()4t!dZ~VP}
z<BstA4gY>42Yuj)_Zv5bUmti8H|?hx{*BwhuaE55V^u$(N^d}w9RXGA-tE=%=JqCK
z1?QEOR~MBQmE_S1K#J-aG{IK;Vz9z-1$h<q0-NjA{Su{&J{jMv-*^)I#*^Up8~bAJ
zFMjR#fE<kdF?UD5aR&O0`_6A}sD5*&^c$bA-`t1%#ueqyP~HN}dnR#6_e|(W*0pe!
z|5`YsPMOR);fy-vGwXyi>eS6tVI?7-wq0(Ywq2lV&Op_if@%r+w5>v1%@L@c6Q4c<
zAg<@er}uos^&I*1o{zYmE1&UH`;0%ur){6xr)?jo>0jGA#7+O^FzwT}4(X<UeTG2X
z^smnhh@1XBYK<ap`uC_gL|p9=_`N{cNKmyVKu!O~AMSIT{`H=Kd^3J`k~((#+(~g-
z*L?c4g%XAneY!&2aH3CFh#OAy=?ZbfiMh7<%yr3Ubk}FD7e2i@-9EhvLDlXEs<hVa
z)2k2Ej6m;}h?^1X-OKIMRt40IM4t-XKCP9YMiS<P>(ef5x6k+he8vahGtOwAwxVvI
zKBa(~{`Bg1`}8gZYTDJi4&p|`^sa-rvI3xnFLUko=~Erjja>C94sjz_eTqZe$W@=>
z5I1twyO7(bcOg(CAHC}!Zf02TI*6P8eMZCdsSoL<f8&$&8TWuspYo7z`q!>~#7+Ok
zUEnj<eV=g~_>6nNr*|p0Pw!HorvC(^VF_0?%s38w#zEjS4g#NX5crIPz^BiTXvxfk
zaTNHBL%?S);y!cX_L+;TPuqQHlo`2kO!)M<4Vq+TP}^_B%?#-C7BtG_>-`LI(~iDx
zK(mbGwLOGJ1vJgfys`5>W9NOw=jPM<FEq={fVRJGpWmx|anP)|s>*z_XP)@@#Nata
zmF02t=`JUJBGiHEnL5Q)JsBQPl@?rFKE2X}N@kdHRVA}jlB)_oW|rw-QOTsq)w*C=
ziD^*vm8CV&ljTi!6_-q!URhL_S2bB>xwW~(PYG%YK$S9h;DgioT4_D_=}pJAav`o3
zHOebx@_4oR1P#P>dtPlmJxO};f$Da$wE6U8Y4ZuHlp9ou7~;|8;yrH1^mu=KVwxuD
zvLvor3$6<HNhLTHAi+_<2#$hUa5_YSQ{_l-s+<;_3TnZrf=X~IR8cy;N|&5gQWgjn
z-8?<7RHcSh<W<5WT~u7HqV-j@Qq6#>uI9FCdVYXK1T>5J*I3NI$|8j{izugAM7aQq
z2nJY0LBk?KhDBrtSfrAM#r&%4Sj?}wo<&qwEYi36loVBfSfqfFA_cV+b%<D0<%mU9
zPP3?jnnhJmu}GmhEKsyA3ltBjD5@+eFVsyHl*2)yf|@h>HlE^41&A{W7|tlDInyEH
zOqC<fR5{I=3Tn<&LB$z`>TpKUx|~rwz!`;InllPI^3-fQ@-->Yq)-#BVUA)Qo21EP
zO-eMGqRCWEv?e*G=~$U2T8$kQI##KP)<lQaHOF+FI75?}nrO9l%+|3viqMjEd(1xR
zG5e&)STm14^||qbcc?0tkfJJCS<@@aRn7PmPrZV2_~NF)K2_&c&bCTRD%Byv<4#L-
zR1{SqRhxyh6sxejY?6*>^XhTy4IEUjZMXJ2Bd*LNs5%g!En|DM+Xm^{hIrx=Tves8
zRB`m-M^c6A$t9JA!B7Pis8YSf>+J}IwZ)3pmnOuug^Jgk5aPPG_yl(_no>G3IaHZh
z9j*$YC1}E-N_|Yk^rJQbw4*i${MxKXVSf97#qtIhRaN7cu<D{hT>}TAyvoY*nbRvw
z+!L(gh2=BV@91!xt3w?e=9>2e?U3>$p^xgylDtW#W`f?R;9xi9uwkkELeq|sSb{zp
zp*_uOqCPak;jZIJ`mhWKyOF#;;=qclBMzwE;5>SU+#Y?w0M$nXk9M3vrSt~p(T*_0
z^#<$FjurH;53^pkTOB?@;|i{Zl$OxXCMG5RYF>O?AkSm+JaGjiJCydC6z|m(pGomu
zO-V2*30G4RO-f?i)T^NYCy8<WOxyYZ<HZp<&|9)8oqRPV#iXQMO-VB;X;)LyO$z=u
zQ`2&WNy)gH;x{R{+UPRzMh@|igGn)?kM{)R0o_tki1%Ji(T8fUxz2dab;fJ1GiE<_
zoBbG6AF<4S?Dm@LjMrRWyyp7iHP;ufxxRQkMmC<Svhf(%c&^IETxq=KO5-(G8Lzp*
zc+C~YYYy06bHMhR1GU#2n7!t}>@^2wuQ@P#&4JnLGjj1=)e3Vo_L`%y*Bp(#iAJW0
z@o{<T=;d{*hmq=OT~gt=f;u_wIyunQ>td7Yl+y<}-I}jXDd=FGQW<q}F!Lq{%gY^a
za#Z-boB#)u0}krcNvTr@+E*vXTPFwW!sH~@=|_dH%L(*DIoJB3SfC#jzOGK7AIiDb
z4{@5P`@}H~W2+O^4{Ui=x{+DD`l-~Ep>UuKh4mH7tFIzBMQYn^w9(_$mt;@8IX#;4
z9=CRQf|?ygUu6+bcU4v76%?tRgBF#?t(DN9<@f7%aV+)r4Qux_D23bNT^xK>196FG
zXemzLxMl5D5yp!;2|zIh=<6G;HCXLHV>MWvLEC7sN<iCcunvOWpusu`N_7Ah_0V2}
z)d{o%pd-@LK`9Qf`h!xt0P6?PE*dQA^F|F8eeV@tttPODudW*KHCBfAh#1}+VitX)
z7vJ8-8$`?^9`QYJ0_!JGd?TE|!gtHnH!twr3+rcudugzUuihH0$)IU~u>b)Wr@_hu
z9k0Ra3pzoAl?94#e-qdsc*0nLMQ!J5u&Mn#z#Kpn;1&%QP1Rft7QSDNH%Js%eL!n8
z;Avfk?}}*Ppqn&UB-hOvtV5t%G+1wdZq;D@6?B^h>rK$@8mxYx4{NaS^=^DeNr6r8
zaXqTRB7S#hu&9m4G*~{+$2HibS5IhAbMz#_0ILA>DGjz4lynea9RPhsgH;RqEZ{k$
zPXpbl!G?a|$!-N=G$_4A2CxQ$zM#RP`P{9+P6mBZgH;N;M}tLUeMy5wy8SX>FWNZ;
z`l<$t`q~G04L~~fx&dmRcqJGJAUP5Y2OI>DENRZ)GLR2Sb8r~20Pr^hi$UKpK;!+p
zfrmhk0FDB-0^ZkP{TuX{0g}N7fDZvw?jr-oK|eO|J?IGyq#AezS^?hxdJ^zCW84D$
zLIV#0J*|P09)78T$AX>#oJILApkHg?ZqRQ4=a5cv_*MfS3i_P}PGkC)27E7tvGah7
zC|?aq;{jNgKn?IE2>%H931uDz{aFJi{rW`%r+K)dfs>p_b^wk!pmD0Pb_Yd3K`^M$
zKx-cF|7mc6V*E-5{XlI4%|IO*@FpSSK?d4@IyK<^LdL0Gg0=u^3xIbH8Oc#WJJ3)K
zcpH)7n=Tq|01eZCHxwDKZ=gMB0}W(9ctZo7LBlmLtR1|as39J-u?D=O$aoV29?%F4
zcuSGt+cz4p*6=o?0(=XL;hjbeB$MVE$PV!q2D*Ym50oxozIaOm>7daX@SYsQ+mISE
zKw~uETRe=nHjoJl9a4HU6O`mgkOd&w0m#mAk_$l&fMf^2TWyS!TnGjLI%vTA3XFF&
zFa)%d2E4(*ILV7(7y$aJbaoZ!jRr{OaT@UU2IDkN0-7V}w9@OPpd?>{u>g`Ofdr5o
z3H|}_X~3HYj3*cv2b!n>?;kLpWMDjKvVogGQ#9c1Oond{X~+d7-38zc35K^sH57pM
z)PT1o7~UAwK=aj01HN^~cy9ywplKTLZUy5sX9SY~85;1$1;f{lG)x7h`2etupne18
zpnWtj*bRJBPQx@%nkRxPKwkp_w4Z@@LHlc<eM8M3&EagoKn-Ny@n)-rMWBN<(B8sn
zUJ2#^hH4;NujX|aD9zDu4QwCi2m^P4j?{oRee}H2+>)GWeFE5@K}in?NS-vu0J7uw
z(vyb!KxxhZWY;;ZNdl7RL=9x?In5=(1Atr&c-xq9nj3<3fP4*P<9UIBO`wGuXiwlp
z1|9+}*1$-|XwC?>114)A+mEkMX&_lm(LnnFzB8lYanMo?v_Ei~GlC}owEh9KS8$qR
zf+qnL8ff3(Hyd~gv{D1vdo|xQ=dS?BE&#~h^XUfmgVOp3;O!uW_lh+f0G*`)?+s}^
zn2j=*5uRh<5a=x$$oBKO1`dPH)1dZ-8iWbn1}rep3iM6`9F*o2U{RTSG|<_KZ`45N
z1x|B7una)s1kfJHpEf{cXgts(5d%tX0qC5_i6??kz~40By)wq%F+jRW^9`W$5$#n9
zh=+GI(4NfSGeCXPd;{1?(4z*P0exQs`xNw;foDNU4*={G=y3zjfs!5o*k_<L_XIlu
zR1Sc5<r&^?)({O!V+P>MZH#|uzz=#>1Kti}{A&ZZgVMYL80i7cB|#eCk_Nny#`up0
zNC#;y0eDNF@m~zIgiIs<AA4^CUsZAb|IeIrZbAZKO+pCd-kX)MFJa%q8jvM`BAbeW
zO5L|wYpGhb7O7I|UbPl2;zkuWw2F$BT5H|vnp(F8s@A6Nrix1b@8_9wb8kYxrD*&6
zzW(>VJ~MOX%$YOmGjrydc^(IuD|uZU>=oGg4l)n&x;k)n+;~GBq|Cet4xIWo9{CYS
znR#*zEM@D>0dsLve%`(gwgG!T2Prde9+*!U%E(&)7UQOjyaT~f+?0z)KUI(gkACVM
zjz4|DqdyAlyV&$cfqfsF{wT2TVbdSIV{lVm-m%~$+>{McSdI4sV8IUo?b&Mu&H!hF
zOt3OUJM4481)u}C2wV)hfy+V^VgJIxzJ`6JgM9~^`ViO;uz%$sb>-3aJt<e(fVa-U
z(#E{&LbS);=n&kDeVaodezY?|Kp*i!1e<Z+?GW6L{aXi4{u%FH!2O^%w%mJwZ=y2n
z2OWYf*bjrp@b8KJ6!<gY<$jGrWDxdW93s*dr2ar;F!o;^BEzv?a)=DTe%T>11p5^S
zWWO3u$_NBou_ezSko-yAgFx~@9}xui@eOPoICp4#>wsh)<9iOAKtvR-0}^;p+Tnm?
zAmc|IB2%!_9FW^%kN~fU%)qAZ1<3F*euhJ2Ha6`*fV3ZjJb6Wg_UpHCi0qF|`w&DH
zVADPXkww@Y9U=!{cXEgvgq;WCggF?y7<9*d1a`SY<T&gefO?3WfK8nVBD7t<FQ8l_
zv|pe45JbL@O}YD{ai5Ak-XU^2wv+{B5cv_d<PAh<U%tE>L}=^2#4GVh9_4w#d~jL_
zDF+EBki7pmgyj7k2X7+wPeRPWrtkQxs6Q$H^Bg=W^VJUCH0+-_c+;`hIC#fn{~TP+
zvy$&$gBx&@H~&TluL}Dn2jnFfe*?IMFw3#&8v;+t?N;z0ZmHjg9E5)OzXN~7|3K_V
z9lWEk|KuQa!hZ}f)_6x_KjGj>y*vf}jQ?TS&pCKfmM?^uj{TPq@?QFdVkY*>A*ciY
zZy~B_-?Z&O+TsP+tw1~6S75gX{cw|)pg)lEz8{;q38WppfqjUBl#_hh3;cJm<ryi1
zb=W65`0rv<*8=}qZ0cO#zlXiX!C#L}`3wB_u`h7&X)~PIR`?%aU*h0jkA10w{~`8e
z4pL{qFC6@jurGIzIt(Olz^}(%>mc<RT<zfh8~YjusoOyE2K<k)<#}lbzrmJgfd2{h
z%?`fUw>bDaus1qL`v`7z@IS@A%|Y5qaJz&58TKXzX*)t&1^(yQ_c-|S+`SI|PV6n<
zLBdEJv@wC-fc<0$soSR<{5!G#9KvEh>)^{fp9|q(Kkwkn`(Fs*W7jzNcVpAW6f_=L
zHxc;1#oiVog8jOKFKL&yB1i*oI{1>0e}qWKe%ry9aYEXVK-#0U1K{6>Ep;!*K>bds
zgUk^MCOB{s-xN%72xuDxRbVRNsj~w5gCL;p3T8P-ofK3%NIewHaR?}@f_V;7Ck6Y1
z`8-P=3l=#@JrrE&5YXNVXiI{CHd7$?K=6P;m8t{siBKKsVB^@7g#f8VCQAMV^4%QG
zbdYt%Xln=g_Kmi2kafpsmV<l;N838c8f3JcgM1T5a~;g_*qt5ZdodbyFehNg9PBu3
zNfSU~jfqM+fPDW&OB`ekGD?{X<eM)l?*OtM8SUjD-+a-54(4ar6%O+46dmMX)?g2I
zkZ-Bz5C`M}nCMUk`8J9Ub1;`+4|kC7r056-<SLu!NC)|5ijHwWl7NXyK7o8QMaMaq
z%dsmR<ohW)-oadfP5TkZw^VeZgRG}UCppNsQFO9{tgS|+T!59brHu(>oi$2Z6UaAH
zRO%bZ`ejt=7}&G1=Q+q)W0ZC!kZ+eL?Mq-D!d~DY-!4&U2SC;$qf+<4UW6_64P<RH
zD&-5Tl%bR<Fb`uN<Y1)?mpI6JWb|MMBodqGAr9to?4=I&m)KGkz(7BuM>^QG*he`a
zd&)$QcCeE7V;l^0C3>ubU59;!gRB)sf8=1dV4vwAYlqRZ9PESGQbxeMhy7y*`#bE_
z4zh+AmGT1i5$p>bWQ{N?<pt!MEGlILWW6vd<pSjUEGlIIWUV49Z3x(Fv9EHFwc6-f
z2jK%mr5ylS!;4DY12Ya=@(g4>FDm&2rV?A?0=6CYdIzLko9J~8vd$O1-T}E4CVGQ|
ztocQ6bU@CTiQeQO>wnP=4oE*U(cd`8T43~M2V|m|=q(PiE*RbDV5FVi>L6=`(c2u1
zwAtGoWW6wYhl7#!d#8h}9Y!}fm}%H|ImkL<^lk^_otx-y9b`Q$dXIxS9Q$4eSsROP
zb}-Aa?{koKvgrK|<~!KZAAqcxMYlK@X@k-xfE|YYkOMNqOjOzgkhQevRtF<(^Y;#R
z1h(`6fP^s<{ey$7uSKQZ0J9SNj}Eei6n)eIDZ?iECkI(iib|gW!rzEK?jY+EQE4kc
zcpXt`b3oQAqSDTQ@I0b_c91oT=+h3u1BpK4U{A+>)<Jk7(dQiO8Q9M|2yZ0%f`k1L
zc8!DZNuqyouxDbw=pa0h=wBVI<nbj3;fF+DcCeDiR~&>l5`ERduEKuJLHH!mzd6{S
zV%Itd&m_9d!Jdb`-9h*Y(Z4%bX-BU+2%jPPh66IsP4rC%BYyvIu#)Dt9E9f({ilPK
zG}k#GInG4?<zOYvZ#xKoBKnSll{CNWApDBxdk$98{Jw(``vV6nZRbM=^Ka~r9PA&l
z>m7tg5tVzuN*j@DU_QYPVQDWhykeI5IdvQJKss*fE!GNT;64#M6STwqJ?!?N18&MY
z))D03rVL|wpbKu=Ml2r`;64jG4hnHoKCvRu9XDkYD+fJr{{*`y=!cv7iuDHraFf^A
zKrj?Hd58@I!*Tx{djuGZ`(o^Ippv<kk3Akt!c87xRbVP%eu+H|%)os$b~Ttym@Mo$
zV1L}?C$_-BTaUfS!Mg$b00-|z?1LP<o3NLFgL#&G#ts38<0hZ6<={KKi+&V40vwC`
zHtgfT@wlJEJ^@g!^4%Ug349m#Ti7Q9%Gmn|`xNkf;*4OQ3Vwi_I*6?RKg3PN#m)df
z!c95G&IFXD-v@go_!;s17JCh#%!DT%y8v8@n{td@27X1Dhp^WI%Eqt6z6M-}n{td@
z4{jlhw3ChCR@^UROMZag3;T8l`4*4e;UM4MG5U<adlmaG2fqUQZa}(Z4JmdHpzX`r
zQjE4PkoB0@eGdLYZ0N1PUx599gD>^7#lb%m`#}d^%3ksV{Gr&;T7i7?$LKQxe;79O
zRp7mk{RansEcPSdkN8uju}1;<mUXPyV-B+R6MNjjKL{H-Dv))7*pm+aQtYR|pLzCk
z?5DvqgfZC9J9rJ)FF440Osod{h45EkzX<+{`$B9fYv3=zhVBXcL$F_U@Rwn~2Dag!
zhb{f^@3>oIL&pSuXY4l|{BGE9f`1VI25f0_|HMsw$D~gJ?^^7C0qB%}81_33{sGuh
zUO?7JVjnp8<FKJc0)HZQy@RaL#QyEz?}Pm@_=Na>g}noOid)*$XAYi}x0Dy~55(T-
z;4d~Np6(F&4R!_~e-ZjuyuCv(1iOQSx;x?q!AR^*AR9OBA)ez9jKa=!2xenbcJVHR
z>5ZN5AnONl$}3)ge_!mVLofh44hr#~fnDSfjKMB*2uiX0IYe&5mbgIhH|&9+g7nLC
z^hp6S$4q=U7(p1hFX;op9PH5!!8~kv$5{L+^EhQK2wujX;t<Tmu5t+W!=CC8?2CPz
zLvSSa@ecCcA3q74Mm)!2pY9Ocfqe#8jsL0G7dZsK$G+MjcmjK!gM7Qk*8|#-e7nbQ
za0s5pzR4kY2Aeh~2>ygE^#_6%v2O*p;eHld-hC(T=dtg02<Q*---3Jaufe|0A$ZA{
zLh4r#p-mK0r-DG-w0nW9_Y_iJg5XeW%3TmF!=}CjvNm7X*CEmdyV@b39~9C)3aJPA
zo-d?)3m4-4JN6=QAnv!Z&vghs#9jj~Bt2Q!Z#YCKgCfr%l7=0^qm2}`bBJVOcW{W%
z#)~>S1ohZC4#6wfv{OOw33k3iq!o75Arisv<q)CY6ww|85eQJx5{HPzCjUj0NAS5Z
z#oQA_sGDN?f*^7|HtoMSMwtDvOC2KAZ87l+A~zaSy4E2=+Doa!(%bPTy``JLUAU=(
z(#?Q6i;(WpE#N`iU9lf_h>+LPKRQIH%Tj28AX13^m_uX)+pyXL-V-UnKEfdqXImD}
z2qL7l`y7WzHumd)ItZw%zSMbN@(>(=O<a9P;vUY{A=;Y2{sp$zTnFJreQF%MVr<Im
zQ|d25+x(Pr`ZS=;l<=9>;1IbT*2xjzNa8%q1Z@e6%wEx`{;cU|hMRG$j4Uyyn$wU{
zd<OD|FGRNRMkD~gWVa!!_n%1Q{ltEb<lLd&1mx8&Mmp_DNSr+l8M7;qC3`UvWPgd|
z*lUm(dmYkYZ$}>NW~9JAh`iT7Bg=IgGFRInX*G@%)t<;t9e~W#(MUy|<sXdf(o>OE
zx(cbJYmhg315!mFL^|l7kqP<&@<9KJEYQCpyR#kgHupy+=2B!`UWiujUn3LpcH}?a
zi?qi-Bg1hUG8*3rJ}4+Hm{2gaU`9c8!JLBm1&a!<ELdA`Z`6;bN83d^M+>8+(O%J!
z(W%k7(WTL2qd$)REP845s^}-N4zZkAmsmlpGBznTH8vwQJGOspL2Oa%fY=XXKZ*S;
zc4_QavFl>D#O{b~jXe|lYwVrahq0aU^myxdZahC8jTgns;{D?l@xk#C@v-rV@u~6S
z<EO<>kFSnj6u&yYE`DA7hWLi~&GFmfcgF9D-&feFuybL&u&A)Cuy5g<!i9wg7M@#p
zVc{D^UQt?6yP}RoIYs$J(V|{ORYgmR4lVYJ^NM4|rNzBU*OuO1dROUvr4N=qT>5C~
zV`Ux6j_BU0`<(7?^eyc>^13^3n)_+6v!Q`nH*wS7jNsdOkvSMH?OLtX3y>Lo3zD55
zx3$P%ehW#<AKTB6iY&ESjTGVoy=BN0{vi^CMP~3tNCv)=TD>}~)!UHtdoR*`A4H<>
zQ%LK54GFvLkfEE0jNEc+wJ)_g9ErD5t0!r#o=vT;M#}83ksEs}vS6QTQmd>)B7?O*
za!(IIj_DfoxUWUl=gr9Vyazd+Pa>nU7WtcR2k&dGPN7z3QLFPBYt@UUMKhzh(P*?J
z+A}&ZIwm?NIxl)e^o;20=mpg3TGWVljOE4hWAWJdSXFFVtU5L)tkr{JXT(;<*2FH0
zt&LqD+ZfvvdpP!d?B&?|v3hDXBi=rq7w;C2Q>*>r1F6;F@ln+3l=yM+lc?1*!dhKV
zt=>ef-WtCnez(?YZey)h7tSqQM6IrAtkn+GYL~`ZU8c3#Ev(hsN;j2mF5N<{{*hX3
zAJ*#YeT({z&|0M@ORf4Zvo-5Ma4$7%8h+Jqg4q0^^G$yZzueiD5a%|m#5}Lzrwywb
ze$uc~uDD*%@WY1D4d1al<;ouKEl0BUGW(ufK{uv>sooUKDsPH6$*aUQ-z#o-wc(Y9
zXP_t0$(>j1yd3jNaLLZ|8ot|bQp1T2Co~+}a6!X`4Tm(WZupstYxm~%`Zu8OZ!7^z
z#eO5}jW%yUwf6L@?Jsw?J-zMlZQsHE{kHwK?Z555Z4Ydlv2EryW;*x{06hUTG4=QN
z^?$!MalMUl-2U$NceXJ;ZU2S%Zu@lm;B7m$57^#kd#~+1xA(xm_x9rL(Bti~Z69-g
z(zfw`E7-=^w(Wv#7j8Rp+Yh&G-4?voqZSfe%cxNMM(s<r_tsur`-|EeYS;X2WbN6t
zr@wmqt4m)!_|*emUG(a7wh12dYSt^8UTO34Loa>z`H{~xEG(HvO{CpntnOBLms;3C
zDSKWkNe_~fAM&?iZ$<twI_Z&o{1#G=8OQM>EaqooCVuoH#;3#&8OO{J5<es#cMKRU
zWrmnA)kP^KenA;`v~0x;7<*d&A>DWs5{;{nT09>~#mkUNyc}u7$02oi1(Jr(mZyR<
z0WNo?K4-{1WCcqPzYI-R8=%=+k+%CLQgoS*1fR)FS$>g6ot-ozpQR0>oF;;5usCg5
z+8Jq=r>#qSB#luQpBnUjy_r^rOG^j)Epey4pNzw~(zb{8YhtIVsje5rO#P)j!F{mj
zU)si&?x$U)z7~1Wy^z-Y2=av6ATwH|Ku<?na1nB%3n@R5Dg7xjgFi#2^m61wPYWiY
zBW!G>968ZbgDDZuSmaGVhV0@$Aia2>U{+)xvY@XG21Np5SQ@E7wsC_<fsXX><|9XX
zbYvLyupT+owJNu`hZ$mqnqiFVBg|+s)9ed<IEeB65Oaq4kvY?x&Hm0`nRVt`v!0#F
z*RvD$PIkS%U}})=`vKDbuS(J9&>9^LMWOzM{-QSltqF6G`hQG9%Yi*5_!un)*V*gQ
zH*gag1D>{jFeBN?Im%|5eQX!ApDi}?Y>Am~%gp|^)GV;w%>nEvTxtiHWp<!B)K;LS
zV3awSU4tjt@#edB0=fbwqAOsMSz)J|)7j~EmYr>WZ0DNu*kQJcorUM1o55#i&-v^w
zTaAu}gUrwE5_6$ligv<-%|-SQbD2FHy@W?H@*Rt2!lTj3;Mr%;Yx#Zj5uRmkw5OU)
z_8hatt}(x}KQ|BB3(OzvrRboz3>_4gqm}R%=pnq?JZXQ0o`&`2FZM?BSG&Qy#BQ&b
z+1d4qy#>vu_n~j_A@iXXxy?K5W9BpVFMVnsXNS}e%w6n(dfnb-#;~91Cw5<Rll=jD
z3^$tB?5$`rybbLWx1;0W4pVKTXg8Q_?z88kVWHCel09a#Yylb(uRsUlHE30MRrD&@
z2DB=?Bsvvn9CfNO;a#*Pyyvtf*ncN9C5WB`uL!LR@7NEJmVFnJvG0$RBI$W3vYv+{
z_j!m)$G#28+4rHPa}3&$CLr5+3R0YBAia4ulAHHKYV#tbH6Mg5W|73KIyoa}A*FtQ
zZ=yek5n(dp!ZdUm9M1@`PosW<6VO-CRDZ!yXe$t%1;;T1cn3N1?;=V5J!Hwhk2LuY
zkSG5k^SzIl8`L9J{@=)z{}{>gpCDU)2h!y~WhVF;vxd)+F~3u#%p=j=zcaA@CbZw(
z75M($LE!&3i1_yeY5u)Iy1zMS<==;l_v=++_^r$jH;Hs`GsniwTw7=s+H$i9?%rZJ
zdB@wa=(HGTz7IF<hjtqC-s$FNaMae=1I@*DnYqLsiiXR>%rES6b2*%?E8t>X4ae#l
zxKqD|6Lp6@+dKe==^=Ze*$U_A_x576T3&+YyDQN_@=NoSU2C3!gY&Fihi1wx<{h{&
z@4<1Yhr9AQoRpnt&e#VI$yhib<KT8w!r2%P7h?h(i-~Y2CfQDAGF*o#a2TrKCQP-R
z%`~_KhrtmzoYnv3tn`0}RsADa!9UUtN7u&)b2O{)D_L<rm(}$Rtfc>jRr8zeY33GI
z!#CP9%&n|)-^Pme-FBt<tvwfwoU70z@>8?fo`<HAJJGDU32l9Mqg(U0<{zvCzs0KW
zKUv{@-)=SkX65!{R%t)6e-fPyO|&(LCW`N+XrXuwy$x@ot07fSgJ_{h)j;t9S{qU|
zHi$-wi<8<YL~Db0lj>ne(ZQg)CsOrJJcr&0(Gc+#S|QK@p?V%fuY>4r5M2$adKyGW
zL#lp;N@l7ldKpCL1iBrV$9k{&6{<-?v}@drMur9GWH=P<3qzUT4)fmk$Etn}(W&tu
zS{e@amx{g#(Kdn32~YKCpj*RVg6@W8jXEVn>qKY2n`+PyjT+bbqS4_1v_p(TKSXzb
zAJw}ddNm$J_rqeS{17w=h)#h~XbBLF1N~L!zyQ@9FeY*va_Z-xHDDY%2IitaU|;kC
z+=5*DKOxIrWZJi8PW>;DQXk1cM*Szqo$nMW^om8QxoA3Jl(HbxEQ50yOq@J@Uo&m#
z_fI&=j6gK%k*4QS2cL9|$v1(FX3RUu9AAp9Q?5lfbY{x6H4&4Ma?P-ATA4OS9(uwt
z=8#>@qYpmeNK@T{dF0VYnrTPxVrqI>D<Bn;a*y-`ypdH3u3DLl+Yh|G?`^AYo_2Ho
zZ#HlEY{NQ}O=<{z#p1IsI%4LON6M$Ce~6zvX$bH6{UxpGm-*Gi!px$frlD5<bq(^b
z1zQzj)&S=#{&HtyLwy)p?$_y+*!UCw|Mah+=9@`g19LFS(V2V~=v6&sQX9G{rN;Z>
zy3&PpcikOVdX%gydwIG>-E}4#xAVo%lyg-lrYTqV*6<lu7bg+2UTaOib`o#U6uI;z
z{IiKSOkX0EiO}v#DRGrZxyDh`uwLIMt>Fnt6~2<9^@Q5$o^W|{rudSY^`uGCSKF{e
z(ig@kDR61hmJ^mhB7H=bh$D<wLy4Pjxkk5Mr(DqvYk<6ME9D%<+`x=gprKRV8T#lQ
zP2)-Kttl<VnzqbTQ+1zIFxM2#CG$kT1ifk#@ZiX|<}cdGvrSi%!@t0E<{vY8{Nttz
z|03?^n-cDKHKnE-|4I|(-Xv4Ve**W5%tX_Z|0L6!|0L6w|72FF`Vn>j|EQ_pUuXvL
zFE)eu&tkqigSXG5FOTEw$oahC5A40@$~l1NNW<Igdx*oI{Dk-JVDCaH^V=w6Zp_Ba
zOlG%Z8E?li8<>E`uqwvi8O%6mGQVAo|D}xPlhL-d-gHAB)}Kr<y04yMhV~+RohQkR
z4D(g?Mo&V|)!#7RWRLeGR?PlsiaqNEW)d2y+L+0rjmmUG2UTY_FXegpW|mj%bvF~d
z-d=B0fqtoeW-uD22AD2rml}f47;lW}j9#g+CeIt^jWff&O0Ux7pkHdD8NeKDiW$vU
z`cyNLnb<TlhI!aNgq+UK%VFr6nqdaAqEl@Kp=)Zk8G^p4Ic6-nruH{O(KNNlj6&Dc
z0cHgAwF7Y<<Q-&ky@S1jaUbFxVzOBWIu!SE_FoP}`_y-c;b`w@e2(*u!#vSjK^o9D
zMLJLS&Lky2@m68}+`9<#m)=@ZbuE0F(ddu5p0uGiinQJA-AdZ-hJRMU`rsB~c*y%5
zVbBVN|1<F62BP!n4Ksw%Khum7O-*J5bAax+%i+uoWUSl=H`<dhPw-DL<>);^KRTL^
zPBER(e)N6Q0o_MGG=0%|bhgPv@6nG<8+0F?V|t_i=qD^OpX;A%EUQxIarbBb&j|l>
z_NKN&2hv6OT<TxS*l-0qHCv$t=}O|c%D)Q#tJ%BShB@r7O%^lQYfU<H*Xw!X4eW{R
zz})pF!fa&UVTAeWt;Bzae+PH(WOraWnvph{Ds&^=ZKjH5B;vWB9iQF#!hgv0Ks(a!
zOh3N!x0;S<N&3BMkB+22nm*`AdJO+3{U<S>@}Dvptcd>Ev_@aj)A&5&KVt&)CDq{n
zSO2fDmS1LNsI6#C;_hqyYi0&32er7j`P)n{)(_q!&bR!x@c)<pFXDNJ9i{!5kH1Tp
z_t-6(#(ew(vkx=!4@t>K{zs(b-|X7VU_Sl{VbH5Yn9o>u2>b@W!E_YeN~Sy7m3-4r
zv@2nvU&*u<ok?a28k0&fy9eFPG_)r5Fw>dA^f6_u;`YNta}sya)ME;vA7$v%WnMzx
zM;|40rkt-|XpIS&_w+WNKIt?2>5E&Q_l5EhW*!_TtIzxBxDhJUIKFp2RmS(|&3VT_
z1CABChu*~h(?2M_{FSc%-_0l^n#{&(Wt=jZ*fIu_@BceFmK^E$n~h06C1>HxL1$3^
zcXBHEYnmHZw@v;2*RN=QjrAgKt*x*{>b*pdl=`GLsZ06GH$&pi|8N$WKW>!St0XaO
zi_9sL32wNDd8qhE?l9#Z*DK{2h0Md<SCf>}{}_F8ISO+VZOm1a8D`VpC^M?5M|f4P
zb|zoK@+~btd3GTGmcwh1Z_5bjNK3DC=}z3q)-S11dkCKh`9Ep9bkn*LUz+;u_dl7`
zFP$hyDU!i=r55zA@QW`IHnjv&pG>;{S6rktOuM8=u7FZQTuNPp;!vMLRT{%K+~d;U
z(2Td^;%bbsY1{tRvrG=$dQoz0gEF|>B@!cbhtELu5Br^duk%dUnst=mYL`(0pOmso
z#Q5#mP2Vpwl$3tw>P~Xe*cV;O8X8xGk||A=$$vLT$rMR>r(T6=Z{nvdvtC*zzp$-Q
z<Bg@@p84N2Q&Sm^%HfC{wmO}?B+{NJ3wof=Nu9s*C8m~VFRZ8S=1wBoZ_IXS3ey*+
zLTf9eAYs1@DUGW^3GHZ)D;rX;PbS*0B-T-&L}`3u$^U|glXNhVrerxcr<sYUc;+7R
z)ujEVw(;h763>0xHtCdEW@4V{R#fGiJxTjz9Wyb{l=WYkXVx&!<T<G!y^<NGQc&zB
zUxco1zwKNl-{<NeQQDf?Mtb3{l3{o6a?dAX*?qWg_m1RE(iEo7jpB(urb(e*-Q3L4
z%xn!Ej&u@0OF-rT8jFi3nTO`r$vgimE=m7a{K0YB<tJ<A)s)m%k8PKz{u7Tx&)Ho%
zzC?WlExey^3|W!Wb|T*!P5NgG;rEhPGPO{`E1?!EH4RG|rnmfpWccKLo|M^WqFxyD
z+3j``W;n+oBwQ$&3&^~VS}fP^U!iFC@Wy(5v(P4)B`7~eedN3NKUkA&Ophj%*rk_+
z+?_<)@kypJ441f<uqB=*`Aghrw8NgMG*#TnN0O(st;(Av23MmlCM^e^ccZE1yB1UC
z5n>8tmMnHi^BZ6Gg$_5?ePOWwhXQDc!1LU5k}0u73v3K1tyRjh(POs`%34D;j+Q$9
z=$o}B<Uwr-QafRrkvF=(yPI&QrbNRe!pXSp(GP_8Cz3^b!)fmecP>MDaUI~r?KFAp
zE;H<CS%`G7smfcM25;>tGh2CRXW4()f0(o3p4GA2>mB<JJEuNjXXHw|lf9~|yoeVu
zKUIF(dGOQPne*YN<(bu98Jx5=a30Fc1@IOIn#+Pg!60)5dnksPE7?ae%KVBwc;n60
z?6sR{u3?wmWb<qGPs}mv*gLVGxt6`<`<wN_f?$EUE?C5F{Og13kb7_gyOD1;H?ouH
z4s#QG%{QCh1osE`n_HB3v5{SjTg`38W1pLFKZ~Gn0X)rC{7aP+nr+(iFEt(cmr^d-
z$`j3DttglOK;@0LR^I4r<&BmrZ?p~N*A@P!@J4;slj6iGywPIijdq2HSwh*C^6x`w
z_uxvnrGe?iU+(nA-G_e(rQetR4Z=CiU^jSw_Dcx=v`km1x+@p8K)I+rl#80HT+|}v
zq874ea6WH1k)3R%%2CZ`zu^72g|C{UeAP_$4E~F_gu6OhxvOoIyV_H^tG;qqW$)lv
z6DW7JSh=fRmAl%ForDWaZ*2!9b`iVy`q+cm#aCjNv%9K9d9MNI5H7(j9N36*U^Ccd
z_<%{XTi8j}UAeJ6lpC9CpJ8ub2`3t!C7$Ql7ucJ9bI%j<1^WX2!mACGR~u+M3)mm`
z8vequ4eWNi-3(?w{Og!+*f)qlc({S`aC@-Vu8w%5Etas~?tRRU?Z=qXF4OF%_EX%S
zA&aYz?7TB2%JU6qsp-agt=P|7;$?cRF@*~p@v^+OrjPQ1GrUe-CzIx7d)aLK&GB;J
zispK`xP?btraa<YubbD+9O@N#1?Dj27Z-ayydI{v@{5-!zj&E9+#7C|dZWG3<`Cr?
zS1Z?eta6Q~E7$lSZ@f3&%wU)Q1aq+Rj*n8_@sY|k9;;mABa~~rk2lMkWe!(P@p4WC
zEHK|ue(_Asd@MG{D8G27@{4CFzj&tdi{;$Fp=PG?i}z7Z@l53u&s6U4QOX@YO1Z;F
zDR=lt<qjXEeBrUm7d}FH!AE(Ia?0*t<p>|49N~SG7d%tBz%!K#ypM8$XDSzXra#-C
zZ3Zb9c$jj54^S@fBIN>)Q7-Tl<pNJtF7SBe0`IR};7a8JPf;%LBIN=vP%iKk<pS@k
zT;LJP1s<bZ;3>)lo~m5nY03qjs9fL!lncB_xxiD{yLhuXT6w|yD=)ZGdBF!L=Xa{|
ze1|H}carja7c0+qq4Io3E6;b5@_Z*L&v&x&e5;h_J4t!I^Ef~8oEfK_-^t4P-A_5c
z^Of^ENjblxl=C~ue*;-U!<F+pS~<U?l=EAqoZpek`JJSk-wDd|U93Fch061ttUTXI
z%JZF|Jl}cj!u*`~3g>sR@_Z*L&v%mYe5-;yc9_ozqCwQmRsL^Ob~u|}$_0+H7rM+0
zQNC_l<?HrWzHUF|>$X$AE?iysy6u!N91R9S!DB&1P+{Uq$7Ad@8H`(~d6rW1tYCC7
z+H_)9^#s#5m=v%_B$yIR!K@0ZOc(Z3PcwP!xSnp>E0rGt$9OJ#SoVc)JOqkA5BL0F
zKH(Pz3o#c5i!qlXX{j^2+LxL9;E3P|)0>^7*PHa<H^FbrfZ*of7Tg<yjks@RJV<AE
z=_cHF1$W`Thkd5$IzqJ45n_Oj5Cu9yv{D{*JLOULi}a54HXS4VBmGSW<$4!0a!k^(
z!Pn6tO~-~z9UI!{*w9wThW0u(bkwmSTd918(sxhkdqnAbhSK-eO5d}TzPD5Q-a+Ym
zC#BuK((W{9_um<ZUN`?_w5o%SXDS_Ut8~1h((!B^s{^Ic8A^pcrNR-Y@FtUC?_zIg
zy1fsIoS_ssODS>(rO2I>&SvO%o}rYqgHqBArKA~3Ju`Gv&(KjlL+PWZqk2RsU~4E~
zp6R4xdqi7RXKhuv+NwHhtLmaHrn9z~d~GZF+Dh`YmE`G|pQB@bj*j^`+8Vm(nBPUm
z{2U$gb9Btl(fYGme^%?Soz|ZegU5`9eS^8LGq##;cXxi4k#LsGdnva}of$o0Mlo~B
z=IRMhBVP@&mc(D?%wI6OlNr|D|LOctR<z{XdQ><AbYIyr7ngMDoKn9Xo(R(_>D^_f
zx%bodWn)atMpMIUdR@Nci^7%jxAaAsnhxrporg_*<cgAH?MiL-;i->HU8dHAn66cb
zy`Hc&`fd6p=JC6}>zndvDPMc{UDDomjghjcZFtwU!IsmIQg-3<VOf8vFQHxExT{b2
zE!#r+wC1E{6W>T-7}vKFF*UtP`0`Zas$bIYtGmL~X$x!mH0?<Gbc_8r{4&=vN`@e%
z!kv;b*Qa)u@}}?EJ6A3rdnc~{IF^=H<XZCE^NU!)lilQB`{(MSh5FMPk~)$#6GvHe
zM8Su1gYv_bQiB?fHX4Rbp)B7-4JUeoOG!(nyj51aT7G-WzAeSGdq1Tm;a=)pLY1>0
zLssZ?1)8y#-5HF}N<9+q#+JLXPAQn2h(pS?(Jj5F`QDJk%`aiMMDZl{MBOE$U_6jD
zN4H8N<C~z#NYk)FeE2s~DL2Q^n*SPOVS+=OOoO;w8L6wu+a+x-q@=*zXB?A}?7uS8
zAw6F*&rM6w<>8w$U7DyN=2pDJ@jp__G^K6rnue6J*S!K7B8+3#&|lq0T8^v5<eT;s
zOR}Z46e`gkTDte2`+eEk{m<X@e=mkFSG)h+e1CDT+?y=`>gv85n$ZlXS4h8T>x{I?
zGHKeno7`!nze=xPlY0)yXHvr_<J_H#ZwlcPHSX_9hLf)i>9cA!PrDoK!*N3LAti>b
zbh_b9i6znB6Ru<mlkfQYuHD79+uXx3Yx+xsOxUg@n}+%NS9`Msef?B?3s1KBdhgKo
zf`pJ{=_lf$z3EO1zE!t2<(x`C(N>n+yRnk<ZSYxzL&_a#mGuqpHEkPBuM%(hVtdz=
zxo1e9%%a?Ci;QZ``o^v??=GfYLw*Gxw*z?h5A5N7SR&DI_Ss?_8fGt!|1G}c%Xqe!
zkFQ&&?u9MY7_>`If>N`|*2V0S_M~4u^5vs$UCC0n((L9bp{~mt-c8MzJe7L=b=_gR
z3n_lfvCtY*X3pAMBo8TLOX5n>^i|W9h$msEroqM4G)8tVXlfF^O;V@zN(lMNO!)?N
zaqHLH7xt^v_y5=2r+m3LD{Yd|v`JmG^lZ3>$E-o_Cdw`h>3XD^x-&vrXQFkLJD0pc
zq2<^7WN}MxB)ooC5m!p<Nra@<5-}#;v`e}OlX6d<B(C=*ZApKZ^W=3HKj->b?{39a
zrpe;OeS6ahZgw}g%k7k}9D`5%1Gv&>n9Gn=y$+e^rz79{33ClnWg3u<VQo*d4v8@f
z%oA{S4@N4=QhONET9(^OY&x=KuChar5%Z!Q3P<)8IK%K_?F1x})!K>hVqdp%hW1Tc
zg?zHN>{OL>GEF$IcDk+SKLeiY=Wvf3_|Fz@tDWPed9Cd{c&k}<vDe;fZx0aOsyz^n
zX{kL(IHvXx;g#B@at_um6Yh>ZRJbol`0$X$F5LSmtn3TlT)6jrlzTr?x%YjPd*6qz
zw`|r8<V<s1IW+y0LsO_6nj+=UR49k0SUEJKm3!Yyx%Xq0d*55R_haD7mvG`)xc8Hw
z_B~9Ma_`3~_r6N`I%BnztCYLbSGhYe<?f7A?oNN@?hH`w&Oqhv3{vjSMCIO3QNDd2
z<=gjBzWqq$+xJo4&nV^n#FcN~Px(DX%I_&we$Qwtr=oi)$9}AG?0YN6evI<!E0qsa
zrM&t{%B!zZUVWAF>c=XtzDl`7eU(cTQ(pZz<qQo_&d?y`3{6yCeU<X+Cn>MKQhD{`
zlviJ+y!x^BuShtYt{nTZ%1Iil9Q!Ke*pF2%y*p_=R(VT<l(#fac}rEwrLVFd*bg|v
zExh_F<u;8|UVWAF>L)3$zDjxZW0gx^rCj<d<wEsUF8w6s(#MobKTf&y`zV)wgmUTk
zQ65!)<<d`7{(PD8=X)!EzS8UE^@1NR=efIi6<!6WpGSBjFojE>ul)J0%AfD79Qdxv
zd$-<9ZzlYI;lQWq>Fq#IZ%6d>b_Z`?Z(q~S+t1t2v{L?jhBx1vZ!(oj-&(o!S<0m^
z(6ilblvkgny!y7@5^srVuN?a<<=Fd3a9oOy@a?m_!@R?ZdAYZoJqvQ$JK`Pb9m!jc
z@{Tg;%FoY2iqElxm-F9Q$o)AU{}a3u@R76KU6ogF_4IbcL$(Xge&l^bn0l`s_rH-L
zoUWYwEIrlT#?M01Z+qqHXDL_TDpx;Cx%yfDEPoa!s;m8K(*@}(3rs8J|MgV<Uk~N~
z^;CXxiSm<&C_j0y@{_ZbpFCLk$=S*s?5W(rT;(TsQXXNh@{>C$r?8`P3Og!4IY;@)
zla-%5S^3G6m7hFS`N>0-pIoY(<Pzl}mnaW;vht88D-U_H@{orq4|%xqkSlc`(KO{G
zj}LALZsI(&@RKJfKY6_JlP4%Yd3<nZa3^<#t2{xu%Hx%*JYKnyQRPZbP_E=a<w{0_
z-v_@p)0DTIt-R&I%3Cg1-g0*&H=ST+D2JId)aE3maU#dXXGf4wx^(Oav@DH(Yp&9v
z^+NkP2uD*Xersr58~&ZSlLb|iy-acLcYvPBj;1)FIzi23pOS}^g#zR}$oaQ4>=-e{
z`DZHaYooNUJv*3+2`dy(_Cv{zD9(OEO}q2YS8CV|YS@dXW&cvKQZ!%pBeiCS(Ol9i
zyOPq)0&@UyA83vz<tOmZQhL{c5$QZqB=R3}%xbfSl>eN6S2TQH0ENDg@v1A-@J^oH
z#J{z<%WNjS_pz@jZXV!YXtpq#mFQ^JPDisiqnT&oj9$L!1bytvZm(`o$xL=P6(W|t
z$d<7SsJrdX&bD&Ky;h8SW4SvHX%cOedbVc_n}O^I+3(a*sb{vzE6cS@>=Ki24`zhS
zlMxd4a(f~nPqIHI=5vrvmT7;2Y^DNxzWo_KYuF7{EaRtX%lP>;KC<hn8<g}pldUu~
z6B_y#{AIsW8r1V8Q-s8@m*LO9Vqd}kHFiA(GScFfT~BHD@9cUCWV|H|<1Ie_vTqZo
z>~zYP@s=1qWp`6IDCXz58FdlDZ#|324?5)|<08fgoJK!SXV+5^^fUw67qaUqkTKb0
z$e4^N`<-G?$zsz68AP-JuM|l{`ARW6Dy_8IXFAeq?_iI_osm0f6^*?2uH$I6CVq0)
zhiECt`(=it+z@6utd?;0R5;kOBEFHeefbuYS?o$R-KvRv8Oqv<TTf?&o&Q#8?ebhW
z_xXmc<XlT!ZvK^cWy(GGJ^RG2VG?1#9Xp&Wy6=L-ESW3ur_4ehacga8juO6-LKjBw
zzDtd?IG5dfIU#<TU+<Dy_l88eNRy;q+JWRDrQW$}T=UZwCEuNVtNp+9(_BfuKKtKF
zwX7UT8%d-}IYqKJUTc9n;&we&%|y8WmfhldgwT)1R-a56e$BqLlJ~w1mrGNkeJ4uU
zrAaA>QWHr@B8)5dZzFBVcWBw^H*IQ4Qqm-4D>Nc3O<eTmFmK{=_q6wl)Gi5`jD7FB
zgci6z@7C{jO}EfEM>*VBBa~0aon#7Jx)aw)8jkC~A{8La$1ZJD@*(A#Na?p{yPAW#
zZcHs(d4J;yiqtRXy{QEm%ai55htz(Pv|384r5|aNR?;|bB*KJcE3HG|N?J-gg;qG<
z#1r3!O-prq2DB7YO0}^kX^YU*N_rYo$m*83zqu0LeP7;P$$uN=)$|>%ympr!Z3Q8>
zE%iB9hKaH!)W`1b?sJ^_^w)PcOlR)fc)F^23k}<?+h3yn%h3T+E2re7MazgBauKP0
zx1Vt<yPM>kTiAZ~BJF78YlJ1$cr7I$WyrrSvDYb4Dj^+d(l@mQhh>}yxA$$?pCh@K
z)F$c{7v<(m?#lSlID1qopnYH0(O;8Lk}6H@YpHE2)xEdUO*_!ut8=hqnk0qpTS)5J
zwFU8mMkL;>d2C7@TrTRR9eg7{w~{VYQ$`0Qf2O{Lv`NXj{WK{z!qSvErchaJ5$X!*
zZPF*@p}pXAb?;)|H99Td{~?-?EFD)~yQWx6JZzhCclY5ErL3Wv^uU&4{W^Y4drxW%
zlxylZs<QoDZM)RaLbggj+x53=exwKN8t$w6ggf@azOuU(A@QcBU9aS%069{(&=hIG
zu9qR{ApD*cy3*LPzk2GLKLM9d-`L#WT_;P)Q3dgJIimmFBcqC@mN{B#_+*JED593_
zUO4NWcn_(d98!P00lFo5QA!0B3sWR%RQKMg-PCt}UAHUMl(KE4vk5<?ZjID7^*xDv
zCH-8!cJ)t&*efnwO=&SEq076!oBBu-3Z8o7>$<=3Tz}n!eWmBL)wW#QLJPu{E+e;#
zHer9Imwctbi54n$lKO^kmze?*3$#z`xtGutQcrS2I$dg$E}o_KlX<}1VvfI3GWSYg
z&0`}C{H9Yy=?J9?^PaFJBT~;=UP8k@OWtv{EwawUFX^w(G%Leqcf<Db^@~Zr9FpG-
z;ZFHPe6HP+8yTw{-PLs+e6EyT_2g8(9b_Gzxf)^Iw?mCv{RrunjChVdH_k^B@$X&R
zy``l%wbYx9CoP5hHvK3!{WpJSSXRyIy?Lm;e@#n}UHyr9bz_?dTV?o_BP}BI(G)@@
zWKJV>EK*6tbS*)jC#;^43G<|L2}yZ^;{B(&(0XmD59m3~7GsxjOz4zLePdpl_A7nz
z%Z+#~zGPR=)EuX}T}UmtkV3UIi*e;AVO@^H>)nmE9<t+md;N{k{Rk0nFjD5zkR31r
zzTGHq68i|IA}K!Go9ityvV-6pWDxw)N20#);jJfpc<cKo`X|{y&e+>DIahDf<y5?F
zC8y$ThMa`AnR3?Mwnm597MmsK+ihDpTW;IIBYs4s-A_~L1*4VYH&#<KOl96rQ%MH<
z>Q0Gax>I7V$}<?G`z40!eu*I}&tS01GZ3wX6U-cyh`*oiqZqFHD8}hNib~x_(ccp(
z_~UgS#RT0)F_Rq5H4}9=MTPFBnB>j#=HVmK@yF<%irKoSVt}{MTZq&Ik(WP3cUFwl
zofV^WXT=mxq~;IQofTEOvto+wtmvmZE2?y7#T4CHQK364#_7(A3EmOj5xh(GS4`6V
z6;58l6y0A@rTZ(U=>Cd*bbm#a%G%%06IuJybg#v5PbBD1QwjR}sl0?ay8B|B?!K6S
z=AHM6U-n>3(mfda=pKwox(CBaQ<$QAFh=Pfj4IuOF-7-aj6=W8STj*~VodR;`_plY
zto<pvA7i%e$C#xO7bfejj7chk-&5%e=_+?2s&W_F`e*oOm>mBs|13<A#NSh8FmzEF
z3~f{fLkE??5K$QnJyixnRAn%9QyC0B{Y(5ycvj@`XR0KIPAZ9^tx96(sgfAFs3eA7
zXq8$=NRi6lLnSdpRT4u_G)esif04&frt%m%s62*<O6B+bd;EL3EAsfes62k_Kj1%r
z9Q`f+gC<wyG^DAVhHRD75K}n~1^&bSBit1U{aOB_{-1D*oc?V8asP4LPxw!uN#IHU
zNqj_Re`l57kf-t+vQ>UVd;eMgSwe~whroZ{e*w2h@$ZbL(-(1zEdSR2Oa4o^MWTOK
zmFtkLavfUvfAjx_e=TzTvsJEthDvwH^8exg1Ame3-^%}|Ux!;{{O9>^qcJd7<vrx9
zyoYR+_s|jTTkqp9lKx{V^`QX$TlM&ey#LPV;QAQ1Nd3=N2@oAs0z`Y20O4f+$5i$|
zWB}R!*+C?Tm|T?xk*(4o@^r6GT=(jf>t3C>p4FeKJ9hf$j-9@`W2Z!S?3C(`of6%#
zQ>r_5;<{s}NO$ZM>yDiw-LX@wJ9Y|n$4;T{*y*l2cB*y9PPOjXsn#7k^K{3~2;H&M
zThIJY)qOjCR070Q-M!OCckfi|?wxAgy;H5bcc$x(no`|SQv%JJr!*_#_3`?!pQ*3c
zmpxCSt)sQqA8MMV^s6h>bTG0CL~}<(saSWVVqKxEqtNIfyS`#d%Zikim4<u2D!oef
zMTl&cJf&s1O3NZhXqiOJqTQn_+CBC$r7EE%SE*Z|)GbY^TRWw0nM&Q-C|zr-bgfwF
zS_h?T9hI(SD_!fLbS+2eTA9+de5GjlO3|W9(F&EKl_*8aSBln3DOw2>4apejcsrEw
z;V|zoMvueUH&(3FEl}##MyXp{sM}GdgYFy4SGrcBbS+=$S_h?TCD66gD67*MXR?q9
zvyPmK#*i*(4EYWDz1h19jU;z_PZN)51__k9wNdKU*870{WF6Q~*2d&36)RCHmakMS
zP%73|saU>Jv5ru&8HAh(EsHA^>!$RpgN$bA`w+b$o>CKEDTpUy7g{_-ABWW*k|F`3
z6B;m#>C!6uZ1yzm!`LgU4{lX5g-^BXSpV(%=-ff)-^{&ON0oG{REmwvb3{gktg9l4
zkw5crAYUg5TV`zHPLWNpw^Fa)19A>nXIh#r-s@s_vlvZj_(k+ZZ>8MjJENt!-WNUE
z<i5UHzh;_vH=fuO-^SGK=5119&7S^`=8Ba56Z$>HcT_T7avNSr9Z5Ozmw9%he=@AN
zWFGE(G>oo^h0nN^e|^5`Gkdzyb`kOrlllG6YoNt<eueTQ|A{YAtshrg&DSszZ%LF%
z;<~v_E*o2=l(E!)<1@QEW8ORx*J6a1#$RsgSCn%leB@qzV%>DNsSVqerb=sFV{^M_
z^xIr}m83EZxl2--d8F1?Qj#TQsOzVg35l)Eo@@Cskw3ZX&X+Xi$hA?~A3-Z^`Dy2?
z<q(!iichn?mYVK8#U}R>VRtQ)L`tO1?77UO)>CR;Vx{*<e{*kd%%`KAjdkPh?#a|Q
zH?~v>Nvw@4X?uEd*L!ku-{nbS(3s_WUGgRrqFEU>KJUI0^{ZEVPmAFibLz@U&Bhp-
zIa1$7eNHDwj6kGdBfGz3-SA3mp&df4_S{k>RiZIZ+YGtNmQ#oLNNfUjbz-V+5|;>f
zuUUe)bnkK{t0m%koV>jW|I(%X3sNQVh1>>lrM@kUTm2-D`ev8M7U_j61r6n%k#^R|
z)pYGj)8uGvi=`!fCN&M>cIimOt5@1uiM>hhYW|!)>qb)<O~SDZyX80FyX&1~oUYzn
zm_)c{Wh*lf{Uz+=)6HF4n$6OYOqqL^l$g9J@wVo1G`)7Al3`u@NQOz?N&4;LlK#_(
zaD`0TZJ1KE!*!+I@<~Q%46-W>nNVRUnV&WJNlY$QXEwRn^g?11`6X!2lV_A#Nge9S
zm&T*D>)yn5lRnTG)hPDFhd<h><VR9889L*_tKLnmH?C<d+Dp~t>a_9cL@Z71WNB;M
z+)UU_!|nbmHGJajyAQp)JKC;<j)Zhq(xGn2RalGitmJghtyDtuti&aKr%A8TrxTRj
zQBj?#>@ii1DI!LpB~lC7QY*wJ(rF}BuD7P7v&9&9)6X<j$$Cq9UrVu&E14U}impE6
z@|y^m*p;Ix(vnErX>PkRN~FE{-LHDBsR&1s=Jg}@q_lWrV`(Q^iVMpfDcMHKO5R-P
zuteQ#j9jOba2RWfkG@5AlQ+ggoHF_f9|Sw`OWaSjm1gax<VlUpGz2NBN=-{5<}YV!
zIb7-LF!@ASABlOkN~e=|g#O8Zp^H?7c_Kt(D_6JfftB28u2M>4mq=1PG<+EL>*p;c
z!oB3A%q1tu{t=Fy>MP|VJ-t~g*!`<1pT_x4>Ql|$Atk!UF}mrq%z<PlhO}YfwTNU8
znPm|J|Hk+2AyvYk)7GcySV=tEQ#5bdo}~>Euhuy3uryqZiFP1Qfy6yGcF9<loL_~b
zf%v87plQk^mL|XICRci)Pd6PK6D@a_z^*LASY4`^hml{E0!B<CX@Q@#U6+SlqR_jc
zuZ*bjlT<ZLfy<NlCH)g4c%u)eF>q^|WThyaT}g!h{hziMsb`%nB+^3*N}*oP*U`(y
zx=sXDo9CfbE&W^@lRHUQOW~UOHLn%j3$AS>(NeVCK^vPsx4SFXC&-nCPv#-@`LHdx
zIY3Jhd8~_z)?wp+*FS}o!4>`rH2w;&Bh5b(E=M~2jg{~#eu{SCEPu7X25!Iwa4<T;
z!T1&H@$1kTT;SgbU!n+(#I5ip?m#PWx$+|Vz=e1KJ-ZM3Tg?FY4BO0LR`)+Nb6K1J
z#4KSAzQHVG-95uBXH9ww5UIg(j<c(t+U&|{#@1%Cp3&^8r!y1!w?)!?RL`nA{o92p
zr_`tD=}ghaU1Fx`Npq)RJErH#i}d{EBt3K4RZm!U)w7k8^+b6>x3<WDkEWa=pQ2|U
z^Yy%=$o5a@%`Vcj-qZBFc9EW~cG|GzL?EX>^%USV<t~laQXawT?03<be6oKs<@i1S
zd$>i<^B`TXt?*B!^rtGnsgr-2e>!fdiO&9y{4;S2@2Ru$o_ys!4N%@w2jxBG_$#TW
zsmg)M@>lsk#Vs14egAxaHEz)hUE!~x{-!EVY9O_EA#TwT?fVz|7vmQGRA=Q+4f8Ma
ze}Ru^jqa~ps!skd{a@lEx}$ynSN>YuqCt9qe~o_)ZqXy%Mfp~pm2YMJ_5OPNMW^&2
zU4gEkmE4GrXqNW<4gLn)!q4ig{H!6$&&pALR+fL8e>-<Y<MbfqZH)*uPT%F<h5v8;
z-(m{4tFv;u1}L|ywQ{@qDz~drxm|6Q+ci?TUA=YXyO(miDwW&SQMp}}%IzAd+^$OH
zc8ybR*GT1dc`4kkk;?7LR&H0Na=Y3nx2saQU7m8gDwW&SL%Cg*%I)f@+^&(z?dqr8
zu1e*0jZ|(|dw;wCcQ}$F*SwE%zB(%Bt5P{%{gm@nnZo(1RL)nRoUf6}`N~z!SEXvY
z9;^JX-nzQqOZi`w%K!3||5d5{uaV0C%2obXw(`H)s08%h^g|C#*TVlA8Spb>lnYj=
zT(FTTT(At~g0)gEScY=JCMXvyqFk`j6fRg=3KuL*xnLQ}1skPYu))d&8>L*Z!O8_2
zs$8(4$_2|*F4%D8f(=(L*l^{7jaDvLnR3C>l?ygOxnL3Hf=y5^SVXyC!<7p*T)AMw
zl?&Eg&#;&4d0cnKJk4>$^h7zQa-oBlaW+?eZRr2)IdScN3A;0wtr$1EVW*q6gppsA
zbJ(y?lpYzSRsqjva%SB9I&rTHr?C^U7(#Z`Q|RI&(l<DJtw9qp=8y_GnJ(|^tft)d
zKx<B<x6^SsADWk~bT1!jD9C_r7Gh@+M(!3M$0HvIwan+KcAS%MO{j=OroTMy#xxe8
zpc1l!(p)$8XA?t)hLad2octsn_r6@Ew2fz(+i?!tnA|b#+jD=h%s^!H(NRiQeDvx6
z-}u%_fU=j>#NEtczO`h0?H7gf8@JoaeGLeIN4^APX6JZ4yUggm_UpdRgW+sgTKZRg
zoM+fQNKWK0Gj?&iwfX;Up1x{EQo@rb`G4iINQvSLoZn>JU-0Vx+HJmCw4H@L*}3K0
z_#5xpw8!S(uzR%>q^<B*j>_JPn37Sx6Q*!zT0ArJpS_J(g&xUTg|zo4zKM4<O`(1n
zHtAQpetF6lAZbD;pnKMxHO3DuqfKKA@8e5Z2}KoJDu2nB)QPN%CVY0Yn%7c{U)`_e
zlqKWQ@@<mu<h?I)N!!{}7{_Bwl-8a?wtP=`2bArVPAaInMHAxI@S2BOSZ`oAIsV#n
z3EQLxbB%6A?z+|`yv494TYmpH?JFtWyFcyiUr;OVjeD-SmQzLSDQ(rYtmLYQlxx%H
z64#n4;XEiUf-kFk`<sT{{gtG&dGC~Ts9(4?v-_u0?+7(%a^2)A_0I0yO=H-7ICrOc
zDJRNLXuuaen|i<LTbo{`hTFY6^%)uOr02Mm+SEI{e|`^lmhF0v9u}50_J26rBCfC(
zEB*ZsW7{>YsXj^>v{fiw{DSt8Xy2(ZG;@!VYbjxE#b2q;o5j?4NiRyo*O)%_kyDn9
zK8?X!aLD-}m!hUOQ}dG;alcwSZ5m(GE7C2!R(f+I6>(QzmI`a=7IK)3FZss3n(p0}
zw|n20DfO1plUm-yWKAv-EZ?&qBR4V!d6C_a5V@GOyW3<%Dab@qUiY8}Yd2NFG-USm
zN2Xl5uINtH72QBrbOT*o*e_fo5qWz7bK7jzX=N3p2kQp8$jXxyk6x@s<RLj!R!;U|
zZ6Y7pd7?pdI%_Z8kQOSE`4+Hl5@$_A^oUxO#^<Rtz6HAWE1Et_;fRzWhi?IP4>MGy
zlKRBm3%BSL^;IU{P?btrp=-rX=iD%rN}8rpNz+v->2O^=ZlzL52k9E}RHXOKCU%kD
z7a+Uu0NkQkG(d9f>AX`U_U)&u%7Mx$ou+b1d#Ie!o+_ubx2`bvQ8}g4RWe^0lKHHe
zr!q?is;<$6Hf{^e0+nCt>ngNW349(B_@?7O137#PbzOSC$}%0Q()h}e#&;lhMf>Pb
zWbz$`TXc{PRk^0V$~7ITa!o5#_TGX<9e59zVJh7;U8S40Qt76HR5ITJmCQF(Wt^7l
zy7zpQ&o@kEoDQ`$Na<UkQu=(Aaq6p#Q(xut4OJPZzREZ)S52h8u9>$|8K=WkKHmbB
zbUIX}^bJKy-@l1XB%KabNvFe9(&<o@bXu;GPKT<bQ(q;W4pqr~Lsimgg-SXt*VXul
z%I6!Va!u1zuIV6MnYX$!KVNsjSL)9933_s;N_W1`(LL{#y61h0?s=c1yWJ=2ZugRK
zx4Z0fXP3J-o--*Ey@_UDJ*`u!``KscPWFDfOMRm5Pw%fg(`TmW8Xcg!(Vec*zIw98
z=^CBUMAztv-U?!tlQNZhQl`|ClQNZhQf6P>MLuH}ZK5-DpLjx>sBm{iD#xLN@*2h|
zuc1J>3^~eQn5~?J*~(ccR?b46auzx%XJL%;6xt~_p;-9{1<FC_s=R|@<r>UZuE8kf
z7tB?DL5^|?ij_x@r`&<D${m=k+<`*n3yf2~K!I`uij@~ITe$#Zlnc;K*Z;@q`u|8>
z?Vqiy{dv0DKTB8pvr^8swAa=CYF+J*>S}+tl(Q|_DQ8=%!?P`Ns--$S)$+9eH122o
zXUyo7^DJ$5bDpJR%6XQ2UE!}zImuG3>-j~xo}V3_WN~L$lBZX?=o)^tuHna1POn6D
z^}gF~POnt!>U~^S??>zEeOq0<kLv3EEM2{?PC30&t>;z->x%sdU9lgmYxNnrR^LX~
z>NEAkN^4!K&(squt#z$_u&&kbuWR)&U8~<;*Xm=sRzF17>YWbK3|)24&~^3sDiwB-
zN`hUaGGG^}+}A}a_jQrVdL6E(QCjQTd#0|v%NlZy%12JqK5tbvaVM2coUO8nb5v_^
zE0s!|q370GE8oax{6Ska<+1~g+Nb`fXh+QqGEGD^w`MUWbw`J3kD!NX6Y>?R(5Bi}
zxd=h3-cm*ok5R6bv34;u+?X3W<hOsf{nPCq)BnTmH*=l162DDN{w~z6=EnBP|HJK5
z|BtoXk+mi3n${b$uE{(sGcSD4W35&roc!UeYqG9Mdpqs5v=`I1rrn>mHtllxw|_cq
zV%m_jlC-vILn5C=o`_r@xgfFv_x1c2MylIyj!cV;ii{#mlfT}VFo}QPNb*m3{g+3I
zc)A;yhO1j77gK!14_}RYTBLm>Gk7zo4QeCPf*SshV&5Iy7ObT9t7$RW{_FIp`~Bni
zPxJe?-`sw)pX=3muXtO%+bH83;G1-2ye`%exesIO35;q}?KHa&ve0MPS+?5FwsY)U
zyRVfo>pS)cd!#+e9&L}Y$J*oU@%99JA`)a*+H>tH`%`-!5@dgFFR&Ndi|ob7Vt<A)
z=|$wjzQQPj#&wmnj;vSou_D2hk)eG!dqKy#&S0XR@M`;V?r8w$orXi_$3WjJq3e_6
zloF>a7jj<cP);=-&$*s6ydQaIdS`iOdq4Kh;Z)Cc-u2!M-i_W(LYq00_;2rH?-Or_
zx6^AtD6#cD&gy&@+WTX;vp<E)dNtH<y?-6t&s&9-!KHi#YV!hR_8v6gLwfzk(!=TB
zp9h`MK-?wB54r~3f&yA|ERZu~gP33KFTE&uB=}?SXz(XA?*{18&PJPdxfjKbQL<@4
z9;ev4m}rm>x;E4W-LMOo<@rIEhWa2M#JS20I^)U%U2x|E7dBJE22q}ig&~Qtp(cEm
z*tipIs3ndX_6eNaP~-owq0VQW$$tp<AHkd4$*?m`xkb8`oek!IxnN(wd<^aA<@Q?A
z(223LoU>us-efQZOa;@xbZ|2Fe$-Isor(Kg>{ZwoVqb*)E9|w{*8{%Uy<3?{2BfpD
zF`c9lN{~lNCC4tswZUV|h+C8MT9<Re=Yy^dS8Bcr@Q)HYrunNQ^j0W{#L*=T*-hiB
zA@?pWxtm%xi8sl!=vn7(B1QGQ!If*AJMtVQ59IyHJN5cpqHdDUcI7P+%GHg$U*1q-
zth_;UF0n~&BnP!{*^w$76wwk&C>hWH0RMmzx8jfd@t(#6y+Ch5^ug|n-Ordv8R*Uv
zHkhEHUl%ug>SOR(sP9`ynON@--s%T^cw@hYx=5M3BAze~LeD3($J-6AI?iN&&`|Gv
z2tJ}#KgIqGd`=n*2|*~%&V9t0?c|+oZzt~--)!$w7@(g4!sA=c8N=-jHQwLB>);Kb
zu{MSpMW|7nXlx$pLt2W&2d{-U)scoe;*>X)(~~|TMUC$#_wsI&@@|(R!byr6bC7NP
z)Nq_i-;dajBxY6zycfathOMM^D{0+ITDMXXb(BO)DJl0`HEi@VL0`}xETG=C#OdqV
zXs6yykJ7uAZyQQ1C~UYVC<3LRKN!Gjo<$cpDGjDKYz>xzWz=F2R8fD^8#c;4d^Vb;
zrZr|)^4^U$RD@kh&Gf|{fIScl#(h3vc3@KmhFUbAgPjfaHfX4|5s(JbK`W2}GC^z5
z24sP@pdDxrI)IL#6F>^8%>lW99%|`#whN$5+pd5#S$e3Af=b>u9?(kdL@)_V22(&4
zSj0!`rP!B&Ux3TO72rznOR$Ce4}yol@4#dDJr0mjZJz{BfoJi514zqjLw#pqw*_$K
zJ$kQ4@AZVX6hb|UKq=7vM5$_j!tRgX05A~uATWe}I1~&6Bf%&znmD8;q!#Ws+0vV|
z4<7RW*T#RhHX3W9lgWXGbq2IW^Cb3D;LqS`@C<ksJO|$AKD5?+2tER`vh;88G5CbK
zo=#txL%r67G1e1fUD)I5OeuE<6Y_lS@A)ltyrqt})bW-&-crX~>Uc{XZ>if&@2sPD
z*3mob=$&=+&N_N$9lf)T-dRWQtfP0<(L3wtoptoiI(lavy|a$qSx4`zqj%QPJL~A3
zb@a|UdS@NIvyR?bNAIkoch=E6>+B-x?J;`k;{X}0^r%{TRIPm$|2Kfp{w&ZI(97vb
zwe+OgmM9lJrj8y{M~|ta$JEhd>Jq)hte_<8STU}nG;67!T0_62L~Ed5^`?-W{6fPR
zq09j6fuMpggP~*R<M#*f2>2s-6#NOusQow~#nf>vbzDmw*HXu|)Nw6!Tx;GYo_D~z
zKs3R<&-*?AAA*knqYJfBLv7Sh8#U0ydP=^YlCP)a>nZtqO1_?wuczeeDfxOzzMhh=
zr{wD?`Fcveo|3Pp<m)N<dP=^YlCP)a>nZtqO1_?wuczeeDfxOzzMhh=x8oXid?9UQ
z?qt`3tHCwk*I*sE7OV$bi047@5cnN<3>x@2fSYQc1W!T#Xdxag#3Mak9@p%G^727(
z!w#<ml!7wQy<rElgnDKP^+_7Yh(8nz10w+|(MkiSG1g6|c9()>w1x-4Lk+d`!urS^
z4Lc%tQlII}E0-|}E@NJ~jCtiL%qy#zS1w~-S&fd2)P5>$Kz3KffN1WJw$Ky1H%N?U
zd+ud>?91P3y%wQ6qZpKcQcwoE1LP^%9)Nt=UVyyWKA<n?2l|5nU?8XfgTP=g1Plek
zz;G}Ej0B^=XfOtd-j6RDXHO!`cfrZvd*BrCeQ+xH0ayWk2u=g1gEPR7z?tAIa5nfc
zP~9Nd>^HXOf>q$B;5=|XSPhzw*)QVv5_lQB3jPM(1pfeUF_*N!13m}<<2KZ!25M3R
zHK~D`)Id#YXnS?61vjN2PziePSEB-ZZY|8#p@%il!y4#e4fL=E+E)YZtAX~_1jv=7
zr_|C@YDr~1sjMfJ^`x?%RMyioYJ$0d*<~=Vp@v>jt8?-?X5-zMzj}?ceJisF?rp?Z
z`pYQ#%P9IwHT`82{bdyWWfc8I>Ut)cR%X$s-Mn%#Atr}kYMFLF{P|k*dO$A&LSzz0
zln_xuu*1=ETh>gnE+Qt|<{Wl4wxWNP(B}lQhToA8#xD}ndr{rv)P292+c8^3DkGC3
zlOt0iRgoEyS&`Yg{-W`kjpl4)(`2_~wmHEZg>JSbW+7|tGfh>b#*9~U6zlQ*Sx2hj
z&HW?Svx4(HskP>QG0}7*rtGh@cAfg4r|#uyu28dD&4pr`wd%e^&9~KuZzuM0X2P||
zh4&CAXS|2i_UBn;sI~9f_gIPU;Ps4*;At;%T;%wa^jDKMYbKKZNLV707t2b;hnSn}
zPRx_V?UnOQYwcU!8HA7MyCgRfr{V3G63W=fvXt11B0cfTl^F50HV!YLF}%8M<on6+
zL9SoIm)vcHzrye6xAD__!)nEc-rL9^sr6p+p7)+Y`qEbKepZ>E_ikfVV?E|ta5=ch
z@2FVqtz;Esg?BO%P*xD~2>ds&f_)(JSmq$rWdornd#k;1tewA2ToTJ5)>z7UqKK<*
ztmsW=C1y3N_5pEh@HY4z?N0Eq7ht|mtQ%Ond7Tg!+1K!SQMeBHJz*c=Uf}Jp582JU
zd70frh>i9}Z@OK_|0?bUUM}~D!8^iU#>&un{9m-^c=ILo_6+Yhdn#OzN4&nodrX+p
z>G&+ShwxO9H-e`}z(1KsJk`8snw@CJcqiLo-fGJiusyBeEli{42r<pthMD*rD5hDV
zKJTmfQUkTeNPQJ%Tz%dZA9JRfuQyD@eTTa5kh^w;hSwPE-Rj<~{+DZ*8#Vsdp;MOG
zh`jfHy_=^Y+p5`HL*B1uo!<4-yjkzI(WiE3YA;v+A`N+o-tDhG-NNt^|0C+YNX=<#
zE*F!TrI>GPJZsebu9`2Yd7hZ|W=-vR8s={GU#RcW@V2-5>`<SZHGEq&12sFUd6k;g
zYUZh#FQ&Os-3!$`P|b7HELL--n%QDfFOrgd)jUCcu2*-NnxoWQqUJa?i!eP_Cy~QL
zpX<aNu|52}AFxJw7ym)#IsSvq>->kP2CbpCo9$+XE8lH|J=`8{M%o|SpFmgFb3$aS
zz02NZ#@Rpf4T&~DuLwR-xmRv3@Oq+0??UAhU93`$E>S5*m(qilnahIB!DjP|$OwA=
z<)p=+5$u}+ltObHi5wg`gvFObBS%BOPKcahT1QTe{19zbXGP9}y2xs{qsA9;QpZA(
zMT6Qr=33LBY-7wYRt0+FDl>8Tw6t{zZ+q)gPpi2@&3Dy&NleQ(G^WOEnLFZU=7_mO
zOkx+lu<VPE!<+2~wcTzTybhF!P;;T>nS_#`P~2l8$EKvQh!k7sbb=;6?@3teC~4Z8
z>Ry@*pY|f_U^em?;a_6KwPVnR6AyX(4J)x9`fmqm@NsH!zXUJnCDyhdg~N2ee>Z%G
z4Xov^^)H7Hb~z`bR&riy1#ZsvU>@fm;V;8~nSY=^-=D)e@MO4hBM7y^A0+Ynebp@Y
zi~MeWuJDsI-uwOby!mqenR24X54@fJ<*X{dkI!`0(O>8P8nG|)Ui2q>&-xc}H5utp
ztNqp96S!7-kMKVJ-b3EA-e%rBS$qK}eY{QHMpmoWc~{B$Jg&>U%QT(Ki0cCHJl=E;
zYuu+2%Sk*lpLkdD-Z{v-x{9|i_YNW4V#$X$kC+D`scV{d9(UL2e<Ew=!zii1+w48z
z4Fu0}oaA!2tYuytyV}e5vV%OYt?+F9mspAS;OEveg1$v5Q`&aBkM>kKIpp`XHIxYN
z_E*}cc?W6pS9k;c6>y{<hC_W1*O!x$am2frc2gp?Y&U3KYmM8L>T{l&%ULJ3c8Hkf
zb?*_}vT|%~D>XN(IYP~8YA*C{<nI0I?x|*6&C@itR%-TDvs}$?-c!W9Le2NpeBEn@
z&u4nKxA@q&y7yJ{Kn?Sf`nOe6pS3IW?z-?PX}2$_`+hY8ed={JFA*Q}wECB+Tf>+-
z^;xHJW~zIL-n}4nOG<LlfM;z~eY&Z6vxd1tV_u^^m#cZ8<eHIM%4(UI<|=gu>fcd)
zc4$cVR7Z6eiD~Ze<Sfm*>JzBhQ_XQ|J|w2OBz&W!DqDSaXv*7am^^ilQ!`I}y6M|p
zddk#&rJ7MStJTa?vs}$lYF4VbP|dT&G}oy6D0Qz@_r7YLpyqfr7pply%_2-Wo9OAf
z!9MIl8N>{9CUd)E%(3hxkx^o}S;c>Zxs$PCq`8m(7#%Uj>WDGU)bX#>abvvg0=1i{
zqsL@Bif^qcI)+TuF=U#KA^V^o@qBc>%1AOxN0MrLpS|DA*70O6bI*6o{_Mti-yCm0
zWNbN+v85OJn&Hhb>vdGQPDhpNRchW1y8GZpm5X<ix5QgwWWKh{{6?k7-K?@OZ_yKq
z8{t=d*WBuV&p*Z7#(Bh3%^gsz73NOeDX>X*2iyf!IM>|G$-?u^J?sehxw%(&0o>22
z!OP48aQm+{Tj0*#Vt%LR_I?kwyxTnN-^+=;KR`S0H;-^8^g;7SIQCo3qj2dTHjnv_
zAcyjCJ&pH-p1OMy&e(J2DbCgX#XQZqx|hu}dUEc0<($6&z4+AB1nEJ#c~M8pznXEz
z*j9isLhaqT6Zf0jiSW(+zwWif*Bptsn)~maYsN%rub7#%)pn7QktK}lr$x>*Ws!3t
z=a^oRm64UEcVt!MJkuw#I<lHCj5U!pW&nKT3(UaCMUjh4MdXsmC1z0MvdCp-aOCpH
z<z`6a%E*;wXymHMRc2UZZDc)dooML=#yg3x7N1jM?fA~)G+RZ7!VaYs-Mbg3cd8gV
zw79cBw7cz)KHV$dx#5iblAxp{DDQYm$5ZFbu~l=ti#|VU`LHERY^x<DB|Fz$fBnvl
zw)%SGu|i|`j#x#k%)>gRS9C8c>t39eW;<1MDkkQ4Tc6UpO<tQIGjHdPho5?QQ+!k0
zj_T8=-!TIQ9JBLcZ`J1~uUbW#s)%JWv2<WgQY0y>7?_)zlbx2HqgGn6UomjV;6Y`@
z#oST5>aB^#jqhF7uX6H9ljn@+Szg|A#N=fIDu|@p<Z(UcwhOYRRZiHi+@4nwjppw>
zt*V6Mf7bMF_|O~XUBZ4e6DcYy8$4)?$D2B*mz5P4rKRO$=kl7Nok{*7bI+ewvEca8
zm4_EC%&RCYtL#2wY}v@1g*}dGGxefl=bS#jPet)DIbHkgJ95#|qTHkU_a_6Ii+SWC
z)0J+RhqU7E#44#L`Bht%Ub^qT7aSPP>^HqnpXvQFy;YT~PdxGG6IaFOOrJihfHYDT
zww_p8YYpWT=Tv~goGQES<7c0>p0{evVQWrWBe{`~?`qjgU4|j6?De13)DUXLnzzFo
zSCiv-OF0fRJh*spMF%o{(xQv!4_f%$%BmyC^x*E}=g-~0ZP$z?9~XVMNv4-BShO@P
zZQ*%4A1&<XQUTXJOm9U_1#uPguiEg?h7AvStKNVA^OLQ&lW%89ulbOWzSb}yr2g^G
zZ1~V_#lJlVD2vLv56zWo7~G+vLv~u)o3oBAIjKYMoZ`|A{SIj}dd&W@Sg+Cc@}2W5
zkE#sIz&nj++i09Q6+<h08eV!%)rMf*=7-+gyk?9fVduv?Puns78kYvX+gH&eq?L83
zARvXkGi^<nlP%nf>Ag<5xt%M93>n&q{0tt1qc}ainBEfga&oHfJ|v@kMgR`H`^r|C
zK`^9xarK}e$ZSPi^<7646pZL<Ge19hOX1vo<5#}$!j<uT=N4{Bq<22==;Yqfxq?<G
zCFXZ8rm5#tZCo=ZNNc~&Sw!~A1%rPwYBNPx{PUqd9<`ZPCT(~nHQJ6HmSHO%G9=N~
zy1Q;tByHI)T)1-j^p&AGa>9g>BPLF4GyAe5kGy#1%!`ja^0L_%EuX*O;DZ;;U!G{a
z6c#0^v>_2=ad8fP&UL=3x2K#kb?WyfP99S+V93A`-m3Bg=gc~^{}XoJfL^^tR&DQw
ziL5<bLfeHeU7DH}>Q(w%V@lJtlC`fb43lPakG{0*uv1-%k6he&Mrlr2yJ)9zXDnYL
zsa&#r=ho%3J8xL&l7ISj(O8%C$coIiVb42^w72DZB87T%h6G9K9mS}hd~(%@e&=sF
zZv2?#gDc2t>EhXw7w3QW;*0i>c|GYM*2F2>Y|_sP8uTI25(kxaPbNMj7L;%2&W<?Q
z+|g$bKBRbdN%!J@J!TJ@HRk9k!%plouW)optaMQCS)<2~JfThBekXS;&dcqb*S;uc
z;pAb9hW6@xROdWeSeFj5ym=Fc9wciGvM%3^T%=1LiU-r9J8a$H1sm*+HEVXJN%|&|
zzQu%q){;K$BFVmD=d3(uL%)iO0qcL%X6<@gz4OZbr%c)3F59_r{aRy{QVWfRD_Y@K
zBwM$?Y0IXGZF8~$Fn%NLf9Li=hYlWm=pft8^-fj<`|@02v*%J`DE1xIPxn`xu(2f4
zCK6<H%owv~3}(Pp$-1Ln9GH%8q;;$Q5`V>E6%~gMwB2@YA8`1fL5B~JH(9T2W=YA+
zGNlxJHL|N`75j-zMJK<4g4V9+I(PW4^vsRxxAbnEn-#Rq&M3Qk{l+bW+T=3Q<otiE
zy$x_w*Oe}+)7?6)pO)1B-Rf?&`oHzBmb%pvEvfY{gph;~0t5yO7!xcDkO^RH6XIY(
zxC|i*A;iP=I1V8cVS2a>*N;nih{xBDa=AQyo{TG%%DDVezMfQ`uU~GS%a7}Fx$NeB
zYwvST_Yugk-yJ9B=kwOyYp=cbT5GSp_By38<k)u2+LJzC(mtELm3?WyE8+DfT>B+1
z)S>4J^xUTE+4j=yn=ym4OjlM}7JKpbd%~3y;o(SRID8_z?mdzX+9dc%yt0nB3A8+d
z-{uoaJ`!$caVNA(IJ2-TyJrE7BG6~=!+EGATLz6ra^FrCMjvJJZ!<wIMX?>Wrj4x5
zt>%Hy(+gs+yDQq&wmY?b&nbh>J7BSS%DS5k^~1Fj8!8eu+q^HZ_o?iMF}MGirDCu+
zWJ3~$rXU50@FC08Oj@fj0Fw(7Y17}U5Xh7YlS9jN<;OF+_QB4XSl5FOdK-d4i_cWy
zH}oepH!qB|_B=Me?#Z509V6+a(R#D2l<x`QRm?`MZF1W{HkqE~`vz7%xx8_OXVT~@
zk0m>5Y_;b8@J2)Wz?wA&(jMoY@{)mN%LXiE^ZrUu9s=bhpxi>71(zh{;E0ksRQSUz
zGd9~toA-8ZiPyH-#SFMpIap?`E~^Nc-1Rkv?>{khpvUbPx$wnEQ>Fh@h3#f}NwR-n
z8OFeVhPE%j&SKnAYal<VAkskEI6RAhC<Im<7#!NuJ-V&AP?P;PL%NP8vE#(qs;H-d
zX0iG}Z{MB)du?%J(7V&)75b~{vA`75Ex-x(HbsDF-?qy$(NnKBvfrke{{Ha#(O|pL
z>vlLj)6>G9rwjGTO&tdDNQpaWIG#NNtLVMksxgDwW}HbzWyxu8<MP9Q!@4@qpX3z<
zqReN3s)ny5YV-81Mbg+%V$|fLWm}gGTin%^?%M9{?G2%qMzn<(y|UWi53k(vjpavI
zIK5sc{teZ21btC&b*Z`it;%F$XINKWTkUE!>&yf7>D5ug;bKok=Zb*7)NCy89!gF%
z32z5NLBBs33S^(Hv{_5ETC>?n48iHD0H@KLhz*fOhDef3LiA0H*?LndQ{-9^U$Y|P
zbUA%iNZ&d~?cUAVHwACZXEkSU7TmqdGFbkMe8h-A@qT^bcmW)ryLa!tj(F@x3`fof
z!_VM%K4t=Aa&N!{Z$Qtyfz)N)$(OF*dT9s#WA^mbUuWOFo<ap3+C4%I+H=n%r%*{M
zev=xg%2<jE^`f<`&d|KJLsRs{$CVZYmBk`yEa=4orWZ|d(odM5Lp4jiG+RuTw)9Xu
zK47gLiLY6SIr}2)7vWBKRYPsm7n7$R$=)Om;5UVbthN()D2<WNL+W;1VWM!StEyh^
zi1Co`0jvYnf>7^ZCNnC3!P)!R^5u{9@?WEVe-!^pyO;0bleB;7U#@v3p?N6wO8Zx#
zj&&OhL>)Fs2BG$#dWZp@<>AitP&;kuR<T!6J=ZiBn_Rx0edFt%=xH50Da3NhhiQpP
zXbEYQ!nSr%4CYh?*4G57r!7J|4KB|X(cbH2s-h<CfvWqHq9(5WV7cAHR7I7)^@~kH
zET<=!+z1yiikZo(yq5e}z!%Rm9(Gifc*<NRcc)pnvo79TSa?=j7;esfh;=eUjxzXp
zWM6R)mU~RmCJl4}i3RJ5d<J-rR`EBnN26ndNw*^vsah7<Gn3xnA9E)h4eeoXXLPqA
zT0PrZQDJpd7{aOA(V5!HomRWYVk<8Vr5cB~lI)dZyd#=}q;bd(fCJy&4%Zt;fZP$L
zXxsY!G3)7l`$A5Gqu6Ch86JD!>eJ%UqsRZY)>o)KEMk)g1xaY(BHUJCmy!-9r`t{%
z9e-d-`0c6DOl76hXC$@jU18X}Sx98x#}0K0{aHhQs1ALgBaIb((20diD)<L-wAU_X
zl4fWQbMoTz!ku?ku3o+Joh(Iq;pb>YwC5g0&ba6Pqz%I1A{(IBFC4lO5sO5fSXSJ0
zCRSXo*WquG=l8uH5)D90#DH+;?eJJMIv#qP{XQ0cJ8QTaTwYtdJb0CO1?tK%8uKNh
z`Mw0)LwS_)bEj{HN~|S1y;1MHe)`<ano@hIuE<>E5p*97+Zt^6|8Vwm{>OUzFwGji
zE+m0=6<>44w|13JQLZ^w88CVEW_>WE7hleFmEzP;R8ib|@v^IP%`H)PR4DYoF2Dau
zU^o&Q4!x4K4y>=Eb*aHGucCM6ZCJ?L(8g^wFJBgpynK6;U_QPn`{(1N3EBA@G2jUH
z3TeVFA;2``V!TI%_bcuDRrrj8532Af1)o&m9ST0I!gK9cs_<h<`)L)vPQhnn{H~qi
z3JN|e<5<lpM3?3HPO0#t3jV_-@E@u0^Gf?4tME4!{3kL_^k`+iMGG0<z;88Oe^P$#
zujQX(^ycvYsKS4%wEvqW@Sn;!8(-#Yw2<*t9-rbccRh#_l6MLnl#9byxUy`=Ue*T@
zlVMtt_BRY%E;jQ?e0f#W7(;O88iF+Saa%>HRUfhSDxsP${yx#<PlSt3o}?pt(rYvq
z7p^nf3$$!pivO5#ivx$0v=N+L2lGq#Fxq>9LP9LQJXx0xR8|z5X_(FT28sTVXlfq!
zwtBo~V~GwUX?%-=MkM=~GwvL~!!aiNOvb^B520Utph;w&nI4)9!3{X;Jd_f*`P+he
zArYF>nf=*c!2aw0{KgxfW;gv}nXqY%AT({reoG3n96N?lSZ{2U2|kJjRzksP2XK6t
zaCmWairb3O=|&70+i_CPUmDNiXKT{l+eb$!tQB82G{nPN4Gjou#StJF-oO9(Sy4Fb
z8SIL#DA$#*8XDeMC!CE?aBH@uvAH%dPyP}jESh2M4$y=c3#4O0Xdzk)M(%b|d`-a*
z3B3$&xND$z7;w7X(--a)wn{kSWNgkH@4-78>W9V8*e>9BzY3>a%<&l&PV{hmLc)p8
zby{kVI1I*}5&Aiu45#)SpOA4#KO$=iJ}V#xO`2Ceen`S;4d&5a#7j+yFTy8mJ~&2W
zJV{IPSX&-0X-NsE-Ok%fT2jJ^ZjMXZO2TP(a$M4q5>7J0aY;+w(_Ye&5>E5y?I-x|
z$NJ$Oh|QnlvqB_qUZf2<E@?xlAJXO=m$W(InwXZfB*!H!N!B0y$>EZgl-iS)<n1Lb
zDfLfUlH-z=<a9FmAUt17M(}q;0I_2Y*c-6?g_36SE0IfVP<0UYe0;epY|8#lihPQW
zh(lHx&=1~31kqC#40S~<lAhpWu=r`-7{R5-h_EqUl!kcns|>;9&LhdwUM5dm^RPHJ
z@GLx`3LfE;l@5XhFyYZ?yF-rSW={)UuXbD>l%}A0b8ha?#M~BHT0dgD7?B{hi<wPl
zyKj<7YmqeSJ|+dUD<>J(Io^-g!}4yO#EozSd0y1dN)=90#_<USH{jlvv;oI=D>(H}
zQqS=j6;9I4@nIEC(#P>Z!m%<$=YqBa_i?oPFcduc9!ca5%#t6^{bkvRERIi?Sddpa
z+#0MmdiAA6wkm7M65(njl!=<!;rimjBU-K9Y4#ZQm~5)>HLWG~#CFC#_*&pnKeFw(
zZn0|+*TyV3KDz{dfbas;X2mbJAlsH)9Dqf`+4-L$;wG4aO~b>8i_<T!zAF57Rvg4X
z^VvEIkPFYIVO9QszV5I!E@9Mk6}+JA^i6qq56AER8I0wA32)yo;co-qgUkZtow9xg
zCHy_$TbWF7d{XLP13ayzwdDA)g!ck3V6w>Z38^1GF3AMPXQcLNv=^Cw#_=f$@4ss=
z$TDtne3o!@U3b?b*ugcNWE`@ug0n~dWz0pkMO!oV!OHRyiwK87+5KM}ENgbkTOVsl
zy>Tv`MDO}SnM?47h0(lOuav05&4b3v)*fdUw)S(<+8gLr0kgx|2Ka8|UCJ_%kIyQ2
zm#Y0C8OOLEvQ<OWmC<tnzq6Yn;X}>uVdcOLeh;CI#`St!MjRFAC<u%j3E}hiN1x@R
z8qk`k;l1n@g0f6#N^`i*k17s-X4=WFYCkKr*TIT>$kv$pi53nQ5H;k(O8wpKQvKW^
z!VxolAHRHzHKNFIn?4F}#@6o8L#`(isXdu<sb7Ecnr~;1(DTvs&ToEqfl-V}zQX2R
z&PM1#-f#{l&BO5t8Has;h0TQHv&b)&+t09m5U(Zv$$Jp}=i`(in`=)}$=lDUaM}$V
zACz(UKe&xi@ZG4ykn4x&<n1Sv_I6eKS-Cy@tNeZrNjST!Ve})y1p2!uj)fIkjQ6N;
z@;i9@eicsib9_*RlZNN`qzb3q%<*9reni37sc_;OZ;$#E5}kIsYf|u81;-r}+vU9d
zlnN(5g5y720{@W;C;x)C|FH@u|AON`QE<@1_ABA!U+}n~nywr_R<i%DllYy*YPt~#
zhE#L=!-949#KE+ZrM~a|*$!^C?|+S^8I+8;7SZjuk!N)iR>4bmVUB3K9DH_Q@5n(i
zi`Bs{1}qe=jq2@(XNIbLxBz>2#o)}UIR3C{Frfd(>e|%ck<J0_4Oi3Pblv<QF2GvW
z3~rrz5?6S2LS0?;e|K%m{$IOhT(;liVhFczIELVI4remlbNl)ILozPAB5_+7CnD}?
z*@c4}&ux6*{DZ=^KfV6?C)vsJ^4O~8=2e3~{N^`L_c7n<q;Sx)YJ7YO0d%_GyQ8_H
zrHU@K`8-6_6IX0>T}F5IJUFe2EJ}Bf6Mas1Y2gurHPv0)fZ3_<B&&-(K3k}?)ws;x
z-fOD=)}-o&Qrb0F*lzkSk~WZ~l&GR}Ajk7}*%c<G9M6~1E6g@>d{7uxq#d(U`e9PV
zX6<1&u712aAjzQ<E{p6@Xpc=f-(2N~;e}oC<q_xj{vLj*xqn9>Bzv&+(&S;wg8kN#
zbqm}0z2=FF-jWuFWYdH><%X8cA9S#J{z^4}@?g@;Mq~M*WhR6^MT_lZ?Qz@8w5N1x
zLi?S}pX2z9e41i7X+4hP7LE4<Es5Jz1<$vJ`FPG6+R;C0AL<8ohWf$yx&Pj!>QA<o
z?Dmz>YnAA&VdHb0v?9m*g?yZ}7RP54+(5Uu3ceQ^T%>h<m`6UoTfuSb%lOCpnNa$%
ztJ=>}d-yD4v<q-cjC~Dh$iF4VCJzQ!e4gJ1=vlZ|6y6!w;+}CtjZSahaOw8aSa@Hi
z^XYHw`krlT?ND9wCPQQ8E?Y%)rL(T=p?y~GsqE9jx#jzZ9$ml3*f`LdTpuUu+3he}
zHQdjGn=_P)tKhV19G{SJ%odJ>g6~}d->u+OCo0!|R>8Ye_#wi<1x63F3^Xx|anLWa
zj=8;mtCeo9_wWCFRy@71aC-i8P|9wv+4{m)#ti743(a6L-lM{4-Ff?d6;9TW<AW-k
zv_HouRXE8b$A?vTuKh|CeoSdUt-{HA@_yE-aFRog&#3U16#V=7xUN9Kzn70|KT_}?
z<l}km|AT_tHJjLq@o{Gr99aTP?{R#JaI6^d`2+1R-GvIstqDSt$?<;tf#)bmN?fz)
zJO4q-CYUybT})|@XvVYu<I)THsRhN}YDr`F49Y9{0bAievK7u>$$UJ2<v(DQ^7f2U
zNg_UA8k*y|6}Hn1z#)#a8MB#rh!Yh1#EvBW3~QS=H_9Z^=PPMp3ly_semBpTh)(r|
zt7OGY3c1f#{`^n!GbkQ>dctOCl%oucLX5~}`X|*);m>QE7*4x{Wc)cM<BRbg6;3kF
z+xM$*l1+|Ja-7Bc>sbG!i>QC>KZ=Dycjx0hDxCV~?fX?Y_0RE16;9fO;}bFt4;^_E
z3O*~C^TwqJ6mLHzw`cUw9_9ET#|wPG3mE;lHv#=Uc$Gnt!*SX}9G_9)L=VR&WE}Jq
zFnT!7bTjn>Pdpz##B{cXX)8noaqfUm#BS;3n5-&4Pm01W&eGezUx<u~f>o8PcXAR_
zA=^8``gO3AoK12GMC47iVNdbYqs%07kB~SuITCM4#L#{V&zze7lqF7~pBVP$5!e(t
zQ-NgI&#pD4q!HOoZO7%mu<m<5)e6Gj6ff^->~l@j?q9X;yDL|IcVly3>Hi~k8!lfe
zuc{aw3_A{nnpU3MyZ0w!r#gp5I<QYhFv^n{g=a%ZmW$DdTUvxD;x@%47M^#uSA>ep
z26L4u5p(xCGM6IjT6%YM?lP2=;O5gkF}{6Ws3tqAIoV$u?mP3uFaM5~b_BO#$nh!A
z^7vQW<X{$(I6?bS6h|^o2I@^-TZP+^39O~-gj+@85ix)VXJ0IIZ12JvviupmVTcq!
zHXtLNk|iSi!#q5lhrh4+P-)+{1U{g`-&WeMQsFlhd`N}U9S)~wMLw=IDEOLu9Cd}{
z_UjcKH+_&!8K0#$HOhP=3cgxte+PbDtAa0Z{O-r#!~1#onY{Kj+AgL2*&L4c(+Yl0
z!HFK3Z_z@=H}G3c7x~qE-p?vON8{)4^Go2*sc_OYyr1V4oW_^=8ZBgemB)uHMea5r
zl3RfDOq;CNlkIdX49mrpJdQC+PF22oXGsAB2q&8Qo!*ji<Wtoy&a#S!q4F(az}9nx
zrCR+a*5qxf)+gNl#W`1oMw{7Kq#H9@g|WQcE259`yz21kOp0FdbHTmIUV1r}iF-GN
zxKEq<1LoL3aB=Qez-pH%bIFt;bx5cmu2H9gS%RU^V#1g_HSm4Hbf3PE?Gx<CI_&;G
zgWe|Og!eLvB~zJWBhO!9XBw6s#V!iL?kG=JLn0(`HOv#HUI9msENH6(EOG4{$%bL4
zf1qw~V*}Es{zvJuh^yJ1s@YMOSm#Slm)L_9#ac~AOb}1FgPt0e*S4|3Rml?D0$!hQ
zV1B?JF0Kn$D)xB1kw9(rF;kh_WhoBYLpS`*A<T=>Py3&20OTYsoM-!o&kOrj!iNaQ
zJ>aL9FXhI$xTnr?<0w6gXG$!}ks}`DQsnykGZ!!BrO6E|S#siR;Xwa<Xry)7!vkY`
zyH2$xXN=ZkWu>5x=i(t-iEIq$8<*nYDcB^?q2Pyv0JnK}4FWRjfFn5_?e|FffMu;Q
zJ;!lb&k_C(+pip#^&H1Z-*8;kH-x`RSyB={PWujWK$&;vv?4ULPs&)41Mv6Hy%Q)j
zxpV@akf4y|l4*FtMT9ZI9U8TSQ3LBk+$ngSaUldtjyyn6$#LmM9qqeRIO7_$0`)V7
zRrOE|0@j6OnB~|+>7IZsE=(Dz36@|frv`nL-qb2(5H2ia`ui73bd|lON_vo?>(S-I
zk8~o9aB#A}f3)z6f30zPkV|;1yrdx(Zvp+eRq-+UI|all?}MlFakg5#eV+=a)#CVi
z6;4)(<EvCS@rUC>Dx9<@$5*IuT6K<(D>y}kN!mC*tKei+$@*}7bv~X)|3D7cB$)N#
z?H4$H_XB2~$y#yzOkR60vq~I4o5L|KStX92Q*fe_tP<g5mE@Q({Z2WZ&~DIT4WxA?
zZ(lJ9N<>CV?kq>T70b&Zy(^`8&NcOh%=#kjeX>0pnv70Uu}Ke`@G49DgiQ!_7zJT*
z_NTWtU@@7PNzjx~8fcELI;vHYJB8$>yekQ(s-uWZmb0lp>{z#FaRRD0?PF&XW~lba
zL<Kr6=3}#}gj7pqQE{DYr#MkeI%QkX4epW7BrfVCX+F&S%^)fu6UFjQ%Blan?AWLr
z75%a-*%=}6V#nFRrIKYonwxuiaBiA*4Nj)Q3A}QR&|NU-nm`4F7;u&Y%XA-fB%>EG
z85w6%!SOyJAE#Zw@f9kZb^*u73CFy7j_s#Xj_r)BLH=E`Y%Sa?fv8cY-~XSS+lSWn
z?S06wtlsVaU&+4JoEPiE$+)&(Ycv^5T7`S0b2vBFtGGnEh2ujioc18c2P8a&4QSNv
z15P(XbXVHTRxJe`j$B^_pA`^;#<*np^6^6ou5N#TaNIO~O8qn4E@e{7rkeIO;%ao7
zqLWIB*=JS$uw<8667k)F4_OZJpFqRim(lYdnb)w9(cH;%hzl?mVS65)mU4^V0zO5O
zCfzOcN%)(<r}OXuReR`dsr@Pm$BA61Bc4e3kg7e_Lc-T`yr2oxeM)**!dFXpD{f9%
z4m9Ogf#<V?L*LXv4;JAL(LrkgJ4j}*9Y;9T-Km!0#5}8bzNz0)ZNNQhb)~V$R0JIt
zs!Jy8@Gp73&3>eTW({z4CB3E<Tf&i8ED~;^m88)aw^(%<=n-i)?_-u}^5G?_S1{^W
zMs2|#k-w;Ar(z^~Q|DL>WNu4b{0*B;U%?qkQVgg&LJ|~V`0hMO$;b00D<5Z)g%d7G
zXaeIJq|>;P0iMwvf9dMYmv+R2JJ+ux0X&o1$0hU*?$2pl=s<9{r{G*c4BVy6@O@el
z(M?2EnU^7llSn68$RkoEh`X5&q|Or8#JJ}}eSH9_mc~E@%|Ebv+E(~~$Uaxb-d%7-
z;)Pv>&vG38tX)WGcS-H({+4JZiQqqH#Qp7HUVn!O$F3sFd>rG$`(rc7yTetC;~iwX
zr#kj!MmnC(&v{?%pG^sg_iJYRekrBC)2?PQF8JY;rHb*>RFzT2nTN;maT&jBr%ZXJ
z{j6|PZm%&jT@O!=_0y~1#yq?eT1M(0+JUqfZ@*rJleXgcfQ%yoj?8xj-z`9!aXNvM
zZQ$+4mG-2Sa_wbLlxwjZF8lAJ;6oR!D^+C0tF2l|X5lG9OA>$T*u3QU#bP|qugADV
zKX0Gs*Q;<je!=?DK;ua5<@g21NuGE=a{PjDv(~EMYo+ryZ%_Q>?Q`b_nGYP7Zvt3*
z<|%Sqj#CiM;}jgvi&KCPtxErLoPyf(I0bJn$0>OK<PmaQj#K!Ub&>g#AE$ssV?Ei=
zu{Z+%IUYw~J`Tn|{55ZV@AnGgn>oJ*Pni}yh7jJ8+!`$?`6E`$h`c8s?F|du02T|-
zF1r3@!8|;YzzK!j`@SX!PnlfN`i<!ZcQu}1jHK$)jcy<Qw7lz?Xub9+lb|cJmpoh6
zpUuSDeKT#KB9w@A_-2y$Q~1IDq|5f#aO{YJJBUaXz*fXi>mc8&bEtjeypw(YRjqWi
z7Yu!m_V(}Yi?8(bt-t3)Uo+{e9&7Oj@$kp*7qt99&$&|TA5|aZL!pTBY~&iw@yt`c
zqZ!n^__c45rIkrExdJ63Zjp!Ed{MAS{ZhqR6s<LTOOh4s-tIAz|G_RWNFhL$mO*Cs
zzsGiGT8Suwsyw_?g_B+8?N{gH%pc(RK*2|nG}>u)O8Z$Bm0;%s(k}3KzxFM%uc<#|
zZ{O6;ALneJ47k{31uS?#nmjDHKV>QHpIgD@bH`y{S=1`WhNhHvJ8ZW!aP5Se6<q7`
zU6i^@?|DcoB5N7iSka0wA-`qXjA=P&dmgp4!g}G&4BB&icfl!Hy9%!{EzR-uQhV~Z
zF0lSNJ}%)+uxk1J%u4-moU|FWj}{J5duHv}IEaFFsebN|^mFtU=Qg94JSy^3K4x?g
zew}Gqj`vCH#c|St9AB^C271$@;Cl+*mHJWRyA_<?01^LqKjTV2c2z&K)Sf&QXu<uO
zR|^tsmnyf&O<Kx}<c@CcCK(EYj<Q}YJ@gZ<H!hE)oQ*cCGtk-^u(&K$?)us*$;Z}@
zZjaeLb^`0y8639#W~0?;cDaJ_h`T0O<8lRh;@PC|Zr`r%*2#uoOQ_0Zbh^Wxjm_gt
z*q8LG=(tvdM~V0vonR?-eet^@mZv7%^SH>w{GY`yjARdpy;suCfj7-;O~wmeEI18W
zEQbu?9g~9Zk$AQk->u+wRr^^5?-EYt^>c{hEK+_%yH)9b6^#qt%kQTUr=xjNP%t-D
z_P!Dq7Ubx$iT3k%RQvV`A&2smYPPV4J*G;}*LeABD$Iwyred-eWAp5kJdVY9Iv-~;
z$=mlWfe)x~vi!XLDiuz9h2uji9NxKvugJ&Q%>{42CJ*;8Pl4lW^Y9|Jr#ZepAJ+~l
z{hw0dPb>Iw6;A8T`#G(`bL~$kxSd|7DeYxXg!7YPR=l6p)E?_f_&&|cbZUjCtK0z7
z`wLZy(xSI*9r6`-cjLXU+)AT0vOO8E$o9~aH)*B!(MqFk9M__Vz1|1!6!LMhBE0?T
ze4JSkjt>YpZ?JysG!v!$tUxoR88&D<IN#v3LXt~oz9_#D$)Bz23@BWc??6_>mDhZ^
z%Ma<=V>nc&e%qHj3CiQrJ3*Yz__*zA{xXiL;#xvEU2iA@g0XRHX^DKXfl+a#p&l_^
z=QsI`lF?#3Xh7{T;xV1!>70Re1rB?KYM8*;`(U~sT(~cu&d1p<Yi0fPsc_m&9A72j
z>}4P8AG#Uic1qEY#dta&XZ`c`a%_sVXMQ@zSE<^QrQkS=O<`V!yFN`TlXi~Jq8ecd
z!|~FP`Q02}t?GyTVvfsE8hD<<n~Z+kn=uRc8RHM(ud-dt@%4zg5kEOj^l*G!#$lQ9
z22sIh6}(G@A0oVf)jdG9xDRm04lUo#j+SkS1m0L8W@E{P7afr(l8Ev068VBG8IpO!
zuO<TiX2D$R2((Q0KHAs0xz*WXscbpju-9B;9}N!sf6%bMb7kkAKPD30D@rZJ=8C55
zZ##F7uGraDZt9LLAMGf0l<qRuI!9Kfx_-8M^|wbs5%+228Uw1r2z05n_>FQ#*V2b;
z0=!TT#T~l5C(7Dg7y29c6J>{OSp7zsEcqbw?0jr*U|Q_9TMAVnBBQ+9CfhwB-+r@a
z@9b4AJ>U+km9D{s68`*Me#`ww+==51PcPm-!2Ux%GBle!2D?#@$UWjdUGC()Y=qyX
zw=&v(kA2IcM+IR4RDv@J*!qv)jaEw8u+SbdnJk4<vVU5pHYw&NIA@>49(Iql^bbG1
zpsNjgmPNZ-AK9C3vYT!Ga>F;D63i)IWGc1l8%DPSw|dn<A%H3sCX175@@k-&eHf3u
ziGv1VmvO`*>Hbz4oQZ;R9^n^q)%{g?$z4_|iq`Uwvo&qhxmVV(hva$nEAXgW7<HL7
zM+%DrUU!(URbCwnxl+b$oH}qylqzLNH%F{cgMQJ4Ad58SZUk$$uIA+%{Gme4{px23
zf9!lXP4ygt&8@9nyGPd?=sp!6=x8-sFQSeHm&IXLB?A7n!=&5`&?Mp2spJtCS#&a_
zTtYmZPs~ks?;hUNHL`nic%5I|UfbBv>Otj({s~9hHO(Q^-H5L4ecZ1rnHhZOn|2Sq
zp>L?GYnZQzjULJVk18Xrx9{!^;rHNw5qZ<$fS$={LK}tsP~!d$y>wY-WoJclHE~82
zg~4c@E9i2)x2d$U%<bhhK1Pkc@<f*~G}gJYeofa<%6zlY<|y-KvytkKN`5T$ICqwp
z45tfA3j4?Un^rb@Y9Pm--JKM&kYl{Y)-PGvMST9;%>X_1##8CQ^|LSBY$`4*)alEL
zW7mWoLhlYwgVWjI*^zxE``n4DhRVu@suMKF5M+H89F}Da4lKJE%3Toh*X_))gMX)#
z4ba%TS4Es%zFdtFi><W6TM^0rcjbccR@3t6uv9?+w}e-}7!G)mw^Af@<q8Qf8tyO}
zswoSbd=N>*<lps?0Cp1`d$QW<3rczP(A2OyQ0CR?3*8Rvxck*QNw=&?6c!%QR0Xq|
z#WhcGKPu2IKg%RibOj|7Ni?uMrbXc?5b{yoH)=bQiMo^_`)``U#Lm&~M|%6e`OH}{
zTonx)yq=xjU}JHuePB;t?}61gS_=KpHk{XYP@$)Q@20$YQb`8V{KR7t>HEx*)GI5_
zP+o#9T^4q>q)j^KkX~Umze>iA&fciBXpZPg0^Z7KuC5C#7M&$Og=G@8uP|+fmDe6Y
zB(AlfN5ysAXWRTXDGQg#fyrSzi{=g^glAdzQ2580*^Uh@;bv5t5$5+T>$0VHrh6X<
zj@cV4gSA1o#cE3KzewxSRbg_Ll~tEJLjg{)$3Al5_NKop>m08e-IZ+d&swUR>mxNf
zaq@ch3@sBYsl!Usa7j_E6D<!<`MM|L%WBWEqBKHPNn11?@2KC=I55{UuxFsEL4UT&
zfTA>x8Y)V&r^<$9T79tRsISJ;AW7q=Sfx7h5TJD<(J*E%tK9bdlo@ab`$bOPm)MkO
z6EtI6o3(<&)!Q2HXxJWI`AF4uLGU=sE&715(eG{ZcWE?TkN%Yyt@Jk<2Iji=H4qu;
zwiT6OYqCMqO_ms)_}x`jRX)6L@Ve8LYSHLW<CoqNpz0gZ#werN=W5)@n#dl<X)OQI
zx?o-Q=wJuf+PSS`W-RTjbGhB_$`u=`-AzGrYh{1av>`Z@XzeiQ3|*cCO!yvy!C^9&
z&sW%>pUUPuR`O;MB@=G)vH1>>r9x7?Ts)F;dOz3D;ybaK)_zxuIoRZ`-mt=jkt^$+
z>D8N2Nhea@+|mEA!RnbSD}(W?m@hY*90tRl25)b|(*<HWS`$M-tO&&_tr*!(Q5IT}
zyiF-t0#UMmd9>g@QD_={YQ@-7LmgXFG}yrGGI!AKg0EnAS!-f(Lu&ub%>I;WxT6Xs
zT_Yo1nD^Z~xP93P?d!<*BG~a)svaVWQ?fU)Ze3<-O7SSJ&x$X<Jf9(FgvnJGv>eq*
zOR`x=`>MU2_PjhLhcq>AR%}TAW0_BKLWWQfoo(z0F88$7X}I5&elQ+N*n`u{o#8UC
zXfT9MZnsudpvse{q3*WFGjBH5d0QKL_Y99chI&ul=&A&J*x8#Mo!cjDG1{L)-KUPW
zc8NZ!8Y5eR`_spC)lx*&YI8(&yLE<>UqXz_*OZN@Y2Y&UN6-L&i?8#&wI(U*5Vyf8
z4E8;~vT^0+Sl?t|%n|ZAn!N4xj<V5reY*_p`!@DIG!P89c9xsnoh|8sqLKN#RXB!e
za9(I-byq6$@}5=YN7(BFE=^E#Bt+J+EmhU$GfAq<hJTY6&)VH(o5#z|<)%W9<*l^?
zk%2bh)UE1xFc`1Cl|6t0cCLZ7vsSaEuDa82wz3oGq{aXl!bVc+@hEp=_=B*usB%;~
zXoifLYo|B5QP(L~HRg*=v;(2R;WOW+oS(Sl3qejuE9+S{4-0*<znfC|u9uisGb+#H
z>SeW~-jkf?H`xfx^Sv$YGe`g_e)$3!Rj7E<kb2DfIOz8duI!0Vn5X{cJ!E`FyM$XQ
zS|3=ce`4n>GsxOW5kd{Wrx@p7y`VjWFK6=lImlp=pHU<S2ZhAo;PDTR<Ntg{s8)q`
zaOj}5^1>UiwW`ZVs#YZolJ(@(s&Mc6=er?jJQ^E%2WP@@p@e9HMz|yVhTlz26aED5
zCilQw$B9mO6S$u8w=FDl#%8tP-5Bj|=tT#rv_UnSPP<%Y&xm2|cyFuOYsefrBph*9
zc|6&pLiwup*51<M*Rrq8XFsMDhwd3hkNgCqP*0A+$IB=E8MB?aT(_2OPHHZHF%_&L
z?~4B%s+QlRm<|p3<>nms%uCvA&CMl^Gvh9PL7k#pWzbaSCN8bd9A`A#L6vh>v50&f
zN!+PO67zNNJM$yR!w|*aO^u;s66$-gU*IXog};>INfBX$YADff23G#78Yx4>p-FiZ
zd1s+JVtL*`@_?G7MgHDKUQkRm;I$uY@CR$7)h+U-%Z-Mu$JT+>EyFngdP&+BtSDQq
zTv_hWDi<`v&d?n6M&T5fI!sFSGIo5;l{NEE%I8lUVsnMe@@t&2<18%EJGnD6x4^VJ
zb7#<8nK%sGRE;{I6{U7F@iJHKOd72!D14|cd-i&AGm0LwnW73vfue!s%5%Bd!6-p3
zkO*o#kU{m4JWn8na`mD7w>jy=Ky;pgMWqUDRH%~tC=v*&Erp|<E%p5NQdfyqSMtL1
z50$t|bcH3totyS9d*g$l`K;llt(*M`^x7q_1TPxYUJ3cCOkFY8{Z@2Cq~Ba?t8I_h
z+B~Mos&(;!#|8)Y87lqrWfr>XDJkFMsOmm24TqiVgb_YRFZd9mn+eJ1pleCl56stu
z>?{fo1d0-}hXm@H?#+o<qNc`Ujv3qCk&VgZ17UZ&F=qDIBi6R&#OCfM6hd_x8dkLh
zw>SC>Pa2HXjg8et`h&4?d$4U)!_lM-^(zy$B)^|zv62ed51audYGhAK)CTnNh_)4v
z90X_IW5dIb^+~^)E}Hs=DlS(TIuEQ{cc7F1Dtv$C%IyC;HHA5nUq#-ei|+Ib1N1zT
z+gtfb8Z?JUo|Sa!BWq|ELb1)Gjg6z5W4@NC;JtnM@>|*8g%XY;V{x&u$X@U9)ElaM
z9vbX_sNbh6I@~`$_N2b>dm4O%N8@a7jwcbS<@u<;!^l>Oqmgz{PWH5Q>3BgF7<QgS
zjoTj#{?XRCmFEvU@z*0ewl}V}>1-?f9{Y2Zw)BRFMkc(5J;z4Bvuf4Rm3zNK89GOs
z>v!&KshwZGx@kDFhu`u}YJLZuXv0lS5c6&0&rvD0nZG#H+qAfQMi{sd>u5?Qg{I-d
zV`GPhpIiRa*w|CcKWk}hY!PPY*K5Djb<a;u&Ufp6^(*;LzZ9;dd-0iaU2ht{XFu2V
zLOKf|ox33EuwpssBo)Y1U)td*^_07esE$WU!84BHY<MLSX%g&N1FGfGeq=p>>aW|w
zJ70__Jq!x3g9gOZndG$b&^MGAc*}~`$@^K@-?Q8cGQxRu$s0Ppx@l{?IY*y8x0_+3
za2HAaV~(VErMMJ)6Koh{p2_`_$zt=&D+?(14+|#zA+JK<9i@M=^e53j-s$FfJ=8No
z0?GQVt7_90m%Y+a9&ic`9ossK#061jZm7w^93z5+UtE~|5><{VU=&RKYv<NfP4yH1
zI2m^Ny*+5|TiMsrZ+qq0XN97GGm+nqp0Y5*ygIVY0j)^ov!xTDP|)M`yBhyB6Q2CX
zC#q{wTaP51fjvirJI_A*imkt;ZzbGXs(U!d>K>w7#;-Qze7#iZL)sFwSfq1b85pb9
zjjZ$focFDR_=w(P(zz`aHUwgBb#3oBr3smrE{mwu`K{uUg~dEpDr|ypspwH=Tk;(~
zI*f=)+%&Xd6}K=xkK)@2@4$(phe`fg7D~lz+3AVuykf`k9l$(Fx;#|%ZG&G#v9r9B
zRNe^cGu2IH6zOn9cawwpwH>LTEWd+gvX{G+RMmF8_1FW#7Iq(*{e@E9k#2Mc@ecYn
z&e%LxTK0maZ6jZL$|n;#X%lDIIgM&b3R~sVpw8LfFttLUo6skP@P_dm!@h;$kWW@h
zhTr9`-n*GqnM6tJJoX9wR_Co}V?IbR?%Oq|n8oBLBX-LS#l=(igEpp4qO{MTtAm1W
zY7{5YCvg@f>%St%icvlZS1LU#9>+iPS=`96f|O$<kz@ya=$*78KZ?qSET(_yts4b}
zg3^&*@J;MV)mD!EH-|MCjRvib|2F2TN$obIx5bldUE1S&g9C}?bh<e)5ZrrQ>sp(P
zZ%bnox@V+Z4oDbAVeT2p0uT8|lTzG36zq>Yp6T)hEDl|f&Rp5tIu+~KYdEwII`RMB
zwrWK(2KT(Ee$$GrrzePZ12(5zN0WU&fvksKZ+QMSrIIFPQSwTfXwUA!Fjqgci6yVF
zB}(3s?|~<;C|EE5$(dI%^R~LCW?2!dsVUsK8W^dq9SK~`8s3hq<P|mP_mz>iCF;z4
zSH&%|#4x2uHFo7;4A)TDGVKbWG!s%xLq+8%dRbyBMqSO~R!za+y1K%`qZ*ytQJ3|;
z5*!Xw%}ea8PcZ$DFcX{&7FXqd{_=}~VoQk*#W{V~FD(c=wpK6m`Ic30%|1sp`)eTK
zP9{yVMQD?&Wy-2rc)fSj_X#VV`4U&r;aeSR>vd8Y&BKy*)}XJe8aiJUQ%njm^43<i
zs8WzTDs>DOk2y>{JRSg>g{$t$!qP%l<&llJmrU$TV61&F<2uSU+TPk#JF^^LsnY6i
zr0nJP?5D<ZPno7r9$e50z2lwn=80xw5VH}n_iuv&<R#>6tSnaTbTE|E^Y4~_BQ)k*
zRvm3_3Q<Jz#4X{(@$uEYkKT#}W^Gk+*zq``k-J6_j6~l#FHq55xzIm3mgqVcw-v>G
z+{>$}f%~_)8(v^@n>AwRZeaL<WOAc{d^}&{LjkyW@csf1H5!@MNA4fi^i!<qEyxR`
zG;WeJTJrr^z3Iu0zN&_hztcG#nHx>d_C^Qmg~4F5)m>8)aLq;IO`Dg;R}cEKBp!6?
z#Yt7_Pbt448D{e49HvY4gVEmE^yu#Jw6oJ6YN+aO7fO7CtK-WzH^rlKu0TzVyEPfi
z-lG1neUYbhn@$I;enH!PX=KX$*zD}Rl<wR)H!JSCm)fTJxjbr>-tS8>>;2N~?7eie
z-ka{FeHZK91KQtW{$H;4Lc6R$NxNM*K9<7&Gf(56*Jj0$S@DfG=11mV!>pZm?-aa;
zpDiRWq@B`vv|8r1@+|Q|mv~Kdb<{6gR^QOkaYwLUy_)^-Zb5f_LswTrJsy#0Srr%q
zI9Gw_&Am}fa(77;a<2yK(w^75;2EAvr{{+GuhwW~Wz@=l_0-jQs%mQutABRrsh^IG
zKmXLBpRGO_-8Qp+YdE}h{mi!LbG4qTnwlz4Ew~H61z*3sO?NDQ92N1ud?QRFqwM;<
zR@o%H@Eo3gMK_EFml?e!czam=+@iAV*)yy(dwiy?RDYzf(B&->)n(cd*TLx8=aG3I
z(ZI?eLK4zkWAPoF-?YC2RWcqWoT!DhcojH!1#dZ@QcmdN6e~LMw=J$2e?GsIbM3bE
z3yVs~=hbya78dHsvvGAL7`ON9aA^r*zMOOSA?`~Vc@MFmmR^q2mr<}|U{fVeMgA@d
zoKuT@vW9~qoR|HQqWtfrTnw#Yeh8{9^3SE@KA=KR%V{mxs|ju|pkYZw?s+qD?>mY6
zzK@{ZSVRxKmC8DVhtYSj*g5tcLgueQRC)A`Sr*u82N|X|5>f}OCJ*rNm>Pw7poSg0
zES3mDu9iC`&a%q!_{7YbA%mkdBM7lNm%-XmV)++$%<c_7Ffcf!)d=6oMi9y!-ic@)
z6eX*gERuGEq>kY4RQFY+cNoND{PGcaTu73Lld*}u7K93v^mP%OWbq5tNGRm<feV6C
zQSgfNp_hOCa(3=_9SL3QE=}Nz-|t#@`PMC|f4tD9{?P%(!`k7hpZ*TdNE)AND2l9x
zBG(-B?HZ~MfXJ@}o)~mb{*jp-mYE*~m7cx1={}#Z5j5w{Wk0_EcWn5W1^CJk#$*vr
z#sjL^Cz5}~eGT@lsj`9ss)(HXc1g)Azs8qP%53FGwJyWgNAOJ&4~#kfpZ$Y07phSw
zQtdkF?^N?mB(DWCN@DI-a8C=3z~q6~{0zfrCxzc<cL*D^dxSR@76jeG!Y2z0=z&#%
zgMUu1Or+J(tV0iawmM9&jcCd<HyA0OVU46w(`-~|Z>%V-89qA1M{K7@dO?TYZwtNh
zvhe!HXYr<T*L&~mTDW?P#)Bnhm3%~c(;`U=)$|ZqjSekda(#%X!V9nqyb1-sj-#Lg
ziwfNnQ|Ng7hd+G$S^6d0(bUu->}YRpZnsYxP8@vvSn1SM>9NNTo-j-cTawF51w+YT
zGC5e1y;Hgzlwf6WdrTuE283C}@b}+f7KozxX;chJ;fpvT7wpe?nk}>*I(fOd{)L97
z%O?-LUHZ()7tXC3ED~C>|6DY<>f8$_pDBHtdV)pJT!w_95)AC26c>^GajIG9Z<AA6
zXb4-wPD_oOSLbrqSaxPVh}F<{l4@cnb=JP=7A}4*(|uOm$-}W-{o@ZlINrZ2c39%x
zY0dM{_6^W1qIR9a)1yG6ni%CHtMETFymc{-?;KP6gbIHTlc74DV!<)qFKoysY_t?2
zK>4G6%znCuUQ?^^I`-556Q~B?AuiC`(JoBUv9H7z0i|lsFU6ber8&>SmorGXYJHdT
ze&{^570Sp*c_)&_rRxJk8p@H(oab={S#%CADH%np{ZE_s_B@=b?XT38Uny}|%iOkd
zv$Z1TZyzx0n(N(-8nG-;<!+AhtM}UGvD(d>CR~*k@rb_EUq5!LEj;b5k?-0m4~%ke
zT=X_KFZTv=#p7ixEa9+7XE^dwC9hkA>{9|x>XCt(NFWvJ-W-driHPD><Wxs&71q{J
zjVl_~h^|g46KAToW!R}JimhlI+tN@OJ+N1Z)in8<#KU4d8uSl$eD_$u1}*eCC~|@?
zxLt9O<JqL4AQnZNh%w~lzo^v-Rf*x+YgK(7U9d`brPNj1+ge<B%^Hq{>kj|mbZ4mX
zZ@;npCu@86?s;k~wzCf0rnm7T<{8L~^hyan#B@C|7rd1|Lm~20Hf9PdB$)f>dZWGJ
z@UqR@mOUPe#J1P?qCKI;9$)9~XPf=rhHzC)%+UUgk=B*%=Bm{l@s$qa5u?Lg?yqtC
zd&d*Qvt1uFH`gx<wL3}?sN(mZZ(@c`c_(p2)#u!HI_BG?MW;U_E+m+d(a_Qq3HN*>
z)vzU!cC@>ygH@HLsL9@Bt9CzNS?2C<dB6}DYHLm6YCTQ&{4VF7iVC{u*9wO;nhIM(
zg=H=PM@>K#kwNAwLsJ&=b>*?C_HvD$)Fl%`J0kZu0tpMpt*&re<J#nb-R7ZjFTVBC
zy0#}^YHA$ssk&7M4Pmt!N@CmAOuRTP;QQytk9*c^TJH-qxQmVHF86jCuL&!w!@Mar
zkVY~;$uqxM!N(`~S7K}?e6hSxtFcwtg652_=vhQImdDo&TuXiD$ew7-SMA1UaHhR8
zb(5hEe9pxKn?klihm|dZ_X*2MQHNZdS&R6gKHj83+y?H9S0gwdd8TW27)$cZBc>{=
z_N3NYWs?73xbY%)uwT5P8MY6Pj11eegYJ=`p%FKzr?-k-@KjK_54)8@8~IP@-{~3h
zT-As=yIr*Ct>y-P(b)d&$AXm>trk0v&Hs)DHJB)diWp}k8V6@>_}m(;EHZIu<>_X@
zmeLhn5p}xI>g`=+;hw0gf4KV9$_}5?#%5mG7aC4(Oo=b(J>J-(+k%GRg9Gl7c1)eV
zyg?(}rW<HS)Pm3haTrTWA`W{VeC?&*BBQ|V^qE8MWXq<#)mLAd(isfG#|F2%sOV&A
z>9)ODgOFgeoz!f{Y#|$DZAcwa6ghv&$bbuqOg-2gDO~9}d}YJ|m&Ae4W7WFqo-$Xd
zMknG+Hgv7$b_*SOESVT7EN)rbN_!rvxE!1TZ?Ra>cCS|2?;8E}vX0T{HFMDC6m@}0
z@rto-`LfM_cdjc`y>83K(B#F{8~)~nEqv~S!mn|9YhNVIa`H?&m`qa5bZGwGk~h6@
zhKYE5O>3wtSl@uJH8n<smmUw-1;ci~%~@+}>aZso+B+<Yyc_Dq(zU~hGM#Ct&e~WZ
z=n9V?uMK)yb>cBm7YkKYn~F;VZ8aqQT;Ee<?BDlmLp*x%BvvXH*Gskq;VjdR#*qp$
zMlKn%CrpKCoaqs-Mzgu1Bx5nnj%hrbv|5L)$XsHrNRZH$rYFPGx3`u&^p9gti^rqu
zdi4-s>~?ZY5Z#-EpG02+g1E`nf`@x3c&(TT2(jIs?A^P3?{|>X=IM1J`je*b8inf2
z;cLQQZ+|Lv>`8pp$nHt*j`Qyt4YX}B!wuzpqJ3tSb~E43erUp|6q;mraC{vFGZOGd
z_Vo&Znp7kh>U?BikiNMUG<5D;vu<C<sX|fESym^8cXphdYg^gYx2zko?ZQs}Jw|{}
z#Uh~!n{r$ddhzP_)R=H+0p-z+<u0?`-9y}Y89Z4w>#wxvbWgKAO*w^BiODDRl_2xT
zcD9vlHRO!`4g*Fyv}kf$y-rtj318>&R|c!gOqVKb2Mwtm-TnbTbQ*THdso~W>KSUB
z9SEh4bU*zQ=r<pD{yWXVf8QIer=I%K8!bfJP^+wf>RLmOXxqst(OUG;;7iy4;a697
z>PD|$xqW3$cgrBG6Oy6ZH?udgFNfaYHf0jI6bIQWj5fU3%5j6;D^f*o=0Qj-3EG6j
z=#I`x#uP!QsEa<=8UtTUmJ`RXUDVVs-`KK^bH?1(Zmn$b37=<mn*N!(tzDtSfsP-Z
zzlilD+fMh4@RjA0D>SOYeJqEpwsLDhdJ7u^myKq>?Lq+IJFg4D$QSXi-Q#dOg3tSE
zZ~-}m3&;_}>0{xIGr_K|xsLkI`lvHp>-E-#osHpv?)D9-j>MtSqi5+hlIHJ&O}z<P
z0<sp0f(gnc2<c<c#lLkWJn}uOr!_Ft9$0>GsA=3iY4nsg#cCT{mN`ko)SDYkhET`)
zp2>Y(>=S`KZHZ=+Io#er`b10i2)h1NoD*tz6)?on@+_b1ztI&dx3pH$0$ON6Ih-d9
z#vdGOXx%jl7p^&8HxM0sY(+3$+ia<gq&x79@6Jw3z!?r2s(N+|zqS0a{>bXymK8Rg
zzGbvw<(9^?ks5zXSs9G|V5iVgUR7QZtU-p>Anjq<CYO+Ji?_aZRR7YWH~>4*Vm-*U
zq`i@B7ZvtkgS>9<P3v4CyVpB8v8hH=bU~-nR90EtMq%vHp=d>NOV^Q;j|rbtHaW$f
zLAM~(fAPoox`eOAE>`(U>;10DRYlgORHrk!G5HU_{QG~PQz7%RwE<-JjKkm87xoJ9
z^Er-}AcU`$aDFCcJ_^IvNO%Wp&#XVg*K%B{^6(b+{}jDs(QsU<alytlvi1*1{U9=l
zahbkg_*Mz$XJ)QPs2`5YHIA5Uv-Ufr_D9&M=QWJGQQM%5dz8~7^-nnO2iZofJz~z9
z8=BK}CPPP}_7R5O0eXR>lZ4JP^h2Qe=eI{0N)Z&G@S?HAIOU;7?JPTCHL&VgqIOR1
za}mB<X}?8k4@HmBa9l$_ph2s~_cHtgjQ57-IimOwwVuB(`WQorwkdY1!+}#efli^$
zvWV|RO0=Rb@o9GUe36Zvo4*>*aX@`m&G7&@crYaQE72YkcCmhQJm7PZ@f;7P7!P8?
zrbRqZ<D3V?V>_d}74I`u>$V8b(XBp9=ja9wx`!3I-(YmK-b1$<&(Zy|)P6DDYFt@6
z?F7~?s%b6w6Qf&My+t@*Kg?6O%;uR`JkLeAGS5Y^0cD<qW1h?9d7}C)iy<tY=OSF0
zC%*H-+b^2uB3zlL@E)6IV(~l|;fkEHuWg9Zi)<JQ_H7Zd;Jch&#K~(Aqls!#1ux{U
zH*nPFX80+FOMCz>g5HQG1+^e*B`&}+AR+=TtWbJ=pUo=8YSAb=6+f-UB`yGeO=_QJ
zqe(mU9-MQ5w8+P7^}3|h<J8g478%}C@NPcUtUYmAj?E~mhkl6eQARiY{9BBU9^oSU
zc}^eUuS)o{3|CeIUqB$K>yb2)!gW*to`O#7L2LTjkCF9HTBDAtu}k<c;fM**t{Y*I
zvbL`r6Ox=79y57!$?(vyp`tR-U>#cJs~!9cVWJEDg=U-4uAA0WHGAum9-@q9p7?r{
z@!K^zVv^%=b4kixsvWHLPYhY{Et!hHM48r;toJroX{L2{qs?4Mlzj-wd{~pO7e~9e
zBsqI}7d(G~jH~Zj--WJ+exV2+q-G4Or)8`6Iin;|&_PktuMq1L=&+>t=_0;K;Sio)
zincG#7z}1_#5z3|?fTVUCi6<aXfhdHx@m29EE4w$pc+)tN`7rB*;>j=`4@=%eRWrK
zY}y*GHXDw81tJT*@kp#&JFRmWO(ro-L`uB;=zoou?f9sNuzyKjKA+>|w>=BJe__cN
z@zRpx<=3WC&C4$*^1~c2hra@mYF^e!yo5i4y6w+lhjh}-%U6pv!(q;aa99im8yQFY
zoUp#T6l=3L905;RNvU?Es4+}`EG^NF=o_Cdak(PKP5mproYk5pqp`H2Bo&f=`(;8~
zT2zd}c|mVY6q51pI2#uF<WlYUy0b|nMh6}+MqIA1Ih(?0jW>wd6c?4E3Lw6hc}IH;
zw=D2A$wFv1$UZLc4`9I}nr}+@Wp0^(|AyiFCH$;xX?4$GzeF^Tb6g8Af_&V&cO?9f
z3P&AY-2!X>goIBj?K%FW3P-&%Xbtj-pW?XY7Hglw59i}l)m-~WHm_C*zogK4p3(n3
zssD}2xEw#B!a--@1f%n>IIiQT3d~Ew$twZhB%Ip!v-aPYaCkbL4-$S_g@b<G+iYGx
z;JEgTJTD1f$l?5asWUP=h;;U^w3B$CM+pRwxGj0XrI|&B>{W!U<WT093m3(O?$kfH
z)-6SPF;808YoITpxhl~;FV7!xK=^->a4sLjuN{nE*Ey~W$?YZlKdW$RKf~I;DB(_}
zJ;(ny6;Awph4J?W$F)x@{N?z6$;YKra}1u*IN^m`acZV|3;Z<gQSdFf)3jzQ)m4z%
zcP@daRe0`H{);8>3rpY^m%x9f!nZ2)Tv`JEc|J~c(j@v<sBlz|k?<iEj`|W3K9Iu^
zRfqszE%B{{_)L5QPJH9|7XHRa!ijGj@65yBW&GrLIuFl}TKr-O{K69W#U=2cNjQ&w
z5dA#*u~mQv1^PKo^mBZR3McwGjzEyozJ$@w@pK-pW6=zb|6&RJ!V>t!CGelAa9VfX
z|D`4HpXcLLpG0aupy0Uc(USc0sLobIS4jSAu#R199XY;5iUPgNaN+~Ul}f6>d2LXR
z%e6sYVeLu&IsOZ&pT+ovJUq?##@k<%@Hfy;KK?Ta|1;~K_`us=S_1#MguhSyF!|^0
zS*=oT7X{RDRQi!CwZ4h=tm3QGzg+Qkaa8K0)c;~!idNyR(;Z=$DqTzc{1tD{^o)`5
zpGVKOqEei!e~gU(9N&^xagNoM)Nnk%LR~(dU(qf<I`<1zKeR5qp9@Ri7ni_)CgJR!
zgwelQ(gRJ5evZ>V;`kP!iR~926(o7vDzz_X?Kw{EIlhHQ^Q0&r$s5PzitD_64woyg
zbDZYI+y6q<PY%DZ1b%S|{AVhh<c;@#X$k!2`8eBmyuDmOozcnUkmGXYc8-%Aa$K(T
z&ga#j;3xC@XVFpKUW$TBd?R_|_+RDPYktSp3&Bxl?~cg)2TuIw_!fahU#TD9#Al9o
zE`g_2IPsac|HTscg(dKdOW;3K;lzL5|D`4HpXcL@|GfQxg!}FWC?^H|aJ&DE&?(t3
z;KUzojl>_>A0Qn3k?@>9Ksfj#;W>XmjpzIU!oeS@ea;_H<2ipojpzIUHJ<Ya2nT<p
z{&W6-8qfIyz==Ond)dA>fj`J#0DriBc}A+y%y7n^gv6f?CO;e}{%|~JH_;E{565$M
zGoWF1Q)-{Ho7A58!`tWVrW()LO*Njgn`%5~Hwh>H@cwglQ;p~BCUC|d-d?twA@Bz`
zaf%#1qsSX@#-Cn^Kl1(}ocP1>-2Nh*<cH(A{iVip`-^bm4{x8_UurzJztnhcf2r}@
z{vw?C!~4(eFEyUqU%(lEczd?La68z9dsWH+3FFjqzYGv0-XIc%Os}Q#K<q8`<!^+S
zyDF1QrGo@lq|Jut`kLUDex4Pgfi<1fQ074?-KdA<`#`!3RA&Jqx5^<nrMjue8*AiM
zRUaJE7HSSI?_M@Au&jG|_MN{s4m{k)i>Yq?c4gzndimb-9o(t=<a^Hu&m~HtObIXS
zqg;EQJZ`JB)h4#}j6Ah66P>A!b;bJIQ#LQ%d6t_TCFR|_#_8@})7Dp$GFOC9qVr+!
z4w-7~6?!RU9#AqTviZ?xO4xB*b2TI4ymj&TiTM?$R->(WcNBRFuh44|p4pTDLwRX6
z`S*4d=dy~LqRYj_LTqc>@c$GmiaHPW4S(dDYMuYv|5SRz+Pbl!)LLRsR4vTe>uj!c
zXyK9iiQti^vOoV#%fs9&P6&44GvvI4n3n7k>I5DBu16j70)bwZObK&>QIo;f6$&gC
z6h@yiXIu$jy{BHpe~lFs6#QA}rT-eoOEzuHm6$i5dNKP7Jk57Bb;9%70K2io*^aVv
zg{uV@aOOk4vIX(U?MO7_sf1`fq3OVPry9`us8qrFw|4`=kMF(-<QWzV=lM&$h@)HB
zEjeY9%D3Wl82&vw@)j!DJBtssG~XMVr0}#h!t5hxx-W7KZJyM6&}NH7$r;RK9h*tF
zge;mH`WewQ2)9_9Ur23o$b~%QHP+^$giPV5IPx<IIjD&XFKM@8^h@_3KbMecO_%Vl
z=0miRtA^*ecT#GTLu7t#NA3K#wA1*hzoIr+k57dQ1+O56QbFsX3jf#T1^I=0!uWVC
ziJ!bB{iHfPe=;u!FI-q0W*6>$2pKq+lYu$}b_EK9Qw07~;fk;i|E-*I?-hzz;t30A
z*X1Iu6txx>#Zp;Z8aE88UerNSNZr9)B$T4c!WDI_lgEuYE&G?Cg#yBPv{2M{F)b{v
z%W28=qNW9%<k3P=*~PT*xU1&w2f}v+9bz9g%E_P%guf6_z4GN@(=QK<VjaH9c=;jE
z`;VstHt!iPKXi#bsD9ai*w_e!0eSF{13Ot6zs;Zf@?w;~vk#64Z)V>c8{9uUv~OUt
zcYABB7f&5_2G@>`Z>l{u7OkeeP5me@B>3Oyg#_+daAv_cMX+TTFitUPSpjMlFL=r|
zTD($iqg-92HTtQnWUx)}miq0l?-GlP4xBIdI$BW8#8@IcJ5_#OnCW^rD$M$uW7*@k
z-kU4hu`fBjzB4P%y?5^$3g}Dxqdko1Sz|##%cA5)2ZDfjqb=8KU~7!Wms<7$N_(@l
z%;(UVicuP{qU(X`p~j1iL%xk&6@G)K*jQ-ymABr!dAQ?Z$6;Z5-fI=K=S5v>|H7xA
zF7zXn@4Qy9dgrqlp(y(){fo)6^QjAz)Um8D%4On-UctP|R8rn0jEr2pN-%dn-L^3}
z7Hw>6jBgr=Me2j0W&U-|d%F%Dibk5chaWf8#148rk$}JIh|leJIUM_HqYtiWTw&Ff
zt?C%u1je(MDw-YOJM=hJeL?r}b_>0pLYc6jUORHdDC*J+H~4RwlefCQ*LFq-;A4_q
z-);Y4_WzVtb_esWSai8?47b81QqM;*E9f`s`M&HN$#hJG)+wy3GWGuY#S0yplb<g1
zv@u@Us^+qnB|cG=Y0Wff#ajksW=VWXVwoTtSQ-dTxn|fKHhIOeVx!wtVf7h>h0N9x
zTd957qyha2T6539`u{wG7bl-}@9lW(NL-?S@p}{HEe-xVWgp=!4YEIs%u10Y<Mjw6
zm!D>&9fJREV*j1mcd+)b#Q1s4Kld7h<PQHGZ!%~<<z~^|j)GFii-X-3#Y@!<72aZ-
z-Q?95y?Z0op-Uz*w|zSeMItIal$4eW|N4_lmwuA9twOk$XDq)9J}>#2M1Ws|0*zFm
z0-qffQiso+Iehk8Km6ghvf1vImTqCb3w1ONYm2}2#1l^ztyxp_<P%SPt9Y$2-Q6vI
zA*Q;!Q~0f$W`gLW>NN?yBzplfF+gtHus!+zY<l6->}2L@W~%(wEj$bp1w5&ldk-^D
z;pbCmZ>4)w_8v=mfkOGS_+jC+E$W?^@4DQSbot9NpKG<T-48tXTz6cn6~r$Na+$)d
z7k`B#kB8q!E}y=5`m#Kh@ELE5T7_587ON&vCes&e<39kMk^330C!mRFy+F6D@#rzI
z{H`Skjfcy!VDQ&Bg&iG3hgOap9PYxi-CZ%^vxWETH?Ej^u=Yf_egvxmslW+>cw<#|
z0RM<R{|+woA`t1B*3pB5BZo$sBC(EL5#eY?bMpP#2S%lyvhUHOq&z)L{qg;@xVMqa
zFz=~9g`U9Yyl!ZxQ#}AL<ix9zJE$0y4TA;{|J*a*xY5~LlNc)b=l`Q@FcC<4Hb&<A
z*PK{AebNw%&DjIX1{ONwm5x2Z_~=g#9Qe^7SjKLL&ZGZQ^4jyy1tjI9IiUlXMrFly
zH2XX8PpYdc_4ql{_Dp7n`Nsz~9vc}sc4F7ehHcw6%<MXQ`sr*|bMoV-o|*XZqmMp|
z&^4?Cerb}|#@`my2j!>Lag!FWizy#cINJX0+ZPi3Ses8iOsC^*@4WL#<%6TEH-)k7
zx4+=4TPN8g;S+pYRV>&d?`r&=-T`fgVZfVzaEoLczBhj*$#pVWd-e<#M+R&rNic-p
z+X5A?q9V~$y~$Zwk$F~A@|wdR=zMhWQK+4xTEQ2X)@rkNASDYswOZ64d2}1sJi<rx
zeOK)Pj7i^Uh6TXbk_MrbVi!%Sgik#VD$GETpDk=(`~B(lKbY?OMqr~e?r&LH@lXF;
zx?)+R)3&j8k74jf2M+vXG#=bzbH_Uu29^cvb20k%8}1MAf{rvAWQo&}|B~<Sdmuu2
z69rkuz86}xQ&?FCy|#eY1M7gPLssH>f7U{rC%ln}7yllWe!rd3+-UUs8}tAD0-rMe
z;vnf0_=mUI>olCgu)6TkV3AM4vjQJ-x{+)6+$NM&eOTIz>lUf}!!>*#{Ccd!Qfg1F
z7XGUT8^V)s0Hm!UTY<B*XPK|V?rp8~T?S^e$PJM98Hunw<VfabMji#Kfb|bi{aEf-
zlg%<cz-mWmp2M7w9Zps?Pi$<kvG6SPrfW=GLe>>?U6*U)Uaur2%{x}#xY67wX75OA
zq&ccR16esN$;uWM6C&%ggW=rzc9Hc3Z<&=r{!&DXTrkMim?T@Iv+3<4I9`ai&s;MG
z^@8qJ=0+xCkTo_8Jgo@n!YR!S$O*hMqMtcN5PgL!Tq8z;!4vcInP30fh3{_<?;rNs
zn_HUO%)&b-rl(I#238GBZH^xE*N424y@EZ(NypAk)GUiv*-EHP1s5cO+EnmAP&sPj
zh7;rCCpPe3Tlx&28~R#W2THP~{f3F3?A`n0(UoWM;q3{Hy(^vW${rjV7#O0{E$H5l
zG2ki0wQ&m~5#&Uw9Xjm|dWC8))0LVGF6a7HUewYMO~rPPh_|`fKO`P*YkN2`_s|AW
zJg?COT-jl6e}vDpN$KS%j5WRNEw=xt<a5o*O!hXOj`9^R0f);lHoXO)=mOqD25s9%
zNAU`H|NhTsMZvppdj50T>jkh<&w^6isDC9d6mbeT!C&1Kot-T|-|!c_(cAEl)&A(9
zhWt@vFF5c@^eZ}~di`5X8zW!hkZu|^+`3T|4KD4IuG(h#2jVh23!LLJcdzG|W5K=d
z;}ef#x{E!?*QNOpze%FAn43%9kN5RUZ)b#=`+26=n)h){ImItx&AG3Ek_e<dXq})l
zMl!F$6*|A}RZ<Yl%MhR*h?WM-6P_Y_nZjac`PE)1!H)bQ2dc{m#@=0B@ePl4OL{)i
z7ai{*C7&EK+<M8l`n#K^zCF{(6n*1#=K~Kx(f8PHNvFBo%VWMT@OO5WBiY2}aLAhj
ze}<60bb4#i^EYD#XPK_7vMl!E^Se&J3VEG55gv|2hQlYam*-z4+DkzDEP8^CimU63
zOUt8Fswug4>6M03+Gp0{$jwXJ50;-BOc?A29sKf`Fd=l!+LJzC(mtELbps2v-<9xs
z6R!Oj1C=Z_r!WR~@qPV8ejZdijZ@|4)PAGn*YT6i2zrzJCrRT-S{PP+B%^qrmHu+g
z$v-gn^Tij_tuWp1-^Wfuui^yBbnGEX$G%MVl%Js)zE8qK4F3@AeazlX(BH{NgwH`b
zn&tOEM<b>HJO=xGgzU3G`hlOFcd&L`#}7+7o}El66P5BWpyMYg9~bSF6N~mD`#ZM<
z$V`=N!7$kZwBz^@1z#uO5!mJTVU9(zgRlblyT+_}2Ocpr0^VORyUPy6Rx5J`a5{&2
zrCc(EoO7!Djpk^uI_$MKnP#4Nrg?h*P;<M}XBiCkjfF(#aI|%OTY63~PYkD%J#`LG
zVQKc=tLGp6{&an@SYC40Xelf*H^p7<)}0e$`+Di5lLEg`jT|SPN{YT<k8#^9pNNB6
zDIh_gp&{cMOuf5o%d&8DEZMnrS$|{PQPq&Db~wE$;f^zv@N}2y49V6+PnD32nC;m=
zxy&Yr8at=tDwINdn-CR7iPGaJ_5p4b-JRA<gNj13=@u9(Xk!+p02kyS#hqgJ@tLW!
z#z3hB^$mqnQ$~D^c{=ey_DtrLePZ><z{}Y)`(DXl4d9Cj_{uVP?E|j`irykOyMWa&
z$wehFQJfBypoD`xFot44K`0dRf*-8=sl(tk;}ZZbOJ(P3Pp$u1e{I$3RHenGD=kF9
zSjSIqZVx;g*e(>bx=k9*^F<9^)7P#|cQq6}uhE#?t#=Dv#y=PzelM#Qj(06N4~+4$
zjhLGk?aB*9yxY39wZAHDr-I#URwjBq?N#aeEiD}nb%*MjTi^scf^!y=!)7(khe8JP
z9u$>Ex$ZRH6odUJ*Ufp(YH~3@iN_(xV#|>Th?YKeskl&E8Yr22?ovsiuGCk$Te$OB
zcyptp(|$8+cr3iB$=+?d37$eu;NSiMa{U^3sxKTBAh*&O^bSoLgKK^@FH@O7oo_<s
zTUD9$@~zpBaOc`|Pc3n(qN*YL8RL_Vd}v4kJH<;DGCvX_ibFxKM=aBu-MW&BBH=`4
zS~L`uZ7>)Rh42KIFQ6o?u&3o4t<$VlEGXWA-oOe-bxtL-I1C&inm(`ng_Lkx>UL|f
z5g%<Z7B&9w&*B5yx{|8WhK)`5Ri`Z$g*#`VKcPj>W(}LF)~~M$to9#2?w|70pEt>T
zkn5k(sf?<qwgqje%+XBdsBkBf$r`R-=dwvRJ&;Z43yFVJky=kw@_Ili;q45bi_%=M
zJBatV9rCfCsb@Nd<oi|jcUTJa;leNUT9Wm_{9)6jQ^M_2!k*)_zt98wnh#ZTW?$RU
z;&yye^C@292HCfy;kCBQrCjI?;-D&Xc{&Hrh#fW*Hih59PJ?#8bVEf-LP&|0m}6#k
z*@l?6-XvZYZEddhHBB84#A6ZhEswFpWpIQ8g4rFeu5u%4bZ!6264Upem^#o?RyuOx
z#CWNhfA7ROvR{Z9e~Xeu{R7K7M$$?8Gtpj-bu4GJ$2rHKD>h=b_e4l;WRGPIW~Pi8
z`d%+eA(1)&cOa+2XJ`)_b+5(4G6@srkT<otJ>!p-+e<P()oE)sjQr?FzMxj~FIf!2
zV=PoB7ydo>?fI{%D?2alydsZ<@eI`V?zDCiZSNN$;XgonOQMg{m>~^_HPp=D=gJWU
z$0)Rl`R4%&ZD371>biGycJAn|3#HQ`Eblqr%Km`~-_aQ2j!c(p@XaG|#-i*;`J~0-
z%E4eEPA931llS5@r_*L326pB8d5;7S^pIWnlhhZ@`W|Xh85J#gU4RQ#NGQFr#0e*-
z@lXSf#YLpBD+^iNs(T=qHZ|L8J4*iJ`I30FHaOy5*Eq6&u%Ai-?=TpHjq^1==XRGD
z-w0U0zmq6~mZ0~%_m7FdvVhi{z0~MJUT+BRjqBGRw)SN*1J=W9dmriPdE|)vUCEOV
zZ@7*Px^6rF2q;ECL`3+QtpzmE{URc8BZcAGb^rM7Kz(Xk>fio380@V+ckWlVA*wBk
zeOtUIQRyeyWtIqWT#>Y;{CB)X6onYcGO|zyH6iT78aW~YBTH76IRY#uLKSSthveIl
zB1uAwN?F?~98sq^P-&_*p(<GB;>9B8VDqL2JNK|6QlTyD279embM{Y~$Y|j}|KuRP
zExvH<)X#^A3R>G&S#<fof(rV|<VS30NqS|`2@=YjER-rl;u+c3zv79J#+9CtU~M>F
zdgg3tM~$<|*cIMr=-j^^3*~X{as?vu^<k@Fm%oxmrEgWzHz~ye2rK@M(^&z18(b{l
zp4?lYir#68!W90CmZ~xdNzJdnN`z$0TT|o3zsIHDU(09``Oy*j^A~TDWW$qu9bcpR
zh>eRoeylcGozJn_)%1Nh2fk~|BSEl~d0UXjM??|93fhX29WqoEl@;rRZ+ZECdLymF
z#mPEhk29TiGNa_E>0MYQZ7yL?_x{fQvD36yc|BaxDOQU9u>C~~E$>z`9nw&#%)X4=
z|31M>U6VPHI=z0K_C99yDLSRE)r$i1g7_M1Vr-3H$1Lglb6f(k_8Ke0xgGD6aQ?kF
zvhV-G+K&p*mt3D|jGz;`&w+>|*L*?!Z^d(&Bbgsr6kTgjv{*0RmP@m`e{6#oc;?Wd
z%nL6>INu_^blN9eJU%vdd{|Lvm;>aI+e!_5cF<w~?P=_MoHyAa>wW=<YrNbjZYxS0
zlPeK_@Q4+~cDH^)xP#iGwG-jG2RDo20*gMpP4h#?mo+bN+evTe;hFxE<5UTJ(@gd)
z@=kfBG)RvUeP9tM+LWl31}}F1{wuTMJIANzub{0C`k(Sgu)pJf+1HfMbzjlp9DB-m
zCjF&8=acY&6|Zxed7bbX9CUExa{U+FPQCtoVRhQKwBtG6VaZ%7th6ubd$un(UM0T5
zO3#1~IPEa$W^p3LFU-yR9_MiCi1AGSBLDDdHY@b%f&@H=UMU8}ZKS$i=DU-fyr0Lp
z=lEim6Fqi;PWq}0x7T@52JFBtIB%22voqX(qr=7Z>m(1pyVK-<G3y4--cvk)hZx{q
zz9Fu7fPZpq(&#FWB|B<twdQ_Ho!#>PmG(BkO&?jlsQRxjf5@`FCF{%jmTb$iEz6QW
zgl%jij4{R-VT_|VhB%Hx9LFIH<1mC_GYpquS%%3lESH)~rC5f|rdTe;W!c<W9xuzX
zsk~HXUn(^-m&eP@rgFKdY$}_V%FX8OOM&!$r~iN10x~mq?*;3t|J|ogpFVy1oYSYf
zFI==9*p3Jtery2EM8>K`omG7S&^6G_NRvd=g0<~FUxNAi<qL^&6K+2-l_$=<cIguP
z^6l_o7=Lf)HJA7Zk;;+={ms6J>qm!eM@pa^oH}^v5}XkSmm%$2yaX(?pi2^1a9;!t
z|5@>96#EV=#dT=y$z!hvaKbH)$yM7fAM4u(9*tC5DivjhGAC1fo-s$w_{-$)?gRz-
zuLetou#KXQVbt-BzKEi`=K=L>O!xBr8k%JDkzC{QkMw=W4$<Z#d3IBhXGcZ3h*>B?
za+1!!Kt9nfr+n};aJvT51?lyWJ-CSs@)R5_$|Bg5l<)7Pd|IAP@vUOM5BYB{Unw42
zvXj=V%>2ObJ*2<G%in+RJ?bGDhk8UgOyxy6yoTg(F`aI=mD0Cx`7EBARRKQ&Y4XLD
z4Qc&`7Wl2)e?a?6#W0imPR-KvJ+*3EZ)8<ss(1BZSm&{<^Y?XX`#S~(yBANjc-_fx
zZCy%}npv}HyQy}lv2B$@E?1YUPgLmzxl*mHat0fo9ud#Zign`lql#5B&>a!@^7n*8
zIIXQiwnm2i&7=X+85eq-rUZ){14dlxuv)RSr1yi5#JeVN{K^A<>*bR%&;U9aXvV15
zXl#aSp<$m6ha&Z6ioe(U>35ItV&jJ9<_(RFBTY>sjRq({c<p8yja+_E?_lrFygl2r
zZBJw{GsF|}%}@LvNcdJA5||}CoJ<WzBEzZVaCpuc47%OHp!4gA3DQOA6x1{DDwad8
zV};sivXYtxwFs^n8vm)H5FiDOg7lz0w9+?{cnEA0$)2LG|Bs<I5;E1Q*Uz-9iG^d?
z&XK85m$wE!ltATA^@(6tOQd0IwBf0Jjpz~GK)g!NK63jFb<TRvz0calTL!i`GhI!i
zEt}WY_qAH=Ef)7+eaFtYOLe5oV|Dr7bcf2-$u6xMI))Ft`89f?l5`AZ$*L0QTGTSh
zC2C>Xr@r^Sr|4z!nTmg!zxcC1`?GUr|LiXgy2rEG%?`)rY<3*tfXVvs_OY;+=3~*$
zrPf02?mN7c91iT?b%YJ>taMrOx+9bu;|EbGhxknJ&F2(DTW>W7*1wQx@Ylwzx%f<`
zcSn0F+hAK|-nnDVo|%S*x}Y`J*3vrF)4KDCs9brR;F68;Dd1upuh<w|cgE3bymOZ0
zJBrS%uQogv7;*Lc>f^Tl{?X39+E({?(-WOfy*P{eiWW7^_45v|+imk1mcrgnyL~R)
z@aTB1QK1`7r#E97708CfNZkuQz&B$n^*qTyW1F`P0Uo3hT%A`kg~qOp=fAl1Yg~e)
z8}y8OoE@(G!DCBocmCu{#|U@u6L8;4{;B(L=dK_l++!uy_uY}_!o#lBzQ&g3P>s(u
zq+?5W%JdFh>e2STXEZn(y2c-=$Kk_<W|ldgQz`1V_OG33BWy{wQU7bm*TA5|y9LpS
zC+ByJa3iTWC9haa%w~yJs~x^-M_q$CHnFy0XlY>J@!HAiq$Ad+w63j5Zf#A^Fk6i)
z+H45LWA6O>{^1wKpa0XLX3wnNv3|PNQ@3?sV0$at8AZKcpq;dCL*Ygk!#E)Dl*-fJ
zmH(W*nOg0uR?fWglTF8W_CEKmKY0`*4RRN@K5<Kgd==nYKEB|3kfzxZ7uoU!ui#-L
zcS%rCE^ISR?~`3!jlrhmboaJrntV;&opT<o*5|hRTPj_Vo_4J<u8EE$+Hu&SYp|t#
zQ^RAM8U`$invFfJqfP9PDQxxzUEbPo{<rRcKWNj%Y{4+-N%j%p#_1{gY;kIiC<TgU
zgA{_nmzTw(2Cg+YtPLQjSLdjU_do6-LN@g&tQk8eWLhLKF1mKxosCU~P~Oy1JF9c9
z&{3i;^=JZe$O8=M^y(sQ$YaB8>4!#j{kmtnyPsVrzFWLTqu0XUH5-32H}~@Jh9Aw%
z{bb`2cXo7ilf$uTbTrFHw-0@mL7%}2CLN29?bCc<v-fCN-#bJc49;aA0TZ%b_^9Tr
zyTV1pz^&%ky50SQwF!*r*-Y<aZHbL_7}Mi?OlKb$(wO6<5sheFXk+*ddrYta6O}@5
zpx@G{!E*zD-VSPLfP+e5M1sg|cOK%lW2)NKo%uX_J=yEkmU0^)#?hm9IRtYV)qvj^
z-vrUZA*S(MA-l<~pAz}`igd!bX60mYiX2C*G4i6IHJnU_eYh-@m=@gwo*nhATE!6M
z7+$rip}lkFok>$)prx@sF*Y>uM^rPf38OVEMJB806X_i4ed*{Qq-QY8o<(gTg||W`
zLn)Rey+YwdOeb;5C@{C-`|mg@eV<KrL1imBDgDHW`%g+I2;+bNHlr9UD+1VzR(VN-
zrc|~?n`&I5#A_#TFT^J&*zFaH2z)GG6<&kZj-E_~x^c`FcO`&2BF}2&_kld6GKcD%
zUMp_joC-dXPEEGC8tUxw;o^Dj;qG{S$mp=z4CD0)|42_DiOYn&rRTfTJqSbW3b5vN
zLbjp@x^YgtMJpcInk0>=v>BfjYdOg)_gU;gBPx$cbzTi@kgB<_a`w?mJDF^V4amMi
z3^|V3Fotm^y?U1q)b+7}U!FMeOY{|<qX#dbugK@CRv-o)pSXzwUZAgp^E?`uQ<ji3
zCvkHFam*`;<c5ub=4LQtAl}THH>_E|J2+(Sj<RT|K2GI_SRbo^_Xr%vqls1baoj?&
zY)i1MZJ71(qK(1&H~>8ltWZ0!IuEQMrGZtHu;SSE;iSjck&Y-%q&F7R3nQ#Tb`!Dl
zNGDH<Y^X3IXgLoy^PJ66yW)`CU$L9y!NIA{hy%91e&|s5{Cwi*($V<IlhktL__~-Q
zg{WooZanWkl)&To(IvnJ40atkLJBk$Sj6d!V8R;dH+VXEgVl;wes(a8{TsMnuoE+g
zj9g~XyEm4WM49jwyTTG;y4M_Khu@l?=d$80;meYA;jQI#<)xBz<-z6jvUxF`;T-0&
z`TzF~mMB8P{U0SY+(Zdr8kO-HAg$Ut=4sh2>^*o@+<PFq0~{i<-K>|LB1<pzfaZH8
z(i05!MELvea9>?rUs!ynHfahA>|^X4KwGVtQ8n!Sm#3ysqXrT19}6#|h8~E3H<43T
zunXD3hcy3UCN0iU;4)VK$bX2Zo4(t-`n$1o%YXQ&J3SJ^zmYWE5HnC1W(nZ~DrFU?
zU*b#H5O4LYS<^G0Y;I0onfvX*ga7zsbo;O7p8VAglu4jWKq`arjgd~Z5gYUT^C)>G
zy5m<*&i!h8^vQobc<{F<lP%1lo}1)*!3n0^bDRBOdis<+H+gSjl3JQT4wICFuc%;8
z&h+#LrzVA0C-0u49Bv5)coL(XbOfqeJSUq=U%=%j`mN{<XbGmK&(`!Pm7(V5kW$&R
zCZltj6cPMWn4G#(y<`5CrdoR=n-LmoYMWa8n|mhVLK%vtTVZ>*rW@9W!q#Q{hJYW{
z-X`i+q!WtT3Q0S7!1!S1<il;LsGEr5Pn1@eDMjTJRkglBswz4}RrPEpglZbGp4Dh4
zgvNTQ?b^aLi=v;24~(sH?WKiFugGWbo~CEnf=YHn_>4b;*Dky8wfy6|Fl`yEf@#((
zl|mfPdn=`cl2YgsBg#?yS$1Jz0epHfKX&g;b|X(5;%2Ma&xN;WZ3a7CFn&|5RvPE(
z@Tp9C(eZ+ILi>W_xmB4gTiyC}VzX`UcWO2#o^E}F>W>sILHB)&&#6Xrn-u~xWeywP
zta$a+io^6a%D%vt%a`$%M+GY-urgvzQ3?LWi&?3xm6u&E&tagn7I8Wv9O)a)i@w4+
zNWCjKOB=>&sqP(9P|tC8N0(XoYOvYlR+vq6pf&FQMbBBe)f85Jky`Zcu%&7o)?im(
zSFkQnrJb4R-d;OmZMR0ls|HquH&s+V@#ih;f;G+SLN&Q)Y`msMU#+v*Y8(5T{A;ZG
zx|*ShhMJuwr(0{Q@y1p+ZcbDOt(j@|sy*N~8fqN@mjU79q{Cn0@x5}QHLcz(+sG8#
zdm;Zhg2ND%866dF-wUyd<kK6*AFs<(L?SqV9RUY~6tKY|Dc4C76q*4}4#f#53e3t#
z4@o;}pm`$>_%)<sH3I1o?13SPOZh+K>0<tf<k27x$<IsjhbTWV)<E-k8|kFML;i>P
zQsToiKV6=%tQ}o2X%8!nx`fZy;+l%??(BVXmA|#spDxb)NA?Uf+v}a7fITqY(G(d@
z#@DojL)Mb19~=)>NuXyj3v*LU4_P8ynY?!%90W@OazuKDF{wW>{edt!d2blcvV}KM
zZZDOibCg@n*#py^!j*gHr4jxnN{Ua(B?b9&pmS27qG&5guv1(<k$;@uO3`W#Lv7Bo
zf${MV6A4L{L0%y@NwcNp++3b{^^`jSKk~py<QC-`<py5Zxkl0vcwr<$I-)&Dx;U99
zFClbIE*be#sYOW2PUgpWn;==Cjh43Q6h`ocWvOM7o)+75YLaD96!Ick_*dLUc^qqq
ze!7u<<vvO>XSBkDRz}IpB@P;ragqm=E%h(u+S+nU{l!n%1O2<#@%OEr+gjVVwKn(K
zdbBP>v>_U_)*6z|)n&2qeIp}#$D@r~_Ku9~8;=e2Esc)u>FwP!I=a+1&^(du+S(kj
zWvcZZ*ruVc8nHOxbt=WWS%w++58)jyM!Kl{elw&rm)5@*;Wa042O9qDhK%2D`2A>(
zvITorYinQa*sGlmEAR`TKVBE!!CdcvXAC-x<T)y}-o!xy@?rg*&l+kg#iB?Pi{JlQ
zdoGC!eZ=>kjT?LLGEW6!Izyz-X)|awT8)7v+Hzf8M09#jZd$Wu6TOl*yk4EFe5k$s
zab0-@CU&fQu{q(qa1OICY&avl#XP1GkrI5%1S~)7RYCPu^Y|DujP2bUFeyxdy)zm`
zd^oPqu(?|^Gq+ee*WI1V-yB^!eR^q>plVqTP%lB_@1!=0DhC=C79HiwqLojGl2a1<
z6dtPdXn$9`zTRjt>gpW9flhCiC9VtVH5EpEq}K20Jn|qqx%fb}SzBJAHfW-ex*n@O
zQ>m{|m6fY?nrO%ouhl$&svxrf(>H;sk=7$I!X83F@;y)wJ;>RX2djU-ak!~@xIWmf
zYpbwU*93z#daEYcfJ;a3qmU*zluC`%)tFXSRz~U@!dgu)SONY;^u-<Yg%MIS_|4d0
zF9_!eX}<(ii-(Zt+rROV$svo@>G3$V4_3|6>o$#zjs{|lSd<qK4>uy8hxR`pL$|Gr
z6`Ja_aA|PgK0b;!(bDCbDvWAOfaLL@eW~1;#LX#0RMM5aq}{Nq!$%i-*ByBEv1iY1
zYsh5lqW$H9ajkpRdQZntgDs>HbaTyyv^(K(^~??TEKPSbkIl6Q#@vC}j!s;`YSB3D
zA=Bm9)Q=v2`Y&JXpZeL;nYlIoNWdM~vZi@5Q*U+D-x;dk(AqjZ+?bgDcbkXiGd^>5
z&SqhQ2Fre1L$?ELhglx-9{U`?+3=IJQs4o9wPGU{UU09`%MS)O;z8CjnAHqVnx+jo
zyhd`G?6hTvC1>&FG`TDD)AMKW4<A>qTw$JRni0t&DOtHj@6E7Txd6TU2dH-uIR@Dx
z^B_t=tsoaDrC5-X<$3;CO0l8T1W!3CrFf8MA20PMrFnSDvE@9tjE9%{p_CFwscD|)
zxRerDhWsNb#fOv}FZHsNVq<>{_4W=hJP3l3zF-r|kTQpq?-x_pMWoz7${{JGn;B$Z
z$;XlM<7LPO*=?S3LQ1g|l5AG?OXLAH3VlS4LLc+M8sgO8DHfz;c^*)Mr`S+xf~SBQ
zJjH`N`*<l(qa+W(0X3vNNyKMTU7!X}iKEmsF9mAwl)y4%P=lxVkdou2K#f8l=1W`Q
z5jKO9QE3*3B;-+naONJ}y?bW&?w`Fly>H+2i)bG5-9o;0j96}Y+1PModYWig*pKv=
zg%D^r3GdPOW#^IFoxcM+I0EcIEwN^#+~z5u7HWnRg0?ivUWToORWRtID>~7Aw@F=Z
z9*#~A4o*jhn@w)F$yi&fi9fn}$Nc<`)sM!fn)~`<vA(`$U^oagJ?zkZ-n+At(I&?Z
zrX5xxB4jVM1M7n<i&`nxsKk3G%{r~-`q=u$xS>{`>CFv{rMxqJfxdQ2(rWG<TiX-e
z6rLj(6xBEZ7|`-c_2`hFyWj73^w63JbZFJJ#1_YpAz(2%!wt1Ti^1U3Wc>Zj!QQal
z?g~cNY9f(N8<uUX=8VCj*PE-m10F|<&t0dlYW4=`1`T*&QTaZ!P)TdHxHu4_SX}Gm
zaWcmTu-D&r<=~ml&R5(^!=H?H|LaGiqbv9xB8hN6zHp3(QzQ_$TdEXIv!m9ewP{;*
z|MFvn#;Rx?j$}j(T}GR&OcS^{7ZzB5SExHcc!3_1phpEs@DzYbTTa!YS-LWdtkiR(
z%3iLl)oE>>&D-j;t72V-=IUBgB&gIyEbV=v-dC$C{SJdIdgb{?5uoPM4Oi+~BD(6;
z9q<dF2Ox*oG$^4#FT%S{GdN;}7v;7F&p8&u{TTAj+<1JhFZK9St7(>@wMy!-8d-o=
z3qgeyV^!*U@%{!m**T)wY?b`#&`PfNZ*8op@n$>IV;;M!Zair)YO4$mrNQR0+ijY@
zn5VTG7e2dNJ33lx8nue*wot5($;?I^uBtH@|JtTA7^{pf1FTSSZ7Nr!meE8CBaeE5
zS|sWW$y8}bBK6AgdLoxwueIqVO4S93QmOt>Zv+I~%qpVV3J@&+-u<L{{?U%96zJ7m
zIE(T45&2uJ_wVXI?W(g_>Rh>6zrS{>aqIR~tF~`#46J%_p#Q~g;vFAK-j+&+CGUpl
z-QS<{_<WumFFzINezAYx#Z>_b0+oy)GUtkn*5D+1i-cZ~B9+Pzw^Uz`*d@yAE-cBe
zBQN-xdyx73OX>$&pS0E0Gr0qKLy^qk?kd02U+W5{T32nM8Ob91S2m02c5wz$kj#az
ziQ?kL8HiFWNXha%Gy_qJ4W%Y{3e7;2;z1tl7DFkTfmZTR3e7+~4@yn)QZxfmN*tx8
zc`3+To)TDwOfwMW@gXJ0OVJEODc!R3@P2**$TXLTdCtpj^Aws(C?z7hE4u<KR;~Dn
zl;W1{lU?U2C#4iSG@U_MEGosHL#9$Y=hzPZ`>!xhBeGI_j@H7X4))?^{>o~F8FA)V
z!%Kkyv47TVI?$XPpH@T+_4fL}`ta%v(-jIsqqa(49(J+0?nql_IhK+}%+{gNpL-0J
z$;$Gm!lt#Lo)GF;kf-5|g@Q$F3=IQzn_B9?WpR$h$UBxsy`mzwqzE>4t&Q}oHaM+j
ztI@>fES3O!=jkTjqw70I>!(7oI<IA~7MwwCYKAR{IYMlKq?C$dRI;|N4Nf(W#KI{}
z(r9-0y$+MLyjj=9=5k}nk$Q_}SQiZhqE+hQsv2Nx1H@@yE8b<eBBEe==vN3L34vF-
zhw6Gf_HdPIX-Ao$i&kiiYNOfU1Zf}Jl2~77tWM146K<Vls<LWH=MOiBPy^vizOfpT
z*ua_yPiPZ2t5>#LhFiI)x!JNY);QGAvf3k;Un{F~=)H!Bv;UE4Q;pHV=ITe1Z6gg0
zLygsj%35<-MaF1+*X*)_GFoUqIFE^9!pMdxxz3#9&gX>AXcWenHK?&*FIu%Rm12vZ
zPsmxYuTHJZ3WCM1$bC-o(IopA`p!+r#txcCQygc>nJ0a4x?`^3tspg-Tf5>Am5Z_b
zkd&g(^cSDM66y`bs`N&K(NWhQ)H*f$VuCQ*uGVYH%r)`V{d1#UZ?(~Ab@<I@L`zp{
z0w3!F?mDxg+-}x;HHykcXMNHxSB@(U<(&y8FRQ31i^P%xEE$cOVMBeUtEwzxa!o~b
zH7F7SMP|^mCQyX)A7?<bxHA$b9fX$3^l@K%%TlGe3clk-_Rf5#-nG8x?Q4!2ZRLMK
z&p{8Bos*A)B9N4Tp_g<15L+2qO1pwV7hWhjoWH_$d28$*j~xN8Lg9U!v40*Vb+p<K
z`bnakUox(uV2NdqkJIL=G%2gf^i@mNPO}8@Q>A=@$;}QnkbeWc!@gPuEwyVO+J)JU
z+C`c?%wuYgB70!(fdhR`YReb9j$Pm78|C@uWN#zC7Wq*znn8XEGFXnMV@s846?Vjc
zwbpjP@$sroD~u~>ry;0^v$1Y+Spl0+j3h=l2Q^-zp?di<w7py~#eBX-t*OO_TV}K-
zgN?rtY3faGr`_xo32VCr>e_BWWQqNQ8pQsQYAC{{{+X^2Os%CIM4(FhN0M;dm+;`o
zS{5_JnAaMHo0^6j#P=Gbu?8<TS2vPOjnvnVq>>|bQw@P&G#U&vkfaRBK4lBQj7u;w
z%Ei{x+{?EBKt^)C01_-TT_)&TZ6v+?^*&WZl3<^*cRhM5mtMYs$=gK%CbinhVRKts
zqAT~ZQk#j8ahu+x#{Wt~h}d$t(_gEU&k72g`zq0mELsmB1bBanoJEd>qRK4V=rsEH
z%=|;oT6^49uk(cL?&MIqK5a=D{MF8g%^0>1vAG)KkWOdNXe%_ax|Xy<pV8n~Rk_+0
zayRv&whGjykn8w<BybOj7U+l=`KUmWx0m}mqjBxb(2%vdtV(UF#ssio)xv}#o6XHT
z%nT>Bml57RlC(Gl+9>iN7N<BL7Uk^GRO^xkmw7Ht!!~YZb3?0saUDyXxAIpaI#P9I
zWuV0z%9o@3@_`n+=lA&Rg3Y&UCsFFy+}yD|omZs;_m(3s^!nwzqF+PqN0gOXJw3X|
zrjhG?Qvrj#%J$6qBQ~v|CEIlP@a*hidgZSyPEIaL_09m69<Wk~0OW2V8gc}uY<Btp
z<fcKlZ+d3G&5h-9ws_%{SUeuPcqST;N2xq!{8^N@mr4SDCdW!Fp-MHWvuRA_<qB(!
zLUCXzg#G>sWu?l!Yr)a?uW~u0w6RLVy7$#I*ljV}zWlX*xa|=K3XGd2n!o^n;tPx3
zzJGxUFa8l*?7fu3ALXk>zEOEU**nIS5Rw&dj@A6VXnW)OhUSc|QyVbVcpEy{;?Dx>
z+M2p+efA-}#b$T5g#J&A4UAT3IbT91Vr2xf$BIQ|wP{hecwq7K#rNK0zV|4a*u;EN
zF06~Rst@9s_@wafWH&Ineob)XwA*HdjWA1qzh3w!#+){-QSH+;dfjbaChVTZI(Raw
zQjAvUZ1|)RS|<A^@WS6<w&OMi*JbVt5#{p|T(mSWpw*z3ze%h%8K3yJU#U^aRT`CV
z*LIVsH-Wfyjl80~>YqBAYZ_{q>IJjcYW135$ltAv+M7EDt12}Pv)Q4ktfIDqgP~!e
zR@hF`OrE;$hzk-Cs5OP--p-3txZ2~;`3w<PzjJ7^aVTnZDy9J@x~{R>SmCm&D>Ej;
z^a$qkNvp%`BH6=UV&gcAo8P_nfVOa-OuOE&CK6fGAilf&ewQ;4U@wIS8gLK2_&yr0
z^@Kv6+AvW}FB=vrai@-lVv(>?#ia$USV5xGl9i~AVBw0(xT1t3!p&|;<D!M?t}U77
zc)U47zYMxnTh?0RwnXE0Pkp_o7Ls*K+KQdFZI<+wjLC#dmNx9WwWhbMttdA>-WU!y
z(hHp7E4+;RW<C~I3QMA~#bqZ51q=#N8j6cf5Q@KS*d7|H>#GfU_$t$;b&E|y?k$cM
zxc7L%hK&m|%Ajwz+wO3gYF)m@p6Kw5Zf;iH=-FYjS=>gK!yE05t=nnbNn;@fatMfR
zK@37GUms0`A=D@wQ`E~)y=3x{euJCHfC3_T>U-Ja1A<cB^+a#S)<Dh^@<kQG@$WFb
z`RkpAp@gDLu>(hRX#1uU_4T<>xT&f}JEtgDx*F|@<ERxP5c>xAl1@xJ_xbBSjwO*w
zuh&nWJh|)WrAVa}3XiQaa^dJMq#PTKk23on?`n^y&$B205q=&6R7474_v|5R6Rm5b
z9f?F+A^}N|;#0LqO7im2m1-u0Ec+#?%_bf@X6s3?wjTSBW*WEorVJrl#`^c~vOhm<
z&)6fnsSTQEpBYgoHA)PY5#_?S!r`3WJe5V0)K#kNgxxX$$s!<L=a=kDtdiJCyH!fE
zMZ9hrmD8a>q-oH#({xS{v&}4ZJl>lNbz4TPX1%*=z&YS~Iq9@VAJHCqcJ0&sl~dak
zF3V1X@?R9XiuoFs@)0&QT>I<l6!o0H@Cw!}aV9<NLXmZF?QV)1+lm-pXeLr~xmQyw
z?5}O9G*_A{%yzx1YRzz&q8y%6eMfa|nOWPVR!u!)RtGmtvoh6p6>`Rm9bJ3&s6xY!
z)K!!nkgGcr`(EpMJPkRQD7=iG`xx_1E3Kz6pHD5fSdAf{TpUESlT;n2U=^(XVjNMk
z5s}B6&CiettI>F)iseANXq7RhQ2(iR-6QE|)@qU(K_RF$YE81r5w}cLR5ciDwNrtK
zIG!MCT;tJsTLgjSe^8-hhuFR2FL?fR&!b1SR6V(av6<&8g7#cxMgAvBt8OCFq<DOW
z3BptC!Wvw1)&go3`Mgo&b515uji^OTQsfWfbz%z(F^9<NzEtJZutBbtZ)z7x*!?6<
zv=R32S3ADmscj36s1VyeqC(O#%V#UBm06b;{H}z>Nhee71^v8`(RKWGJ!@-NP6`Bn
z(L{>jj!OB9rc-kY*DHtdLPq}?joCFdfPX(7l(+5`zbIR-;a>N1Ax-U{dX*7Yc<QM<
z`=nD9?Nr^lrMYvbH`@EjEyE|@dA2tijiP44fySH>5*s0X6vYS5gyls|g?Ha?)|*>H
zaDtP>?(FP*BlXzoijMZm{;8z<F<pnn;tG~cvxObXpLy1<nrj~lyd~&5JAdoJIvd^P
zgVkedp9|}Qb>Is%S|>*hh$WzT5$|;9f!r^Lo`6Xbe9Bb^zm;iJdi70DZ%6IPa;I^>
z*<F6bndox8W?(j^%P1<CiM^*#Fss1+@9%skA7q|RC3ECI`r->_&wtdL|A1*sru>(C
zP8kfR@B#+Cz(o%!K(StsYOpto-5chjhNz5_g)kA)+|(wCHwq;GaNV}}aKuw*#C`Th
z*RI`NA=EhxHC0xZIp}_co!RsFBOROS4Tf}C7J9NOzvPQ9YIRd4udgofQ8r6a?nN5A
z5q}(|o4G|QOO)mUha?a6F=iIO*_eR1#m2-$SRy^AJZL|(WL@3H602=547z986Hl<&
zQDfL*37JOONT;%{Q~CX_b-j>95VXAmeQ&WdYK=0YDBEMV|JDg^r+FohQ3~INlAm{h
zhGH@iC4#7B5Z|@x!QxC<J=?KwW^qH$lqKqJ@9gO?XxiWH9$t7-v+>Z>4_>uAHCx@2
zGg+Q|bb4AbcQpT2o9;=HKO}8spmQ6SwvwEM2G55UR1F-s1E&}m46zcty?FO7YdBhg
z)j#(vOATwv&6<~nFItk#@lF0mdbU5SNIzL=ulo1-|F6>NarFf=&UJ&D`3aJ{sw#8E
zh{|M1H0Q!C(>aSSi-fFBS5s?uFF5>gkkM-T%a{Y+7yS!T+r`FnQKTnHMDo{S)k6UL
z);!&vetK;#w9YkUvAJrddb4NzwO;SS6Xhd6*#77bwp8UNlp$}<R+j&s#x=24Kg%v;
z9yPJ2O|+MM0A%<zxE?E|G?FBlg6JNsnTi5LMVj$I_j>c0;ms8-p>Fo_fyT<gwPhW3
zKYQb)tA`UKsv6_rY#^O&AGZD%ZqLXHv~OfD_eZzE1I=HpX6PjRMP9}PSvi=9N8@h#
zyKumL27j$R!k;MQ?`v*3hojASy}4^(INOZZQFUK~psDa^o$8}M0oER1eHS&*-uyN-
zWB|Ryb>5U2wcz#o9R8hR@1LU2r#f;S&3OIgzI~5KU;l<EU4&D{J<TLd=l}<X#=m}Q
zm>oZrzsBBY=SNi8{G<@V@DONpK-<|1`2)VBIiJhE(iL~`iFxHn2?(LiYdt$x_dlJs
zzww485RC>bheni*BTD8CZ|>{c6pUsMvB}nOGc1cj7Jh8HTLzL&&05(7mYdF>(+Fqp
zO~L<Hd<uWyZ^$3`;BQ)Sk&mKun6K6;@cA3|5)g*(lzk$45OEjF2Q=R*J`mI8STrGT
zBudiVZehid!Uu?Tq>^(y$Dgp*e`k(Kp5u=hU;zfklDw0{I9j+X!B~=DTwjI}d!QDG
z9N>2p_5;Dd$_wtqBRu|CCP*-_LdSE6wGgJ?4CB}zgmFy5bfp&V9p<gw$7?C(z={X%
z5hXmhx0vU+DCQ6h%WVlg(3UBl<A>~><+e2Q9LK;jB2C3wekfr|ZAm@=L!`&?k{l1V
zR;=Ym54HBew*2U!);@?wF^3y?1UMeY3!h4u4)M19NNNjV8h-#&5s#NwFjXAlIex?F
z$qFYOAsEDiau25qajDqHw5D82m!pI+Nq*TRw8BnWS>O^LVxI=pyB9C+yLfT(%F-45
z@qA2+^A8TuXu&=evya_kS}``ZNw$;yvk>7B#3()<!gp}Xkt4;woy9Lm0R*3{7j<Uw
zO|;VhPhH~FEA<nio=?MVZQ+s^)%y=EK?=GIwy?S4H*oZ8vJcrVb{XyW$`)jwA;l*<
z39R#2QT<A`gca4VWQTd1r+Ay;3ke3>f@ZbaY_;Mn%m}-6_VD4eQ&)ChIU0{CV)6U)
zrr^9GOq6CHWn;Id#9T+O>?Zl<1DS}D<rMK+0vD|lVV^mA^bFN;`pD5EM+0t!JCMH(
z5<XCJr4|y6J}Sg+@nT{bl+C|SlwT=V2|C`_dpPq`>cRZ4*{#=>mR@;fX$c=_PYnG?
zH^-762*LQGA13zG!#_P5iYlTZJUyOYTsVAqfwvte-U)li=R|e_ML&3#BOko#=1lfv
z-z{d(?BrkaA7$K2%m0XH?6Oawf4@dEM-Y33mRC!bV?Nl9+NPl2WDHbK)QyHcF?=`q
zt0y9xKCw70Zu>yG8K1Q^_(WgYWxHT``h<{DpuWVr*q7j6zK$ykV*iv^&-Ulfv0LEW
z{4e=xrECVbMuvDCVS@1B9u4j-;hQQX?<CESDjbaoqeL`cmygMWO(LxAo^Db&Hnqh!
z#TF*pH#!uNM>|v7+B&B4PdFM4hE|8y<zolKjV*QVRStXSOj}PN(YB@espsP%7|B!V
zk@@yhZo4b&v)SrZEw%MAUntl`J=hAJ$cK?!Nv8^>M4w=B0drXmC3}OglGG!P>bv0@
zXG*7w+T1OTsa&dk`zmjbwXVb2Y+V=4r8e(OtUvhoL0{u)mo=3Cx@Fs{%#)oir(CTV
z*krNn3`Ev`H~Z~N+o_L2g&jESozJjV&?ZF&E~;CuylBqzS|2xh%XL-Okj-GI-L_Ty
z5v-vfXH>#IMcbN@Bge<r?dqo=$pQK?_<TRrVkun3y&MVRQ>7eQO7Yx3X!*=^a@cu2
zr_v~JM2_O*;;kWe!aXva|IE^8wKiIW19vg4V*g*^uwa2MfU#w5Gs?l>UNdwYui1Iy
zb#^=d)ybc-(9#T)f6L5q#YcCz*I*cB4x<cwZHTI*gD~{NLi)m;CE<&ES|NAu9C|<n
zEdY^<@Gy`S0)xA_Arr0~B6x8ri1<Uj;%;N6px>>tM>EfvG&W6-v(<`Fxs8w2<u=s2
zT}_7W;3Moe+x_ce@z}lFnT)!sY)<de{_k5ClaFp%_4uQ0#`>VEdakyWcpz5z7vaAP
zKY@OPmH3qyD!8A`UY{9NVr_<OEbIhj-Z*x>lCzrFL4}9xN9+D*M=G`BkJb$x*q*xg
zw+f}a?z!H9Z`UPSUe5o5{b!|8QU7dr?_ynfWg@pXli8a~&}X^guT>SwSX;WaYmiMU
zUsqQuqOEO>m6|I`(Aor@vR9}e8KGot%&G>ltt^`VnAt{OVwwEUUotR_f@yLK5EGn-
zKEmn42Fh>MtHV&H)M5SS3ppv1on>AcWw!jsqc7!uPWdB%pOxT;X**vy#mp>CkHxG8
zf}G2L2?L2ZbQ!vmr6{--m$tHa{!1y7eHp9K{Kv@OShy+gz=<E2si@Z*<(jlybN5R;
zsVQ8NZxHU#6J@!;{!@OIoo1&;=`BBtRCnR8a3AnLLf-k|t+>B0et*m=A06yJZT<1W
zs#Oa=-dg<J^8F1PzQ09$Pd}DQJ(lM0>(kGin3y>6OuG0vv+>BpwjXTV_=9Z|M>cN3
z$voYUcXd79-96I@{wTIbDbg1QnW=+by|-~vxIB9A7-ERer-f^y_eLg%1SpBc_TM2d
zg0&5OVQypx73^SIkh|}GC=kbq5Ge=zYGR(CS1x9|_m}MSFQmK+?0=KsZ2&z9o*v*>
zBZmZ{=JzS``y_Z`4uZ$?q=G>)+dRek7xVt-U;IME@DlGKKm<5HYm;|yP{O;y-4Eq%
z3CCg{z!Y;Sy~bk3&H3416mu`+`+47ry-qOo0Lf4T2lnpWFM0ccXN|-eyxn3hwNfc%
zoX>Z&8$vNR$5g=Hq_2bz5K;L6?T1E%Oy=I_I8D2(LYT|kJ3HDdaBC9z<@JzrmE<w8
z>Qi0_5ZI5r#~?r8nk8F|=A4vwXq5f6qtiJT402FSTRdl+tDEM%jV6V2s3HG6L9QFD
zo%A=}yEfX(-raEH+lCF_$z+l{lT-h31JSXf@TqV@xJ)~@5Q!o}hD*<i@SWGpvG(A6
zxU)tP*#3O)T+a(n*O@wYOtofK?OnC>fBjY8WY??z^#sAN6+Xn-L08E-gZy6>`}$V5
z0J%f%Tk#TFy-9V{+2(H=Z8CXOlPayFX0Q|IENheT1-BvM3H1ckN_MwWXVN!MbvI-k
zmil;fqb~m!Pd-B&7sst8dA^SjGk{eN#e@5F_#%+?muJr&K6^H!h=)RPdaFQCSvG$m
zf8qG<(b3&_5uU&2h85@rcnV(?_Qolph2i`Kte<f0wwcW%#!|eO1$zjL`xEvH1~z}?
zD8G9}f+?t|6rk7ykL<c|59RmDCgmQaR3PONPkBPNz*91~Rb&E@0%~O!v++{5kn#yn
z>6TK)g&0Ew3i7O8PU%BR9w}QX1?|xYZrKTOXAQ0K7*vN<g8SWfQKt&0S#)COoLad?
z_6o0|9W@N029>gV33wLH3u)Qw{C5}qmTB@|$W9b);Q6jm`u*_DC*wjK^}h$0#S<g;
zqn68JEfS79QOldcr^vHTN;!(#X3ohqNZBl<91#+NL2g3I7AfWDfV@ZeEmAf}DX$bX
zxD85ylm#i}QX$HYfeX~iMM{DF?<xFup%&wu&aD<tk6SC-EPG7$wCvlm@5z1$U8uw!
z2$y^>O)m`uD76{>SJF%2m)1L{b2xOSnwn<4!=X3XYt+*3PJ_c?FgR*V(&rYv-L6MI
zlk~ZT@*5pBX6dub=x`VfcALs*w;NF|CjFkqV8d#Q#X4VOfiYsX)I3u|6Tj6`lmAsQ
ziM?pUGd#8B=a$nh7r*77Dt=@80EwX4^1pr<F4aP*;KD)-oYV_W!i*@#YL@Bx?lVIA
z%&u$n47YyBvhu_9jP4;SyE%DPIJ>lPoSy9!>Sf(>U$I<b?7Um3f8TkBp1lE>?};#}
zoGE)|w~)?W+eObV0OmCjCe>Fqe05SdJARzBh{6rPJS4)Ta*18;^FqDpj+35s<1UgL
zG@^hfyu)fZg>US<w6phs;()O8z=1S*QyKP=zAC#c@8h`;i%Hq$hO*bPL$eCu)#$=P
zlq5+Z4g78b7OieW;*}`Y(u#bqJLa#_RKqEeNf*DewL;qIG&)pU)=3|L6vs;AKgcJ3
zH>8ZeC7{*l<qOK;lt1q0UlkjKi*~!tUbcA+Sf!?HECWch!m#W#MkDnDRNK?ovNMcr
zp?I<byFJdxd8{x!IfH9D-@y||0jUh6*BX)%#hmz^Aqi6$Lpv{GJVRsFbIo2_yHZVL
zg=u9l5C|!z5z3dI%;+eLP?sU?0W?g@E<;C>O5v~-N%!2kO*kkRYwSjL5P^H?t()qC
z!MaUbsmwU$kJsd5#WE?e3>L12$IEi+I=8z{ol_&zz@W~Bf4V_(go3}Wf*1P8Z$S99
zq9W39XST?X%j@d!mKCmU=xJ~7p}DSbR*1`{AZNtf%K<?32`m^U5<<Kw9B!f)<$VQ|
zoR-f#lsB2IuTLh0*NZL#%uL{{I5_J)E{Sk21Wkb41%2Q7`Mdm$jeflTR{9j;2-k^~
zz5uBg?Rf)KAer{NA^D<FpTD8uZ>7(N&)^6CXN06|P97p_Ne&Z)H2#zrC)%vhTYb@r
zby<J?8X?&yR8{Lu@;SlZ84Sd1yyPX>tbE_^ENNP^(Ni}dT<Q}lG~n>8P*d-ql0sp(
z&@MX)S<kUYe=O5M3<D62;tc++U9)Db&SKHwCA9Z6M7z7A4L#j8Mw88EG9o4rHrMO2
zCHcYM4=LH#m!ww_((CQ9rc|ma*4~Y9ZVSBtX_tWg-I#57v;@fu?Af#?CMR}{;3Xs?
zug5RqMZGvLTxKfy{`+(GX6NQJcnOyy=hDaVBHrj0`q1B)iHWu;M59>M6I_n;?iBh+
zkfaYF*9f9QE+Yc1B-a#)k=dcFa1C-~G`fIVRlx7qgZLd;+%++Smyoy^e?5X1@XLP<
zE$zgE_#HYhKer1n;qvkHxd>i_-xy$C6vrR+J$O-Cgc+F@vJ(?q*t8-P2n2<MZtb>h
zYiZ<Csd2!6O+G>+@PSgfvhm>!;~0N5428=Wd*UdhQdfmBS-ZSh2Gv#WLx=N4SBd?F
z!9>#L^eW^^tIsElO+?ok<K=b}!|@_emRR8wcyx!{Nt|Z9KMK0JZcV*EyRM?aZ_^1$
z!4?bn+dRUQ+@!Cr5>WD{Fe1y~4m+w9EljE4jN#k{Wizl`rEM@FjKs?wMpj$n@=ioE
zkZ{ttfP~w`CEU6EUD+JneFq$*r8?dG{6zk4?`ZG4gd?8k#OHF!uQ@j{KcBz*E;8Wx
zIiXuNC)^^-hL<<%=5Gq!L!+nh>?`)F><!@+9`{!qgIph02^zbvQn_DaN^E7X_Nkl!
zgS#SGopQ%}Yf<i}1(~d`@Eht0tBTrXHHT;sE7dnKGBOcxIs<nV-ObHC%5K4KGTIr@
z@_4}{TNLqBOS?uE2POtS9i5xwGuCmmW3h0Bb0f7A{@Lij2Lt)LbEBhkRGvS72O|!%
z2cAo9jSc_^a-p$edyf~=fOC{)8PsE5{NN^ZYtZ#<!6KW&{0kjUCcAqFDcuE+>;`6X
z=!-~!C$+G<ppYFc+(OD`q`ZS#4;M7D*}^|iOUY5fr4*;oyr!eU;q{F7KKo^#96|ef
zd0JH;O5!9Ru?%!WaLsZVTJ=ZQQz=(de1|g}rg8?e)})&0E%$p+@PDb~sX|mn_w*RK
zg+pwPS!TtPQx@xMtjX0_YpTnQDxbOMm(8(IufZHL8+2ugVVwzepC~wG2YxpMZR^?=
z$83!Y5De;&x%W;YR=3W8!|DvW3dOk20tnZjp$|Yqr}-U<$$)B~D*wg1#H0HQA=yh}
z-_nw@zs+xci7CdWZy!6>-OYQ#jh?s-x?`%n`#w^}&|4P^Zz5$KQf~7U6;iGu<q@R3
zhm<rhzFBx1Dg8+K04cNR`_qM2kpgYu?&qjkCp#zm9H*p04}#YF4SLYN#Mo*V=|S@D
z*5qjM>p7>>V6zPM@{e_^sc)`>=VwHoSGQS+6Vz=<>eD{r_iY<C-0fy|qscCGD|?!o
zvGX6Tj-l1ph@*)UiDO?Hn;v@)ZN|chfafYaCwlQ5UhIZ$^Mfvzr>DQZb}bDBhZR;K
z&)*fUQjD;gChcOJsao800#b@!{w|g7G$|_T9IKM!2E9o;sx|BNpN);-B<`^>O@q^6
zv|5c0CmgV>@Dsr*ds_HsK9Wk-GFsbPm;VH7$qyPml0FHk1X|;_q!r>f)ExYl<Q;xL
z2B{@4Br(&z4f#i2d#nVP>Krt`Sxe^LqqGIo9ta#9^6idE--Q96)8+NLoIZ{2j_uvz
z53wJ7vKJvo5Nk<L+KPN0C&AvCN$zFLs#mC#x=QbFM|xZpCY7lQ-an9-<&%N|`|WSj
z$YjNNhr8@m`5n=@fBx3DK6^5{`o}-)>iXf21;a>BS69zSAfnSn&_a~G%-)vo1#cZh
z3tvGShcJs>l^^(~Hd54FseZ9bx{qkOcX(3zimBb{3Wr_J$f?ND&irS^UqrnjXjxYk
zWH~-WJ%U_H&1J|#(>v`&&{vDV4n|M+=D#Zb`olPv_Dd1+;OyjZcM<Xm(tA6PzOfAW
z599oekPqyfP81=p;C!g}^rceB{}a44J-pkOeVCWtx7|^!@KUh{vycv69)0wU5~6g~
zuC;`3`#cS`ko(F(Wisfg_h8?aVo;I1Ewu-S3-X(&gnuxbb*8fJPP18WEL+uey4bSf
zr`X@bNdw>1-(kqhQVfc{l3|HRv5MtRxiK<w<9@i{Bl*w&EpUfeI$DIg+$C2>MwY*?
z;JXKMi|>gk>X@Z?mQre9G6}6RIeGO#+I*agcX!8gSBf|nKbOaV{PX|OI))|&a*Eu*
z#I*<Nkmu&2gM-nz^F`RjPm;iN4=%2HLLH=4NY*rsu({;qVM6)_#;cG>=W^+8P5h-!
zDl;X#%Cz#A9xgLAFmZyAI3J%)!V;fDy{h&s#G{bE4M}n4!Fs|a^<2joE7r5O^Cc?t
z1?>E@57t9viuIh`nVc=wGdKX>fY=@#_Hn2wihHF!rFx61*t8QB8m&E~%k}v>q?#@5
zqQL~c)$flOm)m;!et5LsZpB(FVsk>H(E;450moViDMdmAHy~JpmKYYEIDVi*7Vv0J
zDAJpcI?|M22Ux^yCq*PX9RYilrEFLo4=;ZMwqs-I#H`sIC|jMP_uh69SI~>}<Uatr
zh;iB;a#h+?qw==;<!?ZJYAV`24X72pN%0-9xt9SRohq7j$c|sJ{;5acYZzBHMC$65
z<1D*=XnKbG8_0Hszu{2)1VSGK$$vneif@DgFTz+E8QW!J>hV-|dMEcJ`0x+b%wqC*
zFTwb?;PK?%nd$rR*f#`U_`eO0$M@`<z7LN>y~ppz1A57W^tg}P?jy~2OIVIPG7^Qp
zC-L1Q^7g36ccQQ5*Pzw!hR=Nk_fhS+5*8#kj6}R$5A)#^{6A;8FUR{3{@=ij8;6u*
zN?$PKRgNi!Y$79$tJ@ovzX|DqW~~9rqPBV9_(Obo4Rujl{)g%s9#xI11L1H$J*wJh
zTxQG?7QL2EYK<<JQJYMkcz{nA;paIH3t3J2Zprv6;n!?>`0#LgOd<4lmZ!^Ifq)Ai
zokBd2%LUT2T@5CK-EJ^7;P!|@rx2B0gs+m{!HpOx$#|y4TG|dU;7&)zCd-1g22HQ~
z@SxDGur&o^UGgcpu1c#B`tI1@Cthg=lykoW3dYXJ3Y5cxhusfC$-ZyDLr|uKR#0)8
zyy~!H`4SH4duEe0^$i^sN(}Wsq6^vWWy@Vu(pjygmrg%_Uw29PuC%%+>qM)VRM#{7
z=JB%0u}If{n{po(y88r;wn~R)cg2EDHjCko{h?O>UMPRhoBaS3YW7O2jl9+0&`@dJ
z3gQTcNc%T5_6HSqF67q<w@VxP=LvabS-HGV?srGRGMNfz0*%P82|wriIs0WBWLssh
zvY@kZr^U*4Agt=~D0-^SFK&P*&j!Lx=(Hnj{o?1x(P_Wpx1d>!wD9}%v~Qh^6@L&`
z&TrdC>%a5V&b{@c?L&`7;cSgQI>eKnexW33tTW&Wni~V1R&!7&r|;HI`tCwZ(ZPe4
zW25oh^a-}(F&tx!3+mEyy*Sc(ddCU&SS~&q6I1pNx@&9nE}_Cb=+f8Jy7{krxA>34
zBoFE2U-=D0r*ItrF_hR(<TX=NlCUHHcK&Oe8jxhF{B_o+5d!<~y}uvt`!Tq9bmB#n
zQ{of@%(fIm;MLQbwOUzXR3Rb&p^L)FdpFtn{N&FV8=s#a-?@{&YuKoQjoh2s&(6R1
zMs|L__(xdj3fJX2L~N9Eiynd56mLKmfa+UQSQoIizWs89?N_k<k(cuyUfM0Zqj*Qy
z-N%Ne*i`=PRQ~D=8&X`mrob9p7AM%f14!im2{QyOT*|RDj@tQv^-i%+{`S<bVck#*
cgmHMDLnNg@ivUGyQaWOHj-zxjJxuBUKdycW+W-In

literal 0
HcmV?d00001

diff --git a/web/css/styles.min.css b/web/css/styles.min.css
index 99026f65..04306929 100644
--- a/web/css/styles.min.css
+++ b/web/css/styles.min.css
@@ -1,153 +1,3 @@
-/*  Syntax Quick Reference
-  --------------------------
-  column($ratios: 1, $offset: 0, $cycle: 0, $uncycle: 0, $gutter: $jeet-gutter)
-  span($ratio: 1, $offset: 0)
-  shift($ratios: 0, $col_or_span: column, $gutter: $jeet-gutter)
-  unshift()
-  edit()
-  center($max_width: 1410px, $pad: 0)
-  stack($pad: 0, $align: false)
-  unstack()
-  align($direction: both)
-  cf()
-*/
-/**
- * Grid settings.
- * All values are defaults and can therefore be easily overidden.
- */
-/**
- * List functions courtesy of the wonderful folks at Team Sass.
- * Check out their awesome grid: Singularity.
- */
-/**
- * Get  percentage from a given ratio.
- * @param {number} [$ratio=1] - The column ratio of the element.
- * @returns {number} - The percentage value.
- */
-/**
- * Work out the column widths based on the ratio and gutter sizes.
- * @param {number} [$ratios=1] - The column ratio of the element.
- * @param {number} [$gutter=$jeet-gutter] - The gutter for the column.
- * @returns {list} $width $gutter - A list containing the with and gutter for the element.
- */
-/**
- * Get the set layout direction for the project.
- * @returns {string} $direction - The layout direction.
- */
-/**
- * Replace a specified list value with a new value (uses built in set-nth() if available)
- * @param {list} $list - The list of values you want to alter.
- * @param {number} $index - The index of the list item you want to replace.
- * @param {*} $value - The value you want to replace $index with.
- * @returns {list} $list - The list with the value replaced or removed.
- * @warn if an invalid index is supplied.
- */
-/**
- * Reverse a list (progressively enhanced for Sass 3.3)
- * @param {list} $list - The list of values you want to reverse.
- * @returns {list} $result - The reversed list.
- */
-/**
- * Get the opposite direction to a given value.
- * @param {string} $dir - The direction you want the opposite of.
- * @returns {string} - The opposite direction to $dir.
- * @warn if an incorrect string is provided.
- */
-/**
- * Style an element as a column with a gutter.
- * @param {number} [$ratios=1] - A width relative to its container as a fraction.
- * @param {number} [$offset=0] - A offset specified as a fraction (see $ratios).
- * @param {number} [$cycle=0] - Easily create an nth column grid where $cycle equals the number of columns.
- * @param {number} [$uncycle=0] - Undo a previous cycle value to allow for a new one.
- * @param {number} [$gutter=$jeet-gutter] - Specify the gutter width as a percentage of the containers width.
- */
-/**
- * An alias for the column mixin.
- * @param [$args...] - All arguments get passed through to column().
- */
-/**
- * Get the width of a column and nothing else.
- * @param {number} [$ratios=1] - A width relative to its container as a fraction.
- * @param {number} [$gutter=$jeet-gutter] - Specify the gutter width as a percentage of the containers width.
- */
-/**
- * Get the gutter size of a column and nothing else.
- * @param {number} [ratios=1] - A width relative to its container as a fraction.
- * @param {number} [gutter=jeet.gutter] - Specify the gutter width as a percentage of the containers width.
- */
-/**
- * An alias for the column-width function.
- * @param [$args...] - All arguments get passed through to column().
- */
-/**
- * An alias for the column-gutter function.
- * @param [$args...] - All arguments get passed through to column().
- */
-/**
- * Style an element as a column without any gutters for a seamless row.
- * @param {number} [$ratios=1] - A width relative to its container as a fraction.
- * @param {number} [$offset=0] - A offset specified as a fraction (see $ratios).
- * @param {number} [cycle=0] - Easily create an nth column grid where cycle equals the number of columns.
- * @param {number} [uncycle=0] - Undo a previous cycle value to allow for a new one.
- */
-/**
- * Reorder columns without altering the HTML.
- * @param {number} [$ratios=0] - Specify how far along you want the element to move.
- * @param {string} [$col-or-span=column] - Specify whether the element has a gutter or not.
- * @param {number} [$gutter=$jeet-gutter] - Specify the gutter width as a percentage of the containers width.
- */
-/**
- * Reset an element that has had shift() applied to it.
- */
-/**
- * View the grid and its layers for easy debugging.
- * @param {string} [$color=black] - The background tint applied.
- * @param {boolean} [$important=false] - Whether to apply the style as !important.
- */
-/**
- *  Alias for edit().
- */
-/**
- * Horizontally center an element.
- * @param {number} [$max-width=1410px] - The max width the element can be.
- * @param {number} [$pad=0] - Specify the element's left and right padding.
- */
-/**
- * Uncenter an element.
- */
-/**
- * Stack an element so that nothing is either side of it.
- * @param {number} [$pad=0] - Specify the element's left and right padding.
- * @param {boolean/string} [$align=false] - Specify the text align for the element.
- */
-/**
- * Unstack an element.
- */
-/**
- * Center an element on either or both axes.
- * @requires A parent container with relative positioning.
- * @param {string} [$direction=both] - Specify which axes to center the element on.
- */
-/**
- * Apply a clearfix to an element.
- */
-/* ==========================================================================
-   Normalize.scss settings
-   ========================================================================== */
-/**
- * Includes legacy browser support IE6/7
- *
- * Set to false if you want to drop support for IE6 and IE7
- */
-/* Base
-   ========================================================================== */
-/**
- * 1. Set default font family to sans-serif.
- * 2. Prevent iOS text size adjust after orientation change, without disabling
- *  user zoom.
- * 3. Corrects text resizing oddly in IE 6/7 when body `font-size` is set using
- *  `em` units.
- */
 html {
     font-family: sans-serif;
     /* 1 */
@@ -3339,3 +3189,1033 @@ form#vstobjects.suspended {
         display: none;
     }
 }
+
+
+/*   ------ fixes ------    */
+
+body {
+  background: #f0f3f5;
+  color: #58666f;
+  font-family: 'Source Sans Pro', sans-serif;
+}
+b, strong {
+  color: #58666f;
+}
+.l-percent {
+  border-bottom: none;
+  margin-top: 1px;
+  width: 200px;
+  background: #e4eaed;
+}
+.l-percent__fill {
+  background-color: #2ac34e;
+  bottom: 0;
+}
+.to-top {
+  z-index: 100;
+  top: unset;
+  bottom: 30px;
+  right: 285px;
+}
+.to-shortcuts {
+  z-index: 100;
+  top: unset;
+  bottom: 30px;
+  right: 330px;
+}
+.shortcuts {
+  right: calc(50% - 400px);
+  bottom: calc(50% - 213px);
+}
+.l-separator {
+  display: none;
+}
+.l-header {
+  position: fixed;
+  width: calc(100% - 40px);
+  z-index: 99;
+  background: #fff;
+  box-shadow: 0 2px 2px rgba(0, 0, 0, 0.05), 0 1px 0 rgba(0, 0, 0, 0.05);
+  color: #58666f;
+  height: 50px;
+  padding: 0 20px;
+  margin-bottom: unset;
+}
+.l-header a {
+  color: #58666f;
+  font-size: 14px;
+}
+.l-header a:hover {
+  color: #58666f;
+}
+.l-header .l-center {
+  max-width: none !important;
+}
+.l-header .l-center .l-logo {
+  background-position: -65px -182px;
+  /* background-position: -125px -478px; */
+  background-repeat: no-repeat;
+  display: block;
+  height: 40px;
+  margin-top: 0;
+  width: 80px;
+  /* width: 42px; */
+  margin-left: 0;
+  background-size: 235px 325px;
+  position: relative;
+  top: 5px;
+  left: 0;
+  float: left;
+  padding-right: 20px;
+}
+.l-header .l-center .l-menu {
+  position: unset;
+  margin-left: unset;
+}
+.l-header .l-center .l-menu .l-menu__item a {
+  line-height: 50px;
+  padding: 0 18px;
+  display: inline-block;
+}
+.l-header .l-center .l-menu .l-menu__item a:hover {
+  background-color: rgba(0, 0, 0, 0.05);
+}
+.l-header .l-center .l-menu .l-menu__item a:active {
+  background-color: rgba(0, 0, 0, 0.05);
+}
+.l-header .l-center .l-menu .l-menu__item.l-menu__item--active a {
+  color: unset;
+  font-size: unset;
+  font-weight: unset;
+  text-transform: unset;
+  background-color: rgba(0, 0, 0, 0.05);
+}
+.l-header .l-center .l-profile .l-profile__notifications {
+  margin-top: 13px;
+}
+.l-header .l-center .l-profile .l-profile__notifications:hover {
+  background-color: rgba(0, 0, 0, 0.05);
+}
+.l-header .l-center .l-profile .l-profile__username {
+  padding: 15px 0 0 10px;
+}
+.l-header .l-center .l-profile .l-profile__logout {
+  padding: 15px 0 0 10px;
+}
+.l-header > .l-center {
+  margin-left: 200px;
+}
+.l-content {
+  position: relative;
+  top: 50px;
+}
+.l-content + div {
+  right: 100px !important;
+  top: unset !important;
+  bottom: 40px !important;
+}
+.l-content + div div {
+  background-color: #e4eaed !important;
+  padding: 10px;
+  border-radius: 5px;
+}
+.l-content .l-center {
+  max-width: none !important;
+}
+.l-content .l-center .l-stat {
+  display: block;
+  position: fixed;
+  z-index: 100;
+  padding-top: 0 !important;
+  width: 200px;
+  height: 100%;
+  top: 0;
+  margin-top: 0;
+  background: #1c2b35;
+  overflow-y: scroll;
+  scrollbar-width: thin;
+  /* Firefox */
+  -ms-overflow-style: scrollbar;
+  /* Internet Explorer 10+ */
+  /* width */
+}
+.l-content .l-center .l-stat::-webkit-scrollbar {
+  display: block;
+  width: 7px;
+  /* Track */
+}
+.l-content .l-center .l-stat::-webkit-scrollbar-track {
+  background: rgba(255, 255, 255, 0);
+  /* Handle */
+}
+.l-content .l-center .l-stat::-webkit-scrollbar-thumb {
+  background: rgba(255, 255, 255, 0.15);
+}
+.l-content .l-center .l-stat:hover {
+  /* Handle on hover */
+}
+.l-content .l-center .l-stat:hover::-webkit-scrollbar-thumb {
+  background: rgba(255, 255, 255, 0.4);
+}
+.l-content .l-center .l-stat .l-stat__col--active ul {
+    display: block !important;
+}
+.l-content .l-center .l-stat .l-stat__col--active {
+  background: #131e27;
+}
+.l-content .l-center .l-stat .l-stat__col--active a {
+  border-bottom: 2px solid #131e27;
+}
+.l-content .l-center .l-stat .l-stat__col--active a .l-stat__col-title {
+  background: #16232d;
+  color: white !important;
+  font-size: 20px;
+  font-weight: 400;
+  margin-top: unset;
+  letter-spacing: unset;
+  margin-right: unset;
+}
+.l-content .l-center .l-stat .l-stat__col--active span {
+    display: none;
+}
+.l-content .l-center .l-stat .focus {
+  background: #5e5e5e;
+}
+.l-content .l-center .l-stat .focus a {
+  border-bottom: 2px solid #131e27;
+}
+.l-content .l-center .l-stat .focus a ul li {
+  color: #c2e5ff !important;
+}
+.l-content .l-center .l-stat .focus a .l-stat__col-title {
+  background: #5e5e5e;
+  color: #c4d0d8;
+  font-size: 20px;
+  font-weight: 400;
+  margin-top: unset;
+  letter-spacing: unset;
+  margin-right: unset;
+}
+.l-content .l-center .l-stat .l-stat__col {
+  display: block;
+  float: unset;
+}
+.l-content .l-center .l-stat .l-stat__col:hover .l-stat__col-title {
+  color: #fff;
+}
+.l-content .l-center .l-stat .l-stat__col:hover .l-stat__col-title:after {
+  color: #fff;
+}
+.l-content .l-center .l-stat .l-stat__col a {
+  height: unset !important;
+  min-height: unset !important;
+  display: block;
+  width: unset;
+  border-bottom: 2px solid #131e27;
+  background-color: transparent;
+  padding-left: unset;
+  padding-bottom: 10px;
+  padding-top: unset;
+  margin-top: unset;
+}
+.l-content .l-center .l-stat .l-stat__col a .l-stat__col-title {
+  min-height: unset !important;
+  color: #869fb2;
+  font-size: 20px;
+  font-weight: 400;
+  padding: 15px 15px 15px 20px;
+  margin-bottom: 0;
+  margin-top: 0 !important;
+}
+.l-content .l-center .l-stat .l-stat__col a .l-stat__col-title:after {
+  font-family: 'Font Awesome 5 Free';
+  font-weight: bold;
+  content: "\f054";
+  float: right;
+  font-size: 10px;
+  color: #5c798f;
+  margin-top: 8px;
+  margin-right: 26px;
+}
+.l-content .l-center .l-stat .l-stat__col a .l-stat__col-title:before {
+  font-family: 'Font Awesome 5 Free';
+  font-weight: bold;
+  content: "\f233";
+  padding-right: 10px;
+  font-size: 17px;
+}
+
+.l-content .l-center .l-stat .l-stat__col--active a .l-stat__col-title:after {
+    margin-right: 26px;
+}
+
+.l-content .l-center .l-stat .l-stat__col a ul {
+  margin: 0;
+  display: none;
+}
+.l-content .l-center .l-stat .l-stat__col a ul li {
+  color: #92adc2;
+  margin-bottom: unset;
+  padding: 10px 20px 10px 20px;
+  font-size: 14px;
+}
+.l-content .l-center .l-stat .l-stat__col a ul li span {
+  float: right;
+  padding: 3px 5px 4px 5px;
+  font-size: 13px;
+  color: #fff;
+  background-color: #27c54e;
+  font-weight: 700;
+  text-shadow: 0 1px 0 rgba(0, 0, 0, 0.2);
+  display: inline-block;
+  min-width: 10px;
+  line-height: 1;
+  text-align: center;
+  white-space: nowrap;
+  vertical-align: baseline;
+  border-radius: 0.25em;
+  left: 133px;
+}
+.l-content .l-center .l-stat .l-stat__col a ul li:first-child span {
+  float: right;
+  padding: 3px 5px 4px 5px;
+  font-size: 13px;
+  color: #fff;
+  background-color: #34b5dd;
+  font-weight: 700;
+  text-shadow: 0 1px 0 rgba(0, 0, 0, 0.2);
+  display: inline-block;
+  min-width: 10px;
+  line-height: 1;
+  text-align: center;
+  white-space: nowrap;
+  vertical-align: baseline;
+  border-radius: 10px;
+}
+.l-content .l-center .l-stat .l-stat__col a ul li:before {
+  font-family: 'Font Awesome 5 Free';
+  font-weight: bold;
+  content: "\f03a";
+  padding-right: 15px;
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(1) a .l-stat__col-title:before {
+  content: "\f500";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(1) a ul li:nth-of-type(1):before {
+  content: "\f0a0";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(1) a ul li:nth-of-type(2):before {
+  content: "\f75b";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(1) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(2) a .l-stat__col-title:before {
+  content: "\f233";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(2) a ul li:nth-of-type(1):before {
+  content: "\f0ac";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(2) a ul li:nth-of-type(2):before {
+  content: "\f0c5";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(2) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(3) a .l-stat__col-title:before {
+  content: "\f6ff";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(3) a ul li:nth-of-type(1):before {
+  content: "\f0ac";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(3) a ul li:nth-of-type(2):before {
+  content: "\f303";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(3) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(4) a .l-stat__col-title:before {
+  content: "\f674";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(4) a ul li:nth-of-type(1):before {
+  content: "\f0ac";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(4) a ul li:nth-of-type(2):before {
+  content: "\f2bb";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(4) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(5) a .l-stat__col-title:before {
+  content: "\f1c0";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(5) a ul li:nth-of-type(1):before {
+  content: "\f1c0";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(5) a ul li:nth-of-type(2):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(5) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(6) a .l-stat__col-title:before {
+  content: "\f120";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(6) a ul li:nth-of-type(1):before {
+  content: "\f120";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(6) a ul li:nth-of-type(2):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(6) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(7) a .l-stat__col-title:before {
+  content: "\f019";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(7) a ul li:nth-of-type(1):before {
+  content: "\f019";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(7) a ul li:nth-of-type(2):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-stat .l-stat__col:nth-of-type(7) a ul li:nth-of-type(3):before {
+  content: "\f05e";
+}
+.l-content .l-center .l-sort {
+  padding: 0 20px;
+  position: relative;
+  z-index: 98;
+  width: auto;
+  margin-top: unset !important;
+  background-color: #f6f8f8;
+  border-bottom: 1px solid #dee5e8;
+  margin-bottom: 30px;
+}
+.l-content .l-center .l-sort .l-sort__create-btn {
+  bottom: -20px;
+}
+.l-content .l-center .l-sort .context-menu {
+  top: 77px;
+}
+.l-content .l-center .l-sort .l-sort-toolbar {
+  padding: 24px 0 22px 0;
+  color: #98a6ac;
+}
+.l-content .l-center .l-sort .l-sort-toolbar .l-select {
+  border-radius: 3px 0 0 3px;
+  background: #fff;
+  border: 1px solid #dee5e8;
+}
+.l-content .l-center .l-sort .l-sort-toolbar .l-sort-toolbar__filter-apply {
+  border-radius: 0 3px 3px 0;
+}
+.l-content .l-center .l-sort .l-sort-toolbar table tbody tr .l-sort-toolbar__search-box form .search-input {
+  border-radius: 3px 0 0 3px;
+  border: 1px solid #dee5e8;
+}
+.l-content .l-center .l-sort .l-sort-toolbar table tbody tr .l-sort-toolbar__search-box form .l-sort-toolbar__search {
+  border-radius: 0 3px 3px 0;
+}
+.l-content .l-center .l-sort .l-sort-toolbar table tbody tr .sort-by {
+  padding-left: 30px;
+}
+.l-content .l-center .l-unit {
+  padding: 0 0 0 15px;
+  overflow: hidden;
+  margin: 0px 20px 20px 20px;
+  background: #fff;
+  border-radius: 3px;
+  border-bottom: none !important;
+  border-left: none !important;
+  color: #98a6ac;
+  font-size: 14px;
+}
+.l-content .l-center .l-unit.selected {
+  background-color: #e4eaed;
+}
+.l-content .l-center .l-unit--suspended {
+  background-color: #eaeaea !important;
+}
+.l-content .l-center .l-unit.selected .l-percent {
+  border-bottom: none;
+  margin-top: 1px;
+  width: 200px;
+  background: #cbd3d7;
+}
+.l-content .l-center .l-unit .l-unit-toolbar .l-unit-toolbar__col.l-unit-toolbar__col--right {
+  position: relative;
+  top: 20px;
+  right: 20px;
+  display: block;
+}
+.l-content .l-center .l-unit .l-unit-toolbar .l-unit-toolbar__col.l-unit-toolbar__col--right .actions-panel__col {
+  margin-left: 10px;
+  border-radius: 3px;
+  overflow: hidden;
+  border-right: none;
+  background-color: #dde6e8;
+}
+.l-content .l-center .l-unit .l-unit-toolbar .l-unit-toolbar__col.l-unit-toolbar__col--right .actions-panel__col a {
+  font-weight: 500;
+}
+.l-content .l-center .l-unit .l-unit-toolbar .l-unit-toolbar__col .check-label:before {
+  z-index: 97;
+}
+.l-content .l-center .l-unit .l-unit__col .l-unit__name {
+  color: #34b5dd;
+  font-weight: 500;
+  font-size: 24px;
+  margin-bottom: unset;
+}
+.l-content .l-center .l-unit .l-unit__col .l-unit__ip {
+  font-size: 18px;
+}
+.l-content .l-center .l-unit .l-unit__col .l-unit__date {
+  letter-spacing: unset;
+  display: inline-block;
+  border-bottom: solid 10px #ffeb0087;
+  line-height: 3px;
+  padding: 0 0px;
+  margin-bottom: 30px;
+  font-weight: 400;
+  font-size: 16px;
+}
+.l-content .l-center .l-unit .l-unit__col .l-unit__stats td {
+  height: 27px;
+}
+.l-content .l-center .io-box {
+  overflow: hidden;
+  margin: 20px 20px 0px 20px;
+  color: #98a6ac;
+}
+.l-content .l-center .io-box .io-box-left {
+  float: left;
+  width: calc(100% - 800px);
+  /*min-width: 283px;*/
+  text-align: center;
+}
+.l-content .l-center .io-box .io-box-left .io-box-left-items {
+  float: left;
+  width: calc(50% - 20px);
+  height: 137px;
+  margin-right: 20px;
+  margin-bottom: 20px;
+  background: #fff;
+  border-radius: 3px;
+  min-width: 125px;
+}
+.l-content .l-center .io-box .io-box-left .io-box-left-items a {
+  display: block;
+  font-size: 36px;
+  font-weight: 300;
+  margin-top: 32px;
+}
+.l-content .l-center .io-box .io-box-left .io-1-homepage-block {
+  color: #98a6ac;
+}
+.l-content .l-center .io-box .io-box-left .io-1-homepage-block a {
+  color: #34b5dd;
+}
+.l-content .l-center .io-box .io-box-left .io-2-homepage-block {
+  color: #b4efc2;
+  background-color: #27c54e;
+}
+.l-content .l-center .io-box .io-box-left .io-2-homepage-block a {
+  color: #ecfff1;
+}
+.l-content .l-center .io-box .io-box-left .io-3-homepage-block {
+  color: #b0e1f1;
+  background-color: #34b5dd;
+}
+.l-content .l-center .io-box .io-box-left .io-3-homepage-block a {
+  color: #dcf2f8;
+}
+.l-content .l-center .io-box .io-box-left .io-4-homepage-block {
+  color: #98a6ac;
+}
+.l-content .l-center .io-box .io-box-left .io-4-homepage-block a {
+  color: #58666f;
+}
+.l-content .l-center .io-box .io-box-left .io-1-homepage-block span {
+  padding: 5px;
+}
+.l-content .l-center .io-box .io-box-left .io-2-homepage-block span {
+  padding: 5px;
+}
+.l-content .l-center .io-box .io-box-left .io-3-homepage-block span {
+  padding: 5px;
+}
+.l-content .l-center .io-box .io-box-left .io-4-homepage-block span {
+  padding: 5px;
+}
+.l-content .l-center .io-box .io-box-left .io-5-homepage-block span {
+  padding: 5px;
+}
+
+.l-content .l-center .io-box .io-box-left .io-5-homepage-block {
+  width: calc(100% - 20px);
+  color: #98a6ac;
+  background: #e4eaed;
+}
+.l-content .l-center .io-box .io-box-left .io-5-homepage-block a {
+  color: #27c54e;
+}
+.l-content .l-center .io-box .io-box-left .io-5-homepage-block:before {
+  font-family: 'Font Awesome 5 Free';
+  font-weight: bold;
+  font-size: 32px;
+  background: #dde6e8;
+  height: 121px;
+  width: 115px;
+  line-height: 90px;
+  content: "\f581";
+  color: #fff;
+  float: left;
+  border-radius: 5px 0 0 5px;
+  padding-top: 16px;
+}
+.l-content .l-center .io-box .io-box-right {
+  float: right;
+  width: 800px;
+  background: #fff;
+  height: 450px;
+  overflow: hidden;
+  border-radius: 3px;
+  text-align: center;
+}
+.l-content .l-center .io-box .io-box-right img {
+  margin-top: 8px;
+  width: 767px;
+  height: 433px;
+  position: relative;
+}
+.l-content .l-center .l-unit-ft {
+  padding: 0 0 37px 15px;
+  overflow: hidden;
+  margin: 0px 20px 19px 20px;
+  background: #e4eaed;
+  border-radius: 3px;
+  border-bottom: none !important;
+  border-left: none !important;
+  position: relative;
+  color: #a6b0b4;
+  font-weight: bold;
+  text-transform: uppercase;
+  font-size: 11px;
+}
+.l-content .l-center .l-unit-ft:before {
+  font-family: "Font Awesome 5 Free";
+  font-weight: bold;
+  font-size: 32px;
+  background: #dde6e8;
+  height: 100%;
+  width: 90px;
+  line-height: 108px;
+  content: "\f05a";
+  color: #fff;
+  float: left;
+  border-radius: 5px 0 0 5px;
+  position: absolute;
+  left: 0;
+  text-align: center;
+}
+.l-content .l-center .l-unit-ft .data {
+  margin: 0 0 50px 0;
+}
+.l-content .l-center #vstobjects {
+  padding: 0 0 0 15px;
+  overflow: hidden;
+  margin: 0px 20px 20px 20px;
+  background: #fff;
+  border-radius: 3px;
+  border-bottom: none !important;
+  border-left: none !important;
+  color: #98a6ac;
+  font-size: 14px;
+}
+.l-content .l-center #vstobjects .data-date {
+  color: #98A6AC;
+  letter-spacing: unset;
+  display: inline-block;
+  border-bottom: solid 10px #ffeb0087;
+  line-height: 3px;
+  padding: 0 0px;
+  margin-bottom: 30px;
+  font-weight: 400;
+  font-size: 16px;
+}
+.l-content .l-center .vst-text.step-top.helper-container {
+  margin-bottom: unset;
+  margin-top: 0;
+  float: unset;
+  height: auto;
+  width: auto;
+}
+.l-content .l-center .vst-text.step-top.helper-container #tabs.cron-helper-tabs {
+  padding: 0 0 0 15px;
+  overflow: hidden;
+  margin: 0 20px 20px 20px;
+  background: #fff;
+  border-radius: 3px;
+  border-bottom: none !important;
+  border-left: none !important;
+  color: #98a6ac;
+  font-size: 14px;
+  border: none !important;
+}
+.l-content > .units.l-center::before {
+  content: '';
+  display: block;
+  height: 0;
+}
+.l-content > .l-center {
+  margin-left: 200px;
+  margin-right: 240px;
+}
+.l-content > .l-center:first-child {
+  margin-left: 0;
+}
+.l-content #vstobjects > .l-center {
+  margin-left: 200px;
+  margin-right: 240px;
+  padding-top: 0;
+  padding-bottom: 1px;
+}
+
+.l-content .right_sidebar {
+  width: 240px;
+  position: fixed;
+  display: block;
+  z-index: 98;
+  top: 50px;
+  right: 0px;
+  box-sizing: border-box;
+  height: 100%;
+  background: #fff;
+  border-left: 1px solid #dee5e8;
+}
+.l-content .io-log {
+  color: #58666f;
+  border-left: 1px solid #dee5e8;
+  width: 240px;
+  position: relative;
+  display: block;
+  /*overflow-scrolling: auto;*/
+  z-index: 99;
+  top: 0px;
+  right: 0px;
+  background: #fff;
+  word-break: break-word;
+  overflow: hidden;
+  border-right: 8px solid #e3e3e3;
+  box-sizing: border-box;
+}
+.l-content .io-log::-webkit-scrollbar {
+  width: 7px;
+  /* Track */
+}
+.l-content .io-log::-webkit-scrollbar-track {
+  background: rgba(255, 255, 255, 0);
+  /* Handle */
+}
+.l-content .io-log::-webkit-scrollbar-thumb {
+  background: rgba(0, 0, 0, 0.15);
+  border-radius: 7px;
+  /* Handle on hover */
+}
+.l-content .io-log::-webkit-scrollbar-thumb:hover {
+  background: rgba(0, 0, 0, 0.4);
+  border-radius: 7px;
+}
+.l-content .io-log > * {
+  margin: 0 20px;
+}
+.l-content .io-log h2 {
+  margin: 0 0 20px 0;
+  padding-left: 20px;
+  font-size: 24px;
+  font-weight: 300;
+  line-height: 60px;
+  color: #98a6ac;
+  border-bottom: 1px solid #dee5e8;
+  cursor: pointer;
+}
+.l-content .io-log h2:before {
+  font-family: "Font Awesome 5 Free";
+  font-weight: bold;
+  content: "\f15c";
+  padding-right: 10px;
+  font-size: 17px;
+}
+.l-content .io-log > div {
+  /* border-left: solid 1px #dee5e8; */
+  padding-left: 15px;
+  position: relative;
+  margin-left: 25px;
+}
+.l-content .io-log > div > div {
+  position: relative;
+  margin-bottom: 25px;
+}
+.l-content .io-log > div > div > div:nth-of-type(2) {
+  color: #98a6ac;
+  font-size: 13px;
+  margin-bottom: 5px;
+}
+.l-content .io-log > div > div > div:nth-of-type(3) {
+  color: #98a6ac;
+  font-size: 13px;
+  margin-bottom: 5px;
+}
+.l-content .io-log > div > div:before {
+  content: '';
+  position: absolute;
+  height: 100%;
+  width: 7px;
+  border-radius: 10px;
+  border: solid 1px #dee5e8;
+  background: #e0fff9;
+  left: -20px;
+}
+.l-content .io-log > div > div:first-child(1n):before {
+  background: #e0fff9;
+}
+.l-content .io-log > div > div:nth-child(2n):before {
+  background: #fbffe0;
+}
+.l-content .io-log > div > div:nth-child(3n):before {
+  background: #fbffe0;
+}
+.l-content .io-log > div > div:nth-child(4n):before {
+  background: #fbffe0;
+}
+.l-content .io-log > div > div:nth-child(5n):before {
+  background: #fbffe0;
+}
+
+.l-content .io-log2 {
+  color: #58666f;
+  border-left: 1px solid #dee5e8;
+  border-top: 1px solid #cecece;
+  width: 240px;
+  position: relative;
+  height: 100%;
+  display: block;
+  /*overflow-scrolling: auto;*/
+  z-index: 99;
+  top: 0px;
+  right: 0px;
+  background: #fff;
+  word-break: break-word;
+  overflow-y: scroll;
+  scrollbar-width: thin;
+  box-sizing: border-box;
+}
+.l-content .io-log2::-webkit-scrollbar {
+  width: 7px;
+  /* Track */
+}
+.l-content .io-log2::-webkit-scrollbar-track {
+  background: rgba(255, 255, 255, 0);
+  /* Handle */
+}
+.l-content .io-log2::-webkit-scrollbar-thumb {
+  background: rgba(0, 0, 0, 0.15);
+  border-radius: 7px;
+  /* Handle on hover */
+}
+.l-content .io-log2::-webkit-scrollbar-thumb:hover {
+  background: rgba(0, 0, 0, 0.4);
+  border-radius: 7px;
+}
+.l-content .io-log2 > * {
+  margin: 0 20px;
+}
+.l-content .io-log2 h2 {
+  margin: 0 0 20px 0;
+  padding-left: 20px;
+  font-size: 24px;
+  font-weight: 300;
+  line-height: 60px;
+  color: #98a6ac;
+  border-bottom: 1px solid #dee5e8;
+  cursor: pointer;
+}
+.l-content .io-log2 h2:before {
+  font-family: "Font Awesome 5 Free";
+  font-weight: bold;
+  content: "\f15c";
+  padding-right: 10px;
+  font-size: 17px;
+}
+.l-content .io-log2 > div {
+  border-left: solid 1px #dee5e8;
+  padding-left: 15px;
+  position: relative;
+  margin-left: 25px;
+}
+.l-content .io-log2 > div > div {
+  position: relative;
+  margin-bottom: 25px;
+}
+.l-content .io-log2 > div > div > div:nth-of-type(2) {
+  color: #98a6ac;
+  font-size: 12px;
+  margin-bottom: 5px;
+}
+.l-content .io-log2 > div > div:before {
+  content: '';
+  position: absolute;
+  height: 100%;
+  width: 7px;
+  border-radius: 10px;
+  border: solid 1px #dee5e8;
+  background: #fff;
+  left: -20px;
+}
+.l-content .io-log2 > div > div:nth-child(2n):before {
+  border: solid 1px #27c54e;
+}
+.l-content .io-log2 > div > div:nth-child(3n):before {
+  border: solid 1px #27bbc5;
+}
+.l-content .io-log2 > div > div:nth-child(4n):before {
+  border: solid 1px #275bc5;
+}
+.l-content .io-log2 > div > div:nth-child(5n):before {
+  border: solid 1px #ffcc00;
+}
+
+
+#tooltip {
+  background-color: #34b5dd;
+}
+.l-sort__create-btn.edit:hover #tooltip {
+  background-color: #49c8ef;
+}
+.l-sort__create-btn.edit:active #tooltip {
+  background-color: #00d8ff !important;
+}
+.l-sort__create-btn:active #tooltip {
+  background-color: #00d8ff;
+}
+.body-login, .body-reset {
+  background-color: #f0f3f5;
+}
+.body-login .login, .body-reset .login {
+  font-family: Arial, Helvetica, sans-serif;
+  border: 1px solid #e7ecee;
+  border-radius: 10px;
+  overflow: hidden;
+  position: relative;
+  padding: 35px 35px 10px 35px;
+  display: block;
+  width: 420px;
+  box-shadow: 0 2px 2px rgba(0, 0, 0, 0.05), 0 1px 0 rgba(0, 0, 0, 0.05);
+}
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1), .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) {
+  position: absolute;
+  text-align: center;
+  width: calc(100% - 46px);
+}
+/*
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) a, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) a {
+  background-image: url(/images/sprite.png?1446554103);
+  background-position: -65px -182px;
+  background-repeat: no-repeat;
+  display: inline-block;
+  height: 40px;
+  margin-top: 0;
+  width: 80px;
+  margin-left: 0;
+  background-size: 235px 325px;
+  position: relative;
+}
+*/
+/*
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) a img, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) a img {
+  display: none;
+}
+*/
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2), .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) {
+  position: relative;
+  padding: 65px 0 0 0 !important;
+}
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .vst-input, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .vst-input {
+  padding: 5px 10px;
+  margin: 0;
+  width: 320px !important;
+  margin-top: 7px;
+  border-radius: 3px;
+  border: solid 1px #d3d9e2;
+}
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button, .body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button:hover, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button:hover, .body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button:active, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button:active {
+  width: 100% !important;
+  border: 1px solid #27c54e;
+  background-color: #27c54e;
+  color: #f4f3f9;
+  margin-bottom: 20px;
+}
+.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(2) .login-bottom, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(2) .login-bottom {
+  width: auto;
+  text-align: center;
+  padding-bottom: unset;
+  padding: 0;
+}
+.body-login .login-box .vst-advanced, .body-reset .login-box .vst-advanced {
+  color: #34b5dd;
+}
+.body-web-log .l-header > .l-center {
+  margin-left: 0;
+}
+.l-stat__col span {
+    padding: 4px 0;
+    font-size: 15px;
+    position: fixed;
+    display: inline-block;
+    left: 159px;
+}
+.l-sort__create-btn2 {
+    background-image: url("/images/sprite.png?1446554103");
+    background-position: -331px -107px;
+    background-repeat: no-repeat;
+    display: inline-block;
+    height: 45px;
+    width: 45px;
+}
+/*
+.ui-resizable-handle {
+    background-color: #333 !important;
+}
+*/
+/*
+div.ui-dialog div {
+    background-color: #333 !important;
+}
+*/
+div.ui-dialog > div {
+    background-color: #333 !important;
+}
+div.ui-dialog > div div {
+    background-color: #333 !important;
+}
+/*
+div.ui-dialog > div > div {
+    background-color: #333 !important;
+}
+div.ui-dialog + div {
+    background-color: #333 !important;
+}
+div.ui-dialog + div div{
+    background-color: #333 !important;
+}
+*/
+/*
+.ui-dialog-titlebar {
+    background-color: #333 !important;
+}
+.ui-dialog-buttonpane {
+    background-color: #333 !important;
+}
+*/
diff --git a/web/templates/admin/panel.html b/web/templates/admin/panel.html
index d204671a..7eb5bab1 100644
--- a/web/templates/admin/panel.html
+++ b/web/templates/admin/panel.html
@@ -38,6 +38,7 @@
 
 
   <div class="l-content">
+  
     <div class="l-center">
       <div class="l-stat">
         <a href="/list/user/"><img src="/images/myvesta-large-white-130.png" style="display: block; width: 130px; height: 69px; margin-top: 5px; margin-left: 13px; position: relative;"></a>
@@ -129,10 +130,14 @@ $debian_ver=file_get_contents('/etc/debian_version');
             <span style="font-weight: bold;">Debian </span> <?php echo $debian_ver;?><br />
         </div>
         <div style="display: block; padding: 30px 0 0 19px; color: #b9bcbd;">
-            <a href="https://forum.myvestacp.com/viewtopic.php?f=23&t=819" target="_blank" style="text-decoration: underline;">Need emergency help?</a>
+            <a href="https://forum.myvestacp.com/viewtopic.php?f=23&t=819" target="_blank" style="text-decoration: underline; font-weight: bold;">Need urgent assistance?</a>
         </div>
       </div>
       <!-- /.l-stats -->
     </div>
+
+    <?php
+        include('/usr/local/vesta/web/templates/right.html');
+    ?>
     <div class="l-separator"></div>
     <!-- /.l-separator -->
diff --git a/web/templates/header.html b/web/templates/header.html
index 4baa2888..36cf6cdf 100644
--- a/web/templates/header.html
+++ b/web/templates/header.html
@@ -4,12 +4,11 @@
   <meta charset="utf-8">
   <link rel="icon" href="/images/favicon.ico" type="image/x-icon">
   <title>myVesta - <?=__($TAB)?></title>
-  <link rel="stylesheet" href="/css/styles.min.css?1446554108">
-  <link type="text/css" href="/css/jquery-custom-dialogs.css?1446554104" rel="stylesheet" />
-  <link href="https://fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap" rel="stylesheet">
-  <link href="https://fonts.googleapis.com/css2?family=Lobster&display=swap" rel="stylesheet">
-  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css">
-  <link rel="stylesheet" href="/css/styles.fix.css?1446554111">
+  <link rel="stylesheet" href="/css/styles.min.css?1446554109">
+  <link type="text/css" href="/css/jquery-custom-dialogs.css" rel="stylesheet" />
+  <link href="/css/fonts/font_sans_pro.css" rel="stylesheet">
+  <link href="/css/fonts/font_lobster.css" rel="stylesheet">
+  <link rel="stylesheet" href="/css/fonts/font_awesome5.css">
   <script>
     //
     //  GLOBAL SETTINGS
diff --git a/web/templates/right.html b/web/templates/right.html
new file mode 100644
index 00000000..2a699668
--- /dev/null
+++ b/web/templates/right.html
@@ -0,0 +1,164 @@
+<?php
+    $CURRENT_USER_FINAL=$_SESSION['user'];
+    if (isset($_SESSION['look']) && $_SESSION['look']!='') $CURRENT_USER_FINAL=$_SESSION['look'];
+?>
+
+<div class="right_sidebar" style="width: 240px; position: fixed; display: block; z-index: 98; top: 50px; right: 0px; box-sizing: border-box; height: 100%; background: #fff; border-left: 1px solid #dee5e8;">
+<div class="io-log">
+  <h2 class="io-log-h2" id="iologbutton">
+    <?php
+    if ($CURRENT_USER_FINAL=='admin') echo __('Server');
+    else echo __('Account');
+    ?>
+  </h2>
+    <div>
+
+<?php
+    if ($CURRENT_USER_FINAL=='admin') {
+        $sysload=sys_getloadavg();
+        $sysload[0]=number_format((float)$sysload[0], 2, '.', '');
+        $sysload[1]=number_format((float)$sysload[1], 2, '.', '');
+        $sysload[2]=number_format((float)$sysload[2], 2, '.', '');
+?>
+      <div>
+        <div>
+          <div>
+          </div>
+          <div>
+            <div>
+            </div>
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=__('CPU')?>
+          </div>
+          <div>
+            
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=$sysload[0]?>&nbsp;&nbsp;&nbsp;&nbsp;<?=$sysload[1]?>&nbsp;&nbsp;&nbsp;&nbsp;<?=$sysload[2]?>
+          </div>
+        </div>
+      </div>
+<?php
+    } else {
+?>
+      <div>
+        <div>
+          <div>
+          </div>
+          <div>
+            <div>
+            </div>
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=__('Disk')?>
+          </div>
+          <div>
+            
+          </div>
+        </div>
+        <div>
+          <div>
+            <?php
+                $output='';
+                exec (VESTA_CMD . "v-list-user ".$CURRENT_USER_FINAL." json", $output, $return_var);
+                $data = json_decode(implode('', $output), true);
+                $data = array_reverse($data,true);
+                //print_r($data); exit;
+                $key=$CURRENT_USER_FINAL;
+                if ($data[$key]['DISK_QUOTA']=='unlimited') echo __('unlimited');
+                else echo get_percentage($data[$key]['U_DISK'],$data[$key]['DISK_QUOTA']).' %';
+            ?>
+          </div>
+        </div>
+      </div>
+<?php
+    }
+    if ($CURRENT_USER_FINAL=='admin') {
+        $output='';
+        exec ("df -h | grep '^/dev'", $output, $return_var);
+        foreach($output as $line) {
+        while(strpos($line, '  ')!==false) $line=str_replace('  ', ' ', $line);
+        $disk_arr=explode(' ', $line);
+        $percent=$disk_arr[4];
+        $disk=$disk_arr[5];
+        if (strpos($disk, "/boot")!==false) continue;
+        if (strpos($disk, "/efi")!==false) continue;
+?>
+      <div>
+        <div>
+          <div>
+          </div>
+          <div>
+            <div>
+            </div>
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=__('Disk').' '.$disk?>
+          </div>
+          <div>
+
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=$percent?>
+          </div>
+        </div>
+      </div>
+<?php }
+    }
+?>
+</div>
+
+</div>
+
+<div class="io-log2">
+  <h2 class="io-log2-h2" id="iologbutton2">
+    <?=__('Log')?>
+  </h2>
+    <div>
+<?php
+$output='';
+exec (VESTA_CMD."v-list-user-log ".$CURRENT_USER_FINAL." json 25", $output, $return_var);
+check_error($return_var);
+$data = json_decode(implode('', $output), true);
+foreach ($data as $key => $value) {
+    ++$i;
+?>
+
+      <div>
+        <div>
+          <div>
+          </div>
+          <div>
+            <div>
+            </div>
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=translate_date($data[$key]['DATE'])?>
+          </div>
+          <div>
+            <?=$data[$key]['TIME']?>
+          </div>
+        </div>
+        <div>
+          <div>
+            <?=htmlspecialchars($data[$key]['CMD'], ENT_QUOTES)?>
+          </div>
+        </div>
+      </div>
+<?php } ?>
+</div>
+</div>
+</div>
diff --git a/web/templates/scripts.html b/web/templates/scripts.html
index 9fe02cbb..8082dc93 100644
--- a/web/templates/scripts.html
+++ b/web/templates/scripts.html
@@ -1,162 +1,3 @@
-<div class="right_sidebar">
-<div class="io-log">
-  <h2 class="io-log-h2" id="iologbutton">
-    <?php
-    if ($CURRENT_USER_FINAL=='admin') echo __('Server');
-    else echo __('Account');
-    ?>
-  </h2>
-    <div>
-
-<?php
-    if ($CURRENT_USER_FINAL=='admin') {
-        $sysload=sys_getloadavg();
-        $sysload[0]=number_format((float)$sysload[0], 2, '.', '');
-        $sysload[1]=number_format((float)$sysload[1], 2, '.', '');
-        $sysload[2]=number_format((float)$sysload[2], 2, '.', '');
-?>
-      <div>
-        <div>
-          <div>
-          </div>
-          <div>
-            <div>
-            </div>
-          </div>
-        </div>
-        <div>
-          <div>
-            <?=__('CPU')?>
-          </div>
-          <div>
-            
-          </div>
-        </div>
-        <div>
-          <div>
-            <?=$sysload[0]?>&nbsp;&nbsp;&nbsp;&nbsp;<?=$sysload[1]?>&nbsp;&nbsp;&nbsp;&nbsp;<?=$sysload[2]?>
-          </div>
-        </div>
-      </div>
-<?php
-    } else {
-?>
-      <div>
-        <div>
-          <div>
-          </div>
-          <div>
-            <div>
-            </div>
-          </div>
-        </div>
-        <div>
-          <div>
-            <?=__('Disk')?>
-          </div>
-          <div>
-            
-          </div>
-        </div>
-        <div>
-          <div>
-            <?php
-                $output='';
-                exec (VESTA_CMD . "v-list-user ".$CURRENT_USER_FINAL." json", $output, $return_var);
-                $data = json_decode(implode('', $output), true);
-                $data = array_reverse($data,true);
-                //print_r($data); exit;
-                $key=$CURRENT_USER_FINAL;
-                if ($data[$key]['DISK_QUOTA']=='unlimited') echo __('unlimited');
-                else echo get_percentage($data[$key]['U_DISK'],$data[$key]['DISK_QUOTA']).' %';
-            ?>
-          </div>
-        </div>
-      </div>
-<?php
-    }
-    if ($CURRENT_USER_FINAL=='admin') {
-        $output='';
-        exec ("df -h | grep '^/dev'", $output, $return_var);
-        foreach($output as $line) {
-        while(strpos($line, '  ')!==false) $line=str_replace('  ', ' ', $line);
-        $disk_arr=explode(' ', $line);
-        $percent=$disk_arr[4];
-        $disk=$disk_arr[5];
-        if (strpos($disk, "/boot")!==false) continue;
-        if (strpos($disk, "/efi")!==false) continue;
-?>
-      <div>
-        <div>
-          <div>
-          </div>
-          <div>
-            <div>
-            </div>
-          </div>
-        </div>
-        <div>
-          <div>
-            <?=__('Disk').' '.$disk?>
-          </div>
-          <div>
-
-          </div>
-        </div>
-        <div>
-          <div>
-            <?=$percent?>
-          </div>
-        </div>
-      </div>
-<?php }
-    }
-?>
-</div>
-
-</div>
-
-<div class="io-log2">
-  <h2 class="io-log2-h2" id="iologbutton2">
-    <?=__('Log')?>
-  </h2>
-    <div>
-<?php
-$output='';
-exec (VESTA_CMD."v-list-user-log ".$CURRENT_USER_FINAL." json 15", $output, $return_var);
-check_error($return_var);
-$data = json_decode(implode('', $output), true);
-foreach ($data as $key => $value) {
-    ++$i;
-?>
-
-      <div>
-        <div>
-          <div>
-          </div>
-          <div>
-            <div>
-            </div>
-          </div>
-        </div>
-        <div>
-          <div>
-            <?=translate_date($data[$key]['DATE'])?>
-          </div>
-          <div>
-            <?=$data[$key]['TIME']?>
-          </div>
-        </div>
-        <div>
-          <div>
-            <?=htmlspecialchars($data[$key]['CMD'], ENT_QUOTES)?>
-          </div>
-        </div>
-      </div>
-<?php } ?>
-</div>
-</div>
-
   <script type="text/javascript" src="/js/jquery-1.7.2.min.js?<?=JS_LATEST_UPDATE?>"></script>
   <script type="text/javascript" src="/js/jquery.cookie.js?<?=JS_LATEST_UPDATE?>"></script>
   <script type="text/javascript" src="/js/jquery-ui-1.8.20.custom.min.js?<?=JS_LATEST_UPDATE?>"></script>
diff --git a/web/templates/user/panel.html b/web/templates/user/panel.html
index 3f55f306..8ac8ea51 100644
--- a/web/templates/user/panel.html
+++ b/web/templates/user/panel.html
@@ -124,5 +124,9 @@ $debian_ver=file_get_contents('/etc/debian_version');
       </div>
       <!-- /.l-stats -->
     </div>
+
+    <?php
+        include('/usr/local/vesta/web/templates/right.html');
+    ?>
     <div class="l-separator"></div>
     <!-- /.l-separator -->

From 83e24f738aade71913de56a39ada38ed184297d2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jun 2023 00:03:27 +0200
Subject: [PATCH 1943/2300] Update list_backup_detail.html

---
 web/templates/admin/list_backup_detail.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/templates/admin/list_backup_detail.html b/web/templates/admin/list_backup_detail.html
index 30e41642..0280900f 100644
--- a/web/templates/admin/list_backup_detail.html
+++ b/web/templates/admin/list_backup_detail.html
@@ -6,7 +6,7 @@ input[type="checkbox"] {
 </style>
 <br /><br />
 <form action="/bulk/restore/" method="post" id="objects">
-    <div class="l-center" style="margin-left: 240px; padding-right: 30px;">
+    <div class="l-center" style="margin-left: 240px; padding-right: 270px;">
       <div class="l-sort clearfix noselect">
         <a href="/schedule/restore/?backup=<?=htmlentities($_GET['backup'])?>" class="l-sort__create-btn restore" style="bottom: 0" title="<?=__('Restore All')?>"></a>
         <div class="l-sort-toolbar clearfix">
@@ -34,7 +34,7 @@ input[type="checkbox"] {
     <!-- /.l-separator -->
 
 
-    <div class="l-center units" style="margin-left: 240px; padding-right: 20px;">
+    <div class="l-center units" style="margin-left: 240px; padding-right: 270px;">
     <div class="l-unit header">
       <div class="subtitle" style="color: black;"><?=__('Listing')?>  <?=htmlentities($_GET['backup'])?></div>
       <div class="subtitle"><?=__('First select what to restore')?>:</div>

From 83649defc92cc1d3d6ee81c6ef2dbbd2b9d7e814 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jun 2023 00:11:44 +0200
Subject: [PATCH 1944/2300] deleting styles.fix.css it's merged with
 styles.min.css

---
 web/css/styles.fix.css | 1026 ----------------------------------------
 1 file changed, 1026 deletions(-)
 delete mode 100644 web/css/styles.fix.css

diff --git a/web/css/styles.fix.css b/web/css/styles.fix.css
deleted file mode 100644
index fae5492f..00000000
--- a/web/css/styles.fix.css
+++ /dev/null
@@ -1,1026 +0,0 @@
-body {
-  background: #f0f3f5;
-  color: #58666f;
-  font-family: 'Source Sans Pro', sans-serif;
-}
-b, strong {
-  color: #58666f;
-}
-.l-percent {
-  border-bottom: none;
-  margin-top: 1px;
-  width: 200px;
-  background: #e4eaed;
-}
-.l-percent__fill {
-  background-color: #2ac34e;
-  bottom: 0;
-}
-.to-top {
-  z-index: 100;
-  top: unset;
-  bottom: 30px;
-  right: 285px;
-}
-.to-shortcuts {
-  z-index: 100;
-  top: unset;
-  bottom: 30px;
-  right: 330px;
-}
-.shortcuts {
-  right: calc(50% - 400px);
-  bottom: calc(50% - 213px);
-}
-.l-separator {
-  display: none;
-}
-.l-header {
-  position: fixed;
-  width: calc(100% - 40px);
-  z-index: 99;
-  background: #fff;
-  box-shadow: 0 2px 2px rgba(0, 0, 0, 0.05), 0 1px 0 rgba(0, 0, 0, 0.05);
-  color: #58666f;
-  height: 50px;
-  padding: 0 20px;
-  margin-bottom: unset;
-}
-.l-header a {
-  color: #58666f;
-  font-size: 14px;
-}
-.l-header a:hover {
-  color: #58666f;
-}
-.l-header .l-center {
-  max-width: none !important;
-}
-.l-header .l-center .l-logo {
-  background-position: -65px -182px;
-  /* background-position: -125px -478px; */
-  background-repeat: no-repeat;
-  display: block;
-  height: 40px;
-  margin-top: 0;
-  width: 80px;
-  /* width: 42px; */
-  margin-left: 0;
-  background-size: 235px 325px;
-  position: relative;
-  top: 5px;
-  left: 0;
-  float: left;
-  padding-right: 20px;
-}
-.l-header .l-center .l-menu {
-  position: unset;
-  margin-left: unset;
-}
-.l-header .l-center .l-menu .l-menu__item a {
-  line-height: 50px;
-  padding: 0 18px;
-  display: inline-block;
-}
-.l-header .l-center .l-menu .l-menu__item a:hover {
-  background-color: rgba(0, 0, 0, 0.05);
-}
-.l-header .l-center .l-menu .l-menu__item a:active {
-  background-color: rgba(0, 0, 0, 0.05);
-}
-.l-header .l-center .l-menu .l-menu__item.l-menu__item--active a {
-  color: unset;
-  font-size: unset;
-  font-weight: unset;
-  text-transform: unset;
-  background-color: rgba(0, 0, 0, 0.05);
-}
-.l-header .l-center .l-profile .l-profile__notifications {
-  margin-top: 13px;
-}
-.l-header .l-center .l-profile .l-profile__notifications:hover {
-  background-color: rgba(0, 0, 0, 0.05);
-}
-.l-header .l-center .l-profile .l-profile__username {
-  padding: 15px 0 0 10px;
-}
-.l-header .l-center .l-profile .l-profile__logout {
-  padding: 15px 0 0 10px;
-}
-.l-header > .l-center {
-  margin-left: 200px;
-}
-.l-content {
-  position: relative;
-  top: 50px;
-}
-.l-content + div {
-  right: 100px !important;
-  top: unset !important;
-  bottom: 40px !important;
-}
-.l-content + div div {
-  background-color: #e4eaed !important;
-  padding: 10px;
-  border-radius: 5px;
-}
-.l-content .l-center {
-  max-width: none !important;
-}
-.l-content .l-center .l-stat {
-  display: block;
-  position: fixed;
-  z-index: 100;
-  padding-top: 0 !important;
-  width: 200px;
-  height: 100%;
-  top: 0;
-  margin-top: 0;
-  background: #1c2b35;
-  overflow-y: scroll;
-  scrollbar-width: thin;
-  /* Firefox */
-  -ms-overflow-style: scrollbar;
-  /* Internet Explorer 10+ */
-  /* width */
-}
-.l-content .l-center .l-stat::-webkit-scrollbar {
-  display: block;
-  width: 7px;
-  /* Track */
-}
-.l-content .l-center .l-stat::-webkit-scrollbar-track {
-  background: rgba(255, 255, 255, 0);
-  /* Handle */
-}
-.l-content .l-center .l-stat::-webkit-scrollbar-thumb {
-  background: rgba(255, 255, 255, 0.15);
-}
-.l-content .l-center .l-stat:hover {
-  /* Handle on hover */
-}
-.l-content .l-center .l-stat:hover::-webkit-scrollbar-thumb {
-  background: rgba(255, 255, 255, 0.4);
-}
-.l-content .l-center .l-stat .l-stat__col--active ul {
-    display: block !important;
-}
-.l-content .l-center .l-stat .l-stat__col--active {
-  background: #131e27;
-}
-.l-content .l-center .l-stat .l-stat__col--active a {
-  border-bottom: 2px solid #131e27;
-}
-.l-content .l-center .l-stat .l-stat__col--active a .l-stat__col-title {
-  background: #16232d;
-  color: white !important;
-  font-size: 20px;
-  font-weight: 400;
-  margin-top: unset;
-  letter-spacing: unset;
-  margin-right: unset;
-}
-.l-content .l-center .l-stat .l-stat__col--active span {
-    display: none;
-}
-.l-content .l-center .l-stat .focus {
-  background: #5e5e5e;
-}
-.l-content .l-center .l-stat .focus a {
-  border-bottom: 2px solid #131e27;
-}
-.l-content .l-center .l-stat .focus a ul li {
-  color: #c2e5ff !important;
-}
-.l-content .l-center .l-stat .focus a .l-stat__col-title {
-  background: #5e5e5e;
-  color: #c4d0d8;
-  font-size: 20px;
-  font-weight: 400;
-  margin-top: unset;
-  letter-spacing: unset;
-  margin-right: unset;
-}
-.l-content .l-center .l-stat .l-stat__col {
-  display: block;
-  float: unset;
-}
-.l-content .l-center .l-stat .l-stat__col:hover .l-stat__col-title {
-  color: #fff;
-}
-.l-content .l-center .l-stat .l-stat__col:hover .l-stat__col-title:after {
-  color: #fff;
-}
-.l-content .l-center .l-stat .l-stat__col a {
-  height: unset !important;
-  min-height: unset !important;
-  display: block;
-  width: unset;
-  border-bottom: 2px solid #131e27;
-  background-color: transparent;
-  padding-left: unset;
-  padding-bottom: 10px;
-  padding-top: unset;
-  margin-top: unset;
-}
-.l-content .l-center .l-stat .l-stat__col a .l-stat__col-title {
-  min-height: unset !important;
-  color: #869fb2;
-  font-size: 20px;
-  font-weight: 400;
-  padding: 15px 15px 15px 20px;
-  margin-bottom: 0;
-  margin-top: 0 !important;
-}
-.l-content .l-center .l-stat .l-stat__col a .l-stat__col-title:after {
-  font-family: 'Font Awesome 5 Free';
-  font-weight: bold;
-  content: "\f054";
-  float: right;
-  font-size: 10px;
-  color: #5c798f;
-  margin-top: 8px;
-  margin-right: 26px;
-}
-.l-content .l-center .l-stat .l-stat__col a .l-stat__col-title:before {
-  font-family: 'Font Awesome 5 Free';
-  font-weight: bold;
-  content: "\f233";
-  padding-right: 10px;
-  font-size: 17px;
-}
-
-.l-content .l-center .l-stat .l-stat__col--active a .l-stat__col-title:after {
-    margin-right: 26px;
-}
-
-.l-content .l-center .l-stat .l-stat__col a ul {
-  margin: 0;
-  display: none;
-}
-.l-content .l-center .l-stat .l-stat__col a ul li {
-  color: #92adc2;
-  margin-bottom: unset;
-  padding: 10px 20px 10px 20px;
-  font-size: 14px;
-}
-.l-content .l-center .l-stat .l-stat__col a ul li span {
-  float: right;
-  padding: 3px 5px 4px 5px;
-  font-size: 13px;
-  color: #fff;
-  background-color: #27c54e;
-  font-weight: 700;
-  text-shadow: 0 1px 0 rgba(0, 0, 0, 0.2);
-  display: inline-block;
-  min-width: 10px;
-  line-height: 1;
-  text-align: center;
-  white-space: nowrap;
-  vertical-align: baseline;
-  border-radius: 0.25em;
-  left: 133px;
-}
-.l-content .l-center .l-stat .l-stat__col a ul li:first-child span {
-  float: right;
-  padding: 3px 5px 4px 5px;
-  font-size: 13px;
-  color: #fff;
-  background-color: #34b5dd;
-  font-weight: 700;
-  text-shadow: 0 1px 0 rgba(0, 0, 0, 0.2);
-  display: inline-block;
-  min-width: 10px;
-  line-height: 1;
-  text-align: center;
-  white-space: nowrap;
-  vertical-align: baseline;
-  border-radius: 10px;
-}
-.l-content .l-center .l-stat .l-stat__col a ul li:before {
-  font-family: 'Font Awesome 5 Free';
-  font-weight: bold;
-  content: "\f03a";
-  padding-right: 15px;
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(1) a .l-stat__col-title:before {
-  content: "\f500";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(1) a ul li:nth-of-type(1):before {
-  content: "\f0a0";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(1) a ul li:nth-of-type(2):before {
-  content: "\f75b";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(1) a ul li:nth-of-type(3):before {
-  content: "\f05e";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(2) a .l-stat__col-title:before {
-  content: "\f233";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(2) a ul li:nth-of-type(1):before {
-  content: "\f0ac";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(2) a ul li:nth-of-type(2):before {
-  content: "\f0c5";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(2) a ul li:nth-of-type(3):before {
-  content: "\f05e";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(3) a .l-stat__col-title:before {
-  content: "\f6ff";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(3) a ul li:nth-of-type(1):before {
-  content: "\f0ac";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(3) a ul li:nth-of-type(2):before {
-  content: "\f303";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(3) a ul li:nth-of-type(3):before {
-  content: "\f05e";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(4) a .l-stat__col-title:before {
-  content: "\f674";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(4) a ul li:nth-of-type(1):before {
-  content: "\f0ac";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(4) a ul li:nth-of-type(2):before {
-  content: "\f2bb";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(4) a ul li:nth-of-type(3):before {
-  content: "\f05e";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(5) a .l-stat__col-title:before {
-  content: "\f1c0";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(5) a ul li:nth-of-type(1):before {
-  content: "\f1c0";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(5) a ul li:nth-of-type(2):before {
-  content: "\f05e";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(5) a ul li:nth-of-type(3):before {
-  content: "\f05e";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(6) a .l-stat__col-title:before {
-  content: "\f120";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(6) a ul li:nth-of-type(1):before {
-  content: "\f120";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(6) a ul li:nth-of-type(2):before {
-  content: "\f05e";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(6) a ul li:nth-of-type(3):before {
-  content: "\f05e";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(7) a .l-stat__col-title:before {
-  content: "\f019";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(7) a ul li:nth-of-type(1):before {
-  content: "\f019";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(7) a ul li:nth-of-type(2):before {
-  content: "\f05e";
-}
-.l-content .l-center .l-stat .l-stat__col:nth-of-type(7) a ul li:nth-of-type(3):before {
-  content: "\f05e";
-}
-.l-content .l-center .l-sort {
-  padding: 0 20px;
-  position: relative;
-  z-index: 98;
-  width: auto;
-  margin-top: unset !important;
-  background-color: #f6f8f8;
-  border-bottom: 1px solid #dee5e8;
-  margin-bottom: 30px;
-}
-.l-content .l-center .l-sort .l-sort__create-btn {
-  bottom: -20px;
-}
-.l-content .l-center .l-sort .context-menu {
-  top: 77px;
-}
-.l-content .l-center .l-sort .l-sort-toolbar {
-  padding: 24px 0 22px 0;
-  color: #98a6ac;
-}
-.l-content .l-center .l-sort .l-sort-toolbar .l-select {
-  border-radius: 3px 0 0 3px;
-  background: #fff;
-  border: 1px solid #dee5e8;
-}
-.l-content .l-center .l-sort .l-sort-toolbar .l-sort-toolbar__filter-apply {
-  border-radius: 0 3px 3px 0;
-}
-.l-content .l-center .l-sort .l-sort-toolbar table tbody tr .l-sort-toolbar__search-box form .search-input {
-  border-radius: 3px 0 0 3px;
-  border: 1px solid #dee5e8;
-}
-.l-content .l-center .l-sort .l-sort-toolbar table tbody tr .l-sort-toolbar__search-box form .l-sort-toolbar__search {
-  border-radius: 0 3px 3px 0;
-}
-.l-content .l-center .l-sort .l-sort-toolbar table tbody tr .sort-by {
-  padding-left: 30px;
-}
-.l-content .l-center .l-unit {
-  padding: 0 0 0 15px;
-  overflow: hidden;
-  margin: 0px 20px 20px 20px;
-  background: #fff;
-  border-radius: 3px;
-  border-bottom: none !important;
-  border-left: none !important;
-  color: #98a6ac;
-  font-size: 14px;
-}
-.l-content .l-center .l-unit.selected {
-  background-color: #e4eaed;
-}
-.l-content .l-center .l-unit--suspended {
-  background-color: #eaeaea !important;
-}
-.l-content .l-center .l-unit.selected .l-percent {
-  border-bottom: none;
-  margin-top: 1px;
-  width: 200px;
-  background: #cbd3d7;
-}
-.l-content .l-center .l-unit .l-unit-toolbar .l-unit-toolbar__col.l-unit-toolbar__col--right {
-  position: relative;
-  top: 20px;
-  right: 20px;
-  display: block;
-}
-.l-content .l-center .l-unit .l-unit-toolbar .l-unit-toolbar__col.l-unit-toolbar__col--right .actions-panel__col {
-  margin-left: 10px;
-  border-radius: 3px;
-  overflow: hidden;
-  border-right: none;
-  background-color: #dde6e8;
-}
-.l-content .l-center .l-unit .l-unit-toolbar .l-unit-toolbar__col.l-unit-toolbar__col--right .actions-panel__col a {
-  font-weight: 500;
-}
-.l-content .l-center .l-unit .l-unit-toolbar .l-unit-toolbar__col .check-label:before {
-  z-index: 97;
-}
-.l-content .l-center .l-unit .l-unit__col .l-unit__name {
-  color: #34b5dd;
-  font-weight: 500;
-  font-size: 24px;
-  margin-bottom: unset;
-}
-.l-content .l-center .l-unit .l-unit__col .l-unit__ip {
-  font-size: 18px;
-}
-.l-content .l-center .l-unit .l-unit__col .l-unit__date {
-  letter-spacing: unset;
-  display: inline-block;
-  border-bottom: solid 10px #ffeb0087;
-  line-height: 3px;
-  padding: 0 0px;
-  margin-bottom: 30px;
-  font-weight: 400;
-  font-size: 16px;
-}
-.l-content .l-center .l-unit .l-unit__col .l-unit__stats td {
-  height: 27px;
-}
-.l-content .l-center .io-box {
-  overflow: hidden;
-  margin: 20px 20px 0px 20px;
-  color: #98a6ac;
-}
-.l-content .l-center .io-box .io-box-left {
-  float: left;
-  width: calc(100% - 800px);
-  /*min-width: 283px;*/
-  text-align: center;
-}
-.l-content .l-center .io-box .io-box-left .io-box-left-items {
-  float: left;
-  width: calc(50% - 20px);
-  height: 137px;
-  margin-right: 20px;
-  margin-bottom: 20px;
-  background: #fff;
-  border-radius: 3px;
-  min-width: 125px;
-}
-.l-content .l-center .io-box .io-box-left .io-box-left-items a {
-  display: block;
-  font-size: 36px;
-  font-weight: 300;
-  margin-top: 32px;
-}
-.l-content .l-center .io-box .io-box-left .io-1-homepage-block {
-  color: #98a6ac;
-}
-.l-content .l-center .io-box .io-box-left .io-1-homepage-block a {
-  color: #34b5dd;
-}
-.l-content .l-center .io-box .io-box-left .io-2-homepage-block {
-  color: #b4efc2;
-  background-color: #27c54e;
-}
-.l-content .l-center .io-box .io-box-left .io-2-homepage-block a {
-  color: #ecfff1;
-}
-.l-content .l-center .io-box .io-box-left .io-3-homepage-block {
-  color: #b0e1f1;
-  background-color: #34b5dd;
-}
-.l-content .l-center .io-box .io-box-left .io-3-homepage-block a {
-  color: #dcf2f8;
-}
-.l-content .l-center .io-box .io-box-left .io-4-homepage-block {
-  color: #98a6ac;
-}
-.l-content .l-center .io-box .io-box-left .io-4-homepage-block a {
-  color: #58666f;
-}
-.l-content .l-center .io-box .io-box-left .io-1-homepage-block span {
-  padding: 5px;
-}
-.l-content .l-center .io-box .io-box-left .io-2-homepage-block span {
-  padding: 5px;
-}
-.l-content .l-center .io-box .io-box-left .io-3-homepage-block span {
-  padding: 5px;
-}
-.l-content .l-center .io-box .io-box-left .io-4-homepage-block span {
-  padding: 5px;
-}
-.l-content .l-center .io-box .io-box-left .io-5-homepage-block span {
-  padding: 5px;
-}
-
-.l-content .l-center .io-box .io-box-left .io-5-homepage-block {
-  width: calc(100% - 20px);
-  color: #98a6ac;
-  background: #e4eaed;
-}
-.l-content .l-center .io-box .io-box-left .io-5-homepage-block a {
-  color: #27c54e;
-}
-.l-content .l-center .io-box .io-box-left .io-5-homepage-block:before {
-  font-family: 'Font Awesome 5 Free';
-  font-weight: bold;
-  font-size: 32px;
-  background: #dde6e8;
-  height: 121px;
-  width: 115px;
-  line-height: 90px;
-  content: "\f581";
-  color: #fff;
-  float: left;
-  border-radius: 5px 0 0 5px;
-  padding-top: 16px;
-}
-.l-content .l-center .io-box .io-box-right {
-  float: right;
-  width: 800px;
-  background: #fff;
-  height: 450px;
-  overflow: hidden;
-  border-radius: 3px;
-  text-align: center;
-}
-.l-content .l-center .io-box .io-box-right img {
-  margin-top: 8px;
-  width: 767px;
-  height: 433px;
-  position: relative;
-}
-.l-content .l-center .l-unit-ft {
-  padding: 0 0 37px 15px;
-  overflow: hidden;
-  margin: 0px 20px 19px 20px;
-  background: #e4eaed;
-  border-radius: 3px;
-  border-bottom: none !important;
-  border-left: none !important;
-  position: relative;
-  color: #a6b0b4;
-  font-weight: bold;
-  text-transform: uppercase;
-  font-size: 11px;
-}
-.l-content .l-center .l-unit-ft:before {
-  font-family: "Font Awesome 5 Free";
-  font-weight: bold;
-  font-size: 32px;
-  background: #dde6e8;
-  height: 100%;
-  width: 90px;
-  line-height: 108px;
-  content: "\f05a";
-  color: #fff;
-  float: left;
-  border-radius: 5px 0 0 5px;
-  position: absolute;
-  left: 0;
-  text-align: center;
-}
-.l-content .l-center .l-unit-ft .data {
-  margin: 0 0 50px 0;
-}
-.l-content .l-center #vstobjects {
-  padding: 0 0 0 15px;
-  overflow: hidden;
-  margin: 0px 20px 20px 20px;
-  background: #fff;
-  border-radius: 3px;
-  border-bottom: none !important;
-  border-left: none !important;
-  color: #98a6ac;
-  font-size: 14px;
-}
-.l-content .l-center #vstobjects .data-date {
-  color: #98A6AC;
-  letter-spacing: unset;
-  display: inline-block;
-  border-bottom: solid 10px #ffeb0087;
-  line-height: 3px;
-  padding: 0 0px;
-  margin-bottom: 30px;
-  font-weight: 400;
-  font-size: 16px;
-}
-.l-content .l-center .vst-text.step-top.helper-container {
-  margin-bottom: unset;
-  margin-top: 0;
-  float: unset;
-  height: auto;
-  width: auto;
-}
-.l-content .l-center .vst-text.step-top.helper-container #tabs.cron-helper-tabs {
-  padding: 0 0 0 15px;
-  overflow: hidden;
-  margin: 0 20px 20px 20px;
-  background: #fff;
-  border-radius: 3px;
-  border-bottom: none !important;
-  border-left: none !important;
-  color: #98a6ac;
-  font-size: 14px;
-  border: none !important;
-}
-.l-content > .units.l-center::before {
-  content: '';
-  display: block;
-  height: 0;
-}
-.l-content > .l-center {
-  margin-left: 200px;
-  margin-right: 240px;
-}
-.l-content > .l-center:first-child {
-  margin-left: 0;
-}
-.l-content #vstobjects > .l-center {
-  margin-left: 200px;
-  margin-right: 240px;
-  padding-top: 0;
-  padding-bottom: 1px;
-}
-
-.l-content .right_sidebar {
-  width: 240px;
-  position: fixed;
-  display: block;
-  /*overflow-scrolling: auto;*/
-  z-index: 98;
-  top: 50px;
-  right: 0px;
-  box-sizing: border-box;
-  height: 100%;
-  background: #fff;
-}
-.l-content .io-log {
-  color: #58666f;
-  border-left: 1px solid #dee5e8;
-  width: 240px;
-  position: relative;
-  display: block;
-  /*overflow-scrolling: auto;*/
-  z-index: 99;
-  top: 0px;
-  right: 0px;
-  background: #fff;
-  word-break: break-word;
-  overflow: hidden;
-  border-right: 8px solid #e3e3e3;
-  box-sizing: border-box;
-}
-.l-content .io-log::-webkit-scrollbar {
-  width: 7px;
-  /* Track */
-}
-.l-content .io-log::-webkit-scrollbar-track {
-  background: rgba(255, 255, 255, 0);
-  /* Handle */
-}
-.l-content .io-log::-webkit-scrollbar-thumb {
-  background: rgba(0, 0, 0, 0.15);
-  border-radius: 7px;
-  /* Handle on hover */
-}
-.l-content .io-log::-webkit-scrollbar-thumb:hover {
-  background: rgba(0, 0, 0, 0.4);
-  border-radius: 7px;
-}
-.l-content .io-log > * {
-  margin: 0 20px;
-}
-.l-content .io-log h2 {
-  margin: 0 0 20px 0;
-  padding-left: 20px;
-  font-size: 24px;
-  font-weight: 300;
-  line-height: 60px;
-  color: #98a6ac;
-  border-bottom: 1px solid #dee5e8;
-  cursor: pointer;
-}
-.l-content .io-log h2:before {
-  font-family: "Font Awesome 5 Free";
-  font-weight: bold;
-  content: "\f15c";
-  padding-right: 10px;
-  font-size: 17px;
-}
-.l-content .io-log > div {
-  /* border-left: solid 1px #dee5e8; */
-  padding-left: 15px;
-  position: relative;
-  margin-left: 25px;
-}
-.l-content .io-log > div > div {
-  position: relative;
-  margin-bottom: 25px;
-}
-.l-content .io-log > div > div > div:nth-of-type(2) {
-  color: #98a6ac;
-  font-size: 13px;
-  margin-bottom: 5px;
-}
-.l-content .io-log > div > div > div:nth-of-type(3) {
-  color: #98a6ac;
-  font-size: 13px;
-  margin-bottom: 5px;
-}
-.l-content .io-log > div > div:before {
-  content: '';
-  position: absolute;
-  height: 100%;
-  width: 7px;
-  border-radius: 10px;
-  border: solid 1px #dee5e8;
-  background: #e0fff9;
-  left: -20px;
-}
-.l-content .io-log > div > div:first-child(1n):before {
-  background: #e0fff9;
-}
-.l-content .io-log > div > div:nth-child(2n):before {
-  background: #fbffe0;
-}
-.l-content .io-log > div > div:nth-child(3n):before {
-  background: #fbffe0;
-}
-.l-content .io-log > div > div:nth-child(4n):before {
-  background: #fbffe0;
-}
-.l-content .io-log > div > div:nth-child(5n):before {
-  background: #fbffe0;
-}
-
-.l-content .io-log2 {
-  color: #58666f;
-  border-left: 1px solid #dee5e8;
-  border-top: 1px solid #cecece;
-  width: 240px;
-  position: relative;
-  height: 100%;
-  display: block;
-  /*overflow-scrolling: auto;*/
-  z-index: 99;
-  top: 0px;
-  right: 0px;
-  background: #fff;
-  word-break: break-word;
-  overflow-y: scroll;
-  scrollbar-width: thin;
-  box-sizing: border-box;
-}
-.l-content .io-log2::-webkit-scrollbar {
-  width: 7px;
-  /* Track */
-}
-.l-content .io-log2::-webkit-scrollbar-track {
-  background: rgba(255, 255, 255, 0);
-  /* Handle */
-}
-.l-content .io-log2::-webkit-scrollbar-thumb {
-  background: rgba(0, 0, 0, 0.15);
-  border-radius: 7px;
-  /* Handle on hover */
-}
-.l-content .io-log2::-webkit-scrollbar-thumb:hover {
-  background: rgba(0, 0, 0, 0.4);
-  border-radius: 7px;
-}
-.l-content .io-log2 > * {
-  margin: 0 20px;
-}
-.l-content .io-log2 h2 {
-  margin: 0 0 20px 0;
-  padding-left: 20px;
-  font-size: 24px;
-  font-weight: 300;
-  line-height: 60px;
-  color: #98a6ac;
-  border-bottom: 1px solid #dee5e8;
-  cursor: pointer;
-}
-.l-content .io-log2 h2:before {
-  font-family: "Font Awesome 5 Free";
-  font-weight: bold;
-  content: "\f15c";
-  padding-right: 10px;
-  font-size: 17px;
-}
-.l-content .io-log2 > div {
-  border-left: solid 1px #dee5e8;
-  padding-left: 15px;
-  position: relative;
-  margin-left: 25px;
-}
-.l-content .io-log2 > div > div {
-  position: relative;
-  margin-bottom: 25px;
-}
-.l-content .io-log2 > div > div > div:nth-of-type(2) {
-  color: #98a6ac;
-  font-size: 12px;
-  margin-bottom: 5px;
-}
-.l-content .io-log2 > div > div:before {
-  content: '';
-  position: absolute;
-  height: 100%;
-  width: 7px;
-  border-radius: 10px;
-  border: solid 1px #dee5e8;
-  background: #fff;
-  left: -20px;
-}
-.l-content .io-log2 > div > div:nth-child(2n):before {
-  border: solid 1px #27c54e;
-}
-.l-content .io-log2 > div > div:nth-child(3n):before {
-  border: solid 1px #27bbc5;
-}
-.l-content .io-log2 > div > div:nth-child(4n):before {
-  border: solid 1px #275bc5;
-}
-.l-content .io-log2 > div > div:nth-child(5n):before {
-  border: solid 1px #ffcc00;
-}
-
-
-#tooltip {
-  background-color: #34b5dd;
-}
-.l-sort__create-btn.edit:hover #tooltip {
-  background-color: #49c8ef;
-}
-.l-sort__create-btn.edit:active #tooltip {
-  background-color: #00d8ff !important;
-}
-.l-sort__create-btn:active #tooltip {
-  background-color: #00d8ff;
-}
-.body-login, .body-reset {
-  background-color: #f0f3f5;
-}
-.body-login .login, .body-reset .login {
-  font-family: Arial, Helvetica, sans-serif;
-  border: 1px solid #e7ecee;
-  border-radius: 10px;
-  overflow: hidden;
-  position: relative;
-  padding: 35px 35px 10px 35px;
-  display: block;
-  width: 420px;
-  box-shadow: 0 2px 2px rgba(0, 0, 0, 0.05), 0 1px 0 rgba(0, 0, 0, 0.05);
-}
-.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1), .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) {
-  position: absolute;
-  text-align: center;
-  width: calc(100% - 46px);
-}
-/*
-.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) a, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) a {
-  background-image: url(/images/sprite.png?1446554103);
-  background-position: -65px -182px;
-  background-repeat: no-repeat;
-  display: inline-block;
-  height: 40px;
-  margin-top: 0;
-  width: 80px;
-  margin-left: 0;
-  background-size: 235px 325px;
-  position: relative;
-}
-*/
-/*
-.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) a img, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(1) a img {
-  display: none;
-}
-*/
-.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2), .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) {
-  position: relative;
-  padding: 65px 0 0 0 !important;
-}
-.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .vst-input, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .vst-input {
-  padding: 5px 10px;
-  margin: 0;
-  width: 320px !important;
-  margin-top: 7px;
-  border-radius: 3px;
-  border: solid 1px #d3d9e2;
-}
-.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button, .body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button:hover, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button:hover, .body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button:active, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(1) > td:nth-of-type(2) .button:active {
-  width: 100% !important;
-  border: 1px solid #27c54e;
-  background-color: #27c54e;
-  color: #f4f3f9;
-  margin-bottom: 20px;
-}
-.body-login .login > tbody > tr > td > table > tbody > tr:nth-of-type(2) .login-bottom, .body-reset .login > tbody > tr > td > table > tbody > tr:nth-of-type(2) .login-bottom {
-  width: auto;
-  text-align: center;
-  padding-bottom: unset;
-  padding: 0;
-}
-.body-login .login-box .vst-advanced, .body-reset .login-box .vst-advanced {
-  color: #34b5dd;
-}
-.body-web-log .l-header > .l-center {
-  margin-left: 0;
-}
-.l-stat__col span {
-    padding: 4px 0;
-    font-size: 15px;
-    position: fixed;
-    display: inline-block;
-    left: 159px;
-}
-.l-sort__create-btn2 {
-    background-image: url("/images/sprite.png?1446554103");
-    background-position: -331px -107px;
-    background-repeat: no-repeat;
-    display: inline-block;
-    height: 45px;
-    width: 45px;
-}
-/*
-.ui-resizable-handle {
-    background-color: #333 !important;
-}
-*/
-/*
-div.ui-dialog div {
-    background-color: #333 !important;
-}
-*/
-div.ui-dialog > div {
-    background-color: #333 !important;
-}
-div.ui-dialog > div div {
-    background-color: #333 !important;
-}
-/*
-div.ui-dialog > div > div {
-    background-color: #333 !important;
-}
-div.ui-dialog + div {
-    background-color: #333 !important;
-}
-div.ui-dialog + div div{
-    background-color: #333 !important;
-}
-*/
-/*
-.ui-dialog-titlebar {
-    background-color: #333 !important;
-}
-.ui-dialog-buttonpane {
-    background-color: #333 !important;
-}
-*/

From 83acec3ec1b757045a45a3912dc7d66b79320c84 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jun 2023 10:04:56 +0200
Subject: [PATCH 1945/2300] UI performance fix 4

---
 web/css/styles.min.css                        |  6 ++-
 web/inc/main.php                              |  2 +-
 web/js/init.js                                |  6 ++-
 web/templates/admin/list_backup.html          |  2 +-
 web/templates/admin/list_backup_detail.html   |  2 +-
 .../admin/list_backup_exclusions.html         |  2 +-
 web/templates/admin/list_cron.html            |  2 +-
 web/templates/admin/list_db.html              |  2 +-
 web/templates/admin/list_dns.html             |  2 +-
 web/templates/admin/list_dns_rec.html         |  2 +-
 web/templates/admin/list_firewall.html        |  2 +-
 .../admin/list_firewall_banlist.html          |  2 +-
 web/templates/admin/list_ip.html              |  2 +-
 web/templates/admin/list_mail.html            |  2 +-
 web/templates/admin/list_mail_acc.html        |  2 +-
 web/templates/admin/list_packages.html        |  2 +-
 web/templates/admin/list_services.html        |  2 +-
 web/templates/admin/list_user.html            |  5 +-
 web/templates/admin/list_web.html             |  2 +-
 web/templates/header.html                     |  2 +-
 web/templates/user/list_cron.html             |  2 +-
 web/templates/user/list_db.html               |  2 +-
 web/templates/user/list_dns.html              | 52 ++++++++++++++-----
 web/templates/user/list_dns_rec.html          |  2 +-
 web/templates/user/list_mail.html             |  2 +-
 web/templates/user/list_mail_acc.html         |  2 +-
 web/templates/user/list_user.html             |  6 +--
 web/templates/user/list_web.html              |  2 +-
 28 files changed, 75 insertions(+), 46 deletions(-)

diff --git a/web/css/styles.min.css b/web/css/styles.min.css
index 04306929..b3636cf2 100644
--- a/web/css/styles.min.css
+++ b/web/css/styles.min.css
@@ -4089,8 +4089,12 @@ b, strong {
 
 
 #tooltip {
-  background-color: #34b5dd;
+  background-color: #3AB5DD;
 }
+#tooltip:hover {
+  background-color: #1ca2cc;
+}
+
 .l-sort__create-btn.edit:hover #tooltip {
   background-color: #49c8ef;
 }
diff --git a/web/inc/main.php b/web/inc/main.php
index 880b962d..34483025 100644
--- a/web/inc/main.php
+++ b/web/inc/main.php
@@ -8,7 +8,7 @@ if (file_exists("/usr/local/vesta/web/inc/switch_to_vesta_port") && isset($_SERV
 session_start();
 
 define('VESTA_CMD', '/usr/bin/sudo /usr/local/vesta/bin/');
-define('JS_LATEST_UPDATE', '1491697869');
+define('JS_LATEST_UPDATE', '1491697870');
 
 $i = 0;
 
diff --git a/web/js/init.js b/web/js/init.js
index 4da9422f..06ecc750 100644
--- a/web/js/init.js
+++ b/web/js/init.js
@@ -31,10 +31,11 @@ $(document).ready(function(){
             });
 
 
+            /*
             // CREATE BUTTON
             if ($(".l-sort__create-btn").length>0) {
-                $(".l-sort__create-btn").append("<div id='add-icon'></div>");
-                $(".l-sort__create-btn").append("<div id='tooltip'>"+$('.l-sort__create-btn').attr('title').replace(' ','&nbsp;')+"</div>");
+                //$(".l-sort__create-btn").append("<div id='add-icon'></div>");
+                //$(".l-sort__create-btn").append("<div id='tooltip'>"+$('.l-sort__create-btn').attr('title').replace(' ','&nbsp;')+"</div>");
                 $('.l-sort__create-btn').hover(function(){
                     $("#tooltip").css('background-color', '#1ca2cc');
                 }, function() {
@@ -43,6 +44,7 @@ $(document).ready(function(){
                       //$("#tooltip").remove();
                 });
             }
+            */
               
             // SEARCH BOX
                 
diff --git a/web/templates/admin/list_backup.html b/web/templates/admin/list_backup.html
index 87876cde..0ed5dd18 100644
--- a/web/templates/admin/list_backup.html
+++ b/web/templates/admin/list_backup.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/schedule/backup/?token=<?=$_SESSION['token']?>" class="l-sort__create-btn" title="<?=__('Create Backup')?>"></a>
+        <a href="/schedule/backup/?token=<?=$_SESSION['token']?>" class="l-sort__create-btn" title="<?=__('Create Backup')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Create Backup')?></div></a>
         <div class="l-sort-toolbar clearfix">
           <table>
             <tr>
diff --git a/web/templates/admin/list_backup_detail.html b/web/templates/admin/list_backup_detail.html
index 0280900f..289d9b2f 100644
--- a/web/templates/admin/list_backup_detail.html
+++ b/web/templates/admin/list_backup_detail.html
@@ -8,7 +8,7 @@ input[type="checkbox"] {
 <form action="/bulk/restore/" method="post" id="objects">
     <div class="l-center" style="margin-left: 240px; padding-right: 270px;">
       <div class="l-sort clearfix noselect">
-        <a href="/schedule/restore/?backup=<?=htmlentities($_GET['backup'])?>" class="l-sort__create-btn restore" style="bottom: 0" title="<?=__('Restore All')?>"></a>
+        <a href="/schedule/restore/?backup=<?=htmlentities($_GET['backup'])?>" class="l-sort__create-btn restore" style="bottom: 14px;" title="<?=__('Restore All')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Restore All')?></div></a>
         <div class="l-sort-toolbar clearfix">
           <table>
             <tr>
diff --git a/web/templates/admin/list_backup_exclusions.html b/web/templates/admin/list_backup_exclusions.html
index efaaa450..2093278f 100644
--- a/web/templates/admin/list_backup_exclusions.html
+++ b/web/templates/admin/list_backup_exclusions.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/edit/backup/exclusions/" class="l-sort__create-btn edit" title="<?=__('Configure')?>"></a>
+        <a href="/edit/backup/exclusions/" class="l-sort__create-btn edit" title="<?=__('Configure')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Configure')?></div></a>
         <div class="l-sort-toolbar clearfix">
           <table>
             <tr>
diff --git a/web/templates/admin/list_cron.html b/web/templates/admin/list_cron.html
index 4bea20c0..e6bec6b6 100644
--- a/web/templates/admin/list_cron.html
+++ b/web/templates/admin/list_cron.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/cron/" class="l-sort__create-btn" title="<?=__('Add Cron Job')?>"></a>
+        <a href="/add/cron/" class="l-sort__create-btn" title="<?=__('Add Cron Job')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add Cron Job')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-name"><span class="name"><?=__('Command')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/admin/list_db.html b/web/templates/admin/list_db.html
index cdcac786..72d2a92c 100644
--- a/web/templates/admin/list_db.html
+++ b/web/templates/admin/list_db.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/db/" class="l-sort__create-btn" title="<?=__('Add Database')?>"></a>
+        <a href="/add/db/" class="l-sort__create-btn" title="<?=__('Add Database')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add Database')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-name"><span class="name"><?=__('Database')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/admin/list_dns.html b/web/templates/admin/list_dns.html
index 5ce29219..57a0d57e 100644
--- a/web/templates/admin/list_dns.html
+++ b/web/templates/admin/list_dns.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/dns/" title="<?=__('Add DNS Domain')?>" class="l-sort__create-btn"></a>
+        <a href="/add/dns/" title="<?=__('Add DNS Domain')?>" class="l-sort__create-btn"><div id="add-icon"></div><div id="tooltip"><?=__('Add DNS Domain')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-expire" sort_as_int="1"><span class="name"><?=__('Expire')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/admin/list_dns_rec.html b/web/templates/admin/list_dns_rec.html
index f84b504f..e42e4f63 100644
--- a/web/templates/admin/list_dns_rec.html
+++ b/web/templates/admin/list_dns_rec.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/dns/?domain=<?=htmlentities($_GET['domain'])?>" title="<?=__('Add DNS Record')?>" class="l-sort__create-btn"></a>
+        <a href="/add/dns/?domain=<?=htmlentities($_GET['domain'])?>" title="<?=__('Add DNS Record')?>" class="l-sort__create-btn"><div id="add-icon"></div><div id="tooltip"><?=__('Add DNS Record')?></div></a>
         <div class="l-sort-toolbar clearfix">
           <table>
             <tr>
diff --git a/web/templates/admin/list_firewall.html b/web/templates/admin/list_firewall.html
index a12c9daf..23402a2b 100644
--- a/web/templates/admin/list_firewall.html
+++ b/web/templates/admin/list_firewall.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/firewall/" class="l-sort__create-btn" title="<?=__('Add Rule')?>"></a>
+        <a href="/add/firewall/" class="l-sort__create-btn" title="<?=__('Add Rule')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add Rule')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-action"><span class="name active"><?=__('Action')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-protocol"><span class="name"><?=__('Protocol')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/admin/list_firewall_banlist.html b/web/templates/admin/list_firewall_banlist.html
index e5119856..72153940 100644
--- a/web/templates/admin/list_firewall_banlist.html
+++ b/web/templates/admin/list_firewall_banlist.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/firewall/banlist/" class="l-sort__create-btn" title="<?=__('Ban IP Address')?>"></a>
+        <a href="/add/firewall/banlist/" class="l-sort__create-btn" title="<?=__('Ban IP Address')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Ban IP Address')?></div></a>
 
         <div class="l-sort-toolbar clearfix">
           <table>
diff --git a/web/templates/admin/list_ip.html b/web/templates/admin/list_ip.html
index 7da9fa2c..006fa74d 100644
--- a/web/templates/admin/list_ip.html
+++ b/web/templates/admin/list_ip.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/ip/" class="l-sort__create-btn" title="<?=__('Add IP')?>"></a>
+        <a href="/add/ip/" class="l-sort__create-btn" title="<?=__('Add IP')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add IP')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-ip"><span class="name"><?=__('ip')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/admin/list_mail.html b/web/templates/admin/list_mail.html
index 6bd27cca..13cfa491 100644
--- a/web/templates/admin/list_mail.html
+++ b/web/templates/admin/list_mail.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/mail/" class="l-sort__create-btn" title="<?=__('Add Mail Domain')?>"></a>
+        <a href="/add/mail/" class="l-sort__create-btn" title="<?=__('Add Mail Domain')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add Mail Domain')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-name"><span class="name"><?=__('Domain')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/admin/list_mail_acc.html b/web/templates/admin/list_mail_acc.html
index 13495ff6..adfc51c6 100644
--- a/web/templates/admin/list_mail_acc.html
+++ b/web/templates/admin/list_mail_acc.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/mail/?domain=<?=htmlentities($_GET['domain'])?>" class="l-sort__create-btn" title="<?=__('Add Mail Account')?>"></a>
+        <a href="/add/mail/?domain=<?=htmlentities($_GET['domain'])?>" class="l-sort__create-btn" title="<?=__('Add Mail Account')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add Mail Account')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-name"><span class="name"><?=__('Account')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/admin/list_packages.html b/web/templates/admin/list_packages.html
index 65a09e4b..6b09a440 100644
--- a/web/templates/admin/list_packages.html
+++ b/web/templates/admin/list_packages.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/package/" class="l-sort__create-btn" title="<?=__('Add Package')?>"></a>
+        <a href="/add/package/" class="l-sort__create-btn" title="<?=__('Add Package')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add Package')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-name"><span class="name"><?=__('Package Name')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/admin/list_services.html b/web/templates/admin/list_services.html
index 45d6b18a..c1f91953 100644
--- a/web/templates/admin/list_services.html
+++ b/web/templates/admin/list_services.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/edit/server/" class="l-sort__create-btn edit" title="<?=__('Configure')?>"></a>
+        <a href="/edit/server/" class="l-sort__create-btn edit" title="<?=__('Configure')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Configure')?></div></a>
 
         <div class="l-sort-toolbar clearfix">
           <table>
diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index dacd71e3..066513ee 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -4,7 +4,7 @@
           if ($user != 'admin') {
             //echo '<a class="l-sort__create-btn" href="/add/user/" title="'.__('Add User').'"></a>';
           //} else {
-            echo '<a class="l-sort__create-btn" href="/add/web/" title="'.__('Add Web Domain').'"></a>';
+            echo '<a class="l-sort__create-btn" href="/add/web/" title="'.__('Add Web Domain').'"><div id="add-icon"></div><div id="tooltip">'.__('Add Web Domain').'</div></a>';
           }
         ?>
         <ul class="context-menu sort-order" style="display:none;">
@@ -93,7 +93,8 @@
             </div>
         </div>
       <?php
-            echo '<a class="l-sort__create-btn" style="position: relative; bottom: 0; margin-bottom: 15px; left: 20px;" href="/add/user/" title="'.__('Add User').'"></a>';
+            //echo '<a class="l-sort__create-btn" style="position: relative; bottom: 0; margin-bottom: 15px; left: 20px;" href="/add/user/" title="'.__('Add User').'"></a>';
+            echo '<a class="l-sort__create-btn" style="position: relative; bottom: 0; margin-bottom: 15px; left: 20px;" href="/add/user/" title="'.__('Add User').'"><div id="add-icon"></div><div id="tooltip">'.__('Add User').'</div></a>';
         }
         if (isset($changelog)) {
           echo "<br /><br /><div style='margin: -20px 20px 20px 20px; padding: 10px; background: #fff;'><h1 style=\"margin: 0; color: #aa9c88;\">".__("What's new:")."</h1><br /><pre  style=\"padding: 16px; overflow: auto; font-size: 85%; line-height: 1.45; background-color: #f6f8fa; border-radius: 3px; font-weight: bold;\">".$changelog."</pre>".__("This only admin see after myVesta upgrade, and will dissapear on next refresh.")." ".__("If you missed an update, see our previous")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://github.com/myvesta/vesta/blob/master/Changelog.md\">".__("change logs")."</a>.<br />".__("Check out our")." <a style=\"color: #007bff;\" target=\"_blank\" href=\"https://www.myvestacp.com/\">".__("new site, forum and knowledge base")."</a>.<br /><br /><hr style=\"color: #ffebcd;\" /></div>";
diff --git a/web/templates/admin/list_web.html b/web/templates/admin/list_web.html
index 72fe1454..5bb2d868 100644
--- a/web/templates/admin/list_web.html
+++ b/web/templates/admin/list_web.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/web/" class="l-sort__create-btn" title="<?=__('Add Web Domain')?>"></a>
+        <a href="/add/web/" class="l-sort__create-btn" title="<?=__('Add Web Domain')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add Web Domain')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-name"><span class="name"><?=__('Domain')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/header.html b/web/templates/header.html
index 36cf6cdf..848f9a64 100644
--- a/web/templates/header.html
+++ b/web/templates/header.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8">
   <link rel="icon" href="/images/favicon.ico" type="image/x-icon">
   <title>myVesta - <?=__($TAB)?></title>
-  <link rel="stylesheet" href="/css/styles.min.css?1446554109">
+  <link rel="stylesheet" href="/css/styles.min.css?1446554110">
   <link type="text/css" href="/css/jquery-custom-dialogs.css" rel="stylesheet" />
   <link href="/css/fonts/font_sans_pro.css" rel="stylesheet">
   <link href="/css/fonts/font_lobster.css" rel="stylesheet">
diff --git a/web/templates/user/list_cron.html b/web/templates/user/list_cron.html
index 1a80dfb4..567b219d 100644
--- a/web/templates/user/list_cron.html
+++ b/web/templates/user/list_cron.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/cron/" class="l-sort__create-btn" title="<?=__('Add Cron Job')?>"></a>
+        <a href="/add/cron/" class="l-sort__create-btn" title="<?=__('Add Cron Job')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add Cron Job')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-name"><span class="name"><?=__('Command')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/user/list_db.html b/web/templates/user/list_db.html
index 63972dba..ae976640 100644
--- a/web/templates/user/list_db.html
+++ b/web/templates/user/list_db.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/db/" class="l-sort__create-btn" title="<?=__('Add Database')?>"></a>
+        <a href="/add/db/" class="l-sort__create-btn" title="<?=__('Add Database')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add Database')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-name"><span class="name"><?=__('Database')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/user/list_dns.html b/web/templates/user/list_dns.html
index 36093660..82719b03 100644
--- a/web/templates/user/list_dns.html
+++ b/web/templates/user/list_dns.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/dns/" title="<?=__('Add DNS Domain')?>" class="l-sort__create-btn"></a>
+        <a href="/add/dns/" title="<?=__('Add DNS Domain')?>" class="l-sort__create-btn"><div id="add-icon"></div><div id="tooltip"><?=__('Add DNS Domain')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-expire" sort_as_int="1"><span class="name"><?=__('Expire')?></span><span class="up">&nbsp;</span></li>
@@ -98,28 +98,28 @@ sort-expire="<?=strtotime($data[$key]['EXP'])?>" sort-records="<?=(int)$data[$ke
           <div class="l-unit__date">
             <?=translate_date($data[$key]['DATE'])?>
           </div>
-          <div class="l-unit__suspended"><?__('suspended')?></div>
+          <div class="l-unit__suspended"><?=__('suspended')?></div>
           <div class="text-center">
             <i class="l-icon-star" title="<?=__('save to favorites')?>"></i>
           </div>
+
         </div>
         <!-- /.l-unit__col -->
         <div class="l-unit__col l-unit__col--right">
-          <div class="l-unit__name">
+          <div class="l-unit__name separate">
             <?=$key?> <? if(!empty($data[$key]['SRC'])) echo "<span>⇢ ".$data[$key]['SRC']."</span>&nbsp; &nbsp; ";  if($data[$key]['RECORDS']) echo '<span>/ '.$data[$key]['RECORDS'].'</span>';?>
           </div>
-          <div class="l-unit__ip">
-            <?=str_replace('.', '<span>.</span>', $data[$key]['IP'])?>
-          </div>
+          <!--div class="l-unit__ip">
+            <?=str_replace('.', '<span>.</span>', $data[$key]['IP'])?> <b class="step-left"><?=$data[$key]['SOA']?></b>
+          </div -->
           <!-- /.l-unit__ip -->
 
           <div class="l-unit__stats">
             <table>
                <tr>
                 <td>
-                  <div class="l-unit__stat-cols clearfix">
-                    <div class="l-unit__stat-col l-unit__stat-col--left"><b><?=$data[$key]['SOA']?></b></div>
-                    <div class="l-unit__stat-col l-unit__stat-col--right"></div>
+                  <div class="l-unit__stat-cols display-ip clearfix">
+                    <div class="l-unit__stat-col l-unit__stat-col--left compact"><?=str_replace('.', '<span>.</span>', $data[$key]['IP'])?></div>
                   </div>
                 </td>
                 <td>
@@ -138,18 +138,44 @@ sort-expire="<?=strtotime($data[$key]['EXP'])?>" sort-records="<?=(int)$data[$ke
                     </div>
                   </div>
                 </td>
+               </tr>
+               <tr>
+                <td>
+                  <div class="l-unit__stat-cols clearfix">
+                    <div class="l-unit__stat-col l-unit__stat-col--left compact"><b><?=$data[$key]['SOA']?></b></div>
+                  </div>
+                </td>
+                <td>
+                  <div class="l-unit__stat-cols clearfix">
+                    <div class="l-unit__stat-col l-unit__stat-col--left compact"><?=__('Serial')?>:</div>
+                    <div class="l-unit__stat-col l-unit__stat-col--right">
+                      <b><?=$data[$key]['SERIAL']?></b>
+                    </div>
+                  </div>
+                </td>
+                <td>
+
+                  <div class="l-unit__stat-cols clearfix">
+                    <div class="l-unit__stat-col l-unit__stat-col--left compact"><?=__('Expire')?>:</div>
+                    <div class="l-unit__stat-col l-unit__stat-col--right">
+                      <b><?=$data[$key]['EXP']?></b>
+                    </div>
+                  </div>
+                </td>
               </tr>
-              <tr>
+
+
+              <!-- tr>
                 <td>
                   <div class="l-unit__stat-cols clearfix last">
-                    <div class="l-unit__stat-col l-unit__stat-col--left"><?=__('Expire')?>:</div>
+                    <div class="l-unit__stat-col l-unit__stat-col--left "><?=$data[$key]['SOA']?></div>
                     <div class="l-unit__stat-col l-unit__stat-col--right">
                       <b><?=translate_date($data[$key]['EXP'])?></b>
                     </div>
                   </div>
                 </td>
                 <td>
-              </tr>
+              </tr-->
             </table>
           </div>
           <!-- /.l-unit__stats -->
@@ -157,7 +183,7 @@ sort-expire="<?=strtotime($data[$key]['EXP'])?>" sort-records="<?=(int)$data[$ke
         <!-- /.l-unit__col -->
       </div>
       <!-- /.l-unit -->
-      <!--div class="l-separator"></div-->
+      <!-- div class="l-separator"></div-->
       <!-- /.l-separator -->
       <? } ?>
 
diff --git a/web/templates/user/list_dns_rec.html b/web/templates/user/list_dns_rec.html
index 0b62187f..61a8c3ce 100644
--- a/web/templates/user/list_dns_rec.html
+++ b/web/templates/user/list_dns_rec.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/dns/?domain=<?=htmlentities($_GET['domain'])?>" title="<?=__('Add DNS Record')?>" class="l-sort__create-btn"></a>
+        <a href="/add/dns/?domain=<?=htmlentities($_GET['domain'])?>" title="<?=__('Add DNS Record')?>" class="l-sort__create-btn"><div id="add-icon"></div><div id="tooltip"><?=__('Add DNS Record')?></div></a>
         <div class="l-sort-toolbar clearfix">
           <table>
             <tr>
diff --git a/web/templates/user/list_mail.html b/web/templates/user/list_mail.html
index 40284380..1284d095 100644
--- a/web/templates/user/list_mail.html
+++ b/web/templates/user/list_mail.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/mail/" class="l-sort__create-btn" title="<?=__('Add Mail Domain')?>"></a>
+        <a href="/add/mail/" class="l-sort__create-btn" title="<?=__('Add Mail Domain')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add Mail Domain')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-name"><span class="name"><?=__('Domain')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/user/list_mail_acc.html b/web/templates/user/list_mail_acc.html
index 8c5ef567..74c71155 100644
--- a/web/templates/user/list_mail_acc.html
+++ b/web/templates/user/list_mail_acc.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/mail/?domain=<?=htmlentities($_GET['domain'])?>" class="l-sort__create-btn" title="<?=__('Add Mail Account')?>"></a>
+        <a href="/add/mail/?domain=<?=htmlentities($_GET['domain'])?>" class="l-sort__create-btn" title="<?=__('Add Mail Account')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add Mail Account')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-name"><span class="name"><?=__('Account')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/user/list_user.html b/web/templates/user/list_user.html
index 5fbd287d..e2e0da30 100644
--- a/web/templates/user/list_user.html
+++ b/web/templates/user/list_user.html
@@ -1,11 +1,7 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
         <?php
-          if ($user == 'admin') {
-            echo '<a class="l-sort__create-btn" href="/add/user/" title="'.__('Add User').'"></a>';
-          } else {
-            echo '<a class="l-sort__create-btn" href="/add/web/" title="'.__('Add Web Domain').'"></a>';
-          }
+            echo '<a class="l-sort__create-btn" href="/add/web/" title="'.__('Add Web Domain').'"><div id="add-icon"></div><div id="tooltip">'.__('Add Web Domain').'</div></a>';
         ?>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
diff --git a/web/templates/user/list_web.html b/web/templates/user/list_web.html
index 7b4a9db0..41e57687 100644
--- a/web/templates/user/list_web.html
+++ b/web/templates/user/list_web.html
@@ -1,6 +1,6 @@
     <div class="l-center">
       <div class="l-sort clearfix noselect">
-        <a href="/add/web/" class="l-sort__create-btn" title="<?=__('Add Web Domain')?>"></a>
+        <a href="/add/web/" class="l-sort__create-btn" title="<?=__('Add Web Domain')?>"><div id="add-icon"></div><div id="tooltip"><?=__('Add Web Domain')?></div></a>
         <ul class="context-menu sort-order" style="display:none;">
           <li entity="sort-date" sort_as_int="1"><span class="name active"><?=__('Date')?></span><span class="up">&nbsp;</span></li>
           <li entity="sort-name"><span class="name"><?=__('Domain')?></span><span class="up">&nbsp;</span></li>

From db6360922f5e934fcd621169d6c9a5d69e904382 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jun 2023 15:38:39 +0200
Subject: [PATCH 1946/2300] UI performance fix 5

---
 web/inc/main.php                            |  2 +-
 web/js/fix.js                               | 19 ++++--------------
 web/templates/admin/list_backup_detail.html | 20 ++++++++++++-------
 web/templates/admin/panel.html              |  6 ++++--
 web/templates/header.html                   | 22 ++++++++++++++++++++-
 web/templates/right.html                    | 19 +++++++-----------
 web/templates/scripts.html                  |  2 +-
 web/templates/user/panel.html               |  4 ++--
 8 files changed, 53 insertions(+), 41 deletions(-)

diff --git a/web/inc/main.php b/web/inc/main.php
index 34483025..26df863e 100644
--- a/web/inc/main.php
+++ b/web/inc/main.php
@@ -8,7 +8,7 @@ if (file_exists("/usr/local/vesta/web/inc/switch_to_vesta_port") && isset($_SERV
 session_start();
 
 define('VESTA_CMD', '/usr/bin/sudo /usr/local/vesta/bin/');
-define('JS_LATEST_UPDATE', '1491697870');
+define('JS_LATEST_UPDATE', '1491697871');
 
 $i = 0;
 
diff --git a/web/js/fix.js b/web/js/fix.js
index e1bdbb34..aaf0fa05 100644
--- a/web/js/fix.js
+++ b/web/js/fix.js
@@ -54,15 +54,13 @@ function hideIoLog(animate){
         $(".to-top").css("right", 85);
         $(".to-shortcuts").css("right", 130);
         $(".right_sidebar").css("right", -200);
-        //$(".io-log2").css("right", -200);
-        $("#myvesta_float").css("margin-right", 100);
+        //$("#myvesta_float").css("margin-right", 100);
     } else {
         $(".l-content .l-center").animate({"margin-right": 40});
         $(".to-top").animate({"right": 85});
         $(".to-shortcuts").animate({"right": 130});
         $(".right_sidebar").animate({"right": -200});
-        //$(".io-log2").animate({"right": -200});
-        $("#myvesta_float").animate({"margin-right": 100});
+        //$("#myvesta_float").animate({"margin-right": 100});
     }
 }
 
@@ -91,25 +89,16 @@ var iohtml = '<div class="io-box clearfix">\n' +
 $(document).ready(function(){
     //var sys_height=$(".io-log").height();
     //$(".io-log2").css("top", sys_height+50);
+    /*
     setTimeout(function() {
         iolog = getCookie("iolog");
-        /* //console.log('cookie: "'+iolog+'"');
-        if (iolog === '1') {
-            showIoLog(0);
-            return 1;
-        }*/
         if (iolog === '0') {
             //setCookie("iolog", 0, 365);
             hideIoLog(0);
             return 0;
         }
-        /*if (iolog == '') {
-            //console.log('cookie is empty');
-            //setCookie("iolog", 1, 365);
-            showIoLog(0);
-            return '';
-        }*/
     }, 1);
+    */
 
     //if (GLOBAL.CURRENT_USER_FINAL == 'admin') $(".body-user .l-content > .l-center.units").first().prepend( iohtml );
 
diff --git a/web/templates/admin/list_backup_detail.html b/web/templates/admin/list_backup_detail.html
index 289d9b2f..0d583536 100644
--- a/web/templates/admin/list_backup_detail.html
+++ b/web/templates/admin/list_backup_detail.html
@@ -3,6 +3,12 @@ input[type="checkbox"] {
   display: block;
   margin-top: 26px;
 }
+
+.backup-items {
+    background-color: #f8f8f8;
+    margin: 10px 33px;
+    border-radius: 10px;
+}
 </style>
 <br /><br />
 <form action="/bulk/restore/" method="post" id="objects">
@@ -48,7 +54,7 @@ input[type="checkbox"] {
             ++$i;
       ?>
 
-      <div>
+      <div class="backup-items">
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check<?=$i?>" class="ch-toggle" type="checkbox" name="web[]" value="<?=$key?>">
@@ -99,7 +105,7 @@ input[type="checkbox"] {
           if (!empty($key)) {
       ?>
 
-      <div>
+      <div class="backup-items">
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check2<?=$i?>" type="checkbox" name="mail[]" value="<?=$key?>">
@@ -147,7 +153,7 @@ input[type="checkbox"] {
           if (!empty($key)) {
       ?>
 
-      <div>
+      <div class="backup-items">
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check3<?=$i?>" type="checkbox" name="dns[]" value="<?=$key?>">
@@ -194,7 +200,7 @@ input[type="checkbox"] {
           if (!empty($key)) {
       ?>
 
-      <div>
+      <div class="backup-items">
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check4<?=$i?>" type="checkbox" name="db[]" value="<?=$key?>">
@@ -242,7 +248,7 @@ input[type="checkbox"] {
           if (!empty($key)) {
       ?>
 
-      <div>
+      <div class="backup-items">
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check5<?=$i?>" type="checkbox" name="check" value="<?=$key?>">
@@ -290,7 +296,7 @@ input[type="checkbox"] {
           if (!empty($key)) {
       ?>
 
-      <div>
+      <div class="backup-items">
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check6<?=$i?>" type="checkbox" name="udir[]" value="<?=$key?>">
@@ -329,7 +335,7 @@ input[type="checkbox"] {
       <!-- /.l-separator -->
       <? }} ?>
 
-      <div>
+      <div class="backup-items">
         <div class="l-unit-toolbar clearfix">
           <div class="l-unit-toolbar__col l-unit-toolbar__col--left" style="margin-left: 15px;">
             <input id="check7<?=$i?>" type="checkbox" name="cron" value="<?=$i?>">
diff --git a/web/templates/admin/panel.html b/web/templates/admin/panel.html
index 7eb5bab1..c181903b 100644
--- a/web/templates/admin/panel.html
+++ b/web/templates/admin/panel.html
@@ -1,8 +1,8 @@
   <div class="hidden" id="token" token="<?=$_SESSION['token']?>"></div>
-  <a href="#" class="to-top">
+  <a href="#" class="to-top" style="right: <?=$GLOBALS['to_top_right']?>px;">
     <i class="l-icon-to-top"></i>
   </a>
-  <a href="#" class="to-shortcuts">
+  <a href="#" class="to-shortcuts" style="right: <?=$GLOBALS['to_shortcuts_right']?>px;">
     <i class="l-icon-shortcuts"></i>
   </a>
 
@@ -129,9 +129,11 @@ $debian_ver=file_get_contents('/etc/debian_version');
             <span style="font-weight: bold;">Build date:</span> <?php echo $vesta_build_date;?><br />
             <span style="font-weight: bold;">Debian </span> <?php echo $debian_ver;?><br />
         </div>
+        <!--
         <div style="display: block; padding: 30px 0 0 19px; color: #b9bcbd;">
             <a href="https://forum.myvestacp.com/viewtopic.php?f=23&t=819" target="_blank" style="text-decoration: underline; font-weight: bold;">Need urgent assistance?</a>
         </div>
+        -->
       </div>
       <!-- /.l-stats -->
     </div>
diff --git a/web/templates/header.html b/web/templates/header.html
index 848f9a64..810657d8 100644
--- a/web/templates/header.html
+++ b/web/templates/header.html
@@ -16,6 +16,23 @@
     <?php
         $CURRENT_USER_FINAL=$_SESSION['user'];
         if (isset($_SESSION['look']) && $_SESSION['look']!='') $CURRENT_USER_FINAL=$_SESSION['look'];
+        
+        $right_sidebar_right=0;
+        $content_margin_right=240;
+        $content_margin_right=240;
+        $to_top_right=285;
+        $to_shortcuts_right=330;
+        if (isset($_COOKIE['iolog']) && $_COOKIE['iolog']=='0') {
+            $right_sidebar_right=-200;
+            $content_margin_right=40;
+            $to_top_right=85;
+            $to_shortcuts_right=130;
+        }
+        
+        $GLOBALS['CURRENT_USER_FINAL']=$CURRENT_USER_FINAL;
+        $GLOBALS['right_sidebar_right']=$right_sidebar_right;
+        $GLOBALS['to_top_right']=$to_top_right;
+        $GLOBALS['to_shortcuts_right']=$to_shortcuts_right;
     ?>
     var GLOBAL = {};
     GLOBAL.FTP_USER_PREFIX  = 'admin_';
@@ -23,8 +40,11 @@
     GLOBAL.DB_DBNAME_PREFIX = 'admin_';
     GLOBAL.CURRENT_USER = '<?=$_SESSION['user']?>';
     GLOBAL.CURRENT_USER_LOOK = '<?=$_SESSION['look']?>';
-    GLOBAL.CURRENT_USER_FINAL = '<?=$CURRENT_USER_FINAL?>';
+    GLOBAL.CURRENT_USER_FINAL = '<?=$GLOBALS['CURRENT_USER_FINAL']?>';
     GLOBAL.AJAX_URL = '';
   </script>
+  <style>
+    .l-content .l-center {margin-right: <?=$content_margin_right?>px}
+  </style>
 </head>
 <body class="body-<?=strtolower($TAB)?> lang-<?=$_SESSION['language']?>">
diff --git a/web/templates/right.html b/web/templates/right.html
index 2a699668..88e1f5f0 100644
--- a/web/templates/right.html
+++ b/web/templates/right.html
@@ -1,20 +1,15 @@
-<?php
-    $CURRENT_USER_FINAL=$_SESSION['user'];
-    if (isset($_SESSION['look']) && $_SESSION['look']!='') $CURRENT_USER_FINAL=$_SESSION['look'];
-?>
-
-<div class="right_sidebar" style="width: 240px; position: fixed; display: block; z-index: 98; top: 50px; right: 0px; box-sizing: border-box; height: 100%; background: #fff; border-left: 1px solid #dee5e8;">
+<div class="right_sidebar" style="width: 240px; position: fixed; display: block; z-index: 98; top: 50px; right: <?=$GLOBALS['right_sidebar_right']?>px; box-sizing: border-box; height: 100%; background: #fff; border-left: 1px solid #dee5e8;">
 <div class="io-log">
   <h2 class="io-log-h2" id="iologbutton">
     <?php
-    if ($CURRENT_USER_FINAL=='admin') echo __('Server');
+    if ($GLOBALS['CURRENT_USER_FINAL']=='admin') echo __('Server');
     else echo __('Account');
     ?>
   </h2>
     <div>
 
 <?php
-    if ($CURRENT_USER_FINAL=='admin') {
+    if ($GLOBALS['CURRENT_USER_FINAL']=='admin') {
         $sysload=sys_getloadavg();
         $sysload[0]=number_format((float)$sysload[0], 2, '.', '');
         $sysload[1]=number_format((float)$sysload[1], 2, '.', '');
@@ -67,11 +62,11 @@
           <div>
             <?php
                 $output='';
-                exec (VESTA_CMD . "v-list-user ".$CURRENT_USER_FINAL." json", $output, $return_var);
+                exec (VESTA_CMD . "v-list-user ".$GLOBALS['CURRENT_USER_FINAL']." json", $output, $return_var);
                 $data = json_decode(implode('', $output), true);
                 $data = array_reverse($data,true);
                 //print_r($data); exit;
-                $key=$CURRENT_USER_FINAL;
+                $key=$GLOBALS['CURRENT_USER_FINAL'];
                 if ($data[$key]['DISK_QUOTA']=='unlimited') echo __('unlimited');
                 else echo get_percentage($data[$key]['U_DISK'],$data[$key]['DISK_QUOTA']).' %';
             ?>
@@ -80,7 +75,7 @@
       </div>
 <?php
     }
-    if ($CURRENT_USER_FINAL=='admin') {
+    if ($GLOBALS['CURRENT_USER_FINAL']=='admin') {
         $output='';
         exec ("df -h | grep '^/dev'", $output, $return_var);
         foreach($output as $line) {
@@ -128,7 +123,7 @@
     <div>
 <?php
 $output='';
-exec (VESTA_CMD."v-list-user-log ".$CURRENT_USER_FINAL." json 25", $output, $return_var);
+exec (VESTA_CMD."v-list-user-log ".$GLOBALS['CURRENT_USER_FINAL']." json 25", $output, $return_var);
 check_error($return_var);
 $data = json_decode(implode('', $output), true);
 foreach ($data as $key => $value) {
diff --git a/web/templates/scripts.html b/web/templates/scripts.html
index 8082dc93..b1d58e3d 100644
--- a/web/templates/scripts.html
+++ b/web/templates/scripts.html
@@ -8,7 +8,7 @@
   <script type="text/javascript" src="/js/i18n.js.php?<?=JS_LATEST_UPDATE?>"></script>
   <script type="text/javascript" src="/js/templates.js?<?=JS_LATEST_UPDATE?>"></script>
   <script type="text/javascript" src="/js/jquery.finder.js?<?=JS_LATEST_UPDATE?>"></script>
-  <script type="text/javascript" src="/js/fix.js?v=4"></script>
+  <script type="text/javascript" src="/js/fix.js?v=<?=JS_LATEST_UPDATE?>"></script>
 
   <script>
     hover_menu = function() {}
diff --git a/web/templates/user/panel.html b/web/templates/user/panel.html
index 8ac8ea51..2bff9b62 100644
--- a/web/templates/user/panel.html
+++ b/web/templates/user/panel.html
@@ -1,8 +1,8 @@
   <div class="hidden" id="token" token="<?=$_SESSION['token']?>"></div>
-  <a href="#" class="to-top">
+  <a href="#" class="to-top" style="right: <?=$GLOBALS['to_top_right']?>px;">
     <i class="l-icon-to-top"></i>
   </a>
-  <a href="#" class="to-shortcuts">
+  <a href="#" class="to-shortcuts" style="right: <?=$GLOBALS['to_shortcuts_right']?>px;">
     <i class="l-icon-shortcuts"></i>
   </a>
   <div class="l-header">

From 6e88a26d4d92b9d7eafe6c501a398cf617cbff0c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jun 2023 16:28:15 +0200
Subject: [PATCH 1947/2300] Few buttons decorated

---
 web/add/db/index.php                        |  2 +-
 web/add/mail/index.php                      |  2 +-
 web/add/user/index.php                      |  2 +-
 web/css/styles.min.css                      | 13 +++++++++++++
 web/templates/admin/list_backup_detail.html |  6 ------
 web/templates/admin/list_db.html            |  4 ++--
 web/templates/admin/list_mail.html          |  2 +-
 web/templates/header.html                   |  2 +-
 web/templates/user/list_db.html             |  4 ++--
 web/templates/user/list_mail.html           |  2 +-
 10 files changed, 23 insertions(+), 16 deletions(-)

diff --git a/web/add/db/index.php b/web/add/db/index.php
index 68f66b4a..e0529b32 100644
--- a/web/add/db/index.php
+++ b/web/add/db/index.php
@@ -98,7 +98,7 @@ if (!empty($_POST['ok'])) {
     // Flush field values on success
     if (empty($_SESSION['error_msg'])) {
         $_SESSION['ok_msg'] = __('DATABASE_CREATED_OK',htmlentities($user)."_".htmlentities($_POST['v_database']),htmlentities($user)."_".htmlentities($_POST['v_database']));
-        $_SESSION['ok_msg'] .= " / <a href=".$db_admin_link." target='_blank'>" . __('open %s',$db_admin) . "</a>";
+        $_SESSION['ok_msg'] .= " / <a style=\"text-decoration: underline; color: #9c8cff;\" href=".$db_admin_link." target='_blank'>" . __('open %s',$db_admin) . "</a>";
         unset($v_database);
         unset($v_dbuser);
         unset($v_password);
diff --git a/web/add/mail/index.php b/web/add/mail/index.php
index b260b465..c761139c 100644
--- a/web/add/mail/index.php
+++ b/web/add/mail/index.php
@@ -187,7 +187,7 @@ if (!empty($_POST['ok_acc'])) {
     // Flush field values on success
     if (empty($_SESSION['error_msg'])) {
         $_SESSION['ok_msg'] = __('MAIL_ACCOUNT_CREATED_OK',htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST[v_domain]),htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST[v_domain]));
-        $_SESSION['ok_msg'] .= " / <a href=".$webmail." target='_blank'>" . __('open webmail') . "</a>";
+        $_SESSION['ok_msg'] .= " / <a style=\"text-decoration: underline; color: #9c8cff;\" href=".$webmail." target='_blank'>" . __('open webmail') . "</a>";
         unset($v_account);
         unset($v_password);
         unset($v_password);
diff --git a/web/add/user/index.php b/web/add/user/index.php
index 04043484..b51f587d 100644
--- a/web/add/user/index.php
+++ b/web/add/user/index.php
@@ -100,7 +100,7 @@ if (!empty($_POST['ok'])) {
     // Flush field values on success
     if (empty($_SESSION['error_msg'])) {
         $_SESSION['ok_msg'] = __('USER_CREATED_OK',htmlentities($_POST['v_username']),htmlentities($_POST['v_username']));
-        $_SESSION['ok_msg'] .= " / <a style=\"text-decoration: underline;\" href=\"/login/?loginas=".htmlentities($_POST['v_username'])."&token=".htmlentities($_SESSION['token'])."\">" . __('login as') ." ".htmlentities($_POST['v_username']). "</a>";
+        $_SESSION['ok_msg'] .= " / <a style=\"text-decoration: underline; color: #9c8cff;\" href=\"/login/?loginas=".htmlentities($_POST['v_username'])."&token=".htmlentities($_SESSION['token'])."\">" . __('login as') ." ".htmlentities($_POST['v_username']). "</a>";
         unset($v_username);
         unset($v_password);
         unset($v_email);
diff --git a/web/css/styles.min.css b/web/css/styles.min.css
index b3636cf2..374b458c 100644
--- a/web/css/styles.min.css
+++ b/web/css/styles.min.css
@@ -4223,3 +4223,16 @@ div.ui-dialog + div div{
     background-color: #333 !important;
 }
 */
+
+.backup-items {
+    background-color: #f8f8f8;
+    margin: 10px 33px;
+    border-radius: 10px;
+}
+
+.upper_button {
+  background-color: #3AB5DD;
+  color: #fff !important;
+  padding: 5px 10px !important;
+  border-radius: 13px;
+}
diff --git a/web/templates/admin/list_backup_detail.html b/web/templates/admin/list_backup_detail.html
index 0d583536..a5063e1d 100644
--- a/web/templates/admin/list_backup_detail.html
+++ b/web/templates/admin/list_backup_detail.html
@@ -3,12 +3,6 @@ input[type="checkbox"] {
   display: block;
   margin-top: 26px;
 }
-
-.backup-items {
-    background-color: #f8f8f8;
-    margin: 10px 33px;
-    border-radius: 10px;
-}
 </style>
 <br /><br />
 <form action="/bulk/restore/" method="post" id="objects">
diff --git a/web/templates/admin/list_db.html b/web/templates/admin/list_db.html
index 72d2a92c..9fafb25b 100644
--- a/web/templates/admin/list_db.html
+++ b/web/templates/admin/list_db.html
@@ -35,10 +35,10 @@
                 }
               }
               if($mysql){
-                echo '<td class="step-right"><a class="vst" href="'.$db_myadmin_link.'" target="_blank">phpMyAdmin</td>';
+                echo '<td class="step-right"><a class="vst upper_button" href="'.$db_myadmin_link.'" target="_blank">phpMyAdmin</td>';
               }
               if($pgsql){
-                echo '<td class="step-right"><a class="vst" href="'.$db_pgadmin_link.'" target="_blank">phpPgAdmin</td>';
+                echo '<td class="step-right"><a class="vst upper_button" href="'.$db_pgadmin_link.'" target="_blank">phpPgAdmin</td>';
               }
             ?>
               <td class="l-sort-toolbar__search-box step-left">
diff --git a/web/templates/admin/list_mail.html b/web/templates/admin/list_mail.html
index 13cfa491..6ac91075 100644
--- a/web/templates/admin/list_mail.html
+++ b/web/templates/admin/list_mail.html
@@ -17,7 +17,7 @@
                   $webmail = "http://".$http_host."/webmail/";
                   if (!empty($_SESSION['MAIL_URL'])) $webmail = $_SESSION['MAIL_URL'];
                 ?>
-                <a class="vst" href="<?=$webmail?>" target="_blank"><?=__('open webmail')?> <i></i></a>
+                <a class="vst upper_button" href="<?=$webmail?>" target="_blank"><?=__('open webmail')?> <i></i></a>
               </td>
               <td class="l-sort-toolbar__search-box step-left">
                 <form action="/search/" method="get">
diff --git a/web/templates/header.html b/web/templates/header.html
index 810657d8..7f317f94 100644
--- a/web/templates/header.html
+++ b/web/templates/header.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8">
   <link rel="icon" href="/images/favicon.ico" type="image/x-icon">
   <title>myVesta - <?=__($TAB)?></title>
-  <link rel="stylesheet" href="/css/styles.min.css?1446554110">
+  <link rel="stylesheet" href="/css/styles.min.css?1446554112">
   <link type="text/css" href="/css/jquery-custom-dialogs.css" rel="stylesheet" />
   <link href="/css/fonts/font_sans_pro.css" rel="stylesheet">
   <link href="/css/fonts/font_lobster.css" rel="stylesheet">
diff --git a/web/templates/user/list_db.html b/web/templates/user/list_db.html
index ae976640..14ee286d 100644
--- a/web/templates/user/list_db.html
+++ b/web/templates/user/list_db.html
@@ -35,10 +35,10 @@
                 }
               }
               if($mysql){
-                echo '<td class="step-right"><a class="vst" href="'.$db_myadmin_link.'" target="_blank">phpMyAdmin</td>';
+                echo '<td class="step-right"><a class="vst upper_button" href="'.$db_myadmin_link.'" target="_blank">phpMyAdmin</td>';
               }
               if($pgsql){
-                echo '<td class="step-right"><a class="vst" href="'.$db_pgadmin_link.'" target="_blank">phpPgAdmin</td>';
+                echo '<td class="step-right"><a class="vst upper_button" href="'.$db_pgadmin_link.'" target="_blank">phpPgAdmin</td>';
               }
             ?>
 
diff --git a/web/templates/user/list_mail.html b/web/templates/user/list_mail.html
index 1284d095..d3c39c59 100644
--- a/web/templates/user/list_mail.html
+++ b/web/templates/user/list_mail.html
@@ -17,7 +17,7 @@
                   $webmail = "http://".$http_host."/webmail/";
                   if (!empty($_SESSION['MAIL_URL'])) $webmail = $_SESSION['MAIL_URL'];
                 ?>
-                <a class="vst" href="<?=$webmail?>" target="_blank"><?=__('open webmail')?> <i></i></a>
+                <a class="vst upper_button" href="<?=$webmail?>" target="_blank"><?=__('open webmail')?> <i></i></a>
               </td>
               <td class="l-sort-toolbar__search-box step-left">
                 <form action="/search/" method="get">

From ef368b644bf4e3d97df1c66039d9c632e3a31803 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jun 2023 16:29:24 +0200
Subject: [PATCH 1948/2300] Version 0.9.9-0-2

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 208690c9..f1f3c8dc 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0-1
+vesta-0.9.9-0-2

From 90fddaa4361f22322502aeb905fe477f42eb4658 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Jun 2023 16:32:08 +0200
Subject: [PATCH 1949/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index b2dae100..f8301fd8 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.9-0-2 [12-Jun-2023]
+==================================================
+* Hosting panel UI perfomance fix
+
 Version 0.9.9-0 [05-Jun-2023]
 ==================================================
 * Redesign of hosting panel

From 21071f4d7a087991a45839089e571cd944fe33da Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jun 2023 21:26:22 +0200
Subject: [PATCH 1950/2300] Fix for Grammarly Addon conflict

---
 web/templates/admin/add_mail_acc.html          |  4 ++--
 web/templates/admin/add_web.html               | 10 +++++-----
 .../admin/edit_backup_exclusions.html          |  8 ++++----
 web/templates/admin/edit_mail_acc.html         |  6 +++---
 web/templates/admin/edit_server.html           |  4 ++--
 web/templates/admin/edit_server_bind9.html     |  4 ++--
 web/templates/admin/edit_server_dovecot.html   | 18 +++++++++---------
 web/templates/admin/edit_server_httpd.html     |  2 +-
 web/templates/admin/edit_server_mysql.html     |  2 +-
 web/templates/admin/edit_server_nginx.html     |  2 +-
 web/templates/admin/edit_server_pgsql.html     |  4 ++--
 web/templates/admin/edit_server_php.html       |  2 +-
 web/templates/admin/edit_server_service.html   |  2 +-
 web/templates/admin/edit_web.html              | 10 +++++-----
 web/templates/admin/list_ssl.html              |  6 +++---
 web/templates/user/edit_web.html               | 10 +++++-----
 16 files changed, 47 insertions(+), 47 deletions(-)

diff --git a/web/templates/admin/add_mail_acc.html b/web/templates/admin/add_mail_acc.html
index 43821cd9..e8d09ea8 100644
--- a/web/templates/admin/add_mail_acc.html
+++ b/web/templates/admin/add_mail_acc.html
@@ -97,7 +97,7 @@
                                 </tr>
                                 <tr>
                                     <td>
-                                        <textarea size="20" class="vst-textinput" name="v_aliases"><?=htmlentities(trim($v_aliases, "'"))?></textarea>
+                                        <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_aliases"><?=htmlentities(trim($v_aliases, "'"))?></textarea>
                                     </td>
                                 </tr>
                                 <tr>
@@ -107,7 +107,7 @@
                                 </tr>
                                 <tr>
                                     <td>
-                                        <textarea size="20" class="vst-textinput" name="v_fwd"><?=htmlentities(trim($v_fwd, "'"))?></textarea>
+                                        <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_fwd"><?=htmlentities(trim($v_fwd, "'"))?></textarea>
                                     </td>
                                 </tr>
                                 <tr>
diff --git a/web/templates/admin/add_web.html b/web/templates/admin/add_web.html
index d874be32..77e72239 100644
--- a/web/templates/admin/add_web.html
+++ b/web/templates/admin/add_web.html
@@ -95,7 +95,7 @@
                         </tr>
                         <tr>
                             <td>
-                                <textarea size="20" class="vst-textinput" name="v_aliases" id="v_aliases" ><?=htmlentities(trim($v_aliases, "'"))?></textarea>
+                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_aliases" id="v_aliases" ><?=htmlentities(trim($v_aliases, "'"))?></textarea>
                             </td>
                         </tr>
                         <?php if (!empty($_SESSION['PROXY_SYSTEM'])) { echo ""; ?>
@@ -114,7 +114,7 @@
                                     </tr>
                                     <tr>
                                         <td class="step-left">
-                                            <textarea size="20" class="vst-textinput" name="v_proxy_ext"><?php if (!empty($v_proxy_ext)) { echo htmlentities(trim($v_proxy_ext, "'"));} else { echo 'jpeg, jpg, png, gif, bmp, ico, svg, tif, tiff, css, js, ttf, otf, webp, txt, csv, rtf, doc, docx, xls, xlsx, ppt, pptx, odf, odp, ods, odt, pdf, psd, ai, eot, eps, ps, zip, tar, tgz, gz, rar, bz2, 7z, aac, m4a, mp3, mp4, ogg, wav, wma, 3gp, avi, flv, m4v, mkv, mov, mp4, mpeg, mpg, wmv, exe, iso, dmg, swf, woff, woff2'; }  ?></textarea>
+                                            <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_proxy_ext"><?php if (!empty($v_proxy_ext)) { echo htmlentities(trim($v_proxy_ext, "'"));} else { echo 'jpeg, jpg, png, gif, bmp, ico, svg, tif, tiff, css, js, ttf, otf, webp, txt, csv, rtf, doc, docx, xls, xlsx, ppt, pptx, odf, odp, ods, odt, pdf, psd, ai, eot, eps, ps, zip, tar, tgz, gz, rar, bz2, 7z, aac, m4a, mp3, mp4, ogg, wav, wma, 3gp, avi, flv, m4v, mkv, mov, mp4, mpeg, mpg, wmv, exe, iso, dmg, swf, woff, woff2'; }  ?></textarea>
                                         </td>
                                     </tr>
                                 </table>
@@ -171,7 +171,7 @@
                                     </tr>
                                     <tr>
                                         <td class="step-left">
-                                            <textarea size="20" class="vst-textinput" name="v_ssl_crt"><?=htmlentities(trim($v_ssl_crt, "'"))?></textarea>
+                                            <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_ssl_crt"><?=htmlentities(trim($v_ssl_crt, "'"))?></textarea>
                                         </td>
                                     </tr>
                                     <tr>
@@ -181,7 +181,7 @@
                                     </tr>
                                     <tr>
                                         <td class="step-left">
-                                            <textarea size="20" class="vst-textinput" name="v_ssl_key"><?=htmlentities(trim($v_ssl_key, "'"))?></textarea>
+                                            <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_ssl_key"><?=htmlentities(trim($v_ssl_key, "'"))?></textarea>
                                         </td>
                                     </tr>
                                     <tr>
@@ -191,7 +191,7 @@
                                     </tr>
                                     <tr>
                                         <td class="step-left">
-                                            <textarea size="20" class="vst-textinput" name="v_ssl_ca"><?=htmlentities(trim($v_ssl_ca, "'"))?></textarea>
+                                            <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_ssl_ca"><?=htmlentities(trim($v_ssl_ca, "'"))?></textarea>
                                         </td>
                                     </tr>
                                 </table>
diff --git a/web/templates/admin/edit_backup_exclusions.html b/web/templates/admin/edit_backup_exclusions.html
index 819c9244..2c337555 100644
--- a/web/templates/admin/edit_backup_exclusions.html
+++ b/web/templates/admin/edit_backup_exclusions.html
@@ -50,7 +50,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput" name="v_web" placeholder="<?php echo __('WEB_EXCLUSIONS') ?>"><?=htmlentities(trim($v_web, "'"))?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput" name="v_web" placeholder="<?php echo __('WEB_EXCLUSIONS') ?>"><?=htmlentities(trim($v_web, "'"))?></textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -60,7 +60,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput" name="v_mail" placeholder="<?php echo __('MAIL_EXCLUSIONS') ?>"><?=htmlentities(trim($v_mail, "'"))?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput" name="v_mail" placeholder="<?php echo __('MAIL_EXCLUSIONS') ?>"><?=htmlentities(trim($v_mail, "'"))?></textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -70,7 +70,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput" name="v_db" placeholder="<?php echo __('DB_EXCLUSIONS') ?>"><?=htmlentities(trim($v_db, "'"))?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput" name="v_db" placeholder="<?php echo __('DB_EXCLUSIONS') ?>"><?=htmlentities(trim($v_db, "'"))?></textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -80,7 +80,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea size="20" class="vst-textinput" name="v_userdir" placeholder="<?php echo __('USER_EXCLUSIONS') ?>"><?=htmlentities(trim($v_userdir, "'"))?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_userdir" placeholder="<?php echo __('USER_EXCLUSIONS') ?>"><?=htmlentities(trim($v_userdir, "'"))?></textarea>
                                 </td>
                             </tr>
                         </table>
diff --git a/web/templates/admin/edit_mail_acc.html b/web/templates/admin/edit_mail_acc.html
index cf38065d..e11216a2 100644
--- a/web/templates/admin/edit_mail_acc.html
+++ b/web/templates/admin/edit_mail_acc.html
@@ -86,7 +86,7 @@
                         </tr>
                         <tr>
                             <td>
-                                <textarea size="20" class="vst-textinput short" name="v_aliases"><?=htmlentities(trim($v_aliases, "'"))?></textarea>
+                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput short" name="v_aliases"><?=htmlentities(trim($v_aliases, "'"))?></textarea>
                             </td>
                         </tr>
                         <tr>
@@ -96,7 +96,7 @@
                         </tr>
                         <tr>
                             <td>
-                                <textarea size="20" class="vst-textinput" name="v_fwd"><?=htmlentities(trim($v_fwd, "'"))?></textarea>
+                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_fwd"><?=htmlentities(trim($v_fwd, "'"))?></textarea>
                             </td>
                         </tr>
                         <tr>
@@ -119,7 +119,7 @@
                                     </tr>
                                     <tr>
                                         <td>
-                                            <textarea size="20" class="vst-textinput" name="v_autoreply_message"><?=htmlentities(trim($v_autoreply_message, "'"))?></textarea>
+                                            <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_autoreply_message"><?=htmlentities(trim($v_autoreply_message, "'"))?></textarea>
                                         </td>
                                     </tr>
                                 </table>
diff --git a/web/templates/admin/edit_server.html b/web/templates/admin/edit_server.html
index 59683b6d..b5da08de 100644
--- a/web/templates/admin/edit_server.html
+++ b/web/templates/admin/edit_server.html
@@ -739,7 +739,7 @@
                                         </tr>
                                         <tr>
                                             <td>
-                                                <textarea size="20" class="vst-textinput" name="v_sys_ssl_crt"><?=htmlentities(trim($v_sys_ssl_crt, "'"))?></textarea>
+                                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_sys_ssl_crt"><?=htmlentities(trim($v_sys_ssl_crt, "'"))?></textarea>
                                             </td>
                                         </tr>
                                         <tr>
@@ -749,7 +749,7 @@
                                         </tr>
                                         <tr>
                                             <td>
-                                                <textarea size="20" class="vst-textinput" name="v_sys_ssl_key"><?=htmlentities(trim($v_sys_ssl_key, "'"))?></textarea>
+                                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_sys_ssl_key"><?=htmlentities(trim($v_sys_ssl_key, "'"))?></textarea>
                                             </td>
                                         </tr>
                                         <tr>
diff --git a/web/templates/admin/edit_server_bind9.html b/web/templates/admin/edit_server_bind9.html
index 62d9051f..dae145fc 100644
--- a/web/templates/admin/edit_server_bind9.html
+++ b/web/templates/admin/edit_server_bind9.html
@@ -57,7 +57,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_options"><?=$v_options?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_options"><?=$v_options?></textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -67,7 +67,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
                                 </td>
                             </tr>
                             <td class="vst-text input-label" style="text-transform: capitalize;">
diff --git a/web/templates/admin/edit_server_dovecot.html b/web/templates/admin/edit_server_dovecot.html
index f5b4bd27..38ebea60 100644
--- a/web/templates/admin/edit_server_dovecot.html
+++ b/web/templates/admin/edit_server_dovecot.html
@@ -56,7 +56,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
                                 </td>
                             </tr>
                             <?php if (!empty($v_config_path1)) {
@@ -69,7 +69,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config1"><?=$v_config1?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config1"><?=$v_config1?></textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -79,7 +79,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config2"><?=$v_config2?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config2"><?=$v_config2?></textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -89,7 +89,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config3"><?=$v_config3?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config3"><?=$v_config3?></textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -99,7 +99,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config4"><?=$v_config4?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config4"><?=$v_config4?></textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -109,7 +109,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config5"><?=$v_config5?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config5"><?=$v_config5?></textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -119,7 +119,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config6"><?=$v_config6?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config6"><?=$v_config6?></textarea>
                                 </td>
                             </tr>
 
@@ -130,7 +130,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config7"><?=$v_config7?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config7"><?=$v_config7?></textarea>
                                 </td>
                             </tr>
 
@@ -141,7 +141,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config8"><?=$v_config8?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config8"><?=$v_config8?></textarea>
                                 </td>
                             </tr>
 
diff --git a/web/templates/admin/edit_server_httpd.html b/web/templates/admin/edit_server_httpd.html
index c58ae89d..03fca7bb 100644
--- a/web/templates/admin/edit_server_httpd.html
+++ b/web/templates/admin/edit_server_httpd.html
@@ -57,7 +57,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
                                 </td>
                             </tr>
                             <tr>
diff --git a/web/templates/admin/edit_server_mysql.html b/web/templates/admin/edit_server_mysql.html
index 8c5325fd..96d2523f 100644
--- a/web/templates/admin/edit_server_mysql.html
+++ b/web/templates/admin/edit_server_mysql.html
@@ -127,7 +127,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
                                 </td>
                             </tr>
                             <tr>
diff --git a/web/templates/admin/edit_server_nginx.html b/web/templates/admin/edit_server_nginx.html
index 2267089a..d85c75de 100644
--- a/web/templates/admin/edit_server_nginx.html
+++ b/web/templates/admin/edit_server_nginx.html
@@ -184,7 +184,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
                                 </td>
                             </tr>
                             <tr>
diff --git a/web/templates/admin/edit_server_pgsql.html b/web/templates/admin/edit_server_pgsql.html
index 6aca48d4..0b7c65fc 100644
--- a/web/templates/admin/edit_server_pgsql.html
+++ b/web/templates/admin/edit_server_pgsql.html
@@ -56,7 +56,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_options"><?=$v_options?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_options"><?=$v_options?></textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -66,7 +66,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
                                 </td>
                             </tr>
                             <td class="vst-text input-label" style="text-transform: capitalize;">
diff --git a/web/templates/admin/edit_server_php.html b/web/templates/admin/edit_server_php.html
index 16693f81..f2b144df 100644
--- a/web/templates/admin/edit_server_php.html
+++ b/web/templates/admin/edit_server_php.html
@@ -150,7 +150,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
                                 </td>
                             </tr>
                             <td class="vst-text input-label" style="text-transform: capitalize;">
diff --git a/web/templates/admin/edit_server_service.html b/web/templates/admin/edit_server_service.html
index 49a81f55..ac92762d 100644
--- a/web/templates/admin/edit_server_service.html
+++ b/web/templates/admin/edit_server_service.html
@@ -56,7 +56,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" class="vst-textinput console" name="v_config"><?=$v_config?></textarea>
                                 </td>
                             </tr>
                             <tr>
diff --git a/web/templates/admin/edit_web.html b/web/templates/admin/edit_web.html
index 00600539..b0d79d25 100644
--- a/web/templates/admin/edit_web.html
+++ b/web/templates/admin/edit_web.html
@@ -82,7 +82,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea size="20" class="vst-textinput" name="v_aliases"><?=htmlentities(trim($v_aliases, "'"))?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_aliases"><?=htmlentities(trim($v_aliases, "'"))?></textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -172,7 +172,7 @@
                                         </tr>
                                         <tr>
                                             <td>
-                                                <textarea size="20" class="vst-textinput" name="v_proxy_ext"><?php if (!empty($v_proxy_ext)) { echo htmlentities(trim($v_proxy_ext, "'"));} else { echo 'jpg, jpeg, gif, png, ico, svg, css, zip, tgz, gz, rar, bz2, exe, pdf, doc, xls, ppt, txt, odt, ods, odp, odf, tar, bmp, rtf, js, mp3, avi, mpeg, flv, html, htm'; }  ?></textarea>
+                                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_proxy_ext"><?php if (!empty($v_proxy_ext)) { echo htmlentities(trim($v_proxy_ext, "'"));} else { echo 'jpg, jpeg, gif, png, ico, svg, css, zip, tgz, gz, rar, bz2, exe, pdf, doc, xls, ppt, txt, odt, ods, odp, odf, tar, bmp, rtf, js, mp3, avi, mpeg, flv, html, htm'; }  ?></textarea>
                                             </td>
                                         </tr>
                                     </table>
@@ -218,7 +218,7 @@
                                         </tr>
                                         <tr>
                                             <td>
-                                                <textarea size="20" class="vst-textinput" name="v_ssl_crt"><?=htmlentities(trim($v_ssl_crt, "'"))?></textarea>
+                                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_ssl_crt"><?=htmlentities(trim($v_ssl_crt, "'"))?></textarea>
                                             </td>
                                         </tr>
                                         <tr>
@@ -228,7 +228,7 @@
                                         </tr>
                                         <tr>
                                             <td>
-                                                <textarea size="20" class="vst-textinput" name="v_ssl_key"><?=htmlentities(trim($v_ssl_key, "'"))?></textarea>
+                                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_ssl_key"><?=htmlentities(trim($v_ssl_key, "'"))?></textarea>
                                             </td>
                                         </tr>
                                         <tr>
@@ -238,7 +238,7 @@
                                         </tr>
                                         <tr>
                                             <td>
-                                                <textarea size="20" class="vst-textinput" name="v_ssl_ca"><?=htmlentities(trim($v_ssl_ca, "'"))?></textarea>
+                                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_ssl_ca"><?=htmlentities(trim($v_ssl_ca, "'"))?></textarea>
                                             </td>
                                         </tr>
                                         <?
diff --git a/web/templates/admin/list_ssl.html b/web/templates/admin/list_ssl.html
index 41541904..22d4dbe2 100644
--- a/web/templates/admin/list_ssl.html
+++ b/web/templates/admin/list_ssl.html
@@ -48,7 +48,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea size="20" class="vst-textinput" name="v_csr"><?php print $v_csr ?> </textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_csr"><?php print $v_csr ?> </textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -57,7 +57,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea size="20" class="vst-textinput" name="v_crt"><?php print $v_crt ?> </textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_crt"><?php print $v_crt ?> </textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -67,7 +67,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea size="20" class="vst-textinput" name="v_key"><?php print $v_key ?> </textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_key"><?php print $v_key ?> </textarea>
                                 </td>
                             </tr>
                         </table>
diff --git a/web/templates/user/edit_web.html b/web/templates/user/edit_web.html
index b5905e4c..f17d95bd 100644
--- a/web/templates/user/edit_web.html
+++ b/web/templates/user/edit_web.html
@@ -82,7 +82,7 @@
                             </tr>
                             <tr>
                                 <td>
-                                    <textarea size="20" class="vst-textinput" name="v_aliases"><?=htmlentities(trim($v_aliases, "'"))?></textarea>
+                                    <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_aliases"><?=htmlentities(trim($v_aliases, "'"))?></textarea>
                                 </td>
                             </tr>
                             <tr>
@@ -172,7 +172,7 @@
                                         </tr>
                                         <tr>
                                             <td>
-                                                <textarea size="20" class="vst-textinput" name="v_proxy_ext"><?php if (!empty($v_proxy_ext)) { echo htmlentities(trim($v_proxy_ext, "'"));} else { echo 'jpg, jpeg, gif, png, ico, svg, css, zip, tgz, gz, rar, bz2, exe, pdf, doc, xls, ppt, txt, odt, ods, odp, odf, tar, bmp, rtf, js, mp3, avi, mpeg, flv, html, htm'; }  ?></textarea>
+                                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_proxy_ext"><?php if (!empty($v_proxy_ext)) { echo htmlentities(trim($v_proxy_ext, "'"));} else { echo 'jpg, jpeg, gif, png, ico, svg, css, zip, tgz, gz, rar, bz2, exe, pdf, doc, xls, ppt, txt, odt, ods, odp, odf, tar, bmp, rtf, js, mp3, avi, mpeg, flv, html, htm'; }  ?></textarea>
                                             </td>
                                         </tr>
                                     </table>
@@ -218,7 +218,7 @@
                                         </tr>
                                         <tr>
                                             <td>
-                                                <textarea size="20" class="vst-textinput" name="v_ssl_crt"><?=htmlentities(trim($v_ssl_crt, "'"))?></textarea>
+                                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_ssl_crt"><?=htmlentities(trim($v_ssl_crt, "'"))?></textarea>
                                             </td>
                                         </tr>
                                         <tr>
@@ -228,7 +228,7 @@
                                         </tr>
                                         <tr>
                                             <td>
-                                                <textarea size="20" class="vst-textinput" name="v_ssl_key"><?=htmlentities(trim($v_ssl_key, "'"))?></textarea>
+                                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_ssl_key"><?=htmlentities(trim($v_ssl_key, "'"))?></textarea>
                                             </td>
                                         </tr>
                                         <tr>
@@ -238,7 +238,7 @@
                                         </tr>
                                         <tr>
                                             <td>
-                                                <textarea size="20" class="vst-textinput" name="v_ssl_ca"><?=htmlentities(trim($v_ssl_ca, "'"))?></textarea>
+                                                <textarea data-gramm="false" data-gramm_editor="false" data-enable-grammarly="false" size="20" class="vst-textinput" name="v_ssl_ca"><?=htmlentities(trim($v_ssl_ca, "'"))?></textarea>
                                             </td>
                                         </tr>
                                         <?

From b421b5f3b618f62bb71046442ad92310e7fe229b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jun 2023 21:31:59 +0200
Subject: [PATCH 1951/2300] Version 0.9.9-0-3

---
 src/deb/latest.txt     | 2 +-
 src/deb/vesta/postinst | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index f1f3c8dc..321145a8 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0-2
+vesta-0.9.9-0-3
\ No newline at end of file
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 2f15e60f..09195d4c 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -22,8 +22,8 @@ if [ ! -d "/usr/local/vesta/data/upgrades" ]; then
 fi
 
 # show changelog after update
-echo "1" > /usr/local/vesta/data/upgrades/show_changelog
-chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
+# echo "1" > /usr/local/vesta/data/upgrades/show_changelog
+# chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
 # Patching exim4.conf for: smtputf8_advertise_hosts
 if [ "$release" -gt 10 ]; then

From b5ccfbed8271e03e7c0f1bd6f3700261bbbc760d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 16 Jun 2023 23:10:48 +0200
Subject: [PATCH 1952/2300] debian12 vesta_compile.sh fixes

---
 src/deb/for-download/tools/multi-php-install.sh |  3 +++
 src/deb/vesta_compile.sh                        | 17 ++++++++++++-----
 2 files changed, 15 insertions(+), 5 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 764f56cf..88528e92 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -108,6 +108,9 @@ if [ "$inst_repo" -eq 1 ]; then
     if [ $debian_version -eq 11 ]; then
       sh -c 'echo "deb https://packages.sury.org/php/ bullseye main" > /etc/apt/sources.list.d/php.list'
     fi
+    if [ $debian_version -eq 12 ]; then
+      sh -c 'echo "deb https://packages.sury.org/php/ bookworm main" > /etc/apt/sources.list.d/php.list'
+    fi
     apt update
     apt upgrade -y
     press_enter "=== Press enter to continue ==============================================================================="
diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 8b1bd1f1..af7d2f56 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -58,10 +58,10 @@ BUILD_DATE=$(date +"%d-%b-%Y")
 
 # Set Version for compiling
 VESTA_V=$VESTA_VER"_amd64"
-NGINX_V='1.21.2'
-OPENSSL_V='1.1.1l'
+NGINX_V='1.25.1'
+OPENSSL_V='1.1.1u'
 PCRE_V='8.45'
-ZLIB_V='1.2.11'
+ZLIB_V='1.2.13'
 PHP_V='5.6.40'
 
 # Generate Links for sourcecode
@@ -76,7 +76,13 @@ ZLIB='https://github.com/madler/zlib/archive/refs/tags/v'$ZLIB_V'.tar.gz'
 PHP='http://de2.php.net/distributions/php-'$PHP_V'.tar.gz'
 
 # Set package dependencies for compiling
-SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config reprepro dpkg-sig git rsync'
+release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+
+if [ "$release" -lt 12 ]; then
+    SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config reprepro dpkg-sig git rsync'
+else
+    SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config reprepro git rsync'
+fi
 
 function press_enter {
     if [ $wait_to_press_enter -eq 1 ]; then
@@ -121,7 +127,7 @@ if [ $run_apt_update_and_install -eq 1 ]; then
   apt-get -qq install -y $SOFTWARE
   
   # Fix for Debian PHP Envroiment
-  if [ ! -e /usr/local/include/curl ]; then
+  if [ ! -e /usr/local/include/curl ] && [ "$release" -lt 12 ]; then
       ln -s /usr/include/x86_64-linux-gnu/curl /usr/local/include/curl
   fi
   press_enter "=== Press enter to continue ==============================================================================="
@@ -252,6 +258,7 @@ EOF
     press_enter "*** please copy above generated key to your clipboard and then paste it after pressing enter now ***"
     vi $PATH_OF_APT_REPO_ROOT/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key
+    cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/12/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/11/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/10/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/9/deb_signing.key

From af61d62c47bd0ec57e5659f806d7fbff58a0c390 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 14:46:05 +0200
Subject: [PATCH 1953/2300] debian12 php8.2 templates

---
 ...-FPM-74-public.sh => PHP-FPM-82-public.sh} | 44 ++++++++++++-------
 ...-74-public.stpl => PHP-FPM-82-public.stpl} | 12 +----
 ...PM-74-public.tpl => PHP-FPM-82-public.tpl} | 12 +----
 .../apache2/{PHP-FPM-74.sh => PHP-FPM-82.sh}  | 44 ++++++++++++-------
 .../{PHP-FPM-74.stpl => PHP-FPM-82.stpl}      | 12 +----
 .../{PHP-FPM-74.tpl => PHP-FPM-82.tpl}        | 12 +----
 6 files changed, 66 insertions(+), 70 deletions(-)
 rename install/debian/12/templates/web/apache2/{PHP-FPM-74-public.sh => PHP-FPM-82-public.sh} (79%)
 mode change 100755 => 100644
 rename install/debian/12/templates/web/apache2/{PHP-FPM-74-public.stpl => PHP-FPM-82-public.stpl} (77%)
 rename install/debian/12/templates/web/apache2/{PHP-FPM-74-public.tpl => PHP-FPM-82-public.tpl} (74%)
 rename install/debian/12/templates/web/apache2/{PHP-FPM-74.sh => PHP-FPM-82.sh} (79%)
 mode change 100755 => 100644
 rename install/debian/12/templates/web/apache2/{PHP-FPM-74.stpl => PHP-FPM-82.stpl} (77%)
 rename install/debian/12/templates/web/apache2/{PHP-FPM-74.tpl => PHP-FPM-82.tpl} (74%)

diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-74-public.sh b/install/debian/12/templates/web/apache2/PHP-FPM-82-public.sh
old mode 100755
new mode 100644
similarity index 79%
rename from install/debian/12/templates/web/apache2/PHP-FPM-74-public.sh
rename to install/debian/12/templates/web/apache2/PHP-FPM-82-public.sh
index e72bb003..a4deb752
--- a/install/debian/12/templates/web/apache2/PHP-FPM-74-public.sh
+++ b/install/debian/12/templates/web/apache2/PHP-FPM-82-public.sh
@@ -8,7 +8,7 @@ docroot="$5"
 
 pool_conf="[$2]
 
-listen = /run/php/php7.4-fpm-$2.sock
+listen = /run/php/php8.2-fpm-$2.sock
 listen.owner = $1
 listen.group = $1
 listen.mode = 0666
@@ -47,6 +47,8 @@ pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
 pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
+pool_file_82="/etc/php/8.2/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
@@ -78,23 +80,11 @@ if [ -f "$pool_file_73" ]; then
     systemctl restart php7.3-fpm
 fi
 
-write_file=0
-if [ ! -f "$pool_file_74" ]; then
-  write_file=1
-else
-  user_count=$(grep -c "/home/$1/" $pool_file_74)
-  if [ $user_count -eq 0 ]; then
-    write_file=1
-  fi
-fi
-if [ $write_file -eq 1 ]; then
-    echo "$pool_conf" > $pool_file_74
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
     systemctl reset-failed php7.4-fpm
     systemctl restart php7.4-fpm
 fi
-if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
-    rm /etc/php/7.4/fpm/pool.d/www.conf
-fi
 
 if [ -f "$pool_file_80" ]; then
     rm $pool_file_80
@@ -102,4 +92,28 @@ if [ -f "$pool_file_80" ]; then
     systemctl restart php8.0-fpm
 fi
 
+if [ -f "$pool_file_81" ]; then
+    rm $pool_file_81
+    systemctl reset-failed php8.1-fpm
+    systemctl restart php8.1-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_82" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_82)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_82
+    systemctl reset-failed php8.2-fpm
+    systemctl restart php8.2-fpm
+fi
+if [ -f "/etc/php/8.2/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.2/fpm/pool.d/www.conf
+fi
+
 exit 0
diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-74-public.stpl b/install/debian/12/templates/web/apache2/PHP-FPM-82-public.stpl
similarity index 77%
rename from install/debian/12/templates/web/apache2/PHP-FPM-74-public.stpl
rename to install/debian/12/templates/web/apache2/PHP-FPM-82-public.stpl
index fdbc26f9..809e7f33 100644
--- a/install/debian/12/templates/web/apache2/PHP-FPM-74-public.stpl
+++ b/install/debian/12/templates/web/apache2/PHP-FPM-82-public.stpl
@@ -17,24 +17,16 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
     SSLCertificateFile %ssl_crt%
     SSLCertificateKeyFile %ssl_key%
     %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
-#    <IfModule mod_ruid2.c>
-#        RMode config
-#        RUidGid %user% %group%
-#        RGroups www-data
-#    </IfModule>
-#    <IfModule itk.c>
-#        AssignUserID %user% %group%
-#    </IfModule>
 
     <FilesMatch \.php$>
-        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+        SetHandler "proxy:unix:/run/php/php8.2-fpm-%domain%.sock|fcgi://localhost/"
     </FilesMatch>
     SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
 
diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-74-public.tpl b/install/debian/12/templates/web/apache2/PHP-FPM-82-public.tpl
similarity index 74%
rename from install/debian/12/templates/web/apache2/PHP-FPM-74-public.tpl
rename to install/debian/12/templates/web/apache2/PHP-FPM-82-public.tpl
index 614f20c3..679d1409 100644
--- a/install/debian/12/templates/web/apache2/PHP-FPM-74-public.tpl
+++ b/install/debian/12/templates/web/apache2/PHP-FPM-82-public.tpl
@@ -16,19 +16,11 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
-#    <IfModule mod_ruid2.c>
-#        RMode config
-#        RUidGid %user% %group%
-#        RGroups www-data
-#    </IfModule>
-#    <IfModule itk.c>
-#        AssignUserID %user% %group%
-#    </IfModule>
 
     <FilesMatch \.php$>
-        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+        SetHandler "proxy:unix:/run/php/php8.2-fpm-%domain%.sock|fcgi://localhost/"
     </FilesMatch>
     SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
 
diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-74.sh b/install/debian/12/templates/web/apache2/PHP-FPM-82.sh
old mode 100755
new mode 100644
similarity index 79%
rename from install/debian/12/templates/web/apache2/PHP-FPM-74.sh
rename to install/debian/12/templates/web/apache2/PHP-FPM-82.sh
index e72bb003..a4deb752
--- a/install/debian/12/templates/web/apache2/PHP-FPM-74.sh
+++ b/install/debian/12/templates/web/apache2/PHP-FPM-82.sh
@@ -8,7 +8,7 @@ docroot="$5"
 
 pool_conf="[$2]
 
-listen = /run/php/php7.4-fpm-$2.sock
+listen = /run/php/php8.2-fpm-$2.sock
 listen.owner = $1
 listen.group = $1
 listen.mode = 0666
@@ -47,6 +47,8 @@ pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
 pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
 pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
 pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
+pool_file_82="/etc/php/8.2/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
@@ -78,23 +80,11 @@ if [ -f "$pool_file_73" ]; then
     systemctl restart php7.3-fpm
 fi
 
-write_file=0
-if [ ! -f "$pool_file_74" ]; then
-  write_file=1
-else
-  user_count=$(grep -c "/home/$1/" $pool_file_74)
-  if [ $user_count -eq 0 ]; then
-    write_file=1
-  fi
-fi
-if [ $write_file -eq 1 ]; then
-    echo "$pool_conf" > $pool_file_74
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
     systemctl reset-failed php7.4-fpm
     systemctl restart php7.4-fpm
 fi
-if [ -f "/etc/php/7.4/fpm/pool.d/www.conf" ]; then
-    rm /etc/php/7.4/fpm/pool.d/www.conf
-fi
 
 if [ -f "$pool_file_80" ]; then
     rm $pool_file_80
@@ -102,4 +92,28 @@ if [ -f "$pool_file_80" ]; then
     systemctl restart php8.0-fpm
 fi
 
+if [ -f "$pool_file_81" ]; then
+    rm $pool_file_81
+    systemctl reset-failed php8.1-fpm
+    systemctl restart php8.1-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_82" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_82)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_82
+    systemctl reset-failed php8.2-fpm
+    systemctl restart php8.2-fpm
+fi
+if [ -f "/etc/php/8.2/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.2/fpm/pool.d/www.conf
+fi
+
 exit 0
diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-74.stpl b/install/debian/12/templates/web/apache2/PHP-FPM-82.stpl
similarity index 77%
rename from install/debian/12/templates/web/apache2/PHP-FPM-74.stpl
rename to install/debian/12/templates/web/apache2/PHP-FPM-82.stpl
index df607247..e0d04794 100644
--- a/install/debian/12/templates/web/apache2/PHP-FPM-74.stpl
+++ b/install/debian/12/templates/web/apache2/PHP-FPM-82.stpl
@@ -17,24 +17,16 @@
     <Directory %sdocroot%>
         AllowOverride All
         SSLRequireSSL
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
 	</Directory>
     SSLEngine on
     SSLVerifyClient none
     SSLCertificateFile %ssl_crt%
     SSLCertificateKeyFile %ssl_key%
     %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
-#    <IfModule mod_ruid2.c>
-#        RMode config
-#        RUidGid %user% %group%
-#        RGroups www-data
-#    </IfModule>
-#    <IfModule itk.c>
-#        AssignUserID %user% %group%
-#    </IfModule>
 
     <FilesMatch \.php$>
-        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+        SetHandler "proxy:unix:/run/php/php8.2-fpm-%domain%.sock|fcgi://localhost/"
     </FilesMatch>
     SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
 
diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-74.tpl b/install/debian/12/templates/web/apache2/PHP-FPM-82.tpl
similarity index 74%
rename from install/debian/12/templates/web/apache2/PHP-FPM-74.tpl
rename to install/debian/12/templates/web/apache2/PHP-FPM-82.tpl
index 7b6e2cb5..eba95935 100644
--- a/install/debian/12/templates/web/apache2/PHP-FPM-74.tpl
+++ b/install/debian/12/templates/web/apache2/PHP-FPM-82.tpl
@@ -16,19 +16,11 @@
     </Directory>
     <Directory %sdocroot%>
         AllowOverride All
-        Options +Includes -Indexes +ExecCGI
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
     </Directory>
-#    <IfModule mod_ruid2.c>
-#        RMode config
-#        RUidGid %user% %group%
-#        RGroups www-data
-#    </IfModule>
-#    <IfModule itk.c>
-#        AssignUserID %user% %group%
-#    </IfModule>
 
     <FilesMatch \.php$>
-        SetHandler "proxy:unix:/run/php/php7.4-fpm-%domain%.sock|fcgi://localhost/"
+        SetHandler "proxy:unix:/run/php/php8.2-fpm-%domain%.sock|fcgi://localhost/"
     </FilesMatch>
     SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
 

From 698069d708d13193ff7f11aea791950f1d9c63fc Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Sat, 17 Jun 2023 14:49:42 +0200
Subject: [PATCH 1954/2300] Making php8.2 templates executable

---
 install/debian/12/templates/web/apache2/PHP-FPM-82-public.sh | 0
 install/debian/12/templates/web/apache2/PHP-FPM-82.sh        | 0
 2 files changed, 0 insertions(+), 0 deletions(-)
 mode change 100644 => 100755 install/debian/12/templates/web/apache2/PHP-FPM-82-public.sh
 mode change 100644 => 100755 install/debian/12/templates/web/apache2/PHP-FPM-82.sh

diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-82-public.sh b/install/debian/12/templates/web/apache2/PHP-FPM-82-public.sh
old mode 100644
new mode 100755
diff --git a/install/debian/12/templates/web/apache2/PHP-FPM-82.sh b/install/debian/12/templates/web/apache2/PHP-FPM-82.sh
old mode 100644
new mode 100755

From f6cb92c20ac8e5bf4a592c4e95edbe578b6d4bb0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 15:09:34 +0200
Subject: [PATCH 1955/2300] Debian12 installer script, first fix

---
 bin/v-install-unsigned-ssl    |  11 ++-
 install/vst-install-debian.sh | 144 ++++++++++++++++++++++++----------
 2 files changed, 111 insertions(+), 44 deletions(-)

diff --git a/bin/v-install-unsigned-ssl b/bin/v-install-unsigned-ssl
index 6b0e7c4a..ae14b68b 100644
--- a/bin/v-install-unsigned-ssl
+++ b/bin/v-install-unsigned-ssl
@@ -52,6 +52,8 @@ fi
 #                       Action                             #
 #----------------------------------------------------------#
 
+
+
 email="info@$domain"
 
 TMPLOC="/home/$user/tmp/$domain"
@@ -62,8 +64,13 @@ mkdir $TMPLOC
 
 # Parsing certificate file
 crt_end=$(grep -n "END CERTIFICATE-" $TMPLOC/vst.pem |cut -f 1 -d:)
-key_start=$(grep -n "BEGIN RSA" $TMPLOC/vst.pem |cut -f 1 -d:)
-key_end=$(grep -n  "END RSA" $TMPLOC/vst.pem |cut -f 1 -d:)
+if [ "$release" -lt 12 ]; then
+    key_start=$(grep -n "BEGIN RSA" $TMPLOC/vst.pem |cut -f 1 -d:)
+    key_end=$(grep -n  "END RSA" $TMPLOC/vst.pem |cut -f 1 -d:)
+else
+    key_start=$(grep -n "BEGIN PRIVATE KEY" $TMPLOC/vst.pem |cut -f 1 -d:)
+    key_end=$(grep -n  "END PRIVATE KEY" $TMPLOC/vst.pem |cut -f 1 -d:)
+fi
 
 # Adding SSL certificate
 cd $TMPLOC
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 4349a56d..5ded7a23 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -19,7 +19,19 @@ release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
 codename="$(cat /etc/os-release |grep VERSION= |cut -f 2 -d \(|cut -f 1 -d \))"
 vestacp="$VESTA/install/$VERSION/$release"
 
-if [ "$release" -eq 11 ]; then
+if [ "$release" -eq 12 ]; then
+    software="nginx apache2 apache2-utils
+        libapache2-mod-fcgid php-fpm php
+        php-common php-cgi php-mysql php-curl php-fpm php-pgsql awstats
+        vsftpd proftpd-basic bind9 exim4 exim4-daemon-heavy
+        clamav-daemon spamassassin dovecot-imapd dovecot-pop3d roundcube-core
+        roundcube-mysql roundcube-plugins mariadb-server mariadb-common
+        mariadb-client postgresql postgresql-contrib phppgadmin phpmyadmin mc
+        flex whois git idn zip sudo bc ftp lsof ntpdate rrdtool quota
+        e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
+        bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
+        unrar-free vim-common net-tools unzip iptables"
+elif [ "$release" -eq 11 ]; then
     software="nginx apache2 apache2-utils
         libapache2-mod-fcgid php-fpm php
         php-common php-cgi php-mysql php-curl php-fpm php-pgsql awstats
@@ -922,7 +934,7 @@ if [ "$apache" = 'no' ] && [ "$nginx"  = 'yes' ]; then
     echo "WEB_PORT='80'" >> $VESTA/conf/vesta.conf
     echo "WEB_SSL_PORT='443'" >> $VESTA/conf/vesta.conf
     echo "WEB_SSL='openssl'"  >> $VESTA/conf/vesta.conf
-    if [ "$release" -eq 9 ] || [ "$release" -eq 10 ] || [ "$release" -eq 11 ]; then
+    if [ "$release" -gt 8 ]; then
         if [ "$phpfpm" = 'yes' ]; then
             echo "WEB_BACKEND='php-fpm'" >> $VESTA/conf/vesta.conf
         fi
@@ -1014,15 +1026,31 @@ if [ "$release" -eq 11 ]; then
     ln -s /usr/local/vesta/data/templates/web/nginx/hosting.tpl /usr/local/vesta/data/templates/web/nginx/default.tpl
     ln -s /usr/local/vesta/data/templates/web/nginx/hosting.stpl /usr/local/vesta/data/templates/web/nginx/default.stpl
 
-    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.sh /usr/local/vesta/data/templates/web/apache2/hosting.sh
-    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl /usr/local/vesta/data/templates/web/apache2/hosting.tpl
-    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.stpl /usr/local/vesta/data/templates/web/apache2/hosting.stpl
-    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.sh /usr/local/vesta/data/templates/web/apache2/default.sh
-    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl /usr/local/vesta/data/templates/web/apache2/default.tpl
-    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.stpl /usr/local/vesta/data/templates/web/apache2/default.stpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.sh /usr/local/vesta/data/templates/web/apache2/hosting.sh
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.tpl /usr/local/vesta/data/templates/web/apache2/hosting.tpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.stpl /usr/local/vesta/data/templates/web/apache2/hosting.stpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.sh /usr/local/vesta/data/templates/web/apache2/default.sh
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.tpl /usr/local/vesta/data/templates/web/apache2/default.tpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.stpl /usr/local/vesta/data/templates/web/apache2/default.stpl
     
-    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.stpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-74.stpl
-    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.tpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-74.tpl
+    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.stpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-82.stpl
+    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.tpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-82.tpl
+fi
+if [ "$release" -eq 12 ]; then
+    echo "== Symlink missing templates"
+    ln -s /usr/local/vesta/data/templates/web/nginx/hosting.sh /usr/local/vesta/data/templates/web/nginx/default.sh
+    ln -s /usr/local/vesta/data/templates/web/nginx/hosting.tpl /usr/local/vesta/data/templates/web/nginx/default.tpl
+    ln -s /usr/local/vesta/data/templates/web/nginx/hosting.stpl /usr/local/vesta/data/templates/web/nginx/default.stpl
+
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.sh /usr/local/vesta/data/templates/web/apache2/hosting.sh
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.tpl /usr/local/vesta/data/templates/web/apache2/hosting.tpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.stpl /usr/local/vesta/data/templates/web/apache2/hosting.stpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.sh /usr/local/vesta/data/templates/web/apache2/default.sh
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.tpl /usr/local/vesta/data/templates/web/apache2/default.tpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.stpl /usr/local/vesta/data/templates/web/apache2/default.stpl
+    
+    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.stpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-82.stpl
+    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.tpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-82.tpl
 fi
 
 echo "== Set nameservers address"
@@ -1045,12 +1073,17 @@ $VESTA/bin/v-change-sys-hostname $servername 2>/dev/null
 
 echo "== Generating myVesta unsigned SSL certificate"
 $VESTA/bin/v-generate-ssl-cert $(hostname) $email 'US' 'California' \
-     'San Francisco' 'Vesta Control Panel' 'IT' > /tmp/vst.pem
+     'San Francisco' 'myVesta Control Panel' 'IT' > /tmp/vst.pem
 
 # Parsing certificate file
 crt_end=$(grep -n "END CERTIFICATE-" /tmp/vst.pem |cut -f 1 -d:)
-key_start=$(grep -n "BEGIN RSA" /tmp/vst.pem |cut -f 1 -d:)
-key_end=$(grep -n  "END RSA" /tmp/vst.pem |cut -f 1 -d:)
+if [ "$release" -lt 12 ]; then
+    key_start=$(grep -n "BEGIN RSA" /tmp/vst.pem |cut -f 1 -d:)
+    key_end=$(grep -n  "END RSA" /tmp/vst.pem |cut -f 1 -d:)
+else
+    key_start=$(grep -n "BEGIN PRIVATE KEY" /tmp/vst.pem |cut -f 1 -d:)
+    key_end=$(grep -n  "END PRIVATE KEY" /tmp/vst.pem |cut -f 1 -d:)
+fi
 
 cd $VESTA/ssl
 sed -n "1,${crt_end}p" /tmp/vst.pem > certificate.crt
@@ -1134,10 +1167,16 @@ fi
 
 if [ "$phpfpm" = 'yes' ]; then
     echo "=== Configure PHP-FPM"
-    if [ "$release" -eq 11 ]; then
-        cp -f $vestacp/php-fpm/www.conf /etc/php/7.4/fpm/pool.d/www.conf
-        #update-rc.d php7.4-fpm defaults
-        currentservice='php7.4-fpm'
+    if [ "$release" -eq 12 ]; then
+        cp -f $vestacp/php-fpm/www.conf /etc/php/8.2/fpm/pool.d/www.conf
+        #update-rc.d php8.2-fpm defaults
+        currentservice='php8.2-fpm'
+        ensure_startup $currentservice
+        ensure_start $currentservice
+    elif [ "$release" -eq 11 ]; then
+        cp -f $vestacp/php-fpm/www.conf /etc/php/8.2/fpm/pool.d/www.conf
+        #update-rc.d php8.2-fpm defaults
+        currentservice='php8.2-fpm'
         ensure_startup $currentservice
         ensure_start $currentservice
     elif [ "$release" -eq 10 ]; then
@@ -1305,7 +1344,7 @@ if [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; then
       blowfish=$(gen_pass)
       echo "\$cfg['blowfish_secret'] = '$blowfish';" >> /etc/phpmyadmin/config.inc.php
   fi
-  if [ "$release" -eq 11 ]; then
+  if [ "$release" -gt 10 ]; then
       echo "=== Configure phpMyAdmin (Debian11 custom part)"
       # Set config and log directory
       sed -i "s|define('CONFIG_DIR', '');|define('CONFIG_DIR', '/etc/phpmyadmin/');|" /usr/share/phpmyadmin/libraries/vendor_config.php
@@ -1518,14 +1557,12 @@ if [ "$exim" = 'yes' ] && { [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; } the
         /etc/roundcube/plugins/password/config.inc.php
     mysql roundcube < /usr/share/dbconfig-common/data/roundcube/install/mysql
     chmod a+r /etc/roundcube/main.inc.php
-    if [ "$release" -eq 8 ] || [ "$release" -eq 9 ] || [ "$release" -eq 10 ] || [ "$release" -eq 11 ]; then
-        mv -f /etc/roundcube/main.inc.php /etc/roundcube/config.inc.php
-        mv -f /etc/roundcube/db.inc.php /etc/roundcube/debian-db-roundcube.php
-        chmod 640 /etc/roundcube/debian-db-roundcube.php
-        chmod 640 /etc/roundcube/config.inc.php
-        chown root:www-data /etc/roundcube/debian-db-roundcube.php
-        chown root:www-data /etc/roundcube/config.inc.php
-    fi
+    mv -f /etc/roundcube/main.inc.php /etc/roundcube/config.inc.php
+    mv -f /etc/roundcube/db.inc.php /etc/roundcube/debian-db-roundcube.php
+    chmod 640 /etc/roundcube/debian-db-roundcube.php
+    chmod 640 /etc/roundcube/config.inc.php
+    chown root:www-data /etc/roundcube/debian-db-roundcube.php
+    chown root:www-data /etc/roundcube/config.inc.php
     sed -i "s#^\$config\['smtp_user'\].*#\$config\['smtp_user'\] = '%u';#g" /etc/roundcube/defaults.inc.php
     sed -i "s#^\$config\['smtp_pass'\].*#\$config\['smtp_pass'\] = '%p';#g" /etc/roundcube/defaults.inc.php
     if [ "$release" -eq 8 ]; then
@@ -1594,7 +1631,7 @@ fi
 #----------------------------------------------------------#
 
 echo "=== Configure Admin User"
-if [ "$release" -eq 11 ]; then
+if [ "$release" -gt 10 ]; then
     echo "=== Switching to sha512"
     sed -i "s/yescrypt/sha512/g" /etc/pam.d/common-password
 fi
@@ -1716,14 +1753,27 @@ if [ "$release" -eq 10 ]; then
   fi
 fi
 if [ "$release" -eq 11 ]; then
-  if [ -f "/etc/php/7.4/fpm/pool.d/$servername.conf" ]; then
+  if [ -f "/etc/php/8.2/fpm/pool.d/$servername.conf" ]; then
     echo "== FPM pool.d $servername tweaks"
-    sed -i "/^group =/c\group = www-data" /etc/php/7.4/fpm/pool.d/$servername.conf
-    sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/7.4/fpm/pool.d/$servername.conf
-    sed -i "/request_terminate_timeout/c\request_terminate_timeout = 900s" /etc/php/7.4/fpm/pool.d/$servername.conf
-    sed -i "s|80M|800M|g" /etc/php/7.4/fpm/pool.d/$servername.conf
-    sed -i "s|256M|512M|g" /etc/php/7.4/fpm/pool.d/$servername.conf
-    service php7.4-fpm restart
+    sed -i "/^group =/c\group = www-data" /etc/php/8.2/fpm/pool.d/$servername.conf
+    sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/8.2/fpm/pool.d/$servername.conf
+    sed -i "/request_terminate_timeout/c\request_terminate_timeout = 900s" /etc/php/8.2/fpm/pool.d/$servername.conf
+    sed -i "s|80M|800M|g" /etc/php/8.2/fpm/pool.d/$servername.conf
+    sed -i "s|256M|512M|g" /etc/php/8.2/fpm/pool.d/$servername.conf
+    service php8.2-fpm restart
+    ln -s /var/lib/roundcube /var/lib/roundcube/webmail
+    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'yes'
+  fi
+fi
+if [ "$release" -eq 12 ]; then
+  if [ -f "/etc/php/8.2/fpm/pool.d/$servername.conf" ]; then
+    echo "== FPM pool.d $servername tweaks"
+    sed -i "/^group =/c\group = www-data" /etc/php/8.2/fpm/pool.d/$servername.conf
+    sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/8.2/fpm/pool.d/$servername.conf
+    sed -i "/request_terminate_timeout/c\request_terminate_timeout = 900s" /etc/php/8.2/fpm/pool.d/$servername.conf
+    sed -i "s|80M|800M|g" /etc/php/8.2/fpm/pool.d/$servername.conf
+    sed -i "s|256M|512M|g" /etc/php/8.2/fpm/pool.d/$servername.conf
+    service php8.2-fpm restart
     ln -s /var/lib/roundcube /var/lib/roundcube/webmail
     /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'yes'
   fi
@@ -1785,7 +1835,10 @@ if [ "$release" -eq 10 ]; then
   apt-get -y install php7.3-apcu php7.3-mbstring php7.3-bcmath php7.3-curl php7.3-gd php7.3-intl php7.3-mysql php7.3-mysqlnd php7.3-pdo php7.3-soap php7.3-json php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached php7.3-zip php7.3-imagick php7.3-imap
 fi
 if [ "$release" -eq 11 ]; then
-  apt-get -y install php7.4-apcu php7.4-mbstring php7.4-bcmath php7.4-curl php7.4-gd php7.4-intl php7.4-mysql php7.4-mysqlnd php7.4-pdo php7.4-soap php7.4-json php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached php7.4-zip php7.4-imagick php7.4-imap
+  apt-get -y install php8.2-apcu php8.2-mbstring php8.2-bcmath php8.2-curl php8.2-gd php8.2-intl php8.2-mysql php8.2-mysqlnd php8.2-pdo php8.2-soap php8.2-json php8.2-xml php8.2-zip php8.2-memcache php8.2-memcached php8.2-zip php8.2-imagick php8.2-imap
+fi
+if [ "$release" -eq 12 ]; then
+  apt-get -y install php8.2-apcu php8.2-mbstring php8.2-bcmath php8.2-curl php8.2-gd php8.2-intl php8.2-mysql php8.2-mysqlnd php8.2-pdo php8.2-soap php8.2-json php8.2-xml php8.2-zip php8.2-memcache php8.2-memcached php8.2-zip php8.2-imagick php8.2-imap
 fi
 
 touch /var/log/php-mail.log
@@ -1824,15 +1877,22 @@ fi
 
 if [ "$release" -eq 11 ]; then
   if [ $memory -lt 10000000 ]; then
-    echo "=== Patching php7.4-vps"
-    patch /etc/php/7.4/fpm/php.ini < $vestacp/php/php7.4-vps.patch
+    echo "=== Patching php8.2-vps"
+    patch /etc/php/8.2/fpm/php.ini < $vestacp/php/php8.2-vps.patch
   fi
   if [ $memory -gt 9999999 ]; then
-    echo "=== Patching php7.4-dedi"
-    patch /etc/php/7.4/fpm/php.ini < $vestacp/php/php7.4-dedi.patch
+    echo "=== Patching php8.2-dedi"
+    patch /etc/php/8.2/fpm/php.ini < $vestacp/php/php8.2-dedi.patch
   fi
-  update-alternatives --set php /usr/bin/php7.4
-  service php7.4-fpm restart
+  update-alternatives --set php /usr/bin/php8.2
+  service php8.2-fpm restart
+fi
+
+if [ "$release" -eq 12 ]; then
+  echo "=== Patching php8.2"
+  patch /etc/php/8.2/fpm/php.ini < /usr/local/vesta/src/deb/for-download/tools/patches/php8.2.patch
+  update-alternatives --set php /usr/bin/php8.2
+  service php8.2-fpm restart
 fi
 
 # echo "=== Patching rcube_vcard.php"
@@ -1928,7 +1988,7 @@ fi
 
 echo "=== Set URL for phpmyadmin"
 echo "DB_PMA_URL='https://$servername/phpmyadmin/'" >> $VESTA/conf/vesta.conf
-if [ "$release" -eq 10 ] || [ "$release" -eq 11 ]; then
+if [ "$release" -gt 9 ]; then
     echo "=== Set max_length_of_MySQL_username=80"
 fi
 echo "MAX_DBUSER_LEN=80" >> $VESTA/conf/vesta.conf

From f3322275887ed0f49cf98b5d6226b44de3951d63 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 15:11:30 +0200
Subject: [PATCH 1956/2300] v-install-unsigned-ssl deb12 fix

---
 bin/v-install-unsigned-ssl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-install-unsigned-ssl b/bin/v-install-unsigned-ssl
index ae14b68b..3395e4f2 100644
--- a/bin/v-install-unsigned-ssl
+++ b/bin/v-install-unsigned-ssl
@@ -52,7 +52,7 @@ fi
 #                       Action                             #
 #----------------------------------------------------------#
 
-
+release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
 
 email="info@$domain"
 

From 420c0d097f8921fb1e68957f5eb88852bce31149 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 15:23:15 +0200
Subject: [PATCH 1957/2300] Reverting mistakenly changed 7.4 to 8.2 for deb12

---
 install/vst-install-debian.sh | 50 +++++++++++++++++------------------
 1 file changed, 25 insertions(+), 25 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 5ded7a23..ede116ec 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1026,15 +1026,15 @@ if [ "$release" -eq 11 ]; then
     ln -s /usr/local/vesta/data/templates/web/nginx/hosting.tpl /usr/local/vesta/data/templates/web/nginx/default.tpl
     ln -s /usr/local/vesta/data/templates/web/nginx/hosting.stpl /usr/local/vesta/data/templates/web/nginx/default.stpl
 
-    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.sh /usr/local/vesta/data/templates/web/apache2/hosting.sh
-    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.tpl /usr/local/vesta/data/templates/web/apache2/hosting.tpl
-    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.stpl /usr/local/vesta/data/templates/web/apache2/hosting.stpl
-    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.sh /usr/local/vesta/data/templates/web/apache2/default.sh
-    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.tpl /usr/local/vesta/data/templates/web/apache2/default.tpl
-    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.stpl /usr/local/vesta/data/templates/web/apache2/default.stpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.sh /usr/local/vesta/data/templates/web/apache2/hosting.sh
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl /usr/local/vesta/data/templates/web/apache2/hosting.tpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.stpl /usr/local/vesta/data/templates/web/apache2/hosting.stpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.sh /usr/local/vesta/data/templates/web/apache2/default.sh
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl /usr/local/vesta/data/templates/web/apache2/default.tpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.stpl /usr/local/vesta/data/templates/web/apache2/default.stpl
     
-    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.stpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-82.stpl
-    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.tpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-82.tpl
+    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.stpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-74.stpl
+    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.tpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-74.tpl
 fi
 if [ "$release" -eq 12 ]; then
     echo "== Symlink missing templates"
@@ -1174,9 +1174,9 @@ if [ "$phpfpm" = 'yes' ]; then
         ensure_startup $currentservice
         ensure_start $currentservice
     elif [ "$release" -eq 11 ]; then
-        cp -f $vestacp/php-fpm/www.conf /etc/php/8.2/fpm/pool.d/www.conf
-        #update-rc.d php8.2-fpm defaults
-        currentservice='php8.2-fpm'
+        cp -f $vestacp/php-fpm/www.conf /etc/php/7.4/fpm/pool.d/www.conf
+        #update-rc.d php7.4-fpm defaults
+        currentservice='php7.4-fpm'
         ensure_startup $currentservice
         ensure_start $currentservice
     elif [ "$release" -eq 10 ]; then
@@ -1753,14 +1753,14 @@ if [ "$release" -eq 10 ]; then
   fi
 fi
 if [ "$release" -eq 11 ]; then
-  if [ -f "/etc/php/8.2/fpm/pool.d/$servername.conf" ]; then
+  if [ -f "/etc/php/7.4/fpm/pool.d/$servername.conf" ]; then
     echo "== FPM pool.d $servername tweaks"
-    sed -i "/^group =/c\group = www-data" /etc/php/8.2/fpm/pool.d/$servername.conf
-    sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/8.2/fpm/pool.d/$servername.conf
-    sed -i "/request_terminate_timeout/c\request_terminate_timeout = 900s" /etc/php/8.2/fpm/pool.d/$servername.conf
-    sed -i "s|80M|800M|g" /etc/php/8.2/fpm/pool.d/$servername.conf
-    sed -i "s|256M|512M|g" /etc/php/8.2/fpm/pool.d/$servername.conf
-    service php8.2-fpm restart
+    sed -i "/^group =/c\group = www-data" /etc/php/7.4/fpm/pool.d/$servername.conf
+    sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/7.4/fpm/pool.d/$servername.conf
+    sed -i "/request_terminate_timeout/c\request_terminate_timeout = 900s" /etc/php/7.4/fpm/pool.d/$servername.conf
+    sed -i "s|80M|800M|g" /etc/php/7.4/fpm/pool.d/$servername.conf
+    sed -i "s|256M|512M|g" /etc/php/7.4/fpm/pool.d/$servername.conf
+    service php7.4-fpm restart
     ln -s /var/lib/roundcube /var/lib/roundcube/webmail
     /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'yes'
   fi
@@ -1835,7 +1835,7 @@ if [ "$release" -eq 10 ]; then
   apt-get -y install php7.3-apcu php7.3-mbstring php7.3-bcmath php7.3-curl php7.3-gd php7.3-intl php7.3-mysql php7.3-mysqlnd php7.3-pdo php7.3-soap php7.3-json php7.3-xml php7.3-zip php7.3-memcache php7.3-memcached php7.3-zip php7.3-imagick php7.3-imap
 fi
 if [ "$release" -eq 11 ]; then
-  apt-get -y install php8.2-apcu php8.2-mbstring php8.2-bcmath php8.2-curl php8.2-gd php8.2-intl php8.2-mysql php8.2-mysqlnd php8.2-pdo php8.2-soap php8.2-json php8.2-xml php8.2-zip php8.2-memcache php8.2-memcached php8.2-zip php8.2-imagick php8.2-imap
+  apt-get -y install php7.4-apcu php7.4-mbstring php7.4-bcmath php7.4-curl php7.4-gd php7.4-intl php7.4-mysql php7.4-mysqlnd php7.4-pdo php7.4-soap php7.4-json php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached php7.4-zip php7.4-imagick php7.4-imap
 fi
 if [ "$release" -eq 12 ]; then
   apt-get -y install php8.2-apcu php8.2-mbstring php8.2-bcmath php8.2-curl php8.2-gd php8.2-intl php8.2-mysql php8.2-mysqlnd php8.2-pdo php8.2-soap php8.2-json php8.2-xml php8.2-zip php8.2-memcache php8.2-memcached php8.2-zip php8.2-imagick php8.2-imap
@@ -1877,15 +1877,15 @@ fi
 
 if [ "$release" -eq 11 ]; then
   if [ $memory -lt 10000000 ]; then
-    echo "=== Patching php8.2-vps"
-    patch /etc/php/8.2/fpm/php.ini < $vestacp/php/php8.2-vps.patch
+    echo "=== Patching php7.4-vps"
+    patch /etc/php/7.4/fpm/php.ini < $vestacp/php/php7.4-vps.patch
   fi
   if [ $memory -gt 9999999 ]; then
-    echo "=== Patching php8.2-dedi"
-    patch /etc/php/8.2/fpm/php.ini < $vestacp/php/php8.2-dedi.patch
+    echo "=== Patching php7.4-dedi"
+    patch /etc/php/7.4/fpm/php.ini < $vestacp/php/php7.4-dedi.patch
   fi
-  update-alternatives --set php /usr/bin/php8.2
-  service php8.2-fpm restart
+  update-alternatives --set php /usr/bin/php7.4
+  service php7.4-fpm restart
 fi
 
 if [ "$release" -eq 12 ]; then

From 58c2793e94e53e40bb27dbb4ac7a3d9ff2763bbc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 15:59:47 +0200
Subject: [PATCH 1958/2300] vesta-nginx-deb12 conf fix

---
 src/deb/for-download/nginx/nginx-deb12.conf | 128 ++++++++++++++++++++
 src/deb/vesta_compile.sh                    |   6 +-
 2 files changed, 133 insertions(+), 1 deletion(-)
 create mode 100644 src/deb/for-download/nginx/nginx-deb12.conf

diff --git a/src/deb/for-download/nginx/nginx-deb12.conf b/src/deb/for-download/nginx/nginx-deb12.conf
new file mode 100644
index 00000000..67f5c5bd
--- /dev/null
+++ b/src/deb/for-download/nginx/nginx-deb12.conf
@@ -0,0 +1,128 @@
+user                    admin;
+worker_processes        1;
+error_log               /usr/local/vesta/log/nginx-error.log;
+pid                     /var/run/vesta-nginx.pid;
+
+events {
+        worker_connections  128;
+        use                 epoll;
+}
+
+http {
+    # Main settings
+    sendfile                        on;
+    tcp_nopush                      on;
+    tcp_nodelay                     on;
+    client_header_timeout           1m;
+    client_body_timeout             3m;
+    client_header_buffer_size       2k;
+    client_body_buffer_size         256k;
+    client_max_body_size            256m;
+    large_client_header_buffers     4   8k;
+    send_timeout                    30;
+    keepalive_timeout               60 60;
+    reset_timedout_connection       on;
+    server_tokens                   off;
+    server_name_in_redirect         off;
+    server_names_hash_max_size      512;
+    server_names_hash_bucket_size   512;
+
+
+    # Log format
+    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
+                        '"$status" $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  bytes   '$body_bytes_sent';
+    access_log          /usr/local/vesta/log/nginx-access.log main;
+
+
+    # SSL PCI Compliance
+    ssl_protocols               TLSv1.1 TLSv1.2;
+    ssl_ciphers                 EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
+    ssl_session_cache           shared:SSL:10m;
+    ssl_prefer_server_ciphers   on;
+
+
+    # Mime settings
+    include             /usr/local/vesta/nginx/conf/mime.types;
+    default_type        application/octet-stream;
+
+
+    # Compression
+    gzip                on;
+    gzip_comp_level     9;
+    gzip_min_length     512;
+    gzip_buffers        8 64k;
+    gzip_types          text/plain text/css text/javascript
+                        application/x-javascript application/javascript;
+    gzip_proxied        any;
+
+
+    # Proxy settings
+    proxy_redirect      off;
+    proxy_set_header    Host            $host;
+    proxy_set_header    X-Real-IP       $remote_addr;
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_header   Set-Cookie;
+    proxy_connect_timeout   90;
+    proxy_send_timeout  90;
+    proxy_read_timeout  90;
+    proxy_buffers       32 4k;
+    fastcgi_read_timeout 300;
+
+    # Error pages
+    error_page          403          /error/403.html;
+    error_page          404          /error/404.html;
+    error_page          502 503 504  /error/50x.html;
+
+
+    # Vhost
+    server {
+        listen          8083;
+        server_name     _;
+        root            /usr/local/vesta/web;
+        charset         utf-8;
+
+        # Fix error "The plain HTTP request was sent to HTTPS port"
+        error_page      497 https://$host:$server_port$request_uri;
+
+        # ssl                  on;
+        ssl_certificate      /usr/local/vesta/ssl/certificate.crt;
+        ssl_certificate_key  /usr/local/vesta/ssl/certificate.key;
+        ssl_session_cache    shared:SSL:10m;
+        ssl_session_timeout  10m;
+
+        error_page      404     /error/404/index.html;
+        error_page      403     /error/index.html;
+        error_page      500     /error/index.html;
+
+        location / {
+            expires max;
+            index   index.php;
+        }
+
+        location /error/ {
+            expires max;
+            index   index.html;
+        }
+
+        location /rrd/ {
+            expires off;
+            internal;
+        }
+
+        location /backup/ {
+            root    /;
+            internal;
+        }
+
+        location ~ \.php$ {
+            include         /usr/local/vesta/nginx/conf/fastcgi_params;
+            fastcgi_param   SCRIPT_FILENAME /usr/local/vesta/web/$fastcgi_script_name;
+            fastcgi_param   QUERY_STRING    $query_string;
+            fastcgi_pass    unix:/var/run/vesta-php.sock;
+            fastcgi_intercept_errors        on;
+            break;
+        }
+    }
+}
diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index af7d2f56..a80316d9 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -541,7 +541,11 @@ if [ "$NGINX_B" = true ]; then
     
     echo "=== Get nginx.conf"
     cd $BUILD_DIR/vesta-nginx_$VESTA_V
-    cp /root/vesta/src/deb/for-download/nginx/nginx.conf $BUILD_DIR/vesta-nginx_$VESTA_V/usr/local/vesta/nginx/conf/nginx.conf
+    if [ "$release" -lt 12 ]; then
+      cp /root/vesta/src/deb/for-download/nginx/nginx.conf $BUILD_DIR/vesta-nginx_$VESTA_V/usr/local/vesta/nginx/conf/nginx.conf
+    else
+      cp /root/vesta/src/deb/for-download/nginx/nginx-deb12.conf $BUILD_DIR/vesta-nginx_$VESTA_V/usr/local/vesta/nginx/conf/nginx.conf
+    fi
     
     # if [ $BUILDING_NOW -eq 1 ]; then
     echo "=== copy binary"

From 159755e053054f732aa21dc88773381ff731edda Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 16:25:06 +0200
Subject: [PATCH 1959/2300] deb12 spamassassin temporary fix

---
 install/vst-install-debian.sh | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ede116ec..8d7720e0 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -966,7 +966,11 @@ if [ "$exim" = 'yes' ]; then
         echo "ANTIVIRUS_SYSTEM='clamav-daemon'" >> $VESTA/conf/vesta.conf
     fi
     if [ "$spamd" = 'yes' ]; then
-        echo "ANTISPAM_SYSTEM='spamassassin'" >> $VESTA/conf/vesta.conf
+        if [ "$release" -lt 12 ]; then
+            echo "ANTISPAM_SYSTEM='spamassassin'" >> $VESTA/conf/vesta.conf
+        else
+            echo "ANTISPAM_SYSTEM='spamd'" >> $VESTA/conf/vesta.conf
+        fi
     fi
     if [ "$dovecot" = 'yes' ]; then
         echo "IMAP_SYSTEM='dovecot'" >> $VESTA/conf/vesta.conf
@@ -1514,12 +1518,15 @@ fi
 if [ "$spamd" = 'yes' ]; then
     echo "=== Configure SpamAssassin"
     #update-rc.d spamassassin defaults
-    sed -i "s/ENABLED=0/ENABLED=1/" /etc/default/spamassassin
+    if [ "$release" -lt 12 ]; then
+        sed -i "s/ENABLED=0/ENABLED=1/" /etc/default/spamassassin
+        currentservice='spamassassin'
+    else
+        currentservice='spamd'
+    fi
     wget -nv -O /etc/spamassassin/barracuda.cf http://c.myvestacp.com/tools/spamassassin/barracuda.cf
-    currentservice='spamassassin'
     ensure_startup $currentservice
-    # ensure_start $currentservice
-    systemctl restart spamassassin
+    systemctl restart $currentservice
 fi
 
 

From 83092b8ac889d7afb5010ed54e50079bde873335 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 17:51:26 +0200
Subject: [PATCH 1960/2300] Fix for deb12 xxd install and php8.2 in default
 package

---
 install/debian/12/packages/default.pkg | 2 +-
 install/vst-install-debian.sh          | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/debian/12/packages/default.pkg b/install/debian/12/packages/default.pkg
index 45a34c96..cd1cbba1 100644
--- a/install/debian/12/packages/default.pkg
+++ b/install/debian/12/packages/default.pkg
@@ -1,4 +1,4 @@
-WEB_TEMPLATE='PHP-FPM-74'
+WEB_TEMPLATE='PHP-FPM-82'
 PROXY_TEMPLATE='hosting'
 DNS_TEMPLATE='default'
 WEB_DOMAINS='unlimited'
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 8d7720e0..902dc8d3 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -30,7 +30,7 @@ if [ "$release" -eq 12 ]; then
         flex whois git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
-        unrar-free vim-common net-tools unzip iptables"
+        unrar-free vim-common net-tools unzip iptables xxd"
 elif [ "$release" -eq 11 ]; then
     software="nginx apache2 apache2-utils
         libapache2-mod-fcgid php-fpm php
@@ -1845,7 +1845,7 @@ if [ "$release" -eq 11 ]; then
   apt-get -y install php7.4-apcu php7.4-mbstring php7.4-bcmath php7.4-curl php7.4-gd php7.4-intl php7.4-mysql php7.4-mysqlnd php7.4-pdo php7.4-soap php7.4-json php7.4-xml php7.4-zip php7.4-memcache php7.4-memcached php7.4-zip php7.4-imagick php7.4-imap
 fi
 if [ "$release" -eq 12 ]; then
-  apt-get -y install php8.2-apcu php8.2-mbstring php8.2-bcmath php8.2-curl php8.2-gd php8.2-intl php8.2-mysql php8.2-mysqlnd php8.2-pdo php8.2-soap php8.2-json php8.2-xml php8.2-zip php8.2-memcache php8.2-memcached php8.2-zip php8.2-imagick php8.2-imap
+  apt-get -y install php8.2-apcu php8.2-mbstring php8.2-bcmath php8.2-curl php8.2-gd php8.2-intl php8.2-mysql php8.2-mysqlnd php8.2-pdo php8.2-soap php8.2-xml php8.2-zip php8.2-memcache php8.2-memcached php8.2-zip php8.2-imagick php8.2-imap
 fi
 
 touch /var/log/php-mail.log

From 89c86b84fdefeb8802854a1e682543610f54be72 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 18:03:49 +0200
Subject: [PATCH 1961/2300] deb12 new exim4 conf

---
 install/debian/12/exim/exim4.conf.template    |  47 +-
 install/debian/12/exim/exim4.conf.template-RC | 446 ------------------
 install/vst-install-debian.sh                 |   4 +
 3 files changed, 43 insertions(+), 454 deletions(-)
 delete mode 100644 install/debian/12/exim/exim4.conf.template-RC

diff --git a/install/debian/12/exim/exim4.conf.template b/install/debian/12/exim/exim4.conf.template
index 4b3c0dd9..7658b313 100644
--- a/install/debian/12/exim/exim4.conf.template
+++ b/install/debian/12/exim/exim4.conf.template
@@ -12,6 +12,10 @@ disable_ipv6=true
 add_environment=<; PATH=/bin:/usr/bin
 keep_environment=
 
+#local_interfaces =  0.0.0.0
+#smtp_active_hostname = ${lookup{$interface_address}lsearch{/etc/exim4/virtual/helo_data}{$value}}
+#smtp_banner = "$smtp_active_hostname ESMTP $tod_full"
+
 domainlist local_domains = dsearch;/etc/exim4/domains/
 domainlist relay_to_domains = dsearch;/etc/exim4/domains/
 hostlist relay_from_hosts = 127.0.0.1
@@ -25,7 +29,12 @@ acl_smtp_rcpt = acl_check_rcpt
 acl_smtp_data = acl_check_data
 acl_smtp_mime = acl_check_mime
 
-recipients_max = 15
+LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS = 15
+LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS = 5
+LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
+LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
+
+recipients_max = 150
 recipients_max_reject = true
 
 # log_selector = +smtp_connection
@@ -69,11 +78,19 @@ acl_not_smtp = acl_not_smtp
 begin acl
 
 acl_not_smtp:
-  deny message = Web site is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period
-  ratelimit = 40 / 1h / $authenticated_id
+  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
+  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_recipients}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS}}
+  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
+
+  deny message = Hosting account is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
 
   warn ratelimit = 0 / 1h / strict / $authenticated_id
-  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+
+  warn    set acl_m3    = yes
 
   accept
 
@@ -109,11 +126,24 @@ acl_check_mail:
 acl_check_rcpt:
   accept  hosts         = :
 
-  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period
-  ratelimit = 40 / 1h / $authenticated_id
+  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
+  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_recipients}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS}}
+  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
+
+  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
 
   warn ratelimit = 0 / 1h / strict / $authenticated_id
-  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+
+  warn    set acl_m3    = no
+  
+  warn    !authenticated = *
+          hosts          = !+relay_from_hosts
+          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+          set acl_m3    = yes
 
   deny    message       = Restricted characters in address
           domains       = +local_domains
@@ -313,7 +343,8 @@ begin transports
 
 remote_smtp:
   driver = smtp
-  #helo_data = $sender_address_domain
+  #interface = ${if eq{$acl_m3}{yes}{FIRSTIP}{${lookup{$sender_address_domain}lsearch{/etc/exim4/virtual/interfaces} {$value}{SECONDIP}}}}
+  #helo_data = "${if eq{$acl_m3}{yes}{FIRSTHOST}{${lookup{$sending_ip_address}lsearch{/etc/exim4/virtual/helo_data}{$value}{SECONDHOST}}}}"
   dkim_domain = DKIM_DOMAIN
   dkim_selector = mail
   dkim_private_key = DKIM_PRIVATE_KEY
diff --git a/install/debian/12/exim/exim4.conf.template-RC b/install/debian/12/exim/exim4.conf.template-RC
deleted file mode 100644
index 36ba2a0d..00000000
--- a/install/debian/12/exim/exim4.conf.template-RC
+++ /dev/null
@@ -1,446 +0,0 @@
-######################################################################
-#                                                                    #
-#          Exim configuration file for Vesta Control Panel           #
-#                                                                    #
-######################################################################
-
-#SPAMASSASSIN = yes
-#SPAM_SCORE = 50
-#CLAMD =  yes
-
-disable_ipv6=true
-add_environment=<; PATH=/bin:/usr/bin
-keep_environment=
-
-#local_interfaces =  0.0.0.0
-#smtp_active_hostname = ${lookup{$interface_address}lsearch{/etc/exim4/virtual/helo_data}{$value}}
-#smtp_banner = "$smtp_active_hostname ESMTP $tod_full"
-
-domainlist local_domains = dsearch;/etc/exim4/domains/
-domainlist relay_to_domains = dsearch;/etc/exim4/domains/
-hostlist relay_from_hosts = 127.0.0.1
-hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
-hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
-no_local_from_check
-untrusted_set_sender = *
-acl_smtp_connect = acl_check_spammers
-acl_smtp_mail = acl_check_mail
-acl_smtp_rcpt = acl_check_rcpt
-acl_smtp_data = acl_check_data
-acl_smtp_mime = acl_check_mime
-
-LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS = 15
-LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS = 5
-LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
-LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
-
-recipients_max = 150
-recipients_max_reject = true
-
-# log_selector = +smtp_connection
-smtp_accept_max = 50
-smtp_accept_max_per_host = 4
-
-.ifdef SPAMASSASSIN
-spamd_address = 127.0.0.1 783
-.endif
-
-.ifdef CLAMD
-av_scanner = clamd: /var/run/clamav/clamd.ctl
-.endif
-
-tls_advertise_hosts = *
-tls_certificate = /usr/local/vesta/ssl/$received_ip_address.crt
-tls_privatekey = /usr/local/vesta/ssl/$received_ip_address.key
-
-daemon_smtp_ports = 25 : 465 : 587 : 2525
-tls_on_connect_ports = 465
-never_users = root
-host_lookup = *
-rfc1413_hosts = *
-rfc1413_query_timeout = 0s
-ignore_bounce_errors_after = 2d
-timeout_frozen_after = 7d
-
-DKIM_DOMAIN = ${lc:${domain:$h_from:}}
-DKIM_FILE = /etc/exim4/domains/${lookup{${lc:${domain:$h_from:}}}dsearch{/etc/exim4/domains/}}/dkim.pem
-DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
-
-
-
-######################################################################
-#                       ACL CONFIGURATION                            #
-#         Specifies access control lists for incoming SMTP mail      #
-######################################################################
-
-acl_not_smtp = acl_not_smtp
-
-begin acl
-
-acl_not_smtp:
-  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
-  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_recipients}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS}}
-  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
-
-  deny message = Hosting account is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
-  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
-  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
-
-  warn ratelimit = 0 / 1h / strict / $authenticated_id
-  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
-  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
-
-  warn    set acl_m3    = yes
-
-  accept
-
-acl_check_spammers:
-  accept  hosts         = +whitelist
-
-  drop    message       = Your host in blacklist on this server.
-          log_message   = Host in blacklist
-          hosts         = +spammers
-
-  accept
-
-
-acl_check_mail:
-  deny    condition     = ${if eq{$sender_helo_name}{}}
-          message       = HELO required before MAIL
-
-  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
-          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
-          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
-          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
-          delay         = 45s
-
-  drop    condition     = ${if isip{$sender_helo_name}}
-          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
-
-  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
-          message       = $interface_address is _my_ address
-
-  accept
-
-
-acl_check_rcpt:
-  accept  hosts         = :
-
-  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
-  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_recipients}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS}}
-  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
-
-  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
-  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
-  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
-
-  warn ratelimit = 0 / 1h / strict / $authenticated_id
-  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
-  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
-
-  warn    set acl_m3    = no
-  
-  warn    !authenticated = *
-          hosts          = !+relay_from_hosts
-          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
-          set acl_m3    = yes
-
-  deny    message       = Restricted characters in address
-          domains       = +local_domains
-          local_parts   = ^[.] : ^.*[@%!/|]
-
-  deny    message       = Restricted characters in address
-          domains       = !+local_domains
-          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
-
-  require verify        = sender
-
-  accept  hosts         = +relay_from_hosts
-          control       = submission
-
-  accept  authenticated = *
-          control       = submission/domain=
-
-  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
-          hosts         = !+whitelist
-          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
-
-  require message       = relay not permitted
-          domains       = +local_domains : +relay_to_domains
-
-  deny    message       = smtp auth requried
-         sender_domains = +local_domains
-         !authenticated = *
-
-  require verify        = recipient
-
-.ifdef CLAMD
-  warn    set acl_m0    = no
-
-  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
-          set acl_m0    = yes
-.endif
-
-.ifdef SPAMASSASSIN
-  warn    set acl_m1    = no
-
-  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
-          set acl_m1    = yes
-.endif
-
-  accept
-
-
-acl_check_data:
-
-  deny senders = /etc/exim4/deny_senders
-
-.ifdef CLAMD
-  deny   message        = Message contains a virus ($malware_name) and has been rejected
-         malware        = */defer_ok
-         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
-.endif
-
-.ifdef SPAMASSASSIN
-  warn   !authenticated = *
-         hosts          = !+relay_from_hosts
-         condition      = ${if < {$message_size}{600K}}
-         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
-         spam           = nobody:true/defer_ok
-         add_header     = X-Spam-Score: $spam_score_int
-         add_header     = X-Spam-Bar: $spam_bar
-         add_header     = X-Spam-Report: $spam_report
-         set acl_m2     = $spam_score_int
-
-  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
-         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
-         add_header     = X-Spam-Status: Yes
-         message        = SpamAssassin detected spam (from $sender_address to $recipients).
-.endif
-
-  accept
-
-
-acl_check_mime:
-  deny   message        = Blacklisted file extension detected
-         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh|\.jar)$\N}{1}{0}}
-
-  accept
-
-
-
-######################################################################
-#                   AUTHENTICATION CONFIGURATION                     #
-######################################################################
-begin authenticators
-
-dovecot_plain:
-  driver = dovecot
-  public_name = PLAIN
-  server_socket = /var/run/dovecot/auth-client
-  server_set_id = $auth1
-
-dovecot_login:
-  driver = dovecot
-  public_name = LOGIN
-  server_socket = /var/run/dovecot/auth-client
-  server_set_id = $auth1
-
-
-
-######################################################################
-#                      ROUTERS CONFIGURATION                         #
-#               Specifies how addresses are handled                  #
-######################################################################
-begin routers
-
-#smarthost:
-#  driver = manualroute
-#  domains = ! +local_domains
-#  transport = remote_smtp
-#  route_list = * smartrelay.vestacp.com
-#  no_more
-#  no_verify
-
-dnslookup:
-  driver = dnslookup
-  domains = !+local_domains
-  transport = remote_smtp
-  no_more
-
-localuser_spam:
-  driver = accept
-  transport = local_spam_delivery
-  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{yes}{no_such_user}}}}
-
-userforward:
-  driver = redirect
-  check_local_user
-  file = $home/.forward
-  require_files = ${local_part}:+${home}/.forward
-  domains = +local_domains
-  allow_filter
-  no_verify
-  no_expn
-  check_ancestor
-  file_transport = address_file
-  pipe_transport = address_pipe
-  reply_transport = address_reply
-
-procmail:
-  driver = accept
-  check_local_user
-  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
-  transport = procmail
-  no_verify
-
-autoreplay:
-  driver = accept
-  require_files = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg
-  condition = ${if exists{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg}{yes}{no}}
-  retry_use_local_part
-  transport = userautoreply
-  unseen
-
-aliases:
-  driver = redirect
-  headers_add = X-redirected: yes
-  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
-  require_files = /etc/exim4/domains/$domain/aliases
-  redirect_router = dnslookup
-  pipe_transport = address_pipe
-  unseen
-
-localuser_fwd_only:
-  driver = accept
-  transport = devnull
-  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/fwd_only}{true}{false}}}}
-
-localuser:
-  driver = accept
-  transport = local_delivery
-  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{true}{false}}
-
-catchall:
-  driver = redirect
-  headers_add = X-redirected: yes
-  require_files = /etc/exim4/domains/$domain/aliases
-  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
-  file_transport = local_delivery
-  redirect_router = dnslookup
-
-terminate_alias:
-  driver = accept
-  transport = devnull
-  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
-
-
-
-######################################################################
-#                      TRANSPORTS CONFIGURATION                      #
-######################################################################
-begin transports
-
-remote_smtp:
-  driver = smtp
-  #interface = ${if eq{$acl_m3}{yes}{FIRSTIP}{${lookup{$sender_address_domain}lsearch{/etc/exim4/virtual/interfaces} {$value}{SECONDIP}}}}
-  #helo_data = "${if eq{$acl_m3}{yes}{FIRSTHOST}{${lookup{$sending_ip_address}lsearch{/etc/exim4/virtual/helo_data}{$value}{SECONDHOST}}}}"
-  dkim_domain = DKIM_DOMAIN
-  dkim_selector = mail
-  dkim_private_key = DKIM_PRIVATE_KEY
-  dkim_canon = relaxed
-  dkim_strict = 0
-  hosts_try_fastopen = !*.l.google.com
-  hosts_try_chunking = !93.188.3.0/24
-
-procmail:
-  driver = pipe
-  command = "/usr/bin/procmail -d $local_part"
-  return_path_add
-  delivery_date_add
-  envelope_to_add
-  user = $local_part
-  initgroups
-  return_output
-
-local_delivery:
-  driver = appendfile
-  maildir_format
-  maildir_use_size_file
-  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
-  group = mail
-  create_directory
-  directory_mode = 770
-  mode = 660
-  use_lockfile = no
-  delivery_date_add
-  envelope_to_add
-  return_path_add
-  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
-  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
-  quota_warn_threshold = 75%
-
-local_spam_delivery:
-  driver = appendfile
-  maildir_format
-  maildir_use_size_file
-  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
-  group = mail
-  create_directory
-  directory_mode = 770
-  mode = 660
-  use_lockfile = no
-  delivery_date_add
-  envelope_to_add
-  return_path_add
-  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}/.Spam"
-  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
-  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
-  quota_warn_threshold = 75%
-
-address_pipe:
-  driver = pipe
-  return_output
-
-address_file:
-  driver = appendfile
-  delivery_date_add
-  envelope_to_add
-  return_path_add
-
-address_reply:
-  driver = autoreply
-
-userautoreply:
-  driver = autoreply
-  file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}.msg
-  from = "${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"
-  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
-  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
-  to = "${sender_address}"
-
-devnull:
-  driver = appendfile
-  file = /dev/null
-
-
-
-######################################################################
-#                      RETRY CONFIGURATION                           #
-######################################################################
-begin retry
-
-# Address or Domain    Error       Retries
-# -----------------    -----       -------
-*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
-
-
-
-######################################################################
-#                      REWRITE CONFIGURATION                         #
-######################################################################
-begin rewrite
-
-
-
-######################################################################
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 902dc8d3..614ace71 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1426,6 +1426,10 @@ if [ "$exim" = 'yes' ]; then
     cp -f $vestacp/exim/spam-blocks.conf /etc/exim4/
     cp -f $vestacp/exim/deny_senders /etc/exim4/
     touch /etc/exim4/white-blocks.conf
+    touch /etc/exim4/limit_per_email_account_max_sent_emails_per_hour
+    touch /etc/exim4/limit_per_email_account_max_recipients
+    touch /etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour
+    touch /etc/exim4/limit_per_hosting_account_max_recipients
 
     if [ "$spamd" = 'yes' ]; then
         sed -i "s/#SPAM/SPAM/g" /etc/exim4/exim4.conf.template

From b535c863d6c9aa157616d5fa37ded62012ee17a2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 18:12:35 +0200
Subject: [PATCH 1962/2300] deb12 spamd install

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 614ace71..6573edce 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -30,7 +30,7 @@ if [ "$release" -eq 12 ]; then
         flex whois git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
-        unrar-free vim-common net-tools unzip iptables xxd"
+        unrar-free vim-common net-tools unzip iptables xxd spamd"
 elif [ "$release" -eq 11 ]; then
     software="nginx apache2 apache2-utils
         libapache2-mod-fcgid php-fpm php

From a6fdb87f7db17dc7adf5b6f371d4c546c9377a37 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 18:24:33 +0200
Subject: [PATCH 1963/2300] v-list-sys-services deb12 mariadb detection fix

---
 bin/v-list-sys-services | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-list-sys-services b/bin/v-list-sys-services
index cddb59be..3d876101 100755
--- a/bin/v-list-sys-services
+++ b/bin/v-list-sys-services
@@ -297,7 +297,7 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB_SYSTEM" != 'remote' ]; then
         if [ "$service" = 'mysql' ]; then
             proc_name='mysqld'
             release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
-            if [ "$release" -eq 11 ] && [ ! -f "/etc/apt/sources.list.d/mysql.list" ]; then
+            if [ "$release" -gt 10 ] && [ ! -f "/etc/apt/sources.list.d/mysql.list" ]; then
                 service='mariadb'
                 proc_name='mariadbd'
             fi

From d52e27cc05db80a2de7754d9b8f1b76621755a85 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 18:50:27 +0200
Subject: [PATCH 1964/2300] deb12 install rsyslog

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 6573edce..627a4219 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -30,7 +30,7 @@ if [ "$release" -eq 12 ]; then
         flex whois git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
-        unrar-free vim-common net-tools unzip iptables xxd spamd"
+        unrar-free vim-common net-tools unzip iptables xxd spamd rsyslog"
 elif [ "$release" -eq 11 ]; then
     software="nginx apache2 apache2-utils
         libapache2-mod-fcgid php-fpm php

From c74dfde17013d5b608631675bb8d11c12337a684 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 19:01:26 +0200
Subject: [PATCH 1965/2300] deb12 exim4 smtputf8_advertise_hosts

---
 install/debian/12/exim/exim4.conf.template | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/debian/12/exim/exim4.conf.template b/install/debian/12/exim/exim4.conf.template
index 7658b313..c168ec34 100644
--- a/install/debian/12/exim/exim4.conf.template
+++ b/install/debian/12/exim/exim4.conf.template
@@ -11,6 +11,7 @@
 disable_ipv6=true
 add_environment=<; PATH=/bin:/usr/bin
 keep_environment=
+smtputf8_advertise_hosts =
 
 #local_interfaces =  0.0.0.0
 #smtp_active_hostname = ${lookup{$interface_address}lsearch{/etc/exim4/virtual/helo_data}{$value}}

From ce5fac9b07e9a84dc51a89dbd2446d8c61f7c785 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 20:49:36 +0200
Subject: [PATCH 1966/2300] deb12 nginx listen ssl

---
 bin/v-change-vesta-port                     | 1 +
 src/deb/for-download/nginx/nginx-deb12.conf | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/v-change-vesta-port b/bin/v-change-vesta-port
index 3f386654..7ea7827e 100755
--- a/bin/v-change-vesta-port
+++ b/bin/v-change-vesta-port
@@ -41,6 +41,7 @@ is_int_format_valid "$port" 'port number'
 #----------------------------------------------------------#
 
 sed -i "s|$oldport;|$port;|g" $VESTA/nginx/conf/nginx.conf
+sed -i "s|$oldport ssl;|$port ssl;|g" $VESTA/nginx/conf/nginx.conf
 if [ -f "/etc/roundcube/plugins/password/config.inc.php" ]; then
     sed -i "s|'$oldport'|'$port'|g" /etc/roundcube/plugins/password/config.inc.php
 fi
diff --git a/src/deb/for-download/nginx/nginx-deb12.conf b/src/deb/for-download/nginx/nginx-deb12.conf
index 67f5c5bd..cf236824 100644
--- a/src/deb/for-download/nginx/nginx-deb12.conf
+++ b/src/deb/for-download/nginx/nginx-deb12.conf
@@ -78,7 +78,7 @@ http {
 
     # Vhost
     server {
-        listen          8083;
+        listen          8083 ssl;
         server_name     _;
         root            /usr/local/vesta/web;
         charset         utf-8;

From 93a6d0b6e97c4f2caf397878540f552838ebc88c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 17 Jun 2023 23:00:40 +0200
Subject: [PATCH 1967/2300] deb12 fail2ban auth.log fix

---
 install/vst-install-debian.sh | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 627a4219..ab47493c 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1630,6 +1630,13 @@ if [ "$fail2ban" = 'yes' ]; then
         fline=$(echo "$fline" |grep enabled |tail -n1 |cut -f 1 -d -)
         sed -i "${fline}s/false/true/" /etc/fail2ban/jail.local
     fi 
+	if [ ! -e /var/log/auth.log ]; then
+		# Debian workaround: auth logging was moved to systemd
+        # We took this fix from HestiaCP
+		touch /var/log/auth.log
+		chmod 640 /var/log/auth.log
+		chown root:adm /var/log/auth.log
+	fi
     #update-rc.d fail2ban defaults
     currentservice='fail2ban'
     ensure_startup $currentservice

From 599ce37116afeb7f2d1138b2252eeab0a87fa0d7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 18 Jun 2023 19:11:55 +0200
Subject: [PATCH 1968/2300] exim4 fix for Tainted filename for search for
 aliases

---
 install/debian/12/exim/exim4.conf.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/12/exim/exim4.conf.template b/install/debian/12/exim/exim4.conf.template
index c168ec34..6964df9d 100644
--- a/install/debian/12/exim/exim4.conf.template
+++ b/install/debian/12/exim/exim4.conf.template
@@ -143,7 +143,7 @@ acl_check_rcpt:
   
   warn    !authenticated = *
           hosts          = !+relay_from_hosts
-          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+          ondition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
           set acl_m3    = yes
 
   deny    message       = Restricted characters in address

From 1d89e935e14da52f4146b08e030d7b0bd1f7637a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 18 Jun 2023 19:13:09 +0200
Subject: [PATCH 1969/2300] Update exim4.conf.template

---
 install/debian/12/exim/exim4.conf.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/12/exim/exim4.conf.template b/install/debian/12/exim/exim4.conf.template
index 6964df9d..e6abbe8e 100644
--- a/install/debian/12/exim/exim4.conf.template
+++ b/install/debian/12/exim/exim4.conf.template
@@ -143,7 +143,7 @@ acl_check_rcpt:
   
   warn    !authenticated = *
           hosts          = !+relay_from_hosts
-          ondition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
+          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
           set acl_m3    = yes
 
   deny    message       = Restricted characters in address

From 82956ffa9e73f4dedee973912333d62334dd48b6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 18 Jun 2023 22:00:38 +0200
Subject: [PATCH 1970/2300] Setting up rsyslog for deb12

---
 install/vst-install-debian.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ab47493c..5bbfc93b 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -833,6 +833,12 @@ fi
 echo "=== Enabling daemon autostart"
 rm -f /usr/sbin/policy-rc.d
 
+if [ "$release" -gt 11 ]; then
+    echo "=== Setting up rsyslog"
+    currentservice='rsyslog'
+    ensure_startup $currentservice
+    ensure_start $currentservice
+fi
 
 #----------------------------------------------------------#
 #                     Configure system                     #

From b3336ba630807a5aa85867d52c687ba591960f65 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 19 Jun 2023 00:14:37 +0200
Subject: [PATCH 1971/2300] Update exim4.conf.template-RC deb11

---
 install/debian/11/exim/exim4.conf.template-RC | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/11/exim/exim4.conf.template-RC b/install/debian/11/exim/exim4.conf.template-RC
index e16099bd..5a4d0414 100644
--- a/install/debian/11/exim/exim4.conf.template-RC
+++ b/install/debian/11/exim/exim4.conf.template-RC
@@ -145,7 +145,7 @@ acl_check_rcpt:
   
   warn    !authenticated = *
           hosts          = !+relay_from_hosts
-          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
+          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
           set acl_m3    = yes
 
   deny    message       = Restricted characters in address

From fdff356aa726c9883b6b7b080c972b403d470de2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 25 Jun 2023 23:50:21 +0200
Subject: [PATCH 1972/2300] Switching signing apt key to "gpg --dearmor"

---
 install/vst-install-debian.sh | 19 ++++++++++++-------
 1 file changed, 12 insertions(+), 7 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 5bbfc93b..bea5eb78 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -18,6 +18,7 @@ os='debian'
 release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
 codename="$(cat /etc/os-release |grep VERSION= |cut -f 2 -d \(|cut -f 1 -d \))"
 vestacp="$VESTA/install/$VERSION/$release"
+ARCH="amd64"
 
 if [ "$release" -eq 12 ]; then
     software="nginx apache2 apache2-utils
@@ -581,15 +582,19 @@ apt-get -y upgrade
 check_result $? 'apt-get upgrade failed'
 
 echo "=== Installing nginx repo"
-apt=/etc/apt/sources.list.d
-echo "deb http://nginx.org/packages/debian/ $codename nginx" > $apt/nginx.list
-wget http://nginx.org/keys/nginx_signing.key -O /tmp/nginx_signing.key
-apt-key add /tmp/nginx_signing.key
+apt="/etc/apt/sources.list.d"
+# echo "deb http://nginx.org/packages/debian/ $codename nginx" > $apt/nginx.list
+# wget http://nginx.org/keys/nginx_signing.key -O /tmp/nginx_signing.key
+# apt-key add /tmp/nginx_signing.key
+echo "deb [arch=$ARCH signed-by=/usr/share/keyrings/nginx-keyring.gpg] https://nginx.org/packages/mainline/$VERSION/ $codename nginx" > $apt/nginx.list
+curl -s https://nginx.org/keys/nginx_signing.key | gpg --dearmor | tee /usr/share/keyrings/nginx-keyring.gpg > /dev/null 2>&1
 
 echo "=== Installing myVesta repo"
-echo "deb http://$RHOST/$codename/ $codename vesta" > $apt/vesta.list
-wget $CHOST/deb_signing.key -O deb_signing.key
-apt-key add deb_signing.key
+# echo "deb http://$RHOST/$codename/ $codename vesta" > $apt/vesta.list
+# wget $CHOST/deb_signing.key -O deb_signing.key
+# apt-key add deb_signing.key
+echo "deb [arch=$ARCH signed-by=/usr/share/keyrings/myvesta-keyring.gpg] https://$RHOST/$codename/ $codename vesta" > $apt/vesta.list
+curl -s $CHOST/deb_signing.key | gpg --dearmor | tee /usr/share/keyrings/myvesta-keyring.gpg > /dev/null 2>&1
 
 # Installing jessie backports
 if [ "$release" -eq 8 ]; then

From ebd100521f3786b58540358d3cfac456fd213aef Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 26 Jun 2023 00:01:52 +0200
Subject: [PATCH 1973/2300] Temporary ProFTPD fix for Debian12

---
 install/vst-install-debian.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index bea5eb78..d8cb251d 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1261,6 +1261,12 @@ if [ "$proftpd" = 'yes' ]; then
     currentservice='proftpd'
     ensure_startup $currentservice
     ensure_start $currentservice
+
+    # Temporary ProFTPD fix for Debian12
+    if [ "$release" -eq 12 ]; then
+        systemctl disable --now proftpd.socket
+        systemctl enable --now proftpd.service
+    fi
 fi
 
 

From d41ca3276130e1474f3505b5984fccd93259c0d9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 26 Jun 2023 10:21:16 +0200
Subject: [PATCH 1974/2300] Update install-new-roundcube.sh 1.6.1

---
 src/deb/for-download/tools/install-new-roundcube.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index 6311563e..a4404fc4 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -3,7 +3,7 @@
 USER='webmail'
 DOMAIN='' # enter domain or subdomain
 
-VERSION='1.6.0'
+VERSION='1.6.1'
 DOWNLOAD="https://github.com/roundcube/roundcubemail/releases/download/$VERSION/roundcubemail-$VERSION-complete.tar.gz"
 
 LOGINMESSAGE1='Click here for NEW Webmail'

From 473277dd2972ec746489cfc40ad643e225008c44 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 26 Jun 2023 14:39:45 +0200
Subject: [PATCH 1975/2300] Update install-new-roundcube.sh - deleting filter
 plugin

---
 src/deb/for-download/tools/install-new-roundcube.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index a4404fc4..55bdd320 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -175,10 +175,10 @@ if [ -d "/home/$USER/web/$DOMAIN/public_html/plugins/password" ]; then
     cp /usr/share/roundcube/plugins/password/drivers/vesta.php /home/$USER/web/$DOMAIN/public_html/plugins/password/drivers/vesta.php
 fi
 
-wget -nv https://c.myvestacp.com/tools/roundcube-filters.tgz -O /root/roundcube-filters.tgz
-tar --directory /home/$USER/web/$DOMAIN/public_html/plugins -xzf /root/roundcube-filters.tgz
+# wget -nv https://c.myvestacp.com/tools/roundcube-filters.tgz -O /root/roundcube-filters.tgz
+# tar --directory /home/$USER/web/$DOMAIN/public_html/plugins -xzf /root/roundcube-filters.tgz
+# sed -i "s/\$config\['plugins'\] = \[/\$config['plugins'] = ['filters', /g" /home/$USER/web/$DOMAIN/public_html/config/config.inc.php
 
-sed -i "s/\$config\['plugins'\] = \[/\$config['plugins'] = ['filters', /g" /home/$USER/web/$DOMAIN/public_html/config/config.inc.php
 echo "\$config['session_lifetime'] = 1080;" >> /home/$USER/web/$DOMAIN/public_html/config/config.inc.php
 
 fix_ownership

From c41a540494ed552875752ba0a1257cc554cf20f0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 26 Jun 2023 14:45:37 +0200
Subject: [PATCH 1976/2300] Update install-new-roundcube.sh

---
 .../tools/install-new-roundcube.sh            | 30 +++++++++++++++++--
 1 file changed, 27 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index 55bdd320..8838e0ab 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -140,6 +140,27 @@ if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-74.tpl" ]; then
     apt install -y php7.4-imap
     echo "================================"
 fi
+if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-80.tpl" ]; then
+    echo "================================"
+    echo "== Installing php8.0-imap module"
+    apt update
+    apt install -y php8.0-imap
+    echo "================================"
+fi
+if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-81.tpl" ]; then
+    echo "================================"
+    echo "== Installing php8.1-imap module"
+    apt update
+    apt install -y php8.1-imap
+    echo "================================"
+fi
+if [ -f "/usr/local/vesta/data/templates/web/apache2/PHP-FPM-82.tpl" ]; then
+    echo "================================"
+    echo "== Installing php8.2-imap module"
+    apt update
+    apt install -y php8.2-imap
+    echo "================================"
+fi
 
 echo "-------------------------------------"
 echo "Go to:"
@@ -147,6 +168,7 @@ echo "https://${DOMAIN}/installer/"
 echo "... and finish the Roundcube installation."
 echo ""
 echo "You will be asked for:"
+echo "Database host: localhost"
 echo "Database user: $DATABASE_NAME"
 echo "Database name: $DATABASE_NAME"
 echo "Database pass: $DATABASE_PASSWORD"
@@ -183,9 +205,11 @@ echo "\$config['session_lifetime'] = 1080;" >> /home/$USER/web/$DOMAIN/public_ht
 
 fix_ownership
 
-check_grep=$(grep -c 'color: white; font-size: 12pt' /usr/share/roundcube/skins/larry/templates/login.html)
-if [ "$check_grep" -eq 0 ]; then
-    sed -i "s|<roundcube:form name=\"form\" method=\"post\">|<br /><br /><center><a href=\"https://$DOMAIN/\" style=\"color: white; font-size: 12pt;\">$LOGINMESSAGE1</a><br /><span style=\"color: white; font-size: 8pt;\">$LOGINMESSAGE2</span></center><br /><br />\n\n<roundcube:form name=\"form\" method=\"post\">|g" /usr/share/roundcube/skins/larry/templates/login.html
+if [ -f "/usr/share/roundcube/skins/larry/templates/login.html" ]; then
+    check_grep=$(grep -c 'color: white; font-size: 12pt' /usr/share/roundcube/skins/larry/templates/login.html)
+    if [ "$check_grep" -eq 0 ]; then
+        sed -i "s|<roundcube:form name=\"form\" method=\"post\">|<br /><br /><center><a href=\"https://$DOMAIN/\" style=\"color: white; font-size: 12pt;\">$LOGINMESSAGE1</a><br /><span style=\"color: white; font-size: 8pt;\">$LOGINMESSAGE2</span></center><br /><br />\n\n<roundcube:form name=\"form\" method=\"post\">|g" /usr/share/roundcube/skins/larry/templates/login.html
+    fi
 fi
 
 check_grep=$(grep -c 'MAIL_URL=' /usr/local/vesta/conf/vesta.conf)

From ac98e1d9aa284bc3abe0d2abf33fa2a8071ed2ce Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 26 Jun 2023 21:52:43 +0200
Subject: [PATCH 1977/2300] Patching spamassassin dns_server

---
 install/vst-install-debian.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index d8cb251d..b4f5e0cc 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1545,6 +1545,9 @@ if [ "$spamd" = 'yes' ]; then
     else
         currentservice='spamd'
     fi
+    echo "=== Patching spamassassin dns_server"
+    sed -i "s/report_safe 1/report_safe 1\n\ndns_server 127.0.0.1/g" /etc/spamassassin/local.cf
+
     wget -nv -O /etc/spamassassin/barracuda.cf http://c.myvestacp.com/tools/spamassassin/barracuda.cf
     ensure_startup $currentservice
     systemctl restart $currentservice

From a6eedcc6a97610909eb61c923d888de40f276628 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 26 Jun 2023 22:00:46 +0200
Subject: [PATCH 1978/2300] Creating spamassassin /nonexistent folder

---
 install/vst-install-debian.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index b4f5e0cc..e7c9a0a9 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1545,6 +1545,12 @@ if [ "$spamd" = 'yes' ]; then
     else
         currentservice='spamd'
     fi
+
+    echo "=== Creating spamassassin /nonexistent folder"
+    mkdir /nonexistent
+    mkdir /nonexistent/.spamassassin
+    chown -R nobody:debian-spamd /nonexistent
+
     echo "=== Patching spamassassin dns_server"
     sed -i "s/report_safe 1/report_safe 1\n\ndns_server 127.0.0.1/g" /etc/spamassassin/local.cf
 

From fb3e1e52e07043c27e897173aef79c1d0da2159d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 27 Jun 2023 12:20:28 +0200
Subject: [PATCH 1979/2300] Update barracuda.cf

---
 src/deb/for-download/tools/spamassassin/barracuda.cf | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

diff --git a/src/deb/for-download/tools/spamassassin/barracuda.cf b/src/deb/for-download/tools/spamassassin/barracuda.cf
index 4491d645..1c0706c3 100644
--- a/src/deb/for-download/tools/spamassassin/barracuda.cf
+++ b/src/deb/for-download/tools/spamassassin/barracuda.cf
@@ -1,15 +1,9 @@
 header IN_BCUDA_RBL rbleval:check_rbl('bcuda', 'b.barracudacentral.org')
 describe IN_BCUDA_RBL Received via a relay listed by Barracuda BRBL
 tflags IN_BCUDA_RBL net
+score RCVD_IN_BCUDA_RBL 2.00
 
-header RCVD_IN_BCUDA_RELAY rbleval:check_rbl_results_for('bcuda', '127.0.0.2')
+header RCVD_IN_BCUDA_RELAY rbleval:check_rbl_sub('bcuda', '127.0.0.2')
 describe RCVD_IN_BCUDA_RELAY BCUDA: relay ip is convicted spammer
 tflags RCVD_IN_BCUDA_RELAY net
-
-score RCVD_IN_BCUDA_RBL 1.00
 score RCVD_IN_BCUDA_RELAY 3.00
-
-header IN_BCUDA_HOP rbleval:check_rbl('bcuda-notfirsthop', 'b.barracudacentral.org')
-describe IN_BCUDA_HOP Received via a relay listed by Barracuda BRBL
-tflags IN_BCUDA_HOP net
-score RCVD_IN_BCUDA_HOP 1.00

From e095751b8b4d471d59b88726489e942de1b32a3d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 27 Jun 2023 13:09:12 +0200
Subject: [PATCH 1980/2300] Update barracuda.cf - correcting scores

---
 src/deb/for-download/tools/spamassassin/barracuda.cf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/for-download/tools/spamassassin/barracuda.cf b/src/deb/for-download/tools/spamassassin/barracuda.cf
index 1c0706c3..4d5aa0c4 100644
--- a/src/deb/for-download/tools/spamassassin/barracuda.cf
+++ b/src/deb/for-download/tools/spamassassin/barracuda.cf
@@ -1,9 +1,9 @@
 header IN_BCUDA_RBL rbleval:check_rbl('bcuda', 'b.barracudacentral.org')
 describe IN_BCUDA_RBL Received via a relay listed by Barracuda BRBL
 tflags IN_BCUDA_RBL net
-score RCVD_IN_BCUDA_RBL 2.00
+score RCVD_IN_BCUDA_RBL 1.00
 
 header RCVD_IN_BCUDA_RELAY rbleval:check_rbl_sub('bcuda', '127.0.0.2')
 describe RCVD_IN_BCUDA_RELAY BCUDA: relay ip is convicted spammer
 tflags RCVD_IN_BCUDA_RELAY net
-score RCVD_IN_BCUDA_RELAY 3.00
+score RCVD_IN_BCUDA_RELAY 4.00

From 9290ba6071ceb9345e25a6a19b04a2bbcd015816 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 27 Jun 2023 15:22:30 +0200
Subject: [PATCH 1981/2300] Version 0.9.9-0-4

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 321145a8..8ebe40d1 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0-3
\ No newline at end of file
+vesta-0.9.9-0-4

From d4f0baa4ad3029cbd54ec7d1fec0beb3f76e1921 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 27 Jun 2023 15:24:58 +0200
Subject: [PATCH 1982/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index f8301fd8..ee9e1b65 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.9-0-4 [27-Jun-2023]
+==================================================
+* Support for Debian 12
+
 Version 0.9.9-0-2 [12-Jun-2023]
 ==================================================
 * Hosting panel UI perfomance fix

From 12c65839c286717b2c70e43d02eb7f7fe7cc0cd1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 27 Jun 2023 15:28:36 +0200
Subject: [PATCH 1983/2300] Update Changelog.md

---
 Changelog.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index ee9e1b65..3f5fb37b 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,6 +1,6 @@
 Version 0.9.9-0-4 [27-Jun-2023]
 ==================================================
-* Support for Debian 12
+* Support for Debian 12 ( in mutual cooperation with @HestiaCP )
 
 Version 0.9.9-0-2 [12-Jun-2023]
 ==================================================

From dc8abe95f071cbcc80145912f9caf795b328b48b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 27 Jun 2023 18:58:52 +0200
Subject: [PATCH 1984/2300] Update list_user.html - coffee typo

---
 web/templates/admin/list_user.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_user.html b/web/templates/admin/list_user.html
index 066513ee..0bcbddd7 100644
--- a/web/templates/admin/list_user.html
+++ b/web/templates/admin/list_user.html
@@ -81,7 +81,7 @@
               </div>
               <div class="io-box-left-items io-4-homepage-block">
                 <a href="https://forum.myvestacp.com/viewtopic.php?t=814" target="_blank">Donate</a>
-                <span class="io-description">Buy us a coffe</span>
+                <span class="io-description">Buy us a coffee</span>
               </div>
               <div class="io-box-left-items io-5-homepage-block">
                 <a href="https://wiki.myvestacp.com/" target="_blank">Wiki</a>

From ef5ef951940ed7bcf3f47f02e2695104b7f23c6b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 28 Jun 2023 15:22:05 +0200
Subject: [PATCH 1985/2300] get deb12 exim conf

---
 bin/v-make-separated-ip-for-email | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index a26c68e3..a25fc6dd 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -138,7 +138,7 @@ check_grep=$(grep -c 'smtp_active_hostname' /etc/exim4/exim4.conf.template)
 if [ "$check_grep" -eq 0 ]; then
     echo "=== patching exim4.conf.template"
     mv /etc/exim4/exim4.conf.template /etc/exim4/exim4.conf.template-backup
-    cp /usr/local/vesta/install/debian/11/exim/exim4.conf.template-RC /etc/exim4/exim4.conf.template
+    cp /usr/local/vesta/install/debian/12/exim/exim4.conf.template /etc/exim4/exim4.conf.template
     sed -i "s|FIRSTIP|$HOST_IP|g" /etc/exim4/exim4.conf.template
     sed -i "s|SECONDIP|$MAIL_IP|g" /etc/exim4/exim4.conf.template
     sed -i "s|FIRSTHOST|$HOSTNAME|g" /etc/exim4/exim4.conf.template

From 7ee011a9d3b6c72183a455fe9d68c2ed9ea35c1a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 27 Jul 2023 14:41:38 +0200
Subject: [PATCH 1986/2300] Update v-import-cpanel-backup

---
 bin/v-import-cpanel-backup | 45 +++++++++++++++++++-------------------
 1 file changed, 23 insertions(+), 22 deletions(-)

diff --git a/bin/v-import-cpanel-backup b/bin/v-import-cpanel-backup
index 02383018..4faad31e 100644
--- a/bin/v-import-cpanel-backup
+++ b/bin/v-import-cpanel-backup
@@ -269,28 +269,29 @@ cd $sk_mdir
 for sk_maild in $(ls -1)
 do
 if [[ "$sk_maild" != "cur" && "$sk_maild" != "new" && "$sk_maild" != "tmp"  ]]; then
-	if [ -d "$sk_maild" ]; then
-		for sk_mail_account in $(ls $sk_maild/)
-		 do
-					
-					echo "Create and restore mail account: $sk_mail_account@$sk_maild"
-					sk_mail_pass1=$(generate_password)		
-					/usr/local/vesta/bin/v-add-mail-account $sk_cp_user $sk_maild $sk_mail_account $sk_mail_pass1
-					mv ${sk_maild}/${sk_mail_account} /home/${sk_cp_user}/mail/${sk_maild}
-					chown ${sk_cp_user}:mail -R /home/${sk_cp_user}/mail/${sk_maild}
-					find /home/${sk_cp_user}/mail/${sk_maild} -type f -name 'dovecot*' -delete
-					# echo "${sk_mail_account}@${sk_maild} | $sk_mail_pass1"	>> /root/sk_mail_password_${sk_cp_user}-${sk_cod}
-					echo "Set password for ${sk_mail_account}@${sk_maild}"
-					pass=$(grep "^${sk_mail_account}:" ${sk_importer_in}/homedir/etc/${sk_maild}/shadow | awk -F  ":" '{print $2}')
-					newline="${sk_mail_account}:{SHA512-CRYPT}$pass:${sk_cp_user}:mail::/home/${sk_cp_user}:0"
-					newline2="ACCOUNT='${sk_mail_account}' ALIAS='' AUTOREPLY='no' FWD='' FWD_ONLY='' MD5='{SHA512-CRYPT}$pass' QUOTA='unlimited' U_DISK='0' SUSPENDED='no' TIME='$time' DATE='$date'"
-					# echo $newline
-					escaped=$(printf '%s\n' "$newline" | sed -e 's/[\/&]/\\&/g')
-					escaped2=$(printf '%s\n' "$newline2" | sed -e 's/[\/&]/\\&/g')
-					sed -i "s/^${sk_mail_account}:.*/$escaped/g" /home/${sk_cp_user}/conf/mail/${sk_maild}/passwd
-					sed -i "s/^ACCOUNT='${sk_mail_account}.*/$escaped2/g" /usr/local/vesta/data/users/${sk_cp_user}/mail/${sk_maild}.conf
-		done
-	fi
+    if [ -d "$sk_maild" ]; then
+        for sk_mail_account in $(ls $sk_maild/)
+         do
+                    echo "Create and restore mail account: $sk_mail_account@$sk_maild"
+                    sk_mail_pass1=$(generate_password)        
+                    /usr/local/vesta/bin/v-add-mail-account $sk_cp_user $sk_maild $sk_mail_account $sk_mail_pass1
+                    mv ${sk_maild}/${sk_mail_account} /home/${sk_cp_user}/mail/${sk_maild}
+                    chown ${sk_cp_user}:mail -R /home/${sk_cp_user}/mail/${sk_maild}
+                    find /home/${sk_cp_user}/mail/${sk_maild} -type f -name 'dovecot*' -delete
+                    # echo "${sk_mail_account}@${sk_maild} | $sk_mail_pass1"    >> /root/sk_mail_password_${sk_cp_user}-${sk_cod}
+                    if [ -f "${sk_importer_in}/homedir/etc/${sk_maild}/shadow" ]; then
+                        echo "Set password for ${sk_mail_account}@${sk_maild}"
+                        pass=$(grep "^${sk_mail_account}:" ${sk_importer_in}/homedir/etc/${sk_maild}/shadow | awk -F  ":" '{print $2}')
+                        newline="${sk_mail_account}:{SHA512-CRYPT}$pass:${sk_cp_user}:mail::/home/${sk_cp_user}:0"
+                        newline2="ACCOUNT='${sk_mail_account}' ALIAS='' AUTOREPLY='no' FWD='' FWD_ONLY='' MD5='{SHA512-CRYPT}$pass' QUOTA='unlimited' U_DISK='0' SUSPENDED='no' TIME='$time' DATE='$date'"
+                        # echo $newline
+                        escaped=$(printf '%s\n' "$newline" | sed -e 's/[\/&]/\\&/g')
+                        escaped2=$(printf '%s\n' "$newline2" | sed -e 's/[\/&]/\\&/g')
+                        sed -i "s/^${sk_mail_account}:.*/$escaped/g" /home/${sk_cp_user}/conf/mail/${sk_maild}/passwd
+                        sed -i "s/^ACCOUNT='${sk_mail_account}.*/$escaped2/g" /usr/local/vesta/data/users/${sk_cp_user}/mail/${sk_maild}.conf
+                    fi
+        done
+    fi
 #else
 # this only detect default dirs account new, cur, tmp etc
 # maybe can do something with this, but on most cpanel default account have only spam.

From 12d6e59a7ec278e34117f674739988db20eca0d1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 27 Jul 2023 14:50:16 +0200
Subject: [PATCH 1987/2300] Update v-import-cpanel-backup

---
 bin/v-import-cpanel-backup | 44 ++++++++++++++++++++------------------
 1 file changed, 23 insertions(+), 21 deletions(-)

diff --git a/bin/v-import-cpanel-backup b/bin/v-import-cpanel-backup
index 4faad31e..f92ae5af 100644
--- a/bin/v-import-cpanel-backup
+++ b/bin/v-import-cpanel-backup
@@ -271,25 +271,25 @@ do
 if [[ "$sk_maild" != "cur" && "$sk_maild" != "new" && "$sk_maild" != "tmp"  ]]; then
     if [ -d "$sk_maild" ]; then
         for sk_mail_account in $(ls $sk_maild/)
-         do
-                    echo "Create and restore mail account: $sk_mail_account@$sk_maild"
-                    sk_mail_pass1=$(generate_password)        
-                    /usr/local/vesta/bin/v-add-mail-account $sk_cp_user $sk_maild $sk_mail_account $sk_mail_pass1
-                    mv ${sk_maild}/${sk_mail_account} /home/${sk_cp_user}/mail/${sk_maild}
-                    chown ${sk_cp_user}:mail -R /home/${sk_cp_user}/mail/${sk_maild}
-                    find /home/${sk_cp_user}/mail/${sk_maild} -type f -name 'dovecot*' -delete
-                    # echo "${sk_mail_account}@${sk_maild} | $sk_mail_pass1"    >> /root/sk_mail_password_${sk_cp_user}-${sk_cod}
-                    if [ -f "${sk_importer_in}/homedir/etc/${sk_maild}/shadow" ]; then
-                        echo "Set password for ${sk_mail_account}@${sk_maild}"
-                        pass=$(grep "^${sk_mail_account}:" ${sk_importer_in}/homedir/etc/${sk_maild}/shadow | awk -F  ":" '{print $2}')
-                        newline="${sk_mail_account}:{SHA512-CRYPT}$pass:${sk_cp_user}:mail::/home/${sk_cp_user}:0"
-                        newline2="ACCOUNT='${sk_mail_account}' ALIAS='' AUTOREPLY='no' FWD='' FWD_ONLY='' MD5='{SHA512-CRYPT}$pass' QUOTA='unlimited' U_DISK='0' SUSPENDED='no' TIME='$time' DATE='$date'"
-                        # echo $newline
-                        escaped=$(printf '%s\n' "$newline" | sed -e 's/[\/&]/\\&/g')
-                        escaped2=$(printf '%s\n' "$newline2" | sed -e 's/[\/&]/\\&/g')
-                        sed -i "s/^${sk_mail_account}:.*/$escaped/g" /home/${sk_cp_user}/conf/mail/${sk_maild}/passwd
-                        sed -i "s/^ACCOUNT='${sk_mail_account}.*/$escaped2/g" /usr/local/vesta/data/users/${sk_cp_user}/mail/${sk_maild}.conf
-                    fi
+        do
+            echo "Create and restore mail account: $sk_mail_account@$sk_maild"
+            sk_mail_pass1=$(generate_password)        
+            /usr/local/vesta/bin/v-add-mail-account $sk_cp_user $sk_maild $sk_mail_account $sk_mail_pass1
+            mv ${sk_maild}/${sk_mail_account} /home/${sk_cp_user}/mail/${sk_maild}
+            chown ${sk_cp_user}:mail -R /home/${sk_cp_user}/mail/${sk_maild}
+            find /home/${sk_cp_user}/mail/${sk_maild} -type f -name 'dovecot*' -delete
+            if [ -f "${sk_importer_in}/homedir/etc/${sk_maild}/shadow" ]; then
+                echo "Set password for ${sk_mail_account}@${sk_maild}"
+                pass=$(grep "^${sk_mail_account}:" ${sk_importer_in}/homedir/etc/${sk_maild}/shadow | awk -F  ":" '{print $2}')
+                newline="${sk_mail_account}:{SHA512-CRYPT}$pass:${sk_cp_user}:mail::/home/${sk_cp_user}:0"
+                newline2="ACCOUNT='${sk_mail_account}' ALIAS='' AUTOREPLY='no' FWD='' FWD_ONLY='' MD5='{SHA512-CRYPT}$pass' QUOTA='unlimited' U_DISK='0' SUSPENDED='no' TIME='$time' DATE='$date'"
+                escaped=$(printf '%s\n' "$newline" | sed -e 's/[\/&]/\\&/g')
+                escaped2=$(printf '%s\n' "$newline2" | sed -e 's/[\/&]/\\&/g')
+                sed -i "s/^${sk_mail_account}:.*/$escaped/g" /home/${sk_cp_user}/conf/mail/${sk_maild}/passwd
+                sed -i "s/^ACCOUNT='${sk_mail_account}.*/$escaped2/g" /usr/local/vesta/data/users/${sk_cp_user}/mail/${sk_maild}.conf
+            else
+                echo "${sk_mail_account}@${sk_maild} | $sk_mail_pass1"    >> /root/sk_mail_password_${sk_cp_user}-${sk_cod}
+            fi
         done
     fi
 #else
@@ -368,7 +368,9 @@ tput setaf 4
 echo "##############################"
 echo "cPanel Backup restored"
 echo "Review your content and report any fail"
-# echo "I reset mail password not posible restore it yet."
-# echo "Check your new passwords runing: cat /root/sk_mail_password_${sk_cp_user}-${sk_cod}"
+if [ -f "/root/sk_mail_password_${sk_cp_user}-${sk_cod}" ]; then
+    echo "I reset mail password not posible restore it yet."
+    echo "Check your new passwords runing: cat /root/sk_mail_password_${sk_cp_user}-${sk_cod}"
+fi
 echo "##############################"
 tput sgr0

From 5d2f0d68e0a707f3a1db593a755bc3e86a0a5dad Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 29 Jul 2023 14:40:19 +0200
Subject: [PATCH 1988/2300] Removing sury repo from multi-php-install.sh for
 Debian 8 and 9

---
 src/deb/for-download/tools/multi-php-install.sh | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 88528e92..4d86050d 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -95,12 +95,8 @@ apt update
 if [ "$inst_repo" -eq 1 ]; then
     press_enter "=== Press enter to install sury.org repo ==============================================================================="
     apt -y install apt-transport-https ca-certificates
-    wget -nv -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
-    if [ $debian_version -eq 8 ]; then
-      sh -c 'echo "deb https://packages.sury.org/php/ jessie main" > /etc/apt/sources.list.d/php.list'
-    fi
-    if [ $debian_version -eq 9 ]; then
-      sh -c 'echo "deb https://packages.sury.org/php/ stretch main" > /etc/apt/sources.list.d/php.list'
+    if [ $debian_version -ge 10 ]; then
+      wget -nv -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
     fi
     if [ $debian_version -eq 10 ]; then
       sh -c 'echo "deb https://packages.sury.org/php/ buster main" > /etc/apt/sources.list.d/php.list'

From 843d4a94e2ae6df08654090f95fd19d3c3914ac3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 8 Aug 2023 15:41:25 +0200
Subject: [PATCH 1989/2300] Update install_rate_limit_tpl.sh

---
 .../for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index 8710008c..3cae3526 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -54,4 +54,4 @@ wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2-conn-4.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2-conn-4.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
 
-service nginx restart
+systemctl restart nginx

From e82378c9358ae98ec0b4c50722890b9fd9f7c33f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 9 Aug 2023 15:45:37 +0200
Subject: [PATCH 1990/2300] v-grep LF ending

---
 bin/v-grep | 42 +++++++++++++++++++++---------------------
 1 file changed, 21 insertions(+), 21 deletions(-)

diff --git a/bin/v-grep b/bin/v-grep
index 3e467129..045751a5 100644
--- a/bin/v-grep
+++ b/bin/v-grep
@@ -1,21 +1,21 @@
-#!/bin/bash
-# info: calling myvesta_grep PHP function
-# options: PARAMETERS
-#
-# The function is calling myVesta PHP replacement for GNU 'grep' command (but without regular expression)
-
-#----------------------------------------------------------#
-#                       Action                             #
-#----------------------------------------------------------#
-
-
-if [ -p /dev/stdin ]; then
-    STDIN=$(cat -)
-    if [ ! -z "$STDIN" ]; then
-        echo "$STDIN" | php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_grep' "$@"
-        exit $?
-    fi
-fi
-
-php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_grep' "$@"
-exit $?
+#!/bin/bash
+# info: calling myvesta_grep PHP function
+# options: PARAMETERS
+#
+# The function is calling myVesta PHP replacement for GNU 'grep' command (but without regular expression)
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+
+if [ -p /dev/stdin ]; then
+    STDIN=$(cat -)
+    if [ ! -z "$STDIN" ]; then
+        echo "$STDIN" | php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_grep' "$@"
+        exit $?
+    fi
+fi
+
+php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_grep' "$@"
+exit $?

From 4d7ce60f39e675982bfdaf443e88be9b7e206787 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 9 Aug 2023 20:11:40 +0200
Subject: [PATCH 1991/2300] deb12 fixes in postinst

---
 src/deb/vesta/postinst | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 09195d4c..9b074aaf 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -26,7 +26,7 @@ fi
 # chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
 # Patching exim4.conf for: smtputf8_advertise_hosts
-if [ "$release" -gt 10 ]; then
+if [ "$release" -ge 11 ]; then
     if [ -f "/etc/exim4/exim4.conf.template" ]; then
         if ! grep -q 'smtputf8_advertise_hosts' /etc/exim4/exim4.conf.template; then
             echo 'Patching exim4.conf for: smtputf8_advertise_hosts'
@@ -47,7 +47,7 @@ if [ -f "/etc/exim4/exim4.conf.template" ]; then
 fi
 
 # Making sure yescrypt is disabled
-if [ "$release" -eq 11 ]; then
+if [ "$release" -ge 11 ]; then
     sed -i "s/yescrypt/sha512/g" /etc/pam.d/common-password
 fi
 
@@ -66,13 +66,18 @@ if [ "$release" -eq 11 ]; then
 					ADD="  hosts_try_fastopen = \!\*.l.google.com"
 					sed -i "s#$FIND#$FIND\n$ADD#g" /etc/exim4/exim4.conf.template
 					systemctl restart exim4
-					
-					sed -i "s/net.ipv4.tcp_window_scaling/#net.ipv4.tcp_window_scaling/g" /etc/sysctl.conf
-					echo 1 > /proc/sys/net/ipv4/tcp_window_scaling
 		fi
 	fi
 fi
 
+if [ "$release" -ge 11 ]; then
+		check_grep=$(grep -c '^net\.ipv4\.tcp_window_scaling' /etc/sysctl.conf)
+		if [ "$check_grep" -gt 0 ]; then
+            echo "=== Removing net.ipv4.tcp_window_scaling"
+            sed -i "s/net\.ipv4\.tcp_window_scaling/#net.ipv4.tcp_window_scaling/g" /etc/sysctl.conf
+            echo 1 > /proc/sys/net/ipv4/tcp_window_scaling
+        fi
+fi
 
 # Adding Barracuda RBL to SpamAssassin
 if [ ! -f "/usr/local/vesta/data/upgrades/barracuda_rbl" ]; then

From cb52ef65b41ca1da71114cb6ba0e5249a0ae8166 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 9 Aug 2023 20:14:34 +0200
Subject: [PATCH 1992/2300] postinst removing tabs indent

---
 src/deb/vesta/postinst | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 9b074aaf..d1c92a8c 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -71,12 +71,12 @@ if [ "$release" -eq 11 ]; then
 fi
 
 if [ "$release" -ge 11 ]; then
-		check_grep=$(grep -c '^net\.ipv4\.tcp_window_scaling' /etc/sysctl.conf)
-		if [ "$check_grep" -gt 0 ]; then
-            echo "=== Removing net.ipv4.tcp_window_scaling"
-            sed -i "s/net\.ipv4\.tcp_window_scaling/#net.ipv4.tcp_window_scaling/g" /etc/sysctl.conf
-            echo 1 > /proc/sys/net/ipv4/tcp_window_scaling
-        fi
+    check_grep=$(grep -c '^net\.ipv4\.tcp_window_scaling' /etc/sysctl.conf)
+    if [ "$check_grep" -gt 0 ]; then
+        echo "=== Removing net.ipv4.tcp_window_scaling"
+        sed -i "s/net\.ipv4\.tcp_window_scaling/#net.ipv4.tcp_window_scaling/g" /etc/sysctl.conf
+        echo 1 > /proc/sys/net/ipv4/tcp_window_scaling
+    fi
 fi
 
 # Adding Barracuda RBL to SpamAssassin

From 0213d749eeebd6a46477afd9c554206741054763 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 11 Aug 2023 14:03:16 +0200
Subject: [PATCH 1993/2300] Update exim_forwarding.patch

---
 src/deb/for-download/tools/patches/exim_forwarding.patch | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/patches/exim_forwarding.patch b/src/deb/for-download/tools/patches/exim_forwarding.patch
index 1fa6d408..dcefe327 100644
--- a/src/deb/for-download/tools/patches/exim_forwarding.patch
+++ b/src/deb/for-download/tools/patches/exim_forwarding.patch
@@ -6,7 +6,7 @@
   
 +  warn    !authenticated = *
 +          hosts          = !+relay_from_hosts
-+          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
++          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
 +          set acl_m3    = yes
 +
    deny    message       = Restricted characters in address

From bb79f9f8c01b49c10c862f09e5e263927c78d323 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 18 Aug 2023 20:50:20 +0200
Subject: [PATCH 1994/2300] deb12 nginx http2 on;

---
 install/debian/12/nginx/nginx.conf                             | 2 +-
 install/debian/12/templates/web/nginx/force-https-legacy.stpl  | 3 ++-
 install/debian/12/templates/web/nginx/force-https-public.stpl  | 3 ++-
 .../12/templates/web/nginx/force-https-webmail-phpmyadmin.stpl | 3 ++-
 install/debian/12/templates/web/nginx/force-https.stpl         | 3 ++-
 install/debian/12/templates/web/nginx/hosting-legacy.stpl      | 3 ++-
 install/debian/12/templates/web/nginx/hosting-public.stpl      | 3 ++-
 .../12/templates/web/nginx/hosting-webmail-phpmyadmin.stpl     | 3 ++-
 install/debian/12/templates/web/nginx/hosting.stpl             | 3 ++-
 install/debian/12/templates/web/nginx/private-force-https.stpl | 3 ++-
 install/debian/12/templates/web/nginx/private-hosting.stpl     | 3 ++-
 11 files changed, 21 insertions(+), 11 deletions(-)

diff --git a/install/debian/12/nginx/nginx.conf b/install/debian/12/nginx/nginx.conf
index 6d5e36ba..6efe2337 100644
--- a/install/debian/12/nginx/nginx.conf
+++ b/install/debian/12/nginx/nginx.conf
@@ -100,7 +100,7 @@ http {
 
     # SSL PCI Compliance
     ssl_session_cache   shared:SSL:10m;
-    ssl_protocols       TLSv1.1 TLSv1.2;
+    ssl_protocols       TLSv1.1 TLSv1.2 TLSv1.3;
     ssl_prefer_server_ciphers on;
     ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
 
diff --git a/install/debian/12/templates/web/nginx/force-https-legacy.stpl b/install/debian/12/templates/web/nginx/force-https-legacy.stpl
index 79e55a26..bea7d86c 100644
--- a/install/debian/12/templates/web/nginx/force-https-legacy.stpl
+++ b/install/debian/12/templates/web/nginx/force-https-legacy.stpl
@@ -1,5 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssll
+    http2 on;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/12/templates/web/nginx/force-https-public.stpl b/install/debian/12/templates/web/nginx/force-https-public.stpl
index ac422df6..a7609b13 100644
--- a/install/debian/12/templates/web/nginx/force-https-public.stpl
+++ b/install/debian/12/templates/web/nginx/force-https-public.stpl
@@ -1,5 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/12/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/12/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
index 7e0e71d1..2db9a06e 100644
--- a/install/debian/12/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
+++ b/install/debian/12/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -1,5 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/12/templates/web/nginx/force-https.stpl b/install/debian/12/templates/web/nginx/force-https.stpl
index 33fab443..55f41002 100644
--- a/install/debian/12/templates/web/nginx/force-https.stpl
+++ b/install/debian/12/templates/web/nginx/force-https.stpl
@@ -1,5 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/12/templates/web/nginx/hosting-legacy.stpl b/install/debian/12/templates/web/nginx/hosting-legacy.stpl
index a34b4bf1..efdd3b87 100644
--- a/install/debian/12/templates/web/nginx/hosting-legacy.stpl
+++ b/install/debian/12/templates/web/nginx/hosting-legacy.stpl
@@ -1,5 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
     server_name %domain_idn% %alias_idn%;
     
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/12/templates/web/nginx/hosting-public.stpl b/install/debian/12/templates/web/nginx/hosting-public.stpl
index ac422df6..a7609b13 100644
--- a/install/debian/12/templates/web/nginx/hosting-public.stpl
+++ b/install/debian/12/templates/web/nginx/hosting-public.stpl
@@ -1,5 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/12/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/12/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
index 7e0e71d1..2db9a06e 100644
--- a/install/debian/12/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
+++ b/install/debian/12/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
@@ -1,5 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/12/templates/web/nginx/hosting.stpl b/install/debian/12/templates/web/nginx/hosting.stpl
index 755caadf..5745311e 100644
--- a/install/debian/12/templates/web/nginx/hosting.stpl
+++ b/install/debian/12/templates/web/nginx/hosting.stpl
@@ -1,5 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/12/templates/web/nginx/private-force-https.stpl b/install/debian/12/templates/web/nginx/private-force-https.stpl
index 64094fb8..bf805683 100644
--- a/install/debian/12/templates/web/nginx/private-force-https.stpl
+++ b/install/debian/12/templates/web/nginx/private-force-https.stpl
@@ -1,5 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;
diff --git a/install/debian/12/templates/web/nginx/private-hosting.stpl b/install/debian/12/templates/web/nginx/private-hosting.stpl
index fd9471bd..8e5b3f7b 100644
--- a/install/debian/12/templates/web/nginx/private-hosting.stpl
+++ b/install/debian/12/templates/web/nginx/private-hosting.stpl
@@ -1,5 +1,6 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
     server_name %domain_idn% %alias_idn%;
 
     ssl_certificate      %ssl_pem%;

From 658680095bae44d5495219282f4e752ef5403ee0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 18 Aug 2023 20:52:13 +0200
Subject: [PATCH 1995/2300] http2 typo

---
 install/debian/12/templates/web/nginx/force-https-legacy.stpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/debian/12/templates/web/nginx/force-https-legacy.stpl b/install/debian/12/templates/web/nginx/force-https-legacy.stpl
index bea7d86c..8e636db3 100644
--- a/install/debian/12/templates/web/nginx/force-https-legacy.stpl
+++ b/install/debian/12/templates/web/nginx/force-https-legacy.stpl
@@ -1,5 +1,5 @@
 server {
-    listen      %ip%:%proxy_ssl_port% ssll
+    listen      %ip%:%proxy_ssl_port% ssl;
     http2 on;
     server_name %domain_idn% %alias_idn%;
 

From c32036e53181d11e9b693ead4651d2973413d572 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 23 Aug 2023 11:23:57 +0200
Subject: [PATCH 1996/2300] Handling tailf watcher processes in v-clean-garbage

---
 bin/v-clean-garbage | 19 +++++++++++++++++++
 bin/v-commander     | 19 -------------------
 2 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 72e8560e..6dc006ae 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -21,6 +21,14 @@ source /usr/local/vesta/func/main.sh
 #                       Action                             #
 #----------------------------------------------------------#
 
+# turn off tailf watcher process
+if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then
+    kill $(ps aux | grep 'tailf_apache_error' | grep -v "grep tailf_apache_error" | awk '{print $2}')
+fi
+if [ -f "/usr/local/bin/tailf_exim.php" ]; then
+    kill $(ps aux | grep 'tailf_exim' | grep -v "grep tailf_exim" | awk '{print $2}')
+fi
+
 rm /var/backups/* > /dev/null 2>&1
 rm /var/cache/apt/archives/* > /dev/null 2>&1
 cd /var/log
@@ -41,6 +49,9 @@ find /var/log/ -name "*.gz" -type f -delete
 find /usr/local/vesta/log/ -type f -name "*.log" -exec truncate -s 0 {} \;
 find /usr/local/vesta/log/ -type f -not -name "*.log" -delete
 find /var/log/exim4/ -type f -exec truncate -s 0 {} \;
+truncate -s 0 /*.log
+rm /panic-*.log
+rm /var/log/panic-*.log
 
 clean_home() {
     nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -delete
@@ -74,6 +85,14 @@ if [ $fail2ban_running -eq 1 ]; then
     systemctl start fail2ban
 fi
 
+# turn on tailf watcher process
+if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then
+    nohup php /usr/local/bin/tailf_apache_error.php > /var/log/tailf_apache_error.log &
+fi
+if [ -f "/usr/local/bin/tailf_exim.php" ]; then
+    nohup php /usr/local/bin/tailf_exim.php > /var/log/tailf_exim.log &
+fi
+
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#
diff --git a/bin/v-commander b/bin/v-commander
index 06a5f737..e0850737 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -354,32 +354,13 @@ do
         echo "============================="
         echo "== cleaning trash"
         df -m
-        ps -Af | grep tailf | grep -v "grep tailf"
-        if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then
-            kill $(ps aux | grep 'tailf_apache_error' | grep -v "grep tailf_apache_error" | awk '{print $2}')
-        fi
-        if [ -f "/usr/local/bin/tailf_exim.php" ]; then
-            kill $(ps aux | grep 'tailf_exim' | grep -v "grep tailf_exim" | awk '{print $2}')
-        fi
         echo "------"
         ps -Af | grep tailf | grep -v "grep tailf"
         echo "------"
-        sleep 2
-        truncate -s 0 /*.log
-        rm /panic-*.log
-        rm /var/log/panic-*.log
         /usr/local/vesta/bin/v-clean-garbage
-        sleep 2
-        if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then
-            nohup php /usr/local/bin/tailf_apache_error.php > /var/log/tailf_apache_error.log &
-        fi
-        if [ -f "/usr/local/bin/tailf_exim.php" ]; then
-            nohup php /usr/local/bin/tailf_exim.php > /var/log/tailf_exim.log &
-        fi
         echo "--------------"
         df -m
         echo "--------------"
-        sleep 2
         ps -Af | grep tailf | grep -v "grep tailf"
     fi
 

From b80a9756213305c30f5cfc86fb71cfee65aa076d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 23 Aug 2023 11:37:04 +0200
Subject: [PATCH 1997/2300] Muting some unnecessary cleaning errors

---
 bin/v-clean-garbage | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 6dc006ae..a53cace8 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -49,9 +49,9 @@ find /var/log/ -name "*.gz" -type f -delete
 find /usr/local/vesta/log/ -type f -name "*.log" -exec truncate -s 0 {} \;
 find /usr/local/vesta/log/ -type f -not -name "*.log" -delete
 find /var/log/exim4/ -type f -exec truncate -s 0 {} \;
-truncate -s 0 /*.log
-rm /panic-*.log
-rm /var/log/panic-*.log
+truncate -s 0 /*.log > /dev/null 2>&1
+rm /panic-*.log > /dev/null 2>&1
+rm /var/log/panic-*.log > /dev/null 2>&1
 
 clean_home() {
     nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -delete

From 34c0588b76c31bdee93c679bbb1407dafd186c3c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 23 Aug 2023 14:05:26 +0200
Subject: [PATCH 1998/2300] ignoring nohup messages

---
 bin/v-clean-garbage | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index a53cace8..323ee80d 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -87,10 +87,10 @@ fi
 
 # turn on tailf watcher process
 if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then
-    nohup php /usr/local/bin/tailf_apache_error.php > /var/log/tailf_apache_error.log &
+    nohup php /usr/local/bin/tailf_apache_error.php > /var/log/tailf_apache_error.log 2>&1 &
 fi
 if [ -f "/usr/local/bin/tailf_exim.php" ]; then
-    nohup php /usr/local/bin/tailf_exim.php > /var/log/tailf_exim.log &
+    nohup php /usr/local/bin/tailf_exim.php > /var/log/tailf_exim.log 2>&1 &
 fi
 
 #----------------------------------------------------------#

From 8d467b98abcd44ec7561c86af8149a9d987b150b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 23 Aug 2023 14:39:44 +0200
Subject: [PATCH 1999/2300] Muting some unnecessary cleaning errors

---
 bin/v-clean-garbage | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 323ee80d..e588904c 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -54,7 +54,7 @@ rm /panic-*.log > /dev/null 2>&1
 rm /var/log/panic-*.log > /dev/null 2>&1
 
 clean_home() {
-    nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -delete
+    nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -delete > /dev/null 2>&1
     find $1/ -name '.wp-cli' -type d -exec rm -rf {} \; > /dev/null 2>&1
     find $1/*/web/*/public_html/wp-content/aiowps_backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/wp-content/envato-backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1

From 022f3078f51df8000f99312beffb1c091366183b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 6 Sep 2023 14:45:40 +0200
Subject: [PATCH 2000/2300] Fixing 'dh key too small' in dovecot

---
 src/deb/vesta/postinst | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index d1c92a8c..3f237f10 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -25,6 +25,17 @@ fi
 # echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 # chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# Fixing 'dh key too small' in dovecot
+if [ -f "/var/log/dovecot.log" ] && [ -f "/etc/dovecot/conf.d/10-ssl.conf" ] && [ -f "/usr/share/dovecot/dh.pem" ]; then
+    if grep -q 'dh key too small' /var/log/dovecot.log; then
+        if ! grep -q 'dh.pem' /etc/dovecot/conf.d/10-ssl.conf; then
+            echo "== Fixing 'dh key too small' in dovecot"
+            echo "ssl_dh=</usr/share/dovecot/dh.pem" >> /etc/dovecot/conf.d/10-ssl.conf
+            systemctl restart dovecot
+        fi
+    fi
+fi
+
 # Patching exim4.conf for: smtputf8_advertise_hosts
 if [ "$release" -ge 11 ]; then
     if [ -f "/etc/exim4/exim4.conf.template" ]; then

From 06527b4d49be97366926173bfd90a4b566a773a7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 Sep 2023 01:12:08 +0200
Subject: [PATCH 2001/2300] Update postinst

---
 src/deb/vesta/postinst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 3f237f10..e53fee72 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -26,8 +26,8 @@ fi
 # chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
 # Fixing 'dh key too small' in dovecot
-if [ -f "/var/log/dovecot.log" ] && [ -f "/etc/dovecot/conf.d/10-ssl.conf" ] && [ -f "/usr/share/dovecot/dh.pem" ]; then
-    if grep -q 'dh key too small' /var/log/dovecot.log; then
+if [ -f "/var/log/dovecot.log.1" ] && [ -f "/etc/dovecot/conf.d/10-ssl.conf" ] && [ -f "/usr/share/dovecot/dh.pem" ]; then
+    if grep -q 'dh key too small' /var/log/dovecot.log.1; then
         if ! grep -q 'dh.pem' /etc/dovecot/conf.d/10-ssl.conf; then
             echo "== Fixing 'dh key too small' in dovecot"
             echo "ssl_dh=</usr/share/dovecot/dh.pem" >> /etc/dovecot/conf.d/10-ssl.conf

From c43b3b09766e2d09033e9a4ab7faf34f3893de60 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 16 Sep 2023 01:11:30 +0200
Subject: [PATCH 2002/2300] Check if source user is suspended

---
 bin/v-move-domain-and-database-to-account | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-move-domain-and-database-to-account b/bin/v-move-domain-and-database-to-account
index d055e361..7524d229 100644
--- a/bin/v-move-domain-and-database-to-account
+++ b/bin/v-move-domain-and-database-to-account
@@ -40,6 +40,10 @@ if [ "$owner" = "$user" ]; then
     exit
 fi
 
+USER_DATA=$VESTA/data/users/$owner
+is_object_unsuspended 'user' 'USER' "$owner"
+USER_DATA=$VESTA/data/users/$user
+
 USER_TO=$user
 
 #----------------------------------------------------------#

From 39a4dffbcece94e04f626b6ac6f1274aadb7876e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 16 Sep 2023 01:20:19 +0200
Subject: [PATCH 2003/2300] Check if source user is suspended

---
 bin/v-change-domain-owner | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-change-domain-owner b/bin/v-change-domain-owner
index 8f267307..c3f8bcfa 100755
--- a/bin/v-change-domain-owner
+++ b/bin/v-change-domain-owner
@@ -35,6 +35,9 @@ if [ "$owner" = "$user" ]; then
     exit
 fi
 
+USER_DATA=$VESTA/data/users/$owner
+is_object_unsuspended 'user' 'USER' "$owner"
+USER_DATA=$VESTA/data/users/$user
 
 #----------------------------------------------------------#
 #                       Action                             #

From 1709e9ae3d2ffa3c8ae8f748fba6b53833250c58 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 24 Sep 2023 16:58:29 +0200
Subject: [PATCH 2004/2300] Disabling SpamAssassin on Deb12

---
 bin/v-commander | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/bin/v-commander b/bin/v-commander
index e0850737..073c6d72 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -241,8 +241,13 @@ do
     if [ "$answer" = 'dis spam' ] || [ "$answer" = 'DIS SPAM' ]; then
         echo "============================="
         echo "== disabling SpamAssassin"
-        systemctl stop spamassassin.service
-        systemctl disable spamassassin.service
+        if [ "$release" -lt 12 ]; then
+            systemctl stop spamassassin.service
+            systemctl disable spamassassin.service
+        else
+            systemctl stop spamd.service
+            systemctl disable spamd.service
+        fi
 
         sed -i "s/^SPAMASSASSIN =/#SPAMASSASSIN =/g" /etc/exim4/exim4.conf.template
         sed -i "s/^SPAM_SCORE =/#SPAM_SCORE =/g" /etc/exim4/exim4.conf.template

From 98d8ab7f29b3e00208ecb50f203b45859fbd8019 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 27 Sep 2023 09:32:23 +0200
Subject: [PATCH 2005/2300] v-list-sys-services: detection for official mariadb
 repo installation

---
 bin/v-list-sys-services | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-list-sys-services b/bin/v-list-sys-services
index 3d876101..d23a92a7 100755
--- a/bin/v-list-sys-services
+++ b/bin/v-list-sys-services
@@ -301,6 +301,10 @@ if [ ! -z "$DB_SYSTEM" ] && [ "$DB_SYSTEM" != 'remote' ]; then
                 service='mariadb'
                 proc_name='mariadbd'
             fi
+            if [ -f "/etc/apt/sources.list.d/mariadb.list" ]; then
+                service='mariadb'
+                proc_name='mariadbd'
+            fi
             if [ -d "/etc/sysconfig" ]; then
                 service='mysqld'
                 proc_name='mysqld'

From c8fcc089a7e861931eda36e7b5f29b755b57e07d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 30 Sep 2023 15:20:47 +0200
Subject: [PATCH 2006/2300] Clean /home/*/tmp/ in v-clean-garbage

---
 bin/v-clean-garbage | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index e588904c..55dc98c3 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -63,6 +63,7 @@ clean_home() {
     find $1/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/wp-content/plugins/ezpz-one-click-backup/backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/ -type f -name "*.wpress" -delete > /dev/null 2>&1
+    nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -mtime +5 -exec rm {} \;
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;
     nice -n 19 ionice -c 3 find $1/ -type f -name "*.log" -exec truncate -s 0 {} \;

From 8a323f6447eda009cd2eaabee120a9ea3add653e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 30 Sep 2023 15:23:27 +0200
Subject: [PATCH 2007/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 55dc98c3..d987a6c2 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -63,7 +63,7 @@ clean_home() {
     find $1/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/wp-content/plugins/ezpz-one-click-backup/backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/ -type f -name "*.wpress" -delete > /dev/null 2>&1
-    nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -mtime +5 -exec rm {} \;
+    nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -mtime +5 -delete > /dev/null 2>&1
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;
     nice -n 19 ionice -c 3 find $1/ -type f -name "*.log" -exec truncate -s 0 {} \;

From 33e6263e3d2f0d8198400d971bd7e8459ef51c7a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 1 Oct 2023 00:32:27 +0200
Subject: [PATCH 2008/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index d987a6c2..c46a2b55 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -63,7 +63,7 @@ clean_home() {
     find $1/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/wp-content/plugins/ezpz-one-click-backup/backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/ -type f -name "*.wpress" -delete > /dev/null 2>&1
-    nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -mtime +5 -delete > /dev/null 2>&1
+    nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -mtime +1 -delete > /dev/null 2>&1
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log.txt" -exec truncate -s 0 {} \;
     nice -n 19 ionice -c 3 find $1/ -type f -name "*.log" -exec truncate -s 0 {} \;

From 3d503f4e1410271c276517c8ebb3fb0623d95dd9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 1 Oct 2023 14:19:41 +0200
Subject: [PATCH 2009/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index c46a2b55..80d7f165 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -29,6 +29,7 @@ if [ -f "/usr/local/bin/tailf_exim.php" ]; then
     kill $(ps aux | grep 'tailf_exim' | grep -v "grep tailf_exim" | awk '{print $2}')
 fi
 
+find /tmp/ -type f -mtime +7 -delete
 rm /var/backups/* > /dev/null 2>&1
 rm /var/cache/apt/archives/* > /dev/null 2>&1
 cd /var/log
@@ -45,6 +46,8 @@ find /var/log/ -type f -name "*.4" -delete
 find /var/log/ -type f -name "*.5" -delete
 find /var/log/ -type f -name "*.6" -delete
 find /var/log/ -type f -name "*.7" -delete
+find /var/log/ -type f -name "*.8" -delete
+find /var/log/ -type f -name "*.9" -delete
 find /var/log/ -name "*.gz" -type f -delete
 find /usr/local/vesta/log/ -type f -name "*.log" -exec truncate -s 0 {} \;
 find /usr/local/vesta/log/ -type f -not -name "*.log" -delete

From 85bbc56cbdae66b44a8d65b9607b54d90b6f342d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 1 Oct 2023 14:55:49 +0200
Subject: [PATCH 2010/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index a25fc6dd..49d31f45 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -148,6 +148,8 @@ if [ "$check_grep" -eq 0 ]; then
     sed -i "s|#smtp_banner|smtp_banner|g" /etc/exim4/exim4.conf.template
     sed -i "s|#interface =|interface =|g" /etc/exim4/exim4.conf.template
     sed -i "s|#helo_data =|helo_data =|g" /etc/exim4/exim4.conf.template
+    /usr/local/vesta/bin/v-sed 'tls_certificate = /usr/local/vesta/ssl/certificate.crt' 'tls_certificate = /usr/local/vesta/ssl/$received_ip_address.crt' '/etc/exim4/exim4.conf.template'
+    /usr/local/vesta/bin/v-sed 'tls_privatekey = /usr/local/vesta/ssl/certificate.key' 'tls_privatekey = /usr/local/vesta/ssl/$received_ip_address.key' '/etc/exim4/exim4.conf.template'
     touch /etc/exim4/limit_per_email_account_max_sent_emails_per_hour
     touch /etc/exim4/limit_per_email_account_max_recipients
     touch /etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour

From e1fe2ba0944829a08d42702f2f7dbc07f8a91fde Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 1 Oct 2023 15:07:43 +0200
Subject: [PATCH 2011/2300] Patching exim4.conf for: Helo name contains a ip
 address

---
 install/debian/12/exim/exim4.conf.template | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/install/debian/12/exim/exim4.conf.template b/install/debian/12/exim/exim4.conf.template
index e6abbe8e..9c670fed 100644
--- a/install/debian/12/exim/exim4.conf.template
+++ b/install/debian/12/exim/exim4.conf.template
@@ -109,16 +109,19 @@ acl_check_mail:
   deny    condition     = ${if eq{$sender_helo_name}{}}
           message       = HELO required before MAIL
 
-  drop    message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+  drop    !authenticated = *
+          message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
           condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
           condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
           condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
           delay         = 45s
 
-  drop    condition     = ${if isip{$sender_helo_name}}
+  drop    !authenticated = *
+          condition     = ${if isip{$sender_helo_name}}
           message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
 
-  drop    condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+  drop    !authenticated = *
+          condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
           message       = $interface_address is _my_ address
 
   accept

From 64fa7d9e5865398e8c4c97a2cf115635d532576c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 1 Oct 2023 15:12:40 +0200
Subject: [PATCH 2012/2300] Update exim4.conf.template

---
 install/debian/12/exim/exim4.conf.template | 1 -
 1 file changed, 1 deletion(-)

diff --git a/install/debian/12/exim/exim4.conf.template b/install/debian/12/exim/exim4.conf.template
index 9c670fed..27fca98a 100644
--- a/install/debian/12/exim/exim4.conf.template
+++ b/install/debian/12/exim/exim4.conf.template
@@ -112,7 +112,6 @@ acl_check_mail:
   drop    !authenticated = *
           message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
           condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
-          condition     = ${if match{${lc:$sender_host_name}}{.telenor.rs}{false}{true}}
           condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
           delay         = 45s
 

From b5d57baa294a4382bcec456dbc58ae78ed6df16f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 3 Oct 2023 10:47:40 +0200
Subject: [PATCH 2013/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index e7c9a0a9..47e8ede0 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -286,7 +286,7 @@ set_default_value 'postgresql' 'no'
 set_default_value 'mongodb' 'no'
 set_default_value 'exim' 'yes'
 set_default_value 'dovecot' 'yes'
-if [ $memory -lt 1500000 ]; then
+if [ $memory -lt 2500000 ]; then
     set_default_value 'clamd' 'no'
     set_default_value 'spamd' 'no'
 else

From 1099b0c2672eb124c2c47698271d9a8c178a9fef Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 4 Oct 2023 11:34:09 +0200
Subject: [PATCH 2014/2300] Update install_rate_limit_tpl.sh

---
 .../tools/rate-limit-tpl/install_rate_limit_tpl.sh        | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index 3cae3526..1d128f7a 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -12,7 +12,7 @@
 
 grepc=$(grep -c 'limit_conn_zone' /etc/nginx/nginx.conf)
 if [ "$grepc" -eq 0 ]; then
-    sed -i 's|server_names_hash_bucket_size   512;|server_names_hash_bucket_size   512;\n    limit_conn_zone $binary_remote_addr zone=addr:1m;\n    limit_req_zone $binary_remote_addr zone=one:1m rate=1r/s;\n    limit_req_zone $binary_remote_addr zone=two:1m rate=2r/s;\n    limit_conn_log_level error;\n    limit_req_log_level error;\n    limit_conn_status 429;\n    limit_req_status 429;|g' /etc/nginx/nginx.conf
+    sed -i 's|server_names_hash_bucket_size   512;|server_names_hash_bucket_size   512;\n    limit_conn_zone $binary_remote_addr zone=addr:1m;\n    limit_conn_zone $server_name zone=zone_site:1m;\n    limit_req_zone $binary_remote_addr zone=one:1m rate=1r/s;\n    limit_req_zone $binary_remote_addr zone=two:1m rate=2r/s;\n    limit_conn_log_level error;\n    limit_req_log_level error;\n    limit_conn_status 429;\n    limit_req_status 429;|g' /etc/nginx/nginx.conf
     echo "=== Added rate_limit to nginx.conf"
 fi
 
@@ -22,6 +22,12 @@ if [ "$grepc" -eq 1 ]; then
     echo "=== Decrease addr zone to 1mb to nginx.conf"
 fi
 
+grepc=$(grep -c 'zone=zone_site:1m' /etc/nginx/nginx.conf)
+if [ "$grepc" -eq 0 ]; then
+    sed -i 's| zone=addr:1m;| zone=addr:1m;\n    limit_conn_zone $server_name zone=zone_site:1m;|g' /etc/nginx/nginx.conf
+    echo "=== Added rate_limit 'zone_site' to nginx.conf"
+fi
+
 grepc=$(grep -c 'zone=one:10m' /etc/nginx/nginx.conf)
 if [ "$grepc" -eq 1 ]; then
     sed -i 's|zone=one:10m|zone=one:1m|g' /etc/nginx/nginx.conf

From 5fb32ef55f265a43cf7a8b8a8e5ea93b609ca76a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 4 Oct 2023 14:56:19 +0200
Subject: [PATCH 2015/2300] Delete pool.d conf file for all PHP versions

---
 bin/v-delete-web-domain | 48 ++++++++++++++++-------------------------
 1 file changed, 18 insertions(+), 30 deletions(-)

diff --git a/bin/v-delete-web-domain b/bin/v-delete-web-domain
index 75399766..43362e34 100755
--- a/bin/v-delete-web-domain
+++ b/bin/v-delete-web-domain
@@ -62,36 +62,24 @@ if [ -f "$fpmconf" ]; then
     rm $fpmconf
     echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
 fi
-fpmconf="/etc/php/5.6/fpm/pool.d/$domain.conf"
-if [ -f "$fpmconf" ]; then
-    rm $fpmconf
-    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
-fi
-fpmconf="/etc/php/7.0/fpm/pool.d/$domain.conf"
-if [ -f "$fpmconf" ]; then
-    rm $fpmconf
-    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
-fi
-fpmconf="/etc/php/7.1/fpm/pool.d/$domain.conf"
-if [ -f "$fpmconf" ]; then
-    rm $fpmconf
-    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
-fi
-fpmconf="/etc/php/7.2/fpm/pool.d/$domain.conf"
-if [ -f "$fpmconf" ]; then
-    rm $fpmconf
-    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
-fi
-fpmconf="/etc/php/7.3/fpm/pool.d/$domain.conf"
-if [ -f "$fpmconf" ]; then
-    rm $fpmconf
-    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
-fi
-fpmconf="/etc/php/7.4/fpm/pool.d/$domain.conf"
-if [ -f "$fpmconf" ]; then
-    rm $fpmconf
-    echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
-fi
+
+for PHPV in /etc/php/*; do
+    if [ -d "${PHPV}" ]; then
+        # PHPVER=$(basename ${PHPV})
+        POOLD="${PHPV}/fpm/pool.d"
+        fpmconf="$POOLD/$domain.conf"
+        if [ -f "$fpmconf" ]; then
+            rm $fpmconf
+            echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
+        fi
+        POOLD="${PHPV}/fpm/pool.d-ioncube"
+        fpmconf="$POOLD/$domain.conf"
+        if [ -f "$fpmconf" ]; then
+            rm $fpmconf
+            echo "Deleted: $fpmconf" >> /usr/local/vesta/log/system.log
+        fi
+    fi
+done
 
 # Deleting domain from web.conf
 sed -i "/DOMAIN='$domain'/ d" $USER_DATA/web.conf

From baa93199e86851718feb5ec3fdf7418aa4c460f3 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Fri, 6 Oct 2023 11:35:11 +0200
Subject: [PATCH 2016/2300] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 71d9f5a9..a2e7a3de 100644
--- a/README.md
+++ b/README.md
@@ -23,7 +23,7 @@
 
 <h1>Features of myVesta</h1>
 <ul>
-    <li>Support for Debian 10 and 11 (Debian 11 is recommended, but previous Debian releases are also supported)</li>
+    <li>Support for Debian 11 and 12 (Debian 12 is recommended, but previous Debian releases are also supported)</li>
     <li>Support for MySQL 8</li>
     <li><a href="https://forum.myvestacp.com/viewtopic.php?f=20&t=51">nginx templates</a> that can prevent denial-of-service on your server</li>
     <li><a href="https://forum.myvestacp.com/viewtopic.php?f=18&t=52">Support for multi-PHP versions</a></li>

From fd57420a70080ed861e9ba299445e4b7fd89252e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 8 Oct 2023 13:28:52 +0200
Subject: [PATCH 2017/2300] Delete current SSL before v-install-unsigned-ssl

---
 bin/v-install-unsigned-ssl | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-install-unsigned-ssl b/bin/v-install-unsigned-ssl
index 3395e4f2..8df023c9 100644
--- a/bin/v-install-unsigned-ssl
+++ b/bin/v-install-unsigned-ssl
@@ -52,6 +52,8 @@ fi
 #                       Action                             #
 #----------------------------------------------------------#
 
+/usr/local/vesta/bin/v-delete-web-domain-ssl "$user" "$domain"
+
 release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
 
 email="info@$domain"

From 9c233e92a6a2fd1cb21d4b8fc649c071f420b2b7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 8 Oct 2023 15:21:43 +0200
Subject: [PATCH 2018/2300] v-restart-web: systemctl instead of service

---
 bin/v-restart-web | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/bin/v-restart-web b/bin/v-restart-web
index ab1afe6c..db0146d9 100755
--- a/bin/v-restart-web
+++ b/bin/v-restart-web
@@ -64,7 +64,9 @@ fi
 
 # Resart web system if reload didn't work
 if [ "$rc" -ne 0 ]; then
-    service $WEB_SYSTEM restart >/dev/null 2>&1
+    # service $WEB_SYSTEM restart >/dev/null 2>&1
+    systemctl reset-failed
+    systemctl restart $WEB_SYSTEM >/dev/null 2>&1
     if [ $? -ne 0 ]; then
         send_email_report
         check_result $E_RESTART "$WEB_SYSTEM restart failed"

From af7b658bfbefd20f7205dcdffddd412b062fbf9e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 8 Oct 2023 15:33:46 +0200
Subject: [PATCH 2019/2300]  v-restart-web: systemctl instead of service

---
 bin/v-restart-web | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-restart-web b/bin/v-restart-web
index db0146d9..2b17ad9f 100755
--- a/bin/v-restart-web
+++ b/bin/v-restart-web
@@ -65,7 +65,7 @@ fi
 # Resart web system if reload didn't work
 if [ "$rc" -ne 0 ]; then
     # service $WEB_SYSTEM restart >/dev/null 2>&1
-    systemctl reset-failed
+    systemctl reset-failed $WEB_SYSTEM
     systemctl restart $WEB_SYSTEM >/dev/null 2>&1
     if [ $? -ne 0 ]; then
         send_email_report

From 1848c36784fa29fe226ccf59160704e591f17402 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 8 Oct 2023 15:45:34 +0200
Subject: [PATCH 2020/2300] Update v-suspend-web-domain, allowing restart=no

---
 bin/v-suspend-web-domain | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/bin/v-suspend-web-domain b/bin/v-suspend-web-domain
index 7bd658ce..d36f5a65 100755
--- a/bin/v-suspend-web-domain
+++ b/bin/v-suspend-web-domain
@@ -80,12 +80,14 @@ fi
 update_object_value 'web' 'DOMAIN' "$domain" '$SUSPENDED' 'yes'
 increase_user_value "$user" '$SUSPENDED_WEB'
 
-# Restarting web server
-$BIN/v-restart-web $restart
-check_result $? "Web restart failed" >/dev/null
-
-$BIN/v-restart-proxy $restart
-check_result $? "Proxy restart failed" >/dev/null
+if [ "$restart" = "yes" ]; then
+    # Restarting web server
+    $BIN/v-restart-web $restart
+    check_result $? "Web restart failed" >/dev/null
+    
+    $BIN/v-restart-proxy $restart
+    check_result $? "Proxy restart failed" >/dev/null
+fi
 
 # Logging
 log_event "$OK" "$ARGUMENTS"

From a4acb57e54edae1c094104971be1da0342f1268a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 8 Oct 2023 16:28:08 +0200
Subject: [PATCH 2021/2300] Fixing removing certificates during apache reload

v-suspend-web-domain on line 49 is triggering apache/nginx reload... that is doing it in the background... and on line 64, we were previously doing 'mv' for certificates...
If the reload lasts too long it in the background, certificates will vanish because of 'mv' on line 64.
This fix will avoid this collision by doing 'cp' instead of 'mv', then sleeping for 10 sec, and then removing certificates.
We will call this bug "Nemanja Puhalo's bug" because he hit this bug first.
---
 bin/v-change-domain-owner | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

diff --git a/bin/v-change-domain-owner b/bin/v-change-domain-owner
index c3f8bcfa..09ae9bcc 100755
--- a/bin/v-change-domain-owner
+++ b/bin/v-change-domain-owner
@@ -60,11 +60,11 @@ if [ ! -z "$web_data" ]; then
         ssl_key=$VESTA/data/users/$owner/ssl/$domain.key
         ssl_ca=$VESTA/data/users/$owner/ssl/$domain.ca
         ssl_pem=$VESTA/data/users/$owner/ssl/$domain.pem
-        mv $ssl_crt $VESTA/data/users/$user/ssl/
-        mv $ssl_key $VESTA/data/users/$user/ssl/
-        mv $ssl_ca $VESTA/data/users/$user/ssl/ >> /dev/null 2>&1
-        mv $ssl_pem $VESTA/data/users/$user/ssl/ >> /dev/null 2>&1
-        rm -f $HOMEDIR/$owner/conf/web/ssl.$domain.*
+        cp $ssl_crt $VESTA/data/users/$user/ssl/
+        cp $ssl_key $VESTA/data/users/$user/ssl/
+        cp $ssl_ca $VESTA/data/users/$user/ssl/ > /dev/null 2>&1
+        cp $ssl_pem $VESTA/data/users/$user/ssl/ > /dev/null 2>&1
+        # rm -f $HOMEDIR/$owner/conf/web/ssl.$domain.*
     fi
 
     # Check ftp user account
@@ -86,6 +86,15 @@ if [ ! -z "$web_data" ]; then
     find $HOMEDIR/$user/web/$domain -user $owner \
         -exec chown -h $user:$user {} \;
 
+    if [ "$SSL" = 'yes' ]; then
+        sleep 10
+        rm $ssl_crt
+        rm $ssl_key
+        rm $ssl_ca > /dev/null 2>&1
+        rm $ssl_pem > /dev/null 2>&1
+        rm -f $HOMEDIR/$owner/conf/web/ssl.$domain.*
+    fi
+
     # Rebuild config
     $BIN/v-unsuspend-web-domain $user $domain no >> /dev/null 2>&1
     $BIN/v-rebuild-web-domains $owner no

From 8748ffc85b7d9a842b0dfb0490ead973bfa72887 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 8 Oct 2023 16:45:13 +0200
Subject: [PATCH 2022/2300] Update v-suspend-web-domain

---
 bin/v-suspend-web-domain | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bin/v-suspend-web-domain b/bin/v-suspend-web-domain
index d36f5a65..c9120122 100755
--- a/bin/v-suspend-web-domain
+++ b/bin/v-suspend-web-domain
@@ -17,6 +17,10 @@ domain=$2
 domain_idn=$2
 restart=$3
 
+if [ -z "$restart" ]; then
+    restart='yes'
+fi
+
 # Includes
 source $VESTA/func/main.sh
 source $VESTA/func/domain.sh

From 3f3cfece06a8c188047f730e4a50a58d85b7c36c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 8 Oct 2023 16:55:33 +0200
Subject: [PATCH 2023/2300] Update Changelog.md

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index 3f5fb37b..e139e122 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.9-0-5 [08-Oct-2023]
+==================================================
+* Many bugfixes
+
 Version 0.9.9-0-4 [27-Jun-2023]
 ==================================================
 * Support for Debian 12 ( in mutual cooperation with @HestiaCP )

From bf8411fa08d9f99d176c28f096ec91a35294f3b6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 8 Oct 2023 16:56:38 +0200
Subject: [PATCH 2024/2300] Update latest.txt: version 0.9.9-0-5

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 8ebe40d1..93fae7fa 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0-4
+vesta-0.9.9-0-5

From 946a1953d9bd14905bd6de95fdad2c07f7e1ca25 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 13 Oct 2023 11:56:50 +0200
Subject: [PATCH 2025/2300] v-update-mail-domains-disk - even mail account is
 symlinked

---
 bin/v-update-mail-domains-disk | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/v-update-mail-domains-disk b/bin/v-update-mail-domains-disk
index ca93627f..1dae64cf 100755
--- a/bin/v-update-mail-domains-disk
+++ b/bin/v-update-mail-domains-disk
@@ -41,7 +41,8 @@ for domain in $(search_objects 'mail' 'SUSPENDED' "no" 'DOMAIN'); do
     for account in $accounts; do
         home_dir=$HOMEDIR/$user/mail/$domain/$account
         if [ -e "$home_dir" ]; then
-            udisk=$(nice -n 19 du -shm $home_dir | cut -f 1 )
+            cd $home_dir
+            udisk=$(nice -n 19 du -shm ./ | cut -f 1 )
         else
             udisk=0
         fi

From 2f0807e8eedf6e83634790033682a7cf8fe58105 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 18 Oct 2023 14:46:55 +0200
Subject: [PATCH 2026/2300] Update v-commander: redis installer conf fix

---
 bin/v-commander | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-commander b/bin/v-commander
index 073c6d72..2ab8dc17 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -446,6 +446,7 @@ do
 
         sed -i "s|^supervised no|supervised systemd|g" /etc/redis/redis.conf
         sed -i "s|^save |# save |g" /etc/redis/redis.conf
+        sed -i 's|^# save ""|save ""|g' /etc/redis/redis.conf
         if [ $memory -lt 15000000 ]; then
             sed -i "s|^# maxmemory .*|maxmemory 256m|g" /etc/redis/redis.conf
         else

From bfdefc50e31b77af475f69043493ddcd48c03c23 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 2 Nov 2023 10:47:51 +0100
Subject: [PATCH 2027/2300] nginx rate-limit improvements

---
 ...https-firewall-burst-2-speed-2-conn-4.stpl |  3 +-
 .../force-https-firewall-burst-2-speed-2.stpl |  3 +-
 .../force-https-firewall-burst-2.stpl         |  3 +-
 .../force-https-firewall-wordpress.stpl       | 87 +++++++++++++++++++
 .../force-https-firewall-wordpress.tpl        |  8 ++
 .../rate-limit-tpl/force-https-firewall.stpl  |  3 +-
 .../rate-limit-tpl/install_rate_limit_tpl.sh  |  8 +-
 7 files changed, 110 insertions(+), 5 deletions(-)
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.tpl

diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
index d770ac6a..1f67154e 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2-conn-4.stpl
@@ -7,7 +7,8 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
-        limit_conn addr 8;
+        limit_conn addr 9;
+        limit_conn zone_site 25;
         limit_req zone=two burst=14 delay=7;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
index a2f7f9f2..dfd00270 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2-speed-2.stpl
@@ -7,7 +7,8 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
-        limit_conn addr 4;
+        limit_conn addr 7;
+        limit_conn zone_site 20;
         limit_req zone=two burst=14 delay=7;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
index 6118fa82..6d632713 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-burst-2.stpl
@@ -7,7 +7,8 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
-        limit_conn addr 3;
+        limit_conn addr 5;
+        limit_conn zone_site 15;
         limit_req zone=one burst=14 delay=7;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
new file mode 100644
index 00000000..3b2c23b9
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
@@ -0,0 +1,87 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        error_page 418 = @wordfence_lh;
+        error_page 419 = @wordfence_route;
+        error_page 420 = @wordfence_sync;
+
+        if ($request_uri ~ "^/\?wordfence_lh") { return 418; }
+        if ($request_uri ~ "^/\?rest_route=%2Fwordfence") { return 419; }
+        if ($request_uri ~ "^/\?wordfence_syncAttackData") { return 420; }
+
+        limit_conn addr 5;
+        limit_conn zone_site 15;
+        limit_req zone=one burst=14 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-admin/ {
+        limit_conn addr 24;
+        limit_req zone=one burst=40 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-json/ {
+        limit_conn addr 8;
+        limit_req zone=one burst=40 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_lh {
+        limit_conn addr 8;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_route {
+        limit_conn addr 8;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_sync {
+        limit_conn addr 8;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-json/wordfence/ {
+        limit_conn addr 8;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.tpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.tpl
new file mode 100644
index 00000000..c9cf1189
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
index b4468a6a..db6ab623 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall.stpl
@@ -7,7 +7,8 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
-        limit_conn addr 2;
+        limit_conn addr 3;
+        limit_conn zone_site 10;
         limit_req zone=one burst=7 delay=3;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index 1d128f7a..ce5f6d93 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -12,7 +12,7 @@
 
 grepc=$(grep -c 'limit_conn_zone' /etc/nginx/nginx.conf)
 if [ "$grepc" -eq 0 ]; then
-    sed -i 's|server_names_hash_bucket_size   512;|server_names_hash_bucket_size   512;\n    limit_conn_zone $binary_remote_addr zone=addr:1m;\n    limit_conn_zone $server_name zone=zone_site:1m;\n    limit_req_zone $binary_remote_addr zone=one:1m rate=1r/s;\n    limit_req_zone $binary_remote_addr zone=two:1m rate=2r/s;\n    limit_conn_log_level error;\n    limit_req_log_level error;\n    limit_conn_status 429;\n    limit_req_status 429;|g' /etc/nginx/nginx.conf
+    sed -i 's|server_names_hash_bucket_size   512;|server_names_hash_bucket_size   512;\n    limit_conn_zone $binary_remote_addr zone=addr:1m;\n    limit_req_zone $scheme zone=wfone:1m rate=1r/s;\n    limit_conn_zone $server_name zone=zone_site:1m;\n    limit_req_zone $binary_remote_addr zone=one:1m rate=1r/s;\n    limit_req_zone $binary_remote_addr zone=two:1m rate=2r/s;\n    limit_conn_log_level error;\n    limit_req_log_level error;\n    limit_conn_status 429;\n    limit_req_status 429;|g' /etc/nginx/nginx.conf
     echo "=== Added rate_limit to nginx.conf"
 fi
 
@@ -28,6 +28,12 @@ if [ "$grepc" -eq 0 ]; then
     echo "=== Added rate_limit 'zone_site' to nginx.conf"
 fi
 
+grepc=$(grep -c 'zone=wfone:1m' /etc/nginx/nginx.conf)
+if [ "$grepc" -eq 0 ]; then
+    sed -i 's| zone=addr:1m;| zone=addr:1m;\n    limit_req_zone $scheme zone=wfone:1m rate=1r/s;|g' /etc/nginx/nginx.conf
+    echo "=== Added rate_limit 'zone_site' to nginx.conf"
+fi
+
 grepc=$(grep -c 'zone=one:10m' /etc/nginx/nginx.conf)
 if [ "$grepc" -eq 1 ]; then
     sed -i 's|zone=one:10m|zone=one:1m|g' /etc/nginx/nginx.conf

From c87de2631b487c2afe525ef5ab8084497b980cfb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 2 Nov 2023 11:01:03 +0100
Subject: [PATCH 2028/2300] Fix to download force-https-firewall-wordpress.stpl

---
 .../tools/rate-limit-tpl/install_rate_limit_tpl.sh             | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index ce5f6d93..bf5f1ec8 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -66,4 +66,7 @@ wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-burst
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2-conn-4.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-speed-2-conn-4.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
 
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-wordpress.tpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-wordpress.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-wordpress.stpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
+
 systemctl restart nginx

From 911dc91268af7264eb5290e9bb43cad24b5c5b15 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 2 Nov 2023 11:03:54 +0100
Subject: [PATCH 2029/2300] Fix message: Added rate_limit 'wfone' to nginx.conf

---
 .../for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index bf5f1ec8..0477be4e 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -31,7 +31,7 @@ fi
 grepc=$(grep -c 'zone=wfone:1m' /etc/nginx/nginx.conf)
 if [ "$grepc" -eq 0 ]; then
     sed -i 's| zone=addr:1m;| zone=addr:1m;\n    limit_req_zone $scheme zone=wfone:1m rate=1r/s;|g' /etc/nginx/nginx.conf
-    echo "=== Added rate_limit 'zone_site' to nginx.conf"
+    echo "=== Added rate_limit 'wfone' to nginx.conf"
 fi
 
 grepc=$(grep -c 'zone=one:10m' /etc/nginx/nginx.conf)

From 3d8880e5592d32ca1812f1abd8163f9332ac056b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 2 Nov 2023 11:08:13 +0100
Subject: [PATCH 2030/2300] Rotating places for limit_conn_zone

---
 .../for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index 0477be4e..91384b58 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -12,7 +12,7 @@
 
 grepc=$(grep -c 'limit_conn_zone' /etc/nginx/nginx.conf)
 if [ "$grepc" -eq 0 ]; then
-    sed -i 's|server_names_hash_bucket_size   512;|server_names_hash_bucket_size   512;\n    limit_conn_zone $binary_remote_addr zone=addr:1m;\n    limit_req_zone $scheme zone=wfone:1m rate=1r/s;\n    limit_conn_zone $server_name zone=zone_site:1m;\n    limit_req_zone $binary_remote_addr zone=one:1m rate=1r/s;\n    limit_req_zone $binary_remote_addr zone=two:1m rate=2r/s;\n    limit_conn_log_level error;\n    limit_req_log_level error;\n    limit_conn_status 429;\n    limit_req_status 429;|g' /etc/nginx/nginx.conf
+    sed -i 's|server_names_hash_bucket_size   512;|server_names_hash_bucket_size   512;\n    limit_conn_zone $binary_remote_addr zone=addr:1m;\n    limit_conn_zone $server_name zone=zone_site:1m;\n    limit_req_zone $scheme zone=wfone:1m rate=1r/s;\n    limit_req_zone $binary_remote_addr zone=one:1m rate=1r/s;\n    limit_req_zone $binary_remote_addr zone=two:1m rate=2r/s;\n    limit_conn_log_level error;\n    limit_req_log_level error;\n    limit_conn_status 429;\n    limit_req_status 429;|g' /etc/nginx/nginx.conf
     echo "=== Added rate_limit to nginx.conf"
 fi
 

From 88f52ec9a4c67df3f22d6fabfc12ac60397a99da Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 2 Nov 2023 11:33:19 +0100
Subject: [PATCH 2031/2300] Adding limit_conn zone_site 15; to wordpress tpl

---
 .../rate-limit-tpl/force-https-firewall-wordpress.stpl      | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
index 3b2c23b9..7fcad160 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
@@ -23,36 +23,42 @@ server {
 
     location /wp-admin/ {
         limit_conn addr 24;
+        limit_conn zone_site 30;
         limit_req zone=one burst=40 delay=7;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
     location /wp-json/ {
         limit_conn addr 8;
+        limit_conn zone_site 15;
         limit_req zone=one burst=40 delay=7;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
     location @wordfence_lh {
         limit_conn addr 8;
+        limit_conn zone_site 15;
         limit_req zone=wfone burst=120;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
     location @wordfence_route {
         limit_conn addr 8;
+        limit_conn zone_site 15;
         limit_req zone=wfone burst=120;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
     location @wordfence_sync {
         limit_conn addr 8;
+        limit_conn zone_site 15;
         limit_req zone=wfone burst=120;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
     location /wp-json/wordfence/ {
         limit_conn addr 8;
+        limit_conn zone_site 15;
         limit_req zone=wfone burst=120;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }

From 5e525f88981bab97df6307c2250768da60beaab8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 2 Nov 2023 14:27:15 +0100
Subject: [PATCH 2032/2300] nginx rate limit fixes for http:// templates

---
 ...sting-firewall-burst-2-speed-2-conn-4.stpl |  3 +-
 ...osting-firewall-burst-2-speed-2-conn-4.tpl |  3 +-
 .../hosting-firewall-burst-2-speed-2.stpl     |  3 +-
 .../hosting-firewall-burst-2-speed-2.tpl      |  3 +-
 .../hosting-firewall-burst-2.stpl             |  3 +-
 .../hosting-firewall-burst-2.tpl              |  3 +-
 .../hosting-firewall-wordpress.stpl           | 93 +++++++++++++++++++
 .../hosting-firewall-wordpress.tpl            | 90 ++++++++++++++++++
 .../rate-limit-tpl/hosting-firewall.stpl      |  3 +-
 .../tools/rate-limit-tpl/hosting-firewall.tpl |  3 +-
 .../rate-limit-tpl/install_rate_limit_tpl.sh  |  2 +
 11 files changed, 201 insertions(+), 8 deletions(-)
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl

diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
index df269ad4..8435a72b 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.stpl
@@ -7,7 +7,8 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
-        limit_conn addr 8;
+        limit_conn addr 9;
+        limit_conn zone_site 25;
         limit_req zone=two burst=14 delay=7;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
index 13657bd3..2cc5c781 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2-conn-4.tpl
@@ -4,7 +4,8 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
-        limit_conn addr 8;
+        limit_conn addr 9;
+        limit_conn zone_site 25;
         limit_req zone=two burst=14 delay=7;
         proxy_pass      http://%ip%:%web_port%;
     }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
index 8e0a0f5a..856ebd56 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.stpl
@@ -7,7 +7,8 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
-        limit_conn addr 4;
+        limit_conn addr 7;
+        limit_conn zone_site 20;
         limit_req zone=two burst=14 delay=7;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
index a4035844..5bf3fbf8 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2-speed-2.tpl
@@ -4,7 +4,8 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
-        limit_conn addr 4;
+        limit_conn addr 7;
+        limit_conn zone_site 20;
         limit_req zone=two burst=14 delay=7;
         proxy_pass      http://%ip%:%web_port%;
     }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
index 9649671d..5d42830f 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.stpl
@@ -7,7 +7,8 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
-        limit_conn addr 3;
+        limit_conn addr 5;
+        limit_conn zone_site 15;
         limit_req zone=one burst=14 delay=7;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
index 9e0edcf8..e57dbd1a 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-burst-2.tpl
@@ -4,7 +4,8 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
-        limit_conn addr 3;
+        limit_conn addr 5;
+        limit_conn zone_site 15;
         limit_req zone=one burst=14 delay=7;
         proxy_pass      http://%ip%:%web_port%;
     }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl
new file mode 100644
index 00000000..7fcad160
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl
@@ -0,0 +1,93 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        error_page 418 = @wordfence_lh;
+        error_page 419 = @wordfence_route;
+        error_page 420 = @wordfence_sync;
+
+        if ($request_uri ~ "^/\?wordfence_lh") { return 418; }
+        if ($request_uri ~ "^/\?rest_route=%2Fwordfence") { return 419; }
+        if ($request_uri ~ "^/\?wordfence_syncAttackData") { return 420; }
+
+        limit_conn addr 5;
+        limit_conn zone_site 15;
+        limit_req zone=one burst=14 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-admin/ {
+        limit_conn addr 24;
+        limit_conn zone_site 30;
+        limit_req zone=one burst=40 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-json/ {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=one burst=40 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_lh {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_route {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_sync {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-json/wordfence/ {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl
new file mode 100644
index 00000000..0e196744
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl
@@ -0,0 +1,90 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        error_page 418 = @wordfence_lh;
+        error_page 419 = @wordfence_route;
+        error_page 420 = @wordfence_sync;
+
+        if ($request_uri ~ "^/\?wordfence_lh") { return 418; }
+        if ($request_uri ~ "^/\?rest_route=%2Fwordfence") { return 419; }
+        if ($request_uri ~ "^/\?wordfence_syncAttackData") { return 420; }
+
+        limit_conn addr 5;
+        limit_conn zone_site 15;
+        limit_req zone=one burst=14 delay=7;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location /wp-admin/ {
+        limit_conn addr 24;
+        limit_conn zone_site 30;
+        limit_req zone=one burst=40 delay=7;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location /wp-json/ {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=one burst=40 delay=7;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location @wordfence_lh {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location @wordfence_route {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location @wordfence_sync {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location /wp-json/wordfence/ {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %docroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
index 21acb34b..42bc195b 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.stpl
@@ -7,7 +7,8 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
-        limit_conn addr 2;
+        limit_conn addr 3;
+        limit_conn zone_site 10;
         limit_req zone=one burst=7 delay=3;
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
index 9438e532..177a71c6 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall.tpl
@@ -4,7 +4,8 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     location / {
-        limit_conn addr 2;
+        limit_conn addr 3;
+        limit_conn zone_site 10;
         limit_req zone=one burst=7 delay=3;
         proxy_pass      http://%ip%:%web_port%;
     }
diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index 91384b58..4a910d0f 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -68,5 +68,7 @@ wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-burst-2-s
 
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-wordpress.tpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-wordpress.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-wordpress.stpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-wordpress.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-wordpress.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl
 
 systemctl restart nginx

From 803cde4c89c0e249828c79d982a4a6c9eb22f54c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 3 Nov 2023 17:08:22 +0100
Subject: [PATCH 2033/2300] CRLF to LF for nginx-rate-.limit templates for
 WordPresd

---
 .../force-https-firewall-wordpress.stpl       | 186 +++++++++---------
 .../hosting-firewall-wordpress.stpl           | 186 +++++++++---------
 .../hosting-firewall-wordpress.tpl            | 180 ++++++++---------
 3 files changed, 276 insertions(+), 276 deletions(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
index 7fcad160..e8b5b228 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
@@ -1,93 +1,93 @@
-server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
-    server_name %domain_idn% %alias_idn%;
-    # ssl         on;
-    ssl_certificate      %ssl_pem%;
-    ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
-
-    location / {
-        error_page 418 = @wordfence_lh;
-        error_page 419 = @wordfence_route;
-        error_page 420 = @wordfence_sync;
-
-        if ($request_uri ~ "^/\?wordfence_lh") { return 418; }
-        if ($request_uri ~ "^/\?rest_route=%2Fwordfence") { return 419; }
-        if ($request_uri ~ "^/\?wordfence_syncAttackData") { return 420; }
-
-        limit_conn addr 5;
-        limit_conn zone_site 15;
-        limit_req zone=one burst=14 delay=7;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location /wp-admin/ {
-        limit_conn addr 24;
-        limit_conn zone_site 30;
-        limit_req zone=one burst=40 delay=7;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location /wp-json/ {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=one burst=40 delay=7;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location @wordfence_lh {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=wfone burst=120;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location @wordfence_route {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=wfone burst=120;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location @wordfence_sync {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=wfone burst=120;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location /wp-json/wordfence/ {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=wfone burst=120;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location ~* ^.+\.(%proxy_extentions%)$ {
-        root           %sdocroot%;
-        access_log     /var/log/%web_system%/domains/%domain%.log combined;
-        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-        expires        max;
-        # try_files      $uri @fallback;
-    }
-
-    location /error/ {
-        alias   %home%/%user%/web/%domain%/document_errors/;
-    }
-
-    location @fallback {
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location ~ /\.ht    {return 404;}
-    location ~ /\.env   {return 404;}
-    location ~ /\.svn/  {return 404;}
-    location ~ /\.git/  {return 404;}
-    location ~ /\.hg/   {return 404;}
-    location ~ /\.bzr/  {return 404;}
-
-    disable_symlinks if_not_owner from=%docroot%;
-
-    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
-    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
-}
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        error_page 418 = @wordfence_lh;
+        error_page 419 = @wordfence_route;
+        error_page 420 = @wordfence_sync;
+
+        if ($request_uri ~ "^/\?wordfence_lh") { return 418; }
+        if ($request_uri ~ "^/\?rest_route=%2Fwordfence") { return 419; }
+        if ($request_uri ~ "^/\?wordfence_syncAttackData") { return 420; }
+
+        limit_conn addr 5;
+        limit_conn zone_site 15;
+        limit_req zone=one burst=14 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-admin/ {
+        limit_conn addr 24;
+        limit_conn zone_site 30;
+        limit_req zone=one burst=40 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-json/ {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=one burst=40 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_lh {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_route {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_sync {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-json/wordfence/ {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl
index 7fcad160..e8b5b228 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl
@@ -1,93 +1,93 @@
-server {
-    listen      %ip%:%proxy_ssl_port% ssl http2;
-    server_name %domain_idn% %alias_idn%;
-    # ssl         on;
-    ssl_certificate      %ssl_pem%;
-    ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
-
-    location / {
-        error_page 418 = @wordfence_lh;
-        error_page 419 = @wordfence_route;
-        error_page 420 = @wordfence_sync;
-
-        if ($request_uri ~ "^/\?wordfence_lh") { return 418; }
-        if ($request_uri ~ "^/\?rest_route=%2Fwordfence") { return 419; }
-        if ($request_uri ~ "^/\?wordfence_syncAttackData") { return 420; }
-
-        limit_conn addr 5;
-        limit_conn zone_site 15;
-        limit_req zone=one burst=14 delay=7;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location /wp-admin/ {
-        limit_conn addr 24;
-        limit_conn zone_site 30;
-        limit_req zone=one burst=40 delay=7;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location /wp-json/ {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=one burst=40 delay=7;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location @wordfence_lh {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=wfone burst=120;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location @wordfence_route {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=wfone burst=120;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location @wordfence_sync {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=wfone burst=120;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location /wp-json/wordfence/ {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=wfone burst=120;
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location ~* ^.+\.(%proxy_extentions%)$ {
-        root           %sdocroot%;
-        access_log     /var/log/%web_system%/domains/%domain%.log combined;
-        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-        expires        max;
-        # try_files      $uri @fallback;
-    }
-
-    location /error/ {
-        alias   %home%/%user%/web/%domain%/document_errors/;
-    }
-
-    location @fallback {
-        proxy_pass      https://%ip%:%web_ssl_port%;
-    }
-
-    location ~ /\.ht    {return 404;}
-    location ~ /\.env   {return 404;}
-    location ~ /\.svn/  {return 404;}
-    location ~ /\.git/  {return 404;}
-    location ~ /\.hg/   {return 404;}
-    location ~ /\.bzr/  {return 404;}
-
-    disable_symlinks if_not_owner from=%docroot%;
-
-    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
-    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
-}
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        error_page 418 = @wordfence_lh;
+        error_page 419 = @wordfence_route;
+        error_page 420 = @wordfence_sync;
+
+        if ($request_uri ~ "^/\?wordfence_lh") { return 418; }
+        if ($request_uri ~ "^/\?rest_route=%2Fwordfence") { return 419; }
+        if ($request_uri ~ "^/\?wordfence_syncAttackData") { return 420; }
+
+        limit_conn addr 5;
+        limit_conn zone_site 15;
+        limit_req zone=one burst=14 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-admin/ {
+        limit_conn addr 24;
+        limit_conn zone_site 30;
+        limit_req zone=one burst=40 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-json/ {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=one burst=40 delay=7;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_lh {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_route {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_sync {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-json/wordfence/ {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl
index 0e196744..49da9387 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl
@@ -1,90 +1,90 @@
-server {
-    listen      %ip%:%proxy_port%;
-    server_name %domain_idn% %alias_idn%;
-    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
-
-    location / {
-        error_page 418 = @wordfence_lh;
-        error_page 419 = @wordfence_route;
-        error_page 420 = @wordfence_sync;
-
-        if ($request_uri ~ "^/\?wordfence_lh") { return 418; }
-        if ($request_uri ~ "^/\?rest_route=%2Fwordfence") { return 419; }
-        if ($request_uri ~ "^/\?wordfence_syncAttackData") { return 420; }
-
-        limit_conn addr 5;
-        limit_conn zone_site 15;
-        limit_req zone=one burst=14 delay=7;
-        proxy_pass      http://%ip%:%web_port%;
-    }
-
-    location /wp-admin/ {
-        limit_conn addr 24;
-        limit_conn zone_site 30;
-        limit_req zone=one burst=40 delay=7;
-        proxy_pass      http://%ip%:%web_port%;
-    }
-
-    location /wp-json/ {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=one burst=40 delay=7;
-        proxy_pass      http://%ip%:%web_port%;
-    }
-
-    location @wordfence_lh {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=wfone burst=120;
-        proxy_pass      http://%ip%:%web_port%;
-    }
-
-    location @wordfence_route {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=wfone burst=120;
-        proxy_pass      http://%ip%:%web_port%;
-    }
-
-    location @wordfence_sync {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=wfone burst=120;
-        proxy_pass      http://%ip%:%web_port%;
-    }
-
-    location /wp-json/wordfence/ {
-        limit_conn addr 8;
-        limit_conn zone_site 15;
-        limit_req zone=wfone burst=120;
-        proxy_pass      http://%ip%:%web_port%;
-    }
-
-    location ~* ^.+\.(%proxy_extentions%)$ {
-        root           %docroot%;
-        access_log     /var/log/%web_system%/domains/%domain%.log combined;
-        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-        expires        max;
-        # try_files      $uri @fallback;
-    }
-
-    location /error/ {
-        alias   %home%/%user%/web/%domain%/document_errors/;
-    }
-
-    location @fallback {
-        proxy_pass      http://%ip%:%web_port%;
-    }
-
-    location ~ /\.ht    {return 404;}
-    location ~ /\.env   {return 404;}
-    location ~ /\.svn/  {return 404;}
-    location ~ /\.git/  {return 404;}
-    location ~ /\.hg/   {return 404;}
-    location ~ /\.bzr/  {return 404;}
-
-    disable_symlinks if_not_owner from=%docroot%;
-
-    include %home%/%user%/conf/web/nginx.%domain%.conf*;
-}
-
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        error_page 418 = @wordfence_lh;
+        error_page 419 = @wordfence_route;
+        error_page 420 = @wordfence_sync;
+
+        if ($request_uri ~ "^/\?wordfence_lh") { return 418; }
+        if ($request_uri ~ "^/\?rest_route=%2Fwordfence") { return 419; }
+        if ($request_uri ~ "^/\?wordfence_syncAttackData") { return 420; }
+
+        limit_conn addr 5;
+        limit_conn zone_site 15;
+        limit_req zone=one burst=14 delay=7;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location /wp-admin/ {
+        limit_conn addr 24;
+        limit_conn zone_site 30;
+        limit_req zone=one burst=40 delay=7;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location /wp-json/ {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=one burst=40 delay=7;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location @wordfence_lh {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location @wordfence_route {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location @wordfence_sync {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location /wp-json/wordfence/ {
+        limit_conn addr 8;
+        limit_conn zone_site 15;
+        limit_req zone=wfone burst=120;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %docroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+

From 7993d50276e233a19a7d973960df3e2e7cda9cfb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Nov 2023 15:17:34 +0100
Subject: [PATCH 2034/2300] v-install-wordpress to put
 force-https-firewall-wordpress nginx template

---
 bin/v-install-wordpress | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 70f3fc7b..5758e358 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -104,11 +104,23 @@ else
     PROTOCOL='https'
 fi
 
+TPL_CHANGED=0;
+
 if [ -f "/home/$user/conf/web/ssl.$domain.ca" ] || [ ! -z "$SKIP_LE" ]; then
     PROTOCOL='https'
-    if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ]; then
+    if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https-firewall-wordpress.stpl" ] && [ $TPL_CHANGED -eq 0 ]; then
+        TPL_CHANGED=1;
+        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https-firewall-wordpress" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
+    fi
+    if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ] && [ $TPL_CHANGED -eq 0 ]; then
+        TPL_CHANGED=1;
         /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
     fi
+else
+    if [ -f "/usr/local/vesta/data/templates/web/nginx/hosting-firewall-wordpress.stpl" ] && [ $TPL_CHANGED -eq 0 ]; then
+        TPL_CHANGED=1;
+        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "hosting-firewall-wordpress" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
+    fi
 fi
 
 /usr/local/vesta/bin/v-add-database "$user" "$DBUSERSUF" "$DBUSERSUF" "$PASSWDDB" "mysql"

From 562ad763dd8961cd561b46e95aac5badb2475893 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 5 Nov 2023 15:25:01 +0100
Subject: [PATCH 2035/2300] v-commander: install nginx-rate-limit templates

---
 bin/v-commander | 22 ++++++++++++++++------
 1 file changed, 16 insertions(+), 6 deletions(-)

diff --git a/bin/v-commander b/bin/v-commander
index 2ab8dc17..28f97e84 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -78,12 +78,13 @@ myhelp() {
     echo "q  = quit"
     echo "h  = help"
     echo "-----------------------------"
-    echo "inst v   = install myVesta"
-    echo "inst p   = install multi-php"
-    echo "inst pgw = install php-gate"
-    echo "inst r   = install new Roundcube"
-    echo "inst memcached = install memcached"
-    echo "inst redis     = install Redis"
+    echo "inst v                = install myVesta"
+    echo "inst p                = install multi-php"
+    echo "inst pgw              = install php-gate"
+    echo "inst r                = install new Roundcube"
+    echo "inst memcached        = install memcached"
+    echo "inst redis            = install Redis"
+    echo "inst nginx-rate-limit = install nginx-rate-limit templates"
     echo "dis fb   = stop and disable fail2ban"
     echo "dis dove = stop and disable dovecot"
     echo "dis spam = stop and disable spam"
@@ -459,6 +460,15 @@ do
         echo "-------------------"
     fi
 
+    if [ "$answer" = 'inst nginx-rate-limit' ] || [ "$answer" = 'INST NGINX-RATE-LIMIT' ]; then
+        echo "============================="
+        echo "== Installing inst nginx-rate-limit templates"
+        curl -O https://c.myvestacp.com/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+        bash install_rate_limit_tpl.sh
+        echo "== nginx-rate-limit templates installed."
+        echo "-------------------"
+    fi
+
     if [ "$answer" = 'check fc' ] || [ "$answer" = 'CHECK FC' ]; then
         echo "== Checking if FreshClam is up"
         clamavup=$(/usr/local/vesta/bin/v-list-sys-services | grep 'clamav-daemon' | grep -c 'running')

From fff40883dd8eac776192fe795145b181b61ad8d8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 12 Nov 2023 19:18:00 +0100
Subject: [PATCH 2036/2300] webp smush nginx template

---
 .../nginx-templates/hosting-webp-smush.stpl   | 56 +++++++++++++++++++
 .../nginx-templates/hosting-webp-smush.tpl    | 52 +++++++++++++++++
 2 files changed, 108 insertions(+)
 create mode 100644 src/deb/for-download/tools/nginx-templates/hosting-webp-smush.stpl
 create mode 100644 src/deb/for-download/tools/nginx-templates/hosting-webp-smush.tpl

diff --git a/src/deb/for-download/tools/nginx-templates/hosting-webp-smush.stpl b/src/deb/for-download/tools/nginx-templates/hosting-webp-smush.stpl
new file mode 100644
index 00000000..7597746c
--- /dev/null
+++ b/src/deb/for-download/tools/nginx-templates/hosting-webp-smush.stpl
@@ -0,0 +1,56 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # #ssl_on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+
+        # BEGIN SMUSH-WEBP
+        location ~* "wp-content\/(uploads\/)(.*.(?:png|jpe?g))" {
+          root           %sdocroot%;
+          add_header Vary Accept;
+          expires        max;
+          set $image_path $2;
+          if (-f "%sdocroot%/wp-content/smush-webp/disable_smush_webp") {
+            break;
+          }
+          if ($http_accept !~* "webp") {
+            break;
+          }
+          # add_header X_WebP_Try /wp-content/smush-webp/$image_path.webp;
+          try_files /wp-content/smush-webp/$image_path.webp $uri =404;
+        }
+        # END SMUSH-WEBP
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/src/deb/for-download/tools/nginx-templates/hosting-webp-smush.tpl b/src/deb/for-download/tools/nginx-templates/hosting-webp-smush.tpl
new file mode 100644
index 00000000..7e408254
--- /dev/null
+++ b/src/deb/for-download/tools/nginx-templates/hosting-webp-smush.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+
+        # BEGIN SMUSH-WEBP
+        location ~* "wp-content\/(uploads\/)(.*.(?:png|jpe?g))" {
+          root           %sdocroot%;
+          add_header Vary Accept;
+          expires        max;
+          set $image_path $2;
+          if (-f "%sdocroot%/wp-content/smush-webp/disable_smush_webp") {
+            break;
+          }
+          if ($http_accept !~* "webp") {
+            break;
+          }
+          # add_header X_WebP_Try /wp-content/smush-webp/$image_path.webp;
+          try_files /wp-content/smush-webp/$image_path.webp $uri =404;
+        }
+        # END SMUSH-WEBP
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+

From fc05c6535944a392a07b3e3981148f35bd215a95 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <internetfazoni@gmail.com>
Date: Sun, 12 Nov 2023 19:45:02 +0100
Subject: [PATCH 2037/2300] Create wp-super-cache.tpl

---
 .../for-download/tools/nginx-templates/wp-super-cache.tpl | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 src/deb/for-download/tools/nginx-templates/wp-super-cache.tpl

diff --git a/src/deb/for-download/tools/nginx-templates/wp-super-cache.tpl b/src/deb/for-download/tools/nginx-templates/wp-super-cache.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/src/deb/for-download/tools/nginx-templates/wp-super-cache.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}

From 9985fcbea5a8289d5693d839e6dd0a0769da412b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <internetfazoni@gmail.com>
Date: Sun, 12 Nov 2023 19:45:58 +0100
Subject: [PATCH 2038/2300] Create wp-super-cache.stpl

---
 .../tools/nginx-templates/wp-super-cache.stpl | 87 +++++++++++++++++++
 1 file changed, 87 insertions(+)
 create mode 100644 src/deb/for-download/tools/nginx-templates/wp-super-cache.stpl

diff --git a/src/deb/for-download/tools/nginx-templates/wp-super-cache.stpl b/src/deb/for-download/tools/nginx-templates/wp-super-cache.stpl
new file mode 100644
index 00000000..3bed6ce3
--- /dev/null
+++ b/src/deb/for-download/tools/nginx-templates/wp-super-cache.stpl
@@ -0,0 +1,87 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
+    server_name %domain_idn% %alias_idn%;
+    root           %sdocroot%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    set $cache_uri $request_uri;
+    set $caching 'ON';
+
+    # POST requests and urls with a query string should always go to PHP
+    if ($request_method = POST) {
+    	set $caching 'OFF';
+    }
+
+    if ($query_string ~* "(fb_action_ids=|fb_action_types=|fb_source=|fbclid=|utm_source=|utm_campaign=|utm_medium=|utm_expid=|utm_term=|utm_content=|utm_id=|utm_source_platform=|utm_creative_format=|utm_marketing_tactic=|_ga=|gclid=|campaignid=|adgroupid=|adid=|gbraid=|wbraid=|_gl=|gclsrc=|gdfms=|gdftrk=|gdffi=|_ke=|_kx=|trk_contact=|trk_msg=|trk_module=|trk_sid=|mc_cid=|mc_eid=|mkwid=|pcrid=|mtm_source=|mtm_medium=|mtm_campaign=|mtm_keyword=|mtm_cid=|mtm_content=|msclkid=|epik=|pp=|pk_source=|pk_medium=|pk_campaign=|pk_keyword=|pk_cid=|pk_content=|redirect_log_mongo_id=|redirect_mongo_id=|sb_referer_host=)") {
+        set $query_string_cachable 1;
+    }
+
+    if ($query_string != "") {
+        set $query_string_cacheable 1$query_string_cacheable;
+    }   
+
+    if ($query_string_cacheable = 11) {
+        set $caching 'ON';
+    }
+
+    if ($query_string_cacheable = 1) {
+        set $caching 'OFF';
+    }
+
+    # Don't cache uris containing the following segments
+    if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php|wp-.*.php|/feed/|index.php|wp-comments-popup.php|wp-links-opml.php|wp-locations.php|sitemap(_index)?.xml|[a-z0–9_-]+-sitemap([0–9]+)?.xml)") {
+	set $caching 'OFF';
+    }
+    
+    # Don't use the cache for logged-in users or recent commenters
+    if ($http_cookie ~* "comment_author|wordpress_[a-f0–9]+|wp-postpass|wordpress_logged_in") {
+	set $caching 'OFF';
+    }
+    
+    if ($caching = 'ON') {
+    	set $cachefile "/wp-content/cache/supercache/$http_host/$cache_uri/index-https.html";   
+    	set $cachestatus 'HIT'; 
+    }
+
+    if ($caching = 'OFF') {
+       set $cachestatus 'MISS';
+    }
+    
+    add_header X-Cache-Status $cachestatus;
+    add_header X-Cache-File $cachefile;
+
+    location / {
+        try_files $cachefile @fallback;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}

From 25749e8025167dbb5c2763949ad54ca26b7c293d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 17 Nov 2023 10:06:42 +0100
Subject: [PATCH 2039/2300] Update fix-fpm-poold.sh

---
 src/deb/for-download/tools/patches/fix-fpm-poold.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/patches/fix-fpm-poold.sh b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
index 94566768..311ef9cd 100644
--- a/src/deb/for-download/tools/patches/fix-fpm-poold.sh
+++ b/src/deb/for-download/tools/patches/fix-fpm-poold.sh
@@ -16,10 +16,10 @@ if [ -d "/etc/php" ]; then
     find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
     find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
 
-    OLDVAL='pm.max_children = 8'
+    OLDVAL='pm.max_children = '
     NEWVAL='pm.max_children = 3'
-    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
-    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL|$NEWVAL|g"
+    find /etc/php/*/fpm/pool.d/ -name "*.conf" -type f -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL.*|$NEWVAL|g"
+    find /usr/local/vesta/data/templates/web/apache2/ -type f -name "*.sh" -exec grep -l "$OLDVAL" {} \; | xargs sed -i "s|$OLDVAL.*|$NEWVAL|g"
 
     OLDVAL='request_terminate_timeout = '
     NEWVAL='request_terminate_timeout = 360s'

From c4eb89e4fdb0bc9f8459c238e97a13f3caae4475 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sat, 25 Nov 2023 11:41:04 +0100
Subject: [PATCH 2040/2300] Update install-rocket-nginx.sh

---
 src/deb/for-download/tools/install-rocket-nginx.sh | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/src/deb/for-download/tools/install-rocket-nginx.sh b/src/deb/for-download/tools/install-rocket-nginx.sh
index 20364f80..47768b11 100644
--- a/src/deb/for-download/tools/install-rocket-nginx.sh
+++ b/src/deb/for-download/tools/install-rocket-nginx.sh
@@ -1,5 +1,10 @@
 #!/bin/bash
 
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-https.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-https.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-https.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-https.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-hosting.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-hosting.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-hosting.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-hosting.stpl
+
 echo "Updating apt, please wait..."
 apt-get update > /dev/null 2>&1
 
@@ -17,9 +22,6 @@ fi
 cd rocket-nginx
 cp rocket-nginx.ini.disabled rocket-nginx.ini
 php rocket-parser.php
-/usr/local/vesta/bin/v-php-func 'strip_once_in_file_between_including_borders' '/etc/nginx/rocket-nginx/conf.d/default.conf' '# BROWSER MEDIA CACHE' '}'
-
-wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-https.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-https.tpl
-wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-https.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-https.stpl
-wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-hosting.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-hosting.tpl
-wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-hosting.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-hosting.stpl
+if [ -f "/etc/nginx/rocket-nginx/conf.d/default.conf" ]; then
+    /usr/local/vesta/bin/v-php-func 'strip_once_in_file_between_including_borders' '/etc/nginx/rocket-nginx/conf.d/default.conf' '# BROWSER MEDIA CACHE' '}'
+fi

From f4beb1c8f11247209d7666cc8c94e7747fd8d8eb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 11 Dec 2023 11:48:32 +0100
Subject: [PATCH 2041/2300] Update vst-install-debian.sh, MAX_DBUSER_LEN=80

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 47e8ede0..9ba1a2ec 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -2034,8 +2034,8 @@ echo "=== Set URL for phpmyadmin"
 echo "DB_PMA_URL='https://$servername/phpmyadmin/'" >> $VESTA/conf/vesta.conf
 if [ "$release" -gt 9 ]; then
     echo "=== Set max_length_of_MySQL_username=80"
+    echo "MAX_DBUSER_LEN=80" >> $VESTA/conf/vesta.conf
 fi
-echo "MAX_DBUSER_LEN=80" >> $VESTA/conf/vesta.conf
 echo "ALLOW_BACKUP_ANYTIME='yes'" >> $VESTA/conf/vesta.conf
 echo "NOTIFY_ADMIN_FULL_BACKUP='$email'" >> $VESTA/conf/vesta.conf
 echo "================================================================"

From 328f6f293cdec07f18090abc09112c2ab5f06c98 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 20 Dec 2023 21:23:34 +0100
Subject: [PATCH 2042/2300] Disable hosts_try_fastopen for all hosts

---
 install/debian/11/exim/exim4.conf.template    | 2 +-
 install/debian/11/exim/exim4.conf.template-RC | 2 +-
 install/debian/12/exim/exim4.conf.template    | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/install/debian/11/exim/exim4.conf.template b/install/debian/11/exim/exim4.conf.template
index cbc2e75f..3f09a2e8 100644
--- a/install/debian/11/exim/exim4.conf.template
+++ b/install/debian/11/exim/exim4.conf.template
@@ -322,7 +322,7 @@ remote_smtp:
   dkim_private_key = DKIM_PRIVATE_KEY
   dkim_canon = relaxed
   dkim_strict = 0
-  hosts_try_fastopen = !*.l.google.com
+  hosts_try_fastopen = 
   hosts_try_chunking = !93.188.3.0/24
 
 procmail:
diff --git a/install/debian/11/exim/exim4.conf.template-RC b/install/debian/11/exim/exim4.conf.template-RC
index 5a4d0414..82b97d4e 100644
--- a/install/debian/11/exim/exim4.conf.template-RC
+++ b/install/debian/11/exim/exim4.conf.template-RC
@@ -353,7 +353,7 @@ remote_smtp:
   dkim_private_key = DKIM_PRIVATE_KEY
   dkim_canon = relaxed
   dkim_strict = 0
-  hosts_try_fastopen = !*.l.google.com
+  hosts_try_fastopen = 
   hosts_try_chunking = !93.188.3.0/24
 
 procmail:
diff --git a/install/debian/12/exim/exim4.conf.template b/install/debian/12/exim/exim4.conf.template
index 27fca98a..81746a7a 100644
--- a/install/debian/12/exim/exim4.conf.template
+++ b/install/debian/12/exim/exim4.conf.template
@@ -353,7 +353,7 @@ remote_smtp:
   dkim_private_key = DKIM_PRIVATE_KEY
   dkim_canon = relaxed
   dkim_strict = 0
-  hosts_try_fastopen = !*.l.google.com
+  hosts_try_fastopen = 
   hosts_try_chunking = !93.188.3.0/24
 
 procmail:

From 91f6ae080a0e1c1133d4e0b86a8a0dfdb97217a9 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 28 Dec 2023 16:01:09 +0100
Subject: [PATCH 2043/2300] Update Wordfence WAF Path

---
 bin/v-move-domain-and-database-to-account | 34 +++++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/bin/v-move-domain-and-database-to-account b/bin/v-move-domain-and-database-to-account
index 7524d229..6ed2f6d8 100644
--- a/bin/v-move-domain-and-database-to-account
+++ b/bin/v-move-domain-and-database-to-account
@@ -88,6 +88,40 @@ if [ $? -ne 0 ]; then
     RET=$E_NOTEXIST
 fi
 
+#----------------------------------------------------------#
+#               Update Wordfence WAF Path                  #
+#----------------------------------------------------------#
+
+# Path to .user.ini file
+user_ini="$USER_DATA/web/$domain/public_html/.user.ini"
+
+# Check if .user.ini exists
+if [ -f "$user_ini" ]; then
+    echo "Updating .user.ini with new user path..."
+    
+    # Temporary file for modification
+    tmp_file=$(mktemp)
+    
+    # Change path from old USER to new USER_TO
+    sed "s|/home/$owner/public_html|/home/$USER_TO/public_html|g" "$user_ini" > "$tmp_file"
+    
+    # Check if replacement was successful and update .user.ini
+    if [ $? -eq 0 ]; then
+        mv "$tmp_file" "$user_ini"
+        echo ".user.ini updated successfully."
+    else
+        echo "Failed to update .user.ini file."
+        rm "$tmp_file"  # Deletes temporary file
+    fi
+else
+    echo ".user.ini does not exist, no changes made."
+fi
+
+#----------------------------------------------------------#
+#                       Exit                               #
+#----------------------------------------------------------#
+
+
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#

From fa71d3a1c6e1f055c50f392c70bc0363ec50be79 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 28 Dec 2023 16:01:34 +0100
Subject: [PATCH 2044/2300] Update Wordfence WAF Path

---
 bin/v-move-domain-and-database-to-account | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/bin/v-move-domain-and-database-to-account b/bin/v-move-domain-and-database-to-account
index 6ed2f6d8..08180d99 100644
--- a/bin/v-move-domain-and-database-to-account
+++ b/bin/v-move-domain-and-database-to-account
@@ -117,10 +117,6 @@ else
     echo ".user.ini does not exist, no changes made."
 fi
 
-#----------------------------------------------------------#
-#                       Exit                               #
-#----------------------------------------------------------#
-
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 0beaa0abda62427709c3a4decbe8ad37b635abe3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 28 Dec 2023 20:11:10 +0100
Subject: [PATCH 2045/2300] Update multi-php-install.sh: install phpgate

---
 src/deb/for-download/tools/multi-php-install.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 4d86050d..0064aa1b 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -361,3 +361,7 @@ if [ $debian_version -ge 10 ]; then
     apt-get -y remove libapache2-mod-php* > /dev/null 2>&1
     service apache2 restart
 fi
+
+if [ -f "/usr/share/phpgate/phpgate.php" ]; then
+    v-commander 'u' 'inst memcached' 'm' 'inst pgw' 'q'
+fi

From e1053b1c9a7dcda7595e13b5a5d48453c69125f7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 28 Dec 2023 20:26:36 +0100
Subject: [PATCH 2046/2300] Update multi-php-install.sh: upgrading
 tailf_apache_error.php

---
 .../for-download/tools/multi-php-install.sh   | 21 ++++++++++++++++++-
 1 file changed, 20 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 0064aa1b..9983172c 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -363,5 +363,24 @@ if [ $debian_version -ge 10 ]; then
 fi
 
 if [ -f "/usr/share/phpgate/phpgate.php" ]; then
-    v-commander 'u' 'inst memcached' 'm' 'inst pgw' 'q'
+    echo "=== upgrading phpgate"
+    v-commander 'inst memcached' 'm' 'inst pgw' 'q'
+fi
+
+if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then
+    echo "=== upgrading tailf_apache_error.php"
+    wget -nv http://dl.myvestacp.com/vesta/tailf.php -O /usr/local/bin/tailf.php
+    wget -nv http://dl.myvestacp.com/vesta/tailf_apache_error.php -O /usr/local/bin/tailf_apache_error.php
+    wget -nv http://dl.myvestacp.com/vesta/see-apache-processlist-once.sh -O /usr/local/bin/see-apache-processlist-once.sh
+    wget -nv http://dl.myvestacp.com/vesta/see-mysql-processlist-once.sh -O /usr/local/bin/see-mysql-processlist-once.sh
+    chmod u+x /usr/local/bin/see-apache-processlist-once.sh
+    chmod u+x /usr/local/bin/see-mysql-processlist-once.sh
+    
+    # ps aux | grep 'tailf_apache_error' | grep -v "grep tailf_apache_error"
+    # echo $(ps aux | grep 'tailf_apache_error' | grep -v "grep tailf_apache_error" | awk '{print $2}')
+    kill $(ps aux | grep 'tailf_apache_error' | grep -v "grep tailf_apache_error" | awk '{print $2}')
+    sleep 1
+    # ps -Af | grep 'tailf_apache_error' | grep -v "grep tailf_apache_error"
+    # sleep 1
+    nohup php /usr/local/bin/tailf_apache_error.php > /var/log/tailf_apache_error.log &
 fi

From cecb7cf56ae8b0c40e3b47c4f2275fd314b4e7dc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 28 Dec 2023 21:15:39 +0100
Subject: [PATCH 2047/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 9983172c..f6f80c02 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -364,7 +364,7 @@ fi
 
 if [ -f "/usr/share/phpgate/phpgate.php" ]; then
     echo "=== upgrading phpgate"
-    v-commander 'inst memcached' 'm' 'inst pgw' 'q'
+    /usr/local/vesta/bin/v-commander 'inst memcached' 'm' 'inst pgw' 'q'
 fi
 
 if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then

From 6800013edb6581f8ce1e1b1fa20cf418a0ff20ee Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 28 Dec 2023 21:21:31 +0100
Subject: [PATCH 2048/2300] Update v-commander

---
 bin/v-commander | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-commander b/bin/v-commander
index 28f97e84..a3abef30 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -425,8 +425,8 @@ do
         memory=$(grep 'MemTotal' /proc/meminfo |tr ' ' '\n' |grep [0-9])
         apt-get update
         apt-get -y install memcached 
-        apt-get install $(systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-memcache ")
-        apt-get install $(systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-memcached ")
+        apt-get -y install $(systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-memcache ")
+        apt-get -y install $(systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | cut -c1-6 | xargs -n 1 printf "%s-memcached ")
         if [ $memory -lt 15000000 ]; then
             sed -i "s/-m 64/-m 256/" /etc/memcached.conf
         else

From f344c0b1d5378f258db58702e498734ace234b3b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 28 Dec 2023 21:22:34 +0100
Subject: [PATCH 2049/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index f6f80c02..fb0720a1 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -364,7 +364,7 @@ fi
 
 if [ -f "/usr/share/phpgate/phpgate.php" ]; then
     echo "=== upgrading phpgate"
-    /usr/local/vesta/bin/v-commander 'inst memcached' 'm' 'inst pgw' 'q'
+    /usr/local/vesta/bin/v-commander 'm' 'inst pgw' 'q'
 fi
 
 if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then

From f39dc8edce97f8d720db58b736ebf0f2f328eae2 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 28 Dec 2023 21:42:09 +0100
Subject: [PATCH 2050/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index fb0720a1..d1b36ced 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -365,6 +365,8 @@ fi
 if [ -f "/usr/share/phpgate/phpgate.php" ]; then
     echo "=== upgrading phpgate"
     /usr/local/vesta/bin/v-commander 'm' 'inst pgw' 'q'
+    echo "=== upgrading phpgate done."
+    echo ""
 fi
 
 if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then
@@ -383,4 +385,6 @@ if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then
     # ps -Af | grep 'tailf_apache_error' | grep -v "grep tailf_apache_error"
     # sleep 1
     nohup php /usr/local/bin/tailf_apache_error.php > /var/log/tailf_apache_error.log &
+    echo "=== upgrading tailf_apache_error.php done."
+    echo ""
 fi

From 5e72ead3b305351c89dbfb3cb90210ffd4e24faa Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 3 Jan 2024 19:19:47 +0100
Subject: [PATCH 2051/2300] Create v-fix-website-permissions

---
 bin/v-fix-website-permissions | 69 +++++++++++++++++++++++++++++++++++
 1 file changed, 69 insertions(+)
 create mode 100644 bin/v-fix-website-permissions

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
new file mode 100644
index 00000000..006194e4
--- /dev/null
+++ b/bin/v-fix-website-permissions
@@ -0,0 +1,69 @@
+#!/bin/bash
+# info: v-fix-website-permissions
+# options: DOMAIN 
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Argument definition
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/domain.sh
+
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+if [ ! -d "/home/$user" ]; then
+    echo "User doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    echo "Domain doesn't exist";
+    exit 1;
+fi
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# Ensure the directory exists and can be changed into
+cd /home/$USER/web/$domain || { echo "Error: Cannot change directory to /home/$USER/web/$domain. Directory does not exist."; exit 1; }
+
+echo "Updating permissions for /home/$USER/web/$domain/public_html/..."
+find public_html/ -type d -exec chmod 755 {} +
+find public_html/ -type f -exec chmod 644 {} +
+chown -R $USER:$USER public_html/
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+echo "Permissions for $domain have been successfully updated."
+
+exit

From a55b1601036e39702df90dcf7499a103638eb258 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Sat, 6 Jan 2024 11:39:49 +0100
Subject: [PATCH 2052/2300] Added: Email rate limit

---
 bin/v-commander | 52 +++++++++++++++++++++++++++++++++++++++----------
 1 file changed, 42 insertions(+), 10 deletions(-)

diff --git a/bin/v-commander b/bin/v-commander
index a3abef30..2bf2242d 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -60,23 +60,24 @@ check_status() {
 
 myhelp() {
     echo "---------- Press: -----------"
-    echo "u  = apt-get update"
-    echo "g  = apt-get upgrade"
+    echo "a  = Activate Email rate limit"
+    echo "b  = bash"
     echo "c  = check status"
+    echo "d  = df -h"
     echo "e  = make sure Apache is in mpm_event"
-    echo "s  = download sury.org apt-get key"
+    echo "f  = free -h"
+    echo "g  = apt-get upgrade"
+    echo "h  = help"
     echo "m  = install php-memcached"
     echo "p  = set version of php as default"
+    echo "q  = quit"
+    echo "r  = reboot"
+    echo "s  = download sury.org apt-get key"
+    echo "t  = clean the trash"
+    echo "u  = apt-get update"
     echo "v  = update myVesta"
     echo "vo = update myVesta without 'apt-get update'"
-    echo "t  = clean the trash"
     echo "w  = w"
-    echo "d  = df -h"
-    echo "f  = free -h"
-    echo "b  = bash"
-    echo "r  = reboot"
-    echo "q  = quit"
-    echo "h  = help"
     echo "-----------------------------"
     echo "inst v                = install myVesta"
     echo "inst p                = install multi-php"
@@ -129,6 +130,37 @@ do
         quit_on_empty=1
     fi
 
+
+    if [ "$answer" = 'a' ] || [ "$answer" = 'A' ]; then
+    mv /etc/exim4/exim4.conf.template /etc/exim4/exim4.conf.template-backup
+    cp /usr/local/vesta/install/debian/12/exim/exim4.conf.template /etc/exim4/exim4.conf.template
+
+    touch /etc/exim4/limit_per_email_account_max_sent_emails_per_hour
+    touch /etc/exim4/limit_per_email_account_max_recipients
+    touch /etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour
+    touch /etc/exim4/limit_per_hosting_account_max_recipients
+
+    check_grep=$(grep -c '#SPAMASSASSIN' /etc/exim4/exim4.conf.template-backup)
+    if [ "$check_grep" -eq 0 ]; then
+        sed -i "s|#SPAMASSASSIN|SPAMASSASSIN|g" /etc/exim4/exim4.conf.template
+    fi
+
+    check_grep=$(grep -c '#SPAM_SCORE' /etc/exim4/exim4.conf.template-backup)
+    if [ "$check_grep" -eq 0 ]; then
+        sed -i "s|#SPAM_SCORE|SPAM_SCORE|g" /etc/exim4/exim4.conf.template
+    fi
+
+    check_grep=$(grep -c '#CLAMD' /etc/exim4/exim4.conf.template-backup)
+    if [ "$check_grep" -eq 0 ]; then
+        sed -i "s|#CLAMD|CLAMD|g" /etc/exim4/exim4.conf.template
+    fi
+
+    systemctl restart exim4
+    echo "Email rate limit activated."
+    fi
+
+
+
     if [ "$answer" = 'u' ] || [ "$answer" = 'U' ]; then
         echo "============================="
         echo "== running: apt-get update"

From 942b46a6574abf1e637488c34da74c0aff5c790d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 7 Jan 2024 21:51:00 +0100
Subject: [PATCH 2053/2300] v-php-func takes STDIN only if --stdin parameter is
 passed

---
 bin/v-grep                       | 12 +++++++++---
 bin/v-php-func                   |  2 +-
 bin/v-sed                        | 12 +++++++++---
 func/bash-to-php-interpreter.php | 33 +++++++++++++++++++++-----------
 4 files changed, 41 insertions(+), 18 deletions(-)

diff --git a/bin/v-grep b/bin/v-grep
index 045751a5..9ea821e5 100644
--- a/bin/v-grep
+++ b/bin/v-grep
@@ -9,13 +9,19 @@
 #----------------------------------------------------------#
 
 
-if [ -p /dev/stdin ]; then
+if [ "$1" == "--stdin" ] && [ -p /dev/stdin ]; then
     STDIN=$(cat -)
     if [ ! -z "$STDIN" ]; then
-        echo "$STDIN" | php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_grep' "$@"
+        shift;
+        echo "$STDIN" | php /usr/local/vesta/func/bash-to-php-interpreter.php '--stdin' 'myvesta_grep' "$@"
         exit $?
     fi
 fi
 
-php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_grep' "$@"
+if [ "$1" == "--stdin" ]; then
+    shift;
+    php /usr/local/vesta/func/bash-to-php-interpreter.php '--stdin' 'myvesta_grep' "$@"
+else
+    php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_grep' "$@"
+fi
 exit $?
diff --git a/bin/v-php-func b/bin/v-php-func
index 0c789863..925cc91e 100644
--- a/bin/v-php-func
+++ b/bin/v-php-func
@@ -9,7 +9,7 @@
 #----------------------------------------------------------#
 
 
-if [ -p /dev/stdin ]; then
+if [ "$1" == "--stdin" ] && [ -p /dev/stdin ]; then
     STDIN=$(cat -)
     if [ ! -z "$STDIN" ]; then
         echo "$STDIN" | php /usr/local/vesta/func/bash-to-php-interpreter.php "$@"
diff --git a/bin/v-sed b/bin/v-sed
index 9d1a82ee..16e8ad2b 100644
--- a/bin/v-sed
+++ b/bin/v-sed
@@ -9,13 +9,19 @@
 #----------------------------------------------------------#
 
 
-if [ -p /dev/stdin ]; then
+if [ "$1" == "--stdin" ] && [ -p /dev/stdin ]; then
     STDIN=$(cat -)
     if [ ! -z "$STDIN" ]; then
-        echo "$STDIN" | php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_sed' "$@"
+        shift;
+        echo "$STDIN" | php /usr/local/vesta/func/bash-to-php-interpreter.php '--stdin' 'myvesta_sed' "$@"
         exit $?
     fi
 fi
 
-php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_sed' "$@"
+if [ "$1" == "--stdin" ]; then
+    shift;
+    php /usr/local/vesta/func/bash-to-php-interpreter.php '--stdin' 'myvesta_sed' "$@"
+else
+    php /usr/local/vesta/func/bash-to-php-interpreter.php 'myvesta_sed' "$@"
+fi
 exit $?
diff --git a/func/bash-to-php-interpreter.php b/func/bash-to-php-interpreter.php
index 4c1e9dc5..b437c3c9 100644
--- a/func/bash-to-php-interpreter.php
+++ b/func/bash-to-php-interpreter.php
@@ -7,13 +7,22 @@ else $SHLVL=3;
 
 if (!isset($argv)) exit(5);
 
-stream_set_blocking(STDIN, false);
-$myvesta_stdin='';
-$myvesta_f = fopen( 'php://stdin', 'r' );
-while( $myvesta_line = fgets( $myvesta_f ) ) {
-    $myvesta_stdin .= $myvesta_line;
+$argv_start=1;
+$STDIN_ENABLED=false;
+if ($argv[1]=='--stdin') {
+    $STDIN_ENABLED=true;
+    $argv_start++;
+}
+
+$myvesta_stdin='';
+if ($STDIN_ENABLED==true) {
+    stream_set_blocking(STDIN, false);
+    $myvesta_f = fopen( 'php://stdin', 'r' );
+    while( $myvesta_line = fgets( $myvesta_f ) ) {
+        $myvesta_stdin .= $myvesta_line;
+    }
+    fclose( $myvesta_f );
 }
-fclose( $myvesta_f );
 
 include ("/usr/local/vesta/func/main.php");
 include ("/usr/local/vesta/func/string.php");
@@ -21,9 +30,9 @@ include ("/usr/local/vesta/func/string.php");
 $counter=count($argv);
 if ($counter<2) myvesta_throw_error(2, 'Function is missing');
 
-$func=$argv[1];
+$func=$argv[$argv_start];
 if (!function_exists($func)) {
-    $func="myvesta_".$argv[1];    
+    $func="myvesta_".$argv[$argv_start];    
     if (!function_exists($func)) myvesta_throw_error(2, 'Function does not exists');
 }
 
@@ -36,10 +45,12 @@ $params=array();
 $added=0;
 $stdin_content='';
 $myvesta_stdin_from_file='';
- $myvesta_stdin_return_not_found=false;
+$myvesta_stdin_return_not_found=false;
 if ($myvesta_stdin!='' && $insert_stdin_at_position===false) {$params[]=$myvesta_stdin; $added++;}
 
-for ($i=2; $i<$counter; $i++) {
+$argv_start++;
+
+for ($i=$argv_start; $i<$counter; $i++) {
     $argv[$i]=myvesta_fix_backslashes($argv[$i]);
     //if ($insert_stdin_at_position!==false && $myvesta_stdin=='') if ($insert_stdin_at_position==$added) {$stdin_content=$argv[$i]; $added++; continue;}
     $params[]=$argv[$i];
@@ -48,7 +59,7 @@ for ($i=2; $i<$counter; $i++) {
 //print_r($params); exit;
 
 if ($insert_stdin_at_position!=false) {
-    if ($myvesta_stdin=='') {
+    if ($myvesta_stdin=='' && isset($params[$insert_stdin_at_position])) {
         $file_or_stdin=$params[$insert_stdin_at_position];
         if (!file_exists($file_or_stdin)) {
             $myvesta_stdin_return_not_found=true;

From db6ba149c6401cd9edb6ab1c8cd635c801ff3d7e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 7 Jan 2024 22:16:40 +0100
Subject: [PATCH 2054/2300] Apache templates for PHP 8.3

---
 .../tools/apache-fpm-tpl/PHP-FPM-83-public.sh | 126 ++++++++++++++++++
 .../apache-fpm-tpl/PHP-FPM-83-public.stpl     |  36 +++++
 .../apache-fpm-tpl/PHP-FPM-83-public.tpl      |  30 +++++
 .../tools/apache-fpm-tpl/PHP-FPM-83.sh        | 126 ++++++++++++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-83.stpl      |  36 +++++
 .../tools/apache-fpm-tpl/PHP-FPM-83.tpl       |  30 +++++
 6 files changed, 384 insertions(+)
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.tpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.tpl

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.sh
new file mode 100644
index 00000000..38b23122
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.sh
@@ -0,0 +1,126 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php8.3-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 360s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
+pool_file_82="/etc/php/8.2/fpm/pool.d/$2.conf"
+pool_file_82="/etc/php/8.3/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+if [ -f "$pool_file_81" ]; then
+    rm $pool_file_81
+    systemctl reset-failed php8.1-fpm
+    systemctl restart php8.1-fpm
+fi
+
+if [ -f "$pool_file_82" ]; then
+    rm $pool_file_82
+    systemctl reset-failed php8.2-fpm
+    systemctl restart php8.2-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_83" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_83)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_83
+    systemctl reset-failed php8.3-fpm
+    systemctl restart php8.3-fpm
+fi
+if [ -f "/etc/php/8.3/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.3/fpm/pool.d/www.conf
+fi
+
+exit 0
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.stpl
new file mode 100644
index 00000000..cceed0ee
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.stpl
@@ -0,0 +1,36 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.tpl
new file mode 100644
index 00000000..ac952817
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.tpl
@@ -0,0 +1,30 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
+    </Directory>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.sh
new file mode 100644
index 00000000..38b23122
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.sh
@@ -0,0 +1,126 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php8.3-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 360s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
+pool_file_82="/etc/php/8.2/fpm/pool.d/$2.conf"
+pool_file_82="/etc/php/8.3/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+if [ -f "$pool_file_81" ]; then
+    rm $pool_file_81
+    systemctl reset-failed php8.1-fpm
+    systemctl restart php8.1-fpm
+fi
+
+if [ -f "$pool_file_82" ]; then
+    rm $pool_file_82
+    systemctl reset-failed php8.2-fpm
+    systemctl restart php8.2-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_83" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_83)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_83
+    systemctl reset-failed php8.3-fpm
+    systemctl restart php8.3-fpm
+fi
+if [ -f "/etc/php/8.3/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.3/fpm/pool.d/www.conf
+fi
+
+exit 0
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.stpl
new file mode 100644
index 00000000..f043bfa8
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.stpl
@@ -0,0 +1,36 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
+	</Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.tpl
new file mode 100644
index 00000000..9b5bf916
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.tpl
@@ -0,0 +1,30 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
+    </Directory>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.3-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+

From 08d0db0c6f13dd364773186f22476d70be08c3d5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 7 Jan 2024 22:19:17 +0100
Subject: [PATCH 2055/2300] php8.3 templetes typo fix

---
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.sh | 2 +-
 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.sh        | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.sh
index 38b23122..f5e7c6fd 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83-public.sh
@@ -49,7 +49,7 @@ pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
 pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
 pool_file_82="/etc/php/8.2/fpm/pool.d/$2.conf"
-pool_file_82="/etc/php/8.3/fpm/pool.d/$2.conf"
+pool_file_83="/etc/php/8.3/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.sh
index 38b23122..f5e7c6fd 100644
--- a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.sh
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-83.sh
@@ -49,7 +49,7 @@ pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
 pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
 pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
 pool_file_82="/etc/php/8.2/fpm/pool.d/$2.conf"
-pool_file_82="/etc/php/8.3/fpm/pool.d/$2.conf"
+pool_file_83="/etc/php/8.3/fpm/pool.d/$2.conf"
 
 if [ -f "$pool_file_56" ]; then
     rm $pool_file_56

From 8ef3fb03573eb0a264f622d55b7b957448d63425 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 7 Jan 2024 22:35:06 +0100
Subject: [PATCH 2056/2300] PHP 8.3 support

---
 .../for-download/tools/multi-php-install.sh   | 37 ++++++++++++++++++-
 1 file changed, 36 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index d1b36ced..b4432ea1 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -13,6 +13,7 @@ inst_74=0
 inst_80=0
 inst_81=0
 inst_82=0
+inst_83=0
 
 #######################################################################
 
@@ -56,8 +57,11 @@ fi
 if [ $# -gt 9 ]; then
     inst_82=${10}
 fi
+if [ $# -gt 10 ]; then
+    inst_83=${11}
+fi
 
-if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ] || [ $inst_74 -eq 1 ] || [ $inst_80 -eq 1 ] || [ $inst_81 -eq 1 ] || [ $inst_82 -eq 1 ]; then
+if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ] || [ $inst_74 -eq 1 ] || [ $inst_80 -eq 1 ] || [ $inst_81 -eq 1 ] || [ $inst_82 -eq 1 ] || [ $inst_83 -eq 1 ]; then
     inst_repo=1
 fi
 
@@ -87,6 +91,7 @@ echo "inst_74=$inst_74"
 echo "inst_80=$inst_80"
 echo "inst_81=$inst_81"
 echo "inst_82=$inst_82"
+echo "inst_83=$inst_83"
 echo "wait_to_press_enter=$wait_to_press_enter"
 
 press_enter "=== Press enter to continue ==============================================================================="
@@ -340,6 +345,33 @@ if [ "$inst_82" -eq 1 ]; then
     press_enter "=== PHP 8.2 installed, press enter to continue ==============================================================================="
 fi
 
+if [ "$inst_83" -eq 1 ]; then
+    press_enter "=== Press enter to install PHP 8.3 ==============================================================================="
+    apt -y install php8.3-mbstring php8.3-bcmath php8.3-cli php8.3-curl php8.3-fpm php8.3-gd php8.3-intl php8.3-mysql php8.3-soap php8.3-xml php8.3-zip php8.3-memcache php8.3-memcached php8.3-imagick
+    update-rc.d php8.3-fpm defaults
+    a2enconf php8.3-fpm
+    a2dismod php8.3
+    apt-get -y remove libapache2-mod-php8.3
+    systemctl restart apache2
+    cp -r /etc/php/8.3/ /root/vst_install_backups/php8.3/
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-83.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-83.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-83.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-83.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-83.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-83.sh
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-83-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-83-public.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-83-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-83-public.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-83-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-83-public.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-83.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-83-public.sh
+    echo "=== Patching php.ini for php8.3"
+    wget -nv https://c.myvestacp.com/tools/patches/php8.2.patch -O /root/php8.3.patch
+    patch /etc/php/8.3/fpm/php.ini < /root/php8.3.patch
+    if [ $memory -gt 9999999 ]; then
+        sed -i "s|opcache.memory_consumption=512|opcache.memory_consumption=2048|g" /etc/php/8.3/fpm/php.ini
+    fi
+    service php8.3-fpm restart
+    press_enter "=== PHP 8.3 installed, press enter to continue ==============================================================================="
+fi
+
 
 apt update > /dev/null 2>&1
 apt upgrade -y > /dev/null 2>&1
@@ -386,5 +418,8 @@ if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then
     # sleep 1
     nohup php /usr/local/bin/tailf_apache_error.php > /var/log/tailf_apache_error.log &
     echo "=== upgrading tailf_apache_error.php done."
+    sleep 3
+    echo ""
+    echo "Everything done."
     echo ""
 fi

From add9c5c5e77eb9fd20915443e3cca84834f26aae Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 7 Jan 2024 22:36:29 +0100
Subject: [PATCH 2057/2300] php8.3 installer fix

---
 src/deb/for-download/tools/multi-php-install.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index b4432ea1..bea7774f 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -388,6 +388,7 @@ if [ $debian_version -ge 10 ]; then
     a2dismod php8.0 > /dev/null 2>&1
     a2dismod php8.1 > /dev/null 2>&1
     a2dismod php8.2 > /dev/null 2>&1
+    a2dismod php8.3 > /dev/null 2>&1
     a2dismod mpm_prefork > /dev/null 2>&1
     a2enmod mpm_event > /dev/null 2>&1
     apt-get -y remove libapache2-mod-php* > /dev/null 2>&1

From c3720e5d5e5b909616934806941a7f54b39eb4e5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 7 Jan 2024 23:47:44 +0100
Subject: [PATCH 2058/2300] Fixing typo in secure_login.php

Thanks to @gathlete - https://forum.myvestacp.com/viewtopic.php?t=928
---
 web/inc/secure_login.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/inc/secure_login.php b/web/inc/secure_login.php
index 3dcdb0ae..d21a4322 100644
--- a/web/inc/secure_login.php
+++ b/web/inc/secure_login.php
@@ -59,7 +59,7 @@ function prevent_post_csrf ($hard_check=false) {
             if (isset($_SERVER['HTTP_ORIGIN']) == false) return;
         } else {
             if (isset($_SERVER['HTTP_HOST']) == false) $_SERVER['HTTP_HOST'] = '';
-            if (isset($_SERVER['SERVER_PORT']) == false) $_SERVER['HTTP_PORT'] = '';
+            if (isset($_SERVER['SERVER_PORT']) == false) $_SERVER['SERVER_PORT'] = '';
             if (isset($_SERVER['HTTP_ORIGIN']) == false) $_SERVER['HTTP_ORIGIN'] = '';
         }
         $_SERVER['HTTP_HOST'] = strtolower($_SERVER['HTTP_HOST']);

From bdde36d4e3a3c7c2ff47332775cb7521aebd72e1 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 8 Jan 2024 09:34:57 +0100
Subject: [PATCH 2059/2300] Update v-fix-website-permissions

---
 bin/v-fix-website-permissions | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 006194e4..28a3cb9f 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -23,7 +23,6 @@ USER=$user
 
 # Includes
 source /usr/local/vesta/func/main.sh
-source /usr/local/vesta/func/domain.sh
 
 if [ -z "$user" ]; then
     check_result $E_NOTEXIST "domain $domain doesn't exist"
@@ -36,7 +35,6 @@ fi
 check_args '1' "$#" 'DOMAIN'
 is_format_valid 'domain'
 is_object_valid 'user' 'USER' "$user"
-is_object_unsuspended 'user' 'USER' "$user"
 
 if [ ! -d "/home/$user" ]; then
     echo "User doesn't exist";
@@ -54,9 +52,9 @@ fi
 #----------------------------------------------------------#
 
 # Ensure the directory exists and can be changed into
-cd /home/$USER/web/$domain || { echo "Error: Cannot change directory to /home/$USER/web/$domain. Directory does not exist."; exit 1; }
+cd /home/$USER/web/$domain
 
-echo "Updating permissions for /home/$USER/web/$domain/public_html/..."
+echo "Updating permissions for /home/$USER/web/$domain/public_html/"
 find public_html/ -type d -exec chmod 755 {} +
 find public_html/ -type f -exec chmod 644 {} +
 chown -R $USER:$USER public_html/

From ecf419cb88ec3054c71ae55802d57132a9b36dbf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 8 Jan 2024 09:39:24 +0100
Subject: [PATCH 2060/2300] Update v-fix-website-permissions

---
 bin/v-fix-website-permissions | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 28a3cb9f..08f948fc 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -19,15 +19,16 @@ source /etc/profile
 domain=$1
 
 user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
-USER=$user
-
-# Includes
-source /usr/local/vesta/func/main.sh
 
 if [ -z "$user" ]; then
     check_result $E_NOTEXIST "domain $domain doesn't exist"
 fi
 
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#
@@ -51,7 +52,7 @@ fi
 #                       Action                             #
 #----------------------------------------------------------#
 
-# Ensure the directory exists and can be changed into
+# Going to domain directory
 cd /home/$USER/web/$domain
 
 echo "Updating permissions for /home/$USER/web/$domain/public_html/"

From f400b401d2d958d08fa5374ecd40264ba49fa8b7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 8 Jan 2024 09:41:12 +0100
Subject: [PATCH 2061/2300] Update v-fix-website-permissions

---
 bin/v-fix-website-permissions | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 08f948fc..5db797a7 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -12,8 +12,9 @@ if [ "$whoami" != "root" ]; then
     exit 1
 fi
 
-# Importing system environment
+# Importing system environment and includes
 source /etc/profile
+source /usr/local/vesta/func/main.sh
 
 # Argument definition
 domain=$1
@@ -26,9 +27,6 @@ fi
 
 USER=$user
 
-# Includes
-source /usr/local/vesta/func/main.sh
-
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#

From 1a6562eb87076f03061a7c3713302744a60b9848 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 8 Jan 2024 09:43:54 +0100
Subject: [PATCH 2062/2300] Update v-fix-website-permissions

---
 bin/v-fix-website-permissions | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 5db797a7..0ab95459 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -1,5 +1,5 @@
 #!/bin/bash
-# info: v-fix-website-permissions
+# info: Fixing chown and chmod permissions in the public_html directory
 # options: DOMAIN 
 
 #----------------------------------------------------------#
@@ -45,7 +45,6 @@ if [ ! -d "/home/$user/web/$domain/public_html" ]; then
     exit 1;
 fi
 
-
 #----------------------------------------------------------#
 #                       Action                             #
 #----------------------------------------------------------#

From 003f35810b6118a2171ad0acd05e8662f6c4badc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 8 Jan 2024 09:49:04 +0100
Subject: [PATCH 2063/2300] Update v-fix-website-permissions

---
 bin/v-fix-website-permissions | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 0ab95459..a63954eb 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -12,15 +12,17 @@ if [ "$whoami" != "root" ]; then
     exit 1
 fi
 
-# Importing system environment and includes
+# Importing system environment
 source /etc/profile
-source /usr/local/vesta/func/main.sh
 
 # Argument definition
 domain=$1
 
 user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
 
+# Includes
+source /usr/local/vesta/func/main.sh
+
 if [ -z "$user" ]; then
     check_result $E_NOTEXIST "domain $domain doesn't exist"
 fi

From b0b3a9403f50252ac63bb0d888f66307cc95902e Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Mon, 15 Jan 2024 17:08:52 +0100
Subject: [PATCH 2064/2300] Update Wordfence WAF Path

---
 bin/v-clone-website | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 46623db4..dfac1c25 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -431,6 +431,33 @@ else
     sudo -H -u$TO_USER wp config shuffle-salts
 fi
 
+# ----------- Update Wordfence WAF Path -------------
+
+# Path to .user.ini file
+user_ini="$TO_USER/web/$TO_DOMAIN/public_html/.user.ini"
+
+# Check if .user.ini exists
+if [ -f "$user_ini" ]; then
+    echo "Updating .user.ini with new user path..."
+
+    # Temporary file for modification
+    tmp_file=$(mktemp)
+
+    # Change path from old USER to new USER_TO
+    sed "s|/home/$FROM_USER/public_html|/home/$TO_USER/public_html|g" "$user_ini" > "$tmp_file"
+
+    # Check if replacement was successful and update .user.ini
+    if [ $? -eq 0 ]; then
+        mv "$tmp_file" "$user_ini"
+        echo ".user.ini updated successfully."
+    else
+        echo "Failed to update .user.ini file."
+        rm "$tmp_file"  # Deletes temporary file
+    fi
+else
+    echo ".user.ini does not exist, no changes made."
+fi
+
 echo "===== DONE ===="
 echo "You can visit http://$TO_DOMAIN/"
 

From cf1eacde1d9c83ad7409149647194193f5861d69 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Mon, 15 Jan 2024 17:52:06 +0100
Subject: [PATCH 2065/2300] Update Wordfence WAF Path

---
 bin/v-clone-website | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index dfac1c25..afb37904 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -433,18 +433,18 @@ fi
 
 # ----------- Update Wordfence WAF Path -------------
 
-# Path to .user.ini file
-user_ini="$TO_USER/web/$TO_DOMAIN/public_html/.user.ini"
+# Path to .user.ini file in the new domain directory
+user_ini="/home/$TO_USER/web/$TO_DOMAIN/public_html/.user.ini"
 
 # Check if .user.ini exists
 if [ -f "$user_ini" ]; then
-    echo "Updating .user.ini with new user path..."
+    echo "Updating .user.ini with new path..."
 
     # Temporary file for modification
     tmp_file=$(mktemp)
 
-    # Change path from old USER to new USER_TO
-    sed "s|/home/$FROM_USER/public_html|/home/$TO_USER/public_html|g" "$user_ini" > "$tmp_file"
+    # Change path from old domain to new domain
+    sed "s|/home/$FROM_USER/web/$FROM_DOMAIN/public_html|/home/$TO_USER/web/$TO_DOMAIN/public_html|g" "$user_ini" > "$tmp_file"
 
     # Check if replacement was successful and update .user.ini
     if [ $? -eq 0 ]; then

From a43eef9c9b553074e2a0849438bd2475b55722b5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 15 Jan 2024 18:06:36 +0100
Subject: [PATCH 2066/2300] Updating WAF path in v-clone-website

---
 bin/v-clone-website | 9 +--------
 1 file changed, 1 insertion(+), 8 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index afb37904..0daf403c 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -440,22 +440,15 @@ user_ini="/home/$TO_USER/web/$TO_DOMAIN/public_html/.user.ini"
 if [ -f "$user_ini" ]; then
     echo "Updating .user.ini with new path..."
 
-    # Temporary file for modification
-    tmp_file=$(mktemp)
-
     # Change path from old domain to new domain
-    sed "s|/home/$FROM_USER/web/$FROM_DOMAIN/public_html|/home/$TO_USER/web/$TO_DOMAIN/public_html|g" "$user_ini" > "$tmp_file"
+    sed -i "s|/home/.*/public_html|/home/$TO_USER/web/$TO_DOMAIN/public_html|g" $user_ini
 
     # Check if replacement was successful and update .user.ini
     if [ $? -eq 0 ]; then
-        mv "$tmp_file" "$user_ini"
         echo ".user.ini updated successfully."
     else
         echo "Failed to update .user.ini file."
-        rm "$tmp_file"  # Deletes temporary file
     fi
-else
-    echo ".user.ini does not exist, no changes made."
 fi
 
 echo "===== DONE ===="

From 834fcfcf127ded21b5eab3a1afaa859603af04e5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 22 Jan 2024 18:42:14 +0100
Subject: [PATCH 2067/2300] php8.3 fpm www.conf

---
 .../tools/default-pool.d/8.3/www.conf         | 490 ++++++++++++++++++
 1 file changed, 490 insertions(+)
 create mode 100644 src/deb/for-download/tools/default-pool.d/8.3/www.conf

diff --git a/src/deb/for-download/tools/default-pool.d/8.3/www.conf b/src/deb/for-download/tools/default-pool.d/8.3/www.conf
new file mode 100644
index 00000000..f18939a3
--- /dev/null
+++ b/src/deb/for-download/tools/default-pool.d/8.3/www.conf
@@ -0,0 +1,490 @@
+; Start a new pool named 'www'.
+; the variable $pool can be used in any directive and will be replaced by the
+; pool name ('www' here)
+[www]
+
+; Per pool prefix
+; It only applies on the following directives:
+; - 'access.log'
+; - 'slowlog'
+; - 'listen' (unixsocket)
+; - 'chroot'
+; - 'chdir'
+; - 'php_values'
+; - 'php_admin_values'
+; When not set, the global prefix (or /usr) applies instead.
+; Note: This directive can also be relative to the global prefix.
+; Default Value: none
+;prefix = /path/to/pools/$pool
+
+; Unix user/group of the child processes. This can be used only if the master
+; process running user is root. It is set after the child process is created.
+; The user and group can be specified either by their name or by their numeric
+; IDs.
+; Note: If the user is root, the executable needs to be started with
+;       --allow-to-run-as-root option to work.
+; Default Values: The user is set to master process running user by default.
+;                 If the group is not set, the user's group is used.
+user = www-data
+group = www-data
+
+; The address on which to accept FastCGI requests.
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Note: This value is mandatory.
+listen = /run/php/php8.3-fpm.sock
+
+; Set listen(2) backlog.
+; Default Value: 511 (-1 on Linux, FreeBSD and OpenBSD)
+;listen.backlog = 511
+
+; Set permissions for unix socket, if one is used. In Linux, read/write
+; permissions must be set in order to allow connections from a web server. Many
+; BSD-derived systems allow connections regardless of permissions. The owner
+; and group can be specified either by name or by their numeric IDs.
+; Default Values: Owner is set to the master process running user. If the group
+;                 is not set, the owner's group is used. Mode is set to 0660.
+listen.owner = www-data
+listen.group = www-data
+;listen.mode = 0660
+
+; When POSIX Access Control Lists are supported you can set them using
+; these options, value is a comma separated list of user/group names.
+; When set, listen.owner and listen.group are ignored
+;listen.acl_users =
+;listen.acl_groups =
+
+; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
+; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
+; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
+; must be separated by a comma. If this value is left blank, connections will be
+; accepted from any ip address.
+; Default Value: any
+;listen.allowed_clients = 127.0.0.1
+
+; Set the associated the route table (FIB). FreeBSD only
+; Default Value: -1
+;listen.setfib = 1
+
+; Specify the nice(2) priority to apply to the pool processes (only if set)
+; The value can vary from -19 (highest priority) to 20 (lower priority)
+; Note: - It will only work if the FPM master process is launched as root
+;       - The pool processes will inherit the master process priority
+;         unless it specified otherwise
+; Default Value: no set
+; process.priority = -19
+
+; Set the process dumpable flag (PR_SET_DUMPABLE prctl for Linux or
+; PROC_TRACE_CTL procctl for FreeBSD) even if the process user
+; or group is different than the master process user. It allows to create process
+; core dump and ptrace the process for the pool user.
+; Default Value: no
+; process.dumpable = yes
+
+; Choose how the process manager will control the number of child processes.
+; Possible Values:
+;   static  - a fixed number (pm.max_children) of child processes;
+;   dynamic - the number of child processes are set dynamically based on the
+;             following directives. With this process management, there will be
+;             always at least 1 children.
+;             pm.max_children      - the maximum number of children that can
+;                                    be alive at the same time.
+;             pm.start_servers     - the number of children created on startup.
+;             pm.min_spare_servers - the minimum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is less than this
+;                                    number then some children will be created.
+;             pm.max_spare_servers - the maximum number of children in 'idle'
+;                                    state (waiting to process). If the number
+;                                    of 'idle' processes is greater than this
+;                                    number then some children will be killed.
+;             pm.max_spawn_rate    - the maximum number of rate to spawn child
+;                                    processes at once.
+;  ondemand - no children are created at startup. Children will be forked when
+;             new requests will connect. The following parameter are used:
+;             pm.max_children           - the maximum number of children that
+;                                         can be alive at the same time.
+;             pm.process_idle_timeout   - The number of seconds after which
+;                                         an idle process will be killed.
+; Note: This value is mandatory.
+pm = dynamic
+
+; The number of child processes to be created when pm is set to 'static' and the
+; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
+; This value sets the limit on the number of simultaneous requests that will be
+; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
+; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
+; CGI. The below defaults are based on a server without much resources. Don't
+; forget to tweak pm.* to fit your needs.
+; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
+; Note: This value is mandatory.
+pm.max_children = 5
+
+; The number of child processes created on startup.
+; Note: Used only when pm is set to 'dynamic'
+; Default Value: (min_spare_servers + max_spare_servers) / 2
+pm.start_servers = 2
+
+; The desired minimum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.min_spare_servers = 1
+
+; The desired maximum number of idle server processes.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+pm.max_spare_servers = 3
+
+; The number of rate to spawn child processes at once.
+; Note: Used only when pm is set to 'dynamic'
+; Note: Mandatory when pm is set to 'dynamic'
+; Default Value: 32
+;pm.max_spawn_rate = 32
+
+; The number of seconds after which an idle process will be killed.
+; Note: Used only when pm is set to 'ondemand'
+; Default Value: 10s
+;pm.process_idle_timeout = 10s;
+
+; The number of requests each child process should execute before respawning.
+; This can be useful to work around memory leaks in 3rd party libraries. For
+; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
+; Default Value: 0
+;pm.max_requests = 500
+
+; The URI to view the FPM status page. If this value is not set, no URI will be
+; recognized as a status page. It shows the following information:
+;   pool                 - the name of the pool;
+;   process manager      - static, dynamic or ondemand;
+;   start time           - the date and time FPM has started;
+;   start since          - number of seconds since FPM has started;
+;   accepted conn        - the number of request accepted by the pool;
+;   listen queue         - the number of request in the queue of pending
+;                          connections (see backlog in listen(2));
+;   max listen queue     - the maximum number of requests in the queue
+;                          of pending connections since FPM has started;
+;   listen queue len     - the size of the socket queue of pending connections;
+;   idle processes       - the number of idle processes;
+;   active processes     - the number of active processes;
+;   total processes      - the number of idle + active processes;
+;   max active processes - the maximum number of active processes since FPM
+;                          has started;
+;   max children reached - number of times, the process limit has been reached,
+;                          when pm tries to start more children (works only for
+;                          pm 'dynamic' and 'ondemand');
+; Value are updated in real time.
+; Example output:
+;   pool:                 www
+;   process manager:      static
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          62636
+;   accepted conn:        190460
+;   listen queue:         0
+;   max listen queue:     1
+;   listen queue len:     42
+;   idle processes:       4
+;   active processes:     11
+;   total processes:      15
+;   max active processes: 12
+;   max children reached: 0
+;
+; By default the status page output is formatted as text/plain. Passing either
+; 'html', 'xml' or 'json' in the query string will return the corresponding
+; output syntax. Example:
+;   http://www.foo.bar/status
+;   http://www.foo.bar/status?json
+;   http://www.foo.bar/status?html
+;   http://www.foo.bar/status?xml
+;
+; By default the status page only outputs short status. Passing 'full' in the
+; query string will also return status for each pool process.
+; Example:
+;   http://www.foo.bar/status?full
+;   http://www.foo.bar/status?json&full
+;   http://www.foo.bar/status?html&full
+;   http://www.foo.bar/status?xml&full
+; The Full status returns for each process:
+;   pid                  - the PID of the process;
+;   state                - the state of the process (Idle, Running, ...);
+;   start time           - the date and time the process has started;
+;   start since          - the number of seconds since the process has started;
+;   requests             - the number of requests the process has served;
+;   request duration     - the duration in µs of the requests;
+;   request method       - the request method (GET, POST, ...);
+;   request URI          - the request URI with the query string;
+;   content length       - the content length of the request (only with POST);
+;   user                 - the user (PHP_AUTH_USER) (or '-' if not set);
+;   script               - the main script called (or '-' if not set);
+;   last request cpu     - the %cpu the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because CPU calculation is done when the request
+;                          processing has terminated;
+;   last request memory  - the max amount of memory the last request consumed
+;                          it's always 0 if the process is not in Idle state
+;                          because memory calculation is done when the request
+;                          processing has terminated;
+; If the process is in Idle state, then informations are related to the
+; last request the process has served. Otherwise informations are related to
+; the current request being served.
+; Example output:
+;   ************************
+;   pid:                  31330
+;   state:                Running
+;   start time:           01/Jul/2011:17:53:49 +0200
+;   start since:          63087
+;   requests:             12808
+;   request duration:     1250261
+;   request method:       GET
+;   request URI:          /test_mem.php?N=10000
+;   content length:       0
+;   user:                 -
+;   script:               /home/fat/web/docs/php/test_mem.php
+;   last request cpu:     0.00
+;   last request memory:  0
+;
+; Note: There is a real-time FPM status monitoring sample web page available
+;       It's available in: /usr/share/php/8.3/fpm/status.html
+;
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;pm.status_path = /status
+
+; The address on which to accept FastCGI status request. This creates a new
+; invisible pool that can handle requests independently. This is useful
+; if the main pool is busy with long running requests because it is still possible
+; to get the status before finishing the long running requests.
+;
+; Valid syntaxes are:
+;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
+;                            a specific port;
+;   '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
+;                            a specific port;
+;   'port'                 - to listen on a TCP socket to all addresses
+;                            (IPv6 and IPv4-mapped) on a specific port;
+;   '/path/to/unix/socket' - to listen on a unix socket.
+; Default Value: value of the listen option
+;pm.status_listen = 127.0.0.1:9001
+
+; The ping URI to call the monitoring page of FPM. If this value is not set, no
+; URI will be recognized as a ping page. This could be used to test from outside
+; that FPM is alive and responding, or to
+; - create a graph of FPM availability (rrd or such);
+; - remove a server from a group if it is not responding (load balancing);
+; - trigger alerts for the operating team (24/7).
+; Note: The value must start with a leading slash (/). The value can be
+;       anything, but it may not be a good idea to use the .php extension or it
+;       may conflict with a real PHP file.
+; Default Value: not set
+;ping.path = /ping
+
+; This directive may be used to customize the response of a ping request. The
+; response is formatted as text/plain with a 200 response code.
+; Default Value: pong
+;ping.response = pong
+
+; The access log file
+; Default: not set
+;access.log = log/$pool.access.log
+
+; The access log format.
+; The following syntax is allowed
+;  %%: the '%' character
+;  %C: %CPU used by the request
+;      it can accept the following format:
+;      - %{user}C for user CPU only
+;      - %{system}C for system CPU only
+;      - %{total}C  for user + system CPU (default)
+;  %d: time taken to serve the request
+;      it can accept the following format:
+;      - %{seconds}d (default)
+;      - %{milliseconds}d
+;      - %{milli}d
+;      - %{microseconds}d
+;      - %{micro}d
+;  %e: an environment variable (same as $_ENV or $_SERVER)
+;      it must be associated with embraces to specify the name of the env
+;      variable. Some examples:
+;      - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
+;      - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
+;  %f: script filename
+;  %l: content-length of the request (for POST request only)
+;  %m: request method
+;  %M: peak of memory allocated by PHP
+;      it can accept the following format:
+;      - %{bytes}M (default)
+;      - %{kilobytes}M
+;      - %{kilo}M
+;      - %{megabytes}M
+;      - %{mega}M
+;  %n: pool name
+;  %o: output header
+;      it must be associated with embraces to specify the name of the header:
+;      - %{Content-Type}o
+;      - %{X-Powered-By}o
+;      - %{Transfert-Encoding}o
+;      - ....
+;  %p: PID of the child that serviced the request
+;  %P: PID of the parent of the child that serviced the request
+;  %q: the query string
+;  %Q: the '?' character if query string exists
+;  %r: the request URI (without the query string, see %q and %Q)
+;  %R: remote IP address
+;  %s: status (response code)
+;  %t: server time the request was received
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsulated in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %T: time the log has been written (the request has finished)
+;      it can accept a strftime(3) format:
+;      %d/%b/%Y:%H:%M:%S %z (default)
+;      The strftime(3) format must be encapsulated in a %{<strftime_format>}t tag
+;      e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
+;  %u: remote user
+;
+; Default: "%R - %u %t \"%m %r\" %s"
+;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{milli}d %{kilo}M %C%%"
+
+; A list of request_uri values which should be filtered from the access log.
+;
+; As a security precuation, this setting will be ignored if:
+;     - the request method is not GET or HEAD; or
+;     - there is a request body; or
+;     - there are query parameters; or
+;     - the response code is outwith the successful range of 200 to 299
+;
+; Note: The paths are matched against the output of the access.format tag "%r".
+;       On common configurations, this may look more like SCRIPT_NAME than the
+;       expected pre-rewrite URI.
+;
+; Default Value: not set
+;access.suppress_path[] = /ping
+;access.suppress_path[] = /health_check.php
+
+; The log file for slow requests
+; Default Value: not set
+; Note: slowlog is mandatory if request_slowlog_timeout is set
+;slowlog = log/$pool.log.slow
+
+; The timeout for serving a single request after which a PHP backtrace will be
+; dumped to the 'slowlog' file. A value of '0s' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_slowlog_timeout = 0
+
+; Depth of slow log stack trace.
+; Default Value: 20
+;request_slowlog_trace_depth = 20
+
+; The timeout for serving a single request after which the worker process will
+; be killed. This option should be used when the 'max_execution_time' ini option
+; does not stop script execution for some reason. A value of '0' means 'off'.
+; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
+; Default Value: 0
+;request_terminate_timeout = 0
+
+; The timeout set by 'request_terminate_timeout' ini option is not engaged after
+; application calls 'fastcgi_finish_request' or when application has finished and
+; shutdown functions are being called (registered via register_shutdown_function).
+; This option will enable timeout limit to be applied unconditionally
+; even in such cases.
+; Default Value: no
+;request_terminate_timeout_track_finished = no
+
+; Set open file descriptor rlimit.
+; Default Value: system defined value
+;rlimit_files = 1024
+
+; Set max core size rlimit.
+; Possible Values: 'unlimited' or an integer greater or equal to 0
+; Default Value: system defined value
+;rlimit_core = 0
+
+; Chroot to this directory at the start. This value must be defined as an
+; absolute path. When this value is not set, chroot is not used.
+; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
+; of its subdirectories. If the pool prefix is not set, the global prefix
+; will be used instead.
+; Note: chrooting is a great security feature and should be used whenever
+;       possible. However, all PHP paths will be relative to the chroot
+;       (error_log, sessions.save_path, ...).
+; Default Value: not set
+;chroot =
+
+; Chdir to this directory at the start.
+; Note: relative path can be used.
+; Default Value: current directory or / when chroot
+;chdir = /var/www
+
+; Redirect worker stdout and stderr into main error log. If not set, stdout and
+; stderr will be redirected to /dev/null according to FastCGI specs.
+; Note: on highloaded environment, this can cause some delay in the page
+; process time (several ms).
+; Default Value: no
+;catch_workers_output = yes
+
+; Decorate worker output with prefix and suffix containing information about
+; the child that writes to the log and if stdout or stderr is used as well as
+; log level and time. This options is used only if catch_workers_output is yes.
+; Settings to "no" will output data as written to the stdout or stderr.
+; Default value: yes
+;decorate_workers_output = no
+
+; Clear environment in FPM workers
+; Prevents arbitrary environment variables from reaching FPM worker processes
+; by clearing the environment in workers before env vars specified in this
+; pool configuration are added.
+; Setting to "no" will make all environment variables available to PHP code
+; via getenv(), $_ENV and $_SERVER.
+; Default Value: yes
+;clear_env = no
+
+; Limits the extensions of the main script FPM will allow to parse. This can
+; prevent configuration mistakes on the web server side. You should only limit
+; FPM to .php extensions to prevent malicious users to use other extensions to
+; execute php code.
+; Note: set an empty value to allow all extensions.
+; Default Value: .php
+;security.limit_extensions = .php .php3 .php4 .php5 .php7
+
+; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
+; the current environment.
+; Default Value: clean env
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /tmp
+;env[TMPDIR] = /tmp
+;env[TEMP] = /tmp
+
+; Additional php.ini defines, specific to this pool of workers. These settings
+; overwrite the values previously defined in the php.ini. The directives are the
+; same as the PHP SAPI:
+;   php_value/php_flag             - you can set classic ini defines which can
+;                                    be overwritten from PHP call 'ini_set'.
+;   php_admin_value/php_admin_flag - these directives won't be overwritten by
+;                                     PHP call 'ini_set'
+; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
+
+; Defining 'extension' will load the corresponding shared extension from
+; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
+; overwrite previously defined php.ini values, but will append the new value
+; instead.
+
+; Note: path INI options can be relative and will be expanded with the prefix
+; (pool, global or /usr)
+
+; Default Value: nothing is defined by default except the values in php.ini and
+;                specified at startup with the -d argument
+;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
+;php_flag[display_errors] = off
+;php_admin_value[error_log] = /var/log/fpm-php.www.log
+;php_admin_flag[log_errors] = on
+;php_admin_value[memory_limit] = 32M

From e9317fc0ae3e6bb0aebdd76a7594bcf1c1d3c871 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 22 Jan 2024 18:44:18 +0100
Subject: [PATCH 2068/2300] Update latest.txt to 0.9.9-0-6

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 93fae7fa..0f8dc00c 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0-5
+vesta-0.9.9-0-6

From 22463fd0f1621f1089117de985c99514fca90730 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 22 Jan 2024 18:47:27 +0100
Subject: [PATCH 2069/2300] Update Changelog.md to 0.9.9-0-6

---
 Changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Changelog.md b/Changelog.md
index e139e122..6908b0e2 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.9-0-6 [22-Jan-2024]
+==================================================
+* Few bugs fixed
+
 Version 0.9.9-0-5 [08-Oct-2023]
 ==================================================
 * Many bugfixes

From 7274147d3687d59036719b56a34b6a8ce47d8e64 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 24 Jan 2024 16:14:14 +0100
Subject: [PATCH 2070/2300] v-list-php

---
 bin/v-list-php | 76 ++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 76 insertions(+)
 create mode 100644 bin/v-list-php

diff --git a/bin/v-list-php b/bin/v-list-php
new file mode 100644
index 00000000..345d7979
--- /dev/null
+++ b/bin/v-list-php
@@ -0,0 +1,76 @@
+#!/bin/bash
+# info: list of installed php versions
+# options: [FORMAT]
+#
+# The function for obtaining the list of installed PHP versions.
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+format=${1-shell}
+
+# Includes
+source $VESTA/func/main.sh
+
+# JSON list function
+json_list() {
+    counter=$(echo "$phpversions" | wc -l)
+    i=1
+    echo '['
+    for phpversion in $phpversions; do
+        if [ "$i" -lt "$counter" ]; then
+            echo -e  "\t\"$phpversion\","
+        else
+            echo -e  "\t\"$phpversion\""
+        fi
+        (( ++i))
+    done
+    echo "]"
+}
+
+# shell list function
+shell_list() {
+    for phpversion in $phpversions; do
+        echo "$phpversion"
+    done
+}
+
+# PLAIN list function
+plain_list() {
+    for phpversion in $phpversions; do
+        echo "$phpversion"
+    done
+}
+
+# CSV list function
+csv_list() {
+    for phpversion in $phpversions; do
+        echo "$phpversion"
+    done
+}
+
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# Defining system phpversions
+phpversions=$(find /etc/php/ -type d -name 'fpm' | sed "s|/etc/php/||" | sed "s|/fpm||" | sort)
+
+# Listing data
+case $format in
+    json)   json_list ;;
+    plain)  plain_list ;;
+    csv)    csv_list ;;
+    shell)  shell_list ;;
+esac
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+exit

From 11ab87212305d8628fbd740d481fe328c3ff1602 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 24 Jan 2024 16:17:11 +0100
Subject: [PATCH 2071/2300] Update v-list-php

---
 bin/v-list-php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-list-php b/bin/v-list-php
index 345d7979..fe57ffb9 100644
--- a/bin/v-list-php
+++ b/bin/v-list-php
@@ -57,7 +57,7 @@ csv_list() {
 #                       Action                             #
 #----------------------------------------------------------#
 
-# Defining system phpversions
+# Oobtaining the list of installed PHP versions
 phpversions=$(find /etc/php/ -type d -name 'fpm' | sed "s|/etc/php/||" | sed "s|/fpm||" | sort)
 
 # Listing data

From db7e663c2c85538d2082e11bbebe6fd4e5fc4436 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 26 Jan 2024 22:56:37 +0100
Subject: [PATCH 2072/2300] Update v-list-php

---
 bin/v-list-php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-list-php b/bin/v-list-php
index fe57ffb9..846e40de 100644
--- a/bin/v-list-php
+++ b/bin/v-list-php
@@ -57,7 +57,7 @@ csv_list() {
 #                       Action                             #
 #----------------------------------------------------------#
 
-# Oobtaining the list of installed PHP versions
+# Obtaining the list of installed PHP-FPM versions
 phpversions=$(find /etc/php/ -type d -name 'fpm' | sed "s|/etc/php/||" | sed "s|/fpm||" | sort)
 
 # Listing data

From 560fa67c4bb20db2f459b710dcfdc308dcd47ba6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 26 Jan 2024 23:36:51 +0100
Subject: [PATCH 2073/2300] v-list-php-apache

---
 bin/v-list-php-apache | 91 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 91 insertions(+)
 create mode 100644 bin/v-list-php-apache

diff --git a/bin/v-list-php-apache b/bin/v-list-php-apache
new file mode 100644
index 00000000..e2e431b1
--- /dev/null
+++ b/bin/v-list-php-apache
@@ -0,0 +1,91 @@
+#!/bin/bash
+# info: list of installed php versions that have Apache template.
+# options: [FORMAT]
+#
+# The function obtains the list of installed PHP versions that have Apache template.
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Argument definition
+format=${1-shell}
+
+# Includes
+source $VESTA/func/main.sh
+
+# JSON list function
+json_list() {
+    counter=$(echo "$phpversions" | wc -l)
+    i=1
+    echo '['
+    for phpversion in $phpversions; do
+        if [ "$i" -lt "$counter" ]; then
+            echo -e  "\t\"$phpversion\","
+        else
+            echo -e  "\t\"$phpversion\""
+        fi
+        (( ++i))
+    done
+    echo "]"
+}
+
+# shell list function
+shell_list() {
+    for phpversion in $phpversions; do
+        echo "$phpversion"
+    done
+}
+
+# PLAIN list function
+plain_list() {
+    for phpversion in $phpversions; do
+        echo "$phpversion"
+    done
+}
+
+# CSV list function
+csv_list() {
+    for phpversion in $phpversions; do
+        echo "$phpversion"
+    done
+}
+
+echo_phpversions_list() {
+    for element in "${phpversions_list[@]}"; do
+        echo "$element"
+    done
+}
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# Obtaining the list of installed PHP-FPM versions
+fpmphpversions=$(/usr/local/vesta/bin/v-list-php)
+
+for phpversion in $fpmphpversions; do
+    phpversiontpl=${phpversion//./}
+    tpl="/usr/local/vesta/data/templates/web/apache2/PHP-FPM-$phpversiontpl.tpl"
+    if [ -f "$tpl" ]; then
+        phpversions_list+=("$phpversion")
+    fi
+done
+
+phpversions=$(echo_phpversions_list)
+
+# Listing data
+case $format in
+    json)   json_list ;;
+    plain)  plain_list ;;
+    csv)    csv_list ;;
+    shell)  shell_list ;;
+esac
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+exit

From edfea0d25906da0a699139b76c46c2f42972b494 Mon Sep 17 00:00:00 2001
From: vaspar <vp@vsite.gr>
Date: Fri, 2 Feb 2024 16:36:40 +0200
Subject: [PATCH 2074/2300] Get quick info about a banned IP (Host, Banlist,
 Location)

---
 web/css/styles.min.css                        |  26 +++
 web/inc/i18n/en.php                           |   1 +
 web/js/app.js                                 |  39 +++++
 web/list/firewall/banlist/ip_info.php         | 164 ++++++++++++++++++
 .../admin/list_firewall_banlist.html          |   2 +-
 5 files changed, 231 insertions(+), 1 deletion(-)
 create mode 100644 web/list/firewall/banlist/ip_info.php

diff --git a/web/css/styles.min.css b/web/css/styles.min.css
index 374b458c..d84a6a85 100644
--- a/web/css/styles.min.css
+++ b/web/css/styles.min.css
@@ -4236,3 +4236,29 @@ div.ui-dialog + div div{
   padding: 5px 10px !important;
   border-radius: 13px;
 }
+
+.get-ip-info-btn {
+    cursor: pointer;
+    margin-left: 10px;
+}
+.get-ip-info-btn:hover {
+    color: #000000;
+}
+.get-ip-info-btn + .get-ip-info-result {
+    margin: 10px 0;
+}
+.get-ip-info-btn + .get-ip-info-result dl dt {
+    font-weight: bold;
+}
+.get-ip-info-btn + .get-ip-info-result dl dd {
+    margin: 0 0 10px 0;
+}
+.get-ip-info-btn + .get-ip-info-result dl .fa-exclamation-triangle {
+    color: red;
+}
+.get-ip-info-btn + .get-ip-info-result dl .fa-check-circle {
+    color: green;
+}
+.get-ip-info-btn + .get-ip-info-result dl .fa-exclamation-circle {
+    color: orange;
+}
diff --git a/web/inc/i18n/en.php b/web/inc/i18n/en.php
index 39c3bfff..09ae210f 100644
--- a/web/inc/i18n/en.php
+++ b/web/inc/i18n/en.php
@@ -377,6 +377,7 @@ $LANG['en'] = array(
     'ErrorLog' => 'ErrorLog',
     'Download AccessLog' => 'Download AccessLog',
     'Download ErrorLog' => 'Download ErrorLog',
+    'Continent' => 'Continent',
     'Country' => 'Country',
     '2 letter code' => '2 letter code',
     'State / Province' => 'State / Province',
diff --git a/web/js/app.js b/web/js/app.js
index 9ba909a5..978b7d09 100644
--- a/web/js/app.js
+++ b/web/js/app.js
@@ -1072,3 +1072,42 @@ function elementHideShow(elementToHideOrShow){
     el.style.display = el.style.display === 'none' ? 'block' : 'none';
 }
 
+(function($) {
+    $(document).ready(function() {
+        $('.get-ip-info-btn').click(function() {
+            var token = $('#token').attr('token');
+            var index = $(this).attr('data-index');
+            var btn_el = $('.get-ip-info-btn[data-index="' + index + '"]');
+            var result_el = $('.get-ip-info-btn[data-index="' + index + '"] + .get-ip-info-result');
+            var ip = btn_el.attr('data-ip');
+            
+            var url_params = new URLSearchParams(window.location.search);
+            var clear_cache = url_params.get('clear_cache');
+            
+            if (!$.trim(result_el.html())) {
+                result_el.html('<i class="fas fa-spin fa-2x fa-spinner"></i>');
+
+                $.ajax({
+                    method: "POST",
+                    url: "/list/firewall/banlist/ip_info.php",
+                    data: { ip: ip, clear_cache: clear_cache, token: token },
+                    cache: false,
+                    error: function(jqXHR, textStatus, errorThrown) {
+                        result_el.html('<strong>GENERAL ERROR</strong><br>' + errorThrown);
+                    },
+                    success: function(result_data) {
+                        if (btn_el.find('i').hasClass('fa-times')) {
+                            result_el.html(result_data);
+                        }
+                    }
+                });
+                
+                btn_el.find('i').removeClass('fa-search').addClass('fa-times');
+            }
+            else {
+                result_el.html('');
+                btn_el.find('i').removeClass('fa-times').addClass('fa-search');
+            }
+        });
+    });
+})(jQuery);
diff --git a/web/list/firewall/banlist/ip_info.php b/web/list/firewall/banlist/ip_info.php
new file mode 100644
index 00000000..cf7607bf
--- /dev/null
+++ b/web/list/firewall/banlist/ip_info.php
@@ -0,0 +1,164 @@
+<?
+error_reporting(NULL);
+session_start();
+
+include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
+
+if (!function_exists('str_contains')) {
+    function str_contains($haystack, $needle)
+    {
+        return $needle !== '' && mb_strpos($haystack, $needle) !== false;
+    }
+}
+
+// cidrMatch() based on https://stackoverflow.com/a/14535823
+function cidrMatch($ip, $range)
+{
+    if (!filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) return false;
+    list($subnet, $bits) = explode('/', $range);
+    $ip = substr(ipToBinary($ip), 0, $bits);
+    $subnet = substr(ipToBinary($subnet), 0, $bits);
+    return ($ip == $subnet);
+}
+
+// ipToBinary based on https://stackoverflow.com/a/14535823
+function ipToBinary($ip)
+{
+    $ipbin = '';
+    $ips = explode(".", $ip);
+    foreach ($ips as $iptmp) {
+        $ipbin .= sprintf("%08b", $iptmp);
+    }
+    return $ipbin;
+}
+
+function fetchURL($url, &$info = [])
+{
+    $curl_handle = curl_init();
+    curl_setopt($curl_handle, CURLOPT_FOLLOWLOCATION, true);
+    curl_setopt($curl_handle, CURLOPT_ENCODING, 'gzip, deflate');
+    curl_setopt($curl_handle, CURLOPT_URL, $url);
+    curl_setopt($curl_handle, CURLOPT_CONNECTTIMEOUT, 10);
+    curl_setopt($curl_handle, CURLOPT_RETURNTRANSFER, 1);
+    $data = curl_exec($curl_handle);
+    $info = curl_getinfo($curl_handle);
+    curl_close($curl_handle);
+    return $data;
+}
+
+function parseCacheEntries($strEntries)
+{
+    $parsed = [];
+    $entries = explode("\n", $strEntries);
+    if ($entries) {
+        foreach ($entries as $entry) {
+            list($entry,) = explode("#", $entry);
+            list($entry,) = explode(";", $entry);
+            $entry = trim($entry);
+            if (!empty($entry)) $parsed[] = $entry;
+        }
+    }
+    return $parsed;
+}
+
+function checkIP($ip)
+{
+    $check_results = [];
+    $lists = [
+        'BDEALL' => 'http://lists.blocklist.de/lists/all.txt',
+        'BFB' => 'http://danger.rulez.sk/projects/bruteforceblocker/blist.php',
+        'CIARMY' => 'http://www.ciarmy.com/list/ci-badguys.txt',
+        'GREENSNOW' => 'https://blocklist.greensnow.co/greensnow.txt',
+        'SPAMDROP' => 'https://www.spamhaus.org/drop/drop.txt',
+        'SPAMEDROP' => 'https://www.spamhaus.org/drop/edrop.txt',
+        'TOR' => 'https://check.torproject.org/cgi-bin/TorBulkExitList.py',
+    ];
+    $today = date('Y-m-d');
+
+    foreach ($lists as $code => $url) {
+        $cache_tag = 'ip-blacklist-' . $code . '-cache';
+
+        // init cache
+        if (!isset($_SESSION[$cache_tag])) $_SESSION[$cache_tag] = ['updated' => '', 'items' => [], 'http_code' => ''];
+
+        // invalidate cache if clear_cache parameter is 1
+        if (!empty($_REQUEST['clear_cache']) && $_REQUEST['clear_cache'] == 1) $_SESSION[$cache_tag]['updated'] = '2000-01-01';
+
+        // if cache is not updated, fetch new data and save to cache
+        if (strtotime($today) > strtotime($_SESSION[$cache_tag]['updated'])) {
+            $new_cache_data = fetchURL($url, $url_result);
+            if ($url_result['http_code'] == '200') $new_cache_items = parseCacheEntries($new_cache_data);
+            $_SESSION[$cache_tag] = ['updated' => $today, 'items' => $new_cache_items, 'http_code' => $url_result['http_code']];
+        }
+
+        // check ip 
+        $matched_ips = array_filter($_SESSION[$cache_tag]['items'], function ($item) use ($ip) {
+            if (str_contains($item, '/')) return cidrMatch($ip, $item);
+            if ($ip == $item) return true;
+            return false;
+        });
+
+        $check_results[$code]['found'] = count($matched_ips) > 0 ? true : false;
+        $check_results[$code]['updated'] = $_SESSION[$cache_tag]['updated'];
+        $check_results[$code]['http_code'] = $_SESSION[$cache_tag]['http_code'];
+    }
+
+    return $check_results;
+}
+
+// Check token
+if ((!isset($_REQUEST['token'])) || ($_SESSION['token'] != $_REQUEST['token'])) {
+    die("Wrong token");
+}
+
+$ip = $_REQUEST['ip'];
+
+// Validate IP format
+if (filter_var($ip, FILTER_VALIDATE_IP) === false) {
+    die('<strong>GENERAL ERROR</strong><br>BAD_IP_FORMAT');
+}
+
+// Query host
+$host = gethostbyaddr($ip);
+
+// Query blocklists
+$result_blocklists = '';
+$ip_check = checkIP($ip);
+if ($ip_check) {
+    foreach ($ip_check as $list_code => $list_results) {
+        $result_blocklists .= '<div title="'.$list_results['updated'].' / '.$list_results['http_code'].'">';
+        $result_blocklists .= $list_results['found'] ? '<i class="fas fa-fw fa-exclamation-triangle"></i>' : '<i class="fas fa-fw fa-check-circle"></i>';
+        $result_blocklists .= '&nbsp;<span>'.$list_code.'</span>&nbsp;';
+        $result_blocklists .= $list_results['http_code'] == '200' ? '' : '<i class="fas fa-fw fa-exclamation-circle"></i>';
+        $result_blocklists .= '</div>';
+    }
+}
+
+// Query location
+$url = 'https://api.db-ip.com/v2/free/'.$ip;
+$result = fetchURL($url);
+$result_array = json_decode($result, true);
+if (!is_array($result_array)) {
+    die('<strong>GENERAL ERROR</strong><br>BAD_JSON');
+}
+if (!empty($result_array['errorCode'])) {
+    die('<strong>GENERAL ERROR</strong><br>'.$result_array['errorCode']);
+}
+
+// Output
+echo "
+<dl>
+    <dt>".__('Host')."</dt>
+    <dd>".$host."</dd>
+    <dt>".__('Banlist')."</dt>
+    <dd>".$result_blocklists."</dd>
+    <dt>".__('Continent')."</dt>
+    <dd>".$result_array['continentName']." [".$result_array['continentCode']."]</dd>
+    <dt>".__('Country')."</dt>
+    <dd>".$result_array['countryName']." [".$result_array['countryCode']."]</dd>
+    <dt>".__('State / Province')."</dt>
+    <dd>".$result_array['stateProv']." [".$result_array['stateProvCode']."]</dd>
+    <dt>".__('City / Locality')."</dt>
+    <dd>".$result_array['city']."</dd>
+</dl>
+";
diff --git a/web/templates/admin/list_firewall_banlist.html b/web/templates/admin/list_firewall_banlist.html
index 72153940..3bc8ccb2 100644
--- a/web/templates/admin/list_firewall_banlist.html
+++ b/web/templates/admin/list_firewall_banlist.html
@@ -80,7 +80,7 @@
             <div class="clearfix l-unit__stat-col--left wide"><b><?=$data[$key]['DATE']?></b> &nbsp; <?=$data[$key]['TIME']?> </div>
             <div class="clearfix l-unit__stat-col--left"></div>
             <div class="clearfix l-unit__stat-col--left wide-3"><b><?=__($value['CHAIN'])?></b></div>
-            <div class="clearfix l-unit__stat-col--left"><b><?=$ip?></b></div>
+            <div class="clearfix l-unit__stat-col--left"><b><?=$ip?></b><a class="get-ip-info-btn" data-index="<?=$i?>" data-ip="<?=$ip?>"><i class="fas fa-search"></i></a><div class="get-ip-info-result"></div></div>
           </div>
           <!-- /.l-unit__stats -->
         </div>

From 2aca86432fd8534df9fcb3387b748de3a4219cfe Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 8 Feb 2024 21:26:03 +0100
Subject: [PATCH 2075/2300] imapsync tools

---
 .../tools/imapsync/create-mail-sync.sh        | 38 +++++++++----
 .../tools/imapsync/import-from-file.sh        | 56 +++++++++++++++++++
 2 files changed, 83 insertions(+), 11 deletions(-)
 create mode 100644 src/deb/for-download/tools/imapsync/import-from-file.sh

diff --git a/src/deb/for-download/tools/imapsync/create-mail-sync.sh b/src/deb/for-download/tools/imapsync/create-mail-sync.sh
index e325754e..94762505 100644
--- a/src/deb/for-download/tools/imapsync/create-mail-sync.sh
+++ b/src/deb/for-download/tools/imapsync/create-mail-sync.sh
@@ -35,18 +35,35 @@ fi
 
 TESTOPT=""
 if [[ $TEST -eq 1 ]]; then
-	TESTOPT="--justlogin"
+    TESTOPT="--justlogin"
 fi
 
 if [ ! -d "accounts" ]; then
     mkdir accounts
 fi
 if [ -f "accounts/$EMAIL" ]; then
-	echo "********* $EMAIL ALREADY EXISTS !!! ************"
+    echo "********* EMAIL $EMAIL ALREADY EXISTS !!! ************"
     exit 1;
     exit
 fi
 
+euser=$(echo $EMAIL | cut -d '@' -f 1)
+domain=$(echo $EMAIL | cut -d '@' -f 2)
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+if [ "$user" != "" ]; then
+    echo "=== Email '$EMAIL' has username email part '$euser', domain is '$domain', and belongs to myVesta account: $user"
+    if [ ! -d "/home/$user/mail/$domain" ]; then
+        echo "======= Creating '$domail' in MAIL section"
+        /usr/local/vesta/bin/v-add-mail-domain "$user" "$domain"
+    fi
+    if [ ! -d "/home/$user/mail/$domain/$euser" ]; then
+        echo "======= Creating '$euser' mail account for domain '$domain'"
+        /usr/local/vesta/bin/v-add-mail-account "$user" "$domain" "$euser" "$PASS2"
+        echo ""
+    fi
+fi
+
+
 echo "Writing to: accounts/$EMAIL"
 echo "#!/bin/bash
 
@@ -67,21 +84,20 @@ exit;
 chmod a=rwx accounts/$EMAIL
 
 if [[ $TEST -eq 0 ]]; then
-	exit 0;
+    exit 0;
 fi
 
 accounts/$EMAIL
 RET=$?
 
 if [ $RET -eq 0 ]; then
-	# echo "./create-mail-sync.sh $EMAIL $PASS $PASS2 $TEST"
-	sed -i "s/--justlogin//g" accounts/$EMAIL
-	echo "--- OK! ---"
-	echo "./create-mail-sync.sh '$SRCHOST' '$EMAIL' '$PASS' '$PASS2' $TEST" >> accounts.log
+    # echo "./create-mail-sync.sh $EMAIL $PASS $PASS2 $TEST"
+    sed -i "s/--justlogin//g" accounts/$EMAIL
+    echo "--- OK! ---"
+    echo "./create-mail-sync.sh '$SRCHOST' '$EMAIL' '$PASS' '$PASS2' $TEST" >> accounts.log
 else
-	echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
-	echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
-	echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
-	rm accounts/$EMAIL
+    echo "********* $EMAIL ERROR !!! [ret: $RET ] ************"
+    rm accounts/$EMAIL
+    read -p "=== Press ENTER to continue ===" entered
 fi
 exit $RET;
diff --git a/src/deb/for-download/tools/imapsync/import-from-file.sh b/src/deb/for-download/tools/imapsync/import-from-file.sh
new file mode 100644
index 00000000..ac0c42f4
--- /dev/null
+++ b/src/deb/for-download/tools/imapsync/import-from-file.sh
@@ -0,0 +1,56 @@
+#!/bin/bash
+#
+# This script reads email and password=s in following format:
+# email1 pass
+# email2 pass
+# email3 pass
+
+# The first parameter is the text file from which we read emails and passwords
+# The second parameter is SMTP Hostname
+# The third parameter is domain if lines contains only username part
+
+
+host=''
+if [ $# -gt 1 ]; then
+    host=$2
+else
+    echo "Usage: ./import-from-file.sh 'FILE' 'SMTPHOST' ['DOMAIN']"
+    exit 1;
+fi
+
+domain=''
+if [ $# -gt 2 ]; then
+    domain=$3
+fi
+
+end_of_file=0
+while [[ $end_of_file == 0 ]]; do
+
+  read -r line
+  end_of_file=$?
+
+  if [ "$line" == "" ]; then
+    if [[ $end_of_file == 1 ]]; then
+      echo "===EOF==="
+      break;
+    fi
+    continue
+  fi
+
+  email=$(echo "$line" | awk '{print $1}')
+  pass=$(echo "$line" | awk '{print $2}')
+
+  if [[ $email != *"@"* ]]; then
+    email="$email@$domain"
+  fi
+
+  echo "Extracted: '$email' = '$pass'"
+
+  ./create-mail-sync.sh "$host" "$email" "$pass"
+
+  if [[ $end_of_file == 1 ]]; then
+    echo "===EOF==="
+    break;
+  fi
+
+done < $1

From 7e209c543d408ab5f23be0b18988ce84042e0273 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 27 Feb 2024 13:05:59 +0100
Subject: [PATCH 2076/2300] Update v-backup-users

Prevent removing valid licenses when vestacp.com is offline.
Licences are free now - https://forum.myvestacp.com/viewtopic.php?t=949
---
 bin/v-backup-users | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-backup-users b/bin/v-backup-users
index 16a93d6d..05550ded 100755
--- a/bin/v-backup-users
+++ b/bin/v-backup-users
@@ -37,7 +37,7 @@ fi
 
 log=$VESTA/log/backup.log
 
-$BIN/v-check-vesta-license >/dev/null
+# $BIN/v-check-vesta-license >/dev/null
 
 touch $log
 if [ ! -z "$NOTIFY_ADMIN_FULL_BACKUP" ]; then

From a7def7b190a88dacdd82704295e872a04e5d604b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 27 Feb 2024 13:10:58 +0100
Subject: [PATCH 2077/2300] Changelog

---
 Changelog.md       | 4 ++++
 src/deb/latest.txt | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index 6908b0e2..d0df650b 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,7 @@
+Version 0.9.9-0-7 [27-Feb-2024]
+==================================================
+* Few bugs fixed
+
 Version 0.9.9-0-6 [22-Jan-2024]
 ==================================================
 * Few bugs fixed
diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 0f8dc00c..8170ab75 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0-6
+vesta-0.9.9-0-7
\ No newline at end of file

From 6819f21c3e7eca1be628f600945725c542ec0c85 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 Mar 2024 15:49:33 +0100
Subject: [PATCH 2078/2300] Update v-commander

---
 bin/v-commander | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-commander b/bin/v-commander
index 2bf2242d..8a68cd38 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -274,6 +274,7 @@ do
     if [ "$answer" = 'dis spam' ] || [ "$answer" = 'DIS SPAM' ]; then
         echo "============================="
         echo "== disabling SpamAssassin"
+        release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
         if [ "$release" -lt 12 ]; then
             systemctl stop spamassassin.service
             systemctl disable spamassassin.service

From 138a30755f226bc2d3ef77d30e7d183466538211 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 Mar 2024 16:43:05 +0100
Subject: [PATCH 2079/2300] Update v-commander

---
 bin/v-commander | 40 ++++++++++++++++++++++++++++++----------
 1 file changed, 30 insertions(+), 10 deletions(-)

diff --git a/bin/v-commander b/bin/v-commander
index 8a68cd38..e1f209b1 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -18,6 +18,7 @@ echo "======================= mvVesta-commander ================================
 if [ -f /root/kernelupdate ]; then
     rm /root/kernelupdate
 fi
+apt_updated=0
 apt_upgraded=0
 quit_on_empty=0
 
@@ -88,8 +89,8 @@ myhelp() {
     echo "inst nginx-rate-limit = install nginx-rate-limit templates"
     echo "dis fb   = stop and disable fail2ban"
     echo "dis dove = stop and disable dovecot"
-    echo "dis spam = stop and disable spam"
-    echo "dis clam = stop and disable clamav"
+    echo "dis spam = stop and disable spamassassin"
+    echo "dis clam = stop and disable ClamAV"
     echo "p 7.0    = set default php 7.0"
     echo "p 7.3    = set default php 7.3"
     echo "p 7.4    = set default php 7.4"
@@ -99,9 +100,22 @@ myhelp() {
     echo "check fc = check if FreshClam is up"
     echo "-----------------------------"
     echo "enable-ssh-root-password-login = Allow root password authentication via SSH and set the root password to match the password for the admin account"
+    echo "id_rsa = generate id_rsa and id_rsa.pub if it does not exist and show id_rsa.pub"
     echo "-----------------------------"
 }
 
+apt_update() {
+    echo "============================="
+    echo "== running: apt-get update"
+    release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+    if [ "$release" -lt 10 ]; then
+        apt-get update
+    else
+        apt-get update --allow-releaseinfo-change
+    fi
+    apt_updated=1
+}
+
 COUNTER=0
 
 while true
@@ -162,14 +176,7 @@ do
 
 
     if [ "$answer" = 'u' ] || [ "$answer" = 'U' ]; then
-        echo "============================="
-        echo "== running: apt-get update"
-        release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
-        if [ "$release" -lt 10 ]; then
-            apt-get update
-        else
-            apt-get update --allow-releaseinfo-change
-        fi
+        apt_update
     fi
 
     if [ "$answer" = 'g' ] || [ "$answer" = 'G' ]; then
@@ -584,4 +591,17 @@ do
         /root/install-new-roundcube.sh
     fi
 
+    if [ "$answer" = 'id_rsa' ] || [ "$answer" = 'ID_RSA' ]; then
+        if [ ! -f "/root/.ssh/id_rsa.pub" ]; then
+            ssh-keygen -q -t rsa -N '' -C "$HOSTNAME" -f /root/.ssh/id_rsa 2>/dev/null <<< y >/dev/null
+        fi
+        echo "=== YOUR id_rsa.pub IS BELOW ==="
+        cat /root/.ssh/id_rsa.pub
+        echo "======"
+    fi
+
+    if [ $numargs -eq 1 ]; then
+        exit;
+    fi
+
 done

From e6bf09c6085d697fea8fe181e4703c896346be3e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 Mar 2024 16:48:48 +0100
Subject: [PATCH 2080/2300] Update v-commander

---
 bin/v-commander | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/bin/v-commander b/bin/v-commander
index e1f209b1..824a4377 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -13,7 +13,9 @@ fi
 
 source /etc/profile
 PATH=$PATH:/usr/local/vesta/bin && export PATH
-echo "======================= mvVesta-commander ================================"
+if [ $SHOWHEADER -eq 1 ]; then
+    echo "======================= mvVesta-commander ================================"
+fi
 
 if [ -f /root/kernelupdate ]; then
     rm /root/kernelupdate
@@ -600,7 +602,7 @@ do
         echo "======"
     fi
 
-    if [ $numargs -eq 1 ]; then
+    if [ $numargs -gt 0 ]; then
         exit;
     fi
 

From 0ae1ea6adcb48f9a7fe9dd4331c9094a9ca4a137 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 Mar 2024 17:22:18 +0100
Subject: [PATCH 2081/2300] Update v-commander

---
 bin/v-commander | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-commander b/bin/v-commander
index 824a4377..3d495476 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -595,7 +595,7 @@ do
 
     if [ "$answer" = 'id_rsa' ] || [ "$answer" = 'ID_RSA' ]; then
         if [ ! -f "/root/.ssh/id_rsa.pub" ]; then
-            ssh-keygen -q -t rsa -N '' -C "$HOSTNAME" -f /root/.ssh/id_rsa 2>/dev/null <<< y >/dev/null
+            ssh-keygen -q -t rsa -N '' -C "$HOSTNAME" -b 4096 -f /root/.ssh/id_rsa 2>/dev/null <<< y >/dev/null
         fi
         echo "=== YOUR id_rsa.pub IS BELOW ==="
         cat /root/.ssh/id_rsa.pub

From fa165a00206ac67d6a8a768f8c9b0ca462ac4885 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 14 Mar 2024 20:24:47 +0100
Subject: [PATCH 2082/2300] Update v-fix-user-permissions

---
 bin/v-fix-user-permissions | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-fix-user-permissions b/bin/v-fix-user-permissions
index ae798992..e55b5e0f 100644
--- a/bin/v-fix-user-permissions
+++ b/bin/v-fix-user-permissions
@@ -44,7 +44,7 @@ find /home/$user/mail/*/ -type d -exec chmod u+rwx {} \;
 find /home/$user/mail/*/ -type d -exec chmod g+rwx {} \;
 find /home/$user/mail/*/ -type f -exec chmod u+rw {} \;
 find /home/$user/mail/*/ -type f -exec chmod g+rw {} \;
-
+find /home/$user/mail/*/ -maxdepth 1 -type d -exec chmod g-rwx {} \;
 
 find /home/$user/conf/dns/ -type f -exec chown root:bind {} \;
 find /home/$user/conf/ -type d -exec chown root:root {} \;

From dd18d6dd6dda04b9a0b0e7c5bb9a22eb84cefaf8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 29 Mar 2024 14:51:56 +0100
Subject: [PATCH 2083/2300] Blocking xmlrpc.php and wp-config.php in
 nginx-rate-limit templatre for WP

---
 .../tools/rate-limit-tpl/force-https-firewall-wordpress.stpl    | 2 ++
 .../tools/rate-limit-tpl/hosting-firewall-wordpress.stpl        | 2 ++
 .../tools/rate-limit-tpl/hosting-firewall-wordpress.tpl         | 2 ++
 3 files changed, 6 insertions(+)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
index e8b5b228..b263d6b5 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.stpl
@@ -79,6 +79,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
+    location ~ /wp-config.php    {return 404;}
+    location ~ /xmlrpc.php       {return 404;}
     location ~ /\.ht    {return 404;}
     location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl
index e8b5b228..b263d6b5 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl
@@ -79,6 +79,8 @@ server {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
 
+    location ~ /wp-config.php    {return 404;}
+    location ~ /xmlrpc.php       {return 404;}
     location ~ /\.ht    {return 404;}
     location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl
index 49da9387..7203b88c 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl
@@ -76,6 +76,8 @@ server {
         proxy_pass      http://%ip%:%web_port%;
     }
 
+    location ~ /wp-config.php    {return 404;}
+    location ~ /xmlrpc.php       {return 404;}
     location ~ /\.ht    {return 404;}
     location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}

From 20695198f4acddcaa5d7bd98ebdecd6a1f63ca1c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 29 Mar 2024 17:17:22 +0100
Subject: [PATCH 2084/2300] tpl CRLF to LF

---
 .../force-https-firewall-wordpress.tpl           | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.tpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.tpl
index c9cf1189..5a463370 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.tpl
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress.tpl
@@ -1,8 +1,8 @@
-server {
-    listen      %ip%:%proxy_port%;
-    server_name %domain_idn% %alias_idn%;
-    location / {
-        rewrite ^(.*) https://$host$1 permanent;
-    }
-include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
-}
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}

From 55e0fcb5dee50afe68a0e829ab1333483e6c231f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 4 Apr 2024 14:48:56 +0200
Subject: [PATCH 2085/2300] Update v-clean-garbage: restart exim4

---
 bin/v-clean-garbage | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 80d7f165..4cfc1f33 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -97,6 +97,12 @@ if [ -f "/usr/local/bin/tailf_exim.php" ]; then
     nohup php /usr/local/bin/tailf_exim.php > /var/log/tailf_exim.log 2>&1 &
 fi
 
+exim_installed=$(/usr/local/vesta/bin/v-list-sys-services | grep -c 'exim')
+if [ $exim_installed -gt 0 ]; then
+    systemctl restart exim4
+fi
+
+
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#

From dd825b96cb2a14b1f624a96eaaaf2bfc86cb0bd7 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 4 Apr 2024 14:55:48 +0200
Subject: [PATCH 2086/2300] Update latest.txt - 0.9.9-0-8

---
 src/deb/latest.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 8170ab75..9bd24024 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0-7
\ No newline at end of file
+vesta-0.9.9-0-8

From 8cc35b43eb4dfde3abc8ff5c71783345a53bcfc6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 4 Apr 2024 15:08:14 +0200
Subject: [PATCH 2087/2300] Update header.html

---
 web/templates/header.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/header.html b/web/templates/header.html
index 7f317f94..37905032 100644
--- a/web/templates/header.html
+++ b/web/templates/header.html
@@ -4,7 +4,7 @@
   <meta charset="utf-8">
   <link rel="icon" href="/images/favicon.ico" type="image/x-icon">
   <title>myVesta - <?=__($TAB)?></title>
-  <link rel="stylesheet" href="/css/styles.min.css?1446554112">
+  <link rel="stylesheet" href="/css/styles.min.css?1446554113">
   <link type="text/css" href="/css/jquery-custom-dialogs.css" rel="stylesheet" />
   <link href="/css/fonts/font_sans_pro.css" rel="stylesheet">
   <link href="/css/fonts/font_lobster.css" rel="stylesheet">

From 63c4826ac0ea031245b1ff1429852c85694bc7cd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 5 Apr 2024 15:22:20 +0200
Subject: [PATCH 2088/2300] Update v-commander

---
 bin/v-commander | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/bin/v-commander b/bin/v-commander
index 3d495476..1747a5ec 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -119,15 +119,20 @@ apt_update() {
 }
 
 COUNTER=0
+HAS_PARAMETERS=0
 
 while true
 do
 
     COUNTER=$((COUNTER + 1))
     if [ $COUNTER -le $numargs ]; then
+        HAS_PARAMETERS=1
         answer=$1
         shift
     else
+        if [ $HAS_PARAMETERS -eq 1 ]; then
+            exit;
+        fi
         read -p 'What to do: ' answer
     fi
 
@@ -602,8 +607,4 @@ do
         echo "======"
     fi
 
-    if [ $numargs -gt 0 ]; then
-        exit;
-    fi
-
 done

From 583a1e5cc7ed3e9657730f55c148df46922a2264 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 5 Apr 2024 19:56:50 +0200
Subject: [PATCH 2089/2300] Update v-commander

---
 bin/v-commander | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-commander b/bin/v-commander
index 1747a5ec..f6a9cf7d 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -149,6 +149,7 @@ do
     if [ "$answer" = 'quit-on-empty' ]; then
         echo "== the script will quit on next enter"
         quit_on_empty=1
+        HAS_PARAMETERS=0
     fi
 
 

From 929241c5f787f301da3a6ace160d979729e98d11 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 5 Apr 2024 20:10:05 +0200
Subject: [PATCH 2090/2300] Version 0.9.9-0-9

---
 Changelog.md           | 9 +++------
 src/deb/latest.txt     | 2 +-
 src/deb/vesta/postinst | 4 ++--
 3 files changed, 6 insertions(+), 9 deletions(-)

diff --git a/Changelog.md b/Changelog.md
index d0df650b..f9d95b6c 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,15 +1,12 @@
-Version 0.9.9-0-7 [27-Feb-2024]
+Version 0.9.9-0-9 [05-Apr-2024]
 ==================================================
+* Get quick info about a banned IP (Host, Banlist, Location) (many thanks to @VasilisParaschos )
 * Few bugs fixed
 
-Version 0.9.9-0-6 [22-Jan-2024]
+Version 0.9.9-0-5 to 0.9.9-0-8
 ==================================================
 * Few bugs fixed
 
-Version 0.9.9-0-5 [08-Oct-2023]
-==================================================
-* Many bugfixes
-
 Version 0.9.9-0-4 [27-Jun-2023]
 ==================================================
 * Support for Debian 12 ( in mutual cooperation with @HestiaCP )
diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 9bd24024..df77dd74 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0-8
+vesta-0.9.9-0-9
\ No newline at end of file
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index e53fee72..4d414655 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -22,8 +22,8 @@ if [ ! -d "/usr/local/vesta/data/upgrades" ]; then
 fi
 
 # show changelog after update
-# echo "1" > /usr/local/vesta/data/upgrades/show_changelog
-# chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
+echo "1" > /usr/local/vesta/data/upgrades/show_changelog
+chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
 # Fixing 'dh key too small' in dovecot
 if [ -f "/var/log/dovecot.log.1" ] && [ -f "/etc/dovecot/conf.d/10-ssl.conf" ] && [ -f "/usr/share/dovecot/dh.pem" ]; then

From 40afd5b5c84719eeff4f2ce34bba5051ee631e10 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 9 Apr 2024 16:44:05 +0200
Subject: [PATCH 2091/2300] Create v-edit-domain-php-ini

---
 bin/v-edit-domain-php-ini | 80 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 80 insertions(+)
 create mode 100644 bin/v-edit-domain-php-ini

diff --git a/bin/v-edit-domain-php-ini b/bin/v-edit-domain-php-ini
new file mode 100644
index 00000000..027547fe
--- /dev/null
+++ b/bin/v-edit-domain-php-ini
@@ -0,0 +1,80 @@
+#!/bin/bash
+# info: Edit php.ini for certain domain
+# options: DOMAIN 
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+SILENT_MODE=1
+
+# Argument definition
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/domain.sh
+
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+if [ ! -d "/home/$user" ]; then
+    # echo "User doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    # echo "Domain doesn't exist";
+    exit 1;
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+fpm_ver=$(/usr/local/vesta/bin/v-get-php-version-of-domain $domain)
+
+if [ -z "$fpm_ver" ]; then
+    echo "PHP version for domain $domain could not be determined."
+    exit 1
+fi
+
+config_file="/etc/php/${fpm_ver}/fpm/pool.d/${domain}.conf"
+
+if command -v mcedit >/dev/null; then
+    mcedit "$config_file"
+else
+    nano "$config_file"
+fi
+
+echo "Restarting PHP-FPM service for PHP version $fpm_ver..."
+echo ""
+systemctl restart php${fpm_ver}-fpm
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+exit 1;

From f540cf9f2ab872e1fff74246723c68678b4c1f26 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 11 Apr 2024 12:18:39 +0200
Subject: [PATCH 2092/2300] Update v-edit-domain-php-ini

---
 bin/v-edit-domain-php-ini | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/v-edit-domain-php-ini b/bin/v-edit-domain-php-ini
index 027547fe..83d52613 100644
--- a/bin/v-edit-domain-php-ini
+++ b/bin/v-edit-domain-php-ini
@@ -70,8 +70,9 @@ else
 fi
 
 echo "Restarting PHP-FPM service for PHP version $fpm_ver..."
-echo ""
 systemctl restart php${fpm_ver}-fpm
+echo "The PHP-FPM service for PHP version 7.0 has been restarted successfully."
+echo ""
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 6514ea1d388dfcc5a5707c8a57cbc93d502c9073 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 11 Apr 2024 15:43:41 +0200
Subject: [PATCH 2093/2300] Create v-edit-php-ini

---
 bin/v-edit-php-ini | 62 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 62 insertions(+)
 create mode 100644 bin/v-edit-php-ini

diff --git a/bin/v-edit-php-ini b/bin/v-edit-php-ini
new file mode 100644
index 00000000..4806a48f
--- /dev/null
+++ b/bin/v-edit-php-ini
@@ -0,0 +1,62 @@
+#!/bin/bash
+# info: Edit php.ini for a specific PHP version
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Includes
+source $VESTA/func/main.sh
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# List available PHP versions and store them into an array
+mapfile -t php_versions < <(/usr/local/vesta/bin/v-list-php)
+
+echo "Available PHP versions:"
+PS3="Please select the PHP version you want to edit php.ini for: "
+
+select php_version in "${php_versions[@]}"; do
+    if [[ -n $php_version ]]; then
+        break
+    else
+        echo "Invalid choice. Please try again."
+    fi
+done
+
+# Define path to the php.ini file
+php_ini_path="/etc/php/${php_version}/fpm/php.ini"
+
+# Check if php.ini exists for the selected version
+if [[ ! -f "$php_ini_path" ]]; then
+    echo "The php.ini file for the selected PHP version ($php_version) does not exist."
+    exit 1
+fi
+
+# Determine the text editor to use
+if command -v mcedit >/dev/null 2>&1; then
+    editor_cmd="mcedit"
+elif command -v nano >/dev/null 2>&1; then
+    editor_cmd="nano"
+else
+    echo "No supported text editor found. Please install 'mcedit' or 'nano'."
+    exit 1
+fi
+
+# Open php.ini for the chosen PHP version in the selected editor
+echo "Opening $php_ini_path in editor $editor_cmd..."
+$editor_cmd "$php_ini_path"
+
+# Restart the PHP-FPM service for the selected version
+echo "Restarting the PHP-FPM service for PHP version $php_version..."
+systemctl restart php${php_version}-fpm
+
+echo "The PHP-FPM service for PHP version $php_version has been restarted successfully."
+
+#----------------------------------------------------------#
+#                       Exit                               #
+#----------------------------------------------------------#
+
+exit

From 9d6582460684939c414321c2f608dcef094e6f76 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Apr 2024 20:41:56 +0200
Subject: [PATCH 2094/2300] v-edit-php tuning

---
 bin/v-edit-domain-php-ini | 11 ++++++++---
 bin/v-edit-php-ini        | 10 +++++++---
 2 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/bin/v-edit-domain-php-ini b/bin/v-edit-domain-php-ini
index 83d52613..351f34bc 100644
--- a/bin/v-edit-domain-php-ini
+++ b/bin/v-edit-domain-php-ini
@@ -69,13 +69,18 @@ else
     nano "$config_file"
 fi
 
-echo "Restarting PHP-FPM service for PHP version $fpm_ver..."
+echo "Restarting PHP-FPM service for PHP version ${fpm_ver}"
 systemctl restart php${fpm_ver}-fpm
-echo "The PHP-FPM service for PHP version 7.0 has been restarted successfully."
+if [ $? -ne 0 ]; then
+    systemctl status php${fpm_ver}-fpm
+    check_result $E_RESTART "ERROR: php${fpm_ver}-fpm restart failed - please re-run the command and fix the problem !!!"
+else
+    echo "The PHP-FPM service for PHP version ${fpm_ver} has been restarted successfully."
+fi
 echo ""
 
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#
 
-exit 1;
+exit 0;
diff --git a/bin/v-edit-php-ini b/bin/v-edit-php-ini
index 4806a48f..696b60ec 100644
--- a/bin/v-edit-php-ini
+++ b/bin/v-edit-php-ini
@@ -52,11 +52,15 @@ $editor_cmd "$php_ini_path"
 # Restart the PHP-FPM service for the selected version
 echo "Restarting the PHP-FPM service for PHP version $php_version..."
 systemctl restart php${php_version}-fpm
-
-echo "The PHP-FPM service for PHP version $php_version has been restarted successfully."
+if [ $? -ne 0 ]; then
+    systemctl status php${php_version}-fpm
+    check_result $E_RESTART "ERROR: php${php_version}-fpm restart failed - please re-run the command and fix the problem !!!"
+else
+    echo "The PHP-FPM service for PHP version ${php_version} has been restarted successfully."
+fi
 
 #----------------------------------------------------------#
 #                       Exit                               #
 #----------------------------------------------------------#
 
-exit
+exit 0;

From cc3437c287cf5ae1bbdb769fdd910b0db19411ef Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Apr 2024 20:50:26 +0200
Subject: [PATCH 2095/2300] v-edit-php return fix

---
 bin/v-edit-domain-php-ini | 5 ++++-
 bin/v-edit-php-ini        | 5 ++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/bin/v-edit-domain-php-ini b/bin/v-edit-domain-php-ini
index 351f34bc..890ce047 100644
--- a/bin/v-edit-domain-php-ini
+++ b/bin/v-edit-domain-php-ini
@@ -73,7 +73,10 @@ echo "Restarting PHP-FPM service for PHP version ${fpm_ver}"
 systemctl restart php${fpm_ver}-fpm
 if [ $? -ne 0 ]; then
     systemctl status php${fpm_ver}-fpm
-    check_result $E_RESTART "ERROR: php${fpm_ver}-fpm restart failed - please re-run the command and fix the problem !!!"
+    echo "========================="
+    echo ""
+    echo "ERROR: php${fpm_ver}-fpm restart failed - please re-run the command and fix the problem !!!"
+    exit $E_RESTART;
 else
     echo "The PHP-FPM service for PHP version ${fpm_ver} has been restarted successfully."
 fi
diff --git a/bin/v-edit-php-ini b/bin/v-edit-php-ini
index 696b60ec..4874b8a0 100644
--- a/bin/v-edit-php-ini
+++ b/bin/v-edit-php-ini
@@ -54,7 +54,10 @@ echo "Restarting the PHP-FPM service for PHP version $php_version..."
 systemctl restart php${php_version}-fpm
 if [ $? -ne 0 ]; then
     systemctl status php${php_version}-fpm
-    check_result $E_RESTART "ERROR: php${php_version}-fpm restart failed - please re-run the command and fix the problem !!!"
+    echo "========================="
+    echo ""
+    echo "ERROR: php${php_version}-fpm restart failed - please re-run the command and fix the problem !!!"
+    exit $E_RESTART;
 else
     echo "The PHP-FPM service for PHP version ${php_version} has been restarted successfully."
 fi

From 9b0f9e5876b7cf6d38cc69e158a55cb4f8888b58 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 11 Apr 2024 20:55:41 +0200
Subject: [PATCH 2096/2300] Version 0.9.9-0-10

---
 Changelog.md              | 5 +++++
 bin/v-edit-domain-php-ini | 1 +
 bin/v-edit-php-ini        | 1 +
 src/deb/latest.txt        | 2 +-
 4 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index f9d95b6c..b13f0080 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,8 @@
+Version 0.9.9-0-10 [11-Apr-2024]
+==================================================
+* Introducing v-edit-php-ini command
+* Introducing v-edit-domain-php-ini command
+
 Version 0.9.9-0-9 [05-Apr-2024]
 ==================================================
 * Get quick info about a banned IP (Host, Banlist, Location) (many thanks to @VasilisParaschos )
diff --git a/bin/v-edit-domain-php-ini b/bin/v-edit-domain-php-ini
index 890ce047..9eadfcee 100644
--- a/bin/v-edit-domain-php-ini
+++ b/bin/v-edit-domain-php-ini
@@ -76,6 +76,7 @@ if [ $? -ne 0 ]; then
     echo "========================="
     echo ""
     echo "ERROR: php${fpm_ver}-fpm restart failed - please re-run the command and fix the problem !!!"
+    echo ""
     exit $E_RESTART;
 else
     echo "The PHP-FPM service for PHP version ${fpm_ver} has been restarted successfully."
diff --git a/bin/v-edit-php-ini b/bin/v-edit-php-ini
index 4874b8a0..0155e6bb 100644
--- a/bin/v-edit-php-ini
+++ b/bin/v-edit-php-ini
@@ -57,6 +57,7 @@ if [ $? -ne 0 ]; then
     echo "========================="
     echo ""
     echo "ERROR: php${php_version}-fpm restart failed - please re-run the command and fix the problem !!!"
+    echo ""
     exit $E_RESTART;
 else
     echo "The PHP-FPM service for PHP version ${php_version} has been restarted successfully."
diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index df77dd74..bc58cb6b 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0-9
\ No newline at end of file
+vesta-0.9.9-0-10
\ No newline at end of file

From 65d4f0e65ee2d4442551b93dd19e55135ff4641b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 19 Apr 2024 09:12:57 +0200
Subject: [PATCH 2097/2300] deb12 exim4: message_linelength_limit = 1G

Preventing exim4 error: message has lines too long for transport
---
 install/debian/12/exim/exim4.conf.template | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/debian/12/exim/exim4.conf.template b/install/debian/12/exim/exim4.conf.template
index 81746a7a..aeb83726 100644
--- a/install/debian/12/exim/exim4.conf.template
+++ b/install/debian/12/exim/exim4.conf.template
@@ -355,6 +355,7 @@ remote_smtp:
   dkim_strict = 0
   hosts_try_fastopen = 
   hosts_try_chunking = !93.188.3.0/24
+  message_linelength_limit = 1G
 
 procmail:
   driver = pipe

From 05f5288d9b7dc2014e4fb624077a3476fbe1c8d9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 24 Apr 2024 13:14:36 +0200
Subject: [PATCH 2098/2300] Update v-clone-website: --skip-plugins
 --skip-themes

---
 bin/v-clone-website | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 0daf403c..049b0cf4 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -421,10 +421,10 @@ if [ $IT_IS_WP -eq 0 ]; then
 else
     cd $TO_FOLDER
     echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
-    sudo -H -u$TO_USER wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid
+    sudo -H -u$TO_USER wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
     if [ "$FROM_USER" != "$TO_USER" ]; then
         echo "=== Replacing /home/$FROM_USER/ to /home/$TO_USER/ in database $TO_DATABASE_NAME"
-        sudo -H -u$TO_USER wp search-replace "/home/$FROM_USER/" "/home/$TO_USER/" --precise --all-tables --skip-columns=guid
+        sudo -H -u$TO_USER wp search-replace "/home/$FROM_USER/" "/home/$TO_USER/" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
     fi
     sudo -H -u$TO_USER wp cache flush
     sudo -H -u$TO_USER wp config shuffle-salts WP_CACHE_KEY_SALT --force

From dcd0bf2d64dcfe8e24a32f6ab8271a0724fc1de0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 24 Apr 2024 13:56:28 +0200
Subject: [PATCH 2099/2300] Update v-clone-website: wp-cli to use proper php
 version

---
 bin/v-clone-website | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 049b0cf4..44252313 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -419,16 +419,17 @@ if [ $IT_IS_WP -eq 0 ]; then
         php /root/Search-Replace-DB/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "/home/$FROM_USER/" -r "/home/$TO_USER/"
     fi
 else
+    phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$TO_DOMAIN")
     cd $TO_FOLDER
     echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
-    sudo -H -u$TO_USER wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
     if [ "$FROM_USER" != "$TO_USER" ]; then
         echo "=== Replacing /home/$FROM_USER/ to /home/$TO_USER/ in database $TO_DATABASE_NAME"
-        sudo -H -u$TO_USER wp search-replace "/home/$FROM_USER/" "/home/$TO_USER/" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
+        sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "/home/$FROM_USER/" "/home/$TO_USER/" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
     fi
-    sudo -H -u$TO_USER wp cache flush
-    sudo -H -u$TO_USER wp config shuffle-salts WP_CACHE_KEY_SALT --force
-    sudo -H -u$TO_USER wp config shuffle-salts
+    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp cache flush --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp config shuffle-salts WP_CACHE_KEY_SALT --force --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp config shuffle-salts --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
 fi
 
 # ----------- Update Wordfence WAF Path -------------

From 66ae5580cdeb7d4c188c97a5aa22cf25f0c89910 Mon Sep 17 00:00:00 2001
From: ikheetjeff <76551334+ikheetjeff@users.noreply.github.com>
Date: Sun, 5 May 2024 20:28:05 +0200
Subject: [PATCH 2100/2300] Fix mailadress and subject

---
 func/db.sh | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/func/db.sh b/func/db.sh
index 20230fec..58a339ee 100644
--- a/func/db.sh
+++ b/func/db.sh
@@ -29,6 +29,9 @@ mysql_connect() {
     mysql --defaults-file=$mycnf -e 'SELECT VERSION()' > $mysql_out 2>&1
     if [ '0' -ne "$?" ]; then
         if [ "$notify" != 'no' ]; then
+            subj="Error: Connection to $HOST failed"
+            email=$($BIN/v-get-user-value admin CONTACT)
+
             echo -e "Can't connect to MySQL $HOST\n$(cat $mysql_out)" |\
                 $SENDMAIL -s "$subj" $email
         fi
@@ -59,6 +62,9 @@ mysql_dump() {
     if [ '0' -ne "$?" ]; then
         rm -rf $tmpdir
         if [ "$notify" != 'no' ]; then
+            subj="Error: dump $database failed"
+            email=$($BIN/v-get-user-value admin CONTACT)
+
             echo -e "Can't dump database $database\n$(cat $err)" |\
                 $SENDMAIL -s "$subj" $email
         fi
@@ -82,6 +88,9 @@ psql_connect() {
     psql -h $HOST -U $USER -c "SELECT VERSION()" > /dev/null 2>/tmp/e.psql
     if [ '0' -ne "$?" ]; then
         if [ "$notify" != 'no' ]; then
+            subj="Error: Connection to $HOST failed"
+            email=$($BIN/v-get-user-value admin CONTACT)
+
             echo -e "Can't connect to PostgreSQL $HOST\n$(cat /tmp/e.psql)" |\
                 $SENDMAIL -s "$subj" $email
         fi
@@ -103,6 +112,9 @@ psql_dump() {
     if [ '0' -ne "$?" ]; then
         rm -rf $tmpdir
         if [ "$notify" != 'no' ]; then
+            subj="Error: dump $database failed"
+            email=$($BIN/v-get-user-value admin CONTACT)
+            
             echo -e "Can't dump database $database\n$(cat /tmp/e.psql)" |\
                 $SENDMAIL -s "$subj" $email
         fi

From 4acfa26de55171931d3a9fe6764f46e46e0a082e Mon Sep 17 00:00:00 2001
From: ikheetjeff <76551334+ikheetjeff@users.noreply.github.com>
Date: Sun, 5 May 2024 20:28:31 +0200
Subject: [PATCH 2101/2300] Fix emailadres and subject

---
 func/rebuild.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/func/rebuild.sh b/func/rebuild.sh
index b4a5f73d..ae267e8b 100644
--- a/func/rebuild.sh
+++ b/func/rebuild.sh
@@ -610,6 +610,9 @@ rebuild_pgsql_database() {
     if [ -z $HOST ] || [ -z $USER ] || [ -z $PASSWORD ] || [ -z $TPL ]; then
         echo "Error: postgresql config parsing failed"
         if [ ! -z "$SENDMAIL" ]; then
+            subj="Error: postgresql config parsing failed"
+            email=$($BIN/v-get-user-value admin CONTACT)
+
             echo "Can't parse PostgreSQL config" | $SENDMAIL -s "$subj" $email
         fi
         log_event "$E_PARSING" "$ARGUMENTS"
@@ -621,6 +624,9 @@ rebuild_pgsql_database() {
     if [ '0' -ne "$?" ];  then
         echo "Error: Connection failed"
         if [ ! -z "$SENDMAIL" ]; then
+            subj="Error: Connection failed"
+            email=$($BIN/v-get-user-value admin CONTACT)
+
             echo "Database connection to PostgreSQL host $HOST failed" |\
                 $SENDMAIL -s "$subj" $email
         fi

From 806ebf1db6e45b9fa481b0a16b1bf47e2a991017 Mon Sep 17 00:00:00 2001
From: ikheetjeff <76551334+ikheetjeff@users.noreply.github.com>
Date: Sun, 5 May 2024 21:21:32 +0200
Subject: [PATCH 2102/2300] disable root login phpmyadmin

---
 install/vst-install-debian.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 9ba1a2ec..e85517d8 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1364,6 +1364,9 @@ if [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; then
       bash /root/phpmyadmin/pma.sh
       blowfish=$(gen_pass)
       echo "\$cfg['blowfish_secret'] = '$blowfish';" >> /etc/phpmyadmin/config.inc.php
+
+      # disable root login
+      echo "\$cfg['Servers'][\$i]['AllowRoot'] = FALSE;" >> /etc/phpmyadmin/config.inc.php
   fi
   if [ "$release" -gt 10 ]; then
       echo "=== Configure phpMyAdmin (Debian11 custom part)"
@@ -1381,6 +1384,9 @@ if [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; then
       bash /root/phpmyadmin/pma.sh
       blowfish=$(gen_pass)
       echo "\$cfg['blowfish_secret'] = '$blowfish';" >> /etc/phpmyadmin/config.inc.php
+
+      # disable root login
+      echo "\$cfg['Servers'][\$i]['AllowRoot'] = FALSE;" >> /etc/phpmyadmin/config.inc.php
   fi
 fi
 

From 763eea5c5873962f8a07391b65934888f265afbf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 15 May 2024 19:42:42 +0200
Subject: [PATCH 2103/2300] Update install-new-roundcube.sh - version 1.6.6

---
 src/deb/for-download/tools/install-new-roundcube.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/install-new-roundcube.sh b/src/deb/for-download/tools/install-new-roundcube.sh
index 8838e0ab..0f6a343a 100644
--- a/src/deb/for-download/tools/install-new-roundcube.sh
+++ b/src/deb/for-download/tools/install-new-roundcube.sh
@@ -3,7 +3,7 @@
 USER='webmail'
 DOMAIN='' # enter domain or subdomain
 
-VERSION='1.6.1'
+VERSION='1.6.6'
 DOWNLOAD="https://github.com/roundcube/roundcubemail/releases/download/$VERSION/roundcubemail-$VERSION-complete.tar.gz"
 
 LOGINMESSAGE1='Click here for NEW Webmail'

From 81f507b3c4cb9fd22168b7cce4bf99a2043f4e2a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 16 May 2024 12:15:20 +0200
Subject: [PATCH 2104/2300] nodejs templates ssl fix

---
 .../node-app-3000-no-https-force.stpl                      | 7 ++++---
 .../node-app-3000-pass-to-https.stpl                       | 5 +++--
 .../tools/nodejs-nginx-templates/node-app-3000.stpl        | 7 ++++---
 .../node-app-4000-and-websocket-6001.stpl                  | 5 +++--
 .../node-app-also-handle-static-files-3000.stpl            | 5 +++--
 5 files changed, 17 insertions(+), 12 deletions(-)

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
index d66f80be..f0814ded 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
@@ -1,7 +1,8 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
+    # ssl         on;
+    http2 on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
@@ -41,7 +42,7 @@ server {
     }
 
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.ht    {return 404;}
     location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
index 27dd354b..dc18c496 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
@@ -1,7 +1,8 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
+    # ssl         on;
+    http2 on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
index d66f80be..f0814ded 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
@@ -1,7 +1,8 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
+    # ssl         on;
+    http2 on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
@@ -41,7 +42,7 @@ server {
     }
 
 
-    location ~ /\.ht    {return 404;}
+    location ~ /\.ht    {return 404;}
     location ~ /\.env   {return 404;}
     location ~ /\.svn/  {return 404;}
     location ~ /\.git/  {return 404;}
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
index d8a23009..c58ef84a 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
@@ -1,7 +1,8 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
+    # ssl         on;
+    http2 on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
index a6a0b744..39e58f1f 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
@@ -1,7 +1,8 @@
 server {
-    listen      %ip%:%proxy_ssl_port%;
+    listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
-    ssl         on;
+    # ssl         on;
+    http2 on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 491ac6255c38c202baf2d2eaedfc081c1572a592 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 22 May 2024 17:49:06 +0200
Subject: [PATCH 2105/2300] Create v-run-wpcli

---
 bin/v-run-wpcli | 77 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 77 insertions(+)
 create mode 100644 bin/v-run-wpcli

diff --git a/bin/v-run-wpcli b/bin/v-run-wpcli
new file mode 100644
index 00000000..3504ebe1
--- /dev/null
+++ b/bin/v-run-wpcli
@@ -0,0 +1,77 @@
+#!/bin/bash
+# info: Run WP CLI command for a specific domain
+# options: DOMAIN WP_CLI_COMMAND
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+SILENT_MODE=1
+
+# Argument definition
+domain=$1
+wp_command=${@:2}  # Sve nakon prvog argumenta smatra se delom WP CLI komande
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/domain.sh
+
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '2' "$#" 'DOMAIN WP_CLI_COMMAND'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+if [ ! -d "/home/$user" ]; then
+    # echo "User doesn't exist";
+    exit 1;
+fi
+
+if [ ! -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
+    echo 'Please install WordPress first.'
+    exit 1;
+fi
+
+if ! command -v wp &> /dev/null; then
+    echo "WP CLI is not installed. Installing..."
+    wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
+    chmod +x /usr/local/bin/wp
+    echo "WP CLI installed successfully."
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    # echo "Domain doesn't exist";
+    exit 1;
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+cd /home/$USER/web/$domain/public_html
+sudo -u $USER wp $wp_command
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+exit 0;

From 9cf91d5535c8888b84e8b86cefe1204431f156c5 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 22 May 2024 17:49:54 +0200
Subject: [PATCH 2106/2300] Create v-add-wordpress-admin

---
 bin/v-add-wordpress-admin | 75 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 75 insertions(+)
 create mode 100644 bin/v-add-wordpress-admin

diff --git a/bin/v-add-wordpress-admin b/bin/v-add-wordpress-admin
new file mode 100644
index 00000000..a5fb98a6
--- /dev/null
+++ b/bin/v-add-wordpress-admin
@@ -0,0 +1,75 @@
+#!/bin/bash
+# info: Add a WordPress admin user to a specific domain
+# options: DOMAIN USERNAME PASSWORD EMAIL
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+SILENT_MODE=1
+
+# Argument definition
+domain=$1
+username=$2
+password=$3
+email=$4
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/domain.sh
+
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '4' "$#" 'DOMAIN USERNAME PASSWORD EMAIL'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+if [ ! -d "/home/$user" ]; then
+    echo "User doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    echo "Domain doesn't exist";
+    exit 1;
+fi
+
+# Check if WP CLI is installed and install it if not
+if ! command -v wp &> /dev/null; then
+    echo "WP CLI is not installed. Installing..."
+    wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
+    chmod +x /usr/local/bin/wp
+    echo "WP CLI installed successfully."
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+cd /home/$USER/web/$domain/public_html
+sudo -u $USER wp user create $username $email --role=administrator --user_pass="$password"
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+exit 0;

From abc2377dade85b108dad0d3521c9d41214e6723a Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 22 May 2024 17:50:50 +0200
Subject: [PATCH 2107/2300] Update v-run-wpcli

---
 bin/v-run-wpcli | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-run-wpcli b/bin/v-run-wpcli
index 3504ebe1..8937642a 100644
--- a/bin/v-run-wpcli
+++ b/bin/v-run-wpcli
@@ -19,7 +19,7 @@ SILENT_MODE=1
 
 # Argument definition
 domain=$1
-wp_command=${@:2}  # Sve nakon prvog argumenta smatra se delom WP CLI komande
+wp_command=${@:2} 
 
 user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
 USER=$user

From e51cd34f77125494963aea14ae887380b9bb03b9 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 22 May 2024 17:51:42 +0200
Subject: [PATCH 2108/2300] Update v-add-wordpress-admin

---
 bin/v-add-wordpress-admin | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/bin/v-add-wordpress-admin b/bin/v-add-wordpress-admin
index a5fb98a6..4fc71c05 100644
--- a/bin/v-add-wordpress-admin
+++ b/bin/v-add-wordpress-admin
@@ -53,7 +53,11 @@ if [ ! -d "/home/$user/web/$domain/public_html" ]; then
     exit 1;
 fi
 
-# Check if WP CLI is installed and install it if not
+if [ ! -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
+    echo 'Please install WordPress first.'
+    exit 1;
+fi
+
 if ! command -v wp &> /dev/null; then
     echo "WP CLI is not installed. Installing..."
     wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp

From 75ffd02ff9d1e605be1f5c9fecd0eb92e440c910 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 23 May 2024 14:16:53 +0200
Subject: [PATCH 2109/2300] nodejs tpl fix

---
 .../nodejs-nginx-templates/node-app-3000-no-https-force.stpl    | 2 +-
 .../nodejs-nginx-templates/node-app-3000-pass-to-https.stpl     | 2 +-
 .../tools/nodejs-nginx-templates/node-app-3000.stpl             | 2 +-
 .../node-app-4000-and-websocket-6001.stpl                       | 2 +-
 .../node-app-also-handle-static-files-3000.stpl                 | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
index f0814ded..30ceab98 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
-    http2 on;
+    # http2 on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
index dc18c496..1387a879 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-pass-to-https.stpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
-    http2 on;
+    # http2 on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
index f0814ded..30ceab98 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
-    http2 on;
+    # http2 on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
index c58ef84a..70fa2866 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-4000-and-websocket-6001.stpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
-    http2 on;
+    # http2 on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
index 39e58f1f..415b6f9c 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-also-handle-static-files-3000.stpl
@@ -2,7 +2,7 @@ server {
     listen      %ip%:%proxy_ssl_port% ssl;
     server_name %domain_idn% %alias_idn%;
     # ssl         on;
-    http2 on;
+    # http2 on;
     ssl_certificate      %ssl_pem%;
     ssl_certificate_key  %ssl_key%;
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;

From 21f7a509cb33ab2be181acdbb0dca19e42fee663 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 23 May 2024 14:38:21 +0200
Subject: [PATCH 2110/2300] nginx nodejs tpl CRLF to LF

---
 .../node-app-3000-no-https-force.stpl         | 106 +++++++++---------
 .../nodejs-nginx-templates/node-app-3000.stpl | 106 +++++++++---------
 2 files changed, 106 insertions(+), 106 deletions(-)

diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
index 30ceab98..f49e99dc 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000-no-https-force.stpl
@@ -1,54 +1,54 @@
-server {
-    listen      %ip%:%proxy_ssl_port% ssl;
-    server_name %domain_idn% %alias_idn%;
-    # ssl         on;
-    # http2 on;
-    ssl_certificate      %ssl_pem%;
-    ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
-    
-    # test %port_num%
-    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
-    ssl_prefer_server_ciphers on;
-    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
-
-    root %sdocroot%/public;
-    index index.html;
-
-    location / {
-        proxy_pass      http://localhost:3000;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection 'upgrade';
-        proxy_set_header Host $host;
-        proxy_cache_bypass $http_upgrade;
-
-
-        # try_files $uri $uri/ @rewrites;
-
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-        }
-    }
-
-    location @rewrites {
-      rewrite ^(.+)$ /index.html last;
-    }
-
-    location /error/ {
-        alias   %home%/%user%/web/%domain%/document_errors/;
-    }
-
-
-    location ~ /\.ht    {return 404;}
-    location ~ /\.env   {return 404;}
-    location ~ /\.svn/  {return 404;}
-    location ~ /\.git/  {return 404;}
-    location ~ /\.hg/   {return 404;}
-    location ~ /\.bzr/  {return 404;}
-
-    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
-    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    # http2 on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+    
+    # test %port_num%
+    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+
+    root %sdocroot%/public;
+    index index.html;
+
+    location / {
+        proxy_pass      http://localhost:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+
+
+        # try_files $uri $uri/ @rewrites;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+        }
+    }
+
+    location @rewrites {
+      rewrite ^(.+)$ /index.html last;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
 }
\ No newline at end of file
diff --git a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
index 30ceab98..f49e99dc 100644
--- a/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
+++ b/src/deb/for-download/tools/nodejs-nginx-templates/node-app-3000.stpl
@@ -1,54 +1,54 @@
-server {
-    listen      %ip%:%proxy_ssl_port% ssl;
-    server_name %domain_idn% %alias_idn%;
-    # ssl         on;
-    # http2 on;
-    ssl_certificate      %ssl_pem%;
-    ssl_certificate_key  %ssl_key%;
-    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
-    
-    # test %port_num%
-    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
-    ssl_prefer_server_ciphers on;
-    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
-
-    root %sdocroot%/public;
-    index index.html;
-
-    location / {
-        proxy_pass      http://localhost:3000;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection 'upgrade';
-        proxy_set_header Host $host;
-        proxy_cache_bypass $http_upgrade;
-
-
-        # try_files $uri $uri/ @rewrites;
-
-        location ~* ^.+\.(%proxy_extentions%)$ {
-            access_log     /var/log/%web_system%/domains/%domain%.log combined;
-            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
-            expires        max;
-        }
-    }
-
-    location @rewrites {
-      rewrite ^(.+)$ /index.html last;
-    }
-
-    location /error/ {
-        alias   %home%/%user%/web/%domain%/document_errors/;
-    }
-
-
-    location ~ /\.ht    {return 404;}
-    location ~ /\.env   {return 404;}
-    location ~ /\.svn/  {return 404;}
-    location ~ /\.git/  {return 404;}
-    location ~ /\.hg/   {return 404;}
-    location ~ /\.bzr/  {return 404;}
-
-    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
-    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    # http2 on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+    
+    # test %port_num%
+    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+
+    root %sdocroot%/public;
+    index index.html;
+
+    location / {
+        proxy_pass      http://localhost:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+
+
+        # try_files $uri $uri/ @rewrites;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+        }
+    }
+
+    location @rewrites {
+      rewrite ^(.+)$ /index.html last;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
 }
\ No newline at end of file

From c3985ba95e468d038d2a7e2e67b9e6ca0006d32d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 23 May 2024 15:26:39 +0200
Subject: [PATCH 2111/2300] Create v-backup-user-now

---
 bin/v-backup-user-now | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 bin/v-backup-user-now

diff --git a/bin/v-backup-user-now b/bin/v-backup-user-now
new file mode 100644
index 00000000..3a20b4ce
--- /dev/null
+++ b/bin/v-backup-user-now
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+export ALLOW_BACKUP_ANYTIME='yes'
+
+nice -n 19 ionice -c 3 /usr/local/vesta/bin/v-backup-user $1

From f99bcf874630e6591917db8ef6a8615ba21352bd Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 May 2024 09:19:22 +0200
Subject: [PATCH 2112/2300] Update v-migrate-site-to-https

---
 bin/v-migrate-site-to-https | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/bin/v-migrate-site-to-https b/bin/v-migrate-site-to-https
index 6c6c8653..de3a068c 100644
--- a/bin/v-migrate-site-to-https
+++ b/bin/v-migrate-site-to-https
@@ -102,13 +102,13 @@ FROM_REPLACE2="http://www.$FROM_DOMAIN"
 TO_REPLACE2="https://www.$FROM_DOMAIN"
 
 if [ $IT_IS_WP -eq 0 ]; then
-    if [ ! -f "/root/Search-Replace-DB-master/srdb.cli.php" ]; then
-        echo "Please download https://interconnectit.com/products/search-and-replace-for-wordpress-databases/ and extract to /root/Search-Replace-DB-master/"
-        exit 7
-    fi
-    if [ ! -f "/usr/bin/php7.0" ]; then
-        echo "Please download https://c.myvestacp.com/tools/multi-php-install.sh and install php 7.0"
-        exit 8
+    if [ ! -f "/root/Search-Replace-DB/srdb.cli.php" ]; then
+        if [ ! -f "/usr/bin/git" ]; then
+            apt-get update > /dev/null 2>&1
+            apt-get -y install git > /dev/null 2>&1
+        fi
+        cd /root
+        git clone https://github.com/interconnectit/Search-Replace-DB.git
     fi
 else
     if [ ! -f "/usr/local/bin/wp" ]; then
@@ -164,9 +164,9 @@ grep -rl "$FROM_DOMAIN" $SITE_FOLDER | xargs sed -i "s#$FROM_REPLACE2#$TO_REPLAC
 
 if [ $IT_IS_WP -eq 0 ]; then
     echo "=== Replacing $FROM_REPLACE1 to $TO_REPLACE1 in database $FROM_DATABASE_NAME"
-    php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$FROM_DATABASE_NAME" -u "$FROM_DATABASE_USERNAME" -p "$FROM_DATABASE_PASSWORD" -s "$FROM_REPLACE1" -r "$TO_REPLACE1"
+    php /root/Search-Replace-DB/srdb.cli.php -h localhost -n "$FROM_DATABASE_NAME" -u "$FROM_DATABASE_USERNAME" -p "$FROM_DATABASE_PASSWORD" -s "$FROM_REPLACE1" -r "$TO_REPLACE1"
     echo "=== Replacing $FROM_REPLACE2 to $TO_REPLACE2 in database $FROM_DATABASE_NAME"
-    php7.0 /root/Search-Replace-DB-master/srdb.cli.php -h localhost -n "$FROM_DATABASE_NAME" -u "$FROM_DATABASE_USERNAME" -p "$FROM_DATABASE_PASSWORD" -s "$FROM_REPLACE2" -r "$TO_REPLACE2"
+    php /root/Search-Replace-DB/srdb.cli.php -h localhost -n "$FROM_DATABASE_NAME" -u "$FROM_DATABASE_USERNAME" -p "$FROM_DATABASE_PASSWORD" -s "$FROM_REPLACE2" -r "$TO_REPLACE2"
 else
     cd $SITE_FOLDER
     echo "=== Replacing $FROM_REPLACE1 to $TO_REPLACE1 in database $FROM_DATABASE_NAME"

From a8435cab14187fc5ecc42798a3cc3dea17c5b35f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 May 2024 12:37:26 +0200
Subject: [PATCH 2113/2300] hosting-firewall-wordpress-2

---
 .../force-https-firewall-wordpress-2.stpl     | 95 +++++++++++++++++++
 .../force-https-firewall-wordpress-2.tpl      |  8 ++
 .../hosting-firewall-wordpress-2.stpl         | 95 +++++++++++++++++++
 .../hosting-firewall-wordpress-2.tpl          | 92 ++++++++++++++++++
 .../rate-limit-tpl/install_rate_limit_tpl.sh  |  5 +
 5 files changed, 295 insertions(+)
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress-2.stpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress-2.tpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress-2.stpl
 create mode 100644 src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress-2.tpl

diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress-2.stpl
new file mode 100644
index 00000000..5c3f22ac
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress-2.stpl
@@ -0,0 +1,95 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        error_page 418 = @wordfence_lh;
+        error_page 419 = @wordfence_route;
+        error_page 420 = @wordfence_sync;
+
+        if ($request_uri ~ "^/\?wordfence_lh") { return 418; }
+        if ($request_uri ~ "^/\?rest_route=%2Fwordfence") { return 419; }
+        if ($request_uri ~ "^/\?wordfence_syncAttackData") { return 420; }
+
+        limit_conn addr 10;
+        limit_conn zone_site 30;
+        limit_req zone=one burst=28 delay=14;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-admin/ {
+        limit_conn addr 48;
+        limit_conn zone_site 60;
+        limit_req zone=one burst=80 delay=14;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-json/ {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=one burst=80 delay=14;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_lh {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=wfone burst=240;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_route {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=wfone burst=240;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_sync {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=wfone burst=240;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-json/wordfence/ {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=wfone burst=240;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /wp-config.php    {return 404;}
+    location ~ /xmlrpc.php       {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress-2.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/force-https-firewall-wordpress-2.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress-2.stpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress-2.stpl
new file mode 100644
index 00000000..5c3f22ac
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress-2.stpl
@@ -0,0 +1,95 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    # ssl         on;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        error_page 418 = @wordfence_lh;
+        error_page 419 = @wordfence_route;
+        error_page 420 = @wordfence_sync;
+
+        if ($request_uri ~ "^/\?wordfence_lh") { return 418; }
+        if ($request_uri ~ "^/\?rest_route=%2Fwordfence") { return 419; }
+        if ($request_uri ~ "^/\?wordfence_syncAttackData") { return 420; }
+
+        limit_conn addr 10;
+        limit_conn zone_site 30;
+        limit_req zone=one burst=28 delay=14;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-admin/ {
+        limit_conn addr 48;
+        limit_conn zone_site 60;
+        limit_req zone=one burst=80 delay=14;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-json/ {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=one burst=80 delay=14;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_lh {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=wfone burst=240;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_route {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=wfone burst=240;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location @wordfence_sync {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=wfone burst=240;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /wp-json/wordfence/ {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=wfone burst=240;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %sdocroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /wp-config.php    {return 404;}
+    location ~ /xmlrpc.php       {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress-2.tpl b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress-2.tpl
new file mode 100644
index 00000000..44f6162c
--- /dev/null
+++ b/src/deb/for-download/tools/rate-limit-tpl/hosting-firewall-wordpress-2.tpl
@@ -0,0 +1,92 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        error_page 418 = @wordfence_lh;
+        error_page 419 = @wordfence_route;
+        error_page 420 = @wordfence_sync;
+
+        if ($request_uri ~ "^/\?wordfence_lh") { return 418; }
+        if ($request_uri ~ "^/\?rest_route=%2Fwordfence") { return 419; }
+        if ($request_uri ~ "^/\?wordfence_syncAttackData") { return 420; }
+
+        limit_conn addr 10;
+        limit_conn zone_site 30;
+        limit_req zone=one burst=28 delay=14;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location /wp-admin/ {
+        limit_conn addr 48;
+        limit_conn zone_site 60;
+        limit_req zone=one burst=80 delay=14;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location /wp-json/ {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=one burst=80 delay=14;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location @wordfence_lh {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=wfone burst=240;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location @wordfence_route {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=wfone burst=240;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location @wordfence_sync {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=wfone burst=240;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location /wp-json/wordfence/ {
+        limit_conn addr 16;
+        limit_conn zone_site 30;
+        limit_req zone=wfone burst=240;
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~* ^.+\.(%proxy_extentions%)$ {
+        root           %docroot%;
+        access_log     /var/log/%web_system%/domains/%domain%.log combined;
+        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+        expires        max;
+        # try_files      $uri @fallback;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /wp-config.php    {return 404;}
+    location ~ /xmlrpc.php       {return 404;}
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
index 4a910d0f..8f4d4e88 100644
--- a/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
+++ b/src/deb/for-download/tools/rate-limit-tpl/install_rate_limit_tpl.sh
@@ -71,4 +71,9 @@ wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-wordp
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-wordpress.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-wordpress.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-wordpress.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-wordpress.stpl
 
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-wordpress-2.tpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-wordpress-2.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/force-https-firewall-wordpress-2.stpl http://c.myvestacp.com/tools/rate-limit-tpl/force-https-firewall-wordpress-2.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-wordpress-2.tpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-wordpress-2.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/hosting-firewall-wordpress-2.stpl http://c.myvestacp.com/tools/rate-limit-tpl/hosting-firewall-wordpress-2.stpl
+
 systemctl restart nginx

From 7a13c03e9a91cd40934519e91138223f4d8b89ac Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 May 2024 13:48:11 +0200
Subject: [PATCH 2114/2300] Update v-migrate-site-to-https to use $phpver

---
 bin/v-migrate-site-to-https | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/bin/v-migrate-site-to-https b/bin/v-migrate-site-to-https
index de3a068c..6f28e2f7 100644
--- a/bin/v-migrate-site-to-https
+++ b/bin/v-migrate-site-to-https
@@ -94,6 +94,8 @@ if [ "$DB_EXISTS" = "no" ]; then
     exit 6
 fi
 
+phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$FROM_DOMAIN")
+
 # ----------- CHECK -------------
 
 FROM_REPLACE1="http://$FROM_DOMAIN"
@@ -170,9 +172,9 @@ if [ $IT_IS_WP -eq 0 ]; then
 else
     cd $SITE_FOLDER
     echo "=== Replacing $FROM_REPLACE1 to $TO_REPLACE1 in database $FROM_DATABASE_NAME"
-    sudo -H -u$FROM_USER wp search-replace "$FROM_REPLACE1" "$TO_REPLACE1" --precise --all-tables --skip-columns=guid
+    sudo -H -u$FROM_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "$FROM_REPLACE1" "$TO_REPLACE1" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
     echo "=== Replacing $FROM_REPLACE2 to $TO_REPLACE2 in database $FROM_DATABASE_NAME"
-    sudo -H -u$FROM_USER wp search-replace "$FROM_REPLACE2" "$TO_REPLACE2" --precise --all-tables --skip-columns=guid
+    sudo -H -u$FROM_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "$FROM_REPLACE2" "$TO_REPLACE2" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
 fi
 
 echo "===== DONE ===="

From 8a8422539c71f8104d645b5b4f43396c69f04ab5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 May 2024 13:52:46 +0200
Subject: [PATCH 2115/2300] Update v-migrate-site-to-https to use $phpver

---
 bin/v-migrate-site-to-https | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-migrate-site-to-https b/bin/v-migrate-site-to-https
index 6f28e2f7..b6f4295b 100644
--- a/bin/v-migrate-site-to-https
+++ b/bin/v-migrate-site-to-https
@@ -172,9 +172,9 @@ if [ $IT_IS_WP -eq 0 ]; then
 else
     cd $SITE_FOLDER
     echo "=== Replacing $FROM_REPLACE1 to $TO_REPLACE1 in database $FROM_DATABASE_NAME"
-    sudo -H -u$FROM_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "$FROM_REPLACE1" "$TO_REPLACE1" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    sudo -H -u$FROM_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "$FROM_REPLACE1" "$TO_REPLACE1" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$FROM_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
     echo "=== Replacing $FROM_REPLACE2 to $TO_REPLACE2 in database $FROM_DATABASE_NAME"
-    sudo -H -u$FROM_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "$FROM_REPLACE2" "$TO_REPLACE2" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    sudo -H -u$FROM_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "$FROM_REPLACE2" "$TO_REPLACE2" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$FROM_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
 fi
 
 echo "===== DONE ===="

From 6a72798abae0065e7f1535e6fd7947ecee871823 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 May 2024 13:55:10 +0200
Subject: [PATCH 2116/2300] Update v-clone-website to use $phpver

---
 bin/v-clone-website | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 44252313..f0db7246 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -422,14 +422,14 @@ else
     phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$TO_DOMAIN")
     cd $TO_FOLDER
     echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
-    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
     if [ "$FROM_USER" != "$TO_USER" ]; then
         echo "=== Replacing /home/$FROM_USER/ to /home/$TO_USER/ in database $TO_DATABASE_NAME"
-        sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "/home/$FROM_USER/" "/home/$TO_USER/" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
+        sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "/home/$FROM_USER/" "/home/$TO_USER/" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
     fi
-    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp cache flush --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
-    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp config shuffle-salts WP_CACHE_KEY_SALT --force --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
-    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp config shuffle-salts --skip-plugins=$(sudo -H -u$TO_USER wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp cache flush --skip-plugins=$(sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp config shuffle-salts WP_CACHE_KEY_SALT --force --skip-plugins=$(sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp config shuffle-salts --skip-plugins=$(sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
 fi
 
 # ----------- Update Wordfence WAF Path -------------

From 67b8376608ad35bc4b9e1ce7baa3627889a23d8a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 May 2024 14:02:52 +0200
Subject: [PATCH 2117/2300] Update v-add-wordpress-admin to use $phpver

---
 bin/v-add-wordpress-admin | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/bin/v-add-wordpress-admin b/bin/v-add-wordpress-admin
index 4fc71c05..3814e51a 100644
--- a/bin/v-add-wordpress-admin
+++ b/bin/v-add-wordpress-admin
@@ -65,12 +65,14 @@ if ! command -v wp &> /dev/null; then
     echo "WP CLI installed successfully."
 fi
 
+phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
+
 #----------------------------------------------------------#
 #                       Action                             #
 #----------------------------------------------------------#
 
 cd /home/$USER/web/$domain/public_html
-sudo -u $USER wp user create $username $email --role=administrator --user_pass="$password"
+sudo -u $USER /usr/bin/php$phpver /usr/local/bin/wp user create $username $email --role=administrator --user_pass="$password" --skip-plugins=$(sudo -H -u$USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From d59c4fafe270856fd3468b563c7e990d5b576915 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 May 2024 14:11:17 +0200
Subject: [PATCH 2118/2300] Update v-run-wpcli to use $phpver

---
 bin/v-run-wpcli | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/bin/v-run-wpcli b/bin/v-run-wpcli
index 8937642a..3ab4b4e5 100644
--- a/bin/v-run-wpcli
+++ b/bin/v-run-wpcli
@@ -63,12 +63,14 @@ if [ ! -d "/home/$user/web/$domain/public_html" ]; then
     exit 1;
 fi
 
+phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
+
 #----------------------------------------------------------#
 #                       Action                             #
 #----------------------------------------------------------#
 
 cd /home/$USER/web/$domain/public_html
-sudo -u $USER wp $wp_command
+sudo -u $USER /usr/bin/php$phpver /usr/local/bin/wp $wp_command --skip-plugins=$(sudo -H -u$USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 30fb3d6a6c8bd88acb59fc0a85430c2e5b76df0a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 May 2024 15:05:43 +0200
Subject: [PATCH 2119/2300] Update v-delete-user: rm -rf /hdd/home/$user

---
 bin/v-delete-user | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-delete-user b/bin/v-delete-user
index c452f0a0..120b1f72 100755
--- a/bin/v-delete-user
+++ b/bin/v-delete-user
@@ -94,6 +94,9 @@ fi
 # Deleting user directories
 chattr -i $HOMEDIR/$user/conf
 rm -rf $HOMEDIR/$user
+if [ -f "/hdd/home/$user" ]; then
+    rm -rf /hdd/home/$user
+fi
 rm -f /var/spool/mail/$user
 rm -f /var/spool/cron/$user
 rm -f /var/spool/cron/crontabs/$user

From 357b20cc52bebfc8910c67688489218c642c5c9d Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 30 May 2024 17:01:39 +0200
Subject: [PATCH 2120/2300] Rename v-run-wpcli to v-run-wp-cli

---
 bin/{v-run-wpcli => v-run-wp-cli} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename bin/{v-run-wpcli => v-run-wp-cli} (100%)

diff --git a/bin/v-run-wpcli b/bin/v-run-wp-cli
similarity index 100%
rename from bin/v-run-wpcli
rename to bin/v-run-wp-cli

From edf1f616b249009af6d03a29e6ea3f04fa46e9eb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 May 2024 17:23:43 +0200
Subject: [PATCH 2121/2300] Update v-run-wp-cli: removing --skip-plugins and
 --skip-themes

---
 bin/v-run-wp-cli | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-run-wp-cli b/bin/v-run-wp-cli
index 3ab4b4e5..672832ab 100644
--- a/bin/v-run-wp-cli
+++ b/bin/v-run-wp-cli
@@ -70,7 +70,7 @@ phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
 #----------------------------------------------------------#
 
 cd /home/$USER/web/$domain/public_html
-sudo -u $USER /usr/bin/php$phpver /usr/local/bin/wp $wp_command --skip-plugins=$(sudo -H -u$USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
+sudo -u $USER /usr/bin/php$phpver /usr/local/bin/wp $wp_command
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 72baf4c702d7c34f2b83d47e19a8ed27c65a4200 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 May 2024 17:29:18 +0200
Subject: [PATCH 2122/2300] Version 0.9.9-0-11

---
 Changelog.md       | 6 ++++++
 src/deb/latest.txt | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/Changelog.md b/Changelog.md
index b13f0080..9c679c51 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,9 @@
+Version 0.9.9-0-11 [30-May-2024]
+==================================================
+* Introducing v-run-wp-cli command
+* Introducing v-add-wordpress-admin command
+* Few bugs fixed
+
 Version 0.9.9-0-10 [11-Apr-2024]
 ==================================================
 * Introducing v-edit-php-ini command
diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index bc58cb6b..4b6e56b5 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0-10
\ No newline at end of file
+vesta-0.9.9-0-11
\ No newline at end of file

From 7fa725b893d9d476e621d10a529de90c0f219b90 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 30 May 2024 19:35:12 +0200
Subject: [PATCH 2123/2300] Update Changelog.md

---
 Changelog.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/Changelog.md b/Changelog.md
index 9c679c51..7d22747a 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,13 +1,13 @@
 Version 0.9.9-0-11 [30-May-2024]
 ==================================================
-* Introducing v-run-wp-cli command
-* Introducing v-add-wordpress-admin command
+* Introducing v-run-wp-cli command ( @isscbta )
+* Introducing v-add-wordpress-admin command ( @isscbta )
 * Few bugs fixed
 
 Version 0.9.9-0-10 [11-Apr-2024]
 ==================================================
-* Introducing v-edit-php-ini command
-* Introducing v-edit-domain-php-ini command
+* Introducing v-edit-php-ini command ( @isscbta )
+* Introducing v-edit-domain-php-ini command ( @isscbta )
 
 Version 0.9.9-0-9 [05-Apr-2024]
 ==================================================

From c1f7c91953f0c06d2d6d5984c98ddc14574975ba Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 7 Aug 2024 13:55:33 +0200
Subject: [PATCH 2124/2300] Added support for PHP 8.3

---
 bin/v-activate-rocket-nginx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-activate-rocket-nginx b/bin/v-activate-rocket-nginx
index bd4145cc..de8f6c5f 100644
--- a/bin/v-activate-rocket-nginx
+++ b/bin/v-activate-rocket-nginx
@@ -126,7 +126,7 @@ else
     chown $user:$user /home/$user/web/$domain/cron.log
 
     case $fpm_ver in
-        5.6 | 7.0 | 7.1 | 7.2 | 7.3 | 7.4 | 8.0 | 8.1 | 8.2) 
+        5.6 | 7.0 | 7.1 | 7.2 | 7.3 | 7.4 | 8.0 | 8.1 | 8.2 | 8.3) 
             /usr/local/vesta/bin/v-add-cron-job "$user" "*/15" "*" "*" "*" "*" "cd /home/$user/web/$domain/public_html; /usr/bin/php$fpm_ver wp-cron.php >/home/$user/web/$domain/cron.log 2>&1"
             ;;
     esac

From 7ff828bf1444d5f36899b328675e757e6fe98bfe Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 Aug 2024 12:45:58 +0200
Subject: [PATCH 2125/2300] Update v-import-cpanel-backup - removing
 /*!999999\- enable the sandbox mode */

---
 bin/v-import-cpanel-backup | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-import-cpanel-backup b/bin/v-import-cpanel-backup
index f92ae5af..a70213dd 100644
--- a/bin/v-import-cpanel-backup
+++ b/bin/v-import-cpanel-backup
@@ -157,9 +157,11 @@ for sk_dbr in $sk_db_list
 			echo " Create and restore ${sk_dbr} "
 			sed -i "s/utf8mb4_unicode_520_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.create
 			sed -i "s/utf8mb4_0900_ai_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.create
+			v-sed '/*!999999\- enable the sandbox mode */' '' mysql/${sk_dbr}.create
 			mysql < mysql/${sk_dbr}.create
 			sed -i "s/utf8mb4_unicode_520_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.sql
 			sed -i "s/utf8mb4_0900_ai_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.sql
+			v-sed '/*!999999\- enable the sandbox mode */' '' mysql/${sk_dbr}.sql
 			mysql ${sk_dbr} < mysql/${sk_dbr}.sql
 		else
 			echo "Error: Cant restore database $sk_dbr alredy exists in mysql server"

From 574fff064249b5acc3c67009e6a5d249027a609d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Aug 2024 13:44:30 +0200
Subject: [PATCH 2126/2300] Update multi-php-install.sh - removing buster sury
 repo

---
 src/deb/for-download/tools/multi-php-install.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index bea7774f..bf5da7b7 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -103,9 +103,9 @@ if [ "$inst_repo" -eq 1 ]; then
     if [ $debian_version -ge 10 ]; then
       wget -nv -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
     fi
-    if [ $debian_version -eq 10 ]; then
-      sh -c 'echo "deb https://packages.sury.org/php/ buster main" > /etc/apt/sources.list.d/php.list'
-    fi
+    # if [ $debian_version -eq 10 ]; then
+    #   sh -c 'echo "deb https://packages.sury.org/php/ buster main" > /etc/apt/sources.list.d/php.list'
+    # fi
     if [ $debian_version -eq 11 ]; then
       sh -c 'echo "deb https://packages.sury.org/php/ bullseye main" > /etc/apt/sources.list.d/php.list'
     fi

From 1ee49205769ac2ef2957f089839c2d647940bb8c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 13 Aug 2024 13:49:46 +0200
Subject: [PATCH 2127/2300] Update multi-php-install.sh

---
 src/deb/for-download/tools/multi-php-install.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index bf5da7b7..6a65a888 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -100,7 +100,7 @@ apt update
 if [ "$inst_repo" -eq 1 ]; then
     press_enter "=== Press enter to install sury.org repo ==============================================================================="
     apt -y install apt-transport-https ca-certificates
-    if [ $debian_version -ge 10 ]; then
+    if [ $debian_version -ge 11 ]; then
       wget -nv -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
     fi
     # if [ $debian_version -eq 10 ]; then

From 6e7954db5522f247e4431bbd25df2b8ef7246695 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 15 Aug 2024 10:19:34 +0200
Subject: [PATCH 2128/2300] Fixing Issue #185

---
 install/debian/10/templates/web/awstats/awstats.tpl | 2 +-
 install/debian/11/templates/web/awstats/awstats.tpl | 2 +-
 install/debian/12/templates/web/awstats/awstats.tpl | 2 +-
 install/debian/8/templates/web/awstats/awstats.tpl  | 2 +-
 install/debian/9/templates/web/awstats/awstats.tpl  | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/install/debian/10/templates/web/awstats/awstats.tpl b/install/debian/10/templates/web/awstats/awstats.tpl
index 9a92e0fd..6bb51c50 100755
--- a/install/debian/10/templates/web/awstats/awstats.tpl
+++ b/install/debian/10/templates/web/awstats/awstats.tpl
@@ -24,7 +24,7 @@ PurgeLogFile=0
 ArchiveLogRecords=0
 KeepBackupOfHistoricFiles=1
 DefaultFile="index.php index.html"
-SkipHosts="127.0.0.1
+SkipHosts="127.0.0.1"
 SkipUserAgents=""
 SkipFiles=""
 SkipReferrersBlackList=""
diff --git a/install/debian/11/templates/web/awstats/awstats.tpl b/install/debian/11/templates/web/awstats/awstats.tpl
index 9a92e0fd..6bb51c50 100755
--- a/install/debian/11/templates/web/awstats/awstats.tpl
+++ b/install/debian/11/templates/web/awstats/awstats.tpl
@@ -24,7 +24,7 @@ PurgeLogFile=0
 ArchiveLogRecords=0
 KeepBackupOfHistoricFiles=1
 DefaultFile="index.php index.html"
-SkipHosts="127.0.0.1
+SkipHosts="127.0.0.1"
 SkipUserAgents=""
 SkipFiles=""
 SkipReferrersBlackList=""
diff --git a/install/debian/12/templates/web/awstats/awstats.tpl b/install/debian/12/templates/web/awstats/awstats.tpl
index 9a92e0fd..6bb51c50 100755
--- a/install/debian/12/templates/web/awstats/awstats.tpl
+++ b/install/debian/12/templates/web/awstats/awstats.tpl
@@ -24,7 +24,7 @@ PurgeLogFile=0
 ArchiveLogRecords=0
 KeepBackupOfHistoricFiles=1
 DefaultFile="index.php index.html"
-SkipHosts="127.0.0.1
+SkipHosts="127.0.0.1"
 SkipUserAgents=""
 SkipFiles=""
 SkipReferrersBlackList=""
diff --git a/install/debian/8/templates/web/awstats/awstats.tpl b/install/debian/8/templates/web/awstats/awstats.tpl
index 9a92e0fd..6bb51c50 100755
--- a/install/debian/8/templates/web/awstats/awstats.tpl
+++ b/install/debian/8/templates/web/awstats/awstats.tpl
@@ -24,7 +24,7 @@ PurgeLogFile=0
 ArchiveLogRecords=0
 KeepBackupOfHistoricFiles=1
 DefaultFile="index.php index.html"
-SkipHosts="127.0.0.1
+SkipHosts="127.0.0.1"
 SkipUserAgents=""
 SkipFiles=""
 SkipReferrersBlackList=""
diff --git a/install/debian/9/templates/web/awstats/awstats.tpl b/install/debian/9/templates/web/awstats/awstats.tpl
index 9a92e0fd..6bb51c50 100755
--- a/install/debian/9/templates/web/awstats/awstats.tpl
+++ b/install/debian/9/templates/web/awstats/awstats.tpl
@@ -24,7 +24,7 @@ PurgeLogFile=0
 ArchiveLogRecords=0
 KeepBackupOfHistoricFiles=1
 DefaultFile="index.php index.html"
-SkipHosts="127.0.0.1
+SkipHosts="127.0.0.1"
 SkipUserAgents=""
 SkipFiles=""
 SkipReferrersBlackList=""

From b9f89d0416f326d1a4a902bc332288a41d56b815 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 23 Aug 2024 15:54:57 +0200
Subject: [PATCH 2129/2300] Update v-make-separated-ip-for-email - fix for deb
 10 and 11

---
 bin/v-make-separated-ip-for-email | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 49d31f45..17a0d0ca 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -139,6 +139,15 @@ if [ "$check_grep" -eq 0 ]; then
     echo "=== patching exim4.conf.template"
     mv /etc/exim4/exim4.conf.template /etc/exim4/exim4.conf.template-backup
     cp /usr/local/vesta/install/debian/12/exim/exim4.conf.template /etc/exim4/exim4.conf.template
+
+    release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+    if [ "$release" -lt 11 ]; then
+        sed -i "s|smtputf8_advertise_hosts|#smtputf8_advertise_hosts|g" /etc/exim4/exim4.conf.template
+    fi
+    if [ "$release" -lt 12 ]; then
+        sed -i "s|message_linelength_limit|#message_linelength_limit|g" /etc/exim4/exim4.conf.template
+    fi
+
     sed -i "s|FIRSTIP|$HOST_IP|g" /etc/exim4/exim4.conf.template
     sed -i "s|SECONDIP|$MAIL_IP|g" /etc/exim4/exim4.conf.template
     sed -i "s|FIRSTHOST|$HOSTNAME|g" /etc/exim4/exim4.conf.template
@@ -168,9 +177,10 @@ if [ "$check_grep" -eq 0 ]; then
     fi
     systemctl restart exim4
     if [ $? -ne 0 ]; then
+        systemctl status exim4
         cp /etc/exim4/exim4.conf.template-backup /etc/exim4/exim4.conf.template
         systemctl restart exim4
-        echo "=== Patching failed, aborting"
+        echo "=== Patching failed, old exim conf returned, exim4 restarted again."
         exit 1
     fi
     echo "=== Patching successful"

From a99ae91c21758075726433f8449c035b78480bce Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 2 Sep 2024 20:22:56 +0200
Subject: [PATCH 2130/2300] Update v-update-firewall: $FIREWALL_STATEFUL conf
 variable

---
 bin/v-update-firewall | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-update-firewall b/bin/v-update-firewall
index d3a46686..142cb39b 100755
--- a/bin/v-update-firewall
+++ b/bin/v-update-firewall
@@ -67,7 +67,7 @@ echo "$iptables -P INPUT ACCEPT" >> $tmp
 echo "$iptables -F INPUT" >> $tmp
 
 # Enabling stateful support
-if [ "$conntrack" != 'no' ] || grep --quiet container=lxc /proc/1/environ; then
+if [ "$FIREWALL_STATEFUL" == "yes" ] || [ "$conntrack" != 'no' ] || grep --quiet container=lxc /proc/1/environ; then
     str="$iptables -A INPUT -m state"
     str="$str --state ESTABLISHED,RELATED -j ACCEPT"
     echo "$str" >> $tmp

From 3ed2cfa07b25f71a71fcf9ba266ce615328339d6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 18 Sep 2024 18:37:34 +0300
Subject: [PATCH 2131/2300] Removing whitespace in php patch

---
 src/deb/for-download/tools/patches/php8.2.patch | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/patches/php8.2.patch b/src/deb/for-download/tools/patches/php8.2.patch
index 1083a720..ed127499 100644
--- a/src/deb/for-download/tools/patches/php8.2.patch
+++ b/src/deb/for-download/tools/patches/php8.2.patch
@@ -5,7 +5,7 @@
  ; It receives a comma-delimited list of function names.
  ; https://php.net/disable-functions
 -disable_functions = 
-+ disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen
  
  ; This directive allows you to disable certain classes.
  ; It receives a comma-delimited list of class names.

From c32bd2c7098d9b1a70dda272b90dcabfa00e3c28 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 19 Sep 2024 17:32:22 +0200
Subject: [PATCH 2132/2300] Generate random root password instead of using
 admin password

---
 bin/v-commander | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/bin/v-commander b/bin/v-commander
index f6a9cf7d..834fb38b 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -535,11 +535,11 @@ do
         echo "--- New settings ---"
         grep '^PermitRoot' /etc/ssh/sshd_config
         echo "--------------------"
-        adminline=$(grep '^admin:' /etc/shadow)
-        adminline=${adminline:6}
-        adminline="root:$adminline"
-        sed -i "s#^root:.*#$adminline#" /etc/shadow
-        echo "root password is now the same as admin password."
+        root_password=$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | head -c 32)
+        hashed_root_password=$(openssl passwd -6 "$root_password")
+        sed -i "s#^root:.*#root:$hashed_root_password#" /etc/shadow
+        echo "Root password is now a new random password."
+        echo "New root password: $root_password"
         echo "--------------------"
         grep '^root:' /etc/shadow
         grep '^admin:' /etc/shadow
@@ -549,7 +549,6 @@ do
         echo "--------------------"
     fi
 
-
     if [ "$answer" = 'r' ] || [ "$answer" = 'R' ]; then
         echo "============================="
         echo "== Rebooting the server"

From c148a1ed79d6a46f18270137f6d2d24693432d00 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Thu, 19 Sep 2024 19:01:21 +0200
Subject: [PATCH 2133/2300] Create v-get-dns-config

---
 bin/v-get-dns-config | 70 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 70 insertions(+)
 create mode 100644 bin/v-get-dns-config

diff --git a/bin/v-get-dns-config b/bin/v-get-dns-config
new file mode 100644
index 00000000..d759c489
--- /dev/null
+++ b/bin/v-get-dns-config
@@ -0,0 +1,70 @@
+#!/bin/bash
+# info: Get domain DNS config.db file content
+# options: DOMAIN 
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+SILENT_MODE=1
+
+# Argument definition
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/domain.sh
+
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+if [ ! -d "/home/$user" ]; then
+    # echo "User doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    # echo "Domain doesn't exist";
+    exit 1;
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+DNS_FILE="/home/$user/conf/dns/$domain.db"
+
+if [ -f "$DNS_FILE" ]; then
+    cat "$DNS_FILE"
+else
+    echo "DNS configuration file for $domain does not exist."
+    exit 1
+fi
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+exit 0;

From 76ad95da649ae2c2f9219d15e9c6b6dd8edff1ca Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 26 Sep 2024 20:00:41 +0200
Subject: [PATCH 2134/2300] Update vst-install-debian.sh - removing phppgadmin

---
 install/vst-install-debian.sh | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index e85517d8..75dfd1d7 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -27,7 +27,7 @@ if [ "$release" -eq 12 ]; then
         vsftpd proftpd-basic bind9 exim4 exim4-daemon-heavy
         clamav-daemon spamassassin dovecot-imapd dovecot-pop3d roundcube-core
         roundcube-mysql roundcube-plugins mariadb-server mariadb-common
-        mariadb-client postgresql postgresql-contrib phppgadmin phpmyadmin mc
+        mariadb-client postgresql postgresql-contrib phpmyadmin mc
         flex whois git idn zip sudo bc ftp lsof ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
@@ -1118,7 +1118,9 @@ if [ "$nginx" = 'yes' ]; then
     cp -f $vestacp/nginx/nginx.conf /etc/nginx/
     cp -f $vestacp/nginx/status.conf /etc/nginx/conf.d/
     cp -f $vestacp/nginx/phpmyadmin.inc /etc/nginx/conf.d/
-    cp -f $vestacp/nginx/phppgadmin.inc /etc/nginx/conf.d/
+    if [ "$release" -lt 12 ]; then
+        cp -f $vestacp/nginx/phppgadmin.inc /etc/nginx/conf.d/
+    fi
     cp -f $vestacp/nginx/webmail.inc /etc/nginx/conf.d/
     cp -f $vestacp/logrotate/nginx /etc/logrotate.d/
     
@@ -1404,10 +1406,12 @@ if [ "$postgresql" = 'yes' ]; then
     sudo -u postgres psql -c "ALTER USER postgres WITH PASSWORD '$ppass'"
 
     # Configuring phpPgAdmin
-    if [ "$apache" = 'yes' ]; then
-        cp -f $vestacp/pga/phppgadmin.conf /etc/apache2/conf.d/
+    if [ "$release" -lt 12 ]; then
+        if [ "$apache" = 'yes' ]; then
+            cp -f $vestacp/pga/phppgadmin.conf /etc/apache2/conf.d/
+        fi
+        cp -f $vestacp/pga/config.inc.php /etc/phppgadmin/
     fi
-    cp -f $vestacp/pga/config.inc.php /etc/phppgadmin/
 fi
 
 

From e79acf1828ba57df6da5454eaf3191113f828ecb Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 7 Oct 2024 20:04:46 +0200
Subject: [PATCH 2135/2300] v-make-main-apache-log

---
 bin/v-make-main-apache-log | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 bin/v-make-main-apache-log

diff --git a/bin/v-make-main-apache-log b/bin/v-make-main-apache-log
new file mode 100644
index 00000000..dc124064
--- /dev/null
+++ b/bin/v-make-main-apache-log
@@ -0,0 +1,20 @@
+#!/bin/bash
+
+touch /var/log/apache2/time.log
+# truncate -s 0 /var/log/apache2/time.log
+chmod 0640 /var/log/apache2/time.log
+chown root:adm /var/log/apache2/time.log
+find /home/*/conf/web/ -type f \( -name "apache2.conf" -or -name "sapache2.conf" -or -name "*.apache2.conf" -or -name "*.apache2.ssl.conf" \) -exec grep -L "time\.log" {} \; | xargs sed -i 's|ServerName |CustomLog /var/log/apache2/time.log time\n    ServerName |g'
+find /usr/local/vesta/data/templates/web/apache2 -type f \( -name "*.tpl" -or -name "*.stpl" \) -exec grep -L "time\.log" {} \; | xargs sed -i 's|ServerName |CustomLog /var/log/apache2/time.log time\n    ServerName |g'
+if ! /usr/local/vesta/bin/v-grep 'LogFormat "%t %v %a %D %r %>s \"%{User-Agent}i\"" time' '/etc/apache2/apache2.conf' '-q'; then
+    sed -i 's|LogFormat "%b" bytes|LogFormat "%b" bytes\nLogFormat "%t %v %a %D %r %>s \\\"%{User-Agent}i\\\"" time|g' /etc/apache2/apache2.conf
+fi
+systemctl restart apache2
+
+if [ ! -f "/root/analyze-traffic-per-time.php" ]; then
+    wget -nv http://dl.myvestacp.com/vesta/apache_requests_analyzer/analyze-traffic-per-time.php -O /root/analyze-traffic-per-time.php
+    wget -nv http://dl.myvestacp.com/vesta/apache_requests_analyzer/analyze-traffic-per-site-sort-by-time.php -O /root/analyze-traffic-per-site-sort-by-time.php
+    wget -nv http://dl.myvestacp.com/vesta/apache_requests_analyzer/analyze-traffic-per-site-sort-by-hits.php -O /root/analyze-traffic-per-site-sort-by-hits.php
+    wget -nv http://dl.myvestacp.com/vesta/apache_requests_analyzer/analyze-traffic-per-ip-sort-by-time.php -O /root/analyze-traffic-per-ip-sort-by-time.php
+    wget -nv http://dl.myvestacp.com/vesta/apache_requests_analyzer/analyze-traffic-per-ip-sort-by-hits.php -O /root/analyze-traffic-per-ip-sort-by-hits.php
+fi

From acfc563a6c8f469cb8e98c7b681fb9cf821fd476 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 14 Oct 2024 17:51:26 +0200
Subject: [PATCH 2136/2300] Logging apache pid in v-make-main-apache-log

---
 bin/v-make-main-apache-log | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-make-main-apache-log b/bin/v-make-main-apache-log
index dc124064..96e91877 100644
--- a/bin/v-make-main-apache-log
+++ b/bin/v-make-main-apache-log
@@ -7,7 +7,7 @@ chown root:adm /var/log/apache2/time.log
 find /home/*/conf/web/ -type f \( -name "apache2.conf" -or -name "sapache2.conf" -or -name "*.apache2.conf" -or -name "*.apache2.ssl.conf" \) -exec grep -L "time\.log" {} \; | xargs sed -i 's|ServerName |CustomLog /var/log/apache2/time.log time\n    ServerName |g'
 find /usr/local/vesta/data/templates/web/apache2 -type f \( -name "*.tpl" -or -name "*.stpl" \) -exec grep -L "time\.log" {} \; | xargs sed -i 's|ServerName |CustomLog /var/log/apache2/time.log time\n    ServerName |g'
 if ! /usr/local/vesta/bin/v-grep 'LogFormat "%t %v %a %D %r %>s \"%{User-Agent}i\"" time' '/etc/apache2/apache2.conf' '-q'; then
-    sed -i 's|LogFormat "%b" bytes|LogFormat "%b" bytes\nLogFormat "%t %v %a %D %r %>s \\\"%{User-Agent}i\\\"" time|g' /etc/apache2/apache2.conf
+    sed -i 's|LogFormat "%b" bytes|LogFormat "%b" bytes\nLogFormat "%t %v %a %D %r %>s \\\"%{User-Agent}i\\\" pid=%P" time|g' /etc/apache2/apache2.conf
 fi
 systemctl restart apache2
 

From 24371b8bbfa16ee3e9137f29b0f37420cb9afabc Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 18 Oct 2024 22:12:23 +0200
Subject: [PATCH 2137/2300] Update v-clone-website: adding --EXCLUDE_UPLOADS
 parameter

---
 bin/v-clone-website | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index f0db7246..8670ee3a 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -313,6 +313,7 @@ echo "FROM_DOMAIN_PROXY_TPL = $FROM_DOMAIN_PROXY_TPL"
 echo "FROM_DOMAIN_PROXY_EXT = $FROM_DOMAIN_PROXY_EXT"
 echo "SEARCH_FOR_CONFIGS_DATABASE_NAME     = $SEARCH_FOR_CONFIGS_DATABASE_NAME"
 echo "SEARCH_FOR_CONFIGS_DATABASE_USERNAME = $SEARCH_FOR_CONFIGS_DATABASE_USERNAME"
+echo "EXCLUDE_UPLOADS = $EXCLUDE_UPLOADS"
 echo "==============================================================================="
 read -p "=== Press Enter to continue ==="
 
@@ -373,14 +374,22 @@ cd /root/temp
 mysqldump $FROM_DATABASE_NAME > $FROM_DATABASE_NAME.sql
 echo "=== Importing to database $TO_DATABASE_NAME"
 mysql $TO_DATABASE_NAME < $FROM_DATABASE_NAME.sql
+rm $FROM_DATABASE_NAME.sql
+
+EXCLUDE=''
+if [ ! -z "$EXCLUDE_UPLOADS" ]; then
+    EXCLUDE="--exclude '/wp-content/uploads/*'"
+fi
 
 echo "=== Copying files from $FROM_FOLDER to folder $TO_FOLDER"
 if [ "$SITE_SUBFOLDER" != ".." ]; then
-    echo "====== Executing: rsync -a --delete $FROM_FOLDER/ $TO_FOLDER/"
-    rsync -a --delete $FROM_FOLDER/ $TO_FOLDER/
+    run="rsync -a --delete $EXCLUDE $FROM_FOLDER/ $TO_FOLDER/"
+    echo "====== Executing: $run"
+    eval $run
 else
-    echo "====== Executing: rsync -a --delete --exclude 'logs/*' $FROM_FOLDER/ $TO_FOLDER/"
-    rsync -a --delete --exclude 'logs/*' $FROM_FOLDER/ $TO_FOLDER/
+    run="rsync -a --delete $EXCLUDE --exclude 'logs/*' $FROM_FOLDER/ $TO_FOLDER/"
+    echo "====== Executing: $run"
+    eval $run
 fi
 echo "=== Chowning to $TO_USER:$TO_USER in folder $TO_FOLDER"
 chown -R $TO_USER:$TO_USER $TO_FOLDER

From da84a0b9131ddbc42d0e7fc3f6311181b9fbeb54 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 25 Oct 2024 18:08:09 +0200
Subject: [PATCH 2138/2300] v-fix-php-ini-disable-functions

---
 bin/v-fix-php-ini-disable-functions | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 bin/v-fix-php-ini-disable-functions

diff --git a/bin/v-fix-php-ini-disable-functions b/bin/v-fix-php-ini-disable-functions
new file mode 100644
index 00000000..1324bfa2
--- /dev/null
+++ b/bin/v-fix-php-ini-disable-functions
@@ -0,0 +1,28 @@
+#!/bin/bash
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+echo "=== Fixing php.ini files to have the correct disable_functions line"
+
+export NOTFOUNDVAL="exec,system,passthru,shell_exec"
+export LINEBEGINSWITH="disable_functions ="
+export NEWVAL="disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen"
+
+echo "== Fixing existing lines"
+find /etc/php/*/fpm/ -type f -name "php.ini" -exec grep -L "$NOTFOUNDVAL" {} \; | xargs sh -c 'for arg do echo "= Patching $arg"; sed -i "s|^$LINEBEGINSWITH.*|$NEWVAL|g" $arg; done' _
+
+export NOTFOUNDVAL2="^$LINEBEGINSWITH"
+export REMOVELINETHATCONTAINS=$LINEBEGINSWITH
+
+echo "== Adding missing lines"
+find /etc/php/*/fpm/ -type f -name "php.ini" -exec grep -L "$NOTFOUNDVAL2" {} \; | xargs sh -c 'for arg do echo "= Patching $arg"; sed -i "s|.*$REMOVELINETHATCONTAINS.*||g" $arg; echo "$NEWVAL" >> $arg; done' _
+
+echo "== Restarting all PHP-FPM services"
+systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | xargs systemctl restart
+
+echo "=== Everything done."
+exit 0

From afc6b62d5cd927377d5a435232bbdd21078996f8 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 25 Oct 2024 20:57:20 +0200
Subject: [PATCH 2139/2300] v-fix-php-ini-disable-dunctions exclude patching

---
 bin/v-fix-php-ini-disable-functions | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-fix-php-ini-disable-functions b/bin/v-fix-php-ini-disable-functions
index 1324bfa2..a9d572f6 100644
--- a/bin/v-fix-php-ini-disable-functions
+++ b/bin/v-fix-php-ini-disable-functions
@@ -13,13 +13,13 @@ export LINEBEGINSWITH="disable_functions ="
 export NEWVAL="disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen"
 
 echo "== Fixing existing lines"
-find /etc/php/*/fpm/ -type f -name "php.ini" -exec grep -L "$NOTFOUNDVAL" {} \; | xargs sh -c 'for arg do echo "= Patching $arg"; sed -i "s|^$LINEBEGINSWITH.*|$NEWVAL|g" $arg; done' _
+find /etc/php/*/fpm/ -type f -name "php.ini" -exec grep -L "$NOTFOUNDVAL" {} \; | xargs sh -c 'for arg do if [ ! -f "$arg.disable_patching" ]; then echo "= Patching $arg"; sed -i "s|^$LINEBEGINSWITH.*|$NEWVAL|g" $arg; fi; done' _
 
 export NOTFOUNDVAL2="^$LINEBEGINSWITH"
 export REMOVELINETHATCONTAINS=$LINEBEGINSWITH
 
 echo "== Adding missing lines"
-find /etc/php/*/fpm/ -type f -name "php.ini" -exec grep -L "$NOTFOUNDVAL2" {} \; | xargs sh -c 'for arg do echo "= Patching $arg"; sed -i "s|.*$REMOVELINETHATCONTAINS.*||g" $arg; echo "$NEWVAL" >> $arg; done' _
+find /etc/php/*/fpm/ -type f -name "php.ini" -exec grep -L "$NOTFOUNDVAL2" {} \; | xargs sh -c 'for arg do if [ ! -f "$arg.disable_patching" ]; then echo "= Patching $arg"; sed -i "s|.*$REMOVELINETHATCONTAINS.*||g" $arg; echo "$NEWVAL" >> $arg; fi; done' _
 
 echo "== Restarting all PHP-FPM services"
 systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | xargs systemctl restart

From 89fc5a1ebd94be9ab0588a2386f81ee6739ed44f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 Nov 2024 18:07:38 +0100
Subject: [PATCH 2140/2300] SRS support for Exim4

---
 bin/v-add-srs-support-to-exim              | 65 ++++++++++++++++++++++
 install/debian/12/exim/exim4.conf.template | 40 ++++++++++++-
 install/vst-install-debian.sh              | 12 +++-
 3 files changed, 114 insertions(+), 3 deletions(-)
 create mode 100644 bin/v-add-srs-support-to-exim

diff --git a/bin/v-add-srs-support-to-exim b/bin/v-add-srs-support-to-exim
new file mode 100644
index 00000000..39d92e63
--- /dev/null
+++ b/bin/v-add-srs-support-to-exim
@@ -0,0 +1,65 @@
+#!/bin/bash
+
+gen_pass() {
+    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
+    if [ -z "$1" ]; then
+        LENGTH=32
+    else
+        LENGTH=$1
+    fi
+    while [ ${n:=1} -le $LENGTH ]; do
+        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
+        let n+=1
+    done
+    echo "$PASS"
+}
+
+echo "=== Addind SRS support to Exim4 ==="
+# SRS support is taken from HestiaCP
+
+if [ ! -f "/etc/exim4/srs.conf" ]; then
+    echo "= Generating SRS KEY"
+    srs=$(gen_pass 16) 
+    echo $srs > /etc/exim4/srs.conf
+    chmod 640 /etc/exim4/srs.conf
+    chown root:Debian-exim /etc/exim4/srs.conf
+fi
+
+if [ -f "/etc/exim4/exim4.conf.template.backup-without-srs" ]; then
+    echo "= Backing up /etc/exim4/exim4.conf.template"
+    cp /etc/exim4/exim4.conf.template /etc/exim4/exim4.conf.template.backup-without-srs
+fi
+
+if ! /usr/local/vesta/bin/v-grep 'SRS_SECRET = ' '/etc/exim4/exim4.conf.template' '-q'; then
+    echo "= Adding: SRS_SECRET = readfile /etc/exim4/srs.conf"
+    v-sed 'smtputf8_advertise_hosts =' 'smtputf8_advertise_hosts =\n\nSRS_SECRET = ${readfile{/etc/exim4/srs.conf}}' '/etc/exim4/exim4.conf.template'
+fi
+
+if ! /usr/local/vesta/bin/v-grep 'if outbound, and forwarding has been done, use an alternate transport' '/etc/exim4/exim4.conf.template' '-q'; then
+    echo "= Patching \"dnslookup:\" block"
+    /usr/local/vesta/bin/v-php-func "replace_in_file_once_between_including_borders" "/etc/exim4/exim4.conf.template" 'dnslookup:' '  no_more' 'dnslookup:\n  driver = dnslookup\n  # if outbound, and forwarding has been done, use an alternate transport\n  domains = ! +local_domains\n  transport = ${if eq {$local_part@$domain} \\n                      {$original_local_part@$original_domain} \\n                      {remote_smtp} {remote_forwarded_smtp}}\n  no_more'
+fi
+
+if ! /usr/local/vesta/bin/v-grep 'inbound_srs:' '/etc/exim4/exim4.conf.template' '-q'; then
+    echo "= Adding \"inbound_srs\" and \"inbound_srs_failure\" blocks"
+    v-sed 'aliases:' 'inbound_srs:\n    driver = redirect\n    senders = :\n    domains = +local_domains\n    # detect inbound bounces which are converted to SRS, and decode them\n    condition = ${if inbound_srs {$local_part} {SRS_SECRET}}\n    data = $srs_recipient\n\ninbound_srs_failure:\n    driver = redirect\n    senders = :\n    domains = +local_domains\n    # detect inbound bounces which look converted to SRS but are invalid\n    condition = ${if inbound_srs {$local_part} {}}\n    allow_fail\n    data = :fail: Invalid SRS recipient address\n\naliases:' '/etc/exim4/exim4.conf.template'
+fi
+
+if ! /usr/local/vesta/bin/v-grep 'remote_forwarded_smtp:' '/etc/exim4/exim4.conf.template' '-q'; then
+    echo "= Adding \"remote_forwarded_smtp:\" block"
+    v-sed 'procmail:\n  driver = pipe' 'remote_forwarded_smtp:\n  driver = smtp\n  dkim_domain = DKIM_DOMAIN\n  dkim_selector = mail\n  dkim_private_key = DKIM_PRIVATE_KEY\n  dkim_canon = relaxed\n  dkim_strict = 0\n  hosts_try_fastopen = \n  hosts_try_chunking = !93.188.3.0/24\n  message_linelength_limit = 1G\n  # modify the envelope from, for mails that we forward\n  max_rcpt = 1\n  return_path = ${srs_encode {SRS_SECRET} {$return_path} {$original_domain}}\n\nprocmail:\n  driver = pipe' '/etc/exim4/exim4.conf.template'
+fi
+
+echo "= Restarting exim4 service"
+systemctl restart exim4
+
+if [ $? -ne 0 ]; then
+    systemctl status exim4
+    cp /etc/exim4/exim4.conf.template.backup-without-srs /etc/exim4/exim4.conf.template
+    systemctl restart exim4
+    echo "=== Patching failed, old exim conf returned, exim4 restarted again."
+    exit 1
+fi
+echo "=== SRS support was added successfully. ==="
+
+exit 0
diff --git a/install/debian/12/exim/exim4.conf.template b/install/debian/12/exim/exim4.conf.template
index aeb83726..ff0d7ab3 100644
--- a/install/debian/12/exim/exim4.conf.template
+++ b/install/debian/12/exim/exim4.conf.template
@@ -13,6 +13,8 @@ add_environment=<; PATH=/bin:/usr/bin
 keep_environment=
 smtputf8_advertise_hosts =
 
+SRS_SECRET = ${readfile{/etc/exim4/srs.conf}}
+
 #local_interfaces =  0.0.0.0
 #smtp_active_hostname = ${lookup{$interface_address}lsearch{/etc/exim4/virtual/helo_data}{$value}}
 #smtp_banner = "$smtp_active_hostname ESMTP $tod_full"
@@ -267,8 +269,11 @@ begin routers
 
 dnslookup:
   driver = dnslookup
-  domains = !+local_domains
-  transport = remote_smtp
+  # if outbound, and forwarding has been done, use an alternate transport
+  domains = ! +local_domains
+  transport = ${if eq {$local_part@$domain} \
+                      {$original_local_part@$original_domain} \
+                      {remote_smtp} {remote_forwarded_smtp}}
   no_more
 
 localuser_spam:
@@ -305,6 +310,23 @@ autoreplay:
   transport = userautoreply
   unseen
 
+inbound_srs:
+    driver = redirect
+    senders = :
+    domains = +local_domains
+    # detect inbound bounces which are converted to SRS, and decode them
+    condition = ${if inbound_srs {$local_part} {SRS_SECRET}}
+    data = $srs_recipient
+
+inbound_srs_failure:
+    driver = redirect
+    senders = :
+    domains = +local_domains
+    # detect inbound bounces which look converted to SRS but are invalid
+    condition = ${if inbound_srs {$local_part} {}}
+    allow_fail
+    data = :fail: Invalid SRS recipient address
+
 aliases:
   driver = redirect
   headers_add = X-redirected: yes
@@ -357,6 +379,20 @@ remote_smtp:
   hosts_try_chunking = !93.188.3.0/24
   message_linelength_limit = 1G
 
+remote_forwarded_smtp:
+  driver = smtp
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+  hosts_try_fastopen = 
+  hosts_try_chunking = !93.188.3.0/24
+  message_linelength_limit = 1G
+  # modify the envelope from, for mails that we forward
+  max_rcpt = 1
+  return_path = ${srs_encode {SRS_SECRET} {$return_path} {$original_domain}}
+
 procmail:
   driver = pipe
   command = "/usr/bin/procmail -d $local_part"
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 75dfd1d7..62277e06 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -131,7 +131,11 @@ help() {
 # Defining password-gen function
 gen_pass() {
     MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
-    LENGTH=32
+    if [ -z "$1" ]; then
+        LENGTH=32
+    else
+        LENGTH=$1
+    fi
     while [ ${n:=1} -le $LENGTH ]; do
         PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
         let n+=1
@@ -1465,6 +1469,12 @@ if [ "$exim" = 'yes' ]; then
         sed -i "s/#CLAMD/CLAMD/g" /etc/exim4/exim4.conf.template
     fi
 
+    # Generating SRS KEY - the code is taken from HestiaCP
+    srs=$(gen_pass 16)
+    echo $srs > /etc/exim4/srs.conf
+    chmod 640 /etc/exim4/srs.conf
+    chown root:Debian-exim /etc/exim4/srs.conf
+
     chmod 640 /etc/exim4/exim4.conf.template
     rm -rf /etc/exim4/domains
     mkdir -p /etc/exim4/domains

From 24d84de6d282d9a5fd2e40531fe180fb9597b495 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 8 Nov 2024 23:58:05 +0100
Subject: [PATCH 2141/2300] Update v-fix-php-ini-disable-functions

---
 bin/v-fix-php-ini-disable-functions | 25 ++++++++++++++++---------
 1 file changed, 16 insertions(+), 9 deletions(-)

diff --git a/bin/v-fix-php-ini-disable-functions b/bin/v-fix-php-ini-disable-functions
index a9d572f6..3bce868f 100644
--- a/bin/v-fix-php-ini-disable-functions
+++ b/bin/v-fix-php-ini-disable-functions
@@ -3,26 +3,33 @@
 whoami=$(whoami)
 if [ "$whoami" != "root" ]; then
     echo "You must be root to execute this script"
-    exit 1
+    exit 1;
 fi
 
+if [ -f "/tmp/patched" ]; then rm /tmp/patched; fi;
+
 echo "=== Fixing php.ini files to have the correct disable_functions line"
 
 export NOTFOUNDVAL="exec,system,passthru,shell_exec"
 export LINEBEGINSWITH="disable_functions ="
 export NEWVAL="disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen"
 
-echo "== Fixing existing lines"
-find /etc/php/*/fpm/ -type f -name "php.ini" -exec grep -L "$NOTFOUNDVAL" {} \; | xargs sh -c 'for arg do if [ ! -f "$arg.disable_patching" ]; then echo "= Patching $arg"; sed -i "s|^$LINEBEGINSWITH.*|$NEWVAL|g" $arg; fi; done' _
+find /etc/php/*/fpm/ -type f -name "php.ini" -exec grep -L "$NOTFOUNDVAL" {} \; | xargs sh -c 'found=0; for arg do if [ ! -f "$arg.disable_patching" ]; then if [ $found -eq 0 ]; then echo "== Fixing existing lines"; found=1; touch /tmp/patched; fi; echo "= Patching $arg"; sed -i "s|^$LINEBEGINSWITH.*|$NEWVAL|g" $arg; fi; done' _
 
 export NOTFOUNDVAL2="^$LINEBEGINSWITH"
 export REMOVELINETHATCONTAINS=$LINEBEGINSWITH
 
-echo "== Adding missing lines"
-find /etc/php/*/fpm/ -type f -name "php.ini" -exec grep -L "$NOTFOUNDVAL2" {} \; | xargs sh -c 'for arg do if [ ! -f "$arg.disable_patching" ]; then echo "= Patching $arg"; sed -i "s|.*$REMOVELINETHATCONTAINS.*||g" $arg; echo "$NEWVAL" >> $arg; fi; done' _
+find /etc/php/*/fpm/ -type f -name "php.ini" -exec grep -L "$NOTFOUNDVAL2" {} \; | xargs sh -c 'found=0; for arg do if [ ! -f "$arg.disable_patching" ]; then if [ $found -eq 0 ]; then echo "== Adding missing lines"; found=1; touch /tmp/patched; fi; echo "= Patching $arg"; sed -i "s|.*$REMOVELINETHATCONTAINS.*||g" $arg; echo "$NEWVAL" >> $arg; fi; done' _
 
-echo "== Restarting all PHP-FPM services"
-systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | xargs systemctl restart
+if [ -f "/tmp/patched" ]; then
+    rm /tmp/patched
 
-echo "=== Everything done."
-exit 0
+    echo "== Restarting all PHP-FPM services"
+    systemctl --full --type service --all | grep "php...-fpm" | sed 's#●##g' | awk '{print $1}' | xargs systemctl restart
+
+    echo "=== Everything done."
+else
+    echo "=== Everything is already correct."
+fi
+
+exit 0;

From 46d2a729a1a1e1bdfd9e8b9196a513df576f15ad Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 10 Nov 2024 17:22:47 +0100
Subject: [PATCH 2142/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 4cfc1f33..a3dfecbc 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -14,6 +14,10 @@ if [ "$whoami" != "root" ]; then
     exit 1
 fi
 
+echo "===== Before cleaning ====="
+df -h
+echo "==========================="
+
 # Includes
 source /usr/local/vesta/func/main.sh
 
@@ -107,7 +111,13 @@ fi
 #                       Vesta                              #
 #----------------------------------------------------------#
 
-echo "=== Garbage cleaned ==="
+echo ""
+echo "***** Garbage cleaned *****"
+echo ""
+echo "===== After cleaning ======"
+df -h
+echo "==========================="
+
 
 log_event "$OK" "$ARGUMENTS"
 

From f5027aff5de0ad022dce6ec094af6c0f7fd673b6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 10 Nov 2024 18:03:09 +0100
Subject: [PATCH 2143/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index a3dfecbc..64484db1 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -69,6 +69,8 @@ clean_home() {
     find $1/*/web/*/public_html/wp-content/wpvividbackups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/wp-content/plugins/ezpz-one-click-backup/backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
+    find $1/*/web/*/public_html/wp-content/backups-dup-lite/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
+    find $1/*/web/*/public_html/wp-content/cache/ -type f -not -name "*.php" -not -name ".htaccess" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/ -type f -name "*.wpress" -delete > /dev/null 2>&1
     nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -mtime +1 -delete > /dev/null 2>&1
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;

From 5eb06073199717272bb5be3ce35b6fa364db28d0 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Sun, 10 Nov 2024 18:23:52 +0100
Subject: [PATCH 2144/2300] Update exim4.conf.template - avoid ACL error

failed to expand ACL string "${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}": failed to open /etc/exim4/domains//aliases for linear search: No such file or directory
---
 install/debian/12/exim/exim4.conf.template | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/debian/12/exim/exim4.conf.template b/install/debian/12/exim/exim4.conf.template
index ff0d7ab3..15264797 100644
--- a/install/debian/12/exim/exim4.conf.template
+++ b/install/debian/12/exim/exim4.conf.template
@@ -147,6 +147,7 @@ acl_check_rcpt:
   
   warn    !authenticated = *
           hosts          = !+relay_from_hosts
+          condition     = ${if eq{${lookup{$domain}dsearch{/etc/exim4/domains/}}}{}{false}{true}}
           condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
           set acl_m3    = yes
 

From 60ce986ece4739f3e3d76e2b69e1b6dc7885004e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 11 Nov 2024 18:11:14 +0100
Subject: [PATCH 2145/2300] Update v-add-srs-support-to-exim

---
 bin/v-add-srs-support-to-exim | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-add-srs-support-to-exim b/bin/v-add-srs-support-to-exim
index 39d92e63..5113c693 100644
--- a/bin/v-add-srs-support-to-exim
+++ b/bin/v-add-srs-support-to-exim
@@ -25,7 +25,7 @@ if [ ! -f "/etc/exim4/srs.conf" ]; then
     chown root:Debian-exim /etc/exim4/srs.conf
 fi
 
-if [ -f "/etc/exim4/exim4.conf.template.backup-without-srs" ]; then
+if [ ! -f "/etc/exim4/exim4.conf.template.backup-without-srs" ]; then
     echo "= Backing up /etc/exim4/exim4.conf.template"
     cp /etc/exim4/exim4.conf.template /etc/exim4/exim4.conf.template.backup-without-srs
 fi

From de2305b3ffe31da361f3f8be906693e53a165b8d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 11 Nov 2024 18:36:32 +0100
Subject: [PATCH 2146/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 62277e06..625278bc 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1436,7 +1436,7 @@ if [ "$named" = 'yes' ]; then
       sed -i "s#/etc/bind/\*\* r,#/etc/bind/\*\* rw,\n  /home/\*\* rwm,#g" /etc/apparmor.d/usr.sbin.named
       # service apparmor status >/dev/null 2>&1
       # if [ $? -ne 0 ]; then
-          service apparmor restart
+          systemctl restart apparmor
       # fi
     fi
     # update-rc.d bind9 defaults
@@ -1489,7 +1489,8 @@ if [ "$exim" = 'yes' ]; then
     #update-rc.d exim4 defaults
     currentservice='exim4'
     ensure_startup $currentservice
-    ensure_start $currentservice
+    systemctl restart $currentservice
+    # ensure_start $currentservice
 fi
 
 

From 5e9cf711e61fae62fdb4f8e09fa5faec73708a19 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 11 Nov 2024 19:43:49 +0100
Subject: [PATCH 2147/2300] Add some loops due to 403 errors durring LE request
 in some random cases

Credits to HestiaCP - https://github.com/hestiacp/hestiacp/pull/4622
---
 bin/v-add-letsencrypt-domain | 51 +++++++++++++++++++++++++++---------
 1 file changed, 38 insertions(+), 13 deletions(-)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 1f1f5a6e..97e555fa 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -154,6 +154,11 @@ for identifier in $(echo $domain,$aliases |tr ',' '\n' |sort -u); do
 done
 payload=$(echo "$payload"|sed "s/,$//")
 payload=$payload']}'
+# validation='pending'
+# # Start counter to avoid infinite loop
+# i=0
+# while [ "$validation" = 'pending' ]; do
+# echo "[$(date)] : ----------------------- step 2 loop, counter \$i=$i -----------------------" >> /usr/local/vesta/log/letsencrypt.log
 echo "[$(date)] : payload=$payload" >> /usr/local/vesta/log/letsencrypt.log
 echo "[$(date)] : query_le_v2 \"$url\" \"$payload\" \"$nonce\"" >> /usr/local/vesta/log/letsencrypt.log
 answer=$(query_le_v2 "$url" "$payload" "$nonce")
@@ -168,10 +173,19 @@ order=$(echo -e "$answer" | grep -i location | cut -f2 -d \  | tr -d '\r\n')
 echo "[$(date)] : order=$order" >> /usr/local/vesta/log/letsencrypt.log
 status=$(echo "$answer" |grep HTTP/ |tail -n1 |cut -f2 -d ' ')
 echo "[$(date)] : status=$status" >> /usr/local/vesta/log/letsencrypt.log
+validation=$(echo "$answer" | grep 'status":' | cut -f4 -d '"')
+echo "[$(date)] : validation=$validation" >> /usr/local/vesta/log/letsencrypt.log
 if [[ "$status" -ne 201 ]]; then
     echo "[$(date)] : EXIT=Let's Encrypt new auth status $status" >> /usr/local/vesta/log/letsencrypt.log
     check_result $E_CONNECT "Let's Encrypt new auth status $status"
 fi
+# # Exit the loop after 5 attempts
+# i=$((i + 1))
+# if [ $i -gt 5 ]; then
+#     break
+# fi
+# sleep 2
+# done
 
 # Requesting authorization token / STEP 3
 echo "[$(date)] : --- Requesting authorization token / STEP 3 ---" >> /usr/local/vesta/log/letsencrypt.log
@@ -276,19 +290,30 @@ for auth in $authz; do
     # Doing pol check on status
     i=1
     while [ "$validation" = 'pending' ]; do
-        echo "[$(date)] : - Doing pol check on status" >> /usr/local/vesta/log/letsencrypt.log
-        payload='{}'
-        echo "[$(date)] : query_le_v2 \"$url\" \"$payload\" \"$nonce\"" >> /usr/local/vesta/log/letsencrypt.log
-        answer=$(query_le_v2 "$url" "$payload" "$nonce")
-        echo "[$(date)] : answer=$answer" >> /usr/local/vesta/log/letsencrypt.log
-        url2=$(echo "$answer" |grep -A3 $proto |grep url |cut -f 4 -d \")
-        echo "[$(date)] : url2=$url2" >> /usr/local/vesta/log/letsencrypt.log
-        validation=$(echo "$answer"|grep -A1 $proto |tail -n1|cut -f4 -d \")
-        echo "[$(date)] : validation=$validation" >> /usr/local/vesta/log/letsencrypt.log
-        nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
-        echo "[$(date)] : nonce=$nonce" >> /usr/local/vesta/log/letsencrypt.log
-        status=$(echo "$answer"|grep HTTP/ |tail -n1 |cut -f 2 -d ' ')
-        echo "[$(date)] : status=$status" >> /usr/local/vesta/log/letsencrypt.log
+        i=0
+        while true; do
+            echo "[$(date)] : ----------------------- Doing pol check on status, counter \$i=$i -----------------------" >> /usr/local/vesta/log/letsencrypt.log
+            payload='{}'
+            echo "[$(date)] : query_le_v2 \"$url\" \"$payload\" \"$nonce\"" >> /usr/local/vesta/log/letsencrypt.log
+            answer=$(query_le_v2 "$url" "$payload" "$nonce")
+            echo "[$(date)] : answer=$answer" >> /usr/local/vesta/log/letsencrypt.log
+            url2=$(echo "$answer" |grep -A3 $proto |grep url |cut -f 4 -d \")
+            echo "[$(date)] : url2=$url2" >> /usr/local/vesta/log/letsencrypt.log
+            validation=$(echo "$answer"|grep -A1 $proto |tail -n1|cut -f4 -d \")
+            echo "[$(date)] : validation=$validation" >> /usr/local/vesta/log/letsencrypt.log
+            nonce=$(echo "$answer" |grep -i nonce |cut -f2 -d \ |tr -d '\r\n')
+            echo "[$(date)] : nonce=$nonce" >> /usr/local/vesta/log/letsencrypt.log
+            status=$(echo "$answer"|grep HTTP/ |tail -n1 |cut -f 2 -d ' ')
+            echo "[$(date)] : status=$status" >> /usr/local/vesta/log/letsencrypt.log
+            if [[ $(echo "$answer" | grep 'addressesResolved') != "" ]]; then
+                break
+            fi
+            i=$((i + 1))
+            if ((i > 30)); then
+                break
+            fi
+            sleep 2
+        done
         if [[ "$status" -ne 200 ]]; then
             echo "[$(date)] : EXIT=Let's Encrypt validation status $status" >> /usr/local/vesta/log/letsencrypt.log
             check_result $E_CONNECT "Let's Encrypt validation status $status"

From e8c912513d89d426691e40c3d79d39db834f0be9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 Nov 2024 16:19:52 +0100
Subject: [PATCH 2148/2300] Support for PHP 8.4

---
 .../tools/apache-fpm-tpl/PHP-FPM-84-public.sh | 133 ++++++++++++++++++
 .../apache-fpm-tpl/PHP-FPM-84-public.stpl     |  36 +++++
 .../apache-fpm-tpl/PHP-FPM-84-public.tpl      |  30 ++++
 .../tools/apache-fpm-tpl/PHP-FPM-84.sh        | 133 ++++++++++++++++++
 .../tools/apache-fpm-tpl/PHP-FPM-84.stpl      |  36 +++++
 .../tools/apache-fpm-tpl/PHP-FPM-84.tpl       |  30 ++++
 .../for-download/tools/multi-php-install.sh   |  35 ++++-
 7 files changed, 432 insertions(+), 1 deletion(-)
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84-public.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84-public.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84-public.tpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84.sh
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84.stpl
 create mode 100644 src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84.tpl

diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84-public.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84-public.sh
new file mode 100644
index 00000000..cbea2de9
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84-public.sh
@@ -0,0 +1,133 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php8.4-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 360s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
+pool_file_82="/etc/php/8.2/fpm/pool.d/$2.conf"
+pool_file_83="/etc/php/8.3/fpm/pool.d/$2.conf"
+pool_file_84="/etc/php/8.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+if [ -f "$pool_file_81" ]; then
+    rm $pool_file_81
+    systemctl reset-failed php8.1-fpm
+    systemctl restart php8.1-fpm
+fi
+
+if [ -f "$pool_file_82" ]; then
+    rm $pool_file_82
+    systemctl reset-failed php8.2-fpm
+    systemctl restart php8.2-fpm
+fi
+
+if [ -f "$pool_file_83" ]; then
+    rm $pool_file_83
+    systemctl reset-failed php8.3-fpm
+    systemctl restart php8.3-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_84" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_84)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_84
+    systemctl reset-failed php8.4-fpm
+    systemctl restart php8.4-fpm
+fi
+if [ -f "/etc/php/8.4/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.4/fpm/pool.d/www.conf
+fi
+
+exit 0
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84-public.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84-public.stpl
new file mode 100644
index 00000000..91e05b17
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84-public.stpl
@@ -0,0 +1,36 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84-public.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84-public.tpl
new file mode 100644
index 00000000..94acbf15
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84-public.tpl
@@ -0,0 +1,30 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
+    </Directory>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84.sh b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84.sh
new file mode 100644
index 00000000..cbea2de9
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84.sh
@@ -0,0 +1,133 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php8.4-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 360s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
+pool_file_82="/etc/php/8.2/fpm/pool.d/$2.conf"
+pool_file_83="/etc/php/8.3/fpm/pool.d/$2.conf"
+pool_file_84="/etc/php/8.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+if [ -f "$pool_file_81" ]; then
+    rm $pool_file_81
+    systemctl reset-failed php8.1-fpm
+    systemctl restart php8.1-fpm
+fi
+
+if [ -f "$pool_file_82" ]; then
+    rm $pool_file_82
+    systemctl reset-failed php8.2-fpm
+    systemctl restart php8.2-fpm
+fi
+
+if [ -f "$pool_file_83" ]; then
+    rm $pool_file_83
+    systemctl reset-failed php8.3-fpm
+    systemctl restart php8.3-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_84" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_84)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_84
+    systemctl reset-failed php8.4-fpm
+    systemctl restart php8.4-fpm
+fi
+if [ -f "/etc/php/8.4/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.4/fpm/pool.d/www.conf
+fi
+
+exit 0
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84.stpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84.stpl
new file mode 100644
index 00000000..848abf7c
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84.stpl
@@ -0,0 +1,36 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84.tpl b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84.tpl
new file mode 100644
index 00000000..065c1f89
--- /dev/null
+++ b/src/deb/for-download/tools/apache-fpm-tpl/PHP-FPM-84.tpl
@@ -0,0 +1,30 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
+    </Directory>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 6a65a888..cc024202 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -14,6 +14,7 @@ inst_80=0
 inst_81=0
 inst_82=0
 inst_83=0
+inst_84=0
 
 #######################################################################
 
@@ -60,8 +61,11 @@ fi
 if [ $# -gt 10 ]; then
     inst_83=${11}
 fi
+if [ $# -gt 11 ]; then
+    inst_84=${12}
+fi
 
-if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ] || [ $inst_74 -eq 1 ] || [ $inst_80 -eq 1 ] || [ $inst_81 -eq 1 ] || [ $inst_82 -eq 1 ] || [ $inst_83 -eq 1 ]; then
+if [ $inst_56 -eq 1 ] || [ $inst_70 -eq 1 ] || [ $inst_71 -eq 1 ] || [ $inst_72 -eq 1 ] || [ $inst_73 -eq 1 ] || [ $inst_74 -eq 1 ] || [ $inst_80 -eq 1 ] || [ $inst_81 -eq 1 ] || [ $inst_82 -eq 1 ] || [ $inst_83 -eq 1 ] || [ $inst_84 -eq 1 ]; then
     inst_repo=1
 fi
 
@@ -92,6 +96,7 @@ echo "inst_80=$inst_80"
 echo "inst_81=$inst_81"
 echo "inst_82=$inst_82"
 echo "inst_83=$inst_83"
+echo "inst_84=$inst_84"
 echo "wait_to_press_enter=$wait_to_press_enter"
 
 press_enter "=== Press enter to continue ==============================================================================="
@@ -372,6 +377,33 @@ if [ "$inst_83" -eq 1 ]; then
     press_enter "=== PHP 8.3 installed, press enter to continue ==============================================================================="
 fi
 
+if [ "$inst_84" -eq 1 ]; then
+    press_enter "=== Press enter to install PHP 8.4 ==============================================================================="
+    apt -y install php8.4-mbstring php8.4-bcmath php8.4-cli php8.4-curl php8.4-fpm php8.4-gd php8.4-intl php8.4-mysql php8.4-soap php8.4-xml php8.4-zip php8.4-memcache php8.4-memcached php8.4-imagick
+    update-rc.d php8.4-fpm defaults
+    a2enconf php8.4-fpm
+    a2dismod php8.4
+    apt-get -y remove libapache2-mod-php8.4
+    systemctl restart apache2
+    cp -r /etc/php/8.4/ /root/vst_install_backups/php8.4/
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-84.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-84.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-84.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84.sh
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-84-public.stpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84-public.stpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-84-public.tpl -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84-public.tpl
+    wget -nv https://c.myvestacp.com/tools/apache-fpm-tpl/PHP-FPM-84-public.sh -O /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84-public.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84.sh
+    chmod a+x /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84-public.sh
+    echo "=== Patching php.ini for php8.4"
+    wget -nv https://c.myvestacp.com/tools/patches/php8.2.patch -O /root/php8.4.patch
+    patch /etc/php/8.4/fpm/php.ini < /root/php8.4.patch
+    if [ $memory -gt 9999999 ]; then
+        sed -i "s|opcache.memory_consumption=512|opcache.memory_consumption=2048|g" /etc/php/8.4/fpm/php.ini
+    fi
+    service php8.4-fpm restart
+    press_enter "=== PHP 8.4 installed, press enter to continue ==============================================================================="
+fi
+
 
 apt update > /dev/null 2>&1
 apt upgrade -y > /dev/null 2>&1
@@ -389,6 +421,7 @@ if [ $debian_version -ge 10 ]; then
     a2dismod php8.1 > /dev/null 2>&1
     a2dismod php8.2 > /dev/null 2>&1
     a2dismod php8.3 > /dev/null 2>&1
+    a2dismod php8.4 > /dev/null 2>&1
     a2dismod mpm_prefork > /dev/null 2>&1
     a2enmod mpm_event > /dev/null 2>&1
     apt-get -y remove libapache2-mod-php* > /dev/null 2>&1

From 2cbf37e4d121328035b603d796a71ffd445bb4f5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 15 Nov 2024 16:40:57 +0100
Subject: [PATCH 2149/2300] Temporarily disabling php8.4-memcache, memcached,
 imagick

---
 src/deb/for-download/tools/multi-php-install.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index cc024202..b3e3afc4 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -379,7 +379,8 @@ fi
 
 if [ "$inst_84" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 8.4 ==============================================================================="
-    apt -y install php8.4-mbstring php8.4-bcmath php8.4-cli php8.4-curl php8.4-fpm php8.4-gd php8.4-intl php8.4-mysql php8.4-soap php8.4-xml php8.4-zip php8.4-memcache php8.4-memcached php8.4-imagick
+    apt -y install php8.4-mbstring php8.4-bcmath php8.4-cli php8.4-curl php8.4-fpm php8.4-gd php8.4-intl php8.4-mysql php8.4-soap php8.4-xml php8.4-zip
+    # php8.4-memcache php8.4-memcached php8.4-imagick
     update-rc.d php8.4-fpm defaults
     a2enconf php8.4-fpm
     a2dismod php8.4

From a7d7c3686c00ed816a6455b7f94f7725e73ffe39 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 18 Nov 2024 14:26:36 +0100
Subject: [PATCH 2150/2300] Update v-add-srs-support-to-exim: compatibility for
 Debian < 12

---
 bin/v-add-srs-support-to-exim | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/bin/v-add-srs-support-to-exim b/bin/v-add-srs-support-to-exim
index 5113c693..b31be1e8 100644
--- a/bin/v-add-srs-support-to-exim
+++ b/bin/v-add-srs-support-to-exim
@@ -50,6 +50,16 @@ if ! /usr/local/vesta/bin/v-grep 'remote_forwarded_smtp:' '/etc/exim4/exim4.conf
     v-sed 'procmail:\n  driver = pipe' 'remote_forwarded_smtp:\n  driver = smtp\n  dkim_domain = DKIM_DOMAIN\n  dkim_selector = mail\n  dkim_private_key = DKIM_PRIVATE_KEY\n  dkim_canon = relaxed\n  dkim_strict = 0\n  hosts_try_fastopen = \n  hosts_try_chunking = !93.188.3.0/24\n  message_linelength_limit = 1G\n  # modify the envelope from, for mails that we forward\n  max_rcpt = 1\n  return_path = ${srs_encode {SRS_SECRET} {$return_path} {$original_domain}}\n\nprocmail:\n  driver = pipe' '/etc/exim4/exim4.conf.template'
 fi
 
+release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+if [ "$release" -lt 11 ]; then
+    echo "= Removing \"smtputf8_advertise_hosts\" line for Debian < 11"
+    sed -i "s|smtputf8_advertise_hosts|#smtputf8_advertise_hosts|g" /etc/exim4/exim4.conf.template
+fi
+if [ "$release" -lt 12 ]; then
+    echo "= Removing \"message_linelength_limit\" line for Debian < 12"
+    sed -i "s|message_linelength_limit|#message_linelength_limit|g" /etc/exim4/exim4.conf.template
+fi
+
 echo "= Restarting exim4 service"
 systemctl restart exim4
 

From 8c477c39bf4571f68973c5797f140c6b2ae1e063 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 18 Nov 2024 16:49:14 +0100
Subject: [PATCH 2151/2300] Update v-add-srs-support-to-exim: Block execution
 in Exim < 4.96

---
 bin/v-add-srs-support-to-exim | 21 ++++++++++++---------
 1 file changed, 12 insertions(+), 9 deletions(-)

diff --git a/bin/v-add-srs-support-to-exim b/bin/v-add-srs-support-to-exim
index b31be1e8..85f1f908 100644
--- a/bin/v-add-srs-support-to-exim
+++ b/bin/v-add-srs-support-to-exim
@@ -14,6 +14,14 @@ gen_pass() {
     echo "$PASS"
 }
 
+eximversion=$(exim4 --version | grep '^Exim version ' | awk '{print $3}')
+eximversioni="${eximversion%%[^0-9]+([0-9])}"
+eximversionf="${eximversion##+([0-9])[^0-9]}"
+if [ "$eximversioni" -eq 4 ] && [ "$eximversionf" -lt 96 ]; then
+    echo "= ERROR: Exim SRS support requires Exim 4.96 or higher."
+    exit 1;
+fi
+
 echo "=== Addind SRS support to Exim4 ==="
 # SRS support is taken from HestiaCP
 
@@ -50,15 +58,10 @@ if ! /usr/local/vesta/bin/v-grep 'remote_forwarded_smtp:' '/etc/exim4/exim4.conf
     v-sed 'procmail:\n  driver = pipe' 'remote_forwarded_smtp:\n  driver = smtp\n  dkim_domain = DKIM_DOMAIN\n  dkim_selector = mail\n  dkim_private_key = DKIM_PRIVATE_KEY\n  dkim_canon = relaxed\n  dkim_strict = 0\n  hosts_try_fastopen = \n  hosts_try_chunking = !93.188.3.0/24\n  message_linelength_limit = 1G\n  # modify the envelope from, for mails that we forward\n  max_rcpt = 1\n  return_path = ${srs_encode {SRS_SECRET} {$return_path} {$original_domain}}\n\nprocmail:\n  driver = pipe' '/etc/exim4/exim4.conf.template'
 fi
 
-release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
-if [ "$release" -lt 11 ]; then
-    echo "= Removing \"smtputf8_advertise_hosts\" line for Debian < 11"
-    sed -i "s|smtputf8_advertise_hosts|#smtputf8_advertise_hosts|g" /etc/exim4/exim4.conf.template
-fi
-if [ "$release" -lt 12 ]; then
-    echo "= Removing \"message_linelength_limit\" line for Debian < 12"
-    sed -i "s|message_linelength_limit|#message_linelength_limit|g" /etc/exim4/exim4.conf.template
-fi
+touch /etc/exim4/limit_per_email_account_max_sent_emails_per_hour
+touch /etc/exim4/limit_per_email_account_max_recipients
+touch /etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour
+touch /etc/exim4/limit_per_hosting_account_max_recipients
 
 echo "= Restarting exim4 service"
 systemctl restart exim4

From 15b5996e4f8aad15e770d1400ae23d5dbff0cf2a Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 18 Nov 2024 16:56:10 +0100
Subject: [PATCH 2152/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 18 +++++++++++-------
 1 file changed, 11 insertions(+), 7 deletions(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 17a0d0ca..35799b26 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -1,4 +1,4 @@
-#!/bin/bash
+ #!/bin/bash
 
 # info: add new ip and makes email to be sent via that IP only for SMTP authenticated users
 # options: MAIL_HOSTNAME MAIL_IP
@@ -45,7 +45,7 @@ is_domain_format_valid "$MAIL_HOSTNAME"
 is_ip_format_valid "$MAIL_IP"
 
 HOST_USER=$($VESTA/bin/v-search-domain-owner "$HOSTNAME")
-if [ -z "$HOST_USER" ]; then
+if [ -z "$HOST_USER" ]; then 
     echo "Error: hostname $HOSTNAME is not created as web domain"
     exit 4
 fi
@@ -140,14 +140,18 @@ if [ "$check_grep" -eq 0 ]; then
     mv /etc/exim4/exim4.conf.template /etc/exim4/exim4.conf.template-backup
     cp /usr/local/vesta/install/debian/12/exim/exim4.conf.template /etc/exim4/exim4.conf.template
 
-    release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
-    if [ "$release" -lt 11 ]; then
-        sed -i "s|smtputf8_advertise_hosts|#smtputf8_advertise_hosts|g" /etc/exim4/exim4.conf.template
-    fi
-    if [ "$release" -lt 12 ]; then
+    eximversion=$(exim4 --version | grep '^Exim version ' | awk '{print $3}')
+    eximversioni="${eximversion%%[^0-9]+([0-9])}"
+    eximversionf="${eximversion##+([0-9])[^0-9]}"
+    if [ "$eximversioni" -eq 4 ] && [ "$eximversionf" -lt 96 ]; then
+        cp /usr/local/vesta/install/debian/12/exim/exim4.conf.template.without-srs /etc/exim4/exim4.conf.template
         sed -i "s|message_linelength_limit|#message_linelength_limit|g" /etc/exim4/exim4.conf.template
     fi
 
+    if [ "$eximversioni" -eq 4 ] && [ "$eximversionf" -lt 94 ]; then
+        sed -i "s|smtputf8_advertise_hosts|#smtputf8_advertise_hosts|g" /etc/exim4/exim4.conf.template
+    fi
+
     sed -i "s|FIRSTIP|$HOST_IP|g" /etc/exim4/exim4.conf.template
     sed -i "s|SECONDIP|$MAIL_IP|g" /etc/exim4/exim4.conf.template
     sed -i "s|FIRSTHOST|$HOSTNAME|g" /etc/exim4/exim4.conf.template

From 0f71df9a951f3b49c9d30bb97b87bea11b3e5dc3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 18 Nov 2024 16:59:43 +0100
Subject: [PATCH 2153/2300] Create exim4.conf.template.without-srs

---
 .../12/exim/exim4.conf.template.without-srs   | 451 ++++++++++++++++++
 1 file changed, 451 insertions(+)
 create mode 100644 install/debian/12/exim/exim4.conf.template.without-srs

diff --git a/install/debian/12/exim/exim4.conf.template.without-srs b/install/debian/12/exim/exim4.conf.template.without-srs
new file mode 100644
index 00000000..78eda468
--- /dev/null
+++ b/install/debian/12/exim/exim4.conf.template.without-srs
@@ -0,0 +1,451 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+disable_ipv6=true
+add_environment=<; PATH=/bin:/usr/bin
+keep_environment=
+smtputf8_advertise_hosts =
+
+#local_interfaces =  0.0.0.0
+#smtp_active_hostname = ${lookup{$interface_address}lsearch{/etc/exim4/virtual/helo_data}{$value}}
+#smtp_banner = "$smtp_active_hostname ESMTP $tod_full"
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS = 15
+LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS = 5
+LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
+LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
+
+recipients_max = 150
+recipients_max_reject = true
+
+# log_selector = +smtp_connection
+smtp_accept_max = 50
+smtp_accept_max_per_host = 4
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/certificate.crt
+tls_privatekey = /usr/local/vesta/ssl/certificate.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 0s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lookup{${lc:${domain:$h_from:}}}dsearch{/etc/exim4/domains/}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+
+acl_not_smtp = acl_not_smtp
+
+begin acl
+
+acl_not_smtp:
+  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
+  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_recipients}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS}}
+  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
+
+  deny message = Hosting account is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+
+  warn    set acl_m3    = yes
+
+  accept
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    !authenticated = *
+          message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    !authenticated = *
+          condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    !authenticated = *
+          condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
+  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_recipients}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS}}
+  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
+
+  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+
+  warn    set acl_m3    = no
+  
+  warn    !authenticated = *
+          hosts          = !+relay_from_hosts
+          condition     = ${if eq{${lookup{$domain}dsearch{/etc/exim4/domains/}}}{}{false}{true}}
+          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
+          set acl_m3    = yes
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth requried
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+
+  deny senders = /etc/exim4/deny_senders
+
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = */defer_ok
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{600K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = nobody:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh|\.jar)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{yes}{no_such_user}}}}
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  require_files = ${local_part}:+${home}/.forward
+  domains = +local_domains
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/fwd_only}{true}{false}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #interface = ${if eq{$acl_m3}{yes}{FIRSTIP}{${lookup{$sender_address_domain}lsearch{/etc/exim4/virtual/interfaces} {$value}{SECONDIP}}}}
+  #helo_data = "${if eq{$acl_m3}{yes}{FIRSTHOST}{${lookup{$sending_ip_address}lsearch{/etc/exim4/virtual/helo_data}{$value}{SECONDHOST}}}}"
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+  hosts_try_fastopen = 
+  hosts_try_chunking = !93.188.3.0/24
+  message_linelength_limit = 1G
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}.msg
+  from = "${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################

From 74fecc45d36c4f0b802cefa874d3d298b2cf4f2c Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 18 Nov 2024 18:02:05 +0100
Subject: [PATCH 2154/2300] Update v-add-srs-support-to-exim

---
 bin/v-add-srs-support-to-exim | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/bin/v-add-srs-support-to-exim b/bin/v-add-srs-support-to-exim
index 85f1f908..4b7789ea 100644
--- a/bin/v-add-srs-support-to-exim
+++ b/bin/v-add-srs-support-to-exim
@@ -15,10 +15,9 @@ gen_pass() {
 }
 
 eximversion=$(exim4 --version | grep '^Exim version ' | awk '{print $3}')
-eximversioni="${eximversion%%[^0-9]+([0-9])}"
-eximversionf="${eximversion##+([0-9])[^0-9]}"
-if [ "$eximversioni" -eq 4 ] && [ "$eximversionf" -lt 96 ]; then
+if (( $(echo "$eximversion < 4.96" | bc -l) )); then
     echo "= ERROR: Exim SRS support requires Exim 4.96 or higher."
+    echo "You have Exim $eximversion"
     exit 1;
 fi
 

From a2ed0dbf7ac43dc37d3c57987cee3ab2e71edf04 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 18 Nov 2024 18:03:53 +0100
Subject: [PATCH 2155/2300] Update v-make-separated-ip-for-email

---
 bin/v-make-separated-ip-for-email | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/bin/v-make-separated-ip-for-email b/bin/v-make-separated-ip-for-email
index 35799b26..15e42c05 100644
--- a/bin/v-make-separated-ip-for-email
+++ b/bin/v-make-separated-ip-for-email
@@ -141,14 +141,12 @@ if [ "$check_grep" -eq 0 ]; then
     cp /usr/local/vesta/install/debian/12/exim/exim4.conf.template /etc/exim4/exim4.conf.template
 
     eximversion=$(exim4 --version | grep '^Exim version ' | awk '{print $3}')
-    eximversioni="${eximversion%%[^0-9]+([0-9])}"
-    eximversionf="${eximversion##+([0-9])[^0-9]}"
-    if [ "$eximversioni" -eq 4 ] && [ "$eximversionf" -lt 96 ]; then
+    if (( $(echo "$eximversion < 4.96" | bc -l) )); then
         cp /usr/local/vesta/install/debian/12/exim/exim4.conf.template.without-srs /etc/exim4/exim4.conf.template
         sed -i "s|message_linelength_limit|#message_linelength_limit|g" /etc/exim4/exim4.conf.template
     fi
 
-    if [ "$eximversioni" -eq 4 ] && [ "$eximversionf" -lt 94 ]; then
+    if (( $(echo "$eximversion < 4.94" | bc -l) )); then
         sed -i "s|smtputf8_advertise_hosts|#smtputf8_advertise_hosts|g" /etc/exim4/exim4.conf.template
     fi
 

From 015b3c4571d3972cd3c2fb072e9f2fa921944ac5 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 19 Nov 2024 15:17:29 +0100
Subject: [PATCH 2156/2300] nginx deny rules conf

---
 bin/v-add-firewall-ban    | 5 +++++
 bin/v-delete-firewall-ban | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/bin/v-add-firewall-ban b/bin/v-add-firewall-ban
index a1eed13e..3bdc8170 100755
--- a/bin/v-add-firewall-ban
+++ b/bin/v-add-firewall-ban
@@ -72,6 +72,11 @@ $iptables -I fail2ban-$chain 1 -s $ip \
 # Changing permissions
 chmod 660 $conf
 
+# nginx deny rules conf
+if [ "$chain" = "WEB" ] && [ -f "/etc/nginx/conf.d/block.conf" ]; then
+    echo "deny $ip;" >> /etc/nginx/conf.d/block.conf
+    systemctl reload nginx
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #
diff --git a/bin/v-delete-firewall-ban b/bin/v-delete-firewall-ban
index 52f3403d..cb5b352c 100755
--- a/bin/v-delete-firewall-ban
+++ b/bin/v-delete-firewall-ban
@@ -53,6 +53,11 @@ $iptables -D fail2ban-$chain $b 2>/dev/null
 # Changing permissions
 chmod 660 $conf
 
+# nginx deny rules conf
+if [ "$chain" = "WEB" ] && [ -f "/etc/nginx/conf.d/block.conf" ]; then
+    sed -i "/deny $ip;/d" /etc/nginx/conf.d/block.conf
+    systemctl reload nginx
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 6a35d14f0cdb122cb217d2177f9f157182a843c6 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 19 Nov 2024 21:59:09 +0100
Subject: [PATCH 2157/2300] Update v-add-firewall-ban: nginx deny rules conf

---
 bin/v-add-firewall-ban | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-firewall-ban b/bin/v-add-firewall-ban
index 3bdc8170..80143132 100755
--- a/bin/v-add-firewall-ban
+++ b/bin/v-add-firewall-ban
@@ -74,8 +74,10 @@ chmod 660 $conf
 
 # nginx deny rules conf
 if [ "$chain" = "WEB" ] && [ -f "/etc/nginx/conf.d/block.conf" ]; then
-    echo "deny $ip;" >> /etc/nginx/conf.d/block.conf
-    systemctl reload nginx
+    if ! grep -q  "deny $ip;" /etc/nginx/conf.d/block.conf; then
+        echo "deny $ip;" >> /etc/nginx/conf.d/block.conf
+        systemctl reload nginx
+   fi
 fi
 
 #----------------------------------------------------------#

From af8c07194454a50c7bc44ae79bdb64973b9aa6e4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 25 Nov 2024 11:25:22 +0100
Subject: [PATCH 2158/2300] Update v-clean-garbage

---
 bin/v-clean-garbage | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 64484db1..36b50830 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -70,7 +70,7 @@ clean_home() {
     find $1/*/web/*/public_html/wp-content/updraft/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/wp-content/plugins/ezpz-one-click-backup/backups/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/wp-content/backups-dup-lite/ -type f -not -name ".htaccess" -not -name "index.php" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
-    find $1/*/web/*/public_html/wp-content/cache/ -type f -not -name "*.php" -not -name ".htaccess" -not -name "index.html" -not -name "web.config" -delete > /dev/null 2>&1
+    find $1/*/web/*/public_html/wp-content/cache/ -type f -not -name ".htaccess" -delete > /dev/null 2>&1
     find $1/*/web/*/public_html/ -type f -name "*.wpress" -delete > /dev/null 2>&1
     nice -n 19 ionice -c 3 find $1/*/tmp/ -type f -mtime +1 -delete > /dev/null 2>&1
     nice -n 19 ionice -c 3 find $1/*/web/*/public_html/ -type f -name "error_log" -exec truncate -s 0 {} \;

From 00ef25524d815242290beeaca19e35277742a599 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 27 Nov 2024 14:04:37 +0100
Subject: [PATCH 2159/2300] Create v-blacklist-email-domain

---
 bin/v-blacklist-email-domain | 133 +++++++++++++++++++++++++++++++++++
 1 file changed, 133 insertions(+)
 create mode 100644 bin/v-blacklist-email-domain

diff --git a/bin/v-blacklist-email-domain b/bin/v-blacklist-email-domain
new file mode 100644
index 00000000..a72a17a9
--- /dev/null
+++ b/bin/v-blacklist-email-domain
@@ -0,0 +1,133 @@
+#!/bin/bash
+# info: Add a domain to exim4 and spamassassin blacklist
+# usage: v-blacklist-email-domain DOMAIN SUBDOMAIN(YES/NO)
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Determine Debian version and set SpamAssassin service name
+release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+if [ "$release" -lt 12 ]; then
+    SPAMD_SERVICE="spamassassin.service"
+else
+    SPAMD_SERVICE="spamd.service"
+fi
+
+DENY_SENDERS_FILE="/etc/exim4/deny_senders"
+SPAMASSASSIN_FILE="/etc/spamassassin/local.cf"
+
+# Flags to track changes
+SPAMASSASSIN_CHANGED=false
+
+# Function to check if a domain already exists in a file
+check_domain_exists() {
+    local domain=$1
+    local file=$2
+    grep -qE "^${domain}$" "$file"
+}
+
+# Function to check if a SpamAssassin entry already exists
+check_spamassassin_exists() {
+    local entry=$1
+    local file=$2
+    grep -qF "$entry" "$file"
+}
+
+# Function to add domain to file
+add_domain_to_file() {
+    local domain=$1
+    local file=$2
+    echo "$domain" >> "$file"
+}
+
+# Display usage if no arguments are provided
+if [ $# -lt 2 ]; then
+    echo "Usage: v-blacklist-domain DOMAIN SUBDOMAIN(YES/NO)"
+    exit 1
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+DOMAIN=$1
+SUBDOMAIN=${2^^} # Convert to uppercase for consistency (YES/NO)
+
+# Validate SUBDOMAIN parameter
+if [[ "$SUBDOMAIN" != "YES" && "$SUBDOMAIN" != "NO" ]]; then
+    echo "Invalid parameter for SUBDOMAIN. Use YES or NO."
+    exit 1
+fi
+
+# Prepare entries for Exim4
+EXIM_ENTRY_MAIN="$DOMAIN"
+EXIM_ENTRY_SUB="*.$DOMAIN"
+
+# Prepare entries for SpamAssassin
+SPAMASSASSIN_ENTRY_MAIN="blacklist_from *@${DOMAIN}"
+SPAMASSASSIN_ENTRY_SUB="blacklist_from *.$DOMAIN"
+
+#----------------------------------------------------------#
+#                   Exim4 Blacklist                        #
+#----------------------------------------------------------#
+
+echo "Updating $DENY_SENDERS_FILE..."
+if ! check_domain_exists "$EXIM_ENTRY_MAIN" "$DENY_SENDERS_FILE"; then
+    add_domain_to_file "$EXIM_ENTRY_MAIN" "$DENY_SENDERS_FILE"
+    echo "Added $EXIM_ENTRY_MAIN to $DENY_SENDERS_FILE."
+else
+    echo "$EXIM_ENTRY_MAIN already exists in $DENY_SENDERS_FILE."
+fi
+
+if [ "$SUBDOMAIN" == "YES" ]; then
+    if ! check_domain_exists "$EXIM_ENTRY_SUB" "$DENY_SENDERS_FILE"; then
+        add_domain_to_file "$EXIM_ENTRY_SUB" "$DENY_SENDERS_FILE"
+        echo "Added $EXIM_ENTRY_SUB to $DENY_SENDERS_FILE."
+    else
+        echo "$EXIM_ENTRY_SUB already exists in $DENY_SENDERS_FILE."
+    fi
+fi
+
+#----------------------------------------------------------#
+#                SpamAssassin Blacklist                    #
+#----------------------------------------------------------#
+
+echo "Updating $SPAMASSASSIN_FILE..."
+if ! check_spamassassin_exists "$SPAMASSASSIN_ENTRY_MAIN" "$SPAMASSASSIN_FILE"; then
+    add_domain_to_file "$SPAMASSASSIN_ENTRY_MAIN" "$SPAMASSASSIN_FILE"
+    echo "Added $SPAMASSASSIN_ENTRY_MAIN to $SPAMASSASSIN_FILE."
+    SPAMASSASSIN_CHANGED=true
+else
+    echo "$SPAMASSASSIN_ENTRY_MAIN already exists in $SPAMASSASSIN_FILE."
+fi
+
+if [ "$SUBDOMAIN" == "YES" ]; then
+    if ! check_spamassassin_exists "$SPAMASSASSIN_ENTRY_SUB" "$SPAMASSASSIN_FILE"; then
+        add_domain_to_file "$SPAMASSASSIN_ENTRY_SUB" "$SPAMASSASSIN_FILE"
+        echo "Added $SPAMASSASSIN_ENTRY_SUB to $SPAMASSASSIN_FILE."
+        SPAMASSASSIN_CHANGED=true
+    else
+        echo "$SPAMASSASSIN_ENTRY_SUB already exists in $SPAMASSASSIN_FILE."
+    fi
+fi
+
+if [ "$SPAMASSASSIN_CHANGED" == "true" ]; then
+    systemctl restart "$SPAMD_SERVICE"
+    echo "SpamAssassin service ($SPAMD_SERVICE) restarted."
+fi
+
+#----------------------------------------------------------#
+#                       Done                               #
+#----------------------------------------------------------#
+
+exit 0

From aa92b6a2706def542eafdfc34c3ec6f35ab1ce35 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 27 Nov 2024 14:05:07 +0100
Subject: [PATCH 2160/2300] Create v-blacklist-email-account

---
 bin/v-blacklist-email-account | 102 ++++++++++++++++++++++++++++++++++
 1 file changed, 102 insertions(+)
 create mode 100644 bin/v-blacklist-email-account

diff --git a/bin/v-blacklist-email-account b/bin/v-blacklist-email-account
new file mode 100644
index 00000000..59ec9cf8
--- /dev/null
+++ b/bin/v-blacklist-email-account
@@ -0,0 +1,102 @@
+#!/bin/bash
+# info: Add a specific email address to exim4 and spamassassin blacklist
+# usage: v-blacklist-email-account EMAIL
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Determine Debian version and set SpamAssassin service name
+release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+if [ "$release" -lt 12 ]; then
+    SPAMD_SERVICE="spamassassin.service"
+else
+    SPAMD_SERVICE="spamd.service"
+fi
+
+DENY_SENDERS_FILE="/etc/exim4/deny_senders"
+SPAMASSASSIN_FILE="/etc/spamassassin/local.cf"
+
+# Flags to track changes
+SPAMASSASSIN_CHANGED=false
+
+# Function to check if an entry already exists in a file
+check_entry_exists() {
+    local entry=$1
+    local file=$2
+    grep -qF "$entry" "$file"
+}
+
+# Function to add an entry to a file
+add_entry_to_file() {
+    local entry=$1
+    local file=$2
+    echo "$entry" >> "$file"
+}
+
+# Display usage if no arguments are provided
+if [ $# -lt 1 ]; then
+    echo "Usage: v-blacklist-email EMAIL"
+    exit 1
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+EMAIL=$1
+
+# Validate email format
+if [[ ! "$EMAIL" =~ ^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$ ]]; then
+    echo "Invalid email address format."
+    exit 1
+fi
+
+# Prepare entries for Exim4 and SpamAssassin
+EXIM_ENTRY="$EMAIL"
+SPAMASSASSIN_ENTRY="blacklist_from $EMAIL"
+
+#----------------------------------------------------------#
+#                   Exim4 Blacklist                        #
+#----------------------------------------------------------#
+
+echo "Updating $DENY_SENDERS_FILE..."
+if ! check_entry_exists "$EXIM_ENTRY" "$DENY_SENDERS_FILE"; then
+    add_entry_to_file "$EXIM_ENTRY" "$DENY_SENDERS_FILE"
+    echo "Added $EXIM_ENTRY to $DENY_SENDERS_FILE."
+else
+    echo "$EXIM_ENTRY already exists in $DENY_SENDERS_FILE."
+fi
+
+#----------------------------------------------------------#
+#                SpamAssassin Blacklist                    #
+#----------------------------------------------------------#
+
+echo "Updating $SPAMASSASSIN_FILE..."
+if ! check_entry_exists "$SPAMASSASSIN_ENTRY" "$SPAMASSASSIN_FILE"; then
+    add_entry_to_file "$SPAMASSASSIN_ENTRY" "$SPAMASSASSIN_FILE"
+    echo "Added $SPAMASSASSIN_ENTRY to $SPAMASSASSIN_FILE."
+    SPAMASSASSIN_CHANGED=true
+else
+    echo "$SPAMASSASSIN_ENTRY already exists in $SPAMASSASSIN_FILE."
+fi
+
+if [ "$SPAMASSASSIN_CHANGED" == "true" ]; then
+    systemctl restart "$SPAMD_SERVICE"
+    echo "SpamAssassin service ($SPAMD_SERVICE) restarted."
+fi
+
+#----------------------------------------------------------#
+#                       Done                               #
+#----------------------------------------------------------#
+
+exit 0

From 92ddd343a2706620e297decddfcc97c2c38cdce5 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 27 Nov 2024 14:05:30 +0100
Subject: [PATCH 2161/2300] Create v-whitelist-email-domain

---
 bin/v-whitelist-email-domain | 119 +++++++++++++++++++++++++++++++++++
 1 file changed, 119 insertions(+)
 create mode 100644 bin/v-whitelist-email-domain

diff --git a/bin/v-whitelist-email-domain b/bin/v-whitelist-email-domain
new file mode 100644
index 00000000..9d877ad4
--- /dev/null
+++ b/bin/v-whitelist-email-domain
@@ -0,0 +1,119 @@
+#!/bin/bash
+# info: Add a domain to SpamAssassin whitelist
+# usage: v-whitelist-email-domain DOMAIN SUBDOMAIN(YES/NO)
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Determine Debian version and set SpamAssassin service name
+release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+if [ "$release" -lt 12 ]; then
+    SPAMD_SERVICE="spamassassin.service"
+else
+    SPAMD_SERVICE="spamd.service"
+fi
+
+SPAMASSASSIN_FILE="/etc/spamassassin/local.cf"
+
+# Flags to track changes
+SPAMASSASSIN_CHANGED=false
+
+# Function to check if a SpamAssassin whitelist entry already exists
+check_whitelist_exists() {
+    local entry=$1
+    local file=$2
+    grep -qF "whitelist_from $entry" "$file"
+}
+
+# Function to check if a domain/email is already blacklisted
+check_blacklist_exists() {
+    local domain=$1
+    local file=$2
+    grep -qE "blacklist_from.*${domain}$" "$file"
+}
+
+# Function to add whitelist entry to file
+add_whitelist_to_file() {
+    local entry=$1
+    local file=$2
+    echo "whitelist_from $entry" >> "$file"
+}
+
+# Display usage if no arguments are provided
+if [ $# -lt 2 ]; then
+    echo "Usage: v-whitelist-email-domain DOMAIN SUBDOMAIN(YES/NO)"
+    exit 1
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+DOMAIN=$1
+SUBDOMAIN=${2^^} # Convert to uppercase for consistency (YES/NO)
+
+# Validate SUBDOMAIN parameter
+if [[ "$SUBDOMAIN" != "YES" && "$SUBDOMAIN" != "NO" ]]; then
+    echo "Invalid parameter for SUBDOMAIN. Use YES or NO."
+    exit 1
+fi
+
+# Prepare entries for SpamAssassin
+WHITELIST_ENTRY_MAIN="*@${DOMAIN}"
+WHITELIST_ENTRY_SUB="*.$DOMAIN"
+BLACKLIST_ENTRY_MAIN="*@${DOMAIN}"
+BLACKLIST_ENTRY_SUB="*.$DOMAIN"
+
+#----------------------------------------------------------#
+#                SpamAssassin Whitelist                    #
+#----------------------------------------------------------#
+
+echo "Updating $SPAMASSASSIN_FILE..."
+
+# Check if the domain is already blacklisted
+if check_blacklist_exists "$DOMAIN" "$SPAMASSASSIN_FILE"; then
+    echo "Cannot whitelist $DOMAIN. It is already blacklisted."
+    exit 1
+fi
+
+# Add the main entry
+if ! check_whitelist_exists "$WHITELIST_ENTRY_MAIN" "$SPAMASSASSIN_FILE"; then
+    add_whitelist_to_file "$WHITELIST_ENTRY_MAIN" "$SPAMASSASSIN_FILE"
+    echo "Added whitelist_from $WHITELIST_ENTRY_MAIN to $SPAMASSASSIN_FILE."
+    SPAMASSASSIN_CHANGED=true
+else
+    echo "whitelist_from $WHITELIST_ENTRY_MAIN already exists in $SPAMASSASSIN_FILE."
+fi
+
+# Add the subdomain entry if needed
+if [ "$SUBDOMAIN" == "YES" ]; then
+    if ! check_whitelist_exists "$WHITELIST_ENTRY_SUB" "$SPAMASSASSIN_FILE"; then
+        add_whitelist_to_file "$WHITELIST_ENTRY_SUB" "$SPAMASSASSIN_FILE"
+        echo "Added whitelist_from $WHITELIST_ENTRY_SUB to $SPAMASSASSIN_FILE."
+        SPAMASSASSIN_CHANGED=true
+    else
+        echo "whitelist_from $WHITELIST_ENTRY_SUB already exists in $SPAMASSASSIN_FILE."
+    fi
+fi
+
+# Restart SpamAssassin only if changes were made
+if [ "$SPAMASSASSIN_CHANGED" == "true" ]; then
+    systemctl restart "$SPAMD_SERVICE"
+    echo "SpamAssassin service ($SPAMD_SERVICE) restarted."
+fi
+
+#----------------------------------------------------------#
+#                       Done                               #
+#----------------------------------------------------------#
+
+exit 0

From 62b0e672a66211c3ec0c5f57d1687f4b015a9e63 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 27 Nov 2024 14:05:50 +0100
Subject: [PATCH 2162/2300] Create v-whitelist-email-account

---
 bin/v-whitelist-email-account | 119 ++++++++++++++++++++++++++++++++++
 1 file changed, 119 insertions(+)
 create mode 100644 bin/v-whitelist-email-account

diff --git a/bin/v-whitelist-email-account b/bin/v-whitelist-email-account
new file mode 100644
index 00000000..4a6e6329
--- /dev/null
+++ b/bin/v-whitelist-email-account
@@ -0,0 +1,119 @@
+#!/bin/bash
+# info: Add a specific email address to SpamAssassin whitelist
+# usage: v-whitelist-email-account EMAIL
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Determine Debian version and set SpamAssassin service name
+release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
+if [ "$release" -lt 12 ]; then
+    SPAMD_SERVICE="spamassassin.service"
+else
+    SPAMD_SERVICE="spamd.service"
+fi
+
+SPAMASSASSIN_FILE="/etc/spamassassin/local.cf"
+
+# Flags to track changes
+SPAMASSASSIN_CHANGED=false
+
+# Function to check if an entry already exists in a file
+check_entry_exists() {
+    local entry=$1
+    local file=$2
+    grep -qF "$entry" "$file"
+}
+
+# Function to check if a domain/email is already blacklisted
+check_blacklisted() {
+    local pattern=$1
+    local file=$2
+    grep -qE "blacklist_from.*${pattern}" "$file"
+}
+
+# Function to add an entry to a file
+add_entry_to_file() {
+    local entry=$1
+    local file=$2
+    echo "$entry" >> "$file"
+}
+
+# Display usage if no arguments are provided
+if [ $# -lt 1 ]; then
+    echo "Usage: v-whitelist-email-account EMAIL"
+    exit 1
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+EMAIL=$1
+
+# Validate email format
+if [[ ! "$EMAIL" =~ ^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$ ]]; then
+    echo "Invalid email address format."
+    exit 1
+fi
+
+# Extract the domain from the email address
+DOMAIN=$(echo "$EMAIL" | awk -F '@' '{print $2}')
+
+# Prepare entries for SpamAssassin
+WHITELIST_ENTRY="whitelist_from $EMAIL"
+BLACKLIST_ENTRY_MAIN="*@${DOMAIN}"
+BLACKLIST_ENTRY_SUB="*.$DOMAIN"
+
+#----------------------------------------------------------#
+#                SpamAssassin Whitelist                    #
+#----------------------------------------------------------#
+
+echo "Updating $SPAMASSASSIN_FILE..."
+
+# Check if the email address or its domain is already blacklisted
+if check_blacklisted "$EMAIL" "$SPAMASSASSIN_FILE"; then
+    echo "Cannot whitelist $EMAIL. It is already blacklisted."
+    exit 1
+fi
+
+if check_blacklisted "$BLACKLIST_ENTRY_MAIN" "$SPAMASSASSIN_FILE"; then
+    echo "Cannot whitelist $EMAIL. The domain $DOMAIN is already blacklisted."
+    exit 1
+fi
+
+if check_blacklisted "$BLACKLIST_ENTRY_SUB" "$SPAMASSASSIN_FILE"; then
+    echo "Cannot whitelist $EMAIL. The subdomain of $DOMAIN is already blacklisted."
+    exit 1
+fi
+
+# Add the email to whitelist if not already present
+if ! check_entry_exists "$WHITELIST_ENTRY" "$SPAMASSASSIN_FILE"; then
+    add_entry_to_file "$WHITELIST_ENTRY" "$SPAMASSASSIN_FILE"
+    echo "Added $WHITELIST_ENTRY to $SPAMASSASSIN_FILE."
+    SPAMASSASSIN_CHANGED=true
+else
+    echo "$WHITELIST_ENTRY already exists in $SPAMASSASSIN_FILE."
+fi
+
+# Restart SpamAssassin only if changes were made
+if [ "$SPAMASSASSIN_CHANGED" == "true" ]; then
+    systemctl restart "$SPAMD_SERVICE"
+    echo "SpamAssassin service ($SPAMD_SERVICE) restarted."
+fi
+
+#----------------------------------------------------------#
+#                       Done                               #
+#----------------------------------------------------------#
+
+exit 0

From 2e66899997a4ea3c1326b436eb88871e303c9f4d Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 27 Nov 2024 14:06:50 +0100
Subject: [PATCH 2163/2300] Create v-cd-www

---
 bin/v-cd-www | 69 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 69 insertions(+)
 create mode 100644 bin/v-cd-www

diff --git a/bin/v-cd-www b/bin/v-cd-www
new file mode 100644
index 00000000..449b5fa2
--- /dev/null
+++ b/bin/v-cd-www
@@ -0,0 +1,69 @@
+#!/bin/bash
+# info: Change directory to the public_html folder of a domain
+# usage: v-cd-www DOMAIN
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+if [[ "${BASH_SOURCE[0]}" == "${0}" ]]; then
+    echo "This script must be sourced to change the current directory."
+    echo "Usage: source v-cd-www DOMAIN"
+    exit 1
+fi
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    return 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+SILENT_MODE=1
+
+# Argument definition
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/func/domain.sh
+
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "Domain $domain doesn't exist"
+    return 1
+fi
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+
+if [ ! -d "/home/$user" ]; then
+    echo "User $user doesn't exist"
+    return 1
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    echo "Domain $domain doesn't have a public_html directory"
+    return 1
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+cd "/home/$user/web/$domain/public_html"
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+return 0

From 82803093d6836274fb971df28a6b189087e13c91 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Wed, 27 Nov 2024 14:07:40 +0100
Subject: [PATCH 2164/2300] Update v-cd-www

---
 bin/v-cd-www | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-cd-www b/bin/v-cd-www
index 449b5fa2..01e9c221 100644
--- a/bin/v-cd-www
+++ b/bin/v-cd-www
@@ -1,6 +1,6 @@
 #!/bin/bash
 # info: Change directory to the public_html folder of a domain
-# usage: v-cd-www DOMAIN
+# usage: source v-cd-www DOMAIN
 
 #----------------------------------------------------------#
 #                    Variable&Function                     #

From 33377836662a2ebfe87cfee7370355de9c406c26 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 2 Dec 2024 18:35:57 +0100
Subject: [PATCH 2165/2300] v-cd-www alias

---
 bin/{v-cd-www => v-change-dir-www} | 0
 install/vst-install-debian.sh      | 2 ++
 2 files changed, 2 insertions(+)
 rename bin/{v-cd-www => v-change-dir-www} (100%)

diff --git a/bin/v-cd-www b/bin/v-change-dir-www
similarity index 100%
rename from bin/v-cd-www
rename to bin/v-change-dir-www
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 625278bc..cb6ee921 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -2064,6 +2064,8 @@ echo "================================================================"
 # Removing old PHP sessions files
 crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
 
+echo "alias v-cd-www='source /usr/local/vesta/bin/change-dir-www'" >> /root/.bash_profile
+
 #----------------------------------------------------------#
 #                  myVesta Access Info                     #
 #----------------------------------------------------------#

From 0639e7765f9452cadfa260183546aff5686953e9 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 2 Dec 2024 18:52:53 +0100
Subject: [PATCH 2166/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index cb6ee921..47153ade 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -2064,7 +2064,7 @@ echo "================================================================"
 # Removing old PHP sessions files
 crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
 
-echo "alias v-cd-www='source /usr/local/vesta/bin/change-dir-www'" >> /root/.bash_profile
+echo "alias v-cd-www='source /usr/local/vesta/bin/v-change-dir-www'" >> /root/.bash_profile
 
 #----------------------------------------------------------#
 #                  myVesta Access Info                     #

From 2daa635cdef0618ddb9543963ff2a0ffd47e593d Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 3 Dec 2024 11:47:21 +0100
Subject: [PATCH 2167/2300] Update v-change-dir-www

---
 bin/v-change-dir-www | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-change-dir-www b/bin/v-change-dir-www
index 01e9c221..4a44eac2 100644
--- a/bin/v-change-dir-www
+++ b/bin/v-change-dir-www
@@ -20,6 +20,7 @@ fi
 
 # Importing system environment
 source /etc/profile
+PATH=$PATH:/usr/local/vesta/bin && export PATH
 
 SILENT_MODE=1
 

From 9fdfe2760a31df12ba56e9c1692ee14c207b63db Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 3 Dec 2024 15:50:07 +0100
Subject: [PATCH 2168/2300] Update v-change-dir-www

---
 bin/v-change-dir-www | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/bin/v-change-dir-www b/bin/v-change-dir-www
index 4a44eac2..1f230099 100644
--- a/bin/v-change-dir-www
+++ b/bin/v-change-dir-www
@@ -28,17 +28,18 @@ SILENT_MODE=1
 domain=$1
 
 user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+
+if [ -z "$user" ]; then
+    echo "Domain $domain doesn't exist"
+    return 1
+fi
+
 USER=$user
 
 # Includes
 source /usr/local/vesta/func/main.sh
 source /usr/local/vesta/func/domain.sh
 
-if [ -z "$user" ]; then
-    check_result $E_NOTEXIST "Domain $domain doesn't exist"
-    return 1
-fi
-
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#

From 0e881c911b9713e7e11cf255cbd59c7512229eef Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 5 Dec 2024 15:46:47 +0100
Subject: [PATCH 2169/2300] Update v-update-firewall - skip CentOS block

---
 bin/v-update-firewall | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/bin/v-update-firewall b/bin/v-update-firewall
index 142cb39b..6d359f07 100755
--- a/bin/v-update-firewall
+++ b/bin/v-update-firewall
@@ -164,12 +164,12 @@ if [ ! -z "$FIREWALL_EXTENSION" ]; then
 fi
 
 # Saving rules to the master iptables file
-if [ -d "/etc/sysconfig" ]; then
-    /sbin/iptables-save > /etc/sysconfig/iptables
-    if [ -z "$(ls /etc/rc3.d/S*iptables 2>/dev/null)" ]; then
-        /sbin/chkconfig iptables on
-    fi
-else
+# if [ -d "/etc/sysconfig" ]; then
+#     /sbin/iptables-save > /etc/sysconfig/iptables
+#     if [ -z "$(ls /etc/rc3.d/S*iptables 2>/dev/null)" ]; then
+#         /sbin/chkconfig iptables on
+#     fi
+# else
     /sbin/iptables-save > /etc/iptables.rules
     preup="/etc/network/if-pre-up.d/iptables"
     if [ ! -e "$preup" ]; then
@@ -178,7 +178,7 @@ else
         echo "exit 0" >> $preup
         chmod +x $preup
     fi
-fi
+# fi
 
 # Worarkound for OpenVZ
 if [ -e "/proc/vz/veinfo" ]; then

From c1072ec9e40368f7454e7b5e94a512d1a0df87ed Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 13 Dec 2024 11:34:12 +0100
Subject: [PATCH 2170/2300] Update v-clone-website

---
 bin/v-clone-website | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 8670ee3a..0a25f6a7 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -20,6 +20,7 @@ if [ $# -lt 2 ]; then
     echo "--TO_DATABASE_USERNAME=..."
     echo "--TO_DATABASE_PASSWORD=..."
     echo "--SITE_SUBFOLDER=..."
+    echo "--EXCLUDE_UPLOADS=1 (or do not set it)"
     exit 1
 fi
 

From c5e54643734df52da4d43d6bcae50a9a0016507f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 3 Jan 2025 17:16:07 +0100
Subject: [PATCH 2171/2300] Update v-restore-user: permissions fix

---
 bin/v-restore-user | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-restore-user b/bin/v-restore-user
index af451d88..a2dab574 100755
--- a/bin/v-restore-user
+++ b/bin/v-restore-user
@@ -417,6 +417,7 @@ if [ "$web" != 'no' ] && [ ! -z "$WEB_SYSTEM" ]; then
         # Restoring web domain data
         chown $user $tmpdir
         chmod u+w $HOMEDIR/$user/web/$domain
+        chmod 0755 $tmpdir/web/$domain
         sudo -u $user tar -xzpf $tmpdir/web/$domain/domain_data.tar.gz \
             -C $HOMEDIR/$user/web/$domain/ --exclude=./logs/* \
             2> $HOMEDIR/$user/web/$domain/restore_errors.log
@@ -618,6 +619,7 @@ if [ "$mail" != 'no' ] && [ ! -z "$MAIL_SYSTEM" ]; then
         if [ -e "$tmpdir/mail/$domain/accounts.tar.gz" ]; then
             chown $user $tmpdir
             chmod u+w $HOMEDIR/$user/mail/$domain_idn
+            chmod 0755 $tmpdir/mail/$domain
             sudo -u $user tar -xzpf $tmpdir/mail/$domain/accounts.tar.gz \
                 -C $HOMEDIR/$user/mail/$domain_idn/
             if [ "$?" -ne 0 ]; then

From 7937088e9cc219a635b15712d04facdd85658558 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 3 Jan 2025 18:09:06 +0100
Subject: [PATCH 2172/2300] Update index.php: Prevent recreation of token by
 shitty browser add-ons

---
 web/login/index.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/web/login/index.php b/web/login/index.php
index 18841344..5de05451 100644
--- a/web/login/index.php
+++ b/web/login/index.php
@@ -1,5 +1,7 @@
 <?php
 
+if ($_SERVER['REQUEST_METHOD']=='HEAD') exit; // Prevent recreation of token by shitty browser add-ons
+
 define('NO_AUTH_REQUIRED',true);
 
 

From 1573a33b750830d0dee18bf6c72989d897b285c4 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 10 Feb 2025 15:51:42 +0100
Subject: [PATCH 2173/2300] Update v-clone-website: mysqldump
 --max_allowed_packet=1024M

---
 bin/v-clone-website | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-clone-website b/bin/v-clone-website
index 0a25f6a7..0258e39a 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -372,7 +372,7 @@ if [ -d "/root/temp" ]; then
 fi
 mkdir -p /root/temp
 cd /root/temp
-mysqldump $FROM_DATABASE_NAME > $FROM_DATABASE_NAME.sql
+mysqldump --max_allowed_packet=1024M $FROM_DATABASE_NAME > $FROM_DATABASE_NAME.sql
 echo "=== Importing to database $TO_DATABASE_NAME"
 mysql $TO_DATABASE_NAME < $FROM_DATABASE_NAME.sql
 rm $FROM_DATABASE_NAME.sql

From 32aae7dbff1794f969a4f8726ddb425e90661d43 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 20 Feb 2025 14:02:27 +0100
Subject: [PATCH 2174/2300] Update multi-php-install.sh: bringing back
 php8.4-memcached & imagick

---
 src/deb/for-download/tools/multi-php-install.sh | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index b3e3afc4..70d589cc 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -118,7 +118,7 @@ if [ "$inst_repo" -eq 1 ]; then
       sh -c 'echo "deb https://packages.sury.org/php/ bookworm main" > /etc/apt/sources.list.d/php.list'
     fi
     apt update
-    apt upgrade -y
+    # apt upgrade -y
     press_enter "=== Press enter to continue ==============================================================================="
 fi
 
@@ -379,8 +379,7 @@ fi
 
 if [ "$inst_84" -eq 1 ]; then
     press_enter "=== Press enter to install PHP 8.4 ==============================================================================="
-    apt -y install php8.4-mbstring php8.4-bcmath php8.4-cli php8.4-curl php8.4-fpm php8.4-gd php8.4-intl php8.4-mysql php8.4-soap php8.4-xml php8.4-zip
-    # php8.4-memcache php8.4-memcached php8.4-imagick
+    apt -y install php8.4-mbstring php8.4-bcmath php8.4-cli php8.4-curl php8.4-fpm php8.4-gd php8.4-intl php8.4-mysql php8.4-soap php8.4-xml php8.4-zip php8.4-memcache php8.4-memcached php8.4-imagick
     update-rc.d php8.4-fpm defaults
     a2enconf php8.4-fpm
     a2dismod php8.4

From 039dc4a561bc803c966094b6fd1720414c9a7dfa Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 27 Feb 2025 22:51:44 +0100
Subject: [PATCH 2175/2300] SpamHaus DNSBL removed from exim4

---
 Changelog.md                      | 5 +++++
 install/debian/10/exim/dnsbl.conf | 1 -
 install/debian/11/exim/dnsbl.conf | 1 -
 install/debian/12/exim/dnsbl.conf | 1 -
 install/debian/8/exim/dnsbl.conf  | 1 -
 install/debian/9/exim/dnsbl.conf  | 1 -
 install/vst-install-debian.sh     | 1 +
 src/deb/latest.txt                | 2 +-
 src/deb/vesta/postinst            | 6 ++++++
 9 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/Changelog.md b/Changelog.md
index 7d22747a..36478469 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,8 @@
+Version 0.9.9-0-12 [28-Feb-2025]
+==================================================
+* SpamHaus DNSBL removed from exim4
+* A lot of small bugs fixed
+
 Version 0.9.9-0-11 [30-May-2024]
 ==================================================
 * Introducing v-run-wp-cli command ( @isscbta )
diff --git a/install/debian/10/exim/dnsbl.conf b/install/debian/10/exim/dnsbl.conf
index 5166b255..279bafcd 100644
--- a/install/debian/10/exim/dnsbl.conf
+++ b/install/debian/10/exim/dnsbl.conf
@@ -1,2 +1 @@
 bl.spamcop.net
-zen.spamhaus.org
diff --git a/install/debian/11/exim/dnsbl.conf b/install/debian/11/exim/dnsbl.conf
index 5166b255..279bafcd 100644
--- a/install/debian/11/exim/dnsbl.conf
+++ b/install/debian/11/exim/dnsbl.conf
@@ -1,2 +1 @@
 bl.spamcop.net
-zen.spamhaus.org
diff --git a/install/debian/12/exim/dnsbl.conf b/install/debian/12/exim/dnsbl.conf
index 5166b255..279bafcd 100644
--- a/install/debian/12/exim/dnsbl.conf
+++ b/install/debian/12/exim/dnsbl.conf
@@ -1,2 +1 @@
 bl.spamcop.net
-zen.spamhaus.org
diff --git a/install/debian/8/exim/dnsbl.conf b/install/debian/8/exim/dnsbl.conf
index 5166b255..279bafcd 100644
--- a/install/debian/8/exim/dnsbl.conf
+++ b/install/debian/8/exim/dnsbl.conf
@@ -1,2 +1 @@
 bl.spamcop.net
-zen.spamhaus.org
diff --git a/install/debian/9/exim/dnsbl.conf b/install/debian/9/exim/dnsbl.conf
index 5166b255..279bafcd 100644
--- a/install/debian/9/exim/dnsbl.conf
+++ b/install/debian/9/exim/dnsbl.conf
@@ -1,2 +1 @@
 bl.spamcop.net
-zen.spamhaus.org
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 47153ade..850b91f7 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -2037,6 +2037,7 @@ touch /usr/local/vesta/data/upgrades/enable_cookie_httponly
 touch /usr/local/vesta/data/upgrades/fix_exim_494_autoreply
 touch /usr/local/vesta/data/upgrades/freshclam_start
 touch /usr/local/vesta/data/upgrades/barracuda_rbl
+touch /usr/local/vesta/data/upgrades/spamhaus_dnsbl_removed
 
 # Secret URL
 secretquery=''
diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index 4b6e56b5..c1732bff 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0-11
\ No newline at end of file
+vesta-0.9.9-0-12
\ No newline at end of file
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 4d414655..9f8ee3e8 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -25,6 +25,12 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# Removing SpamHaus DNSBL
+if [ ! -f "/usr/local/vesta/data/upgrades/spamhaus_dnsbl_removed" ]; then
+    sed -i '/zen.spamhaus.org/d' /etc/exim4/dnsbl.conf
+    touch /usr/local/vesta/data/upgrades/spamhaus_dnsbl_removed
+fi
+
 # Fixing 'dh key too small' in dovecot
 if [ -f "/var/log/dovecot.log.1" ] && [ -f "/etc/dovecot/conf.d/10-ssl.conf" ] && [ -f "/usr/share/dovecot/dh.pem" ]; then
     if grep -q 'dh key too small' /var/log/dovecot.log.1; then

From dc1979461e649f330707e1bd782dd28b21150114 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Tue, 11 Mar 2025 00:18:05 +0100
Subject: [PATCH 2176/2300] Update v-make-main-apache-log

---
 bin/v-make-main-apache-log | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/bin/v-make-main-apache-log b/bin/v-make-main-apache-log
index 96e91877..6a6dfadd 100644
--- a/bin/v-make-main-apache-log
+++ b/bin/v-make-main-apache-log
@@ -11,10 +11,4 @@ if ! /usr/local/vesta/bin/v-grep 'LogFormat "%t %v %a %D %r %>s \"%{User-Agent}i
 fi
 systemctl restart apache2
 
-if [ ! -f "/root/analyze-traffic-per-time.php" ]; then
-    wget -nv http://dl.myvestacp.com/vesta/apache_requests_analyzer/analyze-traffic-per-time.php -O /root/analyze-traffic-per-time.php
-    wget -nv http://dl.myvestacp.com/vesta/apache_requests_analyzer/analyze-traffic-per-site-sort-by-time.php -O /root/analyze-traffic-per-site-sort-by-time.php
-    wget -nv http://dl.myvestacp.com/vesta/apache_requests_analyzer/analyze-traffic-per-site-sort-by-hits.php -O /root/analyze-traffic-per-site-sort-by-hits.php
-    wget -nv http://dl.myvestacp.com/vesta/apache_requests_analyzer/analyze-traffic-per-ip-sort-by-time.php -O /root/analyze-traffic-per-ip-sort-by-time.php
-    wget -nv http://dl.myvestacp.com/vesta/apache_requests_analyzer/analyze-traffic-per-ip-sort-by-hits.php -O /root/analyze-traffic-per-ip-sort-by-hits.php
-fi
+wget -nv http://dl.myvestacp.com/vesta/apache_requests_analyzer/analyze-traffic.php -O /root/analyze-traffic.php

From 24908aede144d562daaf830b578f7761c55040c3 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 19 Mar 2025 16:22:54 +0100
Subject: [PATCH 2177/2300] Update v-move-folder-and-make-symlink

---
 bin/v-move-folder-and-make-symlink | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/bin/v-move-folder-and-make-symlink b/bin/v-move-folder-and-make-symlink
index 81561a97..2ee241fa 100644
--- a/bin/v-move-folder-and-make-symlink
+++ b/bin/v-move-folder-and-make-symlink
@@ -66,19 +66,20 @@ fi
 #                       Action                             #
 #----------------------------------------------------------#
 
-rsync -a "$FROMFOLDER/" "$TOFOLDER/"
-# with slashes on the end of the path of both folders
-if [ "$?" -ne 0 ]; then
-    echo "Error happened, aborting"
-    exit 1
-fi
-
 if [ "$FROMFOLDER" = "/home/$USER" ] && [ -d "$FROMFOLDER/conf" ]; then
     # if we are moving myVesta home folder, we must remove immutable attribute from conf/ files
     chattr -R -i "$FROMFOLDER/conf/" > /dev/null 2>&1
     # with slashes on the end of the path of the folder
 fi
 
+# rsync -a "$FROMFOLDER/" "$TOFOLDER/"
+mv "$FROMFOLDER" "$TOFOLDER"
+# with slashes on the end of the path of both folders
+if [ "$?" -ne 0 ]; then
+    echo "Error happened, aborting"
+    exit 1
+fi
+
 rm -rf "$FROMFOLDER"
 # without slash on the end of the path of the folder
 

From 4437f6f0dac75831169d291a0ee41cd084340310 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 19 Mar 2025 16:25:04 +0100
Subject: [PATCH 2178/2300] Update v-move-folder-and-make-symlink

---
 bin/v-move-folder-and-make-symlink | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/v-move-folder-and-make-symlink b/bin/v-move-folder-and-make-symlink
index 2ee241fa..c8b54779 100644
--- a/bin/v-move-folder-and-make-symlink
+++ b/bin/v-move-folder-and-make-symlink
@@ -73,8 +73,9 @@ if [ "$FROMFOLDER" = "/home/$USER" ] && [ -d "$FROMFOLDER/conf" ]; then
 fi
 
 # rsync -a "$FROMFOLDER/" "$TOFOLDER/"
-mv "$FROMFOLDER" "$TOFOLDER"
 # with slashes on the end of the path of both folders
+
+mv "$FROMFOLDER" "$TOFOLDER"
 if [ "$?" -ne 0 ]; then
     echo "Error happened, aborting"
     exit 1

From 01e4890a97e49b1cc99507794e30aa2f8dd12c9f Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 31 Mar 2025 16:41:43 +0200
Subject: [PATCH 2179/2300] Update multi-php-install.sh: Fixing
 disable_functions line

---
 src/deb/for-download/tools/multi-php-install.sh | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/src/deb/for-download/tools/multi-php-install.sh b/src/deb/for-download/tools/multi-php-install.sh
index 70d589cc..aa1b7353 100644
--- a/src/deb/for-download/tools/multi-php-install.sh
+++ b/src/deb/for-download/tools/multi-php-install.sh
@@ -405,8 +405,8 @@ if [ "$inst_84" -eq 1 ]; then
 fi
 
 
-apt update > /dev/null 2>&1
-apt upgrade -y > /dev/null 2>&1
+# apt update > /dev/null 2>&1
+# apt upgrade -y > /dev/null 2>&1
 
 if [ $debian_version -ge 10 ]; then
     a2dismod ruid2 > /dev/null 2>&1
@@ -454,6 +454,10 @@ if [ -f "/usr/local/bin/tailf_apache_error.php" ]; then
     echo "=== upgrading tailf_apache_error.php done."
     sleep 3
     echo ""
-    echo "Everything done."
-    echo ""
 fi
+
+# Fixing php.ini files to have the correct disable_functions line
+/usr/local/vesta/bin/v-fix-php-ini-disable-functions
+
+echo "Everything done."
+echo ""

From 57f179ad05b1ac1cd261d7a0d476f1ff7c8b0b62 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 16 Apr 2025 20:23:46 +0200
Subject: [PATCH 2180/2300] When deleting a domain, also delete the database if
 the domain has a database.

---
 bin/v-delete-database-of-domain | 69 +++++++++++++++++++++++++++++++++
 bin/v-delete-domain             |  7 ++--
 2 files changed, 73 insertions(+), 3 deletions(-)
 create mode 100644 bin/v-delete-database-of-domain

diff --git a/bin/v-delete-database-of-domain b/bin/v-delete-database-of-domain
new file mode 100644
index 00000000..30fd18c0
--- /dev/null
+++ b/bin/v-delete-database-of-domain
@@ -0,0 +1,69 @@
+#!/bin/bash
+# info: delete database if domain has database
+# options: DOMAIN
+#
+# The function for deleting database if domain has database
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Argument definition
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+RET=$OK
+
+# echo "================================="
+r=$(/usr/local/vesta/bin/v-get-database-credentials-of-domain $domain)
+# echo $r
+eval $r
+# echo "================================="
+
+if [ ! -z "$DATABASE_NAME" ]; then
+    echo "=== v-delete-database $USER $DATABASE_NAME"
+    /usr/local/vesta/bin/v-delete-database $USER $DATABASE_NAME
+    if [ $? -ne 0 ]; then
+        echo "=== v-delete-database failed"
+        RET=$E_NOTEXIST
+    fi
+fi
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+log_event "$RET" "$ARGUMENTS"
+
+exit
diff --git a/bin/v-delete-domain b/bin/v-delete-domain
index b6294679..1ca3373b 100755
--- a/bin/v-delete-domain
+++ b/bin/v-delete-domain
@@ -37,9 +37,10 @@ is_object_unsuspended 'user' 'USER' "$user"
 if [ ! -z "$WEB_SYSTEM" ]; then
     str=$(grep "DOMAIN='$domain'" $USER_DATA/web.conf)
     if [  ! -z "$str" ]; then
+        $BIN/v-delete-database-of-domain $domain
         domain_found='yes'
         $BIN/v-delete-web-domain $user $domain 'no'
-        check_result $? "can't suspend web" > /dev/null
+        check_result $? "can't delete web" > /dev/null
     fi
 fi
 
@@ -49,7 +50,7 @@ if [ ! -z "$DNS_SYSTEM" ]; then
     if [  ! -z "$str" ]; then
         domain_found='yes'
         $BIN/v-delete-dns-domain $user $domain 'no'
-        check_result $? "can't suspend dns" > /dev/null
+        check_result $? "can't delete dns" > /dev/null
     fi
 fi
 
@@ -59,7 +60,7 @@ if [ ! -z "$MAIL_SYSTEM" ]; then
     if [  ! -z "$str" ]; then
         domain_found='yes'
         $BIN/v-delete-mail-domain $user $domain
-        check_result $? "can't suspend mail" > /dev/null
+        check_result $? "can't delete mail" > /dev/null
     fi
 fi
 

From a86f76de091d904cf7e117a374124285aea78a6e Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 16 Apr 2025 23:20:42 +0200
Subject: [PATCH 2181/2300] Update db.sh - mysqldump --complete-insert --force
 --quick --single-transaction --max-allowed-packet=1024MB

---
 func/db.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/func/db.sh b/func/db.sh
index 58a339ee..7e4f4d97 100644
--- a/func/db.sh
+++ b/func/db.sh
@@ -58,7 +58,7 @@ mysql_query() {
 
 mysql_dump() {
     err="/tmp/e.mysql"
-    mysqldump --defaults-file=$mycnf --single-transaction --max_allowed_packet=100M -r $1 $2 2> $err
+    mysqldump --defaults-file=$mycnf --complete-insert --force --quick --single-transaction --max-allowed-packet=1024MB -r $1 $2 2> $err
     if [ '0' -ne "$?" ]; then
         rm -rf $tmpdir
         if [ "$notify" != 'no' ]; then

From 8bdfade3d4a9a978a94ce741cab7f520b81bfdae Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 16 Apr 2025 23:55:21 +0200
Subject: [PATCH 2182/2300] Update vst-install-debian.sh

---
 install/vst-install-debian.sh | 55 +++++++++++++++++++----------------
 1 file changed, 30 insertions(+), 25 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 850b91f7..1c1a6da7 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -753,31 +753,36 @@ if [ "$mysql" = 'no' ]; then
 fi
 if [ "$mysql8" = 'yes' ]; then
     echo "=== Preparing MySQL 8 apt repo"
-    software=$(echo "$software" | sed -e 's/exim4-daemon-heavy//')
-    software=$(echo "$software" | sed -e 's/exim4//')
-    #software="$software php-mysql roundcube-mysql"
-    echo "### THIS FILE IS AUTOMATICALLY CONFIGURED ###" > /etc/apt/sources.list.d/mysql.list
-    echo "# You may comment out entries below, but any other modifications may be lost." >> /etc/apt/sources.list.d/mysql.list
-    echo "# Use command 'dpkg-reconfigure mysql-apt-config' as root for modifications." >> /etc/apt/sources.list.d/mysql.list
-    echo "deb http://repo.mysql.com/apt/debian/ $codename mysql-apt-config" >> /etc/apt/sources.list.d/mysql.list
-    echo "deb http://repo.mysql.com/apt/debian/ $codename mysql-8.0" >> /etc/apt/sources.list.d/mysql.list
-    echo "deb http://repo.mysql.com/apt/debian/ $codename mysql-tools" >> /etc/apt/sources.list.d/mysql.list
-    echo "#deb http://repo.mysql.com/apt/debian/ $codename mysql-tools-preview" >> /etc/apt/sources.list.d/mysql.list
-    echo "deb-src http://repo.mysql.com/apt/debian/ $codename mysql-8.0" >> /etc/apt/sources.list.d/mysql.list
-
-    # apt-key adv --keyserver pgp.mit.edu --recv-keys 3A79BD29
-    key="467B942D3A79BD29"
-    readonly key
-    GNUPGHOME="$(mktemp -d)"
-    export GNUPGHOME
-    for keyserver in $(shuf -e ha.pool.sks-keyservers.net hkp://p80.pool.sks-keyservers.net:80 keyserver.ubuntu.com hkp://keyserver.ubuntu.com:80)
-    do
-        gpg --keyserver "${keyserver}" --recv-keys "${key}" 2>&1 && break
-    done
-    gpg --export "${key}" > /etc/apt/trusted.gpg.d/mysql.gpg
-    gpgconf --kill all
-    rm -rf "${GNUPGHOME}"
-    unset GNUPGHOME
+    if [ "$release" -lt 12 ]; then
+	    software=$(echo "$software" | sed -e 's/exim4-daemon-heavy//')
+	    software=$(echo "$software" | sed -e 's/exim4//')
+	    #software="$software php-mysql roundcube-mysql"
+	    echo "### THIS FILE IS AUTOMATICALLY CONFIGURED ###" > /etc/apt/sources.list.d/mysql.list
+	    echo "# You may comment out entries below, but any other modifications may be lost." >> /etc/apt/sources.list.d/mysql.list
+	    echo "# Use command 'dpkg-reconfigure mysql-apt-config' as root for modifications." >> /etc/apt/sources.list.d/mysql.list
+	    echo "deb http://repo.mysql.com/apt/debian/ $codename mysql-apt-config" >> /etc/apt/sources.list.d/mysql.list
+	    echo "deb http://repo.mysql.com/apt/debian/ $codename mysql-8.0" >> /etc/apt/sources.list.d/mysql.list
+	    echo "deb http://repo.mysql.com/apt/debian/ $codename mysql-tools" >> /etc/apt/sources.list.d/mysql.list
+	    echo "#deb http://repo.mysql.com/apt/debian/ $codename mysql-tools-preview" >> /etc/apt/sources.list.d/mysql.list
+	    echo "deb-src http://repo.mysql.com/apt/debian/ $codename mysql-8.0" >> /etc/apt/sources.list.d/mysql.list
+	
+	    # apt-key adv --keyserver pgp.mit.edu --recv-keys 3A79BD29
+	    key="467B942D3A79BD29"
+	    readonly key
+	    GNUPGHOME="$(mktemp -d)"
+	    export GNUPGHOME
+	    for keyserver in $(shuf -e ha.pool.sks-keyservers.net hkp://p80.pool.sks-keyservers.net:80 keyserver.ubuntu.com hkp://keyserver.ubuntu.com:80)
+	    do
+	        gpg --keyserver "${keyserver}" --recv-keys "${key}" 2>&1 && break
+	    done
+	    gpg --export "${key}" > /etc/apt/trusted.gpg.d/mysql.gpg
+	    gpgconf --kill all
+	    rm -rf "${GNUPGHOME}"
+	    unset GNUPGHOME
+     else
+	    wget https://dev.mysql.com/get/mysql-apt-config_0.8.30-1_all.deb
+            dpkg -i mysql-apt-config_0.8.30-1_all.deb
+     fi
     
     mpass=$(gen_pass)
     debconf-set-selections <<< "mysql-community-server mysql-community-server/root-pass password $mpass"

From 0d86e2ca4081e2a83eea05f416d82a0bb7d92fdf Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Thu, 24 Apr 2025 22:31:47 +0200
Subject: [PATCH 2183/2300] Calculate size of directories on /hdd too

---
 bin/v-update-mail-domain-disk  |  3 ++-
 bin/v-update-mail-domains-disk |  4 ++--
 bin/v-update-web-domain-disk   |  8 ++++++++
 bin/v-update-web-domains-disk  |  7 ++++++-
 func/main.sh                   | 11 +++++++++++
 5 files changed, 29 insertions(+), 4 deletions(-)

diff --git a/bin/v-update-mail-domain-disk b/bin/v-update-mail-domain-disk
index 451dbd37..be5502e7 100755
--- a/bin/v-update-mail-domain-disk
+++ b/bin/v-update-mail-domain-disk
@@ -49,7 +49,8 @@ dom_diks=0
 for account in $(search_objects "mail/$domain" 'SUSPENDED' "no" 'ACCOUNT'); do
     home_dir=$HOMEDIR/$user/mail/$domain/$account
     if [ -e "$home_dir" ]; then
-        udisk=$(nice -n 19 du -shm $home_dir | cut -f 1 )
+        cd $home_dir
+        udisk=$(nice -n 19 du -shm ./ | cut -f 1 )
     else
         udisk=0
     fi
diff --git a/bin/v-update-mail-domains-disk b/bin/v-update-mail-domains-disk
index 1dae64cf..807218e3 100755
--- a/bin/v-update-mail-domains-disk
+++ b/bin/v-update-mail-domains-disk
@@ -35,9 +35,9 @@ fi
 #----------------------------------------------------------#
 
 # Starting loop
-for domain in $(search_objects 'mail' 'SUSPENDED' "no" 'DOMAIN'); do
+for domain in $(list_objects 'mail' 'DOMAIN'); do
     dom_diks=0
-    accounts=$(search_objects "mail/$domain" 'SUSPENDED' "no" 'ACCOUNT')
+    accounts=$(list_objects "mail/$domain" 'ACCOUNT')
     for account in $accounts; do
         home_dir=$HOMEDIR/$user/mail/$domain/$account
         if [ -e "$home_dir" ]; then
diff --git a/bin/v-update-web-domain-disk b/bin/v-update-web-domain-disk
index ac851b92..1bee4685 100755
--- a/bin/v-update-web-domain-disk
+++ b/bin/v-update-web-domain-disk
@@ -50,6 +50,14 @@ if [ -e "$home_dir" ]; then
     disk_usage=$(nice -n 19 du -shm $home_dir | cut -f 1 )
 fi
 
+# Defining hdd home directory
+home_dir="/hdd$HOMEDIR/$user/web/$domain/"
+
+# Checking home directory exist
+if [ -e "$home_dir" ] && [[ ! -L "$home_dir" ]]; then
+    disk_usage2=$(nice -n 19 du -shm $home_dir | cut -f 1 )
+    disk_usage=$(( disk_usage + disk_usage2 ))
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #
diff --git a/bin/v-update-web-domains-disk b/bin/v-update-web-domains-disk
index 5951f289..5ee58abf 100755
--- a/bin/v-update-web-domains-disk
+++ b/bin/v-update-web-domains-disk
@@ -32,11 +32,16 @@ is_object_valid 'user' 'USER' "$user"
 #----------------------------------------------------------#
 
 # Domain loop
-for domain in $(search_objects 'web' 'SUSPENDED' "no" 'DOMAIN'); do
+for domain in $(list_objects 'web' 'DOMAIN'); do
     home_dir="$HOMEDIR/$user/web/$domain/"
     if [ -e "$home_dir" ]; then
         disk_usage=$(nice -n 19 du -shm $home_dir | cut -f 1 )
     fi
+    home_dir="/hdd$HOMEDIR/$user/web/$domain/"
+    if [ -e "$home_dir" ] && [[ ! -L "$home_dir" ]]; then
+        disk_usage2=$(nice -n 19 du -shm $home_dir | cut -f 1 )
+        disk_usage=$(( disk_usage + disk_usage2 ))
+    fi
     update_object_value 'web' 'DOMAIN' "$domain" '$U_DISK' "$disk_usage"
 done
 
diff --git a/func/main.sh b/func/main.sh
index 10de469a..447a6b35 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -359,6 +359,17 @@ search_objects() {
     IFS="$OLD_IFS"
 }
 
+# List objects
+list_objects() {
+    OLD_IFS="$IFS"
+    IFS=$'\n'
+    for line in $(cat $USER_DATA/$1.conf); do
+        eval $line
+        eval echo \$$2
+    done
+    IFS="$OLD_IFS"
+}
+
 # Get user value
 get_user_value() {
     grep "^${1//$/}=" $USER_DATA/user.conf |awk -F "'" '{print $2}'

From 73884322616a5ed7402e005fe9d5754c0da6c394 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Fri, 25 Apr 2025 13:52:35 +0200
Subject: [PATCH 2184/2300] parse_object_kv_list_non_eval()

---
 func/main.sh | 79 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 79 insertions(+)

diff --git a/func/main.sh b/func/main.sh
index 447a6b35..03773920 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -1154,3 +1154,82 @@ check_if_service_exists() {
         echo "0"
     fi
 }
+
+# Parsing config variables with key='value' and key="value" pairs and setting them as variables, without using Perl.
+# Inspired by HestiaCP function and improved
+parse_object_kv_list_non_eval() {
+    # Let's combine all the parameters into one string, replace the new lines with a space
+    local str="${*//$'\n'/ }"
+    str=${str//\\\'/---QUOTE---}
+    str=${str//\\\"/---DQUOTE---}
+    local backup_str=$str
+
+    local key val match i length length_val prefix position cut
+    i=0
+    # Searching for key='value' blocks
+    # Loop until we find the next key='value'
+    while [[ $str =~ ([A-Za-z][[:alnum:]_]*)=\'([^\']*)\' ]]; do
+        key="${BASH_REMATCH[1]}"
+        val="${BASH_REMATCH[2]}"
+        match="${BASH_REMATCH[0]}"
+        length=${#match}
+        length_val=${#match}
+
+        # Key validation: alphanumeric, length 2–66 (key must start and end with a letter/number)
+        if ! [[ "$key" =~ ^[[:alnum:]][_[:alnum:]]{0,64}[[:alnum:]]$ ]]; then
+            check_result "$E_INVALID" "Invalid key format [$key]"
+        fi
+
+        # Declaring a global variable
+        val=${val/---QUOTE---/\\\'}
+        val=${val/---DQUOTE---/\\\"}
+        declare -g "$key"="$val"
+
+        # Let's remove the processed part from str to continue
+        prefix=${str%%"$key="*}
+        position=${#prefix}
+        cut=$((position + 1 + length_val))
+        str=${str:cut}
+        ((i++))
+        if [ $i -eq 100 ]; then
+            check_result "$E_INVALID" "Potentially conf-parsing infinite loop detected"
+        fi
+    done
+
+    # Terminate function if we don't expect strings with double apostrophes
+    if [ -z "$PARSE_DOUBLE_QUOTES_VAR" ]; then
+        return;
+    fi
+
+    # Searching for key="value" blocks
+    str=$backup_str
+    i=0
+    # Loop until we find the next key="value"
+    while [[ $str =~ ([A-Za-z][[:alnum:]_]*)=\"([^\"]*)\" ]]; do
+        key="${BASH_REMATCH[1]}"
+        val="${BASH_REMATCH[2]}"
+        match="${BASH_REMATCH[0]}"
+        length=${#match}
+        length_val=${#match}
+
+        # Key validation: alphanumeric, length 2–66 (key must start and end with a letter/number)
+        if ! [[ "$key" =~ ^[[:alnum:]][_[:alnum:]]{0,64}[[:alnum:]]$ ]]; then
+            check_result "$E_INVALID" "Invalid key format [$key]"
+        fi
+
+        # Declaring a global variable
+        val=${val/---QUOTE---/\\\'}
+        val=${val/---DQUOTE---/\\\"}
+        declare -g "$key"="$val"
+
+        # Let's remove the processed part from str to continue
+        prefix=${str%%"$key="*}
+        position=${#prefix}
+        cut=$((position + 1 + length_val))
+        str=${str:cut}
+        ((i++))
+        if [ $i -eq 100 ]; then
+            check_result "$E_INVALID" "Potentially conf-parsing infinite loop detected"
+        fi
+    done
+}

From 6dccbb8276ef0ed6fa2102a83c90675c7520e260 Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 7 May 2025 10:37:06 +0200
Subject: [PATCH 2185/2300] Update vst-install-debian.sh:
 mysql-apt-config_0.8.34-1_all.deb

---
 install/vst-install-debian.sh | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 1c1a6da7..3a60c85c 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -780,8 +780,9 @@ if [ "$mysql8" = 'yes' ]; then
 	    rm -rf "${GNUPGHOME}"
 	    unset GNUPGHOME
      else
-	    wget https://dev.mysql.com/get/mysql-apt-config_0.8.30-1_all.deb
-            dpkg -i mysql-apt-config_0.8.30-1_all.deb
+            # check latest on: https://dev.mysql.com/downloads/repo/apt/
+	    wget https://dev.mysql.com/get/mysql-apt-config_0.8.34-1_all.deb
+            dpkg -i mysql-apt-config_0.8.34-1_all.deb
      fi
     
     mpass=$(gen_pass)

From 83d12510e32997a0787a3508b08d111e4a7ec4ca Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Mon, 12 May 2025 17:27:13 +0200
Subject: [PATCH 2186/2300] Update v-add-letsencrypt-domain: Detecting valid
 status on wildcard variant

---
 bin/v-add-letsencrypt-domain | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/v-add-letsencrypt-domain b/bin/v-add-letsencrypt-domain
index 97e555fa..a7c7fbb8 100755
--- a/bin/v-add-letsencrypt-domain
+++ b/bin/v-add-letsencrypt-domain
@@ -308,6 +308,11 @@ for auth in $authz; do
             if [[ $(echo "$answer" | grep 'addressesResolved') != "" ]]; then
                 break
             fi
+            if [ "$wildcard" = 'yes'  ]; then
+                if [[ $(echo "$answer" | grep '"status": "valid"') != "" ]]; then
+                    break
+                fi                
+            fi
             i=$((i + 1))
             if ((i > 30)); then
                 break

From d3fb4e13d593c0c9317afd3add1f3e62bc0a6e7b Mon Sep 17 00:00:00 2001
From: myvesta <38690722+myvesta@users.noreply.github.com>
Date: Wed, 14 May 2025 14:50:22 +0200
Subject: [PATCH 2187/2300] v-move-domain-and-database-to-account: Update
 wordfence-waf.php

Update v-move-domain-and-database-to-account

Update v-delete-web-domain: deleting /hdd/home/$user/web/$domain

Update v-delete-user: deleting /hdd/home/$user

Update v-delete-mail-domain: removing /hdd/home/$user/mail/$domain_idn

Update v-change-domain-owner: moving /hdd/home/$owner/web/$domain

Update v-change-domain-owner: moving /hdd/home/$owner/mail/$domain

Update v-move-folder-and-make-symlink: debug and additional checking
---
 bin/v-change-domain-owner                 |  8 +++++
 bin/v-delete-mail-domain                  |  3 ++
 bin/v-delete-user                         |  2 +-
 bin/v-delete-web-domain                   |  3 ++
 bin/v-move-domain-and-database-to-account | 44 ++++++++++++++++-------
 bin/v-move-folder-and-make-symlink        | 12 +++++++
 6 files changed, 59 insertions(+), 13 deletions(-)

diff --git a/bin/v-change-domain-owner b/bin/v-change-domain-owner
index 09ae9bcc..ed5fa5a4 100755
--- a/bin/v-change-domain-owner
+++ b/bin/v-change-domain-owner
@@ -82,6 +82,10 @@ if [ ! -z "$web_data" ]; then
     # Move data
     mv $HOMEDIR/$owner/web/$domain $HOMEDIR/$user/web/
 
+    if [ -d "/hdd/home/$owner/web/$domain" ]; then
+        $BIN/v-move-folder-and-make-symlink /hdd/home/$owner/web/$domain /hdd/home/$user/web/$domain
+    fi
+
     # Change ownership
     find $HOMEDIR/$user/web/$domain -user $owner \
         -exec chown -h $user:$user {} \;
@@ -152,6 +156,10 @@ if [ ! -z "$mail_data" ]; then
     # Move data
     mv $HOMEDIR/$owner/mail/$domain $HOMEDIR/$user/mail/
 
+    if [ -d "/hdd/home/$owner/mail/$domain" ]; then
+        $BIN/v-move-folder-and-make-symlink /hdd/home/$owner/mail/$domain /hdd/home/$user/mail/$domain
+    fi
+
     # Change ownership
     find $HOMEDIR/$user/mail/$domain -user $owner \
         -exec chown -h $user {} \;
diff --git a/bin/v-delete-mail-domain b/bin/v-delete-mail-domain
index ee727aa9..9be565bb 100755
--- a/bin/v-delete-mail-domain
+++ b/bin/v-delete-mail-domain
@@ -51,6 +51,9 @@ if [[ "$MAIL_SYSTEM" =~ exim ]]; then
     rm -f /etc/$MAIL_SYSTEM/domains/$domain_idn
     rm -rf $HOMEDIR/$user/conf/mail/$domain
     rm -rf $HOMEDIR/$user/mail/$domain_idn
+    if [ -d "/hdd/home/$user/mail/$domain_idn" ]; then
+        rm -rf /hdd/home/$user/mail/$domain_idn
+    fi
 fi
 
 # Deleting dkim dns record
diff --git a/bin/v-delete-user b/bin/v-delete-user
index 120b1f72..cdf809eb 100755
--- a/bin/v-delete-user
+++ b/bin/v-delete-user
@@ -94,7 +94,7 @@ fi
 # Deleting user directories
 chattr -i $HOMEDIR/$user/conf
 rm -rf $HOMEDIR/$user
-if [ -f "/hdd/home/$user" ]; then
+if [ -d "/hdd/home/$user" ]; then
     rm -rf /hdd/home/$user
 fi
 rm -f /var/spool/mail/$user
diff --git a/bin/v-delete-web-domain b/bin/v-delete-web-domain
index 43362e34..e64dd9a7 100755
--- a/bin/v-delete-web-domain
+++ b/bin/v-delete-web-domain
@@ -130,6 +130,9 @@ rm -f /var/log/$WEB_SYSTEM/domains/$domain.error*
 
 # Deleting directory
 rm -rf $HOMEDIR/$user/web/$domain
+if [ -d "/hdd/home/$user/web/$domain" ]; then
+    rm -rf /hdd/home/$user/web/$domain
+fi
 
 
 #----------------------------------------------------------#
diff --git a/bin/v-move-domain-and-database-to-account b/bin/v-move-domain-and-database-to-account
index 08180d99..383fd26e 100644
--- a/bin/v-move-domain-and-database-to-account
+++ b/bin/v-move-domain-and-database-to-account
@@ -92,31 +92,51 @@ fi
 #               Update Wordfence WAF Path                  #
 #----------------------------------------------------------#
 
-# Path to .user.ini file
-user_ini="$USER_DATA/web/$domain/public_html/.user.ini"
+filepath="/home/USER_TO/web/$domain/public_html/.user.ini"
+filename=$(basename $filepath)
 
-# Check if .user.ini exists
-if [ -f "$user_ini" ]; then
-    echo "Updating .user.ini with new user path..."
+# Check if file exists
+if [ -f "$filepath" ]; then
+    echo "Updating $filename with new user path..."
     
     # Temporary file for modification
     tmp_file=$(mktemp)
     
     # Change path from old USER to new USER_TO
-    sed "s|/home/$owner/public_html|/home/$USER_TO/public_html|g" "$user_ini" > "$tmp_file"
+    sed "s|/home/$owner/public_html|/home/$USER_TO/public_html|g" "$filepath" > "$tmp_file"
     
-    # Check if replacement was successful and update .user.ini
+    # Check if replacement was successful and update file
     if [ $? -eq 0 ]; then
-        mv "$tmp_file" "$user_ini"
-        echo ".user.ini updated successfully."
+        mv "$tmp_file" "$filepath"
+        echo "$filename updated successfully."
     else
-        echo "Failed to update .user.ini file."
+        echo "Failed to update $filename file."
         rm "$tmp_file"  # Deletes temporary file
     fi
-else
-    echo ".user.ini does not exist, no changes made."
 fi
 
+filepath="/home/USER_TO/web/$domain/public_html/wordfence-waf.php"
+filename=$(basename $filepath)
+
+# Check if file exists
+if [ -f "$filepath" ]; then
+    echo "Updating $filename with new user path..."
+    
+    # Temporary file for modification
+    tmp_file=$(mktemp)
+    
+    # Change path from old USER to new USER_TO
+    sed "s|/home/$owner/public_html|/home/$USER_TO/public_html|g" "$filepath" > "$tmp_file"
+    
+    # Check if replacement was successful and update file
+    if [ $? -eq 0 ]; then
+        mv "$tmp_file" "$filepath"
+        echo "$filename updated successfully."
+    else
+        echo "Failed to update $filename file."
+        rm "$tmp_file"  # Deletes temporary file
+    fi
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #
diff --git a/bin/v-move-folder-and-make-symlink b/bin/v-move-folder-and-make-symlink
index c8b54779..ccd66b7c 100644
--- a/bin/v-move-folder-and-make-symlink
+++ b/bin/v-move-folder-and-make-symlink
@@ -19,6 +19,8 @@ fi
 FROMFOLDER=$1
 TOFOLDER=$2
 
+echo "Executing: v-move-folder-and-make-symlink $1 $2"
+
 # Includes
 source $VESTA/func/main.sh
 
@@ -26,6 +28,16 @@ source $VESTA/func/main.sh
 #                    Verifications                         #
 #----------------------------------------------------------#
 
+if [ -z "$FROMFOLDER" ]; then
+    echo "First parameter is empty, aborting"
+    exit 1
+fi
+
+if [ -z "$TOFOLDER" ]; then
+    echo "Second parameter is empty, aborting"
+    exit 1
+fi
+
 # Trimming the ending slash, just in case
 FROMFOLDER=$(echo "$FROMFOLDER" | sed 's:/*$::')
 TOFOLDER=$(echo "$TOFOLDER" | sed 's:/*$::')

From 451b025f1f52641196d71feeec2f835ed6aebadb Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Fri, 23 May 2025 14:04:03 +0200
Subject: [PATCH 2188/2300] Create v-delete-mails

---
 bin/v-delete-mails | 127 +++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 127 insertions(+)
 create mode 100644 bin/v-delete-mails

diff --git a/bin/v-delete-mails b/bin/v-delete-mails
new file mode 100644
index 00000000..24ac68e5
--- /dev/null
+++ b/bin/v-delete-mails
@@ -0,0 +1,127 @@
+#!/bin/bash
+# info: delete old emails (by mtime) for user/domain/account, with optional scope
+# usage:   v-delete-mails USER DOMAIN ACCOUNT MTIME_DAYS|all SCOPE
+# SCOPE:   all    – clean every Maildir folder (cur, new, tmp, custom subfolders)
+#          trash  – clean only Trash/Junk/Spam folders
+
+# load Vesta functions & config
+source "$VESTA/func/main.sh"
+source "$VESTA/conf/vesta.conf"
+
+# read arguments
+user="$1"
+domain="$2"
+account="$3"
+mtime="$4"
+scope="$5"
+
+# verify argument count
+check_args '5' "$#" 'USER DOMAIN ACCOUNT MTIME_DAYS|all SCOPE'
+
+# validate scope
+if [[ "$scope" != "all" && "$scope" != "trash" ]]; then
+  echo "ERROR: SCOPE must be 'all' or 'trash'."
+  exit 1
+fi
+
+# validate logical combinations
+if [[ "$user" == "all" ]]; then
+  if [[ "$domain" != "all" || "$account" != "all" ]]; then
+    echo "ERROR: When USER is 'all', both DOMAIN and ACCOUNT must be 'all'."
+    exit 1
+  fi
+elif [[ "$domain" == "all" && "$account" != "all" ]]; then
+  echo "ERROR: When DOMAIN is 'all', ACCOUNT must also be 'all'."
+  exit 1
+fi
+
+# build a detailed summary for the warning
+declare -a summary_parts
+if [[ "$user" == "all" ]]; then
+  summary_parts+=("all users")
+else
+  summary_parts+=("user '$user'")
+fi
+
+if [[ "$domain" == "all" ]]; then
+  summary_parts+=("all domains")
+else
+  summary_parts+=("domain '$domain'")
+fi
+
+if [[ "$account" == "all" ]]; then
+  summary_parts+=("all accounts")
+else
+  summary_parts+=("account '$account'")
+fi
+
+# join with commas
+summary=$(printf ", %s" "${summary_parts[@]}")
+summary=${summary:2}
+
+# only warn if any of them is 'all' or if mtime is 'all'
+if [[ "$mtime" == "all" || "$user" == "all" || "$domain" == "all" || "$account" == "all" ]]; then
+  echo "WARNING: This will delete emails older than '$mtime' days for ${summary}."
+  read -p "Are you sure? (yes/no): " confirm
+  [[ "$confirm" != "yes" ]] && { echo "Aborted."; exit 1; }
+fi
+
+# function to delete emails
+delete_emails() {
+  local u="$1" d="$2" a="$3"
+  local maildir="/home/$u/mail/$d/$a"
+
+  [[ ! -d "$maildir" ]] && return
+
+  echo "→ Cleaning '$a@$d' (user: $u), scope: $scope, mtime: $mtime"
+
+  # build find predicates
+  if [[ "$scope" == "all" ]]; then
+    folder_expr=( -path "*/cur/*" -o -path "*/new/*" -o -path "*/tmp/*" )
+  else
+    folder_expr=( -ipath "*/trash/*" -o -ipath "*/junk/*" -o -ipath "*/spam/*" )
+  fi
+
+  # assemble and run find
+  if [[ "$mtime" == "all" ]]; then
+    find "$maildir" -type f \( "${folder_expr[@]}" \) -print -delete 2>/dev/null
+  else
+    find "$maildir" -type f \( "${folder_expr[@]}" \) -mtime +"$mtime" -print -delete 2>/dev/null
+  fi
+}
+
+# collect users
+if [[ "$user" == "all" ]]; then
+  users=$(v-list-users plain | awk '{print $1}')
+else
+  users="$user"
+fi
+
+# iterate through users, domains, accounts
+for u in $users; do
+  if [[ "$domain" == "all" ]]; then
+    domains=$(v-list-mail-domains "$u" plain | awk '{print $1}')
+  else
+    domains="$domain"
+  fi
+
+  for d in $domains; do
+    if [[ "$account" == "all" ]]; then
+      accounts=$(v-list-mail-accounts "$u" "$d" plain | awk '{print $1}')
+    else
+      accounts="$account"
+    fi
+
+    for a in $accounts; do
+      delete_emails "$u" "$d" "$a"
+    done
+  done
+done
+
+# restart dovecot to refresh mailbox state
+systemctl restart dovecot
+
+# log the action (status first, then message)
+log_event "$OK" "Deleted emails (>$mtime days, scope=$scope) for $user $domain $account"
+
+exit 0

From cb6e8e4926d264fed06b96b8c34d4dd3a5c48f15 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 24 May 2025 13:31:57 +0200
Subject: [PATCH 2189/2300] nginx block-firewall.conf when user block 80,443 in
 Firewall

---
 bin/v-add-firewall-rule    | 10 ++++++++++
 bin/v-change-firewall-rule | 10 ++++++++++
 bin/v-delete-firewall-rule |  9 +++++++++
 3 files changed, 29 insertions(+)

diff --git a/bin/v-add-firewall-rule b/bin/v-add-firewall-rule
index 6fb867d3..b815778b 100755
--- a/bin/v-add-firewall-rule
+++ b/bin/v-add-firewall-rule
@@ -83,6 +83,16 @@ sort_fw_rules
 # Updating system firewall
 $BIN/v-update-firewall
 
+if [ "$WEB_SYSTEM" == 'nginx' ] || [ "$PROXY_SYSTEM" == 'nginx' ]; then
+    if [ "$port_ext" == "80,443" ] && [ "$action" == "DROP" ]; then
+        touch /etc/nginx/conf.d/block-firewall.conf
+        if ! grep -q "deny $ip;" /etc/nginx/conf.d/block-firewall.conf; then
+            echo "deny $ip;" >> /etc/nginx/conf.d/block-firewall.conf
+            systemctl restart nginx
+        fi
+    fi
+fi
+
 
 #----------------------------------------------------------#
 #                       Vesta                              #
diff --git a/bin/v-change-firewall-rule b/bin/v-change-firewall-rule
index d2502bce..aad2ec38 100755
--- a/bin/v-change-firewall-rule
+++ b/bin/v-change-firewall-rule
@@ -62,6 +62,8 @@ str="RULE='$rule' ACTION='$action' PROTOCOL='$protocol' PORT='$port_ext'"
 str="$str IP='$ip' COMMENT='$comment' SUSPENDED='no'"
 str="$str TIME='$time' DATE='$date'"
 
+oldvalues=$(grep "RULE='$rule'" $VESTA/data/firewall/rules.conf)
+
 # Deleting old rule
 sed -i "/RULE='$rule' /d" $VESTA/data/firewall/rules.conf
 
@@ -74,6 +76,14 @@ sort_fw_rules
 # Updating system firewall
 $BIN/v-update-firewall
 
+if [ "$WEB_SYSTEM" == 'nginx' ] || [ "$PROXY_SYSTEM" == 'nginx' ]; then
+    if [ "$port_ext" == "80,443" ] && [ "$action" == "DROP" ]; then
+        NEWIP=$ip
+        parse_object_kv_list_non_eval "$oldvalues"
+        sed -i "s|$IP|$NEWIP|g" /etc/nginx/conf.d/block-firewall.conf
+        systemctl restart nginx
+    fi
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #
diff --git a/bin/v-delete-firewall-rule b/bin/v-delete-firewall-rule
index 8f646644..61f7602d 100755
--- a/bin/v-delete-firewall-rule
+++ b/bin/v-delete-firewall-rule
@@ -34,12 +34,21 @@ is_object_valid '../../data/firewall/rules' 'RULE' "$rule"
 #                       Action                             #
 #----------------------------------------------------------#
 
+oldvalues=$(grep "RULE='$rule'" $VESTA/data/firewall/rules.conf)
+
 # Deleting rule
 sed -i "/RULE='$rule' /d" $VESTA/data/firewall/rules.conf
 
 # Updating system firewall
 $BIN/v-update-firewall
 
+if [ "$WEB_SYSTEM" == 'nginx' ] || [ "$PROXY_SYSTEM" == 'nginx' ]; then
+    parse_object_kv_list_non_eval "$oldvalues"
+    if [ "$PORT" == "80,443" ] && [ "$ACTION" == "DROP" ]; then
+        sed -i "/$IP/d" /etc/nginx/conf.d/block-firewall.conf
+        systemctl restart nginx
+    fi
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 4c495a1d691bf97042a51f34fc69506cde72e606 Mon Sep 17 00:00:00 2001
From: ikheetjeff <76551334+ikheetjeff@users.noreply.github.com>
Date: Tue, 15 Oct 2024 17:47:13 +0200
Subject: [PATCH 2190/2300] Update index.php

---
 web/edit/server/index.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/web/edit/server/index.php b/web/edit/server/index.php
index 49c577d8..eed4baab 100644
--- a/web/edit/server/index.php
+++ b/web/edit/server/index.php
@@ -339,7 +339,8 @@ if (!empty($_POST['save'])) {
             $v_backup_username = escapeshellarg($_POST['v_backup_username']);
             $v_backup_password = escapeshellarg($_POST['v_backup_password']);
             $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
-            exec (VESTA_CMD."v-add-backup-host ".$v_backup_type." ".$v_backup_host ." ".$v_backup_username." ".$v_backup_password." ".$v_backup_bpath, $output, $return_var);
+            $v_backup_port = escapeshellarg($_POST['v_backup_port']);
+            exec (VESTA_CMD."v-add-backup-host ".$v_backup_type." ".$v_backup_host ." ".$v_backup_username." ".$v_backup_password." ".$v_backup_bpath." ".$v_backup_port, $output, $return_var);
             check_return_code($return_var,$output);
             unset($output);
             if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
@@ -347,12 +348,12 @@ if (!empty($_POST['save'])) {
             if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
             if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
             if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
+            if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
             $v_backup_new = 'yes';
             $v_backup_adv = 'yes';
             $v_backup_remote_adv = 'yes';
         }
     }
-
     // Change remote backup host type
     if (empty($_SESSION['error_msg'])) {
         if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] != $v_backup_type)) {

From ff7bc2baa5e3e2f7b12ebd3f1002e47144ba3f9e Mon Sep 17 00:00:00 2001
From: ikheetjeff <76551334+ikheetjeff@users.noreply.github.com>
Date: Tue, 15 Oct 2024 17:50:47 +0200
Subject: [PATCH 2191/2300] Update edit_server.html

---
 web/templates/admin/edit_server.html | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/web/templates/admin/edit_server.html b/web/templates/admin/edit_server.html
index b5da08de..888b081f 100644
--- a/web/templates/admin/edit_server.html
+++ b/web/templates/admin/edit_server.html
@@ -641,6 +641,17 @@
                                                             <br><br>
                                                         </td>
                                                     </tr>
+                                                    <tr>
+                                                        <td class="vst-text">
+                                                            <?php print __('Port') ?>
+                                                        </td>
+                                                    </tr>
+                                                    <tr>
+                                                        <td>
+                                                            <input type="text" size="20" class="vst-input" name="v_backup_port" value="<?=trim($v_backup_port, "'")?>">
+                                                            <br><br>
+                                                        </td>
+                                                    </tr>
                                                     <tr>
                                                         <td class="vst-text">
                                                             <?php print __('Username') ?>

From fa8dd64c5a33fb55e219870a60e424538c31d3ab Mon Sep 17 00:00:00 2001
From: myvesta <info@mycity-hosting.com>
Date: Sun, 25 May 2025 13:51:13 +0200
Subject: [PATCH 2192/2300] Adding ProFTPD jail rule to Fail2Ban

---
 install/vst-install-debian.sh | 14 ++++++++++++++
 src/deb/vesta/postinst        | 29 ++++++++++++++++++++++++++++-
 2 files changed, 42 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 3a60c85c..ad10b341 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1690,6 +1690,20 @@ if [ "$fail2ban" = 'yes' ]; then
 		chmod 640 /var/log/auth.log
 		chown root:adm /var/log/auth.log
 	fi
+    if [ "$proftpd" = 'yes' ]; then
+        cat <<EOF >> /etc/fail2ban/jail.local
+
+[proftpd]
+enabled = true
+filter = proftpd
+action = vesta[name=FTP]
+port = ftp,ftp-data,ftps,ftps-data
+logpath = %(proftpd_log)s
+backend = %(proftpd_backend)s
+maxretry = 5
+EOF
+    fi
+
     #update-rc.d fail2ban defaults
     currentservice='fail2ban'
     ensure_startup $currentservice
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 9f8ee3e8..dc5c64c2 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -25,6 +25,29 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# Adding ProFTPD to Fail2Ban
+if [ -f "/etc/fail2ban/jail.local" ] && [ -f "/etc/proftpd/proftpd.conf" ]; then
+    if ! grep -q 'proftpd' /etc/fail2ban/jail.local; then
+        echo "== Adding ProFTPD to Fail2Ban"
+        cat <<EOF >> /etc/fail2ban/jail.local
+
+[proftpd]
+enabled = true
+filter = proftpd
+action = vesta[name=FTP]
+port = ftp,ftp-data,ftps,ftps-data
+logpath = %(proftpd_log)s
+backend = %(proftpd_backend)s
+maxretry = 5
+EOF
+        fail2ban_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'fail2ban' | grep -c 'running')    
+        if [ $fail2ban_running -eq 1 ]; then
+            echo "== Restarting Fail2Ban"
+            systemctl restart fail2ban
+        fi
+    fi
+fi
+
 # Removing SpamHaus DNSBL
 if [ ! -f "/usr/local/vesta/data/upgrades/spamhaus_dnsbl_removed" ]; then
     sed -i '/zen.spamhaus.org/d' /etc/exim4/dnsbl.conf
@@ -163,7 +186,11 @@ if [ ! -f "/usr/local/vesta/data/upgrades/enable-tls-in-proftpd" ]; then
         echo "== Enabling TLS for ProFTPD FTPS"
         wget -nv https://c.myvestacp.com/debian/10/proftpd/tls.conf -O /etc/proftpd/tls.conf
         sed -i "s|AuthPAMConfig|Include /etc/proftpd/tls.conf\n\nAuthPAMConfig|g" /etc/proftpd/proftpd.conf
-        systemctl restart proftpd
+        proftpd_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'proftpd' | grep -c 'running')    
+        if [ $proftpd_running -eq 1 ]; then
+            echo "== Restarting ProFTPD"
+            systemctl restart proftpd
+        fi
     fi
   fi
 fi

From de5365280f6778cfa92ab653aa0c8319b9663ed1 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 28 May 2025 17:11:55 +0200
Subject: [PATCH 2193/2300] Adding myVesta rules to SpamAssassin

---
 install/vst-install-debian.sh |  9 ++++++++
 src/deb/vesta/postinst        | 43 +++++++++++++++++++++++++++++++++--
 2 files changed, 50 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ad10b341..ff19d1d5 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1581,6 +1581,15 @@ if [ "$spamd" = 'yes' ]; then
     echo "=== Patching spamassassin dns_server"
     sed -i "s/report_safe 1/report_safe 1\n\ndns_server 127.0.0.1/g" /etc/spamassassin/local.cf
 
+    echo "== Adding myVesta rules to SpamAssassin"
+    cat <<EOF > /etc/spamassassin/myvesta.cf
+score RCVD_IN_RP_SAFE 0
+score RCVD_IN_RP_CERTIFIED 0
+score SPF_FAIL 3.0
+score SPF_SOFTFAIL 4.0
+score SPF_NONE 4.0
+EOF
+
     wget -nv -O /etc/spamassassin/barracuda.cf http://c.myvestacp.com/tools/spamassassin/barracuda.cf
     ensure_startup $currentservice
     systemctl restart $currentservice
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index dc5c64c2..523678e3 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -25,6 +25,41 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# Adding myVesta rules to SpamAssassin
+if [ -d "/etc/spamassassin" ]; then
+    spamassassin_modified=0
+    if [ ! -f "/etc/spamassassin/myvesta.cf" ]; then
+        touch /etc/spamassassin/myvesta.cf
+    fi
+    if ! grep -q 'RCVD_IN_RP_SAFE' /etc/spamassassin/myvesta.cf; then
+        echo "== Adding RCVD_IN_RP_ myVesta rules to SpamAssassin"
+        echo 'score RCVD_IN_RP_SAFE 0' >> /etc/spamassassin/myvesta.cf
+        echo 'score RCVD_IN_RP_CERTIFIED 0' >> /etc/spamassassin/myvesta.cf
+        spamassassin_modified=1
+    fi
+    if ! grep -q 'SPF_FAIL' /etc/spamassassin/myvesta.cf; then
+        echo "== Adding SPF_FAIL myVesta rules to SpamAssassin"
+    cat <<EOF >> /etc/spamassassin/myvesta.cf
+score SPF_FAIL 3.0
+score SPF_SOFTFAIL 4.0
+score SPF_NONE 4.0
+EOF
+        spamassassin_modified=1
+    fi
+
+    if [ $spamassassin_modified -eq 1 ]; then
+        spamassassin_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'spamassassin\|spamd' | grep -c 'running')
+        if [ $spamassassin_running -eq 1 ]; then
+            echo "== Restarting SpamAssassin"
+            if [ "$release" -lt 12 ]; then
+                    systemctl restart spamassassin.service
+                else
+                    systemctl restart spamd.service
+            fi
+        fi
+    fi
+fi
+
 # Adding ProFTPD to Fail2Ban
 if [ -f "/etc/fail2ban/jail.local" ] && [ -f "/etc/proftpd/proftpd.conf" ]; then
     if ! grep -q 'proftpd' /etc/fail2ban/jail.local; then
@@ -122,14 +157,18 @@ fi
 # Adding Barracuda RBL to SpamAssassin
 if [ ! -f "/usr/local/vesta/data/upgrades/barracuda_rbl" ]; then
     spamassassin_installed=$(/usr/local/vesta/bin/v-list-sys-services | grep -c 'spamassassin')
-    spamassassin_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'spamassassin' | grep -c 'running')
+    spamassassin_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'spamassassin\|spamd' | grep -c 'running')
     if [ $spamassassin_installed -eq 1 ]; then
         echo "== Adding Barracuda RBL to SpamAssassin"
         wget -nv -O /etc/spamassassin/barracuda.cf http://c.myvestacp.com/tools/spamassassin/barracuda.cf
     fi
     if [ $spamassassin_running -eq 1 ]; then
         echo "== Restarting SpamAssassin"
-        systemctl restart spamassassin
+        if [ "$release" -lt 12 ]; then
+            systemctl restart spamassassin.service
+        else
+            systemctl restart spamd.service
+        fi
     fi
     touch /usr/local/vesta/data/upgrades/barracuda_rbl
 fi

From 92029a97335afed541fce852d64d1eb577e8c13f Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 30 May 2025 22:08:44 +0200
Subject: [PATCH 2194/2300] v-import-cpanel-backup: /*!999999\- enable the
 sandbox mode */ fix

---
 bin/v-import-cpanel-backup | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/bin/v-import-cpanel-backup b/bin/v-import-cpanel-backup
index a70213dd..43e8c3bf 100644
--- a/bin/v-import-cpanel-backup
+++ b/bin/v-import-cpanel-backup
@@ -157,11 +157,15 @@ for sk_dbr in $sk_db_list
 			echo " Create and restore ${sk_dbr} "
 			sed -i "s/utf8mb4_unicode_520_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.create
 			sed -i "s/utf8mb4_0900_ai_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.create
-			v-sed '/*!999999\- enable the sandbox mode */' '' mysql/${sk_dbr}.create
+			if grep -q ' enable the sandbox mode ' mysql/${sk_dbr}.create; then
+				v-sed '/*!999999\- enable the sandbox mode */' '' mysql/${sk_dbr}.create
+			fi
 			mysql < mysql/${sk_dbr}.create
 			sed -i "s/utf8mb4_unicode_520_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.sql
 			sed -i "s/utf8mb4_0900_ai_ci/utf8mb4_unicode_ci/g" mysql/${sk_dbr}.sql
-			v-sed '/*!999999\- enable the sandbox mode */' '' mysql/${sk_dbr}.sql
+			if grep -q ' enable the sandbox mode ' mysql/${sk_dbr}.sql; then
+				v-sed '/*!999999\- enable the sandbox mode */' '' mysql/${sk_dbr}.sql
+			fi
 			mysql ${sk_dbr} < mysql/${sk_dbr}.sql
 		else
 			echo "Error: Cant restore database $sk_dbr alredy exists in mysql server"

From 5ca293c9b2c61b27e4123e903291064db861bb21 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 31 May 2025 22:01:57 +0200
Subject: [PATCH 2195/2300] Session DISABLE_IP_CHECK

---
 bin/v-list-sys-config | 3 ++-
 web/inc/main.php      | 7 ++++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/bin/v-list-sys-config b/bin/v-list-sys-config
index 127f2176..a0fdbbbc 100755
--- a/bin/v-list-sys-config
+++ b/bin/v-list-sys-config
@@ -54,7 +54,8 @@ json_list() {
         "SOFTACULOUS": "'$SOFTACULOUS'",
         "MAX_DBUSER_LEN": "'$MAX_DBUSER_LEN'",
         "MAIL_CERTIFICATE": "'$MAIL_CERTIFICATE'",
-        "VESTA_CERTIFICATE": "'$VESTA_CERTIFICATE'"
+        "VESTA_CERTIFICATE": "'$VESTA_CERTIFICATE'",
+        "DISABLE_IP_CHECK": "'$DISABLE_IP_CHECK'"
     }
 }'
 }
diff --git a/web/inc/main.php b/web/inc/main.php
index 26df863e..f13e4142 100644
--- a/web/inc/main.php
+++ b/web/inc/main.php
@@ -38,8 +38,13 @@ if(!isset($_SESSION['user_combined_ip'])){
     $_SESSION['user_combined_ip'] = $user_combined_ip;
 }
 
+$SKIP_IP_CHECK = false;
+if (isset($_SESSION['DISABLE_IP_CHECK']) && $_SESSION['DISABLE_IP_CHECK'] == 'yes') {
+    $SKIP_IP_CHECK = true;
+}
+
 // Checking user to use session from the same IP he has been logged in
-if($_SESSION['user_combined_ip'] != $user_combined_ip && $_SERVER['REMOTE_ADDR'] != '127.0.0.1'){
+if ($_SESSION['user_combined_ip'] != $user_combined_ip && $_SERVER['REMOTE_ADDR'] != '127.0.0.1' && $SKIP_IP_CHECK==false) {
     session_destroy();
     session_start();
     $_SESSION['request_uri'] = $_SERVER['REQUEST_URI'];

From 435a3627653dd1a942824a418a91e91da0978dd8 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 1 Jun 2025 14:44:18 +0200
Subject: [PATCH 2196/2300] Converting CRLF to LF in a few files

---
 .../10/templates/web/nginx/private-hosting.sh |  22 +-
 .../11/templates/web/nginx/private-hosting.sh |  22 +-
 .../12/templates/web/nginx/private-hosting.sh |  22 +-
 src/deb/ioncube/copyright                     | 486 +++++++++---------
 web/list/firewall/banlist/ip_info.php         | 328 ++++++------
 5 files changed, 440 insertions(+), 440 deletions(-)

diff --git a/install/debian/10/templates/web/nginx/private-hosting.sh b/install/debian/10/templates/web/nginx/private-hosting.sh
index abc9155d..eeed37ef 100755
--- a/install/debian/10/templates/web/nginx/private-hosting.sh
+++ b/install/debian/10/templates/web/nginx/private-hosting.sh
@@ -1,11 +1,11 @@
-#!/bin/bash
-# Changing public_html permission
-user="$1"
-domain="$2"
-ip="$3"
-home_dir="$4"
-docroot="$5"
-
-chmod 755 $docroot
-
-exit 0
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/11/templates/web/nginx/private-hosting.sh b/install/debian/11/templates/web/nginx/private-hosting.sh
index abc9155d..eeed37ef 100755
--- a/install/debian/11/templates/web/nginx/private-hosting.sh
+++ b/install/debian/11/templates/web/nginx/private-hosting.sh
@@ -1,11 +1,11 @@
-#!/bin/bash
-# Changing public_html permission
-user="$1"
-domain="$2"
-ip="$3"
-home_dir="$4"
-docroot="$5"
-
-chmod 755 $docroot
-
-exit 0
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/12/templates/web/nginx/private-hosting.sh b/install/debian/12/templates/web/nginx/private-hosting.sh
index abc9155d..eeed37ef 100755
--- a/install/debian/12/templates/web/nginx/private-hosting.sh
+++ b/install/debian/12/templates/web/nginx/private-hosting.sh
@@ -1,11 +1,11 @@
-#!/bin/bash
-# Changing public_html permission
-user="$1"
-domain="$2"
-ip="$3"
-home_dir="$4"
-docroot="$5"
-
-chmod 755 $docroot
-
-exit 0
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/src/deb/ioncube/copyright b/src/deb/ioncube/copyright
index bd92bd81..c62257d2 100644
--- a/src/deb/ioncube/copyright
+++ b/src/deb/ioncube/copyright
@@ -1,243 +1,243 @@
-LICENCE AGREEMENT FOR THE IONCUBE PHP LOADER, PROVIDED TO ENABLE THE USE
-OF IONCUBE ENCODED FILES AND AS PART OF THE IONCUBE24 SERVICE (ioncube24.com)
-
-YOU SHOULD CAREFULLY READ THE FOLLOWING TERMS AND CONDITIONS BEFORE USING THE
-LOADER SOFTWARE. THE INSTALLATION AND/OR USE OR COPYING OF THE IONCUBE PHP
-LOADER SOFTWARE INDICATES YOUR ACCEPTANCE OF THIS LICENCE AGREEMENT.  IF YOU
-DO NOT ACCEPT THE TERMS OF THIS LICENCE AGREEMENT, DO NOT INSTALL, COPY
-AND/OR USE THE LOADER SOFTWARE.
-
-DEFINITIONS
-
-The following definitions shall apply in this document:
-
-LOADER shall mean the ionCube PHP Loader software package or collection 
-of Loaders, including any modifications or upgrades to the software, used for
-executing PHP scripts previously encoded with the ionCube PHP Encoder
-software to render them non-humanly readable, and any associated
-documentation or electronic or online materials relating to the software.
-
-ENCODER shall mean any ionCube PHP Encoder software or service used for the
-purpose of producing non-humanly readable encoded files from PHP scripts.
-
-ENCODED FILE shall mean a non-humanly readable file produced by the 
-Encoder and being derived from humanly readable PHP script source.
-
-PROVIDER shall mean ionCube Ltd.
-
-USER/YOU shall mean any entity who has downloaded or obtained through any
-other means a version of the Loader software.
-
-
-1 LICENSE ENTITLEMENT 
-
-1.1 The Loader is provided without charge.  Title to the Loader does not pass
-to the user in any circumstances.  The Loader is supplied as object code.
-
-1.2 The provider grants a personal, non-transferable, non-exclusive licence to
-use the Loader in accordance with the terms and conditions of this Licence
-Agreement.
-
-1.3 The installation or downloading and use of the Loader entitles the user
-to install and use the Loader for its own internal lawful purposes.
-
-
-2 DISTRIBUTION 
-
-2.1 The Loader may be freely distributed to third parties alone or as 
-part of a distribution containing other items provided that this license
-is also included. 
-
-2.2 The Loader may under no circumstances be branded as another product, 
-whether distributed or not. 
-
-2.3 Distribution as part of a commercial product is permitted provided such
-distribution is in accordance with clauses 2.1 and 2.2 with respect to the 
-Loader.
-
-
-3 ANALYSIS / REVERSE ENGINEERING / MODIFICATION 
-
-Except insofar as the user is permitted to do so in accordance with applicable
-law:
-
-3.1 Any analysis of the Loader and embedded data by any means and by
-any entity whether human or otherwise and including but without limitation to
-discover details of internal operation, to reverse engineer, to de-compile
-object code, or to modify for the purposes of modifying behaviour is
-forbidden.
-
-3.2 Any analysis of encoded files by any means and by any entity whether human
-or otherwise and including but without limitation to discover details of file
-format or for the purposes of modifying behaviour or scope of their usage is
-forbidden.
-
-
-4 WARRANTY
-
-THE LOADER SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESSED OR IMPLIED 
-WARRANTIES INCLUDING BUT WITHOUT LIMITATION THE IMPLIED WARRANTIES
-OF MERCHANTABILITY AND FITNESS FOR ANY PARTICULAR PURPOSE ARE
-DISCLAIMED. THE PROVIDER DOES NOT WARRANT THAT THE LOADER IS UNINTERRUPTED
-OR ERROR FREE, NOR THAT THE OPERATION OF THE LOADER WILL FUNCTION IN
-CONJUNCTION WITH ANY OTHER PRODUCT.  
-
-
-5 LIMITATION OF LIABILITY 
-
-5.1 IN NO EVENT WILL THE PROVIDER OF THE LOADER BE LIABLE TO THE USER OR ANY
-PARTY FOR ANY DIRECT, INDIRECT, PUNITIVE, SPECIAL, INCIDENTAL OR OTHER
-CONSEQUENTIAL DAMAGES ARISING DIRECTLY OR INDIRECTLY FROM THIS LICENCE
-AGREEMENT OR ANY USE OF THE LOADER OR ENCODED FILES, EVEN IF THE PROVIDER IS
-EXPRESSLY ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
-
-5.2 THE LOADER IS PROVIDED ON AN "AS IS" BASIS.  THE PROVIDER EXCLUDES ALL
-WARRANTIES, CONDITIONS, TERMS, UNDERTAKINGS AND REPRESENTATIONS (EXCLUDING
-FRAUDULENT MISREPRESENTATION) OF ANY KIND, EXPRESS OR IMPLIED, STATUTORY OR
-OTHERWISE IN CONNECTION WITH THE LOADER TO THE FULLEST EXTENT PERMITTED BY
-LAW.
-
-5.3 DOWNLOADING THE LOADER IS AT YOUR OWN RISK AND THE PROVIDER DOES NOT
-ACCEPT LIABILITY FOR ANY DIRECT OR INDIRECT LOSS OR DAMAGE HOWSOEVER CAUSED AS
-A RESULT OF ANY COMPUTER VIRUSES, BUGS, TROJAN HORSES, WORMS, SOFTWARE BOMBS
-OR OTHER SIMILAR PROGRAMS ARISING FROM YOUR USE OF THE LOADER.  WHILST THE
-PROVIDER WILL DO ITS BEST TO ENSURE THAT THE LOADER IS FREE FROM SUCH
-DESTRUCTIVE PROGRAMS, IT IS YOUR RESPONSIBILITY TO TAKE REASONABLE PRECAUTIONS
-TO SCAN FOR SUCH DESTRUCTIVE PROGRAMS DOWNLOADED FROM THE INTERNET.
-
-5.4 THE PROVIDER'S MAXIMUM LIABILITY FOR ANY LOSS OR DAMAGE ARISING FROM THIS
-LICENCE AGREEMENT SHALL IN ANY EVENT BE LIMITED IN THE SOLE DISCRETION OF THE
-PROVIDER TO THE REPLACEMENT OF THE LOADER PRODUCT.
-
-5.5 DUE TO THE NATURE OF THE INTERNET, THE PROVIDER CANNOT GUARANTEE THAT ANY
-E-MAILS OR OTHER ELECTRONIC TRANSMISSIONS WILL BE SENT TO YOU OR RECEIVED BY
-THE PROVIDER OR THAT THE CONTENT OF SUCH TRANSMISSIONS WILL BE SECURE DURING
-TRANSMISSION.
-
-
-6 BUG FIXING AND PRODUCT SUPPORT 
-
-6.1 The provider will use reasonable endeavours to provide support to users.
-The provider will at their discretion only provide support for the latest
-release.
-
-6.2 Support comprises of fault reporting via tickets and fault diagnosis,
-recommendations on workarounds, and where reasonably possible a timely
-resolution.
-
-6.3 The user accepts that on occasion the ability of the provider to meet
-anticipated or published support schedules may be impaired due to, but without
-limitation, Internet service provider failures or software failures that
-affect the ability to communicate for an indeterminate period.
-
-6.4 The provider reserves the right to refuse to provide support at any time.
-
-6.5 The provider wishes to maintain and offer a product of the highest
-possible quality, and accordingly may from time to time and at its discretion
-make product changes for the purpose of correcting behaviour in variance to
-the published specification or the user's reasonable expectations. 
-
-6.6 The provider reserves the right to charge for support where the user does
-not have a valid support plan in place, or where the support offered exceeds
-the scope of the active support plan.
-
-
-7 PRODUCT UPGRADES
-
-7.1 The provider may from time to time release product upgrades. These will
-be provided free of charge and attempts made to provide a timely notification
-to customers of the existence of any new release.
-
-
-8 ERRORS AND OMISSIONS
-
-Whilst reasonable endeavours are made to ensure the accuracy of documentation
-concerning the details of the Loader, the user accepts the possibility of
-inaccuracies in information presented in any format, including email
-communications and online services. The provider shall under no circumstances
-be liable for any events that arise as a result of unintentional inaccuracies
-or omissions.
-
-
-9 USER INDEMNITY
-
-You agree to fully indemnify, defend and hold the provider harmless
-immediately upon demand from and against all actions, liability, claims,
-losses, damages, costs and expenses (including legal/attorney fees) incurred
-by the provider arising directly or indirectly as a result of your breach of
-this Licence Agreement.
-
-
-10 INTELLECTUAL PROPERTY RIGHTS
-
-10.1 The user acknowledges that the Loader and associated documentation and
-materials contain proprietary information of the provider and are and shall
-remain the exclusive property of the provider and/or its licensors and all
-title, copyright, trade marks, trade names, patents and other intellectual
-property rights therein of whatever nature shall remain the sole property of
-the provider and/or its licensors.
-
-10.2 No title to or rights of ownership, copyright or other intellectual
-property in the Loader is transferred to the user (other than the licence
-rights expressly granted in this Licence Agreement).
-
-
-11 TERMINATION
-
-11.1 The provider reserves the right to terminate this Licence Agreement
-immediately by notice in writing against the user if the user is in breach of
-any terms and conditions of this Licence Agreement.
-
-11.2 Termination of this Licence Agreement for any reason shall be without
-prejudice to any other rights or remedies of the provider which may have
-arisen on or before the date of termination under this Licence Agreement or in
-law.
-
-11.3 The provisions of the following clauses shall survive any termination of
-this agreement; clause 3, 5, 10 and 13.
-
-
-12 GENERAL
-
-12.1 The provider reserves the right to transfer or assign all or any of its
-rights and duties and responsibilities set out in this Licence Agreement to
-another party.
-
-12.2 Headings have been included for convenience only and will not be used in
-construing any provision of this Licence Agreement.
-
-12.3 No delay or failure by the provider to exercise any powers, rights or
-remedies under this Licence Agreement will operate as a waiver of them nor
-will any single or partial exercise of any such powers, rights or remedies
-include any other or further exercise of them.
-
-12.4 If any part of this Licence Agreement is found by a court of competent
-jurisdiction or other competent authority to be invalid, unlawful or
-unenforceable then such part shall be severed from the remainder of this
-Licence Agreement which will continue to be valid and enforceable to the
-fullest extent permitted by applicable law.
-
-12.5 This Licence Agreement including the documents or other sources referred
-to herein supersede all prior representations, understandings and agreements
-between the user and the provider relating to the Loader and sets forth the
-entire agreement and understanding between the user and the provider relating
-to the Loader.
-
-12.6 Nothing in this Licence Agreement shall be deemed to constitute a
-partnership between you and the provider nor constitute either party being an
-agent of the other party.
-
-12.7 This Agreement does not create any rights or benefits enforceable by any
-person not a party to it (within the meaning of the U.K.Contracts (Rights of
-Third Parties) Act 1999) except that a person who under clause 12.1 is a
-permitted successor or assignee of the rights or benefits of the provider may
-enforce such rights or benefits.
-
-
-13 GOVERNING LAW AND JURISDICTION
-
-This License Agreement and any issues relating thereto shall be construed and
-interpreted in accordance with the laws of England and subject to the
-exclusive jurisdiction of the English courts.
-
-Copyright (c) 2002-2017 ionCube Ltd.          Last revised 23-April-2015
+LICENCE AGREEMENT FOR THE IONCUBE PHP LOADER, PROVIDED TO ENABLE THE USE
+OF IONCUBE ENCODED FILES AND AS PART OF THE IONCUBE24 SERVICE (ioncube24.com)
+
+YOU SHOULD CAREFULLY READ THE FOLLOWING TERMS AND CONDITIONS BEFORE USING THE
+LOADER SOFTWARE. THE INSTALLATION AND/OR USE OR COPYING OF THE IONCUBE PHP
+LOADER SOFTWARE INDICATES YOUR ACCEPTANCE OF THIS LICENCE AGREEMENT.  IF YOU
+DO NOT ACCEPT THE TERMS OF THIS LICENCE AGREEMENT, DO NOT INSTALL, COPY
+AND/OR USE THE LOADER SOFTWARE.
+
+DEFINITIONS
+
+The following definitions shall apply in this document:
+
+LOADER shall mean the ionCube PHP Loader software package or collection 
+of Loaders, including any modifications or upgrades to the software, used for
+executing PHP scripts previously encoded with the ionCube PHP Encoder
+software to render them non-humanly readable, and any associated
+documentation or electronic or online materials relating to the software.
+
+ENCODER shall mean any ionCube PHP Encoder software or service used for the
+purpose of producing non-humanly readable encoded files from PHP scripts.
+
+ENCODED FILE shall mean a non-humanly readable file produced by the 
+Encoder and being derived from humanly readable PHP script source.
+
+PROVIDER shall mean ionCube Ltd.
+
+USER/YOU shall mean any entity who has downloaded or obtained through any
+other means a version of the Loader software.
+
+
+1 LICENSE ENTITLEMENT 
+
+1.1 The Loader is provided without charge.  Title to the Loader does not pass
+to the user in any circumstances.  The Loader is supplied as object code.
+
+1.2 The provider grants a personal, non-transferable, non-exclusive licence to
+use the Loader in accordance with the terms and conditions of this Licence
+Agreement.
+
+1.3 The installation or downloading and use of the Loader entitles the user
+to install and use the Loader for its own internal lawful purposes.
+
+
+2 DISTRIBUTION 
+
+2.1 The Loader may be freely distributed to third parties alone or as 
+part of a distribution containing other items provided that this license
+is also included. 
+
+2.2 The Loader may under no circumstances be branded as another product, 
+whether distributed or not. 
+
+2.3 Distribution as part of a commercial product is permitted provided such
+distribution is in accordance with clauses 2.1 and 2.2 with respect to the 
+Loader.
+
+
+3 ANALYSIS / REVERSE ENGINEERING / MODIFICATION 
+
+Except insofar as the user is permitted to do so in accordance with applicable
+law:
+
+3.1 Any analysis of the Loader and embedded data by any means and by
+any entity whether human or otherwise and including but without limitation to
+discover details of internal operation, to reverse engineer, to de-compile
+object code, or to modify for the purposes of modifying behaviour is
+forbidden.
+
+3.2 Any analysis of encoded files by any means and by any entity whether human
+or otherwise and including but without limitation to discover details of file
+format or for the purposes of modifying behaviour or scope of their usage is
+forbidden.
+
+
+4 WARRANTY
+
+THE LOADER SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESSED OR IMPLIED 
+WARRANTIES INCLUDING BUT WITHOUT LIMITATION THE IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS FOR ANY PARTICULAR PURPOSE ARE
+DISCLAIMED. THE PROVIDER DOES NOT WARRANT THAT THE LOADER IS UNINTERRUPTED
+OR ERROR FREE, NOR THAT THE OPERATION OF THE LOADER WILL FUNCTION IN
+CONJUNCTION WITH ANY OTHER PRODUCT.  
+
+
+5 LIMITATION OF LIABILITY 
+
+5.1 IN NO EVENT WILL THE PROVIDER OF THE LOADER BE LIABLE TO THE USER OR ANY
+PARTY FOR ANY DIRECT, INDIRECT, PUNITIVE, SPECIAL, INCIDENTAL OR OTHER
+CONSEQUENTIAL DAMAGES ARISING DIRECTLY OR INDIRECTLY FROM THIS LICENCE
+AGREEMENT OR ANY USE OF THE LOADER OR ENCODED FILES, EVEN IF THE PROVIDER IS
+EXPRESSLY ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+5.2 THE LOADER IS PROVIDED ON AN "AS IS" BASIS.  THE PROVIDER EXCLUDES ALL
+WARRANTIES, CONDITIONS, TERMS, UNDERTAKINGS AND REPRESENTATIONS (EXCLUDING
+FRAUDULENT MISREPRESENTATION) OF ANY KIND, EXPRESS OR IMPLIED, STATUTORY OR
+OTHERWISE IN CONNECTION WITH THE LOADER TO THE FULLEST EXTENT PERMITTED BY
+LAW.
+
+5.3 DOWNLOADING THE LOADER IS AT YOUR OWN RISK AND THE PROVIDER DOES NOT
+ACCEPT LIABILITY FOR ANY DIRECT OR INDIRECT LOSS OR DAMAGE HOWSOEVER CAUSED AS
+A RESULT OF ANY COMPUTER VIRUSES, BUGS, TROJAN HORSES, WORMS, SOFTWARE BOMBS
+OR OTHER SIMILAR PROGRAMS ARISING FROM YOUR USE OF THE LOADER.  WHILST THE
+PROVIDER WILL DO ITS BEST TO ENSURE THAT THE LOADER IS FREE FROM SUCH
+DESTRUCTIVE PROGRAMS, IT IS YOUR RESPONSIBILITY TO TAKE REASONABLE PRECAUTIONS
+TO SCAN FOR SUCH DESTRUCTIVE PROGRAMS DOWNLOADED FROM THE INTERNET.
+
+5.4 THE PROVIDER'S MAXIMUM LIABILITY FOR ANY LOSS OR DAMAGE ARISING FROM THIS
+LICENCE AGREEMENT SHALL IN ANY EVENT BE LIMITED IN THE SOLE DISCRETION OF THE
+PROVIDER TO THE REPLACEMENT OF THE LOADER PRODUCT.
+
+5.5 DUE TO THE NATURE OF THE INTERNET, THE PROVIDER CANNOT GUARANTEE THAT ANY
+E-MAILS OR OTHER ELECTRONIC TRANSMISSIONS WILL BE SENT TO YOU OR RECEIVED BY
+THE PROVIDER OR THAT THE CONTENT OF SUCH TRANSMISSIONS WILL BE SECURE DURING
+TRANSMISSION.
+
+
+6 BUG FIXING AND PRODUCT SUPPORT 
+
+6.1 The provider will use reasonable endeavours to provide support to users.
+The provider will at their discretion only provide support for the latest
+release.
+
+6.2 Support comprises of fault reporting via tickets and fault diagnosis,
+recommendations on workarounds, and where reasonably possible a timely
+resolution.
+
+6.3 The user accepts that on occasion the ability of the provider to meet
+anticipated or published support schedules may be impaired due to, but without
+limitation, Internet service provider failures or software failures that
+affect the ability to communicate for an indeterminate period.
+
+6.4 The provider reserves the right to refuse to provide support at any time.
+
+6.5 The provider wishes to maintain and offer a product of the highest
+possible quality, and accordingly may from time to time and at its discretion
+make product changes for the purpose of correcting behaviour in variance to
+the published specification or the user's reasonable expectations. 
+
+6.6 The provider reserves the right to charge for support where the user does
+not have a valid support plan in place, or where the support offered exceeds
+the scope of the active support plan.
+
+
+7 PRODUCT UPGRADES
+
+7.1 The provider may from time to time release product upgrades. These will
+be provided free of charge and attempts made to provide a timely notification
+to customers of the existence of any new release.
+
+
+8 ERRORS AND OMISSIONS
+
+Whilst reasonable endeavours are made to ensure the accuracy of documentation
+concerning the details of the Loader, the user accepts the possibility of
+inaccuracies in information presented in any format, including email
+communications and online services. The provider shall under no circumstances
+be liable for any events that arise as a result of unintentional inaccuracies
+or omissions.
+
+
+9 USER INDEMNITY
+
+You agree to fully indemnify, defend and hold the provider harmless
+immediately upon demand from and against all actions, liability, claims,
+losses, damages, costs and expenses (including legal/attorney fees) incurred
+by the provider arising directly or indirectly as a result of your breach of
+this Licence Agreement.
+
+
+10 INTELLECTUAL PROPERTY RIGHTS
+
+10.1 The user acknowledges that the Loader and associated documentation and
+materials contain proprietary information of the provider and are and shall
+remain the exclusive property of the provider and/or its licensors and all
+title, copyright, trade marks, trade names, patents and other intellectual
+property rights therein of whatever nature shall remain the sole property of
+the provider and/or its licensors.
+
+10.2 No title to or rights of ownership, copyright or other intellectual
+property in the Loader is transferred to the user (other than the licence
+rights expressly granted in this Licence Agreement).
+
+
+11 TERMINATION
+
+11.1 The provider reserves the right to terminate this Licence Agreement
+immediately by notice in writing against the user if the user is in breach of
+any terms and conditions of this Licence Agreement.
+
+11.2 Termination of this Licence Agreement for any reason shall be without
+prejudice to any other rights or remedies of the provider which may have
+arisen on or before the date of termination under this Licence Agreement or in
+law.
+
+11.3 The provisions of the following clauses shall survive any termination of
+this agreement; clause 3, 5, 10 and 13.
+
+
+12 GENERAL
+
+12.1 The provider reserves the right to transfer or assign all or any of its
+rights and duties and responsibilities set out in this Licence Agreement to
+another party.
+
+12.2 Headings have been included for convenience only and will not be used in
+construing any provision of this Licence Agreement.
+
+12.3 No delay or failure by the provider to exercise any powers, rights or
+remedies under this Licence Agreement will operate as a waiver of them nor
+will any single or partial exercise of any such powers, rights or remedies
+include any other or further exercise of them.
+
+12.4 If any part of this Licence Agreement is found by a court of competent
+jurisdiction or other competent authority to be invalid, unlawful or
+unenforceable then such part shall be severed from the remainder of this
+Licence Agreement which will continue to be valid and enforceable to the
+fullest extent permitted by applicable law.
+
+12.5 This Licence Agreement including the documents or other sources referred
+to herein supersede all prior representations, understandings and agreements
+between the user and the provider relating to the Loader and sets forth the
+entire agreement and understanding between the user and the provider relating
+to the Loader.
+
+12.6 Nothing in this Licence Agreement shall be deemed to constitute a
+partnership between you and the provider nor constitute either party being an
+agent of the other party.
+
+12.7 This Agreement does not create any rights or benefits enforceable by any
+person not a party to it (within the meaning of the U.K.Contracts (Rights of
+Third Parties) Act 1999) except that a person who under clause 12.1 is a
+permitted successor or assignee of the rights or benefits of the provider may
+enforce such rights or benefits.
+
+
+13 GOVERNING LAW AND JURISDICTION
+
+This License Agreement and any issues relating thereto shall be construed and
+interpreted in accordance with the laws of England and subject to the
+exclusive jurisdiction of the English courts.
+
+Copyright (c) 2002-2017 ionCube Ltd.          Last revised 23-April-2015
diff --git a/web/list/firewall/banlist/ip_info.php b/web/list/firewall/banlist/ip_info.php
index cf7607bf..e7888a75 100644
--- a/web/list/firewall/banlist/ip_info.php
+++ b/web/list/firewall/banlist/ip_info.php
@@ -1,164 +1,164 @@
-<?
-error_reporting(NULL);
-session_start();
-
-include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
-
-if (!function_exists('str_contains')) {
-    function str_contains($haystack, $needle)
-    {
-        return $needle !== '' && mb_strpos($haystack, $needle) !== false;
-    }
-}
-
-// cidrMatch() based on https://stackoverflow.com/a/14535823
-function cidrMatch($ip, $range)
-{
-    if (!filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) return false;
-    list($subnet, $bits) = explode('/', $range);
-    $ip = substr(ipToBinary($ip), 0, $bits);
-    $subnet = substr(ipToBinary($subnet), 0, $bits);
-    return ($ip == $subnet);
-}
-
-// ipToBinary based on https://stackoverflow.com/a/14535823
-function ipToBinary($ip)
-{
-    $ipbin = '';
-    $ips = explode(".", $ip);
-    foreach ($ips as $iptmp) {
-        $ipbin .= sprintf("%08b", $iptmp);
-    }
-    return $ipbin;
-}
-
-function fetchURL($url, &$info = [])
-{
-    $curl_handle = curl_init();
-    curl_setopt($curl_handle, CURLOPT_FOLLOWLOCATION, true);
-    curl_setopt($curl_handle, CURLOPT_ENCODING, 'gzip, deflate');
-    curl_setopt($curl_handle, CURLOPT_URL, $url);
-    curl_setopt($curl_handle, CURLOPT_CONNECTTIMEOUT, 10);
-    curl_setopt($curl_handle, CURLOPT_RETURNTRANSFER, 1);
-    $data = curl_exec($curl_handle);
-    $info = curl_getinfo($curl_handle);
-    curl_close($curl_handle);
-    return $data;
-}
-
-function parseCacheEntries($strEntries)
-{
-    $parsed = [];
-    $entries = explode("\n", $strEntries);
-    if ($entries) {
-        foreach ($entries as $entry) {
-            list($entry,) = explode("#", $entry);
-            list($entry,) = explode(";", $entry);
-            $entry = trim($entry);
-            if (!empty($entry)) $parsed[] = $entry;
-        }
-    }
-    return $parsed;
-}
-
-function checkIP($ip)
-{
-    $check_results = [];
-    $lists = [
-        'BDEALL' => 'http://lists.blocklist.de/lists/all.txt',
-        'BFB' => 'http://danger.rulez.sk/projects/bruteforceblocker/blist.php',
-        'CIARMY' => 'http://www.ciarmy.com/list/ci-badguys.txt',
-        'GREENSNOW' => 'https://blocklist.greensnow.co/greensnow.txt',
-        'SPAMDROP' => 'https://www.spamhaus.org/drop/drop.txt',
-        'SPAMEDROP' => 'https://www.spamhaus.org/drop/edrop.txt',
-        'TOR' => 'https://check.torproject.org/cgi-bin/TorBulkExitList.py',
-    ];
-    $today = date('Y-m-d');
-
-    foreach ($lists as $code => $url) {
-        $cache_tag = 'ip-blacklist-' . $code . '-cache';
-
-        // init cache
-        if (!isset($_SESSION[$cache_tag])) $_SESSION[$cache_tag] = ['updated' => '', 'items' => [], 'http_code' => ''];
-
-        // invalidate cache if clear_cache parameter is 1
-        if (!empty($_REQUEST['clear_cache']) && $_REQUEST['clear_cache'] == 1) $_SESSION[$cache_tag]['updated'] = '2000-01-01';
-
-        // if cache is not updated, fetch new data and save to cache
-        if (strtotime($today) > strtotime($_SESSION[$cache_tag]['updated'])) {
-            $new_cache_data = fetchURL($url, $url_result);
-            if ($url_result['http_code'] == '200') $new_cache_items = parseCacheEntries($new_cache_data);
-            $_SESSION[$cache_tag] = ['updated' => $today, 'items' => $new_cache_items, 'http_code' => $url_result['http_code']];
-        }
-
-        // check ip 
-        $matched_ips = array_filter($_SESSION[$cache_tag]['items'], function ($item) use ($ip) {
-            if (str_contains($item, '/')) return cidrMatch($ip, $item);
-            if ($ip == $item) return true;
-            return false;
-        });
-
-        $check_results[$code]['found'] = count($matched_ips) > 0 ? true : false;
-        $check_results[$code]['updated'] = $_SESSION[$cache_tag]['updated'];
-        $check_results[$code]['http_code'] = $_SESSION[$cache_tag]['http_code'];
-    }
-
-    return $check_results;
-}
-
-// Check token
-if ((!isset($_REQUEST['token'])) || ($_SESSION['token'] != $_REQUEST['token'])) {
-    die("Wrong token");
-}
-
-$ip = $_REQUEST['ip'];
-
-// Validate IP format
-if (filter_var($ip, FILTER_VALIDATE_IP) === false) {
-    die('<strong>GENERAL ERROR</strong><br>BAD_IP_FORMAT');
-}
-
-// Query host
-$host = gethostbyaddr($ip);
-
-// Query blocklists
-$result_blocklists = '';
-$ip_check = checkIP($ip);
-if ($ip_check) {
-    foreach ($ip_check as $list_code => $list_results) {
-        $result_blocklists .= '<div title="'.$list_results['updated'].' / '.$list_results['http_code'].'">';
-        $result_blocklists .= $list_results['found'] ? '<i class="fas fa-fw fa-exclamation-triangle"></i>' : '<i class="fas fa-fw fa-check-circle"></i>';
-        $result_blocklists .= '&nbsp;<span>'.$list_code.'</span>&nbsp;';
-        $result_blocklists .= $list_results['http_code'] == '200' ? '' : '<i class="fas fa-fw fa-exclamation-circle"></i>';
-        $result_blocklists .= '</div>';
-    }
-}
-
-// Query location
-$url = 'https://api.db-ip.com/v2/free/'.$ip;
-$result = fetchURL($url);
-$result_array = json_decode($result, true);
-if (!is_array($result_array)) {
-    die('<strong>GENERAL ERROR</strong><br>BAD_JSON');
-}
-if (!empty($result_array['errorCode'])) {
-    die('<strong>GENERAL ERROR</strong><br>'.$result_array['errorCode']);
-}
-
-// Output
-echo "
-<dl>
-    <dt>".__('Host')."</dt>
-    <dd>".$host."</dd>
-    <dt>".__('Banlist')."</dt>
-    <dd>".$result_blocklists."</dd>
-    <dt>".__('Continent')."</dt>
-    <dd>".$result_array['continentName']." [".$result_array['continentCode']."]</dd>
-    <dt>".__('Country')."</dt>
-    <dd>".$result_array['countryName']." [".$result_array['countryCode']."]</dd>
-    <dt>".__('State / Province')."</dt>
-    <dd>".$result_array['stateProv']." [".$result_array['stateProvCode']."]</dd>
-    <dt>".__('City / Locality')."</dt>
-    <dd>".$result_array['city']."</dd>
-</dl>
-";
+<?
+error_reporting(NULL);
+session_start();
+
+include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
+
+if (!function_exists('str_contains')) {
+    function str_contains($haystack, $needle)
+    {
+        return $needle !== '' && mb_strpos($haystack, $needle) !== false;
+    }
+}
+
+// cidrMatch() based on https://stackoverflow.com/a/14535823
+function cidrMatch($ip, $range)
+{
+    if (!filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) return false;
+    list($subnet, $bits) = explode('/', $range);
+    $ip = substr(ipToBinary($ip), 0, $bits);
+    $subnet = substr(ipToBinary($subnet), 0, $bits);
+    return ($ip == $subnet);
+}
+
+// ipToBinary based on https://stackoverflow.com/a/14535823
+function ipToBinary($ip)
+{
+    $ipbin = '';
+    $ips = explode(".", $ip);
+    foreach ($ips as $iptmp) {
+        $ipbin .= sprintf("%08b", $iptmp);
+    }
+    return $ipbin;
+}
+
+function fetchURL($url, &$info = [])
+{
+    $curl_handle = curl_init();
+    curl_setopt($curl_handle, CURLOPT_FOLLOWLOCATION, true);
+    curl_setopt($curl_handle, CURLOPT_ENCODING, 'gzip, deflate');
+    curl_setopt($curl_handle, CURLOPT_URL, $url);
+    curl_setopt($curl_handle, CURLOPT_CONNECTTIMEOUT, 10);
+    curl_setopt($curl_handle, CURLOPT_RETURNTRANSFER, 1);
+    $data = curl_exec($curl_handle);
+    $info = curl_getinfo($curl_handle);
+    curl_close($curl_handle);
+    return $data;
+}
+
+function parseCacheEntries($strEntries)
+{
+    $parsed = [];
+    $entries = explode("\n", $strEntries);
+    if ($entries) {
+        foreach ($entries as $entry) {
+            list($entry,) = explode("#", $entry);
+            list($entry,) = explode(";", $entry);
+            $entry = trim($entry);
+            if (!empty($entry)) $parsed[] = $entry;
+        }
+    }
+    return $parsed;
+}
+
+function checkIP($ip)
+{
+    $check_results = [];
+    $lists = [
+        'BDEALL' => 'http://lists.blocklist.de/lists/all.txt',
+        'BFB' => 'http://danger.rulez.sk/projects/bruteforceblocker/blist.php',
+        'CIARMY' => 'http://www.ciarmy.com/list/ci-badguys.txt',
+        'GREENSNOW' => 'https://blocklist.greensnow.co/greensnow.txt',
+        'SPAMDROP' => 'https://www.spamhaus.org/drop/drop.txt',
+        'SPAMEDROP' => 'https://www.spamhaus.org/drop/edrop.txt',
+        'TOR' => 'https://check.torproject.org/cgi-bin/TorBulkExitList.py',
+    ];
+    $today = date('Y-m-d');
+
+    foreach ($lists as $code => $url) {
+        $cache_tag = 'ip-blacklist-' . $code . '-cache';
+
+        // init cache
+        if (!isset($_SESSION[$cache_tag])) $_SESSION[$cache_tag] = ['updated' => '', 'items' => [], 'http_code' => ''];
+
+        // invalidate cache if clear_cache parameter is 1
+        if (!empty($_REQUEST['clear_cache']) && $_REQUEST['clear_cache'] == 1) $_SESSION[$cache_tag]['updated'] = '2000-01-01';
+
+        // if cache is not updated, fetch new data and save to cache
+        if (strtotime($today) > strtotime($_SESSION[$cache_tag]['updated'])) {
+            $new_cache_data = fetchURL($url, $url_result);
+            if ($url_result['http_code'] == '200') $new_cache_items = parseCacheEntries($new_cache_data);
+            $_SESSION[$cache_tag] = ['updated' => $today, 'items' => $new_cache_items, 'http_code' => $url_result['http_code']];
+        }
+
+        // check ip 
+        $matched_ips = array_filter($_SESSION[$cache_tag]['items'], function ($item) use ($ip) {
+            if (str_contains($item, '/')) return cidrMatch($ip, $item);
+            if ($ip == $item) return true;
+            return false;
+        });
+
+        $check_results[$code]['found'] = count($matched_ips) > 0 ? true : false;
+        $check_results[$code]['updated'] = $_SESSION[$cache_tag]['updated'];
+        $check_results[$code]['http_code'] = $_SESSION[$cache_tag]['http_code'];
+    }
+
+    return $check_results;
+}
+
+// Check token
+if ((!isset($_REQUEST['token'])) || ($_SESSION['token'] != $_REQUEST['token'])) {
+    die("Wrong token");
+}
+
+$ip = $_REQUEST['ip'];
+
+// Validate IP format
+if (filter_var($ip, FILTER_VALIDATE_IP) === false) {
+    die('<strong>GENERAL ERROR</strong><br>BAD_IP_FORMAT');
+}
+
+// Query host
+$host = gethostbyaddr($ip);
+
+// Query blocklists
+$result_blocklists = '';
+$ip_check = checkIP($ip);
+if ($ip_check) {
+    foreach ($ip_check as $list_code => $list_results) {
+        $result_blocklists .= '<div title="'.$list_results['updated'].' / '.$list_results['http_code'].'">';
+        $result_blocklists .= $list_results['found'] ? '<i class="fas fa-fw fa-exclamation-triangle"></i>' : '<i class="fas fa-fw fa-check-circle"></i>';
+        $result_blocklists .= '&nbsp;<span>'.$list_code.'</span>&nbsp;';
+        $result_blocklists .= $list_results['http_code'] == '200' ? '' : '<i class="fas fa-fw fa-exclamation-circle"></i>';
+        $result_blocklists .= '</div>';
+    }
+}
+
+// Query location
+$url = 'https://api.db-ip.com/v2/free/'.$ip;
+$result = fetchURL($url);
+$result_array = json_decode($result, true);
+if (!is_array($result_array)) {
+    die('<strong>GENERAL ERROR</strong><br>BAD_JSON');
+}
+if (!empty($result_array['errorCode'])) {
+    die('<strong>GENERAL ERROR</strong><br>'.$result_array['errorCode']);
+}
+
+// Output
+echo "
+<dl>
+    <dt>".__('Host')."</dt>
+    <dd>".$host."</dd>
+    <dt>".__('Banlist')."</dt>
+    <dd>".$result_blocklists."</dd>
+    <dt>".__('Continent')."</dt>
+    <dd>".$result_array['continentName']." [".$result_array['continentCode']."]</dd>
+    <dt>".__('Country')."</dt>
+    <dd>".$result_array['countryName']." [".$result_array['countryCode']."]</dd>
+    <dt>".__('State / Province')."</dt>
+    <dd>".$result_array['stateProv']." [".$result_array['stateProvCode']."]</dd>
+    <dt>".__('City / Locality')."</dt>
+    <dd>".$result_array['city']."</dd>
+</dl>
+";

From 72252c561e8447b55d107a9d7be73baeb410363d Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 1 Jun 2025 20:25:23 +0200
Subject: [PATCH 2197/2300] Small bug fix in main.php

---
 func/main.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/func/main.php b/func/main.php
index 22834d42..4628c92a 100644
--- a/func/main.php
+++ b/func/main.php
@@ -53,6 +53,7 @@ function myvesta_check_args ($requried_arguments, $arguments) {
     $argument_counter=count($argv);
     $argument_counter--;
     $argv[0]=str_replace('/usr/local/vesta/bin/', '', $argv[0]);
+    $command=$argv[0];
     // myvesta_echo ( "-------------------- ".$argv[0]." --------------------\n");
     if ($argument_counter<$requried_arguments) {
         $arguments=str_replace(" ", "' '", $arguments);

From a3895aea0dd63526630cc44adbe5ed6234e3ba8d Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 2 Jun 2025 14:58:54 +0200
Subject: [PATCH 2198/2300] v-clear-fail2ban

---
 bin/v-clean-garbage  |  7 ++++++
 bin/v-clear-fail2ban | 59 ++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 66 insertions(+)
 create mode 100644 bin/v-clear-fail2ban

diff --git a/bin/v-clean-garbage b/bin/v-clean-garbage
index 36b50830..11e29122 100644
--- a/bin/v-clean-garbage
+++ b/bin/v-clean-garbage
@@ -90,6 +90,13 @@ if [ $fail2ban_running -eq 1 ]; then
 fi
 if [ -f "/var/lib/fail2ban/fail2ban.sqlite3" ]; then
     rm /var/lib/fail2ban/fail2ban.sqlite3
+    if [ -f "/etc/nginx/conf.d/block.conf" ]; then
+        truncate -s 0 /etc/nginx/conf.d/block.conf
+        nginx_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'nginx' | grep -c 'running')
+        if [ $nginx_running -eq 1 ]; then
+            systemctl restart nginx
+        fi
+    fi
 fi
 if [ $fail2ban_running -eq 1 ]; then
     systemctl start fail2ban
diff --git a/bin/v-clear-fail2ban b/bin/v-clear-fail2ban
new file mode 100644
index 00000000..ab3ab30c
--- /dev/null
+++ b/bin/v-clear-fail2ban
@@ -0,0 +1,59 @@
+#!/bin/bash
+# info: Clean fail2ban database
+# options: NONE
+#
+# The function is cleaning fail2ban database
+
+#----------------------------------------------------------#
+#           Verifications & Variable & Function            #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# check if fail2ban is installed
+fail2ban_installed=$(/usr/local/vesta/bin/v-list-sys-services | grep -c 'fail2ban')
+if [ $fail2ban_installed -eq 0 ]; then
+    echo "Fail2ban is not installed"
+    exit 1
+fi
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# Cleaning fail2ban database
+fail2ban_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'fail2ban' | grep -c 'running')
+if [ $fail2ban_running -eq 1 ]; then
+    echo "== Stopping fail2ban"
+    systemctl stop fail2ban
+fi
+if [ -f "/var/lib/fail2ban/fail2ban.sqlite3" ]; then
+    echo "== Cleaning fail2ban database"
+    rm /var/lib/fail2ban/fail2ban.sqlite3
+    if [ -f "/etc/nginx/conf.d/block.conf" ]; then
+        echo "== Cleaning nginx block.conf"
+        truncate -s 0 /etc/nginx/conf.d/block.conf
+        nginx_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'nginx' | grep -c 'running')
+        if [ $nginx_running -eq 1 ]; then
+            echo "== Restarting nginx"
+            systemctl restart nginx
+        fi
+    fi
+fi
+if [ $fail2ban_running -eq 1 ]; then
+    echo "== Starting fail2ban"
+    systemctl start fail2ban
+fi
+
+echo "== Done, fail2ban database cleaned"
+
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 213ccd47df509c0bddc3554d8aa149adbbe076a2 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 3 Jun 2025 21:22:38 +0200
Subject: [PATCH 2199/2300] v-install-wordpress: Almost always use https

---
 bin/v-install-wordpress | 30 +++++++++++++++++-------------
 1 file changed, 17 insertions(+), 13 deletions(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 5758e358..202919d0 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -95,19 +95,22 @@ PASSWDDB=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1)
 #                       Action                             #
 #----------------------------------------------------------#
 
-PROTOCOL='http'
-if [ -z "$SKIP_LE" ]; then
-    if [ ! -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
-        /usr/local/vesta/bin/v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
-    fi
-else
-    PROTOCOL='https'
+PROTOCOL='https'
+
+if [ ! -f "/home/$user/conf/web/ssl.$domain.ca" ]; then
+    echo "== Trying to install LetsEncrypt for domain $domain"
+    /usr/local/vesta/bin/v-add-letsencrypt-domain "$user" "$domain" "www.$domain" "yes"
+fi
+
+if [ ! -z "$FORCE_HTTP" ]; then
+    # Switch to http:// only if --FORCE_HTTP parameter is set
+    echo "== Force http://"
+    PROTOCOL='http'
 fi
 
 TPL_CHANGED=0;
 
-if [ -f "/home/$user/conf/web/ssl.$domain.ca" ] || [ ! -z "$SKIP_LE" ]; then
-    PROTOCOL='https'
+if [ "$PROTOCOL" = "https" ]; then
     if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https-firewall-wordpress.stpl" ] && [ $TPL_CHANGED -eq 0 ]; then
         TPL_CHANGED=1;
         /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https-firewall-wordpress" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
@@ -116,7 +119,8 @@ if [ -f "/home/$user/conf/web/ssl.$domain.ca" ] || [ ! -z "$SKIP_LE" ]; then
         TPL_CHANGED=1;
         /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
     fi
-else
+fi
+if [ "$PROTOCOL" = "http" ]; then
     if [ -f "/usr/local/vesta/data/templates/web/nginx/hosting-firewall-wordpress.stpl" ] && [ $TPL_CHANGED -eq 0 ]; then
         TPL_CHANGED=1;
         /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "hosting-firewall-wordpress" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
@@ -147,11 +151,11 @@ sudo -H -u$user wp core install --url="$domain" --title="$domain" --admin_user="
 mysql -u$DBUSER -p$PASSWDDB -e "USE $DBUSER; update wp_options set option_value = '$PROTOCOL://$domain' where option_name = 'siteurl'; update wp_options set option_value = '$PROTOCOL://$domain' where option_name = 'home';"
 
 echo "================================================================="
-echo "Installation is complete. Your username/password is listed below."
+echo "Your WordPress installation is complete."
 echo ""
-echo "Site: $PROTOCOL://$domain/"
+echo "Website URL: $PROTOCOL://$domain/"
 echo ""
-echo "Login: $PROTOCOL://$domain/wp-admin/"
+echo "WordPress admin login: $PROTOCOL://$domain/wp-admin/"
 echo "Username: $wpadmin"
 echo "Password: $password"
 echo ""

From 4932dd3bb4908e8e3439497b456719fc7260a7e3 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 7 Jun 2025 14:53:49 +0200
Subject: [PATCH 2200/2300] Fix dkim record deletion command in
 v-delete-mail-domain-dkim script

---
 bin/v-delete-mail-domain-dkim | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-delete-mail-domain-dkim b/bin/v-delete-mail-domain-dkim
index f11e48d4..7cfbab58 100755
--- a/bin/v-delete-mail-domain-dkim
+++ b/bin/v-delete-mail-domain-dkim
@@ -48,7 +48,7 @@ fi
 # Deleting dns record
 if [ ! -z "$DNS_SYSTEM" ] && [ -e "$USER_DATA/dns/$domain.conf" ]; then
     records=$($BIN/v-list-dns-records $user $domain plain)
-    dkim_records=$(echo "$records" |grep -w '_domainkey' | cut -f 1 -d ' ')
+    dkim_records=$(echo "$records" |grep -w '_domainkey' | awk '{print $1}')
     for id in $dkim_records; do
         $BIN/v-delete-dns-record $user $domain $id
     done

From 8d9a3e1ca0f6c570f87daefce71b4d0a12b4b763 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 7 Jun 2025 16:23:42 +0200
Subject: [PATCH 2201/2300] v-change-user-package switched to
 parse_object_kv_list_non_eval

---
 bin/v-change-user-package | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bin/v-change-user-package b/bin/v-change-user-package
index d0de98db..012d2f1f 100755
--- a/bin/v-change-user-package
+++ b/bin/v-change-user-package
@@ -23,7 +23,7 @@ is_package_avalable() {
     usr_data=$(cat $USER_DATA/user.conf)
     IFS=$'\n'
     for key in $usr_data; do
-        eval ${key%%=*}=${key#*=}
+        parse_object_kv_list_non_eval $key
     done
 
     WEB_DOMAINS='0'
@@ -76,8 +76,8 @@ is_package_avalable() {
 }
 
 change_user_package() {
-    eval $(cat $USER_DATA/user.conf)
-    eval $(cat $VESTA/data/packages/$package.pkg |egrep -v "TIME|DATE")
+    parse_object_kv_list_non_eval $(cat $USER_DATA/user.conf)
+    parse_object_kv_list_non_eval $(cat $VESTA/data/packages/$package.pkg |egrep -v "TIME|DATE")
     echo "FNAME='$FNAME'
 LNAME='$LNAME'
 PACKAGE='$package'

From 89b7538fadfcc7d32f970c3cae5b650ee82bd7c4 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 7 Jun 2025 17:08:08 +0200
Subject: [PATCH 2202/2300] Enhance package validation

---
 bin/v-add-user-package    | 5 ++++-
 bin/v-change-user-package | 7 ++++++-
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-user-package b/bin/v-add-user-package
index 0cab1a3d..e9fe210a 100755
--- a/bin/v-add-user-package
+++ b/bin/v-add-user-package
@@ -28,7 +28,7 @@ is_package_new() {
 }
 
 is_package_consistent() {
-    source $pkg_dir/$package.pkg
+    parse_object_kv_list_non_eval $(cat $pkg_dir/$package.pkg)
     if [ "$WEB_DOMAINS" != 'unlimited' ]; then
         is_int_format_valid $WEB_DOMAINS 'WEB_DOMAINS'
     fi
@@ -63,6 +63,9 @@ is_package_consistent() {
         is_int_format_valid $BACKUPS 'BACKUPS'
     fi
     is_format_valid_shell $SHELL
+    is_web_template_valid $WEB_TEMPLATE
+    is_dns_template_valid $DNS_TEMPLATE
+    is_proxy_template_valid $PROXY_TEMPLATE
 }
 
 
diff --git a/bin/v-change-user-package b/bin/v-change-user-package
index 012d2f1f..1e088bcc 100755
--- a/bin/v-change-user-package
+++ b/bin/v-change-user-package
@@ -16,6 +16,7 @@ force=$3
 
 # Includes
 source $VESTA/func/main.sh
+source $VESTA/func/domain.sh
 source $VESTA/conf/vesta.conf
 
 is_package_avalable() {
@@ -35,7 +36,7 @@ is_package_avalable() {
 
     pkg_data=$(cat $VESTA/data/packages/$package.pkg |grep -v TIME |\
         grep -v DATE)
-    eval $pkg_data
+    parse_object_kv_list_non_eval $pkg_data
 
     # Checking usage agains package limits
     if [ "$WEB_DOMAINS" != 'unlimited' ]; then
@@ -73,6 +74,10 @@ is_package_avalable() {
             check_result $E_LIMIT "Package doesn't cover BANDWIDTH usage"
         fi
     fi
+
+    is_web_template_valid $WEB_TEMPLATE
+    is_dns_template_valid $DNS_TEMPLATE
+    is_proxy_template_valid $PROXY_TEMPLATE
 }
 
 change_user_package() {

From 0fd5be1d28557267490d911d64b3e26bb5baa060 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 7 Jun 2025 20:36:05 +0200
Subject: [PATCH 2203/2300] Activating FileManager licence for all users

---
 install/vst-install-debian.sh       | 3 ++-
 src/deb/vesta/postinst              | 5 +++++
 web/templates/file_manager/main.php | 1 +
 3 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ff19d1d5..ef4bc374 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -2089,10 +2089,11 @@ if [ "$release" -gt 9 ]; then
 fi
 echo "ALLOW_BACKUP_ANYTIME='yes'" >> $VESTA/conf/vesta.conf
 echo "NOTIFY_ADMIN_FULL_BACKUP='$email'" >> $VESTA/conf/vesta.conf
+echo "FILEMANAGER_KEY='FREEFM'" >> $VESTA/conf/vesta.conf
 echo "================================================================"
 
 # Removing old PHP sessions files
-crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -
+cron=$(crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -)
 
 echo "alias v-cd-www='source /usr/local/vesta/bin/v-change-dir-www'" >> /root/.bash_profile
 
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 523678e3..107bd6f6 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -25,6 +25,11 @@ fi
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+if ! grep -q "FILEMANAGER_KEY='FREEFM'" /usr/local/vesta/conf/vesta.conf; then
+    echo "== Adding FileManager license to vesta.conf"
+    echo "FILEMANAGER_KEY='FREEFM'" >> /usr/local/vesta/conf/vesta.conf
+fi
+
 # Adding myVesta rules to SpamAssassin
 if [ -d "/etc/spamassassin" ]; then
     spamassassin_modified=0
diff --git a/web/templates/file_manager/main.php b/web/templates/file_manager/main.php
index 2e82f811..dd9095f7 100644
--- a/web/templates/file_manager/main.php
+++ b/web/templates/file_manager/main.php
@@ -19,6 +19,7 @@
     <a href="#" class="to-shortcuts">
         <i class="l-icon-shortcuts"></i>
     </a>
+    <div style="float: right; margin-right: 15px;position: fixed;z-index: 100;right: 0px;color: #fff;top: 10px;" title="Developed and donated by VestaCP.com">©</div>
 
     <div id="main">
         <div class="window active">

From 85f39364a435c2834220b61ab9c06dd01c7ddc62 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 7 Jun 2025 20:47:57 +0200
Subject: [PATCH 2204/2300] v-commander: stop setting a root password

---
 bin/v-commander | 13 +++----------
 1 file changed, 3 insertions(+), 10 deletions(-)

diff --git a/bin/v-commander b/bin/v-commander
index 834fb38b..f04b3a17 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -101,7 +101,7 @@ myhelp() {
     echo "m def    = install php-memcached if needed"
     echo "check fc = check if FreshClam is up"
     echo "-----------------------------"
-    echo "enable-ssh-root-password-login = Allow root password authentication via SSH and set the root password to match the password for the admin account"
+    echo "enable-ssh-root-password-login = Allow root password authentication via SSH"
     echo "id_rsa = generate id_rsa and id_rsa.pub if it does not exist and show id_rsa.pub"
     echo "-----------------------------"
 }
@@ -535,18 +535,11 @@ do
         echo "--- New settings ---"
         grep '^PermitRoot' /etc/ssh/sshd_config
         echo "--------------------"
-        root_password=$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | head -c 32)
-        hashed_root_password=$(openssl passwd -6 "$root_password")
-        sed -i "s#^root:.*#root:$hashed_root_password#" /etc/shadow
-        echo "Root password is now a new random password."
-        echo "New root password: $root_password"
-        echo "--------------------"
-        grep '^root:' /etc/shadow
-        grep '^admin:' /etc/shadow
-        echo "--------------------"
         echo "Port 22 opened in Firewall for all IP addresses."
         /usr/local/vesta/bin/v-unsuspend-firewall-rule "11"
         echo "--------------------"
+        echo "Type 'passwd' in the terminal to set the root password."
+        echo "--------------------"
     fi
 
     if [ "$answer" = 'r' ] || [ "$answer" = 'R' ]; then

From 6d752d93f589a0d357a130f4eab2b3de7956fa26 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 8 Jun 2025 07:53:20 +0200
Subject: [PATCH 2205/2300] Adding v-cd-www alias to root bash profile

---
 install/vst-install-debian.sh | 6 +++++-
 src/deb/vesta/postinst        | 7 +++++++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index ef4bc374..18a25f10 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -2089,13 +2089,17 @@ if [ "$release" -gt 9 ]; then
 fi
 echo "ALLOW_BACKUP_ANYTIME='yes'" >> $VESTA/conf/vesta.conf
 echo "NOTIFY_ADMIN_FULL_BACKUP='$email'" >> $VESTA/conf/vesta.conf
+echo "== Adding FileManager license to vesta.conf"
 echo "FILEMANAGER_KEY='FREEFM'" >> $VESTA/conf/vesta.conf
 echo "================================================================"
 
 # Removing old PHP sessions files
 cron=$(crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -)
 
-echo "alias v-cd-www='source /usr/local/vesta/bin/v-change-dir-www'" >> /root/.bash_profile
+if [ -f "/root/.bash_profile" ]; then
+    echo "== Adding v-cd-www alias to root bash profile"
+    echo "alias v-cd-www='source /usr/local/vesta/bin/v-change-dir-www'" >> /root/.bash_profile
+fi
 
 #----------------------------------------------------------#
 #                  myVesta Access Info                     #
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 107bd6f6..68252789 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -30,6 +30,13 @@ if ! grep -q "FILEMANAGER_KEY='FREEFM'" /usr/local/vesta/conf/vesta.conf; then
     echo "FILEMANAGER_KEY='FREEFM'" >> /usr/local/vesta/conf/vesta.conf
 fi
 
+if [ -f "/root/.bash_profile" ]; then
+    if ! grep -q "v-cd-www" /root/.bash_profile; then
+        echo "== Adding v-cd-www alias to root bash profile"
+        echo "alias v-cd-www='source /usr/local/vesta/bin/v-change-dir-www'" >> /root/.bash_profile
+    fi
+fi
+
 # Adding myVesta rules to SpamAssassin
 if [ -d "/etc/spamassassin" ]; then
     spamassassin_modified=0

From 413787070aec1eff85ad198c2a5aa0dad9dbaddb Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 8 Jun 2025 08:08:27 +0200
Subject: [PATCH 2206/2300] Skip prompt to continue in vst-install-debian.sh if
 all required variables are set

---
 install/vst-install-debian.sh | 23 ++++++++++++++---------
 1 file changed, 14 insertions(+), 9 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 18a25f10..f6de9e70 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -491,10 +491,16 @@ echo -e "\n\n"
 
 # Asking for confirmation to proceed
 if [ "$interactive" = 'yes' ]; then
-    read -p 'Would you like to continue [y/n]: ' answer
-    if [ "$answer" != 'y' ] && [ "$answer" != 'Y'  ]; then
-        echo 'Goodbye'
-        exit 1
+    prompt_to_continue=1;
+    if [ ! -z "$email" ] && [ ! -z "$secret_url" ] && [ ! -z "$port" ] && [ ! -z "$servername" ]; then
+        prompt_to_continue=0;
+    fi
+    if [ $prompt_to_continue -eq 1 ]; then
+        read -p 'Would you like to continue [y/n]: ' answer
+        if [ "$answer" != 'y' ] && [ "$answer" != 'Y'  ]; then
+            echo 'Goodbye'
+            exit 1
+        fi
     fi
 
     # Asking for contact email
@@ -2081,7 +2087,6 @@ if [ "$port" != "8083" ]; then
     $VESTA/bin/v-change-vesta-port $port
 fi
 
-echo "=== Set URL for phpmyadmin"
 echo "DB_PMA_URL='https://$servername/phpmyadmin/'" >> $VESTA/conf/vesta.conf
 if [ "$release" -gt 9 ]; then
     echo "=== Set max_length_of_MySQL_username=80"
@@ -2089,15 +2094,15 @@ if [ "$release" -gt 9 ]; then
 fi
 echo "ALLOW_BACKUP_ANYTIME='yes'" >> $VESTA/conf/vesta.conf
 echo "NOTIFY_ADMIN_FULL_BACKUP='$email'" >> $VESTA/conf/vesta.conf
-echo "== Adding FileManager license to vesta.conf"
+echo "=== Adding FileManager license to vesta.conf"
 echo "FILEMANAGER_KEY='FREEFM'" >> $VESTA/conf/vesta.conf
-echo "================================================================"
 
 # Removing old PHP sessions files
-cron=$(crontab -l | { cat; echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;"; } | crontab -)
+touch /var/spool/cron/crontabs/root
+echo "10 2 * * 6 sudo find /home/*/tmp/ -type f -mtime +5 -exec rm {} \;" >> /var/spool/cron/crontabs/root
 
 if [ -f "/root/.bash_profile" ]; then
-    echo "== Adding v-cd-www alias to root bash profile"
+    echo "=== Adding v-cd-www alias to root bash profile"
     echo "alias v-cd-www='source /usr/local/vesta/bin/v-change-dir-www'" >> /root/.bash_profile
 fi
 

From c5d0619a6b2f8ff2fadfc92be5a6d7ed8dbb35b1 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 8 Jun 2025 14:46:58 +0200
Subject: [PATCH 2207/2300] Check for SSL certificate existence before deleting
 web domain SSL in v-install-unsigned-ssl

---
 bin/v-install-unsigned-ssl | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/bin/v-install-unsigned-ssl b/bin/v-install-unsigned-ssl
index 8df023c9..9ac2f188 100644
--- a/bin/v-install-unsigned-ssl
+++ b/bin/v-install-unsigned-ssl
@@ -52,7 +52,9 @@ fi
 #                       Action                             #
 #----------------------------------------------------------#
 
-/usr/local/vesta/bin/v-delete-web-domain-ssl "$user" "$domain"
+if [ -f "/home/$user/conf/web/ssl.$domain.crt" ]; then
+    /usr/local/vesta/bin/v-delete-web-domain-ssl "$user" "$domain"
+fi
 
 release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
 

From 2fe4ce2ae4535ffb0bbd673294bed67b04b4c05c Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 16 Jun 2025 15:49:34 +0200
Subject: [PATCH 2208/2300] v-change-db-password-to-wordpress

---
 bin/v-change-db-password-to-all-wordpress |  43 ++++++++++
 bin/v-change-db-password-to-wordpress     | 100 ++++++++++++++++++++++
 2 files changed, 143 insertions(+)
 create mode 100644 bin/v-change-db-password-to-all-wordpress
 create mode 100644 bin/v-change-db-password-to-wordpress

diff --git a/bin/v-change-db-password-to-all-wordpress b/bin/v-change-db-password-to-all-wordpress
new file mode 100644
index 00000000..b31edb80
--- /dev/null
+++ b/bin/v-change-db-password-to-all-wordpress
@@ -0,0 +1,43 @@
+#!/bin/bash
+# info: change db password to all wordpress databases
+# options:
+#
+# The command is used for changing db password to all wordpress databases on the server.
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Importing system variables
+source /etc/profile
+
+# Includes
+source $VESTA/func/main.sh
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
+    if [ ! -f "/usr/local/vesta/data/users/$user/user.conf" ]; then
+        continue;
+    fi
+
+    for domain in $(/usr/local/vesta/bin/v-list-web-domains $user plain |cut -f 1); do
+        if [ -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
+            /usr/local/vesta/bin/v-change-db-password-to-wordpress $domain
+            echo "--------------------------------"
+        fi
+    done
+
+done
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit
diff --git a/bin/v-change-db-password-to-wordpress b/bin/v-change-db-password-to-wordpress
new file mode 100644
index 00000000..d7ce1782
--- /dev/null
+++ b/bin/v-change-db-password-to-wordpress
@@ -0,0 +1,100 @@
+#!/bin/bash
+# info: change db password to wordpress database
+# options:
+#
+# The command is used for changing db password to wordpress database.
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Argument definition
+domain=$1
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+USER=$user
+
+if [ -z "$user" ]; then
+    echo "ERROR: Domain $domain not found"
+    exit 1;
+fi
+
+if [ ! -d "/home/$user" ]; then
+    echo "ERROR: User $user doesn't exist";
+    exit 1;
+fi
+
+# Includes
+source /usr/local/vesta/func/main.sh
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    echo "ERROR: Domain doesn't exist";
+    exit 1;
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+if [ -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
+    echo "=== Domain: $domain"
+    wp_config_path="/home/$user/web/$domain/public_html/wp-config.php"
+    if grep -q $'\r' $wp_config_path; then
+        echo "=== removing CRLF from wp-config.php"
+        tr -d '\r' < $wp_config_path > /tmp/wp-config.php && mv /tmp/wp-config.php $wp_config_path
+        chown $user:$user $wp_config_path
+    fi
+    db_name=$(grep "DB_NAME" $wp_config_path | grep -oP "define\s*\(\s*'DB_NAME'\s*,\s*'\K[^']+")
+    new_password=$(generate_password)
+    echo "DB name: $db_name"
+    echo "New DB password: $new_password"
+    # echo "executing: /usr/local/vesta/bin/v-change-database-password \"$user\" \"$db_name\" \"$new_password\""
+    /usr/local/vesta/bin/v-change-database-password "$user" "$db_name" "$new_password"
+    if [ $? -ne 0 ]; then
+        echo "*************** ERROR: Failed to change database password ***************"
+        exit 1;
+    fi
+    line="define('DB_PASSWORD', '$new_password');"
+    chattr -i $wp_config_path
+    sed -i "s/.*define(.*DB_PASSWORD'.*/$line/" $wp_config_path
+    new_password_line=$(grep "DB_PASSWORD" $wp_config_path)
+    echo "New DB password line: $new_password_line"
+    if [ "$new_password_line" != "$line" ]; then
+        echo "*************** ERROR: line in wp-config.php is not what we expected ***************"
+        echo "Expected: $line"
+        echo "Actual  : $new_password_line"
+        echo "*************** ERROR: Please check wp-config.php manually ***************"
+        exit 1;
+    fi
+else
+    echo "ERROR: WP-config.php not found"
+    exit 1;
+fi
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 819450ca5c1de0646037f8734a103a1870ea39ea Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Mon, 16 Jun 2025 17:23:28 +0200
Subject: [PATCH 2209/2300] Create v-fix-wp-core

---
 bin/v-fix-wp-core | 90 +++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 90 insertions(+)
 create mode 100644 bin/v-fix-wp-core

diff --git a/bin/v-fix-wp-core b/bin/v-fix-wp-core
new file mode 100644
index 00000000..5bef3232
--- /dev/null
+++ b/bin/v-fix-wp-core
@@ -0,0 +1,90 @@
+#!/bin/bash
+# info: fix compromised wp-admin and wp-includes
+# options: DOMAIN [CACHE_DIR]
+#
+# Replaces wp-admin and wp-includes with clean copies that match
+# the WordPress core version detected on the site.
+#
+# Example:
+#   v-fix-wp-core example.com
+#   v-fix-wp-core example.com /srv/wp-cache
+
+#----------------------------------------------------------#
+#                    Variable & Function                   #
+#----------------------------------------------------------#
+
+# Arguments
+DOMAIN="$1"
+CACHE_DIR="${2-/srv/wp-cache}"       # default cache location
+
+# Includes
+source $VESTA/func/main.sh
+source $VESTA/conf/vesta.conf
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+check_args '1' "$#" 'DOMAIN [CACHE_DIR]'
+is_format_valid 'domain'
+
+#----------------------------------------------------------#
+#                         Action                           #
+#----------------------------------------------------------#
+
+TMP_DIR="$(mktemp -d /tmp/wpfix.XXXXXX)"  # temp workspace
+trap 'rm -rf "$TMP_DIR"' EXIT
+
+# 1etermine WP version
+WP_VERSION="$(v-run-wp-cli "$DOMAIN" core version | tr -d '[:space:]')"
+check_result $? "cannot detect WP version" > /dev/null
+if [ -z "$WP_VERSION" ]; then
+    check_result 1 "empty WP version string"
+fi
+echo "Detected WordPress version $WP_VERSION"
+
+# 2ind site owner and path
+USER="$(v-search-domain-owner "$DOMAIN")"
+check_result $? "cannot find domain owner" > /dev/null
+SITE_PATH="/home/$USER/web/$DOMAIN/public_html"
+if [ ! -d "$SITE_PATH" ]; then
+    check_result 1 "site path $SITE_PATH does not exist"
+fi
+
+# ensure cached core is present
+CACHE_PATH="$CACHE_DIR/$WP_VERSION"
+if [ ! -d "$CACHE_PATH/wp-admin" ] || [ ! -d "$CACHE_PATH/wp-includes" ]; then
+    echo "Cache for $WP_VERSION missing, downloading ZIP..."
+
+    mkdir -p "$CACHE_PATH"
+    ZIP_URL="https://wordpress.org/wordpress-${WP_VERSION}.zip"
+    ZIP_FILE="$TMP_DIR/wp.zip"
+
+    curl -fSL "$ZIP_URL" -o "$ZIP_FILE"
+    check_result $? "download failed" > /dev/null
+
+    unzip -q "$ZIP_FILE" -d "$TMP_DIR"
+    check_result $? "unzip failed" > /dev/null
+
+    mv "$TMP_DIR/wordpress/wp-admin"    "$CACHE_PATH/"
+    mv "$TMP_DIR/wordpress/wp-includes" "$CACHE_PATH/"
+fi
+
+# backup current core folders
+TIMESTAMP="$(date +%Y%m%d%H%M%S)"
+BACKUP_DIR="$SITE_PATH/backup-core-$TIMESTAMP"
+mkdir -p "$BACKUP_DIR"
+mv "$SITE_PATH/wp-admin"    "$BACKUP_DIR/"
+mv "$SITE_PATH/wp-includes" "$BACKUP_DIR/"
+check_result $? "backup failed" > /dev/null
+echo "Old core folders moved to $BACKUP_DIR"
+
+# deploy clean core
+rsync -a --delete "$CACHE_PATH/wp-admin/"    "$SITE_PATH/wp-admin/"
+rsync -a --delete "$CACHE_PATH/wp-includes/" "$SITE_PATH/wp-includes/"
+check_result $? "rsync failed" > /dev/null
+
+# fix permissions
+v-fix-website-permissions $DOMAIN
+
+echo "Done, wp-admin and wp-includes replaced for $DOMAIN"
+exit

From 4f871db1fc52dd1e357ddb2d7e5566c2f916072c Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Mon, 16 Jun 2025 17:28:34 +0200
Subject: [PATCH 2210/2300] Update v-fix-wp-core

---
 bin/v-fix-wp-core | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-fix-wp-core b/bin/v-fix-wp-core
index 5bef3232..67d91f40 100644
--- a/bin/v-fix-wp-core
+++ b/bin/v-fix-wp-core
@@ -75,6 +75,7 @@ BACKUP_DIR="$SITE_PATH/backup-core-$TIMESTAMP"
 mkdir -p "$BACKUP_DIR"
 mv "$SITE_PATH/wp-admin"    "$BACKUP_DIR/"
 mv "$SITE_PATH/wp-includes" "$BACKUP_DIR/"
+chown -R www-data:www-data "$BACKUP_DIR"
 check_result $? "backup failed" > /dev/null
 echo "Old core folders moved to $BACKUP_DIR"
 
@@ -85,6 +86,7 @@ check_result $? "rsync failed" > /dev/null
 
 # fix permissions
 v-fix-website-permissions $DOMAIN
+chown -R www-data:www-data "$BACKUP_DIR"
 
 echo "Done, wp-admin and wp-includes replaced for $DOMAIN"
 exit

From 59053e2ffd745754350609d4eb797cd8ea6121ca Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 17 Jun 2025 00:07:17 +0200
Subject: [PATCH 2211/2300] Update v-fix-wp-core

---
 bin/v-fix-wp-core | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/bin/v-fix-wp-core b/bin/v-fix-wp-core
index 67d91f40..e852da4d 100644
--- a/bin/v-fix-wp-core
+++ b/bin/v-fix-wp-core
@@ -67,6 +67,7 @@ if [ ! -d "$CACHE_PATH/wp-admin" ] || [ ! -d "$CACHE_PATH/wp-includes" ]; then
 
     mv "$TMP_DIR/wordpress/wp-admin"    "$CACHE_PATH/"
     mv "$TMP_DIR/wordpress/wp-includes" "$CACHE_PATH/"
+    cp "$TMP_DIR/wordpress"/*.php "$CACHE_PATH/"
 fi
 
 # backup current core folders
@@ -75,6 +76,12 @@ BACKUP_DIR="$SITE_PATH/backup-core-$TIMESTAMP"
 mkdir -p "$BACKUP_DIR"
 mv "$SITE_PATH/wp-admin"    "$BACKUP_DIR/"
 mv "$SITE_PATH/wp-includes" "$BACKUP_DIR/"
+
+for f in "$SITE_PATH"/*.php; do
+    [[ $(basename "$f") == "wp-config.php" ]] && continue
+    mv "$f" "$BACKUP_DIR/"
+done
+
 chown -R www-data:www-data "$BACKUP_DIR"
 check_result $? "backup failed" > /dev/null
 echo "Old core folders moved to $BACKUP_DIR"
@@ -84,6 +91,12 @@ rsync -a --delete "$CACHE_PATH/wp-admin/"    "$SITE_PATH/wp-admin/"
 rsync -a --delete "$CACHE_PATH/wp-includes/" "$SITE_PATH/wp-includes/"
 check_result $? "rsync failed" > /dev/null
 
+for corephp in "$CACHE_PATH"/*.php; do
+    base=$(basename "$corephp")
+    [ "$base" = "wp-config.php" ] && continue
+    rsync -a "$corephp" "$SITE_PATH/$base"
+done
+
 # fix permissions
 v-fix-website-permissions $DOMAIN
 chown -R www-data:www-data "$BACKUP_DIR"

From e8cbaa742f454bdc0e1b2552100e9e43098d8fec Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 17 Jun 2025 00:23:04 +0200
Subject: [PATCH 2212/2300] Create v-change-wp-admins-pass

---
 bin/v-change-wp-admins-pass | 115 ++++++++++++++++++++++++++++++++++++
 1 file changed, 115 insertions(+)
 create mode 100644 bin/v-change-wp-admins-pass

diff --git a/bin/v-change-wp-admins-pass b/bin/v-change-wp-admins-pass
new file mode 100644
index 00000000..0b55082d
--- /dev/null
+++ b/bin/v-change-wp-admins-pass
@@ -0,0 +1,115 @@
+#!/bin/bash
+# info: interactively change WordPress admin passwords for a given domain
+# options: DOMAIN
+
+# -------------------------------------------------------- #
+#                     variables and checks                 #
+# -------------------------------------------------------- #
+
+if [ "$(whoami)" != "root" ]; then
+    echo "You must be root to run this command."
+    exit 1
+fi
+
+source /etc/profile
+
+domain="$1"
+if [ -z "$domain" ]; then
+    echo "Usage: v-change-wp-admin-pass DOMAIN"
+    exit 1
+fi
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner "$domain")
+if [ -z "$user" ]; then
+    echo "Domain $domain does not exist."
+    exit 1
+fi
+
+wp_path="/home/$user/web/$domain/public_html"
+if [ ! -f "$wp_path/wp-config.php" ]; then
+    echo "WordPress is not installed on this domain."
+    exit 1
+fi
+
+# make sure WP-CLI exists
+if ! command -v wp >/dev/null 2>&1; then
+    echo "WP-CLI is not installed, installing..."
+    wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
+    chmod +x /usr/local/bin/wp
+fi
+
+# detect PHP for this domain
+phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
+if command -v "php$phpver" >/dev/null 2>&1; then
+    php_bin=$(command -v "php$phpver")
+else
+    php_bin=$(command -v php)
+fi
+[ -z "$php_bin" ] && { echo "Could not find a PHP binary."; exit 1; }
+
+# WP-CLI wrapper (array keeps spaces intact)
+wp_run=(sudo -u "$user" "$php_bin" /usr/local/bin/wp --skip-plugins --skip-themes)
+
+# simple random 10-char generator (letters and digits)
+gen_pass() {
+    tr -dc 'A-Za-z0-9' </dev/urandom | head -c 10
+}
+
+# -------------------------------------------------------- #
+#                          action                          #
+# -------------------------------------------------------- #
+
+cd "$wp_path" || exit 1
+
+echo
+echo "WordPress administrators for $domain:"
+echo "-------------------------------------"
+
+admin_list=$("${wp_run[@]}" user list \
+    --role=administrator \
+    --fields=ID,user_login,user_email \
+    --format=csv 2>/dev/null | tail -n +2)
+
+if [ -z "$admin_list" ]; then
+    echo "No administrator accounts found."
+    exit 0
+fi
+
+printf "%-6s %-20s %s\n" "ID" "Username" "Email"
+echo "$admin_list" | while IFS=',' read -r id login email; do
+    printf "%-6s %-20s %s\n" "$id" "$login" "$email"
+done
+
+echo
+echo "You will be asked for each admin whether you want to change the password."
+
+# interactive loop
+while IFS=',' read -r id login email; do
+    [ -n "$email" ] && prompt_target="$login <$email>" || prompt_target="$login"
+
+    while true; do
+        read -r -p "Change the password for $prompt_target? (y/n) " yn < /dev/tty
+        case "$yn" in
+            [Yy]* )
+                new_pass=$(gen_pass)
+                if "${wp_run[@]}" user update "$id" --user_pass="$new_pass" --quiet; then
+                    echo "Password for $prompt_target has been changed to: $new_pass"
+                else
+                    echo "Failed to change password for $prompt_target."
+                fi
+                break
+                ;;
+            [Nn]* )
+                echo "Skipping $prompt_target."
+                break
+                ;;
+            * )
+                echo "Please answer y or n."
+                ;;
+        esac
+    done
+done <<< "$admin_list"
+
+echo
+echo "Done."
+exit 0

From aa2f5e4fbb59a7f0c19ae3c50b7856cc3ff2ac4d Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 17 Jun 2025 00:40:10 +0200
Subject: [PATCH 2213/2300] Update v-fix-wp-core

---
 bin/v-fix-wp-core | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bin/v-fix-wp-core b/bin/v-fix-wp-core
index e852da4d..8bf3277b 100644
--- a/bin/v-fix-wp-core
+++ b/bin/v-fix-wp-core
@@ -35,7 +35,7 @@ TMP_DIR="$(mktemp -d /tmp/wpfix.XXXXXX)"  # temp workspace
 trap 'rm -rf "$TMP_DIR"' EXIT
 
 # 1etermine WP version
-WP_VERSION="$(v-run-wp-cli "$DOMAIN" core version | tr -d '[:space:]')"
+WP_VERSION="$(/usr/local/vesta/bin/v-run-wp-cli "$DOMAIN" core version | tr -d '[:space:]')"
 check_result $? "cannot detect WP version" > /dev/null
 if [ -z "$WP_VERSION" ]; then
     check_result 1 "empty WP version string"
@@ -43,7 +43,7 @@ fi
 echo "Detected WordPress version $WP_VERSION"
 
 # 2ind site owner and path
-USER="$(v-search-domain-owner "$DOMAIN")"
+USER="$(/usr/local/vesta/bin/v-search-domain-owner "$DOMAIN")"
 check_result $? "cannot find domain owner" > /dev/null
 SITE_PATH="/home/$USER/web/$DOMAIN/public_html"
 if [ ! -d "$SITE_PATH" ]; then
@@ -98,7 +98,7 @@ for corephp in "$CACHE_PATH"/*.php; do
 done
 
 # fix permissions
-v-fix-website-permissions $DOMAIN
+/usr/local/vesta/bin/v-fix-website-permissions $DOMAIN
 chown -R www-data:www-data "$BACKUP_DIR"
 
 echo "Done, wp-admin and wp-includes replaced for $DOMAIN"

From a8e39817fcb8c9d30dc02cb85fa2f22634030987 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 17 Jun 2025 00:40:47 +0200
Subject: [PATCH 2214/2300] Create v-desinfect-wp

---
 bin/v-desinfect-wp | 89 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 89 insertions(+)
 create mode 100644 bin/v-desinfect-wp

diff --git a/bin/v-desinfect-wp b/bin/v-desinfect-wp
new file mode 100644
index 00000000..e1ddc65d
--- /dev/null
+++ b/bin/v-desinfect-wp
@@ -0,0 +1,89 @@
+#!/bin/bash
+# info: disinfect a WordPress site with several maintenance commands
+# options: DOMAIN
+
+# -------------------------------------------------------- #
+#                    variables and checks                  #
+# -------------------------------------------------------- #
+
+if [ "$(whoami)" != "root" ]; then
+    echo "You must be root to run this command."
+    exit 1
+fi
+
+# make sure all Vesta helper scripts are reachable
+export PATH="/usr/local/vesta/bin:$PATH"
+source /etc/profile
+
+domain="$1"
+if [ -z "$domain" ]; then
+    echo "Usage: v-desinfect-wp DOMAIN"
+    exit 1
+fi
+
+user=$(/usr/local/vesta/bin/v-search-domain-owner "$domain")
+if [ -z "$user" ]; then
+    echo "Domain $domain does not exist."
+    exit 1
+fi
+
+# choose the correct admin-password script (with or without the “s”)
+if [ -x /usr/local/vesta/bin/v-change-wp-admin-pass ]; then
+    admin_pass_script="/usr/local/vesta/bin/v-change-wp-admin-pass"
+elif [ -x /usr/local/vesta/bin/v-change-wp-admins-pass ]; then
+    admin_pass_script="/usr/local/vesta/bin/v-change-wp-admins-pass"
+else
+    admin_pass_script=""
+fi
+
+# absolute paths to maintenance scripts, in desired order
+declare -a tasks=(
+    "/usr/local/vesta/bin/v-change-db-password-to-wordpress"
+    "/usr/local/vesta/bin/v-fix-wp-core"
+    "/usr/local/vesta/bin/v-wf-malware-hyperscan-with-remediate"
+)
+
+# append the admin script if we found one
+[ -n "$admin_pass_script" ] && tasks+=("$admin_pass_script")
+
+# -------------------------------------------------------- #
+#                    execution strategy                    #
+# -------------------------------------------------------- #
+
+echo
+read -r -p "Run all maintenance steps automatically? (y/n) " run_all < /dev/tty
+
+if [[ "$run_all" =~ ^[Yy]$ ]]; then
+    echo "Running all maintenance steps for $domain"
+    automatic=true
+else
+    echo
+    echo "Selective mode. You will be asked for each step."
+    automatic=false
+fi
+
+for cmd in "${tasks[@]}"; do
+    if [ ! -x "$cmd" ]; then
+        echo "Command $cmd not found or not executable, skipping."
+        continue
+    fi
+
+    if [ "$automatic" = false ]; then
+        while true; do
+            read -r -p "Run $(basename "$cmd") for $domain? (y/n) " yn < /dev/tty
+            case "$yn" in
+                [Yy]* ) break ;;
+                [Nn]* ) echo "Skipping $(basename "$cmd")."; continue 2 ;;
+                * )     echo "Please answer y or n." ;;
+            esac
+        done
+    fi
+
+    echo
+    echo "=== $(basename "$cmd") $domain ==="
+    "$cmd" "$domain"
+done
+
+echo
+echo "Done."
+exit 0

From 8a4b66a135bf956c6acc6ec62430a5b2ebe5b772 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 17 Jun 2025 00:42:19 +0200
Subject: [PATCH 2215/2300] Update v-fix-wp-core

---
 bin/v-fix-wp-core | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-fix-wp-core b/bin/v-fix-wp-core
index 8bf3277b..4240b0ab 100644
--- a/bin/v-fix-wp-core
+++ b/bin/v-fix-wp-core
@@ -101,5 +101,5 @@ done
 /usr/local/vesta/bin/v-fix-website-permissions $DOMAIN
 chown -R www-data:www-data "$BACKUP_DIR"
 
-echo "Done, wp-admin and wp-includes replaced for $DOMAIN"
+echo "Done, core WP files, wp-admin and wp-includes replaced for $DOMAIN"
 exit

From 12dc1a57182fc3c63e7c79ccace891949eb02070 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 17 Jun 2025 00:49:27 +0200
Subject: [PATCH 2216/2300] Update v-change-wp-admins-pass

---
 bin/v-change-wp-admins-pass | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/bin/v-change-wp-admins-pass b/bin/v-change-wp-admins-pass
index 0b55082d..9351e4a1 100644
--- a/bin/v-change-wp-admins-pass
+++ b/bin/v-change-wp-admins-pass
@@ -31,7 +31,7 @@ if [ ! -f "$wp_path/wp-config.php" ]; then
     exit 1
 fi
 
-# make sure WP-CLI exists
+# ensure WP-CLI exists
 if ! command -v wp >/dev/null 2>&1; then
     echo "WP-CLI is not installed, installing..."
     wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
@@ -50,7 +50,7 @@ fi
 # WP-CLI wrapper (array keeps spaces intact)
 wp_run=(sudo -u "$user" "$php_bin" /usr/local/bin/wp --skip-plugins --skip-themes)
 
-# simple random 10-char generator (letters and digits)
+# random 10-character password generator (letters and digits)
 gen_pass() {
     tr -dc 'A-Za-z0-9' </dev/urandom | head -c 10
 }
@@ -110,6 +110,19 @@ while IFS=',' read -r id login email; do
     done
 done <<< "$admin_list"
 
+# -------------------------------------------------------- #
+#        flush cache and refresh all security salts        #
+# -------------------------------------------------------- #
+
+echo
+echo "Flushing cache and refreshing salts..."
+
+"${wp_run[@]}" cache flush
+"${wp_run[@]}" config shuffle-salts WP_CACHE_KEY_SALT --force
+"${wp_run[@]}" config shuffle-salts
+
+echo "Cache flushed and salts refreshed."
+
 echo
 echo "Done."
 exit 0

From 6ac6ea40d361d4262506fd028a5e1a3225172273 Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 17 Jun 2025 01:20:05 +0200
Subject: [PATCH 2217/2300] Update v-change-wp-admins-pass

---
 bin/v-change-wp-admins-pass | 153 ++++++++++++------------------------
 1 file changed, 50 insertions(+), 103 deletions(-)

diff --git a/bin/v-change-wp-admins-pass b/bin/v-change-wp-admins-pass
index 9351e4a1..f7aa5245 100644
--- a/bin/v-change-wp-admins-pass
+++ b/bin/v-change-wp-admins-pass
@@ -1,128 +1,75 @@
 #!/bin/bash
-# info: interactively change WordPress admin passwords for a given domain
+# info: disinfect a WordPress site with several maintenance commands
 # options: DOMAIN
 
-# -------------------------------------------------------- #
-#                     variables and checks                 #
-# -------------------------------------------------------- #
+#----------------------------------------------------------#
+#                    Variable & Function                   #
+#----------------------------------------------------------#
 
+DOMAIN="$1"
+VESTA="/usr/local/vesta"
+
+# absolute paths to maintenance scripts
+CHANGE_DB_PASS="/usr/local/vesta/bin/v-change-db-password-to-wordpress"
+FIX_CORE="/usr/local/vesta/bin/v-fix-wp-core"
+WF_SCAN="/usr/local/vesta/bin/v-wf-malware-hyperscan-with-remediate"
+ADMIN_PASS="/usr/local/vesta/bin/v-change-wp-admins-pass"
+
+TASKS=(
+    "$CHANGE_DB_PASS"
+    "$FIX_CORE"
+    "$WF_SCAN"
+    "$ADMIN_PASS"
+)
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
 if [ "$(whoami)" != "root" ]; then
     echo "You must be root to run this command."
     exit 1
 fi
 
-source /etc/profile
-
-domain="$1"
-if [ -z "$domain" ]; then
-    echo "Usage: v-change-wp-admin-pass DOMAIN"
+if [ -z "$DOMAIN" ]; then
+    echo "Usage: v-desinfect-wp DOMAIN"
     exit 1
 fi
 
-user=$(/usr/local/vesta/bin/v-search-domain-owner "$domain")
-if [ -z "$user" ]; then
-    echo "Domain $domain does not exist."
+if ! "$VESTA/bin/v-search-domain-owner" "$DOMAIN" >/dev/null 2>&1; then
+    echo "Domain $DOMAIN does not exist."
     exit 1
 fi
 
-wp_path="/home/$user/web/$domain/public_html"
-if [ ! -f "$wp_path/wp-config.php" ]; then
-    echo "WordPress is not installed on this domain."
-    exit 1
-fi
-
-# ensure WP-CLI exists
-if ! command -v wp >/dev/null 2>&1; then
-    echo "WP-CLI is not installed, installing..."
-    wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
-    chmod +x /usr/local/bin/wp
-fi
-
-# detect PHP for this domain
-phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
-if command -v "php$phpver" >/dev/null 2>&1; then
-    php_bin=$(command -v "php$phpver")
-else
-    php_bin=$(command -v php)
-fi
-[ -z "$php_bin" ] && { echo "Could not find a PHP binary."; exit 1; }
-
-# WP-CLI wrapper (array keeps spaces intact)
-wp_run=(sudo -u "$user" "$php_bin" /usr/local/bin/wp --skip-plugins --skip-themes)
-
-# random 10-character password generator (letters and digits)
-gen_pass() {
-    tr -dc 'A-Za-z0-9' </dev/urandom | head -c 10
-}
-
-# -------------------------------------------------------- #
-#                          action                          #
-# -------------------------------------------------------- #
-
-cd "$wp_path" || exit 1
+#----------------------------------------------------------#
+#                         Action                           #
+#----------------------------------------------------------#
 
 echo
-echo "WordPress administrators for $domain:"
-echo "-------------------------------------"
+read -r -p "Run all maintenance steps automatically? (y/n) " AUTO < /dev/tty
+[[ "$AUTO" =~ ^[Yy]$ ]] && AUTOMATIC=true || AUTOMATIC=false
 
-admin_list=$("${wp_run[@]}" user list \
-    --role=administrator \
-    --fields=ID,user_login,user_email \
-    --format=csv 2>/dev/null | tail -n +2)
+for CMD in "${TASKS[@]}"; do
+    if [ ! -x "$CMD" ]; then
+        echo "Command $CMD not found or not executable, skipping."
+        continue
+    fi
 
-if [ -z "$admin_list" ]; then
-    echo "No administrator accounts found."
-    exit 0
-fi
+    if [ "$AUTOMATIC" = false ]; then
+        while true; do
+            read -r -p "Run $(basename "$CMD") for $DOMAIN? (y/n) " YN < /dev/tty
+            case "$YN" in
+                [Yy]* ) break ;;
+                [Nn]* ) echo "Skipping $(basename "$CMD")."; continue 2 ;;
+                * )     echo "Please answer y or n." ;;
+            esac
+        done
+    fi
 
-printf "%-6s %-20s %s\n" "ID" "Username" "Email"
-echo "$admin_list" | while IFS=',' read -r id login email; do
-    printf "%-6s %-20s %s\n" "$id" "$login" "$email"
+    echo
+    echo "=== $(basename "$CMD") $DOMAIN ==="
+    "$CMD" "$DOMAIN"
 done
 
-echo
-echo "You will be asked for each admin whether you want to change the password."
-
-# interactive loop
-while IFS=',' read -r id login email; do
-    [ -n "$email" ] && prompt_target="$login <$email>" || prompt_target="$login"
-
-    while true; do
-        read -r -p "Change the password for $prompt_target? (y/n) " yn < /dev/tty
-        case "$yn" in
-            [Yy]* )
-                new_pass=$(gen_pass)
-                if "${wp_run[@]}" user update "$id" --user_pass="$new_pass" --quiet; then
-                    echo "Password for $prompt_target has been changed to: $new_pass"
-                else
-                    echo "Failed to change password for $prompt_target."
-                fi
-                break
-                ;;
-            [Nn]* )
-                echo "Skipping $prompt_target."
-                break
-                ;;
-            * )
-                echo "Please answer y or n."
-                ;;
-        esac
-    done
-done <<< "$admin_list"
-
-# -------------------------------------------------------- #
-#        flush cache and refresh all security salts        #
-# -------------------------------------------------------- #
-
-echo
-echo "Flushing cache and refreshing salts..."
-
-"${wp_run[@]}" cache flush
-"${wp_run[@]}" config shuffle-salts WP_CACHE_KEY_SALT --force
-"${wp_run[@]}" config shuffle-salts
-
-echo "Cache flushed and salts refreshed."
-
 echo
 echo "Done."
 exit 0

From 31413a8f7301ed055c0df73feeb4185f6890dfce Mon Sep 17 00:00:00 2001
From: isscbta <53144593+isscbta@users.noreply.github.com>
Date: Tue, 17 Jun 2025 01:56:02 +0200
Subject: [PATCH 2218/2300] Update v-change-wp-admins-pass

---
 bin/v-change-wp-admins-pass | 152 ++++++++++++++++++++++++------------
 1 file changed, 104 insertions(+), 48 deletions(-)

diff --git a/bin/v-change-wp-admins-pass b/bin/v-change-wp-admins-pass
index f7aa5245..0249efb7 100644
--- a/bin/v-change-wp-admins-pass
+++ b/bin/v-change-wp-admins-pass
@@ -1,75 +1,131 @@
 #!/bin/bash
-# info: disinfect a WordPress site with several maintenance commands
+# info: interactively delete or change WordPress admin passwords for a given domain
 # options: DOMAIN
+#
+# d  → delete user  (with content reassignment)
+# c  → change password (random 10-char alnum)
+# s  → skip
 
 #----------------------------------------------------------#
 #                    Variable & Function                   #
 #----------------------------------------------------------#
 
+[ "$(whoami)" != "root" ] && { echo "You must be root to run this command."; exit 1; }
+source /etc/profile
+
 DOMAIN="$1"
-VESTA="/usr/local/vesta"
+[ -z "$DOMAIN" ] && { echo "Usage: v-change-wp-admins-pass DOMAIN"; exit 1; }
 
-# absolute paths to maintenance scripts
-CHANGE_DB_PASS="/usr/local/vesta/bin/v-change-db-password-to-wordpress"
-FIX_CORE="/usr/local/vesta/bin/v-fix-wp-core"
-WF_SCAN="/usr/local/vesta/bin/v-wf-malware-hyperscan-with-remediate"
-ADMIN_PASS="/usr/local/vesta/bin/v-change-wp-admins-pass"
+USER="$(/usr/local/vesta/bin/v-search-domain-owner "$DOMAIN")"
+[ -z "$USER" ] && { echo "Domain $DOMAIN does not exist."; exit 1; }
 
-TASKS=(
-    "$CHANGE_DB_PASS"
-    "$FIX_CORE"
-    "$WF_SCAN"
-    "$ADMIN_PASS"
-)
+WP_PATH="/home/$USER/web/$DOMAIN/public_html"
+[ ! -f "$WP_PATH/wp-config.php" ] && { echo "WordPress is not installed on this domain."; exit 1; }
 
-#----------------------------------------------------------#
-#                    Verifications                         #
-#----------------------------------------------------------#
-if [ "$(whoami)" != "root" ]; then
-    echo "You must be root to run this command."
-    exit 1
+# ensure WP-CLI binary
+if ! command -v wp >/dev/null 2>&1; then
+    echo "WP-CLI is not installed, installing..."
+    wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
+    chmod +x /usr/local/bin/wp
 fi
 
-if [ -z "$DOMAIN" ]; then
-    echo "Usage: v-desinfect-wp DOMAIN"
-    exit 1
-fi
+PHPVER=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$DOMAIN")
+PHP_BIN=$(command -v "php$PHPVER" 2>/dev/null || command -v php)
+[ -z "$PHP_BIN" ] && { echo "Could not find a PHP binary."; exit 1; }
 
-if ! "$VESTA/bin/v-search-domain-owner" "$DOMAIN" >/dev/null 2>&1; then
-    echo "Domain $DOMAIN does not exist."
-    exit 1
-fi
+# WP-CLI wrapper
+WP_RUN=(sudo -u "$USER" "$PHP_BIN" /usr/local/bin/wp --skip-plugins --skip-themes)
+
+# random 10-char password
+gen_pass() { tr -dc 'A-Za-z0-9' </dev/urandom | head -c 10; }
 
 #----------------------------------------------------------#
 #                         Action                           #
 #----------------------------------------------------------#
 
+cd "$WP_PATH" || exit 1
 echo
-read -r -p "Run all maintenance steps automatically? (y/n) " AUTO < /dev/tty
-[[ "$AUTO" =~ ^[Yy]$ ]] && AUTOMATIC=true || AUTOMATIC=false
+echo "WordPress administrators for $DOMAIN:"
+echo "-------------------------------------"
 
-for CMD in "${TASKS[@]}"; do
-    if [ ! -x "$CMD" ]; then
-        echo "Command $CMD not found or not executable, skipping."
-        continue
-    fi
+ADMIN_LIST_CSV=$("${WP_RUN[@]}" user list --role=administrator \
+                     --fields=ID,user_login,user_email \
+                     --format=csv 2>/dev/null | tail -n +2)
+[ -z "$ADMIN_LIST_CSV" ] && { echo "No administrator accounts found."; exit 0; }
 
-    if [ "$AUTOMATIC" = false ]; then
-        while true; do
-            read -r -p "Run $(basename "$CMD") for $DOMAIN? (y/n) " YN < /dev/tty
-            case "$YN" in
-                [Yy]* ) break ;;
-                [Nn]* ) echo "Skipping $(basename "$CMD")."; continue 2 ;;
-                * )     echo "Please answer y or n." ;;
-            esac
-        done
-    fi
-
-    echo
-    echo "=== $(basename "$CMD") $DOMAIN ==="
-    "$CMD" "$DOMAIN"
+printf "%-6s %-20s %s\n" "ID" "Username" "Email"
+echo "$ADMIN_LIST_CSV" | while IFS=',' read -r PID PLOGIN PEMAIL; do
+    printf "%-6s %-20s %s\n" "$PID" "$PLOGIN" "$PEMAIL"
 done
 
+echo
+echo "For each admin choose: (d) delete, (c) change password, (s) skip."
+
+# interactive loop
+echo "$ADMIN_LIST_CSV" | while IFS=',' read -r ID LOGIN EMAIL; do
+    [ -n "$EMAIL" ] && TARGET="$LOGIN <$EMAIL>" || TARGET="$LOGIN"
+    while true; do
+        read -r -p "Action for $TARGET [d/c/s]? " ACT < /dev/tty
+        case "$ACT" in
+            [Dd]* )
+                read -r -p "Really DELETE $TARGET? (y/n) " CONF < /dev/tty
+                if [[ "$CONF" =~ ^[Yy]$ ]]; then
+                    # build an array of OTHER admin usernames
+                    mapfile -t OTHER_USERS < <(echo "$ADMIN_LIST_CSV" | awk -F',' -v cur="$ID" '$1!=cur {print $2}')
+                    if [ "${#OTHER_USERS[@]}" -eq 0 ]; then
+                        echo "Cannot delete the only administrator account."
+                        break
+                    fi
+                    DEFAULT_USER="${OTHER_USERS[0]}"
+                    echo "Available admin usernames for reassignment: ${OTHER_USERS[*]}"
+                    while true; do
+                        read -r -p "Reassign content to which username? [default $DEFAULT_USER] " REASSIGN < /dev/tty
+                        REASSIGN=${REASSIGN:-$DEFAULT_USER}
+                        if printf '%s\n' "${OTHER_USERS[@]}" | grep -qx "$REASSIGN"; then
+                            break
+                        else
+                            echo "Invalid username. Please choose one of: ${OTHER_USERS[*]}"
+                        fi
+                    done
+                    # delete by username, reassign by username
+                    "${WP_RUN[@]}" user delete "$LOGIN" --reassign="$REASSIGN" --yes >/dev/null 2>&1
+                    echo "$TARGET deleted (content reassigned to $REASSIGN)."
+                else
+                    echo "Deletion cancelled."
+                fi
+                break
+                ;;
+            [Cc]* )
+                NEW_PASS=$(gen_pass)
+                if "${WP_RUN[@]}" user update "$LOGIN" --user_pass="$NEW_PASS" --quiet; then
+                    echo "Password for $TARGET changed to: $NEW_PASS"
+                else
+                    echo "Failed to change password for $TARGET."
+                fi
+                break
+                ;;
+            [Ss]* )
+                echo "Skipping $TARGET."
+                break
+                ;;
+            * ) echo "Please answer d, c, or s." ;;
+        esac
+    done
+done
+
+#----------------------------------------------------------#
+#        flush cache and refresh all security salts        #
+#----------------------------------------------------------#
+
+echo
+echo "Flushing cache and refreshing salts..."
+
+"${WP_RUN[@]}" cache flush
+"${WP_RUN[@]}" config shuffle-salts WP_CACHE_KEY_SALT --force
+"${WP_RUN[@]}" config shuffle-salts
+
+echo "Cache flushed and salts refreshed."
+
 echo
 echo "Done."
 exit 0

From 596bce582f627d14b5ff0f0422773e7a894b4f2f Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 17 Jun 2025 11:43:48 +0200
Subject: [PATCH 2219/2300] Jailing v-run-wp-cli

---
 bin/v-run-wp-cli | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/bin/v-run-wp-cli b/bin/v-run-wp-cli
index 672832ab..ebe654f6 100644
--- a/bin/v-run-wp-cli
+++ b/bin/v-run-wp-cli
@@ -63,6 +63,9 @@ if [ ! -d "/home/$user/web/$domain/public_html" ]; then
     exit 1;
 fi
 
+mkdir -p /home/$user/.wp-cli
+chown $user:$user /home/$user/.wp-cli
+
 phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
 
 #----------------------------------------------------------#
@@ -70,7 +73,11 @@ phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
 #----------------------------------------------------------#
 
 cd /home/$USER/web/$domain/public_html
-sudo -u $USER /usr/bin/php$phpver /usr/local/bin/wp $wp_command
+sudo -u $USER /usr/bin/php$phpver -d disable_functions=pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen -d open_basedir=/home/$user/web/$domain:/home/$user/.wp-cli:/home/$user/tmp:/usr/local/bin /usr/local/bin/wp --path=/home/$user/web/$domain/public_html/ $wp_command 2>/home/$user/web/$domain/wp-cli-error.log
+
+echo "WP CLI: Done."
+echo "To see Warning/Error log: "
+echo "cat /home/$user/web/$domain/wp-cli-error.log"
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From d1c48504adcf33fe068d065997f189d354399ff6 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 17 Jun 2025 14:02:31 +0200
Subject: [PATCH 2220/2300] v-run-wp-cli

---
 bin/v-run-wp-cli | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/bin/v-run-wp-cli b/bin/v-run-wp-cli
index ebe654f6..9325d47d 100644
--- a/bin/v-run-wp-cli
+++ b/bin/v-run-wp-cli
@@ -75,9 +75,9 @@ phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
 cd /home/$USER/web/$domain/public_html
 sudo -u $USER /usr/bin/php$phpver -d disable_functions=pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen -d open_basedir=/home/$user/web/$domain:/home/$user/.wp-cli:/home/$user/tmp:/usr/local/bin /usr/local/bin/wp --path=/home/$user/web/$domain/public_html/ $wp_command 2>/home/$user/web/$domain/wp-cli-error.log
 
-echo "WP CLI: Done."
-echo "To see Warning/Error log: "
-echo "cat /home/$user/web/$domain/wp-cli-error.log"
+# echo "WP CLI: Done."
+# echo "To see Warning/Error log: "
+# echo "cat /home/$user/web/$domain/wp-cli-error.log"
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From c8f9601a356df33ba8c13b24ac178352b6e91931 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 17 Jun 2025 15:56:56 +0200
Subject: [PATCH 2221/2300] v-fix-wp-core: BACKUP_DIR="$QUARANTINE_DIR/$DOMAIN/

---
 bin/v-fix-wp-core | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/bin/v-fix-wp-core b/bin/v-fix-wp-core
index 4240b0ab..1dd87b71 100644
--- a/bin/v-fix-wp-core
+++ b/bin/v-fix-wp-core
@@ -17,6 +17,8 @@
 DOMAIN="$1"
 CACHE_DIR="${2-/srv/wp-cache}"       # default cache location
 
+QUARANTINE_DIR="/srv/wp-quarantine"
+
 # Includes
 source $VESTA/func/main.sh
 source $VESTA/conf/vesta.conf
@@ -72,7 +74,7 @@ fi
 
 # backup current core folders
 TIMESTAMP="$(date +%Y%m%d%H%M%S)"
-BACKUP_DIR="$SITE_PATH/backup-core-$TIMESTAMP"
+BACKUP_DIR="$QUARANTINE_DIR/$DOMAIN/backup-core-$TIMESTAMP"
 mkdir -p "$BACKUP_DIR"
 mv "$SITE_PATH/wp-admin"    "$BACKUP_DIR/"
 mv "$SITE_PATH/wp-includes" "$BACKUP_DIR/"

From b13b25602c1901cea81a37ed64516bd64f8f41fe Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 17 Jun 2025 19:29:58 +0200
Subject: [PATCH 2222/2300] Use wp-cli from git repo if available

---
 bin/v-run-wp-cli | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/bin/v-run-wp-cli b/bin/v-run-wp-cli
index 9325d47d..31730f63 100644
--- a/bin/v-run-wp-cli
+++ b/bin/v-run-wp-cli
@@ -58,6 +58,12 @@ if ! command -v wp &> /dev/null; then
     echo "WP CLI installed successfully."
 fi
 
+wpcli="/usr/local/bin/wp"
+
+if [ -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+    wpcli="/usr/local/bin/wp-cli/php/boot-fs.php"
+fi
+
 if [ ! -d "/home/$user/web/$domain/public_html" ]; then
     # echo "Domain doesn't exist";
     exit 1;
@@ -73,7 +79,7 @@ phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
 #----------------------------------------------------------#
 
 cd /home/$USER/web/$domain/public_html
-sudo -u $USER /usr/bin/php$phpver -d disable_functions=pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen -d open_basedir=/home/$user/web/$domain:/home/$user/.wp-cli:/home/$user/tmp:/usr/local/bin /usr/local/bin/wp --path=/home/$user/web/$domain/public_html/ $wp_command 2>/home/$user/web/$domain/wp-cli-error.log
+sudo -u $USER /usr/bin/php$phpver -d disable_functions=pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen -d open_basedir=/home/$user/web/$domain:/home/$user/.wp-cli:/home/$user/tmp:/usr/local/bin $wpcli --path=/home/$user/web/$domain/public_html/ $wp_command 2>/home/$user/web/$domain/wp-cli-error.log
 
 # echo "WP CLI: Done."
 # echo "To see Warning/Error log: "

From e46c7e4e60e3a225777de5c89ad527b4e0c8afd5 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 17 Jun 2025 22:22:16 +0200
Subject: [PATCH 2223/2300] v-get-wp-cli and terminal $COLUMNS fix

---
 bin/v-get-wp-cli | 44 ++++++++++++++++++++++++++++++++++++++++++++
 bin/v-run-wp-cli | 15 +++++++++------
 2 files changed, 53 insertions(+), 6 deletions(-)
 create mode 100644 bin/v-get-wp-cli

diff --git a/bin/v-get-wp-cli b/bin/v-get-wp-cli
new file mode 100644
index 00000000..c097a024
--- /dev/null
+++ b/bin/v-get-wp-cli
@@ -0,0 +1,44 @@
+#!/bin/bash
+# info: Download WP CLI
+# options: NONE
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+if [ ! -f "/usr/local/bin/composer" ]; then
+    echo "= Composer is not installed. Installing..."
+    php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
+    php composer-setup.php --install-dir=/usr/local/bin --filename=composer
+    php -r "unlink('composer-setup.php');"
+    echo "= Composer installed successfully."
+fi
+
+if [ -d "/usr/local/bin/wp-cli" ]; then
+    echo "= Removing old WP CLI..."
+    rm -rf /usr/local/bin/wp-cli
+fi
+
+cd /usr/local/bin
+git clone https://github.com/wp-cli/wp-cli.git
+
+chown -R www-data:www-data wp-cli
+
+cd wp-cli/
+sudo -H -u www-data composer install
+
+# Fix terminal columns issue for WP CLI
+/usr/local/vesta/bin/v-sed '$columns = 80;' "if (file_exists('/usr/local/bin/wp-cli/COLUMNS')) \$columns=intval(file_get_contents('/usr/local/bin/wp-cli/COLUMNS')); else \$columns = 80;" '/usr/local/bin/wp-cli/vendor/wp-cli/php-cli-tools/lib/cli/Shell.php'
+
+echo "= WP CLI installed successfully."
+
+exit 0;
\ No newline at end of file
diff --git a/bin/v-run-wp-cli b/bin/v-run-wp-cli
index 31730f63..1a0e2adc 100644
--- a/bin/v-run-wp-cli
+++ b/bin/v-run-wp-cli
@@ -62,11 +62,8 @@ wpcli="/usr/local/bin/wp"
 
 if [ -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
     wpcli="/usr/local/bin/wp-cli/php/boot-fs.php"
-fi
-
-if [ ! -d "/home/$user/web/$domain/public_html" ]; then
-    # echo "Domain doesn't exist";
-    exit 1;
+    COLUMNS=$(/usr/bin/env stty size 2>/dev/null | awk '{print $2}')
+    echo $COLUMNS > /usr/local/bin/wp-cli/COLUMNS
 fi
 
 mkdir -p /home/$user/.wp-cli
@@ -81,6 +78,12 @@ phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
 cd /home/$USER/web/$domain/public_html
 sudo -u $USER /usr/bin/php$phpver -d disable_functions=pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen -d open_basedir=/home/$user/web/$domain:/home/$user/.wp-cli:/home/$user/tmp:/usr/local/bin $wpcli --path=/home/$user/web/$domain/public_html/ $wp_command 2>/home/$user/web/$domain/wp-cli-error.log
 
+return_code=$?
+
+if [ -f "/usr/local/bin/wp-cli/COLUMNS" ]; then
+    rm /usr/local/bin/wp-cli/COLUMNS
+fi
+
 # echo "WP CLI: Done."
 # echo "To see Warning/Error log: "
 # echo "cat /home/$user/web/$domain/wp-cli-error.log"
@@ -89,4 +92,4 @@ sudo -u $USER /usr/bin/php$phpver -d disable_functions=pcntl_alarm,pcntl_fork,pc
 #                       Vesta                              #
 #----------------------------------------------------------#
 
-exit 0;
+exit $return_code;

From 2e2b4b2f58544c57aeaf2b0cfd6256af3d288195 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Thu, 19 Jun 2025 15:57:50 +0200
Subject: [PATCH 2224/2300] v-backup-user-now skip LA limit

---
 bin/v-backup-user     | 3 +++
 bin/v-backup-user-now | 1 +
 2 files changed, 4 insertions(+)

diff --git a/bin/v-backup-user b/bin/v-backup-user
index 0db5d376..f6629c9e 100755
--- a/bin/v-backup-user
+++ b/bin/v-backup-user
@@ -22,6 +22,9 @@ source $VESTA/func/domain.sh
 source $VESTA/func/db.sh
 source $VESTA/conf/vesta.conf
 
+if [ ! -z "$NOW" ]; then
+    BACKUP_LA_LIMIT=50
+fi
 
 #----------------------------------------------------------#
 #                    Verifications                         #
diff --git a/bin/v-backup-user-now b/bin/v-backup-user-now
index 3a20b4ce..10eecd87 100644
--- a/bin/v-backup-user-now
+++ b/bin/v-backup-user-now
@@ -1,5 +1,6 @@
 #!/bin/bash
 
 export ALLOW_BACKUP_ANYTIME='yes'
+export NOW='yes'
 
 nice -n 19 ionice -c 3 /usr/local/vesta/bin/v-backup-user $1

From 761da8150b869df8392d2644a9a9e23a32a0cace Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 20 Jun 2025 17:54:04 +0200
Subject: [PATCH 2225/2300] Visual improvements for v-change-wp-admins-pass

---
 bin/v-change-wp-admins-pass | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/bin/v-change-wp-admins-pass b/bin/v-change-wp-admins-pass
index 0249efb7..44870b58 100644
--- a/bin/v-change-wp-admins-pass
+++ b/bin/v-change-wp-admins-pass
@@ -65,11 +65,12 @@ echo "For each admin choose: (d) delete, (c) change password, (s) skip."
 echo "$ADMIN_LIST_CSV" | while IFS=',' read -r ID LOGIN EMAIL; do
     [ -n "$EMAIL" ] && TARGET="$LOGIN <$EMAIL>" || TARGET="$LOGIN"
     while true; do
-        read -r -p "Action for $TARGET [d/c/s]? " ACT < /dev/tty
+        echo "-------------------------------------"
+        read -r -p "Action for \"$TARGET\" [d/c/s]? " ACT < /dev/tty
         case "$ACT" in
             [Dd]* )
-                read -r -p "Really DELETE $TARGET? (y/n) " CONF < /dev/tty
-                if [[ "$CONF" =~ ^[Yy]$ ]]; then
+                read -r -p "Really DELETE \"$TARGET\" ?   ('y' or ENTER for yes / 'n' for no) " CONF < /dev/tty
+                if [[ ! "$CONF" =~ ^[Nn]$ ]]; then
                     # build an array of OTHER admin usernames
                     mapfile -t OTHER_USERS < <(echo "$ADMIN_LIST_CSV" | awk -F',' -v cur="$ID" '$1!=cur {print $2}')
                     if [ "${#OTHER_USERS[@]}" -eq 0 ]; then

From 294c8ba516a3242d444b19c0156b874c9eb77027 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 21 Jun 2025 15:57:21 +0200
Subject: [PATCH 2226/2300] Setting chmod 600 for all php files

---
 ...hange-database-password-for-all-wordpress} |  2 +-
 ... v-change-database-password-for-wordpress} | 11 +++--
 ...ns-pass => v-change-wordpress-admins-pass} | 16 +++++---
 bin/{v-desinfect-wp => v-desinfect-wordpress} | 18 ++------
 bin/v-fix-user-permissions                    |  1 +
 bin/v-fix-website-permissions                 | 26 ++++++++++--
 ...v-fix-website-permissions-for-all-websites | 41 +++++++++++++++++++
 bin/{v-fix-wp-core => v-fix-wordpress-core}   |  0
 bin/v-unlock-wordpress                        |  2 +
 9 files changed, 90 insertions(+), 27 deletions(-)
 rename bin/{v-change-db-password-to-all-wordpress => v-change-database-password-for-all-wordpress} (93%)
 rename bin/{v-change-db-password-to-wordpress => v-change-database-password-for-wordpress} (92%)
 rename bin/{v-change-wp-admins-pass => v-change-wordpress-admins-pass} (93%)
 rename bin/{v-desinfect-wp => v-desinfect-wordpress} (77%)
 create mode 100644 bin/v-fix-website-permissions-for-all-websites
 rename bin/{v-fix-wp-core => v-fix-wordpress-core} (100%)

diff --git a/bin/v-change-db-password-to-all-wordpress b/bin/v-change-database-password-for-all-wordpress
similarity index 93%
rename from bin/v-change-db-password-to-all-wordpress
rename to bin/v-change-database-password-for-all-wordpress
index b31edb80..ad922cc2 100644
--- a/bin/v-change-db-password-to-all-wordpress
+++ b/bin/v-change-database-password-for-all-wordpress
@@ -26,7 +26,7 @@ for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
 
     for domain in $(/usr/local/vesta/bin/v-list-web-domains $user plain |cut -f 1); do
         if [ -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
-            /usr/local/vesta/bin/v-change-db-password-to-wordpress $domain
+            /usr/local/vesta/bin/v-change-database-password-for-wordpress $domain $user
             echo "--------------------------------"
         fi
     done
diff --git a/bin/v-change-db-password-to-wordpress b/bin/v-change-database-password-for-wordpress
similarity index 92%
rename from bin/v-change-db-password-to-wordpress
rename to bin/v-change-database-password-for-wordpress
index d7ce1782..e318edde 100644
--- a/bin/v-change-db-password-to-wordpress
+++ b/bin/v-change-database-password-for-wordpress
@@ -1,8 +1,8 @@
 #!/bin/bash
-# info: change db password to wordpress database
+# info: change database password for wordpress
 # options:
 #
-# The command is used for changing db password to wordpress database.
+# The command is used for changing database password for wordpress.
 
 
 #----------------------------------------------------------#
@@ -21,7 +21,12 @@ source /etc/profile
 # Argument definition
 domain=$1
 
-user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+# Check if number of arguments is 2
+if [ $# -eq 2 ]; then
+    user=$2
+else
+    user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+fi
 USER=$user
 
 if [ -z "$user" ]; then
diff --git a/bin/v-change-wp-admins-pass b/bin/v-change-wordpress-admins-pass
similarity index 93%
rename from bin/v-change-wp-admins-pass
rename to bin/v-change-wordpress-admins-pass
index 44870b58..9028cd10 100644
--- a/bin/v-change-wp-admins-pass
+++ b/bin/v-change-wordpress-admins-pass
@@ -59,14 +59,14 @@ echo "$ADMIN_LIST_CSV" | while IFS=',' read -r PID PLOGIN PEMAIL; do
 done
 
 echo
-echo "For each admin choose: (d) delete, (c) change password, (s) skip."
+echo "For each admin choose: (d) delete, (c) change password, (s) skip, (x) exit."
 
 # interactive loop
-echo "$ADMIN_LIST_CSV" | while IFS=',' read -r ID LOGIN EMAIL; do
+while IFS=',' read -r ID LOGIN EMAIL; do
     [ -n "$EMAIL" ] && TARGET="$LOGIN <$EMAIL>" || TARGET="$LOGIN"
     while true; do
         echo "-------------------------------------"
-        read -r -p "Action for \"$TARGET\" [d/c/s]? " ACT < /dev/tty
+        read -r -p "Action for \"$TARGET\" [d/c/s/x]? " ACT < /dev/tty
         case "$ACT" in
             [Dd]* )
                 read -r -p "Really DELETE \"$TARGET\" ?   ('y' or ENTER for yes / 'n' for no) " CONF < /dev/tty
@@ -109,15 +109,20 @@ echo "$ADMIN_LIST_CSV" | while IFS=',' read -r ID LOGIN EMAIL; do
                 echo "Skipping $TARGET."
                 break
                 ;;
-            * ) echo "Please answer d, c, or s." ;;
+            [Xx]* )
+                echo "Exiting."
+                exit 0
+                ;;
+            * ) echo "Please answer d, c, s, or x." ;;
         esac
     done
-done
+done <<< "$ADMIN_LIST_CSV"
 
 #----------------------------------------------------------#
 #        flush cache and refresh all security salts        #
 #----------------------------------------------------------#
 
+echo "-------------------------------------"
 echo
 echo "Flushing cache and refreshing salts..."
 
@@ -129,4 +134,5 @@ echo "Cache flushed and salts refreshed."
 
 echo
 echo "Done."
+
 exit 0
diff --git a/bin/v-desinfect-wp b/bin/v-desinfect-wordpress
similarity index 77%
rename from bin/v-desinfect-wp
rename to bin/v-desinfect-wordpress
index e1ddc65d..4de2f779 100644
--- a/bin/v-desinfect-wp
+++ b/bin/v-desinfect-wordpress
@@ -27,25 +27,15 @@ if [ -z "$user" ]; then
     exit 1
 fi
 
-# choose the correct admin-password script (with or without the “s”)
-if [ -x /usr/local/vesta/bin/v-change-wp-admin-pass ]; then
-    admin_pass_script="/usr/local/vesta/bin/v-change-wp-admin-pass"
-elif [ -x /usr/local/vesta/bin/v-change-wp-admins-pass ]; then
-    admin_pass_script="/usr/local/vesta/bin/v-change-wp-admins-pass"
-else
-    admin_pass_script=""
-fi
-
 # absolute paths to maintenance scripts, in desired order
 declare -a tasks=(
-    "/usr/local/vesta/bin/v-change-db-password-to-wordpress"
-    "/usr/local/vesta/bin/v-fix-wp-core"
+    "/usr/local/vesta/bin/v-change-database-password-for-wordpress"
+    "/usr/local/vesta/bin/v-change-wordpress-admins-pass"
+    "/usr/local/vesta/bin/v-fix-wordpress-core"
     "/usr/local/vesta/bin/v-wf-malware-hyperscan-with-remediate"
+    "INTERACTIVE=1 /usr/local/vesta/bin/v-wf-malware-hyperscan-with-remediate"
 )
 
-# append the admin script if we found one
-[ -n "$admin_pass_script" ] && tasks+=("$admin_pass_script")
-
 # -------------------------------------------------------- #
 #                    execution strategy                    #
 # -------------------------------------------------------- #
diff --git a/bin/v-fix-user-permissions b/bin/v-fix-user-permissions
index e55b5e0f..991ada62 100644
--- a/bin/v-fix-user-permissions
+++ b/bin/v-fix-user-permissions
@@ -52,6 +52,7 @@ find /home/$user/conf/ -type d -exec chown root:root {} \;
 find /home/$user/web/*/public_html/ -type d -exec chmod 755 {} +
 find /home/$user/web/*/public_html/ -type f -exec chmod 644 {} +
 find /home/$user/web/*/public_html/ -exec chown $user:$user {} \;
+find /home/$user/web/*/ -name "*.php" -type f -exec chmod 600 {} +
 
 echo "Done, permissions fixed for user: $user"
 
diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index a63954eb..c79fe443 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -18,7 +18,13 @@ source /etc/profile
 # Argument definition
 domain=$1
 
-user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+# Check if number of arguments is 2
+if [ $# -eq 2 ]; then
+    user=$2
+else
+    user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+fi
+USER=$user
 
 # Includes
 source /usr/local/vesta/func/main.sh
@@ -27,8 +33,6 @@ if [ -z "$user" ]; then
     check_result $E_NOTEXIST "domain $domain doesn't exist"
 fi
 
-USER=$user
-
 #----------------------------------------------------------#
 #                    Verifications                         #
 #----------------------------------------------------------#
@@ -54,14 +58,28 @@ fi
 # Going to domain directory
 cd /home/$USER/web/$domain
 
+# Ownership check
+if [ -f "public_html/index.php" ]; then
+    owner=$(stat -c '%U' "public_html/index.php")
+    if [ "$owner" = "root" ] || [ "$owner" = "www-data" ]; then
+        echo "Skipping permission fix for $domain, because v-lock-wordpress is used (index.php is owned by $owner)"
+        exit 1
+    fi
+fi
+
+
 echo "Updating permissions for /home/$USER/web/$domain/public_html/"
 find public_html/ -type d -exec chmod 755 {} +
 find public_html/ -type f -exec chmod 644 {} +
 chown -R $USER:$USER public_html/
 
+# Setting chmod 600 for all php files
+echo "= Setting chmod 600 for all php files"
+find -name "*.php" -type f -exec chmod 600 {} +
+
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#
 echo "Permissions for $domain have been successfully updated."
 
-exit
+exit 0
diff --git a/bin/v-fix-website-permissions-for-all-websites b/bin/v-fix-website-permissions-for-all-websites
new file mode 100644
index 00000000..9b1501bd
--- /dev/null
+++ b/bin/v-fix-website-permissions-for-all-websites
@@ -0,0 +1,41 @@
+#!/bin/bash
+# info: fix website permissions for all websites
+# options:
+#
+# The command is used for fixing website permissions for all websites on the server.
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Importing system variables
+source /etc/profile
+
+# Includes
+source $VESTA/func/main.sh
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
+    if [ ! -f "/usr/local/vesta/data/users/$user/user.conf" ]; then
+        continue;
+    fi
+
+    for domain in $(/usr/local/vesta/bin/v-list-web-domains $user plain |cut -f 1); do
+        /usr/local/vesta/bin/v-fix-website-permissions $domain $user
+        echo "--------------------------------"
+    done
+
+done
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit
diff --git a/bin/v-fix-wp-core b/bin/v-fix-wordpress-core
similarity index 100%
rename from bin/v-fix-wp-core
rename to bin/v-fix-wordpress-core
diff --git a/bin/v-unlock-wordpress b/bin/v-unlock-wordpress
index 1e2cccc6..4a2c42c3 100644
--- a/bin/v-unlock-wordpress
+++ b/bin/v-unlock-wordpress
@@ -58,6 +58,8 @@ chown -R $user:$user public_html/
 
 rm public_html/wp-content/uploads/.htaccess
 
+/usr/local/vesta/bin/v-fix-website-permissions $domain
+
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#

From 97e5fc06772b9dec38f9989ac5eff7c91e5c6674 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 21 Jun 2025 17:26:32 +0200
Subject: [PATCH 2227/2300] v-change-database-password-for-all-wordpress: Using
 existing password for $db_user

---
 ...change-database-password-for-all-wordpress |  5 +++++
 bin/v-change-database-password-for-wordpress  | 22 +++++++++++++++++--
 2 files changed, 25 insertions(+), 2 deletions(-)

diff --git a/bin/v-change-database-password-for-all-wordpress b/bin/v-change-database-password-for-all-wordpress
index ad922cc2..e129497c 100644
--- a/bin/v-change-database-password-for-all-wordpress
+++ b/bin/v-change-database-password-for-all-wordpress
@@ -19,6 +19,8 @@ source $VESTA/func/main.sh
 #                       Action                             #
 #----------------------------------------------------------#
 
+touch /root/remember-db-user-pass.txt
+
 for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
     if [ ! -f "/usr/local/vesta/data/users/$user/user.conf" ]; then
         continue;
@@ -33,6 +35,9 @@ for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
 
 done
 
+# cat /root/remember-db-user-pass.txt
+rm /root/remember-db-user-pass.txt
+
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#
diff --git a/bin/v-change-database-password-for-wordpress b/bin/v-change-database-password-for-wordpress
index e318edde..dd7a3a91 100644
--- a/bin/v-change-database-password-for-wordpress
+++ b/bin/v-change-database-password-for-wordpress
@@ -69,10 +69,28 @@ if [ -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
         chown $user:$user $wp_config_path
     fi
     db_name=$(grep "DB_NAME" $wp_config_path | grep -oP "define\s*\(\s*'DB_NAME'\s*,\s*'\K[^']+")
-    new_password=$(generate_password)
+    db_user=$(grep "DB_USER" $wp_config_path | grep -oP "define\s*\(\s*'DB_USER'\s*,\s*'\K[^']+")
+    new_password=''
+    found_existing_password=0
+    if [ -f "/root/remember-db-user-pass.txt" ]; then
+        db_user_pass=$(grep "$db_user:" /root/remember-db-user-pass.txt)
+        if [ -n "$db_user_pass" ]; then
+            new_password=$(echo "$db_user_pass" | cut -d':' -f2)
+            echo "= Using existing password for $db_user"
+            found_existing_password=1
+        fi
+    fi
+
+    if [ -z "$new_password" ]; then
+        new_password=$(generate_password)
+    fi
+
     echo "DB name: $db_name"
+    echo "DB user: $db_user"
     echo "New DB password: $new_password"
-    # echo "executing: /usr/local/vesta/bin/v-change-database-password \"$user\" \"$db_name\" \"$new_password\""
+    if [ $found_existing_password -eq 0 ] && [ -f "/root/remember-db-user-pass.txt" ]; then
+        echo "$db_user:$new_password" >> /root/remember-db-user-pass.txt
+    fi
     /usr/local/vesta/bin/v-change-database-password "$user" "$db_name" "$new_password"
     if [ $? -ne 0 ]; then
         echo "*************** ERROR: Failed to change database password ***************"

From fd6eb44bae7fa3852f7465084a57a1d485fca533 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 22 Jun 2025 22:45:19 +0200
Subject: [PATCH 2228/2300] .gitignore: exclude data, conf, log

---
 .gitignore | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.gitignore b/.gitignore
index 6701a887..fe0574ad 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,6 @@
 *.gz
 .vscode
 .DS_Store
+data
+conf
+log
\ No newline at end of file

From d37473b5e86b4f890b276d2d2f7df19e3e131a8c Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 22 Jun 2025 23:53:53 +0200
Subject: [PATCH 2229/2300] Using v-wp-cli in
 v-change-wordpress-admin-passwords

---
 ...ins-pass => v-change-wordpress-admin-passwords} | 14 ++------------
 bin/v-desinfect-wordpress                          |  2 +-
 2 files changed, 3 insertions(+), 13 deletions(-)
 rename bin/{v-change-wordpress-admins-pass => v-change-wordpress-admin-passwords} (89%)

diff --git a/bin/v-change-wordpress-admins-pass b/bin/v-change-wordpress-admin-passwords
similarity index 89%
rename from bin/v-change-wordpress-admins-pass
rename to bin/v-change-wordpress-admin-passwords
index 9028cd10..5a6a4e3f 100644
--- a/bin/v-change-wordpress-admins-pass
+++ b/bin/v-change-wordpress-admin-passwords
@@ -5,6 +5,7 @@
 # d  → delete user  (with content reassignment)
 # c  → change password (random 10-char alnum)
 # s  → skip
+# x  → exit
 
 #----------------------------------------------------------#
 #                    Variable & Function                   #
@@ -22,19 +23,8 @@ USER="$(/usr/local/vesta/bin/v-search-domain-owner "$DOMAIN")"
 WP_PATH="/home/$USER/web/$DOMAIN/public_html"
 [ ! -f "$WP_PATH/wp-config.php" ] && { echo "WordPress is not installed on this domain."; exit 1; }
 
-# ensure WP-CLI binary
-if ! command -v wp >/dev/null 2>&1; then
-    echo "WP-CLI is not installed, installing..."
-    wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
-    chmod +x /usr/local/bin/wp
-fi
-
-PHPVER=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$DOMAIN")
-PHP_BIN=$(command -v "php$PHPVER" 2>/dev/null || command -v php)
-[ -z "$PHP_BIN" ] && { echo "Could not find a PHP binary."; exit 1; }
-
 # WP-CLI wrapper
-WP_RUN=(sudo -u "$USER" "$PHP_BIN" /usr/local/bin/wp --skip-plugins --skip-themes)
+WP_RUN=(/usr/local/vesta/bin/v-run-wp-cli $DOMAIN --skip-plugins --skip-themes)
 
 # random 10-char password
 gen_pass() { tr -dc 'A-Za-z0-9' </dev/urandom | head -c 10; }
diff --git a/bin/v-desinfect-wordpress b/bin/v-desinfect-wordpress
index 4de2f779..04583c1e 100644
--- a/bin/v-desinfect-wordpress
+++ b/bin/v-desinfect-wordpress
@@ -30,7 +30,7 @@ fi
 # absolute paths to maintenance scripts, in desired order
 declare -a tasks=(
     "/usr/local/vesta/bin/v-change-database-password-for-wordpress"
-    "/usr/local/vesta/bin/v-change-wordpress-admins-pass"
+    "/usr/local/vesta/bin/v-change-wordpress-admin-passwords"
     "/usr/local/vesta/bin/v-fix-wordpress-core"
     "/usr/local/vesta/bin/v-wf-malware-hyperscan-with-remediate"
     "INTERACTIVE=1 /usr/local/vesta/bin/v-wf-malware-hyperscan-with-remediate"

From 5ee72684abc4049173fdf89d286aa31bce6475a9 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 23 Jun 2025 15:55:28 +0200
Subject: [PATCH 2230/2300] v-change-wordpress-admin-passwords: default = y

---
 bin/v-change-wordpress-admin-passwords | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-change-wordpress-admin-passwords b/bin/v-change-wordpress-admin-passwords
index 5a6a4e3f..c51c9270 100644
--- a/bin/v-change-wordpress-admin-passwords
+++ b/bin/v-change-wordpress-admin-passwords
@@ -59,7 +59,7 @@ while IFS=',' read -r ID LOGIN EMAIL; do
         read -r -p "Action for \"$TARGET\" [d/c/s/x]? " ACT < /dev/tty
         case "$ACT" in
             [Dd]* )
-                read -r -p "Really DELETE \"$TARGET\" ?   ('y' or ENTER for yes / 'n' for no) " CONF < /dev/tty
+                read -r -p "Really DELETE \"$TARGET\" ?   (y/n, default: y) " CONF < /dev/tty
                 if [[ ! "$CONF" =~ ^[Nn]$ ]]; then
                     # build an array of OTHER admin usernames
                     mapfile -t OTHER_USERS < <(echo "$ADMIN_LIST_CSV" | awk -F',' -v cur="$ID" '$1!=cur {print $2}')

From 09465e5fba65dbff78f89cbc39991ff669c42983 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 23 Jun 2025 21:53:55 +0200
Subject: [PATCH 2231/2300] v-change-database-password-for-all-wordpress: first
 optional argument to specify a $user

---
 bin/v-change-database-password-for-all-wordpress | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/bin/v-change-database-password-for-all-wordpress b/bin/v-change-database-password-for-all-wordpress
index e129497c..2741e960 100644
--- a/bin/v-change-database-password-for-all-wordpress
+++ b/bin/v-change-database-password-for-all-wordpress
@@ -15,6 +15,11 @@ source /etc/profile
 # Includes
 source $VESTA/func/main.sh
 
+only_user='';
+if [ ! -z "$1" ]; then
+    only_user=$1
+fi
+
 #----------------------------------------------------------#
 #                       Action                             #
 #----------------------------------------------------------#
@@ -26,6 +31,12 @@ for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
         continue;
     fi
 
+    if [ ! -z "$only_user" ]; then
+        if [ "$only_user" != "$user" ]; then
+            continue;
+        fi
+    fi
+
     for domain in $(/usr/local/vesta/bin/v-list-web-domains $user plain |cut -f 1); do
         if [ -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
             /usr/local/vesta/bin/v-change-database-password-for-wordpress $domain $user
@@ -33,6 +44,10 @@ for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
         fi
     done
 
+    if [ ! -z "$only_user" ]; then
+        break;
+    fi
+
 done
 
 # cat /root/remember-db-user-pass.txt

From f77f8e8b784e6a138d90a61cdbf7e7ea5f83eff3 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 24 Jun 2025 15:37:21 +0200
Subject: [PATCH 2232/2300] $SKIP_OWNERSHIP_CHECK in v-fix-website-permissions,
 v-fix-wordpress-core

---
 bin/v-fix-website-permissions | 2 +-
 bin/v-fix-wordpress-core      | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index c79fe443..0131b7c8 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -59,7 +59,7 @@ fi
 cd /home/$USER/web/$domain
 
 # Ownership check
-if [ -f "public_html/index.php" ]; then
+if [ -z "$SKIP_OWNERSHIP_CHECK" ] && [ -f "public_html/index.php" ]; then
     owner=$(stat -c '%U' "public_html/index.php")
     if [ "$owner" = "root" ] || [ "$owner" = "www-data" ]; then
         echo "Skipping permission fix for $domain, because v-lock-wordpress is used (index.php is owned by $owner)"
diff --git a/bin/v-fix-wordpress-core b/bin/v-fix-wordpress-core
index 1dd87b71..2549017b 100644
--- a/bin/v-fix-wordpress-core
+++ b/bin/v-fix-wordpress-core
@@ -84,7 +84,7 @@ for f in "$SITE_PATH"/*.php; do
     mv "$f" "$BACKUP_DIR/"
 done
 
-chown -R www-data:www-data "$BACKUP_DIR"
+# chown -R www-data:www-data "$BACKUP_DIR"
 check_result $? "backup failed" > /dev/null
 echo "Old core folders moved to $BACKUP_DIR"
 
@@ -100,8 +100,8 @@ for corephp in "$CACHE_PATH"/*.php; do
 done
 
 # fix permissions
-/usr/local/vesta/bin/v-fix-website-permissions $DOMAIN
-chown -R www-data:www-data "$BACKUP_DIR"
+SKIP_OWNERSHIP_CHECK=1 /usr/local/vesta/bin/v-fix-website-permissions $DOMAIN
+# chown -R www-data:www-data "$BACKUP_DIR"
 
 echo "Done, core WP files, wp-admin and wp-includes replaced for $DOMAIN"
 exit

From 451c9944b90f4d48ffb10e9788e827f6dd768a0b Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 25 Jun 2025 17:32:23 +0200
Subject: [PATCH 2233/2300] v-fix-wordpress-core: move .user.ini

---
 bin/v-fix-wordpress-core | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-fix-wordpress-core b/bin/v-fix-wordpress-core
index 2549017b..7a511747 100644
--- a/bin/v-fix-wordpress-core
+++ b/bin/v-fix-wordpress-core
@@ -83,6 +83,9 @@ for f in "$SITE_PATH"/*.php; do
     [[ $(basename "$f") == "wp-config.php" ]] && continue
     mv "$f" "$BACKUP_DIR/"
 done
+if [ -f "$SITE_PATH/.user.ini" ]; then
+    mv "$SITE_PATH/.user.ini" "$BACKUP_DIR/"
+fi
 
 # chown -R www-data:www-data "$BACKUP_DIR"
 check_result $? "backup failed" > /dev/null

From e8b5b5a836662d2c07f2d0fc3cf704d585a504bc Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Thu, 26 Jun 2025 18:05:11 +0200
Subject: [PATCH 2234/2300] v-update-document-errors-files

---
 bin/v-update-document-errors-files | 48 ++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 bin/v-update-document-errors-files

diff --git a/bin/v-update-document-errors-files b/bin/v-update-document-errors-files
new file mode 100644
index 00000000..c044a80a
--- /dev/null
+++ b/bin/v-update-document-errors-files
@@ -0,0 +1,48 @@
+#!/bin/bash
+# info: fix website permissions for all websites
+# options:
+#
+# The command is used for fixing website permissions for all websites on the server.
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Importing system variables
+source /etc/profile
+
+# Includes
+source $VESTA/func/main.sh
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
+    if [ ! -f "/usr/local/vesta/data/users/$user/user.conf" ]; then
+        continue;
+    fi
+
+    for domain in $(/usr/local/vesta/bin/v-list-web-domains $user plain |cut -f 1); do
+        cp /usr/local/vesta/data/templates/web/skel/document_errors/403.html /home/$user/web/$domain/document_errors/403.html
+        cp /usr/local/vesta/data/templates/web/skel/document_errors/404.html /home/$user/web/$domain/document_errors/404.html
+        cp /usr/local/vesta/data/templates/web/skel/document_errors/50x.html /home/$user/web/$domain/document_errors/50x.html
+        sed -i "s/%domain%/$domain/g" /home/$user/web/$domain/document_errors/403.html
+        sed -i "s/%domain%/$domain/g" /home/$user/web/$domain/document_errors/404.html
+        sed -i "s/%domain%/$domain/g" /home/$user/web/$domain/document_errors/50x.html
+        chown $user:$user /home/$user/web/$domain/document_errors/*
+        chmod 644 /home/$user/web/$domain/document_errors/*
+    done
+
+done
+
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit

From 6cce5ecadda43c4ac94a1a094ed67111ff8fde0d Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Thu, 26 Jun 2025 22:26:14 +0200
Subject: [PATCH 2235/2300] chmod .env files to 600

---
 bin/v-fix-website-permissions | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 0131b7c8..7dd36a62 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -76,6 +76,7 @@ chown -R $USER:$USER public_html/
 # Setting chmod 600 for all php files
 echo "= Setting chmod 600 for all php files"
 find -name "*.php" -type f -exec chmod 600 {} +
+find -name ".env" -type f -exec chmod 600 {} +
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 1567383b4923b9f2ac567223e5ccfdd9e2f996a8 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 28 Jun 2025 16:49:18 +0200
Subject: [PATCH 2236/2300] v-run-wp-cli: Parameter 'PHP' to force specified
 PHP version

---
 bin/v-run-wp-cli | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/bin/v-run-wp-cli b/bin/v-run-wp-cli
index 1a0e2adc..d03afc6a 100644
--- a/bin/v-run-wp-cli
+++ b/bin/v-run-wp-cli
@@ -69,7 +69,11 @@ fi
 mkdir -p /home/$user/.wp-cli
 chown $user:$user /home/$user/.wp-cli
 
-phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
+if [ -z "$PHP" ]; then
+    phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
+else
+    phpver=$PHP
+fi
 
 #----------------------------------------------------------#
 #                       Action                             #

From 2fd60fc29d7ca08dc0bbe03b8b09e1ed0053e972 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 29 Jun 2025 17:16:50 +0200
Subject: [PATCH 2237/2300] VERBOSE_MODE in v-run-wp-cli

---
 bin/v-run-wp-cli | 3 +++
 func/main.sh     | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/bin/v-run-wp-cli b/bin/v-run-wp-cli
index d03afc6a..ef4f6e10 100644
--- a/bin/v-run-wp-cli
+++ b/bin/v-run-wp-cli
@@ -36,10 +36,13 @@ fi
 #                    Verifications                         #
 #----------------------------------------------------------#
 
+VERBOSE_MODE=1
+
 check_args '2' "$#" 'DOMAIN WP_CLI_COMMAND'
 is_format_valid 'domain'
 is_object_valid 'user' 'USER' "$user"
 is_object_unsuspended 'user' 'USER' "$user"
+is_object_unsuspended 'web' 'DOMAIN' "$domain"
 
 if [ ! -d "/home/$user" ]; then
     # echo "User doesn't exist";
diff --git a/func/main.sh b/func/main.sh
index 03773920..27c4dcbe 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -254,6 +254,9 @@ is_object_unsuspended() {
         spnd=$(grep "$2='$3'" $USER_DATA/$1.conf |grep "SUSPENDED='yes'")
     fi
     if [ ! -z "$spnd" ]; then
+        if [ ! -z "$VERBOSE_MODE" ]; then
+            echo "Error: $(basename $1) $3 is suspended"
+        fi
         check_result $E_SUSPENDED "$(basename $1) $3 is suspended"
     fi
 }

From b8b75f0dde93a0304b6306c83664f97a33a3771d Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 29 Jun 2025 00:59:18 +0200
Subject: [PATCH 2238/2300] v-change-wordpress-admin-passwords

---
 bin/v-change-wordpress-admin-passwords | 46 ++++++++++++++++++++++----
 1 file changed, 39 insertions(+), 7 deletions(-)

diff --git a/bin/v-change-wordpress-admin-passwords b/bin/v-change-wordpress-admin-passwords
index c51c9270..89122a2d 100644
--- a/bin/v-change-wordpress-admin-passwords
+++ b/bin/v-change-wordpress-admin-passwords
@@ -25,6 +25,13 @@ WP_PATH="/home/$USER/web/$DOMAIN/public_html"
 
 # WP-CLI wrapper
 WP_RUN=(/usr/local/vesta/bin/v-run-wp-cli $DOMAIN --skip-plugins --skip-themes)
+return_code=$?
+
+if [ $return_code -ne 0 ]; then
+    echo "WP-CLI error:"
+    cat /home/$USER/web/$DOMAIN/wp-cli-error.log
+    exit $return_code
+fi
 
 # random 10-char password
 gen_pass() { tr -dc 'A-Za-z0-9' </dev/urandom | head -c 10; }
@@ -38,9 +45,13 @@ echo
 echo "WordPress administrators for $DOMAIN:"
 echo "-------------------------------------"
 
+if [ -f /home/$USER/web/$DOMAIN/wp-admin-password-change.txt ]; then
+    rm /home/$USER/web/$DOMAIN/wp-admin-password-change.txt
+fi
+
 ADMIN_LIST_CSV=$("${WP_RUN[@]}" user list --role=administrator \
                      --fields=ID,user_login,user_email \
-                     --format=csv 2>/dev/null | tail -n +2)
+                     --format=csv --skip-plugins --skip-themes 2>/dev/null | tail -n +2)
 [ -z "$ADMIN_LIST_CSV" ] && { echo "No administrator accounts found."; exit 0; }
 
 printf "%-6s %-20s %s\n" "ID" "Username" "Email"
@@ -59,7 +70,8 @@ while IFS=',' read -r ID LOGIN EMAIL; do
         read -r -p "Action for \"$TARGET\" [d/c/s/x]? " ACT < /dev/tty
         case "$ACT" in
             [Dd]* )
-                read -r -p "Really DELETE \"$TARGET\" ?   (y/n, default: y) " CONF < /dev/tty
+                # read -r -p "Really DELETE \"$TARGET\" ?   (y/n, default: y) " CONF < /dev/tty
+                CONF="y"
                 if [[ ! "$CONF" =~ ^[Nn]$ ]]; then
                     # build an array of OTHER admin usernames
                     mapfile -t OTHER_USERS < <(echo "$ADMIN_LIST_CSV" | awk -F',' -v cur="$ID" '$1!=cur {print $2}')
@@ -70,7 +82,7 @@ while IFS=',' read -r ID LOGIN EMAIL; do
                     DEFAULT_USER="${OTHER_USERS[0]}"
                     echo "Available admin usernames for reassignment: ${OTHER_USERS[*]}"
                     while true; do
-                        read -r -p "Reassign content to which username? [default $DEFAULT_USER] " REASSIGN < /dev/tty
+                        read -r -p "Reassign content to which username? [default: $DEFAULT_USER] " REASSIGN < /dev/tty
                         REASSIGN=${REASSIGN:-$DEFAULT_USER}
                         if printf '%s\n' "${OTHER_USERS[@]}" | grep -qx "$REASSIGN"; then
                             break
@@ -79,8 +91,13 @@ while IFS=',' read -r ID LOGIN EMAIL; do
                         fi
                     done
                     # delete by username, reassign by username
-                    "${WP_RUN[@]}" user delete "$LOGIN" --reassign="$REASSIGN" --yes >/dev/null 2>&1
-                    echo "$TARGET deleted (content reassigned to $REASSIGN)."
+                    "${WP_RUN[@]}" user delete "$LOGIN" --reassign="$REASSIGN" --yes --skip-plugins --skip-themes
+                    if [ $? -eq 0 ]; then
+                        echo "$TARGET deleted (content reassigned to $REASSIGN)."
+                    else
+                        cat /home/$USER/web/$DOMAIN/wp-cli-error.log
+                        echo "Failed to delete $TARGET."
+                    fi
                 else
                     echo "Deletion cancelled."
                 fi
@@ -88,9 +105,14 @@ while IFS=',' read -r ID LOGIN EMAIL; do
                 ;;
             [Cc]* )
                 NEW_PASS=$(gen_pass)
-                if "${WP_RUN[@]}" user update "$LOGIN" --user_pass="$NEW_PASS" --quiet; then
-                    echo "Password for $TARGET changed to: $NEW_PASS"
+                "${WP_RUN[@]}" user update "$LOGIN" --user_pass="$NEW_PASS" --skip-plugins --skip-themes
+                if [ $? -eq 0 ]; then
+                    echo "Password for username '$TARGET' changed to: $NEW_PASS"
+                    echo "Password for username '$TARGET' changed to: $NEW_PASS" >> /home/$USER/web/$DOMAIN/wp-admin-password-change.txt
+                    chown $USER:$USER /home/$USER/web/$DOMAIN/wp-admin-password-change.txt
+                    chmod 600 /home/$USER/web/$DOMAIN/wp-admin-password-change.txt
                 else
+                    cat /home/$USER/web/$DOMAIN/wp-cli-error.log
                     echo "Failed to change password for $TARGET."
                 fi
                 break
@@ -125,4 +147,14 @@ echo "Cache flushed and salts refreshed."
 echo
 echo "Done."
 
+if [ -f /home/$USER/web/$DOMAIN/wp-admin-password-change.txt ]; then
+    echo "-------------------------------------"
+    echo "For website $DOMAIN - new wp-admin passwords have been set."
+    echo "-------------------------------------"
+    cat /home/$USER/web/$DOMAIN/wp-admin-password-change.txt
+    echo "-------------------------------------"
+    echo ""
+    read -r -p "== Press Enter to continue..."
+fi
+
 exit 0

From d20bc94866c2891ff96e669cc9143f9972a9a196 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 1 Jul 2025 10:03:32 +0200
Subject: [PATCH 2239/2300] v-fix-website-permissions: chown for .php and .env
 files

---
 bin/v-fix-website-permissions | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 7dd36a62..3a73d13a 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -77,6 +77,8 @@ chown -R $USER:$USER public_html/
 echo "= Setting chmod 600 for all php files"
 find -name "*.php" -type f -exec chmod 600 {} +
 find -name ".env" -type f -exec chmod 600 {} +
+find -name "*.php" -type f -exec chown $USER:$USER {} +
+find -name ".env" -type f -exec chown $USER:$USER {} +
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 54abc58c4e96c45173554dc351e94f8f11c8796d Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Thu, 10 Jul 2025 17:49:15 +0200
Subject: [PATCH 2240/2300] v-change-wordpress-admin-passwords: accept integer
 as id of user, support for custom php version

---
 bin/v-change-wordpress-admin-passwords | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/bin/v-change-wordpress-admin-passwords b/bin/v-change-wordpress-admin-passwords
index 89122a2d..c81cbfcb 100644
--- a/bin/v-change-wordpress-admin-passwords
+++ b/bin/v-change-wordpress-admin-passwords
@@ -24,7 +24,12 @@ WP_PATH="/home/$USER/web/$DOMAIN/public_html"
 [ ! -f "$WP_PATH/wp-config.php" ] && { echo "WordPress is not installed on this domain."; exit 1; }
 
 # WP-CLI wrapper
-WP_RUN=(/usr/local/vesta/bin/v-run-wp-cli $DOMAIN --skip-plugins --skip-themes)
+if [ ! -z "$PHP" ]; then
+    WP_RUN=(PHP=$PHP /usr/local/vesta/bin/v-run-wp-cli $DOMAIN --skip-plugins --skip-themes)
+else
+    WP_RUN=(/usr/local/vesta/bin/v-run-wp-cli $DOMAIN --skip-plugins --skip-themes)
+fi
+
 return_code=$?
 
 if [ $return_code -ne 0 ]; then
@@ -86,9 +91,11 @@ while IFS=',' read -r ID LOGIN EMAIL; do
                         REASSIGN=${REASSIGN:-$DEFAULT_USER}
                         if printf '%s\n' "${OTHER_USERS[@]}" | grep -qx "$REASSIGN"; then
                             break
-                        else
-                            echo "Invalid username. Please choose one of: ${OTHER_USERS[*]}"
                         fi
+                        if [[ "$REASSIGN" =~ ^[0-9]+$ ]]; then
+                            break
+                        fi
+                        echo "Invalid username. Please choose one of: ${OTHER_USERS[*]}"
                     done
                     # delete by username, reassign by username
                     "${WP_RUN[@]}" user delete "$LOGIN" --reassign="$REASSIGN" --yes --skip-plugins --skip-themes

From acc87125f09083b5d171a5c9f7505a3c5b9a6b00 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 11 Jul 2025 10:34:38 +0200
Subject: [PATCH 2241/2300] v-change-wordpress-admin-passwords: ability to run
 v-run-wp-cli on choosen PHP version

---
 bin/v-change-wordpress-admin-passwords | 25 +++++++++++++++----------
 1 file changed, 15 insertions(+), 10 deletions(-)

diff --git a/bin/v-change-wordpress-admin-passwords b/bin/v-change-wordpress-admin-passwords
index c81cbfcb..1802bd9f 100644
--- a/bin/v-change-wordpress-admin-passwords
+++ b/bin/v-change-wordpress-admin-passwords
@@ -25,9 +25,9 @@ WP_PATH="/home/$USER/web/$DOMAIN/public_html"
 
 # WP-CLI wrapper
 if [ ! -z "$PHP" ]; then
-    WP_RUN=(PHP=$PHP /usr/local/vesta/bin/v-run-wp-cli $DOMAIN --skip-plugins --skip-themes)
+    WP_RUN="PHP=$PHP /usr/local/vesta/bin/v-run-wp-cli $DOMAIN --skip-plugins --skip-themes"
 else
-    WP_RUN=(/usr/local/vesta/bin/v-run-wp-cli $DOMAIN --skip-plugins --skip-themes)
+    WP_RUN="/usr/local/vesta/bin/v-run-wp-cli $DOMAIN --skip-plugins --skip-themes"
 fi
 
 return_code=$?
@@ -54,9 +54,9 @@ if [ -f /home/$USER/web/$DOMAIN/wp-admin-password-change.txt ]; then
     rm /home/$USER/web/$DOMAIN/wp-admin-password-change.txt
 fi
 
-ADMIN_LIST_CSV=$("${WP_RUN[@]}" user list --role=administrator \
-                     --fields=ID,user_login,user_email \
-                     --format=csv --skip-plugins --skip-themes 2>/dev/null | tail -n +2)
+RUN="$WP_RUN user list --role=administrator --fields=ID,user_login,user_email --format=csv --skip-plugins --skip-themes 2>/dev/null | tail -n +2"
+ADMIN_LIST_CSV=$(eval "$RUN")
+
 [ -z "$ADMIN_LIST_CSV" ] && { echo "No administrator accounts found."; exit 0; }
 
 printf "%-6s %-20s %s\n" "ID" "Username" "Email"
@@ -98,7 +98,8 @@ while IFS=',' read -r ID LOGIN EMAIL; do
                         echo "Invalid username. Please choose one of: ${OTHER_USERS[*]}"
                     done
                     # delete by username, reassign by username
-                    "${WP_RUN[@]}" user delete "$LOGIN" --reassign="$REASSIGN" --yes --skip-plugins --skip-themes
+                    RUN="$WP_RUN user delete $LOGIN --reassign=$REASSIGN --yes --skip-plugins --skip-themes"
+                    eval "$RUN"
                     if [ $? -eq 0 ]; then
                         echo "$TARGET deleted (content reassigned to $REASSIGN)."
                     else
@@ -112,7 +113,8 @@ while IFS=',' read -r ID LOGIN EMAIL; do
                 ;;
             [Cc]* )
                 NEW_PASS=$(gen_pass)
-                "${WP_RUN[@]}" user update "$LOGIN" --user_pass="$NEW_PASS" --skip-plugins --skip-themes
+                RUN="$WP_RUN user update $LOGIN --user_pass=$NEW_PASS --skip-plugins --skip-themes"
+                eval "$RUN"
                 if [ $? -eq 0 ]; then
                     echo "Password for username '$TARGET' changed to: $NEW_PASS"
                     echo "Password for username '$TARGET' changed to: $NEW_PASS" >> /home/$USER/web/$DOMAIN/wp-admin-password-change.txt
@@ -145,9 +147,12 @@ echo "-------------------------------------"
 echo
 echo "Flushing cache and refreshing salts..."
 
-"${WP_RUN[@]}" cache flush
-"${WP_RUN[@]}" config shuffle-salts WP_CACHE_KEY_SALT --force
-"${WP_RUN[@]}" config shuffle-salts
+RUN="$WP_RUN cache flush"
+eval "$RUN"
+RUN="$WP_RUN config shuffle-salts WP_CACHE_KEY_SALT --force"
+eval "$RUN"
+RUN="$WP_RUN config shuffle-salts"
+eval "$RUN"
 
 echo "Cache flushed and salts refreshed."
 

From 420a978572585868477bd6a32f6b2ccb64ea21dc Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 11 Jul 2025 11:41:28 +0200
Subject: [PATCH 2242/2300] v-install-wordpress: Support for IDN format domains

---
 bin/v-install-wordpress | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 202919d0..3f21d172 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -57,8 +57,17 @@ if [ -z "$database" ]; then
     fi
 fi
 
+# Convert domain to IDN if available
+if command -v idn2 >/dev/null 2>&1; then
+    database=$(idn2 "$database")
+    idn_domain=$(idn2 "$domain")
+elif command -v idn >/dev/null 2>&1; then
+    database=$(idn "$database")
+    idn_domain=$(idn "$domain")
+fi
+
 if [ -z "$email" ]; then
-    email="info@$domain";
+    email="info@$idn_domain";
 fi
 
 if [ ! -d "/home/$user" ]; then

From bf54a85a51fd391b8d17b1483ff54bd9dab1dbf4 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 11 Jul 2025 16:37:09 +0200
Subject: [PATCH 2243/2300] Added functions to check if a domain or user is
 unsuspended in main.sh

---
 func/main.sh | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/func/main.sh b/func/main.sh
index 27c4dcbe..4dfc087b 100644
--- a/func/main.sh
+++ b/func/main.sh
@@ -1236,3 +1236,26 @@ parse_object_kv_list_non_eval() {
         fi
     done
 }
+
+# Return OK (0) if domain is unsupended
+# Parameters:
+# $1 - user
+# $2 - domain
+return_ok_if_domain_is_unsuspended() {
+    spnd=$(grep "DOMAIN='$2'" /usr/local/vesta/data/users/$1/web.conf | grep "SUSPENDED='yes'")
+    if [ ! -z "$spnd" ]; then
+        return $E_SUSPENDED
+    fi
+    return $OK
+}
+
+# Return OK (0) if user is unsupended
+# Parameters:
+# $1 - user
+return_ok_if_user_is_unsuspended() {
+    spnd=$(cat /usr/local/vesta/data/users/$1/user.conf | grep "SUSPENDED='yes'")
+    if [ ! -z "$spnd" ]; then
+        return $E_SUSPENDED
+    fi
+    return $OK
+}

From cdf10aede168cde0e17e7f418855dc8c751497e1 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 12 Jul 2025 14:07:08 +0200
Subject: [PATCH 2244/2300] v-change-wordpress-admin-passwords: enhance admin
 reassignment logic to handle default user selection

---
 bin/v-change-wordpress-admin-passwords | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/bin/v-change-wordpress-admin-passwords b/bin/v-change-wordpress-admin-passwords
index 1802bd9f..591ff27c 100644
--- a/bin/v-change-wordpress-admin-passwords
+++ b/bin/v-change-wordpress-admin-passwords
@@ -59,9 +59,14 @@ ADMIN_LIST_CSV=$(eval "$RUN")
 
 [ -z "$ADMIN_LIST_CSV" ] && { echo "No administrator accounts found."; exit 0; }
 
+DEFAULT_USER=""
+
 printf "%-6s %-20s %s\n" "ID" "Username" "Email"
 echo "$ADMIN_LIST_CSV" | while IFS=',' read -r PID PLOGIN PEMAIL; do
     printf "%-6s %-20s %s\n" "$PID" "$PLOGIN" "$PEMAIL"
+    if [ "$PID" = "1" ]; then
+        DEFAULT_USER="$PLOGIN"
+    fi
 done
 
 echo
@@ -84,11 +89,14 @@ while IFS=',' read -r ID LOGIN EMAIL; do
                         echo "Cannot delete the only administrator account."
                         break
                     fi
-                    DEFAULT_USER="${OTHER_USERS[0]}"
+                    if [ "$DEFAULT_USER" = "" ]; then
+                        DEFAULT_USER="${OTHER_USERS[0]}"
+                    fi
                     echo "Available admin usernames for reassignment: ${OTHER_USERS[*]}"
                     while true; do
                         read -r -p "Reassign content to which username? [default: $DEFAULT_USER] " REASSIGN < /dev/tty
                         REASSIGN=${REASSIGN:-$DEFAULT_USER}
+                        DEFAULT_USER=$REASSIGN
                         if printf '%s\n' "${OTHER_USERS[@]}" | grep -qx "$REASSIGN"; then
                             break
                         fi

From aa6263c0ac49f9fbfabc383d375acada9c834240 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <internetfazoni@gmail.com>
Date: Sun, 13 Jul 2025 00:25:07 +0200
Subject: [PATCH 2245/2300] Create wprocket-webp-express-force-https.stpl

WEBP Express NGINX support with Rocket-NGINX
---
 .../wprocket-webp-express-force-https.stpl    | 72 +++++++++++++++++++
 1 file changed, 72 insertions(+)
 create mode 100644 src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl

diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl
new file mode 100644
index 00000000..0d3eca17
--- /dev/null
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    root           %sdocroot%;
+    # Rocket-Nginx configuration
+    include rocket-nginx/conf.d/default.conf;
+
+    # Serve WebP if browser supports it
+    location ~* ^/wp-content/.*\.(png|jpe?g)$ {
+        add_header Vary Accept;
+        expires 365d;
+    
+        if ($http_accept !~* "webp") {
+            break;
+        }
+    
+        try_files
+            /wp-content/webp-express/webp-images/doc-root/$uri.webp
+            $uri.webp
+            @webp_on_demand;
+    }
+    
+    # Route .webp requests to converter if not found
+    location @webp_on_demand {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+    
+    # Allow .webp passthrough (trigger php fallback if not found)
+    location ~* ^/wp-content/.*\.(png|jpe?g)\.webp$ {
+        try_files
+            $uri
+            @webp_realizer;
+    }
+    
+    location @webp_realizer {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+    
+    # Allow PHP access to WebP Express WOD handler
+    location ~ ^/wp-content/plugins/webp-express/wod/.*\.php$ {
+        proxy_pass      https://148.113.209.199:8443;
+    }
+    
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}

From 59db959b9a0670575f13dfb11eb8d9ebe07f3dfe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <internetfazoni@gmail.com>
Date: Sun, 13 Jul 2025 00:26:08 +0200
Subject: [PATCH 2246/2300] Update wprocket-webp-express-force-https.stpl

---
 .../wprocket-webp-express-force-https.stpl                      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl
index 0d3eca17..d504a6a1 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl
@@ -43,7 +43,7 @@ server {
     
     # Allow PHP access to WebP Express WOD handler
     location ~ ^/wp-content/plugins/webp-express/wod/.*\.php$ {
-        proxy_pass      https://148.113.209.199:8443;
+        proxy_pass      https://%ip%:%web_ssl_port%;
     }
     
     location / {

From 7511baa62863537d4f75d60712fbe1800dcb8b57 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <internetfazoni@gmail.com>
Date: Sun, 13 Jul 2025 00:27:04 +0200
Subject: [PATCH 2247/2300] Create wprocket-webp-express-force-https.tpl

---
 .../wprocket-webp-express-force-https.tpl                 | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.tpl

diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.tpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}

From a48621a88ec17c38753380276f63d829ed1ddc02 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luka=20Paunovi=C4=87?= <internetfazoni@gmail.com>
Date: Sun, 13 Jul 2025 19:00:48 +0200
Subject: [PATCH 2248/2300] Update wprocket-webp-express-force-https.stpl

rocket include must go bellow webp rules
---
 .../wprocket-webp-express-force-https.stpl                 | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl
index d504a6a1..2a6a7671 100644
--- a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl
@@ -7,8 +7,6 @@ server {
     error_log  /var/log/%web_system%/domains/%domain%.error.log error;
 
     root           %sdocroot%;
-    # Rocket-Nginx configuration
-    include rocket-nginx/conf.d/default.conf;
 
     # Serve WebP if browser supports it
     location ~* ^/wp-content/.*\.(png|jpe?g)$ {
@@ -45,7 +43,10 @@ server {
     location ~ ^/wp-content/plugins/webp-express/wod/.*\.php$ {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }
-    
+
+    # Rocket-Nginx configuration
+    include rocket-nginx/conf.d/default.conf;
+
     location / {
         proxy_pass      https://%ip%:%web_ssl_port%;
     }

From 29236cfb03b050df39bce02f8a113e3529d5fd3d Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 13 Jul 2025 22:16:46 +0200
Subject: [PATCH 2249/2300] Enhance proxy template selection in
 v-activate-rocket-nginx to include wprocket-webp-express-force-https option
 and update install script to download corresponding templates.

---
 bin/v-activate-rocket-nginx                          | 12 +++++++-----
 src/deb/for-download/tools/install-rocket-nginx.sh   |  2 ++
 .../wprocket-webp-express-force-https.tpl            |  8 ++++++++
 3 files changed, 17 insertions(+), 5 deletions(-)
 create mode 100644 src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.tpl

diff --git a/bin/v-activate-rocket-nginx b/bin/v-activate-rocket-nginx
index de8f6c5f..8b562c9b 100644
--- a/bin/v-activate-rocket-nginx
+++ b/bin/v-activate-rocket-nginx
@@ -75,18 +75,20 @@ fi
 # Changing Proxy Template
 # Check if the proxy template is already set correctly
 current_template=$(/usr/local/vesta/bin/v-list-web-domain $user $domain | grep 'PROXY:' | awk '{print $2}')
-if [ "$current_template" == "wprocket-force-https" ] || [ "$current_template" == "wprocket-hosting" ]; then
+if [ "$current_template" == "wprocket-force-https" ] || [ "$current_template" == "wprocket-hosting" ] || [ "$current_template" == "wprocket-webp-express-force-https" ]; then
     echo "Proxy Template is already set up correctly"
 else
     # Prompt the user to choose whether to force HTTPS or not
-    echo "Do you want to force-https in your Proxy Template or not (y/n):"
+    echo "Do you want to use wprocket-hosting template, wprocket-force-https template or wprocket-webp-express-force-https template (h/f/w):"
     read answer
 
     # Change the proxy template based on the user's choice
-    if [ "$answer" == "y" ]; then
-        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$user" "$domain" "wprocket-force-https"
-    else
+    if [ "$answer" == "h" ]; then
         /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$user" "$domain" "wprocket-hosting"
+    elif [ "$answer" == "f" ]; then
+        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$user" "$domain" "wprocket-force-https"
+    elif [ "$answer" == "w" ]; then
+        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl "$user" "$domain" "wprocket-webp-express-force-https"
     fi
 
     echo "Proxy Template is ready"
diff --git a/src/deb/for-download/tools/install-rocket-nginx.sh b/src/deb/for-download/tools/install-rocket-nginx.sh
index 47768b11..ca1f8b2a 100644
--- a/src/deb/for-download/tools/install-rocket-nginx.sh
+++ b/src/deb/for-download/tools/install-rocket-nginx.sh
@@ -4,6 +4,8 @@ wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-https.tpl h
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-force-https.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-force-https.stpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-hosting.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-hosting.tpl
 wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-hosting.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-hosting.stpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-webp-express-force-https.tpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-webp-express-force-https.tpl
+wget -nv -O /usr/local/vesta/data/templates/web/nginx/wprocket-webp-express-force-https.stpl https://c.myvestacp.com/tools/rocket-nginx-templates/wprocket-webp-express-force-https.stpl
 
 echo "Updating apt, please wait..."
 apt-get update > /dev/null 2>&1
diff --git a/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.tpl b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/src/deb/for-download/tools/rocket-nginx-templates/wprocket-webp-express-force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}

From 98600537fc54e76f67633a4bb9ec8fcb952d173c Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 14 Jul 2025 16:32:21 +0200
Subject: [PATCH 2250/2300] v-change-wordpress-admin-passwords: modified user
 deletion and password update commands to use user ID instead of username.

---
 bin/v-add-wordpress-admin              |  5 +++++
 bin/v-change-wordpress-admin-passwords | 16 ++++++++++++++--
 2 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/bin/v-add-wordpress-admin b/bin/v-add-wordpress-admin
index 3814e51a..67f58bf4 100644
--- a/bin/v-add-wordpress-admin
+++ b/bin/v-add-wordpress-admin
@@ -12,6 +12,11 @@ if [ "$whoami" != "root" ]; then
     exit 1
 fi
 
+if [ "$#" -lt 4 ]; then
+    echo "Usage: v-add-wordpress-admin [DOMAIN] [USERNAME] [PASSWORD] [EMAIL]"
+    exit 1
+fi
+
 # Importing system environment
 source /etc/profile
 
diff --git a/bin/v-change-wordpress-admin-passwords b/bin/v-change-wordpress-admin-passwords
index 591ff27c..ba3dec2b 100644
--- a/bin/v-change-wordpress-admin-passwords
+++ b/bin/v-change-wordpress-admin-passwords
@@ -106,7 +106,7 @@ while IFS=',' read -r ID LOGIN EMAIL; do
                         echo "Invalid username. Please choose one of: ${OTHER_USERS[*]}"
                     done
                     # delete by username, reassign by username
-                    RUN="$WP_RUN user delete $LOGIN --reassign=$REASSIGN --yes --skip-plugins --skip-themes"
+                    RUN="$WP_RUN user delete $ID --reassign=$REASSIGN --yes --skip-plugins --skip-themes"
                     eval "$RUN"
                     if [ $? -eq 0 ]; then
                         echo "$TARGET deleted (content reassigned to $REASSIGN)."
@@ -121,7 +121,7 @@ while IFS=',' read -r ID LOGIN EMAIL; do
                 ;;
             [Cc]* )
                 NEW_PASS=$(gen_pass)
-                RUN="$WP_RUN user update $LOGIN --user_pass=$NEW_PASS --skip-plugins --skip-themes"
+                RUN="$WP_RUN user update $ID --user_pass=$NEW_PASS --skip-plugins --skip-themes"
                 eval "$RUN"
                 if [ $? -eq 0 ]; then
                     echo "Password for username '$TARGET' changed to: $NEW_PASS"
@@ -147,6 +147,18 @@ while IFS=',' read -r ID LOGIN EMAIL; do
     done
 done <<< "$ADMIN_LIST_CSV"
 
+if [ -f /home/$USER/web/$DOMAIN/wp-admin-password-change.txt ]; then
+    echo "-------------------------------------"
+    echo
+    read -r -p "Do you want to save the new passwords to a file /home/$USER/web/$DOMAIN/wp-admin-password-change.txt ? (y/n, default: n) " SAVE_PASSWORDS < /dev/tty
+    if [ -z "$SAVE_PASSWORDS" ]; then
+        SAVE_PASSWORDS="n"
+    fi
+    if [[ $SAVE_PASSWORDS =~ ^[Nn]$ ]]; then
+        rm /home/$USER/web/$DOMAIN/wp-admin-password-change.txt
+    fi
+fi
+
 #----------------------------------------------------------#
 #        flush cache and refresh all security salts        #
 #----------------------------------------------------------#

From 1571d60b2f96c99bc386ee102b9599b6c98da87e Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 14 Jul 2025 17:16:25 +0200
Subject: [PATCH 2251/2300] Update v-fix-website-permissions to allow dynamic
 php file permissions based on user-defined settings

---
 bin/v-fix-website-permissions | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 3a73d13a..4b92df2f 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -73,10 +73,15 @@ find public_html/ -type d -exec chmod 755 {} +
 find public_html/ -type f -exec chmod 644 {} +
 chown -R $USER:$USER public_html/
 
+php_chmod="600"
+if [ -f "/home/$USER/web/$domain/php_chmod" ]; then
+    php_chmod=$(cat /home/$USER/web/$domain/php_chmod)
+fi
+
 # Setting chmod 600 for all php files
 echo "= Setting chmod 600 for all php files"
-find -name "*.php" -type f -exec chmod 600 {} +
-find -name ".env" -type f -exec chmod 600 {} +
+find -name "*.php" -type f -exec chmod $php_chmod {} +
+find -name ".env" -type f -exec chmod $php_chmod {} +
 find -name "*.php" -type f -exec chown $USER:$USER {} +
 find -name ".env" -type f -exec chown $USER:$USER {} +
 

From ca9a93982343928a696f54db2d9713348a42e04e Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 14 Jul 2025 18:17:43 +0200
Subject: [PATCH 2252/2300] Refactor v-change-wordpress-admin-passwords to
 streamline admin list processing by using a here-string for input

---
 bin/v-change-wordpress-admin-passwords | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-change-wordpress-admin-passwords b/bin/v-change-wordpress-admin-passwords
index ba3dec2b..7c4fabdb 100644
--- a/bin/v-change-wordpress-admin-passwords
+++ b/bin/v-change-wordpress-admin-passwords
@@ -62,12 +62,12 @@ ADMIN_LIST_CSV=$(eval "$RUN")
 DEFAULT_USER=""
 
 printf "%-6s %-20s %s\n" "ID" "Username" "Email"
-echo "$ADMIN_LIST_CSV" | while IFS=',' read -r PID PLOGIN PEMAIL; do
+while IFS=',' read -r PID PLOGIN PEMAIL; do
     printf "%-6s %-20s %s\n" "$PID" "$PLOGIN" "$PEMAIL"
     if [ "$PID" = "1" ]; then
         DEFAULT_USER="$PLOGIN"
     fi
-done
+done <<< "$ADMIN_LIST_CSV"
 
 echo
 echo "For each admin choose: (d) delete, (c) change password, (s) skip, (x) exit."

From f16c7e4c3fff4aa83ee4640f9608dee16b73530b Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 15 Jul 2025 13:12:20 +0200
Subject: [PATCH 2253/2300] New command:
 v-delete-inactive-wordpress-plugins-and-themes

---
 ...lete-inactive-wordpress-plugins-and-themes | 165 ++++++++++++++++++
 bin/v-desinfect-wordpress                     |   1 +
 2 files changed, 166 insertions(+)
 create mode 100644 bin/v-delete-inactive-wordpress-plugins-and-themes

diff --git a/bin/v-delete-inactive-wordpress-plugins-and-themes b/bin/v-delete-inactive-wordpress-plugins-and-themes
new file mode 100644
index 00000000..e9b1715c
--- /dev/null
+++ b/bin/v-delete-inactive-wordpress-plugins-and-themes
@@ -0,0 +1,165 @@
+#!/bin/bash
+# info: delete inactive WordPress plugins and themes
+# options: DOMAIN
+
+#----------------------------------------------------------#
+#                    Variable & Function                   #
+#----------------------------------------------------------#
+
+[ "$(whoami)" != "root" ] && { echo "You must be root to run this command."; exit 1; }
+source /etc/profile
+
+DOMAIN="$1"
+[ -z "$DOMAIN" ] && { echo "Usage: v-delete-inactive-wordpress-plugins-and-themes DOMAIN"; exit 1; }
+
+USER="$(/usr/local/vesta/bin/v-search-domain-owner "$DOMAIN")"
+[ -z "$USER" ] && { echo "Domain $DOMAIN does not exist."; exit 1; }
+
+WP_PATH="/home/$USER/web/$DOMAIN/public_html"
+[ ! -f "$WP_PATH/wp-config.php" ] && { echo "WordPress is not installed on this domain."; exit 1; }
+
+# WP-CLI wrapper
+if [ ! -z "$PHP" ]; then
+    WP_RUN="PHP=$PHP /usr/local/vesta/bin/v-run-wp-cli $DOMAIN --skip-plugins --skip-themes"
+else
+    WP_RUN="/usr/local/vesta/bin/v-run-wp-cli $DOMAIN --skip-plugins --skip-themes"
+fi
+
+quarantined=0;
+
+#----------------------------------------------------------#
+#                         Action                           #
+#----------------------------------------------------------#
+
+cd "$WP_PATH" || exit 1
+echo "Inactive WordPress plugins for $DOMAIN:"
+echo "-------------------------------------"
+
+RUN="$WP_RUN plugin list --format=csv --skip-plugins --skip-themes"
+PLUGINS_LIST_CSV=$(eval "$RUN")
+return_code=$?
+
+if [ $return_code -ne 0 ]; then
+    echo "WP-CLI error:"
+    echo "return code: $return_code"
+    cat /home/$USER/web/$DOMAIN/wp-cli-error.log
+    exit $return_code
+fi
+
+PLUGINS_LIST_CSV=$(echo "$PLUGINS_LIST_CSV" | tail -n +2)
+
+DEACTIVATED_PLUGINS_LIST_CSV=""
+
+if [ ! -z "$PLUGINS_LIST_CSV" ]; then
+    printf "%-30s %-20s %-20s %-20s %-20s %-20s\n" "name" "status" "update" "version" "update_version" "auto_update"
+    while IFS=',' read -r NAME STATUS UPDATE VERSION UPDATE_VERSION AUTO_UPDATE; do
+        if [ "$STATUS" = "inactive" ]; then
+            printf "%-30s %-20s %-20s %-20s %-20s %-20s\n" "$NAME" "$STATUS" "$UPDATE" "$VERSION" "$UPDATE_VERSION" "$AUTO_UPDATE"
+            DEACTIVATED_PLUGINS_LIST_CSV="$DEACTIVATED_PLUGINS_LIST_CSV\n$NAME"
+        fi
+    done <<< "$PLUGINS_LIST_CSV"
+else
+    echo "No plugins found."
+fi
+
+if [ ! -z "$DEACTIVATED_PLUGINS_LIST_CSV" ]; then
+    echo ""
+    read -r -p "Do you want to move inactive plugins to quarantine? (y/n, default: y): " RESPONSE < /dev/tty
+    if [ "$RESPONSE" == "y" ] || [ "$RESPONSE" == "Y" ] || [ -z "$RESPONSE" ]; then
+        while IFS=',' read -r NAME STATUS UPDATE VERSION UPDATE_VERSION AUTO_UPDATE; do
+            if [ "$STATUS" = "inactive" ]; then
+                folder="/home/$USER/web/$DOMAIN/public_html/wp-content/plugins/$NAME"
+                file="/home/$USER/web/$DOMAIN/public_html/wp-content/plugins/$NAME.php"
+                if [ -d "$folder" ] || [ -f "$file" ]; then
+                    destination_base_folder="/srv/wp-deactivated-plugins/$DOMAIN"
+                    if [ -d "$folder" ]; then
+                        source_path="$folder"
+                        destination_path="$destination_base_folder/$NAME"
+                    elif [ -f "$file" ]; then
+                        source_path="$file"
+                        destination_path="$destination_base_folder/$NAME.php"
+                    fi
+                    mkdir -p $destination_base_folder
+                    chown $USER:$USER $destination_base_folder
+                    mv $source_path $destination_path
+                    if [ -d "$destination_path" ]; then
+                        echo "= Folder $source_path moved to $destination_path"
+                        quarantined=1;
+                    fi
+                    if [ -f "$destination_path" ]; then
+                        echo "= File $source_path moved to $destination_path"
+                        quarantined=1;
+                    fi
+                else
+                    echo "=== ERROR: Folder $folder or file $file not found - it does not exist?"
+                fi
+            fi
+        done <<< "$PLUGINS_LIST_CSV"
+    fi
+fi
+
+echo ""
+echo "Inactive WordPress themes for $DOMAIN:"
+echo "-------------------------------------"
+
+RUN="$WP_RUN theme list --format=csv --skip-plugins --skip-themes"
+THEMES_LIST_CSV=$(eval "$RUN")
+return_code=$?
+
+if [ $return_code -ne 0 ]; then
+    echo "WP-CLI error:"
+    echo "return code: $return_code"
+    cat /home/$USER/web/$DOMAIN/wp-cli-error.log
+    exit $return_code
+fi
+
+THEMES_LIST_CSV=$(echo "$THEMES_LIST_CSV" | tail -n +2)
+
+DEACTIVATED_THEMES_LIST_CSV=""
+
+if [ ! -z "$THEMES_LIST_CSV" ]; then
+    printf "%-30s %-20s %-20s %-20s %-20s %-20s\n" "name" "status" "update" "version" "update_version" "auto_update"
+    while IFS=',' read -r NAME STATUS UPDATE VERSION UPDATE_VERSION AUTO_UPDATE; do
+        if [ "$STATUS" = "inactive" ]; then
+            printf "%-30s %-20s %-20s %-20s %-20s %-20s\n" "$NAME" "$STATUS" "$UPDATE" "$VERSION" "$UPDATE_VERSION" "$AUTO_UPDATE"
+            DEACTIVATED_THEMES_LIST_CSV="$DEACTIVATED_THEMES_LIST_CSV\n$NAME"
+        fi
+    done <<< "$THEMES_LIST_CSV"
+else
+    echo "No themes found."
+fi
+
+if [ ! -z "$DEACTIVATED_THEMES_LIST_CSV" ]; then
+    echo ""
+    read -r -p "Do you want to move inactive themes to quarantine? (y/n, default: y): " RESPONSE < /dev/tty
+    if [ "$RESPONSE" == "y" ] || [ "$RESPONSE" == "Y" ] || [ -z "$RESPONSE" ]; then
+        while IFS=',' read -r NAME STATUS UPDATE VERSION UPDATE_VERSION AUTO_UPDATE; do
+            if [ "$STATUS" = "inactive" ]; then
+                folder="/home/$USER/web/$DOMAIN/public_html/wp-content/themes/$NAME"
+                if [ -d "$folder" ]; then
+                    destination_base_folder="/srv/wp-deactivated-themes/$DOMAIN"
+                    source_path="$folder"
+                    destination_path="$destination_base_folder/$NAME"
+                    mkdir -p $destination_base_folder
+                    chown $USER:$USER $destination_base_folder
+                    mv $source_path $destination_path
+                    if [ -d "$destination_path" ]; then
+                        echo "= Folder $source_path moved to $destination_path"
+                        quarantined=1;
+                    fi
+                else
+                    echo "=== ERROR: Folder $folder not found - it does not exist?"
+                fi
+            fi
+        done <<< "$THEMES_LIST_CSV"
+    fi
+fi
+
+echo ""
+if [ $quarantined -eq 1 ]; then
+    echo "= All deactivated plugins and themes moved to quarantine."
+    echo "= You can find them in /srv/wp-deactivated-plugins/$DOMAIN and /srv/wp-deactivated-themes/$DOMAIN"
+else
+    echo "= No deactivated plugins or themes found."
+fi
+exit 0;
diff --git a/bin/v-desinfect-wordpress b/bin/v-desinfect-wordpress
index 04583c1e..dbcda395 100644
--- a/bin/v-desinfect-wordpress
+++ b/bin/v-desinfect-wordpress
@@ -32,6 +32,7 @@ declare -a tasks=(
     "/usr/local/vesta/bin/v-change-database-password-for-wordpress"
     "/usr/local/vesta/bin/v-change-wordpress-admin-passwords"
     "/usr/local/vesta/bin/v-fix-wordpress-core"
+    "/usr/local/vesta/bin/v-delete-inactive-wordpress-plugins-and-themes"
     "/usr/local/vesta/bin/v-wf-malware-hyperscan-with-remediate"
     "INTERACTIVE=1 /usr/local/vesta/bin/v-wf-malware-hyperscan-with-remediate"
 )

From 7191baa1c9edcb812b4e79431ae46f729d843c6b Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 15 Jul 2025 13:53:20 +0200
Subject: [PATCH 2254/2300] v-change-wordpress-admin-passwords: improve error
 handling

---
 bin/v-change-wordpress-admin-passwords | 21 ++++++++++++---------
 1 file changed, 12 insertions(+), 9 deletions(-)

diff --git a/bin/v-change-wordpress-admin-passwords b/bin/v-change-wordpress-admin-passwords
index 7c4fabdb..6ab4ad0e 100644
--- a/bin/v-change-wordpress-admin-passwords
+++ b/bin/v-change-wordpress-admin-passwords
@@ -30,14 +30,6 @@ else
     WP_RUN="/usr/local/vesta/bin/v-run-wp-cli $DOMAIN --skip-plugins --skip-themes"
 fi
 
-return_code=$?
-
-if [ $return_code -ne 0 ]; then
-    echo "WP-CLI error:"
-    cat /home/$USER/web/$DOMAIN/wp-cli-error.log
-    exit $return_code
-fi
-
 # random 10-char password
 gen_pass() { tr -dc 'A-Za-z0-9' </dev/urandom | head -c 10; }
 
@@ -54,9 +46,20 @@ if [ -f /home/$USER/web/$DOMAIN/wp-admin-password-change.txt ]; then
     rm /home/$USER/web/$DOMAIN/wp-admin-password-change.txt
 fi
 
-RUN="$WP_RUN user list --role=administrator --fields=ID,user_login,user_email --format=csv --skip-plugins --skip-themes 2>/dev/null | tail -n +2"
+RUN="$WP_RUN user list --role=administrator --fields=ID,user_login,user_email --format=csv --skip-plugins --skip-themes"
 ADMIN_LIST_CSV=$(eval "$RUN")
 
+return_code=$?
+
+if [ $return_code -ne 0 ]; then
+    echo "WP-CLI error:"
+    echo "return code: $return_code"
+    cat /home/$USER/web/$DOMAIN/wp-cli-error.log
+    exit $return_code
+fi
+
+ADMIN_LIST_CSV=$(echo "$ADMIN_LIST_CSV" | tail -n +2)
+
 [ -z "$ADMIN_LIST_CSV" ] && { echo "No administrator accounts found."; exit 0; }
 
 DEFAULT_USER=""

From 928bea08705d789394c2bde609079e78b634699b Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 15 Jul 2025 17:48:08 +0200
Subject: [PATCH 2255/2300] v-fix-website-permissions: only modify those that
 are not already set correctly

---
 bin/v-fix-website-permissions | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 4b92df2f..03798a15 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -69,9 +69,9 @@ fi
 
 
 echo "Updating permissions for /home/$USER/web/$domain/public_html/"
-find public_html/ -type d -exec chmod 755 {} +
-find public_html/ -type f -exec chmod 644 {} +
-chown -R $USER:$USER public_html/
+find public_html/ -type d ! -perm 755 -exec chmod 755 {} +
+find public_html/ -type f ! -perm 644 -exec chmod 644 {} +
+find public_html/ ! -user $USER -exec chown $USER:$USER {} +
 
 php_chmod="600"
 if [ -f "/home/$USER/web/$domain/php_chmod" ]; then
@@ -79,11 +79,11 @@ if [ -f "/home/$USER/web/$domain/php_chmod" ]; then
 fi
 
 # Setting chmod 600 for all php files
-echo "= Setting chmod 600 for all php files"
-find -name "*.php" -type f -exec chmod $php_chmod {} +
-find -name ".env" -type f -exec chmod $php_chmod {} +
-find -name "*.php" -type f -exec chown $USER:$USER {} +
-find -name ".env" -type f -exec chown $USER:$USER {} +
+echo "= Setting chmod $php_chmod for all php files"
+find -name "*.php" -type f ! -perm $php_chmod -exec chmod $php_chmod {} +
+find -name ".env" -type f ! -perm $php_chmod -exec chmod $php_chmod {} +
+find -name "*.php" -type f ! -user $USER -exec chown $USER:$USER {} +
+find -name ".env" -type f ! -user $USER -exec chown $USER:$USER {} +
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From b88f0e56bf8e33ca6d77c0fbd0c419881452960e Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 15 Jul 2025 18:44:02 +0200
Subject: [PATCH 2256/2300] New command: v-delete-wordpress-uploads-php-files

---
 bin/v-delete-wordpress-uploads-php-files | 70 ++++++++++++++++++++++++
 bin/v-desinfect-wordpress                |  1 +
 2 files changed, 71 insertions(+)
 create mode 100644 bin/v-delete-wordpress-uploads-php-files

diff --git a/bin/v-delete-wordpress-uploads-php-files b/bin/v-delete-wordpress-uploads-php-files
new file mode 100644
index 00000000..4ef12f1e
--- /dev/null
+++ b/bin/v-delete-wordpress-uploads-php-files
@@ -0,0 +1,70 @@
+#!/bin/bash
+# info: delete PHP files from WordPress uploads folder
+# options: DOMAIN
+
+#----------------------------------------------------------#
+#                    Variable & Function                   #
+#----------------------------------------------------------#
+
+[ "$(whoami)" != "root" ] && { echo "You must be root to run this command."; exit 1; }
+source /etc/profile
+
+DOMAIN="$1"
+[ -z "$DOMAIN" ] && { echo "Usage: v-delete-wordpress-uploads-php-files DOMAIN"; exit 1; }
+
+USER="$(/usr/local/vesta/bin/v-search-domain-owner "$DOMAIN")"
+[ -z "$USER" ] && { echo "Domain $DOMAIN does not exist."; exit 1; }
+
+WP_PATH="/home/$USER/web/$DOMAIN/public_html"
+[ ! -f "$WP_PATH/wp-config.php" ] && { echo "WordPress is not installed on this domain."; exit 1; }
+
+quarantined=0;
+
+#----------------------------------------------------------#
+#                         Action                           #
+#----------------------------------------------------------#
+
+cd "$WP_PATH" || exit 1
+
+files=$(find wp-content/uploads/ -type f -name "*.php")
+
+if [ -z "$files" ]; then
+    echo "= No PHP files found in WordPress uploads folder."
+    exit 0;
+fi
+
+echo "= Found PHP files in WordPress uploads folder for domain $DOMAIN :"
+echo "-------------------------------------"
+echo "$files"
+echo "-------------------------------------"
+
+while true; do
+    read -r -p "Do you want to delete these files? (y/n): " RESPONSE < /dev/tty
+    if [ "$RESPONSE" == "y" ] || [ "$RESPONSE" == "Y" ]; then
+        for file in $files; do
+            source_file="/home/$USER/web/$DOMAIN/public_html/$file"
+            destination_file="/srv/wp-uploads-php-files-quarantine/$DOMAIN/$file"
+            destination_folder=$(dirname "$destination_file")
+            mkdir -p "$destination_folder"
+            chown $USER:$USER "$destination_folder"
+            mv "$source_file" "$destination_file"
+            echo "= File $source_file moved to $destination_file"
+            quarantined=1;
+        done
+        chown -R $USER:$USER "/srv/wp-uploads-php-files-quarantine/$DOMAIN"
+        break;
+    fi
+    if [ "$RESPONSE" == "n" ] || [ "$RESPONSE" == "N" ]; then
+        break;
+    fi
+done
+
+echo ""
+if [ $quarantined -eq 1 ]; then
+    echo "= All PHP files moved to quarantine."
+    echo "= You can find them in /srv/wp-uploads-php-files-quarantine/$DOMAIN"
+else
+    echo "= No PHP files found in WordPress uploads folder."
+fi
+
+exit 0;
\ No newline at end of file
diff --git a/bin/v-desinfect-wordpress b/bin/v-desinfect-wordpress
index dbcda395..fcdc2f66 100644
--- a/bin/v-desinfect-wordpress
+++ b/bin/v-desinfect-wordpress
@@ -33,6 +33,7 @@ declare -a tasks=(
     "/usr/local/vesta/bin/v-change-wordpress-admin-passwords"
     "/usr/local/vesta/bin/v-fix-wordpress-core"
     "/usr/local/vesta/bin/v-delete-inactive-wordpress-plugins-and-themes"
+    "/usr/local/vesta/bin/v-delete-wordpress-uploads-php-files"
     "/usr/local/vesta/bin/v-wf-malware-hyperscan-with-remediate"
     "INTERACTIVE=1 /usr/local/vesta/bin/v-wf-malware-hyperscan-with-remediate"
 )

From 29f030205e05648c1e82a110837fc892b4e4edf0 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 16 Jul 2025 12:50:25 +0200
Subject: [PATCH 2257/2300] v-fix-website-permissions: exclude specific file
 types from permission changes to avoid altering 'Change' file attribute

---
 bin/v-fix-website-permissions | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 03798a15..bc0d1ba5 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -69,8 +69,8 @@ fi
 
 
 echo "Updating permissions for /home/$USER/web/$domain/public_html/"
-find public_html/ -type d ! -perm 755 -exec chmod 755 {} +
-find public_html/ -type f ! -perm 644 -exec chmod 644 {} +
+find public_html/ -type d ! \( -name "*.php" -o -name "*.env" \) ! -perm 755 -exec chmod 755 {} +
+find public_html/ -type f ! \( -name "*.php" -o -name "*.env" \) ! -perm 644 -exec chmod 644 {} +
 find public_html/ ! -user $USER -exec chown $USER:$USER {} +
 
 php_chmod="600"
@@ -80,8 +80,7 @@ fi
 
 # Setting chmod 600 for all php files
 echo "= Setting chmod $php_chmod for all php files"
-find -name "*.php" -type f ! -perm $php_chmod -exec chmod $php_chmod {} +
-find -name ".env" -type f ! -perm $php_chmod -exec chmod $php_chmod {} +
+find -type f \( -name "*.php" -o -name "*.env" \) ! -perm $php_chmod -exec chmod $php_chmod {} +
 find -name "*.php" -type f ! -user $USER -exec chown $USER:$USER {} +
 find -name ".env" -type f ! -user $USER -exec chown $USER:$USER {} +
 

From a5f2e6acd5b78fe24c2d791c31dcbd0aa5554ec2 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 16 Jul 2025 12:52:43 +0200
Subject: [PATCH 2258/2300] v-fix-website-permissions: exclude specific file
 types from permission changes to avoid altering 'Change' file attribute

---
 bin/v-fix-website-permissions | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index bc0d1ba5..93b9d662 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -69,20 +69,24 @@ fi
 
 
 echo "Updating permissions for /home/$USER/web/$domain/public_html/"
-find public_html/ -type d ! \( -name "*.php" -o -name "*.env" \) ! -perm 755 -exec chmod 755 {} +
+# Fixing permissions
+find public_html/ -type d ! -perm 755 -exec chmod 755 {} +
 find public_html/ -type f ! \( -name "*.php" -o -name "*.env" \) ! -perm 644 -exec chmod 644 {} +
-find public_html/ ! -user $USER -exec chown $USER:$USER {} +
+# Fixing ownership
+find public_html/ -type d ! -user $USER -exec chown $USER:$USER {} +
+find public_html/ -type f ! \( -name "*.php" -o -name "*.env" \) ! -user $USER -exec chown $USER:$USER {} +
 
 php_chmod="600"
 if [ -f "/home/$USER/web/$domain/php_chmod" ]; then
     php_chmod=$(cat /home/$USER/web/$domain/php_chmod)
 fi
 
-# Setting chmod 600 for all php files
-echo "= Setting chmod $php_chmod for all php files"
+# Setting chmod 600 for all .php and .env files
+echo "= Setting chmod $php_chmod for all .php and .env files"
+# Fixing permissions
 find -type f \( -name "*.php" -o -name "*.env" \) ! -perm $php_chmod -exec chmod $php_chmod {} +
-find -name "*.php" -type f ! -user $USER -exec chown $USER:$USER {} +
-find -name ".env" -type f ! -user $USER -exec chown $USER:$USER {} +
+# Fixing ownership
+find -type f \( -name "*.php" -o -name "*.env" \) ! -user $USER -exec chown $USER:$USER {} +
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From 3801e8d6cf43ecbeb52e1de97ea1c2e137799112 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 16 Jul 2025 13:57:37 +0200
Subject: [PATCH 2259/2300] v-delete-wordpress-uploads-php-files: set default
 response to 'yes' for moving files to quarantine

---
 bin/v-delete-wordpress-uploads-php-files | 34 ++++++++++--------------
 1 file changed, 14 insertions(+), 20 deletions(-)

diff --git a/bin/v-delete-wordpress-uploads-php-files b/bin/v-delete-wordpress-uploads-php-files
index 4ef12f1e..ce72c0c4 100644
--- a/bin/v-delete-wordpress-uploads-php-files
+++ b/bin/v-delete-wordpress-uploads-php-files
@@ -38,26 +38,20 @@ echo "-------------------------------------"
 echo "$files"
 echo "-------------------------------------"
 
-while true; do
-    read -r -p "Do you want to delete these files? (y/n): " RESPONSE < /dev/tty
-    if [ "$RESPONSE" == "y" ] || [ "$RESPONSE" == "Y" ]; then
-        for file in $files; do
-            source_file="/home/$USER/web/$DOMAIN/public_html/$file"
-            destination_file="/srv/wp-uploads-php-files-quarantine/$DOMAIN/$file"
-            destination_folder=$(dirname "$destination_file")
-            mkdir -p "$destination_folder"
-            chown $USER:$USER "$destination_folder"
-            mv "$source_file" "$destination_file"
-            echo "= File $source_file moved to $destination_file"
-            quarantined=1;
-        done
-        chown -R $USER:$USER "/srv/wp-uploads-php-files-quarantine/$DOMAIN"
-        break;
-    fi
-    if [ "$RESPONSE" == "n" ] || [ "$RESPONSE" == "N" ]; then
-        break;
-    fi
-done
+read -r -p "Do you want to move these files to quarantine? (y/n, default: y): " RESPONSE < /dev/tty
+if [ "$RESPONSE" == "y" ] || [ "$RESPONSE" == "Y" ] || [ -z "$RESPONSE" ]; then
+    for file in $files; do
+        source_file="/home/$USER/web/$DOMAIN/public_html/$file"
+        destination_file="/srv/wp-uploads-php-files-quarantine/$DOMAIN/$file"
+        destination_folder=$(dirname "$destination_file")
+        mkdir -p "$destination_folder"
+        chown $USER:$USER "$destination_folder"
+        mv "$source_file" "$destination_file"
+        echo "= File $source_file moved to $destination_file"
+        quarantined=1;
+    done
+    chown -R $USER:$USER "/srv/wp-uploads-php-files-quarantine/$DOMAIN"
+fi
 
 echo ""
 if [ $quarantined -eq 1 ]; then

From 403dd654009a7afb2d953c9f0fe8d2d0fa02f358 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 16 Jul 2025 15:35:46 +0200
Subject: [PATCH 2260/2300] v-change-database-password-for-wordpress: enhance
 database name and user retrieval to support both single and double quotes in
 wp-config.php

---
 bin/v-change-database-password-for-wordpress | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/v-change-database-password-for-wordpress b/bin/v-change-database-password-for-wordpress
index dd7a3a91..0c84f80b 100644
--- a/bin/v-change-database-password-for-wordpress
+++ b/bin/v-change-database-password-for-wordpress
@@ -70,6 +70,12 @@ if [ -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
     fi
     db_name=$(grep "DB_NAME" $wp_config_path | grep -oP "define\s*\(\s*'DB_NAME'\s*,\s*'\K[^']+")
     db_user=$(grep "DB_USER" $wp_config_path | grep -oP "define\s*\(\s*'DB_USER'\s*,\s*'\K[^']+")
+    if [ -z "$db_name" ]; then
+        db_name=$(grep "DB_NAME" $wp_config_path | grep -oP "define\s*\(\s*'DB_NAME'\s*,\s*\"\K[^\"]+")
+    fi
+    if [ -z "$db_user" ]; then
+        db_user=$(grep "DB_USER" $wp_config_path | grep -oP "define\s*\(\s*'DB_USER'\s*,\s*\"\K[^\"]+")
+    fi
     new_password=''
     found_existing_password=0
     if [ -f "/root/remember-db-user-pass.txt" ]; then

From a976a3bc3f0d46f28059e2df3fcc84501846f9b8 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 16 Jul 2025 17:53:38 +0200
Subject: [PATCH 2261/2300] v-change-database-password-for-wordpress: fixing a
 bug in temporary password storage

---
 bin/v-change-database-password-for-all-wordpress | 4 +++-
 bin/v-change-database-password-for-wordpress     | 7 +++++--
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/bin/v-change-database-password-for-all-wordpress b/bin/v-change-database-password-for-all-wordpress
index 2741e960..1a364307 100644
--- a/bin/v-change-database-password-for-all-wordpress
+++ b/bin/v-change-database-password-for-all-wordpress
@@ -51,7 +51,9 @@ for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
 done
 
 # cat /root/remember-db-user-pass.txt
-rm /root/remember-db-user-pass.txt
+if [ -f "/root/remember-db-user-pass.txt" ]; then
+    rm /root/remember-db-user-pass.txt
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #
diff --git a/bin/v-change-database-password-for-wordpress b/bin/v-change-database-password-for-wordpress
index 0c84f80b..7f31b181 100644
--- a/bin/v-change-database-password-for-wordpress
+++ b/bin/v-change-database-password-for-wordpress
@@ -94,8 +94,11 @@ if [ -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
     echo "DB name: $db_name"
     echo "DB user: $db_user"
     echo "New DB password: $new_password"
-    if [ $found_existing_password -eq 0 ] && [ -f "/root/remember-db-user-pass.txt" ]; then
+    if [ $found_existing_password -eq 0 ]; then
+        touch /root/remember-db-user-pass.txt
         echo "$db_user:$new_password" >> /root/remember-db-user-pass.txt
+        chown root:root /root/remember-db-user-pass.txt
+        chmod 600 /root/remember-db-user-pass.txt
     fi
     /usr/local/vesta/bin/v-change-database-password "$user" "$db_name" "$new_password"
     if [ $? -ne 0 ]; then
@@ -126,4 +129,4 @@ fi
 # Logging
 log_event "$OK" "$ARGUMENTS"
 
-exit
+exit 0;

From 9eade5a7df4759d0d4a90862fe1e1892f74e8e58 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 16 Jul 2025 19:21:18 +0200
Subject: [PATCH 2262/2300] v-fix-wordpress-core:  support for  custom PHP
 version

---
 bin/v-fix-wordpress-core | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/bin/v-fix-wordpress-core b/bin/v-fix-wordpress-core
index 7a511747..2bcd6c34 100644
--- a/bin/v-fix-wordpress-core
+++ b/bin/v-fix-wordpress-core
@@ -37,7 +37,12 @@ TMP_DIR="$(mktemp -d /tmp/wpfix.XXXXXX)"  # temp workspace
 trap 'rm -rf "$TMP_DIR"' EXIT
 
 # 1etermine WP version
-WP_VERSION="$(/usr/local/vesta/bin/v-run-wp-cli "$DOMAIN" core version | tr -d '[:space:]')"
+if [ -z "$PHP" ]; then
+    WP_VERSION="$(/usr/local/vesta/bin/v-run-wp-cli "$DOMAIN" core version | tr -d '[:space:]')"
+else
+    WP_VERSION="$(PHP=$PHP /usr/local/vesta/bin/v-run-wp-cli "$DOMAIN" core version | tr -d '[:space:]')"
+fi
+
 check_result $? "cannot detect WP version" > /dev/null
 if [ -z "$WP_VERSION" ]; then
     check_result 1 "empty WP version string"

From f64968ba918e10040325315eaaa5e8f09657d72b Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Thu, 17 Jul 2025 14:36:37 +0200
Subject: [PATCH 2263/2300] v-change-wordpress-admin-passwords: add option to
 skip content reassignment during user deletion

---
 bin/v-change-wordpress-admin-passwords | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/bin/v-change-wordpress-admin-passwords b/bin/v-change-wordpress-admin-passwords
index 6ab4ad0e..eae5b078 100644
--- a/bin/v-change-wordpress-admin-passwords
+++ b/bin/v-change-wordpress-admin-passwords
@@ -81,6 +81,7 @@ while IFS=',' read -r ID LOGIN EMAIL; do
     while true; do
         echo "-------------------------------------"
         read -r -p "Action for \"$TARGET\" [d/c/s/x]? " ACT < /dev/tty
+        skip=0;
         case "$ACT" in
             [Dd]* )
                 # read -r -p "Really DELETE \"$TARGET\" ?   (y/n, default: y) " CONF < /dev/tty
@@ -97,17 +98,25 @@ while IFS=',' read -r ID LOGIN EMAIL; do
                     fi
                     echo "Available admin usernames for reassignment: ${OTHER_USERS[*]}"
                     while true; do
-                        read -r -p "Reassign content to which username? [default: $DEFAULT_USER] " REASSIGN < /dev/tty
+                        read -r -p "Reassign content to which username? [default: $DEFAULT_USER, s: skip] " REASSIGN < /dev/tty
                         REASSIGN=${REASSIGN:-$DEFAULT_USER}
                         DEFAULT_USER=$REASSIGN
                         if printf '%s\n' "${OTHER_USERS[@]}" | grep -qx "$REASSIGN"; then
                             break
                         fi
+                        if [[ "$REASSIGN" =~ ^[Ss]$ ]]; then
+                            echo "Skipping reassignment."
+                            skip=1;
+                            break
+                        fi
                         if [[ "$REASSIGN" =~ ^[0-9]+$ ]]; then
                             break
                         fi
                         echo "Invalid username. Please choose one of: ${OTHER_USERS[*]}"
                     done
+                    if [ $skip -eq 1 ]; then
+                        break
+                    fi
                     # delete by username, reassign by username
                     RUN="$WP_RUN user delete $ID --reassign=$REASSIGN --yes --skip-plugins --skip-themes"
                     eval "$RUN"

From 7799cd3322e4e2b416cba968e5540a505b8c8289 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 22 Jul 2025 14:18:10 +0200
Subject: [PATCH 2264/2300] v-update-deb-package: change target Debian version
 to 'trixie' and update dependencies for NGINX, OpenSSL, and Zlib

---
 src/deb/vesta_compile.sh | 46 ++++++++++++++++++++++++++++++++++------
 1 file changed, 39 insertions(+), 7 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index a80316d9..c645aa4c 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -7,8 +7,8 @@
 build_deb_package=1
 add_deb_to_apt_repo=0
 
-TARGET_DEB_NAME='bookworm'
-TARGET_DEB_VER='12'
+TARGET_DEB_NAME='trixie'
+TARGET_DEB_VER='13'
 
 run_apt_update_and_install=1
 wait_to_press_enter=1
@@ -31,8 +31,8 @@ fi
 
 MAINTAINER_EMAIL='info@myvestacp.com'
 
-TARGET_DEB_NAME_MAIN='bookworm'
-TARGET_DEB_VER_MAIN='12'
+TARGET_DEB_NAME_MAIN='trixie'
+TARGET_DEB_VER_MAIN='13'
 
 # Set compiling directory
 BUILD_DIR="/usr/src/$TARGET_DEB_NAME"
@@ -58,10 +58,10 @@ BUILD_DATE=$(date +"%d-%b-%Y")
 
 # Set Version for compiling
 VESTA_V=$VESTA_VER"_amd64"
-NGINX_V='1.25.1'
-OPENSSL_V='1.1.1u'
+NGINX_V='1.29.0'
+OPENSSL_V='1.1.1w'
 PCRE_V='8.45'
-ZLIB_V='1.2.13'
+ZLIB_V='1.3.1'
 PHP_V='5.6.40'
 
 # Generate Links for sourcecode
@@ -130,6 +130,9 @@ if [ $run_apt_update_and_install -eq 1 ]; then
   if [ ! -e /usr/local/include/curl ] && [ "$release" -lt 12 ]; then
       ln -s /usr/include/x86_64-linux-gnu/curl /usr/local/include/curl
   fi
+  if [ "$release" -eq 13 ]; then
+      ln -s /usr/include/x86_64-linux-gnu/curl /usr/local/include/curl
+  fi
   press_enter "=== Press enter to continue ==============================================================================="
 fi
 
@@ -258,6 +261,7 @@ EOF
     press_enter "*** please copy above generated key to your clipboard and then paste it after pressing enter now ***"
     vi $PATH_OF_APT_REPO_ROOT/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/deb_signing.key
+    cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/13/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/12/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/11/deb_signing.key
     cp $PATH_OF_APT_REPO_ROOT/deb_signing.key $PATH_OF_C_WEB_FOLDER_ROOT/debian/10/deb_signing.key
@@ -442,6 +446,34 @@ if [ "$CWEB_B" = true ]; then
   fi
   tar -czf fail2ban.tar.gz fail2ban/
   
+  if [ -f "dovecot.tar.gz" ]; then
+    rm dovecot.tar.gz
+  fi
+  tar -czf dovecot.tar.gz dovecot/
+  echo "=== All done for Debian12"
+  ##########
+  cd $PATH_OF_C_WEB_FOLDER_ROOT/debian/13
+  
+  if [ -f "packages.tar.gz" ]; then
+    rm packages.tar.gz
+  fi
+  tar -czf packages.tar.gz packages/
+  
+  if [ -f "templates.tar.gz" ]; then
+    rm templates.tar.gz
+  fi
+  tar -czf templates.tar.gz templates/
+  
+  if [ -f "firewall.tar.gz" ]; then
+    rm firewall.tar.gz
+  fi
+  tar -czf firewall.tar.gz firewall/
+  
+  if [ -f "fail2ban.tar.gz" ]; then
+    rm fail2ban.tar.gz
+  fi
+  tar -czf fail2ban.tar.gz fail2ban/
+  
   if [ -f "dovecot.tar.gz" ]; then
     rm dovecot.tar.gz
   fi

From b3758430c653c3c031273d85f3fd44d154fe265c Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 22 Jul 2025 16:30:23 +0200
Subject: [PATCH 2265/2300] v-update-php-version: upgrade PHP to 8.4.10 and
 update download link; add additional dependencies for Debian 13

---
 src/deb/vesta_compile.sh | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index c645aa4c..0d899cb3 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -62,7 +62,7 @@ NGINX_V='1.29.0'
 OPENSSL_V='1.1.1w'
 PCRE_V='8.45'
 ZLIB_V='1.3.1'
-PHP_V='5.6.40'
+PHP_V='8.4.10'
 
 # Generate Links for sourcecode
 NGINX='https://nginx.org/download/nginx-'$NGINX_V'.tar.gz'
@@ -73,7 +73,7 @@ OPENSSL='https://www.openssl.org/source/openssl-'$OPENSSL_V'.tar.gz'
 PCRE='https://sourceforge.net/projects/pcre/files/pcre/'$PCRE_V'/pcre-'$PCRE_V'.tar.gz/download'
 # Zlib moved archives to Github
 ZLIB='https://github.com/madler/zlib/archive/refs/tags/v'$ZLIB_V'.tar.gz'
-PHP='http://de2.php.net/distributions/php-'$PHP_V'.tar.gz'
+PHP='https://www.php.net/distributions/php-'$PHP_V'.tar.gz'
 
 # Set package dependencies for compiling
 release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
@@ -81,7 +81,7 @@ release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
 if [ "$release" -lt 12 ]; then
     SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config reprepro dpkg-sig git rsync'
 else
-    SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config reprepro git rsync'
+    SOFTWARE='build-essential libxml2-dev libz-dev libcurl4-gnutls-dev unzip openssl libssl-dev pkg-config reprepro git rsync libsqlite3-dev libonig-dev'
 fi
 
 function press_enter {
@@ -130,7 +130,7 @@ if [ $run_apt_update_and_install -eq 1 ]; then
   if [ ! -e /usr/local/include/curl ] && [ "$release" -lt 12 ]; then
       ln -s /usr/include/x86_64-linux-gnu/curl /usr/local/include/curl
   fi
-  if [ "$release" -eq 13 ]; then
+  if [ ! -e /usr/local/include/curl ] && [ "$release" -eq 13 ]; then
       ln -s /usr/include/x86_64-linux-gnu/curl /usr/local/include/curl
   fi
   press_enter "=== Press enter to continue ==============================================================================="
@@ -530,7 +530,7 @@ if [ "$NGINX_B" = true ]; then
               --with-openssl-opt=no-weak-ssl-ciphers \
               --with-openssl-opt=no-ssl3 \
               --with-pcre=../pcre-$PCRE_V \
-                  --with-pcre-jit \
+              --with-pcre-jit \
               --with-zlib=../zlib-$ZLIB_V
       
       # Check install directory and remove if exists
@@ -625,11 +625,10 @@ if [ "$PHP_B" = true ]; then
                   --with-zlib \
                   --with-fpm-user=admin \
                   --with-fpm-group=admin \
-                  --with-mysql \
                   --with-mysqli \
                   --with-curl \
                   --enable-mbstring \
-				  --with-mysql-sock=/var/run/mysqld/mysqld.sock
+                  --with-mysql-sock=/var/run/mysqld/mysqld.sock
       
       # Check install directory and remove if exists
       if [ -d $INSTALL_DIR/php ]; then
@@ -637,7 +636,7 @@ if [ "$PHP_B" = true ]; then
       fi
     
       press_enter "=== Press enter to compile PHP ==============================================================================="
-      
+
       make && make install
       
       press_enter "=== Press enter to continue ==============================================================================="

From 77b6506baeca26e71dcba0eb367c9f66b213da83 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 23 Jul 2025 14:02:52 +0200
Subject: [PATCH 2266/2300] v-update-deb-package: update completion message for
 Debian 13

---
 src/deb/vesta_compile.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 0d899cb3..08bc163b 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -478,7 +478,7 @@ if [ "$CWEB_B" = true ]; then
     rm dovecot.tar.gz
   fi
   tar -czf dovecot.tar.gz dovecot/
-  echo "=== All done for Debian12"
+  echo "=== All done for Debian13"
   ##########
   
   cp /root/vesta/install/vst-install-debian.sh $PATH_OF_C_WEB_FOLDER_ROOT/vst-install-debian.sh

From 30581ea672b0bcce6d2605a6138d1085c60aaf67 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 23 Jul 2025 22:37:09 +0200
Subject: [PATCH 2267/2300] v-change-wordpress-admin-passwords: enhance output
 messages for password change confirmation

---
 bin/v-change-wordpress-admin-passwords | 19 ++++++++-----------
 1 file changed, 8 insertions(+), 11 deletions(-)

diff --git a/bin/v-change-wordpress-admin-passwords b/bin/v-change-wordpress-admin-passwords
index eae5b078..bca23ad8 100644
--- a/bin/v-change-wordpress-admin-passwords
+++ b/bin/v-change-wordpress-admin-passwords
@@ -160,8 +160,15 @@ while IFS=',' read -r ID LOGIN EMAIL; do
 done <<< "$ADMIN_LIST_CSV"
 
 if [ -f /home/$USER/web/$DOMAIN/wp-admin-password-change.txt ]; then
+    echo ""
+    echo ""
     echo "-------------------------------------"
-    echo
+    echo "For website $DOMAIN - new wp-admin passwords have been set."
+    echo "-------------------------------------"
+    cat /home/$USER/web/$DOMAIN/wp-admin-password-change.txt
+    echo "-------------------------------------"
+    echo ""
+    echo ""
     read -r -p "Do you want to save the new passwords to a file /home/$USER/web/$DOMAIN/wp-admin-password-change.txt ? (y/n, default: n) " SAVE_PASSWORDS < /dev/tty
     if [ -z "$SAVE_PASSWORDS" ]; then
         SAVE_PASSWORDS="n"
@@ -191,14 +198,4 @@ echo "Cache flushed and salts refreshed."
 echo
 echo "Done."
 
-if [ -f /home/$USER/web/$DOMAIN/wp-admin-password-change.txt ]; then
-    echo "-------------------------------------"
-    echo "For website $DOMAIN - new wp-admin passwords have been set."
-    echo "-------------------------------------"
-    cat /home/$USER/web/$DOMAIN/wp-admin-password-change.txt
-    echo "-------------------------------------"
-    echo ""
-    read -r -p "== Press Enter to continue..."
-fi
-
 exit 0

From 4e8bac8dda0670066c3b8cd880bfb388cb550a25 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 23 Jul 2025 23:34:07 +0200
Subject: [PATCH 2268/2300] v-update-firewall-rules: improve nginx
 configuration handling for deleting rules, as well as for suspended and
 unsuspended rules

---
 bin/v-delete-firewall-rule    |  2 +-
 bin/v-suspend-firewall-rule   |  9 +++++++++
 bin/v-unsuspend-firewall-rule | 13 +++++++++++++
 3 files changed, 23 insertions(+), 1 deletion(-)

diff --git a/bin/v-delete-firewall-rule b/bin/v-delete-firewall-rule
index 61f7602d..10fd0fb9 100755
--- a/bin/v-delete-firewall-rule
+++ b/bin/v-delete-firewall-rule
@@ -45,7 +45,7 @@ $BIN/v-update-firewall
 if [ "$WEB_SYSTEM" == 'nginx' ] || [ "$PROXY_SYSTEM" == 'nginx' ]; then
     parse_object_kv_list_non_eval "$oldvalues"
     if [ "$PORT" == "80,443" ] && [ "$ACTION" == "DROP" ]; then
-        sed -i "/$IP/d" /etc/nginx/conf.d/block-firewall.conf
+        sed -i "\#$IP#d" /etc/nginx/conf.d/block-firewall.conf
         systemctl restart nginx
     fi
 fi
diff --git a/bin/v-suspend-firewall-rule b/bin/v-suspend-firewall-rule
index 67f14cec..9191fed0 100755
--- a/bin/v-suspend-firewall-rule
+++ b/bin/v-suspend-firewall-rule
@@ -32,12 +32,21 @@ is_object_unsuspended '../../data/firewall/rules' 'RULE' "$rule"
 #                       Action                             #
 #----------------------------------------------------------#
 
+oldvalues=$(grep "RULE='$rule'" $VESTA/data/firewall/rules.conf)
+
 # Suspending rule
 update_object_value ../../data/firewall/rules RULE $rule '$SUSPENDED' yes
 
 # Updating system firewall
 $BIN/v-update-firewall
 
+if [ "$WEB_SYSTEM" == 'nginx' ] || [ "$PROXY_SYSTEM" == 'nginx' ]; then
+    parse_object_kv_list_non_eval "$oldvalues"
+    if [ "$PORT" == "80,443" ] && [ "$ACTION" == "DROP" ]; then
+        sed -i "\#$IP#d" /etc/nginx/conf.d/block-firewall.conf
+        systemctl restart nginx
+    fi
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #
diff --git a/bin/v-unsuspend-firewall-rule b/bin/v-unsuspend-firewall-rule
index be6320d4..f0e00c96 100755
--- a/bin/v-unsuspend-firewall-rule
+++ b/bin/v-unsuspend-firewall-rule
@@ -32,12 +32,25 @@ is_object_suspended '../../data/firewall/rules' 'RULE' "$rule"
 #                       Action                             #
 #----------------------------------------------------------#
 
+oldvalues=$(grep "RULE='$rule'" $VESTA/data/firewall/rules.conf)
+
 # Suspending rule
 update_object_value ../../data/firewall/rules RULE $rule '$SUSPENDED' no
 
 # Updating system firewall
 $BIN/v-update-firewall
 
+if [ "$WEB_SYSTEM" == 'nginx' ] || [ "$PROXY_SYSTEM" == 'nginx' ]; then
+    parse_object_kv_list_non_eval "$oldvalues"
+    if [ "$PORT" == "80,443" ] && [ "$ACTION" == "DROP" ]; then
+        touch /etc/nginx/conf.d/block-firewall.conf
+        if ! grep -q "deny $IP;" /etc/nginx/conf.d/block-firewall.conf; then
+            echo "deny $IP;" >> /etc/nginx/conf.d/block-firewall.conf
+            systemctl restart nginx
+        fi
+    fi
+fi
+
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From d017fbbe0700a61adb45a8494b1f6656655ffff3 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 25 Jul 2025 16:37:45 +0200
Subject: [PATCH 2269/2300] v-fix-website-permissions: improve error messages
 for non-existent user and domain directories

---
 bin/v-fix-website-permissions | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 93b9d662..13c6775d 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -42,12 +42,12 @@ is_format_valid 'domain'
 is_object_valid 'user' 'USER' "$user"
 
 if [ ! -d "/home/$user" ]; then
-    echo "User doesn't exist";
+    echo "Error: Folder /home/$user doesn't exist";
     exit 1;
 fi
 
 if [ ! -d "/home/$user/web/$domain/public_html" ]; then
-    echo "Domain doesn't exist";
+    echo "Error: Folder /home/$user/web/$domain/public_html doesn't exist";
     exit 1;
 fi
 

From 5fb7862b39b7437777fd1c57bc35c9c588854ac4 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 26 Jul 2025 21:36:10 +0200
Subject: [PATCH 2270/2300] Replace direct calls to 'wp' with 'v-run-wp-cli'

---
 bin/v-add-wordpress-admin              | 16 ++++------
 bin/v-clone-website                    | 22 ++++++-------
 bin/v-install-wordfence-cli            |  0
 bin/v-install-wordpress                | 29 +++++++++++------
 bin/{v-get-wp-cli => v-install-wp-cli} | 24 ++++++++++++--
 bin/v-migrate-site-to-https            | 22 +++++++++----
 bin/v-run-wp-cli                       | 44 +++++++++++++++++++-------
 7 files changed, 108 insertions(+), 49 deletions(-)
 create mode 100644 bin/v-install-wordfence-cli
 rename bin/{v-get-wp-cli => v-install-wp-cli} (60%)

diff --git a/bin/v-add-wordpress-admin b/bin/v-add-wordpress-admin
index 67f58bf4..20585485 100644
--- a/bin/v-add-wordpress-admin
+++ b/bin/v-add-wordpress-admin
@@ -63,21 +63,19 @@ if [ ! -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
     exit 1;
 fi
 
-if ! command -v wp &> /dev/null; then
-    echo "WP CLI is not installed. Installing..."
-    wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
-    chmod +x /usr/local/bin/wp
-    echo "WP CLI installed successfully."
+if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+    echo "= WP CLI is not installed. Installing..."
+    /usr/local/vesta/bin/v-install-wp-cli
+fi
+if [ ! -f "/usr/local/bin/wp" ] && [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+    exit 1;
 fi
-
-phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$domain")
 
 #----------------------------------------------------------#
 #                       Action                             #
 #----------------------------------------------------------#
 
-cd /home/$USER/web/$domain/public_html
-sudo -u $USER /usr/bin/php$phpver /usr/local/bin/wp user create $username $email --role=administrator --user_pass="$password" --skip-plugins=$(sudo -H -u$USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
+/usr/local/vesta/bin/v-run-wp-cli $domain user create $username $email --role=administrator --user_pass="$password" --skip-plugins --skip-themes;
 
 #----------------------------------------------------------#
 #                       Vesta                              #
diff --git a/bin/v-clone-website b/bin/v-clone-website
index 0258e39a..0e089465 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -265,10 +265,12 @@ if [ $IT_IS_WP -eq 0 ]; then
         git clone https://github.com/interconnectit/Search-Replace-DB.git
     fi
 else
-    if [ ! -f "/usr/local/bin/wp" ]; then
-        echo "=== Downloading latest wp-cli"
-        wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
-        chmod +x /usr/local/bin/wp
+    if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+        echo "= WP CLI is not installed. Installing..."
+        /usr/local/vesta/bin/v-install-wp-cli
+    fi
+    if [ ! -f "/usr/local/bin/wp" ] && [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+        exit 1;
     fi
 fi
 
@@ -429,17 +431,15 @@ if [ $IT_IS_WP -eq 0 ]; then
         php /root/Search-Replace-DB/srdb.cli.php -h localhost -n "$TO_DATABASE_NAME" -u "$TO_DATABASE_USERNAME" -p "$TO_DATABASE_PASSWORD" -s "/home/$FROM_USER/" -r "/home/$TO_USER/"
     fi
 else
-    phpver=$(/usr/local/vesta/bin/v-get-php-version-of-domain "$TO_DOMAIN")
-    cd $TO_FOLDER
     echo "=== Replacing $FROM_DOMAIN to $TO_DOMAIN in database $TO_DATABASE_NAME"
-    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    /usr/local/vesta/bin/v-run-wp-cli $TO_DOMAIN search-replace "$FROM_DOMAIN" "$TO_DOMAIN" --precise --all-tables --skip-columns=guid --skip-plugins --skip-themes;
     if [ "$FROM_USER" != "$TO_USER" ]; then
         echo "=== Replacing /home/$FROM_USER/ to /home/$TO_USER/ in database $TO_DATABASE_NAME"
-        sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "/home/$FROM_USER/" "/home/$TO_USER/" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
+        /usr/local/vesta/bin/v-run-wp-cli $TO_DOMAIN search-replace "/home/$FROM_USER/" "/home/$TO_USER/" --precise --all-tables --skip-columns=guid --skip-plugins --skip-themes;
     fi
-    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp cache flush --skip-plugins=$(sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
-    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp config shuffle-salts WP_CACHE_KEY_SALT --force --skip-plugins=$(sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
-    sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp config shuffle-salts --skip-plugins=$(sudo -H -u$TO_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    /usr/local/vesta/bin/v-run-wp-cli $TO_DOMAIN cache flush --skip-plugins --skip-themes;
+    /usr/local/vesta/bin/v-run-wp-cli $TO_DOMAIN config shuffle-salts WP_CACHE_KEY_SALT --force --skip-plugins --skip-themes;
+    /usr/local/vesta/bin/v-run-wp-cli $TO_DOMAIN config shuffle-salts --skip-plugins --skip-themes;
 fi
 
 # ----------- Update Wordfence WAF Path -------------
diff --git a/bin/v-install-wordfence-cli b/bin/v-install-wordfence-cli
new file mode 100644
index 00000000..e69de29b
diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index 3f21d172..ba4d38c2 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -71,12 +71,12 @@ if [ -z "$email" ]; then
 fi
 
 if [ ! -d "/home/$user" ]; then
-    echo "User doesn't exist";
+    echo "= Error: Folder /home/$user doesn't exist";
     exit 1;
 fi
 
 if [ ! -d "/home/$user/web/$domain/public_html" ]; then
-    echo "Domain doesn't exist";
+    echo "= Error: Folder /home/$user/web/$domain/public_html doesn't exist";
     exit 1;
 fi
 
@@ -138,24 +138,35 @@ fi
 
 /usr/local/vesta/bin/v-add-database "$user" "$DBUSERSUF" "$DBUSERSUF" "$PASSWDDB" "mysql"
 
-if [ ! -f "/usr/local/bin/wp" ]; then
-    echo "=== Downloading latest wp-cli"
-    wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
-    chmod +x /usr/local/bin/wp
+if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+    echo "= WP CLI is not installed. Installing..."
+    /usr/local/vesta/bin/v-install-wp-cli
+fi
+if [ ! -f "/usr/local/bin/wp" ] && [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+    exit 1;
 fi
 
 WORKINGDIR="/home/$user/web/$domain/public_html"
 rm -rf $WORKINGDIR/*
 cd $WORKINGDIR
 
-sudo -H -u$user wp core download
-sudo -H -u$user wp core config --dbname=$DBUSER --dbuser=$DBUSER --dbpass=$PASSWDDB
+/usr/local/vesta/bin/v-run-wp-cli $domain core download
+if [ ! -f "$WORKINGDIR/index.php" ]; then
+    echo "= WordPress installation failed: WordPress core download failed."
+    exit 1;
+fi
+
+/usr/local/vesta/bin/v-run-wp-cli $domain core config --dbname=$DBUSER --dbuser=$DBUSER --dbpass=$PASSWDDB
+if [ ! -f "$WORKINGDIR/wp-config.php" ]; then
+    echo "= WordPress installation failed: WordPress core config failed, wp-config.php not found."
+    exit 1;
+fi
 
 password=$(LC_CTYPE=C tr -dc A-Za-z0-9_\!\@\#\$\%\^\&\*\(\)-+= < /dev/urandom | head -c 12)
 
 wpadmin=$(echo "$domain" | sed 's#\.#_#g')_4dm1n
 
-sudo -H -u$user wp core install --url="$domain" --title="$domain" --admin_user="$wpadmin" --admin_password="$password" --admin_email="$email" --path=$WORKINGDIR
+/usr/local/vesta/bin/v-run-wp-cli $domain core install --url="$domain" --title="$domain" --admin_user="$wpadmin" --admin_password="$password" --admin_email="$email" --path=$WORKINGDIR
 
 mysql -u$DBUSER -p$PASSWDDB -e "USE $DBUSER; update wp_options set option_value = '$PROTOCOL://$domain' where option_name = 'siteurl'; update wp_options set option_value = '$PROTOCOL://$domain' where option_name = 'home';"
 
diff --git a/bin/v-get-wp-cli b/bin/v-install-wp-cli
similarity index 60%
rename from bin/v-get-wp-cli
rename to bin/v-install-wp-cli
index c097a024..e9be765d 100644
--- a/bin/v-get-wp-cli
+++ b/bin/v-install-wp-cli
@@ -24,10 +24,16 @@ if [ ! -f "/usr/local/bin/composer" ]; then
 fi
 
 if [ -d "/usr/local/bin/wp-cli" ]; then
-    echo "= Removing old WP CLI..."
+    echo "= Removing old myVesta WP CLI..."
     rm -rf /usr/local/bin/wp-cli
 fi
 
+echo "= Installing classic WP CLI..."
+wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
+chmod +x /usr/local/bin/wp
+
+echo "= Installing myVesta WP CLI..."
+
 cd /usr/local/bin
 git clone https://github.com/wp-cli/wp-cli.git
 
@@ -36,9 +42,21 @@ chown -R www-data:www-data wp-cli
 cd wp-cli/
 sudo -H -u www-data composer install
 
+echo "= Installing search-replace-command package..."
+sudo -H -u www-data WP_CLI_PACKAGES_DIR=/usr/local/bin/wp-cli/packages php /usr/local/bin/wp-cli/php/boot-fs.php package install wp-cli/search-replace-command
+
 # Fix terminal columns issue for WP CLI
+echo "= Fixing terminal columns issue for WP CLI..."
 /usr/local/vesta/bin/v-sed '$columns = 80;' "if (file_exists('/usr/local/bin/wp-cli/COLUMNS')) \$columns=intval(file_get_contents('/usr/local/bin/wp-cli/COLUMNS')); else \$columns = 80;" '/usr/local/bin/wp-cli/vendor/wp-cli/php-cli-tools/lib/cli/Shell.php'
 
-echo "= WP CLI installed successfully."
+echo ""
 
-exit 0;
\ No newline at end of file
+if [ -f "/usr/local/bin/wp-cli/php/boot-fs.php" ] || [ -f "/usr/local/bin/wp" ]; then
+    echo "= WP CLI installed successfully."
+    echo "= Usage: v-run-wp-cli DOMAIN WP_CLI_COMMAND"
+    exit 0;
+else
+    echo "= WP CLI installation failed."
+    echo "= Please install it manually."
+    exit 1;
+fi
diff --git a/bin/v-migrate-site-to-https b/bin/v-migrate-site-to-https
index b6f4295b..1df0f0d5 100644
--- a/bin/v-migrate-site-to-https
+++ b/bin/v-migrate-site-to-https
@@ -40,6 +40,14 @@ is_format_valid 'domain' 'user'
 is_object_valid 'user' 'USER' "$user"
 is_object_unsuspended 'user' 'USER' "$user"
 
+if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+    echo "= WP CLI is not installed. Installing..."
+    /usr/local/vesta/bin/v-install-wp-cli
+fi
+if [ ! -f "/usr/local/bin/wp" ] && [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+    exit 1;
+fi
+
 FROM_DATABASE_NAME=''
 FROM_DATABASE_USERNAME=''
 FROM_DATABASE_PASSWORD=''
@@ -113,10 +121,12 @@ if [ $IT_IS_WP -eq 0 ]; then
         git clone https://github.com/interconnectit/Search-Replace-DB.git
     fi
 else
-    if [ ! -f "/usr/local/bin/wp" ]; then
-        echo "=== Downloading latest wp-cli"
-        wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
-        chmod +x /usr/local/bin/wp
+    if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+        echo "= WP CLI is not installed. Installing..."
+        /usr/local/vesta/bin/v-install-wp-cli
+    fi
+    if [ ! -f "/usr/local/bin/wp" ] && [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+        exit 1;
     fi
 fi
 
@@ -172,9 +182,9 @@ if [ $IT_IS_WP -eq 0 ]; then
 else
     cd $SITE_FOLDER
     echo "=== Replacing $FROM_REPLACE1 to $TO_REPLACE1 in database $FROM_DATABASE_NAME"
-    sudo -H -u$FROM_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "$FROM_REPLACE1" "$TO_REPLACE1" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$FROM_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    /usr/local/vesta/bin/v-run-wp-cli $FROM_DOMAIN search-replace "$FROM_REPLACE1" "$TO_REPLACE1" --precise --all-tables --skip-columns=guid --skip-plugins --skip-themes;
     echo "=== Replacing $FROM_REPLACE2 to $TO_REPLACE2 in database $FROM_DATABASE_NAME"
-    sudo -H -u$FROM_USER /usr/bin/php$phpver /usr/local/bin/wp search-replace "$FROM_REPLACE2" "$TO_REPLACE2" --precise --all-tables --skip-columns=guid --skip-plugins=$(sudo -H -u$FROM_USER /usr/bin/php$phpver /usr/local/bin/wp plugin list --field=name | tr '\n' ',') --skip-themes;
+    /usr/local/vesta/bin/v-run-wp-cli $FROM_DOMAIN search-replace "$FROM_REPLACE2" "$TO_REPLACE2" --precise --all-tables --skip-columns=guid --skip-plugins --skip-themes;
 fi
 
 echo "===== DONE ===="
diff --git a/bin/v-run-wp-cli b/bin/v-run-wp-cli
index ef4f6e10..c0c37d25 100644
--- a/bin/v-run-wp-cli
+++ b/bin/v-run-wp-cli
@@ -45,28 +45,37 @@ is_object_unsuspended 'user' 'USER' "$user"
 is_object_unsuspended 'web' 'DOMAIN' "$domain"
 
 if [ ! -d "/home/$user" ]; then
-    # echo "User doesn't exist";
+    echo "= User doesn't exist";
     exit 1;
 fi
 
-if [ ! -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
-    echo 'Please install WordPress first.'
+if [[ "$wp_command" != core\ download* ]] && [[ "$wp_command" != core\ config* ]] && [ ! -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
+    echo '= Please install WordPress first.'
     exit 1;
 fi
 
-if ! command -v wp &> /dev/null; then
-    echo "WP CLI is not installed. Installing..."
-    wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
-    chmod +x /usr/local/bin/wp
-    echo "WP CLI installed successfully."
+wpcli=""
+
+if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+    echo "= WP CLI is not installed. Installing..."
+    /usr/local/vesta/bin/v-install-wp-cli
 fi
 
-wpcli="/usr/local/bin/wp"
+if [ -f "/usr/local/bin/wp" ]; then
+    wpcli="/usr/local/bin/wp"
+    WP_CLI_PACKAGES_DIR=""
+fi
 
-if [ -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+if [ -f "/usr/local/bin/wp-cli/php/boot-fs.php" ] && [ -d "/usr/local/bin/wp-cli/packages/vendor/wp-cli/search-replace-command" ] && [ -z "$USE_WP_CLI_BUNDLED" ]; then
     wpcli="/usr/local/bin/wp-cli/php/boot-fs.php"
     COLUMNS=$(/usr/bin/env stty size 2>/dev/null | awk '{print $2}')
     echo $COLUMNS > /usr/local/bin/wp-cli/COLUMNS
+    WP_CLI_PACKAGES_DIR="WP_CLI_PACKAGES_DIR=/usr/local/bin/wp-cli/packages"
+fi
+
+if [ -z "$wpcli" ]; then
+    echo "= WP CLI is not installed. Please install it manually."
+    exit 1;
 fi
 
 mkdir -p /home/$user/.wp-cli
@@ -83,7 +92,20 @@ fi
 #----------------------------------------------------------#
 
 cd /home/$USER/web/$domain/public_html
-sudo -u $USER /usr/bin/php$phpver -d disable_functions=pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen -d open_basedir=/home/$user/web/$domain:/home/$user/.wp-cli:/home/$user/tmp:/usr/local/bin $wpcli --path=/home/$user/web/$domain/public_html/ $wp_command 2>/home/$user/web/$domain/wp-cli-error.log
+
+if [ -z "$OPEN_BASEDIR" ]; then
+    OPEN_BASEDIR="/home/$user/web/$domain:/home/$user/.wp-cli:/home/$user/tmp:/usr/local/bin:/tmp"
+fi
+
+if [ -z "$DISABLE_FUNCTIONS" ]; then
+    DISABLE_FUNCTIONS="pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,exec,system,passthru,shell_exec,proc_open,popen"
+fi
+
+if [ -z "$SHOW_ERRORS" ]; then
+    sudo -u $USER $WP_CLI_PACKAGES_DIR /usr/bin/php$phpver -d disable_functions=$DISABLE_FUNCTIONS -d open_basedir=$OPEN_BASEDIR $wpcli --path=/home/$user/web/$domain/public_html/ $wp_command 2>/home/$user/web/$domain/wp-cli-error.log
+else
+    sudo -u $USER $WP_CLI_PACKAGES_DIR /usr/bin/php$phpver -d disable_functions=$DISABLE_FUNCTIONS -d open_basedir=$OPEN_BASEDIR $wpcli --path=/home/$user/web/$domain/public_html/ $wp_command
+fi
 
 return_code=$?
 

From 35653eec54bb105cc383a5cbd255fc1ad0791d32 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sat, 26 Jul 2025 22:00:22 +0200
Subject: [PATCH 2271/2300] Add WordFence CLI installation script

---
 bin/v-desinfect-wordpress   |  5 +++++
 bin/v-install-wordfence-cli | 37 +++++++++++++++++++++++++++++++++++++
 2 files changed, 42 insertions(+)

diff --git a/bin/v-desinfect-wordpress b/bin/v-desinfect-wordpress
index fcdc2f66..51ee217e 100644
--- a/bin/v-desinfect-wordpress
+++ b/bin/v-desinfect-wordpress
@@ -27,6 +27,11 @@ if [ -z "$user" ]; then
     exit 1
 fi
 
+if [ ! -f "/usr/local/vesta/bin/v-wf-malware-hyperscan-with-remediate" ]; then
+    echo "= WordFence CLI is not installed. Installing..."
+    /usr/local/vesta/bin/v-install-wordfence-cli
+fi
+
 # absolute paths to maintenance scripts, in desired order
 declare -a tasks=(
     "/usr/local/vesta/bin/v-change-database-password-for-wordpress"
diff --git a/bin/v-install-wordfence-cli b/bin/v-install-wordfence-cli
index e69de29b..fc6ca0b5 100644
--- a/bin/v-install-wordfence-cli
+++ b/bin/v-install-wordfence-cli
@@ -0,0 +1,37 @@
+#!/bin/bash
+# info: Script for installing WordFence CLI
+# options: NONE
+
+if ! command -v git &> /dev/null; then
+    echo "= Git is not installed. Installing..."
+    apt-get update > /dev/null 2>&1
+    apt-get install -y git
+fi
+
+cd /root
+
+if [ ! -d "myvesta-wordfence-cli" ]; then
+    git clone https://github.com/isscbta/myvesta-wordfence-cli.git
+    cd ~/myvesta-wordfence-cli/
+else
+    cd ~/myvesta-wordfence-cli/
+    git pull
+fi
+
+echo ""
+echo "----------------------------------------------------------------"
+echo ""
+echo "Which Docker container do you want to install for WordFence CLI?"
+echo "1. WordFence CLI official Docker container"
+echo "2. WordFence CLI Docker container maintained by myVesta"
+read -r -p "Enter your choice: " choice < /dev/tty
+
+if [ "$choice" == "1" ]; then
+    bash wf-cli-install.sh
+fi
+
+if [ "$choice" == "2" ]; then
+    bash wf-cli-install-our-image.sh
+fi
+
+exit 0;

From 95ed753b0b1bb3bf8bd7aad2631bc55093f22092 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 27 Jul 2025 18:07:14 +0200
Subject: [PATCH 2272/2300] Separating v-install-wp-cli-myvesta. Update
 v-run-wp-cli to display error log if PHP Fatal Error occured. Updating
 v-run-wp-cli to use standard wp-cli, making v-run-wp-cli-myvesta for myvesta
 version of wp-cli.

---
 bin/v-install-wp-cli         | 39 ++----------------------
 bin/v-install-wp-cli-myvesta | 58 ++++++++++++++++++++++++++++++++++++
 bin/v-run-wp-cli             | 18 +++++++----
 bin/v-run-wp-cli-myvesta     |  8 +++++
 4 files changed, 81 insertions(+), 42 deletions(-)
 create mode 100644 bin/v-install-wp-cli-myvesta
 create mode 100644 bin/v-run-wp-cli-myvesta

diff --git a/bin/v-install-wp-cli b/bin/v-install-wp-cli
index e9be765d..17df71e8 100644
--- a/bin/v-install-wp-cli
+++ b/bin/v-install-wp-cli
@@ -12,46 +12,11 @@ if [ "$whoami" != "root" ]; then
     exit 1
 fi
 
-# Importing system environment
-source /etc/profile
-
-if [ ! -f "/usr/local/bin/composer" ]; then
-    echo "= Composer is not installed. Installing..."
-    php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
-    php composer-setup.php --install-dir=/usr/local/bin --filename=composer
-    php -r "unlink('composer-setup.php');"
-    echo "= Composer installed successfully."
-fi
-
-if [ -d "/usr/local/bin/wp-cli" ]; then
-    echo "= Removing old myVesta WP CLI..."
-    rm -rf /usr/local/bin/wp-cli
-fi
-
-echo "= Installing classic WP CLI..."
+echo "= Installing WP CLI by downloading phar file..."
 wget -nv https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/local/bin/wp
 chmod +x /usr/local/bin/wp
 
-echo "= Installing myVesta WP CLI..."
-
-cd /usr/local/bin
-git clone https://github.com/wp-cli/wp-cli.git
-
-chown -R www-data:www-data wp-cli
-
-cd wp-cli/
-sudo -H -u www-data composer install
-
-echo "= Installing search-replace-command package..."
-sudo -H -u www-data WP_CLI_PACKAGES_DIR=/usr/local/bin/wp-cli/packages php /usr/local/bin/wp-cli/php/boot-fs.php package install wp-cli/search-replace-command
-
-# Fix terminal columns issue for WP CLI
-echo "= Fixing terminal columns issue for WP CLI..."
-/usr/local/vesta/bin/v-sed '$columns = 80;' "if (file_exists('/usr/local/bin/wp-cli/COLUMNS')) \$columns=intval(file_get_contents('/usr/local/bin/wp-cli/COLUMNS')); else \$columns = 80;" '/usr/local/bin/wp-cli/vendor/wp-cli/php-cli-tools/lib/cli/Shell.php'
-
-echo ""
-
-if [ -f "/usr/local/bin/wp-cli/php/boot-fs.php" ] || [ -f "/usr/local/bin/wp" ]; then
+if [ -f "/usr/local/bin/wp" ]; then
     echo "= WP CLI installed successfully."
     echo "= Usage: v-run-wp-cli DOMAIN WP_CLI_COMMAND"
     exit 0;
diff --git a/bin/v-install-wp-cli-myvesta b/bin/v-install-wp-cli-myvesta
new file mode 100644
index 00000000..f619626f
--- /dev/null
+++ b/bin/v-install-wp-cli-myvesta
@@ -0,0 +1,58 @@
+#!/bin/bash
+# info: Download myVesta WP CLI
+# options: NONE
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+if [ ! -f "/usr/local/bin/composer" ]; then
+    echo "= Composer is not installed. Installing..."
+    php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
+    php composer-setup.php --install-dir=/usr/local/bin --filename=composer
+    php -r "unlink('composer-setup.php');"
+    echo "= Composer installed successfully."
+fi
+
+if [ -d "/usr/local/bin/wp-cli" ]; then
+    echo "= Removing old myVesta WP CLI..."
+    rm -rf /usr/local/bin/wp-cli
+fi
+
+echo "= Installing myVesta WP CLI..."
+
+cd /usr/local/bin
+git clone https://github.com/wp-cli/wp-cli.git
+
+chown -R www-data:www-data wp-cli
+
+cd wp-cli/
+sudo -H -u www-data composer install
+
+echo "= Installing search-replace-command package..."
+sudo -H -u www-data WP_CLI_PACKAGES_DIR=/usr/local/bin/wp-cli/packages php /usr/local/bin/wp-cli/php/boot-fs.php package install wp-cli/search-replace-command
+
+# Fix terminal columns issue for WP CLI
+echo "= Fixing terminal columns issue for WP CLI..."
+/usr/local/vesta/bin/v-sed '$columns = 80;' "if (file_exists('/usr/local/bin/wp-cli/COLUMNS')) \$columns=intval(file_get_contents('/usr/local/bin/wp-cli/COLUMNS')); else \$columns = 80;" '/usr/local/bin/wp-cli/vendor/wp-cli/php-cli-tools/lib/cli/Shell.php'
+
+echo ""
+
+if [ -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+    echo "= myVesta WP CLI installed successfully."
+    echo "= Usage: v-run-wp-cli-myvesta DOMAIN WP_CLI_COMMAND"
+    exit 0;
+else
+    echo "= myVesta WP CLI installation failed."
+    echo "= Please install it manually."
+    exit 1;
+fi
diff --git a/bin/v-run-wp-cli b/bin/v-run-wp-cli
index c0c37d25..999e30a8 100644
--- a/bin/v-run-wp-cli
+++ b/bin/v-run-wp-cli
@@ -61,12 +61,19 @@ if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php
     /usr/local/vesta/bin/v-install-wp-cli
 fi
 
+output='terminal'
+if [ -t 1 ]; then
+    output='terminal'
+else
+    output='file'
+fi
+
 if [ -f "/usr/local/bin/wp" ]; then
     wpcli="/usr/local/bin/wp"
     WP_CLI_PACKAGES_DIR=""
 fi
 
-if [ -f "/usr/local/bin/wp-cli/php/boot-fs.php" ] && [ -d "/usr/local/bin/wp-cli/packages/vendor/wp-cli/search-replace-command" ] && [ -z "$USE_WP_CLI_BUNDLED" ]; then
+if  [ ! -z "$USE_WP_CLI_MYVESTA" ] && [ -f "/usr/local/bin/wp-cli/php/boot-fs.php" ] && [ -d "/usr/local/bin/wp-cli/packages/vendor/wp-cli/search-replace-command" ] && [ "$output" == "terminal" ]; then
     wpcli="/usr/local/bin/wp-cli/php/boot-fs.php"
     COLUMNS=$(/usr/bin/env stty size 2>/dev/null | awk '{print $2}')
     echo $COLUMNS > /usr/local/bin/wp-cli/COLUMNS
@@ -113,10 +120,11 @@ if [ -f "/usr/local/bin/wp-cli/COLUMNS" ]; then
     rm /usr/local/bin/wp-cli/COLUMNS
 fi
 
-# echo "WP CLI: Done."
-# echo "To see Warning/Error log: "
-# echo "cat /home/$user/web/$domain/wp-cli-error.log"
-
+if [ -z "$SHOW_ERRORS" ]; then
+    if grep -q "PHP Fatal error" /home/$user/web/$domain/wp-cli-error.log || [ $return_code -ne 0 ]; then
+        cat /home/$user/web/$domain/wp-cli-error.log
+    fi
+fi
 #----------------------------------------------------------#
 #                       Vesta                              #
 #----------------------------------------------------------#
diff --git a/bin/v-run-wp-cli-myvesta b/bin/v-run-wp-cli-myvesta
new file mode 100644
index 00000000..e250a8ee
--- /dev/null
+++ b/bin/v-run-wp-cli-myvesta
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+if [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+    echo "= myVesta WP CLI is not installed. Installing..."
+    /usr/local/vesta/bin/v-install-wp-cli-myvesta
+fi
+
+USE_WP_CLI_MYVESTA=1 /usr/local/vesta/bin/v-run-wp-cli "$@"

From ef8d033b60e0dd6e1a1a9fa2bad9eaf7d7dd0e0f Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 30 Jul 2025 16:18:20 +0200
Subject: [PATCH 2273/2300] Enhance v-run-wp-cli and v-run-wp-cli-myvesta to
 check for file age and update if older than 30 days

---
 bin/v-run-wp-cli         | 18 ++++++++++++++++--
 bin/v-run-wp-cli-myvesta | 13 +++++++++++++
 2 files changed, 29 insertions(+), 2 deletions(-)

diff --git a/bin/v-run-wp-cli b/bin/v-run-wp-cli
index 999e30a8..e4a3d4a7 100644
--- a/bin/v-run-wp-cli
+++ b/bin/v-run-wp-cli
@@ -61,7 +61,21 @@ if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php
     /usr/local/vesta/bin/v-install-wp-cli
 fi
 
-output='terminal'
+if [ -z "$USE_WP_CLI_MYVESTA" ]; then
+    if [ -f "/usr/local/bin/wp" ]; then
+        # Get current time and file ctime in seconds since epoch
+        current_time=$(date +%s)
+        file_ctime=$(stat -c %Z /usr/local/bin/wp)
+        # Calculate age in days
+        age_days=$(( (current_time - file_ctime) / 86400 ))
+        if [ "$age_days" -gt 30 ]; then
+            echo "= The /usr/local/bin/wp file is older than 30 days (based on CTime)."
+            echo "= Updating WP CLI..."
+            /usr/local/vesta/bin/v-install-wp-cli
+        fi
+    fi
+fi
+
 if [ -t 1 ]; then
     output='terminal'
 else
@@ -73,7 +87,7 @@ if [ -f "/usr/local/bin/wp" ]; then
     WP_CLI_PACKAGES_DIR=""
 fi
 
-if  [ ! -z "$USE_WP_CLI_MYVESTA" ] && [ -f "/usr/local/bin/wp-cli/php/boot-fs.php" ] && [ -d "/usr/local/bin/wp-cli/packages/vendor/wp-cli/search-replace-command" ] && [ "$output" == "terminal" ]; then
+if [ ! -z "$USE_WP_CLI_MYVESTA" ] && [ -f "/usr/local/bin/wp-cli/php/boot-fs.php" ] && [ -d "/usr/local/bin/wp-cli/packages/vendor/wp-cli/search-replace-command" ] && [ "$output" == "terminal" ]; then
     wpcli="/usr/local/bin/wp-cli/php/boot-fs.php"
     COLUMNS=$(/usr/bin/env stty size 2>/dev/null | awk '{print $2}')
     echo $COLUMNS > /usr/local/bin/wp-cli/COLUMNS
diff --git a/bin/v-run-wp-cli-myvesta b/bin/v-run-wp-cli-myvesta
index e250a8ee..5947edfa 100644
--- a/bin/v-run-wp-cli-myvesta
+++ b/bin/v-run-wp-cli-myvesta
@@ -5,4 +5,17 @@ if [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
     /usr/local/vesta/bin/v-install-wp-cli-myvesta
 fi
 
+if [ -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+    # Get current time and file ctime in seconds since epoch
+    current_time=$(date +%s)
+    file_ctime=$(stat -c %Z /usr/local/bin/wp-cli/php/boot-fs.php)
+    # Calculate age in days
+    age_days=$(( (current_time - file_ctime) / 86400 ))
+    if [ "$age_days" -gt 30 ]; then
+        echo "= The /usr/local/bin/wp-cli/php/boot-fs.php file is older than 30 days (based on CTime)."
+        echo "= Updating myVesta WP CLI..."
+        /usr/local/vesta/bin/v-install-wp-cli-myvesta
+    fi
+fi
+
 USE_WP_CLI_MYVESTA=1 /usr/local/vesta/bin/v-run-wp-cli "$@"

From 48944af1826e8bb2dd1540094b6bf561003f207f Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Wed, 30 Jul 2025 18:14:25 +0200
Subject: [PATCH 2274/2300] Update v-install-wp-cli-myvesta to set PHP version
 dynamically based on the oldest installed version and revert to the current
 version after installation

---
 bin/v-install-wp-cli-myvesta | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/bin/v-install-wp-cli-myvesta b/bin/v-install-wp-cli-myvesta
index f619626f..b65479f6 100644
--- a/bin/v-install-wp-cli-myvesta
+++ b/bin/v-install-wp-cli-myvesta
@@ -35,12 +35,33 @@ git clone https://github.com/wp-cli/wp-cli.git
 
 chown -R www-data:www-data wp-cli
 
+ver_ge() {
+    # usage: ver_ge 7.2 5.6   --> returns true if $1 is greater than or equal to $2
+    [ "$(printf '%s\n' "$1" "$2" | sort -V | head -n1)" = "$2" ]
+}
+
+current_php_version=$(readlink -f /usr/bin/php | grep -oP 'php\K[0-9]+\.[0-9]+')
+
+php_versions=$(/usr/local/vesta/bin/v-list-php)
+for php_version in $php_versions; do
+    if ver_ge "$php_version" "7.2"; then
+        oldest_allowed_php_version=$php_version
+        break
+    fi
+done
+
+echo "= Setting PHP version to $oldest_allowed_php_version"
+update-alternatives --set php /usr/bin/php$oldest_allowed_php_version
+
 cd wp-cli/
 sudo -H -u www-data composer install
 
 echo "= Installing search-replace-command package..."
 sudo -H -u www-data WP_CLI_PACKAGES_DIR=/usr/local/bin/wp-cli/packages php /usr/local/bin/wp-cli/php/boot-fs.php package install wp-cli/search-replace-command
 
+echo "= Setting PHP version to $current_php_version"
+update-alternatives --set php /usr/bin/php$current_php_version
+
 # Fix terminal columns issue for WP CLI
 echo "= Fixing terminal columns issue for WP CLI..."
 /usr/local/vesta/bin/v-sed '$columns = 80;' "if (file_exists('/usr/local/bin/wp-cli/COLUMNS')) \$columns=intval(file_get_contents('/usr/local/bin/wp-cli/COLUMNS')); else \$columns = 80;" '/usr/local/bin/wp-cli/vendor/wp-cli/php-cli-tools/lib/cli/Shell.php'

From 46a6ebafb0ad8a4a09008a21859b6dd2b0d3f9eb Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 1 Aug 2025 19:42:16 +0200
Subject: [PATCH 2275/2300] Enhance v-commander to check for kernel updates and
 reboot requirements

---
 bin/v-commander | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/bin/v-commander b/bin/v-commander
index f04b3a17..72607c95 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -201,11 +201,9 @@ do
         apt_upgraded=1
         
         kernelupdate=$(grep -c 'linux-image-' /var/log/apt/history.log)
-        if [ $kernelupdate -gt 0 ]; then
+        if [ $kernelupdate -gt 0 ] || [ -f "/run/reboot-required" ] || [ -f "/var/run/reboot-required" ]; then
             touch /root/kernelupdate
-            echo "== kernel is updated"
-        else
-            echo "== kernel is not updated"
+            echo "== kernel is updated, reboot is required!"
         fi
     fi
 

From cc09de9b6ec7e6104e5451ca2274822f3eaa8651 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 1 Aug 2025 19:46:28 +0200
Subject: [PATCH 2276/2300] v-fix-website-permissions: checks for php_chmod
 conf files

---
 bin/v-fix-website-permissions | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 13c6775d..5c1eaca3 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -77,6 +77,15 @@ find public_html/ -type d ! -user $USER -exec chown $USER:$USER {} +
 find public_html/ -type f ! \( -name "*.php" -o -name "*.env" \) ! -user $USER -exec chown $USER:$USER {} +
 
 php_chmod="600"
+if [ -f "/home/php_chmod" ]; then
+    php_chmod=$(cat /home/php_chmod)
+fi
+if [ -f "/home/$USER/php_chmod" ]; then
+    php_chmod=$(cat /home/$USER/php_chmod)
+fi
+if [ -f "/home/$USER/web/php_chmod" ]; then
+    php_chmod=$(cat /home/$USER/web/php_chmod)
+fi
 if [ -f "/home/$USER/web/$domain/php_chmod" ]; then
     php_chmod=$(cat /home/$USER/web/$domain/php_chmod)
 fi

From c1f2a02fb8a05f9147e8bbc4d6dffaed6bb0e97e Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 1 Aug 2025 20:08:17 +0200
Subject: [PATCH 2277/2300] Implement cron job for fixing website permissions

---
 install/vst-install-debian.sh |  4 +++-
 src/deb/vesta/postinst        | 10 ++++++++++
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index f6de9e70..9517e4ef 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1894,7 +1894,9 @@ command="sudo $VESTA/bin/v-update-user-stats"
 $VESTA/bin/v-add-cron-job 'admin' '20' '00' '*' '*' '*' "$command"
 command="sudo $VESTA/bin/v-update-sys-rrd"
 $VESTA/bin/v-add-cron-job 'admin' '*/5' '*' '*' '*' '*' "$command"
-service cron restart
+command="sudo $VESTA/bin/v-fix-website-permissions-for-all-websites > /dev/null 2>&1"
+$VESTA/bin/v-add-cron-job 'admin' '05' '03' '*' '*' '*' "$command"
+systemctl restart cron.service
 
 echo "== Building inititall rrd images"
 $VESTA/bin/v-update-sys-rrd
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index 68252789..d8a22ee1 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -21,10 +21,20 @@ if [ ! -d "/usr/local/vesta/data/upgrades" ]; then
     mkdir -p /usr/local/vesta/data/upgrades
 fi
 
+VESTA="/usr/local/vesta"
+
 # show changelog after update
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# Fixing permissions for all websites
+if ! grep -q "fix-website-permissions-for-all-websites" /usr/local/vesta/data/users/admin/cron.conf; then
+    echo "== Fixing permissions for all websites"
+    command="sudo $VESTA/bin/v-fix-website-permissions-for-all-websites > /dev/null 2>&1"
+    $VESTA/bin/v-add-cron-job 'admin' '05' '03' '*' '*' '*' "$command"
+    systemctl restart cron.service
+fi
+
 if ! grep -q "FILEMANAGER_KEY='FREEFM'" /usr/local/vesta/conf/vesta.conf; then
     echo "== Adding FileManager license to vesta.conf"
     echo "FILEMANAGER_KEY='FREEFM'" >> /usr/local/vesta/conf/vesta.conf

From 97548e55fb76e9fd10913a0caedb08f535c9cb43 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 3 Aug 2025 15:00:29 +0200
Subject: [PATCH 2278/2300] Removing temporary Docker container network
 interfaces from RRD

---
 bin/v-update-sys-rrd-net | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/bin/v-update-sys-rrd-net b/bin/v-update-sys-rrd-net
index e9c642e4..d59eefd9 100755
--- a/bin/v-update-sys-rrd-net
+++ b/bin/v-update-sys-rrd-net
@@ -35,13 +35,15 @@ if [ ! -d "$RRD/net" ]; then
     mkdir $RRD/net
 fi
 
+find $RRD/net -name "veth*" -delete
+
 # Parsing network interfaces
 ndev=$(cat /proc/net/dev)
 ifaces=$(echo "$ndev" |grep : |cut -f 1 -d : | sed "s/ //g")
 
 # Parsing excludes
 if [ -z "$RRD_IFACE_EXCLUDE" ]; then
-    RRD_IFACE_EXCLUDE='lo'
+    RRD_IFACE_EXCLUDE='lo,'
 fi
 for exclude in $(echo ${RRD_IFACE_EXCLUDE//,/ }); do
     ifaces=$(echo "$ifaces" |grep -vw "$exclude" )
@@ -62,6 +64,8 @@ for iface in $ifaces; do
             RRA:MAX:0.5:6:700 \
             RRA:MAX:0.5:24:775 \
             RRA:MAX:0.5:288:797
+    else
+        touch $RRD/net/$iface.rrd
     fi
 
     # Parsing device stats
@@ -112,6 +116,8 @@ for iface in $ifaces; do
 
 done
 
+find $RRD/net -name "*.png" -mtime +1 -delete
+find $RRD/net -name "*.rrd" -mtime +1 -delete
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From d18967e627f654fc980457ead8bd35d5466bd9e6 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 4 Aug 2025 11:07:07 +0200
Subject: [PATCH 2279/2300] Refactor v-run-wp-cli to simplify WP CLI
 installation check by removing redundant file check for boot-fs.php

---
 bin/v-run-wp-cli | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/v-run-wp-cli b/bin/v-run-wp-cli
index e4a3d4a7..b1e4e6aa 100644
--- a/bin/v-run-wp-cli
+++ b/bin/v-run-wp-cli
@@ -56,7 +56,7 @@ fi
 
 wpcli=""
 
-if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
+if [ ! -f "/usr/local/bin/wp" ]; then
     echo "= WP CLI is not installed. Installing..."
     /usr/local/vesta/bin/v-install-wp-cli
 fi

From 8680995e66e820258bfaede558a5e144120856a8 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 4 Aug 2025 15:19:22 +0200
Subject: [PATCH 2280/2300] Avoid 600 permissions for Apache-less variant

---
 bin/v-fix-user-permissions    | 8 ++++----
 bin/v-fix-website-permissions | 6 ++++++
 2 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/bin/v-fix-user-permissions b/bin/v-fix-user-permissions
index 991ada62..47690477 100644
--- a/bin/v-fix-user-permissions
+++ b/bin/v-fix-user-permissions
@@ -49,10 +49,10 @@ find /home/$user/mail/*/ -maxdepth 1 -type d -exec chmod g-rwx {} \;
 find /home/$user/conf/dns/ -type f -exec chown root:bind {} \;
 find /home/$user/conf/ -type d -exec chown root:root {} \;
 
-find /home/$user/web/*/public_html/ -type d -exec chmod 755 {} +
-find /home/$user/web/*/public_html/ -type f -exec chmod 644 {} +
-find /home/$user/web/*/public_html/ -exec chown $user:$user {} \;
-find /home/$user/web/*/ -name "*.php" -type f -exec chmod 600 {} +
+for domain in $(/usr/local/vesta/bin/v-list-web-domains $user plain |cut -f 1); do
+    /usr/local/vesta/bin/v-fix-website-permissions $domain $user
+    echo "--------------------------------"
+done
 
 echo "Done, permissions fixed for user: $user"
 
diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 5c1eaca3..186075a1 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -28,6 +28,7 @@ USER=$user
 
 # Includes
 source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/conf/vesta.conf
 
 if [ -z "$user" ]; then
     check_result $E_NOTEXIST "domain $domain doesn't exist"
@@ -77,6 +78,11 @@ find public_html/ -type d ! -user $USER -exec chown $USER:$USER {} +
 find public_html/ -type f ! \( -name "*.php" -o -name "*.env" \) ! -user $USER -exec chown $USER:$USER {} +
 
 php_chmod="600"
+
+if [ "$WEB_SYSTEM" = 'nginx' ]; then
+    php_chmod="644"
+fi
+
 if [ -f "/home/php_chmod" ]; then
     php_chmod=$(cat /home/php_chmod)
 fi

From 4dc1e73612d07e80aad72c533d7fd10ed253834e Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 4 Aug 2025 16:42:07 +0200
Subject: [PATCH 2281/2300] Remove redundant WP CLI installation checks from
 multiple scripts

---
 bin/v-add-wordpress-admin   |  8 --------
 bin/v-clone-website         |  8 --------
 bin/v-install-wordpress     |  8 --------
 bin/v-migrate-site-to-https | 15 ---------------
 4 files changed, 39 deletions(-)

diff --git a/bin/v-add-wordpress-admin b/bin/v-add-wordpress-admin
index 20585485..60778fb2 100644
--- a/bin/v-add-wordpress-admin
+++ b/bin/v-add-wordpress-admin
@@ -63,14 +63,6 @@ if [ ! -f "/home/$user/web/$domain/public_html/wp-config.php" ]; then
     exit 1;
 fi
 
-if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
-    echo "= WP CLI is not installed. Installing..."
-    /usr/local/vesta/bin/v-install-wp-cli
-fi
-if [ ! -f "/usr/local/bin/wp" ] && [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
-    exit 1;
-fi
-
 #----------------------------------------------------------#
 #                       Action                             #
 #----------------------------------------------------------#
diff --git a/bin/v-clone-website b/bin/v-clone-website
index 0e089465..9bebbffd 100644
--- a/bin/v-clone-website
+++ b/bin/v-clone-website
@@ -264,14 +264,6 @@ if [ $IT_IS_WP -eq 0 ]; then
         cd /root
         git clone https://github.com/interconnectit/Search-Replace-DB.git
     fi
-else
-    if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
-        echo "= WP CLI is not installed. Installing..."
-        /usr/local/vesta/bin/v-install-wp-cli
-    fi
-    if [ ! -f "/usr/local/bin/wp" ] && [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
-        exit 1;
-    fi
 fi
 
 CREATE_TO_DATABASE=0
diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index ba4d38c2..f23afa74 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -138,14 +138,6 @@ fi
 
 /usr/local/vesta/bin/v-add-database "$user" "$DBUSERSUF" "$DBUSERSUF" "$PASSWDDB" "mysql"
 
-if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
-    echo "= WP CLI is not installed. Installing..."
-    /usr/local/vesta/bin/v-install-wp-cli
-fi
-if [ ! -f "/usr/local/bin/wp" ] && [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
-    exit 1;
-fi
-
 WORKINGDIR="/home/$user/web/$domain/public_html"
 rm -rf $WORKINGDIR/*
 cd $WORKINGDIR
diff --git a/bin/v-migrate-site-to-https b/bin/v-migrate-site-to-https
index 1df0f0d5..c15a521e 100644
--- a/bin/v-migrate-site-to-https
+++ b/bin/v-migrate-site-to-https
@@ -40,13 +40,6 @@ is_format_valid 'domain' 'user'
 is_object_valid 'user' 'USER' "$user"
 is_object_unsuspended 'user' 'USER' "$user"
 
-if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
-    echo "= WP CLI is not installed. Installing..."
-    /usr/local/vesta/bin/v-install-wp-cli
-fi
-if [ ! -f "/usr/local/bin/wp" ] && [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
-    exit 1;
-fi
 
 FROM_DATABASE_NAME=''
 FROM_DATABASE_USERNAME=''
@@ -120,14 +113,6 @@ if [ $IT_IS_WP -eq 0 ]; then
         cd /root
         git clone https://github.com/interconnectit/Search-Replace-DB.git
     fi
-else
-    if [ ! -f "/usr/local/bin/wp" ] || [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
-        echo "= WP CLI is not installed. Installing..."
-        /usr/local/vesta/bin/v-install-wp-cli
-    fi
-    if [ ! -f "/usr/local/bin/wp" ] && [ ! -f "/usr/local/bin/wp-cli/php/boot-fs.php" ]; then
-        exit 1;
-    fi
 fi
 
 

From a183cabdc7ece59d29c37f0c3064779adb52c140 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 4 Aug 2025 16:50:52 +0200
Subject: [PATCH 2282/2300] v-install-wordpress: avoid changing nginx proxy
 template in apache-less variant

---
 bin/v-install-wordpress | 28 +++++++++++++++-------------
 1 file changed, 15 insertions(+), 13 deletions(-)

diff --git a/bin/v-install-wordpress b/bin/v-install-wordpress
index f23afa74..25e38f3e 100644
--- a/bin/v-install-wordpress
+++ b/bin/v-install-wordpress
@@ -119,20 +119,22 @@ fi
 
 TPL_CHANGED=0;
 
-if [ "$PROTOCOL" = "https" ]; then
-    if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https-firewall-wordpress.stpl" ] && [ $TPL_CHANGED -eq 0 ]; then
-        TPL_CHANGED=1;
-        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https-firewall-wordpress" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
+if [ "$WEB_SYSTEM" != 'nginx' ]; then
+    if [ "$PROTOCOL" = "https" ]; then
+        if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https-firewall-wordpress.stpl" ] && [ $TPL_CHANGED -eq 0 ]; then
+            TPL_CHANGED=1;
+            /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https-firewall-wordpress" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
+        fi
+        if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ] && [ $TPL_CHANGED -eq 0 ]; then
+            TPL_CHANGED=1;
+            /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
+        fi
     fi
-    if [ -f "/usr/local/vesta/data/templates/web/nginx/force-https.stpl" ] && [ $TPL_CHANGED -eq 0 ]; then
-        TPL_CHANGED=1;
-        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "force-https" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
-    fi
-fi
-if [ "$PROTOCOL" = "http" ]; then
-    if [ -f "/usr/local/vesta/data/templates/web/nginx/hosting-firewall-wordpress.stpl" ] && [ $TPL_CHANGED -eq 0 ]; then
-        TPL_CHANGED=1;
-        /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "hosting-firewall-wordpress" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
+    if [ "$PROTOCOL" = "http" ]; then
+        if [ -f "/usr/local/vesta/data/templates/web/nginx/hosting-firewall-wordpress.stpl" ] && [ $TPL_CHANGED -eq 0 ]; then
+            TPL_CHANGED=1;
+            /usr/local/vesta/bin/v-change-web-domain-proxy-tpl  "$user" "$domain" "hosting-firewall-wordpress" "jpeg,jpg,png,gif,bmp,ico,svg,tif,tiff,css,js,ttf,otf,webp,txt,csv,rtf,doc,docx,xls,xlsx,ppt,pptx,odf,odp,ods,odt,pdf,psd,ai,eot,eps,ps,zip,tar,tgz,gz,rar,bz2,7z,aac,m4a,mp3,mp4,ogg,wav,wma,3gp,avi,flv,m4v,mkv,mov,mpeg,mpg,wmv,exe,iso,dmg,swf,woff,woff2" "yes"
+        fi
     fi
 fi
 

From 5008c2c778595f0a73d3e78bc55d7a62d37fe371 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Thu, 7 Aug 2025 18:29:11 +0200
Subject: [PATCH 2283/2300] Refactor v-fix-website-permissions to introduce
 conditional checks for PHP and symlink ownership adjustments, allowing for
 more flexible permission management based on configuration files.

---
 bin/v-fix-website-permissions | 108 +++++++++++++++++++++++++---------
 1 file changed, 79 insertions(+), 29 deletions(-)

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index 186075a1..fca37e15 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -68,40 +68,90 @@ if [ -z "$SKIP_OWNERSHIP_CHECK" ] && [ -f "public_html/index.php" ]; then
     fi
 fi
 
+echo "Updating permissions for /home/$USER/web/$domain/"
 
-echo "Updating permissions for /home/$USER/web/$domain/public_html/"
-# Fixing permissions
-find public_html/ -type d ! -perm 755 -exec chmod 755 {} +
-find public_html/ -type f ! \( -name "*.php" -o -name "*.env" \) ! -perm 644 -exec chmod 644 {} +
-# Fixing ownership
-find public_html/ -type d ! -user $USER -exec chown $USER:$USER {} +
-find public_html/ -type f ! \( -name "*.php" -o -name "*.env" \) ! -user $USER -exec chown $USER:$USER {} +
-
-php_chmod="600"
-
-if [ "$WEB_SYSTEM" = 'nginx' ]; then
-    php_chmod="644"
+php_chmod_allowed=1
+if [ -f "/home/php_chmod_disabled" ]; then
+    php_chmod_allowed=0
+fi
+if [ -f "/home/$USER/php_chmod_disabled" ]; then
+    php_chmod_allowed=0
+fi
+if [ -f "/home/$USER/web/php_chmod_disabled" ]; then
+    php_chmod_allowed=0
+fi
+if [ -f "/home/$USER/web/$domain/php_chmod_disabled" ]; then
+    php_chmod_allowed=0
 fi
 
-if [ -f "/home/php_chmod" ]; then
-    php_chmod=$(cat /home/php_chmod)
-fi
-if [ -f "/home/$USER/php_chmod" ]; then
-    php_chmod=$(cat /home/$USER/php_chmod)
-fi
-if [ -f "/home/$USER/web/php_chmod" ]; then
-    php_chmod=$(cat /home/$USER/web/php_chmod)
-fi
-if [ -f "/home/$USER/web/$domain/php_chmod" ]; then
-    php_chmod=$(cat /home/$USER/web/$domain/php_chmod)
+# === General files and directories permissions ===
+if [ "$php_chmod_allowed" -eq 1 ]; then
+    # New way of fixing permissions
+    # Fixing permissions
+    find public_html/ -type d ! -perm 755 -exec chmod 755 {} +
+    find public_html/ -type f ! \( -name "*.php" -o -name "*.env" \) ! -perm 644 -exec chmod 644 {} +
+
+    # Fixing ownership
+    find public_html/ -type d ! -user $USER -exec chown $USER:$USER {} +
+    find public_html/ -type f ! \( -name "*.php" -o -name "*.env" \) ! -user $USER -exec chown $USER:$USER {} +
+else
+    # Old way of fixing permissions
+    # Fixing permissions
+    find public_html/ -type d ! -perm 755 -exec chmod 755 {} +
+    find public_html/ -type f ! -perm 644 -exec chmod 644 {} +
+
+    # Fixing ownership
+    find public_html/ -type d ! -user $USER -exec chown $USER:$USER {} +
+    find public_html/ -type f ! -user $USER -exec chown $USER:$USER {} +
 fi
 
-# Setting chmod 600 for all .php and .env files
-echo "= Setting chmod $php_chmod for all .php and .env files"
-# Fixing permissions
-find -type f \( -name "*.php" -o -name "*.env" \) ! -perm $php_chmod -exec chmod $php_chmod {} +
-# Fixing ownership
-find -type f \( -name "*.php" -o -name "*.env" \) ! -user $USER -exec chown $USER:$USER {} +
+# === PHP and .env permissions ===
+if [ "$php_chmod_allowed" -eq 1 ]; then
+    php_chmod="600"
+
+    if [ "$WEB_SYSTEM" = 'nginx' ]; then
+        php_chmod="644"
+    fi
+
+    if [ -f "/home/php_chmod" ]; then
+        php_chmod=$(cat /home/php_chmod)
+    fi
+    if [ -f "/home/$USER/php_chmod" ]; then
+        php_chmod=$(cat /home/$USER/php_chmod)
+    fi
+    if [ -f "/home/$USER/web/php_chmod" ]; then
+        php_chmod=$(cat /home/$USER/web/php_chmod)
+    fi
+    if [ -f "/home/$USER/web/$domain/php_chmod" ]; then
+        php_chmod=$(cat /home/$USER/web/$domain/php_chmod)
+    fi
+
+    # Setting chmod 600 for all .php and .env files
+    echo "= Setting chmod $php_chmod for all .php and .env files"
+    # Fixing permissions
+    find -type f \( -name "*.php" -o -name "*.env" \) ! -perm $php_chmod -exec chmod $php_chmod {} +
+    # Fixing ownership
+    find -type f \( -name "*.php" -o -name "*.env" \) ! -user $USER -exec chown $USER:$USER {} +
+fi
+
+# === Symlinks ownership ===
+symlink_chown_allowed=1
+if [ -f "/home/symlink_chown_disabled" ]; then
+    symlink_chown_allowed=0
+fi
+if [ -f "/home/$USER/symlink_chown_disabled" ]; then
+    symlink_chown_allowed=0
+fi
+if [ -f "/home/$USER/web/symlink_chown_disabled" ]; then
+    symlink_chown_allowed=0
+fi
+if [ -f "/home/$USER/web/$domain/symlink_chown_disabled" ]; then
+    symlink_chown_allowed=0
+fi
+
+if [ "$symlink_chown_allowed" -eq 1 ]; then
+    find -type l ! -user $USER -exec chown -h $USER:$USER {} +
+fi
 
 #----------------------------------------------------------#
 #                       Vesta                              #

From efe0045c5f7a7fa12ded564a4e7ee49df38cf152 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Thu, 7 Aug 2025 19:03:30 +0200
Subject: [PATCH 2284/2300] Introduction of v-fix-website-permissions-only-php
 script

---
 bin/v-fix-website-permissions                 |   6 +-
 ...site-permissions-for-all-websites-only-php |  44 +++++++
 bin/v-fix-website-permissions-only-php        | 121 ++++++++++++++++++
 install/vst-install-debian.sh                 |   2 +-
 src/deb/vesta/postinst                        |  19 ++-
 5 files changed, 184 insertions(+), 8 deletions(-)
 create mode 100644 bin/v-fix-website-permissions-for-all-websites-only-php
 create mode 100644 bin/v-fix-website-permissions-only-php

diff --git a/bin/v-fix-website-permissions b/bin/v-fix-website-permissions
index fca37e15..50b143c8 100644
--- a/bin/v-fix-website-permissions
+++ b/bin/v-fix-website-permissions
@@ -1,6 +1,6 @@
 #!/bin/bash
-# info: Fixing chown and chmod permissions in the public_html directory
-# options: DOMAIN 
+# info: Fixing chown and chmod permissions for a website
+# options: DOMAIN [USER]
 
 #----------------------------------------------------------#
 #                    Variable&Function                     #
@@ -68,7 +68,7 @@ if [ -z "$SKIP_OWNERSHIP_CHECK" ] && [ -f "public_html/index.php" ]; then
     fi
 fi
 
-echo "Updating permissions for /home/$USER/web/$domain/"
+echo "Updating permissions and ownership for /home/$USER/web/$domain/"
 
 php_chmod_allowed=1
 if [ -f "/home/php_chmod_disabled" ]; then
diff --git a/bin/v-fix-website-permissions-for-all-websites-only-php b/bin/v-fix-website-permissions-for-all-websites-only-php
new file mode 100644
index 00000000..a89d2416
--- /dev/null
+++ b/bin/v-fix-website-permissions-for-all-websites-only-php
@@ -0,0 +1,44 @@
+#!/bin/bash
+# info: fix website permissions for all websites
+# options:
+#
+# The command is used for fixing website permissions for all websites on the server.
+
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+# Importing system variables
+source /etc/profile
+
+# Includes
+source $VESTA/func/main.sh
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+touch /usr/local/vesta/log/fix-website-permissions-for-all-websites-only-php.log
+truncate -s 0 /usr/local/vesta/log/fix-website-permissions-for-all-websites-only-php.log
+
+for user in $(grep '@' /etc/passwd |cut -f1 -d:); do
+    if [ ! -f "/usr/local/vesta/data/users/$user/user.conf" ]; then
+        continue;
+    fi
+
+    for domain in $(/usr/local/vesta/bin/v-list-web-domains $user plain |cut -f 1); do
+        /usr/local/vesta/bin/v-fix-website-permissions-only-php $domain $user >> /usr/local/vesta/log/fix-website-permissions-for-all-websites-only-php.log 2>&1
+        echo "--------------------------------" >> /usr/local/vesta/log/fix-website-permissions-for-all-websites-only-php.log
+    done
+
+done
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+
+# Logging
+log_event "$OK" "$ARGUMENTS"
+
+exit
diff --git a/bin/v-fix-website-permissions-only-php b/bin/v-fix-website-permissions-only-php
new file mode 100644
index 00000000..cf548e6b
--- /dev/null
+++ b/bin/v-fix-website-permissions-only-php
@@ -0,0 +1,121 @@
+#!/bin/bash
+# info: Fixing PHP and .env permissions and ownership for a website
+# options: DOMAIN [USER]
+
+#----------------------------------------------------------#
+#                    Variable&Function                     #
+#----------------------------------------------------------#
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Importing system environment
+source /etc/profile
+
+# Argument definition
+domain=$1
+
+# Check if number of arguments is 2
+if [ $# -eq 2 ]; then
+    user=$2
+else
+    user=$(/usr/local/vesta/bin/v-search-domain-owner $domain)
+fi
+USER=$user
+
+# Includes
+source /usr/local/vesta/func/main.sh
+source /usr/local/vesta/conf/vesta.conf
+
+if [ -z "$user" ]; then
+    check_result $E_NOTEXIST "domain $domain doesn't exist"
+fi
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '1' "$#" 'DOMAIN'
+is_format_valid 'domain'
+is_object_valid 'user' 'USER' "$user"
+
+if [ ! -d "/home/$user" ]; then
+    echo "Error: Folder /home/$user doesn't exist";
+    exit 1;
+fi
+
+if [ ! -d "/home/$user/web/$domain/public_html" ]; then
+    echo "Error: Folder /home/$user/web/$domain/public_html doesn't exist";
+    exit 1;
+fi
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# Going to domain directory
+cd /home/$USER/web/$domain
+
+# Ownership check
+if [ -z "$SKIP_OWNERSHIP_CHECK" ] && [ -f "public_html/index.php" ]; then
+    owner=$(stat -c '%U' "public_html/index.php")
+    if [ "$owner" = "root" ] || [ "$owner" = "www-data" ]; then
+        echo "Skipping permission fix for $domain, because v-lock-wordpress is used (index.php is owned by $owner)"
+        exit 1
+    fi
+fi
+
+echo "Updating PHP and .env permissions and ownership for /home/$USER/web/$domain/"
+
+php_chmod_allowed=1
+if [ -f "/home/php_chmod_disabled" ]; then
+    php_chmod_allowed=0
+fi
+if [ -f "/home/$USER/php_chmod_disabled" ]; then
+    php_chmod_allowed=0
+fi
+if [ -f "/home/$USER/web/php_chmod_disabled" ]; then
+    php_chmod_allowed=0
+fi
+if [ -f "/home/$USER/web/$domain/php_chmod_disabled" ]; then
+    php_chmod_allowed=0
+fi
+
+# === PHP and .env permissions ===
+if [ "$php_chmod_allowed" -eq 1 ]; then
+    php_chmod="600"
+
+    if [ "$WEB_SYSTEM" = 'nginx' ]; then
+        php_chmod="644"
+    fi
+
+    if [ -f "/home/php_chmod" ]; then
+        php_chmod=$(cat /home/php_chmod)
+    fi
+    if [ -f "/home/$USER/php_chmod" ]; then
+        php_chmod=$(cat /home/$USER/php_chmod)
+    fi
+    if [ -f "/home/$USER/web/php_chmod" ]; then
+        php_chmod=$(cat /home/$USER/web/php_chmod)
+    fi
+    if [ -f "/home/$USER/web/$domain/php_chmod" ]; then
+        php_chmod=$(cat /home/$USER/web/$domain/php_chmod)
+    fi
+
+    # Setting chmod 600 for all .php and .env files
+    echo "= Setting chmod $php_chmod for all .php and .env files"
+    # Fixing permissions
+    find -type f \( -name "*.php" -o -name "*.env" \) ! -perm $php_chmod -exec chmod $php_chmod {} +
+    # Fixing ownership
+    find -type f \( -name "*.php" -o -name "*.env" \) ! -user $USER -exec chown $USER:$USER {} +
+fi
+
+#----------------------------------------------------------#
+#                       Vesta                              #
+#----------------------------------------------------------#
+echo "PHP and .env permissions and ownership for $domain have been successfully updated."
+
+exit 0
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 9517e4ef..1c8f2e1b 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1894,7 +1894,7 @@ command="sudo $VESTA/bin/v-update-user-stats"
 $VESTA/bin/v-add-cron-job 'admin' '20' '00' '*' '*' '*' "$command"
 command="sudo $VESTA/bin/v-update-sys-rrd"
 $VESTA/bin/v-add-cron-job 'admin' '*/5' '*' '*' '*' '*' "$command"
-command="sudo $VESTA/bin/v-fix-website-permissions-for-all-websites > /dev/null 2>&1"
+command="sudo $VESTA/bin/v-fix-website-permissions-for-all-websites-only-php"
 $VESTA/bin/v-add-cron-job 'admin' '05' '03' '*' '*' '*' "$command"
 systemctl restart cron.service
 
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index d8a22ee1..f5f79877 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -27,10 +27,21 @@ VESTA="/usr/local/vesta"
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
-# Fixing permissions for all websites
-if ! grep -q "fix-website-permissions-for-all-websites" /usr/local/vesta/data/users/admin/cron.conf; then
-    echo "== Fixing permissions for all websites"
-    command="sudo $VESTA/bin/v-fix-website-permissions-for-all-websites > /dev/null 2>&1"
+if grep -q "fix-website-permissions-for-all-websites" /usr/local/vesta/data/users/admin/cron.conf; then
+    if ! grep -q "fix-website-permissions-for-all-websites-only-php" /usr/local/vesta/data/users/admin/cron.conf; then
+        echo "== Renaming fix-website-permissions-for-all-websites to fix-website-permissions-for-all-websites-only-php"
+        sed -i 's|v-fix-website-permissions-for-all-websites > /dev/null 2>&1|v-fix-website-permissions-for-all-websites-only-php|' /usr/local/vesta/data/users/admin/cron.conf
+        sed -i 's|v-fix-website-permissions-for-all-websites > /dev/null 2>&1|v-fix-website-permissions-for-all-websites-only-php|' /var/spool/cron/crontabs/admin
+        sed -i 's|v-fix-website-permissions-for-all-websites |v-fix-website-permissions-for-all-websites-only-php |' /usr/local/vesta/data/users/admin/cron.conf
+        sed -i 's|v-fix-website-permissions-for-all-websites |v-fix-website-permissions-for-all-websites-only-php |' /var/spool/cron/crontabs/admin
+        systemctl restart cron.service
+    fi
+fi
+
+# Fixing PHP and .env permissions and ownership for all websites
+if ! grep -q "fix-website-permissions-for-all-websites-only-php" /usr/local/vesta/data/users/admin/cron.conf; then
+    echo "== Fixing PHP and .env permissions and ownership for all websites"
+    command="sudo $VESTA/bin/v-fix-website-permissions-for-all-websites-only-php"
     $VESTA/bin/v-add-cron-job 'admin' '05' '03' '*' '*' '*' "$command"
     systemctl restart cron.service
 fi

From 4fff4b498553e2545c674427296d271a0d16ee5f Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Sun, 10 Aug 2025 11:48:54 +0000
Subject: [PATCH 2285/2300] Fix PHP 5.6 array index and implode compatibility
 issues

Co-authored-by: peca <peca@mycity.rs>
---
 web/add/dns/index.php        | 12 ++++++++++--
 web/add/mail/index.php       |  9 +++++++--
 web/add/web/index.php        |  6 +++++-
 web/upload/UploadHandler.php |  9 +++++++--
 4 files changed, 29 insertions(+), 7 deletions(-)

diff --git a/web/add/dns/index.php b/web/add/dns/index.php
index 7c18faab..06ca9547 100644
--- a/web/add/dns/index.php
+++ b/web/add/dns/index.php
@@ -80,7 +80,11 @@ if (!empty($_POST['ok'])) {
 
     // Flush field values on success
     if (empty($_SESSION['error_msg'])) {
-        $_SESSION['ok_msg'] = __('DNS_DOMAIN_CREATED_OK',htmlentities($_POST[v_domain]),htmlentities($_POST[v_domain]));
+        if (PHP_VERSION_ID >= 50600 && PHP_VERSION_ID < 50700) {
+            $_SESSION['ok_msg'] = __('DNS_DOMAIN_CREATED_OK',htmlentities($_POST[v_domain]),htmlentities($_POST[v_domain]));
+        } else {
+            $_SESSION['ok_msg'] = __('DNS_DOMAIN_CREATED_OK',htmlentities($_POST['v_domain']),htmlentities($_POST['v_domain']));
+        }
         unset($v_domain);
     }
 }
@@ -128,7 +132,11 @@ if (!empty($_POST['ok_rec'])) {
 
     // Flush field values on success
     if (empty($_SESSION['error_msg'])) {
-        $_SESSION['ok_msg'] = __('DNS_RECORD_CREATED_OK',htmlentities($_POST[v_rec]),htmlentities($_POST[v_domain]));
+        if (PHP_VERSION_ID >= 50600 && PHP_VERSION_ID < 50700) {
+            $_SESSION['ok_msg'] = __('DNS_RECORD_CREATED_OK',htmlentities($_POST[v_rec]),htmlentities($_POST[v_domain]));
+        } else {
+            $_SESSION['ok_msg'] = __('DNS_RECORD_CREATED_OK',htmlentities($_POST['v_rec']),htmlentities($_POST['v_domain']));
+        }
         unset($v_domain);
         unset($v_rec);
         unset($v_val);
diff --git a/web/add/mail/index.php b/web/add/mail/index.php
index c761139c..5fe9b6ff 100644
--- a/web/add/mail/index.php
+++ b/web/add/mail/index.php
@@ -186,8 +186,13 @@ if (!empty($_POST['ok_acc'])) {
 
     // Flush field values on success
     if (empty($_SESSION['error_msg'])) {
-        $_SESSION['ok_msg'] = __('MAIL_ACCOUNT_CREATED_OK',htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST[v_domain]),htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST[v_domain]));
-        $_SESSION['ok_msg'] .= " / <a style=\"text-decoration: underline; color: #9c8cff;\" href=".$webmail." target='_blank'>" . __('open webmail') . "</a>";
+        if (PHP_VERSION_ID >= 50600 && PHP_VERSION_ID < 50700) {
+            $_SESSION['ok_msg'] = __('MAIL_ACCOUNT_CREATED_OK',htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST[v_domain]),htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST[v_domain]));
+            $_SESSION['ok_msg'] .= " / <a style=\"text-decoration: underline; color: #9c8cff;\" href=".$webmail." target='_blank'>" . __('open webmail') . "</a>";
+        } else {
+            $_SESSION['ok_msg'] = __('MAIL_ACCOUNT_CREATED_OK',htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST['v_domain']),htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST['v_domain']));
+            $_SESSION['ok_msg'] .= " / <a style=\"text-decoration: underline; color: #9c8cff;\" href=".$webmail." target='_blank'>" . __('open webmail') . "</a>";
+        }
         unset($v_account);
         unset($v_password);
         unset($v_password);
diff --git a/web/add/web/index.php b/web/add/web/index.php
index d77b8f40..f8953f19 100644
--- a/web/add/web/index.php
+++ b/web/add/web/index.php
@@ -323,7 +323,11 @@ if (!empty($_POST['ok'])) {
         }
 
         if (!empty($_SESSION['error_msg']) && $domain_added) {
-            $_SESSION['ok_msg'] = __('WEB_DOMAIN_CREATED_OK',htmlentities($_POST[v_domain]),htmlentities($_POST[v_domain]));
+            if (PHP_VERSION_ID >= 50600 && PHP_VERSION_ID < 50700) {
+                $_SESSION['ok_msg'] = __('WEB_DOMAIN_CREATED_OK',htmlentities($_POST[v_domain]),htmlentities($_POST[v_domain]));
+            } else {
+                $_SESSION['ok_msg'] = __('WEB_DOMAIN_CREATED_OK',htmlentities($_POST['v_domain']),htmlentities($_POST['v_domain']));
+            }
             $_SESSION['flash_error_msg'] = $_SESSION['error_msg'];
             $url = '/edit/web/?domain='.strtolower(preg_replace("/^www\./i", "", $_POST['v_domain']));
             header('Location: ' . $url);
diff --git a/web/upload/UploadHandler.php b/web/upload/UploadHandler.php
index 48f40b23..581f9741 100755
--- a/web/upload/UploadHandler.php
+++ b/web/upload/UploadHandler.php
@@ -1095,8 +1095,13 @@ class UploadHandler
             }
         }
         if (count($failed_versions)) {
-            $file->error = $this->get_error_message('image_resize')
-                    .' ('.implode($failed_versions,', ').')';
+            if (PHP_VERSION_ID >= 50600 && PHP_VERSION_ID < 50700) {
+                $file->error = $this->get_error_message('image_resize')
+                        .' ('.implode($failed_versions,', ').')';
+            } else {
+                $file->error = $this->get_error_message('image_resize')
+                        .' ('.implode(', ', $failed_versions).')';
+            }
         }
         // Free memory:
         $this->destroy_image_object($file_path);

From be756306b084aa808dcd4328303a316f0a4a3a10 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Sun, 10 Aug 2025 12:13:20 +0000
Subject: [PATCH 2286/2300] Remove PHP version-specific code for array access
 and string formatting

Co-authored-by: peca <peca@mycity.rs>
---
 web/add/dns/index.php        | 12 ++----------
 web/add/mail/index.php       |  9 ++-------
 web/add/web/index.php        |  6 +-----
 web/upload/UploadHandler.php |  9 ++-------
 4 files changed, 7 insertions(+), 29 deletions(-)

diff --git a/web/add/dns/index.php b/web/add/dns/index.php
index 06ca9547..b9e47abe 100644
--- a/web/add/dns/index.php
+++ b/web/add/dns/index.php
@@ -80,11 +80,7 @@ if (!empty($_POST['ok'])) {
 
     // Flush field values on success
     if (empty($_SESSION['error_msg'])) {
-        if (PHP_VERSION_ID >= 50600 && PHP_VERSION_ID < 50700) {
-            $_SESSION['ok_msg'] = __('DNS_DOMAIN_CREATED_OK',htmlentities($_POST[v_domain]),htmlentities($_POST[v_domain]));
-        } else {
-            $_SESSION['ok_msg'] = __('DNS_DOMAIN_CREATED_OK',htmlentities($_POST['v_domain']),htmlentities($_POST['v_domain']));
-        }
+        $_SESSION['ok_msg'] = __('DNS_DOMAIN_CREATED_OK',htmlentities($_POST['v_domain']),htmlentities($_POST['v_domain']));
         unset($v_domain);
     }
 }
@@ -132,11 +128,7 @@ if (!empty($_POST['ok_rec'])) {
 
     // Flush field values on success
     if (empty($_SESSION['error_msg'])) {
-        if (PHP_VERSION_ID >= 50600 && PHP_VERSION_ID < 50700) {
-            $_SESSION['ok_msg'] = __('DNS_RECORD_CREATED_OK',htmlentities($_POST[v_rec]),htmlentities($_POST[v_domain]));
-        } else {
-            $_SESSION['ok_msg'] = __('DNS_RECORD_CREATED_OK',htmlentities($_POST['v_rec']),htmlentities($_POST['v_domain']));
-        }
+        $_SESSION['ok_msg'] = __('DNS_RECORD_CREATED_OK',htmlentities($_POST['v_rec']),htmlentities($_POST['v_domain']));
         unset($v_domain);
         unset($v_rec);
         unset($v_val);
diff --git a/web/add/mail/index.php b/web/add/mail/index.php
index 5fe9b6ff..6a8b6e9f 100644
--- a/web/add/mail/index.php
+++ b/web/add/mail/index.php
@@ -186,13 +186,8 @@ if (!empty($_POST['ok_acc'])) {
 
     // Flush field values on success
     if (empty($_SESSION['error_msg'])) {
-        if (PHP_VERSION_ID >= 50600 && PHP_VERSION_ID < 50700) {
-            $_SESSION['ok_msg'] = __('MAIL_ACCOUNT_CREATED_OK',htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST[v_domain]),htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST[v_domain]));
-            $_SESSION['ok_msg'] .= " / <a style=\"text-decoration: underline; color: #9c8cff;\" href=".$webmail." target='_blank'>" . __('open webmail') . "</a>";
-        } else {
-            $_SESSION['ok_msg'] = __('MAIL_ACCOUNT_CREATED_OK',htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST['v_domain']),htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST['v_domain']));
-            $_SESSION['ok_msg'] .= " / <a style=\"text-decoration: underline; color: #9c8cff;\" href=".$webmail." target='_blank'>" . __('open webmail') . "</a>";
-        }
+        $_SESSION['ok_msg'] = __('MAIL_ACCOUNT_CREATED_OK',htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST['v_domain']),htmlentities(strtolower($_POST['v_account'])),htmlentities($_POST['v_domain']));
+        $_SESSION['ok_msg'] .= " / <a style=\"text-decoration: underline; color: #9c8cff;\" href=".$webmail." target='_blank'>" . __('open webmail') . "</a>";
         unset($v_account);
         unset($v_password);
         unset($v_password);
diff --git a/web/add/web/index.php b/web/add/web/index.php
index f8953f19..e11cff23 100644
--- a/web/add/web/index.php
+++ b/web/add/web/index.php
@@ -323,11 +323,7 @@ if (!empty($_POST['ok'])) {
         }
 
         if (!empty($_SESSION['error_msg']) && $domain_added) {
-            if (PHP_VERSION_ID >= 50600 && PHP_VERSION_ID < 50700) {
-                $_SESSION['ok_msg'] = __('WEB_DOMAIN_CREATED_OK',htmlentities($_POST[v_domain]),htmlentities($_POST[v_domain]));
-            } else {
-                $_SESSION['ok_msg'] = __('WEB_DOMAIN_CREATED_OK',htmlentities($_POST['v_domain']),htmlentities($_POST['v_domain']));
-            }
+            $_SESSION['ok_msg'] = __('WEB_DOMAIN_CREATED_OK',htmlentities($_POST['v_domain']),htmlentities($_POST['v_domain']));
             $_SESSION['flash_error_msg'] = $_SESSION['error_msg'];
             $url = '/edit/web/?domain='.strtolower(preg_replace("/^www\./i", "", $_POST['v_domain']));
             header('Location: ' . $url);
diff --git a/web/upload/UploadHandler.php b/web/upload/UploadHandler.php
index 581f9741..ce8863bb 100755
--- a/web/upload/UploadHandler.php
+++ b/web/upload/UploadHandler.php
@@ -1095,13 +1095,8 @@ class UploadHandler
             }
         }
         if (count($failed_versions)) {
-            if (PHP_VERSION_ID >= 50600 && PHP_VERSION_ID < 50700) {
-                $file->error = $this->get_error_message('image_resize')
-                        .' ('.implode($failed_versions,', ').')';
-            } else {
-                $file->error = $this->get_error_message('image_resize')
-                        .' ('.implode(', ', $failed_versions).')';
-            }
+            $file->error = $this->get_error_message('image_resize')
+                    .' ('.implode(', ', $failed_versions).')';
         }
         // Free memory:
         $this->destroy_image_object($file_path);

From 457e5c862ee820cf03558f6ea6b34290d16ca9ac Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Tue, 12 Aug 2025 13:58:17 +0200
Subject: [PATCH 2287/2300] Add cron job for disk usage snapshot

---
 bin/v-df-snapshot-diff         | 102 +++++++++++++++++++++++++++++++++
 bin/v-df-snapshot-logs-cleaner |  11 ++++
 bin/v-df-snapshot-make         |  20 +++++++
 install/vst-install-debian.sh  |   4 ++
 src/deb/vesta/postinst         |  14 +++++
 5 files changed, 151 insertions(+)
 create mode 100644 bin/v-df-snapshot-diff
 create mode 100644 bin/v-df-snapshot-logs-cleaner
 create mode 100644 bin/v-df-snapshot-make

diff --git a/bin/v-df-snapshot-diff b/bin/v-df-snapshot-diff
new file mode 100644
index 00000000..ee427bd2
--- /dev/null
+++ b/bin/v-df-snapshot-diff
@@ -0,0 +1,102 @@
+#!/bin/bash
+# info: Make a diff between two snapshots of the disk usage
+# options: FILE1 FILE2
+
+whoami=$(whoami)
+if [ "$whoami" != "root" ]; then
+    echo "You must be root to execute this script"
+    exit 1
+fi
+
+# Let's declare three associative arrays
+declare -A FILE1
+declare -A FILE2
+declare -A FILED
+
+file1=$1
+file2=$2
+
+if [[ ! "$file1" =~ ^/usr/local/vesta/data/df/snapshot-.*\.txt$ ]]; then
+    file1="/usr/local/vesta/data/df/$file1"
+fi
+
+if [[ ! "$file2" =~ ^/usr/local/vesta/data/df/snapshot-.*\.txt$ ]]; then
+    file2="/usr/local/vesta/data/df/$file2"
+fi
+
+if [ ! -f "$file1" ]; then
+    echo "File $file1 not found"
+    exit 1
+fi
+
+if [ ! -f "$file2" ]; then
+    echo "File $file2 not found"
+    exit 1
+fi
+
+timestamp=$(date +%Y-%m-%d-%H-%M-%S)
+mkdir -p /usr/local/vesta/data/df-diff
+file0="/usr/local/vesta/data/df-diff/diff-$timestamp.txt"
+file0s="/usr/local/vesta/data/df-diff/diff-size-sorted-$timestamp.txt"
+file0f="/usr/local/vesta/data/df-diff/diff-folder-sorted-$timestamp.txt"
+touch $file0
+
+# Let's load the first file and fill the array FILE1
+while IFS=$'\t' read SIZE DIRECTORY; do
+    # Skip blank lines or lines that are not in the correct format
+    [[ -z "$DIRECTORY" ]] && continue
+    [[ "$DIRECTORY" = "total" ]] && continue
+    # Insert values into the array
+    FILE1["$DIRECTORY"]="$SIZE"
+done < "$file1"
+
+# Let's load the second file and fill the array FILE2
+while IFS=$'\t' read SIZE DIRECTORY; do
+    # Skip blank lines or lines that are not in the correct format
+    [[ -z "$DIRECTORY" ]] && continue
+    [[ "$DIRECTORY" = "total" ]] && continue
+    # Insert values into the array
+    FILE2["$DIRECTORY"]="$SIZE"
+done < "$file2"
+
+# We iterate through FILE1 and look for the matching key in FILE2
+for k in "${!FILE1[@]}"; do
+    if [[ -v FILE2["$k"] ]]; then
+        # If there is the same folder (KEY) in FILE2
+        DIFF=$(( ${FILE2[$k]} - ${FILE1[$k]} ))
+        FILED["$k"]=$DIFF
+        echo -e "${DIFF}\t${k}" >> $file0
+    else
+        # If the folder (KEY) is not found in FILE2
+        FILED["$k"]=${FILE1["$k"]}
+        echo -e "${FILE1["$k"]}\t${k}" >> $file0
+    fi
+done
+
+# sorted by size
+sort -nr -k1,1 $file0 > $file0s
+
+# sorted by folders
+while IFS=$'\t' read SIZE DIRECTORY; do
+    [[ -z "$DIRECTORY" ]] && continue
+    [[ "$DIRECTORY" = "total" ]] && continue
+    echo -e "$DIRECTORY\t${FILED["$DIRECTORY"]}" >> $file0f
+done < "$file2"
+
+chmod 600 $file0 $file0s $file0f
+chown root:root $file0 $file0s $file0f
+
+echo "Done."
+echo "You can do:"
+echo "mcview $file0"
+echo "mcview $file0s"
+echo "mcview $file0f"
+echo "--------------------------------"
+echo "Here is the first 30 lines of the diff, sorted by size (descending, in MB):"
+head -n 30 $file0s
+echo "--------------------------------"
+echo "Here is the first 30 lines of the diff, sorted by folders (in MB):"
+head -n 30 $file0f
+echo "--------------------------------"
+
+exit 0
diff --git a/bin/v-df-snapshot-logs-cleaner b/bin/v-df-snapshot-logs-cleaner
new file mode 100644
index 00000000..63275034
--- /dev/null
+++ b/bin/v-df-snapshot-logs-cleaner
@@ -0,0 +1,11 @@
+#!/bin/bash
+# info: Clean up old snapshots of the disk usage
+# options: NONE
+
+folder="/usr/local/vesta/data/df"
+mkdir -p $folder
+find $folder -type f -mtime +30 -delete
+
+folder="/usr/local/vesta/data/df-diff"
+mkdir -p $folder
+find $folder -type f -mtime +30 -delete
diff --git a/bin/v-df-snapshot-make b/bin/v-df-snapshot-make
new file mode 100644
index 00000000..51c41e9d
--- /dev/null
+++ b/bin/v-df-snapshot-make
@@ -0,0 +1,20 @@
+#!/bin/bash
+# info: Make a snapshot of the disk usage
+# options: NONE
+
+folder="/usr/local/vesta/data/df"
+
+mkdir -p $folder
+timestamp=$(date +%Y-%m-%d-%H-%M-%S)
+du --max-depth=1 -c -m -x / > $folder/snapshot-$timestamp.txt
+du --max-depth=1 -c -m -x /home >> $folder/snapshot-$timestamp.txt
+du --max-depth=2 -c -m -x /home >> $folder/snapshot-$timestamp.txt
+du --max-depth=3 -c -m -x /home >> $folder/snapshot-$timestamp.txt
+du --max-depth=6 -c -m -x /home >> $folder/snapshot-$timestamp.txt
+du --max-depth=1 -c -m -x /var/lib/mysql >> $folder/snapshot-$timestamp.txt
+du --max-depth=1 -c -m -x /var/log >> $folder/snapshot-$timestamp.txt
+
+chmod 600 $folder/snapshot-$timestamp.txt
+chown root:root $folder/snapshot-$timestamp.txt
+
+exit 0
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 1c8f2e1b..e8208113 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1896,6 +1896,10 @@ command="sudo $VESTA/bin/v-update-sys-rrd"
 $VESTA/bin/v-add-cron-job 'admin' '*/5' '*' '*' '*' '*' "$command"
 command="sudo $VESTA/bin/v-fix-website-permissions-for-all-websites-only-php"
 $VESTA/bin/v-add-cron-job 'admin' '05' '03' '*' '*' '*' "$command"
+command="sudo $VESTA/bin/v-df-snapshot-make"
+$VESTA/bin/v-add-cron-job 'admin' '05' '04' '*' '*' '*' "$command"
+command="sudo $VESTA/bin/v-df-snapshot-logs-cleaner"
+$VESTA/bin/v-add-cron-job 'admin' '10' '04' '*' '*' '*' "$command"
 systemctl restart cron.service
 
 echo "== Building inititall rrd images"
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index f5f79877..ac034e82 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -38,6 +38,20 @@ if grep -q "fix-website-permissions-for-all-websites" /usr/local/vesta/data/user
     fi
 fi
 
+# Adding cron job for disk usage snapshot
+if ! grep -q "v-df-snapshot-make" /usr/local/vesta/data/users/admin/cron.conf; then
+    echo "== Adding cron job for disk usage snapshot"
+    command="sudo $VESTA/bin/v-df-snapshot-make"
+    $VESTA/bin/v-add-cron-job 'admin' '05' '04' '*' '*' '*' "$command"
+    systemctl restart cron.service
+fi
+if ! grep -q "v-df-snapshot-logs-cleaner" /usr/local/vesta/data/users/admin/cron.conf; then
+    echo "== Adding cron job for disk usage snapshot logs cleaner"
+    command="sudo $VESTA/bin/v-df-snapshot-logs-cleaner"
+    $VESTA/bin/v-add-cron-job 'admin' '10' '04' '*' '*' '*' "$command"
+    systemctl restart cron.service
+fi
+
 # Fixing PHP and .env permissions and ownership for all websites
 if ! grep -q "fix-website-permissions-for-all-websites-only-php" /usr/local/vesta/data/users/admin/cron.conf; then
     echo "== Fixing PHP and .env permissions and ownership for all websites"

From ace0e0e2bfdca963d6670bdc80783018a632a5d4 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Thu, 14 Aug 2025 19:36:57 +0200
Subject: [PATCH 2288/2300] SSL fix for Apache 2.4.65+

---
 install/vst-install-debian.sh |  6 ++++++
 src/deb/vesta/postinst        | 14 ++++++++++++++
 2 files changed, 20 insertions(+)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index e8208113..419acf59 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1145,6 +1145,12 @@ if [ "$nginx" = 'yes' ]; then
     
     echo > /etc/nginx/conf.d/vesta.conf
     mkdir -p /var/log/nginx/domains
+
+    if [ "$apache" = 'yes'  ]; then
+        # SSL fix for Apache 2.4.65+
+        echo -e "proxy_ssl_server_name on;\nproxy_ssl_name \$host;\nproxy_ssl_session_reuse off;" > /etc/nginx/conf.d/fixssl.conf
+    fi
+
     #update-rc.d nginx defaults
     #service nginx start
     currentservice='nginx'
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index ac034e82..da830507 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -27,6 +27,20 @@ VESTA="/usr/local/vesta"
 echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
+# SSL fix for Apache 2.4.65+
+if [ "$release" -ge 11 ]; then
+    if [ -f "/etc/apache2/apache2.conf" ] && [ -f "/etc/nginx/nginx.conf" ] && [ ! -f "/etc/nginx/conf.d/fixssl.conf" ]; then
+        echo "== Fixing SSL for Apache 2.4.65+"
+        echo -e "proxy_ssl_server_name on;\nproxy_ssl_name \$host;\nproxy_ssl_session_reuse off;" > /etc/nginx/conf.d/fixssl.conf
+        nginx_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'nginx' | grep -c 'running')    
+        if [ $nginx_running -eq 1 ]; then
+            echo "== Restarting Nginx"
+            systemctl restart nginx
+        fi
+    fi
+fi
+
+# Fixing cron job for fix-website-permissions-for-all-websites
 if grep -q "fix-website-permissions-for-all-websites" /usr/local/vesta/data/users/admin/cron.conf; then
     if ! grep -q "fix-website-permissions-for-all-websites-only-php" /usr/local/vesta/data/users/admin/cron.conf; then
         echo "== Renaming fix-website-permissions-for-all-websites to fix-website-permissions-for-all-websites-only-php"

From 930bf7ed2b9f7326b93d59b5e9ee6b9a098155b6 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 15 Aug 2025 17:28:32 +0200
Subject: [PATCH 2289/2300] Version 0.9.9-0-13

---
 Changelog.md       | 196 +++++++++++++++++++++++++++++----------------
 src/deb/latest.txt |   2 +-
 2 files changed, 128 insertions(+), 70 deletions(-)

diff --git a/Changelog.md b/Changelog.md
index 36478469..dae97aa5 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,20 +1,78 @@
-Version 0.9.9-0-12 [28-Feb-2025]
+Version 0.9.9-0-13 [2025-08-15]
+==================================================
+* Improvement: Activating FileManager licence for all users (credits to Official VestaCP)
+* Introducing a malware cleaning set of tools: v-install-wordfence-cli, v-desinfect-wordpress, v-fix-wordpress-core, v-change-database-password-for-wordpress, v-change-wordpress-admin-passwords, v-delete-inactive-wordpress-plugins-and-themes, v-delete-wordpress-uploads-php-files) (credits to isscbta)
+* Improvement: Added support for PHP 8.3 and 8.4
+* SRS support for Exim4 (v-add-srs-support-to-exim) (credits to HestiaCP)
+* Security: Ensuring that PHP files are visible only to the account they belong to - setting chmod 600 for all php and .env files (also added as admin cronjob - v-fix-website-permissions-for-all-websites-only-php)
+* Added cronjob for disk usage snapshot (size of each folder) to see what folder is growing every day (v-df-snapshot-make, v-df-snapshot-diff [some-day-snapshot] [some-other-day-snapshot)
+* Bugfix: SSL fix for Apache 2.4.65+ (fix for '421 Misdirected Request')
+* Bugfix: vst-install-debian.sh: ability to install MySQL 8 on Debian 12
+* Improvement: Update nginx block-firewall.conf when user blocks 80,443 ports for some IPv4 address in the Firewall section of the admin panel
+* Improvement: v-install-wordpress: Support for IDN format domains
+* Security: Adding ProFTPD jail rule to Fail2Ban
+* Introducing: v-make-main-apache-log - making one log file for PHP requests for all websites
+* Security: Introducing a new command: v-fix-php-ini-disable-functions
+* Improvement: Introducing myVesta rules for SpamAssassin (enhancing spam filtering)
+* Improvement: When deleting a domain, also delete the database if the domain has a database
+* Bugfix: Removing temporary Docker container network interfaces from RRD
+* Introducing v-run-wp-cli-myvesta that knows the correct terminal width
+* Introducing a new command: v-cd-www alias for v-change-dir-www
+* Introducing a new command: v-clear-fail2ban
+* Introducing a new command: v-get-dns-config (to print zone file in bind9 format)
+* Introducing a DISABLE_IP_CHECK as vesta.conf variable (if logged-in user is getting a new IPv4 address every minute)
+* Security: Introducing a parse_object_kv_list_non_eval() function in main.sh, to avoid the evil eval command
+* Security: Enhance package validation, in v-change-user-package switched 'eval' replaced with 'parse_object_kv_list_non_eval'
+* Improvement: Replacing all WordPress scripts to use 'v-run-wp-cli' instead of 'wp'
+* Improvement: v-install-wordpress: Almost always use https
+* Improvement: Skip the prompt to continue during myVesta installation if the administrator has set all required variables  in the command line
+* Security: Jailing v-run-wp-cli (running WP-CLI as user, added open_basedir, disabling shell_exec() and other dangerous PHP functions)
+* Security: v-commander: removing the ability to set a root password
+* Bugfix: DKIM record deletion command in v-delete-mail-domain-dkim script
+* Adding FTP / SFTP port for Remote Backup (credits to ikheetjeff)
+* Introducing a new command: v-delete-mails - delete emails older than N days (credits to isscbta)
+* Introducing new commands: v-blacklist-email-domain, v-blacklist-email-account, v-whitelist-email-domain, v-whitelist-email-account (credits to isscbta)
+* Bugfix: v-move-folder-and-make-symlink: use 'mv' instead of 'rsync'
+* Improvement: Calculate the size of directories on /hdd too
+* Bugfix: v-move-domain-and-database-to-account: Update wordfence-waf.php
+* Bugfix: v-add-letsencrypt-domain: Detecting valid status on wildcard variant
+* Bugfix: db.sh and v-clone-website: mysqldump --max_allowed_packet=1024M
+* Bugfix: web/index.php: Prevent recreation of token by shitty browser add-ons
+* Bugfix: v-restore-user: permissions fix while restoring backup
+* Bugfix: Add some loops due to 403 errors during LE request in some random cases
+* Improvement: v-clone-website: adding --EXCLUDE_UPLOADS parameter
+* Bugfix: vst-install-debian.sh - removing phppgadmin
+* Bugfix: v-update-firewall: $FIREWALL_STATEFUL conf variable (for Infomaniak VPS servers)
+* Bugfix: Awstats template for all systems does not have a closed bracket in line 27 (credits to gkirde)
+* Bugfix: Update v-import-cpanel-backup - removing /*!999999\- enable the sandbox mode */
+* Bugfix: Small PHP syntax fixes in the admin panel
+* Introducing nginx template 'wprocket-webp-express-force-https' (credits to Luka Paunovic)
+* Improvement: Added functions to check if a domain or user is unsuspended in main.sh
+* Introducing a new command: v-update-document-errors-files
+* Improvement: new v-backup-user-now command does backup even if the system Load Average is above the limit, or the administrator configured backups to perform only at night
+* Improvement: v-install-wp-cli and v-install-wp-cli-myvesta - automatically updates if wp-cli is 30 days old
+* Bugfix: Check for SSL certificate existence before deleting web domain SSL in v-install-unsigned-ssl
+* Improvement: v-install-wordpress: avoid changing nginx proxy template in apache-less variant
+* Added to .gitignore excludes for 'data', 'conf', and 'log' folders
+* And many other minor bugfixes and improvements...
+
+Version 0.9.9-0-12 [2025-02-28]
 ==================================================
 * SpamHaus DNSBL removed from exim4
 * A lot of small bugs fixed
 
-Version 0.9.9-0-11 [30-May-2024]
+Version 0.9.9-0-11 [2024-05-30]
 ==================================================
 * Introducing v-run-wp-cli command ( @isscbta )
 * Introducing v-add-wordpress-admin command ( @isscbta )
 * Few bugs fixed
 
-Version 0.9.9-0-10 [11-Apr-2024]
+Version 0.9.9-0-10 [2024-04-11]
 ==================================================
 * Introducing v-edit-php-ini command ( @isscbta )
 * Introducing v-edit-domain-php-ini command ( @isscbta )
 
-Version 0.9.9-0-9 [05-Apr-2024]
+Version 0.9.9-0-9 [2024-04-05]
 ==================================================
 * Get quick info about a banned IP (Host, Banlist, Location) (many thanks to @VasilisParaschos )
 * Few bugs fixed
@@ -23,31 +81,31 @@ Version 0.9.9-0-5 to 0.9.9-0-8
 ==================================================
 * Few bugs fixed
 
-Version 0.9.9-0-4 [27-Jun-2023]
+Version 0.9.9-0-4 [2023-06-27]
 ==================================================
 * Support for Debian 12 ( in mutual cooperation with @HestiaCP )
 
-Version 0.9.9-0-2 [12-Jun-2023]
+Version 0.9.9-0-2 [2023-06-12]
 ==================================================
 * Hosting panel UI perfomance fix
 
-Version 0.9.9-0 [05-Jun-2023]
+Version 0.9.9-0 [2023-06-05]
 ==================================================
 * Redesign of hosting panel
 * Fix for WP_CACHE_KEY_SALTs in v-clone-website command
 * Fix for "Helo name contains a ip address" in Exim4
 * Fix for Exim4 for punycode domains (in collaboration with @HestiaCP )
 
-Version 0.9.8-26-62 [05-Apr-2023]
+Version 0.9.8-26-62 [2023-04-05]
 ==================================================
 * Fix for LetsEncrypt Asynchronous Order Finalization (in collaboration with @HestiaCP )
 
-Version 0.9.8-26-61 [04-Apr-2023]
+Version 0.9.8-26-61 [2023-04-04]
 ==================================================
 * Many bugfixes
 * Hotfix for LetsEncrypt to prevent Apache falling 
 
-Version 0.9.8-26-60 [12-Feb-2023]
+Version 0.9.8-26-60 [2023-02-12]
 ==================================================
 * New script: v-commander (useful for maintaining the server)
 * New script: v-activate-rocket-nginx (serve WP-Rocket cache directly from nginx)
@@ -55,7 +113,7 @@ Version 0.9.8-26-60 [12-Feb-2023]
 * v-clone-website: By default cloning to database: user_domain_com (instead of cloning to database: user_old_db_migrated)
 * Many minor bugfixes
 
-Version 0.9.8-26-59 [01-Feb-2023]
+Version 0.9.8-26-59 [2023-02-01]
 ==================================================
 * Support for PHP 8.2
 * New script: v-move-folder-and-make-symlink
@@ -63,82 +121,82 @@ Version 0.9.8-26-59 [01-Feb-2023]
 * v-install-wordpress: Installing WordPress to user_domain_com database instead of installing to user_wp database
 * Many minor bugfixes
 
-Version 0.9.8-26-58 [12-Jul-2022]
+Version 0.9.8-26-58 [2022-07-12]
 ==================================================
 * [Security] hash_equals() in /reset/mail/ (credits to @divinity76 )
 * Avoid out-of-memory while downloading large log files from panel (credits to @divinity76 )
 * Fix for an boring PHP Notice in vesta-php
 
-Version 0.9.8-26-57 [06-Jul-2022]
+Version 0.9.8-26-57 [2022-07-06]
 ==================================================
 * Fix for GMail SMTP timeouts on Debian11
 * [Security] Fix for Local Sed Injection Vulnerability ( credits to @cleemy-desu-wayo )
 
-Version 0.9.8-26-56 [28-May-2022]
+Version 0.9.8-26-56 [2022-05-28]
 ==================================================
 * Adding Barracuda RBL to SpamAssassin
 * Fixing insane HTML form bug in List backup items page
 * Script for easy adding second IP address for SMTP authenticated users only (v-make-separated-ip-for-email)
 
-Version 0.9.8-26-55 [26-Apr-2022]
+Version 0.9.8-26-55 [2022-04-26]
 ==================================================
 * Support for MySQL 8
 * [Security] Preventing brute-force resetting password  (thanks to HestiaCP @hestiacp for fix)
 * Many minor bugfixes
 
-Version 0.9.8-26-54 [17-Dec-2021]
+Version 0.9.8-26-54 [2021-12-17]
 ==================================================
 * Checking if FreshClam is started after installation
 
-Version 0.9.8-26-53 [12-Dec-2021]
+Version 0.9.8-26-53 [2021-12-12]
 ==================================================
 * Support for PHP 8.1
 * Function to ensure that pool.d folders are not empty
 
-Version 0.9.8-26-52 [23-Nov-2021]
+Version 0.9.8-26-52 [2021-11-23]
 ==================================================
 * Fix for not to match wildcard "*domains" and "databases*" while restoring
 * Added memcached to v-list-sys-services
 
-Version 0.9.8-26-51 [14-Nov-2021]
+Version 0.9.8-26-51 [2021-11-14]
 ==================================================
 * Many fixes for "List services" page (v-list-sys-services function)
 
-Version 0.9.8-26-50 [07-Nov-2021]
+Version 0.9.8-26-50 [2021-11-07]
 ==================================================
 * Many small bugfixes and CSRF fixes
 
-Version 0.9.8-26-49 [17-Jul-2021]
+Version 0.9.8-26-49 [2021-07-17]
 ==================================================
 * Support for Debian 11
 
-Version 0.9.8-26-48 [11-Jul-2021]
+Version 0.9.8-26-48 [2021-07-11]
 ==================================================
 * Fixed two bugs in LetsEncrypt generating process
 
-Version 0.9.8-26-47 [30-May-2021]
+Version 0.9.8-26-47 [2021-05-30]
 ==================================================
 * Enabling TLS for ProFTPD FTPS
 * More logical "Restore backup" template
 
-Version 0.9.8-26-46 [17-Apr-2021]
+Version 0.9.8-26-46 [2021-04-17]
 ==================================================
 * [Feature] Updating CloudFlare IP addresses
 
-Version 0.9.8-26-45 [13-Apr-2021]
+Version 0.9.8-26-45 [2021-04-13]
 ==================================================
 * [Feature] Logging whole LetsEncrypt process to /usr/local/vesta/log/letsencrypt.log and /usr/local/vesta/log/letsencrypt_cron.log
 * [Feature] Warn admin once (by sending email) if LetsEncrypt renewing failed for server hostname
 * [Bugfix] Correct truncating of CA LetsEncrypt certificate (thanks to HestiaCP @hestiacp for fix)
 
-Version 0.9.8-26-44 [04-Apr-2021]
+Version 0.9.8-26-44 [2021-04-04]
 ==================================================
 * [Security] Preventing denial-of-service in openssl library in vesta-nginx service (CVE-2021-3449)
 * [Security] Preventing admin to install non-vesta packages from vesta admin panel user interface (Credits to: Numan Türle @numanturle)
 * [Bugfix] Preventing multiple execution of v-backup-users
 * [UserInterface] CSS fix for Apache status table (Credits to: Milos Spasic)
 
-Version 0.9.8-26-43 [15-Mar-2021]
+Version 0.9.8-26-43 [2021-03-15]
 ==================================================
 * [Security] fix for: CSRF remote code execution in UploadHandler.php - CVE-2021-28379 (Credits to: Fady Osman @fady_othman)
 * [Security] fix for: Local privilege escalation from user account to admin account via v-add-web-domain (Credits to: Two independent security researchers, Marti Guasch Jiménez and Francisco Andreu Sanz, working with the SSD Secure Disclosure program) (and also thanks to HestiaCP @hestiacp for fix)
@@ -148,62 +206,62 @@ Version 0.9.8-26-43 [15-Mar-2021]
 * [Security] fix for: Admin to root escalation in v-activate-vesta-license (Credits to: Numan Türle @numanturle)
 * [Security] Ensure HTML will not be displayed in list log page (Credits to: Kristan Kenney @kristankenney, thanks to HestiaCP @hestiacp for fix)
 
-Version 0.9.8-26-42 [26-Feb-2021]
+Version 0.9.8-26-42 [2021-02-26]
 ==================================================
 * [Feature] Support for PHP 8.0, see: https://forum.myvestacp.com/viewtopic.php?f=18&t=52
 * [Bugfix] Making sure Apache is in mpm_event mode
 
-Version 0.9.8-26-41 [11-Feb-2021]
+Version 0.9.8-26-41 [2021-02-11]
 ==================================================
 * Few bugfixes
 
-Version 0.9.8-26-40 [08-Feb-2021]
+Version 0.9.8-26-40 [2021-02-08]
 ==================================================
 * Few bugfixes
 
-Version 0.9.8-26-39 [12-Dec-2020]
+Version 0.9.8-26-39 [2020-12-12]
 ==================================================
 * [Security] Fixing useless issue with tokens in "download backup" and "loginas" functions (thanks to HestiaCP for fixes)
 * [Security] Fixing XSS in /list/rrd/?period= value
 
-Version 0.9.8-26-38 [05-Dec-2020]
+Version 0.9.8-26-38 [2020-12-05]
 ==================================================
 * [Security] Fixing Apache status public access (thanks to HestiaCP for letting us know)
 
-Version 0.9.8-26-37 [26-Oct-2020]
+Version 0.9.8-26-37 [2020-10-26]
 ==================================================
 * [Bugfix] Fixing LetsEncrypt deprecated GET method for ACME v2 (thanks to @moucho)
 * [Bugfix] Fixing Roundcube to send via authenticated SMTP user instead via php
 
-Version 0.9.8-26-36 [10-Sep-2020]
+Version 0.9.8-26-36 [2020-09-10]
 ==================================================
 * [Bugfix] Checking necessary available disk space before doing backup
 * [Security] Disabling login with 'root'
 
-Version 0.9.8-26-35 [23-Aug-2020]
+Version 0.9.8-26-35 [2020-08-23]
 ==================================================
 * [Feature] Limiting max recipients per email to 15, in order to prevent mass spamming
 * [Bugfix] While restoring backup, only exclude logs folder from root, not in public_html
 
-Version 0.9.8-26-34 [19-Aug-2020]
+Version 0.9.8-26-34 [2020-08-19]
 ==================================================
 * [Bugfix] Split long DNS TXT entries into 255 chunks
 
-Version 0.9.8-26-33 [16-Aug-2020]
+Version 0.9.8-26-33 [2020-08-16]
 ==================================================
 * [Feature] Ability to set some domain to send emails from another IP (command: v-make-separated-ip-for-email-domain)
 
-Version 0.9.8-26-32 [02-Aug-2020]
+Version 0.9.8-26-32 [2020-08-02]
 ==================================================
 * [Feature] v-replace-in-file command introduced
 * [Security] Making sure new myVesta commands can be called only by root
 
-Version 0.9.8-26-31 [30-Jul-2020]
+Version 0.9.8-26-31 [2020-07-30]
 ==================================================
 * [Feature] v-import-cpanel-backup command moved to vesta-bin folder (becoming standard myVesta command)
 * Starting to log auto-update output
 
-Version 0.9.8-26-30 [26-Jul-2020]
+Version 0.9.8-26-30 [2020-07-26]
 ==================================================
 * New ASCII logo in installer
 * Deleted favicon when user don't know secret-url of hosting panel
@@ -211,14 +269,14 @@ Version 0.9.8-26-30 [26-Jul-2020]
 * [bugfix] Minor fix of URL for templates in v-update-dns-templates
 * [bugfix] Minor fixes in installer
 
-Version 0.9.8-26-29 [21-Jul-2020]
+Version 0.9.8-26-29 [2020-07-21]
 ==================================================
 * [Feature] v-clone-website command moved to vesta-bin folder (becoming standard myVesta command)
 * [Feature] v-migrate-site-to-https command moved to vesta-bin folder (becoming standard myVesta command)
 * [Bugfix] Fix for ClamAV socket
 * Changing Vesta to myVesta in title of hosting panel pages
 
-Version 0.9.8-26-28 [15-Jul-2020]
+Version 0.9.8-26-28 [2020-07-15]
 ==================================================
 * [Feature] v-install-wordpress command introduced
 * [Feature] v-move-domain-and-database-to-account command introduced
@@ -226,37 +284,37 @@ Version 0.9.8-26-28 [15-Jul-2020]
 * [Bugfix] Fix for LetsEncrypt issuing in apache-less variant (nginx + php-fpm variant)
 * [Bugfix] Fix for configuring phpMyAdmin DB in apache-less variant (nginx + php-fpm variant)
 
-Version 0.9.8-26-27 [05-Jul-2020]
+Version 0.9.8-26-27 [2020-07-05]
 ==================================================
 * [Feature] Admins now see changelog when they open myVesta panel after myVesta get updated (changelog will dissapear on next refresh)
 * [Bugfix] Better control of opened SMTP concurrent connections (preventing denial-of-service of SMTP) on fresh installed servers - https://github.com/myvesta/vesta/commit/c57b15b5daca2a0ea88ee6a89a2ff5a4ef47d2a3
 * Second tuning of php-fpm pool.d config files (perfomances and limits)
 
-Version 0.9.8-26-26 [27-Jun-2020]
+Version 0.9.8-26-26 [2020-06-27]
 ==================================================
 * [Feature] Self-signed SSL will be automaticaly added when you add new domain (CloudFlare is fine with that, you don't need LetsEncrypt anymore if you use CloudFlare as reverse-proxy(CDN+Firewall), just set "Full" in SSL section on CloudFlare)
 * [Feature] Script for adding self-signed SSL to desired domain [v-install-unsigned-ssl]
 * From now, on fresh installed server, default backup cron goes at Saturday at 01 AM (instead of everyday at 05 AM)
 * New favicon for hosting panel
 
-Version 0.9.8-26-25 [23-Jun-2020]
+Version 0.9.8-26-25 [2020-06-23]
 ==================================================
 * [Security] Fixing unnecessary slash in nginx configs for phpmyadmin and roundcube (Credits to Bernardo Berg @bberg1984 for finding this issue!)
 * [Security] Adding escapeshellarg on few more places in php code (Credits to Talha Günay and @Lupul for finding these places)
 
-Version 0.9.8-26-24 [22-Jun-2020]
+Version 0.9.8-26-24 [2020-06-22]
 ==================================================
 * [Bugfix] nginx + php-fpm installer variant now finally works
 
-Version 0.9.8-26-23 [14-Jun-2020]
+Version 0.9.8-26-23 [2020-06-14]
 ==================================================
 * Adding label that LetsEncrypt can be added when you Edit domain
 
-Version 0.9.8-26-22 [13-Jun-2020]
+Version 0.9.8-26-22 [2020-06-13]
 ==================================================
 * [Bugfix] Checking (in order to delete) php7.4 pool config file while deleting domain
 
-Version 0.9.8-26-21 [13-Jun-2020]
+Version 0.9.8-26-21 [2020-06-13]
 ==================================================
 * [Feature] Blocking executable files inside archives in received emails (ClamAV)
 * [Bugfix] Removing ability to schedule LetsEncrypt issuing while adding new domain (because it can fall in infinite loop whole day)
@@ -265,82 +323,82 @@ Version 0.9.8-26-21 [13-Jun-2020]
 * [Bugfix] Script that removes depricated 'ssl on;' in nginx templates
 * [Security] Ensure UPDATE_SSL_SCRIPT is not set in some config files
 
-Version 0.9.8-26-20 [01-Jun-2020]
+Version 0.9.8-26-20 [2020-06-01]
 ==================================================
 * [Bugfix] Script that will ensure that Apache2 will always stay in mpm_event mode
 * [Bugfix] Ensure config files will not be overwritten while updating vesta-nginx package
 * [Bugfix] Fixing URL in v-update-web-templates script
 * [Feature] Additional rates for nginx anti-denial-of-service templates
 
-Version 0.9.8-26-19 [15-May-2020]
+Version 0.9.8-26-19 [2020-05-15]
 ==================================================
 * [Bugfix] Do not match subdomains while restoring domain [v-restore-user]
 
-Version 0.9.8-26-18 [15-May-2020]
+Version 0.9.8-26-18 [2020-05-15]
 ==================================================
 * [Bugfix] Fixing NS parameters in v-add-dns-on-web-alias
 
-Version 0.9.8-26-17 [15-May-2020]
+Version 0.9.8-26-17 [2020-05-15]
 ==================================================
 * [Bugfix] Reverting default clamav socket path 
 * [Bugfix] Put mail_max_userip_connections = 50 in dovecot
 
-Version 0.9.8-26-16 [15-May-2020]
+Version 0.9.8-26-16 [2020-05-15]
 ==================================================
 * [Bugfix] Allow quick restarting of nginx if acme-challenge should be added many times
 * [Bugfix] Enabling email notification to fresh installed servers about backup success status
 * [Bugfix] Timeout 10 sec for apache2 status
 
-Version 0.9.8-26-15 [09-May-2020]
+Version 0.9.8-26-15 [2020-05-09]
 ==================================================
 * [Feature] nginx templates that can prevent denial-of-service on your server
 * First tuning php-fpm pool.d config files (perfomances and limits)
 * New logo
 
-Version 0.9.8-26-14 [08-May-2020]
+Version 0.9.8-26-14 [2020-05-08]
 ==================================================
 * v-clone-website script switched to parameters
 * Display new version in console while updating myVesta
 
-Version 0.9.8-26-13 [07-May-2020]
+Version 0.9.8-26-13 [2020-05-07]
 ==================================================
 * [Feature] Put build date and version in right-bottom corner of control panel
 
-Version 0.9.8-26-12 [07-May-2020]
+Version 0.9.8-26-12 [2020-05-07]
 ==================================================
 * [Feature] Put build date and version while compiling myVesta
 * [Feature] Office365 DNS template
 * [Feature] Yandex DNS template
 * ProFTPD MaxIstances = 100 for fresh installed servers
 
-Version 0.9.8-26-11 [01-May-2020]
+Version 0.9.8-26-11 [2020-05-01]
 ==================================================
 * [Feature] Skipping LE renewing after 7 failed attempts
 * [Bugfix] Keep conf files during auto-update
 * [Bugfix] Do not restart apache while preparing letsencrypt acme challenge
 * [Bugfix] Set ALLOW_BACKUP_ANYTIME='yes' for fresh installed servers
 
-Version 0.9.8-26-10 [11-Apr-2020]
+Version 0.9.8-26-10 [2020-04-11]
 ==================================================
 * [Feature] Creating v-normalize-restored-user script (normalize NS1, NS2 and IP of account that is backuped on other server and restored on this server)
 * Tweak for hostname FPM conf
 * [Security] Forbid changing root password (Credits to Alexandre ZANNI, Orange Cyberdefense, https://cyberdefense.orange.com)
 * [Security] Importing system enviroment in v-change-user-password (Credits to Alexandre ZANNI, Orange Cyberdefense, https://cyberdefense.orange.com)
 
-Version 0.9.8-26-9 [23-Mar-2020]
+Version 0.9.8-26-9 [2020-03-23]
 ==================================================
 * [Security] Preventing manipulation with $SERVER['HTTP_HOST'] (Credits to @mdisec - Managing Partner of PRODAFT / INVICTUS A.Ş. Master ninja at pentest.blog)
 
-Version 0.9.8-26-8 [23-Mar-2020]
+Version 0.9.8-26-8 [2020-03-23]
 ==================================================
 * [Security] Temporary fix for parsing backup conf (Credits to @dreiggy - https://pentest.blog/vesta-control-panel-second-order-remote-code-execution-0day-step-by-step-analysis/)
 
-Version 0.9.8-26-7 [18-Mar-2020]
+Version 0.9.8-26-7 [2020-03-18]
 ==================================================
 * [Bugfix] Fix that avoid LetsEncrypt domain validation timeout
 * [Bugfix] Set timeout in v-list-sys-web-status script
 
-Version 0.9.8-26-6 [21-Feb-2020]
+Version 0.9.8-26-6 [2020-02-21]
 ==================================================
 * [Bugfix] mail-wrapper.php from now works
 * [Feature] Introducing NOTIFY_ADMIN_FULL_BACKUP, email notification about backup success status
@@ -348,7 +406,7 @@ Version 0.9.8-26-6 [21-Feb-2020]
 * [Feature] Introducing force-https-webmail-phpmyadmin nginx template
 * [Feature] Trigger for /root/update_firewall_custom.sh
 
-Version 0.9.8-26-5 [10-Feb-2020]
+Version 0.9.8-26-5 [2020-02-10]
 ==================================================
 * [Security] sudoers fix for Debian10
 * [Feature] [Script that will migrate your site from http to https, replacing http to https URLs in database](https://github.com/myvesta/vesta/blob/master/src/deb/for-download/tools/v-migrate-site-to-https)
@@ -357,7 +415,7 @@ Version 0.9.8-26-5 [10-Feb-2020]
 * [Bugfix] Roundcube force https
 * [Bugfix] Exim compatibility with Loopia for Debian10
 
-Version 0.9.8-26-4 [07-Jan-2020]
+Version 0.9.8-26-4 [2020-01-07]
 ==================================================
 * [Feature] Allow whitelisting specific IP for /api/
 * [Feature] Allow whitelisting specific IP to avoid secret_url
@@ -365,11 +423,11 @@ Version 0.9.8-26-4 [07-Jan-2020]
 * [Bugfix] apparmor install fix again
 * [Bugfix] Turning off MariaDB SQL strict mode
 
-Version 0.9.8-26-3 [26-Nov-2019]
+Version 0.9.8-26-3 [2019-11-26]
 ==================================================
 * [Bugfix] Better check if session cron already added
 
-Version 0.9.8-26-2 [15-Nov-2019]
+Version 0.9.8-26-2 [2019-11-15]
 ==================================================
 * [Feature] Support for sub-sub-sub-sub versions :))
 * [Bugfix] Support for longer username of email accounts
@@ -377,7 +435,7 @@ Version 0.9.8-26-2 [15-Nov-2019]
 * [Bugfix] Trying to fix ClamAV broken socket
 * Moving to myvestacp.com
 
-Version 0.9.8-26 [28-Sep-2019]
+Version 0.9.8-26 [2019-09-28]
 ==================================================
 * [Bugfix] Let's Encrypt HTTP/2 support (by @serghey-rodin)
 * [Bugfix] Fixing broken autoreply output
diff --git a/src/deb/latest.txt b/src/deb/latest.txt
index c1732bff..dcb1761c 100644
--- a/src/deb/latest.txt
+++ b/src/deb/latest.txt
@@ -1 +1 @@
-vesta-0.9.9-0-12
\ No newline at end of file
+vesta-0.9.9-0-13
\ No newline at end of file

From 7dbb74b6bf075358dd59a7d219147fc2eb10185e Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 15 Aug 2025 17:47:12 +0200
Subject: [PATCH 2290/2300] Increase changelog display limit from 30 to 100
 entries in user index page

---
 web/list/user/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/list/user/index.php b/web/list/user/index.php
index da708edc..4e5ac369 100644
--- a/web/list/user/index.php
+++ b/web/list/user/index.php
@@ -22,7 +22,7 @@ if ($user == 'admin') {
         if ($show_changelog_value_int==1) {
             $changelog='';
             $changelog_arr=file("/usr/local/vesta/Changelog.md");
-            for ($i=0; $i<30; $i++) {
+            for ($i=0; $i<100; $i++) {
                 if (trim($changelog_arr[$i])=="") break;
                 if ($i>1) $changelog.="\n";
                 $changelog.=$changelog_arr[$i];

From 37e6a295ba427c992fe46439def2229e11e9bebb Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 15 Aug 2025 19:56:34 +0200
Subject: [PATCH 2291/2300] Adding /usr/local/vesta/data/upgrades/ files that
 will prevent fixes to be repeated on next updates

---
 install/vst-install-debian.sh |  3 ++
 src/deb/vesta/postinst        | 69 +++++++++++++++++++----------------
 2 files changed, 41 insertions(+), 31 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 419acf59..25364c90 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -1149,6 +1149,7 @@ if [ "$nginx" = 'yes' ]; then
     if [ "$apache" = 'yes'  ]; then
         # SSL fix for Apache 2.4.65+
         echo -e "proxy_ssl_server_name on;\nproxy_ssl_name \$host;\nproxy_ssl_session_reuse off;" > /etc/nginx/conf.d/fixssl.conf
+        touch /usr/local/vesta/data/upgrades/fixssl.conf
     fi
 
     #update-rc.d nginx defaults
@@ -2085,6 +2086,8 @@ touch /usr/local/vesta/data/upgrades/fix_exim_494_autoreply
 touch /usr/local/vesta/data/upgrades/freshclam_start
 touch /usr/local/vesta/data/upgrades/barracuda_rbl
 touch /usr/local/vesta/data/upgrades/spamhaus_dnsbl_removed
+touch /usr/local/vesta/data/upgrades/v-df-snapshot-make
+touch /usr/local/vesta/data/upgrades/fix-website-permissions-for-all-websites-only-php
 
 # Secret URL
 secretquery=''
diff --git a/src/deb/vesta/postinst b/src/deb/vesta/postinst
index da830507..186f54d5 100755
--- a/src/deb/vesta/postinst
+++ b/src/deb/vesta/postinst
@@ -28,49 +28,56 @@ echo "1" > /usr/local/vesta/data/upgrades/show_changelog
 chmod a=rw /usr/local/vesta/data/upgrades/show_changelog
 
 # SSL fix for Apache 2.4.65+
-if [ "$release" -ge 11 ]; then
-    if [ -f "/etc/apache2/apache2.conf" ] && [ -f "/etc/nginx/nginx.conf" ] && [ ! -f "/etc/nginx/conf.d/fixssl.conf" ]; then
-        echo "== Fixing SSL for Apache 2.4.65+"
-        echo -e "proxy_ssl_server_name on;\nproxy_ssl_name \$host;\nproxy_ssl_session_reuse off;" > /etc/nginx/conf.d/fixssl.conf
-        nginx_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'nginx' | grep -c 'running')    
-        if [ $nginx_running -eq 1 ]; then
-            echo "== Restarting Nginx"
-            systemctl restart nginx
+if [ ! -f "/usr/local/vesta/data/upgrades/fixssl.conf" ]; then
+    if [ "$release" -ge 11 ]; then
+        if [ -f "/etc/apache2/apache2.conf" ] && [ -f "/etc/nginx/nginx.conf" ] && [ ! -f "/etc/nginx/conf.d/fixssl.conf" ]; then
+            echo "== Fixing SSL for Apache 2.4.65+"
+            echo -e "proxy_ssl_server_name on;\nproxy_ssl_name \$host;\nproxy_ssl_session_reuse off;" > /etc/nginx/conf.d/fixssl.conf
+            touch /usr/local/vesta/data/upgrades/fixssl.conf
+            nginx_running=$(/usr/local/vesta/bin/v-list-sys-services | grep 'nginx' | grep -c 'running')    
+            if [ $nginx_running -eq 1 ]; then
+                echo "== Restarting Nginx"
+                systemctl restart nginx
+            fi
         fi
     fi
 fi
 
-# Fixing cron job for fix-website-permissions-for-all-websites
-if grep -q "fix-website-permissions-for-all-websites" /usr/local/vesta/data/users/admin/cron.conf; then
-    if ! grep -q "fix-website-permissions-for-all-websites-only-php" /usr/local/vesta/data/users/admin/cron.conf; then
-        echo "== Renaming fix-website-permissions-for-all-websites to fix-website-permissions-for-all-websites-only-php"
-        sed -i 's|v-fix-website-permissions-for-all-websites > /dev/null 2>&1|v-fix-website-permissions-for-all-websites-only-php|' /usr/local/vesta/data/users/admin/cron.conf
-        sed -i 's|v-fix-website-permissions-for-all-websites > /dev/null 2>&1|v-fix-website-permissions-for-all-websites-only-php|' /var/spool/cron/crontabs/admin
-        sed -i 's|v-fix-website-permissions-for-all-websites |v-fix-website-permissions-for-all-websites-only-php |' /usr/local/vesta/data/users/admin/cron.conf
-        sed -i 's|v-fix-website-permissions-for-all-websites |v-fix-website-permissions-for-all-websites-only-php |' /var/spool/cron/crontabs/admin
+# Adding cron job for disk usage snapshot
+if [ ! -f "/usr/local/vesta/data/upgrades/v-df-snapshot-make" ]; then
+    if ! grep -q "v-df-snapshot-make" /usr/local/vesta/data/users/admin/cron.conf; then
+        echo "== Adding cron job for disk usage snapshot"
+        command="sudo $VESTA/bin/v-df-snapshot-make"
+        $VESTA/bin/v-add-cron-job 'admin' '05' '04' '*' '*' '*' "$command"
+        touch /usr/local/vesta/data/upgrades/v-df-snapshot-make
+        systemctl restart cron.service
+    fi
+    if ! grep -q "v-df-snapshot-logs-cleaner" /usr/local/vesta/data/users/admin/cron.conf; then
+        echo "== Adding cron job for disk usage snapshot logs cleaner"
+        command="sudo $VESTA/bin/v-df-snapshot-logs-cleaner"
+        $VESTA/bin/v-add-cron-job 'admin' '10' '04' '*' '*' '*' "$command"
+        touch /usr/local/vesta/data/upgrades/v-df-snapshot-make
         systemctl restart cron.service
     fi
 fi
 
-# Adding cron job for disk usage snapshot
-if ! grep -q "v-df-snapshot-make" /usr/local/vesta/data/users/admin/cron.conf; then
-    echo "== Adding cron job for disk usage snapshot"
-    command="sudo $VESTA/bin/v-df-snapshot-make"
-    $VESTA/bin/v-add-cron-job 'admin' '05' '04' '*' '*' '*' "$command"
-    systemctl restart cron.service
-fi
-if ! grep -q "v-df-snapshot-logs-cleaner" /usr/local/vesta/data/users/admin/cron.conf; then
-    echo "== Adding cron job for disk usage snapshot logs cleaner"
-    command="sudo $VESTA/bin/v-df-snapshot-logs-cleaner"
-    $VESTA/bin/v-add-cron-job 'admin' '10' '04' '*' '*' '*' "$command"
-    systemctl restart cron.service
-fi
-
 # Fixing PHP and .env permissions and ownership for all websites
-if ! grep -q "fix-website-permissions-for-all-websites-only-php" /usr/local/vesta/data/users/admin/cron.conf; then
+if [ ! -f "/usr/local/vesta/data/upgrades/fix-website-permissions-for-all-websites-only-php" ]; then
+    # Renaming fix-website-permissions-for-all-websites to fix-website-permissions-for-all-websites-only-php"
+    if grep -q "fix-website-permissions-for-all-websites" /usr/local/vesta/data/users/admin/cron.conf; then
+        if ! grep -q "fix-website-permissions-for-all-websites-only-php" /usr/local/vesta/data/users/admin/cron.conf; then
+            echo "== Renaming fix-website-permissions-for-all-websites to fix-website-permissions-for-all-websites-only-php"
+            sed -i 's|v-fix-website-permissions-for-all-websites > /dev/null 2>&1|v-fix-website-permissions-for-all-websites-only-php|' /usr/local/vesta/data/users/admin/cron.conf
+            sed -i 's|v-fix-website-permissions-for-all-websites > /dev/null 2>&1|v-fix-website-permissions-for-all-websites-only-php|' /var/spool/cron/crontabs/admin
+            sed -i 's|v-fix-website-permissions-for-all-websites |v-fix-website-permissions-for-all-websites-only-php |' /usr/local/vesta/data/users/admin/cron.conf
+            sed -i 's|v-fix-website-permissions-for-all-websites |v-fix-website-permissions-for-all-websites-only-php |' /var/spool/cron/crontabs/admin
+            systemctl restart cron.service
+        fi
+    fi
     echo "== Fixing PHP and .env permissions and ownership for all websites"
     command="sudo $VESTA/bin/v-fix-website-permissions-for-all-websites-only-php"
     $VESTA/bin/v-add-cron-job 'admin' '05' '03' '*' '*' '*' "$command"
+    touch /usr/local/vesta/data/upgrades/fix-website-permissions-for-all-websites-only-php
     systemctl restart cron.service
 fi
 

From 3faa448a32b1679b48b0acf3d150f060e50c3cb9 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Fri, 15 Aug 2025 20:05:56 +0200
Subject: [PATCH 2292/2300] Update Changelog for version 0.9.9-0-13

---
 Changelog.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Changelog.md b/Changelog.md
index dae97aa5..617bc9c3 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -4,8 +4,8 @@ Version 0.9.9-0-13 [2025-08-15]
 * Introducing a malware cleaning set of tools: v-install-wordfence-cli, v-desinfect-wordpress, v-fix-wordpress-core, v-change-database-password-for-wordpress, v-change-wordpress-admin-passwords, v-delete-inactive-wordpress-plugins-and-themes, v-delete-wordpress-uploads-php-files) (credits to isscbta)
 * Improvement: Added support for PHP 8.3 and 8.4
 * SRS support for Exim4 (v-add-srs-support-to-exim) (credits to HestiaCP)
-* Security: Ensuring that PHP files are visible only to the account they belong to - setting chmod 600 for all php and .env files (also added as admin cronjob - v-fix-website-permissions-for-all-websites-only-php)
-* Added cronjob for disk usage snapshot (size of each folder) to see what folder is growing every day (v-df-snapshot-make, v-df-snapshot-diff [some-day-snapshot] [some-other-day-snapshot)
+* Security: Ensuring that PHP files are visible only to the account they belong to - setting chmod 600 for all .php and .env files (also added as admin cronjob - v-fix-website-permissions-for-all-websites-only-php)
+* Added cronjob for disk usage snapshot (size of each folder) to see what folder is growing every day (v-df-snapshot-make, v-df-snapshot-diff [some-day-snapshot] [some-other-day-snapshot])
 * Bugfix: SSL fix for Apache 2.4.65+ (fix for '421 Misdirected Request')
 * Bugfix: vst-install-debian.sh: ability to install MySQL 8 on Debian 12
 * Improvement: Update nginx block-firewall.conf when user blocks 80,443 ports for some IPv4 address in the Firewall section of the admin panel
@@ -22,7 +22,7 @@ Version 0.9.9-0-13 [2025-08-15]
 * Introducing a new command: v-get-dns-config (to print zone file in bind9 format)
 * Introducing a DISABLE_IP_CHECK as vesta.conf variable (if logged-in user is getting a new IPv4 address every minute)
 * Security: Introducing a parse_object_kv_list_non_eval() function in main.sh, to avoid the evil eval command
-* Security: Enhance package validation, in v-change-user-package switched 'eval' replaced with 'parse_object_kv_list_non_eval'
+* Security: Enhance package validation, in v-change-user-package 'eval' replaced with 'parse_object_kv_list_non_eval'
 * Improvement: Replacing all WordPress scripts to use 'v-run-wp-cli' instead of 'wp'
 * Improvement: v-install-wordpress: Almost always use https
 * Improvement: Skip the prompt to continue during myVesta installation if the administrator has set all required variables  in the command line

From 04453ebca2a23227018c6cbb4a5a060046078b7c Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Sun, 17 Aug 2025 14:40:53 +0200
Subject: [PATCH 2293/2300] v-df-snapshot-make tweaks and snapshot for /hdd

---
 bin/v-df-snapshot-make | 46 +++++++++++++++++++++++++++++++++++-------
 1 file changed, 39 insertions(+), 7 deletions(-)

diff --git a/bin/v-df-snapshot-make b/bin/v-df-snapshot-make
index 51c41e9d..985aab15 100644
--- a/bin/v-df-snapshot-make
+++ b/bin/v-df-snapshot-make
@@ -6,13 +6,45 @@ folder="/usr/local/vesta/data/df"
 
 mkdir -p $folder
 timestamp=$(date +%Y-%m-%d-%H-%M-%S)
-du --max-depth=1 -c -m -x / > $folder/snapshot-$timestamp.txt
-du --max-depth=1 -c -m -x /home >> $folder/snapshot-$timestamp.txt
-du --max-depth=2 -c -m -x /home >> $folder/snapshot-$timestamp.txt
-du --max-depth=3 -c -m -x /home >> $folder/snapshot-$timestamp.txt
-du --max-depth=6 -c -m -x /home >> $folder/snapshot-$timestamp.txt
-du --max-depth=1 -c -m -x /var/lib/mysql >> $folder/snapshot-$timestamp.txt
-du --max-depth=1 -c -m -x /var/log >> $folder/snapshot-$timestamp.txt
+
+du --max-depth=1 -m -x / > $folder/snapshot-$timestamp.txt
+
+du --max-depth=6 -m -x /home > $folder/snapshot-temp.txt
+for i in {2..7}; do
+    while IFS= read -r line; do
+        count=0
+        for (( j=0; j<${#line}; j++ )); do
+            if [[ ${line:j:1} == "/" ]]; then
+                ((count++))
+            fi
+        done
+        if [ $count -eq $i ]; then
+            printf '%s\n' "$line" >> $folder/snapshot-$timestamp.txt
+        fi
+    done < $folder/snapshot-temp.txt
+done
+rm $folder/snapshot-temp.txt
+
+if [ -d "/hdd" ]; then
+    du --max-depth=7 -m -x /hdd > $folder/snapshot-temp.txt
+    for i in {1..8}; do
+        while IFS= read -r line; do
+            count=0
+            for (( j=0; j<${#line}; j++ )); do
+                if [[ ${line:j:1} == "/" ]]; then
+                    ((count++))
+                fi
+            done
+            if [ $count -eq $i ]; then
+                printf '%s\n' "$line" >> $folder/snapshot-$timestamp.txt
+            fi
+        done < $folder/snapshot-temp.txt
+    done
+    rm $folder/snapshot-temp.txt
+fi
+
+du --max-depth=1 -m -x /var/lib/mysql >> $folder/snapshot-$timestamp.txt
+du --max-depth=1 -m -x /var/log >> $folder/snapshot-$timestamp.txt
 
 chmod 600 $folder/snapshot-$timestamp.txt
 chown root:root $folder/snapshot-$timestamp.txt

From 87267eb18fea1772414b1481eb16971252abf4e9 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 18 Aug 2025 14:47:20 +0200
Subject: [PATCH 2294/2300] v-commander: Add functionality to renew nginx GPG
 key and add Freexian repository

---
 bin/v-commander | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/bin/v-commander b/bin/v-commander
index 72607c95..502f9f03 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -76,6 +76,7 @@ myhelp() {
     echo "q  = quit"
     echo "r  = reboot"
     echo "s  = download sury.org apt-get key"
+    echo "n  = download nginx gpg key"
     echo "t  = clean the trash"
     echo "u  = apt-get update"
     echo "v  = update myVesta"
@@ -219,6 +220,33 @@ do
         fi
     fi
 
+    if [ "$answer" = 'n' ] || [ "$answer" = 'N' ]; then
+        if [ -f "/etc/apt/sources.list.d/nginx.list" ]; then
+            echo "============================="
+            echo "== renewing nginx gpg key"
+            apt-get update
+            apt-get -y install curl gnupg2 ca-certificates lsb-release debian-archive-keyring
+            curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor | tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null
+            echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/debian `lsb_release -cs` nginx" | tee /etc/apt/sources.list.d/nginx.list
+        fi
+    fi
+
+    if [ "$answer" = 'freexian' ] || [ "$answer" = 'FREEXIAN' ]; then
+        if [ "$release" -lt 11 ]; then
+            echo "============================="
+            echo "== adding Freexian repository"
+            apt-get update
+            apt-get install lsb-release
+            wget https://deb.freexian.com/extended-lts/pool/main/f/freexian-archive-keyring/freexian-archive-keyring_2022.06.08_all.deb && sudo dpkg -i freexian-archive-keyring_2022.06.08_all.deb
+            cat /etc/apt/sources.list
+            mv /etc/apt/sources.list /etc/apt/sources.list.old
+            echo "deb http://deb.freexian.com/extended-lts `lsb_release -cs` main contrib non-free" > /etc/apt/sources.list
+            rm /etc/apt/sources.list.d/hetzner*
+        else
+            echo "== Freexian is not supported on Debian 11 or higher"
+        fi
+    fi
+
     if [ "$answer" = 'e def' ] || [ "$answer" = 'E DEF' ]; then
         release=$(cat /etc/debian_version | tr "." "\n" | head -n1)
         echo "============================="

From 63972e22664bcd3e97ecd8e97c9dc8eaf2cff287 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 18 Aug 2025 14:57:07 +0200
Subject: [PATCH 2295/2300] v-commander: Enhance reboot requirement check to
 include dbus updates

---
 bin/v-commander | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/v-commander b/bin/v-commander
index 502f9f03..87d7f88a 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -202,7 +202,8 @@ do
         apt_upgraded=1
         
         kernelupdate=$(grep -c 'linux-image-' /var/log/apt/history.log)
-        if [ $kernelupdate -gt 0 ] || [ -f "/run/reboot-required" ] || [ -f "/var/run/reboot-required" ]; then
+        dbusupdate=$(grep -c ' dbus:a' /var/log/apt/history.log)
+        if [ $kernelupdate -gt 0 ] || [ $dbusupdate -gt 0 ] || [ -f "/run/reboot-required" ] || [ -f "/var/run/reboot-required" ]; then
             touch /root/kernelupdate
             echo "== kernel is updated, reboot is required!"
         fi

From 37c99361f7693a9d3e8cbdc1f43f099b5f401693 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 18 Aug 2025 15:01:25 +0200
Subject: [PATCH 2296/2300] v-commander: Add Freexian repository

---
 bin/v-commander | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/v-commander b/bin/v-commander
index 87d7f88a..ff99d0b0 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -77,6 +77,7 @@ myhelp() {
     echo "r  = reboot"
     echo "s  = download sury.org apt-get key"
     echo "n  = download nginx gpg key"
+    echo "freexian = add Freexian repository"
     echo "t  = clean the trash"
     echo "u  = apt-get update"
     echo "v  = update myVesta"

From b4e10ed96876b077e70e123f6444d377185ec456 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 18 Aug 2025 15:06:17 +0200
Subject: [PATCH 2297/2300] v-commander: disabling ClamAV

---
 bin/v-commander | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/v-commander b/bin/v-commander
index ff99d0b0..a7fbf454 100644
--- a/bin/v-commander
+++ b/bin/v-commander
@@ -307,6 +307,9 @@ do
         systemctl stop clamav-daemon.service
         systemctl disable clamav-daemon.service
 
+        systemctl stop clamav-daemon.socket
+        systemctl disable clamav-daemon.socket
+
         systemctl stop clamav-freshclam.service
         systemctl disable clamav-freshclam.service
 

From a475e7114545d1f6357c73250aaa91fb24f9adf9 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 18 Aug 2025 15:24:54 +0200
Subject: [PATCH 2298/2300] Update vesta_compile.sh to set NGINX version to
 1.29.1 and PHP version to 8.4.11

---
 src/deb/vesta_compile.sh | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/deb/vesta_compile.sh b/src/deb/vesta_compile.sh
index 08bc163b..2d0e4874 100644
--- a/src/deb/vesta_compile.sh
+++ b/src/deb/vesta_compile.sh
@@ -58,11 +58,12 @@ BUILD_DATE=$(date +"%d-%b-%Y")
 
 # Set Version for compiling
 VESTA_V=$VESTA_VER"_amd64"
-NGINX_V='1.29.0'
+
+NGINX_V='1.29.1'
+PHP_V='8.4.11'
 OPENSSL_V='1.1.1w'
 PCRE_V='8.45'
 ZLIB_V='1.3.1'
-PHP_V='8.4.10'
 
 # Generate Links for sourcecode
 NGINX='https://nginx.org/download/nginx-'$NGINX_V'.tar.gz'

From 5ea346a3458a46d53b746b1bffff1d39356cb044 Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Mon, 18 Aug 2025 15:43:59 +0200
Subject: [PATCH 2299/2300] Debian 13 installation files

---
 install/debian/13/apache2/apache2.conf        |  95 ++
 install/debian/13/apache2/status.conf         |   8 +
 install/debian/13/bind/named.conf             |  12 +
 install/debian/13/clamav/clamd.conf           |  61 ++
 install/debian/13/deb_signing.key             |  41 +
 install/debian/13/dovecot/conf.d/10-auth.conf |   4 +
 .../debian/13/dovecot/conf.d/10-logging.conf  |   1 +
 install/debian/13/dovecot/conf.d/10-mail.conf |   4 +
 .../debian/13/dovecot/conf.d/10-master.conf   |  29 +
 install/debian/13/dovecot/conf.d/10-ssl.conf  |   3 +
 .../13/dovecot/conf.d/15-mailboxes.conf       |  30 +
 install/debian/13/dovecot/conf.d/20-imap.conf |  58 ++
 install/debian/13/dovecot/conf.d/20-pop3.conf |  91 ++
 .../dovecot/conf.d/auth-passwdfile.conf.ext   |   9 +
 install/debian/13/dovecot/dovecot.conf        |   4 +
 install/debian/13/exim/deny_senders           |   1 +
 install/debian/13/exim/dnsbl.conf             |   1 +
 install/debian/13/exim/exim4.conf.template    | 487 ++++++++++
 .../13/exim/exim4.conf.template.without-srs   | 451 ++++++++++
 install/debian/13/exim/spam-blocks.conf       |   0
 .../debian/13/fail2ban/action.d/vesta.conf    |   9 +
 .../debian/13/fail2ban/filter.d/vesta.conf    |  10 +
 install/debian/13/fail2ban/jail.local         |  39 +
 install/debian/13/firewall/ports.conf         |  17 +
 install/debian/13/firewall/rules.conf         |  11 +
 install/debian/13/logrotate/apache2           |  19 +
 install/debian/13/logrotate/dovecot           |  12 +
 install/debian/13/logrotate/nginx             |  13 +
 install/debian/13/logrotate/vesta             |   7 +
 install/debian/13/mysql/my-large.cnf          |  51 ++
 install/debian/13/mysql/my-medium.cnf         |  49 +
 install/debian/13/mysql/my-small.cnf          |  49 +
 install/debian/13/nginx/nginx.conf            | 140 +++
 install/debian/13/nginx/phpmyadmin.inc        |  18 +
 install/debian/13/nginx/phppgadmin.inc        |  11 +
 install/debian/13/nginx/status.conf           |   9 +
 install/debian/13/nginx/webmail.inc           |  15 +
 install/debian/13/packages/default.pkg        |  18 +
 install/debian/13/pga/config.inc.php          | 159 ++++
 install/debian/13/pga/phppgadmin.conf         |  31 +
 install/debian/13/php-fpm/www.conf            |  11 +
 install/debian/13/php/php7.3-dedi.patch       |  78 ++
 install/debian/13/php/php7.3-vps.patch        |  78 ++
 install/debian/13/php/php7.4-dedi.patch       |  78 ++
 install/debian/13/php/php7.4-vps.patch        |  78 ++
 install/debian/13/pma/apache.conf             |  42 +
 install/debian/13/pma/config.inc.php          | 146 +++
 install/debian/13/pma/create_tables.sql       | 385 ++++++++
 install/debian/13/pma/pma.sh                  | 167 ++++
 install/debian/13/postgresql/pg_hba.conf      |  11 +
 install/debian/13/proftpd/proftpd.conf        |  38 +
 install/debian/13/proftpd/tls.conf            |  63 ++
 install/debian/13/roundcube/apache.conf       |  40 +
 install/debian/13/roundcube/config.inc.php    |  33 +
 install/debian/13/roundcube/db.inc.php        |  66 ++
 install/debian/13/roundcube/main.inc.php      | 850 ++++++++++++++++++
 install/debian/13/roundcube/vesta.php         |  73 ++
 install/debian/13/sudo/admin                  |   8 +
 install/debian/13/templates/dns/child-ns.tpl  |  14 +
 install/debian/13/templates/dns/default.tpl   |  18 +
 install/debian/13/templates/dns/gmail.tpl     |  12 +
 install/debian/13/templates/dns/office365.tpl |  22 +
 install/debian/13/templates/dns/yandex.tpl    |  16 +
 .../web/apache2/PHP-FPM-84-public.sh          | 133 +++
 .../web/apache2/PHP-FPM-84-public.stpl        |  36 +
 .../web/apache2/PHP-FPM-84-public.tpl         |  30 +
 .../13/templates/web/apache2/PHP-FPM-84.sh    | 133 +++
 .../13/templates/web/apache2/PHP-FPM-84.stpl  |  36 +
 .../13/templates/web/apache2/PHP-FPM-84.tpl   |  30 +
 .../13/templates/web/awstats/awstats.tpl      | 133 +++
 .../debian/13/templates/web/awstats/index.tpl |  10 +
 .../debian/13/templates/web/awstats/nav.tpl   |  23 +
 .../debian/13/templates/web/nginx/caching.sh  |  19 +
 .../13/templates/web/nginx/caching.stpl       |  44 +
 .../debian/13/templates/web/nginx/caching.tpl |  42 +
 .../web/nginx/force-https-legacy.stpl         |  40 +
 .../web/nginx/force-https-legacy.tpl          |   8 +
 .../web/nginx/force-https-public.stpl         |  40 +
 .../web/nginx/force-https-public.tpl          |   8 +
 .../nginx/force-https-webmail-phpmyadmin.stpl |  64 ++
 .../nginx/force-https-webmail-phpmyadmin.tpl  |   8 +
 .../13/templates/web/nginx/force-https.stpl   |  40 +
 .../13/templates/web/nginx/force-https.tpl    |   8 +
 .../13/templates/web/nginx/hosting-legacy.sh  |  11 +
 .../templates/web/nginx/hosting-legacy.stpl   |  40 +
 .../13/templates/web/nginx/hosting-legacy.tpl |  36 +
 .../templates/web/nginx/hosting-public.stpl   |  40 +
 .../13/templates/web/nginx/hosting-public.tpl |  36 +
 .../web/nginx/hosting-webmail-phpmyadmin.stpl |  64 ++
 .../web/nginx/hosting-webmail-phpmyadmin.tpl  |  60 ++
 .../debian/13/templates/web/nginx/hosting.sh  |  11 +
 .../13/templates/web/nginx/hosting.stpl       |  40 +
 .../debian/13/templates/web/nginx/hosting.tpl |  36 +
 .../web/nginx/php-fpm/cms_made_simple.stpl    |  55 ++
 .../web/nginx/php-fpm/cms_made_simple.tpl     |  52 ++
 .../web/nginx/php-fpm/codeigniter2.stpl       |  60 ++
 .../web/nginx/php-fpm/codeigniter2.tpl        |  57 ++
 .../web/nginx/php-fpm/codeigniter3.stpl       |  55 ++
 .../web/nginx/php-fpm/codeigniter3.tpl        |  52 ++
 .../web/nginx/php-fpm/datalife_engine.stpl    | 126 +++
 .../web/nginx/php-fpm/datalife_engine.tpl     | 123 +++
 .../templates/web/nginx/php-fpm/default.stpl  |  54 ++
 .../templates/web/nginx/php-fpm/default.tpl   |  51 ++
 .../templates/web/nginx/php-fpm/dokuwiki.stpl |  71 ++
 .../templates/web/nginx/php-fpm/dokuwiki.tpl  |  67 ++
 .../templates/web/nginx/php-fpm/drupal6.stpl  |  94 ++
 .../templates/web/nginx/php-fpm/drupal6.tpl   |  91 ++
 .../templates/web/nginx/php-fpm/drupal7.stpl  |  94 ++
 .../templates/web/nginx/php-fpm/drupal7.tpl   |  91 ++
 .../templates/web/nginx/php-fpm/drupal8.stpl  |  94 ++
 .../templates/web/nginx/php-fpm/drupal8.tpl   |  91 ++
 .../templates/web/nginx/php-fpm/joomla.stpl   |  62 ++
 .../13/templates/web/nginx/php-fpm/joomla.tpl |  59 ++
 .../templates/web/nginx/php-fpm/laravel.stpl  |  54 ++
 .../templates/web/nginx/php-fpm/laravel.tpl   |  50 ++
 .../templates/web/nginx/php-fpm/magento.stpl  | 197 ++++
 .../templates/web/nginx/php-fpm/magento.tpl   | 194 ++++
 .../13/templates/web/nginx/php-fpm/modx.stpl  |  68 ++
 .../13/templates/web/nginx/php-fpm/modx.tpl   |  65 ++
 .../templates/web/nginx/php-fpm/moodle.stpl   |  89 ++
 .../13/templates/web/nginx/php-fpm/moodle.tpl |  87 ++
 .../templates/web/nginx/php-fpm/no-php.stpl   |  46 +
 .../13/templates/web/nginx/php-fpm/no-php.tpl |  43 +
 .../13/templates/web/nginx/php-fpm/odoo.stpl  |  69 ++
 .../13/templates/web/nginx/php-fpm/odoo.tpl   |  66 ++
 .../templates/web/nginx/php-fpm/opencart.stpl |  58 ++
 .../templates/web/nginx/php-fpm/opencart.tpl  |  54 ++
 .../templates/web/nginx/php-fpm/owncloud.stpl |  84 ++
 .../templates/web/nginx/php-fpm/owncloud.tpl  |  81 ++
 .../13/templates/web/nginx/php-fpm/piwik.stpl |  72 ++
 .../13/templates/web/nginx/php-fpm/piwik.tpl  |  69 ++
 .../templates/web/nginx/php-fpm/pyrocms.stpl  |  65 ++
 .../templates/web/nginx/php-fpm/pyrocms.tpl   |  62 ++
 .../13/templates/web/nginx/php-fpm/sendy.stpl |  88 ++
 .../13/templates/web/nginx/php-fpm/sendy.tpl  |  86 ++
 .../web/nginx/php-fpm/wordpress.stpl          |  54 ++
 .../templates/web/nginx/php-fpm/wordpress.tpl |  51 ++
 .../web/nginx/php-fpm/wordpress2.stpl         |  66 ++
 .../web/nginx/php-fpm/wordpress2.tpl          |  63 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.stpl |  71 ++
 .../web/nginx/php-fpm/wordpress2_rewrite.tpl  |  67 ++
 .../web/nginx/private-force-https.stpl        |  40 +
 .../web/nginx/private-force-https.tpl         |   8 +
 .../13/templates/web/nginx/private-hosting.sh |  11 +
 .../templates/web/nginx/private-hosting.stpl  |  42 +
 .../templates/web/nginx/private-hosting.tpl   |  38 +
 .../13/templates/web/nginx/proxy_ip.tpl       |   9 +
 .../13/templates/web/php-fpm/default.tpl      |  21 +
 .../13/templates/web/php-fpm/no-php.tpl       |  20 +
 .../13/templates/web/php-fpm/socket.tpl       |  24 +
 .../web/skel/document_errors/403.html         |  29 +
 .../web/skel/document_errors/404.html         |  28 +
 .../web/skel/document_errors/50x.html         |  29 +
 .../templates/web/skel/public_html/index.html |  26 +
 .../templates/web/skel/public_html/robots.txt |   3 +
 .../web/skel/public_shtml/index.html          |  26 +
 .../web/skel/public_shtml/robots.txt          |   3 +
 .../debian/13/templates/web/suspend/.htaccess |   2 +
 .../13/templates/web/suspend/index.html       |  25 +
 .../13/templates/web/webalizer/webalizer.tpl  | 110 +++
 install/debian/13/vsftpd/vsftpd.conf          |  26 +
 install/vst-install-debian.sh                 |  62 +-
 162 files changed, 9861 insertions(+), 2 deletions(-)
 create mode 100644 install/debian/13/apache2/apache2.conf
 create mode 100644 install/debian/13/apache2/status.conf
 create mode 100644 install/debian/13/bind/named.conf
 create mode 100644 install/debian/13/clamav/clamd.conf
 create mode 100644 install/debian/13/deb_signing.key
 create mode 100644 install/debian/13/dovecot/conf.d/10-auth.conf
 create mode 100644 install/debian/13/dovecot/conf.d/10-logging.conf
 create mode 100644 install/debian/13/dovecot/conf.d/10-mail.conf
 create mode 100644 install/debian/13/dovecot/conf.d/10-master.conf
 create mode 100644 install/debian/13/dovecot/conf.d/10-ssl.conf
 create mode 100644 install/debian/13/dovecot/conf.d/15-mailboxes.conf
 create mode 100644 install/debian/13/dovecot/conf.d/20-imap.conf
 create mode 100644 install/debian/13/dovecot/conf.d/20-pop3.conf
 create mode 100644 install/debian/13/dovecot/conf.d/auth-passwdfile.conf.ext
 create mode 100644 install/debian/13/dovecot/dovecot.conf
 create mode 100644 install/debian/13/exim/deny_senders
 create mode 100644 install/debian/13/exim/dnsbl.conf
 create mode 100644 install/debian/13/exim/exim4.conf.template
 create mode 100644 install/debian/13/exim/exim4.conf.template.without-srs
 create mode 100644 install/debian/13/exim/spam-blocks.conf
 create mode 100644 install/debian/13/fail2ban/action.d/vesta.conf
 create mode 100644 install/debian/13/fail2ban/filter.d/vesta.conf
 create mode 100644 install/debian/13/fail2ban/jail.local
 create mode 100644 install/debian/13/firewall/ports.conf
 create mode 100644 install/debian/13/firewall/rules.conf
 create mode 100644 install/debian/13/logrotate/apache2
 create mode 100644 install/debian/13/logrotate/dovecot
 create mode 100644 install/debian/13/logrotate/nginx
 create mode 100644 install/debian/13/logrotate/vesta
 create mode 100644 install/debian/13/mysql/my-large.cnf
 create mode 100644 install/debian/13/mysql/my-medium.cnf
 create mode 100644 install/debian/13/mysql/my-small.cnf
 create mode 100644 install/debian/13/nginx/nginx.conf
 create mode 100644 install/debian/13/nginx/phpmyadmin.inc
 create mode 100644 install/debian/13/nginx/phppgadmin.inc
 create mode 100644 install/debian/13/nginx/status.conf
 create mode 100644 install/debian/13/nginx/webmail.inc
 create mode 100644 install/debian/13/packages/default.pkg
 create mode 100644 install/debian/13/pga/config.inc.php
 create mode 100644 install/debian/13/pga/phppgadmin.conf
 create mode 100644 install/debian/13/php-fpm/www.conf
 create mode 100644 install/debian/13/php/php7.3-dedi.patch
 create mode 100644 install/debian/13/php/php7.3-vps.patch
 create mode 100644 install/debian/13/php/php7.4-dedi.patch
 create mode 100644 install/debian/13/php/php7.4-vps.patch
 create mode 100644 install/debian/13/pma/apache.conf
 create mode 100644 install/debian/13/pma/config.inc.php
 create mode 100644 install/debian/13/pma/create_tables.sql
 create mode 100644 install/debian/13/pma/pma.sh
 create mode 100644 install/debian/13/postgresql/pg_hba.conf
 create mode 100644 install/debian/13/proftpd/proftpd.conf
 create mode 100644 install/debian/13/proftpd/tls.conf
 create mode 100644 install/debian/13/roundcube/apache.conf
 create mode 100644 install/debian/13/roundcube/config.inc.php
 create mode 100644 install/debian/13/roundcube/db.inc.php
 create mode 100644 install/debian/13/roundcube/main.inc.php
 create mode 100644 install/debian/13/roundcube/vesta.php
 create mode 100644 install/debian/13/sudo/admin
 create mode 100644 install/debian/13/templates/dns/child-ns.tpl
 create mode 100644 install/debian/13/templates/dns/default.tpl
 create mode 100644 install/debian/13/templates/dns/gmail.tpl
 create mode 100644 install/debian/13/templates/dns/office365.tpl
 create mode 100644 install/debian/13/templates/dns/yandex.tpl
 create mode 100644 install/debian/13/templates/web/apache2/PHP-FPM-84-public.sh
 create mode 100644 install/debian/13/templates/web/apache2/PHP-FPM-84-public.stpl
 create mode 100644 install/debian/13/templates/web/apache2/PHP-FPM-84-public.tpl
 create mode 100644 install/debian/13/templates/web/apache2/PHP-FPM-84.sh
 create mode 100644 install/debian/13/templates/web/apache2/PHP-FPM-84.stpl
 create mode 100644 install/debian/13/templates/web/apache2/PHP-FPM-84.tpl
 create mode 100644 install/debian/13/templates/web/awstats/awstats.tpl
 create mode 100644 install/debian/13/templates/web/awstats/index.tpl
 create mode 100644 install/debian/13/templates/web/awstats/nav.tpl
 create mode 100644 install/debian/13/templates/web/nginx/caching.sh
 create mode 100644 install/debian/13/templates/web/nginx/caching.stpl
 create mode 100644 install/debian/13/templates/web/nginx/caching.tpl
 create mode 100644 install/debian/13/templates/web/nginx/force-https-legacy.stpl
 create mode 100644 install/debian/13/templates/web/nginx/force-https-legacy.tpl
 create mode 100644 install/debian/13/templates/web/nginx/force-https-public.stpl
 create mode 100644 install/debian/13/templates/web/nginx/force-https-public.tpl
 create mode 100644 install/debian/13/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
 create mode 100644 install/debian/13/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
 create mode 100644 install/debian/13/templates/web/nginx/force-https.stpl
 create mode 100644 install/debian/13/templates/web/nginx/force-https.tpl
 create mode 100644 install/debian/13/templates/web/nginx/hosting-legacy.sh
 create mode 100644 install/debian/13/templates/web/nginx/hosting-legacy.stpl
 create mode 100644 install/debian/13/templates/web/nginx/hosting-legacy.tpl
 create mode 100644 install/debian/13/templates/web/nginx/hosting-public.stpl
 create mode 100644 install/debian/13/templates/web/nginx/hosting-public.tpl
 create mode 100644 install/debian/13/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
 create mode 100644 install/debian/13/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
 create mode 100644 install/debian/13/templates/web/nginx/hosting.sh
 create mode 100644 install/debian/13/templates/web/nginx/hosting.stpl
 create mode 100644 install/debian/13/templates/web/nginx/hosting.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/cms_made_simple.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/cms_made_simple.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/codeigniter2.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/codeigniter2.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/codeigniter3.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/codeigniter3.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/datalife_engine.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/datalife_engine.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/default.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/default.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/dokuwiki.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/dokuwiki.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/drupal6.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/drupal6.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/drupal7.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/drupal7.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/drupal8.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/drupal8.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/joomla.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/joomla.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/laravel.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/laravel.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/magento.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/magento.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/modx.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/modx.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/moodle.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/moodle.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/no-php.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/no-php.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/odoo.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/odoo.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/opencart.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/opencart.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/owncloud.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/owncloud.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/piwik.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/piwik.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/pyrocms.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/pyrocms.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/sendy.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/sendy.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/wordpress.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/wordpress.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/wordpress2.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/wordpress2.tpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
 create mode 100644 install/debian/13/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
 create mode 100644 install/debian/13/templates/web/nginx/private-force-https.stpl
 create mode 100644 install/debian/13/templates/web/nginx/private-force-https.tpl
 create mode 100644 install/debian/13/templates/web/nginx/private-hosting.sh
 create mode 100644 install/debian/13/templates/web/nginx/private-hosting.stpl
 create mode 100644 install/debian/13/templates/web/nginx/private-hosting.tpl
 create mode 100644 install/debian/13/templates/web/nginx/proxy_ip.tpl
 create mode 100644 install/debian/13/templates/web/php-fpm/default.tpl
 create mode 100644 install/debian/13/templates/web/php-fpm/no-php.tpl
 create mode 100644 install/debian/13/templates/web/php-fpm/socket.tpl
 create mode 100644 install/debian/13/templates/web/skel/document_errors/403.html
 create mode 100644 install/debian/13/templates/web/skel/document_errors/404.html
 create mode 100644 install/debian/13/templates/web/skel/document_errors/50x.html
 create mode 100644 install/debian/13/templates/web/skel/public_html/index.html
 create mode 100644 install/debian/13/templates/web/skel/public_html/robots.txt
 create mode 100644 install/debian/13/templates/web/skel/public_shtml/index.html
 create mode 100644 install/debian/13/templates/web/skel/public_shtml/robots.txt
 create mode 100644 install/debian/13/templates/web/suspend/.htaccess
 create mode 100644 install/debian/13/templates/web/suspend/index.html
 create mode 100644 install/debian/13/templates/web/webalizer/webalizer.tpl
 create mode 100644 install/debian/13/vsftpd/vsftpd.conf

diff --git a/install/debian/13/apache2/apache2.conf b/install/debian/13/apache2/apache2.conf
new file mode 100644
index 00000000..2be3e50d
--- /dev/null
+++ b/install/debian/13/apache2/apache2.conf
@@ -0,0 +1,95 @@
+# It is split into several files forming the configuration hierarchy outlined
+# below, all located in the /etc/apache2/ directory:
+#
+#	/etc/apache2/
+#	|-- apache2.conf
+#	|	`--  ports.conf
+#	|-- mods-enabled
+#	|	|-- *.load
+#	|	`-- *.conf
+#	|-- conf.d
+#	|	`-- *
+
+# Global configuration
+PidFile ${APACHE_PID_FILE}
+Timeout 900
+ProxyTimeout 900
+KeepAlive Off
+MaxKeepAliveRequests 100
+KeepAliveTimeout 10
+
+<IfModule mpm_prefork_module>
+    StartServers          8
+    MinSpareServers       5
+    MaxSpareServers      20
+    ServerLimit         256
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_worker_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+<IfModule mpm_event_module>
+    StartServers          2
+    MinSpareThreads      25
+    MaxSpareThreads      75 
+    ThreadLimit          64
+    ThreadsPerChild      25
+    MaxClients          200
+    MaxRequestsPerChild 4000
+</IfModule>
+
+# These need to be set in /etc/apache2/envvars
+User ${APACHE_RUN_USER}
+Group ${APACHE_RUN_GROUP}
+#User www-data
+#Group www-data
+
+AccessFileName .htaccess
+
+<Files ~ "^\.ht">
+    Order allow,deny
+    Deny from all
+    Satisfy all
+</Files>
+
+DefaultType None
+HostnameLookups Off
+
+ErrorLog ${APACHE_LOG_DIR}/error.log
+LogLevel warn
+
+# Include module configuration:
+Include mods-enabled/*.load
+Include mods-enabled/*.conf
+
+# Include list of ports to listen on and which to use for name based vhosts
+Include ports.conf
+
+LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
+LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
+LogFormat "%h %l %u %t \"%r\" %>s %O" common
+LogFormat "%{Referer}i -> %U" referer
+LogFormat "%{User-agent}i" agent
+LogFormat "%b" bytes
+
+Include conf.d/
+
+# Include the virtual host configurations:
+#Include sites-enabled/
+
+ErrorDocument 403 /error/403.html
+ErrorDocument 404 /error/404.html
+ErrorDocument 500 /error/50x.html
+ErrorDocument 501 /error/50x.html
+ErrorDocument 502 /error/50x.html
+ErrorDocument 503 /error/50x.html
+ErrorDocument 506 /error/50x.html
diff --git a/install/debian/13/apache2/status.conf b/install/debian/13/apache2/status.conf
new file mode 100644
index 00000000..0d82a356
--- /dev/null
+++ b/install/debian/13/apache2/status.conf
@@ -0,0 +1,8 @@
+Listen 127.0.0.1:8081
+<Location /server-status>
+    SetHandler server-status
+    Order deny,allow
+    Deny from all
+    Allow from 127.0.0.1
+    # Allow from all
+</Location>
diff --git a/install/debian/13/bind/named.conf b/install/debian/13/bind/named.conf
new file mode 100644
index 00000000..ed6ece88
--- /dev/null
+++ b/install/debian/13/bind/named.conf
@@ -0,0 +1,12 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
+
diff --git a/install/debian/13/clamav/clamd.conf b/install/debian/13/clamav/clamd.conf
new file mode 100644
index 00000000..c636b6d3
--- /dev/null
+++ b/install/debian/13/clamav/clamd.conf
@@ -0,0 +1,61 @@
+#Automatically Generated by clamav-base postinst
+#To reconfigure clamd run #dpkg-reconfigure clamav-base
+#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
+LocalSocket /var/run/clamav/clamd.ctl
+FixStaleSocket true
+LocalSocketGroup clamav
+LocalSocketMode 666
+# TemporaryDirectory is not set to its default /tmp here to make overriding
+# the default with environment variables TMPDIR/TMP/TEMP possible
+User clamav
+# AllowSupplementaryGroups true
+ScanMail true
+ScanArchive true
+ArchiveBlockEncrypted false
+MaxDirectoryRecursion 15
+FollowDirectorySymlinks false
+FollowFileSymlinks false
+ReadTimeout 180
+MaxThreads 12
+MaxConnectionQueueLength 15
+LogSyslog false
+LogFacility LOG_LOCAL6
+LogClean true
+LogVerbose true
+PidFile /var/run/clamav/clamd.pid
+DatabaseDirectory /var/lib/clamav
+SelfCheck 3600
+Foreground false
+Debug false
+ScanPE true
+ScanOLE2 true
+ScanHTML true
+ExitOnOOM false
+LeaveTemporaryFiles false
+AlgorithmicDetection true
+ScanELF true
+IdleTimeout 30
+PhishingSignatures true
+PhishingScanURLs true
+PhishingAlwaysBlockSSLMismatch false
+PhishingAlwaysBlockCloak false
+DetectPUA false
+ScanPartialMessages false
+HeuristicScanPrecedence false
+StructuredDataDetection false
+CommandReadTimeout 5
+SendBufTimeout 200
+MaxQueue 100
+ExtendedDetectionInfo true
+OLE2BlockMacros false
+StreamMaxLength 2M
+MaxFileSize 2M
+LogFile /var/log/clamav/clamav.log
+LogTime true
+LogFileUnlock false
+LogFileMaxSize 0
+Bytecode true
+BytecodeSecurity TrustSigned
+BytecodeTimeout 60000
+OfficialDatabaseOnly false
+CrossFilesystems true
diff --git a/install/debian/13/deb_signing.key b/install/debian/13/deb_signing.key
new file mode 100644
index 00000000..d279abbd
--- /dev/null
+++ b/install/debian/13/deb_signing.key
@@ -0,0 +1,41 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=RAbI
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/install/debian/13/dovecot/conf.d/10-auth.conf b/install/debian/13/dovecot/conf.d/10-auth.conf
new file mode 100644
index 00000000..dfcc8311
--- /dev/null
+++ b/install/debian/13/dovecot/conf.d/10-auth.conf
@@ -0,0 +1,4 @@
+disable_plaintext_auth = no
+auth_verbose = yes
+auth_mechanisms = plain login
+!include auth-passwdfile.conf.ext
diff --git a/install/debian/13/dovecot/conf.d/10-logging.conf b/install/debian/13/dovecot/conf.d/10-logging.conf
new file mode 100644
index 00000000..a5f207d5
--- /dev/null
+++ b/install/debian/13/dovecot/conf.d/10-logging.conf
@@ -0,0 +1 @@
+log_path = /var/log/dovecot.log
diff --git a/install/debian/13/dovecot/conf.d/10-mail.conf b/install/debian/13/dovecot/conf.d/10-mail.conf
new file mode 100644
index 00000000..55313419
--- /dev/null
+++ b/install/debian/13/dovecot/conf.d/10-mail.conf
@@ -0,0 +1,4 @@
+mail_privileged_group = mail
+mail_access_groups = mail
+mail_location = maildir:%h/mail/%d/%n
+pop3_uidl_format = %08Xu%08Xv
diff --git a/install/debian/13/dovecot/conf.d/10-master.conf b/install/debian/13/dovecot/conf.d/10-master.conf
new file mode 100644
index 00000000..a75a9aaa
--- /dev/null
+++ b/install/debian/13/dovecot/conf.d/10-master.conf
@@ -0,0 +1,29 @@
+service imap-login {
+  inet_listener imap {
+  }
+  inet_listener imaps {
+  }
+}
+
+service pop3-login {
+  inet_listener pop3 {
+  }
+  inet_listener pop3s {
+  }
+}
+
+
+service imap {
+}
+
+service pop3 {
+}
+
+service auth {
+  unix_listener auth-client {
+    group = mail
+    mode = 0660
+    user = dovecot
+  }
+  user = dovecot
+}
diff --git a/install/debian/13/dovecot/conf.d/10-ssl.conf b/install/debian/13/dovecot/conf.d/10-ssl.conf
new file mode 100644
index 00000000..3aaff6ee
--- /dev/null
+++ b/install/debian/13/dovecot/conf.d/10-ssl.conf
@@ -0,0 +1,3 @@
+ssl = yes
+ssl_cert = </usr/local/vesta/ssl/certificate.crt
+ssl_key = </usr/local/vesta/ssl/certificate.key
diff --git a/install/debian/13/dovecot/conf.d/15-mailboxes.conf b/install/debian/13/dovecot/conf.d/15-mailboxes.conf
new file mode 100644
index 00000000..9014bdab
--- /dev/null
+++ b/install/debian/13/dovecot/conf.d/15-mailboxes.conf
@@ -0,0 +1,30 @@
+## Mailbox definitions
+##
+
+
+# NOTE: Assumes "namespace inbox" has been defined in 10-mail.conf.
+namespace inbox {
+  inbox = yes
+  mailbox Drafts {
+    special_use = \Drafts
+    auto = subscribe
+  }
+
+  mailbox Junk {
+    special_use = \Junk
+    auto = subscribe
+  }
+
+  mailbox Trash {
+    special_use = \Trash
+    auto = subscribe
+  }
+
+  mailbox Sent {
+    special_use = \Sent
+    auto = subscribe
+  }
+  mailbox "Sent Messages" {
+    special_use = \Sent
+  }
+}
diff --git a/install/debian/13/dovecot/conf.d/20-imap.conf b/install/debian/13/dovecot/conf.d/20-imap.conf
new file mode 100644
index 00000000..4f6e058b
--- /dev/null
+++ b/install/debian/13/dovecot/conf.d/20-imap.conf
@@ -0,0 +1,58 @@
+##
+## IMAP specific settings
+##
+
+protocol imap {
+  # Maximum IMAP command line length. Some clients generate very long command
+  # lines with huge mailboxes, so you may need to raise this if you get
+  # "Too long argument" or "IMAP command line too large" errors often.
+  #imap_max_line_length = 64k
+
+  # Maximum number of IMAP connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  mail_max_userip_connections = 50
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # IMAP logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #imap_logout_format = bytes=%i/%o
+
+  # Override the IMAP CAPABILITY response. If the value begins with '+',
+  # add the given capabilities on top of the defaults (e.g. +XFOO XBAR).
+  #imap_capability = 
+
+  # How long to wait between "OK Still here" notifications when client is
+  # IDLEing.
+  #imap_idle_notify_interval = 2 mins
+
+  # ID field names and values to send to clients. Using * as the value makes
+  # Dovecot use the default value. The following fields have default values
+  # currently: name, version, os, os-version, support-url, support-email.
+  #imap_id_send = 
+
+  # ID fields sent by client to log. * means everything.
+  #imap_id_log =
+
+  # Workarounds for various client bugs:
+  #   delay-newmail:
+  #     Send EXISTS/RECENT new mail notifications only when replying to NOOP
+  #     and CHECK commands. Some clients ignore them otherwise, for example OSX
+  #     Mail (<v2.1). Outlook Express breaks more badly though, without this it
+  #     may show user "Message no longer in server" errors. Note that OE6 still
+  #     breaks even with this workaround if synchronization is set to
+  #     "Headers Only".
+  #   tb-extra-mailbox-sep:
+  #     Thunderbird gets somehow confused with LAYOUT=fs (mbox and dbox) and
+  #     adds extra '/' suffixes to mailbox names. This option causes Dovecot to
+  #     ignore the extra '/' instead of treating it as invalid mailbox name.
+  #   tb-lsub-flags:
+  #     Show \Noselect flags for LSUB replies with LAYOUT=fs (e.g. mbox).
+  #     This makes Thunderbird realize they aren't selectable and show them
+  #     greyed out, instead of only later giving "not selectable" popup error.
+  #
+  # The list is space-separated.
+  #imap_client_workarounds = 
+}
diff --git a/install/debian/13/dovecot/conf.d/20-pop3.conf b/install/debian/13/dovecot/conf.d/20-pop3.conf
new file mode 100644
index 00000000..8c376996
--- /dev/null
+++ b/install/debian/13/dovecot/conf.d/20-pop3.conf
@@ -0,0 +1,91 @@
+##
+## POP3 specific settings
+##
+
+protocol pop3 {
+  # Don't try to set mails non-recent or seen with POP3 sessions. This is
+  # mostly intended to reduce disk I/O. With maildir it doesn't move files
+  # from new/ to cur/, with mbox it doesn't write Status-header.
+  #pop3_no_flag_updates = no
+
+  # Support LAST command which exists in old POP3 specs, but has been removed
+  # from new ones. Some clients still wish to use this though. Enabling this
+  # makes RSET command clear all \Seen flags from messages.
+  #pop3_enable_last = no
+
+  # If mail has X-UIDL header, use it as the mail's UIDL.
+  #pop3_reuse_xuidl = no
+
+  # Keep the mailbox locked for the entire POP3 session.
+  #pop3_lock_session = no
+
+  # POP3 requires message sizes to be listed as if they had CR+LF linefeeds.
+  # Many POP3 servers violate this by returning the sizes with LF linefeeds,
+  # because it's faster to get. When this setting is enabled, Dovecot still
+  # tries to do the right thing first, but if that requires opening the
+  # message, it fallbacks to the easier (but incorrect) size.
+  #pop3_fast_size_lookups = no
+
+  # POP3 UIDL (unique mail identifier) format to use. You can use following
+  # variables, along with the variable modifiers described in
+  # doc/wiki/Variables.txt (e.g. %Uf for the filename in uppercase)
+  #
+  #  %v - Mailbox's IMAP UIDVALIDITY
+  #  %u - Mail's IMAP UID
+  #  %m - MD5 sum of the mailbox headers in hex (mbox only)
+  #  %f - filename (maildir only)
+  #  %g - Mail's GUID
+  #
+  # If you want UIDL compatibility with other POP3 servers, use:
+  #  UW's ipop3d         : %08Xv%08Xu
+  #  Courier             : %f or %v-%u (both might be used simultaneosly)
+  #  Cyrus (<= 2.1.3)    : %u
+  #  Cyrus (>= 2.1.4)    : %v.%u
+  #  Dovecot v0.99.x     : %v.%u
+  #  tpop3d              : %Mf
+  #
+  # Note that Outlook 2003 seems to have problems with %v.%u format which was
+  # Dovecot's default, so if you're building a new server it would be a good
+  # idea to change this. %08Xu%08Xv should be pretty fail-safe.
+  #
+  #pop3_uidl_format = %08Xu%08Xv
+
+  # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes
+  # won't change those UIDLs. Currently this works only with Maildir.
+  #pop3_save_uidl = no
+
+  # What to do about duplicate UIDLs if they exist?
+  #   allow: Show duplicates to clients.
+  #   rename: Append a temporary -2, -3, etc. counter after the UIDL.
+  #pop3_uidl_duplicates = allow
+
+  # POP3 logout format string:
+  #  %i - total number of bytes read from client
+  #  %o - total number of bytes sent to client
+  #  %t - number of TOP commands
+  #  %p - number of bytes sent to client as a result of TOP command
+  #  %r - number of RETR commands
+  #  %b - number of bytes sent to client as a result of RETR command
+  #  %d - number of deleted messages
+  #  %m - number of messages (before deletion)
+  #  %s - mailbox size in bytes (before deletion)
+  #  %u - old/new UIDL hash. may help finding out if UIDLs changed unexpectedly
+  #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
+
+  # Maximum number of POP3 connections allowed for a user from each IP address.
+  # NOTE: The username is compared case-sensitively.
+  mail_max_userip_connections = 50
+
+  # Space separated list of plugins to load (default is global mail_plugins).
+  #mail_plugins = $mail_plugins
+
+  # Workarounds for various client bugs:
+  #   outlook-no-nuls:
+  #     Outlook and Outlook Express hang if mails contain NUL characters.
+  #     This setting replaces them with 0x80 character.
+  #   oe-ns-eoh:
+  #     Outlook Express and Netscape Mail breaks if end of headers-line is
+  #     missing. This option simply sends it if it's missing.
+  # The list is space-separated.
+  #pop3_client_workarounds = 
+}
diff --git a/install/debian/13/dovecot/conf.d/auth-passwdfile.conf.ext b/install/debian/13/dovecot/conf.d/auth-passwdfile.conf.ext
new file mode 100644
index 00000000..75e6e115
--- /dev/null
+++ b/install/debian/13/dovecot/conf.d/auth-passwdfile.conf.ext
@@ -0,0 +1,9 @@
+passdb {
+  driver = passwd-file
+  args = scheme=MD5-CRYPT username_format=%n /etc/exim4/domains/%d/passwd
+}
+
+userdb {
+  driver = passwd-file
+  args = username_format=%n /etc/exim4/domains/%d/passwd
+}
diff --git a/install/debian/13/dovecot/dovecot.conf b/install/debian/13/dovecot/dovecot.conf
new file mode 100644
index 00000000..0a855351
--- /dev/null
+++ b/install/debian/13/dovecot/dovecot.conf
@@ -0,0 +1,4 @@
+protocols = imap pop3
+listen = *, ::
+base_dir = /var/run/dovecot/
+!include conf.d/*.conf
diff --git a/install/debian/13/exim/deny_senders b/install/debian/13/exim/deny_senders
new file mode 100644
index 00000000..8b137891
--- /dev/null
+++ b/install/debian/13/exim/deny_senders
@@ -0,0 +1 @@
+
diff --git a/install/debian/13/exim/dnsbl.conf b/install/debian/13/exim/dnsbl.conf
new file mode 100644
index 00000000..279bafcd
--- /dev/null
+++ b/install/debian/13/exim/dnsbl.conf
@@ -0,0 +1 @@
+bl.spamcop.net
diff --git a/install/debian/13/exim/exim4.conf.template b/install/debian/13/exim/exim4.conf.template
new file mode 100644
index 00000000..15264797
--- /dev/null
+++ b/install/debian/13/exim/exim4.conf.template
@@ -0,0 +1,487 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+disable_ipv6=true
+add_environment=<; PATH=/bin:/usr/bin
+keep_environment=
+smtputf8_advertise_hosts =
+
+SRS_SECRET = ${readfile{/etc/exim4/srs.conf}}
+
+#local_interfaces =  0.0.0.0
+#smtp_active_hostname = ${lookup{$interface_address}lsearch{/etc/exim4/virtual/helo_data}{$value}}
+#smtp_banner = "$smtp_active_hostname ESMTP $tod_full"
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS = 15
+LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS = 5
+LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
+LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
+
+recipients_max = 150
+recipients_max_reject = true
+
+# log_selector = +smtp_connection
+smtp_accept_max = 50
+smtp_accept_max_per_host = 4
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/certificate.crt
+tls_privatekey = /usr/local/vesta/ssl/certificate.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 0s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lookup{${lc:${domain:$h_from:}}}dsearch{/etc/exim4/domains/}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+
+acl_not_smtp = acl_not_smtp
+
+begin acl
+
+acl_not_smtp:
+  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
+  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_recipients}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS}}
+  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
+
+  deny message = Hosting account is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+
+  warn    set acl_m3    = yes
+
+  accept
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    !authenticated = *
+          message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    !authenticated = *
+          condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    !authenticated = *
+          condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
+  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_recipients}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS}}
+  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
+
+  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+
+  warn    set acl_m3    = no
+  
+  warn    !authenticated = *
+          hosts          = !+relay_from_hosts
+          condition     = ${if eq{${lookup{$domain}dsearch{/etc/exim4/domains/}}}{}{false}{true}}
+          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
+          set acl_m3    = yes
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth requried
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+
+  deny senders = /etc/exim4/deny_senders
+
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = */defer_ok
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{600K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = nobody:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh|\.jar)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  # if outbound, and forwarding has been done, use an alternate transport
+  domains = ! +local_domains
+  transport = ${if eq {$local_part@$domain} \
+                      {$original_local_part@$original_domain} \
+                      {remote_smtp} {remote_forwarded_smtp}}
+  no_more
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{yes}{no_such_user}}}}
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  require_files = ${local_part}:+${home}/.forward
+  domains = +local_domains
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+inbound_srs:
+    driver = redirect
+    senders = :
+    domains = +local_domains
+    # detect inbound bounces which are converted to SRS, and decode them
+    condition = ${if inbound_srs {$local_part} {SRS_SECRET}}
+    data = $srs_recipient
+
+inbound_srs_failure:
+    driver = redirect
+    senders = :
+    domains = +local_domains
+    # detect inbound bounces which look converted to SRS but are invalid
+    condition = ${if inbound_srs {$local_part} {}}
+    allow_fail
+    data = :fail: Invalid SRS recipient address
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/fwd_only}{true}{false}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #interface = ${if eq{$acl_m3}{yes}{FIRSTIP}{${lookup{$sender_address_domain}lsearch{/etc/exim4/virtual/interfaces} {$value}{SECONDIP}}}}
+  #helo_data = "${if eq{$acl_m3}{yes}{FIRSTHOST}{${lookup{$sending_ip_address}lsearch{/etc/exim4/virtual/helo_data}{$value}{SECONDHOST}}}}"
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+  hosts_try_fastopen = 
+  hosts_try_chunking = !93.188.3.0/24
+  message_linelength_limit = 1G
+
+remote_forwarded_smtp:
+  driver = smtp
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+  hosts_try_fastopen = 
+  hosts_try_chunking = !93.188.3.0/24
+  message_linelength_limit = 1G
+  # modify the envelope from, for mails that we forward
+  max_rcpt = 1
+  return_path = ${srs_encode {SRS_SECRET} {$return_path} {$original_domain}}
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}.msg
+  from = "${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################
diff --git a/install/debian/13/exim/exim4.conf.template.without-srs b/install/debian/13/exim/exim4.conf.template.without-srs
new file mode 100644
index 00000000..78eda468
--- /dev/null
+++ b/install/debian/13/exim/exim4.conf.template.without-srs
@@ -0,0 +1,451 @@
+######################################################################
+#                                                                    #
+#          Exim configuration file for Vesta Control Panel           #
+#                                                                    #
+######################################################################
+
+#SPAMASSASSIN = yes
+#SPAM_SCORE = 50
+#CLAMD =  yes
+
+disable_ipv6=true
+add_environment=<; PATH=/bin:/usr/bin
+keep_environment=
+smtputf8_advertise_hosts =
+
+#local_interfaces =  0.0.0.0
+#smtp_active_hostname = ${lookup{$interface_address}lsearch{/etc/exim4/virtual/helo_data}{$value}}
+#smtp_banner = "$smtp_active_hostname ESMTP $tod_full"
+
+domainlist local_domains = dsearch;/etc/exim4/domains/
+domainlist relay_to_domains = dsearch;/etc/exim4/domains/
+hostlist relay_from_hosts = 127.0.0.1
+hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
+hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
+no_local_from_check
+untrusted_set_sender = *
+acl_smtp_connect = acl_check_spammers
+acl_smtp_mail = acl_check_mail
+acl_smtp_rcpt = acl_check_rcpt
+acl_smtp_data = acl_check_data
+acl_smtp_mime = acl_check_mime
+
+LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS = 15
+LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS = 5
+LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
+LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR = 40
+
+recipients_max = 150
+recipients_max_reject = true
+
+# log_selector = +smtp_connection
+smtp_accept_max = 50
+smtp_accept_max_per_host = 4
+
+.ifdef SPAMASSASSIN
+spamd_address = 127.0.0.1 783
+.endif
+
+.ifdef CLAMD
+av_scanner = clamd: /var/run/clamav/clamd.ctl
+.endif
+
+tls_advertise_hosts = *
+tls_certificate = /usr/local/vesta/ssl/certificate.crt
+tls_privatekey = /usr/local/vesta/ssl/certificate.key
+
+daemon_smtp_ports = 25 : 465 : 587 : 2525
+tls_on_connect_ports = 465
+never_users = root
+host_lookup = *
+rfc1413_hosts = *
+rfc1413_query_timeout = 0s
+ignore_bounce_errors_after = 2d
+timeout_frozen_after = 7d
+
+DKIM_DOMAIN = ${lc:${domain:$h_from:}}
+DKIM_FILE = /etc/exim4/domains/${lookup{${lc:${domain:$h_from:}}}dsearch{/etc/exim4/domains/}}/dkim.pem
+DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
+
+
+
+######################################################################
+#                       ACL CONFIGURATION                            #
+#         Specifies access control lists for incoming SMTP mail      #
+######################################################################
+
+acl_not_smtp = acl_not_smtp
+
+begin acl
+
+acl_not_smtp:
+  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
+  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_recipients}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_RECIPIENTS}}
+  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
+
+  deny message = Hosting account is sending too much emails [limitlog]: deny / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_HOSTING_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  log_message = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+
+  warn    set acl_m3    = yes
+
+  accept
+
+acl_check_spammers:
+  accept  hosts         = +whitelist
+
+  drop    message       = Your host in blacklist on this server.
+          log_message   = Host in blacklist
+          hosts         = +spammers
+
+  accept
+
+
+acl_check_mail:
+  deny    condition     = ${if eq{$sender_helo_name}{}}
+          message       = HELO required before MAIL
+
+  drop    !authenticated = *
+          message       = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
+          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
+          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
+          delay         = 45s
+
+  drop    !authenticated = *
+          condition     = ${if isip{$sender_helo_name}}
+          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)
+
+  drop    !authenticated = *
+          condition     = ${if eq{[$interface_address]}{$sender_helo_name}}
+          message       = $interface_address is _my_ address
+
+  accept
+
+
+acl_check_rcpt:
+  accept  hosts         = :
+
+  deny message = Too many recipients, limit is $acl_c_max_recipients recipients
+  set acl_c_max_recipients=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_recipients}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_RECIPIENTS}}
+  condition = ${if >{$rcpt_count}{$acl_c_max_recipients}}
+
+  deny message = Email account is sending too much emails [limitlog]: deny / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  ratelimit = $acl_c_limit_per_hour / 1h / $authenticated_id
+
+  warn ratelimit = 0 / 1h / strict / $authenticated_id
+  set acl_c_limit_per_hour=${lookup{$authenticated_id}lsearch{/etc/exim4/limit_per_email_account_max_sent_emails_per_hour}{$value}{LIMIT_PER_EMAIL_ACCOUNT_MAX_SENT_EMAILS_PER_HOUR}}
+  log_message = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period [limit=$acl_c_limit_per_hour]
+
+  warn    set acl_m3    = no
+  
+  warn    !authenticated = *
+          hosts          = !+relay_from_hosts
+          condition     = ${if eq{${lookup{$domain}dsearch{/etc/exim4/domains/}}}{}{false}{true}}
+          condition     = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
+          set acl_m3    = yes
+
+  deny    message       = Restricted characters in address
+          domains       = +local_domains
+          local_parts   = ^[.] : ^.*[@%!/|]
+
+  deny    message       = Restricted characters in address
+          domains       = !+local_domains
+          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
+
+  require verify        = sender
+
+  accept  hosts         = +relay_from_hosts
+          control       = submission
+
+  accept  authenticated = *
+          control       = submission/domain=
+
+  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
+          hosts         = !+whitelist
+          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}
+
+  require message       = relay not permitted
+          domains       = +local_domains : +relay_to_domains
+
+  deny    message       = smtp auth requried
+         sender_domains = +local_domains
+         !authenticated = *
+
+  require verify        = recipient
+
+.ifdef CLAMD
+  warn    set acl_m0    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
+          set acl_m0    = yes
+.endif
+
+.ifdef SPAMASSASSIN
+  warn    set acl_m1    = no
+
+  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
+          set acl_m1    = yes
+.endif
+
+  accept
+
+
+acl_check_data:
+
+  deny senders = /etc/exim4/deny_senders
+
+.ifdef CLAMD
+  deny   message        = Message contains a virus ($malware_name) and has been rejected
+         malware        = */defer_ok
+         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
+.endif
+
+.ifdef SPAMASSASSIN
+  warn   !authenticated = *
+         hosts          = !+relay_from_hosts
+         condition      = ${if < {$message_size}{600K}}
+         condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
+         spam           = nobody:true/defer_ok
+         add_header     = X-Spam-Score: $spam_score_int
+         add_header     = X-Spam-Bar: $spam_bar
+         add_header     = X-Spam-Report: $spam_report
+         set acl_m2     = $spam_score_int
+
+  warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
+         condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
+         add_header     = X-Spam-Status: Yes
+         message        = SpamAssassin detected spam (from $sender_address to $recipients).
+.endif
+
+  accept
+
+
+acl_check_mime:
+  deny   message        = Blacklisted file extension detected
+         condition      = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh|\.jar)$\N}{1}{0}}
+
+  accept
+
+
+
+######################################################################
+#                   AUTHENTICATION CONFIGURATION                     #
+######################################################################
+begin authenticators
+
+dovecot_plain:
+  driver = dovecot
+  public_name = PLAIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+dovecot_login:
+  driver = dovecot
+  public_name = LOGIN
+  server_socket = /var/run/dovecot/auth-client
+  server_set_id = $auth1
+
+
+
+######################################################################
+#                      ROUTERS CONFIGURATION                         #
+#               Specifies how addresses are handled                  #
+######################################################################
+begin routers
+
+#smarthost:
+#  driver = manualroute
+#  domains = ! +local_domains
+#  transport = remote_smtp
+#  route_list = * smartrelay.vestacp.com
+#  no_more
+#  no_verify
+
+dnslookup:
+  driver = dnslookup
+  domains = !+local_domains
+  transport = remote_smtp
+  no_more
+
+localuser_spam:
+  driver = accept
+  transport = local_spam_delivery
+  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{yes}{no_such_user}}}}
+
+userforward:
+  driver = redirect
+  check_local_user
+  file = $home/.forward
+  require_files = ${local_part}:+${home}/.forward
+  domains = +local_domains
+  allow_filter
+  no_verify
+  no_expn
+  check_ancestor
+  file_transport = address_file
+  pipe_transport = address_pipe
+  reply_transport = address_reply
+
+procmail:
+  driver = accept
+  check_local_user
+  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
+  transport = procmail
+  no_verify
+
+autoreplay:
+  driver = accept
+  require_files = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg
+  condition = ${if exists{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg}{yes}{no}}
+  retry_use_local_part
+  transport = userautoreply
+  unseen
+
+aliases:
+  driver = redirect
+  headers_add = X-redirected: yes
+  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
+  require_files = /etc/exim4/domains/$domain/aliases
+  redirect_router = dnslookup
+  pipe_transport = address_pipe
+  unseen
+
+localuser_fwd_only:
+  driver = accept
+  transport = devnull
+  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/fwd_only}{true}{false}}}}
+
+localuser:
+  driver = accept
+  transport = local_delivery
+  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{true}{false}}
+
+catchall:
+  driver = redirect
+  headers_add = X-redirected: yes
+  require_files = /etc/exim4/domains/$domain/aliases
+  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
+  file_transport = local_delivery
+  redirect_router = dnslookup
+
+terminate_alias:
+  driver = accept
+  transport = devnull
+  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}
+
+
+
+######################################################################
+#                      TRANSPORTS CONFIGURATION                      #
+######################################################################
+begin transports
+
+remote_smtp:
+  driver = smtp
+  #interface = ${if eq{$acl_m3}{yes}{FIRSTIP}{${lookup{$sender_address_domain}lsearch{/etc/exim4/virtual/interfaces} {$value}{SECONDIP}}}}
+  #helo_data = "${if eq{$acl_m3}{yes}{FIRSTHOST}{${lookup{$sending_ip_address}lsearch{/etc/exim4/virtual/helo_data}{$value}{SECONDHOST}}}}"
+  dkim_domain = DKIM_DOMAIN
+  dkim_selector = mail
+  dkim_private_key = DKIM_PRIVATE_KEY
+  dkim_canon = relaxed
+  dkim_strict = 0
+  hosts_try_fastopen = 
+  hosts_try_chunking = !93.188.3.0/24
+  message_linelength_limit = 1G
+
+procmail:
+  driver = pipe
+  command = "/usr/bin/procmail -d $local_part"
+  return_path_add
+  delivery_date_add
+  envelope_to_add
+  user = $local_part
+  initgroups
+  return_output
+
+local_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_warn_threshold = 75%
+
+local_spam_delivery:
+  driver = appendfile
+  maildir_format
+  maildir_use_size_file
+  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
+  group = mail
+  create_directory
+  directory_mode = 770
+  mode = 660
+  use_lockfile = no
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}/.Spam"
+  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
+  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
+  quota_warn_threshold = 75%
+
+address_pipe:
+  driver = pipe
+  return_output
+
+address_file:
+  driver = appendfile
+  delivery_date_add
+  envelope_to_add
+  return_path_add
+
+address_reply:
+  driver = autoreply
+
+userautoreply:
+  driver = autoreply
+  file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}.msg
+  from = "${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"
+  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
+  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
+  to = "${sender_address}"
+
+devnull:
+  driver = appendfile
+  file = /dev/null
+
+
+
+######################################################################
+#                      RETRY CONFIGURATION                           #
+######################################################################
+begin retry
+
+# Address or Domain    Error       Retries
+# -----------------    -----       -------
+*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
+
+
+
+######################################################################
+#                      REWRITE CONFIGURATION                         #
+######################################################################
+begin rewrite
+
+
+
+######################################################################
diff --git a/install/debian/13/exim/spam-blocks.conf b/install/debian/13/exim/spam-blocks.conf
new file mode 100644
index 00000000..e69de29b
diff --git a/install/debian/13/fail2ban/action.d/vesta.conf b/install/debian/13/fail2ban/action.d/vesta.conf
new file mode 100644
index 00000000..0edfc349
--- /dev/null
+++ b/install/debian/13/fail2ban/action.d/vesta.conf
@@ -0,0 +1,9 @@
+# Fail2Ban configuration file for vesta
+
+[Definition]
+
+actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
+actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
+actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
+actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
+actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>
diff --git a/install/debian/13/fail2ban/filter.d/vesta.conf b/install/debian/13/fail2ban/filter.d/vesta.conf
new file mode 100644
index 00000000..36ec1001
--- /dev/null
+++ b/install/debian/13/fail2ban/filter.d/vesta.conf
@@ -0,0 +1,10 @@
+# Fail2Ban filter for unsuccessful Vesta authentication attempts
+#
+
+[INCLUDES]
+before = common.conf
+
+[Definition]
+failregex =  .* <HOST> failed to login
+ignoreregex =
+
diff --git a/install/debian/13/fail2ban/jail.local b/install/debian/13/fail2ban/jail.local
new file mode 100644
index 00000000..eccea068
--- /dev/null
+++ b/install/debian/13/fail2ban/jail.local
@@ -0,0 +1,39 @@
+[ssh-iptables]
+enabled  = true
+filter   = sshd
+action   = vesta[name=SSH]
+logpath  = /var/log/auth.log
+maxretry = 5
+
+[vsftpd-iptables]
+enabled  = false
+filter   = vsftpd
+action   = vesta[name=FTP]
+logpath  = /var/log/vsftpd.log
+maxretry = 5
+
+[exim-iptables]
+enabled = true
+filter  = exim
+action  = vesta[name=MAIL]
+logpath = /var/log/exim4/mainlog
+
+[dovecot-iptables]
+enabled = true
+filter  = dovecot
+action  = vesta[name=MAIL]
+logpath = /var/log/dovecot.log
+
+[mysqld-iptables]
+enabled  = false
+filter   = mysqld-auth
+action   = vesta[name=DB]
+logpath  = /var/log/mysql.log
+maxretry = 5
+
+[vesta-iptables]
+enabled = true
+filter  = vesta
+action  = vesta[name=VESTA]
+logpath = /var/log/vesta/auth.log
+maxretry = 5
diff --git a/install/debian/13/firewall/ports.conf b/install/debian/13/firewall/ports.conf
new file mode 100644
index 00000000..b730d012
--- /dev/null
+++ b/install/debian/13/firewall/ports.conf
@@ -0,0 +1,17 @@
+PROTOCOL='TCP' PORT='20'
+PROTOCOL='TCP' PORT='21'
+PROTOCOL='TCP' PORT='22'
+PROTOCOL='TCP' PORT='25'
+PROTOCOL='TCP' PORT='53'
+PROTOCOL='UDP' PORT='53'
+PROTOCOL='TCP' PORT='80'
+PROTOCOL='TCP' PORT='443'
+PROTOCOL='TCP' PORT='110'
+PROTOCOL='UDP' PORT='123'
+PROTOCOL='TCP' PORT='143'
+PROTOCOL='TCP' PORT='3306'
+PROTOCOL='TCP' PORT='5432'
+PROTOCOL='TCP' PORT='8080'
+PROTOCOL='TCP' PORT='8433'
+PROTOCOL='TCP' PORT='8083'
+PROTOCOL='TCP' PORT='12000:12100'
diff --git a/install/debian/13/firewall/rules.conf b/install/debian/13/firewall/rules.conf
new file mode 100644
index 00000000..6da5a1c4
--- /dev/null
+++ b/install/debian/13/firewall/rules.conf
@@ -0,0 +1,11 @@
+RULE='1' ACTION='ACCEPT' PROTOCOL='ICMP' PORT='0' IP='0.0.0.0/0' COMMENT='PING' SUSPENDED='no' TIME='17:13:48' DATE='2014-09-16'
+RULE='2' ACTION='ACCEPT' PROTOCOL='TCP' PORT='8083' IP='0.0.0.0/0' COMMENT='VESTA' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='3' ACTION='ACCEPT' PROTOCOL='TCP' PORT='3306,5432' IP='0.0.0.0/0' COMMENT='DB' SUSPENDED='yes' TIME='07:40:16' DATE='2014-05-25'
+RULE='4' ACTION='ACCEPT' PROTOCOL='TCP' PORT='143,993' IP='0.0.0.0/0' COMMENT='IMAP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='5' ACTION='ACCEPT' PROTOCOL='TCP' PORT='110,995' IP='0.0.0.0/0' COMMENT='POP3' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='6' ACTION='ACCEPT' PROTOCOL='TCP' PORT='25,465,587,2525' IP='0.0.0.0/0' COMMENT='SMTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='7' ACTION='ACCEPT' PROTOCOL='TCP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='8' ACTION='ACCEPT' PROTOCOL='UDP' PORT='53' IP='0.0.0.0/0' COMMENT='DNS' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='9' ACTION='ACCEPT' PROTOCOL='TCP' PORT='21,12000-12100' IP='0.0.0.0/0' COMMENT='FTP' SUSPENDED='no' TIME='07:40:16' DATE='2014-05-25'
+RULE='10' ACTION='ACCEPT' PROTOCOL='TCP' PORT='80,443' IP='0.0.0.0/0' COMMENT='WEB' SUSPENDED='no' TIME='17:04:27' DATE='2014-09-24'
+RULE='11' ACTION='ACCEPT' PROTOCOL='TCP' PORT='22' IP='0.0.0.0/0' COMMENT='SSH' SUSPENDED='no' TIME='17:14:41' DATE='2014-09-16'
diff --git a/install/debian/13/logrotate/apache2 b/install/debian/13/logrotate/apache2
new file mode 100644
index 00000000..27629d0d
--- /dev/null
+++ b/install/debian/13/logrotate/apache2
@@ -0,0 +1,19 @@
+/var/log/apache2/*.log /var/log/apache2/domains/*log {
+        weekly
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 root adm
+        sharedscripts
+        postrotate
+                /etc/init.d/apache2 reload > /dev/null || true
+                [ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+        prerotate
+                if [ -d /etc/logrotate.d/httpd-prerotate ]; then \
+                        run-parts /etc/logrotate.d/httpd-prerotate; \
+                fi; \
+        endscript
+}
diff --git a/install/debian/13/logrotate/dovecot b/install/debian/13/logrotate/dovecot
new file mode 100644
index 00000000..ac4fd6e9
--- /dev/null
+++ b/install/debian/13/logrotate/dovecot
@@ -0,0 +1,12 @@
+/var/log/dovecot*.log {
+  weekly
+  rotate 4
+  missingok
+  notifempty
+  compress
+  delaycompress
+  sharedscripts
+  postrotate
+    doveadm log reopen
+  endscript
+}
diff --git a/install/debian/13/logrotate/nginx b/install/debian/13/logrotate/nginx
new file mode 100644
index 00000000..d667f213
--- /dev/null
+++ b/install/debian/13/logrotate/nginx
@@ -0,0 +1,13 @@
+/var/log/nginx/*log /var/log/nginx/domains/*log {
+        daily
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 nginx adm
+        sharedscripts
+        postrotate
+                [ -f /var/run/nginx.pid ] && kill -USR1 `cat /var/run/nginx.pid`
+        endscript
+}
diff --git a/install/debian/13/logrotate/vesta b/install/debian/13/logrotate/vesta
new file mode 100644
index 00000000..027a3439
--- /dev/null
+++ b/install/debian/13/logrotate/vesta
@@ -0,0 +1,7 @@
+/usr/local/vesta/log/*.log {
+    missingok
+    notifempty
+    size 30k
+    yearly
+    create 0600 root root
+}
diff --git a/install/debian/13/mysql/my-large.cnf b/install/debian/13/mysql/my-large.cnf
new file mode 100644
index 00000000..b056c316
--- /dev/null
+++ b/install/debian/13/mysql/my-large.cnf
@@ -0,0 +1,51 @@
+[client]
+default-character-set=utf8mb4
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysql]
+default-character-set=utf8mb4
+
+[mysqld]
+collation-server = utf8mb4_unicode_520_ci
+init-connect='SET NAMES utf8mb4'
+character-set-server = utf8mb4
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 256M
+max_allowed_packet = 32M
+table_open_cache = 256
+sort_buffer_size = 1M
+read_buffer_size = 1M
+read_rnd_buffer_size = 4M
+myisam_sort_buffer_size = 64M
+thread_cache_size = 8
+query_cache_size= 16M
+thread_concurrency = 8
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=200
+max_user_connections=50
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+sql_mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/13/mysql/my-medium.cnf b/install/debian/13/mysql/my-medium.cnf
new file mode 100644
index 00000000..33aa04c2
--- /dev/null
+++ b/install/debian/13/mysql/my-medium.cnf
@@ -0,0 +1,49 @@
+[client]
+default-character-set=utf8mb4
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysql]
+default-character-set=utf8mb4
+
+[mysqld]
+collation-server = utf8mb4_unicode_520_ci
+init-connect='SET NAMES utf8mb4'
+character-set-server = utf8mb4
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+  
+skip-external-locking
+key_buffer_size = 16M
+max_allowed_packet = 16M
+table_open_cache = 64
+sort_buffer_size = 512K
+net_buffer_length = 8K
+read_buffer_size = 256K
+read_rnd_buffer_size = 512K
+myisam_sort_buffer_size = 8M
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=70
+max_user_connections=30
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+sql_mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/13/mysql/my-small.cnf b/install/debian/13/mysql/my-small.cnf
new file mode 100644
index 00000000..857f48ce
--- /dev/null
+++ b/install/debian/13/mysql/my-small.cnf
@@ -0,0 +1,49 @@
+[client]
+default-character-set=utf8mb4
+port=3306
+socket=/var/run/mysqld/mysqld.sock
+
+[mysqld_safe]
+socket=/var/run/mysqld/mysqld.sock
+
+[mysql]
+default-character-set=utf8mb4
+
+[mysqld]
+collation-server = utf8mb4_unicode_520_ci
+init-connect='SET NAMES utf8mb4'
+character-set-server = utf8mb4
+user=mysql
+pid-file=/var/run/mysqld/mysqld.pid
+socket=/var/run/mysqld/mysqld.sock
+port=3306
+basedir=/usr
+datadir=/var/lib/mysql
+tmpdir=/tmp
+lc-messages-dir=/usr/share/mysql
+log_error=/var/log/mysql/error.log
+
+symbolic-links=0
+
+skip-external-locking
+key_buffer_size = 16K
+max_allowed_packet = 1M
+table_open_cache = 4
+sort_buffer_size = 64K
+read_buffer_size = 256K
+read_rnd_buffer_size = 256K
+net_buffer_length = 2K
+thread_stack = 240K
+
+#innodb_use_native_aio = 0
+innodb_file_per_table
+
+max_connections=30
+max_user_connections=20
+wait_timeout=10
+interactive_timeout=50
+long_query_time=5
+
+sql_mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+
+!includedir /etc/mysql/conf.d/
diff --git a/install/debian/13/nginx/nginx.conf b/install/debian/13/nginx/nginx.conf
new file mode 100644
index 00000000..6efe2337
--- /dev/null
+++ b/install/debian/13/nginx/nginx.conf
@@ -0,0 +1,140 @@
+# Server globals
+user                    www-data;
+worker_processes        auto;
+worker_rlimit_nofile    65535;
+timer_resolution         50ms; #In order to free some CPU cycles
+error_log               /var/log/nginx/error.log crit;
+pid                     /var/run/nginx.pid;
+
+
+# Worker config
+events {
+        worker_connections  1024;
+        use                 epoll;
+        multi_accept        on;
+}
+
+
+http {
+    # Main settings
+    sendfile                        on;
+    tcp_nopush                      on;
+    tcp_nodelay                     on;
+    client_header_timeout           1m;
+    client_body_timeout             1m;
+    client_header_buffer_size       2k;
+    client_body_buffer_size         256k;
+    client_max_body_size            256m;
+    large_client_header_buffers     4   8k;
+    send_timeout                    30;
+    keepalive_timeout               60 60;
+    reset_timedout_connection       on;
+    server_tokens                   off;
+    server_name_in_redirect         off;
+    server_names_hash_max_size      512;
+    server_names_hash_bucket_size   512;
+
+
+    # Log format
+    log_format  main    '$remote_addr - $remote_user [$time_local] $request '
+                        '"$status" $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  bytes   '$body_bytes_sent';
+    #access_log          /var/log/nginx/access.log main;
+    access_log off;
+
+
+    # Mime settings
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+
+    # Compression
+    gzip                on;
+    gzip_comp_level     9;
+    gzip_min_length     512;
+    gzip_buffers        8 64k;
+    gzip_types          text/plain text/css text/javascript text/js text/xml application/json application/javascript application/x-javascript application/xml application/xml+rss application/x-font-ttf image/svg+xml font/opentype;
+    gzip_proxied        any;
+    gzip_disable        "MSIE [1-6]\.";
+
+    # Proxy settings
+    proxy_redirect      off;
+    proxy_set_header    Host            $host;
+    proxy_set_header    X-Real-IP       $remote_addr;
+    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass_header   Set-Cookie;
+    proxy_connect_timeout   900;
+    proxy_send_timeout  900;
+    proxy_read_timeout  900;
+    proxy_buffer_size   128k;
+    proxy_buffers   4 256k;
+    proxy_busy_buffers_size   256k;
+
+
+    # Cloudflare https://www.cloudflare.com/ips
+    set_real_ip_from 173.245.48.0/20;
+    set_real_ip_from 103.21.244.0/22;
+    set_real_ip_from 103.22.200.0/22;
+    set_real_ip_from 103.31.4.0/22;
+    set_real_ip_from 104.16.0.0/13;
+    set_real_ip_from 104.24.0.0/14;
+    set_real_ip_from 141.101.64.0/18;
+    set_real_ip_from 108.162.192.0/18;
+    set_real_ip_from 190.93.240.0/20;
+    set_real_ip_from 188.114.96.0/20;
+    set_real_ip_from 197.234.240.0/22;
+    set_real_ip_from 198.41.128.0/17;
+    set_real_ip_from 162.158.0.0/15;
+    set_real_ip_from 172.64.0.0/13;
+    set_real_ip_from 131.0.72.0/22;
+    set_real_ip_from 2400:cb00::/32;
+    set_real_ip_from 2606:4700::/32;
+    set_real_ip_from 2803:f800::/32;
+    set_real_ip_from 2405:b500::/32;
+    set_real_ip_from 2405:8100::/32;
+    set_real_ip_from 2a06:98c0::/29;
+    set_real_ip_from 2c0f:f248::/32;
+    real_ip_header     CF-Connecting-IP;
+
+
+    # SSL PCI Compliance
+    ssl_session_cache   shared:SSL:10m;
+    ssl_protocols       TLSv1.1 TLSv1.2 TLSv1.3;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers        "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
+
+
+    # Error pages
+    error_page          403          /error/403.html;
+    error_page          404          /error/404.html;
+    error_page          502 503 504  /error/50x.html;
+
+
+    # Cache settings
+    proxy_cache_path /var/cache/nginx levels=2 keys_zone=cache:10m inactive=60m max_size=1024m;
+    proxy_cache_key "$host$request_uri $cookie_user";
+    proxy_temp_path  /var/cache/nginx/temp;
+    proxy_ignore_headers Expires Cache-Control;
+    proxy_cache_use_stale error timeout invalid_header http_502;
+    proxy_cache_valid any 1d;
+
+
+    # Cache bypass
+    map $http_cookie $no_cache {
+        default 0;
+        ~SESS 1;
+        ~wordpress_logged_in 1;
+    }
+
+
+    # File cache settings
+    open_file_cache          max=10000 inactive=30s;
+    open_file_cache_valid    60s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors   off;
+
+
+    # Wildcard include
+    include             /etc/nginx/conf.d/*.conf;
+}
diff --git a/install/debian/13/nginx/phpmyadmin.inc b/install/debian/13/nginx/phpmyadmin.inc
new file mode 100644
index 00000000..cdfc93c4
--- /dev/null
+++ b/install/debian/13/nginx/phpmyadmin.inc
@@ -0,0 +1,18 @@
+location /phpmyadmin {
+    alias /usr/share/phpmyadmin;
+
+    location ~ /(libraries|setup) {
+        return 404;
+    }
+
+    location ~ ^/phpmyadmin/(.*\.php)$ {
+        alias /usr/share/phpmyadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+    location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
+        root /usr/share/;
+    }
+}
diff --git a/install/debian/13/nginx/phppgadmin.inc b/install/debian/13/nginx/phppgadmin.inc
new file mode 100644
index 00000000..47cfcf4e
--- /dev/null
+++ b/install/debian/13/nginx/phppgadmin.inc
@@ -0,0 +1,11 @@
+location /phppgadmin {
+    alias /usr/share/phppgadmin;
+
+    location ~ ^/phppgadmin/(.*\.php)$ {
+        alias /usr/share/phppgadmin/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/debian/13/nginx/status.conf b/install/debian/13/nginx/status.conf
new file mode 100644
index 00000000..c0bcd069
--- /dev/null
+++ b/install/debian/13/nginx/status.conf
@@ -0,0 +1,9 @@
+server {
+    listen       127.0.0.1:8084 default;
+    server_name  _;
+    server_name_in_redirect  off;
+    location / {
+        stub_status on;
+        access_log   off;
+   }
+}
diff --git a/install/debian/13/nginx/webmail.inc b/install/debian/13/nginx/webmail.inc
new file mode 100644
index 00000000..768c9049
--- /dev/null
+++ b/install/debian/13/nginx/webmail.inc
@@ -0,0 +1,15 @@
+location /webmail {
+    alias /var/lib/roundcube;
+
+    location ~ /(config|temp|logs) {
+        return 404;
+    }
+
+    location ~ ^/webmail/(.*\.php)$ {
+        alias /var/lib/roundcube/$1;
+        fastcgi_pass 127.0.0.1:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+    }
+}
diff --git a/install/debian/13/packages/default.pkg b/install/debian/13/packages/default.pkg
new file mode 100644
index 00000000..cd1cbba1
--- /dev/null
+++ b/install/debian/13/packages/default.pkg
@@ -0,0 +1,18 @@
+WEB_TEMPLATE='PHP-FPM-82'
+PROXY_TEMPLATE='hosting'
+DNS_TEMPLATE='default'
+WEB_DOMAINS='unlimited'
+WEB_ALIASES='unlimited'
+DNS_DOMAINS='unlimited'
+DNS_RECORDS='unlimited'
+MAIL_DOMAINS='unlimited'
+MAIL_ACCOUNTS='unlimited'
+DATABASES='unlimited'
+CRON_JOBS='unlimited'
+DISK_QUOTA='unlimited'
+BANDWIDTH='unlimited'
+NS='YOURHOSTNAME1,YOURHOSTNAME2'
+SHELL='nologin'
+BACKUPS='2'
+TIME='18:00:00'
+DATE='2017-12-28'
diff --git a/install/debian/13/pga/config.inc.php b/install/debian/13/pga/config.inc.php
new file mode 100644
index 00000000..1eec9776
--- /dev/null
+++ b/install/debian/13/pga/config.inc.php
@@ -0,0 +1,159 @@
+<?php
+
+    /**
+     * Central phpPgAdmin configuration.  As a user you may modify the
+     * settings here for your particular configuration.
+     *
+     * $Id: config.inc.php-dist,v 1.55 2008/02/18 21:10:31 xzilla Exp $
+     */
+
+    // An example server.  Create as many of these as you wish,
+    // indexed from zero upwards.
+
+    // Display name for the server on the login screen
+    $conf['servers'][0]['desc'] = 'PostgreSQL';
+
+    // Hostname or IP address for server.  Use '' for UNIX domain socket.
+    // use 'localhost' for TCP/IP connection on this computer
+    $conf['servers'][0]['host'] = 'localhost';
+
+    // Database port on server (5432 is the PostgreSQL default)
+    $conf['servers'][0]['port'] = 5432;
+
+    // Database SSL mode
+    // Possible options: disable, allow, prefer, require
+    // To require SSL on older servers use option: legacy
+    // To ignore the SSL mode, use option: unspecified
+    $conf['servers'][0]['sslmode'] = 'allow';
+
+    // Change the default database only if you cannot connect to template1.
+    // For a PostgreSQL 8.1+ server, you can set this to 'postgres'.
+    $conf['servers'][0]['defaultdb'] = 'template1';
+
+    // Specify the path to the database dump utilities for this server.
+    // You can set these to '' if no dumper is available.
+    $conf['servers'][0]['pg_dump_path'] = '/usr/bin/pg_dump';
+    $conf['servers'][0]['pg_dumpall_path'] = '/usr/bin/pg_dumpall';
+
+    // Slony (www.slony.info) support?
+    $conf['servers'][0]['slony_support'] = false;
+    // Specify the path to the Slony SQL scripts (where slony1_base.sql is located, etc.)
+    // No trailing slash.
+    $conf['servers'][0]['slony_sql'] = '/usr/share/pgsql';
+
+    // Example for a second server (PostgreSQL for Windows)
+    //$conf['servers'][1]['desc'] = 'Test Server';
+    //$conf['servers'][1]['host'] = '127.0.0.1';
+    //$conf['servers'][1]['port'] = 5432;
+    //$conf['servers'][1]['sslmode'] = 'allow';
+    //$conf['servers'][1]['defaultdb'] = 'template1';
+    //$conf['servers'][1]['pg_dump_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dump.exe';
+    //$conf['servers'][1]['pg_dumpall_path'] = 'C:\\Program Files\\PostgreSQL\\8.0\\bin\\pg_dumpall.exe';
+    //$conf['servers'][1]['slony_support'] = false;
+    //$conf['servers'][1]['slony_sql'] = 'C:\\Program Files\\PostgreSQL\\8.0\\share';
+
+
+    // Example of groups definition.
+    // Groups allow administrators to logicaly group servers together under group nodes in the left browser tree
+    //
+    // The group '0' description
+    //$conf['srv_groups'][0]['desc'] = 'group one';
+    //
+    // Add here servers indexes belonging to the group '0' seperated by comma
+    //$conf['srv_groups'][0]['servers'] = '0,1,2'; 
+    //
+    // A server can belong to multi groups
+    //$conf['srv_groups'][1]['desc'] = 'group two';
+    //$conf['srv_groups'][1]['servers'] = '3,1';
+
+
+    // Default language. E.g.: 'english', 'polish', etc.  See lang/ directory
+    // for all possibilities. If you specify 'auto' (the default) it will use 
+    // your browser preference.
+    $conf['default_lang'] = 'auto';
+
+    // AutoComplete uses AJAX interaction to list foreign key values 
+    // on insert fields. It currently only works on single column 
+    // foreign keys. You can choose one of the following values:
+    // 'default on' enables AutoComplete and turns it on by default.
+    // 'default off' enables AutoComplete but turns it off by default.
+    // 'disable' disables AutoComplete.
+    $conf['autocomplete'] = 'default on';
+
+    // If extra login security is true, then logins via phpPgAdmin with no
+    // password or certain usernames (pgsql, postgres, root, administrator)
+    // will be denied. Only set this false once you have read the FAQ and
+    // understand how to change PostgreSQL's pg_hba.conf to enable
+    // passworded local connections.
+    $conf['extra_login_security'] = true;
+
+    // Only show owned databases?
+    // Note: This will simply hide other databases in the list - this does
+    // not in any way prevent your users from seeing other database by
+    // other means. (e.g. Run 'SELECT * FROM pg_database' in the SQL area.)
+    $conf['owned_only'] = false;
+
+    // Display comments on objects?  Comments are a good way of documenting
+    // a database, but they do take up space in the interface.
+    $conf['show_comments'] = true;
+
+    // Display "advanced" objects? Setting this to true will show 
+    // aggregates, types, operators, operator classes, conversions, 
+    // languages and casts in phpPgAdmin. These objects are rarely 
+    // administered and can clutter the interface.
+    $conf['show_advanced'] = false;
+
+    // Display "system" objects?
+    $conf['show_system'] = false;
+
+    // Display reports feature?  For this feature to work, you must
+    // install the reports database as explained in the INSTALL file.
+    $conf['show_reports'] = true;
+
+    // Database and table for reports
+    $conf['reports_db'] = 'phppgadmin';
+    $conf['reports_schema'] = 'public';
+    $conf['reports_table'] = 'ppa_reports';
+
+    // Only show owned reports?
+    // Note: This does not prevent people from accessing other reports by
+    // other means.
+    $conf['owned_reports_only'] = false;
+
+    // Minimum length users can set their password to.
+    $conf['min_password_length'] = 1;
+
+    // Width of the left frame in pixels (object browser)
+    $conf['left_width'] = 200;
+
+    // Which look & feel theme to use
+    $conf['theme'] = 'default';
+
+    // Show OIDs when browsing tables?
+    $conf['show_oids'] = false;
+
+    // Max rows to show on a page when browsing record sets
+    $conf['max_rows'] = 30;
+
+    // Max chars of each field to display by default in browse mode
+    $conf['max_chars'] = 50;
+
+    // Send XHTML strict headers?
+    $conf['use_xhtml_strict'] = false;
+
+    // Base URL for PostgreSQL documentation.
+    // '%s', if present, will be replaced with the PostgreSQL version
+    // (e.g. 8.4 )
+    $conf['help_base'] = 'http://www.postgresql.org/docs/%s/interactive/';
+
+    // Configuration for ajax scripts
+    // Time in seconds. If set to 0, refreshing data using ajax will be disabled (locks and activity pages)
+    $conf['ajax_refresh'] = 3;
+
+    /*****************************************
+     * Don't modify anything below this line *
+     *****************************************/
+
+    $conf['version'] = 19;
+
+?>
diff --git a/install/debian/13/pga/phppgadmin.conf b/install/debian/13/pga/phppgadmin.conf
new file mode 100644
index 00000000..f39247d6
--- /dev/null
+++ b/install/debian/13/pga/phppgadmin.conf
@@ -0,0 +1,31 @@
+Alias /phppgadmin /usr/share/phppgadmin
+
+<Directory /usr/share/phppgadmin>
+
+DirectoryIndex index.php
+AllowOverride None
+
+order deny,allow
+deny from all
+allow from 127.0.0.0/255.0.0.0 ::1/128
+allow from all
+
+<IfModule mod_php5.c>
+  php_flag magic_quotes_gpc Off
+  php_flag track_vars On
+  php_value include_path .
+</IfModule>
+<IfModule !mod_php5.c>
+  <IfModule mod_actions.c>
+    <IfModule mod_cgi.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+    <IfModule mod_cgid.c>
+      AddType application/x-httpd-php .php
+      Action application/x-httpd-php /cgi-bin/php
+    </IfModule>
+  </IfModule>
+</IfModule>
+
+</Directory>
diff --git a/install/debian/13/php-fpm/www.conf b/install/debian/13/php-fpm/www.conf
new file mode 100644
index 00000000..3c87f33c
--- /dev/null
+++ b/install/debian/13/php-fpm/www.conf
@@ -0,0 +1,11 @@
+[www]
+listen = 127.0.0.1:9000
+listen.allowed_clients = 127.0.0.1
+
+user = www-data
+group = www-data
+
+pm = ondemand
+pm.max_children = 2
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
diff --git a/install/debian/13/php/php7.3-dedi.patch b/install/debian/13/php/php7.3-dedi.patch
new file mode 100644
index 00000000..c044e002
--- /dev/null
+++ b/install/debian/13/php/php7.3-dedi.patch
@@ -0,0 +1,78 @@
+--- /etc/php/7.3/fpm/php.ini.orig	2019-07-18 16:11:18.856589963 +0200
++++ /etc/php/7.3/fpm/php.ini	2019-07-18 17:45:51.000000000 +0200
+@@ -312,7 +312,8 @@
+ ; This directive allows you to disable certain functions for security reasons.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes for security reasons.
+ ; It receives a comma-delimited list of class names.
+@@ -399,11 +400,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume (128MB)
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -690,7 +691,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -842,7 +843,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1087,7 +1088,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1791,20 +1792,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=2048
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5
diff --git a/install/debian/13/php/php7.3-vps.patch b/install/debian/13/php/php7.3-vps.patch
new file mode 100644
index 00000000..803b93e8
--- /dev/null
+++ b/install/debian/13/php/php7.3-vps.patch
@@ -0,0 +1,78 @@
+--- /etc/php/7.3/fpm/php.ini.orig	2019-07-18 16:11:18.856589963 +0200
++++ /etc/php/7.3/fpm/php.ini	2019-07-18 17:45:51.000000000 +0200
+@@ -312,7 +312,8 @@
+ ; This directive allows you to disable certain functions for security reasons.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes for security reasons.
+ ; It receives a comma-delimited list of class names.
+@@ -399,11 +400,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume (128MB)
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -690,7 +691,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -842,7 +843,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1087,7 +1088,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1791,20 +1792,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=512
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5
diff --git a/install/debian/13/php/php7.4-dedi.patch b/install/debian/13/php/php7.4-dedi.patch
new file mode 100644
index 00000000..3e5bd2fb
--- /dev/null
+++ b/install/debian/13/php/php7.4-dedi.patch
@@ -0,0 +1,78 @@
+--- /etc/php/7.4/fpm/php.ini.orig	2021-07-16 16:12:30.027464762 +0200
++++ /etc/php/7.4/fpm/php.ini	2021-07-16 16:25:15.000000000 +0200
+@@ -309,7 +309,8 @@
+ ; This directive allows you to disable certain functions.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes.
+ ; It receives a comma-delimited list of class names.
+@@ -402,11 +403,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -691,7 +692,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -843,7 +844,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1089,7 +1090,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1766,20 +1767,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=2048
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5
diff --git a/install/debian/13/php/php7.4-vps.patch b/install/debian/13/php/php7.4-vps.patch
new file mode 100644
index 00000000..7c52d402
--- /dev/null
+++ b/install/debian/13/php/php7.4-vps.patch
@@ -0,0 +1,78 @@
+--- /etc/php/7.4/fpm/php.ini.orig	2021-07-16 16:12:30.027464762 +0200
++++ /etc/php/7.4/fpm/php.ini	2021-07-16 16:24:26.000000000 +0200
+@@ -309,7 +309,8 @@
+ ; This directive allows you to disable certain functions.
+ ; It receives a comma-delimited list of function names.
+ ; http://php.net/disable-functions
+-disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++; disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
++disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,exec,system,passthru,shell_exec,proc_open,popen
+ 
+ ; This directive allows you to disable certain classes.
+ ; It receives a comma-delimited list of class names.
+@@ -402,11 +403,11 @@
+ ;max_input_nesting_level = 64
+ 
+ ; How many GET/POST/COOKIE input variables may be accepted
+-;max_input_vars = 1000
++max_input_vars = 6000
+ 
+ ; Maximum amount of memory a script may consume
+ ; http://php.net/memory-limit
+-memory_limit = 128M
++memory_limit = 256M
+ 
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ; Error handling and logging ;
+@@ -691,7 +692,7 @@
+ ; Its value may be 0 to disable the limit. It is ignored if POST data reading
+ ; is disabled through enable_post_data_reading.
+ ; http://php.net/post-max-size
+-post_max_size = 8M
++post_max_size = 60M
+ 
+ ; Automatically add files before PHP document.
+ ; http://php.net/auto-prepend-file
+@@ -843,7 +844,7 @@
+ 
+ ; Maximum allowed size for uploaded files.
+ ; http://php.net/upload-max-filesize
+-upload_max_filesize = 2M
++upload_max_filesize = 50M
+ 
+ ; Maximum number of files that can be uploaded via a single request
+ max_file_uploads = 20
+@@ -1089,7 +1090,7 @@
+ 
+ ; The path to a log file that will log all mail() calls. Log entries include
+ ; the full path of the script, line number, To address and headers.
+-;mail.log =
++mail.log = /var/log/php-mail.log
+ ; Log mail to syslog (Event Log on Windows).
+ ;mail.log = syslog
+ 
+@@ -1766,20 +1767,20 @@
+ 
+ [opcache]
+ ; Determines if Zend OPCache is enabled
+-;opcache.enable=1
++opcache.enable=1
+ 
+ ; Determines if Zend OPCache is enabled for the CLI version of PHP
+-;opcache.enable_cli=0
++opcache.enable_cli=0
+ 
+ ; The OPcache shared memory storage size.
+-;opcache.memory_consumption=128
++opcache.memory_consumption=512
+ 
+ ; The amount of memory for interned strings in Mbytes.
+ ;opcache.interned_strings_buffer=8
+ 
+ ; The maximum number of keys (scripts) in the OPcache hash table.
+ ; Only numbers between 200 and 1000000 are allowed.
+-;opcache.max_accelerated_files=10000
++opcache.max_accelerated_files=100000
+ 
+ ; The maximum percentage of "wasted" memory until a restart is scheduled.
+ ;opcache.max_wasted_percentage=5
diff --git a/install/debian/13/pma/apache.conf b/install/debian/13/pma/apache.conf
new file mode 100644
index 00000000..2a8f69e2
--- /dev/null
+++ b/install/debian/13/pma/apache.conf
@@ -0,0 +1,42 @@
+# phpMyAdmin default Apache configuration
+
+Alias /phpmyadmin /usr/share/phpmyadmin
+
+<Directory /usr/share/phpmyadmin>
+	Options FollowSymLinks
+	DirectoryIndex index.php
+
+	<IfModule mod_php5.c>
+		AddType application/x-httpd-php .php
+
+		php_flag magic_quotes_gpc Off
+		php_flag track_vars On
+		php_flag register_globals Off
+		php_admin_flag allow_url_fopen Off
+		php_value include_path .
+		php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp
+		php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/:/usr/share/php/php-gettext
+	</IfModule>
+
+</Directory>
+
+# Authorize for setup
+<Directory /usr/share/phpmyadmin/setup>
+    <IfModule mod_authn_file.c>
+    AuthType Basic
+    AuthName "phpMyAdmin Setup"
+    AuthUserFile /etc/phpmyadmin/htpasswd.setup
+    </IfModule>
+    Require valid-user
+</Directory>
+
+# Disallow web access to directories that don't need it
+<Directory /usr/share/phpmyadmin/libraries>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+<Directory /usr/share/phpmyadmin/setup/lib>
+    Order Deny,Allow
+    Deny from All
+</Directory>
+
diff --git a/install/debian/13/pma/config.inc.php b/install/debian/13/pma/config.inc.php
new file mode 100644
index 00000000..eafc6d67
--- /dev/null
+++ b/install/debian/13/pma/config.inc.php
@@ -0,0 +1,146 @@
+<?php
+/**
+ * Debian local configuration file
+ *
+ * This file overrides the settings made by phpMyAdmin interactive setup
+ * utility.
+ *
+ * For example configuration see
+ *   /usr/share/doc/phpmyadmin/examples/config.sample.inc.php
+ * or
+ *   /usr/share/doc/phpmyadmin/examples/config.manyhosts.inc.php
+ *
+ * NOTE: do not add security sensitive data to this file (like passwords)
+ * unless you really know what you're doing. If you do, any user that can
+ * run PHP or CGI on your webserver will be able to read them. If you still
+ * want to do this, make sure to properly secure the access to this file
+ * (also on the filesystem level).
+ */
+
+function check_file_access($path)
+{
+    if (is_readable($path)) {
+        return true;
+    } else {
+        error_log(
+            'phpmyadmin: Failed to load ' . $path
+            . ' Check group www-data has read access and open_basedir restrictions.'
+        );
+        return false;
+    }
+}
+
+// Load secret generated on postinst
+if (check_file_access('/var/lib/phpmyadmin/blowfish_secret.inc.php')) {
+    require('/var/lib/phpmyadmin/blowfish_secret.inc.php');
+}
+
+// Load autoconf local config
+if (check_file_access('/var/lib/phpmyadmin/config.inc.php')) {
+    require('/var/lib/phpmyadmin/config.inc.php');
+}
+
+/**
+ * Server(s) configuration
+ */
+$i = 0;
+// The $cfg['Servers'] array starts with $cfg['Servers'][1].  Do not use $cfg['Servers'][0].
+// You can disable a server config entry by setting host to ''.
+$i++;
+
+/**
+ * Read configuration from dbconfig-common
+ * You can regenerate it using: dpkg-reconfigure -plow phpmyadmin
+ */
+if (check_file_access('/etc/phpmyadmin/config-db.php')) {
+    require('/etc/phpmyadmin/config-db.php');
+}
+
+/* Configure according to dbconfig-common if enabled */
+if (!empty($dbname)) {
+    /* Authentication type */
+    $cfg['Servers'][$i]['auth_type'] = 'cookie';
+    /* Server parameters */
+    if (empty($dbserver)) $dbserver = 'localhost';
+    $cfg['Servers'][$i]['host'] = $dbserver;
+
+    if (!empty($dbport) || $dbserver != 'localhost') {
+        $cfg['Servers'][$i]['connect_type'] = 'tcp';
+        $cfg['Servers'][$i]['port'] = $dbport;
+    }
+    //$cfg['Servers'][$i]['compress'] = false;
+    /* Select mysqli if your server has it */
+    $cfg['Servers'][$i]['extension'] = 'mysqli';
+    /* Optional: User for advanced features */
+    $cfg['Servers'][$i]['controluser'] = $dbuser;
+    $cfg['Servers'][$i]['controlpass'] = $dbpass;
+    /* Optional: Advanced phpMyAdmin features */
+    $cfg['Servers'][$i]['pmadb'] = $dbname;
+    $cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
+    $cfg['Servers'][$i]['relation'] = 'pma__relation';
+    $cfg['Servers'][$i]['table_info'] = 'pma__table_info';
+    $cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
+    $cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
+    $cfg['Servers'][$i]['column_info'] = 'pma__column_info';
+    $cfg['Servers'][$i]['history'] = 'pma__history';
+    $cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
+    $cfg['Servers'][$i]['designer_coords'] = 'pma__designer_coords';
+    $cfg['Servers'][$i]['tracking'] = 'pma__tracking';
+    $cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
+    $cfg['Servers'][$i]['recent'] = 'pma__recent';
+
+    /* Uncomment the following to enable logging in to passwordless accounts,
+     * after taking note of the associated security risks. */
+    // $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+    /* Advance to next server for rest of config */
+    $i++;
+}
+
+/* Authentication type */
+//$cfg['Servers'][$i]['auth_type'] = 'cookie';
+/* Server parameters */
+//$cfg['Servers'][$i]['host'] = 'localhost';
+//$cfg['Servers'][$i]['connect_type'] = 'tcp';
+//$cfg['Servers'][$i]['compress'] = false;
+/* Select mysqli if your server has it */
+//$cfg['Servers'][$i]['extension'] = 'mysql';
+/* Optional: User for advanced features */
+// $cfg['Servers'][$i]['controluser'] = 'pma';
+// $cfg['Servers'][$i]['controlpass'] = 'pmapass';
+
+/* Storage database and tables */
+// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
+// $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
+// $cfg['Servers'][$i]['relation'] = 'pma_relation';
+// $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
+// $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
+// $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
+// $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
+// $cfg['Servers'][$i]['history'] = 'pma_history';
+// $cfg['Servers'][$i]['table_uiprefs'] = 'pma_table_uiprefs';
+// $cfg['Servers'][$i]['tracking'] = 'pma_tracking';
+// $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
+// $cfg['Servers'][$i]['userconfig'] = 'pma_userconfig';
+// $cfg['Servers'][$i]['recent'] = 'pma_recent';
+/* Uncomment the following to enable logging in to passwordless accounts,
+ * after taking note of the associated security risks. */
+// $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
+
+/*
+ * End of servers configuration
+ */
+
+/*
+ * Directories for saving/loading files from server
+ */
+$cfg['UploadDir'] = '';
+$cfg['SaveDir'] = '';
+
+/* Support additional configurations */
+foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename)
+{
+    include($filename);
+}
+
+
diff --git a/install/debian/13/pma/create_tables.sql b/install/debian/13/pma/create_tables.sql
new file mode 100644
index 00000000..3583a6ed
--- /dev/null
+++ b/install/debian/13/pma/create_tables.sql
@@ -0,0 +1,385 @@
+-- --------------------------------------------------------
+-- SQL Commands to set up the pmadb as described in the documentation.
+--
+-- This file is meant for use with MySQL 5 and above!
+--
+-- This script expects the user pma to already be existing. If we would put a
+-- line here to create him too many users might just use this script and end
+-- up with having the same password for the controluser.
+--
+-- This user "pma" must be defined in config.inc.php (controluser/controlpass)
+--
+-- Please don't forget to set up the tablenames in config.inc.php
+--
+
+-- --------------------------------------------------------
+
+--
+-- Database : `phpmyadmin`
+--
+CREATE DATABASE IF NOT EXISTS `phpmyadmin`
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+USE phpmyadmin;
+
+-- --------------------------------------------------------
+
+--
+-- Privileges
+--
+-- (activate this statement if necessary)
+-- GRANT SELECT, INSERT, DELETE, UPDATE, ALTER ON `phpmyadmin`.* TO
+--    'pma'@localhost;
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__usergroups`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__usergroups` (
+  `usergroup` varchar(64) NOT NULL,
+  `tab` varchar(64) NOT NULL,
+  `allowed` enum('Y','N') NOT NULL DEFAULT 'N',
+  PRIMARY KEY (`usergroup`,`tab`,`allowed`)
+)
+  COMMENT='User groups with configured menu items'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__designer_coords`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__designer_coords` (
+  `db_name` varchar(64) COLLATE utf8_bin NOT NULL DEFAULT '',
+  `table_name` varchar(64) COLLATE utf8_bin NOT NULL DEFAULT '',
+  `x` int(11) DEFAULT NULL,
+  `y` int(11) DEFAULT NULL,
+  `v` tinyint(4) DEFAULT NULL,
+  `h` tinyint(4) DEFAULT NULL,
+  PRIMARY KEY (`db_name`,`table_name`)
+) ENGINE=MyISAM DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='Table coordinates for Designer';
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__bookmark`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__bookmark` (
+  `id` int(11) NOT NULL auto_increment,
+  `dbase` varchar(255) NOT NULL default '',
+  `user` varchar(255) NOT NULL default '',
+  `label` varchar(255) COLLATE utf8_general_ci NOT NULL default '',
+  `query` text NOT NULL,
+  PRIMARY KEY  (`id`)
+)
+  COMMENT='Bookmarks'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__column_info`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__column_info` (
+  `id` int(5) unsigned NOT NULL auto_increment,
+  `db_name` varchar(64) NOT NULL default '',
+  `table_name` varchar(64) NOT NULL default '',
+  `column_name` varchar(64) NOT NULL default '',
+  `comment` varchar(255) COLLATE utf8_general_ci NOT NULL default '',
+  `mimetype` varchar(255) COLLATE utf8_general_ci NOT NULL default '',
+  `transformation` varchar(255) NOT NULL default '',
+  `transformation_options` varchar(255) NOT NULL default '',
+  `input_transformation` varchar(255) NOT NULL default '',
+  `input_transformation_options` varchar(255) NOT NULL default '',
+  PRIMARY KEY  (`id`),
+  UNIQUE KEY `db_name` (`db_name`,`table_name`,`column_name`)
+)
+  COMMENT='Column information for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__history`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__history` (
+  `id` bigint(20) unsigned NOT NULL auto_increment,
+  `username` varchar(64) NOT NULL default '',
+  `db` varchar(64) NOT NULL default '',
+  `table` varchar(64) NOT NULL default '',
+  `timevalue` timestamp NOT NULL default CURRENT_TIMESTAMP,
+  `sqlquery` text NOT NULL,
+  PRIMARY KEY  (`id`),
+  KEY `username` (`username`,`db`,`table`,`timevalue`)
+)
+  COMMENT='SQL history for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__pdf_pages`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__pdf_pages` (
+  `db_name` varchar(64) NOT NULL default '',
+  `page_nr` int(10) unsigned NOT NULL auto_increment,
+  `page_descr` varchar(50) COLLATE utf8_general_ci NOT NULL default '',
+  PRIMARY KEY  (`page_nr`),
+  KEY `db_name` (`db_name`)
+)
+  COMMENT='PDF relation pages for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__recent`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__recent` (
+  `username` varchar(64) NOT NULL,
+  `tables` text NOT NULL,
+  PRIMARY KEY (`username`)
+)
+  COMMENT='Recently accessed tables'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__favorite`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__favorite` (
+  `username` varchar(64) NOT NULL,
+  `tables` text NOT NULL,
+  PRIMARY KEY (`username`)
+)
+  COMMENT='Favorite tables'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__table_uiprefs`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__table_uiprefs` (
+  `username` varchar(64) NOT NULL,
+  `db_name` varchar(64) NOT NULL,
+  `table_name` varchar(64) NOT NULL,
+  `prefs` text NOT NULL,
+  `last_update` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  PRIMARY KEY (`username`,`db_name`,`table_name`)
+)
+  COMMENT='Tables'' UI preferences'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__relation`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__relation` (
+  `master_db` varchar(64) NOT NULL default '',
+  `master_table` varchar(64) NOT NULL default '',
+  `master_field` varchar(64) NOT NULL default '',
+  `foreign_db` varchar(64) NOT NULL default '',
+  `foreign_table` varchar(64) NOT NULL default '',
+  `foreign_field` varchar(64) NOT NULL default '',
+  PRIMARY KEY  (`master_db`,`master_table`,`master_field`),
+  KEY `foreign_field` (`foreign_db`,`foreign_table`)
+)
+  COMMENT='Relation table'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__table_coords`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__table_coords` (
+  `db_name` varchar(64) NOT NULL default '',
+  `table_name` varchar(64) NOT NULL default '',
+  `pdf_page_number` int(11) NOT NULL default '0',
+  `x` float unsigned NOT NULL default '0',
+  `y` float unsigned NOT NULL default '0',
+  PRIMARY KEY  (`db_name`,`table_name`,`pdf_page_number`)
+)
+  COMMENT='Table coordinates for phpMyAdmin PDF output'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__table_info`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__table_info` (
+  `db_name` varchar(64) NOT NULL default '',
+  `table_name` varchar(64) NOT NULL default '',
+  `display_field` varchar(64) NOT NULL default '',
+  PRIMARY KEY  (`db_name`,`table_name`)
+)
+  COMMENT='Table information for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__tracking`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__tracking` (
+  `db_name` varchar(64) NOT NULL,
+  `table_name` varchar(64) NOT NULL,
+  `version` int(10) unsigned NOT NULL,
+  `date_created` datetime NOT NULL,
+  `date_updated` datetime NOT NULL,
+  `schema_snapshot` text NOT NULL,
+  `schema_sql` text,
+  `data_sql` longtext,
+  `tracking` set('UPDATE','REPLACE','INSERT','DELETE','TRUNCATE','CREATE DATABASE','ALTER DATABASE','DROP DATABASE','CREATE TABLE','ALTER TABLE','RENAME TABLE','DROP TABLE','CREATE INDEX','DROP INDEX','CREATE VIEW','ALTER VIEW','DROP VIEW') default NULL,
+  `tracking_active` int(1) unsigned NOT NULL default '1',
+  PRIMARY KEY  (`db_name`,`table_name`,`version`)
+)
+  COMMENT='Database changes tracking for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__userconfig`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__userconfig` (
+  `username` varchar(64) NOT NULL,
+  `timevalue` timestamp NOT NULL default CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  `config_data` text NOT NULL,
+  PRIMARY KEY  (`username`)
+)
+  COMMENT='User preferences storage for phpMyAdmin'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__users`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__users` (
+  `username` varchar(64) NOT NULL,
+  `usergroup` varchar(64) NOT NULL,
+  PRIMARY KEY (`username`,`usergroup`)
+)
+  COMMENT='Users and their assignments to user groups'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__usergroups`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__usergroups` (
+  `usergroup` varchar(64) NOT NULL,
+  `tab` varchar(64) NOT NULL,
+  `allowed` enum('Y','N') NOT NULL DEFAULT 'N',
+  PRIMARY KEY (`usergroup`,`tab`,`allowed`)
+)
+  COMMENT='User groups with configured menu items'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__navigationhiding`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__navigationhiding` (
+  `username` varchar(64) NOT NULL,
+  `item_name` varchar(64) NOT NULL,
+  `item_type` varchar(64) NOT NULL,
+  `db_name` varchar(64) NOT NULL,
+  `table_name` varchar(64) NOT NULL,
+  PRIMARY KEY (`username`,`item_name`,`item_type`,`db_name`,`table_name`)
+)
+  COMMENT='Hidden items of navigation tree'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__savedsearches`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__savedsearches` (
+  `id` int(5) unsigned NOT NULL auto_increment,
+  `username` varchar(64) NOT NULL default '',
+  `db_name` varchar(64) NOT NULL default '',
+  `search_name` varchar(64) NOT NULL default '',
+  `search_data` text NOT NULL,
+  PRIMARY KEY  (`id`),
+  UNIQUE KEY `u_savedsearches_username_dbname` (`username`,`db_name`,`search_name`)
+)
+  COMMENT='Saved searches'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__central_columns`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__central_columns` (
+  `db_name` varchar(64) NOT NULL,
+  `col_name` varchar(64) NOT NULL,
+  `col_type` varchar(64) NOT NULL,
+  `col_length` text,
+  `col_collation` varchar(64) NOT NULL,
+  `col_isNull` boolean NOT NULL,
+  `col_extra` varchar(255) default '',
+  `col_default` text,
+  PRIMARY KEY (`db_name`,`col_name`)
+)
+  COMMENT='Central list of columns'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__designer_settings`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__designer_settings` (
+  `username` varchar(64) NOT NULL,
+  `settings_data` text NOT NULL,
+  PRIMARY KEY (`username`)
+)
+  COMMENT='Settings related to Designer'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
+
+-- --------------------------------------------------------
+
+--
+-- Table structure for table `pma__export_templates`
+--
+
+CREATE TABLE IF NOT EXISTS `pma__export_templates` (
+  `id` int(5) unsigned NOT NULL AUTO_INCREMENT,
+  `username` varchar(64) NOT NULL,
+  `export_type` varchar(10) NOT NULL,
+  `template_name` varchar(64) NOT NULL,
+  `template_data` text NOT NULL,
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `u_user_type_template` (`username`,`export_type`,`template_name`)
+)
+  COMMENT='Saved export templates'
+  DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;
\ No newline at end of file
diff --git a/install/debian/13/pma/pma.sh b/install/debian/13/pma/pma.sh
new file mode 100644
index 00000000..f04f3f8e
--- /dev/null
+++ b/install/debian/13/pma/pma.sh
@@ -0,0 +1,167 @@
+#!/bin/bash
+# 
+# phpmyadmin-fixer
+#
+# Fixes for phpmyadmin (configuration storage and some extended features)
+#
+# Original Version by Pavel Galkin (https://skurudo.ru)
+# https://github.com/skurudo/phpmyadmin-fixer
+#
+# Changed some lines to fit to Hestia Configuration.
+#
+
+# Defining password-gen function
+gen_pass() {
+    MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
+    LENGTH=10
+    while [ ${n:=1} -le $LENGTH ]; do
+        PASS="$PASS${MATRIX:$(($RANDOM%${#MATRIX})):1}"
+        let n+=1
+    done
+    echo "$PASS"
+}
+
+PASS=$(gen_pass)
+
+#ubuntu phpmyadmin path
+pmapath1="/etc/phpmyadmin/config.inc.php"
+pmapath2="/usr/share/phpmyadmin/config.sample.inc.php"
+
+#delete old and paste new value 
+sed -i '/pmadb/d' $pmapath1
+sed -i '/controluser/d' $pmapath1
+sed -i '/bookmarktable/d' $pmapath1
+sed -i '/relation/d' $pmapath1
+sed -i '/userconfig/d' $pmapath1
+sed -i '/table_info/d' $pmapath1
+sed -i '/column_info/d' $pmapath1
+sed -i '/history/d' $pmapath1
+sed -i '/recent/d' $pmapath1
+sed -i '/table_uiprefs/d' $pmapath1
+sed -i '/tracking/d' $pmapath1
+sed -i '/table_coords/d' $pmapath1
+sed -i '/pdf_pages/d' $pmapath1
+sed -i '/designer_coords/d' $pmapath1
+sed -i '/controlpass/d' $pmapath1
+sed -i '/\$i = 1; /d' $pmapath1
+echo "\$i = 1;" >> $pmapath1
+sed -i '/savedsearches/d' $pmapath1
+sed -i '/navigationhiding/d' $pmapath1
+sed -i '/users/d' $pmapath1
+sed -i '/controlpass/d' $pmapath1
+sed -i '/favorite/d' $pmapath1
+sed -i '/usergroups/d' $pmapath1
+sed -i '/central_columns/d' $pmapath1
+sed -i '/designer_settings/d' $pmapath1
+sed -i '/export_templates/d' $pmapath1
+echo "\$cfg['Servers'][\$i]['favorite'] = 'pma__favorite';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['central_columns'] = 'pma__central_columns';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['designer_settings'] = 'pma__designer_settings';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['export_templates'] = 'pma__export_templates';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['savedsearches'] = 'pma__savedsearches';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['navigationhiding'] = 'pma__navigationhiding';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['users'] = 'pma__users';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['pmadb'] = 'phpmyadmin';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['controluser'] = 'pma';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['controlpass'] = '$PASS';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['bookmarktable'] = 'pma__bookmark';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['relation'] = 'pma__relation';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['userconfig'] = 'pma__userconfig';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['table_info'] = 'pma__table_info';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['column_info'] = 'pma__column_info';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['history'] = 'pma__history';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['recent'] = 'pma__recent';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['table_uiprefs'] = 'pma__table_uiprefs';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['tracking'] = 'pma__tracking';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['table_coords'] = 'pma__table_coords';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['pdf_pages'] = 'pma__pdf_pages';" >> $pmapath1
+echo "\$cfg['Servers'][\$i]['designer_coords'] = 'pma__designer_coords';" >> $pmapath1
+
+sed -i '/pmadb/d' $pmapath2
+sed -i '/controluser/d' $pmapath2
+sed -i '/bookmarktable/d' $pmapath2
+sed -i '/relation/d' $pmapath2
+sed -i '/userconfig/d' $pmapath2
+sed -i '/table_info/d' $pmapath2
+sed -i '/column_info/d' $pmapath2
+sed -i '/history/d' $pmapath2
+sed -i '/recent/d' $pmapath2
+sed -i '/table_uiprefs/d' $pmapath2
+sed -i '/tracking/d' $pmapath2
+sed -i '/table_coords/d' $pmapath2
+sed -i '/pdf_pages/d' $pmapath2
+sed -i '/designer_coords/d' $pmapath2
+sed -i '/controlpass/d' $pmapath2
+sed -i '/savedsearches/d' $pmapath2
+sed -i '/navigationhiding/d' $pmapath2
+sed -i '/users/d' $pmapath2
+sed -i '/controlpass/d' $pmapath2
+sed -i '/favorite/d' $pmapath2
+sed -i '/usergroups/d' $pmapath2
+sed -i '/central_columns/d' $pmapath2
+sed -i '/designer_settings/d' $pmapath2
+sed -i '/export_templates/d' $pmapath2
+echo "\$cfg['Servers'][\$i]['favorite'] = 'pma__favorite';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['central_columns'] = 'pma__central_columns';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['designer_settings'] = 'pma__designer_settings';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['export_templates'] = 'pma__export_templates';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['savedsearches'] = 'pma__savedsearches';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['navigationhiding'] = 'pma__navigationhiding';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['users'] = 'pma__users';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['usergroups'] = 'pma__usergroups';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['pmadb'] = 'phpmyadmin';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['controluser'] = 'pma';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['controlpass'] = '$PASS';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['bookmarktable'] = 'pma__bookmark';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['relation'] = 'pma__relation';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['userconfig'] = 'pma__userconfig';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['table_info'] = 'pma__table_info';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['column_info'] = 'pma__column_info';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['history'] = 'pma__history';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['recent'] = 'pma__recent';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['table_uiprefs'] = 'pma__table_uiprefs';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['tracking'] = 'pma__tracking';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['table_coords'] = 'pma__table_coords';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['pdf_pages'] = 'pma__pdf_pages';" >> $pmapath2
+echo "\$cfg['Servers'][\$i]['designer_coords'] = 'pma__designer_coords';" >> $pmapath2
+
+#SOME WORK with DATABASE (table / user)
+PMADB=phpmyadmin
+PMAUSER=pma
+
+#DROP USER and TABLE
+mysql -uroot <<MYSQL_PMA1
+DROP USER IF EXISTS '$PMAUSER'@'localhost';
+DROP DATABASE IF EXISTS $PMADB;
+FLUSH PRIVILEGES;
+MYSQL_PMA1
+
+#CREATE PMA USER
+mysql -uroot <<MYSQL_PMA2
+CREATE USER '$PMAUSER'@'localhost' IDENTIFIED BY '$PASS';
+CREATE DATABASE $PMADB;
+MYSQL_PMA2
+
+#GRANT PMA USE SOME RIGHTS
+if [ ! -f "/etc/apt/sources.list.d/mysql.list" ]; then
+# MariaDB
+mysql -uroot <<MYSQL_PMA3
+USE $PMADB;
+GRANT USAGE ON $PMADB.* TO '$PMAUSER'@'localhost' IDENTIFIED BY '$PASS';
+GRANT ALL PRIVILEGES ON $PMADB.* TO '$PMAUSER'@'localhost';
+FLUSH PRIVILEGES;
+MYSQL_PMA3
+else
+# MySQL8
+mysql -uroot <<MYSQL_PMA3
+USE $PMADB;
+GRANT ALL ON $PMADB.* TO '$PMAUSER'@'localhost';
+FLUSH PRIVILEGES;
+MYSQL_PMA3
+fi
+
+#MYSQL DB and TABLES ADDITION
+mysql -uroot < /root/phpmyadmin/create_tables.sql
diff --git a/install/debian/13/postgresql/pg_hba.conf b/install/debian/13/postgresql/pg_hba.conf
new file mode 100644
index 00000000..1ba43941
--- /dev/null
+++ b/install/debian/13/postgresql/pg_hba.conf
@@ -0,0 +1,11 @@
+# "local" is for Unix domain socket connections only
+local   all         all                               ident
+
+# IPv4 local connections:
+host    all         all         127.0.0.1/32          md5
+
+# IPv6 local connections:
+host    all         all         ::1/128               md5
+
+# Others
+host    all         all         0.0.0.0/0             md5
diff --git a/install/debian/13/proftpd/proftpd.conf b/install/debian/13/proftpd/proftpd.conf
new file mode 100644
index 00000000..4e7f798f
--- /dev/null
+++ b/install/debian/13/proftpd/proftpd.conf
@@ -0,0 +1,38 @@
+ServerName                      "FTP"
+ServerIdent                     on "FTP Server ready."
+ServerAdmin                     root@localhost
+DefaultServer                   on
+DefaultRoot                  ~ !adm
+
+Include /etc/proftpd/tls.conf
+
+<IfModule mod_vroot.c>
+    VRootEngine                 on
+    VRootAlias                  /etc/security/pam_env.conf etc/security/pam_env.conf
+</IfModule>
+
+AuthPAMConfig                   proftpd
+AuthOrder                       mod_auth_pam.c* mod_auth_unix.c
+UseReverseDNS                   off
+User                            proftpd
+Group                           nogroup
+MaxInstances                    100
+UseSendfile                     off
+LogFormat                       default "%h %l %u %t \"%r\" %s %b"
+LogFormat                       auth    "%v [%P] %h %t \"%r\" %s"
+ListOptions                     -a
+RequireValidShell               off
+PassivePorts                    12000 12100
+TransferLog                     /var/log/proftpd/xferlog
+SystemLog                       /var/log/proftpd/proftpd.log
+
+<Global>
+  Umask                         002
+  <IfModule mod_ident.c>
+    IdentLookups                  off
+  </IfModule>
+  AllowOverwrite                yes
+  <Limit ALL SITE_CHMOD>
+    AllowAll
+  </Limit>
+</Global>
diff --git a/install/debian/13/proftpd/tls.conf b/install/debian/13/proftpd/tls.conf
new file mode 100644
index 00000000..9da0017b
--- /dev/null
+++ b/install/debian/13/proftpd/tls.conf
@@ -0,0 +1,63 @@
+#
+# Proftpd sample configuration for FTPS connections.
+#
+# Note that FTPS impose some limitations in NAT traversing.
+# See http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-TLS.html
+# for more information.
+#
+<IfModule mod_dso.c>
+    # If mod_tls was built as a shared/DSO module, load it
+    LoadModule mod_tls.c
+</IfModule>
+<IfModule mod_tls.c>
+TLSEngine                               on
+TLSLog                                  /var/log/proftpd/tls.log
+# this is an example of protocols, proftp works witl all, but use only the most secure ones like TLSv1.1 and TLSv1.2
+TLSProtocol                             TLSv1.1 TLSv1.2
+#
+# Server SSL certificate. You can generate a self-signed certificate using
+# a command like:
+#
+# openssl req -x509 -newkey rsa:1024 \
+#          -keyout /etc/ssl/private/proftpd.key -out /etc/ssl/certs/proftpd.crt \
+#          -nodes -days 365
+#
+# The proftpd.key file must be readable by root only. The other file can be
+# readable by anyone.
+#
+# chmod 0600 /etc/ssl/private/proftpd.key
+# chmod 0640 /etc/ssl/private/proftpd.key
+#
+TLSRSACertificateFile                   /usr/local/vesta/ssl/certificate.crt
+TLSRSACertificateKeyFile                /usr/local/vesta/ssl/certificate.key
+#
+# CA the server trusts...
+#TLSCACertificateFile                    /etc/ssl/certs/CA.pem
+# ...or avoid CA cert and be verbose
+#TLSOptions                      NoCertRequest EnableDiags
+# ... or the same with relaxed session use for some clients (e.g. FireFtp)
+#TLSOptions                      NoCertRequest EnableDiags NoSessionReuseRequired
+#
+#
+# Per default drop connection if client tries to start a renegotiate
+# This is a fix for CVE-2009-3555 but could break some clients.
+#
+#TLSOptions                                                     AllowClientRenegotiations
+#
+TLSOptions                       NoSessionReuseRequired AllowClientRenegotiations
+# Authenticate clients that want to use FTP over TLS?
+#
+#TLSVerifyClient                         off
+#
+# Are clients required to use FTP over TLS when talking to this server?
+#
+TLSRequired                             off
+#
+# Allow SSL/TLS renegotiations when the client requests them, but
+# do not force the renegotations.  Some clients do not support
+# SSL/TLS renegotiations; when mod_tls forces a renegotiation, these
+# clients will close the data connection, or there will be a timeout
+# on an idle data connection.
+#
+TLSRenegotiate                          required off
+</IfModule>
diff --git a/install/debian/13/roundcube/apache.conf b/install/debian/13/roundcube/apache.conf
new file mode 100644
index 00000000..a0c87bcc
--- /dev/null
+++ b/install/debian/13/roundcube/apache.conf
@@ -0,0 +1,40 @@
+Alias /roundcube/program/js/tiny_mce/ /usr/share/tinymce/www/
+Alias /roundcube /var/lib/roundcube
+Alias /webmail /var/lib/roundcube
+
+# Access to tinymce files
+<Directory "/usr/share/tinymce/www/">
+      Options Indexes MultiViews FollowSymLinks
+      AllowOverride None
+      Order allow,deny
+      allow from all
+</Directory>
+
+<Directory /var/lib/roundcube/>
+  Options +FollowSymLinks
+  # This is needed to parse /var/lib/roundcube/.htaccess. See its
+  # content before setting AllowOverride to None.
+  AllowOverride All
+  order allow,deny
+  allow from all
+</Directory>
+
+# Protecting basic directories:
+<Directory /var/lib/roundcube/config>
+        Options -FollowSymLinks
+        AllowOverride None
+</Directory>
+
+<Directory /var/lib/roundcube/temp>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
+
+<Directory /var/lib/roundcube/logs>
+        Options -FollowSymLinks
+        AllowOverride None
+	Order allow,deny
+	Deny from all
+</Directory>
diff --git a/install/debian/13/roundcube/config.inc.php b/install/debian/13/roundcube/config.inc.php
new file mode 100644
index 00000000..0c82b1bc
--- /dev/null
+++ b/install/debian/13/roundcube/config.inc.php
@@ -0,0 +1,33 @@
+<?php
+
+// Password Plugin options
+// -----------------------
+// A driver to use for password change. Default: "sql".
+// See README file for list of supported driver names.
+$rcmail_config['password_driver'] = 'vesta';
+
+// Require the new password to be a certain length.
+// set to blank to allow passwords of any length
+$rcmail_config['password_minimum_length'] = 6;
+
+// Require the new password to contain a letter and punctuation character
+// Change to false to remove this check.
+$rcmail_config['password_require_nonalpha'] = false;
+
+// Enables logging of password changes into logs/password
+$rcmail_config['password_log'] = false;
+
+// Comma-separated list of login exceptions for which password change
+// will be not available (no Password tab in Settings)
+$rcmail_config['password_login_exceptions'] = null;
+
+
+// By default domains in variables are using unicode.
+// Enable this option to use punycoded names
+$rcmail_config['password_idn_ascii'] = false;
+
+// Vesta Driver options
+// -----------------------
+// Control Panel host
+$rcmail_config['password_vesta_host'] = 'localhost';
+$rcmail_config['password_vesta_port'] = '8083';
diff --git a/install/debian/13/roundcube/db.inc.php b/install/debian/13/roundcube/db.inc.php
new file mode 100644
index 00000000..5268a309
--- /dev/null
+++ b/install/debian/13/roundcube/db.inc.php
@@ -0,0 +1,66 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Configuration file for database access                                |
+ |                                                                       |
+ | This file is part of the RoundCube Webmail client                     |
+ | Copyright (C) 2005-2008, RoundCube Dev. - Switzerland                 |
+ | Licensed under the GNU GPL                                            |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// PEAR database DSN for read/write operations
+// format is db_provider://user:password@host/database 
+
+$rcmail_config['db_dsnw'] = 'mysql://roundcube:%password%@localhost/roundcube';
+// postgres example: 'pgsql://roundcube:pass@localhost/roundcubemail';
+
+// PEAR database DSN for read only operations (if empty write database will be used)
+// useful for database replication
+$rcmail_config['db_dsnr'] = '';
+
+// database backend to use (only db or mdb2 are supported)
+//$rcmail_config['db_backend'] = 'mdb2';
+
+// maximum length of a query in bytes
+$rcmail_config['db_max_length'] = 512000;  // 500K
+
+// use persistent db-connections
+// beware this will not "always" work as expected
+// see: http://www.php.net/manual/en/features.persistent-connections.php
+$rcmail_config['db_persistent'] = FALSE;
+
+
+// you can define specific table names used to store webmail data
+$rcmail_config['db_table_users'] = 'users';
+
+$rcmail_config['db_table_identities'] = 'identities';
+
+$rcmail_config['db_table_contacts'] = 'contacts';
+
+$rcmail_config['db_table_session'] = 'session';
+
+$rcmail_config['db_table_cache'] = 'cache';
+
+$rcmail_config['db_table_messages'] = 'messages';
+
+
+// you can define specific sequence names used in PostgreSQL
+$rcmail_config['db_sequence_users'] = 'user_ids';
+
+$rcmail_config['db_sequence_identities'] = 'identity_ids';
+
+$rcmail_config['db_sequence_contacts'] = 'contact_ids';
+
+$rcmail_config['db_sequence_cache'] = 'cache_ids';
+
+$rcmail_config['db_sequence_messages'] = 'message_ids';
+
+
+// end db config file
+?>
diff --git a/install/debian/13/roundcube/main.inc.php b/install/debian/13/roundcube/main.inc.php
new file mode 100644
index 00000000..91f32000
--- /dev/null
+++ b/install/debian/13/roundcube/main.inc.php
@@ -0,0 +1,850 @@
+<?php
+
+/*
+ +-----------------------------------------------------------------------+
+ | Main configuration file                                               |
+ |                                                                       |
+ | This file is part of the Roundcube Webmail client                     |
+ | Copyright (C) 2005-2011, The Roundcube Dev Team                       |
+ |                                                                       |
+ | Licensed under the GNU General Public License version 3 or            |
+ | any later version with exceptions for skins & plugins.                |
+ | See the README file for a full license statement.                     |
+ |                                                                       |
+ +-----------------------------------------------------------------------+
+
+*/
+
+$rcmail_config = array();
+
+// ----------------------------------
+// LOGGING/DEBUGGING
+// ----------------------------------
+
+// system error reporting: 1 = log; 2 = report (not implemented yet), 4 = show, 8 = trace
+$rcmail_config['debug_level'] = 1;
+
+// log driver:  'syslog' or 'file'.
+$rcmail_config['log_driver'] = 'file';
+
+// date format for log entries
+// (read http://php.net/manual/en/function.date.php for all format characters)  
+$rcmail_config['log_date_format'] = 'd-M-Y H:i:s O';
+
+// Syslog ident string to use, if using the 'syslog' log driver.
+$rcmail_config['syslog_id'] = 'roundcube';
+
+// Syslog facility to use, if using the 'syslog' log driver.
+// For possible values see installer or http://php.net/manual/en/function.openlog.php
+$rcmail_config['syslog_facility'] = LOG_USER;
+
+// Log sent messages to <log_dir>/sendmail or to syslog
+$rcmail_config['smtp_log'] = true;
+
+// Log successful logins to <log_dir>/userlogins or to syslog
+$rcmail_config['log_logins'] = false;
+
+// Log session authentication errors to <log_dir>/session or to syslog
+$rcmail_config['log_session'] = false;
+
+// Log SQL queries to <log_dir>/sql or to syslog
+$rcmail_config['sql_debug'] = false;
+
+// Log IMAP conversation to <log_dir>/imap or to syslog
+$rcmail_config['imap_debug'] = false;
+
+// Log LDAP conversation to <log_dir>/ldap or to syslog
+$rcmail_config['ldap_debug'] = false;
+
+// Log SMTP conversation to <log_dir>/smtp or to syslog
+$rcmail_config['smtp_debug'] = false;
+
+// ----------------------------------
+// IMAP
+// ----------------------------------
+
+// the mail host chosen to perform the log-in
+// leave blank to show a textbox at login, give a list of hosts
+// to display a pulldown menu or set one host as string.
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// Supported replacement variables:
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %s - domain name after the '@' from e-mail address provided at login screen
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['default_host'] = 'localhost';
+
+// TCP port used for IMAP connections
+$rcmail_config['default_port'] = 143;
+
+// IMAP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['imap_auth_type'] = null;
+
+// If you know your imap's folder delimiter, you can specify it here.
+// Otherwise it will be determined automatically
+$rcmail_config['imap_delimiter'] = null;
+
+// If IMAP server doesn't support NAMESPACE extension, but you're
+// using shared folders or personal root folder is non-empty, you'll need to
+// set these options. All can be strings or arrays of strings.
+// Folders need to be ended with directory separator, e.g. "INBOX."
+// (special directory "~" is an exception to this rule)
+// These can be used also to overwrite server's namespaces
+$rcmail_config['imap_ns_personal'] = null;
+$rcmail_config['imap_ns_other']    = null;
+$rcmail_config['imap_ns_shared']   = null;
+
+// By default IMAP capabilities are readed after connection to IMAP server
+// In some cases, e.g. when using IMAP proxy, there's a need to refresh the list
+// after login. Set to True if you've got this case.
+$rcmail_config['imap_force_caps'] = false;
+
+// By default list of subscribed folders is determined using LIST-EXTENDED
+// extension if available. Some servers (dovecot 1.x) returns wrong results
+// for shared namespaces in this case. http://trac.roundcube.net/ticket/1486225
+// Enable this option to force LSUB command usage instead.
+$rcmail_config['imap_force_lsub'] = false;
+
+// Some server configurations (e.g. Courier) doesn't list folders in all namespaces
+// Enable this option to force listing of folders in all namespaces
+$rcmail_config['imap_force_ns'] = false;
+
+// IMAP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['imap_timeout'] = 0;
+
+// Optional IMAP authentication identifier to be used as authorization proxy
+$rcmail_config['imap_auth_cid'] = null;
+
+// Optional IMAP authentication password to be used for imap_auth_cid
+$rcmail_config['imap_auth_pw'] = null;
+
+// Type of IMAP indexes cache. Supported values: 'db', 'apc' and 'memcache'.
+$rcmail_config['imap_cache'] = null;
+
+// Enables messages cache. Only 'db' cache is supported.
+$rcmail_config['messages_cache'] = false;
+
+
+// ----------------------------------
+// SMTP
+// ----------------------------------
+
+// SMTP server host (for sending mails).
+// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
+// If left blank, the PHP mail() function is used
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['smtp_server'] = '';
+
+// SMTP port (default is 25; use 587 for STARTTLS or 465 for the
+// deprecated SSL over SMTP (aka SMTPS))
+$rcmail_config['smtp_port'] = 25;
+
+// SMTP username (if required) if you use %u as the username Roundcube
+// will use the current username for login
+$rcmail_config['smtp_user'] = '';
+
+// SMTP password (if required) if you use %p as the password Roundcube
+// will use the current user's password for login
+$rcmail_config['smtp_pass'] = '';
+
+// SMTP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or empty to use
+// best server supported one)
+$rcmail_config['smtp_auth_type'] = '';
+
+// Optional SMTP authentication identifier to be used as authorization proxy
+$rcmail_config['smtp_auth_cid'] = null;
+
+// Optional SMTP authentication password to be used for smtp_auth_cid
+$rcmail_config['smtp_auth_pw'] = null;
+
+// SMTP HELO host 
+// Hostname to give to the remote server for SMTP 'HELO' or 'EHLO' messages 
+// Leave this blank and you will get the server variable 'server_name' or 
+// localhost if that isn't defined. 
+$rcmail_config['smtp_helo_host'] = '';
+
+// SMTP connection timeout, in seconds. Default: 0 (no limit)
+$rcmail_config['smtp_timeout'] = 0;
+
+// ----------------------------------
+// SYSTEM
+// ----------------------------------
+include_once("/etc/roundcube/debian-db-roundcube.php");
+
+
+// THIS OPTION WILL ALLOW THE INSTALLER TO RUN AND CAN EXPOSE SENSITIVE CONFIG DATA.
+// ONLY ENABLE IT IF YOU'RE REALLY SURE WHAT YOU'RE DOING!
+$rcmail_config['enable_installer'] = false;
+
+// provide an URL where a user can get support for this Roundcube installation
+// PLEASE DO NOT LINK TO THE ROUNDCUBE.NET WEBSITE HERE!
+$rcmail_config['support_url'] = '';
+
+// replace Roundcube logo with this image
+// specify an URL relative to the document root of this Roundcube installation
+$rcmail_config['skin_logo'] = null;
+
+// automatically create a new Roundcube user when log-in the first time.
+// a new user will be created once the IMAP login succeeds.
+// set to false if only registered users can use this service
+$rcmail_config['auto_create_user'] = true;
+
+// use this folder to store log files (must be writeable for apache user)
+// This is used by the 'file' log driver.
+$rcmail_config['log_dir'] = '/var/log/roundcubemail/';
+
+// use this folder to store temp files (must be writeable for apache user)
+$rcmail_config['temp_dir'] = '/tmp';
+
+// lifetime of message cache
+// possible units: s, m, h, d, w
+$rcmail_config['message_cache_lifetime'] = '10d';
+
+// enforce connections over https
+// with this option enabled, all non-secure connections will be redirected.
+// set the port for the ssl connection as value of this option if it differs from the default 443
+$rcmail_config['force_https'] = true;
+
+// tell PHP that it should work as under secure connection
+// even if it doesn't recognize it as secure ($_SERVER['HTTPS'] is not set)
+// e.g. when you're running Roundcube behind a https proxy
+// this option is mutually exclusive to 'force_https' and only either one of them should be set to true.
+$rcmail_config['use_https'] = false;
+
+// Allow browser-autocompletion on login form.
+// 0 - disabled, 1 - username and host only, 2 - username, host, password
+$rcmail_config['login_autocomplete'] = 0;
+
+// Forces conversion of logins to lower case.
+// 0 - disabled, 1 - only domain part, 2 - domain and local part.
+// If users authentication is not case-sensitive this must be enabled.
+// After enabling it all user records need to be updated, e.g. with query:
+// UPDATE users SET username = LOWER(username);
+$rcmail_config['login_lc'] = 0;
+
+// Includes should be interpreted as PHP files
+$rcmail_config['skin_include_php'] = false;
+
+// display software version on login screen
+$rcmail_config['display_version'] = false;
+
+// Session lifetime in minutes
+// must be greater than 'keep_alive'/60
+$rcmail_config['session_lifetime'] = 10;
+
+// session domain: .example.org
+$rcmail_config['session_domain'] = '';
+
+// session name. Default: 'roundcube_sessid'
+$rcmail_config['session_name'] = null;
+
+// Backend to use for session storage. Can either be 'db' (default) or 'memcache'
+// If set to memcache, a list of servers need to be specified in 'memcache_hosts'
+// Make sure the Memcache extension (http://pecl.php.net/package/memcache) version >= 2.0.0 is installed
+$rcmail_config['session_storage'] = 'db';
+
+// Use these hosts for accessing memcached
+// Define any number of hosts in the form of hostname:port or unix:///path/to/sock.file
+$rcmail_config['memcache_hosts'] = null; // e.g. array( 'localhost:11211', '192.168.1.12:11211', 'unix:///var/tmp/memcached.sock' );
+
+// check client IP in session athorization
+$rcmail_config['ip_check'] = false;
+
+// check referer of incoming requests
+$rcmail_config['referer_check'] = false;
+
+// X-Frame-Options HTTP header value sent to prevent from Clickjacking.
+// Possible values: sameorigin|deny. Set to false in order to disable sending them
+$rcmail_config['x_frame_options'] = 'sameorigin';
+
+// this key is used to encrypt the users imap password which is stored
+// in the session record (and the client cookie if remember password is enabled).
+// please provide a string of exactly 24 chars.
+$rcmail_config['des_key'] = 'vtIOjLZo9kffJoqzpSbm5r1r';
+
+// Automatically add this domain to user names for login
+// Only for IMAP servers that require full e-mail addresses for login
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['username_domain'] = '';
+
+// This domain will be used to form e-mail addresses of new users
+// Specify an array with 'host' => 'domain' values to support multiple hosts
+// Supported replacement variables:
+// %h - user's IMAP hostname
+// %n - http hostname ($_SERVER['SERVER_NAME'])
+// %d - domain (http hostname without the first part)
+// %z - IMAP domain (IMAP hostname without the first part)
+// For example %n = mail.domain.tld, %d = domain.tld
+$rcmail_config['mail_domain'] = '';
+
+// Password charset.
+// Use it if your authentication backend doesn't support UTF-8.
+// Defaults to ISO-8859-1 for backward compatibility
+$rcmail_config['password_charset'] = 'ISO-8859-1';
+
+// How many seconds must pass between emails sent by a user
+$rcmail_config['sendmail_delay'] = 0;
+
+// Maximum number of recipients per message. Default: 0 (no limit)
+$rcmail_config['max_recipients'] = 0; 
+
+// Maximum allowednumber of members of an address group. Default: 0 (no limit)
+// If 'max_recipients' is set this value should be less or equal
+$rcmail_config['max_group_members'] = 0; 
+
+// add this user-agent to message headers when sending
+$rcmail_config['useragent'] = 'Roundcube Webmail/'.RCMAIL_VERSION;
+
+// use this name to compose page titles
+$rcmail_config['product_name'] = 'Roundcube Webmail';
+
+// try to load host-specific configuration
+// see http://trac.roundcube.net/wiki/Howto_Config for more details
+$rcmail_config['include_host_config'] = false;
+
+// path to a text file which will be added to each sent message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer'] = '';
+
+// path to a text file which will be added to each sent HTML message
+// paths are relative to the Roundcube root folder
+$rcmail_config['generic_message_footer_html'] = '';
+
+// add a received header to outgoing mails containing the creators IP and hostname
+$rcmail_config['http_received_header'] = false;
+
+// Whether or not to encrypt the IP address and the host name
+// these could, in some circles, be considered as sensitive information;
+// however, for the administrator, these could be invaluable help
+// when tracking down issues.
+$rcmail_config['http_received_header_encrypt'] = false;
+
+// This string is used as a delimiter for message headers when sending
+// a message via mail() function. Leave empty for auto-detection
+$rcmail_config['mail_header_delimiter'] = NULL;
+
+// number of chars allowed for line when wrapping text.
+// text wrapping is done when composing/sending messages
+$rcmail_config['line_length'] = 72;
+
+// send plaintext messages as format=flowed
+$rcmail_config['send_format_flowed'] = true;
+
+// don't allow these settings to be overriden by the user
+$rcmail_config['dont_override'] = array();
+
+// Set identities access level:
+// 0 - many identities with possibility to edit all params
+// 1 - many identities with possibility to edit all params but not email address
+// 2 - one identity with possibility to edit all params
+// 3 - one identity with possibility to edit all params but not email address
+$rcmail_config['identities_level'] = 0;
+
+// Mimetypes supported by the browser.
+// attachments of these types will open in a preview window
+// either a comma-separated list or an array: 'text/plain,text/html,text/xml,image/jpeg,image/gif,image/png,application/pdf'
+$rcmail_config['client_mimetypes'] = null;  # null == default
+
+// mime magic database
+$rcmail_config['mime_magic'] = null;
+
+// path to imagemagick identify binary
+$rcmail_config['im_identify_path'] = null;
+
+// path to imagemagick convert binary
+$rcmail_config['im_convert_path'] = null;
+
+// maximum size of uploaded contact photos in pixel
+$rcmail_config['contact_photo_size'] = 160;
+
+// Enable DNS checking for e-mail address validation
+$rcmail_config['email_dns_check'] = false;
+
+// ----------------------------------
+// PLUGINS
+// ----------------------------------
+
+// List of active plugins (in plugins/ directory)
+$rcmail_config['plugins'] = array('password');
+
+// ----------------------------------
+// USER INTERFACE
+// ----------------------------------
+
+// default messages sort column. Use empty value for default server's sorting, 
+// or 'arrival', 'date', 'subject', 'from', 'to', 'fromto', 'size', 'cc'
+$rcmail_config['message_sort_col'] = '';
+
+// default messages sort order
+$rcmail_config['message_sort_order'] = 'DESC';
+
+// These cols are shown in the message list. Available cols are:
+// subject, from, to, fromto, cc, replyto, date, size, status, flag, attachment, 'priority'
+$rcmail_config['list_cols'] = array('subject', 'status', 'fromto', 'date', 'size', 'flag', 'attachment');
+
+// the default locale setting (leave empty for auto-detection)
+// RFC1766 formatted language name like en_US, de_DE, de_CH, fr_FR, pt_BR
+$rcmail_config['language'] = null;
+
+// use this format for date display (date or strftime format)
+$rcmail_config['date_format'] = 'Y-m-d';
+
+// give this choice of date formats to the user to select from
+$rcmail_config['date_formats'] = array('Y-m-d', 'd-m-Y', 'Y/m/d', 'm/d/Y', 'd/m/Y', 'd.m.Y', 'j.n.Y');
+
+// use this format for time display (date or strftime format)
+$rcmail_config['time_format'] = 'H:i';
+
+// give this choice of time formats to the user to select from
+$rcmail_config['time_formats'] = array('G:i', 'H:i', 'g:i a', 'h:i A');
+
+// use this format for short date display (derived from date_format and time_format)
+$rcmail_config['date_short'] = 'D H:i';
+
+// use this format for detailed date/time formatting (derived from date_format and time_format)
+$rcmail_config['date_long'] = 'Y-m-d H:i';
+
+// store draft message is this mailbox
+// leave blank if draft messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['drafts_mbox'] = 'Drafts';
+
+// store spam messages in this mailbox
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['junk_mbox'] = 'Spam';
+
+// store sent message is this mailbox
+// leave blank if sent messages should not be stored
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['sent_mbox'] = 'Sent';
+
+// move messages to this folder when deleting them
+// leave blank if they should be deleted directly
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['trash_mbox'] = 'Trash';
+
+// display these folders separately in the mailbox list.
+// these folders will also be displayed with localized names
+// NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP)
+$rcmail_config['default_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+$rcmail_config['default_imap_folders'] = array('INBOX', 'Drafts', 'Sent', 'Spam', 'Trash');
+
+// automatically create the above listed default folders on first login
+$rcmail_config['create_default_folders'] = true;
+
+// protect the default folders from renames, deletes, and subscription changes
+$rcmail_config['protect_default_folders'] = true;
+
+// if in your system 0 quota means no limit set this option to true 
+$rcmail_config['quota_zero_as_unlimited'] = false;
+
+// Make use of the built-in spell checker. It is based on GoogieSpell.
+// Since Google only accepts connections over https your PHP installatation
+// requires to be compiled with Open SSL support
+$rcmail_config['enable_spellcheck'] = true;
+
+// Enables spellchecker exceptions dictionary.
+// Setting it to 'shared' will make the dictionary shared by all users.
+$rcmail_config['spellcheck_dictionary'] = false;
+
+// Set the spell checking engine. 'googie' is the default. 'pspell' is also available,
+// but requires the Pspell extensions. When using Nox Spell Server, also set 'googie' here.
+$rcmail_config['spellcheck_engine'] = 'googie';
+
+// For a locally installed Nox Spell Server, please specify the URI to call it.
+// Get Nox Spell Server from http://orangoo.com/labs/?page_id=72
+// Leave empty to use the Google spell checking service, what means
+// that the message content will be sent to Google in order to check spelling
+$rcmail_config['spellcheck_uri'] = '';
+
+// These languages can be selected for spell checking.
+// Configure as a PHP style hash array: array('en'=>'English', 'de'=>'Deutsch');
+// Leave empty for default set of available language.
+$rcmail_config['spellcheck_languages'] = NULL;
+
+// Makes that words with all letters capitalized will be ignored (e.g. GOOGLE)
+$rcmail_config['spellcheck_ignore_caps'] = false;
+
+// Makes that words with numbers will be ignored (e.g. g00gle)
+$rcmail_config['spellcheck_ignore_nums'] = false;
+
+// Makes that words with symbols will be ignored (e.g. g@@gle)
+$rcmail_config['spellcheck_ignore_syms'] = false;
+
+// Use this char/string to separate recipients when composing a new message
+$rcmail_config['recipients_separator'] = ',';
+
+// don't let users set pagesize to more than this value if set
+$rcmail_config['max_pagesize'] = 200;
+
+// Minimal value of user's 'keep_alive' setting (in seconds)
+// Must be less than 'session_lifetime'
+$rcmail_config['min_keep_alive'] = 60;
+
+// Enables files upload indicator. Requires APC installed and enabled apc.rfc1867 option.
+// By default refresh time is set to 1 second. You can set this value to true
+// or any integer value indicating number of seconds.
+$rcmail_config['upload_progress'] = false;
+
+// Specifies for how many seconds the Undo button will be available
+// after object delete action. Currently used with supporting address book sources.
+// Setting it to 0, disables the feature.
+$rcmail_config['undo_timeout'] = 0;
+
+// ----------------------------------
+// ADDRESSBOOK SETTINGS
+// ----------------------------------
+
+// This indicates which type of address book to use. Possible choises:
+// 'sql' (default) and 'ldap'.
+// If set to 'ldap' then it will look at using the first writable LDAP
+// address book as the primary address book and it will not display the
+// SQL address book in the 'Address Book' view.
+$rcmail_config['address_book_type'] = 'sql';
+
+// In order to enable public ldap search, configure an array like the Verisign
+// example further below. if you would like to test, simply uncomment the example.
+// Array key must contain only safe characters, ie. a-zA-Z0-9_
+$rcmail_config['ldap_public'] = array();
+
+// If you are going to use LDAP for individual address books, you will need to 
+// set 'user_specific' to true and use the variables to generate the appropriate DNs to access it.
+//
+// The recommended directory structure for LDAP is to store all the address book entries
+// under the users main entry, e.g.:
+//
+//  o=root
+//   ou=people
+//    uid=user@domain
+//  mail=contact@contactdomain
+//
+// So the base_dn would be uid=%fu,ou=people,o=root
+// The bind_dn would be the same as based_dn or some super user login.
+/* 
+ * example config for Verisign directory
+ *
+$rcmail_config['ldap_public']['Verisign'] = array(
+  'name'          => 'Verisign.com',
+  // Replacement variables supported in host names:
+  // %h - user's IMAP hostname
+  // %n - http hostname ($_SERVER['SERVER_NAME'])
+  // %d - domain (http hostname without the first part)
+  // %z - IMAP domain (IMAP hostname without the first part)
+  // For example %n = mail.domain.tld, %d = domain.tld
+  'hosts'         => array('directory.verisign.com'),
+  'port'          => 389,
+  'use_tls'	      => false,
+  'ldap_version'  => 3,       // using LDAPv3
+  'user_specific' => false,   // If true the base_dn, bind_dn and bind_pass default to the user's IMAP login.
+  // %fu - The full username provided, assumes the username is an email
+  //       address, uses the username_domain value if not an email address.
+  // %u  - The username prior to the '@'.
+  // %d  - The domain name after the '@'.
+  // %dc - The domain name hierarchal string e.g. "dc=test,dc=domain,dc=com"
+  // %dn - DN found by ldap search when search_filter/search_base_dn are used
+  'base_dn'       => '',
+  'bind_dn'       => '',
+  'bind_pass'     => '',
+  // It's possible to bind for an individual address book
+  // The login name is used to search for the DN to bind with
+  'search_base_dn' => '',
+  'search_filter'  => '',   // e.g. '(&(objectClass=posixAccount)(uid=%u))'
+  // DN and password to bind as before searching for bind DN, if anonymous search is not allowed
+  'search_bind_dn' => '',
+  'search_bind_pw' => '',
+  // Default for %dn variable if search doesn't return DN value
+  'search_dn_default' => '',
+  // Optional authentication identifier to be used as SASL authorization proxy
+  // bind_dn need to be empty
+  'auth_cid'       => '',
+  // SASL authentication method (for proxy auth), e.g. DIGEST-MD5
+  'auth_method'    => '',
+  // Indicates if the addressbook shall be hidden from the list.
+  // With this option enabled you can still search/view contacts.
+  'hidden'        => false,
+  // Indicates if the addressbook shall not list contacts but only allows searching.
+  'searchonly'    => false,
+  // Indicates if we can write to the LDAP directory or not.
+  // If writable is true then these fields need to be populated:
+  // LDAP_Object_Classes, required_fields, LDAP_rdn
+  'writable'       => false,
+  // To create a new contact these are the object classes to specify
+  // (or any other classes you wish to use).
+  'LDAP_Object_Classes' => array('top', 'inetOrgPerson'),
+  // The RDN field that is used for new entries, this field needs
+  // to be one of the search_fields, the base of base_dn is appended
+  // to the RDN to insert into the LDAP directory.
+  'LDAP_rdn'       => 'cn',
+  // The required fields needed to build a new contact as required by
+  // the object classes (can include additional fields not required by the object classes).
+  'required_fields' => array('cn', 'sn', 'mail'),
+  'search_fields'   => array('mail', 'cn'),  // fields to search in
+  // mapping of contact fields to directory attributes
+  //   for every attribute one can specify the number of values (limit) allowed.
+  //   default is 1, a wildcard * means unlimited
+  'fieldmap' => array(
+    // Roundcube  => LDAP:limit
+    'name'        => 'cn',
+    'surname'     => 'sn',
+    'firstname'   => 'givenName',
+    'title'       => 'title',
+    'email'       => 'mail:*',
+    'phone:home'  => 'homePhone',
+    'phone:work'  => 'telephoneNumber',
+    'phone:mobile' => 'mobile',
+    'phone:pager' => 'pager',
+    'street'      => 'street',
+    'zipcode'     => 'postalCode',
+    'region'      => 'st',
+    'locality'    => 'l',
+// if you uncomment country, you need to modify 'sub_fields' above
+//    'country'     => 'c',
+    'department'  => 'departmentNumber',
+    'notes'       => 'description',
+// these currently don't work:
+//    'phone:workfax' => 'facsimileTelephoneNumber',
+//    'photo'        => 'jpegPhoto',
+//    'organization' => 'o',
+//    'manager'      => 'manager',
+//    'assistant'    => 'secretary',
+  ),
+  // Map of contact sub-objects (attribute name => objectClass(es)), e.g. 'c' => 'country'
+  'sub_fields' => array(),
+  'sort'          => 'cn',    // The field to sort the listing by.
+  'scope'         => 'sub',   // search mode: sub|base|list
+  'filter'        => '(objectClass=inetOrgPerson)',      // used for basic listing (if not empty) and will be &'d with search queries. example: status=act
+  'fuzzy_search'  => true,    // server allows wildcard search
+  'vlv'           => false,   // Enable Virtual List View to more efficiently fetch paginated data (if server supports it)
+  'numsub_filter' => '(objectClass=organizationalUnit)',   // with VLV, we also use numSubOrdinates to query the total number of records. Set this filter to get all numSubOrdinates attributes for counting
+  'sizelimit'     => '0',     // Enables you to limit the count of entries fetched. Setting this to 0 means no limit.
+  'timelimit'     => '0',     // Sets the number of seconds how long is spend on the search. Setting this to 0 means no limit.
+  'referrals'     => true|false,  // Sets the LDAP_OPT_REFERRALS option. Mostly used in multi-domain Active Directory setups
+
+  // definition for contact groups (uncomment if no groups are supported)
+  // for the groups base_dn, the user replacements %fu, %u, $d and %dc work as for base_dn (see above)
+  // if the groups base_dn is empty, the contact base_dn is used for the groups as well
+  // -> in this case, assure that groups and contacts are separated due to the concernig filters! 
+  'groups'        => array(
+    'base_dn'     => '',
+    'scope'       => 'sub',   // search mode: sub|base|list
+    'filter'      => '(objectClass=groupOfNames)',
+    'object_classes' => array("top", "groupOfNames"),
+    'member_attr'  => 'member',   // name of the member attribute, e.g. uniqueMember
+    'name_attr'    => 'cn',       // attribute to be used as group name
+  ),
+);
+*/
+
+// An ordered array of the ids of the addressbooks that should be searched
+// when populating address autocomplete fields server-side. ex: array('sql','Verisign');
+$rcmail_config['autocomplete_addressbooks'] = array('sql');
+
+// The minimum number of characters required to be typed in an autocomplete field
+// before address books will be searched. Most useful for LDAP directories that
+// may need to do lengthy results building given overly-broad searches
+$rcmail_config['autocomplete_min_length'] = 1;
+
+// Number of parallel autocomplete requests.
+// If there's more than one address book, n parallel (async) requests will be created,
+// where each request will search in one address book. By default (0), all address
+// books are searched in one request.
+$rcmail_config['autocomplete_threads'] = 0;
+
+// Max. numer of entries in autocomplete popup. Default: 15.
+$rcmail_config['autocomplete_max'] = 15;
+
+// show address fields in this order
+// available placeholders: {street}, {locality}, {zipcode}, {country}, {region}
+$rcmail_config['address_template'] = '{street}<br/>{locality} {zipcode}<br/>{country} {region}';
+
+// Matching mode for addressbook search (including autocompletion)
+// 0 - partial (*abc*), default
+// 1 - strict (abc)
+// 2 - prefix (abc*)
+// Note: For LDAP sources fuzzy_search must be enabled to use 'partial' or 'prefix' mode
+$rcmail_config['addressbook_search_mode'] = 0;
+
+// ----------------------------------
+// USER PREFERENCES
+// ----------------------------------
+
+// Use this charset as fallback for message decoding
+//$rcmail_config['default_charset'] = 'ISO-8859-1';
+$rcmail_config['default_charset'] = 'UTF-8';
+
+// skin name: folder from skins/
+$rcmail_config['skin'] = 'elastic';
+
+// show up to X items in messages list view
+$rcmail_config['mail_pagesize'] = 50;
+
+// show up to X items in contacts list view
+$rcmail_config['addressbook_pagesize'] = 50;
+
+// sort contacts by this col (preferably either one of name, firstname, surname)
+$rcmail_config['addressbook_sort_col'] = 'surname';
+
+// the way how contact names are displayed in the list
+// 0: display name
+// 1: (prefix) firstname middlename surname (suffix)
+// 2: (prefix) surname firstname middlename (suffix)
+// 3: (prefix) surname, firstname middlename (suffix)
+$rcmail_config['addressbook_name_listing'] = 0;
+
+// use this timezone to display date/time
+// valid timezone identifers are listed here: php.net/manual/en/timezones.php
+// 'auto' will use the browser's timezone settings
+$rcmail_config['timezone'] = 'auto';
+
+// prefer displaying HTML messages
+$rcmail_config['prefer_html'] = true;
+
+// display remote inline images
+// 0 - Never, always ask
+// 1 - Ask if sender is not in address book
+// 2 - Always show inline images
+$rcmail_config['show_images'] = 0;
+
+// compose html formatted messages by default
+// 0 - never, 1 - always, 2 - on reply to HTML message only 
+$rcmail_config['htmleditor'] = 0;
+
+// show pretty dates as standard
+$rcmail_config['prettydate'] = true;
+
+// save compose message every 300 seconds (5min)
+$rcmail_config['draft_autosave'] = 300;
+
+// default setting if preview pane is enabled
+$rcmail_config['preview_pane'] = false;
+
+// Mark as read when viewed in preview pane (delay in seconds)
+// Set to -1 if messages in preview pane should not be marked as read
+$rcmail_config['preview_pane_mark_read'] = 0;
+
+// Clear Trash on logout
+$rcmail_config['logout_purge'] = false;
+
+// Compact INBOX on logout
+$rcmail_config['logout_expunge'] = false;
+
+// Display attached images below the message body 
+$rcmail_config['inline_images'] = true;
+
+// Encoding of long/non-ascii attachment names:
+// 0 - Full RFC 2231 compatible
+// 1 - RFC 2047 for 'name' and RFC 2231 for 'filename' parameter (Thunderbird's default)
+// 2 - Full 2047 compatible
+$rcmail_config['mime_param_folding'] = 1;
+
+// Set true if deleted messages should not be displayed
+// This will make the application run slower
+$rcmail_config['skip_deleted'] = false;
+
+// Set true to Mark deleted messages as read as well as deleted
+// False means that a message's read status is not affected by marking it as deleted
+$rcmail_config['read_when_deleted'] = true;
+
+// Set to true to never delete messages immediately
+// Use 'Purge' to remove messages marked as deleted
+$rcmail_config['flag_for_deletion'] = false;
+
+// Default interval for keep-alive/check-recent requests (in seconds)
+// Must be greater than or equal to 'min_keep_alive' and less than 'session_lifetime'
+$rcmail_config['keep_alive'] = 60;
+
+// If true all folders will be checked for recent messages
+$rcmail_config['check_all_folders'] = false;
+
+// If true, after message delete/move, the next message will be displayed
+$rcmail_config['display_next'] = false;
+
+// 0 - Do not expand threads 
+// 1 - Expand all threads automatically 
+// 2 - Expand only threads with unread messages 
+$rcmail_config['autoexpand_threads'] = 0;
+
+// When replying place cursor above original message (top posting)
+$rcmail_config['top_posting'] = false;
+
+// When replying strip original signature from message
+$rcmail_config['strip_existing_sig'] = true;
+
+// Show signature:
+// 0 - Never
+// 1 - Always
+// 2 - New messages only
+// 3 - Forwards and Replies only
+$rcmail_config['show_sig'] = 1;
+
+// When replying or forwarding place sender's signature above existing message
+$rcmail_config['sig_above'] = false;
+
+// Use MIME encoding (quoted-printable) for 8bit characters in message body
+$rcmail_config['force_7bit'] = false;
+
+// Defaults of the search field configuration.
+// The array can contain a per-folder list of header fields which should be considered when searching
+// The entry with key '*' stands for all folders which do not have a specific list set.
+// Please note that folder names should to be in sync with $rcmail_config['default_folders']
+$rcmail_config['search_mods'] = null;  // Example: array('*' => array('subject'=>1, 'from'=>1), 'Sent' => array('subject'=>1, 'to'=>1));
+
+// Defaults of the addressbook search field configuration.
+$rcmail_config['addressbook_search_mods'] = null;  // Example: array('name'=>1, 'firstname'=>1, 'surname'=>1, 'email'=>1, '*'=>1);
+
+// 'Delete always'
+// This setting reflects if mail should be always deleted
+// when moving to Trash fails. This is necessary in some setups
+// when user is over quota and Trash is included in the quota.
+$rcmail_config['delete_always'] = false;
+
+// Directly delete messages in Junk instead of moving to Trash
+$rcmail_config['delete_junk'] = true;
+
+// Behavior if a received message requests a message delivery notification (read receipt)
+// 0 = ask the user, 1 = send automatically, 2 = ignore (never send or ask)
+// 3 = send automatically if sender is in addressbook, otherwise ask the user
+// 4 = send automatically if sender is in addressbook, otherwise ignore
+$rcmail_config['mdn_requests'] = 0;
+
+// Return receipt checkbox default state
+$rcmail_config['mdn_default'] = 0;
+
+// Delivery Status Notification checkbox default state
+$rcmail_config['dsn_default'] = 0;
+
+// Place replies in the folder of the message being replied to
+$rcmail_config['reply_same_folder'] = false;
+
+// Sets default mode of Forward feature to "forward as attachment"
+$rcmail_config['forward_attachment'] = false;
+
+// Defines address book (internal index) to which new contacts will be added
+// By default it is the first writeable addressbook.
+// Note: Use '0' for built-in address book.
+$rcmail_config['default_addressbook'] = null;
+
+// Enables spell checking before sending a message.
+$rcmail_config['spellcheck_before_send'] = false;
+
+// Skip alternative email addresses in autocompletion (show one address per contact)
+$rcmail_config['autocomplete_single'] = false;
+
+// Default font for composed HTML message.
+// Supported values: Andale Mono, Arial, Arial Black, Book Antiqua, Courier New,
+// Georgia, Helvetica, Impact, Tahoma, Terminal, Times New Roman, Trebuchet MS, Verdana
+$rcmail_config['default_font'] = '';
+
+// end of config file
diff --git a/install/debian/13/roundcube/vesta.php b/install/debian/13/roundcube/vesta.php
new file mode 100644
index 00000000..b3dd167f
--- /dev/null
+++ b/install/debian/13/roundcube/vesta.php
@@ -0,0 +1,73 @@
+<?php
+
+/**
+ * Vesta Control Panel Password Driver
+ *
+ * @version 1.0
+ * @author Serghey Rodin <skid@vestacp.com>
+ */
+class rcube_vesta_password {
+    function save($curpass, $passwd)
+    {
+        $rcmail = rcmail::get_instance();
+        $vesta_host = $rcmail->config->get('password_vesta_host');
+
+        if (empty($vesta_host))
+        {
+            $vesta_host = 'localhost';
+        }
+
+        $vesta_port = $rcmail->config->get('password_vesta_port');
+        if (empty($vesta_port))
+        {
+            $vesta_port = '8083';
+        }
+
+        $postvars = array(
+          'email' => $_SESSION['username'],
+          'password' => $curpass,
+          'new' => $passwd
+        );
+
+        $postdata = http_build_query($postvars);
+
+        $send  = 'POST /reset/mail/ HTTP/1.1' . PHP_EOL;
+        $send .= 'Host: ' . $vesta_host . PHP_EOL;
+        $send .= 'User-Agent: PHP Script' . PHP_EOL;
+        $send .= 'Content-length: ' . strlen($postdata) . PHP_EOL;
+        $send .= 'Content-type: application/x-www-form-urlencoded' . PHP_EOL;
+        $send .= 'Connection: close' . PHP_EOL;
+        $send .= PHP_EOL;
+        $send .= $postdata . PHP_EOL . PHP_EOL;
+
+        //$fp = fsockopen('ssl://' . $vesta_host, $vesta_port);
+        $errno = "";
+        $errstr = "";
+        $context = stream_context_create();
+
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_peer_name', false);
+        $result = stream_context_set_option($context, 'ssl', 'verify_host', false);
+        $result = stream_context_set_option($context, 'ssl', 'allow_self_signed', true);
+
+        $fp = stream_socket_client('ssl://' . $vesta_host . ':'.$vesta_port, $errno, $errstr, 60, STREAM_CLIENT_CONNECT, $context);
+        fputs($fp, $send);
+        $result = fread($fp, 2048);
+        fclose($fp);
+
+        $fp = fopen("/tmp/roundcube.log", 'w');
+        fwrite($fp, "test ok");
+        fwrite($fp, "\n");
+        fclose($fp);
+
+
+        if(strpos($result, 'ok') && !strpos($result, 'error'))
+        {
+            return PASSWORD_SUCCESS;
+        }
+        else {
+            return PASSWORD_ERROR;
+        }
+
+    }
+}
diff --git a/install/debian/13/sudo/admin b/install/debian/13/sudo/admin
new file mode 100644
index 00000000..331fa1f2
--- /dev/null
+++ b/install/debian/13/sudo/admin
@@ -0,0 +1,8 @@
+# Created by vesta installer
+Defaults env_keep="VESTA"
+Defaults:admin !syslog
+Defaults:admin !requiretty
+Defaults:root !requiretty
+
+# sudo is limited to vesta scripts
+admin   ALL=NOPASSWD:/usr/local/vesta/bin/*
diff --git a/install/debian/13/templates/dns/child-ns.tpl b/install/debian/13/templates/dns/child-ns.tpl
new file mode 100644
index 00000000..42c046e4
--- /dev/null
+++ b/install/debian/13/templates/dns/child-ns.tpl
@@ -0,0 +1,14 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns1.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='ns2.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ns1' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='ns2' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/13/templates/dns/default.tpl b/install/debian/13/templates/dns/default.tpl
new file mode 100644
index 00000000..e0a37e62
--- /dev/null
+++ b/install/debian/13/templates/dns/default.tpl
@@ -0,0 +1,18 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='smtp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='pop' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='imap' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mail.%domain%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/13/templates/dns/gmail.tpl b/install/debian/13/templates/dns/gmail.tpl
new file mode 100644
index 00000000..219c9d24
--- /dev/null
+++ b/install/debian/13/templates/dns/gmail.tpl
@@ -0,0 +1,12 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='localhost' TYPE='A' PRIORITY='' VALUE='127.0.0.1' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='MX' PRIORITY='1' VALUE='ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT1.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='MX' PRIORITY='5' VALUE='ALT2.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT3.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='ALT4.ASPMX.L.GOOGLE.COM.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.google.com ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/13/templates/dns/office365.tpl b/install/debian/13/templates/dns/office365.tpl
new file mode 100644
index 00000000..dcf556e1
--- /dev/null
+++ b/install/debian/13/templates/dns/office365.tpl
@@ -0,0 +1,22 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:spf.protection.outlook.com -all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='@' TYPE='MX' PRIORITY='0' VALUE='XXXXXXX.mail.protection.outlook.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"MS=msXXXX"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='autodiscover' TYPE='CNAME' PRIORITY='' VALUE='autodiscover.outlook.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='17' RECORD='sip' TYPE='CNAME' PRIORITY='' VALUE='sipdir.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='18' RECORD='lyncdiscover' TYPE='CNAME' PRIORITY='' VALUE='webdir.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='19' RECORD='enterpriseregistration' TYPE='CNAME' PRIORITY='' VALUE='enterpriseregistration.windows.net.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='20' RECORD='enterpriseenrollment' TYPE='CNAME' PRIORITY='' VALUE='enterpriseenrollment.manage.microsoft.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='21' RECORD='_sip._tls' TYPE='SRV' PRIORITY='100 1 443' VALUE='sipdir.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='22' RECORD='_sipfederationtls._tcp' TYPE='SRV' PRIORITY='100 1 5061' VALUE='sipfed.online.lync.com.' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/13/templates/dns/yandex.tpl b/install/debian/13/templates/dns/yandex.tpl
new file mode 100644
index 00000000..4ce768fe
--- /dev/null
+++ b/install/debian/13/templates/dns/yandex.tpl
@@ -0,0 +1,16 @@
+ID='1' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns1%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='2' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns2%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='3' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns3%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='4' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns4%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='5' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns5%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='6' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns6%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='7' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns7%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='8' RECORD='@' TYPE='NS' PRIORITY='' VALUE='%ns8%.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='9' RECORD='@' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='10' RECORD='www' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='11' RECORD='ftp' TYPE='A' PRIORITY='' VALUE='%ip%' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='12' RECORD='mail' TYPE='CNAME' PRIORITY='' VALUE='domain.mail.yandex.net.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='13' RECORD='@' TYPE='MX' PRIORITY='10' VALUE='mx.yandex.net.' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='14' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"v=spf1 a mx ip4:%ip% include:_spf.yandex.net ~all"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='15' RECORD='_dmarc' TYPE='TXT' PRIORITY='' VALUE='"v=DMARC1; p=none"' SUSPENDED='no' TIME='%time%' DATE='%date%'
+ID='16' RECORD='@' TYPE='TXT' PRIORITY='' VALUE='"yandex-verification: XXXXXXXXXXXXXXX"' SUSPENDED='no' TIME='%time%' DATE='%date%'
diff --git a/install/debian/13/templates/web/apache2/PHP-FPM-84-public.sh b/install/debian/13/templates/web/apache2/PHP-FPM-84-public.sh
new file mode 100644
index 00000000..cbea2de9
--- /dev/null
+++ b/install/debian/13/templates/web/apache2/PHP-FPM-84-public.sh
@@ -0,0 +1,133 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php8.4-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 360s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
+pool_file_82="/etc/php/8.2/fpm/pool.d/$2.conf"
+pool_file_83="/etc/php/8.3/fpm/pool.d/$2.conf"
+pool_file_84="/etc/php/8.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+if [ -f "$pool_file_81" ]; then
+    rm $pool_file_81
+    systemctl reset-failed php8.1-fpm
+    systemctl restart php8.1-fpm
+fi
+
+if [ -f "$pool_file_82" ]; then
+    rm $pool_file_82
+    systemctl reset-failed php8.2-fpm
+    systemctl restart php8.2-fpm
+fi
+
+if [ -f "$pool_file_83" ]; then
+    rm $pool_file_83
+    systemctl reset-failed php8.3-fpm
+    systemctl restart php8.3-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_84" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_84)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_84
+    systemctl reset-failed php8.4-fpm
+    systemctl restart php8.4-fpm
+fi
+if [ -f "/etc/php/8.4/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.4/fpm/pool.d/www.conf
+fi
+
+exit 0
diff --git a/install/debian/13/templates/web/apache2/PHP-FPM-84-public.stpl b/install/debian/13/templates/web/apache2/PHP-FPM-84-public.stpl
new file mode 100644
index 00000000..91e05b17
--- /dev/null
+++ b/install/debian/13/templates/web/apache2/PHP-FPM-84-public.stpl
@@ -0,0 +1,36 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/13/templates/web/apache2/PHP-FPM-84-public.tpl b/install/debian/13/templates/web/apache2/PHP-FPM-84-public.tpl
new file mode 100644
index 00000000..94acbf15
--- /dev/null
+++ b/install/debian/13/templates/web/apache2/PHP-FPM-84-public.tpl
@@ -0,0 +1,30 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%/public
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
+    </Directory>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/13/templates/web/apache2/PHP-FPM-84.sh b/install/debian/13/templates/web/apache2/PHP-FPM-84.sh
new file mode 100644
index 00000000..cbea2de9
--- /dev/null
+++ b/install/debian/13/templates/web/apache2/PHP-FPM-84.sh
@@ -0,0 +1,133 @@
+#!/bin/bash
+# Adding php pool conf
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+pool_conf="[$2]
+
+listen = /run/php/php8.4-fpm-$2.sock
+listen.owner = $1
+listen.group = $1
+listen.mode = 0666
+
+user = $1
+group = $1
+
+pm = ondemand
+pm.max_children = 8
+request_terminate_timeout = 360s
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/$1/tmp
+php_admin_value[session.save_path] = /home/$1/tmp
+php_admin_value[open_basedir] = $5:/home/$1/tmp:/bin:/usr/bin:/usr/local/bin:/var/www/html:/tmp:/usr/share:/etc/phpmyadmin:/var/lib/phpmyadmin:/etc/roundcube:/var/log/roundcube:/var/lib/roundcube
+php_admin_value[upload_max_filesize] = 800M
+php_admin_value[max_execution_time] = 300
+php_admin_value[post_max_size] = 800M
+php_admin_value[memory_limit] = 512M
+php_admin_value[sendmail_path] = \"/usr/sbin/sendmail -t -i -f info@$2\"
+php_admin_flag[mysql.allow_persistent] = off
+php_admin_flag[safe_mode] = off
+
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/$1/tmp
+env[TMPDIR] = /home/$1/tmp
+env[TEMP] = /home/$1/tmp
+"
+
+pool_file_56="/etc/php/5.6/fpm/pool.d/$2.conf"
+pool_file_70="/etc/php/7.0/fpm/pool.d/$2.conf"
+pool_file_71="/etc/php/7.1/fpm/pool.d/$2.conf"
+pool_file_72="/etc/php/7.2/fpm/pool.d/$2.conf"
+pool_file_73="/etc/php/7.3/fpm/pool.d/$2.conf"
+pool_file_74="/etc/php/7.4/fpm/pool.d/$2.conf"
+pool_file_80="/etc/php/8.0/fpm/pool.d/$2.conf"
+pool_file_81="/etc/php/8.1/fpm/pool.d/$2.conf"
+pool_file_82="/etc/php/8.2/fpm/pool.d/$2.conf"
+pool_file_83="/etc/php/8.3/fpm/pool.d/$2.conf"
+pool_file_84="/etc/php/8.4/fpm/pool.d/$2.conf"
+
+if [ -f "$pool_file_56" ]; then
+    rm $pool_file_56
+    systemctl reset-failed php5.6-fpm
+    systemctl restart php5.6-fpm
+fi
+
+if [ -f "$pool_file_70" ]; then
+    rm $pool_file_70
+    systemctl reset-failed php7.0-fpm
+    systemctl restart php7.0-fpm
+fi
+
+if [ -f "$pool_file_71" ]; then
+    rm $pool_file_71
+    systemctl reset-failed php7.1-fpm
+    systemctl restart php7.1-fpm
+fi
+
+if [ -f "$pool_file_72" ]; then
+    rm $pool_file_72
+    systemctl reset-failed php7.2-fpm
+    systemctl restart php7.2-fpm
+fi
+
+if [ -f "$pool_file_73" ]; then
+    rm $pool_file_73
+    systemctl reset-failed php7.3-fpm
+    systemctl restart php7.3-fpm
+fi
+
+if [ -f "$pool_file_74" ]; then
+    rm $pool_file_74
+    systemctl reset-failed php7.4-fpm
+    systemctl restart php7.4-fpm
+fi
+
+if [ -f "$pool_file_80" ]; then
+    rm $pool_file_80
+    systemctl reset-failed php8.0-fpm
+    systemctl restart php8.0-fpm
+fi
+
+if [ -f "$pool_file_81" ]; then
+    rm $pool_file_81
+    systemctl reset-failed php8.1-fpm
+    systemctl restart php8.1-fpm
+fi
+
+if [ -f "$pool_file_82" ]; then
+    rm $pool_file_82
+    systemctl reset-failed php8.2-fpm
+    systemctl restart php8.2-fpm
+fi
+
+if [ -f "$pool_file_83" ]; then
+    rm $pool_file_83
+    systemctl reset-failed php8.3-fpm
+    systemctl restart php8.3-fpm
+fi
+
+write_file=0
+if [ ! -f "$pool_file_84" ]; then
+  write_file=1
+else
+  user_count=$(grep -c "/home/$1/" $pool_file_84)
+  if [ $user_count -eq 0 ]; then
+    write_file=1
+  fi
+fi
+if [ $write_file -eq 1 ]; then
+    echo "$pool_conf" > $pool_file_84
+    systemctl reset-failed php8.4-fpm
+    systemctl restart php8.4-fpm
+fi
+if [ -f "/etc/php/8.4/fpm/pool.d/www.conf" ]; then
+    rm /etc/php/8.4/fpm/pool.d/www.conf
+fi
+
+exit 0
diff --git a/install/debian/13/templates/web/apache2/PHP-FPM-84.stpl b/install/debian/13/templates/web/apache2/PHP-FPM-84.stpl
new file mode 100644
index 00000000..848abf7c
--- /dev/null
+++ b/install/debian/13/templates/web/apache2/PHP-FPM-84.stpl
@@ -0,0 +1,36 @@
+<VirtualHost %ip%:%web_ssl_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %sdocroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        SSLRequireSSL
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
+    </Directory>
+    SSLEngine on
+    SSLVerifyClient none
+    SSLCertificateFile %ssl_crt%
+    SSLCertificateKeyFile %ssl_key%
+    %ssl_ca_str%SSLCertificateChainFile %ssl_ca%
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/s%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/13/templates/web/apache2/PHP-FPM-84.tpl b/install/debian/13/templates/web/apache2/PHP-FPM-84.tpl
new file mode 100644
index 00000000..065c1f89
--- /dev/null
+++ b/install/debian/13/templates/web/apache2/PHP-FPM-84.tpl
@@ -0,0 +1,30 @@
+<VirtualHost %ip%:%web_port%>
+
+    ServerName %domain_idn%
+    %alias_string%
+    ServerAdmin %email%
+    DocumentRoot %docroot%
+    ScriptAlias /cgi-bin/ %home%/%user%/web/%domain%/cgi-bin/
+    Alias /vstats/ %home%/%user%/web/%domain%/stats/
+    Alias /error/ %home%/%user%/web/%domain%/document_errors/
+    #SuexecUserGroup %user% %group%
+    CustomLog /var/log/%web_system%/domains/%domain%.bytes bytes
+    CustomLog /var/log/%web_system%/domains/%domain%.log combined
+    ErrorLog /var/log/%web_system%/domains/%domain%.error.log
+    <Directory %home%/%user%/web/%domain%/stats>
+        AllowOverride All
+    </Directory>
+    <Directory %sdocroot%>
+        AllowOverride All
+        Options +Includes -Indexes -FollowSymLinks +SymLinksIfOwnerMatch
+    </Directory>
+
+    <FilesMatch \.php$>
+        SetHandler "proxy:unix:/run/php/php8.4-fpm-%domain%.sock|fcgi://localhost/"
+    </FilesMatch>
+    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
+
+    IncludeOptional %home%/%user%/conf/web/%web_system%.%domain%.conf*
+
+</VirtualHost>
+
diff --git a/install/debian/13/templates/web/awstats/awstats.tpl b/install/debian/13/templates/web/awstats/awstats.tpl
new file mode 100644
index 00000000..6bb51c50
--- /dev/null
+++ b/install/debian/13/templates/web/awstats/awstats.tpl
@@ -0,0 +1,133 @@
+LogFile="/var/log/%web_system%/domains/%domain%.log"
+LogType=W
+LogFormat=1
+LogSeparator=" "
+SiteDomain="%domain_idn%"
+HostAliases="%alias_idn%"
+DirData="%home%/%user%/web/%domain%/stats"
+DirCgi="/vstats"
+DirIcons="/vstats/icon"
+AllowToUpdateStatsFromBrowser=0
+AllowFullYearView=2
+EnableLockForUpdate=1
+DNSStaticCacheFile="dnscache.txt"
+DNSLastUpdateCacheFile="dnscachelastupdate.txt"
+SkipDNSLookupFor=""
+AllowAccessFromWebToAuthenticatedUsersOnly=0
+AllowAccessFromWebToFollowingAuthenticatedUsers=""
+AllowAccessFromWebToFollowingIPAddresses=""
+CreateDirDataIfNotExists=0
+BuildHistoryFormat=text
+BuildReportFormat=html
+SaveDatabaseFilesWithPermissionsForEveryone=0
+PurgeLogFile=0
+ArchiveLogRecords=0
+KeepBackupOfHistoricFiles=1
+DefaultFile="index.php index.html"
+SkipHosts="127.0.0.1"
+SkipUserAgents=""
+SkipFiles=""
+SkipReferrersBlackList=""
+OnlyHosts=""
+OnlyUserAgents=""
+OnlyUsers=""
+OnlyFiles=""
+NotPageList="css js class gif jpg jpeg png bmp ico rss xml swf"
+ValidHTTPCodes="200 304"
+ValidSMTPCodes="1 250"
+AuthenticatedUsersNotCaseSensitive=0
+URLNotCaseSensitive=0
+URLWithAnchor=0
+URLQuerySeparators="?;"
+URLWithQuery=0
+URLWithQueryWithOnlyFollowingParameters=""
+URLWithQueryWithoutFollowingParameters=""
+URLReferrerWithQuery=0
+WarningMessages=1
+ErrorMessages=""
+DebugMessages=0
+NbOfLinesForCorruptedLog=50
+WrapperScript=""
+DecodeUA=0
+MiscTrackerUrl="/js/awstats_misc_tracker.js"
+UseFramesWhenCGI=1
+DetailedReportsOnNewWindows=1
+Expires=3600
+MaxRowsInHTMLOutput=1000
+Lang="auto"
+DirLang="./lang"
+ShowMenu=1
+ShowSummary=UVPHB
+ShowMonthStats=UVPHB
+ShowDaysOfMonthStats=VPHB
+ShowDaysOfWeekStats=PHB
+ShowHoursStats=PHB
+ShowDomainsStats=PHB
+ShowHostsStats=PHBL
+ShowAuthenticatedUsers=0
+ShowRobotsStats=HBL
+ShowWormsStats=0
+ShowEMailSenders=0
+ShowEMailReceivers=0
+ShowSessionsStats=1
+ShowPagesStats=PBEX
+ShowFileTypesStats=HB
+ShowFileSizesStats=0
+ShowDownloadsStats=HB
+ShowOSStats=1
+ShowBrowsersStats=1
+ShowScreenSizeStats=0
+ShowOriginStats=PH
+ShowKeyphrasesStats=1
+ShowKeywordsStats=1
+ShowMiscStats=a
+ShowHTTPErrorsStats=1
+ShowSMTPErrorsStats=0
+ShowClusterStats=0
+AddDataArrayMonthStats=1
+AddDataArrayShowDaysOfMonthStats=1
+AddDataArrayShowDaysOfWeekStats=1
+AddDataArrayShowHoursStats=1
+IncludeInternalLinksInOriginSection=0
+MaxNbOfDomain = 10
+MinHitDomain  = 1
+MaxNbOfHostsShown = 10
+MinHitHost    = 1
+MaxNbOfLoginShown = 10
+MinHitLogin   = 1
+MaxNbOfRobotShown = 10
+MinHitRobot   = 1
+MaxNbOfDownloadsShown = 10
+MinHitDownloads = 1
+MaxNbOfPageShown = 10
+MinHitFile    = 1
+MaxNbOfOsShown = 10
+MinHitOs      = 1
+MaxNbOfBrowsersShown = 10
+MinHitBrowser = 1
+MaxNbOfScreenSizesShown = 5
+MinHitScreenSize = 1
+MaxNbOfWindowSizesShown = 5
+MinHitWindowSize = 1
+MaxNbOfRefererShown = 10
+MinHitRefer   = 1
+MaxNbOfKeyphrasesShown = 10
+MinHitKeyphrase = 1
+MaxNbOfKeywordsShown = 10
+MinHitKeyword = 1
+MaxNbOfEMailsShown = 20
+MinHitEMail   = 1
+FirstDayOfWeek=0
+ShowFlagLinks=""
+ShowLinksOnUrl=1
+UseHTTPSLinkForUrl=""
+MaxLengthOfShownURL=64
+HTMLHeadSection=""
+HTMLEndSection=""
+MetaRobot=0
+Logo="awstats_logo6.png"
+LogoLink="http://awstats.sourceforge.net"
+BarWidth   = 260
+BarHeight  = 90
+StyleSheet=""
+ExtraTrackedRowsLimit=500
diff --git a/install/debian/13/templates/web/awstats/index.tpl b/install/debian/13/templates/web/awstats/index.tpl
new file mode 100644
index 00000000..9df9bb5c
--- /dev/null
+++ b/install/debian/13/templates/web/awstats/index.tpl
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+    <title>Awstats log analyzer </title>
+</head>
+<frameset rows="60,*" cols="*">
+    <frame src="nav.html" name="nav" scrolling="no" noresize>
+    <frame src="%month%/index.html" name="stats">
+</frameset>
+</html>
diff --git a/install/debian/13/templates/web/awstats/nav.tpl b/install/debian/13/templates/web/awstats/nav.tpl
new file mode 100644
index 00000000..f29bed68
--- /dev/null
+++ b/install/debian/13/templates/web/awstats/nav.tpl
@@ -0,0 +1,23 @@
+<html>
+<head>
+    <title>Awstats navigation</title>
+    <script language="javascript">
+        function change() {
+            top.stats.location= document.period.select.value + '/';
+        }
+    </script>
+</head>
+<body>
+<table width="100%" border="0" cellspacing="0" cellpadding="0">
+<tr>
+    <td><img src="logo.png" alt="vesta"></td>
+    <td><form name="period" action="" method="get">
+        <select name="select" ONCHANGE="change()">
+%select_month%
+        </select>
+    </form>
+    </td>
+</tr>
+</table>
+</body>
+</html>
diff --git a/install/debian/13/templates/web/nginx/caching.sh b/install/debian/13/templates/web/nginx/caching.sh
new file mode 100644
index 00000000..09d8efe7
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/caching.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+user=$1
+domain=$2
+ip=$3
+home=$4
+docroot=$5
+
+str="proxy_cache_path /var/cache/nginx/$domain levels=2" 
+str="$str keys_zone=$domain:10m inactive=60m max_size=512m;" 
+conf='/etc/nginx/conf.d/01_caching_pool.conf'
+if [ -e "$conf" ]; then
+    if [ -z "$(grep "=${domain}:" $conf)" ]; then
+        echo "$str" >> $conf
+    fi
+else
+    echo "$str" >> $conf
+fi
+
diff --git a/install/debian/13/templates/web/nginx/caching.stpl b/install/debian/13/templates/web/nginx/caching.stpl
new file mode 100644
index 00000000..f5c9740f
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/caching.stpl
@@ -0,0 +1,44 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/caching.tpl b/install/debian/13/templates/web/nginx/caching.tpl
new file mode 100644
index 00000000..73de28d5
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/caching.tpl
@@ -0,0 +1,42 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+
+        proxy_cache cache;
+        proxy_cache_valid 15m;
+        proxy_cache_valid 404 1m;
+        proxy_no_cache $no_cache;
+        proxy_cache_bypass $no_cache;
+        proxy_cache_bypass $cookie_session $http_x_update;
+
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            proxy_cache    off;
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/force-https-legacy.stpl b/install/debian/13/templates/web/nginx/force-https-legacy.stpl
new file mode 100644
index 00000000..8e636db3
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/force-https-legacy.stpl
@@ -0,0 +1,40 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/force-https-legacy.tpl b/install/debian/13/templates/web/nginx/force-https-legacy.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/force-https-legacy.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/13/templates/web/nginx/force-https-public.stpl b/install/debian/13/templates/web/nginx/force-https-public.stpl
new file mode 100644
index 00000000..a7609b13
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/force-https-public.stpl
@@ -0,0 +1,40 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/13/templates/web/nginx/force-https-public.tpl b/install/debian/13/templates/web/nginx/force-https-public.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/force-https-public.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/13/templates/web/nginx/force-https-webmail-phpmyadmin.stpl b/install/debian/13/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
new file mode 100644
index 00000000..2db9a06e
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/force-https-webmail-phpmyadmin.stpl
@@ -0,0 +1,64 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/13/templates/web/nginx/force-https-webmail-phpmyadmin.tpl b/install/debian/13/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/force-https-webmail-phpmyadmin.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/13/templates/web/nginx/force-https.stpl b/install/debian/13/templates/web/nginx/force-https.stpl
new file mode 100644
index 00000000..55f41002
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/force-https.stpl
@@ -0,0 +1,40 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/force-https.tpl b/install/debian/13/templates/web/nginx/force-https.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/13/templates/web/nginx/hosting-legacy.sh b/install/debian/13/templates/web/nginx/hosting-legacy.sh
new file mode 100644
index 00000000..eeed37ef
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/hosting-legacy.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/13/templates/web/nginx/hosting-legacy.stpl b/install/debian/13/templates/web/nginx/hosting-legacy.stpl
new file mode 100644
index 00000000..efdd3b87
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/hosting-legacy.stpl
@@ -0,0 +1,40 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
+    server_name %domain_idn% %alias_idn%;
+    
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/13/templates/web/nginx/hosting-legacy.tpl b/install/debian/13/templates/web/nginx/hosting-legacy.tpl
new file mode 100644
index 00000000..a41d4054
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/hosting-legacy.tpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/13/templates/web/nginx/hosting-public.stpl b/install/debian/13/templates/web/nginx/hosting-public.stpl
new file mode 100644
index 00000000..a7609b13
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/hosting-public.stpl
@@ -0,0 +1,40 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/13/templates/web/nginx/hosting-public.tpl b/install/debian/13/templates/web/nginx/hosting-public.tpl
new file mode 100644
index 00000000..f5d8b327
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/hosting-public.tpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%/public;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%/public;
+
+    include %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/13/templates/web/nginx/hosting-webmail-phpmyadmin.stpl b/install/debian/13/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
new file mode 100644
index 00000000..2db9a06e
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/hosting-webmail-phpmyadmin.stpl
@@ -0,0 +1,64 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/13/templates/web/nginx/hosting-webmail-phpmyadmin.tpl b/install/debian/13/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
new file mode 100644
index 00000000..f84f4781
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/hosting-webmail-phpmyadmin.tpl
@@ -0,0 +1,60 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /webmail {
+        disable_symlinks off;
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /var/lib/roundcube;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /phpmyadmin {
+        disable_symlinks off;
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           /usr/share;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/13/templates/web/nginx/hosting.sh b/install/debian/13/templates/web/nginx/hosting.sh
new file mode 100644
index 00000000..eeed37ef
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/13/templates/web/nginx/hosting.stpl b/install/debian/13/templates/web/nginx/hosting.stpl
new file mode 100644
index 00000000..5745311e
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/hosting.stpl
@@ -0,0 +1,40 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
+
diff --git a/install/debian/13/templates/web/nginx/hosting.tpl b/install/debian/13/templates/web/nginx/hosting.tpl
new file mode 100644
index 00000000..61469ad2
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/hosting.tpl
@@ -0,0 +1,36 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
+
diff --git a/install/debian/13/templates/web/nginx/php-fpm/cms_made_simple.stpl b/install/debian/13/templates/web/nginx/php-fpm/cms_made_simple.stpl
new file mode 100644
index 00000000..cf8fad56
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/cms_made_simple.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/cms_made_simple.tpl b/install/debian/13/templates/web/nginx/php-fpm/cms_made_simple.tpl
new file mode 100644
index 00000000..f9e90393
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/cms_made_simple.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?page=$request_uri;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/codeigniter2.stpl b/install/debian/13/templates/web/nginx/php-fpm/codeigniter2.stpl
new file mode 100644
index 00000000..5931f617
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/codeigniter2.stpl
@@ -0,0 +1,60 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/codeigniter2.tpl b/install/debian/13/templates/web/nginx/php-fpm/codeigniter2.tpl
new file mode 100644
index 00000000..d2422be2
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/codeigniter2.tpl
@@ -0,0 +1,57 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location = /index.php {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME /var/www/html/ci$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ \.php$ {
+        return 444;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/codeigniter3.stpl b/install/debian/13/templates/web/nginx/php-fpm/codeigniter3.stpl
new file mode 100644
index 00000000..3c2793d1
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/codeigniter3.stpl
@@ -0,0 +1,55 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/codeigniter3.tpl b/install/debian/13/templates/web/nginx/php-fpm/codeigniter3.tpl
new file mode 100644
index 00000000..54f81b99
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/codeigniter3.tpl
@@ -0,0 +1,52 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/datalife_engine.stpl b/install/debian/13/templates/web/nginx/php-fpm/datalife_engine.stpl
new file mode 100644
index 00000000..bb9a727b
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/datalife_engine.stpl
@@ -0,0 +1,126 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/datalife_engine.tpl b/install/debian/13/templates/web/nginx/php-fpm/datalife_engine.tpl
new file mode 100644
index 00000000..3ea45347
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/datalife_engine.tpl
@@ -0,0 +1,123 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        rewrite "^/page/([0-9]+)(/?)$" /index.php?cstart=$1 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&cstart=$5&news_name=$6&seourl=$6 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page,([0-9]+),(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/print:page,([0-9]+),(.*).html(/?)+$" /engine/print.php?subaction=showfull&year=$1&month=$2&day=$3&news_page=$4&news_name=$5&seourl=$5 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/(.*).html(/?)+$" /index.php?subaction=showfull&year=$1&month=$2&day=$3&news_name=$4&seourl=$4 last;
+
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$4&news_page=$2&cstart=$3&seourl=$5&seocat=$1 last;
+        rewrite "^/([^.]+)/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$2&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$2&newsid=$3&seourl=$4&seocat=$1 last;
+        rewrite "^/([^.]+)/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&seourl=$3&seocat=$1 last;
+
+        rewrite "^/page,([0-9]+),([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$3&news_page=$1&cstart=$2&seourl=$4 last;
+        rewrite "^/page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$2&news_page=$1&seourl=$3 last;
+        rewrite "^/print:page,([0-9]+),([0-9]+)-(.*).html(/?)+$" /engine/print.php?news_page=$1&newsid=$2&seourl=$3 last;
+        rewrite "^/([0-9]+)-(.*).html(/?)+$" /index.php?newsid=$1&seourl=$2 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2&day=$3 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&day=$3&cstart=$4 last;
+
+        rewrite "^/([0-9]{4})/([0-9]{2})(/?)+$" /index.php?year=$1&month=$2 last;
+        rewrite "^/([0-9]{4})/([0-9]{2})/page/([0-9]+)(/?)+$" /index.php?year=$1&month=$2&cstart=$3 last;
+
+        rewrite "^/([0-9]{4})(/?)+$" /index.php?year=$1 last;
+        rewrite "^/([0-9]{4})/page/([0-9]+)(/?)+$" /index.php?year=$1&cstart=$2 last;
+
+        rewrite "^/tags/([^/]*)(/?)+$" /index.php?do=tags&tag=$1 last;
+        rewrite "^/tags/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=tags&tag=$1&cstart=$2 last;
+
+        rewrite "^/xfsearch/([^/]*)(/?)+$" /index.php?do=xfsearch&xf=$1 last;
+        rewrite "^/xfsearch/([^/]*)/page/([0-9]+)(/?)+$" /index.php?do=xfsearch&xf=$1&cstart=$2 last;
+
+        rewrite "^/user/([^/]*)/rss.xml$" /engine/rss.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)(/?)+$" /index.php?subaction=userinfo&user=$1 last;
+        rewrite "^/user/([^/]*)/page/([0-9]+)(/?)+$" /index.php?subaction=userinfo&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news(/?)+$" /index.php?subaction=allnews&user=$1 last;
+        rewrite "^/user/([^/]*)/news/page/([0-9]+)(/?)+$" /index.php?subaction=allnews&user=$1&cstart=$2 last;
+        rewrite "^/user/([^/]*)/news/rss.xml(/?)+$" /engine/rss.php?subaction=allnews&user=$1 last;
+
+        rewrite "^/lastnews(/?)+$" /index.php?do=lastnews last;
+        rewrite "^/lastnews/page/([0-9]+)(/?)+$" /index.php?do=lastnews&cstart=$1 last;
+
+        rewrite "^/catalog/([^/]*)/rss.xml$" /engine/rss.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)(/?)+$" /index.php?catalog=$1 last;
+        rewrite "^/catalog/([^/]*)/page/([0-9]+)(/?)+$" /index.php?catalog=$1&cstart=$2 last;
+
+        rewrite "^/newposts(/?)+$" /index.php?subaction=newposts last;
+        rewrite "^/newposts/page/([0-9]+)(/?)+$" /index.php?subaction=newposts&cstart=$1 last;
+
+        rewrite "^/favorites(/?)+$" /index.php?do=favorites last;
+        rewrite "^/favorites/page/([0-9]+)(/?)+$" /index.php?do=favorites&cstart=$1 last;
+
+        rewrite "^/rules.html$" /index.php?do=rules last;
+        rewrite "^/statistics.html$" /index.php?do=stats last;
+        rewrite "^/addnews.html$" /index.php?do=addnews last;
+        rewrite "^/rss.xml$" /engine/rss.php last;
+        rewrite "^/sitemap.xml$" /uploads/sitemap.xml last;
+
+        if (!-d $request_filename) {
+                rewrite "^/([^.]+)/page/([0-9]+)(/?)+$" /index.php?do=cat&category=$1&cstart=$2 last;
+                rewrite "^/([^.]+)/?$" /index.php?do=cat&category=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^.]+)/rss.xml$" /engine/rss.php?do=cat&category=$1 last;
+                rewrite "^/page,([0-9]+),([^/]+).html$" /index.php?do=static&page=$2&news_page=$1 last;
+                rewrite "^/print:([^/]+).html$" /engine/print.php?do=static&page=$1 last;
+        }
+
+        if (!-f $request_filename) {
+                rewrite "^/([^/]+).html$" /index.php?do=static&page=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/default.stpl b/install/debian/13/templates/web/nginx/php-fpm/default.stpl
new file mode 100644
index 00000000..f9c01e40
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/default.stpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/default.tpl b/install/debian/13/templates/web/nginx/php-fpm/default.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/default.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/dokuwiki.stpl b/install/debian/13/templates/web/nginx/php-fpm/dokuwiki.stpl
new file mode 100644
index 00000000..a7564705
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/dokuwiki.stpl
@@ -0,0 +1,71 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/dokuwiki.tpl b/install/debian/13/templates/web/nginx/php-fpm/dokuwiki.tpl
new file mode 100644
index 00000000..0a9a75ed
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/dokuwiki.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        index doku.php;
+        try_files $uri $uri/ @dokuwiki;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+        expires 30d;
+    }
+
+    location ^~ /conf/ { return 403; }
+    location ^~ /data/ { return 403; }
+    location @dokuwiki {
+        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+        rewrite ^/(.*) /doku.php?id=$1 last;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/drupal6.stpl b/install/debian/13/templates/web/nginx/php-fpm/drupal6.stpl
new file mode 100644
index 00000000..6e67a4e0
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/drupal6.stpl
@@ -0,0 +1,94 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri @rewrite;
+    }
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }    
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/drupal6.tpl b/install/debian/13/templates/web/nginx/php-fpm/drupal6.tpl
new file mode 100644
index 00000000..d1096bff
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/drupal6.tpl
@@ -0,0 +1,91 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+
+    location / {
+        try_files $uri @rewrite;
+    }
+
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+    
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }    
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ ^/sites/.*/files/imagecache/ {
+        try_files $uri @rewrite;
+    }
+        
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;             
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/drupal7.stpl b/install/debian/13/templates/web/nginx/php-fpm/drupal7.stpl
new file mode 100644
index 00000000..32f01a6f
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/drupal7.stpl
@@ -0,0 +1,94 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/drupal7.tpl b/install/debian/13/templates/web/nginx/php-fpm/drupal7.tpl
new file mode 100644
index 00000000..c9729795
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/drupal7.tpl
@@ -0,0 +1,91 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/drupal8.stpl b/install/debian/13/templates/web/nginx/php-fpm/drupal8.stpl
new file mode 100644
index 00000000..32f01a6f
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/drupal8.stpl
@@ -0,0 +1,94 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+    
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/drupal8.tpl b/install/debian/13/templates/web/nginx/php-fpm/drupal8.tpl
new file mode 100644
index 00000000..c9729795
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/drupal8.tpl
@@ -0,0 +1,91 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+    
+    location ~ ^/sites/[^/]+/files/.*\.php$ {
+        deny all;
+    }
+    
+    location / {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ /vendor/.*\.php$ {
+        deny all;
+        return 404;
+    }        
+
+    location ~ ^/sites/.*/files/styles/ {
+        try_files $uri @rewrite;
+    }
+
+    location ~ ^(/[a-z\-]+)?/system/files/ {
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        try_files $uri @rewrite;
+        expires max;
+        log_not_found off;
+    }
+
+    location ~ '\.php$|^/update.php' {
+        fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_pass %backend_lsnr%;
+        include         /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/joomla.stpl b/install/debian/13/templates/web/nginx/php-fpm/joomla.stpl
new file mode 100644
index 00000000..d4f96ee3
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/joomla.stpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/joomla.tpl b/install/debian/13/templates/web/nginx/php-fpm/joomla.tpl
new file mode 100644
index 00000000..91b7a8f1
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/joomla.tpl
@@ -0,0 +1,59 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        # deny running scripts inside writable directories
+        location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
+            return 403;
+            error_page 403 /403_error.html;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/laravel.stpl b/install/debian/13/templates/web/nginx/php-fpm/laravel.stpl
new file mode 100644
index 00000000..db0b4dde
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/laravel.stpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/laravel.tpl b/install/debian/13/templates/web/nginx/php-fpm/laravel.tpl
new file mode 100644
index 00000000..d14b0173
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/laravel.tpl
@@ -0,0 +1,50 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/magento.stpl b/install/debian/13/templates/web/nginx/php-fpm/magento.stpl
new file mode 100644
index 00000000..f8ac30c9
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/magento.stpl
@@ -0,0 +1,197 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %sdocroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %sdocroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %sdocroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %sdocroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/magento.tpl b/install/debian/13/templates/web/nginx/php-fpm/magento.tpl
new file mode 100644
index 00000000..3f292fff
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/magento.tpl
@@ -0,0 +1,194 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+
+    root        %docroot%/pub;
+    index       index.php;
+    autoindex   off;
+    charset     UTF-8;
+    error_page  404 403 = /errors/404.php;
+    add_header  "X-UA-Compatible" "IE=Edge";
+
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    # PHP entry point for setup application
+    location ~* ^/setup($|/) {
+        root %docroot%;
+
+        location ~ ^/setup/index.php {
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        location ~ ^/setup/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/setup/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    # PHP entry point for update application
+    location ~* ^/update($|/) {
+        root %docroot%;
+
+        location ~ ^/update/index.php {
+            fastcgi_split_path_info ^(/update/index.php)(/.+)$;
+            fastcgi_pass   %backend_lsnr%;
+            fastcgi_index  index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            fastcgi_param  PATH_INFO        $fastcgi_path_info;
+            include        /etc/nginx/fastcgi_params;
+        }
+
+        # Deny everything but index.php
+        location ~ ^/update/(?!pub/). {
+            deny all;
+        }
+
+        location ~ ^/update/pub/ {
+            add_header X-Frame-Options "SAMEORIGIN";
+        }
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location /pub/ {
+        location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
+            deny all;
+        }
+
+        alias %docroot%/pub/;
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /static/ {
+        # Uncomment the following line in production mode
+        # expires max;
+
+        # Remove signature of the static files that is used to overcome the browser cache
+        location ~ ^/static/version {
+            rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+
+            if (!-f $request_filename) {
+                rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+            }
+        }
+
+        if (!-f $request_filename) {
+            rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/ {
+        try_files $uri $uri/ /get.php?$args;
+
+        location ~ ^/media/theme_customization/.*\.xml {
+            deny all;
+        }
+
+        location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
+            add_header Cache-Control "public";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires +1y;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+            add_header Cache-Control "no-store";
+            add_header X-Frame-Options "SAMEORIGIN";
+            expires    off;
+            try_files $uri $uri/ /get.php?$args;
+        }
+
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+
+    location /media/customer/ {
+        deny all;
+    }
+
+    location /media/downloadable/ {
+        deny all;
+    }
+
+    location /media/import/ {
+        deny all;
+    }
+
+    # PHP entry point for main application
+    location ~ (index|get|static|report|404|503)\.php$ {
+        try_files $uri =404;
+
+        fastcgi_pass   %backend_lsnr%;
+        fastcgi_buffers 1024 4k;
+        fastcgi_read_timeout 600s;
+        fastcgi_connect_timeout 600s;
+
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        include        /etc/nginx/fastcgi_params;
+    }
+
+    gzip on;
+    gzip_disable "msie6";
+
+    gzip_comp_level 6;
+    gzip_min_length 1100;
+    gzip_buffers 16 8k;
+    gzip_proxied any;
+    gzip_types
+        text/plain
+        text/css
+        text/js
+        text/xml
+        text/javascript
+        application/javascript
+        application/x-javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml;
+    gzip_vary on;
+
+    # Banned locations (only reached if the earlier PHP entry point regexes don't match)
+    location ~* (\.php$|\.htaccess$|\.git) {
+        deny all;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/modx.stpl b/install/debian/13/templates/web/nginx/php-fpm/modx.stpl
new file mode 100644
index 00000000..420aeb9e
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/modx.stpl
@@ -0,0 +1,68 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  https://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/modx.tpl b/install/debian/13/templates/web/nginx/php-fpm/modx.tpl
new file mode 100644
index 00000000..342d3ecf
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/modx.tpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+#   if you need to rewrite www to non-www uncomment bellow
+#   if ($host != '%domain%' ) {
+#       rewrite      ^/(.*)$  http://%domain%/$1  permanent;
+#    }
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ @rewrite;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+    location @rewrite {
+        rewrite ^/(.*)$ /index.php?q=$1;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_pass %backend_lsnr%;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $request_filename;
+        include /etc/nginx/fastcgi_params;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/moodle.stpl b/install/debian/13/templates/web/nginx/php-fpm/moodle.stpl
new file mode 100644
index 00000000..8594ec94
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/moodle.stpl
@@ -0,0 +1,89 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+    }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+            return 403;
+        }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/moodle.tpl b/install/debian/13/templates/web/nginx/php-fpm/moodle.tpl
new file mode 100644
index 00000000..c20ba648
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/moodle.tpl
@@ -0,0 +1,87 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    rewrite ^/(.*\.php)(/)(.*)$ /$1?file=/$3 last;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Very rarely should these ever be accessed outside of your lan
+    location ~* \.(txt|log)$ {
+        allow 192.168.0.0/16;
+        deny all;
+    }
+
+    location ~ \..*/.*\.php$ {
+        return 403;
+        }
+
+    # No no for private
+    location ~ ^/sites/.*/private/ {
+        return 403;
+    }
+
+    # Block access to "hidden" files and directories whose names begin with a
+    # period. This includes directories used by version control systems such
+    # as Subversion or Git to store control files.
+    location ~ (^|/)\. {
+        return 403;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param SCRIPT_FILENAME $request_filename;
+            fastcgi_intercept_errors on;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/no-php.stpl b/install/debian/13/templates/web/nginx/php-fpm/no-php.stpl
new file mode 100644
index 00000000..4bb50383
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/no-php.stpl
@@ -0,0 +1,46 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/no-php.tpl b/install/debian/13/templates/web/nginx/php-fpm/no-php.tpl
new file mode 100644
index 00000000..7ff8aa1d
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/no-php.tpl
@@ -0,0 +1,43 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    types {
+            text/html   html htm shtml php php5;
+    }
+
+    location / {
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/odoo.stpl b/install/debian/13/templates/web/nginx/php-fpm/odoo.stpl
new file mode 100644
index 00000000..e28afcfc
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/odoo.stpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+    
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/odoo.tpl b/install/debian/13/templates/web/nginx/php-fpm/odoo.tpl
new file mode 100644
index 00000000..b1240aae
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/odoo.tpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    
+    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
+    proxy_redirect          off;
+
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+
+    proxy_connect_timeout   720;
+    proxy_send_timeout      720;
+    proxy_read_timeout      720;
+    send_timeout            720;
+
+    # Allow "Well-Known URIs" as per RFC 5785
+    location ~* ^/.well-known/ {
+        allow all;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    location /longpolling {
+        proxy_pass http://127.0.0.1:8072;
+    }
+    
+    location ~* /web/static/ {
+        proxy_cache_valid 200 60m;
+        proxy_buffering on;
+        expires 864000;
+        proxy_pass http://127.0.0.1:8069;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/opencart.stpl b/install/debian/13/templates/web/nginx/php-fpm/opencart.stpl
new file mode 100644
index 00000000..52706d21
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/opencart.stpl
@@ -0,0 +1,58 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/opencart.tpl b/install/debian/13/templates/web/nginx/php-fpm/opencart.tpl
new file mode 100644
index 00000000..d0a9060b
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/opencart.tpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location / {
+        try_files $uri $uri/ @opencart;
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location @opencart {
+        rewrite ^/(.+)$ /index.php?_route_=$1 last;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/owncloud.stpl b/install/debian/13/templates/web/nginx/php-fpm/owncloud.stpl
new file mode 100644
index 00000000..1b803f97
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/owncloud.stpl
@@ -0,0 +1,84 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/owncloud.tpl b/install/debian/13/templates/web/nginx/php-fpm/owncloud.tpl
new file mode 100644
index 00000000..e3ec31de
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/owncloud.tpl
@@ -0,0 +1,81 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+            access_log off;
+    }
+
+    rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect;
+    rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect;
+    rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect;
+
+    error_page 403 = /core/templates/403.php;
+    error_page 404 = /core/templates/404.php;
+
+    location ~ ^/(?:\.htaccess|data|config|db_structure\.xml|README){
+        deny all;
+    }
+
+    location / {
+        # The following 2 rules are only needed with webfinger
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
+        rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
+        rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
+        rewrite ^(/core/doc/[^\/]+/)$ $1/index.html;
+        try_files $uri $uri/ /index.php;
+
+        location ~ \.php(?:$|/) {
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            include         /etc/nginx/fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $fastcgi_path_info;
+            #fastcgi_param HTTPS on;
+            fastcgi_pass    %backend_lsnr%;
+        }
+    }
+
+    location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+        expires     max;
+        # Some basic cache-control for static files to be sent to the browser
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    #error_page  403 /error/404.html;
+    #error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/piwik.stpl b/install/debian/13/templates/web/nginx/php-fpm/piwik.stpl
new file mode 100644
index 00000000..1b299343
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/piwik.stpl
@@ -0,0 +1,72 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+        return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+        }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/piwik.tpl b/install/debian/13/templates/web/nginx/php-fpm/piwik.tpl
new file mode 100644
index 00000000..f94fb7de
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/piwik.tpl
@@ -0,0 +1,69 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        try_files /favicon.ico =204;
+    }
+
+    location / {
+        try_files $uri /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            valid_referers none blocked %domain_idn% %alias_idn%;
+            if ($invalid_referer)  {
+                return 444;
+            }
+            expires     max;
+        }
+
+        location ~* ^/(?:index|piwik)\.php$ {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    # Any other attempt to access PHP files returns a 404.
+    location ~* ^.+\.php$ {
+            return 404; 
+    }
+
+    # Return a 404 for all text files.
+    location ~* ^/(?:README|LICENSE[^.]*|LEGALNOTICE)(?:\.txt)*$ {
+            return 404;
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/pyrocms.stpl b/install/debian/13/templates/web/nginx/php-fpm/pyrocms.stpl
new file mode 100644
index 00000000..d26ed9f4
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/pyrocms.stpl
@@ -0,0 +1,65 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+        }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/pyrocms.tpl b/install/debian/13/templates/web/nginx/php-fpm/pyrocms.tpl
new file mode 100644
index 00000000..b92861b0
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/pyrocms.tpl
@@ -0,0 +1,62 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%/public;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location /installer {
+            try_files $uri $uri/ /installer/index.php?$query_string;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    location = /robots.txt  { access_log off; log_not_found off; }
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location ~ /\.ht        { access_log off; log_not_found off; deny all; }
+    location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/sendy.stpl b/install/debian/13/templates/web/nginx/php-fpm/sendy.stpl
new file mode 100644
index 00000000..0b351000
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/sendy.stpl
@@ -0,0 +1,88 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+     location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/sendy.tpl b/install/debian/13/templates/web/nginx/php-fpm/sendy.tpl
new file mode 100644
index 00000000..b27b427d
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/sendy.tpl
@@ -0,0 +1,86 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* "/\.(htaccess|htpasswd|git|svn|DS_Store)$" {
+        deny all;
+    }
+
+    location ~ /(readme.html|license.txt) {
+        deny all;
+    }
+
+    if (!-f $request_filename){
+        rewrite ^/([a-zA-Z0-9-]+)$ /$1.php last;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        location ~* ^.+\.(ogg|ogv|svg|svgz|swf|eot|otf|woff|mov|mp3|mp4|webm|flv|ttf|rss|atom|jpg|jpeg|gif|png|ico|bmp|mid|midi|wav|rtf|css|js|jar|pdf)$ {
+            expires 1d;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            try_files $uri =404;
+            fastcgi_pass %backend_lsnr%;
+            fastcgi_index index.php;
+            include /etc/nginx/fastcgi_params;
+        }
+
+        location /l/ {
+            rewrite ^/l/([a-zA-Z0-9/]+)$ /l.php?i=$1 last;
+        }
+
+        location /t/ {
+            rewrite ^/t/([a-zA-Z0-9/]+)$ /t.php?i=$1 last;
+        }
+
+        location /w/ {
+            rewrite ^/w/([a-zA-Z0-9/]+)$ /w.php?i=$1 last;
+        }
+
+        location /unsubscribe/ {
+            rewrite ^/unsubscribe/(.*)$ /unsubscribe.php?i=$1 last;
+        }
+
+        location /subscribe/ {
+            rewrite ^/subscribe/(.*)$ /subscribe.php?i=$1 last;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/wordpress.stpl b/install/debian/13/templates/web/nginx/php-fpm/wordpress.stpl
new file mode 100644
index 00000000..f9c01e40
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/wordpress.stpl
@@ -0,0 +1,54 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/wordpress.tpl b/install/debian/13/templates/web/nginx/php-fpm/wordpress.tpl
new file mode 100644
index 00000000..a8909efb
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/wordpress.tpl
@@ -0,0 +1,51 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location / {
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/wordpress2.stpl b/install/debian/13/templates/web/nginx/php-fpm/wordpress2.stpl
new file mode 100644
index 00000000..01dfee5b
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/wordpress2.stpl
@@ -0,0 +1,66 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %sdocroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/snginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/wordpress2.tpl b/install/debian/13/templates/web/nginx/php-fpm/wordpress2.tpl
new file mode 100644
index 00000000..bccb8b3d
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/wordpress2.tpl
@@ -0,0 +1,63 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/conf/web/%domain%.auth*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl b/install/debian/13/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
new file mode 100644
index 00000000..a5fc46fb
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/wordpress2_rewrite.stpl
@@ -0,0 +1,71 @@
+server {
+    listen      %ip%:%web_ssl_port% ssl http2;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+} 
diff --git a/install/debian/13/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl b/install/debian/13/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
new file mode 100644
index 00000000..39e366b7
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/php-fpm/wordpress2_rewrite.tpl
@@ -0,0 +1,67 @@
+server {
+    listen      %ip%:%web_port%;
+    server_name %domain_idn% %alias_idn%;
+    root        %docroot%;
+    index       index.php index.html index.htm;
+    access_log  /var/log/nginx/domains/%domain%.log combined;
+    access_log  /var/log/nginx/domains/%domain%.bytes bytes;
+    error_log   /var/log/nginx/domains/%domain%.error.log error;
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+        
+        if (!-e $request_filename)
+        {
+            rewrite ^(.+)$ /index.php?q=$1 last;
+        }
+
+        location ~* ^.+\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {
+            expires     max;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            if (!-f $document_root$fastcgi_script_name) {
+                return  404;
+            }
+
+            fastcgi_pass    %backend_lsnr%;
+            fastcgi_index   index.php;
+            include         /etc/nginx/fastcgi_params;
+        }
+    }
+
+    error_page  403 /error/404.html;
+    error_page  404 /error/404.html;
+    error_page  500 502 503 504 /error/50x.html;
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location ~* "/\.(htaccess|htpasswd)$" {
+        deny    all;
+        return  404;
+    }
+
+    location /vstats/ {
+        alias   %home%/%user%/web/%domain%/stats/;
+        include %home%/%user%/web/%domain%/stats/auth.conf*;
+    }
+
+    include     /etc/nginx/conf.d/phpmyadmin.inc*;
+    include     /etc/nginx/conf.d/phppgadmin.inc*;
+    include     /etc/nginx/conf.d/webmail.inc*;
+
+    include     %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/private-force-https.stpl b/install/debian/13/templates/web/nginx/private-force-https.stpl
new file mode 100644
index 00000000..bf805683
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/private-force-https.stpl
@@ -0,0 +1,40 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+    include %home%/%user%/conf/web/s%proxy_system%.%domain%.conf*;
+}
diff --git a/install/debian/13/templates/web/nginx/private-force-https.tpl b/install/debian/13/templates/web/nginx/private-force-https.tpl
new file mode 100644
index 00000000..5a463370
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/private-force-https.tpl
@@ -0,0 +1,8 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    location / {
+        rewrite ^(.*) https://$host$1 permanent;
+    }
+include %home%/%user%/conf/web/*nginx.%domain_idn%.conf_letsencrypt;
+}
diff --git a/install/debian/13/templates/web/nginx/private-hosting.sh b/install/debian/13/templates/web/nginx/private-hosting.sh
new file mode 100644
index 00000000..eeed37ef
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/private-hosting.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# Changing public_html permission
+user="$1"
+domain="$2"
+ip="$3"
+home_dir="$4"
+docroot="$5"
+
+chmod 755 $docroot
+
+exit 0
diff --git a/install/debian/13/templates/web/nginx/private-hosting.stpl b/install/debian/13/templates/web/nginx/private-hosting.stpl
new file mode 100644
index 00000000..8e5b3f7b
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/private-hosting.stpl
@@ -0,0 +1,42 @@
+server {
+    listen      %ip%:%proxy_ssl_port% ssl;
+    http2 on;
+    server_name %domain_idn% %alias_idn%;
+
+    ssl_certificate      %ssl_pem%;
+    ssl_certificate_key  %ssl_key%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      https://%ip%:%web_ssl_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %sdocroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      https://%ip%:%web_ssl_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/snginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/13/templates/web/nginx/private-hosting.tpl b/install/debian/13/templates/web/nginx/private-hosting.tpl
new file mode 100644
index 00000000..a8ee840e
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/private-hosting.tpl
@@ -0,0 +1,38 @@
+server {
+    listen      %ip%:%proxy_port%;
+    server_name %domain_idn% %alias_idn%;
+    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
+
+    location / {
+        auth_basic           "Restricted area";
+        auth_basic_user_file /etc/nginx/.htpasswd;
+        proxy_pass      http://%ip%:%web_port%;
+        location ~* ^.+\.(%proxy_extentions%)$ {
+            root           %docroot%;
+            access_log     /var/log/%web_system%/domains/%domain%.log combined;
+            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
+            expires        max;
+            # try_files      $uri @fallback;
+        }
+    }
+
+    location /error/ {
+        alias   %home%/%user%/web/%domain%/document_errors/;
+    }
+
+    location @fallback {
+        proxy_pass      http://%ip%:%web_port%;
+    }
+
+    location ~ /\.ht    {return 404;}
+    location ~ /\.env   {return 404;}
+    location ~ /\.svn/  {return 404;}
+    location ~ /\.git/  {return 404;}
+    location ~ /\.hg/   {return 404;}
+    location ~ /\.bzr/  {return 404;}
+
+    disable_symlinks if_not_owner from=%docroot%;
+
+    include %home%/%user%/conf/web/nginx.%domain_idn%.conf*;
+}
+
diff --git a/install/debian/13/templates/web/nginx/proxy_ip.tpl b/install/debian/13/templates/web/nginx/proxy_ip.tpl
new file mode 100644
index 00000000..ae195617
--- /dev/null
+++ b/install/debian/13/templates/web/nginx/proxy_ip.tpl
@@ -0,0 +1,9 @@
+server {
+    listen       %ip%:%proxy_port% default;
+    server_name  _;
+    #access_log  /var/log/nginx/%ip%.log main;
+    location / {
+        proxy_pass  http://%ip%:%web_port%;
+   }
+}
+
diff --git a/install/debian/13/templates/web/php-fpm/default.tpl b/install/debian/13/templates/web/php-fpm/default.tpl
new file mode 100644
index 00000000..209e1e43
--- /dev/null
+++ b/install/debian/13/templates/web/php-fpm/default.tpl
@@ -0,0 +1,21 @@
+[%backend%]
+listen = 127.0.0.1:%backend_port%
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/13/templates/web/php-fpm/no-php.tpl b/install/debian/13/templates/web/php-fpm/no-php.tpl
new file mode 100644
index 00000000..047c33ed
--- /dev/null
+++ b/install/debian/13/templates/web/php-fpm/no-php.tpl
@@ -0,0 +1,20 @@
+;[%backend%]
+;listen = /dev/null
+
+;user = %user%
+;group = %user%
+
+;listen.owner = %user%
+;listen.group = www-data
+
+;pm = ondemand
+;pm.max_children = 4
+;pm.max_requests = 4000
+;pm.process_idle_timeout = 10s
+;pm.status_path = /status
+
+;env[HOSTNAME] = $HOSTNAME
+;env[PATH] = /usr/local/bin:/usr/bin:/bin
+;env[TMP] = /home/%user%/tmp
+;env[TMPDIR] = /home/%user%/tmp
+;env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/13/templates/web/php-fpm/socket.tpl b/install/debian/13/templates/web/php-fpm/socket.tpl
new file mode 100644
index 00000000..a0151084
--- /dev/null
+++ b/install/debian/13/templates/web/php-fpm/socket.tpl
@@ -0,0 +1,24 @@
+[%backend%]
+listen = /var/run/php/%backend%.sock
+listen.allowed_clients = 127.0.0.1
+
+user = %user%
+group = %user%
+
+listen.owner = %user%
+listen.group = www-data
+
+pm = ondemand
+pm.max_children = 4
+pm.max_requests = 4000
+pm.process_idle_timeout = 10s
+pm.status_path = /status
+
+php_admin_value[upload_tmp_dir] = /home/%user%/tmp
+php_admin_value[session.save_path] = /home/%user%/tmp
+
+env[HOSTNAME] = $HOSTNAME
+env[PATH] = /usr/local/bin:/usr/bin:/bin
+env[TMP] = /home/%user%/tmp
+env[TMPDIR] = /home/%user%/tmp
+env[TEMP] = /home/%user%/tmp
diff --git a/install/debian/13/templates/web/skel/document_errors/403.html b/install/debian/13/templates/web/skel/document_errors/403.html
new file mode 100644
index 00000000..9c3f6baa
--- /dev/null
+++ b/install/debian/13/templates/web/skel/document_errors/403.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>403 &mdash; Forbidden</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="You do not have permission to view this"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>403</h1>
+    <h2>Forbidden</h2>
+    <div>
+        Unfortunately, you do not have permission to view this
+    </div>
+</body>
+
+</html>
diff --git a/install/debian/13/templates/web/skel/document_errors/404.html b/install/debian/13/templates/web/skel/document_errors/404.html
new file mode 100644
index 00000000..2cee7708
--- /dev/null
+++ b/install/debian/13/templates/web/skel/document_errors/404.html
@@ -0,0 +1,28 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>404 &mdash; Not Found</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, page not found"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+    <h1>404</h1>
+    <h2>Page Not Found</h2>
+    <div>
+        It seems that the page you were trying to reach does not exist anymore, or maybe it has just moved.
+        You can start again from the <a href="http://%domain%/">home</a> or go back to <a href="javascript:%20history.go(-1)">previous page</a>.
+    </div>
+</body>
+</html>
diff --git a/install/debian/13/templates/web/skel/document_errors/50x.html b/install/debian/13/templates/web/skel/document_errors/50x.html
new file mode 100644
index 00000000..85ba648b
--- /dev/null
+++ b/install/debian/13/templates/web/skel/document_errors/50x.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>500 &mdash; Internal Sever Error</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="Sorry, something went wrong. Internal Server Error"/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <p><a href="http://%domain%/">%domain%</a></p>
+
+    <h1>500</h1>
+    <h2>Internal Server Error</h2>
+    <div>
+        Sorry, something went wrong :(
+    </div>
+</body>
+
+</html>
diff --git a/install/debian/13/templates/web/skel/public_html/index.html b/install/debian/13/templates/web/skel/public_html/index.html
new file mode 100644
index 00000000..c2895cf2
--- /dev/null
+++ b/install/debian/13/templates/web/skel/public_html/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="https://www.myvestacp.com/">Powered by myVesta</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/debian/13/templates/web/skel/public_html/robots.txt b/install/debian/13/templates/web/skel/public_html/robots.txt
new file mode 100644
index 00000000..00ee83dc
--- /dev/null
+++ b/install/debian/13/templates/web/skel/public_html/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/debian/13/templates/web/skel/public_shtml/index.html b/install/debian/13/templates/web/skel/public_shtml/index.html
new file mode 100644
index 00000000..c2895cf2
--- /dev/null
+++ b/install/debian/13/templates/web/skel/public_shtml/index.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>%domain% &mdash; Coming Soon</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This is a default index page for a new domain."/>
+    <style type="text/css">
+        body {font-size:10px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:64px; color:#555555; margin: 70px 0 50px 0;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+
+<body>
+    <h1>%domain%</h1>
+    <div>
+        <a href="https://www.myvestacp.com/">Powered by myVesta</a>
+    </div>
+</body>
+
+</html>
+
diff --git a/install/debian/13/templates/web/skel/public_shtml/robots.txt b/install/debian/13/templates/web/skel/public_shtml/robots.txt
new file mode 100644
index 00000000..00ee83dc
--- /dev/null
+++ b/install/debian/13/templates/web/skel/public_shtml/robots.txt
@@ -0,0 +1,3 @@
+# vestacp autogenerated robots.txt
+User-agent: *
+Crawl-delay: 10
diff --git a/install/debian/13/templates/web/suspend/.htaccess b/install/debian/13/templates/web/suspend/.htaccess
new file mode 100644
index 00000000..5a6df83f
--- /dev/null
+++ b/install/debian/13/templates/web/suspend/.htaccess
@@ -0,0 +1,2 @@
+ErrorDocument 403 /index.html
+ErrorDocument 404 /index.html
diff --git a/install/debian/13/templates/web/suspend/index.html b/install/debian/13/templates/web/suspend/index.html
new file mode 100644
index 00000000..3815354d
--- /dev/null
+++ b/install/debian/13/templates/web/suspend/index.html
@@ -0,0 +1,25 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head>
+    <title>Website Suspended</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta name="description" content="This website has been suspended."/>
+    <style type="text/css">
+        body {font-size:14px; color:#777777; font-family:arial; text-align:center;}
+        h1 {font-size:84px; color:#99A7AF; margin: 70px 0 0 0;}
+        h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: 15px 0 25px;}
+        p {width:320px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px }
+        div {width:320px; text-align:center; margin-left:auto;margin-right:auto;}
+        a:link {color: #34536A;}
+        a:visited {color: #34536A;}
+        a:active {color: #34536A;}
+        a:hover {color: #34536A;}
+    </style>
+</head>
+<body>
+    <h1>Temporary under construction</h1>
+    <h2>This website is temporary under construction.</h2>
+    <div>
+        We will back again soon.
+    </div>
+</body>
+</html>
diff --git a/install/debian/13/templates/web/webalizer/webalizer.tpl b/install/debian/13/templates/web/webalizer/webalizer.tpl
new file mode 100644
index 00000000..068adcfb
--- /dev/null
+++ b/install/debian/13/templates/web/webalizer/webalizer.tpl
@@ -0,0 +1,110 @@
+HostName         %domain_idn%
+LogFile          /var/log/%web_system%/domains/%domain%.log
+OutputDir        %home%/%user%/web/%domain%/stats
+HistoryName      %home%/%user%/web/%domain%/stats/%domain%.hist
+Incremental      yes
+IncrementalName  %home%/%user%/web/%domain%/stats/%domain%.current
+PageType         htm*
+PageType         cgi
+PageType         php
+PageType         shtml
+DNSCache         /var/lib/webalizer/dns_cache.db
+DNSChildren      10
+Quiet            yes
+FoldSeqErr       yes
+IndexAlias       index.php
+HideURL          *.gif
+HideURL          *.GIF
+HideURL          *.jpg
+HideURL          *.JPG
+HideURL          *.png
+HideURL          *.PNG
+HideURL          *.ra
+SearchEngine     abcsearch.          terms=
+SearchEngine     alexa.              q=
+SearchEngine     alltheweb.          q=
+SearchEngine     alltheweb.          query=
+SearchEngine     alot.               q=
+SearchEngine     altavista.          q=
+SearchEngine     aolsearch.          query=
+SearchEngine     aport.ru            r=
+SearchEngine     ask.                q=
+SearchEngine     atlas.cz            q=
+SearchEngine     bbc.                q=
+SearchEngine     bing.               q=
+SearchEngine     blingo.             q=
+SearchEngine     blogs.yandex.ru     text=
+SearchEngine     btopenworld         query=
+SearchEngine     buscador.ya.com     q=
+SearchEngine     busca.              q=
+SearchEngine     business.           query=
+SearchEngine     centrum.cz          q=
+SearchEngine     chiff.              q=
+SearchEngine     clusty.             query=
+SearchEngine     comcast.            q=
+SearchEngine     crawler.            q=
+SearchEngine     cuil.               q=
+SearchEngine     dmoz.               search=
+SearchEngine     dogpile.com         q=
+SearchEngine     dpxml               qkw=
+SearchEngine     eureka.             searchword=
+SearchEngine     euroseek.           string=
+SearchEngine     exalead.            q=
+SearchEngine     excite              search=
+SearchEngine     ezilon.             q=
+SearchEngine     fastbrowsersearch.  q=
+SearchEngine     feedster.com        q=
+SearchEngine     fireball.de         q=
+SearchEngine     fireball.           keyword=
+SearchEngine     freeserve.          q=
+SearchEngine     gigablast.          q=
+SearchEngine     gogo.ru             q=
+SearchEngine     go.mail.ru          q=
+SearchEngine     google.             q=
+SearchEngine     hakia.              q=
+SearchEngine     hotbot.             query=
+SearchEngine     infoseek.           qt=
+SearchEngine     iwon                searchfor=
+SearchEngine     ixquick.com         query=
+SearchEngine     joeant.             keywords=
+SearchEngine     jyxo.cz             s=
+SearchEngine     looksmart.          key=
+SearchEngine     lycos.              query=
+SearchEngine     mamma.              q=
+SearchEngine     metacrawler         q=
+SearchEngine     msn.                MT=
+SearchEngine     msxml               qkw=
+SearchEngine     mysearch.           searchfor=
+SearchEngine     mywebsearch.        searchfor=
+SearchEngine     netscape.           q=
+SearchEngine     nigma.ru            q=
+SearchEngine     northernlight.      qr=
+SearchEngine     ntlworld.           q=
+SearchEngine     orange.             q=
+SearchEngine     overture.           Keywords=
+SearchEngine     punto.ru            text=
+SearchEngine     rambler.            keyword=
+SearchEngine     search.aol.         q=
+SearchEngine     search.babylon.     q=
+SearchEngine     search.centrum.     phrase=
+SearchEngine     search.conduit.     q=
+SearchEngine     search.earthlink    q=
+SearchEngine     search.icq.         q=
+SearchEngine     search.live.com     q=
+SearchEngine     search.rambler.ru   words=
+SearchEngine     search.winamp.      q=
+SearchEngine     searchy.            q=
+SearchEngine     seznam.cz           w=
+SearchEngine     snap.               query=
+SearchEngine     teoma.              q=
+SearchEngine     teradex.com         q=
+SearchEngine     ukplus              key=
+SearchEngine     verizon.            q=
+SearchEngine     virginmedia.        q=
+SearchEngine     voila.              rdata=
+SearchEngine     webcrawler          searchText=
+SearchEngine     web.search.naver.   query=
+SearchEngine     wisenut             q=
+SearchEngine     yahoo.              p=
+SearchEngine     yandex.             text=
+SearchEngine     yodao.              q=
diff --git a/install/debian/13/vsftpd/vsftpd.conf b/install/debian/13/vsftpd/vsftpd.conf
new file mode 100644
index 00000000..1ca1a992
--- /dev/null
+++ b/install/debian/13/vsftpd/vsftpd.conf
@@ -0,0 +1,26 @@
+anonymous_enable=NO
+local_enable=YES
+write_enable=YES
+local_umask=022
+anon_umask=022
+anon_upload_enable=NO
+dirmessage_enable=YES
+xferlog_enable=YES
+connect_from_port_20=YES
+xferlog_std_format=YES
+dual_log_enable=YES
+chroot_local_user=YES
+listen=YES
+pam_service_name=vsftpd
+userlist_enable=NO
+tcp_wrappers=YES
+force_dot_files=YES
+ascii_upload_enable=YES
+ascii_download_enable=YES
+#allow_writable_chroot=YES
+allow_writeable_chroot=YES
+seccomp_sandbox=NO
+pasv_enable=YES
+pasv_max_port=12100
+pasv_min_port=12000
+use_localtime=YES
diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 25364c90..98887225 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -20,7 +20,19 @@ codename="$(cat /etc/os-release |grep VERSION= |cut -f 2 -d \(|cut -f 1 -d \))"
 vestacp="$VESTA/install/$VERSION/$release"
 ARCH="amd64"
 
-if [ "$release" -eq 12 ]; then
+if [ "$release" -eq 13 ]; then
+    software="nginx apache2 apache2-utils
+        libapache2-mod-fcgid php-fpm php
+        php-common php-cgi php-mysql php-curl php-fpm php-pgsql awstats
+        vsftpd proftpd-basic bind9 exim4 exim4-daemon-heavy
+        clamav-daemon spamassassin dovecot-imapd dovecot-pop3d roundcube-core
+        roundcube-mysql roundcube-plugins mariadb-server mariadb-common
+        mariadb-client postgresql postgresql-contrib phpmyadmin mc
+        flex whois git idn zip sudo bc ftp lsof ntpdate rrdtool quota
+        e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
+        bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
+        unrar-free vim-common net-tools unzip iptables xxd spamd"
+elif [ "$release" -eq 12 ]; then
     software="nginx apache2 apache2-utils
         libapache2-mod-fcgid php-fpm php
         php-common php-cgi php-mysql php-curl php-fpm php-pgsql awstats
@@ -1083,6 +1095,22 @@ if [ "$release" -eq 12 ]; then
     ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.stpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-82.stpl
     ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.tpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-82.tpl
 fi
+if [ "$release" -eq 13 ]; then
+    echo "== Symlink missing templates"
+    ln -s /usr/local/vesta/data/templates/web/nginx/hosting.sh /usr/local/vesta/data/templates/web/nginx/default.sh
+    ln -s /usr/local/vesta/data/templates/web/nginx/hosting.tpl /usr/local/vesta/data/templates/web/nginx/default.tpl
+    ln -s /usr/local/vesta/data/templates/web/nginx/hosting.stpl /usr/local/vesta/data/templates/web/nginx/default.stpl
+
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84.sh /usr/local/vesta/data/templates/web/apache2/hosting.sh
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84.tpl /usr/local/vesta/data/templates/web/apache2/hosting.tpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84.stpl /usr/local/vesta/data/templates/web/apache2/hosting.stpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84.sh /usr/local/vesta/data/templates/web/apache2/default.sh
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84.tpl /usr/local/vesta/data/templates/web/apache2/default.tpl
+    ln -s /usr/local/vesta/data/templates/web/apache2/PHP-FPM-84.stpl /usr/local/vesta/data/templates/web/apache2/default.stpl
+    
+    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.stpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-84.stpl
+    ln  -s /usr/local/vesta/data/templates/web/nginx/php-fpm/default.tpl /usr/local/vesta/data/templates/web/nginx/php-fpm/PHP-FPM-84.tpl
+fi
 
 echo "== Set nameservers address"
 sed -i "s/YOURHOSTNAME1/ns1.$servername/" /usr/local/vesta/data/packages/default.pkg
@@ -1207,7 +1235,13 @@ fi
 
 if [ "$phpfpm" = 'yes' ]; then
     echo "=== Configure PHP-FPM"
-    if [ "$release" -eq 12 ]; then
+    if [ "$release" -eq 13 ]; then
+        cp -f $vestacp/php-fpm/www.conf /etc/php/8.4/fpm/pool.d/www.conf
+        #update-rc.d php8.4-fpm defaults
+        currentservice='php8.4-fpm'
+        ensure_startup $currentservice
+        ensure_start $currentservice
+    elif [ "$release" -eq 12 ]; then
         cp -f $vestacp/php-fpm/www.conf /etc/php/8.2/fpm/pool.d/www.conf
         #update-rc.d php8.2-fpm defaults
         currentservice='php8.2-fpm'
@@ -1885,6 +1919,20 @@ if [ "$release" -eq 12 ]; then
     /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'yes'
   fi
 fi
+if [ "$release" -eq 13 ]; then
+  if [ -f "/etc/php/8.4/fpm/pool.d/$servername.conf" ]; then
+    echo "== FPM pool.d $servername tweaks"
+    sed -i "/^group =/c\group = www-data" /etc/php/8.4/fpm/pool.d/$servername.conf
+    sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/8.4/fpm/pool.d/$servername.conf
+    sed -i "/request_terminate_timeout/c\request_terminate_timeout = 900s" /etc/php/8.4/fpm/pool.d/$servername.conf
+    sed -i "s|80M|800M|g" /etc/php/8.4/fpm/pool.d/$servername.conf
+    sed -i "s|256M|512M|g" /etc/php/8.4/fpm/pool.d/$servername.conf
+    service php8.4-fpm restart
+    ln -s /var/lib/roundcube /var/lib/roundcube/webmail
+    /usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$servername" 'hosting-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'yes'
+  fi
+fi
+
 
 echo "== Adding cron jobs"
 command="sudo $VESTA/bin/v-update-sys-queue disk"
@@ -1953,6 +2001,9 @@ fi
 if [ "$release" -eq 12 ]; then
   apt-get -y install php8.2-apcu php8.2-mbstring php8.2-bcmath php8.2-curl php8.2-gd php8.2-intl php8.2-mysql php8.2-mysqlnd php8.2-pdo php8.2-soap php8.2-xml php8.2-zip php8.2-memcache php8.2-memcached php8.2-zip php8.2-imagick php8.2-imap
 fi
+if [ "$release" -eq 13 ]; then
+  apt-get -y install php8.4-apcu php8.4-mbstring php8.4-bcmath php8.4-curl php8.4-gd php8.4-intl php8.4-mysql php8.4-mysqlnd php8.4-pdo php8.4-soap php8.4-xml php8.4-zip php8.4-memcache php8.4-memcached php8.4-zip php8.4-imagick php8.4-imap
+fi
 
 touch /var/log/php-mail.log
 chmod a=rw /var/log/php-mail.log
@@ -2008,6 +2059,13 @@ if [ "$release" -eq 12 ]; then
   service php8.2-fpm restart
 fi
 
+if [ "$release" -eq 13 ]; then
+  echo "=== Patching php8.4"
+  patch /etc/php/8.4/fpm/php.ini < /usr/local/vesta/src/deb/for-download/tools/patches/php8.2.patch
+  update-alternatives --set php /usr/bin/php8.4
+  service php8.4-fpm restart
+fi
+
 # echo "=== Patching rcube_vcard.php"
 # wget -nv https://c.myvestacp.com/tools/patches/rcube_vcard.patch -O /root/rcube_vcard.patch
 # patch /usr/share/roundcube/program/lib/Roundcube/rcube_vcard.php < /root/rcube_vcard.patch

From 177988a6cfcc4686c1662c83db9b04b6d07e29af Mon Sep 17 00:00:00 2001
From: Peca <peca@mycity.rs>
Date: Thu, 21 Aug 2025 19:14:02 +0200
Subject: [PATCH 2300/2300] vst-install-debian.sh: replace ntpdate with
 ntpsec-ntpdate in Debian 13 section, and allow rsyslog setup only for Debian
 12

---
 install/vst-install-debian.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install/vst-install-debian.sh b/install/vst-install-debian.sh
index 98887225..0d181ec0 100755
--- a/install/vst-install-debian.sh
+++ b/install/vst-install-debian.sh
@@ -28,7 +28,7 @@ if [ "$release" -eq 13 ]; then
         clamav-daemon spamassassin dovecot-imapd dovecot-pop3d roundcube-core
         roundcube-mysql roundcube-plugins mariadb-server mariadb-common
         mariadb-client postgresql postgresql-contrib phpmyadmin mc
-        flex whois git idn zip sudo bc ftp lsof ntpdate rrdtool quota
+        flex whois git idn zip sudo bc ftp lsof ntpsec-ntpdate rrdtool quota
         e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
         bsdmainutils cron vesta vesta-nginx vesta-php expect libmail-dkim-perl
         unrar-free vim-common net-tools unzip iptables xxd spamd"
@@ -866,7 +866,7 @@ fi
 echo "=== Enabling daemon autostart"
 rm -f /usr/sbin/policy-rc.d
 
-if [ "$release" -gt 11 ]; then
+if [ "$release" -eq 12 ]; then
     echo "=== Setting up rsyslog"
     currentservice='rsyslog'
     ensure_startup $currentservice